Function at 0x40caff
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4b8
push ebx
push esi
push edi
push ebx
push esi
add esp, 4
add ebx, 0xdb09
pop ebx
push esi
or esi, 0x16899
pop esi
push esi
push edi
add esp, 4
or esi, 0x1323
add esi, 0x1442f
and esi, 0x3343
and esi, 0xe138
pop esi
mov eax, 0x6b
mov word [ebp - 0x2b0], ax
mov ecx, 0x65
mov word [ebp - 0x2ae], cx
mov edx, 0x72
mov word [ebp - 0x2ac], dx
mov eax, 0x6e
mov word [ebp - 0x2aa], ax
mov ecx, 0x65
mov word [ebp - 0x2a8], cx
mov edx, 0x6c
mov word [ebp - 0x2a6], dx
mov eax, 0x33
mov word [ebp - 0x2a4], ax
mov ecx, 0x32
mov word [ebp - 0x2a2], cx
mov edx, 0x2e
mov word [ebp - 0x2a0], dx
mov eax, 0x64
mov word [ebp - 0x29e], ax
mov ecx, 0x6c
mov word [ebp - 0x29c], cx
mov edx, 0x6c
mov word [ebp - 0x29a], dx
xor eax, eax
mov word [ebp - 0x298], ax
mov dword [ebp - 0x1b0], 0
push edx
call 0x407a46
add byte [eax + edi], dh
aaa
inc ecx
dec esp
aaa
inc esp
inc esp
add esp, 4
add edx, 0xa3bb
pop edx
push ecx
push edi
add esp, 4
and ecx, 0x11ef8
and ecx, 0x707a
jmp 0x407a67
pop ecx
mov byte [ebp - 0x198], 0x47
mov byte [ebp - 0x197], 0x65
mov byte [ebp - 0x196], 0x74
mov byte [ebp - 0x195], 0x4d
mov byte [ebp - 0x194], 0x6f
mov byte [ebp - 0x193], 0x64
mov byte [ebp - 0x192], 0x75
mov byte [ebp - 0x191], 0x6c
mov byte [ebp - 0x190], 0x65
mov byte [ebp - 0x18f], 0x48
mov byte [ebp - 0x18e], 0x61
mov byte [ebp - 0x18d], 0x6e
mov byte [ebp - 0x18c], 0x64
mov byte [ebp - 0x18b], 0x6c
mov byte [ebp - 0x18a], 0x65
mov byte [ebp - 0x189], 0x45
mov byte [ebp - 0x188], 0x78
mov byte [ebp - 0x187], 0x57
mov byte [ebp - 0x186], 0
mov ecx, dword [ebp - 0x4b0]
mov dword [ebp - 0x1b4], ecx
push esi
jmp 0x407b01
call 0x407b10
add byte [ecx], bh
xor dh, byte [0x41413a3d]
dec ecx
cmp eax, 0x8104c483
out 0xea, al
mov bh, 0
add byte [esi + 0x51], bl
add ecx, 0x14941
jmp 0x407b2a
pop ecx
push ebx
or ebx, 0x1825a
pop ebx
push edi
call 0x407b41
add byte [ecx + ecx*2], dh
inc edx
inc esp
inc esp
inc esi
inc esp
add esp, 4
call 0x407b51
add byte [ecx], bh
dec ecx
inc eax
inc ebx
dec ebp
inc esi
dec esp
add esp, 4
jmp 0x407b5c
pop edi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x434], edx
push esi
push edx
add esp, 4
and esi, 0x6f71
add esi, 0xb5c0
call 0x407b87
add byte [edi], dh
inc esi
cmp al, 0x50
xor eax, 0x4c4834b
pop esi
push eax
jmp 0x407b95
and eax, 0x12666
pop eax
mov eax, dword [ebp - 0x434]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x480], ecx
push ebx
call 0x407bbb
add byte [ecx + 0x4f], al
dec edx
dec esi
cmp edx, dword [eax + 0x4b]
xor al, 0x3d
add esp, 4
or ebx, 0x1308b
or ebx, 0x157e8
pop ebx
push esi
push esi
add esp, 4
add esi, 0xd3f6
sub esi, 0xe079
pop esi
mov edx, dword [ebp - 0x480]
mov dword [ebp - 0x368], edx
cmp dword [ebp - 0x368], 0
jne 0x407c30
push edi
jmp 0x407bf8
xor edi, 0x4081
or edi, 0x17a1e
add edi, 0x4e52
pop edi
push edi
call 0x407c1a
add byte [0x4345434d], dh
inc esp
dec esp
add esp, 4
or edi, 0xeffe
pop edi
mov dword [ebp - 0x6c], 0
jmp 0x407fbc
push edx
add edx, 0x119ac
pop edx
push esi
or esi, 0x9ed0
call 0x407c4c
add byte [ecx + 0x4e], al
dec ecx
dec esi
xor eax, 0xc4833c48
add al, 0x5e
push esi
push ecx
add esp, 4
sub esi, 0x4f69
xor esi, 0xdf50
pop esi
mov eax, dword [ebp - 0x368]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x1ec], edx
cmp dword [ebp - 0x1ec], 0
jne 0x407cbb
push edx
push ebx
add esp, 4
add edx, 0xac1
pop edx
push ecx
jmp 0x407c91
or ecx, 0xe361
jmp 0x407ca0
pop ecx
push ebx
and ebx, 0x16f8e
or ebx, 0xc897
pop ebx
mov dword [ebp - 0x6c], 0
jmp 0x407fbc
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0xc4], eax
push edi
or edi, 0xe3e9
add edi, 0x5a9b
pop edi
push edx
push ebx
add esp, 4
sub edx, 0x979a
and edx, 0xa314
jmp 0x407cef
pop edx
push ebx
jmp 0x407cf8
pop ebx
lea ecx, [ebp - 0x2b0]
mov dword [ebp - 0x1e8], ecx
mov edx, dword [ebp - 0xc4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1e4], eax
push ecx
sub ecx, 0xc0b2
sub ecx, 0xa246
xor ecx, 0xbacf
sub ecx, 0xd87a
pop ecx
push edx
push edi
add esp, 4
or edx, 0xedc7
xor edx, 0x107e7
and edx, 0x11b74
pop edx
xor ecx, ecx
mov word [ebp - 0x54], cx
xor edx, edx
mov word [ebp - 8], dx
push edx
push edi
add esp, 4
and edx, 0xddb
pop edx
push edx
push edi
add esp, 4
and edx, 0x6398
pop edx
push ebx
and ebx, 0x116a2
xor ebx, 0xc04d
sub ebx, 0x117d6
sub ebx, 0xf109
pop ebx
mov eax, dword [ebp - 0x1e4]
mov cx, word [eax]
mov word [ebp - 0x288], cx
mov edx, dword [ebp - 0x1e4]
add edx, 2
mov dword [ebp - 0x1e4], edx
mov ax, word [ebp - 0x288]
mov word [ebp - 0x54], ax
push edx
push ebx
add esp, 4
add edx, 0x18293
sub edx, 0x1630c
call 0x407dce
add byte [edi + 0x47], cl
cmp byte [edi + 0x47], cl
xor bh, byte [eax + ecx*2]
inc edx
add esp, 4
pop edx
push esi
jmp 0x407dd9
xor esi, 0x4ce5
pop esi
mov ecx, dword [ebp - 0x1e8]
mov dx, word [ecx]
mov word [ebp - 0x28a], dx
mov eax, dword [ebp - 0x1e8]
add eax, 2
mov dword [ebp - 0x1e8], eax
mov cx, word [ebp - 0x28a]
mov word [ebp - 8], cx
push ecx
push edi
add esp, 4
and ecx, 0x4d4c
pop ecx
push ecx
sub ecx, 0x7cde
sub ecx, 0xc435
pop ecx
push edi
push eax
add esp, 4
call 0x407e38
add byte [eax + 0x44], al
dec ebp
inc ecx
xor eax, 0x4144424a
add esp, 4
pop edi
movzx edx, word [ebp - 8]
test edx, edx
jne 0x407e59
movzx eax, word [ebp - 0x54]
movzx ecx, word [ebp - 8]
sub eax, ecx
mov dword [ebp - 0x370], eax
jmp 0x407edc
movzx edx, word [ebp - 0x54]
movzx eax, word [ebp - 8]
cmp edx, eax
je 0x407d52
movzx ecx, word [ebp - 0x54]
xor ecx, 0x20
movzx edx, word [ebp - 8]
cmp ecx, edx
je 0x407d52
push ebx
push eax
add esp, 4
xor ebx, 0x179dd
pop ebx
push edx
or edx, 0x14602
sub edx, 0x1d84
pop edx
push edi
add edi, 0x13de4
call 0x407eaa
add byte [ebp + edi + 0x4d], al
xor cl, byte [eax + 0x42]
push eax
add esp, 4
pop edi
movzx eax, word [ebp - 0x54]
movzx ecx, word [ebp - 8]
cmp eax, ecx
jge 0x407ec6
mov dword [ebp - 0x36c], 0xffffffff
jmp 0x407ed0
mov dword [ebp - 0x36c], 1
mov edx, dword [ebp - 0x36c]
mov dword [ebp - 0x370], edx
cmp dword [ebp - 0x370], 0
jne 0x407f25
push ecx
push esi
add esp, 4
xor ecx, 0xd787
call 0x407efc
add byte [ebx + 0x4c], al
cmp al, 0x43
inc eax
dec edx
add esp, 4
call 0x407f0d
add byte [eax + 0x4d], dl
inc ecx
cmp eax, 0x3c4a3e40
add esp, 4
or ecx, 0xec11
pop ecx
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x6c], eax
jmp 0x407fbc
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx]
mov dword [ebp - 0xc4], edx
push esi
push edi
add esp, 4
add esi, 0x11e80
and esi, 0x3d91
sub esi, 0x17180
pop esi
push edx
or edx, 0xc5e9
or edx, 0x1d11
or edx, 0x6f4f
xor edx, 0xd545
pop edx
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x1ec]
je 0x407f83
mov ecx, dword [ebp - 0xc4]
cmp dword [ecx + 0x30], 0
jne 0x407cc7
push ebx
sub ebx, 0x36ba
add ebx, 0x1c73
or ebx, 0xb499
pop ebx
push ebx
push esi
add esp, 4
add ebx, 0xb129
or ebx, 0xfb55
pop ebx
push ecx
push eax
add esp, 4
or ecx, 0x10ddb
pop ecx
mov dword [ebp - 0x6c], 0
cmp dword [ebp - 0x6c], 0
jne 0x408c71
push ecx
jmp 0x407fcf
pop ecx
push edi
push eax
add esp, 4
sub edi, 0xae9a
call 0x407fe8
add byte [edi], dh
dec ebx
cmp dh, byte [esi]
cmp eax, 0xc4833841
add al, 0x5f
push edx
push eax
add esp, 4
and edx, 0x81f2
pop edx
mov edx, 0x6b
mov word [ebp - 0x3bc], dx
mov eax, 0x65
mov word [ebp - 0x3ba], ax
mov ecx, 0x72
mov word [ebp - 0x3b8], cx
mov edx, 0x6e
mov word [ebp - 0x3b6], dx
mov eax, 0x65
mov word [ebp - 0x3b4], ax
mov ecx, 0x6c
mov word [ebp - 0x3b2], cx
mov edx, 0x33
mov word [ebp - 0x3b0], dx
mov eax, 0x32
mov word [ebp - 0x3ae], ax
mov ecx, 0x2e
mov word [ebp - 0x3ac], cx
mov edx, 0x64
mov word [ebp - 0x3aa], dx
mov eax, 0x6c
mov word [ebp - 0x3a8], ax
mov ecx, 0x6c
mov word [ebp - 0x3a6], cx
xor edx, edx
mov word [ebp - 0x3a4], dx
push eax
sub eax, 0x144dc
or eax, 0x162ab
or eax, 0x5fe
pop eax
push edi
push eax
add esp, 4
and edi, 0xe23f
add edi, 0x37df
add edi, 0xc7ec
sub edi, 0x17854
pop edi
mov byte [ebp - 0x154], 0x4c
mov byte [ebp - 0x153], 0x6f
mov byte [ebp - 0x152], 0x61
mov byte [ebp - 0x151], 0x64
mov byte [ebp - 0x150], 0x4c
mov byte [ebp - 0x14f], 0x69
mov byte [ebp - 0x14e], 0x62
mov byte [ebp - 0x14d], 0x72
mov byte [ebp - 0x14c], 0x61
mov byte [ebp - 0x14b], 0x72
mov byte [ebp - 0x14a], 0x79
mov byte [ebp - 0x149], 0x57
mov byte [ebp - 0x148], 0
push ecx
push esi
add esp, 4
call 0x408132
add byte [eax], bh
cmp dword [ebx], esi
inc esp
xor eax, 0x4b454b50
add esp, 4
xor ecx, 0x113c3
pop ecx
push edi
push edx
add esp, 4
jmp 0x408149
or edi, 0x799a
pop edi
push ebx
or ebx, 0xf1dd
add ebx, 0xf024
or ebx, 0x1ddc
call 0x408170
add byte [ecx], bh
inc esp
dec eax
inc edx
inc esi
dec esi
inc ebp
add esp, 4
pop ebx
push ebx
or ebx, 0x111af
sub ebx, 0x14686
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x484], eax
push ecx
push edx
add esp, 4
add ecx, 0x141b8
pop ecx
push esi
push ecx
add esp, 4
xor esi, 0x5894
and esi, 0x2d56
add esi, 0x15fb5
xor esi, 0x16db0
pop esi
push esi
sub esi, 0xaa1c
pop esi
mov ecx, dword [ebp - 0x484]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x488], edx
push esi
push ebx
add esp, 4
add esi, 0x8d6c
pop esi
push edi
add edi, 0x16f3e
xor edi, 0x16ae0
pop edi
push edx
jmp 0x4081ef
add edx, 0x107a5
pop edx
push esi
push edx
add esp, 4
jmp 0x408200
pop esi
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0
jne 0x408257
push eax
and eax, 0x46d9
and eax, 0x7f9a
add eax, 0x69a4
pop eax
push ecx
push ecx
add esp, 4
add ecx, 0x1697
and ecx, 0x513
or ecx, 0x10ad0
xor ecx, 0xe3e4
pop ecx
mov dword [ebp - 0x118], 0
jmp 0x4085ec
push esi
push edx
add esp, 4
add esi, 0xfaa5
and esi, 0x1b0f
pop esi
push edi
or edi, 0x6e0b
jmp 0x408277
call 0x408285
add byte [ebx + 0x50], cl
cmp cl, byte [ebp + 0x39]
cmp bh, byte [edi]
dec ebx
add esp, 4
pop edi
mov ecx, dword [ebp - 0x374]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0
jne 0x4082e5
push esi
jmp 0x4082ac
call 0x4082b9
add byte [esi + 0x4d], cl
cmp dword [esp + edi], edi
inc ebp
add esp, 4
call 0x4082cc
add byte [eax + 0x34], dl
xor eax, dword [ebx + 0x3d]
dec edi
dec esp
inc edi
inc esi
cmp eax, 0x8104c483
test byte [esi + ebx], 0
add byte [esi - 0x39], bl
test eax, ebp
invalid
mov ecx, dword [ebp - 0x1f8]
mov dword [ebp - 0xc0], ecx
push eax
jmp 0x4082f8
pop eax
push ecx
push ebx
add esp, 4
xor ecx, 0x1223d
add ecx, 0x119f5
pop ecx
push ebx
push eax
add esp, 4
sub ebx, 0x14f24
and ebx, 0x15be0
and ebx, 0xa508
pop ebx
lea edx, [ebp - 0x3bc]
mov dword [ebp - 0x1f4], edx
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1f0], ecx
push ecx
push edi
add esp, 4
add ecx, 0xb420
sub ecx, 0x3ebf
and ecx, 0x224f
sub ecx, 0x1673b
pop ecx
push eax
push esi
add esp, 4
and eax, 0x54f0
pop eax
push eax
sub eax, 0x1624e
pop eax
xor edx, edx
mov word [ebp - 0x58], dx
xor eax, eax
mov word [ebp - 0xc], ax
push esi
xor esi, 0x514b
pop esi
push ecx
push ebx
add esp, 4
add ecx, 0xb5f0
xor ecx, 0xe64
pop ecx
push eax
add eax, 0x7922
pop eax
push ecx
or ecx, 0x16b03
pop ecx
push eax
xor eax, 0x21ac
pop eax
mov ecx, dword [ebp - 0x1f0]
mov dx, word [ecx]
mov word [ebp - 0x28c], dx
mov eax, dword [ebp - 0x1f0]
add eax, 2
mov dword [ebp - 0x1f0], eax
mov cx, word [ebp - 0x28c]
mov word [ebp - 0x58], cx
push edx
push edi
add esp, 4
or edx, 0x102c6
pop edx
push edx
add edx, 0x13cda
call 0x4083f7
add byte [edi], dh
cmp dword [edi], esi
dec eax
dec ebp
dec ebp
add esp, 4
call 0x408406
add byte [edi + ecx*2], dh
inc edi
inc ecx
cmp dword [edi], esi
add esp, 4
pop edx
mov edx, dword [ebp - 0x1f4]
mov ax, word [edx]
mov word [ebp - 0x28e], ax
mov ecx, dword [ebp - 0x1f4]
add ecx, 2
mov dword [ebp - 0x1f4], ecx
mov dx, word [ebp - 0x28e]
mov word [ebp - 0xc], dx
push esi
push esi
add esp, 4
and esi, 0x2c85
pop esi
push esi
or esi, 0xd9ff
and esi, 0xaf73
and esi, 0x4741
pop esi
push edx
push esi
add esp, 4
xor edx, 0x7be4
sub edx, 0x1832e
pop edx
movzx eax, word [ebp - 0xc]
test eax, eax
jne 0x408483
movzx ecx, word [ebp - 0x58]
movzx edx, word [ebp - 0xc]
sub ecx, edx
mov dword [ebp - 0x37c], ecx
jmp 0x408506
movzx eax, word [ebp - 0x58]
movzx ecx, word [ebp - 0xc]
cmp eax, ecx
je 0x40837c
movzx edx, word [ebp - 0x58]
xor edx, 0x20
movzx eax, word [ebp - 0xc]
cmp edx, eax
je 0x40837c
push eax
push eax
add esp, 4
call 0x4084b9
add byte [eax + 0x4a], dl
xor al, 0x4e
dec edi
xor al, byte [eax + 0x3f]
add esp, 4
sub eax, 0x873
pop eax
push edx
push esi
add esp, 4
call 0x4084d4
add byte [esi + 0x3b], cl
inc edi
dec edi
dec edx
dec esi
add esp, 4
pop edx
movzx ecx, word [ebp - 0x58]
movzx edx, word [ebp - 0xc]
cmp ecx, edx
jge 0x4084f0
mov dword [ebp - 0x378], 0xffffffff
jmp 0x4084fa
mov dword [ebp - 0x378], 1
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0
jne 0x408552
push edx
sub edx, 0x8695
pop edx
push eax
add eax, 0xcee2
add eax, 0xaaca
pop eax
push eax
jmp 0x40852e
and eax, 0xe194
pop eax
push esi
push edx
add esp, 4
add esi, 0x8b6c
pop esi
mov ecx, dword [ebp - 0xc0]
mov dword [ebp - 0x118], ecx
jmp 0x4085ec
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx]
mov dword [ebp - 0xc0], eax
push edi
push edi
add esp, 4
call 0x408574
add byte [eax + edi + 0x43], al
push eax
dec ecx
xor al, 0x44
dec eax
inc ebx
add esp, 4
xor edi, 0xce3e
or edi, 0x13ce2
pop edi
push ebx
add ebx, 0x308e
or ebx, 0xfc7b
pop ebx
mov ecx, dword [ebp - 0xc0]
cmp ecx, dword [ebp - 0x1f8]
je 0x4085b0
mov edx, dword [ebp - 0xc0]
cmp dword [edx + 0x30], 0
jne 0x4082f1
push ecx
push ebx
add esp, 4
and ecx, 0x155a3
add ecx, 0x14973
jmp 0x4085c9
add ecx, 0x179aa
pop ecx
push eax
push eax
add esp, 4
add eax, 0x437b
and eax, 0x13a16
pop eax
mov dword [ebp - 0x118], 0
cmp dword [ebp - 0x118], 0
jne 0x408636
push ebx
push ebx
add esp, 4
xor ebx, 0x16ea1
jmp 0x408605
pop ebx
push edx
xor edx, 0xf85c
and edx, 0x16167
call 0x408623
add byte [esi], dh
xor eax, 0x39454140
dec eax
xor eax, 0xc4835049
add al, 0x5a
mov dword [ebp - 0x1b4], 0
jmp 0x409732
mov eax, dword [ebp - 0x118]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x128], 0
push ebx
jmp 0x408655
pop ebx
push eax
push eax
add esp, 4
add eax, 0x10e2b
pop eax
push ecx
push ecx
add esp, 4
xor ecx, 0x47f8
and ecx, 0x17cec
jmp 0x40867a
xor ecx, 0x7915
pop ecx
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x380], edx
cmp dword [ebp - 0x380], 0
jne 0x4086d9
push edx
push esi
add esp, 4
jmp 0x4086a4
sub edx, 0x11de8
pop edx
push edi
or edi, 0x15c42
jmp 0x4086b9
jmp 0x4086c1
and edi, 0x178ee
pop edi
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x98], eax
jmp 0x408bc8
mov ecx, dword [ebp - 0x380]
mov edx, dword [ebp - 0x8c]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x384], edx
jne 0x408701
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x98], eax
jmp 0x408bc8
push edi
push esi
add esp, 4
xor edi, 0x9279
add edi, 0x1446
pop edi
push ebx
or ebx, 0x123da
pop ebx
push edx
push edi
add esp, 4
add edx, 0x1219d
or edx, 0x9c2c
or edx, 0xec88
pop edx
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x384]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x2b4], ecx
cmp dword [ebp - 0x2b4], 0
jne 0x408797
push edx
sub edx, 0x146f6
xor edx, 0xd9ee
xor edx, 0xfb00
sub edx, 0x8ecf
pop edx
push esi
push eax
add esp, 4
or esi, 0x2359
or esi, 0x209e
sub esi, 0x3406
pop esi
mov edx, dword [ebp - 0x128]
mov dword [ebp - 0x98], edx
jmp 0x408bc8
push edi
xor edi, 0x1d65
xor edi, 0x21b3
sub edi, 0x172e8
pop edi
push edx
or edx, 0x16454
add edx, 0x1065c
call 0x4087c5
add byte [ecx], bh
dec ebx
dec edi
xor cl, byte [ecx + 0x49]
dec edi
add esp, 4
pop edx
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x11c], eax
jne 0x408820
push ecx
add ecx, 0x183c1
pop ecx
push edx
push eax
add esp, 4
and edx, 0x771b
pop edx
push ecx
call 0x4087ff
add byte [eax], bh
inc edi
xor al, 0x40
dec eax
inc ebp
cmp al, 0x83
les eax, [ecx + eax*4]
shr ebx, 0xa4
add byte [eax], al
and ecx, 0x139be
pop ecx
mov ecx, dword [ebp - 0x128]
mov dword [ebp - 0x98], ecx
jmp 0x408bc8
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x48c], eax
push eax
xor eax, 0x2f69
xor eax, 0x5a6d
jmp 0x40884b
pop eax
push esi
xor esi, 0x7fdf
pop esi
push edi
call 0x408863
add byte [eax + 0x34], dl
inc edx
dec esp
push eax
inc ebp
inc ecx
add esp, 4
pop edi
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x8c]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x490], edx
push ecx
push esi
add esp, 4
xor ecx, 0x13c3c
xor ecx, 0x10688
pop ecx
push edi
push esi
add esp, 4
call 0x4088a3
add byte [esi + 0x4e], al
aas
dec ebp
inc edx
cmp eax, dword [ecx + 0x49]
xor bh, byte [eax]
add esp, 4
jmp 0x4088ad
pop edi
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x494], ecx
mov dword [ebp - 0x120], 0
jmp 0x4088de
mov edx, dword [ebp - 0x120]
add edx, 1
mov dword [ebp - 0x120], edx
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x120]
cmp ecx, dword [eax + 0x18]
jae 0x408bbc
push edi
or edi, 0x1f0f
add edi, 0x41cd
xor edi, 0x1418c
pop edi
push ebx
push eax
add esp, 4
call 0x408919
add byte [eax + 0x4b], al
xor edi, dword [eax]
inc edx
cmp eax, 0x4c48341
pop ebx
push edi
xor edi, 0x168d8
pop edi
mov edx, dword [ebp - 0x120]
mov eax, dword [ebp - 0x48c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x124], ecx
push edx
push ecx
add esp, 4
xor edx, 0x1386c
and edx, 0x72f4
or edx, 0x1818f
pop edx
push ecx
push eax
add esp, 4
sub ecx, 0x5be3
and ecx, 0x8a4b
pop ecx
push esi
sub esi, 0x1836c
pop esi
mov edx, dword [ebp - 0x120]
mov eax, dword [ebp - 0x490]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x498], eax
push esi
push eax
add esp, 4
jmp 0x4089a4
and esi, 0x34b4
pop esi
push edi
push ecx
add esp, 4
and edi, 0x14f8f
and edi, 0x788
and edi, 0x15122
or edi, 0x107df
pop edi
mov dword [ebp - 0x2c], 0
jmp 0x4089db
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x124]
add edx, dword [ebp - 0x2c]
movsx eax, byte [edx]
test eax, eax
je 0x408a77
mov ecx, dword [ebp - 0x2c]
movsx edx, byte [ebp + ecx - 0x154]
test edx, edx
je 0x408a77
push ebx
or ebx, 0x14b4e
xor ebx, 0x678c
pop ebx
push edx
push eax
add esp, 4
add edx, 0x53a7
pop edx
push edx
push ecx
add esp, 4
add edx, 0x10b1a
or edx, 0x127c9
and edx, 0x16903
pop edx
mov eax, dword [ebp - 0x124]
add eax, dword [ebp - 0x2c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x2c]
movsx eax, byte [ebp + edx - 0x154]
cmp ecx, eax
je 0x408a69
mov ecx, dword [ebp - 0x124]
add ecx, dword [ebp - 0x2c]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x2c]
movsx ecx, byte [ebp + eax - 0x154]
cmp edx, ecx
jne 0x408a70
jmp 0x4089d2
jmp 0x408a77
push edx
push edx
add esp, 4
or edx, 0x57cd
pop edx
push esi
add esi, 0xc646
pop esi
push ebx
push ebx
add esp, 4
add ebx, 0x2bf3
and ebx, 0xe5d7
pop ebx
push edx
push edx
add esp, 4
and edx, 0xa583
pop edx
mov edx, dword [ebp - 0x124]
add edx, dword [ebp - 0x2c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x2c]
movsx edx, byte [ebp + ecx - 0x154]
cmp eax, edx
jne 0x408ad3
mov dword [ebp - 0x1fc], 0
jmp 0x408b6e
push edi
push ebx
add esp, 4
or edi, 0x16519
call 0x408aed
add byte [esi + 0x43], al
aaa
cmp al, 0x32
inc edi
dec ebx
cmp al, 0x3d
add esp, 4
pop edi
push ebx
xor ebx, 0xe2c2
jmp 0x408afe
sub ebx, 0x1121a
pop ebx
mov eax, dword [ebp - 0x124]
add eax, dword [ebp - 0x2c]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x2c]
movsx eax, byte [ebp + edx - 0x154]
or eax, 0x20
cmp ecx, eax
jge 0x408b32
mov dword [ebp - 0x1fc], 0xffffffff
jmp 0x408b6e
push ebx
push esi
add esp, 4
sub ebx, 0x6feb
or ebx, 0x833
and ebx, 0x4364
sub ebx, 0x16f0e
pop ebx
push esi
call 0x408b60
add byte [eax], bh
cmp byte [edi], bh
inc edx
xor al, byte [edi + 0x32]
dec ecx
add esp, 4
pop esi
mov dword [ebp - 0x1fc], 1
cmp dword [ebp - 0x1fc], 0
jne 0x408bb7
push ecx
push edi
add esp, 4
and ecx, 0x15cde
pop ecx
push ecx
and ecx, 0xe45
and ecx, 0x177ec
and ecx, 0x14e81
call 0x408ba5
add byte [ebp + 0x39], al
xor al, 0x3d
dec esp
cmp al, byte [esi + 0x43]
xor eax, 0x5904c483
mov ecx, dword [ebp - 0x498]
mov dword [ebp - 0x98], ecx
jmp 0x408bc8
jmp 0x4088cf
mov edx, dword [ebp - 0x128]
mov dword [ebp - 0x98], edx
cmp dword [ebp - 0x98], 0
je 0x408c71
push esi
and esi, 0x5a8a
sub esi, 0x15e16
and esi, 0x14ed0
pop esi
push ebx
push edx
add esp, 4
sub ebx, 0x4e49
or ebx, 0x138e1
or ebx, 0x75e1
sub ebx, 0x1816d
pop ebx
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x49c], eax
mov ecx, dword [ebp - 0x49c]
mov dword [ebp - 0x4a0], ecx
lea edx, [ebp - 0x2b0]
push edx
call dword [ebp - 0x4a0]
test eax, eax
jne 0x408c71
push edi
add edi, 0xb065
add edi, 0x14a15
pop edi
push edi
push edx
add esp, 4
sub edi, 0xbc13
call 0x408c58
add byte [ebx + esi], bh
xor al, 0x4c
xor al, 0x36
cmp dword [ecx], edi
inc esi
add esp, 4
and edi, 0x80d2
pop edi
mov dword [ebp - 0x1b4], 0
jmp 0x409732
push ecx
and ecx, 0x204e
xor ecx, 0x137b
or ecx, 0x14022
pop ecx
push edx
or edx, 0xcf2d
call 0x408c98
add byte [0x324b4046], bh
dec ebp
add esp, 4
jmp 0x408ca2
pop edx
push eax
push eax
add esp, 4
sub eax, 0x1307e
call 0x408cbc
add byte [edx + eax*2 + 0x4b], cl
inc esi
inc edx
inc ebx
push eax
aaa
add esp, 4
pop eax
push eax
push eax
add esp, 4
sub eax, 0x2fae
pop eax
push edx
jmp 0x408cd4
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x4a4], eax
push edi
xor edi, 0x16267
sub edi, 0x141c8
sub edi, 0x834
xor edi, 0xa20c
pop edi
push esi
push ebx
add esp, 4
sub esi, 0x12a24
pop esi
push ecx
push eax
add esp, 4
sub ecx, 0x168f
pop ecx
mov ecx, dword [ebp - 0x4a4]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x3dc], edx
push eax
push eax
add esp, 4
or eax, 0x7d19
sub eax, 0x13ec3
add eax, 0x10a28
and eax, 0x12a60
pop eax
push ecx
xor ecx, 0x93a0
or ecx, 0x14d5
or ecx, 0x166dc
pop ecx
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0
jne 0x408da7
push esi
push edi
add esp, 4
xor esi, 0x1827e
pop esi
push eax
call 0x408d85
add byte [edi], bh
dec esi
cmp ecx, dword [ebp + 0x36]
xor al, 0x3d
dec esp
xor al, byte [ebx + 0x565804c4]
push ecx
add esp, 4
and esi, 0xce86
jmp 0x408d9a
pop esi
mov dword [ebp - 0x6c], 0
jmp 0x409133
push ebx
sub ebx, 0xd46e
xor ebx, 0xe921
xor ebx, 0x156a7
xor ebx, 0x7ac5
pop ebx
push edi
push ebx
add esp, 4
add edi, 0x19df
add edi, 0x144b0
xor edi, 0x30d5
pop edi
mov ecx, dword [ebp - 0x2b8]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
jne 0x408e32
push ecx
or ecx, 0x9570
call 0x408e0a
add byte [edi], dh
dec ebx
inc esp
inc ecx
aas
inc edx
inc edx
aas
add esp, 4
pop ecx
push ebx
push edx
add esp, 4
or ebx, 0x1def
add ebx, 0x12521
xor ebx, 0x14e80
pop ebx
mov dword [ebp - 0x6c], 0
jmp 0x409133
mov ecx, dword [ebp - 0x208]
mov dword [ebp - 0xc8], ecx
push edx
sub edx, 0x185ee
or edx, 0xaae6
sub edx, 0xd2be
and edx, 0x170c
pop edx
push esi
push edi
add esp, 4
and esi, 0xea44
xor esi, 0x39e9
or esi, 0x18003
pop esi
lea edx, [ebp - 0x2b0]
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0xc8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x200], ecx
push edx
push edi
add esp, 4
and edx, 0xa29a
sub edx, 0x10828
pop edx
push esi
push ebx
add esp, 4
xor esi, 0xc2d1
pop esi
push eax
push edi
add esp, 4
add eax, 0x4986
pop eax
push eax
sub eax, 0x5828
pop eax
xor edx, edx
mov word [ebp - 0x5c], dx
xor eax, eax
mov word [ebp - 0x10], ax
push ecx
jmp 0x408ed3
sub ecx, 0x13b59
pop ecx
push ecx
sub ecx, 0x8a6e
pop ecx
push ecx
jmp 0x408eec
add ecx, 0x85f5
pop ecx
push ebx
and ebx, 0x1b8c
pop ebx
mov ecx, dword [ebp - 0x200]
mov dx, word [ecx]
mov word [ebp - 0x290], dx
mov eax, dword [ebp - 0x200]
add eax, 2
mov dword [ebp - 0x200], eax
mov cx, word [ebp - 0x290]
mov word [ebp - 0x5c], cx
push esi
add esi, 0x16151
or esi, 0x8faf
jmp 0x408f3b
xor esi, 0xe9c3
pop esi
push ebx
call 0x408f53
add byte [edi + 0x3b], cl
dec ebx
dec ecx
cmp byte [0x3d374b3c], bh
add esp, 4
pop ebx
mov edx, dword [ebp - 0x204]
mov ax, word [edx]
mov word [ebp - 0x292], ax
mov ecx, dword [ebp - 0x204]
add ecx, 2
mov dword [ebp - 0x204], ecx
mov dx, word [ebp - 0x292]
mov word [ebp - 0x10], dx
push edi
push esi
add esp, 4
sub edi, 0x6f48
pop edi
push ebx
or ebx, 0x114c2
or ebx, 0x49a1
call 0x408fa9
add byte [ecx + 0x3b], cl
cmp al, 0x4c
inc esi
dec ebp
cmp al, 0x4a
cmp eax, dword [ebx - 0x1c7efb3c]
jg 0x408f64
std
invalid
add byte [eax], al
pop ebx
movzx eax, word [ebp - 0x10]
test eax, eax
jne 0x408fd0
movzx ecx, word [ebp - 0x5c]
movzx edx, word [ebp - 0x10]
sub ecx, edx
mov dword [ebp - 0x2c0], ecx
jmp 0x409053
movzx eax, word [ebp - 0x5c]
movzx ecx, word [ebp - 0x10]
cmp eax, ecx
je 0x408ec9
movzx edx, word [ebp - 0x5c]
xor edx, 0x20
movzx eax, word [ebp - 0x10]
cmp edx, eax
je 0x408ec9
push esi
push ecx
add esp, 4
add esi, 0x591
pop esi
push ecx
add ecx, 0xcfba
sub ecx, 0x16c64
pop ecx
push edi
push ebx
add esp, 4
add edi, 0x7e7a
sub edi, 0x175b
sub edi, 0x1751a
pop edi
movzx ecx, word [ebp - 0x5c]
movzx edx, word [ebp - 0x10]
cmp ecx, edx
jge 0x40903d
mov dword [ebp - 0x2bc], 0xffffffff
jmp 0x409047
mov dword [ebp - 0x2bc], 1
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0
jne 0x40909c
push ecx
add ecx, 0x27af
sub ecx, 0x11cc0
or ecx, 0x4e36
pop ecx
push ebx
push eax
add esp, 4
and ebx, 0xbddc
call 0x40908a
add byte [esp + ecx*2 + 0x48], al
cmp al, 0x38
xor al, 0x38
cmp esi, dword [ebx]
add esp, 4
pop ebx
mov ecx, dword [ebp - 0xc8]
mov dword [ebp - 0x6c], ecx
jmp 0x409133
mov edx, dword [ebp - 0xc8]
mov eax, dword [edx]
mov dword [ebp - 0xc8], eax
push esi
push esi
add esp, 4
xor esi, 0x164c8
xor esi, 0x17be7
xor esi, 0x7716
and esi, 0x3269
pop esi
push ebx
and ebx, 0x4a59
pop ebx
push eax
push edx
add esp, 4
add eax, 0xe7b0
pop eax
mov ecx, dword [ebp - 0xc8]
cmp ecx, dword [ebp - 0x208]
je 0x4090fa
mov edx, dword [ebp - 0xc8]
cmp dword [edx + 0x30], 0
jne 0x408e3e
push edi
push esi
add esp, 4
xor edi, 0xe5b4
sub edi, 0x5582
and edi, 0xed91
pop edi
push edi
push edi
add esp, 4
sub edi, 0xdac3
pop edi
push ecx
or ecx, 0x16a05
and ecx, 0x8fed
pop ecx
mov dword [ebp - 0x6c], 0
push esi
push ebx
add esp, 4
add esi, 0x748c
and esi, 0x169c2
xor esi, 0xb06d
and esi, 0x12a2f
pop esi
push edx
add edx, 0x16c4e
xor edx, 0x9779
sub edx, 0x17b02
pop edx
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x88], ecx
push eax
push edx
add esp, 4
and eax, 0xaeaa
pop eax
push eax
and eax, 0x13046
and eax, 0x4139
sub eax, 0xc979
sub eax, 0x8788
pop eax
push ebx
push esi
add esp, 4
or ebx, 0x24e7
pop ebx
mov dword [ebp - 0x138], 0
push ecx
push edi
add esp, 4
or ecx, 0x10dae
call 0x4091c7
add byte [edx], bh
dec ebx
dec ebp
dec eax
aas
cmp byte [ecx + 0x35], cl
dec esi
add esp, 4
and ecx, 0xe4ed
pop ecx
push eax
add eax, 0x15785
add eax, 0x1715b
pop eax
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0x2c4], edx
cmp dword [ebp - 0x2c4], 0
jne 0x409237
push edi
sub edi, 0x3594
call 0x409207
add byte [esi], bh
inc ebp
aaa
inc ebp
xor al, 0x38
add esp, 4
sub edi, 0x168ae
jmp 0x409219
pop edi
push ecx
push esi
add esp, 4
and ecx, 0x7a1c
pop ecx
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x9c], eax
jmp 0x409726
mov ecx, dword [ebp - 0x2c4]
mov edx, dword [ebp - 0x88]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x2c8], edx
jne 0x40925f
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x9c], eax
jmp 0x409726
push eax
or eax, 0x13339
or eax, 0x163d9
pop eax
push edx
add edx, 0xe7bd
sub edx, 0x12596
or edx, 0x603d
pop edx
push ebx
xor ebx, 0x12bd
pop ebx
push ecx
sub ecx, 0x753e
pop ecx
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x2cc], ecx
cmp dword [ebp - 0x2cc], 0
jne 0x4092f5
push esi
push ecx
add esp, 4
and esi, 0xc741
sub esi, 0xcaf3
or esi, 0x176bb
sub esi, 0xc70b
pop esi
push ecx
push esi
add esp, 4
or ecx, 0x128ba
pop ecx
push esi
add esi, 0x597a
pop esi
mov edx, dword [ebp - 0x138]
mov dword [ebp - 0x9c], edx
jmp 0x409726
push ebx
push esi
add esp, 4
add ebx, 0xdd98
and ebx, 0x16f0f
pop ebx
push edi
sub edi, 0x17b19
xor edi, 0xca33
call 0x409323
add byte [edx], dh
aas
cmp bh, byte [edi]
dec ecx
dec eax
inc ecx
add esp, 4
pop edi
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x12c], eax
jne 0x40937e
push esi
jmp 0x409341
call 0x409351
add byte [0x3f423635], bh
xor al, 0x4a
inc edi
inc ebx
add esp, 4
and esi, 0x1015
pop esi
push eax
push ecx
add esp, 4
xor eax, 0x102b8
and eax, 0x17b4f
pop eax
mov ecx, dword [ebp - 0x138]
mov dword [ebp - 0x9c], ecx
jmp 0x409726
mov edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x88]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x3e0], eax
push edx
xor edx, 0x1fb7
pop edx
push edx
xor edx, 0x34a2
call 0x4093b2
add byte [edi + eax*2 + 0x47], al
dec eax
dec ecx
cmp al, 0x43
dec eax
dec eax
cmp byte [ebx + 0x7e804c4], al
add byte [eax], al
add byte [eax], al
cmp dword [edx], esi
inc eax
xor al, 0x32
dec esp
add esp, 4
pop edx
mov ecx, dword [ebp - 0x12c]
mov edx, dword [ebp - 0x88]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x3e4], edx
push eax
push ecx
add esp, 4
add eax, 0x8976
pop eax
push edx
push edi
add esp, 4
and edx, 0x134e5
jmp 0x4093fa
xor edx, 0x51bd
pop edx
push edi
jmp 0x40940b
pop edi
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x88]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x3e8], ecx
mov dword [ebp - 0x130], 0
jmp 0x40943c
mov edx, dword [ebp - 0x130]
add edx, 1
mov dword [ebp - 0x130], edx
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x130]
cmp ecx, dword [eax + 0x18]
jae 0x40971a
push ecx
push eax
add esp, 4
jmp 0x40945b
or ecx, 0x17f2c
pop ecx
push edx
push edi
add esp, 4
and edx, 0x8513
xor edx, 0x15214
call 0x40947f
add byte [esi], bh
dec ebx
xor bh, byte [0xc4834143]
add al, 0x5a
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x3e0]
mov ecx, dword [ebp - 0x88]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x134], ecx
push eax
add eax, 0x12f15
pop eax
push edx
xor edx, 0xf4
add edx, 0x54a5
pop edx
push ebx
and ebx, 0x3c51
sub ebx, 0x62f6
pop ebx
push eax
sub eax, 0xf116
xor eax, 0xdd3f
pop eax
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x3e4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x3e8]
mov eax, dword [ebp - 0x88]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x3ec], eax
push eax
push esi
add esp, 4
jmp 0x409500
pop eax
push edx
sub edx, 0xf6f3
or edx, 0x6c63
xor edx, 0xe8b8
or edx, 0xda34
pop edx
push ecx
push edi
add esp, 4
or ecx, 0x14a65
pop ecx
mov dword [ebp - 0x30], 0
jmp 0x409539
mov ecx, dword [ebp - 0x30]
add ecx, 1
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x134]
add edx, dword [ebp - 0x30]
movsx eax, byte [edx]
test eax, eax
je 0x4095d5
mov ecx, dword [ebp - 0x30]
movsx edx, byte [ebp + ecx - 0x198]
test edx, edx
je 0x4095d5
push edi
call 0x40956b
add byte [ebp + 0x34], al
cmp byte [ecx], bh
dec eax
dec ecx
inc ecx
dec ecx
add esp, 4
pop edi
push esi
push edi
add esp, 4
xor esi, 0x78ae
add esi, 0x13b0c
jmp 0x409587
sub esi, 0x1161f
pop esi
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0x30]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x30]
movsx eax, byte [ebp + edx - 0x198]
cmp ecx, eax
je 0x4095c7
mov ecx, dword [ebp - 0x134]
add ecx, dword [ebp - 0x30]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x30]
movsx ecx, byte [ebp + eax - 0x198]
cmp edx, ecx
jne 0x4095ce
jmp 0x409530
jmp 0x4095d5
push edi
push esi
add esp, 4
jmp 0x4095e0
xor edi, 0xb3d4
add edi, 0x1721
sub edi, 0x1724d
pop edi
push edx
and edx, 0x12e24
xor edx, 0x16fee
add edx, 0x6c3a
pop edx
mov edx, dword [ebp - 0x134]
add edx, dword [ebp - 0x30]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x30]
movsx edx, byte [ebp + ecx - 0x198]
cmp eax, edx
jne 0x409631
mov dword [ebp - 0x20c], 0
jmp 0x4096cc
push eax
or eax, 0x1394c
xor eax, 0x14ca8
pop eax
push ebx
push eax
add esp, 4
add ebx, 0x36a0
or ebx, 0x17074
call 0x40965f
add byte [ecx], bh
xor ecx, dword [eax + 0x3c]
cmp edi, dword [ecx]
xor eax, 0xc483504c
add al, 0x5b
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0x30]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x30]
movsx eax, byte [ebp + edx - 0x198]
or eax, 0x20
cmp ecx, eax
jge 0x409690
mov dword [ebp - 0x20c], 0xffffffff
jmp 0x4096cc
push edi
push edx
add esp, 4
xor edi, 0x1374f
pop edi
push ebx
push ebx
add esp, 4
call 0x4096b0
add byte [ebx], bh
inc edx
inc esp
xor eax, dword [edx + 0x4d]
cmp byte [esi], bh
add esp, 4
and ebx, 0x9864
pop ebx
push ebx
sub ebx, 0x7c9f
pop ebx
mov dword [ebp - 0x20c], 1
cmp dword [ebp - 0x20c], 0
jne 0x409715
push eax
and eax, 0xc9f4
xor eax, 0xaf09
pop eax
push ecx
push edi
add esp, 4
jmp 0x4096ed
or ecx, 0x92c3
call 0x409703
add byte [ebx + 0x39], al
inc esi
dec ecx
cmp dl, byte [eax + 0x44]
dec edi
dec eax
add esp, 4
pop ecx
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x9c], ecx
jmp 0x409726
jmp 0x40942d
mov edx, dword [ebp - 0x138]
mov dword [ebp - 0x9c], edx
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x1b4], eax
lea ecx, [ebp - 0x1b0]
push ecx
mov edx, dword [ebp + 4]
push edx
push 6
call dword [ebp - 0x1b4]
test eax, eax
jne 0x409780
push edi
call 0x409757
add byte [eax + 0x39], cl
cmp edi, dword [eax]
cmp byte [edx], bh
add esp, 4
sub edi, 0xd181
pop edi
push edx
push ecx
add esp, 4
or edx, 0x3e20
pop edx
push edi
and edi, 0x7bd5
xor edi, 0x65db
pop edi
jmp 0x40c14d
push ebx
push eax
add esp, 4
add ebx, 0x1339b
xor ebx, 0xa01a
add ebx, 0x3b2
xor ebx, 0x17ea3
pop ebx
push edi
or edi, 0x138cd
pop edi
push ecx
push ebx
add esp, 4
or ecx, 0x12bbd
pop ecx
cmp dword [ebp - 0x1b0], 0
je 0x40c13e
push eax
and eax, 0x17969
call 0x4097d5
add byte [ebx + 0x32], cl
inc ebp
dec edi
xor eax, 0x83504d4a
les eax, [eax + ebp*8]
or byte [eax], al
add byte [eax], al
add byte [eax + ecx*2], bh
dec edi
cmp dword [edi + 0x4e], ecx
xor al, byte [ebx + 0x575804c4]
xor edi, 0x1952
pop edi
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x210], eax
push esi
push ecx
add esp, 4
add esi, 0xd97b
call 0x409814
add byte [ebx], dh
push eax
inc esp
dec ebx
cmp eax, 0x4c48345
sub esi, 0x80b9
pop esi
push esi
push eax
add esp, 4
jmp 0x409828
add esi, 0xe35d
pop esi
cmp dword [ebp - 0x210], 0
jne 0x40986f
push edi
add edi, 0x17406
sub edi, 0x3162
or edi, 0x73bd
add edi, 0x1a52
pop edi
push ebx
push edi
add esp, 4
add ebx, 0xca18
pop ebx
push edi
push edx
add esp, 4
add edi, 0x166ff
pop edi
jmp 0x40c14d
push edi
add edi, 0x12426
sub edi, 0x1082b
sub edi, 0x15562
pop edi
push eax
jmp 0x40988d
jmp 0x409894
jmp 0x409899
jmp 0x4098a0
pop eax
mov ecx, dword [ebp - 0x210]
mov edx, dword [ebp - 0x210]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x2d0], edx
jne 0x4098ef
push esi
push edx
add esp, 4
or esi, 0xbbf0
xor esi, 0x13b06
and esi, 0xa59a
or esi, 0x4dd1
pop esi
push ebx
and ebx, 0xa5f0
add ebx, 0x1842b
and ebx, 0x16df6
pop ebx
jmp 0x40c14d
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [eax + 0x50]
mov dword [ebp - 0x3f0], ecx
push ebx
push esi
add esp, 4
sub ebx, 0x123b6
pop ebx
push ebx
xor ebx, 0x2fff
and ebx, 0x134b0
or ebx, 0x185bd
pop ebx
push edx
push edi
add esp, 4
add edx, 0xf772
and edx, 0xc48
pop edx
mov edx, dword [ebp - 0x1b0]
mov dword [ebp - 0x218], edx
push edi
add edi, 0x112d4
pop edi
push esi
push edx
add esp, 4
and esi, 0xd3f1
sub esi, 0x8ef
add esi, 0xd106
pop esi
push edx
push edx
add esp, 4
sub edx, 0x400c
sub edx, 0x8a92
pop edx
mov eax, dword [ebp - 0x218]
add eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x218], 0
je 0x40c13e
cmp dword [ebp - 0x22c], 0
je 0x40c13e
push edx
xor edx, 0xe558
pop edx
push eax
push edx
add esp, 4
sub eax, 0x18271
pop eax
push ecx
or ecx, 0xe1a0
xor ecx, 0x4144
call 0x4099c8
add byte [esi + 0x46], al
push eax
xor edi, dword [0xc4833a3d]
add al, 0x59
mov byte [ebp - 0x285], 7
mov byte [ebp - 1], 2
jmp 0x4099e2
mov cl, byte [ebp - 1]
add cl, 1
mov byte [ebp - 1], cl
movzx edx, byte [ebp - 1]
cmp edx, 7
jge 0x40c13c
push eax
sub eax, 0xb37b
jmp 0x4099fc
xor eax, 0x184f7
add eax, 0xbaef
pop eax
push edx
push eax
add esp, 4
xor edx, 0x1730
and edx, 0x16f10
sub edx, 0x1592f
pop edx
mov byte [ebp - 0x1c8], 0xde
mov byte [ebp - 0x1c7], 0xde
mov byte [ebp - 0x1c6], 0xee
mov byte [ebp - 0x1c5], 0xee
mov byte [ebp - 0x1c4], 0xde
mov byte [ebp - 0x1c3], 0xde
mov byte [ebp - 0x1c2], 0xee
mov byte [ebp - 0x1c1], 0xee
mov byte [ebp - 0x1c0], 0xcc
mov byte [ebp - 0x1bf], 0xcc
mov byte [ebp - 0x1be], 0
push eax
jmp 0x409a78
add eax, 0x9d35
pop eax
push eax
push esi
add esp, 4
or eax, 0x2976
pop eax
push edi
push edi
add esp, 4
call 0x409a9c
add byte [eax], bh
inc esp
inc ebx
inc esp
dec edx
cmp byte [ebx - 0x47a0fb3c], al
add dword [eax], eax
add byte [eax], al
imul ecx, eax, 0
mov dl, byte [ebp - 1]
mov byte [ebp + ecx - 0x1be], dl
push edi
call 0x409ac0
add byte [eax + 0x36], al
dec edx
dec edi
aaa
cmp byte ds:[ebx - 0x307efb3c], al
sal byte [edx], cl
add dword [eax], eax
add edi, 0x124fe
add edi, 0x62cd
pop edi
push edx
or edx, 0xf9e6
or edx, 0x11c5
pop edx
mov dword [ebp - 0x4b8], 0xb
mov byte [ebp - 0x1a4], 0x8b
mov byte [ebp - 0x1a3], 0xe5
mov byte [ebp - 0x1a2], 0x5d
mov byte [ebp - 0x1a1], 0xc3
push edi
sub edi, 0x78fc
sub edi, 0x3070
and edi, 0x104d8
pop edi
push ebx
push eax
add esp, 4
sub ebx, 0x82a8
add ebx, 0x1523e
add ebx, 0x14678
sub ebx, 0xbf1c
pop ebx
mov dword [ebp - 0x4b4], 4
mov dword [ebp - 0x34], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x214], 0
jmp 0x409b7c
mov eax, dword [ebp - 0x214]
add eax, 1
mov dword [ebp - 0x214], eax
push ebx
push ebx
add esp, 4
add ebx, 0x8d0f
add ebx, 0x57c0
sub ebx, 0x133e3
pop ebx
push ebx
and ebx, 0x118de
xor ebx, 0x16d2b
xor ebx, 0x3263
add ebx, 0x101fb
pop ebx
mov ecx, dword [ebp - 0x214]
add ecx, dword [ebp - 0x218]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x34]
cmp edx, dword [ebp - 0x22c]
jb 0x409bff
push eax
call 0x409bd9
add byte [edi + 0x4d], al
dec ecx
xor cl, byte [edi + 0x4a]
dec esp
xor eax, dword [edx - 0x7d]
les eax, [ebx + ebp*8]
add eax, dword [ebp + 0x3f]
xor bl, byte [eax + 0x57]
push ecx
add esp, 4
or edi, 0x14295
add edi, 0x10d26
and edi, 0x983d
pop edi
jmp 0x40a2b6
mov dword [ebp - 0x21c], 0xb
mov eax, 1
imul ecx, eax, 0
lea edx, [ebp + ecx - 0x1c8]
mov dword [ebp - 0x2d4], edx
push eax
call 0x409c2c
add byte [ebp + 0x3e], cl
cmp dword [ebp + ecx*2 + 0x47], ecx
dec esp
add esp, 4
sub eax, 0x16f75
call 0x409c45
add byte [0x33364c4d], bh
dec ebp
dec esp
inc ebp
inc edi
xor eax, dword [ebx + 0x525804c4]
jmp 0x409c4f
pop edx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x1ac], eax
push ecx
jmp 0x409c5f
jmp 0x409c68
pop ecx
push eax
add eax, 0xf754
pop eax
push eax
add eax, 0x5d15
add eax, 0x6fa0
xor eax, 0xaa5
sub eax, 0x260b
pop eax
mov ecx, dword [ebp - 0x2d4]
mov dword [ebp - 0x1a8], ecx
mov dword [ebp - 0x220], 0
push ecx
jmp 0x409cab
add ecx, 0x2f2f
pop ecx
push esi
push edx
add esp, 4
and esi, 0x2d35
jmp 0x409cc6
xor esi, 0x17aa
sub esi, 0x6c87
pop esi
mov edx, dword [ebp - 0x34]
cmp edx, dword [ebp - 0x2d4]
jne 0x409d21
push ebx
jmp 0x409ce8
add ebx, 0x9be5
pop ebx
push edi
push esi
add esp, 4
and edi, 0xd4f4
pop edi
push ecx
push ecx
add esp, 4
sub ecx, 0x1991
jmp 0x409d0f
pop ecx
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x2dc], eax
jmp 0x409eb9
cmp dword [ebp - 0x21c], 0
jle 0x409e7b
push eax
and eax, 0xb50a
or eax, 0x16ab4
pop eax
push edi
push esi
add esp, 4
xor edi, 0xc94c
sub edi, 0xf64a
sub edi, 0x2c0f
pop edi
push edi
push eax
add esp, 4
jmp 0x409d5f
pop edi
mov ecx, dword [ebp - 0x1ac]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x1a8]
movzx ecx, byte [eax]
cmp edx, ecx
je 0x409de5
push edx
and edx, 0x15cf8
xor edx, 0x1dd5
jmp 0x409d8c
pop edx
push esi
push esi
add esp, 4
add esi, 0x3d82
pop esi
push edi
push eax
add esp, 4
jmp 0x409da7
pop edi
mov edx, dword [ebp - 0x1ac]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x1a8]
movzx edx, byte [ecx]
cmp eax, edx
jle 0x409dca
mov dword [ebp - 0x2d8], 1
jmp 0x409dd4
mov dword [ebp - 0x2d8], 0xffffffff
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x220], eax
jmp 0x409e7b
push ebx
jmp 0x409ded
or ebx, 0x13f0b
or ebx, 0x50c
pop ebx
push edx
add edx, 0x16d8a
jmp 0x409e0a
xor edx, 0xea1f
xor edx, 0xb019
pop edx
mov ecx, dword [ebp - 0x21c]
sub ecx, 1
mov dword [ebp - 0x21c], ecx
mov edx, dword [ebp - 0x1ac]
add edx, 1
mov dword [ebp - 0x1ac], edx
push ebx
push ecx
add esp, 4
or ebx, 0x14770
add ebx, 0x8607
sub ebx, 0x456b
pop ebx
push edi
add edi, 0x155b
or edi, 0x2aaa
or edi, 0x15dd3
and edi, 0x3daf
pop edi
mov eax, dword [ebp - 0x1a8]
add eax, 1
mov dword [ebp - 0x1a8], eax
jmp 0x409d21
push ecx
push esi
add esp, 4
sub ecx, 0xb895
pop ecx
push ebx
call 0x409e97
add byte [ebp + 0x4a], al
push eax
inc esi
inc edx
cmp cl, byte [ebx + 0x44]
add esp, 4
jmp 0x409ea0
pop ebx
push eax
push edx
add esp, 4
or eax, 0x7527
pop eax
mov ecx, dword [ebp - 0x220]
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 0
jne 0x40a2b1
push edi
xor edi, 0x14a09
xor edi, 0xe67a
add edi, 0x49c5
call 0x409ee6
add byte [esi], dh
push eax
dec eax
inc esi
xor al, byte [edi + 0x4e]
add esp, 4
pop edi
push edi
xor edi, 0x175a2
sub edi, 0x11df3
pop edi
mov edx, dword [ebp - 0x34]
add edx, 0xb
mov dword [ebp - 0x34], edx
push edi
sub edi, 0x630a
pop edi
push esi
push edx
add esp, 4
xor esi, 0x3b8
xor esi, 0x53ba
xor esi, 0x4aca
pop esi
push esi
push esi
add esp, 4
add esi, 0x1710a
jmp 0x409f32
pop esi
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x224], 4
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0x1a4]
mov dword [ebp - 0x2e0], eax
push esi
xor esi, 0x13298
pop esi
push eax
sub eax, 0x3d5b
pop eax
push edx
add edx, 0x1863e
pop edx
push ecx
xor ecx, 0x16db1
sub ecx, 0xea19
or ecx, 0x7993
add ecx, 0x61c8
pop ecx
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x1a0], ecx
push eax
call 0x409fa6
add byte [ebx], dh
cmp eax, 0x33413f34
inc ecx
inc ecx
add esp, 4
and eax, 0x5d88
pop eax
push edi
push edx
add esp, 4
add edi, 0xaffd
pop edi
push edi
push eax
add esp, 4
xor edi, 0x519c
pop edi
mov edx, dword [ebp - 0x2e0]
mov dword [ebp - 0x19c], edx
mov dword [ebp - 0x228], 0
push edi
push ebx
add esp, 4
xor edi, 0x2d16
pop edi
push ebx
call 0x409ff8
add byte [ecx + 0x3b], al
inc esp
push eax
cmp byte [ecx + 0x41], cl
add esp, 4
and ebx, 0x9a57
xor ebx, 0x16bfe
pop ebx
push edi
xor edi, 0x12f1f
pop edi
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x2e0]
jne 0x40a05e
push esi
push ecx
add esp, 4
and esi, 0x17e19
or esi, 0x15e65
xor esi, 0xc5b4
pop esi
push esi
push ecx
add esp, 4
or esi, 0x12419
xor esi, 0x9c7f
pop esi
push esi
and esi, 0xf38d
pop esi
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x2e8], ecx
jmp 0x40a1f6
cmp dword [ebp - 0x224], 0
jle 0x40a1b8
push ebx
push ebx
add esp, 4
add ebx, 0x1a50
and ebx, 0x11c12
pop ebx
push ebx
push esi
add esp, 4
jmp 0x40a089
sub ebx, 0x1851a
jmp 0x40a097
jmp 0x40a09c
pop ebx
mov edx, dword [ebp - 0x1a0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movzx edx, byte [ecx]
cmp eax, edx
je 0x40a122
push edi
push ebx
add esp, 4
call 0x40a0c8
add byte [ebp + ecx*2 + 0x47], cl
xor bh, byte [ecx]
dec eax
aas
dec ecx
inc ebp
inc edx
add esp, 4
sub edi, 0xb627
call 0x40a0e1
add byte [esp + eax*2], dh
inc eax
xor eax, 0x344b3732
inc ecx
aas
add esp, 4
pop edi
mov eax, dword [ebp - 0x1a0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x40a107
mov dword [ebp - 0x2e4], 1
jmp 0x40a111
mov dword [ebp - 0x2e4], 0xffffffff
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp - 0x228], ecx
jmp 0x40a1b8
push esi
push ebx
add esp, 4
jmp 0x40a12d
sub esi, 0xee6d
call 0x40a142
add byte [eax + 0x43], dl
cmp dword [eax + 0x42], ecx
dec ecx
add esp, 4
pop esi
push ecx
xor ecx, 0x147de
add ecx, 0x13271
pop ecx
mov edx, dword [ebp - 0x224]
sub edx, 1
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0x1a0]
add eax, 1
mov dword [ebp - 0x1a0], eax
push ebx
push ecx
add esp, 4
sub ebx, 0x169c9
and ebx, 0x2545
xor ebx, 0x93bd
pop ebx
push edi
push eax
add esp, 4
sub edi, 0x8cc7
add edi, 0x1359a
pop edi
push eax
and eax, 0x25fa
pop eax
mov ecx, dword [ebp - 0x19c]
add ecx, 1
mov dword [ebp - 0x19c], ecx
jmp 0x40a05e
push edx
push edx
add esp, 4
or edx, 0x124f2
xor edx, 0x10586
xor edx, 0x8067
and edx, 0x181af
pop edx
push ebx
add ebx, 0xee9a
xor ebx, 0x5b9c
add ebx, 0x103da
pop ebx
mov edx, dword [ebp - 0x228]
mov dword [ebp - 0x2e8], edx
cmp dword [ebp - 0x2e8], 0
je 0x40a271
push ebx
push edi
add esp, 4
add ebx, 0x7ab6
sub ebx, 0x12de4
pop ebx
push ecx
xor ecx, 0xd787
or ecx, 0x16d33
pop ecx
push eax
push edx
add esp, 4
add eax, 0xa930
and eax, 0x65a7
pop eax
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
push ecx
push ebx
add esp, 4
or ecx, 0x103d2
add ecx, 0x171ad
pop ecx
push ecx
sub ecx, 0x11d6e
or ecx, 0xa35c
pop ecx
push ebx
push edx
add esp, 4
xor ebx, 0xcb4e
or ebx, 0x463b
pop ebx
jmp 0x409f3c
push esi
call 0x40a27f
add byte [edi], bh
xor dh, byte [edx]
dec edx
inc ecx
dec ebx
dec esp
add esp, 4
add esi, 0x2f82
xor esi, 0xd6de
jmp 0x40a294
pop esi
push ecx
and ecx, 0x184c
xor ecx, 0xe0f5
pop ecx
mov ecx, dword [ebp - 0x34]
add ecx, 4
mov dword [ebp - 0x328], ecx
jmp 0x40a2b6
jmp 0x409b6d
mov edx, dword [ebp - 0xcc]
cmp edx, dword [ebp - 0x22c]
je 0x40c137
push ecx
or ecx, 0x16cb1
pop ecx
push edi
add edi, 0x5d17
add edi, 0x4d77
pop edi
push ecx
and ecx, 0xabae
xor ecx, 0x15f14
pop ecx
push ebx
push eax
add esp, 4
jmp 0x40a2f9
pop ebx
mov byte [ebp - 0x184], 0x56
mov byte [ebp - 0x183], 0x69
mov byte [ebp - 0x182], 0x72
mov byte [ebp - 0x181], 0x74
mov byte [ebp - 0x180], 0x75
mov byte [ebp - 0x17f], 0x61
mov byte [ebp - 0x17e], 0x6c
mov byte [ebp - 0x17d], 0x50
mov byte [ebp - 0x17c], 0x72
mov byte [ebp - 0x17b], 0x6f
mov byte [ebp - 0x17a], 0x74
mov byte [ebp - 0x179], 0x65
mov byte [ebp - 0x178], 0x63
mov byte [ebp - 0x177], 0x74
mov byte [ebp - 0x176], 0
mov dword [ebp - 0x47c], 0
push edi
call 0x40a37b
add byte [esi], bh
dec edx
cmp edi, dword [ecx]
dec esp
inc edi
inc ebx
add esp, 4
jmp 0x40a386
pop edi
push edi
push esi
add esp, 4
add edi, 0x1102
or edi, 0x6ed2
or edi, 0xcd3a
pop edi
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x1bc], eax
push ebx
push esi
add esp, 4
or ebx, 0x17fe0
pop ebx
push ecx
push edx
add esp, 4
xor ecx, 0x84ea
xor ecx, 0x14b4d
jmp 0x40a3ce
xor ecx, 0x12a8
test al, 0x12
add byte [eax], al
pop ecx
push eax
add eax, 0x4c63
pop eax
push eax
push eax
add esp, 4
sub eax, 0x3fba
and eax, 0xf6c5
pop eax
push esi
jmp 0x40a3f7
add esi, 0x1553f
pop esi
push esi
jmp 0x40a406
pop esi
push edi
sub edi, 0x451f
pop edi
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x3f4], ecx
push ecx
xor ecx, 0xd9ee
and ecx, 0x1235c
pop ecx
push ebx
push eax
add esp, 4
jmp 0x40a434
pop ebx
push edx
call 0x40a444
add byte [edi], bh
inc ebp
inc edx
xor eax, 0x833b4d3d
les eax, [ecx + eax*4]
loop 0x40a3d0
adc al, byte [eax]
add byte [edx - 0x75], bl
xchg ebp, eax
or al, 0xfc
invalid
jmp 0x4099d9
jmp 0x40c14d
jmp 0x40c14d
mov byte [ebp - 0x144], 0x45
mov byte [ebp - 0x143], 0x78
mov byte [ebp - 0x142], 0x69
mov byte [ebp - 0x141], 0x74
mov byte [ebp - 0x140], 0x50
mov byte [ebp - 0x13f], 0x72
mov byte [ebp - 0x13e], 0x6f
mov byte [ebp - 0x13d], 0x63
mov byte [ebp - 0x13c], 0x65
mov byte [ebp - 0x13b], 0x73
mov byte [ebp - 0x13a], 0x73
mov byte [ebp - 0x139], 0
mov edx, dword [ebp - 0x4ac]
mov dword [ebp - 0x1b8], edx
push eax
call 0x40c1bb
add byte [eax + 0x36], dl
inc esi
inc ecx
xor al, byte [esi + eax*2 - 0x7d]
les eax, [ecx + eax*4]
enter 0xffffffffffff9416, 0
add byte [eax + 0x56], bl
and esi, 0x17021
or esi, 0x2d35
and esi, 0x4dca
add esi, 0x16bfe
pop esi
push ebx
add ebx, 0x17836
add ebx, 0x49b1
sub ebx, 0x5f3
pop ebx
push eax
push edx
add esp, 4
sub eax, 0x176a5
or eax, 0x6382
and eax, 0xa172
sub eax, 0xf596
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x43c], eax
push esi
push ecx
add esp, 4
add esi, 0x1043f
pop esi
push esi
add esi, 0x4bd9
xor esi, 0xaa5d
sub esi, 0xf7d9
pop esi
push edi
push ebx
add esp, 4
add edi, 0x1492e
sub edi, 0xd258
pop edi
mov ecx, dword [ebp - 0x43c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x440], edx
push ebx
call 0x40c26e
add byte [edx + 0x4a], cl
xor eax, 0x40433339
dec esp
add esp, 4
call 0x40c27e
add byte [ecx + 0x45], al
aas
dec esp
inc ebx
cmp al, byte [ebx - 0x147efb3c]
das
pushal
add dword [eax], eax
pop ebx
push esi
or esi, 0x18187
pop esi
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0
jne 0x40c2e3
push ecx
sub ecx, 0xa433
call 0x40c2b9
add byte [esi], bh
dec ecx
xor eax, 0x424b483d
add esp, 4
pop ecx
push ebx
and ebx, 0x2c4b
add ebx, 0x11fcb
add ebx, 0x359b
add ebx, 0x6c7
pop ebx
mov dword [ebp - 0x74], 0
jmp 0x40c66f
push eax
push edx
add esp, 4
sub eax, 0x4511
add eax, 0x154ba
sub eax, 0x2dec
pop eax
push edi
and edi, 0x11861
sub edi, 0x16e0d
pop edi
push eax
push edx
add esp, 4
sub eax, 0x98ef
pop eax
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
jne 0x40c36e
push ebx
add ebx, 0xe11
sub ebx, 0xfdde
add ebx, 0x838c
and ebx, 0x7b0f
pop ebx
push edx
push edi
add esp, 4
add edx, 0x15f34
xor edx, 0x12f98
or edx, 0x11a80
pop edx
mov dword [ebp - 0x74], 0
jmp 0x40c66f
mov ecx, dword [ebp - 0x264]
mov dword [ebp - 0xb0], ecx
push eax
push edi
add esp, 4
call 0x40c38c
add byte [edi + 0x3d42494e], dh
dec edi
add esp, 4
jmp 0x40c397
pop eax
push ecx
push ecx
add esp, 4
add ecx, 0xfc32
pop ecx
push esi
xor esi, 0xd0d0
pop esi
lea edx, [ebp - 0x2b0]
mov dword [ebp - 0x260], edx
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x25c], ecx
push eax
push ecx
add esp, 4
add eax, 0x81a4
jmp 0x40c3d9
and eax, 0x680c
call 0x40c3ed
add byte [esi + 0x3c], cl
inc ecx
dec esp
xor al, byte ss:[eax + 0x41]
add esp, 4
pop eax
push edx
and edx, 0x16519
pop edx
xor edx, edx
mov word [ebp - 0x48], dx
xor eax, eax
mov word [ebp - 0x20], ax
push edx
push ecx
add esp, 4
sub edx, 0x7d1
jmp 0x40c418
pop edx
push edx
push edx
add esp, 4
or edx, 0x2fe3
call 0x40c433
add byte [ebx + esi + 0x45], al
inc edx
cmp eax, 0x50423537
add esp, 4
pop edx
mov ecx, dword [ebp - 0x25c]
mov dx, word [ecx]
mov word [ebp - 0x1d6], dx
mov eax, dword [ebp - 0x25c]
add eax, 2
mov dword [ebp - 0x25c], eax
mov cx, word [ebp - 0x1d6]
mov word [ebp - 0x48], cx
push ecx
add ecx, 0xbac9
or ecx, 0xbfa0
or ecx, 0x1389
pop ecx
push eax
push esi
add esp, 4
add eax, 0x7e4e
add eax, 0xd908
and eax, 0x65d8
xor eax, 0xaf9c
pop eax
mov edx, dword [ebp - 0x260]
mov ax, word [edx]
mov word [ebp - 0x1e0], ax
mov ecx, dword [ebp - 0x260]
add ecx, 2
mov dword [ebp - 0x260], ecx
mov dx, word [ebp - 0x1e0]
mov word [ebp - 0x20], dx
push eax
sub eax, 0x11b75
add eax, 0x303c
pop eax
push esi
xor esi, 0x11e37
pop esi
push esi
push eax
add esp, 4
call 0x40c4e5
add byte [ecx + 0x3e], cl
inc edi
dec ebx
inc ebx
dec esp
aas
add esp, 4
or esi, 0x6f9e
pop esi
movzx eax, word [ebp - 0x20]
test eax, eax
jne 0x40c50c
movzx ecx, word [ebp - 0x48]
movzx edx, word [ebp - 0x20]
sub ecx, edx
mov dword [ebp - 0x334], ecx
jmp 0x40c58f
movzx eax, word [ebp - 0x48]
movzx ecx, word [ebp - 0x20]
cmp eax, ecx
je 0x40c405
movzx edx, word [ebp - 0x48]
xor edx, 0x20
movzx eax, word [ebp - 0x20]
cmp edx, eax
je 0x40c405
push ebx
push edi
add esp, 4
or ebx, 0x139b0
xor ebx, 0x13bc8
pop ebx
push ebx
sub ebx, 0x2c6a
jmp 0x40c54e
call 0x40c55d
add byte [edx + 0x32], al
aas
xor al, 0x36
cmp eax, 0x833e383a
les eax, [ebx + ebx*2]
movzx ecx, word [ebp - 0x48]
movzx edx, word [ebp - 0x20]
cmp ecx, edx
jge 0x40c579
mov dword [ebp - 0x330], 0xffffffff
jmp 0x40c583
mov dword [ebp - 0x330], 1
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0
jne 0x40c5d8
push edx
call 0x40c5a5
add byte [eax + 0x3d], al
inc edx
xor bh, byte [ebx]
dec ecx
add esp, 4
pop edx
push ebx
push edi
add esp, 4
add ebx, 0x12783
call 0x40c5c0
add byte [edx + 0x34], cl
inc ecx
xor esi, dword [edi]
add esp, 4
add ebx, 0x60f3
pop ebx
mov ecx, dword [ebp - 0xb0]
mov dword [ebp - 0x74], ecx
jmp 0x40c66f
mov edx, dword [ebp - 0xb0]
mov eax, dword [edx]
mov dword [ebp - 0xb0], eax
push ecx
push eax
add esp, 4
jmp 0x40c5f0
call 0x40c5fd
add byte [edx + 0x43], al
cmp ecx, dword [ecx + 0x4c]
cmp eax, 0x4c4834a
pop ecx
push eax
jmp 0x40c60a
add eax, 0x9c3f
jmp 0x40c617
pop eax
mov ecx, dword [ebp - 0xb0]
cmp ecx, dword [ebp - 0x264]
je 0x40c636
mov edx, dword [ebp - 0xb0]
cmp dword [edx + 0x30], 0
jne 0x40c37a
push edx
push eax
add esp, 4
sub edx, 0xdfe6
xor edx, 0x61a5
xor edx, 0x15538
add edx, 0xcf5d
pop edx
push esi
jmp 0x40c65e
jmp 0x40c667
pop esi
mov dword [ebp - 0x74], 0
cmp dword [ebp - 0x74], 0
jne 0x40d30a
push ecx
xor ecx, 0x11ca6
sub ecx, 0xafad
xor ecx, 0x10acb
and ecx, 0x6cef
pop ecx
push ecx
push esi
add esp, 4
sub ecx, 0x1016c
or ecx, 0x154a
or ecx, 0x1504a
pop ecx
mov eax, 0x6b
mov word [ebp - 0x3a0], ax
mov ecx, 0x65
mov word [ebp - 0x39e], cx
mov edx, 0x72
mov word [ebp - 0x39c], dx
mov eax, 0x6e
mov word [ebp - 0x39a], ax
mov ecx, 0x65
mov word [ebp - 0x398], cx
mov edx, 0x6c
mov word [ebp - 0x396], dx
mov eax, 0x33
mov word [ebp - 0x394], ax
mov ecx, 0x32
mov word [ebp - 0x392], cx
mov edx, 0x2e
mov word [ebp - 0x390], dx
mov eax, 0x64
mov word [ebp - 0x38e], ax
mov ecx, 0x6c
mov word [ebp - 0x38c], cx
mov edx, 0x6c
mov word [ebp - 0x38a], dx
xor eax, eax
mov word [ebp - 0x388], ax
push ebx
add ebx, 0xf76d
and ebx, 0xa1b6
and ebx, 0xfa18
pop ebx
push esi
push esi
add esp, 4
add esi, 0x14411
xor esi, 0x106a3
and esi, 0x1787c
sub esi, 0x11eb6
pop esi
mov byte [ebp - 0x174], 0x4c
mov byte [ebp - 0x173], 0x6f
mov byte [ebp - 0x172], 0x61
mov byte [ebp - 0x171], 0x64
mov byte [ebp - 0x170], 0x4c
mov byte [ebp - 0x16f], 0x69
mov byte [ebp - 0x16e], 0x62
mov byte [ebp - 0x16d], 0x72
mov byte [ebp - 0x16c], 0x61
mov byte [ebp - 0x16b], 0x72
mov byte [ebp - 0x16a], 0x79
mov byte [ebp - 0x169], 0x57
mov byte [ebp - 0x168], 0
push edi
push edx
add esp, 4
or edi, 0xfa22
or edi, 0x1652d
pop edi
push esi
push edx
add esp, 4
and esi, 0x3f7
xor esi, 0x95d0
xor esi, 0xbb26
jmp 0x40c802
pop esi
push eax
jmp 0x40c80a
add eax, 0x121c
xor eax, 0xaa49
pop eax
push edi
push eax
add esp, 4
xor edi, 0x18485
or edi, 0x8d84
sub edi, 0x4f1d
and edi, 0x103fb
pop edi
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x444], ecx
push ecx
push ecx
add esp, 4
add ecx, 0x13ba5
pop ecx
push edx
push esi
add esp, 4
add edx, 0x1216a
pop edx
push edx
push ecx
add esp, 4
and edx, 0x10909
sub edx, 0xdf4c
pop edx
push ecx
and ecx, 0x16887
pop ecx
mov edx, dword [ebp - 0x444]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x448], eax
push ecx
push ecx
add esp, 4
and ecx, 0x8f06
pop ecx
push ebx
sub ebx, 0x99f8
jmp 0x40c89c
pop ebx
push edi
push edx
add esp, 4
or edi, 0x14bad
jmp 0x40c8ae
and edi, 0x9ff7
pop edi
mov ecx, dword [ebp - 0x448]
mov dword [ebp - 0x338], ecx
cmp dword [ebp - 0x338], 0
jne 0x40c90b
push edi
push ebx
add esp, 4
and edi, 0x4690
pop edi
push ecx
add ecx, 0x9226
or ecx, 0x181fa
or ecx, 0x6d63
xor ecx, 0x146a3
pop ecx
push esi
push esi
add esp, 4
and esi, 0x4159
pop esi
mov dword [ebp - 0xd0], 0
jmp 0x40cca0
push ecx
and ecx, 0x34be
call 0x40c91f
add byte [edi + 0x40], al
xor al, 0x46
inc ecx
inc ebx
xor eax, dword [ebx - 0x3e7efb3c]
cmc
sbb al, 1
add byte [ecx + 0x56], bl
xor esi, 0xdedc
or esi, 0x14fb0
sub esi, 0x12d05
pop esi
mov edx, dword [ebp - 0x338]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x270], ecx
cmp dword [ebp - 0x270], 0
jne 0x40c999
push ecx
push eax
add esp, 4
jmp 0x40c965
or ecx, 0x139ec
pop ecx
push ecx
add ecx, 0xd493
pop ecx
push ecx
push ecx
add esp, 4
call 0x40c986
add byte [edi + 0x4f], cl
cmp al, 0x50
inc esp
inc esi
inc eax
add esp, 4
pop ecx
mov dword [ebp - 0xd0], 0
jmp 0x40cca0
mov edx, dword [ebp - 0x270]
mov dword [ebp - 0xbc], edx
push edi
push ebx
add esp, 4
sub edi, 0x105f4
xor edi, 0x7aad
and edi, 0xb228
sub edi, 0x17b04
pop edi
push edx
xor edx, 0x133aa
or edx, 0x16560
add edx, 0xbafd
pop edx
lea eax, [ebp - 0x3a0]
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x268], edx
push edi
push ebx
add esp, 4
add edi, 0x938c
sub edi, 0x8668
jmp 0x40ca08
pop edi
push esi
push esi
add esp, 4
xor esi, 0x12069
sub esi, 0x754e
jmp 0x40ca23
pop esi
xor eax, eax
mov word [ebp - 0x4c], ax
xor ecx, ecx
mov word [ebp - 0x24], cx
push ebx
sub ebx, 0xcda7
pop ebx
push edx
sub edx, 0x14584
and edx, 0x14eb5
or edx, 0x15542
pop edx
push ebx
add ebx, 0x15ddf
pop ebx
push eax
sub eax, 0x4d39
and eax, 0xc4ad
pop eax
mov edx, dword [ebp - 0x268]
mov ax, word [edx]
mov word [ebp - 0x1d8], ax
mov ecx, dword [ebp - 0x268]
add ecx, 2
mov dword [ebp - 0x268], ecx
mov dx, word [ebp - 0x1d8]
mov word [ebp - 0x4c], dx
push eax
jmp 0x40ca95
add eax, 0xc9d5
jmp 0x40caa3
pop eax
push esi
add esi, 0x4e0c
or esi, 0x1441b
or esi, 0xc776
sub esi, 0xc3c5
pop esi
mov eax, dword [ebp - 0x26c]
mov cx, word [eax]
mov word [ebp - 0x1da], cx
mov edx, dword [ebp - 0x26c]
add edx, 2
mov dword [ebp - 0x26c], edx
mov ax, word [ebp - 0x1da]
mov word [ebp - 0x24], ax
push ebx
jmp 0x40caf2
call 0x40caff
add byte [ebp + 0x39], cl
cmp eax, 0x8347394f
les eax, [ebx + ebx*2]
push edx
push ecx
add esp, 4
sub edx, 0x4c14
jmp 0x40cb13
and edx, 0x2e8e
pop edx
movzx ecx, word [ebp - 0x24]
test ecx, ecx
jne 0x40cb37
movzx edx, word [ebp - 0x4c]
movzx eax, word [ebp - 0x24]
sub edx, eax
mov dword [ebp - 0x340], edx
jmp 0x40cbba
movzx ecx, word [ebp - 0x4c]
movzx edx, word [ebp - 0x24]
cmp ecx, edx
je 0x40ca30
movzx eax, word [ebp - 0x4c]
xor eax, 0x20
movzx ecx, word [ebp - 0x24]
cmp eax, ecx
je 0x40ca30
push eax
push ebx
add esp, 4
add eax, 0x7db2
pop eax
push edi
sub edi, 0x1138d
add edi, 0x15a5b
add edi, 0xa436
and edi, 0x10491
pop edi
push esi
push eax
add esp, 4
xor esi, 0x123
pop esi
movzx edx, word [ebp - 0x4c]
movzx eax, word [ebp - 0x24]
cmp edx, eax
jge 0x40cba4
mov dword [ebp - 0x33c], 0xffffffff
jmp 0x40cbae
mov dword [ebp - 0x33c], 1
mov ecx, dword [ebp - 0x33c]
mov dword [ebp - 0x340], ecx
cmp dword [ebp - 0x340], 0
jne 0x40cc06
push ebx
add ebx, 0x1859c
call 0x40cbd8
add byte [ecx], bh
dec eax
xor al, 0x42
xor dh, byte [0xc4833239]
add al, 0x81
ret
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax]
mov dword [ebp - 0xbc], ecx
push ebx
push ecx
add esp, 4
call 0x40cc27
add byte [edx + 0x39], cl
inc esp
inc edi
dec esp
inc ebx
inc ebx
add esp, 4
add ebx, 0xa458
call 0x40cc3c
add byte [edi + eax*2 + 0x46], cl
push eax
dec eax
inc ebx
add esp, 4
xor ebx, 0x7b51
pop ebx
mov edx, dword [ebp - 0xbc]
cmp edx, dword [ebp - 0x270]
je 0x40cc64
mov eax, dword [ebp - 0xbc]
cmp dword [eax + 0x30], 0
jne 0x40c9a5
push esi
push eax
add esp, 4
call 0x40cc76
add byte [eax + 0x38], cl
aas
xor al, 0x4e
cmp bh, byte [edi]
add esp, 4
add esi, 0x16e24
call 0x40cc8c
add byte [esi], bh
inc esi
cmp dword [ecx], edi
push eax
dec edx
xor al, byte [ebx - 0x397efb3c]
invalid
cmp dword [ebp - 0xd0], 0
jne 0x40ccea
push ecx
call 0x40ccb8
add byte [ebx], bh
inc edi
cmp dword [eax + 0x3c], ecx
dec edx
dec ebx
cmp al, 0x83
les eax, [ecx + ebx*2]
push ebx
push eax
add esp, 4
and ebx, 0x14a14
xor ebx, 0x5e85
or ebx, 0x81c9
jmp 0x40ccda
pop ebx
mov dword [ebp - 0x1b8], 0
jmp 0x40ddb1
mov ecx, dword [ebp - 0xd0]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0xe0], 0
push eax
push ebx
add esp, 4
and eax, 0x15c74
add eax, 0x4d7b
xor eax, 0x14493
add eax, 0xf373
pop eax
push eax
push edx
add esp, 4
add eax, 0x9725
jmp 0x40cd31
pop eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0
jne 0x40cd87
push ebx
push esi
add esp, 4
sub ebx, 0x1273f
pop ebx
push edi
xor edi, 0x1304f
call 0x40cd64
add byte [edi], bh
xor al, 0x43
dec eax
dec ebp
dec eax
add esp, 4
jmp 0x40cd6f
add edi, 0x1aa9
pop edi
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0x90], ecx
jmp 0x40d261
mov edx, dword [ebp - 0x344]
mov eax, dword [ebp - 0x7c]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x348], eax
jne 0x40cdac
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0x90], ecx
jmp 0x40d261
push eax
jmp 0x40cdb2
call 0x40cdc2
add byte [eax], bh
inc esi
dec ebx
cmp al, 0x35
dec ebx
push eax
inc esp
dec ebx
dec esp
add esp, 4
and eax, 0x882b
sub eax, 0x6d88
pop eax
push edx
push edx
add esp, 4
and edx, 0x68a1
pop edx
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x348]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x34c], edx
cmp dword [ebp - 0x34c], 0
jne 0x40ce42
push ebx
push eax
add esp, 4
xor ebx, 0xea89
xor ebx, 0x16db6
or ebx, 0x7ea7
add ebx, 0xa2e1
pop ebx
push ecx
push eax
add esp, 4
xor ecx, 0x136ca
jmp 0x40ce30
pop ecx
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x90], eax
jmp 0x40d261
push esi
push esi
add esp, 4
or esi, 0x78f1
add esi, 0xf325
or esi, 0x149f8
add esi, 0x1720c
pop esi
push edi
and edi, 0xb59d
or edi, 0xc064
add edi, 0x14584
pop edi
mov ecx, dword [ebp - 0x7c]
add ecx, dword [ebp - 0x34c]
mov dword [ebp - 0xd4], ecx
jne 0x40cec8
push esi
add esi, 0x2e69
add esi, 0x17f08
sub esi, 0x53ad
pop esi
push esi
push edi
add esp, 4
and esi, 0xc632
add esi, 0x7ece
jmp 0x40ceb0
xor esi, 0x188d
pop esi
mov edx, dword [ebp - 0xe0]
mov dword [ebp - 0x90], edx
jmp 0x40d261
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x7c]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x44c], ecx
push edx
sub edx, 0xf546
pop edx
push edx
or edx, 0x9922
jmp 0x40ceef
jmp 0x40cef5
pop edx
push edi
add edi, 0x7af1
and edi, 0x8b80
pop edi
push eax
and eax, 0x106e2
pop eax
mov edx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x7c]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x450], eax
push eax
push ebx
add esp, 4
sub eax, 0x11a3b
xor eax, 0xc64f
and eax, 0x4597
xor eax, 0xc3a0
pop eax
push ebx
xor ebx, 0x107f4
sub ebx, 0xcafa
and ebx, 0xfe1a
pop ebx
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0x7c]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x454], edx
mov dword [ebp - 0xd8], 0
jmp 0x40cf7d
mov eax, dword [ebp - 0xd8]
add eax, 1
mov dword [ebp - 0xd8], eax
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xd8]
cmp edx, dword [ecx + 0x18]
jae 0x40d255
push edx
call 0x40cfa0
add byte [esi], bh
inc edx
inc eax
inc esp
inc ebp
xor bh, byte [eax]
add esp, 4
or edx, 0x8f6b
and edx, 0x1039d
pop edx
push edi
jmp 0x40cfb6
jmp 0x40cfbd
and edi, 0xf44d
pop edi
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x44c]
mov edx, dword [ebp - 0x7c]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0xdc], edx
push eax
push eax
add esp, 4
sub eax, 0x14b6
jmp 0x40cfed
xor eax, 0x158fc
pop eax
push edi
add edi, 0x1242
add edi, 0x3d81
pop edi
push edx
push eax
add esp, 4
and edx, 0x6a35
pop edx
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x450]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x454]
mov ecx, dword [ebp - 0x7c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x458], ecx
push esi
push ecx
add esp, 4
add esi, 0x125bb
and esi, 0x152b5
pop esi
push eax
push edx
add esp, 4
sub eax, 0xe4b0
sub eax, 0x8311
add eax, 0xfc8a
pop eax
push ebx
or ebx, 0x10b72
pop ebx
mov dword [ebp - 0x40], 0
jmp 0x40d074
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0xdc]
add eax, dword [ebp - 0x40]
movsx ecx, byte [eax]
test ecx, ecx
je 0x40d110
mov edx, dword [ebp - 0x40]
movsx eax, byte [ebp + edx - 0x174]
test eax, eax
je 0x40d110
push esi
and esi, 0xcc1c
add esi, 0x1861c
pop esi
push edi
push ecx
add esp, 4
and edi, 0x695d
and edi, 0xfd54
pop edi
push ecx
push edx
add esp, 4
xor ecx, 0x11aef
add ecx, 0xd36
pop ecx
mov ecx, dword [ebp - 0xdc]
add ecx, dword [ebp - 0x40]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x40]
movsx ecx, byte [ebp + eax - 0x174]
cmp edx, ecx
je 0x40d102
mov edx, dword [ebp - 0xdc]
add edx, dword [ebp - 0x40]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x40]
movsx edx, byte [ebp + ecx - 0x174]
cmp eax, edx
jne 0x40d109
jmp 0x40d06b
jmp 0x40d110
push esi
or esi, 0x1651d
or esi, 0x86e5
or esi, 0xc750
and esi, 0xb661
pop esi
push edi
push eax
add esp, 4
sub edi, 0xd4b5
sub edi, 0x4092
sub edi, 0xce0
pop edi
mov eax, dword [ebp - 0xdc]
add eax, dword [ebp - 0x40]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x40]
movsx eax, byte [ebp + edx - 0x174]
cmp ecx, eax
jne 0x40d16c
mov dword [ebp - 0x274], 0
jmp 0x40d207
push esi
sub esi, 0x16df
or esi, 0x15d46
pop esi
push ebx
push edi
add esp, 4
or ebx, 0x32bd
pop ebx
push eax
push ebx
add esp, 4
or eax, 0xff32
jmp 0x40d197
sub eax, 0xe3cc
pop eax
mov ecx, dword [ebp - 0xdc]
add ecx, dword [ebp - 0x40]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x40]
movsx ecx, byte [ebp + eax - 0x174]
or ecx, 0x20
cmp edx, ecx
jge 0x40d1cb
mov dword [ebp - 0x274], 0xffffffff
jmp 0x40d207
push eax
push edi
add esp, 4
add eax, 0x158ba
or eax, 0xa63b
and eax, 0x885f
pop eax
push eax
add eax, 0x78ba
add eax, 0x64b0
add eax, 0x1158d
xor eax, 0x12744
pop eax
mov dword [ebp - 0x274], 1
cmp dword [ebp - 0x274], 0
jne 0x40d250
push eax
call 0x40d220
add byte [ebx], dh
inc esi
xor al, 0x4e
inc edx
push eax
inc ecx
cmp al, 0x4f
add esp, 4
jmp 0x40d228
call 0x40d235
add byte [esi + 0x4a], al
cmp edi, dword [edx]
cmp al, 0x32
xor al, byte [ebx + 0x7eb04c4]
dec ecx
inc esp
cmp dword [edx + 0x41], eax
dec ecx
cmp dword [eax - 0x75], ebx
xchg ebp, eax
test al, 0xfb
invalid
jmp 0x40cf6e
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x40d30a
push edi
push edi
add esp, 4
and edi, 0x2de
or edi, 0x7069
call 0x40d28e
add byte [edx + 0x4f], al
dec esi
inc esp
cmp dh, byte [edx]
dec ebx
cmp byte [eax], bh
add esp, 4
and edi, 0xc12c
pop edi
push edi
and edi, 0x5e26
pop edi
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x45c], ecx
mov edx, dword [ebp - 0x45c]
mov dword [ebp - 0x460], edx
lea eax, [ebp - 0x2b0]
push eax
call dword [ebp - 0x460]
test eax, eax
jne 0x40d30a
push ebx
push edx
add esp, 4
and ebx, 0xb49b
or ebx, 0x12d1a
jmp 0x40d2e2
pop ebx
push eax
push ecx
add esp, 4
xor eax, 0x14426
xor eax, 0xc05
xor eax, 0x13236
pop eax
mov dword [ebp - 0x1b8], 0
jmp 0x40ddb1
push ebx
push eax
add esp, 4
add ebx, 0x9c55
pop ebx
push esi
push edx
add esp, 4
call 0x40d32a
add byte [edi + 0x36], al
xor edi, dword [ecx]
inc edx
dec edi
inc edi
dec ebp
dec edx
add esp, 4
pop esi
push eax
xor eax, 0x6b4a
add eax, 0x12c21
pop eax
push edi
or edi, 0xcadb
or edi, 0x36d7
pop edi
push ebx
or ebx, 0x7f
jmp 0x40d356
xor ebx, 0x1617b
call 0x40d36a
add byte [ebx + 0x45], cl
dec esi
xor al, 0x4f
dec esp
xor al, byte [ebx - 0x7d]
les eax, [ebx + ebx*2]
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x464], ecx
push esi
push edi
add esp, 4
or esi, 0x41d
pop esi
push ebx
xor ebx, 0x84b4
and ebx, 0x12ba3
pop ebx
push esi
push edi
add esp, 4
and esi, 0xe85c
pop esi
push ecx
push edx
add esp, 4
sub ecx, 0x218e
pop ecx
mov edx, dword [ebp - 0x464]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x468], eax
push esi
jmp 0x40d3c6
add esi, 0xa4b3
jmp 0x40d3d5
xor esi, 0x6dcb
pop esi
push esi
push eax
add esp, 4
jmp 0x40d3e7
or esi, 0x11c4e
pop esi
mov ecx, dword [ebp - 0x468]
mov dword [ebp - 0x350], ecx
cmp dword [ebp - 0x350], 0
jne 0x40d441
push ecx
push ecx
add esp, 4
and ecx, 0x4f0f
jmp 0x40d413
pop ecx
push eax
or eax, 0x16c51
xor eax, 0xc79
call 0x40d431
add byte [edx + 0x49], al
inc edx
cmp al, 0x37
dec esp
dec esi
push eax
add esp, 4
pop eax
mov dword [ebp - 0x74], 0
jmp 0x40d7cd
push edx
push eax
add esp, 4
add edx, 0x13ef
or edx, 0xb39
xor edx, 0xb683
xor edx, 0xc7ed
pop edx
push esi
push edi
add esp, 4
xor esi, 0xb7d5
pop esi
push edx
sub edx, 0xa97e
pop edx
mov edx, dword [ebp - 0x350]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x280], ecx
cmp dword [ebp - 0x280], 0
jne 0x40d4cc
push eax
push edi
add esp, 4
and eax, 0x1385c
add eax, 0x179e0
or eax, 0x8649
or eax, 0xf926
pop eax
push edi
push edx
add esp, 4
jmp 0x40d4b9
or edi, 0x680a
pop edi
mov dword [ebp - 0x74], 0
jmp 0x40d7cd
mov edx, dword [ebp - 0x280]
mov dword [ebp - 0xb4], edx
push edx
push edi
add esp, 4
xor edx, 0x13935
xor edx, 0xc3fb
add edx, 0x11e63
sub edx, 0x96cd
pop edx
push eax
add eax, 0x14d52
pop eax
push esi
push ecx
add esp, 4
sub esi, 0x13b60
pop esi
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x27c], eax
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x278], edx
push ecx
jmp 0x40d52e
call 0x40d53a
add byte [edi], bh
inc edx
cmp dword [ebp + 0x32], ecx
dec esp
add esp, 4
pop ecx
push ebx
xor ebx, 0x7d3d
sub ebx, 0x14d1b
pop ebx
push ebx
jmp 0x40d556
pop ebx
xor eax, eax
mov word [ebp - 0x50], ax
xor ecx, ecx
mov word [ebp - 0x28], cx
push esi
push esi
add esp, 4
jmp 0x40d56e
or esi, 0x10e61
pop esi
push edx
xor edx, 0x644e
pop edx
push edi
push esi
add esp, 4
add edi, 0x2094
or edi, 0x16e03
add edi, 0xd297
pop edi
mov edx, dword [ebp - 0x278]
mov ax, word [edx]
mov word [ebp - 0x1dc], ax
mov ecx, dword [ebp - 0x278]
add ecx, 2
mov dword [ebp - 0x278], ecx
mov dx, word [ebp - 0x1dc]
mov word [ebp - 0x50], dx
push edi
push edi
add esp, 4
xor edi, 0x7a67
add edi, 0x11215
sub edi, 0x3740
xor edi, 0xc80d
pop edi
push eax
jmp 0x40d5e4
sub eax, 0x17339
add eax, 0xcfac
pop eax
mov eax, dword [ebp - 0x27c]
mov cx, word [eax]
mov word [ebp - 0x1de], cx
mov edx, dword [ebp - 0x27c]
add edx, 2
mov dword [ebp - 0x27c], edx
mov ax, word [ebp - 0x1de]
mov word [ebp - 0x28], ax
push edx
push edi
add esp, 4
or edx, 0xb14f
and edx, 0x25c6
and edx, 0x137ab
or edx, 0xefe9
pop edx
push esi
and esi, 0x2ea1
sub esi, 0x6170
and esi, 0xa3fc
pop esi
movzx ecx, word [ebp - 0x28]
test ecx, ecx
jne 0x40d66a
movzx edx, word [ebp - 0x50]
movzx eax, word [ebp - 0x28]
sub edx, eax
mov dword [ebp - 0x358], edx
jmp 0x40d6ed
movzx ecx, word [ebp - 0x50]
movzx edx, word [ebp - 0x28]
cmp ecx, edx
je 0x40d563
movzx eax, word [ebp - 0x50]
xor eax, 0x20
movzx ecx, word [ebp - 0x28]
cmp eax, ecx
je 0x40d563
push edi
sub edi, 0x718d
pop edi
push edx
xor edx, 0xc873
add edx, 0x16494
pop edx
push ecx
push edi
add esp, 4
or ecx, 0xae0e
jmp 0x40d6b3
jmp 0x40d6b8
jmp 0x40d6be
pop ecx
movzx edx, word [ebp - 0x50]
movzx eax, word [ebp - 0x28]
cmp edx, eax
jge 0x40d6d7
mov dword [ebp - 0x354], 0xffffffff
jmp 0x40d6e1
mov dword [ebp - 0x354], 1
mov ecx, dword [ebp - 0x354]
mov dword [ebp - 0x358], ecx
cmp dword [ebp - 0x358], 0
jne 0x40d736
push edi
or edi, 0x13c98
add edi, 0xbe20
pop edi
push edi
push edi
add esp, 4
xor edi, 0x5b87
xor edi, 0xdd1
add edi, 0x568e
pop edi
push ebx
push ebx
add esp, 4
add ebx, 0x472e
pop ebx
mov edx, dword [ebp - 0xb4]
mov dword [ebp - 0x74], edx
jmp 0x40d7cd
mov eax, dword [ebp - 0xb4]
mov ecx, dword [eax]
mov dword [ebp - 0xb4], ecx
push esi
or esi, 0xc21e
sub esi, 0x1c9b
jmp 0x40d759
call 0x40d766
add byte [eax + 0x3a], cl
cmp ecx, dword [ebx + 0x44]
dec esp
inc ebx
add esp, 4
pop esi
push edx
push ebx
add esp, 4
jmp 0x40d775
pop edx
mov edx, dword [ebp - 0xb4]
cmp edx, dword [ebp - 0x280]
je 0x40d794
mov eax, dword [ebp - 0xb4]
cmp dword [eax + 0x30], 0
jne 0x40d4d8
push edi
xor edi, 0x3d0c
or edi, 0xcd0a
xor edi, 0x722f
pop edi
push edi
push edi
add esp, 4
xor edi, 0x14ceb
sub edi, 0xaf21
or edi, 0x514
xor edi, 0x291f
pop edi
mov dword [ebp - 0x74], 0
push ebx
push eax
add esp, 4
xor ebx, 0x66e0
or ebx, 0x56bb
sub ebx, 0xca84
pop ebx
push eax
and eax, 0x1c88
and eax, 0x13316
and eax, 0xf0e5
or eax, 0xc8db
pop eax
mov ecx, dword [ebp - 0x74]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x78], edx
push esi
push esi
add esp, 4
or esi, 0xd834
jmp 0x40d81b
pop esi
push esi
push ecx
add esp, 4
xor esi, 0x14f23
sub esi, 0x1d2b
or esi, 0xdb6a
and esi, 0x11e06
pop esi
mov dword [ebp - 0x108], 0
push ecx
add ecx, 0x167ca
and ecx, 0x5e01
pop ecx
push edx
push ebx
add esp, 4
sub edx, 0x10805
or edx, 0xb3cc
call 0x40d872
add byte [edi], dh
xor eax, 0x38383a3a
inc ebp
inc ebp
dec esp
add esp, 4
pop edx
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0
jne 0x40d8cb
push edi
push ecx
add esp, 4
jmp 0x40d893
call 0x40d8a0
add byte [edi + 0x4b], cl
cmp al, byte [edx + 0x42]
cmp dword [esi - 0x7d], eax
les eax, [ecx + eax*4]
idiv dword [edx - 0x2b]
add byte [eax], al
call 0x40d8b6
add byte [edx + 0x36], cl
xor al, 0x49
aas
dec ebp
cmp dword [ebx - 0x74a0fb3c], eax
invalid
mov edx, dword [ebp - 0x35c]
mov eax, dword [ebp - 0x78]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x360], eax
jne 0x40d8f0
mov ecx, dword [ebp - 0x108]
mov dword [ebp - 0xb8], ecx
jmp 0x40dda5
push esi
push ecx
add esp, 4
xor esi, 0x122c5
call 0x40d908
add byte [ecx + 0x4e], cl
inc edx
dec ebx
dec ebx
cmp eax, 0x4c4833f
jmp 0x40d913
pop esi
push ecx
push edx
add esp, 4
jmp 0x40d921
pop ecx
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x360]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x364], edx
cmp dword [ebp - 0x364], 0
jne 0x40d986
push esi
or esi, 0xf731
sub esi, 0xca78
pop esi
push edx
push ebx
add esp, 4
sub edx, 0xbde0
pop edx
push eax
push edi
add esp, 4
and eax, 0xcf28
xor eax, 0x771f
and eax, 0xc1cf
pop eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xb8], eax
jmp 0x40dda5
push edx
sub edx, 0x105d1
jmp 0x40d996
call 0x40d9a6
add byte [edx + esi], bh
aas
dec ecx
inc edx
cmp dword [esi], edi
push eax
add esp, 4
pop edx
push edi
and edi, 0x11200
and edi, 0x5e0d
pop edi
mov ecx, dword [ebp - 0x78]
add ecx, dword [ebp - 0x364]
mov dword [ebp - 0xe4], ecx
jne 0x40da0c
push edx
or edx, 0x13f1d
sub edx, 0x877a
sub edx, 0x15798
pop edx
push eax
or eax, 0x10979
sub eax, 0x12df2
and eax, 0xe85a
pop eax
push esi
jmp 0x40d9fa
pop esi
mov edx, dword [ebp - 0x108]
mov dword [ebp - 0xb8], edx
jmp 0x40dda5
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x78]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x46c], ecx
push ecx
call 0x40da2e
add byte [eax + eax*2 + 0x37], al
xor bh, byte [edi + eax*2]
xor al, 0x4a
dec edx
add esp, 4
and ecx, 0x194
pop ecx
push edx
push edx
add esp, 4
and edx, 0xedd2
xor edx, 0x9720
add edx, 0xfb50
pop edx
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0x78]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x470], eax
push esi
add esi, 0x7173
jmp 0x40da72
or esi, 0x172f
or esi, 0xf85e
pop esi
push edx
push eax
add esp, 4
jmp 0x40da8b
pop edx
push edx
or edx, 0x172d3
pop edx
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0x78]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x474], edx
mov dword [ebp - 0xe8], 0
jmp 0x40dac1
mov eax, dword [ebp - 0xe8]
add eax, 1
mov dword [ebp - 0xe8], eax
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe8]
cmp edx, dword [ecx + 0x18]
jae 0x40dd99
push eax
sub eax, 0xb850
pop eax
push ecx
sub ecx, 0xaf6
pop ecx
push edx
and edx, 0x11ad
pop edx
push esi
add esi, 0x3d7f
and esi, 0x5d74
add esi, 0x17fec
sub esi, 0xb437
pop esi
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x46c]
mov edx, dword [ebp - 0x78]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x110], edx
push eax
or eax, 0xd05e
or eax, 0xbf34
sub eax, 0x4f71
or eax, 0x20fc
pop eax
push eax
call 0x40db48
add byte [ebx], bh
cmp dword ss:[edx], esi
inc ebp
cmp edi, dword [edi]
add esp, 4
and eax, 0x4fe1
pop eax
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x470]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x474]
mov ecx, dword [ebp - 0x78]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x478], ecx
push ecx
or ecx, 0x15d96
sub ecx, 0xbc37
call 0x40db8f
add byte [esi + 0x3e], al
inc ebp
aaa
cmp al, 0x34
cmp eax, dword [edi - 0x7d]
les eax, [eax + ebp*8]
or eax, dword [eax]
add byte [eax], al
add byte [ecx + 0x3f], cl
cmp al, 0x36
cmp dword ds:[esi + ecx*2], edi
cmp ecx, dword [esi - 0x7d]
les eax, [ecx + ebx*2]
mov dword [ebp - 0x44], 0
jmp 0x40dbb8
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x110]
add eax, dword [ebp - 0x44]
movsx ecx, byte [eax]
test ecx, ecx
je 0x40dc54
mov edx, dword [ebp - 0x44]
movsx eax, byte [ebp + edx - 0x144]
test eax, eax
je 0x40dc54
push eax
jmp 0x40dbe4
jmp 0x40dbec
and eax, 0x142e6
pop eax
push esi
push edx
add esp, 4
jmp 0x40dc00
pop esi
push ebx
push esi
add esp, 4
add ebx, 0x13655
pop ebx
mov ecx, dword [ebp - 0x110]
add ecx, dword [ebp - 0x44]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x44]
movsx ecx, byte [ebp + eax - 0x144]
cmp edx, ecx
je 0x40dc46
mov edx, dword [ebp - 0x110]
add edx, dword [ebp - 0x44]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x44]
movsx edx, byte [ebp + ecx - 0x144]
cmp eax, edx
jne 0x40dc4d
jmp 0x40dbaf
jmp 0x40dc54
push ecx
add ecx, 0x2893
jmp 0x40dc62
jmp 0x40dc67
pop ecx
push ecx
push edi
add esp, 4
or ecx, 0x5c0f
add ecx, 0x495a
and ecx, 0x14a0a
xor ecx, 0xdf53
pop ecx
mov eax, dword [ebp - 0x110]
add eax, dword [ebp - 0x44]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x44]
movsx eax, byte [ebp + edx - 0x144]
cmp ecx, eax
jne 0x40dcb0
mov dword [ebp - 0x284], 0
jmp 0x40dd4b
push ebx
push ecx
add esp, 4
jmp 0x40dcbd
or ebx, 0x8d16
sub ebx, 0xb95a
and ebx, 0xc58
pop ebx
push esi
push ebx
add esp, 4
or esi, 0x2244
or esi, 0x185b7
pop esi
mov ecx, dword [ebp - 0x110]
add ecx, dword [ebp - 0x44]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x44]
movsx ecx, byte [ebp + eax - 0x144]
or ecx, 0x20
cmp edx, ecx
jge 0x40dd0f
mov dword [ebp - 0x284], 0xffffffff
jmp 0x40dd4b
push edi
push edx
add esp, 4
jmp 0x40dd1c
call 0x40dd28
add byte [eax + 0x3e], al
cmp byte [edx + 0x37], cl
inc ebx
add esp, 4
call 0x40dd37
add byte [edx + 0x3e], al
cmp al, 0x3d
xor eax, 0x4c48348
or edi, 0x14a3b
pop edi
mov dword [ebp - 0x284], 1
cmp dword [ebp - 0x284], 0
jne 0x40dd94
push esi
or esi, 0xf933
sub esi, 0x5352
add esi, 0x679c
pop esi
push ecx
call 0x40dd76
add byte [0x4f4f4e3d], dh
xor eax, 0x4c48349
add ecx, 0x12bbc
add ecx, 0xcc2e
pop ecx
mov edx, dword [ebp - 0x478]
mov dword [ebp - 0xb8], edx
jmp 0x40dda5
jmp 0x40dab2
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xb8], eax
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x1b8], ecx
push 0
call dword [ebp - 0x1b8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret