Function at 0x430eae
Capabilities:
Encode data using xor
Encrypt data using rc4 prga

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x80
mov eax, dword [0x44f88c]
mov dword [esp + 0x18], 0x77370965
mov dword [esp + 0x1c], 0x73e275e4
mov dword [esp + 0x20], 0x7fdf713c
mov dword [esp + 0x24], 0x7bdb7de0
mov dword [esp + 0x28], 0x67c27915
mov dword [esp + 0x2c], 0x63f165d6
mov dword [esp + 0x30], 0x6fc361fc
mov dword [esp + 0x34], 0x6bcb6dfc
mov dword [esp + 0x38], 0x570169c4
mov dword [esp + 0x3c], 0x53f65503
mov dword [esp + 0x40], 0x5ff351cf
mov dword [esp + 0x44], 0x5bc55dc3
mov dword [esp + 0x48], 0x47d559f1
mov dword [esp + 0x4c], 0x431045d6
mov dword [esp + 0x50], 0x4fdb41d8
mov dword [esp + 0x54], 0x4b4a4dd8
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + ecx + 0x18]
mov edi, esi
and edi, 0xffffff80
or edi, 0x5c
and esi, 0x7f
lea edx, [ecx + 0xbe]
xor edx, esi
xor edx, edi
xor dl, 0xdc
add dl, 0xca
mov byte [esp + ecx + 0x18], dl
mov edx, ecx
and edx, 1
xor ecx, 1
lea ecx, [ecx + edx*2]
cmp ecx, 0x40
jb 0x42d100
lea esi, [esp + 0x7c]
lea ecx, [esp + 0x18]
push esi
push 0
push 0
push 0x1f
push ecx
push 0
call eax
mov edi, dword [esp + 0x7c]
test edi, edi
jns 0x42d157
mov eax, 0xffffffff
jmp 0x42d15a
lea eax, [edi + edi]
push eax
call fcn.0040c560
add esp, 4
mov ebx, eax
mov eax, dword [0x44f88c]
mov dword [esp + 0x18], 0x97579945
mov dword [esp + 0x1c], 0x93029504
mov dword [esp + 0x20], 0x8f2f912c
mov dword [esp + 0x24], 0x8b2b8d00
mov dword [esp + 0x28], 0x87228955
mov dword [esp + 0x2c], 0x83118536
mov dword [esp + 0x30], 0x7fe3810c
mov dword [esp + 0x34], 0x7bdb7dec
mov dword [esp + 0x38], 0x77a179e4
mov dword [esp + 0x3c], 0x73d675a3
mov dword [esp + 0x40], 0x6ff371ff
mov dword [esp + 0x44], 0x6be56de3
mov dword [esp + 0x48], 0x67f569f1
mov dword [esp + 0x4c], 0x63b065f6
mov dword [esp + 0x50], 0x5fcb61e8
mov dword [esp + 0x54], 0x5b5a5dc8
xor ecx, ecx
nop
nop
nop
nop
mov edx, ecx
add dl, 0x66
xor dl, byte [esp + ecx + 0x18]
add dl, 2
mov byte [esp + ecx + 0x18], dl
inc ecx
cmp ecx, 0x40
jne case.default.0x42d230
push esi
push edi
push ebx
push 0x1f
lea ecx, [esp + 0x28]
push ecx
push 0
call eax
lea eax, [esp + 0x5c]
push 0x60
push 3
push 0x120089
push eax
push ebx
call fcn.00443380
add esp, 0x14
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44be20]
mov dword [esp], 0
jmp dword [0x44bf38]
mov eax, dword [case.0x42d230.4]
nop
nop
nop
nop
nop
nop
nop
jmp eax
lea eax, [esp + 0x64]
push 0
push eax
push dword [esp + 0x64]
call fcn.004436c0
add esp, 0xc
not eax
shr eax, 0x1f
xor ebp, ebp
mov dword [esp], 0
jmp dword [eax*4 + 0x44be38]
mov esi, dword [esp + 0x64]
lea eax, [esi + 1]
push eax
call fcn.0040c560
add esp, 4
mov edi, eax
push 0
push esi
push eax
push dword [esp + 0x68]
call fcn.00443790
add esp, 0x10
not eax
shr eax, 0x1f
mov dword [esp], 0
jmp dword [eax*4 + 0x44be40]
mov dword [esp + 0x78], ebx
mov eax, dword [esp + 0x64]
mov byte [edi + eax], 0
mov dword [esp], 0
mov eax, edi
mov dword [esp + 0x74], edi
jmp dword [0x44be48]
mov dword [esp + 0x18], 0xb6a2a4aa
mov dword [esp + 0x1c], 0xb2bdb0be
mov word [esp + 0x20], 0x756b
mov byte [esp + 0x22], 0x56
lea eax, [esp + 0x23]
mov byte [eax + 4], 0
mov dword [eax], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 0x18]
mov ecx, eax
xor ecx, 0xc250fa72
mov esi, eax
or esi, 0x3daf058d
and ecx, esi
add ecx, esi
xor ecx, edx
mov edx, ecx
and edx, 1
or ecx, 1
add ecx, edx
add cl, 0x3e
mov byte [esp + eax + 0x18], cl
inc eax
cmp eax, 0x10
jne 0x42d300
mov eax, edi
jmp case.0x42d230.9
jmp dword [0x44be54]
mov dword [esp + 0x18], 0xb6a2a4aa
mov dword [esp + 0x1c], 0xb2bdb0be
mov word [esp + 0x20], 0x756b
mov byte [esp + 0x22], 0x56
lea ecx, [esp + 0x23]
mov byte [ecx + 4], 0
mov dword [ecx], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + ecx + 0x18]
mov edx, ecx
xor edx, 0xc250fa72
mov edi, ecx
or edi, 0x3daf058d
and edx, edi
add edx, edi
xor edx, esi
mov esi, edx
and esi, 1
or edx, 1
add edx, esi
add dl, 0x3e
mov byte [esp + ecx + 0x18], dl
inc ecx
cmp ecx, 0x10
jne 0x42d380
movzx ebx, byte [esp + 0x18]
mov edi, eax
test bl, bl
je 0x42d340
lea ecx, [esp + 0x18]
mov edx, eax
mov edi, eax
jmp 0x42d3db
movzx ebx, byte [ecx]
test bl, bl
je 0x42d340
mov bh, byte [edx]
test bh, bh
je 0x42d400
inc edx
inc ecx
lea esi, [edi + 1]
cmp bh, bl
je 0x42d3ee
mov edi, esi
mov edx, esi
je 0x42d3d0
lea ecx, [esp + 0x18]
jmp 0x42d3d0
xor edi, edi
jmp dword [0x44be54]
xor eax, eax
test edi, edi
sete al
jmp dword [eax*4 + 0x44be58]
movzx eax, byte [edi + 0xa]
add edi, 0xa
xor esi, esi
test al, al
je 0x42d441
mov ecx, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp al, 0x22
je 0x42d43f
movzx eax, byte [ecx + 1]
inc ecx
test al, al
jne 0x42d430
jmp 0x42d441
mov esi, ecx
mov ecx, esi
not ecx
and ecx, edi
mov edx, edi
not edx
and edx, esi
mov ebx, edx
sub ebx, ecx
xor eax, eax
cmp ebx, 5
setb al
jmp dword [eax*4 + 0x44be60]
xor eax, eax
cmp byte [esi - 1], 0x74
setne al
jmp dword [eax*4 + 0x44be68]
jmp dword [0x44be7c]
xor eax, eax
cmp byte [esi - 2], 0x78
setne al
jmp dword [eax*4 + 0x44be80]
xor eax, eax
cmp byte [esi - 3], 0x74
setne al
jmp dword [eax*4 + 0x44be88]
xor eax, eax
cmp byte [esi - 4], 0x2e
setne al
jmp dword [eax*4 + 0x44be90]
mov eax, ebx
inc eax
mov dword [esp + 0x70], ecx
mov dword [esp + 0x6c], edx
jns 0x42d4ba
mov eax, 0xffffffff
jmp 0x42d4c1
lea eax, [ebx*2 + 2]
push eax
call fcn.0040c560
add esp, 4
mov dword [esp + 0x18], 0
mov dword [esp + 0xc], ebx
lea edx, [eax + ebx*2]
mov ecx, eax
mov dword [esp + 4], eax
mov dword [esp + 0x10], edx
cmp eax, edx
jae 0x42d537
mov ecx, dword [esp + 4]
cmp edi, esi
jae 0x42d537
mov ecx, dword [esp + 4]
mov ebx, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [ebx], 0
je 0x42d537
lea eax, [esp + 0x18]
push eax
push esi
push ebx
mov dword [esp + 0x14], ecx
call fcn.00410d40
add esp, 0xc
movzx ecx, word [esp + 0x18]
mov edx, dword [esp + 8]
mov word [edx], cx
mov ecx, dword [esp + 8]
add ecx, 2
cmp ecx, dword [esp + 0x10]
jae 0x42d537
add ebx, eax
cmp ebx, esi
jb 0x42d500
mov word [ecx], 0
lea eax, [esp + 0x14]
push 0x60
push 3
push 0x120089
push eax
mov ebx, dword [esp + 0x14]
push ebx
call fcn.00443380
add esp, 0x14
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44be98]
mov edi, esi
jmp dword [0x44bee8]
jmp dword [0x44bea0]
push esi
call fcn.0040c570
add esp, 4
mov eax, dword [esp + 0x14]
mov dword [esp + 0x18], 0xfcfdfeff
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx + 0x18]
mov ebx, edx
and ebx, ecx
add bl, bl
sub dl, bl
movzx edx, dl
add edx, ecx
mov byte [esp + ecx + 0x18], dl
inc ecx
cmp ecx, 4
jne 0x42d590
mov ecx, dword [0x44f890]
test ecx, ecx
je 0x42d5e8
mov edx, dword [esp + 0x18]
xor esi, esi
mov ebx, dword [0x44f894]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [ebx + esi*8], 0x7e776f1
je 0x42d5e0
inc esi
cmp ecx, esi
jne 0x42d5d0
jmp 0x42d5e8
mov ecx, dword [ebx + esi*8 + 4]
cmp ecx, edx
jne 0x42d629
mov esi, dword [esp + 8]
mov edi, esi
mov ebx, dword [esp + 4]
jmp dword [0x44bee8]
jmp dword [0x44bef0]
push ebx
call fcn.0040c570
add esp, 4
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebx
call fcn.0040c570
add esp, 4
mov edi, esi
jmp dword [0x44befc]
mov eax, edi
jmp dword [0x44be48]
push eax
push 1
push dword [0x44f898]
push ecx
call fcn.0043ff80
add esp, 0x10
mov esi, dword [esp + 8]
mov edi, esi
mov ebx, dword [esp + 4]
jmp dword [0x44bee8]
mov dword [esp + 8], esi
mov ebx, dword [esp + 0x58]
test eax, eax
setns al
cmp ebx, 0x100000
setb cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x44beb0]
push ebx
call fcn.0040c560
add esp, 4
mov esi, eax
push 0
push ebx
push eax
push dword [esp + 0x20]
call fcn.00443790
add esp, 0x10
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44beb8]
mov dword [esp + 0x68], esi
xor ecx, ecx
mov eax, dword [esp + 4]
mov ebx, dword [esp + 0xc]
jmp 0x42d6b8
add eax, 2
test dx, dx
je 0x42d6c9
mov esi, ecx
movzx edx, word [eax]
mov ecx, eax
cmp dx, 0x5c
je 0x42d6b0
mov ecx, esi
jmp 0x42d6b0
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x44bec0]
xor esi, esi
xor eax, eax
jmp 0x42d6ea
sub esi, dword [esp + 4]
sar esi, 1
mov eax, esi
not eax
add eax, ebx
inc esi
add eax, 0x1b
push eax
call fcn.0040c560
add esp, 4
mov dword [esp + 0x10], eax
mov dword [esp + 0x60], esi
sub ebx, esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x18], 0xacae94f1
mov dword [esp + 0x1c], 0xb183a9aa
mov dword [esp + 0x20], 0x8eecc1b4
mov dword [esp + 0x24], 0xf8bd8088
mov dword [esp + 0x28], 0x8ababa9a
mov dword [esp + 0x2c], 0xfcb68cbc
mov word [esp + 0x30], 0xc2ff
mov byte [esp + 0x32], 0x16
mov word [esp + 0x33], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 0x18]
mov ebx, eax
and ebx, 8
mov edx, eax
and edx, 2
mov esi, edx
xor esi, 2
imul esi, ebx
or ebx, 2
imul ebx, edx
mov edx, eax
xor edx, 0x867f69ca
add edx, esi
add edx, ebx
xor edx, ecx
mov ecx, edx
not ecx
and ecx, 0xf3
and edx, 0xc
sub edx, ecx
inc dl
mov byte [esp + eax + 0x18], dl
inc eax
cmp eax, 0x1d
jne 0x42d750
movzx ecx, byte [esp + 0x18]
mov ebx, dword [esp + 0x10]
mov eax, ebx
test cl, cl
je 0x42d7bb
lea edx, [esp + 0x19]
mov eax, ebx
nop
nop
nop
nop
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42d7b0
mov byte [eax], 0
mov esi, dword [esp + 0xc]
test esi, esi
je 0x42d7f4
add edi, dword [esp + 0x60]
mov edx, esi
and edx, 3
je 0x42d7f8
xor ecx, ecx
movzx ebx, byte [edi]
cmp bl, 1
sbb edi, 0xffffffff
mov byte [eax + ecx], bl
inc ecx
cmp edx, ecx
jne 0x42d7d3
add eax, ecx
mov esi, dword [esp + 0xc]
sub esi, ecx
mov ecx, eax
mov ebx, dword [esp + 0x10]
jmp 0x42d7f8
mov ecx, eax
jmp 0x42d842
mov edx, dword [esp + 0x60]
sub edx, dword [esp + 0x6c]
add edx, dword [esp + 0x70]
cmp edx, 0xfffffffc
ja 0x42d842
movzx ecx, byte [edi]
cmp cl, 1
sbb edi, 0xffffffff
mov byte [eax], cl
movzx ecx, byte [edi]
cmp cl, 1
sbb edi, 0xffffffff
mov byte [eax + 1], cl
movzx ecx, byte [edi]
cmp cl, 1
sbb edi, 0xffffffff
mov byte [eax + 2], cl
movzx edx, byte [edi]
cmp dl, 1
sbb edi, 0xffffffff
lea ecx, [eax + 4]
mov byte [eax + 3], dl
mov eax, ecx
add esi, 0xfffffffc
jne 0x42d809
mov byte [ecx], 0
mov ecx, dword [esp + 0x94]
push dword [esp + 0x58]
mov esi, dword [esp + 0x6c]
push esi
push ebx
call fcn.0040d050
mov ecx, dword [esp]
and cl, 1
or cl, al
mov dword [esp], ecx
jmp dword [0x44bed8]
push ebx
call fcn.0040c570
add esp, 4
jmp dword [0x44bee0]
jmp dword [0x44bee0]
lea eax, [esp + 0x58]
push 0
push eax
push dword [esp + 0x1c]
call fcn.004436c0
add esp, 0xc
lea eax, [esp + 0x58]
push 0
push eax
push dword [esp + 0x1c]
call fcn.004436c0
add esp, 0xc
jmp dword [0x44bea8]
mov eax, dword [case.0x42d230.7]
mov ebx, dword [esp + 0x78]
mov edi, dword [esp + 0x74]
nop
nop
nop
nop
nop
nop
jmp eax
mov eax, dword [case.0x42d55c.30]
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
jmp dword [0x44bf20]
push edi
call fcn.0040c570
add esp, 4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp dword [0x44bf34]
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x18], 0xfcfdfeff
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + ebp + 0x18]
mov edx, ecx
and edx, ebp
add dl, dl
sub cl, dl
movzx ecx, cl
add ecx, ebp
mov byte [esp + ebp + 0x18], cl
inc ebp
cmp ebp, 4
jne 0x42d910
mov ecx, dword [0x44f890]
test ecx, ecx
je 0x42d968
mov edx, dword [esp + 0x18]
xor esi, esi
mov edi, dword [0x44f894]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0x7e776f1
je 0x42d960
inc esi
cmp ecx, esi
jne 0x42d950
jmp 0x42d968
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
jne 0x42d9ad
mov eax, dword [esp]
and al, 1
mov dword [esp], eax
jmp dword [0x44bf38]
jmp dword [0x44bf44]
push ebx
call fcn.0040c570
add esp, 4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebx
call fcn.0040c570
add esp, 4
jmp dword [0x44bf4c]
mov eax, dword [esp]
add esp, 0x80
pop esi
pop edi
pop ebx
pop ebp
ret
push eax
push 1
push dword [0x44f898]
push ecx
call fcn.0043ff80
add esp, 0x10
mov eax, dword [esp]
and al, 1
mov dword [esp], eax
jmp dword [0x44bf38]
mov byte [ebx], 0xa
inc ebx
lea eax, [esi + 0x9c]
push eax
call fcn.00430fd0
add esp, 4
movzx eax, al
jmp dword [eax*4 + 0x44c524]
jmp dword [0x44c544]
mov dword [esi + 0x14], eax
jmp dword [0x44c514]
movzx ecx, word [eax]
test cx, cx
je 0x4305fc
add eax, 2
xor edx, edx
jmp 0x42ecc1
add edx, edi
movzx ecx, word [eax]
add eax, 2
test cx, cx
je 0x42eeb1
movzx ebx, cx
cmp ebx, 0x800
mov ecx, 3
sbb ecx, 0
mov edi, 1
cmp ebx, 0x80
jb 0x42ecb0
mov edi, ecx
jmp 0x42ecb0
mov edi, ebx
lea eax, [esi + 0x734]
push 0xa
push 0xb
push eax
push dword [esi + 0x9c]
call fcn.00432f30
add esp, 0x10
mov dword [esi + 4], eax
lea eax, [esi + 0x628]
push 0xa
push 0xb
push eax
push dword [esi + 0xa0]
call fcn.00432f30
add esp, 0x10
mov dword [esi], eax
lea eax, [esi + 0x934]
push 0xa
push 0xb
push eax
push dword [esi + 0xa4]
call fcn.00432f30
add esp, 0x10
mov ecx, dword [esi + 0xac]
mov dword [esi + 0x410], 0x7046503e
mov dword [esi + 0x414], 0x828c438d
mov dword [esi + 0x418], 0x8885b28e
mov dword [esi + 0x41c], 0x355a718e
mov dword [esi + 0x420], 0
xor edx, edx
nop
mov ebx, edx
add bl, 9
xor bl, byte [esi + edx + 0x410]
add bl, 0xd3
mov byte [esi + edx + 0x410], bl
inc edx
cmp edx, 0x14
jne 0x42ed70
mov ebx, edi
movzx edx, byte [esi + 0x410]
test dl, dl
je 0x42edab
lea edi, [esi + 0x411]
nop
mov byte [ebx], dl
inc ebx
movzx edx, byte [edi]
inc edi
test dl, dl
jne 0x42eda0
mov byte [ebx], 0
movzx edx, byte [ecx]
test dl, dl
mov edi, ebx
je 0x42edcd
inc ecx
mov ebx, dword [esi + 4]
nop
nop
nop
nop
nop
mov byte [edi], dl
inc edi
movzx edx, byte [ecx]
inc ecx
test dl, dl
jne 0x42edc0
jmp 0x42edd0
mov ebx, dword [esi + 4]
mov word [edi], 0x2820
add edi, 2
movzx ecx, byte [ebx]
test cl, cl
je 0x42edfd
inc ebx
mov edx, dword [esi]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [ebx]
inc ebx
test cl, cl
jne 0x42edf0
jmp 0x42edff
mov edx, dword [esi]
mov byte [edi], 0x2e
inc edi
movzx ecx, byte [edx]
test cl, cl
je 0x42ee1b
inc edx
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42ee10
mov byte [edi], 0x2e
inc edi
movzx ecx, byte [eax]
test cl, cl
je 0x42ee3b
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x42ee30
mov byte [edi], 0x29
inc edi
lea eax, [esi + 0x6c]
push eax
call fcn.00443190
add esp, 4
movzx eax, al
jmp dword [eax*4 + 0x44c52c]
mov dword [esi + 4], edi
jmp 0x42f011
mov byte [edi], 0x20
xor eax, eax
cmp dword [esi + 0x6c], 1
sete al
jmp dword [eax*4 + 0x44c534]
mov dword [esi + 0x410], 0x69beb1fc
mov word [esi + 0x414], 0
xor ecx, ecx
lea eax, [esi + 0x410]
nop
nop
nop
nop
nop
mov edx, ecx
add dl, 0x97
xor dl, byte [esi + ecx + 0x410]
add dl, 0xd
mov byte [esi + ecx + 0x410], dl
inc ecx
cmp ecx, 6
jne 0x42ee90
jmp case.0x42d55c.52
lea eax, [edx + 4]
and eax, 0xfffffffc
call fcn.0040c4c0
mov eax, esp
and eax, 0xfffffff0
mov esp, eax
test edx, edx
jle 0x430604
lea ecx, [eax + edx]
mov dword [esi + 0xc], ecx
inc edx
add edx, eax
mov edi, dword [esi + 0x14]
mov ebx, eax
jmp 0x42eef6
mov byte [ebx], cl
mov dword [esi], 1
add edi, 2
add ebx, dword [esi]
cmp ebx, dword [esi + 0xc]
jae 0x430606
movzx ecx, word [edi]
test cx, cx
je 0x430606
cmp cx, 0x7f
jbe 0x42eee0
mov dword [esi + 8], edi
mov edi, edx
mov dword [esi + 4], ebx
sub edi, ebx
mov ebx, edi
not ebx
and ebx, 1
and edi, 0xfffffffe
sub edi, ebx
movzx ebx, cx
cmp edi, 2
jb 0x42ef60
cmp ebx, 0x7ff
ja 0x42ef60
mov ebx, ecx
shr ebx, 6
add bl, 0xc0
mov edi, dword [esi + 4]
mov byte [edi], bl
mov ebx, edi
and cl, 0x3f
or cl, 0x80
mov byte [edi + 1], cl
mov dword [esi], 2
mov edi, dword [esi + 8]
jmp 0x42eee8
mov dword [esi + 0x10], ebx
mov dword [esi], 0
cmp edi, 3
mov ebx, dword [esi + 4]
mov edi, dword [esi + 8]
jb 0x42eee8
mov ebx, dword [esi + 0x10]
shr ebx, 0xc
or bl, 0xe0
mov edi, dword [esi + 4]
mov byte [edi], bl
mov edi, dword [esi + 8]
mov ebx, dword [esi + 4]
shr dword [esi + 0x10], 6
mov dword [esi], ecx
mov ecx, dword [esi + 0x10]
and cl, 0x3f
or cl, 0x80
mov byte [ebx + 1], cl
mov ecx, dword [esi]
and cl, 0x3f
or cl, 0x80
mov byte [ebx + 2], cl
mov dword [esi], 3
jmp 0x42eee8
mov dword [esi + 0x410], 0xe3d0d268
mov dword [esi + 0x414], 0
xor ecx, ecx
lea eax, [esi + 0x410]
mov edx, ecx
or dl, 0x28
xor dl, byte [esi + ecx + 0x410]
add dl, 0x38
mov byte [esi + ecx + 0x410], dl
mov edx, ecx
and edx, 1
xor ecx, 1
lea ecx, [ecx + edx*2]
cmp ecx, 8
jb 0x42efd0
inc edi
movzx ecx, byte [eax]
test cl, cl
je 0x42f00b
inc eax
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x42f000
mov dword [esi + 4], edi
mov byte [edi], 0
mov dword [esi + 0x410], 0xc7b2a48a
mov dword [esi + 0x414], 0xdbcfcedb
mov dword [esi + 0x418], 0x27cbf588
mov dword [esi + 0x41c], 0xa786efd9
mov eax, 0x9c
nop
nop
movzx ecx, byte [esi + eax + 0x374]
mov edx, ecx
not edx
or edx, eax
add edx, ecx
inc edx
mov edi, edx
and edi, 0xfffffffd
mov ebx, edx
or ebx, 0xfffffffd
inc ebx
imul ebx, edi
mov edi, edx
and edi, 2
or edx, 2
imul edx, edi
add ebx, ecx
sub ebx, edx
lea ecx, [eax + ebx]
add ecx, 0xad792800
mov ebx, ecx
and ebx, 0x9ca234f1
mov edi, ecx
and edi, 2
mov edx, edi
xor edx, 2
imul edx, ebx
or ebx, 2
imul ebx, edi
xor ecx, 0x9ca234f3
add edx, ecx
add edx, ebx
and ecx, 1
or edx, 1
add edx, ecx
mov byte [esi + eax + 0x374], dl
inc eax
cmp eax, 0xac
jne 0x42f040
movzx eax, byte [esi + 0x410]
test al, al
je 0x42f0dd
lea ecx, [esi + 0x411]
mov edi, dword [esi + 4]
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42f0d0
jmp 0x42f0e0
mov edi, dword [esi + 4]
mov byte [edi], 0
movzx eax, byte [esi + 0xb0]
test al, al
je 0x42f10b
lea ecx, [esi + 0xb1]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42f100
mov byte [edi], 0
mov dword [esi + 0x410], 0xdd8ab86a
mov dword [esi + 0x414], 0x8dc5fcc7
mov dword [esi + 0x418], 0xfac0c2d2
mov dword [esi + 0x41c], 0xe1edb78e
mov dword [esi + 0x420], 0x5b91
mov eax, 0x4331af17
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esi + eax - 0x4331ab07]
mov edx, eax
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
mov edx, ecx
and edx, 0xc
xor ecx, 0x8c
lea ecx, [ecx + edx*2]
inc cl
mov byte [esi + eax - 0x4331ab07], cl
inc eax
cmp eax, 0x4331af2b
jne 0x42f150
movzx eax, byte [esi + 0x410]
test al, al
je 0x42f1ab
lea ecx, [esi + 0x411]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42f1a0
mov byte [edi], 0
movzx eax, word [esi + 0xc4]
xor ecx, ecx
test ax, ax
setns cl
jmp dword [ecx*4 + 0x44c53c]
jmp 0x42f1d1
mov byte [edi], 0x2b
inc edi
movzx eax, word [esi + 0xc4]
cwde
push 0xa
push 7
lea ecx, [esi + 0x6c]
push ecx
push eax
call fcn.00433160
add esp, 0x10
movzx ecx, byte [eax]
test cl, cl
je 0x42f1fb
inc eax
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x42f1f0
mov ebx, edi
mov byte [edi], 0
mov dword [esi + 0x410], 0x567e7416
mov dword [esi + 0x414], 0xc2d6aaae
mov dword [esi + 0x418], 0x2306cdcc
mov dword [esi + 0x41c], 0x15cfd1c5
mov dword [esi + 0x420], 0x6908
mov eax, 0xba
mov ecx, 0x45
nop
nop
nop
nop
movzx edi, byte [esi + eax + 0x356]
mov edx, ecx
xor edx, eax
and edx, edi
xor edx, eax
add dl, 0x5e
mov byte [esi + eax + 0x356], dl
inc eax
dec ecx
cmp eax, 0xce
jne 0x42f240
movzx eax, byte [esi + 0x410]
test al, al
je 0x42f28b
lea ecx, [esi + 0x411]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42f280
mov byte [ebx], 0
movzx eax, byte [esi + 0xc6]
test al, al
je 0x42f2ab
lea ecx, [esi + 0xc7]
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42f2a0
mov byte [ebx], 0
jmp dword [0x44c544]
mov eax, dword [esi + 0xac]
test eax, eax
je 0x42f2c7
push eax
call fcn.0040c570
add esp, 4
call fcn.00439ea0
jmp case.0x42d55c.57
call fcn.00439ea0
jmp dword [0x44c54c]
mov eax, dword [esi + 0xac]
test eax, eax
je 0x42f2d0
push eax
call fcn.0040c570
add esp, 4
jmp 0x42f2d0
movzx eax, al
jmp dword [eax*4 + 0x44c554]
mov dword [esi + 4], ebx
mov dword [esi + 0x734], 0x84827c7a
mov dword [esi + 0x738], 0x1377
mov byte [esi + 0x73c], 0
xor ecx, ecx
lea eax, [esi + 0x734]
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, ecx
and edi, 0xa
mov ebx, edx
xor ebx, 0xde437b05
add ebx, edi
movzx edi, byte [esi + edx + 0x734]
xor ebx, edi
add ebx, 0x2e034ec4
mov edi, ebx
xor edi, 0xdd
and ebx, 0x22
add ebx, ebx
sub ebx, edi
mov byte [esi + edx + 0x734], bl
inc edx
add ecx, 2
cmp edx, 9
jne 0x42f330
jmp case.0x42d55c.61
mov dword [esi + 0x410], 0xa2d1adb0
mov byte [esi + 0x414], 0x58
mov dword [esi + 0x415], 0
mov byte [esi + 0x419], 0
xor ecx, ecx
lea eax, [esi + 0x410]
nop
nop
nop
nop
nop
nop
mov edx, ecx
add dl, 0x8f
xor dl, byte [esi + ecx + 0x410]
add dl, 0x35
mov byte [esi + ecx + 0x410], dl
inc ecx
cmp ecx, 0xa
jne 0x42f3a0
mov dword [esi + 4], ebx
mov dword [esi + 0x9c], 0xd2eaf89a
mov dword [esi + 0xa0], 0x3a0c3c3c
mov dword [esi + 0xa4], 0xc73e3808
mov word [esi + 0xa8], 0x9fe0
mov dword [esi + 0xaa], 0
mov ecx, 0xa3
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esi + ecx - 7]
lea edi, [ecx - 0x11efe100]
and edi, edx
or edx, ecx
xor edx, edi
add dl, 0xd1
mov byte [esi + ecx - 7], dl
inc ecx
cmp ecx, 0xb5
jne 0x42f400
movzx ecx, byte [esi + 0x9c]
test cl, cl
je 0x42f44d
lea edx, [esi + 0x9d]
mov ebx, dword [esi + 4]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42f440
jmp 0x42f450
mov ebx, dword [esi + 4]
mov byte [ebx], 0
movzx ecx, byte [eax]
test cl, cl
je 0x42f46b
inc eax
nop
nop
nop
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x42f460
mov byte [ebx], 0
mov byte [esi + 0x3f4], 0
mov dword [esi + 0x54], 0x10
push 0xa031abd0
push dword [0x44f884]
call fcn.00442960
add esp, 8
lea ecx, [esi + 0x54]
lea edx, [esi + 0x3f4]
push ecx
push edx
call eax
mov dword [esi + 0x9c], 0x40626c8a
mov dword [esi + 0xa0], 0x3236282b
mov dword [esi + 0xa4], 0x71382c3c
mov dword [esi + 0xa8], 0x8d6c
mov byte [esi + 0xac], 0
mov eax, 0xe0
movzx ecx, byte [esi + eax - 0x44]
mov edx, eax
and edx, ecx
add edx, edx
sub ecx, edx
add ecx, eax
add ecx, 0xf8c53f9f
mov edx, ecx
and edx, 1
xor ecx, 1
lea ecx, [ecx + edx*2]
mov byte [esi + eax - 0x44], cl
inc eax
cmp eax, 0xf1
jne 0x42f4d0
movzx eax, byte [esi + 0x9c]
test al, al
je 0x42f51b
lea ecx, [esi + 0x9d]
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42f510
mov byte [ebx], 0
movzx eax, byte [esi + 0x3f4]
test al, al
je 0x42f53b
lea ecx, [esi + 0x3f5]
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42f530
mov edi, ebx
mov byte [ebx], 0
mov dword [esi + 0x734], 0
mov dword [esi + 0x738], 0
mov eax, dword [0x44e578]
mov dword [esi + 0x9c], 0x13ae11b1
mov dword [esi + 0xa0], 0x6fcf6de2
mov dword [esi + 0xa4], 0x6bd369d8
mov dword [esi + 0xa8], 0x67146517
mov dword [esi + 0xac], 0x63de6116
mov dword [esi + 0xb0], 0x7fca7dc8
mov dword [esi + 0xb4], 0x7978
mov byte [esi + 0xb8], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, ecx
add dl, 0x3c
xor dl, byte [esi + ecx + 0x9c]
add dl, 0xd4
mov byte [esi + ecx + 0x9c], dl
inc ecx
cmp ecx, 0x1d
jne case.default.0x42f5eb
push 0x800
push 0
lea ebx, [esi + 0x9c]
push ebx
call eax
lea ecx, [esi + 0x734]
push eax
call fcn.0043f070
movzx eax, al
jmp dword [eax*4 + 0x44c55c]
jmp 0x42f70c
mov byte [esi + 0x9c], 0
mov dword [esi + 0x628], 0x101
push 0x4de9976
push dword [esi + 0x734]
call fcn.00442960
add esp, 8
lea ecx, [esi + 0x628]
push ecx
push ebx
call eax
mov dword [esi + 0x410], 0x5a6e7496
mov dword [esi + 0x414], 0x4d34283b
mov word [esi + 0x418], 0x8160
mov dword [esi + 0x41a], 0
mov byte [esi + 0x41e], 0
mov eax, 0x197e39d
mov ecx, 0x36681c62
nop
nop
nop
mov ebx, eax
and ebx, 0x107c044
mov edx, ecx
and edx, 0x2228103b
or edx, ebx
movzx ebx, byte [esi + ecx - 0x36681852]
xor edx, ebx
lea ebx, [edx + edx]
and ebx, 0x2a
xor ebx, 8
xor edx, 0xfab0be51
add ebx, edx
and edx, 1
xor ebx, 1
lea edx, [ebx + edx*2]
mov byte [esi + ecx - 0x36681852], dl
dec eax
inc ecx
cmp eax, 0x197e38e
jne 0x42f660
movzx eax, byte [esi + 0x410]
test al, al
je 0x42f6cb
lea ecx, [esi + 0x411]
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42f6c0
mov edx, edi
mov byte [edi], 0
movzx eax, byte [esi + 0x9c]
test al, al
je 0x42f6fb
lea ecx, [esi + 0x9d]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42f6f0
mov edi, edx
mov byte [edx], 0
push dword [esi + 0x734]
call dword [0x44e67c]
push 0x52d6fd7
push dword [0x44f884]
call fcn.00442960
add esp, 8
mov ebx, eax
mov byte [esi + 0x410], 0
mov dword [esi + 0x50], 0x200
lea eax, [esi + 0x50]
lea ecx, [esi + 0x410]
push eax
push ecx
push 6
call ebx
mov dword [esi + 0x9c], 0x87e2ecca
mov dword [esi + 0xa0], 0xaea7a8ab
mov dword [esi + 0xa4], 0xcbea93a6
xor eax, eax
nop
nop
movzx ecx, byte [esi + eax + 0x9c]
lea edx, [ecx + ecx]
not edx
add edx, ecx
and edx, 0x32
and ecx, 0xffffffcd
or ecx, edx
xor ecx, eax
xor cl, 0x62
add cl, 0x70
mov byte [esi + eax + 0x9c], cl
inc eax
cmp eax, 0xc
jne 0x42f760
movzx eax, byte [esi + 0x9c]
test al, al
je 0x42f7ab
lea ecx, [esi + 0x9d]
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42f7a0
mov edx, edi
mov byte [edi], 0
movzx eax, byte [esi + 0x410]
test al, al
je 0x42f7db
lea ecx, [esi + 0x411]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42f7d0
mov edi, edx
mov byte [edx], 0
mov byte [esi + 0x734], 0
mov dword [esi + 0x4c], 0x200
lea eax, [esi + 0x4c]
push eax
lea eax, [esi + 0x734]
push eax
push 5
call ebx
mov dword [esi + 0x9c], 0xb222c4a
mov dword [esi + 0xa0], 0xe9d2d6eb
mov dword [esi + 0xa4], 0x11efe4e9
mov dword [esi + 0xa8], 0x4d2c
mov eax, 0xa827aff0
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esi + eax + 0x57d850ac]
mov edx, ecx
and edx, eax
add dl, dl
sub cl, dl
movzx ecx, cl
add ecx, eax
add cl, 0x50
mov byte [esi + eax + 0x57d850ac], cl
inc eax
cmp eax, 0xa827b000
jne 0x42f830
movzx eax, byte [esi + 0x9c]
test al, al
je 0x42f87b
lea ecx, [esi + 0x9d]
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42f870
mov byte [edi], 0
movzx eax, byte [esi + 0x734]
test al, al
je 0x42f89b
lea ecx, [esi + 0x735]
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42f890
mov byte [edi], 0
mov byte [esi + 0x3e4], 0
mov dword [esi + 0x48], 0x10
lea eax, [esi + 0x48]
lea ecx, [esi + 0x3e4]
push eax
push ecx
push 4
call ebx
mov dword [esi + 0x9c], 0xa59284fa
mov dword [esi + 0xa0], 0xb6bc4151
mov dword [esi + 0xa4], 0x9b80aaaf
mov byte [esi + 0xa8], 0xc4
mov dword [esi + 0xa9], 0
mov dword [esi + 0xac], 0
mov eax, 0x54
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esi + eax + 0x48]
mov edx, ecx
and edx, eax
add dl, dl
sub cl, dl
movzx ecx, cl
add ecx, eax
add cl, 0x5c
mov byte [esi + eax + 0x48], cl
inc eax
cmp eax, 0x68
jne 0x42f900
movzx eax, byte [esi + 0x9c]
test al, al
lea ebx, [esi + 0x9c]
je 0x42f94b
lea ecx, [esi + 0x9d]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42f940
mov byte [edi], 0
movzx eax, byte [esi + 0x3e4]
test al, al
je 0x42f96b
lea ecx, [esi + 0x3e5]
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42f960
mov byte [edi], 0
mov word [esi + 0x934], 0
push 0xfc327aac
push dword [0x44f884]
call fcn.00442960
add esp, 8
lea ecx, [esi + 0x934]
push 0x56
push ecx
call eax
mov dword [esi + 0x9c], 0x53a28da
mov dword [esi + 0xa0], 0x56676d7f
mov dword [esi + 0xa4], 0x1f696a7b
mov dword [esi + 0xa8], 0xd730
mov byte [esi + 0xac], 0
mov eax, 0x50
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [ebx]
lea ecx, [eax - 0x1fc16e00]
or ecx, edx
and edx, eax
not ecx
or ecx, edx
mov edx, ecx
xor edx, 0x6c
and ecx, 0x13
add ecx, ecx
sub ecx, edx
inc cl
mov byte [ebx], cl
inc ebx
dec eax
cmp eax, 0x3f
jne 0x42f9d0
movzx eax, byte [esi + 0x9c]
test al, al
je 0x42fa1d
lea ecx, [esi + 0x9d]
lea edx, [esi + 0x934]
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42fa10
jmp 0x42fa23
lea edx, [esi + 0x934]
mov byte [edi], 0
xor eax, eax
mov ecx, edi
mov dword [esi + 4], edi
jmp 0x42fa4a
mov byte [ecx], dl
mov ebx, 1
mov edx, dword [esi]
add edx, 2
add eax, ebx
lea ecx, [edi + eax]
cmp eax, 0x55
jae 0x42fada
mov dword [esi], edx
movzx edx, word [edx]
test dx, dx
je 0x42fada
cmp dx, 0x7f
jbe 0x42fa30
mov edi, 0x56
sub edi, eax
mov ebx, edi
not ebx
and ebx, 1
and edi, 0xfffffffe
sub edi, ebx
movzx ebx, dx
cmp edi, 2
jb 0x42faa0
cmp ebx, 0x7ff
ja 0x42faa0
mov ebx, edx
shr ebx, 6
add bl, 0xc0
mov byte [ecx], bl
and dl, 0x3f
or dl, 0x80
mov byte [ecx + 1], dl
mov ebx, 2
mov edi, dword [esi + 4]
jmp 0x42fa37
mov dword [esi + 8], ebx
xor ebx, ebx
cmp edi, 3
mov edi, dword [esi + 4]
jb 0x42fa37
mov ebx, dword [esi + 8]
shr ebx, 0xc
or bl, 0xe0
mov byte [ecx], bl
mov ebx, dword [esi + 8]
shr ebx, 6
and bl, 0x3f
or bl, 0x80
mov byte [ecx + 1], bl
and dl, 0x3f
or dl, 0x80
mov byte [ecx + 2], dl
mov ebx, 3
jmp 0x42fa37
mov byte [ecx], 0
mov dword [esi + 0x9c], 0xd6eaf89a
mov dword [esi + 0xa0], 0xe5310b3a
mov dword [esi + 0xa4], 0xa0c342e
mov word [esi + 0xa8], 0xd90d
mov byte [esi + 0xaa], 0x9e
mov word [esi + 0xab], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, ecx
and edi, 1
mov edx, ecx
and edx, 2
mov ebx, edx
xor ebx, 2
imul ebx, edi
or edi, 2
imul edi, edx
mov edx, ecx
xor edx, 0x9ff24b23
add edx, ebx
movzx ebx, byte [esi + ecx + 0x9c]
add edx, edi
mov edi, edx
and edi, ebx
add edx, ebx
add edi, edi
sub edx, edi
mov edi, edx
and edi, 0x50
xor edx, 0x50
lea edx, [edx + edi*2]
inc dl
mov byte [esi + ecx + 0x9c], dl
inc ecx
cmp ecx, 0x11
jne 0x42fb20
mov edi, dword [esi + 4]
add edi, eax
movzx eax, byte [esi + 0x9c]
test al, al
je 0x42fb9b
lea ecx, [esi + 0x9d]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42fb90
mov byte [edi], 0
call fcn.00433440
mov ebx, eax
xor eax, eax
test ebx, ebx
setne al
jmp dword [eax*4 + 0x44c564]
mov ebx, edi
mov dword [esi + 0x9c], 0x7347989a
mov dword [esi + 0xa0], 0x32080a2a
mov byte [esi + 0xa4], 0x98
mov word [esi + 0xa5], 0
mov byte [esi + 0xa7], 0
mov eax, 0x64
mov ecx, 0x9b
nop
nop
nop
nop
nop
nop
movzx edi, byte [esi + eax + 0x38]
mov edx, ecx
xor edx, eax
and edx, edi
xor edx, eax
add dl, 0xc
mov byte [esi + eax + 0x38], dl
inc eax
dec ecx
cmp eax, 0x70
jne 0x42fbf0
movzx eax, byte [esi + 0x9c]
test al, al
je 0x42febf
lea ecx, [esi + 0x9d]
mov edi, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42fc30
mov byte [edi], 0
jmp case.0x42f5eb.20
mov eax, dword [case.0x42f5eb.6]
mov dword [esi + 0xc], ebx
nop
nop
nop
nop
nop
mov ecx, ebx
jmp eax
mov ecx, dword [ecx]
xor eax, eax
test ecx, ecx
setne al
jmp dword [eax*4 + 0x44c594]
mov dword [edi], 0x202d090a
add edi, 4
mov dword [esi + 8], ecx
mov ecx, dword [ecx + 8]
movzx edx, byte [ecx]
test dl, dl
je 0x42fc9b
inc ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], dl
inc edi
movzx edx, byte [ecx]
inc ecx
test dl, dl
jne 0x42fc90
mov byte [edi], 0
xor eax, eax
mov ecx, dword [esi + 8]
cmp byte [ecx + 4], 3
setb al
jmp dword [eax*4 + 0x44c57c]
mov byte [edi], 0x20
movzx eax, byte [ecx + 4]
xor ecx, ecx
test al, al
sete cl
jmp dword [ecx*4 + 0x44c584]
mov dword [esi + 4], edi
xor ecx, ecx
cmp al, 1
sete cl
jmp dword [ecx*4 + 0x44c58c]
mov dword [esi + 0x9c], 0x58585e59
mov dword [esi + 0xa0], 0x69655159
mov word [esi + 0xa4], 0x534f
mov dword [esi + 0xa6], 0
mov ecx, 0xf63dd337
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esi + ecx + 0x9c22d65]
mov eax, ecx
xor eax, edx
lea edi, [eax + eax]
not edi
add edi, eax
and edi, ecx
add edi, edi
sub edx, edi
add edx, ecx
mov eax, edx
not eax
and eax, 0xb0
and edx, 0x4f
sub edx, eax
add dl, 0x9d
mov byte [esi + ecx + 0x9c22d65], dl
inc ecx
cmp ecx, 0xf63dd345
jne 0x42fd10
lea ecx, [esi + 0x9c]
jmp case.0x42d55c.73
mov dword [esi + 4], edi
mov dword [esi + 0x9c], 0xc5c4cedb
mov dword [esi + 0xa0], 0x5d9
xor ecx, ecx
mov edx, 0xa38e3f
nop
nop
movzx ebx, byte [esi + ecx + 0x9c]
mov eax, edx
and eax, 0xa18a2b
mov edi, ecx
and edi, 4
add eax, edi
add eax, 0x50c70c0
xor eax, ebx
lea edi, [eax + eax]
xor edi, 0x57
xor eax, 0x54
add eax, edi
mov edi, ecx
xor edi, 0x3f
or eax, edi
add al, al
add al, bl
movzx eax, al
add eax, ecx
add al, 2
mov byte [esi + ecx + 0x9c], al
inc ecx
dec edx
cmp ecx, 8
jne 0x42fd80
jmp 0x42fe52
mov dword [esi + 0x9c], 0xc6d0d6c1
mov byte [esi + 0xa0], 0x20
mov dword [esi + 0xa1], 0
xor edi, edi
nop
nop
nop
nop
nop
nop
movzx ebx, byte [esi + edi + 0x9c]
mov dword [esi], ebx
mov ecx, edi
xor ecx, 0xcf9aca86
mov eax, edi
or eax, 0x30653579
and ecx, eax
add ecx, eax
mov edx, ecx
and edx, ebx
mov ebx, edx
and ebx, 0xfffffffd
mov eax, edx
or eax, 0xfffffffd
inc eax
imul eax, ebx
mov ebx, edx
and ebx, 2
or edx, 2
imul edx, ebx
sub eax, edx
add ecx, dword [esi]
add eax, ecx
mov edx, eax
and edx, 0x22
xor eax, 0xa2
lea eax, [eax + edx*2]
and ecx, 1
or eax, 1
add eax, ecx
mov byte [esi + edi + 0x9c], al
inc edi
cmp edi, 9
jne 0x42fdf0
lea ecx, [esi + 0x9c]
mov ebx, dword [esi + 0xc]
mov edi, dword [esi + 4]
inc edi
movzx edx, byte [ecx]
test dl, dl
je 0x42fe7b
inc ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], dl
inc edi
movzx edx, byte [ecx]
inc ecx
test dl, dl
jne 0x42fe70
mov byte [edi], 0
mov ecx, dword [esi + 8]
mov ecx, dword [ecx]
xor eax, eax
test ecx, ecx
setne al
jmp dword [eax*4 + 0x44c594]
jmp dword [0x44c5ac]
mov ecx, ebx
call fcn.00434ec0
jmp dword [0x44c5b8]
push ebx
call fcn.0040c570
add esp, 4
nop
nop
nop
push ebx
call fcn.0040c570
add esp, 4
jmp dword [0x44c5c0]
mov edi, ebx
mov byte [ebx], 0
mov dword [esi + 0x9c], 0x13a28da
mov dword [esi + 0xa0], 0x131a0071
mov word [esi + 0xa4], 0xd33c
mov dword [esi + 0xa6], 0
mov byte [esi + 0xaa], 0
mov eax, 0xc6aab92f
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esi + eax + 0x3955476d]
xor ecx, eax
mov edx, ecx
and edx, 0x59
xor ecx, 0xd9
lea ecx, [ecx + edx*2]
add cl, 0x3c
mov byte [esi + eax + 0x3955476d], cl
inc eax
cmp eax, 0xc6aab93e
jne 0x42ff00
movzx eax, byte [esi + 0x9c]
test al, al
je 0x42ff4b
lea ecx, [esi + 0x9d]
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42ff40
mov byte [edi], 0
movzx eax, byte [0x44e51c]
test al, al
je 0x42ff71
xor ecx, ecx
nop
nop
nop
nop
nop
mov byte [edi + ecx], al
movzx eax, byte [ecx + 0x44e51d]
inc ecx
test al, al
jne 0x42ff60
add edi, ecx
mov dword [esi + 4], edi
mov byte [edi], 0
mov dword [esi + 0x3c], 0
mov dword [esi + 0x38], 0
push 0xfd7a6173
push dword [0x44f884]
call fcn.00442960
add esp, 8
lea ecx, [esi + 0x38]
push ecx
call eax
mov eax, dword [esi + 0x38]
mov ecx, dword [esi + 0x3c]
shld ecx, eax, 0x16
lea eax, [esi + 0x611]
push 0xa
push 0xb
push eax
push ecx
call fcn.00432f30
add esp, 0x10
mov dword [esi], eax
mov word [esi + 0x628], 0x4d43
mov byte [esi + 0x62a], 0x8e
mov dword [esi + 0x62b], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
mov edx, ecx
add dl, 0xdd
xor dl, byte [esi + ecx + 0x628]
add dl, 0xaf
mov byte [esi + ecx + 0x628], dl
inc ecx
cmp ecx, 7
jne 0x42ffe0
mov dword [esi + 0x9c], 0x49beb496
mov dword [esi + 0xa0], 0x7482505d
mov dword [esi + 0xa4], 0x99435f49
mov word [esi + 0xa8], 0xa584
mov dword [esi + 0xaa], 0
mov byte [esi + 0xae], 0
lea ecx, [esi + 0x9c]
mov edx, 0x246ab225
nop
movzx ebx, byte [ecx]
mov edi, edx
or edi, ebx
lea eax, [edx - 0x246ab200]
and eax, ebx
not edi
or edi, eax
add edi, 0xb6157abd
mov eax, edi
and eax, 1
xor edi, 1
lea eax, [edi + eax*2]
mov byte [ecx], al
inc ecx
dec edx
cmp edx, 0x246ab212
jne 0x430040
movzx ecx, byte [esi + 0x9c]
test cl, cl
je 0x43009d
lea edx, [esi + 0x9d]
mov edi, dword [esi + 4]
mov eax, dword [esi]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x430090
jmp 0x4300a2
mov edi, dword [esi + 4]
mov eax, dword [esi]
mov byte [edi], 0
movzx ecx, byte [eax]
test cl, cl
je 0x4300bb
inc eax
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x4300b0
mov byte [edi], 0
movzx eax, byte [esi + 0x628]
test al, al
je 0x4300db
lea ecx, [esi + 0x629]
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x4300d0
xor eax, eax
xor ecx, ecx
cpuid
mov dword [esi + 0x5c], ebx
mov ebx, edi
mov byte [edi], 0
mov dword [esi + 0x60], edx
mov dword [esi + 0x64], ecx
mov byte [esi + 0x68], 0
mov dword [esi + 0x9c], 0x98f6fcde
mov dword [esi + 0xa0], 0x89f28884
mov dword [esi + 0xa4], 0xacb2a3bd
mov dword [esi + 0xa8], 0xdbfa9ba2
mov byte [esi + 0xac], 0
mov eax, 0x4e
mov ecx, 0x31
nop
nop
nop
nop
mov edi, eax
and edi, 0x47
mov edx, ecx
and edx, 0x38
or edx, edi
xor dl, byte [esi + eax + 0x4e]
xor dl, 0xb8
add dl, 0xfa
mov byte [esi + eax + 0x4e], dl
inc eax
dec ecx
cmp eax, 0x5f
jne 0x430130
movzx eax, byte [esi + 0x9c]
test al, al
je 0x43017b
lea ecx, [esi + 0x9d]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x430170
mov byte [ebx], 0
movzx eax, byte [esi + 0x5c]
test al, al
je 0x43019b
lea ecx, [esi + 0x5d]
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x430190
mov dword [esi + 4], ebx
mov byte [ebx], 0
mov eax, reloc.OLEAUT32.dll_SysReAllocString
xor ecx, ecx
cpuid
mov dword [esi + 0x6c], eax
mov dword [esi + 0x70], ebx
mov dword [esi + 0x74], ecx
mov dword [esi + 0x78], edx
mov eax, SysStringLen
mov ecx, 0
cpuid
mov dword [esi + 0x7c], eax
mov dword [esi + 0x80], ebx
mov dword [esi + 0x84], ecx
mov dword [esi + 0x88], edx
mov eax, SysStringLen
mov ecx, 0
cpuid
mov dword [esi + 0x8c], eax
mov dword [esi + 0x90], ebx
mov dword [esi + 0x94], ecx
mov dword [esi + 0x98], edx
lea edx, [esi + 0x734]
lea edi, [esi + 0x704]
lea ebx, [esi + 0x6c]
mov ecx, 0xc
xchg esi, ebx
rep movsd dword es:[edi], dword [esi]
xchg esi, ebx
lea ebx, [esi + 0x9c]
xor ecx, ecx
mov edi, edx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov ecx, edx
dec ecx
xor ebx, ebx
cmp byte [edx - 1], 0x20
sete bl
jmp dword [ebx*4 + 0x44c5c4]
mov byte [ecx], 0
xor edx, edx
cmp byte [ecx - 1], 0x20
lea ecx, [ecx - 1]
sete dl
jmp dword [edx*4 + 0x44c5c4]
xor eax, eax
lea ecx, [esi + 0x704]
cmp byte [ecx], 0x20
sete al
jmp dword [eax*4 + 0x44c5cc]
inc ecx
xor eax, eax
cmp byte [ecx], 0x20
sete al
jmp dword [eax*4 + 0x44c5cc]
mov dword [esi], ecx
mov dword [esi + 0x9c], 0x543e4026
mov dword [esi + 0xa0], 0x6b326460
mov dword [esi + 0xa4], 0x43718877
mov word [esi + 0xa8], 0xb28
mov dword [esi + 0xaa], 0
mov word [esi + 0xae], 0
xor eax, eax
xor edx, edx
movzx ebx, byte [esi + edx + 0x9c]
mov ecx, eax
and ecx, 0xa
mov edi, edx
xor edi, 0x23984485
add edi, ecx
xor edi, ebx
mov ecx, 0x99
sub ecx, edi
mov ebx, edi
or ebx, 1
add ebx, edi
or ecx, 1
add ebx, ecx
add bl, 0xcd
mov byte [esi + edx + 0x9c], bl
inc edx
add eax, 2
cmp edx, 0x14
jne 0x4302c0
movzx ecx, byte [esi + 0x9c]
test cl, cl
je 0x43032d
lea edx, [esi + 0x9d]
mov eax, dword [esi + 4]
mov edi, dword [esi]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x430320
jmp 0x430332
mov eax, dword [esi + 4]
mov edi, dword [esi]
mov byte [eax], 0
movzx ecx, byte [edi]
test cl, cl
je 0x43034c
nop
nop
nop
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edi + 1]
inc edi
test cl, cl
jne 0x430340
mov dword [esi + 4], eax
mov byte [eax], 0
mov dword [esi + 0x9c], 0xfcfdfeff
xor eax, eax
nop
nop
movzx ecx, byte [esi + eax + 0x9c]
mov edi, eax
and edi, ecx
add edi, edi
lea ebx, [eax + 0x5dfc6000]
xor ebx, edi
mov edx, eax
xor edx, 0x22039fff
and edx, edi
add edx, edx
sub edx, ebx
mov edi, ecx
not edi
and edi, edx
not edx
and edx, ecx
sub edx, edi
mov byte [esi + eax + 0x9c], dl
inc eax
cmp eax, 4
jne 0x430360
mov eax, dword [esi + 0x9c]
mov ecx, dword [0x44f890]
test ecx, ecx
je case.default.0x4303fb
xor edx, edx
mov edi, dword [0x44f894]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + edx*8], 0xc85f7986
je 0x4303d0
inc edx
cmp ecx, edx
jne 0x4303c0
jmp case.default.0x4303fb
mov ecx, dword [edi + edx*8 + 4]
cmp ecx, eax
je case.default.0x4303fb
lea eax, [esi + 0x9c]
push 0
push 0x2c
push eax
push 0
push 4
push dword [0x44f898]
push ecx
call fcn.0043ff80
add esp, 0x1c
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44c5d4]
mov dword [esi], 0
jmp 0x430413
movzx eax, byte [esi + 0xc4]
mov dword [esi], eax
mov eax, 0xb
xor ecx, ecx
cpuid
mov edi, ebx
sar ecx, 8
mov eax, ecx
xor eax, 0xffffff00
or ecx, 0xff
and ecx, eax
xor eax, eax
cmp ecx, 1
sete al
jmp dword [eax*4 + 0x44c5dc]
jmp dword [0x44c5e8]
mov eax, 0xb
mov ecx, 1
cpuid
mov edi, ebx
jmp dword [0x44c5ec]
mov eax, 0xb
mov ecx, 1
cpuid
mov edi, ebx
jmp dword [0x44c5ec]
jmp dword [0x44c5fc]
sar ecx, 8
mov eax, ecx
not eax
or eax, 0xff
xor edx, edx
add eax, ecx
sete dl
jmp dword [edx*4 + 0x44c604]
movzx eax, byte [esi]
mov dword [esi + 8], eax
xor eax, eax
xor ecx, ecx
cpuid
cmp eax, 4
jl 0x4305bc
mov eax, 4
xor ecx, ecx
cpuid
sar eax, 0x1a
jmp 0x4305f1
mov eax, 0xb
xor ecx, ecx
cpuid
sar ecx, 8
mov eax, ecx
xor eax, 0xffffff00
or ecx, 0xff
and ecx, eax
xor eax, eax
cmp ecx, 2
sete al
jmp dword [eax*4 + 0x44c60c]
mov eax, 0xb
mov ecx, 1
cpuid
and ecx, 0xff00
xor eax, eax
cmp ecx, 0x200
sete al
jmp dword [eax*4 + 0x44c614]
movzx edi, byte [esi]
xor eax, eax
xor ecx, ecx
cpuid
cmp eax, 4
jl 0x4307e0
mov eax, 4
xor ecx, ecx
cpuid
jmp 0x43057a
xor eax, eax
and edi, 0xffff
sete al
jmp dword [eax*4 + 0x44c62c]
jmp dword [0x44c63c]
movzx eax, bx
xor edx, edx
div edi
mov dword [esi], eax
jmp case.0x42d55c.113
mov edi, ebx
xor eax, eax
xor ecx, ecx
cpuid
cmp eax, 4
jl 0x430582
mov eax, 4
xor ecx, ecx
cpuid
sar eax, 0x1a
jmp 0x430810
mov eax, SysReAllocString
xor ecx, ecx
cpuid
mov dword [esi], eax
mov eax, 1
xor ecx, ecx
cpuid
test edx, 0x10000000
je 0x430815
cmp dword [esi], reloc.OLEAUT32.dll_VariantClear
jl 0x430815
mov eax, reloc.OLEAUT32.dll_VariantClear
xor ecx, ecx
cpuid
jmp 0x43080d
mov eax, SysReAllocString
xor ecx, ecx
cpuid
mov edi, eax
mov eax, 1
xor ecx, ecx
cpuid
mov eax, 1
test edx, 0x10000000
je 0x4305f2
cmp edi, reloc.OLEAUT32.dll_VariantClear
jl 0x4305f2
mov eax, reloc.OLEAUT32.dll_VariantClear
xor ecx, ecx
cpuid
movzx eax, cl
inc eax
mov dword [esi], eax
mov ebx, dword [esi + 8]
jmp case.0x4303fb.30
push eax
mov eax, esp
and eax, 0xfffffff0
mov esp, eax
mov ebx, eax
mov byte [ebx], 0
movzx ecx, byte [eax]
mov edx, dword [esi + 0x18]
test cl, cl
je 0x43062b
inc eax
mov edx, dword [esi + 0x18]
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], cl
inc edx
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x430620
mov byte [edx], 0
mov eax, dword [esi + 0x14]
jmp case.0x42d55c.45
mov byte [ebx], 0
jmp dword [0x44c51c]
movzx ecx, word [eax]
test cx, cx
je 0x4307a0
add eax, 2
xor edx, edx
jmp 0x43066d
add edx, edi
movzx ecx, word [eax]
add eax, 2
test cx, cx
je 0x430690
movzx ebx, cx
cmp ebx, 0x800
mov ecx, 3
sbb ecx, 0
mov edi, 1
cmp ebx, 0x80
jb 0x430660
mov edi, ecx
jmp 0x430660
lea eax, [edx + 4]
and eax, 0xfffffffc
call fcn.0040c4c0
mov edi, esp
and edi, 0xfffffff0
mov esp, edi
test edx, edx
jle 0x4307b0
lea eax, [edi + edx]
mov dword [esi + 0xc], eax
inc edx
add edx, edi
mov eax, dword [esi + 0x14]
mov ebx, edi
jmp 0x4306d6
mov byte [ebx], cl
mov dword [esi], 1
add eax, 2
add ebx, dword [esi]
cmp ebx, dword [esi + 0xc]
jae 0x4307b2
movzx ecx, word [eax]
test cx, cx
je 0x4307b2
cmp cx, 0x7f
jbe 0x4306c0
mov dword [esi + 8], eax
mov eax, edx
mov dword [esi + 4], ebx
sub eax, ebx
mov ebx, eax
not ebx
and ebx, 1
and eax, 0xfffffffe
sub eax, ebx
movzx ebx, cx
cmp eax, 2
jb 0x430740
cmp ebx, 0x7ff
ja 0x430740
mov ebx, ecx
shr ebx, 6
add bl, 0xc0
mov eax, dword [esi + 4]
mov byte [eax], bl
mov ebx, eax
and cl, 0x3f
or cl, 0x80
mov byte [eax + 1], cl
mov dword [esi], 2
mov eax, dword [esi + 8]
jmp 0x4306c8
mov dword [esi + 0x10], ebx
mov dword [esi], 0
cmp eax, 3
mov ebx, dword [esi + 4]
mov eax, dword [esi + 8]
jb 0x4306c8
mov ebx, dword [esi + 0x10]
shr ebx, 0xc
or bl, 0xe0
mov eax, dword [esi + 4]
mov byte [eax], bl
mov eax, dword [esi + 8]
mov ebx, dword [esi + 4]
shr dword [esi + 0x10], 6
mov dword [esi], ecx
mov ecx, dword [esi + 0x10]
and cl, 0x3f
or cl, 0x80
mov byte [ebx + 1], cl
mov ecx, dword [esi]
and cl, 0x3f
or cl, 0x80
mov byte [ebx + 2], cl
mov dword [esi], 3
jmp 0x4306c8
push eax
mov edi, esp
and edi, 0xfffffff0
mov esp, edi
mov ebx, edi
jmp 0x4307b5
mov ebx, edi
mov eax, dword [esi + 0x14]
mov byte [ebx], 0
movzx ecx, byte [edi]
mov ebx, dword [esi + 0x18]
test cl, cl
je 0x430640
inc edi
mov ebx, dword [esi + 0x18]
nop
nop
nop
nop
nop
nop
mov byte [ebx], cl
inc ebx
movzx ecx, byte [edi]
inc edi
test cl, cl
jne 0x4307d0
jmp 0x430640
mov eax, SysReAllocString
xor ecx, ecx
cpuid
mov dword [esi], eax
mov eax, 1
xor ecx, ecx
cpuid
test edx, 0x10000000
je 0x430815
cmp dword [esi], reloc.OLEAUT32.dll_VariantClear
jl 0x430815
mov eax, reloc.OLEAUT32.dll_VariantClear
xor ecx, ecx
cpuid
movzx eax, cl
inc eax
mov dword [esi], eax
jmp 0x43081b
mov dword [esi], 1
mov ebx, edi
mov eax, dword [case.0x4303fb.30]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
lea ecx, [esi + 0x58]
movzx eax, bx
push 0xa
push 4
push ecx
push eax
call fcn.00434ef0
add esp, 0x10
mov dword [esi + 8], eax
mov dword [esi + 0x9c], 0xd8fef416
mov dword [esi + 0xa0], 0x3702c8cc
mov dword [esi + 0xa4], 0x46435748
mov dword [esi + 0xa8], 0xb145240
mov byte [esi + 0xac], 0xe8
mov dword [esi + 0xad], 0
mov dword [esi + 0xb0], 0
lea eax, [esi + 0x9c]
mov edx, 0x85
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edi, byte [eax]
lea ebx, [edx - 0x4b6ee100]
or ebx, edi
not ebx
and edi, edx
or edi, ebx
mov ebx, edi
and ebx, 0x1d
mov ecx, edi
xor ecx, 0x86d59d9d
lea ebx, [ecx + ebx*2]
and ecx, 1
and edi, 1
lea ecx, [edi + ecx*2]
and ebx, 0xfe
add ecx, ebx
mov byte [eax], cl
inc eax
dec edx
cmp edx, 0x6d
jne 0x4308a0
movzx ecx, byte [esi + 0x9c]
test cl, cl
je 0x4308fd
lea edx, [esi + 0x9d]
mov eax, dword [esi + 4]
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x4308f0
jmp 0x430900
mov eax, dword [esi + 4]
mov byte [eax], 0
mov edx, dword [esi + 8]
movzx ecx, byte [edx]
test cl, cl
je 0x43091b
inc edx
nop
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x430910
mov dword [esi + 4], eax
mov byte [eax], 0
movzx eax, byte [esi]
push 0xa
push 4
lea ecx, [esi + 0x58]
push ecx
push eax
call fcn.0040db70
add esp, 0x10
mov dword [esi], eax
mov dword [esi + 0x9c], 0xec0af82a
mov dword [esi + 0xa0], 0xe80ed4d8
mov dword [esi + 0xa4], 0x443945bd
mov word [esi + 0xa8], 0xf70e
mov byte [esi + 0xaa], 0xd6
mov word [esi + 0xab], 0
mov byte [esi + 0xad], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, ecx
and edi, 0x15
mov edx, ecx
and edx, 2
mov ebx, edx
xor ebx, 2
imul ebx, edi
or edi, 2
imul edi, edx
mov edx, ecx
xor edx, 0xe55b95f7
add edx, ebx
movzx eax, byte [esi + ecx + 0x9c]
add edx, edi
mov ebx, edx
and ebx, eax
add ebx, ebx
add edx, eax
mov eax, edx
not eax
and eax, ebx
not ebx
and ebx, edx
sub ebx, eax
add bl, 0x2d
mov byte [esi + ecx + 0x9c], bl
inc ecx
cmp ecx, 0x12
jne 0x430980
movzx ecx, byte [esi + 0x9c]
test cl, cl
je 0x4309fd
lea edx, [esi + 0x9d]
mov eax, dword [esi + 4]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x4309f0
jmp 0x430a00
mov eax, dword [esi + 4]
mov byte [eax], 0
mov edx, dword [esi]
movzx ecx, byte [edx]
test cl, cl
je 0x430a1b
inc edx
nop
nop
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x430a10
mov ebx, eax
mov byte [eax], 0
mov dword [esi + 0x9c], 0xac968c6e
mov dword [esi + 0xa0], 0x93b4d8a4
mov byte [esi + 0xa4], 0x70
mov dword [esi + 0xa5], 0
mov byte [esi + 0xa9], 0
mov eax, 0x16
mov ecx, 0xe9
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, ecx
and edi, 0x83
mov edx, eax
and edx, 0x3c
or edx, edi
xor dl, byte [esi + eax + 0x86]
xor dl, 0x83
add dl, 0x92
mov byte [esi + eax + 0x86], dl
inc eax
dec ecx
cmp eax, 0x24
jne 0x430a60
movzx eax, byte [esi + 0x9c]
test al, al
je 0x430aab
lea ecx, [esi + 0x9d]
nop
nop
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x430aa0
mov dword [esi + 4], ebx
mov byte [ebx], 0
mov eax, dword [0x44e578]
mov dword [esi + 0xc], eax
mov dword [esi + 0x9c], 0x59ef5bcf
mov dword [esi + 0xa0], 0x5de85fe3
mov dword [esi + 0xa4], 0x51245329
mov dword [esi + 0xa8], 0x55f25722
mov dword [esi + 0xac], 0xa916abe8
mov dword [esi + 0xb0], 0xafa8
mov ecx, 0xf581d455
mov eax, 0xeb03a8aa
nop
mov dword [esi], eax
movzx edi, byte [esi + ecx + 0xa7e2c47]
mov eax, dword [esi]
and eax, 0xeb00a8de
mov edx, ecx
xor edx, 0x7ffa5f6f
lea ebx, [eax + edx]
mov dword [esi + 8], ebx
add eax, edx
add eax, 0xab
mov edx, edi
not edx
or edx, eax
add edx, edi
inc edx
mov ebx, edi
mov edi, edx
and edi, 0xfffffffd
mov eax, edx
or eax, 0xfffffffd
inc eax
imul eax, edi
mov edi, edx
and edi, 2
or edx, 2
imul edx, edi
sub eax, edx
mov edx, dword [esi + 8]
add edx, ebx
add eax, edx
add eax, 0x8a9a4e7f
mov edx, eax
xor edx, 0x4a
and eax, 0x35
add eax, eax
sub eax, edx
add al, 0x4b
mov byte [esi + ecx + 0xa7e2c47], al
mov eax, dword [esi]
inc ecx
add eax, 2
cmp ecx, 0xf581d46d
jne 0x430b00
lea eax, [esi + 0x9c]
push 0x800
push 0
push eax
call dword [esi + 0xc]
mov dword [esi + 0x40], 0
mov dword [esi + 0x44], 0
lea ecx, [esi + 0x40]
mov dword [esi + 8], eax
push eax
call fcn.0043f070
movzx eax, al
mov edi, dword [esi + 4]
jmp dword [eax*4 + 0x44c654]
lea eax, [esi + 0xa0]
push 0x344
push 0
push eax
call fcn.0040c700
add esp, 0xc
mov dword [esi + 0x9c], 0x348
push 0xc89947f6
push dword [esi + 0x40]
call fcn.00442960
add esp, 8
push 0
lea ecx, [esi + 0x9c]
push ecx
push 0
push 0
call eax
xor eax, eax
lea ecx, [esi + 0xe0]
mov edx, edi
jmp 0x430c1a
mov byte [edx], bl
mov edx, 1
add ecx, 2
add eax, edx
mov edx, dword [esi + 4]
add edx, eax
cmp eax, 0x7f
jae 0x430cb3
movzx ebx, word [ecx]
test bx, bx
je 0x430cb3
cmp bx, 0x7f
jbe 0x430c00
mov dword [esi], edx
mov edi, 0x80
sub edi, eax
mov edx, edi
not edx
and edx, 1
and edi, 0xfe
sub edi, edx
movzx edx, bx
cmp edi, 2
jb 0x430c70
cmp edx, 0x7ff
ja 0x430c70
mov edx, ebx
shr edx, 6
add dl, 0xc0
mov edi, dword [esi]
mov byte [edi], dl
and bl, 0x3f
or bl, 0x80
mov byte [edi + 1], bl
mov edx, 2
jmp 0x430c07
mov dword [esi + 0xc], edx
xor edx, edx
cmp edi, 3
jb 0x430c07
mov edx, dword [esi + 0xc]
shr edx, 0xc
or dl, 0xe0
mov edi, dword [esi]
mov byte [edi], dl
mov edx, dword [esi + 0xc]
shr edx, 6
and dl, 0x3f
or dl, 0x80
mov dword [esi + 0xc], edx
mov edx, dword [esi + 0xc]
mov edi, dword [esi]
mov byte [edi + 1], dl
and bl, 0x3f
or bl, 0x80
mov edx, dword [esi]
mov byte [edx + 2], bl
mov edx, 3
jmp 0x430c07
mov byte [edx], 0
add dword [esi + 4], eax
lea edi, [esi + 0x628]
push 0xdc
push 0
push edi
call fcn.0040c700
add esp, 0xc
mov word [esi + 0x66c], 0xdc
push 0x80fdacc0
push dword [esi + 0x40]
call fcn.00442960
add esp, 8
push edi
push 0xffffffffffffffff
push 0
call eax
lea eax, [esi + 0x61c]
push 0xa
push 0xc
push eax
push dword [esi + 0x6d4]
call fcn.004350e0
add esp, 0x10
mov edi, eax
jmp dword [0x44c660]
mov eax, dword [esi]
movzx eax, byte [eax]
mov edi, ebx
test al, al
je 0x430d2b
mov ecx, dword [esi]
inc ecx
mov edi, ebx
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x430d20
mov byte [edi], 0
push dword [esi + 8]
call dword [0x44e67c]
jmp dword [0x44c674]
mov eax, dword [esi]
movzx eax, byte [eax]
mov ecx, ebx
test al, al
je 0x430d5b
mov ecx, dword [esi]
lea edx, [ecx + 1]
mov ecx, ebx
nop
mov byte [ecx], al
inc ecx
movzx eax, byte [edx]
inc edx
test al, al
jne 0x430d50
mov byte [ecx], 0
push dword [esi + 8]
call dword [0x44e67c]
jmp case.0x4303fb.39
mov ebx, edi
mov byte [edi], 0
mov dword [esi + 0x9c], 0xfbf980df
mov dword [esi + 0xa0], 0xf730f0e9
mov word [esi + 0xa4], 0xf588
mov byte [esi + 0xa6], 6
mov word [esi + 0xa7], 0
xor eax, eax
xor ecx, ecx
nop
mov edi, eax
and edi, 4
mov edx, ecx
xor edx, 0xc2
add edx, edi
xor dl, byte [esi + ecx + 0x9c]
add dl, 0x36
mov byte [esi + ecx + 0x9c], dl
inc ecx
add eax, 2
cmp ecx, 0xd
jne 0x430da0
mov edi, dword [esi + 0x1c]
sub ebx, edi
mov ecx, dword [ebp + 8]
push ebx
push edi
lea eax, [esi + 0x9c]
push eax
call fcn.0040d050
jmp dword [0x44c67c]
push edi
call fcn.0040c570
add esp, 4
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
inc ebx
jmp dword [0x44c670]
mov ebx, edi
lea eax, [esi + 0x404]
push 0xa
push 0xc
push eax
push dword [esi + 0x6d8]
call fcn.004350e0
add esp, 0x10
mov dword [esi + 0x20], 0xfdc6d03e
mov dword [esi + 0x24], 0x8992ae9b
mov dword [esi + 0x28], 0x8bdeb49f
mov dword [esi + 0x2c], 0x818bb687
mov dword [esi + 0x30], 0x808dbbbb
mov dword [esi + 0x34], 0xdd2f986
xor eax, eax
mov cl, 0xb6
mov edi, dword [esi + 4]
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esi + eax + 0x20]
xor dl, cl
mov ch, 0x92
sub ch, dl
mov byte [esi + eax + 0x20], ch
inc eax
dec cl
cmp eax, 0x18
jne 0x430e50
movzx ecx, byte [esi + 0x20]
mov eax, edi
test cl, cl
je 0x430e8b
lea edx, [esi + 0x21]
mov eax, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x430e80
mov byte [eax], 0
mov edi, ebx
movzx ecx, byte [ebx]
test cl, cl
je 0x430eab
lea edx, [edi + 1]
nop
nop
nop
nop
nop
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x430ea0
mov byte [eax], pe_nt_image_headers32
lea eax, [esi + 0x404]
push 0xa
push 0xc
push eax
push dword [esi + 0x6d8]
call fcn.004350e0
add esp, 0x10
mov dword [esi], eax
mov dword [esi + 0x20], 0xfdc6d03e
mov dword [esi + 0x24], 0x8992ae9b
mov dword [esi + 0x28], 0x8bdeb49f
mov dword [esi + 0x2c], 0x818bb687
mov dword [esi + 0x30], 0x808dbbbb
mov dword [esi + 0x34], 0xdd2f986
xor eax, eax
mov cl, 0xb6
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esi + eax + 0x20]
xor dl, cl
mov ch, 0x92
sub ch, dl
mov byte [esi + eax + 0x20], ch
inc eax
dec cl
cmp eax, 0x18
jne 0x430f00
movzx eax, byte [esi + 0x20]
mov ebx, dword [esi + 4]
test al, al
je 0x430f3b
lea ecx, [esi + 0x21]
mov ebx, dword [esi + 4]
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x430f30
mov byte [ebx], 0
movzx eax, byte [edi]
test al, al
je 0x430f5b
lea ecx, [edi + 1]
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebx], al
inc ebx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x430f50
mov byte [ebx], pe_nt_image_headers32
jmp dword [0x44c668]
int3
call fcn.0040dd20
mov eax, dword [ebx + 8]
mov dword [esi + 0x1e0], 1
mov ecx, dword [esi + 0x1e4]
mov edx, dword [esi + 0x1e0]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esi + 0x278]
mov ecx, dword [esi + 0x27c]
mov eax, dword [ecx + eax*4]
jmp eax
sub esp, 4
mov dword [esp], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
sub esp, 4
mov eax, dword [esi + 0x124]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esi + 0xc]
mov eax, dword [eax]
mov dword [esi + 0x158], eax
mov eax, dword [esi + 0x178]
mov al, byte [eax]
mov byte [esi + 0xdc], al
mov eax, dword [esi + 0x48]
mov byte [eax], 0xa1
mov byte [eax + 1], 0xeb
mov byte [eax + 2], 0x71
mov byte [eax + 3], 0xe9
mov byte [eax + 4], 0x7e
mov byte [eax + 5], 0xef
mov byte [eax + 6], pe_nt_image_headers32
mov byte [eax + 7], 0xed
mov byte [eax + 8], 0x47
mov byte [eax + 9], 0xd3
mov byte [eax + 0xa], 0x40
mov byte [eax + 0xb], 0xd1
mov byte [eax + 0xc], 0x44
mov byte [eax + 0xd], 0xd7
mov byte [eax + 0xe], 0x62
mov byte [eax + 0xf], 0xd5
mov byte [eax + 0x10], 0x7b
mov byte [eax + 0x11], 0xdb
mov byte [eax + 0x12], 0x49
mov byte [eax + 0x13], 0xd9
mov byte [eax + 0x14], 0x73
mov byte [eax + 0x15], 0xdf
mov byte [eax + 0x16], 0x60
mov byte [eax + 0x17], 0xdd
mov byte [eax + 0x18], 0x4d
mov byte [eax + 0x19], 0xc3
mov byte [eax + 0x1a], 0x50
mov byte [eax + 0x1b], 0xc1
mov byte [eax + 0x1c], 0x6b
mov byte [eax + 0x1d], 0xc7
mov byte [eax + 0x1e], 0xc6
mov byte [eax + 0x1f], 0xc5
xor eax, eax
cmp eax, 0x20
jae 0x43143f
mov edi, dword [esi + 0x48]
mov cl, byte [edi + eax]
mov dl, al
add dl, 0x57
xor dl, cl
add dl, 0x4d
mov byte [edi + eax], dl
add eax, 1
jmp 0x431422
call fcn.0040dd20
call fcn.0040dd20
mov edx, dword [esi + 0x158]
mov eax, dword [edx]
mov eax, dword [eax + 0x10]
sub esp, 0x18
mov edi, dword [esi + 0x124]
mov dword [esp + 0xc], edi
mov ecx, dword [esi + 0x48]
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
test eax, eax
setns al
mov cx, word [edi]
sub cx, 2
sete cl
and al, cl
movzx eax, al
mov dword [esi + 0x268], eax
mov eax, dword [esi + 0x26c]
mov ecx, dword [esi + 0x268]
mov eax, dword [eax + ecx*4]
jmp eax
push edx
xor dword [ebx - 0x49], 0x198868b
add byte [eax], al
mov ecx, dword [esi + 0x19c]
mov eax, dword [ecx + eax*4]
jmp eax
sub esp, 4
mov eax, dword [esi + 4]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
sub esp, 4
mov dword [esp], ebx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esi + 0xc]
mov eax, dword [eax]
mov ecx, dword [esi + 0x11c]
mov cl, byte [ecx]
mov byte [esi + 0xd8], cl
mov byte [edi], 0x70
mov byte [edi + 1], 0x27
mov byte [edi + 2], 0x97
mov byte [edi + 3], 0x21
mov byte [edi + 4], 0x9d
mov byte [edi + 5], 0x23
mov byte [edi + 6], 0x81
mov byte [edi + 7], 0x3d
mov byte [edi + 8], 0x88
mov byte [edi + 9], 0x3f
mov byte [edi + 0xa], 0x62
mov byte [edi + 0xb], 0x39
mov byte [edi + 0xc], 0x9b
mov byte [edi + 0xd], 0x3b
mov byte [edi + 0xe], 0xb6
mov byte [edi + 0xf], 0x35
mov byte [edi + 0x10], 0x8b
mov byte [edi + 0x11], 0x37
mov byte [edi + 0x12], 0x9a
mov byte [edi + 0x13], 0x31
mov byte [edi + 0x14], 0x8b
mov byte [edi + 0x15], 0x33
mov byte [edi + 0x16], 0x85
mov byte [edi + 0x17], 0xd
mov byte [edi + 0x18], 0xb3
mov byte [edi + 0x19], 0xf
mov byte [edi + 0x1a], 0xe
mov byte [edi + 0x1b], 9
mov ecx, 0x1c
mov byte [edi + ecx], 0
add ecx, 1
cmp ecx, 0x1f
jne 0x431567
xor ecx, ecx
cmp ecx, 0x1f
jae 0x4315a1
mov bl, byte [edi + ecx]
mov edi, ecx
xor edi, 0x77
mov edx, ecx
shl edx, 1
and edx, 0x10
sub edx, edi
xor dl, bl
mov ebx, dword [esi + 8]
add dl, 0x53
mov edi, dword [esi + 0x2c]
mov byte [edi + ecx], dl
mov edi, dword [esi + 0x2c]
add ecx, 1
jmp 0x431575
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x10]
sub esp, 0x18
mov dword [esp + 0xc], ebx
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call ecx
test eax, eax
setns al
mov cx, word [ebx]
sub cx, 8
sete cl
and al, cl
mov dword [esi + 0x2a8], 1
mov ecx, dword [esi + 0x2ac]
mov edx, dword [esi + 0x2a8]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [edi + 8]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
mov ebx, eax
mov eax, dword [edi + 8]
mov ecx, ebx
shl ecx, 1
mov edx, eax
add edx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00430f70
add esp, 8
mov edi, eax
add edi, 1
sub esp, 4
mov dword [esp], edi
call fcn.0040c560
add esp, 4
mov edx, eax
mov eax, dword [esi + 0x3c]
mov ecx, dword [eax + 8]
shl ebx, 1
mov eax, ecx
add eax, ebx
mov dword [esi + 0x100], eax
mov ebx, edx
add ebx, edi
mov edi, edx
mov dword [esi + 0x110], edx
mov eax, ebx
add eax, 0xffffffff
cmp edi, eax
jae 0x4316d0
cmp dword [esi + 0x100], 0
je 0x431675
cmp ecx, dword [esi + 0x100]
jae 0x4316d0
mov dword [esi + 0x38], ecx
mov eax, dword [esi + 0x38]
mov cx, word [eax]
movzx eax, cx
mov dword [esi + 0x140], eax
cmp cx, 0
mov ecx, dword [esi + 0x38]
je 0x4316d0
add ecx, 2
mov dword [esi + 0x38], ecx
mov ecx, ebx
sub ecx, edi
mov edx, ecx
and edx, 1
xor edx, 1
and ecx, 0xfffffffe
sub ecx, edx
sub esp, 0xc
mov dword [esp], edi
mov dword [esp + 4], ecx
mov eax, dword [esi + 0x140]
mov dword [esp + 8], eax
call fcn.00437010
mov ecx, dword [esi + 0x38]
mov edx, dword [esi + 0x110]
add esp, 0xc
add edi, eax
jmp 0x43165b
mov byte [edi], 0
mov eax, edx
add eax, 6
sub esp, 0xc
mov dword [esp + 4], eax
mov eax, dword [esi + 0x188]
mov dword [esp], eax
mov dword [esp + 8], 2
mov edi, edx
call fcn.004370d0
add esp, 0xc
mov ecx, eax
inc ecx
mov byte [eax], 0x2e
mov eax, edi
add eax, 4
sub esp, 0xc
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004370d0
add esp, 0xc
mov ecx, eax
inc ecx
mov byte [eax], 0x2e
sub esp, 0xc
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 8], 4
call fcn.004370d0
add esp, 0xc
mov ecx, eax
inc ecx
mov byte [eax], 0x20
mov eax, edi
add eax, 8
sub esp, 0xc
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004370d0
add esp, 0xc
mov ecx, eax
inc ecx
mov byte [eax], 0x3a
mov eax, edi
add eax, 0xa
sub esp, 0xc
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004370d0
add esp, 0xc
mov ecx, eax
inc ecx
mov byte [eax], 0x3a
mov eax, edi
add eax, 0xc
sub esp, 0xc
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004370d0
add esp, 0xc
mov byte [eax], 0
mov dword [esi + 0x228], 0
mov eax, dword [esi + 0x22c]
mov ecx, dword [esi + 0x228]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esi + 0x40]
mov edi, dword [esi + 0x3c]
jmp eax
mov di, word [edi + 8]
mov eax, dword [esi + 0x260]
mov ecx, dword [esi + 0x264]
mov eax, dword [ecx + eax*4]
jmp eax
mov dword [esi + 0x18c], edi
mov dword [esi + 0x10], ebx
mov eax, dword [esi + 0xac]
sub esp, 0x20
mov dword [esp], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 3
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov eax, dword [sym.imp.ole32.dll_CoSetProxyBlanket]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x318], eax
mov eax, dword [esi + 0x31c]
mov ecx, dword [esi + 0x318]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, byte [esi + 0xb0]
mov byte [esi + 0xb8], al
mov byte [esi + 0xe4], 0x52
mov byte [esi + 0xe5], 0xeb
mov byte [esi + 0xe6], 0x5b
mov byte [esi + 0xe7], 0xe9
mov byte [esi + 0xe8], 0x59
mov byte [esi + 0xe9], 0xef
mov byte [esi + 0xea], 0x5a
mov byte [esi + 0xeb], 0xed
mov byte [esi + 0xec], 0x50
mov byte [esi + 0xed], 0xd3
mov byte [esi + 0xee], 0x97
mov byte [esi + 0xef], 0xd1
mov byte [esi + 0xf0], 0x9f
mov byte [esi + 0xf1], 0xd7
mov byte [esi + 0xf2], 0x65
mov byte [esi + 0xf3], 0xd5
mov byte [esi + 0xf4], 0x6e
mov byte [esi + 0xf5], 0xdb
mov byte [esi + 0xf6], 0x8c
mov byte [esi + 0xf7], 0xd9
mov byte [esi + 0xf8], 0xd8
mov byte [esi + 0xf9], 0xdf
mov eax, 0x16
mov byte [esi + eax + 0xe4], 0
add eax, 1
cmp eax, 0x1b
jne 0x431902
mov dword [esi + 0x40], edi
xor eax, eax
cmp eax, 0x1b
jae 0x431997
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x14]
movzx eax, byte [esi + eax + 0xe4]
mov edi, 0xb1b8a528
sub edi, dword [esi + 0x14]
mov edx, 0x28
sub edx, dword [esi + 0x14]
and edx, edi
xor edx, 0xffffffff
mov edi, eax
and edi, edx
mov dword [esi + 0x13c], edi
mov ecx, eax
xor ecx, 0xffffffff
mov edi, 0x4e475a28
sub edi, dword [esi + 0x14]
and edi, ecx
mov ecx, eax
xor ecx, 0xffffffff
mov dword [esi + 0x10], ebx
mov ebx, 0x4e475a28
sub ebx, dword [esi + 0x14]
and ebx, ecx
or edi, ebx
mov ecx, dword [esi + 0x10]
and eax, edx
mov ebx, dword [esi + 0x13c]
mov edx, ebx
xor edx, edi
mov edi, ebx
mov ebx, ecx
add edi, edx
sub eax, edi
add al, 0xcc
mov ecx, dword [esi + 0x14]
mov byte [esi + ecx + 0xe4], al
mov eax, dword [esi + 0x14]
add eax, 1
jmp 0x431917
sub esp, 4
lea eax, [esi + 0xe4]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
call eax
mov edi, eax
mov ecx, dword [esi + 0xb4]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
sub esp, 0x24
lea edx, [esi + 0xac]
mov dword [esp + 0x20], edx
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x320], eax
mov eax, dword [esi + 0x324]
mov ecx, dword [esi + 0x320]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esi + 0x180]
mov word [eax], dx
mov eax, dword [esi + 0x240]
mov ecx, dword [esi + 0x244]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esi + 0x218]
mov ecx, dword [esi + 0x21c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [edi + 8]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
mov ecx, edi
mov edi, eax
mov eax, dword [ecx + 8]
mov ecx, edi
shl ecx, 1
mov edx, eax
add edx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00430f70
add esp, 8
mov ebx, eax
mov dword [esi + 0x174], ebx
add ebx, 1
sub esp, 4
mov dword [esp], ebx
call fcn.0040c560
add esp, 4
mov ecx, dword [esi + 0x10]
mov dword [ecx], eax
mov ecx, dword [esi + 4]
mov edx, dword [ecx + 8]
shl edi, 1
mov ecx, edx
add ecx, edi
mov dword [esi + 0x108], ecx
mov edi, eax
add edi, ebx
mov ecx, edi
add ecx, 0xffffffff
cmp eax, ecx
jae 0x431b12
cmp dword [esi + 0x108], 0
je 0x431ac2
cmp edx, dword [esi + 0x108]
jae 0x431b12
mov ebx, edx
mov dx, word [ebx]
movzx ecx, dx
cmp dx, 0
mov edx, ebx
je 0x431b12
add edx, 2
mov dword [esi + 0x154], edx
mov edx, edi
sub edx, eax
mov ebx, edx
and ebx, 1
xor ebx, 1
and edx, 0xfffffffe
sub edx, ebx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, eax
call fcn.00437010
mov edx, dword [esi + 0x154]
add esp, 0xc
mov ecx, eax
mov eax, ebx
add eax, ecx
jmp 0x431aa8
mov byte [eax], 0
mov eax, dword [esi + 0x118]
mov al, byte [eax]
mov byte [esi + 0xd0], al
mov eax, dword [esi + 0x1c]
mov byte [eax], 0xd3
mov byte [eax + 1], 0xc0
mov byte [eax + 2], 0xc4
mov byte [eax + 3], 0xcb
mov byte [eax + 4], 0xc7
mov byte [eax + 5], 0xfe
mov byte [eax + 6], 0xfd
mov byte [eax + 7], 0x73
xor eax, eax
cmp eax, 8
jae 0x431b70
mov ebx, dword [esi + 0x1c]
movzx edx, byte [ebx + eax]
mov ecx, eax
add ecx, 0x1d2b3716
mov edi, ecx
and edi, edx
shl edi, 1
add ecx, edx
sub ecx, edi
add cl, 0x92
mov byte [ebx + eax], cl
add eax, 1
jmp 0x431b47
mov edi, dword [esi + 0x10]
mov eax, dword [edi]
sub esp, 8
mov ecx, dword [esi + 0x1c]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00423c10
add esp, 8
mov dword [esi + 0x24], eax
mov ecx, dword [edi]
mov dword [esi + 0x138], ecx
mov ebx, eax
sub ebx, ecx
mov ecx, ebx
not ecx
setb byte [esi + 0x1b]
mov edi, dword [esi + 0x174]
mov edx, edi
xor edx, ebx
and edi, ecx
add edi, edi
sub edi, edx
mov ebx, edi
inc ebx
call fcn.0040dd20
call fcn.0040dd20
mov ecx, dword [esi + 0x24]
mov edx, dword [esi + 0x138]
lea eax, [ecx + edi + 1]
sub eax, edx
seta al
mov ah, byte [esi + 0x1b]
and ah, al
test ah, 1
jne 0x431c3a
mov ecx, ebx
shr ecx, 2
mov edi, edx
mov eax, dword [esi + 0x24]
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, ebx
and eax, 0xfffffffc
add edx, eax
add dword [esi + 0x24], eax
mov ecx, ebx
shr ecx, 1
and ecx, 1
mov edi, edx
mov eax, dword [esi + 0x24]
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov ecx, dword [esi + 0x24]
mov eax, ebx
and eax, 2
add edx, eax
add ecx, eax
and ebx, 1
mov edi, dword [esi + 4]
cmp ebx, 0
je 0x431c59
add ebx, 0xffffffff
mov eax, ecx
add eax, 1
mov cl, byte [ecx]
mov byte [esi + 0x1a], cl
mov edi, edx
mov edx, edi
add edx, 1
mov cl, byte [esi + 0x1a]
mov byte [edi], cl
mov edi, dword [esi + 4]
mov ecx, eax
jmp 0x431c15
add edx, edi
add ecx, edi
mov edi, dword [esi + 4]
mov eax, ebx
add ebx, 0xffffffff
cmp eax, 0
je 0x431c57
mov al, byte [ecx]
mov byte [edx], al
add edx, 0xffffffff
add ecx, 0xffffffff
jmp 0x431c41
jmp 0x431c5b
jmp 0x431c5b
mov dword [esi + 0x2c0], 1
mov eax, dword [esi + 0x2c4]
mov ecx, dword [esi + 0x2c0]
mov eax, dword [eax + ecx*4]
jmp eax
mov ecx, dword [esi + 0x1d8]
mov edx, dword [esi + 0x1dc]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov eax, dword [ebx + 8]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
mov ecx, ebx
mov ebx, eax
mov eax, dword [ecx + 8]
mov ecx, ebx
shl ecx, 1
mov edx, eax
add edx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00430f70
add esp, 8
mov edi, eax
add edi, 1
sub esp, 4
mov dword [esp], edi
call fcn.0040c560
add esp, 4
mov edx, eax
mov eax, dword [esi + 8]
mov ecx, dword [eax + 8]
shl ebx, 1
mov eax, ecx
add eax, ebx
mov dword [esi + 0x104], eax
mov ebx, edx
add ebx, edi
mov edi, edx
mov eax, ebx
add eax, 0xffffffff
cmp edi, eax
jae 0x431d5f
cmp dword [esi + 0x104], 0
je 0x431cfe
cmp ecx, dword [esi + 0x104]
jae 0x431d5f
mov dword [esi + 0x34], ecx
mov eax, dword [esi + 0x34]
mov cx, word [eax]
movzx eax, cx
mov dword [esi + 0x144], eax
cmp cx, 0
mov ecx, dword [esi + 0x34]
je 0x431d5f
add ecx, 2
mov dword [esi + 0x34], ecx
mov ecx, ebx
sub ecx, edi
mov dword [esi + 0x16c], edx
mov edx, ecx
and edx, 1
xor edx, 1
and ecx, 0xfffffffe
sub ecx, edx
sub esp, 0xc
mov dword [esp], edi
mov dword [esp + 4], ecx
mov eax, dword [esi + 0x144]
mov dword [esp + 8], eax
call fcn.00437010
mov ecx, dword [esi + 0x34]
mov edx, dword [esi + 0x16c]
add esp, 0xc
add edi, eax
jmp 0x431ce4
mov byte [edi], 0
mov eax, edx
add eax, 6
sub esp, 0xc
mov dword [esp + 4], eax
mov eax, dword [esi + 0x120]
mov dword [esp], eax
mov dword [esp + 8], 2
mov edi, edx
call fcn.004370d0
add esp, 0xc
mov ecx, eax
inc ecx
mov byte [eax], 0x2e
mov eax, edi
add eax, 4
sub esp, 0xc
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004370d0
add esp, 0xc
mov ecx, eax
inc ecx
mov byte [eax], 0x2e
sub esp, 0xc
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 8], 4
call fcn.004370d0
add esp, 0xc
mov ecx, eax
inc ecx
mov byte [eax], 0x20
mov eax, edi
add eax, 8
sub esp, 0xc
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004370d0
add esp, 0xc
mov ecx, eax
inc ecx
mov byte [eax], 0x3a
mov eax, edi
add eax, 0xa
sub esp, 0xc
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004370d0
add esp, 0xc
mov ecx, eax
inc ecx
mov byte [eax], 0x3a
add edi, 0xc
sub esp, 0xc
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004370d0
add esp, 0xc
mov byte [eax], 0
mov eax, dword [esi + 0x1a0]
mov ecx, dword [esi + 0x1a4]
mov eax, dword [ecx + eax*4]
mov ebx, dword [esi + 8]
jmp eax
push ss
cli
and al, 0x24
mov esi, dword [eax]
mov al, byte [0x8478bb6]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
mov ecx, edi
mov edi, eax
mov eax, dword [ecx + 8]
mov ecx, edi
shl ecx, 1
mov edx, eax
add edx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00430f70
add esp, 8
mov ebx, eax
mov dword [esi + 0x168], ebx
add ebx, 1
sub esp, 4
mov dword [esp], ebx
call fcn.0040c560
add esp, 4
mov ecx, dword [esi + 0x10]
mov dword [ecx], eax
mov ecx, dword [esi + 4]
mov edx, dword [ecx + 8]
shl edi, 1
mov ecx, edx
add ecx, edi
mov dword [esi + 0x10c], ecx
mov edi, eax
add edi, ebx
mov ecx, edi
add ecx, 0xffffffff
cmp eax, ecx
mov ebx, dword [esi + 0x10]
jae 0x431f36
cmp dword [esi + 0x10c], 0
je 0x431edb
cmp edx, dword [esi + 0x10c]
jae 0x431f36
mov dword [esi + 0x30], edx
mov ecx, dword [esi + 0x30]
mov dx, word [ecx]
movzx ecx, dx
mov dword [esi + 0x148], ecx
cmp dx, 0
mov edx, dword [esi + 0x30]
je 0x431f36
add edx, 2
mov dword [esi + 0x30], edx
mov edx, edi
sub edx, eax
mov ebx, edx
and ebx, 1
xor ebx, 1
and edx, 0xfffffffe
sub edx, ebx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], edx
mov ecx, dword [esi + 0x148]
mov dword [esp + 8], ecx
mov ebx, eax
call fcn.00437010
mov edx, dword [esi + 0x30]
add esp, 0xc
mov ecx, eax
mov eax, ebx
add eax, ecx
jmp 0x431ebe
mov byte [eax], 0
mov eax, dword [esi + 0x118]
mov al, byte [eax]
mov byte [esi + 0xcc], al
mov eax, dword [esi + 0x1c]
mov byte [eax], 0xd3
mov byte [eax + 1], 0xc0
mov byte [eax + 2], 0xc4
mov byte [eax + 3], 0xcb
mov byte [eax + 4], 0xc7
mov byte [eax + 5], 0xfe
mov byte [eax + 6], 0xfd
mov byte [eax + 7], 0x73
xor eax, eax
cmp eax, 8
jae 0x431f97
mov ebx, dword [esi + 0x1c]
movzx edx, byte [ebx + eax]
mov ecx, eax
add ecx, 0x1d2b3716
mov edi, ecx
and edi, edx
shl edi, 1
add ecx, edx
sub ecx, edi
add cl, 0x92
mov byte [ebx + eax], cl
mov ebx, dword [esi + 0x10]
add eax, 1
jmp 0x431f6b
mov eax, dword [ebx]
sub esp, 8
mov ecx, dword [esi + 0x1c]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00423c10
add esp, 8
mov edi, eax
mov ebx, dword [ebx]
call fcn.0040dd20
call fcn.0040dd20
mov eax, ebx
sub eax, edi
mov edx, dword [esi + 0x168]
lea ecx, [edx + eax]
lea eax, [edx + eax + 1]
seta dl
mov dword [esi + 0x20], edi
lea edi, [edi + ecx + 1]
sub edi, ebx
seta dh
and dl, dh
test dl, 1
jne 0x432055
mov ecx, eax
shr ecx, 2
mov edx, dword [esi + 0x20]
mov dword [esi + 0x130], edx
mov edi, ebx
mov edx, dword [esi + 0x130]
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov ecx, eax
and ecx, 0xfffffffc
add ebx, ecx
mov edx, dword [esi + 0x20]
add edx, ecx
mov dword [esi + 0x20], edx
mov ecx, eax
shr ecx, 1
and ecx, 1
mov dword [esi + 0x134], edx
mov edi, ebx
mov edx, dword [esi + 0x134]
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
mov ecx, eax
and ecx, 2
add ebx, ecx
mov edx, dword [esi + 0x20]
add edx, ecx
and eax, 1
cmp eax, 0
je 0x432077
add eax, 0xffffffff
mov ecx, edx
add ecx, 1
mov dl, byte [edx]
mov edi, ebx
add edi, 1
mov byte [ebx], dl
mov ebx, edi
mov edx, ecx
jmp 0x432039
add ebx, ecx
mov edx, dword [esi + 0x20]
add edx, ecx
mov edi, dword [esi + 4]
mov ecx, eax
add eax, 0xffffffff
cmp ecx, 0
je 0x432075
mov cl, byte [edx]
mov byte [ebx], cl
add ebx, 0xffffffff
add edx, 0xffffffff
jmp 0x43205f
jmp 0x43207c
mov edi, dword [esi + 4]
jmp 0x43207c
mov eax, dword [esi + 0x1b0]
mov ecx, dword [esi + 0x1b4]
mov eax, dword [ecx + eax*4]
jmp eax
movzx eax, al
and eax, 1
mov dword [esi + 0x2d0], eax
mov eax, dword [esi + 0x2d4]
mov ecx, dword [esi + 0x2d0]
mov eax, dword [eax + ecx*4]
mov ebx, edx
jmp eax
call fcn.0040dd20
mov dword [esi + 0x1e8], 1
mov eax, dword [esi + 0x1ec]
mov ecx, dword [esi + 0x1e8]
mov eax, dword [eax + ecx*4]
jmp eax
sub esp, 4
mov dword [esp], edi
mov eax, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call eax
mov eax, dword [esi + 0xb4]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
sub esp, 4
mov dword [esp], eax
call ecx
mov eax, dword [esi + 0x1c8]
mov ecx, dword [esi + 0x1cc]
mov eax, dword [ecx + eax*4]
jmp eax
sub esp, 4
mov dword [esp], edi
call fcn.0040c570
add esp, 4
mov eax, dword [esi + 0x280]
mov ecx, dword [esi + 0x284]
mov eax, dword [ecx + eax*4]
jmp eax
push eax
mov edi, esp
push eax
mov dword [esi + 0xc], esp
mov ecx, dword [esi + 0x330]
mov edx, dword [esi + 0x334]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov edx, dword [esi + 0x2f8]
mov edi, dword [esi + 0x2fc]
mov edx, dword [edi + edx*4]
jmp edx
sub esp, 4
mov dword [esp], edi
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
call eax
mov eax, dword [esi + 0xc]
mov eax, dword [eax]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
sub esp, 4
mov dword [esp], eax
call ecx
mov eax, dword [esi + 0x208]
mov ecx, dword [esi + 0x20c]
mov eax, dword [ecx + eax*4]
jmp eax
sub esp, 4
mov dword [esp], edi
call eax
mov eax, dword [esi + 0x1d0]
mov ecx, dword [esi + 0x1d4]
mov eax, dword [ecx + eax*4]
mov ebx, dword [esi + 0x10]
mov edi, dword [esi + 0x18c]
jmp eax
mov eax, dword [esi + 0x270]
mov ecx, dword [esi + 0x274]
mov eax, dword [ecx + eax*4]
jmp eax
sub esp, 0x14
mov ebx, dword [esi + 0x44]
mov dword [esp + 0x10], ebx
mov edx, dword [esi + 0xc]
mov dword [esp + 0xc], edx
mov dword [esp], ecx
mov dword [esp + 8], 1
mov dword [esp + 4], 0xffffffff
call eax
test eax, eax
setns cl
sub eax, 1
setne al
and cl, al
mov eax, dword [esi + 0x2f0]
mov edx, dword [esi + 0x2f4]
mov eax, dword [edx + eax*4]
mov edi, dword [esi + 0x28]
jmp eax
call fcn.0040dd20
mov dword [edi], 0
mov ecx, dword [ebx]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
mov dword [esi + 0x300], 1
mov edx, dword [esi + 0x304]
mov edi, dword [esi + 0x300]
mov edx, dword [edx + edi*4]
mov edi, dword [esi + 0x44]
jmp edx
mov eax, dword [ebx + 8]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
mov ecx, ebx
mov ebx, eax
mov eax, dword [ecx + 8]
mov ecx, ebx
shl ecx, 1
mov edx, eax
add edx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00430f70
add esp, 8
mov edi, eax
add edi, 1
sub esp, 4
mov dword [esp], edi
call fcn.0040c560
add esp, 4
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 8]
shl ebx, 1
mov ecx, edx
add ecx, ebx
mov ebx, eax
add ebx, edi
mov dword [esi + 0x170], eax
mov edi, eax
mov eax, ebx
add eax, 0xffffffff
cmp edi, eax
jae 0x4322de
cmp ecx, 0
je 0x43228c
cmp edx, ecx
jae 0x4322de
mov dword [esi + 0x14c], ecx
mov cx, word [edx]
movzx eax, cx
cmp cx, 0
je 0x4322de
add edx, 2
mov dword [esi + 0x150], edx
mov ecx, ebx
sub ecx, edi
mov edx, ecx
and edx, 1
xor edx, 1
and ecx, 0xfffffffe
sub ecx, edx
sub esp, 0xc
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00437010
mov ecx, dword [esi + 0x14c]
mov edx, dword [esi + 0x150]
add esp, 0xc
add edi, eax
jmp 0x43227a
mov byte [edi], 0
mov edi, dword [esi + 0x170]
mov eax, edi
add eax, 6
sub esp, 0xc
mov dword [esp + 4], eax
mov eax, dword [esi + 0x120]
mov dword [esp], eax
mov dword [esp + 8], 2
call fcn.004370d0
add esp, 0xc
mov ecx, eax
inc ecx
mov byte [eax], 0x2e
mov eax, edi
add eax, 4
sub esp, 0xc
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004370d0
add esp, 0xc
mov ecx, eax
inc ecx
mov byte [eax], 0x2e
sub esp, 0xc
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 8], 4
call fcn.004370d0
add esp, 0xc
mov ecx, eax
inc ecx
mov byte [eax], 0x20
mov eax, edi
add eax, 8
sub esp, 0xc
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004370d0
add esp, 0xc
mov ecx, eax
inc ecx
mov byte [eax], 0x3a
mov eax, edi
add eax, 0xa
sub esp, 0xc
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004370d0
add esp, 0xc
mov ecx, eax
inc ecx
mov byte [eax], 0x3a
mov eax, edi
add eax, 0xc
sub esp, 0xc
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.004370d0
add esp, 0xc
mov byte [eax], 0
mov dword [esi + 0x290], 1
mov eax, dword [esi + 0x294]
mov ecx, dword [esi + 0x290]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esi + 8]
jmp eax
mov eax, dword [esi + 0x248]
mov ecx, dword [esi + 0x24c]
mov eax, dword [ecx + eax*4]
jmp eax
movzx eax, al
and eax, 1
mov dword [esi + 0x2a0], eax
mov eax, dword [esi + 0x2a4]
mov ecx, dword [esi + 0x2a0]
mov eax, dword [eax + ecx*4]
jmp eax
mov edi, dword [esi + 0xac]
mov ebx, dword [edi]
mov eax, dword [esi + 0x1f0]
mov ecx, dword [esi + 0x1f4]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x2c8], 0
mov eax, dword [esi + 0x2cc]
mov ecx, dword [esi + 0x2c8]
mov eax, dword [eax + ecx*4]
mov edi, dword [esi + 4]
jmp eax
mov al, 0xba
cmp dword [ebp - 0x7d], edx
in al, dx
add al, 0x8b
inc esi
add al, 0x89
add al, 0x24
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
sub esp, 4
mov dword [esp], ebx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esi + 0xc]
mov eax, dword [eax]
mov ecx, dword [esi + 0x11c]
mov cl, byte [ecx]
mov byte [esi + 0xd4], cl
mov byte [edi], 0x70
mov byte [edi + 1], 0x27
mov byte [edi + 2], 0x97
mov byte [edi + 3], 0x21
mov byte [edi + 4], 0x9d
mov byte [edi + 5], 0x23
mov byte [edi + 6], 0x81
mov byte [edi + 7], 0x3d
mov byte [edi + 8], 0x88
mov byte [edi + 9], 0x3f
mov byte [edi + 0xa], 0x62
mov byte [edi + 0xb], 0x39
mov byte [edi + 0xc], 0x9b
mov byte [edi + 0xd], 0x3b
mov byte [edi + 0xe], 0xb6
mov byte [edi + 0xf], 0x35
mov byte [edi + 0x10], 0x8b
mov byte [edi + 0x11], 0x37
mov byte [edi + 0x12], 0x9a
mov byte [edi + 0x13], 0x31
mov byte [edi + 0x14], 0x8b
mov byte [edi + 0x15], 0x33
mov byte [edi + 0x16], 0x85
mov byte [edi + 0x17], 0xd
mov byte [edi + 0x18], 0xb3
mov byte [edi + 0x19], 0xf
mov byte [edi + 0x1a], 0xe
mov byte [edi + 0x1b], 9
mov ecx, 0x1c
mov byte [edi + ecx], 0
add ecx, 1
cmp ecx, 0x1f
jne 0x4324f1
xor ecx, ecx
cmp ecx, 0x1f
jae 0x43252b
mov bl, byte [edi + ecx]
mov edi, ecx
xor edi, 0x77
mov edx, ecx
shl edx, 1
and edx, 0x10
sub edx, edi
xor dl, bl
mov ebx, dword [esi + 8]
add dl, 0x53
mov edi, dword [esi + 0x2c]
mov byte [edi + ecx], dl
mov edi, dword [esi + 0x2c]
add ecx, 1
jmp 0x4324ff
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x10]
sub esp, 0x18
mov dword [esp + 0xc], ebx
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call ecx
mov eax, dword [esi + 0x1a8]
mov ecx, dword [esi + 0x1ac]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebx]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
sub esp, 4
mov dword [esp], eax
call ecx
mov eax, dword [esi + 0x200]
mov ecx, dword [esi + 0x204]
mov eax, dword [ecx + eax*4]
jmp eax
sub esp, 4
mov eax, dword [esi + 0x128]
mov dword [esp], eax
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call edi
sub esp, 4
mov eax, dword [esi + 0x17c]
mov dword [esp], eax
call edi
mov eax, dword [esi + 0x1f8]
mov ecx, dword [esi + 0x1fc]
mov eax, dword [ecx + eax*4]
jmp eax
sub esp, 4
mov dword [esp], ebx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esi + 0xc]
mov edx, dword [eax]
mov eax, dword [esi + 0x114]
mov cl, byte [eax]
mov byte [esi + 0xc4], cl
mov byte [edi], 0x89
mov byte [edi + 1], 0x4f
mov byte [edi + 2], 0xad
mov byte [edi + 3], 0x51
mov byte [edi + 4], 0xa0
mov byte [edi + 5], 0x53
mov byte [edi + 6], 0xa6
mov byte [edi + 7], 0x55
mov byte [edi + 8], 0xbf
mov byte [edi + 9], 0x57
mov byte [edi + 0xa], 0xa7
mov byte [edi + 0xb], 0x59
mov byte [edi + 0xc], 0xb6
mov byte [edi + 0xd], 0x5b
mov byte [edi + 0xe], 0x5a
mov byte [edi + 0xf], 0x5d
mov ecx, 0x10
mov byte [edi + ecx], 0
add ecx, 1
cmp ecx, 0x14
jne 0x43261f
xor ecx, ecx
cmp ecx, 0x14
jae 0x43268a
mov eax, dword [esi + 0x28]
movzx edi, byte [eax + ecx]
mov dword [esi + 0x164], edx
mov edx, ecx
add edx, 0x3726360d
mov ebx, edi
xor ebx, 0xffffffff
and edx, ebx
mov ebx, 0xf2
sub ebx, ecx
mov eax, 0xf2
sub eax, ecx
or ebx, eax
and ebx, edi
mov edi, dword [esi + 0x28]
or edx, ebx
mov ebx, edx
and ebx, 1
mov eax, edx
and eax, 1
xor eax, 0xffffffff
add edx, 0xc0
add edx, eax
add ebx, edx
mov edx, dword [esi + 0x164]
mov byte [edi + ecx], bl
add ecx, 1
jmp 0x43262d
mov eax, dword [edx]
mov eax, dword [eax + 0x10]
sub esp, 0x18
mov ebx, dword [esi + 4]
mov dword [esp + 0xc], ebx
mov dword [esp + 4], edi
mov dword [esp], edx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
mov eax, dword [esi + 0x1b8]
mov ecx, dword [esi + 0x1bc]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebx]
test eax, eax
setne al
and cl, al
movzx eax, cl
mov dword [esi + 0x2e8], eax
mov eax, dword [esi + 0x2ec]
mov ecx, dword [esi + 0x2e8]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esi + 0x40]
jmp eax
cmp dword [ebx], 0
setne al
and al, 1
movzx eax, al
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esi + 0x238]
mov ecx, dword [esi + 0x23c]
mov eax, dword [ecx + eax*4]
jmp eax
sub esp, 4
mov eax, dword [esi + 0x110]
mov dword [esp], eax
call fcn.0040c570
add esp, 4
mov eax, dword [esi + 0x220]
mov ecx, dword [esi + 0x224]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x258], 0
mov eax, dword [esi + 0x25c]
mov ecx, dword [esi + 0x258]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x308], 1
mov eax, dword [esi + 0x30c]
mov ecx, dword [esi + 0x308]
mov eax, dword [eax + ecx*4]
mov edi, dword [esi + 0x44]
jmp eax
mov eax, dword [esi + 0x210]
mov ecx, dword [esi + 0x214]
mov eax, dword [ecx + eax*4]
jmp eax
sub esp, 4
mov dword [esp], ebx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esi + 0xc]
mov eax, dword [eax]
mov dword [esi + 0x160], eax
mov eax, dword [esi + 0x114]
mov cl, byte [eax]
mov byte [esi + 0xc8], cl
mov byte [edi], 0x89
mov byte [edi + 1], 0x4f
mov byte [edi + 2], 0xad
mov byte [edi + 3], 0x51
mov byte [edi + 4], 0xa0
mov byte [edi + 5], 0x53
mov byte [edi + 6], 0xa6
mov byte [edi + 7], 0x55
mov byte [edi + 8], 0xbf
mov byte [edi + 9], 0x57
mov byte [edi + 0xa], 0xa7
mov byte [edi + 0xb], 0x59
mov byte [edi + 0xc], 0xb6
mov byte [edi + 0xd], 0x5b
mov byte [edi + 0xe], 0x5a
mov byte [edi + 0xf], 0x5d
mov ecx, 0x10
mov byte [edi + ecx], 0
add ecx, 1
cmp ecx, 0x14
jne 0x4327f7
xor ecx, ecx
cmp ecx, 0x14
jae 0x432856
mov eax, dword [esi + 0x28]
movzx edi, byte [eax + ecx]
mov edx, ecx
add edx, 0x3726360d
mov ebx, edi
xor ebx, 0xffffffff
and edx, ebx
mov ebx, 0xf2
sub ebx, ecx
mov eax, 0xf2
sub eax, ecx
or ebx, eax
and ebx, edi
mov edi, dword [esi + 0x28]
or edx, ebx
mov ebx, edx
and ebx, 1
mov eax, edx
and eax, 1
xor eax, 0xffffffff
add edx, 0xc0
add edx, eax
add ebx, edx
mov byte [edi + ecx], bl
add ecx, 1
jmp 0x432805
mov ecx, dword [esi + 0x160]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
sub esp, 0x18
mov ebx, dword [esi + 4]
mov dword [esp + 0xc], ebx
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
test eax, eax
setns al
mov cx, word [ebx]
sub cx, 8
sete cl
and al, cl
mov dword [esi + 0x2d8], 0
mov ecx, dword [esi + 0x2dc]
mov edx, dword [esi + 0x2d8]
mov ecx, dword [ecx + edx*4]
mov edx, dword [esi + 8]
jmp ecx
mov al, byte [esi + 0x9c]
mov byte [esi + 0xbc], al
mov byte [esi + 0xa0], 0x6d
mov byte [esi + 0xa1], 0xdb
mov byte [esi + 0xa2], 0xd
mov byte [esi + 0xa3], 0xd9
mov byte [esi + 0xa4], 4
mov byte [esi + 0xa5], 0xdf
mov byte [esi + 0xa6], 0xde
mov byte [esi + 0xa7], 0xdd
mov eax, 8
mov byte [esi + eax + 0xa0], 0
add eax, 1
cmp eax, 9
jne 0x432904
xor eax, eax
cmp eax, 9
jae 0x43296f
movzx ecx, byte [esi + eax + 0xa0]
mov edx, eax
add edx, 0xaf
mov edi, ecx
add edi, 1
mov ebx, ecx
xor ebx, 0xffffffff
or edx, ebx
add edx, edi
mov ebx, edx
and ebx, 2
xor ebx, 2
mov edi, edx
and edi, 0xfd
imul edi, ebx
mov ebx, edx
and ebx, 2
or edx, 2
imul edx, ebx
add edx, edi
add ecx, eax
add ecx, 5
sub ecx, edx
add cl, 0x3f
mov byte [esi + eax + 0xa0], cl
add eax, 1
jmp 0x432916
lea eax, [esi + 0xa0]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi + 0x128], eax
mov al, byte [esi + 0x4c]
mov byte [esi + 0xc0], al
mov byte [esi + 0x50], 0xa3
mov byte [esi + 0x51], 0x71
mov byte [esi + 0x52], 0xbf
mov byte [esi + 0x53], 0x73
mov byte [esi + 0x54], 0xa8
mov byte [esi + 0x55], 0x7d
mov byte [esi + 0x56], 0xb3
mov byte [esi + 0x57], 0x7f
mov byte [esi + 0x58], 0xbb
mov byte [esi + 0x59], 0x79
mov byte [esi + 0x5a], 0xa6
mov byte [esi + 0x5b], 0x7b
mov byte [esi + 0x5c], 0xa4
mov byte [esi + 0x5d], 0x45
mov byte [esi + 0x5e], 0xac
mov byte [esi + 0x5f], 0x47
mov byte [esi + 0x60], 0xa0
mov byte [esi + 0x61], 0x41
mov byte [esi + 0x62], 0x8c
mov byte [esi + 0x63], 0x43
mov byte [esi + 0x64], 0x9e
mov byte [esi + 0x65], 0x4d
mov byte [esi + 0x66], 0x99
mov byte [esi + 0x67], 0x4f
mov byte [esi + 0x68], 0x9d
mov byte [esi + 0x69], 0x49
mov byte [esi + 0x6a], 0xaa
mov byte [esi + 0x6b], 0x4b
mov byte [esi + 0x6c], 0x8b
mov byte [esi + 0x6d], 0x55
mov byte [esi + 0x6e], 0xff
mov byte [esi + 0x6f], 0x57
mov byte [esi + 0x70], 0xe6
mov byte [esi + 0x71], 0x51
mov byte [esi + 0x72], 0xa1
mov byte [esi + 0x73], 0x53
mov byte [esi + 0x74], 0xae
mov byte [esi + 0x75], 0x5d
mov byte [esi + 0x76], 0xf9
mov byte [esi + 0x77], 0x5f
mov byte [esi + 0x78], 0x8f
mov byte [esi + 0x79], 0x59
mov byte [esi + 0x7a], 0xea
mov byte [esi + 0x7b], 0x5b
mov byte [esi + 0x7c], 0x89
mov byte [esi + 0x7d], 0x25
mov byte [esi + 0x7e], 0x94
mov byte [esi + 0x7f], 0x27
mov byte [esi + 0x80], 0x81
mov byte [esi + 0x81], 0x21
mov byte [esi + 0x82], 0x9e
mov byte [esi + 0x83], 0x23
mov byte [esi + 0x84], 0x85
mov byte [esi + 0x85], 0x2d
mov byte [esi + 0x86], 0x98
mov byte [esi + 0x87], 0x2f
mov byte [esi + 0x88], 0x87
mov byte [esi + 0x89], 0x29
mov byte [esi + 0x8a], 0xf9
mov byte [esi + 0x8b], 0x2b
mov byte [esi + 0x8c], 0x8d
mov byte [esi + 0x8d], 0x35
mov byte [esi + 0x8e], 0x85
mov byte [esi + 0x8f], 0x37
mov byte [esi + 0x90], 0x8c
mov byte [esi + 0x91], 0x31
mov byte [esi + 0x92], 0x9f
mov byte [esi + 0x93], 0x33
mov byte [esi + 0x94], 0x89
mov byte [esi + 0x95], 0x3d
mov byte [esi + 0x96], 0x3e
mov byte [esi + 0x97], 0x3f
mov eax, 0x48
mov ebx, dword [esi + 0x40]
mov byte [esi + eax + 0x50], 0
add eax, 1
cmp eax, 0x4a
jne 0x432b00
xor eax, eax
cmp eax, 0x4a
jae 0x432b40
mov dl, byte [esi + eax + 0x50]
mov edi, eax
add edi, 0x14
mov ecx, 0xeb
sub ecx, eax
and ecx, 0xa7
and edi, 0x58
or ecx, edi
xor cl, dl
xor cl, 0xa7
add cl, 0x9c
mov byte [esi + eax + 0x50], cl
add eax, 1
jmp 0x432b0f
sub esp, 4
lea eax, [esi + 0x50]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
call eax
mov edi, dword [esi + 0xac]
mov ecx, dword [edi]
mov ecx, dword [ecx + 0x50]
sub esp, 0x18
mov dword [esp + 0x14], ebx
mov dword [esi + 0x17c], eax
mov dword [esp + 8], eax
mov edx, dword [esi + 0x128]
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x30
call ecx
not eax
shr eax, 0x1f
mov dword [esi + 0x310], eax
mov eax, dword [esi + 0x314]
mov ecx, dword [esi + 0x310]
mov eax, dword [eax + ecx*4]
jmp eax
or byte [edi + 0x7c7a39a], cl
add byte [eax], al
add byte [eax], al
mov eax, dword [esi + 0x1c0]
mov ecx, dword [esi + 0x1c4]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040dd20
movsx ecx, di
mov edx, 0x88888889
mov eax, ecx
imul edx
add edx, ecx
mov eax, edx
shr eax, 0x1f
shr edx, 5
add edx, eax
mov dword [esi + 0x250], 1
mov eax, dword [esi + 0x254]
mov ecx, dword [esi + 0x250]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x2b0], 1
mov eax, dword [esi + 0x2b4]
mov ecx, dword [esi + 0x2b0]
mov eax, dword [eax + ecx*4]
mov edi, dword [esi + 0x2c]
jmp eax
mov dword [esi + 0x288], 0
mov eax, dword [esi + 0x28c]
mov ecx, dword [esi + 0x288]
mov eax, dword [eax + ecx*4]
jmp eax
push eax
mov dword [esi + 0x44], esp
sub esp, 0x10
mov ecx, esp
and ecx, 0xfffffff8
mov dword [esi + 4], ecx
mov esp, ecx
push eax
sub esp, 0x10
mov dword [esi + 0x28], esp
push eax
mov dword [esi + 0x114], esp
sub esp, 8
mov dword [esi + 0x1c], esp
push eax
mov dword [esi + 0x118], esp
sub esp, 0x10
mov ecx, esp
and ecx, 0xfffffff8
mov dword [esi + 8], ecx
mov esp, ecx
push eax
sub esp, 0x1c
mov dword [esi + 0x2c], esp
push eax
mov dword [esi + 0x11c], esp
sub esp, 0x10
mov ecx, esp
and ecx, 0xfffffff8
mov dword [esi + 0x124], ecx
mov esp, ecx
push eax
sub esp, 0x1c
mov dword [esi + 0x48], esp
push eax
mov dword [esi + 0x178], esp
sub esp, 0x10
mov ecx, esp
and ecx, 0xfffffff8
mov dword [esi + 0x3c], ecx
mov esp, ecx
push eax
sub esp, 0x18
mov dword [esi + 0x12c], esp
push eax
mov dword [esi + 0x184], esp
mov ecx, dword [0x7ffe026c]
mov dword [eax], ecx
mov ecx, dword [0x7ffe0270]
mov dword [eax + 4], ecx
mov ecx, dword [0x7ffe0260]
mov dword [eax + 8], ecx
mov ecx, dword [0x7ffe0264]
sub ecx, 2
sete byte [eax + 0xc]
mov ebx, eax
add ebx, 0x10
mov dword [eax + 0x10], 0
mov ecx, eax
add ecx, 0x14
mov dword [esi + 0x120], ecx
mov byte [eax + 0x14], 0
mov ecx, eax
add ecx, 0x28
mov dword [esi + 0x180], ecx
mov word [eax + 0x28], 0
mov ecx, eax
add ecx, 0x2a
mov dword [esi + 0x188], ecx
mov byte [eax + 0x2a], 0
mov dword [esi + 0xb4], 0
sub esp, 0x14
lea eax, [esi + 0xb4]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x446c50
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x446c60
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x328], eax
mov eax, dword [esi + 0x32c]
mov ecx, dword [esi + 0x328]
mov eax, dword [eax + ecx*4]
jmp eax
sub esp, 4
mov dword [esp], ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
sub esp, 4
mov edi, dword [esi + 0x3c]
mov dword [esp], edi
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esi + 0xc]
mov ebx, dword [eax]
mov eax, dword [esi + 0x184]
mov cl, byte [eax]
mov byte [esi + 0xe0], cl
mov edx, dword [esi + 0x12c]
mov byte [edx], 0xf1
mov byte [edx + 1], 0x49
mov byte [edx + 2], 0xdc
mov byte [edx + 3], 0x4f
mov byte [edx + 4], 0xdb
mov byte [edx + 5], 0x4d
mov byte [edx + 6], 0xd6
mov byte [edx + 7], 0x43
mov byte [edx + 8], 0xe1
mov byte [edx + 9], 0x41
mov byte [edx + 0xa], 0xda
mov byte [edx + 0xb], 0x47
mov byte [edx + 0xc], 0xd8
mov byte [edx + 0xd], 0x45
mov byte [edx + 0xe], 0xfe
mov byte [edx + 0xf], 0xbb
mov byte [edx + 0x10], 0x19
mov byte [edx + 0x11], 0xb9
mov byte [edx + 0x12], 0x2a
mov byte [edx + 0x13], 0xbf
mov byte [edx + 0x14], 0x19
mov byte [edx + 0x15], 0xbd
mov byte [edx + 0x16], 0xb2
mov byte [edx + 0x17], 0xb3
mov ecx, 0x18
mov byte [edx + ecx], 0
add ecx, 1
cmp ecx, 0x1a
jne 0x432e0e
xor eax, eax
cmp eax, 0x1a
jae 0x432e59
mov dword [esi + 0x15c], ebx
mov bl, byte [edx + eax]
movzx edi, bl
mov ecx, eax
add ecx, 0xa234d1f2
mov edx, ecx
and edx, edi
mov edi, dword [esi + 0x3c]
shl edx, 1
sub ecx, edx
mov edx, dword [esi + 0x12c]
add cl, bl
mov ebx, dword [esi + 0x15c]
add cl, 0x46
mov byte [edx + eax], cl
add eax, 1
jmp 0x432e1c
mov eax, dword [ebx]
mov eax, dword [eax + 0x10]
sub esp, 0x18
mov dword [esp + 0xc], edi
mov dword [esp + 4], edx
mov dword [esp], ebx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
test eax, eax
setns al
mov cx, word [edi]
sub cx, 8
sete cl
and al, cl
movzx eax, al
mov dword [esi + 0x230], eax
mov eax, dword [esi + 0x234]
mov ecx, dword [esi + 0x230]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esi + 0x40]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x2e0], 0
mov eax, dword [esi + 0x2e4]
mov ecx, dword [esi + 0x2e0]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esi + 4]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x298], 1
mov eax, dword [esi + 0x29c]
mov ecx, dword [esi + 0x298]
mov eax, dword [eax + ecx*4]
jmp eax
add byte [ebx - 0x1f0077fc], cl
sub ah, dl
std
fcomp qword [esi - 0x74bc75b3]
xchg byte [eax - 0x74ffffff], dl
mov ss, word [ecx + eax + 0x48b0000]
cmp edi, 0xb8868be0
mov eax, dword [esi + 0x2b8]
mov ecx, dword [esi + 0x2bc]
mov eax, dword [ecx + eax*4]
mov ebx, dword [esi + 8]
jmp eax
int3
mov eax, dword [esi + 0x2b8]
mov ecx, dword [esi + 0x2bc]
mov eax, dword [ecx + eax*4]
mov ebx, dword [esi + 8]
jmp eax
int3
mov eax, dword [edi]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov edx, dword [esi + 0x190]
mov edi, dword [esi + 0x194]
mov edx, dword [edi + edx*4]
jmp edx
movzx eax, al
and eax, 1
mov dword [esi + 0x2e0], eax
mov eax, dword [esi + 0x2e4]
mov ecx, dword [esi + 0x2e0]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esi + 0x2f8]
mov ecx, dword [esi + 0x2fc]
mov eax, dword [ecx + eax*4]
mov dword [esi + 4], 0
mov edi, dword [esi]
jmp eax
mov cl, al
and ecx, 1
mov dword [esi + 0x310], ecx
mov eax, dword [esi + 0x314]
mov ecx, dword [esi + 0x310]
mov eax, dword [eax + ecx*4]
mov dword [esi + 4], 0
jmp eax
mov edx, dword [esi + 0x18]
add edx, 8
mov eax, dword [esi + 0x290]
mov ecx, dword [esi + 0x294]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esi + 0x1c0]
mov ecx, dword [esi + 0x1c4]
mov eax, dword [ecx + eax*4]
mov ecx, dword [esi + 0xbc]
mov dword [esi + 4], ecx
jmp eax
mov eax, dword [esi + 0x268]
mov ecx, dword [esi + 0x26c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebx]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
sub esp, 4
mov dword [esp], eax
call ecx
mov eax, dword [esi + 0xd8]
mov ecx, dword [esi + 0xdc]
mov eax, dword [ecx + eax*4]
jmp eax
push cs
fcmovnb st(0), st(5)
div bh
stosb byte es:[edi], al
fmul qword [ebx + 0x10086]
add byte [ebx + 0x1048e], cl
add byte [ebx - 0x1f007efc], cl
mov eax, dword [esi + 0x248]
mov ecx, dword [esi + 0x24c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esi + 0x1e8]
mov ecx, dword [esi + 0x1ec]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esi + 4]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esi + 0x240]
mov ecx, dword [esi + 0x244]
mov eax, dword [ecx + eax*4]
jmp eax
movzx eax, al
and eax, 1
mov dword [esi + 0x228], eax
mov eax, dword [esi + 0x22c]
mov ecx, dword [esi + 0x228]
mov eax, dword [eax + ecx*4]
jmp eax
sub esp, 4
mov dword [esp], edi
call fcn.0040c560
add esp, 4
mov ebx, eax
mov eax, dword [esi + 0x1e0]
mov ecx, dword [esi + 0x1e4]
mov eax, dword [ecx + eax*4]
jmp eax
push eax
mov edi, esp
push eax
mov dword [esi + 8], esp
push eax
mov dword [esi + 0xcc], esp
sub esp, 0x10
mov eax, esp
and eax, 0xfffffff8
mov dword [esi + 0x18], eax
mov esp, eax
push eax
sub esp, 0x1c
mov dword [esi + 0x24], esp
push eax
mov dword [esi + 0xc8], esp
push eax
mov dword [esi + 0x98], esp
sub esp, 0x10
mov eax, esp
and eax, 0xfffffff8
mov dword [esi + 0x14], eax
mov esp, eax
push eax
sub esp, 0x18
mov dword [esi + 0x10], esp
push eax
mov dword [esi + 0x94], esp
mov dword [esi + 0x30], 0
sub esp, 0x14
lea eax, [esi + 0x30]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x446c50
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x446c60
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x348], eax
mov eax, dword [esi + 0x34c]
mov ecx, dword [esi + 0x348]
mov eax, dword [eax + ecx*4]
mov dword [esi + 4], 0
jmp eax
mov eax, dword [esi + 0x2d0]
mov ecx, dword [esi + 0x2d4]
mov eax, dword [ecx + eax*4]
xor edi, edi
jmp eax
mov ebx, dword [esi + 0x98]
mov edi, ebx
mov ecx, 1
mov eax, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, ebx
add eax, 4
add edx, 4
mov ebx, edx
mov edi, eax
xor ecx, ecx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
xor ecx, ecx
cmp ecx, 0
je 0x433bb5
add ecx, 0xffffffff
mov edi, edx
add edi, 1
mov dl, byte [edx]
mov ebx, eax
add ebx, 1
mov byte [eax], dl
mov eax, ebx
mov edx, edi
jmp 0x433b99
mov eax, dword [esi + 0x98]
mov bl, byte [eax + 1]
mov eax, dword [esi + 0x288]
mov ecx, dword [esi + 0x28c]
mov eax, dword [ecx + eax*4]
mov edi, dword [esi + 0x14]
jmp eax
cdq
push esp
test byte [ebx + ecx*4 + 0x8c86], 0
mov al, byte [eax]
mov byte [esi + 0x38], al
mov ecx, dword [esi + 0xc]
mov byte [ecx], 0x33
mov byte [ecx + 1], 0x99
mov byte [ecx + 2], 0x27
mov byte [ecx + 3], 0x97
mov byte [ecx + 4], 0x20
mov byte [ecx + 5], 0x95
mov byte [ecx + 6], 0x92
mov byte [ecx + 7], 0x93
mov eax, 8
mov byte [ecx + eax], 0
add eax, 1
cmp eax, 0xb
jne 0x433c08
xor ebx, ebx
mov edi, dword [esi]
cmp ebx, 0xb
jae 0x433c97
movzx edx, byte [ecx + ebx]
mov ecx, edx
and ecx, 0x24
xor ecx, 0x75cb8c24
mov eax, edx
xor eax, 0x75cb8c24
or edx, 0xdb
and edx, eax
mov eax, 0x33a47019
sub eax, ebx
and eax, 0x75cb8c24
mov edi, ebx
add edi, 0x4c5b8fe6
and edi, 0x75cb8c24
xor edi, 0x75cb8c24
or eax, edi
mov edi, 0x33a47019
sub edi, ebx
and edi, 0x8a3473db
or ecx, edx
or edi, eax
xor edi, 0x8a3473db
mov eax, edi
and eax, ecx
shl eax, 1
sub edi, eax
add edi, ecx
mov ecx, dword [esi + 0xc]
mov eax, edi
shl eax, 1
and eax, 2
xor edi, 0x7e
sub eax, edi
mov edi, dword [esi]
mov byte [ecx + ebx], al
add ebx, 1
jmp 0x433c18
sub esp, 4
mov dword [esp], ecx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi + 0xb4], eax
mov eax, dword [esi + 0x88]
mov al, byte [eax]
mov byte [esi + 0x40], al
mov ecx, dword [esi + 0x1c]
mov byte [ecx], 0x53
mov byte [ecx + 1], 0xe1
mov byte [ecx + 2], 0xa7
mov byte [ecx + 3], 0xe3
mov byte [ecx + 4], 0x58
mov byte [ecx + 5], 0xe5
mov byte [ecx + 6], 0xa3
mov byte [ecx + 7], 0xe7
mov byte [ecx + 8], 0x9b
mov byte [ecx + 9], 0xd9
mov byte [ecx + 0xa], 0x6e
mov byte [ecx + 0xb], 0xdb
mov byte [ecx + 0xc], 0xbc
mov byte [ecx + 0xd], 0xdd
mov byte [ecx + 0xe], 0x84
mov byte [ecx + 0xf], 0xdf
mov byte [ecx + 0x10], 0xb0
mov byte [ecx + 0x11], 0xd1
mov byte [ecx + 0x12], 0x94
mov byte [ecx + 0x13], 0xd3
mov byte [ecx + 0x14], 0x66
mov byte [ecx + 0x15], 0xd5
mov byte [ecx + 0x16], 0x69
mov byte [ecx + 0x17], 0xd7
mov byte [ecx + 0x18], 0x75
mov byte [ecx + 0x19], 0xc9
mov byte [ecx + 0x1a], 0xaa
mov byte [ecx + 0x1b], 0xcb
mov byte [ecx + 0x1c], 0x8d
mov byte [ecx + 0x1d], 0xcd
mov byte [ecx + 0x1e], 0x50
mov byte [ecx + 0x1f], 0xcf
mov byte [ecx + 0x20], 0x54
mov byte [ecx + 0x21], 0xc1
mov byte [ecx + 0x22], 0x5b
mov byte [ecx + 0x23], 0xc3
mov byte [ecx + 0x24], 0x72
mov byte [ecx + 0x25], 0xc5
mov byte [ecx + 0x26], 0x5f
mov byte [ecx + 0x27], 0xc7
mov byte [ecx + 0x28], 0xaa
mov byte [ecx + 0x29], 0x39
mov byte [ecx + 0x2a], 0xaf
mov byte [ecx + 0x2b], 0x3b
mov byte [ecx + 0x2c], 0xaf
mov byte [ecx + 0x2d], 0x3d
mov byte [ecx + 0x2e], 0x8e
mov byte [ecx + 0x2f], 0x3f
mov byte [ecx + 0x30], 0xa2
mov byte [ecx + 0x31], 0x31
mov byte [ecx + 0x32], 0xad
mov byte [ecx + 0x33], 0x33
mov byte [ecx + 0x34], 0x90
mov byte [ecx + 0x35], 0x35
mov byte [ecx + 0x36], 0xa3
mov byte [ecx + 0x37], 0x37
mov byte [ecx + 0x38], 0x8b
mov byte [ecx + 0x39], 0x29
mov byte [ecx + 0x3a], 0xbe
mov byte [ecx + 0x3b], 0x2b
mov byte [ecx + 0x3c], 0x2c
mov byte [ecx + 0x3d], 0x2d
mov eax, 0x3e
mov byte [ecx + eax], 0
add eax, 1
cmp eax, 0x40
jne 0x433db3
xor eax, eax
cmp eax, 0x40
jae 0x433e09
movzx edx, byte [ecx + eax]
mov ecx, eax
add ecx, 0x5364e5d8
xor ecx, edx
mov edx, ecx
add edx, 1
mov edi, ecx
xor edi, 0xffffffff
or edi, 0x5f0782c7
add edi, edx
shl edi, 1
xor ecx, 0x5f0782c7
mov edx, ecx
add edx, edi
mov edi, dword [esi]
shl ecx, 1
and ecx, 2
xor edx, 1
add edx, ecx
mov ecx, dword [esi + 0x1c]
mov byte [ecx + eax], dl
add eax, 1
jmp 0x433dc1
sub esp, 4
mov dword [esp], ecx
mov eax, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
call eax
mov ecx, dword [esi + 0x28]
mov ecx, dword [ecx]
mov edx, dword [ecx]
mov edx, dword [edx + 0x50]
sub esp, 0x18
mov dword [esp + 0x14], edi
mov dword [esp + 8], eax
mov eax, dword [esi + 0xb4]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x30
call edx
mov eax, dword [esi + 0x130]
mov ecx, dword [esi + 0x134]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x140], 0
mov eax, dword [esi + 0x144]
mov ecx, dword [esi + 0x140]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040dd20
mov eax, dword [esi + 0x84]
mov byte [eax], bl
mov dword [esi + 0x270], 1
mov eax, dword [esi + 0x274]
mov ecx, dword [esi + 0x270]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x2a0], 1
mov eax, dword [esi + 0x2a4]
mov ecx, dword [esi + 0x2a0]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x300], 1
mov eax, dword [esi + 0x304]
mov ecx, dword [esi + 0x300]
mov eax, dword [eax + ecx*4]
jmp eax
xor eax, eax
sub edi, 3
sete al
mov dword [esi + 0x198], eax
mov eax, dword [esi + 0x19c]
mov ecx, dword [esi + 0x198]
mov eax, dword [eax + ecx*4]
mov edi, dword [esi]
jmp eax
call fcn.0040dd20
mov edi, ebx
inc edi
mov dword [esi + 0x1f0], 1
mov eax, dword [esi + 0x1f4]
mov ecx, dword [esi + 0x1f0]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esi + 0x28], ebx
call fcn.0040dd20
mov dword [esi + 0x320], 0
mov eax, dword [esi + 0x324]
mov ecx, dword [esi + 0x320]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, edi
add eax, 8
mov dword [esi + 0xb0], eax
mov eax, dword [edi + 8]
sub esp, 4
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantInit]
call eax
mov ebx, eax
mov edi, dword [edi + 8]
mov eax, dword [esi + 0x220]
mov ecx, dword [esi + 0x224]
mov eax, dword [ecx + eax*4]
jmp eax
sub esp, 4
mov eax, dword [esi + 0x18]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
sub esp, 4
mov dword [esp], edi
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esi + 8]
mov eax, dword [eax]
mov ecx, dword [esi + 0x94]
mov cl, byte [ecx]
mov byte [esi + 0x50], cl
mov byte [ebx], 0xe4
mov byte [ebx + 1], 0x49
mov byte [ebx + 2], 0xff
mov byte [ebx + 3], 0x57
mov byte [ebx + 4], 0xeb
mov byte [ebx + 5], 0x55
mov byte [ebx + 6], 0xe2
mov byte [ebx + 7], 0x53
mov byte [ebx + 8], 0xe4
mov byte [ebx + 9], 0x51
mov byte [ebx + 0xa], 0xff
mov byte [ebx + 0xb], 0x5f
mov byte [ebx + 0xc], 0xe5
mov byte [ebx + 0xd], 0x5d
mov byte [ebx + 0xe], 8
mov byte [ebx + 0xf], 0x5b
mov byte [ebx + 0x10], 0xf9
mov byte [ebx + 0x11], 0x59
mov byte [ebx + 0x12], 0x13
mov byte [ebx + 0x13], 0xa7
mov byte [ebx + 0x14], 9
mov byte [ebx + 0x15], 0xa5
mov byte [ebx + 0x16], 0xa2
mov byte [ebx + 0x17], 0xa3
mov ecx, 0x18
mov byte [ebx + ecx], 0
add ecx, 1
cmp ecx, 0x1a
jne 0x43400a
xor ecx, ecx
cmp ecx, 0x1a
jae 0x43404e
mov bl, byte [ebx + ecx]
mov edi, ecx
add edi, 0x6e
mov edx, ecx
add edx, 0xee
and edx, 0xae
and edi, 0x51
or edx, edi
mov edi, dword [esi + 0x14]
xor dl, bl
add dl, 0x5a
mov ebx, dword [esi + 0x10]
mov byte [ebx + ecx], dl
mov ebx, dword [esi + 0x10]
add ecx, 1
jmp 0x434018
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x10]
sub esp, 0x18
mov dword [esp + 0xc], edi
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call ecx
test eax, eax
setns al
mov cx, word [edi]
sub cx, 8
sete cl
and al, cl
mov dword [esi + 0x230], 0
mov ecx, dword [esi + 0x234]
mov edx, dword [esi + 0x230]
mov ecx, dword [ecx + edx*4]
jmp ecx
sub esp, 4
mov dword [esp], ebx
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call edi
sub esp, 4
mov eax, dword [esi + 0xc0]
mov dword [esp], eax
call edi
mov eax, dword [esi + 0x170]
mov ecx, dword [esi + 0x174]
mov eax, dword [ecx + eax*4]
mov ebx, dword [esi + 0x28]
jmp eax
mov eax, dword [esi + 0x180]
mov ecx, dword [esi + 0x184]
mov eax, dword [ecx + eax*4]
jmp eax
sub esp, 4
mov dword [esp], 0xc
call fcn.0040c560
add esp, 4
mov dword [eax], 0
mov edi, eax
add edi, 4
mov byte [eax + 4], 0
mov ecx, eax
add ecx, 8
mov dword [esi + 0xb8], ecx
mov dword [esi + 0xbc], eax
mov dword [eax + 8], 0
sub esp, 4
mov eax, dword [esi + 0x18]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esi + 8]
mov eax, dword [eax]
mov dword [esi + 0xa8], eax
mov eax, dword [esi + 0xc8]
mov al, byte [eax]
mov byte [esi + 0x48], al
mov ecx, dword [esi + 0x24]
mov byte [ecx], 0xac
mov byte [ecx + 1], 0x3b
mov byte [ecx + 2], 0xa4
mov byte [ecx + 3], 0x39
mov byte [ecx + 4], 0xa9
mov byte [ecx + 5], 0x27
mov byte [ecx + 6], 0x8a
mov byte [ecx + 7], 0x25
mov byte [ecx + 8], 0xbf
mov byte [ecx + 9], 0x23
mov byte [ecx + 0xa], 0x8f
mov byte [ecx + 0xb], 0x21
mov byte [ecx + 0xc], 0xbc
mov byte [ecx + 0xd], 0x2f
mov byte [ecx + 0xe], 0x93
mov byte [ecx + 0xf], 0x2d
mov byte [ecx + 0x10], 0xb0
mov byte [ecx + 0x11], 0x2b
mov byte [ecx + 0x12], 0x85
mov byte [ecx + 0x13], 0x29
mov byte [ecx + 0x14], 0xb4
mov byte [ecx + 0x15], 0x17
mov byte [ecx + 0x16], 0xbd
mov byte [ecx + 0x17], 0x15
mov byte [ecx + 0x18], 0x14
mov byte [ecx + 0x19], 0x13
mov eax, 0x1a
mov byte [ecx + eax], 0
add eax, 1
cmp eax, 0x20
jne 0x4341b5
mov dword [esi + 0x84], edi
xor eax, eax
cmp eax, 0x20
jae 0x43421d
mov bl, byte [ecx + eax]
movzx ecx, bl
mov dword [esi + 0x9c], ecx
mov ecx, eax
add ecx, 0x8b52840b
mov edi, 0x74ad7bf4
sub edi, eax
and edi, 0x6100e0ed
mov edx, ecx
and edx, 0x1eff1f12
or edi, edx
xor edi, dword [esi + 0x9c]
xor edi, 0x12
mov edx, ecx
and edx, edi
shl edx, 1
sub ecx, edx
add cl, bl
add cl, 0xc9
mov edx, dword [esi + 0x24]
mov byte [edx + eax], cl
mov ecx, dword [esi + 0x24]
add eax, 1
jmp 0x4341c9
mov edx, dword [esi + 0xa8]
mov eax, dword [edx]
mov eax, dword [eax + 0x10]
sub esp, 0x18
mov edi, dword [esi + 0x18]
mov dword [esp + 0xc], edi
mov dword [esp + 4], ecx
mov dword [esp], edx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
test eax, eax
setns al
mov cx, word [edi]
sub cx, 3
sete cl
and al, cl
movzx eax, al
mov dword [esi + 0x2b0], eax
mov eax, dword [esi + 0x2b4]
mov ecx, dword [esi + 0x2b0]
mov eax, dword [eax + ecx*4]
mov edi, dword [esi + 0x14]
jmp eax
push ebp
and ah, dh
mov eax, dword [bp + 0xf0]
add byte [eax], al
mov ecx, dword [esi + 0xf4]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x2a8], 0
mov eax, dword [esi + 0x2ac]
mov ecx, dword [esi + 0x2a8]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040dd20
mov dword [ebx], 0
mov eax, dword [edi]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x10]
sub esp, 0x14
mov dword [esp + 0x10], ebx
mov edx, dword [esi + 8]
mov dword [esp + 0xc], edx
mov dword [esp], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0xffffffff
call ecx
test eax, eax
sets cl
sub eax, 1
sete al
mov edx, dword [ebx]
test edx, edx
sete dl
or al, dl
or al, cl
mov dword [esi + 0x2e8], 1
mov ecx, dword [esi + 0x2ec]
mov edx, dword [esi + 0x2e8]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.0040dd20
mov dword [esi + 0x218], 0
mov eax, dword [esi + 0x21c]
mov ecx, dword [esi + 0x218]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040dd20
xor eax, eax
test edi, edi
sete cl
mov dword [esi + 0x2c0], 1
mov edx, dword [esi + 0x2c4]
mov ebx, dword [esi + 0x2c0]
mov edx, dword [edx + ebx*4]
jmp edx
call fcn.0040dd20
mov dword [esi + 0x278], 1
mov eax, dword [esi + 0x27c]
mov ecx, dword [esi + 0x278]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esi + 0xe0]
mov ecx, dword [esi + 0xe4]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esi + 0x250]
mov ecx, dword [esi + 0x254]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [esi + 0x2c]
mov byte [esi + 0x34], al
mov byte [esi + 0x54], 0xa2
mov byte [esi + 0x55], 0x71
mov byte [esi + 0x56], 0xa5
mov byte [esi + 0x57], 0x73
mov byte [esi + 0x58], 0xab
mov byte [esi + 0x59], 0x7d
mov byte [esi + 0x5a], 0xa2
mov byte [esi + 0x5b], 0x7f
mov byte [esi + 0x5c], 0xdc
mov byte [esi + 0x5d], 0x79
mov byte [esi + 0x5e], 0xa9
mov byte [esi + 0x5f], 0x7b
mov byte [esi + 0x60], 0xe9
mov byte [esi + 0x61], 0x45
mov byte [esi + 0x62], 0xe5
mov byte [esi + 0x63], 0x47
mov byte [esi + 0x64], 0xfd
mov byte [esi + 0x65], 0x41
mov byte [esi + 0x66], 0xf0
mov byte [esi + 0x67], 0x43
mov byte [esi + 0x68], 0xe5
mov byte [esi + 0x69], 0x4d
mov byte [esi + 0x6a], 0xf2
mov byte [esi + 0x6b], 0x4f
mov byte [esi + 0x6c], 0xf1
mov byte [esi + 0x6d], 0x49
mov byte [esi + 0x6e], 0x89
mov byte [esi + 0x6f], 0x4b
mov byte [esi + 0x70], 0xf9
mov byte [esi + 0x71], 0x55
mov byte [esi + 0x72], 0xe0
mov byte [esi + 0x73], 0x57
mov byte [esi + 0x74], 0xec
mov byte [esi + 0x75], 0x51
mov byte [esi + 0x76], 0xff
mov byte [esi + 0x77], 0x53
mov byte [esi + 0x78], 0xee
mov byte [esi + 0x79], 0x5d
mov byte [esi + 0x7a], 0xac
mov byte [esi + 0x7b], 0x5f
mov byte [esi + 0x7c], 0x58
mov byte [esi + 0x7d], 0x59
mov eax, 0x2a
mov byte [esi + eax + 0x54], 0
add eax, 1
cmp eax, 0x30
jne 0x434458
mov dword [esi], edi
xor eax, eax
cmp eax, 0x30
jae 0x4344a0
movzx edx, byte [esi + eax + 0x54]
mov edi, edx
xor edi, 0xffffffff
mov ecx, 0x6b
sub ecx, eax
or ecx, edi
mov edi, 0x6b
sub edi, eax
and edi, edx
add ecx, eax
add ecx, 0x95
or ecx, edi
add cl, 0x1c
mov byte [esi + eax + 0x54], cl
add eax, 1
jmp 0x434469
sub esp, 4
lea eax, [esi + 0x54]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
call eax
mov edi, eax
mov ecx, dword [esi + 0x30]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
sub esp, 0x24
mov dword [esp + 0x20], ebx
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
call eax
not eax
shr eax, 0x1f
mov dword [esi + 0x340], eax
mov eax, dword [esi + 0x344]
mov ecx, dword [esi + 0x340]
mov eax, dword [eax + ecx*4]
mov dword [esi + 4], 0
jmp eax
push eax
mov esi, 0x28868b28
add dword [eax], eax
add byte [ebx + 0x12c8e], cl
add byte [ebx - 0x1f007efc], cl
mov eax, dword [esi + 0x280]
mov ecx, dword [esi + 0x284]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x148], 0
mov eax, dword [esi + 0x14c]
mov ecx, dword [esi + 0x148]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x2c8], 0
mov eax, dword [esi + 0x2cc]
mov ecx, dword [esi + 0x2c8]
mov eax, dword [eax + ecx*4]
jmp eax
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00430f70
add esp, 8
mov ebx, eax
mov eax, dword [esi + 0x200]
mov ecx, dword [esi + 0x204]
mov eax, dword [ecx + eax*4]
jmp eax
mov cl, al
and ecx, 1
mov dword [esi + 0x328], ecx
mov eax, dword [esi + 0x32c]
mov ecx, dword [esi + 0x328]
mov eax, dword [eax + ecx*4]
mov dword [esi + 4], 0
jmp eax
sub esp, 4
mov dword [esp], edi
mov eax, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call eax
mov eax, dword [esi + 0x30]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
sub esp, 4
mov dword [esp], eax
call ecx
mov eax, dword [esi + 0x150]
mov ecx, dword [esi + 0x154]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esi + 0x8c]
mov al, byte [eax]
mov byte [esi + 0x3c], al
mov ecx, dword [esi + 0xc]
mov byte [ecx], 0x33
mov byte [ecx + 1], 0x99
mov byte [ecx + 2], 0x27
mov byte [ecx + 3], 0x97
mov byte [ecx + 4], 0x20
mov byte [ecx + 5], 0x95
mov byte [ecx + 6], 0x92
mov byte [ecx + 7], 0x93
mov eax, 8
mov byte [ecx + eax], 0
add eax, 1
cmp eax, 0xb
jne 0x43462b
xor eax, eax
mov edi, dword [esi]
cmp eax, 0xb
jae 0x4346c6
movzx edx, byte [ecx + eax]
mov ecx, edx
and ecx, 0x24
xor ecx, 0x75cb8c24
mov edi, edx
xor edi, 0x75cb8c24
or edx, 0xdb
and edx, edi
mov ebx, 0x33a47019
sub ebx, eax
and ebx, 0x75cb8c24
mov edi, eax
add edi, 0x4c5b8fe6
and edi, 0x75cb8c24
xor edi, 0x75cb8c24
or ebx, edi
mov edi, 0x33a47019
sub edi, eax
and edi, 0x8a3473db
or ecx, edx
or edi, ebx
xor edi, 0x8a3473db
mov edx, edi
and edx, ecx
shl edx, 1
sub edi, edx
add edi, ecx
mov ecx, edi
shl ecx, 1
and ecx, 2
xor edi, 0x7e
sub ecx, edi
mov edi, dword [esi]
mov edx, dword [esi + 0xc]
mov byte [edx + eax], cl
mov ecx, dword [esi + 0xc]
add eax, 1
jmp 0x43463b
sub esp, 4
mov dword [esp], ecx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov ebx, eax
mov eax, dword [esi + 0x88]
mov al, byte [eax]
mov byte [esi + 0x44], al
mov ecx, dword [esi + 0x1c]
mov byte [ecx], 0x53
mov byte [ecx + 1], 0xe1
mov byte [ecx + 2], 0xa7
mov byte [ecx + 3], 0xe3
mov byte [ecx + 4], 0x58
mov byte [ecx + 5], 0xe5
mov byte [ecx + 6], 0xa3
mov byte [ecx + 7], 0xe7
mov byte [ecx + 8], 0x9b
mov byte [ecx + 9], 0xd9
mov byte [ecx + 0xa], 0x6e
mov byte [ecx + 0xb], 0xdb
mov byte [ecx + 0xc], 0xbc
mov byte [ecx + 0xd], 0xdd
mov byte [ecx + 0xe], 0x84
mov byte [ecx + 0xf], 0xdf
mov byte [ecx + 0x10], 0xb0
mov byte [ecx + 0x11], 0xd1
mov byte [ecx + 0x12], 0x94
mov byte [ecx + 0x13], 0xd3
mov byte [ecx + 0x14], 0x66
mov byte [ecx + 0x15], 0xd5
mov byte [ecx + 0x16], 0x69
mov byte [ecx + 0x17], 0xd7
mov byte [ecx + 0x18], 0x75
mov byte [ecx + 0x19], 0xc9
mov byte [ecx + 0x1a], 0xaa
mov byte [ecx + 0x1b], 0xcb
mov byte [ecx + 0x1c], 0x8d
mov byte [ecx + 0x1d], 0xcd
mov byte [ecx + 0x1e], 0x50
mov byte [ecx + 0x1f], 0xcf
mov byte [ecx + 0x20], 0x54
mov byte [ecx + 0x21], 0xc1
mov byte [ecx + 0x22], 0x5b
mov byte [ecx + 0x23], 0xc3
mov byte [ecx + 0x24], 0x72
mov byte [ecx + 0x25], 0xc5
mov byte [ecx + 0x26], 0x5f
mov byte [ecx + 0x27], 0xc7
mov byte [ecx + 0x28], 0xaa
mov byte [ecx + 0x29], 0x39
mov byte [ecx + 0x2a], 0xaf
mov byte [ecx + 0x2b], 0x3b
mov byte [ecx + 0x2c], 0xaf
mov byte [ecx + 0x2d], 0x3d
mov byte [ecx + 0x2e], 0x8e
mov byte [ecx + 0x2f], 0x3f
mov byte [ecx + 0x30], 0xa2
mov byte [ecx + 0x31], 0x31
mov byte [ecx + 0x32], 0xad
mov byte [ecx + 0x33], 0x33
mov byte [ecx + 0x34], 0x90
mov byte [ecx + 0x35], 0x35
mov byte [ecx + 0x36], 0xa3
mov byte [ecx + 0x37], 0x37
mov byte [ecx + 0x38], 0x8b
mov byte [ecx + 0x39], 0x29
mov byte [ecx + 0x3a], 0xbe
mov byte [ecx + 0x3b], 0x2b
mov byte [ecx + 0x3c], 0x2c
mov byte [ecx + 0x3d], 0x2d
mov eax, 0x3e
mov byte [ecx + eax], 0
add eax, 1
cmp eax, 0x40
jne 0x4347de
xor eax, eax
cmp eax, 0x40
jae 0x434834
movzx edx, byte [ecx + eax]
mov ecx, eax
add ecx, 0x5364e5d8
xor ecx, edx
mov edx, ecx
add edx, 1
mov edi, ecx
xor edi, 0xffffffff
or edi, 0x5f0782c7
add edi, edx
shl edi, 1
xor ecx, 0x5f0782c7
mov edx, ecx
add edx, edi
mov edi, dword [esi]
shl ecx, 1
and ecx, 2
xor edx, 1
add edx, ecx
mov ecx, dword [esi + 0x1c]
mov byte [ecx + eax], dl
add eax, 1
jmp 0x4347ec
sub esp, 4
mov dword [esp], ecx
mov eax, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
call eax
mov edx, eax
mov eax, dword [esi + 0x28]
mov eax, dword [eax]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x50]
sub esp, 0x18
mov dword [esp + 0x14], edi
mov dword [esi + 0xc0], edx
mov dword [esp + 8], edx
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x30
call ecx
xor ecx, ecx
test eax, eax
setns al
mov dword [esi + 0x318], 0
mov edx, dword [esi + 0x31c]
mov edi, dword [esi + 0x318]
mov edx, dword [edx + edi*4]
jmp edx
mov eax, dword [esi + 0x178]
mov ecx, dword [esi + 0x17c]
mov eax, dword [ecx + eax*4]
jmp eax
sub esp, 4
mov dword [esp], edi
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
call eax
xor eax, eax
cmp dword [esi + 4], 0
sete al
mov dword [esi + 0x1c8], eax
mov eax, dword [esi + 0x1cc]
mov ecx, dword [esi + 0x1c8]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esi + 0x90]
jmp eax
mov eax, dword [esi + 0x2d8]
mov ecx, dword [esi + 0x2dc]
mov eax, dword [ecx + eax*4]
mov edi, 3
jmp eax
call fcn.0040dd20
mov dword [esi + 0x1f8], 1
mov eax, dword [esi + 0x1fc]
mov ecx, dword [esi + 0x1f8]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x258], 1
mov eax, dword [esi + 0x25c]
mov ecx, dword [esi + 0x258]
mov eax, dword [eax + ecx*4]
jmp eax
aam 0x25
aaa
xor dh, byte [ebx + 0x62]
in eax, 0x97
mov eax, dword [esi + 0x118]
mov ecx, dword [esi + 0x11c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esi + 0x158]
mov ecx, dword [esi + 0x15c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040dd20
lea eax, [edi + ebx*2]
mov dword [esi + 0x210], 1
mov ecx, dword [esi + 0x214]
mov edx, dword [esi + 0x210]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esi + 0x298]
mov ecx, dword [esi + 0x29c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esi + 8]
mov eax, dword [eax]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
sub esp, 4
mov dword [esp], eax
call ecx
mov eax, dword [esi + 0x1b8]
mov ecx, dword [esi + 0x1bc]
mov eax, dword [ecx + eax*4]
xor edi, edi
jmp eax
call fcn.0040dd20
mov dword [esi + 0x2f0], 0
mov eax, dword [esi + 0x2f4]
mov ecx, dword [esi + 0x2f0]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esi + 0xcc]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x168], 0
mov eax, dword [esi + 0x16c]
mov ecx, dword [esi + 0x168]
mov eax, dword [eax + ecx*4]
mov edi, dword [esi + 0xc4]
jmp eax
call fcn.0040dd20
mov eax, dword [ebx]
sub esp, 0x20
mov dword [esp], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 3
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov eax, dword [sym.imp.ole32.dll_CoSetProxyBlanket]
call eax
xor ecx, ecx
test eax, eax
setns al
mov dword [esi + 0x330], 0
mov edx, dword [esi + 0x334]
mov edi, dword [esi + 0x330]
mov edx, dword [edx + edi*4]
jmp edx
mov eax, dword [esi + 0xd0]
mov ecx, dword [esi + 0xd4]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x238], 0
mov eax, dword [esi + 0x23c]
mov ecx, dword [esi + 0x238]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esi + 0x10]
jmp eax
mov dword [esi + 0xac], ebx
mov ecx, dword [esi + 0x208]
mov edx, dword [esi + 0x20c]
mov ecx, dword [edx + ecx*4]
jmp ecx
sub esp, 4
mov dword [esp], eax
call ecx
mov eax, dword [esi + 0x188]
mov ecx, dword [esi + 0x18c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esi + 0x1d8]
mov ecx, dword [esi + 0x1dc]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040dd20
mov eax, dword [ebx]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
sub esp, 4
mov dword [esp], eax
call ecx
mov dword [esi + 0x160], 0
mov eax, dword [esi + 0x164]
mov ecx, dword [esi + 0x160]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esi + 0x1a0]
mov ecx, dword [esi + 0x1a4]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x1b0], 0
mov eax, dword [esi + 0x1b4]
mov ecx, dword [esi + 0x1b0]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esi + 0xc4], edi
call fcn.0040dd20
mov dword [esi + 0x338], 1
mov eax, dword [esi + 0x33c]
mov ecx, dword [esi + 0x338]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esi + 0x84]
mov byte [eax], bl
mov eax, dword [esi + 0x108]
mov ecx, dword [esi + 0x10c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x1a8], 1
mov eax, dword [esi + 0x1ac]
mov ecx, dword [esi + 0x1a8]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x308], 1
mov eax, dword [esi + 0x30c]
mov ecx, dword [esi + 0x308]
mov eax, dword [eax + ecx*4]
mov dword [esi + 0x90], ebx
jmp eax
mov al, cl
and eax, 1
mov dword [esi + 0x2b8], eax
mov eax, dword [esi + 0x2bc]
mov ecx, dword [esi + 0x2b8]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esi + 0x90]
jmp eax
mov eax, dword [ebx]
sub esp, 0x20
mov dword [esp], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 3
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov eax, dword [sym.imp.ole32.dll_CoSetProxyBlanket]
call eax
mov eax, dword [esi + 0x138]
mov ecx, dword [esi + 0x13c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esi + 0xb8]
mov dword [eax], ebx
mov eax, dword [esi + 0xb0]
mov ecx, dword [eax]
mov eax, dword [esi + 0xac]
shl eax, 1
mov dword [esi + 0x20], ecx
add ecx, eax
mov eax, ebx
add eax, edi
mov edi, dword [esi + 0x14]
mov edx, eax
add eax, 0xffffffff
cmp ebx, eax
jae 0x434cd1
cmp ecx, 0
je 0x434c7b
cmp dword [esi + 0x20], ecx
jae 0x434cd1
mov dword [esi + 0xa4], ecx
mov eax, dword [esi + 0x20]
mov cx, word [eax]
movzx eax, cx
cmp cx, 0
je 0x434cd1
add dword [esi + 0x20], 2
mov dword [esi + 0xa0], edx
mov ecx, edx
sub ecx, ebx
mov edx, ecx
and edx, 1
xor edx, 1
and ecx, 0xfffffffe
sub ecx, edx
sub esp, 0xc
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00437010
mov ecx, dword [esi + 0xa4]
add esp, 0xc
add ebx, eax
mov eax, dword [esi + 0xa0]
jmp 0x434c68
mov byte [ebx], 0
mov eax, dword [esi + 0x1d0]
mov ecx, dword [esi + 0x1d4]
mov eax, dword [ecx + eax*4]
jmp eax
fisub word [eax + 0x7c6d2d41]
shr byte [edi - 0x7d], 0xec
add al, 0x8b
inc esi
sbb byte [ecx + 0x15ff2404], cl
push eax
ja 0x434d3f
add byte [ebx + 0x3c8904ec], al
and al, 0xff
adc eax, sym.imp.OLEAUT32.dll_VariantClear
mov eax, dword [esi + 8]
mov eax, dword [eax]
mov ecx, dword [esi + 0x94]
mov cl, byte [ecx]
mov byte [esi + 0x4c], cl
mov byte [ebx], 0xe4
mov byte [ebx + 1], 0x49
mov byte [ebx + 2], 0xff
mov byte [ebx + 3], 0x57
mov byte [ebx + 4], 0xeb
mov byte [ebx + 5], 0x55
mov byte [ebx + 6], 0xe2
mov byte [ebx + 7], 0x53
mov byte [ebx + 8], 0xe4
mov byte [ebx + 9], 0x51
mov byte [ebx + 0xa], 0xff
mov byte [ebx + 0xb], 0x5f
mov byte [ebx + 0xc], 0xe5
mov byte [ebx + 0xd], 0x5d
mov byte [ebx + 0xe], 8
mov byte [ebx + 0xf], 0x5b
mov byte [ebx + 0x10], 0xf9
mov byte [ebx + 0x11], 0x59
mov byte [ebx + 0x12], 0x13
mov byte [ebx + 0x13], 0xa7
mov byte [ebx + 0x14], 9
mov byte [ebx + 0x15], 0xa5
mov byte [ebx + 0x16], 0xa2
mov byte [ebx + 0x17], 0xa3
mov ecx, 0x18
mov byte [ebx + ecx], 0
add ecx, 1
cmp ecx, 0x1a
jne 0x434d7c
xor ecx, ecx
cmp ecx, 0x1a
jae 0x434dc0
mov bl, byte [ebx + ecx]
mov edi, ecx
add edi, 0x6e
mov edx, ecx
add edx, 0xee
and edx, 0xae
and edi, 0x51
or edx, edi
mov edi, dword [esi + 0x14]
xor dl, bl
add dl, 0x5a
mov ebx, dword [esi + 0x10]
mov byte [ebx + ecx], dl
mov ebx, dword [esi + 0x10]
add ecx, 1
jmp 0x434d8a
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x10]
sub esp, 0x18
mov dword [esp + 0xc], edi
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call ecx
mov eax, dword [esi + 0xf8]
mov ecx, dword [esi + 0xfc]
mov eax, dword [ecx + eax*4]
jmp eax
push 0x2e
scasd eax, dword es:[edi]
mov dword [edi + 0x77], ecx
nop
fisttp dword [ebx + 0xe886]
add byte [ebx + 0xec8e], cl
add byte [ebx - 0x1f007efc], cl
push ebp
sub eax, 0x868ba58c
adc byte [ecx], al
add byte [eax], al
mov ecx, dword [esi + 0x114]
mov eax, dword [ecx + eax*4]
jmp eax
push eax
mov ebx, esp
sub esp, 0xc
mov dword [esi + 0xc], esp
push eax
mov dword [esi + 0x8c], esp
sub esp, 0x40
mov dword [esi + 0x1c], esp
push eax
mov dword [esi + 0x88], esp
mov eax, dword [esi + 0x350]
mov ecx, dword [esi + 0x354]
mov eax, dword [ecx + eax*4]
jmp eax
mov dword [ebx], 0
mov eax, dword [edi]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x10]
sub esp, 0x14
mov dword [esp + 0x10], ebx
mov edx, dword [esi + 8]
mov dword [esp + 0xc], edx
mov dword [esp], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0xffffffff
call ecx
mov eax, dword [esi + 0x120]
mov ecx, dword [esi + 0x124]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040dd20
mov dword [esi + 0x260], 1
mov eax, dword [esi + 0x264]
mov ecx, dword [esi + 0x260]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x60]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xd7d59bfd
setl cl
mov dword [ebp - 0x3cc], ecx
mov ecx, dword [ebp - 0x3d0]
mov edx, dword [ebp - 0x3cc]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x3d4]
mov edx, dword [ebp - 0x3d8]
mov ecx, dword [edx + ecx*4]
jmp ecx
rol byte [edx], cl
inc esp
rol byte [edx], cl
push eax
rol byte [edx], cl
push eax
rol byte [edx], cl
push eax
rol byte [edx], cl
push edx
rol byte [edx], cl
neg al
inc edx
add byte [edx - 0x2e], bh
inc edx
add dl, al
fadd dword [edx]
scasd eax, dword es:[edi]
rol byte [edx], cl
inc esi
rol dword [edx], cl
into
rol byte [edx], cl
inc esi
rol dword [edx], cl
or ah, dl
inc edx
add byte [esi], dl
aam 0x42
add byte [ebp + 0x600042d8], ch
aam 0x42
add byte [ecx], ah
salc
inc edx
add byte [eax - 0x2c], dh
inc edx
add byte [ecx], ah
salc
inc edx
add byte [eax - 0x2c], dh
inc edx
add byte [eax - 0x2c], dh
inc edx
add byte [eax - 0x2c], dh
inc edx
add byte [esi - 0x2c], dh
inc edx
add byte [esi + 0x210042d4], al
salc
inc edx
add byte [esi + 0x210042d4], dl
salc
inc edx
add byte [esi + 0x210042d4], ah
salc
inc edx
add byte [ebx - 0x2b], ah
aad 0x42
aad 0x42
add byte [ebx - 0x2b], ch
inc edx
add byte [eax + ebx*8 - 0x277effbe], dl
inc edx
add byte [ebx - 0x2a], cl
inc edx
add byte [ecx + 0x7a0042d8], al
aad 0x42
add byte [ebp - 0x2a], ch
inc edx
add byte [ebx - 0x28], bh
inc edx
add byte [esi + edx*8 - 0x2928ffbe], dl
inc edx
add ch, bl
salc
inc edx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add ch, bl
salc
inc edx
add byte [eax + ebx*8 + 0x42], ch
add byte [ebx - 0x28], bh
inc edx
add byte [ecx - 0x2b], dh
inc edx
add byte [edx - 0x2b], bh
inc edx
add al, bh
aad 0x42
add byte [ecx], ah
salc
inc edx
add byte [eax], dl
salc
inc edx
add dh, bh
aad 0x42
add byte [eax], dl
salc
inc edx
add byte [ecx], ah
salc
inc edx
add al, al
fadd dword [edx]
rcr al, 0x42
add al, al
fadd dword [edx]
ret 0x42d8
cmc
inc edx
add bh, dh
cmc
inc edx
add byte [ebx + 0x430042fb], dh
cld
inc edx
add byte [eax - 4], dl
inc edx
add byte [eax - 4], dl
inc edx
add byte [eax - 4], dl
inc edx
add byte [eax - 4], dh
inc edx
add byte [eax - 4], ah
inc edx
add byte [ecx - 0x39ffbd04], dh
cld
inc edx
add byte [eax - 3], ah
inc edx
add bh, dl
cld
inc edx
add ch, cl
std
inc edx
add byte [ecx + 0x700042fe], dl
cld
inc edx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx - 0x68ffbd02], dl
inc byte [edx]
invalid
add al, 0x43
add byte [edx], cl
add al, 0x43
add byte [edi], bh
add al, 0x43
add dh, al
add al, 0x43
add byte [eax + 4], ah
inc ebx
add byte [ebp + 4], al
inc ebx
add byte [eax + 0x60004304], al
add al, 0x43
add byte [eax - 0x7fffbcfc], al
add al, 0x43
add byte [esi - 0x7fffbcfc], al
add al, 0x43
add byte [eax - 0x39ffbcfc], ah
add al, 0x43
add al, dh
add al, 0x43
add byte [ecx], dh
add eax, 0x5140043
inc ebx
add byte [ecx], dh
add eax, 0x10043
add byte [eax], al
add dword [eax], eax
add byte [eax], al
add dword [eax], eax
add byte [eax], al
xor dword [0x5500043], eax
inc ebx
add byte [ebp + eax + 0x43], ah
add byte [eax + 5], dl
inc ebx
add byte [eax + 5], dl
inc ebx
add byte [esi + 5], dl
inc ebx
add byte [eax + 5], dl
inc ebx
add byte [eax], dh
or byte [ebx], al
xor byte [eax], cl
inc ebx
add byte [edx], dh
or byte [ebx], al
xor byte [eax], cl
inc ebx
add byte [ecx + 0xd], ch
inc ebx
add byte [ebx - 0x2ffbcf5], dh
or eax, 0xeae0043
inc ebx
add ch, bh
or eax, 0xdf60043
inc ebx
add byte [0x1000430d], bh
or eax, 0xd690043
inc ebx
add byte [0xe500430d], bh
or eax, 0xdee0043
inc ebx
add cl, dh
inc ebx
add byte [edi + 0x18], dl
inc ebx
add ah, cl
and byte [ebx], al
out 0x17, eax
inc ebx
add byte [edi], cl
and al, 0x43
add byte [ebx - 0x76ffbcd8], bh
and eax, 0x275a0043
inc ebx
add byte [edi - 0x10ffbcd5], ah
and dword [ebx], eax
cmpsd dword [esi], dword es:[edi]
sub eax, dword [ebx]
xor al, 0x21
inc ebx
add byte [ecx + 0x25], ch
inc ebx
add byte [esi + ebp + 0x278e0043], dh
inc ebx
add byte [ebp + 0x208d0043], bh
inc ebx
add byte [esi - 0x5ffbcd9], cl
sub eax, dword [ebx]
sub byte [ebx + eax*2], ah
add byte [edx + ebx + 67], al
add byte [edx + 0x1e], dl
inc ebx
add byte [edx + ebx + 0x43], al
add byte [eax], dl
das
inc ebx
add byte [ebx + 0x24], cl
inc ebx
add ch, al
adc al, 0x43
add byte [ebx + 0x24], cl
inc ebx
add dl, dh
and eax, dword [ebx]
adc eax, dword [bp + di]
xlatb
inc ebx
add byte [edi + 0x1f00431c], al
and al, byte [ebx]
pop ds
and al, byte [ebx]
sbb eax, 0xfd00432c
and byte [ebx], al
xchg edi, eax
and dword [ebx], eax
jbe 0x44c743
inc ebx
add dl, dl
pop ss
inc ebx
add dl, al
sub eax, dword [ebx]
mov al, 0x14
inc ebx
add byte [eax - 0x1effbcec], dh
and eax, dword [ebx]
inc ebp
and dword [ebx], eax
cli
adc eax, 655687747
inc ebx
add byte [ebp + 0x27], bh
inc ebx
add bh, dh
inc ebx
add byte [ebx], dh
adc eax, dword [ebx]
imul dword [esi]
inc ebx
add bh, dh
inc ebx
add byte [esi + 0x1c], dh
inc ebx
add byte [ebx + 0x45], al
inc ebx
add byte [ebp - 0x34ffbcbd], ah
inc ebp
inc ebx
add byte [ebp + 0x4b], al
inc ebx
add ah, ch
dec ebx
inc ebx
add byte [edx], al
dec edx
inc ebx
add byte [eax - 0x13ffbcbb], ch
dec ebx
inc ebx
add ah, bl
dec ecx
inc ebx
add byte [edi], ah
aas
inc ebx
add cl, bh
inc ebp
inc ebx
add dl, dl
cmp eax, dword [ebx]
popfd
cmp dword [ebx], eax
stc
inc ebp
inc ebx
add byte [edi - 0x5bffbcc0], ah
dec ebx
inc ebx
add byte [0xc3004345], bl
inc ebx
add byte [0x83004345], bl
cmp dword [ebx], eax
mov dh, 0x42
inc ebx
add byte [edx + 0x4e], bl
inc ebx
add byte [edx + 0x4e], bl
inc ebx
add byte [esi + 0x39], ah
inc ebx
add byte [ebx + edi + 0x43], bl
add ch, bl
dec eax
inc ebx
add byte [ebx + eax*2], bh
inc ebx
add byte [ebx], dh
dec ecx
inc ebx
add byte [ebx + eax*2], bh
inc ebx
add dl, cl
dec ebx
inc ebx
add byte [0xe800434b], ah
inc eax
inc ebx
add byte [ecx - 0x69ffbcb6], al
inc edx
inc ebx
add byte [ebx + 0x1700433e], ah
dec esi
inc ebx
add byte [ebx - 0x7fffbcc2], ah
dec ecx
inc ebx
add byte [ebx + 0x4b], ch
inc ebx
add byte [ebx + 0x3e], bh
inc ebx
add byte [ebx + 0x3e], bh
inc ebx
add cl, dh
cmp dword [ebx], eax
and bh, byte [edx]
inc ebx
add byte [ebx], dl
dec ecx
inc ebx
add byte [ebx], dl
dec ecx
inc ebx
add byte [ebx + eax*2 + 0x3f7b0043], dl
inc ebx
add ch, ah
dec esp
inc ebx
add byte [ecx + 0x3a], bh
inc ebx
add ch, ah
dec esp
inc ebx
add byte [edx + 0x4a004348], ch
aas
inc ebx
add byte [ebp + 0x49], bl
inc ebx
add byte [ecx - 0x7effbcbe], al
inc edx
inc ebx
add byte [edx + ecx*2 + 0x4dfe0043], ah
inc ebx
add byte [edi + edi], al
inc ebx
add byte [edi + edi], al
inc ebx
add byte [edx + edi + 0x43], cl
add byte [ecx - 0x28ffbcb7], dl
cmp dword [ebx], eax
test byte [ebx + 0x43], cl
add byte [ebx - 2080357565], al
dec ebx
inc ebx
add byte [ebx + ecx*2], dl
inc ebx
add byte [esi + 0x4e004349], dh
cmp dword [ebx], eax
in eax, 0x4a
inc ebx
add byte [edx], al
cmp al, byte [ebx]
dec esp
dec ecx
inc ebx
add ch, ah
dec edx
inc ebx
add byte [ebx + 0x3e], bl
inc ebx
add byte [eax + 0x4a], dh
inc ebx
add byte [ebp + 0x3a], bl
inc ebx
add byte [eax + 0x4a], dh
inc ebx
add al, dl
push esi
inc ebx
add byte [eax + 0x55], dh
inc ebx
add dl, ah
push esi
inc ebx
add byte [eax + 0x57], dh
inc ebx
add ah, dh
push esi
inc ebx
add byte [ecx - 0x44ffbca9], ch
push edi
inc ebx
add byte [ecx], al
push edi
inc ebx
add byte [ebx - 0x32ffbca9], bh
push edi
inc ebx
add byte [ebx - 0x7dffbca9], bh
push edi
inc ebx
add byte [edx - 0x3fffbcab], al
push ebp
inc ebx
add byte [ebp + edx*2 + 0x56700043], dl
inc ebx
add byte [ebx - 0x5effbca9], bh
push ebp
inc ebx
add byte [ebx - 0x7dffbca9], bh
push esi
inc ebx
add byte [ebx - 0x2dffbca9], bh
push ebp
inc ebx
add byte [edx + 0x6e], al
inc ebx
add byte [edi], dl
imul eax, dword [ebx], case.0x435568.24
pop ss
pop esi
inc ebx
add byte [ebp - 0x45ffbc96], ah
insd dword es:[edi], dx
inc ebx
add ah, cl
insb byte es:[edi], dx
inc ebx
add byte [edi], dh
inc ebx
add byte [0xab00436d], dh
outsb dx, byte [esi]
inc ebx
add byte [ebp - 0x5effbc97], bl
inc ebx
add byte [edx + ebp*2 + 0x65010043], dl
inc ebx
add byte [edx + ebp*2 + 0x66660043], dl
inc ebx
add byte [edx + ebp*2 + 0x677f0043], dl
inc ebx
add byte [ebp + 0x61], ch
inc ebx
add byte [edx], al
bound eax, qword [ebx]
xchg esp, eax
push 67
add byte [eax + ebp*2], al
inc ebx
add byte [edx + ebp*2 + 0x62cc0043], dl
inc ebx
add byte [esi + 0x32004369], bh
imul eax, dword [ebx], 0xffffffbd
popal
inc ebx
add ah, dh
pushal
inc ebx
add byte [ebx], ah
push 0x43
add byte [ecx + 0x6d], bl
inc ebx
add byte [edx + ebp*2 + 0x5f9a0043], dl
inc ebx
add byte [edx + ebp*2 + 0x68360043], dl
inc ebx
add byte [edx + ebp*2 + 0x5f1f0043], dl
inc ebx
add dh, dh
pop ebp
inc ebx
add byte [edi - 0x6bffbc9a], ch
push 0x43
add byte [ebx], ah
outsb dx, byte [esi]
inc ebx
add byte [edx + ebp*2 + 0x65460043], dl
inc ebx
add byte [edi + 0x7d00436e], al
inc ebx
add byte [eax + 0x60], al
inc ebx
add byte [esi + 0x73004361], cl
inc ebx
add byte [edx + 0x64], al
inc ebx
add byte [edi + 0x62], al
inc ebx
add dh, bh
pop edi
inc ebx
add byte [edx + ebp*2 + 0x60850043], dl
inc ebx
add byte [edx + ebp*2 + 0x66140043], dl
inc ebx
add byte [edx + ebp*2 + 0x67120043], dl
inc ebx
add al, dl
inc bx
add dl, ah
imul eax, dword [ebx], case.0x435568.34
wait
insd dword es:[edi], dx
inc ebx
add byte [edx + ebp*2 + 0x6a030043], dl
inc ebx
add byte [eax + 0xe004365], bh
imul eax, dword [ebx], 0xfffffff6
push 0x6c440043
inc ebx
add byte [edx + ebp*2 + 0x61150043], dl
inc ebx
add byte [edx + ebp*2 + 0x66840043], dl
inc ebx
add dh, bh
pop esi
inc ebx
add byte [ebx - 0x6bffbc9e], ch
push 0x43
add byte [eax], al
inc bx
add byte [edx + ebp*2 + 0x697e0043], dl
inc ebx
add cl, al
outsd dx, dword [esi]
inc ebx
add dl, ch
push 0x43
add byte [ebx], bh
imul eax, dword [ebx], case.0x435568.101
fisubr word [ebp + 0x43]
add ah, bl
inc ebx
add byte [ebx + 0x67], bl
inc ebx
add byte [esi + 0x5e], ah
inc ebx
add byte [edx + 0x6d], bh
inc ebx
add cl, ah
popal
inc ebx
add byte [edx + ebp*2 + 0x5f800043], dl
inc ebx
add byte [edx + ebp*2 + 0x6fe50043], dl
inc ebx
add byte [edx + ebp*2 + 0x64630043], dl
inc ebx
add byte [esi + 0x6e], ah
inc ebx
add ch, bl
pop esi
inc ebx
add byte [edx + ebp*2 + 0x6be00043], dl
inc ebx
add byte [edx + ebp*2 + 0x6bff0043], dl
inc ebx
add byte [ecx + 0x61], cl
inc ebx
add byte [esi - 0x3dffbc98], ch
inc ebx
add byte [edx], al
outsb dx, byte [esi]
inc ebx
add byte [edx + ebp*2 + 0x6c8c0043], dl
inc ebx
add byte [edx + ebp*2 + 0x64e30043], dl
inc ebx
add cl, cl
push 0x43
add byte [edi], bl
pushal
inc ebx
add byte [edx + ebp*2 + 0x6c650043], dl
inc ebx
add byte [edx + ebp*2 + 0x6a440043], dl
inc ebx
add byte [eax], ah
insb byte es:[edi], dx
inc ebx
add al, dh
insb byte es:[edi], dx
inc ebx
add byte [eax + 0x68d20043], ch
inc ebx
add byte [0xab004361], ah
insb byte es:[edi], dx
inc ebx
add byte [eax + 0x43], ah
add byte [esi + ebx*2 + 0x6a940043], bh
inc ebx
add byte [ebx], bh
pop esi
inc ebx
add byte [edx + ebp*2 + 0x695f0043], dl
inc ebx
add byte [edx + ebp*2 + 0x5fd90043], dl
inc ebx
add byte [edi + 0x3b004365], dl
pop edi
inc ebx
add byte [edx + ebp*2 + 0x5e870043], dl
inc ebx
add byte [edx + ebp*2 + 0x6a750043], dl
inc ebx
add al, dl
pushal
inc ebx
add byte [edx + 0x66], al
inc ebx
add byte [ebp*2 + 0x5e9b0043], dl
inc ebx
add byte [edx + ebp*2 + 0x6baf0043], dl
inc ebx
add byte [edx + ebp*2 + 0x62680043], dl
inc ebx
add cl, dh
inc bx
add byte [esi - 0x6bffbc95], cl
push 0x43
add byte [esi + 0x6b], dl
inc ebx
add byte [edx + ebp*2 + 0x6ecc0043], dl
inc ebx
add byte [eax], al
add byte [eax], al
add dl, bh
push esi
inc ebp
add byte [esp + ecx*2 + 0x5e6e0045], dh
inc ebp
add byte [ecx], cl
push esp
inc ebp
add byte [edx], dh
pop esi
inc ebp
add al, dl
push esi
inc ebp
add byte [edi + 0x53], dh
inc ebp
add byte [ecx + 0x4c], ah
inc ebp
add byte [edx + ebx*2], cl
inc ebp
add byte [ecx], ah
dec esp
inc ebp
add byte [esi + edx*2 + 0x45], ch
add byte [esp + ebx*2], bl
inc ebp
add byte [edx + ebx*2 + 0x5ae00045], dh
inc ebp
add byte [ebx], al
push esi
inc ebp
add al, bh
push edx
inc ebp
add byte [ecx - 0x6bffbaac], ah
pop ebx
inc ebp
add byte [edi], bl
pop eax
inc ebp
add dh, dh
push esp
inc ebp
add cl, dl
pop eax
inc ebp
add byte [ebx + 0x58], dl
inc ebp
add byte [edx + 0x63], dl
inc ebp
add byte [esi], bl
inc ebp
add byte [esi + 0x7e004563], ch
inc ebp
add bh, dh
arpl word [ebp], ax
or dword [ebp + eax*2], 0xffffffa6
push ebp
inc ebp
add ah, cl
dec ebx
inc ebp
add ah, dh
dec ebx
inc ebp
add bl, dl
pop esp
inc ebp
add byte [edi], dh
push esp
inc ebp
add byte [esp + ebx*2 + 0x45], cl
add byte [ecx + 0x4b], dl
inc ebp
add ch, al
dec ebp
inc ebp
add byte [ebp - 0x4effbab5], ah
push ebx
inc ebp
add dh, ah
pop ebp
inc ebp
add al, bh
push edi
inc ebp
add al, ch
dec ecx
inc ebp
add byte [eax + 0x55], bh
inc ebp
add byte [eax - 0x2affba9d], al
arpl word [ebp], ax
test al, 0x64
inc ebp
add ch, cl
push esp
inc ebp
add cl, ah
pop ebx
inc ebp
add byte [edx], ah
push ebx
inc ebp
add byte [esi + 0x49004556], ah
push ebx
inc ebp
add byte [esi + 0x55], cl
inc ebp
add al, bh
pop eax
inc ebp
add byte [edi + edx*2 + 0x64d20045], bl
inc ebp
add byte [0xe004557], bl
pop ebx
inc ebp
add byte [esi + 0x57], ch
inc ebp
add byte [edi + 0x57], al
inc ebp
add cl, al
dec ecx
inc ebp
add byte [ebx + ebx*2], bh
inc ebp
add byte [edx - 0x55ffbaa8], al
pop eax
inc ebp
add byte [esi], bh
pop esp
inc ebp
add byte [eax - 0x20ffbab7], ah
push ebx
inc ebp
add byte [edx + 0x5b], ch
inc ebp
add byte [edi + 0x4b], bh
inc ebp
add byte [0xd400455a], dh
push ebp
inc ebp
add byte [ebx - 0xbffbaa5], bh
inc ebp
add byte [edi + 0x64], dl
inc ebp
add byte [ebx + 0x5a], bl
inc ebp
add dl, cl
push edi
inc ebp
add byte [ecx + 0x1a00455a], cl
inc ebp
add byte [edx - 0x5e], cl
inc ebx
add byte [edx + 0x43], dl
add byte [eax], cl
test eax, 0xa2700043
inc ebx
add byte [edx - 0x5e], dh
inc ebx
add byte [edx - 0x5e], dh
inc ebx
add byte [eax], cl
test eax, 0xa27d0043
inc ebx
add dl, cl
mov byte [0xa3110043], al
inc ebx
add byte [ecx], dl
mov dword [0xa3460043], eax
inc ebx
add byte [edx - 0x5d], ch
inc ebx
add dh, al
movsb byte es:[edi], byte [esi]
inc ebx
add byte [esi], cl
movsd dword es:[edi], dword [esi]
inc ebx
add byte [ebp - 0x56f7ffbd], bh
inc ebx
add byte [ebx - 0x59], bh
inc ebx
add byte [eax - 0x59], dl
inc ebx
add byte [eax - 0x59], dl
inc ebx
add byte [edx - 0x59], dl
inc ebx
add byte [edx - 0x59], dl
inc ebx
add byte [edx - 0x59], dl
inc ebx
add byte [ebx - 0x59], bh
inc ebx
add byte [ebx - 0x59], ch
inc ebx
add byte [ebx - 0x59], bh
inc ebx
add byte [edi - 0x5867ffbd], cl
inc ebx
add byte [eax - 0x4fffbc59], bl
cmpsd dword [esi], dword es:[edi]
inc ebx
add byte [ecx + 0x80043a4], bh
test eax, 0xa88e0043
inc ebx
add byte [ebx - 0x64ffbc58], bl
test al, 0x43
add byte [ebx - 0x56ffbc58], bl
test al, 0x43
add byte [ebx - 0x4cffbc58], dh
test al, 0x43
add byte [ebp - 0x42ffbc58], bh
test al, 0x43
add bh, al
test al, 0x43
add bh, al
test al, 0x43
add al, al
cmpsd dword [esi], dword es:[edi]
inc ebx
add byte [eax], cl
test eax, 0xa9000043
inc ebx
add al, ah
cmpsd dword [esi], dword es:[edi]
inc ebx
add al, dh
cmpsd dword [esi], dword es:[edi]
inc ebx
add byte [ebx], al
test al, 0x43
add byte [esi], al
test al, 0x43
add byte [esi], al
test al, 0x43
add byte [eax], cl
test eax, 0xa8600043
inc ebx
add byte [eax + ebp*4 + 0x43], dh
add byte [eax], al
test eax, 0xa2700043
inc ebx
add byte [eax - 0x59], dl
inc ebx
add byte [edi + 0x440043a8], al
test eax, 0xa9480043
inc ebx
add ah, cl
test eax, 0xa9cc0043
inc ebx
add byte [edx + ebp*4 - 0x5553ffbd], ch
inc ebx
add bh, bl
test eax, 0xaaea0043
inc ebx
add dl, ch
stosb byte es:[edi], al
inc ebx
add byte [edx], bl
stosd dword es:[edi], eax
inc ebx
add byte [esi - 0x55], ah
inc ebx
add byte [edx - 0x55], cl
inc ebx
add byte [edi - 0x55], dl
inc ebx
add byte [edi - 0x55], dl
inc ebx
add byte [edi - 0x55], dl
inc ebx
add al, dl
stosb byte es:[edi], al
inc ebx
add al, dl
stosb byte es:[edi], al
inc ebx
add al, dl
stosb byte es:[edi], al
inc ebx
add bh, bl
test eax, 0xa93d0043
inc ebx
add byte [esi], ah
rol dword [ebx], 0x61
ret 0x43