Function at 0x46ea37
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
or edx, 0x5cee
xor edx, 0x15b45
call 0x46e740
add byte [ebx], dh
inc esp
cmp byte [ebp + 0x33], cl
xor eax, 0x5a04c483
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x46e761
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push ecx
push edi
add esp, 4
call 0x46e775
add byte [edi], bh
cmp byte [edx], dh
inc esp
push eax
aaa
cmp eax, 0x4c48342
sub ecx, 0xd2b0
add ecx, 0xf413
pop ecx
push eax
push esi
add esp, 4
jmp 0x46e792
pop eax
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x46e7db
push eax
push edx
add esp, 4
jmp 0x46e7b1
jmp 0x46e7b9
pop eax
push ecx
sub ecx, 0x14d87
call 0x46e7cd
add byte [esp + edi], bh
xor eax, 0x834e4a3e
les eax, [ebx + ebp*8]
add ecx, dword [ebp + 0x32]
dec ebp
pop ecx
jmp 0x46ea09
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push eax
push eax
add esp, 4
xor eax, 0x1279a
pop eax
push esi
sub esi, 0x4086
pop esi
push eax
sub eax, 0xd09b
call 0x46e819
add byte [0x3b504c40], dh
inc esp
inc ecx
add esp, 4
xor eax, 0x17487
pop eax
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x46e88a
push esi
add esi, 0x17b42
pop esi
push eax
push edi
add esp, 4
xor eax, 0x2ec6
pop eax
push ebx
sub ebx, 0xa5ed
jmp 0x46e867
call 0x46e875
add byte [ebx + 0x48], al
cmp eax, 0x4c394d39
dec ecx
add esp, 4
pop ebx
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x46e9bb
cmp dword [ebp - 0xc10], 0
jle 0x46e9af
push esi
push edi
add esp, 4
and esi, 0x272a
and esi, 0x6653
xor esi, 0x8534
pop esi
push ecx
and ecx, 0xc9f8
or ecx, 0x821d
sub ecx, 0x17a00
and ecx, 0x11ba3
pop ecx
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x46e94b
push ecx
push edx
add esp, 4
add ecx, 0x608a
xor ecx, 0xbc1f
or ecx, 0x3d55
pop ecx
push edi
sub edi, 0xc6de
or edi, 0xe39c
pop edi
push edx
push edx
add esp, 4
and edx, 0x56e0
pop edx
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x46e933
mov dword [ebp - 0x14cc], 1
jmp 0x46e93d
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x46e9af
push edx
add edx, 0xd313
pop edx
push ebx
push edi
add esp, 4
xor ebx, 0x24a2
pop ebx
push esi
push eax
add esp, 4
or esi, 0x10fb3
or esi, 0x3cbb
pop esi
push esi
push ebx
add esp, 4
and esi, 0x12721
pop esi
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x46e88a
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x46ea04
push eax
push edx
add esp, 4
or eax, 0x135c3
pop eax
push eax
push ebx
add esp, 4
xor eax, 0x156a
and eax, 0x13f77
sub eax, 0x17b46
or eax, 0xb365
pop eax
push edx
sub edx, 0x7252
pop edx
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x46ea45
jmp 0x46e752
push eax
sub eax, 0x4ee1
call 0x46ea1e
add byte [eax], bh
inc edi
inc esp
cmp dword [ebx], edi
inc ecx
xor eax, 0x4c48344
sub eax, 0xf7cf
call 0x46ea37
add byte [ebx], dh
inc eax
push eax
inc eax
cmp cl, byte [edx + 0x4f]
xor eax, 0xc4834f44
add al, 0x58
mov dword [ebp - 0xa5c], 0
push edi
push eax
add esp, 4
sub edi, 0x13a26
or edi, 0x2d8b
pop edi
push ebx
push ebx
add esp, 4
or ebx, 0x15e39
add dword [eax], eax
xor ebx, 0xb0c2
add ebx, 0xaeba
jmp 0x46ea76
pop ebx
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push ecx
sub ecx, 0x6ab1
add ecx, 0xb3a0
or ecx, 0x647
pop ecx
push ecx
push edx
add esp, 4
sub ecx, 0x3a24
sub ecx, 0x8386
sub ecx, 0xd193
and ecx, 0xeb35
pop ecx
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push edi
push edi
add esp, 4
sub edi, 0x4d7c
sub edi, 0xe82e
pop edi
push esi
add esi, 0xfa27
pop esi
push ebx
push esi
add esp, 4
sub ebx, 0x2134
xor ebx, 0xd4d3
add ebx, 0x5edf
pop ebx
push ecx
push ebx
add esp, 4
call 0x46ebdc
add byte [edi], dh
xor eax, dword [edx + 0x32]
inc esi
xor eax, 0x834d4549
les eax, [ecx + eax*4]
loope 0x46ec18
or al, 0
add byte [ecx + 0x4579c9], al
add byte [ecx + 0x13a09e9], al
add byte [ecx + 0x50], bl
or eax, 0x1c3d
pop eax
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push esi
xor esi, 0x981f
insb byte es:[edi], dx
out 0xff, eax
dec dword [ecx - 0x14d36b]
call dword [esi - 0x7f]
neg byte [edi]
cwde
add byte [eax], al
add esi, 0xd0a
jmp 0x46ec35
or esi, 0x133e1
pop esi
push edx
push ecx
add esp, 4
jmp 0x46ec4a
jmp 0x46ec53
pop edx
cmp dword [ebp - 0x14d4], 0
jne 0x46ec6c
mov dword [ebp - 0x2e0], 0
jmp 0x46ef28
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push edx
push edi
add esp, 4
call 0x46ec91
add byte [ebx], bh
dec ecx
dec ebx
cmp byte [edi + 0x47], cl
inc esp
cmp eax, 0x8104c483
ret 0x120d
push edi
add edi, 0x6f59
xor edi, 0x3bfb
pop edi
push esi
jmp 0x46ef3f
and esi, 0xc1
pop esi
push ecx
and ecx, 0x17618
sub ecx, 0x16e1f
outsb dx, byte [esi]
add dword [eax], eax
xor ecx, 0x12a77
pop ecx
cmp dword [ebp - 0x2e0], 0
jne 0x46f873
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push esi
push ecx
add esp, 4
call 0x46f014
add byte [edi + 0x3b], al
cmp bh, byte [esi]
xor al, 0x3b
aaa
push eax
add esp, 4
pop esi
push ecx
or ecx, 0x10421
call 0x46f02e
add byte [ebx], bh
cmp eax, 0x3c4a4f3c
inc eax
aaa
add esp, 4
pop ecx
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push edx
add edx, 0x18381
sub edx, 0x148a8
add edx, 0xe40a
pop edx
push eax
push edi
add esp, 4
xor eax, 0x1437c
xor eax, 0x3179
add eax, 0x165c6
or eax, 0x14678
pop eax
cmp dword [ebp - 0x14dc], 0
jne 0x46f0fe
mov dword [ebp - 0x6ec], 0
jmp 0x46f3ba
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push ebx
and ebx, 0x56a
xor ebx, 0x2950
sub ebx, 0x17f30
add ebx, 0x835d
pop ebx
push edx
push ecx
add esp, 4
and edx, 0x84be
loop 0x46f0f0
test byte [eax], al
add byte [ecx + 0x12f80e2], al
add byte [ecx + 0xfcdfca], al
add byte [edx - 0x7d], bl
mov ebp, 0xfffff3d4
add byte [ebp + 0xf], dh
mov dword [ebp - 0x6ec], 0
jmp 0x46f3ba
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
push esi
push ebx
add esp, 4
or esi, 0x102ab
add esi, 0xd0bc
jmp 0x46f17d
pop esi
push eax
and eax, 0x85d
and eax, 0xb475
and eax, 0x83b8
add eax, 0x15fac
pop eax
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push esi
push ebx
add esp, 4
or esi, 0x7a4e
sub esi, 0xa975
or esi, 0x13bd5
call 0x46f1eb
add byte [edx + 0x45], cl
cmp byte [ebp + 0x4b], al
dec ebx
cmp dword [edi + 0x40], eax
add esp, 4
pop esi
push ecx
add ecx, 0x2dac
pop ecx
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push esi
push eax
add esp, 4
or esi, 0x184af
and esi, 0x249
call 0x46f271
add byte [ecx], bh
inc edx
dec ecx
dec esp
inc eax
cmp eax, 0xc4834040
add al, 0x5e
push edx
and edx, 0x6650
or edx, 0x4562
pop edx
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x46f2a6
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x46f309
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x46f1c5
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
movzx eax, word [ebp - 0x104]
cmp edx, eax
je 0x46f1c5
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
cmp ecx, edx
jge 0x46f2f3
mov dword [ebp - 0x14e0], 0xffffffff
jmp 0x46f2fd
mov dword [ebp - 0x14e0], 1
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x14e4], 0
jne 0x46f352
push edi
jmp 0x46f318
pop edi
push edi
xor edi, 0x1819d
pop edi
push ebx
jmp 0x46f32b
or ebx, 0x35bb
pop ebx
push ebx
push eax
add esp, 4
sub ebx, 0x131f2
sub ebx, 0x11fe9
pop ebx
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp - 0x6ec], ecx
jmp 0x46f3ba
push edx
push ebx
add esp, 4
or edx, 0x7be8
jmp 0x46f363
or edx, 0x10fa1
pop edx
push eax
xor eax, 0x111c6
and eax, 0x103df
or eax, 0xb47a
or eax, 0x13ff7
pop eax
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x46f3b0
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x46f166
mov dword [ebp - 0x6ec], 0
push edx
xor edx, 0xf0fd
or edx, 0x10014
pop edx
push ebx
push ecx
add esp, 4
or ebx, 0x11499
sub ebx, 0x8fb8
sub ebx, 0x1f03
pop ebx
push edi
push ecx
add esp, 4
or edi, 0x9e7
pop edi
cmp dword [ebp - 0x6ec], 0
jne 0x46f436
push ecx
push edx
add esp, 4
and ecx, 0x8509
pop ecx
push ecx
and ecx, 0xe174
xor ecx, 0xa453
sub ecx, 0x33c
pop ecx
push edx
push ebx
add esp, 4
or edx, 0x12d15
add edx, 0xf0d2
pop edx
mov dword [ebp - 0x738], 0
jmp 0x46ff5d
push ebx
push ebx
add esp, 4
or ebx, 0xa1ad
xor ebx, 0x9821
pop ebx
push ecx
push ebx
add esp, 4
jmp 0x46f456
jmp 0x46f45c
jmp 0x46f461
sub ecx, 0x1427f
pop ecx
mov eax, dword [ebp - 0x6ec]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0x6fc], 0
mov edx, dword [ebp - 0x2f8]
mov dword [ebp - 0x14e8], edx
cmp dword [ebp - 0x14e8], 0
jne 0x46f4a7
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x46f798
mov ecx, dword [ebp - 0x14e8]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x14ec], edx
jne 0x46f4cf
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x46f798
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x14ec]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x14f0], ecx
cmp dword [ebp - 0x14f0], 0
jne 0x46f501
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
jmp 0x46f798
mov eax, dword [ebp - 0x2f8]
add eax, dword [ebp - 0x14f0]
mov dword [ebp - 0x6f0], eax
jne 0x46f526
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], ecx
jmp 0x46f798
mov edx, dword [ebp - 0x6f0]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18a0], eax
mov ecx, dword [ebp - 0x6f0]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18a4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18a8], ecx
mov dword [ebp - 0x6f4], 0
jmp 0x46f580
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax + 0x18]
jae 0x46f78c
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x180], 0
jmp 0x46f5f0
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
test eax, eax
je 0x46f6a2
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
test edx, edx
je 0x46f6a2
push ebx
push ecx
add esp, 4
and ebx, 0x1ddc
call fcn.0046f636
add byte [edi], bh
dec esi
push ebx
push eax
add esp, 4
or ebx, 0x480b
pop ebx
push ecx
xor ecx, 0x592d
pop ecx
push ecx
jmp 0x46f6bf
pop ecx
push edi
and edi, 0x12236
and edi, 0xdf0
jmp 0x46f6d3
pop edi
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
cmp eax, edx
jne 0x46f701
mov dword [ebp - 0xc30], 0
jmp 0x46f770
push ecx
and ecx, 0x15705
xor ecx, 0x1695c
sub ecx, 0x5c97
xor ecx, 0x934c
pop ecx
push esi
push ecx
add esp, 4
and esi, 0x206f
sub esi, 0x142c1
xor esi, 0x17517
pop esi
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
or eax, 0x20
cmp ecx, eax
jge 0x46f766
mov dword [ebp - 0xc30], 0xffffffff
jmp 0x46f770
mov dword [ebp - 0xc30], 1
cmp dword [ebp - 0xc30], 0
jne 0x46f787
mov ecx, dword [ebp - 0x18ac]
mov dword [ebp - 0x3c4], ecx
jmp 0x46f798
jmp 0x46f571
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
cmp dword [ebp - 0x3c4], 0
je 0x46f873
push edx
push ecx
add esp, 4
xor edx, 0xa083
xor edx, 0x7b9c
pop edx
push edi
and edi, 0x13c4e
call 0x46f7cd
add byte [edi], dh
push eax
cmp esi, dword [0x3b453741]
inc edx
add esp, 4
jmp 0x46f7d6
pop edi
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x18b0], eax
push ecx
push edi
add esp, 4
or ecx, 0x10a21
xor ecx, 0x5030
or ecx, 0x305c
pop ecx
push edx
push edi
add esp, 4
sub edx, 0x11198
jmp 0x46f80d
jmp 0x46f814
pop edx
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x18b4], ecx
lea edx, [ebp - 0x1628]
push edx
call dword [ebp - 0x18b4]
test eax, eax
jne 0x46f873
push ecx
push ecx
add esp, 4
xor ecx, 0x8c6a
and ecx, 0x17771
xor ecx, 0x35b0
pop ecx
push edx
or edx, 0x1566d
add edx, 0x44ed
add edx, 0x1d50
and edx, 0x177b3
pop edx
mov dword [ebp - 0x738], 0
jmp 0x46ff5d
push edx
push ecx
add esp, 4
jmp 0x46f87f
add edx, 0x11eeb
jmp 0x46f88e
pop edx
push edx
add edx, 0x1a9e
pop edx
push edx
sub edx, 0x10c2a
sub edx, 0x1fe5
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push edi
push ebx
add esp, 4
sub edi, 0x17647
and edi, 0xe2a8
add edi, 0x17b4f
add edi, 0x257b
pop edi
push edi
or edi, 0x72d9
add edi, 0x27f0
xor edi, 0xf346
pop edi
cmp dword [ebp - 0x14f4], 0
jne 0x46f916
mov dword [ebp - 0x2e0], 0
jmp 0x46fbbd
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push edi
push edi
add esp, 4
or edi, 0x508a
and edi, 0x14d45
sub edi, 0xcce3
pop edi
push edi
call 0x46f950
add byte [eax + 0x47], al
dec ebx
cmp byte [eax], bh
inc eax
aaa
aaa
add esp, 4
and edi, 0xf5b3
pop edi
cmp dword [ebp - 0xc3c], 0
jne 0x46f972
mov dword [ebp - 0x2e0], 0
jmp 0x46fbbd
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx