Function at 0x8133da
Capabilities:
Contain obfuscated stackstrings
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x198
push ebx
push esi
push edi
push eax
push ebx
push ecx
push edx
push esi
push edi
mov eax, dword [0x8202c6]
mov dword [ebp - 0x30], eax
jo 0x813042
jno 0x813042
and dword [esi - 0x39], 0xab445
mov word [ebp - 0x4c], 0xa
mov dword [ebp - 0x24], 0
mov dword [ebp - 4], 0xb
jb 0x81305b
jae 0x81305b
add byte [ebx - 0x7dfd25c3], 0
add byte [edi + eax - 0x17], dh
ljmp 0xeb02
cmp dword [0x8202da], 0
je 0x81306b
jmp 0x813c53
or eax, dword [eax]
add bl, ch
add ch, bl
pop ecx
jmp 0x8130c6
jl 0x813072
jge 0x813072
shr cl, 1
mov dword [0x7e000001], eax
add edi, dword [edi + 1]
jmp 0x81321a
jle 0x81307c
jg 0x81307c
loopne 0x813066
jmp 0x81345a
fld dword [ebx]
add byte [eax], al
push ecx
xor ecx, ecx
jecxz 0x813087
je 0x8130e1
pop ecx
jmp 0x813f0f
push ecx
xor ecx, ecx
jecxz 0x813093
jno 0x8130ed
pop ecx
jmp 0x81321a
jmp 0x81309c
jmp 0x813c39
jbe 0x8130b0
ja 0x8130b0
imul ecx
add dword gs:[eax], eax
add byte [ecx + 3], bh
jmp 0x81321a
jns 0x8130ba
js 0x8130ba
mov al, 0xeb
mov cl, 0x7a
add edi, dword [ebx + 1]
jae 0x8130ab
jmp 0x81306d
dec ecx
push cs
add byte [eax], al
nop
jmp 0x8130ca
mov word [ebp - 0x3c], 0
jmp 0x8130d6
inc word [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
and eax, 0xffff
cmp eax, 6
jge 0x8131ff
jo 0x8130ec
jno 0x8130ec
ljmp 0xffff:0x25c4458b
mov eax, dword [ebp - 0x3c]
and eax, 0xffff
inc ebp
les esp, [0xffff]
mov dword [ebp - 0x178], eax
jmp 0x8131cc
jbe 0x813104
ja 0x813104
mov bl, 0x66
inc dword [ebp - 0x58]
inc word [ebp - 0x58]
jns 0x81310d
js 0x81310d
mov ch, cl
call 0x7a813113
jp 0x813117
jnp 0x813117
jmp case.default.0x8131db
jp 0x813117
jnp 0x813117
test dword [esi - 0x39], esp
inc ebp
mov edx, 0x37c0000
mov word [ebp - 0x46], 0
jl 0x813122
jge 0x813122
xchg cl, ch
rol dword [eax], cl
add byte [eax], al
jmp case.default.0x8131db
jmp 0x81312a
mov word [ebp - 0x4e], 0xffff
jo 0x813135
jno 0x813135
mov cl, ch
rol byte [eax], 0
add byte [edx + 3], dh
jb 0x81313f
jmp case.default.0x8131db
jb 0x81313f
jae 0x81313f
and dword [esi - 0x39], 0x45
int3
mov word [ebp - 0x34], 0
jmp 0x81314b
inc word [ebp - 0x34]
mov eax, dword [ebp - 0x34]
and eax, 0xffff
cmp eax, 3
jge 0x81319d
jne 0x81315d
je 0x81315d
and dword [esi - 0x39], 0x45
enter 0, 0xffffffffffffffeb
add al, 0x66
inc dword [ebp - 0x38]
mov word [ebp - 0x38], 0
jmp 0x813169
inc word [ebp - 0x38]
mov eax, dword [ebp - 0x38]
and eax, 0xffff
cmp eax, 3
jge 0x81319b
jbe 0x81317b
ja 0x81317b
test byte [ebx - 0xda37bb], cl
inc dword [eax]
add byte [ebx - 0x1e7e33b3], cl
invalid
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, dword [ebp - 0x34]
and ecx, 0xffff
shl ecx, 3
lea eax, [ecx + eax*2]
mov word [eax + ebp - 0x64], 0
jmp 0x813165
jmp 0x813147
jns 0x8131a2
js 0x8131a2
test ebx, ebp
push esi
jmp case.default.0x8131db
jb 0x8131a9
jae 0x8131a9
mov dl, 0x66
mov dword [ebp - 0x48], 0x3750000
mov word [ebp - 0x48], 0
jne 0x8131b4
je 0x8131b4
mov ebx, ebp
inc esp
jmp case.default.0x8131db
jle 0x8131bb
jg 0x8131bb
mov al, 0x66
mov dword [ebp - 0x5e], 0x31510000
leave
mov word [ebp - 0x5e], 0
push ecx
xor ecx, ecx
jecxz 0x8131c7
xchg dword [ecx - 0x15], ebx
xor bl, ch
cmp dword cs:[ebp - 0x178], 5
pop ecx
jmp case.default.0x8131db
cmp dword [ebp - 0x178], 5
ja case.default.0x8131db
mov eax, dword [ebp - 0x178]
jmp dword [eax*4 + 0x8131e2]
jmp 0x8130d2
jp 0x813204
jnp 0x813204
add ebx, ebp
adc al, 0x7c
add edi, dword [ebp + 1]
jmp 0x81321a
jl 0x81320b
jge 0x81320b
adc ecx, ebp
sub eax, dword [esi]
add byte [eax], al
jle 0x813215
jmp 0x81383b
jg 0x813215
jne 0x8131ff
jmp 0x813f0f
cmc
or al, 0
add byte [edx + 3], dh
jb 0x81321f
jae 0x81321f
ret 0xc766
mov word [ebp - 0x3c], 0
jmp 0x81322b
inc word [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
and eax, 0xffff
cmp eax, 3
jge 0x813321
jne 0x813241
je 0x813241
les ecx, [ebx - 0xda3bbb]
inc dword [eax]
add byte [ebx - 0x1e7e3bb3], cl
invalid
mov eax, dword [ebp - 0x3c]
and eax, 0xffff
mov ecx, dword [ebp - 0x3c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x3c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x3c]
and ecx, 0xffff
imul eax, ecx
add eax, 7
mov dword [ebp - 0x17c], eax
jmp 0x8132f7
jo 0x81327d
jno 0x81327d
mov ebp, ecx
stosd dword es:[edi], eax
add eax, dword [eax]
add byte [edx + 3], bh
jmp 0x81362d
jp 0x813287
jnp 0x813287
loopne 0x8132bb
xor eax, eax
mov ax, word [ebp - 0x46]
mov ecx, 5
cdq
idiv ecx
lea eax, [edx - 2]
cmp eax, 1
sbb ecx, ecx
shl byte [esi - 0x75], 0x45
mov edx, 0x5b9
add byte [ecx + 0x428df9f7], bl
inc byte [ebx - 0x36e4fe08]
inc ecx
xor eax, eax
mov ax, word [ebp - 0x46]
mov ebx, 3
cdq
idiv ebx
lea eax, [edx - 1]
cmp eax, 1
sbb eax, eax
inc eax
or ecx, eax
je 0x8132da
jl 0x8132be
jge 0x8132be
jmp 0x813325
mov ax, word [ebp - 0x48]
mov word [ebp - 0x4e], ax
jle 0x8132cb
jg 0x8132cb
fisub word [esi - 0x39]
inc ebp
mov dh, 1
add byte [ecx + 0x31], dl
leave
mov word [ebp - 0x4a], 1
push ecx
xor ecx, ecx
jecxz 0x8132d7
lds ebx, [ecx - 0x15]
push es
pop ecx
jmp 0x8132e0
mov word [ebp - 0x4a], 0
jmp 0x8132e3
jmp 0x81331c
jbe 0x8132ea
ja 0x8132ea
mov ebx, 0xba45ff66
inc word [ebp - 0x46]
jns 0x8132f3
js 0x8132f3
fucomi st(3)
daa
jmp 0x81331c
jmp 0x81331c
cmp dword [ebp - 0x17c], 7
je 0x8132e5
cmp dword [ebp - 0x17c], 8
je 0x813282
cmp dword [ebp - 0x17c], 0x17
je 0x813278
invalid
jmp 0x81331c
jmp 0x813227
jb 0x813326
jae 0x813326
jo 0x813310
jmp 0x81321a
out dx, eax
invalid
jne 0x813330
je 0x813330
sub cl, 0xca
invalid
jmp 0x8131ff
jns 0x813344
js 0x813344
invalid
mov eax, dword [ebp - 0x2c]
and eax, 0xffff
mov ecx, 7
cdq
idiv ecx
lea eax, [edx - 2]
cmp eax, 1
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x2c]
and eax, 0xffff
mov ebx, 0xb
cdq
idiv ebx
lea eax, [edx - 5]
cmp eax, 1
sbb eax, eax
neg eax
or ecx, eax
je 0x81339e
jp 0x813381
jnp 0x813381
or al, 0x66
mov eax, dword [ebp - 0x48]
mov ax, word [ebp - 0x48]
mov word [ebp - 0x4e], ax
jl 0x81338e
jge 0x81338e
mov edx, 0xb645c766
add dword [eax], eax
mov word [ebp - 0x4a], 1
jle 0x813399
jg 0x813399
invalid
jmp 0x81362d
push ecx
xor ecx, ecx
jecxz 0x8133a4
int 0x59
pop ecx
xor eax, eax
mov ax, word [ebp - 0x5e]
mov dword [ebp - 0x180], eax
jmp 0x813419
mov byte [0xfe808589], al
invalid
jmp 0x8133b6
jmp 0x813c53
jo 0x8133c0
jno 0x8133c0
js 0x8133aa
jmp 0x813d7f
mov edx, 0x72000009
add esi, dword [ebx + 1]
jb 0x8133ca
jae 0x8133ca
add dword [edx + 0x9b0e9], esp
mov byte [0x9b0e9], al
jmp 0x813d7f
add byte [ebp + 3], dh
jne 0x8133d4
je 0x8133d4
invalid
jmp 0x813d7f
jbe 0x8133de
ja 0x8133de
loopne 0x8133c8
jmp 0x813da9
invalid
jns 0x8133e8
js 0x8133e8
ret 0xce9
jmp 0x813df9
jp 0x8133f2
jnp 0x8133f2
mov dword [0xa90e9], eax
add byte [ebx + eax + 0x7d], bh
jl 0x8133fc
jge 0x8133fc
invalid
jmp 0x813e87
jl 0x8133fc
jge 0x8133fc
add ebp, ecx
or dword [ebx], ecx
add byte [eax], al
jmp 0x813f0a
jle 0x813406
jg 0x813406
and eax, 0xb04e9
add byte [ecx + 0x31], dl
push ecx
xor ecx, ecx
jmp 0x813f0f
push ecx
xor ecx, ecx
jecxz 0x813411
jge 0x81346b
pop ecx
jmp 0x813f0f
cmp dword [ebp - 0x180], 9
ja case.default.0x813428
mov eax, dword [ebp - 0x180]
jmp dword [eax*4 + 0x81342f]
jmp 0x81345a
jo 0x81345f
jno 0x81345f
mov eax, dword [0xfffdb6e9]
push dword [edx + 3]
jmp 0x81321a
jb 0x813469
jae 0x813469
mov cl, 0xe9
cmp eax, 0x75fffffc
add esi, dword [ecx + eax + 0x78]
jmp 0x813f0f
jmp 0x8130ab
cld
invalid
jle 0x813617
jg 0x813617
and cl, ch
invalid
jmp 0x81321a
jmp 0x81361f
jmp 0x813612
jmp 0x813630
mov word [ebp - 0x3c], 0
jmp 0x81363c
inc word [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
and eax, 0xffff
cmp eax, 8
jge 0x81383b
jo 0x813652
jno 0x813652
ror dword [ebx - 0xda3bbb], 1
inc dword [eax]
add byte [ebx - 0x1e7e3bb3], cl
invalid
mov eax, dword [ebp - 0x3c]
and eax, 0xffff
mov ecx, dword [ebp - 0x3c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x3c]
and ecx, 0xffff
add eax, ecx
inc eax
mov dword [ebp - 0x18c], eax
jmp 0x8137b5
jmp 0x813680
xor eax, eax
mov ax, word [ebp - 0x4a]
cdq
xor eax, edx
sub eax, edx
and eax, 1
xor eax, edx
sub eax, edx
mov dword [ebp - 0x190], eax
jmp 0x8136ae
jb 0x81369f
jae 0x81369f
jecxz 0x813689
jmp 0x81333f
wait
cld
invalid
jmp 0x8136a7
jmp 0x813855
cmp dword [ebp - 0x190], 0
je 0x81369a
cmp dword [ebp - 0x190], 1
je 0x8136a4
jmp 0x8136c2
jne 0x8136c7
je 0x8136c7
fldl2t
push 1
add byte [eax], al
jmp case.0x8137d2.8
jne 0x8136d1
je 0x8136d1
mov edi, 0x5af045c7
add dword [eax], eax
add bl, ch
add ebp, edx
mov dword [ebp - 0x10], 0x15a
jmp 0x8136db
mov dword [ebp - 0x18], 0x4e35
jbe 0x8136e7
ja 0x8136e7
sbb ebp, ecx
dec edx
add dword [eax], eax
add bl, ch
jmp 0x8136ef
mov ebp, 0xf87d83
jmp case.0x8137d2.8
jmp 0x8136ef
cmp dword [ebp - 8], 0
je 0x813704
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 8]
and eax, 0xffff
add dword [ebp - 0x14], eax
jp 0x813709
jnp 0x813709
imul ecx
sub byte [ecx], al
add byte [eax], al
jmp case.0x8137d2.8
jmp 0x813711
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0xc]
and eax, 0xffff
mov dword [ebp - 0x14], eax
jns 0x813725
js 0x813725
sub ebp, ecx
or al, 1
add byte [eax], al
jmp case.0x8137d2.8
jmp 0x81372d
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x14]
shl ecx, 0x10
and ecx, 0xffff0000
add eax, ecx
inc eax
mov dword [ebp - 0x1c], eax
jl 0x81374b
jge 0x81374b
cmp ebp, ecx
out 0, al
add byte [eax], al
jmp case.0x8137d2.8
jmp 0x813753
mov eax, dword [ebp - 0x30]
shr eax, 0x10
mov dword [ebp - 8], eax
jb 0x813761
jae 0x813761
aam 0x8b
inc ebp
shl byte [0xffff], 1
mov eax, dword [ebp - 0x30]
and eax, 0xffff
mov dword [ebp - 0xc], eax
jmp 0x81376f
jmp case.0x8137d2.8
push ecx
xor ecx, ecx
jecxz 0x81377a
mov ebx, 0xe4658159
invalid
pop ecx
and dword [ebp - 0x1c], 0x7fff
jmp 0x813785
mov eax, dword [ebp - 0x1c]
mov word [ebp - 0x2c], ax
jo 0x813791
jno 0x813791
mov ebp, ecx
mov al, byte [0xeb000000]
jmp 0x813799
mov ebp, 0x89e4458b
inc ebp
sar byte [esi + 3], 1
jmp case.0x8137d2.8
jmp 0x813799
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
jle 0x8137a4
jg 0x8137a4
mov esp, 0x10e46dc1
shr dword [ebp - 0x1c], 0x10
jmp 0x8137ab
jmp case.0x8137d2.8
dec dword [ebp - 0x18c]
cmp dword [ebp - 0x18c], 0x38
ja case.0x8137d2.8
mov eax, dword [ebp - 0x18c]
xor ecx, ecx
mov cl, byte [eax + 0x8137fd]
jmp dword [ecx*4 + 0x8137d9]
jmp 0x813638
jmp 0x81383e
jmp 0x81321a
jbe 0x813848
ja 0x813848
adc cl, ch
inc eax
clc
invalid
jmp 0x81308d
jns 0x81385a
js 0x81385a
fisub dword [esi - 0x39]
inc ebp
les eax, [eax]
add bl, ch
add al, 0x66
inc dword [ebp - 0x3c]
mov word [ebp - 0x3c], 0
jmp 0x813866
inc word [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
and eax, 0xffff
cmp eax, 7
jge 0x813c34
jmp 0x81387a
mov eax, dword [ebp - 0x3c]
and eax, 0xffff
mov ecx, dword [ebp - 0x3c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x3c]
and ecx, 0xffff
imul eax, ecx
inc eax
mov dword [ebp - 0x194], eax
jmp 0x813b0b
jbe 0x8138ab
ja 0x8138ab
fmul qword [ebx - 0xda43bb]
inc dword [eax]
add byte [ebp + 0x4d8b4004], cl
cwde
mov eax, dword [ebp - 0x44]
and eax, 0xffff
lea eax, [eax + eax*2]
mov ecx, dword [ebp - 0x68]
and ecx, 0xffff
add eax, ecx
mov word [ebp - 0x2c], ax
jmp 0x8138c8
mov ax, word [ebp - 0x2c]
mov word [ebp - 0x48], ax
jns 0x8138d5
js 0x8138d5
sub eax, 0x355e9
add bl, ch
jmp 0x8138dd
invalid
jmp case.0x813b2f.7
jmp 0x8138dd
mov eax, dword [ebp - 0x2c]
and eax, 0xffff
mov ecx, 3
cdq
idiv ecx
mov word [ebp - 0x68], dx
jle 0x8138f6
jg 0x8138f6
mov ecx, gs
xor al, 3
add byte [eax], al
jmp case.0x813b2f.7
jmp 0x8138fe
mov eax, dword [ebp - 0x44]
and eax, 0xffff
mov ecx, dword [ebp - 0x68]
and ecx, 0xffff
add ecx, ecx
lea eax, [ecx + eax*8]
inc word [eax + ebp - 0x64]
jne 0x81391e
je 0x81391e
or eax, 0xb8458b66
mov ax, word [ebp - 0x48]
mov word [ebp - 0x4e], ax
jmp 0x813929
jmp case.0x813b2f.7
jo 0x813933
jno 0x813933
mov esp, dword [esi - 0x39]
inc ebp
enter 0, 0xffffffffffffffeb
add al, 0x66
inc dword [ebp - 0x38]
mov word [ebp - 0x38], 0
jmp 0x81393f
inc word [ebp - 0x38]
mov eax, dword [ebp - 0x38]
and eax, 0xffff
cmp eax, 3
jge 0x81399e
jmp 0x81394f
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, dword [ebp - 0x44]
and ecx, 0xffff
shl ecx, 3
lea eax, [ecx + eax*2]
mov eax, dword [eax + ebp - 0x64]
and eax, 0xffff
mov ecx, dword [ebp - 0x44]
and ecx, 0xffff
mov edx, dword [ebp - 0x68]
and edx, 0xffff
add edx, edx
lea ecx, [edx + ecx*8]
mov ecx, dword [ecx + ebp - 0x64]
and ecx, 0xffff
cmp eax, ecx
jge 0x81399c
mov ax, word [ebp - 0x38]
mov word [ebp - 0x68], ax
jmp 0x81393b
jb 0x8139a3
jae 0x8139a3
call 0x83c190
add byte [edx + 3], bh
jp 0x8139ad
jmp case.0x813b2f.7
jp 0x8139ad
jnp 0x8139ad
in al, 0x8b
inc ebp
aam 0x25
invalid
mov eax, dword [ebp - 0x2c]
and eax, 0xffff
mov ecx, 9
cdq
idiv ecx
mov word [ebp - 0x2c], dx
jmp 0x8139c4
mov eax, dword [ebp - 0x2c]
and eax, 0xffff
mov ecx, 3
cdq
idiv ecx
mov word [ebp - 0x44], ax
jl 0x8139dd
jge 0x8139dd
lcall 0xeb00, 0x24de9
add ecx, ebp
jmp case.0x813b2f.7
jmp 0x8139e5
mov eax, dword [ebp - 0x2c]
and eax, 0xffff
mov ecx, 9
cdq
idiv ecx
mov dword [ebp - 0x198], edx
jmp 0x813a53
jp 0x813a02
jnp 0x813a02
invalid
jmp 0x813464
jmp 0x813a0a
jmp 0x813099
jl 0x813a14
jge 0x813a14
ljmp 0xeb00:0x228e9
jmp 0x813c41
jmp 0x813a1c
jmp 0x813206
jle 0x813a26
jg 0x813a26
out 0xe9, al
dec esp
idiv bh
call dword [ecx + 0x31]
push ecx
xor ecx, ecx
jmp 0x813077
push ecx
xor ecx, ecx
jecxz 0x813a31
in al, 0x59
pop ecx
jmp 0x8130b5
jmp 0x813a3a
jmp 0x81332b
jo 0x813a44
jno 0x813a44
loopne 0x813a2e
jmp 0x81361c
sar ebx, cl
invalid
jmp 0x813a4c
jmp 0x813843
cmp dword [ebp - 0x198], 8
ja case.default.0x813a62
mov eax, dword [ebp - 0x198]
jmp dword [eax*4 + 0x813a69]
jmp 0x813a90
mov word [ebp - 0x34], 0
jmp 0x813a9c
inc word [ebp - 0x34]
mov eax, dword [ebp - 0x34]
and eax, 0xffff
cmp eax, 3
jge 0x813afe
push ecx
xor ecx, ecx
jecxz 0x813aaf
mov esp, 0xbc458b59
pop ecx
mov eax, dword [ebp - 0x44]
and eax, 0xffff
mov ecx, dword [ebp - 0x68]
and ecx, 0xffff
add ecx, ecx
lea eax, [ecx + eax*8]
mov eax, dword [eax + ebp - 0x64]
and eax, 0xffff
mov ecx, dword [ebp - 0x34]
and ecx, 0xffff
mov edx, dword [ebp - 0x68]
and edx, 0xffff
add edx, edx
lea ecx, [edx + ecx*8]
mov ecx, dword [ecx + ebp - 0x64]
and ecx, 0xffff
cmp eax, ecx
jle 0x813afc
mov ax, word [ebp - 0x34]
mov word [ebp - 0x44], ax
jmp 0x813a98
jmp 0x813b01
jmp case.0x813b2f.7
dec dword [ebp - 0x194]
cmp dword [ebp - 0x194], 0xd8
ja case.0x813b2f.7
mov eax, dword [ebp - 0x194]
xor ecx, ecx
mov cl, byte [eax + 0x813b56]
jmp dword [ecx*4 + 0x813b36]
jmp 0x813862
jb 0x813c39
jae 0x813c39
test eax, 0xe92101eb
fprem1
invalid
jmp 0x813c3c
jmp 0x81321a
jne 0x813c46
je 0x813c46
xor ecx, ebp
salc
idiv bh
invalid
jmp 0x813321
jne 0x813c58
je 0x813c58
mov al, 0x8b
pop ebp
add al, 0x8b
ret
mov ebx, dword [ebp + 4]
mov eax, ebx
and eax, 0xffff
mov ebx, dword [ebx]
sub ebx, eax
mov eax, dword [ebx]
mov dword [ebp - 0x20], eax
jbe 0x813c70
ja 0x813c70
mov dl, 0xa1
mov esp, 0x39008206
inc ebp
loopne 0x813cee
mov eax, dword [0x8206bc]
cmp dword [ebp - 0x20], eax
jne 0x813c7f
add eax, 0x15ae9
add byte [ecx + 0x8210ac], ah
jmp 0x813dd9
mov eax, dword [0x8210ac]
cmp dword [ebp - 0x20], eax
jne 0x813c8e
add eax, 0x14be9
add byte [ecx + 3], bh
jmp 0x813dd9
jns 0x813c93
js 0x813c93
mov ah, 0xa1
mov ah, 6
add byte [eax], 0x39
inc ebp
loopne 0x813d11
mov eax, dword [0x8206b4]
cmp dword [ebp - 0x20], eax
jne 0x813ca7
or ch, al
jns 0x813c88
call 0x81251b
jmp 0x813d7f
invalid
mov eax, dword [0x8206b8]
cmp dword [ebp - 0x20], eax
jne 0x813cbb
call fcn.008175cc
jmp 0x813d7f
mov eax, dword [0x820688]
cmp dword [ebp - 0x20], eax
jne 0x813ccf
call section..gtide
jmp 0x813d7f
mov eax, dword [0x82068c]
cmp dword [ebp - 0x20], eax
jne 0x813ce3
call fcn.0081277c
jmp 0x813d7f
mov eax, dword [0x820690]
cmp dword [ebp - 0x20], eax
jne 0x813cf7
call fcn.00812d41
jmp 0x813d7f
dec edi
invalid
mov eax, dword [0x820694]
cmp dword [ebp - 0x20], eax
jne 0x813d08
call fcn.00812b1f
jmp 0x813d7f
mov eax, dword [0x820698]
cmp dword [ebp - 0x20], eax
jne 0x813d19
pop es
call fcn.00812879
jmp 0x813d7f
mov eax, dword [0x82069c]
cmp dword [ebp - 0x20], eax
jne 0x813d2a
call fcn.00812211
jmp 0x813d7f
mov eax, dword [ebp - 0x20]
cmp dword [0x8206a0], eax
jne 0x813d3c
call fcn.00812968
jmp 0x813d7f
mov eax, dword [ebp - 0x20]
cmp dword [0x8206a4], eax
jne 0x813d4e
call fcn.00812a48
jmp 0x813d7f
mov eax, dword [0x8206a8]
cmp dword [ebp - 0x20], eax
jne 0x813d5f
call fcn.00812c35
jmp 0x813d7f
mov eax, dword [0x8206ac]
cmp dword [ebp - 0x20], eax
jne 0x813d70
call fcn.00812f7d
jmp 0x813d7f
mov eax, dword [0x8206b0]
cmp dword [ebp - 0x20], eax
jne 0x813d7f
call fcn.008125be
jp 0x813d84
jnp 0x813d84
mov dh, 0xff
adc eax, sym.imp.KERNEL32.dll_GetTickCount
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x28], eax
cmp dword [0x82102c], 0
je 0x813da1
mov eax, dword [ebp - 0x28]
cmp dword [0x82102c], eax
jbe 0x813da9
mov eax, dword [ebp - 0x28]
mov dword [0x82102c], eax
jl 0x813dae
jge 0x813dae
mov eax, 0x2aa3d83
add byte [eax], 0
cmp dword [0x8202aa], 0
je 0x813dd9
mov eax, dword [ebp - 0x28]
sub eax, dword [0x82102c]
mov ecx, 0x3e8
sub edx, edx
div ecx
mov ecx, dword [0x82002e]
xor ecx, dword [0x820032]
cmp eax, ecx
jae 0x813dec
mov eax, dword [ebp - 0x20]
mov dword [ebp + 4], eax
pop edi
pop esi
pop edx
pop ecx
pop ebx
pop eax
leave
ret
mov eax, dword [ebp - 0x28]
mov dword [0x82102c], eax
call fcn.00816033
jle 0x813dfe
jg 0x813dfe
mov edx, 0x8202c6a0
add byte [eax + 0x45c79445], cl
mov word [eax], es
add byte [eax], al
add bl, ch
add edi, edi
inc ebp
mov word [ecx + 0x1008c7d], es
add byte [eax], al
mov al, byte [0x8202c6]
mov byte [ebp - 0x6c], al
mov dword [ebp - 0x74], 0
jmp 0x813e12
inc dword [ebp - 0x74]
cmp dword [ebp - 0x74], 0x100
jge 0x813e30
mov eax, dword [ebp - 0x74]
mov al, byte [eax + 0x8203de]
mov ecx, dword [ebp - 0x74]
mov byte [ecx + ebp - 0x174], al
jmp 0x813e0f
mov dword [ebp - 0x74], 0
jmp 0x813e3c
inc dword [ebp - 0x74]
cmp dword [ebp - 0x74], 0x100
jge 0x813e87
mov eax, dword [ebp - 0x74]
xor ecx, ecx
mov cl, byte [eax + 0x8202de]
mov al, byte [ecx + ebp - 0x174]
mov byte [ebp - 0x70], al
mov eax, dword [ebp - 0x74]
xor ecx, ecx
mov cl, byte [eax + 0x8202de]
xor cl, byte [ebp - 0x6c]
mov eax, dword [ebp - 0x74]
mov byte [eax + 0x8202de], cl
mov al, byte [ebp - 0x70]
mov ecx, dword [ebp - 0x74]
xor edx, edx
mov dl, byte [ecx + 0x8202de]
mov byte [edx + 0x8203de], al
jmp 0x813e39
push ecx
xor ecx, ecx
jecxz 0x813e8d
mov edi, 0x7c3d8359
add byte [edx + 0x9740000], al
pop ecx
cmp dword [0x82007c], 0
je 0x813ea0
cmp dword [0x820080], 0
je 0x813f0a
call fcn.0081617e
test eax, eax
je 0x813f0a
call fcn.0081617e
test eax, eax
je 0x813f0a
lea eax, [ebp - 0x24]
push eax
push 0
lea eax, [ebp - 4]
push eax
push 0x812fe9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x40], eax
jmp 0x813ed1
cmp dword [ebp - 0x40], 0xffffffff
jne 0x813edf
push 0xf
call dword [sym.imp.KERNEL32.dll_ExitProcess]
jmp 0x813ee2
push 0xea60
mov eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0xf
mov eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateThread]
jmp 0x813f00
push 0xf
call dword [sym.imp.KERNEL32.dll_ExitProcess]
jmp 0x813dd9
jmp 0x813f12
pop edi
pop esi
pop edx
pop ecx
pop ebx
pop eax
leave
add esp, 4
ret