Function at 0x50ecd1
Capabilities:
Encode data using xor

Disassembly:
add ecx, 0xcbf55801
push esi
jmp 0x50c403
neg al
jmp 0x50b9ba
movzx eax, byte [esi]
mov cl, byte [esp]
ja 0x50b998
mov dh, ch
bswap ecx
inc ecx
mov edx, 0x156667d9
jmp 0x50ba6c
je 0x50b9b6
mov eax, ecx
jmp 0x50b925
mov dh, ch
bswap ecx
jmp 0x50b99a
mov edx, esi
and ch, dl
lea edx, [ebx + ebp]
jl 0x50b9f7
bswap ecx
mov edx, dword [esp]
bswap dx
lea edx, [esi*4]
jmp 0x50ba15
jmp 0x50b96c
inc ecx
mov edx, 0x156667d9
jmp 0x50b972
mov eax, ecx
neg al
call fcn.0050b8fc
bswap ecx
mov edx, dword [esp]
jmp 0x50b9d3
bswap dx
lea edx, [esi*4]
jmp 0x50ba4f
jmp 0x50b9bf
jmp 0x50ba1a
lea ecx, [ebx + ebp]
jmp 0x50ba52
mov edx, 0x41a10ad6
dec dl
jmp 0x50ba2f
sub al, bl
mov edx, ebx
jl 0x50ba73
jge 0x50ba73
mov dword [esp + 0x28], eax
popal
popfd
lea esp, [esp + 4]
ret
lea ecx, [ebx + ebp]
bswap edx
mov dx, 0x179a
jns 0x50b9f9
js 0x50ba93
and esp, dword [eax + reloc.oleaut32.dll_SysFreeString]
movsd dword es:[edi], dword [esi]
sub edi, dword [ebx - reloc.oleaut32.dll_SysFreeString]
jae 0x50ba35
mov edx, esi
jmp 0x50b974
call fcn.0050badd
call 0x50ba85
jae 0x50baf3
jb 0x50baef
arpl word [eax + 0x79], si
add byte [eax - 0x17], dl
invalid
mov edx, 0x41a10ad6
dec dl
jmp 0x50ba22
xchg dh, ch
jmp 0x50bb1f
mov cl, byte [esp]
mov edx, dword [esp]
pushfd
lea ecx, [ebx + ebx]
lea esp, [esp + 4]
lea edx, [edi*4]
jmp 0x50bb4a
adc al, 0x8d
add byte [eax], al
add byte [eax], al
jmp 0x50bab9
in al, dx
mov eax, dword [esi - reloc.oleaut32.dll_SysFreeString]
jg 0x50bae5
mov bh, byte [ecx + 0x36]
not dx
jmp 0x50b966
setb ch
bswap cx
bsr ecx, ebp
mov ch, 0x22
jmp 0x50bba4
mov dl, al
neg ecx
je 0x50bb02
jne 0x50bbde
bsr ecx, ebp
mov ch, 0x22
bswap cx
jmp 0x50bba7
jo 0x50ba9d
xchg dh, ch
jmp 0x50ba9f
ror dl, 0
btc ecx, esi
jg 0x50bbac
jle 0x50bbbe
lea ecx, [ecx*4]
mov ecx, dword [esp]
jmp 0x50bc1e
bswap cx
mov ecx, dword [esp]
jmp 0x50bb76
setp ch
jmp 0x50bb80
setp ch
lea ecx, [ecx*4]
mov ecx, dword [esp]
sub esp, 3
jmp 0x50bbe9
setb ch
bswap cx
jmp 0x50bb2b
lea esp, [esp + 3]
jmp 0x50bc25
call fcn.0050bc9a
btr cx, dx
neg ch
pop word [esp]
mov ecx, 0x5d737e7e
bsr ecx, edi
mov ch, al
mov ecx, dword [esp]
je 0x50bc76
jne 0x50bc78
mov dh, 0x24
inc ebx
mov esi, 0xde48d90d
mov ecx, 0xc8f8fb48
sub esp, 3
lea esp, [esp + 3]
inc dl
lea ecx, [esi + edi]
jmp 0x50bce3
jmp 0x50bcbe
mov ecx, dword [esp]
lea esp, [esp + 2]
jmp 0x50bcc5
mov ecx, dword [esp]
lea esp, [esp + 2]
jmp 0x50bcef
mov ch, 0x25
bswap cx
setle ch
lea ecx, [ecx*4]
jmp 0x50bd64
jl 0x50bbef
jge 0x50bbef
ror dl, 0
bt cx, si
js 0x50bcc7
jns 0x50bdb2
setle ch
lea ecx, [ecx*4]
or ch, bl
jmp 0x50bd66
ja 0x50bd47
bswap ecx
jmp 0x50bd93
bswap ecx
neg ecx
not dl
clc
jmp 0x50bfa7
or ch, bl
sub esp, 0xe
push word [esp + 2]
jmp 0x50bd2b
lea ecx, [ecx + ebx]
ror cx, cl
mov cx, word [esp]
neg ecx
mov ch, 0xf8
btc cx, bx
jmp 0x50bdbd
neg ecx
jmp 0x50bd4b
mov ch, 0x25
bswap cx
jmp 0x50bcfe
sub esp, 2
jno 0x50bdd9
mov ch, al
lea ecx, [edi*4]
pushfd
jmp 0x50be8c
mov ch, al
jmp 0x50bdfc
neg ecx
mov ch, 0xf8
jmp 0x50bd7f
lea ecx, [edi*4]
pushfd
jmp 0x50beb3
ror cx, cl
mov cx, word [esp]
jmp 0x50bdf5
jmp 0x50be65
mov ecx, dword [esp]
lea ecx, [eax + esi]
jmp 0x50be96
sub bl, dl
pushal
ja 0x50bf84
add dword [eax], eax
add byte [edi], cl
xchg dl, bh
add byte [eax], al
add byte [0xaf5c35a5], ah
jbe 0x50bf38
and eax, 0xaf5c35a5
outsd dx, dword [esi]
sti
js 0x50be35
mov dword [eax - 0x38], edi
cld
and ebx, dword [esp + edx]
dec dl
mov ecx, dword [esp]
jp 0x50be25
jnp 0x50be27
div byte [esi - 0x1c]
cmp dword [esi - 0x32], 0xffffffad
sub al, 0xa2
lds esi, [edi + esi*8]
arpl bx, cx
mov ecx, dword [esp]
lea ecx, [eax + esi]
bsr cx, cx
mov ecx, 0x5c5902fc
jmp 0x50be2f
not ecx
mov ecx, 0x68197620
jmp 0x50bebb
bsr cx, cx
mov ecx, 0x5c5902fc
jmp 0x50be75
not ecx
mov ecx, 0x68197620
lea esp, [esp + 2]
jmp 0x50be4e
push word [esp + 0x1b]
push word [esp + 0x18]
neg cl
mov ecx, dword [esp]
cmc
jmp 0x50bf3f
xchg word [esp + 0x1d], cx
jmp 0x50bf8e
push word [esp + 0x18]
jmp 0x50bf65
jns 0x50bec1
push word [esp + 0x1b]
jmp 0x50bef8
xchg dx, cx
bswap edx
jmp 0x50beee
mov ch, cl
jo 0x50bff5
neg ecx
lea edx, [esi + esi]
jmp 0x50bfd9
neg cl
mov ecx, dword [esp]
jmp 0x50bed0
xchg dx, cx
bswap edx
xchg word [esp + 0x1d], cx
inc esi
pushal
jmp 0x50bf17
jle 0x50bd70
lea ecx, [ecx + ebx]
jmp 0x50be1c
mov ch, 0x9c
jg 0x50c122
setge dh
mov dx, word [esp]
jmp 0x50c04b
lea edx, [esi + esi]
sub al, 0xee
jmp 0x50bfb5
neg ecx
jmp 0x50bfd6
jmp 0x50c02d
bt dx, di
lea edx, [ebx*4]
not dx
jmp 0x50c083
xchg ecx, edx
jmp 0x50c0fa
mov ecx, dword [esp]
cmp ch, 0x78
jmp 0x50bffb
bt dx, bp
neg cx
jmp 0x50c026
mov cx, word [esp + 1]
jmp 0x50c08b
mov cx, word [esp + 1]
bts ecx, edx
sub esp, 0x1a
sub esp, 0xf
jmp 0x50c0d0
not al
push ax
jge 0x50c054
jl 0x50c066
bts ecx, edx
sub esp, 0x1a
jmp 0x50c0bb
lea edx, [ebx*4]
not dx
jmp 0x50c009
sub esp, 0xf
bswap dx
jmp 0x50c160
bswap dx
jmp 0x50c160
mov dx, word [esp]
bt dx, bp
neg cx
xchg ecx, edx
mov edx, dword [esp]
mov cx, 0x3d85
je 0x50bff9
mov ecx, dword [esp]
cmp ch, 0x78
bt dx, di
jmp 0x50c0ac
setge dh
jmp 0x50c0ed
rcl ecx, cl
pop cx
jmp 0x50c52b
rcl ecx, cl
pop cx
lea esp, [esp + 1]
sub al, 0x9e
sub esp, 0x1a
jmp 0x50c20c
push dword [esp + 8]
mov dl, byte [esp + 0x19]
ja 0x50c143
jbe 0x50c127
call 0x50c171
pop eax
jmp 0x50ec3a
not al
neg dl
jbe 0x50c1ef
ja 0x50c261
call 0x50c1b9
jmp 0x50ec96
add esp, 4
lea esp, [esp + 3]
jmp 0x50c29a
push 0
jmp 0x50c1b4
call 0x50c1da
pop ecx
jmp 0x50eca5
pop dx
neg ch
jmp 0x50c1c5
sub esp, 9
mov word [esp + 6], di
xchg ecx, edx
bswap ecx
jmp 0x50c213
jbe 0x50c28c
sub esp, 0xf
jmp 0x50c1e9
xchg word [esp + 6], cx
mov dx, word [esp]
lea esp, [esp + 1]
jmp 0x50c4c7
call 0x50c22f
jb 0x50c292
add byte gs:[eax - 0x17], dl
sbb ebp, dword [edx]
add byte [eax], al
neg dword [ebx - 0x35]
scasb al, byte es:[edi]
pop ebp
fmul qword [edi]
mov edx, 0xc90fd187
xchg ecx, edx
bswap ecx
xchg word [esp + 6], cx
jmp 0x50c218
mov dword [esp + 0x24], eax
popal
inc dword [esp + 8]
push ebx
jmp 0x50ee62
sub esp, 9
mov word [esp + 6], di
jmp 0x50c23d
dec al
xchg ch, cl
jmp 0x50c38e
sub esp, 0xf
pop dx
neg ch
add esp, 4
lea esp, [esp + 3]
fld qword [ebx + 0x648d04c4]
and al, 3
jmp 0x50c1a8
jns 0x50c3fe
js 0x50c3fe
mov edx, dword [esp]
bt dx, dx
jmp 0x50c3ca
lea edx, [esi*4]
jmp 0x50afe0
add cl, ch
test dword [edi], esp
add byte [eax], al
wait
adc al, byte [eax + 0x74a212e7]
shl ecx, 2
bswap dx
jmp 0x50c392
neg dx
cmc
jp 0x50c39b
jnp 0x50c3e0
cld
jb 0x50c3b5
xchg dword [edx - 0x4d], esi
jg 0x50c3ca
add ax, si
inc edx
mov dh, 0x80
lea edx, [esi*4]
jmp 0x50afe0
mov dword [esp + 0x28], eax
popal
pushfd
jmp 0x50ef20
call 0x50c33c
jns 0x50c438
js 0x50c438
jmp 0x50c4a6
xchg di, ax
mov dword [esp + 4], ecx
jmp 0x50c479
popal
lea esi, reloc.oleaut32.dll_SysFreeString
jmp 0x50c451
pushal
jp 0x50c407
mov ebx, dword [esp]
xchg edx, esi
xchg di, ax
mov dword [esp + 4], ecx
bts dx, ax
jmp 0x50c47d
jns 0x50c414
popal
jmp 0x50c415
mov ecx, dword [esi]
jge 0x50c487
pop esi
clc
bsf dx, bx
rcr edx, 9
neg edx
jmp 0x50c4d3
bts dx, ax
lea edx, reloc.oleaut32.dll_SysFreeString
mov dh, bh
jmp 0x50c44c
pop esi
jmp 0x50c503
rcr edx, 9
neg edx
jmp 0x50c4d3
mov ebx, dword [esp]
xchg edx, esi
jmp 0x50c40c
jp 0x50c26b
jnp 0x50c26b
add ecx, 0x13790aea
jmp 0x50c50a
bswap edx
mov dh, byte [esp]
mov dh, 0xe8
mov esp, ebp
lea edx, [esi*4]
jmp 0x50c552
clc
bsf dx, bx
jmp 0x50c48a
stc
jae 0x50c4db
jb 0x50c61c
mov ah, 0x2f
mov edi, 0xcbf329da
outsd dx, dword [esi]
call [edx + 0x41c1f069]
sal dword [eax + reloc.oleaut32.dll_SysFreeString], 1
adc eax, 0x8daf736b
and al, 1
lea esp, [esp + 1]
jmp 0x50c14b
shl dh, cl
bswap dx
jmp 0x50c594
jb 0x50c58a
mov dx, 0x1002
jmp 0x50c534
rcr dx, 9
jp 0x50c5b3
jnp 0x50c5b3
bswap edx
lea edx, reloc.oleaut32.dll_SysFreeString
call fcn.0050caea
jp 0x50c573
add byte [eax], al
cmp al, 0xba
sub byte [edi - 0x46], cl
or eax, dword [esi - 0x39]
push edi
dec edi
mov edx, 0x57c7460b
xor al, cl
js 0x50c56c
imul edi, ecx, 0x15db6b98
nop
push es
popal
nop
daa
cli
or ah, byte [esi - 0x39]
ret 0x1002
mov dx, 0x1002
shl dh, cl
bswap dx
jmp 0x50c55b
jl 0x50c572
sub cl, byte [ebx - 0x769fdbec]
jl 0x50c5c7
sbb byte [edx - 0x15], bl
push ecx
cmpsb byte [esi], byte es:[edi]
sub al, 0xa2
lds esi, [eax*4 - 0x20538c4a]
and byte [eax - 0x2118], al
invalid
call 0x50c596
out dx, eax
cli
popfd
insb byte es:[edi], dx
fstp qword [esp + edx*8 + 0x4a]
sub eax, 0x119a69dc
and eax, 0x6de1a113
std
test byte [edi - 0x4c], dh
loopne 0x50c5dc
mov eax, dword [reloc.oleaut32.dll_SysFreeString]
ja 0x50c584
popfd
jno 0x50c599
mov dh, 0xe8
jmp 0x50c4e3
invalid
inc esp
and al, 5
lea esp, [esp + 0x1c]
mov word [esp + 1], si
jmp 0x50c623
bswap edx
mov dh, byte [esp]
jmp 0x50c5d2
js 0x50c563
bswap edx
jmp 0x50cba4
mov ecx, 0x23a810c7
xchg ecx, edx
jmp 0x50db6a
lea edx, reloc.oleaut32.dll_SysFreeString
jmp 0x50c56b
xchg ecx, edx
jmp 0x50cc7c
xchg dx, cx
jo 0x50cbd2
xchg ecx, edx
mov ch, dh
mov cx, word [esp]
sub esp, 0xb
xchg dword [esp + 4], ecx
jmp 0x50cc21
push dx
jmp 0x50d1c8
add byte [esi - 0x75f8db94], al
insb byte es:[edi], dx
and al, 3
xchg byte [esp + 7], ch
mov ch, byte [esp + 3]
jnp 0x50cc50
jp 0x50ccbc
rcr byte [esi - 0x34], cl
stosd dword es:[edi], eax
rcr word [ebp + 0x10e18610], cl
cmpsd dword [esi], dword es:[edi]
jno 0x50cc20
jno 0x50cc51
jecxz 0x50cc6a
dec ebx
cli
push esi
sti
sub esp, 0xb
xchg dword [esp + 4], ecx
jmp 0x50cc21
bswap dx
bswap edx
lea esp, [esp + 3]
jmp 0x50cc84
mov dx, 0x3323
lea ecx, [ebx + ebp]
mov edx, edi
mov cx, word [esp]
mov cx, 0x5c06
push es
pop esp
jmp 0x50cce1
mov ch, dh
mov cx, word [esp]
jmp 0x50cc47
not al
mov ecx, ebx
jno 0x50cc59
jo 0x50cc9a
movsb byte es:[edi], byte [esi]
cmp ebp, dword [ebx + reloc.oleaut32.dll_SysFreeString]
mov ebx, 0x9bd4e2b
cwde
les esp, [esi - 0x39]
ret 0x3323
mov dx, 0x3323
lea ecx, [ebx + ebp]
jmp 0x50ccfd
bswap dx
lea esp, [esp + 3]
jmp 0x50cc57
mov cx, 0x5c06
jmp 0x50cce1
mov bh, 0x2d
mov ebp, 0x418b37c4
or ebp, edx
not edx
sub esp, 0xd
jbe 0x50cd05
ja 0x50cd32
in al, dx
jnp 0x50ccd8
invalid
mov edx, edi
mov cx, word [esp]
jmp 0x50ccc5
xchg word [esp + 9], dx
mov word [esp + 6], sp
xchg dh, ch
lea esp, [esp + 1]
jmp 0x50cdde
lea edx, [edx + ebx]
bswap dx
jmp 0x50cc1a
xchg word [esp + 9], dx
mov word [esp + 6], sp
jmp 0x50cd49
xchg dh, ch
lea esp, [esp + 1]
jmp 0x50cd15
mov dh, byte [esp]
mov cl, byte [esp]
jmp 0x50cd27
mov ecx, eax
jmp 0x50cdb9
mov ecx, dword [esp]
mov edx, 0x43832ed8
jmp 0x50cd72
mov ecx, dword [esp]
mov edx, 0x43832ed8
mov ecx, eax
call fcn.0050cf74
dec edx
xchg cl, ch
dec edx
push word [esp]
pop ecx
pop dx
mov cx, dx
jb 0x50cde8
jae 0x50ce81
inc ecx
enter 0x395e, 0xffffffffffffffc8
js 0x50ce15
lodsd eax, dword [esi]
cmp eax, 0x35c080c0
add al, 0x35
bswap dx
jnp 0x50cdae
jp 0x50cd8f
jmp 0x50ce81
jmp 0x50ce63
xchg byte [esp], ch
and eax, 0x3c
jmp 0x50ce3a
lea edx, [ebx*4]
jmp 0x50ce1a
add eax, 0xadeb59d6
bswap edx
mov dx, word [esp]
jmp 0x50ce95
xchg cx, dx
jle 0x50cdf7
lea edx, [ebx*4]
bswap edx
mov dx, word [esp]
jmp 0x50ce95
bswap ecx
dec ecx
jmp 0x50cdef
dec al
push eax
jnp 0x50cded
bswap ecx
dec ecx
xchg byte [esp], ch
jmp 0x50cdf2
sub edi, 4
not dl
jmp 0x50cf19
or ecx, ecx
mov dx, di
lea ecx, [edi*4]
jmp 0x50ced2
mov edx, dword [eax + ebp]
sub esp, 0xd
jb 0x50cf1f
jae 0x50cf31
push ebx
int3
mov dx, di
lea ecx, [edi*4]
jmp 0x50ceb6
jnp 0x50ceaa
or ecx, ecx
jmp 0x50cef6
bswap ecx
jmp 0x50cfd0
bswap ecx
bsf eax, ebx
mov dword [esp + 2], esi
lea esp, [esp + 1]
jmp 0x50cf9c
lea esp, [esp + 1]
mov dword [edi], edx
jmp 0x50cfae
cmp edx, ecx
ja 0x50cff6
jbe 0x50cff6
sub esp, 5
lea esp, [esp + 1]
jmp fcn.0050d036
bsf eax, ebx
mov dword [esp + 2], esi
jmp 0x50cf98
add byte [eax], al
dec ebx
invalid
jns 0x50cff4
and eax, 0xfff60392
idiv bh
call fcn.0050cfd9
jb 0x50d018
jae 0x50d018
cmp eax, 0xb7443dad
jae 0x50cfe8
ja 0x50cfef
xor byte [ecx - 0x3f], 0xf
popfd
or eax, 0xcc16a754
arpl bx, si
xchg esi, eax
rol bh, 1
call fcn.0050d03c
mov byte [0x3ccdaa34], al
invalid
mov dh, byte [esp]
mov cl, byte [esp]
lea edx, [edx + ebx]
bswap dx
push dx
lea esp, [esp + 2]
ror al, 0
jmp 0x50cbf4
dec al
lea edx, [edx + 0xd9]
je 0x50d1ba
jne 0x50cd6a
mov edx, dword [esp]
mov dh, bh
lea esp, [esp + 2]
jmp 0x50d2f0
mov dh, byte [esp]
je 0x50d317
bt dx, sp
setne dh
bt dx, bp
jmp 0x50d606
bt dx, sp
jmp 0x50d329
setne dh
bt dx, bp
jmp 0x50d717
lea edx, reloc.oleaut32.dll_SysFreeString
bt edx, ecx
jmp 0x50d39a
bswap edx
bsf dx, dx
jmp 0x50d352
mov dh, byte [esp]
jmp 0x50d376
lea edx, [eax - 0xd2]
lea edx, [edi - 0x80]
sub esp, 8
jmp 0x50d421
push word [esp + 1]
add esp, 4
jmp 0x50d3ff
sub eax, ecx
jle 0x50d395
mov dh, byte [esp]
bswap edx
bsf dx, dx
lea edx, reloc.oleaut32.dll_SysFreeString
bt edx, ecx
jmp 0x50d39a
pushal
call fcn.0050d487
mov ch, 0x25
dec esp
mov edi, 0x43d3430d
aad 0x12
aas
mov al, 0x26
inc ecx
mov al, 2
movsd dword es:[edi], dword [esi]
in al, 0x90
invalid
lea esp, [esp + 2]
jmp 0x50d55d
jle 0x50d54c
mov word [esp + 3], bx
jmp 0x50d3a8
jns 0x50d3e1
pushal
jmp 0x50d3e2
mov word [esp + 3], bx
push word [esp + 1]
add esp, 4
lea esp, [esp + 2]
and dl, 0xfc
cmc
jmp 0x50d4da
mov dl, byte [esp]
bsf dx, ax
jmp 0x50d71e
mov dl, byte [esp]
bsf dx, ax
setle dh
jmp 0x50d3c9
pushal
inc dx
jmp 0x50d285
sub eax, 0xed0d6be3
jmp 0x50ecc1
test eax, eax
je 0x50c1d1
jne 0x50c225
call int.004fefe2
jmp 0x50c1d5
pop eax
sub eax, 0xd485c158
call dword [eax - 0x2b7c2e2f]
jmp 0x50ec42
sub ecx, 0x1001324a
mov dword [ecx + reloc.oleaut32.dll_SysFreeString], eax
jmp 0x50eec7
call 0x50ecd1
dec ebp
push ebx
push esi
inc ebx
push edx
push esp
insb byte es:[edi], dx
insb byte es:[edi], dx
add bh, bh
nop
movsb byte es:[edi], byte [esi]
jl 0x50ece1
in eax, dx
jmp 0x50ec42
adc esp, ebp
mov ecx, dword [esp]
bswap cx
jmp 0x50cb57
mov ebp, dword [esp + 0x18]
mov si, word [esp]
lea esi, [edx + edi]
lea esi, [esp + ecx]
mov esi, 0x73f80a78
bswap si
mov esi, dword [esp]
mov esi, dword [esp]
bswap si
lea esi, reloc.oleaut32.dll_SysFreeString
mov si, word [esp]
mov esi, dword [esp + 0x1c]
lea esp, [esp + 0x20]
popfd
ret
mov bp, 0x24ab
push bx
xchg byte [esp], ah
xchg byte [esp], ah
mov ah, byte [esp]
mov byte [esp], al
mov bp, word [esp]
mov byte [esp], dh
lea eax, [edx*4]
lea esi, [ecx*4]
lea esp, [esp + 2]
pop eax
mov ebp, dword [esp]
mov ebp, dword [esp]
not bp
bswap esi
mov esi, edi
mov si, 0x29b9
mov si, 0x62a2
lea ebp, [ebp*4]
mov si, 0x6e1c
pushfd
lea esp, [esp + 3]
xchg bp, si
lea esp, [esp]
lea esp, [esp + 1]
jmp 0x50ed2d
mov esi, 0x38ad5923
pop ebp
mov esi, ecx
xchg dword [esp + 0x13], ebp
push word [esp + 0x18]
push dword [esp + 0x17]
xchg word [esp + 0xc], si
mov ebp, dword [esp + 0xd]
pop ebp
lea esp, [esp + 2]
mov dword [esp], eax
bswap bp
lea ebp, [ebx*4]
jmp 0x50edb5
pop word [esp]
push edi
mov byte [esp + 3], al
pop word [esp + 1]
lea esp, [esp + 1]
mov byte [esp + 1], bh
lea esp, [esp + 1]
mov word [esp], ax
mov word [esp], dx
push word [esp + 1]
lea esp, [esp + 2]
push word [esp]
mov dword [esp], esi
mov si, word [esp]
bswap si
lea esi, reloc.oleaut32.dll_SysFreeString
lea esi, [eax*4]
lea esi, reloc.oleaut32.dll_SysFreeString
bswap si
push ebp
not ebp
mov si, 0x642e
pushal
jmp 0x50ee24
mov dword [ecx + reloc.oleaut32.dll_SysFreeString], 0x82444ff
mov word [ecx + 0x10015cf3], 0xc39d
movzx ebx, byte [eax]
add ebx, 0x1913bbf
cmp ebx, 0x1913c8b
je 0x50ef47
jne 0x50c248
sub ecx, 0x1001339d
mov dword [ecx + reloc.oleaut32.dll_SysFreeString], eax
mov dword [ecx + reloc.oleaut32.dll_SysFreeString], 0x82444ff
jmp 0x50ef46
push word [esp + 2]
lea esp, [esp + 2]
lea esp, [esp + 4]
popfd
lea esp, [esp + 4]
ret
mov dword [ecx + reloc.oleaut32.dll_SysFreeString], 0x4c29d
and dword [edx + 0x5d], reloc.oleaut32.dll_SysFreeString
add al, 0
movzx ebx, byte [eax]
add ebx, 0x52b73ae6
cmp ebx, 0x52b73bb2
jmp 0x5117e9
call 0x50ef85
pop eax
sub eax, 0x9cfa81a3
call dword [eax - 0x63079bb0]
jmp 0x50efd5
push 0
jmp 0x50ef80
test dword [ebx + reloc.oleaut32.dll_SysFreeString], esi
add byte [ebp + 0x53], cl
call 0x50efcf
dec ebp
push ebx
push esi
inc ebx
push edx
push esp
insb byte es:[edi], dx
insb byte es:[edi], dx
add bh, bh
nop
mov byte [edi - 0x3f7a12ac], al
test eax, eax
je 0x50efa8
jne 0x50f337
int1
imul edi, ebx, 0xffffff9e
insd dword es:[edi], dx
stosb byte es:[edi], al
sub edi, dword [esi + reloc.oleaut32.dll_SysFreeString]
ffreep st(3)
call 0x50eff2
pop eax
sub eax, 0xed56a548
jmp 0x50efbf
call 0x50f344
jae 0x50f3b2
jb 0x50f3ae
arpl word [ecx + 0x74], sp
add byte [eax - 0x18], dl
cwde
cld
invalid
inc dword [ecx + reloc.oleaut32.dll_SysFreeString]
arpl word [ecx], ax
adc byte [ecx + 0x1638c81], cl
adc cl, ch
invalid
je 0x50efbd
jne 0x50c3ec
call 0x511805
dec ebp
push ebx
push esi
inc ebx
push edx
push esp
insb byte es:[edi], dx
insb byte es:[edi], dx
add bh, bh
nop
dec esp
mov word [ecx + 0x74c085e1], es
pop ebx
jne 0x511876
call fcn.00511816
call 0x511883
jae 0x5118f1
jb 0x5118ed
arpl word [ecx + 0x74], sp
add byte [eax - 0x17], dl
inc ebp
add eax, dword [eax]
add byte [eax], bh
stosd dword es:[edi], eax
cmp ebx, dword [esi - 0x53]
outsd dx, dword [esi]
push ebx
dec ecx
out 0x89, al
inc esp
and al, 0x24
popal
inc dword [esp + 8]
push cx
lea esp, [esp + 2]
popfd
ret
call 0x5118a8
pop eax
sub eax, 0x9e13eac3
jmp 0x5118c3
push 0
jmp 0x5118a3
call dword [eax - 0x61ee5bb3]
jmp 0x511907
call 0x5118d8
ja 0x511935
jae 0x511946
arpl word [eax + 0x72], bp
add byte [eax - 0x17], dl
mov dword [eax], eax
add byte [eax], al
call 0x5118e3
pop ecx
jmp 0x51194a
xor ebp, dword [reloc.oleaut32.dll_SysFreeString]
add byte [eax], al
call 0x511901
dec ebp
push ebx
push esi
inc ebx
push edx
push esp
insb byte es:[edi], dx
insb byte es:[edi], dx
add bh, bh
nop
in eax, 0x67
mov dh, 0xfe
test eax, eax
je 0x5118bf
jne 0x5118cb
mov dword [esp + 0x24], eax
popal
jmp 0x51198d
mov word [ecx + 0x10018a46], 0xc39d
movzx ebx, byte [eax]
jmp 0x511971
popfd
ret
push cs
int 0x15
xchg ecx, eax
add dword [eax - 0x6d], esp
xchg ebx, eax
and byte [eax + 0x53e9810c], bh
mov dword [ecx], eax
adc byte [ecx + 0x18a4181], cl
adc bl, ch
salc
mov al, byte [0x2fdcb525]
lcall 0xfa48, 0xb9de48cc
jl 0x51199b
sub ecx, 0x10018953
mov dword [ecx + reloc.oleaut32.dll_SysFreeString], eax
jmp 0x51192e
adc eax, ebp
jbe 0x511940
invalid
add ebx, 0x3c193014
cmp ebx, 0x3c1930e0
jmp 0x5119f7
push si
lea esp, [esp + 2]
popfd
ret
call 0x51199a
pop eax
sub eax, 0xfe1ecc83
jmp 0x511a9f
push 0
jmp 0x511a75
imul ebp, dword [ebx - reloc.oleaut32.dll_SysFreeString], 0x593ea826
test al, 0x69
jle 0x5119e0
int3
add dh, cl
dec ebp
cmp esp, dword [esi + reloc.oleaut32.dll_SysFreeString]
and al, 0x61
popfd
ret
je 0x5119db
jne 0x51190d
push 0x629b7561
pushfd
add dword [esp + 4], 0x32d12e92
pushal
jmp 0x511995
call 0x511a5c
inc edi
je 0x511a9a
outsd dx, dword [esi]
jne 0x511abd
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
inc ebp
js 0x511a9c
add byte [eax - 0x17], dl
cld
add byte [eax], al
add al, ch
add byte [eax], al
add byte [eax], al
pop ecx
jmp 0x511b24
call 0x511a7a
pop eax
sub eax, 0xce42e03d
call dword [eax - 0x31bf680b]
jmp 0x511ab7
mov dword cs:[esp + 0x24], eax
mov dword [esp + 0x24], eax
popal
jmp 0x511aee
cld
inc edx
sbb al, 0x2a
jno 0x511a88
call 0x511ab1
dec ebx
or eax, 0x4b000000
inc ebp
push edx
dec esi
inc ebp
dec esp
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add bh, bh
nop
sbb eax, dword [ebp - 0x3f7a01e4]
test eax, eax
je 0x5119b7
invalid
jne 0x511a44
je 0x511bb0
jne 0x511a89
pushal
mov ebp, 0x208371c6
popal
pushfd
push dword [esp + 3]
mov byte [esp + 1], ch
mov word [esp + 2], cx
jmp 0x511af4
inc dword [esp + 8]
popfd
ret
pop dword [esp]
push word [esp + 2]
mov byte [esp + 4], ch
lea esp, [esp + 2]
lea esp, [esp + 4]
push 0x182c0185
pushfd
add dword [esp + 4], 0x34ed1450
pushal
jmp 0x511ba5
sub ecx, 0x10018ad7
mov dword [ecx + reloc.oleaut32.dll_SysFreeString], eax
mov dword [ecx + reloc.oleaut32.dll_SysFreeString], 0x82444ff
mov word [ecx + 0x10018a79], 0xc39d
movzx ebx, byte [eax]
add ebx, 0x36730bfe
cmp ebx, 0x36730cca
jmp 0x511ac1
call 0x511b7a
dec ebx
inc ebp
push edx
dec esi
inc ebp
dec esp
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add bl, ch
xor byte [eax], dh
movsb byte es:[edi], byte [esi]
cmp bl, byte [ebp - 0x54]
insd dword es:[edi], dx
cmc
pushal
not byte [ecx - 0x17f05ba0]
add byte [eax], al
add byte [eax], al
call 0x511b8e
pop eax
sub eax, 0xafafb9ba
jmp 0x511b68
lea esp, [esp + 0x20]
pushal
jmp 0x511b89
lodsd eax, dword [esi]
scasd eax, dword es:[edi]
test eax, eax
je 0x511c57
jne 0x511bfb
call 0x511bc1
pop ecx
jmp 0x511bd8
sub ecx, 0x10018c31
mov dword [ecx + reloc.oleaut32.dll_SysFreeString], eax
mov dword [ecx + reloc.oleaut32.dll_SysFreeString], 0x82444ff
jmp 0x51200d
call 0x511c0f
dec esp
outsd dx, dword [esi]
popal
dec esp
imul esp, dword [edx + 0x72], 0x45797261
js 0x511c65
add byte [eax - 0x18], dl
int 0xd3
invalid
mov dword [esp + 0x24], eax
popal
jmp 0x511e94
call 0x511c32
pop eax
sub eax, 0xa31eab8c
call dword [eax - 0x5ce39e74]
jmp 0x511bb2
push 0
jmp 0x511c2d
invalid
inc dword [esp + 8]
pushfd
lea esp, [esp + 4]
popfd
ret
mov dword [esp + 0x24], eax
popal
jmp 0x5120c2
mov word [ecx + 0x10018b82], 0xc39d
movzx ebx, byte [eax]
add ebx, 0x65fd6310
cmp ebx, 0x65fd63dc
je 0x512083
jne 0x511c17
call 0x512032
pop eax
sub eax, 0xfc4f1c4d
jmp 0x51209b
test eax, eax
je 0x512079
jne 0x5121f3
call 0x51204a
pop ecx
jmp 0x512176
push 0
jmp 0x512227
mov dword [esp + 0x24], eax
popal
and al, 0x61
inc dword [esp + 8]
push edx
jmp 0x51213d
call 0x5120ad
inc ecx
inc esp
push esi
inc ecx
push eax
dec ecx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add bh, bh
nop
dec ebp
into
dec esp
cld
jmp 0x51203b
inc dword [esp + 8]
popfd
ret
push 0
jmp 0x512164
mov word [esp + 1], sp
lea esp, [esp + 4]
popfd
ret
test eax, eax
je 0x5120d0
jne 0x5121ac
mov dword [esp + 0x24], eax
popal
jmp 0x512302
call 0x512169
pop eax
jmp 0x5121d0
sub ecx, 0x100190ba
mov dword [ecx + reloc.oleaut32.dll_SysFreeString], eax
mov dword [ecx + reloc.oleaut32.dll_SysFreeString], 0x82444ff
mov word [ecx + 0x100190da], 0xc39d
movzx ebx, byte [eax]
add ebx, 0x47ce61a0
cmp ebx, 0x47ce626c
je 0x512202
jne 0x512080
call 0x5121c2
push edx
push ecx
jne 0x51221c
jb 0x512232
push esi
popal
insb byte es:[edi], dx
jne 0x512223
inc ebp
js 0x512202
add byte [eax - 0x17], dl
add al, 0
add byte [0x9f6c0595], dl
pop edi
cmp al, 0xb1
sub eax, 0xe3bc0e02
call dword [eax - 0x1c464135]
jmp 0x512148
call 0x5121e6
pop eax
jmp 0x51229e
add byte [eax], al
add byte [eax - 0x17], bl
mov dl, 0
add byte [eax], al
mov byte [ecx], cl
cdq
clc
or edi, dword [ecx + reloc.oleaut32.dll_SysFreeString]
add byte [eax], al
call 0x512204
push edx
inc ebx
insb byte es:[edi], dx
outsd dx, dword [esi]
jae 0x512265
dec ebx
jns 0x512204
jns 0x512204
push eax
call int.004fefe2
jmp 0x512045
push 0
jmp 0x5122a6
mov ebp, 0x66000002
out 0x74, al
adc ebp, esi
pop esi
imul al
add byte [eax], al
add byte [eax], al
call 0x51222c
pop eax
sub eax, 0x8336fc6c
call dword [eax - 0x7ccb538e]
cmp edi, 0xffffff90
jb 0x5121e3
xor al, 0x83
jmp 0x51203b
pop dword [ecx]
adc byte [ebp + 0x18b60fc3], bl
add ebx, 0xce27681
cmp ebx, 0xce2774d
je 0x5122d7
jne 0x511fc1
call dword [eax - 0x6ad05a59]
test eax, eax
je 0x51220f
jne 0x512518
add cl, byte [ebx + 0x3c8d7e1b]
push 0xffffffffffffffee
jl 0x5122b6
test byte [ebx + ebp*4 - 0x7f], 0xe8
pop ebx
cmc
xor dword [ebp + reloc.oleaut32.dll_SysFreeString], edx
add byte [eax], al
add byte [eax - 0x7f], bl
call 0xd1e230b4
sub eax, 0x9531f55b
jmp 0x5122e2
call 0x5122ab
pop eax
sub eax, 0xd1910e02
call dword [eax - 0x2e714277]
mov ss, ecx
jmp 0x512287
push edx
lea esp, [esp + 4]
pushal
jmp 0x5121e1
call 0x5122f4
inc ecx
inc esp
push esi
inc ecx
push eax
dec ecx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add bl, ch
mov ebx, dword [edx]
nop
push es
popal
nop
and eax, edi
xchg dword [ebx - 0xbd41b9], eax
inc esp
and al, 8
inc dword [esp + 8]
pushfd
mov dword [esp], ecx
lea esp, [esp + 2]
push word [esp]
pop word [esp]
lea esp, [esp + 1]
lea esp, [esp]
lea esp, [esp + 1]
push edx
bswap edx
mov dh, 0x4c
mov dx, 0x2ccf
mov dl, ch
not dh
lea edx, [ebx + ebp]
mov edx, 0x8155fd5
pop edx
popfd
ret
call 0x51252b
push edx
dec edi
jo 0x512588
outsb dx, byte [esi]
dec ebx
jns 0x51256d
js 0x51256b
add byte [eax - 0x18], dl
mov cl, 0xca
invalid
pop esi
sub byte [esi - 0x1a14ff96], bh
mov esi, 0xe5eb006a
mov dword [esp + 0x24], eax
popal
jmp 0x5126f3
push edi
mov ecx, 0x74c08591
fbstp tbyte [ebp + 0x3f]
sub ecx, 0x100195b9
mov dword [ecx + reloc.oleaut32.dll_SysFreeString], eax
mov dword [ecx + reloc.oleaut32.dll_SysFreeString], 0x82444ff
jmp 0x51290d
inc dword [esp + 8]
push edx
mov dword [esp], ecx
push dword [esp + 2]
push dword [esp + 2]
push bp
mov word [esp + 0xa], bx
pop dword [esp + 1]
pop word [esp + 3]
mov byte [esp + 4], dl
mov byte [esp + 2], al
push word [esp + 3]
push word [esp + 1]
push si
pop dword [esp + 4]
lea esp, [esp + 2]
mov dword [esp + 3], ebx
mov bh, byte [esp]
setnp bl
push ebp
mov bx, word [esp]
pop word [esp]
mov word [esp], bp
lea ebx, [ecx + ebx]
bswap bx
bswap bx
xchg word [esp], bx
lea esp, [esp + 2]
push ecx
mov ecx, 0x6dd72fd9
lea ecx, [esp + ebx]
mov ch, byte [esp]
lea ecx, reloc.oleaut32.dll_SysFreeString
push si
mov ch, byte [esp + 1]
mov bx, 0x6d3a
lea ecx, [edx + 0xe3]
pop cx
bswap ecx
mov ecx, 0x59420f40
push ebp
mov ebx, dword [esp]
mov cl, dl
mov ecx, edi
mov cl, 0xf5
mov bp, 0x46ba
setbe bh
mov bp, word [esp]
mov ecx, edx
lea ebx, [ecx + 0x75]
pop ebp
mov ch, byte [esp]
setl cl
mov ebx, 0x48eb4d0e
bswap bx
mov bh, 0xe
mov bx, 0x2f80
pop ecx
mov bx, word [esp]
push sp
setb bh
mov word [esp], sp
mov bx, word [esp]
lea esp, [esp]
lea ebx, [eax + eax]
mov word [esp], dx
lea esp, [esp + 2]
mov ebx, dword [esp + 3]
lea esp, [esp + 8]
popfd
ret
mov word [ecx + 0x10019421], 0xc39d
movzx ebx, byte [eax]
add ebx, 0x23326ee8
cmp ebx, 0x23326fb4
je 0x512983
jne 0x512572
lea esp, [esp + 2]
lea esp, [esp + 2]
popfd
ret
dec esp
dec esp
add bh, bh
call dword [eax - 0x49af85ce]
jmp 0x5129a2
invalid
invalid