Function at 0x4e6ea8
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x521e20
push 0x4f8320
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
mov eax, 0x1ae8
call fcn.004f7c20
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x2c], 0
push 3
push 0
call fcn.004ed283
add esp, 8
push 0x51dd08
call dword [fcn.0051d07c]
mov dword [ebp - 0x28], eax
push 0x51dce8
mov eax, dword [ebp - 0x28]
push eax
call dword [fcn.0051d074]
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
je 0x4e6f24
push 1
push pe_nt_image_headers32
call dword [ebp - 0xe8]
push ecx
bswap ecx
not ecx
push eax
not eax
mov eax, 0x6c65696d
xchg ecx, eax
mov ecx, 0xdeadc0de
xchg ecx, eax
not eax
pop eax
not ecx
pop ecx
pushfd
pushal
xor ebx, ebx
je 0x4e6f47
jmp 0x4e6f68
xor ebx, ebx
je 0x4e6f4b
jmp 0x4e6f5a
mov ecx, 0x34f9c987
nop
stc
je 0x4e6f5e
jmp 0x4e6f8e
xor eax, eax
je 0x4e6f50
mov eax, 0x4840c987
test eax, eax
jne 0x4e6f44
jmp 0x92b50ccd
popal
popfd
xchg dx, ax
xchg dx, ax
mov eax, eax
mov dword [ebp - 0xdc], 0x94
lea ecx, [ebp - 0xdc]
push ecx
call dword [fcn.0051d1b0]
jo 0x4e6f90
jl 0x4e6f8e
jmp 0x4e6f92
je 0x4e6f8b
jmp 0x4e6f8b
cmp dword [ebp - 0xcc], 2
jne 0x4e6fa4
add dh, byte [ebp + 9]
mov byte [0x524420], 1
jmp 0x4e6fc0
cmp dword [ebp - 0xd8], 4
jne 0x4e6fbb
cmp dword [ebp - 0xd4], 0x5a
jb 0x4e6fbb
call fcn.004eceb0
call fcn.004ecf86
xor edx, edx
mov dl, byte [0x524420]
and byte [edx + edx*2], al
test edx, edx
jne 0x4e6fd2
cli
not esp
not esp
sti
mov eax, dword [0x51d3c8]
xor eax, dword [0x51d3d8]
xor eax, dword [0x51d3ac]
and eax, 4
test eax, eax
je 0x4e6ff1
mov byte [0x5243e1], 1
pushal
xor eax, eax
jne 0x4e6ff8
jmp 0x4e700d
jmp 0x4e702d
xor eax, eax
jne 0x4e7015
jp 0x4e700b
jo 0x4e700f
jmp 0x4e7010
jb 0x4e7014
jns 0x4e6ff9
call dword [0x74097900]
invalid
jns 0x4e7016
je 0x4e6fff
jmp 0x4e6f98
xchg ebx, ebx
jp 0x4e7004
mov al, byte [0xf7506133]
ror byte [edi], 1
enter 0x7358, 0
xor esp, dword [ecx + 0x50]
popal
push eax
not eax
bswap eax
pop eax
jae 0x4e701f
pushfd
pushal
jmp 0x4e704e
sub edx, edx
jo 0x4e7034
push cs
jmp 0x4e7045
xor ecx, ecx
je 0x4e702c
jmp 0x4e703e
adc cl, bh
stc
xor ecx, 3
je 0x4e6fc4
jmp 0x4e703b
jmp 0x4e7049
jae 0x4e7037
sbb bl, bl
sbb bl, bl
xor ebx, ebx
jmp 0x4e702e
jmp 0x4e7028
sbb al, 0xdb
jmp 0x4e7051
jmp 0x4e7022
popal
popfd
bswap eax
not ecx
bswap eax
not ecx
mov ecx, dword [0x51d3c8]
xor ecx, dword [0x51d3d8]
xor ecx, dword [0x51d3ac]
and ecx, 0x200
test ecx, ecx
je 0x4e707e
mov byte [0x5243e3], 1
pushal
xor eax, eax
jne 0x4e7085
jmp 0x4e709a
jmp 0x4e70ba
xor eax, eax
jne 0x4e70a2
jp 0x4e7098
jo 0x4e709c
jmp 0x4e709d
jb 0x4e70a1
jns 0x4e7086
call dword [0x74097900]
invalid
jns 0x4e70a3
je 0x4e708c
jmp 0x4e7025
xchg ebx, ebx
jp 0x4e7091
mov al, byte [0x6a6133]
xor esp, dword [ecx + 0x6a]
add bh, bh
adc eax, fcn.0051d050
popal
push 0
call dword [fcn.0051d050]
mov edx, dword [0x51d40c]
xor edx, dword [0x51d3d8]
xor edx, dword [0x51d3fc]
cld
rcl dword [ecx], cl
add eax, edx
mov dword [0x5243f4], eax
push ecx
bswap ecx
not ecx
push eax
not eax
mov eax, 0x6c65696d
xchg ecx, eax
mov ecx, 0xdeadc0de
xchg ecx, eax
not eax
pop eax
not ecx
pop ecx
pushfd
pushal
xor ebx, ebx
je 0x4e70e8
jmp 0x4e7109
xor ebx, ebx
je 0x4e70ec
jmp 0x4e70fb
mov ecx, 0x34f9c987
nop
stc
je 0x4e70ff
jmp 0x4e712f
xor eax, eax
je 0x4e70f1
mov eax, 0x4840c987
test eax, eax
jne 0x4e70e5
jmp 0x92b50e6e
popal
popfd
xchg dx, ax
xchg dx, ax
mov eax, eax
mov eax, dword [0x51d3d4]
xor eax, dword [0x51d3f8]
xor eax, dword [0x51d3ac]
add eax, 0xfff
shr eax, 0xc
mov dword [0x524408], eax
jo 0x4e7138
jl 0x4e7136
jmp 0x4e713a
je 0x4e7133
jmp 0x4e7133
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x100], 0xffffffff
push ecx
bswap ecx
not ecx
push eax
not eax
mov eax, 0x6c65696d
xchg ecx, eax
mov ecx, 0xdeadc0de
xchg ecx, eax
not eax
pop eax
not ecx
pop ecx
pushfd
pushal
xor ebx, ebx
je 0x4e716e
add ebp, ebx
and ch, bl
jmp 0x4e718f
xor ebx, ebx
je 0x4e7172
jmp 0x4e7181
mov ecx, 0x34f9c987
nop
stc
je 0x4e7185
jmp 0x4e71b5
xor eax, eax
je 0x4e7177
mov eax, 0x4840c987
test eax, eax
jne 0x4e716b
jmp 0x92b50ef4
popal
popfd
xchg dx, ax
xchg dx, ax
mov eax, eax
push 0
call fcn.004f84b6
add esp, 4
mov esi, eax
call dword [0x51d03c]
xor esi, eax
xor esi, dword [0x51d3fc]
mov dword [ebp - 0x1910], esi
mov ecx, dword [ebp - 0x1910]
mov dword [ebp - 0x320], ecx
pushal
xor eax, eax
jne 0x4e71ca
invalid
jmp 0x4e71df
jmp 0x4e71ff
xor eax, eax
jne 0x4e71e7
jp 0x4e71dd
jo 0x4e71e1
jmp 0x4e71e2
jb 0x4e71e6
jns 0x4e71cb
call dword [0x74097900]
invalid
jns 0x4e71e8
je 0x4e71d1
jmp 0x4e716a
xchg ebx, ebx
jp 0x4e71d6
mov al, byte [0x85c76133]
int3
xor esp, dword [ecx - 0x39]
test esp, ecx
out 0xff, al
inc dword [eax]
add dword [eax], eax
add byte [ebx - 0x31f7b], cl
call [ecx + 0x2710b9]
add bh, dh
stc
popal
mov dword [ebp - 0x1934], pe_nt_image_headers32
mov eax, dword [ebp - 0x320]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1928], eax
mov eax, dword [ebp - 0x320]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1924], edx
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1930], eax
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x192c], edx
mov ecx, dword [ebp - 0x1924]
imul ecx, dword [ebp - 0x192c]
mov edx, dword [ebp - 0x1928]
imul edx, dword [ebp - 0x192c]
mov eax, dword [ebp - 0x1924]
imul eax, dword [ebp - 0x1930]
add eax, edx
xor edx, edx
mov esi, 0x2710
div esi
mov eax, edx
imul eax, eax, 0x2710
add eax, ecx
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov eax, edx
add eax, 1
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov dword [ebp - 0x320], edx
mov eax, dword [ebp - 0x320]
xor edx, edx
mov ecx, 0x2710
div ecx
imul eax, dword [ebp - 0x1934]
xor edx, edx
mov ecx, 0x2710
div ecx
and eax, 0xff
mov dword [ebp - 0x1920], eax
mov dword [ebp - 0x1948], pe_nt_image_headers32
mov eax, dword [ebp - 0x320]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x193c], eax
mov eax, dword [ebp - 0x320]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1938], edx
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1944], eax
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1940], edx
mov ecx, dword [ebp - 0x1938]
imul ecx, dword [ebp - 0x1940]
mov edx, dword [ebp - 0x193c]
imul edx, dword [ebp - 0x1940]
mov eax, dword [ebp - 0x1938]
imul eax, dword [ebp - 0x1944]
add eax, edx
xor edx, edx
mov esi, 0x2710
div esi
mov eax, edx
imul eax, eax, 0x2710
add eax, ecx
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov eax, edx
add eax, 1
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov dword [ebp - 0x320], edx
mov eax, dword [ebp - 0x320]
xor edx, edx
mov ecx, 0x2710
div ecx
imul eax, dword [ebp - 0x1948]
xor edx, edx
mov ecx, 0x2710
div ecx
and eax, 0xff
mov dword [ebp - 0x1914], eax
mov dword [ebp - 0x195c], pe_nt_image_headers32
mov eax, dword [ebp - 0x320]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1950], eax
mov eax, dword [ebp - 0x320]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x194c], edx
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1958], eax
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1954], edx
mov ecx, dword [ebp - 0x194c]
imul ecx, dword [ebp - 0x1954]
mov edx, dword [ebp - 0x1950]
imul edx, dword [ebp - 0x1954]
mov eax, dword [ebp - 0x194c]
imul eax, dword [ebp - 0x1958]
add eax, edx
xor edx, edx
mov esi, 0x2710
div esi
mov eax, edx
imul eax, eax, 0x2710
add eax, ecx
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov eax, edx
add eax, 1
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov dword [ebp - 0x320], edx
mov eax, dword [ebp - 0x320]
xor edx, edx
mov ecx, 0x2710
div ecx
imul eax, dword [ebp - 0x195c]
xor edx, edx
mov ecx, 0x2710
div ecx
and eax, 0xff
mov dword [ebp - 0x1918], eax
mov dword [ebp - 0x1970], pe_nt_image_headers32
mov eax, dword [ebp - 0x320]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1964], eax
mov eax, dword [ebp - 0x320]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1960], edx
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x196c], eax
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1968], edx
mov ecx, dword [ebp - 0x1960]
imul ecx, dword [ebp - 0x1968]
mov edx, dword [ebp - 0x1964]
imul edx, dword [ebp - 0x1968]
mov eax, dword [ebp - 0x1960]
imul eax, dword [ebp - 0x196c]
add eax, edx
xor edx, edx
mov esi, 0x2710
div esi
mov eax, edx
imul eax, eax, 0x2710
add eax, ecx
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov eax, edx
add eax, 1
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov dword [ebp - 0x320], edx
mov eax, dword [ebp - 0x320]
xor edx, edx
mov ecx, 0x2710
div ecx
imul eax, dword [ebp - 0x1970]
xor edx, edx
mov ecx, 0x2710
div ecx
and eax, 0xff
mov dword [ebp - 0x191c], eax
mov edx, dword [ebp - 0x1918]
shl edx, 8
mov eax, dword [ebp - 0x1914]
shl eax, 0x10
mov ecx, dword [ebp - 0x1920]
shl ecx, 0x18
or ecx, eax
or ecx, edx
or ecx, dword [ebp - 0x191c]
mov dword [ebp - 0x38], ecx
jo 0x4e7586
jl 0x4e7584
jmp 0x4e7588
je 0x4e7581
jmp 0x4e7581
push ecx
bswap ecx
not ecx
push eax
not eax
mov eax, 0x6c65696d
xchg ecx, eax
mov ecx, 0xdeadc0de
xchg ecx, eax
not eax
pop eax
not ecx
pop ecx
pushfd
pushal
xor ebx, ebx
je 0x4e75ab
jmp 0x4e75cc
xor ebx, ebx
je 0x4e75af
jmp 0x4e75be
mov ecx, 0x34f9c987
nop
stc
je 0x4e75c2
jmp 0x4e75f2
xor eax, eax
je 0x4e75b4
mov eax, 0x4840c987
test eax, eax
jne 0x4e75a8
jmp 0x92b51331
popal
popfd
xchg dx, ax
xchg dx, ax
mov eax, eax
push eax
not eax
bswap eax
pop eax
jae 0x4e75dc
pushfd
pushal
jmp 0x4e760b
sub edx, edx
jo 0x4e75f1
jmp 0x4e7602
xor ecx, ecx
je 0x4e75e9
jmp 0x4e75fb
stc
xor ecx, 3
je 0x4e7581
jmp 0x4e75f8
add eax, 0x7410ebb9
out dx, eax
jmp 0x4e7606
jae 0x4e75f4
sbb bl, bl
sbb bl, bl
xor ebx, ebx
jmp 0x4e75eb
jmp 0x4e75e5
sbb al, 0xdb
jmp 0x4e760e
jmp 0x4e75df
popal
popfd
bswap eax
not ecx
bswap eax
not ecx
mov dword [ebp - 0x318], 0xc
jo 0x4e762b
jl 0x4e7629
jmp 0x4e762d
je 0x4e7626
jmp 0x4e7626
mov dword [ebp - 0x314], 0
pushal
xor eax, eax
jne 0x4e763e
jmp 0x4e7653
jmp 0x4e7673
xor eax, eax
jne 0x4e765b
jp 0x4e7651
jo 0x4e7655
jmp 0x4e7656
jb 0x4e765a
jns 0x4e763f
call dword [0x74097900]
invalid
jns 0x4e765c
je 0x4e7645
jmp 0x4e75de
xchg ebx, ebx
jp 0x4e764a
mov al, byte [0x85c76133]
invalid
xor esp, dword [ecx - 0x39]
test eax, esi
cld
invalid
popal
mov dword [ebp - 0x310], 1
push eax
not eax
bswap eax
pop eax
jae 0x4e766f
pushfd
pushal
jmp 0x4e769e
sub edx, edx
jo 0x4e7684
sal byte [eax + 0xe], cl
jmp 0x4e7695
xor ecx, ecx
je 0x4e767c
jmp 0x4e768e
stc
xor ecx, 3
je 0x4e7614
jmp 0x4e768b
jmp 0x4e7699
jae 0x4e7687
sbb bl, bl
sbb bl, bl
xor ebx, ebx
jmp 0x4e767e
jmp 0x4e7678
sbb al, 0xdb
jmp 0x4e76a1
jmp 0x4e7672
popal
popfd
bswap eax
not ecx
bswap eax
not ecx
push 0
push 0x1000
push 0
push 4
lea edx, [ebp - 0x318]
push edx
push 0xffffffffffffffff
call dword [0x51d10c]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jne 0x4e76db
xor al, al
jmp 0x4eaec6
call dword [0x51d108]
mov dword [ebp - 0x31c], eax
mov dword [ebp - 0x324], 0
push 2
push 1
push 0
lea eax, [ebp - 0x324]
push eax
mov ecx, dword [ebp - 0x31c]
push ecx
mov edx, dword [ebp - 0x31c]
push edx
mov eax, dword [ebp - 0x31c]
push eax
call dword [0x51d104]
push 0x1000
push 0
push 0
push 2
mov ecx, dword [ebp - 0x100]
push ecx
call dword [0x51d100]
mov dword [0x524404], eax
xor edx, edx
mov dl, byte [0x5240c4]
test edx, edx
je 0x4e7adf
mov dword [ebp - 0x1994], pe_nt_image_headers32
mov eax, dword [ebp - 0x320]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1988], eax
mov eax, dword [ebp - 0x320]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1984], edx
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1990], eax
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x198c], edx
mov ecx, dword [ebp - 0x1984]
imul ecx, dword [ebp - 0x198c]
mov edx, dword [ebp - 0x1988]
imul edx, dword [ebp - 0x198c]
mov eax, dword [ebp - 0x1984]
imul eax, dword [ebp - 0x1990]
add eax, edx
xor edx, edx
mov esi, 0x2710
div esi
mov eax, edx
imul eax, eax, 0x2710
add eax, ecx
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov eax, edx
add eax, 1
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov dword [ebp - 0x320], edx
mov eax, dword [ebp - 0x320]
xor edx, edx
mov ecx, 0x2710
div ecx
imul eax, dword [ebp - 0x1994]
xor edx, edx
mov ecx, 0x2710
div ecx
and eax, 0xff
mov dword [ebp - 0x1980], eax
mov dword [ebp - 0x19a8], pe_nt_image_headers32
mov eax, dword [ebp - 0x320]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x199c], eax
mov eax, dword [ebp - 0x320]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1998], edx
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x19a4], eax
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x19a0], edx
mov ecx, dword [ebp - 0x1998]
imul ecx, dword [ebp - 0x19a0]
mov edx, dword [ebp - 0x199c]
imul edx, dword [ebp - 0x19a0]
mov eax, dword [ebp - 0x1998]
imul eax, dword [ebp - 0x19a4]
add eax, edx
xor edx, edx
mov esi, 0x2710
div esi
mov eax, edx
imul eax, eax, 0x2710
add eax, ecx
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov eax, edx
add eax, 1
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov dword [ebp - 0x320], edx
mov eax, dword [ebp - 0x320]
xor edx, edx
mov ecx, 0x2710
div ecx
imul eax, dword [ebp - 0x19a8]
xor edx, edx
mov ecx, 0x2710
div ecx
and eax, 0xff
mov dword [ebp - 0x1974], eax
mov dword [ebp - 0x19bc], pe_nt_image_headers32
mov eax, dword [ebp - 0x320]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x19b0], eax
mov eax, dword [ebp - 0x320]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x19ac], edx
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x19b8], eax
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x19b4], edx
mov ecx, dword [ebp - 0x19ac]
imul ecx, dword [ebp - 0x19b4]
mov edx, dword [ebp - 0x19b0]
imul edx, dword [ebp - 0x19b4]
mov eax, dword [ebp - 0x19ac]
imul eax, dword [ebp - 0x19b8]
add eax, edx
xor edx, edx
mov esi, 0x2710
div esi
mov eax, edx
imul eax, eax, 0x2710
add eax, ecx
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov eax, edx
add eax, 1
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov dword [ebp - 0x320], edx
mov eax, dword [ebp - 0x320]
xor edx, edx
mov ecx, 0x2710
div ecx
imul eax, dword [ebp - 0x19bc]
xor edx, edx
mov ecx, 0x2710
div ecx
and eax, 0xff
mov dword [ebp - 0x1978], eax
mov dword [ebp - 0x19d0], pe_nt_image_headers32
mov eax, dword [ebp - 0x320]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x19c4], eax
mov eax, dword [ebp - 0x320]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x19c0], edx
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x19cc], eax
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x19c8], edx
mov ecx, dword [ebp - 0x19c0]
imul ecx, dword [ebp - 0x19c8]
mov edx, dword [ebp - 0x19c4]
imul edx, dword [ebp - 0x19c8]
mov eax, dword [ebp - 0x19c0]
imul eax, dword [ebp - 0x19cc]
add eax, edx
xor edx, edx
mov esi, 0x2710
div esi
mov eax, edx
imul eax, eax, 0x2710
add eax, ecx
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov eax, edx
add eax, 1
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov dword [ebp - 0x320], edx
mov eax, dword [ebp - 0x320]
xor edx, edx
mov ecx, 0x2710
div ecx
imul eax, dword [ebp - 0x19d0]
xor edx, edx
mov ecx, 0x2710
div ecx
and eax, 0xff
mov dword [ebp - 0x197c], eax
mov edx, dword [ebp - 0x1978]
shl edx, 8
mov eax, dword [ebp - 0x1974]
shl eax, 0x10
mov ecx, dword [ebp - 0x1980]
shl ecx, 0x18
or ecx, eax
or ecx, edx
or ecx, dword [ebp - 0x197c]
mov dword [ebp - 0x1af4], ecx
jmp 0x4e7ae8
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x1af4], edx
mov eax, dword [ebp - 0x1af4]
xor eax, dword [0x51d3f8]
xor eax, dword [0x51d3d0]
xor eax, dword [0x51d3b4]
xor eax, dword [0x51d3cc]
xor eax, dword [0x51d408]
mov ecx, dword [0x524404]
mov dword [ecx], eax
mov edx, dword [0x524404]
mov eax, dword [ebp - 0x324]
mov dword [edx + 4], eax
call dword [0x51d1b8]
mov ecx, dword [0x524404]
mov dword [ecx + 8], eax
mov edx, dword [0x524404]
mov dword [edx + 0x20], 0
mov eax, dword [ebp - 0x100]
push eax
push 0x51dce4
lea ecx, [ebp - 0x30c]
push ecx
call fcn.004f81aa
add esp, 0xc
lea edx, [ebp - 0x30c]
push edx
push 0x51dce0
call dword [0x51d098]
push ecx
bswap ecx
not ecx
push eax
not eax
mov eax, 0x6c65696d
xchg ecx, eax
mov ecx, 0xdeadc0de
xchg ecx, eax
not eax
pop eax
not ecx
pop ecx
pushfd
pushal
xor ebx, ebx
je 0x4e7b8f
jmp 0x4e7bb0
xor ebx, ebx
je 0x4e7b93
jmp 0x4e7ba2
mov ecx, 0x34f9c987
nop
stc
je 0x4e7ba6
jmp 0x4e7bd6
xor eax, eax
je 0x4e7b98
mov eax, 0x4840c987
test eax, eax
jne 0x4e7b8c
jmp 0x92b51915
popal
popfd
xchg dx, ax
xchg dx, ax
mov eax, eax
mov eax, dword [0x524408]
shl eax, 2
push eax
call fcn.004f7481
add esp, 4
mov dword [ebp - 0x18d8], eax
mov ecx, dword [ebp - 0x18d8]
mov dword [0x524410], ecx
or eax, 0x524410
mov edx, dword [0x524408]
shl edx, 4
shl edx, 2
push edx
call fcn.004f7481
add esp, 4
mov dword [ebp - 0x18dc], eax
mov eax, dword [ebp - 0x18dc]
mov dword [0x5243ec], eax
mov ecx, dword [0x524408]
shl ecx, 2
push ecx
call fcn.004f7481
add esp, 4
mov dword [ebp - 0x18e0], eax
mov edx, dword [ebp - 0x18e0]
mov dword [0x524414], edx
mov eax, dword [0x524408]
shl eax, 2
push eax
call fcn.004f7481
add esp, 4
mov dword [ebp - 0x18e4], eax
mov ecx, dword [ebp - 0x18e4]
mov dword [0x524418], ecx
push 0x1000
call fcn.004f7481
add esp, 4
mov dword [ebp - 0x18e8], eax
mov edx, dword [ebp - 0x18e8]
mov dword [0x52441c], edx
mov eax, dword [0x524408]
shl eax, 2
push eax
call fcn.004f7481
add esp, 4
mov dword [ebp - 0x18ec], eax
mov ecx, dword [ebp - 0x18ec]
mov dword [0x5243e8], ecx
push eax
not eax
bswap eax
pop eax
jae 0x4e7c92
test dword [edi], ebx
invalid
pushfd
pushal
jmp 0x4e7cc1
sub edx, edx
jo 0x4e7ca7
jmp 0x4e7cb8
xor ecx, ecx
je 0x4e7c9f
jmp 0x4e7cb1
stc
xor ecx, 3
je 0x4e7c37
jmp 0x4e7cae
jmp 0x4e7cbc
jae 0x4e7caa
sbb bl, bl
sbb bl, bl
xor ebx, ebx
jmp 0x4e7ca1
jmp 0x4e7c9b
sbb al, 0xdb
jmp 0x4e7cc4
jmp 0x4e7c95
popal
popfd
bswap eax
not ecx
bswap eax
not ecx
mov edx, dword [0x51d3d0]
xor edx, dword [ebp - 0x38]
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x48], 0
jmp 0x4e7cec
mov eax, dword [ebp - 0x48]
add eax, 1
mov dword [ebp - 0x48], eax
mov ecx, dword [0x524408]
shl ecx, 4
cmp dword [ebp - 0x48], ecx
jge 0x4e808d
mov dword [ebp - 0x19f4], pe_nt_image_headers32
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x19e8], eax
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x19e4], edx
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x19f0], eax
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x19ec], edx
mov ecx, dword [ebp - 0x19e4]
imul ecx, dword [ebp - 0x19ec]
mov edx, dword [ebp - 0x19e8]
imul edx, dword [ebp - 0x19ec]
mov eax, dword [ebp - 0x19e4]
imul eax, dword [ebp - 0x19f0]
add eax, edx
xor edx, edx
mov esi, 0x2710
div esi
mov eax, edx
imul eax, eax, 0x2710
add eax, ecx
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov eax, edx
add eax, 1
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, 0x2710
div ecx
imul eax, dword [ebp - 0x19f4]
xor edx, edx
mov ecx, 0x2710
div ecx
and eax, 0xff
mov dword [ebp - 0x19e0], eax
mov dword [ebp - 0x1a08], pe_nt_image_headers32
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x19fc], eax
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x19f8], edx
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1a04], eax
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1a00], edx
mov ecx, dword [ebp - 0x19f8]
imul ecx, dword [ebp - 0x1a00]
mov edx, dword [ebp - 0x19fc]
imul edx, dword [ebp - 0x1a00]
mov eax, dword [ebp - 0x19f8]
imul eax, dword [ebp - 0x1a04]
add eax, edx
xor edx, edx
mov esi, 0x2710
div esi
mov eax, edx
imul eax, eax, 0x2710
add eax, ecx
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov eax, edx
add eax, 1
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, 0x2710
div ecx
imul eax, dword [ebp - 0x1a08]
xor edx, edx
mov ecx, 0x2710
div ecx
and eax, 0xff
mov dword [ebp - 0x19d4], eax
mov dword [ebp - 0x1a1c], pe_nt_image_headers32
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1a10], eax
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1a0c], edx
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1a18], eax
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1a14], edx
mov ecx, dword [ebp - 0x1a0c]
imul ecx, dword [ebp - 0x1a14]
mov edx, dword [ebp - 0x1a10]
imul edx, dword [ebp - 0x1a14]
mov eax, dword [ebp - 0x1a0c]
imul eax, dword [ebp - 0x1a18]
add eax, edx
xor edx, edx
mov esi, 0x2710
div esi
mov eax, edx
imul eax, eax, 0x2710
add eax, ecx
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov eax, edx
add eax, 1
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, 0x2710
div ecx
imul eax, dword [ebp - 0x1a1c]
xor edx, edx
mov ecx, 0x2710
div ecx
and eax, 0xff
mov dword [ebp - 0x19d8], eax
mov dword [ebp - 0x1a30], pe_nt_image_headers32
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1a24], eax
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1a20], edx
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1a2c], eax
mov eax, 0x1df5e0d
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x1a28], edx
mov ecx, dword [ebp - 0x1a20]
imul ecx, dword [ebp - 0x1a28]
mov edx, dword [ebp - 0x1a24]
imul edx, dword [ebp - 0x1a28]
mov eax, dword [ebp - 0x1a20]
imul eax, dword [ebp - 0x1a2c]
add eax, edx
xor edx, edx
mov esi, 0x2710
div esi
mov eax, edx
imul eax, eax, 0x2710
add eax, ecx
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov eax, edx
add eax, 1
xor edx, edx
mov ecx, 0x5f5e100
div ecx
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, 0x2710
div ecx
imul eax, dword [ebp - 0x1a30]
xor edx, edx
mov ecx, 0x2710
div ecx
and eax, 0xff
mov dword [ebp - 0x19dc], eax
mov edx, dword [ebp - 0x19d8]
shl edx, 8
mov eax, dword [ebp - 0x19d4]
shl eax, 0x10
mov ecx, dword [ebp - 0x19e0]
shl ecx, 0x18
or ecx, eax
or ecx, edx
or ecx, dword [ebp - 0x19dc]
xor ecx, dword [0x51d3f8]
xor ecx, dword [0x51d3d0]
xor ecx, dword [0x51d3b4]
xor ecx, dword [0x51d3cc]
xor ecx, dword [0x51d408]
mov edx, dword [ebp - 0x48]
mov eax, dword [0x5243ec]
mov dword [eax + edx*4], ecx
jmp 0x4e7ce3
pushal
xor eax, eax
jne 0x4e8094
jmp 0x4e80a9
jmp 0x4e80c9
xor eax, eax
jne 0x4e80b1
jp 0x4e80a7
jo 0x4e80ab
jmp 0x4e80ac
jb 0x4e80b0
jns 0x4e8095
call dword [0x74097900]
invalid
jns 0x4e80b2
je 0x4e809b
jmp 0x4e8034
xchg ebx, ebx
jp 0x4e80a0
mov al, byte [0x45c76133]
xor esp, dword [ecx - 0x39]
inc ebp
popal
mov dword [ebp - 0x48], 0
mov eax, 0
jmp 0x4e80c5
mov ecx, dword [ebp - 0x48]
add ecx, 1
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x48]
cmp edx, dword [0x524408]
adc eax, 0x524408
jge 0x4e8111
mov eax, dword [ebp - 0x48]
mov ecx, dword [0x524410]
mov dword [ecx + eax*4], 0xffffffff
mov edx, dword [ebp - 0x48]
mov eax, dword [0x524414]
mov dword [eax + edx*4], 0
mov ecx, dword [ebp - 0x48]
mov edx, dword [0x524418]
mov dword [edx + ecx*4], 0xffffffff
mov eax, dword [ebp - 0x48]
mov ecx, dword [0x5243e8]
mov dword [ecx + eax*4], 0
jmp 0x4e80bc
push ecx
bswap ecx
not ecx
push eax
not eax
mov eax, 0x6c65696d
xchg ecx, eax
mov ecx, 0xdeadc0de
xchg ecx, eax
not eax
pop eax
not ecx
pop ecx
pushfd
pushal
xor ebx, ebx
je 0x4e8134
jmp 0x4e8155
xor ebx, ebx
je 0x4e8138
jmp 0x4e8147
mov ecx, 0x34f9c987
nop
stc
je 0x4e814b
jmp 0x4e817b
xor eax, eax
je 0x4e813d
mov eax, 0x4840c987
test eax, eax
jne 0x4e8131
jmp 0x92b51eba
popal
popfd
xchg dx, ax
xchg dx, ax
mov eax, eax
mov edx, dword [0x524408]
sar edx, 1
add edx, 1
mov dword [0x51d818], edx
xor eax, eax
mov al, byte [0x5243e2]
test eax, eax
jne 0x4e81bf
push ecx
add byte [ebx], dh
shl byte [eax + 0x5243e2], 0x85
sal byte [ebp + 0x46], 0x70
pop es
jo 0x4e8182
jl 0x4e8180
jmp 0x4e8184
je 0x4e817d
jmp 0x4e817d
push eax
not eax
bswap eax
pop eax
jae 0x4e81c7
pushfd
pushal
jmp 0x4e81f6
sub edx, edx
jo 0x4e81dc
jmp 0x4e81ed
xor ecx, ecx
je 0x4e81d4
jmp 0x4e81e6
stc
xor ecx, 3
je 0x4e816c
jmp 0x4e81e3
jmp 0x4e81f1
jae 0x4e81df
sbb bl, bl
sbb bl, bl
xor ebx, ebx
jmp 0x4e81d6
jmp 0x4e81d0
sbb al, 0xdb
jmp 0x4e81f9
jmp 0x4e81ca
popal
popfd
bswap eax
not ecx
bswap eax
not ecx
cmp dword [0x51d818], 0x12
jae 0x4e8216
mov dword [0x51d818], 0x12
jo 0x4e821f
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret