Function at 0x40bacd
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop ebx
push ecx
push eax
add esp, 4
add ecx, 0x12386
xor ecx, 0x792b
jns 0x409e92
add byte [ecx + 0x3375e9], al
add byte [ecx - 0x75], bl
lea ecx, [eax]
cld
invalid
dec dword [ecx - 0x2eb73]
mov dword [ebp - 0x2ec], ecx
cmp dword [ebp - 0x2ec], 0
jne 0x409eed
push edi
push edx
add esp, 4
add edi, 0x9197
add edi, 0x3466
xor edi, 0x17769
add edi, 0xddda
pop edi
push esi
push edx
add esp, 4
xor esi, 0x15f2b
pop esi
push ebx
and ebx, 0xd532
pop ebx
mov dword [ebp - 0x70], 0
jmp 0x40a279
push eax
or eax, 0xbf0f
or eax, 0x10067
pop eax
push esi
call 0x409f09
add byte [eax], al
inc ecx
xor al, 0x4e
cmp al, 0x3f
xor bh, byte [ebx]
add esp, 4
pop esi
push eax
call 0x409f1b
add byte [eax], al
add byte [eax], al
dec ecx
inc esi
inc edi
inc esp
inc ebx
dec ecx
cmp eax, dword [ebx - 0x74a7fb3c]
xchg ebp, eax
adc al, 0xfd
invalid
cmp dword [ebp - 0x70], 0
jne 0x40af2f
push ecx
call 0x40a292
add byte [esi + 0x39], cl
inc ebp
aaa
aas
inc esi
inc esp
push eax
add esp, 4
or ecx, 0x8294
pop ecx
push esi
push edx
add esp, 4
xor esi, 0x12453
jmp 0x40a2ae
add esi, 0x11b77
pop esi
mov ecx, 0x6b
mov word [ebp - 0x3d8], cx
mov edx, 0x65
mov word [ebp - 0x3d6], dx
mov eax, 0x72
mov word [ebp - 0x3d4], ax
mov ecx, 0x6e
mov word [ebp - 0x3d2], cx
mov edx, 0x65
mov word [ebp - 0x3d0], dx
mov eax, 0x6c
mov word [ebp - 0x3ce], ax
mov ecx, 0x33
add byte [eax], al
mov word [ebp - 0x3cc], cx
mov edx, 0x32
mov word [ebp - 0x3ca], dx
xchg ebp, eax
cld
invalid
invalid
mov eax, 0x2e
mov word [ebp - 0x3c8], ax
invalid
mov ecx, 0x64
mov word [ebp - 0x3c6], cx
mov edx, 0x6c
mov word [ebp - 0x3c4], dx
mov eax, 0x6c
mov word [ebp - 0x3c2], ax
xor ecx, ecx
mov word [ebp - 0x3c0], cx
push esi
push eax
add esp, 4
add esi, 0x591b
xor esi, 0x17fad
and esi, 0x7260
pop esi
push edi
push edx
add esp, 4
xor edi, 0x42af
sub edi, 0x4ba3
jmp 0x40a37f
pop edi
mov byte [ebp - 0x164], 0x4c
mov byte [ebp - 0x163], 0x6f
mov byte [ebp - 0x162], 0x61
mov byte [ebp - 0x161], 0x64
mov byte [ebp - 0x160], 0x4c
mov byte [ebp - 0x15f], 0x69
mov byte [ebp - 0x15e], 0x62
mov byte [ebp - 0x15d], 0x72
mov byte [ebp - 0x15c], 0x61
mov byte [ebp - 0x15b], 0x72
mov byte [ebp - 0x15a], 0x79
mov byte [ebp - 0x159], 0x57
mov byte [ebp - 0x158], 0
push esi
push ebx
add esp, 4
xor esi, 0x259e
or esi, 0x15e14
add esi, 0x2c7
call 0x40a401
add byte [ebp + 0x4a], al
dec esi
inc eax
inc ebx
cmp esi, dword [edx + eax*2]
cmp eax, 0x5e04c483
push edi
add edi, 0xa70b
pop edi
push ecx
xor ecx, 0x14553
add ecx, 0x164ec
and ecx, 0xd5a5
pop ecx
push ecx
push eax
add esp, 4
xor ecx, 0xee04
and ecx, 0x8a6b
add ecx, 0x10a35
sub ecx, 0x124ea
pop ecx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x3fc], edx
push ecx
push edi
add esp, 4
add ecx, 0x8915
pop ecx
push ecx
push edi
add esp, 4
or ecx, 0x3de1
sub ecx, 0x172f5
add ecx, 0xc0d5
pop ecx
push edi
xor edi, 0x9315
and edi, 0x85ef
pop edi
mov eax, dword [ebp - 0x3fc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x400], ecx
push esi
push edx
add esp, 4
xor esi, 0x3119
pop esi
push ecx
sub ecx, 0xa23e
sub ecx, 0x12cf8
pop ecx
push ecx
push esi
add esp, 4
sub ecx, 0x17ac8
sub ecx, 0xaa03
xor ecx, 0x8aed
pop ecx
mov edx, dword [ebp - 0x400]
mov dword [ebp - 0x2f8], edx
cmp dword [ebp - 0x2f8], 0
jne 0x40a515
push esi
push edi
add esp, 4
xor esi, 0x8fee
or esi, 0x1076a
pop esi
push eax
or eax, 0x1278f
pop eax
push ecx
sub ecx, 0x41e5
pop ecx
push edx
add edx, 0x11ed6
jmp 0x40a505
pop edx
mov dword [ebp - 0xec], 0
jmp 0x40a8aa
push esi
or esi, 0x552
jmp 0x40a522
pop esi
push edi
add edi, 0xb079
pop edi
push edx
jmp 0x40a532
pop edx
push edi
xor edi, 0x12160
or edi, 0x10122
or edi, 0x17797
pop edi
mov eax, dword [ebp - 0x2f8]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x244], edx
cmp dword [ebp - 0x244], 0
jne 0x40a5a3
push esi
jmp 0x40a56b
xor esi, 0x4e7b
jmp 0x40a578
pop esi
push ebx
jmp 0x40a581
or ebx, 0x16555
or ebx, 0xd16f
or ebx, 0x1540
pop ebx
mov dword [ebp - 0xec], 0
jmp 0x40a8aa
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0xa4], eax
push esi
jmp 0x40a5b7
and esi, 0x8ba7
jmp 0x40a5c6
pop esi
push edi
or edi, 0xc41a
sub edi, 0x880d
and edi, 0xc572
jmp 0x40a5e0
pop edi
lea ecx, [ebp - 0x3d8]
mov dword [ebp - 0x240], ecx
mov edx, dword [ebp - 0xa4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x23c], eax
push edi
push ecx
add esp, 4
call 0x40a60e
add byte [eax], bh
inc ecx
xor al, 0x4b
inc esi
inc edi
add esp, 4
xor edi, 0x16f59
pop edi
push ebx
push ebx
add esp, 4
call 0x40a62a
add byte [ecx], bh
inc ebp
push eax
dec ecx
cmp dh, byte [esi]
cmp al, byte [ebx + 0x335b04c4]
leave
mov word [ebp - 0x64], cx
xor edx, edx
mov word [ebp - 0x18], dx
push edi
push edi
add esp, 4
jmp 0x40a647
add edi, 0xd2fb
call 0x40a659
add byte [edx + edi + 0x3d], cl
xor eax, 0x4c4834c
call 0x40a668
add byte [eax + 0x44], al
inc eax
dec edx
aaa
dec ebx
add esp, 4
pop edi
mov eax, dword [ebp - 0x23c]
mov cx, word [eax]
mov word [ebp - 0x1ce], cx
mov edx, dword [ebp - 0x23c]
add edx, 2
mov dword [ebp - 0x23c], edx
mov ax, word [ebp - 0x1ce]
mov word [ebp - 0x64], ax
push esi
or esi, 0x134c2
and esi, 0x3732
and esi, 0x4b6
pop esi
push eax
push edi
add esp, 4
add eax, 0xe43d
and eax, 0xe6b2
add eax, 0xb1eb
sub eax, 0x13ed2
pop eax
mov ecx, dword [ebp - 0x240]
mov dx, word [ecx]
mov word [ebp - 0x1d0], dx
mov eax, dword [ebp - 0x240]
add eax, 2
mov dword [ebp - 0x240], eax
mov cx, word [ebp - 0x1d0]
mov word [ebp - 0x18], cx
push ebx
push edx
add esp, 4
or ebx, 0x7572
or ebx, 0xf993
add ebx, 0x5293
pop ebx
push ebx
push eax
add esp, 4
and ebx, 0x6fd6
pop ebx
push ebx
sub ebx, 0xeae3
sub ebx, 0x4269
pop ebx
movzx edx, word [ebp - 0x18]
test edx, edx
jne 0x40a741
movzx eax, word [ebp - 0x64]
movzx ecx, word [ebp - 0x18]
sub eax, ecx
mov dword [ebp - 0x300], eax
jmp 0x40a7c4
movzx edx, word [ebp - 0x64]
movzx eax, word [ebp - 0x18]
cmp edx, eax
je 0x40a63a
movzx ecx, word [ebp - 0x64]
xor ecx, 0x20
movzx edx, word [ebp - 0x18]
cmp ecx, edx
je 0x40a63a
push ecx
and ecx, 0x17452
call 0x40a77a
add byte [eax], bh
aas
dec ebx
dec edx
inc ebx
dec esp
dec edi
cmp esi, dword [edx]
add esp, 4
xor ecx, 0xd5e7
pop ecx
push esi
call 0x40a792
add byte [ebp + 0x35], al
aaa
inc ecx
inc esp
inc edx
xor al, byte [ebx + 0xf5e04c4]
mov bh, 0x45
pushfd
movzx ecx, word [ebp - 0x18]
cmp eax, ecx
jge 0x40a7ae
mov dword [ebp - 0x2fc], 0xffffffff
jmp 0x40a7b8
mov dword [ebp - 0x2fc], 1
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x300], edx
cmp dword [ebp - 0x300], 0
jne 0x40a810
push eax
push ecx
add esp, 4
or eax, 0xa5a5
pop eax
push ecx
xor ecx, 0xe430
or ecx, 0x157a6
sub ecx, 0xd2da
pop ecx
push ebx
push edx
add esp, 4
and ebx, 0x16c51
xor ebx, 0x116bb
pop ebx
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xec], eax
jmp 0x40a8aa
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ecx]
mov dword [ebp - 0xa4], edx
push ecx
push esi
add esp, 4
or ecx, 0x1e91
pop ecx
push ecx
sub ecx, 0x55b9
call 0x40a840
add byte [edi], dh
dec ebp
dec ecx
dec ecx
cmp eax, 0xc4833c3f
add al, 0x81
int1
add byte [edx], al
add dword [eax], eax
add ecx, 0x14cb1
pop ecx
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x244]
je 0x40a86e
mov ecx, dword [ebp - 0xa4]
cmp dword [ecx + 0x30], 0
jne 0x40a5af
push ebx
xor ebx, 0x12c06
pop ebx
push edx
push eax
add esp, 4
jmp 0x40a881
and edx, 0x7f03
pop edx
push ecx
push esi
add esp, 4
or ecx, 0x56f1
or ecx, 0x8054
sub ecx, 0x110c6
pop ecx
mov dword [ebp - 0xec], 0
cmp dword [ebp - 0xec], 0
jne 0x40a8f4
push esi
push ecx
add esp, 4
call 0x40a8c7
add byte [ebx + eax*2 + 0x39], al
inc edx
push eax
xor bh, byte [0xc4833b3f]
add al, 0x81
out dx, al
sub byte ss:[eax], al
add byte [ecx + 0x6440ce], al
add byte [ecx + 0xf30eee], al
add byte [esi + 0x56], bl
sub esi, 0xb41c
pop esi
mov dword [ebp - 0x1bc], 0
jmp 0x40b9d6
mov edx, dword [ebp - 0xec]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0xfc], 0
push edx
push edi
add esp, 4
sub edx, 0x721e
call 0x40a925
add byte [esp + ecx*2 + 0x3e], cl
inc edi
cmp al, 0x37
add esp, 4
add edx, 0xba24
call 0x40a93b
add byte [ebx + 0x43], al
cmp dh, byte [edx]
xor esi, dword ds:[0x5a04c483]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x304], ecx
cmp dword [ebp - 0x304], 0
jne 0x40a997
push esi
push eax
add esp, 4
jmp 0x40a95e
sub esi, 0x1621f
or esi, 0x264e
pop esi
push ebx
add ebx, 0x1009e
pop ebx
push ecx
push edi
add esp, 4
jmp 0x40a97f
and ecx, 0x1eb7
pop ecx
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x94], edx
jmp 0x40ae86
mov eax, dword [ebp - 0x304]
mov ecx, dword [ebp - 0x84]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x308], ecx
jne 0x40a9bf
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x94], edx
jmp 0x40ae86
push edi
or edi, 0x945b
add edi, 0xb432
sub edi, 0x1a8c
jmp 0x40a9db
pop edi
push eax
jmp 0x40a9e4
and eax, 0x1a7e
sub eax, 0x15667
pop eax
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x308]
mov eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0
jne 0x40aa55
push eax
push edi
add esp, 4
call 0x40aa27
add byte [ebx], bh
dec esp
dec ecx
dec eax
cmp al, 0x3c
cmp byte [ecx + ecx*2], bh
inc edi
add esp, 4
pop eax
push edi
push ebx
add esp, 4
call 0x40aa40
add byte [ebx], dh
cmp eax, 0x3f4c3240
dec eax
dec esi
inc ecx
inc esi
add esp, 4
pop edi
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x94], ecx
jmp 0x40ae86
push eax
push ebx
add esp, 4
call 0x40aa6a
add byte [0x3b35453c], bh
cmp al, 0x42
dec ebp
dec esi
add esp, 4
xor eax, 0x17235
jmp 0x40aa78
pop eax
push edi
xor edi, 0x14ac7
or edi, 0x657d
pop edi
mov edx, dword [ebp - 0x84]
add edx, dword [ebp - 0x30c]
mov dword [ebp - 0xf0], edx
jne 0x40aade
push edi
push esi
add esp, 4
xor edi, 0xf54
or edi, 0xcee8
xor edi, 0x95bf
add byte [eax], al
and edi, 0xffdc
pop edi
push edi
sub edi, 0xc2cf
pop edi
push esi
push esi
add esp, 4
xor esi, 0x43f7
pop esi
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x94], eax
jmp 0x40ae86
mov ecx, dword [ebp - 0xf0]
mov edx, dword [ebp - 0x84]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x404], edx
push edx
jmp 0x40aaf9
or edx, 0x7869
add edx, 0xa21
jmp 0x40ab0d
pop edx
push edx
jmp 0x40ab15
add edx, 0xa2a5
jmp 0x40ab24
pop edx
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x84]
inc dword [ebx]
dec eax
and al, 0x89
invalid
clc
sti
invalid
call dword [edi - 0x7f]
out dx, eax
out dx, eax
rol byte [eax], 0
add byte [ecx + 0xf1ffe7], al
add byte [ecx + 0x7722f7], al
add byte [ecx + 0x1709cf], al
pop ss
add byte [eax], al
pop edi
push eax
push edx
add esp, 4
add eax, 0x650e
add eax, 0xeafe
sar dh, 0xea
add byte [eax], al
sub eax, 0x17c8
pop eax
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x84]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0xf4], 0
jmp 0x40ab9c
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xf4]
cmp eax, dword [edx + 0x18]
jae 0x40ae7a
push esi
jmp 0x40abbb
add esi, 0x161c1
pop esi
push esi
push esi
add esp, 4
sub esi, 0x532
call 0x40abd9
add byte [edx], dh
dec edi
cmp cl, byte [ebx + esi + 0x44]
add esp, 4
sub esi, 0x2b14
pop esi
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ebp - 0x404]
mov eax, dword [ebp - 0x84]
test dword [edi + edi*8 - 1], edi
inc dword [ebx]
add al, 0x8a
mov dword [ebp - 0xf8], eax
push edi
sub edi, 0x7c91
out dx, eax
xchg ecx, eax
jl 0x40ac04
add bl, ch
invalid
or edi, 0x95fc
pop edi
push ebx
call 0x40ac21
add byte [ebx + edi + 0x50], al
cmp dword [ecx + 0x42], ecx
cmp eax, 0x8104c483
jmp 0x40ac2e
cmp eax, 0xc8d8b5b
invalid
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x94], ecx
cmp dword [ebp - 0x94], 0
je 0x40af2f
push esi
push eax
add esp, 4
xor esi, 0x5a2a
pop esi
push ebx
xor ebx, 0xaadb
sub ebx, 0x31ae
add ebx, 0x35ad
pop ebx
push esi
push edx
add esp, 4
xor esi, 0x12f29
and esi, 0x1088b
pop esi
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x414], edx
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x418], eax
lea ecx, [ebp - 0x2b0]
push ecx
call dword [ebp - 0x418]
test eax, eax
jne 0x40af2f
push edx
push edx
add esp, 4
call 0x40aeff
add byte [edx], bh
xor al, byte [edi + 0x36]
dec ebx
dec edi
add esp, 4
call 0x40af10
add byte [edi + 0x4c], cl
cmp dword [edx], edi
aaa
dec ebx
dec edx
xor eax, 0x8104c483
ljmp 0x4cca
push eax
push edi
add esp, 4
add eax, 0x16736
or eax, 0x17ab3
or eax, 0xfa16
and eax, 0x501d
pop eax
push ecx
push ebx
add esp, 4
jmp 0x40af5a
xor ecx, 0x1439b
pop ecx
push eax
push esi
add esp, 4
call 0x40af75
add byte [ebx + 0x3b], cl
cmp eax, 0x3d434d49
inc edi
xor eax, 0x5804c483
push eax
jmp 0x40af83
call 0x40af8f
add byte [ecx], bh
dec ebx
dec esi
cmp eax, 0xc4833f41
add al, 0x58
mov edx, dword fs:[0x18]
mov dword [ebp - 0x41c], edx
push ebx
push ecx
add esp, 4
jmp 0x40afac
jmp 0x40afb1
xor ebx, 0x9e7c
or ebx, 0x6458
pop ebx
push esi
and esi, 0x113e4
and esi, 0x934c
or esi, 0x28f
pop esi
mov eax, dword [ebp - 0x41c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x420], ecx
push edx
xor edx, 0x11219
add edx, 0x12190
add edx, 0x11b1e
add edx, 0xecbc
pop edx
push esi
push eax
add esp, 4
xor esi, 0xbf45
or esi, 0x14dce
add esi, 0xe5f7
pop esi
mov edx, dword [ebp - 0x420]
mov dword [ebp - 0x310], edx
cmp dword [ebp - 0x310], 0
jne 0x40b066
push ecx
and ecx, 0xfd3b
pop ecx
push eax
push edx
add esp, 4
add eax, 0xb46f
or eax, 0xc8c2
pop eax
push edi
push ecx
add esp, 4
jmp 0x40b04d
pop edi
push edx
push ebx
add esp, 4
xor edx, 0x13424
pop edx
mov dword [ebp - 0x70], 0
jmp 0x40b3f2
push ebx
sub ebx, 0xe15e
xor ebx, 0x1581
adc eax, 0xe3810000
mov edi, 0x5b000133
push ebx
push esi
add esp, 4
sub ebx, 0x11aca
jmp 0x40b04c
sbb al, byte [ecx]
add byte [ecx + 0x16445e3], al
add byte [ecx + 0x10906cb], al
add byte [ecx + 0x2f6ff3], al
add byte [ebx - 0x75], bl
test eax, esi
cld
invalid
dec dword [ebx + 0x518b0c48]
or al, 0x89
xchg ebp, eax
lodsb al, byte [esi]
std
invalid
inc dword [ebx - 0x25343]
inc dword [eax]
jne 0x40b0f1
push eax
sub eax, 0x3d0a
xor eax, 0x12ad3
and eax, 0xd23a
add eax, 0x7c5
pop eax
push ecx
call 0x40b0db
add byte [eax + 0x32], cl
inc esp
dec ecx
cmp bh, byte [ebx]
add esp, 4
or ecx, 0x9456
pop ecx
mov dword [ebp - 0x70], 0
jmp 0x40b3f2
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0xa8], eax
push esi
add esi, 0xea3c
pop esi
push ebx
add ebx, 0x9d5c
pop ebx
push edx
xor edx, 0x12c60
and edx, 0xe01d
pop edx
push edx
and edx, 0x109e6
and edx, 0xb86f
sub edx, 0x11715
pop edx
lea ecx, [ebp - 0x2b0]
mov dword [ebp - 0x250], ecx
mov edx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x24c], eax
push ecx
push eax
add esp, 4
xor ecx, 0x278
pop ecx
push esi
call 0x40b163
add byte [edx + eax*2 + 0x33], al
dec esi
dec ecx
dec esp
add esp, 4
pop esi
push ebx
call 0x40b178
add byte [ebx + 0x41], al
aas
cmp eax, 0x3246384d
inc edx
xor al, byte [ebx + 0x335b04c4]
leave
mov word [ebp - 0x68], cx
xor edx, edx
mov word [ebp - 0x1c], dx
push esi
push eax
add esp, 4
call 0x40b199
add byte [0x3d45453e], dh
cmp dword [ebx - 0x97efb3c], eax
push edi
add al, 0
add byte [ecx + 0x117ef6], al
add al, ch
or dword [eax], eax
add byte [eax], al
add byte [0x50394a41], dh
dec edx
dec ecx
inc ebp
add esp, 4
pop esi
mov eax, dword [ebp - 0x24c]
mov cx, word [eax]
mov word [ebp - 0x1d2], cx
mov edx, dword [ebp - 0x24c]
add edx, 2
mov dword [ebp - 0x24c], edx
mov ax, word [ebp - 0x1d2]
mov word [ebp - 0x68], ax
push esi
sub esi, 0x4b13
or esi, 0xef5d
and esi, 0x6f0f
pop esi
push ebx
push edi
add esp, 4
call 0x40b20c
add byte [edi + 0x39], al
push eax
dec esi
aaa
inc esi
push eax
dec ebp
add esp, 4
or ebx, 0x81fb
pop ebx
mov ecx, dword [ebp - 0x250]
mov dx, word [ecx]
mov word [ebp - 0x1d4], dx
mov eax, dword [ebp - 0x250]
add eax, 2
mov dword [ebp - 0x250], eax
mov cx, word [ebp - 0x1d4]
mov word [ebp - 0x1c], cx
push eax
push ebx
add esp, 4
or eax, 0xf2b
xor eax, 0x1e48
pop eax
push eax
push ebx
add esp, 4
add eax, 0xac8b
sub eax, 0xe36a
sub eax, 0x6daa
jmp 0x40b271
pop eax
movzx edx, word [ebp - 0x1c]
test edx, edx
jne 0x40b28f
movzx eax, word [ebp - 0x68]
movzx ecx, word [ebp - 0x1c]
sub eax, ecx
mov dword [ebp - 0x318], eax
jmp 0x40b312
movzx edx, word [ebp - 0x68]
movzx eax, word [ebp - 0x1c]
cmp edx, eax
je 0x40b188
movzx ecx, word [ebp - 0x68]
xor ecx, 0x20
movzx edx, word [ebp - 0x1c]
cmp ecx, edx
je 0x40b188
push edi
push esi
add esp, 4
add edi, 0x10d13
add edi, 0xe61a
or edi, 0x15695
pop edi
push eax
push edx
add esp, 4
jmp 0x40b2d5
xor eax, 0x17ded
jmp 0x40b2e3
pop eax
movzx eax, word [ebp - 0x68]
movzx ecx, word [ebp - 0x1c]
cmp eax, ecx
jge 0x40b2fc
mov dword [ebp - 0x314], 0xffffffff
jmp 0x40b306
mov dword [ebp - 0x314], 1
mov edx, dword [ebp - 0x314]
mov dword [ebp - 0x318], edx
invalid
invalid
cmp dword [ebp - 0x318], 0
jne 0x40b35b
push esi
push ebx
add esp, 4
and esi, 0x1f8f
and esi, 0x127f6
and esi, 0xed44
pop esi
push edi
push eax
add esp, 4
add edi, 0xfc2f
pop edi
push esi
xor esi, 0x160a2
add esi, 0x5775
pop esi
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x70], eax
jmp 0x40b3f2
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov dword [ebp - 0xa8], edx
push eax
xor eax, 0x39ba
pop eax
push edi
push eax
add esp, 4
add edi, 0xc6fc
add edi, 0x744b
and edi, 0xc95a
or edi, 0x10a1
pop edi
push esi
push ebx
add esp, 4
add esi, 0xb67d
pop esi
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x254]
je 0x40b3b9
mov ecx, dword [ebp - 0xa8]
cmp dword [ecx + 0x30], 0
jne 0x40b0fd
push eax
add eax, 0x10ce5
pop eax
push eax
push ebx
add esp, 4
xor eax, 0x12147
add eax, 0x15c8d
pop eax
push ebx
push edi
add esp, 4
or ebx, 0x8d60
or ebx, 0x12936
and ebx, 0xa78a
pop ebx
mov dword [ebp - 0x70], 0
push eax
push ebx
add esp, 4
xor eax, 0x4b41
pop eax
push ecx
push edx
add esp, 4
call 0x40b410
add byte [ebx], dh
inc esp
xor al, 0x48
cmp dword [esi - 0x7d], ecx
les eax, [ecx + ebx*2]
push edx
jmp 0x40b41d
and edx, 0x1456e
pop edx
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x80], eax
push edi
and edi, 0x476
pop edi
push esi
jmp 0x40b43e
or esi, 0x14452
pop esi
push ebx
push edi
add esp, 4
xor ebx, 0xe4a0
pop ebx
push edx
sub edx, 0x156b4
add edx, 0x150bb
pop edx
mov dword [ebp - 0x114], 0
test esp, ebp
invalid
invalid
inc dword [eax]
add byte [eax], al
add byte [ebx - 0x7f], dl
retf
insb byte es:[edi], dx
sbb al, byte [ecx]
add byte [ecx + 0xd55ee3], al
and ebx, 0xd55e
xor ebx, 0x8e75
pop ebx
push ecx
push eax
add esp, 4
les eax, [ecx + eax*4]
loope 0x40b4b2
pushfd
add byte [eax], al
xor ecx, 0x14aa0
xor ecx, 0x9ffc
or ecx, 0xc31
pop ecx
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x31c], ecx
cmp dword [ebp - 0x31c], 0
jne 0x40b4f0
push edi
push edx
add esp, 4
jmp 0x40b4bb
jmp 0x40b4c0
and edi, 0xefa8
pop edi
push ebx
push edx
add esp, 4
xor ebx, 0xa664
add ebx, 0x16244
and ebx, 0x351a
pop ebx
mov edx, dword [ebp - 0x114]
mov dword [ebp - 0xac], edx
jmp 0x40b9ca
mov eax, dword [ebp - 0x31c]
mov ecx, dword [ebp - 0x80]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x320], ecx
jne 0x40b515
mov edx, dword [ebp - 0x114]
mov dword [ebp - 0xac], edx
jmp 0x40b9ca
push edi
push edx
add esp, 4
xor edi, 0x10a1e
xor edi, 0x12600
xor edi, 0x13797
pop edi
push ebx
jmp 0x40b535
sub ebx, 0x12b39
or ebx, 0x7172
jmp 0x40b546
pop ebx
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x320]
mov eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0
jne 0x40b5ab
push esi
push ebx
add esp, 4
and esi, 0x3a48
or esi, 0xfaf2
and esi, 0x134b6
pop esi
push ebx
xor ebx, 0x15bc3
add ebx, 0x52dc
or ebx, 0x461d
and ebx, 0x7370
pop ebx
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0xac], ecx
jmp 0x40b9ca
push edx
jmp 0x40b5b4
pop edx
push ecx
push eax
add esp, 4
add ecx, 0x15505
add ecx, 0x340b
and ecx, 0x1695c
add ecx, 0xd98e
pop ecx
push ecx
jmp 0x40b5dc
pop ecx
mov edx, dword [ebp - 0x80]
add edx, dword [ebp - 0x324]
mov dword [ebp - 0x100], edx
jne 0x40b631
push ebx
push ecx
add esp, 4
and ebx, 0x7b02
and ebx, 0x18363
pop ebx
push edi
push ebx
add esp, 4
add edi, 0x1605b
and edi, 0xd187
pop edi
push ecx
or ecx, 0xd1b5
add ecx, 0x4939
pop ecx
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xac], eax
jmp 0x40b9ca
mov ecx, dword [ebp - 0x100]
mov edx, dword [ebp - 0x80]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x424], edx
push eax
push ebx
add esp, 4
add eax, 0x11889
or eax, 0x1e70
pop eax
push edi
and edi, 0xc8dd
call 0x40b66b
add byte [eax + 0x4e], dl
inc ebx
cmp dword [eax + 0x41], edx
add esp, 4
add edi, 0x94f7
pop edi
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x80]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x428], ecx
push edi
sub edi, 0x725f
and edi, 0x2068
or edi, 0x1b88
pop edi
push eax
push ebx
add esp, 4
or eax, 0x5df9
call 0x40b6b5
add byte [ebx + 0x4a], al
push eax
inc esi
cmp edi, dword [0xc4833a4d]
add al, 0x58
mov edx, dword [ebp - 0x100]
mov eax, dword [ebp - 0x80]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x104], 0
jmp 0x40b6e6
mov ecx, dword [ebp - 0x104]
add ecx, 1
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0x100]
mov eax, dword [ebp - 0x104]
cmp eax, dword [edx + 0x18]
jae 0x40b9be
push ebx
push ecx
add esp, 4
add ebx, 0xa46a
xor ebx, 0x5b10
add ebx, 0x265a
pop ebx
push ecx
call 0x40b723
add byte [edi], dh
inc edx
push eax
inc esp
dec esi
cmp al, 0x3e
inc edx
add esp, 4
or ecx, 0x121de
pop ecx
mov ecx, dword [ebp - 0x104]
mov edx, dword [ebp - 0x424]
mov eax, dword [ebp - 0x80]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x10c], eax
push ecx
sub ecx, 0x16564
sub ecx, 0x97ee
pop ecx
push edi
add edi, 0x7f0b
pop edi
push eax
call 0x40b76a
add byte [edi + 0x4e], cl
xor eax, 0x47494832
cmp al, byte [ebx + 0x525804c4]
jmp 0x40b776
pop edx
mov ecx, dword [ebp - 0x104]
mov edx, dword [ebp - 0x428]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x42c]
mov edx, dword [ebp - 0x80]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x430], edx
push ecx
push ebx
add esp, 4
and ecx, 0x8ad2
pop ecx
push eax
push esi
add esp, 4
or eax, 0x1267a
pop eax
push ebx
add ebx, 0x6d1e
pop ebx
push ebx
push edx
add esp, 4
or ebx, 0xa1aa
sub ebx, 0x149e
pop ebx
mov dword [ebp - 0x3c], 0
jmp 0x40b7dd
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x10c]
add ecx, dword [ebp - 0x3c]
movsx edx, byte [ecx]
test edx, edx
je 0x40b879
mov eax, dword [ebp - 0x3c]
movsx ecx, byte [ebp + eax - 0x184]
test ecx, ecx
je 0x40b879
push esi
push eax
add esp, 4
call 0x40b811
add byte [edx + 0x50], cl
cmp eax, 0x83443a40
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [edx], bh
dec edi
cmp eax, 0x413a3235
xor al, byte [ebx + 0x515e04c4]
push edx
add esp, 4
add ecx, 0x634
pop ecx
mov edx, dword [ebp - 0x10c]
add edx, dword [ebp - 0x3c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3c]
movsx edx, byte [ebp + ecx - 0x184]
cmp eax, edx
je 0x40b86b
mov eax, dword [ebp - 0x10c]
add eax, dword [ebp - 0x3c]
movsx ecx, byte [eax]
xor ecx, 0x20
mov edx, dword [ebp - 0x3c]
movsx eax, byte [ebp + edx - 0x184]
cmp ecx, eax
jne 0x40b872
jmp 0x40b7d4
jmp 0x40b879
push esi
push edi
add esp, 4
and esi, 0x7312
call 0x40b892
add byte [0x3a464e4b], dh
dec esp
inc edx
add esp, 4
call 0x40b8a1
add byte [edx], bh
inc esi
dec eax
xor eax, 0xc4833941
add al, 0x81
into
pop es
push esi
add dword [eax], eax
pop esi
mov ecx, dword [ebp - 0x10c]
add ecx, dword [ebp - 0x3c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3c]
movsx ecx, byte [ebp + eax - 0x184]
cmp edx, ecx
jne 0x40b8d5
mov dword [ebp - 0x258], 0
jmp 0x40b970
push eax
and eax, 0x29c5
pop eax
push ebx
call 0x40b8ee
add byte [ebx], bh
cmp byte ss:[ebx + 0x3d], cl
inc ecx
inc ebx
aaa
cmp byte [esi], dh
add esp, 4
sub ebx, 0x56d2
call 0x40b903
add byte [ecx + 0x32], cl
dec eax
xor edi, dword [ebx]
inc edx
add esp, 4
pop ebx
mov edx, dword [ebp - 0x10c]
add edx, dword [ebp - 0x3c]
movsx eax, byte [edx]
or eax, 0x20
mov ecx, dword [ebp - 0x3c]
movsx edx, byte [ebp + ecx - 0x184]
or edx, 0x20
cmp eax, edx
jge 0x40b934
mov dword [ebp - 0x258], 0xffffffff
jmp 0x40b970
push eax
add eax, 0xca89
or eax, 0x13775
and eax, 0x7b6
and eax, 0xd12a
pop eax
push esi
push edx
add esp, 4
or esi, 0xe4f
or esi, 0x13de0
xor esi, 0x951e
pop esi
mov dword [ebp - 0x258], 1
cmp dword [ebp - 0x258], 0
jne 0x40b9b9
push edx
push eax
add esp, 4
call 0x40b98b
add byte [edx + esi + 0x41], cl
inc esp
dec edi
inc esp
dec ebx
add esp, 4
jmp 0x40b995
call 0x40b9a1
add byte [ebx], bh
push eax
inc ebp
cmp bh, byte [ecx]
cmp dword [ebx - 0x157efb3c], eax
sar byte [ecx], cl
add byte [eax], al
pop edx
mov eax, dword [ebp - 0x430]
dec dword [ecx - 0xab7b]
invalid
jmp 0x40b9ca
jmp 0x40b6d7
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0xac], ecx
mov edx, dword [ebp - 0xac]
mov dword [ebp - 0x1bc], edx
lea eax, [ebp - 0x47c]
push eax
push 0x40
mov ecx, dword [ebp - 0x328]
sub ecx, dword [ebp - 0xcc]
push ecx
mov edx, dword [ebp - 0xcc]
push edx
call dword [ebp - 0x1bc]
test eax, eax
jne 0x40ba34
push edi
xor edi, 0x9b4a
add edi, 0x5566
or edi, 0x3f7
pop edi
push edx
push ebx
add esp, 4
or edx, 0x87ef
and edx, 0xd018
add edx, 0x15d83
and edx, 0x102c1
pop edx
jmp 0x40bb47
push ebx
push ebx
add esp, 4
sub ebx, 0x11773
pop ebx
push edi
add edi, 0x8f27
sub edi, 0xc049
pop edi
push edx
push ebx
add esp, 4
add edx, 0xe07d
pop edx
push edi
push esi
add esp, 4
and edi, 0xd93b
pop edi
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x438], eax
push esi
xor esi, 0x155f7
add esi, 0x334e
jmp 0x40ba85
pop esi
push ebx
push esi
add esp, 4
xor ebx, 0xa43
pop ebx
push esi
push ecx
add esp, 4
add esi, 0xad7f
add esi, 0xfb9c
pop esi
pushal
push edx
push ecx
add esp, 4
call 0x40bab8
add byte [esi], bh
dec eax
cmp dh, byte [edx]
cmp dword ds:[ebp + 0x36], ecx
add esp, 4
jmp 0x40bac0
call 0x40bacd
add byte [esi + eax*2 + 0x3a], al
inc edx
inc ebx
cmp byte [edi], dh
add esp, 4
and edx, 0x8f72
pop edx
call dword [ebp - 0x438]
push ebx
push ebx
add esp, 4
or ebx, 0x1056c
xor ebx, 0x1426a
or ebx, 0x15cce
or ebx, 0x7c99
pop ebx
push eax
push ebx
add esp, 4
or eax, 0x1985
pop eax
push edx
xor edx, 0x13afb
pop edx
popal
push ebx
add ebx, 0x1724c
and ebx, 0x14715
jmp 0x40bb23
or ebx, 0x108e3
pop ebx
push ebx
push ebx
add esp, 4
xor ebx, 0x115fc
add ebx, 0x6fd9
sub ebx, 0x8b46
pop ebx