Function at 0x43adaa
Capabilities:
Get geographical location
Get hostname

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov al, byte [0x4aa031]
sub esp, 0x6d0
push esi
mov esi, 0xb30
push edi
cmp al, 0x50
je 0x43ae13
cmp al, 0x51
je 0x43ae13
cmp al, 0x62
je 0x43ae13
cmp al, 0x64
je 0x43ae13
cmp al, 0x6c
jae 0x43ae13
mov ecx, esi
call fcn.00434770
test ax, ax
je 0x43ae0e
mov ecx, esi
call fcn.00434770
movzx ecx, ax
mov eax, dword [0x4aa040]
add eax, 0xffffffee
shl ecx, 4
movzx edx, ax
add ecx, 0x2e
movzx eax, word [0x4aa088]
shl eax, 0x10
add edx, eax
call fcn.00434a90
mov al, byte [0x4aa031]
mov si, word [0x4aa030]
cmp al, 0x59
je 0x43ae2a
mov cx, si
mov word [0x16975d8], cx
jmp 0x43ae31
mov cx, word [0x16975d8]
movzx edi, al
cmp edi, 0x6c
ja case.0x43ae43.24
mov dl, byte [0x4aa030]
jmp dword [edi*4 + 0x43c922]
movzx ecx, word [0x4aa040]
mov eax, dword [0x4aa068]
add ecx, 2
push 0
add ecx, eax
call fcn.00434770
mov ecx, eax
xor dl, dl
call fcn.0043e624
pop ecx
jmp case.0x43ae43.13
xor eax, eax
lea edx, [esp + 0x14]
inc eax
xor ecx, ecx
mov dword [esp + 0x1c], eax
mov byte [0x15b3299], al
lea eax, [esp + 0x1c]
push eax
call fcn.004400d8
mov al, byte [esp + 0x18]
pop ecx
mov byte [0x4aa030], al
mov byte [0x15b3299], 0
jmp case.0x43ae43.13
mov al, byte [0x4aa038]
lea ecx, [esp + 0x1c]
mov byte [esp + 0xe], al
lea edx, [esp + 0xe]
xor eax, eax
inc eax
push ecx
mov ecx, eax
mov dword [esp + 0x20], eax
call fcn.00440101
mov al, byte [esp + 0x12]
pop ecx
mov byte [0x4aa030], al
jmp case.0x43ae43.13
cmp word [0x4ac540], 0
je case.0x43ae43.13
mov ecx, dword [0x499200]
test ecx, ecx
je case.0x43ae43.13
push 0x4aa030
call fcn.00422060
jmp case.0x43ae43.13
cmp word [0x4ac540], 0
je case.0x43ae43.13
mov ecx, dword [0x499200]
test ecx, ecx
je case.0x43ae43.13
movzx eax, byte [0x4aa038]
push eax
call fcn.0042202a
jmp case.0x43ae43.13
movzx eax, byte [0x4aa038]
mov ecx, dword [0x4991e8]
push eax
call fcn.00421df7
jmp case.0x43ae43.13
mov al, byte [0x4aa038]
cmp al, 0xff
jne 0x43afd6
mov al, byte [0x16979da]
test al, al
je 0x43af71
mov byte [0x16979da], 0
mov byte [0x4aa030], al
xor cl, cl
call fcn.0042feaf
jmp case.0x43ae43.13
call fcn.00440bb8
test al, al
jne 0x43af83
mov byte [0x4aa030], al
mov cl, 1
jmp 0x43af67
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 1
push eax
xor ecx, ecx
call fcn.00421034
movzx ecx, al
lea edx, [esp + 0x12]
call fcn.004400d8
cmp byte [esp + 0x12], 0
pop ecx
jne 0x43afd0
xor ecx, ecx
call fcn.00421034
cmp al, 1
jne 0x43afd0
lea eax, [esp + 0x18]
xor ecx, ecx
push eax
call fcn.00421034
movzx ecx, al
mov edx, 0x16979da
call fcn.004400d8
pop ecx
mov al, byte [esp + 0xe]
jmp 0x43af60
mov byte [esp + 0x14], al
lea ecx, [esp + 0x1c]
xor eax, eax
inc eax
push ecx
mov ecx, eax
mov dword [esp + 0x20], eax
call fcn.00421034
movzx ecx, al
lea edx, [esp + 0x18]
call fcn.00440101
mov al, byte [0x4aa038]
jmp 0x43aec7
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 1
push eax
xor ecx, ecx
call fcn.00421034
movzx ecx, al
lea edx, [esp + 0x18]
call fcn.004400d8
mov al, byte [esp + 0x18]
jmp 0x43aec7
movzx esi, word [0x4aa038]
add esi, dword [0x4aa06c]
mov dword [esp + 0x1c], 1
jmp 0x43b05e
lea eax, [esp + 0x1c]
xor ecx, ecx
push eax
inc ecx
inc esi
call fcn.00421034
movzx ecx, al
lea edx, [esp + 0x12]
call fcn.00440101
pop ecx
mov ecx, esi
call fcn.00434710
mov byte [esp + 0xe], al
cmp al, 0x24
jne 0x43b043
jmp case.0x43ae43.13
movzx esi, word [0x4aa038]
add esi, dword [0x4aa06c]
mov ecx, esi
call fcn.00434710
mov byte [esp + 0x10], al
test al, al
je case.0x43ae43.13
xor ecx, ecx
call fcn.00421034
xor ecx, ecx
mov byte [esp + 0xe], al
call fcn.00421034
movzx edi, byte [esp + 0xe]
mov byte [esp + 0x14], al
mov byte [esp + 0xf], 0
xor eax, eax
inc eax
mov dword [esp + 0x28], eax
lea edx, [esp + 0xe]
lea eax, [esp + 0x28]
mov ecx, edi
push eax
call fcn.004400d8
cmp byte [esp + 0x12], 8
pop ecx
push 1
jne 0x43b0fe
cmp byte [esp + 0x13], 0
pop eax
je 0x43b0b5
movzx ecx, byte [esp + 0x14]
lea eax, [esp + 0x28]
push eax
mov edx, 0x47874c
mov dword [esp + 0x2c], 3
call fcn.00440101
dec byte [esp + 0x13]
pop ecx
jmp 0x43b0b2
mov al, byte [esp + 0x14]
cmp byte [esp + 0x13], al
pop eax
jae 0x43b0b5
movzx ecx, byte [esp + 0x14]
lea eax, [esp + 0x28]
push eax
lea edx, [esp + 0x12]
call fcn.00440101
mov dl, byte [esp + 0x12]
pop ecx
movzx ecx, byte [esp + 0xf]
add ecx, 2
add ecx, esi
call fcn.00434910
cmp byte [esp + 0xe], 0xd
je 0x43b140
inc byte [esp + 0xf]
jmp 0x43b0b2
mov dl, byte [esp + 0xf]
lea ecx, [esi + 1]
call fcn.00434910
jmp case.0x43ae43.13
call fcn.00440bb8
neg al
sbb al, al
jmp 0x43aec8
xor ecx, ecx
call fcn.00421034
call fcn.00440bb8
xor ecx, ecx
inc ecx
test al, al
je 0x43b193
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], ecx
push eax
lea edx, [esp + 0x18]
xor ecx, ecx
call fcn.004400d8
pop ecx
call fcn.00440bb8
push 1
pop ecx
test al, al
jne 0x43b172
mov dl, byte [0x4aa030]
cmp dl, cl
je 0x43b1b5
cmp dl, 6
je 0x43b1b5
cmp dl, 7
je 0x43b1b5
cmp dl, 8
je 0x43b1b5
cmp dl, 0xa
jne 0x43c908
mov al, byte [0x4aa031]
mov byte [esp + 0x10], al
mov byte [0x4aa031], dl
call fcn.0043adaa
mov al, byte [esp + 0x10]
mov byte [0x4aa031], al
jmp case.0x43ae43.13
mov cl, byte [0x4aa038]
call fcn.0043f705
mov byte [0x4aa030], 0x1a
jmp case.0x43ae43.13
mov edx, dword [0x4aa038]
mov ecx, dword [0x4aa08c]
call fcn.00421419
test al, al
setne al
dec al
jmp 0x43aec8
mov edx, dword [0x4aa038]
mov ecx, dword [0x4aa08c]
call fcn.004214e4
jmp 0x43b1ff
mov edx, dword [0x4aa038]
mov ecx, dword [0x4aa08c]
call fcn.0042167a
jmp 0x43b1ff
mov edx, dword [0x4aa038]
mov ecx, dword [0x4aa08c]
call fcn.004216fa
jmp 0x43b1ff
mov edx, dword [0x4aa038]
mov ecx, dword [0x4aa08c]
call fcn.00421ccc
jmp 0x43b1ff
mov edx, dword [0x4aa038]
mov ecx, dword [0x4aa08c]
push 0
call fcn.0042174d
jmp 0x43aec7
mov edx, dword [0x4aa038]
mov ecx, dword [0x4aa08c]
push 0
call fcn.00421862
jmp 0x43aec7
mov edx, dword [0x4aa038]
mov ecx, dword [0x4aa08c]
call fcn.004213cb
jmp 0x43b1ff
mov edx, dword [0x4aa038]
mov ecx, dword [0x4aa08c]
call fcn.00421d8b
jmp 0x43b1ff
mov al, byte [0x15b3296]
jmp 0x43aec8
movzx edx, word [0x4aa08c]
mov esi, 0xb2c
movzx eax, word [0x4aa038]
mov ecx, esi
shl edx, 0x10
add edx, eax
call fcn.00434a90
mov ecx, esi
call fcn.00434840
jmp case.0x43ae43.13
xor cl, cl
mov byte [0x4aa038], cl
jmp 0x43b2f8
mov cl, byte [0x4aa038]
push 0x4aa038
push ecx
mov edx, 0x4aa034
call fcn.00440680
pop ecx
pop ecx
test al, al
jne case.0x43ae43.13
mov byte [0x4aa030], 0xff
jmp case.0x43ae43.13
xor eax, eax
inc eax
push eax
mov dword [esp + 0x20], eax
lea eax, [esp + 0x20]
push eax
mov edx, dword [0x4aa038]
mov ecx, dword [0x4aa08c]
call fcn.00421a92
pop ecx
jmp 0x43aec7
xor eax, eax
inc eax
push eax
mov dword [esp + 0x20], eax
lea eax, [esp + 0x20]
push eax
mov edx, dword [0x4aa038]
mov ecx, dword [0x4aa08c]
call fcn.00421b60
jmp 0x43b33c
mov edx, dword [0x4aa038]
mov ecx, dword [0x4aa08c]
call fcn.00421c34
jmp 0x43b1ff
movzx eax, word [0x4aa038]
lea ecx, [esp + 0x1c]
push 1
push eax
movzx eax, word [0x4aa08c]
push eax
call fcn.0043d401
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x24]
call fcn.0043d49c
mov ecx, dword [esp + 0x1c]
movzx edx, word [esp + 0x14]
movzx eax, byte [esp + 0x10]
shl edx, 7
add edx, eax
lea ecx, [ecx + 0x21]
call fcn.00434a90
jmp case.0x43ae43.13
movzx edx, byte [0x4aa030]
movzx ecx, word [0x4aa08c]
movzx eax, word [0x4aa038]
shl ecx, 0x10
add ecx, eax
mov dword [edx*4 + 0x4ac140], ecx
mov ecx, edx
call fcn.0042fd5c
jmp case.0x43ae43.13
mov ecx, 0xb30
call fcn.00434770
movzx ecx, ax
shl ecx, 4
add ecx, 2
call fcn.00434770
mov ecx, dword [0x4aa038]
movzx edx, ax
call fcn.0043e869
jmp case.0x43ae43.13
push 0
push 0x4aa034
jmp 0x43b32b
push 0
push 0x4aa034
jmp 0x43b34f
movzx edx, word [0x4aa048]
lea ecx, [esp + 0x2d8]
add edx, dword [0x4aa06c]
push 0x3ff
call fcn.00434ee0
mov edx, dword [0x4aa04c]
lea eax, [esp + 0x14]
pop ecx
mov ecx, dword [0x4aa080]
push eax
lea eax, [esp + 0x2dc]
push eax
movzx eax, byte [0x4aa030]
push eax
call fcn.0042113c
mov byte [0x4aa030], al
add esp, 0xc
movzx eax, byte [esp + 0x10]
add word [0x4aa048], ax
jmp case.0x43ae43.13
mov al, byte [0x4a99d8]
mov byte [0x4aa030], al
mov ax, word [0x4a99d4]
mov word [0x4aa034], ax
mov eax, dword [0x4a99d6]
shl eax, 8
add eax, dword [0x4a99da]
mov word [0x4aa038], ax
jmp case.0x43ae43.13
mov al, byte [0x4aa034]
and al, 3
mov byte [0x4aa030], 0xff
neg al
sbb al, al
add al, 0x1d
mov byte [0x497e9e], al
mov eax, dword [0x4aa034]
add eax, 0xfffff844
cmp ax, 0x77
ja case.0x43ae43.13
mov eax, dword [0x4aa038]
shr eax, 8
test al, al
je case.0x43ae43.13
cmp al, 0xc
ja case.0x43ae43.13
mov cl, byte [0x4aa038]
test cl, cl
je case.0x43ae43.13
movzx eax, al
cmp cl, byte [eax + 0x497e9c]
ja case.0x43ae43.13
jmp 0x43c908
mov eax, dword [0x4a99dc]
xor edx, edx
shl eax, 8
add eax, dword [0x4a99de]
mov word [0x4aa034], ax
movzx eax, word [0x4a99e2]
push 0xa
pop ecx
div ecx
mov ecx, dword [0x4a99e0]
shl ecx, 8
add eax, ecx
jmp 0x43b4b8
mov eax, dword [0x4aa034]
shr eax, 8
cmp al, 0x18
jae 0x43b312
cmp byte [0x4aa034], 0x3c
jae 0x43b312
mov eax, dword [0x4aa038]
shr eax, 8
cmp al, 0x3c
jae 0x43b312
cmp byte [0x4aa038], 0x64
jb 0x43c908
jmp 0x43b312
cmp byte [0x4aa030], 1
sete byte [0x15b3297]
jmp case.0x43ae43.13
mov esi, 0xb2c
mov ecx, esi
call fcn.00434840
shr eax, 0x10
xor ecx, ecx
mov edx, eax
call fcn.00427253
mov ecx, esi
call fcn.00434840
mov word [0x4aa03c], ax
jmp case.0x43ae43.13
cmp byte [0x4aa030], 1
mov eax, 0xff00
mov word [0x4aa03c], ax
jne 0x43b5f4
xor eax, eax
mov word [0x4aa03c], ax
mov ax, word [0x15b3286]
mov word [0x4aa030], ax
xor eax, eax
mov word [0x4aa034], ax
jmp case.0x43ae43.13
mov ecx, 0xb30
call fcn.00434770
movzx ecx, ax
mov edx, 0x4aa038
call fcn.004411c0
mov ecx, 0xb30
call fcn.00434770
movzx ecx, ax
mov dl, 1
movzx eax, byte [0x4aa030]
push eax
jmp 0x43ae66
mov cl, byte [0x4aa038]
test cl, cl
je 0x43b652
cmp al, 0x1f
je 0x43b652
dec cl
jmp 0x43b658
mov cl, byte [0x15b3296]
movzx eax, cl
mov byte [esp + 0x14], cl
xor ecx, ecx
cmp dword [eax*4 + 0x15c3340], ecx
je 0x43b312
mov edx, dword [0x15b32bc]
push 3
mov byte [0x4aa030], cl
pop ecx
call fcn.00427253
movzx eax, byte [esp + 0x14]
jmp 0x43b5cd
mov al, byte [0x4aa030]
test al, al
je 0x43b701
cmp al, 1
je 0x43b6ee
cmp al, 2
je 0x43b6d9
jbe 0x43b312
cmp al, 4
jbe case.0x43ae43.13
cmp al, 5
je 0x43b6cd
cmp al, 6
jne 0x43b312
mov ax, word [0x15b3286]
mov word [0x4aa03c], ax
mov eax, 0x1000
jmp 0x43b4b8
mov byte [0x4aa038], 3
jmp case.0x43ae43.13
cmp byte [0x4aa038], 0
mov al, byte [0x15b3298]
seta byte [0x15b3298]
jmp 0x43b706
cmp byte [0x4aa038], 0
seta byte [0x15b3298]
jmp case.0x43ae43.13
mov al, byte [0x15b3298]
mov byte [0x4aa038], al
jmp case.0x43ae43.13
mov edx, 0xb2
xor ecx, ecx
call fcn.00427253
xor eax, eax
inc eax
jmp 0x43b5cd
movzx ecx, byte [0x4aa030]
mov ax, word [ecx*4 + 0x4ac140]
mov dx, word [ecx*4 + 0x4ac142]
xor ecx, ecx
mov word [0x4aa03c], ax
call fcn.00427253
jmp case.0x43ae43.13
push 0x4aa03c
push 0x4aa038
push ecx
mov cl, byte [0x4aa038]
mov edx, 0x4aa034
call fcn.00440627
add esp, 0xc
test al, al
je 0x43b7b1
mov eax, 0x1fa
mov byte [0x4aa031], 0
cmp word [0x4aa040], ax
jne case.0x43ae43.13
mov ecx, dword [0x4aa068]
lea ecx, [ecx + 0x1fa]
call fcn.00434770
mov ecx, 0x60c
cmp ax, cx
jne case.0x43ae43.13
mov eax, dword [0x4aa030]
shl eax, 3
jmp 0x43b7b6
mov eax, 0xffff
mov word [0x4aa030], ax
jmp case.0x43ae43.13
cmp byte [0x4aa030], 0
jne 0x43b312
mov byte [0x4aa038], 0x2f
jmp case.0x43ae43.13
cmp byte [0x4aa030], 0
jne 0x43b80d
movzx ecx, word [0x4aa038]
add ecx, dword [0x4aa06c]
mov edx, dword [0x15b32b8]
push 0x18
call fcn.00434cc0
xor eax, eax
inc eax
mov word [0x4aa03c], ax
mov word [0x4aa030], ax
pop ecx
xor cl, cl
call fcn.0042fee4
jmp case.0x43ae43.13
movzx edx, word [0x4aa038]
lea ecx, [esp + 0x38]
add edx, dword [0x4aa06c]
push 0x100
call fcn.00434ee0
pop ecx
lea ecx, [esp + 0x38]
call fcn.0043ad87
call fcn.0043faf5
jmp 0x43b87f
mov ax, word [0x15b328a]
mov word [0x4aa030], ax
mov cl, 1
jmp 0x43b80f
movzx edx, word [0x4aa038]
lea ecx, [esp + 0x38]
add edx, dword [0x4aa06c]
push 0x100
call fcn.00434ee0
pop ecx
lea ecx, [esp + 0x38]
call fcn.0043ad87
call fcn.0043fb86
test al, al
je 0x43b845
jmp 0x43b80d
movzx edx, word [0x4aa038]
lea ecx, [esp + 0x38]
add edx, dword [0x4aa06c]
push 0x100
call fcn.00434ee0
pop ecx
lea ecx, [esp + 0x38]
call fcn.0043ad87
call fcn.0043f9fd
jmp 0x43b87f
movzx edx, word [0x4aa038]
lea ecx, [esp + 0x38]
add edx, dword [0x4aa06c]
push 0x100
call fcn.00434ee0
pop ecx
lea ecx, [esp + 0x38]
call fcn.0043ad87
mov edx, dword [0x4aa034]
push 0
push 0x4aa030
call fcn.00440239
pop ecx
pop ecx
test al, al
je 0x43b8f2
xor eax, eax
jmp 0x43b900
mov ax, word [0x15b328a]
mov word [0x4aa030], ax
mov al, 1
mov cl, al
jmp 0x43b80f
movzx edx, word [0x4aa038]
lea ecx, [esp + 0x38]
add edx, dword [0x4aa06c]
push 0x100
call fcn.00434ee0
pop ecx
lea ecx, [esp + 0x38]
call fcn.0043ad87
mov dl, byte [0x4aa030]
push 0x4aa030
call fcn.00440319
pop ecx
test al, al
je 0x43b8f2
xor eax, eax
cmp dword [0x4a9f40], eax
je 0x43b900
lea ecx, [esp + 0x38]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43b952
sub ecx, edx
xor eax, eax
cmp ecx, 0xa
jbe 0x43b900
lea edx, [esp + ecx + 0x2d]
mov esi, str.VGA512.CHM
mov ecx, eax
movzx eax, byte [edx + ecx]
cmp al, byte [esi + ecx]
jne 0x43b8ee
inc ecx
cmp ecx, 0xc
jne 0x43b96d
mov ax, word [0x4aa030]
mov word [0x497e98], ax
jmp 0x43b8ee
mov ecx, dword [0x4aa03c]
call fcn.00440153
test al, al
je 0x43b845
mov ax, word [0x4aa03c]
cmp ax, word [0x497e98]
jne 0x43b80d
mov eax, 0xffff
mov word [0x497e98], ax
jmp 0x43b80d
movzx eax, word [0x4aa034]
mov dword [esp + 0x18], eax
xor eax, eax
inc eax
cmp word [0x4aa034], ax
je 0x43b9e3
mov byte [0x15b3299], al
mov ecx, dword [0x4aa03c]
mov edi, 0x15b32d0
mov byte [0x15b329a], al
mov edx, edi
lea eax, [esp + 0x18]
push eax
call fcn.004400d8
pop ecx
xor ecx, ecx
test al, al
je 0x43bbb7
movzx eax, word [0x4aa038]
add eax, dword [0x4aa06c]
mov esi, dword [esp + 0x18]
mov dword [esp + 0x28], eax
xor eax, eax
cmp byte [0x498bb8], al
movzx edx, si
sete al
mov dword [esp + 0x30], edx
dec eax
mov dword [esp + 0x10], edi
and eax, 0xffffd000
add eax, 0x4000
mov dword [esp + 0x1c], eax
test edx, edx
je 0x43bb22
mov esi, eax
cmp byte [0x498bb8], 0
mov edi, dword [esp + 0x28]
mov ecx, edi
je 0x43ba70
call fcn.0040dfd0
mov ecx, eax
sub ecx, 0x4ac140
mov dword [esp + 0x14], ecx
jmp 0x43ba74
mov dword [esp + 0x14], edi
lea edx, [esi - 1]
mov eax, ecx
and eax, edx
mov edx, esi
sub edx, eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x34], edx
cmp edx, eax
jbe 0x43ba91
mov edx, eax
mov dword [esp + 0x34], eax
sub eax, edx
add edi, edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], edi
call fcn.004344d0
mov dword [esp + 0x2c], eax
test byte [eax + 4], 2
je 0x43bad3
push edx
push dword [esp + 0x14]
mov edx, dword [eax]
mov ecx, eax
push dword [esp + 0x1c]
call dword [edx + 0x1c]
push eax
call fcn.0044f5b0
mov ecx, dword [esp + 0x1c]
add esp, 0xc
add ecx, dword [esp + 0x34]
mov dword [esp + 0x10], ecx
jmp 0x43bb0c
test edx, edx
je 0x43bb0c
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
sub edi, ecx
mov esi, dword [esp + 0x34]
mov edx, dword [eax]
movzx eax, byte [ecx]
push eax
lea eax, [ecx + edi]
mov ecx, dword [esp + 0x30]
push eax
call dword [edx + 0x10]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
inc ecx
mov dword [esp + 0x10], ecx
sub esi, 1
jne 0x43bae5
mov esi, dword [esp + 0x1c]
cmp dword [esp + 0x30], 0
jne 0x43ba4e
mov esi, dword [esp + 0x18]
xor ecx, ecx
mov edi, 0x15b32d0
mov ax, word [0x4aa03c]
mov word [0x4aa030], si
cmp ax, word [0x497e98]
jne 0x43bbb3
cmp si, 0x1a
je 0x43bbac
cmp si, 2
je 0x43bba0
cmp byte [0x16975d6], 0
je 0x43bbb3
cmp word [0x16979dc], 0
je 0x43bb82
movzx eax, si
push eax
push edi
push 0x15b32d2
call fcn.0044fb30
mov ax, word [0x16979dc]
lea edx, [esi + 2]
add esp, 0xc
mov word [0x15b32d0], ax
xor eax, eax
mov word [0x16979dc], ax
jmp 0x43bb84
mov edx, esi
mov ecx, edi
call fcn.00426512
mov eax, 0xffff
xor ecx, ecx
mov word [0x497e98], ax
mov byte [0x16975d6], cl
jmp 0x43bbb3
mov ax, word [0x15b32d0]
mov word [0x16979dc], ax
mov byte [0x16975d6], 1
mov al, cl
jmp 0x43bbc6
mov ax, word [0x15b328a]
mov word [0x4aa030], ax
xor eax, eax
inc eax
mov cl, al
call fcn.0042fee4
xor eax, eax
mov word [0x15b3299], ax
jmp case.0x43ae43.13
mov ax, word [0x4aa034]
mov edi, 0x15b32d0
movzx ecx, ax
mov word [0x4aa030], ax
movzx eax, word [0x4aa038]
add eax, dword [0x4aa06c]
mov dword [esp + 0x18], eax
xor eax, eax
cmp byte [0x498bb8], al
mov dword [esp + 0x30], ecx
sete al
mov dword [esp + 0x10], edi
dec eax
xor edx, edx
and eax, 0xffffd000
inc edx
add eax, 0x4000
mov dword [esp + 0x2c], eax
test ecx, ecx
je 0x43bcff
mov esi, eax
cmp byte [0x498bb8], 0
mov edi, dword [esp + 0x18]
je 0x43bc50
mov ecx, edi
call fcn.0040dfd0
sub eax, 0x4ac140
xor edx, edx
mov dword [esp + 0x1c], eax
inc edx
jmp 0x43bc56
mov eax, edi
mov dword [esp + 0x1c], edi
lea ecx, [esi - 1]
and eax, ecx
mov ecx, esi
sub ecx, eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x14], ecx
cmp ecx, eax
jbe 0x43bc71
mov ecx, eax
mov dword [esp + 0x14], eax
add edi, ecx
sub eax, ecx
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x1c]
mov ecx, edi
mov dword [esp + 0x30], eax
call fcn.004344d0
mov ecx, eax
mov dword [esp + 0x1c], ecx
test byte [ecx + 4], dl
je 0x43bcb9
push dword [esp + 0x14]
mov edx, dword [ecx]
push edi
call dword [edx + 0x1c]
mov ecx, dword [esp + 0x14]
push eax
push ecx
call fcn.0044f5b0
mov eax, dword [esp + 0x1c]
add esp, 0xc
add eax, dword [esp + 0x14]
mov dword [esp + 0x10], eax
jmp 0x43bcec
cmp dword [esp + 0x14], 0
je 0x43bcef
mov eax, dword [esp + 0x10]
sub edi, eax
mov esi, dword [esp + 0x14]
mov edx, dword [ecx]
add eax, edi
push eax
call dword [edx + 4]
mov ecx, dword [esp + 0x10]
mov byte [ecx], al
mov eax, ecx
mov ecx, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x10], eax
sub esi, 1
jne 0x43bcca
mov esi, dword [esp + 0x2c]
xor edx, edx
inc edx
cmp dword [esp + 0x30], 0
jne 0x43bc2e
mov edi, 0x15b32d0
mov ecx, dword [0x4aa03c]
mov edx, edi
push 0x4aa030
call fcn.00440101
pop ecx
test al, al
je 0x43bd1d
xor al, al
jmp 0x43b900
mov ax, word [0x15b328a]
mov word [0x4aa030], ax
xor eax, eax
inc eax
jmp 0x43b900
movzx edx, word [0x4aa038]
lea ecx, [esp + 0x38]
add edx, dword [0x4aa06c]
push 0x100
call fcn.00434ee0
pop ecx
lea ecx, [esp + 0x38]
call fcn.0043ad87
call fcn.00440595
jmp 0x43b87f
movzx ecx, word [0x4aa034]
lea edx, [esp + 0x1c]
movzx eax, word [0x4aa038]
shl ecx, 0x10
add ecx, eax
movzx eax, byte [0x4aa030]
mov dword [esp + 0x1c], ecx
mov ecx, dword [0x4aa03c]
push eax
call fcn.0044012a
pop ecx
test al, al
je 0x43b845
mov ecx, dword [esp + 0x1c]
mov eax, ecx
shr eax, 0x10
mov word [0x4aa038], ax
mov word [0x4aa030], cx
jmp 0x43b80d
movzx edx, word [0x4aa038]
lea ecx, [esp + 0x38]
add edx, dword [0x4aa06c]
push 0x100
call fcn.00434ee0
pop ecx
lea ecx, [esp + 0x38]
call fcn.0043ad87
mov cl, byte [0x4aa030]
test cl, cl
jne 0x43be0c
lea edx, [esp + 0x10]
lea ecx, [esp + 0x38]
call fcn.004405d5
test al, al
je 0x43be02
mov ax, word [esp + 0x10]
mov word [0x4aa034], ax
jmp 0x43b80d
mov ax, word [0x15b328a]
mov cl, 1
jmp 0x43be6e
xor eax, eax
inc eax
cmp cl, al
jne 0x43be6c
movzx esi, word [0x4aa034]
lea eax, [esp + 0x10]
push eax
lea edx, [esp + 0x14c]
lea ecx, [esp + 0x3c]
call fcn.0043f7c7
pop ecx
test al, al
jne 0x43be38
xor cl, cl
jmp 0x43be58
movzx ecx, byte [esp + 0x10]
lea eax, [esp + 0x148]
push esi
push eax
mov ecx, dword [ecx*4 + 0x15c3340]
call fcn.00442225
mov cl, al
test cl, cl
jne 0x43be64
mov ax, word [0x15b328a]
mov word [0x4aa030], ax
xor cl, 1
jmp 0x43b80f
mov cl, al
mov word [0x4aa030], ax
jmp 0x43b80f
call fcn.00440917
jmp 0x43b87f
mov ecx, dword [0x4aa03c]
call fcn.004406df
jmp 0x43b87f
mov edx, dword [0x4aa034]
mov ecx, dword [0x4aa03c]
call fcn.00440772
test al, al
je 0x43be02
mov ax, word [0x4aa034]
xor cl, cl
jmp 0x43be6e
mov cl, byte [0x4aa038]
lea edx, [esp + 0x38]
call fcn.0043f9aa
test al, al
je 0x43be02
lea ecx, [esp + 0x38]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43bed4
sub ecx, edx
lea edx, [esp + 0x38]
lea eax, [ecx + 1]
movzx ecx, word [0x4aa048]
add ecx, dword [0x4aa06c]
push eax
call fcn.00434cc0
pop ecx
mov eax, 0x100
jmp 0x43beb2
mov edx, 0x4aa03c
mov ecx, 0x4aa030
call fcn.00440e27
jmp 0x43b87f
mov ecx, dword [0x4aa080]
test cx, cx
je 0x43b845
call fcn.00441365
jmp 0x43b87f
mov ecx, dword [0x4aa080]
mov edx, 0x4aa03c
call fcn.004411c0
test al, al
je 0x43be02
mov ax, word [0x4aa080]
jmp 0x43beb2
mov al, byte [0x4aa030]
cmp al, 3
ja case.0x43ae43.95
cmp al, 2
je case.0x43ae43.95
movzx edx, word [0x4aa038]
lea ecx, [esp + 0x38]
add edx, dword [0x4aa06c]
push 0x100
call fcn.00434ee0
pop ecx
lea ecx, [esp + 0x38]
call fcn.0043ad87
movzx eax, byte [0x4aa030]
movzx edx, word [0x4aa03c]
add edx, dword [0x4aa060]
push eax
call fcn.0043eb73
pop ecx
test al, al
jne 0x43bd16
mov ax, word [0x15b328a]
lea ecx, [esp + 0x38]
mov word [0x4aa030], ax
push ecx
movzx eax, ax
push eax
push str.Program_not_executed_loaded___d_:__s
jmp 0x43c0d9
xor eax, eax
inc eax
mov word [0x4aa030], ax
jmp 0x43b900
cmp dword [0x15ac140], 0
je 0x43bfee
push 0x6800
push 0
push 0x15ac140
call fcn.004500b0
add esp, 0xc
movzx eax, byte [0x4aa030]
mov ecx, 0xb30
mov dword [0x4809ac], eax
call fcn.00434770
movzx ecx, ax
movzx eax, byte [0x4aa030]
push eax
jmp 0x43ae64
mov al, byte [0x15b3294]
mov byte [0x4aa030], al
mov al, byte [0x15b3295]
jmp 0x43b1cd
movzx edx, word [0x4aa038]
lea ecx, [esp + 0x38]
add edx, dword [0x4aa06c]
push 0x100
call fcn.00434ee0
pop ecx
lea ecx, [esp + 0x38]
call fcn.0043ad87
mov cl, byte [esp + 0x38]
xor eax, eax
mov esi, eax
mov edx, eax
test cl, cl
je 0x43c09b
lea edi, [esp + 0x38]
mov dword [esp + 0x2c], edi
cmp cl, 0x2e
je 0x43c072
cmp cl, 0x2f
je 0x43c072
cmp cl, 0x5c
jne 0x43c074
mov edx, esi
lea edi, [edx + 1]
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0x2c]
cmp cl, 0x20
je 0x43c088
mov esi, dword [esp + 0x1c]
inc edi
mov byte [esp + edx + 0x38], cl
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x2c], edi
mov cl, byte [edi]
test cl, cl
jne 0x43c063
mov edx, dword [0x4aa034]
lea ecx, [esp + 0x38]
mov byte [esp + esi + 0x38], al
call fcn.0043ff53
test al, al
je 0x43c0bf
xor eax, eax
mov word [0x4aa030], ax
jmp 0x43b8ee
mov ax, word [0x15b328a]
mov word [0x4aa030], ax
movzx eax, ax
push eax
lea eax, [esp + 0x3c]
push eax
push str.FindFirst_failed:__s___d_
call fcn.0042fc19
add esp, 0xc
jmp 0x43b8fe
call fcn.004427cf
test al, al
je 0x43be02
xor eax, eax
jmp 0x43beb2
mov edx, dword [0x4aa03c]
mov ecx, 0xb30
call fcn.00434a00
jmp case.0x43ae43.13
mov ecx, 0xb30
call fcn.00434770
jmp 0x43b5cd
mov edx, dword [0x15c37ac]
xor ecx, ecx
shr edx, 4
call fcn.00427253
push 0x26
pop eax
jmp 0x43b5cd
cmp byte [0x15b3297], 0
setne byte [0x4aa030]
jmp case.0x43ae43.13
mov edx, dword [0x4aa048]
mov ecx, dword [0x4aa038]
call fcn.0043e8d6
mov edx, dword [0x4aa038]
jmp 0x43c100
movzx edx, word [0x4aa038]
lea ecx, [esp + 0x38]
add edx, dword [0x4aa06c]
mov esi, 0x100
push esi
call fcn.00434ee0
pop ecx
lea ecx, [esp + 0x38]
call fcn.0043ad87
movzx edx, word [0x4aa04c]
lea ecx, [esp + 0x1c8]
add edx, dword [0x4aa060]
push esi
call fcn.00434ee0
pop ecx
lea ecx, [esp + 0x1c8]
call fcn.0043ad87
mov edx, ecx
lea ecx, [esp + 0x38]
call fcn.0043fc50
test al, al
jne 0x43b80d
mov ax, word [0x15b328a]
mov word [0x4aa030], ax
movzx eax, ax
push eax
lea eax, [esp + 0x1cc]
push eax
lea eax, [esp + 0x40]
push eax
push str.RENAME_failed__s_____s___d_
call fcn.0042fc19
add esp, 0x10
jmp case.0x43ae43.105
mov al, byte [0x4aa030]
test al, al
jne 0x43c211
mov ecx, dword [0x4aa03c]
mov edx, 0x4aa034
push 0x4aa038
call fcn.004408a6
jmp 0x43c232
cmp al, 1
jne case.0x43ae43.13
movzx eax, word [0x4aa038]
mov edx, dword [0x4aa034]
mov ecx, dword [0x4aa03c]
push eax
call fcn.004408ee
neg al
pop ecx
sbb al, al
inc al
jmp 0x43b900
movzx eax, byte [0x4aa030]
xor ecx, ecx
sub eax, ecx
je 0x43c2c7
sub eax, 1
je 0x43c28e
sub eax, 1
je 0x43c277
sub eax, 1
jne case.0x43ae43.95
movzx ecx, byte [0x4aa03c]
call fcn.00441493
test al, al
je case.0x43ae43.95
jmp 0x43b8ee
mov eax, dword [0x15c37ac]
mov al, byte [eax + 0x4ac1c9]
and al, 1
mov byte [0x4aa030], al
jmp 0x43b80d
movzx edx, byte [0x4aa03c]
mov eax, edx
and eax, 0x43
cmp ax, dx
je 0x43c2af
mov eax, edx
and eax, 0x83
cmp ax, dx
jne case.0x43ae43.95
mov al, dl
and al, 3
cmp al, 3
jae case.0x43ae43.95
mov word [0x16976e4], dx
jmp 0x43b80f
mov ax, word [0x16976e4]
jmp 0x43b7b6
mov dx, word [0x15b328a]
xor eax, eax
mov word [0x4aa030], dx
cmp dx, 2
je 0x43c344
cmp dx, 3
je 0x43c344
mov esi, 0xff00
and cx, si
mov esi, 0x3d00
cmp cx, si
jne 0x43c326
cmp dx, 5
jne 0x43c33d
push 0x20
pop eax
mov word [0x4aa030], ax
mov eax, 0xa02
mov word [0x4aa03c], ax
mov byte [0x4aa035], 4
jmp case.0x43ae43.13
mov esi, 0x4100
cmp cx, si
jne 0x43c33d
cmp dx, 5
jne 0x43c33d
mov eax, 0x303
jmp 0x43c314
mov byte [0x4aa03d], al
jmp 0x43c34b
mov byte [0x4aa03d], 8
mov byte [0x4aa03c], 1
mov byte [0x4aa035], al
jmp case.0x43ae43.13
movzx edx, word [0x4aa038]
lea ecx, [esp + 0x38]
add edx, dword [0x4aa06c]
push 0x100
call fcn.00434ee0
pop ecx
lea ecx, [esp + 0x38]
call fcn.004407f8
test al, al
je 0x43b845
lea ecx, [esp + 0x38]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43c390
sub ecx, edx
lea edx, [esp + 0x38]
lea eax, [ecx + 1]
movzx ecx, word [0x4aa038]
add ecx, dword [0x4aa06c]
push eax
call fcn.00434cc0
jmp 0x43b80c
movzx edx, word [0x4aa038]
lea ecx, [esp + 0x38]
add edx, dword [0x4aa06c]
push 0x100
call fcn.00434ee0
pop ecx
lea ecx, [esp + 0x38]
call fcn.0043ad87
mov edx, dword [0x4aa034]
push 1
push 0x4aa030
call fcn.00440239
pop ecx
jmp 0x43bd11
movzx esi, word [0x4aa048]
movzx eax, word [0x4aa04c]
movzx edi, word [0x4aa034]
movzx ecx, word [0x4aa03c]
shl esi, 0x10
add esi, eax
shl edi, 0x10
movzx eax, word [0x4aa038]
add edi, eax
mov al, byte [0x4aa030]
mov byte [esp + 0x1c], al
call fcn.004400b5
cmp al, 0xff
jne 0x43c44c
xor cl, cl
mov ax, word [0x15b328a]
test cl, cl
mov word [0x4aa030], ax
sete cl
jmp 0x43b80f
movzx eax, al
push esi
push edi
push dword [esp + 0x24]
mov ecx, dword [eax*4 + 0x15c33b0]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov cl, al
test cl, cl
je 0x43c436
xor eax, eax
jmp 0x43c43c
cmp dl, 6
jne case.0x43ae43.94
push 3
mov edx, 0xb2
pop ecx
call fcn.00427253
xor eax, eax
mov word [0x4aa048], ax
mov eax, 0x78c
push 0x1a
mov word [0x4aa034], ax
pop eax
jmp 0x43b4b8
test dl, dl
jne case.0x43ae43.105
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x100
push eax
lea eax, [esp + 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
cmp dword [esp + 0x1c], 0
je case.0x43ae43.105
lea edi, [esp + 0x38]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x43c4c8
movzx ecx, word [0x4aa038]
lea edx, [esp + 0x38]
add ecx, dword [0x4aa06c]
mov esi, 0x4787bc
push 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov byte [esp + 0x4b], al
call fcn.00434cc0
mov eax, 0x1ff
mov word [0x4aa034], ax
jmp 0x43b80c
movzx edx, word [0x4aa048]
lea ecx, [esp + 0x38]
add edx, dword [0x4aa06c]
push 0x100
call fcn.00434ee0
pop ecx
lea ecx, [esp + 0x38]
call fcn.0043ad87
lea edx, [esp + 0x1c8]
call fcn.00440607
test al, al
je 0x43b845
lea ecx, [esp + 0x1c8]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43c548
sub ecx, edx
lea edx, [esp + 0x1c8]
lea eax, [ecx + 1]
movzx ecx, word [0x4aa04c]
add ecx, dword [0x4aa060]
jmp 0x43c3ad
cmp byte [0x4aa030], 0
jne 0x43b312
mov edx, dword [0x15b32aa]
push 3
pop ecx
call fcn.00427253
mov ax, word [0x15b32a8]
mov word [0x4aa048], ax
mov byte [0x4aa030], 0
jmp 0x43b80d
mov dl, byte [0x4aa030]
push 5
pop edi
cmp dl, 7
ja 0x43c5c5
cmp word [0x4aa034], di
jae 0x43c5c5
xor eax, eax
inc eax
mov word [0x15b328a], ax
jmp 0x43b900
movzx esi, word [0x4aa04c]
add esi, dword [0x4aa060]
push 6
movzx ecx, dl
pop eax
cmp ecx, eax
ja 0x43c701
je 0x43c6ef
cmp ecx, 1
je 0x43c62b
cmp ecx, 2
je 0x43c619
jbe 0x43c7b5
cmp ecx, 4
jbe 0x43c7f1
cmp ecx, edi
jne 0x43c7b5
mov ecx, esi
call fcn.00434910
mov edx, dword [0x15b32ac]
jmp 0x43c7fe
mov ecx, esi
call fcn.00434910
mov edx, dword [0x15b32b4]
jmp 0x43c7fe
mov ecx, esi
call fcn.00434910
push 0x26
lea ecx, [esi + 1]
pop edx
call fcn.00434a00
mov ax, word [0x16975d4]
test ax, ax
jne 0x43c67e
push 0x80
lea eax, [esp + 0x14c]
push eax
push edi
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
test eax, eax
je 0x43c675
lea eax, [esp + 0x148]
push eax
call fcn.0045ac57
pop ecx
jmp 0x43c678
xor eax, eax
inc eax
mov word [0x16975d4], ax
lea ecx, [esi + 3]
mov dx, ax
call fcn.00434a00
mov ax, word [0x4aa034]
push 6
pop ecx
cmp ax, cx
jbe 0x43c6ab
mov edx, dword [0x15b32c0]
lea ecx, [esi + 5]
call fcn.00434a00
mov ax, word [0x4aa034]
cmp ax, 8
jbe 0x43b80d
push 0x29
pop edi
cmp ax, di
jb 0x43c6c2
push 0x22
pop eax
jmp 0x43c6c8
movzx eax, ax
sub eax, 7
mov edx, dword [0x15b32b8]
lea ecx, [esi + 7]
push eax
call fcn.00434cc0
mov ax, word [0x4aa034]
pop ecx
cmp ax, di
jae 0x43c806
movzx edi, ax
jmp 0x43c806
mov ecx, esi
call fcn.00434910
mov edx, dword [0x15b32b0]
jmp 0x43c7fe
cmp ecx, 7
je 0x43c7f1
cmp ecx, 0x20
je 0x43c7c6
lea eax, [ecx - 0x21]
cmp eax, 1
ja 0x43c7b5
mov di, word [0x4aa038]
movzx ecx, di
add ecx, dword [0x4aa06c]
mov dword [esp + 0x18], ecx
cmp dl, 0x21
jne 0x43c741
movzx esi, word [0x4aa034]
jmp 0x43c774
xor esi, esi
call fcn.00434710
test al, al
je 0x43b80d
mov edi, dword [esp + 0x18]
cmp esi, 0xffff
jae 0x43c769
inc esi
lea ecx, [esi + edi]
call fcn.00434710
test al, al
jne 0x43c754
mov di, word [0x4aa038]
mov ecx, dword [esp + 0x18]
test esi, esi
je 0x43b80d
movzx eax, di
add eax, esi
cmp eax, 0xffff
ja 0x43c917
mov edi, 0x15b32d0
push esi
mov edx, edi
call fcn.00434dd0
pop ecx
xor eax, eax
push edi
mov byte [esi + 0x15b32d0], al
call dword [sym.imp.USER32.dll_CharUpperA]
mov ecx, dword [esp + 0x18]
mov edx, edi
push esi
jmp 0x43c3ae
push ecx
push str.INT_21_65:_Unhandled_country_information_call__2X
call fcn.0042fc19
pop ecx
jmp 0x43ae6b
mov al, byte [0x4aa038]
push 0x15b32d0
mov byte [0x15b32d0], al
mov byte [0x15b32d1], 0
call dword [sym.imp.USER32.dll_CharUpperA]
mov al, byte [0x15b32d0]
mov byte [0x4aa038], al
jmp 0x43b80d
mov ecx, esi
call fcn.00434910
mov edx, dword [0x15b32a8]
lea ecx, [esi + 1]
call fcn.00434a90
mov word [0x4aa034], di
jmp 0x43b80d
xor eax, eax
inc eax
cmp byte [0x4aa030], al
jne 0x43b900
mov ax, word [0x15b32c0]
mov word [0x4aa038], ax
mov word [0x4aa03c], ax
jmp 0x43bd16
mov ax, word [0x4aa03c]
mov esi, 0xff
cmp ax, si
jbe 0x43c85f
movzx eax, ax
push eax
push str.INT_21_67:_Number_of_handles:__d__255__
call fcn.0042fc19
pop ecx
pop ecx
mov word [0x4aa03c], si
mov ecx, 0xb30
call fcn.00434770
movzx ecx, ax
shl ecx, 4
mov word [esp + 0x20], ax
movzx eax, word [0x4aa03c]
push 0
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x20]
push eax
call fcn.0043d0da
jmp 0x43b80d
movzx ecx, byte [0x4aa03c]
call fcn.004400b5
cmp al, 0xff
jmp 0x43b881
movzx edx, word [0x4aa048]
lea ecx, [esp + 0x38]
add edx, dword [0x4aa06c]
push 0x100
call fcn.00434ee0
pop ecx
lea ecx, [esp + 0x38]
call fcn.0043ad87
movzx eax, word [0x4aa038]
mov edx, dword [0x4aa03c]
push 0x4aa034
push 0x4aa030
push eax
movzx eax, word [0x4aa034]
push eax
call fcn.004404f2
add esp, 0x10
jmp 0x43b87f
movzx eax, si
push eax
push 0x21
push str.Int__02x_unhandled_call__04X
call fcn.0042fc19
add esp, 0xc
mov byte [0x4aa030], 0
pop edi
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret
push str.INT_21_65:_Buffer_overflow
call fcn.0042e0af
nop
dec edx
scasb al, byte es:[edi]
inc ebx
add byte [ecx - 0x52], dh
inc ebx
add byte [ebx - 0x2dffbc52], ah
scasb al, byte es:[edi]
inc ebx
add ch, bh
scasb al, byte es:[edi]
inc ebx
add byte [ebx], ch
scasd eax, dword es:[edi]
inc ebx
add byte [ebx - 0x51], al
inc ebx
add byte [ebx], al
mov al, 0x43
add byte [ebx], al
mov al, 0x43
add byte [eax + esi*4], ch
inc ebx
add byte [edx - 0x50], dh
inc ebx
add byte [ecx - 0x4f], dl
inc ebx
add byte [edi - 0x4f], bl
inc ebx
add byte [edi], cl
leave
inc ebx
add bh, dl
mov cl, 0x43
add dh, ch
mov cl, 0x43
add byte [ebx], cl
mov dl, 0x43
add byte [esi], bl
mov dl, 0x43
add byte [ecx], dh
mov dl, 0x43
add byte [edx + esi*4 + 0x43], al
add byte [edi - 0x4e], dl
inc ebx
add byte [edi - 0x4e], ch
inc ebx
add byte [edi - 0x62ffbc4e], al
mov dl, 0x43
add ch, dh
enter 0x43, 0xffffffffffffffb3
mov dl, 0x43
add byte [ebp - 0x17ffbc4e], bh
mov dl, 0x43
add dl, dh
mov dl, 0x43
add ch, dh
enter 0x43, 0xfffffffffffffff5
enter 0x43, 0x40
mov dh, 0x43
add ch, dh
enter 0x43, 0x1e
mov bl, 0x43
add byte [edx - 0x4d], al
inc ebx
add byte [edx - 0x4d], ah
inc ebx
add byte [eax - 0x4d], bh
inc ebx
add dh, al
mov bl, 0x43
add bl, dh
mov bl, 0x43
add byte [esi], bl
mov ah, 0x43
add byte [edx], ch
mov ah, 0x43
add byte [esi], dh
mov ah, 0x43
add byte [esp + esi*4 - 0x4b3cffbd], dl
inc ebx
add byte [edx], ch
mov ch, 0x43
add byte [ebp + esi*4 + 0x43], bl
add byte [ebx - 0x51ffbc4b], bl
mov ch, 0x43
add al, bl
mov ch, 0x43
add byte [0x400043b6], cl
mov dh, 0x43
add byte [esi + esi*4 - 0x48efffbd], cl
inc ebx
add byte [edi + esi*4], ah
inc ebx
add byte [ebp - 0x49], cl
inc ebx
add cl, al
mov bh, 0x43
add dl, bl
mov bh, 0x43
add byte [ecx], bl
mov eax, 0xb8550043
inc ebx
add byte [ebp - 0x4effbc48], al
mov eax, 0xb9070043
inc ebx
add byte [ecx - 0x38ffbc47], dl
mov ecx, 0xbbda0043
inc ebx
add byte [ecx], dh
mov ebp, 0xbd600043
inc ebx
add byte [edx + 0x790043bd], dh
mov esi, 0xbe830043
inc ebx
add byte [ebx - 0x49ffbc42], dl
mov esi, 0xbeff0043
inc ebx
add byte [ebx], dl
mov edi, 0xbf2c0043
inc ebx
add byte [edi - 0x41], cl
inc ebx
add cl, dl
mov edi, 0xc0140043
inc ebx
add byte [eax], ch
rol byte [ebx], 0xe6
rol byte [ebx], 0xfa
rol byte [ebx], 0xf
rol dword [ebx], 0x1e
rol dword [ebx], 0xf5
enter 0x43, 0x36
rol dword [ebx], 0x49
rol dword [ebx], 0x62
rol dword [ebx], 0xf1
rol dword [ebx], 0x3e
ret 0x43