Function at 0x404970
Capabilities:
Authenticate hmac
Encode data using base64
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4c
movzx eax, byte [0x413008]
test al, al
jne 0x404ac4
dec edx
mov al, al
popal
shr dword [edx - 0x4860b77d], 0x6f
invalid
mov edx, dword [ebp + 8]
cmp word [edx], 0x5a4d
jne 0x408367
test al, al
jne 0x406290
ret 0x2f73
invalid
test al, al
jne 0x404e7b
jle 0x404dc8
cld
jp 0x404d8e
xor eax, 0xc98963bb
cmp ah, dh
sbb eax, 0x297bb812
imul dword [eax + 0x402209cc]
mov ecx, 0x4b3bf289
adc byte [edx], bl
test byte [esi - 0x5af77f82], cl
mov ch, 0xc3
or dword [esi], edi
mov word [ecx + 0x33], es
stosb byte es:[edi], al
push ebx
jmp 0x404db6
and eax, 0x49cde37d
in al, dx
out dx, eax
mov dword [ebp - 0x3c1f8488], esp
mov edi, ebx
inc edi
sbb bh, byte [ecx - 0x38]
and bl, byte [edi]
jge 0x404d8d
sub byte [edx + esi*2 - 0x42e31097], bh
fiadd dword [ecx + 0x3a]
mov ebp, 0xfda9830e
or al, 0x4e
jne 0x404d41
das
cmp dword [edx], edx
sub al, byte [eax + 0x4f48a32c]
ret 0x35c6
cmpsd dword [esi], dword es:[edi]
push esp
jno 0x404d90
adc dword [0xce14094b], eax
or dword [esi + ecx*8], edx
mov dl, 0x11
fiadd dword [ecx]
xchg dword [ecx + 0x30], esp
sal byte [ebx + 0x5a], 0x40
mov al, byte [0xc0ef89fd]
dec edi
and al, 0xaa
ror ebx, 1
inc byte [edx - 0x71]
jge 0xa9d6a885
sub byte [ecx - 0x46], cl
add cl, byte [edx + 0x41]
arpl word [edx + 1], di
xlatb
aam 0x42
ja 0x404dcf
retf
mov edi, dword [ebp - 0x30]
mov dword [esp + 0xc], 4
mov dword [esp + 8], 0x2000
mov eax, dword [edi + 0x50]
mov dword [esp + 4], eax
and byte [eax], al
add byte [ebx + 0x44895047], cl
and al, 4
mov eax, dword [edi + 0x34]
mov dword [esp], eax
call sub.KERNEL32.dll_VirtualAlloc
and al, 0xe8
jl 0x404eed
add byte [eax], al
mov dword [ebp - 0x44], eax
movzx eax, byte [0x413008]
sub esp, 0x10
test al, al
jne 0x404f0e
pop es
je 0x404e9a
jp 0x404ef1
into
fcmovbe st(0), st(1)
aam 0x7e
push eax
push ds
pushal
and esi, esp
inc esi
dec edi
jge 0x404e8b
mov ebp, 0xdbb4acfe
retf 0xdead
mov cl, 0x3d
mov cl, 0x20
or dword [edi - 0x35], edx
movsb byte es:[edi], byte [esi]
fmul dword [eax + 0x12]
fcom dword [0x2005379f]
fld qword [ebp + 0x1e]
dec ecx
inc ebx
sbb esp, dword [edx - 0xb]
inc ebp
push esp
test eax, 0xd95ad99c
mov edx, dword [ebp - 0x44]
test edx, edx
je 0x4089b0
test al, al
jne 0x404fae
xlatb
adc ecx, eax
and al, 0x9e
lds eax, [ebx]
cmp byte [ebx - 0x49], cl
mov bh, 0x54
aad 0xef
jle 0x404f22
cli
sub dl, 0xbb
pop edx
retf 0xf500
call sub.KERNEL32.dll_GetProcessHeap
mov dword [esp + 8], 0x14
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.KERNEL32.dll_HeapAlloc
sub esp, 0xc
cmp byte [0x413008], 0
mov dword [ebp - 0x38], eax
jne 0x408328
out dx, al
stosd dword es:[edi], eax
adc al, 0x98
push es
adc al, 9
cmpsb byte [esi], byte es:[edi]
or eax, dword [edx + 0x1e]
cmp byte [esi + 0x5d], bl
or edx, dword [ecx - 0x30]
invalid
pop ebx
dec eax
mov edi, 0x476fc8d3
dec edi
mov eax, 0x7d6ba6c7
neg byte [ebx - 0x2b31b940]
ljmp 0x26fd
loope 0x4050d9
stosb byte es:[edi], al
invalid
mov edi, dword [ebp - 0x30]
mov dword [esp + 0xc], 4
mov dword [esp + 8], 0x1000
mov eax, dword [edi + 0x50]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x44]
mov dword [esp], eax
call sub.KERNEL32.dll_VirtualAlloc
sub esp, 0x10
cmp byte [0x413008], 0
jne 0x4051f9
jg 0x4051b8
pop ds
jno 0x405110
int1
inc ebp
stosb byte es:[edi], al
insd dword es:[edi], dx
push ss
call dword [eax]
sbb ebx, dword [eax - 0x63]
dec eax
push ebp
mov byte [0x63fadc01], al
wait
daa
cmc
mov ebp, 0x262edaa1
add eax, 0x1e245fad
in al, dx
push ss
arpl word [esi - 0x6c6a857d], dx
xchg ebp, eax
out dx, al
xor esi, ebx
inc ebx
rcr edi, cl
and dh, cl
inc edx
mov ebx, 0x977937f5
adc ah, byte [edi + 0x1c5417bd]
cmp esi, dword [edx + 9]
push ecx
salc
lahf
aad 0x50
xor eax, 0x9923e568
ret
mov edx, dword [ebp - 0x30]
mov dword [esp + 0xc], 4
mov ecx, dword [ebp - 0x44]
mov dword [esp + 8], 0x1000
mov eax, dword [edx + 0x54]
mov dword [esp], ecx
mov dword [esp + 4], eax
call sub.KERNEL32.dll_VirtualAlloc
sub esp, 0x10
mov ebx, eax
cmp byte [0x413008], 0
jne 0x40529c
movsb byte es:[edi], byte [esi]
jo 0x4051c2
int3
mov esi, dword [ebp + 8]
mov edi, dword [ebp - 0x30]
mov eax, dword [esi + 0x3c]
add eax, dword [edi + 0x54]
mov dword [esp + 4], esi
mov dword [esp], ebx
mov dword [esp + 8], eax
call sub.msvcrt.dll_memcpy
movzx edx, byte [0x413008]
test dl, dl
mov eax, edx
jne 0x408302
popal
sar byte [edi], 0x9c
push edx
inc ebp
aaa
int1
mov cs, word [ebx + 0x4f]
push edx
cld
cmp byte [edx], cl
sbb eax, 0x55937450
xor ebx, dword [esi + 0x51]
outsd dx, dword [esi]
dec ebx
xchg esp, eax
fld qword [ebx]
dec edi
push ebx
setb byte gs:[ecx]
popal
xlatb
cdq
leave
mul ah
sbb byte [eax - 0x20], cl
push ecx
push edx
invalid
xor esi, esi
mov edi, ecx
cmp word [ecx + 6], 0
jne 0x40580b
jmp 0x405b37
test dl, dl
jne 0x406350
push ss
rcl byte [edx]
push edx
sbb eax, 0xaf29403c
aaa
rcl byte [esi]
or dword [ebx], edx
xor dword [esi + 0x23], eax
ljmp 0x3f60
test edi, edi
jle 0x4057eb
test dl, dl
jne 0x40563e
out 0xe, eax
dec ecx
adc al, 0x3d
sbb al, 0x91
stosd dword es:[edi], eax
xchg dh, ah
cmp bl, byte [ecx - 0x4216bea]
fdivp st(3)
int1
push cs
ja 0x4055b7
out 0x7d, eax
inc esi
dec esi
xor bh, byte [edi - 0x4382c34a]
fbld tbyte [edx + ecx*8 + 0x28]
js 0x4055be
inc esp
or dh, byte [ebx + 0x63edf0ca]
push es
add dword [ecx + 2], 0x84795073
aaa
test bl, 0x86
sub byte [edx - 0x7f89ac4], cl
inc esp
imul eax, ebx, 0x6c
jecxz 0x4055a0
mov al, 0xed
jle 0x405654
invalid
mov eax, dword [ebp - 0x34]
mov dword [esp + 0xc], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 4], edi
add eax, dword [ebx + 0xc]
mov dword [esp], eax
add al, 3
inc ebx
or al, 0x89
add al, 0x24
call sub.KERNEL32.dll_VirtualAlloc
sub esp, 0x10
cmp byte [0x413008], 0
jne 0x406370
and dword [eax], edi
imul dword [esi]
and eax, 0x18099351
xor eax, 0x293aad27
aaa
mov al, byte ss:[0x69096da6]
sahf
mov ebp, 0x45fc665b
test dl, ch
dec edi
and al, 0xb
xchg dword [ebx], ebx
cmp dword [ebp + ebp*2 + 0x285b6cd], ebp
fnsave dword [edx]
cmp al, 6
push 0x72
cmpsd dword [esi], dword es:[edi]
adc bh, bl
mov al, 0x7a
jge 0x405713
aad 0xe3
push 0x1a
push esp
imul ecx, dword [ebx - 0x66580ea0], 0x5366149d
cdq
push 0x37a4cb30
xor eax, 0xf546de16
cmc
mov es, eax
jb 0x4056c0
xchg ebp, eax
push esi
mov al, 0xbd
mov edx, 0xa1a4919
invalid
sar dword [ebx - 0x4167ea3e], 0x90
fcom dword [edi + 0x49]
pop ecx
aad 0x34
test eax, 0x51c4c5f6
push edx
push cs
xchg esi, eax
xchg edi, eax
inc ebx
fstp st(7)
jnp 0x405760
sbb byte [ebx + 0x3d], ch
dec eax
sub eax, 0x91420af8
enter 0x69d3, 0x20
sbb al, 0xc3
cmc
push eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.msvcrt.dll_memset
movzx eax, byte [0x413008]
test al, al
jne 0x4057eb
add byte [eax], al
jmp 0x40577a
adc esi, dword [edx]
invalid
mov edi, dword [ebp - 0x38]
add esi, 1
mov ecx, dword [edi]
movzx edx, word [ecx + 6]
cmp esi, edx
jge 0x405b2f
movzx eax, byte [0x413008]
add ebx, 0x28
mov edx, eax
test dl, dl
jne 0x405833
add ch, bl
sub eax, dword [edi - 0xeda8b3a]
fdivr qword [ecx*2 + 0x730bed29]
mul dword [edi + 0x1b43d267]
cmp al, 0x10
mov ecx, 0xf728d52d
push 0x186a972c
ret 0xdef1
mov ecx, dword [ebx + 0x10]
test ecx, ecx
je 0x4054d0
test dl, dl
jne 0x4058ee
mov ebx, 0x18fe096a
push es
arpl word [edi - 0x7a85608e], cx
sub eax, 0xf0a19d59
sub al, 0xbe
jne 0x40584d
invalid
invalid
mov eax, dword [ebp - 0x34]
mov dword [esp + 0xc], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 4], ecx
add eax, dword [ebx + 0xc]
mov dword [esp], eax
call sub.KERNEL32.dll_VirtualAlloc
sub esp, 0x10
mov edi, eax
cmp byte [0x413008], 0
jne 0x4059db
loopne 0x405983
into
cmp al, 0xe7
mov ebx, 0x2076e4b
out 0xc0, al
sub dword [eax + 0x53], eax
leave
sub eax, 0x33dc02fb
inc bl
xor byte [ecx - 0x21], 0xee
xchg esp, eax
insd dword es:[edi], dx
xchg esi, eax
jbe 0x40598f
test byte [ebp - 0x77], 0xdd
add ah, dl
dec ebx
pop es
salc
xor eax, ecx
add byte [edx + 0x1b], dh
leave
lahf
push ss
int3
sbb esi, edx
test dword [ecx - 0x3bd56d97], ecx
sahf
cmp eax, 0xc6ef743a
push ss
sbb eax, 0x408a839d
sub edx, dword [0x4c2ba49d]
arpl word [ecx], bx
inc ecx
lodsd eax, dword [esi]
imul ebx, dword [ebx - 0x7d], 0x80ece4ee
push cs
mov al, 0x1f
dec ebx
ljmp 0x4e58
out dx, eax
invalid
mov edx, dword [ebx + 0x10]
mov eax, dword [ebp + 8]
add eax, dword [ebx + 0x14]
mov dword [esp], edi
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call sub.msvcrt.dll_memcpy
cmp byte [0x413008], 0
jne 0x406360
push ds
add dword [eax - 0x3c], esp
adc eax, 0x6d0d59f0
outsb dx, byte [esi]
adc ebx, dword [ebx + 0x69b364a2]
out dx, eax
wait
mov byte [0xef69b364], al
jl 0x4059ef
rcl dword [ebx + 0x70389979], cl
push edi
or byte [eax + edi + 0x50], ah
mov bh, 0x57
push ecx
pop ss
sbb esp, dword [esi + 7]
je 0x405a9b
jne 0x405a0c
xchg byte [eax], dl
test dl, ch
ret
and byte [ebx + 0x2a2fe862], bh
sbb dword [0xe3442eda], 0xb
mov byte [0x14112c7b], al
imul edx, dword [edi], 0xfffffff4
out 0x82, al
push 0x6d
mov edx, 0x6fee6d9
push es
mov ebx, 0x98a36869
xchg edx, eax
mov dh, 0x89
jnp 0x405ace
push esp
cli
push eax
pop edi
pushfd
retf
fcompi st(7)
invalid
mov edx, dword [edi + 4]
mov edi, ecx
mov dword [ebp - 0x34], edx
test al, al
jne 0x4082f1
retf
mov esi, dword [ebp - 0x30]
test esi, esi
je 0x406378
test al, al
je 0x408812
mov ebx, dword [ecx + 0xa4]
test ebx, ebx
je 0x408502
test al, al
jne 0x408c65
invalid
mov eax, dword [ecx]
test eax, eax
je 0x408785
add eax, dword [ebp - 0x34]
cmp byte [ebp - 0x3c], 0
mov dword [ebp - 0x2c], eax
jne 0x405f17
invalid
mov esi, dword [ecx + 4]
lea edx, [esi - 8]
mov edi, edx
shr edi, 1
je 0x408640
xor eax, eax
cmp byte [ebp - 0x3c], 0
jne 0x408624
jmp 0x405fc6
movzx edi, word [ecx + eax*2 + 8]
cmpsd dword [esi], dword es:[edi]
and byte [ecx - 0x6391af71], 0x98
retf
mov ebx, dword [ebp + 8]
add ebx, dword [ebx + 0x3c]
mov esi, ebx
cmp dword [esi], 0x4550
mov dword [ebp - 0x30], ebx
je 0x404d5a
test al, al
jne 0x408376
scasd eax, dword es:[edi]
cmp eax, 0xac098d0e
movsb byte es:[edi], byte [esi]
dec esi
mov edx, 0xe40b59e7
iretd
test eax, 0x7943bccd
jbe 0x406349
sub ch, byte [esp + ecx*8]
xchg ebx, eax
mov dword [edx + 0x19ce697e], 0x49748587
mov ebx, 0x8e8f60ac
and eax, 0x14d49d6b
imul edx, dword [ecx - 0x6bf551e2], 0xffffffda
xor eax, 0x88c8a6c0
sub dword [esi - 0xf], eax
div dword [ecx]
shr cl, 0xa3
xor eax, eax
jmp 0x4072ef
sldt word [eax]
lea esi, [esi]
mov ecx, dword [ebp - 0x30]
mov edi, dword [ecx + 0x38]
jmp 0x405582
mov dword [ebx + 8], edi
mov eax, 1
jmp 0x4057eb
mov dword [ebx + 8], eax
jmp 0x40573f
test al, al
jne 0x406475
test al, 0xfd
movsb byte es:[edi], byte [esi]
js 0x406316
or eax, eax
out dx, eax
fnstcw word [ecx - 0x3c620584]
lodsb al, byte [esi]
into
out 0x8e, al
or eax, 0xfdfd95f0
mov dl, byte [ebx - 0xeda9a6]
call dword [eax]
movsb byte es:[edi], byte [esi]
ja 0x406345
scasd eax, dword es:[edi]
aaa
nop
mov bl, dh
jno 0x4063af
out dx, al
bswap eax
lcall 0xbd9e, 0xea28aedd
out 0x9b, eax
inc edi
cld
invalid
mov eax, 0xa1cb52a2
push ecx
fild dword [ebp - 0x37]
jl 0x4063b9
add byte [edi*2 - 0x1d7d820c], cl
mov word [edx + 0x7c], cs
imul edi, eax, 0x619654a4
cmp esi, dword [ecx]
test eax, 0x8a4be937
mov ah, 0xec
fisttp dword [edi + 0x270ba432]
movsd dword es:[edi], dword [esi]
pop ss
movsb byte es:[edi], byte [esi]
cdq
xchg ebp, eax
jnp 0x40640c
jo 0x4063e4
mov ebp, dword [eax - 0x65]
invalid
rcr edx, 0xa7
mov al, byte [0x8bba3d8]
dec ecx
or eax, 0xeee93921
push ss
mov al, byte [0xb4fc254b]
pop ebx
std
xor al, 3
sub edi, ebx
mov ch, 0x13
popal
fisubr dword [esi - 0x6c0ab54]
clc
push ecx
shl byte [eax + 2], 0xf3
xor bl, bh
mov bh, 0xfd
or cl, byte [ecx - 0x71]
sahf
cmp eax, 0x684ecc65
cmc
sub eax, 0xf88f091e
mov bh, 0x3b
dec ebp
div dword [eax*2 + 0x4aa5f448]
out 0xd7, eax
sub dword [esi - 0x4a14cc2c], ebx
ret
mov edx, dword [edi + 0x84]
test edx, edx
je 0x408266
mov ecx, dword [ebp - 0x34]
add ecx, dword [edi + 0x80]
test al, al
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x3c], ecx
je 0x40849f
nop
mov ebx, dword [ebp - 0x3c]
mov dword [esp + 4], 0x14
mov dword [esp], ebx
call sub.KERNEL32.dll_IsBadReadPtr
sub esp, 8
test eax, eax
je 0x4072f7
push cs
add byte [eax], al
movzx eax, byte [0x413008]
mov byte [ebp - 0x30], al
movzx eax, byte [ebp - 0x30]
test al, al
je 0x40731b
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x408dc3
cmp byte [ebp - 0x30], 0
jne 0x408348
mov cl, 0x28
or byte [ecx], dh
mov al, byte [0x7c2c09ef]
loopne 0x4064bb
and dword [ecx], eax
aaa
dec edi
mov ebx, dword [ebp - 0x38]
mov ecx, dword [ebx]
movzx edx, word [ecx + 0x14]
lea ebx, [ecx + edx + 0x18]
salc
pop ss
or dh, cl
das
pop edi
lodsb al, byte [esi]
clc
invalid
xor esi, esi
cmp word [ecx + 6], 0
je 0x409016
mov dword [ebp - 0x3c], ecx
jmp 0x406695
test al, al
jne 0x40657f
retf 0xac65
mov dword [esp + 8], 0x4000
mov eax, dword [ebx + 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebx + 8]
mov dword [esp], eax
call sub.KERNEL32.dll_VirtualFree
movzx eax, byte [0x413008]
sub esp, 0xc
test al, al
inc ebx
adc byte [ecx - 0x74fbdbbc], cl
inc ebx
or byte [ecx + 0x63e82404], cl
cmp byte [eax], al
add byte [edi], cl
mov dh, 5
or byte [eax], dh
inc ecx
add byte [ebx - 0x3f7bf314], al
jne 0x407350
les ebp, [ecx - 0x1747ff86]
int 0xe
cdq
adc al, 0xc2
nop
sub edi, 0x4e5eb2ab
push ebx
js 0x406588
cmp edi, 0xffffffb0
jb 0x4065f2
cdq
pop ebp
jnp 0x4065e9
and dword [edi], esp
add byte [ebx - 0xa7c46d8], bl
invalid
nop
dec edi
outsb dx, byte [esi]
adc al, 0x4e
push ds
xchg byte [edx - 0x48], bh
jp 0x40659e
jecxz 0x4065dd
xlatb
add eax, 0x44a0d81c
xchg ecx, eax
and al, 0x39
pop eax
inc ecx
inc edx
loope 0x4065e4
int 0x5a
inc edi
or dh, byte [eax]
out dx, al
lcall 0x357a, 0xcdae5c7f
inc edi
xor bl, byte [eax]
cmp al, 0xa
sbb eax, 0x9dbee259
jae 0x4065f1
xlatb
retf
mov ecx, dword [ebp - 0x3c]
add esi, 1
movzx edx, word [ecx + 6]
cmp esi, edx
jge 0x406e2a
add ebx, 0x28
test al, al
mov edx, dword [ebx + 0x24]
jne 0x406793
dec edx
sbb byte [ecx], bh
sal byte [esi + 0x5b], 1
push edi
xchg ebp, eax
xrelease xchg dword [edi - 0x456e6037], eax
into
invalid
test edx, 0x2000000
jne 0x406530
mov ecx, edx
mov edi, edx
shr ecx, 0x1d
and ecx, 1
shr edi, 0x1e
mov dword [ebp - 0x30], ecx
mov ecx, edx
and edi, 1
shr ecx, 0x1f
test al, al
mov dword [ebp - 0x34], ecx
jne 0x4073c0
push 0x66ba373e
cmp al, 0x75
mov ah, 0xc2
mov byte [0xea26c83], al
popfd
jb 0x4067d7
cdq
jmp 0xc23731b6
test cl, 0xa4
insd dword es:[edi], dx
invalid
test edx, 0x4000000
je 0x4073b0
test al, al
jne 0x408075
mov eax, dword [0xee4fceb2]
pop edx
mov al, byte [eax + esi + 0x1e]
xlatb
invalid
int3
movsb byte es:[edi], byte [esi]
dec esi
out dx, al
xor eax, dword [esi - 0xcc88b84]
lds ebp, [edi - 0x63]
loop 0x406b65
invalid
test edi, edi
jne 0x407360
test al, al
jne 0x406b96
xor eax, dword [0xd538214e]
popfd
lodsb al, byte [esi]
or al, 0x90
jno 0x406bbc
sub eax, 0x4e08c854
nop
push esp
enter 0x4e08, 0xffffffffffffff90
loop 0x406bbf
add byte [edx - 3], bl
xor ecx, dword [edx + 6]
jo 0x406b0b
jo 0x406b41
insb byte es:[edi], dx
mov esi, 0xab93a40e
push eax
mov al, byte [0x681cc23b]
push ss
in al, 0x71
je 0x406bb9
push ebx
invalid
ret
test dl, 0x40
je 0x4081e5
test al, al
jne 0x408201
add byte [eax], al
scasd eax, dword es:[edi]
fild word [ebx - 0x2e]
loope 0x406bc1
pop ebp
clc
leave
pop ecx
je 0x406ba5
test al, 0xca
nop
cmpsd dword [esi], dword es:[edi]
pop esi
lahf
mov dword [edx + 0x26], edi
mov esi, 0x62b68cd7
mov dh, 0x62
cmp eax, 0xbedd2a30
fidivr dword [edx + eax + 0x9169dac]
xchg esi, eax
loopne 0x406c32
or dl, dl
or dl, ah
bound esi, qword [edx - 0x52c4fecd]
daa
cli
test byte [ebx - 0x1f0f1950], dh
adc ebp, ecx
lahf
jmp 0x406b71
add dh, byte [esi + 0x58]
loop 0x406c32
mov bh, 0x7f
sbb eax, 0x2e6eea30
dec ebp
and eax, 0x37ce9250
push eax
invalid
mov esp, 0x2533e4c6
sub al, bh
or al, 0xa
sbb dl, byte [eax]
mov esp, 0x8163982b
mov dh, 0x42
mov edx, dword [eax - 0x15b01f54]
pop esi
sbb eax, 0x8e0ab116
add dh, al
push esp
in al, 0xfa
jns 0x406cfe
rol dword [ebp - 0x2b6924e8], 6
aaa
xchg esp, esp
jns 0x406d0f
jne 0x406d25
les edx, es:[eax]
les edx, [eax]
push ecx
loope 0x406d2b
add ch, bl
mov ah, 2
mov cl, 8
out 0xab, al
xor esp, 0x470c076c
insb byte es:[edi], dx
pop es
or al, 0x47
popfd
loope 0x406d64
retf
mov ch, 0xa3
xor byte [esi - 0x55], ah
pop ss
mov dword [0x17ab6630], eax
adc ch, byte [0x18347e0b]
sub eax, 0x18347e0b
invalid
and al, 0x85
lds esi, [ecx - 0x29]
push edx
retf 0x14a8
test edi, edi
jne 0x408130
test al, al
jne 0x406680
invalid
movzx edx, byte [0x413008]
xor dword [ecx + ecx*2 - 0x216a14ce], 0xffffffcf
and eax, 0x5e5cc90b
dec edx
lds edx, [edi]
invalid
jl 0x406692
test al, al
jne 0x406f4d
shr byte [ecx], 1
mov ds, word [esp + esi]
ja 0x406e74
test eax, 0x780c096
outsb dx, byte [esi]
jp 0x406dc2
iretd
test esp, eax
or eax, dword [ebp + 0x44]
adc esi, dword [ebx - 0x477d6b42]
sbb bl, byte [ecx]
add dword [edx + ecx*8 - 2], esp
push cs
mov eax, 0x96ccbe38
jnp 0x406eab
les esp, [edx + 0x39]
push cs
jge 0x406e24
xchg ebx, eax
inc ecx
mov edx, 0x8bcd86d8
inc esp
popal
or eax, 0xfe267bfd
loopne 0x406e76
cld
out dx, al
test al, 0x34
lodsb al, byte [esi]
je 0x406e57
sub byte [eax - 0x63167572], dh
pop es
cwde
das
dec eax
push edx
pop es
into
pop ds
xchg edx, eax
adc eax, dword [eax - 0x3a04ef61]
push cs
invalid
or bl, byte [esi + 0x6c289883]
xor eax, 0x7764042f
push esi
insb byte es:[edi], dx
inc esi
jne 0x406eb9
pop ecx
cmc
sahf
imul esi, ecx, 0x19cc7763
adc byte [esi + 0x4b0cc278], 0xcc
stosb byte es:[edi], al
into
sar byte fs:[edx], cl
cdq
add dword [edi], edi
invalid
mov edx, dword [ecx + 0x28]
test edx, edx
je 0x40835a
test al, al
jne 0x4088a5
cmp dword [eax - 0x77], esi
cld
and esi, ebp
jne 0x406f7a
xor ebx, esp
xchg ebx, eax
stosd dword es:[edi], eax
add esi, dword [esi + 0x37]
mov esi, 0xd1599c0a
mov ch, 0xa0
lodsb al, byte [esi]
adc eax, edx
pop ecx
sal dword [ebp - 0x2fee5360], 1
jmp 0x1617fa0
and dl, byte [eax]
and dword [ecx], eax
pop edx
jno 0x406f72
push esi
xchg ebp, eax
in eax, 0xcc
cmpsd dword [esi], dword es:[edi]
sbb dword [eax - 0x4f543bc6], ebp
sti
imul edi, dword [edx + 0x4c8bc297], 0x335e3762
and byte [eax - 0x557dbebd], al
wait
wait
mov byte [eax + 0x66992fbe], al
imul ebx, dword [esi + 0x11], 0xd47a5919
cmp byte [esi + 0x6966992f], 0x5e
adc dword [ecx], ebx
pop ecx
jp 0x406f83
int1
cmp al, 0x5f
cmp eax, 0xd19b979e
mov bh, 0x1c
adc eax, 0x94bf9ef9
xchg ecx, eax
pop edx
xchg byte [edx], bl
fild dword [ecx + ecx*2 + 0x74]
stosb byte es:[edi], al
mov bl, 0xd2
mov ebx, 0xa0352ccc
sbb eax, 0x105a0071
xchg edi, eax
mul cl
dec esi
adc dh, dh
inc edi
mov al, 0xb6
fadd qword [ecx + 0x10]
bound ebx, qword [ebx - 0x15]
cmpsd dword [esi], dword es:[edi]
movsd dword es:[edi], dword [esi]
pushal
push ecx
pop eax
xor cl, byte [0xc5425e24]
jnp 0x406fa3
invalid
das
sub cl, bl
sbb dword [eax], ebx
mov ebx, dword [ebp - 0x44]
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov dword [esp], ebx
call edx
movzx edx, byte [0x413008]
sub esp, 0xc
test dl, dl
jne 0x40718f
mov ch, 0x3a
or ebp, ebx
stc
fmul qword [0xf5f1e048]
xchg edx, eax
push 0x55
rcl byte [ebx + 0x25933112], cl
jo 0x407060
pop ebp
lahf
loope 0x4070e1
mov eax, 0xb32bd6fd
adc dword [eax + edx*4], esi
or dl, byte [eax]
popfd
push edx
invalid
pop ecx
mov al, 0x4d
in eax, 0x99
sbb edx, dword [ebx - 0x48]
mov eax, dword [0xdd53aebf]
mov ah, 0x38
mov ebp, es
fsub dword cs:[edi]
adc al, 0xb2
sar dword [esi + eax*4 + 0x18], 1
cmp ah, dh
sahf
pop esi
add eax, 0xdc520ff7
test al, 0x6d
xor byte [ecx + 0xe], ah
out dx, eax
punpcklwd mm1, mm4
ret
test eax, eax
je 0x409178
test dl, dl
jne 0x4089a1
xchg ecx, eax
or al, 0xa
push edx
mov ebp, 0x4dbd97e7
mov bl, bh
inc eax
les eax, [ebx]
hlt
pop ecx
sub byte [edi + 0x38], dl
pop ds
inc ebx
or ch, dh
dec ecx
dec ebp
push ebp
invalid
mov eax, dword [ebp - 0x38]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx + 0xc]
test eax, eax
jne 0x4073e0
movzx ecx, byte [0x413008]
mov byte [ebp - 0x30], cl
movzx eax, byte [ebp - 0x30]
test al, al
jne 0x4064d4
jmp dword [edx]
mov edi, dword [ebp - 0x38]
mov edi, dword [edi]
mov dword [ebp - 0x3c], edi
jmp 0x406680
test al, al
je 0x406d23
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x1c]
mov dword [esp + 0xc], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov eax, dword [ebx + 8]
mov dword [esp], eax
call sub.KERNEL32.dll_VirtualProtect
sub esp, 0x10
test eax, eax
jne 0x408081
movzx edx, byte [0x413008]
test dl, dl
mov eax, edx
je 0x40820c
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ecx]
mov dword [ebp - 0x3c], ecx
jmp 0x406680
test al, al
je 0x4069f9
mov edi, dword [ebx + 0x10]
jmp 0x406b28
mov ecx, edi
mov edi, dword [ebp - 0x30]
lea edi, [ecx + edi*2]
mov ecx, dword [ebp - 0x34]
lea ecx, [ecx + edi*2]
mov edi, dword [ecx*4 + 0x412cc0]
mov dword [ebp - 0x2c], edi
jmp 0x406947
add eax, dword [ebp - 0x34]
mov dword [esp], eax
call sub.KERNEL32.dll_LoadLibraryA
movzx edx, byte [0x413008]
mov byte [ebp - 0x30], dl
sub esp, 4
test dl, dl
mov edi, eax
jne 0x407416
jmp 0xdde7b74f
test edi, edi
je 0x408c76
test dl, dl
jne 0x40743f
test dword [ecx + 1], ebp
rcr edi, 0xdd
wait
adc edx, dword [ecx - 0x36af9312]
or bl, byte [eax]
mov al, byte [0xe8d81108]
fild dword [esi]
xor byte [ecx - 0x41], cl
push esp
ljmp 0x438b
mov ebx, dword [ebp - 0x38]
mov eax, dword [ebx + 0xc]
lea ebx, [eax*4 + 4]
call sub.KERNEL32.dll_GetProcessHeap
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.KERNEL32.dll_HeapAlloc
sub esp, 0xc
mov ebx, eax
cmp byte [0x413008], 0
jne 0x407480
invalid
mov eax, dword [ebp - 0x38]
mov esi, dword [eax + 8]
call sub.KERNEL32.dll_GetProcessHeap
mov dword [esp + 4], 0
mov dword [esp + 8], esi
mov dword [esp], eax
call sub.KERNEL32.dll_HeapFree
and al, 0xe8
jne 0x4074c6
add byte [eax], al
movzx edx, byte [0x413008]
mov byte [ebp - 0x30], dl
sub esp, 0xc
test dl, dl
jne 0x407de0
xor al, 0x9f
inc ecx
cmp al, 0xb1
sbb dword [esp + ecx*4], esp
pop ds
push esp
salc
ficom word [ebx - 0x36]
enter 0x2b5a, 0xffffffffffffff8e
mov fs, ebp
cmc
in eax, 0xf5
push esi
xor bl, byte [edi + 0x335c1bfc]
test dword [edx - 0x2ca6466e], edi
cmc
or ch, ah
sbb dword [edi - 0x169291f5], edx
sal dword [edi], 0xb1
sbb esp, dword [ebx + 0x40]
add dword [eax - 0x6a], ebx
xor esi, edi
xchg edx, eax
dec esi
push ebx
lds eax, [eax - 0x27]
jg 0x4074c5
xchg edx, eax
fldenv [esi - 0x5e6c1c78]
jp 0x407499
movntq qword [eax - 0x13c6e02f], mm1
cmp byte [ecx - 0x13], 0xda
adc byte [ecx], ah
shl byte [edx - 0x4f97da91], cl
invalid
test ebx, ebx
je 0x408c90
test dl, dl
jne 0x408032
cmp al, 0xf5
dec ebp
add eax, 0x60b61d80
int3
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ecx]
test eax, eax
je 0x407df0
test dl, dl
jne 0x408046
cmp ch, 0x6b
aas
pushal
psrld mm0, qword [edx - 0x6e8558d8]
or bl, bh
push esi
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
aad 0x72
int 6
in eax, dx
sub al, 0x31
leave
pop es
out 0x40, eax
mov edx, esi
invalid
mov eax, dword [ecx]
test eax, eax
je 0x407c26
xor ebx, ebx
jmp 0x407911
add dh, ah
outsd dx, dword [esi]
out 0x6f, al
push es
mov al, 0x21
mov dh, 0x7c
xchg ecx, eax
pop ecx
call 0x7f236474
xchg ecx, eax
jle 0x40783f
lcall 0xa8e7, 0x9e0f2542
xor ecx, eax
dec ebx
mov dword [0xe1895c71], eax
ror byte [edi + 0xd45e191], 0x72
sahf
cmc
xchg edi, eax
mov dl, bh
push ss
sbb al, 0x56
add esi, dword [esi + 0x37c52898]
adc byte [ebp + 0x6a], ch
fdivr dword [eax - 0x68ebb6f3]
sub dl, ah
mov ebx, 0x27c86cb5
or bh, byte [ebp - 0x2a6a6a41]
mov cl, 0xeb
fsub dword [edi - 0x7d]
add dword [edx + edi*4], ebp
adc dword [ecx + 0x3251e925], ebx
xor ah, byte [esi - 0x37]
pop ebp
cmp dh, al
sbb al, dh
pop esp
loope 0x4078bd
sahf
salc
sti
xor ebp, dword [ebx - 0x33bafc54]
test byte [ebx], dl
mov byte [0x965c3f85], al
fadd dword [ecx - 0x4e4bd581]
mov cl, 0x90
nop
jge 0x4078ce
retf 0x276d
add eax, 2
mov dword [esp + 4], eax
inc esp
and al, 4
mov dword [esp], edi
call sub.KERNEL32.dll_GetProcAddress
movzx edx, byte [0x413008]
mov ecx, edx
sub esp, 8
test dl, dl
mov dword [esi + ebx], eax
je 0x4079a5
test eax, eax
mov byte [ebp - 0x30], dl
je 0x407ac9
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ecx + ebx + 4]
add ebx, 4
test eax, eax
je 0x407c26
test dl, dl
jne 0x40798b
fdivr qword [ebx]
out 0xd1, eax
push 0x5c8b088e
outsb dx, byte [esi]
lodsd eax, dword [esi]
jnp 0x40792f
or eax, 0xd5a94624
in eax, dx
cmp dword [ebx - 0x741d53f4], esi
loop 0x4078bc
in eax, dx
aam 0xc
leave
cmovp esi, eax
neg byte [eax + ebx*2]
test byte [ebx], ah
loopne 0x4078d2
xchg ecx, eax
pop esp
popfd
sahf
and ah, 0x47
push esi
sbb dh, byte [0x3b41cd8f]
scasd eax, dword es:[edi]
int3
test eax, eax
js 0x407d00
test dl, dl
je 0x407840
add eax, dword [ebp - 0x34]
nop
jmp 0x4078ce
fsubr st(3)
lcall 0x7803, 0xf3f72b5d
jb 0x4079dd
sub al, 0x23
mov ebp, 0x178832aa
pop ecx
inc edx
loope 0x407a1c
adc al, 0x11
pop es
mov ebp, 0x1411e13c
fucompp
add byte [esi + eax*2 + 0x2b], dh
imul edi, dword [ecx], 0x2e
in al, 0xab
pop esp
adc dh, cl
sbb dword [edx + 0x59d2a100], edi
in al, 0xb3
mov edx, 0xc2c4f8
mov dword [0xaf7d15c6], eax
add byte [ebx - 0x5082ea3a], ah
adc eax, 0x5d40f5f2
outsb dx, byte cs:[esi]
inc ecx
fxch st(2)
push edx
test al, 0xe4
or al, 0xa8
test esi, ebx
add ch, byte [ecx - 0x6f]
mov esp, 0x177e5562
push esi
and bl, dh
imul ebx, dword [edi - 0x7c6e7f73], 0xffffffc0
out dx, eax
mov cl, 0x2e
xor byte [ebx - 0x22cc7d07], cl
invalid
cmp ah, byte [ebx]
adc eax, 0x6b95b1da
xor al, 0x55
pop edx
in eax, 0x84
mov esi, dword [eax + 0x7d]
or eax, 0x7f9c5aa3
mov esp, 0x9885c0a
div byte [esi + 0x8fc0f5d]
dec ecx
pop ds
sbb eax, 0x8fb3d023
add al, 8
jmp 0x5ab50733
test cl, cl
mov dword [ebp - 0x40], 0
jne 0x407c26
pop ebx
xchg esp, eax
ret 0x72ca
cmp byte [ebp - 0x30], 0
jne 0x407c56
fucomp st(4)
into
hlt
add ebx, dword [edi + 0x481948f7]
jo 0x407cad
and eax, 0x5c19305c
pop ebx
jae 0x407cd1
sar dword [esi], cl
aaa
mov esi, dword [ebp - 0x40]
test esi, esi
je 0x4064c8
test byte [edi - 0x18], ah
invalid
cmp byte [ebp - 0x30], 0
jne 0x407cf6
daa
test eax, 0x83acc407
pop esp
sahf
test eax, 0x18ad4678
cmp eax, 0x658531f5
xchg ebx, eax
stosb byte es:[edi], al
rol ebx, 0xc4
push ds
pop ds
aaa
pushfd
bnd jne 0x407c5c
xor eax, 0x603d7c9c
sub al, al
mov esp, 0xd346ac6
pop ss
dec esp
dec edx
or al, 0x7d
sal byte [ecx + 0x10], 1
jp 0x407cd1
invalid
aam 0x3e
push eax
jne 0x407c91
in eax, 0xea
mov edi, 0x573b861a
out 0x63, al
sbb byte [edx + 0x37d7822a], ah
arpl word [eax], bx
mov byte [0x37d7822a], al
cdq
and eax, dword [ecx + 0x1651a1a5]
push ss
mov cl, 0xcc
dec eax
test dword [edx], ecx
cdq
js 0x407c43
test dword [ebp + 0x6a], ebx
inc ebp
js 0x407cba
or bh, 0xd7
in al, 0xe7
jp 0x407cde
imul edx, dword [ecx + 0x45], 0xa7c67402
push ecx
inc ebp
add dh, byte [esi + eax*8 - 0x59]
adc eax, 0xe4c7bd18
push es
dec esp
out dx, al
lahf
lds ebp, [esi + 0x24]
and bl, cl
imul ebx, dword [edx - 0x5e951536], 0xdc1b51ce
mov ebx, 0xe1bd216c
out 0x65, eax
add dword [ebp - 0x3c], 0x14
jmp 0x4064a0
test dl, dl
jne 0x407d95
je 0x407d86
jge 0x407d10
sub al, 0x82
daa
jmp [edx - 0x2f]
push 0xffffffffffffffd1
adc dword [eax + ecx*4 - 0xdd43379], ecx
mov ebx, 0xcbf7f116
push 0x61709ec7
and dh, dl
push es
mov ecx, dword [edx - 0x7d]
or byte [edi - 0x51], cl
mov esi, dword [esi - 0x51]
cmc
inc edi
rol byte [ecx - 0x5b2b831], 0x3a
or byte [ecx], dl
sub edi, edi
fcom qword [ebx + 0x28037ac6]
lcall 0x2eb1, 0x24252eda
jae 0x407dac
mov ecx, 0x31ae10e9
shr byte [edi], 1
das
add byte [eax], bl
jl 0x407d51
push edx
test byte [edi*2 + 0x4911e883], cl
bound edx, qword [ecx + esi*2]
call 0x14a2c671
jno 0x407d5f
adc al, 0x71
std
out dx, al
mov al, byte [0x50511322]
xchg byte [edx - 0x483d8ff7], dh
mov eax, dword [0xaba1e693]
bound ebx, qword [ebp + edi*8 + 0x697aa8e6]
nop
mov esi, dword [ebx - 0xfdb5f0d]
mov es, esp
adc ah, byte [ecx - 0x37d79cea]
insb byte es:[edi], dx
cwde
mov esp, dword [ecx + edi]
arpl word [eax], bp
enter 0xffffffffffff986c, 0xffffffffffffff8b
and al, 0x39
push ds
or bl, dl
leave
insd dword es:[edi], dx
ja 0x407d5b
and eax, 0xffff
mov dword [esp + 4], eax
mov dword [esp], edi
call sub.KERNEL32.dll_GetProcAddress
movzx edx, byte [0x413008]
mov ecx, edx
sub esp, 8
add byte [ecx + 0x8ec83d1], cl
test dl, dl
mov dword [esi + ebx], eax
jne 0x4078f4
pop ds
inc eax
mov ebp, 0xa370ccb0
insb byte es:[edi], dx
xchg esp, eax
xchg ebx, eax
cli
pop ecx
movsd dword es:[edi], dword [esi]
pushfd
outsd dx, dword [esi]
or ah, al
aaa
jne 0x407e2d
ret 0x9599
mov esi, dword [ebp - 0x38]
mov dword [esi + 8], ebx
jmp 0x4075fa
test dl, dl
jne 0x408060
jl 0x407e17
mov edx, ecx
dec ebx
push ebp
aas
mov dh, 0x5c
mov ss, word [edx + eax + 0x55]
das
sbb eax, 0xa43da39a
ljmp 0xdd87
or al, 0xa6
xchg edi, eax
invalid
or edx, dword cs:[ebp - 0x63741bf4]
outsb dx, byte [esi]
xchg edi, eax
test al, 0x14
xchg byte cs:[esi], al
sbb ah, byte [ebx - 0x54b19c51]
lodsd eax, dword [esi]
dec edi
xlatb
adc eax, 0x2abaa6ea
pop edi
and dword [eax], edi
lea ebp, [ecx*8 + 0x35581099]
jle 0x407e44
ficom word [ebx + 0x3899641d]
pop es
dec eax
wait
push ebp
hlt
mov esi, dword [ebp - 0x38]
mov eax, dword [esi + 0xc]
mov dword [ebx + eax*4], edi
add eax, 1
mov dword [esi + 0xc], eax
jmp 0x407698
mov ebx, dword [ebp - 0x3c]
add eax, dword [ebp - 0x34]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
mov ecx, eax
add esi, dword [ebx + 0x10]
jmp 0x40782c
mov ecx, dword [ebp - 0x3c]
mov ebx, dword [ebp - 0x34]
add ebx, dword [ecx + 0x10]
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov ecx, ebx
jmp 0x40782c
or dword [ebp - 0x2c], 0x200
jmp 0x4073b8
movzx eax, byte [0x413008]
test al, al
mov edx, eax
jne 0x407350
enter 0x3ab7, 0xffffffffffffffa1
jg 0x4080cb
invalid
sbb ebx, dword [esi + 0x636a84dd]
mov dword [0xaa428b71], eax
aas
mov dh, 0xd2
out 0x88, eax
mov byte [edi], 0xd6
iretd
adc dword [esi], 0x328725a7
xor dh, byte [bx + di + 0x1d]
add al, 0x58
movsd dword es:[edi], dword [esi]
retf 0x7b60
test al, al
jne 0x407368
invalid
pop ebx
jo 0x408135
adc dl, byte [ebp - 0x1b545993]
push es
stc
lds edx, [ebp + 3]
rol dword [esi], cl
mov eax, dword [0x867be362]
and eax, 0x8772e4cf
push ebx
out 0x20, eax
and al, 0xc3
xchg dword [ebx - 0x19], edx
and byte [ebx + eax*8], ah
jnp 0x4080ed
mov ebp, 0x342a298e
aam 0xf
cmp cl, ch
aam 0x90
shl byte [edi + 0x790a7196], 1
in al, dx
nop
lahf
mov esp, 0xc8431174
clc
arpl sp, bp
mov esp, 0x6d7980df
test eax, 0xb37da1a4
fmul qword [ebx - 0x79]
insb byte es:[edi], dx
sbb ebp, dword [esi]
add cl, byte [ebp - 0x378683c8]
sbb esi, dword [0x5792c3d]
and al, 0xdc
int1
loopne 0x408151
jno 0x4081f2
sub byte [edx], bl
dec dl
xchg edi, eax
mov cl, 0xa6
loop 0x4081d9
adc bh, dh
adc al, 0x8b
lahf
nop
add al, 0x67
stosd dword es:[edi], eax
cmp ah, byte [edi + edx*8 - 0x7003564d]
lcall 0x2573, 0x360b4bdc
xor al, 0x3d
mov ebp, 0x1d9fe3e5
cmc
popfd
test byte [edx], cl
sub byte [ebx], ah
lcall 0x1d2f, 0x67468a2d
sbb bl, al
sbb dword [ecx + 0x7ef4f673], ebp
sub al, 0x68
movsb byte es:[edi], byte [esi]
popal
inc esi
das
sbb eax, 0xa919d81a
jae 0x4081c9
hlt
movsd dword es:[edi], dword [esi]
popal
inc esi
mov dword [eax], eax
jle 0x4081ca
xor ecx, 0xffffffff
inc dword [edx + edx*8 - 0x3f7b8f87]
test dl, dl
jns 0x408259
test al, al
nop
lea esi, [esi]
je 0x408380
mov al, byte [ecx]
add byte [eax], al
mov ecx, dword [ebp - 0x3c]
mov edi, dword [ecx + 0x24]
jmp 0x406db4
mov ecx, dword [ebp - 0x3c]
mov edi, dword [ecx + 0x20]
jmp 0x406db4
call 0x234c4899
xchg ebp, eax
imul ebx, dword [edx - 0x3c], 0xa09d7486
push ds
adc byte [esi + 0x7ac28e12], dl
xor ah, byte [ebx]
and byte [ebx - 0x316b5696], dl
daa
xor dh, byte [esi - 0x2c3e0750]
in al, dx
push esi
cmp al, 0x46
sbb eax, edx
mov ebx, 0xc8d962b8
clc
jmp 0x408294
test al, al
jne 0x406dbc
jmp 0x406ccb
test al, al
jne 0x408348
mov dword [ebp - 0x40], 1
imul eax, esi, 0x38af0a36
pop ss
mov edx, 0x1dac05f8
jmp 0x72cbe823
push eax
daa
cmp al, 0x5a
xlatb
je 0x40830c
xchg ecx, eax
insd dword es:[edi], dx
jbe 0x4082dc
mov bl, byte [edi - 0x26]
out dx, eax
jmp 0x4082f2
jb 0x408349
movsd dword es:[edi], dword [esi]
sub al, 0xad
push edi
aad 0xd9
push edi
inc edx
daa
mov ebp, 0x45c6c031
rol byte [eax], 1
jmp 0x4064d4
mov edx, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x44]
sub ebx, dword [edx + 0x34]
mov dword [ebp - 0x30], ebx
jmp 0x405d7a
push ebp
ror byte [ebx + 0x5a2bbc5d], 1
xor al, 0x89
pop ebp
shr cl, 1
js 0x4082da
invalid
mov esi, dword [ebp + 8]
mov ecx, ebx
mov edi, dword [ebp - 0x38]
mov ebx, dword [ebp - 0x44]
add ecx, dword [esi + 0x3c]
mov esi, dword [edi + 4]
mov esp, 0x8b3c4e03
ja 0x408317
mov dword [ecx + 0x34], ebx
movzx ebx, word [ecx + 0x14]
mov dword [edi], ecx
mov dword [ebp - 0x34], esi
lea ebx, [ecx + ebx + 0x18]
mov bh, 0x59
adc al, 0x89
jns 0x5cce4f96
sbb dword [eax], ebx
jmp 0x4054bb
mov esi, dword [ebp - 0x44]
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 0x10], 0
mov dword [eax + 4], esi
jmp 0x40514d
mov ebx, dword [ebp - 0x38]
mov ecx, dword [ebx]
movzx edx, word [ecx + 0x14]
lea ebx, [ecx + edx + 0x18]
pop ebp
enter 0xb8b, 0xf
mov bh, 0x51
adc al, 0x8d
pop esp
adc dword [eax], ebx
jmp 0x406519
test al, al
je 0x4072e0
jmp 0x4072ec
test al, al
lea esi, [esi]
je 0x4088ad
lea esp, [ebp - 0xc]
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
jno 0x4083a7
push ecx
in eax, dx
cmpsb byte [esi], byte es:[edi]
shl ecx, 0xa
sub dl, dh
xlatb
sbb byte [ebx + ecx*4 + 6], bl
test al, 0x36
mov al, byte [0xa813a0df]
adc eax, 0x6bf77f44
fnclex
and ecx, dword [ebp + 7]
je 0x408355
hlt
and eax, 0xb7fdab9e
or byte [eax + 0x5ebfb0bd], cl
invalid
dec ebx
in al, 0xd3
sub dword [edi], ecx
out dx, eax
aam 0x1f
dec ebx
sti
iretd
mov dh, cl
sar byte [edi], cl
mov ah, 0x5c
xor bl, ah
mov cl, 0x74
insb byte es:[edi], dx
cld
jecxz 0x4084c8
push eax
loope 0x408472
pop esp
sbb dh, byte [esi - 0x561078a2]
call 0x8271c289
sti
sbb dword [esp + ebp*8], ecx
jmp 0x40850e
call 0x46445ac2
mov dh, 0xc5
mov byte [0x57007bd0], al
push 0xffffffffffffffa9
inc eax
aaa
out 0x71, eax
mov edx, 0xcec68ae2
jbe 0x4084f3
outsb dx, byte [esi]
mov ebp, 0x83b6ea91
shr byte [ecx + ebx*2 - 0x64f00d2a], cl
xchg esp, eax
loopne 0x408508
xchg esp, eax
aaa
cmp dword [esi], 0xe925b977
jae 0x408502
jae 0x408536
jmp 0x4064a0
test al, al
jne 0x408997
add byte [eax], al
inc eax
and dword [ebx], ecx
jmp 0x40856e
pop edi
neg dword [edi]
cmp al, 0xdd
and byte [ecx], bl
test dh, ch
mov ah, 0x73
mov cl, 0xc8
push ebp
test byte [edx], 0x29
cmp byte [edx - 0x3c], 0x9f
imul ebp, dword [edx + 0x2c], 0xffffff91
clc
dec esi
rcr dword [ecx], 1
pop ecx
mov esp, 0xb4db5078
cld
into
mov dl, 0xea
and byte [0x917a4a9b], 0x4d
mov dword [0xb168c711], eax
xor dl, dl
ffree st(4)
retf 0x952b
and ecx, esp
in al, dx
add al, 0xb8
dec esi
mov byte [0xf0e022ad], al
push ecx
or eax, dword [edi]
ljmp 0x9b39
cmp ebx, 3
je 0x408970
mov ebx, edx
add eax, 1
shr ebx, 1
cmp eax, ebx
jae 0x408640
movzx edi, word [ecx + eax*2 + 8]
mov ebx, edi
sar ebx, 0xc
test ebx, ebx
jne 0x408610
lea edx, [esi - 8]
mov ebx, edx
add eax, 1
shr ebx, 1
cmp eax, ebx
jb 0x408624
cmp byte [ebp - 0x3c], 0
jne 0x408990
mov eax, 0xb2b3c2ca
aas
mov gs, word [edx - 0x20c6adbc]
pop eax
sub dl, byte [ecx + edx - 0x10]
adc dword [eax], ebx
inc ch
or dword [eax + 0x4632f421], ebp
stc
pop ecx
fbld tbyte [edx]
adc dword [ecx + 0x235bc5e4], ebp
push ebx
add eax, 0x473ea667
invalid
movzx eax, byte [ebp - 0x3c]
test al, al
jne 0x408997
lds esp, [ebx + 0x2d88da38]
xchg dword [ecx - 7], ecx
inc esi
dec ebp
imul ecx, esi, 0xffffffba
pop esp
ret
cmpsb byte [esi], byte es:[edi]
int 0x9b
out dx, eax
ret
add ch, byte [ebx - 0x71]
and bh, al
jo 0x4087fa
ret
add edx, dword [ebp - 0x44]
jmp 0x407066
in al, 9
xchg ebp, esi
ror byte [edi + 0x750c0a12], cl
in al, 0x42
adc eax, 0xe89c627b
cdq
xor ch, dh
in eax, 0x96
cmp al, 0x2a
or cl, ah
jp 0x4088d7
sahf
add eax, 0xe78da7f2
jns 0x4088ed
stc
test byte [eax], ch
outsd dx, dword [esi]
push 0xcde3846a
and bl, cl
push bx
mov ecx, 0x6bf5e94b
adc edi, esi
dec ebp
lea ecx, [ebx + ebp*8]
xchg edx, eax
invalid
test bl, ah
int 0x20
retf
in eax, 0xc
cmp ebx, esi
nop
dec ebp
clc
into
rcr ebx, 1
wait
repne cmpsb byte [esi], byte es:[edi]
add dword [ebp + 0x60], eax
dec esp
push ebp
mov eax, 0xce055341
pop edi
invalid
mov ebx, dword [ebp - 0x2c]
and edi, 0xfff
mov esi, dword [ebp - 0x30]
add dword [ebx + edi], esi
mov esi, dword [ecx + 4]
lea edx, [esi - 8]
jmp 0x408635
add ecx, esi
jmp 0x405ee0
mov edx, dword [ebp - 0x38]
mov edi, dword [edx]
jmp 0x406475
aam 0xda
invalid
mov edi, dword [ebp - 0x38]
mov dword [edi + 0x10], 1
jmp 0x4072ec
test al, al
jne 0x408a4b
jp 0x40899d
loope 0x408a02
xchg dword [edx - 0x5c6d6672], edi
cmp cl, cl
test al, 0x58
cmpsb byte [esi], byte es:[edi]
out dx, al
ja 0x4089ba
xor dword [edx - 0x677ad9ae], edx
jp 0x408a00
xor al, 0x53
mov byte [esi], cl
fld qword [edx]
int1
mov edi, 0xd6797848
adc dword [ebx], ecx
jns 0x408a2c
aam 0x22
mov byte [0x6b19107b], al
inc ecx
stosd dword es:[edi], eax
mov ebp, 0xe1553067
pop esi
mov dh, byte [0xe91298e6]
mov ecx, edx
xor dword [ecx], eax
dec edx
or byte [edx], dl
push ebp
sbb dword [edx + ebp - 0x5d], 0x18b3a5ff
pop esp
sub ah, byte [ebx + 0x18b3a5ff]
mov dword [0x18b3a5ff], eax
movsd dword es:[edi], dword [esi]
mov bl, 0x18
adc ah, dh
invalid
vpunpcklwd xmm6, xmm7, xmmword [edx + 0x33]
lcall 0x110e, 0x85bdb8b7
push esp
scasb al, byte es:[edi]
insd dword es:[edi], dx
movsb byte es:[edi], byte ss:[esi]
dec edx
je 0x408a04
retf
mov edx, dword [ebp - 0x30]
mov dword [esp + 0xc], 4
mov dword [esp + 8], 0x2000
mov eax, dword [edx + 0x50]
mov dword [esp], 0
mov dword [esp + 4], eax
call sub.KERNEL32.dll_VirtualAlloc
mov dword [ebp - 0x44], eax
movzx eax, byte [0x413008]
sub esp, 0x10
test al, al
jne 0x408b8c
outsd dx, dword [esi]
invalid
mov edi, dword [ebp - 0x44]
test edi, edi
je 0x4092b5
test al, al
jne 0x404fae
mov eax, 0x6e6968fd
mov al, byte [0xb9b3840b]
sti
in al, 0x54
cmp ah, byte [0xa0cb66bc]
dec esp
daa
loopne 0x408c16
push esp
sbb al, 0xac
mov eax, dword [0x9e96b43c]
insd dword es:[edi], dx
xchg ebx, eax
pop es
salc
add ah, byte [edi - 0x65a5791f]
cmp dword [edi], 0xaa64bcee
and ch, byte [edi]
dec ebx
outsd dx, dword [esi]
push esi
sub ecx, edi
stosb byte es:[edi], al
inc edi
jl 0x408c25
xor dword [eax], 0xffffffe2
and bl, byte [ebp + 0x78732976]
rcl byte [esi + edi*8 + 0x2a]
out dx, eax
sub byte [ecx - 0x23], 0x3c
int 0x88
pop esi
std
ror ebp, cl
push ebx
invalid
fsubrp st(3)
add byte [edx], cl
into
out 0xad, eax
loop 0x408c61
mov esi, 0x8fd4e0f1
jns 0x408c73
or cl, byte [esi - 0x6e]
push cs
adc ah, 0xe4
sub dword [edx - 0x47], 0x21
invalid
mov esp, 0x8bffffc2
mov dword [eax + 0x3000000], esp
dec ebp
int3
mov ecx, dword [ecx + 0xa0]
add ecx, dword [ebp - 0x34]
mov byte [ebp - 0x3c], al
jmp 0x405ee0
sar bh, cl
inc dword [edx + edx*8 + 0x3a4840f]
add byte [eax], al
test dl, dl
je 0x409022
mov dword [ebp - 0x40], 0
jmp 0x4064c8
test dl, dl
jne 0x408c7e
retf 0x3331
jmp 0x408db7
sub ch, byte [0xe7cb827a]
push esp
loopne 0x408dae
retf
xchg al, dh
loopne 0x408d41
int 0x3b
fistp word [ecx + 0x2b04515e]
insb byte es:[edi], dx
mov byte [ebp - 0x32a2859c], dl
invalid
cmp byte [ebx + 0xd201593], 0x72
in eax, dx
in al, dx
mov dword [ebp - 0x40], 0
jmp 0x40731b
cmp byte [ebp - 0x30], 0
jne 0x408f06
xchg edi, eax
dec ecx
aaa
lodsb al, byte [esi]
jg 0x408d7b
mov eax, 0xe15f8241
pop ebx
add ebx, dword [ebx - 0x7a7b56b4]
xchg edx, eax
jb 0x408d7f
xor edi, dword [esi + 0x1d722fc1]
sub eax, 0xefc453a6
mov dh, byte [ecx + 0x6e]
xor ch, byte [ecx]
scasd eax, dword es:[edi]
mov ch, 0x89
xchg ecx, eax
adc byte [ebp + ebp - 0x828278d], cl
pop ebp
imul ebp, dword [ecx - 7], 0xccbb279c
cdq
fdivr st(1)
aas
sub edi, dword [ebp - 0x62d14ad2]
out 0x58, eax
dec esp
pushfd
loope 0x408df3
lodsb al, byte [esi]
insd dword es:[edi], dx
or ebx, dword [edi]
inc ebp
loop 0x408e33
mov byte [0xe89c804b], al
cmpsd dword [esi], dword es:[edi]
push edi
mov ah, 0x41
das
lodsd eax, dword [esi]
sbb byte [edx + 0x6a], 0xaf
setns byte [esi + esi*8 - 0xf]
cwde
xchg ebx, eax
sal byte [esi + 0x3f], cl
aas
sbb dword [edi - 0x7c], 0xae267563
cmc
ret 0x9d96
mov cl, ch
test dh, 0x9a
inc ebp
sar eax, 1
mov dh, 0x2e
jg 0x408f60
les esp, [0xdec06189]
dec esp
mov cl, 0x22
pop ecx
sub eax, 0xf5f5db07
test byte [0x3f98f672], cl
in al, dx
fidiv dword [edx]
aaa
shr al, cl
push cx
sub dh, byte [esi - 0x11]
mov esi, dword [edi]
mov eax, dword [ebp - 0x38]
mov dword [esp], eax
call int.00403330
cmp byte [0x413008], 0
jne 0x408376
invalid
xlatb
call 0xf755c114
or al, 0xa
in al, dx
nop
sbb byte [esi - 0x7a], bl
mov al, 0x9e
jae 0x408f45
js 0x408ed6
dec ebp
dec edx
lea esi, [ebx + 0x12ddf39c]
loop 0x408fa4
dec ecx
mov al, 0x40
xor ah, byte [eax + 0x7e974771]
push edx
test byte [esi], cl
push 0xffffffffffffffe2
xchg ebp, eax
sbb al, byte [eax - 0x5207cff8]
jge 0x408f95
cmp dh, byte [ecx]
fild qword [0x770ff10e]
cmp edi, dword [edi + 0x295f6db8]
mov ah, 0xf7
cmpsd dword [esi], dword es:[edi]
push es
jnp 0x408f1c
mul dword [edi + 0x70b67b06]
pop ebp
jo 0x408fc5
dec ebx
mov bl, dh
push ebx
mov edx, 0x193800d6
cmp ch, byte [ecx - 8]
ja 0x408f61
jbe 0x408f68
and eax, 0x9592a736
rol byte [esi - 0x74], 1
js 0x408fd0
pop es
mov ebp, 0x43487965
int3
adc eax, 0x193a0ae3
mov cl, 0xcc
scasd eax, dword es:[edi]
adc dword [ebx], 0x4360f93b
daa
sbb eax, 0xeb65a0a8
insb byte es:[edi], dx
push 0x37a23804
inc esi
arpl word [ebx + 0x6b8f7861], bp
mov bl, 0xa8
sbb al, 0x7f
push edi
popfd
xchg edx, eax
xchg ebx, eax
xchg edi, eax
salc
mov esi, 0x755f7e10
imul ecx, ebx, 0x80046ddd
pop edi
jne 0x409031
retf
add al, 0x80
movsd dword es:[edi], dword [esi]
inc edx
invalid
or dh, ch
daa
cmp byte [ebp - 0x6e], 0x33
and eax, 0x4b7db3ae
inc ebp
adc dl, ah
cmp dh, ah
mov eax, dword [0xbd006448]
int 0xcb
wait
cmp cl, bh
sbb ebx, edi
adc ah, cl
out 0, eax
or byte [eax + 0x7d], ch
lcall 0x931f, 0x4e48a29b
xchg esp, eax
das
jbe 0x408fcb
adc eax, 0x17791417
rol dword [esi - 0x1e], 1
insb byte es:[edi], dx
xor dword [edx + 0x68c46087], 0xe9c03148
invalid
movzx eax, byte [0x413008]
jmp 0x406e2a
inc ecx
xor eax, 0x636fb48e
sahf
mov ebx, 0xd39845a6
mov byte [0xb2acd2f8], al
test al, 0xa7
lodsb al, byte [esi]
mov dl, 0xa8
cmpsd dword [esi], dword es:[edi]
jnp 0x409050
aaa
and al, 0xa1
pop ebx
add al, 0xaa
mov ebp, 0x9d446d5c
mov byte [0x351152d2], al
invalid
or dword [edi], 0x28
sub ecx, dword [edx - 0x1d519dbf]
mov ebp, 0xf7a8db2
cli
mov esi, 0xfe909cac
scasb al, byte es:[edi]
invalid
invalid
test dl, dl
jne 0x408f06
test al, 0x2a
jnp 0x409109
popal
lea edi, [ebx + 0x7ae988ac]
add ch, byte [ecx + 0x300b4a9b]
adc eax, dword [edx - 0x3b]
outsb dx, byte [esi]
push edi
push esi
lahf
xor eax, 0x1aae502f
cmp al, 0x57
inc esp
mov eax, 0x9745a6dc
push edx
int 0x81
int 0xcf
sub eax, 0xb9786aae
lcall 0xb653, 0xf95ffc8b
cwde
mov ch, ah
call 0x8d6591f5
inc esp
invalid
sti
invalid
test al, al
jne 0x408376
push ds
sti
std
xchg edx, eax
repne outsd dx, dword [esi]
cmpsb byte [esi], byte es:[edi]
je 0x4092d4
clc
dec esp
sub dl, byte [edi - 0x24]
mov esi, 0x8e9ae3a2
loopne 0x4092b2
xchg esi, eax
or eax, 0x90f33241
inc ecx
xor dh, bl
nop
in al, dx
hlt