Function at 0x413bd0
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Packed with generic packer
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x978
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00401c10
mov dword [esp + 0x16c], eax
mov dword [esp + 0x338], 0xb4cb69a0
lea eax, [esp + 0x338]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x338]
mov ecx, eax
sub ecx, 0x834f3f44
je 0x416cd6
jmp 0x413c1e
mov ecx, eax
sub ecx, 0x83bc5bbb
je 0x415200
jmp 0x413c2e
mov ecx, eax
sub ecx, 0x84e75767
je 0x4173bf
jmp 0x413c3e
mov ecx, eax
sub ecx, 0x86c8ae58
je 0x418349
jmp 0x413c4e
mov ecx, eax
sub ecx, 0x86e6c3d8
je 0x41508c
jmp 0x413c5e
mov ecx, eax
sub ecx, 0x87d8820c
je 0x4163a2
jmp 0x413c6e
mov ecx, eax
sub ecx, 0x87e6cae7
je 0x4163d1
jmp 0x413c7e
mov ecx, eax
sub ecx, 0x884b5747
je 0x415399
jmp 0x413c8e
mov ecx, eax
sub ecx, 0x899ffb79
je 0x414caa
jmp 0x413c9e
mov ecx, eax
sub ecx, 0x89e3e14b
je 0x41702d
jmp 0x413cae
mov ecx, eax
sub ecx, 0x8c182cc1
je 0x416860
jmp 0x413cbe
mov ecx, eax
sub ecx, 0x8da120bc
je 0x41587e
jmp 0x413cce
mov ecx, eax
sub ecx, 0x8ddd97f6
je 0x418087
jmp 0x413cde
mov ecx, eax
sub ecx, 0x8fb7f55e
je 0x418070
jmp 0x413cee
mov ecx, eax
sub ecx, 0x901cc45c
je 0x41723a
jmp 0x413cfe
mov ecx, eax
sub ecx, 0x9032082a
je 0x41536c
jmp 0x413d0e
mov ecx, eax
sub ecx, 0x920d3ba3
je 0x417ba8
jmp 0x413d1e
mov ecx, eax
sub ecx, 0x94630fcb
je 0x415482
jmp 0x413d2e
mov ecx, eax
sub ecx, 0x955a7d9f
je 0x416c94
jmp 0x413d3e
mov ecx, eax
sub ecx, 0x95688f2d
je 0x41593d
jmp 0x413d4e
mov ecx, eax
sub ecx, 0x956ae8dc
je 0x415d97
jmp 0x413d5e
mov ecx, eax
sub ecx, 0x9715a968
je 0x415b90
jmp 0x413d6e
mov ecx, eax
sub ecx, 0x97385cc5
je 0x41716d
jmp 0x413d7e
mov ecx, eax
sub ecx, 0x98c4758e
je 0x418518
jmp 0x413d8e
mov ecx, eax
sub ecx, 0x9a982270
je 0x4183d4
jmp 0x413d9e
mov ecx, eax
sub ecx, 0x9b27f2e8
je 0x415a3e
jmp 0x413dae
mov ecx, eax
sub ecx, 0x9c675a61
je 0x41672a
jmp 0x413dbe
mov ecx, eax
sub ecx, 0x9cf76b1a
je 0x414bea
jmp 0x413dce
mov ecx, eax
sub ecx, 0x9d585c9e
je 0x4178e5
jmp 0x413dde
mov ecx, eax
sub ecx, 0x9dcc834e
je 0x418327
jmp 0x413dee
mov ecx, eax
sub ecx, 0x9ec2e3dd
je 0x414c8b
jmp 0x413dfe
mov ecx, eax
sub ecx, 0x9f95dbbd
je 0x41874d
jmp 0x413e0e
mov ecx, eax
sub ecx, 0xa332fa7a
je 0x41668b
jmp 0x413e1e
mov ecx, eax
sub ecx, 0xa3627225
je 0x4150ce
jmp 0x413e2e
mov ecx, eax
sub ecx, 0xa3df18e8
je 0x417f94
jmp 0x413e3e
mov ecx, eax
sub ecx, 0xa6bdd01e
je 0x415fe7
jmp 0x413e4e
mov ecx, eax
sub ecx, 0xa77bef05
je 0x417257
jmp 0x413e5e
mov ecx, eax
sub ecx, 0xa9c24dc0
je 0x414ce6
jmp 0x413e6e
mov ecx, eax
sub ecx, 0xa9c60af8
je 0x415a0f
jmp 0x413e7e
mov ecx, eax
sub ecx, 0xaa61dbb6
je 0x415289
jmp 0x413e8e
mov ecx, eax
sub ecx, 0xabbf35b1
je 0x416110
jmp 0x413e9e
mov ecx, eax
sub ecx, 0xad032319
je 0x4178d6
jmp 0x413eae
mov ecx, eax
sub ecx, 0xae387be7
je 0x414cd7
jmp 0x413ebe
mov ecx, eax
sub ecx, 0xaf1daa6b
je 0x4159db
jmp 0x413ece
mov ecx, eax
sub ecx, 0xaf4e991c
je 0x417114
jmp 0x413ede
mov ecx, eax
sub ecx, 0xb138fec4
je 0x416183
jmp 0x413eee
mov ecx, eax
sub ecx, 0xb4cb69a0
je 0x4149a0
jmp 0x413efe
mov ecx, eax
sub ecx, 0xb8cc42e5
je 0x418540
jmp 0x413f0e
mov ecx, eax
sub ecx, 0xb95667fa
je 0x415fba
jmp 0x413f1e
mov ecx, eax
sub ecx, 0xba3bd7ac
je 0x41669a
jmp 0x413f2e
mov ecx, eax
sub ecx, 0xba7e3ea5
je 0x415330
jmp 0x413f3e
mov ecx, eax
sub ecx, 0xbc195528
je 0x41763c
jmp 0x413f4e
mov ecx, eax
sub ecx, 0xbd5a41e0
je 0x4179bb
jmp 0x413f5e
mov ecx, eax
sub ecx, 0xbe14687f
je 0x414cc8
jmp 0x413f6e
mov ecx, eax
sub ecx, 0xc051d9d1
je 0x416ff1
jmp 0x413f7e
mov ecx, eax
sub ecx, 0xc05d4b63
je 0x414b1c
jmp 0x413f8e
mov ecx, eax
sub ecx, 0xc2985c73
je 0x417a7a
jmp 0x413f9e
mov ecx, eax
sub ecx, 0xc4078290
je 0x41583e
jmp 0x413fae
mov ecx, eax
sub ecx, 0xc6e07e56
je 0x417970
jmp 0x413fbe
mov ecx, eax
sub ecx, 0xc87ec56b
je 0x415421
jmp 0x413fce
mov ecx, eax
sub ecx, 0xc982e98c
je 0x41522e
jmp 0x413fde
mov ecx, eax
sub ecx, 0xc9d9c9ac
je 0x415d09
jmp 0x413fee
mov ecx, eax
sub ecx, 0xca71d639
je 0x415ede
jmp 0x413ffe
mov ecx, eax
sub ecx, 0xcba6497a
je 0x4179ca
jmp 0x41400e
mov ecx, eax
sub ecx, 0xcbbfceba
je 0x416d16
mov eax, 0xf95e5115
cmp dword [esp + 0x16c], 0
je 0x4149b4
mov eax, 0x54aac46d
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x41876b
mov al, byte [esp + 0x80]
mov byte [esp + 0x210], al
mov byte [esp + 0x40], 0x12
mov byte [esp + 0x41], 0xed
mov byte [esp + 0x42], 0x7e
mov eax, 3
mov byte [esp + eax + 0x40], 0
add eax, 1
cmp eax, 4
jne 0x414b3e
xor eax, eax
cmp eax, 4
jae 0x414b91
movzx edx, byte [esp + eax + 0x40]
mov ecx, eax
add ecx, 0xea
mov edi, edx
xor edi, 0xffffffff
mov esi, 0x15
sub esi, eax
and esi, edi
mov ebx, 0x15
sub ebx, eax
mov edi, edx
xor edi, 0xffffffff
and ebx, edi
or ebx, esi
add ebx, 1
and ecx, edx
add ebx, ecx
mov cl, 0x6e
sub cl, bl
mov byte [esp + eax + 0x40], cl
add eax, 1
jmp 0x414b4d
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0x40]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 3
call fcn.00401f30
cmp eax, 0
setne al
and al, 1
mov byte [esp + 0x8c], al
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x22a6bc6c
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x3ab70ae5
jmp 0x41876b
mov eax, 0xa9c24dc0
test byte [esp + 0x8d], 1
jne 0x414c9f
mov eax, 0xdf5d25df
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x28c39ba9
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xae387be7
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xa9c24dc0
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x6a24d00b
jmp 0x41876b
cmp dword [esp + 0xc8], 0
setne al
and al, 1
mov byte [esp + 0x8f], al
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x357eac42
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xc93b74b
jmp 0x41876b
mov eax, 0x785dca8d
test byte [esp + 0x90], 1
jne 0x415214
mov eax, 0x5dd6257b
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x41876b
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
call fcn.00408740
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xf9d9468b
jmp 0x41876b
mov eax, dword [esp + 0x6c]
mov ecx, 2
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x4152a3
mov ecx, eax
mov dword [esp], ecx
call fcn.00408730
mov dword [esp + 0xe8], eax
mov eax, dword [0x44ce60]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0xe8]
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0xe4]
xor ebx, ebx
lea ebx, [esp + 0x6c]
mov dword [esp], 0
mov dword [esp + 4], esi
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ebx
call eax
sub esp, 0x18
cmp eax, 0
setge al
and al, 1
mov byte [esp + 0x91], al
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x299b7434
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x456227f4
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x747c82fc
jmp 0x41876b
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
call fcn.00408740
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xd99d182b
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x45455d5d
jmp 0x41876b
mov eax, dword [esp + 0x340]
mov ecx, dword [esp + 0x344]
mov dword [esp + 0x3d4], eax
mov dword [esp + 0x3d8], ecx
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x1d250cd4
mov eax, dword [esp + 0x3d8]
mov ecx, dword [esp + 0x3d4]
mov dword [esp + 0x34c], eax
mov dword [esp + 0x348], ecx
jmp 0x41876b
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.0043a760
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x2f1cb4a2
mov dword [esp + 0x148], 4
mov dword [esp + 0x144], 0
jmp 0x41876b
mov eax, dword [esp + 0xb4]
add eax, 4
mov ecx, 2
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x41589e
mov ecx, eax
mov dword [esp], ecx
call fcn.00408730
mov dword [esp + 0x58], eax
mov eax, dword [0x44ce60]
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0x58]
mov esi, dword [esp + 0x178]
xor edi, edi
lea edi, [esp + 0x44c]
lea ebx, [esp + 0xb4]
mov dword [esp], 0
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ebx
call eax
sub esp, 0x18
cmp eax, 0
setge al
and al, 1
mov byte [esp + 0x92], al
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x75d1d678
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xa15a1f3
jmp 0x41876b
mov eax, dword [esp + 0x3e8]
mov dword [esp], eax
call fcn.0043a760
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x2f1cb4a2
mov eax, dword [esp + 0x58]
mov dword [esp + 0x148], 4
mov dword [esp + 0x144], eax
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x32abdd63
jmp 0x41876b
mov eax, 0xd7de2894
test byte [esp + 0x93], 1
jne 0x415a52
mov eax, 0x9715a968
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x41876b
mov eax, 0xff29f21d
cmp dword [esp + 0x48], 1
je 0x415ba1
mov eax, 0x3ea100c1
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x41876b
mov al, byte [esp + 0x64]
mov byte [esp + 0x254], al
mov byte [esp + 0xb8], 0x5e
mov byte [esp + 0xb9], 0x21
mov byte [esp + 0xba], 0x92
mov byte [esp + 0xbb], 0x23
mov byte [esp + 0xbc], 0x97
mov byte [esp + 0xbd], 0x25
mov byte [esp + 0xbe], 0x57
mov byte [esp + 0xbf], 0x27
mov byte [esp + 0xc0], 0x38
mov byte [esp + 0xc1], 0x39
mov eax, 0xa
mov byte [esp + eax + 0xb8], 0
add eax, 1
cmp eax, 0xf
jne 0x415d69
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x6dbe1ed1
jmp 0x41876b
xor eax, eax
jmp 0x415d9b
cmp eax, 0xf
jae 0x415dfc
movzx esi, byte [esp + eax + 0xb8]
mov edx, 0x78526af7
sub edx, eax
or edx, esi
mov ecx, 0xf7
sub ecx, eax
mov edi, 0xf7
sub edi, eax
or ecx, edi
and ecx, esi
xor edx, 0xffffffff
or ecx, edx
mov esi, ecx
shl esi, 1
and esi, 0xae
mov edx, ecx
xor edx, 0x599c16d7
mov edi, edx
add edi, esi
shl edx, 1
and edx, 2
and ecx, 1
and edi, 0xfe
or ecx, edi
add ecx, edx
mov byte [esp + eax + 0xb8], cl
add eax, 1
jmp 0x415d9b
mov eax, dword [esp + 0x58]
lea ecx, [esp + 0xb8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00418ba0
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xe5e26ba5
jmp 0x41876b
mov eax, dword [esp + 0x358]
mov dword [esp + 0x3ec], eax
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x105bfcef
mov eax, dword [esp + 0x3ec]
mov dword [esp + 0x150], 0
mov dword [esp + 0x14c], eax
jmp 0x41876b
mov eax, 0xa6bdd01e
test byte [esp + 0x95], 1
jne 0x415fce
mov eax, 0xabbf35b1
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
mov eax, dword [esp + 0x394]
mov dword [esp + 0x35c], eax
jmp 0x41876b
mov eax, dword [esp + 0x1ac]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x194]
xor esi, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.00440290
mov dword [esp + 0x3f0], eax
mov esi, dword [esp + 0x194]
mov al, byte [esp + 0x1fc]
mov byte [esp + 0x298], al
mov byte [esp + 0x200], 0x45
mov byte [esp + 0x201], 0x46
mov byte [esp + 0x202], 0x47
mov byte [esp + 0x203], 0x40
mov eax, 4
mov byte [esp + eax + 0x200], 0
add eax, 1
cmp eax, 5
jne 0x416054
xor eax, eax
cmp eax, 5
jae 0x416088
mov cl, byte [esp + eax + 0x200]
mov dl, al
add dl, 0xf1
xor dl, cl
add dl, 0x4b
mov byte [esp + eax + 0x200], dl
add eax, 1
jmp 0x416066
mov edi, dword [esp + 0x200]
xor ebx, ebx
cmp ebx, dword [0x44ce64]
jb 0x41609b
jmp 0x4160f3
mov eax, dword [0x44ce68]
cmp dword [eax + ebx*8], 0x1b6183f2
sete cl
mov byte [esp + 0x82], cl
test cl, 1
jne 0x4160b8
jmp 0x4160e2
mov eax, dword [eax + ebx*8 + 4]
cmp eax, edi
jne 0x4160c2
jmp 0x4160e2
mov ecx, dword [0x44ce6c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [esp + 0xc], esi
call fcn.0043d480
jmp 0x4160e2
test byte [esp + 0x82], 1
je 0x4160ee
jmp 0x4160f3
add ebx, 1
jmp 0x416091
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xabbf35b1
mov eax, dword [esp + 0x3f0]
mov dword [esp + 0x35c], eax
jmp 0x41876b
mov eax, dword [esp + 0x35c]
mov dword [esp + 0x3f4], eax
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x5abc44fe
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x76b2c12a
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x378], 4
mov dword [esp + 0x374], ecx
mov dword [esp + 0x370], eax
mov dword [esp + 0x36c], 0
jmp 0x41876b
mov eax, dword [esp + 0xec]
mov dword [esp], eax
call fcn.00418770
mov ecx, eax
and ecx, 1
or eax, 1
add ecx, eax
mov dword [esp + 0x3fc], ecx
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x87e6cae7
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x4f5df500
mov eax, dword [esp + 0x3fc]
mov dword [esp + 0x360], eax
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xba3bd7ac
jmp 0x41876b
mov eax, 0x6aa4bdd2
test byte [esp + 0x56], 1
jne 0x4166ab
mov eax, 0x9c675a61
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
mov eax, dword [esp + 0x17c]
mov dword [esp + 0x368], eax
jmp 0x41876b
mov eax, dword [esp + 0x368]
mov dword [esp + 0x3a4], eax
mov eax, 0x4c994a75
test byte [esp + 0x57], 1
jne 0x416749
mov eax, 0x73ea6ec0
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x41876b
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00418bf0
xor eax, 0xffffffff
sub eax, 0xffffffff
mov ecx, 0x1d
sub ecx, eax
add ecx, 1
mov edx, 2
mov eax, ecx
mul edx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x416894
mov ecx, eax
mov dword [esp], ecx
call fcn.00408730
mov dword [esp + 0x3a8], eax
mov al, byte [esp + 0x18c]
mov byte [esp + 0x26c], al
mov byte [esp + 0x9c], 0x82
mov byte [esp + 0x9d], 0x61
mov byte [esp + 0x9e], 0x62
mov byte [esp + 0x9f], 0x63
xor eax, eax
cmp eax, 4
jae 0x416907
mov cl, byte [esp + eax + 0x9c]
mov dl, al
add dl, 0x18
xor dl, cl
add dl, 0x88
mov byte [esp + eax + 0x9c], dl
mov ecx, eax
shl ecx, 1
and ecx, 2
mov edx, eax
shl edx, 1
and edx, 2
add eax, 1
sub eax, edx
add eax, ecx
jmp 0x4168d3
mov al, byte [esp + 0x188]
mov byte [esp + 0x270], al
mov byte [esp + 0x2b8], 0x58
mov byte [esp + 0x2b9], 0xc9
mov byte [esp + 0x2ba], 0x5d
mov byte [esp + 0x2bb], 0xcf
mov byte [esp + 0x2bc], 0x47
mov byte [esp + 0x2bd], 0xcd
mov byte [esp + 0x2be], 0x67
mov byte [esp + 0x2bf], 0xc3
mov byte [esp + 0x2c0], 0x56
mov byte [esp + 0x2c1], 0xc1
mov byte [esp + 0x2c2], 0x51
mov byte [esp + 0x2c3], 0xc7
mov byte [esp + 0x2c4], 0x5c
mov byte [esp + 0x2c5], 0xc5
mov byte [esp + 0x2c6], 0x1f
mov byte [esp + 0x2c7], 0xbb
mov byte [esp + 0x2c8], 0x24
mov byte [esp + 0x2c9], 0xb9
mov byte [esp + 0x2ca], 0x22
mov byte [esp + 0x2cb], 0xbf
mov byte [esp + 0x2cc], 0x5c
mov byte [esp + 0x2cd], 0xbd
mov byte [esp + 0x2ce], 0x6f
mov byte [esp + 0x2cf], 0xb3
mov byte [esp + 0x2d0], 0x15
mov byte [esp + 0x2d1], 0xb1
mov byte [esp + 0x2d2], 0x3e
mov byte [esp + 0x2d3], 0xb7
mov byte [esp + 0x2d4], 0x11
mov byte [esp + 0x2d5], 0xb5
mov byte [esp + 0x2d6], 0xd
mov byte [esp + 0x2d7], 0xab
mov byte [esp + 0x2d8], 0x48
mov byte [esp + 0x2d9], 0xa9
mov byte [esp + 0x2da], 8
mov byte [esp + 0x2db], 0xaf
mov byte [esp + 0x2dc], 0x25
mov byte [esp + 0x2dd], 0xad
mov byte [esp + 0x2de], 0x32
mov byte [esp + 0x2df], 0xa3
mov byte [esp + 0x2e0], 1
mov byte [esp + 0x2e1], 0xa1
mov byte [esp + 0x2e2], 0x31
mov byte [esp + 0x2e3], 0xa7
mov byte [esp + 0x2e4], 0x33
mov byte [esp + 0x2e5], 0xa5
mov byte [esp + 0x2e6], 0x7a
mov byte [esp + 0x2e7], 0x9b
mov byte [esp + 0x2e8], 0x45
mov byte [esp + 0x2e9], 0x99
mov byte [esp + 0x2ea], 4
mov byte [esp + 0x2eb], 0x9f
mov byte [esp + 0x2ec], 0x7c
mov byte [esp + 0x2ed], 0x9d
mov byte [esp + 0x2ee], 0x74
mov byte [esp + 0x2ef], 0x93
mov byte [esp + 0x2f0], 0x90
mov byte [esp + 0x2f1], 0x91
mov eax, 0x3a
mov byte [esp + eax + 0x2b8], 0
add eax, 1
cmp eax, 0x40
jne 0x416aea
xor eax, eax
cmp eax, 0x40
jae 0x416b41
movzx edx, byte [esp + eax + 0x2b8]
mov esi, eax
add esi, 0x804d2732
mov ecx, edx
xor ecx, 0xffffffff
and esi, ecx
mov ecx, 0xcd
sub ecx, eax
and ecx, edx
or ecx, esi
add ecx, 0x7e7e3c05
mov edx, ecx
shl edx, 1
and edx, 2
xor ecx, 1
add ecx, edx
mov byte [esp + eax + 0x2b8], cl
add eax, 1
jmp 0x416afc
mov eax, dword [esp + 0x3a8]
lea ecx, [esp + 0x2b8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040a360
mov ecx, dword [esp + 0x38]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040a360
lea ecx, [esp + 0x9c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040a360
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xfe3780a3
mov eax, dword [esp + 0x3a8]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x48]
mov dword [esp + 0x15c], edx
mov dword [esp + 0x158], ecx
mov dword [esp + 0x154], eax
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x47fe1e3f
jmp 0x41876b
mov eax, 0xcbbfceba
test byte [esp + 0x99], 1
jne 0x416cea
mov eax, 0x4352daf0
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x168], eax
mov dword [esp + 0x164], 0
mov dword [esp + 0x160], 0
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x4f622048
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x4352daf0
mov eax, dword [esp + 0x3ac]
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x164], 0
mov dword [esp + 0x160], eax
jmp 0x41876b
mov eax, 0x7061e7bd
cmp dword [esp + 0xfc], 0
je 0x417128
mov eax, 0x9d585c9e
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
jmp 0x41876b
lea edi, [esp + 0x4f0]
xor eax, eax
mov ecx, 0x11
rep stosd dword es:[edi], eax
mov dword [esp + 0x4f0], 0x44
call fcn.00418c10
call fcn.00418c10
mov eax, dword [0x44ce58]
mov dword [esp], eax
mov dword [esp + 4], 0xef6ed546
call fcn.0043f1e0
mov esi, eax
call fcn.00418c10
call fcn.00418c10
test esi, esi
setne al
jne 0x4171be
jmp 0x4171bc
xor esi, esi
mov eax, dword [esp + 0x180]
mov ecx, dword [esp + 0xf8]
xor edx, edx
lea edx, [esp + 0x4f0]
lea edi, [esp + 0x43c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], edi
call esi
sub esp, 0x28
mov ecx, 0x901cc45c
cmp eax, 0
jne 0x41722f
mov ecx, 0x6b791120
mov eax, dword [esp + 0x2c]
mov dword [eax], ecx
jmp 0x41876b
mov eax, dword [esp + 0x43c]
mov dword [esp + 0x3b0], eax
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xa77bef05
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x38cd9d99
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x114d3a0
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x9d585c9e
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x9d585c9e
jmp 0x41876b
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.0043a760
cmp dword [esp + 0x180], 0
sete al
and al, 1
mov byte [esp + 0x9a], al
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x6d6ef350
jmp 0x41876b
mov eax, dword [esp + 0xf8]
mov dword [esp], eax
call fcn.00408740
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x6d391b1e
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xcba6497a
jmp 0x41876b
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x26110c74
jmp 0x41876b
mov al, byte [esp + 0x80]
mov byte [esp + 0x20c], al
mov byte [esp + 0x40], 0x12
mov byte [esp + 0x41], 0xed
mov byte [esp + 0x42], 0x7e
mov eax, 3
mov byte [esp + eax + 0x40], 0
add eax, 1
cmp eax, 4
jne 0x417a9c
xor eax, eax
cmp eax, 4
jae 0x417aef
movzx edx, byte [esp + eax + 0x40]
mov ecx, eax
add ecx, 0xea
mov edi, edx
xor edi, 0xffffffff
mov esi, 0x15
sub esi, eax
and esi, edi
mov ebx, 0x15
sub ebx, eax
mov edi, edx
xor edi, 0xffffffff
and ebx, edi
or ebx, esi
add ebx, 1
and ecx, edx
add ebx, ecx
mov cl, 0x6e
sub cl, bl
mov byte [esp + eax + 0x40], cl
add eax, 1
jmp 0x417aab
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0x40]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 3
call fcn.00401f30
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xc05d4b63
jmp 0x41876b
pop esp
add edx, dword [ebx - 0x3f]
or dword [ebp + 0x4472b2ad], ecx
pushal
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x28c39ba9
jmp 0x41876b
movsd dword es:[edi], dword [esi]
enter 0x334c, 0xffffffffffffffa9
add eax, 0x448b8268
and al, 0x4c
mov dword [esp], eax
call fcn.00408740
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x884b5747
jmp 0x41876b
push ss
cmpsd dword [esi], dword es:[edi]
stc
fdivr qword [edi - 0x74f79a5f]
inc esp
and al, 0x2c
mov dword [eax], 0x95688f2d
jmp 0x41876b
cmp ah, byte [0xa32746d6]
mov edi, dword [edi]
outsd dx, dword [esi]
push edx
rol dword [ebp + 0x1c126a49], 1
inc esp
inc ebx
cmp eax, 0xffffff8b
inc esp
and al, 0x2c
mov dword [eax], 0x5315fc94
jmp 0x41876b
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0xa0]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004018a0
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00418bf0
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xe66fd8a6
jmp 0x41876b
loop 0x4182f5
retf 0x8b32
popal
adc dh, 0x64
cmp eax, ecx
mov al, byte [0x7765c39e]
or dword [ebx + 0xf02484], ecx
add byte [eax], al
mov dword [esp], eax
call fcn.00418770
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x3fcc3dfc
jmp 0x41876b
mov eax, dword [esp + 0xf4]
mov dword [esp], eax
call fcn.00408740
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x4f622048
jmp 0x41876b
and ecx, esi
mov cl, 0x70
mov eax, dword [0x44ce58]
mov dword [esp], eax
mov dword [esp + 4], 0x737de518
call fcn.0043f1e0
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x577c870e
jmp 0x41876b
sbb eax, 0x1f6709e5
sbb al, 0x79
pop eax
enter 0xffffffffffffb1d3, 0x7a
fistp qword [esi + ecx*8 - 0x39]
test byte [esp + esi], ah
add eax, dword [eax]
add bh, bh
invalid
xor ebx, edx
cdq
in eax, dx
jmp 0x41876b
jnp 0x41872f
mov cl, byte [ebx - 0x38d3dbbc]
add byte [esi + 0x2f], ah
lahf
push cs
jmp 0x41876b
jmp 0x413c07