Function at 0x406996
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebx
add esp, 4
and ebx, 0xffb8
call 0x405e14
add byte [edi + 0x40], cl
aaa
dec ebp
cmp byte [edi + 0x39], al
aas
inc esi
add esp, 4
sub ebx, 0x14e60
pop ebx
mov dword [ebp - 0x79c], 0
jmp 0x406517
push ebx
xor ebx, 0xd52f
and ebx, 0xdc5a
pop ebx
push edx
push esi
add esp, 4
add edx, 0x14f19
jmp 0x406539
call 0x406545
add byte [ebp + 0x34], al
cmp byte [ebx], dh
cmp al, byte [edx - 0x7d]
les eax, [edx + ebx*2]
mov ecx, dword [ebp - 0x3e8]
add ecx, 0xe
mov dword [ebp - 0x19dc], ecx
push ecx
push edx
add esp, 4
xor ecx, 0xe450
sub ecx, 0x2e4e
add ecx, 0x4fd
add ecx, 0x95fa
pop ecx
push ebx
and ebx, 0x5761
sub ebx, 0xc65f
and ebx, 0x9155
pop ebx
cmp dword [ebp - 0x3e8], 0
je 0x40659c
cmp dword [ebp - 0xab8], 0
jne 0x4065e2
push ebx
add ebx, 0x423e
call 0x4065b2
add byte [edx + 0x42], al
cmp byte [edx], bh
cmp ecx, dword [edx + 0x45]
inc ebx
xor eax, 0x8104c483
ret
mov dword [ebp - 0x20a8], 0xa
push eax
push edx
add esp, 4
or eax, 0xa54c
and eax, 0x33fd
sub eax, 0x131a8
xor eax, 0xbade
pop eax
push esi
add esi, 0x4081
pop esi
push esi
push ecx
add esp, 4
add esi, 0x40a8
pop esi
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xab8]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1694], edx
mov dword [ebp - 0xce8], 0
push edi
push esi
add esp, 4
xor edi, 0x11d87
pop edi
push ecx
sub ecx, 0x14631
pop ecx
push ebx
push edx
add esp, 4
and ebx, 0x96b8
or ebx, 0x3154
pop ebx
push eax
push esi
add esp, 4
sub eax, 0x534f
pop eax
mov byte [ebp - 0x9d4], 0x56
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push ebx
push esi
add esp, 4
add ebx, 0x112c3
pop ebx
push ecx
jmp 0x4066fa
and ecx, 0x1358e
or ecx, 0xbca8
pop ecx
push eax
push eax
add esp, 4
jmp 0x406715
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1994], eax
mov ecx, dword [ebp - 0x1994]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1998], edx
mov eax, dword [ebp - 0x1998]
mov dword [ebp - 0x1614], eax
push ecx
xor ecx, 0x78c7
pop ecx
push ebx
push edx
add esp, 4
add ebx, 0x18549
add ebx, 0x15b72
sub ebx, 0x119c5
or ebx, 0x1114d
pop ebx
push ecx
push edi
add esp, 4
xor ecx, 0x10906
pop ecx
cmp dword [ebp - 0x1614], 0
jne 0x406787
mov dword [ebp - 0x2fc], 0
jmp 0x406a2e
mov ecx, dword [ebp - 0x1614]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push esi
call 0x4067a9
add byte [0x3b454034], bh
inc ebx
dec ebp
dec edx
dec ebx
add esp, 4
pop esi
push ecx
add ecx, 0xc6cd
or ecx, 0xc4fa
call 0x4067c7
add byte [eax], bh
dec esp
dec eax
inc eax
aas
inc ebx
add esp, 4
pop ecx
cmp dword [ebp - 0xcc4], 0
jne 0x4067e3
mov dword [ebp - 0x2fc], 0
jmp 0x406a2e
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x514], ecx
push ebx
push ecx
add esp, 4
or ebx, 0x12ee4
add ebx, 0x15be5
pop ebx
push edx
xor edx, 0xa934
or edx, 0xcbd8
and edx, 0x8802
pop edx
push eax
push esi
add esp, 4
and eax, 0x140e7
pop eax
lea edx, [ebp - 0x1738]
mov dword [ebp - 0xcc0], edx
mov eax, dword [ebp - 0x514]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcbc], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push ecx
push edi
add esp, 4
sub ecx, 0x4db
or ecx, 0xe69a
pop ecx
push eax
push ecx
add esp, 4
jmp 0x40686a
and eax, 0xd21f
xor eax, 0x13cfa
add eax, 0x9a91
pop eax
mov ecx, dword [ebp - 0xcbc]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcbc]
add eax, 2
mov dword [ebp - 0xcbc], eax
mov cx, word [ebp - 0x103e]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcc0]
mov ax, word [edx]
mov word [ebp - 0x1040], ax
mov ecx, dword [ebp - 0xcc0]
add ecx, 2
mov dword [ebp - 0xcc0], ecx
mov dx, word [ebp - 0x1040]
mov word [ebp - 0x38], dx
push ecx
and ecx, 0x5d49
call 0x4068eb
add byte [ebp + 0x35], al
cmp eax, dword [ebp + 0x3d]
inc ecx
dec ebp
dec ebx
cmp eax, 0x5904c483
push edx
call 0x4068fc
add byte [esi], dh
xor al, 0x33
inc ebx
inc ecx
aaa
add esp, 4
or edx, 0xfd57
pop edx
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x406923
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x161c], ecx
jmp 0x40697d
movzx eax, word [ebp - 0x21c]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x40684b
movzx edx, word [ebp - 0x21c]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x40684b
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x406967
mov dword [ebp - 0x1618], 0xffffffff
jmp 0x406971
mov dword [ebp - 0x1618], 1
mov eax, dword [ebp - 0x1618]
mov dword [ebp - 0x161c], eax
cmp dword [ebp - 0x161c], 0
jne 0x4069c6
push eax
call 0x406996
add byte [eax + 0x4f], cl
dec esp
inc eax
xor cl, byte [esi + 0x3f]
xor eax, 0x4c4834e
call 0x4069a6
add byte [ebx], dh
cmp ecx, dword [ecx + 0x39]
push eax
inc edi
aas
add esp, 4
pop eax
push edx
and edx, 0x13ce8
jmp 0x4069b7
pop edx
mov ecx, dword [ebp - 0x514]
mov dword [ebp - 0x2fc], ecx
jmp 0x406a2e
push edx
push edx
add esp, 4
and edx, 0xdc33
pop edx
push ecx
sub ecx, 0x7a6a
call 0x4069e5
add byte [eax], bh
inc ebx
dec eax
inc esp
dec ebx
dec esp
add esp, 4
xor ecx, 0x17486
jmp 0x4069f7
pop ecx
mov edx, dword [ebp - 0x514]
mov eax, dword [edx]
mov dword [ebp - 0x514], eax
mov ecx, dword [ebp - 0x514]
cmp ecx, dword [ebp - 0xcc4]
je 0x406a24
mov edx, dword [ebp - 0x514]
cmp dword [edx + 0x30], 0
jne 0x4067ef
mov dword [ebp - 0x2fc], 0
push ebx
push esi
add esp, 4
and ebx, 0xfb12
or ebx, 0xa022
or ebx, 0x103e7
call 0x406a54
add byte [eax + 0x3e], dl
aaa
inc eax
inc ebx
cmp eax, 0x83323346
les eax, [ebx + ebx*2]
push edx
xor edx, 0x42e3
pop edx
cmp dword [ebp - 0x2fc], 0
jne 0x407365
mov eax, 0x6b
mov word [ebp - 0x1790], ax
mov ecx, 0x65
mov word [ebp - 0x178e], cx
mov edx, 0x72
mov word [ebp - 0x178c], dx
mov eax, 0x6e
mov word [ebp - 0x178a], ax
mov ecx, 0x65
mov word [ebp - 0x1788], cx
mov edx, 0x6c
mov word [ebp - 0x1786], dx
mov eax, 0x33
mov word [ebp - 0x1784], ax
mov ecx, 0x32
mov word [ebp - 0x1782], cx
mov edx, 0x2e
mov word [ebp - 0x1780], dx
mov eax, 0x64
mov word [ebp - 0x177e], ax
mov ecx, 0x6c
mov word [ebp - 0x177c], cx
mov edx, 0x6c
mov word [ebp - 0x177a], dx
xor eax, eax
mov word [ebp - 0x1778], ax
push ecx
push edx
add esp, 4
or ecx, 0x1c7b
jmp 0x406b16
and ecx, 0x74b6
pop ecx
push edx
push eax
add esp, 4
sub edx, 0x107a7
and edx, 0xd209
jmp 0x406b37
pop edx
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x6f
mov byte [ebp - 0x8a2], 0x61
mov byte [ebp - 0x8a1], 0x64
mov byte [ebp - 0x8a0], 0x4c
mov byte [ebp - 0x89f], 0x69
mov byte [ebp - 0x89e], 0x62
mov byte [ebp - 0x89d], 0x72
mov byte [ebp - 0x89c], 0x61
mov byte [ebp - 0x89b], 0x72
mov byte [ebp - 0x89a], 0x79
mov byte [ebp - 0x899], 0x57
mov byte [ebp - 0x898], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x199c], ecx
mov edx, dword [ebp - 0x199c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19a0], eax
mov ecx, dword [ebp - 0x19a0]
mov dword [ebp - 0x1620], ecx
push esi
push edx
add esp, 4
sub esi, 0x14733
and esi, 0x109d7
add esi, 0x3353
pop esi
push eax
push ecx
add esp, 4
sub eax, 0x3eda
xor eax, 0x8684
pop eax
push eax
or eax, 0x1bff
pop eax
cmp dword [ebp - 0x1620], 0
jne 0x406c05
mov dword [ebp - 0x774], 0
jmp 0x406eac
mov edx, dword [ebp - 0x1620]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcd0], ecx
push ebx
push edi
add esp, 4
xor ebx, 0x1368
pop ebx
push ecx
push ebx
add esp, 4
jmp 0x406c2d
sub ecx, 0xebfe
add ecx, 0xd2
call 0x406c45
add byte [edi + 0x4b], al
cmp eax, dword [ebx + eax*2 + 0x36]
add esp, 4
pop ecx
cmp dword [ebp - 0xcd0], 0
jne 0x406c61
mov dword [ebp - 0x774], 0
jmp 0x406eac
mov edx, dword [ebp - 0xcd0]
mov dword [ebp - 0x518], edx
push esi
push ecx
add esp, 4
add esi, 0x2fe0
pop esi
push edx
push edi
add esp, 4
and edx, 0x71d6
sub edx, 0xcfbb
add edx, 0xd315
sub edx, 0x158a8
pop edx
push esi
add esi, 0x8375
pop esi
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0x518]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcc8], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push ebx
sub ebx, 0x16085
add ebx, 0x17877
pop ebx
push esi
push ecx
add esp, 4
sub esi, 0xb7a
or eax, dword [eax]
add byte [ecx + 0x61d1c6], al
add byte [ecx + 0x17689e6], al
add byte [esi + 0x52], bl
push ecx
add esp, 4
sub edx, 0xcbbe
pop edx
mov edx, dword [ebp - 0xcc8]
mov ax, word [edx]
mov word [ebp - 0x1042], ax
mov ecx, dword [ebp - 0xcc8]
add ecx, 2
mov dword [ebp - 0xcc8], ecx
mov dx, word [ebp - 0x1042]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xccc]
mov cx, word [eax]
mov word [ebp - 0x1044], cx
mov edx, dword [ebp - 0xccc]
add edx, 2
mov dword [ebp - 0xccc], edx
mov ax, word [ebp - 0x1044]
mov word [ebp - 0x3c], ax
push eax
or eax, 0x6430
and eax, 0x15efc
pop eax
push ecx
jmp 0x406d67
xor ecx, 0x13545
call 0x406d7a
add byte [ecx], bh
cmp dword [eax], edi
push eax
dec eax
cmp eax, 0x4c48332
or ecx, 0xb888
pop ecx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x406da1
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1668], edx
jmp 0x406dfb
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x406cc9
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x406cc9
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x406de5
mov dword [ebp - 0x1624], 0xffffffff
jmp 0x406def
mov dword [ebp - 0x1624], 1
mov ecx, dword [ebp - 0x1624]
mov dword [ebp - 0x1668], ecx
cmp dword [ebp - 0x1668], 0
jne 0x406e44
push ecx
push esi
add esp, 4
sub ecx, 0x12e61
and ecx, 0x1717a
sub ecx, 0x1845b
and ecx, 0x9e82
pop ecx
push edx
sub edx, 0x11b39
or edx, 0x16663
sub edx, 0x3288
pop edx
mov edx, dword [ebp - 0x518]
mov dword [ebp - 0x774], edx
jmp 0x406eac
push edx
push eax
add esp, 4
add edx, 0x3b75
or edx, 0x1129c
pop edx
push edx
push esi
add esp, 4
jmp 0x406e63
xor edx, 0x15488
and edx, 0x1ade
sub edx, 0x3c51
pop edx
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x518]
cmp edx, dword [ebp - 0xcd0]
je 0x406ea2
mov eax, dword [ebp - 0x518]
cmp dword [eax + 0x30], 0
jne 0x406c6d
mov dword [ebp - 0x774], 0
push edi
call 0x406ebc
add byte [0x34373850], dh
xor al, 0x44
inc esp
aas
add esp, 4
xor edi, 0x585a
pop edi
push edi
push esi
add esp, 4
call 0x406eda
add byte [0x3e354342], dh
aas
inc ecx
xor al, 0x83
les eax, [edi + ebx*2]
cmp dword [ebp - 0x774], 0
jne 0x406f28
push esi
xor esi, 0x15c8d
pop esi
push ecx
push edi
add esp, 4
call 0x406f00
add byte [edx], bh
inc ebp
xor eax, 0x83473c39
les eax, [ecx + eax*4]
int1
loopne 0x406f6b
add byte [eax], al
jmp 0x406f12
add ecx, 0x15ca2
pop ecx
mov dword [ebp - 0xab4], 0
jmp 0x407a50
push edx
call 0x406f39
add byte [edx], dh
cmp esi, dword [0x4a324a4d]
cmp al, 0x3b
add esp, 4
and edx, 0x1055
xor edx, 0xfdfe
jmp 0x406f4d
pop edx
push eax
push ecx
add esp, 4
or eax, 0x26d
pop eax
mov ecx, dword [ebp - 0x774]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x166c], eax
cmp dword [ebp - 0x166c], 0
jne 0x406f99
pop esp
cld
invalid
jl 0x406f65
invalid
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x40728a
mov edx, dword [ebp - 0x166c]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1670], eax
jne 0x406fc1
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x40728a
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1670]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1678], edx
cmp dword [ebp - 0x1678], 0
jne 0x406ff3
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], eax
jmp 0x40728a
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [ebp - 0x1678]
mov dword [ebp - 0x778], ecx
jne 0x407018
mov edx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], edx
jmp 0x40728a
mov eax, dword [ebp - 0x778]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19a4], ecx
mov edx, dword [ebp - 0x778]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19a8], eax
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x19ac], edx
mov dword [ebp - 0x77c], 0
jmp 0x407072
mov eax, dword [ebp - 0x77c]
add eax, 1
mov dword [ebp - 0x77c], eax
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x77c]
cmp edx, dword [ecx + 0x18]
jae 0x40727e
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x19a4]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x780], edx
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x19a8]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19ac]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x19b0], ecx
mov dword [ebp - 0x1a0], 0
jmp 0x4070e2
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x407194
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
test eax, eax
je 0x407194
push esi
push edi
add esp, 4
add esi, 0x1eee
add esi, 0x13de5
pop esi
push edx
xor edx, 0x1577c
and edx, 0x88e7
pop edx
push eax
call 0x40713d
add byte [esi], bh
cmp al, 0x3d
inc edi
xor al, 0x36
dec edi
add esp, 4
pop eax
mov ecx, dword [ebp - 0x780]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x8a4]
cmp edx, ecx
je 0x407186
mov edx, dword [ebp - 0x780]
add edx, dword [ebp - 0x1a0]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1a0]
movsx edx, byte [ebp + ecx - 0x8a4]
cmp eax, edx
jne 0x40718d
jmp 0x4070d3
jmp 0x407194
push edx
push ebx
add esp, 4
or edx, 0x86c0
add edx, 0x17f2f
xor edx, 0x1198f
pop edx
push esi
and esi, 0x13335
jmp 0x4071b9
jmp 0x4071bf
xor esi, 0xf639
pop esi
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
cmp ecx, eax
jne 0x4071f3
mov dword [ebp - 0xcd4], 0
jmp 0x407262
push eax
push edi
add esp, 4
xor eax, 0x10722
and eax, 0x3032
or eax, 0x17bd
pop eax
push eax
and eax, 0xf0cf
call 0x407221
add byte [edx + edi + 0x34], cl
dec eax
inc ecx
dec ecx
dec edi
inc edi
inc edi
add esp, 4
pop eax
mov ecx, dword [ebp - 0x780]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x8a4]
or ecx, 0x20
cmp edx, ecx
jge 0x407258
mov dword [ebp - 0xcd4], 0xffffffff
jmp 0x407262
mov dword [ebp - 0xcd4], 1
cmp dword [ebp - 0xcd4], 0
jne 0x407279
mov edx, dword [ebp - 0x19b0]
mov dword [ebp - 0x3f8], edx
jmp 0x40728a
jmp 0x407063
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0
je 0x407365
push edx
push eax
add esp, 4
or edx, 0x2c53
or edx, 0x8416
add edx, 0xf66
add edx, 0x16b46
pop edx
push esi
sub esi, 0x7d7c
add esi, 0x736
or esi, 0x161dd
pop esi
mov ecx, dword [ebp - 0x3f8]
mov dword [ebp - 0x19b4], ecx
push ecx
and ecx, 0x58cf
pop ecx
push esi
push ecx
add esp, 4
sub esi, 0xa877
or esi, 0x6516
pop esi
push edi
push ebx
add esp, 4
add edi, 0x107d4
pop edi
push esi
push edi
add esp, 4
add esi, 0x13f42
pop esi
mov edx, dword [ebp - 0x19b4]
mov dword [ebp - 0x19b8], edx
lea eax, [ebp - 0x1738]
push eax
call dword [ebp - 0x19b8]
test eax, eax
jne 0x407365
push edx
push eax
add esp, 4
jmp 0x40732e
xor edx, 0x17564
add edx, 0x6f74
xor edx, 0x455c
pop edx
push ebx
call 0x407352
add byte [ebx], dh
push eax
cmp dh, byte [esi]
cmp byte [edx + esi + 0x37], cl
inc ebx
dec esi
add esp, 4
pop ebx
mov dword [ebp - 0xab4], 0
jmp 0x407a50
push ecx
push eax
add esp, 4
add ecx, 0x13a2d
and ecx, 0x15ffe
xor ecx, 0xc8db
and ecx, 0x113d5
pop ecx
push eax
xor eax, 0xd5b6
sub eax, 0x8fc7
and eax, 0xd384
pop eax
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19bc], ecx
mov edx, dword [ebp - 0x19bc]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19c0], eax
mov ecx, dword [ebp - 0x19c0]
mov dword [ebp - 0x167c], ecx
push edx
or edx, 0x13e33
pop edx
push eax
push eax
add esp, 4
sub eax, 0x15e55
and eax, 0x65b
pop eax
push ecx
push eax
add esp, 4
and ecx, 0x8cdc
xor ecx, 0x16fed
sub ecx, 0xb4ed
pop ecx
cmp dword [ebp - 0x167c], 0
jne 0x407409
mov dword [ebp - 0x2fc], 0
jmp 0x4076b0
mov edx, dword [ebp - 0x167c]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xce0], ecx
push ecx
push ecx
add esp, 4
sub ecx, 0x11570
pop ecx
push edx
push esi
add esp, 4
jmp 0x407435
call 0x407443
add byte [esp + eax*2], bh
inc ebp
dec ebp
inc ebx
inc esp
cmp eax, 0x4c48350
add edx, 0x694b
pop edx
cmp dword [ebp - 0xce0], 0
jne 0x407465
mov dword [ebp - 0x2fc], 0
jmp 0x4076b0
mov edx, dword [ebp - 0xce0]
mov dword [ebp - 0x51c], edx
push eax
push edi
add esp, 4
jmp 0x40747e
call 0x40748d
add byte [esp + ecx*2], dh
dec ebx
inc eax
cmp eax, 0x3b343450
add esp, 4
pop eax
push edi
push ebx
add esp, 4
and edi, 0x7938
and edi, 0x161cc
pop edi
lea eax, [ebp - 0x1738]
mov dword [ebp - 0xcdc], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcd8], edx
xor eax, eax
mov word [ebp - 0x224], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push ebx
push ecx
add esp, 4
add ebx, 0x98a1
or ebx, 0x161fc
or ebx, 0xafc3
pop ebx
push eax
add eax, 0x5873
xor eax, 0x78f0
add eax, 0xc155
sub eax, 0x25eb
pop eax
mov edx, dword [ebp - 0xcd8]
mov ax, word [edx]
mov word [ebp - 0x1046], ax
mov ecx, dword [ebp - 0xcd8]
add ecx, 2
mov dword [ebp - 0xcd8], ecx
mov dx, word [ebp - 0x1046]
mov word [ebp - 0x224], dx
mov eax, dword [ebp - 0xcdc]
mov cx, word [eax]
mov word [ebp - 0x1048], cx
mov edx, dword [ebp - 0xcdc]
add edx, 2
mov dword [ebp - 0xcdc], edx
mov ax, word [ebp - 0x1048]
mov word [ebp - 0x40], ax
push esi
call 0x407565
add byte [edx + 0x4e], al
inc ebx
dec eax
inc edi
dec esp
cmp al, 0x3e
add esp, 4
pop esi
push ebx
xor ebx, 0x112b2
or ebx, 0x10b71
pop ebx
push eax
call 0x407584
add byte [edi + eax*2], bh
dec ebp
aaa
dec eax
cmp al, byte [ebx + 0xf5804c4]
mov bh, 0x4d
rol byte [ebp + 0xf1575c9], 0xb7
xchg ebp, eax
fdiv st(5), st(0)
invalid
push esi
push edi
add esp, 4
call 0x4076c4
add byte [edi + ecx*2], dh
inc esi
dec ebx
xor bh, byte [ecx]
aas
cmp ecx, dword [ecx - 0x7d]
les eax, [esi + ebx*2]
push edx
or edx, 0x12011
add edx, 0xb855
sub edx, 0x4d23
or edx, 0x147e2
pop edx
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x338], edx
push edx
sub edx, 0xcd0e
add edx, 0x14f40
pop edx
push ebx
push ebx
add esp, 4
or ebx, 0x148fe
or ebx, 0xe650
xor ebx, 0x1590d
pop ebx
push esi
push ebx
add esp, 4
xor esi, 0x59b7
pop esi
mov dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x1688], eax
cmp dword [ebp - 0x1688], 0
jne 0x407753
mov ecx, dword [ebp - 0x794]
mov dword [ebp - 0x520], ecx
jmp 0x407a44
mov edx, dword [ebp - 0x1688]
mov eax, dword [ebp - 0x338]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x168c], eax
jne 0x40777b
mov ecx, dword [ebp - 0x794]
mov dword [ebp - 0x520], ecx
jmp 0x407a44
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x168c]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1690], edx
cmp dword [ebp - 0x1690], 0
jne 0x4077ad
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x520], eax
jmp 0x407a44
mov ecx, dword [ebp - 0x338]
add ecx, dword [ebp - 0x1690]
mov dword [ebp - 0x788], ecx
jne 0x4077d2
mov edx, dword [ebp - 0x794]
mov dword [ebp - 0x520], edx
jmp 0x407a44
mov eax, dword [ebp - 0x788]
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19c4], ecx
mov edx, dword [ebp - 0x788]
mov eax, dword [ebp - 0x338]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19c8], eax
mov ecx, dword [ebp - 0x788]
mov edx, dword [ebp - 0x338]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x19cc], edx
mov dword [ebp - 0x78c], 0
jmp 0x40782c
mov eax, dword [ebp - 0x78c]
add eax, 1
mov dword [ebp - 0x78c], eax
mov ecx, dword [ebp - 0x788]
mov edx, dword [ebp - 0x78c]
cmp edx, dword [ecx + 0x18]
jae 0x407a38
mov eax, dword [ebp - 0x78c]
mov ecx, dword [ebp - 0x19c4]
mov edx, dword [ebp - 0x338]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x790], edx
mov eax, dword [ebp - 0x78c]
mov ecx, dword [ebp - 0x19c8]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19cc]
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x19d0], ecx
mov dword [ebp - 0x1a4], 0
jmp 0x40789c
mov edx, dword [ebp - 0x1a4]
add edx, 1
mov dword [ebp - 0x1a4], edx
mov eax, dword [ebp - 0x790]
add eax, dword [ebp - 0x1a4]
movsx ecx, byte [eax]
test ecx, ecx
je 0x40794e
mov edx, dword [ebp - 0x1a4]
movsx eax, byte [ebp + edx - 0x9d4]
test eax, eax
je 0x40794e
push ecx
call 0x4078d8
add byte [ecx], bh
dec esi
inc ecx
dec ecx
inc eax
dec eax
inc edi
add esp, 4
call 0x4078eb
add byte [edi + 0x33], al
xor ecx, dword [edx + 0x4a]
inc eax
inc edx
cmp bh, byte ds:[ebx]
add esp, 4
or ecx, 0xb926
jmp 0x4078fa
pop ecx
mov ecx, dword [ebp - 0x790]
add ecx, dword [ebp - 0x1a4]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1a4]
movsx ecx, byte [ebp + eax - 0x9d4]
cmp edx, ecx
je 0x407940
mov edx, dword [ebp - 0x790]
add edx, dword [ebp - 0x1a4]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1a4]
movsx edx, byte [ebp + ecx - 0x9d4]
cmp eax, edx
jne 0x407947
jmp 0x40788d
jmp 0x40794e
push esi
push ebx
add esp, 4
and esi, 0x12fdc
call 0x407965
add byte [edx + esi], dh
push eax
inc edi
dec edi
add esp, 4
jmp 0x407971
pop esi
push edi
xor edi, 0x1605d
or edi, 0x10bab
pop edi
mov eax, dword [ebp - 0x790]
add eax, dword [ebp - 0x1a4]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a4]
movsx eax, byte [ebp + edx - 0x9d4]
cmp ecx, eax
jne 0x4079ad
mov dword [ebp - 0xce4], 0
jmp 0x407a1c
push eax
and eax, 0x1b1d
call 0x4079c1
add byte [edx + 0x43], cl
aaa
dec ecx
aaa
dec edx
add esp, 4
pop eax
push edi
push ecx
add esp, 4
jmp 0x4079cf
add edi, 0x274f
jmp 0x4079de
pop edi
mov ecx, dword [ebp - 0x790]
add ecx, dword [ebp - 0x1a4]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1a4]
movsx ecx, byte [ebp + eax - 0x9d4]
or ecx, 0x20
cmp edx, ecx
jge 0x407a12
mov dword [ebp - 0xce4], 0xffffffff
jmp 0x407a1c
mov dword [ebp - 0xce4], 1
cmp dword [ebp - 0xce4], 0
jne 0x407a33
mov edx, dword [ebp - 0x19d0]
mov dword [ebp - 0x520], edx
jmp 0x407a44
jmp 0x40781d
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x520], eax
mov ecx, dword [ebp - 0x520]
mov dword [ebp - 0xab4], ecx
push ebx
jmp 0x407a56
add ebx, 0xa9c0
or ebx, 0xd7d4
pop ebx
push ecx
push ebx
add esp, 4
or ecx, 0x95a3
jmp 0x407a76
jmp 0x407a7b
sub ecx, 0x12140
pop ecx
mov edx, dword [ebp - 0xab4]
mov dword [ebp - 0x19d4], edx
invalid