Function at 0x414730
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x968
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00401bf0
mov dword [esp + 0x124], eax
mov dword [esp + 0x310], 0xe1473b88
lea eax, [esp + 0x310]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x310]
mov ecx, eax
sub ecx, 0x809dbb40
je 0x416599
jmp 0x41477e
mov ecx, eax
sub ecx, 0x80ab6008
je 0x415e14
jmp 0x41478e
mov ecx, eax
sub ecx, 0x80ea8b75
je 0x4182c3
jmp 0x41479e
mov ecx, eax
sub ecx, 0x8211a431
je 0x416876
jmp 0x4147ae
mov ecx, eax
sub ecx, 0x85f74535
je 0x416d55
jmp 0x4147be
mov ecx, eax
sub ecx, 0x865d8d55
je 0x415617
jmp 0x4147ce
mov ecx, eax
sub ecx, 0x86c8d55b
je 0x415714
jmp 0x4147de
mov ecx, eax
sub ecx, 0x86e3d22b
je 0x418971
jmp 0x4147ee
mov ecx, eax
sub ecx, 0x894a92ec
je 0x4187d5
jmp 0x4147fe
mov ecx, eax
sub ecx, 0x8b330f5e
je 0x416bb6
jmp 0x41480e
mov ecx, eax
sub ecx, 0x8d9bab4c
je 0x417a9e
jmp 0x41481e
mov ecx, eax
sub ecx, 0x8d9eac34
je 0x415e63
jmp 0x41482e
mov ecx, eax
sub ecx, 0x90d3b12e
je 0x41824a
jmp 0x41483e
mov ecx, eax
sub ecx, 0x91b15e67
je 0x415fb9
jmp 0x41484e
mov ecx, eax
sub ecx, 0x91cccb61
je 0x418368
jmp 0x41485e
mov ecx, eax
sub ecx, 0x9456a120
je 0x418268
jmp 0x41486e
mov ecx, eax
sub ecx, 0x960c2501
je 0x418e33
jmp 0x41487e
mov ecx, eax
sub ecx, 0x99e2b230
je 0x416672
jmp 0x41488e
mov ecx, eax
sub ecx, 0x9aeaa13a
je 0x41645e
jmp 0x41489e
mov ecx, eax
sub ecx, 0x9b6739d5
je 0x417c83
jmp 0x4148ae
mov ecx, eax
sub ecx, 0xa05af01e
je 0x416425
jmp 0x4148be
mov ecx, eax
sub ecx, 0xa0e66869
je 0x415e9c
jmp 0x4148ce
mov ecx, eax
sub ecx, 0xa18f23a8
je 0x415a37
jmp 0x4148de
mov ecx, eax
sub ecx, 0xa4913660
je 0x4171b6
jmp 0x4148ee
mov ecx, eax
sub ecx, 0xa6d727aa
je 0x418d40
jmp 0x4148fe
mov ecx, eax
sub ecx, 0xa8d4e72f
je 0x4161b3
jmp 0x41490e
mov ecx, eax
sub ecx, 0xa943a85e
je 0x41822e
jmp 0x41491e
mov ecx, eax
sub ecx, 0xaae029f3
je 0x415ed3
jmp 0x41492e
mov ecx, eax
sub ecx, 0xad89e3fd
je 0x4159fb
jmp 0x41493e
mov ecx, eax
sub ecx, 0xadb5cb49
je 0x415ca9
jmp 0x41494e
mov ecx, eax
sub ecx, 0xadc5471b
je 0x415e2f
jmp 0x41495e
mov ecx, eax
sub ecx, 0xadf07855
je 0x41710b
jmp 0x41496e
mov ecx, eax
sub ecx, 0xb04d69ef
je 0x417cbf
jmp 0x41497e
mov ecx, eax
sub ecx, 0xb0c11e0c
je 0x417202
jmp 0x41498e
mov ecx, eax
sub ecx, 0xb17b2ae2
je 0x416b06
jmp 0x41499e
mov ecx, eax
sub ecx, 0xb1fc17bb
je 0x416b5f
jmp 0x4149ae
mov ecx, eax
sub ecx, 0xb24fbb5f
je 0x41648f
jmp 0x4149be
mov ecx, eax
sub ecx, 0xb3841e78
je 0x41539f
jmp 0x4149ce
mov ecx, eax
sub ecx, 0xb3ea7b38
je 0x4159df
jmp 0x4149de
mov ecx, eax
sub ecx, 0xb45ce5ce
je 0x417c56
jmp 0x4149ee
mov ecx, eax
sub ecx, 0xb5c3c57c
je 0x4189cd
jmp 0x4149fe
mov ecx, eax
sub ecx, 0xb60203ce
je 0x415608
jmp 0x414a0e
mov ecx, eax
sub ecx, 0xb83235ee
je 0x417597
jmp 0x414a1e
mov ecx, eax
sub ecx, 0xba1e09c5
je 0x416dcf
jmp 0x414a2e
mov ecx, eax
sub ecx, 0xba45dda8
je 0x417183
jmp 0x414a3e
mov ecx, eax
sub ecx, 0xbb994857
je 0x4168f6
jmp 0x414a4e
mov ecx, eax
sub ecx, 0xbcc945ba
je 0x415d9f
jmp 0x414a5e
mov ecx, eax
sub ecx, 0xbf73dac4
je 0x418301
jmp 0x414a6e
mov ecx, eax
sub ecx, 0xbf9bee99
je 0x415705
jmp 0x414a7e
mov ecx, eax
sub ecx, 0xc43216df
je 0x4186f2
jmp 0x414a8e
mov ecx, eax
sub ecx, 0xc78fc263
je 0x416323
jmp 0x414a9e
mov ecx, eax
sub ecx, 0xcca55986
je 0x416026
jmp 0x414aae
mov ecx, eax
sub ecx, 0xccc41978
je 0x415e81
jmp 0x414abe
mov ecx, eax
sub ecx, 0xcdf0d3e5
je 0x416d2e
jmp 0x414ace
mov ecx, eax
sub ecx, 0xce71718f
je 0x415723
jmp 0x414ade
mov ecx, eax
sub ecx, 0xcec2654f
je 0x4166c9
jmp 0x414aee
mov ecx, eax
sub ecx, 0xcf2e5a01
je 0x418415
jmp 0x414afe
mov ecx, eax
sub ecx, 0xd0762cbe
je 0x4176cb
jmp 0x414b0e
mov ecx, eax
sub ecx, 0xd081914c
je 0x417a82
jmp 0x414b1e
mov ecx, eax
sub ecx, 0xd1216d93
je 0x4179cd
jmp 0x414b2e
mov ecx, eax
sub ecx, 0xd1529b95
je 0x41833c
jmp 0x414b3e
mov ecx, eax
sub ecx, 0xd2923cae
je 0x415426
jmp 0x414b4e
mov ecx, eax
sub ecx, 0xd36c3276
je 0x416e16
jmp 0x414b5e
mov ecx, eax
sub ecx, 0xd56d242c
je 0x415a0a
jmp 0x414b6e
mov ecx, eax
sub ecx, 0xd78e2adf
je 0x4161c2
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xd1529b95
mov byte [esp + 0x48], 0
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xd1529b95
mov byte [esp + 0x48], 1
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x865d8d55
jmp 0x418e89
mov al, byte [esp + 0x70]
mov byte [esp + 0x1fc], al
mov byte [esp + 0xe0], 0xcf
mov byte [esp + 0xe1], 0x6b
mov eax, 2
mov byte [esp + eax + 0xe0], 0
add eax, 1
cmp eax, 6
jne 0x415637
xor eax, eax
cmp eax, 6
jae 0x41568a
movzx ecx, byte [esp + eax + 0xe0]
mov edx, eax
add edx, 0x2591e397
xor edx, ecx
mov ecx, edx
add ecx, 0x44268e0c
and edx, 1
mov esi, ecx
and esi, 0xfe
mov edi, ecx
xor edi, 1
add ecx, edi
add ecx, edx
sub ecx, esi
mov byte [esp + eax + 0xe0], cl
add eax, 1
jmp 0x415649
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0xe0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 3
call fcn.00401f10
cmp eax, 0
setne al
mov cl, al
xor cl, 0xff
xor al, 0xff
and cl, al
xor cl, 0xff
and cl, 1
or cl, 0
xor cl, 0xff
and cl, 1
mov byte [esp + 0x7a], cl
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x2d5f554a
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xea392ba2
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xce71718f
jmp 0x418e89
mov al, byte [esp + 0x6c]
mov byte [esp + 0x204], al
mov byte [esp + 0xd8], 0xdd
mov byte [esp + 0xd9], 0x49
mov eax, 2
mov byte [esp + eax + 0xd8], 0
add eax, 1
cmp eax, 6
jne 0x415743
xor eax, eax
cmp eax, 6
jae 0x415791
movzx edx, byte [esp + eax + 0xd8]
mov ecx, eax
add ecx, 0xc675a692
xor ecx, edx
mov edx, ecx
shl edx, 1
and edx, 0x4a
xor ecx, 0x1fb3bf25
mov esi, ecx
add esi, edx
and ecx, 1
or esi, 1
add ecx, esi
mov byte [esp + eax + 0xd8], cl
add eax, 1
jmp 0x415755
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0xd8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00401880
mov esi, eax
mov al, byte [esp + 0x68]
mov byte [esp + 0x20c], al
mov byte [esp + 0xc8], 0xd6
mov byte [esp + 0xc9], 0xc7
mov byte [esp + 0xca], 0x4a
mov eax, 3
mov byte [esp + eax + 0xc8], 0
add eax, 1
cmp eax, 8
jne 0x4157d2
xor eax, eax
cmp eax, 8
jae 0x41581e
movzx edx, byte [esp + eax + 0xc8]
mov ecx, eax
add ecx, 0x97913f93
mov edi, ecx
and edi, edx
shl edi, 1
sub ecx, edi
add ecx, edx
mov edx, ecx
shl edx, 1
and edx, 2
xor ecx, 1
add ecx, 0x20
add ecx, edx
mov byte [esp + eax + 0xc8], cl
add eax, 1
jmp 0x4157e4
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0xc8]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.004019b0
fnstcw word [esp + 0xea]
movzx eax, word [esp + 0xea]
or eax, 0xc00
mov word [esp + 0x286], ax
fldcw word [esp + 0x286]
fistp dword [esp + 0x3ac]
fldcw word [esp + 0xea]
mov eax, dword [esp + 0x3ac]
mov dword [esp + 0x44], eax
mov al, byte [esp + 0x64]
mov byte [esp + 0x214], al
mov byte [esp + 0xd0], 0x7b
mov byte [esp + 0xd1], 0xe7
mov eax, 2
mov byte [esp + eax + 0xd0], 0
add eax, 1
cmp eax, 6
jne 0x415891
xor eax, eax
cmp eax, 6
jae 0x41592d
movzx ecx, byte [esp + eax + 0xd0]
mov edx, eax
add edx, 0x4ddfaad9
mov edi, eax
add edi, 0xd9
and edi, ecx
mov ebx, edx
or ebx, ecx
xor edi, ebx
mov ebx, edi
shl ebx, 1
xor ebx, 0xffffffff
add edi, ebx
and edx, edi
mov ebx, edx
and ebx, 0xfffffffd
mov edi, edx
and edi, 2
xor edi, 2
imul edi, ebx
mov ebx, edx
and ebx, 2
or edx, 2
imul edx, ebx
add edx, edi
mov ebx, eax
sub ebx, edx
add ebx, 0x4ddfaad9
add ebx, ecx
mov ecx, ebx
shl ecx, 1
and ecx, 0x84
xor ebx, 0xc2
add ebx, ecx
add bl, 1
mov byte [esp + eax + 0xd0], bl
mov ecx, eax
shl ecx, 1
and ecx, 2
xor eax, 1
add eax, ecx
jmp 0x4158a3
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0xd0]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.004019b0
fnstcw word [esp + 0xe8]
movzx eax, word [esp + 0xe8]
or eax, 0xc00
mov word [esp + 0x284], ax
fldcw word [esp + 0x284]
fistp dword [esp + 0x3a8]
fldcw word [esp + 0xe8]
mov eax, dword [esp + 0x3a8]
mov dword [esp + 0x354], eax
lea eax, [esp + 0x564]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x400
mov dword [esp + 8], esi
mov dword [esp + 0xc], 0
call fcn.0040ad10
lea eax, [esp + 0x564]
lea ecx, [esp + 0x40]
lea edx, [esp + 0x19c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0040b4e0
and al, 1
mov byte [esp + 0x7b], al
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xb3ea7b38
jmp 0x418e89
mov eax, 0xd56d242c
test byte [esp + 0x7b], 1
jne 0x4159f0
mov eax, 0xad89e3fd
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xddf6306c
jmp 0x418e89
cmp dword [esp + 0x354], 0
sete al
and al, 1
mov byte [esp + 0x49], al
mov eax, 0xa18f23a8
test byte [esp + 0x49], 1
jne 0x415a2c
mov eax, 0x31b64736
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x418e89
mov al, byte [esp + 0x198]
mov byte [esp + 0x218], al
mov byte [esp + 0x394], 0
mov byte [esp + 0x395], 0x91
mov eax, 2
mov byte [esp + eax + 0x394], 0
add eax, 1
cmp eax, 5
jne 0x415a5a
xor eax, eax
cmp eax, 5
jae 0x415a97
mov cl, byte [esp + eax + 0x394]
mov dl, al
add dl, 0x64
xor dl, cl
add dl, 0xc
mov byte [esp + eax + 0x394], dl
mov ecx, eax
shl ecx, 1
and ecx, 2
xor eax, 1
add eax, ecx
jmp 0x415a6c
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0x394]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00401880
mov dword [esp + 0x12c], eax
mov eax, 0x75570b0d
cmp dword [esp + 0x12c], 0
jne 0x415ac9
mov eax, 0x6a9dbe
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x418e89
mov eax, dword [esp + 0x194]
mov ecx, 2
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x415cc6
mov ecx, eax
mov dword [esp], ecx
call fcn.00408640
mov dword [esp + 0xec], eax
mov eax, dword [0x44f2b0]
mov ecx, dword [esp + 0x194]
mov edx, dword [esp + 0xec]
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x130]
xor ebx, ebx
lea ebx, [esp + 0x194]
mov dword [esp], 0
mov dword [esp + 4], esi
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ebx
call eax
sub esp, 0x18
mov ecx, 0xdf3ad041
cmp eax, 0
jge 0x415d2b
mov ecx, 0x57364b3d
mov eax, dword [esp + 0x2c]
mov dword [eax], ecx
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xec4a3145
jmp 0x418e89
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.0043d640
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xadc5471b
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xaae029f3
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x31c], 4
mov dword [esp + 0x318], eax
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xfb250af8
jmp 0x418e89
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
call fcn.00408650
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xa0e66869
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x142a9ede
jmp 0x418e89
mov eax, dword [esp + 0x318]
mov ecx, dword [esp + 0x31c]
mov dword [esp + 0x3b0], eax
mov dword [esp + 0x3b4], ecx
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x78a944ae
mov eax, dword [esp + 0x3b4]
mov ecx, dword [esp + 0x3b0]
mov dword [esp + 0x324], eax
mov dword [esp + 0x320], ecx
jmp 0x418e89
mov eax, dword [esp + 0x328]
mov ecx, dword [esp + 0x32c]
mov dword [esp + 0x360], eax
mov dword [esp + 0x134], ecx
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xeba60d2
jmp 0x418e89
mov eax, dword [esp + 0x134]
mov word [eax], 0
mov al, byte [esp + 0x170]
mov byte [esp + 0x220], al
mov byte [esp + 0x174], 0x3b
mov byte [esp + 0x175], 0x1f
mov byte [esp + 0x176], 0xea
mov byte [esp + 0x177], 0x11
mov byte [esp + 0x178], 0xd7
mov byte [esp + 0x179], 0x13
mov byte [esp + 0x17a], 0xed
mov byte [esp + 0x17b], 0x15
mov byte [esp + 0x17c], 0xe4
mov byte [esp + 0x17d], 0x17
mov byte [esp + 0x17e], 0x31
mov byte [esp + 0x17f], 9
mov byte [esp + 0x180], 0xe4
mov byte [esp + 0x181], 0xb
mov byte [esp + 0x182], 0xa
mov byte [esp + 0x183], 0xd
mov eax, 0x10
mov byte [esp + eax + 0x174], 0
add eax, 1
cmp eax, 0x14
jne 0x4160c5
xor eax, eax
cmp eax, 0x14
jae 0x416135
mov cl, byte [esp + eax + 0x174]
mov esi, eax
add esi, 1
mov edx, eax
xor edx, 0xffffffff
or edx, 0xa863a045
add edx, esi
mov edi, edx
and edi, 0xfffffffd
mov esi, edx
and esi, 2
xor esi, 2
imul esi, edi
mov edi, edx
and edi, 2
or edx, 2
imul edx, edi
add edx, esi
mov ebx, eax
xor ebx, 0xa863a045
mov esi, ebx
and esi, edx
shl esi, 1
xor ebx, edx
add ebx, esi
xor bl, cl
add bl, 0xa7
mov byte [esp + eax + 0x174], bl
add eax, 1
jmp 0x4160d7
lea eax, [esp + 0x504]
lea ecx, [esp + 0x174]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040a110
mov dword [esp + 0x364], eax
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x627e523b
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xd78e2adf
jmp 0x418e89
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.0043d640
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x3e710ede
mov dword [esp + 0x100], 4
mov dword [esp + 0xfc], 0
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x38a8a75a
jmp 0x418e89
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.0043d640
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x3e710ede
mov eax, dword [esp + 0x50]
mov dword [esp + 0x100], 4
mov dword [esp + 0xfc], eax
jmp 0x418e89
mov eax, 0x1c265efa
cmp dword [esp + 0x44], 0
je 0x4164a0
mov eax, 0x809dbb40
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x418e89
mov eax, 0x57e83a76
cmp dword [esp + 0x44], 1
je 0x4165aa
mov eax, 0x99e2b230
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x18d9decb
jmp 0x418e89
mov al, byte [esp + 0x154]
mov byte [esp + 0x230], al
mov byte [esp + 0x2d8], 0xaa
mov byte [esp + 0x2d9], 0x99
mov byte [esp + 0x2da], 0x6e
mov byte [esp + 0x2db], 0x9f
mov byte [esp + 0x2dc], 0x6b
mov byte [esp + 0x2dd], 0x9d
mov byte [esp + 0x2de], 0x93
mov byte [esp + 0x2df], 0xa3
mov byte [esp + 0x2e0], 0xa0
mov byte [esp + 0x2e1], 0xa1
mov eax, 0xa
mov byte [esp + eax + 0x2d8], 0
add eax, 1
cmp eax, 0xf
jne 0x41672c
xor eax, eax
cmp eax, 0xf
jae 0x4167a8
movzx edx, byte [esp + eax + 0x2d8]
mov ecx, eax
add ecx, 0xda
and ecx, edx
mov esi, ecx
and esi, 2
xor esi, 2
mov edi, ecx
and edi, 0xfd
imul edi, esi
mov esi, ecx
and esi, 2
or ecx, 2
imul ecx, esi
add ecx, edi
mov ebx, eax
add ebx, 0x4c8d6da
add ebx, edx
sub ebx, ecx
mov ecx, ebx
shl ecx, 1
and ecx, 0x7a
xor ebx, 0xbd
add ebx, ecx
add bl, 1
mov byte [esp + eax + 0x2d8], bl
mov ecx, eax
shl ecx, 1
and ecx, 2
xor eax, 1
add eax, ecx
jmp 0x41673e
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0x2d8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004192a0
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xe1536cf3
jmp 0x418e89
mov eax, dword [esp + 0x330]
mov dword [esp + 0x3cc], eax
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x41361bcb
jmp 0x418e89
mov eax, dword [esp + 0x34]
lea ecx, [esp + 0x390]
xor edx, edx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x100002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 5
mov dword [esp + 0x14], 0x60
mov dword [esp + 0x18], 0x80
call fcn.00442850
mov dword [esp + 0x374], eax
mov eax, 0x22cd9988
cmp dword [esp + 0x374], 0
jge 0x416952
mov eax, 0x4988ee2e
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
mov eax, dword [esp + 0x374]
mov dword [esp + 0x334], eax
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x29f4f960
jmp 0x418e89
cmp dword [esp + 0x44], 1
sete al
and al, 1
mov byte [esp + 0x7e], al
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xf7e9002b
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x7e674974
jmp 0x418e89
mov eax, 0x85f74535
test byte [esp + 0x4a], 1
jne 0x416d3f
mov eax, 0x6f03c3a7
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
mov dword [esp + 0x338], 0
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xd9d716ea
jmp 0x418e89
cmp dword [esp + 0x138], 0
setne al
and al, 1
mov byte [esp + 0x4b], al
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x2cfeaec2
jmp 0x418e89
mov eax, dword [esp + 0x138]
mov dword [esp], eax
call fcn.00418e90
add eax, 1
mov dword [esp + 0x3e8], eax
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xdaad9b5e
mov eax, dword [esp + 0x3e8]
mov dword [esp + 0x33c], eax
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x1c5e6a40
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xb83235ee
mov eax, dword [esp + 0x380]
mov dword [esp + 0x114], 0
mov dword [esp + 0x110], 0
mov dword [esp + 0x10c], eax
jmp 0x418e89
mov eax, 0xe892e57c
cmp dword [esp + 0x44], 2
je 0x4171c7
mov eax, 0xb83235ee
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x114], ecx
mov dword [esp + 0x110], eax
mov dword [esp + 0x10c], 0
jmp 0x418e89
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.004192f0
xor eax, 0xffffffff
sub eax, 0xffffffff
mov ecx, 0x1d
sub ecx, eax
xor edx, edx
sub edx, ecx
add edx, 0xffffffff
xor eax, eax
sub eax, edx
mov ecx, 2
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x41723c
mov ecx, eax
mov dword [esp], ecx
call fcn.00408640
mov dword [esp + 0x388], eax
mov al, byte [esp + 0x58]
mov byte [esp + 0x24c], al
mov byte [esp + 0x38], 0xe2
mov byte [esp + 0x39], 0x81
mov byte [esp + 0x3a], 0x82
mov byte [esp + 0x3b], 0x83
xor eax, eax
cmp eax, 4
jae 0x4172c6
movzx edx, byte [esp + eax + 0x38]
mov ecx, eax
add ecx, 0xec026ba0
xor ecx, edx
mov esi, ecx
xor esi, 0x9c0c1a20
mov edx, ecx
or edx, 0x63f3e5df
and edx, esi
mov edi, edx
and edi, 0xfd
mov esi, ecx
and esi, 2
xor esi, 2
imul esi, edi
mov edi, ecx
and edi, 2
or edx, 2
imul edx, edi
add edx, esi
xor ecx, 0xdf
add ecx, edx
add cl, 1
mov byte [esp + eax + 0x38], cl
add eax, 1
jmp 0x41726c
mov al, byte [esp + 0x54]
mov byte [esp + 0x254], al
mov byte [esp + 0x80], 0x4c
mov byte [esp + 0x81], 0xff
mov byte [esp + 0x82], 0x4f
mov byte [esp + 0x83], 0xf1
mov byte [esp + 0x84], 0x79
mov byte [esp + 0x85], 0xf3
mov byte [esp + 0x86], 0x55
mov byte [esp + 0x87], 0xf5
mov byte [esp + 0x88], 0x46
mov byte [esp + 0x89], 0xf7
mov byte [esp + 0x8a], 0x43
mov byte [esp + 0x8b], 0xc9
mov byte [esp + 0x8c], 0x70
mov byte [esp + 0x8d], 0xcb
mov byte [esp + 0x8e], 0x6d
mov byte [esp + 0x8f], 0xcd
mov byte [esp + 0x90], 0x70
mov byte [esp + 0x91], 0xcf
mov byte [esp + 0x92], 0x72
mov byte [esp + 0x93], 0xc1
mov byte [esp + 0x94], 0xa0
mov byte [esp + 0x95], 0xc3
mov byte [esp + 0x96], 0xbd
mov byte [esp + 0x97], 0xc5
mov byte [esp + 0x98], 0x63
mov byte [esp + 0x99], 0xc7
mov byte [esp + 0x9a], 0x4e
mov byte [esp + 0x9b], 0xd9
mov byte [esp + 0x9c], 0x7f
mov byte [esp + 0x9d], 0xdb
mov byte [esp + 0x9e], 0x7f
mov byte [esp + 0x9f], 0xdd
mov byte [esp + 0xa0], 0xbc
mov byte [esp + 0xa1], 0xdf
mov byte [esp + 0xa2], 0x7c
mov byte [esp + 0xa3], 0xd1
mov byte [esp + 0xa4], 0x5b
mov byte [esp + 0xa5], 0xd3
mov byte [esp + 0xa6], 0x62
mov byte [esp + 0xa7], 0xd5
mov byte [esp + 0xa8], 0x77
mov byte [esp + 0xa9], 0xd7
mov byte [esp + 0xaa], 0x63
mov byte [esp + 0xab], 0x29
mov byte [esp + 0xac], 0x9d
mov byte [esp + 0xad], 0x2b
mov byte [esp + 0xae], 0x4a
mov byte [esp + 0xaf], 0x2d
mov byte [esp + 0xb0], 0x53
mov byte [esp + 0xb1], 0x2f
mov byte [esp + 0xb2], 0x88
mov byte [esp + 0xb3], 0x21
mov byte [esp + 0xb4], 0x40
mov byte [esp + 0xb5], 0x23
mov byte [esp + 0xb6], 0x40
mov byte [esp + 0xb7], 0x25
mov byte [esp + 0xb8], 0x24
mov byte [esp + 0xb9], 0x27
mov eax, 0x3a
mov byte [esp + eax + 0x80], 0
add eax, 1
cmp eax, 0x3e
jne 0x4174a6
xor eax, eax
cmp eax, 0x3e
jae 0x41751b
movzx ecx, byte [esp + eax + 0x80]
mov esi, eax
add esi, 0x274dd855
mov edx, esi
and edx, ecx
mov edi, edx
and edi, 2
xor edi, 2
mov ebx, edx
and ebx, 0xfd
imul ebx, edi
mov edi, edx
and edi, 2
or edx, 2
imul edx, edi
add edx, ebx
sub edx, esi
mov esi, ecx
xor esi, 0xffffffff
mov edi, edx
and edi, esi
xor edx, 0xffffffff
and ecx, edx
sub ecx, edi
add cl, 0x57
mov byte [esp + eax + 0x80], cl
mov ecx, eax
shl ecx, 1
and ecx, 2
xor eax, 1
add eax, ecx
jmp 0x4174b8
mov eax, dword [esp + 0x388]
lea ecx, [esp + 0x80]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040a110
mov ecx, dword [esp + 0x34]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040a110
lea ecx, [esp + 0x38]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040a110
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x74f3b296
jmp 0x418e89
mov eax, dword [esp + 0x10c]
mov ecx, dword [esp + 0x110]
mov edx, dword [esp + 0x114]
mov dword [esp + 0x3f0], eax
mov dword [esp + 0x3f4], ecx
mov dword [esp + 0x3f8], edx
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x207960a3
mov eax, dword [esp + 0x3f8]
mov ecx, dword [esp + 0x3f4]
mov edx, dword [esp + 0x3f0]
mov dword [esp + 0x350], 0
mov dword [esp + 0x34c], eax
mov dword [esp + 0x348], ecx
mov dword [esp + 0x344], edx
jmp 0x418e89
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.00418ec0
mov esi, eax
add esi, 1
mov ecx, 2
mov eax, esi
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x4176f4
mov ecx, eax
mov dword [esp], ecx
call fcn.00408640
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x140]
xor edx, edx
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.0040ad10
mov eax, dword [esp + 0x19c]
xor ecx, ecx
sub ecx, eax
mov edx, 0x18
sub edx, ecx
mov eax, edx
and eax, 1
or edx, 1
add eax, edx
mov ecx, 2
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x41775a
mov ecx, eax
mov dword [esp], ecx
call fcn.00408640
mov dword [esp + 0x38c], eax
mov al, byte [esp + 0x14c]
mov byte [esp + 0x258], al
mov byte [esp + 0x288], 0x34
mov byte [esp + 0x289], 0x87
mov byte [esp + 0x28a], 0x37
mov byte [esp + 0x28b], 0x81
mov byte [esp + 0x28c], 0x39
mov byte [esp + 0x28d], 0x83
mov byte [esp + 0x28e], 0x2d
mov byte [esp + 0x28f], 0x8d
mov byte [esp + 0x290], 0x3e
mov byte [esp + 0x291], 0x8f
mov byte [esp + 0x292], 0x33
mov byte [esp + 0x293], 0x89
mov byte [esp + 0x294], 0x20
mov byte [esp + 0x295], 0x8b
mov byte [esp + 0x296], 0x25
mov byte [esp + 0x297], 0x95
mov byte [esp + 0x298], 0x20
mov byte [esp + 0x299], 0x97
mov byte [esp + 0x29a], 0x22
mov byte [esp + 0x29b], 0x91
mov byte [esp + 0x29c], 0x70
mov byte [esp + 0x29d], 0x93
mov byte [esp + 0x29e], 0x65
mov byte [esp + 0x29f], 0x9d
mov byte [esp + 0x2a0], 0x33
mov byte [esp + 0x2a1], 0x9f
mov byte [esp + 0x2a2], 0x26
mov byte [esp + 0x2a3], 0x99
mov byte [esp + 0x2a4], 0x37
mov byte [esp + 0x2a5], 0x9b
mov byte [esp + 0x2a6], 0x37
mov byte [esp + 0x2a7], 0x65
mov byte [esp + 0x2a8], 0x84
mov byte [esp + 0x2a9], 0x67
mov byte [esp + 0x2aa], 0xc4
mov byte [esp + 0x2ab], 0x61
mov byte [esp + 0x2ac], 0xdb
mov byte [esp + 0x2ad], 0x63
mov byte [esp + 0x2ae], 0xd2
mov byte [esp + 0x2af], 0x6d
mov byte [esp + 0x2b0], 0xcf
mov byte [esp + 0x2b1], 0x6f
mov byte [esp + 0x2b2], 0xd3
mov byte [esp + 0x2b3], 0x69
mov byte [esp + 0x2b4], 0xd5
mov byte [esp + 0x2b5], 0x6b
mov byte [esp + 0x2b6], 0x8a
mov byte [esp + 0x2b7], 0x75
mov byte [esp + 0x2b8], 0x74
mov byte [esp + 0x2b9], 0x77
mov eax, 0x32
mov byte [esp + eax + 0x288], 0
add eax, 1
cmp eax, 0x36
jne 0x41790c
xor eax, eax
cmp eax, 0x36
jae 0x417940
mov cl, byte [esp + eax + 0x288]
mov dl, al
add dl, 0x61
xor dl, cl
add dl, 0x1b
mov byte [esp + eax + 0x288], dl
add eax, 1
jmp 0x41791e
mov eax, dword [esp + 0x38c]
lea ecx, [esp + 0x288]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040a110
mov ecx, dword [esp + 0x140]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040a110
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x5b48f70c
jmp 0x418e89
mov eax, dword [esp + 0x118]
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x120]
mov dword [esp + 0xf4], eax
mov dword [esp + 0x144], ecx
mov dword [esp + 0xf8], edx
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x2516e09f
jmp 0x418e89
mov eax, 0x8d9bab4c
test byte [esp + 0x49], 1
jne 0x417a93
mov eax, 0xb04d69ef
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x418e89
lea edi, [esp + 0x4c0]
xor eax, eax
mov ecx, 0x11
rep stosd dword es:[edi], eax
mov dword [esp + 0x4c0], 0x44
mov eax, dword [0x44f2a8]
mov dword [esp], eax
mov dword [esp + 4], 0xef6ed546
call fcn.00442040
mov esi, eax
test esi, esi
setne al
call fcn.00419310
call fcn.00419310
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0xf4]
xor edx, edx
lea edx, [esp + 0x4c0]
lea edi, [esp + 0x42c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], edi
call esi
sub esp, 0x28
mov ecx, 0x2fbe7137
cmp eax, 0
jne 0x417b50
mov ecx, 0xb81b79b
mov eax, dword [esp + 0x2c]
mov dword [eax], ecx
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xb81b79b
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xdb44f40d
jmp 0x418e89
mov eax, dword [0x44f2a8]
mov dword [esp], eax
mov dword [esp + 4], 0x737de518
call fcn.00442040
mov esi, eax
test esi, esi
setne al
call fcn.00419310
call fcn.00419310
mov eax, dword [esp + 0x40]
xor ecx, ecx
lea ecx, [0x424c50]
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call esi
sub esp, 0x18
mov dword [esp + 0x148], eax
mov eax, 0x1d7fb0f0
cmp dword [esp + 0x148], 0
jne 0x417d38
mov eax, 0x2ee17671
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x418e89
mov eax, 0x9456a120
test byte [esp + 0x7f], 1
jne 0x41823f
mov eax, 0x90d3b12e
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x418e89
mov eax, dword [esp + 0x144]
mov dword [esp], eax
call fcn.00408650
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x9456a120
jmp 0x418e89
mov eax, 0x508faaba
cmp dword [esp + 0xf4], 0
je 0x41827c
mov eax, 0xf9897387
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x16cd18b3
jmp 0x418e89
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x6005f313
jmp 0x418e89
mov al, byte [esp + 0x48]
and al, 1
movzx eax, al
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
les esp, [ecx + eax*4 + 0x46242f18]
out dx, eax
or ah, al
sub ebp, edi
mov al, byte [esp + 0x70]
mov byte [esp + 0x1f8], al
mov byte [esp + 0xe0], 0xcf
mov byte [esp + 0xe1], 0x6b
mov eax, 2
mov byte [esp + eax + 0xe0], 0
add eax, 1
cmp eax, 6
jne 0x418394
xor eax, eax
cmp eax, 6
jae 0x4183e7
movzx ecx, byte [esp + eax + 0xe0]
mov edx, eax
add edx, 0x2591e397
xor edx, ecx
mov ecx, edx
add ecx, 0x44268e0c
and edx, 1
mov esi, ecx
and esi, 0xfe
mov edi, ecx
xor edi, 1
add ecx, edi
add ecx, edx
sub ecx, esi
mov byte [esp + eax + 0xe0], cl
add eax, 1
jmp 0x4183a6
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0xe0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 3
call fcn.00401f10
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x865d8d55
jmp 0x418e89
int1
in eax, 0x5a
cdq
push ss
push 0x448a2173
and al, 0x6c
mov byte [esp + 0x200], al
mov byte [esp + 0xd8], 0xdd
mov byte [esp + 0xd9], 0x49
mov eax, 2
mov byte [esp + eax + 0xd8], 0
add eax, 1
cmp eax, 6
jne 0x41843d
xor eax, eax
cmp eax, 6
jae 0x41848b
movzx edx, byte [esp + eax + 0xd8]
mov ecx, eax
add ecx, 0xc675a692
xor ecx, edx
mov edx, ecx
shl edx, 1
and edx, 0x4a
xor ecx, 0x1fb3bf25
mov esi, ecx
add esi, edx
and ecx, 1
or esi, 1
add ecx, esi
mov byte [esp + eax + 0xd8], cl
add eax, 1
jmp 0x41844f
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0xd8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00401880
mov esi, eax
mov al, byte [esp + 0x68]
mov byte [esp + 0x208], al
mov byte [esp + 0xc8], 0xd6
mov byte [esp + 0xc9], 0xc7
mov byte [esp + 0xca], 0x4a
mov eax, 3
mov byte [esp + eax + 0xc8], 0
add eax, 1
cmp eax, 8
jne 0x4184cc
xor eax, eax
cmp eax, 8
jae 0x418518
movzx edx, byte [esp + eax + 0xc8]
mov ecx, eax
add ecx, 0x97913f93
mov edi, ecx
and edi, edx
shl edi, 1
sub ecx, edi
add ecx, edx
mov edx, ecx
shl edx, 1
and edx, 2
xor ecx, 1
add ecx, 0x20
add ecx, edx
mov byte [esp + eax + 0xc8], cl
add eax, 1
jmp 0x4184de
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0xc8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004019b0
fstp st(0)
mov al, byte [esp + 0x64]
mov byte [esp + 0x210], al
mov byte [esp + 0xd0], 0x7b
mov byte [esp + 0xd1], 0xe7
mov eax, 2
mov byte [esp + eax + 0xd0], 0
add eax, 1
cmp eax, 6
jne 0x418551
xor eax, eax
cmp eax, 6
jae 0x4185ed
movzx ecx, byte [esp + eax + 0xd0]
mov edx, eax
add edx, 0x4ddfaad9
mov edi, eax
add edi, 0xd9
and edi, ecx
mov ebx, edx
or ebx, ecx
xor edi, ebx
mov ebx, edi
shl ebx, 1
xor ebx, 0xffffffff
add edi, ebx
and edx, edi
mov ebx, edx
and ebx, 0xfffffffd
mov edi, edx
and edi, 2
xor edi, 2
imul edi, ebx
mov ebx, edx
and ebx, 2
or edx, 2
imul edx, ebx
add edx, edi
mov ebx, eax
sub ebx, edx
add ebx, 0x4ddfaad9
add ebx, ecx
mov ecx, ebx
shl ecx, 1
and ecx, 0x84
xor ebx, 0xc2
add ebx, ecx
add bl, 1
mov byte [esp + eax + 0xd0], bl
mov ecx, eax
shl ecx, 1
and ecx, 2
xor eax, 1
add eax, ecx
jmp 0x418563
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0xd0]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004019b0
fstp st(0)
lea eax, [esp + 0x564]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x400
mov dword [esp + 8], esi
mov dword [esp + 0xc], 0
call fcn.0040ad10
lea eax, [esp + 0x564]
lea ecx, [esp + 0x40]
lea edx, [esp + 0x19c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0040b4e0
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xce71718f
jmp 0x418e89
out dx, al
dec ebp
outsb dx, byte [esi]
jmp 0x854e3108
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x41361bcb
jmp 0x418e89
cmp eax, 6
jae 0x41893f
movzx edx, byte [esp + eax + 0xc0]
xor ecx, ecx
sub ecx, eax
mov esi, ecx
shl esi, 1
and esi, 0x14187a36
xor ecx, 0x75f3c2e4
add ecx, 1
sub ecx, esi
xor ecx, edx
mov edx, ecx
shl edx, 1
and edx, 2
xor ecx, 1
add ecx, 0x86
add al, byte [ebx - 0x3e7efe0f]
xchg byte [eax], al
add byte [eax], al
add ecx, edx
mov byte [esp + eax + 0xc0], cl
mov ecx, eax
shl ecx, 1
and ecx, 2
mov edx, eax
or edx, 0xfffffffe
xor eax, 0xffffffff
or eax, 1
and eax, edx
xor eax, 0xffffffff
add eax, ecx
jmp 0x4188e3
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0xc0]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00401880
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.004192f0
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x7e674974
jmp 0x418e89
mov ah, 0x88
cmp eax, esi
and byte [edx + 0x30e2faf6], ch
das
fistp word [ebp + 0x56]
cdq
mov bl, 0x42
push ss
dec esp
jle 0x418911
test byte [eax + esi*8], ah
add byte [eax], al
add byte [ecx - 0x317dbfc], cl
add al, 0
add byte [ebx - 0x38d3dbbc], cl
add dl, ch
push ss
xlatb
fldl2t
out 4, al
add byte [eax], al
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xba1e09c5
jmp 0x418e89
lodsd eax, dword [esi]
sub dword [ecx], ecx
bound esp, qword [ebx]
push eax
add ebx, dword [edi]
jmp 0x67757d00
mov dh, 0xbc
invalid
push cs
add dl, bl
push 0x2c24448b
mov dword [eax], 0x197eea0f
jmp 0x418e89
jmp 0x414767