Function at 0x408870
Capabilities:
Encrypt data using rc4 prga

Disassembly:
inc eax
mov dword [esi], eax
mov eax, dword [ebp + 0x18]
cmp eax, dword [esi + 8]
jae 0x44e685
cmp dword [esi + 0x9c], 2
je 0x446579
movzx ecx, word [ebx]
mov edi, ecx
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x38], edi
cmp edi, 0xa1
ja case.0x408896.98
movzx eax, byte [edi + 0x409110]
jmp dword [eax*4 + 0x408fc4]
movzx eax, word [ebx + 2]
mov edi, ebx
add eax, eax
sub edi, eax
mov eax, 0x88
mov dword [ebp - 0x20], edi
movzx ecx, word [edi]
cmp cx, ax
jae 0x4472d4
mov eax, 0x81
cmp cx, ax
je 0x4472d4
mov dword [ebp - 0x2c], 0
cmp ecx, 0x7d
jb 0x4088e3
add byte [eax], al
add byte [ebx + 0xe727df9], al
mov eax, 0x80
cmp cx, ax
jbe 0x44ca6a
mov eax, 0x82
cmp cx, ax
je 0x44ca6a
mov eax, 0x85
cmp cx, ax
je 0x408ca6
mov eax, 0x8a
cmp cx, ax
je 0x408ca6
mov eax, 0x86
cmp cx, ax
je 0x408ca6
mov eax, 0x8b
cmp cx, ax
je 0x408ca6
mov ecx, dword [ebp + 0xc]
movzx eax, word [ebx]
cmp eax, 0x78
jne 0x44734c
mov eax, 0x81
cmp word [edi], ax
je 0x44ca15
add ebx, 4
mov dword [ebp - 0x30], ebx
jmp 0x40886d
cmp edi, 0x88
jae 0x44c893
cmp edi, 0x81
je 0x44c893
cmp dword [esi + 0x70], 0
jne 0x44c89d
movzx eax, word [ebx + 2]
cmp word [ebx + eax*2], 0x77
je 0x44c89d
movzx eax, word [ebx]
movzx eax, byte [eax + 0x4c2140]
lea ebx, [ebx + eax*2]
mov dword [ebp - 0x30], ebx
mov edx, dword [ebp - 8]
mov eax, dword [esi + 0x50]
mov dword [ebp - 0x28], eax
mov eax, dword [esi]
cmp eax, dword [esi + 4]
jb 0x408851
jmp 0x44e68f
mov edx, dword [ebp - 8]
mov ebx, dword [ebp + 8]
cmp edx, ebx
je 0x44e62b
mov eax, dword [ebp + 0xc]
mov dword [esi + 0x84], edx
mov dword [esi + 0x90], eax
mov dword [esi + 0x80], ebx
test edi, edi
jne 0x44e671
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [esi + 0x7c]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x24], ecx
cmp eax, ecx
jae 0x44cdc7
movzx edx, word [eax]
add eax, 2
cmp dword [ebp - 0x28], 0
mov ecx, edx
mov dword [ebp - 8], eax
mov edi, eax
je 0x408a18
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
je 0x44820e
mov eax, ecx
and ecx, 0x7f
shr eax, 7
rol dword [ebx - 0x173e801f], 7
movzx eax, byte [eax + 0x4bff40]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4b1c40]
movzx eax, byte [eax*8 + 0x4af3f2]
mov dword [ebp - 0x34], eax
mov eax, dword [esi + 0x7c]
cmp edi, eax
add al, 0xc5
dec edx
add byte [ecx + 0x468bcc45], cl
jl 0x408a7e
clc
jae 0x408ab6
mov esi, dword [ebp - 8]
mov ebx, edi
jmp 0x408a50
cmp dword [ebp - 0x28], 0
mov edx, 1
movzx ecx, word [esi]
je 0x408a70
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
je 0x44823a
mov esi, dword [ebp - 0x34]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
mov edi, ebx
movzx eax, byte [eax + 0x4bff40]
mov dh, 0x80
inc eax
dec dword [ebx]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x4b1c40]
movzx ecx, byte [eax*8 + 0x4af3f2]
mov eax, 1
shl eax, cl
test dword [esi*4 + 0x4c21f0], eax
mov eax, dword [ebp - 0x24]
jne 0x408b81
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp - 0x30]
pop ebp
invalid
cmp dword [esi + 0x8c], 0
jne 0x44825e
mov edx, dword [ebp - 8]
add ebx, 2
mov dword [ebp - 0x30], ebx
jmp 0x40886d
dec dword [edi]
mov bh, 0x53
and cl, byte [ebp - 0x3c7cfdbd]
and cl, byte [ecx - 0x35740bbb]
movzx edx, word [ebx + 0x22]
lea eax, [ebx + 2]
add ebx, 0x22
mov dword [ebp - 0xc], eax
mov ecx, edx
mov dword [ebp - 0x30], ebx
cmp ecx, 0x6d
jbe 0x4484d2
mov edx, 1
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x28], 0
mov ecx, 1
mov dword [ebp - 0x24], ecx
je 0x4485a0
cmp edx, ecx
jl 0x408b6d
mov eax, dword [ebp - 8]
cmp eax, dword [esi + 0x7c]
jae 0x44cdc7
movzx edx, word [eax]
add eax, 2
mov dword [ebp - 8], eax
mov eax, edx
and eax, 0xfc00
cmp eax, 0xd800
je 0x44856d
cmp edx, 0xff
pop edx
add al, 0
add byte [ebx + 0x558bdc4d], cl
call 0xdc8e14aa
cmp ecx, edx
jle 0x408b11
mov eax, dword [ebp - 8]
cmp edx, dword [ebp - 0x20]
jne 0x448602
mov edx, dword [ebp - 8]
jmp 0x40886d
lea esi, [ebx + edx*2]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 8], esi
mov ebx, esi
mov edi, esi
cmp esi, eax
jb 0x408a50
jmp 0x408ab0
mov eax, dword [ebp - 8]
cmp eax, dword [esi + 0x7c]
jae 0x44cdc7
cmp dword [ebp - 0x28], 0
je 0x448b6d
movzx ecx, word [ebx + 2]
add ebx, 2
mov eax, ecx
mov dword [ebp - 0x34], 1
and eax, 0xfc00
mov edx, ecx
mov dword [ebp - 0x24], edx
je 0x448abe
mov eax, dword [ebp - 8]
cmp edx, 0x80
jae 0x448ae9
movzx edx, word [eax]
mov eax, dword [esi + 0x3c]
cmp edx, 0xff
ja 0x408bf7
movzx edx, byte [eax + edx]
movzx eax, byte [eax + ecx]
cmp eax, edx
jne case.0x408896.157
add ebx, 2
add dword [ebp - 8], 2
mov dword [ebp - 0x30], ebx
mov edx, dword [ebp - 8]
jmp 0x40886d
mov eax, dword [ebp - 8]
cmp eax, dword [esi + 0x7c]
jae 0x44cdc7
movzx edx, word [eax]
add eax, 2
cmp dword [ebp - 0x28], 0
mov ecx, edx
mov dword [ebp - 8], eax
mov dword [ebp - 0x20], ecx
je 0x408c4a
mov eax, edx
mov dword [ebp - 0x20], ecx
and eax, 0xfc00
cmp eax, 0xd800
je 0x447fd6
mov eax, ecx
shr eax, 7
movzx ecx, byte [eax + 0x4bff40]
mov eax, edx
shl ecx, 7
and eax, 0x7f
add ecx, eax
movzx eax, word [ebx + 2]
movzx ecx, word [ecx*2 + 0x4b1c40]
cmp eax, 9
jne 0x448000
movzx eax, word [ebx + 4]
mov ecx, dword [eax*4 + 0x4b0a70]
lea eax, [eax*4 + 0x4b0a70]
cmp dword [ebp - 0x20], ecx
jb 0x448200
lea eax, [eax + 4]
cmp edx, ecx
je 0x408d21
mov ecx, dword [eax]
cmp edx, ecx
jae 0x408c90
jmp 0x448200
movzx eax, word [edi + 4]
mov dword [ebp - 0x24], eax
lea edi, [eax + eax]
mov eax, dword [esi + 0xa8]
mov dword [ebp - 0x34], edi
mov ecx, edi
test eax, eax
jne 0x4472ec
mov eax, dword [esi + 0x94]
and eax, 0xffff0000
or eax, dword [ebp - 0x24]
mov dword [esi + 0x94], eax
cmp ecx, dword [esi + 0x14]
jge 0x447318
mov edx, dword [ebp + 0xc]
cmp ecx, edx
jg 0x44732b
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0xc]
sub eax, dword [ebp - 0x24]
mov edx, dword [ebp - 8]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edi*4], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [esi + 0x78]
mov eax, dword [esi + 0xc]
sar ecx, 1
mov dword [eax + edi*4 + 4], ecx
mov ecx, dword [ebp + 0xc]
cmp ecx, edi
jg 0x408d19
lea ecx, [edi + 2]
mov dword [ebp + 0xc], ecx
mov edi, dword [ebp - 0x20]
jmp 0x40892c
cmp edi, 0x10
jne case.0x408896.157
adc byte [edi], cl
test dword [edi - 0x7cfffffe], ecx
ret
add ebx, 6
mov dword [ebp - 0x30], ebx
mov edx, dword [ebp - 8]
jmp 0x40886d
cmp dword [ebp - 0x28], 0
je 0x448a8c
mov ax, word [ebx + 2]
add ebx, 2
mov ecx, 0xfc00
cld
add byte [eax], al
mov edi, 1
and ax, cx
mov dword [ebp - 0x34], edi
mov ecx, 0xd800
cmp ax, cx
je 0x448a7f
mov ecx, dword [esi + 0x7c]
mov eax, ecx
mov edx, dword [ebp - 8]
sub eax, edx
sar eax, 1
cmp dword [ebp - 0x34], eax
jg 0x44cd8f
lea esp, [esp]
movzx ecx, word [ebx]
dec edi
movzx eax, word [edx]
add ebx, 2
add edx, 2
mov dword [ebp - 0x30], ebx
mov dword [ebp - 8], edx
cmp cx, ax
jne case.0x408896.157
test edi, edi
jle 0x408b79
jmp 0x408d80
lea ecx, [edi - 0x55]
add ebx, 2
mov eax, ebx
test cl, 1
je 0x4498e4
mov edx, 1
movsx edi, byte [ecx + 0x4b1c2c]
mov dword [ebp - 0xc], edi
movsx edi, byte [ecx + 0x4b1c20]
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], edi
test edi, edi
jne 0x408de1
mov dword [ebp - 0x14], 0x7fffffff
movzx edi, word [ebx]
lea ebx, [eax + 2]
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x30], ebx
cmp edi, 0x10
je 0x4498eb
cmp edi, 0xf
je 0x4498eb
or eax, 0xffffffff
mov dword [ebp - 0x18], eax
test ecx, ecx
jg 0x449912
mov edi, dword [ebp - 8]
cmp ecx, dword [ebp - 0x14]
je 0x408b79
test edx, edx
je 0x44ae4f
test eax, eax
jns 0x44d1b2
mov eax, dword [ebp + 0x18]
mov edx, ebx
inc eax
mov ecx, edi
push eax
push dword [ebp + 0x14]
push esi
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00408810
add esp, 0x14
cmp dword [ebp - 0x20], 0x16
je 0x44da81
cmp dword [ebp - 0x28], 0
je 0x44df78
test eax, eax
jne 0x4089db
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xc], eax
jge case.0x408896.157
mov ecx, dword [esi + 0x7c]
cmp edi, ecx
jae 0x44a9d7
cmp dword [ebp - 0x20], 0xc
jne 0x408ea2
mov edx, dword [esi + 0x18]
test edx, edx
je 0x44dc01
push dword [ebp - 0x28]
lea eax, [esi + 0x1c]
push eax
push ecx
mov ecx, edi
call fcn.00406cde
add esp, 0xc
test eax, eax
jne case.0x408896.157
movzx ecx, word [edi]
add edi, 2
mov eax, ecx
mov dword [ebp - 0x24], edi
and eax, 0xfc00
mov edx, ecx
cmp eax, 0xd800
je 0x44dc3a
cmp dword [ebp - 0x20], 0xc
jne 0x44dc62
mov esi, dword [ebp + 0x10]
mov eax, dword [ebp - 0x24]
cmp dword [esi + 0x8c], 0
jne 0x44df36
mov eax, dword [ebp + 0x18]
mov edx, ebx
mov esi, dword [ebp + 0x10]
inc eax
inc dword [ebp - 0xc]
mov ecx, edi
push eax
push dword [ebp + 0x14]
push esi
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00408810
add esp, 0x14
test eax, eax
jne 0x4089db
cli
invalid
jmp 0x408e60
movzx edx, word [ebx + 4]
mov dword [ebp - 0x30], edx
lea eax, [edx + edx]
mov dword [ebp - 0x20], eax
cmp eax, dword [esi + 0x14]
jge case.0x408896.129
mov ecx, dword [esi + 0xc]
lea edi, [edx + edx]
mov eax, dword [ecx + eax*4]
mov dword [ebp - 0x24], eax
mov eax, dword [ecx + edi*4 + 4]
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x40], eax
mov eax, dword [esi + 0x10]
sub eax, edx
lea ecx, [ecx + eax*4]
or al, 0x81
mov eax, dword [ecx]
mov dword [ebp - 0x3c], eax
mov eax, dword [esi + 0x94]
mov dword [ebp - 0x1c], eax
mov eax, dword [esi + 0xb0]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 8]
sub eax, dword [esi + 0x78]
sar eax, 1
mov dword [ecx], eax
nop
cmp edi, 0x88
jae 0x44e35b
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp - 8]
inc eax
push eax
push dword [ebp + 0x14]
movzx eax, word [ebx]
push esi
push dword [ebp + 0xc]
movzx eax, byte [eax + 0x4c2140]
push dword [ebp + 8]
lea edx, [ebx + eax*2]
call fcn.00408810
add esp, 0x14
mov dword [ebp - 0x2c], eax
cmp eax, 0xfffffc1b
je 0x44e3af
cmp eax, 0xfffffc20
je 0x44e36a
test eax, eax
jne 0x4089db
jmp 0x44e38c
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
jne 0x40905f
add byte [ecx + 0x75], cl
inc esp
add byte [ecx], bh
jne 0x409067
add byte [ebp + 0x74], cl
inc esp
add byte [ecx + 0x73], ch
inc esp
add byte [esi + 0x38004473], cl
lea eax, [eax]
wait
mov eax, dword [eax]
xor dword [ecx - 0x73bfffbc], edx
inc esp
add dh, dl
mov eax, dword [eax + eax - 0x47]
mov eax, dword [eax + eax - 3]
mov eax, dword [eax + eax + 0x10]
mov word [eax + eax + 0x26], es
mov word [eax + eax - 0x31], es
mov eax, dword [eax + eax - 8]
xchg edx, eax
inc esp
add byte [ecx - 0x6e], dh
inc esp
add byte [ebx - 0x6e], bl
inc esp
add byte [ebx - 0x51ffbb6e], bl
xchg edx, eax
inc esp
add ah, al
add byte [esi - 0x3bffbb6e], ch
xchg edx, eax
inc esp
add dh, bl
xchg edx, eax
inc esp
add byte [esi + 0x7f00408d], ah
cwde
inc esp
add byte [ecx - 0x68], ah
inc esp
add byte [eax + ebx*4 - 0x6757ffbc], ah
inc esp
add byte [esi - 0x3bffbb68], dh
cwde
inc esp
add cl, dl
mov al, byte [eax]
or al, 0x88
inc esp
add byte [0x8b004483], al
add byte [eax + eax + 0x2e], 0x6e
inc esp
add byte [esi + 0x6d], cl
inc esp
add ah, ah
outsd dx, dword [esi]
inc esp
add byte [ebp - 0x2dffbf78], bl
insb byte es:[edi], dx
inc esp
add byte [esi], ah
imul eax, dword [eax + eax - 1], 0x6b
inc esp
add byte [ecx - 0x77], dl
inc eax
add ah, al
inc esp
add ah, dl
inc sp
add byte [edx], cl
pop dword [eax]
enter 0x4466, 0
jb 4231481
inc esp
add dl, bh
outsd dx, dword [esi]
inc esp
add byte [edx], bh
jo 0x40911f
add byte [esi - 0x23ffbb90], dl
jecxz 0x409127
add byte [edx - 0x25ffbb1c], ch
in al, 0x44
add byte [edi - 0x1b], al
inc esp
add byte [edx - 0x77ffbb9b], bl
in eax, 0x44
add byte [eax + 0x710044e5], bh
in al, 0x44
add byte [ecx - 0x60ffbf71], bh
push 0x44
add byte [edx + 0x70], bh
inc esp
add byte [ebx - 0x1a], bh
inc esp
add byte [eax], al
add dword [edx], eax
add eax, dword [esp + eax]
add eax, 151521030
or cl, byte [ebx]
or al, 13
push cs
push cs
movups xmm2, xmmword [ecx]
adc dl, byte [ebx]
adc al, 21
push ss
pop ss
sbb byte [ecx], bl
adc eax, 0x19181716
sbb bl, byte [ebx]
sbb al, 29
sbb eax, 505290270
push ds
push ds
pop ds
pop ds
and byte [ecx], ah
and ah, byte [ebx]
and al, 30
push ds
push ds
push ds
push ds
push ds
pop ds
pop ds
and byte [ecx], ah
and ah, byte [ebx]
and al, 37
and eax, 623191333
daa
sub byte [ecx], ch
sub ch, byte [ebx]
and eax, 623191333
and eax, 673654310
sub dword [edx], ebp
sub ebp, dword [esp + ebp]
sub al, 44
sub al, 44
sub eax, 808398381
xor dword [edx], esi
push edx
push edx
push edx
push edx
push edx
push edx
push edx
push edx
push edx
push edx
push edx
push edx
xor esi, dword [ebx]
xor al, 53
xor eax, 943142454
cmp dword [edx], edi
cmp bh, byte [edx]
cmp bh, byte [ebx]
cmp al, 61
cmp al, 61
aas
inc eax
inc ecx
inc edx
inc ebx
inc eax
inc ecx
inc edx
inc ebx
push edx
push edx
push edx
push edx
push edx
inc esp
inc ebp
inc esi
inc edi
dec eax
dec ecx
dec edx
dec ebx
dec esp
dec ebp
dec esi
dec edi
add byte [eax], al
push eax
push ecx
call 0x8b5cb809
inc ebp
test al, 0x89
add ch, cl
sub byte [ecx], ah
cld
call 0xc1444e43
mov edx, 0xfc2120e9
call 0x84ed39
fisub dword [edx + 0x44]
add al, dl
bound eax, qword [eax + eax - 0x40]
bound eax, qword [eax + eax - 0x26]
bound eax, qword [eax + eax - 0x7d]
jge 0x4465c0
add byte [ebp + 0x1c], dh
push 0xf
lea eax, [eax]
lea eax, [eax]
lea eax, [eax]
lea eax, [eax]
xor edx, edx
lea ecx, [ebp + 0x18]
call fcn.00408870
invalid
jmp 0x4465d6
and al, 0xfc
dec dword [ebp + 0x452b1845]
clc
cdq
xor eax, edx
sub eax, edx
neg eax
jmp 0x408a3b
and al, 0xfc
dec dword [ebx + 0x4589f845]
movsb byte es:[edi], byte [esi]
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
jmp 0x870b7a68
cld
invalid
mov es, word [eax + 0xf00ff17]
or esp, 0x23
cld
jmp dword [esi - 0x7d]
movzx eax, word [ebx + 2]
cmp word [ebx + eax*2], 0x77
ja 0x446657
sbb al, 0x43
ja 0x446657
sbb al, 0x43
je 0x4466c0
cmp word [ebx], 0x78
mov edx, dword [esi - 0x14efff70]
nop
add byte [eax], dl
jmp 0x446664
xchg byte [eax + edx + 0x5589c989], al
or al, 0x89
inc ebp
clc
je 0xb87264
nop
add byte [eax], dl
jmp 0x446664
cmp eax, dword [ebp - 0x1c]
je 0x56587264
mov eax, dword [ebp + 0x18]
inc eax
cmp word [ebx], 0x7a
push eax
push dword [ebp + 0x14]
push esi
push edx
push ecx
mov ecx, dword [ebp - 8]
jne 0x1842c70e
lea edx, [ebx + 4]
call fcn.00408870
invalid
movzx eax, word [ebx]
push esi
add cl, byte [ebp - 0x7f49f0f1]
inc eax
and dword [esi + ebx*2 + 0x1c], ecx
or bh, bh
xor edx, dword [ebx + eax*2]
call fcn.00408870
invalid
mov ebx, dword [ebp - 0x2c]
mov ecx, 0x741fc2
jmp 0xeb546cce
movzx eax, word [eax]
dec ebx
lea ecx, [eax + eax]
cmp ecx, dword [ebp + 0xc]
jge 0x446a2f
mov eax, dword [esi + 0xc]
cmp dword [eax + ecx*4], 0
jge 0x4469bf
mov ecx, dword [ebp - 0x34]
xor eax, eax
mov eax, dword [esi + 0x24]
lea eax, [ecx + eax*2]
mov dword [ebp - 0x34], eax
test ebx, ebx
jg 0x446a1a
jmp 0xbb05696b
inc ebx
ja 0x446a2f
adc al, 0x43
jne 0x446ab4
movzx eax, word [edx + 2]
cmp word [edx + eax*2], 0x77
lea edx, [edx + eax*2]
je 0x446aa6
mov eax, dword [ebp - 0x30]
mov ecx, 0x741f02
movzx eax, byte [eax + 0x5e4c2140]
sub ecx, eax
lea ebx, [edx + ecx*2]
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x20]
clc
mov bh, 0xd0
movzx eax, byte [eax + 0x5e4c2140]
jmp 0x1446973
add byte [ecx], al
add byte [ecx + 0x9486], cl
add cl, ch
jb 0x446b50
cld
dec dword [ebx + 0x4e8b1046]
or al, 0x2b
movsb byte es:[edi], byte [esi]
mov ebp, 0x8981048b
add al, 0xb9
mov ecx, dword [ebp - 8]
sub ecx, dword [esi + 0x78]
mov eax, dword [esi + 0xc]
sar ecx, 1
mov dword [eax + edi*4 + 4], ecx
mov ecx, dword [ebp + 0xc]
mov eax, 0xc4d8b04
cmp edi, ecx
jl 0x4792b3
mov eax, dword [esi + 0xc]
lea edx, [eax + ecx*4]
lea ecx, [eax + edi*4]
cmp edx, ecx
jae 0x446b7b
sub ecx, edx
mov edi, edx
dec ecx
shr ecx, 2
inc ecx
or eax, 0xffffffff
rep stosd dword es:[edi], eax
mov edi, dword [ebp - 0x34]
lea eax, [edi + 2]
mov dword [ebp + 0xc], eax
jmp 0x4792b3
mov eax, dword [ebp + 0x18]
lea edx, [ebx + 4]
mov ecx, dword [ebp - 8]
inc eax
push eax
push 0
push esi
add cl, byte [ebp + 0x24047e0f]
call fcn.00408870
invalid
cmp word [eax], 0x77
je 0x446c12
jmp 0xb8e434
movzx eax, word [ebx + 2]
cmp word [ebx + eax*2], 0x77
lea ebx, [ebx + eax*2]
je 0x446bab
jmp 0x446c2b
cmp word [ebx], 0x78
je 0xe3409019
add edi, edi
jne 0x408a36
movzx eax, word [ebx + 2]
cmp word [ebx + eax*2], 0x77
lea ebx, [ebx + eax*2]
je 0x446c3d
mov eax, dword [esi - 0x14efff70]
add ebx, 4
mov dword [ebp - 0x30], ebx
mov dword [ebp + 0xc], eax
jmp 0xe9408bd9
mov al, 0x1f
je 0x446c6c
jne 0x446c81
mov dword [esi + 0x9c], 0
mov dword [ebp - 0x34], 0x56146655
jmp 0x446c88
mov dword [ebp - 0x34], 0
mov eax, dword [ebp + 0x18]
lea edx, [ebx + 4]
mov ecx, dword [ebp - 8]
inc eax
push eax
push 0
push esi
add cl, byte [ebp + 0x24047e0f]
call fcn.00408870
invalid
mov bh, 0x43
add ah, byte [esi - 0x7d]
cmp al, 0x43
ja 0x446c68
sbb al, 0x43
je 0x446c88
jmp 0x446d1d
cmp dword [ebp - 0x34], 0
jne 0x408a36
add ebx, 4
mov dword [ebp - 0x30], ebx
jmp 0x408bd9
add dh, 0x22
cld
jmp dword [esi - 0x75]
xchg byte [eax + eax + 0x55250000], dl
and al, 0x74
pop ss
mov dword [ebp + 0x6e05e84c], eax
jne 0x446e4a
mov dword [ebp + 0x6e05e84c], 0x6e05e8ff
mov eax, dword [esi + 0xff17ac]
mov dword [ebp + 0x6e05e850], eax
mov eax, dword [esi + 0xff17b4]
mov dword [ebp + 0x1dfcff5c], eax
add byte [eax + 0x2c], dl
inc eax
mov edx, 0x2015ff50
or al, 0x75
add al, 0xc4
add al, 0xc0
mov dword [edi], ecx
invalid
or al, 0x41
mov dword [ebp - 0x24], ecx
je 0xbb056f4a
mov eax, dword [ebp - 0x58]
mov dword [esi + 0xff17a8], eax
mov eax, dword [ebp - 0x50]
mov al, 0x8d
lea esi, [esi + edi*8 - 0x3ec47a24]
mov al, 0x8d
lea esi, [esi + edi*8 - 0x3ec47a24]
je 0x409019
push eax
call fcn.0040921b
invalid
inc dword [eax]
mov dword [ebp + 8], eax
jmp 0x408bd9
salc
jne 0x408a3b
movzx eax, word [ebx + 2]
cmp word [ebx + eax*2], 0x77
lea ebx, [ebx + eax*2]
je 0x447081
add ebx, 4
mov dword [ebp - 0x30], ebx
jmp 0x408bd9
aas
sbb edi, esp
invalid
aas
sbb edi, esp
invalid
pop dword [esi]
std
push ebp
mov ecx, dword [ebp - 0x30]
test ecx, ecx
jne 0x447317
clc
inc esi
or al, 0x8b
dec ebp
call 0x8a30c874
adc al, 1
clc
inc esi
or al, 0x8b
push ebp
invalid
add al, 0x8b
dec esi
adc byte [ebx], ch
dec ebp
loopne 0x4472f4
inc esi
or al, 0x8b
push ebp
hlt
cmp dword [ebp - 0x24], 4
jne 0xbb057264
jge 0x4472f6
add al, 0xf
test dword [ebx - 1], eax
sar byte [edx - 0x7637a75], 0xf0
sbb al, 0xfc
mov eax, dword [ebp + 0x1cf0f89c]
cld
inc dword [ebx + 0x5d8904c3]
add al, 0x89
pop ebp
shr cl, 1
movsd dword es:[edi], dword [esi]
sbb ah, bh
call 0x8b58b8c3
invalid
mov edx, dword [ebp - 0x24]
mov ecx, edi
cmp dword [eax + 4], edx
mov edx, dword [ebp - 8]
jne 0x408d23
mov eax, edx
mov dword [esi - 0x3676ef7c], eax
and byte [ebp + 8], al
mov dword [esi + 0xff1780], eax
xchg byte [eax - 0x9ff00e9], al
ret 0x741f
invalid
xchg byte [eax - 0x9ff00e9], al
ret 0x741f
jmp 0x408a3b
add byte [ecx], al
add byte [ecx + 0x9486], cl
add cl, ch
invalid
lea edi, [eax + edx*4]
lea ecx, [eax + ecx*4]
cmp edi, ecx
jae 0x4473a4
sub ecx, edi
dec ecx
shr ecx, 2
inc ecx
or eax, 0xffffffff
rep stosd dword es:[edi], eax
mov edi, dword [ebp - 0x34]
jmp 0x408d4b
mov edi, dword [ebp - 0x28]
lea eax, [esi + 0x1c]
push edi
push eax
push ecx
mov ecx, dword [ebp - 8]
call 0x8b49baba
invalid
sbb edi, esp
call 0xfc5b542c
dec dword [ebx + 0x148d1c7e]
aas
lea eax, [ecx + edx]
mov ecx, dword [ebp - 8]
cmp ecx, eax
jb 0xe9409019
sub ecx, edx
mov ax, word [ecx]
cmp ax, word [esi + 0x34]
jne 0x409019
invalid
mov eax, dword [ebp - 8]
invalid
mov dword [0xf01fa83], eax
test al, ah
adc eax, 0x458bfffc
clc
add eax, dword [ebx + 0x3b660240]
add ah, byte [esi + 0x3b]
add ah, byte [esi + 0x3b]
inc esi
jne 0x4474dd
jmp 0xe9408b23
dec esp
pop esi
jne 0x409019
invalid
call 0xbb406d3e
sub ebx, 0x12
mov eax, dword [ebp + 0x75]
cmp ch, cl
cli
push es
std
push ebp
mov edx, dword [edi]
lea eax, [edx + edx]
sub ecx, eax
mov eax, dword [ebp - 8]
cmp eax, ecx
ja 0x838b74e0
mov ax, word [eax]
cmp ax, word [esi + 0x34]
jne 0xbb0574dd
cmp edx, 1
sbb ebx, edx
push dword [ebp - 8]
add eax, dword [ebx + 0x3b660240]
add ah, byte [esi + 0x3b]
inc esi
jne 0x56417cdd
mov ecx, dword [edi]
mov eax, dword [esi + 0x7c]
add ecx, ecx
sub eax, ecx
cmp dword [ebp - 8], eax
clc
mov bh, 0xf8
jne 0x763b74e0
pop esi
sub eax, 0xfe85dc4d
jge 0x44760d
add al, bh
mov bh, 0xf8
je 0x746438a7
cmp eax, dword [esi + 0x78]
je 0x44fb0c
lea edx, [eax - 2]
mov edi, 0x7404fc00
add eax, dword [ebx + 0x66ca8b02]
and eax, edi
mov edi, 0xf000dc00
cmp ax, di
jne 0x447667
lea ecx, [edx - 2]
mov edx, ecx
cmp ecx, dword [esi + 0x8486]
jae 0x447675
mov dword [esi + 0x8486], edx
movzx ecx, word [edx]
mov eax, ecx
mov edi, ecx
and eax, 0x7404fc00
cmp eax, 0xff17d800
jne 0x4476a4
movzx eax, word [edx + 2]
and ecx, 0x4af103ff
and eax, 0x4af103ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
mov edi, ecx
cmp dword [esi + 0x58], 0
je 0x4476ee
cmp edi, 0x5f
je 0x4476e4
mov eax, edi
and edi, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4bff40]
shl eax, 7
add eax, edi
movzx eax, word [eax*2 + 0x744b1c40]
movzx eax, byte [eax*8 + 0x4af3f1]
mov eax, dword [eax*4 + 0x155350]
les ecx, [eax]
add dword [ebp + eax + 0x59], esi
enter 0x7503, 0x25
clc
mov bh, 0xf8
mov edi, 0x741fc2
sti
and byte [ecx + 0x100ff], al
add esi, dword [ebx + 0x13]
cmp edi, 0x3000100
jae 0x447709
mov eax, dword [esi + 0x44]
test byte [ecx + eax], 0x10
mov eax, dword [ebp - 8]
je 0x44770c
mov edi, 0x56146655
jmp 0x44770e
mov eax, dword [ebp - 8]
xor edi, edi
cmp eax, dword [esi + 0x7c]
jae 0x14aaccc9
movzx ecx, word [eax]
mov eax, ecx
mov edx, ecx
and eax, 0x7404fc00
cmp eax, 0xff17d800
jne 0x447749
mov eax, dword [ebp - 8]
and ecx, 0x4af103ff
shl ecx, 0xa
movzx eax, word [eax + 2]
and eax, 0x4af103ff
or ecx, eax
add ecx, 0x10000
mov edx, ecx
cmp dword [esi + 0x58], 0
je 0x447771
cmp edx, 0x5f
je 0xeb547b1b
mov eax, edx
and edx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4bff40]
shl eax, 7
add eax, edx
jmp 0x5658de66
cmp edx, 0x3000100
jae 0x447786
mov eax, dword [esi + 0x44]
test byte [ecx + eax], 0x10
jne 0x6699791b
cld
mov ecx, dword [edi]
mov bh, 3
inc bl
add cl, byte [ecx - 0x77c2fa3]
add eax, 0xc28b850f
pop ds
je 0x4477d6
iretd
add byte [ebx + 0x79c085c1], cl
add eax, dword [ebx - 0x73e8040]
pop es
movzx eax, byte [eax + 0x4bff40]
shl eax, 7
and ecx, 0x8000007f
jns 0x4477fa
dec ecx
or ecx, 0xffffff80
inc ecx
add eax, ecx
movzx eax, word [eax*2 + 0x744b1c40]
movzx eax, byte [eax*8 + 0x4af3f1]
mov eax, dword [eax*4 + 0x155350]
les ecx, [eax]
add dword [edi + edi*2 + 0x59], esi
enter 0xffffffffffff8b03, 0x45
clc
je 0x44789a
xor edi, edi
cmp eax, dword [esi + 0x7c]
jae 0xf95189c9
invalid
mov edi, 0x56146655
jmp 0x447822
mov al, 0xfe
fadd qword [ebp - 0x7b7974c5]
add byte [eax], al
jbe 0x86217786
mov dword [esi + 0x68], 0x741fc2
invalid
cmp edx, 1
je 0x409019
mov eax, dword [ebp - 8]
add eax, dword [ebx + 0x3b660240]
inc esi
je 0x409019
mov edi, dword [ebp - 0x28]
mov eax, dword [ebp - 8]
invalid
jne 0x4479dc
mov dword [esi + 0x68], 0x741fc2
invalid
mov eax, dword [ebp - 8]
mov ecx, dword [esi + 0x7c]
cmp eax, ecx
jae 0x8460ce27
rol byte [edx + eax], 0x89
inc ebp
clc
test dword [edi + 0x4a], edx
test byte [ebx], ch
adc esp, edi
test dword [ebx], edi
ror dword [edi], 0x83
and edx, dword [ecx]
cld
jmp dword [esi - 0x75]
add byte [edi], cl
mov bh, 8
inc byte [edx + eax]
invalid
add byte [edi], cl
mov bh, 8
inc byte [edx + eax]
invalid
add byte [edi], cl
mov bh, 8
inc byte [edx + eax]
invalid
add byte [edi], cl
mov bh, 8
inc byte [edx + eax]
invalid
add byte [edi], cl
mov bh, 8
inc byte [edx + eax]
invalid
add byte [edi], cl
mov bh, 8
inc byte [edx + eax]
invalid
invalid
cld
invalid
cld
invalid
clc
and ecx, 0x4af103ff
shl ecx, 0xa
movzx eax, word [eax]
and eax, 0x4af103ff
or ecx, eax
add ecx, 0x10000
inc byte [ebp - 8]
add al, byte [ecx + 0x8485f9]
add byte [edi + 0x1d], dh
je 0x409019
invalid
shl dword [0x7404fc00], 0x3d
add al, bl
pop ss
push dword [ebp + 0x20]
mov eax, dword [ebp - 8]
and ecx, 0x4af103ff
shl ecx, 0xa
movzx eax, word [eax]
and eax, 0x4af103ff
or ecx, eax
add ecx, 0x10000
inc byte [ebp - 8]
inc ebp
clc
add al, byte [ecx + 0x8485f9]
add byte [edi + 0x17], dh
je 0x408b23
lea eax, [ecx - 0xa]
pop ecx
enter 0xf03, 0xffffffffffffff87
cld
paddb mm7, mm7
jmp 0x408b23
int1
dec edx
add byte [ebx + 0x53508504], cl
adc eax, 0x108c400
je 0x5ba38095
xchg ecx, eax
invalid
cmp eax, 3
je 0x5ba38095
cmp dword [ebp - 0x20], 0x5f
jge 0x4481f0
pop edi
je 0xbb058095
xor ecx, ecx
jmp 0xbb0580b1
sar byte [edx + 0xa03d], 4
jb 0x44824e
cmp eax, 0xd7ff
jbe 0xbb058095
cmp eax, 0x300e000
jae 0xbb058095
xor ecx, ecx
jmp 0xbb0580b1
sar byte [edx + 0xf10ff83], 0x84
mov al, 0xd
cld
invalid
loope 0x448297
or ecx, eax
add ecx, 0x10000
jmp 0x408a78
pop es
cld
dec dword [edi]
mov bh, 0x46
add al, byte [ecx - 0xefc001f]
dec edx
and eax, 0x4af103ff
shl ecx, 0xa
or ecx, eax
mov edx, 0x4af102
add ecx, 0x10000
jmp 0x408ad0
mov dword [ebp - 0x2c], eax
mov eax, dword [esi + 0x30]
mov dword [ebp - 0x30], ebx
lea eax, [eax + ecx*2]
mov ecx, dword [esi + 0x54]
neg ecx
sbb ecx, ecx
xor edi, edi
neg ecx
mov dword [ebp - 0x18], edi
dec ecx
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x2c], edi
jbe 0x4483a4
mov dword [ebp - 0x34], eax
movzx eax, word [eax]
dec dword [ebp - 0x2c]
lea edi, [eax + eax]
mov dword [ebp - 0x18], edi
cmp edi, dword [ebp + 0xc]
jge 0x44834e
mov eax, dword [esi + 0xc]
cmp dword [eax + edi*4], 0
jl 0x44834e
mov ecx, dword [eax + edi*4 + 4]
sub ecx, dword [eax + edi*4]
jmp 0x4483a1
cmp dword [ebp - 0x2c], 1
or dh, dh
int3
mov dword [ebp - 0x20], ecx
movzx eax, word [ebx]
mov dword [ebp - 0x1c], eax
add eax, 0xffffff9e
cmp eax, 7
ja 0xe8e1c408
movzx eax, byte [eax + 0x44e731]
add ah, byte [eax*4 + 0x44e729]
mov eax, dword [ebp - 0x1c]
add ebx, 2
mov dword [ebp - 0x30], ebx
lea edi, [eax - 0x62]
and edi, 1
mov dword [ebp - 0x1c], edi
movsx edi, byte [eax + 0x744b1bca]
movsx eax, byte [eax + 0x744b1bbe]
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x75]
aaa
mov dword [ebp - 0x2c], 0x10458bff
mov dword [esi], ebp
cmp word [ebx], 0x69
mov eax, 0x8400
movzx edi, word [ebx + 2]
sete al
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x1c], eax
movzx eax, word [ebx + 4]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x75]
pop es
mov dword [ebp - 0x2c], 0x10458bff
add ebx, 6
mov dword [ebp - 0x30], ebx
mov eax, edi
test ecx, ecx
je 0x4088cd
jns 0x448439
test dword [edi + 0x4a], edx
test byte [esp + eax - 0x7010004], dl
add edi, eax
inc ebp
int3
invalid
mov eax, edi
call 0x103901e5
mov byte [esi + eax*2], cl
popfd
call 0x8e30cae1
cmp al, 0x47
mov eax, dword [ebp + 0x18]
mov edx, ebx
inc eax
mov ecx, edi
push eax
push dword [ebp + 0x14]
push esi
add cl, byte [ebp + 0x24047e0f]
call fcn.00408870
invalid
jmp 0x408a3b
inc esp
add byte [edx], al
and al, 0x85
cmp edi, esp
inc esp
add byte [ebp - 0x3c7c61bf], cl
add cl, byte [ecx - 0x77c2fa3]
or byte [ebx + 0xa], dh
dec eax
jmp ecx
nop
sub al, 0x1c
dec ebx
je 0x448582
mov esi, 0x4b1c2080
je 0x448503
push ebp
call 0xd4255f09
test ebx, ebx
test esp, edx
add eax, 0x45c7fffc
loopne 0x44858a
dec dword [ebx - 0x3716efbb]
add eax, 0x3b57fffc
mov eax, dword [ebp + 0x10]
jmp 0x408b5b
cmp edx, 0x69
sete al
mov dword [ebp - 0x10], eax
push edi
cmp eax, dword [ebx - 0x48f09206]
push ebx
add cl, byte [ecx - 0x6bf017ab]
ror byte [ecx - 0x48f02bbb], 0x43
add al, 0x89
inc ebp
loopne 0x448543
cmp edx, 0x6d
movzx edx, word [ebx + 2]
mov dword [ebp - 0x18], edx
sete al
mov dword [ebp - 0x2c], eax
movzx eax, word [ebx + 4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0x75]
pop es
inc ebp
jne 0x4485c2
mov dword [ebp - 0x20], 0x10458bff
add ebx, 6
mov dword [ebp - 0x30], ebx
jmp 0x408b5b
add dword [edi], ecx
mov esp, es
add eax, 0x458bfffc
clc
cmp eax, dword [esi + 0x7c]
jae 0x44ce27
movzx edx, word [eax]
add eax, 2
mov dword [ebp - 8], eax
cmp edx, 0xff17fe83
jbe 0x448631
invalid
mov ecx, edx
test dl, 0x1f
je 0x448638
and ecx, 7
shr edx, 3
shl eax, cl
mov ecx, dword [ebp - 0xc]
test byte [edx + ecx], al
je 0x409019
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x18]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, edx
jle 0x44860c
jmp 0x408bd0
add byte [eax], al
jbe 0x448824
mov dword [esi + 0x68], 0x741fc2
invalid
mov ecx, dword [ebp - 0x14]
cmp dword [ebp - 0x2c], 0
jne 0x408bd9
cmp eax, ecx
jb 0x409019
mov edi, dword [ebp - 8]
mov eax, dword [ebp + 0x18]
mov edx, ebx
inc eax
mov ecx, edi
push eax
push dword [ebp + 0x14]
push esi
add cl, byte [ebp + 0x24047e0f]
call fcn.00408870
invalid
call fcn.00408870
sub ebx, 0x14
call 0xacc99a62
invalid
mov edx, ebx
inc eax
mov ecx, edi
push eax
push dword [ebp + 0x14]
push esi
add cl, byte [ebp + 0x24047e0f]
call fcn.00408870
sub ebx, 0x14
call 0xe9f9ffb1
pop esp
invalid
add bh, ah
dec dword [ebx + 0x4d8b7c46]
clc
sub eax, ecx
and eax, 0xfffffffe
cmp eax, 2
jl 0x44ce0f
movzx eax, word [ecx]
add ecx, 2
mov dword [ebp - 8], ecx
cmp word [ebx + 2], ax
jne 0x409019
inc bl
add al, 0x89
pop ebp
shr cl, 1
mov ebx, 0xffffc00
mov bh, 0x43
add al, byte [ecx - 0xefc001f]
dec edx
and eax, 0x4af103ff
shl ecx, 0xa
or ecx, eax
mov dword [ebp - 0x34], 0x4af102
add ecx, 0x10000
clc
ror dword [ecx - 0x121623ab], 1
add ah, bh
dec dword [edi]
mov bh, 0x38
inc byte [edx + eax]
mov dword [ebp - 8], eax
mov eax, edi
and eax, 0x7404fc00
cmp eax, 0xff17d800
jne 0x448b82
mov ecx, dword [ebp - 8]
and edi, 0x4af103ff
shl edi, 0xa
movzx eax, word [ecx]
mov bh, 1
add ecx, 2
and eax, 0x4af103ff
mov dword [ebp - 8], ecx
or edi, eax
add edi, 0x10000
clc
inc ebp
int3
invalid
dec ebx
add bh, byte [edx - 0xe8017d]
cmp cx, dx
ja 0x448be7
mov eax, dword [esi + 0x3c]
movzx edx, byte [eax + ecx]
mov eax, dword [ebp - 8]
jmp 0x448be9
mov edx, ecx
movzx ecx, word [eax]
mov edi, 0xff17fe83
cmp cx, di
ja 0x448c00
mov eax, dword [esi + 0x3c]
movzx ecx, byte [eax + ecx]
mov eax, dword [ebp - 8]
cmp edx, ecx
jne 0x409019
inc al
add bh, dh
ret
clc
mov dword [ebp - 0x30], ebx
jmp 0x408bd9
push ebp
in al, dx
mov ecx, ebx
jmp 0x448cdb
inc ebp
call 0x746d85c9
or byte [ecx - 0x67c0fab], cl
xor eax, 0x45c70775
invalid
cmp dword [ebp - 0x28], 0
movzx eax, word [ebx]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], eax
je 0x448f67
and eax, 0x836afc00
mov dword [ebp - 0xc], 0x741fc2
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0x741fc2
mov dword [ebp - 0x1c], 0x741fc2
cmp eax, 0xff17d800
jne 0x448d4e
movzx eax, word [ebx + 2]
mov ebx, dword [ebp - 0x20]
and eax, 0x4af103ff
and ebx, 0x4af103ff
mov dword [ebp - 0xc], 0x4af102
shl ebx, 0xa
or ebx, eax
mov dword [ebp - 0x30], 0x4af102
add ebx, 0x10000
mov dword [ebp - 0x1c], 0x3001d
mov eax, ebx
mov dword [ebp + 0x63], ebx
add eax, 0x3ebdca4
mov eax, dword [ebp - 0x24]
invalid
lea ebx, [ecx + 2]
mov dword [ebp - 0x30], ebx
cmp edi, 0x2e
jb 0xc82090ab
cmp dword [ebp - 0x28], 0
je 0x448fad
cmp eax, 0x7f
jbe 0x448fad
shr eax, 7
movzx ecx, byte [eax - 0x14b400c0]
mov eax, dword [ebp - 0x24]
invalid
cmp eax, 0xff17fe83
ja 0x448fc0
mov eax, dword [esi + 0x40]
mov ecx, dword [ebp - 0x20]
movzx edi, byte [eax + ecx]
jmp 0x448fc3
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x24], edi
mov eax, dword [ebp - 8]
mov dword [ebp - 0x1c], 0x741fc2
invalid
clc
sti
dec dword [ebx + 0x458bf87d]
sbb byte [ebx - 0x3074bf2d], cl
push eax
push dword [ebp + 0x14]
push esi
add cl, byte [ebp + 0x24047e0f]
call 0xbb408870
sub edi, 2
invalid
add cl, byte [ecx + 0x5d89e44d]
ror byte [ecx + 0x4d8bdc4d], 1
clc
movzx edx, word [ecx]
add ecx, 2
mov eax, edx
mov dword [ebp - 8], ecx
and eax, 0x7404fc00
cmp eax, 0xff17d800
jne 0x449223
movzx eax, word [ecx]
and edx, 0x4af103ff
shl edx, 0xa
and eax, 0x4af103ff
add ecx, 2
or edx, eax
mov dword [ebp - 8], ecx
add edx, 0x10000
invalid
je 0x4491e0
add al, 0xc5
hlt
cmp edi, edx
je 0x409019
cmp eax, edx
je 0x409019
jmp 0x408bd9
pop ss
cmp ecx, 0xff17fe83
ja 0x4492ab
mov eax, dword [esi + 0x40]
movzx ecx, byte [eax + ecx]
cmp ecx, edx
je 0x409019
test byte [esi - 3], ah
sti
invalid
test byte [esi - 3], ah
sti
dec dword [ebx - 0x141607ab]
idiv bl
dec dword [edi]
mov bh, 0x43
add al, byte [ebx - 0x2f07fb3d]
mov edx, dword [ebp - 8]
jmp 0x4089a6
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xc], edx
mov ecx, ebx
jmp 0x56449393
stc
inc edx
je 0x4492ea
mov dword [ebp - 0x10], edx
cmp ecx, 0x4f
jne 0x4492f1
mov dword [ebp - 0x10], 0x741fc2
inc bl
add al, 0xf8
retf
xor esi, esi
div dword [ebx]
rol bh, cl
inc ebp
aam 0x55
adc al, 0x56
add ebx, 2
mov dword [ebp - 0xc], edx
clc
retf
invalid
invalid
mov eax, dword [ebp + 0x18]
mov edx, ebx
inc eax
mov ecx, edi
push eax
push dword [ebp + 0x14]
push esi
add cl, byte [ebp + 0x24047e0f]
call fcn.00408870
inc dword [ebx - 0x2917eb15]
invalid
invalid
mov al, 0xf1
inc dword [ebx - 0x2917eb15]
jne 0xbb408a3b
sti
mov edx, 0x8902ef83
jge 0x449889
sub edi, 2
mov dword [ebp - 8], edi
cmp edi, dword [ebp - 0x20]
jne 0x449868
jmp 0xbb4089f2
cmp ecx, dword [ebx + 0x8486]
add byte [eax], al
jbe 0x449853
mov dword [esi + 0x68], 0x741fc2
invalid
test byte [eax], al
add byte [ecx], al
jle 0x449853
jmp 0x44e3b1
add bh, byte [edx + 0x741fc2]
mov ecx, edi
mov dword [ebp - 0x14], edi
inc bl
add al, 0x89
dec ebp
hlt
rol byte [ebx + 0x45c75cf9], cl
hlt
add byte [eax], al
add al, 0x74
mov dword [ebp - 0x14], edi
sete dl
inc bl
add al, 0x89
push ebp
invalid
inc ebp
adc byte [ecx - 0x3836ccf7], cl
inc ebp
in al, dx
push ebp
adc al, 0x56
add ebx, 2
jmp 0x449930
mov edx, dword [ebp - 0x10]
mov eax, ebx
mov dword [ebp - 0x2c], 0x56146655
mov dword [ebp - 0xc], ecx
jmp 0x408e41
add byte [esp + esi*2], al
xor dword [ebp + 0x463b0247], ecx
jl 0x44aa54
sub esi, edi
jle 0x44a9fe
add al, 0x75
and edi, esi
jle 0x44aa08
add dh, byte [ebp + 0x1d]
mov ax, word [edi]
cmp ax, word [esi + 0x34]
jne 0x44aa0c
mov dword [esi + 0x68], 0x741fc2
invalid
add dh, bh
mov esi, 0x848c
add dword [edi], ecx
invalid
movsd dword es:[edi], dword [esi]
cmp dword [eax], eax
add byte [ebx - 0x387c1bbb], cl
mov eax, dword [ebp - 0x1c]
add edi, 2
mov ecx, dword [ebp - 0xc]
inc eax
mov dword [ebp - 8], edi
add cl, byte [ebx - 0x76bf0bb3]
jge 0x44aa11
mov dword [ebp - 0x1c], eax
cmp eax, ecx
jle 0xbb05a979
jmp 0x763ba226
invalid
pop ds
je 0x44aa57
invalid
cmp edi, dword [esi + 0x7c]
jae 0x44aa37
movzx eax, word [edi]
mov dword [ebp - 0x38], 0xff17fe83
cmp ax, word [ebp - 0x38]
ja 0x44ae53
mov ecx, eax
mov eax, dword [esi + 0x44]
test byte [ecx + eax], 0x10
jne 0x409019
dec dword [ebx - 0x38010bb3]
mov ecx, dword [ebp - 0xc]
hlt
inc bh
add al, byte [edx - 0x77]
jge 0x44ae52
cmp edx, ecx
jle 0x44ae28
jmp 0xbb05a226
int1
dec edx
and eax, 0x4af103ff
shl ecx, 0xa
or ecx, eax
add ecx, 0x10000
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, byte [eax + 0x4bff40]
shl eax, 7
add eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx eax, word [eax*2 + 0x744b1c40]
movzx eax, byte [eax*8 + 0x4af3f2]
mov dword [ebp - 0x38], eax
test dl, 0x1f
je 0x44c8d4
shl eax, cl
mov ecx, dword [ebp - 0x38]
test dword [ecx*4 + 0x4c21f0], eax
je 0xbb44b8d9
clc
cli
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 8], edi
jmp 0xbb05c84b
mov eax, 0xbac0fc1f
jmp 0x408a3b
jne 0x408a3b
mov edi, dword [ebp - 0x20]
jmp 0x44ca98
mov dword [esi + 0xe800b8], edi
mov eax, 0xfffffc1b
jmp 0x408a3b
fcom dword [edi]
push dword [ebp + 0x1c]
movzx eax, word [edi]
and ecx, 0x4af103ff
shl ecx, 0xa
and eax, 0x4af103ff
or ecx, eax
add ecx, 0x10000
inc bh
add dl, byte [edx - 0x75]
push ebp
fsub st(0), st(0)
ret
mov edx, ebx
inc dword [ebp - 0x18]
inc eax
push eax
push dword [ebp + 0x14]
mov ecx, edi
push esi
add cl, byte [ebp + 0x24047e0f]
call fcn.00408870
sub ebx, 0x14
call 0x7ac8ddbd
invalid
invalid
invalid
and ecx, 0x4af103ff
shl ecx, 0xa
and eax, 0x4af103ff
or ah, byte [0x4af103ff]
or ecx, eax
add ecx, 0x10000
inc bh
add bh, byte [ecx]
dec ebp
in al, dx
je 0x409019
mov eax, dword [ebp + 0x18]
inc edx
inc eax
mov dword [ebp - 0xc], edx
push eax
push dword [ebp + 0x14]
mov edx, ebx
mov ecx, edi
push esi
add cl, byte [ebp + 0x24047e0f]
call fcn.00408870
sub ebx, 0x14
call 0xe9d44690
jge 0x44d174
sti
loop 0x44d1c2
invalid
jne 0x44d17c
sti
dec dword [ebx + 0x4d3bf44d]
call 0xbe8c5edf
sti
invalid
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xc], eax
jge 0x409019
cmp edi, dword [esi + 0x7c]
jae 0x44aa37
movzx edx, word [edi]
add edi, 2
invalid
cmp ecx, 0x40
je 0x44daa8
cmp ecx, 0x60
je 0x44daa8
cmp ecx, 0x40000a0
jb 0x44da9c
cmp ecx, 0xd783
jbe 0x44daa8
cmp ecx, 0xe000
jae 0x44da2f
push es
or al, 1
add eax, 0x741fc2f6
add byte [ebx], bh
inc ebp
les ecx, [edi]
test byte [ebx - 0x4b], ah
sti
dec dword [ebx - 0x2c74e7bb]
test dl, 0x1f
je 0x44daad
cmp eax, dword [ebp - 0x3c]
je 0x409019
mov eax, dword [ebp + 0x18]
mov edx, ebx
inc dword [ebp - 0xc]
inc eax
push eax
push dword [ebp + 0x14]
mov ecx, edi
push esi
add cl, byte [ebp + 0x24047e0f]
call fcn.00408870
sub ebx, 0x14
call 0x53c8eaaf
dec ebp
fadd qword [ebp - 0x450a517]
loop 0x44dae5
invalid
push edx
scasd eax, dword es:[edi]
sti
dec dword [ebx + 0x4539ec45]
hlt
inc dword [ebx]
int1
dec edx
and eax, 0x4af103ff
shl ecx, 0xa
or ecx, eax
mov dword [ebp - 0x34], 0x4af102
add ecx, 0x10000
mov esi, dword [ebp - 0x1c]
mov eax, ecx
shr eax, 7
and ecx, 0x7f
mov edx, ebx
movzx eax, byte [eax + 0x4bff40]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x744b1c40]
movzx ecx, byte [eax*8 + 0x4af3f2]
test dl, 0x1f
je 0x44dbdf
shl eax, cl
test dword [esi*4 + 0x4c21f0], eax
mov esi, dword [ebp + 0x10]
je 0x44dc07
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x1c], ecx
lea edi, [ebx + eax*2]
mov eax, dword [esi + 0x7c]
mov ebx, edi
mov edx, edi
cmp edi, eax
jb 0xbb05db72
insd dword es:[edi], dx
inc eax
mov edx, 0x468b03eb
jl 0x44db96
jmp 0x44dc0a
mov eax, dword [esi + 0x7c]
mov ebx, dword [ebp - 0x30]
invalid
pop ebp
sar dh, 1
mov esi, 0x848c
add al, 0x74
and byte [ebx], bh
sal byte [edx + 0x1c], 1
cmp edx, dword [esi + 0x8486]
jbe 0x44dc36
mov dword [esi + 0x68], 0x741fc2
invalid
mov eax, dword [ebp + 0x18]
mov edx, ebx
inc dword [ebp - 0xc]
inc eax
push eax
push dword [ebp + 0x14]
mov ecx, edi
push esi
add cl, byte [ebp + 0x24047e0f]
call fcn.00408870
sub ebx, 0x14
call 0x8dc8ec2f
invalid
sar edi, cl
inc ebp
hlt
push esi
sbb al, 0x8d
add al, 0x12
sub ecx, eax
cmp edi, ecx
ja 0x408f02
mov ax, word [edi]
cmp ax, word [esi + 0x34]
jne 0x408f02
cmp edx, 1
je 0x409019
mov ax, word [edi + 2]
cmp ax, word [esi + 0x36]
je 0x409019
jmp 0x408f02
cmp edx, 0x3000100
jae 0x409019
mov eax, dword [esi + 0x44]
test byte [ecx + eax], 1
je 0x409019
jmp 0x408f3c
cmp edx, 0x3000100
jae 0x76409019
mov eax, dword [esi + 0x44]
test byte [ecx + eax], 0x10
je 0x409019
jmp 0x408f3c
adc al, 0x8b
iretd
sub ebx, 0x14
call 0x6bc8f348
cld
invalid
test byte [eax + 0x3bfffbac], cl
mov esi, 0x8486
jbe 0x409019
mov dword [esi + 0x68], 0x741fc2
invalid
sti
invalid
mov eax, 0xbac0fff4
jmp 0x408a3b
ja 0x44e452
push es
cmp word [eax], 0x77
jne 0x44e434
mov dword [ebp - 0x2c], 0x7400
mov eax, dword [ebp - 0x1c]
mov dword [esi + 0x94], eax
movzx eax, word [ebx + 2]
lea ebx, [ebx + eax*2]
mov eax, dword [ebp - 0x34]
mov dword [esi + 0xff17b0], eax
cmp word [ebx], 0x77
je 0x76408fc0
mov eax, dword [esi + 0xc]
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov dword [eax + edx*4], ecx
clc
inc esi
or al, 0x8b
dec ebp
ror byte [ecx - 0x74fb6fb4], 0x4e
adc byte [ebx], ch
dec ebp
ror byte [ebx + 0x558b0c46], 1
les ecx, [ecx + 0x458b8814]
aam 0xe9
jmp dword [ebp + 0x7b8dfffb]
mov eax, dword [ebp - 0x2c]
jmp 0x408a3b
inc eax
push eax
movzx eax, word [ebx]
push dword [ebp + 0x14]
push esi
movzx ecx, byte [eax + 0x5e4c2140]
movzx eax, word [ebx + 2]
add cl, byte [ebp + 0x1cc8030f]
or bh, bh
xor edx, dword [ebx + ecx*2]
mov ebx, dword [ebp - 8]
mov ecx, ebx
call fcn.00408870
sub ebx, 0x14
mov dword [ebp - 0x2c], eax
pop ebx
add eax, dword [ecx]
je 0x44e48d
cmp eax, 0x57ccfc19
jne 0x44e4a1
cmp dword [esi + 0x741fb0], 0
jne 0x44e4a1
mov dword [esi + 0x741fb0], edi
jmp 0x408a3b
cmp eax, 0xfffffc1f
jne 0x408a3b
sti
invalid
sti
dec dword [ebx - 0xe87f6a]
add byte [ebx - 0x2b0c1731], cl
add al, 0
mov edx, dword [esi + 0xff1780]
mov ecx, edi
call fcn.0049b9ac
call 0x73c9f494
neg byte [esi + 0x5b]
mov dword [esi + 0xff1780], ebx
mov eax, 0xfffffc1e
jmp 0x408a3b
jne 0x44e4f0
movzx eax, word [ebx]
push esi
add cl, byte [ebp - 0x7f49f0f1]
inc eax
and dword [esi + ebx*2 + 0x1c], ecx
or bh, bh
xor edx, dword [ebx + eax*2]
call fcn.00408870
sub ebx, 0x14
call 0x3bc9f4d3
movsd dword es:[edi], dword [esi]
sti
invalid
inc dword [eax]
add byte [eax + eax], dh
mov eax, dword [ebp + 0x18]
inc eax
push eax
movzx eax, word [ebx]
push dword [ebp + 0x14]
push esi
movzx ecx, byte [eax + 0x5e4c2140]
movzx eax, word [ebx + 2]
add cl, byte [ebp + 0x1cc8030f]
or bh, bh
xor edx, dword [ebx + ecx*2]
mov ecx, dword [ebp - 8]
call fcn.00408870
sub ebx, 0x14
pop ebx
add eax, dword [ecx]
je 0x44e586
cmp eax, 0x57ccfc19
jne 0x44e595
cmp dword [esi + 0x741fb0], 0
jne 0x44e595
mov al, 0x1f
je 0x44e58c
add byte [ebp + 6], dh
mov dword [esi + 0x741fb0], edi
call 0x9ec9f570
movsb byte es:[edi], byte [esi]
sti
invalid
dec esp
pop esi
sbb al, 8
or al, 0x1c
or bh, bh
xor edx, dword [ebx + eax*2]
mov ebx, dword [ebp - 8]
mov ecx, ebx
call fcn.00408870
sub ebx, 0x14
call 0x63c9f5ab
movsb byte es:[edi], byte [esi]
sti
dec dword [ecx - 0xe87f62]
add byte [eax - 0x3e2], bh
jmp 0x408a3b
mov eax, dword [ebp + 0x18]
inc eax
push eax
movzx eax, word [ebx]
push dword [ebp + 0x14]
push esi
movzx ecx, byte [eax + 0x5e4c2140]
movzx eax, word [ebx + 2]
add cl, byte [ebp + 0x1cc8030f]
or bh, bh
xor edx, dword [ebx + ecx*2]
mov ecx, dword [ebp - 8]
call fcn.00408870
sub ebx, 0x14
pop ebx
add eax, dword [ecx]
je 0x44e664
cmp eax, 0x57ccfc19
jne 0x44e673
cmp dword [esi + 0x741fb0], 0
jne 0x44e673
mov dword [esi + 0x741fb0], edi
je 0x44e673
call 0xc0c9f64e
mov dword [0x9e89fffb], eax
mov dword [esi + 0xff1780], ebx
mov eax, 0xfffffc20
mov dword [esi + 0xff1780], ebx
mov eax, 0xfffffc20
invalid
jmp 0x408a3b
je 0x44e691
je 0x408a19
cmp dword [esi + 0x741fa8], 0
jne 0x408a19
cmp dword [esi + 0x60], 0
jne 0x409019
cmp dword [esi + 0x64], 0
je 0x408a19
mov ecx, dword [esi + 0x98]
mov eax, dword [esi + 0x78]
lea eax, [eax + ecx*2]
cmp ebx, eax
je 0x409019
jmp 0x408a19
test byte [edx - 0x30740005], dh
call fcn.004098ef
push 0x14
push edi
call fcn.0041fe2d
pop ecx
pop ecx
jmp fcn.0040ad94
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x40]
push 0x29
movzx edx, word [edx + esi*2]
mov dword [esp + 0x18], edx
and al, 0x18
pop edx
cmp word [esp + 0x14], dx
je 0x4792df
mov edx, dword [esp + 0x10]
inc edx
mov dword [esp + 0x10], edx
movzx edx, word [edx*2 + 0x4c63b4]
test dx, dx
jne 0x4792b6
inc esi
inc ecx
push 0
pop edx
cmp ecx, eax
jb 0x4792a3
or esi, 0xffffffff
cmp ebx, 0xffffffff
je 0x4793ef
cmp esi, 0xffffffff
je 0xbbb2ef
cmp esi, ebx
jb 0x4793ef
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x24]
call fcn.004063b0
push 0x4af350
lea ecx, [esp + 0x24]
call fcn.00403426
sub esi, ebx
lea eax, [ebx + 1]
dec esi
lea ecx, [esp + 0x741f80]
push esi
push eax
lea eax, [esp + 0x48]
push eax
call fcn.00406d85
lea eax, [esp + 0x741f80]
push eax
lea ecx, [esp + 0x24]
call fcn.004063b0
mov esi, 0x4af350
lea ecx, [esp + 0x20]
push esi
call fcn.00403426
xor eax, eax
push eax
push esi
push eax
call fcn.0042d748
add esp, 0xc
call 0xeccca336
invalid
mov eax, dword [edi]
mov eax, dword [eax + 4]
cmp byte [eax + edi + 0xd], 0
mov ecx, dword [eax + edi + 8]
je 0x479402
mov ecx, dword [ecx + 0x38]
mov dword [ecx + 0x14], 2
cmp byte [eax + edi + 0xd], 0
mov ecx, dword [eax + edi + 8]
je 0x479417
mov ecx, dword [ecx + 0x38]
mov byte [ecx + 0x18], 0
jmp 0x47964a
mov eax, dword [esp + 0x3c]
sub dword [eax], 1
jne 0x479667
push 4
push eax
call fcn.0041fe2d
push dword [esp + 0x40]
call fcn.0041fe74
add esp, 0xc
lea ecx, [esp + 0x40]
call fcn.004098ef
lea ecx, [esp + 0x20]
call fcn.004098ef
lea ecx, [esp + 0x60]
call fcn.004098ef
lea ecx, [esp + 0x70]
call fcn.004098ef
lea ecx, [esp + 0x56140080]
call fcn.004098ef
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10