Function at 0xfa2116
Capabilities:
Execute anti-debugging instructions

Disassembly:
rdtsc
lea esp, [esp + 3]
jmp 0xfa231a
bsr ax, di
btr ecx, eax
mov edx, dword [esp]
and ecx, esi
mov ah, byte [esp + 1]
mov ecx, dword [esp]
jmp 0xfa2190
cld
add esp, 0
xchg dx, ax
push si
lea esp, [esp + 1]
mov word [esp], bx
jmp 0xfa2148
stc
mov ecx, dword [esp]
bts edx, edi
rdtsc
mov dx, cx
lea esp, [esp]
jmp 0xfa21a9
add esp, 1
shl ax, cl
sbb ecx, 0xc2cdeeb9
bswap eax
mov edx, dword [esp]
lea ecx, reloc.WINMM.dll_PlaySoundA
jmp 0xfa2176
sub esp, 0x17
mov ecx, 0xfba7e7ba
xchg dword [esp + 8], edx
mov al, byte [esp + 0xa]
stc
pushal
jmp 0xfa228b
stc
xchg edx, eax
mov eax, dword [esp]
not cx
xchg byte [esp], ch
inc eax
jmp 0xfa2163
bsr ax, bx
bsr ecx, edi
lea esp, [esp + 0x24]
jmp 0xfa2224
pop cx
mov ax, 0xc9f7
mov ax, bp
rdtsc
bsr ecx, edi
add esp, 4
jmp 0xfa21d0
stc
rol dx, 7
mov cl, dh
cmc
mov dword [esp + 0x25], eax
bsf eax, ebp
jmp 0xfa21e6
rdtsc
not cx
xchg ah, cl
mov dh, 8
bswap ecx
mov dh, ah
jmp 0xfa2258
lea eax, [esi*4]
add esp, 5
add esp, 0
lea eax, reloc.WINMM.dll_PlaySoundA
xchg word [esp], dx
mov dx, word [esp + 1]
jmp 0xfa220e
push word [esp + 7]
mov eax, 0x2d9797c6
jmp 0xfa2270
xchg dl, dh
mov ah, byte [esp + 2]
push word [esp + 2]
xchg edx, eax
push word [esp + 3]
push dword [esp + 5]
jmp 0xfa2242
lea ecx, reloc.WINMM.dll_PlaySoundA
push esp
bswap edx
neg ecx
std
mov ch, byte [esp + 6]
jmp 0xfa22c7
xchg dword [esp + 0x26], ecx
pop dword [esp + 0xa]
push word [esp + 0x26]
rcl edx, cl
std
pop ecx
jmp 0xfa21fd
pop word [esp]
rdtsc
pop dx
neg ah
cmc
bswap edx
jmp 0xfa22f3
mov edx, dword [esp + 2]
rcl dh, cl
lea eax, [eax + 0x1e]
mov ax, 0x30cb
sub ecx, ecx
jmp 0xfa22dd
push dword [esp + 0xa]
mov cx, 0x540f
mov dh, byte [esp + 6]
rcr ecx, cl
std
mov ecx, 0xafe0c32c
jmp 0xfa22a1
not cx
lea esp, [esp + 1]
bts dx, ax
xchg cx, dx
std
jmp 0xfa237e
pop dx
mov dword [esp + 2], ebx
pop dword [esp + 3]
lea eax, [esp + eax]
stc
mov al, bh
jmp 0xfa22b0
bsf ax, bp
bsf cx, bx
lea ecx, [esi + esi]
lea edx, [ebp*4]
lea esp, [esp + 2]
std
jmp 0xfa21c1
inc ecx
call fcn.00fa2336
mov word [esp + 4], ax
push dword [esp + 0xc]
setne dh
dec dx
sete ch
lea edx, [esp + ebp]
jmp 0xfa23a9
pop dword [esp + 2]
lea eax, [eax*4]
xchg word [esp + 6], cx
jmp 0xfa2393
push dword [esp + 6]
mov ch, 0x41
inc edx
pop ax
mov word [esp + 8], dx
mov edx, 0xa845b1f2
jmp 0xfa234c
neg cx
pop word [esp + 3]
bswap eax
mov cl, bl
neg al
jmp 0xfa267c
xchg ch, dl
mov edx, 0x94e5aebe
rdtsc
pop ax
shl dx, 0xb
bsr eax, ebx
jmp 0xfa2368
not dh
push eax
xchg cx, ax
mov word [esp], bx
call fcn.00fa23fd
push word [esp + 0x10]
xchg cx, ax
xchg byte [esp + 1], cl
sub esp, 0x17
lea eax, [ecx - 0x60]
inc ecx
jmp 0xfa24e4
dec eax
mov dl, 0xfe
lea eax, [eax + ebx]
shr eax, 0xb
bswap edx
push dword [esp + 3]
jmp 0xfa241b
mov cl, 0xfb
xchg dx, ax
sub ecx, 0xbc021416
cmc
push word [esp]
bt cx, cx
jmp 0xfa24ae
cld
push dword [esp + 0x15]
mov cx, 0x19d5
bswap ecx
mov ecx, 0xc7878aef
lea esp, [esp + 0x12]
jmp 0xfa2463
bsf ecx, esi
xchg word [esp + 5], dx
bsf ecx, eax
mov word [esp], cx
jmp 0xfa24c4
pushfd
add esp, 1
mov byte [esp + 0xa], ch
add esp, 6
ror ch, 7
lea eax, reloc.WINMM.dll_PlaySoundA
jmp 0xfa2498
pop word [esp + 2]
call fcn.00fa24fa
bt edx, ebp
bswap eax
mov cx, 0xf646
mov ax, word [esp + 5]
xchg edx, eax
jmp 0xfa254f
lea esp, [esp + 0x2d]
pop dword [esp + 2]
sub esp, 0xf
mov ecx, 0x976780d
bswap ecx
dec dh
jmp 0xfa2482
mov ecx, 0xf11cd19e
mov dx, 0xaf24
xchg word [esp + 4], cx
mov ax, 0x4b62
sub cx, 0xb36
rdtsc
jmp 0xfa2452
mov word [esp], sp
mov al, cl
mov edx, 0x41ed3911
add esp, 1
rdtsc
xchg cx, dx
jmp 0xfa264e
xchg dword [esp + 2], eax
setle al
lea esp, [esp + 7]
mov edx, ebp
mov al, byte [esp + 1]
setnp ah
jmp 0xfa2534
mov cx, di
sub esp, 0xd
stc
btc dx, ax
xchg ah, ch
jmp 0xfa25a7
xchg al, ah
rdtsc
rcl dx, 0xa
pop dword [esp + 3]
not dx
pop word [esp + 6]
jmp 0xfa2565
lea ecx, [eax - 0x98]
mov word [esp + 0xf], cx
xchg dword [esp + 0x11], eax
jmp 0xfa25ec
xchg byte [esp + 0x12], ch
lea eax, [edi*4]
mov eax, 0x9eb9e78d
xchg dx, ax
mov dx, word [esp + 0x14]
jmp 0xfa2591
xchg dh, ch
mov ch, bl
sub esp, 0xe
pushfd
inc cx
xchg cx, ax
jmp 0xfa257b
add esp, 0xe
mov cx, word [esp + 7]
pop ax
pop ax
pop dword [esp]
jmp 0xfa261c
mov ax, word [esp + 0x15]
mov word [esp + 5], cx
neg cx
push word [esp + 0x10]
stc
mov cx, word [esp + 0xc]
jmp 0xfa25d6
xchg dword [esp], ecx
lea ecx, [esi + edi]
xchg byte [esp + 2], dh
mov byte [esp], ah
jmp 0xfa2631
lea eax, [edx + esi]
stc
push word [esp + 3]
pop dword [esp]
mov byte [esp + 1], bl
xchg dword [esp], edx
jmp 0xfa2606
push word [esp + 3]
rol dx, cl
xchg ah, dh
mov ah, byte [esp + 2]
mov dx, word [esp + 5]
rcr ecx, cl
jmp 0xfa2662
mov eax, 0xa459d5bb
clc
not ch
rdtsc
lea esp, [esp]
inc ah
jmp 0xfa25c7
cld
mov ecx, dword [esp + 3]
bsf dx, sp
shr ax, 4
push dword [esp + 1]
shr ax, cl
jmp 0xfa26b4
lea eax, [esi - 0xaf]
xchg dword [esp + 7], eax
bt edx, esp
lea eax, [ebx + edi]
mov dword [esp + 7], edx
pop dword [esp + 2]
jmp 0xfa2516
mov dh, 0xed
bts ax, dx
lea edx, [edx*4]
mov dword [esp], ebp
push dword [esp + 3]
jmp 0xfa2758
rdtsc
bt eax, esp
mov cx, word [esp + 7]
mov al, 0x45
pop dword [esp]
mov ah, dh
jmp 0xfa2699
mov ax, 0xdbf4
mov edx, dword [esp]
not eax
xchg word [esp], ax
cld
jmp 0xfa26f5
mov cx, 0xca64
lea esp, [esp + 0x19]
bsf cx, sp
mov word [esp + 1], si
inc eax
lea esp, [esp + 8]
jmp 0xfa26c7
mov edx, dword [esp]
lea ecx, [edx + ebp]
add esp, 2
mov cx, word [esp]
stc
ror al, cl
jmp 0xfa273e
mov cx, di
mov al, ah
bswap ecx
mov ax, si
lea eax, reloc.WINMM.dll_PlaySoundA
xchg dword [esp + 1], ecx
jmp 0xfa26dd
ror dl, 6
xchg cx, ax
neg eax
mov ax, word [esp]
jmp 0xfa27a3
lea esp, [esp]
std
add esp, 0
bts dx, ax
rdtsc
lea eax, [eax + ecx]
jmp 0xfa2728
bswap ecx
pop eax
pushal
pop word [esp + 9]
mov ecx, 0x6fa09aee
not cx
jmp 0xfa2712
mov dh, byte [esp]
sub esp, 7
seto dl
std
lea esp, [esp + 3]
jmp 0xfa27f3
std
cld
lea esp, [esp + 1]
neg ch
mov cx, ax
mov ecx, 0xf400cdd4
jmp 0xfa276b
mov edx, 0xc237c19c
inc cx
mov cx, word [esp]
mov ecx, 0x32d4b656
mov ah, cl
mov ah, ch
jmp 0xfa2781
mov ecx, dword [esp + 0x13]
add edx, 0xe7df051d
xchg ah, dl
mov al, dl
lea edx, [edx*4]
call fcn.00fa27cf
popfd
jmp 0xfa2864
xchg ah, bh
mov edi, ebx
cpuid
setg al
rdtsc
xchg dx, bx
jmp 0xfa2846
xchg esi, eax
not di
lea ebp, [esp + ebp]
mov ebp, dword [esp]
mov ecx, 0x8f419bff
rdtsc
jmp 0xfa28c6
push 0xc3b24790
add dword [esp], reloc.WINMM.dll_PlaySoundA
pushal
mov esi, ebp
mov bl, byte [esp]
jmp 0xfa2810
setg cl
push di
mov ah, dl
lea ebx, [esi + 0x3b]
lea esp, [esp]
jmp 0xfa28a5
pushfd
mov ecx, 0x3f16835f
not dl
lea ebx, [ebx*4]
mov ah, dl
push dword [esp + 3]
jmp 0xfa2878
xchg word [esp + 8], bp
xchg word [esp], ax
bswap esi
bswap esi
lea edi, reloc.WINMM.dll_PlaySoundA
mov ebp, eax
jmp 0xfa28ec
cpuid
push cx
mov ax, sp
xchg cl, ah
not si
xchg ebx, edi
jmp 0xfa288e
lea ebp, [eax*4]
mov ch, 0xfc
pushal
xchg byte [esp + 0x1b], ah
jmp 0xfa292c
push dword [esp + 6]
cpuid
xchg cx, ax
mov byte [esp + 5], ah
xchg byte [esp + 8], ch
jmp 0xfa28d6
lea ecx, [ecx*4]
mov si, 0xded7
mov ax, word [esp + 0x13]
jmp 0xfa29a1
mov cl, 0x81
mov byte [esp + 0xd], ch
pop word [esp + 8]
mov bh, 0xd1
setnp dh
pop dword [esp + 0xb]
jmp 0xfa2916
mov si, word [esp + 0x27]
mov word [esp + 0x1a], bp
mov dh, 0x77
popal
call fcn.00fa2975
mov bp, 0xa4d8
push cx
mov word [esp + 0xf], bx
mov ch, byte [esp + 0xa]
jmp 0xfa2a72
push dword [esp + 3]
push sp
lea esp, [esp + 0xa]
call fcn.00fa2a4c
dec esp
push eax
je 0xfa2a8a
inc esp
push eax
add byte [esi - 0x71], ah
inc esp
and al, 1
pop word [esp + 1]
pushfd
pushal
lea esp, [esp + 0x25]
mov word [esp], bx
mov byte [esp + 1], dl
jmp 0xfa2a08
push 0
push edi
push dword [esp + 2]
push dword [esp + 3]
pop dword [esp + 3]
jmp 0xfa2a1e
mov bp, word [esp + 0xd]
lea esi, [esi + edi]
mov edx, 0x13c91ec0
lea esp, [esp + 2]
lea esp, [esp + 0x14]
popal
jmp 0xfa2a3b
push dword [esp + 0x14]
pop word [esp + 0x15]
pop dword [esp + 5]
jmp 0xfa2ad1
push edx
mov dword [esp + 7], edx
lea esp, [esp + 5]
pop word [esp + 1]
pushfd
push esp
jmp 0xfa2aee
pop word [esp + 0xb]
pop dword [esp + 1]
pop word [esp + 0x21]
mov dword [esp + 0x2d], edi
push word [esp + 0x1f]
lea esp, [esp + 0x2c]
jmp 0xfa2abb
mov dword [esp + 7], edx
mov byte [esp + 4], ah
mov dword [esp + 2], ebp
mov dword [esp + 7], esp
jmp 0xfa3ef3
call 0xfa3611
jmp 0xfa4a9b
mov byte [esp + 2], ch
mov dword [esp + 7], edx
lea esp, [esp + 4]
mov byte [esp + 5], ch
call fcn.00fa30d1
push edx
insb byte es:[edi], dx
popal
jae 0xfa3f74
inc ebx
popal
jo 0xfa3f87
jne 0xfa3f87
add byte gs:[0xa05136a0], ch
inc ebx
pop ebp
push ebx
je 0xfa3f76
imul ebp, dword [ebp + 0x65], reloc.WINMM.dll_PlaySoundA
je 0xfa3f6e
popal
jo 0xfa3fa2
jne 0xfa3fa2
add byte gs:[eax + 0x74], dl
dec ecx
outsb dx, byte [esi]
push edx
arpl word gs:[eax + eax - 0x54], si
mov edi, 0x43746547
popal
jo 0xfa3fb8
jne 0xfa3fb8
add byte gs:[edi + 0x66], cl
jae 0xfa3fb2
je 0xfa3fa1
arpl word gs:[eax + eax + 0x4b], si
imul ebp, dword [esp + ebp*2 + 0x54], 0x72656d69
add byte [edi + 0x65], al
je 0xfa3fb4
arpl word [edx + 0x6f], si
insb byte es:[edi], dx
insb byte es:[edi], dx
push edx
popal
outsb dx, byte [esi]
add byte gs:[bx + di + 0x6e], cl
insb byte es:[edi], dx
popal
je 0xfa3fd8
push edx
arpl word gs:[eax + eax + 0x57], si
je 0xfa3f78
push edi
imul ebp, dword [esi + 0x48], reloc.WINMM.dll_PlaySoundA
add byte [ecx + 0x6e], cl
je 0xfa3fea
jb 0xfa3ffa
arpl word gs:[edx + edx*2 + 0x65], si
arpl word [eax + eax + 0x44], si
jae 0xfa4007
jb 0xfa4004
jns 0xfa3fe0
arpl word [edi + 0x6e], bp
add byte [esi + 0x53746553], al
arpl word [edx + 0x6f], si
jb 0xfa4012
outsd dx, dword [esi]
insb byte es:[edi], dx
insb byte es:[edi], dx
push eax
outsd dx, dword [esi]
jae 0xfa3fa9
push edx
jb 0xfa400f
ja 0xfa4007
imul ebp, dword [esi + 0x64], reloc.WINMM.dll_PlaySoundA
outsd dx, dword fs:[esi]
ja 0xfa3fb6
inc esi
imul ebp, dword [esp + ebp*2 + 0x52], reloc.WINMM.dll_PlaySoundA
dec ecx
insb byte es:[edi], dx
insb byte es:[edi], dx
push edx
arpl word gs:[eax + eax + 0x49], si
jae 0xfa4019
imul ebp, dword [esi + 0x64], reloc.WINMM.dll_PlaySoundA
jae 0xfa4034
bound ebp, qword [ebp]
inc edi
je 0xfa4026
jns 0xfa4048
inc ebx
outsd dx, dword [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0xfa3fdb
xor dword [ebx + 0x65], edx
je 0xfa4033
arpl word [edx + 0x6f], si
insb byte es:[edi], dx
insb byte es:[edi], dx
push edx
popal
outsb dx, byte [esi]
add byte gs:[bp + di + 0x65], dl
add byte [ebx + 0x65], dl
je 0xfa4046
imul ebp, dword [esi + 0x64], reloc.WINMM.dll_PlaySoundA
outsb dx, byte [esi]
inc ecx
add byte [eax], ah
mov dl, 0x20
inc edi
mov dl, 0x50
and byte [edx + 0x50b24720], dh
xor eax, dword [edi + 0x65]
je 0xfa405c
push edi
imul ebp, dword [esi + 0x64], reloc.WINMM.dll_PlaySoundA
outsd dx, dword fs:[esi]
ja 0xfa4057
outsd dx, dword [esi]
outsb dx, byte [esi]
inc ecx
add byte [ebx + 0x65], dl
je 0xfa4055
arpl word [ecx + ebp*2 + 0x76], si
push edi
push edi
imul ebp, dword [esi + 0x64], reloc.WINMM.dll_PlaySoundA
test al, 0x3e
pop ecx
test al, 0x41
inc ebp
inc ebx
outsd dx, dword [esi]
jo 0xfa40a4
push edx
arpl word gs:[eax + eax + 0x52], si
insb byte es:[edi], dx
popal
popal
jae 0xfa409c
inc esp
inc ebx
add byte [ebp + 0x73], al
je 0xfa40b1
outsd dx, dword [esi]
jns 0xfa408f
outsb dx, byte gs:[esi]
jne 0xfa4046
dec ecx
jae 0xfa409b
push edx
arpl word gs:[ebp + eax*2 + 0x6d], si
jo 0xfa40c4
jns 0xfa4052
push ebp
jo 0xfa40b9
popal
je 0xfa40bd
push edi
push edi
imul ebp, dword [esi + 0x64], reloc.WINMM.dll_PlaySoundA
outsd dx, dword [esi]
ja 0xfa405f
inc edi
je 0xfa40a9
outsd dx, dword [esi]
arpl word [ebp + 0x73], si
add byte [ebp + 0x71], al
jne 0xfa40cd
insb byte es:[edi], dx
push edx
arpl word gs:[eax + eax + 0x49], si
outsb dx, byte [esi]
jbe 0xfa40d7
insb byte es:[edi], dx
imul esp, dword [ecx + 0x74], 0x63655265
je 0xfa4081
out 0x76, al
in al, 0x83
jle 0xfa4060
out 0x56, eax
popal
insb byte es:[edi], dx
imul esp, dword [ecx + 0x74], 0x63655265
je 0xfa4095
push edx
arpl word gs:[eax + eax + 0x47], si
inc edi
je 0xfa40e9
popal
jb 0xfa4101
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0xfa409f
push cs
cdq
clc
inc edi
je 0xfa40fd
je 0xfa40fd
imul ebp, dword [esi + 0x64], reloc.WINMM.dll_PlaySoundA
arpl word [eax + eax + 0x47], si
outsd dx, dword [esi]
ja 0xfa40fe
arpl word gs:[eax + eax + 0x47], si
je 0xfa40f7
insb byte es:[edi], dx
imul esp, dword [ebp + 0x6e], 0x63655274
je 0xfa40be
push edx
arpl word gs:[eax + eax + 0x43], si
add byte [ebx + 0x68], al
arpl word gs:[ebx + 0x4d], bp
inc ebx
push 0x4d6b6365
outsb dx, byte gs:[esi]
jne 0xfa4111
je 0xfa412f
insd dword es:[edi], dx
add byte [ebx + 0x65], dl
je 0xfa4116
je 0xfa4116
outsd dx, dword [esi]
jb 0xfa4138
jb 0xfa4145
jne 0xfa4146
outsb dx, byte [esi]
push edi
imul ebp, dword [esi + 0x64], 0x5300776f
arpl word [edx + 0x6f], si
insb byte es:[edi], dx
insb byte es:[edi], dx
push edi
imul ebp, dword [esi + 0x64], 0x7845776f
add al, cl
pop edi
iretd
outsd dx, dword fs:[esi]
ja 0xfa4132
js 0xfa40ef
enter 0xffffffffffffcf5f, 0xffffffffffffffaa
pop ecx
xchg esi, eax
xor cl, byte [ecx + 0x73]
inc esp
jae 0xfa413d
imul esp, dword [ecx + 0x6c], reloc.WINMM.dll_PlaySoundA
jae 0xfa4175
dec ebp
dec ebp
jae 0xfa4175
jae 0xfa4164
popal
inc ecx
add byte [ebp + 0x61], cl
jo 0xfa4162
imul ebp, dword [esi + 0x64], reloc.WINMM.dll_PlaySoundA
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], reloc.WINMM.dll_PlaySoundA
setbe byte [ecx]
add byte [0x1960f3c], ch
rcl byte [ebx + 0x65], 0x6e
inc esp
insb byte es:[edi], dx
dec ecx
je 0xfa418c
insd dword es:[edi], dx
dec ebp
jae 0xfa419f
popal
inc ecx
inc ecx
add byte [edi + 0x65], al
je 0xfa4189
je 0xfa4189
outsd dx, dword [esi]
jo 0xfa418f
imul ebp, dword [esi + 0x64], reloc.WINMM.dll_PlaySoundA
jae 0xfa4198
add byte [ecx + 0x73], cl
push edi
imul ebp, dword [esi + 0x64], reloc.WINMM.dll_PlaySoundA
ja 0xfa4147
add byte [ecx + 0x64], al
push 0x75
inc ecx
push 0x75
jae 0xfa41c1
push edi
imul ebp, dword [esi + 0x64], 0x6552776f
arpl word [ebp + eax*2 + 0x78], si
add byte [ebx + 0x65], dl
je 0xfa41ae
popal
jb 0xfa41c6
outsb dx, byte [esi]
je 0xfa4164
dec ebp
jae 0xfa41db
popal
inc edx
outsd dx, dword [esi]
js 0xfa41b0
add byte [eax + 0x6f], dl
jae 0xfa41e8
dec ebp
jae 0xfa41eb
popal
inc ecx
add byte [ebx + 0x65], dl
outsb dx, byte [esi]
dec ebp
jae 0xfa41f8
popal
inc ecx
add byte [ebp + 0x6c], al
insb byte es:[edi], dx
je 0xfa41f5
inc esp
inc esp
inc ebx
add byte [ebp + 0x73], al
je 0xfa420a
outsd dx, dword [esi]
jns 0xfa41de
jne 0xfa420f
jae 0xfa420e
jb 0xfa41a1
cmp dword [edx], 0x15
test byte [ebp + 0x6f], cl
jbe 0xfa420e
push edi
imul ebp, dword [esi + 0x64], 0x4700776f
ja 0xfa41b0
inc edi
je 0xfa41f7
jne 0xfa4228
jae 0xfa4227
jb 0xfa420a
outsd dx, dword [esi]
jae 0xfa41bd
inc edi
je 0xfa4211
imul edi, dword [eax + 0x65], reloc.WINMM.dll_PlaySoundA
je 0xfa4221
push ebx
je 0xfa4221
imul ebp, dword [esi + 0x64], reloc.WINMM.dll_PlaySoundA
jae 0xfa41d3
ja 0xfa4248
jo 0xfa4249
imul ebp, dword [esi + 0x74], reloc.WINMM.dll_PlaySoundA
inc ecx
add byte [ebx + 0x65], dl
je 0xfa4224
je 0xfa4224
jne 0xfa4255
jae 0xfa4254
jb 0xfa41e7
dec edi
jo 0xfa424f
outsb dx, byte [esi]
inc ebx
insb byte es:[edi], dx
imul esi, dword [eax + 0x62], 0x6472616f
add byte [ebx], ah
mov ebx, 0xebd4e2b
and edi, dword [ebx + reloc.WINMM.dll_PlaySoundA]
sub ecx, dword [esi - 0x43]
push cs
dec esi
mov ebp, 0x53691e0e
je 0xfa4244
push ds
imul edx, dword [ebx + 0x65], 0x696c4374
jo 0xfa4267
insb byte es:[edi], dx
imul esi, dword [eax + 0x62], 0x6472616f
outsd dx, dword [esi]
popal
jb 0xfa426d
inc esp
popal
je 0xfa426e
add byte [ebx + 0x6c], al
inc ebx
insb byte es:[edi], dx
outsd dx, dword [esi]
jae 0xfa4278
inc ebx
insb byte es:[edi], dx
imul esi, dword [eax + 0x62], 0x6472616f
add byte [ebp + 0xaff980a], bl
mov dword [reloc.WINMM.dll_PlaySoundA], eax
or ah, byte [ebx + 0x7465472b]
inc edi
je 0xfa426b
inc ebx
insb byte es:[edi], dx
imul esi, dword [eax + 0x62], 0x6472616f
inc esp
popal
je 0xfa4295
add byte [edi + 0x61], dl
imul esi, dword [esi + eax*2 + 0x6f], 0x706e4972
jne 0xfa42b5
dec ecx
insb byte es:[edi], dx
add byte gs:[edi + 0x65], al
je 0xfa429d
push ebx
arpl word [edx + 0x6f], si
insb byte es:[edi], dx
insb byte es:[edi], dx
push eax
outsd dx, dword [esi]
jae 0xfa4253
inc ebp
insd dword es:[edi], dx
jo 0xfa42cb
jns 0xfa429c
insb byte es:[edi], dx
imul esi, dword [eax + 0x62], 0x6472616f
add byte [edi + 0x65], al
je 0xfa42b3
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
jne 0xfa42b3
je 0xfa42d1
insd dword es:[edi], dx
insd dword es:[edi], dx
inc ebx
outsd dx, dword [esi]
jne 0xfa42df
je 0xfa4273
inc edx
std
int3
push edx
imul esi, dword gs:[bp + di + 0x74], 0x6c437265
popal
jae 0xfa42f8
inc ecx
add byte [edi + 0x65], al
je 0xfa42d8
outsb dx, byte gs:[esi]
jne 0xfa42d8
je 0xfa42f6
insd dword es:[edi], dx
dec ecx
inc esp
add byte [edi + ebp*2 + 0x61], cl
dec esp
outsd dx, dword [esi]
popal
inc edx
imul esi, dword [ebp + ebp*2 + 0x61], 0xd1004170
insd dword es:[edi], dx
popal
jo 0xfa42e1
add cl, dl
push eax
inc edi
je 0xfa42fa
jns 0xfa431c
je 0xfa4310
insd dword es:[edi], dx
dec ebp
je 0xfa4322
imul esp, dword [ebx + 0x73], reloc.WINMM.dll_PlaySoundA
add byte [ebp + 0x6e], al
outsb dx, byte [esi]
popal
bound ebp, qword [ebp + 0x57]
imul ebp, dword [esi + 0x64], 0x4700776f
inc esp
dec ecx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add bl, dl
inc ebx
insb byte es:[edi], dx
rol dword [ebx + 0x6c], cl
imul esp, dword [ebp + 0x6e], reloc.WINMM.dll_PlaySoundA
je 0xfa4327
outsd dx, dword [esi]
push ebx
arpl word [edx + 0x65], si
outsb dx, byte gs:[esi]
add byte [ebx + 0x72], al
popal
je 0xfa4346
push edx
arpl word gs:[edx + edx*2 + 0x67], si
outsb dx, byte [esi]
add byte [eax + ecx*8 + 0x5e], bl
cmp eax, ecx
jl 0xfa42d5
adc al, 0x46
imul ebp, dword [esi + 0x64], 0x646e6957
outsd dx, dword [esi]
imul ebp, dword [esi + 0x64], reloc.WINMM.dll_PlaySoundA
inc ebx
outsd dx, dword [esi]
outsd dx, dword fs:[esi]
ja 0xfa433d
add byte [ebx + 0x6f], al
insd dword es:[edi], dx
bound ebp, qword [ecx + 0x6e]
push edx
outsb dx, byte [si]
add byte [edi + ebp*2 + 0x61], cl
inc ebx
jne 0xfa4381
jae 0xfa4380
outsd dx, dword [esi]
jb 0xfa4354
add byte [ebx + 0x72], al
popal
je 0xfa437f
push eax
popal
je 0xfa4392
jb 0xfa438f
inc edx
jb 0xfa4399
jae 0xfa438e
add byte [edi + 0x6553392e], al
xchg dword [esi], ebp
cmp dword [ebx + 0x65], edx
insb byte es:[edi], dx
arpl word gs:[edi + ecx*2 + 0x62], si
push 0x65
arpl word [eax + eax + 0x43], si
jb 0xfa439f
popal
je 0xfa43a2
inc esp
inc ebx
inc ecx
add byte [eax], bl
inc edi
je 0xfa4395
bound ebp, qword [edx + 0x65]
arpl word [ecx + eax*2], si
inc edi
je 0xfa43a1
outsd dx, dword [esi]
insb byte es:[edi], dx
jns 0xfa439b
inc esi
imul ebp, dword [esp + ebp*2 + 0x4d], reloc.WINMM.dll_PlaySoundA
jnp 0xfa43b1
int 0x5c
scasd eax, dword es:[edi]
mov dh, 0x43
jb 0xfa43cb
popal
je 0xfa43ce
inc edx
imul esi, dword [ebp + ebp*2 + 0x61], 0x74530070
popal
jb 0xfa43e9
inc esp
outsd dx, dword [esi]
arpl word [ecx], ax
inc ebx
jb 0xfa43e2
popal
je 0xfa43e5
push eax
push eax
outsb dx, byte gs:[esi]
add byte [ebx + 0x72], al
popal
je 0xfa43ef
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0xfa43f0
popal
je 0xfa43fa
bound ebp, qword [ebp + 0x42]
insb byte es:[edi], dx
inc edx
imul esi, dword [ebp + ebp*2 + 0x61], reloc.WINMM.dll_PlaySoundA
je 0xfa43f2
jo 0xfa439b
inc edi
je 0xfa43f2
je 0xfa4413
je 0xfa4407
je 0xfa4407
push 0x4d746c42
outsd dx, dword [esi]
add byte gs:[ecx + 0x43746553], ah
inc ebx
jne 0xfa4426
jae 0xfa4425
jb 0xfa4408
outsd dx, dword [esi]
jae 0xfa43bb
inc edi
je 0xfa4401
imul eax, dword [ebx + 0x6f], 0x6c
outsd dx, dword [esi]
jb 0xfa43c6
push ebx
je 0xfa442a
jb 0xfa443f
push eax
popal
add al, ah
add al, ah
inc ebx
jb 0xfa4439
popal
je 0xfa443c
inc esi
outsd dx, dword [esi]
outsb dx, byte [esi]
je 0xfa4425
outsb dx, byte [esi]
imul esi, dword fs:[edx + 0x65], 0x417463
je 0xfa4425
add byte [ebx], ah
pop edx
mov ch, 0xa4
and ebx, dword [edx - 0x4b]
movsb byte es:[edi], byte [esi]
xlatb
inc edi
je 0xfa4441
je 0xfa445f
outsd dx, dword [esi]
arpl word [ebx + 0x4f], bp
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax + 0x43], si
jb 0xfa4461
popal
je 0xfa4464
push eax
popal
insb byte es:[edi], dx
je 0xfa4479
add byte gs:[edx + 0x65], al
imul ebp, dword [bp + 0x50], 0x687461
inc edx
imul ebp, dword gs:[bp + 0x50], reloc.WINMM.dll_PlaySoundA
inc ebx
jb 0xfa447a
popal
je 0xfa447d
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0xfa447e
je 0xfa4488
bound ebp, qword [ebp + 0x44]
inc ebx
add byte [ebx + 0x72], al
popal
inc ebx
jb 0xfa448d
popal
je 0xfa4490
push edx
push edx
outsd dx, dword [esi]
jne 0xfa449d
push edx
arpl word gs:[edx + edx*2 + 0x67], si
outsb dx, byte [esi]
add byte [ecx], cl
test al, 0xcb
inc edi
je 0xfa4493
js 0xfa44b6
je 0xfa4486
inc ebx
outsd dx, dword [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0xfa4448
bound ebx, qword [ebp + 0x746547ec]
inc edx
imul ecx, dword [ebp + 0x6f], 0x64
add byte gs:[ebx + 0x72], al
popal
je 0xfa44c0
inc esp
dec ecx
inc edx
imul esi, dword [ebp + ebp*2 + 0x61], 0x83e80070
adc esi, dword [esi - 0x7b]
je 0xfa44ce
popal
jo 0xfa4464
call 0x867057ec
sub al, dh
push eax
popal
je 0xfa44d7
push esp
outsd dx, dword [esi]
push edx
imul ebp, dword gs:[bx + 0x6e], 0x6c654400
insb byte es:[edi], dx
insb byte es:[edi], dx
je 0xfa44e3
dec edi
dec edi
bound ebp, qword [edx + 0x65]
arpl word [eax + eax + 0x4d], si
outsd dx, dword [esi]
jbe 0xfa44ee
push esp
push esp
outsd dx, dword [esi]
inc ebp
js 0xfa448e
add byte [edi + 0x65], al
inc edi
je 0xfa44e5
je 0xfa44e5
jns 0xfa4507
jae 0xfa4509
je 0xfa44fb
insd dword es:[edi], dx
insd dword es:[edi], dx
push eax
popal
insb byte es:[edi], dx
je 0xfa4511
inc ebp
outsb dx, byte [esi]
je 0xfa4514
imul esp, dword [ebp + 0x73], reloc.WINMM.dll_PlaySoundA
arpl word gs:[ebx + eax*2 + 0x6c], si
imul esi, dword [eax + 0x52], 0x69006e67
int1
popal
add bl, dh
inc ecx
jo 0xfa452f
inc ebx
jb 0xfa4524
popal
je 0xfa4527
inc ebp
insb byte es:[edi], dx
insb byte es:[edi], dx
imul esi, dword [eax + 0x74], 0x67526369
outsb dx, byte [esi]
add byte [ebx + 0x72], al
popal
inc ebx
jb 0xfa4536
popal
je 0xfa4539
push eax
outsd dx, dword [esi]
insb byte es:[edi], dx
jns 0xfa4540
outsd dx, dword [esi]
outsb dx, byte [esi]
push edx
outsb dx, byte [si]
add byte [edi + 0x65], al
je 0xfa4526
insb byte es:[edi], dx
imul esi, dword [eax + 0x52], 0x43006e67
jb 0xfa4552
jo 0xfa4539
outsb dx, byte [si]
add byte [ebx + 0x72], al
popal
popal
je 0xfa4555
push ebx
outsd dx, dword [esi]
insb byte es:[edi], dx
imul esp, dword [edx + eax*2 + 0x72], 0x687375
inc ebx
jb 0xfa4563
popal
je 0xfa4566
inc esp
dec ecx
inc edx
push ebx
arpl word gs:[ecx + ebp*2 + 0x6f], si
je 0xfa4572
outsd dx, dword [esi]
outsb dx, byte [esi]
add byte [ebp + 0x78], dl
je 0xfa4560
jne 0xfa4587
inc ecx
add byte [ebx + 0x65], dl
je 0xfa456c
je 0xfa458d
je 0xfa4581
push 0x4d746c42
outsd dx, dword [esi]
add byte gs:[ebx + 0x65], dl
add byte [ebx + 0x65], dl
push ebx
je 0xfa456d
je 0xfa456d
imul eax, dword [ebx + 0x6f], 0x6c
outsd dx, dword [esi]
jb 0xfa4532
push ebx
je 0xfa4578
imul ecx, dword [ebp + 0x6f], 0x64
add byte gs:[edx + 0x43], ch
add byte gs:[edx + 0x43], ch
jb 0xfa45a5
popal
je 0xfa45a8
push edx
arpl word gs:[edx + edx*2 + 0x67], si
outsb dx, byte [esi]
dec ecx
outsb dx, byte [esi]
imul esi, dword fs:[edx + 0x65], 0x53007463
je 0xfa45ab
add byte [ebx + 0x65], dl
je 0xfa45ab
js 0xfa45ce
inc ebx
outsd dx, dword [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0xfa4560
push edx
jae 0xfa45d8
je 0xfa45d4
outsd dx, dword [esi]
jb 0xfa45cc
inc esp
inc esp
inc ebx
add byte [ebp + 0x434e2734], al
daa
dec esi
inc ebx
push 0x57646c69
push edi
imul ebp, dword [esi + 0x64], reloc.WINMM.dll_PlaySoundA
outsd dx, dword [esi]
ja 0xfa45c0
jb 0xfa45eb
insd dword es:[edi], dx
push eax
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], 0x53007845
je 0xfa45c8
js 0xfa4585
push ebx
arpl word [ecx + 0x6c], sp
popal
insb byte es:[edi], dx
push esi
imul esp, dword [ebp + 0x77], 0x74726f70
ja 0xfa45ff
outsd dx, dword [esi]
jb 0xfa4606
inc ebp
js 0xfa4609
inc ebp
js 0xfa4598
fnstcw word [eax]
sbb edx, dword [ebx + 0x65]
je 0xfa45f5
imul esp, dword [ebp + 0x77], reloc.WINMM.dll_PlaySoundA
inc ebp
je 0xfa45ec
js 0xfa461d
je 0xfa45ef
inc ebp
js 0xfa45ac
add byte [edx + 0x6d], dh
jb 0xfa461b
jl 0xfa45ff
dec edi
jae 0xfa461a
je 0xfa460d
imul esp, dword [ebp + 0x77], reloc.WINMM.dll_PlaySoundA
dec edi
jb 0xfa4628
inc ebp
inc ebp
js 0xfa45c4
push ebx
je 0xfa461f
imul ebp, dword [esi + 0x64], reloc.WINMM.dll_PlaySoundA
je 0xfa4616
ja 0xfa4613
js 0xfa4644
inc ebp
js 0xfa45d3
iretd
push esp
retf 0x5cad
cmc
inc ecx
push ebx
je 0xfa4635
imul ebp, dword [esi + 0x64], reloc.WINMM.dll_PlaySoundA
inc ebp
js 0xfa45e9
push ebx
insb byte es:[edi], dx
insb byte es:[edi], dx
arpl word gs:[eax + edx*2 + 0x61], si
push eax
popal
insb byte es:[edi], dx
je 0xfa4669
add cl, bl
inc edi
xlatb
mov dl, 0x41
clc
jp 0xfa4654
les edx, [ebx + 0x65]
je 0xfa465a
imul esp, dword [ebp + 0x77], reloc.WINMM.dll_PlaySoundA
ja 0xfa4678
outsd dx, dword [esi]
jb 0xfa467f
dec edi
jb 0xfa4675
inc ebp
inc ebp
js 0xfa4611
push ebx
arpl word [ecx + 0x6c], sp
popal
insb byte es:[edi], dx
push edi
push edi
imul ebp, dword [esi + 0x64], reloc.WINMM.dll_PlaySoundA
je 0xfa4665
outsd dx, dword [esi]
ja 0xfa4662
js 0xfa4693
inc ebp
js 0xfa4622
inc edi
je 0xfa4669
insb byte es:[edi], dx
imul esi, dword [eax + 0x42], 0x5000786f
jo 0xfa466c
outsd dx, dword [esi]
js 0xfa462d
push eax
je 0xfa4686
imul esi, dword [ebx + 0x69], reloc.WINMM.dll_PlaySoundA
push ebx
je 0xfa4688
add byte gs:[ebx + 0x65], dl
je 0xfa4688
popal
jo 0xfa468b
outsd dx, dword [esi]
add byte gs:[ebp + 0x78], al
arpl word [ebp + esi*2 + 0x64], bp
inc ebx
insb byte es:[edi], dx
imul esi, dword [eax + 0x52], 0x746365
push edx
arpl word gs:[esi + edx*2 + 0x69], si
arpl word [esi + edx*2 + 0x69], si
jae 0xfa46c3
bound ebp, qword [ebp]
ja 0xfa46b3
je 0xfa46b3
push eax
outsd dx, dword [esi]
insb byte es:[edi], dx
jns 0xfa46ad
imul ebp, dword [esp + ebp*2 + 0x4d], reloc.WINMM.dll_PlaySoundA
inc edi
je 0xfa46c9
insb byte es:[edi], dx
dec ebp
outsd dx, dword [esi]
add byte gs:[edi + 0x65], al
je 0xfa46c9
imul esp, dword [ebp + 0x77], reloc.WINMM.dll_PlaySoundA
ja 0xfa46e7
outsd dx, dword [esi]
jb 0xfa46ee
inc ebp
js 0xfa46f1
inc ebp
js 0xfa4680
add byte [esi - 0x57], bl
enter 0xffffffffffff826b, 0x45
pop esi
test eax, 0x45826bc8
js 0xfa46fc
push ebx
insb byte es:[edi], dx
arpl word gs:[ebx + eax*2 + 0x6c], si
imul esi, dword [eax + 0x52], 0x47006e67
je 0xfa46de
outsb dx, byte [si]
add byte [edi + 0x65], al
je 0xfa46de
dec ecx
inc edx
imul esi, dword [ebx + esi*2], reloc.WINMM.dll_PlaySoundA
imul edi, dword [edx + 0x65], 0x656c6150
je 0xfa4721
add byte gs:[edi + 0x65], al
je 0xfa4709
imul esp, dword [ebp + 0x77], reloc.WINMM.dll_PlaySoundA
dec edi
jb 0xfa4724
inc ebp
js 0xfa46c0
cmp eax, 0x11e69f0c
out 0x11, al
inc edi
je 0xfa4720
imul ebp, dword [esi + 0x64], reloc.WINMM.dll_PlaySoundA
je 0xfa4717
js 0xfa46d4
inc edi
je 0xfa472f
imul ebp, dword [esi + 0x64], reloc.WINMM.dll_PlaySoundA
inc ebp
jb 0xfa4747
inc ebp
js 0xfa46e3
push edx
arpl word gs:[ecx + 0x6e], si
popal
outsb dx, byte [esi]
insb byte es:[di], dx
add byte gs:[eax + 0x54258a13], dl
adc ecx, dword [edx + reloc.WINMM.dll_PlaySoundA]
je 0xfa474a
push esp
inc edi
je 0xfa474a
js 0xfa476d
dec ebp
je 0xfa476f
jb 0xfa4767
imul esp, dword [ebx + 0x73], reloc.WINMM.dll_PlaySoundA
arpl word [ebx + 0x41], si
add byte [edi + 0x65], al
je 0xfa4749
jne 0xfa477a
jb 0xfa476f
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0xfa475c
bound ebp, qword [edx + 0x65]
arpl word [eax + eax - 0x24], si
dec ebx
fstp xword [esi + 0x796ecc4d]
inc ebp
js 0xfa4792
dec ebp
int3
push esp
js 0xfa4796
js 0xfa4796
je 0xfa4772
dec edi
jne 0xfa4799
je 0xfa4767
inc ecx
add byte [edi + 0x65], al
je 0xfa477f
js 0xfa47a2
inc ebp
js 0xfa47a5
outsb dx, byte gs:[esi]
je 0xfa4785
outsd dx, dword [esi]
imul ebp, dword [esi + 0x74], 0x413233
push edx
outsd dx, dword [esi]
jne 0xfa47af
push edx
arpl word gs:[eax + eax + 0x58], si
pop eax
mov ebx, 0x44746553
push ebx
je 0xfa4791
dec ecx
inc edx
imul esi, dword [ebx + esi*2 + 0x54], 0x7665446f
imul esp, dword [ebx + 0x65], 0x4e495700
dec ecx
dec esi
push ebx
push eax
dec edi
dec edi
dec esp
inc esp
push edx
push esi
add byte [esi + 0x10e18610], cl
xchg edi, eax
or eax, 0x7453ef9c
jb 0xfa47da
pushfd
out dx, eax
push ebx
je 0xfa47e6
je 0xfa47da
je 0xfa47da
push 0x746c42
je 0xfa477c
mul cl
and byte [ebx - 0x66], ah
cmc
inc edi
je 0xfa47ca
arpl word [edx + 0x746547f5], bx
inc esp
jbe 0xfa47f2
arpl word [ebp + 0x43], sp
popal
jo 0xfa4802
add byte [edi + 0x70], cl
jo 0xfa47f8
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
push eax
jb 0xfa4800
imul ebp, dword [esi + 0x74], reloc.WINMM.dll_PlaySoundA
outsd dx, dword [esi]
insb byte es:[edi], dx
outsb dx, byte [esi]
je 0xfa47ff
jb 0xfa47dd
jb 0xfa47dd
add byte [edi + 0x6c], ch
xor esi, dword gs:[edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [ebx + 0x63], dl
jb 0xfa4810
outsb dx, byte gs:[esi]
push esp
outsd dx, dword [esi]
inc ebx
insb byte es:[edi], dx
imul esp, dword [ebp + 0x6e], 0x65470074
je 0xfa4800
imul ebp, dword [ebp + 0x54], reloc.WINMM.dll_PlaySoundA
inc ecx
add ah, ah
hlt
pop ss
jle 0xfa4830
outsd dx, dword [esi]
insd dword es:[edi], dx
insb byte es:[edi], dx
xor esi, dword [bp + si]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [ebx + 0x68], al
outsd dx, dword [esi]
outsd dx, dword [esi]
push 0x65736f6f
jae 0xfa4844
inc ebx
outsd dx, dword [esi]
insb byte es:[edi], dx
outsd dx, dword [esi]
jb 0xfa4826
add byte [ecx - 0x18], cl
inc esp
outsd dx, dword [esi]
arpl word [ebp + 0x6d], si
dec ecx
call 0x765db730
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0xfa4841
jb 0xfa4862
outsd dx, dword [esi]
jo 0xfa485a
jb 0xfa486b
imul esp, dword [ebp + 0x73], reloc.WINMM.dll_PlaySoundA
jae 0xfa483c
add byte [edi + 0x65], al
je 0xfa4853
push ebx
popal
jbe 0xfa4868
inc esi
inc esi
imul ebp, dword [ebp + 0x4e], reloc.WINMM.dll_PlaySoundA
add byte [eax + 0x53], dl
inc ecx
push eax
dec ecx
inc esp
dec esp
dec esp
add byte [ebx + 0x6c], al
outsd dx, dword [esi]
jae 0xfa4881
push eax
jb 0xfa4888
outsb dx, byte [esi]
je 0xfa4887
jb 0xfa4824
inc ecx
inc esp
push esi
inc ecx
push eax
dec ecx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [edx], cl
invalid
je 0xfa488d
jo 0xfa48a5
outsb dx, byte [esi]
inc esi
imul ebp, dword [ebp + 0x4e], 0x41656d61
dec esi
popal
insd dword es:[edi], dx
inc ecx
add byte [edx + 0x65], dl
inc esp
insb byte es:[edi], dx
je 0xfa48b9
push esi
push esi
popal
insb byte es:[edi], dx
jne 0xfa48be
inc ecx
add byte [edi], bh
push es
mov cl, 0xb0
mov bl, 0xaa
push edx
inc esp
insb byte es:[edi], dx
je 0xfa48cf
je 0xfa48cf
dec ebx
jns 0xfa48af
add byte [edx + 0x65], dl
push ebx
je 0xfa48cc
popal
insb byte es:[edi], dx
jne 0xfa48df
inc ebp
js 0xfa48be
add bh, al
inc ebp
aad 0xbc
dec edi
lodsb al, byte [esi]
je 0xfa48d8
mov esp, 0x5274ac4f
inc ebx
inc ebx
inc ebx
jb 0xfa48f0
popal
je 0xfa48f3
dec ebx
dec ebx
jns 0xfa48d3
add byte [ebp + 0x53], cl
push esi
inc ebx
push edx
push esp
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [edx + 0x65], dl
push ecx
jne 0xfa4909
jb 0xfa491f
jns 0xfa48fd
push esi
popal
insb byte es:[edi], dx
jne 0xfa4910
inc ecx
add byte [edx + 0x65], dl
dec edi
jo 0xfa4918
outsb dx, byte [esi]
dec ebx
jns 0xfa48fd
js 0xfa48fb
inc ecx
add byte [edx + 0x65], dl
inc ebx
inc ebx
insb byte es:[edi], dx
outsd dx, dword [esi]
jae 0xfa4928
dec ebx
jns 0xfa48c7
inc edi
je 0xfa4918
jae 0xfa4941
jae 0xfa4941
popal
push eax
outsd dx, dword [esi]
jae 0xfa48d5
push ebx
push 0x5f6c6c65
insb byte es:[edi], dx
insb byte es:[edi], dx
pop edi
dec esi
outsd dx, dword [esi]
je 0xfa4948
jns 0xfa492b
arpl word [edi + 0x6e], bp
inc ecx
add byte [edi - 0x72], ah
sbb dword [eax + 0x5b], edi
mov dl, 0x53
push 0x456c6c65
insb byte es:[edi], dx
insb byte es:[edi], dx
inc ebp
js 0xfa495a
arpl word [ebp + 0x74], si
inc ecx
add byte [ebx + 0x48], dl
push ebx
dec eax
inc edi
je 0xfa4954
jo 0xfa4968
arpl word [ecx + 0x61], bp
insb byte es:[edi], dx
inc esi
outsd dx, dword [esi]
insb byte es:[edi], dx
jb 0xfa495e
popal
je 0xfa4979
push 0x2dae0041
mov ebp, 0xbcd737c4
push ebx
dec eax
inc ebp
dec esp
inc ecx
add byte [esi + 0x37c4bd2d], ch
xlatb
mov esp, 0x4c454853
dec esp
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [edi + 0x6c], cl
push ebp
outsb dx, byte [esi]
imul ebp, dword [esi + 0x69], reloc.WINMM.dll_PlaySoundA
imul edi, dword [edx + 0x65], 0x81168f00
inc eax
add edi, dword [edx + reloc.WINMM.dll_PlaySoundA]
outsb dx, byte [esi]
imul esi, dword [ecx + ebp*2 + 0x61], reloc.WINMM.dll_PlaySoundA
add byte [ebx + 0x4c], al
add byte gs:[ebx + 0x4c], al
push ebx
dec ecx
inc esp
inc esi
jb 0xfa49c1
insd dword es:[edi], dx
push ebx
je 0xfa49c8
imul ebp, dword [esi + 0x67], reloc.WINMM.dll_PlaySoundA
xchg ebp, eax
add al, 0xb7
sahf
push edx
inc ebx
jb 0xfa49c9
popal
je 0xfa49cc
dec ebx
jns 0xfa49b0
js 0xfa49ae
add byte [edi + 0x54], bl
jb 0xfa49d3
arpl word [ebx + 0x4d], bp
outsd dx, dword [esi]
jne 0xfa49eb
inc ebp
inc ebp
jbe 0xfa49e1
outsb dx, byte [esi]
je 0xfa497f
dec ecx
insd dword es:[edi], dx
popal
dec esp
imul esi, dword [ebx + 0x74], 0x7365445f
je 0xfa4a00
outsd dx, dword [esi]
jns 0xfa4991
jmp 0x503df49e
add byte [eax], al
add byte [eax], al
jmp 0xfa4ac3
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [ecx + 0x6e], cl
je 0xfa4a2e
jb 0xfa4a39
jb 0xfa4a39
je 0xfa4a20
je 0xfa4a20
popal
inc esi
imul ebp, dword [ebp], reloc.WINMM.dll_PlaySoundA
insb byte es:[edi], dx
add byte gs:[ebp + 0x4c], bh
fbld tbyte [esi]
push ecx
dec eax
je 0xfa4a52
jo 0xfa4a31
jne 0xfa4a47
jb 0xfa4a5d
jb 0xfa4a5d
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
inc ecx
add byte [ecx + 0x6e], cl
outsb dx, byte [esi]
je 0xfa4a53
jb 0xfa4a5e
je 0xfa4a36
outsd dx, dword [esi]
outsb dx, byte [esi]
outsb dx, byte [esi]
arpl word gs:[ecx + eax*2], si
dec ecx
outsb dx, byte [esi]
je 0xfa4a64
jb 0xfa4a6f
outsb dx, byte [esi]
je 0xfa4a57
je 0xfa4a56
jo 0xfa4a7d
imul ebp, dword [edi + 0x6e], reloc.WINMM.dll_PlaySoundA
je 0xfa4a82
outsb dx, byte [esi]
je 0xfa4a88
jb 0xfa4a93
je 0xfa4a77
jo 0xfa4a8f
outsb dx, byte [esi]
inc ecx
add ah, dl
push edx
shl byte [edi - 0x35ac44ae], 0x65
push edx
mov ebx, 0x9465ca53
xchg esp, eax
push edx
push ecx
push ecx
jne 0xfa4aa2
jb 0xfa4ab8
push esi
popal
insb byte es:[edi], dx
jne 0xfa4aa9
inc ebp
js 0xfa4a88
add byte [eax + 0x74], cl
je 0xfa4abc
dec edi
jo 0xfa4ab4
outsb dx, byte [esi]
push edx
jno 0xfa4ac9
jno 0xfa4ac9
jne 0xfa4aba
jae 0xfa4acb
jae 0xfa4acb
je 0xfa4a99
inc ecx
add byte [edi], al
scasb al, byte es:[edi]
mov ecx, 0x6e49fb98
sti
dec ecx
outsb dx, byte [esi]
je 0xfa4ac7
jb 0xfa4ad2
je 0xfa4aaa
insb byte es:[edi], dx
outsd dx, dword [esi]
jae 0xfa4ad0
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte gs:[ecx + 0x50], cl
dec eax
dec esp
push eax
inc ecx
push eax
dec ecx
inc esp
dec esp
dec esp
add dl, dl
dec ebp
fsubr qword [edi]
inc esp
jae 0xfa4afb
jb 0xfa4af8
outsd dx, dword [esi]
jns 0xfa4acc
arpl word [ebx + 0x65], sp
insb byte es:[edi], dx
jb 0xfa4af3
je 0xfa4b03
outsd dx, dword [esi]
jb entry0
popal
bound ebp, qword [ebp]
add byte gs:[eax + 0x2d], bl
adc dword [esi], esi
cli
add byte [ebx + 0x3604ebd8], cl
pop eax
sub eax, 0xfa3611
mov ebx, eax
jmp 0xfa4aa9
fsubr st(3)
add al, 0x36
and dword [eax - 0x5d], esp
add eax, 0xef38f8
jmp 0xfa4b34
clc
cmp bh, ch
add cl, ch
add dword [eax], reloc.WINMM.dll_PlaySoundA
pop eax
into
test eax, 0xb533b858
and eax, 0x2453bf4c
push edi
mov esi, 0x24048189
mov ah, 4
mov eax, 0x4c25b533
mov ch, 0x25
dec esp
mov edi, 0xbe572453
mov dword [ecx + reloc.WINMM.dll_PlaySoundA], eax
add dword [esp], reloc.WINMM.dll_PlaySoundA
add al, 0
add byte [eax], al
add al, ch
call fcn.00ef3b95
jmp 0xfa360c
invalid
invalid
cmp bl, ch
invalid
outsb dx, byte [esi]
imul ebp, dword [bp + 0x65], reloc.WINMM.dll_PlaySoundA
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
and byte [esi + 0x32], dh
and byte [ebx + 0x68], dl
imul esp, dword [ebp + 0x6c], reloc.WINMM.dll_PlaySoundA
jbe 0xfa4b36
xor ch, byte [esi]
xor ebp, dword [esi]
xor ebp, dword cs:[esi]
aaa
xor byte cs:[eax], al
js 0xfa4b2b