Function at 0x425bb9
Capabilities:
Read file on windows

Disassembly:
push edi
push edx
pop edx
call fcn.0041e0f1
add esp, 4
mov al, al
mov al, byte [ebp + 0xb]
mov dl, dl
jmp 0x406dc7
push esi
mov ebx, ebx
mov ax, ax
mov byte [esi + 0xba], bl
mov byte [esi + 0xbb], al
mov ebx, ebx
mov word [esi + 0xbc], di
jne 0x41fda7
xchg ebx, eax
xchg ebx, eax
je 0x406df0
cdq
xor dh, byte [esi - 0x704e7bf1]
add dword [eax], eax
je 0x41fda7
fmul dword [ebx + 0x68085e8b]
mov dl, 0x72
inc ecx
add bl, al
fnstenv [ebp - 0x74bfa275]
inc esi
add al, 0x8b
push esi
or byte [esi - 0x75], ah
inc esp
add eax, 0x8dff8800
jbe 0x406e22
or word [ebx + edx], ax
jb 0x40b628
shr di, 0x40
out dx, eax
inc eax
jmp dword [esi]
mov esi, dword [esi + 4]
mov esi, dword [esi]
jmp dword [esi]
mov ch, ch
jmp 0x40a289
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
pop edi
mov eax, ebx
pop esi
pop ebx
ret
mov ebx, dword [esi + 4]
mov eax, dword [ebp + 0x2c]
lea esi, [esi + 8]
mul byte [ebp + ebx]
call fcn.0040760f
add eax, 0x24448ffd
pop dword [esp - 4]
sbb eax, 0xcef4e800
invalid
js 0x420c38
jns 0x40a72b
xchg ebp, eax
xchg esp, eax
jns 0x420c38
and eax, 0x56006a01
call fcn.0040c2dd
push 1
push esi
call fcn.0040ca9f
push 1
push esi
call fcn.00420201
test ah, 0x8d
add esp, 0x18
jno 0x429935
jo 0x40a761
jl 0x40a713
sbb byte [ecx - 0xe317ff1], ah
add dword [eax], eax
jo 0x429935
xor al, 0x45
mov dh, dh
mov ebx, dword [esi + 4]
mov ebx, dword [ebp + ebx]
lea esi, [esi + 8]
mov dl, dl
inc word [ebx]
mov ebp, ebp
jmp dword [esi]
mov dword [ebp + 0x4c], eax
mov ebx, dword [ebp + 0x38]
mov ecx, dword [ebp + 0x30]
mov edx, dword [ebp + 0x34]
mov esi, dword [ebp + 0x44]
mov eax, eax
call fcn.00428318
fldcw word [ebp - 0x4341769a]
add byte [eax], al
add byte [edi], cl
test dword [0x7400005a], ebp
add bl, byte [esi]
fidiv dword [eax - 0x4e]
aas
inc ecx
add byte [eax], dh
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [0x2b00420c], ah
ljmp 0x41
push esi
jne 0x429d49
je 0x40d3d4
add dword [esp + edx*4 + 0xf], ebp
test byte [edi - 0x37], ch
add dword [eax], eax
je 0x429d49
xor al, 0xd0
xchg dh, bl
xchg bl, dh
mov eax, dword [esi + 4]
mov ebx, dword [esi + 8]
shr bx, 0x40
xchg dx, ax
xchg dx, ax
lea esi, [esi + 0xc]
stc
jmp 0x40eaa3
xor byte [edx], 0xe8
and eax, 0xf800019b
xor ecx, ecx
jb 0x41636b
mov cx, word [edi + 0x24]
push ecx
push esi
call fcn.00407eca
mov bh, bh
mov ebp, ebp
mov dx, word [edi + 0x18]
xchg bp, cx
xchg cx, bp
jmp 0x40d6b7
push edx
jno 0x422446
jo 0x40d6c3
push ebp
jo 0x422446
fldcw word [edi - 0x77]
test byte [edi], 0x82
adc eax, dword [eax]
add byte [eax], al
jae 0x40d6d8
adc eax, 0xf086f080
xchg al, dh
xchg dh, al
lea esi, [esi + 8]
jmp dword [esi]
jmp dword [esi]
jmp 0x407733
sub di, 0
xor word [ebx], ax
jb 0x41dc38
jmp dword [esi]
call fcn.00412ed7
jmp 0x418fdc
popfd
push ebx
pop ebx
mov ebx, 1
jno 0x40a286
jo 0x4134e4
cmpsd dword [esi], dword es:[edi]
pop edx
jo 0x40a286
fcmove st(0), st(1)
test eax, eax
jb 0x40d68c
jne 0x42ceb2
je 0x413500
add edx, dword [ebp + 0x23]
adc eax, 0x47f1cca1
mov eax, dword [0x47f1cc]
jmp 0x413506
add bl, ch
push eax
xchg bp, ax
xchg bp, ax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x47f1cc], ebx
mov ecx, dword [esi]
push 0xb
jmp 0x417f65
sub esi, dword [ecx - 0x792d769a]
loop 0x4134d2
aam 0xc0
in eax, dx
inc eax
mov eax, dword [esi + 4]
lea esi, [esi + 8]
mov edi, edi
mov eax, dword [eax]
mov dword [ebp + 0x50], esi
js 0x40b3ac
jns 0x413569
nop
cpuid
ret
jns 0x40b3ac
xor eax, 0x24448faa
cld
jb 0x40e090
jae 0x413581
cpuid
ret
lea esi, [esi + 8]
jmp 0x40e08a
mov dword [edi], ebx
jmp dword [esi]
push esi
push edi
test eax, eax
jb 0x417976
xchg edx, esi
xchg esi, edx
jne 0x416bec
je 0x4162fd
bound ebp, qword [edx - 0x18]
xchg edi, eax
aas
invalid
call 0x40a299
test eax, eax
jb 0x41cf86
jne 0x415cb3
je 0x416316
xor al, 0x37
shr byte [ebx], 1
mov cx, cx
mov eax, dword [ebp + 8]
push 0x10
jmp 0x41631f
push eax
call fcn.0040c2dd
add esp, 8
and eax, 0xffff
jb 0x41cfa2
pop edi
shl bl, 0x20
pop esi
call fcn.0040884e
add eax, 0xd3d988e2
pop ds
jmp dword [esi]
jne 0x4162e3
mov ax, ax
push 0x41e590
ret
jns 0x4163b6
cwde
je 0x41a538
add dword [eax], eax
fadd st(4)
mov al, byte [ebp + 0xc]
or dx, dx
add esp, 0xc
mov eax, eax
xchg edx, ecx
mov bx, bx
xchg ecx, edx
jmp 0x42ba07
mov dword [ebp + 0x2c], eax
mov ebp, ebp
mov dword [ebp + 0x34], edx
jmp dword [esi]
xchg di, si
xchg si, di
mov byte [esi + 0xbb], dl
mov ebp, ebp
mov word [esi + 0xbc], di
jne 0x42ee3e
je 0x41730e
lock and edi, dword [ecx - 0x14c072e6]
lea edi, [edi]
jmp 0x417311
push esi
call fcn.0040e0bc
mov byte fs:[eax], al
xor al, 0
add byte [eax], al
xor al, 0
add byte [eax], al
dec edx
lcall 0, 0x10040
sub al, 0
add byte [eax], al
arpl word [edi + 0x41], si
add byte [0xd8004174], bh
add dword [edx], 0x43
jae 0x417380
add byte [ebp - 0x659ad5ef], bl
inc ecx
add byte [eax], al
popal
add byte [eax + 0x34], al
add byte [ecx], ah
add byte [eax], al
mov esp, 0
adc byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
xor byte [eax], al
add byte [eax], al
call 0xcf41b42e
cwde
inc ecx
add byte [eax], dh
add byte [eax], al
add byte [eax + eax], ch
add byte [eax], al
jb 0x4173f2
inc eax
add byte [eax + eax], al
add byte [eax + eax], al
add byte [ecx + 0x2a], ah
inc ecx
add byte [eax + eax], cl
sub al, byte [ecx]
or al, 0
add byte [eax], al
sub al, 0
add byte [eax], al
cmc
inc eax
add byte [eax + eax], al
add byte [eax], al
xor byte [eax], al
add byte [eax], al
xchg ecx, eax
test byte [ecx], al
xor byte [eax], al
add byte [eax], al
sub al, 0
add byte [eax], al
and eax, 0xbb00420c
mov eax, dword [0x7ad80040]
inc ecx
add byte [ebx], cl
add byte [eax], al
add byte [eax + eax], ch
add byte [eax], al
lcall 0x8000, 0x61000041
xor al, 0
add byte [eax], al
add byte [ecx], ah
add byte [eax], al
or byte [eax], al
add byte [eax], al
add byte [eax], dl
add byte [eax], al
add byte [eax], al
add byte [eax + eax], ch
add byte [eax], al
xchg edi, eax
and al, byte [ecx]
and eax, 0x2800420c
and dword [ecx], eax
fdivr dword [edx + 0x41]
add byte [ecx], dl
add byte [eax], al
add byte [eax + eax], ch
add byte [eax], al
hlt
add bh, bh
inc dword [eax]
add byte [eax + eax], ch
add byte [eax], al
and eax, 0x4400420c
and dword [ecx], eax
jmp 0xef41b6cb
add byte [edi + edi*8 - 0x7434d8da], 0x46
add al, 0x8d
sbb ecx, dword [ecx + 0x85e8bdb]
jmp 0x41fb3f
mov si, si
mov cl, byte [ebp + 0xc]
mov dx, word [ebp + 0x10]
jno 0x41b101
jo 0x4182f9
sti
cmp dword [edi], ecx
add byte [edx], 0x2e
add byte [eax], al
jo 0x41b101
xor al, 0x4a
push 0x12
mov ecx, 0x500
xchg cl, dl
xchg dl, cl
mov edi, 0x48c200
push eax
push eax
rep stosd dword es:[edi], eax
shr ah, 0x40
shl bl, 0x20
push 0x47e010
js 0x41082e
jns 0x41832d
cpuid
ret
jns 0x41082e
mov dword [ecx], 0x41c313
add al, 0
add byte [eax], al
xchg dword [0x4cea0042], esi
fimul dword [ecx]
xor al, 0
add byte [eax], al
fdivr dword [edx + 0x41]
add dl, ch
dec esp
fimul dword [ecx]
xor al, 0
add byte [eax], al
mov dl, 0x3f
inc ecx
add byte [eax + eax], al
add byte [eax], dh
add byte [eax], al
add byte [0x8500420c], ah
xlatb
inc ecx
add cl, bl
out 0x42, eax
add byte [eax + eax], al
add byte [ebp - 0x66], ah
inc ecx
add byte [eax], al
inc eax
add byte [eax], al
xor byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], ah
xor byte [eax + eax], 0
add byte [eax], al
and dword [eax], eax
add byte [edx - 0x18000000], al
mov byte [eax], 0xd6
inc eax
add byte [eax], al
add byte [eax], al
sub eax, 0x5b000000
pushfd
inc ecx
add byte [eax], dh
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [ebx - 0x64], bl
inc ecx
add byte [eax], bh
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add cl, bl
out 0x42, eax
add byte [eax], al
add byte [eax], al
cmp esi, dword [edx + 0x40]
add byte [ebx + 0x40d8ae78], ah
add byte [eax + eax], ch
add byte [eax], al
sub al, 0
add byte [eax], al
and eax, 0xa000420c
xlatb
inc ecx
add bh, cl
cwde
inc ecx
add byte [eax], bh
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [ebx + 0x77], ah
inc ecx
add byte [esi - 0x27ffbf2d], bh
add dword [edx], 0xfffffffb
add dword [ecx], 0xffffff81
daa
jmp 0x41da5384
mov bl, bl
call fcn.0042a224
push 0x17e
push esi
jno 0x425c12
jo 0x418551
lea ecx, [edx - 0x68]
jo 0x425c12
fnstcw word [eax - 1]
and al, 0x5e
mov ebx, dword [esi + 4]
shl bx, 0x20
mov eax, dword [ebp + 0x2c]
shl eax, 0x20
mov edx, dword [ebp + 0x34]
lea esi, [esi + 8]
cmp bl, bl
push edx
pop edx
div word [ebx]
jno 0x416d52
mov bp, bp
jo 0x418586
nop
cpuid
ret
jo 0x416d52
or byte [ebx - 0x6d3ba75], 0x66
mov esi, esi
jb 0x41859a
aam 0xc2
scasd eax, dword es:[edi]
jb 0x42ae0e
and eax, 0x418deaf7
add byte [ecx], bh
add byte [eax], al
sub al, 0
add byte [eax], al
invalid
js 0x4182e5
mov edx, edx
jns 0x418fe8
jns 0x4182e5
jns 0x4182e5
add eax, 0x42e7d95b
add byte [eax], al
add byte [eax], al
cmp esi, dword [edx + 0x40]
add byte [0x4198cf1c], bl
add byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
add byte [ecx], al
and dword [ecx], eax
xchg esi, eax
and byte [ecx], al
insd dword es:[edi], dx
lodsb al, byte [esi]
inc edx
add byte [eax + edx*4], bl
inc ecx
add byte [edx - 0x44], al
insd dword es:[edi], dx
lodsb al, byte [esi]
inc edx
add byte [esi + 0x66004120], dl
mov ebx, ebx
jne 0x40fe8d
je 0x419e41
add dword [edx + 0xf], 0xffffff84
inc esi
pushal
invalid
je 0x40fe8d
add eax, 0x47e8bd8
shl dx, 0x20
lea esi, [esi + 8]
idiv word [ebx + edi]
shl bl, 0x20
mov dword [ebp + 0x2c], eax
mov dword [ebp + 0x34], edx
jmp dword [esi]
mov dword [ebp + 0x2c], eax
mov dword [ebp + 0x34], edx
jmp dword [esi]
fnstenv [esi + 0x66]
mov ecx, ecx
shl cl, 0x20
jmp 0x41b105
push eax
jne 0x42bfc8
shl ch, 0x20
je 0x41b115
add dword [ebx], ebp
jo 0x41b125
je 0x42bfc8
test byte [ebp - 0x25fffef2], ch
lodsd eax, dword [esi]
mov eax, dword [ebp + 0xc]
inc edi
fisubr dword [ebp + 0x470c458b]
jne 0x42d1d6
add dword [eax], eax
xchg ebp, edx
xchg edx, ebp
je 0x41b131
cpuid
xor eax, ebx
je 0x42d1d6
and eax, 0xf810f6a
add byte [eax], al
add byte [eax + 3], dh
adc al, 0x60
mov bx, bx
lea esi, [esi + 8]
jmp dword [esi]
cmp edi, 0xf0479ff
mov byte [0x890fc390], al
mov byte [0x34ffff81], al
sub dword [edi], ecx
mov ch, ch
add eax, 0xe6860000
xor al, 0x29
js 0x41b98f
xchg dh, ah
xchg ah, dh
jns 0x41b3ac
jle 0x41b38b
popal
sbb dword [edi], ecx
mov ebp, ebx
add eax, 0x2ac70000
push 2
shl ebp, 0x20
push esi
jne 0x418538
jns 0x41b98f
invalid
je 0x41b3c6
xchg esp, eax
xchg ebx, eax
add ch, byte [edi + ecx - 0x7c]
insb byte es:[edi], dx
sar edi, 1
invalid
je 0x418538
fld dword [edx + 0x6640eec0]
shl eax, 0x20
push eax
push esi
mov edx, edx
mov bl, bl
shr ah, 0x40
mov byte [esi + 0xba], cl
shl dl, 0x20
push 0x4090a3
ret
xor eax, eax
jb 0x416354
mov ebx, ebx
lea ebp, [ebp]
xchg esi, edx
xchg edx, esi
push 0x426340
ret
and bl, byte [esi]
mov ah, ah
mov eax, dword [ebp + 0x2c]
shr ecx, 0x40
mov edx, dword [ebp + 0x34]
idiv ebx
shr ebp, 0x40
lea ebp, [ebp]
mov dword [ebp + 0x2c], eax
mov dword [ebp + 0x34], edx
jmp dword [esi]
xor eax, 0xcd810f65
sbb eax, 0x370ffff
jmp 0x42d340
pop ebp
jno 0x419e37
jo 0x41fdb1
add ebp, dword [eax - 0x5f7f7ff1]
invalid
jo 0x419e37
mov dword [ecx], 0x7f87810f
invalid
jno 0x417d46
shl ch, 0x20
jo 0x41fdc8
nop
cpuid
ret 0x800f
jo 0x417d46
add eax, 0xe0c16654
and bh, bh
je 0x41fd9a
call 0x45c30d1e
sbb eax, 0x2700000
sbb eax, 0x3b800f89
sbb eax, 0xf6380000
xor dl, cl
jb 0x4215c6
and edi, edi
jno 0x41fdfd
invalid
jno 0x420d5d
xor al, 0x6b
jmp dword [esi - 4]
shr dword [ebx + edx], cl
jmp dword [esi]
stc
add dl, 0x80
mov byte [ebp + eax - 0x10], dl
mov dx, dx
inc eax
cmc
cmp edi, edi
jmp 0x429373
cmp esi, ebp
mov byte [0xa48e890f], al
add byte [eax], al
and eax, 0x419a6525
add byte [eax], al
inc ecx
add byte [eax + 0x3c], al
add byte [ecx], al
add byte [eax], al
add al, 0
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax + eax], bh
add byte [eax], al
cli
mov byte [eax], 0xfc
mov cl, 0x42
add byte [esi + 0x300040d8], ch
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [0xf200420c], ah
aam 0x40
add dh, dl
inc eax
add byte [eax], al
add byte [eax], al
xor dword [eax], eax
add byte [eax], al
arpl word [edi + 0x41], si
add cl, ch
push ss
inc edx
add al, bl
add dword [edx], 0x2b
push ss
inc edx
add byte [edx - 0x54], ah
pushal
pop eax
inc ecx
add byte [eax], cl
add byte [eax], al
add byte [eax + eax], dh
add byte [eax], al
iretd
push esi
call fcn.00428861
push 1
jmp 0x42244f
push esi
call fcn.00416187
mov eax, dword [ebp + 0x10]
push eax
jmp 0x42245b
push esi
call fcn.0041c177
add esp, 0x38
xchg di, dx
xchg dx, di
jmp fcn.00425c86
adc ch, 0x8d
and al, 4
ja 0x4172ed
mov al, al
shr al, 0x40
shr esi, 0x40
jbe 0x4230bd
in al, 0x68
ror byte [edi], 1
xchg byte [edx], ch
inc edx
invalid
jbe 0x4172ed
invalid
jmp 0x4238b2
push edi
call fcn.00425910
and eax, 0xffff
jb 0x42ae40
push edi
mov dword [esi + 0x28], eax
call fcn.0041e0f1
add dh, 0
add esp, 8
jmp fcn.00406567
mov edx, edx
mov edi, dword [ebp + 8]
dec eax
cmp eax, 0xe9
ja 0x406559
jbe 0x423f19
push 0xf
mov byte [0xfc931c3], al
and byte [ebx], 0xf6
invalid
xor ecx, ecx
jb 0x413544
mov cl, byte [eax + 0x409ebe]
jmp dword [ecx*4 + 0x409e76]
add byte [eax], cl
add byte [eax], al
dec eax
add byte [eax], al
add byte [eax - 1], ah
inc ecx
add ah, cl
inc esi
inc edx
add byte [edi], cl
mov byte [0xff60c390], al
inc ecx
add byte [eax + 0x5004113], dl
add al, 0x89
shl byte [esi + 0x3d], 3
add byte [edi], cl
test dword [ebp + 0x7400008b], edx
add al, 0xf8
cmp ax, 3
jne 0x42d277
je 0x4246e8
clc
jge 0x4246b7
jbe 0x4246f8
jno 0x40d3c8
sbb edx, 0x70fffe8c
add dl, bh
jo 0x4246f2
xlatb
invalid
jo 0x40d3c8
invalid
mov dword [0x75fffe6e], eax
add edx, ebx
bound ecx, qword [ecx + 0xf35fb80]
test byte [ebp + 0x75fffe6e], dl
add al, 0x5f
cpuid
ret
pop dword [esp - 4]
xor ebx, ebx
jb 0x428b6e
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
shl dl, 0x20
mov esi, eax
add cx, 0xdc4a
sub cx, 0xdc4a
test esi, esi
jb 0x4230a4
jne 0x42922e
xchg ebp, esi
xchg esi, ebp
je 0x425b95
jle 0x425b2c
xor eax, 0x66966605
xchg esi, eax
xchg si, ax
xchg si, ax
pop esi
shr ch, 0x40
mov eax, 1
pop ebx
jne 0x42922b
mov ch, ch
je 0x425bb1
cpuid
xlatb
ret
je 0x42922b
or bl, 0x8d
and al, 4
push edx
mov bx, bx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jb 0x418597
jne 0x42df21
shr ch, 0x40
je 0x425bde
xor eax, 0x12c35ddc
sbb ebp, ecx
cmp al, byte [ebx - 0x22270000]
jmp dword [esi]
pop ebp
ret
call fcn.0040f436
mov ax, word [edi + 0x2c]
jmp 0x425c1c
push eax
jmp 0x425c1f
push esi
call fcn.00419b0e
mov ecx, dword [edi + 0x40]
push ecx
call fcn.0042742b
sub dl, 0x6a
add dword [esi - 0x18], edx
dec esi
add eax, 0x4f8bffff
inc eax
mov di, di
jmp 0x425c40
push ecx
push esi
shr esi, 0x40
call fcn.0041c177
add esp, 0x20
jmp fcn.00425c86
mov byte [esi + 0xba], bl
xchg di, dx
xchg dx, di
mov byte [esi + 0xbb], al
jne 0x40e59e
je 0x426286
pop ebx
and eax, 0x8312840f
invalid
je 0x40e59e
invalid
js 0x406dbf
mov ebp, ebp
jns 0x4267a6
ficomp word [ebp - 0x76f0d965]
jns 0x406dbf
invalid
jne 0x4246d8
je 0x426f22
aas
out 0x66, eax
shl edx, 0x20
shl dx, 0x20
push esi
mov bp, bp
call fcn.0040d2af
mov cl, byte [ebp + 0xc]
xchg edx, eax
xchg edx, eax
shr bl, 0x40
mov dx, dx
mov bp, bp
mov dx, word [ebp + 0x10]
push eax
pop eax
push eax
push ecx
pop ecx
jmp 0x426f47
push esi
xchg ecx, edx
xchg edx, ecx
xchg ecx, edx
xchg edx, ecx
mov byte [esi + 0xba], cl
lea ebx, [ebx]
mov byte [esi + 0xbb], 0
shl esi, 0x20
push eax
mov ax, cx
pop eax
mov word [esi + 0xbc], dx
mov dl, dl
call fcn.004271b8
jmp 0x426798
invalid
cmp ax, 4
jne 0x426f18
je 0x428d90
mov dword [esi - 0x7d7bf06d], ebp
loope 0x428d94
je 0x426f18
invalid
push dword [eax + edx*4]
xor al, 0x90
lcall 0x8000, 0x61000041
xor byte [eax], al
add byte [eax], al
add byte [ecx], ah
add byte [eax], al
test byte [eax], al
add byte [eax], al
add byte [eax], dl
add byte [eax], al
add byte [eax], al
add byte [eax + eax], ch
add byte [eax], al
call 0xd942ce83
out 0x42, eax
add byte [eax], al
add byte [eax], al
cmp esi, dword [edx + 0x40]
add byte [edi], bh
fmul st(7)
cwde
inc ecx
add byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
add dl, ch
lea eax, [ecx]
ja 0x428daa
add byte [eax], al
sub al, 0
add byte [eax], al
cmc
inc eax
add byte [eax], al
add byte [eax], al
sub al, 0
add byte [eax], al
invalid
ret
jmp 0x42922f
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x47f0be
shl edx, 0x20
call fcn.00415477
lea esp, [esp + 4]
jno 0x4238b1
jo 0x429254
cpuid
ret
jo 0x4238b1
fstp dword [ebx + 0x424648d]
xchg di, ax
xchg di, ax
ja 0x41eed1
jbe 0x429270
and cl, byte [ecx - 0x4f]
into
jbe 0x41eed1
invalid
cmp eax, 8
ja 0x40c8fd
jbe 0x429384
mov esp, 0xfc3a20f
xchg byte [ebx + 0x35], dh
invalid
jbe 0x40c8fd
fiadd dword [edi - 0x170f0015]
mov gs, word [eax - 2]
jmp dword [0x7abce84a]
pop edi
pop esi
shl dh, 0x20
pop ebp
ret
call 0x40ca34
xor eax, 0x126ff4d
fadd st(0), st(0)
in al, 0x20
movzx ebx, bx
js 0x415a9a
mov dx, dx
jns 0x429d69
cwde
and al, 0xce
mov word [edi], cs
mov dword [ebx], ebp
mov ebp, 0x84c7fffe
mov ebx, dword [ebp + 0x40]
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
jns 0x415a9a
mov dword [ebx + ecx*4 + 0x568b405d], 0x4468b08
lea esi, [esi + 0xc]
mov dword [ebx + edx], eax
jmp dword [esi]
mul bl
mov dword [ebp + 0x2c], eax
mov eax, eax
jmp dword [esi]
push ebp
push cs
ja 0x4192bf
jbe 0x42ae4e
int3
jbe 0x4192bf
fsub dword [edx]
mov cl, byte [ebp + 0xc]
shl cx, 0x20
mov dx, word [ebp + 0x10]
jmp 0x42ae62
push eax
shl ax, 0x20
jmp 0x42ae69
push esi
xchg ch, bh
xchg bh, ch
mov bx, bx
mov byte [esi + 0xba], cl
mov byte [esi + 0xbb], 0
mov word [esi + 0xbc], dx
call fcn.004214f1
mov cx, cx
mov al, byte [ebp + 0xb]
jmp 0x42ae92
push esi
jne 0x42626a
je 0x42aea0
mov dh, 0x65
sub edi, esi
je 0x42626a
xor byte [esi + 0x66], 0xf7
and al, 0x3b
mov ax, ax
mov dword [ebp + 0x2c], eax
mov dword [ebp + 0x34], edx
shr eax, 0x40
mov dh, dh
jmp dword [esi]
jmp 0x41fdb9
jmp 0x42bfc9
push esi
mov byte [esi + 0xba], cl
mov dx, dx
ja 0x42c441
jbe 0x42bfe0
stosb byte es:[edi], al
invalid
jbe 0x42c441
invalid
mov di, di
xchg ah, bh
xchg bh, ah
mov eax, dword [0x47f374]
test eax, eax
jb 0x41aa11
je 0x42cef0
shl cx, 0x20
jne 0x42ced3
nop
cpuid
ret 0x5c7
mov dword [0x47f374], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.00474ac4
add esp, 4
call fcn.00474ace
mov edx, dword [esi]
push eax
push 1
push edx
call fcn.004087f3
call fcn.0041471b
mov esp, fs
inc edx
add byte [eax + eax], cl
add byte [eax], al
sub al, 0
add byte [eax], al
jb 0x42cf92
inc eax
add byte [eax + eax], ch
add byte [eax], al
sub al, 0
add byte [eax], al
invalid
and al, 0xc3
salc
inc eax
add byte [eax], al
add byte [eax], al
xor dword [eax], eax
add byte [eax], al
mov ch, 0xdf
inc edx
add byte [eax], al
add byte [eax], al
iretd
cmp edi, eax
jb 0x40c043
jae 0x42d1e4
inc ecx
xchg esi, eax
les ebp, [eax]
lea ebp, [ebp]
jno 0x413dfa
jo 0x42d1f3
nop
cpuid
ret
jo 0x413dfa
mov si, si
mov cl, byte [ebp + 0xc]
shr edx, 0x40
mov dx, word [ebp + 0x10]
call fcn.0042ee7a
and eax, 0xffd2897d
cmc
mov ebp, esp
push ebx
shl ebp, 0x20
jmp 0x42d297
push esi
mov esi, dword [ebp + 0xc]
clc
xor eax, eax
jb 0x4263cb
xor ebx, ebx
jb 0x41b39a
jmp 0x42d2ae
push edi
mov al, byte [esi + 0x16]
jmp 0x423f02
jmp 0x40a709
shr dh, 0x40
mov eax, dword [ebp + 0x10]
mov cx, cx
pop ebp
ret
stc
jb 0x42ee45
ljmp 0x3682:0xfc3a20f
jb 0x428d81
fcmovu st(0), st(0)