Function at 0x4109ae
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
add edi, 0xfe7e
or edi, 0x1528
jmp 0x4109c3
add edi, 0x12551
pop edi
push eax
add eax, 0x13e22
xor eax, 0x7069
jmp 0x4109dd
pop eax
mov eax, dword [ebp - 0x378]
add eax, 0xe
ror byte [esi], 0x89
test dword [ebx + 0x5253ffff], ebp
add esp, 4
or ebx, 0x107c1
pop ebx
push ecx
push esi
add esp, 4
xor ecx, 0x61d1
or ecx, 0x11a1
sub ecx, 0x16320
pop ecx
push edx
or edx, 0xd7e1
xor edx, 0x376a
pop edx
cmp dword [ebp - 0x378], 0
je 0x410a31
cmp dword [ebp - 0xa50], 0
jne 0x410a77
push ecx
push esi
add esp, 4
and ecx, 0xd702
xor ecx, 0x9569
sub ecx, 0x12a17
or ecx, 0xc0f4
pop ecx
push ebx
or ebx, 0x569e
xor ebx, 0xe354
add ebx, 0x2384
pop ebx
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x1c08], ecx
push 0
call dword [ebp - 0x1c08]
mov dword [ebp - 0x1d24], 0xa
push edi
push eax
add esp, 4
add edi, 0x5f25
or edi, 0x9a51
lcall 0x8352, 0x535f0000
les eax, [ecx + eax*4]
lds edi, [ebx]
add byte [eax], al
pop ebx
push esi
and esi, 0x16f10
sub esi, 0x98d1
sub esi, 0x16058
pop esi
mov edx, dword [ebp - 0x378]
mov al, byte [edx + 0xa]
mov byte [ebp - 0x3b9], al
mov ecx, dword [ebp - 0xa50]
sub ecx, dword [ebp - 0x378]
mov dword [ebp - 0x1584], ecx
mov dword [ebp - 0xc6c], 0
push edx
push ebx
add esp, 4
and edx, 0x2bbe
sub edx, 0x12506
sub edx, 0x1176b
jmp 0x410afb
pop edx
push eax
or eax, 0x8115
pop eax
push edi
push ecx
add esp, 4
add edi, 0x15ecb
pop edi
mov byte [ebp - 0x974], 0x56
mov byte [ebp - 0x973], 0x69
mov byte [ebp - 0x972], 0x72
mov byte [ebp - 0x971], 0x74
mov byte [ebp - 0x970], 0x75
mov byte [ebp - 0x96f], 0x61
mov byte [ebp - 0x96e], 0x6c
mov byte [ebp - 0x96d], 0x50
mov byte [ebp - 0x96c], 0x72
mov byte [ebp - 0x96b], 0x6f
mov byte [ebp - 0x96a], 0x74
mov byte [ebp - 0x969], 0x65
mov byte [ebp - 0x968], 0x63
mov byte [ebp - 0x967], 0x74
mov byte [ebp - 0x966], 0
push ecx
push ecx
add esp, 4
jmp 0x410b86
pop ecx
push edi
call 0x410b95
add byte [ecx], bh
xor dh, byte [0x33343548]
add esp, 4
call 0x410ba7
add byte [ebx + 0x37], al
inc edx
dec ecx
inc edi
dec edx
inc ecx
add esp, 4
pop edi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1c0c], edx
mov eax, dword [ebp - 0x1c0c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1c10], ecx
mov edx, dword [ebp - 0x1c10]
mov dword [ebp - 0x1544], edx
push edi
xor edi, 0x361f
xor edi, 0x10937
pop edi
push esi
jmp 0x410beb
pop esi
push edx
push ebx
add esp, 4
or edx, 0xf266
jmp 0x410bfe
xor edx, 0xf313
pop edx
cmp dword [ebp - 0x1544], 0
jne 0x410c1d
mov dword [ebp - 0x2a0], 0
jmp 0x410ec4
mov eax, dword [ebp - 0x1544]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc48], edx
push esi
push esi
add esp, 4
or esi, 0x72b8
add esi, 0x57a1
pop esi
push edx
jmp 0x410c47
pop edx
push eax
jmp 0x410c4e
add eax, 0x11148
or eax, 0x40b4
xor eax, 0x18448
pop eax
cmp dword [ebp - 0xc48], 0
jne 0x410c79
mov dword [ebp - 0x2a0], 0
jmp 0x410ec4
mov eax, dword [ebp - 0xc48]
mov dword [ebp - 0x4cc], eax
push edx
jmp 0x410c8c
pop edx
push edi
push eax
add esp, 4
sub edi, 0x1f0d
pop edi
push ecx
and ecx, 0x8dd0
xor ecx, 0x4289
call 0x410cb3
add byte [ebx], dh
push eax
inc eax
dec edx
dec edx
xor eax, 0x5904c483
lea ecx, [ebp - 0x15d0]
mov dword [ebp - 0xc44], ecx
mov edx, dword [ebp - 0x4cc]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc40], eax
xor ecx, ecx
mov word [ebp - 0x1b8], cx
xor edx, edx
mov word [ebp - 0x2c], dx
push ebx
sub ebx, 0x15088
and ebx, 0x6d29
and ebx, 0x172e1
xor ebx, 0x7664
pop ebx
push esi
push esi
add esp, 4
and esi, 0x8756
sub esi, 0x17274
and esi, 0x6f75
pop esi
mov eax, dword [ebp - 0xc40]
mov cx, word [eax]
mov word [ebp - 0xfc2], cx
mov edx, dword [ebp - 0xc40]
add edx, 2
mov dword [ebp - 0xc40], edx
mov ax, word [ebp - 0xfc2]
mov word [ebp - 0x1b8], ax
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xfc4], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xfc4]
mov word [ebp - 0x2c], cx
push esi
or esi, 0x16b0c
add esi, 0x15a4c
xor esi, 0xba2a
and esi, 0x29b7
pop esi
push edi
push edx
add esp, 4
add edi, 0xe239
xor edi, 0x5c46
add edi, 0x17027
pop edi
movzx edx, word [ebp - 0x2c]
test edx, edx
jne 0x410db9
movzx eax, word [ebp - 0x1b8]
movzx ecx, word [ebp - 0x2c]
sub eax, ecx
mov dword [ebp - 0x154c], eax
jmp 0x410e13
movzx edx, word [ebp - 0x1b8]
movzx eax, word [ebp - 0x2c]
cmp edx, eax
je 0x410ce1
movzx ecx, word [ebp - 0x1b8]
xor ecx, 0x20
movzx edx, word [ebp - 0x2c]
cmp ecx, edx
je 0x410ce1
movzx eax, word [ebp - 0x1b8]
movzx ecx, word [ebp - 0x2c]
cmp eax, ecx
jge 0x410dfd
mov dword [ebp - 0x1548], 0xffffffff
jmp 0x410e07
mov dword [ebp - 0x1548], 1
mov edx, dword [ebp - 0x1548]
mov dword [ebp - 0x154c], edx
cmp dword [ebp - 0x154c], 0
jne 0x410e5c
push ebx
push esi
add esp, 4
and ebx, 0xcd20
pop ebx
push ebx
push edi
add esp, 4
add ebx, 0x8c3a
add ebx, 0x4654
xor ebx, 0x938a
xor ebx, 0x4a6f
pop ebx
push edx
add edx, 0x14020
pop edx
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x2a0], eax
jmp 0x410ec4
push esi
xor esi, 0x740a
add esi, 0x23f1
or esi, 0x3263
sub esi, 0x1055e
pop esi
push ebx
push ecx
add esp, 4
and ebx, 0x11218
sub ebx, 0x11be0
xor ebx, 0x9344
pop ebx
mov ecx, dword [ebp - 0x4cc]
mov edx, dword [ecx]
mov dword [ebp - 0x4cc], edx
mov eax, dword [ebp - 0x4cc]
cmp eax, dword [ebp - 0xc48]
je 0x410eba
mov ecx, dword [ebp - 0x4cc]
cmp dword [ecx + 0x30], 0
jne 0x410c85
mov dword [ebp - 0x2a0], 0
push ecx
push ecx
add esp, 4
and ecx, 0x1712a
sub ecx, 0x107b3
pop ecx
push ebx
xor ebx, 0x181e1
and ebx, 0x5cea
sub ebx, 0x54a3
pop ebx
push ebx
push ecx
add esp, 4
and ebx, 0x17e4b
pop ebx
cmp dword [ebp - 0x2a0], 0
jne 0x4117fa
mov edx, 0x6b
mov word [ebp - 0x1658], dx
mov eax, 0x65
mov word [ebp - 0x1656], ax
mov ecx, 0x72
mov word [ebp - 0x1654], cx
mov edx, 0x6e
mov word [ebp - 0x1652], dx
mov eax, 0x65
mov word [ebp - 0x1650], ax
mov ecx, 0x6c
mov word [ebp - 0x164e], cx
mov edx, 0x33
mov word [ebp - 0x164c], dx
mov eax, 0x32
mov word [ebp - 0x164a], ax
mov ecx, 0x2e
mov word [ebp - 0x1648], cx
mov edx, 0x64
mov word [ebp - 0x1646], dx
mov eax, 0x6c
mov word [ebp - 0x1644], ax
mov ecx, 0x6c
mov word [ebp - 0x1642], cx
xor edx, edx
mov word [ebp - 0x1640], dx
push edi
xor edi, 0x105f8
pop edi
push edx
push edi
add esp, 4
and edx, 0x8c61
or edx, 0x4961
or edx, 0xbaa9
and edx, 0x16d3e
pop edx
push edi
push ebx
add esp, 4
and edi, 0x1712d
pop edi
mov byte [ebp - 0x85c], 0x4c
mov byte [ebp - 0x85b], 0x6f
mov byte [ebp - 0x85a], 0x61
mov byte [ebp - 0x859], 0x64
mov byte [ebp - 0x858], 0x4c
mov byte [ebp - 0x857], 0x69
mov byte [ebp - 0x856], 0x62
mov byte [ebp - 0x855], 0x72
mov byte [ebp - 0x854], 0x61
mov byte [ebp - 0x853], 0x72
mov byte [ebp - 0x852], 0x79
mov byte [ebp - 0x851], 0x57
mov byte [ebp - 0x850], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c14], eax
mov ecx, dword [ebp - 0x1c14]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1c18], edx
mov eax, dword [ebp - 0x1c18]
mov dword [ebp - 0x1550], eax
push ecx
xor ecx, 0x60d5
add ecx, 0x18651
xor ecx, 0x2de5
call 0x411070
add byte [esi + 0x35], al
cmp al, 0x37
inc eax
xor dh, byte [esi]
add esp, 4
pop ecx
push edi
or edi, 0xeef5
or edi, 0x9dd8
pop edi
cmp dword [ebp - 0x1550], 0
jne 0x41109a
mov dword [ebp - 0x74c], 0
jmp 0x411341
mov ecx, dword [ebp - 0x1550]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc54], eax
push edx
sub edx, 0xcc0a
pop edx
push edi
add edi, 0xd9da
call 0x4110c8
add byte [esi], bh
inc edx
push eax
inc esp
inc edx
cmp eax, dword [ebx + 0x525f04c4]
push ecx
add esp, 4
jmp 0x4110d7
or edx, 0x46ca
pop edx
cmp dword [ebp - 0xc54], 0
jne 0x4110f6
mov dword [ebp - 0x74c], 0
jmp 0x411341
mov ecx, dword [ebp - 0xc54]
mov dword [ebp - 0x4d0], ecx
push edx
push esi
add esp, 4
jmp 0x41110d
call 0x41111a
add byte [esi], dh
aaa
xor cl, byte [ebx + 0x34]
dec esi
dec ebx
add esp, 4
pop edx
push edx
push edx
add esp, 4
jmp 0x41112b
pop edx
push esi
xor esi, 0xc56b
pop esi
lea edx, [ebp - 0x1658]
mov dword [ebp - 0xc50], edx
mov eax, dword [ebp - 0x4d0]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc4c], ecx
xor edx, edx
mov word [ebp - 0x1bc], dx
xor eax, eax
mov word [ebp - 0x30], ax
push edi
push ebx
add esp, 4
and edi, 0x17bd7
add edi, 0xeea9
call 0x41117d
add byte [edi], dh
dec edi
inc eax
dec ebx
inc edi
inc ebx
dec eax
dec ebx
add esp, 4
add edi, 0x20a0
pop edi
push esi
jmp 0x41118f
pop esi
mov ecx, dword [ebp - 0xc4c]
mov dx, word [ecx]
mov word [ebp - 0xfc6], dx
mov eax, dword [ebp - 0xc4c]
add eax, 2
mov dword [ebp - 0xc4c], eax
mov cx, word [ebp - 0xfc6]
mov word [ebp - 0x1bc], cx
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xfc8], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xfc8]
mov word [ebp - 0x30], dx
push edx
and edx, 0x1432e
add edx, 0x7af2
and edx, 0x12c4c
and edx, 0xd37f
pop edx
push ecx
push edi
add esp, 4
and ecx, 0xef58
xor ecx, 0xf99e
sub ecx, 0x2a1b
pop ecx
movzx eax, word [ebp - 0x30]
test eax, eax
jne 0x411236
movzx ecx, word [ebp - 0x1bc]
movzx edx, word [ebp - 0x30]
sub ecx, edx
mov dword [ebp - 0x1558], ecx
jmp 0x411290
movzx eax, word [ebp - 0x1bc]
movzx ecx, word [ebp - 0x30]
cmp eax, ecx
je 0x41115e
movzx edx, word [ebp - 0x1bc]
xor edx, 0x20
movzx eax, word [ebp - 0x30]
cmp edx, eax
je 0x41115e
movzx ecx, word [ebp - 0x1bc]
movzx edx, word [ebp - 0x30]
cmp ecx, edx
jge 0x41127a
mov dword [ebp - 0x1554], 0xffffffff
jmp 0x411284
mov dword [ebp - 0x1554], 1
mov eax, dword [ebp - 0x1554]
mov dword [ebp - 0x1558], eax
cmp dword [ebp - 0x1558], 0
jne 0x4112d9
push esi
push eax
add esp, 4
or esi, 0xe05a
add esi, 0xf32a
xor esi, 0x14b77
pop esi
push ecx
sub ecx, 0x153c8
add ecx, 0x3aa0
add ecx, 0xa2aa
or ecx, 0x250c
pop ecx
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0x74c], ecx
jmp 0x411341
push eax
add eax, 0x12c8f
pop eax
push esi
push edi
add esp, 4
xor esi, 0x14335
pop esi
push ecx
add ecx, 0x614c
call 0x411301
add byte [esi + ecx*2], bh
dec ebx
cmp eax, 0x833b3a4e
les eax, [ecx + eax*4]
rcl dword [ecx + 0x5900012c], 0x8b
xchg ebp, eax
xor bl, bh
invalid
push edx
push edx
add esp, 4
jmp 0x41134e
or edx, 0xf4fd
and edx, 0x3f5
add edx, 0x13713
pop edx
push ecx
push eax
add esp, 4
xor ecx, 0x157df
add ecx, 0x30e4
pop ecx
cmp dword [ebp - 0x74c], 0
jne 0x4113bd
push ecx
push ecx
add esp, 4
sub ecx, 0x10038
sub ecx, 0x1359
add ecx, 0x1028d
pop ecx
push esi
and esi, 0x538b
or esi, 0xeb2d
and esi, 0x5700
xor esi, 0x1051e
pop esi
mov dword [ebp - 0xa4c], 0
jmp 0x411ee4
push edx
push ebx
add esp, 4
jmp 0x4113ca
or edx, 0x437
pop edx
push eax
push esi
add esp, 4
or eax, 0xfe65
or eax, 0x16b0a
or eax, 0xf1fc
or eax, 0x16e6d
pop eax
mov eax, dword [ebp - 0x74c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x368], ecx
mov dword [ebp - 0x75c], 0
mov edx, dword [ebp - 0x368]
mov dword [ebp - 0x155c], edx
cmp dword [ebp - 0x155c], 0
jne 0x41142e
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x37c], eax
jmp 0x41171f
mov ecx, dword [ebp - 0x155c]
mov edx, dword [ebp - 0x368]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1560], edx
jne 0x411456
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x37c], eax
jmp 0x41171f
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1560]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1568], ecx
cmp dword [ebp - 0x1568], 0
jne 0x411488
mov edx, dword [ebp - 0x75c]
mov dword [ebp - 0x37c], edx
jmp 0x41171f
mov eax, dword [ebp - 0x368]
add eax, dword [ebp - 0x1568]
mov dword [ebp - 0x6d0], eax
jne 0x4114ad
mov ecx, dword [ebp - 0x75c]
mov dword [ebp - 0x37c], ecx
jmp 0x41171f
mov edx, dword [ebp - 0x6d0]
mov eax, dword [ebp - 0x368]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1c1c], eax
mov ecx, dword [ebp - 0x6d0]
mov edx, dword [ebp - 0x368]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1c20], edx
mov eax, dword [ebp - 0x6d0]
mov ecx, dword [ebp - 0x368]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1c24], ecx
mov dword [ebp - 0x754], 0
jmp 0x411507
mov edx, dword [ebp - 0x754]
add edx, 1
mov dword [ebp - 0x754], edx
mov eax, dword [ebp - 0x6d0]
mov ecx, dword [ebp - 0x754]
cmp ecx, dword [eax + 0x18]
jae 0x411713
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x1c1c]
mov ecx, dword [ebp - 0x368]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x758], ecx
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x1c20]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1c24]
mov eax, dword [ebp - 0x368]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1c28], eax
mov dword [ebp - 0x15c], 0
jmp 0x411577
mov ecx, dword [ebp - 0x15c]
add ecx, 1
mov dword [ebp - 0x15c], ecx
mov edx, dword [ebp - 0x758]
add edx, dword [ebp - 0x15c]
movsx eax, byte [edx]
test eax, eax
je 0x411629
mov ecx, dword [ebp - 0x15c]
movsx edx, byte [ebp + ecx - 0x85c]
test edx, edx
je 0x411629
push eax
sub eax, 0x60f6
or eax, 0x15e8f
jmp 0x4115b8
and eax, 0xd263
pop eax
push ecx
and ecx, 0x642c
pop ecx
push ebx
push esi
add esp, 4
jmp 0x4115d5
pop ebx
mov eax, dword [ebp - 0x758]
add eax, dword [ebp - 0x15c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x15c]
movsx eax, byte [ebp + edx - 0x85c]
cmp ecx, eax
je 0x41161b
mov ecx, dword [ebp - 0x758]
add ecx, dword [ebp - 0x15c]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x15c]
movsx ecx, byte [ebp + eax - 0x85c]
cmp edx, ecx
jne 0x411622
jmp 0x411568
jmp 0x411629
push edi
push esi
add esp, 4
sub edi, 0x16127
and edi, 0x1677b
pop edi
push ebx
push edi
add esp, 4
or ebx, 0x5e62
add ebx, 0x2e1f
pop ebx
push esi
and esi, 0x7f27
jmp 0x41165a
pop esi
mov edx, dword [ebp - 0x758]
add edx, dword [ebp - 0x15c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x15c]
movsx edx, byte [ebp + ecx - 0x85c]
cmp eax, edx
jne 0x411688
mov dword [ebp - 0xc58], 0
jmp 0x4116f7
push esi
push eax
add esp, 4
and esi, 0x1549d
xor esi, 0x33f3
and esi, 0x11815
sub esi, 0xe142
pop esi
push ecx
xor ecx, 0x134e7
xor ecx, 0x4c66
or ecx, 0x16012
pop ecx
mov eax, dword [ebp - 0x758]
add eax, dword [ebp - 0x15c]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x15c]
movsx eax, byte [ebp + edx - 0x85c]
or eax, 0x20
cmp ecx, eax
jge 0x4116ed
mov dword [ebp - 0xc58], 0xffffffff
jmp 0x4116f7
mov dword [ebp - 0xc58], 1
cmp dword [ebp - 0xc58], 0
jne 0x41170e
mov ecx, dword [ebp - 0x1c28]
mov dword [ebp - 0x37c], ecx
jmp 0x41171f
jmp 0x4114f8
mov edx, dword [ebp - 0x75c]
mov dword [ebp - 0x37c], edx
cmp dword [ebp - 0x37c], 0
je 0x4117fa
push eax
push edi
add esp, 4
jmp 0x411737
pop eax
push ecx
push edi
add esp, 4
and ecx, 0x1699a
add byte [ecx + 0x50], bl
sub eax, 0x1070a
call 0x41175a
add byte [edx], dh
inc esi
dec esp
inc eax
cmp al, 0x33
push eax
inc ebx
cmp byte [ebx - 0x74a7fb3c], al
test dword [esp + edi*8 - 0x7a760001], eax
aam 0xe3
invalid
push ecx
push edx
add esp, 4
or ecx, 0xa66c
pop ecx
push esi
or esi, 0x9111
or esi, 0x1064a
jmp 0x41181b
add esi, 0x8ea4
pop esi
push esi
jmp 0x41182b
pop esi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1c38], edx
mov eax, dword [ebp - 0x1c38]
mov dword [ebp - 0x156c], eax
push edx
call 0x411864
add byte [esi], bh
xor bh, byte [esi]
dec eax
dec ebx
xor edx, dword [eax + 0x40]
aas
dec ebp
add esp, 4
sub edx, 0xc14d
pop edx
push esi
sub esi, 0xa49b
add esi, 0x6029
jmp 0x411884
pop esi
cmp dword [ebp - 0x156c], 0
jne 0x41189d
mov dword [ebp - 0x2a0], 0
jmp 0x411b44
mov ecx, dword [ebp - 0x156c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc64], eax
push edx
push ebx
add esp, 4
jmp 0x4118bd
sub edx, 0x394a
jmp 0x4118ca
add edx, 0xb662
pop edx
push ecx
or ecx, 0x10aae
jmp 0x4118e0
pop ecx
cmp dword [ebp - 0xc64], 0
jne 0x4118f9
mov dword [ebp - 0x2a0], 0
jmp 0x411b44
mov ecx, dword [ebp - 0xc64]
mov dword [ebp - 0x4d4], ecx
push edi
add edi, 0x28d0
xor edi, 0x15fbf
call 0x411922
add byte [0x47394741], dh
inc ecx
cmp al, 0x4f
inc esp
dec ecx
add esp, 4
call 0x411933
add byte [esi], bh
cmp byte [edx], bh
inc eax
inc eax
dec ecx
dec esi
inc esp
add esp, 4
pop edi
lea edx, [ebp - 0x15d0]
mov dword [ebp - 0xc60], edx
mov eax, dword [ebp - 0x4d4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc5c], ecx
xor edx, edx
mov word [ebp - 0x1c0], dx
xor eax, eax
mov word [ebp - 0x34], ax
push edi
push ebx
add esp, 4
call 0x411974
add byte [esp + esi + 0x4a], al
xor esi, dword ss:[edx + edi]
aaa
add esp, 4
xor edi, 0xa2e8
xor edi, 0x6f15
call 0x41198f
add byte [0x3f4f4844], bh
inc eax
add esp, 4
pop edi
mov ecx, dword [ebp - 0xc5c]
mov dx, word [ecx]
mov word [ebp - 0xfca], dx
mov eax, dword [ebp - 0xc5c]
add eax, 2
mov dword [ebp - 0xc5c], eax
mov cx, word [ebp - 0xfca]
mov word [ebp - 0x1c0], cx
mov edx, dword [ebp - 0xc60]
mov ax, word [edx]
mov word [ebp - 0xfcc], ax
mov ecx, dword [ebp - 0xc60]
add ecx, 2
mov dword [ebp - 0xc60], ecx
mov dx, word [ebp - 0xfcc]
mov word [ebp - 0x34], dx
push ebx
call 0x4119f7
add byte [0x41343246], bh
dec ecx
add esp, 4
pop ebx
push eax
or eax, 0xb8c5
and eax, 0xcaba
jmp 0x411a0d
pop eax
push esi
and esi, 0xc8ac
xor esi, 0x13642
pop esi
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x411a39
movzx ecx, word [ebp - 0x1c0]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x1574], ecx
jmp 0x411a93
movzx eax, word [ebp - 0x1c0]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x411961
movzx edx, word [ebp - 0x1c0]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x411961
invalid