Function at 0x6da9ed
Capabilities:
Encode data using base64
Encrypt data using speck
Parse pe header
Resolve function by parsing pe exports

Disassembly:
cmp dword [edi + 0x50], 0x10
jmp 0x6bc22f
mov eax, dword [esp + 0x14]
jmp 0x7b277c
add esi, 4
jmp 0x186f825
mov byte [esp + 0x1bf0], 6
jmp 0x17fcb14
add eax, edx
cmp eax, 3
ja 0x533817
call fcn.0046ddf5
mov esi, dword [esp + 0xb4]
cmp dword [esi + 0x6c], 0x10
jmp 0x76f648
inc eax
cmc
test dl, dl
jmp 0x18634b0
shr ecx, 0x1f
cmp si, 0x41ab
add ecx, edx
jmp 0x5b5172
push edx
call fcn.00450231
add esp, 4
mov dword [esp + 0x310], esi
mov dword [esp + 0x30c], edi
cmp bx, 0x58dc
mov byte [esp + 0x2fc], 0
cmp dword [esp + 0x1664], edi
jmp 0x687e1c
mov dword [esp + 0x2d4], edi
mov byte [esp + 0x2c4], 0
movzx ecx, bp
bswap cx
lea ecx, [eax + 1]
setno dl
mov dl, byte [eax]
jmp 0x1855841
inc eax
jmp 0x767a7d
push eax
jmp 0x17e8eb3
push esi
jmp 0x764e56
push esi
jmp 0x182cb48
mov byte [esp + 0x1940], 0x3c
movsx cx, ah
not ecx
mov byte [esp + 0x1941], 0x50
mov byte [esp + 0x1942], 0x52
setg cl
cmovl cx, ax
inc cx
mov byte [esp + 0x1943], 0x4f
mov byte [esp + 0x1944], 0x47
jmp 0x17bc002
imul edi
clc
cmc
test ebp, ecx
add edx, edi
test dh, 0x6d
xchg edi, edi
sar edx, 4
add edi, esi
not di
mov edi, edx
cmc
clc
sub ebx, ebx
cmc
shr edi, 0x1f
cmc
add edi, edx
jmp 0x17bf085
jmp 0x180c3d2
jne 0x5b5187
call fcn.0046ddf5
mov esi, dword [esp + 0xb4]
cmp si, cx
cmp dword [esi + 0x18], 0x10
jmp 0x615017
mov byte [esp + 0x254], 0
jmp 0x18237b4
je 0x17dfd00
push 1
bswap cx
push 0x511994
lea ecx, [esp + 0x1e8]
jmp 0x70c84f
mov byte [esp + 0x374], 0
jmp 0x6b2427
jmp 0x188aa03
jmp 0x424d5f
jb 0x78ce8b
mov eax, dword [esp + 0xa1c]
push eax
jmp 0x78ce7d
jb 0x5ca924
mov ecx, dword [esp + 0x2c4]
push ecx
call fcn.00450231
add esp, 4
test sp, ax
cmp esp, edi
mov byte [esp + 0x1bf0], 6
stc
mov dword [esp + 0x2d8], esi
mov dword [esp + 0x2d4], edi
mov byte [esp + 0x2c4], 0
cmp dword [esp + 0x310], ebx
jb 0x56e22b
mov edx, dword [esp + 0x2fc]
jmp 0x56e222
jb 0x17d12d9
mov edx, dword [esp + 0x28c]
jmp 0x17d12d0
jne 0x5de8e8
call fcn.0046ddf5
mov eax, dword [esp + 0xe4]
cmove si, dx
lea esi, [esp + 0x368]
call fcn.0044a530
push 0xffffffffffffffff
mov ecx, ebp
movzx cx, bl
bswap ecx
push 0
mov cx, 0x6995
jmp 0x7aab89
ja 0x5e53da
call fcn.0046ddf5
mov esi, dword [esp + 0xb4]
cmp dword [esi + 0x50], 0x10
jb 0x17bee38
mov esi, dword [esi + 0x3c]
jmp 0x17c0511
mov byte [esp + 0x1bfc], 0x36
call fcn.00406480
cmp dword [esp + 0xb48], ebx
jmp 0x17a2a2a
mov byte [esp + 0x2e8], 0
call fcn.00406860
lea edx, [esp + 0x2dc]
movsx ecx, bp
push edx
movzx ax, ah
setnp cl
lea eax, [esp + 0x60]
jmp 0x17c3ea6
mov dword [esp + 0x2f8], edi
jmp 0x5ed5e9
push ecx
jmp 0x1897367
mov dword [esp + 0x14], ebx
jmp 0x745040
call fcn.00406860
mov byte [esp + 0x1bf0], 0x38
lea eax, [esp + 0x18c8]
mov dword [esp + 0x230], esi
mov dword [esp + 0x22c], edi
mov byte [esp + 0x21c], 0
cmove dx, di
cwd
lea edx, [eax + 1]
setns cl
mov cl, byte [eax]
jmp 0x18ab7ea
jb 0x17c04dc
mov edx, dword [esp + 0xba4]
push edx
jmp 0x17c04d3
call fcn.0042cfb0
push 0xffffffffffffffff
not ecx
push edi
movzx ecx, cx
push eax
jmp 0x729c97
test dl, dl
jmp 0x17e8b7a
jb 0x434404
mov esi, dword [esi + 4]
jmp 0x186f825
call fcn.00450231
lea esp, [esp + 4]
test bp, 0x45eb
sub eax, eax
or edx, ebp
cwd
setae dl
mov ecx, 0xf
sal bh, 0x19
mov dword [esp + 0x348], ecx
mov dword [esp + 0x344], eax
rcr bh, 0x76
mov byte [esp + 0x334], al
jmp 0x7268f8
push ecx
cmovae cx, cx
movsx cx, ah
lea ecx, [esp + 0x178]
jmp 0x17ecc75
mov dword [esp + 0x350], esi
jmp 0x18d5044
jne 0x720ef9
sub eax, edx
push eax
lea ecx, [esp + 0x18cc]
jmp 0x17f0bd8
jb 0x1897370
mov ecx, dword [esp + 0x2e0]
jmp 0x5fc2c1
call fcn.00450231
add esp, 4
clc
stc
mov dword [esp + 0xb48], esi
cmp cx, di
clc
mov dword [esp + 0xb44], edi
mov byte [esp + 0xb34], 0
cmp bp, dx
cmp dword [esp + 0x1a4], ebx
jmp 0x17db68a
mov byte [esp + 0x1938], 0x53
inc ecx
mov dl, dl
mov byte [esp + 0x1939], 0x42
xchg cl, dl
movzx cx, ch
mov dl, 0xa
mov byte [esp + 0x193a], 0x41
jmp 0x76a82b
mov eax, edx
stc
shr eax, 0x1f
stc
cmc
add eax, edx
test bx, di
cmp ch, 0xbf
cmp eax, 1
jmp 0x7883ad
mov dword [esp + 0x16b8], 0
mov byte [esp + 0x16a8], 0
jmp 0x704e7b
lea eax, [esp + 0x1940]
not dl
jmp 0x5930bd
mov eax, dword [esp + 0x14]
cmp eax, 3
jmp 0x6be810
push eax
mov ch, al
lea ecx, [esp + 0xdc]
jmp 0x183147f
jne 0x18a6a8b
sub eax, ecx
bswap ecx
movsx ecx, sp
push eax
mov cx, di
xchg ecx, ecx
lea ecx, [esp + 0x18fc]
jmp 0x63be8b
push eax
cbw
lahf
lea eax, [esp + 0x18cc]
not cx
setb cl
push eax
jmp 0x1873d85
je 0x17fcb26
push 1
jmp 0x76765d
push ecx
jmp 0x71a430
je 0x17ae817
push 1
cmovle ecx, esp
movsx ecx, bp
xchg ch, ch
push 0x511994
setp cl
not cx
lea ecx, [esp + 0x338]
jmp 0x63c2b0
lea esi, [esp + 0xa8]
jmp 0x17dfce8
mov dword [esp + 0x2a8], esi
mov dword [esp + 0x2a4], edi
jmp 0x17ae6f8
call fcn.00406860
lea ecx, [esp + 0x250]
not edx
push ecx
movsx edx, ax
bswap dx
lea edx, [esp + 0xa1c]
xchg cx, cx
movzx ecx, cx
push edx
lea edx, [esp + 0x1674]
setne ch
movsx cx, dh
lea ecx, [esp + 0x220]
mov byte [esp + 0x1bf8], 0x39
jmp 0x73b68a
mov dword [ecx + 0xf4], eax
jmp 0x5c89bc
jb 0x71a439
mov ecx, dword [esp + 0x174]
jmp 0x685129
je 0x724e6d
sub eax, 1
jmp 0x1821093
mov byte [esp + 0x1902], 0x4e
mov byte [esp + 0x1903], 0x3e
mov dl, 0xa2
inc ecx
mov byte [esp + 0x1904], 0
mov ecx, esp
dec dl
mov dword [esp + 0x188], esi
mov cl, 0xae
mov dword [esp + 0x184], edi
mov byte [esp + 0x174], 0
cmovg ecx, edx
lea ecx, [eax + 1]
nop
inc dl
jmp 0x18a6a8b
push edx
lea eax, [esp + 0xb34]
mov dl, bh
xchg dx, cx
cmovns cx, cx
push eax
movsx ecx, sp
lea edx, [esp + 0x1674]
lea ecx, [esp + 0x194]
jmp 0x74a6e2
call fcn.00406860
mov byte [esp + 0x1bf0], 0x43
jmp 0x747314
jmp 0x424d5f
xor ebx, ebx
cmc
clc
test edi, eax
shr edi, 0x1f
test ebp, 0x2b7f6e78
add edi, edx
cmp edi, ebx
mov dword [esp + 0x1f8], 0xf
jmp 0x73c378
ja 0x74e172
jmp dword [eax*4 + 0x6c6550]
mov byte [esp + 0x1bf8], 0x45
jmp 0x794369
call fcn.0044a3a0
lea esp, [esp + 8]
clc
test edi, 0xb1355c4
cmp dword [esp + 0x2f4], ebx
jmp 0x641732
call fcn.00440f80
sub edi, edi
cwde
inc bh
lea ebx, [edi + 0x10]
lea esi, [edi + 0xf]
jmp 0x17db331
jne 0x17efa6a
sub eax, ecx
movsx cx, ch
not ecx
movsx ecx, ax
push eax
lea eax, [esp + 0x1934]
mov cx, sp
not ecx
push eax
lea ecx, [esp + 0x3e0]
call fcn.00406860
mov byte [esp + 0x1bf0], 0x44
movsx ax, cl
not dl
cwde
lea eax, [esp + 0x18c8]
mov ch, ch
not dl
mov dword [esp + 0x3b8], esi
cmovp cx, sp
not cx
mov dword [esp + 0x3b4], edi
inc ecx
mov byte [esp + 0x3a4], 0
lea ecx, [eax + 1]
jmp 0x17da471
push 0x824efe28
call fcn.006a61a9
mov dword [esp + 0x16bc], 0xf
jmp 0x64c3d5
mov byte [esp + 0x1718], 0
jmp 0x5322eb
mov dword [esp + 0x1728], 0
jmp 0x6e5159
inc eax
test dl, dl
jmp 0x184b202
call fcn.0046e038
mov edx, dword [ebx + 0x84]
jmp 0x18b4ba6
jle 0x7472f2
mov ebx, dword [esp + 0x10]
jmp 0x65bbb0
call fcn.00406860
lea eax, [esp + 0x170]
mov ecx, ebp
cwd
mov ecx, 0x404c50eb
push eax
lea ecx, [esp + 0xba4]
push ecx
lea edx, [esp + 0x1674]
xchg ecx, ecx
setae cl
lea ecx, [esp + 0x15c]
jmp 0x18977dc
mov byte [esp + 0x1bf0], 6
jmp 0x6cd1dc
mov dword [esp + 0x200], esi
jmp 0x760d66
add esp, 4
jmp 0x17d698e
je 0x64eccd
push 1
jmp 0x1843d36
push eax
jmp 0x18d1bcf
call fcn.00450231
lea esp, [esp + 4]
mov dword [esp + 0x188], esi
test si, 0x3232
mov dword [esp + 0x184], edi
test di, di
mov byte [esp + 0x174], 0
test ch, dl
cmp cx, di
cmp dword [esp + 0x1664], edi
jmp 0x66c9d5
call fcn.00406860
mov byte [esp + 0x1bf0], 0x34
cmovl ax, ax
mov cl, dl
bswap ax
lea eax, [esp + 0x18c8]
xchg edx, edx
dec cl
mov dword [esp + 0x1a4], esi
cwd
cdq
mov dword [esp + 0x1a0], edi
mov dx, 0x1386
mov byte [esp + 0x190], 0
not dx
lea edx, [eax + 1]
mov edi, edi
not cl
dec cl
mov cl, byte [eax]
jmp 0x722aaa
je 0x77ddb4
sub eax, 1
jmp 0x69c021
inc eax
test cl, cl
jmp 0x63dfd2
jmp 0x77bd08
sub ecx, edi
sar dh, 0xa1
mov eax, 0x92492493
mov edx, 0x3da01667
sub edx, 0x42f34e7f
shr dl, 0xf5
imul ecx
sar eax, cl
add edx, ecx
bsf ax, dx
sar edx, 4
mov eax, edx
cmc
stc
shr eax, 0x1f
clc
cmp ch, 0x57
cmc
lea eax, [eax + edx]
cmp eax, 1
jmp 0x17f1b38
mov dword [esp + 0x16d8], ecx
sar ebx, cl
mov dword [esp + 0x16d4], eax
sub di, sp
mov byte [esp + 0x16c4], al
bts ebx, esi
mov byte [esp + 0x1bf0], 0x42
mov ecx, dword [esp + 0xe8]
mov edi, dword [esp + 0xe4]
mov esi, ecx
rcr ah, 0x74
not dl
sub esi, edi
bsf dx, sp
mov eax, 0x92492493
test ax, 0x7688
cmp sp, 0x4f75
imul esi
add edx, esi
add ebx, ebx
movzx bx, bl
sar edx, 4
adc bl, 0xc7
mov ebx, edx
test bp, ax
shr ebx, 0x1f
test edi, 0x40187792
cmc
lea ebx, [ebx + edx]
clc
cmp eax, edx
mov dword [esp + 0x14], 0
test si, 0x8c4
clc
cmp bp, di
test ebx, ebx
jmp 0x17b657a
lea ecx, [esp + 0x165c]
jmp 0x5e66bd
call fcn.00406480
cmp dword [esp + 0xa30], ebx
jmp 0x5ca7f7
sub ecx, esi
btc ax, di
bsr ax, ax
ror ah, cl
mov eax, 0x92492493
adc edx, 0x4f2d5003
bsf edx, esi
imul ecx
add edx, ecx
neg eax
xadd ah, ah
sar edx, 4
cmp di, 0xc92
cmovp ax, di
jmp 0x64b7d7
call fcn.0042cfb0
push 0xffffffffffffffff
push edi
mov ecx, ebp
bswap ecx
push eax
not cl
movsx cx, bl
lea ecx, [esp + 0x165c]
jmp 0x18beeec
mov dword [esp + 0x1f4], ebx
jmp 0x188974c
jb 0x748ed8
mov edx, dword [esp + 0x254]
jmp 0x18a2922
jle 0x68e158
mov ebx, dword [esp + 0x10]
jmp 0x5c4b54
push edx
call fcn.00450231
add esp, 4
lea esi, [esp + 0x5c]
jmp 0x17d8854
mov ecx, dword [esp + 0xe8]
nop
sub ecx, dword [esp + 0xe4]
shr ah, 0x30
rcr dl, 0xe8
mov eax, 0x92492493
adc dh, 0xda
mov edx, 0x51b1553f
imul ecx
add edx, ecx
bts ax, bx
lahf
sar edx, 4
xor eax, edi
sal ax, 0x66
mov eax, edx
test cx, bp
jmp 0x787c74
call fcn.00450231
lea esp, [esp + 4]
test bx, sp
cmc
mov dword [esp + 0x268], esi
cmp sp, ax
jmp 0x7a17dd
mov byte [esp + 0x1bf8], 0x35
jmp 0x606afe
mov eax, dword [esp + 0x14]
jmp 0x576ff9
inc eax
test dl, dl
jmp 0x776396
push esi
jmp 0x424d4e
call fcn.00406860
lea eax, [esp + 0x330]
jmp 0x65d357
call fcn.00406860
lea ecx, [esp + 0x1e0]
setg dh
mov edx, 0x57794a69
movzx dx, cl
push ecx
lea edx, [esp + 0xac]
setne ch
xchg ch, cl
push edx
movzx ecx, ax
mov ecx, edx
cmovl ecx, edi
lea ecx, [esp + 0x1658]
jmp 0x1854f5c
mov dword [esp + 0x1fc], edi
jmp 0x1827b8a
mov byte [esp + 0x1bf8], 0x2f
jmp 0x6cd06f
call fcn.0046e038
mov ecx, dword [ebx + 0x84]
jmp 0x189f8d0
push 0x511994
lea ecx, [esp + 0x2e4]
jmp 0x18924ec
cmp eax, edi
jmp 0x17bd0a0
mov byte [esp + 0x193b], 0x52
not dl
mov ecx, ecx
jmp 0x17efa1a
jb 0x186f85a
mov esi, dword [esi + 0x58]
jmp 0x7b3eb5
call fcn.00450231
lea esp, [esp + 4]
mov dword [esp + 0xc28], esi
mov dword [esp + 0xc24], edi
mov byte [esp + 0xc14], 0
stc
cmc
cmp dword [esp + 0x2d8], ebx
jmp 0x5ca909
call fcn.00450231
add esp, 4
cwde
shr ecx, 0x98
mov ecx, dword [esp + 0xb8]
inc dl
mov esi, dword [esp + 0xb4]
mov edi, ecx
sub edi, esi
or eax, 0xed93f71
add edx, 0x10e44c4a
mov eax, 0x92492493
neg dx
rcr dh, cl
cmc
imul edi
clc
stc
add edx, edi
sub edi, ebx
bsr edi, ebx
cmp di, dx
sar edx, 4
sub edi, 0x2d3e1803
bt edi, 0xf8
mov edi, edx
jmp 0x6b862e
jne 0x17da471
sub eax, ecx
push eax
mov cx, bp
sete cl
lea ecx, [esp + 0x18cc]
push ecx
setp ch
movsx ecx, cx
lea ecx, [esp + 0x3a8]
jmp 0x17f7e6f
mov byte [esp + 0x1bf8], 0x3d
call fcn.0042cfb0
push 0xffffffffffffffff
movzx cx, al
bswap ecx
push edi
mov cx, bp
not cx
push eax
movsx ecx, ax
bswap ecx
lea ecx, [esp + 0x165c]
jmp 0x787508
mov dl, byte [eax]
jmp 0x5354e3
push 1
mov cx, si
xchg ecx, ecx
mov ecx, 0x64495aa7
push 0x511f04
lea ecx, [esp + 0x370]
mov dword [esp + 0x388], 0xf
jmp 0x79921c
mov byte [esp + 0x1bfc], 0x3e
jmp 0x1890acc
shr eax, 0x1f
clc
add eax, edx
jmp 0x5de8dd
ja 0x7883c8
call fcn.0046ddf5
mov esi, dword [esp + 0xb4]
test bx, sp
test dh, 0x69
cmp cl, 0xe2
cmp dword [esi + 0x34], 0x10
jmp 0x18d2487
mov byte [esp + 0x18fa], 0x41
movzx ecx, sp
mov ch, dl
mov byte [esp + 0x18fb], 0x4e
movzx ecx, sp
movzx cx, bh
mov byte [esp + 0x18fc], 0x43
mov byte [esp + 0x18fd], 0x45
movsx ecx, si
inc ch
mov byte [esp + 0x18fe], 0x4c
mov dl, al
mov byte [esp + 0x18ff], 0x5f
mov dl, 0x54
mov byte [esp + 0x1900], 0x42
mov byte [esp + 0x1901], 0x54
jmp 0x6a84e1
call fcn.00450231
add esp, 4
test esp, 0x347b1aba
mov dword [esp + 0xa30], esi
test bp, 0x39e0
mov dword [esp + 0xa2c], edi
mov byte [esp + 0xa1c], 0
test ax, bx
cmp dword [esp + 0x230], ebx
jmp 0x17f64de
mov dword [esp + 0x16d8], 0xf
mov dword [esp + 0x16d4], 0
jmp 0x18eea16
push eax
jmp 0x774d54
call fcn.0042cfb0
push 0xffffffffffffffff
xchg ch, cl
push edi
push eax
cmovns cx, si
movsx ecx, dx
lea ecx, [esp + 0x165c]
jmp 0x188516b
mov dword [esp + 0x384], 0
jmp 0x5b72f2
jb 0x77359f
mov eax, dword [esp + 0xc14]
jmp 0x1889467
mov dword [esp + 0x264], edi
clc
mov byte [esp + 0x254], 0
cmp dword [esp + 0x1664], edi
jmp 0x716bfe
jne 0x5712f4
sub eax, ecx
movzx ecx, cx
jmp 0x66b570
call fcn.0046e038
mov ecx, dword [esi + 0x84]
jmp 0x710d4e
call fcn.0042cfb0
push 0xffffffffffffffff
push edi
mov cl, dh
not ch
push eax
movzx ecx, sp
movsx ecx, di
lea ecx, [esp + 0x165c]
mov byte [esp + 0x1bfc], 0x2e
call fcn.00406480
cmp dword [esp + 0xbb8], ebx
jmp 0x60531d
jb 0x62b64b
mov edx, dword [esp + 0x334]
push edx
jmp 0x62b63d
push eax
bswap cx
lea ecx, [esp + 0x16cc]
call fcn.00406480
mov esi, 0x10
mov byte [esp + 0x1bf0], 0x42
cmc
cmp dword [esp + 0x380], esi
jmp 0x186e8b9
inc eax
test ah, al
clc
cmc
cmp eax, ebx
jmp 0x17ea8fe
jb 0x18d1bdb
mov eax, dword [esp + 0x1ac]
jmp 0x718563
jmp 0x754332
cmp eax, 2
jmp 0x5e53c8
inc eax
clc
test ebp, 0x1434aeb
test dl, dl
jmp 0x66788d
jb 0x646821
mov ecx, dword [esp + 0xb34]
jmp 0x18e9347
mov byte [esp + 0x33c], 0
jmp 0x755842
jne 0x6051ec
sub eax, edx
cmova ecx, edi
movzx ecx, di
mov ecx, 0x77cb3ec8
push eax
lea eax, [esp + 0x18cc]
cmovo cx, si
xchg ecx, ecx
push eax
cmovo ecx, ecx
not cx
lea ecx, [esp + 0x220]
jmp 0x698dc2
jl 0x17b82a9
cmp dword [esp + 0x16d8], 0x10
jb 0x18ca64b
mov edx, dword [esp + 0x16c4]
jmp 0x18909df
mov byte [esp + 0x294], 0
call fcn.00406860
lea eax, [esp + 0x288]
push eax
movsx cx, bl
cmovno ecx, edx
lea ecx, [esp + 0x10c]
jmp 0x18c07b8
mov byte [esp + 0x1bf0], 6
call fcn.00440f80
sub edi, edi
cmovl eax, ecx
movzx eax, bp
cwde
lea ebx, [edi + 0x10]
mov ah, 0x9d
lea esi, [edi + 0xf]
cwde
bswap eax
dec ch
lea eax, [esp + 0x1930]
inc dl
mov byte [esp + 0x1930], 0x3c
inc ecx
mov byte [esp + 0x1931], 0x50
jmp 0x18267d2
mov byte [esp + 0x158], 0
mov ch, 0x9c
bswap cx
dec cx
lea ecx, [eax + 1]
mov dl, byte [eax]
jmp 0x1871712
mov byte [esp + 0x198a], 0x45
mov cx, 0x8b8
mov byte [esp + 0x198b], 0x5f
mov ecx, esp
xchg ecx, ecx
mov byte [esp + 0x198c], 0x54
mov byte [esp + 0x198d], 0x45
jmp 0x18c437d
jle 0x18ca64b
mov esi, dword [esp + 0x10]
jmp 0x18ac6e2
mov eax, dword [esp + 0x14]
sub eax, 0
jmp 0x7215be
call fcn.00450231
add esp, 4
stc
mov byte [esp + 0x1bf0], 6
stc
clc
test dx, bx
mov dword [esp + 0x1a4], esi
mov dword [esp + 0x1a0], edi
mov byte [esp + 0x190], 0
test esi, 0x36643b03
stc
cmp dword [esp + 0x1c0], ebx
jmp 0x7b2f96
mov byte [esp + 0x1945], 0x52
mov byte [esp + 0x1946], 0x45
movsx cx, ah
mov byte [esp + 0x1947], 0x53
mov ch, 0x94
mov byte [esp + 0x1948], 0x53
mov dl, 0x83
movsx ecx, bp
mov byte [esp + 0x1949], 0x42
seto dl
mov byte [esp + 0x194a], 0x41
movsx ecx, si
bswap cx
mov byte [esp + 0x194b], 0x52
mov byte [esp + 0x194c], 0x31
mov byte [esp + 0x194d], 0x3e
mov dl, 0x6f
dec cx
mov byte [esp + 0x194e], 0
mov dword [esp + 0x310], esi
setl ch
mov dword [esp + 0x30c], edi
mov byte [esp + 0x2fc], 0
lea ecx, [eax + 1]
not dl
mov dl, 0xff
nop
inc dl
mov dl, byte [eax]
jmp 0x6edac4
mov dword [esp + 0x14], eax
jmp 0x183b5bf
add esi, 0x3c
jmp 0x58795e
cmp edi, ebx
jmp 0x40e4a3
call fcn.00450231
add esp, 4
stc
mov dword [esp + 0xbb8], esi
cmp ebp, 0x6292617e
mov dword [esp + 0xbb4], edi
mov byte [esp + 0xba4], 0
cmp dword [esp + 0x16c], ebx
jb 0x17e8ec4
mov eax, dword [esp + 0x158]
jmp 0x577063
jmp 0x58795e
push eax
lea ecx, [esp + 0x1658]
jmp 0x76137d
inc eax
cmp bx, 5
test dl, dl
jmp 0x187fb73
push edx
call fcn.00450231
add esp, 4
mov ecx, dword [esp + 0x118]
test dl, dh
btc edi, eax
mov esi, dword [esp + 0x114]
shl ax, 0xe6
rcl ax, 0x98
cmp di, bx
mov edi, ecx
ror dl, 0x43
bts ax, cx
test ebp, edi
sub edi, esi
mov eax, 0x92492493
seto dl
jmp 0x59c8fe
mov dword [ecx + 0x128], eax
jmp 0x180be42
mov dword [esp + 0x172c], 0xf
jmp 0x6eaaa4
mov dl, byte [eax]
jmp 0x7504ab
lea eax, [esp + 0x18f8]
mov byte [esp + 0x18f8], 0x3c
bswap ecx
jmp 0x1852206
jb 0x17ba87c
mov edx, dword [esp + 0x190]
jmp 0x182dd3d
inc eax
cmp ecx, ebp
stc
test bx, sp
test dl, dl
jmp 0x6cdded
call fcn.00440f80
sub edi, edi
xchg ecx, ecx
lea ebx, [edi + 0x10]
setb cl
lea esi, [edi + 0xf]
cmovo ecx, ebp
bswap ax
lea eax, [esp + 0x1984]
seto cl
movsx ecx, dx
movzx cx, bh
mov byte [esp + 0x1984], 0x3c
mov cl, 0xd
xchg ch, ch
mov byte [esp + 0x1985], 0x55
bswap cx
mov ecx, eax
movsx cx, bl
mov byte [esp + 0x1986], 0x50
mov byte [esp + 0x1987], 0x44
jmp 0x17f2adb
push eax
cdq
bswap cx
lea edx, [esp + 0x1674]
movsx cx, ah
lea ecx, [esp + 0x3a8]
jmp 0x6c42b7
jne 0x17b2942
sub eax, ecx
cmovo cx, ax
mov dx, bx
push eax
xchg ecx, edx
lea edx, [esp + 0x18cc]
push edx
movzx cx, dh
lea ecx, [esp + 0x15c]
jmp 0x6ffd1c
call fcn.00450231
add esp, 4
cmp si, 0x267b
stc
cmp si, bp
mov byte [esp + 0x1bf0], 6
clc
cmp di, 0x1e86
mov dword [esp + 0x16c], esi
mov dword [esp + 0x168], edi
mov byte [esp + 0x158], 0
test bp, 0x17ad
clc
cmp dword [esp + 0x188], ebx
jmp 0x698ff1
mov dword [esp + 0x14], eax
jmp 0x17ac000
call fcn.00406860
mov byte [esp + 0x1bf0], 0x3c
lahf
movzx cx, dh
xchg al, al
lea eax, [esp + 0x18c8]
mov dword [esp + 0x2d8], esi
jmp 0x5712d9
call fcn.00406860
mov byte [esp + 0x1bf0], 0x2c
lea eax, [esp + 0x18c8]
inc ecx
mov dword [esp + 0x16c], esi
inc dl
movzx ecx, di
mov dword [esp + 0x168], edi
inc cl
jmp 0x17b292e
mov byte [esp + 0x193c], 0x32
dec ecx
setge dl
mov byte [esp + 0x193d], 0x3e
movsx ecx, dx
mov byte [esp + 0x193e], 0
movsx ecx, sp
mov dword [esp + 0x3f0], esi
movsx ecx, sp
mov dl, 0xbf
mov dword [esp + 0x3ec], edi
setns cl
mov byte [esp + 0x3dc], 0
inc dl
dec dl
mov dl, 0xae
lea ecx, [eax + 1]
lea esp, [esp]
mov dl, byte [eax]
jmp 0x17db7ac
push ecx
movsx ecx, dx
lea ecx, [esp + 0x194]
jmp 0x188cc7c
add esi, 0x20
jmp 0x587154
ja 0x17f1b4a
call fcn.0046ddf5
mov edi, dword [esp + 0xe4]
cmp dword [edi + 0x34], 0x10
jb 0x18cd55c
mov edi, dword [edi + 0x20]
jmp 0x5a7bd1
mov byte [esp + 0x1988], 0x41
xchg ch, ch
mov byte [esp + 0x1989], 0x54
setl cl
jmp 0x17b4b4b
jb 0x18e6674
mov ecx, dword [esp + 0x21c]
push ecx
call fcn.00450231
add esp, 4
jmp 0x18e6674
call fcn.00406860
lea edx, [esp + 0x3d8]
mov cx, 0x536a
push edx
rdtsc
mov dh, pe_nt_image_headers32
lea eax, [esp + 0xa38]
jmp 0x17e7471
call fcn.00440f80
sub edi, edi
xchg dl, cl
lea ebx, [edi + 0x10]
seta dl
lea esi, [edi + 0xf]
lea eax, [esp + 0x1920]
mov byte [esp + 0x1920], 0x3c
movsx ecx, sp
mov ecx, ebx
mov byte [esp + 0x1921], 0x55
setns cl
mov byte [esp + 0x1922], 0x50
mov byte [esp + 0x1923], 0x44
mov byte [esp + 0x1924], 0x41
jmp 0x183291c
jb 0x774d60
mov eax, dword [esp + 0x1e4]
jmp 0x794357
mov eax, dword [esp + 0x14]
jmp 0x7b17e2
push edi
jmp 0x7a7ecf
sub ecx, esi
shrd ax, di, 0xf
mov eax, 0x92492493
bsf dx, bp
imul ecx
btr ax, si
lea edx, [edx + ecx]
sar edx, 4
btr ax, dx
xor eax, 0x46cb15c4
mov eax, edx
shr eax, 0x1f
test dx, 0x1b70
jmp 0x533800
sub ecx, esi
rol dh, 0x33
bts edx, eax
mov eax, 0x92492493
rcl dl, cl
bswap dx
or dx, ax
imul ecx
add edx, ecx
sal ecx, 0x16
sar edx, 4
sar ch, 0x1f
rol ecx, 0x52
stc
mov ecx, edx
jmp 0x5689a1
call fcn.0044a3a0
lea esp, [esp + 8]
cmc
cmp di, bx
cmp dword [esp + 0x348], ebx
jmp 0x7a992a
jne 0x180be50
sub ecx, edi
shl edx, 0xbc
sbb dh, 9
btr eax, ecx
mov eax, 0x92492493
stc
sar dx, cl
imul ecx
add edx, ecx
sar edx, 4
dec ah
sar al, cl
mov eax, edx
shr eax, 0x1f
add eax, edx
test bp, 0x19eb
cmp eax, 2
ja 0x413649
call fcn.0046ddf5
mov edi, dword [esp + 0xe4]
jmp 0x413649
lea ecx, [eax + 1]
jmp 0x724113
mov byte [esp + 0x1932], 0x52
mov ecx, ebx
setle dl
mov byte [esp + 0x1933], 0x4f
dec cl
mov byte [esp + 0x1934], 0x47
mov byte [esp + 0x1935], 0x52
mov byte [esp + 0x1936], 0x45
dec cx
mov byte [esp + 0x1937], 0x53
jmp 0x648baf
mov byte [esp + 0x1ec], 0
jmp 0x757884
call fcn.0046e038
mov ecx, dword [ebx + 0x84]
jmp 0x698e46
push edx
jmp 0x17ba873
push ecx
setbe ch
movsx ecx, cx
lea ecx, [esp + 0x1658]
jmp 0x1887f6a
mov byte [esp + 0x1925], 0x54
mov cl, bl
setl dl
mov byte [esp + 0x1926], 0x45
mov byte [esp + 0x1927], 0x5f
mov byte [esp + 0x1928], 0x49
mov byte [esp + 0x1929], 0x4e
mov byte [esp + 0x192a], 0x46
movzx ecx, dx
mov byte [esp + 0x192b], 0x4f
dec cx
mov byte [esp + 0x192c], 0x3e
xchg dl, dl
mov byte [esp + 0x192d], 0
dec dl
cmovs ecx, ecx
mov ecx, 0x3fd20d24
mov dword [esp + 0x1c0], esi
mov dword [esp + 0x1bc], edi
jmp 0x188aa2a
jl 0x65bbb0
cmp dword [esp + 0x172c], 0x10
jb 0x7472f2
mov edx, dword [esp + 0x1718]
jmp 0x7472e9
push 0x511994
movzx cx, cl
lea ecx, [esp + 0x290]
jmp 0x6969f7
jne 0x17bc08f
sub eax, ecx
xchg dx, cx
push eax
lea edx, [esp + 0x1944]
xchg cx, cx
mov ch, 0x9c
push edx
seto cl
cmovp ecx, edi
movzx ecx, di
lea ecx, [esp + 0x300]
jmp 0x17eb509
mov byte [esp + 0x18f9], 0x43
not dl
jmp 0x78abfe
mov byte [esp + 0x1bf8], 0x37
jmp 0x18ddce2
inc eax
stc
test bx, 0x21d5
test dl, dl
jmp 0x7a57db
jne 0x77bd08
sub eax, ecx
push eax
cdq
movzx ecx, cx
sets dl
lea edx, [esp + 0x1988]
not ch
push edx
mov ecx, 0x3bbd503d
setb ch
lea ecx, [esp + 0x258]
jmp 0x6051b6
jb 0x181cefa
push esi
jmp 0x6ee58e
add esi, 0x58
jmp 0x754332
inc eax
jmp 0x61113c
lea ecx, [esp + 0x2c8]
call fcn.00406860
lea ecx, [esp + 0x2f8]
push ecx
cdq
bswap ecx
cwd
lea edx, [esp + 0xc14]
mov ch, 0x46
jmp 0x18889ad
jne 0x188aa38
sub eax, ecx
cmovs cx, cx
movzx ecx, cx
push eax
lea eax, [esp + 0x1924]
bswap ecx
push eax
xchg cx, cx
sete ch
bswap cx
lea ecx, [esp + 0x1b0]
jmp 0x720eaf
mov byte [esp + 0x1bfc], 0x46
call fcn.00406480
cmp dword [esp + 0xa4c], ebx
jmp 0x43aa28
mov byte [esp + 0x1bf8], 0x3f
jmp 0x181dad3
push edx
lea edx, [esp + 0x1674]
lea ecx, [esp + 0x2c8]
jmp 0x776d3c
push eax
jmp 0x773596
mov byte [esp + 0x1e4], bl
jmp 0x5febf4
mov eax, dword [esp + 0x14]
cmp eax, 3
ja case.default.0x188aa10
jmp dword [eax*4 + 0x7b0108]
mov byte [esp + 0x1ac], 0
mov dl, 0x1a
inc ecx
lea ecx, [eax + 1]
mov dl, byte [eax]
jmp 0x17cfa3b
call fcn.00406860
lea edx, [esp + 0x1a8]
jmp 0x6ad9cd
call fcn.00406480
cmp dword [esp + 0xc28], ebx
jmp 0x7993c5
mov dword [esp + 0x2fc], esi
jmp 0x5f5046
sub ecx, esi
mov eax, 0x92492493
imul ecx
mov eax, esp
bts ax, sp
lea edx, [edx + ecx]
xchg ah, ah
sar edx, 4
bswap eax
test cx, si
mov eax, edx
shr eax, 0x1f
test si, bp
cmc
lea eax, [eax + edx]
jmp 0x7b4a10
call fcn.00450231
lea esp, [esp + 4]
sub ebx, ebx
ror dl, cl
cbw
shrd cx, ax, 0x2b
mov eax, 0xf
bsr si, si
rol cx, cl
mov dword [esp + 0x2f4], eax
xchg si, si
mov dword [esp + 0x2f0], ebx
and ch, bl
btr esi, edi
rol ch, 0xdd
mov byte [esp + 0x2e0], bl
shl ch, cl
test ebx, 0x4da90153
clc
mov dword [esp + 0x172c], eax
mov dword [esp + 0x1728], ebx
shl ch, cl
mov byte [esp + 0x1718], bl
mov byte [esp + 0x1bf0], 0x32
sub si, 0x7e7c
test ebp, 0xfac2ca2
movsx edi, sp
mov ecx, dword [esp + 0x6c]
sub di, cx
inc si
bswap dx
mov esi, dword [esp + 0x68]
rcr dx, 0xff
bt dx, 0x9b
mov edi, ecx
shr dl, 0xcf
test si, 0x4ceb
rcl ah, 0x31
sub edi, esi
ror dx, 0x19
lahf
mov eax, 0x92492493
adc dx, si
imul edi
cmp si, cx
lea edx, [edx + edi]
adc edi, ecx
rcl di, 0x9e
sar edx, 4
btc di, sp
shr di, 0xcc
mov di, sp
mov edi, edx
stc
shr edi, 0x1f
test ch, 0x17
lea edi, [edi + edx]
cmp edi, ebx
mov dword [esp + 0x14], ebx
jmp 0x6fa7df
mov byte [esp + 0x1bf8], 0x2d
jmp 0x7a93f0
mov dword [ecx + 0xf0], eax
jmp 0x18c7969
push edx
jmp 0x748ecb
mov dl, byte [eax]
jmp 0x179dac5
inc eax
cmp bh, 0x40
test di, 0x778a
clc
test cl, cl
jmp 0x17a56d0
jmp 0x17b82a9
mov dword [edx + 0xec], eax
jmp 0x6b4d0e
mov byte [esp + 0x1bfc], 0x3a
jmp 0x732559
push ecx
sete cl
lea ecx, [esp + 0x1658]
mov byte [esp + 0x1bf8], 0x3b
call fcn.0044a3a0
lea esp, [esp + 8]
cmc
test eax, esp
mov byte [esp + 0x1bf0], 6
stc
cmp dword [esp + 0x2a0], ebx
jmp 0x5d1fc1
mov byte [esp + 0x198e], 0x58
not ch
movzx ecx, sp
movzx cx, ch
mov byte [esp + 0x198f], 0x54
mov cx, 0x3933
movzx ecx, dx
mov byte [esp + 0x1990], 0x5f
cmovbe ecx, edx
mov byte [esp + 0x1991], 0x43
setns cl
movsx cx, ah
mov byte [esp + 0x1992], 0x4f
movzx ecx, bx
movzx cx, dh
setnp cl
mov byte [esp + 0x1993], 0x4c
xchg cx, cx
movsx ecx, bx
mov byte [esp + 0x1994], 0x4f
mov byte [esp + 0x1995], 0x52
bswap cx
setp ch
mov byte [esp + 0x1996], 0x3e
mov byte [esp + 0x1997], 0
not ecx
mov dword [esp + 0x268], esi
bswap cx
mov dword [esp + 0x264], edi
jmp 0x5b52cd
jmp 0x424d5f
lea esi, [esp + 0xd8]
jmp 0x78daf8
add edi, 0x20
jmp 0x180c3d2
call fcn.00450231
lea esp, [esp + 4]
cmp bh, 0xf6
mov dword [esp + 0x1c0], esi
cmp di, 0x5602
stc
mov dword [esp + 0x1bc], edi
mov byte [esp + 0x1ac], 0
cmc
cmp dword [esp + 0x1664], edi
jmp 0x5b5b19
jb 0x17f1898
mov esi, dword [esi + 0x20]
jmp 0x587154
mov dword [esp + 0x34c], edi
jmp 0x17a51a9
call fcn.0044a3a0
lea esp, [esp + 8]
stc
cmp esp, edx
mov byte [esp + 0x1bf0], 6
stc
clc
cmp dword [esp + 0x1f8], ebx
jmp 0x18086fb
mov byte [esp + 0x1bf0], 6
mov dword [esp + 0x230], esi
cmp dl, 0xa
stc
mov dword [esp + 0x22c], edi
cmp edx, 0x777d3928
mov byte [esp + 0x21c], 0
cmp dword [esp + 0x268], ebx
jmp 0x73d69f
push ecx
jmp 0x646817
mov byte [esp + 0x16c4], 0
jmp 0x17ae7f3