Function at 0x425920
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, 0x21f0
call fcn.00408460
mov dword [esp + 0x11f0], 0x9738993c
mov dword [esp + 0x11f4], 0x93299529
mov dword [esp + 0x11f8], 0x8f219129
mov dword [esp + 0x11fc], 0x8b248d20
mov dword [esp + 0x1200], 0x87228921
mov dword [esp + 0x1204], 0x832d8529
mov dword [esp + 0x1208], 0xff50813d
mov dword [esp + 0x120c], 0xfdfc
mov byte [esp + 0x1210], 0
xor eax, eax
mov ecx, eax
add cl, 0x26
xor cl, byte [esp + eax + 0x11f0]
add cl, 0x42
mov byte [esp + eax + 0x11f0], cl
inc eax
cmp eax, 0x21
jne case.default.0x42582d
lea eax, [esp + 0x34]
lea ebp, [esp + 0x11f0]
push 0
push 0
push 0x20019
push eax
push ebp
call fcn.00441770
add esp, 0x14
shr eax, 0x1f
jmp dword [eax*4 + 0x4485c4]
lea eax, [esp + 0x68]
lea ecx, [esp + 0x30]
push 0
push 0
push 0
push 0
push eax
push ecx
push 0
push 0
push dword [esp + 0x54]
call fcn.00441b40
add esp, 0x24
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x4485dc]
jmp case.0x42582d.3
mov eax, dword [case.0x42582d.3]
nop
nop
nop
nop
nop
nop
nop
jmp eax
xor eax, eax
jmp 0x42700b
mov eax, dword [case.0x42582d.10]
nop
nop
jmp eax
jmp dword [0x4485fc]
xor ecx, ecx
lea eax, [esp + 0x82]
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x1e]
mov dword [esp + 0x58], eax
lea eax, [esp + 0x92]
mov dword [esp + 0x50], eax
lea edx, [esp + 0x122]
xor eax, eax
mov dword [esp + 0x3c], 0
cmp ecx, dword [esp + 0x30]
lea ecx, [esp + 0x122]
setb al
lea edi, [esp + 0x122]
xor esi, esi
jmp dword [eax*4 + 0x448604]
mov word [ebp], 0
mov eax, dword [esp + 0x3c]
mov ecx, eax
and cl, 1
movzx ecx, cl
jmp dword [ecx*4 + 0x44860c]
movzx ebx, word [esp + 0x11f0]
xor esi, esi
test bx, bx
je 0x426e1b
lea eax, [esp + 0x11f2]
mov ecx, ebx
jmp 0x426dec
inc esi
lea edx, [esp + 0x122]
lea ecx, [esp + 0x122]
lea edi, [esp + 0x122]
xor eax, eax
cmp esi, dword [esp + 0x30]
setb al
jmp dword [eax*4 + 0x448604]
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x24], esi
mov esi, dword [esp + 0x68]
mov eax, esi
inc eax
lea eax, [esi + esi + 2]
jns 0x425963
mov eax, 0xffffffff
push eax
call fcn.00408580
add esp, 4
mov ebx, eax
mov dword [esp + 0x64], esi
lea eax, [esp + 0x64]
push eax
push ebx
mov esi, dword [esp + 0x2c]
push esi
push dword [esp + 0x40]
call fcn.00441890
add esp, 0x10
not eax
shr eax, 0x1f
mov dword [esp + 0x48], ebx
jmp dword [eax*4 + 0x448614]
jmp dword [0x448684]
lea eax, [esp + 0x44]
push dword [esp + 0x34]
push 0
push 0x20019
push eax
push ebx
call fcn.00441770
add esp, 0x14
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44861c]
jmp dword [0x448684]
mov dword [esp + 0x80], 0x73db71a5
mov dword [esp + 0x84], 0x7fcc7ddf
mov dword [esp + 0x88], 0x7bc979cf
mov dword [esp + 0x8c], 0x47e845f3
mov dword [esp + 0x90], 0x43e641fc
mov dword [esp + 0x94], 0x4fe74d93
mov dword [esp + 0x98], 0x4be649fe
mov dword [esp + 0x9c], 0x57e955e3
mov dword [esp + 0xa0], 0x53b251e3
mov dword [esp + 0xa4], 0x5ff35d89
mov dword [esp + 0xa8], 0x5be959eb
mov dword [esp + 0xac], 0x27892585
mov dword [esp + 0xb0], 0x23942189
mov dword [esp + 0xb4], 0x2fce2d83
mov dword [esp + 0xb8], 0x2b9729fb
mov dword [esp + 0xbc], 0x37853596
mov dword [esp + 0xc0], 0x33813189
mov dword [esp + 0xc4], 0x3f933d80
mov dword [esp + 0xc8], 0x3b9e398d
mov dword [esp + 0xcc], 0x7b405d4
mov dword [esp + 0xd0], 0x3ac01b7
mov dword [esp + 0xd4], 0xfba0da5
mov dword [esp + 0xd8], 0xbb909a5
mov dword [esp + 0xdc], 0x17ef15b0
mov dword [esp + 0xe0], 0x13ed11e3
mov dword [esp + 0xe4], 0x1fdd1de1
mov dword [esp + 0xe8], 0x1bd419d6
mov dword [esp + 0xec], 0xe71ae514
mov dword [esp + 0xf0], 0xe311e111
mov dword [esp + 0xf4], 0xef1fed1d
mov dword [esp + 0xf8], 0xeb46e919
mov dword [esp + 0xfc], 0xf734f507
mov dword [esp + 0x100], 0xf30af108
mov dword [esp + 0x104], 0xff0efd3d
mov dword [esp + 0x108], 0xfb0bf908
mov dword [esp + 0x10c], 0xc73ac534
mov dword [esp + 0x110], 0xc330c102
mov dword [esp + 0x114], 0xcf30cd0d
mov dword [esp + 0x118], 0xcb35c936
mov dword [esp + 0x11c], 0xd772d52a
lea eax, [esp + 0x120]
mov word [esp + 0x120], 0xd1d0
mov byte [edi + 2], 0
mov word [edi], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx + 0x80]
mov esi, 0x7b08c56b
sub esi, ecx
or esi, edx
mov edi, 0x6b
sub edi, ecx
and edi, edx
xor edi, esi
mov edx, 0x672bdb1a
sub edx, edi
mov esi, edx
and esi, 1
xor edx, 1
lea edx, [edx + esi*2]
mov byte [esp + ecx + 0x80], dl
mov edx, ecx
and edx, 1
xor ecx, 1
lea ecx, [ecx + edx*2]
cmp ecx, 0xa5
jb 0x425bb0
lea edi, [esp + 0x924]
lea edx, [esp + 0x80]
mov ecx, 0x28
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [esp + 0x9c4]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov dword [esp + 0x80], 0x51e54f03
mov dword [esp + 0x84], 0x55e053f5
mov dword [esp + 0x88], 0x59e357e5
mov dword [esp + 0x8c], 0x5dfc5be9
mov dword [esp + 0x90], 0xa1025fe8
mov dword [esp + 0x94], 0xa509a3f9
mov dword [esp + 0x98], 0xa902a70a
mov dword [esp + 0x9c], 0xad13ab19
mov dword [esp + 0xa0], 0xb1ceaf19
mov dword [esp + 0xa4], 0xb5e6b3fe
mov dword [esp + 0xa8], 0xb9f3b7e8
mov dword [esp + 0xac], 0xbd08bb0f
mov dword [esp + 0xb0], 0x8119bf0e
mov dword [esp + 0xb4], 0x8536832e
mov dword [esp + 0xb8], 0x892187d2
mov dword [esp + 0xbc], 0x8d3f8b3a
mov dword [esp + 0xc0], 0x913f8f27
mov dword [esp + 0xc4], 0x95ce933e
mov dword [esp + 0xc8], 0x993d97cd
mov dword [esp + 0xcc], 0x9d3e9b36
mov dword [esp + 0xd0], 0xe1279f2d
mov dword [esp + 0xd4], 0xe582e355
mov dword [esp + 0xd8], 0xe941e7ab
mov dword [esp + 0xdc], 0xed5feb5d
mov dword [esp + 0xe0], 0xf147ef4f
mov dword [esp + 0xe4], 0xf55cf35b
mov dword [esp + 0xe8], 0xf996f75d
mov dword [esp + 0xec], 0xfd4dfbad
mov dword [esp + 0xf0], 0xc14bff5e
mov dword [esp + 0xf4], 0xc577c37b
mov dword [esp + 0xf8], 0xc961c770
mov dword [esp + 0xfc], 0xcd96cb67
mov dword [esp + 0x100], 0xd17ccf9c
mov dword [esp + 0x104], 0xd574d361
mov dword [esp + 0x108], 0xd97ad77f
mov dword [esp + 0x10c], 0xdd6fdb7f
mov dword [esp + 0x110], 0x218fdf80
mov dword [esp + 0x114], 0x25962397
mov dword [esp + 0x118], 0x29972788
mov dword [esp + 0x11c], 0x2d872b99
mov dword [esp + 0x120], 0x31552f70
mov dword [esp + 0x124], 0x354b3345
mov dword [esp + 0x128], 0x39733743
mov dword [esp + 0x12c], 0x3d7c3b7e
mov dword [esp + 0x130], 0x14a3f4c
mov dword [esp + 0x134], 0x5770373
mov dword [esp + 0x138], 0x9750777
mov dword [esp + 0x13c], 0xdae0b7b
mov dword [esp + 0x140], 0x114c0f79
mov dword [esp + 0x144], 0x156a1368
mov dword [esp + 0x148], 0x19661757
mov dword [esp + 0x14c], 0x1d691b68
mov dword [esp + 0x150], 0x616a1f6c
mov dword [esp + 0x154], 0x65106322
mov dword [esp + 0x158], 0x69106727
mov dword [esp + 0x15c], 0x6d136b1e
mov dword [esp + 0x160], 0x71326f1a
lea eax, [esp + 0x164]
mov word [esp + 0x164], 0x7370
mov dword [esp + 0x166], 0
xor ecx, ecx
xor esi, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, ecx
and edi, 0xda
mov edx, esi
xor edx, 0xed
add edx, edi
xor dl, byte [esp + esi + 0x80]
add dl, 0x5f
mov byte [esp + esi + 0x80], dl
inc esi
add ecx, 2
cmp esi, 0xea
jne 0x425ec0
lea edi, [esp + 0x9c6]
lea edx, [esp + 0x80]
mov ecx, 0x39
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [esp + 0xaaa]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov dword [esp + 0x80], 0x29c52bd7
mov dword [esp + 0x84], 0x2db82fcd
mov dword [esp + 0x88], 0xd147d3bd
mov dword [esp + 0x8c], 0xd53cd741
mov dword [esp + 0x90], 0xd926db40
mov dword [esp + 0x94], 0xdd34df29
mov dword [esp + 0x98], 0xc12dc336
mov dword [esp + 0x9c], 0xc52dc725
mov dword [esp + 0xa0], 0xc91dcb38
mov dword [esp + 0xa4], 0xcd1ccf1d
mov dword [esp + 0xa8], 0xf10ef31c
mov dword [esp + 0xac], 0xf56df701
mov dword [esp + 0xb0], 0xf916fb60
mov dword [esp + 0xb4], 0xfd6fff69
mov dword [esp + 0xb8], 0xe11ee311
mov dword [esp + 0xbc], 0xe570e710
mov dword [esp + 0xc0], 0xe900eb75
mov dword [esp + 0xc4], 0xed02ef07
mov dword [esp + 0xc8], 0x91079307
mov dword [esp + 0xcc], 0x9567976c
mov dword [esp + 0xd0], 0x990e9b0f
mov dword [esp + 0xd4], 0x9d0f9f74
mov dword [esp + 0xd8], 0x816f830d
mov dword [esp + 0xdc], 0x8559877c
mov dword [esp + 0xe0], 0x89538b51
mov dword [esp + 0xe4], 0x8d4b8f53
mov dword [esp + 0xe8], 0xb178b346
mov dword [esp + 0xec], 0xb562b760
mov dword [esp + 0xf0], 0xb96fbb63
mov dword [esp + 0xf4], 0xbd69bf6f
mov dword [esp + 0xf8], 0xa146a36b
mov dword [esp + 0xfc], 0xa560a775
mov dword [esp + 0x100], 0xa972ab7c
mov dword [esp + 0x104], 0xad7eaf6f
mov dword [esp + 0x108], 0x5185537c
mov dword [esp + 0x10c], 0x55825780
mov dword [esp + 0x110], 0x598c5b92
mov dword [esp + 0x114], 0x5d845f9f
mov dword [esp + 0x118], 0x419b4386
mov dword [esp + 0x11c], 0x45ba479a
lea eax, [esp + 0x120]
mov dword [esp + 8], eax
mov word [esp + 0x120], 0x4b44
mov eax, dword [esp + 4]
mov byte [eax + 4], 0
mov dword [eax], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx + 0x80]
mov esi, 0xebe59e88
sub esi, ecx
xor esi, edx
mov edi, 0xbe59e88
sub edi, ecx
or edi, esi
add edi, ecx
add edi, 0x141a6178
mov eax, edi
and eax, 0xfffffffd
mov ebx, edi
and ebx, 2
mov esi, edi
or esi, 0xfffffffd
inc esi
imul esi, eax
or edi, 2
imul edi, ebx
sub esi, edi
add edx, ecx
add edx, esi
add edx, 0xf6605ba
mov eax, edx
xor eax, 0x96
and edx, 0x69
add edx, edx
sub edx, eax
mov byte [esp + ecx + 0x80], dl
mov eax, ecx
and eax, 1
xor ecx, 1
lea ecx, [ecx + eax*2]
cmp ecx, 0xa7
jb 0x426100
lea edi, [esp + 0x882]
lea eax, [esp + 0x80]
mov ecx, 0x28
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0x922]
mov ecx, 1
mov eax, dword [esp + 8]
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov dword [esp + 0x80], 0x4fd749f5
mov dword [esp + 0x84], 0x43d44deb
mov dword [esp + 0x88], 0x47d141d3
mov dword [esp + 0x8c], 0xbb2045d7
mov dword [esp + 0x90], 0xbf12b92c
mov dword [esp + 0x94], 0xb328bd0f
mov dword [esp + 0x98], 0xb72fb12a
mov dword [esp + 0x9c], 0xab0fb513
mov dword [esp + 0xa0], 0xafffa904
mov dword [esp + 0xa4], 0xa3f0adf8
mov dword [esp + 0xa8], 0xa70aa1f0
mov dword [esp + 0xac], 0x9b0fa517
mov dword [esp + 0xb0], 0x9f02990c
mov dword [esp + 0xb4], 0x93019d0f
mov dword [esp + 0xb8], 0x973a910f
mov dword [esp + 0xbc], 0x8b1c9524
mov dword [esp + 0xc0], 0x8f14891b
mov dword [esp + 0xc4], 0x831e8d15
mov dword [esp + 0xc8], 0x87118125
mov dword [esp + 0xcc], 0xfb498528
mov dword [esp + 0xd0], 0xff6af96d
mov dword [esp + 0xd4], 0xf361fd60
mov dword [esp + 0xd8], 0xf769f163
mov dword [esp + 0xdc], 0xeba3f558
mov dword [esp + 0xe0], 0xefa5e9bf
mov dword [esp + 0xe4], 0xe3a5edb9
mov dword [esp + 0xe8], 0xe75ce15a
mov dword [esp + 0xec], 0xdb8ee5b4
mov dword [esp + 0xf0], 0xdf89d989
mov dword [esp + 0xf4], 0xd383dd8d
mov dword [esp + 0xf8], 0xd772d181
mov dword [esp + 0xfc], 0xcb8cd583
mov dword [esp + 0x100], 0xcf86c980
mov dword [esp + 0x104], 0xc392cd8d
mov dword [esp + 0x108], 0xc797c190
mov dword [esp + 0x10c], 0x3b6ec594
mov dword [esp + 0x110], 0x3f68397e
mov dword [esp + 0x114], 0x33783d7d
mov dword [esp + 0x118], 0x377d317a
mov dword [esp + 0x11c], 0x2b86357e
lea edx, [esp + 0x120]
mov dword [esp + 0x120], 0x2928
mov eax, 0x67ed3972
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x67ed38f2]
xor ecx, eax
mov esi, ecx
not esi
add ecx, 0xc5
and esi, 1
or ecx, 1
add ecx, esi
mov byte [esp + eax - 0x67ed38f2], cl
inc eax
cmp eax, 0x67ed3a16
jne 0x426370
lea eax, [esp + 0xb4e]
lea esi, [esp + 0x80]
mov edi, eax
mov ecx, 0x28
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [esp + 0xbee]
mov ecx, 1
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
mov dword [esp + 0x80], 0x21bd27d3
mov dword [esp + 0x84], 0xddb023bd
mov dword [esp + 0x88], 0xd953df4d
mov dword [esp + 0x8c], 0xd544db49
mov dword [esp + 0x90], 0xd132d758
mov dword [esp + 0x94], 0xcd4cd321
mov dword [esp + 0x98], 0xc955cf52
mov dword [esp + 0x9c], 0xc555cb55
mov dword [esp + 0xa0], 0xc115c720
mov dword [esp + 0xa4], 0xfd14c30f
mov dword [esp + 0xa8], 0xf91aff2c
mov dword [esp + 0xac], 0xf575fb09
mov dword [esp + 0xb0], 0xf162f778
mov dword [esp + 0xb4], 0xed63f361
mov dword [esp + 0xb8], 0xe90aef79
mov dword [esp + 0xbc], 0xe578eb18
mov dword [esp + 0xc0], 0xe178e775
mov dword [esp + 0xc4], 0x9d76e37b
mov dword [esp + 0xc8], 0x99139f03
mov dword [esp + 0xcc], 0x956b9b7c
mov dword [esp + 0xd0], 0x911a971b
mov dword [esp + 0xd4], 0x8d039304
mov dword [esp + 0xd8], 0x891b8f1d
mov dword [esp + 0xdc], 0x85418b6c
mov dword [esp + 0xe0], 0x814f8749
mov dword [esp + 0xe4], 0xbd7f834f
mov dword [esp + 0xe8], 0xb940bf42
mov dword [esp + 0xec], 0xb576bb68
mov dword [esp + 0xf0], 0xb17bb767
mov dword [esp + 0xf4], 0xad61b363
mov dword [esp + 0xf8], 0xa932af7f
mov dword [esp + 0xfc], 0xa568ab65
mov dword [esp + 0x100], 0xa16ea76c
mov dword [esp + 0x104], 0x5d72a363
mov dword [esp + 0x108], 0x598d5f8c
mov dword [esp + 0x10c], 0x55965b88
mov dword [esp + 0x110], 0x51845796
mov dword [esp + 0x114], 0x4d9c5393
mov dword [esp + 0x118], 0x49874f82
mov dword [esp + 0x11c], 0x45ae4b86
lea ebx, [esp + 0x120]
mov word [esp + 0x120], 0x4744
mov ecx, dword [esp]
mov byte [ecx + 2], 0
mov word [ecx], 0
xor ecx, ecx
mov edx, ecx
add dl, 0x79
xor dl, byte [esp + ecx + 0x80]
add dl, 0xa3
mov byte [esp + ecx + 0x80], dl
inc ecx
cmp ecx, 0xa5
jne case.default.0x426620
lea edx, [esp + 0xaac]
lea esi, [esp + 0x80]
mov edi, edx
mov ecx, 0x28
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [esp + 0xb4c]
mov ecx, 1
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
lea ecx, [esp + 0x924]
mov dword [esp + 0x6c], ecx
lea ecx, [esp + 0x9c6]
mov dword [esp + 0x70], ecx
lea ecx, [esp + 0x882]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], edx
xor ecx, ecx
xor eax, eax
cmp ecx, 0x14
setne al
jmp dword [eax*4 + 0x448634]
mov eax, dword [esp + 0x44]
mov dword [esp + 0x80], 0x484b4a4d
mov byte [esp + 0x84], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx + 0x80]
mov esi, 0xeec8788c
sub esi, ecx
or esi, edx
mov edi, 0x8c
sub edi, ecx
and edi, edx
xor edi, esi
lea edx, [edi + edi]
not edx
add edx, edi
add edx, 0x838c28ca
mov esi, edx
xor esi, 9
and edx, 0x76
add edx, edx
sub edx, esi
mov byte [esp + ecx + 0x80], dl
add ecx, 0x35b821d9
or ecx, 0xca47de28
add ecx, 8
cmp ecx, 5
jb 0x426650
mov ecx, dword [0x44dee4]
test ecx, ecx
je 0x426d80
mov edx, dword [esp + 0x80]
xor esi, esi
mov edi, dword [0x44dee8]
nop
nop
nop
cmp dword [edi + esi*8], 0x1b6183f2
je 0x426d78
inc esi
cmp ecx, esi
jne 0x4266c0
jmp 0x426d80
mov ecx, dword [esp + 0x54]
add ecx, 4
xor eax, eax
cmp ecx, 0x14
setne al
jmp dword [eax*4 + 0x448634]
mov dword [esp + 0x54], ecx
mov eax, dword [esp + ecx + 0x6c]
mov dword [esp + 0x80], 0x295a2b54
mov dword [esp + 0x84], 0x2d5e2f58
mov dword [esp + 0x88], 0x3142335c
mov dword [esp + 0x8c], 0x356e3740
mov word [esp + 0x90], 0x3b34
mov ecx, dword [esp + 0x50]
mov byte [ecx + 2], 0
mov word [ecx], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + ecx + 0x80]
lea edx, [ecx + 7]
mov edi, 0xf8
sub edi, ecx
xor edx, edi
and edx, esi
xor edx, edi
mov bl, 0xdc
sub bl, dl
mov byte [esp + ecx + 0x80], bl
mov edx, ecx
and edx, 1
xor ecx, 1
lea ecx, [ecx + edx*2]
cmp ecx, 0x15
jb 0x426750
movzx ecx, word [eax]
lea edx, [esp + 0xbf0]
test cx, cx
je 0x4267b1
add eax, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edx], cx
add edx, 2
movzx ecx, word [eax]
add eax, 2
test cx, cx
jne 0x4267a0
mov word [edx], 0
movzx eax, word [esp + 0x80]
test ax, ax
je 0x4267e1
mov ecx, dword [esp + 0x4c]
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edx], ax
add edx, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4267d0
mov word [edx], 0
mov cx, 0x31
xor eax, eax
cmp cx, 0x35
setb al
mov dword [esp + 0x28], edx
jmp dword [eax*4 + 0x44863c]
mov eax, esi
and eax, 1
xor esi, 1
lea esi, [esi + eax*2]
xor eax, eax
cmp si, 0x35
setb al
mov edx, dword [esp + 0x28]
mov ecx, esi
jmp dword [eax*4 + 0x44863c]
mov word [edx - 2], cx
lea eax, [esp + 0x40]
mov esi, ecx
lea ecx, [esp + 0xbf0]
push dword [esp + 0x44]
push 0
push 0x20019
push eax
push ecx
call fcn.00441770
add esp, 0x14
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x448644]
mov dword [esp + 0x38], esi
mov dword [esp + 0x60], 0x800
mov dword [esp + 0x2c], 0x400
xor esi, esi
mov dword [esp + 4], 0
jmp 0x426881
inc esi
lea eax, [esp + 0x2c]
lea edi, [esp + 0xdf0]
lea ecx, [esp + 0x5c]
lea edx, [esp + 0x60]
push eax
push edi
push ecx
push edx
lea eax, [esp + 0x90]
push eax
push esi
push dword [esp + 0x58]
call fcn.00441e30
add esp, 0x1c
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44864c]
test byte [esp + 4], 1
sete al
mov edx, dword [esp + 0x5c]
cmp edx, 1
sete cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x448654]
xor eax, eax
cmp edx, 3
sete al
jmp dword [eax*4 + 0x448674]
mov dword [esp + 8], edx
mov dword [esp], esi
jmp dword [0x44865c]
mov eax, dword [esp + 0x2c]
cmp eax, 2
mov esi, dword [esp]
jb 0x4269b6
shr eax, 1
lea ecx, [eax - 1]
mov edx, eax
and edx, 3
je 0x426955
mov dword [esp + 4], ecx
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [ebx]
mov ecx, ebx
xor ebx, ebx
test si, si
setne bl
lea ebx, [ecx + ebx*2]
mov word [ebp], si
add ebp, 2
inc edi
cmp edx, edi
jne 0x426930
sub eax, edi
mov esi, dword [esp]
mov ecx, dword [esp + 4]
cmp ecx, 3
jb 0x4269b6
nop
nop
nop
nop
nop
nop
movzx ecx, word [ebx]
xor edx, edx
test cx, cx
setne dl
lea esi, [ebx + edx*2]
mov word [ebp], cx
movzx ecx, word [ebx + edx*2]
xor edx, edx
test cx, cx
setne dl
lea edi, [esi + edx*2]
mov word [ebp + 2], cx
movzx ecx, word [esi + edx*2]
xor edx, edx
test cx, cx
setne dl
lea esi, [edi + edx*2]
mov word [ebp + 4], cx
movzx edx, word [edi + edx*2]
xor ecx, ecx
test dx, dx
setne cl
mov word [ebp + 6], dx
add ebp, 8
lea ebx, [esi + ecx*2]
add eax, 0xfffffffc
jne 0x426960
mov esi, dword [esp]
mov dword [ebp], 0x20003a
add ebp, 4
mov al, 1
mov dword [esp + 4], eax
inc esi
jmp 0x426881
movzx esi, word [esp + 0xc]
lea eax, [esp + 0x80]
test si, si
je 0x426a1c
lea ecx, [esp + 0x80]
lea edx, [esp + 0xc]
mov eax, ecx
jmp 0x4269f8
movzx esi, word [edx]
test si, si
je 0x426a1c
movzx edi, word [ecx]
test di, di
je 0x426a1a
add ecx, 2
add edx, 2
lea ebx, [eax + 2]
cmp di, si
je 0x426a12
mov eax, ebx
mov ecx, ebx
je 0x4269f0
lea edx, [esp + 0xc]
jmp 0x4269f0
xor eax, eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x44867c]
mov esi, dword [esp]
inc esi
jmp 0x426881
mov eax, dword [esp + 0x2c]
cmp eax, 2
jb 0x426ae3
shr eax, 1
lea edx, [eax - 1]
mov esi, eax
lea ecx, [esp + 0xdf0]
and esi, 3
je 0x426a80
mov dword [esp + 8], edx
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
movzx ebx, word [ecx]
xor edx, edx
test bx, bx
setne dl
lea ecx, [ecx + edx*2]
mov word [ebp], bx
add ebp, 2
inc edi
cmp esi, edi
jne 0x426a60
sub eax, edi
mov edx, dword [esp + 8]
cmp edx, 3
mov esi, dword [esp]
jb 0x426ae6
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, word [ecx]
xor ebx, ebx
test dx, dx
setne bl
lea esi, [ecx + ebx*2]
mov word [ebp], dx
movzx ecx, word [ecx + ebx*2]
xor edx, edx
test cx, cx
setne dl
lea edi, [esi + edx*2]
mov word [ebp + 2], cx
movzx ecx, word [esi + edx*2]
xor edx, edx
test cx, cx
setne dl
lea esi, [edi + edx*2]
mov word [ebp + 4], cx
movzx edx, word [edi + edx*2]
xor ecx, ecx
test dx, dx
setne cl
mov word [ebp + 6], dx
add ebp, 8
lea ecx, [esi + ecx*2]
add eax, 0xfffffffc
jne 0x426a90
mov esi, dword [esp]
mov word [ebp], 0xa
add ebp, 2
mov al, 1
mov dword [esp + 0x3c], eax
inc esi
jmp 0x426881
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x44866c]
xor eax, eax
cmp dword [esp + 8], 3
sete al
mov esi, dword [esp]
jmp dword [eax*4 + 0x448674]
mov dword [esp], esi
mov dword [esp + 0xc], 0x23c321d0
mov dword [esp + 0x10], 0x27b525b7
mov dword [esp + 0x14], 0xdb45d94f
mov dword [esp + 0x18], 0xdf3add4e
mov word [esp + 0x1c], 0xd1d0
mov eax, dword [esp + 0x58]
mov byte [eax + 4], 0
mov dword [eax], 0
xor eax, eax
nop
nop
nop
nop
mov ecx, eax
add cl, 0xf8
xor cl, byte [esp + eax + 0xc]
add cl, 0x28
mov byte [esp + eax + 0xc], cl
inc eax
cmp eax, 0x17
jne 0x426b60
jmp 0x4269d0
mov dword [esp + 0xc], 0x8f298949
mov dword [esp + 0x10], 0x83318d2b
mov dword [esp + 0x14], 0x87348135
mov dword [esp + 0x18], 0x9b9a8530
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ecx
add al, 0xe2
xor al, byte [esp + ecx + 0xc]
add al, 0x96
mov byte [esp + ecx + 0xc], al
inc ecx
cmp ecx, 0x10
jne 0x426bb0
mov dword [esp + 0xc], 0x8f298949
mov dword [esp + 0x10], 0x83318d2b
mov dword [esp + 0x14], 0x87348135
mov dword [esp + 0x18], 0x9b9a8530
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ecx
add al, 0xe2
xor al, byte [esp + ecx + 0xc]
add al, 0x96
mov byte [esp + ecx + 0xc], al
inc ecx
cmp ecx, 0x10
jne 0x426bf0
movzx edi, word [esp + 0xc]
lea esi, [esp + 0x80]
test di, di
je 0x426c60
lea ecx, [esp + 0x80]
lea ebx, [esp + 0xc]
mov esi, ecx
jmp 0x426c38
movzx edi, word [ebx]
test di, di
je 0x426c60
movzx eax, word [ecx]
test ax, ax
je 0x426c70
add ecx, 2
add ebx, 2
lea edx, [esi + 2]
cmp ax, di
je 0x426c52
mov esi, edx
mov ecx, edx
je 0x426c30
lea ebx, [esp + 0xc]
jmp 0x426c30
lea ebx, [esp + 0xdf0]
jmp dword [0x448664]
xor esi, esi
lea ebx, [esp + 0xdf0]
jmp dword [0x448664]
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], 0x484b4a4d
mov byte [esp + 0x10], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx + 0xc]
mov esi, 0xeec8788c
sub esi, ecx
or esi, edx
mov edi, 0x8c
sub edi, ecx
and edi, edx
xor edi, esi
lea edx, [edi + edi]
not edx
add edx, edi
add edx, 0x838c28ca
mov esi, edx
xor esi, 9
and edx, 0x76
add edx, edx
sub edx, esi
mov byte [esp + ecx + 0xc], dl
add ecx, 0x35b821d9
or ecx, 0xca47de28
add ecx, 8
cmp ecx, 5
jb 0x426ca0
mov ecx, dword [0x44dee4]
test ecx, ecx
je 0x426d20
mov edx, dword [esp + 0xc]
xor esi, esi
mov edi, dword [0x44dee8]
cmp dword [edi + esi*8], 0x1b6183f2
je 0x426d10
inc esi
cmp ecx, esi
jne 0x426d00
jmp 0x426d20
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
jne case.default.0x426d3c
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x38]
mov eax, ecx
and eax, 1
xor ecx, 1
lea ecx, [ecx + eax*2]
xor eax, eax
cmp cx, 0x35
setb al
mov edx, dword [esp + 0x28]
jmp dword [eax*4 + 0x44863c]
push eax
push 4
push ecx
push dword [0x44deec]
call fcn.0043e980
add esp, 0x10
mov ecx, dword [esp + 0x38]
mov eax, ecx
and eax, 1
xor ecx, 1
lea ecx, [ecx + eax*2]
xor eax, eax
cmp cx, 0x35
setb al
mov edx, dword [esp + 0x28]
jmp dword [eax*4 + 0x44863c]
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
jne 0x426dbc
mov esi, dword [esp + 0x24]
jmp dword [0x448684]
push dword [esp + 0x48]
call fcn.00408590
add esp, 4
inc esi
lea edx, [esp + 0x122]
lea ecx, [esp + 0x122]
lea edi, [esp + 0x122]
xor eax, eax
cmp esi, dword [esp + 0x30]
setb al
jmp dword [eax*4 + 0x448604]
push eax
push 4
push ecx
push dword [0x44deec]
call fcn.0043e980
add esp, 0x10
mov esi, dword [esp + 0x24]
jmp dword [0x448684]
inc esi
movzx ecx, word [eax]
add eax, 2
test cx, cx
je 0x426e1b
cmp cx, 0x7f
jbe 0x426de0
movzx edx, cx
cmp edx, 0x7ff
ja 0x426e10
add esi, 2
jmp 0x426de1
cmp cx, 0xffff
je 0x426de1
add esi, 3
jmp 0x426de1
lea eax, [esi + 1]
push eax
call fcn.00408580
add esp, 4
mov edi, eax
mov dword [esp], eax
test bx, bx
je 0x426f55
mov edi, dword [esp]
test esi, esi
je 0x426f55
lea ebp, [esp + 0x11f0]
mov ecx, esi
mov edi, dword [esp]
nop
nop
nop
nop
movzx ebx, bx
lea edx, [ebp + 2]
cmp bx, 0x7f
ja 0x426e70
lea eax, [edi + 1]
mov byte [edi], bl
jmp 0x426f00
cmp ebx, 0x7ff
ja 0x426ea0
cmp ecx, 2
jb 0x426ea0
mov eax, ebx
shr eax, 6
add al, 0xc0
mov byte [edi], al
and bl, 0x3f
or bl, 0x80
lea eax, [edi + 2]
mov byte [edi + 1], bl
jmp 0x426f00
mov eax, ebx
and eax, 0xfc00
cmp eax, 0xd800
jne 0x426f1b
cmp ecx, 4
jb 0x426f1b
movzx edx, word [ebp + 2]
shl ebx, 0xa
lea eax, [ebx + edx]
add eax, 0xfca02400
mov ebx, eax
shr ebx, 0x12
add bl, 0xf0
mov byte [edi], bl
mov ebx, eax
shr ebx, 0xc
and bl, 0x3f
or bl, 0x80
mov byte [edi + 1], bl
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [edi + 2], al
and dl, 0x3f
or dl, 0x80
mov byte [edi + 3], dl
lea eax, [edi + 4]
add ebp, 4
mov edx, ebp
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add ecx, edi
sub ecx, eax
mov ebp, edx
mov edi, eax
movzx ebx, word [ebp]
test bx, bx
je 0x426f55
test ecx, ecx
jne 0x426e50
jmp 0x426f55
movzx eax, ax
cmp eax, 0xdc00
jne 0x426f29
mov ebp, edx
jmp 0x426f08
cmp ecx, 3
jb 0x426f51
mov eax, ebx
shr eax, 0xc
or al, 0xe0
mov byte [edi], al
mov eax, ebx
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [edi + 1], al
and bl, 0x3f
or bl, 0x80
lea eax, [edi + 3]
mov byte [edi + 2], bl
jmp 0x426f00
mov eax, edi
jmp 0x426f00
mov byte [edi], 0
mov dword [esp + 0x80], 0xd3ded989
mov dword [esp + 0x84], 0xd7a3aad5
mov dword [esp + 0x88], 0xd0d4d2d9
mov dword [esp + 0x8c], 0xefefb697
mov dword [esp + 0x90], 0xe0edeae4
mov dword [esp + 0x94], 0xe0e48daf
mov dword [esp + 0x98], 0x92eae8ea
mov dword [esp + 0x9c], 0xe3fea7e3
mov dword [esp + 0xa0], 0x69fc
xor eax, eax
nop
nop
nop
mov ecx, eax
add cl, 0x92
xor cl, byte [esp + eax + 0x80]
add cl, 0x26
mov byte [esp + eax + 0x80], cl
inc eax
cmp eax, 0x24
jne 0x426fc0
lea eax, [esp + 0x80]
mov ecx, dword [esp + 0x2204]
push esi
mov esi, dword [esp + 4]
push esi
push eax
call fcn.004092e0
jmp dword [0x44868c]
push esi
mov esi, eax
call fcn.00408590
mov eax, esi
add esp, 4
and al, 1
add esp, 0x21f0
pop esi
pop edi
pop ebx
pop ebp
ret
int3
pop eax
inc edx
add byte [eax + ebx*2 + 0x42], ah
add byte [eax + 0x58], dh
inc edx
add byte [eax + 0x58], dh
inc edx
add byte [edx + 0x58], dh
inc edx
add byte [eax + 0x58], dh
inc edx
add byte [edx + 0x58], ah
inc edx
add byte [ecx + 0x58], bh
inc edx
add byte [eax - 0x7fffbda8], al
pop eax
inc edx
add byte [eax - 0x6fffbda8], al
pop eax
inc edx
add byte [eax - 0x6fffbda8], dl
pop eax
inc edx
add byte [esi - 0x6fffbda8], dl
pop eax
inc edx
add ch, ah
pop eax
inc edx
add byte [esi + 0x59], al
inc edx
add byte [ecx], cl
jo 0x448651
add dh, bh
pop eax
inc edx
add byte [ecx - 0x5fffbda7], bl
pop ecx
inc edx
add ch, al
pop ecx
inc edx
add al, dl
pop ecx
inc edx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [esi], dl
jo 0x448675
add byte [eax], dh
inc dx
add dh, dh
inc dx
add al, ah
inc dx
add byte [ecx], ah
push 0x68000042
inc edx
add byte [ebx + 0x68], dl
inc edx
add byte [eax - 0x46ffbd94], al
push 0x68d70042
inc edx
add al, dh
push 0x6bc40042
inc edx
add byte [eax + 0x426b], al
imul eax, dword [edx], 0xffffff80
imul eax, dword [edx], 0xe
imul eax, dword [edx], 0
imul eax, dword [edx], case.0x426d71.14
and ch, byte [ebx + 0x42]
push 0x6b220042
inc edx
add byte [edx], ch
push 0x42
add byte [ebx], dh
push 0x42
add byte [edx + 0x2000426d], cl
pop ecx
inc edx
add ah, bh
outsd dx, dword [esi]
inc edx
add byte [ecx], cl
jo 0x4486d5
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax + 0x73], dl
inc edx
add byte [eax], cl
jae 0x4486e9
add byte [edx + 0x73], bl
inc edx
add byte [eax], dh
jne 0x4486f1
add al, bh
je 0x4486f5
add byte [eax + 0x75], dl
inc edx
add byte [eax], cl
jns 0x4486fd
add byte [edx + 0x79], al
inc edx
add byte [esi + 0x7000427b], ch
jne 0x448709
add byte [edx + 0x75], dh
inc edx
add al, dh
ja 0x448711
inc edx
add byte [edx - 0x1fffbd8b], al
jne 0x448719
add byte [eax], dl
jbe 0x44871d
add bl, dh
jbe 0x448721
add ch, ch
jbe 0x448725
add byte [0xd5004276], al
jne 0x44872d
add byte [eax + 0x75], ah
inc edx
add byte [ecx + 0x75], ch
inc edx
jne 0x448735
add byte [esi], ah
jne 0x448739
add al, dl
js 0x44873d
add al, dl
js 0x448741
add bl, bl
js 0x448745
add bl, bl
js 0x448749
add bl, bl
js 0x44874d
add byte [eax], dh
jne 0x448751
add byte [esi + 0x4000427b], ch
jae 0x448759
jnp 0x448755
add byte [eax + 0x73], al
inc edx
add byte [eax + 0x73], dl
jae 0x44875d
inc edx
add byte [eax], cl
jae 0x448761
add byte [ecx], bl
jae 0x448765
add byte [edi - 0x6fffbd85], al
jnp 0x44876d
jnp 0x448769
add byte [eax - 0x6fffbd85], dl
add byte [eax - 0x69ffbd85], dl
jnp 0x448775
jnp 0x448771
add byte [esi - 0x69ffbd85], dl
add byte [esi - 0xfffbd85], dl
jnp 0x448779
add al, dh
js 0x44877d
add byte [eax + 0x75], dh
inc edx
jne 0x448781
add al, dl
js 0x448785
add byte [eax - 0x7cffbd85], dl
jnp 0x448789
add byte [ebx - 0x1effbd7a], al
xchg byte [edx], al
loope 0x4486ce
add byte [edx], 0x83
inc edx
add byte [ebx - 0x2ffbd7a], al
xchg byte [edx], al
std
add byte [edx], 0xfd
add byte [edx], 0x9e
test dword [edx], eax
mov ch, 0x81
inc edx
add byte [ecx - 0x79ffbd7a], bl
add dword [edx], 0x428699
xchg byte [edx], al
xchg byte [ebp - 0x7dfaffbe], al
inc edx
add byte [eax - 0x7e], ah
inc edx
add byte [ecx - 0x7e], cl
inc edx
add byte [ecx - 0x7e], cl
inc edx
add byte [ecx - 0x7e], ch
inc edx
add byte [ecx - 0x60ffbd7e], dl
test dword [edx], eax
add eax, 0x60004282
add byte [0x60004282], al
add byte [edx], 0x60
add byte [edx], 0x49
add byte [edx], 0x49
add byte [edx], 0x69
add byte [edx], 0x91
add byte [edx], 0x9f
add byte [edx], 0xcf
add byte [edx], 0x4a
test byte [edx], al
push ebx
test byte [edx], al
ja 0x44871a
inc edx
add cl, ah
test byte [edx], al
xlatb
test byte [edx], al
cmp dword [ebp - 0x7aa2ffbe], eax
inc edx
add byte [edx - 0x7c], dh
inc edx
add al, dh
add dword [edx], 0x4281f0
lock add dword [edx], 0x4285ad
cwde
test dword [edx], eax
pop ebx
xchg byte [edx], al
xchg byte [bp + si], al
sahf
test dword [edx], eax
add dword [esi - 0x7af6ffbe], 0x42
add byte [ecx - 0x78], bl
inc edx
add byte [ecx], dh
mov byte [edx], al
pop esp
mov dword [edx], eax
jne 0x44876b
inc edx
add byte [ebp - 0x1dffbd77], al
cdq
inc edx
add byte [edi - 0x78ffbd76], al
mov al, byte [edx]
salc
mov al, byte [edx]
cld
add ah, bh
mov al, byte [edx]
xor dword [ebx - 0x6669ffbe], ecx
inc edx
add byte [eax + ebx*4 + 0x42], bl
add byte [edx - 0x68], dh
inc edx
add byte [eax - 0x6b], al
inc edx
add byte [eax - 0x6b], al
inc edx
add byte [esi - 0x6b], al
inc edx
add byte [esi - 0x6b], al
inc edx
add byte [edx], ch
cdq
inc edx
add byte [esi + 0x2a004295], bl
cdq
inc edx
add byte [edx], ch
cdq
inc edx
add byte [eax + ebx*4], bh
inc edx
add byte [ecx + ebx*4], dh
inc edx
add byte [ecx + ebx*4], dh
inc edx
add byte [ecx + ebx*4], dh
inc edx
add byte [esi - 0x68], dl
inc edx
add byte [ebx - 0x67], al
inc edx
add byte [ebp - 0x7affbd69], al
xchg edi, eax
inc edx
add byte [ebp - 0x59ffbd69], al
mov al, byte [edx]
mov al, 0x8a
inc edx
add byte [edi], bh
pop dword [edx]
loop 0x4487f7
inc edx
add bh, al
mov al, byte [edx]
dec ebp
pop dword [edx]
jmp 0x9544cafd