Function at 0x4295f2
Capabilities:
Copy file
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x460
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x5c], 0x179a1997
mov dword [esp + 0x60], 0x13f31589
mov dword [esp + 0x64], 0xfdc1185
mov dword [esp + 0x68], 0xb820d91
mov dword [esp + 0x6c], 0x7060995
mov byte [esp + 0x70], 0
mov dword [esp + 8], 0
mov eax, dword [esp + 8]
cmp eax, 0x14
ja 0x428a35
nop
nop
nop
mov eax, dword [esp + 8]
mov ecx, dword [esp + 8]
movzx ecx, byte [esp + ecx + 0x5c]
mov edx, eax
xor edx, 0x77032c6
and eax, 0x77032c6
lea eax, [edx + eax*2]
lea edx, [eax + ecx]
and eax, ecx
add eax, eax
sub edx, eax
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0x3c]
add al, 0x22
mov ecx, dword [esp + 8]
mov byte [esp + ecx + 0x5c], al
inc dword [esp + 8]
mov eax, dword [esp + 8]
cmp eax, 0x15
jb 0x4289f0
lea eax, [esp + 0x5c]
lea ecx, [esp + 0x48]
push eax
call fcn.0043d6a0
shr eax, 0x1f
jmp dword [eax*4 + 0x44c45c]
lea ecx, [esp + 0x48]
push 0x410
call fcn.0043d8f0
not eax
shr eax, 0x1f
xor ebx, ebx
jmp dword [eax*4 + 0x44c474]
mov dword [esp + 0x5c], 0x7aa56c7b
mov dword [esp + 0x60], 0x54765b7c
mov dword [esp + 0x64], 0x404f4567
mov dword [esp + 0x68], 0x7d4a4e63
mov dword [esp + 0x6c], 0x5c6d6a7a
mov dword [esp + 0x70], 0x55686e6b
mov dword [esp + 0x74], 0x5253766e
mov dword [esp + 0x78], 0x5e895079
mov dword [esp + 0x7c], 0x7e746e76
mov dword [esp + 0x80], 0xa67d936f
mov dword [esp + 0x84], 0x396e8787
mov word [esp + 0x88], 0
mov byte [esp + 0x8a], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x2e
ja 0x428b29
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x5c]
mov edx, eax
xor edx, 0x72546c59
and eax, 0xf2546c59
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
add al, 0x43
mov ecx, dword [esp]
mov byte [esp + ecx + 0x5c], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x2f
jb 0x428af0
lea eax, [esp + 0x3c]
lea ecx, [esp + 0x48]
push 0
push 0x2b
lea edx, [esp + 0x64]
push edx
push eax
call fcn.0043e610
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0x40]
xor eax, eax
cmp edi, esi
sete al
jmp dword [eax*4 + 0x44c47c]
mov eax, esi
sub eax, edi
sar eax, 3
imul eax, eax, 0x421
push eax
call fcn.0040c640
add esp, 4
mov dword [esp + 0x2c], 0
xor ecx, ecx
cmp edi, esi
setne cl
mov dword [esp + 0x28], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x30], esi
jmp dword [ecx*4 + 0x44c494]
mov edi, dword [esp + 0x38]
add edi, 8
xor eax, eax
mov esi, dword [esp + 0x30]
cmp edi, esi
setne al
jmp dword [eax*4 + 0x44c494]
mov esi, dword [edi]
mov dword [esp + 0x38], edi
mov edi, dword [edi + 4]
push 0x400
push 0
lea ebx, [esp + 0x64]
push ebx
call fcn.0040c6d0
add esp, 0xc
lea eax, [esp + 8]
lea ecx, [esp + 0x48]
push eax
push 0
push 0x400
push ebx
push edi
push esi
call fcn.0043e3a0
cmp eax, 0xc0000000
setae al
mov ecx, dword [esp + 8]
or ecx, dword [esp + 0xc]
sete cl
or cl, al
movzx eax, cl
jmp dword [eax*4 + 0x44c4a4]
mov eax, 1
jmp dword [eax*4 + 0x44c4ac]
xor eax, eax
jmp dword [eax*4 + 0x44c4ac]
mov byte [esp + 0x45b], 0
movzx eax, byte [esp + 0x5c]
xor esi, esi
test al, al
je 0x428c41
lea ecx, [esp + 0x5c]
cmp al, 0x2e
je 0x428c3f
movzx eax, byte [ecx + 1]
inc ecx
test al, al
jne 0x428c30
jmp 0x428c41
mov esi, ecx
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x44c4b4]
movzx eax, byte [esi + 1]
inc esi
xor ebx, ebx
test al, al
je 0x428c71
mov ecx, esi
nop
nop
nop
nop
cmp al, 0x2e
je 0x428c6f
movzx eax, byte [ecx + 1]
inc ecx
test al, al
jne 0x428c60
jmp 0x428c71
mov ebx, ecx
xor eax, eax
test ebx, ebx
setne al
jmp dword [eax*4 + 0x44c4bc]
mov edx, ebx
sub edx, esi
mov eax, edx
and eax, 3
mov edi, edx
or edi, 3
imul edi, eax
xor eax, 3
mov ecx, edx
and ecx, 0xfffffffc
imul ecx, eax
add edi, ecx
shr edi, 2
movzx eax, byte [ebx - 1]
cmp eax, 0x3d
je 0x428cae
cmp eax, 0x2e
jne 0x428caf
dec edi
mov eax, edx
not eax
and eax, 2
mov ecx, edx
and ecx, 0xfffffffd
sub ecx, eax
movzx eax, byte [esi + ecx]
cmp eax, 0x3d
mov dword [esp + 0x1c], edx
je 0x428ccf
cmp eax, 0x2e
jne 0x428cd0
dec edi
mov dword [esp + 0x58], edi
lea eax, [edi + 1]
push eax
call fcn.0040c640
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], esi
cmp ebx, esi
je 0x428dda
xor edx, edx
mov edi, 2
jmp 0x428d10
mov edx, dword [esp + 0x34]
nop
nop
nop
lea eax, [edi + 4]
add edi, 2
cmp edi, ecx
mov edi, eax
jae 0x428dda
mov dword [esp + 0x24], edx
mov esi, dword [esp + 0x20]
movzx eax, byte [esi + edi - 2]
push eax
call fcn.0041f720
add esp, 4
mov ebx, eax
movzx eax, byte [esi + edi - 1]
push eax
call fcn.0041f720
add esp, 4
mov bh, al
shl bl, 2
shr al, 4
and al, 3
or al, bl
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x24]
mov byte [ecx + edx], al
inc edx
mov ecx, dword [esp + 0x1c]
cmp edi, ecx
jae 0x428d00
mov eax, dword [esp + 0x20]
movzx eax, byte [eax + edi]
push eax
mov esi, edx
call fcn.0041f720
mov edx, esi
mov ecx, dword [esp + 0x20]
add esp, 4
cmp al, 0x40
je 0x428d00
mov bl, al
shl bh, 4
shr al, 2
and al, 0xf
or al, bh
mov esi, dword [esp + 0x24]
lea edx, [esi + 2]
mov dword [esp + 0x34], edx
mov edx, dword [esp + 0x14]
mov byte [edx + esi + 1], al
lea eax, [edi + 1]
cmp eax, ecx
jae 0x428cf9
mov eax, dword [esp + 0x20]
movzx eax, byte [eax + edi + 1]
push eax
call fcn.0041f720
mov ecx, dword [esp + 0x20]
add esp, 4
cmp al, 0x40
mov edx, dword [esp + 0x34]
je 0x428d00
shl bl, 6
add al, bl
mov edx, dword [esp + 0x14]
mov esi, dword [esp + 0x24]
mov byte [edx + esi + 2], al
add esi, 3
mov edx, esi
jmp 0x428d00
mov eax, dword [esp + 0x58]
mov esi, dword [esp + 0x14]
mov byte [esi + eax], 0
push esi
call fcn.00403c50
add esp, 4
mov ebx, eax
jmp dword [0x44c4c4]
push esi
call fcn.0040c650
add esp, 4
push ebx
call fcn.004045a0
add esp, 4
mov esi, eax
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x44c4cc]
jmp 0x428fe9
jmp dword [0x44c4d4]
mov dword [esp + 8], 0x11fc8889
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 7
ja 0x428eb8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 8]
mov edx, eax
xor edx, 0x48afdbc5
mov edi, eax
xor edi, 0x3750243a
or eax, 0x48afdbc5
and eax, edi
lea edx, [edx + eax*2]
mov eax, edx
and eax, ecx
xor edx, ecx
lea ecx, [edx + eax*2]
mov edx, ecx
xor edx, eax
add edx, eax
not eax
and eax, ecx
add eax, eax
sub eax, edx
mov dword [esp], eax
mov eax, dword [esp]
mov ecx, eax
xor ecx, 0xd9
and eax, 0x26
add eax, eax
sub eax, ecx
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 8], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 8
jb 0x428e50
lea eax, [esp + 8]
push eax
push esi
call fcn.004044f0
add esp, 8
jmp case.0x428c78.6
lea eax, [esp + 8]
push eax
push esi
call fcn.004044f0
add esp, 8
jmp dword [0x44c4dc]
mov dword [esp + 8], 0x11fc8889
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 7
ja 0x428ed0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 8]
mov edx, eax
xor edx, 0x48afdbc5
mov edi, eax
xor edi, 0x3750243a
or eax, 0x48afdbc5
and eax, edi
lea edx, [edx + eax*2]
mov eax, edx
and eax, ecx
xor edx, ecx
lea ecx, [edx + eax*2]
mov edx, ecx
xor edx, eax
add edx, eax
not eax
and eax, ecx
add eax, eax
sub eax, edx
mov dword [esp], eax
mov eax, dword [esp]
mov ecx, eax
xor ecx, 0xd9
and eax, 0x26
add eax, eax
sub eax, ecx
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 8], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 8
jb 0x428f10
jmp 0x428ed0
xor ecx, ecx
test eax, eax
setne cl
mov edx, dword [esp + 0x18]
jmp dword [ecx*4 + 0x44c4e4]
jmp 0x428fb5
movzx ecx, byte [eax]
test cl, cl
je 0x428fab
inc eax
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], cl
inc edx
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x428fa0
mov byte [edx], 0x3a
mov byte [edx + 1], 0x20
add edx, 2
movzx eax, byte [esp + 0x5c]
test al, al
je 0x428fdb
lea ecx, [esp + 0x5d]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x428fd0
mov byte [edx], 0xa
inc edx
mov dword [esp + 0x18], edx
mov al, 1
mov dword [esp + 0x2c], eax
push ebx
call fcn.00404810
add esp, 4
mov edi, dword [esp + 0x38]
add edi, 8
xor eax, eax
mov esi, dword [esp + 0x30]
cmp edi, esi
setne al
jmp dword [eax*4 + 0x44c494]
mov ebx, dword [esp + 0x2c]
mov eax, ebx
and al, 1
movzx eax, al
jmp dword [eax*4 + 0x44c49c]
mov esi, dword [esp + 0x28]
jmp dword [0x44c4ec]
and bl, 1
jmp dword [0x44c4f4]
mov eax, dword [case.0x428a46.4]
xor ebx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
lea ecx, [esp + 0x48]
call fcn.0043dac0
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
xor ebx, ebx
jmp dword [0x44c4f4]
mov ecx, dword [ebp + 8]
mov esi, dword [esp + 0x18]
mov byte [esi], 0
mov edx, esi
not edx
mov eax, dword [esp + 0x28]
and edx, eax
mov ebx, eax
not eax
and eax, esi
mov dword [esp + 0x5c], 0x3060959
mov dword [esp + 0x60], 0x1f330a0d
mov dword [esp + 0x64], 0x1c0209
mov dword [esp + 0x68], 0x1606225f
mov dword [esp + 0x6c], 0x2b551c29
mov dword [esp + 0x70], 0x111f1217
mov dword [esp + 0x74], 0xf7f2530f
mov word [esp + 0x78], 0x7df0
mov dword [esp + 0x7a], 0
sub eax, edx
mov dword [esp], 0
mov edx, dword [esp]
cmp edx, 0x21
ja 0x429112
nop
mov edx, dword [esp]
mov esi, dword [esp]
movzx esi, byte [esp + esi + 0x5c]
mov edi, edx
xor edi, 0x276ffb66
and edx, 0x276ffb66
lea edx, [edi + edx*2]
lea edi, [edx + esi]
and edx, esi
add edx, edx
sub edi, edx
mov dword [esp + 8], edi
mov edx, dword [esp + 8]
add dl, 2
mov esi, dword [esp]
mov byte [esp + esi + 0x5c], dl
inc dword [esp]
mov edx, dword [esp]
cmp edx, 0x22
jb 0x4290d0
lea edx, [esp + 0x5c]
push eax
mov esi, ebx
push ebx
push edx
call fcn.0040d160
mov ebx, eax
jmp dword [0x44c4ec]
push esi
call fcn.0040c650
add esp, 4
and bl, 1
jmp dword [0x44c4f4]
mov eax, dword [esp + 0x3c]
test eax, eax
je case.0x428c78.14
cmp eax, dword [esp + 0x40]
je case.0x428c78.14
push eax
call fcn.0040c650
add esp, 4
jmp case.0x428c78.14
jmp dword [0x44c500]
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x429160
cmp eax, dword [esp + 0x40]
je 0x429160
push eax
call fcn.0040c650
add esp, 4
jmp 0x429160
int3
xor ebx, ebx
test eax, eax
sete bl
xor edx, edx
jmp dword [ebx*4 + 0x44c574]
mov eax, dword [ebp - 0x20]
lea ebx, [eax + 0x18]
mov eax, dword [case.0x428c78.24]
nop
nop
nop
nop
nop
jmp eax
mov dword [ebp - 0x14], edi
jmp dword [edx*4 + 0x44c524]
mov dword [ebp - 0x4c], ebx
mov dword [esi], 0x39843b98
mov dword [esi + 4], 0x256f2773
mov dword [esi + 8], 0x219f2393
mov dword [esi + 0xc], 0x2d902f9c
mov dword [esi + 0x10], 0x298e2b8b
mov dword [esi + 0x14], 0x1559179b
mov dword [esi + 0x18], 0x115a1359
mov dword [esi + 0x1c], 0x1dac1fa7
mov dword [esi + 0x20], 0x19be1b57
mov dword [esi + 0x24], 0x5b707a5
mov dword [esi + 0x28], 0x1be034e
mov dword [esi + 0x2c], 0xd410fb9
mov dword [esi + 0x30], 0x9410bb2
mov dword [esi + 0x34], 0x75cc77ac
mov dword [esi + 0x38], 0x71e673db
mov dword [esi + 0x3c], 0x7dd57fea
mov dword [esi + 0x40], 0x79c77bd8
mov dword [esi + 0x44], 0x65cd67e4
mov dword [esi + 0x48], 0x61f163cb
mov word [esi + 0x4c], 0x6f60
mov dword [esi + 0x4e], 0
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
cmp eax, 0x51
ja 0x42932f
nop
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
movzx edx, byte [esi + edx]
mov ebx, eax
xor ebx, 0x48c86b0b
mov edi, eax
xor edi, 0x373794f4
or eax, 0x48c86b0b
and eax, edi
lea eax, [ebx + eax*2]
xor eax, edx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add al, 0xc9
mov edx, dword [ebp - 0x10]
mov byte [esi + edx], al
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, 0x52
jb 0x4292f0
push 0
push 0
push ecx
mov ebx, dword [ebp - 0x18]
push ebx
push esi
call fcn.00444210
add esp, 0x14
shr eax, 0x1f
jmp dword [eax*4 + 0x44c53c]
push dword [ebp - 0x30]
push dword [ebp - 0x3c]
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebx]
call fcn.004446d0
add esp, 0x24
not eax
shr eax, 0x1f
mov edi, dword [ebp - 0x14]
jmp dword [eax*4 + 0x44c544]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea eax, [ecx*2 + 2]
inc ecx
jns 0x42938a
mov eax, 0xffffffff
push eax
call fcn.0040c640
add esp, 4
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x20]
mov dword [ebx], 0x239c21f9
mov dword [ebx + 4], 0x27922597
mov dword [ebx + 8], 0x3b863999
mov dword [ebx + 0xc], 0x3fee3d80
mov dword [ebx + 0x10], 0x33863191
mov dword [ebx + 0x14], 0x3736358c
mov eax, dword [ebp - 0x4c]
mov word [eax], 0
mov byte [eax + 2], 0
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
cmp eax, 0x1a
ja 0x429422
nop
nop
nop
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebx + ecx]
mov edx, eax
xor edx, 0xac403ac8
mov ebx, eax
xor ebx, 0x53bfc537
or eax, 0x2c403ac8
and eax, ebx
mov ebx, dword [ebp - 0x20]
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add al, 0x18
mov ecx, dword [ebp - 0x10]
mov byte [ebx + ecx], al
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, 0x1b
jb 0x4293e0
push dword [ebp - 0x30]
mov edi, dword [ebp - 0x54]
push edi
push 0
push ebx
mov ebx, dword [ebp - 0x18]
push dword [ebx]
call fcn.00444d20
add esp, 0x14
shr eax, 0x1f
mov dword [ebp - 0x2c], edi
mov edi, dword [ebp - 0x14]
jmp dword [eax*4 + 0x44c54c]
mov dword [ebp - 0x2c], 0
jmp dword [0x44c554]
push dword [ebp - 0x54]
call fcn.0040c650
add esp, 4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, dword [ebx]
mov dword [ebp - 0x28], 0xf00f0e0d
mov word [ebp - 0x24], 0
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x1c]
cmp eax, 5
ja 0x4294dc
nop
nop
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
movzx edx, byte [ebp + ecx - 0x28]
mov ecx, eax
xor ecx, 0x277d557d
and eax, 0x277d557d
lea eax, [ecx + eax*2]
mov ecx, eax
and ecx, edx
xor eax, edx
lea eax, [eax + ecx*2]
mov edx, eax
not edx
and edx, ecx
add edx, ecx
not ecx
and ecx, eax
sub ecx, edx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
add al, 0x8f
mov ecx, dword [ebp - 0x1c]
mov byte [ebp + ecx - 0x28], al
inc dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp eax, 6
jb 0x429490
mov ecx, dword [0x4505bc]
test ecx, ecx
je 0x429540
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x4c], eax
xor eax, eax
mov edx, dword [0x4505c0]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edx + eax*8], 0x625b6034
je 0x42952e
inc eax
cmp ecx, eax
jne 0x429500
jmp 0x429540
mov eax, 4
xor ebx, ebx
cmp eax, 4
setb bl
mov ecx, 0x20119
xor edx, edx
mov edi, dword [ebp - 0x14]
jmp dword [ebx*4 + 0x44c56c]
mov eax, dword [edx + eax*8 + 4]
cmp eax, dword [ebp - 0x4c]
jne case.default.0x429549
nop
nop
nop
nop
nop
nop
nop
nop
nop
xor eax, eax
cmp dword [ebp - 0x2c], 0
setne al
jmp dword [eax*4 + 0x44c55c]
mov ebx, dword [ebp - 0x48]
push ebx
call fcn.004437a0
add esp, 4
cmp dword [ebx], 1
sete cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x44c564]
xor eax, eax
xor ebx, ebx
cmp eax, 4
setb bl
mov ecx, 0x20119
xor edx, edx
jmp dword [ebx*4 + 0x44c56c]
mov eax, 2
xor ebx, ebx
cmp eax, 4
setb bl
mov ecx, 0x20119
xor edx, edx
jmp dword [ebx*4 + 0x44c56c]
push ebx
push 1
push dword [0x4505c4]
push eax
call fcn.004403a0
add esp, 0x10
xor eax, eax
cmp dword [ebp - 0x2c], 0
setne al
jmp dword [eax*4 + 0x44c55c]
mov eax, 2
xor ebx, ebx
cmp eax, 4
setb bl
mov ecx, 0x20119
xor edx, edx
jmp dword [ebx*4 + 0x44c56c]
mov eax, dword [case.0x429442.10]
jmp eax
xor eax, eax
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
sete al
jmp dword [eax*4 + 0x44c58c]
mov eax, dword [ebp - 0x38]
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, 0xfffffffe
nop
cmp word [ecx + eax + 2], 0
lea eax, [eax + 2]
jne 0x429620
cmp eax, 0xffffffd9
mov esi, dword [ebp - 0x34]
jge 0x42964d
mov eax, 0xffffffff
jmp 0x429650
jmp dword [0x44c59c]
xor eax, eax
jmp 0x42a4eb
add eax, 0x26
mov ebx, dword [ebp - 0x44]
push eax
call fcn.0040c640
add esp, 4
mov edi, eax
mov dword [esi], 0x9ff999c4
mov dword [esi + 4], 0xa3d09def
mov dword [esi + 8], 0xa7cfa1ca
mov dword [esi + 0xc], 0xabf6a5cf
mov dword [esi + 0x10], 0xafdda9cf
mov dword [esi + 0x14], 0xb3d8adde
mov dword [esi + 0x18], 0xb7ddb1d9
mov dword [esi + 0x1c], 0xbbc0b586
mov dword [esi + 0x20], 0xbfd4b9dc
mov dword [esi + 0x24], 0xbdbc
mov byte [esi + 0x28], 0
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
cmp eax, 0x28
ja 0x429701
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
movzx eax, byte [esi + eax]
mov edx, ecx
xor edx, 0x519c649a
add ecx, ecx
and ecx, 0xa338c934
mov esi, ecx
and esi, edx
xor ecx, edx
lea ecx, [ecx + esi*2]
mov esi, dword [ebp - 0x34]
xor ecx, eax
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
add al, 0xfe
mov ecx, dword [ebp - 0x10]
mov byte [esi + ecx], al
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, 0x29
jb 0x4296c0
mov eax, dword [ebp - 0x2c]
movzx ecx, word [eax]
mov eax, edi
test cx, cx
je 0x429731
mov eax, dword [ebp - 0x2c]
lea edx, [eax + 2]
mov eax, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x429720
mov word [eax], 0
movzx ecx, word [esi]
test cx, cx
je 0x429761
add esi, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [esi]
add esi, 2
test cx, cx
jne 0x429750
mov word [eax], 0
jmp dword [0x44c5a4]
push dword [ebp - 0x2c]
call fcn.0040c650
add esp, 4
xor eax, eax
cmp word [edi], 0x5b
sete al
jmp dword [eax*4 + 0x44c5ac]
xor eax, eax
cmp word [edi], 0x5b
sete al
jmp dword [eax*4 + 0x44c5ac]
mov edx, dword [ebp - 0x40]
mov dword [edx], 0x397c3b71
mov dword [edx + 4], 0x258b279c
mov dword [edx + 8], 0x21b023b5
mov dword [edx + 0xc], 0x2db92f8a
mov dword [edx + 0x10], 0x298e2b85
mov dword [edx + 0x14], 0x15871785
mov dword [edx + 0x18], 0x11b81386
mov dword [edx + 0x1c], 0x1db71f87
mov dword [edx + 0x20], 0x19801b4e
mov dword [edx + 0x24], 0x5ac07b4
mov word [edx + 0x28], 0x304
mov dword [edx + 0x2a], 0
mov byte [edx + 0x2e], 0
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
cmp eax, 0x2e
ja 0x429851
nop
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [edx + ecx]
mov edx, eax
xor edx, 0xc479580b
add eax, eax
and eax, 0x88f2b016
mov esi, eax
and esi, edx
xor eax, edx
lea eax, [eax + esi*2]
lea edx, [eax + ecx]
and eax, ecx
mov ecx, edx
not ecx
and ecx, eax
add ecx, eax
not eax
and eax, edx
mov edx, dword [ebp - 0x40]
sub eax, ecx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add al, 0xc9
mov ecx, dword [ebp - 0x10]
mov byte [edx + ecx], al
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, 0x2f
jb 0x429800
push 0
push edx
push edi
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov esi, dword [ebp - 0x5c]
push 0x60
push 3
push 0x120089
push esi
mov dword [ebp - 0x54], edi
push edi
call fcn.004439d0
add esp, 0x14
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44c5b4]
push 0
mov edi, dword [ebp - 0x14]
push edi
push dword [esi]
call fcn.00443d70
add esp, 0xc
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44c5bc]
mov esi, dword [edi]
lea edi, [esi + 1]
mov ebx, dword [case.0x429879.6]
nop
nop
nop
nop
nop
nop
nop
nop
nop
push edi
call fcn.0040c640
add esp, 4
jmp ebx
push 0
push esi
mov dword [ebp - 0x20], eax
push eax
mov eax, dword [ebp - 0x5c]
push dword [eax]
call fcn.00443e80
add esp, 0x10
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44c5d4]
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
mov eax, dword [ebp - 0x20]
jmp dword [0x44c5e0]
mov byte [eax + esi], 0
nop
nop
nop
mov byte [eax + esi], 0
push 0x20
call fcn.0040c640
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x20]
jmp dword [0x44c5e4]
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx + 0x18], 0xffffffff
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x10], 0
mov dword [ecx], 0
mov dword [ebp - 0x6c], ecx
push esi
push eax
call fcn.0042c290
mov ecx, dword [case.0x429879.17]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp ecx
movzx eax, al
mov esi, dword [ebp - 0x60]
jmp dword [eax*4 + 0x44c5fc]
mov dword [esi], 0xdbd4dabf
mov dword [esi + 4], 0xa6d4acc7
mov dword [esi + 8], 0xdba7ab93
mov dword [esi + 0xc], 0x8ca9a0ce
mov dword [esi + 0x10], 0xe29f9cec
mov dword [esi + 0x14], 0x9495bcaf
mov dword [esi + 0x18], 0xe3e4e4e3
mov dword [esi + 0x1c], 0x75e3
mov byte [esi + 0x20], 0
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
cmp eax, 0x20
ja 0x4299e5
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [esi + ecx]
mov edx, eax
xor edx, 0xdb0d4e12
and eax, 0xdb0d4e12
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add al, 0xa6
mov ecx, dword [ebp - 0x10]
mov byte [esi + ecx], al
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, 0x21
jb 0x4299b0
mov ecx, dword [ebp - 0x6c]
push esi
call fcn.0042c4f0
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x44c604]
jmp dword [0x44c624]
mov esi, dword [ebp - 0x6c]
mov ecx, esi
call fcn.0042c680
push esi
call fcn.0040c650
add esp, 4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp dword [0x44c634]
mov ebx, dword [ebp - 0x44]
jmp dword [0x44c63c]
push dword [ebp - 0x20]
call fcn.0040c650
add esp, 4
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov dword [ebp - 0x28], 0xf00f0e0d
mov word [ebp - 0x24], 0
mov dword [ebp - 0x1c], 0
mov ecx, dword [ebp - 0x1c]
cmp ecx, 5
ja 0x429aae
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
movzx edx, byte [ebp + edx - 0x28]
mov esi, ecx
xor esi, 0x277d557d
and ecx, 0x277d557d
lea esi, [esi + ecx*2]
mov ecx, esi
and ecx, edx
xor esi, edx
lea edx, [esi + ecx*2]
mov esi, edx
not esi
and esi, ecx
add esi, ecx
not ecx
and ecx, edx
sub ecx, esi
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x10]
add cl, 0x8f
mov edx, dword [ebp - 0x1c]
mov byte [ebp + edx - 0x28], cl
inc dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
cmp ecx, 6
jb 0x429a60
mov ecx, dword [0x4505bc]
test ecx, ecx
je case.0x429879.0
mov edx, dword [ebp - 0x28]
xor esi, esi
mov edi, dword [0x4505c0]
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0x625b6034
je 0x429d45
inc esi
cmp ecx, esi
jne 0x429ad0
jmp case.0x429879.0
jmp dword [0x44c618]
add eax, 8
mov esi, dword [eax]
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x44c61c]
not eax
mov dword [edi + edx + 4], eax
mov ecx, dword [ebp - 0x2c]
add ecx, 8
mov eax, dword [ebp - 0x38]
mov dword [eax + 4], ecx
add esi, 4
mov esi, dword [esi]
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x44c61c]
mov ebx, dword [esi]
mov eax, dword [ebp - 0x38]
mov edi, dword [eax]
mov ecx, dword [eax + 4]
mov edx, ecx
sub edx, edi
mov dword [ebp - 0x2c], ecx
cmp ecx, dword [eax + 8]
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x3c], esi
jne 0x429bf8
mov eax, edx
sar eax, 3
mov ecx, edx
shr ecx, 2
and ecx, 2
mov edx, eax
shr eax, 1
add eax, edx
xor edx, 1
add edx, ecx
cmp eax, edx
ja 0x429b73
mov eax, edx
mov edx, eax
and edx, 8
mov ecx, eax
or ecx, 8
imul ecx, edx
xor edx, 8
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x14], eax
and eax, 0xfffffff7
imul eax, dword [ebp - 0x18]
add ecx, eax
push ecx
call fcn.0040c640
add esp, 4
mov dword [ebp - 0x18], eax
test edi, edi
je 0x429bdb
mov edx, dword [ebp - 0x2c]
cmp edi, edx
mov esi, dword [ebp - 0x18]
je 0x429bd2
xor eax, eax
nop
nop
mov ecx, dword [edi + eax]
mov dword [esi + eax], ecx
mov ecx, dword [edi + eax + 4]
mov dword [esi + eax + 4], ecx
mov dword [edi + eax], 0
lea ecx, [edi + eax]
add ecx, 8
add eax, 8
cmp ecx, edx
jne 0x429bb0
push edi
call fcn.0040c650
add esp, 4
mov ecx, dword [ebp - 0x38]
mov edi, dword [ebp - 0x18]
mov dword [ecx], edi
mov edx, dword [ebp - 0x30]
lea eax, [edi + edx]
mov dword [ebp - 0x2c], eax
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x14]
lea eax, [edi + eax*8]
mov dword [ecx + 8], eax
mov dword [edi + edx], 0
mov dword [ebp - 0x18], edi
mov dword [edi + edx + 4], 0
xor eax, eax
nop
nop
nop
nop
cmp byte [ebx + eax], 0
lea eax, [eax + 1]
jne 0x429c10
add eax, ebx
dec eax
mov esi, ebx
not esi
and esi, eax
xor eax, ebx
add esi, esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x40], eax
sub esi, eax
lea edi, [esi + 1]
push edi
mov dword [ebp - 0x34], edi
call fcn.0040c640
add esp, 4
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x18]
mov dword [edx + ecx], eax
mov ecx, edi
shr ecx, 2
mov edx, ebx
mov edi, eax
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov ecx, 2
sub ecx, esi
or ecx, 0xfffffffc
mov dword [ebp - 0x14], esi
add ecx, esi
mov esi, dword [ebp - 0x34]
lea edi, [eax + ecx]
add edi, 2
lea edx, [ebx + ecx]
add edx, 2
mov eax, esi
and eax, 3
mov ecx, eax
shr ecx, 1
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x60], edi
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
mov ecx, eax
xor ecx, 0xfffffffe
or eax, 1
and eax, ecx
je 0x429cad
and esi, 2
mov edx, dword [ebp - 0x4c]
add edx, esi
mov ecx, dword [ebp - 0x60]
add ecx, esi
push eax
push edx
push ecx
call fcn.0040c670
add esp, 0xc
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x429cd6
mov eax, dword [ebp - 0x40]
inc eax
cmp dword [ebp - 0x48], eax
mov edi, dword [ebp - 0x18]
jne 0x429ce6
mov eax, 0xffffffff
mov esi, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x30]
test cl, 1
je 0x429b10
jmp 0x429d2d
xor eax, eax
mov esi, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x30]
mov edi, dword [ebp - 0x18]
jmp 0x429b12
and ecx, 0xfffffffe
mov eax, 0xffffffff
nop
nop
mov edx, eax
shr edx, 8
xor al, byte [ebx]
movzx eax, al
xor edx, dword [eax*4 + 0x447c28]
mov eax, edx
shr eax, 8
xor dl, byte [ebx + 1]
add ebx, 2
movzx edx, dl
xor eax, dword [edx*4 + 0x447c28]
add ecx, 0xfffffffe
jne 0x429cf0
mov esi, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x14]
test cl, 1
je 0x429b10
mov ecx, eax
shr ecx, 8
xor al, byte [ebx]
movzx eax, al
xor ecx, dword [eax*4 + 0x447c28]
mov eax, ecx
jmp 0x429b10
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
jne 0x42a43b
jmp dword [0x44c644]
push dword [ebp - 0x54]
call fcn.0040c650
add esp, 4
mov eax, dword [case.0x4299f5.17]
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
mov eax, dword [ebp - 0x38]
mov edi, dword [eax]
mov esi, dword [eax + 4]
xor eax, eax
cmp edi, esi
sete al
jmp dword [eax*4 + 0x44c65c]
sub esi, edi
sar esi, 3
mov ecx, esi
and ecx, 0x421
mov eax, esi
or esi, 0x421
imul esi, ecx
xor ecx, 0x421
and eax, 0xfffffbde
imul eax, ecx
add esi, eax
push esi
call fcn.0040c640
add esp, 4
mov dword [ebp - 0x18], eax
mov eax, dword [0x4505b8]
mov esi, dword [ebp - 0x50]
mov dword [esi], 0x7f32795d
mov dword [esi + 4], 0x63057def
mov dword [esi + 8], 0x670a6101
mov dword [esi + 0xc], 0x6bfa6525
mov dword [esi + 0x10], 0x6f2a69f8
mov dword [esi + 0x14], 0x93066d0d
mov dword [esi + 0x18], 0x97b391f1
mov dword [esi + 0x1c], 0x9bed95e8
mov dword [esi + 0x20], 0x9ffb990c
mov dword [esi + 0x24], 0x83ef9dfd
mov dword [esi + 0x28], 0x87ea81fc
mov dword [esi + 0x2c], 0x8bed8517
mov dword [esi + 0x30], 0x8fe289e9
mov dword [esi + 0x34], 0xb3288dde
mov dword [esi + 0x38], 0xb7dcb1d4
mov word [esi + 0x3c], 0xb5b4
mov word [esi + 0x42], 0
mov dword [esi + 0x3e], 0
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x43
ja 0x429ea7
nop
nop
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
movzx edx, byte [esi + edx]
mov esi, ecx
xor esi, 0xc374e7ea
and ecx, 0xc374e7ea
lea ecx, [esi + ecx*2]
lea esi, [ecx + edx]
and ecx, edx
mov edx, esi
xor edx, ecx
add edx, ecx
not ecx
and ecx, esi
mov esi, dword [ebp - 0x50]
add ecx, ecx
sub ecx, edx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov edx, ecx
xor edx, 0x92
and ecx, 0x6d
add ecx, ecx
sub ecx, edx
mov edx, dword [ebp - 0x10]
mov byte [esi + edx], cl
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x44
jb 0x429e50
mov ecx, esi
mov esi, dword [ebp - 0x74]
push esi
push 0
push 0
push 0x1e
push ecx
push 0
call eax
mov esi, dword [esi]
test esi, esi
jns 0x429ed4
mov eax, 0xffffffff
jmp 0x429ed7
xor eax, eax
test edi, edi
jne 0x42a4a4
jmp 0x42a4eb
lea eax, [esi + esi]
push eax
call fcn.0040c640
add esp, 4
mov dword [ebp - 0x3c], eax
mov eax, dword [0x4505b8]
mov dword [ebx], 0x438e4165
mov dword [ebx + 4], 0x47a545ab
mov dword [ebx + 8], 0x4ba649a9
mov dword [ebx + 0xc], 0x4fde4d8d
mov dword [ebx + 0x10], 0x73b671e0
mov dword [ebx + 0x14], 0x77e27595
mov dword [ebx + 0x18], 0x7b5f7999
mov dword [ebx + 0x1c], 0x7f8d7d80
mov dword [ebx + 0x20], 0x638761f4
mov dword [ebx + 0x24], 0x678b6585
mov dword [ebx + 0x28], 0x6b866994
mov dword [ebx + 0x2c], 0x6f8d6d83
mov dword [ebx + 0x30], 0x13fe11f1
mov dword [ebx + 0x34], 0x1780153a
mov dword [ebx + 0x38], 0x1bfc19fc
mov word [ebx + 0x3c], 0x1d1c
mov word [ebx + 0x42], 0
mov dword [ebx + 0x3e], 0
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x43
ja 0x429fdd
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebx + ecx]
mov edi, edx
not edi
or edi, 0x3f90a810
add edi, edx
xor edx, 0x3f90a810
lea ebx, [edx + edi*2]
lea edx, [edx + edi*2]
add edx, 2
lea edi, [ecx + ebx]
add edi, 2
mov ebx, dword [ebp - 0x44]
not ecx
or edx, ecx
sub ecx, edx
lea ecx, [edi + ecx*2]
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov edx, ecx
not edx
and edx, 0x50
and ecx, 0xaf
sub ecx, edx
mov edx, dword [ebp - 0x10]
mov byte [ebx + edx], cl
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x44
jb 0x429f80
push dword [ebp - 0x74]
push esi
mov edi, dword [ebp - 0x3c]
push edi
push 0x1e
push ebx
push 0
call eax
push 0x60
push 3
push 0x120089
mov esi, dword [ebp - 0x68]
push esi
push edi
call fcn.004439d0
add esp, 0x14
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44c664]
xor edx, edx
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp + 8]
mov edi, dword [ebp - 0x64]
jmp dword [0x44c72c]
mov dword [ebp - 0x14], edx
push dword [ebp - 0x3c]
call fcn.0040c650
add esp, 4
mov edx, dword [ebp - 0x14]
mov eax, edx
and al, 1
movzx ecx, al
mov eax, edx
jmp dword [ecx*4 + 0x44c734]
jmp dword [0x44c740]
mov byte [ebx], 0
mov dword [edi], 0x2f323141
mov dword [edi + 4], 0x3327262d
mov dword [edi + 8], 0x38242621
mov dword [edi + 0xc], 0x2a3a5e63
mov dword [edi + 0x10], 0x477d3c31
mov dword [edi + 0x14], 0x39333e3b
mov dword [edi + 0x18], 0x232e772b
mov dword [edi + 0x1c], 0x9d28
mov byte [edi + 0x20], 0
mov eax, ebx
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x20
ja 0x42a0e3
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
movzx edx, byte [edi + edx]
mov esi, ecx
xor esi, 0x6e5b5360
and ecx, 0xee5b5360
lea ecx, [esi + ecx*2]
xor ecx, edx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov edx, ecx
not edx
and edx, 0xe0
and ecx, 0x1f
sub ecx, edx
mov edx, dword [ebp - 0x10]
mov byte [edi + edx], cl
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x21
jb 0x42a0a0
mov esi, dword [ebp + 8]
mov ecx, esi
push eax
push dword [ebp - 0x18]
push edi
call fcn.0040d160
jmp case.0x42a007.55
mov eax, ebx
mov edx, dword [ebp - 0x18]
sub eax, edx
mov ecx, esi
push eax
push edx
push edi
call fcn.0040d160
jmp dword [0x44c748]
mov byte [ebx], 0
mov dword [edi], 0x2f323141
mov dword [edi + 4], 0x3327262d
mov dword [edi + 8], 0x38242621
mov dword [edi + 0xc], 0x2a3a5e63
mov dword [edi + 0x10], 0x477d3c31
mov dword [edi + 0x14], 0x39333e3b
mov dword [edi + 0x18], 0x232e772b
mov dword [edi + 0x1c], 0x9d28
mov byte [edi + 0x20], 0
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
cmp eax, 0x20
ja 0x42a100
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [edi + ecx]
mov edx, eax
xor edx, 0x6e5b5360
and eax, 0xee5b5360
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov ecx, eax
not ecx
and ecx, 0xe0
and eax, 0x1f
sub eax, ecx
mov ecx, dword [ebp - 0x10]
mov byte [edi + ecx], al
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, 0x21
jb 0x42a170
jmp 0x42a100
push 0
mov edi, dword [ebp - 0x80]
push edi
push dword [esi]
call fcn.00443d70
add esp, 0xc
not eax
shr eax, 0x1f
mov dword [ebp - 0x14], 0
mov ebx, dword [ebp - 0x18]
jmp dword [eax*4 + 0x44c66c]
mov esi, dword [edi]
lea eax, [esi + 1]
push eax
call fcn.0040c640
add esp, 4
push 0
push esi
mov dword [ebp - 0x50], eax
push eax
mov esi, dword [ebp - 0x68]
push dword [esi]
call fcn.00443e80
add esp, 0x10
not eax
shr eax, 0x1f
xor ecx, ecx
mov ebx, dword [ebp - 0x18]
jmp dword [eax*4 + 0x44c674]
mov esi, dword [edi]
mov edi, dword [ebp - 0x50]
mov byte [edi + esi], 0
push 0x20
call fcn.0040c640
add esp, 4
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax + 0x18], 0xffffffff
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax], 0
mov dword [ebp - 0x40], eax
mov ecx, eax
push esi
push edi
call fcn.0042c290
movzx eax, al
xor ecx, ecx
mov ebx, dword [ebp - 0x18]
jmp dword [eax*4 + 0x44c67c]
mov esi, dword [ebp - 0x78]
mov dword [esi], 0x9faca6c3
mov dword [esi + 4], 0x525c4c63
mov dword [esi + 8], 0x5f4b471f
mov dword [esi + 0xc], 0x3411586a
mov dword [esi + 0x10], 0x56435c6c
mov dword [esi + 0x14], 0x49493e0b
mov dword [esi + 0x18], 0x7759444e
mov dword [esi + 0x1c], 0x4f555437
mov word [esi + 0x20], 0xf14d
mov dword [esi + 0x22], 0
mov byte [esi + 0x26], 0
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
cmp eax, 0x26
ja 0x42a305
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [esi + ecx]
mov edx, eax
xor edx, 0x4ab6747c
and eax, 0xcab6747c
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add al, 0x94
mov ecx, dword [ebp - 0x10]
mov byte [esi + ecx], al
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, 0x27
jb 0x42a2d0
mov ecx, dword [ebp - 0x40]
push esi
call fcn.0042c4f0
xor ecx, ecx
test eax, eax
setne cl
mov dword [ebp - 0x14], 0
mov ebx, dword [ebp - 0x18]
jmp dword [ecx*4 + 0x44c684]
mov eax, dword [case.0x42a007.6]
mov ecx, dword [ebp - 0x14]
nop
nop
jmp eax
mov esi, dword [ebp - 0x68]
jmp dword [0x44c70c]
mov dword [ebp - 0x14], ecx
mov edi, dword [ebp - 0x40]
mov ecx, edi
call fcn.0042c680
push edi
call fcn.0040c650
mov ecx, dword [ebp - 0x14]
add esp, 4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp dword [0x44c71c]
mov dword [ebp - 0x14], ecx
jmp dword [0x44c724]
push dword [ebp - 0x50]
call fcn.0040c650
add esp, 4
mov dword [ebp - 0x20], ebx
mov eax, dword [esi]
mov dword [ebp - 0x28], 0xf00f0e0d
mov word [ebp - 0x24], 0
mov dword [ebp - 0x1c], 0
mov ecx, dword [ebp - 0x1c]
cmp ecx, 5
ja 0x42a3ee
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
movzx edx, byte [ebp + edx - 0x28]
mov esi, ecx
xor esi, 0x277d557d
and ecx, 0x277d557d
lea esi, [esi + ecx*2]
mov ecx, esi
and ecx, edx
xor esi, edx
lea edx, [esi + ecx*2]
mov esi, edx
not esi
and esi, ecx
add esi, ecx
not ecx
and ecx, edx
sub ecx, esi
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x10]
add cl, 0x8f
mov edx, dword [ebp - 0x1c]
mov byte [ebp + edx - 0x28], cl
inc dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
cmp ecx, 6
jb 0x42a3a0
mov ecx, dword [0x4505bc]
test ecx, ecx
mov esi, dword [ebp + 8]
je 0x42a45f
mov edx, dword [ebp - 0x28]
xor edi, edi
mov ebx, dword [0x4505c0]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [ebx + edi*8], 0x625b6034
je 0x42a453
inc edi
cmp ecx, edi
jne 0x42a410
jmp 0x42a45f
jmp dword [0x44c74c]
push dword [ebp - 0x18]
mov esi, eax
call fcn.0040c650
mov eax, esi
add esp, 4
jmp dword [0x44c758]
push eax
push 1
push dword [0x4505c4]
push ecx
call fcn.004403a0
add esp, 0x10
jmp dword [0x44c644]
mov ecx, dword [ebx + edi*8 + 4]
cmp ecx, edx
jne 0x42a4f3
mov edi, dword [ebp - 0x64]
mov ebx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x14]
jmp dword [0x44c72c]
mov eax, edx
and al, 1
movzx ecx, al
mov eax, edx
jmp dword [ecx*4 + 0x44c734]
jmp dword [0x44c74c]
jmp dword [0x44c758]
nop
nop
nop
nop
nop
nop
jmp dword [0x44c75c]
and al, 1
mov ecx, dword [ebp - 0x38]
mov edi, dword [ecx]
mov esi, dword [ecx + 4]
test edi, edi
je 0x42a4eb
cmp edi, esi
je 0x42a4eb
mov dword [ebp - 0x14], eax
mov ebx, edi
jmp 0x42a4b7
add ebx, 8
cmp ebx, esi
je 0x42a4c8
mov eax, dword [ebx]
test eax, eax
je 0x42a4b0
push eax
call fcn.0040c650
add esp, 4
jmp 0x42a4b0
push edi
call fcn.0040c650
add esp, 4
mov eax, dword [ebp - 0x38]
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov eax, dword [ebp - 0x14]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push eax
push 1
push dword [0x4505c4]
push ecx
call fcn.004403a0
add esp, 0x10
mov edi, dword [ebp - 0x64]
mov ebx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x14]
jmp dword [0x44c72c]
add eax, 8
mov dword [ebp - 0x14], 0
mov edx, dword [eax]
xor eax, eax
test edx, edx
setne al
mov ebx, dword [ebp - 0x18]
jmp dword [eax*4 + 0x44c68c]
add edx, 4
mov edx, dword [edx]
xor eax, eax
test edx, edx
setne al
jmp dword [eax*4 + 0x44c68c]
jmp dword [0x44c6a0]
mov eax, dword [edx]
cmp dword [edx + 0x18], 3
mov dword [ebp - 0x30], eax
jne case.default.0x42a573
mov edi, dword [edx + 0x10]
test eax, eax
setne al
test edi, edi
setne cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x44c6a4]
xor edi, edi
test eax, eax
setne al
test edi, 0
setne cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x44c6a4]
mov dword [ebp - 0x34], edx
mov ecx, edi
nop
nop
nop
nop
nop
mov eax, ecx
inc ecx
cmp byte [eax], 0
jne case.default.0x42a5d5
mov ecx, eax
xor ecx, edi
mov edx, edi
not edx
and edx, eax
add edx, edx
sub edx, ecx
inc edx
shr edx, 1
mov dword [ebp - 0x44], edx
lea eax, [edx + 1]
push eax
call fcn.0040c640
add esp, 4
movsx ecx, byte [edi]
xor edx, edx
test ecx, ecx
setne dl
mov dword [ebp - 0x48], eax
jmp dword [edx*4 + 0x44c6ac]
inc edi
mov byte [eax], dl
inc eax
movsx ecx, byte [edi]
xor edx, edx
test ecx, ecx
setne dl
mov ebx, dword [ebp - 0x20]
jmp dword [edx*4 + 0x44c6ac]
lea edx, [ecx - 0x30]
cmp edx, 0xa
jb 0x42a605
mov edx, 0xffffffff
or ecx, 0x20
lea esi, [ecx - 0x61]
cmp esi, 6
mov dword [ebp - 0x20], ebx
jae case.default.0x42a623
add ecx, 0xffffffa9
mov edx, ecx
movsx ecx, byte [edi + 1]
xor ebx, ebx
test ecx, ecx
setne bl
jmp dword [ebx*4 + 0x44c6b4]
jmp dword [0x44c6c8]
mov ebx, edi
lea edi, [ecx - 0x30]
cmp edi, 0xa
jb 0x42a645
mov edi, 0xffffffff
or ecx, 0x20
lea esi, [ecx - 0x61]
cmp esi, 6
jae case.default.0x42a671
add ecx, 0xffffffa9
mov edi, ecx
mov esi, dword [ebp - 0x20]
add ebx, 2
shl edx, 4
or edx, edi
mov edi, ebx
mov byte [eax], dl
inc eax
movsx ecx, byte [ebx]
xor edx, edx
test ecx, ecx
setne dl
mov ebx, esi
jmp dword [edx*4 + 0x44c6ac]
mov dword [ebp - 0x20], ebx
mov byte [eax], 0
push 0
push 0x10
push 0
push dword [ebp - 0x30]
call fcn.0042c720
add esp, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
xor esi, esi
xor eax, eax
cmp ecx, edx
setne al
jmp dword [eax*4 + 0x44c6cc]
mov esi, dword [ecx]
xor ebx, ebx
jmp dword [ebx*4 + 0x44c6dc]
add ecx, 8
xor ebx, ebx
cmp ecx, edx
setne bl
jmp dword [ebx*4 + 0x44c6cc]
mov ebx, dword [ecx + 4]
mov edi, ebx
shr edi, 0x1c
shl ebx, 4
or ebx, 1
xor edi, dword [ebp - 0x2c]
xor ebx, dword [ebp - 0x30]
xor eax, eax
or ebx, edi
sete al
jmp dword [eax*4 + 0x44c6d4]
mov ebx, 1
jmp dword [ebx*4 + 0x44c6dc]
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x44c6e4]
mov ebx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x34]
jmp dword [0x44c6f4]
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x44]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x48]
mov dword [eax + 4], ecx
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [esi + eax], 0
lea eax, [eax + 1]
jne case.default.0x42a789
add eax, esi
dec eax
mov ecx, esi
not ecx
and ecx, eax
xor eax, esi
add ecx, ecx
sub ecx, eax
mov edi, dword [ebp - 0x7c]
mov dword [edi], ecx
mov dword [edi + 4], esi
mov ebx, dword [ebp - 0x58]
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0x6c625980
push dword [0x4505c8]
call fcn.00442e70
add esp, 8
push ebx
push 1
push 0
push 0
push edi
push 0
push dword [ebp - 0x70]
call eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x44c6ec]
mov ebx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x34]
jmp dword [0x44c6f4]
movzx eax, byte [esi]
test al, al
mov edx, dword [ebp - 0x20]
je 0x42a7bd
inc esi
mov ecx, dword [ebp - 0x58]
nop
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [esi]
inc esi
test al, al
jne 0x42a7b0
jmp 0x42a7c0
mov ecx, dword [ebp - 0x58]
mov word [edx], 0x203a
mov eax, edx
add eax, 2
mov edi, dword [ecx]
test edi, edi
je 0x42a7fb
mov ecx, dword [ecx + 4]
mov edx, edi
and edx, 3
je 0x42a7ff
xor esi, esi
nop
nop
nop
nop
movzx ebx, byte [ecx]
cmp bl, 1
sbb ecx, 0xffffffff
mov byte [eax + esi], bl
inc esi
cmp edx, esi
jne 0x42a7e0
add eax, esi
mov edx, edi
sub edx, esi
mov ebx, eax
jmp 0x42a801
mov ebx, eax
jmp 0x42a84b
mov edx, edi
cmp edi, 4
jb 0x42a84b
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [ecx]
cmp bl, 1
sbb ecx, 0xffffffff
mov byte [eax], bl
movzx ebx, byte [ecx]
cmp bl, 1
sbb ecx, 0xffffffff
mov byte [eax + 1], bl
movzx ebx, byte [ecx]
cmp bl, 1
sbb ecx, 0xffffffff
mov byte [eax + 2], bl
movzx ebx, byte [ecx]
cmp bl, 1
sbb ecx, 0xffffffff
lea esi, [eax + 4]
mov byte [eax + 3], bl
mov ebx, esi
mov eax, esi
add edx, 0xfffffffc
jne 0x42a810
mov byte [ebx], 0xa
inc ebx
push 0xe050b307
push dword [0x4505b0]
call fcn.00442e70
add esp, 8
mov ecx, dword [ebp - 0x58]
push dword [ecx + 4]
call eax
mov al, 1
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x34]
jmp dword [0x44c6f4]
push dword [ebp - 0x48]
call fcn.0040c650
mov edx, dword [ebp - 0x34]
add esp, 4
add edx, 4
mov edx, dword [edx]
xor eax, eax
test edx, edx
setne al
jmp dword [eax*4 + 0x44c68c]
jmp eax
mov eax, dword [0x4505b8]
mov dword [ebp - 0xc8], edx
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x38], 0x7333712d
mov dword [ebp - 0x34], 0x6ffe6dfc
mov dword [ebp - 0x30], 0x6b0b6914
mov dword [ebp - 0x2c], 0x670765e8
mov dword [ebp - 0x28], 0x6362613d
mov word [ebp - 0x24], 0
mov byte [ebp - 0x22], 0
mov dword [ebp - 0x58], 0
mov ecx, dword [ebp - 0x58]
cmp ecx, 0x16
ja 0x42a954
nop
nop
nop
nop
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x58]
movzx edx, byte [ebp + edx - 0x38]
add ecx, 0xdcfb086c
xor ecx, edx
mov dword [ebp - 0xec], ecx
mov ecx, dword [ebp - 0xec]
add cl, 0xe4
mov edx, dword [ebp - 0x58]
mov byte [ebp + edx - 0x38], cl
inc dword [ebp - 0x58]
mov ecx, dword [ebp - 0x58]
cmp ecx, 0x17
jb 0x42a920
mov dword [ebp - 0xa0], esi
lea ecx, [ebp - 0x70]
lea edi, [ebp - 0x38]
push ecx
push 0
push 0
push 9
push edi
push 0
call eax
mov eax, dword [0x44c78c]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
inc edx
add byte [edx + eax*4 - 0x7b79ffbe], dl
inc edx
add byte [edi + 0x4d004284], cl
mov al, byte [edx]
xor byte [eax - 0x6fbfffbe], dl
inc edx
add byte [eax - 0x70], al
inc edx
add byte [edx - 0x70], al
inc edx
add byte [eax - 0x70], al
inc edx
add byte [edx - 0x70], al
inc edx
add byte [ecx - 0x76], ch
inc edx
add byte [esi - 0x75], dl
mov eax, dword [edx]
push ebp
nop
mov eax, dword [edx]
push ebp
nop
inc edx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [edi - 0x6f], bh
inc edx
add byte [ecx], al
add byte [eax], al
add byte [ebx], cl
nop
inc edx
add byte [ecx + 0x1d00428b], ch
nop
inc edx
add byte [ebp - 0x70], bl
inc edx
add ch, bh
mov eax, dword [edx]
adc byte [edx + eax*2 + 0x428b9000], cl
add byte [ecx], bl
mov word [edx], es
nop
mov eax, dword [edx]
dec edi
mov word [edx], es
nop
mov eax, dword [edx]
jg 0x44c44e
inc edx
add bh, dh
lea eax, [edx]
add byte [esi - 0x71e6ffbe], cl
inc edx
add byte [esi], bl
mov es, word [edx]
in al, 0x8e
inc edx
add byte [esi + ecx*4], ah
inc edx
add byte [ebp - 0x71], bh
inc edx
add ah, ah
mov es, word [edx]
invalid
xchg ebx, eax
inc edx
add byte [eax], dl
xchg ebp, eax
inc edx
add byte [eax - 0x6c], dh
inc edx
add byte [esi - 0x6d], dh
inc edx
add byte [eax - 0x6c], dh
xchg esp, eax
xchg esp, eax
inc edx
add byte [ecx - 0x6c], cl
inc edx
add byte [esi - 0x6c], dl
inc edx
add byte [eax - 0x6c], dh
inc edx
add byte [eax - 0x6b], dl
inc edx
add al, dl
xchg ebp, eax
inc edx
add byte [esi - 0x6b], ch
inc edx
add byte [esi + 0x30004295], al
xchg edx, eax
inc edx
add byte [eax], ah
xchg edx, eax
inc edx
add dl, dh
xchg ebp, eax
inc edx
add byte [eax], dh
xchg edx, eax
inc edx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add dl, dh
xchg ebp, eax
inc edx
add byte [ecx], al
add byte [eax], al
add byte [ebx], al
xchg esi, eax
inc edx
add byte [eax - 0x6a], al
inc edx
add byte [eax - 0x6a], al
inc edx
add byte [eax - 0x6a], al
inc edx
add byte [esi - 0x6a], al
inc edx
add byte [eax - 0x6a], al
inc edx
add byte [edi + edx*4 + 0x42], ch
add byte [edi + 0x5b004297], al
cwde
inc edx
add byte [edi + 0x51004297], dl
popfd
inc edx
add byte [eax + 0x3a004298], al
lcall 0x42, 0x989c0042
mov al, 0x98
inc edx
add byte [eax - 0x44ffbd68], dh
cwde
inc edx
add byte [eax + 0x26004298], dh
lcall 0x42, 0x98db0042
jmp 0xf0450879