Function at 0x43bb70
Capabilities:
Connect to wmi namespace via wbemlocator
Encode data using xor
Get http document via iwebbrowser2
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x98
mov ebx, dword [ebp + 8]
mov eax, dword [0x450370]
mov dword [esp + 0x3c], eax
mov dword [esp + 4], 0xf907fbd7
mov dword [esp + 8], 0xe57be77f
mov dword [esp + 0xc], 0xe109e378
mov dword [esp + 0x10], 0xed22ef73
mov dword [esp + 0x14], 0xe97deb72
mov dword [esp + 0x18], 0x957d9772
mov dword [esp + 0x1c], 0x919293bf
mov dword [esp + 0x20], 0
xor ecx, ecx
xor edx, edx
nop
mov edi, ecx
and edi, 0x16
mov esi, edx
xor esi, 0x8d1d6b2b
add esi, edi
lea edi, [esi + esi]
not edi
add edi, esi
mov eax, esi
xor eax, 0xcf01adb
or esi, 0x810d6124
and esi, eax
and edi, 0xcf01adb
or esi, edi
movzx eax, byte [esp + edx + 4]
xor esi, eax
mov eax, esi
not eax
and eax, 1
xor esi, 0xda
lea eax, [esi + eax*2]
add al, 0x28
mov byte [esp + edx + 4], al
inc edx
add ecx, 2
cmp edx, 0x20
jne case.default.0x43bc3f
lea eax, [esp + 0x5c]
lea edi, [esp + 0x70]
lea esi, [esp + 4]
push eax
push 8
push edi
push 0xd
push esi
push 0
call dword [esp + 0x54]
shr eax, 0x1f
jmp dword [eax*4 + 0x44dc44]
mov word [esp + 0x70], 0x43
mov word [esp + 0x72], 0x3a
mov dword [esp + 0x74], 0x5c
mov dword [esp + 0x68], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x44], 0
lea eax, [esp + 0x44]
push eax
push 0x447a98
push 1
push 0
push 0x447aa8
call dword [sym.imp.ole32.dll_CoCreateInstance]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44dc4c]
mov dword [esp + 4], 0x49fb4be2
mov dword [esp + 8], 0x45ea47f9
mov dword [esp + 0xc], 0x41ff43e0
mov dword [esp + 0x10], 0xbd0dbff7
mov dword [esp + 0x14], 0xb9f4bb16
mov word [esp + 0x18], 0xb7b8
mov dword [esp + 0x1a], 0
mov byte [esp + 0x1e], 0
mov eax, 0x9754af13
mov ecx, 0x2ea95e26
nop
mov esi, eax
xor esi, 0x20
mov edx, ecx
and edx, 0x3e
sub edx, esi
xor dl, byte [esp + eax + 0x68ab50f1]
add dl, 0x41
mov byte [esp + eax + 0x68ab50f1], dl
inc eax
add ecx, 2
cmp eax, 0x9754af2e
jne 0x43bcf0
lea esi, [esp + 4]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
lea edx, [esp + 0x40]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
mov dword [esp + 0x58], edi
push edi
push eax
call dword [ecx + 0xc]
not eax
shr eax, 0x1f
lea edi, [esp + 0x70]
jmp dword [eax*4 + 0x44dc54]
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [esp + 0x5c]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44dc5c]
mov dword [esp + 4], 0x9323912f
mov dword [esp + 8], 0x9f9e9d28
mov dword [esp + 0xc], 0
mov eax, 0xd9d164
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0xd9d160]
xor ecx, eax
add ecx, 0xfbbee90b
mov edx, ecx
and edx, 1
xor ecx, 1
lea ecx, [ecx + edx*2]
mov byte [esp + eax - 0xd9d160], cl
inc eax
cmp eax, 0xd9d170
jne 0x43bda0
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esp + 0x4c], eax
mov dword [esp + 4], 0xf73b09b7
mov dword [esp + 8], 0xf33ff540
mov dword [esp + 0xc], 0xff42f13f
mov dword [esp + 0x10], 0xfb2cfd1c
mov dword [esp + 0x14], 0xe72cf918
mov dword [esp + 0x18], 0xe351e55a
mov dword [esp + 0x1c], 0xef0ee155
mov dword [esp + 0x20], 0xeb43ed57
mov dword [esp + 0x24], 0xd709e97a
mov dword [esp + 0x28], 0xd371d50a
mov dword [esp + 0x2c], 0xdf17d11e
mov dword [esp + 0x30], 0xdb65dd6f
mov word [esp + 0x34], 0xd9d8
mov dword [esp + 0x36], 0
mov byte [esp + 0x3a], 0
mov eax, 0x81
mov ecx, 0x7e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + ecx - 0x7a]
mov edi, esi
not edi
or edi, eax
lea edx, [edi + edi]
not edx
add edx, edi
or esi, ecx
and edi, 0xc4
and edx, 0x3b
or edx, edi
xor edx, 0x3b
and edx, esi
add dl, 0x8a
mov byte [esp + ecx - 0x7a], dl
dec eax
inc ecx
cmp eax, 0x4a
jne case.default.0x43bec2
lea eax, [esp + 4]
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, dword [esp + 0x40]
mov ecx, dword [esi]
lea edx, [esp + 0x58]
push edx
push 0
push 0x30
mov dword [esp + 0x78], eax
push eax
push dword [esp + 0x5c]
push esi
call dword [ecx + 0x50]
not eax
shr eax, 0x1f
lea edi, [esp + 0x70]
jmp dword [eax*4 + 0x44dc64]
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
lea edx, [esp + 0x50]
lea esi, [esp + 0x54]
push edx
push esi
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
setns cl
cmp eax, 1
setne al
cmp dword [esp + 0x50], 0
setne dl
and dl, al
and dl, cl
movzx eax, dl
jmp dword [eax*4 + 0x44dc6c]
lea eax, [esp + 0x80]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esp + 0x54]
mov dword [esp + 4], 0xf74bf957
mov dword [esp + 8], 0xf34bf57a
mov dword [esp + 0xc], 0xcf7af151
mov dword [esp + 0x10], 0xcb47cd9e
mov dword [esp + 0x14], 0xc778c97d
mov dword [esp + 0x18], 0xc34cc579
mov word [esp + 0x1c], 0xc1c0
mov dword [esp + 0x1e], 0
mov word [esp + 0x22], 0
mov ecx, 0x57
mov esi, 0xa9
nop
nop
nop
nop
mov edi, esi
and edi, 0xb6
mov edx, esi
or edx, 9
add edx, ecx
or edx, edi
xor dl, byte [esp + ecx - 0x53]
xor dl, 0xf6
add dl, 0x52
mov byte [esp + ecx - 0x53], dl
inc ecx
dec esi
cmp ecx, 0x77
jne case.default.0x43bfc5
mov ecx, dword [eax]
push 0
push 0
lea esi, [esp + 0x88]
push esi
push 0
lea edx, [esp + 0x14]
push edx
push eax
call dword [ecx + 0x10]
test eax, eax
setns al
cmp word [esp + 0x80], 8
sete cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x44dc74]
push dword [esp + 0x88]
call fcn.004321d0
add esp, 4
mov edi, eax
lea esi, [eax + 1]
push esi
call fcn.0040c880
add esp, 4
push dword [esp + 0x88]
push esi
mov dword [esp + 0x50], eax
push eax
call fcn.0040d2b0
add esp, 0xc
add edi, 0xfffffffc
xor eax, eax
xor ecx, ecx
cmp eax, 4
setb cl
jmp dword [ecx*4 + 0x44dc7c]
mov ecx, eax
and ecx, 0xfffffffb
mov edx, eax
and edx, 4
mov esi, eax
or esi, 4
imul esi, edx
xor edx, 4
imul edx, ecx
add esi, dword [esp + 0x48]
mov ecx, dword [edx + esi]
mov dword [esp + eax*4 + 0x5c], ecx
xor ecx, ecx
sub edi, 4
setb cl
jmp dword [ecx*4 + 0x44dc84]
inc eax
xor ecx, ecx
cmp eax, 4
setb cl
jmp dword [ecx*4 + 0x44dc7c]
lea esi, [esp + 0x80]
jmp dword [0x44dc8c]
push dword [esp + 0x48]
call fcn.0040c890
add esp, 4
push esi
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edi, [esp + 0x70]
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [esp + 0x4c]
call esi
push dword [esp + 0x6c]
call esi
lea esi, [esp + 4]
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [esp + 0x3c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [esp + 4], 0
push 0x72a7c387
push dword [0x450368]
call fcn.00443a90
add esp, 8
push 0
push 0
push 0
push 0
push esi
push 0
push 0
push edi
call eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x44dc94]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 4]
mov dword [esp + 0x5c], eax
xor esi, esi
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [case.0x43bfc5.15]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
xor eax, eax
cmp esi, 4
setb al
jmp dword [eax*4 + 0x44dcbc]
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x44dcc4]
xor eax, eax
cmp dword [esp + esi*4 + 0x5c], 0
sete al
jmp dword [eax*4 + 0x44dcdc]
mov eax, dword [case.0x43bfc5.30]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
mov eax, esi
jmp 0x43c183
lea eax, [esi - 1]
imul eax, dword [esp + eax*4 + 0x5c], 0x1a5845
add eax, 0xebde8a13
mov dword [esp + esi*4 + 0x5c], eax
mov edi, 0xfffffff7
push 0x10
push 9
push ebx
push eax
call fcn.00422dd0
add esp, 0x10
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [eax + edi + 9], 0
lea edi, [edi + 1]
jne 0x43c1b0
neg edi
nop
nop
nop
nop
mov ecx, dword [case.0x43bfc5.33]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp ecx
xor ecx, ecx
add edi, 0xffffffff
setb cl
jmp dword [ecx*4 + 0x44dd04]
mov byte [eax - 1], 0x30
dec eax
jmp 0x43c1c0
jmp dword [0x44dd14]
inc esi
add ebx, 8
jmp 0x43c120
xor eax, eax
jmp 0x43c4b2
push 0x400
call fcn.0043e1b0
add esp, 4
mov esi, eax
mov eax, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], 0xf4f5f6f7
lea eax, [esp + 4]
mov edx, 0x6d44c02b
movzx edi, byte [eax]
mov ebx, edx
or ebx, edi
lea ecx, [edx - 0x6d44c000]
and ecx, edi
lea edi, [ebx + ebx]
not edi
add edi, ebx
or edi, ecx
mov ecx, edi
and ecx, 1
or edi, 1
lea ebx, [edi + ecx]
add ebx, 0xcf50fde8
mov ecx, ebx
not ecx
and ecx, 0xd
and ebx, 0xf2
sub ebx, ecx
mov byte [eax], bl
inc eax
dec edx
cmp edx, 0x6d44c027
jne 0x43c260
mov eax, dword [esp + 4]
mov edx, dword [0x450374]
test edx, edx
je case.default.0x43c30a
xor edi, edi
mov ebx, dword [0x450378]
nop
nop
nop
nop
nop
nop
cmp dword [ebx + edi*8], 0x7cde1e50
je 0x43c2d0
inc edi
cmp edx, edi
jne 0x43c2c0
jmp case.default.0x43c30a
mov edx, dword [ebx + edi*8 + 4]
cmp edx, eax
je case.default.0x43c30a
lea eax, [esp + 0x18]
push 0x2f
push 0x400
push esi
push eax
push dword [esp + 0x10]
push 5
push dword [0x45037c]
push edx
call fcn.00440f10
add esp, 0x20
not eax
shr eax, 0x1f
mov dword [esp], 0
mov edi, dword [esp + 0x3c]
jmp dword [eax*4 + 0x44dd24]
xor eax, eax
xor ecx, ecx
mov dword [esp], 0
cmp ecx, dword [esi]
setb al
xor ebx, ebx
jmp dword [eax*4 + 0x44dd2c]
mov eax, dword [case.0x43c30a.0]
nop
jmp eax
push esi
call fcn.0043e210
add esp, 4
mov eax, dword [esp + 0x14]
mov dword [esp + 4], 0xf4f5f6f7
lea ecx, [esp + 4]
mov edx, 0x6d44c02b
movzx esi, byte [ecx]
mov edi, edx
or edi, esi
lea ebx, [edx - 0x6d44c000]
and ebx, esi
lea esi, [edi + edi]
not esi
add esi, edi
or esi, ebx
mov edi, esi
and edi, 1
or esi, 1
lea ebx, [esi + edi]
add ebx, 0xcf50fde8
mov esi, ebx
not esi
and esi, 0xd
and ebx, 0xf2
sub ebx, esi
mov byte [ecx], bl
inc ecx
dec edx
cmp edx, 0x6d44c027
jne 0x43c350
mov ecx, dword [0x450374]
test ecx, ecx
je 0x43c4ad
mov edx, dword [esp + 4]
xor esi, esi
mov edi, dword [0x450378]
nop
nop
cmp dword [edi + esi*8], 0xb62b8d10
je 0x43c493
inc esi
cmp ecx, esi
jne 0x43c3b0
jmp 0x43c4ad
mov edi, dword [esp + 0x3c]
lea ecx, [esp + 4]
call fcn.0043e650
inc ebx
xor eax, eax
cmp ebx, dword [esi]
setb al
jmp dword [eax*4 + 0x44dd2c]
mov eax, dword [esi + ebx*4 + 4]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
lea ecx, [esp + 4]
push 0
push eax
call fcn.0043e4e0
xor eax, eax
mov ecx, ebp
neg ecx
sbb eax, edi
setl al
movzx edi, al
shl edi, 0x14
or edi, 1
jmp dword [0x44dd48]
lea ecx, [esp + 4]
push edi
call fcn.0043e510
lea ecx, [esp + 4]
push edi
call fcn.0043e510
jmp dword [0x44dd50]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44dd54]
mov edi, dword [esp + 0x3c]
jmp dword [0x44dd5c]
lea ecx, [esp + 4]
push edi
push ebp
push 0
call fcn.0043e700
lea ecx, [esp + 4]
push edi
push ebp
push 0
call fcn.0043e700
jmp dword [0x44dd68]
test eax, eax
setns al
mov dword [esp], eax
jmp 0x43c3d4
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
je 0x43c4ad
push eax
push 1
push dword [0x45037c]
push ecx
call fcn.00440f10
add esp, 0x10
mov eax, dword [esp]
and al, 1
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
ret
mov word [ebx], 0
movzx ebp, word [esi]
xor eax, eax
test bp, bp
setne al
mov ecx, ebx
jmp dword [eax*4 + 0x44dd74]
xor eax, eax
cmp ecx, ebx
seta al
jmp dword [eax*4 + 0x44ddbc]
mov eax, dword [case.0x43cab9.36]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
jmp dword [0x44ddd0]
mov ebp, ecx
movzx esi, word [ebx]
xor eax, eax
test si, si
sete al
jmp dword [eax*4 + 0x44ddd4]
jmp dword [0x44dde0]
movzx ebp, word [ebx]
xor eax, eax
test bp, bp
sete al
jmp dword [eax*4 + 0x44de3c]
mov edi, esi
lea eax, [esi + 2]
mov dword [esp], eax
mov dword [esp + 4], 0xb752894e
mov word [esp + 8], 0xb5b4
lea eax, [esp + 0xa]
mov byte [eax + 4], 0
mov dword [eax], 0
mov eax, 0x3ed06ede
nop
nop
nop
nop
movzx ebx, byte [esp + eax - 0x3ed06eda]
mov edx, ebx
and edx, eax
add dl, dl
sub bl, dl
movzx edx, bl
add edx, eax
add dl, 0xaa
mov byte [esp + eax - 0x3ed06eda], dl
inc eax
cmp eax, 0x3ed06ee9
jne 0x43c830
xor eax, eax
mov ebx, dword [esp + 0x30]
nop
nop
nop
movzx edx, word [ebx + eax + 2]
movzx esi, word [esp + eax + 4]
test dx, dx
je 0x43c877
add eax, 2
cmp dx, si
je 0x43c860
xor eax, eax
cmp dx, si
setne al
mov esi, edi
jmp dword [eax*4 + 0x44de44]
xor eax, eax
cmp bp, 0x5c
sete al
jmp dword [eax*4 + 0x44de4c]
xor eax, eax
xor al, 1
movzx eax, al
jmp dword [eax*4 + 0x44de64]
mov esi, dword [case.0x43cc8d.68]
add ecx, 0xfffffffe
xor edx, edx
cmp ecx, ebx
setae dl
mov eax, ecx
mov ecx, ebx
jmp dword [edx*4 + 0x44de6c]
mov edi, esi
mov esi, dword [case.0x43cc8d.68]
add ecx, 0xfffffffe
xor edx, edx
cmp ecx, ebx
setae dl
mov eax, ecx
mov ecx, ebx
jmp dword [edx*4 + 0x44de6c]
xor edx, edx
cmp word [eax], 0x5c
sete dl
mov ecx, eax
jmp dword [edx*4 + 0x44de74]
jmp esi
add eax, 0xfffffffe
xor edx, edx
cmp eax, ebx
setae dl
mov ecx, ebx
jmp dword [edx*4 + 0x44de6c]
add edi, 4
jmp case.0x43cab9.36
cmp word [ebx + 2], 0
sete al
xor al, 1
movzx eax, al
jmp dword [eax*4 + 0x44de64]
xor eax, eax
cmp word [esi + 4], 0x5c
sete al
jmp dword [eax*4 + 0x44de8c]
mov edi, dword [esp]
jmp case.0x43cc8d.62
xor ecx, ecx
cmp si, 0x5c
sete cl
xor eax, eax
jmp dword [ecx*4 + 0x44ddf4]
cmp word [ebx + 2], 0
sete al
mov ecx, dword [case.0x43cab9.30]
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp ecx
xor al, 1
movzx eax, al
mov ecx, ebp
jmp dword [eax*4 + 0x44de0c]
mov dword [esp + 4], 0x69366b5a
mov word [esp + 8], 0x6f68
mov dword [esp + 0xa], 0
mov eax, 0xf876e3e7
mov ecx, 0x18
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 0x7891c1d]
mov ebx, ecx
xor ebx, eax
and ebx, edx
xor ebx, eax
mov edx, ebx
and edx, 0x7c
xor ebx, 0x7c
lea edx, [ebx + edx*2]
inc dl
mov byte [esp + eax + 0x7891c1d], dl
inc eax
dec ecx
cmp eax, 0xf876e3f1
jne 0x43c9b0
xor ecx, ecx
mov ebx, dword [esp + 0x30]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, word [ebx + ecx + 2]
movzx edx, word [esp + ecx + 4]
test ax, ax
je 0x43ca07
add ecx, 2
cmp ax, dx
je 0x43c9f0
jmp dword [0x44dde8]
mov dword [esp + 4], 0x69366b5a
mov word [esp + 8], 0x6f68
mov dword [esp + 0xa], 0
mov eax, 0xf876e3e7
mov ecx, 0x18
nop
nop
movzx edx, byte [esp + eax + 0x7891c1d]
mov ebx, ecx
xor ebx, eax
and ebx, edx
xor ebx, eax
mov edx, ebx
and edx, 0x7c
xor ebx, 0x7c
lea edx, [ebx + edx*2]
inc dl
mov byte [esp + eax + 0x7891c1d], dl
inc eax
dec ecx
cmp eax, 0xf876e3f1
jne 0x43ca30
jmp case.0x43cab9.25
xor ecx, ecx
cmp ax, dx
setne cl
mov ebx, dword [esp + 0x30]
jmp dword [ecx*4 + 0x44ddec]
mov ecx, ebp
add ecx, 0xfffffffe
jmp case.0x43cab9.36
xor edi, edi
test bp, bp
je 0x43cab2
mov edx, ebp
mov eax, esi
nop
nop
nop
nop
nop
cmp dx, 0x5c
je 0x43cab0
movzx edx, word [eax + 2]
add eax, 2
test dx, dx
jne 0x43ca90
jmp 0x43cab2
mov edi, eax
xor eax, eax
test edi, edi
sete al
jmp dword [eax*4 + 0x44dd7c]
xor eax, eax
sub edi, esi
sete al
sar edi, 1
lea edx, [edi + 1]
jmp dword [eax*4 + 0x44dd84]
mov eax, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, eax
add eax, 2
cmp word [edi], 0
jne case.default.0x43cb07
xor eax, eax
sub edi, esi
sete al
sar edi, 1
lea edx, [edi + 1]
jmp dword [eax*4 + 0x44dd84]
xor eax, eax
cmp bp, 0x5c
sete al
jmp dword [eax*4 + 0x44dd9c]
xor eax, eax
cmp edx, 2
sete al
jmp dword [eax*4 + 0x44dda4]
xor eax, eax
cmp bp, 0x2e
sete al
jmp dword [eax*4 + 0x44ddac]
xor eax, eax
cmp edx, 3
sete al
jmp dword [eax*4 + 0x44de24]
xor eax, eax
cmp bp, 0x2e
sete al
jmp dword [eax*4 + 0x44de2c]
xor eax, eax
cmp word [esi + 2], 0x2e
sete al
jmp dword [eax*4 + 0x44de34]
test edx, edx
je 0x43cc75
mov eax, edx
and eax, 3
je 0x43cbfa
mov dword [esp], edx
xor edx, edx
mov dword [esp + 0x14], ecx
mov ebp, ecx
mov dword [esp + 0x10], esi
nop
nop
movzx ecx, word [esi]
xor ebx, ebx
test cx, cx
setne bl
lea esi, [esi + ebx*2]
mov word [ebp], cx
add ebp, 2
inc edx
cmp eax, edx
jne 0x43cb90
mov eax, dword [esp]
sub eax, edx
mov edx, eax
mov ebx, dword [esp + 0x30]
mov ecx, dword [esp + 0x14]
cmp edi, 3
jae 0x43cc05
jmp 0x43cc71
mov word [ecx], 0x5c
add ecx, 2
add esi, 2
jmp 0x43cbf3
lea edi, [esi + 2]
xor eax, eax
cmp word [edi], 0
sete al
jmp dword [eax*4 + 0x44ddb4]
add esi, 4
mov edi, esi
jmp case.0x43cab9.36
mov ebp, ecx
mov dword [esp + 0x10], esi
cmp edi, 3
jb 0x43cc71
mov dword [esp + 0x14], ecx
xor eax, eax
mov dword [esp], edx
nop
nop
movzx ecx, word [esi]
xor edx, edx
test cx, cx
setne dl
lea ebx, [esi + edx*2]
mov word [ebp + eax*2], cx
movzx ecx, word [esi + edx*2]
xor edx, edx
test cx, cx
setne dl
lea esi, [ebx + edx*2]
mov word [ebp + eax*2 + 2], cx
movzx ecx, word [ebx + edx*2]
xor edx, edx
test cx, cx
setne dl
lea ebx, [esi + edx*2]
mov word [ebp + eax*2 + 4], cx
movzx ecx, word [esi + edx*2]
xor edx, edx
test cx, cx
setne dl
lea esi, [ebx + edx*2]
mov edx, dword [esp]
mov word [ebp + eax*2 + 6], cx
add eax, 4
cmp edx, eax
jne case.default.0x43cc8d
mov ebx, dword [esp + 0x30]
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
lea ecx, [ecx + edi*2]
lea edi, [esi + edi*2]
mov word [ecx], 0
movzx ebp, word [edi]
xor eax, eax
test bp, bp
setne al
mov esi, edi
jmp dword [eax*4 + 0x44dd74]
xor eax, eax
cmp word [ebx], 0
sete al
jmp dword [eax*4 + 0x44de94]
xor eax, eax
cmp word [ebx + 2], 0x3a
sete al
jmp dword [eax*4 + 0x44de9c]
mov dword [ebx], 0x5c
xor eax, eax
cmp word [ebx + 2], 0x3a
sete al
jmp dword [eax*4 + 0x44de9c]
xor eax, eax
cmp word [ebx + 4], 0
sete al
jmp dword [eax*4 + 0x44dea4]
mov dword [ebx + 4], 0x5c
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov al, 1
jmp dword [0x44deb4]
add esp, 0x18
pop esi
pop edi
pop ebx
pop ebp
ret
mov esp, 0xbc460043
inc ebx
add dh, cl
rol byte [ebx], 0xa9
mov esp, 0xc0ba0043
inc ebx
add byte [ebp - 0x43], dl
inc ebx
add byte [eax + 0x790043c0], dh
mov ebp, 0xc09a0043
rol byte [ebx], 0xc9
rol byte [ebx], 0xc9
mov esi, 0xc0900043
inc ebx
add byte [edx], cl
mov edi, 0xc07b0043
rol byte [ebx], 0xcc
rol byte [ebx], 0xcc
mov edi, 0xc0620043
inc ebx
add byte [eax], ah
rol byte [ebx], 0x52
rol byte [ebx], 0x62
rol byte [ebx], 0x6f
rol byte [ebx], 0x7b
rol byte [ebx], 7
rol dword [ebx], 0xf
rol dword [ebx], 1
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [edi], cl
rol dword [ebx], 1
add byte [eax], al
add byte [eax], dh
rol dword [ebx], 0x30
rol dword [ebx], 0x32
rol dword [ebx], 0x30
rol dword [ebx], 7
rol dword [ebx], 0x41
rol dword [ebx], 0x60
rol dword [ebx], 0x4f
rol dword [ebx], 1
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [edi - 0x3f], cl
inc ebx
add byte [eax - 0x3f], ah
inc ebx
add byte [eax + 0x700043c1], al
rol dword [ebx], 0x70
rol dword [ebx], 0x70
rol dword [ebx], 0x72
rol dword [ebx], 0xd0
rol dword [ebx], 0xd0
rol dword [ebx], 0xd2
rol dword [ebx], 0xd0
rol dword [ebx], 0xf0
rol dword [ebx], 0xe1
rol dword [ebx], 0xf0
rol dword [ebx], 0xf0
rol dword [ebx], 0xf6
rol dword [ebx], 0xf0
rol dword [ebx], 0x32
ret 0x43
ret
int3
retf 0x43