Function at 0x443bfd
Capabilities:
Terminate process

Disassembly:
mov eax, dword [0x17c177ef]
invalid
invalid
push esi
cmp byte [ebp - 0xc], al
call fcn.00444d58
lea eax, [ebx + 0x1c]
shr edx, cl
push esi
jb 0x443bda
push esi
sar edx, 4
push edi
insb byte es:[edi], dx
dec esp
cmp ebx, 0x541f3eb5
jne 0x443c34
push eax
pop edi
push 0x52636b79
jnp 0x443c6b
push esp
pop eax
push esi
pop si
pop eax
dec eax
insd dword es:[edi], dx
popal
inc ebx
dec edx
push ebx
cmp dword [esp - 4], 0x2ed5a7d3
jne 0x443c4c
push ebx
call esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
test edx, edx
mov eax, dword [eax]
call fcn.00443cb5
pushal
jns 0x443c9a
jnp 0x443cb6
pop edx
inc esp
inc esi
inc bx
pop ecx
pop edi
jnp 0x443ccd
push edx
push 0x55
inc esp
push esp
pop eax
pop esp
pop ebx
push ebx
dec eax
push esi
pop ecx
push edx
js 0x443ceb
push ecx
dec esp
dec ecx
outsb dx, byte [esi]
insd dword es:[edi], dx
push ecx
jns 0x443ce7
popal
push ebx
push 0x646e4e49
pop esi
inc ebp
imul esp, dword [ebx + 0x79], 0x616d595c
push ebx
inc ebp
insb byte es:[edi], dx
arpl word [ecx + 0x66], bp
popal
dec ecx
pop edx
inc esp
inc edx
imul ebx, dword [ecx + 0x45], 0x5d686156
push ebx
inc eax
jnp 0x443cfb
push 0x7b40535d
pop ebx
pop ebp
dec ebp
inc ebp
inc ebp
jnp 0x443cf0
push 0x63516a68
dec edi
push eax
popal
push edi
pop esp
dec esi
pop edx
popal
push dword [si]
push dword [esp]
call 0x443cbd
xor al, 0x24
add al, 0xbb
inc ebx
cld
dec dword [ebx - 0x74fbdb94]
insd dword es:[edi], dx
add byte [ecx - 0x7efbdb94], cl
inc esp
and al, 8
xchg edx, eax
add byte [eax], al
add byte [ebx + 0x648d242c], cl
and al, 4
std
invalid
rep stosb byte es:[edi], al
jne 0x443d47
jl 0x443cc3
sal byte [edi + eax - 0x5f], cl
je 0x443cfa
mov eax, dword [0x40b5ec]
jmp 0x443e39
add dword [eax], eax
add bl, al
test eax, eax
jbe 0x443d2f
jne 0x443d23
cmp esi, 0x40a9e0
mov ecx, dword [ebp + 8]
je 0x443d21
lea eax, [ebp - 0x18]
push dword [ebp + 0x18]
pop esi
mov edi, 0xfffffffe
add esi, 2
call esi
pop ecx
je 0x443d46
cmp eax, 0x24
cmp eax, dword [0x40aab4]
push 0x1000
add byte [eax], al
je 0x443d5c
mov eax, dword [ebp - 8]
xor eax, eax
sub esi, 2
pop ecx
je 0x443d42
cmp esi, 0x24
xor eax, eax
cmp dword [esp + 0x30], 0x7743f217
je 0x43c70a
rol byte [ecx + 0x1730247c], 0xf2
inc ebx
xor byte [edi], dl
pop ss
inc ebx
ja 0x443d5b
test byte [ecx + 0x5fffff89], bh
pop edi
cmp edx, 0x7e44f0f
je 0x443dbb
pop esi
cmp esi, 0xaede2707
jne 0x443d98
inc byte [edi]
daa
fisubr word [esi + 0x79553575]
dec ecx
push ebp
jns 0x443daf
dec ebp
dec edi
dec esi
inc ecx
arpl word [edx + 0x4f], ax
outsd dx, dword [esi]
pop eax
pop ebx
inc esp
dec edi
inc ebp
popal
dec edi
pushal
inc ebp
pop ebp
pop ebx
pop edi
push esi
push ecx
insd dword es:[edi], dx
pop edx
inc ecx
pop ebp
push 0x6e524549
inc edi
push ecx
inc ebx
dec edi
insb byte es:[edi], dx
dec eax
inc esp
push esi
inc ebp
push edi
pop esi
push esi
dec esp
jnp case.default.0x443dfb
inc esi
pop ebx
mov ecx, dword [esp + 0x218]
cmp dword [esp + 0x64], 0xdd0e0217
jl 0x443dc7
pop ss
add cl, byte [esi]
fisttp qword [edi]
test bl, bl
ja 0x443da9
invalid
xor ecx, esp
cmp dword [esp + 0xc], 0x70d1e665
cmove edi, esi
call fcn.00443e1a
jmp 0x443da5
arpl word [esi + 0x4e], ax
push ebx
push esp
push esi