Function at 0x413af0
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x970
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004019b0
mov dword [esp + 0xc8], eax
mov dword [esp + 0x314], 0x47c4148d
lea eax, [esp + 0x314]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x314]
mov ecx, eax
sub ecx, 0x80c60c34
je 0x4166fa
jmp 0x413b3e
mov ecx, eax
sub ecx, 0x80faa8eb
je 0x415917
jmp 0x413b4e
mov ecx, eax
sub ecx, 0x821f7bd7
je 0x417efb
jmp 0x413b5e
mov ecx, eax
sub ecx, 0x82852325
je 0x4159fa
jmp 0x413b6e
mov ecx, eax
sub ecx, 0x85acb56b
je 0x414d04
jmp 0x413b7e
mov ecx, eax
sub ecx, 0x880d7a9b
je 0x416cbf
jmp 0x413b8e
mov ecx, eax
sub ecx, 0x8b6454d1
je 0x415c37
jmp 0x413b9e
mov ecx, eax
sub ecx, 0x8f585709
je 0x41662e
jmp 0x413bae
mov ecx, eax
sub ecx, 0x8faa8245
je 0x415c17
jmp 0x413bbe
mov ecx, eax
sub ecx, 0x9123edf4
je 0x41534c
jmp 0x413bce
mov ecx, eax
sub ecx, 0x94739946
je 0x414d4f
jmp 0x413bde
mov ecx, eax
sub ecx, 0x95c6da85
je 0x417666
jmp 0x413bee
mov ecx, eax
sub ecx, 0x96006a60
je 0x4170b2
jmp 0x413bfe
mov ecx, eax
sub ecx, 0x965c181c
je 0x4153ae
jmp 0x413c0e
mov ecx, eax
sub ecx, 0x99efd088
je 0x416c7f
jmp 0x413c1e
mov ecx, eax
sub ecx, 0x9aaac214
je 0x415300
jmp 0x413c2e
mov ecx, eax
sub ecx, 0x9bbc8f62
je 0x41847a
jmp 0x413c3e
mov ecx, eax
sub ecx, 0x9c84def8
je 0x415dfe
jmp 0x413c4e
mov ecx, eax
sub ecx, 0x9d4ce90f
je 0x417aa0
jmp 0x413c5e
mov ecx, eax
sub ecx, 0x9ebd61d5
je 0x41834a
jmp 0x413c6e
mov ecx, eax
sub ecx, 0x9ef87e6d
je 0x415af1
jmp 0x413c7e
mov ecx, eax
sub ecx, 0x9efa9206
je 0x417b37
jmp 0x413c8e
mov ecx, eax
sub ecx, 0x9f70b1fb
je 0x415577
jmp 0x413c9e
mov ecx, eax
sub ecx, 0x9fd08d54
je 0x415b20
jmp 0x413cae
mov ecx, eax
sub ecx, 0xa3d990a1
je 0x417056
jmp 0x413cbe
mov ecx, eax
sub ecx, 0xa41e1a19
je 0x4179b6
jmp 0x413cce
mov ecx, eax
sub ecx, 0xa485fdea
je 0x417cc4
jmp 0x413cde
mov ecx, eax
sub ecx, 0xa4d74ce5
je 0x417b48
jmp 0x413cee
mov ecx, eax
sub ecx, 0xa4ff3f92
je 0x4184a8
jmp 0x413cfe
mov ecx, eax
sub ecx, 0xa7b28aa0
je 0x418140
jmp 0x413d0e
mov ecx, eax
sub ecx, 0xa9a1fbf4
je 0x4156c1
jmp 0x413d1e
mov ecx, eax
sub ecx, 0xaa422db1
je 0x415699
jmp 0x413d2e
mov ecx, eax
sub ecx, 0xaac3e55d
je 0x418106
jmp 0x413d3e
mov ecx, eax
sub ecx, 0xad23b816
je 0x417acd
jmp 0x413d4e
mov ecx, eax
sub ecx, 0xad859987
je 0x41531f
jmp 0x413d5e
mov ecx, eax
sub ecx, 0xaf3d5ab9
je 0x415edc
jmp 0x413d6e
mov ecx, eax
sub ecx, 0xb0f1cb5e
je 0x416604
jmp 0x413d7e
mov ecx, eax
sub ecx, 0xb2aaa68f
je 0x41552f
jmp 0x413d8e
mov ecx, eax
sub ecx, 0xb48e65ea
je 0x418429
jmp 0x413d9e
mov ecx, eax
sub ecx, 0xb50fda87
je 0x4170d1
jmp 0x413dae
mov ecx, eax
sub ecx, 0xb7352be3
je 0x417989
jmp 0x413dbe
mov ecx, eax
sub ecx, 0xb7cdba62
je 0x41663d
jmp 0x413dce
mov ecx, eax
sub ecx, 0xb8036ac7
je 0x417065
jmp 0x413dde
mov ecx, eax
sub ecx, 0xb8c2eccc
je 0x414b96
jmp 0x413dee
mov ecx, eax
sub ecx, 0xb94a1783
je 0x415f27
jmp 0x413dfe
mov ecx, eax
sub ecx, 0xba528aa8
je 0x416fea
jmp 0x413e0e
mov ecx, eax
sub ecx, 0xbc363a2d
je 0x416d67
jmp 0x413e1e
mov ecx, eax
sub ecx, 0xbd26fef4
je 0x417aeb
jmp 0x413e2e
mov ecx, eax
sub ecx, 0xbe148b29
je 0x415604
jmp 0x413e3e
mov ecx, eax
sub ecx, 0xc04f7ada
je 0x414bb5
jmp 0x413e4e
mov ecx, eax
sub ecx, 0xc1a1ec3f
je 0x41797a
jmp 0x413e5e
mov ecx, eax
sub ecx, 0xc2a96bbb
je 0x415511
jmp 0x413e6e
mov ecx, eax
sub ecx, 0xc30b0fd0
je 0x416c1c
jmp 0x413e7e
mov ecx, eax
sub ecx, 0xc3c8ec36
je 0x4167da
jmp 0x413e8e
mov ecx, eax
sub ecx, 0xc5b1f60c
je 0x41677a
jmp 0x413e9e
mov ecx, eax
sub ecx, 0xc76d43fe
je 0x418378
jmp 0x413eae
mov ecx, eax
sub ecx, 0xc849babf
je 0x417a31
jmp 0x413ebe
mov ecx, eax
sub ecx, 0xc86bafa1
je 0x415d25
jmp 0x413ece
mov ecx, eax
sub ecx, 0xc92f393a
je 0x41532e
jmp 0x413ede
mov ecx, eax
sub ecx, 0xc9a67c8a
je 0x417b67
jmp 0x413eee
mov ecx, eax
sub ecx, 0xc9a9e629
je 0x4159ba
jmp 0x413efe
mov ecx, eax
sub ecx, 0xcd6fe2ca
je 0x4166cf
jmp 0x413f0e
mov ecx, eax
sub ecx, 0xcdcc345f
je 0x414880
jmp 0x413f1e
mov ecx, eax
sub ecx, 0xcff69590
je 0x417abe
jmp 0x413f2e
mov ecx, eax
sub ecx, 0xd121d585
je 0x4184d2
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x17e74782
jmp 0x4187dd
mov eax, 0xc04f7ada
test byte [esp + 0x87], 1
jne 0x414baa
mov eax, 0x85acb56b
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xee3fa87a
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xd125e1df
jmp 0x4187dd
mov al, byte [esp + 0x168]
mov byte [esp + 0x1d8], al
mov byte [esp + 0x3a8], 0x6b
mov byte [esp + 0x3a9], 0xe7
mov eax, 2
mov byte [esp + eax + 0x3a8], 0
add eax, 1
cmp eax, 8
jne 0x414d72
xor eax, eax
cmp eax, 8
jae 0x414da6
mov cl, byte [esp + eax + 0x3a8]
mov dl, al
add dl, 0xa9
xor dl, cl
add dl, 0xb3
mov byte [esp + eax + 0x3a8], dl
add eax, 1
jmp 0x414d84
mov eax, dword [esp + 0x38]
lea ecx, [esp + 0x3a8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004018a0
mov dword [esp + 0x3c0], eax
mov al, byte [esp + 0x164]
mov byte [esp + 0x1dc], al
mov byte [esp + 0x30c], 0xde
mov byte [esp + 0x30d], 0xcd
mov byte [esp + 0x30e], 0x72
mov eax, 3
mov byte [esp + eax + 0x30c], 0
add eax, 1
cmp eax, 5
jne 0x414def
xor eax, eax
cmp eax, 5
jae 0x414e6b
mov cl, byte [esp + eax + 0x30c]
movzx ebx, cl
mov esi, eax
add esi, 0x7306c94
mov edi, 0xf8cf936b
sub edi, eax
and edi, 0xbaeb7fee
mov edx, esi
and edx, 0x45148011
or edi, edx
xor edi, ebx
mov edx, edi
xor edx, 0x3aeb7fee
shl edi, 1
xor edi, 0x75d6ffdd
sub edx, edi
mov edi, esi
and edi, edx
shl edi, 1
mov ebx, edi
xor ebx, esi
mov edx, 0x6b
sub edx, eax
and edi, edx
shl edi, 1
sub ebx, edi
add bl, cl
add bl, 0x1c
mov byte [esp + eax + 0x30c], bl
add eax, 1
jmp 0x414e01
mov eax, dword [esp + 0x38]
lea ecx, [esp + 0x30c]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00401900
fnstcw word [esp + 0xc6]
movzx eax, word [esp + 0xc6]
or eax, 0xc00
mov word [esp + 0x252], ax
fldcw word [esp + 0x252]
fistp dword [esp + 0x3c8]
fldcw word [esp + 0xc6]
mov eax, dword [esp + 0x3c8]
mov dword [esp + 0x3c], eax
mov al, byte [esp + 0x160]
mov byte [esp + 0x1e0], al
mov byte [esp + 0x3a0], 0x2b
mov byte [esp + 0x3a1], 0x87
mov eax, 2
mov byte [esp + eax + 0x3a0], 0
add eax, 1
cmp eax, 7
jne 0x414ee1
xor eax, eax
cmp eax, 7
jae 0x414f89
movzx edx, byte [esp + eax + 0x3a0]
mov edi, eax
add edi, 0x2e172461
mov ecx, edi
and ecx, edx
shl ecx, 1
mov ebx, edi
sub ebx, ecx
add ebx, edx
mov ecx, 0x51e8db9e
sub ecx, eax
mov esi, 0x51e8db9e
sub esi, eax
and ecx, esi
or ecx, ebx
shl ecx, 1
add ecx, 2
add ecx, edi
add ecx, edx
mov edx, ecx
add edx, 0x342e7b4a
mov esi, edx
shl esi, 1
and esi, 0x33189434
xor edx, 0x198c4a1a
add edx, esi
mov edi, edx
add edi, 0xb6
shl ecx, 1
and ecx, 2
mov ebx, 0x49
sub ebx, edx
and ebx, 0x72
and edi, 0x8d
or ebx, edi
xor ebx, 0x73
add ebx, ecx
mov byte [esp + eax + 0x3a0], bl
mov ecx, eax
shl ecx, 1
and ecx, 2
xor eax, 1
add eax, ecx
jmp 0x414ef3
mov eax, dword [esp + 0x38]
lea ecx, [esp + 0x3a0]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00401900
fnstcw word [esp + 0xc4]
movzx eax, word [esp + 0xc4]
or eax, 0xc00
mov word [esp + 0x250], ax
fldcw word [esp + 0x250]
fistp dword [esp + 0x3c4]
fldcw word [esp + 0xc4]
mov eax, dword [esp + 0x3c4]
mov dword [esp + 0x358], eax
lea eax, [esp + 0x56c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x400
mov eax, dword [esp + 0x3c0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.0040ab20
lea eax, [esp + 0x56c]
lea ecx, [esp + 0x34]
lea edx, [esp + 0x39c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0040b340
mov ecx, 0x791d5c9a
test al, 1
jne 0x41503b
mov ecx, 0x277a6206
mov eax, dword [esp + 0x2c]
mov dword [eax], ecx
jmp 0x4187dd
mov eax, 0xad859987
test byte [esp + 0x89], 1
jne 0x415314
mov eax, 0xf8acaf83
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xc92f393a
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x1afbaf05
jmp 0x4187dd
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.00408310
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x7b83cf0f
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xbe148b29
mov eax, dword [esp + 0x48]
mov dword [esp + 0x328], 4
mov dword [esp + 0x324], eax
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x5742fc81
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x46782655
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x104cce24
mov eax, dword [esp + 0x120]
mov dword [esp + 0x320], 0
mov dword [esp + 0x31c], eax
jmp 0x4187dd
mov eax, dword [esp + 0x324]
mov ecx, dword [esp + 0x328]
mov dword [esp + 0x360], eax
mov dword [esp + 0x364], ecx
mov eax, 0x3c92de6e
cmp dword [esp + 0x364], 0
je 0x415634
mov eax, 0xaf3d5ab9
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
mov eax, dword [esp + 0x364]
mov ecx, dword [esp + 0x360]
mov edx, dword [esp + 0x360]
mov dword [esp + 0x104], eax
mov dword [esp + 0x100], ecx
mov dword [esp + 0x334], edx
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xa9a1fbf4
lea eax, [esp + 0x4a4]
mov dword [esp + 0x330], eax
mov dword [esp + 0x32c], 0
jmp 0x4187dd
mov eax, dword [esp + 0x32c]
mov ecx, dword [esp + 0x330]
mov dword [esp + 0x368], eax
mov dword [esp + 0xac], ecx
mov ecx, dword [esp + 0x368]
mov eax, 0x80faa8eb
cmp ecx, dword [esp + 0x3d4]
jb 0x4156f7
mov eax, 0xf95c1a46
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x5c558f8a
jmp 0x4187dd
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.0043b6f0
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x507b4b23
jmp 0x4187dd
mov eax, dword [esp + 0xe8]
add eax, 4
mov ecx, 2
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x415a1a
mov ecx, eax
mov dword [esp], ecx
call fcn.00408300
mov dword [esp + 0x4c], eax
mov eax, dword [0x44cd1c]
mov ecx, dword [esp + 0xe8]
mov edx, dword [esp + 0x4c]
mov esi, dword [esp + 0x36c]
xor edi, edi
lea edi, [esp + 0x444]
lea ebx, [esp + 0xe8]
mov dword [esp], 0
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ebx
call eax
sub esp, 0x18
mov ecx, 0x9ef87e6d
cmp eax, 0
jge 0x415a7c
mov ecx, 0xd848d58b
mov eax, dword [esp + 0x2c]
mov dword [eax], ecx
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xefb9847a
jmp 0x4187dd
mov eax, 0x265fa9e
test byte [esp + 0x8c], 1
jne 0x415b34
mov eax, 0x73c818d0
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x4187dd
cmp dword [esp + 0x3c], 1
sete al
and al, 1
mov byte [esp + 0x8d], al
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x8b6454d1
jmp 0x4187dd
mov eax, 0x5067be14
test byte [esp + 0x8d], 1
jne 0x415c4b
mov eax, 0xc86bafa1
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x4187dd
mov eax, 0xefc0e84d
cmp dword [esp + 0x3c], 2
je 0x415d36
mov eax, 0x9c84def8
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x1279f01e
mov eax, dword [esp + 0x4c]
mov dword [esp + 0xfc], 0
mov dword [esp + 0xf8], eax
jmp 0x4187dd
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x104]
mov dword [esp + 0x44], eax
mov dword [esp + 0x3e4], ecx
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x73fc0f6c
jmp 0x4187dd
mov eax, 0x458e39a3
test byte [esp + 0x8e], 1
jne 0x415f3b
mov eax, 0xbd26fef4
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x4187dd
mov eax, 0x8f585709
test byte [esp + 0x42], 1
jne 0x416615
mov eax, 0x46bf3952
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x344], eax
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xb7cdba62
jmp 0x4187dd
mov esi, dword [esp + 0xb0]
add esi, 2
mov eax, dword [esp + 0xb0]
mov word [eax], 0x2c
mov eax, dword [esp + 0x124]
mov ecx, dword [esp + 0xd4]
xor edx, edx
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
call fcn.0040ab20
shl eax, 1
add esi, eax
mov dword [esp + 0x3f8], esi
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x6b9ad854
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xdf8f7f83
jmp 0x4187dd
mov eax, dword [esp + 0x384]
add eax, 2
mov ecx, dword [esp + 0x384]
mov word [ecx], 0x2c
mov ecx, dword [esp + 0x37c]
mov edx, dword [esp + 0xd8]
xor esi, esi
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0
call fcn.0040ab20
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x467183de
jmp 0x4187dd
cmp dword [esp + 0x3c], 2
sete al
and al, 1
mov byte [esp + 0x8f], al
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x409a05b
jmp 0x4187dd
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call fcn.00418c80
mov ecx, eax
and ecx, 0x1d
shl ecx, 1
xor eax, 0x1d
add eax, ecx
sub eax, 0xffffffff
mov ecx, 2
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x41680b
mov ecx, eax
mov dword [esp], ecx
call fcn.00408300
mov dword [esp + 0x388], eax
mov al, byte [esp + 0x138]
mov byte [esp + 0x218], al
mov byte [esp + 0x13c], 0x26
mov byte [esp + 0x13d], 7
mov byte [esp + 0x13e], 6
mov byte [esp + 0x13f], 1
mov eax, 4
mov byte [esp + eax + 0x13c], 0
add eax, 1
cmp eax, 8
jne 0x41684d
xor eax, eax
cmp eax, 8
jae 0x41688d
movzx edx, byte [esp + eax + 0x13c]
mov ecx, eax
add ecx, 0x28356cc1
mov esi, ecx
and esi, edx
shl esi, 1
add ecx, edx
sub ecx, esi
add cl, 0x3b
mov byte [esp + eax + 0x13c], cl
add eax, 1
jmp 0x41685f
mov al, byte [esp + 0x134]
mov byte [esp + 0x21c], al
mov byte [esp + 0x254], 0x40
mov byte [esp + 0x255], 0x31
mov byte [esp + 0x256], 0x45
mov byte [esp + 0x257], 0x33
mov byte [esp + 0x258], 0x43
mov byte [esp + 0x259], 0x3d
mov byte [esp + 0x25a], 0x53
mov byte [esp + 0x25b], 0x3f
mov byte [esp + 0x25c], 0x4a
mov byte [esp + 0x25d], 0x39
mov byte [esp + 0x25e], 0x49
mov byte [esp + 0x25f], 0x3b
mov byte [esp + 0x260], 0x2c
mov byte [esp + 0x261], 0x45
mov byte [esp + 0x262], 0x2b
mov byte [esp + 0x263], 0x47
mov byte [esp + 0x264], 0x34
mov byte [esp + 0x265], 0x41
mov byte [esp + 0x266], 0x36
mov byte [esp + 0x267], 0x43
mov byte [esp + 0x268], 0x6c
mov byte [esp + 0x269], 0x4d
mov byte [esp + 0x26a], 0x7b
mov byte [esp + 0x26b], 0x4f
mov byte [esp + 0x26c], 0x25
mov byte [esp + 0x26d], 0x49
mov byte [esp + 0x26e], 0x32
mov byte [esp + 0x26f], 0x4b
mov byte [esp + 0x270], 0x39
mov byte [esp + 0x271], 0x55
mov byte [esp + 0x272], 0x35
mov byte [esp + 0x273], 0x57
mov byte [esp + 0x274], 0x70
mov byte [esp + 0x275], 0x51
mov byte [esp + 0x276], 0x30
mov byte [esp + 0x277], 0x53
mov byte [esp + 0x278], 0x25
mov byte [esp + 0x279], 0x5d
mov byte [esp + 0x27a], 0x2e
mov byte [esp + 0x27b], 0x5f
mov byte [esp + 0x27c], 0x39
mov byte [esp + 0x27d], 0x59
mov byte [esp + 0x27e], 0x29
mov byte [esp + 0x27f], 0x5b
mov byte [esp + 0x280], 0x17
mov byte [esp + 0x281], 0x65
mov byte [esp + 0x282], 0x46
mov byte [esp + 0x283], 0x67
mov byte [esp + 0x284], 0x55
mov byte [esp + 0x285], 0x61
mov byte [esp + 0x286], 0xc
mov byte [esp + 0x287], 0x63
mov byte [esp + 0x288], 0x4c
mov byte [esp + 0x289], 0x6d
mov byte [esp + 0x28a], 0x4c
mov byte [esp + 0x28b], 0x6f
mov byte [esp + 0x28c], 0x68
mov byte [esp + 0x28d], 0x69
mov eax, 0x3a
mov byte [esp + eax + 0x254], 0
add eax, 1
cmp eax, 0x40
jne 0x416a70
xor eax, eax
cmp eax, 0x40
jae 0x416ac9
mov cl, byte [esp + eax + 0x254]
movzx edx, cl
mov esi, eax
shl esi, 1
and esi, 0xb455e568
mov edi, eax
xor edi, 0xda2af2b4
add edi, esi
mov esi, edi
and esi, edx
shl esi, 1
mov edx, esi
xor edx, edi
xor edi, 0xffffffff
and esi, edi
shl esi, 1
sub edx, esi
add dl, cl
add dl, 0x7c
mov byte [esp + eax + 0x254], dl
add eax, 1
jmp 0x416a82
mov eax, dword [esp + 0x388]
lea ecx, [esp + 0x254]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409e90
mov ecx, dword [esp + 0x44]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409e90
lea ecx, [esp + 0x13c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409e90
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x25a25f4
mov eax, dword [esp + 0x388]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x110], edx
mov dword [esp + 0x10c], ecx
mov dword [esp + 0x108], eax
jmp 0x4187dd
cmp dword [esp + 0x358], 1
sete al
and al, 1
mov byte [esp + 0x90], al
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x9cf8fe2
jmp 0x4187dd
mov eax, 0x880d7a9b
test byte [esp + 0x91], 1
jne 0x416c93
mov eax, 0x5951a689
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x11c], eax
mov dword [esp + 0x118], 0
mov dword [esp + 0x114], 0
jmp 0x4187dd
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.004187f0
mov esi, eax
add esi, 1
mov ecx, 2
mov eax, esi
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x416ce8
mov ecx, eax
mov dword [esp], ecx
call fcn.00408300
mov dword [esp + 0x128], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x128]
xor edx, edx
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.0040ab20
mov ecx, dword [esp + 0x39c]
xor ecx, 0xffffffff
sub ecx, 0xffffffff
mov eax, 0x18
sub eax, ecx
add eax, 1
mov ecx, 2
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x416d49
mov ecx, eax
mov dword [esp], ecx
call fcn.00408300
mov dword [esp + 0x38c], eax
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xbc363a2d
jmp 0x4187dd
mov al, byte [esp + 0x130]
mov byte [esp + 0x220], al
mov byte [esp + 0x294], 0xa8
mov byte [esp + 0x295], 0x39
mov byte [esp + 0x296], 0xad
mov byte [esp + 0x297], 0x3f
mov byte [esp + 0x298], 0xa7
mov byte [esp + 0x299], 0x3d
mov byte [esp + 0x29a], 0x87
mov byte [esp + 0x29b], 0x23
mov byte [esp + 0x29c], 0xb6
mov byte [esp + 0x29d], 0x21
mov byte [esp + 0x29e], 0xb1
mov byte [esp + 0x29f], 0x27
mov byte [esp + 0x2a0], 0x8c
mov byte [esp + 0x2a1], 0x25
mov byte [esp + 0x2a2], 0x8f
mov byte [esp + 0x2a3], 0x2b
mov byte [esp + 0x2a4], 0x84
mov byte [esp + 0x2a5], 0x29
mov byte [esp + 0x2a6], 0x82
mov byte [esp + 0x2a7], 0x2f
mov byte [esp + 0x2a8], 0x4c
mov byte [esp + 0x2a9], 0x2d
mov byte [esp + 0x2aa], 0x7f
mov byte [esp + 0x2ab], 0x13
mov byte [esp + 0x2ac], 0xb5
mov byte [esp + 0x2ad], 0x11
mov byte [esp + 0x2ae], 0x8e
mov byte [esp + 0x2af], 0x17
mov byte [esp + 0x2b0], 0xb1
mov byte [esp + 0x2b1], 0x15
mov byte [esp + 0x2b2], 0xbd
mov byte [esp + 0x2b3], 0x1b
mov byte [esp + 0x2b4], pe_nt_image_headers32
mov byte [esp + 0x2b5], 0x19
mov byte [esp + 0x2b6], 0xb8
mov byte [esp + 0x2b7], 0x1f
mov byte [esp + 0x2b8], 0x85
mov byte [esp + 0x2b9], 0x1d
mov byte [esp + 0x2ba], 0x92
mov byte [esp + 0x2bb], 3
mov byte [esp + 0x2bc], 0xa1
mov byte [esp + 0x2bd], 1
mov byte [esp + 0x2be], 0x91
mov byte [esp + 0x2bf], 7
mov byte [esp + 0x2c0], 0x93
mov byte [esp + 0x2c1], 5
mov byte [esp + 0x2c2], 0x6a
mov byte [esp + 0x2c3], 0xb
mov byte [esp + 0x2c4], 8
mov byte [esp + 0x2c5], 9
mov eax, 0x32
mov byte [esp + eax + 0x294], 0
add eax, 1
cmp eax, 0x38
jne 0x416f0a
xor eax, eax
cmp eax, 0x38
jae 0x416f90
movzx ecx, byte [esp + eax + 0x294]
mov esi, eax
add esi, 0x6564a88a
mov edx, 0x1a9b5775
sub edx, eax
and edx, 0x3fee5ce0
and esi, 0xc011a31f
or edx, esi
mov esi, edx
xor esi, 0xffffffff
mov edi, ecx
xor edi, 0x3fee5ce0
or edi, esi
xor ecx, 0xc011a31f
or ecx, edx
and ecx, edi
mov edx, 0x71a2dbfd
sub edx, ecx
mov esi, edx
shl esi, 1
and esi, 0x9e
xor edx, 0x9365d94f
mov ecx, edx
add ecx, esi
shl edx, 1
and edx, 2
xor ecx, 1
add ecx, edx
mov byte [esp + eax + 0x294], cl
add eax, 1
jmp 0x416f1c
mov eax, dword [esp + 0x38c]
lea ecx, [esp + 0x294]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409e90
mov ecx, dword [esp + 0x128]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409e90
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xe8292879
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x5951a689
mov eax, dword [esp + 0x38c]
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x118], 0
mov dword [esp + 0x114], eax
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xb8036ac7
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xf96e456f
jmp 0x4187dd
mov eax, 0x95c6da85
cmp dword [esp + 0xe4], 2
je 0x4170c6
mov eax, 0xa41e1a19
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x4187dd
mov eax, 0x7517d2c5
cmp dword [esp + 0xe4], 0
je 0x4170e5
mov eax, 0xa41e1a19
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x4187dd
lea edi, [esp + 0x4e4]
xor eax, eax
mov ecx, 0x11
rep stosd dword es:[edi], eax
mov dword [esp + 0x4e4], 0x44
mov eax, dword [0x44cd14]
mov dword [esp], eax
mov dword [esp + 4], 0xef6ed546
call fcn.0043fb70
test eax, eax
setne cl
mov ecx, dword [esp + 0xdc]
xor edx, edx
lea edx, [esp + 0x4e4]
lea esi, [esp + 0x424]
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0x8000000
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], esi
call eax
sub esp, 0x28
mov ecx, 0xc3526d5
cmp eax, 0
jne 0x417709
mov ecx, 0xb7352be3
mov eax, dword [esp + 0x2c]
mov dword [eax], ecx
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xb7352be3
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x6336f7ec
jmp 0x4187dd
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.0043b6f0
cmp dword [esp + 0xe0], 0
sete al
and al, 1
mov byte [esp + 0x92], al
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x547a0fdb
jmp 0x4187dd
mov eax, dword [esp + 0xe0]
mov dword [esp], eax
call fcn.00408310
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xdde36c13
jmp 0x4187dd
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
call fcn.00408310
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xcff69590
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xad23b816
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xfab5fafe
jmp 0x4187dd
mov dword [eax], 0xbd26fef4
jmp 0x4187dd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xeb7b926e
sub al, 0xc7
add byte [esi - 0x6e], ch
jnp 0x417ae0
jmp 0x4187dd
or al, 0
add byte [ebx - 0x38d3dbbc], cl
add byte [edx - 0x28], cl
lahf
jge 0x417aee
aam 0xc
add byte [eax], al
mov eax, dword [esp + 0xcc]
sub eax, 0xffffffff
mov dword [esp + 0x414], eax
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x2c09bc29
mov eax, dword [esp + 0x414]
mov dword [esp + 0x318], eax
jmp 0x4187dd
mov al, byte [esp + 0x40]
and al, 1
movzx eax, al
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
shl bh, 0x1d
dec eax
pop ebx
push es
ja 0x417b73
mov eax, 0x2c62030c
inc esi
pushfd
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x56ec707a
jmp 0x4187dd
add eax, 0xffffffde
jge 0x417af7
inc esp
and al, 0x2c
mov dword [eax], 0xcdcc345f
jmp 0x4187dd
int3
cmp eax, 8
jae 0x417c93
movzx edx, byte [esp + eax + 0xbc]
mov edi, eax
and edi, 0x1feefc99
mov ebx, eax
and ebx, 0x1feefc99
mov esi, eax
and esi, 2
xor esi, 2
imul esi, ebx
mov ebx, eax
and ebx, 2
or edi, 2
imul edi, ebx
add edi, esi
mov ebx, eax
shl ebx, 1
and ebx, 0x3fddf936
mov esi, eax
add esi, 0x1feefc9b
sub esi, ebx
add esi, edi
mov edi, esi
and edi, edx
shl edi, 1
mov ebx, esi
add ebx, edx
sub ebx, edi
mov edi, ebx
shl edi, 1
xor edi, 0xffffffff
add ebx, edi
mov edi, esi
and edi, ebx
mov ecx, edi
and ecx, 0xfffffffd
mov ebx, edi
and ebx, 2
xor ebx, 2
imul ebx, ecx
mov ecx, edi
and ecx, 2
or edi, 2
imul edi, ecx
add edi, ebx
add edi, 0x61d0308d
sub edi, esi
mov ecx, edi
add ecx, 0x9e2fcf73
mov esi, edx
xor esi, 0xffffffff
and ecx, esi
mov esi, 0x8c
sub esi, edi
and esi, edx
sub esi, ecx
mov edx, esi
and edx, 1
or esi, 1
add esi, 0xf8
add edx, esi
mov byte [esp + eax + 0xbc], dl
add eax, 1
jmp 0x417bcd
lea eax, [esp + 0xbc]
mov ecx, dword [esp + 0x3bc]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
call fcn.00401b20
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xff51cee6
jmp 0x4187dd
adc al, byte [eax + 7]
jne 0x417c8e
int1
add dword [edi + 0x144a7d01], ebx
inc esi
retf 0xa35f
out 0, al
movsb byte es:[edi], byte [esi]
add byte [edx - 0x41], bl
xchg edx, eax
hlt
xor ch, cl
retf
xchg esi, eax
hlt
ljmp 0x17ef:0x2eeb815b
xchg ebx, eax
sbb bl, cl
leave
enter 0x232a, 0x14
invalid
inc ebx
invalid
cmc
sbb cl, ah
outsd dx, dword [esi]
jl 0x41847b
and ch, byte [edx + 0x2c24448b]
mov dword [eax], 0xcd6fe2ca
jmp 0x4187dd
rcl dword [edx + 0x57], 0xde
cmp al, 0xf5
dec ecx
feni8087_nop
mov dl, 0x4c
add byte [ebx - 0x38d3dbbc], cl
add byte [ecx - 0x165c2670], ah
sbb al, byte [ebx]
add byte [eax], al
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x694cf2a5
jmp 0x4187dd
jmp 0x413b27