Function at 0x746b65
Capabilities:
Execute anti-debugging instructions

Disassembly:
pushfd
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x3c]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg ebx, eax
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, eax
mov eax, dword [esp]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
rdtsc
mov ebx, ebx
and eax, 1
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x6c]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
xchg dword [esp], eax
xchg edx, eax
lea esp, [esp + 4]
xchg edx, eax
xchg dword [esp], edx
xchg edx, eax
lea esp, [esp + 4]
je 0x74648c
jne 0x746460
jmp 0x74648a
mov ecx, 0x8b57410f
jl 0x746455
inc ecx
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x49]
add al, 0x8d
jg 0x74647e
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
cmp ecx, edi
push esi
mov esi, edi
pop esi
jb 0x747068
xchg edx, ebx
mov ebx, dword [ebp - 8]
push edx
xchg edx, ebx
pop ebx
jmp 0x746fbc
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x10]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
je 0x74642c
jne 0x74642c
jmp 0x74642a
out 0, eax
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x40]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
je 0x747014
jne 0x747014
jmp 0x747012
pushfd
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x24]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
rdtsc
mov esi, esi
and eax, 1
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x78]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
xchg dword [esp], eax
xchg edx, eax
lea esp, [esp + 4]
xchg ecx, eax
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp + 4]
je 0x746588
jne 0x746570
jmp 0x746586
fst st(6)
xchg edx, ecx
mov ecx, dword [ebp - 4]
push edx
xchg edx, ecx
pop ecx
and eax, 0xfff
mov eax, eax
add eax, dword [esi]
pushfd
add ebp, 0x6e
popfd
lea ebp, [ebp - 0x6e]
add dword [eax + ebx], edx
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x42]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
jmp 0x747014
popfd
lea ecx, [ecx]
je 0x746534
jne 0x746534
jmp 0x746532
add byte [eax], al
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0xa]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
je 0x747034
jne 0x747034
jmp 0x747032
pushfd
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x74]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
mov eax, dword [esp]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
rdtsc
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x45]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
and eax, 1
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x49]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg edi, edx
xchg dword [esp], edi
xchg edi, edx
lea esp, [esp + 4]
xchg edi, eax
xchg dword [esp], edi
xchg edi, eax
lea esp, [esp + 4]
je 0x7466d0
jne 0x7466a4
jmp 0x7466ce
add byte [bx], cl
mov bh, 0x44
dec esi
or byte [ebx - 0x74357840], cl
enter 0xffffffffffff8752, 0xffffffffffffffca
movzx eax, word [esi + ecx*2 + 8]
mov eax, eax
xchg edx, ecx
mov ecx, eax
push edx
xchg edx, ecx
pop ecx
shr edx, 0xc
lea ebx, [ebx]
cmp edx, 3
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x5c]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
je 0x747034
cmp edx, 0xa
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x30]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
jne 0x747014
jmp 0x747034
popfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x4f]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
je 0x746648
jne 0x746648
jmp 0x746646
add byte [ebp - 0x361374ab], bl
popfd
push ebp
mov ebp, esp
leave
je 0x747068
jne 0x747068
jmp 0x747066
pushfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x25]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, eax
mov eax, dword [esp]
xchg ebx, edx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, edx
mov edx, dword [esp]
rdtsc
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x3c]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
and eax, 1
pushfd
add ebp, 0x29
popfd
lea ebp, [ebp - 0x29]
xchg edx, eax
xchg dword [esp], eax
xchg edx, eax
lea esp, [esp + 4]
xchg edx, eax
xchg dword [esp], edx
xchg edx, eax
lea esp, [esp + 4]
je 0x7467e8
jne 0x7467d0
jmp 0x7467e6
cmp al, 0
add esi, dword [edx]
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x69]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg ebx, eax
mov ebx, dword [esi + 4]
push eax
xchg ebx, eax
pop ebx
lea edx, [esi + 4]
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x79]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg dword [ebp - 8], edi
mov edi, edx
push dword [ebp - 8]
xchg dword [ebp - 8], edi
pop edi
test eax, eax
push ebx
mov ebx, ecx
pop ebx
jne 0x7470cc
xchg edi, ecx
mov ecx, dword [ebp + 8]
push edi
xchg edi, ecx
pop ecx
jmp 0x746ef4
popfd
mov esi, esi
je 0x74676c
jne 0x74676c
jmp 0x74676a
add byte [eax], al
popfd
push ebp
mov ebp, esp
leave
je 0x746fbc
jne 0x746fbc
jmp 0x746fba
pushfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0xe]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg edi, eax
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, eax
mov eax, dword [esp]
xchg ebx, edx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, edx
mov edx, dword [esp]
rdtsc
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x21]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
and eax, 1
mov ecx, ecx
xchg ebx, edx
xchg dword [esp], ebx
xchg ebx, edx
lea esp, [esp + 4]
xchg edi, eax
xchg dword [esp], edi
xchg edi, eax
lea esp, [esp + 4]
je 0x746940
jne 0x746914
jmp 0x74693e
cwde
add byte [ebp - 0x74af0788], cl
inc esp
and al, 4
lea edi, [eax - 8]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x39]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ecx, edi
mov edi, 0x5949
push ecx
xchg ecx, edi
pop edi
pushfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x50]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
push 0x5949
push eax
mov eax, dword [esp + 4]
xor ecx, eax
mov eax, dword [esp]
lea esp, [esp + 8]
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x74]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
shr edi, 1
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 6]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
je 0x746fbc
lea esp, [esp]
mov edx, edx
jmp 0x747068
popfd
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x2c]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
je 0x746880
jne 0x746880
jmp 0x74687e
out dx, al
add byte [ebp + 0x244c8b51], bl
add al, 0x8d
dec ecx
inc eax
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x40]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
je 0x7470cc
jne 0x7470cc
jmp 0x7470ca
pushfd
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x6e]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
rdtsc
push ebp
mov ebp, esp
leave
and eax, 1
push ebx
mov ebx, ecx
pop ebx
xchg ecx, edx
xchg dword [esp], ecx
xchg ecx, edx
lea esp, [esp + 4]
xchg edx, eax
xchg dword [esp], edx
xchg edx, eax
lea esp, [esp + 4]
je 0x746b0c
jne 0x746ae0
jmp 0x746b0a
add byte [eax], al
cmp dword [edi], 8
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x51]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
jle 0x746e8c
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, dword [edi + 0x5a]
xchg dword [esp], ecx
xchg esi, eax
mov esi, dword [edi + 0x56]
push eax
xchg esi, eax
pop esi
add eax, ebx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x13]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
mov eax, dword [esp]
lea eax, [edi + 0x72]
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x29]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
pushfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x6d]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
call fcn.00746a87
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x74]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
je 0x7469dc
jne 0x7469dc
jmp 0x7469da
in al, 0
popfd
lea eax, [eax]
je 0x746ef4
jne 0x746ef4
jmp 0x746ef2
pushfd
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x3a]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, eax
mov eax, dword [esp]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
rdtsc
pushfd
add ebp, 0x10
popfd
lea ebp, [ebp - 0x10]
and eax, 1
push ebp
mov ebp, esp
leave
xchg ecx, edx
xchg dword [esp], ecx
xchg ecx, edx
lea esp, [esp + 4]
xchg ecx, eax
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp + 4]
je 0x746c14
jne 0x746bf8
jmp 0x746c12
add byte [eax], al
xchg ecx, eax
mov ecx, dword [esi + 4]
push eax
xchg ecx, eax
pop ecx
lea edx, [esi + 4]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x6b]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [ebp - 4], ebx
mov ebx, ecx
push dword [ebp - 4]
xchg dword [ebp - 4], ebx
pop ebx
xchg dword [ebp - 8], ebx
mov ebx, edx
push dword [ebp - 8]
xchg dword [ebp - 8], ebx
pop ebx
test eax, eax
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x6b]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
je 0x746ef4
jmp 0x7470cc
popfd
push ecx
mov ecx, dword [esp + 0xb]
pop ecx
je 0x746b98
jne 0x746b98
jmp 0x746b96
add byte [eax], al
popfd
pushfd
add ebp, 0x60
popfd
lea ebp, [ebp - 0x60]
je 0x747164
jne 0x747164
jmp 0x747162
xchg esi, edi
xchg dword [esp], esi
xchg esi, edi
lea esp, [esp + 4]
xchg esi, eax
xchg dword [esp], eax
xchg esi, eax
lea esp, [esp + 4]
xor eax, eax
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x68]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg edi, ebx
xchg dword [esp], edi
xchg edi, ebx
lea esp, [esp + 4]
mov esp, ebp
pushfd
add ebp, 0x49
popfd
lea ebp, [ebp - 0x49]
xchg ecx, ebp
xchg dword [esp], ecx
xchg ecx, ebp
lea esp, [esp + 4]
ret
lodsb al, byte [esi]
add byte [ebx + 0x8d083f], al
cmp dword [edi], 8
lea eax, [eax]
jle 0x746e8c
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, dword [edi + 0x5a]
xchg dword [esp], edx
xchg ecx, eax
mov ecx, dword [edi + 0x56]
push eax
xchg ecx, eax
pop ecx
add eax, ebx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x27]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
lea eax, [edi + 0x72]
push ebp
mov ebp, esp
leave
xchg ebx, eax
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, eax
mov eax, dword [esp]
pushfd
push ebp
mov ebp, esp
leave
call fcn.00746f64
jno 0x746fef
add esi, dword [edx]
pushfd
add ebp, 0x6f
popfd
lea ebp, [ebp - 0x6f]
xchg edx, eax
mov edx, dword [esi + 4]
push eax
xchg edx, eax
pop edx
lea edx, [esi + 4]
pushfd
add ebp, 0x76
popfd
lea ebp, [ebp - 0x76]
xchg dword [ebp - 8], esi
mov esi, edx
push dword [ebp - 8]
xchg dword [ebp - 8], esi
pop esi
test eax, eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x76]
xchg dword [esp + 4], ecx
dec esp
and al, 4
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
jne 0x7470cc
xchg edi, edx
mov edx, dword [ebp + 8]
push edi
xchg edi, edx
pop edx
jmp 0x746ef4
cdq
add byte [ecx + 0x50], al
inc ecx
push eax
mov eax, dword [esp + 0xd]
pop eax
cmp ecx, edi
mov ebx, ebx
jb 0x747068
xchg edx, eax
mov eax, dword [ebp - 8]
push edx
xchg edx, eax
pop eax
jmp 0x746fbc
cmp al, 0
xchg edx, eax
mov eax, dword [ebp - 4]
push edx
xchg edx, eax
pop eax
and eax, 0xfff
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 9]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
add eax, dword [esi]
lea ebx, [ebx]
add dword [eax + ebx], edx
lea edx, [edx]
jmp 0x747014
adc dword [eax], eax
movzx eax, word [esi + ecx*2 + 8]
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x63]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg edx, ecx
mov ecx, eax
push edx
xchg edx, ecx
pop ecx
shr edx, 0xc
mov eax, eax
cmp edx, 3
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x2a]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
je 0x7464b8
cmp edx, 0xa
pushfd
add ebp, 0x78
popfd
lea ebp, [ebp - 0x78]
jne 0x7463b0
jmp 0x747034
add byte [eax], al
lea edi, [eax - 8]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x58]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
mov eax, 0x6081
push ecx
xchg ecx, eax
pop eax
pushfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 1]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
push 0x6081
push eax
mov eax, dword [esp + 4]
xor ecx, eax
mov eax, dword [esp]
lea esp, [esp + 8]
popfd
pushfd
add ebp, 0x2c
popfd
lea ebp, [ebp - 0x2c]
shr edi, 1
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x61]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
je 0x7466e8
lea esp, [esp]
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x63]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
jmp 0x7465b4
enter 0xffffffffffff93be, 0xffffffffffffff8b
pop esi
add al, 0x50
xchg ebx, eax
mov ebx, dword [esi + 4]
push eax
xchg ebx, eax
pop ebx
lea edx, [esi + 4]
lea ebx, [ebx]
xchg dword [ebp - 4], eax
mov eax, ecx
push dword [ebp - 4]
xchg dword [ebp - 4], eax
pop eax
xchg dword [ebp - 8], ecx
mov ecx, edx
push dword [ebp - 8]
xchg dword [ebp - 8], ecx
pop ecx
test eax, eax
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x27]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
je 0x74696c
jmp 0x746800
jne 0x7478c7
push ebx
xchg ebx, esi
pop esi
xchg ecx, edi
mov edi, ebx
push ecx
xchg ecx, edi
pop edi
push dword [edi + 0x12]
cmp ecx, dword [esp]
pushfd
not dword [esp + 4]
inc dword [esp + 4]
add ecx, dword [esp + 4]
popfd
lea esp, [esp + 4]
lea esi, [eax + ebx]
pushfd
add ebp, 0x11
popfd
lea ebp, [ebp - 0x11]
jmp 0x746b24
call fcn.00748744
and eax, 0xd8c96ce5
and dword [edx + edx*2 - 0x3b44cd43], 0x9c213d3b
inc edx
loope 0x7478b9
jo 0x74790a
mov ebx, 0x280a6c81
inc eax
xor al, 0x91
pop esi
mov gs, ecx
call fcn.007487d4
dec eax
xchg ecx, eax
xor al, 0x5a
inc ebp
sti
mov al, ch
sldt word gs:[eax]
in eax, 0x51
cli
ficom dword [ebx - 0x7bf42223]
call fcn.00748924
sub ebp, edx
inc edi
sub byte [edx + 0x1099e8], 0
mov ch, 0x4f
mov byte [0x1158e8f0], al
add byte [eax], al
invalid
push ebp
mov ebp, esp
leave
add dword [esp], 0xfffff7b1
xchg dword [esp], ecx
pushfd
add ebp, 0x6f
popfd
lea ebp, [ebp - 0x6f]
xchg dword [esp + 4], ecx
push ebp
mov ebp, esp
leave
xchg dword [esp], ecx
push eax
mov eax, dword [esp + 8]
pop eax
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x7e]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
jmp 0x7478f4