Function at 0x4074fb
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
and eax, 0x9b29
pop eax
push eax
add eax, 0x415c
jmp 0x4030a1
pop eax
mov dword [ebp - 0x6c], 1
push ecx
push ecx
add esp, 4
xor ecx, 0x5fce
pop ecx
push eax
sub eax, 0xfcba
sub eax, 0xaaf3
sub eax, 0xd766
pop eax
push eax
call 0x4030d7
add byte [edx], bh
inc ecx
dec eax
cmp cl, byte [ebp + 0x50]
aaa
add esp, 4
pop eax
imul eax, dword [ebp - 0x6c], 0x932
add eax, 0x16f3673a
imul ecx, dword [ebp - 0x6c], 0x932
sub eax, ecx
xor eax, 0x1154
imul eax, dword [ebp - 0x6c]
imul edx, dword [ebp - 0x6c], 0x932
sub eax, edx
mov dword [ebp - 0x70], eax
push eax
sub eax, 0x13b54
xor eax, 0xd660
or eax, 0x167ad
xor eax, 0xeda6
pop eax
push eax
push ecx
add esp, 4
xor eax, 0x115ba
and eax, 0x90bc
xor eax, 0xcaa2
pop eax
push esi
and esi, 0x1509a
and esi, 0xfb8b
or esi, 0xacf4
pop esi
push edi
xor edi, 0x67e8
pop edi
push ebx
add ebx, 0xd9
xor ebx, 0xb45b
pop ebx
push edi
add edi, 0x10b5f
pop edi
mov dword [ebp - 4], 1
push ebx
push eax
add esp, 4
jmp 0x40317a
pop ebx
push edx
sub edx, 0xc292
or edx, 0xea58
and edx, 0x10493
jmp 0x403195
pop edx
push eax
push ecx
add esp, 4
add eax, 0xaff7
pop eax
imul eax, dword [ebp - 4], 0x932
add eax, 0x16f3673a
imul ecx, dword [ebp - 4], 0x932
sub eax, ecx
xor eax, 0
imul eax, dword [ebp - 4]
imul edx, dword [ebp - 4], 0x932
sub eax, edx
mov dword [ebp - 8], eax
jmp 0x403383
mov edx, dword [ebp - 0x8a8]
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0xbb0], edx
mov dword [ebp - 0xbac], eax
push ebx
or ebx, 0x8654
and ebx, 0xb76c
pop ebx
push edi
push edi
add esp, 4
xor edi, 0xc470
add edi, 0x53fb
xor edi, 0x94aa
pop edi
push ecx
push esi
add esp, 4
xor ecx, 0xe8aa
pop ecx
push esi
add esi, 0x2342
and esi, 0x6f66
xor esi, 0xa576
xor esi, 0x1098a
pop esi
push eax
call 0x4033f5
add byte [edx + 0x38], al
dec ecx
inc eax
dec edx
cmp al, 0x39
add esp, 4
and eax, 0x159d7
pop eax
mov ecx, dword [ebp - 8]
add ecx, 0x932
imul edx, dword [ebp - 4], 0x932
add edx, 0x16f3673a
imul eax, dword [ebp - 4], 0x932
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 4]
mov dword [ebp - 0x10d4], ecx
push ecx
push eax
add esp, 4
and ecx, 0x17354
pop ecx
push eax
push ebx
add esp, 4
call 0x40344a
add byte [esi + eax*2], bh
dec ebp
inc ecx
xor al, byte [ecx + 0x3c]
cmp ecx, dword [edi - 0x7d]
les eax, [eax + ebx*2]
push eax
and eax, 0xdebc
sub eax, 0x173c
pop eax
mov ecx, dword [ebp - 0xbb0]
add ecx, 0x932
imul edx, dword [ebp - 0xbac], 0x932
add edx, 0x16f3673a
imul eax, dword [ebp - 0xbac], 0x932
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0xbac]
mov dword [ebp - 0x10d0], ecx
mov ecx, dword [ebp - 0x10d0]
mov dword [ebp - 0x10d8], ecx
mov edx, dword [ebp - 0x10d4]
cmp edx, dword [ebp - 0x10d8]
jae 0x4034b9
mov dword [ebp - 0xb1c], 1
jmp 0x4034c3
mov dword [ebp - 0xb1c], 0
mov al, byte [ebp - 0xb1c]
mov byte [ebp - 0x219], al
movzx ecx, byte [ebp - 0x219]
test ecx, ecx
je 0x406b28
lea edx, [ebp - 0x568]
mov dword [ebp - 0x22c], edx
mov eax, dword [ebp - 0x22c]
mov dword [eax + 4], 1
push ecx
call 0x403507
add byte [esi + 0x46], al
aas
dec ecx
cmp dword [edi - 0x3b7cbbbc], esi
add al, 0x81
loope 0x403521
jp 0x40350f
add byte [ecx + 0x56], bl
push edi
add esp, 4
call 0x403525
add byte [edx + 0x35], cl
cmp byte [0x4443473e], bh
inc edi
inc ebx
inc esp
dec eax
add esp, 4
pop esi
mov ecx, dword [ebp - 0x22c]
imul edx, dword [ecx + 4], 0x932
add edx, 0x16f3673a
mov eax, dword [ebp - 0x22c]
imul ecx, dword [eax + 4], 0x932
sub edx, ecx
xor edx, 0x2d
mov eax, dword [ebp - 0x22c]
imul edx, dword [eax + 4]
mov ecx, dword [ebp - 0x22c]
imul eax, dword [ecx + 4], 0x932
sub edx, eax
mov ecx, dword [ebp - 0x22c]
mov dword [ecx], edx
mov edx, dword [ebp - 0x22c]
mov dword [ebp - 0x1268], edx
push edx
call 0x40358b
add byte [edi], bh
xor edi, dword [edi]
dec eax
inc esi
aaa
inc eax
inc ecx
aaa
add esp, 4
or edx, 0x58bb
pop edx
push edi
push edx
add esp, 4
call 0x4035a9
add byte [edx + 0x3d], cl
dec ebp
cmp dword [edx + 0x38], eax
cmp byte [ecx], bh
cmp byte [ebx - 0x38a0fb3c], al
test dword [ecx + edi*8 - 1], esi
inc dword [ecx]
add byte [eax], al
add byte [esi - 0x7f], dl
not al
xor al, 0
add byte [ecx + 0x117c1f6], al
add bl, ch
add al, 0x35
xor cl, byte [ecx + 0x4a]
and esi, 0x16880
pop esi
push edx
push edx
add esp, 4
or edx, 0xbfda
or edx, 0x110bd
xor edx, 0x540a
pop edx
mov dword [ebp - 0x126c], 0x42
push eax
and eax, 0x12c62
add eax, 0x7c4a
pop eax
push ecx
push eax
add esp, 4
xor ecx, 0x9dca
jmp 0x403612
xor ecx, 0x868
pop ecx
push edx
push edx
add esp, 4
or edx, 0x4d19
pop edx
mov dword [ebp - 0x1270], 0x21
push eax
and eax, 0xc635
sub eax, 0x8049
pop eax
push ecx
push esi
add esp, 4
add ecx, 0x4782
and ecx, 0x17adc
pop ecx
push ecx
push ecx
add esp, 4
and ecx, 0x12e3
sub ecx, 0x128fb
pop ecx
mov dword [ebp - 0x1274], 0xc
push edi
push esi
add esp, 4
xor edi, 0x9dda
call 0x403683
add byte [eax + 0x50], cl
cmp al, 0x3a
aaa
aaa
xor eax, dword [ebx - 0x107efb3c]
inc eax
pop eax
add byte [eax], al
call 0x403699
add byte [eax + 0x3b], al
dec ecx
dec esp
cmp al, 0x38
dec eax
add esp, 4
pop edi
mov eax, dword [ebp - 0x568]
add eax, 0x932
imul ecx, dword [ebp - 0x564], 0x932
add ecx, 0x16f3673a
imul edx, dword [ebp - 0x564], 0x932
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x564]
mov dword [ebp - 0x10dc], eax
mov eax, dword [ebp - 0x10dc]
mov dword [ebp - 0x10e0], eax
mov ecx, dword [ebp - 0x10e0]
sub ecx, 0x42
mov dword [ebp - 0x10e4], ecx
mov dword [ebp - 0x5c8], 1
push ecx
add ecx, 0x1820a
call 0x40370d
add byte [esi + eax*2 + 0x33], cl
inc eax
xor al, 0x40
inc ecx
aas
add esp, 4
jmp 0x403718
pop ecx
push edx
sub edx, 0x1037a
jmp 0x403729
pop edx
imul edx, dword [ebp - 0x5c8], 0x932
add edx, 0x16f3673a
imul eax, dword [ebp - 0x5c8], 0x932
sub edx, eax
xor edx, dword [ebp - 0x10e4]
imul edx, dword [ebp - 0x5c8]
imul ecx, dword [ebp - 0x5c8], 0x932
sub edx, ecx
mov dword [ebp - 0x5cc], edx
push esi
xor esi, 0x17f21
and esi, 0x15a9e
pop esi
push edi
call 0x403781
add byte [edi + 0x3b], cl
aas
dec esi
xor eax, 0xc4833f3f
add al, 0xeb
add al, 0x43
inc ebp
inc edi
xor al, byte [ecx + 0x17f18c7]
add byte [ecx + 0x7f8ff7], al
add byte [edi + 0x53], bl
push edi
add esp, 4
or ebx, 0x1672d
or ebx, 0xba74
and ebx, 0x1f90
pop ebx
push edx
xor edx, 0x2b25
add edx, 0x16081
pop edx
push edx
push esi
add esp, 4
sub edx, 0x11322
pop edx
mov dword [ebp - 0x5d0], 1
push esi
or esi, 0xd49a
add esi, 0x15259
pop esi
push esi
push edi
add esp, 4
add esi, 0x8881
pop esi
push eax
push ecx
add esp, 4
xor eax, 0x3db6
pop eax
push ebx
push edx
add esp, 4
sub ebx, 0x40fc
pop ebx
imul edx, dword [ebp - 0x5d0], 0x932
add edx, 0x16f3673a
imul eax, dword [ebp - 0x5d0], 0x932
sub edx, eax
xor edx, 0x21
imul edx, dword [ebp - 0x5d0]
imul ecx, dword [ebp - 0x5d0], 0x932
sub edx, ecx
mov dword [ebp - 0x5d4], edx
push ecx
push edx
add esp, 4
xor ecx, 0xe4ef
or ecx, 0x9856
sub ecx, 0xf8e3
or ecx, 0xa703
pop ecx
push ecx
and ecx, 0xc0e9
xor ecx, 0x10275
xor ecx, 0x15d2
pop ecx
push ecx
or ecx, 0x182d3
jmp 0x40387b
xor ecx, 0x7ab0
pop ecx
push ebx
call 0x403891
add byte [ecx], bh
dec ebp
inc esi
dec esi
cmp eax, 0x834f4c3f
les eax, [ecx + eax*4]
ret
mov dword [ebp - 0x238], 0
call 0x406b37
mov eax, 0xdeadbeef
pop eax
mov dword [ebp - 0x238], eax
push edi
add edi, 0x12701
or edi, 0xf502
pop edi
push eax
xor eax, 0xa25e
pop eax
push eax
push esi
add esp, 4
add eax, 0x4453
add eax, 0x4be2
pop eax
push edx
jmp 0x406b74
pop edx
mov edx, dword [ebp - 0x1220]
mov dword [ebp - 0xb38], edx
push edx
sub edx, 0x4556
sub edx, 0xc5
sub edx, 0x13eba
pop edx
push ecx
and ecx, 0xa9dc
sub ecx, 0x969d
call 0x406baf
add byte [ecx + eax*2 + 0x3c], al
dec esi
aas
push eax
xor al, byte [ebx - 0x74a6fb3c]
inc ebp
nop
add eax, 0x932
imul ecx, dword [ebp - 0x6c], 0x932
add ecx, 0x16f3673a
imul edx, dword [ebp - 0x6c], 0x932
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x6c]
mov dword [ebp - 0xb38], eax
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0xe24], eax
mov ecx, dword [ebp - 0xe24]
add ecx, dword [ebp - 0xb38]
mov dword [ebp - 0x238], ecx
push ecx
add ecx, 0xb0bc
add ecx, 0x5480
and ecx, 0x1171c
or ecx, 0xc2c1
pop ecx
push esi
push edi
add esp, 4
or esi, 0x562d
sub esi, 0x9ac4
xor esi, 0x11f7d
pop esi
push edx
or edx, 0x12ea7
pop edx
push esi
push eax
add esp, 4
sub esi, 0xb9e1
and esi, 0x15b64
pop esi
push eax
and eax, 0x9649
call 0x406c5b
add byte [ebx + 0x4f], al
inc esp
push eax
inc edi
inc esi
xor eax, dword [ebx - 0x39a7fb3c]
test dword [eax + 0x51fffff9], esi
mov byte [ebp - 0x64f], 0xb9
mov byte [ebp - 0x64e], 0x10
mov byte [ebp - 0x64d], 0x10
mov byte [ebp - 0x64c], 0x10
mov byte [ebp - 0x64b], 0x10
mov byte [ebp - 0x64a], 0x59
push edi
sub edi, 0xf342
sub edi, 0x16748
or edi, 0x16495
and edi, 0x29ca
pop edi
push ecx
push eax
add esp, 4
sub ecx, 0x1871
sub ecx, 0x6536
and ecx, 0x13ffc
pop ecx
push ecx
push edi
add esp, 4
add ecx, 0x273c
jmp 0x406cd3
and ecx, 0x16f94
pop ecx
push ecx
and ecx, 0x12355
pop ecx
push ecx
push ecx
add esp, 4
and ecx, 0x3aa
and ecx, 0x137c9
pop ecx
mov byte [ebp - 0x658], 0x51
mov byte [ebp - 0x657], 0xb9
mov byte [ebp - 0x656], 0x20
mov byte [ebp - 0x655], 0x20
mov byte [ebp - 0x654], 0x20
mov byte [ebp - 0x653], 0x20
mov byte [ebp - 0x652], 0x59
push edi
push edi
add esp, 4
or edi, 0x17e5f
add edi, 0x15c54
or edi, 0x92f9
or edi, 0xef31
pop edi
push esi
xor esi, 0xe3cd
sub esi, 0x110b3
xor esi, 0x8535
pop esi
push esi
sub esi, 0xc522
or esi, 0x14787
jmp 0x406d69
pop esi
push ebx
or ebx, 0x16f44
pop ebx
push edi
sub edi, 0x560e
jmp 0x406d82
add edi, 0x14c3e
pop edi
mov dword [ebp - 0x1224], 0xe
push eax
jmp 0x406d99
or eax, 0x131f8
pop eax
push edx
push ecx
add esp, 4
jmp 0x406daa
add edx, 0x182b1
and edx, 0xfa9e
pop edx
push ecx
sub ecx, 0x7261
or ecx, 0x6753
pop ecx
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0x650]
mov dword [ebp - 0xb3c], ecx
push ecx
and ecx, 0x14e65
pop ecx
push esi
call 0x406def
add byte [esi + 0x47], cl
push eax
inc ebx
dec eax
inc ecx
add esp, 4
pop esi
push ecx
and ecx, 0x5130
jmp 0x406dff
and ecx, 0x10c0d
sub ecx, 0x3f9d
pop ecx
mov dword [ebp - 0x1228], 0xffffffff
push edx
push eax
add esp, 4
xor edx, 0x10bce
pop edx
push eax
push edx
add esp, 4
jmp 0x406e2c
pop eax
push eax
push eax
add esp, 4
add eax, 0x13181
call 0x406e44
add byte [ecx], bh
inc ecx
cmp eax, 0x834e3640
les eax, [eax + ebx*2]
mov edx, dword [ebp - 0x238]
mov dword [ebp - 0x264], edx
jmp 0x406e65
mov eax, dword [ebp - 0x264]
add eax, 1
mov dword [ebp - 0x264], eax
push ebx
push edi
add esp, 4
and ebx, 0x11486
xor ebx, 0x145a8
xor ebx, 0xe54
pop ebx
push esi
push eax
add esp, 4
sub esi, 0x103fa
pop esi
push ecx
xor ecx, 0x7ef6
xor ecx, 0x48f0
pop ecx
mov ecx, dword [ebp - 0x264]
sub ecx, dword [ebp - 0x238]
cmp ecx, 0xffffffff
jb 0x406edf
push ebx
push esi
add esp, 4
and ebx, 0x10265
or ebx, 0x10d99
add ebx, 0x12a88
xor ebx, 0xc427
pop ebx
push ebx
xor ebx, 0xa2b1
and ebx, 0xc1c5
xor ebx, 0x124de
pop ebx
jmp 0x4070db
mov dword [ebp - 0x698], 7
mov edx, dword [ebp - 0x264]
mov dword [ebp - 0x648], edx
push edx
or edx, 0x10866
add edx, 0x1cc7
and edx, 0xaf55
pop edx
push ebx
push esi
add esp, 4
add ebx, 0x1295c
sub ebx, 0x8b51
and ebx, 0x390e
or ebx, 0xcb4a
pop ebx
mov eax, dword [ebp - 0xb3c]
mov dword [ebp - 0x608], eax
mov dword [ebp - 0x69c], 0
mov ecx, dword [ebp - 0x264]
cmp ecx, dword [ebp - 0xb3c]
jne 0x406f5c
mov edx, dword [ebp - 0x69c]
mov dword [ebp - 0xb44], edx
jmp 0x40708d
cmp dword [ebp - 0x698], 0
jle 0x407081
push esi
push esi
add esp, 4
jmp 0x406f73
pop esi
push eax
push esi
add esp, 4
add eax, 0x6857
and eax, 0x65fc
and eax, 0x16e40
call 0x406f97
add byte [esi], dh
aas
cmp al, 0x3f
cmp dword [ebx + eax*4], edi
les eax, [eax + ebx*2]
mov eax, dword [ebp - 0x648]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x608]
movzx eax, byte [edx]
cmp ecx, eax
je 0x40701d
push edx
push edi
add esp, 4
xor edx, 0x1095e
xor edx, 0x10b4b
xor edx, 0x1e4b
pop edx
push eax
or eax, 0x568d
jmp 0x406fd6
add eax, 0x2330
sub eax, 0x124eb
pop eax
mov ecx, dword [ebp - 0x648]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x608]
movzx ecx, byte [eax]
cmp edx, ecx
jle 0x407005
mov dword [ebp - 0xb40], 1
jmp 0x40700f
mov dword [ebp - 0xb40], 0xffffffff
mov edx, dword [ebp - 0xb40]
mov dword [ebp - 0x69c], edx
jmp 0x407081
push eax
jmp 0x407027
and eax, 0xd6d5
add eax, 0x92de
pop eax
push esi
push esi
add esp, 4
xor esi, 0x99c6
call 0x40704b
add byte [eax*2 + 0x4042343f], bh
add esp, 4
pop esi
mov eax, dword [ebp - 0x698]
sub eax, 1
mov dword [ebp - 0x698], eax
mov ecx, dword [ebp - 0x648]
add ecx, 1
mov dword [ebp - 0x648], ecx
mov edx, dword [ebp - 0x608]
add edx, 1
mov dword [ebp - 0x608], edx
jmp 0x406f5c
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0xb44], eax
cmp dword [ebp - 0xb44], 0
jne 0x4070d6
push eax
xor eax, 0x89f5
sub eax, 0x99e5
or eax, 0xdc35
pop eax
push ecx
push edi
add esp, 4
add ecx, 0xa03
or ecx, 0x14127
or ecx, 0x7e99
or ecx, 0x754d
pop ecx
mov ecx, dword [ebp - 0x264]
mov dword [ebp - 0x228], ecx
jmp 0x407117
jmp 0x406e56
push esi
or esi, 0x73aa
pop esi
push ebx
jmp 0x4070e9
jmp 0x4070ee
sub ebx, 0x16208
pop ebx
push edi
push edx
add esp, 4
xor edi, 0xc2fb
pop edi
push edx
push ebx
add esp, 4
or edx, 0x7ce
pop edx
mov dword [ebp - 0x228], 0
push edx
sub edx, 0x16cc
jmp 0x407126
pop edx
push ecx
push esi
add esp, 4
and ecx, 0x13376
add ecx, 0xd729
call 0x407145
add byte [edi + esi], dh
inc esp
inc esi
aas
dec ebp
aas
add esp, 4
pop ecx
push eax
sub eax, 0xeb91
sub eax, 0xea83
pop eax
push esi
and esi, 0x18521
pop esi
push ecx
push edi
add esp, 4
or ecx, 0x148ad
pop ecx
push eax
and eax, 0x8c1f
jmp 0x40717a
pop eax
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0x658]
mov dword [ebp - 0xb48], ecx
push ebx
push eax
add esp, 4
xor ebx, 0xcce7
and ebx, 0xa554
pop ebx
push edi
and edi, 0xd049
or edi, 0xd858
pop edi
push edx
jmp 0x4071b6
and edx, 0x901e
jmp 0x4071c1
pop edx
mov dword [ebp - 0x122c], 0xffffffff
push esi
push esi
add esp, 4
add esi, 0x59c4
or esi, 0xca3b
sub esi, 0x176fc
or esi, 0x1279c
pop esi
push eax
or eax, 0x2bce
and eax, 0x9be
and eax, 0x3d39
pop eax
mov edx, dword [ebp - 0x238]
mov dword [ebp - 0x260], edx
jmp 0x40721b
mov eax, dword [ebp - 0x260]
add eax, 1
mov dword [ebp - 0x260], eax
push ebx
and ebx, 0x4cb2
pop ebx
push ebx
add ebx, 0xd99
add ebx, 0xd762
jmp 0x407238
pop ebx
push edi
or edi, 0x34d3
jmp 0x407246
xor edi, 0xa5a1
pop edi
mov ecx, dword [ebp - 0x260]
sub ecx, dword [ebp - 0x238]
cmp ecx, 0xffffffff
jb 0x407295
push esi
push edx
add esp, 4
call 0x407271
add byte [ebx + 0x49], al
inc esi
inc edi
xor bh, byte [edi]
dec edi
xor eax, dword [ebx + 0xbe804c4]
add byte [eax], al
add byte [eax], al
inc ecx
inc esp
xor eax, 0x44404450
dec edx
add esp, 4
pop esi
push eax
sub eax, 0xc32c
pop eax
jmp 0x407491
mov dword [ebp - 0x6a0], 7
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x60c], edx
push ecx
xor ecx, 0x6f10
pop ecx
push eax
push eax
add esp, 4
or eax, 0x17842
pop eax
push edx
xor edx, 0x11da6
pop edx
push edx
and edx, 0x1b81
pop edx
push edi
add edi, 0xbe0
sub edi, 0xd966
pop edi
mov eax, dword [ebp - 0xb48]
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x6a4], 0
mov ecx, dword [ebp - 0x260]
cmp ecx, dword [ebp - 0xb48]
jne 0x407312
mov edx, dword [ebp - 0x6a4]
mov dword [ebp - 0xb50], edx
jmp 0x407443
cmp dword [ebp - 0x6a0], 0
jle 0x407437
push ebx
push ecx
add esp, 4
add ebx, 0xfb09
xor ebx, 0x8fa2
or ebx, 0x2438
jmp 0x40733e
pop ebx
push edx
push edi
add esp, 4
sub edx, 0xc736
xor edx, 0x4086
pop edx
mov eax, dword [ebp - 0x60c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x610]
movzx eax, byte [edx]
cmp ecx, eax
je 0x4073d3
push esi
push esi
add esp, 4
and esi, 0x5f69
add esi, 0x12868
jmp 0x40737e
pop esi
push edi
push eax
add esp, 4
jmp 0x40738d
jmp 0x407393
jmp 0x407398
pop edi
mov ecx, dword [ebp - 0x60c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x610]
movzx ecx, byte [eax]
cmp edx, ecx
jle 0x4073bb
mov dword [ebp - 0xb4c], 1
jmp 0x4073c5
mov dword [ebp - 0xb4c], 0xffffffff
mov edx, dword [ebp - 0xb4c]
mov dword [ebp - 0x6a4], edx
jmp 0x407437
push ecx
push edi
add esp, 4
xor ecx, 0x18659
pop ecx
push ebx
push ecx
add esp, 4
jmp 0x4073ed
or ebx, 0x447d
add ebx, 0x1415f
pop ebx
push ecx
jmp 0x407404
pop ecx
mov eax, dword [ebp - 0x6a0]
sub eax, 1
mov dword [ebp - 0x6a0], eax
mov ecx, dword [ebp - 0x60c]
add ecx, 1
mov dword [ebp - 0x60c], ecx
mov edx, dword [ebp - 0x610]
add edx, 1
mov dword [ebp - 0x610], edx
jmp 0x407312
mov eax, dword [ebp - 0x6a4]
mov dword [ebp - 0xb50], eax
cmp dword [ebp - 0xb50], 0
jne 0x40748c
push esi
call 0x40745c
add byte [esi + 0x3b], al
inc edi
dec ecx
cmp eax, 0x413d5047
add esp, 4
pop esi
push edi
push ecx
add esp, 4
add edi, 0x2cdc
add edi, 0x7afb
add edi, 0x61e2
or edi, 0x5736
pop edi
mov ecx, dword [ebp - 0x260]
mov dword [ebp - 0x614], ecx
jmp 0x4074cd
jmp 0x40720c
push eax
push eax
add esp, 4
or eax, 0x11365
pop eax
push edi
sub edi, 0xf0cd
and edi, 0xfbed
sub edi, 0x166d4
xor edi, 0xefe2
pop edi
push eax
push eax
add esp, 4
xor eax, 0x179aa
pop eax
mov dword [ebp - 0x614], 0
push edx
jmp 0x4074d4
add edx, 0x1305b
sub edx, 0x424
pop edx
push ecx
jmp 0x4074e8
sub ecx, 0x74ad
call 0x4074fb
add byte [ebp + esi + 0x3a], al
push eax
inc ecx
add esp, 4
pop ecx
mov byte [ebp - 0x494], 0x45
mov byte [ebp - 0x493], 0x78
mov byte [ebp - 0x492], 0x69
mov byte [ebp - 0x491], 0x74
mov byte [ebp - 0x490], 0x50
mov byte [ebp - 0x48f], 0x72
mov byte [ebp - 0x48e], 0x6f
mov byte [ebp - 0x48d], 0x63
mov byte [ebp - 0x48c], 0x65
mov byte [ebp - 0x48b], 0x73
mov byte [ebp - 0x48a], 0x73
mov byte [ebp - 0x489], 0
push ecx
or ecx, 0x6cd2
sub ecx, 0x13b36
pop ecx
push esi
xor esi, 0x7036
pop esi
push esi
call 0x407579
add byte [ebx], bh
aaa
cmp edi, dword [eax]
push eax
dec esi
aaa
aaa
add esp, 4
pop esi
push ebx
and ebx, 0xd48e
pop ebx
mov edx, 0x6b
mov word [ebp - 0xc50], dx
mov eax, 0x65
mov word [ebp - 0xc4e], ax
mov ecx, 0x72
mov word [ebp - 0xc4c], cx
mov edx, 0x6e
mov word [ebp - 0xc4a], dx
mov eax, 0x65
mov word [ebp - 0xc48], ax
mov ecx, 0x6c
mov word [ebp - 0xc46], cx
mov edx, 0x33
mov word [ebp - 0xc44], dx
mov eax, 0x32
mov word [ebp - 0xc42], ax
mov ecx, 0x2e
mov word [ebp - 0xc40], cx
mov edx, 0x64
mov word [ebp - 0xc3e], dx
mov eax, 0x6c
mov word [ebp - 0xc3c], ax
mov ecx, 0x6c
mov word [ebp - 0xc3a], cx
xor edx, edx
mov word [ebp - 0xc38], dx
push esi
xor esi, 0x10420
call 0x407632
add byte [esi + eax*2], dh
xor al, 0x4d
aas
cmp dword [edx - 0x7d], ecx
les eax, [ecx + eax*4]
out dx, al
dec esi
and al, byte [ecx]
add byte [ecx + 0x150b7c6], al
add byte [esi + 0x50], bl
or eax, 0x2334
xor eax, 0x128bd
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0xe28], eax
mov ecx, dword [ebp - 0xe28]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xe2c], edx
mov eax, dword [ebp - 0xe2c]
mov dword [ebp - 0xb54], eax
push ebx
push edi
add esp, 4
and ebx, 0x135d7
pop ebx
push esi
sub esi, 0x7a8f
and esi, 0x68cd
and esi, 0xf9be
or esi, 0x40b5
pop esi
push eax
push esi
add esp, 4
and eax, 0x7022
pop eax
cmp dword [ebp - 0xb54], 0
jne 0x4076c1
mov dword [ebp - 0x188], 0
jmp 0x407968
mov ecx, dword [ebp - 0xb54]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x6b0], eax
push edx
push ebx
add esp, 4
sub edx, 0x12758
or edx, 0x60
xor edx, 0xb3dd
sub edx, 0x116da
pop edx
push esi
add esi, 0x6892
or esi, 0x130ae
add esi, 0x142b5
pop esi
cmp dword [ebp - 0x6b0], 0
jne 0x40771d
mov dword [ebp - 0x188], 0
jmp 0x407968
mov ecx, dword [ebp - 0x6b0]
mov dword [ebp - 0x25c], ecx
push eax
push ecx
add esp, 4
jmp 0x407736
add eax, 0x6296
xor eax, 0xee95
pop eax
push edi
push ecx
add esp, 4
or edi, 0x54e0
or edi, 0x1761a
and edi, 0x1437b
pop edi
lea edx, [ebp - 0xc50]
mov dword [ebp - 0x6ac], edx
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x6a8], ecx
xor edx, edx
mov word [ebp - 0x114], dx
xor eax, eax
mov word [ebp - 0x28], ax
push ebx
push ecx
add esp, 4
sub ebx, 0x17bf2
call 0x4077a0
add byte [ebx], dh
dec eax
inc eax
xor al, 0x39
aaa
inc edx
cmp al, 0x34
add esp, 4
call 0x4077b3
add byte [eax + 0x46], cl
inc esp
dec ebx
xor al, byte [ecx + 0x37]
dec esi
cmp dword [edx], edi
add esp, 4
pop ebx
mov ecx, dword [ebp - 0x6a8]
mov dx, word [ecx]
mov word [ebp - 0x87a], dx
mov eax, dword [ebp - 0x6a8]
add eax, 2
mov dword [ebp - 0x6a8], eax
mov cx, word [ebp - 0x87a]
mov word [ebp - 0x114], cx
mov edx, dword [ebp - 0x6ac]
mov ax, word [edx]
mov word [ebp - 0x92c], ax
mov ecx, dword [ebp - 0x6ac]
add ecx, 2
mov dword [ebp - 0x6ac], ecx
mov dx, word [ebp - 0x92c]
mov word [ebp - 0x28], dx
push ecx
push esi
add esp, 4
or ecx, 0x1161f
and ecx, 0x9705
or ecx, 0x5926
pop ecx
push eax
sub eax, 0x13769
add eax, 0xfd4d
xor eax, 0x5b14
sub eax, 0xfa9f
pop eax
movzx eax, word [ebp - 0x28]
test eax, eax
jne 0x40785d
movzx ecx, word [ebp - 0x114]
movzx edx, word [ebp - 0x28]
sub ecx, edx
mov dword [ebp - 0xb5c], ecx
jmp 0x4078b7
movzx eax, word [ebp - 0x114]
movzx ecx, word [ebp - 0x28]
cmp eax, ecx
je 0x407785
movzx edx, word [ebp - 0x114]
xor edx, 0x20
movzx eax, word [ebp - 0x28]
cmp edx, eax
je 0x407785
movzx ecx, word [ebp - 0x114]
movzx edx, word [ebp - 0x28]
cmp ecx, edx
jge 0x4078a1
mov dword [ebp - 0xb58], 0xffffffff
jmp 0x4078ab
mov dword [ebp - 0xb58], 1
mov eax, dword [ebp - 0xb58]
mov dword [ebp - 0xb5c], eax
cmp dword [ebp - 0xb5c], 0
jne 0x407900
push edi
push ecx
add esp, 4
xor edi, 0x9dd2
pop edi
push ecx
xor ecx, 0x90d4
pop ecx
push edx
push edi
add esp, 4
add edx, 0x5297
xor edx, 0x11387
add edx, 0x2602
and edx, 0x953
pop edx
mov ecx, dword [ebp - 0x25c]
mov dword [ebp - 0x188], ecx
jmp 0x407968
push ebx
xor ebx, 0x13c04
pop ebx
push ebx
push edi
add esp, 4
add ebx, 0x15d3c
sub ebx, 0x1311c
or ebx, 0x956d
pop ebx
push edi
push edx
add esp, 4
or edi, 0x102ff
and edi, 0x1097b
pop edi
mov edx, dword [ebp - 0x25c]
mov eax, dword [edx]
mov dword [ebp - 0x25c], eax
mov ecx, dword [ebp - 0x25c]
cmp ecx, dword [ebp - 0x6b0]
je 0x40795e
mov edx, dword [ebp - 0x25c]
cmp dword [edx + 0x30], 0
jne 0x407729
mov dword [ebp - 0x188], 0
push edi
jmp 0x407972
add edi, 0x6775
pop edi
push edx
push edx
add esp, 4
xor edx, 0xbc28
or edx, 0xce7e
xor edx, 0x8c54
jmp 0x407999
pop edx
cmp dword [ebp - 0x188], 0
jne 0x40826d
mov eax, 0x6b
mov word [ebp - 0xca8], ax
mov ecx, 0x65
mov word [ebp - 0xca6], cx
mov edx, 0x72
mov word [ebp - 0xca4], dx
mov eax, 0x6e
mov word [ebp - 0xca2], ax
mov ecx, 0x65
mov word [ebp - 0xca0], cx
mov edx, 0x6c
mov word [ebp - 0xc9e], dx
mov eax, 0x33
mov word [ebp - 0xc9c], ax
mov ecx, 0x32
mov word [ebp - 0xc9a], cx
mov edx, 0x2e
mov word [ebp - 0xc98], dx
mov eax, 0x64
mov word [ebp - 0xc96], ax
mov ecx, 0x6c
mov word [ebp - 0xc94], cx
mov edx, 0x6c
mov word [ebp - 0xc92], dx
xor eax, eax
mov word [ebp - 0xc90], ax
push edx
jmp 0x407a49
pop edx
push esi
sub esi, 0x86e8
xor esi, 0xfe3f
pop esi
push ebx
sub ebx, 0x12a6e
and ebx, 0x5de4
and ebx, 0x1714b
sub ebx, 0x105f4
pop ebx
mov byte [ebp - 0x4c0], 0x4c
mov byte [ebp - 0x4bf], 0x6f
mov byte [ebp - 0x4be], 0x61
mov byte [ebp - 0x4bd], 0x64
mov byte [ebp - 0x4bc], 0x4c
mov byte [ebp - 0x4bb], 0x69
mov byte [ebp - 0x4ba], 0x62
mov byte [ebp - 0x4b9], 0x72
mov byte [ebp - 0x4b8], 0x61
mov byte [ebp - 0x4b7], 0x72
mov byte [ebp - 0x4b6], 0x79
mov byte [ebp - 0x4b5], 0x57
mov byte [ebp - 0x4b4], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0xe30], ecx
mov edx, dword [ebp - 0xe30]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xe34], eax
mov ecx, dword [ebp - 0xe34]
mov dword [ebp - 0xb60], ecx
push eax
push ecx
add esp, 4
or eax, 0x170a8
pop eax
push edx
push ebx
add esp, 4
sub edx, 0x17931
add edx, 0x6f8d
and edx, 0x2e77
pop edx
push ebx
xor ebx, 0x67b6
sub ebx, 0x15483
pop ebx
cmp dword [ebp - 0xb60], 0
jne 0x407b3f
mov dword [ebp - 0x3cc], 0
jmp 0x407de6
mov edx, dword [ebp - 0xb60]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x6bc], ecx
push edi
push eax
add esp, 4
and edi, 0xb791
pop edi
push esi
push esi
add esp, 4
or esi, 0x849c
pop esi
push ebx
push ebx
add esp, 4
and ebx, 0x12035
sub ebx, 0x8e84
pop ebx
push esi
and esi, 0xb128
pop esi
cmp dword [ebp - 0x6bc], 0
jne 0x407b9b
mov dword [ebp - 0x3cc], 0
jmp 0x407de6
mov edx, dword [ebp - 0x6bc]
mov dword [ebp - 0x258], edx
push esi
and esi, 0x164c9
add esi, 0x10684
pop esi
push edi
or edi, 0xba45
or edi, 0x4fa4
call 0x407bce
add byte [ecx + 0x36], cl
xor eax, 0x834a3c40
les eax, [ebx + ebp*8]
add eax, 0x3a4c4840
inc edi
pop edi
lea eax, [ebp - 0xca8]
mov dword [ebp - 0x6b8], eax
mov ecx, dword [ebp - 0x258]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x6b4], edx
xor eax, eax
mov word [ebp - 0x118], ax
xor ecx, ecx
mov word [ebp - 0x2c], cx
push esi
push edx
add esp, 4
sub esi, 0x9367
xor esi, 0x14b96
and esi, 0x8dfc
sub esi, 0x1d6
pop esi
push eax
or eax, 0x124c8
pop eax
push eax
push edx
add esp, 4
and eax, 0x184f3
pop eax
mov edx, dword [ebp - 0x6b4]
mov ax, word [edx]
mov word [ebp - 0x876], ax
mov ecx, dword [ebp - 0x6b4]
add ecx, 2
mov dword [ebp - 0x6b4], ecx
mov dx, word [ebp - 0x876]
mov word [ebp - 0x118], dx
mov eax, dword [ebp - 0x6b8]
mov cx, word [eax]
mov word [ebp - 0x878], cx
mov edx, dword [ebp - 0x6b8]
add edx, 2
mov dword [ebp - 0x6b8], edx
mov ax, word [ebp - 0x878]
mov word [ebp - 0x2c], ax
push ebx
push eax
add esp, 4
and ebx, 0x4af5
and ebx, 0x142ea
sub ebx, 0xe4f0
pop ebx
push esi
push edx
add esp, 4
and esi, 0xf0b6
and esi, 0x17c20
pop esi
push eax
and eax, 0x682c
pop eax
movzx ecx, word [ebp - 0x2c]
test ecx, ecx
jne 0x407cdb
movzx edx, word [ebp - 0x118]
movzx eax, word [ebp - 0x2c]
sub edx, eax
mov dword [ebp - 0xb68], edx
jmp 0x407d35
movzx ecx, word [ebp - 0x118]
movzx edx, word [ebp - 0x2c]
cmp ecx, edx
je 0x407c03
movzx eax, word [ebp - 0x118]
xor eax, 0x20
movzx ecx, word [ebp - 0x2c]
cmp eax, ecx
je 0x407c03
movzx edx, word [ebp - 0x118]
movzx eax, word [ebp - 0x2c]
cmp edx, eax
jge 0x407d1f
mov dword [ebp - 0xb64], 0xffffffff
jmp 0x407d29
mov dword [ebp - 0xb64], 1
mov ecx, dword [ebp - 0xb64]
mov dword [ebp - 0xb68], ecx
cmp dword [ebp - 0xb68], 0
jne 0x407d7e
push esi
xor esi, 0x9e63
pop esi
push edx
push eax
add esp, 4
jmp 0x407d50
call 0x407d60
add byte [ecx], bh
cmp eax, 0x32384a4e
aaa
cmp edi, dword [edx]
cmp al, byte [ebx - 0x1d7efb3c]
stosd dword es:[edi], eax
jbe 0x407d68
add byte [ecx + 0x2600f2], al
add byte [edx - 0x75], bl
xchg ebp, eax
test al, 0xfd
invalid
push ebx
add ebx, 0x1556f
add ebx, 0x102db
pop ebx
push eax
jmp 0x407d95
xor eax, 0x12148
pop eax
push ecx
push eax
add esp, 4
xor ecx, 0xa8d6
jmp 0x407daf
pop ecx
mov eax, dword [ebp - 0x258]
mov ecx, dword [eax]
mov dword [ebp - 0x258], ecx
mov edx, dword [ebp - 0x258]
cmp edx, dword [ebp - 0x6bc]
je 0x407ddc
mov eax, dword [ebp - 0x258]
cmp dword [eax + 0x30], 0
jne 0x407ba7
mov dword [ebp - 0x3cc], 0
cmp dword [ebp - 0x3cc], 0
jne 0x407e30
push ecx
and ecx, 0x9e1e
or ecx, 0x14e94
call 0x407e09
add byte [ebx + 0x43], al
cmp al, 0x50
inc eax
inc ebx
add esp, 4
pop ecx
push esi
and esi, 0x12ea1
pop esi
push eax
push edx
add esp, 4
sub eax, 0x4335
pop eax
mov dword [ebp - 0x418], 0
jmp 0x408958
push edx
and edx, 0x95ac
pop edx
push edi
push esi
add esp, 4
add edi, 0xec6e
call 0x407e52
add byte [ebx + 0x50], al
cmp eax, dword [edi + 0x4c]
dec edi
dec edi
dec esp
cmp byte [ebx - 0x187efb3c], al
pop es
dec ebp
add byte [eax], al
and edi, 0xcfe1
pop edi
mov ecx, dword [ebp - 0x3cc]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x1b4], edx
mov dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0xb6c], eax
cmp dword [ebp - 0xb6c], 0
jne 0x407ea1
mov ecx, dword [ebp - 0x3dc]
mov dword [ebp - 0x23c], ecx
jmp 0x408192
mov edx, dword [ebp - 0xb6c]
mov eax, dword [ebp - 0x1b4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0xb70], eax
jne 0x407ec9
mov ecx, dword [ebp - 0x3dc]
mov dword [ebp - 0x23c], ecx
jmp 0x408192
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0xb70]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0xb74], edx
cmp dword [ebp - 0xb74], 0
jne 0x407efb
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x23c], eax
jmp 0x408192
mov ecx, dword [ebp - 0x1b4]
add ecx, dword [ebp - 0xb74]
mov dword [ebp - 0x3d0], ecx
jne 0x407f20
mov edx, dword [ebp - 0x3dc]
mov dword [ebp - 0x23c], edx
jmp 0x408192
mov eax, dword [ebp - 0x3d0]
mov ecx, dword [ebp - 0x1b4]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0xe38], ecx
mov edx, dword [ebp - 0x3d0]
mov eax, dword [ebp - 0x1b4]
add eax, dword [edx + 0x24]
mov dword [ebp - 0xe3c], eax
mov ecx, dword [ebp - 0x3d0]
mov edx, dword [ebp - 0x1b4]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0xe40], edx
mov dword [ebp - 0x3d4], 0
jmp 0x407f7a