Function at 0x41dec0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, 0x21ec
call fcn.004099d0
mov dword [esp + 0x11ec], 0x48fd4af9
mov dword [esp + 0x11f0], 0x4c844e8c
mov dword [esp + 0x11f4], 0x30843284
mov dword [esp + 0x11f8], 0x34813685
mov dword [esp + 0x11fc], 0x38873a8c
mov dword [esp + 0x1200], 0x3c883e8c
mov dword [esp + 0x1204], 0x209522f8
mov word [esp + 0x1208], 0x2621
mov dword [esp + 0x120a], 0
mov word [esp + 0x120e], 0
mov dword [esp + 0xa7c], 0
mov eax, dword [esp + 0xa7c]
cmp eax, 0x23
ja 0x41ddfe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0xa7c]
mov ecx, dword [esp + 0xa7c]
movzx ecx, byte [esp + ecx + 0x11ec]
add eax, 0x94acecb7
xor eax, ecx
mov dword [esp + 0x27c], eax
mov eax, dword [esp + 0x27c]
add al, 0xe
mov ecx, dword [esp + 0xa7c]
mov byte [esp + ecx + 0x11ec], al
inc dword [esp + 0xa7c]
mov eax, dword [esp + 0xa7c]
cmp eax, 0x24
jb 0x41ddb0
lea eax, [esp + 0x44]
lea ecx, [esp + 0x11ec]
push 0
push 0
push 0x20019
push eax
mov dword [esp + 0x14], ecx
push ecx
call fcn.0043f650
add esp, 0x14
shr eax, 0x1f
jmp dword [eax*4 + 0x4466dc]
lea eax, [esp + 0x64]
lea ecx, [esp + 0x40]
push 0
push 0
push 0
push 0
push eax
push ecx
push 0
push 0
push dword [esp + 0x64]
call fcn.0043fa80
add esp, 0x24
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x4466e4]
xor eax, eax
jmp 0x41f69d
xor ecx, ecx
xor eax, eax
mov dword [esp + 8], 0
cmp ecx, dword [esp + 0x40]
setb al
xor edi, edi
jmp dword [eax*4 + 0x4466ec]
mov edx, dword [esp + 4]
mov word [edx], 0
mov eax, dword [esp + 8]
and al, 1
movzx eax, al
jmp dword [eax*4 + 0x4466f4]
movzx ecx, word [esp + 0x11ec]
xor edi, edi
test cx, cx
je 0x41f528
lea eax, [esp + 0x11ec]
jmp 0x41f502
inc edi
xor eax, eax
cmp edi, dword [esp + 0x40]
setb al
jmp dword [eax*4 + 0x4466ec]
mov esi, dword [esp + 0x64]
mov eax, esi
inc eax
lea eax, [esi + esi + 2]
jns 0x41dee3
mov eax, 0xffffffff
push eax
call fcn.00409a00
add esp, 4
mov dword [esp + 0x60], esi
mov ebx, eax
lea eax, [esp + 0x60]
push eax
push ebx
push edi
push dword [esp + 0x50]
call fcn.0043f790
add esp, 0x10
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x4466fc]
jmp dword [0x44679c]
mov esi, dword [esp + 0x44]
jmp dword [0x446704]
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x27c], 0x1b1c1d1e
mov word [esp + 0x280], 0
mov dword [esp + 0x7c], 0
mov ecx, dword [esp + 0x7c]
cmp ecx, 5
ja 0x41dfc4
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x7c]
movzx edx, byte [esp + edx + 0x27c]
lea esi, [ecx + edx]
add esi, 0x44bd0639
add ecx, 0x44bd0639
and ecx, edx
mov edx, esi
not edx
and edx, ecx
add edx, ecx
not ecx
and ecx, esi
sub ecx, edx
mov dword [esp + 0xa7c], ecx
mov ecx, dword [esp + 0xa7c]
mov edx, ecx
not edx
and edx, 0x28
and ecx, 0xd7
sub ecx, edx
mov edx, dword [esp + 0x7c]
mov byte [esp + edx + 0x27c], cl
inc dword [esp + 0x7c]
mov ecx, dword [esp + 0x7c]
cmp ecx, 6
jb 0x41df60
mov ecx, dword [0x44ab8c]
test ecx, ecx
je 0x41e000
mov edx, dword [esp + 0x27c]
xor esi, esi
mov edi, dword [0x44ab90]
nop
nop
nop
cmp dword [edi + esi*8], 0x625b6034
je 0x41dff0
inc esi
cmp ecx, esi
jne 0x41dfe0
jmp 0x41e000
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
jne 0x41e00e
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, dword [esp + 0x48]
mov ebx, dword [esp + 0x30]
jmp dword [0x44679c]
push eax
push 1
push dword [0x44ab94]
push ecx
call fcn.0043cc20
add esp, 0x10
mov edi, dword [esp + 0x48]
mov ebx, dword [esp + 0x30]
jmp dword [0x44679c]
mov ecx, dword [esp + 0x58]
add ecx, 4
xor eax, eax
cmp ecx, 0x14
setne al
jmp dword [eax*4 + 0x44672c]
mov dword [esp + 0x58], ecx
mov eax, dword [esp + ecx + 0x68]
mov dword [esp + 0x27c], 0xf7a8f9aa
mov dword [esp + 0x280], 0xf3a4f5a6
mov dword [esp + 0x284], 0xefa0f1a2
mov dword [esp + 0x288], 0xeb44edbe
mov dword [esp + 0x28c], 0xe9ea
mov dword [esp + 0x7c], 0
mov ecx, dword [esp + 0x7c]
cmp ecx, 0x13
ja 0x41e0ea
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x7c]
movzx edx, byte [esp + edx + 0x27c]
lea esi, [ecx + 0x45]
and esi, edx
add ecx, edx
add esi, esi
sub ecx, esi
add ecx, 0xfb0d3345
mov dword [esp + 0xa7c], ecx
mov ecx, dword [esp + 0xa7c]
add cl, 0x41
mov edx, dword [esp + 0x7c]
mov byte [esp + edx + 0x27c], cl
inc dword [esp + 0x7c]
mov ecx, dword [esp + 0x7c]
cmp ecx, 0x14
jb 0x41e0a0
movzx ecx, word [eax]
lea esi, [esp + 0x7c]
test cx, cx
je 0x41e111
add eax, 2
nop
nop
nop
nop
nop
nop
nop
mov word [esi], cx
add esi, 2
movzx ecx, word [eax]
add eax, 2
test cx, cx
jne 0x41e100
mov word [esi], 0
movzx eax, word [esp + 0x27c]
test ax, ax
je 0x41e141
lea ecx, [esp + 0x27e]
nop
nop
nop
nop
nop
nop
mov word [esi], ax
add esi, 2
movzx eax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41e130
mov word [esi], 0
mov di, 0x31
xor eax, eax
cmp di, 0x35
setb al
mov dword [esp + 0x4c], esi
jmp dword [eax*4 + 0x446734]
inc edi
xor eax, eax
cmp di, 0x35
setb al
jmp dword [eax*4 + 0x446734]
mov word [esi - 2], di
lea eax, [esp + 0x54]
lea ecx, [esp + 0x7c]
push dword [esp + 0x3c]
push 0
push 0x20019
push eax
push ecx
call fcn.0043f650
add esp, 0x14
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44673c]
mov dword [esp + 0x50], edi
mov dword [esp + 0x5c], 0x800
mov dword [esp + 0x34], 0x400
xor esi, esi
mov dword [esp + 0x10], 0
jmp 0x41e1c3
mov esi, dword [esp + 0xc]
inc esi
lea eax, [esp + 0x34]
lea edi, [esp + 0xa7c]
lea ecx, [esp + 0x38]
lea edx, [esp + 0x5c]
push eax
push edi
push ecx
push edx
push ebp
mov dword [esp + 0x20], esi
push esi
push dword [esp + 0x6c]
call fcn.0043fd60
add esp, 0x1c
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x446744]
test byte [esp + 0x10], 1
sete al
cmp dword [esp + 0x38], 1
sete cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x44674c]
xor eax, eax
cmp dword [esp + 0x38], 3
sete al
jmp dword [eax*4 + 0x44676c]
mov dword [esp + 0x18], 0x50f45614
mov dword [esp + 0x1c], 0x5ce452f2
mov dword [esp + 0x20], 0x58e95ee0
mov dword [esp + 0x24], 0xa45b5ae5
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0xf
ja 0x41e28e
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x18]
add eax, 0x24635271
xor eax, ecx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
add al, 0xdc
mov ecx, dword [esp]
mov byte [esp + ecx + 0x18], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x10
jb 0x41e260
movzx ebx, word [esp + 0x18]
test bx, bx
je 0x41e2dc
lea eax, [esp + 0x27c]
lea edx, [esp + 0x18]
mov ebp, eax
jmp 0x41e2b8
movzx ebx, word [edx]
test bx, bx
je 0x41e2dc
movzx esi, word [eax]
test si, si
je 0x41e2da
add eax, 2
add edx, 2
lea ecx, [ebp + 2]
cmp si, bx
je 0x41e2d2
mov ebp, ecx
mov eax, ecx
je 0x41e2b0
lea edx, [esp + 0x18]
jmp 0x41e2b0
xor ebp, ebp
mov eax, dword [case.0x41e6dd.10]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
xor eax, eax
test ebp, ebp
setne al
jmp dword [eax*4 + 0x446764]
xor eax, eax
cmp dword [esp + 0x38], 3
sete al
lea ebp, [esp + 0x27c]
jmp dword [eax*4 + 0x44676c]
mov dword [esp + 0x18], 0xf26cf405
mov dword [esp + 0x1c], 0xee62f07c
mov dword [esp + 0x20], 0xea7aec64
mov dword [esp + 0x24], 0xe67be867
mov word [esp + 0x28], 0xe4e5
lea eax, [esp + 0x2a]
mov word [eax + 4], 0
mov dword [eax], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x17
ja 0x41e38e
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x18]
add eax, 0xf9674faa
xor eax, ecx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
add al, 0xa1
mov ecx, dword [esp]
mov byte [esp + ecx + 0x18], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x18
jb 0x41e360
movzx edi, word [esp + 0x18]
lea eax, [esp + 0x27c]
test di, di
je 0x41e4df
lea ecx, [esp + 0x27c]
lea edx, [esp + 0x18]
mov eax, ecx
jmp 0x41e3cc
movzx edi, word [edx]
test di, di
je 0x41e4df
movzx esi, word [ecx]
test si, si
je 0x41e4dd
add ecx, 2
add edx, 2
lea ebx, [eax + 2]
cmp si, di
je 0x41e3ea
mov eax, ebx
mov ecx, ebx
je 0x41e3c0
lea edx, [esp + 0x18]
jmp 0x41e3c0
mov eax, dword [esp + 0x34]
cmp eax, 2
jae 0x41e412
mov ebp, dword [esp + 4]
jmp 0x41e4b3
shr eax, 1
lea ecx, [eax - 1]
mov edx, eax
and edx, 3
je 0x41e454
mov dword [esp + 0x10], ecx
xor ebx, ebx
lea edi, [esp + 0xa7c]
mov ebp, dword [esp + 4]
nop
movzx esi, word [edi]
xor ecx, ecx
test si, si
setne cl
lea edi, [edi + ecx*2]
mov word [ebp], si
add ebp, 2
inc ebx
cmp edx, ebx
jne 0x41e430
mov dword [esp + 4], ebp
sub eax, ebx
mov ecx, dword [esp + 0x10]
cmp ecx, 3
mov ebp, dword [esp + 4]
jb 0x41e4b3
nop
nop
nop
movzx ecx, word [edi]
xor edx, edx
test cx, cx
setne dl
lea esi, [edi + edx*2]
mov word [ebp], cx
movzx ecx, word [edi + edx*2]
xor edx, edx
test cx, cx
setne dl
lea edi, [esi + edx*2]
mov word [ebp + 2], cx
movzx ecx, word [esi + edx*2]
xor edx, edx
test cx, cx
setne dl
lea esi, [edi + edx*2]
mov word [ebp + 4], cx
movzx edx, word [edi + edx*2]
xor ecx, ecx
test dx, dx
setne cl
mov word [ebp + 6], dx
add ebp, 8
lea edi, [esi + ecx*2]
add eax, 0xfffffffc
jne 0x41e460
mov word [ebp], 0x3a
mov word [ebp + 2], 0x20
add ebp, 4
mov dword [esp + 4], ebp
mov al, 1
mov dword [esp + 0x10], eax
mov esi, dword [esp + 0xc]
inc esi
lea ebp, [esp + 0x27c]
jmp 0x41e1c3
xor eax, eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x446774]
mov eax, dword [esp + 0x34]
cmp eax, 2
jae 0x41e4ff
mov edx, dword [esp + 4]
jmp 0x41e5bc
shr eax, 1
lea esi, [eax - 1]
mov edi, eax
lea ecx, [esp + 0xa7c]
and edi, 3
mov edx, dword [esp + 4]
je 0x41e54b
mov dword [esp + 8], esi
xor ebx, ebx
nop
nop
nop
nop
movzx esi, word [ecx]
mov ebp, edx
xor edx, edx
test si, si
setne dl
lea ecx, [ecx + edx*2]
mov edx, ebp
mov word [ebp], si
add edx, 2
inc ebx
cmp edi, ebx
jne 0x41e520
sub eax, ebx
lea ebp, [esp + 0x27c]
mov esi, dword [esp + 8]
cmp esi, 3
mov esi, dword [esp + 0xc]
jb 0x41e5c0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebp, edx
movzx edx, word [ecx]
xor ebx, ebx
test dx, dx
setne bl
lea esi, [ecx + ebx*2]
mov word [ebp], dx
movzx ecx, word [ecx + ebx*2]
xor edx, edx
test cx, cx
setne dl
lea edi, [esi + edx*2]
mov word [ebp + 2], cx
movzx ecx, word [esi + edx*2]
xor edx, edx
test cx, cx
setne dl
lea esi, [edi + edx*2]
mov word [ebp + 4], cx
movzx edx, word [edi + edx*2]
xor ecx, ecx
test dx, dx
setne cl
mov word [ebp + 6], dx
lea edx, [ebp + 8]
lea ecx, [esi + ecx*2]
add eax, 0xfffffffc
jne 0x41e560
lea ebp, [esp + 0x27c]
mov esi, dword [esp + 0xc]
mov word [edx], 0xa
add edx, 2
mov dword [esp + 4], edx
mov al, 1
mov dword [esp + 8], eax
inc esi
jmp 0x41e1c3
mov eax, dword [esp + 0x54]
mov dword [esp + 0x18], 0x1b1c1d1e
mov word [esp + 0x1c], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 5
ja 0x41e663
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x18]
lea esi, [ecx + edx]
add esi, 0x44bd0639
add ecx, 0x44bd0639
and ecx, edx
mov edx, esi
not edx
and edx, ecx
add edx, ecx
not ecx
and ecx, esi
sub ecx, edx
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x14]
mov edx, ecx
not edx
and edx, 0x28
and ecx, 0xd7
sub ecx, edx
mov edx, dword [esp]
mov byte [esp + edx + 0x18], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 6
jb 0x41e610
mov ecx, dword [0x44ab8c]
test ecx, ecx
je 0x41e6a0
mov edx, dword [esp + 0x18]
xor esi, esi
mov edi, dword [0x44ab90]
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0x625b6034
je 0x41e690
inc esi
cmp ecx, esi
jne 0x41e680
jmp 0x41e6a0
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
jne case.default.0x41e6b2
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, dword [esp + 0x50]
inc edi
xor eax, eax
cmp di, 0x35
setb al
mov esi, dword [esp + 0x4c]
jmp dword [eax*4 + 0x446734]
push eax
push 1
push dword [0x44ab94]
push ecx
call fcn.0043cc20
add esp, 0x10
mov edi, dword [esp + 0x50]
inc edi
xor eax, eax
cmp di, 0x35
setb al
mov esi, dword [esp + 0x4c]
jmp dword [eax*4 + 0x446734]
lea edx, [esp + 0xe7e]
lea eax, [esp + 0x27c]
mov ecx, 0x28
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, esi
lea edi, [esp + 0xf1e]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp dword [0x446728]
mov dword [esp + 0x7c], 0
mov eax, dword [esp + 0x7c]
cmp eax, 0xa4
ja 0x41e6f0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x7c]
movzx ecx, byte [esp + ecx + 0x27c]
add eax, 0xf8b8
xor eax, ecx
mov dword [esp + 0xa7c], eax
mov eax, dword [esp + 0xa7c]
mov ecx, dword [esp + 0x7c]
mov byte [esp + ecx + 0x27c], al
inc dword [esp + 0x7c]
mov eax, dword [esp + 0x7c]
cmp eax, 0xa5
jb 0x41e740
jmp 0x41e6f0
mov dword [esp + 0x27c], 0xf165f347
mov dword [esp + 0x280], 0xfd60ff5d
mov dword [esp + 0x284], 0xf967fb6d
mov dword [esp + 0x288], 0xe54ce769
mov dword [esp + 0x28c], 0xe146e378
mov dword [esp + 0x290], 0xed44ef51
mov dword [esp + 0x294], 0xe97deb46
mov dword [esp + 0x298], 0xd57dd745
mov dword [esp + 0x29c], 0xd10dd370
mov dword [esp + 0x2a0], 0xdd0cdf0b
mov dword [esp + 0x2a4], 0xd97edb0c
mov dword [esp + 0x2a8], 0xc55dc769
mov dword [esp + 0x2ac], 0xc156c358
mov dword [esp + 0x2b0], 0xcd5fcf51
mov dword [esp + 0x2b4], 0xc96ecb59
mov dword [esp + 0x2b8], 0xb528b778
mov dword [esp + 0x2bc], 0xb118b325
mov dword [esp + 0x2c0], 0xbd2abf27
mov dword [esp + 0x2c4], 0xb927bb17
mov dword [esp + 0x2c8], 0xa517a71c
mov dword [esp + 0x2cc], 0xa13ea33f
mov dword [esp + 0x2d0], 0xad3faf34
mov dword [esp + 0x2d4], 0xa93fab3d
mov dword [esp + 0x2d8], 0x9551970c
mov dword [esp + 0x2dc], 0x914b9349
mov dword [esp + 0x2e0], 0x9d539f4b
mov dword [esp + 0x2e4], 0x99509b56
mov dword [esp + 0x2e8], 0x855a8748
mov dword [esp + 0x2ec], 0x815f835b
mov dword [esp + 0x2f0], 0x8d518f5f
mov dword [esp + 0x2f4], 0x89268b53
mov dword [esp + 0x2f8], 0x75b87755
mov dword [esp + 0x2fc], 0x71aa73ac
mov dword [esp + 0x300], 0x7dae7fbf
mov dword [esp + 0x304], 0x79a57bac
mov dword [esp + 0x308], 0x65ba67a8
mov dword [esp + 0x30c], 0x61bc63aa
mov dword [esp + 0x310], 0x6db46faf
mov dword [esp + 0x314], 0x69b36bb6
mov dword [esp + 0x318], 0x55f257b2
mov word [esp + 0x31c], 0x5354
mov dword [esp + 0x31e], 0
mov dword [esp + 0x7c], 0
mov eax, dword [esp + 0x7c]
cmp eax, 0xa5
ja 0x41e9be
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x7c]
movzx ecx, byte [esp + ecx + 0x27c]
lea esi, [eax + ecx]
add esi, 0xbcc03b83
add eax, 0xbcc03b83
and eax, ecx
add eax, eax
sub esi, eax
mov dword [esp + 0xa7c], esi
mov eax, dword [esp + 0xa7c]
add al, 0x89
mov ecx, dword [esp + 0x7c]
mov byte [esp + ecx + 0x27c], al
inc dword [esp + 0x7c]
mov eax, dword [esp + 0x7c]
cmp eax, 0xa6
jb case.default.0x41ea21
lea eax, [esp + 0x10a8]
lea ebp, [esp + 0x27c]
mov esi, ebp
mov edi, eax
mov ecx, 0x28
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea esi, [esp + 0x31c]
lea edi, [esp + 0x1148]
mov ecx, 1
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
lea ecx, [esp + 0xf20]
mov dword [esp + 0x68], ecx
lea ecx, [esp + 0xfc2]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], edx
mov dword [esp + 0x78], eax
xor ecx, ecx
xor eax, eax
cmp ecx, 0x14
setne al
jmp dword [eax*4 + 0x44672c]
push ebx
call fcn.00409a10
add esp, 4
inc edi
xor eax, eax
cmp edi, dword [esp + 0x40]
setb al
jmp dword [eax*4 + 0x4466ec]
mov ebx, dword [esp + 0x30]
jmp dword [0x44679c]
mov dword [esp + 0x48], edi
mov dword [esp + 0x27c], 0x22882092
mov dword [esp + 0x280], 0x26972480
mov dword [esp + 0x284], 0x2a9a2888
mov dword [esp + 0x288], 0x2e8b2c84
mov dword [esp + 0x28c], 0x32ed309b
mov dword [esp + 0x290], 0x369c34e4
mov dword [esp + 0x294], 0x3a9d3899
mov dword [esp + 0x298], 0x3e8a3c94
mov dword [esp + 0x29c], 0x2e1008c
mov dword [esp + 0x2a0], 0x6a004ce
mov dword [esp + 0x2a4], 0xaba08b4
mov dword [esp + 0x2a8], 0xeaa0caa
mov dword [esp + 0x2ac], 0x12bf10a6
mov dword [esp + 0x2b0], 0x16f514b4
mov dword [esp + 0x2b4], 0x1aac18c4
mov dword [esp + 0x2b8], 0x1eae1cb9
mov dword [esp + 0x2bc], 0xe252e0a6
mov dword [esp + 0x2c0], 0xe640e457
mov dword [esp + 0x2c4], 0xea35e84a
mov dword [esp + 0x2c8], 0xee5fec3b
mov dword [esp + 0x2cc], 0xf257f040
mov dword [esp + 0x2d0], 0xf659f45a
mov dword [esp + 0x2d4], 0xfa4af852
mov dword [esp + 0x2d8], 0xfe04fc27
mov dword [esp + 0x2dc], 0xc236c00c
mov dword [esp + 0x2e0], 0xc606c436
mov dword [esp + 0x2e4], 0xca0fc801
mov dword [esp + 0x2e8], 0xce39cc3b
mov dword [esp + 0x2ec], 0xd222d03e
mov dword [esp + 0x2f0], 0xd624d422
mov dword [esp + 0x2f4], 0xda7dd826
mov dword [esp + 0x2f8], 0xde1fdc28
mov dword [esp + 0x2fc], 0xa259a027
mov dword [esp + 0x300], 0xa655a462
mov dword [esp + 0x304], 0xaa58a857
mov dword [esp + 0x308], 0xae59ac5b
mov dword [esp + 0x30c], 0xb243b06d
mov dword [esp + 0x310], 0xb643b472
mov dword [esp + 0x314], 0xba4eb841
mov dword [esp + 0x318], 0xbe61bc4d
mov word [esp + 0x31c], 0x80bf
lea eax, [esp + 0x31c]
mov byte [eax + 4], 0
mov word [eax + 2], 0
mov dword [esp + 0x7c], 0
mov eax, dword [esp + 0x7c]
cmp eax, 0xa4
ja 0x41ec91
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x7c]
movzx ecx, byte [esp + ecx + 0x27c]
add eax, 0xf8bf
xor eax, ecx
mov dword [esp + 0xa7c], eax
mov eax, dword [esp + 0xa7c]
add al, 0x20
mov ecx, dword [esp + 0x7c]
mov byte [esp + ecx + 0x27c], al
inc dword [esp + 0x7c]
mov eax, dword [esp + 0x7c]
cmp eax, 0xa5
jb 0x41ec50
lea edi, [esp + 0xf20]
lea eax, [esp + 0x27c]
mov ecx, 0x28
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edx, [esp + 0x31c]
mov eax, edx
mov ecx, 1
lea edi, [esp + 0xfc0]
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov dword [esp + 0x27c], 0xb105b367
mov dword [esp + 0x280], 0xbd00bf1d
mov dword [esp + 0x284], 0xb907bb0d
mov dword [esp + 0x288], 0x852c8709
mov dword [esp + 0x28c], 0x81268338
mov dword [esp + 0x290], 0x8d398f59
mov dword [esp + 0x294], 0x89268b3e
mov dword [esp + 0x298], 0x952f9739
mov dword [esp + 0x29c], 0x91729329
mov dword [esp + 0x2a0], 0x9d429f42
mov dword [esp + 0x2a4], 0x99579b38
mov dword [esp + 0x2a8], 0x65d86723
mov dword [esp + 0x2ac], 0x61c963da
mov dword [esp + 0x2b0], 0x6dd26fd2
mov dword [esp + 0x2b4], 0x69c16bb6
mov dword [esp + 0x2b8], 0x75cb77d6
mov dword [esp + 0x2bc], 0x71c373c3
mov dword [esp + 0x2c0], 0x7dda7fc2
mov dword [esp + 0x2c4], 0x79cd7ba5
mov dword [esp + 0x2c8], 0x45ea47ca
mov dword [esp + 0x2cc], 0x41fb43f5
mov dword [esp + 0x2d0], 0x4dae4ffd
mov dword [esp + 0x2d4], 0x49e14b9f
mov dword [esp + 0x2d8], 0x55eb57f5
mov dword [esp + 0x2dc], 0x51fb53fb
mov dword [esp + 0x2e0], 0x5dec5fe7
mov dword [esp + 0x2e4], 0x59ba5bf5
mov dword [esp + 0x2e8], 0x259d2785
mov dword [esp + 0x2ec], 0x219f238a
mov dword [esp + 0x2f0], 0x2d932fa7
mov dword [esp + 0x2f4], 0x29812b90
mov dword [esp + 0x2f8], 0x3592379b
mov dword [esp + 0x2fc], 0x318c33e4
mov dword [esp + 0x300], 0x3d943f81
mov dword [esp + 0x304], 0x398e3b8b
mov dword [esp + 0x308], 0x5bb0793
mov dword [esp + 0x30c], 0x1d303a0
mov dword [esp + 0x310], 0xdb20fbb
mov dword [esp + 0x314], 0x9bb0bb8
mov dword [esp + 0x318], 0x15a317b9
mov dword [esp + 0x31c], 0x11d513b0
mov dword [esp + 0x320], 0x1de71fed
mov dword [esp + 0x324], 0x19d71be7
mov dword [esp + 0x328], 0xe52ce7d2
mov dword [esp + 0x32c], 0xe11ee314
mov dword [esp + 0x330], 0xed13ef1f
mov dword [esp + 0x334], 0xe915eb13
mov dword [esp + 0x338], 0xf55af717
mov dword [esp + 0x33c], 0xf13cf309
mov dword [esp + 0x340], 0xfd06ff08
mov dword [esp + 0x344], 0xf90afb33
mov dword [esp + 0x348], 0xc539c708
mov dword [esp + 0x34c], 0xc13ec334
mov dword [esp + 0x350], 0xcd30cf0e
mov dword [esp + 0x354], 0xc930cb03
mov dword [esp + 0x358], 0xd52fd732
mov dword [esp + 0x35c], 0xd176d32e
mov word [esp + 0x360], 0xdfd0
mov byte [edx + 0x48], 0
mov word [edx + 0x46], 0
mov dword [esp + 0x7c], 0
mov eax, dword [esp + 0x7c]
cmp eax, 0xe8
ja 0x41efae
nop
nop
nop
nop
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x7c]
movzx ecx, byte [esp + ecx + 0x27c]
lea edx, [eax + ecx]
add edx, 0x39dc63d3
add eax, 0x39dc63d3
and eax, ecx
add eax, eax
sub edx, eax
mov dword [esp + 0xa7c], edx
mov eax, dword [esp + 0xa7c]
add al, 0x99
mov ecx, dword [esp + 0x7c]
mov byte [esp + ecx + 0x27c], al
inc dword [esp + 0x7c]
mov eax, dword [esp + 0x7c]
cmp eax, 0xe9
jb 0x41ef60
lea edi, [esp + 0xfc2]
lea eax, [esp + 0x27c]
mov ecx, 0x39
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea eax, [esp + 0x360]
lea edi, [esp + 0x10a6]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov dword [esp + 0x27c], 0x9c329ad4
mov dword [esp + 0x280], 0xe02d9e3e
mov dword [esp + 0x284], 0xe450e24e
mov dword [esp + 0x288], 0xe841e64a
mov dword [esp + 0x28c], 0xecb7ea5d
mov dword [esp + 0x290], 0xf049eea2
mov dword [esp + 0x294], 0xf45af257
mov dword [esp + 0x298], 0xf852f656
mov dword [esp + 0x29c], 0xfc8afaa5
mov dword [esp + 0x2a0], 0xc091fe8e
mov dword [esp + 0x2a4], 0xc49fc2b1
mov dword [esp + 0x2a8], 0xc872c68a
mov dword [esp + 0x2ac], 0xcc67ca7d
mov dword [esp + 0x2b0], 0xd060ce62
mov dword [esp + 0x2b4], 0xd48fd27a
mov dword [esp + 0x2b8], 0xd865d685
mov dword [esp + 0x2bc], 0xdc7dda76
mov dword [esp + 0x2c0], 0x2073de74
mov dword [esp + 0x2c4], 0x24902284
mov dword [esp + 0x2c8], 0x28682679
mov dword [esp + 0x2cc], 0x2c9f2a9c
mov dword [esp + 0x2d0], 0x30802e81
mov dword [esp + 0x2d4], 0x3498329e
mov dword [esp + 0x2d8], 0x384e3669
mov dword [esp + 0x2dc], 0x3c4c3a4a
mov dword [esp + 0x2e0], 0x7c3e48
mov dword [esp + 0x2e4], 0x4450247
mov dword [esp + 0x2e8], 0x8730675
mov dword [esp + 0x2ec], 0xc780a78
mov dword [esp + 0x2f0], 0x107e0e7c
mov dword [esp + 0x2f4], 0x14b71260
mov dword [esp + 0x2f8], 0x18551666
mov dword [esp + 0x2fc], 0x1c631a61
mov dword [esp + 0x300], 0x606f1e5c
mov dword [esp + 0x304], 0x64126211
mov dword [esp + 0x308], 0x68136615
mov dword [esp + 0x30c], 0x6c196a2b
mov dword [esp + 0x310], 0x70196e2c
mov dword [esp + 0x314], 0x74047207
mov dword [esp + 0x318], 0x782b7603
mov word [esp + 0x31c], 0x7a79
lea eax, [esp + 0x31c]
mov byte [eax + 4], 0
mov word [eax + 2], 0
mov dword [esp + 0x7c], 0
mov eax, dword [esp + 0x7c]
cmp eax, 0xa4
ja 0x41f211
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x7c]
movzx ecx, byte [esp + ecx + 0x27c]
add eax, 0xf8b9
xor eax, ecx
mov dword [esp + 0xa7c], eax
mov eax, dword [esp + 0xa7c]
add al, 0xe0
mov ecx, dword [esp + 0x7c]
mov byte [esp + ecx + 0x27c], al
inc dword [esp + 0x7c]
mov eax, dword [esp + 0x7c]
cmp eax, 0xa5
jb 0x41f1d0
lea edi, [esp + 0x114a]
lea eax, [esp + 0x27c]
mov ecx, 0x28
mov ebx, edi
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea eax, [esp + 0x31c]
lea edi, [esp + 0x11ea]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov dword [esp + 0x27c], 0xbbd3b9f5
mov dword [esp + 0x280], 0xbfccbddf
mov dword [esp + 0x284], 0xc3b1c1af
mov dword [esp + 0x288], 0xc7a0c5ab
mov dword [esp + 0x28c], 0xcb96c9bc
mov dword [esp + 0x290], 0xcfa8cd83
mov dword [esp + 0x294], 0xd3bbd1b6
mov dword [esp + 0x298], 0xd7b3d5b7
mov dword [esp + 0x29c], 0xdbebd984
mov dword [esp + 0x2a0], 0xdff0dde8
mov dword [esp + 0x2a4], 0xe3bee1d0
mov dword [esp + 0x2a8], 0xe793e5ab
mov dword [esp + 0x2ac], 0xeb86e99c
mov dword [esp + 0x2b0], 0xef81ed83
mov dword [esp + 0x2b4], 0xf3aef19b
mov dword [esp + 0x2b8], 0xf784f5a4
mov dword [esp + 0x2bc], 0xfb9cf997
mov dword [esp + 0x2c0], 0xff92fd95
mov dword [esp + 0x2c4], 0x3710165
mov dword [esp + 0x2c8], 0x7490558
mov dword [esp + 0x2cc], 0xb7e097d
mov dword [esp + 0x2d0], 0xf610d60
mov dword [esp + 0x2d4], 0x1379117f
mov dword [esp + 0x2d8], 0x172f1548
mov dword [esp + 0x2dc], 0x1b2d192b
mov dword [esp + 0x2e0], 0x1f5d1d29
mov dword [esp + 0x2e4], 0x23642166
mov dword [esp + 0x2e8], 0x27122514
mov dword [esp + 0x2ec], 0x2b192919
mov dword [esp + 0x2f0], 0x2f1f2d1d
mov dword [esp + 0x2f4], 0x33563101
mov dword [esp + 0x2f8], 0x37743507
mov dword [esp + 0x2fc], 0x3b023900
mov dword [esp + 0x300], 0x3f0e3d7d
mov dword [esp + 0x304], 0x43734170
mov dword [esp + 0x308], 0x47724574
mov dword [esp + 0x30c], 0x4b78490a
mov dword [esp + 0x310], 0x4f784d0d
mov dword [esp + 0x314], 0x53655166
mov dword [esp + 0x318], 0x570a5562
mov word [esp + 0x31c], 0x5958
lea eax, [esp + 0x31c]
mov byte [eax + 4], 0
mov word [eax + 2], 0
jmp dword [0x44671c]
mov dword [esp + 0x7c], 0
mov eax, dword [esp + 0x7c]
cmp eax, 0xa4
ja 0x41f46f
nop
nop
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x7c]
movzx ecx, byte [esp + ecx + 0x27c]
add eax, 0xf8b8
xor eax, ecx
mov dword [esp + 0xa7c], eax
mov eax, dword [esp + 0xa7c]
mov ecx, dword [esp + 0x7c]
mov byte [esp + ecx + 0x27c], al
inc dword [esp + 0x7c]
mov eax, dword [esp + 0x7c]
cmp eax, 0xa5
jb 0x41f430
lea edi, [esp + 0xe7e]
lea eax, [esp + 0x27c]
mov ecx, 0x28
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, esi
lea edi, [esp + 0xf1e]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.0x41de23.16
lea eax, [esp + 0x3c]
push esi
push 0
push 0x20019
push eax
push ebx
call fcn.0043f650
add esp, 0x14
lea eax, [esp + 0x3c]
push esi
push 0
push 0x20019
push eax
push ebx
call fcn.0043f650
add esp, 0x14
jmp dword [0x44670c]
mov dword [esp + 0x30], ebx
not eax
shr eax, 0x1f
lea esi, [esp + 0x31c]
jmp dword [eax*4 + 0x446714]
add edi, edx
movzx ecx, word [eax + 2]
add eax, 2
test cx, cx
mov edx, dword [esp + 4]
je 0x41f528
cmp eax, edx
jae 0x41f528
movzx esi, cx
cmp esi, 0x800
mov ecx, 3
sbb ecx, 0
mov edx, 1
cmp esi, 0x80
jb 0x41f4f0
mov edx, ecx
jmp 0x41f4f0
lea eax, [edi + 1]
mov dword [esp + 0x10], eax
push eax
call fcn.00409a00
add esp, 4
mov ebp, eax
lea eax, [esp + 0x11ec]
cmp eax, dword [esp + 4]
setb al
mov esi, ebp
test edi, edi
jle 0x41f627
mov esi, ebp
test al, al
je 0x41f627
lea eax, [edi + ebp]
mov dword [esp + 0xc], eax
add dword [esp + 0x10], ebp
lea edx, [esp + 0x11ee]
mov esi, ebp
movzx ebx, word [edx - 2]
test bx, bx
je 0x41f627
cmp bx, 0x7f
ja 0x41f590
mov byte [esi], bl
mov ecx, 1
jmp 0x41f610
mov eax, esi
not eax
add eax, dword [esp + 0x10]
movzx ecx, bx
cmp eax, 2
jb 0x41f5d0
cmp ecx, 0x7ff
ja 0x41f5d0
mov eax, ebx
shr eax, 6
add al, 0xc0
mov byte [esi], al
and bl, 0x3f
or bl, 0x80
mov byte [esi + 1], bl
mov ecx, 2
jmp 0x41f610
mov dword [esp + 8], ecx
xor ecx, ecx
cmp eax, 3
jb 0x41f610
mov ecx, dword [esp + 8]
mov eax, ecx
shr eax, 0xc
or al, 0xe0
mov byte [esi], al
shr ecx, 6
and cl, 0x3f
or cl, 0x80
mov byte [esi + 1], cl
and bl, 0x3f
or bl, 0x80
mov byte [esi + 2], bl
mov ecx, 3
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add esi, ecx
cmp esi, dword [esp + 0xc]
jae 0x41f627
lea eax, [edx + 2]
cmp edx, dword [esp + 4]
mov edx, eax
jb 0x41f570
mov byte [esi], 0
mov dword [esp + 0x27c], 0x585f5ed0
mov dword [esp + 0x280], 0x644a5554
mov dword [esp + 0x284], 0x6b555550
mov dword [esp + 0x288], 0x6c6e3116
mov dword [esp + 0x28c], 0x4b4c4d55
mov dword [esp + 0x290], 0x4b752a0e
mov dword [esp + 0x294], 0x49434f43
mov dword [esp + 0x298], 0x787f007a
mov word [esp + 0x29c], 0xce7d
mov dword [esp + 0x29e], 0
jmp dword [0x4467a8]
add esp, 0x21ec
pop esi
pop edi
pop ebx
pop ebp
ret
push ebp
call fcn.00409a10
add esp, 4
push ebp
call fcn.00409a10
add esp, 4
jmp dword [0x4467c4]
mov eax, dword [esp + 8]
and al, 1
jmp 0x41f69d
jmp dword [0x4467bc]
mov dword [esp + 8], eax
jmp dword [0x4467b4]
mov dword [esp + 0x7c], 0
mov eax, dword [esp + 0x7c]
cmp eax, 0x25
ja 0x41f72f
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x7c]
movzx ecx, byte [esp + ecx + 0x27c]
add eax, 0x75c9f8ff
xor eax, ecx
mov dword [esp + 0xa7c], eax
mov eax, dword [esp + 0xa7c]
add al, 0x12
mov ecx, dword [esp + 0x7c]
mov byte [esp + ecx + 0x27c], al
inc dword [esp + 0x7c]
mov eax, dword [esp + 0x7c]
cmp eax, 0x26
jb 0x41f6f0
lea eax, [esp + 0x27c]
mov ecx, dword [esp + 0x2200]
push edi
push ebp
push eax
call fcn.0040a400
jmp dword [0x4467b0]
mov dword [esp + 0x7c], 0
mov eax, dword [esp + 0x7c]
cmp eax, 0x25
ja 0x41f79f
nop
nop
nop
nop
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x7c]
movzx ecx, byte [esp + ecx + 0x27c]
add eax, 0x75c9f8ff
xor eax, ecx
mov dword [esp + 0xa7c], eax
mov eax, dword [esp + 0xa7c]
add al, 0x12
mov ecx, dword [esp + 0x7c]
mov byte [esp + ecx + 0x27c], al
inc dword [esp + 0x7c]
mov eax, dword [esp + 0x7c]
cmp eax, 0x26
jb 0x41f760
lea eax, [esp + 0x27c]
mov ecx, dword [esp + 0x2200]
push edi
push ebp
push eax
call fcn.0040a400
jmp case.0x41e6dd.29
int3
fild word [ecx]
inc esi
loopne 4482932
add byte [eax], dh
loopne 0x446778
add byte [ecx - 0x1f], dh
inc ecx
add byte [eax - 0x1f], ah
inc ecx
add byte [esi - 0x1fffbe1f], bl
in eax, 0x41
add al, bh
loope 0x44678c
add byte [edx], dl
inc ecx
add byte [eax], dh
loop 0x446794
add al, dh
loop 0x446798
add al, dh
loop 0x44679c
add dl, dh
loop 0x4467a0
add al, dh
loop 0x4467a4
add byte [eax], al
jecxz 0x4467a8
add byte [eax], al
in al, 0x41
add byte [esi + 0x180041e1], bh
jecxz 0x4467b4
add byte [esi - 0x12ffbe1f], bh
mov esi, 0xed0041e1
in eax, dx
in al, 0x41
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [edx + 0x10041f7], bh
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], dl
fild word [ecx]
add dword [eax], eax
add byte [eax], al
add dword [eax], eax
add byte [eax], al
adc edi, ebx
inc ecx
add byte [ecx], al
add byte [eax], al
add byte [eax], dh
ljmp 0x41
add dword [eax], eax
add byte [eax], al
xor dl, ch
inc ecx
add al, al
fiadd word [ecx]
rcr dh, 0x41
add byte [ebx - 9], cl
inc ecx
add al, bl
test byte [ecx], 0x4b
dec ebx
test dword [ecx], case.0x41e6dd.29
dec ebx
fdiv st(6)
inc ecx
add byte [ebx - 9], cl
inc ecx
add dh, cl
test byte [ecx], 0xc8
test byte [ecx], 0xc0
test byte [ecx], 0xb1
test byte [ecx], 0xa8
test dword [ecx], case.0x41e6dd.31
enter 0x41f6, 0
sal dh, 65
add byte [ecx - 1476378122], dh
test byte [ecx], 0xc0
test byte [ecx], 0xa8
test byte [ecx], 0
add byte [eax], al
add byte [eax], bh
sti
inc ecx
add dh, dh
cli
inc ecx
add byte [ecx - 5], al
inc ecx
add byte [eax - 3], dl
inc ecx
add byte [edi*8 - 0x28fffbf], dl
inc ecx
add al, dl
std
inc ecx
add dh, ch
std
inc ecx
add byte [ecx + 0x10004203], ch
inc byte [ecx]
and dh, bh
inc ecx
add byte [ebx], ch
inc byte [ecx]
int1
inc byte [ecx]
inc eax
inc dword [ecx]
jo 0x446809
inc dword [ecx]
test eax, 0x78004203
inc ecx
add byte [ecx + 0x78004203], ch
inc dword [ecx]
adc al, 0
inc edx
add byte [edi], bh
add byte [edx], al
cmp eax, 0x65004200
inc dword [ecx]
xor edi, edi
inc ecx
add byte [esi], al
add dword [edx], eax
loopne 0x44682c
inc ecx
add byte [edx - 3], al
inc ecx
add byte [eax - 0x7effbdff], ah
add dword [edx], eax
add dword [ecx], 0xfd500042
inc ecx
add byte [ecx + 0x20004203], ch
sti
inc ecx
add byte [eax], bh
sti
inc ecx
add dh, dh
cli
inc ecx
add byte [esi], al
sti
inc ecx
add byte [edx - 0x6cffbdfd], cl
add eax, dword [edx]
xchg ebx, eax
add eax, dword [edx]
jbe 0x446863
add byte [esi - 3], dh
inc ecx
add byte [esi], dl
inc byte [ecx]
xor eax, 0xa800420f
or byte [edx], al
ror byte [eax], 0x42
add ah, dl
or byte [edx], al
xor eax, 0xe200420f
or byte [edx], al
dec eax
push cs
inc edx
add bh, al
or dword [edx], eax
invalid