Function at 0x1013ae2e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
add edx, 0x441
pop edx
push ebx
add ebx, 0x46e3
pop ebx
mov eax, dword [ebp - 0x494]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x446], cl
mov edx, dword [ebp - 0xbfc]
sub edx, dword [ebp - 0x494]
mov dword [ebp - 0x19a8], edx
mov dword [ebp - 0xee8], 0
push esi
sub esi, 0x870c
or esi, 0x129e5
or esi, 0x1060e
or esi, 0x8c3c
pop esi
push edi
push edx
add esp, 4
or edi, 0x15be5
and edi, 0x59e6
or edi, 0xceb
pop edi
mov byte [ebp - 0xb5c], 0x56
mov byte [ebp - 0xb5b], 0x69
mov byte [ebp - 0xb5a], 0x72
mov byte [ebp - 0xb59], 0x74
mov byte [ebp - 0xb58], 0x75
mov byte [ebp - 0xb57], 0x61
mov byte [ebp - 0xb56], 0x6c
mov byte [ebp - 0xb55], 0x50
mov byte [ebp - 0xb54], 0x72
mov byte [ebp - 0xb53], 0x6f
mov byte [ebp - 0xb52], 0x74
mov byte [ebp - 0xb51], 0x65
mov byte [ebp - 0xb50], 0x63
mov byte [ebp - 0xb4f], 0x74
mov byte [ebp - 0xb4e], 0
push edx
push ecx
add esp, 4
and edx, 0x6421
call 0x1013af20
add byte [esp + ecx*2 + 0x37], cl
dec ebp
dec edx
dec eax
inc edi
aas
add esp, 4
pop edx
push ebx
or ebx, 0xb6e3
sub ebx, 0x15267
jmp 0x1013af37
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1f48], eax
mov ecx, dword [ebp - 0x1f48]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1f4c], edx
mov eax, dword [ebp - 0x1f4c]
mov dword [ebp - 0x1928], eax
push ecx
xor ecx, 0x9f36
and ecx, 0xb6b4
add ecx, 0xf612
pop ecx
push ebx
push ecx
add esp, 4
xor ebx, 0x15011
and ebx, 0x12089
jmp 0x1013af8a
add ebx, 0x1109c
pop ebx
cmp dword [ebp - 0x1928], 0
jne 0x1013afa9
mov dword [ebp - 0x394], 0
jmp 0x1013b250
mov ecx, dword [ebp - 0x1928]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xec4], eax
push eax
push edx
add esp, 4
xor eax, 0xdb5c
or eax, 0x6697
and eax, 0xf402
pop eax
push ecx
xor ecx, 0x1618a
sub ecx, 0xb994
and ecx, 0x9b31
or ecx, 0x1273e
pop ecx
cmp dword [ebp - 0xec4], 0
jne 0x1013b005
mov dword [ebp - 0x394], 0
jmp 0x1013b250
mov ecx, dword [ebp - 0xec4]
mov dword [ebp - 0x5d4], ecx
push edi
xor edi, 0x15598
add edi, 0x4007
add edi, 0x14c1e
pop edi
push ecx
push esi
add esp, 4
xor ecx, 0x6566
sub ecx, 0x13b8b
sub ecx, 0xd58e
and ecx, 0x15e04
pop ecx
lea edx, [ebp - 0x1a68]
mov dword [ebp - 0xec0], edx
mov eax, dword [ebp - 0x5d4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xebc], ecx
xor edx, edx
mov word [ebp - 0x270], dx
xor eax, eax
mov word [ebp - 0x40], ax
push edx
push ebx
add esp, 4
xor edx, 0xde19
pop edx
push edx
add edx, 0x17474
pop edx
push edi
push edx
add esp, 4
add edi, 0xb8c0
call 0x1013b09b
add byte [edi], dh
dec ecx
inc esi
dec edx
inc ecx
push eax
xor bh, byte [edi]
inc edx
add esp, 4
pop edi
mov ecx, dword [ebp - 0xebc]
mov dx, word [ecx]
mov word [ebp - 0x12ba], dx
mov eax, dword [ebp - 0xebc]
add eax, 2
mov dword [ebp - 0xebc], eax
mov cx, word [ebp - 0x12ba]
mov word [ebp - 0x270], cx
mov edx, dword [ebp - 0xec0]
mov ax, word [edx]
mov word [ebp - 0x12bc], ax
mov ecx, dword [ebp - 0xec0]
add ecx, 2
mov dword [ebp - 0xec0], ecx
mov dx, word [ebp - 0x12bc]
mov word [ebp - 0x40], dx
push esi
sub esi, 0x8e2d
or esi, 0xc2ea
pop esi
push edx
push ebx
add esp, 4
sub edx, 0xd0a3
or edx, 0x4a30
call 0x1013b124
add byte [esp + ecx*2 + 0x3b], cl
inc ebx
dec edi
cmp al, 0x39
inc esp
add esp, 4
pop edx
movzx eax, word [ebp - 0x40]
test eax, eax
jne 0x1013b145
movzx ecx, word [ebp - 0x270]
movzx edx, word [ebp - 0x40]
sub ecx, edx
mov dword [ebp - 0x1930], ecx
jmp 0x1013b19f
movzx eax, word [ebp - 0x270]
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x1013b06d
movzx edx, word [ebp - 0x270]
xor edx, 0x20
movzx eax, word [ebp - 0x40]
cmp edx, eax
je 0x1013b06d
movzx ecx, word [ebp - 0x270]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
jge 0x1013b189
mov dword [ebp - 0x192c], 0xffffffff
jmp 0x1013b193
mov dword [ebp - 0x192c], 1
mov eax, dword [ebp - 0x192c]
mov dword [ebp - 0x1930], eax
cmp dword [ebp - 0x1930], 0
jne 0x1013b1e8
push edx
add edx, 0xff20
xor edx, 0x9753
jmp 0x1013b1bb
sub edx, 0x1680c
pop edx
push ecx
push edi
add esp, 4
and ecx, 0x127bd
add ecx, 0xb237
and ecx, 0xc601
pop ecx
mov ecx, dword [ebp - 0x5d4]
mov dword [ebp - 0x394], ecx
jmp 0x1013b250
push esi
push esi
add esp, 4
sub esi, 0xfd87
xor esi, 0xb2b8
jmp 0x1013b1ff
xor esi, 0x2f4d
pop esi
push eax
add eax, 0x362
sub eax, 0x107e
add eax, 0x8af3
pop eax
mov edx, dword [ebp - 0x5d4]
mov eax, dword [edx]
mov dword [ebp - 0x5d4], eax
mov ecx, dword [ebp - 0x5d4]
cmp ecx, dword [ebp - 0xec4]
je 0x1013b246
mov edx, dword [ebp - 0x5d4]
cmp dword [edx + 0x30], 0
jne 0x1013b011
mov dword [ebp - 0x394], 0
push ebx
xor ebx, 0xcb1f
pop ebx
push esi
call 0x1013b268
add byte [esi], bh
aaa
cmp eax, 0x423a3e4a
xor esi, dword [0x8104c483]
into
enter 0x84, 0
call 0x1013b27e
add byte [ebx + 0x37], al
xor eax, 0x4e364c43
add esp, 4
pop esi
cmp dword [ebp - 0x394], 0
jne 0x1013bb87
mov eax, 0x6b
mov word [ebp - 0x1ae4], ax
mov ecx, 0x65
mov word [ebp - 0x1ae2], cx
mov edx, 0x72
mov word [ebp - 0x1ae0], dx
mov eax, 0x6e
mov word [ebp - 0x1ade], ax
mov ecx, 0x65
mov word [ebp - 0x1adc], cx
mov edx, 0x6c
mov word [ebp - 0x1ada], dx
mov eax, 0x33
mov word [ebp - 0x1ad8], ax
mov ecx, 0x32
mov word [ebp - 0x1ad6], cx
mov edx, 0x2e
mov word [ebp - 0x1ad4], dx
mov eax, 0x64
mov word [ebp - 0x1ad2], ax
mov ecx, 0x6c
mov word [ebp - 0x1ad0], cx
mov edx, 0x6c
mov word [ebp - 0x1ace], dx
xor eax, eax
mov word [ebp - 0x1acc], ax
push ebx
push edx
add esp, 4
sub ebx, 0xc706
add ebx, 0xdebc
and ebx, 0xd0ea
pop ebx
push eax
sub eax, 0xf368
xor eax, 0xcb27
add eax, 0xa6a0
and eax, 0xa4c4
pop eax
mov byte [ebp - 0xafc], 0x4c
mov byte [ebp - 0xafb], 0x6f
mov byte [ebp - 0xafa], 0x61
mov byte [ebp - 0xaf9], 0x64
mov byte [ebp - 0xaf8], 0x4c
mov byte [ebp - 0xaf7], 0x69
mov byte [ebp - 0xaf6], 0x62
mov byte [ebp - 0xaf5], 0x72
mov byte [ebp - 0xaf4], 0x61
mov byte [ebp - 0xaf3], 0x72
mov byte [ebp - 0xaf2], 0x79
mov byte [ebp - 0xaf1], 0x57
mov byte [ebp - 0xaf0], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1f50], ecx
mov edx, dword [ebp - 0x1f50]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1f54], eax
mov ecx, dword [ebp - 0x1f54]
mov dword [ebp - 0x1934], ecx
push eax
sub eax, 0x7cc3
sub eax, 0xa8ef
xor eax, 0x2345
and eax, 0x120c3
pop eax
push eax
push edx
add esp, 4
xor eax, 0xfc1e
add eax, 0xe3d9
add eax, 0x5293
pop eax
cmp dword [ebp - 0x1934], 0
jne 0x1013b427
mov dword [ebp - 0x894], 0
jmp 0x1013b6ce
mov edx, dword [ebp - 0x1934]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xed0], ecx
push edi
push ecx
add esp, 4
xor edi, 0x5c5d
add edi, 0x9d55
jmp 0x1013b452
sub edi, 0xd72f
pop edi
push eax
push esi
add esp, 4
sub eax, 0x1674c
xor eax, 0xa6e5
pop eax
cmp dword [ebp - 0xed0], 0
jne 0x1013b483
mov dword [ebp - 0x894], 0
jmp 0x1013b6ce
mov edx, dword [ebp - 0xed0]
mov dword [ebp - 0x5d8], edx
push edi
or edi, 0xc441
pop edi
push eax
push eax
add esp, 4
or eax, 0xe3a2
xor eax, 0xf661
sub eax, 0xc188
pop eax
push edx
push ecx
add esp, 4
xor edx, 0xc98b
and edx, 0x11c9f
pop edx
lea eax, [ebp - 0x1ae4]
mov dword [ebp - 0xecc], eax
mov ecx, dword [ebp - 0x5d8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xec8], edx
xor eax, eax
mov word [ebp - 0x274], ax
xor ecx, ecx
mov word [ebp - 0x44], cx
push ecx
push ebx
add esp, 4
xor ecx, 0x13326
add ecx, 0x932f
and ecx, 0x2fb4
pop ecx
push edx
or edx, 0x12568
xor edx, 0x12978
add edx, 0x5e6f
and edx, 0x9ebb
pop edx
mov edx, dword [ebp - 0xec8]
mov ax, word [edx]
mov word [ebp - 0x12be], ax
mov ecx, dword [ebp - 0xec8]
add ecx, 2
mov dword [ebp - 0xec8], ecx
mov dx, word [ebp - 0x12be]
mov word [ebp - 0x274], dx
mov eax, dword [ebp - 0xecc]
mov cx, word [eax]
mov word [ebp - 0x12c0], cx
mov edx, dword [ebp - 0xecc]
add edx, 2
mov dword [ebp - 0xecc], edx
mov ax, word [ebp - 0x12c0]
mov word [ebp - 0x44], ax
push eax
sub eax, 0x11202
call 0x1013b588
add byte [esi], bh
inc edi
inc edi
inc esp
cmp al, 0x37
cmp eax, 0x8104c483
enter 0xffffffffffffaa01, 0
add byte [eax + 0x56], bl
xor esi, 0xb53e
jmp 0x1013b59f
sub esi, 0x15b8b
pop esi
movzx ecx, word [ebp - 0x44]
test ecx, ecx
jne 0x1013b5c3
movzx edx, word [ebp - 0x274]
movzx eax, word [ebp - 0x44]
sub edx, eax
mov dword [ebp - 0x193c], edx
jmp 0x1013b61d
movzx ecx, word [ebp - 0x274]
movzx edx, word [ebp - 0x44]
cmp ecx, edx
je 0x1013b4eb
movzx eax, word [ebp - 0x274]
xor eax, 0x20
movzx ecx, word [ebp - 0x44]
cmp eax, ecx
je 0x1013b4eb
movzx edx, word [ebp - 0x274]
movzx eax, word [ebp - 0x44]
cmp edx, eax
jge 0x1013b607
mov dword [ebp - 0x1938], 0xffffffff
jmp 0x1013b611
mov dword [ebp - 0x1938], 1
mov ecx, dword [ebp - 0x1938]
mov dword [ebp - 0x193c], ecx
cmp dword [ebp - 0x193c], 0
jne 0x1013b666
push edi
or edi, 0x14cc4
add edi, 0xb050
sub edi, 0x641
call 0x1013b649
add byte [ecx + 0x41], al
push eax
dec ebp
inc edx
dec esi
aaa
cmp dword [0x4c48341], esi
pop edi
push ecx
push esi
add esp, 4
jmp 0x1013b657
pop ecx
mov edx, dword [ebp - 0x5d8]
mov dword [ebp - 0x894], edx
jmp 0x1013b6ce
push eax
add eax, 0x2b1f
add eax, 0x99d1
pop eax
push ebx
jmp 0x1013b67d
xor ebx, 0x11654
pop ebx
push ecx
jmp 0x1013b68b
or ecx, 0x1d14
sub ecx, 0xfefa
pop ecx
mov eax, dword [ebp - 0x5d8]
mov ecx, dword [eax]
mov dword [ebp - 0x5d8], ecx
mov edx, dword [ebp - 0x5d8]
cmp edx, dword [ebp - 0xed0]
je 0x1013b6c4
mov eax, dword [ebp - 0x5d8]
cmp dword [eax + 0x30], 0
jne 0x1013b48f
mov dword [ebp - 0x894], 0
push edi
and edi, 0xbba3
sub edi, 0x1c2e
and edi, 0x160b6
xor edi, 0x13da
pop edi
push ebx
push esi
add esp, 4
or ebx, 0x8756
add ebx, 0x2e8
xor ebx, 0x7c91
pop ebx
cmp dword [ebp - 0x894], 0
jne 0x1013b74a
push eax
push edx
add esp, 4
sub eax, 0x59c6
jmp 0x1013b71c
call 0x1013b729
add byte [edi], bh
aas
dec edi
aas
inc ebp
cmp byte [ecx - 0x7d], al
les eax, [eax + ebx*2]
push ecx
and ecx, 0x7d8c
and ecx, 0x18415
pop ecx
mov dword [ebp - 0xbf8], 0
jmp 0x1013c272
push ebx
push ecx
add esp, 4
or ebx, 0x3b3b
or ebx, 0xde32
xor ebx, 0xa30b
pop ebx
push eax
add eax, 0x1465f
sub eax, 0x17e5d
xor eax, 0x13759
and eax, 0xec84
pop eax
mov ecx, dword [ebp - 0x894]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3d0], edx
mov dword [ebp - 0x8a4], 0
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x1980], eax
cmp dword [ebp - 0x1980], 0
jne 0x1013b7bb
mov ecx, dword [ebp - 0x8a4]
mov dword [ebp - 0x490], ecx
jmp 0x1013baac
mov edx, dword [ebp - 0x1980]
mov eax, dword [ebp - 0x3d0]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1984], eax
jne 0x1013b7e3
mov ecx, dword [ebp - 0x8a4]
mov dword [ebp - 0x490], ecx
jmp 0x1013baac
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1984]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1988], edx
cmp dword [ebp - 0x1988], 0
jne 0x1013b815
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x490], eax
jmp 0x1013baac
mov ecx, dword [ebp - 0x3d0]
add ecx, dword [ebp - 0x1988]
mov dword [ebp - 0x898], ecx
jne 0x1013b83a
mov edx, dword [ebp - 0x8a4]
mov dword [ebp - 0x490], edx
jmp 0x1013baac
mov eax, dword [ebp - 0x898]
mov ecx, dword [ebp - 0x3d0]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1f58], ecx
mov edx, dword [ebp - 0x898]
mov eax, dword [ebp - 0x3d0]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x2364], eax
mov ecx, dword [ebp - 0x898]
mov edx, dword [ebp - 0x3d0]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1f5c], edx
mov dword [ebp - 0x89c], 0
jmp 0x1013b894
mov eax, dword [ebp - 0x89c]
add eax, 1
mov dword [ebp - 0x89c], eax
mov ecx, dword [ebp - 0x898]
mov edx, dword [ebp - 0x89c]
cmp edx, dword [ecx + 0x18]
jae 0x1013baa0
mov eax, dword [ebp - 0x89c]
mov ecx, dword [ebp - 0x1f58]
mov edx, dword [ebp - 0x3d0]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x8a0], edx
mov eax, dword [ebp - 0x89c]
mov ecx, dword [ebp - 0x2364]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1f5c]
mov ecx, dword [ebp - 0x3d0]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1f60], ecx
mov dword [ebp - 0x1e0], 0
jmp 0x1013b904
mov edx, dword [ebp - 0x1e0]
add edx, 1
mov dword [ebp - 0x1e0], edx
mov eax, dword [ebp - 0x8a0]
add eax, dword [ebp - 0x1e0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x1013b9b6
mov edx, dword [ebp - 0x1e0]
movsx eax, byte [ebp + edx - 0xafc]
test eax, eax
je 0x1013b9b6
push eax
or eax, 0x14a1e
xor eax, 0x11bb0
pop eax
push eax
push esi
add esp, 4
and eax, 0x18541
add eax, 0x152d6
pop eax
push ebx
call 0x1013b95f
add byte [ebx + 0x44], cl
inc esp
cmp ecx, dword [edx + 0x4f]
dec eax
add esp, 4
pop ebx
mov ecx, dword [ebp - 0x8a0]
add ecx, dword [ebp - 0x1e0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1e0]
movsx ecx, byte [ebp + eax - 0xafc]
cmp edx, ecx
je 0x1013b9a8
mov edx, dword [ebp - 0x8a0]
add edx, dword [ebp - 0x1e0]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1e0]
movsx edx, byte [ebp + ecx - 0xafc]
cmp eax, edx
jne 0x1013b9af
jmp 0x1013b8f5
jmp 0x1013b9b6
push edx
push ecx
add esp, 4
call 0x1013b9c7
add byte [ebx + 0x36], al
inc ebp
dec edx
inc edx
add esp, 4
sub edx, 0x182e2
add edx, 0x164c8
jmp 0x1013b9db
pop edx
push ebx
push esi
add esp, 4
jmp 0x1013b9e7
pop ebx
mov eax, dword [ebp - 0x8a0]
add eax, dword [ebp - 0x1e0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1e0]
movsx eax, byte [ebp + edx - 0xafc]
cmp ecx, eax
jne 0x1013ba15
mov dword [ebp - 0xed4], 0
jmp 0x1013ba84
push edi
sub edi, 0x1386d
xor edi, 0x1525d
and edi, 0x10c8b
add edi, 0xfbf5
pop edi
push eax
push ebx
add esp, 4
sub eax, 0x15e73
pop eax
push edi
push ebx
add esp, 4
and edi, 0xca38
pop edi
mov ecx, dword [ebp - 0x8a0]
add ecx, dword [ebp - 0x1e0]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1e0]
movsx ecx, byte [ebp + eax - 0xafc]
or ecx, 0x20
cmp edx, ecx
jge 0x1013ba7a
mov dword [ebp - 0xed4], 0xffffffff
jmp 0x1013ba84
mov dword [ebp - 0xed4], 1
cmp dword [ebp - 0xed4], 0
jne 0x1013ba9b
mov edx, dword [ebp - 0x1f60]
mov dword [ebp - 0x490], edx
jmp 0x1013baac
jmp 0x1013b885
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x490], eax
cmp dword [ebp - 0x490], 0
je 0x1013bb87
push edx
push ebx
add esp, 4
xor edx, 0x181f6
and edx, 0x105e2
or edx, 0x1575f
pop edx
push esi
xor esi, 0x15ddb
add esi, 0x258f
xor esi, 0x3e47
add esi, 0xef28
pop esi
mov ecx, dword [ebp - 0x490]
mov dword [ebp - 0x1f64], ecx
push eax
push edx
add esp, 4
call 0x1013bb0a
add byte [eax + 0x49], al
cmp byte [ecx + 0x4b], cl
cmp dword [ecx], edi
inc ebx
add esp, 4
call 0x1013bb1d
add byte [ecx + 0x4c], cl
xor al, 0x3d
dec ebx
inc ebp
cmp dword [eax + 0x41], eax
aas
add esp, 4
jmp 0x1013bb28
pop eax
mov edx, dword [ebp - 0x1f64]
mov dword [ebp - 0x1f68], edx
lea eax, [ebp - 0x1a68]
push eax
call dword [ebp - 0x1f68]
test eax, eax
jne 0x1013bb87
push eax
push edx
add esp, 4
jmp 0x1013bb53
call 0x1013bb63
add byte [ebx], dh
dec ebp
inc ebx
cmp dword [edi], edi
xor eax, 0x363e3938
add esp, 4
or eax, 0x11015
pop eax
push eax
jmp 0x1013bb77
pop eax
mov dword [ebp - 0xbf8], 0
jmp 0x1013c272
push edi
and edi, 0x6f57
sub edi, 0x10ff8
pop edi
push eax
push edi
add esp, 4
add eax, 0x347e
and eax, 0xbdf5
or eax, 0x11573
pop eax
push esi
push ebx
add esp, 4
sub esi, 0xf443
pop esi
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1f6c], ecx
mov edx, dword [ebp - 0x1f6c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1f70], eax
mov ecx, dword [ebp - 0x1f70]
mov dword [ebp - 0x1990], ecx
push ebx
push edi
add esp, 4
xor ebx, 0xa2ce
xor ebx, 0x109b2
pop ebx
push eax
push edx
add esp, 4
or eax, 0xfc95
call 0x1013bc0a
add byte [ebx + 0x47], cl
cmp al, 0x38
cmp eax, 0xeb04c483
add esi, dword [edx]
dec esi
dec esp
pop eax
cmp dword [ebp - 0x1990], 0
jne 0x1013bc2b
mov dword [ebp - 0x394], 0
jmp 0x1013bed2
mov edx, dword [ebp - 0x1990]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xee0], ecx
push ebx
push ecx
add esp, 4
jmp 0x1013bc4b
add ebx, 0x177ba
pop ebx
push ecx
push eax
add esp, 4
xor ecx, 0x33bb
jmp 0x1013bc62
add ecx, 0x16004
sub ecx, 0x28d8
pop ecx
cmp dword [ebp - 0xee0], 0
jne 0x1013bc87
mov dword [ebp - 0x394], 0
jmp 0x1013bed2
mov edx, dword [ebp - 0xee0]
mov dword [ebp - 0x5dc], edx
push esi
or esi, 0x5131
pop esi
push ebx
push ebx
add esp, 4
or ebx, 0xe731
pop ebx
push esi
push eax
add esp, 4
add esi, 0x93d3
xor esi, 0x155dc
sub esi, 0x47ab
xor esi, 0x849
pop esi
lea eax, [ebp - 0x1a68]
mov dword [ebp - 0xedc], eax
mov ecx, dword [ebp - 0x5dc]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xed8], edx
xor eax, eax
mov word [ebp - 0x278], ax
xor ecx, ecx
mov word [ebp - 0x48], cx
push eax
push ebx
add esp, 4
call 0x1013bd00
add byte [ebx + 0x45], al
cmp byte [edi], bh
aas
xor al, byte [ebx + 0x4eb04c4]
dec esp
inc ebx
dec eax
cmp dword [eax + 0x52], ebx
push eax
add esp, 4
jmp 0x1013bd14
xor edx, 0x93ac
add edx, 0x6961
pop edx
mov edx, dword [ebp - 0xed8]
mov ax, word [edx]
mov word [ebp - 0x12c2], ax
mov ecx, dword [ebp - 0xed8]
add ecx, 2
mov dword [ebp - 0xed8], ecx
mov dx, word [ebp - 0x12c2]
mov word [ebp - 0x278], dx
mov eax, dword [ebp - 0xedc]
mov cx, word [eax]
mov word [ebp - 0x12c4], cx
mov edx, dword [ebp - 0xedc]
add edx, 2
mov dword [ebp - 0xedc], edx
mov ax, word [ebp - 0x12c4]
mov word [ebp - 0x48], ax
push ebx
or ebx, 0x7b2d
sub ebx, 0x892d
call 0x1013bd92
add byte [edx], bh
aas
inc edi
cmp byte [eax + 0x4d], al
xor al, byte [ebx + 0x525b04c4]
xor edx, 0x92e4
sub edx, 0x138d5
add edx, 0x2761
pop edx
movzx ecx, word [ebp - 0x48]
test ecx, ecx
jne 0x1013bdc7
movzx edx, word [ebp - 0x278]
movzx eax, word [ebp - 0x48]
sub edx, eax
mov dword [ebp - 0x1998], edx
jmp 0x1013be21
movzx ecx, word [ebp - 0x278]
movzx edx, word [ebp - 0x48]
cmp ecx, edx
je 0x1013bcef
movzx eax, word [ebp - 0x278]
xor eax, 0x20
movzx ecx, word [ebp - 0x48]
cmp eax, ecx
je 0x1013bcef
movzx edx, word [ebp - 0x278]
movzx eax, word [ebp - 0x48]
cmp edx, eax
jge 0x1013be0b
mov dword [ebp - 0x1994], 0xffffffff
jmp 0x1013be15
mov dword [ebp - 0x1994], 1
mov ecx, dword [ebp - 0x1994]
mov dword [ebp - 0x1998], ecx
cmp dword [ebp - 0x1998], 0
jne 0x1013be6a
push ecx
add ecx, 0x13a94
xor ecx, 0x1081d
xor ecx, 0xed46
jmp 0x1013be43
pop ecx
push edi
push ecx
add esp, 4
add edi, 0x7093
or edi, 0x915c
or edi, 0xd858
pop edi
mov edx, dword [ebp - 0x5dc]
mov dword [ebp - 0x394], edx
jmp 0x1013bed2
push edx
push eax
add esp, 4
xor edx, 0x9ea3
jmp 0x1013be7e
add edx, 0x7f58
pop edx
push esi
jmp 0x1013be8c
add esi, 0x13ef
jmp 0x1013be9b
pop esi
mov eax, dword [ebp - 0x5dc]
mov ecx, dword [eax]
mov dword [ebp - 0x5dc], ecx
mov edx, dword [ebp - 0x5dc]
cmp edx, dword [ebp - 0xee0]
je 0x1013bec8
mov eax, dword [ebp - 0x5dc]
cmp dword [eax + 0x30], 0
jne 0x1013bc93
mov dword [ebp - 0x394], 0
push esi
push ecx
add esp, 4
jmp 0x1013bedc
jmp 0x1013bee5
add esi, 0x9dd3
pop esi
push edi
push ecx
add esp, 4
and edi, 0xf17c
pop edi
push edx
push eax
add esp, 4
xor edx, 0x14f1c
pop edx
mov ecx, dword [ebp - 0x394]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3cc], edx
push edi
push edi
add esp, 4
xor edi, 0x3f69
sub edi, 0x16821
call 0x1013bf33
add byte [edi + 0x33], cl
inc ecx
cmp dh, byte [edx + eax*2]
aas
push eax
xor eax, dword [ebx + 0x565f04c4]
jmp 0x1013bf3e
or esi, 0x455f
pop esi
mov dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x199c], eax
cmp dword [ebp - 0x199c], 0
jne 0x1013bf75
mov ecx, dword [ebp - 0x8b4]
mov dword [ebp - 0x5e0], ecx
jmp 0x1013c266
mov edx, dword [ebp - 0x199c]
mov eax, dword [ebp - 0x3cc]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x19a0], eax
jne 0x1013bf9d
mov ecx, dword [ebp - 0x8b4]
mov dword [ebp - 0x5e0], ecx
jmp 0x1013c266
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x19a0]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x19a4], edx
cmp dword [ebp - 0x19a4], 0
jne 0x1013bfcf
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x5e0], eax
jmp 0x1013c266
mov ecx, dword [ebp - 0x3cc]
add ecx, dword [ebp - 0x19a4]
mov dword [ebp - 0x8a8], ecx
jne 0x1013bff4
mov edx, dword [ebp - 0x8b4]
mov dword [ebp - 0x5e0], edx
jmp 0x1013c266
mov eax, dword [ebp - 0x8a8]
mov ecx, dword [ebp - 0x3cc]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1f74], ecx
mov edx, dword [ebp - 0x8a8]
mov eax, dword [ebp - 0x3cc]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1f78], eax
mov ecx, dword [ebp - 0x8a8]
mov edx, dword [ebp - 0x3cc]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1f7c], edx
mov dword [ebp - 0x8ac], 0
jmp 0x1013c04e
mov eax, dword [ebp - 0x8ac]
add eax, 1
mov dword [ebp - 0x8ac], eax
mov ecx, dword [ebp - 0x8a8]
mov edx, dword [ebp - 0x8ac]
cmp edx, dword [ecx + 0x18]
jae 0x1013c25a
mov eax, dword [ebp - 0x8ac]
mov ecx, dword [ebp - 0x1f74]
mov edx, dword [ebp - 0x3cc]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x8b0], edx
mov eax, dword [ebp - 0x8ac]
mov ecx, dword [ebp - 0x1f78]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1f7c]
mov ecx, dword [ebp - 0x3cc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1f80], ecx
mov dword [ebp - 0x1e4], 0
jmp 0x1013c0be
mov edx, dword [ebp - 0x1e4]
add edx, 1
mov dword [ebp - 0x1e4], edx
mov eax, dword [ebp - 0x8b0]
add eax, dword [ebp - 0x1e4]
movsx ecx, byte [eax]
test ecx, ecx
je 0x1013c170
mov edx, dword [ebp - 0x1e4]
movsx eax, byte [ebp + edx - 0xb5c]
test eax, eax
je 0x1013c170
push edi
push edi
add esp, 4
jmp 0x1013c0f8
or edi, 0x354e
and edi, 0x9b4e
pop edi
push edx
push ecx
add esp, 4
and edx, 0xf7b4
or edx, 0x75cd
sub edx, 0x146e4
pop edx
mov ecx, dword [ebp - 0x8b0]
add ecx, dword [ebp - 0x1e4]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1e4]
movsx ecx, byte [ebp + eax - 0xb5c]
cmp edx, ecx
je 0x1013c162
mov edx, dword [ebp - 0x8b0]
add edx, dword [ebp - 0x1e4]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1e4]
movsx edx, byte [ebp + ecx - 0xb5c]
cmp eax, edx
jne 0x1013c169
jmp 0x1013c0af
jmp 0x1013c170
push edx
and edx, 0xb65e
xor edx, 0x60fd
and edx, 0xa353
or edx, 0x10cb7
pop edx
push esi
push ecx
add esp, 4
add esi, 0xa04c
pop esi
push ebx
push esi
add esp, 4
and ebx, 0xd9f0
pop ebx
mov eax, dword [ebp - 0x8b0]
add eax, dword [ebp - 0x1e4]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1e4]
movsx eax, byte [ebp + edx - 0xb5c]
cmp ecx, eax
jne 0x1013c1cf
mov dword [ebp - 0xee4], 0
jmp 0x1013c23e
push ecx
sub ecx, 0x17356
add ecx, 0x8008
xor ecx, 0x8675
pop ecx
push ecx
and ecx, 0x15621
call 0x1013c1f7
add byte [esi + 0x3c], cl
aas
xor bh, byte [ecx]
inc edx
dec edx
add esp, 4
sub ecx, 0x69d9
pop ecx
mov ecx, dword [ebp - 0x8b0]
add ecx, dword [ebp - 0x1e4]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1e4]
movsx ecx, byte [ebp + eax - 0xb5c]
or ecx, 0x20
cmp edx, ecx
jge 0x1013c234
mov dword [ebp - 0xee4], 0xffffffff
jmp 0x1013c23e
mov dword [ebp - 0xee4], 1
cmp dword [ebp - 0xee4], 0
jne 0x1013c255
mov edx, dword [ebp - 0x1f80]
mov dword [ebp - 0x5e0], edx
jmp 0x1013c266
jmp 0x1013c03f
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x5e0], eax
mov ecx, dword [ebp - 0x5e0]
mov dword [ebp - 0xbf8], ecx
push edi
push esi
add esp, 4
sub edi, 0xa771
add edi, 0x3f7a
call 0x1013c292
add byte [esi + 0x4b], cl
cmp eax, dword [eax + 0x4c]
push eax
inc esi
inc esi
dec ebp
add esp, 4
pop edi
push eax
xor eax, 0x547f
xor eax, 0x540f
pop eax
mov edx, dword [ebp - 0xbf8]
mov dword [ebp - 0x1f84], edx
lea eax, [ebp - 0xee8]
push eax
push 0x40
mov ecx, dword [ebp - 0x19a8]
push ecx
mov edx, dword [ebp - 0x494]
push edx
call dword [ebp - 0x1f84]
test eax, eax
jne 0x1013c317
push ecx
or ecx, 0x1437
add ecx, 0x6903
pop ecx
push edx
push esi
add esp, 4
or edx, 0xf3e7
pop edx
push edi
push ebx
add esp, 4
and edi, 0x9a7f
sub edi, 0x18345
or edi, 0x11eff
pop edi
mov eax, dword [ebp - 0x8bc]
mov dword [ebp - 0x1f88], eax
push 0
call dword [ebp - 0x1f88]
mov ecx, dword [ebp - 0x1f8c]
mov dword [ebp - 0x8b8], ecx
jmp 0x1013c334
mov edx, dword [ebp - 0x8b8]
add edx, 1
mov dword [ebp - 0x8b8], edx
mov eax, dword [ebp - 0x8b8]
cmp eax, dword [ebp - 0xbfc]
jae 0x1013c390
push ebx
jmp 0x1013c349
xor ebx, 0x8bcd
or ebx, 0x8dde
and ebx, 0x2350
pop ebx
push ecx
jmp 0x1013c362
add ecx, 0x15f9c
or ecx, 0x673b
jmp 0x1013c373
pop ecx
movzx ecx, byte [ebp - 0x446]
mov edx, dword [ebp - 0x8b8]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x8b8]
mov byte [ecx], al
jmp 0x1013c325
mov edx, dword [ebp - 0xbf8]
mov dword [ebp - 0x1f90], edx
lea eax, [ebp - 0xee8]
push eax
mov ecx, dword [ebp - 0xee8]
push ecx
mov edx, dword [ebp - 0x19a8]
push edx
mov eax, dword [ebp - 0x494]
push eax
call dword [ebp - 0x1f90]
test eax, eax
jne 0x1013c408
push edi
push eax
add esp, 4
and edi, 0x15a4
add edi, 0x11f47
call 0x1013c3e0
add byte [ebp + 0x49], al
inc esp
cmp eax, dword [edx + 0x4c]
xor al, 0x83
les eax, [eax + ebp*8]
or byte [eax], al
add byte [eax], al
add byte [esi], bh
inc ebx
dec ebx
dec ebp
xor eax, dword [ebx - 0x74a0fb3c]
lea eax, [edi + esi*8 - 1]
dec dword [ecx - 0x1f9373]
jmp [edx]
push eax
push edx
add esp, 4
sub eax, 0x972d
or eax, 0x146e0
pop eax
push edx
and edx, 0x322e
call 0x1013c430
add byte [ecx + 0x33], cl
aaa
cmp byte [edi], bh
inc esp
dec esp
inc edx
inc ebx
add esp, 4
xor edx, 0xdb37
pop edx
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff07ff
pop ecx
pop ebp
pop esi
mov cl, bl
or ebp, edi
adc byte [edi], al
pop es
pop es
pop es
cmp al, 0x3a
push ebp
push ebx
aas
inc eax
inc edx
cmp cl, byte [edx + 0xeef0bcb]
or ebp, edi
push cs
pop es
pop es
pop es
pop es
dec esp
push ecx
dec eax
inc esi
inc ecx
push edx
mov cl, bl
or ecx, dword [eax + 0x791ebed]
pop es
mov ch, dh
stc
xchg ebp, eax
pop es
pop es
int 0x8c
jae 0x1013c479
push es
push es
dec esi
int 0x8c
je 0x1013c480
push es
push es
insb byte es:[edi], dx
int 0x8c
jne 0x1013c487
push es
push es
jnp 0x1013c45d
invalid