Function at 0x40520f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push edx
push esi
add esp, 4
add edx, 0x12f91
sub edx, 0x27c7
pop edx
push ecx
call fcn.00404bca
add byte [ebx + 0x4e], al
dec ebx
xor al, 0x39
dec edx
aas
add esp, 4
pop ecx
push edi
xor edi, 0x5613
add edi, 0xab17
pop edi
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f4]
cmp eax, 0xffffffff
jb 0x404c24
push eax
push ecx
add esp, 4
add eax, 0xe190
xor eax, 0x1462a
sub eax, 0xf071
sub eax, 0x14fab
pop eax
push ebx
and ebx, 0xb747
or ebx, 0x11612
or ebx, 0x9d8b
pop ebx
jmp 0x404e52
mov dword [ebp - 0xc84], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xad0], ecx
push eax
xor eax, 0x111dd
pop eax
push edx
push ebx
add esp, 4
and edx, 0x13ff7
sub edx, 0x5755
sub edx, 0xb408
or edx, 0x402d
pop edx
push ecx
push eax
add esp, 4
or ecx, 0x139ba
pop ecx
mov edx, dword [ebp - 0x15cc]
mov dword [ebp - 0xacc], edx
mov dword [ebp - 0xc88], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15cc]
jne 0x404cd3
push esi
push eax
add esp, 4
jmp 0x404c9a
jmp 0x404c9f
and esi, 0x3c15
pop esi
push edx
xor edx, 0x721
jmp 0x404cb5
and edx, 0x75e8
sub edx, 0xb6a8
pop edx
mov ecx, dword [ebp - 0xc88]
mov dword [ebp - 0x15d4], ecx
jmp 0x404e04
cmp dword [ebp - 0xc84], 0
jle 0x404df8
push edx
and edx, 0x61bb
jmp 0x404cec
add edx, 0x1681d
pop edx
push eax
push ecx
add esp, 4
and eax, 0x42
jmp 0x404d05
pop eax
push eax
push edx
add esp, 4
sub eax, 0x64c8
pop eax
mov edx, dword [ebp - 0xad0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xacc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x404d94
push eax
push edi
add esp, 4
and eax, 0xaa8e
or eax, 0x9b7b
or eax, 0x12033
pop eax
push ecx
xor ecx, 0x132bf
add ecx, 0x6d57
pop ecx
push edi
push eax
add esp, 4
sub edi, 0x8009
pop edi
mov eax, dword [ebp - 0xad0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xacc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x404d7c
mov dword [ebp - 0x15d0], 1
jmp 0x404d86
mov dword [ebp - 0x15d0], 0xffffffff
mov ecx, dword [ebp - 0x15d0]
mov dword [ebp - 0xc88], ecx
jmp 0x404df8
push edx
push edx
add esp, 4
sub edx, 0x79e
call 0x404dae
add byte [edx + 0x41], cl
dec esp
cmp bh, byte [edx]
aas
inc ebp
dec ebx
add esp, 4
xor edx, 0x15f6b
pop edx
push ecx
or ecx, 0x172f1
xor ecx, 0x180e4
pop ecx
mov edx, dword [ebp - 0xc84]
sub edx, 1
mov dword [ebp - 0xc84], edx
mov eax, dword [ebp - 0xad0]
add eax, 1
mov dword [ebp - 0xad0], eax
mov ecx, dword [ebp - 0xacc]
add ecx, 1
mov dword [ebp - 0xacc], ecx
jmp 0x404cd3
mov edx, dword [ebp - 0xc88]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x404e4d
push esi
add esi, 0x11c78
xor esi, 0x11237
add esi, 0x7765
and esi, 0x114c
pop esi
push edx
push edi
add esp, 4
or edx, 0xa43b
or edx, 0x8116
xor edx, 0xfdeb
pop edx
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x3e4], eax
jmp 0x404e8e
jmp 0x404b9b
push edx
sub edx, 0x11cce
and edx, 0xd4a3
or edx, 0x8ed3
xor edx, 0x17115
pop edx
push ebx
jmp 0x404e74
jmp 0x404e7d
sub ebx, 0x9aa4
pop ebx
mov dword [ebp - 0x3e4], 0
push esi
push ebx
add esp, 4
sub esi, 0x6bb0
xor esi, 0x18d9
and esi, 0x413b
pop esi
push edx
add edx, 0x628d
xor edx, 0xaa2f
and edx, 0x2bcb
add edx, 0x1814b
pop edx
push ecx
jmp 0x404ec8
xor ecx, 0x57d1
pop ecx
push esi
push ecx
add esp, 4
or esi, 0xe139
jmp 0x404ee1
pop esi
push ebx
sub ebx, 0xf524
pop ebx
push edi
add edi, 0x15744
pop edi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe8]
mov dword [ebp - 0x15d8], eax
push esi
push eax
add esp, 4
add esi, 0x4898
add esi, 0xfa47
call 0x404f27
add byte [esi], dh
xor dh, byte [0x36494b33]
aas
inc esi
add esp, 4
pop esi
push ebx
sub ebx, 0x175af
and ebx, 0x8f3
pop ebx
mov dword [ebp - 0x20d8], 0xffffffff
push edx
push eax
add esp, 4
call 0x404f57
add byte [edi + ecx*2], bh
dec edx
cmp eax, 0x3344493b
add esp, 4
pop edx
push edx
and edx, 0x14614
pop edx
push ebx
push ecx
add esp, 4
sub ebx, 0x13edb
add ebx, 0x123e6
pop ebx
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x504], ecx
jmp 0x404f92
mov edx, dword [ebp - 0x504]
add edx, 1
mov dword [ebp - 0x504], edx
push edx
push ebx
add esp, 4
or edx, 0x17133
pop edx
push esi
push ebx
add esp, 4
and esi, 0x11d3
xor esi, 0x1358d
sub esi, 0x15a74
or esi, 0x6ebd
pop esi
push edi
xor edi, 0x494
pop edi
mov eax, dword [ebp - 0x504]
sub eax, dword [ebp - 0x3f4]
cmp eax, 0xffffffff
jb 0x40500c
push edi
xor edi, 0xe14f
xor edi, 0x56b
xor edi, 0xb94f
xor edi, 0x1201c
pop edi
push eax
push ecx
add esp, 4
and eax, 0xa549
and eax, 0xf99
or eax, 0x1104c
pop eax
jmp 0x40523a
mov dword [ebp - 0xc8c], 7
mov ecx, dword [ebp - 0x504]
mov dword [ebp - 0xac8], ecx
push edx
push edi
add esp, 4
add edx, 0xcb2e
add edx, 0xa116
pop edx
push edi
or edi, 0xad04
pop edi
push edi
push eax
add esp, 4
xor edi, 0xcd11
pop edi
push edi
push ecx
add esp, 4
and edi, 0x1432c
pop edi
mov edx, dword [ebp - 0x15d8]
mov dword [ebp - 0xa64], edx
mov dword [ebp - 0xc90], 0
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0x15d8]
jne 0x4050bb
push edx
push esi
add esp, 4
jmp 0x405083
pop edx
push edi
push esi
add esp, 4
sub edi, 0x7c2b
and edi, 0x25ba
or edi, 0xf8f2
add edi, 0xfbef
pop edi
push edx
and edx, 0x29b2
pop edx
mov ecx, dword [ebp - 0xc90]
mov dword [ebp - 0x15a8], ecx
jmp 0x4051ec
cmp dword [ebp - 0xc8c], 0
jle 0x4051e0
push eax
xor eax, 0xe501
xor eax, 0x9d3c
pop eax
push edi
and edi, 0x51e8
add edi, 0x2907
pop edi
push eax
and eax, 0x8335
and eax, 0x6842
pop eax
push edx
add edx, 0x6ab5
pop edx
mov edx, dword [ebp - 0xac8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x40517c
push ecx
push esi
add esp, 4
sub ecx, 0xc311
and ecx, 0x52d
and ecx, 0xb868
pop ecx
push ebx
xor ebx, 0x129ae
sub ebx, 0xc704
xor ebx, 0x10dad
sub ebx, 0x15d35
pop ebx
mov eax, dword [ebp - 0xac8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x405164
mov dword [ebp - 0x15dc], 1
jmp 0x40516e
mov dword [ebp - 0x15dc], 0xffffffff
mov ecx, dword [ebp - 0x15dc]
mov dword [ebp - 0xc90], ecx
jmp 0x4051e0
push edi
push esi
add esp, 4
and edi, 0x1120
xor edi, 0x2aae
pop edi
push edx
xor edx, 0x645a
pop edx
push esi
and esi, 0x136f0
pop esi
push esi
xor esi, 0x12444
pop esi
push edi
or edi, 0x2bac
pop edi
mov edx, dword [ebp - 0xc8c]
sub edx, 1
mov dword [ebp - 0xc8c], edx
mov eax, dword [ebp - 0xac8]
add eax, 1
mov dword [ebp - 0xac8], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x4050bb
mov edx, dword [ebp - 0xc90]
mov dword [ebp - 0x15a8], edx
cmp dword [ebp - 0x15a8], 0
jne 0x405235
push ebx
push eax
add esp, 4
or ebx, 0x1daf
call 0x40520f
add byte [esi + 0x49], al
dec ebx
cmp byte [edx + 0x32], al
dec ebx
cmp dword [ecx - 0x7d], ecx
les eax, [ecx + eax*4]
retf
jmp 0x404f83
push edi
sub edi, 0x12d5d
call 0x40524f
add byte [eax], bh
inc edx
inc edi
xor eax, 0x4149413c
add esp, 4
xor edi, 0x1c85
call 0x405268
add byte [ecx + 0x4a], al
dec edx
xor cl, byte [esp + esi + 0x46]
dec edx
cmp al, byte [edi - 0x7d]
les eax, [edi + ebx*2]
mov dword [ebp - 0xac4], 0
push ecx
push esi
add esp, 4
add ecx, 0x2488
pop ecx
push edx
push esi
add esp, 4
and edx, 0x6f84
pop edx
push edx
xor edx, 0x366d
xor edx, 0x10f6e
pop edx
push edx
push edi
add esp, 4
add edx, 0xa07
pop edx
mov byte [ebp - 0x87c], 0x45
mov byte [ebp - 0x87b], 0x78
mov byte [ebp - 0x87a], 0x69
mov byte [ebp - 0x879], 0x74
mov byte [ebp - 0x878], 0x50
mov byte [ebp - 0x877], 0x72
mov byte [ebp - 0x876], 0x6f
mov byte [ebp - 0x875], 0x63
mov byte [ebp - 0x874], 0x65
mov byte [ebp - 0x873], 0x73
mov byte [ebp - 0x872], 0x73
mov byte [ebp - 0x871], 0
push esi
and esi, 0x136f3
pop esi
push eax
sub eax, 0x1257
or eax, 0x1ea4
pop eax
push ebx
push eax
add esp, 4
call 0x405324
add byte [edx], bh
cmp byte [0x40344e3a], dh
add esp, 4
and ebx, 0x11998
pop ebx
mov ecx, 0x6b
mov word [ebp - 0x1740], cx
mov edx, 0x65
mov word [ebp - 0x173e], dx
mov eax, 0x72
mov word [ebp - 0x173c], ax
mov ecx, 0x6e
mov word [ebp - 0x173a], cx
mov edx, 0x65
mov word [ebp - 0x1738], dx
mov eax, 0x6c
mov word [ebp - 0x1736], ax
mov ecx, 0x33
mov word [ebp - 0x1734], cx
mov edx, 0x32
mov word [ebp - 0x1732], dx
mov eax, 0x2e
mov word [ebp - 0x1730], ax
mov ecx, 0x64
mov word [ebp - 0x172e], cx
mov edx, 0x6c
mov word [ebp - 0x172c], dx
mov eax, 0x6c
mov word [ebp - 0x172a], ax
xor ecx, ecx
mov word [ebp - 0x1728], cx
push edx
push eax
add esp, 4
or edx, 0x17c5e
and edx, 0x128a3
pop edx
push esi
and esi, 0x114b1
or esi, 0x1142e
xor esi, 0x10fc8
pop esi
push ecx
push ebx
add esp, 4
sub ecx, 0x7773
pop ecx
push edx
push ebx
add esp, 4
xor edx, 0x18255
add edx, 0xf48f
add edx, 0xb5df
pop edx
push ebx
and ebx, 0x76d1
and ebx, 0x172a9
and ebx, 0x78d7
jmp 0x40542a
pop ebx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x2034], edx
mov eax, dword [ebp - 0x2034]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x198c], ecx
mov edx, dword [ebp - 0x198c]
mov dword [ebp - 0x15e0], edx
push edx
and edx, 0xf806
call 0x405467
add byte [ebx], dh
xor edi, dword [eax]
cmp dh, byte [edx]
xor eax, 0x5a04c483
push eax
push esi
add esp, 4
add eax, 0xdd70
add eax, 0x150d1
jmp 0x405484
pop eax
cmp dword [ebp - 0x15e0], 0
jne 0x40549d
mov dword [ebp - 0x2d4], 0
jmp 0x405759
mov eax, dword [ebp - 0x15e0]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc9c], edx
push esi
push edi
add esp, 4
add esi, 0x13bd2
pop esi
push ecx
or ecx, 0x153a3
and ecx, 0x5b8b
pop ecx
push ecx
push edi
add esp, 4
or ecx, 0x6279
sub ecx, 0x6a8
add ecx, 0x42a4
pop ecx
cmp dword [ebp - 0xc9c], 0
jne 0x4054f9
mov dword [ebp - 0x2d4], 0
jmp 0x405759
mov eax, dword [ebp - 0xc9c]
mov dword [ebp - 0x508], eax
push ecx
jmp 0x40550c
jmp 0x405511
sub ecx, 0x346b
xor ecx, 0x2441
pop ecx
push eax
or eax, 0x10519
or eax, 0x8a0f
pop eax
push eax
jmp 0x405536
pop eax
lea ecx, [ebp - 0x1740]
mov dword [ebp - 0xc98], ecx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc94], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push esi
or esi, 0x2991
and esi, 0xd00
add esi, 0xc332
pop esi
push ecx
call 0x405585
add byte [esi], dh
dec esp
cmp eax, dword ss:[eax + 0x41]
add esp, 4
or ecx, 0x1730a
jmp 0x405595
pop ecx
mov eax, dword [ebp - 0xc94]
mov cx, word [eax]
mov word [ebp - 0x1036], cx
mov edx, dword [ebp - 0xc94]
add edx, 2
mov dword [ebp - 0xc94], edx
mov ax, word [ebp - 0x1036]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc98]
mov dx, word [ecx]
mov word [ebp - 0x1038], dx
mov eax, dword [ebp - 0xc98]
add eax, 2
mov dword [ebp - 0xc98], eax
mov cx, word [ebp - 0x1038]
mov word [ebp - 0x10c], cx
push ecx
push edi
add esp, 4
jmp 0x4055fc
call 0x405608
add byte [ebp + 0x4e], cl
aas
cmp edi, dword [0x5904c483]
push edx
xor edx, 0x5093
pop edx
push ebx
xor ebx, 0x149b3
sub ebx, 0xe22a
pop ebx
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x405645
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e8], eax
jmp 0x4056a8
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x405564
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x405564
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x405692
mov dword [ebp - 0x15e4], 0xffffffff
jmp 0x40569c
mov dword [ebp - 0x15e4], 1
mov edx, dword [ebp - 0x15e4]
mov dword [ebp - 0x15e8], edx
cmp dword [ebp - 0x15e8], 0
jne 0x4056f1
push edx
add edx, 0x166ca
and edx, 0xf0ac
and edx, 0x15c72
pop edx
push ebx
push eax
add esp, 4
add ebx, 0x98be
xor ebx, 0xa5ed
and ebx, 0x6c28
sub ebx, 0xc6e2
pop ebx
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x2d4], eax
jmp 0x405759
push eax
push ecx
add esp, 4
sub eax, 0x1794
xor eax, 0x5124
and eax, 0x52d
pop eax
push edi
sub edi, 0x11413
jmp 0x405716
and edi, 0x2ef3
xor edi, 0xce78
pop edi
mov ecx, dword [ebp - 0x508]
mov edx, dword [ecx]
mov dword [ebp - 0x508], edx
mov eax, dword [ebp - 0x508]
cmp eax, dword [ebp - 0xc9c]
je 0x40574f
mov ecx, dword [ebp - 0x508]
cmp dword [ecx + 0x30], 0
jne 0x405505
mov dword [ebp - 0x2d4], 0
push edx
or edx, 0x179fa
or edx, 0x14164
or edx, 0x163cd
or edx, 0x74bb
pop edx
push esi
push eax
add esp, 4
sub esi, 0x42ce
xor esi, 0x12f22
xor esi, 0xb40a
pop esi
cmp dword [ebp - 0x2d4], 0
jne 0x4060a4
mov edx, 0x6b
mov word [ebp - 0x17ac], dx
mov eax, 0x65
mov word [ebp - 0x17aa], ax
mov ecx, 0x72
mov word [ebp - 0x17a8], cx
mov edx, 0x6e
mov word [ebp - 0x17a6], dx
mov eax, 0x65
mov word [ebp - 0x17a4], ax
mov ecx, 0x6c
mov word [ebp - 0x17a2], cx
mov edx, 0x33
mov word [ebp - 0x17a0], dx
mov eax, 0x32
mov word [ebp - 0x179e], ax
mov ecx, 0x2e
mov word [ebp - 0x179c], cx
mov edx, 0x64
mov word [ebp - 0x179a], dx
mov eax, 0x6c
mov word [ebp - 0x1798], ax
mov ecx, 0x6c
mov word [ebp - 0x1796], cx
xor edx, edx
mov word [ebp - 0x1794], dx
push esi
call 0x405841
add byte [ecx], bh
inc ebp
inc ecx
push eax
cmp dh, byte [edx]
xor eax, dword [ecx + 0x3d]
add esp, 4
xor esi, 0x16cac
call 0x405859
add byte [esp + ecx*2], bh
dec ecx
dec eax
inc esp
cmp dword [0xc4834a4b], esi
add al, 0x81
out dx, al
push ebp
inc ebx
add dword [eax], eax
pop esi
mov byte [ebp - 0x898], 0x4c
mov byte [ebp - 0x897], 0x6f
mov byte [ebp - 0x896], 0x61
mov byte [ebp - 0x895], 0x64
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x69
mov byte [ebp - 0x892], 0x62
mov byte [ebp - 0x891], 0x72
mov byte [ebp - 0x890], 0x61
mov byte [ebp - 0x88f], 0x72
mov byte [ebp - 0x88e], 0x79
mov byte [ebp - 0x88d], 0x57
mov byte [ebp - 0x88c], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1990], eax
mov ecx, dword [ebp - 0x1990]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1994], edx
mov eax, dword [ebp - 0x1994]
mov dword [ebp - 0x15ec], eax
push ecx
add ecx, 0x17285
add ecx, 0x3744
pop ecx
push ecx
sub ecx, 0x8b9
add ecx, 0x146e8
and ecx, 0x14bef
pop ecx
push edi
jmp 0x405910
sub edi, 0x982e
pop edi
cmp dword [ebp - 0x15ec], 0
jne 0x40592f
mov dword [ebp - 0x754], 0
jmp 0x405beb
mov ecx, dword [ebp - 0x15ec]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca8], eax
push eax
or eax, 0x3b17
or eax, 0x82e8
xor eax, 0x1040f
and eax, 0x7ae
pop eax
push esi
push ebx
add esp, 4
xor esi, 0x59ed
jmp 0x40596c
or esi, 0x9adf
pop esi
cmp dword [ebp - 0xca8], 0
jne 0x40598b
mov dword [ebp - 0x754], 0
jmp 0x405beb
mov ecx, dword [ebp - 0xca8]
mov dword [ebp - 0x50c], ecx
push esi
push ebx
add esp, 4
call 0x4059a9
add byte [esi], bh
cmp al, 0x4d
cmp eax, dword ss:[edx + 0x3f]
add esp, 4
and esi, 0x2554
pop esi
push ecx
push ecx
add esp, 4
call 0x4059c5
add byte [ebx + 0x34], al
inc ebx
inc ebp
dec esp
xor eax, 0x4c48348
pop ecx
lea edx, [ebp - 0x17ac]
mov dword [ebp - 0xca4], edx
mov eax, dword [ebp - 0x50c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xca0], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push edx
jmp 0x4059fc
call 0x405a09
add byte [esi + ecx*2 + 0x4a], al
inc ebp
inc edx
aas
dec eax
add esp, 4
jmp 0x405a14
jmp 0x405a1b
pop edx
push edi
push edx
add esp, 4
sub edi, 0x331
pop edi
mov ecx, dword [ebp - 0xca0]
mov dx, word [ecx]
mov word [ebp - 0x103a], dx
mov eax, dword [ebp - 0xca0]
add eax, 2
mov dword [ebp - 0xca0], eax
mov cx, word [ebp - 0x103a]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca4]
mov ax, word [edx]
mov word [ebp - 0x103c], ax
mov ecx, dword [ebp - 0xca4]
add ecx, 2
mov dword [ebp - 0xca4], ecx
mov dx, word [ebp - 0x103c]
mov word [ebp - 0x110], dx
push edx
or edx, 0x26cf
sub edx, 0xb2c8
pop edx
push edi
xor edi, 0xa382
pop edi
push ebx
xor ebx, 0xfadd
pop ebx
push eax
and eax, 0x1402a
and eax, 0x145df
and eax, 0x14cd5
pop eax
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x405ad7
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15f4], ecx
jmp 0x405b3a
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x4059f6
movzx edx, word [ebp - 0x214]
xor edx, 0x20
movzx eax, word [ebp - 0x110]
cmp edx, eax
je 0x4059f6
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
cmp ecx, edx
jge 0x405b24
mov dword [ebp - 0x15f0], 0xffffffff
jmp 0x405b2e
mov dword [ebp - 0x15f0], 1
mov eax, dword [ebp - 0x15f0]
mov dword [ebp - 0x15f4], eax
cmp dword [ebp - 0x15f4], 0
jne 0x405b83
push eax
xor eax, 0xb7a7
sub eax, 0x53e4
jmp 0x405b56
pop eax
push esi
push ecx
add esp, 4
add esi, 0x112df
add esi, 0x15fb3
or esi, 0x347a
xor esi, 0x17f57
pop esi
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x754], ecx
jmp 0x405beb
push esi
sub esi, 0x117d2
and esi, 0x1251e
jmp 0x405b96
pop esi
push ebx
push edx
add esp, 4
add ebx, 0xc574
add ebx, 0x461b
or ebx, 0x15a0c
xor ebx, 0xb816
pop ebx
mov edx, dword [ebp - 0x50c]
mov eax, dword [edx]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x50c]
cmp ecx, dword [ebp - 0xca8]
je 0x405be1
mov edx, dword [ebp - 0x50c]
cmp dword [edx + 0x30], 0
jne 0x405997
mov dword [ebp - 0x754], 0
push esi
push ebx
add esp, 4
xor esi, 0x110e8
pop esi
push esi
call 0x405c07
add byte [edi], dh
aas
cmp al, 0x3a
inc edx
dec esp
aas
cmp eax, 0x8104c483
into
pop ebp
add byte [ecx], 0
add esi, 0xdbdf
or esi, 0x16f76
pop esi
cmp dword [ebp - 0x754], 0
jne 0x405c67
push ecx
xor ecx, 0x741e
pop ecx
push ecx
push edx
add esp, 4
and ecx, 0x6c13
pop ecx
push ecx
push eax
add esp, 4
add ecx, 0x7344
add ecx, 0xd33c
pop ecx
push eax
push edi
add esp, 4
sub eax, 0x11579
pop eax
mov dword [ebp - 0x7a0], 0
jmp 0x40678e
push esi
add esi, 0xf56a
pop esi
push eax
push ebx
add esp, 4
add eax, 0x7b7b
or eax, 0x6f5a
or eax, 0x12d1c
xor eax, 0xedc8
pop eax
push ebx
push ecx
add esp, 4
and ebx, 0x17496
pop ebx
mov eax, dword [ebp - 0x754]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x320], ecx
mov dword [ebp - 0x764], 0
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x15f8], edx
cmp dword [ebp - 0x15f8], 0
jne 0x405cd8
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x3f8], eax
jmp 0x405fc9
mov ecx, dword [ebp - 0x15f8]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x15fc], edx
jne 0x405d00
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x3f8], eax
jmp 0x405fc9
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x15fc]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1600], ecx
cmp dword [ebp - 0x1600], 0
jne 0x405d32
mov edx, dword [ebp - 0x764]
mov dword [ebp - 0x3f8], edx
jmp 0x405fc9
mov eax, dword [ebp - 0x320]
add eax, dword [ebp - 0x1600]
mov dword [ebp - 0x758], eax
jne 0x405d57
mov ecx, dword [ebp - 0x764]
mov dword [ebp - 0x3f8], ecx
jmp 0x405fc9
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1998], eax
mov ecx, dword [ebp - 0x758]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x199c], edx
mov eax, dword [ebp - 0x758]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x19a0], ecx
mov dword [ebp - 0x75c], 0
jmp 0x405db1
mov edx, dword [ebp - 0x75c]
add edx, 1
mov dword [ebp - 0x75c], edx
mov eax, dword [ebp - 0x758]
mov ecx, dword [ebp - 0x75c]
cmp ecx, dword [eax + 0x18]
jae 0x405fbd
mov edx, dword [ebp - 0x75c]
mov eax, dword [ebp - 0x1998]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x760], ecx
mov edx, dword [ebp - 0x75c]
mov eax, dword [ebp - 0x199c]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x19a0]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x19a4], eax
mov dword [ebp - 0x194], 0
jmp 0x405e21
mov ecx, dword [ebp - 0x194]
add ecx, 1
mov dword [ebp - 0x194], ecx
mov edx, dword [ebp - 0x760]
add edx, dword [ebp - 0x194]
movsx eax, byte [edx]
test eax, eax
je 0x405ed3
mov ecx, dword [ebp - 0x194]
movsx edx, byte [ebp + ecx - 0x898]
test edx, edx
je 0x405ed3
push edi
push eax
add esp, 4
call 0x405e61
add byte [ecx + 0x3d], al
dec edx
inc edx
push eax
dec eax
xor al, 0x35
add esp, 4
or edi, 0x13460
call 0x405e76
add byte [ebx + 0x35], al
dec edx
xor al, 0x4d
add esp, 4
or edi, 0x1a22
pop edi
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x194]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x194]
movsx eax, byte [ebp + edx - 0x898]
cmp ecx, eax
je 0x405ec5
mov ecx, dword [ebp - 0x760]
add ecx, dword [ebp - 0x194]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x194]
movsx ecx, byte [ebp + eax - 0x898]
cmp edx, ecx
jne 0x405ecc
jmp 0x405e12
jmp 0x405ed3
push eax
push eax
add esp, 4
add eax, 0xfb9a
or eax, 0x7976
or eax, 0x9975
or eax, 0x145a8
pop eax
push ecx
xor ecx, 0x10405
sub ecx, 0x161ff
add ecx, 0x1439c
pop ecx
mov edx, dword [ebp - 0x760]
add edx, dword [ebp - 0x194]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x194]
movsx edx, byte [ebp + ecx - 0x898]
cmp eax, edx
jne 0x405f32
mov dword [ebp - 0xcac], 0
jmp 0x405fa1
push esi
push ebx
add esp, 4
jmp 0x405f3d
xor esi, 0x11cf9
and esi, 0x160fd
and esi, 0x14970
pop esi
push edi
or edi, 0x8267
and edi, 0xa820
xor edi, 0x10017
pop edi
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x194]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x194]
movsx eax, byte [ebp + edx - 0x898]
or eax, 0x20
cmp ecx, eax
jge 0x405f97
mov dword [ebp - 0xcac], 0xffffffff
jmp 0x405fa1
mov dword [ebp - 0xcac], 1
cmp dword [ebp - 0xcac], 0
jne 0x405fb8
mov ecx, dword [ebp - 0x19a4]
mov dword [ebp - 0x3f8], ecx
jmp 0x405fc9
jmp 0x405da2
mov edx, dword [ebp - 0x764]
mov dword [ebp - 0x3f8], edx
cmp dword [ebp - 0x3f8], 0
je 0x4060a4
push ecx
call 0x405fe5
add byte [edx], bh
inc esi
dec edx
dec edi
inc ecx
inc ebp
cmp al, byte [ebx + 0xbe804c4]
add byte [eax], al
add byte [eax], al
dec edi
inc esp
dec eax
dec edx
inc esi
dec esi
xor eax, 0x834f3a43
les eax, [ecx + eax*4]
shr dword [eax + ebp*4 - 0x3e7f0000], 7
mov esp, 0x8b590000
test dword [eax], ecx
cld
invalid
push ebx
push ebx
add esp, 4
call 0x4060b9
add byte [eax + 0x3a], cl
inc ebx
inc ecx
dec esi
inc ecx
inc esp
inc edi
cmp dword [eax], edi
add esp, 4
pop ebx
push ebx
push edx
add esp, 4
or ebx, 0x102b3
jmp 0x4060cf
xor ebx, 0x99a2
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19b0], eax
mov ecx, dword [ebp - 0x19b0]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19b4], edx
mov eax, dword [ebp - 0x19b4]
mov dword [ebp - 0x1604], eax
push eax
push esi
add esp, 4
jmp 0x406108
jmp 0x406110
add eax, 0x15f7
pop eax
push edx
push edx
add esp, 4
or edx, 0x55b1
pop edx
push ebx
push ecx
add esp, 4
and ebx, 0xb014
pop ebx
cmp dword [ebp - 0x1604], 0
jne 0x406147
mov dword [ebp - 0x2d4], 0
jmp 0x4063ee
mov ecx, dword [ebp - 0x1604]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb8], eax
push eax
sub eax, 0x16924
or eax, 0xb8fa
pop eax
push edi
push esi
add esp, 4
jmp 0x406172
sub edi, 0x73f2
pop edi
push edi
push edx
add esp, 4
add edi, 0x151eb
and edi, 0xa65d
pop edi
cmp dword [ebp - 0xcb8], 0
jne 0x4061a3
mov dword [ebp - 0x2d4], 0
jmp 0x4063ee
mov ecx, dword [ebp - 0xcb8]
mov dword [ebp - 0x510], ecx
push ebx
push ecx
add esp, 4
call 0x4061c1
add byte [edx], bh
inc eax
inc ebp
cmp edi, dword [ebx]
inc eax
dec ecx
add esp, 4
call 0x4061d1
add byte [edi + 0x3c], al
cmp dword [ebp + 0x44], ecx
dec ecx
add esp, 4
pop ebx
push ebx
push ebx
add esp, 4
and ebx, 0xb120
pop ebx
lea edx, [ebp - 0x1740]
mov dword [ebp - 0xcb4], edx
mov eax, dword [ebp - 0x510]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcb0], ecx
xor edx, edx
mov word [ebp - 0x218], dx
xor eax, eax
mov word [ebp - 0x34], ax
push ecx
and ecx, 0xbcf4
add ecx, 0x120d8
xor ecx, 0x17e0a
pop ecx
push edi
add edi, 0x5135
call 0x406234
add byte [0x41394c3b], dh
inc edi
xor eax, 0x4c48346
jmp 0x40623c
pop edi
mov ecx, dword [ebp - 0xcb0]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcb0]
add eax, 2
mov dword [ebp - 0xcb0], eax
invalid
invalid
invalid
invalid