Function at 0x8447a6
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2b0
push ebx
push esi
push edi
mov dword [ebp - 0x2a0], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x1bc], 4
mov eax, dword [ebp + 8]
mov dword [0x8200d4], eax
cmp dword [0x81f860], 0
je 0x83fcb0
cmp dword [ebp + 0xc], 0
jne 0x83fcb0
cmp dword [0x826704], 0
je 0x83fcb0
push 0x824d50
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x823510], eax
mov ecx, dword [0x826704]
push ecx
call fcn.0082e05a
cmp dword [0x826710], 0
je 0x83fcbe
jmp 0x8446e0
mov edx, dword [0x826710]
add edx, 1
mov dword [0x826710], edx
cmc
js 0x83fcdf
lea edi, [edi + 0x2d82]
lea edi, [edi - 0x2d82]
jns 0x83fcdf
mov edx, 0x6808ec83
scasd eax, dword es:[edi]
dec edi
test byte [eax], al
sub esp, 8
push 0x844faf
push dword fs:[0]
mov dword fs:[0], esp
js 0x83fcf7
or ebx, 0
sub esp, 0
jge 0x83fd0b
jb 0x83fd01
xchg ebx, edi
xchg ebx, edi
lea edi, [edi]
jl 0x83fd0b
call 0x9258e53a
invalid
call fcn.00828ee4
xchg edx, edx
jle 0x83fd14
jno 0x83fd25
pushf
jb 0x83fd1a
not eax
not eax
popf
mov esi, esi
jo 0x83fd25
mov eax, 0x4f7005c7
add byte [eax], 1
add byte [eax], al
add byte [ecx], bh
mov dword [0x824f70], 1
jns 0x83fd31
add edx, 0
jo 0x83fd36
jge 0x83fd38
jg 0x83fd49
pushf
xor edi, dword [esp]
xor edi, dword [esp]
popf
je 0x83fd46
jle 0x83fd49
add eax, 0x8160f0b8
add byte [section.0000012], ch
mov eax, 0x8160f0
sub eax, section.0000012
mov dword [0x82678c], eax
jnp 0x83fd5a
or eax, eax
ror ecx, 0x12
ror ecx, 0xe
js 0x83fd6c
xchg edx, edx
mov edi, edi
jns 0x83fd6c
cmp dword [eax - 0x75], 0x82678c0d
add byte [ecx + 0x7e1], al
cmp byte [ecx + 5], 0x49
mov ecx, dword [0x82678c]
and ecx, 0x80000007
jns 0x83fd7f
dec ecx
or ecx, 0xfffffff8
inc ecx
mov edx, dword [0x82678c]
sub edx, ecx
mov dword [0x82678c], edx
ror esp, 0
ror esi, 0x1c
ror esi, 4
cmp esp, 0x111a
jg 0x83fda3
mov ebx, ebx
jle 0x83fda3
mov ebx, 0x13190e8
add byte [ebp], dh
call 0x852f38
jne 0x83fdaa
cmp edx, dword [esp]
jo 0x83fdbe
lea ebx, [ebx + 0x6f63]
lea ebx, [ebx - 0x6f63]
jno 0x83fdbe
ljmp 0xff00:0x824d6068
push 0x824d60
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x824d6c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x824d78
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x824d88
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x824d94
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x824da0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x824dac
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x824dbc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x824dcc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x824ddc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x824de8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x824df8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x824e04
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, ebx
rol edi, 0
lea ecx, [ecx + 0xab3]
sub ecx, 0xab3
jne 0x83fe7f
pushf
add esi, 0x11be
sub esi, 0x11be
popf
lea edi, [edi + 0x1f67]
lea edi, [edi - 0x1f67]
je 0x83fe7f
mov edi, 0xffc37ae8
dec dword [ebp + 0x180489]
add byte [ebp - 0x180377], cl
push dword [esi]
call 0x83c1fe
lea ecx, [ecx + 0x1804]
lea ecx, [ecx - 0x1804]
jbe 0x83fe92
mov esi, esi
jg 0x83fe96
je 0x83fe9d
mov edi, edi
jne 0x83fe9d
mov edi, 0x822b94a1
add byte [ebx + 0x81ffd4], ah
mov eax, dword [0x822b94]
mov dword [0x81ffd4], eax
and ecx, 0xffffffff
jno 0x83feac
neg ebx
neg ebx
jo 0x83fecd
pushf
cmp edx, dword [esp + 0x10]
lea edx, [edx + 0x1084]
lea edx, [edx - 0x1084]
popf
jmp 0x83fec8
lea ebx, [ebx]
jno 0x83fecd
add eax, 0x2b980d8b
add byte [eax], 0x89
or eax, 0x81f810
mov ecx, dword [0x822b98]
mov dword [0x81f810], ecx
ror ebx, 9
rol ebx, 9
jbe 0x83feee
jnp 0x83fee3
xchg edi, ecx
xchg edi, ecx
jno 0x83fee9
jo 0x83feeb
ja 0x83feee
xor eax, 0x2b9c158b
add byte [eax], 0x89
adc eax, 0x81f814
mov edx, dword [0x822b9c]
mov dword [0x81f814], edx
clc
jb 0x83fefd
xor edx, dword [esp]
xor edx, dword [esp]
lea edi, [edi]
jbe 0x83ff10
mov edx, edx
js 0x83ff0b
je 0x83ff0d
ja 0x83ff10
mov esi, 0xa068406a
sub eax, dword [edx - 0x7e79800]
add dword [eax], 0xffdd3ee8
inc dword [ebx + 0xe80cc4]
add byte [eax], al
add byte [ebx + 0x4c8504c4], al
and al, 8
push 0x40
push 0x822ba0
push 0x81f818
call fcn.0083dc5f
add esp, 0xc
call 0x83ff29
add esp, 4
test dword [esp + 8], ecx
jp 0x83ff32
lea edi, [edi + 0x557]
lea edi, [edi - 0x557]
jno 0x83ff49
mov esp, esp
jae 0x83ff44
nop
jo 0x83ff49
add eax, 0x2be0a196
add byte [eax], 0xa3
test byte [eax], al
add byte [eax], 0x83
out dx, al
add byte [ebp + 0x7408245c], al
add byte [ecx + ecx + 0x74], dh
add bl, ch
add byte [esi], bh
mov eax, dword [0x822be0]
mov dword [0x820084], eax
sub esi, 0
test dword [esp + 8], ebx
je 0x83ff5c
je 0x83ff67
je 0x83ff60
jmp 0x83ff62
jle 0x83ff64
jne 0x83ff67
or dword [ebx - 0x7dd41bf3], 0x880d8900
add byte [edx - 0x14a7b000], al
add cl, al
ret 0xc10c
mov ecx, dword [0x822be4]
mov dword [0x820088], ecx
push eax
pop eax
jmp 0x83ff77
rol edx, 0xc
ror edx, 0xc
ja 0x83ff90
pushf
jno 0x83ff83
jle 0x83ff85
jle 0x83ff87
jne 0x83ff89
popf
lea ebx, [ebx]
jbe 0x83ff90
or dword [ebx - 0x7dd417eb], 0x8c158900
add byte [edx - 0x7eff8500], al
cli
mov eax, dword [0x8d000061]
wait
stosd dword es:[edi], eax
daa
add byte [eax], al
mov edx, dword [0x822be8]
mov dword [0x82008c], edx
jnp 0x83ff9e
cmp edx, 0x61a1
lea ebx, [ebx + 0x27ab]
lea ebx, [ebx - 0x27ab]
jle 0x83ffc0
pushf
jp 0x83ffb6
popf
nop
jb 0x83ffbb
lea eax, [eax]
jg 0x83ffc0
lcall 0xa300, 0x822beca1
nop
add byte [edx + 0x440d8b00], al
xor al, byte [edx - 0x4ff27700]
add byte [edx + 0x48158b00], al
xor al, byte [edx - 0x4bea7700]
add byte [edx - 0x59f35f00], al
add dword [eax], 0x8200b8a3
add byte [ebx - 0x7e59eff3], cl
add byte [ecx - 0x7dff43f3], cl
add byte [edi + 0xe8e4], al
add byte [eax], al
mov eax, dword [0x822bec]
mov dword [0x820090], eax
mov ecx, dword [0x823244]
mov dword [0x8200b0], ecx
mov edx, dword [0x823248]
mov dword [0x8200b4], edx
mov eax, dword [0x81a60c]
mov dword [0x8200b8], eax
mov ecx, dword [0x81a610]
mov dword [0x8200bc], ecx
xchg esp, esp
call 0x83ffff
add esp, 4
xchg ecx, ecx
shl esp, 0
jne 0x840029
pushf
jbe 0x84000d
lea edx, [edx + 0x4766]
lea edx, [edx - 0x4766]
jbe 0x84001b
ror esi, 0
popf
jbe 0x840022
ja 0x840024
jge 0x840026
je 0x840029
sub eax, 0xd658
call 0x84d686
mov dword [0x826708], eax
push 0x94
push 0
push 0x81f868
call fcn.00847175
add esp, 0xc
cmp esp, 0x733a
jae 0x84005c
jb 0x840051
jl 0x840053
xchg edi, edx
xchg edi, edx
jb 0x84005c
sub eax, 0x5c7992a
push 0x940081f8
add byte [eax], al
add cl, al
ret 0xc11c
mov dword [0x81f868], 0x94
rol edx, 0x1c
rol edx, 4
jo 0x84006e
cmp eax, dword [esp + 0x10]
jl 0x840074
jb 0x840091
pushf
jne 0x84007a
jl 0x84007c
lea esi, [esi + 0x6852]
sub esi, 0x6852
popf
jbe 0x84008c
jl 0x84008e
jae 0x840091
add eax, 0x81f86868
add al, ch
call dword [eax]
add byte [edx], bh
push 0x81f868
call 0x84519a
jp 0x84009d
jne 0x84009f
ror edi, 0
jl 0x8400d7
pushf
lea ebx, [ebx + 0x902]
lea ebx, [ebx - 0x902]
test edx, 0x713c
jnp 0x8400ba
xor ebx, 0x2f0a
xor ebx, 0x2f0a
popf
lea ecx, [ecx + 0x7fdf]
lea ecx, [ecx - 0x7fdf]
jge 0x8400d7
add eax, 0x9c68
add byte [edx], ch
push 0x9c
push 0
push 0x81fa10
call fcn.00847175
add esp, 0xc
lea ebx, [ebx]
rol eax, 0xe
rol eax, 0x12
test ecx, 0x4456
jp 0x84010f
pushf
mov esi, esi
lea esp, [esp]
xor edi, 0
popf
jns 0x840109
lea esp, [esp]
jnp 0x84010f
mov esi, 0xfa1005c7
add dword [eax], 0x9c
mov dword [0x81fa10], 0x9c
mov edi, edi
jge 0x840125
xchg esp, esp
nop
mov esp, esp
jl 0x840125
jmp 0x827e1191
push 0x81fa10
call 0x84519a
lea esi, [esi]
xchg esp, esp
call 0x840138
add esp, 4
jne 0x840152
pushf
test dword [esp], edi
cld
jle 0x840145
test dword [esp + 8], esi
popf
jle 0x84014d
lea ebx, [ebx]
je 0x840152
mov esp, 0x11468
add byte [edx], ch
push 0x114
push 0
push 0x81f8fc
call fcn.00847175
add esp, 0xc
dec eax
inc eax
cmp eax, dword [esp + 0x10]
jns 0x840176
mov esp, esp
jmp 0x840172
js 0x840176
mov edi, 0xfc05c7c1
clc
add dword [eax], 0x114
mov dword [0x81f8fc], 0x114
jo 0x840182
jl 0x840184
jle 0x840186
jg 0x84019f
lea edi, [edi]
lea esp, [esp]
lea edi, [edi + 0x1ff6]
lea edi, [edi - 0x1ff6]
jp 0x84019b
jle 0x84019f
lcall 0x81, 0xf8fc6815
push 0x81f8fc
call fcn.0084cd44
test esp, 0x50c3
cmp ebx, dword [esp]
call 0x8401b7
add esp, 4
push eax
pop eax
jg 0x8401d0
pushf
mov edi, edi
jl 0x8401c4
rol esp, 0
xchg edx, edx
popf
js 0x8401cd
jle 0x8401d0
lcall 0x6a00, 0x11c68
add byte [eax - 0x54], ch
cli
add dword [eax], 0x6f94e8
add byte [ebx + 0x4c330cc4], al
and al, 4
push 0x11c
push 0
push 0x81faac
call fcn.00847175
add esp, 0xc
xor ecx, dword [esp + 4]
xor ecx, dword [esp + 4]
jge 0x8401ee
shl esp, 0
nop
jp 0x8401f9
jmp 0x8401f6
jnp 0x8401f9
add eax, 0xfaac05c7
add dword [eax], 0x11c
mov dword [0x81faac], 0x11c
add ebx, 0
jns 0x840208
sub ebx, 0
jle 0x840227
pushf
jae 0x840211
sub esp, 0
xor ebx, 0x3c29
xor ebx, 0x3c29
popf
je 0x840224
jg 0x840227
ljmp 0xe800:0x81faac68
push 0x81faac
call fcn.0084cd44
jge 0x840233
cmp eax, dword [esp]
push edx
pop edx
je 0x840249
pushf
mov edx, edx
cmp ecx, dword [esp + 8]
popf
jp 0x840246
jne 0x840249
mov ecx, 0xff9375e8
jmp dword [ebx + 0x81fbc8]
call 0x8395c3
mov dword [0x81fbc8], eax
lea eax, [eax + 0x6392]
lea eax, [eax - 0x6392]
test esi, 0x7f42
or ebx, ebx
and eax, 0xffffffff
jge 0x840273
jle 0x84026e
jno 0x840270
jl 0x840273
mov esp, 0xe0bde8
add byte [ebx + 0x81fbcc], ah
call 0x84e335
mov dword [0x81fbcc], eax
test ebx, eax
xor esi, 0
jle 0x840298
pushf
jl 0x840288
shl edx, 0
test dword [esp], esi
popf
lea esp, [esp]
jne 0x840295
jg 0x840298
mov eax, 0xb0e8006a
xor al, 1
add byte [ebx + 0x81fbd0], ah
push 0
call 0x85374f
mov dword [0x81fbd0], eax
xchg ecx, edx
xchg ecx, edx
sub ebx, 0
rol edi, 0x11
rol edi, 0xf
jl 0x8402bc
xchg edx, eax
xchg edx, eax
jne 0x8402b7
jns 0x8402b9
jge 0x8402bc
sub eax, 0xc5e8006a
jbe 0x8402c2
push 0
call 0x847988
mov dword [0x81fbd4], eax
add byte [ebx + 0x81fbd4], ah
jnp 0x8402ca
xchg esi, eax
xchg esi, eax
dec ecx
inc ecx
jbe 0x8402d0
jle 0x8402f6
pushf
cmp edi, dword [esp + 4]
test dword [esp + 0x10], edx
neg eax
neg eax
nop
popf
jae 0x8402e5
jb 0x8402e7
lea edx, [edx + 0x65f3]
lea edx, [edx - 0x65f3]
jg 0x8402f6
call fcn.00850762
add byte [eax - 0x28], ch
sti
add dword [eax], 0xefe8006a
mov byte [eax], al
add byte [ebx + 0x81fcdc], ah
push 0x104
push 0x81fbd8
push 0
call fcn.00848bf6
mov dword [0x81fcdc], eax
xor edi, dword [esp + 0x10]
xor edi, dword [esp + 0x10]
jle 0x840316
lea edx, [edx]
lea edx, [edx + 0xd01]
lea edx, [edx - 0xd01]
js 0x840347
pushf
and ecx, 0xffffffff
cld
cmp ecx, dword [esp + 4]
jne 0x840332
popf
lea edx, [edx + 0x47ad]
lea edx, [edx - 0x47ad]
xchg ecx, edi
xchg ecx, edi
jns 0x840347
mov esi, 0x10468
add byte [eax - 0x20], ch
cld
add dword [eax], 0xb2e8006a
mov ecx, 0xe8a30000
inc byte [ecx + 0x7afcfd00]
add byte [ebx], dh
push 0x104
push 0x81fce0
push 0
call 0x84bd0a
mov dword [0x81fee8], eax
std
cld
jp 0x840361
jae 0x840363
ja 0x840365
jge 0x840387
pushf
add edi, dword [esp]
sub edi, dword [esp]
test esp, 0x77be
add esp, 0
call 0x84037d
lea esp, [esp + 4]
popf
nop
jl 0x840387
mov esi, 0x1307fe8
add byte [ebx + 0x81feec], ah
call 0x85340b
mov dword [0x81feec], eax
jg 0x840393
ja 0x8403b6
pushf
lea ebx, [ebx]
jo 0x84039b
jnp 0x84039d
not edi
not edi
popf
lea edx, [edx + 0x7fc5]
lea edx, [edx - 0x7fc5]
je 0x8403b1
jb 0x8403b3
jbe 0x8403b6
add eax, 0xfea773e8
jmp dword [ebx + 0x81fef0]
call 0x82ab2e
mov dword [0x81fef0], eax
shr edx, 0
jno 0x8403cc
xchg esp, esp
xchg ecx, ecx
jo 0x8403cc
mov eax, 0xfeabd0e8
jmp dword [ebx + 0x81fef4]
call 0x82afa1
mov dword [0x81fef4], eax
mov eax, eax
call 0x8403dd
lea esp, [esp + 4]
neg eax
neg eax
test dword [esp], edx
jp 0x8403f4
mov ebx, ebx
jnp 0x8403ee
jno 0x8403f0
jnp 0x8403f4
sub eax, 0xe8f66a70
pop ebp
jecxz 0x8403fa
push 0xfffffffffffffff6
call 0x84e758
mov dword [0x81fef8], eax
add byte [ebx + 0x81fef8], ah
rol esp, 0
jp 0x840418
lea esi, [esi + 0x3ac9]
lea esi, [esi - 0x3ac9]
jg 0x840413
jo 0x840415
jnp 0x840418
add eax, 0x39e8f56a
jecxz 0x84041e
push 0xfffffffffffffff5
call 0x84e758
mov dword [0x81fefc], eax
add byte [ebx + 0x81fefc], ah
cmp ebx, dword [esp]
xor esp, 0
jnp 0x840438
mov edx, edx
xchg ebx, ebx
lea esp, [esp]
mov esp, esp
jp 0x840438
ljmp 0xe3:0x19e8f46a
push 0xfffffffffffffff4
call 0x84e758
mov dword [0x81ff00], eax
lea esp, [esp]
jbe 0x840453
xchg edi, eax
xchg edi, eax
jno 0x84044d
nop
ja 0x840453
or ebx, 0xc725e8b2
add byte [eax], al
call 0x84cb7d
mov dword [0x81ff04], eax
cmp esp, 0x2cfd
xor edx, 0x6e08
xor edx, 0x6e08
mov edi, edi
not ebx
not ebx
jns 0x84047e
xchg esp, esp
mov ebx, ebx
js 0x84047e
mov esi, 0x81ff0c68
add al, ch
push ss
jle 0x840488
push 0x81ff0c
call 0x85829e
add cl, bh
stc
jo 0x8404a8
pushf
call 0x840492
add esp, 4
call 0x84049a
lea esp, [esp + 4]
test dword [esp], ecx
popf
jno 0x8404a5
jno 0x8404a8
mov esi, 0x81ff5068
add al, ch
dec ebp
push cs
add dword [eax], eax
push 0x81ff50
call 0x8512ff
lea edi, [edi + 0x6c66]
lea edi, [edi - 0x6c66]
or eax, 0
cmc
je 0x8404c4
jne 0x8404cd
jb 0x8404c8
je 0x8404cd
lcall 0xac, 0xfae834c3
add byte [esi - 0x5d], ah
mov eax, 0x850081ff
inc esp
and al, 0x10
call 0x84b1cc
mov word [0x81ffb8], ax
test dword [esp + 0x10], eax
test esp, 0x7b54
je 0x8404f7
pushf
rol edi, 0x15
ror edi, 0x15
mov esp, esp
lea ebx, [ebx]
popf
jge 0x8404f4
jne 0x8404f7
lcall 0xa300, 0x1038fe8
mov esp, 0xb0081ff
push dword [ebp]
call 0x85088b
mov dword [0x81ffbc], eax
or edi, edi
jne 0x840505
nop
jnp 0x840527
pushf
test esp, 0x6c38
ror ecx, 0
nop
popf
jp 0x840518
lea esi, [esi + 0x117e]
lea esi, [esi - 0x117e]
jp 0x840527
mov ecx, 0x15e1fe8
add byte [esi - 0x5d], ah
sar bh, 0x81
add byte [ebx + 0x1c76ffe0], al
call 0x85634b
mov word [0x81ffc0], ax
and eax, 0xffffffff
jbe 0x840553
pushf
nop
jnp 0x84053c
lea esi, [esi + 0x5505]
sub esi, 0x5505
xchg edx, ecx
xchg edx, ecx
popf
jno 0x840550
ja 0x840553
lcall 0xa3ff, 0xff9a35e8
invalid
call 0x839f8d
mov dword [0x81ffc4], eax
push 0x24
push 0
push 0x81ff94
call fcn.00847175
add esp, 0xc
push 0x81ff94
call fcn.0083eecc
call fcn.0082be2b
test eax, eax
je 0x8405a5
cmp dword [0x81ffac], 0x182
je 0x840599
cmp dword [0x81ffac], 0x1e6
jne 0x8405a3
mov dword [0x826714], 1
jmp 0x8405d5
xor edx, edx
mov dx, word [0x81ff94]
test edx, edx
jne 0x8405cb
xor eax, eax
mov ax, word [0x81ffb4]
cmp eax, 5
jge 0x8405c9
mov dword [0x826714], 1
jmp 0x8405d5
mov dword [0x826714], 1
mov ecx, dword [0x826714]
mov dword [0x81ffcc], ecx
push 0x190
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
mov dword [0x8200d8], eax
push 0x190
push 0
mov edx, dword [0x8200d8]
push edx
call fcn.00847175
add esp, 0xc
cmp dword [0x82327c], 1
jne 0x840741
push 5
push 0x824e10
push 0x82325c
call fcn.0083b02a
add esp, 0xc
test eax, eax
jne 0x84068b
push 0xa
call fcn.0084fa2d
add esp, 4
test eax, eax
jne 0x840686
push 0xb
call fcn.0084fa2d
add esp, 4
test eax, eax
jne 0x840686
push 0x14
call fcn.0084fa2d
add esp, 4
test eax, eax
jne 0x840686
mov dword [0x826730], 0x23
mov dword [0x825154], 0x13
mov dword [0x825448], 1
mov dword [0x824f74], 1
jmp 0x8447a6
jmp 0x840741
push 5
push 0x824e18
push 0x82325c
call fcn.0083b02a
add esp, 0xc
test eax, eax
jne 0x8406ee
push 0xb
call fcn.0084fa2d
add esp, 4
test eax, eax
jne 0x8406ec
push 0x14
call fcn.0084fa2d
add esp, 4
test eax, eax
jne 0x8406ec
mov dword [0x826730], 0x23
mov dword [0x825154], 0x13
mov dword [0x825448], 1
mov dword [0x824f74], 1
jmp 0x8447a6
jmp 0x840741
push 5
push 0x824e20
push 0x82325c
call fcn.0083b02a
add esp, 0xc
test eax, eax
jne 0x840741
push 0x14
call fcn.0084fa2d
add esp, 4
test eax, eax
jne 0x840741
mov dword [0x826730], 0x23
mov dword [0x825154], 0x13
mov dword [0x825448], 1
mov dword [0x824f74], 1
jmp 0x8447a6
test esi, edi
xor edi, 0x767
xor edi, 0x767
ja 0x840759
jbe 0x840753
jno 0x840755
jbe 0x840759
lcall 0x8d00, 0x6a2f6a2f
test dword [esi + edi*8], edx
invalid
push 0x2f
push 0
lea eax, [ebp - 0x1ec]
push eax
call fcn.00847175
add esp, 0xc
ror esp, 0
rol ebx, 0x12
rol ebx, 0xe
stc
jb 0x84078c
xchg edi, edi
lea edx, [edx + 0x103a]
lea edx, [edx - 0x103a]
nop
jae 0x84078c
mov edi, 0x85c6a5cd
aaa
invalid
mov byte [ebp - 0x1c9], 0x54
test dword [esp + 4], eax
nop
clc
jo 0x84079b
ja 0x8407af
lea edx, [edx + 0x14ac]
lea edx, [edx - 0x14ac]
mov ecx, ecx
jbe 0x8407af
mov ebp, 0x3385c627
invalid
mov byte [ebp - 0x1cd], 0x78
cmp edi, dword [esp + 0x10]
test ecx, 0x4642
jg 0x8407cd
pushf
cmc
popf
nop
jne 0x8407ca
jle 0x8407cd
mov eax, 0xfe3c85c6
invalid
mov byte [ebp - 0x1c4], 0x75
cmp eax, dword [esp + 4]
jo 0x8407da
jle 0x8407dc
jle 0x8407ff
pushf
lea edi, [edi]
jge 0x8407e4
test edi, eax
lea edi, [edi + 0x6176]
sub edi, 0x6176
popf
lea esp, [esp]
jae 0x8407f9
lea esp, [esp]
jg 0x8407ff
lcall 0xffff, 0xfe1c85c6
pop esi
mov byte [ebp - 0x1e4], 0x5e
nop
add eax, dword [esp]
sub eax, dword [esp]
jg 0x840817
jl 0x840811
jnp 0x840813
jle 0x840817
xor eax, 0x3f85c6ae
invalid
mov byte [ebp - 0x1c1], 0x75
xor ecx, dword [esp + 4]
xor ecx, dword [esp + 4]
stc
add edi, 0x7026
sub edi, 0x7026
jae 0x840842
jmp 0x840837
xchg edi, esi
xchg edi, esi
jge 0x84083d
xchg esi, eax
xchg esi, eax
jb 0x840842
mov eax, 0xfe2585c6
invalid
mov byte [ebp - 0x1db], 0x4d
lea eax, [eax + 0x3ec5]
lea eax, [eax - 0x3ec5]
xor ecx, edi
xor ecx, edi
jp 0x84086a
pushf
jp 0x84085f
popf
jbe 0x840863
je 0x840865
jae 0x840867
jnp 0x84086a
mov ecx, 0xfe3a85c6
invalid
mov byte [ebp - 0x1c6], 0x64
ror ecx, 0x11
rol ecx, 0x11
xor esi, dword [esp + 4]
xor esi, dword [esp + 4]
xchg edx, edx
jg 0x84088c
mov eax, eax
jle 0x840887
mov ecx, ecx
jle 0x84088c
call 0xfe9c8e56
invalid
mov byte [ebp - 0x1e8], 0x5a
push edi
pop edi
je 0x840897
jb 0x8408a7
lea esi, [esi]
jae 0x84089d
xchg ebx, edi
xchg ebx, edi
jle 0x8408a3
jae 0x8408a7
sbb dword [eax], 0xfe1485c6
invalid
mov byte [ebp - 0x1ec], 0x4c
cmp esi, edi
xor ebx, dword [esp]
xor ebx, dword [esp]
ror esp, 0
js 0x8408d4
pushf
nop
add ebx, dword [esp]
sub ebx, dword [esp]
and edi, 0xffffffff
test esp, 0x45f8
popf
jp 0x8408d1
jns 0x8408d4
add eax, 0xfe2e85c6
invalid
mov byte [ebp - 0x1d2], 0x70
call 0x8408e0
add esp, 4
jo 0x8408fa
pushf
test esp, 0x5196
test ebx, 0x3884
popf
mov esp, esp
jno 0x8408fa
add eax, 0xfe1785c6
invalid
mov byte [ebp - 0x1e9], 0x48
xor edx, 0x239f
xor edx, 0x239f
cmp esi, ecx
lea ecx, [ecx]
mov esi, esi
jp 0x84091c
xchg esp, esp
jl 0x840919
jnp 0x84091c
mov esi, 0xfe3085c6
invalid
mov byte [ebp - 0x1d0], 0x47
js 0x840925
jle 0x84092d
xchg esp, esp
jg 0x84092d
mov edi, 0x4185c66b
invalid
mov byte [ebp - 0x1bf], 0x32
xchg edx, eax
xchg edx, eax
xor esp, 0
nop
not edi
not edi
jle 0x840951
pushf
ja 0x840944
popf
lea esp, [esp]
lea esp, [esp]
jb 0x84094e
jg 0x840951
add eax, 0xfe2885c6
invalid
mov byte [ebp - 0x1d8], 0x61
lea edi, [edi + 0xc30]
lea edi, [edi - 0xc30]
test esi, edx
xchg ecx, eax
xchg ecx, eax
ja 0x84096a
je 0x84098a
pushf
lea esi, [esi + 0x32e]
sub esi, 0x32e
jo 0x84097c
jo 0x84097e
test eax, 0x7ba0
popf
ja 0x840987
jne 0x84098a
sub eax, 0xfe3e85c6
invalid
mov byte [ebp - 0x1c2], 0x74
jae 0x840993
shl esp, 0
rol edi, 0x14
ror edi, 0x14
shr edx, 0
jg 0x8409a8
jl 0x8409a3
jmp 0x8409a5
jle 0x8409a8
xor eax, 0xfe3d85c6
invalid
mov byte [ebp - 0x1c3], 0x77
ror edi, 0xe
rol edi, 0xe
mov esp, esp
and esi, 0xffffffff
jg 0x8409bc
jge 0x8409dc
pushf
cld
lea esi, [esi]
test esp, 0x342e
popf
xchg ebx, ebx
lea ecx, [ecx + 0x5efa]
lea ecx, [ecx - 0x5efa]
jl 0x8409dc
sub eax, 0xfe1a85c6
invalid
mov byte [ebp - 0x1e6], 0x56
cmp esp, 0x22b8
add ecx, 0
or edx, edx
neg esi
neg esi
jno 0x840a01
xchg edi, edx
xchg edi, edx
jbe 0x8409fa
jmp 0x8409fc
jb 0x8409fe
jo 0x840a01
mov edi, 0xfe1f85c6
invalid
mov byte [ebp - 0x1e1], 0x55
jbe 0x840a0a
jb 0x840a0c
sub eax, 0
dec esi
inc esi
js 0x840a28
pushf
ror esi, 7
rol esi, 7
xor eax, esi
xor eax, esi
jl 0x840a21
popf
xchg esp, esp
jns 0x840a28
mov ebx, 0xfe2d85c6
invalid
mov byte [ebp - 0x1d3], 0x66
cmp ebx, dword [esp + 4]
jne 0x840a35
jns 0x840a44
pushf
ja 0x840a3b
popf
mov ebx, ebx
jbe 0x840a41
js 0x840a44
mov esp, 0xfe3585c6
invalid
mov byte [ebp - 0x1cb], 0x65
jns 0x840a4d
js 0x840a5d
pushf
xchg ebx, ebx
test dword [esp], eax
popf
jle 0x840a5a
jns 0x840a5d
mov ebx, 0xfe1e85c6
invalid
mov byte [ebp - 0x1e2], 0x49
ror edi, 0x1a
ror edi, 6
std
cld
add esi, dword [esp]
sub esi, dword [esp]
xor edi, 0
jb 0x840a92
pushf
lea edi, [edi]
lea eax, [eax]
push eax
add eax, 0x3acb
ror eax, 3
pop eax
popf
jmp 0x840a8b
jge 0x840a8d
jl 0x840a8f
jae 0x840a92
mov esi, 0xfe3985c6
invalid
mov byte [ebp - 0x1c7], 0x70
jle 0x840a9b
test esp, 0x20dc
je 0x840aa3
or edi, 0
jl 0x840abf
pushf
ror ecx, 9
ror ecx, 0x17
xor esi, eax
xor esi, eax
popf
jbe 0x840ab8
mov edi, edi
xchg edi, edi
jge 0x840abf
mov ecx, 0xfe2c85c6
invalid
mov byte [ebp - 0x1d4], 0x77
ror eax, 3
rol eax, 3
rol esp, 0
jae 0x840ad8
lea edx, [edx]
mov edi, edi
jb 0x840ad8
mov esi, 0xfe2685c6
invalid
mov byte [ebp - 0x1da], 0x53
jno 0x840ae1
add eax, dword [esp]
sub eax, dword [esp]
jae 0x840ae9
test esp, 0x1e14
ja 0x840b00
test edi, eax
lea ebx, [ebx + 0x3953]
sub ebx, 0x3953
test esp, 0x124
ja 0x8446ff
ja 0x8446f8
mov ebx, ebx
lea edx, [edx]
jbe 0x8446ff
mov esi, 0x5010458b
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [0x823308]
mov dword [0x826ac4], eax
cld
ror edi, 0xe
ror edi, 0x12
ror eax, 0
jle 0x844722
jbe 0x844730
pushf
cld
popf
jb 0x84472b
mov esp, esp
ja 0x844730
add dword [ebx - 0x7e5b63c3], 0x63750000
cmp dword [0x81a49c], 0
jne 0x84479c
cmp dword [0x824f70], 0
je 0x84479c
test dword [esp + 0xc], eax
shl eax, 0
push edx
add edx, 0x26d
ror edx, 0x1a
pop edx
jle 0x844756
jbe 0x84476c
pushf
xchg ecx, eax
xchg ecx, eax
push eax
pop eax
or ebx, 0
popf
mov edi, edi
jg 0x844767
xchg esi, esi
ja 0x84476c
mov ebx, 0xd9c18151
inc esi
add byte [eax], al
push ecx
add ecx, 0x46d9
ror ecx, 5
pop ecx
nop
jg 0x844788
pushf
shr esp, 0
xchg ecx, ecx
popf
je 0x844785
jle 0x844788
xor eax, 0x58f64
add byte [eax], al
add byte [ebx + 0x5c70cc4], al
jo 0x8447e5
pop dword fs:[0]
add esp, 0xc
mov dword [0x824f70], 0
add byte [eax], 0
add byte [eax], al
add byte [ecx + 0x826ac4], ah
mov eax, dword [0x826ac4]
jmp 0x844da3
xor eax, eax
mov al, byte [0x822b38]
test eax, eax
jne 0x8447bb
call fcn.00846a4b
mov dword [0x82671c], eax
cmp dword [0x81f878], 2
jne 0x8447ea
cmp dword [0x81f86c], 6
jne 0x8447ea
cmp dword [0x81fffc], 0
je 0x8447ea
call fcn.0083144a
mov dword [0x825160], eax
call fcn.0082b3e0
mov dword [0x82515c], eax
push 0xa1
push 0x8165b0
lea ecx, [ebp - 0x290]
push ecx
call fcn.0083dc5f
add esp, 0xc
mov dword [ebp - 0x1b8], 0
jmp 0x84481e
mov edx, dword [ebp - 0x1b8]
add edx, 1
mov dword [ebp - 0x1b8], edx
cmp dword [ebp - 0x1b8], 0xa
jge 0x8448db
mov eax, dword [ebp - 0x1b8]
shl eax, 2
mov ecx, dword [ebp + eax*4 - 0x290]
xor ecx, 0xab576c41
mov edx, dword [ebp - 0x1b8]
shl edx, 2
mov dword [ebp + edx*4 - 0x290], ecx
mov eax, dword [ebp - 0x1b8]
shl eax, 2
mov ecx, dword [ebp + eax*4 - 0x28c]
xor ecx, 0xab5ece77
mov edx, dword [ebp - 0x1b8]
shl edx, 2
mov dword [ebp + edx*4 - 0x28c], ecx
add edi, 0
shl esi, 0
jne 0x84488a
mov edx, edx
nop
lea esp, [esp]
jo 0x844887
je 0x84488a
mov esi, 0xfe48858b
invalid
mov eax, dword [ebp - 0x1b8]
shl eax, 2
mov ecx, dword [ebp + eax*4 - 0x288]
xor ecx, 0xab633a25
mov edx, dword [ebp - 0x1b8]
shl edx, 2
mov dword [ebp + edx*4 - 0x288], ecx
mov eax, dword [ebp - 0x1b8]
shl eax, 2
mov ecx, dword [ebp + eax*4 - 0x284]
xor ecx, 0xab572a32
mov edx, dword [ebp - 0x1b8]
shl edx, 2
mov dword [ebp + edx*4 - 0x284], ecx
jmp 0x84480f
call fcn.008312d0
mov dword [0x826720], eax
jge 0x8448e7
jle 0x8448f0
xchg edx, edx
jl 0x8448ed
jg 0x8448f0
mov eax, 0x54483d83
add byte [eax], 0
cmp dword [0x825448], 0
jne 0x844918
lea edx, [edx + 0x5aa2]
sub edx, 0x5aa2
ror esp, 0
lea esp, [esp]
cmc
jle 0x844913
je 0x844910
jg 0x844913
mov esp, 0xaa84e8
add byte [ebx - 0x367cff0d], al
add byte [esi + 7], dh
call 0x84f39c
xor ebx, 0
or ecx, 0
jbe 0x844927
nop
xchg esp, esp
ja 0x844927
xor eax, 0x743d8354
dec edi
add byte [eax], 0
cmp dword [0x824f74], 0
jne 0x844bd3
nop
add ecx, 0
add edx, 0x5481
sub edx, 0x5481
js 0x844964
pushf
xor edx, dword [esp]
xor edx, dword [esp]
and esi, esi
call 0x844955
add esp, 4
add esp, 0
popf
js 0x84495f
jne 0x844961
jns 0x844964
mov ebp, 0x82516ca1
add byte [ebx + 0x8266f8], ah
mov eax, dword [0x82516c]
mov dword [0x8266f8], eax
shl esp, 0
lea edx, [edx + 0x69e8]
lea edx, [edx - 0x69e8]
shl esp, 0
je 0x84499f
pushf
ror ecx, 0x19
ror ecx, 7
call 0x84498f
lea esp, [esp + 4]
sub esi, 0
popf
je 0x84499a
jp 0x84499c
jne 0x84499f
sub eax, 0x516c0d8b
add byte [eax], 3
or eax, 0x8266f0
mov ecx, dword [0x82516c]
add ecx, dword [0x8266f0]
mov dword [0x8266f4], ecx
add eax, dword [esp]
sub eax, dword [esp]
and edi, edi
jo 0x8449dd
pushf
lea eax, [eax + 0x5b08]
lea eax, [eax - 0x5b08]
call 0x8449ce
lea esp, [esp + 4]
popf
js 0x8449d6
jne 0x8449d8
mov ecx, ecx
jno 0x8449dd
add eax, 0xbf505157
scasd eax, dword es:[edi]
dec edi
test byte [eax], al
push edi
push ecx
push eax
mov edi, 0x844faf
shl esi, 0
std
cld
jnp 0x844a03
pushf
jmp 0x8449f0
popf
lea ebx, [ebx + 0x833]
lea ebx, [ebx - 0x833]
xchg esp, esp
jp 0x844a03
mov esi, 0x4f703d80
add byte [eax], 0
cmp byte [0x824f70], 0
je 0x844a33
jno 0x844a0e
lea eax, [eax + 0x66d6]
sub eax, 0x66d6
je 0x844a2e
lea esi, [esi + 0x7459]
lea esi, [esi - 0x7459]
jne 0x844a29
jns 0x844a2b
jne 0x844a2e
mov edx, 0x845193bf
add byte [eax], bh
mov edi, 0x845193
js 0x844a35
xor eax, 0xd31
xor eax, 0xd31
xor esi, dword [esp]
xor esi, dword [esp]
jge 0x844a51
xchg esi, esi
jge 0x844a4b
xchg esi, esi
jl 0x844a51
add eax, 0xf40d8b1a
add byte [eax], 0x85
je 0x844a7e
mov ecx, dword [0x8266f4]
test dword [esp + 8], esi
js 0x844a6f
or byte [eax + 0x12], bh
pushf
and esi, esi
sub ebx, 0
popf
xchg esp, esp
xchg ecx, edi
xchg ecx, edi
jns 0x844a6f
lcall 0x79, 0x3d76cf3b
cmp ecx, edi
jbe 0x844ab0
jns 0x844a75
shr eax, 0
or esp, 0
jae 0x844a91
pushf
pushfd
ja 0x844a81
rol ecx, 0xc
rol ecx, 0x14
rol esi, 0
popf
jo 0x844a8e
jb 0x844a91
mov edi, 0x90b0cf2b
sub ecx, edi
mov al, 0x90
cld
test dword [esp + 0x10], ecx
jp 0x844a9c
nop
rol eax, 0xd
rol eax, 0x13
jle 0x844aae
ja 0x844aa7
jg 0x844aa9
jg 0x844aae
mov esp, 0xaaf3050b
rep stosb byte es:[edi], al
lea edx, [edx + 0x3a0b]
sub edx, 0x3a0b
cmp ecx, 0x4a5d
lea esp, [esp]
jns 0x844ad5
jl 0x844ac9
xchg ebx, ecx
xchg ebx, ecx
jnp 0x844acf
jg 0x844ad1
js 0x844ad5
mov eax, 0xf83d8b42
add byte [eax], 0x81
cld
jb 0x844b50
mov edi, dword [0x8266f8]
cmp esp, 0x7172
add byte [eax], al
inc edi
dec edi
ror ebx, 0
xchg edx, ebx
xchg edx, ebx
jp 0x844af3
lea eax, [eax]
xchg edi, edi
jnp 0x844af3
mov esp, 0x83fc22b9
add byte [edi], bh
mov ecx, entry0
jg 0x844afa
neg edx
neg edx
ror eax, 0x18
rol eax, 0x18
jl 0x844b21
pushf
test esp, 0x4131
stc
call 0x844b14
lea esp, [esp + 4]
popf
mov edi, edi
jge 0x844b1e
jge 0x844b21
mov ecx, 0x3e76cf3b
cmp ecx, edi
jbe 0x844b63
neg edx
neg edx
add edi, 0
xor esi, dword [esp + 4]
xor esi, dword [esp + 4]
and esp, 0xffffffff
jge 0x844b45
nop
mov ecx, ecx
jbe 0x844b3e
xchg ecx, ecx
jl 0x844b45
sub eax, 0xcf2b4134
sub ecx, edi
stc
and eax, eax
lea edx, [edx + 0x71f7]
lea edx, [edx - 0x71f7]
jnp 0x844b5e
jp 0x844b5a
jp 0x844b5e
mov edi, 0xfc90b007
mov al, 0x90
cld
rep stosb byte es:[edi], al
neg ecx
neg ecx
and eax, eax
ror esp, 0
ja 0x844b89
pushf
test ebx, 0x3e3b
call 0x844b7b
add esp, 4
popf
xchg esp, esp
jns 0x844b84
mov edx, edx
jbe 0x844b89
add eax, 0x83fcbebf
add byte [edi - 0x7c057806], al
int3
mov edi, 0x83fcbe
xchg edx, edi
xchg edx, edi
or esp, 0
inc eax
dec eax
jle 0x844b9f
jmp 0x844b9b
jg 0x844b9f
call 0x482b04c4
test byte [eax], al
mov ecx, 0x8447a6
or esp, 0
js 0x844bbc
pushf
push ebx
add ebx, 0x55ab
ror ebx, 9
pop ebx
popf
nop
jns 0x844bbc
mov ebp, 0x90b0cf2b
sub ecx, edi
mov al, 0x90
cld
rep stosb byte es:[edi], al
jg 0x844bc5
cmp edi, eax
push edi
pop edi
jno 0x844bd0
xchg esp, esp
jo 0x844bd0
sbb dword [eax + 0x59], 0x543d835f
push ecx
add byte [eax], 0
pop eax
pop ecx
pop edi
cmp dword [0x825154], 0
jne 0x844be6
mov dword [0x825154], 1
cmp dword [0x825154], 0x13
jne 0x844c31
mov edx, dword [0x825154]
sub edx, 1
imul edx, edx, 0x66
add edx, 0x820274
mov dword [ebp - 0x29c], edx
push 0x82325c
mov eax, dword [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x1a0]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea edx, [ebp - 0x1a0]
mov dword [ebp - 0x29c], edx
jmp 0x844c47
mov eax, dword [0x825154]
sub eax, 1
imul eax, eax, 0x66
add eax, 0x820274
mov dword [ebp - 0x29c], eax
cmp dword [0x82671c], 0
je 0x844d2e
cmp dword [0x820a08], 0
je 0x844d2e
mov ecx, dword [0x81f7dc]
and ecx, 0x80000000
test ecx, ecx
jne 0x844cdf
cmp dword [0x81fffc], 0
je 0x844cdf
push 0x200040
push 0x820234
mov edx, dword [ebp - 0x29c]
push edx
push 0
call dword [0x82671c]
cmp dword [0x81f878], 2
jne 0x844cdd
cmp dword [0x81f86c], 6
jne 0x844cdd
cmp dword [0x82515c], 0xffffffff
je 0x844cdd
push 0
lea eax, [ebp - 0x294]
push eax
push 0
push 0x200040
push 0x66
mov ecx, dword [ebp - 0x29c]
push ecx
push 0x3e
push 0x820234
mov edx, dword [0x82515c]
push edx
push 0
call dword [0x825160]
jmp 0x844cf5
push 0x40
push 0x820234
mov eax, dword [ebp - 0x29c]
push eax
push 0
call dword [0x82671c]
mov dword [0x826734], 0
jmp 0x844d10
mov ecx, dword [0x826734]
add ecx, 1
mov dword [0x826734], ecx
cmp dword [0x826734], 0xa1
jae 0x844d2c
mov edx, dword [0x826734]
mov byte [ebp + edx - 0x290], 0
jmp 0x844d01
jmp 0x844d5d
xor eax, eax
mov al, byte [0x822b38]
cmp eax, 1
jne 0x844d5d
cmp dword [0x820a08], 0
je 0x844d5d
mov ecx, dword [ebp - 0x29c]
push ecx
push 0x820234
push 0x824e28
call dword [sym.imp.MSVCRT.dll_printf]
add esp, 0xc
cmp dword [0x826700], 0
jne 0x844da1
cmp dword [0x826720], 0
je 0x844d7e
mov edx, dword [0x825154]
push edx
call dword [0x826720]
jmp 0x844da1
cmp dword [0x81f878], 2
jne 0x844d9a
cmp dword [0x81f86c], 6
jne 0x844d9a
push 0x63
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, 0x63
jmp 0x844da3
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc