Function at 0x40aae5
Capabilities:
Contain obfuscated stackstrings
Get number of processors

Disassembly:
add esp, 4
call 0x40a294
add byte [edi + 0x343b3436], bh
xor al, 0x35
add esp, 4
sub edi, 0x131fa
pop edi
jmp 0x40a4d1
push edi
push ebx
add esp, 4
call 0x40a4e4
add byte [ebx], bh
inc edx
cmp al, byte [edi + 0x35]
xor ecx, dword [ecx + 0x35]
add esp, 4
and edi, 0xe6a5
add edi, 0x6fd7
call 0x40a4ff
add byte [edx + 0x37], cl
inc eax
inc esp
dec esi
dec edi
add esp, 4
pop edi
mov dword [ebp - 0xa5c], 0
push edx
and edx, 0x5538
xor edx, 0x773b
jmp 0x40a520
pop edx
push ebx
add ebx, 0x912d
call 0x40a535
add byte [ebp + 0x40], cl
inc ebx
dec ebx
inc ebp
inc eax
inc edx
add esp, 4
and ebx, 0x36d6
pop ebx
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push ebx
or ebx, 0x136c5
sub ebx, 0x10c2e
xor ebx, 0x1109b
pop ebx
push ebx
and ebx, 0x5a58
pop ebx
push edx
add edx, 0x91a9
and edx, 0x4783
pop edx
push ebx
and ebx, 0xdb53
pop ebx
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push ecx
push ecx
add esp, 4
and ecx, 0x976
or ecx, 0x14e8d
pop ecx
push esi
xor esi, 0x1600f
sub esi, 0x14405
xor esi, 0x18058
pop esi
push eax
push ecx
add esp, 4
and eax, 0x4a4f
pop eax
push ebx
and ebx, 0xc572
add ebx, 0xbc30
pop ebx
push ebx
sub ebx, 0x22db
call 0x40a6b2
add byte [ebx], dh
inc edi
aaa
inc ebp
inc ecx
dec edx
add esp, 4
or ebx, 0x5e17
xor ebx, 0x17c69
pop ebx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push ecx
push esi
add esp, 4
or ecx, 0x819a
pop ecx
push esi
sub esi, 0x5f3d
pop esi
push esi
push esi
add esp, 4
and esi, 0xfefa
or esi, 0x5da1
xor esi, 0xdac7
and esi, 0x1814e
pop esi
cmp dword [ebp - 0x14d4], 0
jne 0x40a734
mov dword [ebp - 0x2e0], 0
jmp 0x40a9f0
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push ebx
sub ebx, 0xbee0
sub ebx, 0x11253
pop ebx
push edi
xor edi, 0xe3bc
call 0x40a768
add byte [esi + 0x35], cl
inc ecx
dec eax
inc esp
inc esi
xor eax, 0x5f04c483
push ecx
push ebx
add esp, 4
and ecx, 0x3b37
pop ecx
cmp dword [ebp - 0xc20], 0
jne 0x40a790
mov dword [ebp - 0x2e0], 0
jmp 0x40a9f0
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push edi
and edi, 0x12cad
xor edi, 0x1294b
pop edi
push edx
push edx
add esp, 4
or edx, 0xb3cc
and edx, 0x646c
pop edx
push ebx
push edi
add esp, 4
and ebx, 0x15fd6
and ebx, 0x11f63
pop ebx
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push ecx
push esi
add esp, 4
jmp 0x40a806
or ecx, 0x10721
xor ecx, 0x87c6
pop ecx
push ecx
or ecx, 0x134ca
add ecx, 0x10d0
add ecx, 0xca4c
or ecx, 0x120f4
pop ecx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push edi
or edi, 0xd239
pop edi
push ecx
push ebx
add esp, 4
sub ecx, 0x1263c
xor ecx, 0x13fe8
pop ecx
push ecx
push ecx
add esp, 4
or ecx, 0x1e43
jmp 0x40a8b2
xor ecx, 0x9763
pop ecx
movzx edx, word [ebp - 0x100]
test edx, edx
jne 0x40a8dc
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
sub eax, ecx
mov dword [ebp - 0x1498], eax
jmp 0x40a93f
movzx edx, word [ebp - 0x1f8]
movzx eax, word [ebp - 0x100]
cmp edx, eax
je 0x40a7fb
movzx ecx, word [ebp - 0x1f8]
xor ecx, 0x20
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x40a7fb
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
jge 0x40a929
mov dword [ebp - 0x14d8], 0xffffffff
jmp 0x40a933
mov dword [ebp - 0x14d8], 1
mov edx, dword [ebp - 0x14d8]
mov dword [ebp - 0x1498], edx
cmp dword [ebp - 0x1498], 0
jne 0x40a988
push edi
push edx
add esp, 4
or edi, 0x15414
or edi, 0x3001
call 0x40a967
add byte [ebx], bh
cmp al, 0x39
cmp byte [edi + 0x3e], cl
inc ecx
dec edx
add esp, 4
and edi, 0x10dd3
pop edi
push ebx
jmp 0x40a979
pop ebx
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x2e0], eax
jmp 0x40a9f0
push esi
xor esi, 0xf22a
pop esi
push esi
push eax
add esp, 4
call 0x40a9a4
add byte [eax + 0x4d], dl
inc ebx
cmp byte [ebx], bh
inc ecx
inc eax
inc ecx
inc esi
add esp, 4
pop esi
push eax
push edx
add esp, 4
add eax, 0x7ffa
or eax, 0x6c4f
pop eax
mov ecx, dword [ebp - 0x4d4]
mov edx, dword [ecx]
mov dword [ebp - 0x4d4], edx
mov eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0xc20]
je 0x40a9e6
mov ecx, dword [ebp - 0x4d4]
cmp dword [ecx + 0x30], 0
jne 0x40a79c
mov dword [ebp - 0x2e0], 0
push edx
push ecx
add esp, 4
sub edx, 0x184f
jmp 0x40aa01
pop edx
push edi
call 0x40aa13
add byte [ebx], dh
inc ebp
cmp al, byte [ebx + 0x40]
dec ebx
xor dh, byte [esi]
inc ebp
add esp, 4
jmp 0x40aa1b
or edi, 0xa86
pop edi
cmp dword [ebp - 0x2e0], 0
jne 0x40b33b
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push edx
add edx, 0x11ce2
sub edx, 0x5cd9
pop edx
push ecx
call 0x40aae5
add byte [eax], bh
inc ecx
cmp al, 0x4d
dec esp
aaa
dec ebp
xor eax, 0xeb04c483
add esi, dword [esi]
inc edi
xor al, 0x81
jmp 0x411612
push eax
push edx
add esp, 4
add eax, 0xd7b0
xor eax, 0x155ec
and eax, 0x579d
pop eax
push ecx
xor ecx, 0xf40b
and ecx, 0x14efb
and ecx, 0x3bad
sub ecx, 0x24d1
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push ebx
push edx
add esp, 4
jmp 0x40b3a2
pop ebx
push eax
jmp 0x40b3ab
sub eax, 0xfce2
and eax, 0x80cd
pop eax
push edx
xor edx, 0x6904
or edx, 0xba1f
pop edx
cmp dword [ebp - 0x14f4], 0
jne 0x40b3de
mov dword [ebp - 0x2e0], 0
jmp 0x40b685
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push edi
push ecx
add esp, 4
sub edi, 0xf201
call 0x40b40a
add byte [ebx], bh
inc esp
xor eax, dword [esi + 0x33]
cmp al, 0x4c
dec esi
dec esp
add esp, 4
or edi, 0xe80e
pop edi
push edi
sub edi, 0x102a2
add edi, 0x124dc
pop edi
cmp dword [ebp - 0xc3c], 0
jne 0x40b43a
mov dword [ebp - 0x2e0], 0
jmp 0x40b685
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push edi
push eax
add esp, 4
and edi, 0x1069a
and edi, 0xf12b
pop edi
push esi
push esi
add esp, 4
or esi, 0xe14c
or esi, 0x16e52
sub esi, 0x4c66
jmp 0x40b477
pop esi
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push edi
push esi
add esp, 4
sub edi, 0x1ac
add edi, 0x14cb5
pop edi
push edx
add edx, 0x1034a
add edx, 0x9b16
pop edx
push edx
push ebx
add esp, 4
xor edx, 0xc8e6
jmp 0x40b4d3
pop edx
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push edx
push ebx
add esp, 4
xor edx, 0x8297
sub edx, 0xcad1
pop edx
push ecx
push esi
add esp, 4
add ecx, 0x354e
pop ecx
push eax
sub eax, 0x765c
xor eax, 0x72c4
and eax, 0x3c33
pop eax
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x40b57a
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x40b5d4
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x40b4a2
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x40b4a2
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x40b5be
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x40b5c8
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x40b61d
push ebx
push esi
add esp, 4
xor ebx, 0x185e1
call 0x40b5f5
add byte [ebx + 0x46], cl
cmp esi, dword ds:[edi]
dec ebx
cmp eax, 0x8104c483
retf
push eax
push edx
add esp, 4
or eax, 0x7435
or eax, 0x15f5b
or eax, 0x9cac
and eax, 0x16fdd
pop eax
push eax
and eax, 0x10164
or eax, 0xcfea
and eax, 0x1eff
pop eax
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [ebp - 0xc3c]
je 0x40b67b
mov edx, dword [ebp - 0x4dc]
cmp dword [edx + 0x30], 0
jne 0x40b446
mov dword [ebp - 0x2e0], 0
push edx
and edx, 0xe938
pop edx
push esi
and esi, 0x3918
call 0x40b6a3
add byte [ebx + eax*2], bh
dec esi
aas
cmp eax, 0x38444249
add esp, 4
call 0x40b6b3
add byte [0x4f3b384e], dh
dec eax
inc edx
add esp, 4
pop esi
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push edi
push edx
add esp, 4
add edi, 0x8e8b
and edi, 0x7f16
xor edi, 0x1ca6
pop edi
push eax
call 0x40b6ee
add byte [eax], bh
dec edx
cmp al, 0x3c
cmp eax, 0x833a4943
les eax, [ecx + eax*4]
loopne 0x40b74f
adc dword [ecx], eax
add byte [eax - 0x39], bl
test esp, esi
clc
invalid
add byte [ecx + 8], bh
imul edx, ecx, 0
mov eax, dword [ebp - 0x1504]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1508], ecx
cmp dword [ebp - 0x1508], 0
jne 0x40b782
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
jmp 0x40ba19
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1508]
mov dword [ebp - 0x700], eax
jne 0x40b7a7
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], ecx
jmp 0x40ba19
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18c4], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18c8], ecx
mov dword [ebp - 0x704], 0
jmp 0x40b801
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax + 0x18]
jae 0x40ba0d
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c0]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18c8]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18cc], eax
mov dword [ebp - 0x184], 0
jmp 0x40b871
mov ecx, dword [ebp - 0x184]
add ecx, 1
mov dword [ebp - 0x184], ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
test eax, eax
je 0x40b923
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
test edx, edx
je 0x40b923
push eax
call 0x40b8ae
add byte [edx], bh
xor al, 0x3d
inc ebx
push eax
dec edi
xor ecx, dword ss:[edx - 0x7d]
les eax, [ecx + eax*4]
rcl byte [edi], 0x69
add dword [eax], eax
pop eax
push edx
push ecx
add esp, 4
sub edx, 0x11d5a
sub edx, 0xd8e8
add edx, 0x137ad
pop edx
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
cmp ecx, eax
je 0x40b915
mov ecx, dword [ebp - 0x708]
add ecx, dword [ebp - 0x184]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x184]
movsx ecx, byte [ebp + eax - 0x804]
cmp edx, ecx
jne 0x40b91c
jmp 0x40b862
jmp 0x40b923
push ebx
push eax
add esp, 4
jmp 0x40b930
add ebx, 0x3672
pop ebx
push ebx
push edi
add esp, 4
xor ebx, 0x13a37
xor ebx, 0x15071
add ebx, 0xe8dc
and ebx, 0x16798
pop ebx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
cmp eax, edx
jne 0x40b982
mov dword [ebp - 0xc40], 0
jmp 0x40b9f1
push eax
xor eax, 0x1148c
or eax, 0x10bf4
add eax, 0x16410
and eax, 0x4400
pop eax
push edi
push eax
add esp, 4
sub edi, 0x12ba8
or edi, 0xc559
jmp 0x40b9b3
pop edi
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
or eax, 0x20
cmp ecx, eax
jge 0x40b9e7
mov dword [ebp - 0xc40], 0xffffffff
jmp 0x40b9f1
mov dword [ebp - 0xc40], 1
cmp dword [ebp - 0xc40], 0
jne 0x40ba08
mov ecx, dword [ebp - 0x18cc]
mov dword [ebp - 0x4e0], ecx
jmp 0x40ba19
jmp 0x40b7f2
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x738], eax
push edx
push esi
add esp, 4
sub edx, 0xc8bb
call 0x40ba3d
add byte [ecx], bh
dec edi
dec eax
inc edx
inc esi
inc edx
dec esi
add esp, 4
pop edx
push edi
add edi, 0x6d41
pop edi
push edi
add edi, 0x494d
or edi, 0x2ce7
pop edi
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push eax
push edi
add esp, 4
call 0x40ba7a
add byte [0x42374339], dh
cmp byte [edx + 0x4e], cl
inc esp
add esp, 4
xor eax, 0xd4e8
pop eax
push edx
push ecx
add esp, 4
add edx, 0x897d
pop edx
push esi
jmp 0x40ba97
pop esi
cmp dword [ebp - 0x3cc], 0
je 0x40baaa
cmp dword [ebp - 0xa5c], 0
jne 0x40baf0
push ebx
sub ebx, 0xbdac
xor ebx, 0x104f
and ebx, 0x39d7
pop ebx
push edi
push edi
add esp, 4
add edi, 0x16dc9
pop edi
push ecx
push ecx
add esp, 4
sub ecx, 0x1064d
xor ecx, 0x8fc1
pop ecx
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push ebx
push esi
add esp, 4
and ebx, 0x16ae9
call 0x40bb13
add byte [0x42374a48], dh
xor dh, byte [edi]
dec ebp
add esp, 4
add ebx, 0x4925
call 0x40bb28
add byte [eax], bh
inc eax
dec edi
cmp dword [ecx + eax*2 - 0x7d], eax
les eax, [ebx + ebx*2]
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push ecx
xor ecx, 0x17c36
call 0x40bb6e
add byte [eax], bh
cmp byte [edx], bh
dec edx
xor eax, dword [edi + 0x40]
cmp eax, 0xc4834a3e
add al, 0x59
push ecx
jmp 0x40bb7c
sub ecx, 0xce75
sub ecx, 0x155c5
pop ecx
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push esi
call 0x40bc00
add byte [esi], dh
dec eax
dec edx
inc ebp
dec esi
xor al, 0x44
add esp, 4
sub esi, 0x4995
or esi, 0x12733
pop esi
push esi
and esi, 0xc797
xor esi, 0x92d4
and esi, 0x17326
pop esi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push ecx
sub ecx, 0x56a8
and ecx, 0xfdd4
xor ecx, 0x12e02
or ecx, 0x157dc
pop ecx
push ecx
call 0x40bc73
add byte [edx + 0x42], cl
dec esi
dec esp
push eax
inc eax
inc ebx
add esp, 4
sub ecx, 0xe879
pop ecx
cmp dword [ebp - 0x150c], 0
jne 0x40bc95
mov dword [ebp - 0x2a8], 0
jmp 0x40bf3c
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push ebx
push ebx
add esp, 4
jmp 0x40bcb2
pop ebx
push edx
push edx
add esp, 4
or edx, 0xe396
xor edx, 0x1c4b
pop edx
push eax
and eax, 0x11297
add eax, 0x18600
or eax, 0x16a87
pop eax
cmp dword [ebp - 0xc4c], 0
jne 0x40bcf1
mov dword [ebp - 0x2a8], 0
jmp 0x40bf3c
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push esi
push ebx
add esp, 4
add esi, 0x41dc
jmp 0x40bd10
and esi, 0x8f77
add esi, 0xb690
pop esi
push ecx
push ecx
add esp, 4
xor ecx, 0xf1bd
or ecx, 0x2eb8
pop ecx
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push esi
add esi, 0xc003
pop esi
push esi
jmp 0x40bd6b
add esi, 0x8157
xor esi, 0x935f
pop esi
push esi
call 0x40bd87
add byte [edx], dh
cmp dword [edx], esi
dec esp
inc edi
inc esi
inc ecx
add esp, 4
pop esi
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push eax
xor eax, 0x6611
and eax, 0xc3d1
sub eax, 0x107cd
jmp 0x40bdfa
pop eax
push edi
or edi, 0x609e
jmp 0x40be07
add edi, 0x7e72
sub edi, 0x11842
pop edi
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x40be31
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1514], ecx
jmp 0x40be8b
movzx eax, word [ebp - 0x204]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x40bd59
movzx edx, word [ebp - 0x204]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x40bd59
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x40be75
mov dword [ebp - 0x1510], 0xffffffff
jmp 0x40be7f
mov dword [ebp - 0x1510], 1
mov eax, dword [ebp - 0x1510]
mov dword [ebp - 0x1514], eax
cmp dword [ebp - 0x1514], 0
jne 0x40bed4
push edx
or edx, 0x10953
xor edx, 0x3825
or edx, 0xee4f
pop edx
push edi
push edx
add esp, 4
xor edi, 0xe0a7
and edi, 0x8be4
and edi, 0x15df3
jmp 0x40bec5
pop edi
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp - 0x2a8], ecx
jmp 0x40bf3c
push ebx
push ebx
add esp, 4
sub ebx, 0x919b
jmp 0x40bee7
xor ebx, 0xb9f0
xor ebx, 0x2507
pop ebx
push ebx
push edi
add esp, 4
add ebx, 0x13870
or ebx, 0xc90e
pop ebx
mov edx, dword [ebp - 0x4e4]
mov eax, dword [edx]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
invalid
invalid