Function at 0x833fb0
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1a4
fld qword [0x893578]
fld qword [0x893578]
fld st(0)
fmul st(1)
fld st(0)
fmul qword [0x8bb840]
fsub st(1)
fxch st(1)
fmul qword [0x8a3070]
fadd qword [0x8a52f8]
fdivp st(1)
faddp st(2)
fld st(1)
fcomp qword [0x8bb838]
fnstsw ax
test ah, 0x41
jne 0x833ffe
fld st(0)
fmul qword [0x8bb830]
fsubp st(2)
fadd qword [0x89a450]
fcom qword [0x8bb828]
adc eax, 0x8bb828
mov eax, dword [eax]
fnstsw ax
test ah, 1
jne 0x833fc5
fxch st(1)
fst qword [ebp - 0x40]
fxch st(1)
fstp st(0)
fcomp qword [0x893578]
sbb eax, 0x893578
push ebx
push esi
push edi
fnstsw ax
test ah, 1
je 0x8340f6
rcr bh, 0xb7
ffree st(0)
fnstsw word [esi - 0x481c471f]
salc
rcr ecx, 0xc1
mov eax, 0xc1d6b7e3
fld st(1)
aad 0xb4
aad 0xb4
in al, 0xbc
loope 0x834005
fidivr word [esi - 0x411c4925]
loop 0x834008
loop 0x83400f
aad 0xba
salc
mov ebx, 0xbfdbbfdc
fdiv qword [edi - 0x43294527]
fistp qword [ebp - 0x49263f23]
loop 0x83401b
fnstsw word [eax - 0x48284121]
fcmovb st(0), st(0)
fstp xword [edx - 0x4a214120]
loope 0x834031
in al, 0xc3
loop 0x834036
salc
rcr eax, 0xc1
loop 0x834041
fidivr word [eax - 0x46264a28]
fbstp tbyte [edi + edx*8 - 0x203e2644]
mov ecx, 0xbae0b4e1
in al, 0xb5
fstp xword [ebp - 0x4a1d4525]
invalid
mov dword [ebp - 0x2c], 0x83402e
mov dword [ebp - 0x1c], 0x8340dc
xor eax, eax
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x834106
fld qword [ebp - 0x40]
mov byte [ebp - 0x10], 0
mov eax, 0xff
mov esi, dword [ebp - 0x10]
xor edi, edi
mov dword [ebp - 0x30], eax
jmp 0x83412e
mov eax, dword [ebp - 0x30]
mov ebx, 1
mov dword [ebp - 0x38], 0
cmp eax, ebx
jbe 0x834146
lea ebx, [ebx + ebx + 1]
cmp ebx, eax
jb 0x83413e
cmp edi, 3
ja case.default.0x83414b
jmp dword [edi*4 + 0x835474]
fld st(0)
and esi, 0xff
call fcn.008416e4
mov cl, byte [ebp + esi - 0x14c]
jmp 0x8341c7
fld st(0)
and esi, 0xff
call fcn.008416e4
mov cl, byte [ebp + esi - 0x14c]
shr eax, 8
jmp 0x8341c7
fld st(0)
and esi, 0xff
call fcn.008416e4
mov cl, byte [ebp + esi - 0x14c]
shr eax, 0x10
jmp 0x8341c7
fld st(0)
and esi, 0xff
call fcn.008416e4
mov cl, byte [ebp + esi - 0x14c]
shr eax, 0x18
jmp 0x8341c7
mov eax, dword [ebp - 0x1c]
and esi, 0xff
mov cl, byte [eax + edi - 4]
mov al, byte [ebp + esi - 0x14c]
add cl, al
inc edi
cmp edi, 0x19
mov byte [ebp - 0x10], cl
jb 0x8341da
xor edi, edi
add cl, 0x19
mov byte [ebp - 0x10], cl
mov esi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x38]
mov edx, esi
and edx, 0xff
and edx, ebx
inc eax
cmp eax, 0xb
mov dword [ebp - 0x38], eax
jbe 0x8341fa
mov eax, edx
xor edx, edx
div dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp edx, eax
ja 0x834146
cmp eax, edx
je 0x834237
mov ecx, dword [ebp - 0x30]
lea eax, [ebp + edx - 0x14c]
mov bl, byte [ebp + ecx - 0x14c]
lea edx, [ebp + ecx - 0x14c]
mov cl, byte [eax]
xor bl, cl
mov byte [edx], bl
mov cl, bl
mov bl, byte [eax]
xor bl, cl
mov byte [eax], bl
mov cl, byte [edx]
mov al, bl
xor cl, al
mov byte [edx], cl
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
jne 0x83412b
mov dl, byte [ebp - 0x145]
and esi, 0xff
mov byte [ebp - 0x28], dl
xor edx, edx
mov al, byte [ebp + esi - 0x14c]
mov esi, dword [ebp - 0x2c]
mov byte [ebp - 0x1c], al
xor eax, eax
mov al, byte [esi]
mov dl, byte [esi + 1]
sub eax, 0xb4
sub edx, 0xd5
shl eax, 4
or al, dl
mov edx, dword [ebp - 0x1c]
and edx, 0xff
mov byte [ebp - 0x24], al
mov bl, byte [ebp - 0x149]
mov cl, byte [ebp - 0x147]
mov al, byte [ebp + edx - 0x14c]
lea esi, [ebp + edx - 0x14c]
mov edx, dword [ebp - 0x14b]
mov byte [ebp - 4], al
mov eax, edx
and eax, 0xff
fstp st(0)
mov al, byte [ebp + eax - 0x14c]
add al, bl
inc dl
mov byte [ebp - 0x20], al
mov byte [ebp - 0x14], dl
mov edx, dword [ebp - 0x20]
and edx, 0xff
lea edi, [ebp + edx - 0x14c]
mov dl, byte [ebp + edx - 0x14c]
mov byte [esi], dl
mov edx, dword [ebp - 0x28]
and edx, 0xff
mov bl, byte [ebp + edx - 0x14c]
lea edx, [ebp + edx - 0x14c]
mov byte [edi], bl
mov ebx, dword [ebp - 0x14]
and ebx, 0xff
mov dword [ebp - 8], edx
lea ebx, [ebp + ebx - 0x14c]
mov dword [ebp - 0xc], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov ebx, dword [ebp - 0xc]
mov dl, byte [ebp - 4]
mov byte [ebx], dl
mov edx, dword [ebp - 4]
and edx, 0xff
mov dword [ebp - 0x18], edx
mov bl, byte [ebp + edx - 0x14c]
add cl, bl
mov bl, byte [esi]
mov esi, dword [ebp - 8]
mov byte [ebp - 0x30], cl
mov edx, dword [ebp - 0x30]
and edx, 0xff
mov dl, byte [ebp + edx - 0x14c]
add edx, ebx
mov bl, byte [esi]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov esi, 1
mov bl, byte [ebp + edx - 0x14c]
mov dl, byte [edi]
mov edi, dword [ebp - 0x18]
mov bl, byte [ebp + ebx - 0x14c]
add edx, edi
and edx, 0xff
xor bl, byte [ebp + edx - 0x14c]
mov dl, byte [ebp - 0x24]
mov byte [ebp - 0x1c], dl
xor bl, dl
mov edx, dword [ebp - 0x2c]
mov byte [ebp - 0x28], bl
lea edi, [edx + 2]
xor edx, edx
xor ebx, ebx
mov dl, byte [edi]
mov bl, byte [edi + 1]
add dl, 0xc
sub ebx, 0xd5
shl dl, 4
or dl, bl
mov dword [ebp - 0x38], 0x28
mov byte [ebp - 0x24], dl
mov edx, dword [ebp - 0x1c]
and edx, 0xff
lea edi, [ebp + edx - 0x14c]
mov dl, byte [ebp + edx - 0x14c]
mov byte [ebp - 4], dl
mov edx, dword [ebp - 0xc]
mov bl, byte [edx]
mov dl, byte [ebp - 0x14]
add al, bl
inc dl
mov byte [ebp - 0x20], al
mov byte [ebp - 0x14], dl
mov edx, dword [ebp - 0x20]
and edx, 0xff
mov bl, byte [ebp + edx - 0x14c]
lea edx, [ebp + edx - 0x14c]
mov byte [edi], bl
mov ebx, dword [ebp - 0x28]
and ebx, 0xff
mov dword [ebp - 0x10], edx
lea ebx, [ebp + ebx - 0x14c]
mov dword [ebp - 8], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp - 0x14]
mov ebx, dword [ebp - 8]
and edx, 0xff
lea edx, [ebp + edx - 0x14c]
mov dword [ebp - 0xc], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 0xc]
mov dl, byte [ebp - 4]
mov byte [ebx], dl
mov edx, dword [ebp - 4]
and edx, 0xff
mov dword [ebp - 0x18], edx
mov bl, byte [ebp + edx - 0x14c]
add cl, bl
mov bl, byte [edi]
mov edi, dword [ebp - 8]
mov byte [ebp - 0x30], cl
mov edx, dword [ebp - 0x30]
and edx, 0xff
mov dl, byte [ebp + edx - 0x14c]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov bl, byte [ebp + edx - 0x14c]
mov edx, dword [ebp - 0x10]
mov edi, ebx
mov bl, byte [edx]
mov edx, dword [ebp - 0x18]
add ebx, edx
mov dl, byte [ebp + edi - 0x14c]
and ebx, 0xff
xor dl, byte [ebp + ebx - 0x14c]
mov bl, byte [ebp - 0x24]
mov byte [ebp - 0x1c], bl
xor dl, bl
mov byte [ebp - 0x28], dl
mov byte [ebp - 0x1a4], dl
mov edx, dword [ebp - 0x2c]
lea edi, [edx + 2]
jmp 0x8344a9
mov edi, dword [ebp - 0x3c]
add edi, 2
xor edx, edx
xor ebx, ebx
mov dword [ebp - 0x3c], edi
mov dl, byte [edi]
mov bl, byte [edi + 1]
sub edx, 0xb4
sub ebx, 0xd5
shl dl, 4
or dl, bl
inc esi
mov byte [ebp - 0x24], dl
mov edx, dword [ebp - 0x1c]
and edx, 0xff
lea edi, [ebp + edx - 0x14c]
mov dl, byte [ebp + edx - 0x14c]
mov byte [ebp - 4], dl
mov edx, dword [ebp - 0xc]
mov bl, byte [edx]
mov dl, byte [ebp - 0x14]
add al, bl
inc dl
mov byte [ebp - 0x20], al
mov byte [ebp - 0x14], dl
mov edx, dword [ebp - 0x20]
and edx, 0xff
mov bl, byte [ebp + edx - 0x14c]
lea edx, [ebp + edx - 0x14c]
mov byte [edi], bl
mov ebx, dword [ebp - 0x28]
and ebx, 0xff
mov dword [ebp - 0x10], edx
lea ebx, [ebp + ebx - 0x14c]
mov dword [ebp - 8], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp - 0x14]
mov ebx, dword [ebp - 8]
and edx, 0xff
lea edx, [ebp + edx - 0x14c]
mov dword [ebp - 0xc], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 0xc]
mov dl, byte [ebp - 4]
mov byte [ebx], dl
mov edx, dword [ebp - 4]
and edx, 0xff
mov dword [ebp - 0x18], edx
mov bl, byte [ebp + edx - 0x14c]
add cl, bl
mov bl, byte [edi]
mov edi, dword [ebp - 8]
mov byte [ebp - 0x30], cl
mov edx, dword [ebp - 0x30]
and edx, 0xff
mov dl, byte [ebp + edx - 0x14c]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov bl, byte [ebp + edx - 0x14c]
mov edx, dword [ebp - 0x10]
mov edi, ebx
mov bl, byte [edx]
mov edx, dword [ebp - 0x18]
add ebx, edx
mov dl, byte [ebp + edi - 0x14c]
and ebx, 0xff
xor dl, byte [ebp + ebx - 0x14c]
mov bl, byte [ebp - 0x24]
mov byte [ebp - 0x1c], bl
xor dl, bl
test esi, esi
mov byte [ebp - 0x28], dl
jbe 0x8345c6
mov byte [ebp + esi - 0x1a5], dl
mov edx, dword [ebp - 0x38]
dec edx
mov dword [ebp - 0x38], edx
jne 0x8344a6
mov edx, dword [ebp - 0x2c]
inc esi
mov bl, byte [edx + esi*2 + 1]
lea edi, [edx + esi*2]
add bl, 0x2b
mov dl, byte [edi]
add dl, 0xc
shl dl, 4
or dl, bl
mov byte [ebp - 0x24], dl
mov edx, dword [ebp - 0x1c]
and edx, 0xff
lea edi, [ebp + edx - 0x14c]
mov dl, byte [ebp + edx - 0x14c]
mov byte [ebp - 4], dl
mov edx, dword [ebp - 0x14]
and edx, 0xff
mov bl, byte [ebp + edx - 0x14c]
mov dl, byte [ebp - 0x14]
add al, bl
inc dl
mov byte [ebp - 0x20], al
mov byte [ebp - 0x14], dl
mov edx, dword [ebp - 0x20]
and edx, 0xff
mov bl, byte [ebp + edx - 0x14c]
lea edx, [ebp + edx - 0x14c]
mov byte [edi], bl
mov ebx, dword [ebp - 0x28]
and ebx, 0xff
mov dword [ebp - 0x10], edx
lea ebx, [ebp + ebx - 0x14c]
mov dword [ebp - 8], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp - 0x14]
mov ebx, dword [ebp - 8]
and edx, 0xff
lea edx, [ebp + edx - 0x14c]
mov dword [ebp - 0xc], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 0xc]
mov dl, byte [ebp - 4]
mov byte [ebx], dl
mov edx, dword [ebp - 4]
and edx, 0xff
mov dword [ebp - 0x18], edx
mov bl, byte [ebp + edx - 0x14c]
add cl, bl
mov bl, byte [edi]
mov edi, dword [ebp - 8]
mov byte [ebp - 0x30], cl
mov edx, dword [ebp - 0x30]
and edx, 0xff
mov dl, byte [ebp + edx - 0x14c]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov bl, byte [ebp + edx - 0x14c]
mov edx, dword [ebp - 0x10]
mov edi, ebx
mov bl, byte [edx]
mov edx, dword [ebp - 0x18]
add ebx, edx
mov dl, byte [ebp + edi - 0x14c]
and ebx, 0xff
xor dl, byte [ebp + ebx - 0x14c]
mov bl, byte [ebp - 0x24]
mov byte [ebp - 0x1c], bl
xor dl, bl
test esi, esi
mov byte [ebp - 0x28], dl
jbe 0x8346f2
mov byte [ebp + esi - 0x1a5], dl
lea ebx, [esi + 1]
cmp ebx, 0x55
jge 0x834834
mov edx, dword [ebp - 0x2c]
lea edi, [edx + esi*2]
mov edx, 0x55
sub edx, ebx
mov dword [ebp - 0x38], edx
jmp 0x834713
mov edi, dword [ebp - 0x3c]
mov bl, byte [edi + 2]
mov dl, byte [edi + 3]
add edi, 2
add bl, 0xc
add dl, 0x2b
mov dword [ebp - 0x3c], edi
shl bl, 4
or dl, bl
inc esi
mov byte [ebp - 0x24], dl
mov edx, dword [ebp - 0x1c]
and edx, 0xff
lea edi, [ebp + edx - 0x14c]
mov dl, byte [ebp + edx - 0x14c]
mov byte [ebp - 4], dl
mov edx, dword [ebp - 0xc]
mov bl, byte [edx]
mov dl, byte [ebp - 0x14]
add al, bl
inc dl
mov byte [ebp - 0x20], al
mov byte [ebp - 0x14], dl
mov edx, dword [ebp - 0x20]
and edx, 0xff
mov bl, byte [ebp + edx - 0x14c]
lea edx, [ebp + edx - 0x14c]
mov byte [edi], bl
mov ebx, dword [ebp - 0x28]
and ebx, 0xff
mov dword [ebp - 0x10], edx
lea ebx, [ebp + ebx - 0x14c]
mov dword [ebp - 8], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp - 0x14]
mov ebx, dword [ebp - 8]
and edx, 0xff
lea edx, [ebp + edx - 0x14c]
mov dword [ebp - 0xc], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 0xc]
mov dl, byte [ebp - 4]
mov byte [ebx], dl
mov edx, dword [ebp - 4]
and edx, 0xff
mov dword [ebp - 0x18], edx
mov bl, byte [ebp + edx - 0x14c]
add cl, bl
mov bl, byte [edi]
mov edi, dword [ebp - 8]
mov byte [ebp - 0x30], cl
mov edx, dword [ebp - 0x30]
and edx, 0xff
mov dl, byte [ebp + edx - 0x14c]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov bl, byte [ebp + edx - 0x14c]
mov edx, dword [ebp - 0x10]
mov edi, ebx
mov bl, byte [edx]
mov edx, dword [ebp - 0x18]
add ebx, edx
mov dl, byte [ebp + edi - 0x14c]
and ebx, 0xff
xor dl, byte [ebp + ebx - 0x14c]
mov bl, byte [ebp - 0x24]
mov byte [ebp - 0x1c], bl
xor dl, bl
test esi, esi
mov byte [ebp - 0x28], dl
jbe 0x834827
mov byte [ebp + esi - 0x1a5], dl
mov edx, dword [ebp - 0x38]
dec edx
mov dword [ebp - 0x38], edx
jne 0x834710
mov edi, dword [ebp - 0x2c]
inc esi
mov dl, byte [edi + esi*2]
mov bl, byte [edi + esi*2 + 1]
add dl, 0xc
add bl, 0x2b
shl dl, 4
or dl, bl
mov byte [ebp - 0x24], dl
mov edx, dword [ebp - 0x1c]
and edx, 0xff
lea edi, [ebp + edx - 0x14c]
mov dl, byte [ebp + edx - 0x14c]
mov byte [ebp - 4], dl
mov edx, dword [ebp - 0x14]
and edx, 0xff
mov bl, byte [ebp + edx - 0x14c]
mov dl, byte [ebp - 0x14]
add al, bl
inc dl
mov byte [ebp - 0x20], al
mov byte [ebp - 0x14], dl
mov edx, dword [ebp - 0x20]
and edx, 0xff
mov bl, byte [ebp + edx - 0x14c]
lea edx, [ebp + edx - 0x14c]
mov byte [edi], bl
mov ebx, dword [ebp - 0x28]
and ebx, 0xff
mov dword [ebp - 0x10], edx
lea ebx, [ebp + ebx - 0x14c]
mov dword [ebp - 8], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp - 0x14]
mov ebx, dword [ebp - 8]
and edx, 0xff
lea edx, [ebp + edx - 0x14c]
mov dword [ebp - 0xc], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 0xc]
mov dl, byte [ebp - 4]
mov byte [ebx], dl
mov edx, dword [ebp - 4]
and edx, 0xff
mov dword [ebp - 0x18], edx
mov bl, byte [ebp + edx - 0x14c]
add cl, bl
mov bl, byte [edi]
mov edi, dword [ebp - 8]
mov byte [ebp - 0x30], cl
mov edx, dword [ebp - 0x30]
and edx, 0xff
mov dl, byte [ebp + edx - 0x14c]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov bl, byte [ebp + edx - 0x14c]
mov edx, dword [ebp - 0x10]
mov edi, ebx
mov bl, byte [edx]
mov edx, dword [ebp - 0x18]
add ebx, edx
mov dl, byte [ebp + edi - 0x14c]
and ebx, 0xff
xor dl, byte [ebp + ebx - 0x14c]
mov bl, byte [ebp - 0x24]
mov byte [ebp - 0x1c], bl
xor dl, bl
test esi, esi
mov byte [ebp - 0x28], dl
jbe 0x834951
mov byte [ebp + esi - 0x1a5], dl
mov edi, dword [ebp - 0x2c]
inc esi
mov dl, byte [edi + esi*2]
mov bl, byte [edi + esi*2 + 1]
add dl, 0xc
add bl, 0x2b
shl dl, 4
or dl, bl
mov byte [ebp - 0x24], dl
mov edx, dword [ebp - 0x1c]
and edx, 0xff
lea edi, [ebp + edx - 0x14c]
mov dl, byte [ebp + edx - 0x14c]
mov byte [ebp - 4], dl
mov edx, dword [ebp - 0xc]
mov bl, byte [edx]
mov dl, byte [ebp - 0x14]
add al, bl
inc dl
mov byte [ebp - 0x20], al
mov byte [ebp - 0x14], dl
mov edx, dword [ebp - 0x20]
and edx, 0xff
mov bl, byte [ebp + edx - 0x14c]
lea edx, [ebp + edx - 0x14c]
mov byte [edi], bl
mov ebx, dword [ebp - 0x28]
and ebx, 0xff
mov dword [ebp - 0x10], edx
lea ebx, [ebp + ebx - 0x14c]
mov dword [ebp - 8], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp - 0x14]
mov ebx, dword [ebp - 8]
and edx, 0xff
lea edx, [ebp + edx - 0x14c]
mov dword [ebp - 0xc], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 0xc]
mov dl, byte [ebp - 4]
mov byte [ebx], dl
mov edx, dword [ebp - 4]
and edx, 0xff
mov dword [ebp - 0x18], edx
mov bl, byte [ebp + edx - 0x14c]
add cl, bl
mov bl, byte [edi]
mov edi, dword [ebp - 8]
mov byte [ebp - 0x30], cl
mov edx, dword [ebp - 0x30]
and edx, 0xff
mov dl, byte [ebp + edx - 0x14c]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov bl, byte [ebp + edx - 0x14c]
mov edx, dword [ebp - 0x10]
mov edi, ebx
mov bl, byte [edx]
mov edx, dword [ebp - 0x18]
add ebx, edx
mov dl, byte [ebp + edi - 0x14c]
and ebx, 0xff
xor dl, byte [ebp + ebx - 0x14c]
mov bl, byte [ebp - 0x24]
xor dl, bl
test esi, esi
mov byte [ebp - 0x28], dl
jbe 0x834a60
mov byte [ebp + esi - 0x1a5], dl
mov edx, dword [ebp - 0x24]
inc esi
and edx, 0xff
lea edi, [ebp + edx - 0x14c]
mov dl, byte [ebp + edx - 0x14c]
mov byte [ebp - 4], dl
mov edx, dword [ebp - 0xc]
mov bl, byte [edx]
add al, bl
mov bl, byte [ebp - 0x14]
mov byte [ebp - 0x20], al
inc bl
mov eax, dword [ebp - 0x20]
mov byte [ebp - 0x14], bl
and eax, 0xff
mov dl, byte [ebp + eax - 0x14c]
lea eax, [ebp + eax - 0x14c]
mov byte [edi], dl
mov edx, dword [ebp - 0x28]
and edx, 0xff
mov bl, byte [ebp + edx - 0x14c]
lea edx, [ebp + edx - 0x14c]
mov byte [eax], bl
mov ebx, dword [ebp - 0x14]
and ebx, 0xff
mov dword [ebp - 8], edx
test esi, esi
lea ebx, [ebp + ebx - 0x14c]
mov dword [ebp - 0xc], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov ebx, dword [ebp - 0xc]
mov dl, byte [ebp - 4]
mov byte [ebx], dl
jbe 0x834b5d
mov edx, dword [ebp - 4]
mov al, byte [eax]
and edx, 0xff
mov dword [ebp - 0x18], edx
mov edx, dword [ebp - 0x2c]
mov bl, byte [edx + esi*2]
mov dl, byte [edx + esi*2 + 1]
sub bl, 4
add dl, 0x2b
shl bl, 4
or bl, dl
mov edx, dword [ebp - 0x18]
mov dl, byte [ebp + edx - 0x14c]
add dl, cl
and edx, 0xff
mov cl, byte [ebp + edx - 0x14c]
mov dl, byte [edi]
add ecx, edx
mov edx, dword [ebp - 8]
mov edi, dword [ebp - 0x18]
mov dl, byte [edx]
add eax, edi
add ecx, edx
xor edx, edx
and ecx, 0xff
and eax, 0xff
mov dl, byte [ebp + ecx - 0x14c]
mov cl, byte [ebp + edx - 0x14c]
xor bl, cl
mov cl, byte [ebp + eax - 0x14c]
xor bl, cl
mov byte [ebp + esi - 0x1a5], bl
mov byte [ebp - 0x14e], 0
fld qword [0x893578]
fld qword [0x893578]
fld st(0)
fmul st(1)
fld st(0)
fmul qword [0x8bb820]
fsub st(1)
fxch st(1)
fmul qword [0x8a2c28]
fadd qword [0x89a5a0]
fdivp st(1)
faddp st(2)
fld st(1)
fcomp qword [0x8bb818]
fnstsw ax
test ah, 0x41
jne 0x834ba9
fld st(0)
fmul qword [0x8bb810]
fsubp st(2)
fadd qword [0x89a528]
fcom qword [0x8bb808]
fnstsw ax
test ah, 1
jne 0x834b70
fxch st(1)
fst qword [ebp - 0x34]
fxch st(1)
fstp st(0)
fcomp qword [0x893578]
fnstsw ax
test ah, 1
je 0x834c01
mov ebp, 0xc42bbf27
sub dword [esi - 0x3dd13ad1], edi
sub esi, eax
xor byte [ecx + esi + 0x652e5bc1], bh
arpl word [ebp + 0x4a], bp
and eax, 0x70615948
dec ecx
jge 0x834c71
das
bound ebp, qword [eax + 0x66]
pop ecx
and byte [ecx + 0x69], ah
jmp 0x835429
mov dword [ebp - 0x38], 0x834bd2
mov dword [ebp - 0x3c], 0x834be4
xor eax, eax
mov byte [ebp + eax - 0x14c], al
inc eax
cmp eax, 0x100
jb 0x834c11
fld qword [ebp - 0x34]
mov eax, 0xff
mov byte [ebp - 0x2c], 0
mov esi, dword [ebp - 0x2c]
xor edi, edi
mov dword [ebp - 0x10], eax
jmp 0x834c39
mov eax, dword [ebp - 0x10]
mov ebx, 1
mov dword [ebp - 0x30], 0
cmp eax, ebx
jbe 0x834c51
lea ebx, [ebx + ebx + 1]
cmp ebx, eax
jb 0x834c49
cmp edi, 3
ja case.default.0x834c56
jmp dword [edi*4 + 0x835484]
fld st(0)
and esi, 0xff
call fcn.008416e4
mov cl, byte [ebp + esi - 0x14c]
jmp 0x834cd2
fld st(0)
and esi, 0xff
call fcn.008416e4
mov cl, byte [ebp + esi - 0x14c]
shr eax, 8
jmp 0x834cd2
fld st(0)
and esi, 0xff
call fcn.008416e4
mov cl, byte [ebp + esi - 0x14c]
shr eax, 0x10
jmp 0x834cd2
fld st(0)
and esi, 0xff
call fcn.008416e4
mov cl, byte [ebp + esi - 0x14c]
shr eax, 0x18
jmp 0x834cd2
mov edx, dword [ebp - 0x3c]
and esi, 0xff
mov cl, byte [ebp + esi - 0x14c]
mov al, byte [edx + edi - 4]
add cl, al
inc edi
cmp edi, 0x1c
mov byte [ebp - 0x2c], cl
jb 0x834ce5
xor edi, edi
add cl, 0x1c
mov byte [ebp - 0x2c], cl
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov edx, esi
and edx, 0xff
and edx, ebx
inc eax
cmp eax, 0xb
mov dword [ebp - 0x30], eax
jbe 0x834d05
mov eax, edx
xor edx, edx
div dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp edx, eax
ja 0x834c51
mov ecx, eax
cmp ecx, edx
je 0x834d4e
mov al, byte [ebp + edx - 0x14c]
mov bl, byte [ebp + ecx - 0x14c]
lea edx, [ebp + edx - 0x14c]
xor bl, al
mov byte [ebp + ecx - 0x14c], bl
mov al, bl
mov bl, byte [edx]
xor bl, al
mov byte [edx], bl
mov al, byte [ebp + ecx - 0x14c]
mov dl, bl
xor al, dl
mov byte [ebp + ecx - 0x14c], al
dec ecx
mov dword [ebp - 0x10], ecx
jne 0x834c36
mov cl, byte [ebp - 0x145]
and esi, 0xff
mov byte [ebp - 0x1c], cl
xor ecx, ecx
mov al, byte [ebp + esi - 0x14c]
mov bl, byte [ebp - 0x149]
mov byte [ebp - 0x28], al
mov eax, dword [ebp - 0x38]
xor esi, esi
mov dl, byte [ebp - 0x147]
mov cl, byte [eax + 1]
mov al, byte [eax]
add al, 0xa
sub ecx, 0xbb
shl al, 4
or al, cl
mov ecx, dword [ebp - 0x28]
and ecx, 0xff
mov byte [ebp - 0x24], al
fstp st(0)
mov al, byte [ebp + ecx - 0x14c]
lea edi, [ebp + ecx - 0x14c]
mov byte [ebp - 8], al
mov eax, dword [ebp - 0x14b]
mov ecx, eax
and ecx, 0xff
mov cl, byte [ebp + ecx - 0x14c]
add cl, bl
inc al
mov byte [ebp - 0x10], cl
mov byte [ebp - 0xc], al
mov eax, dword [ebp - 0x10]
and eax, 0xff
mov bl, byte [ebp + eax - 0x14c]
lea eax, [ebp + eax - 0x14c]
mov byte [edi], bl
mov ebx, dword [ebp - 0x1c]
and ebx, 0xff
mov dword [ebp - 0x14], eax
lea ebx, [ebp + ebx - 0x14c]
mov dword [ebp - 4], ebx
mov bl, byte [ebx]
mov byte [eax], bl
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 4]
and eax, 0xff
lea eax, [ebp + eax - 0x14c]
mov dword [ebp - 0x18], eax
mov al, byte [eax]
mov byte [ebx], al
mov ebx, dword [ebp - 0x18]
mov al, byte [ebp - 8]
mov byte [ebx], al
mov eax, dword [ebp - 8]
and eax, 0xff
mov dword [ebp - 0x30], eax
mov bl, byte [ebp + eax - 0x14c]
add dl, bl
mov bl, byte [edi]
mov edi, dword [ebp - 4]
mov byte [ebp - 0x20], dl
mov eax, dword [ebp - 0x20]
and eax, 0xff
mov al, byte [ebp + eax - 0x14c]
add eax, ebx
mov bl, byte [edi]
add eax, ebx
mov edi, dword [ebp - 0x30]
and eax, 0xff
xor ebx, ebx
mov bl, byte [ebp + eax - 0x14c]
mov eax, dword [ebp - 0x14]
mov al, byte [eax]
mov bl, byte [ebp + ebx - 0x14c]
add eax, edi
and eax, 0xff
xor bl, byte [ebp + eax - 0x14c]
mov al, byte [ebp - 0x24]
mov byte [ebp - 0x28], al
xor bl, al
mov byte [ebp - 0x1c], bl
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x2c], 2
jmp 0x834e9d
mov edi, dword [ebp - 0x3c]
add edi, 2
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x3c], edi
mov al, byte [edi]
mov bl, byte [edi + 1]
add al, 0xa
sub ebx, 0xbb
shl al, 4
or al, bl
inc esi
mov byte [ebp - 0x24], al
mov eax, dword [ebp - 0x28]
and eax, 0xff
lea edi, [ebp + eax - 0x14c]
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp - 8], al
mov eax, dword [ebp - 0x18]
mov bl, byte [eax]
mov al, byte [ebp - 0xc]
add cl, bl
inc al
mov byte [ebp - 0x10], cl
mov byte [ebp - 0xc], al
mov eax, dword [ebp - 0x10]
and eax, 0xff
mov bl, byte [ebp + eax - 0x14c]
lea eax, [ebp + eax - 0x14c]
mov byte [edi], bl
mov ebx, dword [ebp - 0x1c]
and ebx, 0xff
mov dword [ebp - 0x14], eax
lea ebx, [ebp + ebx - 0x14c]
mov dword [ebp - 4], ebx
mov bl, byte [ebx]
mov byte [eax], bl
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 4]
and eax, 0xff
lea eax, [ebp + eax - 0x14c]
mov dword [ebp - 0x18], eax
mov al, byte [eax]
mov byte [ebx], al
mov ebx, dword [ebp - 0x18]
mov al, byte [ebp - 8]
mov byte [ebx], al
mov eax, dword [ebp - 8]
and eax, 0xff
mov dword [ebp - 0x30], eax
mov bl, byte [ebp + eax - 0x14c]
add dl, bl
mov bl, byte [edi]
mov edi, dword [ebp - 4]
mov byte [ebp - 0x20], dl
mov eax, dword [ebp - 0x20]
and eax, 0xff
mov al, byte [ebp + eax - 0x14c]
add eax, ebx
mov bl, byte [edi]
add eax, ebx
xor ebx, ebx
and eax, 0xff
mov bl, byte [ebp + eax - 0x14c]
mov eax, dword [ebp - 0x14]
mov edi, ebx
mov bl, byte [eax]
mov eax, dword [ebp - 0x30]
add ebx, eax
mov al, byte [ebp + edi - 0x14c]
and ebx, 0xff
xor al, byte [ebp + ebx - 0x14c]
mov bl, byte [ebp - 0x24]
mov byte [ebp - 0x28], bl
xor al, bl
test esi, esi
mov byte [ebp - 0x1c], al
jbe 0x834fad
mov byte [ebp + esi - 0x4d], al
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
jne 0x834e9a
lea ebx, [esi + 1]
cmp ebx, 7
jge 0x835109
mov eax, dword [ebp - 0xc]
and eax, 0xff
lea eax, [ebp + eax - 0x14c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x38]
lea edi, [eax + esi*2]
mov eax, 7
sub eax, ebx
mov dword [ebp - 0x2c], eax
jmp 0x834fed
mov edi, dword [ebp - 0x3c]
mov al, byte [edi + 2]
add edi, 2
xor ebx, ebx
add al, 0xa
mov bl, byte [edi + 1]
mov dword [ebp - 0x3c], edi
sub ebx, 0xbb
inc esi
shl al, 4
or al, bl
mov byte [ebp - 0x24], al
mov eax, dword [ebp - 0x28]
and eax, 0xff
lea edi, [ebp + eax - 0x14c]
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp - 8], al
mov eax, dword [ebp - 0x18]
mov bl, byte [eax]
mov al, byte [ebp - 0xc]
add cl, bl
inc al
mov byte [ebp - 0x10], cl
mov byte [ebp - 0xc], al
mov eax, dword [ebp - 0x10]
and eax, 0xff
mov bl, byte [ebp + eax - 0x14c]
lea eax, [ebp + eax - 0x14c]
mov byte [edi], bl
mov ebx, dword [ebp - 0x1c]
and ebx, 0xff
mov dword [ebp - 0x14], eax
lea ebx, [ebp + ebx - 0x14c]
mov dword [ebp - 4], ebx
mov bl, byte [ebx]
mov byte [eax], bl
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 4]
and eax, 0xff
lea eax, [ebp + eax - 0x14c]
mov dword [ebp - 0x18], eax
mov al, byte [eax]
mov byte [ebx], al
mov ebx, dword [ebp - 0x18]
mov al, byte [ebp - 8]
mov byte [ebx], al
mov eax, dword [ebp - 8]
and eax, 0xff
mov dword [ebp - 0x30], eax
mov bl, byte [ebp + eax - 0x14c]
add dl, bl
mov bl, byte [edi]
mov edi, dword [ebp - 4]
mov byte [ebp - 0x20], dl
mov eax, dword [ebp - 0x20]
and eax, 0xff
mov al, byte [ebp + eax - 0x14c]
add eax, ebx
mov bl, byte [edi]
add eax, ebx
xor ebx, ebx
and eax, 0xff
mov bl, byte [ebp + eax - 0x14c]
mov eax, dword [ebp - 0x14]
mov edi, ebx
mov bl, byte [eax]
mov eax, dword [ebp - 0x30]
add ebx, eax
mov al, byte [ebp + edi - 0x14c]
and ebx, 0xff
xor al, byte [ebp + ebx - 0x14c]
mov bl, byte [ebp - 0x24]
mov byte [ebp - 0x28], bl
xor al, bl
test esi, esi
mov byte [ebp - 0x1c], al
jbe 0x8350fc
mov byte [ebp + esi - 0x4d], al
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
jne 0x834fea
mov edi, dword [ebp - 0x38]
inc esi
xor eax, eax
xor ebx, ebx
mov al, byte [edi + esi*2]
mov bl, byte [edi + esi*2 + 1]
sub eax, 0x26
sub ebx, 0xbb
shl al, 4
or al, bl
mov byte [ebp - 0x24], al
mov eax, dword [ebp - 0x28]
and eax, 0xff
lea edi, [ebp + eax - 0x14c]
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp - 8], al
mov eax, dword [ebp - 0xc]
and eax, 0xff
mov bl, byte [ebp + eax - 0x14c]
mov al, byte [ebp - 0xc]
add cl, bl
inc al
mov byte [ebp - 0x10], cl
mov byte [ebp - 0xc], al
mov eax, dword [ebp - 0x10]
and eax, 0xff
mov bl, byte [ebp + eax - 0x14c]
lea eax, [ebp + eax - 0x14c]
mov byte [edi], bl
mov ebx, dword [ebp - 0x1c]
and ebx, 0xff
mov dword [ebp - 0x14], eax
lea ebx, [ebp + ebx - 0x14c]
mov dword [ebp - 4], ebx
mov bl, byte [ebx]
mov byte [eax], bl
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 4]
and eax, 0xff
lea eax, [ebp + eax - 0x14c]
mov dword [ebp - 0x18], eax
mov al, byte [eax]
mov byte [ebx], al
mov ebx, dword [ebp - 0x18]
mov al, byte [ebp - 8]
mov byte [ebx], al
mov eax, dword [ebp - 8]
and eax, 0xff
mov dword [ebp - 0x30], eax
mov bl, byte [ebp + eax - 0x14c]
add dl, bl
mov bl, byte [edi]
mov edi, dword [ebp - 4]
mov byte [ebp - 0x20], dl
mov eax, dword [ebp - 0x20]
and eax, 0xff
mov al, byte [ebp + eax - 0x14c]
add eax, ebx
mov bl, byte [edi]
add eax, ebx
xor ebx, ebx
and eax, 0xff
mov bl, byte [ebp + eax - 0x14c]
mov eax, dword [ebp - 0x14]
mov edi, ebx
mov bl, byte [eax]
mov eax, dword [ebp - 0x30]
add ebx, eax
mov al, byte [ebp + edi - 0x14c]
and ebx, 0xff
xor al, byte [ebp + ebx - 0x14c]
mov bl, byte [ebp - 0x24]
mov byte [ebp - 0x28], bl
xor al, bl
test esi, esi
mov byte [ebp - 0x1c], al
jbe 0x835223
mov byte [ebp + esi - 0x4d], al
mov ebx, dword [ebp - 0x38]
inc esi
xor eax, eax
mov al, byte [ebx + esi*2]
mov edi, eax
xor eax, eax
mov al, byte [ebx + esi*2 + 1]
lea ebx, [edi - 0x26]
add al, 0x45
shl bl, 4
or al, bl
mov byte [ebp - 0x24], al
mov eax, dword [ebp - 0x28]
and eax, 0xff
lea edi, [ebp + eax - 0x14c]
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp - 8], al
mov eax, dword [ebp - 0x18]
mov bl, byte [eax]
mov al, byte [ebp - 0xc]
add cl, bl
inc al
mov byte [ebp - 0x10], cl
mov byte [ebp - 0xc], al
mov eax, dword [ebp - 0x10]
and eax, 0xff
mov bl, byte [ebp + eax - 0x14c]
lea eax, [ebp + eax - 0x14c]
mov byte [edi], bl
mov ebx, dword [ebp - 0x1c]
and ebx, 0xff
mov dword [ebp - 0x14], eax
lea ebx, [ebp + ebx - 0x14c]
mov dword [ebp - 4], ebx
mov bl, byte [ebx]
mov byte [eax], bl
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 4]
and eax, 0xff
lea eax, [ebp + eax - 0x14c]
mov dword [ebp - 0x18], eax
mov al, byte [eax]
mov byte [ebx], al
mov ebx, dword [ebp - 0x18]
mov al, byte [ebp - 8]
mov byte [ebx], al
mov eax, dword [ebp - 8]
and eax, 0xff
mov dword [ebp - 0x30], eax
mov bl, byte [ebp + eax - 0x14c]
add dl, bl
mov bl, byte [edi]
mov edi, dword [ebp - 4]
mov byte [ebp - 0x20], dl
mov eax, dword [ebp - 0x20]
and eax, 0xff
mov al, byte [ebp + eax - 0x14c]
add eax, ebx
mov bl, byte [edi]
add eax, ebx
xor ebx, ebx
and eax, 0xff
mov bl, byte [ebp + eax - 0x14c]
mov eax, dword [ebp - 0x14]
mov edi, ebx
mov bl, byte [eax]
mov eax, dword [ebp - 0x30]
add ebx, eax
mov al, byte [ebp + edi - 0x14c]
and ebx, 0xff
xor al, byte [ebp + ebx - 0x14c]
mov bl, byte [ebp - 0x24]
xor al, bl
test esi, esi
mov byte [ebp - 0x1c], al
jbe 0x83532e
mov byte [ebp + esi - 0x4d], al
mov eax, dword [ebp - 0x24]
inc esi
and eax, 0xff
lea edi, [ebp + eax - 0x14c]
mov al, byte [ebp + eax - 0x14c]
mov byte [ebp - 8], al
mov eax, dword [ebp - 0x18]
add cl, byte [eax]
mov byte [ebp - 0x10], cl
mov cl, byte [ebp - 0xc]
inc cl
mov byte [ebp - 0xc], cl
mov ecx, dword [ebp - 0x10]
and ecx, 0xff
lea eax, [ebp + ecx - 0x14c]
mov cl, byte [ebp + ecx - 0x14c]
mov byte [edi], cl
mov ecx, dword [ebp - 0x1c]
and ecx, 0xff
mov bl, byte [ebp + ecx - 0x14c]
lea ecx, [ebp + ecx - 0x14c]
mov byte [eax], bl
mov ebx, dword [ebp - 0xc]
and ebx, 0xff
mov dword [ebp - 4], ecx
test esi, esi
lea ebx, [ebp + ebx - 0x14c]
mov dword [ebp - 0x18], ebx
mov bl, byte [ebx]
mov byte [ecx], bl
mov ebx, dword [ebp - 0x18]
mov cl, byte [ebp - 8]
mov byte [ebx], cl
jbe 0x835425
mov ecx, dword [ebp - 8]
and ecx, 0xff
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x38]
mov bl, byte [ecx + esi*2 + 1]
mov cl, byte [ecx + esi*2]
sub cl, 6
add bl, 0x45
shl cl, 4
or bl, cl
mov ecx, dword [ebp - 0x30]
mov cl, byte [ebp + ecx - 0x14c]
add cl, dl
and ecx, 0xff
mov dl, byte [ebp + ecx - 0x14c]
mov ecx, dword [ebp - 4]
mov cl, byte [ecx]
add edx, ecx
mov cl, byte [edi]
add edx, ecx
xor ecx, ecx
and edx, 0xff
mov edi, dword [ebp - 0x30]
mov cl, byte [ebp + edx - 0x14c]
mov dl, byte [ebp + ecx - 0x14c]
xor bl, dl
mov dl, byte [eax]
add edx, edi
and edx, 0xff
xor bl, byte [ebp + edx - 0x14c]
mov byte [ebp + esi - 0x4d], bl
mov byte [ebp - 0x44], 0
mov eax, dword [0x8d6228]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x8069
push eax
call esi
mov eax, dword [0x8d6228]
lea ecx, [ebp - 0x4c]
push 0x30
lea edx, [ebp - 0x1a4]
push ecx
push edx
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [0x8d6228]
push 0
push 0
push 0x8044
push ecx
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret