Function at 0x42e7a7
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x94
mov eax, dword [0x44e4a8]
mov dword [esp + 0x24], 0x97579945
mov dword [esp + 0x28], 0x93029504
mov dword [esp + 0x2c], 0x8f2f912c
mov dword [esp + 0x30], 0x8b2b8d00
mov dword [esp + 0x34], 0x87228955
mov dword [esp + 0x38], 0x83118536
mov dword [esp + 0x3c], 0x7fe3810c
mov dword [esp + 0x40], 0x7bdb7dec
mov dword [esp + 0x44], 0x77a179e4
mov dword [esp + 0x48], 0x73d675a3
mov dword [esp + 0x4c], 0x6ff371ff
mov dword [esp + 0x50], 0x6be56de3
mov dword [esp + 0x54], 0x67f569f1
mov dword [esp + 0x58], 0x63b065f6
mov dword [esp + 0x5c], 0x5fcb61e8
mov dword [esp + 0x60], 0x5b5a5dc8
mov dword [esp + 0x64], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 0x43
ja 0x42a0cb
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x24]
mov esi, ecx
xor esi, 0x38f53566
and ecx, 0x38f53566
lea ecx, [esi + ecx*2]
xor ecx, edx
mov dword [esp + 4], ecx
mov ecx, dword [esp + 4]
add cl, 2
mov edx, dword [esp]
mov byte [esp + edx + 0x24], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0x44
jb 0x42a090
lea esi, [esp + 0x90]
lea ecx, [esp + 0x24]
push esi
push 0
push 0
push 0x1f
push ecx
push 0
call eax
mov edi, dword [esp + 0x90]
test edi, edi
jns 0x42a0f4
mov eax, 0xffffffff
jmp 0x42a0f7
lea eax, [edi + edi]
push eax
call fcn.0040c770
add esp, 4
mov ebx, eax
mov eax, dword [0x44e4a8]
mov dword [esp + 0x24], 0x9d50b37
mov dword [esp + 0x28], 0x5f607f8
mov dword [esp + 0x2c], 0x1fd03d8
mov dword [esp + 0x30], 0x1de11f8c
mov dword [esp + 0x34], 0x19fe1b27
mov dword [esp + 0x38], 0x15e717ca
mov dword [esp + 0x3c], 0x11e91398
mov dword [esp + 0x40], 0x2dd12fe0
mov dword [esp + 0x44], 0x291f2bd0
mov dword [esp + 0x48], 0x25c2271d
mov dword [esp + 0x4c], 0x21d923a9
mov dword [esp + 0x50], 0x3db33fad
mov dword [esp + 0x54], 0x39cb3bcb
mov dword [esp + 0x58], 0x350437ca
mov dword [esp + 0x5c], 0x31c133bc
mov dword [esp + 0x60], 0xcdcecfc4
mov word [esp + 0x64], 0
mov byte [esp + 0x66], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 0x42
ja 0x42a1ec
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x24]
add ecx, 0x784069c3
xor ecx, edx
mov dword [esp + 4], ecx
mov ecx, dword [esp + 4]
mov edx, ecx
xor edx, 0xcf
and ecx, 0x30
add ecx, ecx
sub ecx, edx
mov edx, dword [esp]
mov byte [esp + edx + 0x24], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 0x43
jb 0x42a1b0
push esi
push edi
push ebx
push 0x1f
lea edi, [esp + 0x34]
push edi
push 0
call eax
lea eax, [esp + 0x7c]
push 0x60
push 3
push 0x120089
push eax
push ebx
call fcn.00442910
add esp, 0x14
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44a6a0]
mov dword [esp + 0xc], 0
jmp dword [0x44a798]
lea eax, [esp + 0x88]
push 0
push eax
push dword [esp + 0x84]
call fcn.00442ca0
add esp, 0xc
not eax
shr eax, 0x1f
mov dword [esp + 0xc], 0
jmp dword [eax*4 + 0x44a6a8]
mov dword [esp + 0x8c], ebx
mov esi, dword [esp + 0x88]
lea eax, [esi + 1]
push eax
call fcn.0040c770
add esp, 4
push 0
push esi
mov dword [esp + 0x8c], eax
push eax
push dword [esp + 0x88]
call fcn.00442da0
add esp, 0x10
not eax
shr eax, 0x1f
mov dword [esp + 0xc], 0
jmp dword [eax*4 + 0x44a6b0]
mov eax, dword [case.0x42a5d1.31]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
mov ebx, dword [esp + 0x8c]
jmp dword [0x44a790]
push dword [esp + 0x84]
call fcn.0040c780
add esp, 4
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x24], 0x7c7d7a7b
mov byte [esp + 0x28], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 4
ja 0x42a32b
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x24]
mov esi, ecx
xor esi, 0xd47f60ea
and ecx, 0xd47f60ea
lea ecx, [esi + ecx*2]
xor ecx, edx
mov dword [esp + 4], ecx
mov ecx, dword [esp + 4]
add cl, 0x6e
mov edx, dword [esp]
mov byte [esp + edx + 0x24], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 5
jb 0x42a2f0
mov ecx, dword [0x44e4ac]
test ecx, ecx
je 0x42a36c
mov edx, dword [esp + 0x24]
xor esi, esi
mov edi, dword [0x44e4b0]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0x625b6034
je 0x42a360
inc esi
cmp ecx, esi
jne 0x42a350
jmp 0x42a36c
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
jne 0x42ab9a
mov eax, dword [esp + 0xc]
and al, 1
mov dword [esp + 0xc], eax
jmp dword [0x44a798]
jmp dword [0x44a7a4]
push ebx
call fcn.0040c780
add esp, 4
nop
nop
nop
nop
nop
push ebx
call fcn.0040c780
add esp, 4
jmp dword [0x44a7a8]
mov eax, dword [esp + 0xc]
add esp, 0x94
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 0x88]
mov ebp, dword [esp + 0x84]
mov byte [ebp + eax], 0
mov dword [esp + 0xc], 0
nop
nop
nop
nop
nop
nop
nop
mov dword [esp + 0x24], 0x525e5c56
mov dword [esp + 0x28], 0x5e55585a
mov dword [esp + 0x2c], 0xc21d07
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0xb
ja 0x42a42e
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x24]
add eax, 0xdbd2f133
xor eax, ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
inc al
mov ecx, dword [esp]
mov byte [esp + ecx + 0x24], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0xc
jb 0x42a400
movzx ecx, byte [esp + 0x24]
test cl, cl
je 0x42a470
mov eax, edi
mov ebx, ebp
jmp 0x42a447
movzx ecx, byte [eax]
test cl, cl
je 0x42a482
movzx edx, byte [ebp]
test dl, dl
je 0x42a480
inc ebp
inc eax
lea esi, [ebx + 1]
cmp dl, cl
je 0x42a45c
mov ebx, esi
mov ebp, esi
je 0x42a440
mov eax, edi
jmp 0x42a440
mov ebx, ebp
jmp 0x42a482
xor ebx, ebx
xor eax, eax
test ebx, ebx
sete al
jmp dword [eax*4 + 0x44a6b8]
lea ebp, [ebx + 0xa]
movzx eax, byte [ebx + 0xa]
xor edx, edx
test al, al
je 0x42a4b2
mov ecx, ebp
nop
cmp al, 0x22
je 0x42a4b0
movzx eax, byte [ecx + 1]
inc ecx
test al, al
jne 0x42a4a0
jmp 0x42a4b2
mov edx, ecx
mov esi, edx
sub esi, ebp
xor eax, eax
cmp esi, 5
setb al
jmp dword [eax*4 + 0x44a6c0]
movzx eax, byte [edx - 1]
mov ecx, dword [case.0x42a4be.4]
nop
jmp ecx
xor ecx, ecx
cmp al, 0x74
setne cl
jmp dword [ecx*4 + 0x44a6d8]
xor eax, eax
cmp byte [edx - 2], 0x78
setne al
jmp dword [eax*4 + 0x44a6f0]
xor eax, eax
cmp byte [edx - 3], 0x74
setne al
jmp dword [eax*4 + 0x44a6f8]
xor eax, eax
cmp byte [edx - 4], 0x2e
setne al
jmp dword [eax*4 + 0x44a700]
mov eax, esi
inc eax
jns 0x42a520
mov dword [esp + 0x10], edx
mov eax, 0xffffffff
jmp 0x42a52b
mov dword [esp + 0x10], edx
lea eax, [esi*2 + 2]
push eax
call fcn.0040c770
add esp, 4
mov dword [esp + 0x24], 0
mov dword [esp + 0x68], esi
lea ecx, [eax + esi*2]
mov esi, eax
mov dword [esp + 0x1c], eax
mov dword [esp + 8], ecx
cmp eax, ecx
jae 0x42a5ad
mov esi, dword [esp + 0x1c]
cmp ebp, dword [esp + 0x10]
jae 0x42a5ad
mov esi, dword [esp + 0x1c]
mov edi, ebp
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [edi], 0
je 0x42a5ad
mov dword [esp + 0x14], ebx
lea eax, [esp + 0x24]
push eax
mov ebx, dword [esp + 0x14]
push ebx
push edi
call fcn.00410f60
add esp, 0xc
movzx ecx, word [esp + 0x24]
mov word [esi], cx
add esi, 2
cmp esi, dword [esp + 8]
jae 0x42a5a9
add edi, eax
cmp edi, ebx
mov ebx, dword [esp + 0x14]
jb 0x42a570
jmp 0x42a5ad
mov ebx, dword [esp + 0x14]
mov word [esi], 0
push 0x60
push 3
push 0x120089
lea eax, [esp + 0x7c]
push eax
push dword [esp + 0x2c]
call fcn.00442910
add esp, 0x14
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44a708]
mov esi, dword [esp + 0x10]
mov ebp, esi
lea edi, [esp + 0x24]
mov ebx, dword [esp + 0x1c]
jmp dword [0x44a768]
push 0
lea eax, [esp + 0x70]
push eax
push dword [esp + 0x78]
call fcn.00442ca0
add esp, 0xc
test eax, eax
setns al
mov esi, dword [esp + 0x6c]
cmp esi, 0x100000
setb cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x44a710]
jmp dword [0x44a71c]
push esi
call fcn.0040c770
add esp, 4
push 0
push esi
push eax
push dword [esp + 0x7c]
call fcn.00442da0
add esp, 0x10
nop
nop
nop
nop
push esi
call fcn.0040c770
add esp, 4
mov edi, eax
push 0
push dword [esp + 0x70]
push eax
push dword [esp + 0x7c]
call fcn.00442da0
add esp, 0x10
jmp dword [0x44a720]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44a728]
xor edx, edx
mov ecx, dword [esp + 0x1c]
jmp 0x42a688
add ecx, 2
test si, si
je 0x42a699
mov eax, edx
movzx esi, word [ecx]
mov edx, ecx
cmp si, 0x5c
je 0x42a680
mov edx, eax
jmp 0x42a680
xor ecx, ecx
test eax, eax
setne cl
mov dword [esp + 0x80], edi
jmp dword [ecx*4 + 0x44a730]
mov dword [esp + 0x78], 0
mov dword [esp + 0x20], 0
mov esi, dword [esp + 0x68]
jmp dword [0x44a73c]
mov ecx, eax
not ecx
mov edx, dword [esp + 0x1c]
and ecx, edx
not edx
and edx, eax
sub edx, ecx
sar edx, 1
lea eax, [edx + 1]
mov dword [esp + 0x20], eax
not edx
mov esi, dword [esp + 0x68]
add edx, esi
mov dword [esp + 0x78], edx
jmp dword [0x44a73c]
mov eax, dword [esp + 0x78]
add eax, 0x1b
push eax
call fcn.0040c770
add esp, 4
mov dword [esp + 8], eax
mov eax, dword [esp + 0x20]
sub esi, eax
mov dword [esp + 0x18], esi
mov dword [esp + 0x24], 0x3c3e3451
mov dword [esp + 0x28], 0x3123393a
mov dword [esp + 0x2c], 0x3e5c6134
mov dword [esp + 0x30], 0x682d2038
mov dword [esp + 0x34], 0x3a2a2a4a
mov dword [esp + 0x38], 0x6c363c2c
mov word [esp + 0x3c], 0x626f
mov byte [esp + 0x3e], 0x96
mov dword [esp + 0x3f], 0
lea ecx, [eax + ebp]
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x1e
ja 0x42a7b3
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x24]
mov esi, eax
xor esi, 0xfefdbd62
mov edi, eax
xor edi, 0x102429d
or eax, 0x7efdbd62
and eax, edi
lea eax, [esi + eax*2]
xor eax, edx
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add al, 0x16
mov edx, dword [esp]
mov byte [esp + edx + 0x24], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x1f
jb 0x42a770
movzx eax, byte [esp + 0x24]
mov edx, dword [esp + 8]
test al, al
je 0x42a7db
lea esi, [esp + 0x25]
mov edx, dword [esp + 8]
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [esi]
inc esi
test al, al
jne 0x42a7d0
mov byte [edx], 0
mov esi, dword [esp + 0x18]
test esi, esi
je 0x42a838
mov eax, dword [esp + 0x20]
add eax, ebx
mov edi, dword [esp + 0x10]
sub edi, eax
add edi, 0xfffffff5
mov dword [esp + 0x74], edi
and esi, 3
je 0x42a83c
xor eax, eax
mov edi, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [ecx]
mov byte [esp + 0x14], dl
cmp byte [esp + 0x14], 1
sbb ecx, 0xffffffff
movzx edx, byte [esp + 0x14]
mov byte [edi + eax], dl
inc eax
cmp esi, eax
jne 0x42a810
add edi, eax
sub dword [esp + 0x18], eax
mov edx, edi
mov esi, edi
jmp 0x42a83c
mov esi, edx
jmp 0x42a885
cmp dword [esp + 0x74], 3
mov edi, dword [esp + 0x18]
jb 0x42a885
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, byte [ecx]
cmp al, 1
sbb ecx, 0xffffffff
mov byte [edx], al
movzx eax, byte [ecx]
cmp al, 1
sbb ecx, 0xffffffff
mov byte [edx + 1], al
movzx eax, byte [ecx]
cmp al, 1
sbb ecx, 0xffffffff
mov byte [edx + 2], al
movzx eax, byte [ecx]
cmp al, 1
sbb ecx, 0xffffffff
lea esi, [edx + 4]
mov byte [edx + 3], al
mov edx, esi
add edi, 0xfffffffc
jne 0x42a850
mov byte [esi], 0
mov ecx, dword [esp + 0xa8]
push dword [esp + 0x6c]
mov edi, dword [esp + 0x84]
push edi
push dword [esp + 0x10]
call fcn.0040d440
mov esi, dword [esp + 0x68]
jmp dword [0x44a744]
mov eax, dword [esp + 0x78]
add eax, 0x1b
push eax
call fcn.0040c770
add esp, 4
mov dword [esp + 8], eax
mov eax, dword [esp + 0x20]
sub esi, eax
mov dword [esp + 0x18], esi
mov dword [esp + 0x24], 0x3c3e3451
mov dword [esp + 0x28], 0x3123393a
mov dword [esp + 0x2c], 0x3e5c6134
mov dword [esp + 0x30], 0x682d2038
mov dword [esp + 0x34], 0x3a2a2a4a
mov dword [esp + 0x38], 0x6c363c2c
mov word [esp + 0x3c], 0x626f
mov byte [esp + 0x3e], 0x96
mov dword [esp + 0x3f], 0
lea edx, [eax + ebp]
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x1e
ja 0x42a973
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x24]
mov esi, eax
xor esi, 0xfefdbd62
mov edi, eax
xor edi, 0x102429d
or eax, 0x7efdbd62
and eax, edi
lea eax, [esi + eax*2]
xor eax, ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 4]
add al, 0x16
mov ecx, dword [esp]
mov byte [esp + ecx + 0x24], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x1f
jb 0x42a930
movzx ecx, byte [esp + 0x24]
mov edi, dword [esp + 8]
test cl, cl
je 0x42a99b
lea esi, [esp + 0x25]
mov edi, dword [esp + 8]
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [esi]
inc esi
test cl, cl
jne 0x42a990
mov byte [edi], 0
mov esi, dword [esp + 0x18]
test esi, esi
je 0x42aa1b
mov ecx, dword [esp + 0x20]
add ecx, ebx
mov eax, dword [esp + 0x10]
sub eax, ecx
add eax, 0xfffffff5
and esi, 3
je 0x42aa1f
mov dword [esp + 0x74], eax
xor ecx, ecx
movzx eax, byte [edx]
mov byte [esp + 0x14], al
cmp byte [esp + 0x14], 1
sbb edx, 0xffffffff
movzx eax, byte [esp + 0x14]
mov byte [edi + ecx], al
inc ecx
cmp esi, ecx
jne 0x42a9c0
add edi, ecx
sub dword [esp + 0x18], ecx
mov esi, edi
mov eax, dword [esp + 0x74]
jmp 0x42aa1f
mov ecx, dword [esp + 0xc]
and cl, 1
or cl, al
mov dword [esp + 0xc], ecx
jmp dword [0x44a748]
push dword [esp + 8]
call fcn.0040c780
add esp, 4
jmp dword [0x44a750]
jmp dword [0x44a750]
jmp dword [0x44a758]
mov esi, edi
jmp 0x42aa69
cmp eax, 3
mov eax, dword [esp + 0x18]
jb 0x42aa69
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [edx]
cmp cl, 1
sbb edx, 0xffffffff
mov byte [edi], cl
movzx ecx, byte [edx]
cmp cl, 1
sbb edx, 0xffffffff
mov byte [edi + 1], cl
movzx ecx, byte [edx]
cmp cl, 1
sbb edx, 0xffffffff
mov byte [edi + 2], cl
movzx ecx, byte [edx]
cmp cl, 1
sbb edx, 0xffffffff
lea esi, [edi + 4]
mov byte [edi + 3], cl
mov edi, esi
add eax, 0xfffffffc
jne 0x42aa30
mov byte [esi], 0
mov ecx, dword [esp + 0xa8]
push dword [esp + 0x6c]
push dword [esp + 0x84]
push dword [esp + 0x10]
call fcn.0040d440
mov esi, dword [esp + 0x68]
jmp case.0x42a5d1.11
jmp dword [0x44a770]
push ebx
call fcn.0040c780
add esp, 4
nop
push ebx
call fcn.0040c780
add esp, 4
mov ebp, esi
jmp dword [0x44a77c]
push edi
call fcn.0040c780
add esp, 4
push edi
call fcn.0040c780
add esp, 4
jmp dword [0x44a764]
mov eax, dword [esp + 0x70]
mov dword [esp + 0x24], 0x7c7d7a7b
mov byte [esp + 0x28], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 4
ja 0x42ab2b
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x24]
mov esi, ecx
xor esi, 0xd47f60ea
and ecx, 0xd47f60ea
lea ecx, [esi + ecx*2]
xor ecx, edx
mov dword [esp + 4], ecx
mov ecx, dword [esp + 4]
add cl, 0x6e
mov edx, dword [esp]
mov byte [esp + edx + 0x24], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 5
jb 0x42aaf0
mov ecx, dword [0x44e4ac]
test ecx, ecx
mov ebx, dword [esp + 0x1c]
je 0x42ab68
mov edx, dword [esp + 0x24]
xor esi, esi
mov edi, dword [0x44e4b0]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0x625b6034
je 0x42ab60
inc esi
cmp ecx, esi
jne 0x42ab50
jmp 0x42ab68
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
jne 0x42ab78
mov esi, dword [esp + 0x10]
mov ebp, esi
lea edi, [esp + 0x24]
jmp dword [0x44a768]
push eax
push 1
push dword [0x44e4b4]
push ecx
call fcn.0043f3f0
add esp, 0x10
mov esi, dword [esp + 0x10]
mov ebp, esi
lea edi, [esp + 0x24]
jmp dword [0x44a768]
push eax
push 1
push dword [0x44e4b4]
push ecx
call fcn.0043f3f0
add esp, 0x10
mov eax, dword [esp + 0xc]
and al, 1
mov dword [esp + 0xc], eax
jmp dword [0x44a798]
mov byte [ebx], 0xa
inc ebx
lea eax, [esi + 0x1d4]
push eax
call fcn.0042eb60
add esp, 4
movzx eax, al
jmp dword [eax*4 + 0x44ad70]
mov eax, dword [esi + 0x1e4]
test eax, eax
je 0x42c0a8
push eax
call fcn.0040c780
add esp, 4
call fcn.00438140
movzx eax, al
mov dword [esi + 4], ebx
jmp dword [eax*4 + 0x44adc0]
mov dword [esi + 0x52c], 0xaca6bcbe
mov word [esi + 0x530], 0x5fa3
mov dword [esi + 0x532], 0
mov byte [esi + 0x536], 0
mov dword [esi + 0x7f0], 0
mov eax, dword [esi + 0x7f0]
cmp eax, 0xa
ja 0x42c382
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esi + 0x7f0]
mov eax, dword [esi + 0x7f0]
movzx eax, byte [esi + eax + 0x52c]
mov edx, ecx
xor edx, 0x375af30f
mov edi, ecx
xor edi, 0x48a50cf0
or ecx, 0x375af30f
and ecx, edi
lea ecx, [edx + ecx*2]
xor ecx, eax
mov dword [esi + 0x1d4], ecx
mov eax, dword [esi + 0x1d4]
add al, 0xb5
mov ecx, dword [esi + 0x7f0]
mov byte [esi + ecx + 0x52c], al
inc dword [esi + 0x7f0]
mov eax, dword [esi + 0x7f0]
cmp eax, 0xb
jb 0x42c100
jmp 0x42c382
mov dword [esi + 0xa0], edi
mov dword [esi + 0x64], eax
jmp dword [0x44ad64]
movzx ecx, word [eax]
test cx, cx
je 0x42e1b0
add eax, 2
xor edx, edx
jmp 0x42c1a1
add edx, edi
movzx ecx, word [eax]
add eax, 2
test cx, cx
je 0x42da26
movzx ebx, cx
cmp ebx, 0x800
mov ecx, 3
sbb ecx, 0
mov edi, 1
cmp ebx, 0x80
jb 0x42c190
mov edi, ecx
jmp 0x42c190
mov dword [esi + 4], ebx
lea eax, [esi + 0x7f0]
push 0xa
push 0xb
push eax
push dword [esi + 0x1d4]
call fcn.00419710
add esp, 0x10
mov dword [esi + 0x10], eax
lea eax, [esi + 0xe8]
push 0xa
push 0xb
push eax
push dword [esi + 0x1d8]
call fcn.00419710
add esp, 0x10
mov dword [esi + 0xc], eax
lea eax, [esi + 0x72c]
push 0xa
push 0xb
push eax
push dword [esi + 0x1dc]
call fcn.00419710
add esp, 0x10
mov dword [esi + 8], eax
mov eax, dword [esi + 0x1e4]
mov dword [esi + 0x52c], 0xe432c41a
mov dword [esi + 0x530], 0xf2e03def
mov dword [esi + 0x534], 0x8cf38a8a
mov dword [esi + 0x538], 0x726df92
mov dword [esi + 0x70], 0
mov edx, dword [esi + 0x70]
cmp edx, 0xf
ja 0x42c2bb
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esi + 0x70]
mov edi, dword [esi + 0x70]
movzx ecx, byte [esi + edi + 0x52c]
mov ebx, edx
xor ebx, 0x21541044
and edx, 0x21541044
lea ebx, [ebx + edx*2]
lea edx, [ebx + ecx]
mov edi, ecx
not edi
or edi, ebx
lea ebx, [ecx + edi]
add edi, ecx
inc edi
mov ecx, edx
not ecx
and ecx, edi
not edi
and edi, edx
add ecx, ebx
inc ecx
sub edi, ecx
mov dword [esi + 0x30], edi
mov ecx, dword [esi + 0x30]
add cl, 0xac
mov edx, dword [esi + 0x70]
mov byte [esi + edx + 0x52c], cl
inc dword [esi + 0x70]
mov ecx, dword [esi + 0x70]
cmp ecx, 0x10
jb 0x42c260
movzx edx, byte [esi + 0x52c]
test dl, dl
je 0x42d8ba
lea edi, [esi + 0x52d]
mov ebx, dword [esi + 4]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], dl
inc ebx
movzx edx, byte [edi]
inc edi
test dl, dl
jne 0x42c2e0
jmp 0x42d8bd
mov dword [esi + 0x52c], 0x52414540
mov byte [esi + 0x530], 0xc8
mov dword [esi + 0x531], 0
mov dword [esi + 0x534], 0
mov dword [esi + 0x7f0], 0
mov eax, dword [esi + 0x7f0]
cmp eax, 0xb
ja 0x42c382
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x7f0]
mov ecx, dword [esi + 0x7f0]
movzx ecx, byte [esi + ecx + 0x52c]
mov edx, eax
xor edx, 0x6aa3ded3
and eax, 0xeaa3ded3
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esi + 0x1d4], eax
mov eax, dword [esi + 0x1d4]
add al, 0xe1
mov ecx, dword [esi + 0x7f0]
mov byte [esi + ecx + 0x52c], al
inc dword [esi + 0x7f0]
mov eax, dword [esi + 0x7f0]
cmp eax, 0xc
jb 0x42c330
lea eax, [esi + 0x52c]
mov dword [esi + 0x1d4], 0xa2e1436
mov dword [esi + 0x1d8], 0x62486850
mov dword [esi + 0x1dc], 0x9626454
mov word [esi + 0x1e0], 0xc524
mov dword [esi + 0x1e2], 0
mov dword [esi + 0xe8], 0
mov ecx, dword [esi + 0xe8]
cmp ecx, 0x11
ja 0x42c435
nop
nop
mov edx, dword [esi + 0xe8]
mov ecx, dword [esi + 0xe8]
movzx ecx, byte [esi + ecx + 0x1d4]
mov edi, edx
xor edi, 0x24952432
mov ebx, edx
xor ebx, 0x5b6adbcd
or edx, 0x24952432
and edx, ebx
lea edx, [edi + edx*2]
lea edi, [edx + ecx]
and edx, ecx
add edx, edx
sub edi, edx
mov dword [esi + 0x7f0], edi
mov ecx, dword [esi + 0x7f0]
add cl, 6
mov edx, dword [esi + 0xe8]
mov byte [esi + edx + 0x1d4], cl
inc dword [esi + 0xe8]
mov ecx, dword [esi + 0xe8]
cmp ecx, 0x12
jb 0x42c3d0
movzx ecx, byte [esi + 0x1d4]
test cl, cl
je 0x42c45d
lea edx, [esi + 0x1d5]
mov edi, dword [esi + 4]
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42c450
jmp 0x42c460
mov edi, dword [esi + 4]
mov byte [edi], 0
movzx ecx, byte [eax]
test cl, cl
je 0x42c47b
inc eax
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x42c470
mov byte [edi], 0
mov byte [esi + 0xd0], 0
mov dword [esi + 0xcc], 0x10
push 0x4cbcd57b
push dword [0x44e4a0]
call fcn.00441e40
add esp, 8
lea ecx, [esi + 0xcc]
lea edx, [esi + 0xd0]
push ecx
push edx
call eax
mov dword [esi + 0x1d4], 0x78965cbe
mov dword [esi + 0x1d8], 0x2e222027
mov dword [esi + 0x1dc], 0x79205c2c
mov dword [esi + 0x1e0], 0xbd9c
mov byte [esi + 0x1e4], 0
mov dword [esi + 0x7f0], 0
mov eax, dword [esi + 0x7f0]
cmp eax, 0x10
ja 0x42c552
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x7f0]
mov ecx, dword [esi + 0x7f0]
movzx ecx, byte [esi + ecx + 0x1d4]
mov edx, eax
xor edx, 0xdc4ebf5e
and eax, 0xdc4ebf5e
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esi + 0x52c], eax
mov eax, dword [esi + 0x52c]
add al, 0x2a
mov ecx, dword [esi + 0x7f0]
mov byte [esi + ecx + 0x1d4], al
inc dword [esi + 0x7f0]
mov eax, dword [esi + 0x7f0]
cmp eax, 0x11
jb 0x42c500
movzx eax, byte [esi + 0x1d4]
test al, al
je 0x42c57b
lea ecx, [esi + 0x1d5]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42c570
mov byte [edi], 0
movzx eax, byte [esi + 0xd0]
test al, al
je 0x42c59b
lea ecx, [esi + 0xd1]
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42c590
mov dword [esi + 4], edi
mov byte [edi], 0
mov dword [esi + 0x7f0], 0
mov dword [esi + 0x7f4], 0
mov eax, dword [0x44d194]
mov dword [esi + 0x1d4], 0x9760b73
mov dword [esi + 0x1d8], 0x5790782
mov dword [esi + 0x1dc], 0x1750374
mov dword [esi + 0x1e0], 0x1d501f4d
mov dword [esi + 0x1e4], 0x19661b2e
mov dword [esi + 0x1e8], 0x1562176c
mov dword [esi + 0x1ec], 0x1314
mov byte [esi + 0x1f0], 0
mov dword [esi + 0xe8], 0
mov ecx, dword [esi + 0xe8]
cmp ecx, 0x1c
ja 0x42c68d
nop
nop
nop
nop
mov ecx, dword [esi + 0xe8]
mov edx, dword [esi + 0xe8]
movzx edi, byte [esi + edx + 0x1d4]
mov edx, ecx
xor edx, 0x653e0183
and ecx, 0xe53e0183
lea edx, [edx + ecx*2]
lea ecx, [edx + edi]
and edx, edi
mov ebx, ecx
xor ebx, edx
mov edi, edx
not edi
and ecx, edi
add ecx, ecx
sub ecx, ebx
xor edx, ecx
and ecx, edi
add ecx, ecx
sub ecx, edx
mov dword [esi + 0x52c], ecx
mov ecx, dword [esi + 0x52c]
add cl, 0x71
mov edx, dword [esi + 0xe8]
mov byte [esi + edx + 0x1d4], cl
inc dword [esi + 0xe8]
mov ecx, dword [esi + 0xe8]
cmp ecx, 0x1d
jb 0x42c620
push 0x800
push 0
lea edi, [esi + 0x1d4]
push edi
call eax
lea ecx, [esi + 0x7f0]
push eax
call fcn.0043d980
movzx eax, al
jmp dword [eax*4 + 0x44adc8]
jmp 0x42c7dd
mov byte [esi + 0x1d4], 0
mov dword [esi + 0x30], 0x101
push 0x19cb8461
push dword [esi + 0x7f0]
call fcn.00441e40
add esp, 8
lea ecx, [esi + 0x30]
push ecx
push edi
call eax
mov dword [esi + 0x52c], 0x8a5e5436
mov dword [esi + 0x530], 0x7db498ab
mov word [esi + 0x534], 0x2140
mov dword [esi + 0x536], 0
mov dword [esi + 0x72c], 0
mov eax, dword [esi + 0x72c]
cmp eax, 0xd
ja 0x42c789
nop
nop
nop
nop
mov ecx, dword [esi + 0x72c]
mov eax, dword [esi + 0x72c]
movzx eax, byte [esi + eax + 0x52c]
mov edx, ecx
or edx, 0x71af6f75
mov ebx, ecx
not ebx
or ebx, 0x8e50908a
and ebx, edx
not ebx
and ecx, 0xe50908a
lea ecx, [ebx + ecx*2]
mov edx, ecx
and edx, eax
add ecx, eax
add edx, edx
sub ecx, edx
mov dword [esi + 0xe8], ecx
mov eax, dword [esi + 0xe8]
add al, 0x4e
mov ecx, dword [esi + 0x72c]
mov byte [esi + ecx + 0x52c], al
inc dword [esi + 0x72c]
mov eax, dword [esi + 0x72c]
cmp eax, 0xe
jb 0x42c720
movzx eax, byte [esi + 0x52c]
test al, al
mov edx, dword [esi + 4]
je 0x42c7ab
lea ecx, [esi + 0x52d]
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42c7a0
mov byte [edx], 0
movzx eax, byte [esi + 0x1d4]
test al, al
je 0x42c7cb
lea ecx, [esi + 0x1d5]
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42c7c0
mov dword [esi + 4], edx
mov byte [edx], 0
push dword [esi + 0x7f0]
call dword [0x44d298]
push 0x6ead8a84
push dword [0x44e4a0]
call fcn.00441e40
add esp, 8
mov ebx, eax
mov byte [esi + 0x52c], 0
mov dword [esi + 0xc8], 0x200
lea eax, [esi + 0xc8]
lea ecx, [esi + 0x52c]
push eax
push ecx
push 6
call ebx
mov dword [esi + 0x1d4], 0xfdc6d03e
mov dword [esi + 0x1d8], 0x86819491
mov dword [esi + 0x1dc], 0x39def58a
mov dword [esi + 0x1e0], 0
mov dword [esi + 0xe8], 0
mov eax, dword [esi + 0xe8]
cmp eax, 0xf
ja 0x42c8de
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0xe8]
mov ecx, dword [esi + 0xe8]
movzx ecx, byte [esi + ecx + 0x1d4]
mov edx, eax
xor edx, 0x71cce6c9
mov edi, eax
xor edi, 0xe331936
or eax, 0x71cce6c9
and eax, edi
lea edx, [edx + eax*2]
mov eax, edx
and eax, ecx
xor edx, ecx
sub edx, eax
lea ecx, [edx + eax*2]
mov edx, ecx
xor edx, eax
not eax
and eax, ecx
add eax, eax
sub eax, edx
mov dword [esi + 0x7f0], eax
mov eax, dword [esi + 0x7f0]
mov ecx, eax
xor ecx, 0xed
and eax, 0x12
add eax, eax
sub eax, ecx
mov ecx, dword [esi + 0xe8]
mov byte [esi + ecx + 0x1d4], al
inc dword [esi + 0xe8]
mov eax, dword [esi + 0xe8]
cmp eax, 0x10
jb 0x42c860
movzx eax, byte [esi + 0x1d4]
test al, al
je 0x42c90d
lea ecx, [esi + 0x1d5]
mov edx, dword [esi + 4]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42c900
jmp 0x42c910
mov edx, dword [esi + 4]
mov edi, edx
mov byte [edx], 0
movzx eax, byte [esi + 0x52c]
test al, al
je 0x42c93d
lea ecx, [esi + 0x52d]
mov edx, edi
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42c930
jmp 0x42c93f
mov edx, edi
mov edi, edx
mov byte [edx], 0
mov byte [esi + 0x7f0], 0
mov dword [esi + 0xc4], 0x200
lea eax, [esi + 0xc4]
push eax
lea eax, [esi + 0x7f0]
push eax
push 5
call ebx
mov dword [esi + 0x1d4], 0xbb92847a
mov dword [esi + 0x1d8], 0xc9c2cecb
mov dword [esi + 0x1dc], 0x81d7ccd9
mov word [esi + 0x1e0], 0x45a4
mov dword [esi + 0x1e2], 0
mov byte [esi + 0x1e6], 0
mov dword [esi + 0x72c], 0
mov eax, dword [esi + 0x72c]
cmp eax, 0x12
ja 0x42ca1e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x72c]
mov ecx, dword [esi + 0x72c]
movzx edx, byte [esi + ecx + 0x1d4]
lea ecx, [eax + edx]
add ecx, 0x80254b94
add eax, 0x80254b94
and eax, edx
mov edx, ecx
not edx
and edx, eax
add edx, eax
not eax
and eax, ecx
sub eax, edx
mov dword [esi + 0xe8], eax
mov eax, dword [esi + 0xe8]
add al, 0x1c
mov ecx, dword [esi + 0x72c]
mov byte [esi + ecx + 0x1d4], al
inc dword [esi + 0x72c]
mov eax, dword [esi + 0x72c]
cmp eax, 0x13
jb 0x42c9c0
movzx eax, byte [esi + 0x1d4]
test al, al
je 0x42ca3b
lea ecx, [esi + 0x1d5]
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42ca30
mov edx, edi
mov byte [edi], 0
movzx eax, byte [esi + 0x7f0]
test al, al
je 0x42ca6b
lea ecx, [esi + 0x7f1]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42ca60
mov edi, edx
mov byte [edx], 0
mov byte [esi + 0x51c], 0
mov dword [esi + 0xc0], 0x10
lea eax, [esi + 0xc0]
lea ecx, [esi + 0x51c]
push eax
push ecx
push 4
call ebx
mov dword [esi + 0x1d4], 0xcb9ae8ba
mov dword [esi + 0x1d8], 0xc2f82b23
mov dword [esi + 0x1dc], 0x91fcc6cd
mov byte [esi + 0x1e0], 0xb0
mov word [esi + 0x1e1], 0
mov byte [esi + 0x1e3], 0
mov dword [esi + 0x72c], 0
mov eax, dword [esi + 0x72c]
cmp eax, 0xf
ja 0x42cb34
nop
nop
nop
mov eax, dword [esi + 0x72c]
mov ecx, dword [esi + 0x72c]
movzx ecx, byte [esi + ecx + 0x1d4]
lea edx, [eax + ecx]
add edx, 0xf12e511f
add eax, 0xf12e511f
and eax, ecx
add eax, eax
sub edx, eax
mov dword [esi + 0xe8], edx
mov eax, dword [esi + 0xe8]
add al, 0x65
mov ecx, dword [esi + 0x72c]
mov byte [esi + ecx + 0x1d4], al
inc dword [esi + 0x72c]
mov eax, dword [esi + 0x72c]
cmp eax, 0x10
jb 0x42cae0
movzx eax, byte [esi + 0x1d4]
test al, al
je 0x42cb5d
lea ecx, [esi + 0x1d5]
mov ebx, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42cb50
jmp 0x42cb5f
mov ebx, edi
mov byte [ebx], 0
movzx eax, byte [esi + 0x51c]
test al, al
je 0x42cb8b
lea ecx, [esi + 0x51d]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42cb80
mov byte [ebx], 0
mov word [esi + 0x72c], 0
push 0x9887397f
push dword [0x44e4a0]
call fcn.00441e40
add esp, 8
lea ecx, [esi + 0x72c]
push 0x56
mov edi, ecx
push ecx
call eax
mov dword [esi + 0x1d4], 0x43965cbe
mov dword [esi + 0x1d8], 0x2e592755
mov dword [esi + 0x1dc], 0x79535a51
mov word [esi + 0x1e0], 0xbd9c
mov dword [esi + 0x1e2], 0
mov byte [esi + 0x1e6], 0
mov dword [esi + 0x30], 0
mov eax, dword [esi + 0x30]
cmp eax, 0x12
ja 0x42cc4f
nop
nop
mov eax, dword [esi + 0x30]
mov ecx, dword [esi + 0x30]
movzx edx, byte [esi + ecx + 0x1d4]
lea ecx, [eax + edx]
add ecx, 0x1e9cadde
add eax, 0x1e9cadde
and eax, edx
mov edx, ecx
not edx
and edx, eax
add edx, eax
not eax
and eax, ecx
sub eax, edx
mov dword [esi + 0xe8], eax
mov eax, dword [esi + 0xe8]
add al, 0xaa
mov ecx, dword [esi + 0x30]
mov byte [esi + ecx + 0x1d4], al
inc dword [esi + 0x30]
mov eax, dword [esi + 0x30]
cmp eax, 0x13
jb 0x42cc00
movzx eax, byte [esi + 0x1d4]
test al, al
je 0x42cc7d
lea ecx, [esi + 0x1d5]
mov edx, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42cc70
jmp 0x42cc7f
mov edx, edi
mov byte [ebx], 0
lea eax, [ebx + 0x56]
mov dword [esi + 0xc], eax
xor eax, eax
mov ecx, ebx
mov dword [esi + 4], ebx
jmp 0x42ccbb
mov byte [ecx], bl
mov edi, 1
add edx, 2
add eax, edi
mov ebx, dword [esi + 4]
lea ecx, [ebx + eax]
cmp eax, 0x55
jae 0x42cd57
movzx ebx, word [edx]
test bx, bx
je 0x42cd54
cmp bx, 0x7f
jbe 0x42cca0
mov dword [esi + 8], edx
mov edx, ecx
not edx
add edx, dword [esi + 0xc]
movzx edi, bx
cmp edx, 2
jb 0x42cd10
cmp edi, 0x7ff
ja 0x42cd10
mov edx, ebx
shr edx, 6
add dl, 0xc0
mov byte [ecx], dl
and bl, 0x3f
or bl, 0x80
mov byte [ecx + 1], bl
mov edi, 2
mov edx, dword [esi + 8]
jmp 0x42cca7
mov dword [esi + 0x10], edi
xor edi, edi
cmp edx, 3
mov edx, dword [esi + 8]
jb 0x42cca7
mov edi, dword [esi + 0x10]
mov edx, edi
shr edx, 0xc
or dl, 0xe0
mov byte [ecx], dl
mov edx, dword [esi + 8]
shr edi, 6
mov dword [esi + 0x10], ecx
mov ecx, edi
and cl, 0x3f
or cl, 0x80
mov edi, dword [esi + 0x10]
mov byte [edi + 1], cl
and bl, 0x3f
or bl, 0x80
mov byte [edi + 2], bl
mov edi, 3
jmp 0x42cca7
mov ebx, dword [esi + 4]
mov byte [ecx], 0
mov dword [esi + 0x1d4], 0xceeef496
mov dword [esi + 0x1d8], 0xe33b393e
mov dword [esi + 0x1dc], 0x3230382a
mov word [esi + 0x1e0], 0xcb33
mov byte [esi + 0x1e2], 0x9a
mov word [esi + 0x1e3], 0
mov byte [esi + 0x1e5], 0
mov dword [esi + 0x30], 0
mov ecx, dword [esi + 0x30]
cmp ecx, 0x11
ja 0x42cdf5
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esi + 0x30]
mov edx, dword [esi + 0x30]
movzx edx, byte [esi + edx + 0x1d4]
mov edi, ecx
xor edi, 0xc0db3522
and ecx, 0xc0db3522
lea ecx, [edi + ecx*2]
xor ecx, edx
mov dword [esi + 0xe8], ecx
mov ecx, dword [esi + 0xe8]
add cl, 0x56
mov edx, dword [esi + 0x30]
mov byte [esi + edx + 0x1d4], cl
inc dword [esi + 0x30]
mov ecx, dword [esi + 0x30]
cmp ecx, 0x12
jb 0x42cdb0
add ebx, eax
movzx eax, byte [esi + 0x1d4]
test al, al
je 0x42ce1b
lea ecx, [esi + 0x1d5]
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42ce10
mov byte [ebx], 0
call fcn.00431240
xor ecx, ecx
mov dword [esi + 4], eax
test eax, eax
setne cl
jmp dword [ecx*4 + 0x44add0]
mov dword [esi + 0x1d4], 0xf1c1e4e6
mov dword [esi + 0x1d8], 0x320c022e
mov byte [esi + 0x1dc], 0x94
mov dword [esi + 0x1dd], 0
mov word [esi + 0x1e1], 0
mov dword [esi + 0x30], 0
mov eax, dword [esi + 0x30]
cmp eax, 0xe
ja 0x42cec3
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x30]
mov ecx, dword [esi + 0x30]
movzx ecx, byte [esi + ecx + 0x1d4]
mov edx, eax
xor edx, 0x5a3251a5
and eax, 0xda3251a5
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esi + 0xe8], eax
mov eax, dword [esi + 0xe8]
add al, 0xc7
mov ecx, dword [esi + 0x30]
mov byte [esi + ecx + 0x1d4], al
inc dword [esi + 0x30]
mov eax, dword [esi + 0x30]
cmp eax, 0xf
jb 0x42ce80
movzx eax, byte [esi + 0x1d4]
test al, al
je 0x42ceeb
lea ecx, [esi + 0x1d5]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42cee0
mov byte [ebx], 0
jmp case.0x42c6ac.17
mov edx, dword [case.0x42c6ac.6]
mov ecx, dword [esi + 4]
nop
nop
nop
nop
jmp edx
mov ecx, dword [ecx]
xor edx, edx
test ecx, ecx
setne dl
jmp dword [edx*4 + 0x44ae00]
mov dword [ebx], 0x202d090a
add ebx, 4
mov eax, ebx
mov edx, dword [ecx + 8]
movzx ebx, byte [edx]
test bl, bl
je 0x42cf4b
inc edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], bl
inc eax
movzx ebx, byte [edx]
inc edx
test bl, bl
jne 0x42cf40
mov byte [eax], 0
xor edx, edx
cmp byte [ecx + 4], 3
setb dl
mov ebx, eax
jmp dword [edx*4 + 0x44ade8]
mov eax, ebx
mov byte [ebx], 0x20
movzx edx, byte [ecx + 4]
xor ebx, ebx
test dl, dl
sete bl
jmp dword [ebx*4 + 0x44adf0]
xor ebx, ebx
cmp dl, 1
sete bl
jmp dword [ebx*4 + 0x44adf8]
lea edx, [esi + 0x1de]
mov dword [esi + 0x1d4], 0xd0d0cac1
mov dword [esi + 0x1d8], 0x21ddc9d1
mov word [esi + 0x1dc], 0xdf3b
mov byte [edx + 4], 0
mov dword [edx], 0
mov dword [esi + 0x30], 0
mov edx, dword [esi + 0x30]
cmp edx, 0xe
ja 0x42d015
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esi + 0x30]
mov edi, dword [esi + 0x30]
movzx edi, byte [esi + edi + 0x1d4]
mov ebx, edx
xor ebx, 0x4b2d0779
and edx, 0xcb2d0779
lea edx, [ebx + edx*2]
xor edx, edi
mov dword [esi + 0xe8], edx
mov edx, dword [esi + 0xe8]
add dl, 0xa3
mov edi, dword [esi + 0x30]
mov byte [esi + edi + 0x1d4], dl
inc dword [esi + 0x30]
mov edx, dword [esi + 0x30]
cmp edx, 0xf
jb 0x42cfd0
lea edx, [esi + 0x1d4]
jmp case.0x42a5d1.78
mov dword [esi + 0xe8], 0xf087661
mov dword [esi + 0xec], 0xc367
mov dword [esi + 0x70], 0
mov edx, dword [esi + 0x70]
cmp edx, 7
ja 0x42d100
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esi + 0x70]
mov edi, dword [esi + 0x70]
movzx edi, byte [esi + edi + 0xe8]
add edx, 0x7278d9b1
xor edx, edi
mov dword [esi + 0x30], edx
mov edx, dword [esi + 0x30]
mov edi, edx
xor edi, 0x75
and edx, 0xa
add edx, edx
sub edx, edi
mov edi, dword [esi + 0x70]
mov byte [esi + edi + 0xe8], dl
inc dword [esi + 0x70]
mov edx, dword [esi + 0x70]
cmp edx, 8
jb 0x42d050
jmp 0x42d100
mov dword [esi + 0xe8], 0x9a888a99
mov byte [esi + 0xec], 0x38
mov dword [esi + 0xed], 0
mov dword [esi + 0x70], 0
mov edx, dword [esi + 0x70]
cmp edx, 8
ja 0x42d100
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esi + 0x70]
mov edi, dword [esi + 0x70]
movzx edi, byte [esi + edi + 0xe8]
mov ebx, edx
xor ebx, 0x3d937cb
and edx, 0x3d937cb
lea edx, [ebx + edx*2]
xor edx, edi
mov dword [esi + 0x30], edx
mov edx, dword [esi + 0x30]
add dl, 9
mov edi, dword [esi + 0x70]
mov byte [esi + edi + 0xe8], dl
inc dword [esi + 0x70]
mov edx, dword [esi + 0x70]
cmp edx, 9
jb 0x42d0c0
nop
lea edx, [esi + 0xe8]
inc eax
movzx ebx, byte [edx]
test bl, bl
je 0x42d11b
inc edx
nop
mov byte [eax], bl
inc eax
movzx ebx, byte [edx]
inc edx
test bl, bl
jne 0x42d110
mov byte [eax], 0
mov ecx, dword [ecx]
xor edx, edx
test ecx, ecx
setne dl
mov ebx, eax
jmp dword [edx*4 + 0x44ae00]
jmp dword [0x44ae08]
mov ecx, dword [esi + 4]
mov edi, ecx
call fcn.00432ef0
push edi
call fcn.0040c780
add esp, 4
jmp case.0x42c6ac.17
mov dword [esi + 0x1d4], 0xb222c4a
mov dword [esi + 0x1d8], 0x1d020cf3
mov dword [esi + 0x1dc], 0x4928
mov byte [esi + 0x1e0], 0
mov dword [esi + 0x30], 0
mov eax, dword [esi + 0x30]
cmp eax, 0xc
ja 0x42d1d3
nop
mov ecx, dword [esi + 0x30]
mov eax, dword [esi + 0x30]
movzx eax, byte [esi + eax + 0x1d4]
lea edx, [ecx + ecx]
and edx, 0xb5dd34e0
mov edi, ecx
not edi
or edi, 0x5aee9a70
add edi, ecx
sub ecx, edx
lea ecx, [ecx + edi*2]
add ecx, 0xdaee9a72
xor ecx, eax
mov dword [esi + 0xe8], ecx
mov eax, dword [esi + 0xe8]
add al, 0xd0
mov ecx, dword [esi + 0x30]
mov byte [esi + ecx + 0x1d4], al
inc dword [esi + 0x30]
mov eax, dword [esi + 0x30]
cmp eax, 0xd
jb 0x42d180
movzx eax, byte [esi + 0x1d4]
test al, al
je 0x42d1fb
lea ecx, [esi + 0x1d5]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42d1f0
mov byte [ebx], 0
movzx eax, byte [0x44d138]
test al, al
je 0x42d221
xor ecx, ecx
nop
nop
nop
nop
nop
mov byte [ebx + ecx], al
movzx eax, byte [ecx + 0x44d139]
inc ecx
test al, al
jne 0x42d210
add ebx, ecx
mov byte [ebx], 0
mov dword [esi + 0xb4], 0
mov dword [esi + 0xb0], 0
push 0xd7ec7170
push dword [0x44e4a0]
call fcn.00441e40
add esp, 8
lea ecx, [esi + 0xb0]
push ecx
call eax
mov eax, dword [esi + 0xb0]
mov ecx, dword [esi + 0xb4]
shld ecx, eax, 0x16
lea eax, [esi + 0x7d9]
push 0xa
push 0xb
push eax
push ecx
call fcn.00419710
add esp, 0x10
mov word [esi + 0xe8], 0x272d
mov byte [esi + 0xea], 0x96
mov dword [esi + 0xeb], 0
mov byte [esi + 0xef], 0
mov dword [esi + 0x30], 0
mov ecx, dword [esi + 0x30]
cmp ecx, 7
ja 0x42d2ea
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esi + 0x30]
mov edx, dword [esi + 0x30]
movzx edx, byte [esi + edx + 0xe8]
add ecx, 0x37f02ba6
xor ecx, edx
mov dword [esi + 0x1d4], ecx
mov ecx, dword [esi + 0x1d4]
add cl, 0xc2
mov edx, dword [esi + 0x30]
mov byte [esi + edx + 0xe8], cl
inc dword [esi + 0x30]
mov ecx, dword [esi + 0x30]
cmp ecx, 8
jb 0x42d2b0
mov dword [esi + 0x1d4], 0x152244a
mov dword [esi + 0x1d8], 0x1c4e182d
mov dword [esi + 0x1dc], 0x21f7e3f1
mov dword [esi + 0x1e0], 0x6544
mov dword [esi + 0x70], 0
mov ecx, dword [esi + 0x70]
cmp ecx, 0xf
ja 0x42d37b
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esi + 0x70]
mov edx, dword [esi + 0x70]
movzx edx, byte [esi + edx + 0x1d4]
mov edi, ecx
xor edi, 0xe4db466c
and ecx, 0xe4db466c
lea ecx, [edi + ecx*2]
xor ecx, edx
mov dword [esi + 0x30], ecx
mov ecx, dword [esi + 0x30]
mov edx, ecx
not edx
and edx, 0x1c
and ecx, 0xe3
sub ecx, edx
mov edx, dword [esi + 0x70]
mov byte [esi + edx + 0x1d4], cl
inc dword [esi + 0x70]
mov ecx, dword [esi + 0x70]
cmp ecx, 0x10
jb 0x42d330
movzx ecx, byte [esi + 0x1d4]
test cl, cl
je 0x42d39b
lea edx, [esi + 0x1d5]
nop
nop
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42d390
mov byte [ebx], 0
movzx ecx, byte [eax]
test cl, cl
je 0x42d3bb
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x42d3b0
mov byte [ebx], 0
movzx eax, byte [esi + 0xe8]
test al, al
je 0x42d3db
lea ecx, [esi + 0xe9]
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42d3d0
xor eax, eax
xor ecx, ecx
mov edi, ebx
cpuid
mov dword [esi + 0x1c4], ebx
mov dword [esi + 0x1c8], edx
mov byte [edi], 0
mov dword [esi + 0x1cc], ecx
mov byte [esi + 0x1d0], 0
mov dword [esi + 0x1d4], 0x6c0a782a
mov dword [esi + 0x1d8], 0x570e5458
mov dword [esi + 0x1dc], 0xc036c147
mov dword [esi + 0x1e0], 0x557609c6
mov word [esi + 0x1e4], 0
mov byte [esi + 0x1e6], 0
mov dword [esi + 0x30], 0
mov eax, dword [esi + 0x30]
cmp eax, 0x12
ja 0x42d4a8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x30]
mov ecx, eax
xor ecx, 0x43b89c48
mov edx, eax
or edx, 0x3c4763b7
and edx, ecx
lea ecx, [eax + eax]
and ecx, 0x788ec76e
sub eax, ecx
lea eax, [eax + edx*2]
add eax, 0x3c4763b7
mov ecx, dword [esi + 0x30]
movzx ecx, byte [esi + ecx + 0x1d4]
xor eax, ecx
mov dword [esi + 0xe8], eax
mov eax, dword [esi + 0xe8]
add al, 0x6d
mov ecx, dword [esi + 0x30]
mov byte [esi + ecx + 0x1d4], al
inc dword [esi + 0x30]
mov eax, dword [esi + 0x30]
cmp eax, 0x13
jb 0x42d450
movzx eax, byte [esi + 0x1d4]
test al, al
je 0x42d4cb
lea ecx, [esi + 0x1d5]
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42d4c0
mov byte [edi], 0
movzx eax, byte [esi + 0x1c4]
test al, al
je 0x42d4eb
lea ecx, [esi + 0x1c5]
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42d4e0
mov dword [esi + 4], edi
mov byte [edi], 0
mov eax, reloc.OLEAUT32.dll_SysReAllocString
xor ecx, ecx
cpuid
mov dword [esi + 0x30], eax
mov dword [esi + 0x34], ebx
mov dword [esi + 0x38], ecx
mov dword [esi + 0x3c], edx
mov eax, SysStringLen
mov ecx, 0
cpuid
mov dword [esi + 0x40], eax
mov dword [esi + 0x44], ebx
mov dword [esi + 0x48], ecx
mov dword [esi + 0x4c], edx
mov eax, SysStringLen
mov ecx, 0
cpuid
mov dword [esi + 0x50], eax
mov dword [esi + 0x54], ebx
mov dword [esi + 0x58], ecx
mov dword [esi + 0x5c], edx
lea edx, [esi + 0xa0]
lea eax, [esi + 0x70]
lea ebx, [esi + 0x30]
mov edi, eax
mov ecx, 0xc
xchg esi, ebx
rep movsd dword es:[edi], dword [esi]
xchg esi, ebx
lea ebx, [esi + 0x60]
mov edi, edx
xor ecx, ecx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov ecx, edx
dec ecx
xor ebx, ebx
cmp byte [edx - 1], 0x20
sete bl
jmp dword [ebx*4 + 0x44ae10]
mov byte [ecx], 0
xor edx, edx
cmp byte [ecx - 1], 0x20
lea ecx, [ecx - 1]
sete dl
jmp dword [edx*4 + 0x44ae10]
xor ecx, ecx
cmp byte [eax], 0x20
sete cl
jmp dword [ecx*4 + 0x44ae18]
inc eax
xor ecx, ecx
cmp byte [eax], 0x20
sete cl
jmp dword [ecx*4 + 0x44ae18]
mov dword [esi + 0x1d4], 0x40222c0a
mov dword [esi + 0x1d8], 0x49265054
mov dword [esi + 0x1dc], 0x316f6469
mov dword [esi + 0x1e0], 0xd2c
mov dword [esi + 0x14], 0
mov ecx, dword [esi + 0x14]
cmp ecx, 0xf
ja 0x42d63a
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0x14]
movzx edx, byte [esi + edx + 0x1d4]
mov edi, ecx
xor edi, 0xc8720400
mov ebx, ecx
and ebx, 0xc8720400
and ecx, edx
lea edi, [edi + ebx*2]
add edi, edx
add ecx, ecx
sub edi, ecx
mov dword [esi + 0xe8], edi
mov ecx, dword [esi + 0xe8]
mov edx, dword [esi + 0x14]
mov byte [esi + edx + 0x1d4], cl
inc dword [esi + 0x14]
mov ecx, dword [esi + 0x14]
cmp ecx, 0x10
jb 0x42d5f0
movzx ecx, byte [esi + 0x1d4]
test cl, cl
je 0x42d65d
lea edx, [esi + 0x1d5]
mov ebx, dword [esi + 4]
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42d650
jmp 0x42d660
mov ebx, dword [esi + 4]
mov byte [ebx], 0
movzx ecx, byte [eax]
test cl, cl
je 0x42d67c
nop
nop
nop
nop
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [eax + 1]
inc eax
test cl, cl
jne 0x42d670
mov byte [ebx], 0
mov dword [esi + 0xe8], 0x7c7d7a7b
mov byte [esi + 0xec], 0
mov dword [esi + 0xa4], 0
mov eax, dword [esi + 0xa4]
cmp eax, 4
ja 0x42d6fc
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0xa4]
mov ecx, dword [esi + 0xa4]
movzx ecx, byte [esi + ecx + 0xe8]
mov edx, eax
xor edx, 0xd47f60ea
and eax, 0xd47f60ea
lea eax, [edx + eax*2]
xor eax, ecx
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x14]
add al, 0x6e
mov ecx, dword [esi + 0xa4]
mov byte [esi + ecx + 0xe8], al
inc dword [esi + 0xa4]
mov eax, dword [esi + 0xa4]
cmp eax, 5
jb 0x42d6b0
mov eax, dword [esi + 0xe8]
mov ecx, dword [0x44e4ac]
test ecx, ecx
je case.default.0x42d75e
xor edx, edx
mov edi, dword [0x44e4b0]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + edx*8], 0xcecd21fd
je 0x42d730
inc edx
cmp ecx, edx
jne 0x42d720
jmp case.default.0x42d75e
mov ecx, dword [edi + edx*8 + 4]
cmp ecx, eax
je case.default.0x42d75e
lea eax, [esi + 0x1d4]
push 0
push 0x2c
push eax
push 0
push 4
push dword [0x44e4b4]
push ecx
call fcn.0043f3f0
add esp, 0x1c
mov dword [esi + 4], ebx
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44ae20]
mov dword [esi + 8], 0
mov eax, 0xb
xor ecx, ecx
cpuid
mov edi, ebx
and ecx, 0xff00
xor eax, eax
cmp ecx, 0x100
sete al
jmp dword [eax*4 + 0x44ae28]
mov eax, 0xb
xor ecx, ecx
cpuid
mov edi, ebx
and ecx, 0xff00
xor eax, eax
cmp ecx, 0x100
movzx ecx, byte [esi + 0x1fc]
mov dword [esi + 8], ecx
sete al
jmp dword [eax*4 + 0x44ae28]
mov eax, 0xb
mov ecx, 1
cpuid
mov edi, ebx
mov eax, dword [case.0x42d75e.6]
nop
jmp eax
and ecx, 0xff00
xor eax, eax
cmp ecx, 0x100
sete al
jmp dword [eax*4 + 0x44ae40]
movzx eax, byte [esi + 8]
mov dword [esi + 0xc], eax
xor eax, eax
xor ecx, ecx
cpuid
cmp eax, 4
jl 0x42db67
mov eax, 4
xor ecx, ecx
cpuid
jmp 0x42d86f
mov eax, 0xb
xor ecx, ecx
cpuid
and ecx, 0xff00
xor eax, eax
cmp ecx, 0x200
sete al
jmp dword [eax*4 + 0x44ae48]
mov eax, 0xb
mov ecx, 1
cpuid
and ecx, 0xff00
xor eax, eax
cmp ecx, 0x200
sete al
jmp dword [eax*4 + 0x44ae50]
movzx eax, byte [esi + 8]
mov dword [esi + 0xc], eax
xor eax, eax
xor ecx, ecx
cpuid
cmp eax, 4
jl 0x42e3a0
mov eax, 4
xor ecx, ecx
cpuid
sar eax, 0x1a
jmp 0x42e3d0
xor eax, eax
test di, di
sete al
jmp dword [eax*4 + 0x44ae68]
mov eax, ebx
xor edx, edx
div di
movzx eax, ax
jmp case.0x42a5d1.110
mov edi, ebx
xor eax, eax
xor ecx, ecx
cpuid
cmp eax, 4
jl 0x42db0b
mov eax, 4
xor ecx, ecx
cpuid
sar eax, 0x1a
inc eax
mov ebx, edi
jmp case.0x42a5d1.110
mov ebx, dword [esi + 4]
mov byte [ebx], 0
movzx edx, byte [eax]
test dl, dl
mov edi, dword [esi + 0x10]
je 0x42d8db
inc eax
nop
nop
nop
nop
nop
mov byte [ebx], dl
inc ebx
movzx edx, byte [eax]
inc eax
test dl, dl
jne 0x42d8d0
mov word [ebx], 0x2820
add ebx, 2
movzx ecx, byte [edi]
test cl, cl
mov eax, dword [esi + 8]
mov edx, dword [esi + 0xc]
je 0x42d90b
inc edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [edi]
inc edi
test cl, cl
jne 0x42d900
mov byte [ebx], 0x2e
inc ebx
movzx ecx, byte [edx]
test cl, cl
je 0x42d92b
inc edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42d920
mov byte [ebx], 0x2e
inc ebx
movzx ecx, byte [eax]
test cl, cl
je 0x42d94b
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x42d940
mov byte [ebx], 0x29
inc ebx
lea eax, [esi + 0x14]
push eax
call fcn.00442700
add esp, 4
movzx eax, al
jmp dword [eax*4 + 0x44ad78]
mov eax, ebx
jmp dword [0x44ad9c]
jmp dword [0x44ad80]
lea eax, [ebx + 1]
mov byte [ebx], 0x20
mov ecx, dword [esi + 0x14]
jmp dword [0x44ad8c]
mov byte [ebx], 0x20
lea eax, [ebx + 1]
mov byte [ebx], 0x20
mov ecx, dword [esi + 0x14]
jmp dword [0x44ad8c]
xor edx, edx
cmp ecx, 1
sete dl
jmp dword [edx*4 + 0x44ad90]
mov dword [esi + 0xd0], 0xc19a995c
mov dword [esi + 0x70], 0
mov ecx, dword [esi + 0x70]
cmp ecx, 3
ja 0x42da1b
nop
nop
nop
nop
nop
nop
mov ecx, dword [esi + 0x70]
mov edx, dword [esi + 0x70]
movzx edx, byte [esi + edx + 0xd0]
mov edi, ecx
xor edi, 0x24068951
and ecx, 0x24068951
lea ecx, [edi + ecx*2]
xor ecx, edx
mov dword [esi + 0x30], ecx
mov ecx, dword [esi + 0x30]
mov edx, ecx
xor edx, 0x95
and ecx, 0x6a
add ecx, ecx
sub ecx, edx
mov edx, dword [esi + 0x70]
mov byte [esi + edx + 0xd0], cl
inc dword [esi + 0x70]
mov ecx, dword [esi + 0x70]
cmp ecx, 4
jb 0x42d9d0
lea ecx, [esi + 0xd0]
jmp case.0x42a5d1.52
lea eax, [edx + 4]
and eax, 0xfffffffc
call fcn.0040c6d0
mov eax, esp
and eax, 0xfffffff0
mov esp, eax
test edx, edx
jle 0x42e1b8
lea ecx, [eax + edx]
mov dword [esi + 0x10], ecx
inc edx
add edx, eax
mov ebx, dword [esi + 0x64]
mov edi, eax
jmp 0x42da68
mov byte [edi], cl
mov dword [esi + 4], 1
add ebx, 2
add edi, dword [esi + 4]
cmp edi, dword [esi + 0x10]
jae 0x42e1ba
movzx ecx, word [ebx]
test cx, cx
je 0x42e1ba
cmp cx, 0x7f
jbe 0x42da50
mov dword [esi + 0xc], ebx
mov dword [esi + 0x68], edi
mov ebx, edi
not ebx
add ebx, edx
movzx edi, cx
mov dword [esi + 8], edi
cmp ebx, 2
jb 0x42dac0
cmp dword [esi + 8], 0x7ff
ja 0x42dac0
mov ebx, ecx
shr ebx, 6
add bl, 0xc0
mov edi, dword [esi + 0x68]
mov byte [edi], bl
and cl, 0x3f
or cl, 0x80
mov byte [edi + 1], cl
mov dword [esi + 4], 2
mov ebx, dword [esi + 0xc]
jmp 0x42da59
mov dword [esi + 4], 0
cmp ebx, 3
mov ebx, dword [esi + 0xc]
mov edi, dword [esi + 0x68]
jb 0x42da59
mov ebx, dword [esi + 8]
shr ebx, 0xc
or bl, 0xe0
mov byte [edi], bl
mov ebx, dword [esi + 0xc]
shr dword [esi + 8], 6
mov dword [esi + 4], ecx
mov ecx, dword [esi + 8]
and cl, 0x3f
or cl, 0x80
mov byte [edi + 1], cl
mov ecx, dword [esi + 4]
and cl, 0x3f
or cl, 0x80
mov byte [edi + 2], cl
mov dword [esi + 4], 3
jmp 0x42da59
mov eax, SysReAllocString
xor ecx, ecx
cpuid
mov dword [esi + 8], eax
mov eax, 1
xor ecx, ecx
cpuid
mov eax, 1
test edx, 0x10000000
je 0x42d8b3
cmp dword [esi + 8], reloc.OLEAUT32.dll_VariantClear
mov ebx, edi
jl case.0x42a5d1.110
mov eax, reloc.OLEAUT32.dll_VariantClear
xor ecx, ecx
cpuid
mov ebx, edi
movzx eax, cl
inc eax
mov dword [esi + 8], eax
mov eax, dword [case.0x42d75e.22]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
jmp 0x42e3e3
mov eax, SysReAllocString
xor ecx, ecx
cpuid
mov edi, eax
mov eax, 1
xor ecx, ecx
cpuid
test edx, 0x10000000
je 0x42e3d9
cmp edi, reloc.OLEAUT32.dll_VariantClear
jl 0x42e3d9
mov eax, reloc.OLEAUT32.dll_VariantClear
xor ecx, ecx
cpuid
jmp 0x42e3cd
mov dword [esi + 0x52c], 0x93c0c208
mov word [esi + 0x530], 0
mov byte [esi + 0x532], 0
mov dword [esi + 0x70], 0
mov ecx, dword [esi + 0x70]
cmp ecx, 6
ja 0x42dc1a
nop
nop
nop
nop
nop
nop
mov edx, dword [esi + 0x70]
mov ecx, dword [esi + 0x70]
movzx ecx, byte [esi + ecx + 0x52c]
mov edi, edx
xor edi, 0x8f5ecc24
and edx, 0xf5ecc24
lea edx, [edi + edx*2]
mov edi, edx
add edx, ecx
not ecx
or edi, ecx
sub ecx, edi
lea ecx, [edx + ecx*2]
mov dword [esi + 0x30], ecx
mov ecx, dword [esi + 0x30]
add cl, 0x4c
mov edx, dword [esi + 0x70]
mov byte [esi + edx + 0x52c], cl
inc dword [esi + 0x70]
mov ecx, dword [esi + 0x70]
cmp ecx, 7
jb 0x42dbd0
lea ecx, [esi + 0x52c]
movzx edx, byte [ecx]
test dl, dl
je 0x42dc3b
inc ecx
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], dl
inc eax
movzx edx, byte [ecx]
inc ecx
test dl, dl
jne 0x42dc30
mov byte [eax], 0
jmp dword [0x44ad9c]
mov dword [esi + 0x52c], 0x5d2a381a
mov dword [esi + 0x530], 0x71797a79
mov dword [esi + 0x534], 0x8d7d5f24
mov dword [esi + 0x538], 0x1d3e597b
mov dword [esi + 0x70], 0
mov ecx, dword [esi + 0x70]
cmp ecx, 0xf
ja 0x42dcb4
nop
nop
nop
nop
nop
mov ecx, dword [esi + 0x70]
mov edx, dword [esi + 0x70]
movzx edx, byte [esi + edx + 0x52c]
add ecx, 0x1f0d4303
xor ecx, edx
mov dword [esi + 0x30], ecx
mov ecx, dword [esi + 0x30]
add cl, 0xf1
mov edx, dword [esi + 0x70]
mov byte [esi + edx + 0x52c], cl
inc dword [esi + 0x70]
mov ecx, dword [esi + 0x70]
cmp ecx, 0x10
jb 0x42dc80
movzx edx, byte [esi + 0x52c]
mov ecx, eax
test dl, dl
je 0x42dcdb
lea edi, [esi + 0x52d]
mov ecx, eax
nop
nop
nop
nop
nop
nop
nop
mov byte [ecx], dl
inc ecx
movzx edx, byte [edi]
inc edi
test dl, dl
jne 0x42dcd0
mov byte [ecx], 0
movzx edx, byte [esi + 0x1e8]
test dl, dl
je 0x42dcfb
lea edi, [esi + 0x1e9]
nop
mov byte [ecx], dl
inc ecx
movzx edx, byte [edi]
inc edi
test dl, dl
jne 0x42dcf0
mov byte [ecx], 0
mov dword [esi + 0x52c], 0x257e4066
mov dword [esi + 0x530], 0x75350c0b
mov dword [esi + 0x534], 0x2e08063e
mov dword [esi + 0x538], 0x393d6b42
mov word [esi + 0x53c], 0x8f49
mov dword [esi + 0x53e], 0
mov dword [esi + 0x70], 0
mov edx, dword [esi + 0x70]
cmp edx, 0x15
ja 0x42dd9b
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esi + 0x70]
mov edi, dword [esi + 0x70]
movzx edi, byte [esi + edi + 0x52c]
mov ebx, edx
xor ebx, 0x8e4e4865
and edx, 0xe4e4865
lea edx, [ebx + edx*2]
xor edx, edi
mov dword [esi + 0x30], edx
mov edx, dword [esi + 0x30]
mov edi, edx
xor edi, 0xf9
and edx, 6
add edx, edx
sub edx, edi
mov edi, dword [esi + 0x70]
mov byte [esi + edi + 0x52c], dl
inc dword [esi + 0x70]
mov edx, dword [esi + 0x70]
cmp edx, 0x16
jb 0x42dd50
movzx edx, byte [esi + 0x52c]
test dl, dl
je 0x42ddbb
lea edi, [esi + 0x52d]
nop
nop
nop
nop
mov byte [ecx], dl
inc ecx
movzx edx, byte [edi]
inc edi
test dl, dl
jne 0x42ddb0
mov byte [ecx], 0
jmp case.0x42a5d1.54
mov byte [edi], 0
jmp dword [0x44ada0]
mov dword [esi + 0x52c], 0x5d2a381a
mov dword [esi + 0x530], 0x71797a79
mov dword [esi + 0x534], 0x8d7d5f24
mov dword [esi + 0x538], 0x1d3e597b
mov dword [esi + 0x70], 0
mov ecx, dword [esi + 0x70]
cmp ecx, 0xf
ja 0x42de34
mov ecx, dword [esi + 0x70]
mov edx, dword [esi + 0x70]
movzx edx, byte [esi + edx + 0x52c]
add ecx, 0x1f0d4303
xor ecx, edx
mov dword [esi + 0x30], ecx
mov ecx, dword [esi + 0x30]
add cl, 0xf1
mov edx, dword [esi + 0x70]
mov byte [esi + edx + 0x52c], cl
inc dword [esi + 0x70]
mov ecx, dword [esi + 0x70]
cmp ecx, 0x10
jb 0x42de00
movzx ecx, byte [esi + 0x52c]
mov edi, eax
test cl, cl
je 0x42de5b
lea edx, [esi + 0x52d]
mov edi, eax
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42de50
mov byte [edi], 0
movzx ecx, byte [esi + 0x1e8]
test cl, cl
je 0x42de7b
lea edx, [esi + 0x1e9]
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42de70
mov byte [edi], 0
mov dword [esi + 0x52c], 0x257e4066
mov dword [esi + 0x530], 0x75350c0b
mov dword [esi + 0x534], 0x2e08063e
mov dword [esi + 0x538], 0x393d6b42
mov word [esi + 0x53c], 0x8f49
mov dword [esi + 0x53e], 0
mov dword [esi + 0x70], 0
mov ecx, dword [esi + 0x70]
cmp ecx, 0x15
ja 0x42df1b
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esi + 0x70]
mov edx, dword [esi + 0x70]
movzx edx, byte [esi + edx + 0x52c]
mov ebx, ecx
xor ebx, 0x8e4e4865
and ecx, 0xe4e4865
lea ecx, [ebx + ecx*2]
xor ecx, edx
mov dword [esi + 0x30], ecx
mov ecx, dword [esi + 0x30]
mov edx, ecx
xor edx, 0xf9
and ecx, 6
add ecx, ecx
sub ecx, edx
mov edx, dword [esi + 0x70]
mov byte [esi + edx + 0x52c], cl
inc dword [esi + 0x70]
mov ecx, dword [esi + 0x70]
cmp ecx, 0x16
jb 0x42ded0
movzx ecx, byte [esi + 0x52c]
test cl, cl
je 0x42ddc0
lea edx, [esi + 0x52d]
mov byte [edi], cl
inc edi
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42df30
jmp 0x42ddc0
xor eax, eax
cmp word [esi + 0x1fc], 0
setns al
jmp dword [eax*4 + 0x44ada8]
jmp dword [0x44adb4]
mov byte [edi], 0x2b
inc edi
jmp dword [0x44adb4]
movsx eax, word [esi + 0x1fc]
lea ecx, [esi + 0x30]
push 0xa
push 7
push ecx
push eax
call fcn.00430fa0
add esp, 0x10
movzx edx, byte [eax]
mov ecx, edi
test dl, dl
je 0x42df9b
inc eax
mov ecx, edi
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ecx], dl
inc ecx
movzx edx, byte [eax]
inc eax
test dl, dl
jne 0x42df90
mov byte [ecx], 0
mov dword [esi + 0x52c], 0x7a46503e
mov dword [esi + 0x530], 0x9eaeae96
mov dword [esi + 0x534], 0x655e8b88
mov dword [esi + 0x538], 0x7f85b79b
mov word [esi + 0x53c], 0x3754
mov dword [esi + 0x53e], 0
mov byte [esi + 0x542], 0
mov dword [esi + 0x14], 0
mov eax, dword [esi + 0x14]
cmp eax, 0x16
ja 0x42e032
nop
mov eax, dword [esi + 0x14]
mov edx, dword [esi + 0x14]
movzx edx, byte [esi + edx + 0x52c]
lea ebx, [eax + edx]
add ebx, 0xe009ee09
add eax, 0xe009ee09
not edx
or eax, edx
sub edx, eax
lea eax, [ebx + edx*2]
mov dword [esi + 0x70], eax
mov eax, dword [esi + 0x70]
add al, 0xd3
mov edx, dword [esi + 0x14]
mov byte [esi + edx + 0x52c], al
inc dword [esi + 0x14]
mov eax, dword [esi + 0x14]
cmp eax, 0x17
jb 0x42dff0
movzx eax, byte [esi + 0x52c]
test al, al
je 0x42e05b
lea edx, [esi + 0x52d]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ecx], al
inc ecx
movzx eax, byte [edx]
inc edx
test al, al
jne 0x42e050
mov byte [ecx], 0
movzx eax, byte [esi + 0x1fe]
test al, al
je 0x42e07b
lea edx, [esi + 0x1ff]
nop
mov byte [ecx], al
inc ecx
movzx eax, byte [edx]
inc edx
test al, al
jne 0x42e070
mov byte [ecx], 0
jmp case.0x42a5d1.60
mov byte [ebx], 0
jmp dword [0x44adb8]
movsx eax, word [esi + 0x1fc]
lea ecx, [esi + 0x30]
push 0xa
push 7
push ecx
push eax
call fcn.00430fa0
add esp, 0x10
movzx ecx, byte [eax]
mov ebx, edi
test cl, cl
je 0x42e0bb
inc eax
mov ebx, edi
nop
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x42e0b0
lea eax, [esi + 0x53e]
mov byte [ebx], 0
mov dword [esi + 0x52c], 0x7a46503e
mov dword [esi + 0x530], 0x9eaeae96
mov dword [esi + 0x534], 0x655e8b88
mov dword [esi + 0x538], 0x7f85b79b
mov word [esi + 0x53c], 0x3754
mov byte [eax + 4], 0
mov dword [eax], 0
mov dword [esi + 0x14], 0
mov eax, dword [esi + 0x14]
cmp eax, 0x16
ja 0x42e152
nop
nop
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 0x14]
movzx ecx, byte [esi + ecx + 0x52c]
lea edx, [eax + ecx]
add edx, 0xe009ee09
add eax, 0xe009ee09
not ecx
or eax, ecx
sub ecx, eax
lea eax, [edx + ecx*2]
mov dword [esi + 0x70], eax
mov eax, dword [esi + 0x70]
add al, 0xd3
mov ecx, dword [esi + 0x14]
mov byte [esi + ecx + 0x52c], al
inc dword [esi + 0x14]
mov eax, dword [esi + 0x14]
cmp eax, 0x17
jb 0x42e110
movzx eax, byte [esi + 0x52c]
test al, al
je 0x42e17b
lea ecx, [esi + 0x52d]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42e170
mov byte [ebx], 0
movzx eax, byte [esi + 0x1fe]
test al, al
je 0x42e080
lea ecx, [esi + 0x1ff]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42e1a0
jmp 0x42e080
push eax
mov eax, esp
and eax, 0xfffffff0
mov esp, eax
mov edi, eax
mov byte [edi], 0
movzx ecx, byte [eax]
mov edi, dword [esi + 0xa0]
mov edx, edi
test cl, cl
je 0x42e1db
inc eax
mov edx, edi
nop
mov byte [edx], cl
inc edx
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x42e1d0
mov byte [edx], 0
mov eax, dword [esi + 0x64]
jmp case.0x42a5d1.41
mov byte [ebx], 0
jmp dword [0x44ad6c]
movzx ecx, word [eax]
test cx, cx
je 0x42e360
add eax, 2
xor edx, edx
jmp 0x42e21d
add edx, edi
movzx ecx, word [eax]
add eax, 2
test cx, cx
je 0x42e240
movzx ebx, cx
cmp ebx, 0x800
mov ecx, 3
sbb ecx, 0
mov edi, 1
cmp ebx, 0x80
jb 0x42e210
mov edi, ecx
jmp 0x42e210
lea eax, [edx + 4]
and eax, 0xfffffffc
call fcn.0040c6d0
mov edi, esp
and edi, 0xfffffff0
mov esp, edi
test edx, edx
jle 0x42e370
lea eax, [edi + edx]
mov dword [esi + 0x68], eax
inc edx
add edx, edi
mov ebx, dword [esi + 0x64]
mov dword [esi + 4], edi
jmp 0x42e291
mov eax, dword [esi + 4]
mov byte [eax], cl
mov dword [esi + 8], 1
add ebx, 2
mov eax, dword [esi + 4]
add eax, dword [esi + 8]
mov dword [esi + 4], eax
cmp eax, dword [esi + 0x68]
jae 0x42e350
movzx ecx, word [ebx]
test cx, cx
je 0x42e350
cmp cx, 0x7f
jbe 0x42e270
mov dword [esi + 0x10], ebx
mov ebx, dword [esi + 4]
not ebx
add ebx, edx
movzx eax, cx
mov dword [esi + 0xc], eax
cmp ebx, 2
jb 0x42e2f0
cmp dword [esi + 0xc], 0x7ff
ja 0x42e2f0
mov ebx, ecx
shr ebx, 6
add bl, 0xc0
mov eax, dword [esi + 4]
mov byte [eax], bl
and cl, 0x3f
or cl, 0x80
mov byte [eax + 1], cl
mov dword [esi + 8], 2
mov ebx, dword [esi + 0x10]
jmp 0x42e27c
mov dword [esi + 8], 0
cmp ebx, 3
mov ebx, dword [esi + 0x10]
jb 0x42e27c
mov ebx, dword [esi + 0xc]
shr ebx, 0xc
or bl, 0xe0
mov eax, dword [esi + 4]
mov byte [eax], bl
mov ebx, dword [esi + 0x10]
shr dword [esi + 0xc], 6
mov eax, dword [esi + 0xc]
and al, 0x3f
or al, 0x80
mov dword [esi + 8], ecx
mov ecx, dword [esi + 4]
mov byte [ecx + 1], al
mov eax, dword [esi + 8]
and al, 0x3f
or al, 0x80
mov ecx, eax
mov eax, dword [esi + 4]
mov byte [eax + 2], cl
mov dword [esi + 8], 3
jmp 0x42e27c
mov ecx, dword [esi + 4]
jmp 0x42e372
push eax
mov edi, esp
and edi, 0xfffffff0
mov esp, edi
mov ecx, edi
jmp 0x42e375
mov ecx, edi
mov eax, dword [esi + 0x64]
mov byte [ecx], 0
movzx ecx, byte [edi]
mov ebx, dword [esi + 0xa0]
test cl, cl
je 0x42e1f0
mov edx, ebx
inc edi
nop
nop
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [edi]
inc edi
test cl, cl
jne 0x42e390
jmp 0x42e1f0
mov eax, SysReAllocString
xor ecx, ecx
cpuid
mov edi, eax
mov eax, 1
xor ecx, ecx
cpuid
test edx, 0x10000000
je 0x42e3d9
cmp edi, reloc.OLEAUT32.dll_VariantClear
jl 0x42e3d9
mov eax, reloc.OLEAUT32.dll_VariantClear
xor ecx, ecx
cpuid
movzx eax, cl
inc eax
mov dword [esi + 8], eax
mov ebx, dword [esi + 0xc]
jmp 0x42e3e3
mov dword [esi + 8], 1
mov ebx, dword [esi + 0xc]
lea ecx, [esi + 0xe4]
movzx eax, bx
push 0xa
push 4
push ecx
push eax
call fcn.00432f20
add esp, 0x10
mov dword [esi + 0x1d4], 0x20c2dcfa
mov dword [esi + 0x1d8], 0x33c63034
mov dword [esi + 0x1dc], 0x1a1f0b00
mov dword [esi + 0x1e0], 0xdf340e18
mov byte [esi + 0x1e4], 0xf0
mov dword [esi + 0x1e5], 0
mov dword [esi + 0x1e8], 0
mov dword [esi + 0x14], 0
mov ecx, dword [esi + 0x14]
cmp ecx, 0x17
ja 0x42e495
nop
nop
nop
nop
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0x14]
movzx edx, byte [esi + edx + 0x1d4]
mov edi, ecx
xor edi, 0x9a0b1628
and ecx, 0x1a0b1628
lea ecx, [edi + ecx*2]
xor ecx, edx
mov dword [esi + 0xe8], ecx
mov ecx, dword [esi + 0xe8]
add cl, 0x38
mov edx, dword [esi + 0x14]
mov byte [esi + edx + 0x1d4], cl
inc dword [esi + 0x14]
mov ecx, dword [esi + 0x14]
cmp ecx, 0x18
jb 0x42e450
movzx ecx, byte [esi + 0x1d4]
test cl, cl
je 0x42e4bd
lea edx, [esi + 0x1d5]
mov edi, dword [esi + 4]
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42e4b0
jmp 0x42e4c0
mov edi, dword [esi + 4]
mov edx, edi
mov byte [edi], 0
movzx ecx, byte [eax]
test cl, cl
je 0x42e4db
inc eax
nop
nop
nop
mov byte [edx], cl
inc edx
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x42e4d0
mov ebx, edx
mov byte [edx], 0
movzx eax, byte [esi + 8]
push 0xa
push 4
lea ecx, [esi + 0xe4]
push ecx
push eax
call fcn.0040e130
add esp, 0x10
mov dword [esi + 0x1d4], 0x2c4a586a
mov dword [esi + 0x1d8], 0x284e3438
mov dword [esi + 0x1dc], 0x419051d
mov word [esi + 0x1e0], 0x574e
mov byte [esi + 0x1e2], 0x76
mov dword [esi + 0x1e3], 0
mov dword [esi + 0x14], 0
mov ecx, dword [esi + 0x14]
cmp ecx, 0x12
ja 0x42e58f
nop
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 0x14]
movzx ecx, byte [esi + ecx + 0x1d4]
mov edi, edx
xor edi, 0x99319167
and edx, 0x19319167
lea edx, [edi + edx*2]
lea edi, [edx + ecx]
not ecx
or edx, ecx
sub ecx, edx
lea ecx, [edi + ecx*2]
mov dword [esi + 0xe8], ecx
mov ecx, dword [esi + 0xe8]
add cl, 0xfd
mov edx, dword [esi + 0x14]
mov byte [esi + edx + 0x1d4], cl
inc dword [esi + 0x14]
mov ecx, dword [esi + 0x14]
cmp ecx, 0x13
jb 0x42e540
movzx ecx, byte [esi + 0x1d4]
test cl, cl
je 0x42e5ab
lea edx, [esi + 0x1d5]
mov byte [ebx], cl
inc ebx
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42e5a0
mov byte [ebx], 0
movzx ecx, byte [eax]
test cl, cl
je 0x42e5cb
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x42e5c0
mov byte [ebx], 0
mov dword [esi + 0x1d4], 0xc4222c0a
mov dword [esi + 0x1d8], 0x273cd0d4
mov byte [esi + 0x1dc], 8
mov word [esi + 0x1dd], 0
mov byte [esi + 0x1df], 0
mov dword [esi + 0x14], 0
mov eax, dword [esi + 0x14]
cmp eax, 0xb
ja 0x42e674
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x14]
mov ecx, eax
xor ecx, 0x17611ebf
mov edx, eax
or edx, 0x689ee140
and edx, ecx
lea ecx, [eax + eax]
and ecx, 0xd13dc280
sub eax, ecx
lea eax, [eax + edx*2]
add eax, 0x689ee140
mov ecx, dword [esi + 0x14]
movzx ecx, byte [esi + ecx + 0x1d4]
xor eax, ecx
mov dword [esi + 0xe8], eax
mov eax, dword [esi + 0xe8]
mov ecx, eax
not ecx
and ecx, 0x40
and eax, 0xbf
sub eax, ecx
mov ecx, dword [esi + 0x14]
mov byte [esi + ecx + 0x1d4], al
inc dword [esi + 0x14]
mov eax, dword [esi + 0x14]
cmp eax, 0xc
jb 0x42e610
movzx eax, byte [esi + 0x1d4]
test al, al
je 0x42e69b
lea ecx, [esi + 0x1d5]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42e690
mov dword [esi + 4], ebx
mov byte [ebx], 0
mov eax, dword [0x44d194]
mov dword [esi + 0x1d4], 0x61eb67eb
mov dword [esi + 0x1d8], 0x7d10631f
mov dword [esi + 0x1dc], 0x794c7f31
mov dword [esi + 0x1e0], 0x75067b4e
mov dword [esi + 0x1e4], 0x71027700
mov dword [esi + 0x1e8], 0x7370
mov dword [esi + 0x14], 0
mov ecx, dword [esi + 0x14]
cmp ecx, 0x17
ja 0x42e760
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0x14]
movzx edx, byte [esi + edx + 0x1d4]
mov edi, ecx
xor edi, 0x492196e9
mov ebx, ecx
xor ebx, 0x36de6916
or ecx, 0x492196e9
and ecx, ebx
lea ecx, [edi + ecx*2]
lea edi, [ecx + edx]
and ecx, edx
mov edx, edi
not edx
and edx, ecx
add edx, ecx
not ecx
and ecx, edi
sub ecx, edx
mov dword [esi + 0xe8], ecx
mov ecx, dword [esi + 0xe8]
add cl, 0x73
mov edx, dword [esi + 0x14]
mov byte [esi + edx + 0x1d4], cl
inc dword [esi + 0x14]
mov ecx, dword [esi + 0x14]
cmp ecx, 0x18
jb 0x42e700
lea edi, [esi + 0x1d4]
push 0x800
push 0
push edi
call eax
mov ebx, eax
mov dword [esi + 0xb8], 0
mov dword [esi + 0xbc], 0
lea ecx, [esi + 0xb8]
push eax
call fcn.0043d980
movzx eax, al
jmp dword [eax*4 + 0x44ae80]
mov edi, dword [esi + 0x60]
mov ebx, dword [esi + 4]
jmp 0x42ea27
mov dword [esi + 0x68], ebx
lea eax, [esi + 0x1d8]
push 0x344
push 0
push eax
call fcn.0040c900
add esp, 0xc
mov dword [esi + 0x1d4], 0x348
push 0x3733e33b
push dword [esi + 0xb8]
call fcn.00441e40
add esp, 8
push 0
push edi
push 0
push 0
call eax
lea eax, [esi + 0x218]
mov edi, dword [esi + 4]
lea ecx, [edi + 0x80]
mov dword [esi + 0xc], ecx
xor edx, edx
jmp 0x42e81b
mov byte [edi], bl
mov ecx, 1
add eax, 2
add edx, ecx
mov ecx, dword [esi + 4]
lea edi, [ecx + edx]
cmp edx, 0x7f
jae 0x42e89a
movzx ebx, word [eax]
test bx, bx
je 0x42e89a
cmp bx, 0x7f
jbe 0x42e800
mov dword [esi + 8], edx
mov edx, edi
not edx
add edx, dword [esi + 0xc]
movzx ecx, bx
cmp edx, 2
jb 0x42e860
cmp ecx, 0x7ff
ja 0x42e860
mov ecx, ebx
shr ecx, 6
add cl, 0xc0
mov byte [edi], cl
and bl, 0x3f
or bl, 0x80
mov byte [edi + 1], bl
mov ecx, 2
mov edx, dword [esi + 8]
jmp 0x42e807
mov dword [esi + 0x10], ecx
xor ecx, ecx
cmp edx, 3
mov edx, dword [esi + 8]
jb 0x42e807
mov ecx, dword [esi + 0x10]
shr ecx, 0xc
or cl, 0xe0
mov byte [edi], cl
mov ecx, dword [esi + 0x10]
shr ecx, 6
and cl, 0x3f
or cl, 0x80
mov byte [edi + 1], cl
and bl, 0x3f
or bl, 0x80
mov byte [edi + 2], bl
mov ecx, 3
jmp 0x42e807
mov dword [esi + 8], edx
mov byte [edi], 0
lea edi, [esi + 0xe8]
push 0xdc
push 0
push edi
call fcn.0040c900
add esp, 0xc
mov word [esi + 0x12c], 0xdc
push 0x30be1b3b
push dword [esi + 0xb8]
call fcn.00441e40
add esp, 8
push edi
push 0xffffffffffffffff
push 0
call eax
lea eax, [esi + 0xa4]
push 0xa
push 0xc
push eax
push dword [esi + 0x194]
call fcn.00433150
add esp, 0x10
mov dword [esi + 0xc], eax
lea eax, [esi + 0x7e4]
push 0xa
push 0xc
push eax
push dword [esi + 0x198]
call fcn.00433150
add esp, 0x10
mov dword [esi + 0x14], 0xd5eaf89a
mov dword [esi + 0x18], 0x31360a3f
mov dword [esi + 0x1c], 0xfe2043b
mov dword [esi + 0x20], 0x292f123b
mov dword [esi + 0x24], 0x282d1717
mov dword [esi + 0x28], 0x95f6d12a
mov dword [esi + 0x2c], 0
mov dword [esi + 0x6c], 0
mov ecx, dword [esi + 0x6c]
cmp ecx, 0x1b
ja 0x42e9ae
nop
nop
mov edx, dword [esi + 0x6c]
mov ecx, dword [esi + 0x6c]
movzx edi, byte [esi + ecx + 0x14]
lea ecx, [edx + edi]
add ecx, 0x2be7da3
add edx, 0x2be7da3
and edx, edi
mov ebx, ecx
xor ebx, edx
mov edi, edx
not edi
and ecx, edi
add ecx, ecx
sub ecx, ebx
mov ebx, ecx
not ebx
and ebx, edx
and ecx, edi
sub ecx, ebx
mov dword [esi + 0xe0], ecx
mov ecx, dword [esi + 0xe0]
mov edx, ecx
xor edx, 0x2f
and ecx, 0x50
add ecx, ecx
sub ecx, edx
mov edx, dword [esi + 0x6c]
mov byte [esi + edx + 0x14], cl
inc dword [esi + 0x6c]
mov ecx, dword [esi + 0x6c]
cmp ecx, 0x1c
jb 0x42e950
mov ebx, dword [esi + 4]
add ebx, dword [esi + 8]
movzx ecx, byte [esi + 0x14]
test cl, cl
je 0x42e9dd
lea edx, [esi + 0x15]
mov edi, dword [esi + 0x60]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42e9d0
jmp 0x42e9e0
mov edi, dword [esi + 0x60]
mov byte [ebx], 0
mov edx, dword [esi + 0xc]
movzx ecx, byte [edx]
test cl, cl
je 0x42e9fb
inc edx
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42e9f0
mov byte [ebx], pe_nt_image_headers32
inc ebx
movzx ecx, byte [eax]
test cl, cl
je 0x42ea1b
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x42ea10
mov byte [ebx], 0
push dword [esi + 0x68]
call dword [0x44d298]
mov byte [ebx], 0
mov dword [esi + 0x1d4], 0x7b79805f
mov dword [esi + 0x1d8], 0x77307069
mov word [esi + 0x1dc], 0x7588
mov byte [esi + 0x1de], 6
mov dword [esi + 0x1df], 0
mov byte [esi + 0x1e3], 0
sub ebx, edi
mov dword [esi + 0x14], 0
mov eax, dword [esi + 0x14]
cmp eax, 0xf
ja 0x42eace
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 0x14]
movzx ecx, byte [esi + ecx + 0x1d4]
mov edx, eax
xor edx, 0x5eff8d02
mov edi, eax
xor edi, 0x210072fd
or eax, 0x5eff8d02
and eax, edi
lea eax, [edx + eax*2]
lea edx, [eax + ecx]
and eax, ecx
mov ecx, edx
xor ecx, eax
add ecx, eax
not eax
and eax, edx
add eax, eax
sub eax, ecx
mov dword [esi + 0xe8], eax
mov eax, dword [esi + 0xe8]
add al, 0xf6
mov ecx, dword [esi + 0x14]
mov byte [esi + ecx + 0x1d4], al
inc dword [esi + 0x14]
mov eax, dword [esi + 0x14]
cmp eax, 0x10
jb 0x42ea70
mov ecx, dword [ebp + 8]
push ebx
mov edi, dword [esi + 0x60]
push edi
lea eax, [esi + 0x1d4]
push eax
call fcn.0040d440
jmp dword [0x44ae88]
push edi
call fcn.0040c780
add esp, 4
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
int3
and al, cl
movzx eax, al
and eax, 1
mov dword [esp + 0x3a0], eax
mov eax, dword [esp + 0x3a4]
mov ecx, dword [esp + 0x3a0]
mov eax, dword [eax + ecx*4]
mov dword [esp + 0xbc], ebx
mov dword [esp + 0x1cc], edi
jmp eax
mov eax, dword [esp + 0x1b8]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
sub esp, 4
mov ebx, eax
mov eax, dword [esp + 0x1b8]
mov ecx, ebx
shl ecx, 1
mov edx, eax
add edx, ecx
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0042eb00
mov edi, eax
add edi, 1
mov dword [esp], edi
call fcn.0040c770
mov edx, eax
mov ecx, dword [esp + 0x1b8]
shl ebx, 1
mov esi, ecx
add esi, ebx
mov ebx, edx
add ebx, edi
mov edi, edx
mov eax, ebx
add eax, 0xffffffff
cmp edi, eax
jae 0x42f14c
cmp esi, 0
je 0x42f0d7
cmp ecx, esi
jae 0x42f14c
mov dword [esp + 0xb8], ecx
mov eax, dword [esp + 0xb8]
mov cx, word [eax]
movzx eax, cx
mov dword [esp + 0x1e0], eax
cmp cx, 0
mov ecx, dword [esp + 0xb8]
je 0x42f14c
add ecx, 2
mov dword [esp + 0xb8], ecx
mov ecx, ebx
add ecx, 0xe1e95009
sub ecx, edi
add ecx, 0x1e16aff6
mov dword [esp], edi
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x1e0]
mov dword [esp + 8], eax
mov dword [esp + 0x1fc], edx
call fcn.00435330
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x1fc]
add edi, eax
jmp 0x42f0c5
mov byte [edi], 0
mov eax, edx
add eax, 6
mov dword [esp + 4], eax
mov eax, dword [esp + 0x1c0]
mov dword [esp], eax
mov dword [esp + 8], 2
mov esi, edx
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x2e
mov eax, esi
add eax, 4
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x2e
mov dword [esp + 4], esi
mov dword [esp], ecx
mov dword [esp + 8], 4
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x20
mov eax, esi
add eax, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x3a
mov eax, esi
add eax, 0xa
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x3a
add esi, 0xc
mov dword [esp + 4], esi
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004353f0
mov byte [eax], 0
mov eax, dword [esp + 0x248]
mov ecx, dword [esp + 0x24c]
mov eax, dword [ecx + eax*4]
jmp eax
fnstcw word [ebp - 0x73]
push edx
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
sub esp, 4
mov ebx, eax
mov eax, dword [esp + 0x1a8]
mov ecx, ebx
shl ecx, 1
mov edx, eax
add edx, ecx
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0042eb00
mov esi, eax
add esi, 1
mov dword [esp], esi
call fcn.0040c770
mov edi, eax
mov edx, dword [esp + 0x1a8]
shl ebx, 1
mov ecx, edx
add ecx, ebx
mov ebx, edi
add ebx, esi
mov esi, edi
mov eax, ebx
add eax, 0xffffffff
cmp esi, eax
jae 0x42f2d2
cmp ecx, 0
je 0x42f283
cmp edx, ecx
jae 0x42f2d2
mov dword [esp + 0x1e4], ecx
mov cx, word [edx]
movzx eax, cx
cmp cx, 0
je 0x42f2d2
add edx, 2
mov dword [esp + 0x1f8], edx
mov ecx, ebx
add ecx, 0xe1e95009
sub ecx, esi
add ecx, 0x1e16aff6
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00435330
mov ecx, dword [esp + 0x1e4]
mov edx, dword [esp + 0x1f8]
add esi, eax
jmp 0x42f271
mov byte [esi], 0
mov eax, edi
add eax, 6
mov dword [esp + 4], eax
mov eax, dword [esp + 0x1cc]
mov dword [esp], eax
mov dword [esp + 8], 2
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x2e
mov eax, edi
add eax, 4
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x2e
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 8], 4
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x20
mov eax, edi
add eax, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x3a
mov eax, edi
add eax, 0xa
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x3a
add edi, 0xc
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004353f0
mov byte [eax], 0
mov eax, dword [esp + 0x228]
mov ecx, dword [esp + 0x22c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x2b0]
mov ecx, dword [esp + 0x2b4]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov dword [esp + 0x338], 1
mov eax, dword [esp + 0x33c]
mov ecx, dword [esp + 0x338]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x1d4]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [esp], eax
call ecx
sub esp, 4
mov eax, dword [esp + 0x2b8]
mov ecx, dword [esp + 0x2bc]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 3
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov eax, dword [sym.imp.ole32.dll_CoSetProxyBlanket]
call eax
sub esp, 0x20
not eax
shr eax, 0x1f
mov dword [esp + 0x3d8], eax
mov eax, dword [esp + 0x3dc]
mov ecx, dword [esp + 0x3d8]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esp + 0x378], 0
mov eax, dword [esp + 0x37c]
mov ecx, dword [esp + 0x378]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x408]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
sub esp, 4
mov edi, eax
mov eax, dword [esp + 0x408]
mov ecx, edi
shl ecx, 1
mov edx, eax
add edx, ecx
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0042eb00
mov esi, eax
mov dword [esp + 0x200], esi
add esi, 1
mov dword [esp], esi
call fcn.0040c770
mov ecx, ebx
mov ebx, eax
mov dword [ecx], ebx
mov edx, dword [esp + 0x408]
shl edi, 1
mov ecx, edx
add ecx, edi
mov edi, ebx
add edi, esi
mov eax, edi
add eax, 0xffffffff
cmp ebx, eax
jae 0x42f537
cmp ecx, 0
je 0x42f4f2
cmp edx, ecx
jae 0x42f537
mov esi, ecx
mov cx, word [edx]
movzx eax, cx
cmp cx, 0
je 0x42f537
add edx, 2
mov dword [esp + 0x1ec], edx
mov ecx, edi
add ecx, 0xe1e95009
sub ecx, ebx
add ecx, 0x1e16aff6
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00435330
mov ecx, esi
mov edx, dword [esp + 0x1ec]
add ebx, eax
jmp 0x42f4e0
mov byte [ebx], 0
mov al, byte [esp + 0xec]
mov byte [esp + 0x188], al
mov byte [esp + 0xf0], 0x83
mov byte [esp + 0xf1], 0x90
mov byte [esp + 0xf2], 0xac
mov byte [esp + 0xf3], 0x9b
mov byte [esp + 0xf4], 0xaf
mov byte [esp + 0xf5], 0xa6
mov byte [esp + 0xf6], 0xb5
mov byte [esp + 0xf7], 0x23
mov eax, 8
mov byte [esp + eax + 0xf0], 0
add eax, 1
cmp eax, 0xc
jne 0x42f58d
mov dword [esp + 0xa0], 0
mov ebx, dword [esp + 0xbc]
mov eax, dword [esp + 0xa0]
cmp eax, 0xc
jae 0x42f5fc
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa0]
movzx ecx, byte [esp + ecx + 0xf0]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00435560
mov ecx, dword [esp + 0xa0]
mov byte [esp + ecx + 0xf0], al
mov eax, dword [esp + 0xa0]
inc eax
mov dword [esp + 0xa0], eax
jmp 0x42f5af
mov eax, dword [ebx]
lea ecx, [esp + 0xf0]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.0041fff0
mov edx, dword [ebx]
mov ecx, edx
sub ecx, eax
mov esi, dword [esp + 0x200]
lea edi, [esi + ecx]
lea esi, [esi + ecx + 1]
seta cl
lea edi, [eax + edi + 1]
sub edi, edx
seta ch
and cl, ch
test cl, 1
jne 0x42f6b0
mov ecx, esi
shr ecx, 2
mov ebx, eax
mov edi, edx
xchg esi, ebx
rep movsd dword es:[edi], dword [esi]
xchg esi, ebx
mov ecx, esi
add ecx, 1
mov edi, esi
xor edi, 0xffffffff
or edi, 0xfffffffc
add edi, ecx
add edx, edi
add eax, edi
mov ebx, esi
and ebx, 3
mov ecx, ebx
shr ecx, 1
mov dword [esp + 0x1dc], eax
mov edi, edx
mov dword [esp + 0x1d8], esi
mov esi, dword [esp + 0x1dc]
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
mov esi, dword [esp + 0x1d8]
xor ebx, 1
and ebx, esi
add edx, ebx
add eax, ebx
and esi, 1
cmp esi, 0
je 0x42f6e0
add esi, 0xffffffff
mov ecx, eax
add ecx, 1
mov al, byte [eax]
mov edi, edx
add edi, 1
mov byte [edx], al
mov edx, edi
mov eax, ecx
jmp 0x42f694
mov ecx, esi
xor ecx, 1
mov edi, esi
shl edi, 1
and edi, 0xfffffffc
sub edi, ecx
add edx, edi
add eax, edi
cmp esi, 0
je 0x42f6de
add esi, 0xffffffff
mov ecx, eax
add ecx, 0xffffffff
mov al, byte [eax]
mov edi, edx
add edi, 0xffffffff
mov byte [edx], al
mov edx, edi
mov eax, ecx
jmp 0x42f6c2
jmp 0x42f6e9
mov ebx, dword [esp + 0xbc]
jmp 0x42f6e9
mov eax, dword [esp + 0x398]
mov ecx, dword [esp + 0x39c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esi]
mov eax, dword [eax + 0x10]
lea ecx, [esp + 0x410]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 0x64]
mov dword [esp + 4], ecx
mov dword [esp], esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
sub esp, 0x18
test eax, eax
setns al
mov cx, word [esp + 0x410]
sub cx, 2
sete cl
and al, cl
movzx eax, al
mov dword [esp + 0x340], eax
mov eax, dword [esp + 0x344]
mov ecx, dword [esp + 0x340]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x328]
mov ecx, dword [esp + 0x32c]
mov eax, dword [ecx + eax*4]
jmp eax
movzx ecx, cx
mov edx, dword [esp + 0x3b0]
mov esi, dword [esp + 0x3b4]
mov edx, dword [esi + edx*4]
jmp edx
mov eax, dword [esp + 0x1c8]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call eax
sub esp, 4
mov eax, dword [esp + 0x2a8]
mov ecx, dword [esp + 0x2ac]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov dword [esp + 0x320], 1
mov eax, dword [esp + 0x324]
mov ecx, dword [esp + 0x320]
mov eax, dword [eax + ecx*4]
jmp eax
mov edi, 0xe6ee5062
fimul word [ebx]
mov eax, dword [esp + 0x218]
mov ecx, dword [esp + 0x21c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov dword [esp + 0x268], 0
mov eax, dword [esp + 0x26c]
mov ecx, dword [esp + 0x268]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.00419d90
mov dword [esp + 0x2d0], 1
mov eax, dword [esp + 0x2d4]
mov ecx, dword [esp + 0x2d0]
mov eax, dword [eax + ecx*4]
jmp eax
in eax, dx
mov eax, 0x848bde2a
and al, 0x10
add al, byte [eax]
add byte [ebx + 0x214248c], cl
add byte [eax], al
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov dword [esp + 0x3f0], 1
mov eax, dword [esp + 0x3f4]
mov ecx, dword [esp + 0x3f0]
mov eax, dword [eax + ecx*4]
jmp eax
sub ecx, 8
sete cl
mov edx, dword [esp + 0x3a8]
mov esi, dword [esp + 0x3ac]
mov edx, dword [esi + edx*4]
jmp edx
mov dword [esp + 0x1d0], 0
mov eax, dword [esp + 0x1d4]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x10]
lea edx, [esp + 0x1d0]
mov dword [esp + 0x10], edx
lea edx, [esp + 0x88]
mov dword [esp + 0xc], edx
mov dword [esp], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0xffffffff
call ecx
sub esp, 0x14
test eax, eax
setns cl
sub eax, 1
setne al
mov edx, dword [esp + 0x1d0]
test edx, edx
setne dl
and al, dl
and al, cl
movzx eax, al
mov dword [esp + 0x3c8], eax
mov eax, dword [esp + 0x3cc]
mov ecx, dword [esp + 0x3c8]
mov eax, dword [eax + ecx*4]
jmp eax
mov cl, al
and ecx, 1
mov dword [esp + 0x3e0], ecx
mov eax, dword [esp + 0x3e4]
mov ecx, dword [esp + 0x3e0]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x288]
mov ecx, dword [esp + 0x28c]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [esp + 0x60]
mov byte [esp + 0x178], al
mov byte [esp + 0x40], 0x52
mov byte [esp + 0x41], 0x81
mov byte [esp + 0x42], 0x4d
mov byte [esp + 0x43], 0x83
mov byte [esp + 0x44], 0x4b
mov byte [esp + 0x45], 0x85
mov byte [esp + 0x46], 0x52
mov byte [esp + 0x47], 0x87
mov byte [esp + 0x48], 0x54
mov byte [esp + 0x49], 0x89
mov byte [esp + 0x4a], 0x49
mov byte [esp + 0x4b], 0x8b
mov byte [esp + 0x4c], 0x45
mov byte [esp + 0x4d], 0x8d
mov byte [esp + 0x4e], 0x43
mov byte [esp + 0x4f], 0x8f
mov byte [esp + 0x50], 0x46
mov byte [esp + 0x51], 0x91
mov byte [esp + 0x52], 0x60
mov byte [esp + 0x53], 0x93
mov byte [esp + 0x54], 0x94
mov byte [esp + 0x55], 0x95
mov eax, 0x16
mov byte [esp + eax + 0x40], 0
add eax, 1
cmp eax, 0x18
jne 0x42f9bb
mov dword [esp + 0x8c], 0
mov eax, dword [esp + 0x8c]
cmp eax, 0x18
jae 0x42fa1a
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x8c]
movzx ecx, byte [esp + ecx + 0x40]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00435480
mov ecx, dword [esp + 0x8c]
mov byte [esp + ecx + 0x40], al
mov eax, dword [esp + 0x8c]
inc eax
mov dword [esp + 0x8c], eax
jmp 0x42f9d3
call fcn.00419d90
call fcn.00419d90
lea eax, [esp + 0x40]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
call eax
sub esp, 4
mov ecx, dword [esp + 0xc4]
mov edx, dword [ecx]
mov esi, dword [edx + 0xc]
lea edx, [esp + 0xc0]
mov dword [esp + 0x20], edx
mov dword [esp + 0x20c], eax
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
call esi
sub esp, 0x24
xor ecx, ecx
test eax, eax
setns al
mov dword [esp + 0x3e8], 1
mov edx, dword [esp + 0x3ec]
mov esi, dword [esp + 0x3e8]
mov edx, dword [edx + esi*4]
jmp edx
lea eax, [esp + 0x1a0]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
call eax
sub esp, 4
mov eax, dword [esp + 0x88]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [esp], eax
call ecx
sub esp, 4
mov eax, dword [esp + 0x2c0]
mov ecx, dword [esp + 0x2c4]
mov eax, dword [ecx + eax*4]
jmp eax
lea eax, [esp + 0x1b0]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
sub esp, 4
lea eax, [esp + 0x1a0]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
sub esp, 4
mov esi, dword [esp + 0x88]
mov al, byte [esp + 0x58]
mov byte [esp + 0x19c], al
mov byte [esp + 0x28], 0x41
mov byte [esp + 0x29], 0x89
mov byte [esp + 0x2a], 0x24
mov byte [esp + 0x2b], 0xb7
mov byte [esp + 0x2c], 0x2b
mov byte [esp + 0x2d], 0xb5
mov byte [esp + 0x2e], 0x2e
mov byte [esp + 0x2f], 0xb3
mov byte [esp + 0x30], 0x51
mov byte [esp + 0x31], 0xb1
mov byte [esp + 0x32], 0x2a
mov byte [esp + 0x33], 0xbf
mov byte [esp + 0x34], 0x28
mov byte [esp + 0x35], 0xbd
mov byte [esp + 0x36], 0x76
mov byte [esp + 0x37], 0xbb
mov byte [esp + 0x38], 0x59
mov byte [esp + 0x39], 0xb9
mov byte [esp + 0x3a], 0x3a
mov byte [esp + 0x3b], 0xa7
mov byte [esp + 0x3c], 0x49
mov byte [esp + 0x3d], 0xa5
mov byte [esp + 0x3e], 0xa2
mov byte [esp + 0x3f], 0xa3
mov dword [esp + 0xb0], 0
mov eax, dword [esp + 0xb0]
cmp eax, 0x18
jae 0x42fbf1
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xb0]
movzx ecx, byte [esp + ecx + 0x28]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00435610
mov ecx, dword [esp + 0xb0]
mov byte [esp + ecx + 0x28], al
mov eax, dword [esp + 0xb0]
inc eax
mov dword [esp + 0xb0], eax
jmp 0x42fbaa
mov eax, dword [esi]
mov eax, dword [eax + 0x10]
lea ecx, [esp + 0x1a0]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 0x28]
mov dword [esp + 4], ecx
mov dword [esp], esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
sub esp, 0x18
test eax, eax
setns al
mov cx, word [esp + 0x1a0]
sub cx, 8
sete cl
and al, cl
mov dword [esp + 0x318], 1
mov ecx, dword [esp + 0x31c]
mov edx, dword [esp + 0x318]
mov ecx, dword [ecx + edx*4]
jmp ecx
js 0x42fc60
lds ebp, [edi + ecx - 0x41]
mov word [eax + ebx], fs
add al, 0
add byte [edx - 0x77777777], bh
insb byte es:[edi], dx
movsx ecx, word [esp + 0x418]
mov edx, 0x88888889
mov eax, ecx
imul edx
add edx, ecx
mov eax, edx
shr eax, 0x1f
shr edx, 5
add edx, eax
mov word [edi], dx
mov eax, dword [esp + 0x238]
mov ecx, dword [esp + 0x23c]
mov eax, dword [ecx + eax*4]
jmp eax
mov cl, 0xb0
cmp ch, byte [esi - 0x59]
test al, 0xfe
ror dword [ecx - 0x2317dbcc], cl
retf 0xfffd
mov eax, dword [esp + 0x208]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call eax
sub esp, 4
mov eax, dword [esp + 0x2a0]
mov ecx, dword [esp + 0x2a4]
mov eax, dword [ecx + eax*4]
jmp eax
mov dword [esp], edi
call fcn.0040c780
mov eax, dword [esp + 0x370]
mov ecx, dword [esp + 0x374]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov dword [esp + 0x358], 0
mov eax, dword [esp + 0x35c]
mov ecx, dword [esp + 0x358]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x258]
mov ecx, dword [esp + 0x25c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x20c]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call eax
sub esp, 4
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [esp], eax
call ecx
sub esp, 4
mov eax, dword [esp + 0x290]
mov ecx, dword [esp + 0x294]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [esp + 0x60]
mov byte [esp + 0x174], al
mov byte [esp + 0x40], 0x52
mov byte [esp + 0x41], 0x81
mov byte [esp + 0x42], 0x4d
mov byte [esp + 0x43], 0x83
mov byte [esp + 0x44], 0x4b
mov byte [esp + 0x45], 0x85
mov byte [esp + 0x46], 0x52
mov byte [esp + 0x47], 0x87
mov byte [esp + 0x48], 0x54
mov byte [esp + 0x49], 0x89
mov byte [esp + 0x4a], 0x49
mov byte [esp + 0x4b], 0x8b
mov byte [esp + 0x4c], 0x45
mov byte [esp + 0x4d], 0x8d
mov byte [esp + 0x4e], 0x43
mov byte [esp + 0x4f], 0x8f
mov byte [esp + 0x50], 0x46
mov byte [esp + 0x51], 0x91
mov byte [esp + 0x52], 0x60
mov byte [esp + 0x53], 0x93
mov byte [esp + 0x54], 0x94
mov byte [esp + 0x55], 0x95
mov eax, 0x16
mov byte [esp + eax + 0x40], 0
add eax, 1
cmp eax, 0x18
jne 0x42fde8
mov dword [esp + 0x90], 0
mov eax, dword [esp + 0x90]
cmp eax, 0x18
jae 0x42fe47
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x90]
movzx ecx, byte [esp + ecx + 0x40]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00435480
mov ecx, dword [esp + 0x90]
mov byte [esp + ecx + 0x40], al
mov eax, dword [esp + 0x90]
inc eax
mov dword [esp + 0x90], eax
jmp 0x42fe00
call fcn.00419d90
call fcn.00419d90
lea eax, [esp + 0x40]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
call eax
sub esp, 4
mov edx, dword [esp + 0xc4]
mov ecx, dword [edx]
mov ecx, dword [ecx + 0xc]
lea esi, [esp + 0xc0]
mov dword [esp + 0x20], esi
mov dword [esp + 4], eax
mov dword [esp], edx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
call ecx
sub esp, 0x24
mov eax, dword [esp + 0x250]
mov ecx, dword [esp + 0x254]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov dword [esp + 0x308], 0
mov eax, dword [esp + 0x30c]
mov ecx, dword [esp + 0x308]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.00419d90
mov dword [esp], esi
call fcn.0040c780
mov dword [esp + 0x2e8], 1
mov eax, dword [esp + 0x2ec]
mov ecx, dword [esp + 0x2e8]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.00419d90
mov dword [esp + 0x260], 0
mov eax, dword [esp + 0x264]
mov ecx, dword [esp + 0x260]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x348]
mov ecx, dword [esp + 0x34c]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [esp + 0x5c]
mov byte [esp + 0x194], al
mov byte [esp + 0x64], 0x87
mov byte [esp + 0x65], 0x49
mov byte [esp + 0x66], 0xab
mov byte [esp + 0x67], 0x57
mov byte [esp + 0x68], 0xaa
mov byte [esp + 0x69], 0x55
mov byte [esp + 0x6a], 0xac
mov byte [esp + 0x6b], 0x53
mov byte [esp + 0x6c], 0xbd
mov byte [esp + 0x6d], 0x51
mov byte [esp + 0x6e], 0xac
mov byte [esp + 0x6f], 0x5f
mov byte [esp + 0x70], 0xa0
mov byte [esp + 0x71], 0x5d
mov byte [esp + 0x72], 0x86
mov byte [esp + 0x73], 0x5b
mov byte [esp + 0x74], 0xb1
mov byte [esp + 0x75], 0x59
mov byte [esp + 0x76], 0x93
mov byte [esp + 0x77], 0x67
mov byte [esp + 0x78], 0x89
mov byte [esp + 0x79], 0x65
mov byte [esp + 0x7a], 0x84
mov byte [esp + 0x7b], 0x63
mov byte [esp + 0x7c], 0x93
mov byte [esp + 0x7d], 0x61
mov byte [esp + 0x7e], 0x9c
mov byte [esp + 0x7f], 0x6f
mov byte [esp + 0x80], 0x81
mov byte [esp + 0x81], 0x6d
mov byte [esp + 0x82], 0x6a
mov byte [esp + 0x83], 0x6b
mov eax, 0x20
mov byte [esp + eax + 0x64], 0
add eax, 1
cmp eax, 0x21
jne 0x430008
mov dword [esp + 0xa8], 0
mov eax, dword [esp + 0xa8]
cmp eax, 0x21
jae 0x430067
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xa8]
movzx ecx, byte [esp + ecx + 0x64]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004355d0
mov ecx, dword [esp + 0xa8]
mov byte [esp + ecx + 0x64], al
mov eax, dword [esp + 0xa8]
inc eax
mov dword [esp + 0xa8], eax
jmp 0x430020
mov dword [esp + 0x350], 0
mov eax, dword [esp + 0x354]
mov ecx, dword [esp + 0x350]
mov eax, dword [eax + ecx*4]
jmp eax
lea eax, [esp + 0x400]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
sub esp, 4
mov esi, dword [esp + 0x88]
mov al, byte [esp + 0xfc]
mov byte [esp + 0x184], al
mov byte [esp + 0x100], 0x51
mov byte [esp + 0x101], 0x8b
mov byte [esp + 0x102], 0x35
mov byte [esp + 0x103], 0x89
mov byte [esp + 0x104], 0x38
mov byte [esp + 0x105], 0x87
mov byte [esp + 0x106], 0xa
mov byte [esp + 0x107], 0x85
mov byte [esp + 0x108], 0x33
mov byte [esp + 0x109], 0x83
mov byte [esp + 0x10a], 0x33
mov byte [esp + 0x10b], 0x81
mov byte [esp + 0x10c], 0x32
mov byte [esp + 0x10d], 0x9f
mov byte [esp + 0x10e], 0x9e
mov byte [esp + 0x10f], 0x9d
mov eax, 0x10
mov byte [esp + eax + 0x100], 0
add eax, 1
cmp eax, 0x11
jne 0x430132
mov dword [esp + 0x9c], 0
mov eax, dword [esp + 0x9c]
cmp eax, 0x11
jae 0x43019a
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x9c]
movzx ecx, byte [esp + ecx + 0x100]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00435530
mov ecx, dword [esp + 0x9c]
mov byte [esp + ecx + 0x100], al
mov eax, dword [esp + 0x9c]
inc eax
mov dword [esp + 0x9c], eax
jmp 0x43014d
mov eax, dword [esi]
mov eax, dword [eax + 0x10]
lea ecx, [esp + 0x400]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 0x100]
mov dword [esp + 4], ecx
mov dword [esp], esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
sub esp, 0x18
mov ecx, dword [esp + 0x3c0]
mov edx, dword [esp + 0x3c4]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov eax, dword [esp + 0x1b8]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
sub esp, 4
mov ebx, eax
mov eax, dword [esp + 0x1b8]
mov ecx, ebx
shl ecx, 1
mov edx, eax
add edx, ecx
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0042eb00
mov esi, eax
add esi, 1
mov dword [esp], esi
call fcn.0040c770
mov edi, eax
mov edx, dword [esp + 0x1b8]
shl ebx, 1
mov ecx, edx
add ecx, ebx
mov ebx, edi
add ebx, esi
mov esi, edi
mov eax, ebx
add eax, 0xffffffff
cmp esi, eax
jae 0x43029b
cmp ecx, 0
je 0x43024c
cmp edx, ecx
jae 0x43029b
mov dword [esp + 0x1e8], ecx
mov cx, word [edx]
movzx eax, cx
cmp cx, 0
je 0x43029b
add edx, 2
mov dword [esp + 0x1f4], edx
mov ecx, ebx
add ecx, 0xe1e95009
sub ecx, esi
add ecx, 0x1e16aff6
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00435330
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x1f4]
add esi, eax
jmp 0x43023a
mov byte [esi], 0
mov eax, edi
add eax, 6
mov dword [esp + 4], eax
mov eax, dword [esp + 0x1c0]
mov dword [esp], eax
mov dword [esp + 8], 2
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x2e
mov eax, edi
add eax, 4
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x2e
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 8], 4
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x20
mov eax, edi
add eax, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x3a
mov eax, edi
add eax, 0xa
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x3a
mov eax, edi
add eax, 0xc
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004353f0
mov byte [eax], 0
mov dword [esp + 0x380], 0
mov eax, dword [esp + 0x384]
mov ecx, dword [esp + 0x380]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x368]
mov ecx, dword [esp + 0x36c]
mov eax, dword [ecx + eax*4]
mov ebx, dword [esp + 0xbc]
mov edi, dword [esp + 0x1c4]
jmp eax
test eax, eax
setns al
mov cx, word [esp + 0x400]
mov edx, dword [esp + 0x3b8]
mov esi, dword [esp + 0x3bc]
mov edx, dword [esi + edx*4]
jmp edx
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [esp], eax
call ecx
sub esp, 4
mov eax, dword [esp + 0x298]
mov ecx, dword [esp + 0x29c]
mov eax, dword [ecx + eax*4]
jmp eax
and bl, 1
movzx eax, bl
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esp + 0x2f8], 0
mov eax, dword [esp + 0x2fc]
mov ecx, dword [esp + 0x2f8]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esp + 0xbc]
jmp eax
lea eax, [esp + 0x1b0]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
call eax
sub esp, 4
lea eax, [esp + 0x410]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantClear]
call eax
sub esp, 4
mov esi, dword [esp + 0x88]
mov eax, dword [esp + 0x360]
mov ecx, dword [esp + 0x364]
mov eax, dword [ecx + eax*4]
jmp eax
lea eax, [esp + 0x400]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
sub esp, 4
lea eax, [esp + 0x1b0]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
sub esp, 4
mov esi, dword [esp + 0x88]
mov al, byte [esp + 0xc8]
mov byte [esp + 0x18c], al
mov byte [esp + 0xcc], 0xb8
mov byte [esp + 0xcd], 0xcb
mov byte [esp + 0xce], 0x5b
mov byte [esp + 0xcf], 0xc9
mov byte [esp + 0xd0], 0x55
mov byte [esp + 0xd1], 0xc7
mov byte [esp + 0xd2], 0x59
mov byte [esp + 0xd3], 0xc5
mov byte [esp + 0xd4], 0x50
mov byte [esp + 0xd5], 0xc3
mov byte [esp + 0xd6], 0xbe
mov byte [esp + 0xd7], 0xc1
mov byte [esp + 0xd8], 0x5f
mov byte [esp + 0xd9], 0xff
mov byte [esp + 0xda], 0x72
mov byte [esp + 0xdb], 0xfd
mov byte [esp + 0xdc], 0x67
mov byte [esp + 0xdd], 0xfb
mov byte [esp + 0xde], 0x96
mov byte [esp + 0xdf], 0xf9
mov byte [esp + 0xe0], 0x6f
mov byte [esp + 0xe1], 0xf7
mov byte [esp + 0xe2], 0x65
mov byte [esp + 0xe3], 0xf5
mov byte [esp + 0xe4], 0x6f
mov byte [esp + 0xe5], 0xf3
mov byte [esp + 0xe6], 0xf2
mov byte [esp + 0xe7], 0xf1
mov eax, 0x1c
mov edi, dword [esp + 0x1c4]
mov byte [esp + eax + 0xcc], 0
add eax, 1
cmp eax, 0x1d
jne 0x430579
mov dword [esp + 0xa4], 0
mov eax, dword [esp + 0xa4]
cmp eax, 0x1d
jae 0x4305e1
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa4]
movzx ecx, byte [esp + ecx + 0xcc]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00435590
mov ecx, dword [esp + 0xa4]
mov byte [esp + ecx + 0xcc], al
mov eax, dword [esp + 0xa4]
inc eax
mov dword [esp + 0xa4], eax
jmp 0x430594
mov eax, dword [esi]
mov eax, dword [eax + 0x10]
lea ecx, [esp + 0x1b0]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 0xcc]
mov dword [esp + 4], ecx
mov dword [esp], esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
sub esp, 0x18
test eax, eax
setns al
mov cx, word [esp + 0x1b0]
sub cx, 8
sete cl
and al, cl
movzx eax, al
mov dword [esp + 0x390], eax
mov eax, dword [esp + 0x394]
mov ecx, dword [esp + 0x390]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x270]
mov ecx, dword [esp + 0x274]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x2e0]
mov ecx, dword [esp + 0x2e4]
mov eax, dword [ecx + eax*4]
jmp eax
hlt
lea eax, [esp + 0x1b0]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
sub esp, 4
lea eax, [esp + 0x1a0]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
sub esp, 4
mov esi, dword [esp + 0x88]
mov al, byte [esp + 0x58]
mov byte [esp + 0x198], al
mov byte [esp + 0x28], 0x41
mov byte [esp + 0x29], 0x89
mov byte [esp + 0x2a], 0x24
mov byte [esp + 0x2b], 0xb7
mov byte [esp + 0x2c], 0x2b
mov byte [esp + 0x2d], 0xb5
mov byte [esp + 0x2e], 0x2e
mov byte [esp + 0x2f], 0xb3
mov byte [esp + 0x30], 0x51
mov byte [esp + 0x31], 0xb1
mov byte [esp + 0x32], 0x2a
mov byte [esp + 0x33], 0xbf
mov byte [esp + 0x34], 0x28
mov byte [esp + 0x35], 0xbd
mov byte [esp + 0x36], 0x76
mov byte [esp + 0x37], 0xbb
mov byte [esp + 0x38], 0x59
mov byte [esp + 0x39], 0xb9
mov byte [esp + 0x3a], 0x3a
mov byte [esp + 0x3b], 0xa7
mov byte [esp + 0x3c], 0x49
mov byte [esp + 0x3d], 0xa5
mov byte [esp + 0x3e], 0xa2
mov byte [esp + 0x3f], 0xa3
mov dword [esp + 0xb4], 0
mov eax, dword [esp + 0xb4]
cmp eax, 0x18
jae 0x4308a9
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb4]
movzx ecx, byte [esp + ecx + 0x28]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00435610
mov ecx, dword [esp + 0xb4]
mov byte [esp + ecx + 0x28], al
mov eax, dword [esp + 0xb4]
inc eax
mov dword [esp + 0xb4], eax
jmp 0x430862
mov eax, dword [esi]
mov eax, dword [eax + 0x10]
lea ecx, [esp + 0x1a0]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 0x28]
mov dword [esp + 4], ecx
mov dword [esp], esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
sub esp, 0x18
mov eax, dword [esp + 0x230]
mov ecx, dword [esp + 0x234]
mov eax, dword [ecx + eax*4]
jmp eax
movzx eax, al
and eax, 1
mov dword [esp + 0x310], eax
mov eax, dword [esp + 0x314]
mov ecx, dword [esp + 0x310]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x2c8]
mov ecx, dword [esp + 0x2cc]
mov eax, dword [ecx + eax*4]
jmp eax
test eax, eax
setne bl
mov eax, dword [esp + 0x278]
mov ecx, dword [esp + 0x27c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov dword [esp + 0x2d8], 0
mov eax, dword [esp + 0x2dc]
mov ecx, dword [esp + 0x2d8]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, byte [esp + 0x164]
mov byte [esp + 0x17c], al
mov byte [esp + 0x168], 0x57
mov byte [esp + 0x169], 0x21
mov byte [esp + 0x16a], 0x53
mov byte [esp + 0x16b], 0x23
mov byte [esp + 0x16c], 0x58
mov byte [esp + 0x16d], 0x25
mov byte [esp + 0x16e], 0x26
mov byte [esp + 0x16f], 0x27
mov eax, 8
mov byte [esp + eax + 0x168], 0
add eax, 1
cmp eax, 0xc
jne 0x4309b5
mov dword [esp + 0x94], 0
mov eax, dword [esp + 0x94]
cmp eax, 0xc
jae 0x430a1d
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x94]
movzx ecx, byte [esp + ecx + 0x168]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004354c0
mov ecx, dword [esp + 0x94]
mov byte [esp + ecx + 0x168], al
mov eax, dword [esp + 0x94]
inc eax
mov dword [esp + 0x94], eax
jmp 0x4309d0
lea eax, [esp + 0x168]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
sub esp, 4
mov dword [esp + 0x1c8], eax
mov al, byte [esp + 0x114]
mov byte [esp + 0x180], al
mov byte [esp + 0x118], 0x19
mov byte [esp + 0x119], 0x4f
mov byte [esp + 0x11a], 9
mov byte [esp + 0x11b], 0x51
mov byte [esp + 0x11c], 0x1c
mov byte [esp + 0x11d], 0x53
mov byte [esp + 0x11e], 0x15
mov byte [esp + 0x11f], 0x55
mov byte [esp + 0x120], 0x11
mov byte [esp + 0x121], 0x57
mov byte [esp + 0x122], 2
mov byte [esp + 0x123], 0x59
mov byte [esp + 0x124], 0x38
mov byte [esp + 0x125], 0x5b
mov byte [esp + 0x126], 0x30
mov byte [esp + 0x127], 0x5d
mov byte [esp + 0x128], 0x3c
mov byte [esp + 0x129], 0x5f
mov byte [esp + 0x12a], 0x18
mov byte [esp + 0x12b], 0xa1
mov byte [esp + 0x12c], 0xf2
mov byte [esp + 0x12d], 0xa3
mov byte [esp + 0x12e], 0xf3
mov byte [esp + 0x12f], 0xa5
mov byte [esp + 0x130], 0xeb
mov byte [esp + 0x131], 0xa7
mov byte [esp + 0x132], 0xc6
mov byte [esp + 0x133], 0xa9
mov byte [esp + 0x134], 0xf1
mov byte [esp + 0x135], 0xab
mov byte [esp + 0x136], 1
mov byte [esp + 0x137], 0xad
mov byte [esp + 0x138], 2
mov byte [esp + 0x139], 0xaf
mov byte [esp + 0x13a], 0xdb
mov byte [esp + 0x13b], 0xb1
mov byte [esp + 0x13c], 0xc2
mov byte [esp + 0x13d], 0xb3
mov byte [esp + 0x13e], 0x13
mov byte [esp + 0x13f], 0xb5
mov byte [esp + 0x140], 0xe5
mov byte [esp + 0x141], 0xb7
mov byte [esp + 0x142], 6
mov byte [esp + 0x143], 0xb9
mov byte [esp + 0x144], 0x1f
mov byte [esp + 0x145], 0xbb
mov byte [esp + 0x146], 8
mov byte [esp + 0x147], 0xbd
mov byte [esp + 0x148], 0x1f
mov byte [esp + 0x149], 0xbf
mov byte [esp + 0x14a], 0xa
mov byte [esp + 0x14b], 0x81
mov byte [esp + 0x14c], 0x2b
mov byte [esp + 0x14d], 0x83
mov byte [esp + 0x14e], 0x2c
mov byte [esp + 0x14f], 0x85
mov byte [esp + 0x150], 0x2d
mov byte [esp + 0x151], 0x87
mov byte [esp + 0x152], 0xd3
mov byte [esp + 0x153], 0x89
mov byte [esp + 0x154], 0x33
mov byte [esp + 0x155], 0x8b
mov byte [esp + 0x156], 0x3f
mov byte [esp + 0x157], 0x8d
mov byte [esp + 0x158], 0x38
mov byte [esp + 0x159], 0x8f
mov byte [esp + 0x15a], 0x29
mov byte [esp + 0x15b], 0x91
mov byte [esp + 0x15c], 0x3f
mov byte [esp + 0x15d], 0x93
mov byte [esp + 0x15e], 0x92
mov byte [esp + 0x15f], 0x95
mov eax, 0x48
mov byte [esp + eax + 0x118], 0
add eax, 1
cmp eax, 0x4a
jne 0x430c8a
mov dword [esp + 0x98], 0
mov eax, dword [esp + 0x98]
cmp eax, 0x4a
jae 0x430cf2
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x98]
movzx ecx, byte [esp + ecx + 0x118]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004354f0
mov ecx, dword [esp + 0x98]
mov byte [esp + ecx + 0x118], al
mov eax, dword [esp + 0x98]
inc eax
mov dword [esp + 0x98], eax
jmp 0x430ca5
lea eax, [esp + 0x118]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
call eax
sub esp, 4
mov esi, dword [esp + 0xc0]
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x50]
lea edx, [esp + 0x1d4]
mov dword [esp + 0x14], edx
mov dword [esp + 0x208], eax
mov dword [esp + 8], eax
mov eax, dword [esp + 0x1c8]
mov dword [esp + 4], eax
mov dword [esp], esi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x30
call ecx
sub esp, 0x18
not eax
shr eax, 0x1f
mov dword [esp + 0x3d0], eax
mov eax, dword [esp + 0x3d4]
mov ecx, dword [esp + 0x3d0]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.00419d90
movsx ecx, word [esp + 0x418]
mov edx, 0x88888889
mov eax, ecx
imul edx
add edx, ecx
mov eax, edx
shr eax, 0x1f
shr edx, 5
add edx, eax
mov word [edi], dx
mov dword [esp + 0x330], 1
mov eax, dword [esp + 0x334]
mov ecx, dword [esp + 0x330]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.00419d90
mov dword [esp + 0x2f0], 1
mov eax, dword [esp + 0x2f4]
mov ecx, dword [esp + 0x2f0]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.00419d90
mov dword [esp + 0x388], 0
mov eax, dword [esp + 0x38c]
mov ecx, dword [esp + 0x388]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
sub esp, 4
mov ebx, eax
mov eax, dword [esp + 0x1a8]
mov ecx, ebx
shl ecx, 1
mov edx, eax
add edx, ecx
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0042eb00
mov esi, eax
add esi, 1
mov dword [esp], esi
call fcn.0040c770
mov edx, dword [esp + 0x1a8]
shl ebx, 1
mov edi, edx
add edi, ebx
mov ebx, eax
add ebx, esi
mov dword [esp + 0x204], eax
mov esi, eax
mov eax, ebx
add eax, 0xffffffff
cmp esi, eax
jae 0x430e9d
cmp edi, 0
je 0x430e5c
cmp edx, edi
jae 0x430e9d
mov cx, word [edx]
movzx eax, cx
cmp cx, 0
je 0x430e9d
add edx, 2
mov dword [esp + 0x1f0], edx
mov ecx, ebx
add ecx, 0xe1e95009
sub ecx, esi
add ecx, 0x1e16aff6
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00435330
mov edx, dword [esp + 0x1f0]
add esi, eax
jmp 0x430e4a
mov byte [esi], 0
mov esi, dword [esp + 0x204]
mov eax, esi
add eax, 6
mov dword [esp + 4], eax
mov eax, dword [esp + 0x1cc]
mov dword [esp], eax
mov dword [esp + 8], 2
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x2e
mov eax, esi
add eax, 4
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x2e
mov dword [esp + 4], esi
mov dword [esp], ecx
mov dword [esp + 8], 4
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x20
mov eax, esi
add eax, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x3a
mov eax, esi
add eax, 0xa
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004353f0
mov ecx, eax
inc ecx
mov byte [eax], 0x3a
mov eax, esi
add eax, 0xc
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004353f0
mov byte [eax], 0
mov dword [esp + 0x300], 1
mov eax, dword [esp + 0x304]
mov ecx, dword [esp + 0x300]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [ebx]
mov ecx, dword [esp + 0x280]
mov edx, dword [esp + 0x284]
mov ecx, dword [edx + ecx*4]
jmp ecx
call fcn.00419d90
sub esp, 4
mov dword [esp], edi
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call edi
sub esp, 4
mov dword [esp], ebx
call edi
mov edi, dword [esi + 0x94]
mov dword [esi + 0x228], 1
mov eax, dword [esi + 0x22c]
mov ecx, dword [esi + 0x228]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, byte [esi + 7]
mov bl, al
and ebx, 1
mov dword [esi + 0x3f8], ebx
mov eax, dword [esi + 0x3fc]
mov ecx, dword [esi + 0x3f8]
mov eax, dword [eax + ecx*4]
xor ebx, ebx
jmp eax
xor ecx, ecx
sub eax, 3
sete cl
mov dword [esi + 0x260], ecx
mov eax, dword [esi + 0x264]
mov ecx, dword [esi + 0x260]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esi + 0x2a8]
mov ecx, dword [esi + 0x2ac]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov dword [esi + 0x310], 1
mov eax, dword [esi + 0x314]
mov ecx, dword [esi + 0x310]
mov eax, dword [eax + ecx*4]
jmp eax
movzx eax, al
and eax, 1
mov dword [esi + 0x350], eax
mov eax, dword [esi + 0x354]
mov ecx, dword [esi + 0x350]
mov eax, dword [eax + ecx*4]
mov edi, dword [esi + 0x5c]
jmp eax
call fcn.00419d90
mov dword [esi + 0x250], 1
mov eax, dword [esi + 0x254]
mov ecx, dword [esi + 0x250]
mov eax, dword [eax + ecx*4]
jmp eax
sub esp, 0x14
lea eax, [esi + 0x8c]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x446070
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x446080
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
xor ebx, ebx
test eax, eax
setns byte [esi + 7]
mov eax, dword [esi + 0x410]
mov ecx, dword [esi + 0x414]
mov eax, dword [ecx + eax*4]
jmp eax
mov edi, dword [esi + 0x9c]
mov eax, dword [esi + 0x258]
mov ecx, dword [esi + 0x25c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov dword [esi + 0x380], 1
mov eax, dword [esi + 0x384]
mov ecx, dword [esi + 0x380]
mov eax, dword [eax + ecx*4]
jmp eax
lcall 0x8886, 0xc710a212
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx + 0x9c86], cl
add byte [ebx + 0x10498b08], cl
sub esp, 0x14
lea edx, [esi + 0x88]
mov dword [esp + 0x10], edx
lea edx, [esi + 0x60]
mov dword [esp + 0xc], edx
mov dword [esp], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0xffffffff
call ecx
mov eax, dword [esi + 0x1d0]
mov ecx, dword [esi + 0x1d4]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov eax, dword [edi]
mov eax, dword [eax + 8]
sub esp, 4
mov dword [esp], edi
call eax
mov dword [esi + 0x248], 0
mov eax, dword [esi + 0x24c]
mov ecx, dword [esi + 0x248]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.00419d90
mov dword [esi + 0x408], 0
mov eax, dword [esi + 0x40c]
mov ecx, dword [esi + 0x408]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, edx
shl eax, 1
mov ecx, dword [esi + 0x120]
mov edi, ecx
add edi, eax
mov dword [esi + 0x11c], edi
mov eax, dword [esi + 0x124]
mov edi, eax
add edi, dword [esi + 0x128]
mov dword [esi + 0x90], ecx
mov ecx, eax
mov eax, edi
add eax, 0xffffffff
cmp ecx, eax
jae 0x431a47
cmp dword [esi + 0x11c], 0
je 0x4319f8
mov eax, dword [esi + 0x90]
cmp eax, dword [esi + 0x11c]
jae 0x431a47
mov ebx, ecx
mov eax, dword [esi + 0x90]
mov cx, word [eax]
movzx eax, cx
cmp cx, 0
mov ecx, ebx
je 0x431a47
add dword [esi + 0x90], 2
mov ecx, edi
add ecx, 0xe1e95009
sub ecx, ebx
add ecx, 0x1e16aff6
sub esp, 0xc
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00435330
mov ecx, ebx
mov edx, dword [esi + 0x84]
add esp, 0xc
add ecx, eax
jmp 0x4319d8
mov byte [ecx], 0
mov dword [esi + 0x2c0], 0
mov eax, dword [esi + 0x2c4]
mov ecx, dword [esi + 0x2c0]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esi + 0x238]
mov ecx, dword [esi + 0x23c]
mov eax, dword [ecx + eax*4]
mov edi, dword [esi + 0x94]
jmp eax
call fcn.00419d90
mov dword [esi + 0x1f0], 1
mov eax, dword [esi + 0x1f4]
mov ecx, dword [esi + 0x1f0]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esi + 0x60]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
sub esp, 4
mov dword [esp], eax
call ecx
mov eax, dword [esi + 0x270]
mov ecx, dword [esi + 0x274]
mov ecx, dword [ecx + eax*4]
xor eax, eax
jmp ecx
mov eax, dword [esi + 0x278]
mov ecx, dword [esi + 0x27c]
mov eax, dword [ecx + eax*4]
mov ecx, dword [esi + 0x164]
mov dword [esi + 0x58], ecx
jmp eax
inc eax
sub esp, 4
mov dword [esi + 0x128], eax
mov dword [esp], eax
call fcn.0040c770
add esp, 4
mov edx, eax
mov eax, dword [esi + 0x2d8]
mov ecx, dword [esi + 0x2dc]
mov eax, dword [ecx + eax*4]
jmp eax
mov ecx, dword [ecx]
sub esp, 0x24
lea edx, [esi + 0xb4]
mov dword [esp + 0x20], edx
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
call ecx
not eax
shr eax, 0x1f
mov dword [esi + 0x3d0], eax
mov eax, dword [esi + 0x3d4]
mov ecx, dword [esi + 0x3d0]
mov eax, dword [eax + ecx*4]
mov dword [esi + 0x58], 0
jmp eax
mov eax, edi
add eax, 8
mov dword [esi + 0x158], eax
mov eax, dword [edi + 8]
sub esp, 4
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantInit]
call eax
mov dword [esi + 0x84], eax
mov edi, dword [edi + 8]
mov eax, dword [esi + 0x2f8]
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov dword [esi + 0x88], 0
mov eax, dword [esi + 0x9c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x10]
sub esp, 0x14
lea edx, [esi + 0x88]
mov dword [esp + 0x10], edx
lea edx, [esi + 0x60]
mov dword [esp + 0xc], edx
mov dword [esp], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0xffffffff
call ecx
test eax, eax
sets cl
sub eax, 1
sete al
mov edx, dword [esi + 0x88]
test edx, edx
sete dl
or al, dl
or al, cl
mov dword [esi + 0x398], 0
mov ecx, dword [esi + 0x39c]
mov edx, dword [esi + 0x398]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.00419d90
mov dword [esi + 0x2c8], 0
mov eax, dword [esi + 0x2cc]
mov ecx, dword [esi + 0x2c8]
mov eax, dword [eax + ecx*4]
mov edx, dword [esi + 0x84]
jmp eax
mov eax, dword [esi + 0x1e8]
mov ecx, dword [esi + 0x1ec]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esi + 0x200]
mov ecx, dword [esi + 0x204]
mov eax, dword [ecx + eax*4]
mov ebx, dword [esi + 0x58]
jmp eax
call fcn.00419d90
mov dword [esi + 0x400], 0
mov eax, dword [esi + 0x404]
mov ecx, dword [esi + 0x400]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esi + 0xb4]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
sub esp, 4
mov dword [esp], eax
call ecx
mov eax, dword [esi + 0x218]
mov ecx, dword [esi + 0x21c]
mov eax, dword [ecx + eax*4]
jmp eax
js 0x431cbf
invalid
jmp eax
call fcn.00419d90
mov dword [esi + 0x288], 0
mov eax, dword [esi + 0x28c]
mov ecx, dword [esi + 0x288]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esi + 0x3a8]
mov ecx, dword [esi + 0x3ac]
mov eax, dword [ecx + eax*4]
mov dword [esi + 0x58], 0
jmp eax
call fcn.00419d90
lea eax, [edi + ebx*2]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.0042eb00
add esp, 8
mov dword [esi + 0x2e8], 1
mov edx, dword [esi + 0x2ec]
mov ecx, dword [esi + 0x2e8]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov ecx, dword [esi + 0x320]
mov edx, dword [esi + 0x324]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov eax, dword [esi + 0x160]
mov dword [esi + 0x124], edx
mov dword [eax], edx
mov eax, dword [esi + 0x158]
mov eax, dword [eax]
mov dword [esi + 0x120], eax
mov eax, dword [esi + 0x2d0]
mov ecx, dword [esi + 0x2d4]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov dword [esi + 0x388], 0
mov eax, dword [esi + 0x38c]
mov ecx, dword [esi + 0x388]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.00419d90
sub esp, 4
mov dword [esp], ebx
mov eax, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call eax
mov eax, dword [esi + 0x8c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
sub esp, 4
mov dword [esp], eax
call ecx
mov dword [esi + 0x208], 1
mov eax, dword [esi + 0x20c]
mov ecx, dword [esi + 0x208]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esi + 0xb4]
sub esp, 0x20
mov dword [esp], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 3
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov eax, dword [sym.imp.ole32.dll_CoSetProxyBlanket]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x3c8], eax
mov eax, dword [esi + 0x3cc]
mov ecx, dword [esi + 0x3c8]
mov eax, dword [eax + ecx*4]
mov dword [esi + 0x58], 0
jmp eax
movzx eax, byte [esi + 3]
and eax, 1
mov dword [esi + 0x300], eax
mov eax, dword [esi + 0x304]
mov ecx, dword [esi + 0x300]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.00419d90
mov dword [esi + 0x230], 0
mov eax, dword [esi + 0x234]
mov ecx, dword [esi + 0x230]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esi + 0x168]
jmp eax
mov ecx, dword [esi + 0x268]
mov edx, dword [esi + 0x26c]
mov ecx, dword [edx + ecx*4]
jmp ecx
lea edx, [esi + 0x140]
mov eax, dword [esi + 0x348]
mov ecx, dword [esi + 0x34c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov dword [esi + 0x3f0], 0
mov eax, dword [esi + 0x3f4]
mov ecx, dword [esi + 0x3f0]
mov eax, dword [eax + ecx*4]
jmp eax
lea eax, [esi + 0x138]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
sub esp, 4
mov dword [esp], edi
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edi, dword [esi + 0x60]
mov eax, dword [esi + 0x12c]
mov al, byte [eax]
mov byte [esi + 0xd0], al
mov byte [ebx], 4
mov byte [ebx + 1], 0x99
mov byte [ebx + 2], 0xf
mov byte [ebx + 3], 0x97
mov byte [ebx + 4], 0x1b
mov byte [ebx + 5], 0x95
mov byte [ebx + 6], 2
mov byte [ebx + 7], 0x93
mov byte [ebx + 8], 4
mov byte [ebx + 9], 0x91
mov byte [ebx + 0xa], 0x2f
mov byte [ebx + 0xb], 0x8f
mov byte [ebx + 0xc], 5
mov byte [ebx + 0xd], 0x8d
mov byte [ebx + 0xe], 0x38
mov byte [ebx + 0xf], 0x8b
mov byte [ebx + 0x10], 0x29
mov byte [ebx + 0x11], 0x89
mov byte [ebx + 0x12], 0x13
mov byte [ebx + 0x13], 0x87
mov byte [ebx + 0x14], 0x19
mov byte [ebx + 0x15], 0x85
mov byte [ebx + 0x16], 0x82
mov byte [ebx + 0x17], 0x83
mov dword [esi + 0x80], 0
mov eax, dword [esi + 0x80]
cmp eax, 0x18
jae 0x431fa9
mov eax, dword [esi + 0x80]
mov ecx, dword [esi + 0x80]
movzx ecx, byte [ebx + ecx]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00435710
mov ebx, dword [esi + 0x98]
add esp, 8
mov ecx, dword [esi + 0x80]
mov byte [ebx + ecx], al
mov eax, dword [esi + 0x80]
inc eax
mov dword [esi + 0x80], eax
jmp 0x431f5e
mov eax, dword [edi]
mov eax, dword [eax + 0x10]
sub esp, 0x18
mov ecx, dword [esi + 0x5c]
mov dword [esp + 0xc], ecx
mov dword [esp + 4], ebx
mov dword [esp], edi
mov edi, ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
mov eax, dword [esi + 0x1b8]
mov ecx, dword [esi + 0x1bc]
mov eax, dword [ecx + eax*4]
jmp eax
push eax
mov edi, esp
push eax
mov dword [esi + 0x130], esp
sub esp, 0x10
mov edx, esp
and edx, 0xfffffff8
mov esp, edx
push eax
sub esp, 0x14
mov dword [esi + 0x98], esp
push eax
mov dword [esi + 0x12c], esp
mov eax, dword [esi + 0x420]
mov ecx, dword [esi + 0x424]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esi + 0x2b8]
mov ecx, dword [esi + 0x2bc]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov dword [esi + 0x3b8], 1
mov eax, dword [esi + 0x3bc]
mov ecx, dword [esi + 0x3b8]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.00419d90
sub esp, 4
mov dword [esp], edi
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
call eax
xor eax, eax
cmp dword [esi + 0x58], 0
sete cl
mov dword [esi + 0x298], 1
mov edx, dword [esi + 0x29c]
mov edi, dword [esi + 0x298]
mov edx, dword [edx + edi*4]
mov edi, dword [esi + 0x5c]
jmp edx
mov eax, dword [esi + 0x370]
mov ecx, dword [esi + 0x374]
mov ecx, dword [ecx + eax*4]
xor eax, eax
jmp ecx
adc edi, dword [edx + 0x6b]
in eax, dx
pop es
jg 0x43209d
daa
mov eax, dword [esi + 0x1b0]
mov ecx, dword [esi + 0x1b4]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esi + 0x1c8]
mov ecx, dword [esi + 0x1cc]
mov eax, dword [ecx + eax*4]
jmp eax
mov esp, dword [ecx - 0x127d98f0]
pop edi
adc byte [ebx + 0x1c8904ec], al
and al, 0xa1
xor al, 0x6b
inc esp
add bh, bh
ror byte [ebx + 0x8c86], 1
add byte [ebx + 0x8498b08], cl
sub esp, 4
mov dword [esp], eax
call ecx
mov eax, dword [esi + 0x178]
mov ecx, dword [esi + 0x17c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov dword [esi + 0x3b0], 0
mov eax, dword [esi + 0x3b4]
mov ecx, dword [esi + 0x3b0]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esi + 0x2b0]
mov ecx, dword [esi + 0x2b4]
mov eax, dword [ecx + eax*4]
mov edi, dword [esi + 0x5c]
jmp eax
mov eax, dword [esi + 0x338]
mov ecx, dword [esi + 0x33c]
mov eax, dword [ecx + eax*4]
mov edi, dword [esi + 0x5c]
jmp eax
mov eax, dword [esi + 0x1d8]
mov ecx, dword [esi + 0x1dc]
mov eax, dword [ecx + eax*4]
jmp eax
cmp ch, bh
int1
fiadd dword [ebx + 0x4c704ec]
and al, 0xc
add byte [eax], al
add al, ch
add ah, byte [esi - 0x3b7c0003]
add al, 0xc7
add byte [eax], al
add byte [eax], al
add dh, al
inc eax
add al, 0
mov dword [eax + 8], 0
lea eax, [esi + 0x138]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edi, dword [esi + 0x60]
mov eax, dword [esi + 0x134]
mov al, byte [eax]
mov byte [esi + 0xc8], al
mov byte [esi + 0x38], 0xe8
mov byte [esi + 0x39], 0x79
mov byte [esi + 0x3a], 0xe8
mov byte [esi + 0x3b], 0x7f
mov byte [esi + 0x3c], 0xef
mov byte [esi + 0x3d], 0x7d
mov byte [esi + 0x3e], 6
mov byte [esi + 0x3f], 0x63
mov byte [esi + 0x40], 0xf5
mov byte [esi + 0x41], 0x61
mov byte [esi + 0x42], 1
mov byte [esi + 0x43], 0x67
mov byte [esi + 0x44], 0xf0
mov byte [esi + 0x45], 0x65
mov byte [esi + 0x46], 0x1d
mov byte [esi + 0x47], 0x6b
mov byte [esi + 0x48], 0xfc
mov byte [esi + 0x49], 0x69
mov byte [esi + 0x4a], 0xf
mov byte [esi + 0x4b], 0x6f
mov byte [esi + 0x4c], 0xf8
mov byte [esi + 0x4d], 0x6d
mov byte [esi + 0x4e], 0xf7
mov byte [esi + 0x4f], 0x93
mov byte [esi + 0x50], 0x90
mov byte [esi + 0x51], 0x91
mov eax, 0x1a
mov byte [esi + eax + 0x38], 0
add eax, 1
cmp eax, 0x1d
jne 0x432212
mov dword [esi + 0x78], 0
mov eax, dword [esi + 0x78]
cmp eax, 0x1d
jae 0x43225b
mov eax, dword [esi + 0x78]
mov ecx, dword [esi + 0x78]
movzx ecx, byte [esi + ecx + 0x38]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004356e0
add esp, 8
mov ecx, dword [esi + 0x78]
mov byte [esi + ecx + 0x38], al
mov eax, dword [esi + 0x78]
inc eax
mov dword [esi + 0x78], eax
jmp 0x432226
mov eax, dword [edi]
mov eax, dword [eax + 0x10]
sub esp, 0x18
lea ecx, [esi + 0x138]
mov dword [esp + 0xc], ecx
lea ecx, [esi + 0x38]
mov dword [esp + 4], ecx
mov dword [esp], edi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
mov eax, dword [esi + 0x1c0]
mov ecx, dword [esi + 0x1c4]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov dword [esi + 0x3a0], 0
mov eax, dword [esi + 0x3a4]
mov ecx, dword [esi + 0x3a0]
mov eax, dword [eax + ecx*4]
jmp eax
movzx eax, al
and eax, 1
mov dword [esi + 0x390], eax
mov eax, dword [esi + 0x394]
mov ecx, dword [esi + 0x390]
mov eax, dword [eax + ecx*4]
jmp eax
mov edx, dword [esi + 0x2e0]
mov ecx, dword [esi + 0x2e4]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.00419d90
mov dword [esi + 0x210], 0
mov eax, dword [esi + 0x214]
mov ecx, dword [esi + 0x210]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, edx
shl eax, 1
mov ecx, dword [esi + 0x120]
mov ebx, ecx
add ebx, eax
mov edi, dword [esi + 0x124]
mov eax, edi
add eax, dword [esi + 0x128]
mov edx, eax
add eax, 0xffffffff
cmp edi, eax
jae 0x4323a7
cmp ebx, 0
je 0x43233e
cmp ecx, ebx
jae 0x4323a7
mov eax, ecx
mov cx, word [eax]
mov dword [esi + 0x148], ebx
movzx ebx, cx
mov dword [esi + 0x14c], ebx
mov ebx, dword [esi + 0x148]
cmp cx, 0
je 0x4323a7
add eax, 2
mov dword [esi + 0x154], eax
mov dword [esi + 0x150], edx
add edx, 0xe1e95009
sub edx, edi
add edx, 0x1e16aff6
sub esp, 0xc
mov dword [esp], edi
mov dword [esp + 4], edx
mov eax, dword [esi + 0x14c]
mov dword [esp + 8], eax
call fcn.00435330
mov ecx, dword [esi + 0x154]
add esp, 0xc
add edi, eax
mov eax, dword [esi + 0x150]
jmp 0x43232c
mov byte [edi], 0
mov eax, dword [esi + 0x1a0]
mov ecx, dword [esi + 0x1a4]
mov eax, dword [ecx + eax*4]
mov edx, dword [esi + 0x84]
jmp eax
call fcn.00419d90
mov dword [esi + 0x308], 0
mov eax, dword [esi + 0x30c]
mov ecx, dword [esi + 0x308]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esi + 0x134], edi
mov eax, dword [esi + 0x3e0]
mov ecx, dword [esi + 0x3e4]
mov eax, dword [ecx + eax*4]
jmp eax
wait
and dl, cl
daa
and eax, 0x8a98aa40
inc esi
add al, 0x88
xchg byte [eax - 0x3a000000], bh
inc esi
or byte [esi - 0x30f6b93a], bl
mov byte [esi + 0xa], 0x9f
mov byte [esi + 0xb], 0xd1
mov byte [esi + 0xc], 0x81
mov byte [esi + 0xd], 0xd3
mov byte [esi + 0xe], 0x86
mov byte [esi + 0xf], 0xd5
mov byte [esi + 0x10], 0x88
mov byte [esi + 0x11], 0xd7
mov byte [esi + 0x12], 0x83
mov byte [esi + 0x13], 0xd9
mov byte [esi + 0x14], 0xbf
mov byte [esi + 0x15], 0xdb
mov byte [esi + 0x16], 0xbf
mov byte [esi + 0x17], 0xdd
mov byte [esi + 0x18], 0xab
mov byte [esi + 0x19], 0xdf
mov byte [esi + 0x1a], 0xac
mov byte [esi + 0x1b], 0xe1
mov byte [esi + 0x1c], 0x8b
mov byte [esi + 0x1d], 0xe3
mov byte [esi + 0x1e], 0x96
mov byte [esi + 0x1f], 0xe5
mov byte [esi + 0x20], 0x9f
mov byte [esi + 0x21], 0xe7
mov byte [esi + 0x22], 0xa3
mov byte [esi + 0x23], 0xe9
mov byte [esi + 0x24], 0x8f
mov byte [esi + 0x25], 0xeb
mov byte [esi + 0x26], 0x84
mov byte [esi + 0x27], 0xed
mov byte [esi + 0x28], 0x98
mov byte [esi + 0x29], 0xef
mov byte [esi + 0x2a], 0x89
mov byte [esi + 0x2b], 0xf1
mov byte [esi + 0x2c], 0x82
mov byte [esi + 0x2d], 0xf3
mov byte [esi + 0x2e], 0xc0
mov byte [esi + 0x2f], 0xf5
mov byte [esi + 0x30], 0xf4
mov byte [esi + 0x31], 0xf7
mov eax, 0x2a
mov byte [esi + eax + 8], 0
add eax, 1
cmp eax, 0x30
jne 0x4324b6
mov dword [esi + 0x68], 0
mov eax, dword [esi + 0x68]
cmp eax, 0x30
jae 0x4324ff
mov eax, dword [esi + 0x68]
mov ecx, dword [esi + 0x68]
movzx ecx, byte [esi + ecx + 8]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00435630
add esp, 8
mov ecx, dword [esi + 0x68]
mov byte [esi + ecx + 8], al
mov eax, dword [esi + 0x68]
inc eax
mov dword [esi + 0x68], eax
jmp 0x4324ca
sub esp, 4
lea eax, [esi + 8]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
call eax
mov eax, dword [esi + 0x1e0]
mov ecx, dword [esi + 0x1e4]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov al, byte [esi + 4]
mov byte [esi + 0xbc], al
mov byte [esi + 8], 0x9e
mov byte [esi + 9], 0xcf
mov byte [esi + 0xa], 0x9f
mov byte [esi + 0xb], 0xd1
mov byte [esi + 0xc], 0x81
mov byte [esi + 0xd], 0xd3
mov byte [esi + 0xe], 0x86
mov byte [esi + 0xf], 0xd5
mov byte [esi + 0x10], 0x88
mov byte [esi + 0x11], 0xd7
mov byte [esi + 0x12], 0x83
mov byte [esi + 0x13], 0xd9
mov byte [esi + 0x14], 0xbf
mov byte [esi + 0x15], 0xdb
mov byte [esi + 0x16], 0xbf
mov byte [esi + 0x17], 0xdd
mov byte [esi + 0x18], 0xab
mov byte [esi + 0x19], 0xdf
mov byte [esi + 0x1a], 0xac
mov byte [esi + 0x1b], 0xe1
mov byte [esi + 0x1c], 0x8b
mov byte [esi + 0x1d], 0xe3
mov byte [esi + 0x1e], 0x96
mov byte [esi + 0x1f], 0xe5
mov byte [esi + 0x20], 0x9f
mov byte [esi + 0x21], 0xe7
mov byte [esi + 0x22], 0xa3
mov byte [esi + 0x23], 0xe9
mov byte [esi + 0x24], 0x8f
mov byte [esi + 0x25], 0xeb
mov byte [esi + 0x26], 0x84
mov byte [esi + 0x27], 0xed
mov byte [esi + 0x28], 0x98
mov byte [esi + 0x29], 0xef
mov byte [esi + 0x2a], 0x89
mov byte [esi + 0x2b], 0xf1
mov byte [esi + 0x2c], 0x82
mov byte [esi + 0x2d], 0xf3
mov byte [esi + 0x2e], 0xc0
mov byte [esi + 0x2f], 0xf5
mov byte [esi + 0x30], 0xf4
mov byte [esi + 0x31], 0xf7
mov eax, 0x2a
mov byte [esi + eax + 8], 0
add eax, 1
cmp eax, 0x30
jne 0x4325e0
mov dword [esi + 0x64], 0
mov eax, dword [esi + 0x64]
cmp eax, 0x30
jae 0x432629
mov eax, dword [esi + 0x64]
mov ecx, dword [esi + 0x64]
movzx ecx, byte [esi + ecx + 8]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00435630
add esp, 8
mov ecx, dword [esi + 0x64]
mov byte [esi + ecx + 8], al
mov eax, dword [esi + 0x64]
inc eax
mov dword [esi + 0x64], eax
jmp 0x4325f4
sub esp, 4
lea eax, [esi + 8]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
call eax
mov ebx, eax
mov dword [esi + 0x3e8], 0
mov eax, dword [esi + 0x3ec]
mov ecx, dword [esi + 0x3e8]
mov eax, dword [eax + ecx*4]
jmp eax
lea eax, [esi + 0x138]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
sub esp, 4
mov dword [esp], edi
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edi, dword [esi + 0x60]
mov eax, dword [esi + 0x12c]
mov al, byte [eax]
mov byte [esi + 0xd4], al
mov byte [ebx], 4
mov byte [ebx + 1], 0x99
mov byte [ebx + 2], 0xf
mov byte [ebx + 3], 0x97
mov byte [ebx + 4], 0x1b
mov byte [ebx + 5], 0x95
mov byte [ebx + 6], 2
mov byte [ebx + 7], 0x93
mov byte [ebx + 8], 4
mov byte [ebx + 9], 0x91
mov byte [ebx + 0xa], 0x2f
mov byte [ebx + 0xb], 0x8f
mov byte [ebx + 0xc], 5
mov byte [ebx + 0xd], 0x8d
mov byte [ebx + 0xe], 0x38
mov byte [ebx + 0xf], 0x8b
mov byte [ebx + 0x10], 0x29
mov byte [ebx + 0x11], 0x89
mov byte [ebx + 0x12], 0x13
mov byte [ebx + 0x13], 0x87
mov byte [ebx + 0x14], 0x19
mov byte [ebx + 0x15], 0x85
mov byte [ebx + 0x16], 0x82
mov byte [ebx + 0x17], 0x83
mov dword [esi + 0x7c], 0
mov eax, dword [esi + 0x7c]
cmp eax, 0x18
jae 0x432724
mov eax, dword [esi + 0x7c]
mov ecx, dword [esi + 0x7c]
movzx ecx, byte [ebx + ecx]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00435710
mov ebx, dword [esi + 0x98]
add esp, 8
mov ecx, dword [esi + 0x7c]
mov byte [ebx + ecx], al
mov eax, dword [esi + 0x7c]
inc eax
mov dword [esi + 0x7c], eax
jmp 0x4326eb
mov eax, dword [edi]
mov eax, dword [eax + 0x10]
sub esp, 0x18
mov ecx, dword [esi + 0x5c]
mov dword [esp + 0xc], ecx
mov dword [esp + 4], ebx
mov dword [esp], edi
mov edi, ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
test eax, eax
setns byte [esi + 3]
movzx eax, word [edi]
mov dword [esi + 0x328], 0
mov ecx, dword [esi + 0x32c]
mov edx, dword [esi + 0x328]
mov ecx, dword [ecx + edx*4]
jmp ecx
lea eax, [edi + ebx*2]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.0042eb00
add esp, 8
mov eax, dword [esi + 0x1a8]
mov ecx, dword [esi + 0x1ac]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, cl
and eax, 1
mov dword [esi + 0x290], eax
mov eax, dword [esi + 0x294]
mov ecx, dword [esi + 0x290]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
test eax, eax
sete cl
mov dword [esi + 0x368], ecx
mov ecx, dword [esi + 0x36c]
mov edx, dword [esi + 0x368]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.00419d90
mov dword [esi + 0x330], 0
mov eax, dword [esi + 0x334]
mov ecx, dword [esi + 0x330]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esi + 0x98]
jmp eax
mov eax, dword [esi + 0x170]
mov ecx, dword [esi + 0x174]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [esi + 0xa4]
mov byte [esi + 0xc0], al
mov byte [esi + 0xa8], 5
mov byte [esi + 0xa9], 0x7b
mov byte [esi + 0xaa], 5
mov byte [esi + 0xab], 0x79
mov byte [esi + 0xac], 0xc
mov byte [esi + 0xad], 0x67
mov byte [esi + 0xae], 0x66
mov byte [esi + 0xaf], 0x65
mov eax, 8
mov byte [esi + eax + 0xa8], 0
add eax, 1
cmp eax, 0xc
jne 0x43285a
mov dword [esi + 0x6c], 0
mov eax, dword [esi + 0x6c]
cmp eax, 0xc
jae 0x4328ac
mov eax, dword [esi + 0x6c]
mov ecx, dword [esi + 0x6c]
movzx ecx, byte [esi + ecx + 0xa8]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00435680
add esp, 8
mov ecx, dword [esi + 0x6c]
mov byte [esi + ecx + 0xa8], al
mov eax, dword [esi + 0x6c]
inc eax
mov dword [esi + 0x6c], eax
jmp 0x432871
lea eax, [esi + 0xa8]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edi, eax
mov al, byte [esi + 0xa0]
mov byte [esi + 0xc4], al
mov byte [esi + 0xd8], 0x83
mov byte [esi + 0xd9], 0x31
mov byte [esi + 0xda], 0x8f
mov byte [esi + 0xdb], 0x33
mov byte [esi + 0xdc], 0x98
mov byte [esi + 0xdd], 0x2d
mov byte [esi + 0xde], 0x93
mov byte [esi + 0xdf], 0x2f
mov byte [esi + 0xe0], 0x6b
mov byte [esi + 0xe1], 0x29
mov byte [esi + 0xe2], 0x86
mov byte [esi + 0xe3], 0x2b
mov byte [esi + 0xe4], 0x44
mov byte [esi + 0xe5], 0x25
mov byte [esi + 0xe6], 0x7c
mov byte [esi + 0xe7], 0x27
mov byte [esi + 0xe8], 0x40
mov byte [esi + 0xe9], 0x21
mov byte [esi + 0xea], 0x9c
mov byte [esi + 0xeb], 0x23
mov byte [esi + 0xec], 0xae
mov byte [esi + 0xed], 0x1d
mov byte [esi + 0xee], 0xa9
mov byte [esi + 0xef], 0x1f
mov byte [esi + 0xf0], 0xad
mov byte [esi + 0xf1], 0x19
mov byte [esi + 0xf2], 0x7a
mov byte [esi + 0xf3], 0x1b
mov byte [esi + 0xf4], 0x55
mov byte [esi + 0xf5], 0x15
mov byte [esi + 0xf6], 0x80
mov byte [esi + 0xf7], 0x17
mov byte [esi + 0xf8], 0x9c
mov byte [esi + 0xf9], 0x11
mov byte [esi + 0xfa], 0x8b
mov byte [esi + 0xfb], 0x13
mov byte [esi + 0xfc], 0xa2
mov byte [esi + 0xfd], 0xd
mov byte [esi + 0xfe], 0x97
mov byte [esi + 0xff], 0xf
mov byte [esi + 0x100], 0x9a
mov byte [esi + 0x101], 9
mov byte [esi + 0x102], 0x87
mov byte [esi + 0x103], 0xb
mov byte [esi + 0x104], 0x97
mov byte [esi + 0x105], 5
mov byte [esi + 0x106], 0xb6
mov byte [esi + 0x107], 7
mov byte [esi + 0x108], 0x92
mov byte [esi + 0x109], 1
mov byte [esi + 0x10a], 0x95
mov byte [esi + 0x10b], 3
mov byte [esi + 0x10c], 0xe0
mov byte [esi + 0x10d], 0x7d
mov byte [esi + 0x10e], 0xf3
mov byte [esi + 0x10f], 0x7f
mov byte [esi + 0x110], 0xdb
mov byte [esi + 0x111], 0x79
mov byte [esi + 0x112], 0xf6
mov byte [esi + 0x113], 0x7b
mov byte [esi + 0x114], 0x74
mov byte [esi + 0x115], 0x75
mov eax, 0x3e
mov byte [esi + eax + 0xd8], 0
add eax, 1
cmp eax, 0x42
jne 0x432a83
mov dword [esi + 0x70], 0
mov eax, dword [esi + 0x70]
cmp eax, 0x42
jae 0x432ad5
mov eax, dword [esi + 0x70]
mov ecx, dword [esi + 0x70]
movzx ecx, byte [esi + ecx + 0xd8]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004356a0
add esp, 8
mov ecx, dword [esi + 0x70]
mov byte [esi + ecx + 0xd8], al
mov eax, dword [esi + 0x70]
inc eax
mov dword [esi + 0x70], eax
jmp 0x432a9a
mov dword [esi + 0x16c], ebx
sub esp, 4
lea eax, [esi + 0xd8]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
call eax
mov ebx, dword [esi + 0xb4]
mov ecx, dword [ebx]
mov ecx, dword [ecx + 0x50]
sub esp, 0x18
lea edx, [esi + 0x9c]
mov dword [esp + 0x14], edx
mov dword [esi + 0x168], eax
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x30
call ecx
not eax
shr eax, 0x1f
mov dword [esi + 0x3c0], eax
mov eax, dword [esi + 0x3c4]
mov ecx, dword [esi + 0x3c0]
mov eax, dword [eax + ecx*4]
mov dword [esi + 0x58], 0
mov dword [esi + 0x94], edi
jmp eax
std
stosb byte es:[edi], al
fild word [edi + ebx*2]
not ebp
pop eax
sub esp, 4
mov dword [esp], edi
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call edi
sub esp, 4
mov dword [esp], ebx
call edi
mov edi, dword [esi + 0x94]
mov eax, dword [esi + 0x180]
mov ecx, dword [esi + 0x184]
mov eax, dword [ecx + eax*4]
jmp eax
sub esp, 4
mov dword [esp], 0xc
call fcn.0040c770
add esp, 4
mov dword [eax], 0
mov ecx, eax
add ecx, 4
mov dword [esi + 0x15c], ecx
mov byte [eax + 4], 0
mov ecx, eax
add ecx, 8
mov dword [esi + 0x160], ecx
mov dword [esi + 0x164], eax
mov dword [eax + 8], 0
lea eax, [esi + 0x138]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edi, dword [esi + 0x60]
mov eax, dword [esi + 0x134]
mov al, byte [eax]
mov byte [esi + 0xcc], al
mov byte [esi + 0x38], 0xe8
mov byte [esi + 0x39], 0x79
mov byte [esi + 0x3a], 0xe8
mov byte [esi + 0x3b], 0x7f
mov byte [esi + 0x3c], 0xef
mov byte [esi + 0x3d], 0x7d
mov byte [esi + 0x3e], 6
mov byte [esi + 0x3f], 0x63
mov byte [esi + 0x40], 0xf5
mov byte [esi + 0x41], 0x61
mov byte [esi + 0x42], 1
mov byte [esi + 0x43], 0x67
mov byte [esi + 0x44], 0xf0
mov byte [esi + 0x45], 0x65
mov byte [esi + 0x46], 0x1d
mov byte [esi + 0x47], 0x6b
mov byte [esi + 0x48], 0xfc
mov byte [esi + 0x49], 0x69
mov byte [esi + 0x4a], 0xf
mov byte [esi + 0x4b], 0x6f
mov byte [esi + 0x4c], 0xf8
mov byte [esi + 0x4d], 0x6d
mov byte [esi + 0x4e], 0xf7
mov byte [esi + 0x4f], 0x93
mov byte [esi + 0x50], 0x90
mov byte [esi + 0x51], 0x91
mov eax, 0x1a
mov byte [esi + eax + 0x38], 0
add eax, 1
cmp eax, 0x1d
jne 0x432c56
mov dword [esi + 0x74], 0
mov eax, dword [esi + 0x74]
cmp eax, 0x1d
jae 0x432c9f
mov eax, dword [esi + 0x74]
mov ecx, dword [esi + 0x74]
movzx ecx, byte [esi + ecx + 0x38]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004356e0
add esp, 8
mov ecx, dword [esi + 0x74]
mov byte [esi + ecx + 0x38], al
mov eax, dword [esi + 0x74]
inc eax
mov dword [esi + 0x74], eax
jmp 0x432c6a
mov eax, dword [edi]
mov eax, dword [eax + 0x10]
sub esp, 0x18
lea ecx, [esi + 0x138]
mov dword [esp + 0xc], ecx
lea ecx, [esi + 0x38]
mov dword [esp + 4], ecx
mov dword [esp], edi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
test eax, eax
setns al
mov cx, word [esi + 0x138]
sub cx, 3
sete cl
and al, cl
mov dword [esi + 0x358], 0
mov ecx, dword [esi + 0x35c]
mov edx, dword [esi + 0x358]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esi + 0x378]
mov ecx, dword [esi + 0x37c]
mov ecx, dword [ecx + eax*4]
mov eax, 3
jmp ecx
mov eax, dword [esi + 0x8c]
mov ecx, dword [eax]
add ecx, 0xc
mov edx, dword [esi + 0x3d8]
mov edi, dword [esi + 0x3dc]
mov edx, dword [edi + edx*4]
jmp edx
call fcn.00419d90
mov dword [esi + 0x280], 1
mov eax, dword [esi + 0x284]
mov ecx, dword [esi + 0x280]
mov eax, dword [eax + ecx*4]
jmp eax
mov dh, 0xca
mov cl, 0x8b
pop es
mov eax, dword [eax + 8]
sub esp, 4
mov dword [esp], edi
call eax
mov eax, dword [esi + 0x188]
mov ecx, dword [esi + 0x18c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov dword [esi + 0x2a0], 0
mov eax, dword [esi + 0x2a4]
mov ecx, dword [esi + 0x2a0]
mov eax, dword [eax + ecx*4]
jmp eax
mov ecx, 1
mov eax, edx
mov ebx, dword [esi + 0x130]
mov edi, ebx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, ebx
add eax, 4
add edx, 4
mov edi, eax
xor ecx, ecx
mov ebx, edx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
xor ecx, ecx
mov edi, ecx
add ecx, 0xffffffff
cmp edi, 0
je 0x432dd9
mov bl, byte [edx]
mov byte [eax], bl
add eax, 1
add edx, 1
jmp 0x432dc3
mov eax, dword [esi + 0x130]
mov al, byte [eax + 1]
mov ecx, dword [esi + 0x15c]
mov byte [ecx], al
mov eax, dword [esi + 0x340]
mov ecx, dword [esi + 0x344]
mov eax, dword [ecx + eax*4]
jmp eax
mov dword [esi + 0x5c], edx
mov dword [esi + 0x8c], 0
mov eax, dword [esi + 0x418]
mov ecx, dword [esi + 0x41c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esi + 0x220]
mov ecx, dword [esi + 0x224]
mov eax, dword [ecx + eax*4]
mov ebx, dword [esi + 0x16c]
jmp eax
call fcn.00419d90
mov dword [esi + 0x360], 1
mov eax, dword [esi + 0x364]
mov ecx, dword [esi + 0x360]
mov eax, dword [eax + ecx*4]
jmp eax
or dword [ebp - 0x5f53da0b], ebx
test dword [ebx], 0x8904ec83
cmp al, 0x24
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
call eax
mov eax, dword [esi + 0x198]
mov ecx, dword [esi + 0x19c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esi + 0x240]
mov ecx, dword [esi + 0x244]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov dword [esi + 0x2f0], 0
mov eax, dword [esi + 0x2f4]
mov ecx, dword [esi + 0x2f0]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esi + 0x84]
jmp eax
sub eax, 8
sete al
and byte [esi + 3], al
mov eax, dword [esi + 0x318]
mov ecx, dword [esi + 0x31c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov dword [esi + 0x1f8], 0
mov eax, dword [esi + 0x1fc]
mov ecx, dword [esi + 0x1f8]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0xa8f595f9
sete cl
mov dword [ebp - 0x114], ecx
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x114]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x13161a1a
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xc8]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x8683e681
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0xc72bcb1b
sete cl
mov dword [ebp - 0x13c], ecx
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x13c]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0xb90ae33f
sete cl
mov dword [ebp - 0x134], ecx
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0x447f0ad2
sete cl
mov dword [ebp - 0x1c4], ecx
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x1c4]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0x39126313
sete cl
mov dword [ebp - 0x1b4], ecx
mov eax, dword [ebp - 0x1b8]
mov ecx, dword [ebp - 0x1b4]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x26610fb7
setl cl
mov dword [ebp - 0x1a4], ecx
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ebp - 0x1a4]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0x13161a1a
setl cl
mov dword [ebp - 0x1fc], ecx
mov ecx, dword [ebp - 0x200]
mov edx, dword [ebp - 0x1fc]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0xc72bcb1b
setl cl
mov dword [ebp - 0x144], ecx
mov ecx, dword [ebp - 0x148]
mov edx, dword [ebp - 0x144]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0x39126313
setl cl
mov dword [ebp - 0x1bc], ecx
mov ecx, dword [ebp - 0x1c0]
mov edx, dword [ebp - 0x1bc]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0x17270c91
sete cl
mov dword [ebp - 0x17c], ecx
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xe470e4ef
setl cl
mov dword [ebp - 0x164], ecx
mov ecx, dword [ebp - 0x168]
mov edx, dword [ebp - 0x164]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.00419d90
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x627ba84a
mov eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0xf0]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0xb3eb3142
sete cl
mov dword [ebp - 0x11c], ecx
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x11c]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x218]
mov cl, byte [ecx]
mov byte [ebp - 0x44], cl
mov byte [eax], 0x59
mov byte [eax + 1], 0x2a
mov byte [eax + 2], 0x34
mov byte [eax + 3], 0x2e
mov byte [eax + 4], 0x2f
mov byte [eax + 5], 0x35
mov byte [eax + 6], 0x74
mov byte [eax + 7], 0x3d
mov byte [eax + 8], 0x3a
mov byte [eax + 9], 0x26
mov byte [eax + 0xa], 0x8e
mov ecx, 0xb
mov byte [eax + ecx], 0
add ecx, 1
cmp ecx, 0xc
jne 0x43399e
mov esi, dword [ebp - 0x54]
mov dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x24]
cmp eax, 0xc
jae 0x4339e7
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [esi + ecx]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00435790
add esp, 8
mov ecx, dword [ebp - 0x24]
mov byte [esi + ecx], al
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
jmp 0x4339b4
mov dword [ebp - 0x20c], esi
mov eax, dword [ebp - 0x10]
mov dword [eax], 0xe470e4ef
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ecx + eax*4]
jmp eax
retf 0xb2e8
xor ecx, ecx
sub eax, 0x111cec61
sete cl
mov dword [ebp - 0x154], ecx
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x154]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.00419d90
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x3268939e
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0xb0]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x627ba84a
setl cl
mov dword [ebp - 0x1e4], ecx
mov ecx, dword [ebp - 0x1e8]
mov edx, dword [ebp - 0x1e4]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov al, byte [ebp - 0x19]
test al, al
mov eax, 0xb3eb3142
jne 0x433aaa
mov eax, 0x13161a1a
mov ecx, dword [ebp - 0x10]
mov dword [ecx], eax
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xe0]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0x26610fb7
sete cl
mov dword [ebp - 0x18c], ecx
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x18c]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x7277566b
setl cl
mov dword [ebp - 0x1dc], ecx
mov ecx, dword [ebp - 0x1e0]
mov edx, dword [ebp - 0x1dc]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0xa8f595f9
setl cl
mov dword [ebp - 0x12c], ecx
mov ecx, dword [ebp - 0x130]
mov edx, dword [ebp - 0x12c]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0x321c145a
sete cl
mov dword [ebp - 0x194], ecx
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x194]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0x9f3a5586
sete cl
mov dword [ebp - 0x104], ecx
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x104]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x447f0ad2
setl cl
mov dword [ebp - 0x1ec], ecx
mov ecx, dword [ebp - 0x1f0]
mov edx, dword [ebp - 0x1ec]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x204]
mov edx, dword [ebp - 0x208]
mov ecx, dword [edx + ecx*4]
jmp ecx
xor ecx, ecx
sub eax, 0x13161a1a
sete cl
mov dword [ebp - 0x174], ecx
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0x8683e681
sete cl
mov dword [ebp - 0xfc], ecx
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0xfc]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xf8]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebp - 0x4c]
sub esp, 4
mov dword [esp], eax
call fcn.0040c780
add esp, 4
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x447f0ad2
mov al, byte [ebp - 0x12]
mov byte [ebp - 0x11], al
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0xe470e4ef
sete cl
mov dword [ebp - 0x14c], ecx
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x14c]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x321c145a
setl cl
mov dword [ebp - 0x19c], ecx
mov ecx, dword [ebp - 0x1a0]
mov edx, dword [ebp - 0x19c]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0x3268939e
sete cl
mov dword [ebp - 0x1ac], ecx
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1ac]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x17270c91
setl cl
mov dword [ebp - 0x184], ecx
mov ecx, dword [ebp - 0x188]
mov edx, dword [ebp - 0x184]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.00419d90
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
sub esp, 0x2c
mov dword [esp + 0x24], edx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], esi
mov dword [esp], ebx
mov dword [esp + 0x28], 0xcc0020
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [sym.imp.GDI32.dll_StretchBlt]
call eax
mov eax, dword [ebp - 0x10]
mov dword [eax], 0xb90ae33f
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xd0]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0x210]
mov edx, dword [ebp - 0x20c]
sub esp, 0xc
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov ecx, dword [ebp + 8]
call fcn.0040d440
mov byte [ebp - 0x12], al
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
test eax, eax
mov eax, 0x447f0ad2
je 0x433d7a
mov eax, 0x7277566b
mov ecx, dword [ebp - 0x10]
mov dword [ecx], eax
mov al, byte [ebp - 0x12]
mov byte [ebp - 0x11], al
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x98]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xb3eb3142
setl cl
mov dword [ebp - 0x124], ecx
mov ecx, dword [ebp - 0x128]
mov edx, dword [ebp - 0x124]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.00419d90
mov eax, dword [ebp - 0x10]
mov dword [eax], 0xc72bcb1b
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xb8]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xb90ae33f
setl cl
mov dword [ebp - 0x16c], ecx
mov ecx, dword [ebp - 0x170]
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov bl, byte [ebp - 0x11]
mov eax, dword [ebp - 0x30]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_DeleteObject]
and bl, 1
movzx eax, bl
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.00419d90
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
mov eax, esp
mov dword [ebp - 0x58], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0x218], eax
sub esp, 4
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_GetDC]
call eax
mov dword [ebp - 0x18], eax
sub esp, 4
mov dword [esp], 0x4c
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
call esi
mov dword [ebp - 0x38], eax
sub esp, 4
mov dword [esp], 0x4d
call esi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x18]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 7
mov eax, dword [sym.imp.GDI32.dll_GetCurrentObject]
call eax
mov esi, eax
mov eax, dword [ebp - 0x40]
sub esp, 0xc
mov dword [esp + 8], eax
mov dword [esp], esi
mov dword [esp + 4], 0x18
mov eax, dword [sym.imp.GDI32.dll_GetObjectW]
call eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 4]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 8]
mov dword [ebp - 0x28], eax
sub esp, 4
mov dword [esp], esi
mov eax, dword [sym.imp.GDI32.dll_DeleteObject]
call eax
mov eax, dword [ebp - 0x18]
sub esp, 4
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
call eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
sub esp, 0xc
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
call eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x30]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_SelectObject]
call eax
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x20]
sub esp, 0x24
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], esi
mov dword [esp], ebx
mov dword [esp + 0x20], 0xcc0020
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [sym.imp.GDI32.dll_BitBlt]
call eax
mov eax, dword [ebp - 0x2c]
not eax
mov ecx, dword [ebp - 0x28]
xor ecx, 2
mov edx, eax
xor edx, ecx
not edx
or eax, ecx
and eax, edx
sub eax, 0xffffffff
setl byte [ebp - 0x19]
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x111cec61
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe8]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x9f3a5586
setl cl
mov dword [ebp - 0x10c], ecx
mov ecx, dword [ebp - 0x110]
mov edx, dword [ebp - 0x10c]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0x627ba84a
sete cl
mov dword [ebp - 0x1cc], ecx
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [ebp - 0x1cc]
mov eax, dword [eax + ecx*4]
jmp eax
push eax
sub esp, 0x14
mov esi, esp
push eax
push eax
sub esp, 0xc
push eax
sub esp, 4
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_GetDC]
call eax
mov edi, eax
mov dword [ebp - 0x60], edi
sub esp, 4
mov dword [esp], 0x4c
mov ebx, dword [sym.imp.USER32.dll_GetSystemMetrics]
call ebx
mov dword [ebp - 0x68], eax
sub esp, 4
mov dword [esp], 0x4d
call ebx
mov dword [ebp - 0x64], eax
sub esp, 8
mov dword [esp], edi
mov dword [esp + 4], 7
mov eax, dword [sym.imp.GDI32.dll_GetCurrentObject]
call eax
mov ebx, eax
sub esp, 0xc
mov dword [esp + 8], esi
mov dword [esp], ebx
mov dword [esp + 4], 0x18
mov eax, dword [sym.imp.GDI32.dll_GetObjectW]
call eax
mov eax, esi
mov ecx, dword [eax + 4]
mov dword [ebp - 0x48], ecx
mov edi, dword [eax + 8]
sub esp, 4
mov dword [esp], ebx
mov eax, dword [sym.imp.GDI32.dll_DeleteObject]
call eax
sub esp, 4
mov esi, dword [ebp - 0x60]
mov dword [esp], esi
mov eax, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
call eax
mov ebx, eax
sub esp, 0xc
mov dword [esp + 8], edi
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], eax
mov dword [esp], esi
mov eax, dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
call eax
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ebx
mov eax, dword [sym.imp.GDI32.dll_SelectObject]
call eax
sub esp, 0x24
mov eax, dword [ebp - 0x64]
mov dword [esp + 0x1c], eax
mov eax, dword [ebp - 0x68]
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edi
mov eax, dword [ebp - 0x48]
mov dword [esp + 0xc], eax
mov dword [esp], ebx
mov dword [esp + 0x20], 0xcc0020
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [sym.imp.GDI32.dll_BitBlt]
call eax
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x627ba84a
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x26610fb7
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x3268939e
setl cl
mov dword [ebp - 0x1f4], ecx
mov ecx, dword [ebp - 0x1f8]
mov edx, dword [ebp - 0x1f4]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0x111cec61
setl cl
mov dword [ebp - 0x15c], ecx
mov ecx, dword [ebp - 0x160]
mov edx, dword [ebp - 0x15c]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x50]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_SelectObject]
call eax
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_DeleteDC]
call eax
mov eax, dword [ebp - 0x18]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_ReleaseDC]
call eax
mov eax, dword [ebp - 0x50]
sub esp, 4
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_DeleteObject]
call eax
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x30]
sub esp, 0xc
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.004342a0
add esp, 0xc
test al, al
mov eax, 0x9f3a5586
jne 0x4341f0
mov eax, 0x447f0ad2
mov ecx, dword [ebp - 0x10]
mov dword [ecx], eax
mov byte [ebp - 0x11], 0
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [ecx + eax*4]
jmp eax
sbb ecx, ebx
retf 0x8b08
xor ecx, ecx
sub eax, 0x7277566b
sete cl
mov dword [ebp - 0x1d4], ecx
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [ebp - 0x1d4]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax]
mov ecx, dword [esp + 0x38]
mov edx, eax
not edx
mov ebx, ecx
and ebx, edx
mov edx, ecx
not edx
mov ebp, eax
and ebp, edx
imul ebp, ebx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, ebp
mov ecx, dword [esp + 0x40]
imul eax, ecx
mov ecx, dword [esp + 0x30]
add ecx, eax
mov dword [esp + 0x270], ecx
mov eax, dword [esp + 0x1c]
mov dword [eax], 0x92ce551f
mov dword [esp + 0x4c], 0
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xd4]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xe05ead5d
mov eax, dword [esp + 0xe8]
mov ecx, dword [esp + 0xec]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0xa15f0061
sete cl
mov dword [esp + 0x130], ecx
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x130]
mov eax, dword [eax + ecx*4]
jmp eax
iretd
mov al, byte [esp + 0x24]
mov ecx, dword [esp + 0x1c]
mov dword [ecx], 0x3ae96fcd
mov byte [esp + 0x23], al
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x9c]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0x637cea32
sete cl
mov dword [esp + 0x208], ecx
mov eax, dword [esp + 0x20c]
mov ecx, dword [esp + 0x208]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xe05ead5d
setl cl
mov dword [esp + 0x1a8], ecx
mov ecx, dword [esp + 0x1ac]
mov edx, dword [esp + 0x1a8]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0xaea5373d
sete cl
mov dword [esp + 0x138], ecx
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0x138]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xdd663182
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xfc]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xdb82b70e
setl cl
mov dword [esp + 0x178], ecx
mov ecx, dword [esp + 0x17c]
mov edx, dword [esp + 0x178]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.00419d90
mov dword [esp + 0x34], 0
mov eax, dword [esp + 0x28]
mov eax, dword [eax]
mov ecx, dword [esp + 0x2c]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x30]
lea ebp, [esp + 0x34]
mov dword [esp + 0x10], ebp
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], ebx
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 9
call fcn.00408200
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x44]
test eax, eax
setne byte [esp + 0x27]
mov eax, dword [esp + 0x1c]
mov dword [eax], 0x8b3d60c5
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0xe4]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0xe05ead5d
sete cl
mov dword [esp + 0x180], ecx
mov eax, dword [esp + 0x184]
mov ecx, dword [esp + 0x180]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x68080581
setl cl
mov dword [esp + 0x218], ecx
mov ecx, dword [esp + 0x21c]
mov edx, dword [esp + 0x218]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0x5c5eae11
sete cl
mov dword [esp + 0x200], ecx
mov eax, dword [esp + 0x204]
mov ecx, dword [esp + 0x200]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x2dc]
mov dword [ecx], eax
mov eax, dword [esp + 0x44]
mov dword [edi], eax
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xf43c84b3
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x268]
mov edx, dword [esp + 0x26c]
mov ecx, dword [edx + ecx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0xa15f0061
setl cl
mov dword [esp + 0x148], ecx
mov ecx, dword [esp + 0x14c]
mov edx, dword [esp + 0x148]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0xdb82b70e
sete cl
mov dword [esp + 0x160], ecx
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x160]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xf43c84b3
setl cl
mov dword [esp + 0x1a0], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [esp + 0x1a0]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0x6b54304f
setl cl
mov dword [esp + 0x250], ecx
mov ecx, dword [esp + 0x254]
mov edx, dword [esp + 0x250]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov al, byte [esp + 0x23]
mov byte [esp + 0x25], al
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_ReleaseDC]
call eax
sub esp, 8
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xd0292c7d
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x94]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x948d76ff
setl cl
mov dword [esp + 0x150], ecx
mov ecx, dword [esp + 0x154]
mov edx, dword [esp + 0x150]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0x15f30565
setl cl
mov dword [esp + 0x1f8], ecx
mov ecx, dword [esp + 0x1fc]
mov edx, dword [esp + 0x1f8]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0x8b3d60c5
sete cl
mov dword [esp + 0x110], ecx
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x110]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.00419d90
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xf43c84b3
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xdd663182
setl cl
mov dword [esp + 0x170], ecx
mov ecx, dword [esp + 0x174]
mov edx, dword [esp + 0x170]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov al, byte [esp + 0x26]
and al, 1
movzx eax, al
add esp, 0x2c0
pop esi
pop edi
pop ebx
pop ebp
ret
xor ecx, ecx
sub eax, 0xfcaad9b9
sete cl
mov dword [esp + 0x190], ecx
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x190]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0x92ce551f
sete cl
mov dword [esp + 0x118], ecx
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x118]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.0040c780
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xdb82b70e
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x8c]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0xdd663182
sete cl
mov dword [esp + 0x168], ecx
mov eax, dword [esp + 0x16c]
mov ecx, dword [esp + 0x168]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x22b4c352
setl cl
mov dword [esp + 0x1f0], ecx
mov ecx, dword [esp + 0x1f4]
mov edx, dword [esp + 0x1f0]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.00419d90
mov al, byte [esp + 0x25]
and al, 1
mov byte [esp + 0x26], al
mov eax, dword [esp + 0x1c]
mov dword [eax], 0x6b54304f
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x40]
inc eax
mov ecx, dword [esp + 0x1c]
mov dword [ecx], 0xdd663182
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xc4]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0x3ae96fcd
sete cl
mov dword [esp + 0x1e0], ecx
mov eax, dword [esp + 0x1e4]
mov ecx, dword [esp + 0x1e0]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x729ec91d
setl cl
mov dword [esp + 0x248], ecx
mov ecx, dword [esp + 0x24c]
mov edx, dword [esp + 0x248]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0xff73e5d7
sete cl
mov dword [esp + 0x1b8], ecx
mov eax, dword [esp + 0x1bc]
mov ecx, dword [esp + 0x1b8]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x3ae96fcd
setl cl
mov dword [esp + 0x1e8], ecx
mov ecx, dword [esp + 0x1ec]
mov edx, dword [esp + 0x1e8]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0x77d36f06
setl cl
mov dword [esp + 0x240], ecx
mov ecx, dword [esp + 0x244]
mov edx, dword [esp + 0x240]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0xff73e5d7
setl cl
mov dword [esp + 0x260], ecx
mov ecx, dword [esp + 0x264]
mov edx, dword [esp + 0x260]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax]
mov ecx, dword [esp + 0x3c]
sub ecx, eax
mov eax, 0x68080581
jl 0x434e81
mov eax, 0x637cea32
mov ecx, dword [esp + 0x1c]
mov dword [ecx], eax
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0xcc]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xff73e5d7
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x84]
mov eax, dword [ecx + eax*4]
jmp eax
mov esi, dword [esp + 0x270]
mov ecx, dword [esp + 0x3c]
mov eax, dword [esi + ecx*4]
mov ebp, eax
not ebp
mov edx, eax
and edx, 0xff0000
shr edx, 0x10
or ebp, 0x5b0035
and ebp, 0xfd5b5635
mov ebx, eax
and ebx, 0x200a900
or ebp, ebx
xor edx, ebp
xor edx, 0xfd5b5635
movzx eax, al
shl eax, 0x10
or edx, eax
mov dword [esi + ecx*4], edx
mov eax, dword [esp + 0x3c]
mov ecx, eax
and ecx, 1
or eax, 1
add ecx, eax
mov eax, dword [esp + 0x1c]
mov dword [eax], 0x92ce551f
mov dword [esp + 0x4c], ecx
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xbc]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.00419d90
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x2dc]
mov dword [ecx], eax
mov eax, dword [esp + 0x44]
mov dword [edi], eax
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xfc22084
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xac]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0x22b4c352
sete cl
mov dword [esp + 0x1d8], ecx
mov eax, dword [esp + 0x1dc]
mov ecx, dword [esp + 0x1d8]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [esp + 0x27]
test al, al
mov eax, 0x15f30565
jne 0x434fa9
mov eax, 0x948d76ff
mov ecx, dword [esp + 0x1c]
mov dword [ecx], eax
mov byte [esp + 0x24], 0
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xdc]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x5c5eae11
setl cl
mov dword [esp + 0x258], ecx
mov ecx, dword [esp + 0x25c]
mov edx, dword [esp + 0x258]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0xd0292c7d
setl cl
mov dword [esp + 0x1b0], ecx
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x1b0]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0x77d36f06
sete cl
mov dword [esp + 0x238], ecx
mov eax, dword [esp + 0x23c]
mov ecx, dword [esp + 0x238]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x28]
mov eax, dword [eax]
mov ecx, dword [esp + 0x40]
sub ecx, eax
mov eax, 0x22b4c352
jl 0x435059
mov eax, 0xaea5373d
mov ecx, dword [esp + 0x1c]
mov dword [ecx], eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf4]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0x68080581
sete cl
mov dword [esp + 0x210], ecx
mov eax, dword [esp + 0x214]
mov ecx, dword [esp + 0x210]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x274]
test eax, eax
mov eax, 0x5c5eae11
jne 0x4350ab
mov eax, 0x3ae96fcd
mov ecx, dword [esp + 0x1c]
mov dword [ecx], eax
mov byte [esp + 0x23], 0
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x104]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xaea5373d
setl cl
mov dword [esp + 0x140], ecx
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x140]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0xfc22084
setl cl
mov dword [esp + 0x1c8], ecx
mov ecx, dword [esp + 0x1cc]
mov edx, dword [esp + 0x1c8]
mov ecx, dword [ecx + edx*4]
jmp ecx
cli
pop ss
lea edx, [eax - 0x78]
xor esi, 0x2444c7de
xor al, 0
add byte [eax], al
add byte [ebx - 0x74d7dbbc], cl
add byte [ebx - 0x74d3dbb4], cl
or dword [ebx - 0x74c7dbac], ecx
je 0x43515e
xor byte [ebp - 0x76cbdba4], cl
pop esp
and al, 0x10
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], esi
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 9
or dword [eax], eax
add byte [eax], al
call fcn.00408200
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xe05ead5d
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x74]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0x948d76ff
sete cl
mov dword [esp + 0x128], ecx
mov eax, dword [esp + 0x12c]
mov ecx, dword [esp + 0x128]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xfcaad9b9
setl cl
mov dword [esp + 0x198], ecx
mov ecx, dword [esp + 0x19c]
mov edx, dword [esp + 0x198]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0xfc22084
sete cl
mov dword [esp + 0x1c0], ecx
mov eax, dword [esp + 0x1c4]
mov ecx, dword [esp + 0x1c0]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x1c]
mov dword [eax], 0x948d76ff
mov byte [esp + 0x24], 1
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0x15f30565
sete cl
mov dword [esp + 0x1d0], ecx
mov eax, dword [esp + 0x1d4]
mov ecx, dword [esp + 0x1d0]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x637cea32
setl cl
mov dword [esp + 0x220], ecx
mov ecx, dword [esp + 0x224]
mov edx, dword [esp + 0x220]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0xd0292c7d
sete cl
mov dword [esp + 0x158], ecx
mov eax, dword [esp + 0x15c]
mov ecx, dword [esp + 0x158]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0x729ec91d
sete cl
mov dword [esp + 0x230], ecx
mov eax, dword [esp + 0x234]
mov ecx, dword [esp + 0x230]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0xf43c84b3
sete cl
mov dword [esp + 0x188], ecx
mov eax, dword [esp + 0x18c]
mov ecx, dword [esp + 0x188]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x10c]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x92ce551f
setl cl
mov dword [esp + 0x120], ecx
mov ecx, dword [esp + 0x124]
mov edx, dword [esp + 0x120]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0x6b54304f
sete cl
mov dword [esp + 0x228], ecx
mov eax, dword [esp + 0x22c]
mov ecx, dword [esp + 0x228]
mov eax, dword [eax + ecx*4]
jmp eax
inc edx
add al, dh
mov word [edx], es
ret 0x428c
mov byte [0xa22b0042], al
inc edx
add dh, cl
mov byte [0xa2580042], al
inc edx
add byte [eax - 0x51ffbd5e], ah
mov dword [0xa4900042], eax
inc edx
add byte [eax - 0x3affbd5e], ah
movsb byte es:[edi], byte [esi]
inc edx
add al, dl
mov dword [0xa4d00042], eax
inc edx
add al, dl
movsb byte es:[edi], byte [esi]
inc edx
add dl, dl
movsb byte es:[edi], byte [esi]
inc edx
add al, dl
movsb byte es:[edi], byte [esi]
inc edx
add al, ah
movsb byte es:[edi], byte [esi]
inc edx
add al, dl
mov dword [0x10042], eax
add byte [eax], al
add dword [eax], eax
add byte [eax], al
add dword [eax], eax
add byte [eax], al
loopne 0x44a692
inc edx
add al, dh
movsb byte es:[edi], byte [esi]
inc edx
add al, dl
mov dword [0xa5000042], eax
inc edx
add al, dl
mov dword [0xa5100042], eax
inc edx
add al, dl
mov dword [0xa5d80042], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
inc edx
add ah, ch
movsd dword es:[edi], dword [esi]
inc edx
add cl, cl
stosb byte es:[edi], al
inc edx
add byte [0x230042a6], bl
cmpsb byte [esi], byte es:[edi]
inc edx
add byte [eax - 0x5a], al
inc edx
add byte [esi + 0x42], ah
add byte [eax - 0x5a], al
inc edx
add byte [edi], cl
stosb byte es:[edi], al
inc edx
add byte [eax - 0x5a], dh
inc edx
add byte [esi - 0x37ffbd5a], ch
cmpsb byte [esi], byte es:[edi]
inc edx
add byte [esi - 0xcffbd58], ch
cmpsb byte [esi], byte es:[edi]
inc edx
add byte [esi - 0x15ffbd58], ch
test eax, 0xa9fd0042
inc edx
add byte [edi], cl
stosb byte es:[edi], al
inc edx
add byte [0xc90042aa], dl
stosb byte es:[edi], al
inc edx
add byte [edx - 0x4effbd56], bh
stosb byte es:[edi], al
inc edx
add byte [ecx - 0x36ffbd56], dh
stosb byte es:[edi], al
inc edx
add byte [eax - 0x2fffbd56], dl
mov dword [0xaaa00042], eax
inc edx
add byte [esi - 0x5fffbd56], dl
stosb byte es:[edi], al
inc edx
add al, dl
mov dword [0xa2b00042], eax
inc edx
add byte [eax - 0x4fffbd5e], dh
mov byte [0xa2b20042], al
inc edx
add byte [edi - 0x31ffbd5e], bh
mov byte [0xa37c0042], al
inc edx
add byte [edi - 0x7dffbd5d], bl
mov dword [0xa3900042], eax
inc edx
add byte [edi - 0x6fffbd5d], bl
mov dword [0xc1620042], eax
inc edx
add cl, bh
add byte [eax + 0x620042a3], dl
rol dword [edx], 0xf9
loope 0x44a7f9
add byte [eax - 0x40], bh
inc edx
add byte [eax - 0x40], bh
inc edx
add bl, al
rol dword [edx], 0xe2
rol dword [edx], 0xe0
fadd dword [edx]
insd dword es:[edi], dx
fld dword [edx]
jae 0x44a7ab
inc edx
add byte [edx - 0x5effbd27], ah
fild dword [edx]
mov cl, 0xd9
inc edx
add byte [eax], ah
fadd qword [edx]
fld dword gs:[edx]
leave
fld qword [edx]
inc eax
fild word [edx]
pop edx
fild word [edx]
pop edx
fild word [edx]
push esp
fild word [edx]
push esp
fild word [edx]
mov eax, esp
inc edx
add byte [ebp - 0x6affbd40], dl
rol byte [edx], 0xf0
ret 0x42
xlatb
inc edx
add byte [edi - 0x43ffbd29], cl
xlatb
inc edx
add byte [ebx], cl
fadd dword [edx]
rcl bh, 1
inc edx
add al, dl
xlatb
inc edx
add dl, dl
xlatb
inc edx
add al, dl
xlatb
inc edx
add dl, ch
xlatb
inc edx
add byte [ebx], cl
fadd dword [edx]
sub al, 0xd8
inc edx
add byte [edi - 0x28], dh
inc edx
add byte [eax - 0x28], dl
inc edx
add byte [edi - 0x28], dh
inc edx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [edi - 0x28], dh
inc edx
add byte [esi - 0x6affbd28], al
fadd dword [edx]
pushal
fild dword [edx]
pushal
fild dword [edx]
invalid