Function at 0x4711c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
xor edi, edi
cmp di, 3
mov dword [ebp - 4], edi
jae case.0x470c66.0
mov ecx, edi
and ecx, 0xffff
mov eax, ecx
imul eax, ecx
imul eax, ecx
imul eax, ecx
add eax, 7
sub eax, 7
je 0x47065c
dec eax
je 0x4705ee
sub eax, 0xf
je 0x470680
inc edi
jmp 0x4705b7
mov ecx, dword [ebp - 0x3a]
mov esi, 5
and ecx, 0xffff
xor ebx, ebx
mov eax, ecx
cdq
idiv esi
mov eax, ecx
mov ecx, 3
cmp edx, 2
cdq
setne bl
idiv ecx
dec edx
neg edx
sbb edx, edx
neg edx
or ebx, edx
je 0x470650
mov dx, word [ebp - 0x3c]
mov word [ebp - 0x3e], 1
mov word [ebp - 0x42], dx
dec ecx
inc ecx
jo 0x470630
add edi, 0
test dword [esp], esi
jp 0x470647
pushf
cmp ebx, edi
popf
jp 0x470640
jp 0x470642
xchg edi, eax
xchg edi, eax
jnp 0x470647
sub eax, 0x47fc7d8b
mov edi, dword [ebp - 4]
inc edi
jmp 0x4705b7
mov word [ebp - 0x3e], 0
inc edi
jmp 0x4705b7
inc word [ebp - 0x3a]
or ebx, ebx
add esi, 0
jl 0x47067a
pushf
mov esp, esp
test ebx, 0x4574
popf
jns 0x470675
jbe 0x470677
jge 0x47067a
mov esp, 0xff37e947
invalid
inc edi
jmp 0x4705b7
mov esp, esp
rol ecx, 1
ror ecx, 1
cld
jno case.0x470c0c.0
pushf
cmp esp, 0x669f
popf
jae 0x470695
lea edx, [edx + 0x4a99]
lea edx, [edx - 0x4a99]
jo case.0x470c0c.0
mov ebp, 0x8366ff33
dec dword [eax]
xor edi, edi
cmp di, 8
mov dword [ebp - 4], edi
jae 0x470f79
mov ecx, edi
and ecx, 0xffff
lea eax, [ecx + 1]
imul eax, ecx
cmp eax, 0x38
ja case.0x4706d2.7
xor ecx, ecx
mov cl, byte [eax + 0x470fe4]
jmp dword [ecx*4 + 0x470fc0]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x20], ecx
rol eax, 0x18
rol eax, 8
jne 0x4706ee
mov esi, esi
ja 0x4706eb
je 0x4706ee
jmp 0x8957f0b3
shr ecx, 0x10
mov dword [ebp - 0x14], ecx
jnp 0x4706f6
jnp 0x4706f8
lea edx, [edx + 0x1028]
lea edx, [edx - 0x1028]
jo 0x470716
pushf
shr eax, 0
xchg esp, esp
jge 0x47070f
popf
jns 0x470713
jno 0x470716
mov ecx, 0x8b8deb47
inc ebp
aam 0xf
scasd eax, dword es:[edi]
inc ebp
int3
inc edi
jmp 0x4706a6
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x34]
and eax, 0xffff
mov dword [ebp - 0x18], eax
lea ebx, [ebx + 0x1b66]
sub ebx, 0x1b66
or edx, 0
shl edi, 0
jnp 0x47075c
pushf
xor ecx, dword [esp]
xor ecx, dword [esp]
add edx, dword [esp]
sub edx, dword [esp]
ror ebx, 0x12
ror ebx, 0xe
cld
popf
xchg edx, edx
jo 0x470757
jmp 0x470759
jp 0x47075c
add eax, 0x47fc7d8b
mov edi, dword [ebp - 4]
inc edi
jmp 0x4706a6
mov ecx, dword [ebp - 0x20]
mov eax, ecx
shr eax, 0x10
mov dword [ebp - 0x24], eax
and esp, 0xffffffff
and ebx, ebx
call fcn.0047077a
add esp, 4
jne 0x47078d
pushf
nop
xor esp, 0
popf
lea esp, [esp]
je 0x47078d
sub eax, 0xff25c18b
inc dword [eax]
add byte [edi - 0x77], al
inc ebp
aam 0xe9
or edi, edi
invalid
mov eax, ecx
and eax, 0xffff
inc edi
mov dword [ebp - 0x2c], eax
jmp 0x4706a6
mov eax, dword [ebp - 0x24]
test eax, eax
je case.0x4706d2.7
mov edx, dword [ebp - 0x28]
imul edx, eax
mov eax, dword [ebp - 0x18]
and edx, 0xffff
add eax, edx
inc edi
mov dword [ebp - 0x18], eax
jmp 0x4706a6
mov dword [ebp - 0x34], 0x15a
shl esi, 0
jge 0x4707d5
jnp 0x4707d0
mov ecx, ecx
jl 0x4707d5
xor eax, 0x35d845c7
dec esi
add byte [eax], al
mov dword [ebp - 0x28], 0x4e35
inc edi
jmp 0x4706a6
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x18]
imul eax, dword [ebp - 0x2c]
and ecx, 0xffff
shl ecx, 0x10
inc edi
lea edx, [eax + ecx + 1]
mov dword [ebp - 0x14], edx
jmp 0x4706a6
mov eax, dword [ebp - 0x3e]
and eax, 0xffff
and eax, 0x80000001
jns 0x470816
dec eax
or eax, 0xfffffffe
inc eax
sub eax, 0
je 0x47085b
dec eax
je 0x470d49
inc edi
jmp 0x4706a6
mov eax, dword [ebp - 0x14]
and eax, 0x7fff
mov dword [ebp - 0x14], eax
xchg edx, ecx
xchg edx, ecx
or ecx, 0
jb 0x47083c
jno 0x470852
pushf
rol edx, 8
rol edx, 0x18
jb 0x470848
or esp, 0
popf
ja 0x47084f
jo 0x470852
mov edx, 0x47f84589
mov dword [ebp - 8], eax
inc edi
jmp 0x4706a6
mov ecx, dword [ebp - 8]
mov esi, 0xb
and ecx, 0xffff
xor ebx, ebx
mov eax, ecx
cdq
idiv esi
mov eax, ecx
mov ecx, 7
cmp edx, 5
cdq
sete bl
idiv ecx
xor eax, eax
cmp edx, 2
sete al
or ebx, eax
je 0x47089f
mov cx, word [ebp - 0x3c]
mov word [ebp - 0x3e], 1
mov word [ebp - 0x42], cx
jmp case.0x470c0c.0
mov eax, dword [ebp - 0x52]
and eax, 0xffff
cmp eax, 9
ja case.default.0x4708b0
jmp dword [eax*4 + 0x471020]
nop
nop
inc ecx
dec ecx
shr esp, 0
nop
jle 0x4708db
pushf
clc
or eax, 0
push edx
add edx, 0x19c7
ror edx, 0xd
pop edx
popf
lea eax, [eax]
jne 0x4708d8
jg 0x4708db
mov esi, 0xafec158b
inc ebp
add byte [ecx + 0x449058], ah
mov edx, dword [0x45afec]
mov eax, dword [0x449058]
lea ecx, [eax + edx]
mov eax, dword [eax + edx + 0x10]
test eax, eax
je 0x470be8
cmp dword [ecx], 0
je 0x470969
mov esp, esp
and esp, 0xffffffff
jnp 0x47090d
jle 0x470903
lea ebx, [ebx]
jg 0x470907
jp 0x470909
jp 0x47090d
mov esp, 0x8b018bea
xor eax, 0x45afec
mov eax, dword [ecx]
mov esi, dword [0x45afec]
add eax, esi
jne 0x470919
push esi
pop esi
xor edx, ebx
xor edx, ebx
add ebx, 0x588a
sub ebx, 0x588a
jne 0x470939
jae 0x47092f
jne 0x470931
jbe 0x470933
jb 0x470935
je 0x470939
mov ebx, 0x388362
cmp dword [eax], 0
je 0x47094e
mov dword [eax], 0
mov edx, dword [eax + 4]
add eax, 4
test edx, edx
jne 0x47093e
xchg edi, eax
xchg edi, eax
ja 0x470963
pushf
xor edi, dword [esp]
xor edi, dword [esp]
popf
jne 0x47095e
mov edi, edi
jbe 0x470963
mov esp, 0x1c7
add byte [eax], al
mov dword [ecx], 0
mov eax, dword [ecx + 0x24]
add ecx, 0x14
test eax, eax
jne 0x4708f5
jmp 0x470be8
nop
jmp 0x470be8
nop
nop
stc
jp 0x47099c
pushf
mov esp, esp
lea esp, [esp]
or eax, 0
jno 0x47098f
popf
mov esp, esp
jno 0x470995
xchg ebx, edx
xchg ebx, edx
jnp 0x47099c
mov ebp, 0x246e990
add byte [eax], al
nop
jmp 0x470be8
nop
jmp 0x470be8
nop
jmp 0x470be8
nop
jmp 0x470be8
cmc
test esi, eax
jp case.default.0x4708b0
pushf
cld
dec edx
inc edx
clc
popf
ja 0x4709c3
mov esp, esp
jnp case.default.0x4708b0
mov eax, 0xccfc190
nop
ror edi, 0xc
ror edi, 0x14
je 0x4709d1
test edx, ebx
and esp, 0xffffffff
jno 0x4709fb
pushf
jmp 0x4709dc
popf
lea ecx, [ecx + 0x639c]
lea ecx, [ecx - 0x639c]
lea edi, [edi + 0x4525]
lea edi, [edi - 0x4525]
jno 0x4709f8
jo 0x4709fb
mov esp, 0xafec0d8b
inc ebp
add byte [ebx + 0x44905815], cl
add byte [ebp - 0x74eff5bc], cl
dec esp
or dl, byte [eax]
mov ecx, dword [0x45afec]
mov edx, dword [0x449058]
lea eax, [edx + ecx + 0x10]
mov ecx, dword [edx + ecx + 0x10]
test ecx, ecx
je 0x470be8
mov dword [ebp - 4], eax
ror ebx, 6
ror ebx, 0x1a
xor edi, dword [esp]
xor edi, dword [esp]
ror eax, 5
ror eax, 0x1b
test dword [esp], eax
jl 0x470a40
pushf
shr edx, 0
popf
nop
jns 0x470a3b
xchg esi, esi
jge 0x470a40
mov ecx, 0x4548c4a1
add byte [ebx], dh
inc dword [ebp - 0x1b827640]
mov eax, dword [0x4548c4]
xor edi, edi
test eax, eax
mov dword [ebp - 0x1c], edi
jle 0x470ade
mov esi, 0x44a968
cmc
je 0x470a5a
jnp 0x470a7b
pushf
xor edx, dword [esp]
xor edx, dword [esp]
xor edx, dword [esp + 0x10]
xor edx, dword [esp + 0x10]
and esp, 0xffffffff
cmc
popf
jno 0x470a74
jge 0x470a76
jb 0x470a78
jp 0x470a7b
mov esp, 0x8bfc458b
adc eax, 0x45afec
mov eax, dword [ebp - 4]
mov edx, dword [0x45afec]
mov ecx, dword [eax - 4]
add ecx, edx
push ecx
push esi
call fcn.00464ed0
add esp, 8
test eax, eax
je 0x470ac3
mov eax, dword [0x4548c4]
inc edi
add esi, 0xcc
cmp edi, eax
jl 0x470a57
mov dword [ebp - 0x1c], edi
jmp 0x470ade
nop
push 0x4597f8
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x470be8
nop
jmp 0x470be8
mov dword [ebp - 0x1c], edi
and ebx, 0xffffffff
jge 0x470acb
jbe 0x470ad7
xchg ebx, ebx
jb 0x470ad1
jne 0x470ad3
ja 0x470ad7
mov esp, 0xd045c7e6
add dword [eax], eax
add byte [eax], al
mov dword [ebp - 0x30], 1
shl esp, 0
or edi, edi
xor ecx, 0
or edx, edx
jg 0x470af9
pushf
jp 0x470aee
popf
jg 0x470af2
lea ebx, [ebx]
jno 0x470af6
jle 0x470af9
mov edi, 0x85d0458b
ror byte [edi], 0x84
rol byte [eax], cl
add byte [eax], al
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x470bd6
mov esi, dword [ebp - 4]
mov ebx, dword [0x45afec]
mov edx, dword [esi - 4]
add edx, ebx
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
rol ecx, 2
ror ecx, 2
xor edi, 0
je 0x470b38
pushf
rol edx, 0x11
ror edx, 0x11
and eax, 0xffffffff
popf
xchg esp, esp
xchg ebx, eax
xchg ebx, eax
jne 0x470b38
jmp 0xdd229c7
mov ebx, dword [esi]
mov ecx, dword [0x45afec]
add ebx, ecx
dec edi
inc edi
lea ecx, [ecx]
test esp, 0x4d09
inc eax
dec eax
jae 0x470b5b
xchg edi, esi
xchg edi, esi
jo 0x470b56
jae 0x470b58
jb 0x470b5b
mov ebp, 0x74003b83
jbe 0x470aec
cmp dword [ebx], 0
je 0x470bd6
mov ecx, dword [ebp - 0x1c]
mov eax, ecx
shl eax, 4
add eax, ecx
lea esi, [eax + eax*2]
dec ebp
in al, 0x8b
rol ecx, 0xe0
add al, 3
ror dword [ebp - 0x107cbfcc], 0
sub edi, 0
clc
test dword [esp + 0x10], esi
call 0x470b7a
add esp, 4
jne 0x470b89
je 0x470b81
jo 0x470b83
ja 0x470b85
je 0x470b89
add eax, 0xa9038bf0
add byte [eax], al
add byte [eax - 0xdaf88c], al
inc dword [eax]
add bl, ch
or cl, byte [ebx + 0x45afec0d]
add byte [ebp - 0x74fdf7bc], cl
adc al, 0xb5
test eax, 0x52500044
mov eax, dword [ebx]
test eax, 0x80000000
je 0x470b99
and eax, 0xffff
jmp 0x470ba3
mov ecx, dword [0x45afec]
lea eax, [eax + ecx + 2]
mov edx, dword [esi*4 + 0x44a964]
push eax
push edx
call fcn.0047c6d0
mov dword [ebx], eax
ror eax, 0x1d
ror eax, 3
jb 0x470bc3
jle 0x470bbd
jp 0x470bbf
jae 0x470bc3
add eax, 0x3b83e3
cmp dword [ebx], 0
je 0x470f91
mov eax, dword [ebx + 4]
add ebx, 4
test eax, eax
jne 0x470b6d
mov eax, dword [ebp - 4]
add eax, 0x14
mov dword [ebp - 4], eax
cmp dword [eax], 0
jne 0x470a1a
xor edx, edx
mov dword [ebp - 4], edx
mov ecx, edx
and ecx, 0xffff
lea eax, [ecx + 3]
imul eax, ecx
cmp eax, 0x12
ja case.0x470c0c.1
xor ecx, ecx
mov cl, byte [eax + 0x47105c]
jmp dword [ecx*4 + 0x471048]
inc word [ebp - 0x52]
lea eax, [eax + 0x7c4b]
sub eax, 0x7c4b
jg 0x470c45
pushf
lea esi, [esi + 0x5f62]
sub esi, 0x5f62
lea ebx, [ebx]
call 0x470c39
add esp, 4
jns 0x470c3e
popf
jno 0x470c42
jle 0x470c45
lcall 0xae45, 0x8b6649eb
jmp case.0x470c0c.1
mov ax, word [ebp - 0x52]
cmp ax, word [ebp - 0x40]
jne case.0x470c0c.1
mov eax, dword [ebp - 0x3a]
mov ecx, 9
and eax, 0xffff
cdq
idiv ecx
cmp edx, 8
ja case.default.0x470c66
jmp dword [edx*4 + 0x471070]
mov word [ebp - 0x3e], 1
jmp 0x470c75
cmp edx, eax
test ebx, 0x145f
je 0x470c8b
jns 0x470c81
lea esp, [esp]
xchg edi, ecx
xchg edi, ecx
jne 0x470c8b
sub ebx, 0xfc558b03
jmp case.0x470c0c.1
mov edx, dword [ebp - 4]
inc edx
cmp dx, 4
mov dword [ebp - 4], edx
jb 0x470bed
nop
jmp 0x470be8
jge 0x470ca6
call 0x470cab
lea esp, [esp + 4]
jb 0x470cbc
jae 0x470cb3
jle 0x470cb5
jle 0x470cb7
je 0x470cb9
jae 0x470cbc
mov edi, 0xda8730eb
jmp case.0x470c66.0
xchg edx, ebx
xchg edx, ebx
jge 0x470cc4
lea eax, [eax]
lea ecx, [ecx + 0x73c1]
lea ecx, [ecx - 0x73c1]
jae case.0x470c66.0
pushf
cmp ecx, 0x5b9d
popf
nop
lea ecx, [ecx + 0x4ffb]
lea ecx, [ecx - 0x4ffb]
jb case.0x470c66.0
add eax, 0x97e86890
inc ebp
add bh, bh
adc eax, sym.imp.KERNEL32.dll_OutputDebugStringA
nop
push 0x4597e8
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea esi, [esi]
jge 0x470d18
pushf
jne 0x470d0b
cmp eax, dword [esp]
popf
jge 0x470d12
nop
jo 0x470d15
jl 0x470d18
xor eax, 0xc7f7d4eb
mov bl, 0x6b
add byte [eax], al
jmp case.0x470c66.0
test edi, 0x6bb3
stc
sub edx, 0
jne 0x470d47
pushf
jg 0x470d2a
lea eax, [eax + 0xb9a]
sub eax, 0xb9a
cmp esi, dword [esp]
jmp 0x470d3a
popf
lea edi, [edi]
xchg edx, ecx
xchg edx, ecx
jne 0x470d44
je 0x470d47
ljmp 0x4d89:0xc933a5eb
jmp case.0x470c66.0
xor ecx, ecx
mov dword [ebp - 4], ecx
and ecx, 0xffff
mov eax, ecx
imul eax, ecx
imul eax, ecx
cmp eax, 0xd8
ja case.0x470d6f.7
xor edx, edx
mov dl, byte [eax + 0x4710b4]
jmp dword [edx*4 + 0x471094]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
and eax, 0xffff
and ecx, 0xffff
lea edx, [ecx + eax*4]
inc word [ebp + edx*2 - 0x58]
lea eax, [ebp + edx*2 - 0x58]
shl esi, 0
jl 0x470d98
jnp 0x470dae
pushf
xchg edi, edi
dec edx
inc edx
xchg ecx, eax
xchg ecx, eax
popf
jb 0x470da6
mov ebx, ebx
lea esp, [esp]
jp 0x470dae
add eax, 0xc4458b66
mov ax, word [ebp - 0x3c]
mov word [ebp - 0x42], ax
jmp case.0x470d6f.7
mov eax, dword [ebp - 8]
mov ecx, 3
and eax, 0xffff
cdq
idiv ecx
mov dword [ebp - 0xc], edx
lea ebx, [ebx + 0x579b]
lea ebx, [ebx - 0x579b]
jl 0x470ddc
xchg edi, ebx
xchg edi, ebx
jle 0x470df7
mov esp, esp
lea edx, [edx + 0x60e4]
lea edx, [edx - 0x60e4]
jbe 0x470df2
jg 0x470df7
mov edx, 0x21e93cf4
add dword [eax], eax
add byte [ebx - 0x36cc0fbb], cl
mov eax, dword [ebp - 0x10]
xor ecx, ecx
jmp case.0x470d6f.7
mov eax, dword [ebp - 0x10]
xor ecx, ecx
and eax, 0xffff
shl eax, 2
lea edi, [ebp + eax*2 - 0x58]
clc
clc
jnp 0x470e28
pushf
call 0x470e18
lea esp, [esp + 4]
shr edx, 0
popf
jle 0x470e23
lea esi, [esi]
jp 0x470e28
lcall 0xffe2, 0x81f4558b
inc dword [eax]
add byte [ebx], al
shl byte [esi - 0x75], 1
push esp
push ebp
test al, 0x66
cmp edx, dword [edi]
mov edx, dword [ebp - 0xc]
and edx, 0xffff
add edx, eax
mov dx, word [ebp + edx*2 - 0x58]
cmp dx, word [edi]
jbe 0x470e40
mov dword [ebp - 0xc], ecx
inc ecx
add edi, 2
cmp cx, 3
jb 0x470e0d
jmp case.0x470d6f.7
mov eax, dword [ebp - 8]
mov ecx, 9
and eax, 0xffff
cdq
idiv ecx
mov eax, 0x55555556
mov ecx, edx
mov dword [ebp - 8], edx
and ecx, 0xffff
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [ebp - 0x10], edx
jne 0x470e7d
xchg ecx, ecx
ja 0x470e88
xchg ecx, eax
xchg ecx, eax
mov eax, eax
jbe 0x470e88
mov edi, 0x90e9
add byte [ebx + 0x9b9f845], cl
mov eax, dword [ebp - 8]
mov ecx, 9
and eax, 0xffff
jmp case.0x470d6f.7
mov eax, dword [ebp - 8]
mov ecx, 9
and eax, 0xffff
cdq
idiv ecx
cmp edx, 8
ja case.default.0x470ea2
jmp dword [edx*4 + 0x471190]
mov ebx, dword [ebp - 0xc]
xor esi, esi
and ebx, 0xffff
lea edi, [ebp + ebx*2 - 0x58]
xor eax, 0x50dd
xor eax, 0x50dd
je 0x470ed6
pushf
rol esp, 0
je 0x470ecb
jno 0x470ecd
popf
xchg ecx, edx
xchg ecx, edx
jne 0x470ed6
jmp 0x82376465
mov edx, dword [ebp - 0x10]
and edx, 0xffff
lea eax, [ebx + edx*4]
mov cx, word [ebp + eax*2 - 0x58]
cmp cx, word [edi]
jbe 0x470eef
mov dword [ebp - 0x10], esi
inc esi
add edi, 8
cmp si, 3
jb 0x470eb8
jmp case.0x470d6f.7
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
lea ecx, [edx + eax*2]
add eax, ecx
mov dword [ebp - 8], eax
rol ecx, 1
ror ecx, 1
clc
jnp 0x470f19
jge 0x470f12
mov edx, edx
jp 0x470f19
lcall 0xc445, 0x89664c70
mov word [ebp - 0x3c], ax
mov ecx, dword [ebp - 4]
inc ecx
cmp cx, 7
mov dword [ebp - 4], ecx
jb 0x470d4e
jmp case.0x470ea2.1
jp 0x470f35
rol ebx, 0xc
rol ebx, 0x14
lea eax, [eax + 0x57dc]
sub eax, 0x57dc
cmp ecx, dword [esp]
jne 0x470f58
pushf
jbe 0x470f4f
popf
lea ecx, [ecx]
jo 0x470f55
je 0x470f58
mov ecx, 0xfff658e9
push dword [ebx]
jae 0x470f5f
jmp case.0x470ea2.1
jae 0x470f5f
shl esp, 0
jg 0x470f6b
jne 0x470f66
xchg ebx, eax
xchg ebx, eax
jle 0x470f6b
xor eax, 0x3b00c483
jl 0x470f95
add esp, 0
cmp edi, dword [esp + 4]
jge 0x470f79
add al, 0x7d
add eax, 0x17c007d
jge 0x470f76
jl 0x470f79
jmp 0xc10ff7
jp 0x470f7b
jp 0x470f7d
cmp edx, dword [esp]
test esp, 0x17ec
jp 0x470f8c
nop
jnp 0x470f8c
lcall 0x5fff, 0xfff624e9
jmp case.0x470ea2.1
pop edi
pop esi
mov dword [0x458098], 0x457ca8
mov eax, 1
cwde
add byte [ebp], 0xa8
jl 0x470fe1
add byte [eax + 1], bh
pop ebx
mov esp, ebp
pop ebp
ret
or byte [edi], al
add byte [eax], cl
add dword [eax], ecx
or byte [eax], cl
add cl, byte [eax]
or byte [eax], cl
or byte [eax], cl
add ecx, dword [eax]
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
add al, 8
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
add eax, 0x8080808
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [esi], al
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
or byte [edi], al
lea ecx, [ecx]
test al, 9
inc edi
add byte [edx + ecx + 0x9a20047], ch
inc edi
add byte [ecx + ecx + 0x8b70047], dh
inc edi
add byte [esi + 0x7800470c], bl
or dword [edi], eax
mov ebp, 0x7e00470a
or dword [edi], eax
scasb al, byte es:[edi]
or dword [edi], eax
adc ecx, dword [edi + eax*2]
add byte [edi + 12], al
inc edi
add byte [ebp + 0xc], ch
inc edi
add byte [esi + eax + 0xc900047], ah
inc edi
add byte [eax], al
add al, 4
add al, 1
add al, 4
add al, 4
add al, 2
add al, 4
add al, 4
add al, 4
add al, 3
nop
out dx, al
or al, 71
add byte [esp + ecx + 0xcee0047], ah
inc edi
add dh, ch
or al, 0x47
add dh, ch
or al, 0x47
add byte [esi - 0x11ffb8f4], bh
or al, 0x47
add byte [edx], bl
or eax, 0xd030047
inc edi
add byte [edi + 0xe], cl
inc edi
add byte [ebx - 0x56ffb8f3], bh
push cs
inc edi
add ah, bh
or eax, 0xd760047
inc edi
add bl, bh
push cs
inc edi
add byte [ebp + 0x1d00470e], cl
cmova eax, dword [eax]
add byte [ecx], al
pop es
pop es
pop es
pop es
pop es
pop es
add al, byte [edi]
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
add eax, dword [edi]
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
add al, 7
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
add eax, 0x7070707
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
push es
lea ecx, [ecx]
xor ecx, dword [edi]
inc edi
add byte [ebp - 0x4affb8fb], dh
add eax, 0x5b50047
inc edi
add byte [ebp + 0x5d004705], dh
cmova eax, dword [eax]
mov ch, 5
inc edi
add byte [ebp - 0x4affb8fb], dh
add eax, 0x90900047
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
push 0x10
lea eax, [ebp - 0x14]
push 0
push eax
call fcn.00464ea0
add esp, 0xc
cmp edi, eax
jnp 0x4711ef
lea edx, [edx + 0x5fe4]
lea edx, [edx - 0x5fe4]
mov edi, edi
jp 0x4711ef
xor eax, 0xc675b009
inc ebp
in eax, dx
mov byte [ebp - 0xd], al
mov al, 0x75
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0xd], al
mov byte [ebp - 0x11], 0x54
mov byte [ebp - 0x14], 0x48
mov byte [ebp - 0x10], al
mov byte [ebp - 0xe], 0x73
mov byte [ebp - 9], 0x6f
mov byte [ebp - 8], 0x67
mov byte [ebp - 0xf], 0x62
mov byte [ebp - 6], 0x42
mov byte [ebp - 0x12], al
mov byte [ebp - 0xc], 0x76
mov byte [ebp - 5], 0
mov byte [ebp - 0xb], 0x71
mov byte [ebp - 0xa], 0x4a
mov byte [ebp - 7], 0x70
neg eax
neg eax
cmp ecx, dword [esp + 0x10]
xchg esi, esi
jl 0x47123a
jns 0x471241
xchg esp, esp
js 0x471241
mov eax, 0x8aec458a
pop ebp
int1
mov al, byte [ebp - 0x14]
mov bl, byte [ebp - 0xf]
mov dl, byte [ebp - 0x13]
mov cl, byte [ebp - 0x12]
dec al
dec bl
mov byte [ebp - 0x14], al
mov al, byte [ebp - 8]
dec dl
mov byte [ebp - 0xf], bl
mov bl, byte [ebp - 0x11]
mov byte [ebp - 0x13], dl
mov dl, byte [ebp - 0x10]
dec cl
dec al
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0xe]
dec bl
mov byte [ebp - 8], al
mov al, byte [ebp - 0xc]
dec dl
mov byte [ebp - 0x11], bl
mov bl, byte [ebp - 0xd]
mov byte [ebp - 0x10], dl
mov dl, byte [ebp - 9]
dec cl
dec al
mov byte [ebp - 0xe], cl
mov cl, byte [ebp - 7]
dec bl
mov byte [ebp - 0xc], al
mov al, byte [ebp - 0xb]
dec dl
mov byte [ebp - 0xd], bl
mov bl, byte [ebp - 6]
mov byte [ebp - 9], dl
mov dl, byte [ebp - 0xa]
dec cl
dec al
dec bl
dec dl
mov byte [ebp - 7], cl
mov byte [ebp - 0xb], al
mov byte [ebp - 6], bl
mov byte [ebp - 0xa], dl
and ecx, ecx
sub esp, 0
add edi, 0x7908
sub edi, 0x7908
jl 0x4712d3
jg 0x4712ce
jl 0x4712d0
jge 0x4712d3
lcall 0x85ff, 0xff9f78e8
ror byte [edi], 0x84
xchg edi, eax
add byte [eax], al
add byte [ebp - 0x74f48a0d], al
in al, 0x71
add byte [ebp], dh
call fcn.0046b250
test eax, eax
je 0x471377
test ebx, esi
jne 0x4712ef
mov esp, esp
jno 0x4712e8
jne 0x4712ea
jl 0x4712ec
je 0x4712ef
jmp 0x52336080
lea ecx, [ebp - 0x14]
push ecx
push eax
call fcn.0047c6d0
push 0x10
lea edx, [ebp - 0x14]
mov esi, eax
push 0
push edx
mov dword [ebp - 4], esi
call fcn.00464ea0
add esp, 0xc
xor edi, dword [esp + 0x10]
xor edi, dword [esp + 0x10]
jl 0x47131e
jnp 0x47131a
jge 0x47131e
sub eax, 0x74f68546
push ebp
test esi, esi
je 0x471377
add ebx, 0
inc edx
dec edx
xchg edx, esi
xchg edx, esi
cmp esi, dword [esp + 4]
jle 0x471344
pushf
cmp edi, esi
xor ebx, dword [esp]
xor ebx, dword [esp]
popf
xchg esp, esp
jle 0x471341
jg 0x471344
ljmp 0xe3e8:0x57fc7d8b
mov edi, dword [ebp - 4]
push edi
call fcn.0047a730
add esp, 4
add edx, 0
neg esi
neg esi
jg 0x471371
pushf
test edx, esi
nop
mov esp, esp
popf
lea ebx, [ebx + 0x41b1]
lea ebx, [ebx - 0x41b1]
jle 0x471371
xor eax, 0x5008458b
mov eax, dword [ebp + 8]
push eax
call edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4