Function at 0x40b014
Capabilities:
Check os version
Encrypt data using aes mixcolumns step

Disassembly:
mov ebx, dword [esi + 8]
mov ax, word [ebp + eax]
lea esi, [esi + 0xc]
js 0x405eef
jns 0x404d7e
movsb byte es:[edi], byte [esi]
cmpsb byte [esi], byte es:[edi]
jns 0x405eef
and eax, 0x4768d7e
pushfd
mov dword [esp], esi
push 0x1c3ef66
pop esi
js 0x43b2fb
jns 0x404d9e
xchg ebp, ebp
dec dword [edi]
mov dword [edi + 0x65], edx
add eax, dword [eax]
jns 0x43b2fb
add eax, 0x24448ff7
cld
pop ebp
ret
mov ebx, dword [ebp + 0x44]
mov eax, dword [esi + 4]
mov ch, ch
mov edx, dword [esi + 8]
mov eax, dword [ebp + eax]
lea esi, [esi + 0xc]
sub dword [ebx + edx], eax
shr cl, 0x40
jmp dword [esi]
lodsb al, byte [esi]
inc eax
in eax, dx
inc eax
shl ebp, 0x20
mov eax, dword [ebp + 0x44]
mov edx, dword [esi + 4]
mov ebx, dword [esi + 8]
mov al, byte [eax + edx]
push edx
pop edx
lea esi, [esi + 0xc]
jne 0x430ac6
je 0x405102
push esi
call fcn.0042f9b3
push 0x41e072
ret
mov dword [ebp + ebx], eax
jmp dword [esi]
cmp eax, 0x46b1e1
jl 0x420cc0
jge 0x405288
nop
cpuid
ret 0x6656
push esi
xchg di, cx
xchg cx, di
call fcn.0042d815
add bl, 0
add esp, 4
test al, al
jb 0x440116
je 0x405307
mov di, di
jne 0x4052b4
mov edi, 0x566aef60
push esi
call fcn.00422200
cmp esi, esi
add esp, 4
test al, 2
jb 0x44013c
je 0x405307
jne 0x4052d6
pop ecx
bound esp, qword [esi - 0x43ba7454]
mov eax, dword [ebp - 0x44]
push eax
call fcn.00445ea0
jmp 0x4052e1
push esi
call fcn.0042b172
add esp, 8
pop edi
push edi
pop edi
pop esi
shl bx, 0x20
pop ebx
mov esp, ebp
mov cx, cx
pop ebp
ret
mov dword [ebp - 4], 1
mov edx, dword [0x46b1b9]
cmp dx, 0xffff
jne 0x425355
je 0x40531e
invalid
je 0x425355
add eax, 0xc7f6f5d8
xor esp, dword [0xffff]
jb 0x41afc2
add bh, 0x14
sub bh, 0x14
xor ecx, 0x5131
jb 0x41afdd
shl edx, 6
mov ebp, ebp
shr eax, 0xa
and edx, 0xffff
jb 0x4363e4
add ecx, 0x11
or eax, edx
jb 0x4363eb
and ecx, 0xffff
jb 0x423d48
add edi, 0
xor eax, ecx
jb 0x423d5c
or cl, cl
cmc
xor eax, 0x8450
jb 0x440dcb
call 0x441a5e
xor al, 0xfe
mov ecx, ecx
shl bx, 0x20
shr esi, 0x40
push eax
push 0x42cd24
ret
invalid
test ch, 3
xor esi, esi
jb 0x43bb1c
test ebx, ebx
jb 0x43bb3c
mov edx, edx
ja 0x410fef
jbe 0x4053ec
jge 0x4053b4
mov dh, 0x56
jbe 0x410fef
ficom dword [ebp + 0x40]
inc eax
mov byte [ecx + esi], dl
mov dl, byte [esi]
push ss
mov byte [ebx + eax + 7], dl
cmp eax, edi
jb 0x40c1f1
jae 0x40540c
xchg ecx, eax
push ss
jl 0x40546d
shr al, 0x40
push 0x40aec7
ret
jl 0x4356f1
jge 0x405423
jmp 0x4053f9
jno 0x431947
shl si, 0x20
jo 0x405433
cpuid
nop
ret
jo 0x431947
fstpnce st(1), st(0)
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0x1c]
test eax, eax
jb 0x412aba
je 0x40545c
jne 0x405455
dec eax
stc
pop ebx
int 0x8d
or al, 0x59
lea ecx, [ecx + ebx*2]
shr bp, 0x40
xor eax, eax
jb 0x4100db
test ebx, ebx
jb 0x4100e4
jmp 0x41d2c1
push eax
jle 0x405471
add byte [0xffeb56d0], dh
xor eax, 0xffeb56d0
xchg edi, ebp
xchg ebp, edi
call fcn.00422dff
jno 0x41b055
jo 0x40548c
sbb eax, 0xf83fae4
add bl, 0x5b
add dword [eax], eax
jo 0x41b055
xor dl, 0x8a
push esp
add eax, 0x8aed89f0
invalid
add esp, 0x18
push 0
push esi
call fcn.00414813
add esp, 8
pop edi
push edx
pop edx
pop esi
pop ebx
shr bx, 0x40
mov esp, ebp
pop ebp
ret
push esi
call fcn.0042d815
add esp, 4
test al, al
jb 0x438403
mov dh, dh
shr edi, 0x40
jne 0x4056ad
je 0x405682
cpuid
ret
test di, di
jb 0x43840c
mov word [esi + 0x1e], di
je 0x4056ad
jne 0x40569a
xchg dword [ecx + ebx*2 - 0x14f796], eax
imul al
lodsb al, byte [esi]
sti
add dword [eax], eax
push 8
jmp 0x40569d
push esi
call fcn.00425250
add esp, 8
mov bp, bp
or byte [esi + 0x4c], 1
jb 0x409053
pop edi
jne 0x41f896
je 0x4056c3
inc eax
pop ebx
stc
je 0x41f896
xor eax, 0x35748ba4
add byte [ebx + 0x7126ff36], cl
ret 0x840f
fsub dword [esi - 0x73]
inc esi
sub al, 0x6a
or byte [esi - 0x3f], ah
in eax, 0x20
lea eax, [esi + 0x2c]
push 8
shl bp, 0x20
lea ecx, [ebp - 0x10]
shr dl, 0x40
push eax
push ecx
shl edi, 0x20
call fcn.0043b396
mov al, byte [ebp + 0xc]
call fcn.00427dd7
add eax, 0x88078b78
in al, 0x6a
push cs
mov eax, dword [edi]
mov ah, ah
push 0xe
xchg al, ah
xchg ah, al
push eax
call fcn.00424c65
add dword [eax], eax
or ax, ax
add esp, 8
pop edi
pop esi
shr bl, 0x40
pop ebx
mov esp, ebp
pop ebp
ret
push eax
call fcn.00417d79
add esp, 4
test si, si
jb 0x407545
jne 0x41f30b
je 0x4059dc
sbb byte [ebx], bl
cmp ax, 0x33c
daa
jle 0x4059a4
inc esi
add al, 0x86
mov byte [esi + 0x85e8bf0], 0x66
mov eax, dword [eax]
lea esi, [esi + 0xc]
test word [ebp + ebx], ax
jb 0x43f9a7
jmp dword [esi]
xlatb
pop ecx
shl ch, 0x20
jne 0x41a827
shl dl, 0x20
je 0x405a48
shr bl, 0x40
push eax
push esi
push ecx
push edx
call fcn.00411b59
test al, 0x67
jmp 0x41061a
add esp, 8
mov al, byte [edi + 0x16]
dec eax
jno 0x4418d7
jo 0x405b9f
pop ebp
fsubr qword [bx + di]
jo 0x4418d7
and eax, 0x4a810fa2
rol dword [ecx], 1
add byte [ecx + 0xf0470d2], cl
mov byte [0x800f34c3], al
cmp al, 0xd1
add dword [eax], eax
jno 0x422cf7
mov edx, edx
jo 0x405bb5
cpuid
ret
jo 0x422cf7
and eax, 0x8726ff23
xchg esp, eax
xchg bx, ax
xchg bx, ax
shl bp, 0x20
mov eax, dword [esi + 4]
mov ebx, dword [esi + 8]
lea esi, [esi + 0xc]
cmp byte [ebx], al
jmp dword [esi]
out dx, eax
adc al, 0x88
in eax, dx
mov ecx, ecx
mov eax, dword [esi + 4]
shr si, 0x40
shr bx, 0x40
mov ebx, dword [esi + 8]
lea esi, [esi + 0xc]
sub edi, 0
jae 0x405bf5
or dl, ch
inc esp
jae 0x410150
fcom dword [ecx - 0x15]
jmp 0x405bfe
push eax
mov eax, dword [0x46ac09]
push ecx
push ebp
pop ebp
push edx
push edi
push 0x9c402458
push eax
call dword [0x46b308]
jmp 0x405c19
push edi
push 0x43f907
ret
test ax, 0xf0b3
xor dl, cl
jb 0x416693
clc
add dl, 0x80
mov byte [ebp + esi - 8], dl
inc esi
cmp esi, 8
jl 0x41fb14
jge 0x405c6e
nop
cpuid
ret
js 0x40812f
jns 0x405c78
add al, 0x30
mov dword [eax], edi
shr si, 0x40
mov edx, 0xd4d4d4d4
xchg bx, ax
mov ax, ax
mov ecx, ecx
xchg dl, al
shl ebx, 0x20
xchg al, dl
xchg bx, ax
shr dh, 0x40
shr bx, 0x40
mov dword [ebp - 0x10], edx
js 0x435fc6
shl si, 0x20
jns 0x405ee7
aas
mov edi, 0x890f39a8
fld dword [eax]
add eax, dword [eax]
jns 0x435fc6
and eax, 0xf6870f79
pop es
add byte [eax], al
ja 0x4066eb
jbe 0x405ef9
cmp eax, 0xec860f1c
pop es
add byte [eax], al
jbe 0x4066eb
invalid
lea esi, [esi + 0xc]
js 0x41d5b6
jns 0x4061a1
shl esp, 1
jns 0x41d5b6
fxch st(0)
mov ch, ch
mov eax, dword [esi + 4]
movzx eax, word [ebp + eax]
cmp dx, dx
add esi, 8
shl eax, cl
add ebx, eax
test ecx, 0x80000000
jb 0x4285c2
jne 0x4247ba
je 0x406643
scasb al, byte es:[edi]
fisubr word [edi + 0xfdb881e]
mov byte [eax], ah
stosd dword es:[edi], eax
add eax, dword [eax]
mov bl, bl
js 0x44116b
mov bp, bp
jns 0x406654
stc
insd dword es:[edi], dx
or ah, bl
jns 0x44116b
xor al, 0x46
jne 0x42b69d
je 0x406668
nop
cpuid
ret 0x840f
je 0x42b69d
invalid
shr cl, 0x40
mov word [esi + 0xbc], di
mov edx, dword [ebp + 0x14]
mov dword [eax], edx
xchg bh, dl
xchg dl, bh
xchg bl, dh
xchg dh, bl
pop edi
shr si, 0x40
shr al, 0x40
pop esi
xor ax, ax
jb 0x422ad0
shl edi, 0x20
pop ebx
lea ebx, [ebx]
mov esp, ebp
pop ebp
ret
pop edi
xchg dh, dl
xchg dl, dh
pop esi
mov ax, 0x17
pop ebx
jno 0x4099ff
jo 0x406931
cpuid
ret
jo 0x4099ff
add eax, 0x968966f4
mov esp, 0xe8000000
test eax, 0xc000030b
ljmp 0x8856
add ebx, dword [edx - 0x3f]
out 0x20, eax
mov eax, dword [esi + 4]
push 0x4334d0
ret
fldpi
invalid
mov eax, 0x5800f0e
add byte [ecx], 0
pop ebp
ret
jmp 0x41eb32
lea ecx, [ebp - 0x10]
push 6
shr cx, 0x40
lea edx, [ebp - 0x134]
shl esi, 0x20
jmp 0x406f89
push ecx
jmp 0x406f8c
push edx
call fcn.004388ad
add esp, 0x18
push ecx
pop ecx
mov dword [ebp - 8], eax
test ax, ax
jb 0x43854b
push 0
push ecx
mov bp, bp
push ebx
pop ebx
call fcn.0042c932
mov dx, dx
lea edx, [ebp - 0x11c]
push 0
mov si, si
jmp 0x407177
push edx
call fcn.00442838
lea eax, [ebp - 0x11c]
push 0x1e
push eax
call fcn.0042410f
mov al, byte [ebp - 0x62]
or esi, esi
add esp, 0x40
add cx, 0
cmp al, 1
push 0x40b8a5
ret
jno 0x43abfb
jo 0x40722d
jo 0x43abfb
jmp 0x430e7d
mov al, byte [ebp + 0xb]
shr di, 0x40
push esi
xchg cx, si
mov al, al
xchg si, cx
jmp 0x416fc3
daa
mov ecx, 0x40e8c166
mov cl, bl
rcr byte [edi], cl
jmp dword [esi]
and eax, 0x38850fa3
inc ebx
add dword [eax], eax
je 0x407552
cwde
movsb byte es:[edi], byte [esi]
in al, 0xf
test byte [0xda000143], ch
xor cl, byte [ebp - 0x74fbdb9c]
lea esp, [esp + 4]
mov ecx, dword [esi]
je 0x41b885
fidiv dword [edx]
test byte [ebp - 0x30], 1
jb 0x442ba3
je 0x438d36
jne 0x407755
push esi
pop ds
mov edi, dword [ebp + 8]
mov word [ebp - 0x28], ax
mov eax, dword [ebp - 0x14]
cmp eax, 0x10000
jle 0x407775
jg 0x407770
sub eax, 0xb811b6e6
invalid
mov eax, 0xffff
lea esi, [esi]
lea edx, [ebp - 0x18]
push esi
push edx
jmp 0x40777e
push eax
push edi
lea eax, [ebp - 0x2c]
push 6
push eax
call 0x409a29
mov edx, dword [ebp - 0x18]
mov eax, dword [esi]
shr bl, 0x40
lea ecx, [ebp - 0x20]
and edx, 0xffff
jb 0x442bab
lea ebx, [ebx]
push ecx
mov ecx, dword [ebp - 4]
sub edx, 4
push 1
push edx
sub si, 0
add eax, 0x74
jmp 0x4077be
push edi
push eax
xchg di, dx
xchg dx, di
jmp 0x4077c9
push ecx
call fcn.00445020
add esp, 0x30
test ax, ax
jb 0x40dd6b
je 0x429d10
jne 0x4077e9
in eax, 2
mov edx, dword [ebp - 4]
mov ax, ax
jmp 0x4077f0
push edx
shl ebx, 0x20
xchg dx, bp
xchg bp, dx
call fcn.0042c2fe
mov eax, dword [ebp + 8]
push eax
call fcn.0042c2fe
mov ecx, dword [esi]
shr bp, 0x40
push 0x20
jmp 0x407812
push ecx
ja 0x43368a
jbe 0x40781f
jl 0x4077a4
adc dword [edi], ecx
xchg byte [ebp - 0x42], ah
add al, byte [eax]
jbe 0x43368a
fnstenv [edx + 0x16c35d5b]
jp 0x4077b3
invalid
pop ebx
pop ebp
ret
ret 0xd086
retf
mov dword [0x89f3ff66], 0xc1664065
out 0x20, eax
jmp dword [esi]
jmp 0x4119fa
or cx, cx
xor al, 0x40
jne 0x43c705
xchg bx, bp
xchg bl, cl
xchg si, di
shr ecx, 0x40
xchg di, si
shl ax, 0x20
xchg cl, bl
xchg bp, bx
je 0x4081d0
push ebp
movsb byte es:[edi], byte [esi]
ja 0x437b54
jbe 0x4081dc
cpuid
nop
ret
jbe 0x437b54
sbb byte [esi + 0x3d817e8], 0
add esp, 0x10
test ax, ax
jb 0x413600
je 0x43a1e5
jne 0x408204
fst st(2)
sbb dword [ecx], ebx
push ebx
call fcn.0042c2fe
add esp, 4
mov ax, 0xcf
pop edi
jmp 0x43a1da
mov edx, dword [esi]
push 0
jmp 0x408241
push edx
call fcn.0042c932
mov eax, dword [esi]
jmp 0x40824b
push eax
call fcn.0040db60
mov ecx, dword [esi]
mov di, ax
and edi, 0xffff
jb 0x4314a7
push 0x4082c6
ret
mov edi, dword [edi + edx*8 + 4]
test edi, edi
jb 0x405a16
mov al, al
jne 0x4392ef
je 0x40838e
pop ebp
bound edi, qword [ebp + 0x12]
mov eax, dword [0x46aed1]
xor edx, edx
jb 0x405a35
clc
jno 0x43a9ab
jo 0x4083a7
shl ah, 1
imul ecx, dword [edi], 0xffffff80
invalid
jo 0x43a9ab
fsubr st(5)
mov ebx, dword [ebp + 0x44]
mov edx, dword [esi + 8]
jmp 0x42f944
mov eax, 0x81
and edx, 0xffff
jb 0x416fc1
stc
jb 0x4083d3
bnd jb 0x40844c
jb 0x40ba6f
xor eax, 0x24448fa3
cld
mov eax, esi
mov dword [0x46ab55], 1
and eax, 0x1fffffff
jb 0x41a26d
pop esi
or eax, 0xa0000000
jb 0x41a271
ret
mov cl, byte [edi]
test dword [edx], eax
ja 0x408441
add byte [esp + eax - 0x28], dh
add al, 0xd8
fcmovbe st(0), st(7)
jle 0x408439
push edi
xchg dx, di
xchg di, dx
call fcn.00407a24
add esp, 4
stc
jb 0x408468
nop
cpuid
ret
jb 0x4156a9
and eax, 0xc768d70
test esp, edx
jae 0x40847b
lahf
pop es
nop
jae 0x40b6f3
jae 0x40b6f5
add byte [eax], al
cmp dx, dx
cmp bl, 2
mov di, di
jne 0x44190b
je 0x408496
imul eax, dword [ebp - 0x183f4368], 0x20
shl bh, 0x20
xchg di, ax
xchg di, ax
mov cx, word [esi + 0x20]
call fcn.004322c7
invalid
fidivr word [eax]
xchg ebx, edx
xchg edx, ebx
mov eax, dword [esi + 4]
mov ebx, dword [esi + 8]
mov ebx, dword [ebp + ebx]
lea esi, [esi + 0xc]
mov dword [ebx], eax
jmp dword [esi]
jmp 0x4086c6
push edx
push ecx
call fcn.0042c2fe
pop ebx
mov esp, ebp
push 0x4163ce
push esi
pop esi
mov byte [esi + 0xbb], 0
ja 0x42d2bb
jbe 0x4087be
invalid
jbe 0x42d2bb
fisubr dword [esi + 0x66]
shr esi, 0x40
push esi
ja 0x4207d0
jmp 0x43ba42
test ebx, ebx
jb 0x434fff
jle 0x43ba45
shl cl, 0x20
jg 0x40896d
int1
xchg ecx, eax
sbb ecx, dword [ebx - 0x7af003b3]
cli
out dx, al
add byte [eax], al
mov ecx, dword [ebp - 4]
jne 0x417870
je 0x40897b
mov eax, dword [0x840f300f]
out dx, eax
out dx, al
add byte [eax], al
je 0x417870
invalid
mov edi, edi
push eax
mov ax, bx
pop eax
mov byte [ebp + eax - 0x10], dl
mov bh, bh
mov di, di
inc eax
or bx, bx
test ch, 0xd5
cmp eax, 8
jno 0x428b6f
jo 0x4089ab
cpuid
sub eax, ebx
jo 0x428b6f
and eax, 0x40deca77
add byte [eax], bh
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add ch, ah
pop ecx
inc ebx
add byte [eax], cl
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
in eax, 0x59
inc ebx
add byte [eax], bh
add byte [eax], al
add byte [eax], cl
add byte [eax], al
lahf
cmpsd dword [esi], dword es:[edi]
inc ecx
add byte [eax + eax], al
add byte [edx + eax*8], ah
inc edx
add cl, dh
jp 0x408a27
add byte [0x3a7fc3ab], dh
ret
jmp dword [esi]
mov ebx, dword [esi + 8]
mov ax, word [ebp + eax]
lea esi, [esi + 0xc]
xor word [ebx], ax
jb 0x4264a0
jmp dword [esi]
push cs
dec eax
mov ax, ax
push 0x42ce33
ret
invalid
mov ecx, dword [ebx + 4]
xor eax, eax
jb 0x434c4b
test ebx, 0x635cefec
test ecx, ecx
jb 0x41da29
jbe 0x431fd3
mov dh, dh
ja 0x408ef7
xor dl, byte [edi + 0x7f]
add ebx, 0x14
push 0x40ee1f
ret
call fcn.00424c65
add esp, 8
pop edi
shr dx, 0x40
pop esi
pop ebx
shr ch, 0x40
mov esp, ebp
pop ebp
ret
mov eax, dword [esi]
push pe_nt_image_headers32
lea eax, [eax]
lea ecx, [ebp - 0x10c]
jmp 0x40932e
push eax
push ecx
call fcn.0043b396
lea edx, [ebp - 0x10c]
add ebp, 0x49b1b9e4
sub ebp, 0x49b1b9e4
test ecx, 0x100
jb 0x438114
jne 0x444181
je 0x4093b3
xchg ecx, eax
xchg ebx, eax
in al, 0x6b
ja 0x434d1f
jbe 0x4093bf
nop
cpuid
ret
jbe 0x434d1f
xor eax, 0x42b71bcb
add byte [eax], al
inc ecx
add byte [eax + 0x40], al
add byte [ecx], al
add byte [eax], al
add al, 0
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], al
out dx, eax
jae 0x40942b
add byte [ebx - 0x5fffbc9f], ah
inc ecx
add byte [ebp + 0x34000000], al
add byte [eax], al
add byte [edx + 0x41], al
add byte [ebx - 0x1b], ch
inc edx
add byte [ebx], bl
mov bh, 0x42
add byte [eax], al
inc edx
add byte [eax], al
xor al, 0
add byte [eax], al
add byte [edx], al
add byte [eax], al
add byte [ecx], ah
cmp byte [eax], 0
add byte [eax], al
add byte [ecx], ah
add byte [eax], al
inc dword [eax]
add byte [eax], al
xor al, 0xc9
inc eax
add byte [edx + eax*2 + 0x400041], bl
add byte [eax], al
xor al, 0
inc eax
add byte [eax], al
add byte [eax + eax], dh
add byte [eax], al
pop ebp
cmovno eax, dword [eax]
inc esp
add byte [eax], al
add byte [edx + edx*2 + 0x77170041], dh
imul ecx, dword [eax + 0x42], 0x200
add byte [eax], dh
add byte [eax], al
add byte [esi], al
push esp
inc ecx
add al, dl
sbb al, byte [ecx]
or cl, byte [eax - 0x6b9effbe]
inc eax
add byte [edi + ebp + 0xfcb76ec], dh
inc ecx
add byte [eax], al
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
sbb esi, dword [edi + 0x61000042]
add byte [eax + 0x38], al
add byte [ecx], ah
add byte [eax], al
mov esp, 0
adc byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
xor al, 0
add byte [eax], al
cwde
aaa
inc ebx
add byte [ebx], bl
mov bh, 0x42
add byte [eax], al
popal
add byte [eax + 0x38], al
add byte [ecx], ah
add byte [eax], al
mov esp, 0
adc al, byte [eax]
add byte [eax], al
inc edx
add byte [eax], al
xor byte [eax], al
add byte [eax], al
xor al, 0xc9
inc eax
add dh, bh
fiadd dword [edx]
dec eax
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add dh, bh
fiadd dword [edx]
cmp byte [eax], al
add byte [eax], al
dec eax
add byte [eax], al
add byte [edx + eax*2 + 0xc0041], bl
add byte [eax], al
xor al, 0
add byte [eax], al
pushal
sbb byte [ebx], al
inc eax
add byte [eax], al
add byte [eax + eax], dh
add byte [eax], al
pop es
xchg edx, eax
inc ebx
add byte [eax + eax], al
add byte [eax], al
xor byte [eax], al
add byte [eax], al
adc eax, ebp
inc edx
add bh, bh
add byte [eax], al
add byte [eax + eax], dh
add byte [eax], al
inc esp
bound eax, qword [ecx]
rol byte [ebp - 0x3aecffbd], 1
inc edx
add bh, bh
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [edx + 0x41], al
add dl, bl
test dword [ebx], eax
and eax, 0x300041ec
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [0x30004266], bh
add byte [eax], al
add byte [eax + eax], dh
add byte [eax], al
inc esp
bound eax, qword [ecx]
call 0x9c40d8bf
inc edx
inc ecx
add byte [eax], al
add byte [eax], al
cmp al, 0
add byte [eax], al
rol byte [0xc0042], 0
add byte [eax], dh
add byte [eax], al
add dl, cl
fiadd word [eax]
xor byte [eax], al
add byte [eax], al
cmp al, 0
add byte [eax], al
xor byte [eax + 0x41], bl
add byte [edx], dl
add byte [eax], al
cmp al, 0
add byte [eax], al
adc eax, ebp
inc edx
add bh, bh
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
inc esp
bound eax, qword [ecx]
int1
test dword [ebx], eax
cmovge eax, dword [eax]
inc esp
xchg ecx, eax
inc ebx
add byte [eax + eax], bh
add byte [eax], al
cmp al, 0
add byte [eax], al
inc esp
bound eax, qword [ecx]
cdq
xchg ebp, eax
inc eax
add byte [eax + 0xf], dh
mov byte [0x416244c3], al
add byte [ecx + eax*2 - 0x3b7effbd], bl
or al, 0
add byte [eax], al
add esp, 0xc
mov eax, esi
mov ch, ch
pop esi
pop ebp
ret
invalid
mov word [esi + 0xbc], dx
call fcn.0042e674
ja 0x42bf7a
push 0x416562
ret
mov ax, word [ebp + eax]
mov edx, edx
jne 0x4246a1
je 0x409d9e
add eax, 0xa4870fd9
add dword [bx + si], eax
jbe 0x409db2
or esi, ebp
xchg ecx, eax
add byte [edi], cl
xchg byte [eax - 0x27fffe99], bl
mov ah, 9
ret 0x820f
jbe 0x420550
fdiv dword [ecx + ecx - 0x4f7df03e]
cmpsb byte [esi], byte es:[edi]
add dword [eax], eax
or ch, ch
ja 0x430c4c
jbe 0x409dcf
push cs
in al, 0xb4
jbe 0x430c4c
xor al, 0xe2
xchg bx, dx
xchg dx, bx
push esi
call fcn.00412536
xor ecx, ecx
jb 0x41d73a
mov cx, word [edi + 0x24]
jmp 0x4377e8
jmp 0x43a918
mov edx, dword [ebx]
jmp 0x409f92
push eax
jmp 0x409f95
push edx
call fcn.00424c65
add esp, 8
pop edi
pop esi
jno 0x43fcef
jo 0x409fb0
mov edx, 0xf2c53a5
cmp byte [ecx], 0x5d
add eax, dword [eax]
jo 0x43fcef
invalid
mov bx, bx
cmp si, si
jmp 0x408481
call edi
test eax, eax
jb 0x443539
mov dword [ebp - 0x18], eax
je 0x4211a8
shr ebp, 0x40
jne 0x409fe0
and ecx, dword [edi - 0x554a9784]
inc esi
add byte [ebx + 0x66], dl
shl ebx, 0x20
push str.SetupDiEnumDeviceInterfaces
push ebx
shl bx, 0x20
call edi
test eax, eax
jb 0x441961
mov dword [ebp - 0x1c], eax
je 0x4211a8
jne 0x40a002
pop esp
and al, 0x76
push str.SetupDiGetDeviceInterfaceDetailA
mov cx, cx
jmp 0x40a00b
push ebx
call edi
test eax, eax
jb 0x44196a
mov dword [ebp - 0x14], eax
je 0x4211a8
jne 0x40a026
add byte [eax - 0xa97eba1], dh
stosb byte es:[edi], al
inc esi
add byte [esi - 0x1d792c], al
shl dh, 0x20
push str.SetupDiDestroyDeviceInfoList
xchg ah, dl
xchg dl, ah
push ebx
shl dh, 0x20
call edi
test eax, eax
jb 0x43adad
shl edi, 0x20
mov dword [ebp - 0x10], eax
je 0x4211a8
mov bh, bh
jne 0x40a051
movsb byte es:[edi], byte [esi]
pop ebx
add byte [eax], ch
adc al, 0
add byte [edx], ch
push 0x1400
push 0
push 0x4b8100
call fcn.0040ec7f
add esp, 0xc
shr cx, 0x40
push 0x12
push 0
push 0
shr dh, 0x40
push 0x45b010
call dword [ebp - 0x18]
mov dx, dx
mov edi, eax
add edi, 0
jno 0x40a089
mov esi, dword [esi + 4]
mov esi, dword [esi]
mov ebx, ebx
jmp dword [esi]
shl dh, 0x20
mov cl, byte [ebp + 0x34]
mov ebx, dword [esi + 4]
jmp 0x416c54
xor al, 0x31
jno 0x436dbf
jo 0x40a885
xchg esi, eax
jbe 0x40a8fc
jo 0x436dbf
mov ah, ah
xchg esi, eax
xchg esi, eax
mov ebx, dword [ebp + 0x44]
mov bh, bh
mov edx, dword [esi + 8]
mov ecx, dword [esi + 4]
shr cx, 0x40
lea esi, [esi + 0xc]
shl byte [ebx + edx], cl
mov bh, bh
shr ebp, 0x40
jmp dword [esi]
push eax
xchg ebp, eax
invalid
lea esi, [esi + 0xc]
and dword [ebx], eax
jb 0x4234d3
jmp dword [esi]
push edx
push ebp
mov cx, cx
shl edx, 0x20
js 0x411852
push edi
pop edi
jns 0x40ac62
and eax, 0xf649c9f
mov edx, ebp
imul eax, dword [eax], 0
jns 0x411852
mov esi, dword [esi + 4]
shr al, 0x40
jmp dword [esi]
mov eax, dword [ebp + 0x14]
inc ebx
inc esi
cmp ebx, eax
jb 0x43a212
jae 0x40aca1
test bh, 0x4a
test bl, 0x3f
jb 0x41b499
je 0x40acd8
jne 0x40acb8
dec ebp
nop
mov bh, 0x6a
add cl, byte [ebp - 0x7699c1fc]
shr byte [eax + 0x63], cl
mov bl, 0x46
add bh, bh
invalid
push 2
lea eax, [esi + edi]
mov dx, dx
push 0x46b363
push eax
call fcn.0043b396
add esp, 0xc
add esi, 2
mov edi, edi
mov edx, dword [ebp - 4]
lea ecx, [ebp + 0x1c]
jmp 0x40ace1
push ecx
jmp 0x40ace4
push edx
call fcn.0043fcb0
add esp, 8
test eax, eax
jb 0x41b4a0
mov dword [ecx - 0x75], 0x468b0856
add al, 0x8d
jbe 0x40ad75
xor dword [ebx + edx], eax
jb 0x413d88
push 0x43a0e8
ret
inc ebx
add bl, al
add eax, 0x8568bff
mov edx, dword [esi + 8]
mov eax, dword [ebp + eax]
lea esi, [esi + 0xc]
jmp 0x4205b5
fstp dword [edi + ecx]
xchg dword [ecx + 0x73], ebx
add al, byte [eax]
jbe 0x40ad97
cpuid
ret
jbe 0x4320ea
ficom dword [edi - 0x40]
in eax, 0x20
mov esp, 0x66880fcf
rol dword [eax], 0
jns 0x40ae31
add edx, ebx
or eax, 0x5a890f86
rol dword [eax], 0
jns 0x416f91
xor al, 0x32
ja 0x40b038
jbe 0x40ae43
mov dh, 0x53
jbe 0x40b038
fidivr dword [esi - 0x3d]
daa
retf 0x6855
cmp dl, dl
xor edx, edx
jb 0x42a737
shl al, 0x20
shr bl, 0x40
mov eax, dword [ebx]
mov ecx, dword [ebx + 4]
cmp esi, edx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], ecx
jne 0x4224c4
je 0x40aff8
popal
loopne 0x40b008
cmp al, 0x8b
inc ebp
adc byte [ebp - 0x27b27300], cl
mov eax, dword [ebp + 0x10]
lea eax, [eax]
lea ecx, [ebp - 0x28]
ja 0x41034d
jbe 0x40b00c
out 0x12, al
cmp dword [ebx + 0x533b860f], ebp
add byte [eax], al
jbe 0x41034d
xor eax, 0x24448fc6
cld
lea eax, [ebp - 0x100]
push 0x10c
shr cl, 0x40
xchg ah, bl
xchg bl, ah
push eax
call fcn.0042410f
call fcn.0042e3d1
and eax, 0x43d66fb
add byte [edi], cl
test dword [edi - 0x6d6dffff], edx
cmp ax, 4
jne 0x4297d6
xchg edx, eax
xchg edx, eax
je 0x40b049
cdq
stosb byte es:[edi], al
aaa
je 0x4297d6
sbb byte [ebx], 0x8b
inc ebp
cld
stc
xchg ecx, ebp
xchg ebp, ecx
jb 0x40b05f
or al, 0x4a
fisttp word gs:[edi]
sbb byte [ebx], 0x3c
add eax, dword [eax]
jb 0x43ec80
ficomp dword [edi + ecx*4]
inc esp
and al, 0xfc
mov byte [esi + 0xbb], 0
push eax
lea ebx, [ebx]
push esi
jno 0x417c80
jo 0x40b083
invalid
jo 0x417c80
and eax, 0xe2e878
add al, byte [eax]
add esp, 4
test ax, ax
jb 0x42d354
je 0x4104b7
jne 0x40b0aa
mov ch, 0xb8
mov dword [bp + 0x28], ebx
mov dword [esi + 0x28], ebx
mov dword [esi + 0x2c], ebx
push edi
shr bh, 0x40
call fcn.0042bb2f
or dx, dx
add esp, 4
mov si, si
mov eax, dword [esi + 4]
mov ebx, dword [esi + 8]
xchg si, cx
xchg cx, si
lea esi, [esi + 0xc]
add dl, 0
test byte [ebp + ebx], al
jb 0x40f621
mov ch, ch
mov edx, edx
jmp dword [esi]
and ebp, dword [esi]
mov ax, ax
mov eax, dword [esi + 4]
mov ebx, dword [esi + 8]
push 0x435528
ret
add eax, 0xff0bd3cd
call 0xef0218f6
call fcn.00442838
call fcn.004227cf
xor eax, 0x24448fba
pop dword [esp - 4]
mov bl, bl
shl byte [ebx + edx], cl
shr ebx, 0x40
jmp dword [esi]
jmp 0x40b4e5
call 0x419127
fldcw word [esi]
add byte [ebp + ebx], al
push edx
pop edx
jmp dword [esi]
cmp eax, edx
shl bp, 0x20
je 0x40ba9f
jne 0x40ba7f
cdq
pop ebx
mov dx, word [edi + 2]
clc
add edi, 2
inc ebx
cmp dx, 0xffff
jne 0x425369
je 0x40ba9b
cmpsb byte [esi], byte es:[edi]
xchg ebx, eax
cmpsd dword [esi], dword es:[edi]
xchg dl, bl
xchg bl, dl
cmp word [ebx + ebx + 0x46b1b9], 0xffff
jne 0x43d705
je 0x40bab3
cmp byte [ebx], al
je 0x43d705
add eax, 0x411d13e1
add byte [eax - 0x43], cl
inc ebx
add ch, bh
inc edx
add ch, cl
mov edx, 0x79a50040
std
inc edx
add byte [eax - 0x43], cl
inc ebx
add byte [edx + 0x30458b0b], al
shr ax, 0x40
call fcn.00433fb1
or bl, 0x69
dec eax
inc edx
add byte [edx], al
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [esi], al
push esp
inc ecx
add byte [ecx + 0x11], ah
inc ebx
add byte [edx], cl
mov byte [edx], al
add eax, 0x900040bb
cpuid
ret
mov ebx, dword [esi + 8]
shl al, 0x20
mov al, byte [ebp + eax]
lea esi, [esi + 0xc]
call fcn.0040e2c5
xor eax, 0xf169e9ab
add byte [eax], al
add eax, 0xc1f7b4
add dword [eax], eax
add byte [edi], cl
cmp byte [edx], 0x32
add dword [eax], eax
jmp 0x41addd
outsd dx, dword [esi]
test dword [edi], 0x20f388
add byte [ecx + 2], bh
xor ebx, esp
jns 0x40ddbf
mov ecx, dword [ebp + 8]
push eax
pop eax
lea eax, [ebp + 8]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
ja 0x414ef3
jbe 0x40bcf2
das
fisttp qword [edi]
xchg bl, bh
xchg ecx, eax
add byte [eax], al
jbe 0x414ef3
fdivr dword [edx + 0x12ad9e9]
add byte [0xfc0310b], ah
adc bl, 0xbd
add byte [eax], al
pop esi
ret
xor eax, eax
jb 0x417adc
pop edi
mov eax, 1
pop esi
ret
xor eax, 0x37fe8ee
add al, byte [eax]
add esp, 4
mov esi, esi
mov ecx, dword [ebp + 8]
jne 0x40877e
je 0x40bf96
nop
cpuid
ret 0x840f
je 0x40877e
mov ebp, 0xfc0315e
add byte [0x5b00027d], 0x5d
mov ax, ax
lea edx, [ebp - 8]
sub ecx, edx
mov dl, byte [ebx + eax + 8]
shr ch, 0x40
lea esi, [ebp + eax - 8]
ja 0x4053f4
jbe 0x40c208
nop
cpuid
ret 0x860f
jbe 0x4053f4
fmul st(6)
lea esp, [esp + 4]
mov ebx, dword [esi + 8]
xchg cx, si
xchg si, cx
mov eax, dword [esi + 4]
lea esi, [esi + 0xc]
push ebp
pop ebp
sub dword [ebp + ebx], eax
shl bh, 0x20
jmp dword [esi]
lea esi, [esi + 0xc]
test word [ebx + edx], ax
jb 0x433cd5
jmp dword [esi]
mov dh, 0x1f
mov eax, dword [esi + 4]
mov ebx, dword [esi + 8]
lea esi, [esi + 0xc]
mov dword [ebx], eax
jmp dword [esi]
insb byte es:[edi], dx
sub ah, byte [esi - 0x3f]
out dx, eax
inc eax
mov eax, dword [esi + 4]
mov ecx, ecx
mov ebx, dword [esi + 8]
lea esi, [esi + 0xc]
mov byte [ebp + ebx], al
jmp dword [esi]
arpl word [edx - 0x74fbb975], ax
pop esi
or byte [ebp - 0x78f0f38a], cl
and ch, byte [esi - 0x1179ffff]
xchg ch, dh
jbe 0x40c2f8
mov bh, 0xf
mov byte [0x12860fc3], al
scasb al, byte es:[edi]
add dword [eax], eax
jbe 0x427110
xor eax, 0x3126ff8c
pop edx
mov bx, bx
xor dword [edx + 0x66], ebx
mov ebx, ebx
shr bl, 0x40
mov ebx, dword [ebp + 0x44]
push ecx
pop ecx
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
lea esi, [esi + 0xc]
and byte [ebx + edx], al
jb 0x438508
mov esi, esi
jmp dword [esi]
inc edi
inc esp
mov dx, dx
mov ebx, dword [ebp + 0x44]
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
ja 0x406194
jbe 0x40c33f
and ch, byte [edi + eax*2 - 4]
jbe 0x406194
cmp ax, 0xffff
je 0x41d233
jne 0x40c396
lds edi, [edx]
sbb bl, bl
cmp ax, 0x102
jb 0x41d233
push eax
pop eax
jae 0x40c3a8
cpuid
ret
mov dword [0x46ac0d], 0
mov di, di
xchg dh, ch
xchg ch, dh
jmp 0x40c3ba
push edi
call fcn.00441ede
add esp, 4
test ax, ax
jb 0x4296e1
push edi
jne 0x4308b2
je 0x40c3dc
movsd dword es:[edi], dword [esi]
in al, 0xe8
loope 0x40c3a0
call fcn.004185c2
add byte [eax], al
mov ecx, dword [ebp + 0x24]
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp + 0x1c]
add esp, 4
xchg ebx, ecx
xchg ecx, ebx
push ecx
shl ebp, 0x20
mov ecx, dword [ebp + 0x18]
push 0x4377b0
ret
jmp 0x4166fd
call 0x442e91
fcom dword [ebp + 0x12bc8166]
cmp word [edx + edx + 0x46aea9], 0xffff
jne 0x41c511
je 0x40c7e0
sub al, 0x56
mov word [edi], bx
jbe 0x40c90f
mov bx, bx
mov edi, edi
xchg ebx, edi
xchg edi, ebx
call fcn.004173e5
fldenv [eax - 0x8f6a73]
invalid
lea edx, [ebp - 0x90]
push edx
xchg cx, dx
xchg dx, cx
jmp 0x40c94a
push ebx
call fcn.004164f6
js 0x43e3ab
jns 0x40c95b
push 0x4a890f05
sbb al, byte [ebx]
add byte [esi + ebp*4], dh
jns 0x43e3ab
xor al, 0xae
jmp dword [esi]
mov eax, dword [ebp + 8]
test eax, eax
jb 0x42eb11
je 0x4177d5
jmp 0x40cf8c
push ebp
mov ebp, esp
sub esp, 0x140
shl esi, 0x20
mov eax, dword [ebp + 0x18]
push ebx
shl dh, 0x20
push edi
lea esi, [esi]
call fcn.00441ede
and eax, 0xffff
jb 0x443521
add esp, 0x10
shl eax, 3
push eax
lea eax, [esi + 0x100]
push eax
mov ax, ax
push edi
call fcn.0042df19
add esp, 4
jmp 0x40d0d7
push eax
call fcn.0043b396
add cx, 0
add esp, 0xc
shl cl, 0x20
jmp 0x40d0ed
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x40d0f6
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
mov eax, 1
pop ebx
pop ebp
ret
shl esi, 0x20
mov ebx, dword [ebp + ebx]
mov ax, ax
lea esi, [esi + 0xc]
xchg dl, al
xchg al, dl
mov dword [ebx], eax
jmp dword [esi]
and eax, 0x20e7c057
cmp si, 4
shl bp, 0x20
jne 0x41da3e
je 0x40dd8e
sahf
imul edi, ebx, 0xfffffff8
sti
clc
cmp ax, 0x350
jae 0x41da3e
jb 0x40dd9f
cpuid
xlatb
ret
mov eax, dword [0x46ac09]
shr dx, 0x40
jmp 0x40dda9
push eax
jne 0x4308ab
je 0x40ddb7
cpuid
ret
je 0x4308ab
invalid
mov ebx, ebx
mov cl, cl
mov eax, dword [esi + 4]
jne 0x416ec5
xchg ch, dl
xchg dl, ch
je 0x40ddd6
cpuid
nop
ret
je 0x416ec5
xor eax, 0x426ee8b1
add byte [eax], al
and eax, 0xffff
jb 0x4314b0
add esp, 0x10
jno 0x43db1c
jo 0x40ddff
jecxz 0x40dd8d
jae 0x40de0f
jo 0x43db1c
adc byte [edi], 0xfd
add al, byte [eax]
add eax, 0x8758bc7
push esi
call fcn.004135bb
add byte [eax], al
add bl, 0
add esp, 4
add eax, esi
push eax
mov al, al
call fcn.0043b396
ja 0x4095a1
jbe 0x40de31
push 0xfc3a20f
xchg byte [edx - 0x49], ch
invalid
jbe 0x4095a1
mov ch, ch
pop esi
pop ebp
ret
cmp cl, 0x3a
mov ecx, ecx
je fcn.00422df5
jne 0x40de61
cpuid
nop
ret
test eax, eax
jb 0x414adb
ja 0x42009f
jbe 0x40de75
xor dword [edi - 0x79f09d94], esp
and al, 0x22
add dword [eax], eax
jbe 0x42009f
shl ch, 0x20
mov ecx, dword [esi]
add esi, 8
and ecx, ecx
jae 0x40de8e
rol esp, 6
jae 0x40de9e
jae 0x431853
cmp dword [edi + 0x25000239], 0xffffffde
mov si, si
and eax, 0xf68966de
mov eax, dword [eax]
lea esi, [esi + 0xc]
adc dword [ebp + ebx], eax
mov edx, edx
jno 0x43d654
mov dx, dx
jo 0x40deb3
sbb al, 0x43
fnstsw word [ecx]
jo 0x43d654
fsubr dword [esi + 0x5448b]
lea esi, [esi + 0xc]
mov dword [ebx], eax
mov edi, edi
jmp dword [esi]
invalid
push esi
call fcn.00422200
add esp, 4
cmp ax, 2
je 0x4056b7
xchg dh, al
xchg al, dh
jne 0x40e318
xlatb
push esi
je 0x40e37f
mov dx, word [edi + 0x1c]
mov edx, dword [edi + 0x1c]
shl cl, 0x20
push edx
push esi
jno 0x443bc1
jo 0x40e32d
cpuid
ret
jo 0x443bc1
invalid
mov cl, cl
mov eax, dword [esi]
jmp 0x40e37b
push eax
mov al, al
call fcn.0042c2fe
add esp, 4
js 0x43100d
jns 0x40e394
jae 0x40e376
jns 0x43100d
add eax, 0xc4d8ae0
js 0x4217eb
mov bp, bp
jns 0x40e3ae
ljmp 0x3789:0xf75b820
jns 0x4217eb
cmp bh, 0x8d
dec ebp
hlt
push eax
lea edx, [ebp - 0x18]
push ecx
jno 0x4320f1
jo 0x40e3fd
or dl, 0xf
sub dh, 0x3c
add al, byte [eax]
jo 0x4320f1
invalid
ret
mov dword [0x344d8a0c], eax
mov ebx, dword [esi + 4]
lea esi, [esi + 8]
shr word [ebp + ebx], cl
shl ah, 0x20
shr ah, 0x40
sbb eax, 0x840fce8f
jne 0x40e429
add byte [eax], al
fcomp dword [esi + 0x6a20e3c1]
push es
shl ebx, 0x20
push 6
push ecx
lea edx, [ebp - 0x40]
push edi
push edx
js 0x40b63a
jns 0x40e4ac
xor edi, dword [edi + ecx - 0x77]
mov cl, dl
invalid
jns 0x40b63a
fidiv dword [edi]
add byte [ebp + ebx], al
mov bh, bh
jmp dword [esi]
and edx, edx
jno 0x40e77a
jmp 0xfbc7121
jno 0x41d549
mov dh, dh
js 0x439124
jns 0x40e78c
aad 0xc9
jmp dword [esi]
dec eax
add eax, dword [edi + 0xfd987cb]
mov byte [ecx + 0x79ffffd4], al
add dh, dl
test byte [edi], cl
mov dword [edi - 0x2c], esi
invalid
mov ebx, 0x66c98845
xchg esi, edx
xchg dx, si
mov ecx, dword [esi + 4]
mov dh, dh
mov ebx, dword [esi + 8]
lea esi, [esi + 0xc]
rol byte [ebx], cl
jmp dword [esi]
ret
mov cx, cx
mov byte [esi + 0xba], bl
xchg ah, dh
mov dx, dx
xchg dh, ah
push ecx
pop ecx
mov bl, bl
shl ah, 0x20
mov byte [esi + 0xbb], al
jne 0x404d74
mov esi, esi
je 0x40f04d
sbb eax, dword [edi + ecx - 0x7c]
and dword [ebp - 1], ebx
inc dword [edx + 0x4164a02b]
je 0x404d74
sub byte [ebx], 0xa0
inc ecx
add byte [ecx], dh
push ecx
add byte [eax], al
dec eax
add byte [eax], al
add byte [edx + 0x41], al
add bh, al
and al, byte [edx]
adc al, byte ds:[eax + eax]
je 0x40f0b1
add byte [0xfe840f94], dh
in al, dx
add al, byte [eax]
xchg ah, cl
xchg cl, ah
jne 0x40f082
pushal
rol eax, 0x8d
jbe 0x40f08d
lea esi, [esi + 8]
jmp 0x43f8cd
inc esp
and al, 0xfc
mov ebx, dword [esi + 4]
mov ch, ch
mov eax, dword [ebp + 0x30]
mov edx, dword [ebp + 0x38]
mov ax, ax
lea esi, [esi + 8]
mul word [ebp + ebx]
mov dword [ebp + 0x30], eax
mov esi, esi
mov ch, ch
mov dword [ebp + 0x38], edx
jmp dword [esi]
rcl byte es:[eax - 0xe79317a]
mov ebx, dword [esi + 4]
mov eax, dword [ebp + 0x30]
call fcn.004065c7
fldenv [ecx - 0x75]
inc ebp
inc esp
mov ch, ch
mov edx, dword [esi + 4]
mov ebx, dword [esi + 8]
mov eax, dword [eax + edx]
lea esi, [esi + 0xc]
lea ebp, [ebp]
jmp 0x431318
test bl, 0x79
test byte [ebp + ebx], al
jb 0x4441e0
mov dl, dl
jmp dword [esi]
and byte [ecx], dl
shr edi, 0x40
call fcn.00417bdd
fadd st(7)
mov cx, cx
call fcn.004177a3
and byte [edi - 0x18], 0x6e
into
add dword [eax], eax
add esp, 4
mov eax, dword [ebp - 8]
lea edx, [ebp - 0x910]
cmp eax, edx
je 0x413336
jne 0x40f4ac
jecxz 0x40f464
jmp 0x40f4ac
push eax
call fcn.0042c2fe
call fcn.0041332a
invalid
mov esi, dword [esi + 4]
shl ax, 0x20
mov esi, dword [ebp + esi]
jmp 0x405ba7
sbb al, 0xcb
jbe 0x41eadc
add eax, 0x58c28029
add dl, 0x58
jno 0x43dac5
jo 0x40f5f0
ret
jo 0x43dac5
and eax, 0x24448f77
cld
mov ecx, dword [esi]
add esi, 4
test ecx, 0x1000
jb 0x438107
jne 0x414baa
je 0x40f61c
in eax, dx
imul dword [edi + 0x3440e990]
add eax, dword [eax]
jmp fcn.00442a61
mov ch, 0x54
shr al, 0x40
push 0x40938f
ret
jne 0x429e64
je 0x40f691
dec edi
xchg dword [ebx + 8], edi
shr dl, 0x40
mov al, byte [esi + edi + 1]
xchg ebx, esi
xchg esi, ebx
ja 0x429e4c
jbe 0x40f6a6
cwde
invalid
jbe 0x429e4c
adc eax, ebp
inc edx
add bh, bh
add byte [eax], al
add byte [eax + eax], dh
add byte [eax], al
inc esp
bound eax, qword [ecx]
repne outsd dx, dword [esi]
inc eax
add byte [ebx], bl
mov bh, 0x42
add byte [eax], al
popal
add byte [eax + 0x38], al
add byte [ecx], ah
add byte [eax], al
mov esp, 0
adc al, byte [eax]
add byte [eax], al
inc edx
add byte [eax], al
cmp al, 0
add byte [eax], al
xor al, 0xc9
inc eax
add dh, al
mov cl, 0x40
add dh, al
add byte [eax], al
add byte [0xeb000000], bh
inc ebx
add byte [eax + eax], bh
add byte [eax], al
xor al, 0
add byte [eax], al
inc esp
bound eax, qword [ecx]
push ss
jo 0x40f743
add bl, cl
cmovno eax, dword [eax]
inc eax
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [ebp + 0xf], bl
inc ecx
add byte [eax + eax], bh
add byte [eax], al
invalid
cmp byte [eax], 0
add byte [eax], al
add byte [ecx], ah
add byte [eax], al
add dword [eax], eax
add byte [eax], al
xor al, 0xc9
inc eax
add byte [ebp + 0xf], bl
inc ecx
add byte [eax + eax], al
add byte [edx + edx*2 - 0x66eaffbf], dh
imul ecx, dword [eax + 0x42], 0x200
add byte [eax], dh
add byte [eax], al
add byte [esi], al
push esp
inc ecx
add byte [ebx], ah
inc esp
inc ecx
add byte [edx], cl
mov byte [edx], al
xor edi, 0x4800040
jmp 0x82fd45
loop 0x40f7dc
mov bl, bl
xchg ebp, edi
xchg edi, ebp
xchg bx, bp
xchg bp, bx
mov cl, byte [ebp + 0x34]
mov ebx, dword [esi + 4]
lea esi, [esi + 8]
shr word [ebx], cl
jmp dword [esi]
cmp cl, cl
mov ax, word [ebx + ebx + 0x46b11b]
pop esi
mov ecx, ecx
pop ebx
jno 0x440717
jo 0x40f934
push ebx
fstp dword [edi + ecx - 0x80]
fisttp qword [0x1b250003]
jo 0x440717
and eax, 0xf689661b
jmp dword [esi]
invalid
mov byte [esi + 0xbb], 0
js 0x4185f0
jns 0x40fb0f
nop
cpuid
ret 0x890f
jns 0x4185f0
fstpnce st(6), st(0)
sbb esi, dword [edi + 0x61000042]
add byte [eax + 0x38], al
add byte [ecx], ah
add byte [eax], al
mov esp, 0
adc al, byte [eax]
add byte [eax], al
inc edx
add byte [eax], al
xor byte [eax], al
add byte [eax], al
xor al, 0xc9
inc eax
add byte [edx + eax*2 + 0x90041], bl
add byte [eax], al
xor al, 0
add byte [eax], al
invalid
shl ax, 0x20
mov ax, ax
mov dl, byte [ebp + 0xb]
xchg bh, cl
xchg al, cl
mov ah, ah
xchg cl, al
xchg cl, bh
push esi
mov byte [esi + 0xba], bl
jne 0x41b8e6
je 0x40fcc4
hlt
je 0x41b8e6
xor eax, 0x41a79fe1
add byte [eax], cl
add byte [eax], al
sbb esi, dword [edi + 0x61000042]
add byte [eax + 0x38], al
add byte [ecx], ah
add byte [eax], al
mov edx, 0
adc al, byte [eax]
add byte [eax], al
inc edx
add byte [eax], al
xor byte [eax], al
add byte [eax], al
xor al, 0xc9
inc eax
add byte [ecx + 0x48], ch
inc edx
add byte [ecx], al
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [esi], al
push esp
inc ecx
add byte [eax - 0x74], ch
inc ecx
add byte [edx], cl
mov byte [edx], al
sbb ch, bh
inc eax
add byte [edi], cl
mov byte [0x6b1c390], al
inc edx
add ch, al
lcall 0x43, 0xc5420043
sub al, 0xfd
inc eax
add byte [eax + 0x42c3a20f], dl
lds eax, [ebx]
lds ebx, [edx + 0x30340043]
mov ebx, dword [esi + 8]
mov ecx, dword [esi + 4]
lea esi, [esi + 0xc]
shl dword [ebp + ebx], cl
xchg edi, ebx
xchg ebx, edi
jmp dword [esi]
adc ah, byte [ebp - 0x27bc77f1]
add byte [eax], al
jns 0x40fd57
nop
cpuid
ret 0x890f
jns 0x41d594
and al, al
add esi, 4
test ecx, 0x1000
add esp, 0x44
lea edx, [ebp - 0x23c]
jmp 0x40fda9
push ebx
push edx
call fcn.0043e043
lea eax, [ebp - 0x23c]
jmp 0x40fdb8
push ebx
push eax
shl bp, 0x20
call fcn.00414813
jmp 0x43c7ab
jno 0x43ba2d
jo 0x40fdd6
mov dword [0x800f22b6], eax
push ecx
mov esp, 0x83d90002
mov eax, dword [ebp + 8]
jmp 0x40fde2
jo 0x43ba2d
fld dword [ebx - 0x14f7ba75]
push edx
mov edx, dword [esi + 4]
jmp 0x40fde8
push ecx
mov ecx, dword [ebp - 0xc]
push 0xa
push edx
push eax
mov ah, ah
jmp 0x416e8a
add byte [edi], cl
test byte [ecx + 0x75ffffa8], al
add al, 0x90
jo 0x40fe02
xor dword [edi], ecx
adc byte [esi + 0x53], 2
add byte [edx + 0x4e18e8b9], al
add dword [eax], eax
call fcn.00424c65
jmp 0x40c7c5
jmp 0x427037
mov edx, dword [esi]
xor edx, eax
jb 0x424808
mov dword [esi], edx
mov edx, dword [esi + 4]
or ch, ch
xor edx, ecx
jb 0x413f07
and eax, eax
test edi, edi
jb 0x413f1e
jmp 0x41990d
dec edi
push esp
ror byte [edi], cl
add bl, 0xa2
add al, byte [eax]
xor eax, 0xfc4d8bbf
mov ecx, dword [ebp - 4]
mov ax, word [ebp + 0x10]
mov dx, dx
push ecx
shr bx, 0x40
push esi
mov ebp, ebp
xchg ecx, ebp
xchg ebp, ecx
mov byte [esi + 0xba], dl
xchg bl, al
shr cx, 0x40
mov dl, dl
shl dh, 0x20
shl esi, 0x20
xchg al, bl
mov eax, eax
ja 0x4087a9
mov ax, ax
push edi
xchg dl, bh
xchg ah, bl
xchg bl, ah
xchg bh, dl
pop edi
jbe 0x41012f
nop
cpuid
ret
jbe 0x4087a9
xor al, 0x56
mov esp, ebp
pop ebp
ret
cmp word [ebx], ax
shl esi, 0x20
jmp dword [esi]
call fcn.00431d58
xchg di, cx
shr ebx, 0x40
xchg cx, di
mov cl, byte [ebp + 0xc]
mov ax, ax
mov dx, word [ebp + 0x10]
js 0x41eb0c
jns 0x4101d4
inc ecx
jnp 0x4101f3
jns 0x41eb0c
fmul dword [ecx]
idiv dword [ebx + edi]
push eax
jmp 0x410350
push edx
jmp 0x410353
push ecx
jmp 0x410356
push ebx
call fcn.0041a6f4
mov esi, dword [ebp - 0x28]
add esp, 0x10
xchg di, ax
xchg di, ax
mov dword [ebp - 0x90], esi
lea eax, [ebp - 0x90]
mov dword [ebp + 8], 0x19
push ecx
pop ecx
mov edx, dword [eax]
mov edi, dword [ebp - 0x24]
and bh, bh
add bh, 0x9f
sub bh, 0x9f
add edx, edi
mov ecx, 0x20
mov dword [eax + 4], edx
mov edx, dword [eax]
and edx, 0x1f
jb 0x4339fc
mov edi, esi
sub ecx, edx
add dx, 0
add eax, 4
shl edi, cl
mov ecx, edx
shr di, 0x40
mov ecx, ecx
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x20], edi
mov edi, esi
shr edi, cl
mov ecx, dword [ebp - 0x20]
or ecx, edi
jb 0x425bcd
xor edx, ecx
jb 0x425be3
jne 0x42249b
je 0x4103e8
nop
cpuid
ret
je 0x42249b
invalid
pop esi
jne 0x433679
je 0x410413
push edi
aam 0xb
je 0x433679
xor eax, 0x56f0ff05
push eax
push esi
shl bx, 0x20
push 1
shl esi, 0x20
call fcn.004098b2
mov cl, cl
jmp 0x41dcaf
push edi
call fcn.00434d89
add bx, 0
and eax, 0xffff
jb 0x41e5d7
lea esi, [esi]
push edi
mov dword [esi + 0x28], eax
call fcn.004293a1
add esp, 8
and eax, 0xffff
jb 0x42776b
shr dx, 0x40
mov dword [esi + 0x2c], eax
shr dl, 0x40
jmp 0x40b0b0
cmp dword [ebp + ebx], eax
jmp dword [esi]
push esi
inc edx
mov dx, dx
mov eax, dword [esi + 4]
ja 0x443c34
jbe 0x410573
rcr byte [edi + ecx - 0x7a], 0xbb
add eax, dword ss:[eax]
jbe 0x443c34
xor al, 0xfc
mov eax, eax
mov eax, dword [ebp + 0x44]
mov edx, dword [esi + 4]
mov ebx, dword [esi + 8]
js 0x426377
xchg si, bx
xchg bx, si
jns 0x410596
js 0x4105aa
jns 0x426377
add eax, 0xe488566c
cmp al, al
test al, al
jb 0x4092cd
rol byte [eax + eax*8 - 0x72e57df1], 0xff
invalid
call fcn.0043cb37
fldenv [ecx + eax*4 - 0x3c]
add al, 0
add byte [eax], al
cmp bx, 0x1b
jne 0x4261a5
je 0x4105cf
scasb al, byte es:[edi]
pop es
je 0x4261a5
fimul dword [ecx - 0x3fdf1f3f]
jmp 0x41061d
add esp, 0x1c
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
ret
mov ecx, dword [edi]
inc esi
pop edi
mov word [ecx + 0x1e], si
pop esi
jne 0x4269e3
je 0x41068b
or cl, byte [edi]
mov byte [0x52840fc3], al
arpl word [ecx], ax
add dl, bl
rol esi, 1
xchg byte [ebx], bh
je 0x4269e3
fcmovbe st(0), st(1)
push 0xe
add ecx, 0x74
push eax
push ecx
call fcn.0043b396
mov edx, dword [esi]
push 0
push edx
mov edx, edx
call fcn.00424c65
add esp, 0x20
shr dh, 0x40
pop esi
mov esp, ebp
pop ebp
ret
mov edx, edx
mov al, byte [ebp + 0xb]
mov bx, bx
mov byte [esi + 0xba], bl
mov byte [esi + 0xbb], al
xchg al, dh
xchg dh, al
js 0x43c6f8
mov esi, 0x8b5d55c7
dec esi
add al, 0x8b
pop esi
or byte [ebp - 0x7699f38a], cl
in eax, dx
shr dword [ebx], cl
jmp dword [esi]
dec dword [edi + 0x66]
shl ebp, 0x20
xchg di, ax
xchg di, ax
shr ebx, 0x40
mov ebx, dword [esi + 8]
jno 0x43b3ba
jo 0x410fd8
sbb ecx, dword [edi + ecx]
sbb ah, 0xa3
add al, byte [eax]
jo 0x43b3ba
and eax, 0x88cde8ba
invalid
jle 0x411031
jg 0x410ffb
test dword [ebx - 0x4c], 0x8d20e6c1
inc edi
adc al, 0x8b
push ebp
cld
shl esi, 0x20
lea eax, [edi + 0x14]
mov edx, dword [ebp - 4]
mov byte [eax + 2], 0
xor ecx, ecx
jb 0x43bb46
mov word [eax], 0
mov cl, byte [esi + edx]
inc esi
mov dword [eax - 8], ecx
add eax, 0xc
cmp esi, ebx
jl 0x411001
jge 0x41102f
adc al, 0x21
ret 0x5261
push edx
pop edx
xchg si, di
xchg di, si
mov esi, dword [ebp + 8]
jmp 0x43ba45
test ebx, ebx
jb 0x43bb4f
jle 0x43ba45
jg 0x411055
push eax
inc edi
bound ecx, qword [0x8dfc4d8b]
inc edi
adc al, 0xc0
jmp 0x41109e
mov ecx, dword [ebp - 4]
lea eax, [edi + 0x14]
shr bl, 0x40
mov edx, ebx
mov dh, dh
mov byte [eax + 2], 0
jne 0x433b7a
je 0x411072
cpuid
nop
ret
je 0x433b7a
and eax, 0x7926ffd6
sbb ah, byte [esi - 0x3f]
ljmp 0x8b20
pop ecx
jo 0x4110a3
out 0x93, al
jo 0x41d037
and eax, 0x410f5d48
add byte [eax + eax], al
add byte [edx + edx*2 - 0x7d07ffbf], dh
rol word [edx], 1
xor al, 0
add byte [eax], al
xor al, 0
add byte [eax], al
movsb byte es:[edi], byte [esi]
pop dword [ecx]
and byte [eax], al
add byte [eax], al
xor al, 0
add byte [eax], al
jno 0x41114e
inc ecx
add byte [ecx], cl
add eax, dword [eax]
add byte [eax], dh
add byte [eax], al
add byte [esi - 0x2f], ah
inc edx
add byte [eax + eax], cl
add byte [eax + eax], cl
add byte [ebp + 0xf], bl
inc ecx
add byte [eax], cl
add byte [eax], al
inc esp
xchg ecx, eax
inc ebx
add byte [eax + eax], cl
add byte [eax + eax], cl
add byte [ebx], bl
mov bh, 0x42
add byte [eax], al
inc eax
add byte [eax], al
xor byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], ah
cmp byte [eax], 0
add byte [eax], al
add byte [ecx], ah
add byte [eax], al
dec edx
add byte [eax], al
add byte [eax - 0x1cffbcc9], bl
add eax, 0xc0042
add byte [eax], al
xor byte [eax], al
add byte [eax], al
pop ebp
cmovno eax, dword [eax]
inc esp
add byte [eax], al
add byte [edi + 0x15], ah
inc ecx
add byte [eax], ah
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
mov ah, 0x52
inc ecx
add byte [edi + 0x18], dl
lea esp, [esp - 0x64]
push ebp
lea ebp, [esp + 8]
insb byte es:[edi], dx
and al, 8
mov dword [ebp + 0x3c], ebx
mov dword [ebp + 0x48], esi
mov dword [ebp + 0x4c], edi
pop dword [ebp + 0x44]
lea esi, [esp + 0x68]
lea edi, [esp + 4]
mov ecx, 4
or ecx, ecx
je 0x41117b
mov al, byte [esi]
inc esi
mov byte [edi], al
inc edi
dec ecx
jne 0x411172
mov dword [ebp + 0x40], esp
mov dword [esp], 0x411190
mov esi, 0x4111ae
jmp dword [esi]
mov ebx, ebx
mov ecx, dword [esi + 4]
shl esi, 0x20
jno 0x41b030
jo 0x4115b3
salc
inc esi
mov bl, 0xf
xor byte [edi - 0x66], 0
add byte [0xc0c989d0], al
jo 0x41b030
loopne 0x4115e0
inc eax
add bl, al
xor eax, 0x47e8b0e
js 0x437c40
jns 0x41165c
sub byte [ecx], cl
std
push 0x65de890f
add al, byte [eax]
jns 0x437c40
invalid
mov bl, bl
mov ebx, dword [esi + 8]
mov ax, word [eax]
mov cx, cx
lea esi, [esi + 0xc]
or word [ebp + ebx], ax
jb 0x437c10
xchg ebx, ecx
xchg ecx, ebx
jmp dword [esi]
das
imul esp, dword [esi - 0x79], 0xfa8766d7
shr ch, 0x40
mov eax, dword [esi + 4]
push 0x41639f
ret
and eax, 0x5494e860
add al, byte [eax]
clc
test eax, eax
jb 0x4401f8
push ebx
pop ebx
jne 0x44297d
je 0x4116bf
fist dword [eax]
xchg ecx, eax
jbe 0x411648
mov ch, ch
in eax, dx
mov eax, dword [ebp + 8]
push 0x10
push eax
xchg cx, di
xchg di, cx
jno 0x41db00
jo 0x4116da
nop
cpuid
ret 0x800f
jo 0x41db00
xor al, 0x32
jne 0x41db74
je 0x4116ee
cpuid
ret
je 0x41db74
add eax, 0x24448faf
cld
push ebp
pop ebp
lea eax, [esi + 0x2c]
push edx
jmp 0x411702
push eax
mov bx, bx
call fcn.0043b396
and bx, bx
cmc
add esp, 0xc
mov cx, cx
jmp fcn.00415698
xchg esi, ebx
shr si, 0x40
xchg ebx, esi
mov ecx, 0xd4d4d4d4
ja 0x407221
jbe 0x41174b
mov eax, 0xfde4b6a
xchg al, dl
pop edx
invalid
jbe 0x407221
xor al, 0x6e
mov eax, dword [esi + 4]
mov ebx, dword [esi + 8]
shr dx, 0x40
mov ax, word [ebp + eax]
lea esi, [esi + 0xc]
shl bp, 0x20
call fcn.00440f29
xor eax, 0x42abd57d
add byte [ebp], ah
add byte [eax], al
xor al, 0
add byte [eax], al
invalid
mov eax, dword [esi + 4]
mov ah, ah
mov ebx, dword [esi + 8]
mov al, byte [ebp + eax]
js 0x435df1
jns 0x411869
jns 0x435df1
jmp dword [esi]
push esi
pop esi
ja 0x41347d
jbe 0x411cca
lcall 0x17ad, 0x860fa1a4
add byte [eax], al
jbe 0x41347d
invalid
invalid