Function at 0x1000d2ab
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ecx
sub ecx, 0x5690
call 0x1000cb56
add byte [ecx + 0x4c], al
dec esp
dec esp
xor bh, byte [0x834a5047]
les eax, [ecx + eax*4]
rcr esp, 0xec
add byte [eax], al
add ecx, 0xee62
pop ecx
cmp dword [ebp - 0xc38], 0
jne 0x1000cb7e
mov dword [ebp - 0x2a0], 0
jmp 0x1000cdc9
mov eax, dword [ebp - 0xc38]
mov dword [ebp - 0x4c4], eax
push edx
push edi
add esp, 4
xor edx, 0xfc60
pop edx
push edi
push esi
add esp, 4
add edi, 0x9a44
pop edi
push edi
push eax
add esp, 4
or edi, 0x12f70
and edi, 0x181f6
pop edi
push edx
and edx, 0x1530c
pop edx
lea ecx, [ebp - 0x15cc]
mov dword [ebp - 0xc34], ecx
mov edx, dword [ebp - 0x4c4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc30], eax
xor ecx, ecx
mov word [ebp - 0x1b4], cx
xor edx, edx
mov word [ebp - 0x28], dx
push ecx
jmp 0x1000cbed
pop ecx
push esi
push edi
add esp, 4
or esi, 0x810b
xor esi, 0x17de8
jmp 0x1000cc05
call 0x1000cc14
add byte [ecx + 0x49], al
inc edi
cmp dword [ebx + esi], edi
cmp byte [edi + 0x47], al
add esp, 4
pop esi
mov eax, dword [ebp - 0xc30]
mov cx, word [eax]
mov word [ebp - 0xfbe], cx
mov edx, dword [ebp - 0xc30]
add edx, 2
mov dword [ebp - 0xc30], edx
mov ax, word [ebp - 0xfbe]
mov word [ebp - 0x1b4], ax
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xfc0], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xfc0]
mov word [ebp - 0x28], cx
push edi
add edi, 0x15140
xor edi, 0x151b
pop edi
push ebx
sub ebx, 0x12c8e
call 0x1000cc90
add byte [ecx + 0x32], al
xor bh, byte [esi]
dec ebp
inc ecx
add esp, 4
jmp 0x1000cc9a
xor ebx, 0x6319
pop ebx
movzx edx, word [ebp - 0x28]
test edx, edx
jne 0x1000ccbe
movzx eax, word [ebp - 0x1b4]
movzx ecx, word [ebp - 0x28]
sub eax, ecx
mov dword [ebp - 0x1530], eax
jmp 0x1000cd18
movzx edx, word [ebp - 0x1b4]
movzx eax, word [ebp - 0x28]
cmp edx, eax
je 0x1000cbe6
movzx ecx, word [ebp - 0x1b4]
xor ecx, 0x20
movzx edx, word [ebp - 0x28]
cmp ecx, edx
je 0x1000cbe6
movzx eax, word [ebp - 0x1b4]
movzx ecx, word [ebp - 0x28]
cmp eax, ecx
jge 0x1000cd02
mov dword [ebp - 0x152c], 0xffffffff
jmp 0x1000cd0c
mov dword [ebp - 0x152c], 1
mov edx, dword [ebp - 0x152c]
mov dword [ebp - 0x1530], edx
cmp dword [ebp - 0x1530], 0
jne 0x1000cd61
push edi
xor edi, 0x76c7
xor edi, 0x11bdc
pop edi
push ecx
push esi
add esp, 4
xor ecx, 0x13da6
sub ecx, 0xb611
and ecx, 0x11678
pop ecx
push edx
push esi
add esp, 4
and edx, 0x128d9
pop edx
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x2a0], eax
jmp 0x1000cdc9
push ecx
push eax
add esp, 4
add ecx, 0xb0de
sub ecx, 0x19f5
or ecx, 0x755b
add ecx, 0xbeb0
pop ecx
push edi
sub edi, 0xe296
pop edi
push eax
push edx
add esp, 4
and eax, 0x15edb
pop eax
mov ecx, dword [ebp - 0x4c4]
mov edx, dword [ecx]
mov dword [ebp - 0x4c4], edx
mov eax, dword [ebp - 0x4c4]
cmp eax, dword [ebp - 0xc38]
je 0x1000cdbf
mov ecx, dword [ebp - 0x4c4]
cmp dword [ecx + 0x30], 0
jne 0x1000cb8a
mov dword [ebp - 0x2a0], 0
push eax
push esi
add esp, 4
or eax, 0xffd2
pop eax
push eax
call 0x1000cde5
add byte [ebx], bh
inc eax
inc ebp
aaa
inc edx
cmp dword ss:[0x4c4833e], edi
or eax, 0x15902
add eax, 0x15c85
add eax, 0x872b
pop eax
mov edx, dword [ebp - 0x2a0]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x330], eax
push eax
or eax, 0xa6f5
xor eax, 0x6c37
or eax, 0x7a24
pop eax
push esi
or esi, 0xec8d
xor esi, 0xc58e
add esi, 0x2aa1
pop esi
push edx
jmp 0x1000ce3b
pop edx
mov dword [ebp - 0x748], 0
mov ecx, dword [ebp - 0x330]
mov dword [ebp - 0x1534], ecx
cmp dword [ebp - 0x1534], 0
jne 0x1000ce6c
mov edx, dword [ebp - 0x748]
mov dword [ebp - 0x4c8], edx
jmp 0x1000d15d
mov eax, dword [ebp - 0x1534]
mov ecx, dword [ebp - 0x330]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x1538], ecx
jne 0x1000ce94
mov edx, dword [ebp - 0x748]
mov dword [ebp - 0x4c8], edx
jmp 0x1000d15d
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x1538]
mov eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x153c], eax
cmp dword [ebp - 0x153c], 0
jne 0x1000cec6
mov ecx, dword [ebp - 0x748]
mov dword [ebp - 0x4c8], ecx
jmp 0x1000d15d
mov edx, dword [ebp - 0x330]
add edx, dword [ebp - 0x153c]
mov dword [ebp - 0x73c], edx
jne 0x1000ceeb
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0x4c8], eax
jmp 0x1000d15d
mov ecx, dword [ebp - 0x73c]
mov edx, dword [ebp - 0x330]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x1bf8], edx
mov eax, dword [ebp - 0x73c]
mov ecx, dword [ebp - 0x330]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x1bfc], ecx
mov edx, dword [ebp - 0x73c]
mov eax, dword [ebp - 0x330]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x1c00], eax
mov dword [ebp - 0x740], 0
jmp 0x1000cf45
mov ecx, dword [ebp - 0x740]
add ecx, 1
mov dword [ebp - 0x740], ecx
mov edx, dword [ebp - 0x73c]
mov eax, dword [ebp - 0x740]
cmp eax, dword [edx + 0x18]
jae 0x1000d151
mov ecx, dword [ebp - 0x740]
mov edx, dword [ebp - 0x1bf8]
mov eax, dword [ebp - 0x330]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x740]
mov edx, dword [ebp - 0x1bfc]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x1c00]
mov edx, dword [ebp - 0x330]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x1c04], edx
mov dword [ebp - 0x154], 0
jmp 0x1000cfb5
mov eax, dword [ebp - 0x154]
add eax, 1
mov dword [ebp - 0x154], eax
mov ecx, dword [ebp - 0x744]
add ecx, dword [ebp - 0x154]
movsx edx, byte [ecx]
test edx, edx
je 0x1000d067
mov eax, dword [ebp - 0x154]
movsx ecx, byte [ebp + eax - 0x83c]
test ecx, ecx
je 0x1000d067
push ecx
push ecx
add esp, 4
add ecx, 0x4294
add ecx, 0x16778
add ecx, 0x119b2
pop ecx
push edi
or edi, 0xbfa2
pop edi
push esi
push eax
add esp, 4
xor esi, 0x4fd5
jmp 0x1000d013
pop esi
mov edx, dword [ebp - 0x744]
add edx, dword [ebp - 0x154]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x154]
movsx edx, byte [ebp + ecx - 0x83c]
cmp eax, edx
je 0x1000d059
mov eax, dword [ebp - 0x744]
add eax, dword [ebp - 0x154]
movsx ecx, byte [eax]
xor ecx, 0x20
mov edx, dword [ebp - 0x154]
movsx eax, byte [ebp + edx - 0x83c]
cmp ecx, eax
jne 0x1000d060
jmp 0x1000cfa6
jmp 0x1000d067
push ebx
push ebx
add esp, 4
or ebx, 0xaefb
or ebx, 0x2a79
xor ebx, 0x15575
pop ebx
push ecx
and ecx, 0xbbbe
sub ecx, 0xdda
or ecx, 0x12e39
xor ecx, 0x520b
pop ecx
mov ecx, dword [ebp - 0x744]
add ecx, dword [ebp - 0x154]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x154]
movsx ecx, byte [ebp + eax - 0x83c]
cmp edx, ecx
jne 0x1000d0c6
mov dword [ebp - 0xc3c], 0
jmp 0x1000d135
push eax
and eax, 0x167ee
call 0x1000d0dc
add byte [edi + esi + 0x50], al
xor dh, byte [0x353e3d38]
add esp, 4
or eax, 0x17231
pop eax
push esi
push ebx
add esp, 4
or esi, 0x1a56
or esi, 0x1636c
pop esi
mov edx, dword [ebp - 0x744]
add edx, dword [ebp - 0x154]
movsx eax, byte [edx]
or eax, 0x20
mov ecx, dword [ebp - 0x154]
movsx edx, byte [ebp + ecx - 0x83c]
or edx, 0x20
cmp eax, edx
jge 0x1000d12b
mov dword [ebp - 0xc3c], 0xffffffff
jmp 0x1000d135
mov dword [ebp - 0xc3c], 1
cmp dword [ebp - 0xc3c], 0
jne 0x1000d14c
mov eax, dword [ebp - 0x1c04]
mov dword [ebp - 0x4c8], eax
jmp 0x1000d15d
jmp 0x1000cf36
mov ecx, dword [ebp - 0x748]
mov dword [ebp - 0x4c8], ecx
mov edx, dword [ebp - 0x4c8]
mov dword [ebp - 0x774], edx
push eax
or eax, 0x8a53
pop eax
push esi
sub esi, 0x53d0
pop esi
push esi
push esi
add esp, 4
and esi, 0x2d7d
call 0x1000d191
add byte [eax + ecx*2 + 0x44], al
inc eax
dec edx
inc ebp
dec ebx
add esp, 4
or esi, 0xd98d
pop esi
mov eax, dword [ebp - 0x390]
add eax, 0xe
mov dword [ebp - 0x1c54], eax
push ebx
sub ebx, 0xf87
pop ebx
push edi
add edi, 0x3a22
pop edi
push edi
push edx
add esp, 4
jmp 0x1000d1c4
sub edi, 0x6d6f
call 0x1000d1d8
add byte [ebx + 0x3d], al
aas
inc ebx
xor bh, byte ds:[esi]
cmp eax, dword [ebx - 0x7ca0fb3c]
mov ebp, 0xfffffc70
add byte [ecx + ecx - 0x7d], dh
mov ebp, 0xfffff5b8
add byte [ebp + 0x46], dh
push edi
xor edi, 0x148b0
pop edi
push ebx
push esi
add esp, 4
xor ebx, 0xf549
add ebx, 0xcb5b
sub ebx, 0x10eb5
or ebx, 0x8dd8
pop ebx
push eax
push ecx
add esp, 4
or eax, 0x15844
pop eax
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x1c08], ecx
push 0
call dword [ebp - 0x1c08]
mov dword [ebp - 0x1d24], 0xa
push edi
xor edi, 0x122b1
add edi, 0xebcd
and edi, 0x40f9
add edi, 0x913f
pop edi
push ecx
push edi
add esp, 4
sub ecx, 0x541d
pop ecx
push eax
push eax
add esp, 4
xor eax, 0x136ca
pop eax
mov edx, dword [ebp - 0x390]
mov al, byte [edx + 0xa]
mov byte [ebp - 0x3a5], al
mov ecx, dword [ebp - 0xa48]
sub ecx, dword [ebp - 0x390]
mov dword [ebp - 0x157c], ecx
mov dword [ebp - 0xc6c], 0
push edi
call 0x1000d2ab
add byte [esp + ecx*2 + 0x4d], cl
dec edx
cmp al, 0x40
xor al, 0x37
add esp, 4
and edi, 0x772c
and edi, 0x7fbf
pop edi
push ebx
push ecx
add esp, 4
sub ebx, 0x148c5
and ebx, 0x2b4c
pop ebx
mov byte [ebp - 0x974], 0x56
mov byte [ebp - 0x973], 0x69
mov byte [ebp - 0x972], 0x72
mov byte [ebp - 0x971], 0x74
mov byte [ebp - 0x970], 0x75
mov byte [ebp - 0x96f], 0x61
mov byte [ebp - 0x96e], 0x6c
mov byte [ebp - 0x96d], 0x50
mov byte [ebp - 0x96c], 0x72
mov byte [ebp - 0x96b], 0x6f
mov byte [ebp - 0x96a], 0x74
mov byte [ebp - 0x969], 0x65
mov byte [ebp - 0x968], 0x63
mov byte [ebp - 0x967], 0x74
mov byte [ebp - 0x966], 0
push ebx
push eax
add esp, 4
or ebx, 0x967b
jmp 0x1000d347
and ebx, 0x95a3
pop ebx
push ebx
sub ebx, 0x1009
and ebx, 0xe4fa
sub ebx, 0xea0e
add ebx, 0x5df7
pop ebx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1c0c], edx
mov eax, dword [ebp - 0x1c0c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1c10], ecx
mov edx, dword [ebp - 0x1c10]
mov dword [ebp - 0x1540], edx
push edx
sub edx, 0x1228a
and edx, 0x127a0
call 0x1000d3ac
add byte [ebx + 0x46], al
inc edx
inc esi
cmp edi, dword [edi]
xor al, 0x45
cmp eax, dword [ebx + 0x535a04c4]
call 0x1000d3be
add byte [edx], dh
cmp cl, byte [ebx + 0x43]
dec esi
cmp al, 0x41
add esp, 4
pop ebx
cmp dword [ebp - 0x1540], 0
jne 0x1000d3da
mov dword [ebp - 0x2a4], 0
jmp 0x1000d681
mov eax, dword [ebp - 0x1540]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc48], edx
push edx
call 0x1000d3fd
add byte [edi], dh
xor al, 0x46
xor ecx, dword [eax + 0x43]
dec eax
inc ebx
dec ebx
add esp, 4
pop edx
push eax
jmp 0x1000d40a
and eax, 0x879c
sub eax, 0x96c5
jmp 0x1000d41d
pop eax
cmp dword [ebp - 0xc48], 0
jne 0x1000d436
mov dword [ebp - 0x2a4], 0
jmp 0x1000d681
mov eax, dword [ebp - 0xc48]
mov dword [ebp - 0x4cc], eax
push edi
or edi, 0x1654c
add edi, 0x1320c
xor edi, 0x772
and edi, 0xdb45
pop edi
push ebx
push eax
add esp, 4
add ebx, 0x949c
or ebx, 0x43d1
xor ebx, 0x8f59
pop ebx
lea ecx, [ebp - 0x15cc]
mov dword [ebp - 0xc44], ecx
mov edx, dword [ebp - 0x4cc]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc40], eax
xor ecx, ecx
mov word [ebp - 0x1b8], cx
xor edx, edx
mov word [ebp - 0x2c], dx
push eax
add eax, 0x181a
pop eax
push ebx
push ecx
add esp, 4
or ebx, 0x88eb
pop ebx
push edx
push ecx
add esp, 4
xor edx, 0xa02b
or edx, 0x601f
and edx, 0xc018
sub edx, 0xb174
pop edx
mov eax, dword [ebp - 0xc40]
mov cx, word [eax]
mov word [ebp - 0xfc2], cx
mov edx, dword [ebp - 0xc40]
add edx, 2
mov dword [ebp - 0xc40], edx
mov ax, word [ebp - 0xfc2]
mov word [ebp - 0x1b8], ax
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xfc4], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xfc4]
mov word [ebp - 0x2c], cx
push ebx
and ebx, 0x8216
pop ebx
push eax
push ecx
add esp, 4
xor eax, 0x162d1
pop eax
push ecx
push ebx
add esp, 4
and ecx, 0x3b4d
pop ecx
push esi
push edi
add esp, 4
add esi, 0xb24
or esi, 0x1748c
pop esi
movzx edx, word [ebp - 0x2c]
test edx, edx
jne 0x1000d576
movzx eax, word [ebp - 0x1b8]
movzx ecx, word [ebp - 0x2c]
sub eax, ecx
mov dword [ebp - 0x1548], eax
jmp 0x1000d5d0
movzx edx, word [ebp - 0x1b8]
movzx eax, word [ebp - 0x2c]
cmp edx, eax
je 0x1000d49e
movzx ecx, word [ebp - 0x1b8]
xor ecx, 0x20
movzx edx, word [ebp - 0x2c]
cmp ecx, edx
je 0x1000d49e
movzx eax, word [ebp - 0x1b8]
movzx ecx, word [ebp - 0x2c]
cmp eax, ecx
jge 0x1000d5ba
mov dword [ebp - 0x1544], 0xffffffff
jmp 0x1000d5c4
mov dword [ebp - 0x1544], 1
mov edx, dword [ebp - 0x1544]
mov dword [ebp - 0x1548], edx
cmp dword [ebp - 0x1548], 0
jne 0x1000d619
push ecx
push edx
add esp, 4
call 0x1000d5ed
add byte [ebx + 0x35], cl
cmp dword [edx + eax*2 + 0x38], eax
aaa
dec edx
dec ebx
add esp, 4
or ecx, 0x10714
add ecx, 0xd306
and ecx, 0x135e
pop ecx
push eax
add eax, 0x789f
pop eax
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x2a4], eax
jmp 0x1000d681
push ecx
or ecx, 0x17bed
pop ecx
push ebx
or ebx, 0x15413
call 0x1000d635
add byte [esi + 0x3e], cl
cmp al, 0x3a
dec esp
xor al, byte [eax - 0x7d]
les eax, [ecx + eax*4]
ret
push eax
push edx
add esp, 4
and eax, 0x17338
pop eax
push eax
xor eax, 0xcc93
xor eax, 0xe2cf
jmp 0x1000d6a0
or eax, 0x15ce7
pop eax
push ecx
push ecx
add esp, 4
jmp 0x1000d6b2
pop ecx
cmp dword [ebp - 0x2a4], 0
jne 0x1000dfb7
mov edx, 0x6b
mov word [ebp - 0x1654], dx
mov eax, 0x65
mov word [ebp - 0x1652], ax
mov ecx, 0x72
mov word [ebp - 0x1650], cx
mov edx, 0x6e
mov word [ebp - 0x164e], dx
mov eax, 0x65
mov word [ebp - 0x164c], ax
mov ecx, 0x6c
mov word [ebp - 0x164a], cx
mov edx, 0x33
mov word [ebp - 0x1648], dx
mov eax, 0x32
mov word [ebp - 0x1646], ax
mov ecx, 0x2e
mov word [ebp - 0x1644], cx
mov edx, 0x64
mov word [ebp - 0x1642], dx
mov eax, 0x6c
mov word [ebp - 0x1640], ax
mov ecx, 0x6c
mov word [ebp - 0x163e], cx
xor edx, edx
mov word [ebp - 0x163c], dx
push eax
push ebx
add esp, 4
and eax, 0x1f47
call 0x1000d770
add byte [edi], dh
xor cl, byte [eax + 0x32]
cmp byte [ebx + eax*4 - 0x3c], cl
add al, 0x58
push edx
jmp 0x1000d77e
and edx, 0xebad
sub edx, 0x142ed
pop edx
mov byte [ebp - 0x85c], 0x4c
mov byte [ebp - 0x85b], 0x6f
mov byte [ebp - 0x85a], 0x61
mov byte [ebp - 0x859], 0x64
mov byte [ebp - 0x858], 0x4c
mov byte [ebp - 0x857], 0x69
mov byte [ebp - 0x856], 0x62
mov byte [ebp - 0x855], 0x72
mov byte [ebp - 0x854], 0x61
mov byte [ebp - 0x853], 0x72
mov byte [ebp - 0x852], 0x79
mov byte [ebp - 0x851], 0x57
mov byte [ebp - 0x850], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c14], eax
mov ecx, dword [ebp - 0x1c14]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1c18], edx
mov eax, dword [ebp - 0x1c18]
mov dword [ebp - 0x154c], eax
push esi
call 0x1000d81e
add byte [0x474b503e], bh
xor edi, dword [esp + eax*2]
dec ebp
xor eax, 0x5e04c483
push eax
jmp 0x1000d82c
add eax, 0xd47f
or eax, 0xf6ce
or eax, 0x133ea
pop eax
cmp dword [ebp - 0x154c], 0
jne 0x1000d857
mov dword [ebp - 0x74c], 0
jmp 0x1000dafe
mov ecx, dword [ebp - 0x154c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc54], eax
push edi
sub edi, 0x15e17
jmp 0x1000d878
and edi, 0x8d2a
pop edi
push ecx
sub ecx, 0x87f8
or ecx, 0x13ce4
and ecx, 0x220d
pop ecx
push esi
xor esi, 0xfca5
pop esi
cmp dword [ebp - 0xc54], 0
jne 0x1000d8b3
mov dword [ebp - 0x74c], 0
jmp 0x1000dafe
mov ecx, dword [ebp - 0xc54]
mov dword [ebp - 0x4d0], ecx
push eax
add eax, 0xf98d
call 0x1000d8d5
add byte [ebx + 0x40], cl
dec esi
inc edi
xor edi, dword [eax]
dec ebx
xor al, 0x3e
add esp, 4
pop eax
push ecx
push ecx
add esp, 4
or ecx, 0x14b02
xor ecx, 0xfde1
and ecx, 0x4832
pop ecx
lea edx, [ebp - 0x1654]
mov dword [ebp - 0xc50], edx
mov eax, dword [ebp - 0x4d0]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc4c], ecx
xor edx, edx
mov word [ebp - 0x1bc], dx
xor eax, eax
mov word [ebp - 0x30], ax
push esi
push edi
add esp, 4
sub esi, 0x1320c
pop esi
push ecx
push esi
add esp, 4
add ecx, 0x17a0f
sub ecx, 0xc6f9
xor ecx, 0x9026
pop ecx
push ecx
and ecx, 0x1421b
and ecx, 0x6f28
pop ecx
mov ecx, dword [ebp - 0xc4c]
mov dx, word [ecx]
mov word [ebp - 0xfc6], dx
mov eax, dword [ebp - 0xc4c]
add eax, 2
mov dword [ebp - 0xc4c], eax
mov cx, word [ebp - 0xfc6]
mov word [ebp - 0x1bc], cx
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xfc8], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xfc8]
mov word [ebp - 0x30], dx
push edx
push esi
add esp, 4
sub edx, 0x21a7
and edx, 0x6953
xor edx, 0xfcb6
pop edx
push edx
push edx
add esp, 4
or edx, 0xe3fb
sub edx, 0xd36b
pop edx
push eax
sub eax, 0x1546
pop eax
movzx eax, word [ebp - 0x30]
test eax, eax
jne 0x1000d9f3
movzx ecx, word [ebp - 0x1bc]
movzx edx, word [ebp - 0x30]
sub ecx, edx
mov dword [ebp - 0x1554], ecx
jmp 0x1000da4d
movzx eax, word [ebp - 0x1bc]
movzx ecx, word [ebp - 0x30]
cmp eax, ecx
je 0x1000d91b
movzx edx, word [ebp - 0x1bc]
xor edx, 0x20
movzx eax, word [ebp - 0x30]
cmp edx, eax
je 0x1000d91b
movzx ecx, word [ebp - 0x1bc]
movzx edx, word [ebp - 0x30]
cmp ecx, edx
jge 0x1000da37
mov dword [ebp - 0x1550], 0xffffffff
jmp 0x1000da41
mov dword [ebp - 0x1550], 1
mov eax, dword [ebp - 0x1550]
mov dword [ebp - 0x1554], eax
cmp dword [ebp - 0x1554], 0
jne 0x1000da96
push ebx
xor ebx, 0xd648
xor ebx, 0xf4f5
sub ebx, 0x2f79
sub ebx, 0x14a81
pop ebx
push esi
push edi
add esp, 4
call 0x1000da84
add byte [eax + 0x41], dl
inc ebx
dec edi
inc esp
cmp byte [edi], dh
aas
add esp, 4
pop esi
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0x74c], ecx
jmp 0x1000dafe
push edx
push ebx
add esp, 4
sub edx, 0x16853
jmp 0x1000daa7
pop edx
push ecx
push ecx
add esp, 4
or ecx, 0x14ed7
jmp 0x1000dab9
jmp 0x1000dac1
add ecx, 0xf121
pop ecx
mov edx, dword [ebp - 0x4d0]
mov eax, dword [edx]
mov dword [ebp - 0x4d0], eax
mov ecx, dword [ebp - 0x4d0]
cmp ecx, dword [ebp - 0xc54]
je 0x1000daf4
mov edx, dword [ebp - 0x4d0]
cmp dword [edx + 0x30], 0
jne 0x1000d8bf
mov dword [ebp - 0x74c], 0
push eax
push ebx
add esp, 4
sub eax, 0x142a2
pop eax
push edx
and edx, 0x12977
add edx, 0x12836
xor edx, 0xef5b
call 0x1000db2c
add byte [edi], dh
inc edi
xor eax, dword [ecx + 0x35]
xor edi, dword [ebx]
cmp al, byte [ebx + eax*4 - 0x3c]
add al, 0x5a
cmp dword [ebp - 0x74c], 0
jne 0x1000db7a
push eax
and eax, 0x1338b
or eax, 0xc109
or eax, 0xd754
pop eax
push edi
call 0x1000db5b
add byte [eax + 0x45], al
xor eax, 0x503a393c
add esp, 4
or edi, 0x85c4
or edi, 0x1458f
pop edi
mov dword [ebp - 0xa44], 0
jmp 0x1000e6a1
push edi
push ebx
add esp, 4
jmp 0x1000db85
pop edi
push ebx
push ebx
add esp, 4
xor ebx, 0xb0ff
pop ebx
push eax
push eax
add esp, 4
add eax, 0xe358
and eax, 0x503
pop eax
push ebx
add ebx, 0x8356
pop ebx
mov eax, dword [ebp - 0x74c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x31c], ecx
mov dword [ebp - 0x75c], 0
mov edx, dword [ebp - 0x31c]
mov dword [ebp - 0x1558], edx
cmp dword [ebp - 0x1558], 0
jne 0x1000dbeb
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x394], eax
jmp 0x1000dedc
mov ecx, dword [ebp - 0x1558]
mov edx, dword [ebp - 0x31c]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x155c], edx
jne 0x1000dc13
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x394], eax
jmp 0x1000dedc
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x155c]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x1000dc45
mov edx, dword [ebp - 0x75c]
mov dword [ebp - 0x394], edx
jmp 0x1000dedc
mov eax, dword [ebp - 0x31c]
add eax, dword [ebp - 0x1560]
mov dword [ebp - 0x6d0], eax
jne 0x1000dc6a
mov ecx, dword [ebp - 0x75c]
mov dword [ebp - 0x394], ecx
jmp 0x1000dedc
mov edx, dword [ebp - 0x6d0]
mov eax, dword [ebp - 0x31c]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1c1c], eax
mov ecx, dword [ebp - 0x6d0]
mov edx, dword [ebp - 0x31c]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1c20], edx
mov eax, dword [ebp - 0x6d0]
mov ecx, dword [ebp - 0x31c]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1c24], ecx
mov dword [ebp - 0x754], 0
jmp 0x1000dcc4
mov edx, dword [ebp - 0x754]
add edx, 1
mov dword [ebp - 0x754], edx
mov eax, dword [ebp - 0x6d0]
mov ecx, dword [ebp - 0x754]
cmp ecx, dword [eax + 0x18]
jae 0x1000ded0
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x1c1c]
mov ecx, dword [ebp - 0x31c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x758], ecx
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x1c20]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1c24]
mov eax, dword [ebp - 0x31c]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1c28], eax
mov dword [ebp - 0x158], 0
jmp 0x1000dd34
mov ecx, dword [ebp - 0x158]
add ecx, 1
mov dword [ebp - 0x158], ecx
mov edx, dword [ebp - 0x758]
add edx, dword [ebp - 0x158]
movsx eax, byte [edx]
test eax, eax
je 0x1000dde6
mov ecx, dword [ebp - 0x158]
movsx edx, byte [ebp + ecx - 0x85c]
test edx, edx
je 0x1000dde6
push ecx
add ecx, 0xddfc
xor ecx, 0x15986
or ecx, 0x30c1
pop ecx
push ecx
push ecx
add esp, 4
and ecx, 0x6b3e
add ecx, 0x72c
add ecx, 0x645e
jmp 0x1000dd92
pop ecx
mov eax, dword [ebp - 0x758]
add eax, dword [ebp - 0x158]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x158]
movsx eax, byte [ebp + edx - 0x85c]
cmp ecx, eax
je 0x1000ddd8
mov ecx, dword [ebp - 0x758]
add ecx, dword [ebp - 0x158]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x158]
movsx ecx, byte [ebp + eax - 0x85c]
cmp edx, ecx
jne 0x1000dddf
jmp 0x1000dd25
jmp 0x1000dde6
push edx
jmp 0x1000ddf0
jmp 0x1000ddf5
sub edx, 0xd4a2
pop edx
push eax
xor eax, 0x1e15
pop eax
push eax
add eax, 0xfa16
add eax, 0x4a5a
xor eax, 0x110d4
pop eax
mov edx, dword [ebp - 0x758]
add edx, dword [ebp - 0x158]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x158]
movsx edx, byte [ebp + ecx - 0x85c]
cmp eax, edx
jne 0x1000de45
mov dword [ebp - 0xc58], 0
jmp 0x1000deb4
push eax
jmp 0x1000de4c
sub eax, 0xca2
or eax, 0x8246
pop eax
push esi
push ebx
add esp, 4
xor esi, 0x42fe
sub esi, 0x1b04
add esi, 0xdb7f
xor esi, 0x11698
pop esi
mov eax, dword [ebp - 0x758]
add eax, dword [ebp - 0x158]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x158]
movsx eax, byte [ebp + edx - 0x85c]
or eax, 0x20
cmp ecx, eax
jge 0x1000deaa
mov dword [ebp - 0xc58], 0xffffffff
jmp 0x1000deb4
mov dword [ebp - 0xc58], 1
cmp dword [ebp - 0xc58], 0
jne 0x1000decb
mov ecx, dword [ebp - 0x1c28]
mov dword [ebp - 0x394], ecx
jmp 0x1000dedc
jmp 0x1000dcb5
mov edx, dword [ebp - 0x75c]
mov dword [ebp - 0x394], edx
cmp dword [ebp - 0x394], 0
je 0x1000dfb7
push ecx
sub ecx, 0xf295
and ecx, 0xa42a
add ecx, 0x13266
pop ecx
push ecx
call 0x1000df0b
add byte [eax], bh
xor esi, dword [edi]
dec eax
cmp cl, byte [eax + 0x3a]
add esp, 4
sub ecx, 0x8d6f
add ecx, 0x93d0
pop ecx
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x1c2c], eax
push edi
call 0x1000df38
add byte [ebx + eax*2], bh
dec esi
inc eax
cmp al, byte ss:[edi + 0x4e]
cmp eax, 0xeb04c483
pop es
inc esp
inc eax
dec esp
inc eax
xor al, 0x3d
dec esi
or edi, 0x68b6
pop edi
push esi
or esi, 0x13cec
or esi, 0x1490c
pop esi
mov ecx, dword [ebp - 0x1c2c]
mov dword [ebp - 0x1c30], ecx
lea edx, [ebp - 0x15cc]
push edx
call dword [ebp - 0x1c30]
test eax, eax
jne 0x1000dfb7
push esi
and esi, 0xcfa2
jmp 0x1000df83
add esi, 0x98c3
pop esi
push esi
push ebx
add esp, 4
xor esi, 0x1066c
or esi, 0x495c
xor esi, 0x652a
and esi, 0x15ab7
pop esi
mov dword [ebp - 0xa44], 0
jmp 0x1000e6a1
push eax
and eax, 0x10782
sub eax, 0xf0f7
call 0x1000dfd1
add byte [ebp + 0x49], cl
cmp bh, byte [edx]
dec esi
dec edi
aas
add esp, 4
pop eax
push esi
or esi, 0xdfc1
or esi, 0xe1a9
add esi, 0xf8a2
pop esi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1c38], edx
mov eax, dword [ebp - 0x1c38]
mov dword [ebp - 0x1564], eax
push edi
push edx
add esp, 4
call 0x1000e022
add byte [0x4243353f], bh
dec esi
inc ebp
add esp, 4
and edi, 0xa588
and edi, 0x5b02
call 0x1000e03e
add byte [edx + 0x46], al
cmp edi, dword [ebx]
xor cl, byte [ebx + 0x3c]
add esp, 4
pop edi
cmp dword [ebp - 0x1564], 0
jne 0x1000e05a
mov dword [ebp - 0x2a4], 0
jmp 0x1000e301
mov ecx, dword [ebp - 0x1564]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc64], eax
push edx
push eax
add esp, 4
and edx, 0x12325
call 0x1000e084
add byte [ecx + 0x4d], al
cmp eax, 0x4e503f3c
add esp, 4
xor edx, 0xbcc3
pop edx
push eax
add eax, 0x12409
jmp 0x1000e09d
pop eax
cmp dword [ebp - 0xc64], 0
jne 0x1000e0b6
mov dword [ebp - 0x2a4], 0
jmp 0x1000e301
mov ecx, dword [ebp - 0xc64]
mov dword [ebp - 0x4d4], ecx
push edx
xor edx, 0xc7b5
pop edx
push edi
push ecx
add esp, 4
jmp 0x1000e0d6
add edi, 0x4050
and edi, 0x78f5
call 0x1000e0f0
add byte [esp + esi], bh
inc ebp
xor esi, dword [edx + eax*2]
cmp al, 0x3f
add esp, 4
pop edi
lea edx, [ebp - 0x15cc]
mov dword [ebp - 0xc60], edx
mov eax, dword [ebp - 0x4d4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc5c], ecx
xor edx, edx
mov word [ebp - 0x1c0], dx
xor eax, eax
mov word [ebp - 0x34], ax
push edx
call 0x1000e12b
add byte [ecx + 0x39], al
xor eax, 0x83444850
les eax, [edx + ebx*2]
push ebx
push edx
add esp, 4
xor ebx, 0x6d4a
sub ebx, 0x1fbe
call 0x1000e14c
add byte [edx + 0x3d], cl
dec edi
dec esp
xor ecx, dword [ecx - 0x7d]
les eax, [ebx + ebx*2]
mov ecx, dword [ebp - 0xc5c]
mov dx, word [ecx]
mov word [ebp - 0xfca], dx
mov eax, dword [ebp - 0xc5c]
add eax, 2
mov dword [ebp - 0xc5c], eax
mov cx, word [ebp - 0xfca]
mov word [ebp - 0x1c0], cx
mov edx, dword [ebp - 0xc60]
mov ax, word [edx]
mov word [ebp - 0xfcc], ax
mov ecx, dword [ebp - 0xc60]
add ecx, 2
mov dword [ebp - 0xc60], ecx
mov dx, word [ebp - 0xfcc]
mov word [ebp - 0x34], dx
push ecx
and ecx, 0xffaa
and ecx, 0x14f91
sub ecx, 0xbd9b
xor ecx, 0x1135a
pop ecx
push ebx
call 0x1000e1ce
add byte [0x3e37424e], dh
cmp al, byte [ebx + 0x5eb04c4]
cmp eax, dword [esi + 0x41]
inc esp
cmp bl, byte [ebx + 0xf]
mov bh, 0x45
int3
push eax
push ecx
add esp, 4
add eax, 0x17971
sub eax, 0x16725
add eax, 0x62eb
pop eax
push eax
push esi
add esp, 4
and eax, 0x6ce7
add eax, 0x814a
pop eax
push edx
xor edx, 0x10178
pop edx
mov eax, dword [ebp - 0x2a4]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x310], ecx
push edi
push edx
add esp, 4
add edi, 0x1e7c
pop edi
push eax
or eax, 0xd324
sub eax, 0xf31e
xor eax, 0xab33
call 0x1000e370
add byte [esi + 0x37], cl
cmp al, 0x47
dec esp
inc ebp
push eax
cmp cl, byte [eax - 0x7d]
les eax, [eax + ebx*2]
mov dword [ebp - 0x76c], 0
mov edx, dword [ebp - 0x310]
mov dword [ebp - 0x1570], edx
cmp dword [ebp - 0x1570], 0
jne 0x1000e3a4
mov eax, dword [ebp - 0x76c]
mov dword [ebp - 0x4d8], eax
jmp 0x1000e695
mov ecx, dword [ebp - 0x1570]
mov edx, dword [ebp - 0x310]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1574], edx
jne 0x1000e3cc
mov eax, dword [ebp - 0x76c]
mov dword [ebp - 0x4d8], eax
jmp 0x1000e695
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1574]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1578], ecx
cmp dword [ebp - 0x1578], 0
jne 0x1000e3fe
mov edx, dword [ebp - 0x76c]
mov dword [ebp - 0x4d8], edx
jmp 0x1000e695
mov eax, dword [ebp - 0x310]
add eax, dword [ebp - 0x1578]
mov dword [ebp - 0x760], eax
jne 0x1000e423
mov ecx, dword [ebp - 0x76c]
mov dword [ebp - 0x4d8], ecx
jmp 0x1000e695
mov edx, dword [ebp - 0x760]
mov eax, dword [ebp - 0x310]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1c3c], eax
mov ecx, dword [ebp - 0x760]
mov edx, dword [ebp - 0x310]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1c40], edx
mov eax, dword [ebp - 0x760]
mov ecx, dword [ebp - 0x310]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1c44], ecx
mov dword [ebp - 0x764], 0
jmp 0x1000e47d
mov edx, dword [ebp - 0x764]
add edx, 1
mov dword [ebp - 0x764], edx
mov eax, dword [ebp - 0x760]
mov ecx, dword [ebp - 0x764]
cmp ecx, dword [eax + 0x18]
jae 0x1000e689
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x1c3c]
mov ecx, dword [ebp - 0x310]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x768], ecx
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x1c40]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1c44]
mov eax, dword [ebp - 0x310]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1c48], eax
mov dword [ebp - 0x15c], 0
jmp 0x1000e4ed
mov ecx, dword [ebp - 0x15c]
add ecx, 1
mov dword [ebp - 0x15c], ecx
mov edx, dword [ebp - 0x768]
add edx, dword [ebp - 0x15c]
movsx eax, byte [edx]
test eax, eax
je 0x1000e59f
mov ecx, dword [ebp - 0x15c]
movsx edx, byte [ebp + ecx - 0x974]
test edx, edx
je 0x1000e59f
push esi
push eax
add esp, 4
xor esi, 0x8306
xor esi, 0xff9a
pop esi
push edi
and edi, 0x13318
add edi, 0x11b50
pop edi
push esi
push esi
add esp, 4
sub esi, 0x4da
jmp 0x1000e54b
pop esi
mov eax, dword [ebp - 0x768]
add eax, dword [ebp - 0x15c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x15c]
movsx eax, byte [ebp + edx - 0x974]
cmp ecx, eax
je 0x1000e591
mov ecx, dword [ebp - 0x768]
add ecx, dword [ebp - 0x15c]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x15c]
movsx ecx, byte [ebp + eax - 0x974]
cmp edx, ecx
jne 0x1000e598
jmp 0x1000e4de
jmp 0x1000e59f
push esi
push ebx
add esp, 4
xor esi, 0x1d5a
and esi, 0x732a
and esi, 0x18583
pop esi
push ecx
sub ecx, 0x28ff
call 0x1000e5cd
add byte [edx + 0x42], al
inc eax
dec esi
inc ecx
inc esi
inc esi
inc esp
add esp, 4
pop ecx
mov edx, dword [ebp - 0x768]
add edx, dword [ebp - 0x15c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x15c]
movsx edx, byte [ebp + ecx - 0x974]
cmp eax, edx
jne 0x1000e5fe
mov dword [ebp - 0xc68], 0
jmp 0x1000e66d
push ebx
push eax
add esp, 4
add ebx, 0x7038
pop ebx
push eax
push eax
add esp, 4
add eax, 0x3a17
sub eax, 0x10a25
xor eax, 0xcfa5
and eax, 0xf3a6
pop eax
push eax
sub eax, 0x4f4e
pop eax
mov eax, dword [ebp - 0x768]
add eax, dword [ebp - 0x15c]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x15c]
movsx eax, byte [ebp + edx - 0x974]
or eax, 0x20
cmp ecx, eax
jge 0x1000e663
mov dword [ebp - 0xc68], 0xffffffff
jmp 0x1000e66d
mov dword [ebp - 0xc68], 1
cmp dword [ebp - 0xc68], 0
jne 0x1000e684
mov ecx, dword [ebp - 0x1c48]
mov dword [ebp - 0x4d8], ecx
jmp 0x1000e695
jmp 0x1000e46e
mov edx, dword [ebp - 0x76c]
mov dword [ebp - 0x4d8], edx
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0xa44], eax
push edi
or edi, 0xc2e5
call 0x1000e6b4
add byte [0x3c473740], bh
inc esp
add esp, 4
jmp 0x1000e6bf
call 0x1000e6cf
add byte [ecx + 0x48], al
cmp cl, byte [ebp + 0x41]
inc ecx
cmp dword [ecx + 0x4e], eax
cmp eax, 0x5f04c483
mov ecx, dword [ebp - 0xa44]
mov dword [ebp - 0x1c4c], ecx
lea edx, [ebp - 0xc6c]
push edx
push 0x40
mov eax, dword [ebp - 0x157c]
push eax
mov ecx, dword [ebp - 0x390]
push ecx
call dword [ebp - 0x1c4c]
test eax, eax
jne 0x1000e746
push eax
and eax, 0x7116
and eax, 0x10b6b
and eax, 0x17b4a
pop eax
push ecx
push esi
add esp, 4
sub ecx, 0x143b5
pop ecx
push ebx
push ecx
add esp, 4
or ebx, 0xf24c
and ebx, 0x1dd1
pop ebx
mov edx, dword [ebp - 0x774]
mov dword [ebp - 0x1c50], edx
push 0
call dword [ebp - 0x1c50]
mov eax, dword [ebp - 0x1c54]
mov dword [ebp - 0x770], eax
jmp 0x1000e763
mov ecx, dword [ebp - 0x770]
add ecx, 1
mov dword [ebp - 0x770], ecx
mov edx, dword [ebp - 0x770]
cmp edx, dword [ebp - 0xa48]
jae 0x1000e7bf
push ebx
push esi
add esp, 4
sub ebx, 0x119ee
add ebx, 0x5871
xor ebx, 0xc059
pop ebx
push edi
sub edi, 0x973f
pop edi
push eax
push edx
add esp, 4
jmp 0x1000e79c
or eax, 0x1a4d
pop eax
movzx eax, byte [ebp - 0x3a5]
mov ecx, dword [ebp - 0x770]
movsx edx, byte [ecx]
sub edx, eax
mov eax, dword [ebp - 0x770]
mov byte [eax], dl
jmp 0x1000e754
mov ecx, dword [ebp - 0xa44]
mov dword [ebp - 0x1c58], ecx
lea edx, [ebp - 0xc6c]
push edx
mov eax, dword [ebp - 0xc6c]
push eax
mov ecx, dword [ebp - 0x157c]
push ecx
mov edx, dword [ebp - 0x390]
push edx
call dword [ebp - 0x1c58]
test eax, eax
jne 0x1000e837
push edx
push edi
add esp, 4
or edx, 0x9d09
xor edx, 0x13c3e
sub edx, 0xda91
pop edx
push eax
jmp 0x1000e813
call fcn.1000e81f
add byte [edi + eax*2], dh
aaa
dec ebx
dec edx
dec ecx