Function at 0x445fb5
Capabilities:
Parse pe header

Disassembly:
xor dword [eax - 0x4fce57cf], esp
xor dword [eax - 0x37ce3fcf], edi
xor eax, edx
xor eax, ebx
xor eax, esp
xor eax, ebp
xor eax, esi
xor eax, edi
xor dword [eax], eax
xor cl, byte [eax]
xor dl, byte [eax]
xor bl, byte [eax]
xor ah, byte [eax]
xor ch, byte [eax]
xor dh, byte [eax]
xor bh, byte [eax]
xor al, byte [eax + 0x32]
dec eax
xor dl, byte [eax + 0x32]
pop eax
xor ah, byte [eax + 0x32]
push 0x78327032
xor al, byte [eax - 0x6fcd77ce]
xor bl, byte [eax - 0x57cd5fce]
xor dh, byte [eax - 0x3fcd47ce]
xor cl, al
xor dl, al
xor bl, al
xor ah, al
xor ch, al
xor dh, al
xor bh, al
xor al, byte [eax]
xor ecx, dword [eax]
xor edx, dword [eax]
xor ebx, dword [eax]
xor esp, dword [eax]
xor ebp, dword [eax]
xor esi, dword [eax]
xor edi, dword [eax]
xor eax, dword [eax + 0x33]
dec eax
xor edx, dword [eax + 0x33]
pop eax
xor esp, dword [eax + 0x33]
push 0x78337033
xor eax, dword [eax - 0x6fcc77cd]
xor ebx, dword [eax - 0x57cc5fcd]
xor esi, dword [eax - 0x3fcc47cd]
xor ecx, eax
xor edx, eax
xor ebx, eax
xor esp, eax
xor ebp, eax
xor esi, eax
xor edi, eax
xor eax, dword [eax]
xor al, 8
xor al, 0x10
xor al, 0x18
xor al, 0x20
xor al, 0x28
xor al, 0x30
xor al, 0x38
xor al, 0x40
xor al, 0x48
xor al, 0x50
xor al, 0x58
xor al, 0x60
xor al, 0x68
xor al, 0x70
xor al, 0x78
xor al, 0x80
xor al, 0x88
xor al, 0x90
xor al, 0x98
xor al, 0xa0
xor al, 0xa8
xor al, 0xb0
xor al, 0xb8
xor al, 0xc0
xor al, 0xc8
xor al, 0xd0
xor al, 0xd8
xor al, 0xe0
xor al, 0xe8
xor al, 0xf0
xor al, 0xf8
xor al, 0
xor eax, 0x3b383b34
cmp al, 0x3b
dec esp
cmp al, 0x50
cmp al, 0x54
cmp al, 0x6c
cmp al, 0x70
cmp al, 0x74
cmp al, 0
mov al, 1
add byte [eax], ch
add byte [eax], al
cmp byte [edx], bh
inc eax
cmp cl, byte [eax + 0x3a]
dec esp
cmp dl, byte [eax + 0x3a]
push esp
cmp bl, byte [eax + 0x3a]
pop esp
cmp ah, byte [eax + 0x3a]
cmp ch, byte fs:[edx + edi + 0x70]
cmp dh, byte [edx + edi + 0x78]
cmp bh, byte [edx + edi - 0x80]
cmp al, byte [edx + edi + 0x3a943a88]
pushfd
cmp ah, byte [edx + edi + 0x3aac3aa8]
mov al, 0x3a
mov ah, 0x3a
and byte [esp], bh
cmp al, 0x28
cmp al, 0x2c
cmp al, 0x30
cmp al, 0x34
cmp al, 0x38
cmp al, 0x3c
cmp al, 0x40
cmp al, 0x44
cmp al, 0x48
cmp al, 0x4c
cmp al, 0x50
cmp al, 0x54
cmp al, 0x58
cmp al, 0x5c
cmp al, 0x60
cmp al, 0x64
cmp al, 0x68
cmp al, 0x6c
cmp al, 0x70
cmp al, 0x74
cmp al, 0
add byte [eax], al
rol byte [ecx], 0
test byte [ecx], al
add byte [eax], al
loopne 0x423b9b
in al, 0x31
call 0xf07427a2
xor esp, esi
xor eax, edi
xor esp, edi
xor dword [eax], eax
xor al, byte [edx + esi]
or byte [edx], dh
or al, 0x32
adc byte [edx], dh
adc al, 0x32
sbb byte [edx], dh
sbb al, 0x32
push 0x70326c32
xor dh, byte [edx + esi + 0x78]
xor bh, byte [edx + esi - 0x80]
xor al, byte [edx + esi + 0x328c3288]
nop
xor dl, byte [edx + esi + 0x329c3298]
mov al, byte [0xa832a432]
xor ch, byte [edx + esi + 0x32b432b0]
mov eax, 0xc032bc32
xor al, ah
xor cl, al
xor cl, ah
xor dl, al
xor dl, ah
xor bl, al
xor bl, ah
xor ah, al
xor ah, ah
xor ch, al
xor ch, ah
xor dh, al
xor dl, byte [eax - 0x67cd6bce]
xor bl, byte [edx + esi + 0x32a432a0]
test al, 0x32
lodsb al, byte [esi]
xor dh, byte [eax - 0x47cd4bce]
xor bh, byte [edx + esi + 0x32c432c0]
enter 0xffffffffffffcc32, 0x32
sal byte [edx], 1
aam 0x32
fdiv dword [edx]
fdiv qword [edx]
loopne 0x423bf8
in al, 0x32
call 0xf07527ff
xor dh, ah
xor bh, al
xor bh, ah
xor al, byte [eax]
xor eax, dword [ebx + esi]
or byte [ebx], dh
or al, 0x33
adc byte [ebx], dh
sbb al, 0x33
and byte [ebx], dh
and al, 0x33
sub byte [ebx], dh
sub al, 0x33
xor byte [ebx], dh
xor al, 0x33
cmp byte [ebx], dh
cmp al, 0x33
inc eax
xor eax, dword [ebx + esi + 0x48]
xor ecx, dword [ebx + esi + 0x50]
push eax
xor edx, dword [ebx + esi + 0x58]
xor ebx, dword [ebx + esi + 0x60]
xor esp, dword [ebx + esi + 0x68]
xor ebp, dword [ebx + esi + 0x70]
xor esi, dword [ebx + esi + 0x78]
xor edi, dword [ebx + esi - 0x80]
xor eax, dword [ebx + esi + 0x338c3388]
nop
xor edx, dword [ebx + esi + 0x339c3398]
mov al, byte [0xa833a433]
xor ebp, dword [ebx + esi + 0x33b433b0]
mov eax, 0xc033bc33
xor eax, esp
xor ecx, eax
xor ebp, dword [eax]
cmp eax, 0x3d303d2c
xor al, 0x3d
je 0x423c7d
jl 0x423c7f
test byte [0x3d943d8c], bh
pushfd
cmp eax, 0x3dac3da4
mov ah, 0x3d
mov esp, 0xcc3dc43d
cmp eax, 0x3ddc3dd4
in al, 0x3d
in al, dx
cmp eax, 0x3dfc3df4
add al, 0x3e
or al, 0x3e
adc al, 0x3e
sbb al, 0x3e
and al, 0x3e
sub al, 0x3e
xor al, 0x3e
cmp al, 0x3e
inc esp
dec esp
push esp
pop esp
insb byte es:[edi], dx
je 0x423cbe
jl 0x423cc0
jl 0x423cc0
test byte [esi], bh
invalid
je 0x423cff
jl 0x423d01
test byte [edi], bh
invalid
xor byte [eax + esi + 0x5c], dl
xor byte [eax + esi + 0x6c], ah
xor byte [eax + esi + 0x7c], dh
xor byte [eax + esi + 0x3094308c], al
pushfd
xor byte [eax + esi + 0x30b430ac], ah
mov esp, 0xcc30c430
xor ah, dl
xor ah, bl
xor ah, ah
xor ah, ch
xor ah, dh
xor ah, bh
xor byte [ecx + esi], al
or al, 0x31
adc al, 0x31
sbb al, 0x31
and al, 0x31
sub al, 0x31
xor al, 0x31
cmp al, 0x31
inc esp
xor dword [ecx + esi + 0x54], ecx
xor dword [ecx + esi + 0x64], ebx
xor dword [ecx + esi + 0x74], ebp
xor dword [ecx + esi - 0x7c], edi
xor dword [ecx + esi + 0x319c3194], ecx
movsb byte es:[edi], byte [esi]
xor dword [ecx + esi + 0x31bc31b4], ebp
les esi, [ecx]
int3
xor byte [eax + esi + 0x64], bl
xor byte [eax + esi + 0x74], ch
xor byte [eax + esi - 0x7c], bh
xor byte [eax + esi + 0x309c3094], cl
movsb byte es:[edi], byte [esi]
xor byte [eax + esi + 0x30bc30b4], ch
les esi, [eax]
int3
cmp cl, 0x4e
sub ebx, 1
jmp 0x445fb8
mov dword [ebp - 4], eax
cmp eax, esi
jne 0x445fc2
inc edx
mov al, bl
test byte [eax + 0x98], 1
sbb byte [eax + 0x1000000], 0xf
movsx eax, al
mov ecx, edx
mov edi, edi
test eax, eax
mov al, byte [ecx]
xor esi, esi
dec dword [esi + 0x30]
call fcn.004468ce
add byte [eax], al
mov esi, 0x8bca8bc0
inc dword [ebp + 0x33018ac0]
idiv bh
dec esi
xor al, ch
int1
or byte [eax], al
add byte [eax], al
push eax
mov byte [edi], al
push eax
mov byte [edi], al
push 9
push dword [ecx + eax*4]
push dword [ebp + 0x18]
test al, 1
test edi, edi
push 0xb9e9fe81
add ecx, dword [esi + 0x75]
das
inc ebp
push 0x4c
push ecx
pushal
pushal
outsd dx, dword [esi]
push esp
dec esi
pushal
pop edi
push ebp
push esi
bound ecx, qword [ebp + 0x58]
outsb dx, byte [esi]
insd dword es:[edi], dx
js 0x446053
outsw dx, word [esi]
push esp
imul esp, dword [edi + 0x54], 0x5b
jns 0x44605f
pop esp
push esi
inc eax
dec edx
outsb dx, byte [esi]
inc ecx
pop ebp
push ecx
insb byte es:[edi], dx
jns 0x446065
push edi
pop ecx
push eax
push ebp
insb byte es:[edi], dx
dec edi
mov eax, dword [esi + 4]
cmp ecx, 0x8828e827
jne 0x446093
bound eax, qword [ebp + 0x78]
inc esp
push edi
dec edi
inc esi
push esp
insd dword es:[edi], dx
dec edx
push esi
arpl word [ebx + 0x69], dx
imul ebp, dword [ecx + 0x4e], 0x5f68696b
dec esp
push 0x69
bound esp, qword [eax + 0x5a]
pop edx
push esi
push eax
outsb dx, byte [esi]
pop ecx
pop esp
js 0x4460bb
pushal
inc ebx
dec ebx
js 0x4460ca
pop ebx
dec edi
pop ebx
pop esp
pushal
pop esp
pop ebx
pop edi
dec ebx
pop ecx
push esp
pop edx
push 0x41
dec edx
dec esp
inc ecx
push 0x63
dec edi
push 0x4c47444c
inc esi
popal
dec esp
pop ebp
inc edx
imul ebp, dword [edi + 0x45], 0x50
bound ecx, qword [ebx + 0x69]
inc ecx
pop esi
dec esp
push esi
js 0x4460ca
push 0x5f5a525f
pop edx
insb byte es:[edi], dx
add eax, edx
add eax, edx
cmp dword [esp + 0xc], 0x6f15a23
jne 0x4460c0
dec edi
inc edi
pop esi
inc eax
pop ebx
popal
pop ebx
outsb dx, byte [si]
mov dword [ebp - 0x18], eax
cmp ebp, 0x1aec9d99
cmove ebp, ebx
inc esp
jmp 0x4460cc
push dword [ebp - 0x14]
cmp dword [esp + 0x14], 0xde2d6f8b
jne 0x44610f
push ebp
insd dword es:[edi], dx
imul esp, dword [ebp + 0x6a], 0x6d
outsb dx, byte fs:[esi]
pushal
bound ecx, qword [edi + 0x68]
push ecx
imul ecx, dword [esi + 0x48], 0x48
insw word es:[edi], dx
pushal
dec esi
pop edx
jnp 0x446159
push edx
push esi
pop esp
dec esi
js 0x446166
dec edi
imul ebx, dword [edx + 0x50], 0x69
insd dword es:[edi], dx
outsd dx, dword [esi]
jnp 0x446165
insb byte es:[edi], dx
imul edx, dword [edi + 0x79], 0x47
dec eax
jns 0x446171
dec ebx
pop eax
push dword [ecx]
push eax
cmp edi, 0xb379c0f
je 0x423a0b
call fcn.00442612
cmp edi, 0xdad916d9
cmove edx, esi
add esp, 0xc
test eax, eax
jne 0x4463c4
cmp dword [esp + 0x28], 0x7679dc4d
jne 0x446166
imul ebx, dword [ecx + 0x50], 0x4c63446d
pop esi
push esi
inc edx
push ebp
dec edi
dec edi
inc edx
dec eax
imul eax, dword [edi + 0x66], 0x616d554f
pop ebp
dec esp
insb byte es:[di], dx
pop ecx
dec esi
popal
pop ebx
dec esi
push eax
mov eax, dword [ebp - 8]
cmp eax, 0x99e5184d
cmove ecx, eax
mov ecx, dword [ebp - 0xc]
cmp esi, 0xec8b2b11
je 0x4461cd
dec eax
cmp dword [esp + 0x68], 0x52af8b3f
jne 0x4461ea
push 0x476d4c5f
pop esp
pop esp
inc edi
pop ebp
bound eax, qword [edi + 0x5f]
dec ecx
pop esp
push ebx
pop eax
dec edx
insd dword es:[di], dx
pop esi
dec eax
pop edi
dec ecx
push esi
js fcn.00446202
inc ebx
pop ebp
push ebx
inc ecx
push edi
pop edx
dec eax
pop edx
pop esp
jnp fcn.00446202
push esi
pop ebx
push esi
inc edi
inc ebx
insd dword es:[edi], dx
dec eax
push 0x78
jns 0x44620d
imul esp, dword gs:[ebx + 0x57], 0x56786e5d
dec ebp
jns 0x44622b
push edx
pop ebx
inc ebx
inc esp
push 0x6e
dec ecx
dec edx
jns 0x446227
pushal
outsd dx, dword [esi]
push edi
push ebx
push 0x6e
inc esp
dec edi
push edx
push eax
js 0x44624c
push edx
js 0x44622c
push ebx
pop ebx
pushal
arpl word [ebp + 0x66], ax
jns 0x446246
arpl word [ebp - 0x7d], dx
rol dword [ecx + ecx*4], 0x45
clc
add ecx, 4
mov dword [ebp - 8], eax
test eax, eax
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 0x18]
push 0xfffffeab
lea esp, [esp - 2]
mov word [esp], ax
mov dword [esp], eax
add byte [eax], al
add byte [ecx + 0x55e8241c], cl
add byte [eax], al
add byte [edx + 0x56], bl
pushal
inc ebp
dec esi
inc ebp
inc ecx
push ebp
pop edx
bound ebx, qword [esi + 0x52]
pop edi
inc esi
push esi
dec ecx
dec esp
dec ecx
outsb dx, byte [esi]
js 0x4462c6
pop ebx
push eax
pop ebp
inc esi
insb byte es:[edi], dx
dec esp
popal
dec ebp
push ecx
inc esp
dec esp
arpl word [edi + edx*2 + 0x49], bx
inc esi
push eax
push ebx
pop ebx
lea esp, [esp - 4]
mov dword [esp], ebp
mov ebp, 0x105
cmovg ebp, dword [esp + 0xa]
add ebx, ebp
lock xchg dword [esp + 0xa], ebx
mov ebp, dword [esp]
lea esp, [esp + 4]
mov ebx, dword [esp]
lea esp, [esp + 4]
invalid
invalid
invalid