Function at 0x4a89e0
Capabilities:
Parse pe header

Disassembly:
cmp byte [edi + 0x5a], cl
cmp dword [eax + 0x5a], edx
push eax
pop edx
cmp dword [eax + 0x5b], edx
push eax
pop ebx
cmp dword [ecx + 0x5c], edx
pop esp
cmp dl, byte [edx + 0x5d]
cmp al, 0x54
pop esi
push ebp
pushal
aas
push esi
popal
aas
push edi
popal
inc eax
pop eax
bound eax, qword [ecx + 0x59]
pop ecx
arpl word [ecx + 0x59], ax
inc edx
pop edx
inc edx
pop ebx
inc bx
pop esp
add dword [si + 0x5d], 0x5e451c68
imul eax, dword [esi + 0x5f], 0x6b60466a
inc edi
popal
insb byte es:[edi], dx
dec eax
bound ebp, qword [ebp + 0x48]
bound ebp, qword [esi + 0x49]
arpl word [edi + 0x4a], bp
jo 0x4a8a38
jno 0x4a8a3c
jb 0x4a8a40
jae 0x4a8a43
je 0x4a8a47
push 0x75694e75
dec esi
push 0x76
dec edi
imul esi, dword [edi + 0x50], 0x6c
js 0x4a8a59
insb byte es:[edi], dx
jns 0x4a8a5d
insd dword es:[edi], dx
jp 0x4a8a61
outsb dx, byte [esi]
jnp 0x4a8a64
outsd dx, dword [esi]
jl 0x4a8a68
jo 0x4a8a94
push ebx
jo 0x4a8a98
push esp
jno 0x4a8a9b
push esp
jb 0x4a8a9f
push ebp
jb 0x4a89a3
push ebp
jae 0x4a89a7
push esi
je 0x4a89aa
push esi
je 0x4a89ae
adc dword [edi + 0x75], 0x76588183
test byte [ecx + 0x857758], al
pop ecx
ja 0x4a89c2
add byte [ecx + 0x77], bl
xchg byte [ecx - 0x767987a7], al
add byte [eax], al
sbb dword [ecx + 0x78], 0x8986
mov dword [eax], eax
add byte [eax], al
push es
add byte [esi], al
aaa
dec esp
push edi
aaa
dec ebp
pop eax
cmp byte [ebp + 0x58], cl
cmp byte [ebp + 0x59], cl
cmp byte [esi + 0x59], cl
cmp byte [esi + 0x5a], cl
cmp dword [edi + 0x5a], ecx
pop edx
cmp dword [ecx], 0x39015b4f
pop ebx
add dword [ecx], edi
push eax
pop esp
cmp dl, byte [eax + 0x5c]
pop esp
cmp dword [edx], 0x3a055d51
push ecx
pop esi
cmp edx, dword [edx + 0x5e]
pop ebp
add eax, 0x3b5e513a
push edx
pop esi
cmp edx, dword [edx + 0x5f]
cmp edx, dword [ebx + 0x5f]
cmp edx, dword [ebx + 0x60]
cmp al, 0x53
pushal
cmp byte [esp + edx*2], 0x61
cmp dword [0x3d046255], 0x563d6355
arpl word [0x563e6456], di
push edi
cmp byte fs:[esi], 0x57
cmp byte [esi], 0x57
test byte gs:[edi], bh
test byte [edi], bh
pop eax
cmp word [edi], 0x59
mov eax, dword [bx + si + 0x59]
cmp byte [bx], 0x59
add byte [edi], bh
pop eax
cmp word [edi], 0x58
cmp dword gs:[edi], 0x3e026457
push edi
push edi
arpl word [esi], di
push esi
arpl word [edx + 0x162563e], ax
push ebp
popal
cmp eax, 0x3d816155
push ebp
pushal
add byte [0x3d816054], bh
push esp
pop edi
add byte [0x3c815e54], bh
push ebx
pop esi
add dword [ebx + edx*2], edi
pop ebp
cmp al, 0x52
pop ebp
cmp dword [edx + edx*2], 0x523b005c
pop esp
cmp dword [ebx], 0x3b815b51
push ecx
pop edx
add byte [ebx], bh
push eax
pop edx
cmp dword [ebx], 0x3a005950
push eax
pop eax
cmp byte [edx], 0x4f
pop eax
and dword [eax], 0x20002a27
sub byte [edx], ch
and dword [eax], 0x21002b28
sub dword [ebx], ebp
and dword [ecx], 0x21002c29
sub ch, byte [ecx + eax*4]
and dword [edx], ebp
sub eax, 0x2d2a2200
and byte [edx], 0x2b
add ah, byte cs:[edx]
sub al, 0x2f
and ebp, dword [edi + ebp]
and ebp, dword [eax + esi]
and dword [ebx], 0x2406302d
sub eax, 0x312e2431
and al, 0x2e
xor ah, byte [edi + ebp]
xor ah, byte [edi + ebp]
xor esp, dword [0x3025332f]
xor eax, dword [ecx - 0x7ecbcfdb]
xor dword es:[0x36322681], esi
add byte [esi], ah
xor dh, byte [edi]
and dword [edi], 0x27813733
xor al, 0x38
add ebp, dword [eax]
xor al, 0x39
sub byte [0x3a352839], dh
sub byte [esi], dh
cmp al, byte [ecx - 0x7ec4c9d7]
sub dword [edi], esi
cmp al, 0x81
sub bh, byte [eax]
cmp eax, 0x3e382a10
sub edi, dword [ecx]
sub edi, dword ds:[ecx]
aas
sub edi, dword [edx]
aas
sub edi, dword [edx]
inc eax
sub al, 0x3b
inc eax
sub al, 0x3b
inc ecx
sub al, 0x3c
inc ecx
sub al, 0x3c
inc edx
sub eax, 0x3d2d423c
inc ebx
sub eax, 0x3e2d443d
inc esp
inc ebp
aas
inc ebp
aas
inc esi
das
aas
inc esi
sub dword [edi], 0x2f014740
inc ecx
dec eax
xor byte [ecx + 0x48], al
xor dword [eax], 0x31044942
inc ebx
dec edx
xor dword [ebx + 0x4b], eax
xor dword [ebx + ecx*2 + 0x31], eax
inc esp
dec esp
xor al, byte [ebp + 0x4c]
xor dword [edx], 0x330d4d45
inc esi
dec esi
xor eax, dword [esi + 0x4f]
xor eax, dword [edi + 0x4f]
xor eax, dword [edi + 0x50]
xor al, 0x48
push eax
xor al, 0x48
push ecx
xor al, 0x49
push edx
xor eax, 0x4a355249
push ebx
xor eax, 0x4b36544a
push esp
dec ebx
push ebp
dec esp
push ebp
aaa
dec esp
push esi
xor dword [edi], 0x3800574d
dec esi
pop eax
cmp dword [eax], 0x392b594f
pop ecx
sub edi, dword [ecx]
push eax
pop edx
cmp dword [eax + 0x5b], edx
pop ebx
cmp dword [ecx + 0x5b], edx
cmp dl, byte [edx + 0x5c]
cmp al, 0x53
pop esi
cmp eax, 0x563e5f55
pushal
aas
push edi
popal
inc eax
push edi
bound eax, qword [eax + 0x58]
arpl word [ecx + 0x59], ax
inc ecx
pop edx
inc edx
pop ebx
inc ebx
pop ebx
inc bx
pop esp
inc esp
pop ebp
push 0x45695e45
pop edi
push 0x46
pop edi
imul eax, dword [edi + 0x60], 0x6c
inc edi
popal
insd dword es:[edi], dx
dec eax
bound ebp, qword [esi + 0x49]
arpl word [esi + 0x49], bp
outsd dx, dword fs:[esi]
dec edx
jo 0x4a8ca3
jno 0x4a8ca6
jb 0x4a8caa
jae 0x4a8cae
push 0x75694d74
dec esi
push 0x76
dec edi
push 0x77
dec edi
imul edi, dword [eax + 0x50], 0x6c
jns 0x4a8cc3
insd dword es:[edi], dx
jp 0x4a8cc7
outsb dx, byte [esi]
jnp 0x4a8ccb
outsb dx, byte [esi]
jnp 0x4a8cce
outsd dx, dword [esi]
jl 0x4a8cd2
jo 0x4a8cfe
push ebx
jno 0x4a8d02
push esp
jno 0x4a8d06
push ebp
jb 0x4a8c0a
push ebp
jae 0x4a8c0d
push esi
jae 0x4a8c11
adc dword [esi + 0x74], 0x75578182
add dword [ecx], 0x57
jbe 0x4a8c20
pop eax
jbe 0x4a8c23
sbb dword [eax + 0x77], 0xffffff85
mov dword [eax], eax
add byte [eax], al
add eax, 0x38584d37
add byte [0x38584d37], al
pop eax
cmp byte [ebp + 0x58], cl
dec ebp
pop eax
cmp byte [ebp + 0x59], cl
cmp byte [esi + 0x59], cl
cmp byte [esi + 0x5a], cl
cmp dword [edi + 0x5a], ecx
cmp dword [ecx], 0x39015b4f
push eax
pop esp
cmp dl, byte [eax + 0x5c]
push eax
pop esp
cmp dword [edx], 0x3b035d51
push ecx
pop ebp
add edi, dword [ebx]
push ecx
pop esi
cmp edx, dword [edx + 0x5e]
push edx
pop esi
cmp edx, dword [edx + 0x5f]
pop edi
cmp edx, dword [ebx + 0x5f]
cmp dword [ebx + edx*2], 0x543c8160
popal
add bh, byte [edx*2 + 0x62553d62]
cmp eax, 0x3d816355
push esi
arpl word [ecx], ax
push esi
push edi
cmp byte fs:[esi], 0x57
cmp byte gs:[edi], 0x58
add byte [edi], bh
pop eax
cmp byte [bx], 0x59
add byte [bx + si + 0x59], al
add dword [bx + si + 0x59], 0x5a408a68
push 0x675a4081
add byte [eax + 0x59], 0x67
add dword [eax + 0x59], 0x593f0166
aas
pop eax
cmp byte [edi], 0x58
add bh, byte gs:[edi]
pop eax
aas
push edi
aas
push edi
arpl word [ecx - 0x7d9ca8c2], ax
push esi
bound eax, qword [ecx]
push ebp
popal
cmp eax, 0x3d816155
push ebp
pushal
cmp byte [0x3c815f54], 0x53
pop esi
cmp dword [ebx + edx*2], 0x523c825d
pop esp
cmp dword [ebx], 0x3b815b51
push ecx
pop edx
add byte [ebx], bh
push eax
pop edx
cmp dword [ebx], 0x3a005950
push eax
pop eax
cmp dword [edx], 0x2081584f
daa
sub al, byte [ecx - 0x7ed5d7e0]
and byte [eax], ch
sub eax, dword [eax]
and dword [ecx], ebp
sub eax, dword [ecx + 0x22c2921]
and dword [edx], ebp
sub al, 0x21
sub ch, byte [0x822d2a22]
and ch, byte [ebx]
add byte cs:[edx], ah
sub al, 0x2f
and dword [ebx], 0x23812f2c
sub eax, 0x2d230030
xor dword [ecx + 0x3312e24], eax
and al, 0x2e
xor ah, byte [edi + ebp]
xor ah, byte [edi + ebp]
xor esp, dword [0x2581332f]
xor byte [eax + eax], dh
and eax, 0x26813431
xor dword [0x36322681], esi
and dword [edi], 0x27033733
xor edi, dword [eax]
daa
xor al, 0x38
sub byte [ecx + edi], dh
sub byte [0x35288139], dh
cmp al, byte [ecx - 0x7ec4c9d7]
sub dword [edi], esi
cmp al, 5
sub dh, byte [edi]
cmp eax, 0x2a3d382a
cmp byte [esi], bh
sub bh, byte [ecx]
sub edi, dword ds:[ecx]
aas
sub edi, dword [edx]
aas
sub dword [ebx], 0x2c81403a
cmp eax, dword [ecx - 0x7f]
sub al, 0x3c
inc edx
sub dword [0x2d06433d], 0x3e2e443d
inc esp
inc ebp
aas
inc ebp
aas
inc esi
das
inc eax
inc esi
das
inc eax
inc edi
sub dword [edi], 0x30064841
inc ecx
dec ecx
xor byte [edx + 0x49], al
xor byte [edx + 0x4a], al
xor dword [ebx + 0x4a], eax
xor dword [ebx + 0x4b], eax
xor dword [ebx + ecx*2 + 0x32], eax
inc esp
dec esp
xor dword [edx], 0x32074d45
inc esi
dec esi
xor eax, dword [esi + 0x4e]
xor eax, dword [edi + 0x4f]
xor eax, dword [edi + 0x50]
xor al, 0x48
push eax
xor al, 0x48
push ecx
xor al, 0x49
push ecx
xor eax, 0x35815249
dec edx
push ebx
pop ss
xor eax, 0x4b36544b
push esp
dec esp
push ebp
dec esp
push esi
aaa
dec ebp
push esi
aaa
dec ebp
push edi
aaa
dec esi
pop eax
cmp byte [esi + 0x58], cl
cmp byte [edi + 0x59], cl
cmp byte [edi + 0x5a], cl
cmp dword [eax + 0x5a], edx
push eax
pop edx
cmp dword [eax + 0x5b], edx
push eax
pop ebx
cmp dl, byte [ecx + 0x5c]
cmp edx, dword [ebx + 0x5d]
cmp eax, 0x563e5f55
pushal
aas
push esi
popal
aas
push edi
popal
inc eax
pop eax
bound eax, qword [ecx + 0x59]
arpl word [ecx + 0x59], ax
inc ecx
pop ecx
inc edx
pop edx
inc edx
pop ebx
inc bx
pop esp
add dword [si + 0x5d], 0x5e451b68
imul eax, dword [esi + 0x5f], 0x6b60466a
inc edi
popal
insb byte es:[edi], dx
dec eax
bound ebp, qword [ebp + 0x48]
bound ebp, qword [esi + 0x49]
arpl word [edi + 0x4a], bp
jo 0x4a8f00
jno 0x4a8f04
jb 0x4a8f08
jae 0x4a8f0b
je 0x4a8f0f
push 0x76694e75
dec esi
push 0x76
dec edi
imul esi, dword [edi + 0x4f], 0x6c
js 0x4a8f21
insb byte es:[edi], dx
jns 0x4a8f25
insd dword es:[edi], dx
jp 0x4a8f28
outsb dx, byte [esi]
jnp 0x4a8f2c
outsd dx, dword [esi]
jl 0x4a8f2f
outsd dx, dword [esi]
jge 0x4a8f33
jo 0x4a8f60
push esp
jno 0x4a8f63
push esp
jno 0x4a8f67
push ebp
jb 0x4a8e6b
push ebp
jae 0x4a8e6f
push esi
jae 0x4a8e72
adc dword [esi + 0x74], 0x75578182
add dword [edx], 0x57
jbe 0x4a8e81
pop eax
jbe 0x4a8e84
pop eax
jbe 0x4a8e88
sbb dword [eax + 0x77], 0x8985
pop eax
ja 0x4a8e8c
mov dword [eax], eax
add byte [eax], al
add byte [eax], al
add byte [esi], al
push es
cmp byte [ebp + 0x58], cl
cmp byte [ebp + 0x59], cl
cmp byte [esi + 0x59], cl
cmp byte [esi + 0x5a], cl
cmp dword [edi + 0x5a], ecx
cmp dword [edi + 0x5b], ecx
cmp dword [eax + 0x5b], edx
cmp dword [edx], 0x3a815c50
push ecx
cmp dword [edx], 0x3b815d51
push edx
pop ebp
cmp dword [ebx], 0x3b035e52
pop esi
add edi, dword [ebx]
push edx
pop edi
cmp edx, dword [ebx + 0x5f]
pop edi
cmp al, 0x53
pushal
cmp al, 0x54
pushal
cmp dword [esp + edx*2], 0x553d8161
bound eax, qword [ebx]
cmp eax, 0x563d6355
arpl word [esi], di
push esi
push edi
cmp byte fs:[esi], 0x57
cmp byte gs:[edi], 0x58
cmp byte [edi], 0x59
add dword [bx + si + 0x59], 0x5a408368
inc eax
pop edx
push 0x695a4088
mov byte [eax + 0x5a], al
imul eax, dword [ebp - 0x7e97a5c0], 0x81675a40
inc eax
pop ecx
add dword [bx + si + 0x59], 0x593f0066
test dword [eax + 0x5a], eax
push 0x675a4081
add dword [eax + 0x59], 0x59408167
add byte [edi], bh
pop ecx
cmp byte [edi], 0x58
add al, 0x3f
pop eax
aas
push edi
aas
push edi
arpl word [esi], di
push edi
arpl word [esi], di
push esi
arpl word [ecx + 0x162563e], ax
push esi
popal
push ebp
popal
cmp dword [0x3d006055], 0x3d816054
push esp
pop edi
add dword [0x533c5e54], edi
pop esi
cmp dword [ebx + edx*2], 0x523c005d
pop ebp
cmp dword [edx + edx*2], 0x523c015c
pop ebx
cmp edx, dword [ecx + 0x5b]
cmp byte [ebx], 0x51
pop edx
cmp dword [ebx], 0x50
pop ecx
and byte [eax], 0x27
sub al, byte [eax]
and byte [eax], ch
sub al, byte [ecx + 0x2b2820]
and dword [ecx], ebp
sub eax, dword [edx - 0x7ed3d6df]
and dword [edx], ebp
sub eax, 0x2d2a2200
and byte [edx], 0x2b
add ah, byte cs:[edx]
sub al, 0x2f
and ebp, dword [edi + ebp]
and ebp, dword [eax + esi]
and dword [ebx], 0x2306302d
sub eax, 0x312e2431
and al, 0x2e
xor ah, byte [edi + ebp]
xor ah, byte [edi + ebp]
xor esp, dword [0x3025332f]
xor eax, dword [ecx - 0x7ecbcfdb]
xor dword es:[0x36322681], esi
add byte [esi], ah
xor dh, byte [edi]
and dword [edi], 0x27033733
xor edi, dword [eax]
daa
xor al, 0x38
sub byte [ecx + edi], dh
sub byte [0x35288139], dh
cmp al, byte [ecx - 0x7ec4c9d7]
sub dword [edi], esi
cmp al, 0x81
sub bh, byte [eax]
cmp eax, 0x3e382a05
sub bh, byte [ecx]
sub edi, dword ds:[ecx]
aas
sub edi, dword [edx]
aas
sub edi, dword [edx]
inc eax
sub al, 0x3b
inc eax
sub dword [ebx + edi], 0x3c2c0141
inc edx
sub eax, 0x2d81423c
cmp eax, 0x3e2d0243
inc esp
inc esp
inc ebp
sub dword [esi], 0x2f81463f
inc eax
inc edi
add dword [edi], ebp
inc ecx
dec eax
xor byte [ecx + 0x48], al
xor dword [eax], 0x30004942
inc ebx
dec edx
xor dword [ecx], 0x31014b43
inc esp
dec esp
xor al, byte [esp + ecx*2 - 0x7f]
xor al, byte [ebp + 0x4d]
pop es
xor eax, dword [esi + 0x4e]
xor eax, dword [esi + 0x4f]
xor eax, dword [edi + 0x4f]
xor eax, dword [edi + 0x50]
xor al, 0x48
push eax
xor al, 0x48
push ecx
xor al, 0x49
push edx
xor eax, 0x35815249
dec edx
push ebx
add esi, dword [esi]
dec ebx
push esp
dec ebx
push ebp
dec esp
push ebp
aaa
dec esp
push esi
xor dword [edi], 0x382d574d
dec esi
pop eax
cmp byte [esi + 0x59], cl
cmp byte [edi + 0x59], cl
cmp dword [edi + 0x5a], ecx
dec edi
pop edx
cmp dword [eax + 0x5b], edx
cmp dl, byte [ecx + 0x5c]
cmp edx, dword [edx + 0x5d]
cmp eax, 0x553e5e54
pop edi
push esi
pushal
aas
push edi
popal
inc eax
push edi
bound eax, qword [eax + 0x58]
arpl word [ecx + 0x59], ax
inc ecx
pop edx
inc edx
pop ebx
inc ebx
pop ebx
inc bx
pop esp
inc esp
pop ebp
push 0x45695e45
pop edi
push 0x46
pop edi
imul eax, dword [edi + 0x60], 0x6c
inc edi
popal
insd dword es:[edi], dx
dec eax
bound ebp, qword [esi + 0x49]
arpl word [edi + 0x49], bp
outsd dx, dword fs:[esi]
dec edx
jo 0x4a915e
jno 0x4a9161
jb 0x4a9165
jae 0x4a9168
push 0x75694d74
dec esi
imul esi, dword [esi + 0x4e], 0x6b4f776a
js 0x4a917b
insb byte es:[edi], dx
jns 0x4a917e
insd dword es:[edi], dx
jp 0x4a9182
insd dword es:[edi], dx
jnp 0x4a9185
outsb dx, byte [esi]
jnp 0x4a9189
outsd dx, dword [esi]
jl 0x4a918d
jo 0x4a91b9
push ebx
jo 0x4a91bd
push esp
jno 0x4a91c1
push esp
jb 0x4a91c4
push ebp
jb 0x4a90c8
adc dword [ebp + 0x73], 0x74568181
add byte [ecx + 0x1837557], 0x57
jne 0x4a90dc
push edi
jbe 0x4a90df
sbb dword [eax + 0x76], 0x8984
add byte [0x38594d38], al
test byte [ecx + 0x5000000], cl
cmp byte [ebp + 0x59], cl
add byte [eax], al
add eax, 0x38594d38
dec ebp
pop ecx
cmp byte [esi + 0x59], cl
dec esi
pop ecx
cmp byte [esi + 0x5a], cl
cmp dword [edi + 0x5a], ecx
cmp dword [edi + 0x5b], ecx
cmp dword [eax + 0x5b], edx
cmp dword [edx], 0x3a815c50
push ecx
pop ebp
cmp dl, byte [ecx + 0x5d]
cmp dword [ebx], 0x3b055e52
push edx
add eax, 0x3b5f523b
push ebx
pop edi
pop edi
cmp edx, dword [ebx + 0x5f]
cmp al, 0x53
pushal
cmp al, 0x54
push esp
pushal
cmp al, 0x54
popal
cmp al, 0x54
bound eax, qword [ecx - 0x7e9daac3]
cmp eax, 0x3e016356
push esi
push edi
cmp dword fs:[esi], 0x3f826557
pop eax
cmp word [edi], 0x6759
add dword [eax + 0x59], eax
inc eax
pop ecx
push 0x685a4082
add dword [eax + 0x5a], 0x5b400069
pop edx
push 0x695a4081
add byte [eax + 0x5b], al
pop edx
imul eax, dword [eax], 0x83695b40
pop ebx
imul eax, dword [ebx - 0x7d96a4bf], 0x876a5b41
inc ecx
pop ebx
imul eax, dword [eax], 0x82685a41
inc eax
pop edx
push 0x675a4081
add byte [eax + 0x59], al
inc ecx
pop ebx
imul eax, dword [edx - 0x7895a4bf], 0x695b41
inc ecx
pop edx
push 0x685a4082
add dword [eax + 0x5a], 0x59400067
add dword [bx + si + 0x59], 0x593f0066
cmp word [edi], 0x6558
cmp dword [edi], 0x3f026458
push edi
aas
push edi
arpl word [esi], di
push edi
arpl word [ecx + 0x62563e], ax
push esi
popal
cmp dword [esi], 0x3d816155
push ebp
pushal
cmp dword [0x3d015f54], 0x533d5e54
pop esi
cmp byte [ebx + edx*2], 0x5d
cmp dword [edx + edx*2], 0x523c005c
pop ebx
cmp dword [ebx], 0x3b815b51
push ecx
pop edx
cmp byte [ebx], 0x50
pop ecx
and dword [eax], 0x20002927
daa
sub al, byte [ecx - 0x7ed5d7e0]
and byte [eax], ch
sub eax, dword [eax]
and dword [ecx], ebp
sub eax, dword [ecx + 0x22c2921]
and dword [ecx], 0x21022c29
sub ch, byte [ecx]
sub ch, byte [0x822d2a22]
and ch, byte [ebx]
add byte cs:[edx], ah
sub al, 0x2f
and dword [ebx], 0x23812f2c
sub eax, 0x2d230030
xor dword [ecx + 0x3312e24], eax
and al, 0x2e
xor ah, byte [edi + ebp]
xor ah, byte [edi + ebp]
xor esp, dword [0x2581332f]
xor byte [eax + eax], dh
and eax, 0x26813431
xor dword [0x36322681], esi
add esp, dword [edi]
xor dh, byte [edi]
daa
xor esi, dword [edi]
daa
xor edi, dword [eax]
daa
xor al, 0x38
sub dword [eax], 0x28813934
xor eax, 0x3629823a
cmp eax, dword [ecx]
sub dword [edi], esi
cmp al, 0x2a
aaa
cmp al, 0x81
sub bh, byte [eax]
cmp eax, 0x3e392a04
sub edi, dword [ecx]
sub edi, dword ds:[ecx]
aas
sub edi, dword [edx]
aas
sub edi, dword [edx]
inc eax
sub dword [ebx + edi], 0x3c2c8141
inc edx
pop es
sub eax, 0x3d2d433c
inc ebx
sub eax, 0x3e2d443d
inc esp
inc ebp
aas
inc ebp
aas
inc esi
das
inc eax
inc esi
sub dword [edi], 0x2f0e4740
inc ecx
dec eax