Function at 0x43b320
Capabilities:
Connect to wmi namespace via wbemlocator
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x98
mov esi, dword [ebp + 8]
mov eax, dword [0x450d38]
mov dword [esp + 4], eax
mov dword [esp + 0xc], 0x41bb476b
mov dword [esp + 0x10], 0x4ddf43db
mov dword [esp + 0x14], 0x49a14fd0
mov dword [esp + 0x18], 0x75864bdf
mov dword [esp + 0x1c], 0x719d77e6
mov dword [esp + 0x20], 0x7d9d73ee
mov dword [esp + 0x24], 0x797e7f53
mov word [esp + 0x28], 0
mov edi, 0x91
nop
movzx edx, byte [esp + edi - 0x85]
mov ebx, edx
and ebx, edi
mov eax, ebx
or al, 0xfd
inc al
mov ecx, ebx
and cl, 0xbd
mul cl
mov ecx, eax
add cl, dl
mov eax, ebx
shr al, 1
and al, 1
or bl, 2
mul bl
add al, al
sub cl, al
movzx eax, cl
add eax, edi
add al, 0x2b
mov byte [esp + edi - 0x85], al
inc edi
cmp edi, 0xaf
jne case.default.0x43b3e2
lea eax, [esp + 0x58]
lea ebx, [esp + 0x84]
lea edi, [esp + 0xc]
push eax
push 8
push ebx
push 0xd
push edi
push 0
call dword [esp + 0x1c]
shr eax, 0x1f
jmp dword [eax*4 + 0x44e360]
mov dword [esp + 0x84], 0x3a0043
mov dword [esp + 0x88], 0x5c
mov dword [esp + 0x64], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x44], 0
lea eax, [esp + 0x44]
push eax
push 0x447b20
push 1
push 0
push 0x447b30
call dword [sym.imp.ole32.dll_CoCreateInstance]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44e368]
mov dword [esp + 0xc], 0x790b7b02
mov dword [esp + 0x10], 0x651a6709
mov dword [esp + 0x14], 0x612f6300
mov dword [esp + 0x18], 0x6d1d6f17
mov dword [esp + 0x1c], 0x69346b16
mov word [esp + 0x20], 0x9768
mov dword [esp + 0x22], 0
mov byte [esp + 0x26], 0
mov eax, 0x1886f36b
nop
nop
nop
movzx edx, byte [esp + eax - 0x1886f35f]
xor edx, eax
mov ecx, edx
and ecx, 0x68
add ecx, ecx
xor edx, 0x17
sub ecx, edx
mov byte [esp + eax - 0x1886f35f], cl
inc eax
cmp eax, 0x1886f386
jne 0x43b490
push edi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov ebx, dword [esp + 0x44]
mov ecx, dword [ebx]
lea edx, [esp + 8]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
mov dword [esp + 0x88], eax
push eax
push ebx
call dword [ecx + 0xc]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44e370]
jmp 0x43b97d
jmp dword [0x44e37c]
jmp eax
mov edx, dword [esi + edi*4]
jmp ecx
mov dword [esp + edi*4 + 0x58], edx
nop
nop
nop
nop
nop
mov dword [esp + edi*4 + 0x58], edx
jmp dword [0x44e3cc]
add ebx, 0xfffffffc
xor edx, edx
cmp ebx, 4
setb dl
jmp dword [edx*4 + 0x44e3d0]
inc edi
xor edx, edx
cmp edi, 4
setb dl
jmp dword [edx*4 + 0x44e3a8]
lea edi, [esp + 0xc]
lea ebx, [esp + 0x70]
jmp dword [0x44e3d8]
push esi
call fcn.0040ce90
add esp, 4
jmp case.0x43b6d7.14
xor ecx, ecx
test edi, edi
setne cl
mov eax, edi
jmp dword [ecx*4 + 0x44e430]
xor ecx, ecx
cmp dword [esp + edi*4 + 0x58], 0
sete cl
mov eax, edi
jmp dword [ecx*4 + 0x44e438]
mov ecx, edi
xor ecx, 1
mov eax, edi
and eax, 0xfffffffe
add eax, eax
sub eax, ecx
imul eax, dword [esp + eax*4 + 0x58], 0x1a5845
add eax, 0xebde8a13
mov dword [esp + edi*4 + 0x58], eax
mov ebx, 0xfffffff7
push 0x10
push 9
push esi
push eax
call fcn.00434000
add esp, 0x10
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [eax + ebx + 9], 0
lea ebx, [ebx + 1]
jne case.default.0x43b5d4
xor edx, edx
cmp ebx, 0
setne dl
xor ecx, ecx
jmp dword [edx*4 + 0x44e440]
mov byte [eax + ecx - 1], 0x30
dec ecx
xor edx, edx
cmp ebx, ecx
setne dl
jmp dword [edx*4 + 0x44e440]
add esi, 8
inc edi
xor eax, eax
cmp edi, 4
setb al
jmp dword [eax*4 + 0x44e418]
mov dword [esp + 0x4c], 0
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
lea edx, [esp + 0x4c]
lea edi, [esp + 0x50]
push edx
push edi
lea edi, [esp + 0x14]
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
setns cl
cmp eax, 1
setne al
cmp dword [esp + 0x4c], 0
setne dl
and dl, al
and dl, cl
movzx eax, dl
jmp dword [eax*4 + 0x44e398]
mov dword [esp + 0x68], ebx
lea ebx, [esp + 0x70]
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esp + 0x50]
mov dword [esp + 0xc], 0x21b92749
mov dword [esp + 0x10], 0x5db923b2
mov dword [esp + 0x14], 0x59ca5f3f
mov dword [esp + 0x18], 0x55d55b2e
mov dword [esp + 0x1c], 0x513457c3
mov dword [esp + 0x20], 0x4dc053cf
mov dword [esp + 0x24], 0x4f4c
mov byte [esp + 0x28], 0
xor ecx, ecx
nop
nop
mov edx, ecx
add dl, 0x39
xor dl, byte [esp + ecx + 0xc]
add dl, 0xe3
mov byte [esp + ecx + 0xc], dl
inc ecx
cmp ecx, 0x1d
jne case.default.0x43b6d7
mov ecx, dword [eax]
push 0
push 0
push ebx
push 0
push edi
push eax
call dword [ecx + 0x10]
test eax, eax
setns al
cmp word [esp + 0x70], 8
sete cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x44e3a0]
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ebx, dword [esp + 0x68]
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp dword [0x44e3e0]
mov eax, dword [esp + 0x78]
mov dword [esp + 0x48], eax
movzx ecx, word [eax]
xor edi, edi
mov ebx, 0
test cx, cx
je 0x43b752
mov eax, dword [esp + 0x48]
add eax, 2
xor ebx, ebx
jmp 0x43b731
inc ebx
movzx ecx, word [eax]
add eax, 2
test cx, cx
je 0x43b752
cmp cx, 0x7f
jbe 0x43b725
movzx edx, cx
cmp edx, 0x7ff
ja 0x43b747
add ebx, 2
jmp 0x43b726
cmp cx, 0xffff
je 0x43b726
add ebx, 3
jmp 0x43b726
lea esi, [ebx + 1]
push esi
call fcn.0040ce80
add esp, 4
push dword [esp + 0x48]
push esi
mov esi, eax
push eax
call fcn.00432290
add esp, 0xc
mov eax, dword [case.0x43b6d7.6]
mov ecx, dword [case.0x43b6d7.7]
xor edx, edx
cmp edi, 4
setb dl
jmp dword [edx*4 + 0x44e3a8]
mov dword [esp + 0xc], 0x69dd6bdd
mov dword [esp + 0x10], 0x6d6e6fa4
mov word [esp + 0x14], 0
mov byte [esp + 0x16], 0
mov eax, 0x23dbc497
mov ecx, 0x68
nop
nop
movzx edx, byte [esp + eax - 0x23dbc48b]
mov edi, eax
or edi, edx
not edx
or edx, ecx
and edx, edi
mov edi, edx
and edi, 0xc
xor edx, 0xc
lea edx, [edx + edi*2]
inc dl
mov byte [esp + eax - 0x23dbc48b], dl
inc eax
dec ecx
cmp eax, 0x23dbc4a2
jne 0x43b7b0
lea eax, [esp + 0xc]
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esp + 4], eax
mov dword [esp + 0xc], 0x21592749
mov dword [esp + 0x10], 0x5d5d2354
mov dword [esp + 0x14], 0x59325f21
mov dword [esp + 0x18], 0x55005b78
mov dword [esp + 0x1c], 0x51285774
mov dword [esp + 0x20], 0x4d235322
mov dword [esp + 0x24], 0x496e4f3b
mov dword [esp + 0x28], 0x45d14b21
mov dword [esp + 0x2c], 0x410b47d2
mov dword [esp + 0x30], 0x7d234312
mov dword [esp + 0x34], 0x79057f3e
mov dword [esp + 0x38], 0x75177b09
mov word [esp + 0x3c], 0x7774
mov dword [esp + 0x3e], 0
mov byte [esp + 0x42], 0
mov esi, 0xc37021b9
mov ecx, 0x3c8fde46
nop
nop
nop
nop
movzx edi, byte [esp + esi + 0x3c8fde53]
mov edx, ecx
or edx, edi
mov eax, esi
xor eax, edi
add eax, edi
not edi
and edi, ecx
add eax, edi
mov ebx, 0xfffffffe
sub ebx, eax
and ebx, edx
mov eax, ebx
xor eax, 0x61
not ebx
and ebx, 0x61
add ebx, ebx
sub ebx, eax
inc bl
mov byte [esp + esi + 0x3c8fde53], bl
inc esi
dec ecx
cmp esi, 0xc37021f0
jne 0x43b870
lea edi, [esp + 0xc]
push edi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov ebx, eax
mov eax, dword [esp + 8]
mov ecx, dword [eax]
lea edx, [esp + 0x54]
push edx
push 0
push 0x30
push ebx
push dword [esp + 0x14]
push eax
call dword [ecx + 0x50]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44e390]
jmp dword [0x44e3e0]
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [esp + 4]
call edi
push ebx
call edi
lea edi, [esp + 0xc]
nop
nop
nop
nop
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [esp + 4]
call esi
push ebx
call esi
jmp dword [0x44e3ec]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x58], eax
xor edi, edi
xor eax, eax
cmp edi, 4
setb al
jmp dword [eax*4 + 0x44e418]
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [esp + 0x24]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [esp + 0x24]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
jmp dword [0x44e384]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44e388]
mov eax, dword [esp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [ebp + 8]
push dword [esp + 0x6c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea ebx, [esp + 0x84]
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [esp + 0xc], 0
push 0xd2e7977e
push dword [0x450d30]
call fcn.00443d20
add esp, 8
push 0
push 0
push 0
push 0
push edi
push 0
push 0
push ebx
call eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x44e400]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
jmp dword [0x44e414]
xor eax, eax
jmp 0x43bc70
mov ebp, dword [esp + 0x3c]
push 0x400
call fcn.0043e6c0
add esp, 4
mov esi, eax
mov ecx, dword [esp + 0x18]
mov dword [esp], 0x1c1d1a1b
mov word [esp + 4], 0
mov eax, 0xa31f097a
nop
nop
movzx edx, byte [esp + eax + 0x5ce0f686]
xor edx, eax
mov edi, edx
xor edi, 0x2e
and edx, 0x51
add edx, edx
sub edx, edi
add dl, 0xcc
mov byte [esp + eax + 0x5ce0f686], dl
inc eax
cmp eax, 0xa31f0980
jne 0x43ba50
mov eax, dword [esp]
mov edx, dword [0x450d3c]
test edx, edx
je case.default.0x43bad4
xor edi, edi
mov ebx, dword [0x450d40]
nop
nop
nop
cmp dword [ebx + edi*8], 0xa70a987f
je 0x43baa0
inc edi
cmp edx, edi
jne 0x43ba90
jmp case.default.0x43bad4
mov edx, dword [ebx + edi*8 + 4]
cmp edx, eax
je case.default.0x43bad4
lea eax, [esp + 0x1c]
push 0x2f
push 0x400
push esi
push eax
push ecx
push 5
push dword [0x450d44]
push edx
call fcn.00441410
add esp, 0x20
not eax
shr eax, 0x1f
mov dword [esp + 0x10], 0
jmp dword [eax*4 + 0x44e460]
push esi
call fcn.0043e770
add esp, 4
mov eax, dword [esp + 0x18]
mov dword [esp], 0x1c1d1a1b
mov word [esp + 4], 0
mov ecx, 0xa31f097a
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx + 0x5ce0f686]
xor edx, ecx
mov esi, edx
xor esi, 0x2e
and edx, 0x51
add edx, edx
sub edx, esi
add dl, 0xcc
mov byte [esp + ecx + 0x5ce0f686], dl
inc ecx
cmp ecx, 0xa31f0980
jne 0x43bb00
mov ecx, dword [0x450d3c]
test ecx, ecx
je 0x43bc6a
mov edx, dword [esp]
xor esi, esi
mov edi, dword [0x450d40]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edi + esi*8], 0x7e776f1
je 0x43bc50
mov ebx, esi
and ebx, 1
xor esi, 1
lea esi, [esi + ebx*2]
cmp esi, ecx
jb 0x43bb50
jmp 0x43bc6a
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x10], 0
cmp ecx, dword [esi]
setb al
xor ebx, ebx
mov dword [esp + 0x14], esi
jmp dword [eax*4 + 0x44e478]
mov ebp, esi
mov esi, dword [esp + 0x14]
mov ecx, esp
call fcn.0043ebb0
mov eax, ebx
not eax
and eax, 0xed8c85be
mov ecx, ebx
and ecx, 0x12737a41
sub ecx, eax
and ebx, 1
xor ecx, 1
lea ebx, [ecx + ebx*2]
add ebx, 0xed8c85be
xor eax, eax
cmp ebx, dword [esi]
setb al
jmp dword [eax*4 + 0x44e478]
mov eax, dword [esi + ebx*4 + 4]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov edi, esp
mov ecx, edi
push 0
push eax
call fcn.0043ea20
xor eax, eax
mov ecx, ebp
neg ecx
mov esi, ebp
mov ebp, dword [esp + 0x40]
sbb eax, ebp
setl al
movzx eax, al
shl eax, 0x14
or eax, 1
mov ecx, edi
push eax
call fcn.0043ea40
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x44e480]
mov ecx, esp
push ebp
push esi
push 0
call fcn.0043ec80
mov ecx, dword [case.0x43bad4.13]
mov ebp, esi
nop
nop
nop
jmp ecx
test eax, eax
setns al
mov dword [esp + 0x10], eax
jmp 0x43bb92
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
je 0x43bc6a
push eax
push 1
push dword [0x450d44]
push ecx
call fcn.00441410
add esp, 0x10
mov eax, dword [esp + 0x10]
and al, 1
add esp, 0x24
pop esi
pop edi
pop ebx
pop ebp
ret
mov word [ebx], 0x5c
mov word [ebx + 2], 0
mov eax, dword [esp + 0xbc]
mov ecx, dword [esp + 0xc0]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, ebx
add eax, 4
mov cx, word [ebx + 4]
xor edx, edx
test cx, cx
sete dl
mov dword [esp + 0xac], edx
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0xac]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x78]
mov eax, dword [ecx + eax*4]
jmp eax
xor eax, eax
mov ecx, ebx
sub ecx, 3
sete al
mov dword [esp + 0x1ac], eax
mov eax, dword [esp + 0x1b0]
mov ecx, dword [esp + 0x1ac]
mov eax, dword [eax + ecx*4]
jmp eax
xor eax, eax
mov edi, dword [esp + 0xc]
mov ecx, edi
sub ecx, ebx
seta al
mov dword [esp + 0x22c], eax
mov eax, dword [esp + 0x230]
mov ecx, dword [esp + 0x22c]
mov eax, dword [eax + ecx*4]
jmp eax
mov ecx, dword [esp + 0x26c]
mov edx, dword [esp + 0x270]
mov ecx, dword [edx + ecx*4]
mov edi, eax
mov ebx, dword [esp + 0x31c]
jmp ecx
mov ax, word [ebx]
xor ecx, ecx
test ax, ax
sete cl
mov dword [esp + 0x224], ecx
mov eax, dword [esp + 0x228]
mov ecx, dword [esp + 0x224]
mov eax, dword [eax + ecx*4]
jmp eax
mov word [edi], 0x5c
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x70]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e7b0
mov word [edi], 0x5c
mov eax, edi
add eax, 2
mov esi, ebp
add esi, 2
mov dword [esp + 0x274], 1
mov ecx, dword [esp + 0x278]
mov edx, dword [esp + 0x274]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov ax, word [ebx]
xor ecx, ecx
test ax, ax
sete cl
mov dword [esp + 0xc4], ecx
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0xc4]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040e7b0
mov dword [esp + 0x264], 1
mov eax, dword [esp + 0x268]
mov ecx, dword [esp + 0x264]
mov eax, dword [eax + ecx*4]
jmp eax
hlt
mov ax, word [ebx]
xor ecx, ecx
sub ax, 0x5c
sete cl
mov dword [esp + 0x184], ecx
mov eax, dword [esp + 0x188]
mov ecx, dword [esp + 0x184]
mov ecx, dword [eax + ecx*4]
xor eax, eax
jmp ecx
call fcn.0040e7b0
mov dword [esp + 0x2b4], 1
mov eax, dword [esp + 0x2b8]
mov ecx, dword [esp + 0x2b4]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esp + 0xc], edi
call fcn.0040e7b0
mov dword [esp + 0x2dc], 0
mov eax, dword [esp + 0x2e0]
mov ecx, dword [esp + 0x2dc]
mov eax, dword [eax + ecx*4]
jmp eax
mov ecx, dword [esp + 0x154]
mov edx, dword [esp + 0x158]
mov ecx, dword [edx + ecx*4]
jmp ecx
call fcn.0040e7b0
mov eax, edi
add eax, 0xfffffffe
mov dword [esp + 0x1d4], 1
mov ecx, dword [esp + 0x1d8]
mov edx, dword [esp + 0x1d4]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov al, byte [esp + 0x1c]
mov byte [esp + 0x28], al
mov byte [esp + 0x2c], 0xda
mov byte [esp + 0x2d], 0x91
mov byte [esp + 0x2e], 0xf6
mov byte [esp + 0x2f], 0x93
mov byte [esp + 0x30], 0xac
mov byte [esp + 0x31], 0xad
mov eax, 6
mov byte [esp + eax + 0x2c], 0
add eax, 1
cmp eax, 0xc
jne 0x43c862
xor eax, eax
cmp eax, 0xc
jae 0x43c8ab
movzx ecx, byte [esp + eax + 0x2c]
mov esi, ecx
shl esi, 1
xor esi, 0xffffffff
add esi, ecx
mov edi, eax
add edi, 0x1d
mov edx, 0xe3
sub edx, eax
or edx, esi
add edx, edi
mov esi, 0xe3
sub esi, eax
and esi, ecx
or edx, esi
add dl, 0x74
mov byte [esp + eax + 0x2c], dl
add eax, 1
jmp 0x43c871
mov esi, ebx
add esi, 2
lea eax, [esp + 0x2c]
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.0043d1e0
xor ecx, ecx
test eax, eax
setne cl
mov dword [esp + 0x18c], ecx
mov eax, dword [esp + 0x190]
mov ecx, dword [esp + 0x18c]
mov eax, dword [eax + ecx*4]
mov edi, dword [esp + 0xc]
jmp eax
mov ecx, dword [esp + 0x11c]
mov edx, dword [esp + 0x120]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov dword [esp], ebp
call fcn.0041da60
mov ecx, dword [esp + 0x2a4]
mov edx, dword [esp + 0x2a8]
mov ecx, dword [edx + ecx*4]
jmp ecx
call fcn.0040e7b0
mov dword [esp + 0x27c], 1
mov eax, dword [esp + 0x280]
mov ecx, dword [esp + 0x27c]
mov eax, dword [eax + ecx*4]
mov edi, dword [esp + 0xc]
jmp eax
call fcn.0040e7b0
mov dword [esp + 0x244], 0
mov eax, dword [esp + 0x248]
mov ecx, dword [esp + 0x244]
mov eax, dword [eax + ecx*4]
jmp eax
mov cx, word [eax]
xor edx, edx
sub cx, 0x5c
sete dl
mov dword [esp + 0x10c], edx
mov ecx, dword [esp + 0x110]
mov edx, dword [esp + 0x10c]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.0040e7b0
mov dword [esp + 0x17c], 1
mov eax, dword [esp + 0x180]
mov ecx, dword [esp + 0x17c]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, byte cs:[0x44b35b43]
cmp al, byte [0x4424448b]
mov ecx, dword [esp + 0x48]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x88]
mov ecx, dword [ecx + eax*4]
mov al, 1
jmp ecx
mov eax, dword [esp + 0x31c]
mov ax, word [eax]
xor ecx, ecx
sub ax, 0x5c
sete cl
mov dword [esp + 0x1fc], ecx
mov eax, dword [esp + 0x200]
mov ecx, dword [esp + 0x1fc]
mov ecx, dword [eax + ecx*4]
xor eax, eax
jmp ecx
mov al, byte [esp + 0x20]
mov byte [esp + 0x24], al
mov byte [esp + 0x14], 0x4a
mov byte [esp + 0x15], 0xb
mov byte [esp + 0x16], 0x6e
mov byte [esp + 0x17], 9
mov byte [esp + 0x18], 8
mov byte [esp + 0x19], 7
mov eax, 6
mov byte [esp + eax + 0x14], 0
add eax, 1
cmp eax, 8
jne 0x43ca99
mov eax, dword [esp + 0x21c]
mov ecx, dword [esp + 0x220]
mov eax, dword [ecx + eax*4]
mov ebx, dword [esp + 0x31c]
jmp eax
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0xe8]
mov eax, dword [ecx + eax*4]
mov ebp, dword [esp + 0x38]
jmp eax
call fcn.0040e7b0
mov dword [esp + 0x1dc], 1
mov eax, dword [esp + 0x1e0]
mov ecx, dword [esp + 0x1dc]
mov eax, dword [eax + ecx*4]
jmp eax
mov edx, ebp
add edx, 2
mov ax, word [ebp + 2]
xor ecx, ecx
sub ax, 0x2e
sete cl
mov dword [esp + 0x19c], ecx
mov eax, dword [esp + 0x1a0]
mov ecx, dword [esp + 0x19c]
mov eax, dword [eax + ecx*4]
jmp eax
dec ebp
xor byte [0xdec6d72c], dh
cmc
mov dword [esp], ebp
mov dword [esp + 4], 0x5c
call fcn.0043d1a0
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x80]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e7b0
mov di, word [esi]
mov dword [esp + 0x174], 1
mov eax, dword [esp + 0x178]
mov ecx, dword [esp + 0x174]
mov eax, dword [eax + ecx*4]
jmp eax
add ebp, 4
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0xe0]
mov eax, dword [ecx + eax*4]
mov esi, ebp
jmp eax
mov al, cl
and eax, 1
mov dword [esp + 0x234], eax
mov eax, dword [esp + 0x238]
mov ecx, dword [esp + 0x234]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esp + 0x31c]
jmp eax
std
xchg edi, eax
mov bh, 0x72
invalid
mov eax, dword [esp + 0x134]
mov ecx, dword [esp + 0x138]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e7b0
mov esi, ebp
add esi, 2
mov cx, word [ebp + 2]
xor eax, eax
test cx, cx
sete cl
mov dword [esp + 0x23c], 0
mov edx, dword [esp + 0x240]
mov edi, dword [esp + 0x23c]
mov edx, dword [edx + edi*4]
jmp edx
mov al, cl
and eax, 1
mov dword [esp + 0x254], eax
mov eax, dword [esp + 0x258]
mov ecx, dword [esp + 0x254]
mov eax, dword [eax + ecx*4]
jmp eax
mov ax, word [ebp + 4]
xor ecx, ecx
sub ax, 0x5c
sete cl
mov dword [esp + 0xec], ecx
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xec]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x60]
mov eax, dword [ecx + eax*4]
jmp eax
mov ax, word [ebp]
xor ecx, ecx
sub ax, 0x2e
sete cl
mov dword [esp + 0x24c], ecx
mov eax, dword [esp + 0x250]
mov ecx, dword [esp + 0x24c]
mov eax, dword [eax + ecx*4]
jmp eax
add eax, 0xfffffffe
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x100]
mov ecx, dword [edx + ecx*4]
jmp ecx
pop ss
movsb byte es:[edi], byte [esi]
invalid
mov ax, word [ebx]
test ax, ax
sete al
mov ecx, dword [esp + 0x1f4]
mov edx, dword [esp + 0x1f8]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov eax, dword [esp + 0x2f4]
mov ecx, dword [esp + 0x2f8]
mov ecx, dword [ecx + eax*4]
xor eax, eax
jmp ecx
mov word [ebx], 0
mov eax, dword [esp + 0x2ec]
mov ecx, dword [esp + 0x2f0]
mov eax, dword [ecx + eax*4]
mov edi, ebx
jmp eax
mov ecx, dword [esp + 0x104]
mov edx, dword [esp + 0x108]
mov ecx, dword [edx + ecx*4]
mov edi, eax
jmp ecx
call fcn.0040e7b0
mov dword [esp + 0x12c], 0
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x12c]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x1bc]
mov ecx, dword [esp + 0x1c0]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x2cc]
mov ecx, dword [esp + 0x2d0]
mov eax, dword [ecx + eax*4]
jmp eax
add ebp, 4
mov eax, dword [esp + 0x1b4]
mov ecx, dword [esp + 0x1b8]
mov eax, dword [ecx + eax*4]
mov esi, ebp
mov edi, dword [esp + 0xc]
jmp eax
mov dword [esp + 8], ebx
mov dword [esp + 4], ebp
mov edi, dword [esp + 0xc]
mov dword [esp], edi
call fcn.0041d690
lea edi, [edi + esi*2]
lea esi, [ebp + esi*2]
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0xd8]
mov eax, dword [ecx + eax*4]
mov ebx, dword [esp + 0x31c]
jmp eax
call fcn.0040e7b0
mov eax, edi
add eax, 0xfffffffe
mov dword [esp + 0x124], 1
mov ecx, dword [esp + 0x128]
mov edx, dword [esp + 0x124]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0xf8]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x16c]
mov ecx, dword [esp + 0x170]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040e7b0
mov dword [esp], ebp
mov dword [esp + 4], 0x5c
call fcn.0043d1a0
mov edi, eax
mov dword [esp + 0x2d4], 0
mov eax, dword [esp + 0x2d8]
mov ecx, dword [esp + 0x2d4]
mov eax, dword [eax + ecx*4]
jmp eax
cmp edi, 0xbdfb7fe0
jmp 0xcf7fd7d5
jg 0x43cf54
mov ebp, 0x3c0876e9
iretd
mov ax, word [ebp]
xor ecx, ecx
sub ax, 0x5c
sete cl
mov dword [esp + 0x284], ecx
mov eax, dword [esp + 0x288]
mov ecx, dword [esp + 0x284]
mov eax, dword [eax + ecx*4]
jmp eax
mov ecx, dword [esp + 0x1cc]
mov edx, dword [esp + 0x1d0]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov esi, edi
and esi, 0x9a2c96c6
or edi, 0x9a2c96c6
add esi, edi
sub esi, ebp
add esi, 0x65d3693a
sar esi, 1
mov eax, esi
not eax
mov ecx, eax
or ecx, 1
mov edx, esi
add edx, ecx
or eax, 0xfffffffe
mov ecx, esi
or ecx, 1
and eax, ecx
lea ebx, [eax + edx*2 + 2]
xor eax, eax
mov ecx, ebx
sub ecx, 1
sete al
mov dword [esp + 0x28c], eax
mov eax, dword [esp + 0x290]
mov ecx, dword [esp + 0x28c]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040e7b0
movzx eax, di
mov dword [esp + 0x15c], 1
mov ecx, dword [esp + 0x160]
mov edx, dword [esp + 0x15c]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov ax, word [ebp]
xor ecx, ecx
sub ax, 0x2e
sete cl
mov dword [esp + 0x1a4], ecx
mov eax, dword [esp + 0x1a8]
mov ecx, dword [esp + 0x1a4]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x1e4]
mov ecx, dword [esp + 0x1e8]
mov eax, dword [ecx + eax*4]
mov ebx, dword [esp + 0x31c]
jmp eax
mov ax, word [ebx + 2]
xor ecx, ecx
sub ax, 0x3a
sete cl
mov dword [esp + 0xb4], ecx
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xb4]
mov eax, dword [eax + ecx*4]
jmp eax
not al
movzx eax, al
and eax, 1
mov dword [esp + 0x1ec], eax
mov eax, dword [esp + 0x1f0]
mov ecx, dword [esp + 0x1ec]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esp + 0x31c]
jmp eax
mov word [eax], 0x5c
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa8]
mov eax, dword [ecx + eax*4]
jmp eax
not al
movzx eax, al
and eax, 1
mov dword [esp + 0x13c], eax
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x13c]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, byte [esp + 0x13]
mov bl, al
and ebx, 1
mov dword [esp + 0x2ac], ebx
mov eax, dword [esp + 0x2b0]
mov ecx, dword [esp + 0x2ac]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040e7b0
xor eax, eax
mov ecx, ebx
sub ecx, 2
sete cl
mov dword [esp + 0x25c], 1
mov edx, dword [esp + 0x260]
mov edi, dword [esp + 0x25c]
mov edx, dword [edx + edi*4]
jmp edx
mov word [edi], 0
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0xd0]
mov eax, dword [ecx + eax*4]
mov ebp, esi
jmp eax
mov dword [esp + 0x38], edx
mov ebx, dword [esp + 0x31c]
mov ax, word [ebx]
xor ecx, ecx
test ax, ax
sete cl
mov dword [esp + 0x194], ecx
mov eax, dword [esp + 0x198]
mov ecx, dword [esp + 0x194]
mov eax, dword [eax + ecx*4]
mov edi, dword [esp + 0xc]
jmp eax
mov bl, 0x43
add cl, ch
mov bl, 0x43
add byte [eax + 0x4c0043b9], bl
mov ah, 0x43
add bl, ch
mov ah, 0x43
add al, dh
mov ah, 0x43
add byte [esi], ch
mov ecx, 0xb9460043
inc ebx
add byte [esi], ch
mov ecx, 0xb9640043
inc ebx
add byte [eax - 0x47], dh
inc ebx
add byte [eax - 0x1cffbc49], cl
mov eax, 0xb6070043
inc ebx
add bl, dh
mov dh, 0x43
add byte [esi + esi*4 + 0x43], cl
add dh, bl
mov dh, 0x43
add byte [ebx], al
mov bh, 0x43
add byte [esi*4 - 0x4affffbd], bh
inc ebx
add byte [eax], al
mov ch, 0x43
add byte [eax], al
mov ch, 0x43
add byte [eax], al
mov ch, 0x43
add byte [edx], al
mov ch, 0x43
add byte [eax], dl
mov ch, 0x43
add byte [edi], al
mov ch, 0x43
add byte [eax], dl
mov ch, 0x43
add byte [edx], bl
mov ch, 0x43
add byte [esi*4 - 0x4ac3ffbd], ch
inc ebx
add byte [edx - 0x4b], cl
inc ebx
add dh, bl
mov dh, 0x43
add byte [eax], al
mov ecx, 0xb8e90043
inc ebx
add byte [eax], al
mov ecx, 0xb9700043
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax - 0x47], dh
inc ebx
add byte [ecx], al
add byte [eax], al
add cl, dl
mov ecx, 0xb9e00043
inc ebx
add al, ah
mov ecx, 0xb9e00043
inc ebx
add al, ah
mov ecx, 0xb9150043
inc ebx
add cl, dl
mov ecx, 0xb5600043
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax - 0x4b], ah
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [ecx + 0x700043b5], dl
mov ch, 0x43
add byte [ecx - 0x7cffbc4b], dl
mov ch, 0x43
add ah, dh
mov ch, 0x43
add al, ah
mov ch, 0x43
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add cl, dl
mov ecx, 0x10043
add byte [eax], al
sbb eax, 0x240043ba
mov edx, -1160052669
mov edx, 0xbb710043
mov edx, 0xbb710043
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx - 0x45], dh
inc ebx
add byte [ecx], al
add byte [eax], al
add bl, bl
mov edx, 0xbbcd0043
inc ebx
add byte [eax + 0x2a0043bb], dl
mov esp, 0xbc400043
inc ebx
add byte [eax - 0x44], al
inc ebx
add byte [eax - 0x44], al
inc ebx
add byte [edx - 0x44], al
inc ebx
add byte [ebx - 0x79ffbc33], bl
int 0x43
add byte [edx], bl
mov dword [ebx], case.0x43bad4.17
bswap edi
inc ebx
add byte [edx + 0x150043cb], dh
into
inc ebx
add byte [edx - 0x36ffbc35], dh
lds eax, [ebx]
mov dl, 0xc7
inc ebx
add byte [edx + 0x43c7], dh
rol dword [ebx], 1
mov dh, 0xcf
inc ebx
add byte [ecx + ecx*8], dl
inc ebx
add byte [edi], bh
mov dword [ebx], case.0x43bad4.29
aas
mov dword [ebx], case.0x43bad4.31
popfd
mov byte [ebx], 197
mov byte [ebx], 0x9d
mov byte [ebx], 0x5c
mov byte [ebx], 0x3e
int3