Function at 0x420f08
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push esi
call 0x41d318
add byte [esi], bh
dec eax
cmp byte [edx], bh
inc esi
push eax
add esp, 4
call 0x41d32b
add byte [edx], dh
dec eax
aas
xor al, byte [edx + 0x3e]
dec ebx
inc eax
xor eax, 0x4c48332
pop esi
push ebx
jmp 0x41d336
and ebx, 0x16ebe
pop ebx
mov edx, dword [ebp - 0x30]
add edx, 0x138
imul eax, dword [ebp - 0x2c], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x2c], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c80], edx
push ecx
jmp 0x41d36f
sub ecx, 0x4521
jmp 0x41d37b
pop ecx
push ebx
or ebx, 0x13352
add ebx, 0x10888
and ebx, 0x15c58
jmp 0x41d398
pop ebx
mov edx, dword [ebp - 0x1c80]
add edx, 1
mov dword [ebp - 0x1494], edx
push esi
push edx
add esp, 4
add esi, 0x2d25
sub esi, 0x108c6
pop esi
push ecx
xor ecx, 0x1028f
pop ecx
push ebx
push edi
add esp, 4
xor ebx, 0x1563f
xor ebx, 0x3e8f
xor ebx, 0xdbc1
pop ebx
push eax
push ecx
add esp, 4
or eax, 0xd65f
and eax, 0x3344
pop eax
push edx
push esi
add esp, 4
xor edx, 0x1189b
jmp 0x41d3ff
add edx, 0x48df
xor edx, 0x179
pop edx
imul eax, dword [ebp - 0x2c], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x2c], 0x138
sub eax, ecx
xor eax, dword [ebp - 0x1494]
imul eax, dword [ebp - 0x2c]
imul edx, dword [ebp - 0x2c], 0x138
sub eax, edx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x1494]
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1d24], eax
mov dword [ebp - 0x1520], 1
push ebx
push ebx
add esp, 4
and ebx, 0x17521
sub ebx, 0xf5d4
and ebx, 0xb181
pop ebx
push ecx
and ecx, 0xf885
xor ecx, 0x11019
xor ecx, 0x2986
xor ecx, 0x16c33
pop ecx
imul ecx, dword [ebp - 0x1520], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x1520], 0x138
loopne 0x41d481
invalid
invalid
cmp byte [ecx], al
add byte [eax], al
sub ecx, edx
xor ecx, dword [ebp - 0x1d24]
imul ecx, dword [ebp - 0x1520]
imul eax, dword [ebp - 0x1520], 0x138
sub ecx, eax
mov dword [ebp - 0x1524], ecx
mov ecx, dword [ebp - 0xfb0]
mov edx, dword [ebp - 0xfac]
mov dword [ebp - 0x152c], ecx
mov dword [ebp - 0x1528], edx
push ecx
xor ecx, 0x1762e
call 0x41d4ed
add byte [ebp + esi + 0x4c], al
dec eax
dec esp
aaa
dec esi
inc esp
dec ebx
inc eax
add esp, 4
xor ecx, 0xb610
pop ecx
push edx
jmp 0x41d4ff
pop edx
push ebx
sub ebx, 0x1bc5
pop ebx
push edx
and edx, 0xddc0
add byte [eax], al
or edx, 0x2fae
jmp 0x41d51a
xor edx, 0x16921
pop edx
push edx
push ecx
add esp, 4
call 0x41d536
add byte [0x3f3b4049], dh
cmp cl, byte [edi + 0x34]
cmp dh, byte [0x5a04c483]
mov eax, dword [ebp - 0x30]
add eax, 0x138
imul ecx, dword [ebp - 0x2c], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x2c], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1d2c], eax
push edi
call 0x41d571
add byte [edx], bh
inc ebx
inc esi
xor cl, byte [esi + ecx*2 - 0x7d]
les eax, [edi + ebx*2]
push ebx
add ebx, 0x16577
or ebx, 0xb6bc
call 0x41d592
add byte [ebp + 0x3c], cl
inc esi
aas
cmp al, 0x3f
inc ecx
cmp dword [ecx], edi
dec ecx
add esp, 4
pop ebx
mov eax, dword [ebp - 0x152c]
add eax, 0x138
imul ecx, dword [ebp - 0x1528], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x1528], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x1528]
mov dword [ebp - 0x1d28], eax
mov eax, dword [ebp - 0x1d28]
mov dword [ebp - 0x1d30], eax
mov ecx, dword [ebp - 0x1d2c]
cmp ecx, dword [ebp - 0x1d30]
jae 0x41d5f2
mov dword [ebp - 0x149c], 1
jmp 0x41d5fc
mov dword [ebp - 0x149c], 0
mov dl, byte [ebp - 0x149c]
mov byte [ebp - 0x382], dl
movzx eax, byte [ebp - 0x382]
test eax, eax
je 0x42066f
push edi
push edx
add esp, 4
call 0x41d62b
add byte [ecx + 0x48], cl
aas
dec ebx
cmp byte [ebx], dh
inc ebx
inc edi
add esp, 4
xor edi, 0x279c
pop edi
push esi
xor esi, 0x16271
xor esi, 0x5da9
xor esi, 0x159ec
pop esi
push ebx
and ebx, 0x11322
and ebx, 0x963b
and ebx, 0x18479
pop ebx
push eax
xor eax, 0x13d35
call 0x41d671
add byte [eax], bh
inc eax
cmp eax, 0x83384240
les eax, [ecx + eax*4]
call fcn.00429059
pop eax
mov ecx, dword [ebp - 0x30]
add ecx, 0x138
imul edx, dword [ebp - 0x2c], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x2c], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1d34], ecx
mov ecx, dword [ebp - 0x1d34]
mov dword [ebp - 0x1d38], ecx
cmp dword [ebp - 0x1d38], 0x63c1
jne 0x41d7f6
push esi
push eax
add esp, 4
jmp 0x41d6cf
pop esi
push edi
push esi
add esp, 4
call 0x41d6e2
add byte [edx], bh
dec esp
cmp dword [ebp + 0x3c], eax
cmp eax, 0x4c4833f
pop edi
push edi
and edi, 0xabca
xor edi, 0x15636
pop edi
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x1d3c], edx
mov edx, dword [ebp - 0x1d3c]
mov dword [ebp - 0x1d40], edx
mov eax, dword [ebp - 0x1d40]
sub eax, 0x898
mov dword [ebp - 0x1d44], eax
mov dword [ebp - 0xfb4], 1
push edx
push edx
add esp, 4
xor edx, 0x1153a
call 0x41d75e
add byte [ecx + 0x44], al
inc ebp
cmp byte [edi + edi + 0x3d], cl
dec edi
add esp, 4
xor edx, 0x8145
call 0x41d773
add byte [esi + 0x49], cl
inc ebx
dec edi
xor eax, 0x5a04c483
imul ecx, dword [ebp - 0xfb4], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0xfb4], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1d44]
imul ecx, dword [ebp - 0xfb4]
imul eax, dword [ebp - 0xfb4], 0x138
sub ecx, eax
mov dword [ebp - 0xfb8], ecx
mov ecx, dword [ebp - 0xfb8]
mov edx, dword [ebp - 0xfb4]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], edx
push eax
push esi
add esp, 4
or eax, 0xd457
xor eax, 0x9c6f
sub eax, 0x14ef5
pop eax
push esi
xor esi, 0xd69f
add esi, 0x718
and esi, 0xf14b
sub esi, 0x1185
pop esi
push eax
push esi
add esp, 4
xor eax, 0x10dab
pop eax
push edi
xor edi, 0xb83c
sub edi, 0xb99
pop edi
push esi
push esi
add esp, 4
or esi, 0x1689a
add esi, 0x17f0
sub esi, 0x6b5d
pop esi
mov eax, dword [ebp - 0x14]
add eax, 0x138
imul ecx, dword [ebp - 0x10], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x10], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x1d48], eax
mov eax, dword [ebp - 0x1d48]
mov dword [ebp - 0x1db8], eax
lea ecx, [ebp - 0x928]
mov dword [ebp - 0x3bc], ecx
mov edx, dword [ebp - 0x3bc]
mov dword [edx + 4], 1
push esi
and esi, 0x107bd
call 0x41d88a
add byte [0x3a41344b], bh
dec ebx
add esp, 4
add esi, 0xda45
pop esi
push ebx
push eax
add esp, 4
sub ebx, 0x153e8
jmp 0x41d8a8
pop ebx
mov eax, dword [ebp - 0x3bc]
imul ecx, dword [eax + 4], 0x138
add ecx, 0x44f3644b
mov edx, dword [ebp - 0x3bc]
imul eax, dword [edx + 4], 0x138
sub ecx, eax
xor ecx, 0x23
mov edx, dword [ebp - 0x3bc]
imul ecx, dword [edx + 4]
mov eax, dword [ebp - 0x3bc]
imul edx, dword [eax + 4], 0x138
sub ecx, edx
mov eax, dword [ebp - 0x3bc]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x3bc]
mov dword [ebp - 0x1f58], ecx
push ecx
push ebx
add esp, 4
or ecx, 0x2f94
pop ecx
push edi
or edi, 0xf550
add edi, 0x3c0a
or edi, 0x3fa7
pop edi
push ecx
push esi
add esp, 4
jmp 0x41d927
jmp 0x41d92c
pop ecx
mov dword [ebp - 0x14a4], 1
push eax
call 0x41d945
add byte [ebx + eax*2], dh
aaa
inc esp
cmp cl, byte [edx + 0x4b]
add esp, 4
or eax, 0x7bb8
and eax, 0x150d
pop eax
push ebx
xor ebx, 0x180d6
sub ebx, 0xaf30
xor ebx, 0x9005
pop ebx
mov dword [ebp - 0x1f5c], 0x38
mov dword [ebp - 0x1f60], 0xe6
mov dword [ebp - 0x1f64], 0x6e
mov dword [ebp - 0x1f68], 0x6e
mov dword [ebp - 0x1f6c], 0x78
mov dword [ebp - 0x1530], 1
push edx
xor edx, 0x13af6
or edx, 0x11aa7
sub edx, 0x1e25
or edx, 0x9b10
pop edx
push ebx
push edi
add esp, 4
or ebx, 0xdcb7
xor ebx, 0xf2ec
and ebx, 0x17677
pop ebx
imul edx, dword [ebp - 0x1530], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x1530], 0x138
sub edx, eax
xor edx, 0xe6
imul edx, dword [ebp - 0x1530]
imul ecx, dword [ebp - 0x1530], 0x138
sub edx, ecx
mov dword [ebp - 0x1534], edx
push edx
push edx
add esp, 4
and edx, 0xcc29
jmp 0x41da22
and edx, 0x824f
pop edx
push ecx
push ebx
add esp, 4
call 0x41da3a
add byte [esi], bh
push eax
dec ebx
dec edi
xor eax, 0x4c48333
add ecx, 0x13647
pop ecx
push ecx
or ecx, 0x87ad
pop ecx
push edi
push ecx
add esp, 4
xor edi, 0x8929
pop edi
push ebx
push edi
add esp, 4
jmp 0x41da63
call 0x41da72
add byte [esi + 0x3d], al
inc ecx
inc ebx
dec ecx
dec edi
aaa
xor edi, dword [ecx]
add esp, 4
pop ebx
mov edx, dword [ebp - 0x928]
add edx, 0x138
imul eax, dword [ebp - 0x924], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x924], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x924]
mov dword [ebp - 0x1d4c], edx
mov edx, dword [ebp - 0x1d4c]
mov dword [ebp - 0x1d50], edx
mov eax, dword [ebp - 0x1d50]
sub eax, 0x6e
mov dword [ebp - 0x1d54], eax
mov dword [ebp - 0xa08], 1
push ecx
push esi
add esp, 4
add ecx, 0x314f
pop ecx
push eax
xor eax, 0xa30e
pop eax
push ebx
push edx
add esp, 4
add ebx, 0x12190
sub ebx, 0xe14
and ebx, 0x1a76
add ebx, 0x163b9
pop ebx
imul ecx, dword [ebp - 0xa08], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0xa08], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1d54]
imul ecx, dword [ebp - 0xa08]
imul eax, dword [ebp - 0xa08], 0x138
sub ecx, eax
mov dword [ebp - 0xa0c], ecx
push ecx
push edx
add esp, 4
add ecx, 0xf99e
xor ecx, 0x13f76
and ecx, 0x7bb9
pop ecx
push ebx
push eax
add esp, 4
xor ebx, 0x180ce
pop ebx
push edi
and edi, 0xd571
xor edi, 0x18320
pop edi
mov ecx, dword [ebp - 0x928]
add ecx, 0x138
imul edx, dword [ebp - 0x924], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x924], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x924]
mov dword [ebp - 0x1d58], ecx
mov ecx, dword [ebp - 0x1d58]
mov dword [ebp - 0x1d5c], ecx
mov edx, dword [ebp - 0x1d5c]
add edx, 0x38
mov dword [ebp - 0x1d60], edx
mov dword [ebp - 0xa10], 1
push ecx
call 0x41dbdb
add byte [eax + 0x34], cl
cmp edi, dword [0x3c4f4347]
add esp, 4
sub ecx, 0x1773
pop ecx
push esi
or esi, 0xca32
jmp 0x41dbf1
add esi, 0x840
or esi, 0x7fc6
pop esi
imul eax, dword [ebp - 0xa10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0xa10], 0x138
sub eax, ecx
xor eax, dword [ebp - 0x1d60]
imul eax, dword [ebp - 0xa10]
imul edx, dword [ebp - 0xa10], 0x138
sub eax, edx
mov dword [ebp - 0xa14], eax
push edx
push ecx
add esp, 4
jmp 0x41dc45
sub edx, 0xe163
sub edx, 0xf1ff
pop edx
push ebx
push edx
add esp, 4
or ebx, 0x2f1d
or ebx, 0x10e9f
add ebx, 0x16694
pop ebx
push ebx
push eax
add esp, 4
or ebx, 0xb7a9
or ebx, 0x7b26
xor ebx, 0x71f8
sub ebx, 0xc54c
pop ebx
push esi
push esi
add esp, 4
jmp 0x41dc95
sub esi, 0x1d4f
pop esi
mov dword [ebp - 0x2d0], 1
push edx
or edx, 0x66fb
pop edx
push ecx
push ebx
add esp, 4
and ecx, 0x132b9
add ecx, 0x3a4b
pop ecx
push ebx
push ebx
add esp, 4
or ebx, 0xa38a
sub ebx, 0x18436
and ebx, 0xfa11
pop ebx
imul eax, dword [ebp - 0x2d0], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x2d0], 0x138
sub eax, ecx
xor eax, 2
imul eax, dword [ebp - 0x2d0]
imul edx, dword [ebp - 0x2d0], 0x138
sub eax, edx
mov dword [ebp - 0x2d4], eax
push edx
push edx
add esp, 4
jmp 0x41dd1c
add edx, 0x1770
pop edx
push esi
push ebx
add esp, 4
add esi, 0x99a6
pop esi
push eax
push ecx
add esp, 4
and eax, 0x13498
add eax, 0x14ecc
pop eax
mov eax, dword [ebp - 0x928]
mov ecx, dword [ebp - 0x924]
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x250], ecx
jmp 0x41df2f
push edi
push esi
add esp, 4
add edi, 0x46ba
and edi, 0x6ea7
pop edi
push ecx
push ecx
add esp, 4
sub ecx, 0x472
push eax
push ebx
add esp, 4
xor eax, 0x7664
or eax, 0x2867
pop eax
push ebx
push edi
add esp, 4
sub ebx, 0xc43f
pop ebx
push ebx
or ebx, 0x1588f
pop ebx
push edi
push eax
add esp, 4
sub edi, 0xdc22
pop edi
push ebx
push edx
add esp, 4
and ebx, 0x58b6
add ebx, 0x142d5
pop ebx
push esi
push ebx
add esp, 4
and esi, 0xa22c
or esi, 0x13ddb
and esi, 0x994a
jmp 0x41ecc7
pop esi
imul ecx, dword [ebp - 0x248], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x248], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x14a8]
imul ecx, dword [ebp - 0x248]
imul eax, dword [ebp - 0x248], 0x138
sub ecx, eax
mov dword [ebp - 0x24c], ecx
mov ecx, dword [ebp - 0x14a8]
imul ecx, dword [ebp - 0x248]
mov dword [ebp - 0x1de4], ecx
mov dword [ebp - 0x1548], 1
push eax
call 0x41ed2e
add byte [edx + 0x35], cl
cmp al, byte [edx + 0x3a]
aaa
dec ebx
add esp, 4
add eax, 0xaa21
or eax, 0x165ed
add byte [eax + 0x56], bl
xor esi, 0x3a9
pop esi
push edi
push eax
add esp, 4
xor edi, 0x113c4
pop edi
imul edx, dword [ebp - 0x1548], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x1548], 0x138
sub edx, eax
xor edx, dword [ebp - 0x1de4]
imul edx, dword [ebp - 0x1548]
imul ecx, dword [ebp - 0x1548], 0x138
sub edx, ecx
mov dword [ebp - 0x154c], edx
push ebx
push esi
add esp, 4
xor ebx, 0x38d1
add ebx, 0x13169
and ebx, 0x47de
jmp 0x41edac
pop ebx
push edx
push esi
add esp, 4
and edx, 0x4ac7
or edx, 0x15afd
pop edx
mov edx, dword [ebp - 0x24c]
add edx, 0x138
imul eax, dword [ebp - 0x248], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x248], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x248]
mov dword [ebp - 0x1de8], edx
mov edx, dword [ebp - 0x1de8]
mov dword [ebp - 0x1dec], edx
cmp dword [ebp - 0x1dec], 0
jbe 0x41f303
push edi
push ebx
add esp, 4
sub edi, 0x110ee
add edi, 0x13c94
add edi, 0x6511
pop edi
push edx
xor edx, 0x138b9
call 0x41ee3c
add byte [esp + esi], dh
inc esp
inc ecx
dec ebx
aas
dec edx
cmp al, byte [ebx - 0x74a5fb3c]
test dword [ebp + edi*8 + 0x3805ffff], esi
add dword [eax], eax
add byte [ecx - 0x73], ch
mov eax, 0x38fffffd
add dword [eax], eax
add byte [ecx - 0xc9bb43f], al
inc esp
imul edx, dword [ebp - 0x248], 0x138
cmp byte [ecx], al
add byte [eax], al
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x248]
mov dword [ebp - 0x1df0], eax
mov eax, dword [ebp - 0x1df0]
mov dword [ebp - 0x1dfc], eax
push edx
push ebx
add esp, 4
and edx, 0x516
add byte [eax], al
xor edx, 0xd1d4
and edx, 0x175b7
pop edx
push ecx
push ebx
add esp, 4
jmp 0x41eea7
xor ecx, 0xcb41
xor ecx, 0x215a
pop ecx
mov ecx, dword [ebp - 0xa1c]
add ecx, 0x138
imul edx, dword [ebp - 0xa18], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0xa18], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0xa18]
mov dword [ebp - 0x1df4], ecx
mov ecx, dword [ebp - 0x1df4]
mov dword [ebp - 0x1df8], ecx
mov edx, dword [ebp - 0x14ac]
imul edx, dword [ebp - 0x1df8]
cmp dword [ebp - 0x1dfc], edx
jne 0x41f086
push esi
jmp 0x41ef16
xor esi, 0xea1
call 0x41ef2a
add byte [eax + edx*2 + 0x3d], al
inc esp
push eax
aaa
inc ebp
inc ebp
add esp, 4
pop esi
push esi
push eax
add esp, 4
jmp 0x41ef3b
xor esi, 0x1440e
pop esi
push edx
add edx, 0x11fd8
pop edx
push esi
push ecx
add esp, 4
or esi, 0x14499
pop esi
push esi
and esi, 0x8e06
pop esi
push ecx
jmp 0x41ef67
xor ecx, 0x90a0
xor ecx, 0x169a5
pop ecx
mov eax, dword [ebp - 0x2cc]
add eax, 0x138
imul ecx, dword [ebp - 0x2c8], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x2c8], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x1e00], eax
mov eax, dword [ebp - 0x1e00]
mov dword [ebp - 0x1e04], eax
mov ecx, dword [ebp - 0x1e04]
jmp [ecx - 0x6b]
push ebx
jmp 0x41f30b
call 0x41f317
add byte [ebx + 0x4e], cl
inc edi
xor cl, byte [esp + ecx*2 - 0x7d]
les eax, [ecx + eax*4]
jecxz 0x41f2a1
xchg ebx, eax
add byte [eax], al
pop ebx
push eax
add eax, 0x220e
add eax, 0x5807
and eax, 0x4d36
pop eax
mov edx, dword [ebp - 0x2cc]
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x1f14], edx
mov dword [ebp - 0x1f10], eax
lea ecx, [ebp - 0x1f14]
mov dword [ebp - 0x1e28], ecx
mov edx, dword [ebp - 0x1e28]
mov dword [ebp - 0xa70], edx
push edx
push edi
add esp, 4
xor edx, 0xb2d8
and edx, 0x16a4e
pop edx
push ecx
and ecx, 0x101b9
and ecx, 0x13a73
xor ecx, 0x11b52
pop ecx
push ecx
push esi
add esp, 4
or ecx, 0x3da0
pop ecx
mov eax, dword [ebp - 0xa70]
mov ecx, dword [eax]
add ecx, 0x138
mov edx, dword [ebp - 0xa70]
imul eax, dword [edx + 4], 0x138
add eax, 0x44f3644b
mov edx, dword [ebp - 0xa70]
imul edx, dword [edx + 4], 0x138
sub eax, edx
xor ecx, eax
mov eax, dword [ebp - 0xa70]
imul ecx, dword [eax + 4]
mov dword [ebp - 0x1e2c], ecx
mov ecx, dword [ebp - 0x1e2c]
mov dword [ebp - 0x1e34], ecx
mov edx, dword [ebp - 0x1e30]
add edx, dword [ebp - 0x1e34]
mov dword [ebp - 0x1e38], edx
mov dword [ebp - 0xfe4], 1
push edi
push esi
add esp, 4
xor edi, 0xe161
pop edi
push edx
and edx, 0x2c3d
or edx, 0x6728
jmp 0x41f41f
call 0x41f42e
add byte [edi], bh
aas
dec esp
cmp cl, byte [ecx + edi + 0x43]
dec ebx
dec eax
add esp, 4
pop edx
imul eax, dword [ebp - 0xfe4], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0xfe4], 0x138
sub eax, ecx
xor eax, dword [ebp - 0x1e38]
imul eax, dword [ebp - 0xfe4]
imul edx, dword [ebp - 0xfe4], 0x138
sub eax, edx
mov dword [ebp - 0xfe8], eax
mov eax, dword [ebp - 0xfe8]
mov ecx, dword [ebp - 0xfe4]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], ecx
push edx
jmp 0x41f487
pop edx
push edx
sub edx, 0x7071
add edx, 0x10ce0
ret 0xce0
add dword [eax], eax
sub edx, 0x3b5a
jmp 0x41f4a1
pop edx
push edi
and edi, 0x10ecf
or edi, 0x4bb9
pop edi
mov edx, dword [ebp - 0x30]
add edx, 0x138
imul eax, dword [ebp - 0x2c], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x2c], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1e3c], edx
mov edx, dword [ebp - 0x1e3c]
mov dword [ebp - 0x1e40], edx
cmp dword [ebp - 0x1e40], 0xdd8
jne 0x41f62b
push eax
add eax, 0xb723
add eax, 0x5073
jmp 0x41f50b
call fcn.0041f518
add byte [edi + 0x33], cl
cmp eax, 0x4a3e503d
push ecx
push edi
add esp, 4
xor ecx, 0x13468
and ecx, 0x1b0e
and ecx, 0x1e67
sub ecx, 0xb5e8
pop ecx
push ecx
call 0x41f659
add byte [0x44394939], dh
aaa
cmp byte [edx], dh
aas
add esp, 4
pop ecx
push edx
and edx, 0xc96f
pop edx
push edx
xor edx, 0x5e3a
add edx, 0xff23
xor edx, 0xc5be
pop edx
push edx
sub edx, 0x7a5
pop edx
push ebx
sub ebx, 0x422e
or ebx, 0x7c0b
pop ebx
mov ecx, dword [ebp - 0x30]
add ecx, 0x138
imul edx, dword [ebp - 0x2c], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x2c], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1e50], ecx
mov ecx, dword [ebp - 0x1e50]
mov dword [ebp - 0x1e54], ecx
cmp dword [ebp - 0x1e54], 0x9e7
jne 0x42066a
push ebx
push edx
add esp, 4
call 0x41f6e8
add byte [ecx + 0x46], al
push eax
cmp eax, dword ds:[ecx + 0x3d]
add esp, 4
xor ebx, 0xc225
sub ebx, 0xd180
jmp 0x41f6ff
pop ebx
push edx
sub edx, 0x1867b
pop edx
push eax
push esi
add esp, 4
sub eax, 0xf4de
sub eax, 0xccf5
xor eax, 0x158a4
pop eax
push edx
add edx, 0x98fa
add edx, 0x8831
add edx, 0x13466
sub edx, 0x58fe
pop edx
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x1e58], edx
mov edx, dword [ebp - 0x1e58]
mov dword [ebp - 0x1e5c], edx
mov eax, dword [ebp - 0x1e5c]
sub eax, 0xec
mov dword [ebp - 0x1e60], eax
mov dword [ebp - 0xff4], 1
or al, 0xf0
invalid
inc dword [ecx]
add byte [eax], al
add byte [edx + 0x57], dl
add esp, 4
xor edx, 0xb36
jmp 0x41f79f
jmp 0x41f7a8
sub edx, 0xfab8
pop edx
push edi
and edi, 0xb094
add edi, 0xee85
pop edi
imul ecx, dword [ebp - 0xff4], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0xff4], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1e60]
imul ecx, dword [ebp - 0xff4]
imul eax, dword [ebp - 0xff4], 0x138
sub ecx, eax
mov dword [ebp - 0xff8], ecx
mov ecx, dword [ebp - 0xff8]
mov edx, dword [ebp - 0xff4]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], edx
push ebx
or ebx, 0x112d9
and ebx, 0x2496
pop ebx
push edx
push eax
add esp, 4
xor edx, 0x11ad5
call 0x41f832
add byte [edi + 0x3b], cl
dec ebp
inc ebp
xor al, 0x41
push eax
xor eax, dword [esi - 0x7d]
les eax, [ecx + eax*4]
retf 0x6908
invalid
pushfd
int3
invalid
mov dword [ebp - 0x3c0], 0
call 0x42067e
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x3c0], eax
push ecx
push eax
add esp, 4
add ecx, 0x91ff
and ecx, 0x13ded
or ecx, 0x8646
xor ecx, 0xa318
pop ecx
push esi
sub esi, 0x32b0
add esi, 0x57f8
add esi, 0x93dd
pop esi
mov ecx, dword [ebp - 0x1fa0]
mov dword [ebp - 0x14b8], ecx
push ecx
push eax
add esp, 4
sub ecx, 0xa809
add ecx, 0x3deb
xor ecx, 0x15200
pop ecx
push eax
call 0x4206f0
add byte [ecx + 0x4e], cl
dec esi
inc esp
dec ebx
cmp bh, byte [esi]
dec eax
inc esp
add esp, 4
and eax, 0xac52
pop eax
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
inc esp
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x14b8], edx
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x1ef8], edx
mov eax, dword [ebp - 0x1ef8]
add eax, dword [ebp - 0x14b8]
mov dword [ebp - 0x3c0], eax
push ebx
push ecx
add esp, 4
xor ebx, 0x7797
pop ebx
push esi
or esi, 0x168
or esi, 0x829b
and esi, 0xdb76
call 0x420770
add byte [ebx + 0x3a], cl
xor al, 0x47
inc eax
cmp byte [esi + 0x5e04c483], dh
mov byte [ebp - 0xb78], 0x52
mov byte [ebp - 0xb77], 0xb9
mov byte [ebp - 0xb76], 0x10
mov byte [ebp - 0xb75], 0x10
mov byte [ebp - 0xb74], 0x10
mov byte [ebp - 0xb73], 0x10
mov byte [ebp - 0xb72], 0x5a
push eax
and eax, 0xb4c1
pop eax
push ecx
push ebx
add esp, 4
call 0x4207bf
add byte [edx + 0x48], al
inc esp
inc ebx
cmp bh, byte [ecx]
add esp, 4
pop ecx
push eax
xor eax, 0xe705
or eax, 0xf33a
sub eax, 0x1421e
pop eax
mov byte [ebp - 0xb80], 0x52
mov byte [ebp - 0xb7f], 0xb9
mov byte [ebp - 0xb7e], 0x20
mov byte [ebp - 0xb7d], 0x20
mov byte [ebp - 0xb7c], 0x20
mov byte [ebp - 0xb7b], 0x20
mov byte [ebp - 0xb7a], 0x5a
push edx
or edx, 0x5467
xor edx, 0x4320
sub edx, 0xdd25
call 0x42082b
add byte [eax + 0x37], cl
aas
dec ebx
cmp al, 0x32
cmp eax, dword [ebx + 0x3a]
xor al, byte [ebx + 0x565a04c4]
jmp 0x420839
pop esi
mov dword [ebp - 0x1fa4], 0xe
push esi
call 0x420854
add byte [eax + 0x46], al
dec esp
dec esp
xor edi, dword [esi]
inc ebp
inc ebp
dec ebp
add esp, 4
pop esi
push edx
push edx
add esp, 4
xor edx, 0x128f5
call 0x420872
add byte [edi], bh
xor eax, 0x3840483a
inc esi
inc ebp
add esp, 4
pop edx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb78]
mov dword [ebp - 0x14bc], eax
push ebx
sub ebx, 0x10217
add ebx, 0x10143
pop ebx
push esi
sub esi, 0x12b8c
sub esi, 0xa787
pop esi
push edx
push eax
add esp, 4
call 0x4208b9
add byte [ebx], bh
dec eax
xor al, 0x3f
dec esp
cmp byte [ebx - 0x7d], al
les eax, [edx + ebx*2]
mov dword [ebp - 0x1fa8], 0xffffffff
push edx
call 0x4208d6
add byte [eax + 0x3b], cl
inc ebp
xor al, 0x4d
dec ebp
dec ebx
xor al, 0x83
les eax, [edx + ebx*2]
push edx
push esi
add esp, 4
xor edx, 0x135ee
xor edx, 0x3489
and edx, 0x8b3f
jmp 0x4208f8
pop edx
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4cc], ecx
jmp 0x420916
mov edx, dword [ebp - 0x4cc]
add edx, 1
mov dword [ebp - 0x4cc], edx
push esi
push edx
add esp, 4
call 0x420927
add byte [esp + edi], bh
dec esp
dec esp
push eax
dec edi
add esp, 4
sub esi, 0x10b85
pop esi
push edi
push eax
add esp, 4
call 0x420944
add byte [edx + 0x34], al
cmp bh, byte [esi]
aaa
cmp ecx, dword [edx + 0x3e]
add esp, 4
pop edi
mov eax, dword [ebp - 0x4cc]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x420990
push edi
jmp 0x420961
pop edi
push esi
push esi
add esp, 4
and esi, 0xbd86
add byte [eax], al
jmp 0x420973
jmp 0x42097c
pop esi
push esi
xor esi, 0x889
sub esi, 0x16a5a
pop esi
jmp 0x420bbe
mov dword [ebp - 0xc08], 7
mov ecx, dword [ebp - 0x4cc]
mov dword [ebp - 0xa68], ecx
push edx
push edx
add esp, 4
xor edx, 0x7679
add edx, 0xacc7
sub edx, 0xc1c5
pop edx
push edx
sub edx, 0x4269
and edx, 0xe5af
sub edx, 0x4dcc
xor edx, 0xf731
pop edx
mov edx, dword [ebp - 0x14bc]
mov dword [ebp - 0xa64], edx
inc edi
test esp, esi
invalid
invalid
inc dword [eax]
add byte [eax], al
add byte [ebx - 0x4cb7b], cl
invalid
cmp eax, dword [ebp - 0x14bc]
test dword [ebx + ebp*8 - 1], eax
push dword [ebp + 0x43]
push edx
call 0x420a0c
add byte [eax + 0x4e], dl
cmp eax, 0x3f353748
aaa
xor eax, 0x834f4b3f
les eax, [ecx + eax*4]
ret 0xdb89
add byte [eax], al
xor edx, 0xbc16
and edx, 0x1005e
pop edx
push edi
push eax
add esp, 4
and edi, 0x1052e
pop edi
mov ecx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], ecx
jmp 0x420b70
cmp dword [ebp - 0xc08], 0
jle 0x420b64
push edi
call 0x420a5a
add byte [ecx + 0x47], cl
inc ebx
xor bh, byte ss:[ecx]
cmp eax, 0x8104c483
imul ecx
jle 0x420a62
add byte [ecx + 0x10af5cf], al
mov edx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], edx
cmp dword [ebp - 0x14c4], 0
jne 0x420bb9
push esi
xor esi, 0x11482
and esi, 0x124d2
pop esi
push ebx
sub ebx, 0x4ad2
xor ebx, 0xec1f
or ebx, 0x48cf
call 0x420ba7
add byte [eax + 0x37], dl
xor edi, dword [ebx]
xor eax, dword [edi + eax*2 - 0x7d]
les eax, [ebx + ebx*2]
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x3cc], eax
jmp 0x420bfa
jmp 0x420907
push ebx
push edx
add esp, 4
jmp 0x420bca
or ebx, 0x11de9
pop ebx
push ebx
push ebx
add esp, 4
sub ebx, 0x11f46
call 0x420bec
add byte [edi + 0x40], al
push eax
dec ebx
cmp cl, byte [eax + 0x3e]
dec esi
dec edi
dec edi
add esp, 4
pop ebx
mov dword [ebp - 0x3cc], 0
push ebx
push esi
add esp, 4
or ebx, 0x40b7
pop ebx
push edx
push edx
add esp, 4
xor edx, 0xfd37
or edx, 0xfc8a
add byte [ecx + 0x1347aea], al
add byte [edx + 0x50], bl
and eax, 0x87a
xor eax, 0x1769a
pop eax
push edx
push ecx
add esp, 4
and edx, 0xf315
pop edx
push ecx
push esi
add esp, 4
and ecx, 0x10d81
xor ecx, 0x3eee
xor ecx, 0x2d67
pop ecx
push eax
sub eax, 0x540a
sub eax, 0x11df8
pop eax
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push eax
push edx
add esp, 4
jmp 0x420c80
or eax, 0x15344
pop eax
push ebx
sub ebx, 0x8c69
pop ebx
push eax
sub eax, 0x8435
jmp 0x420c9e
and eax, 0x9b8f
pop eax
mov dword [ebp - 0x1fac], 0xffffffff
push edi
push eax
add esp, 4
add edi, 0x13d75
sub edi, 0x9afa
pop edi
push eax
or eax, 0x477d
pop eax
push edx
push esi
add esp, 4
or edx, 0x1470f
add edx, 0x1820c
sub edx, 0x12743
pop edx
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x420cfe
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push edx
sub edx, 0x127ed
sub edx, 0x16884
sub edx, 0x12b8b
pop edx
push edx
push esi
add esp, 4
or edx, 0x8625
sub edx, 0x8ade
xor edx, 0x17ae
xor edx, 0x5ff9
pop edx
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x420d78
push ecx
or ecx, 0x8ee9
or ecx, 0xae7b
xor ecx, 0x16c48
pop ecx
push ebx
push esi
add esp, 4
and ebx, 0xc9fb
jmp 0x420d66
or ebx, 0xffb6
or ebx, 0xd29
pop ebx
jmp 0x420fa6
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push ecx
add ecx, 0xf54b
call 0x420da5
add byte [edx], bh
push eax
cmp byte [ebp + 0x35], cl
xor al, 0x4b
inc edx
inc esi
inc ebp
add esp, 4
xor ecx, 0xb1b4
call 0x420dbc
add byte [edi + edi + 0x34], cl
xor al, 0x4c
inc esp
dec edi
add esp, 4
pop ecx
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x420e27
push ebx
push ebx
add esp, 4
and ebx, 0xa133
and ebx, 0xedd7
pop ebx
push edx
xor edx, 0x15ba6
add edx, 0xb671
add edx, 0x5682
pop edx
push edi
push esi
add esp, 4
add edi, 0x494c
pop edi
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x420f58
cmp dword [ebp - 0xc10], 0
jle 0x420f4c
push ecx
xor ecx, 0xa397
xor ecx, 0x1190a
pop ecx
push edi
push ecx
add esp, 4
jmp 0x420e4d
call 0x420e5c
add byte [edi], dh
dec eax
dec ecx
cmp al, byte [ecx + 0x36]
inc ebp
inc ebx
add esp, 4
xor edi, 0x16dd6
pop edi
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x420ee8
push edi
jmp 0x420e85
and edi, 0x1dc2
or edi, 0x15d4d
pop edi
push eax
xor eax, 0xcd76
xor eax, 0x4e9f
sub eax, 0x8132
pop eax
push esi
or esi, 0xf92a
pop esi
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x420ed0
mov dword [ebp - 0x14cc], 1
jmp 0x420eda
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x420f4c
push eax
add eax, 0x1241f
jmp 0x420ef8
call 0x420f08
add byte [eax], bh
cmp edi, dword [ecx]
push eax
cmp byte [edx + 0x42], cl
push eax
inc edx
dec ebp
add esp, 4
sub eax, 0x4a54
pop eax
push esi
sub esi, 0x15a29
pop esi
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x420e27
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x420fa1
push ebx
xor ebx, 0x16782
add ebx, 0x3c2f
add ebx, 0x10866
pop ebx
push esi
push edx
add esp, 4
add esi, 0x8703
xor esi, 0x9a73
sub esi, 0x294
add esi, 0x43e3
pop esi
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x420fe2
jmp 0x420cef
push ecx
xor ecx, 0x105a0
sub ecx, 0x17836
pop ecx
push edx
push esi
add esp, 4
and edx, 0x16e8b
add edx, 0x9084
pop edx
push ebx
push esi
add esp, 4
or ebx, 0x13b9
or ebx, 0x3c2
pop ebx
mov dword [ebp - 0xa5c], 0
push esi
push eax
add esp, 4
sub esi, 0x4918
xor esi, 0x3c47
sub esi, 0x16f41
pop esi
push edi
and edi, 0x2061
or edi, 0xf2b
sub edi, 0x3a57
or edi, 0xcfa7
pop edi
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
clc
invalid
inc dword [eax]
push edi
sub edi, 0x77af
or edi, 0x25ce
and edi, 0x15046
pop edi
push eax
push ebx
add esp, 4
sub eax, 0xed5e
and eax, 0x13c68
sub eax, 0xc910
or eax, 0xa6d5
pop eax
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
xor eax, dword [eax]
add byte [eax], al
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
xchg ebp, eax
out 0xe9, al
invalid
invalid
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push esi
and esi, 0x148dc
dec eax
add dword [eax], eax
xor esi, 0x311d
xor esi, 0x179a
pop esi
push ebx
or ebx, 0xece4
call 0x42115b
add byte [ecx], bh
dec esi
inc esp
inc ecx
push eax
inc ecx
inc eax
add esp, 4
sub ebx, 0x5be6
pop ebx
push edi
push edi
add esp, 4
and edi, 0x1431a
and edi, 0xee8f
xor edi, 0xa8c5
pop edi
push esi
push ebx
add esp, 4
add esi, 0xc085
sub esi, 0xd854
pop esi
push esi
sub esi, 0xc973
pop esi
mov edx, dword fs:[0x18]
add byte [eax], al
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push edi
add edi, 0x12192
and edi, 0x79cd
pop edi
push eax
push esi