Function at 0x4300c2
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x88
mov esi, esp
mov ebx, dword [ebp + 8]
push eax
sub esp, 0x18
mov edi, esp
push eax
mov dword [esi + 0x40], esp
sub esp, 0xc
mov dword [esi + 0x20], esp
sub esp, 0x34
mov dword [esi + 8], esp
push eax
mov dword [esi + 0x28], esp
push eax
mov dword [esi + 0x24], esp
push eax
mov dword [esi + 0x18], esp
sub esp, 0x10
mov eax, esp
and eax, 0xfffffff8
mov dword [esi + 0x3c], eax
mov esp, eax
push eax
sub esp, 0x1c
mov dword [esi + 0x14], esp
push eax
mov dword [esi + 0x6c], esp
mov eax, dword [0x442ddc]
mov dword [esi + 0x2c], eax
mov dword [esi + 0x44], 0xd98fdbff
mov dword [esi + 0x48], 0xddabdf57
mov dword [esi + 0x4c], 0xd1a9d3a8
mov dword [esi + 0x50], 0xd592d7a3
mov dword [esi + 0x54], 0xe995eba2
mov dword [esi + 0x58], 0xed95ef62
mov dword [esi + 0x5c], 0xe1e2e3d7
mov word [esi + 0x60], 0
mov dword [esi + 0xc], 0
mov ecx, dword [esi + 0xc]
cmp ecx, 0x1d
ja 0x42f77e
nop
nop
nop
nop
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 0xc]
movzx edx, byte [esi + edx + 0x44]
add ecx, 0xa6d80dcf
xor ecx, edx
mov dword [esi + 0x70], ecx
mov ecx, dword [esi + 0x70]
add cl, 0xf5
mov edx, dword [esi + 0xc]
mov byte [esi + edx + 0x44], cl
inc dword [esi + 0xc]
mov ecx, dword [esi + 0xc]
cmp ecx, 0x1e
jb 0x42f750
lea ecx, [esi + 0xc]
lea eax, [esi + 0x70]
lea edx, [esi + 0x44]
push ecx
push 8
push eax
push 0xd
push edx
push 0
call dword [esi + 0x2c]
shr eax, 0x1f
jmp dword [eax*4 + 0x44074c]
mov dword [esi + 0x70], 0x3a0043
mov dword [esi + 0x74], 0x5c
mov dword [esi + 0x50], 0
mov dword [esi + 0x4c], 0
mov dword [esi + 0x48], 0
mov dword [esi + 0x44], 0
mov dword [esi + 0x30], 0
lea eax, [esi + 0x30]
push eax
push 0x43aa40
push 1
push 0
push 0x43aa50
call dword [sym.imp.ole32.dll_CoCreateInstance]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x440754]
mov dword [edi], 0x834d8152
mov dword [edi + 4], 0x8752854b
mov dword [edi + 8], 0x8b498954
mov dword [edi + 0xc], 0x8f438d45
mov dword [edi + 0x10], 0x93609146
mov word [edi + 0x14], 0x9594
mov dword [edi + 0x16], 0
mov word [edi + 0x1a], 0
mov dword [esi + 4], 0
mov eax, dword [esi + 4]
cmp eax, 0x1b
ja 0x42f86a
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 4]
mov ecx, dword [esi + 4]
movzx ecx, byte [edi + ecx]
add eax, 0x5860f1e0
xor eax, ecx
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0xc]
add al, 0xa0
mov ecx, dword [esi + 4]
mov byte [edi + ecx], al
inc dword [esi + 4]
mov eax, dword [esi + 4]
cmp eax, 0x1c
jb 0x42f840
push edi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edx, dword [esi + 0x30]
mov ecx, dword [edx]
mov edi, dword [esi + 0x40]
push edi
push 0
push 0
push 0
push 0
push 0
push 0
mov dword [esi + 0x2c], eax
push eax
push edx
call dword [ecx + 0xc]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44075c]
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [edi]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x440764]
mov edx, dword [esi + 0x20]
mov dword [edx], 0xb9cdbbed
mov dword [edx + 4], 0xbdbebfc4
mov word [edx + 8], 0
mov dword [esi + 4], 0
mov eax, dword [esi + 4]
cmp eax, 9
ja 0x42f91a
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 4]
mov ecx, dword [esi + 4]
movzx ecx, byte [edx + ecx]
add eax, 0x5f13901f
xor eax, ecx
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0xc]
add al, 0x65
mov ecx, dword [esi + 4]
mov byte [edx + ecx], al
inc dword [esi + 4]
mov eax, dword [esi + 4]
cmp eax, 0xa
jb 0x42f8f0
push edx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi + 0x20], eax
mov edx, dword [esi + 8]
mov dword [edx], 0x51094f19
mov dword [edx + 4], 0x5515531c
mov dword [edx + 8], 0x59025711
mov dword [edx + 0xc], 0x5d305b38
mov dword [edx + 0x10], 0xa1185f3c
mov dword [edx + 0x14], 0xa5f3a3f2
mov dword [edx + 0x18], 0xa9c6a7eb
mov dword [edx + 0x1c], 0xad01abf1
mov dword [edx + 0x20], 0xb1dbaf02
mov dword [edx + 0x24], 0xb513b3c2
mov dword [edx + 0x28], 0xb9fdb7f6
mov dword [edx + 0x2c], 0xbdefbbe9
mov dword [edx + 0x30], 0xbfbc
mov dword [esi + 4], 0
mov eax, dword [esi + 4]
cmp eax, 0x33
ja 0x42f9cd
mov eax, dword [esi + 4]
mov ecx, dword [esi + 4]
mov edx, dword [esi + 8]
movzx edx, byte [edx + ecx]
lea ecx, [eax + edx]
add eax, 0xed
and eax, edx
mov edx, dword [esi + 8]
add eax, eax
sub ecx, eax
add ecx, 0x10eecded
mov dword [esi + 0xc], ecx
mov eax, dword [esi + 0xc]
add al, 0x5f
mov ecx, dword [esi + 4]
mov byte [edx + ecx], al
inc dword [esi + 4]
mov eax, dword [esi + 4]
cmp eax, 0x34
jb case.default.0x42f9f0
push edx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edx, dword [edi]
mov ecx, dword [edx]
mov edi, dword [esi + 0x28]
push edi
push 0
push 0x30
mov dword [esi + 0x68], eax
push eax
push dword [esi + 0x20]
push edx
call dword [ecx + 0x50]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44076c]
mov edi, dword [esi + 0x18]
jmp dword [0x440774]
mov dword [edi], 0
mov eax, dword [esi + 0x28]
mov eax, dword [eax]
mov ecx, dword [eax]
push edi
push dword [esi + 0x24]
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
nop
nop
nop
nop
nop
nop
nop
mov dword [edi], 0
mov eax, dword [esi + 0x28]
mov eax, dword [eax]
mov ecx, dword [eax]
push edi
push dword [esi + 0x24]
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
jmp dword [0x440780]
test eax, eax
setns cl
cmp eax, 1
setne al
cmp dword [edi], 0
setne dl
and dl, al
and dl, cl
movzx eax, dl
jmp dword [eax*4 + 0x440784]
mov edi, dword [esi + 0x3c]
push edi
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esi + 0x24]
mov eax, dword [eax]
mov dword [esi + 8], eax
mov edx, dword [esi + 0x14]
mov dword [edx], 0x57bb4997
mov dword [edx + 4], 0x53bb55aa
mov dword [edx + 8], 0x5faa51b1
mov dword [edx + 0xc], 0x5ba75d8e
mov dword [edx + 0x10], 0x678859ad
mov dword [edx + 0x14], 0x639c6589
mov word [edx + 0x18], 0x6160
mov dword [edx + 0x1a], 0
mov word [edx + 0x1e], 0
mov dword [esi + 4], 0
mov ecx, dword [esi + 4]
cmp ecx, 0x1f
ja 0x42faf5
nop
nop
mov ecx, dword [esi + 4]
mov edx, dword [esi + 4]
mov eax, dword [esi + 0x14]
movzx edx, byte [eax + edx]
add ecx, 0x365cb18e
xor ecx, edx
mov dword [esi + 0xc], ecx
mov ecx, dword [esi + 0xc]
add cl, 0x3a
mov edx, dword [esi + 4]
mov eax, dword [esi + 0x14]
mov byte [eax + edx], cl
mov edx, dword [esi + 0x14]
inc dword [esi + 4]
mov ecx, dword [esi + 4]
cmp ecx, 0x20
jb 0x42fac0
mov eax, dword [esi + 8]
mov ecx, dword [eax]
push 0
push 0
push edi
push 0
push edx
push eax
call dword [ecx + 0x10]
test eax, eax
setns al
cmp word [edi], 8
sete cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x44078c]
push dword [edi + 8]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
mov edx, dword [edi + 8]
mov dword [esi + 0x10], eax
lea eax, [edx + eax*2]
mov dword [esi + 0x14], eax
movzx ecx, word [edx]
test cx, cx
mov dword [esi + 0x1c], edx
je 0x42fb7f
xor edi, edi
mov eax, edx
jmp 0x42fb55
mov edi, dword [esi + 8]
add edi, edx
movzx ecx, word [eax + 2]
add eax, 2
test cx, cx
je 0x42fb81
cmp eax, dword [esi + 0x14]
jae 0x42fb81
mov dword [esi + 8], edi
movzx edi, cx
cmp edi, 0x800
mov ecx, 3
sbb ecx, 0
mov edx, 1
cmp edi, 0x80
jb 0x42fb44
mov edx, ecx
jmp 0x42fb44
xor edi, edi
lea eax, [edi + 1]
mov dword [esi + 0x34], eax
push eax
call fcn.00408f60
add esp, 4
mov dword [esi + 0x18], eax
test edi, edi
mov ecx, dword [esi + 0x1c]
jle 0x42fc79
mov eax, dword [esi + 0x18]
cmp dword [esi + 0x10], 0
jle 0x42fc79
mov eax, dword [esi + 0x18]
lea edx, [eax + edi]
mov dword [esi + 0x64], edx
add dword [esi + 0x34], eax
add ecx, 2
movzx edx, word [ecx - 2]
test dx, dx
je 0x42fc79
cmp dx, 0x7f
ja 0x42fbdb
mov byte [eax], dl
mov dword [esi + 8], 1
jmp 0x42fc63
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x38], eax
mov ecx, eax
not ecx
add ecx, dword [esi + 0x34]
movzx eax, dx
mov dword [esi + 0x10], eax
cmp ecx, 2
jb 0x42fc1e
cmp dword [esi + 0x10], 0x7ff
ja 0x42fc1e
mov ecx, edx
shr ecx, 6
add cl, 0xc0
mov eax, dword [esi + 0x38]
mov byte [eax], cl
and dl, 0x3f
or dl, 0x80
mov byte [eax + 1], dl
mov dword [esi + 8], 2
mov ecx, dword [esi + 0x1c]
jmp 0x42fc63
mov dword [esi + 8], 0
cmp ecx, 3
mov ecx, dword [esi + 0x1c]
mov eax, dword [esi + 0x38]
jb 0x42fc63
mov ecx, dword [esi + 0x10]
shr ecx, 0xc
or cl, 0xe0
mov byte [eax], cl
shr dword [esi + 0x10], 6
mov ecx, dword [esi + 0x10]
not cl
or cl, 0x3f
add cl, byte [esi + 0x10]
add cl, 0x81
mov byte [eax + 1], cl
mov ecx, dword [esi + 0x1c]
and dl, 0x3f
or dl, 0x80
mov byte [eax + 2], dl
mov dword [esi + 8], 3
add eax, dword [esi + 8]
cmp eax, dword [esi + 0x64]
jae 0x42fc79
mov edx, ecx
add ecx, 2
cmp edx, dword [esi + 0x14]
jb 0x42fbba
mov byte [eax], 0
add edi, 0xfffffffc
mov dword [esi + 8], edi
xor edi, edi
xor eax, eax
cmp edi, 4
setb al
jmp dword [eax*4 + 0x4407a4]
mov eax, edi
or eax, 4
mov edx, edi
and edx, 4
imul eax, edx
xor edx, 4
mov ecx, edi
and ecx, 0xfffffffb
imul ecx, edx
add eax, dword [esi + 0x18]
mov eax, dword [ecx + eax]
mov dword [esi + edi*4 + 0x44], eax
xor eax, eax
sub dword [esi + 8], 4
setb al
jmp dword [eax*4 + 0x4407ac]
inc edi
xor eax, eax
cmp edi, 4
setb al
jmp dword [eax*4 + 0x4407a4]
mov edi, dword [esi + 0x3c]
jmp dword [0x4407b4]
push dword [esi + 0x18]
call fcn.00408f70
add esp, 4
push edi
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esi + 0x24]
mov eax, dword [eax]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esi + 0x28]
mov eax, dword [eax]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [case.0x42f9f0.0]
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [esi + 0x20]
call edi
push dword [esi + 0x68]
call edi
mov edi, dword [esi + 0x40]
mov eax, dword [edi]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [esi + 0x2c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 0x30]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [esi + 0x6c]
mov dword [edi], 0
push 0xefddb36b
push dword [0x442dd4]
call fcn.004365c0
add esp, 8
push 0
push 0
push 0
push 0
push edi
push 0
push 0
lea ecx, [esi + 0x70]
push ecx
call eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x4407cc]
mov eax, dword [edi]
mov dword [esi + 0x44], eax
xor eax, eax
xor ecx, ecx
cmp eax, 4
setb cl
jmp dword [ecx*4 + 0x4407d4]
xor edx, edx
test eax, eax
setne dl
mov ecx, eax
jmp dword [edx*4 + 0x4407ec]
xor edx, edx
cmp dword [esi + eax*4 + 0x44], 0
sete dl
mov ecx, eax
jmp dword [edx*4 + 0x4407f4]
mov edx, dword [case.0x42fb17.24]
lea ecx, [eax - 1]
nop
nop
nop
nop
jmp edx
mov edx, dword [esi + ecx*4 + 0x44]
mov edi, edx
and edi, 0x1a5845
mov ecx, edx
or edx, 0x1a5845
imul edx, edi
xor edi, 0x1a5845
and ecx, 0xffe5a7ba
imul ecx, edi
add edx, ecx
lea ecx, [ebx + 8]
add edx, 0xebde8a13
mov dword [esi + eax*4 + 0x44], edx
mov byte [ebx + 8], 0
mov dword [esi + 8], ecx
je 0x42fe70
mov ebx, ecx
cmp edx, 0x100
jb 0x42fe80
mov edi, edx
nop
nop
nop
nop
movzx ecx, dl
movzx ecx, word [ecx + ecx + str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
mov word [ebx - 2], cx
add ebx, 0xfffffffe
shr edi, 8
cmp edx, 0xffff
mov edx, edi
ja 0x42fe30
cmp edi, 0xf
ja 0x42fe87
movzx ecx, byte [edi + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov byte [ebx - 1], cl
dec ebx
jmp 0x42fe96
mov byte [ebx + 7], 0x30
add ebx, 7
jmp 0x42fe96
mov edi, edx
cmp edi, 0xf
jbe 0x42fe54
movzx ecx, word [edi + edi + str.000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5F606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E7F808182838485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0C1C2C3C4C5C6C7C8C9CACBCCCDCECFD0D1D2D3D4D5D6D7D8D9DADBDCDDDEDFE0E1E2E3E4E5E6E7E8E9EAEBECEDEEEFF0F1F2F3F4F5F6F7F8F9FAFBFCFDFEFF]
mov word [ebx - 2], cx
add ebx, 0xfffffffe
lea edx, [ebx - 1]
mov edi, ebx
nop
nop
nop
nop
nop
inc edx
cmp byte [edi], 0
lea edi, [edi + 1]
jne case.default.0x42fecb
mov ecx, edx
xor ecx, ebx
mov edi, ebx
not edi
and edi, edx
add edi, edi
sub edi, ecx
mov edx, edi
not edx
and edi, 0xfffffff7
and edx, 8
sub edx, edi
xor ecx, ecx
add edx, 0xffffffff
setb cl
jmp dword [ecx*4 + 0x44080c]
jmp dword [0x44081c]
mov byte [ebx - 1], 0x30
dec ebx
xor ecx, ecx
add edx, 0xffffffff
setb cl
jmp dword [ecx*4 + 0x44080c]
inc eax
xor edx, edx
cmp eax, 4
setb dl
mov ebx, dword [esi + 8]
jmp dword [edx*4 + 0x4407d4]
mov eax, dword [case.0x42fb17.16]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
int3
push eax
mov eax, esp
push 0x68
push 7
push 0x100080
push eax
push dword [ebp + 8]
call fcn.004371a0
add esp, 0x14
nop
nop
nop
nop
nop
nop
nop
nop
nop
push eax
mov esi, esp
sub esp, 8
mov ebx, esp
sub esp, 0xc
mov edi, esp
push 0x68
push 7
push 0x100080
push esi
push dword [ebp + 8]
call fcn.004371a0
add esp, 0x14
jmp dword [0x440830]
mov dword [ebp - 0x28], edi
not eax
shr eax, 0x1f
mov dword [ebp - 0x30], esi
jmp dword [eax*4 + 0x440834]
xor eax, eax
jmp 0x430254
push 0x400
call fcn.00433110
add esp, 4
mov dword [ebp - 0x18], eax
mov eax, dword [esi]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], 0xe0e7e6e5
mov word [ebp - 0x20], 0
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
cmp eax, 5
ja 0x430017
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0x24]
mov edx, eax
and edx, 0x11c40b59
xor eax, 0x11c40b59
lea eax, [eax + edx*2]
xor eax, ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
add al, 0x43
mov ecx, dword [ebp - 0x10]
mov byte [ebp + ecx - 0x24], al
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, 6
jb 0x42ffe0
mov edx, dword [ebp - 0x24]
mov ecx, dword [0x442de0]
test ecx, ecx
mov edi, dword [ebp + 0xc]
je 0x430056
mov eax, ecx
mov dword [ebp - 0x1c], edx
xor ecx, ecx
mov edx, dword [0x442de4]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edx + ecx*8], 0x77a9e0c4
je 0x43005b
inc ecx
cmp eax, ecx
jne 0x430040
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
jmp case.default.0x430097
mov ecx, dword [ebp - 0x18]
jmp case.default.0x430097
mov eax, dword [edx + ecx*8 + 4]
mov edx, dword [ebp - 0x1c]
cmp eax, edx
mov ecx, dword [ebp - 0x18]
je case.default.0x430097
push 0x2f
push 0x400
push ecx
push ebx
push dword [ebp - 0x14]
push 5
push dword [0x442de8]
push eax
call fcn.00435090
mov ecx, dword [ebp - 0x18]
add esp, 0x20
mov edx, eax
not edx
shr edx, 0x1f
mov dword [ebp - 0x14], 0
jmp dword [edx*4 + 0x44083c]
xor eax, eax
xor edx, edx
mov dword [ebp - 0x14], 0
cmp edx, dword [ecx]
setb al
xor edx, edx
jmp dword [eax*4 + 0x440844]
mov eax, dword [case.0x430097.0]
nop
nop
nop
nop
jmp eax
push ecx
call fcn.00433180
add esp, 4
mov eax, dword [esi]
mov dword [ebp - 0x24], 0xe0e7e6e5
mov word [ebp - 0x20], 0
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 5
ja 0x430129
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
movzx edx, byte [ebp + edx - 0x24]
mov esi, ecx
and esi, 0x11c40b59
xor ecx, 0x11c40b59
lea ecx, [ecx + esi*2]
xor ecx, edx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
add cl, 0x43
mov edx, dword [ebp - 0x10]
mov byte [ebp + edx - 0x24], cl
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp ecx, 6
jb 0x4300f0
mov ecx, dword [0x442de0]
test ecx, ecx
je 0x43024f
mov edx, dword [ebp - 0x24]
xor esi, esi
mov edi, dword [0x442de4]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0x625b6034
je 0x430235
inc esi
cmp ecx, esi
jne 0x430150
jmp 0x43024f
mov ecx, dword [ebp - 0x28]
call fcn.004335d0
mov eax, 0x604b5182
mov edx, dword [ebp - 0x1c]
sub eax, edx
add edx, 0x1fb4ae7d
and eax, 0x9fb4ae7c
and edx, 0x604b5183
sub edx, eax
xor eax, eax
mov ecx, dword [ebp - 0x18]
cmp edx, dword [ecx]
setb al
jmp dword [eax*4 + 0x440844]
mov dword [ebp - 0x1c], edx
mov eax, dword [ecx + edx*4 + 4]
mov ebx, dword [ebp - 0x28]
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov ecx, ebx
push 0
push eax
call fcn.00433420
xor eax, eax
mov ecx, edi
neg ecx
sbb eax, dword [ebp + 0x10]
setl al
movzx eax, al
shl eax, 0x14
or eax, 1
mov ecx, ebx
push eax
call fcn.00433440
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44085c]
mov esi, edi
mov edi, dword [ebp + 0x10]
mov ebx, dword [ebp - 0x28]
jmp dword [0x440868]
mov ecx, ebx
push edi
push esi
push 0
call fcn.004336a0
mov ecx, ebx
push edi
push esi
push 0
call fcn.004336a0
jmp dword [0x44086c]
test eax, eax
setns al
mov dword [ebp - 0x14], eax
mov edi, esi
mov esi, dword [ebp - 0x30]
mov ecx, ebx
jmp 0x430173
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
je 0x43024f
push eax
push 1
push dword [0x442de8]
push ecx
call fcn.00435090
add esp, 0x10
mov eax, dword [ebp - 0x14]
and al, 1
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.004178d0
mov cx, word [ebx]
xor eax, eax
sub cx, 0x5c
sete cl
mov dword [esp + 0x1a4], 1
mov edx, dword [esp + 0x1a8]
mov esi, dword [esp + 0x1a4]
mov edx, dword [edx + esi*4]
jmp edx
call fcn.004178d0
mov eax, esi
add eax, 0xfffffffe
mov dword [esp + 0x25c], 0
mov ecx, dword [esp + 0x260]
mov edx, dword [esp + 0x25c]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.004178d0
mov dword [esp + 0x38c], 1
mov eax, dword [esp + 0x390]
mov ecx, dword [esp + 0x38c]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.004178d0
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], ebp
call fcn.00418bb0
mov ecx, dword [esp + 0x50]
lea eax, [ebp + ecx*2]
lea edi, [ebx + ecx*2]
mov dword [esp + 0x15c], 0
mov ecx, dword [esp + 0x160]
mov edx, dword [esp + 0x15c]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.004178d0
mov dword [esp + 0x394], 0
mov eax, dword [esp + 0x398]
mov ecx, dword [esp + 0x394]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.004178d0
mov cx, word [edi]
xor eax, eax
test cx, cx
sete cl
mov dword [esp + 0x2ac], 0
mov edx, dword [esp + 0x2b0]
mov esi, dword [esp + 0x2ac]
mov edx, dword [edx + esi*4]
jmp edx
call fcn.004178d0
mov dword [esp + 0x1fc], 0
mov eax, dword [esp + 0x200]
mov ecx, dword [esp + 0x1fc]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x78]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x384]
mov ecx, dword [esp + 0x388]
mov ecx, dword [ecx + eax*4]
xor eax, eax
jmp ecx
call fcn.004178d0
mov dword [esp + 0x2b4], 1
mov eax, dword [esp + 0x2b8]
mov ecx, dword [esp + 0x2b4]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.004178d0
mov dword [esp + 0x264], 0
mov eax, dword [esp + 0x268]
mov ecx, dword [esp + 0x264]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esp + 0x2c], ebp
mov ax, word [ebp]
mov ecx, dword [esp + 0x33c]
mov edx, dword [esp + 0x340]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov eax, dword [esp + 0x36c]
mov ecx, dword [esp + 0x370]
mov eax, dword [ecx + eax*4]
jmp eax
add byte [ebp - 0x7b74582a], bh
and al, 0x84
add byte [eax], al
add byte [ebx + 0x88248c], cl
add byte [eax], al
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x1c4]
mov ecx, dword [esp + 0x1c8]
mov eax, dword [ecx + eax*4]
jmp eax
mov ax, word [edi]
xor ecx, ecx
test ax, ax
sete cl
mov dword [esp + 0x144], ecx
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x144]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esp], ebp
call fcn.00415620
lea esi, [ebp + eax*2]
mov eax, dword [esp + 0x34c]
mov ecx, dword [esp + 0x350]
mov eax, dword [ecx + eax*4]
jmp eax
mov ax, word [edi]
xor ecx, ecx
sub ax, 0x5c
sete cl
mov dword [esp + 0x284], ecx
mov eax, dword [esp + 0x288]
mov ecx, dword [esp + 0x284]
mov ecx, dword [eax + ecx*4]
xor eax, eax
jmp ecx
xor eax, eax
mov ecx, esi
sub ecx, 3
sete al
mov dword [esp + 0x23c], eax
mov eax, dword [esp + 0x240]
mov ecx, dword [esp + 0x23c]
mov eax, dword [eax + ecx*4]
jmp eax
mov ecx, dword [esp + 0x2fc]
mov edx, dword [esp + 0x300]
mov ecx, dword [edx + ecx*4]
mov esi, eax
jmp ecx
add ebx, 0xfffffffe
mov eax, dword [esp + 0x18c]
mov ecx, dword [esp + 0x190]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.004178d0
xor eax, eax
mov ecx, ebp
sub ecx, edi
seta cl
mov dword [esp + 0x2d4], 1
mov edx, dword [esp + 0x2d8]
mov esi, dword [esp + 0x2d4]
mov edx, dword [edx + esi*4]
jmp edx
mov al, cl
and eax, 1
mov dword [esp + 0x19c], eax
mov eax, dword [esp + 0x1a0]
mov ecx, dword [esp + 0x19c]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.004178d0
mov dword [esp + 0xd4], 0
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xd4]
mov eax, dword [eax + ecx*4]
jmp eax
mov ax, word [esi]
test ax, ax
sete al
mov ecx, dword [esp + 0x1d4]
mov edx, dword [esp + 0x1d8]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov ecx, dword [esp + 0x154]
mov edx, dword [esp + 0x158]
mov ecx, dword [edx + ecx*4]
mov esi, eax
mov ebp, dword [esp + 0x3bc]
mov ebx, edi
mov edi, ebp
jmp ecx
mov al, byte [esp + 0xf]
mov bl, al
and ebx, 1
mov dword [esp + 0x1f4], ebx
mov eax, dword [esp + 0x1f8]
mov ecx, dword [esp + 0x1f4]
mov eax, dword [eax + ecx*4]
mov ebp, dword [esp + 0x2c]
jmp eax
add ebx, 0xfffffffe
mov eax, dword [esp + 0x1bc]
mov ecx, dword [esp + 0x1c0]
mov eax, dword [ecx + eax*4]
jmp eax
mov ax, word [edi]
xor ecx, ecx
sub ax, 0x5c
sete cl
mov dword [esp + 0x1dc], ecx
mov eax, dword [esp + 0x1e0]
mov ecx, dword [esp + 0x1dc]
mov ecx, dword [eax + ecx*4]
xor eax, eax
jmp ecx
daa
push ebx
cmp ah, cl
loopne 0x430f6a
push edi
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x80]
mov eax, dword [ecx + eax*4]
jmp eax
add byte [eax], 0
add byte [ebx - 0x1f007efc], cl
call fcn.004178d0
mov dword [esp + 0x224], 0
mov eax, dword [esp + 0x228]
mov ecx, dword [esp + 0x224]
mov eax, dword [eax + ecx*4]
jmp eax
mov ebx, ebp
call fcn.004178d0
mov dword [esp + 0x164], 0
mov eax, dword [esp + 0x168]
mov ecx, dword [esp + 0x164]
mov eax, dword [eax + ecx*4]
mov ebp, dword [esp + 0x28]
jmp eax
mov edx, dword [esp + 0x2cc]
mov esi, dword [esp + 0x2d0]
mov edx, dword [esi + edx*4]
jmp edx
add byte [ebx - 0x1d0069ec], cl
not al
movzx eax, al
and eax, 1
mov dword [esp + 0x1cc], eax
mov eax, dword [esp + 0x1d0]
mov ecx, dword [esp + 0x1cc]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, cl
and eax, 1
mov dword [esp + 0x2a4], eax
mov eax, dword [esp + 0x2a8]
mov ecx, dword [esp + 0x2a4]
mov eax, dword [eax + ecx*4]
jmp eax
xchg edi, eax
arpl bx, bp
jecxz 0x430fcc
inc esp
and al, 0x6c
mov ecx, dword [esp + 0x70]
mov eax, dword [ecx + eax*4]
jmp eax
mov dword [esp + 0x28], esi
mov dword [esp], ebp
mov dword [esp + 4], 0x5c
call fcn.004319f0
mov esi, eax
xor eax, eax
test esi, esi
sete al
mov dword [esp + 0x354], eax
mov eax, dword [esp + 0x358]
mov ecx, dword [esp + 0x354]
mov eax, dword [eax + ecx*4]
jmp eax
sub esi, ebp
mov eax, esi
sar eax, 1
mov dword [esp + 0x50], eax
xor eax, 0x901dee6e
and esi, 0xdfc42322
sub esi, eax
add esi, 0x901dee6f
xor eax, eax
mov ecx, esi
sub ecx, 1
sete al
mov dword [esp + 0x344], eax
mov eax, dword [esp + 0x348]
mov ecx, dword [esp + 0x344]
mov eax, dword [eax + ecx*4]
jmp eax
mov ax, word [edi]
xor ecx, ecx
test ax, ax
sete cl
mov dword [esp + 0x1ec], ecx
mov eax, dword [esp + 0x1f0]
mov ecx, dword [esp + 0x1ec]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esp + 0x28]
jmp eax
mov ebx, ebp
add ebx, 2
mov eax, dword [esp + 0x22c]
mov ecx, dword [esp + 0x230]
mov eax, dword [ecx + eax*4]
jmp eax
mov word [esi], 0
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x60]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [esp + 0xc]
mov byte [esp + 0x38], al
mov byte [esp + 0x1c], 0xca
mov byte [esp + 0x1d], 0x8b
mov byte [esp + 0x1e], 0x2e
mov byte [esp + 0x1f], 0x89
mov byte [esp + 0x20], 0x88
mov byte [esp + 0x21], 0x87
mov eax, 6
mov byte [esp + eax + 0x1c], 0
add eax, 1
cmp eax, 0xb
jne 0x431143
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
cmp eax, 0xb
jae 0x43118d
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
movzx ecx, byte [esp + ecx + 0x1c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004330d0
mov ecx, dword [esp + 0x10]
mov byte [esp + ecx + 0x1c], al
mov eax, dword [esp + 0x10]
inc eax
mov dword [esp + 0x10], eax
jmp 0x431158
mov esi, edi
add esi, 2
lea eax, [esp + 0x1c]
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00431a30
xor ecx, ecx
test eax, eax
setne al
mov dword [esp + 0x294], 1
mov edx, dword [esp + 0x298]
mov ebp, edi
mov edi, dword [esp + 0x294]
mov edx, dword [edx + edi*4]
mov edi, ebp
mov ebp, dword [esp + 0x28]
jmp edx
mov al, byte [esp + 0x30]
mov byte [esp + 0x3c], al
mov byte [esp + 0x40], 0x3a
mov byte [esp + 0x41], 0x7b
mov byte [esp + 0x42], 0x1e
mov byte [esp + 0x43], 0x79
mov byte [esp + 0x44], pe_nt_image_headers32
mov byte [esp + 0x45], 0x67
mov eax, 6
mov byte [esp + eax + 0x40], 0
add eax, 1
cmp eax, 0xb
jne 0x4311fa
mov dword [esp + 0x18], 0
mov eax, dword [esp + 0x18]
cmp eax, 0xb
jae 0x431244
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
movzx ecx, byte [esp + ecx + 0x40]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004330f0
mov ecx, dword [esp + 0x18]
mov byte [esp + ecx + 0x40], al
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
jmp 0x43120f
mov esi, edi
add esi, 2
lea eax, [esp + 0x40]
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00431a30
xor ecx, ecx
test eax, eax
setne cl
mov dword [esp + 0x1e4], ecx
mov eax, dword [esp + 0x1e8]
mov ecx, dword [esp + 0x1e4]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.004178d0
mov dword [esp + 0x1ac], 1
mov eax, dword [esp + 0x1b0]
mov ecx, dword [esp + 0x1ac]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x2c], ebp
mov ecx, dword [esp + 0x214]
mov edx, dword [esp + 0x218]
mov ecx, dword [edx + ecx*4]
jmp ecx
call fcn.004178d0
mov dword [esp + 0xcc], 1
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xcc]
mov eax, dword [eax + ecx*4]
jmp eax
mov ebp, esi
call fcn.004178d0
mov dword [esp + 0x2dc], 1
mov eax, dword [esp + 0x2e0]
mov ecx, dword [esp + 0x2dc]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.004178d0
xor eax, eax
mov ecx, ebx
sub ecx, 0x5c
sete cl
mov dword [esp + 0x324], 0
mov edx, dword [esp + 0x328]
mov ebp, dword [esp + 0x324]
mov edx, dword [edx + ebp*4]
jmp edx
mov word [esi], 0x5c
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa8]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x24c]
mov ecx, dword [esp + 0x250]
mov eax, dword [ecx + eax*4]
mov esi, ebp
jmp eax
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x120]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.004178d0
mov word [esi], 0x5c
mov eax, esi
add eax, 2
mov ebx, ebp
add ebx, 2
mov dword [esp + 0x304], 1
mov ecx, dword [esp + 0x308]
mov edx, dword [esp + 0x304]
mov ecx, dword [ecx + edx*4]
jmp ecx
not al
movzx eax, al
and eax, 1
mov dword [esp + 0x274], eax
mov eax, dword [esp + 0x278]
mov ecx, dword [esp + 0x274]
mov eax, dword [eax + ecx*4]
mov esi, ebp
jmp eax
mov ebx, ebp
add ebx, 2
mov ax, word [ebp + 2]
xor ecx, ecx
test ax, ax
sete cl
mov dword [esp + 0x2e4], ecx
mov eax, dword [esp + 0x2e8]
mov ecx, dword [esp + 0x2e4]
mov eax, dword [eax + ecx*4]
mov esi, dword [esp + 0x28]
jmp eax
call fcn.004178d0
mov dword [esp + 0x30c], 0
mov eax, dword [esp + 0x310]
mov ecx, dword [esp + 0x30c]
mov eax, dword [eax + ecx*4]
mov esi, dword [esp + 0x28]
jmp eax
add ebp, 4
mov eax, dword [esp + 0x244]
mov ecx, dword [esp + 0x248]
mov eax, dword [ecx + eax*4]
mov ebx, ebp
jmp eax
mov edx, dword [esp + 0x31c]
mov ebx, dword [esp + 0x320]
mov edx, dword [ebx + edx*4]
jmp edx
mov word [esi], 0
mov eax, dword [esp + 0x14c]
mov ecx, dword [esp + 0x150]
mov eax, dword [ecx + eax*4]
mov ebp, ebx
jmp eax
mov word [eax], 0x5c
mov eax, dword [esp + 0xfc]
mov ecx, dword [esp + 0x100]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.004178d0
movzx eax, word [ebx]
mov dword [esp + 0x21c], 1
mov ecx, dword [esp + 0x220]
mov edx, dword [esp + 0x21c]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov word [edi], 0x5c
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0x140]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0xc4]
mov ecx, dword [esp + 0xc8]
mov ecx, dword [ecx + eax*4]
mov al, 1
jmp ecx
xor ebp, dword [esi + edi]
dec esp
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0xb0]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x198]
mov ecx, dword [ecx + eax*4]
mov eax, ebx
jmp ecx
mov eax, edi
add eax, 4
mov cx, word [edi + 4]
xor edx, edx
test cx, cx
sete dl
mov dword [esp + 0x104], edx
mov ecx, dword [esp + 0x108]
mov edx, dword [esp + 0x104]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x26c]
mov ecx, dword [esp + 0x270]
mov eax, dword [ecx + eax*4]
mov esi, ebp
jmp eax
mov ax, word [ebp]
xor ecx, ecx
sub ax, 0x2e
sete cl
mov dword [esp + 0x2ec], ecx
mov eax, dword [esp + 0x2f0]
mov ecx, dword [esp + 0x2ec]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.004178d0
mov word [edi], 0
mov dword [esp + 0x374], 0
mov eax, dword [esp + 0x378]
mov ecx, dword [esp + 0x374]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, byte [esp + 0xc]
mov byte [esp + 0x34], al
mov byte [esp + 0x1c], 0xca
mov byte [esp + 0x1d], 0x8b
mov byte [esp + 0x1e], 0x2e
mov byte [esp + 0x1f], 0x89
mov byte [esp + 0x20], 0x88
mov byte [esp + 0x21], 0x87
mov eax, 6
mov byte [esp + eax + 0x1c], 0
add eax, 1
cmp eax, 0xb
jne 0x43168c
mov dword [esp + 0x14], 0
mov eax, dword [esp + 0x14]
cmp eax, 0xb
jae 0x4316d6
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
movzx ecx, byte [esp + ecx + 0x1c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004330d0
mov ecx, dword [esp + 0x14]
mov byte [esp + ecx + 0x1c], al
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x14], eax
jmp 0x4316a1
mov eax, edi
add eax, 2
lea ecx, [esp + 0x1c]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00431a30
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x90]
mov eax, dword [ecx + eax*4]
jmp eax
mov ax, word [ebp]
xor ecx, ecx
sub ax, 0x2e
sete cl
mov dword [esp + 0x234], ecx
mov eax, dword [esp + 0x238]
mov ecx, dword [esp + 0x234]
mov eax, dword [eax + ecx*4]
jmp eax
mov ecx, dword [esp + 0x184]
mov edx, dword [esp + 0x188]
mov ecx, dword [edx + ecx*4]
mov esi, eax
jmp ecx
mov ecx, dword [esp + 0x254]
mov edx, dword [esp + 0x258]
mov ecx, dword [edx + ecx*4]
mov esi, eax
jmp ecx
jp 0x4317cf
inc ecx
adc al, 0x8b
test byte [esp + edx*4], ah
add byte [eax], al
add byte [ebx + 0x98248c], cl
add byte [eax], al
mov eax, dword [ecx + eax*4]
jmp eax
mov ax, word [ebp + 4]
xor ecx, ecx
sub ax, 0x5c
sete cl
mov dword [esp + 0x17c], ecx
mov eax, dword [esp + 0x180]
mov ecx, dword [esp + 0x17c]
mov eax, dword [eax + ecx*4]
mov esi, ebx
jmp eax
xor eax, eax
mov ecx, esi
sub ecx, 2
sete al
mov dword [esp + 0x2f4], eax
mov eax, dword [esp + 0x2f8]
mov ecx, dword [esp + 0x2f4]
mov eax, dword [eax + ecx*4]
jmp eax
hlt
mov cl, al
and ecx, 1
mov dword [esp + 0x28c], ecx
mov eax, dword [esp + 0x290]
mov ecx, dword [esp + 0x28c]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0xbc]
mov ecx, dword [esp + 0xc0]
mov eax, dword [ecx + eax*4]
jmp eax
cdq
in eax, dx
push ebx
in eax, dx
aad 0xae
in al, dx
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], ebp
call fcn.00418bb0
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx + eax*4]
jmp eax
add ebp, 4
mov eax, dword [esp + 0x16c]
mov ecx, dword [esp + 0x170]
mov eax, dword [ecx + eax*4]
mov ebx, ebp
jmp eax
call fcn.004178d0
mov dword [esp + 0x29c], 0
mov eax, dword [esp + 0x2a0]
mov ecx, dword [esp + 0x29c]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.004178d0
mov word [esi], 0
mov dword [esp + 0x124], 0
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x124]
mov eax, dword [eax + ecx*4]
jmp eax
bound ecx, qword [esp + esi + 0x24448b60]
push esp
mov ecx, dword [esp + 0x58]
mov eax, dword [ecx + eax*4]
jmp eax
mov ax, word [esi]
test ax, ax
sete al
mov ecx, dword [esp + 0x27c]
mov edx, dword [esp + 0x280]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov esi, edi
jmp eax
jns 0x431915
xchg edx, eax
pop ebx
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0xa0]
mov eax, dword [ecx + eax*4]
jmp eax
mov ax, word [edi + 2]
xor ecx, ecx
sub ax, 0x3a
sete cl
mov dword [esp + 0x10c], ecx
mov eax, dword [esp + 0x110]
mov ecx, dword [esp + 0x10c]
mov eax, dword [eax + ecx*4]
jmp eax
mov bh, 0x6b
mov eax, 0xf6574c64
mov word fs:[edi], 0
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb8]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0x178]
mov eax, dword [ecx + eax*4]
mov ebp, dword [esp + 0x4c]
jmp eax
call fcn.004178d0
mov dword [esp + 0x37c], 0
mov eax, dword [esp + 0x380]
mov ecx, dword [esp + 0x37c]
mov eax, dword [eax + ecx*4]
jmp eax
test dword [edx], case.0x42f796.1
dec edi
std
inc edx
add dl, dh
test dword [edx], case.0x42f893.0
std
inc edx
add byte [edx + 0x350042f8], bl
std
inc edx
std
inc edx
add byte [edx + 0x350042f8], bl
std
inc edx
add byte [eax + edi*8 - 0x2ddffbe], bh
std
inc edx
add bh, dh
stc
inc edx
add byte [eax], ah
cli
inc edx
add byte [eax], al
cli
inc edx
add byte [eax], ah
cli
inc edx
add byte [edi], bh
cli
inc edx
add byte [eax], cl
std
inc edx
add byte [esi - 6], bl
inc edx
add dh, dh
cld
inc edx
add byte [esi], bl
sti
inc edx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [edx], ch
inc dword [edx]
loop 0x4407a2
inc edx
add dl, ah
cld
inc edx
add byte [eax - 0x2dffbd04], ah
cld
inc edx
add dl, ah
cld
inc edx
add bl, ch
cld
inc edx
add dh, dh
cld
inc edx
add byte [eax], ah
std
inc edx
add byte [eax], ah
std
inc edx
add byte [edx], ah
std
inc edx
add byte [eax], ah
std
inc edx
add byte [edx], ah
inc dword [edx]
invalid