Function at 0x4e4e30
Capabilities:
Encode data using xor
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x4b4
nop
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x4e9330
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
call fcn.004e7b80
mov edi, dword [sym.ixptestoope.exe_Ordinal_1]
mov ebx, eax
xor ebx, 0x33a3052b
mov ecx, dword [0x8494d0]
mov edx, eax
shl edx, 0x1f
xor edx, eax
xor edx, 0xadeee0d3
mov dword [ebp - 0x30], ecx
add edx, dword [ecx]
mov dword [ebp - 0x50], edx
mov ecx, dword [0x8494d8]
xor ecx, eax
mov edx, eax
xor edx, 0x13a30428
xor esi, esi
cmp ecx, 0x7f652e50
cmove esi, edx
mov ecx, dword [0x7d3e14]
mov dword [ebp - 0x48], ecx
mov edx, dword [0x8494d4]
mov dword [ebp - 0x28], edx
mov ecx, dword [edx + esi*8]
mov dword [ebp - 0x2c], ecx
mov edx, dword [0x8494dc]
mov dword [ebp - 0x20], eax
xor edx, eax
xor ecx, ecx
cmp edx, 0x5b939b2f
sete dl
mov dword [ebp - 0x44], ebx
test edi, ebx
mov eax, edi
je 0x4e4f01
mov cl, dl
neg ecx
cmp dword [0x87d2f7], ecx
je 0x4e4f01
test al, 1
sete cl
movzx edx, byte [ebp + 0x10]
xor dl, 1
test cl, dl
jne 0x4e502e
test al, 1
jne 0x4e4fdf
nop
mov dword [0x87d2f3], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x88], xmm0
cmp dword [0x87d2db], 0
jns 0x4e4f6d
nop
call dword [0x8342ac]
mov esi, dword [ebp - 0x20]
mov ecx, esi
xor ecx, 0x33a30423
mov dword [ebp + ecx - 0x88], eax
call fcn.004e7b70
mov ecx, esi
xor ecx, 0x33a30427
mov dword [ebp + ecx - 0x88], eax
mov eax, esi
xor eax, 0xc5cfbd4
and eax, dword [0x87d2db]
lea ecx, [ebp - 0x88]
push eax
call fcn.00539f70
call fcn.004e7b50
mov edi, dword [ebp - 0x20]
mov esi, edi
xor esi, 0x33a304b7
push esi
push 0
push eax
call dword [0x8342b0]
mov ebx, eax
test eax, eax
jne 0x4e4fa4
nop
call dword [0x8342ac]
mov ecx, edi
xor ecx, 0x33a30439
push ecx
push eax
call dword [0x83425c]
nop
mov dword [ebp - 0x24], ebx
mov dword [ebx], esi
mov ecx, dword [0x8494e0]
xor ecx, edi
mov eax, edi
xor eax, 0x2cdc40b1
mov dword [ebp - 0x74], ecx
cmp ecx, 0xee60be06
mov edx, dword [0x8494cc]
nop
mov dword [ebp - 0x3c], esi
jne 0x4e503a
mov ecx, edx
not ecx
add ecx, eax
imul ecx, eax
lea eax, [ecx + ecx*2]
add eax, 2
jmp 0x4e503d
xor ebx, ebx
test dword [ebp - 0x44], eax
je 0x4e564a
mov edi, eax
mov ecx, dword [0x87d2cb]
mov eax, dword [ebp - 0x20]
mov edx, eax
xor edx, 0x33a3043b
test ecx, edx
je 0x4e5e6a
add ecx, ecx
mov dword [0x87d2cb], ecx
xor eax, 0x33a3042e
or edi, eax
mov dword [sym.ixptestoope.exe_Ordinal_1], edi
mov dword [0x87d2eb], 0x4e48b0
mov edi, 0x4e48b0
jmp 0x4e62d2
xor ebx, ebx
mov edi, 0x4e48b0
jmp 0x4e62d2
add eax, edx
inc eax
nop
mov ecx, dword [ebp - 0x20]
xor ecx, 0xd323bf4e
add eax, ecx
inc eax
mov dword [0x8494cc], eax
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x38], eax
test edx, eax
je 0x4e5651
xor esi, esi
nop
mov dword [ebp - 0x34], esi
xor eax, eax
cmp dword [ebp - 0x74], 0x8ca01070
setne al
lea edi, [eax*2 - 2]
mov dword [ebp - 0x10], 0xffffffff
push dword [ebp - 0x24]
call dword [0x834028]
cmp eax, edi
jne 0x4e50b2
call fcn.004e7b50
push dword [ebp - 0x24]
push 0
push eax
call dword [0x83402c]
call dword [0x8342ac]
mov ecx, dword [ebp - 0x20]
xor ecx, 0x33a304d4
push ecx
push eax
call dword [0x83425c]
nop
push dword [ebp + 0xc]
push 1
push 0
call fcn.00719f62
call fcn.004ce8e0
cmp dword [0x889b2c], 0
jne 0x4e515a
nop
mov esi, dword [ebp - 0x20]
mov eax, esi
xor eax, 0x33a304e3
push eax
call fcn.0071993d
add esp, 4
mov dword [eax], 0x751304
mov ecx, esi
xor ecx, 0x33a30437
mov edx, esi
xor edx, 0x33a3040b
mov dword [eax + ecx], 0
mov ecx, esi
xor ecx, 0x33a30424
mov dword [eax + edx], ecx
mov ecx, esi
xor ecx, 0x33a30427
mov byte [eax + ecx], 0
mov ecx, esi
xor ecx, 0x33a30423
mov dword [eax + ecx], 0x751360
mov ecx, esi
xor ecx, 0x33a3040f
mov dword [eax + ecx], 0
mov ecx, esi
xor ecx, 0x33a30403
mov dword [eax + ecx], 0
mov ecx, esi
xor ecx, 0x33a3042f
mov dword [eax + ecx], 0
mov dword [0x889b2c], eax
nop
mov eax, dword [0x889b2c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x20]
mov ecx, eax
xor ecx, 0x33a30407
mov dword [ebp - 0x58], ecx
cmp eax, 0x33a304b7
nop
mov esi, dword [ebp - 0x3c]
je 0x4e529a
nop
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x58]
add ecx, eax
cmp esi, 1
mov ebx, esi
adc ebx, 0
xor edx, edx
cmp esi, 8
nop
mov dword [ebp - 0x28], ebx
jb 0x4e5227
mov edi, ecx
sub edi, dword [ebp - 0x24]
cmp edi, 0x20
mov eax, dword [ebp - 0x3c]
jb 0x4e5227
xor edx, edx
cmp eax, 0x20
jb 0x4e51fb
mov edx, ebx
and edx, 0xffffffe0
mov eax, dword [ebp - 0x48]
mov esi, dword [ebp - 0x58]
lea edi, [esi + eax]
add edi, 0x10
xor ebx, ebx
mov eax, dword [ebp - 0x24]
nop
nop
movups xmm0, xmmword [eax + ebx]
movups xmm1, xmmword [eax + ebx + 0x10]
movups xmmword [edi + ebx - 0x10], xmm0
movups xmmword [edi + ebx], xmm1
add ebx, 0x20
cmp edx, ebx
jne 0x4e51d0
cmp dword [ebp - 0x3c], edx
mov ebx, dword [ebp - 0x28]
je 0x4e529a
test bl, 0x18
je 0x4e5227
mov edi, edx
mov edx, ebx
and edx, 0xfffffff8
mov eax, dword [ebp - 0x24]
nop word cs:[eax + eax]
nop
movsd xmm0, qword [eax + edi]
movsd qword [ecx + edi], xmm0
add edi, 8
cmp edx, edi
jne 0x4e5210
cmp dword [ebp - 0x3c], edx
je 0x4e529a
mov edi, edx
and ebx, 3
mov esi, dword [ebp - 0x24]
je 0x4e524c
mov edi, edx
nop word cs:[eax + eax]
nop
movzx eax, byte [esi + edi]
mov byte [ecx + edi], al
inc edi
dec ebx
jne 0x4e5240
sub edx, dword [ebp - 0x28]
cmp edx, 0xfffffffc
mov edx, dword [ebp - 0x3c]
ja 0x4e529a
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x58]
add eax, ecx
add eax, 3
mov esi, dword [ebp - 0x24]
nop word cs:[eax + eax]
nop
movzx ecx, byte [esi + edi]
mov byte [eax + edi - 3], cl
movzx ecx, byte [esi + edi + 1]
mov byte [eax + edi - 2], cl
movzx ecx, byte [esi + edi + 2]
mov byte [eax + edi - 1], cl
movzx ecx, byte [esi + edi + 3]
mov byte [eax + edi], cl
add edi, 4
cmp edx, edi
jne 0x4e5270
nop
mov dword [ebp - 0x10], 0xffffffff
mov ebx, dword [ebp - 0x48]
mov ecx, ebx
call fcn.0049b2d0
mov ecx, ebx
call fcn.0049b2f0
call fcn.004e7b50
push dword [ebp - 0x24]
push 0
push eax
call dword [0x83402c]
cmp dword [0x88abdc], 0
jne 0x4e5300
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x33a300d3
mov dword [ebp - 0x28], eax
push eax
call fcn.0071993d
add esp, 4
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x24], eax
mov ecx, eax
call fcn.00455c90
nop
mov eax, dword [ebp - 0x24]
mov dword [0x88abdc], eax
nop
mov ebx, dword [ebp - 0x48]
nop
mov esi, dword [0x88abdc]
mov edi, dword [ebp - 0x20]
mov eax, edi
xor eax, 0x33a305eb
mov ecx, dword [0x834030]
mov dword [esi + eax], ecx
mov dword [ebp - 0x10], 0xffffffff
push 0
call ecx
mov ecx, edi
xor ecx, 0x33a30403
mov dword [ebp - 0x74], ecx
mov dword [ebx + ecx], eax
mov edx, edi
xor edx, 0x33a3042d
mov eax, edi
xor eax, 0x22b
mov ecx, edi
xor ecx, 0x33a306f6
cmp word [ebx + edx], ax
seta byte [esi + ecx]
mov eax, edi
xor eax, 0x22a
mov ecx, edi
xor ecx, 0x33a306f5
mov dword [ebp - 0x64], edx
cmp word [ebx + edx], ax
mov dword [ebp - 0x30], esi
seta byte [esi + ecx]
mov esi, 0x87d2c7
sub esi, dword [0x87d2e7]
lea eax, [ebp - 0x4c0]
push 0x400
push 0
push eax
call fcn.007311f0
add esp, 0xc
mov eax, edi
xor eax, 0x33a3002b
mov dword [ebp - 0x28], eax
push eax
lea eax, [ebp - 0x4c0]
push eax
push esi
call dword [0x834034]
mov eax, ebx
mov ebx, edi
xor ebx, 0x33a3040f
mov dword [eax + ebx], esi
xor edi, 0x33a30423
mov dword [ebp - 0x54], edi
lea ecx, [eax + edi]
lea eax, [ebp - 0x4c0]
push eax
call fcn.005864d0
call fcn.004e4710
mov dword [ebp - 0x68], 0
mov eax, dword [0x889427]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 3
mov dword [ebp - 0x50], ebx
push ebx
call fcn.0071993d
add esp, 4
mov ecx, eax
mov eax, dword [0x889423]
mov edx, dword [ebp - 0x24]
add eax, edx
add eax, 0x87d2c7
mov dword [ebp - 0x10], 6
push eax
mov dword [ebp - 0x24], ecx
call fcn.005820c0
nop
mov esi, dword [ebp - 0x68]
mov edi, dword [ebp - 0x24]
cmp esi, edi
sete al
test esi, esi
sete cl
or cl, al
jne 0x4e543e
mov ecx, esi
call fcn.00445360
push dword [ebp - 0x50]
push esi
call fcn.0071996d
add esp, 8
nop
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x10], 3
mov ecx, dword [ebp - 0x30]
push edi
call fcn.00490830
test al, al
jne 0x4e546f
nop
call dword [0x8342ac]
nop
mov ecx, dword [ebp - 0x20]
xor ecx, 0x33a304d4
push ecx
push eax
call dword [0x83425c]
nop
mov eax, dword [ebp - 0x28]
test dword [sym.ixptestoope.exe_Ordinal_1], eax
je 0x4e55f8
nop
mov ecx, dword [ebp - 0x20]
xor ecx, 0x33a3004b
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x24], ecx
cmp dword [eax + ecx], 0
je 0x4e55f8
lea ecx, [ebp - 0xc0]
lea eax, [ebp - 0x4c0]
push eax
call fcn.005825d0
nop
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x24]
mov eax, dword [eax + ecx]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 7
lea eax, [ebp - 0xa4]
lea ecx, [ebp - 0xc0]
push eax
call fcn.00583e40
nop
mov eax, dword [ebp - 0x20]
mov ecx, eax
xor ecx, 0x33a3042f
lea esi, [ecx + ebp]
add esi, 0xffffff5c
mov edx, eax
xor edx, 0x33a30433
xor eax, 0x33a30424
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x24], eax
cmp dword [ebp + edx - 0xa4], eax
jbe 0x4e550c
mov esi, dword [ebp + ecx - 0xa4]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x10], 0xffffffff
mov ecx, dword [ebp - 0x28]
call dword [0x834360]
mov dword [ebp - 0x10], 8
push esi
call ecx
nop
mov ebx, dword [ebp - 0x2c]
mov ecx, dword [ebp + ebx - 0xa4]
cmp ecx, dword [ebp - 0x24]
jbe 0x4e559e
nop
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
lea edx, [ecx + 1]
mov edi, dword [ebp - 0x20]
mov esi, edi
xor esi, 0x33a30bd4
cmp edx, esi
jbe 0x4e5593
mov edx, edi
xor edx, 0xcc5cfbd7
lea esi, [eax + edx]
mov eax, dword [eax + edx]
sub esi, eax
mov edx, edi
xor edx, 0x33a3040b
cmp esi, edx
jae 0x4e6349
mov edx, edi
xor edx, 0x859a3b9d
sub ecx, edx
mov esi, edi
mov edi, dword [ebp - 0x50]
xor esi, edi
xor esi, 0xcc5cfbf0
and esi, ecx
xor esi, edi
and ecx, edi
add esi, edx
lea edx, [esi + ecx*2]
nop
push edx
push eax
call fcn.0071996d
add esp, 8
nop
mov ecx, dword [ebp + ebx - 0xc0]
cmp ecx, dword [ebp - 0x24]
jbe 0x4e55f8
nop
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax - 0xc0]
lea edx, [ecx + 1]
mov edi, dword [ebp - 0x20]
mov esi, edi
xor esi, 0x33a30bd4
cmp edx, esi
jbe 0x4e55ed
mov edx, edi
xor edx, 0xcc5cfbd7
lea esi, [eax + edx]
mov eax, dword [eax + edx]
sub esi, eax
mov edx, edi
xor edx, 0x33a3040b
cmp esi, edx
jae 0x4e6356
add ecx, dword [ebp - 0x50]
mov edx, ecx
nop
push edx
push eax
call fcn.0071996d
add esp, 8
nop
mov dword [ebp - 0x10], 3
call fcn.00449350
mov dword [ebp - 0x24], eax
nop
movzx eax, byte [ebp + 0x10]
xor al, 1
mov edx, dword [ebp - 0x20]
xor edx, 0x33a300f3
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6c], edx
mov byte [ecx + edx], al
push ecx
call fcn.004c8ef0
add esp, 4
nop
mov eax, dword [ebp - 0x20]
mov ecx, eax
xor ecx, 0x3323042b
mov dword [ebp - 0x28], ecx
test dword [0x8893db], ecx
je 0x4e57e1
jmp 0x4e5806
xor edi, edi
jmp 0x4e62d2
nop
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
add eax, ecx
mov dword [ebp - 0x6c], eax
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x48], 0
jle 0x4e505d
nop
mov ecx, dword [ebp - 0x20]
mov edx, ecx
shl edx, 0x1d
mov eax, ecx
shl eax, 0x1b
xor edx, ecx
xor eax, ecx
xor edx, 0xb2111f2c
mov edi, eax
xor edi, 0xb5471fd1
add edi, edx
mov ebx, ecx
xor ebx, 0x12b8e02e
add edi, dword [ebp - 0x30]
mov edx, ebx
mov esi, dword [ebp - 0x50]
xor edx, esi
add edi, edx
mov dword [ebp - 0x40], edi
and ebx, esi
mov dword [ebp - 0x64], ebx
mov edx, ecx
shr edx, 5
xor edx, 0xc5661b4f
xor eax, 0xb0d74985
mov esi, ecx
shr esi, 2
mov dword [ebp - 0x54], esi
mov ebx, ecx
shl ebx, 0x1e
xor ebx, ecx
mov esi, ebx
xor esi, 0xd728b67a
mov edi, dword [ebp - 0x54]
xor edi, 0x37ec3d9b
add esi, eax
adc edi, edx
add esi, 1
mov dword [ebp - 0x50], esi
adc edi, 0
mov dword [ebp - 0x58], edi
mov edi, dword [ebp - 0x54]
mov eax, dword [0x8494e4]
xor eax, ecx
mov dword [ebp - 0x4c], eax
mov eax, dword [0x8494e8]
xor eax, ecx
cmp eax, 0xeb9fcf9d
sete byte [ebp - 0x5d]
mov edx, ecx
shr edx, 4
mov eax, ecx
shl eax, 0x1c
xor eax, ecx
mov esi, ecx
xor esi, 0x7eefc94a
mov dword [ebp - 0x70], esi
mov esi, ecx
xor esi, 0x7ade0c80
mov dword [ebp - 0x78], esi
lea esi, [ecx + ecx]
mov dword [ebp - 0x30], esi
mov esi, ecx
xor dword [ebp - 0x30], 0xd5f53ac8
xor ecx, 0x8521f37f
xor eax, 0x2ad7c068
xor edx, 0xea2bd5db
xor ebx, 0xa5283f97
xor edi, 0x1a06db6c
add ebx, dword [ebp - 0x78]
adc edi, dword [ebp - 0x70]
add ebx, eax
adc edi, edx
add ebx, ecx
adc edi, dword [ebp - 0x30]
add ebx, 2
adc edi, 0
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x64]
lea eax, [eax + edx*2]
add eax, 2
mov ecx, esi
mov dword [ebp - 0x30], eax
xor esi, 0x33a3042f
cmp dword [ebp - 0x4c], 0xeb60d50a
jne 0x4e5f97
nop
mov eax, dword [0x8494e8]
xor eax, ecx
cmp eax, 0xeb9fcf9d
sete cl
add cl, cl
add cl, 3
mov eax, ebx
shl eax, cl
mov ecx, eax
mov edx, ebx
xor edx, 2
mov eax, 0xffffffff
shl eax, cl
mov dword [ebp - 0x34], eax
or edx, edi
jne 0x4e60c5
xor eax, eax
xor esi, esi
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x30]
nop word [eax + eax]
nop
xor si, word [edx + eax]
add eax, 2
cmp eax, ecx
jl 0x4e57d0
jmp 0x4e505f
mov ecx, eax
xor ecx, 0x33a304d3
add ecx, dword [0x8898e8]
mov dword [ebp - 0x2c], ecx
call fcn.00492100
int3
nop
mov eax, dword [ebp - 0x20]
xor eax, 0xccdcfbd4
mov dword [ebp - 0x2c], eax
cmp byte [0x889b6c], 0
jne 0x4e5832
nop
mov eax, dword [0x8893db]
mov ecx, eax
not ecx
xor eax, dword [ebp - 0x28]
and ecx, dword [ebp - 0x2c]
or ecx, eax
cmp ecx, 0xffffffff
jne 0x4e585d
nop
mov ecx, dword [ebp - 0x20]
xor ecx, 0x33a304d3
add ecx, dword [0x8898e8]
mov dword [ebp - 0x4c], ecx
call fcn.00492100
nop
mov eax, dword [ebp - 0x20]
xor al, 0x2f
mov byte [4], al
mov ecx, dword [ebp - 0x4c]
call fcn.004921c0
nop
mov esi, dword [ebp - 0x5c]
and esi, dword [ebp - 0x38]
mov edx, dword [ebp - 0x20]
mov ecx, edx
xor ecx, 0x4919
mov eax, edx
xor eax, 0xffffc831
xor edx, 0xffffb6e6
sub edx, eax
cmp esi, 1
sbb dx, 0xffff
add eax, ecx
add eax, edx
movzx ecx, word [0x7d3e18]
sub ecx, dword [ebp - 0x34]
test cx, ax
setne al
or al, byte [0x889bcc]
and al, 1
mov byte [0x889bcc], al
mov ecx, dword [ebp - 0x48]
call fcn.0049b330
lea eax, [ebp - 0x68]
mov ecx, dword [ebp - 0x24]
push eax
push 0x87d2c7
call fcn.00485840
nop
mov eax, dword [ebp - 0x28]
test dword [0x8893db], eax
jne 0x4e58f3
nop
mov ecx, dword [ebp - 0x20]
xor ecx, 0x33a304d3
add ecx, dword [0x8898e8]
mov dword [ebp - 0x34], ecx
call fcn.00492100
invalid
nop
mov ecx, dword [ebp - 0x24]
push 0x87d2c7
call fcn.004c13c0
mov byte [ebp - 0x34], al
cmp byte [ebp - 0x34], 0
je 0x4e5dde
nop
mov ecx, dword [ebp - 0x20]
mov eax, ecx
xor eax, 0x33a30527
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + eax]
xor ecx, eax
mov edx, dword [ebp - 0x44]
and edx, eax
mov eax, ecx
xor eax, 0x33a3052b
or edx, eax
xor ecx, 0xcc5cfad4
test edx, ecx
jne 0x4e5951
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x33a30523
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
test dword [ecx + eax], edx
je 0x4e6068
nop
mov eax, dword [0x8893db]
mov ecx, eax
not ecx
xor eax, dword [ebp - 0x28]
and ecx, dword [ebp - 0x2c]
or ecx, eax
cmp ecx, 0xffffffff
jne 0x4e5990
nop
mov ecx, dword [ebp - 0x20]
xor ecx, 0x33a304d3
add ecx, dword [0x8898e8]
mov dword [ebp - 0x44], ecx
call fcn.00492100
invalid
nop
mov ecx, dword [ebp - 0x24]
push 0x87d2c7
call fcn.004bd530
call fcn.00537a30
nop
mov eax, dword [0x8893db]
mov ecx, eax
not ecx
xor eax, dword [ebp - 0x28]
and ecx, dword [ebp - 0x2c]
or ecx, eax
cmp ecx, 0xffffffff
jne 0x4e59e5
nop
mov ecx, dword [ebp - 0x20]
xor ecx, 0x33a304d3
add ecx, dword [0x8898e8]
mov dword [ebp - 0x44], ecx
call fcn.00492100
nop
mov eax, dword [ebp - 0x20]
xor al, 0x2e
mov byte [5], al
mov ecx, dword [ebp - 0x44]
call fcn.004921c0
call fcn.004e6470
mov dword [ebp - 0x5c], eax
nop
mov eax, dword [0x8897fe]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x24]
push dword [0x889802]
call fcn.004854e0
nop
mov edi, dword [ebp - 0x20]
mov edx, edi
xor edx, 0x33a30523
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x44], edx
mov ecx, dword [ecx + edx]
mov esi, edi
xor esi, ecx
xor esi, 0xcc5efbd4
xor edi, 0x33a1042b
or edi, ecx
xor edx, edx
test esi, edi
sete dl
mov ecx, dword [ebp - 0x5c]
push dword [ebp - 0x38]
push eax
push edx
push dword [0x889806]
call fcn.004934a0
nop
mov dword [0x889806], 0
mov dword [0x8897fe], 0
mov ecx, dword [ebp - 0x24]
call fcn.004786e0
nop
mov ecx, dword [ebp - 0x24]
push 0
push 1
call fcn.00474380
nop
mov edx, dword [ebp - 0x20]
xor edx, 0x33a3042f
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x5c], edx
mov ecx, dword [ebp - 0x44]
test dword [eax + ecx], edx
je 0x4e5b58
nop
mov eax, dword [0x88b2c4]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 0x2682c], 0
jne 0x4e5aa9
call fcn.004e7b60
nop
mov eax, dword [0x88b2c4]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 0x25804], 0
jne 0x4e5b58
nop
cmp dword [0x889bd0], 0
jne 0x4e5b00
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x33a3047b
mov dword [ebp - 0x4c], eax
push eax
call fcn.0071993d
add esp, 4
nop
mov dword [ebp - 0x10], 5
mov dword [ebp - 0x38], eax
mov ecx, eax
call fcn.004e6d80
nop
mov eax, dword [ebp - 0x38]
mov dword [0x889bd0], eax
nop
mov eax, dword [0x889bd0]
mov dword [ebp - 0x38], eax
mov eax, dword [0x889836]
mov dword [ebp - 0x4c], eax
mov eax, dword [0x88983a]
mov dword [ebp - 0x10], 3
mov ecx, dword [ebp - 0x24]
push eax
call fcn.004854e0
nop
mov ecx, dword [ebp - 0x38]
push dword [ebp - 0x4c]
push eax
push dword [0x889403]
call fcn.004f8610
nop
mov dword [0x889403], 0
mov dword [0x889836], 0
mov dword [0x88983a], 0
nop
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x44]
mov eax, dword [eax + ecx]
mov ecx, eax
not ecx
mov edx, dword [ebp - 0x20]
xor edx, 0xcc5cfbdc
and edx, ecx
xor eax, dword [ebp - 0x54]
or eax, edx
cmp eax, 0xffffffff
je 0x4e5bdc
nop
cmp dword [0x889b80], 0
jne 0x4e5bb5
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x33a3047b
mov dword [ebp - 0x4c], eax
push eax
call fcn.0071993d
add esp, 4
nop
mov dword [ebp - 0x10], 4
mov dword [ebp - 0x38], eax
mov ecx, eax
call fcn.004ddf60
nop
mov eax, dword [ebp - 0x38]
mov dword [0x889b80], eax
nop
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x44]
mov eax, dword [eax + ecx]
mov edx, dword [ebp - 0x20]
mov ecx, edx
xor cl, 0x19
movzx ecx, cl
xor edx, 0x33a3042e
bt eax, ecx
mov eax, dword [0x889b80]
setb byte [eax + edx]
nop
mov eax, dword [ebp - 0x28]
test dword [0x8893db], eax
jne 0x4e5c18
nop
mov ecx, dword [ebp - 0x20]
xor ecx, 0x33a304d3
add ecx, dword [0x8898e8]
mov dword [ebp - 0x10], 3
mov dword [ebp - 0x38], ecx
call fcn.00492100
in ax, 0x64
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x38]
call fcn.004921c0
nop
cmp dword [0x889b74], 0
mov dword [ebp - 0x10], 3
jne 0x4e5c7c
nop
push dword [ebp - 0x58]
call fcn.0071993d
add esp, 4
nop
mov esi, dword [ebp - 0x20]
mov ecx, esi
xor ecx, 0x33a3043f
mov edx, esi
xor edx, 0x33a30433
mov dword [eax + ecx], 0
mov ecx, esi
xor ecx, 0x33a30424
mov dword [eax + edx], ecx
mov ecx, dword [ebp - 0x5c]
mov byte [eax + ecx], 0
mov dword [eax], 0x7d3ee0
mov ecx, esi
xor ecx, 0x33a30437
xorps xmm0, xmm0
movups xmmword [eax + ecx], xmm0
mov dword [0x889b74], eax
nop
mov eax, dword [0x889b74]
mov dword [ebp - 0x58], eax
mov eax, dword [0x889846]
mov dword [ebp - 0x38], eax
mov eax, dword [0x889842]
mov dword [ebp - 0x4c], eax
mov eax, dword [0x88983e]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x20]
xor eax, 0x33a30513
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ecx + eax]
movzx eax, word [0x889458]
push eax
call fcn.005821c0
nop
mov ecx, dword [ebp - 0x58]
push dword [ebp - 0x38]
push dword [ebp - 0x4c]
push dword [ebp - 0x70]
push eax
call fcn.004e66d0
nop
mov ecx, dword [ebp - 0x20]
mov eax, ecx
xor eax, 0xdc5cfbd4
or eax, dword [0x88984a]
xor eax, ecx
cmp eax, 0xdc5cfbd4
je 0x4e5cfb
nop
mov eax, dword [0x88b2c4]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
inc dword [eax + 0x25808]
nop
mov dword [0x889842], 0
mov dword [0x889846], 0
mov eax, dword [0x8893db]
mov ecx, eax
not ecx
xor eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
and edx, ecx
or edx, eax
cmp edx, 0xffffffff
jne 0x4e5d53
nop
mov ecx, dword [ebp - 0x20]
xor ecx, 0x33a304d3
add ecx, dword [0x8898e8]
mov dword [ebp - 0x2c], ecx
call fcn.00492100
nop
mov eax, dword [ebp - 0x20]
xor al, 0x2d
mov byte [6], al
mov ecx, dword [ebp - 0x2c]
call fcn.004921c0
nop
mov ecx, dword [ebp - 0x20]
mov eax, ecx
xor eax, 0x33a3041b
and eax, dword [0x88984a]
xor ecx, 0x33a3040b
mov dword [ebp - 0x2c], ecx
cmp eax, ecx
jne 0x4e616c
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x33ab042b
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x44]
test dword [ecx + edx], eax
jne 0x4e616c
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x1d4
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x64]
cmp word [ecx + edx], ax
ja 0x4e616c
call fcn.004e2260
mov esi, eax
mov edx, dword [ebp - 0x20]
mov eax, edx
xor eax, 0x33a305e3
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ecx + eax]
mov eax, edx
xor eax, 0x33a30427
xor edx, 0x33a30424
mov edi, dword [ebp - 0x2c]
cmp dword [esi + edi], edx
jbe 0x4e6153
mov esi, dword [esi + eax]
jmp 0x4e6155
nop
mov eax, dword [sym.ixptestoope.exe_Ordinal_1]
mov ecx, eax
or ecx, 1
mov dword [sym.ixptestoope.exe_Ordinal_1], ecx
test dword [ebp - 0x44], eax
je 0x4e5e9f
nop
mov eax, dword [0x87d2cb]
mov ecx, dword [ebp - 0x20]
xor ecx, 0x33a3043b
mov edx, eax
xor edx, ecx
or ecx, eax
cmp edx, ecx
je 0x4e5e1f
nop
push 0x87d2c7
call fcn.004bb710
add esp, 4
call fcn.004daf70
cmp dword [ebp + 0xc], 0
jne 0x4e5e58
nop
mov esi, dword [0x88abdc]
test esi, esi
je 0x4e5e58
mov ecx, esi
call fcn.00456150
mov eax, dword [ebp - 0x20]
xor eax, 0x33a306cb
push eax
push esi
call fcn.0071996d
add esp, 8
mov dword [0x88abdc], 0
nop
push dword [ebp + 0xc]
push 0
push 0
call fcn.00719f62
jmp 0x4e5f89
cmp dword [ebp + 8], 0
jne 0x4e62c9
mov eax, dword [ebp - 0x20]
mov edx, eax
xor edx, ecx
xor edx, 0xcc5cfbf4
mov esi, eax
xor esi, 0x33a3040b
or esi, ecx
test edx, esi
je 0x4e610c
nop
mov edi, dword [0x87d2eb]
jmp 0x4e62d2
nop
mov esi, dword [0x889b40]
test esi, esi
je 0x4e5ece
nop
mov eax, dword [esi]
mov edi, dword [eax]
mov dword [ebp - 0x10], 0xffffffff
mov ecx, edi
call dword [0x834360]
mov ecx, esi
push 1
call edi
mov dword [0x889b40], 0
nop
mov esi, dword [0x889b64]
test esi, esi
je 0x4e5efd
nop
mov eax, dword [esi]
mov edi, dword [eax]
mov dword [ebp - 0x10], 0xffffffff
mov ecx, edi
call dword [0x834360]
mov ecx, esi
push 1
call edi
mov dword [0x889b64], 0
nop
mov esi, dword [0x889b78]
test esi, esi
je 0x4e5f2c
nop
mov eax, dword [esi]
mov edi, dword [eax]
mov dword [ebp - 0x10], 0xffffffff
mov ecx, edi
call dword [0x834360]
mov ecx, esi
push 1
call edi
mov dword [0x889b78], 0
nop
mov esi, dword [0x889b2c]
test esi, esi
je 0x4e5f5b
nop
mov eax, dword [esi]
mov edi, dword [eax]
mov dword [ebp - 0x10], 0xffffffff
mov ecx, edi
call dword [0x834360]
mov ecx, esi
push 1
call edi
mov dword [0x889b2c], 0
nop
mov esi, dword [0x88abdc]
test esi, esi
je 0x4e5f89
mov ecx, esi
call fcn.00456150
mov eax, dword [ebp - 0x20]
xor eax, 0x33a306cb
push eax
push esi
call fcn.0071996d
add esp, 8
mov dword [0x88abdc], 0
nop
mov edi, dword [0x87d2eb]
xor ebx, ebx
jmp 0x4e62a7
add esi, 0xfffffffe
mov dword [ebp - 0x54], esi
xor eax, eax
movzx ecx, byte [ebp - 0x5d]
mov al, cl
lea eax, [eax*2 + 3]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x6c]
mov dword [ebp - 0x34], eax
xor edi, edi
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x40], 0
mov ebx, dword [ebp - 0x30]
jmp 0x4e5ff9
xor ecx, dword [ebp - 0x28]
add edi, 2
mov eax, ecx
mov dword [ebp - 0x28], eax
cmp edi, dword [ebp - 0x48]
mov esi, ecx
mov ebx, dword [ebp - 0x30]
jge 0x4e505f
lea ecx, [ebx + edi]
mov edx, dword [ebp - 0x50]
sub edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x58]
sbb eax, dword [ebp - 0x2c]
add edx, ecx
adc eax, 0
mov ecx, 0xfffffffe
cmp ecx, edx
mov ecx, 0xffffffff
sbb ecx, eax
movzx ecx, word [ebx + edi]
jge 0x4e5fe0
mov eax, edx
neg eax
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x64]
shl eax, cl
mov esi, 0xffffffff
mov ecx, eax
shl esi, cl
mov ecx, dword [ebp - 0x34]
not esi
and ecx, esi
mov ebx, dword [ebp - 0x40]
lea eax, [ebx + 1]
add edi, dword [ebp - 0x54]
sub edi, edx
mov edx, dword [ebp - 0x6c]
lea esi, [edx + ebx*4]
add esi, 4
add esi, dword [edx + ebx*4 + 4]
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], 0
nop
mov dword [ebp - 0x40], eax
jmp 0x4e5fe0
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x33a306df
mov ecx, dword [ebp - 0x30]
cmp dword [ecx + eax], 0
je 0x4e5951
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x33a306d3
mov ecx, dword [ebp - 0x30]
cmp dword [ecx + eax], 0
je 0x4e5951
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x33a306d7
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ecx + eax]
mov dword [ebp - 0x10], 0xffffffff
call dword [0x834360]
mov dword [ebp - 0x10], 3
push 0
call ecx
call fcn.004e4c80
jmp 0x4e5951
not dword [ebp - 0x34]
add esi, ebx
mov dword [ebp - 0x54], esi
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
add ecx, edx
add ecx, 4
xor edx, edx
xor esi, esi
mov ebx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x30]
nop word cs:[eax + eax]
nop
movzx edi, word [eax + edx]
and di, word [ebp - 0x34]
xor esi, edi
mov edi, dword [ecx]
add edx, dword [ebp - 0x54]
add ecx, 4
cmp edx, ebx
jl 0x4e60f0
jmp 0x4e505f
mov ecx, eax
xor ecx, 0xcc5cf3d0
or ecx, edi
cmp ecx, 0xffffffff
je 0x4e62eb
nop
mov ecx, dword [0x8893db]
mov edx, eax
xor edx, ecx
xor edx, 0xcc5cfb54
mov esi, eax
xor esi, 0x33a304ab
or esi, ecx
test edx, esi
je 0x4e62f4
nop
push dword [ebp + 0xc]
call fcn.004e24d0
add esp, 4
jmp 0x4e62c9
add esi, eax
mov dword [ebp - 0x10], 0xffffffff
call dword [0x834360]
mov dword [ebp - 0x10], 3
push esi
call ecx
nop
cmp dword [0x889b2c], 0
jne 0x4e61e8
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x33a304e3
push eax
call fcn.0071993d
add esp, 4
nop
mov dword [eax], 0x751304
mov edx, dword [ebp - 0x20]
mov ecx, edx
xor ecx, 0x33a30437
mov dword [eax + ecx], 0
mov ecx, edx
xor ecx, 0x33a30424
mov esi, dword [ebp - 0x2c]
mov dword [eax + esi], ecx
mov ecx, edx
xor ecx, 0x33a30427
mov byte [eax + ecx], 0
mov ecx, dword [ebp - 0x54]
mov dword [eax + ecx], 0x751360
mov ecx, dword [ebp - 0x50]
mov dword [eax + ecx], 0
mov ecx, dword [ebp - 0x74]
mov dword [eax + ecx], 0
mov ecx, dword [ebp - 0x5c]
mov dword [eax + ecx], 0
mov dword [0x889b2c], eax
nop
mov eax, dword [0x889b2c]
mov ecx, dword [ebp - 0x50]
mov eax, dword [eax + ecx]
add eax, dword [0x88984e]
mov dword [0x87d2eb], eax
mov eax, dword [ebp - 0x28]
test dword [0x8893db], eax
jne 0x4e6233
nop
mov ecx, dword [ebp - 0x20]
xor ecx, 0x33a304d3
add ecx, dword [0x8898e8]
mov dword [ebp - 0x28], ecx
call fcn.00492100
in ax, 0x64
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x28]
call fcn.004921c0
nop
cmp byte [0x889bcc], 0
jne 0x4e6257
nop
mov ecx, dword [ebp - 0x20]
mov eax, ecx
xor eax, 0xf3a3042b
and eax, dword [0x87d2db]
xor eax, ecx
cmp eax, 0xb3a3042b
jne 0x4e628e
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x33a30427
mov ecx, dword [ebp - 0x5c]
push dword [ebp + ecx - 0x88]
push dword [ebp + eax - 0x88]
call dword [0x834038]
nop
push dword [ebp - 0x88]
mov eax, dword [ebp - 0x54]
push dword [ebp + eax - 0x88]
call dword [0x83403c]
nop
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x6c]
mov byte [eax + ecx], 0
or byte [0x87d2c7], 1
nop
mov ebx, dword [ebp - 0x40]
mov edi, dword [ebp - 0x3c]
nop
mov esi, dword [ebp - 0x68]
test esi, esi
je 0x4e62c2
mov ecx, esi
call fcn.00445360
push dword [ebp - 0x50]
push esi
call fcn.0071996d
add esp, 8
nop
cmp byte [ebp - 0x34], 0
je 0x4e62d2
nop
mov edi, dword [0x87d2eb]
xor ebx, ebx
nop
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
mov eax, edi
mov edx, ebx
add esp, 0x4b4
pop esi
pop edi
pop ebx
pop ebp
ret
nop
mov edi, dword [0x87d2eb]
jmp 0x4e62d2
mov esi, eax
xor esi, 0x33a3042f
or edi, esi
mov dword [sym.ixptestoope.exe_Ordinal_1], edi
mov ebx, dword [0x87d2eb]
xor eax, 0x33a30437
lea ecx, [ebp - 0x4c0]
push eax
push ecx
push 0x87d2c7
call dword [0x834264]
mov edi, dword [ebp + esi - 0x4c0]
mov ecx, ebx
call dword [0x834360]
mov esi, dword [ebp + 0xc]
push esi
push 0
push edi
call ebx
push esi
call fcn.004e24d0
add esp, 4
xor edi, edi
xor ebx, ebx
jmp 0x4e62d2
nop
mov dword [ebp - 0x10], 1
call fcn.006fce21
nop
mov dword [ebp - 0x10], 2
call fcn.006fce21
nop word cs:[eax + eax]
push ebp
sub esp, 0x10
add ebp, 0xc
nop
push dword [ebp - 0x4c]
push dword [ebp - 0x38]
call fcn.0071996d
add esp, 8
add esp, 0x10
pop ebp
ret