Function at 0x415dea
Capabilities:
Create process on windows
Read .ini file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1be0
call fcn.004ad610
mov eax, dword [0x4f8004]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
movzx ebx, dx
mov edx, 0x9c40
push esi
movzx esi, bx
mov dword [ebp - 0x1bd0], ebx
mov eax, esi
mov dword [ebp - 0x1bd4], esi
push edi
mov edi, ecx
mov dword [ebp - 0x18], edi
cmp esi, edx
ja 0x416368
je 0x41634e
sub eax, 0x4e20
cmp eax, 0x23
ja case.0x415777.20027
jmp dword [eax*4 + 0x41954f]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
xor ebx, ebx
push ebx
push ebx
push 0x835
push dword [0x52a68c]
call esi
mov eax, dword [0x52754c]
cmp eax, 1
jne 0x4157ac
push ebx
push 0xf020
push 0x112
jmp 0x4157b9
cmp eax, 2
jne case.0x415777.20027
push ebx
push ebx
push 0x10
push edi
jmp 0x41652f
xor ebx, ebx
xor ecx, ecx
push ebx
push ebx
xor edx, edx
inc ecx
call fcn.0041d6d4
pop ecx
pop ecx
test eax, eax
je case.0x415777.20027
push ebx
push ebx
jmp 0x416e8d
xor eax, eax
cmp dword [0x5278c8], eax
sete al
mov dword [0x5278c8], eax
xor eax, eax
push eax
push eax
push 0x919
push dword [0x52a68c]
call dword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
cmp dword [0x5278c8], eax
sete al
mov dword [0x5278c8], eax
jmp case.0x415777.20027
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
xor ebx, ebx
push ebx
push ebx
push 0x7d8
push dword [0x52a68c]
call esi
push ebx
push ebx
push 0x7d9
push dword [0x52a68c]
mov dword [ebp - 0x1bd0], eax
call esi
push ebx
push dword [ebp - 0x1bd0]
mov edi, eax
push 0x876
push dword [0x52a68c]
call esi
push ebx
mov esi, eax
push esi
push 0x877
push dword [0x52a68c]
call dword [sym.imp.USER32.dll_SendMessageW]
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0x850
push dword [0x52a68c]
mov dword [ebp - 0x18], eax
call esi
mov ecx, eax
mov eax, dword [ebp - 0x1bd0]
cmp eax, edi
je 0x41589a
push eax
push eax
jmp 0x41749f
push ebx
push ebx
cmp eax, dword [ebp - 0x18]
jne 0x4158ab
push 0x916
jmp 0x416529
cmp eax, ecx
jg 0x4158b9
push 0x95b
jmp 0x416529
push 0x91f
jmp 0x416529
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
xor ebx, ebx
push ebx
push ebx
push 0x7d8
push dword [0x52a68c]
call esi
push ebx
push ebx
push 0x7d9
push dword [0x52a68c]
mov dword [ebp - 0x1bd0], eax
call esi
push ebx
push dword [ebp - 0x1bd0]
mov edi, eax
push 0x876
push dword [0x52a68c]
call esi
push ebx
mov esi, eax
push esi
push 0x877
push dword [0x52a68c]
call dword [sym.imp.USER32.dll_SendMessageW]
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0x858
push dword [0x52a68c]
mov dword [ebp - 0x18], eax
call esi
mov ecx, eax
mov eax, dword [ebp - 0x1bd0]
cmp eax, edi
jne 0x415893
push ebx
push ebx
cmp dword [ebp - 0x18], ecx
je 0x415953
push 0x920
jmp 0x416529
push 0x922
jmp 0x416529
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
xor ebx, ebx
push ebx
push ebx
mov edi, 0x8d4
push edi
push dword [0x52a68c]
call esi
push ebx
push 1
push 0x84c
push dword [0x52a68c]
call esi
push ebx
push ebx
push 0x917
push dword [0x52a68c]
call esi
xor eax, eax
cmp dword [0x52a6c0], eax
push ebx
sete al
push eax
push 0x84c
push dword [0x52a68c]
call esi
push ebx
push dword [0x52a6a8]
push edi
jmp 0x416529
mov ebx, 0x52a900
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je case.0x415777.20027
mov eax, dword [0x52a688]
cmp eax, 2
jne 0x4159e5
mov dword [0x4fa124], 4
jmp 0x415a04
cmp eax, 3
jne 0x4159f6
mov dword [0x4fa124], 5
jmp 0x415a04
push 6
cmp eax, 7
pop ecx
cmove eax, ecx
mov dword [0x4fa124], eax
push ebx
lea eax, [ebp - 0xb04]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0xb04]
push eax
push ecx
push 1
jmp 0x416390
mov ebx, 0x52a900
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je case.0x415777.20027
and dword [0x4fa124], 0
jmp 0x415a04
mov esi, 0x52a900
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je case.0x415777.20027
xor ebx, ebx
lea eax, [ebp - 0xb04]
push esi
inc ebx
push eax
mov dword [0x4fa124], ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0xb04]
push eax
push ecx
push ebx
jmp 0x416390
mov edi, dword [0x52ab7c]
mov esi, 0x52a900
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je case.0x415777.20027
xor ebx, ebx
lea eax, [ebp - 0xb04]
push esi
inc ebx
push eax
mov dword [0x52ab7c], ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0xb04]
xor edx, edx
push eax
push ecx
push ebx
xor ecx, ecx
call fcn.0041d0b5
add esp, 0xc
mov dword [0x52ab7c], edi
jmp case.0x415777.20027
push 0x52a900
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je case.0x415777.20027
mov esi, dword [0x522fac]
mov eax, 0x52a900
mov edi, dword [0x52a6b0]
xor ebx, ebx
push eax
lea eax, [ebp - 0xb04]
inc ebx
push eax
mov dword [0x522fac], ebx
mov dword [0x52a6b0], ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0xb04]
xor edx, edx
push eax
push ecx
push ebx
xor ecx, ecx
call fcn.0041d0b5
add esp, 0xc
mov dword [0x522fac], esi
mov dword [0x52a6b0], edi
jmp case.0x415777.20027
mov edx, 0x518238
jmp 0x4182b3
mov ecx, str.Web_Source_Code
mov esi, dword [0x52a68c]
xor edx, edx
inc edx
call fcn.00421719
mov edx, eax
mov ecx, esi
jmp 0x4182b9
mov ecx, str.XML_Document
jmp 0x415b3e
mov esi, 0x200
lea eax, [ebp - 0x314]
push esi
xor ebx, ebx
push ebx
push eax
call fcn.00489f20
add esp, 0xc
lea eax, [ebp - 0x524]
push esi
push ebx
push eax
call fcn.00489f20
mov al, byte [0x4c1e25]
add esp, 0xc
dec esi
mov byte [ebp - 0x1bcc], al
lea eax, [ebp - 0x1bcb]
push esi
push ebx
push eax
call fcn.00489f20
mov al, byte [0x4c1e25]
add esp, 0xc
mov byte [ebp - 0x19cc], al
lea eax, [ebp - 0x19cb]
push esi
push ebx
push eax
call fcn.00489f20
mov al, byte [0x4c1e25]
add esp, 0xc
mov esi, 0x5ff
mov byte [ebp - 0x17cc], al
lea eax, [ebp - 0x17cb]
push esi
push ebx
push eax
call fcn.00489f20
mov al, byte [0x4c1e25]
add esp, 0xc
mov byte [ebp - 0x11cc], al
lea eax, [ebp - 0x11cb]
push esi
push ebx
push eax
call fcn.00489f20
mov eax, dword [0x52a68c]
add esp, 0xc
mov dword [ebp - 0xbb4], eax
mov edi, 0x100
lea eax, [ebp - 0x314]
mov dword [ebp - 0xbcc], 0x200000
xorps xmm0, xmm0
mov dword [ebp - 0xbb8], ebx
push 0x522d98
push edi
push eax
push str._Date:_______Date:__Y__m__d__H:_M:_S__
push str.TimeStamp
push str.Settings2
movups xmmword [ebp - 0xbc8], xmm0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0x7c
lea eax, [ebp - 0x314]
push eax
call dword [sym.imp.SHLWAPI.dll_StrChrW]
mov esi, eax
test esi, esi
je 0x415c72
lea ecx, [esi + 2]
push ecx
lea eax, [ebp - 0x524]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
xor eax, eax
mov word [esi], ax
mov esi, dword [sym.imp.SHLWAPI.dll_StrTrimW]
lea eax, [ebp - 0x314]
push 0x4bc6e8
push eax
call esi
push 0x4bc6e8
lea eax, [ebp - 0x524]
push eax
call esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0x314]
push eax
call esi
test eax, eax
je case.0x415777.20027
lea eax, [ebp - 0x524]
push eax
call esi
test eax, eax
je case.0x415777.20027
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [ebp - 0x18]
or dword [ebp - 0xd8], 0xffffffff
mov dword [ebp - 0xf8], eax
movzx eax, word [ebp - 0x1a]
mov dword [ebp - 0xf4], eax
movzx eax, word [ebp - 0x1c]
mov dword [ebp - 0xf0], eax
movzx eax, word [ebp - 0x1e]
mov dword [ebp - 0xec], eax
movzx eax, word [ebp - 0x22]
dec eax
mov dword [ebp - 0xe8], eax
movzx eax, word [ebp - 0x24]
sub eax, 0x76c
mov dword [ebp - 0xe4], eax
movzx eax, word [ebp - 0x20]
mov dword [ebp - 0xe0], eax
lea eax, [ebp - 0xf8]
push eax
call fcn.00495cc3
pop ecx
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x524]
push eax
lea eax, [ebp - 0x724]
push edi
push eax
call fcn.00496ea5
add esp, 0x10
push ebx
push ebx
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push 0x859
push dword [0x52a68c]
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea ecx, [ebp - 0x1bcc]
mov edi, eax
xor eax, eax
push eax
push eax
push 0x200
push ecx
push 0xffffffffffffffff
lea ecx, [ebp - 0x314]
push ecx
push eax
push edi
call esi
xor eax, eax
lea ecx, [ebp - 0x19cc]
push eax
push eax
push 0x200
push ecx
push 0xffffffffffffffff
lea ecx, [ebp - 0x724]
push ecx
push eax
push edi
call esi
xor edi, edi
push edi
push edi
push 0x861
push dword [0x52a68c]
call ebx
push edi
push edi
push 0x85f
push dword [0x52a68c]
mov esi, eax
call ebx
lea edx, [ebp - 0x1bcc]
cmp eax, esi
je 0x415dd9
mov ecx, dword [0x52a68c]
push 1
call fcn.0040de9d
jmp 0x416545
push ecx
mov ecx, dword [0x52a68c]
call fcn.0040daaf
jmp 0x416545
mov esi, 0x200
lea eax, [ebp - 0x314]
push esi
xor ebx, ebx
push ebx
push eax
call fcn.00489f20
add esp, 0xc
lea eax, [ebp - 0xb04]
push 0x208
push ebx
push eax
call fcn.00489f20
add esp, 0xc
lea eax, [ebp - 0x724]
mov edx, 0x4e2f
mov ecx, str.WebTemplate2
cmp word [ebp - 0x1bd0], dx
push 0x522d98
push 0x100
push eax
push 0x4bc498
mov eax, str.WebTemplate1
cmovne eax, ecx
push eax
push str.Settings2
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
test eax, eax
je case.0x415777.20027
push ebx
push ebx
push 0x861
push dword [0x52a68c]
call dword [sym.imp.USER32.dll_SendMessageW]
push ebx
push ebx
push 0x85f
push dword [0x52a68c]
mov edi, eax
call dword [sym.imp.USER32.dll_SendMessageW]
sub edi, eax
mov dword [ebp - 0x18], edi
lea ecx, [edi - 1]
cmp ecx, 0x1f3
ja case.0x415777.20027
push ebx
push ebx
mov edi, 0x871
push edi
push dword [0x52a68c]
call dword [sym.imp.USER32.dll_SendMessageW]
cmp eax, esi
jae case.0x415777.20027
lea eax, [ebp - 0x314]
push eax
push ebx
push edi
push dword [0x52a68c]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
call edi
mov eax, dword [ebp - 0x18]
cmp eax, esi
jae 0x419549
mov byte [ebp + eax - 0x314], bl
lea eax, [ebp - 0x314]
push 0xd
push eax
call dword [sym.imp.SHLWAPI.dll_StrChrA]
test eax, eax
je 0x415ef0
mov byte [eax], bl
push 0xa
lea eax, [ebp - 0x314]
push eax
call dword [sym.imp.SHLWAPI.dll_StrChrA]
test eax, eax
je 0x415f05
mov byte [eax], bl
push 9
lea eax, [ebp - 0x314]
push eax
call dword [sym.imp.SHLWAPI.dll_StrChrA]
test eax, eax
je 0x415f1a
mov byte [eax], bl
lea eax, [ebp - 0x314]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je case.0x415777.20027
push ebx
push ebx
push 0x859
push dword [0x52a68c]
call edi
mov edx, 0xfde9
xor ecx, ecx
push esi
cmp eax, edx
lea eax, [ebp - 0xfb4]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x314]
cmove ecx, edx
push eax
push ebx
push ecx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0x848
push 0x40
call edi
mov esi, eax
lea eax, [ebp - 0xfb4]
push eax
lea eax, [ebp - 0x724]
mov dword [ebp - 0x1bd0], esi
push eax
push esi
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GlobalSize]
call esi
mov ecx, dword [ebp - 0x1bd0]
shr eax, 1
mov edx, eax
call fcn.004110cd
push dword [ebp - 0x1bd0]
call esi
push eax
push 0x40
call edi
mov edi, dword [ebp - 0x1bd0]
mov edx, edi
push eax
mov ecx, edi
mov dword [ebp - 0x18], eax
call fcn.00411058
pop ecx
mov esi, 0x52a900
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x415ff6
push esi
lea eax, [ebp - 0xb04]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0xb04]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push 0x3c
pop esi
push esi
lea eax, [ebp - 0xd0]
push ebx
push eax
call fcn.00489f20
add esp, 0xc
mov dword [ebp - 0xc8], ebx
lea eax, [ebp - 0xb04]
mov dword [ebp - 0xc4], ebx
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0xd0]
push eax
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xcc], 0x800000
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb4], 1
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
push edi
call esi
push ebx
call esi
jmp case.0x415777.20027
cmp dword [0x52a5b0], 0
jne 0x41607e
push 0
push 0x19dd5
jmp 0x419538
mov eax, 0x4e33
cmp bx, ax
mov eax, dword [0x52a678]
jne 0x416090
inc eax
jmp 0x416091
dec eax
mov ecx, 0x1000
cmp eax, ecx
push 0
cmovl ecx, eax
xor eax, eax
test ecx, ecx
cmovg eax, ecx
push eax
push 0x939
push dword [0x52a68c]
mov dword [0x52a678], eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x41856c
mov edx, 0x4c2f6c
push edx
jmp 0x417e04
mov edx, 0x4c2ec4
jmp 0x4160c5
push 0x4c3158
mov edx, 0x4c315c
jmp 0x417e04
push 0x4c2b0c
mov edx, 0x4c3160
jmp 0x417e04
push 0x4c2fa0
mov edx, 0x4c2fa4
jmp 0x417e04
mov edx, 0x4c3164
jmp 0x4160c5
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
xor ebx, ebx
push ebx
push ebx
push 0x977
push edi
call esi
cmp eax, 1
je case.0x415777.20027
push ebx
push ebx
push 0x7d9
push dword [0x52a68c]
call esi
push ebx
push ebx
push 0x7d8
push dword [0x52a68c]
mov edi, eax
call esi
cmp eax, edi
jle case.0x415777.20027
push edi
push eax
push 0x870
push dword [0x52a68c]
call esi
push ebx
push ebx
push 0x95f
jmp 0x416529
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
xor ebx, ebx
push ebx
push ebx
push 0x977
push edi
call esi
cmp eax, 1
je case.0x415777.20027
push ebx
push ebx
push 0x7d9
push dword [0x52a68c]
call esi
push ebx
push ebx
push 0x7d8
push dword [0x52a68c]
mov edi, eax
call esi
cmp eax, edi
jge case.0x415777.20027
jmp 0x416149
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ebx, 0x52a900
push ebx
call esi
test eax, eax
jne 0x4161db
push 0x20
lea eax, [ebp - 0x94]
push eax
push 0x2713
push dword [0x52a6a0]
call dword [sym.imp.USER32.dll_LoadStringW]
lea ebx, [ebp - 0x94]
push edi
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je case.0x415777.20027
call dword [sym.imp.USER32.dll_EmptyClipboard]
push ebx
call esi
lea eax, [eax*2 + 2]
push eax
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edi, eax
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GlobalSize]
shr eax, 1
push eax
push ebx
push esi
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push edi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push edi
push 0xd
call dword [sym.imp.USER32.dll_SetClipboardData]
jmp 0x417367
lea eax, [ebp - 0x100]
mov dword [ebp - 0x100], 0x2c
push eax
push dword [0x52ab74]
call dword [sym.imp.USER32.dll_GetWindowPlacement]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe0]
mov esi, dword [ebp - 0xdc]
mov ebx, dword [ebp - 0xd8]
sub esi, eax
push dword [0x52ab74]
mov dword [ebp - 0x1bd4], eax
sub ebx, ecx
mov dword [ebp - 0x18], ecx
call dword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
jne 0x416290
test byte [ebp - 0xfc], 2
je 0x416293
xor eax, eax
inc eax
push eax
push ebx
push esi
push dword [ebp - 0x18]
lea eax, [ebp - 0x314]
push dword [ebp - 0x1bd4]
push 0x4c3168
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
push edi
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x417160
call dword [sym.imp.USER32.dll_EmptyClipboard]
lea eax, [ebp - 0x314]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [eax*2 + 2]
push eax
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edi, eax
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GlobalSize]
shr eax, 1
push eax
lea eax, [ebp - 0x314]
push eax
push esi
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push edi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push edi
push 0xd
call dword [sym.imp.USER32.dll_SetClipboardData]
call dword [sym.imp.USER32.dll_CloseClipboard]
jmp 0x417160
call fcn.0041e8be
jmp case.0x415777.20027
mov ebx, 0x522d98
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je case.0x415777.20027
mov ecx, ebx
call fcn.0041ca2d
push ebx
xor edx, edx
jmp 0x416356
xor edx, edx
push 0x4bc498
inc edx
push ecx
push 0
xor ecx, ecx
call fcn.0041d0b5
add esp, 0xc
jmp case.0x415777.20027
mov ecx, 0x9c41
sub eax, ecx
cmp eax, 0x2d3
ja case.0x415777.20027
movzx eax, byte [eax + 0x419887]
jmp dword [eax*4 + 0x4195df]
xor edx, edx
jmp 0x416359
push dword [0x52a68c]
call esi
jmp case.0x415777.20027
pop ecx
jmp case.0x415777.20027
mov edx, dword [0x4fa128]
push ecx
push ecx
mov ecx, edi
call fcn.0040fa46
add esp, 0x20
jmp case.0x415777.20027
push 0x10
jmp 0x41953d
push ecx
push 0x52a900
jmp 0x4165db
call fcn.0041cabe
jmp case.0x415777.20027
call dword [sym.imp.USER32.dll_CloseClipboard]
jmp case.0x415777.20027
push 0x870
jmp 0x416529
call fcn.0040998d
jmp 0x416545
push ebx
mov ecx, dword [0x52a68c]
mov edx, 0x523fa8
call fcn.0040cfc9
jmp 0x416545
push ebx
mov ecx, dword [0x52a68c]
mov edx, 0x523fa8
call fcn.0040ce08
jmp 0x416545
mov ecx, dword [0x52a68c]
call fcn.004205c2
call fcn.0041cc77
jmp case.0x415777.20027
call fcn.0041cc77
mov eax, dword [0x52a678]
mov dword [0x52a670], eax
jmp case.0x415777.20027
cmp dword [0x5278b4], 0
jne 0x418ed1
mov eax, dword [0x5278e4]
cmp eax, dword [0x52a138]
jne 0x418ed1
xor eax, eax
jmp 0x418ed4
xor eax, eax
inc eax
sub esp, 0xc
push eax
jmp 0x4170e8
push ecx
call fcn.0040bd2d
pop ecx
jmp 0x418eb7
xor ebx, ebx
push ebx
push ebx
push 0x861
push dword [0x52a68c]
call dword [sym.imp.USER32.dll_SendMessageW]
push ebx
push ebx
push 0x85f
push dword [0x52a68c]
mov dword [ebp - 0x1bd0], eax
call dword [sym.imp.USER32.dll_SendMessageW]
sub dword [ebp - 0x1bd0], eax
jne 0x41911b
push ebx
push 0x19d77
push 0x111
push edi
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
call edi
push ebx
push ebx
push 0x861
push dword [0x52a68c]
call edi
push ebx
push ebx
push 0x85f
push dword [0x52a68c]
mov edi, eax
call dword [sym.imp.USER32.dll_SendMessageW]
sub edi, eax
mov dword [ebp - 0x1bd0], edi
jmp 0x419121
mov edi, dword [ebp - 0x1bd0]
lea eax, [edi - 1]
cmp eax, 0x1f3
ja case.0x415777.20027
push ebx
push ebx
push 0x871
push dword [0x52a68c]
call dword [sym.imp.USER32.dll_SendMessageW]
mov edi, 0x200
cmp eax, edi
jge case.0x415777.20027
lea eax, [ebp - 0x314]
push eax
push ebx
push 0x871
push dword [0x52a68c]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [ebp - 0x1bd0]
cmp eax, edi
jae 0x419549
mov byte [ebp + eax - 0x314], bl
lea eax, [ebp - 0x314]
push 0xa
push eax
call dword [sym.imp.SHLWAPI.dll_StrChrA]
test eax, eax
je 0x419192
mov byte [eax], bl
push 0xd
lea eax, [ebp - 0x314]
push eax
call dword [sym.imp.SHLWAPI.dll_StrChrA]
test eax, eax
je 0x4191a7
mov byte [eax], bl
push ebx
push ebx
push 0x859
push dword [0x52a68c]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [0x522fa8], eax
lea eax, [ebp - 0x314]
push eax
push 0x523fa8
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x522fa8]
cmp eax, 0xfde9
je 0x419219
push edi
lea ecx, [ebp - 0xfb4]
push ecx
push 0xffffffffffffffff
lea ecx, [ebp - 0x314]
push ecx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push ebx
push ebx
push 0x600
push 0x5243a8
push 0xffffffffffffffff
lea eax, [ebp - 0xfb4]
push eax
push ebx
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
jmp 0x41922b
lea eax, [ebp - 0x314]
push eax
push 0x5243a8
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
and dword [0x524fa8], 0xff9fffff
mov dword [0x524fac], ebx
sub esi, 0x4e31
je 0x4181de
sub esi, 1
jne case.0x415777.20027
jmp 0x4181c8
mov ecx, dword [ebp - 8]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00486c63
leave
ret
push 0x111
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x415777.20027
call fcn.00486d93
nop
jle 0x4195a8
inc ecx
add byte [edi - 0x21ffbea9], bh
push edi
inc ecx
add byte [eax], bl
pop eax
inc ecx
add bl, al
pop eax
inc ecx
add byte [ebp + 0x59], bl
inc ecx
add byte [ebx + 0x21004159], bh
pop edx
inc ecx
add byte [esi], bh
pop edx
inc ecx
add byte [edi + 0x5a], dh
inc ecx
add al, cl
pop edx
inc ecx
add byte [edi], ch
pop ebx
inc ecx
add byte [ecx], bh
pop ebx
inc ecx
add byte [ebp + 0x5b], dl
inc ecx
add byte [ebx + ebx*2 + 0x41], bl
add dl, ch
pop ebp
inc ecx
add dl, ch
pop ebp
inc ecx
add byte [ebx - 0x5cffbe70], ah
nop
inc ecx
add byte [ecx + 0x60], ch
inc ecx
add byte [ecx + 0x60], ch
inc ecx
add al, al
pushal
inc ecx
add bl, cl
pushal
inc ecx
add dl, dl
pushal
inc ecx
add cl, ah
pushal
inc ecx
add al, dh
pushal
inc ecx
add bh, bh
pushal
inc ecx
add byte [ebx - 0x7cffbe6d], al
xchg ebx, eax
inc ecx
add ch, bl
mov es, word [ecx]
push es
popal
inc ecx
add byte [ecx + 0x41], ah
add byte [ecx + 0x35004161], ch
bound eax, qword [ecx]
and al, 0x63
inc ecx
add byte [esi], ch
arpl word [ecx], ax
mov byte [ebx + 0x41], ah
add byte [ebx + 0x65f20041], dl
inc ecx
add byte [esi], dh
inc ecx
add byte [ebx + 0x65], cl
inc ecx
add byte [esi + 0x65], dl
inc ecx
add byte [ebp + 0x41], bl
add ah, al
push 0x41
add ah, al
imul eax, dword [ecx], 0x6a
imul eax, dword [ecx], 7
push 0x6bf10041
inc ecx
add bl, bh
imul eax, dword [ecx], 0xffffff8d
insb byte es:[edi], dx
inc ecx
add ah, bl
insb byte es:[edi], dx
inc ecx
add byte [eax], cl
insd dword es:[edi], dx
inc ecx
add dl, al
insd dword es:[edi], dx
inc ecx
add dl, bh
insd dword es:[edi], dx
inc ecx
add byte [ebx], ch
outsb dx, byte [esi]
inc ecx
add byte [ecx - 0x6bffbe92], cl
outsb dx, byte [esi]
inc ecx
add byte [edi + ebp*2 + 0x70490041], bl
inc ecx
add byte [eax - 0x7cffbe90], al
xchg ebx, eax
inc ecx
add bl, dh
jo 0x419687
add byte [edi], al
jno 0x41968b
add byte [edx], dl
jno 0x41968f
add byte [ecx + esi*2], dh
inc ecx
add byte [edx + 0x71], ch
inc ecx
add byte [ecx - 0x38ffbe8f], ch
jno 0x41969f
add ch, dl
jno 0x4196a3
add byte [eax], dh
jae 0x4196a7
add byte [esi], bh
jae 0x4196ab
add byte [edx + 0x73], dh
inc ecx
add byte [eax - 0x56ffbe8d], al
je 0x4196b7
add byte [ecx + 0x75], al
inc ecx
add byte [ebx + 0x75], cl
inc ecx
add byte [ebp + 0x75], dl
inc ecx
add byte [ebx + 0x75], ah
inc ecx
add byte [eax - 0x52ffbe8b], cl
mov byte [ebp + 0x41], dh
add byte [ebp - 0x44ffbe8b], ch
jne 0x4196d3
lodsd eax, dword [esi]
jne 0x4196cf
add byte [ebx - 0x36ffbe8b], bh
mov ebx, 0xc9004175
add cl, cl
jne 0x4196d7
add ch, bl
js 0x4196db
add byte [0x6b004179], bh
jns 0x4196e3
imul edi, dword [ecx + 0x41], 0
add byte [eax - 0x28ffbe87], ah
mov al, byte [0xd7004179]
xlatb
jne 0x4196eb
add byte [esi + esi*2 + 0x41], ch
insb byte es:[edi], dx
jbe 0x4196ef
add ch, ch
jbe 0x4196f3
add byte [ebx], dh
ja 0x4196f7
add byte [ebp + 0x77], ah
inc ecx
ja 0x4196fb
add byte [ebx + 0x77], bh
inc ecx
add byte [edi - 0x6cffbe89], al
ja 0x419707
add byte [edi - 0x49ffbe89], ah
ja 0x41970f
add al, cl
ja 0x419713
enter 0x4177, 0
add cl, dl
ja 0x419717
sal dword [edi + 0x41], 1
add byte [ecx + 0x78], dl
inc ecx
push ecx
js 0x41971b
add byte [edi], dl
pop ss
js 0x41971f
add byte [edi - 0x39ffbe87], ah
jns 0x419727
invalid
add dh, dl
jns 0x41972b
inc ecx
add ch, ah
jns 0x41972f
in eax, 0x79
inc ecx
add byte [esi + edi*2 + 0x41], dl
push esp
jle 0x419733
add ah, dh
jns 0x419737
hlt
add byte [0xe00417a], al
add eax, 0xe00417a
push cs
jp 0x41973f
add byte [esi + 0x7a], dl
inc ecx
add dl, dl
jnp 0x419747
add byte [ebp + 0x7c], bl
inc ecx
pop ebp
jl 0x41974b
add byte [ebp + 0x1800417d], cl
jle 0x419753
sbb byte [esi + 0x41], bh
add byte [edi], ah
daa
jle 0x419757
add byte [esi], dh
jle 0x41975b
jle 0x41975b
add byte [ebp + 0x7e], al
inc ecx
inc ebp
jle 0x41975f
add byte [esi + 0x7e], bl
inc ecx
pop esi
jle 0x419763
add byte [ebp + 0x7e], ch
inc ecx
add byte [edi + edi*2], dl
adc al, 0x7f
inc ecx
add ah, al
jg 0x41976f
les edi, [edi + 0x41]
add byte [ebx + 0x52004190], ah
mov dword [0x52004190], eax
push edx
add byte [ecx], 1
add byte [ecx], 0x53
add byte [ecx], 0xf4
add dword [edx - 0x7dacffbf], eax
inc ecx
add ah, dh
hlt
add dword [ecx], 0x41826d
popfd
add byte [ecx], 0xc8
add byte [ecx], 0xcf
add byte [ecx], 0xd6
enter 0x4182, 0
iretd
salc
add byte [ecx], 0x97
xchg edi, eax
test byte [ecx], al
adc eax, dword [edi - 0x7785ffbf]
jp 0x4196e9
inc ecx
add byte [edi - 0x4bffbe78], dl
mov byte [ecx], al
push 0xd8004189
xchg edi, eax
mov byte [ecx], al
mov ah, 0x88
inc ecx
add byte [eax - 0x77], ch
inc ecx
add al, bl
fmul dword [ecx - 0x78cbffbf]
mov dword [ecx], eax
xor al, 0x87
inc ecx
add byte [ecx - 0x79], cl
inc ecx
add dh, dh
mov dword [ecx], eax
add al, 0x8a
inc ecx
add byte [edx], dl
mov al, byte [ecx]
add byte [ebp - 0x7a49ffbf], 0x41
add byte [ebx + eax*4], bl
inc ecx
add byte [eax - 0x49ffbe7b], al
test dword [ecx], eax
sbb al, 0x83
inc ecx
add al, dh
test byte [ecx], al
add ebx, dword [eax + 0x41]
add bl, al
mov dword [ecx], eax
xor eax, 0x9c00418d
mov al, byte [ecx]
les ecx, [ebp - 0x71efffbf]
inc ecx
add byte [0x7d00418e], ah
lea eax, [ecx]
and eax, 0x4200418f
mov es, word [ecx]
pop edi
mov es, word [ecx]
popfd
mov es, word [ecx]
fisttp qword [esi - 0x70afffbf]
inc ecx
add byte [edi + ecx*4 + 0x41], bl
add byte [ebx - 0x71], ch
inc ecx
add byte [eax], dl
pop dword [ecx]
out 0x8e, al
inc ecx
add bl, bh
mov es, word [ecx]
and byte [edx - 0x75b3ffbf], cl
inc ecx
add byte [eax - 0x76], ah
inc ecx
add byte [edx - 0x71], bh
inc ecx
add byte [edi + 0x2900418f], cl
mov byte [ecx], al
jbe 0x419785
inc ecx
add byte [edi + eax*4 - 0x780bffbf], dl
inc ecx
add bl, ah
xchg dword [ecx], eax
int 0x87
inc ecx
add bh, bh
xchg dword [ecx], eax
pop ss
mov byte [ecx], al
imul eax, dword [edi - 0x6f77ffbf], 0x90970041
inc ecx
add byte [ebp - 0x6e], dl
inc ecx
add byte [eax - 0x6e], dh
inc ecx
add byte [ebp - 0x52ffbe6e], cl
xchg edx, eax
inc ecx
add ch, cl
xchg edx, eax
inc ecx
add ch, ch
xchg edx, eax
inc ecx
add byte [ecx], cl
xchg ebx, eax
inc ecx
add byte [0x4b004193], ah
xchg ebx, eax
inc ecx
add byte [edi - 0x6d], ah
inc ecx
add byte [ebx + edx*4 - 0x6c54ffbf], dl
inc ecx
add bh, al
xchg ebx, eax
inc ecx
add bl, ah
xchg ebx, eax
inc ecx
add bh, bh
xchg ebx, eax
inc ecx
add byte [edi], bl
xchg esp, eax
inc ecx
add byte [edi], bh
xchg esp, eax
inc ecx
add byte [edi - 0x6c], bl
inc ecx
add byte [edi - 0x6c], bh
inc ecx
add byte [ecx - 0x39ffbe6c], ch
xchg esp, eax
inc ecx
add bl, ah
xchg esp, eax
inc ecx
add byte [eax], al
xchg ebp, eax
inc ecx
add byte [0x83004195], bl
xchg ebx, eax
inc ecx
add byte [eax], al
add dword [edx], eax
add eax, dword [eax + 0x9080706]
or cl, byte [edx]
or ecx, dword [ecx + 0x11100f0e]
adc dl, byte [ebx]
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0x1414a9a9
adc al, 0x14
adc al, 0x14
adc eax, 0xa9a9a916
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0x17a9a9a9
pop ss
pop ss
sbb byte [ecx - 0x56565657], ch
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0x1c1b1a19
sbb eax, 0x21201f1e
and ah, byte [ebx]
and al, 0x25
daa
sub byte [ecx], ch
sub ch, byte [ebx]
sub al, 0x2d
das
xor byte [ecx], dh
xor dh, byte [ebx]
xor al, 0x35
aaa
cmp byte [ecx], bh
cmp bh, byte [ebx]
cmp al, 0x3d
aas
inc eax
inc ecx
inc edx
inc ebx
inc esp
inc ebp
inc esp
inc esi
inc esp
sbb byte [edi + 0x48], al
dec eax
dec ecx
dec ecx
dec edx
dec ebx
dec esp
dec ebp
dec esi
dec edi
inc esp
push eax
push ecx
push edx
push ebx
push esp
push ebp
push ebp
push esi
push ebp
push edi
push ebp
push ebp
pop eax
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0x5c5b5a59
pop ebp
pop esi
pop edi
pushal
popal
bound esp, qword [ebx + 0x64]
push 0x6a69
imul ebp, dword [ebp + ebp*2 + 0x6e], 0x6f
jo 0x419aa0
jb 0x419aa4
je 0x419aa8
jbe 0x419aac
js 0x419ab0
jp 0x419ab4
jl 0x419ab8
jle 0x419abc
add byte [ecx - 0x7a7b7c7e], 0x86
xchg dword [eax - 0x73747577], ecx
lea ecx, [esi - 0x56565657]
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9908fa9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
xchg ecx, eax
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0x94939291
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0x939291a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0x9291a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0xa9a9a9a9
test eax, 0x91a9a9a9
xchg edx, eax
xchg ebx, eax
xchg esp, eax
xchg ebp, eax
xchg esi, eax
xchg edi, eax
cwde
cdq
lcall 0xa09f, 0x9e9d9c9b
adc esp, dword [ecx - 0x5a5b5c5e]
cmpsb byte [esi], byte es:[edi]
cmpsd dword [esi], dword es:[edi]
test al, 0xc0
jl 0x419b9f
add dh, ch
jl 0x419ba3
add dh, ch
jl 0x419ba7
add dh, ch
jl 0x419bab
add al, al
jl 0x419baf
add byte [ecx + 0x7d], al
inc ecx
add byte [esi], cl
jge 0x419bb7
add byte [esi + 0x7d], bh
inc ecx
add byte [ebp - 0x75], dl
push ebp
mov ebp, esp
sti
add byte [eax], al
test byte [edx - 0x7cfffff9], dl
jmp 0xb2c5aaaf
add byte [ebx - 0x7bf0fe17], al
mov dl, 6
add byte [eax], al
dec ebx