Function at 0x4913ac
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3d4
push ebx
push esi
push edi
push esi
push edi
push edx
push ecx
push ebx
push eax
cmp dword [0x4af440], 1
jne 0x492b72
and dword [0x4af97c], 0
and dword [0x4af444], 0
and dword [0x4af448], 0
and byte [0x4af4c0], 0
call fcn.0048b2ef
push dword [0x4ae908]
call fcn.0048e619
pop ecx
mov eax, dword [0x4af2ba]
mov dword [0x4ae848], eax
call fcn.0048e99b
mov byte [0x4ae7e1], 0x6c
mov byte [0x4ae7e2], 0x33
mov byte [0x4ae7e3], 0x32
mov byte [0x4ae7e4], 0x2e
mov byte [0x4ae7df], 0x6e
mov byte [0x4ae7e0], 0x65
mov byte [0x4ae7e5], 0x64
mov byte [0x4ae7e6], 0x6c
mov byte [0x4ae7e7], 0x6c
and byte [0x4ae7e8], 0
mov byte [str.Kernel32.dll], 0x4b
mov byte [0x4ae7dd], 0x65
mov byte [0x4ae7de], 0x72
call fcn.0048b000
call fcn.0048b20e
call fcn.0048b381
test eax, eax
je 0x491493
mov eax, dword [entry0]
add eax, 0x3e9
mov dword [entry0], eax
mov eax, dword [0x4ae908]
add eax, 0x3e9
mov dword [0x4ae908], eax
call fcn.00493130
mov dword [ebp - 0x220], eax
push dword [ebp - 0x220]
call fcn.0048b189
pop ecx
cmp dword [0x4aeb36], 0
je 0x4914b8
call fcn.0048bc37
mov eax, dword [0x4ae848]
sub eax, dword [ebp - 0x220]
mov dword [0x4ae848], eax
mov byte [ebp - 0x26c], 0x49
mov byte [ebp - 0x26b], 0x73
mov byte [ebp - 0x26a], 0x44
mov byte [ebp - 0x262], 0x50
mov byte [ebp - 0x261], 0x72
mov byte [ebp - 0x260], 0x65
mov byte [ebp - 0x25f], 0x73
mov byte [ebp - 0x25e], 0x65
and dword [ebp - 4], 0
call fcn.00494667
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x80000000
jae 0x491527
mov dword [0x4af984], 1
jmp 0x49152e
and dword [0x4af984], 0
mov byte [ebp - 0x269], 0x65
mov byte [ebp - 0x268], 0x62
mov byte [ebp - 0x267], 0x75
mov byte [ebp - 0x266], 0x67
mov byte [ebp - 0x265], 0x67
mov byte [ebp - 0x264], 0x65
mov byte [ebp - 0x263], 0x72
mov byte [ebp - 0x25d], 0x6e
mov byte [ebp - 0x25c], 0x74
and byte [ebp - 0x25b], 0
lea eax, [ebp - 0x1f4]
push eax
call fcn.004930b0
pop ecx
jmp 0x491584
sub esp, 0x10
lea esi, [ebp - 0x1f4]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00491174
add esp, 0x10
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x208]
mov dword [0x4af428], eax
mov eax, dword [ebp - 0x208]
mov dword [0x4ae844], eax
call fcn.0048c5fd
push str.Kernel32.dll
call fcn.00493d1b
pop ecx
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0
je 0x49160a
mov eax, dword [ebp - 0x210]
mov dword [0x4ae83c], eax
lea eax, [ebp - 0x26c]
push eax
push dword [ebp - 0x210]
call fcn.00492f33
pop ecx
pop ecx
mov dword [0x4af438], eax
mov eax, dword [0x4af438]
xor eax, dword [0x4ae83c]
mov dword [0x4af438], eax
jo 0x49160f
jno 0x49160f
and dword [esi - 0x39], 0xfffdd085
dec dword [edx]
add byte [edx + 3], dh
mov word [ebp - 0x230], 0xa
jb 0x49161d
jae 0x49161d
sub bl, 0x59
jmp 0x491678
push ecx
xor ecx, ecx
jecxz 0x491625
je 0x49167f
pop ecx
jmp 0x492b72
jl 0x491630
jge 0x491630
add eax, edx
shr cl, 1
xor byte [edx], al
add byte [eax], al
jmp 0x491865
jle 0x49163a
jg 0x49163a
loopne 0x491624
jmp 0x491aab
insb byte es:[edi], dx
add al, 0
add byte [edx + 3], dh
jb 0x491644
jae 0x491644
add dword [eax - 0x17], esi
jo 0x49162e
jmp 0x491865
sbb al, 2
add byte [eax], al
jne 0x49164e
je 0x49164e
sub cl, 0xdc
add dword [eax], eax
add byte [esi + 3], dh
jmp 0x49182f
jbe 0x491658
ja 0x491658
jb 0x491642
jmp 0x492b72
adc eax, 0x79000015
add edi, dword [eax + 1]
jns 0x491662
js 0x491662
mov al, 0xeb
invalid
jmp 0x49162b
jbe 0x491669
ja 0x491669
imul ecx
test dword [ecx], 0x37a0000
jmp 0x491865
jp 0x491673
jnp 0x491673
jae 0x49165d
jmp 0x492b72
cli
adc al, 0
add byte [eax + 0x66eb01eb], dl
and dword [ebp - 0x254], 0
nop
jmp 0x49167c
and word [ebp - 0x254], 0
lodsb al, byte [esi]
std
invalid
jmp 0x491698
mov ax, word [ebp - 0x254]
add ax, 1
mov word [ebp - 0x254], ax
movzx eax, word [ebp - 0x254]
cmp eax, 6
jge 0x49182f
jo 0x4916ad
jno 0x4916ad
ljmp 0xfffd:0xac85b70f
movzx eax, word [ebp - 0x254]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0
je 0x49177e
sub dword [ebp - 0x3a0], 1
cmp dword [ebp - 0x3a0], 0
je 0x491751
sub dword [ebp - 0x3a0], 1
cmp dword [ebp - 0x3a0], 0
je 0x491816
sub dword [ebp - 0x3a0], 1
cmp dword [ebp - 0x3a0], 0
je 0x491768
sub dword [ebp - 0x3a0], 1
cmp dword [ebp - 0x3a0], 0
je 0x491802
sub dword [ebp - 0x3a0], 1
cmp dword [ebp - 0x3a0], 0
je 0x491730
jmp 0x49182a
jbe 0x491735
ja 0x491735
mov bl, 0x66
mov eax, dword [ebp - 0x23c]
mov ax, word [ebp - 0x23c]
add ax, 1
mov word [ebp - 0x23c], ax
jns 0x49174c
js 0x49174c
mov ch, cl
fld dword [eax]
add byte [eax], al
jmp 0x49182a
jp 0x491756
jnp 0x491756
test dword [esi - 0x7d], esp
movsd dword es:[edi], dword [esi]
salc
std
invalid
and word [ebp - 0x22a], 0
jl 0x491763
jge 0x491763
xchg cl, ch
ret 0
jmp 0x49182a
jmp 0x49176b
or word [ebp - 0x232], 0xffff
jo 0x491779
jno 0x491779
mov cl, ch
lodsb al, byte [esi]
add byte [eax], al
add byte [edx + 3], dh
jmp 0x49182a
jb 0x491783
jae 0x491783
and dword [esi - 0x7d], 0xffffffa5
in al, 0xfd
invalid
and word [ebp - 0x21c], 0
jmp 0x49179f
mov ax, word [ebp - 0x21c]
add ax, 1
mov word [ebp - 0x21c], ax
movzx eax, word [ebp - 0x21c]
cmp eax, 3
jge 0x4917fb
jne 0x4917b0
je 0x4917b0
and dword [esi - 0x7d], 0xffffffa5
fdivr st(5)
invalid
and word [ebp - 0x228], 0
jmp 0x4917cc
mov ax, word [ebp - 0x228]
add ax, 1
mov word [ebp - 0x228], ax
movzx eax, word [ebp - 0x228]
cmp eax, 3
jge 0x4917f9
jbe 0x4917dd
ja 0x4917dd
test byte [edi], cl
mov bh, 0x85
in al, 0xfd
invalid
movzx eax, word [ebp - 0x21c]
lea eax, [ebp + eax*8 - 0x248]
movzx ecx, word [ebp - 0x228]
and word [eax + ecx*2], 0
jmp 0x4917ba
jmp 0x49178d
jns 0x491800
js 0x491800
test ebx, ebp
sub byte [edx + 3], dh
jmp 0x49182a
jb 0x491807
jae 0x491807
mov dl, 0x66
and dword [ebp - 0x22c], 0
and word [ebp - 0x22c], 0
jne 0x491814
je 0x491814
mov ebx, ebp
adc al, 0x7e
add edi, dword [edi + 1]
jmp 0x49182a
jle 0x49181b
jg 0x49181b
mov al, 0x66
and dword [ebp - 0x242], 0
and word [ebp - 0x242], 0
push ecx
xor ecx, ecx
jecxz 0x491829
xchg dword [ecx - 0x17], ebx
push edi
invalid
pop ecx
jmp 0x491686
jp 0x491834
jnp 0x491834
add ebx, ebp
das
jmp 0x491865
jl 0x49183b
jge 0x49183b
adc ecx, ebp
stosd dword es:[edi], eax
push es
add byte [eax], al
jmp 0x491eeb
jle 0x491845
jg 0x491845
jne 0x49182f
jmp 0x492b72
sub byte [ebx], dl
add byte [eax], al
push ecx
xor ecx, ecx
jecxz 0x491850
jno 0x4918aa
pop ecx
jmp 0x491865
jmp 0x491856
jmp 0x492249
jo 0x491860
jno 0x491860
ja 0x49184a
jmp 0x492b72
or eax, 0x72000013
add esi, dword [ebx + 1]
jb 0x49186a
jae 0x49186a
ret 0x8366
and word [ebp - 0x254], 0
jmp 0x491886
mov ax, word [ebp - 0x254]
add ax, 1
mov word [ebp - 0x254], ax
movzx eax, word [ebp - 0x254]
cmp eax, 3
jge 0x4919a6
jne 0x49189b
je 0x49189b
les ecx, [edi]
mov bh, 0x85
lodsb al, byte [esi]
std
invalid
movzx eax, word [ebp - 0x254]
movzx ecx, word [ebp - 0x254]
imul eax, ecx
movzx ecx, word [ebp - 0x254]
imul eax, ecx
movzx ecx, word [ebp - 0x254]
imul eax, ecx
add eax, 7
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x3a8], eax
sub dword [ebp - 0x3a8], 7
cmp dword [ebp - 0x3a8], 0
je 0x491985
scasd eax, dword es:[edi]
ror dword [edi], 0xb7
lea ebp, [ebp + edi*8 - 0x50f00001]
ror dword [edi], 0xb7
lea ebp, [ebp + edi*8 - 0x50f00001]
rol dword [ebx - 0x7a76f840], 0x5c
cld
invalid
sub dword [ebp - 0x3a8], 1
cmp dword [ebp - 0x3a8], 0
je 0x491918
sub dword [ebp - 0x3a8], 0xf
cmp dword [ebp - 0x3a8], 0
je 0x49190e
jmp 0x4919a1
jo 0x491913
jno 0x491913
mov ebp, ecx
pop edx
add eax, dword [eax]
add byte [edx + 3], bh
jmp 0x491c72
jp 0x49191d
jnp 0x49191d
loopne 0x49192d
movzx eax, word [ebp - 0x22a]
cdq
push 3
pop ecx
idiv ecx
mov ecx, edx
dec ecx
mov bh, 0x85
salc
std
invalid
neg ecx
sbb ecx, ecx
neg ecx
movzx eax, word [ebp - 0x22a]
cdq
push 5
pop esi
idiv esi
xor eax, eax
cmp edx, 2
setne al
or ecx, eax
test ecx, ecx
je 0x491978
jl 0x491953
jge 0x491953
jmp 0x4919ba
mov ax, word [ebp - 0x22c]
mov word [ebp - 0x232], ax
jle 0x491966
jg 0x491966
fisub word [esi - 0x39]
test edx, edx
std
invalid
mov word [ebp - 0x22e], 1
push ecx
xor ecx, ecx
jecxz 0x491975
lds ebx, [ecx - 0x15]
or byte [esi - 0x7d], ah
movsd dword es:[edi], dword [esi]
sar ch, cl
invalid
pop ecx
jmp 0x491980
and word [ebp - 0x22e], 0
jmp 0x491983
jmp 0x4919a1
jbe 0x49198a
ja 0x49198a
mov ebx, 0xd6858b66
std
invalid
mov ax, word [ebp - 0x22a]
add ax, 1
mov word [ebp - 0x22a], ax
jns 0x4919a1
js 0x4919a1
fucomi st(1)
into
invalid
jmp 0x491874
jns 0x4919ab
js 0x4919ab
invalid
movzx eax, word [ebp - 8]
cdq
push 7
pop ecx
idiv ecx
mov ecx, edx
dec ecx
dec ecx
neg ecx
sbb ecx, ecx
fstp dword [ebx]
leave
inc ecx
movzx eax, word [ebp - 8]
cdq
push 0xb
pop esi
idiv esi
sub edx, 5
neg edx
sbb edx, edx
inc edx
or ecx, edx
test ecx, ecx
je 0x491a01
jp 0x4919db
jnp 0x4919db
or al, 0x66
mov eax, dword [ebp - 0x22c]
mov ax, word [ebp - 0x22c]
mov word [ebp - 0x232], ax
jl 0x4919ee
jge 0x4919ee
mov edx, 0xd285c766
std
invalid
mov word [ebp - 0x22e], 1
jle 0x4919fc
jg 0x4919fc
invalid
jmp 0x491c72
push ecx
xor ecx, ecx
jecxz 0x491a07
int 0x59
pop ecx
movzx eax, word [ebp - 0x242]
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 9
ja case.default.0x491a28
mov eax, dword [ebp - 0x3ac]
jmp dword [eax*4 + 0x492b84]
invalid
jmp 0x491a32
jmp 0x492263
jo 0x491a3c
jno 0x491a3c
js 0x491a26
jmp 0x492578
aaa
or eax, dword [eax]
add byte [edx + 3], dh
jb 0x491a46
jb 0x491a46
jae 0x491a46
add dword [edx + 0xc2ae9], esp
mov byte [0xc2ae9], al
jmp 0x492675
add byte [ebp + 3], dh
jne 0x491a50
je 0x491a50
invalid
jmp 0x492717
jbe 0x491a5a
ja 0x491a5a
loopne 0x491a44
jmp 0x492769
or cl, byte [0x3790000]
jns 0x491a64
js 0x491a64
ret 0xc0a1
mov eax, dword [0x4b2fc0]
cmp dword [eax + 8], 0
je 0x491a79
mov dword [0x4af9b0], 0x3e9
jmp 0x4927fc
jp 0x491a83
jnp 0x491a83
mov dword [0xdf6e9], eax
add byte [ebx + eax + 0x7d], bh
jl 0x491a8d
jge 0x491a8d
invalid
jmp 0x49287e
jl 0x491a8d
jge 0x491a8d
add ebp, ecx
pushal
push cs
add byte [eax], al
jmp 0x4928f2
jle 0x491a97
jg 0x491a97
and eax, 0xf80e9
add byte [ecx + 0x31], dl
push ecx
xor ecx, ecx
jmp 0x492a1c
push ecx
xor ecx, ecx
jecxz 0x491aa2
jge 0x491afc
pop ecx
jmp 0x492a67
jmp 0x491aab
jo 0x491ab0
jno 0x491ab0
add dword [ecx - 0x24f17], esp
mov eax, dword [0xfffdb0e9]
jmp 0x491865
push dword [edx + 3]
jb 0x491aba
jae 0x491aba
mov cl, 0xe9
movsd dword es:[edi], dword [esi]
sti
invalid
jmp 0x491664
jne 0x491ac4
je 0x491ac4
js 0x491aae
jmp 0x492b72
test eax, 0x76000010
add esi, dword [edi + 1]
jbe 0x491ace
ja 0x491ace
shl byte [esi - 0x7d], 1
movsd dword es:[edi], dword [esi]
lodsb al, byte [esi]
std
invalid
and word [ebp - 0x254], 0
jmp 0x491aea
mov ax, word [ebp - 0x254]
add ax, 1
mov word [ebp - 0x254], ax
movzx eax, word [ebp - 0x254]
cmp eax, 4
jge 0x491c57
jns 0x491aff
js 0x491aff
ror dword [edi], 1
mov bh, 0x85
lodsb al, byte [esi]
std
invalid
movzx eax, word [ebp - 0x254]
movzx ecx, word [ebp - 0x254]
imul eax, ecx
movzx ecx, word [ebp - 0x254]
imul ecx, ecx, 3
lea eax, [eax + ecx + 1]
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x3b4], eax
sub dword [ebp - 0x3b4], 1
cmp dword [ebp - 0x3b4], 0
je 0x491c1c
sub dword [ebp - 0x3b4], 4
cmp dword [ebp - 0x3b4], 0
je 0x491b81
sub dword [ebp - 0x3b4], 6
cmp dword [ebp - 0x3b4], 0
je 0x491c3f
sub dword [ebp - 0x3b4], 8
cmp dword [ebp - 0x3b4], 0
je 0x491c3a
jmp 0x491c52
jle 0x491b86
jg 0x491b86
jge 0x491b96
movzx eax, word [ebp - 0x242]
movzx ecx, word [ebp - 0x230]
cmp eax, ecx
mov bh, 0x85
mov esi, 0xffffffd
mov bh, 0x8d
sar ch, 1
invalid
jne case.default.0x491bc1
push ecx
xor ecx, ecx
jecxz 0x491b9e
sub al, 0x59
pop ecx
movzx eax, word [ebp - 0x22a]
cdq
push 9
pop ecx
idiv ecx
mov dword [ebp - 0x3b8], edx
cmp dword [ebp - 0x3b8], 8
ja case.default.0x491bc1
mov eax, dword [ebp - 0x3b8]
jmp dword [eax*4 + 0x492bac]
jmp 0x491bcb
jmp 0x491abf
jo 0x491bd5
jno 0x491bd5
mov cl, 0xe9
cmp esp, 0x1ebffff
jmp 0x491bdd
mov dl, 0xe9
jns 0x491be6
jmp 0x49185b
jmp 0x491bdd
jmp 0x49225b
add byte [eax], al
jb 0x491be7
jae 0x491be7
mov bl, 0xe9
push esp
cld
invalid
jmp 0x491840
jne 0x491bf1
je 0x491bf1
mov ah, 0xe9
sub edx, edi
invalid
jmp 0x49161f
jmp 0x491bf9
jmp 0x49166e
jbe 0x491c03
ja 0x491c03
mov dh, 0xe9
dec ebx
cli
invalid
jmp 0x491653
jmp 0x491c0b
jmp 0x491c66
jns 0x491c12
js 0x491c12
mov eax, 0x2e6e9
add bl, ch
jmp 0x491c1a
invalid
jmp 0x491efd
jmp 0x491c1a
jmp 0x491c52
jp 0x491c21
jnp 0x491c21
jge 0x491c88
mov ax, word [ebp - 0x242]
mov eax, dword [ebp - 0x242]
mov esi, 0x66fffffd
add eax, 0x89660001
test dword [esi + 0x7cfffffd], edi
add edi, dword [ebp + 1]
add ax, 1
mov word [ebp - 0x242], ax
jl 0x491c38
jge 0x491c38
jge 0x491c24
jmp 0x491c52
sbb bl, ch
add dword [esi + 0x37a33eb], ecx
jmp 0x491c3d
mov gs, ebx
xor edi, dword [edx + 3]
jmp 0x491c72
jp 0x491c44
jnp 0x491c44
and ah, byte [esi - 0x39]
test edx, edx
std
invalid
mov word [ebp - 0x22e], 1
jl 0x491c52
jge 0x491c52
loop 0x491c3c
jmp 0x491ad8
cmp esi, 0x37effff
jle 0x491c5c
jg 0x491c5c
and cl, ch
add al, 0xfc
invalid
jmp 0x491865
jmp 0x491c64
jmp 0x491c57
push ecx
xor ecx, ecx
jecxz 0x491c6c
jno 0x491cc6
pop ecx
jmp 0x492b72
jmp 0x491c75
and word [ebp - 0x254], 0
jmp 0x491c91
mov ax, word [ebp - 0x254]
add ax, 1
add dword [eax], eax
mov word [ebp - 0x254], ax
movzx eax, word [ebp - 0x254]
cmp eax, 8
jge 0x491eeb
jo 0x491ca6
jno 0x491ca6
ror dword [edi], 1
mov bh, 0x85
lodsb al, byte [esi]
std
invalid
movzx eax, word [ebp - 0x254]
movzx ecx, word [ebp - 0x254]
imul eax, ecx
movzx ecx, word [ebp - 0x254]
lea eax, [eax + ecx + 1]
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0x15
jg 0x491d3f
invalid
cmp dword [ebp - 0x3bc], 0x15
je 0x491e3b
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x3c0], eax
sub dword [ebp - 0x3c0], 1
cmp dword [ebp - 0x3c0], 0
je 0x491e69
sub dword [ebp - 0x3c0], 2
cmp dword [ebp - 0x3c0], 0
je 0x491dc0
sub dword [ebp - 0x3c0], 4
cmp dword [ebp - 0x3c0], 0
je 0x491e16
sub dword [ebp - 0x3c0], 6
cmp dword [ebp - 0x3c0], 0
je 0x491de6
jmp 0x491ee6
cmp dword [ebp - 0x3bc], 0x1f
je 0x491ec0
cmp dword [ebp - 0x3bc], 0x2b
je 0x491e93
cmp dword [ebp - 0x3bc], 0x39
je 0x491d67
jmp 0x491ee6
jmp 0x491d6a
movzx eax, word [ebp - 0x22e]
cdq
push 2
pop ecx
idiv ecx
mov dword [ebp - 0x3c4], edx
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x491da4
sub dword [ebp - 0x3c8], 1
cmp dword [ebp - 0x3c8], 0
je 0x491dae
lodsd eax, dword [esi]
cmp ah, bh
invalid
jmp 0x491db6
jb 0x491da9
jae 0x491da9
jecxz 0x491d93
jmp 0x4919a6
clc
sti
invalid
jmp 0x491db1
jmp 0x491f05
jne 0x491dbb
je 0x491dbb
fldl2t
add dword es:[eax], eax
add byte [ebp + 3], dh
jmp 0x491ee6
jne 0x491dc5
je 0x491dc5
mov edi, 0xfe0485c7
invalid
mov dword [ebp - 0x1fc], 0x15a
jmp 0x491dd2
mov dword [ebp - 0x204], 0x4e35
jbe 0x491de1
ja 0x491de1
sbb ebp, ecx
add byte [ecx], al
add byte [eax], al
jmp 0x491ee6
jmp 0x491de9
cmp dword [ebp - 0x18], 0
je 0x491e0c
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x204]
and eax, 0xffff
mov ecx, dword [ebp - 0x250]
add ecx, eax
mov dword [ebp - 0x250], ecx
jp 0x491e11
jnp 0x491e11
imul ecx
rol byte [eax], 1
add byte [eax], al
jmp 0x491ee6
jmp 0x491e19
mov eax, dword [ebp - 0x1fc]
imul eax, dword [ebp - 0x1e4]
and eax, 0xffff
mov dword [ebp - 0x250], eax
jns 0x491e36
js 0x491e36
sub ebp, ecx
stosd dword es:[edi], eax
add byte [eax], al
add bl, ch
add dword [ebx + ecx*4 - 0x2037b], edi
dec dword [edi]
scasd eax, dword es:[edi]
test dword [esi + edi*8], ebx
invalid
jmp 0x491ee6
jmp 0x491e3e
mov eax, dword [ebp - 0x204]
imul eax, dword [ebp - 0x1e4]
mov ecx, dword [ebp - 0x250]
shl ecx, 0x10
and cx, 0
and ecx, 0
lea eax, [eax + ecx + 1]
mov dword [ebp - 0x270], eax
jl 0x491e67
jge 0x491e67
cmp ebp, ebx
jge 0x491e55
jmp 0x491ee6
jmp 0x491e6c
add dword [ebx], ecx
mov eax, dword [ebp - 0x208]
shr eax, 0x10
mov dword [ebp - 0x18], eax
jb 0x491e7d
jae 0x491e7d
aam 0x8b
test eax, edi
std
invalid
mov eax, dword [ebp - 0x208]
and eax, 0xffff
mov dword [ebp - 0x1e4], eax
jmp 0x491e91
jmp 0x491ee6
push ecx
xor ecx, ecx
jecxz 0x491e99
mov ebx, 0x90858b59
std
invalid
pop ecx
mov eax, dword [ebp - 0x270]
and eax, 0x7fff
mov dword [ebp - 0x270], eax
jmp 0x491eae
mov ax, word [ebp - 0x270]
mov word [ebp - 8], ax
jo 0x491ebe
jno 0x491ebe
mov ebp, ebx
jmp 0x491ec3
jmp 0x491ee6
jmp 0x491ec3
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x208], eax
jle 0x491ed4
jg 0x491ed4
mov esp, 0xfd90858b
invalid
mov eax, dword [ebp - 0x270]
shr eax, 0x10
mov dword [ebp - 0x270], eax
jmp 0x491ee6
jmp 0x491c7f
jmp 0x491eee
jmp 0x491865
jbe 0x491ef8
ja 0x491ef8
adc cl, ch
dec ebp
stc
invalid
jmp 0x49184a
jmp 0x491f00
jmp 0x492b72
jns 0x491f0a
js 0x491f0a
fisub dword [esi - 0x7d]
movsd dword es:[edi], dword [esi]
lodsb al, byte [esi]
std
invalid
and word [ebp - 0x254], 0
jmp 0x491f26
mov ax, word [ebp - 0x254]
add ax, 1
mov word [ebp - 0x254], ax
movzx eax, word [ebp - 0x254]
cmp eax, 7
jge 0x492244
jmp 0x491f39
movzx eax, word [ebp - 0x254]
movzx ecx, word [ebp - 0x254]
imul eax, ecx
movzx ecx, word [ebp - 0x254]
imul eax, ecx
inc eax
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x3d0], eax
sub dword [ebp - 0x3d0], 1
cmp dword [ebp - 0x3d0], 0
je 0x492116
sub dword [ebp - 0x3d0], 1
cmp dword [ebp - 0x3d0], 0
je 0x492024
sub dword [ebp - 0x3d0], 7
cmp dword [ebp - 0x3d0], 0
je case.default.0x492169
sub dword [ebp - 0x3d0], 0x13
cmp dword [ebp - 0x3d0], 0
je 0x492096
sub dword [ebp - 0x3d0], 0x25
cmp dword [ebp - 0x3d0], 0
je 0x492042
sub dword [ebp - 0x3d0], 0x3d
cmp dword [ebp - 0x3d0], 0
je 0x491ff0
sub dword [ebp - 0x3d0], 0x5b
cmp dword [ebp - 0x3d0], 0
je 0x492147
jmp 0x49223f
jbe 0x491ff5
ja 0x491ff5
fmul qword [edi]
mov bh, 0x85
cmp ch, 0xff
jmp [ebx - 0x40]
movzx eax, word [ebp - 0x280]
imul eax, eax, 3
movzx ecx, word [ebp - 0x28c]
add eax, ecx
mov word [ebp - 8], ax
jmp 0x49200f
mov ax, word [ebp - 8]
mov word [ebp - 0x22c], ax
jns 0x49201f
js 0x49201f
sub eax, 0x21be9
add bl, ch
add ebp, esp
jmp 0x49223f
jmp 0x492027
movzx eax, word [ebp - 8]
cdq
push 3
pop ecx
idiv ecx
mov word [ebp - 0x28c], dx
jle 0x49203d
jg 0x49203d
mov ecx, gs
std
add dword [eax], eax
add bl, ch
add dword [esi + 0xf], esi
mov bh, 0x85
je 0x492047
jmp 0x49223f
jmp 0x492045
movzx eax, word [ebp - 0x28c]
movzx ecx, word [ebp - 0x280]
lea ecx, [ebp + ecx*8 - 0x248]
mov ax, word [ecx + eax*2]
add ax, 1
movzx ecx, word [ebp - 0x28c]
movzx edx, word [ebp - 0x280]
lea edx, [ebp + edx*8 - 0x248]
mov word [edx + ecx*2], ax
jne 0x492080
test dword [ebp + edi*8 - 1], esi
dec dword [edi]
mov bh, 0x8d
cmp ch, 0xff
dec dword [ebp - 0x2473274]
invalid
invalid
je 0x492080
or eax, 0xd4858b66
std
invalid
mov ax, word [ebp - 0x22c]
mov word [ebp - 0x232], ax
jmp 0x492091
jmp 0x49223f
jo 0x49209b
jno 0x49209b
mov esp, dword [esi - 0x7d]
movsd dword es:[edi], dword [esi]
fdivr st(5)
invalid
and word [ebp - 0x228], 0
jmp 0x4920b7
mov ax, word [ebp - 0x228]
add ax, 1
mov word [ebp - 0x228], ax
movzx eax, word [ebp - 0x228]
cmp eax, 3
jge 0x49210c
jmp 0x4920c6
movzx eax, word [ebp - 0x280]
lea eax, [ebp + eax*8 - 0x248]
movzx ecx, word [ebp - 0x28c]
movzx eax, word [eax + ecx*2]
movzx ecx, word [ebp - 0x280]
lea ecx, [ebp + ecx*8 - 0x248]
movzx edx, word [ebp - 0x228]
movzx ecx, word [ecx + edx*2]
cmp eax, ecx
jle 0x49210a
mov ax, word [ebp - 0x228]
mov word [ebp - 0x28c], ax
jmp 0x4920a5
jb 0x492111
jae 0x492111
call 0x4a4afe
add byte [edx + 3], bh
jmp 0x49223f
jp 0x49211b
jnp 0x49211b
in al, 0xf
mov bh, 0x45
clc
movzx eax, word [ebp - 8]
cdq
push 9
pop ecx
idiv ecx
mov word [ebp - 8], dx
jmp 0x49212c
movzx eax, word [ebp - 8]
cdq
push 3
pop ecx
idiv ecx
mov word [ebp - 0x280], ax
jl 0x492142
jge 0x492142
lcall 0xeb00, 0xf8e9
add ecx, ebp
jmp 0x49223f
jmp 0x49214a
movzx eax, word [ebp - 8]
cdq
push 9
pop ecx
idiv ecx
mov dword [ebp - 0x3d4], edx
cmp dword [ebp - 0x3d4], 8
ja case.default.0x492169
mov eax, dword [ebp - 0x3d4]
jmp dword [eax*4 + 0x492bd0]
jp 0x492175
jnp 0x492175
invalid
jmp 0x491ab5
jmp 0x49217d
jmp 0x491853
jl 0x492187
jge 0x492187
ljmp 0xeb00:0xc5e9
jmp 0x492251
jmp 0x49218f
jmp 0x491836
jle 0x492199
jg 0x492199
out 0xe9, al
xchg edi, eax
hlt
jmp 0x491635
push ecx
xor ecx, ecx
jecxz 0x4921a4
in al, 0x59
pop ecx
jmp 0x49165d
jmp 0x4921ad
jmp 0x491649
jo 0x4921b7
jno 0x4921b7
loopne 0x4921a1
jmp 0x491c61
movsd dword es:[edi], dword [esi]
cli
invalid
jmp 0x4921bf
jmp 0x491ef3
jmp 0x4921c7
and word [ebp - 0x21c], 0
jmp 0x4921e3
mov ax, word [ebp - 0x21c]
add ax, 1
mov word [ebp - 0x21c], ax
movzx eax, word [ebp - 0x21c]
cmp eax, 3
jge 0x49223c
push ecx
xor ecx, ecx
jecxz 0x4921f5
mov esp, 0x85b70f59
cmp ch, 0xff
dec dword [ebp - 0x2473a7c]
invalid
pop ecx
movzx eax, word [ebp - 0x280]
lea eax, [ebp + eax*8 - 0x248]
movzx ecx, word [ebp - 0x28c]
movzx eax, word [eax + ecx*2]
movzx ecx, word [ebp - 0x21c]
lea ecx, [ebp + ecx*8 - 0x248]
movzx edx, word [ebp - 0x28c]
movzx ecx, word [ecx + edx*2]
cmp eax, ecx
jle 0x49223a
mov ax, word [ebp - 0x21c]
mov word [ebp - 0x280], ax
jmp 0x4921d1
jmp 0x49223f
jmp 0x491f14
jb 0x492249
jae 0x492249
test eax, 0xe92101eb
adc al, 0xf6
invalid
jmp 0x49224c
jmp 0x491865
jne 0x492256
je 0x492256
xor ecx, ebp
in al, 0xf3
invalid
jmp 0x49163f
jmp 0x49225e
jmp 0x492b72
jne 0x492268
je 0x492268
mov al, 0xe8
rcr byte [eax + eax], 1
add bh, bh
xor eax, 0x4ae8b8
call 0x493f3d
push dword [0x4ae8b8]
call fcn.0048bff3
pop ecx
push 0xc8
lea eax, [ebp - 0xe0]
push eax
push dword [0x4ae8b8]
call fcn.00493e9e
add esp, 0xc
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
lea eax, [ebp - 0xe0]
push eax
call fcn.00492f5a
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0xffffffff
jne 0x4922c5
jmp 0x492b7f
push 0
push dword [ebp - 0x274]
call fcn.0049368b
pop ecx
pop ecx
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0xffffffff
jne 0x4922e8
jmp 0x492b7f
push 0x8000
call fcn.0048c0a4
pop ecx
mov dword [0x4af98c], eax
push 0
lea eax, [ebp - 0x10]
push eax
push 0x7500
mov eax, dword [0x4af98c]
add eax, 0x500
push eax
push dword [ebp - 0x274]
call fcn.00493609
push dword [ebp - 0x274]
call fcn.0049337a
pop ecx
cmp dword [0x4af2aa], 0
je 0x4923bf
push 0x1000
call fcn.0048c0a4
pop ecx
mov dword [0x4af2b2], eax
cmp dword [0x4af2b2], 0
jne 0x492350
jmp 0x492b7f
push 0x1000
mov eax, dword [0x4ae8b8]
add eax, dword [0x4af2aa]
push eax
push dword [0x4af2b2]
call fcn.0048c7e2
add esp, 0xc
mov eax, dword [0x4af2b6]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x1f8], eax
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x1f8]
push eax
call fcn.0048c72f
add esp, 0xc
push 0x1000
push dword [0x4af2b2]
lea eax, [ebp - 0x1e0]
push eax
call fcn.0048c70b
add esp, 0xc
jmp 0x4923c9
mov eax, dword [0x4ae8b8]
mov dword [0x4af2b2], eax
push 0x4ae058
push 0x4ae018
push dword [0x4af2b2]
call fcn.0048bf60
add esp, 0xc
test eax, eax
je 0x4923ea
jmp 0x492b7f
movzx eax, word [0x4ae05e]
imul eax, eax, 0x28
push eax
call fcn.0048c0a4
pop ecx
mov dword [0x4ae150], eax
cmp dword [0x4ae150], 0
jne 0x49240e
jmp 0x492b7f
push dword [0x4ae150]
push 0x4ae058
push 0x4ae018
push dword [0x4af2b2]
call fcn.0048bfc2
add esp, 0x10
mov eax, dword [ebp - 0x214]
xor eax, 0x3a85d72e
mov ecx, dword [0x4af2b2]
cmp dword [ecx + 0x28], eax
jne 0x492444
jmp 0x49246f
mov eax, dword [entry0]
mov dword [eax + 0x320], 0x3e9
mov eax, dword [entry0]
mov eax, dword [eax + 0x320]
add eax, 0x3e9
mov ecx, dword [entry0]
mov dword [ecx + 0x320], eax
cmp dword [0x4af988], 0
je 0x492487
call fcn.00493db2
call fcn.0048e820
call fcn.0048b326
mov eax, dword [0x4af980]
add eax, dword [0x4af434]
xor edx, edx
mov ecx, 0x3e9
div ecx
mov dword [ebp - 0x294], edx
call fcn.00490187
test dword [eax], eax
add byte [eax], al
nop
cmp dword [ebx - 0x1b], eax
sbb eax, 0xcf91a88c
or dword [edi + 0x6c434ac4], esi
inc ebx
in eax, 0x1d
mov word [eax - 0x48f6306f], gs
les ecx, [edx + 0x43]
insb byte es:[edi], dx
jg 0x4924ac
pop esp
ljmp 0x2a6e
test eax, ebx
std
invalid
nop
jbe 0x49257e
ja 0x49257e
mov dl, 0xe8
add al, 0xdc
invalid
call fcn.00490187
jno 0x492585
add byte [eax], al
nop
and byte [edi + 0x5e22e96a], ch
enter 0xffffffffffffa63c, 0x64
xor dl, byte [ecx + esi*8]
pop ds
and byte [ecx - 0x1d878b6d], ah
in al, 0x20
rcl byte [ebp + 0x1c], 0xf2
xchg esp, eax
rcr dword [ecx], 0xa3
pop esi
loopne 0x492564
aaa
jo 0x4925b0
invalid
cmp byte [edi], ah
and eax, 0x227621b2
sbb eax, 0x93cae0f0
add edx, dword [ebp - 0x56da28ad]
invalid
invalid
nop
cmp dword [0x4af38e], 0
je 0x49269b
mov eax, dword [entry0]
and dword [eax + 0x190], 0
mov eax, dword [0x4af2ba]
add eax, dword [0x4af38e]
mov dword [0x4af2ba], eax
jns 0x4926a0
js 0x4926a0
mov ah, 0x83
cmp eax, 0x4af2ae
add byte [esp + edx*2 + 0x7c], dh
add edi, dword [ebp + 1]
cmp dword [0x4af2ae], 0
je 0x4926fd
jl 0x4926ae
jge 0x4926ae
cmp eax, 0xf7f445c7
loop 0x4926fc
mov dword [ebp - 0xc], 0x48e2f7
jbe 0x4926ba
mul edx
dec eax
add byte [esi + 3], dh
ja 0x4926ba
jbe 0x4926ba
push dword [ebp - 0xc]
jne 0x4926b1
jle 0x4926c2
jg 0x4926c2
and dword [edi + edi*8 + 0x35], esp
add byte [eax], al
add byte [eax], al
push dword fs:[0]
jns 0x4926ce
js 0x4926ce
adc esp, dword [ecx + ecx*4 + 0x25]
add byte [eax], al
add byte [eax], al
mov dword fs:[0], esp
jne 0x4926da
je 0x4926da
mov eax, 0
mov eax, 0
mov byte [eax], 1
jbe 0x4926e7
ja 0x4926e7
jbe 0x492673
mov eax, dword [esp]
add al, 0x24
jb 0x4926ef
jae 0x4926ef
call fcn.0049ca57
add byte [eax], al
mov dword fs:[0], eax
jns 0x4926fa
js 0x4926fa
add esp, 8
add esp, 8
or al, ch
aaa
adc dword [eax], eax
add byte [ebp - 0x16fa8a40], al
je 0x49270d
call fcn.00493839
test eax, eax
jne 0x49270b
jmp 0x492b7f
add byte [eax], al
and dword [0x4af2ba], 0
mov edx, 0x4af2
jmp 0x491ac9
nop
cmp dword [0x4af2a0], 0
je 0x492764
and dword [ebp - 0x224], 0
jmp 0x49272b
lea eax, [ebp - 0x200]
push eax
push 0
lea eax, [ebp - 0x224]
push eax
push 0x4911b1
push 0
push 0
call fcn.004939fc
add esp, 0x18
mov dword [0x4ae84c], eax
cmp dword [0x4ae84c], 0xffffffff
jne 0x492764
jmp 0x49275d
push 1
call fcn.00493f6b
jmp 0x491ac9
nop
jl 0x49276f
jge 0x49276f
mov eax, 0xf3dc35ff
dec edx
add al, ch
in eax, 0xe0
invalid
push dword [0x4af3dc]
call fcn.0049085f
pop ecx
mov dword [0x4af3dc], eax
push dword [0x4af3e0]
call fcn.0049085f
pop ecx
mov dword [0x4af3e0], eax
push dword [0x4af3e4]
call fcn.0049085f
pop ecx
mov dword [0x4af3e4], eax
push dword [0x4af3e8]
call fcn.0049085f
pop ecx
mov dword [0x4af3e8], eax
push dword [0x4af3ec]
call fcn.0049085f
pop ecx
mov dword [0x4af3ec], eax
push dword [0x4af3f0]
call fcn.0049085f
pop ecx
mov dword [0x4af3f0], eax
push dword [0x4af3f4]
call fcn.0049085f
pop ecx
mov dword [0x4af3f4], eax
push dword [0x4af3fc]
call fcn.0049085f
pop ecx
mov dword [0x4af3fc], eax
jmp 0x491ac9
jle 0x492801
jg 0x492801
mov edx, 0xfd6cb5ff
invalid
push dword [ebp - 0x294]
call fcn.0048cb42
pop ecx
mov dword [ebp - 0x278], eax
push dword [0x4af400]
call fcn.0049085f
pop ecx
mov dword [0x4af400], eax
push dword [0x4af408]
call fcn.0049085f
pop ecx
mov dword [0x4af408], eax
push dword [0x4af410]
call fcn.0049085f
pop ecx
mov dword [0x4af410], eax
push dword [0x4af414]
call fcn.0049085f
pop ecx
mov dword [0x4af414], eax
push dword [0x4af418]
call fcn.0049085f
pop ecx
mov dword [0x4af418], eax
push dword [0x4af41c]
call fcn.0049085f
pop ecx
mov dword [0x4af41c], eax
jmp 0x491ac9
nop
push ecx
xor ecx, ecx
jecxz 0x492885
mov edi, 0xf83d8359
call 0x754928d8
pop esi
pop ecx
cmp dword [0x4ae8f8], 0
jne 0x4928ed
mov eax, dword [0x4af998]
add eax, dword [0x4af392]
mov dword [0x4af998], eax
push dword [0x4af40c]
push dword [0x4af2b6]
call fcn.0048da86
pop ecx
pop ecx
mov ecx, dword [0x4af998]
sub ecx, eax
mov dword [0x4af998], ecx
mov eax, dword [0x4af40c]
mov ecx, dword [0x4af998]
lea eax, [ecx + eax*2]
mov dword [0x4af998], eax
mov eax, dword [0x4af40c]
xor edx, edx
mov ecx, 0x3e9
div ecx
mov eax, dword [0x4af998]
add eax, edx
mov dword [0x4af998], eax
jmp 0x491ac9
mov eax, dword [ebp - 0x294]
imul eax, eax, 0x5a
add eax, 4
cmp eax, dword [ebp - 0x278]
je 0x492915
mov eax, dword [entry0]
add eax, 0x3e9
mov dword [entry0], eax
jmp 0x492918
cmp dword [0x4aeb22], 0
je 0x492a12
mov dword [ebp - 0x14], 0x400
mov eax, dword [0x4aeb42]
cmp eax, dword [ebp - 0x14]
jge 0x49293e
mov eax, dword [0x4aeb42]
mov dword [ebp - 0x14], eax
mov eax, dword [0x4ae8b4]
mov dword [ebp - 0x290], eax
push dword [ebp - 0x290]
call fcn.004946dc
pop ecx
mov dword [ebp - 0x258], eax
push dword [ebp - 0x258]
call fcn.00491375
pop ecx
mov dword [ebp - 0x20c], eax
and word [ebp - 0x228], 0
jmp 0x492989
mov ax, word [ebp - 0x228]
add ax, 1
mov word [ebp - 0x228], ax
movzx eax, word [ebp - 0x228]
cmp eax, dword [ebp - 0x14]
jge 0x492a01
call fcn.004937e8
movzx eax, word [ebp - 0x228]
push eax
push dword [ebp - 0x258]
call fcn.004943c3
pop ecx
pop ecx
test eax, eax
jne 0x4929fc
std
invalid
movzx eax, word [ebp - 0x228]
cmp eax, dword [ebp - 0x20c]
jl 0x4929d6
movzx eax, word [ebp - 0x228]
mov ecx, dword [ebp - 0x20c]
add ecx, 4
cmp eax, ecx
jl 0x4929fc
movzx eax, word [ebp - 0x228]
mov ecx, dword [ebp - 0x290]
mov al, byte [ecx + eax]
sub al, byte [0x4aeb46]
movzx ecx, word [ebp - 0x228]
mov edx, dword [ebp - 0x290]
mov byte [edx + ecx], al
jmp 0x492977
mov dword [0x4ae88c], 1
and dword [0x4aeb22], 0
call fcn.00494949
jmp 0x491ac9
jo 0x492a21
jno 0x492a21
jno 0x4929a5
cmp dword [0x4ae8f8], 0
jne 0x492a62
cmp eax, 0x4ae8f8
add byte [ebp + 0x38], dh
call fcn.00490187
and al, 0
add byte [eax], al
nop
mov edi, 0x8f00d305
hlt
jmp 0x491ac9
cmp dword [0x4ae8f8], 0
jne 0x492ae0
mov eax, dword [0x4af99c]
add eax, dword [0x4af396]
mov dword [0x4af99c], eax
jbe 0x492a85
ja 0x492a85
adc eax, 0xf3f835ff
dec edx
add bh, bh
xor eax, 0x4ae848
push dword [0x4af3f8]
push dword [0x4ae848]
call fcn.0048e3e3
pop ecx
pop ecx
mov ecx, dword [0x4af99c]
sub ecx, eax
mov dword [0x4af99c], ecx
mov eax, dword [0x4af3f8]
imul eax, eax, 9
mov ecx, dword [0x4af99c]
add ecx, eax
mov dword [0x4af99c], ecx
mov eax, dword [0x4af99c]
add eax, dword [0x4af980]
mov dword [0x4af99c], eax
jbe 0x492ad1
ja 0x492ad1
adc eax, 0x4af99ca1
add byte [0x3e9], al
mov eax, dword [0x4af99c]
add eax, 0x3e9
mov dword [0x4af99c], eax
jb 0x492ae5
jae 0x492ae5
push ebx
push dword [0x4b31fc]
call fcn.00492d4b
pop ecx
test eax, eax
je 0x492b11
mov eax, dword [entry0]
mov eax, dword [eax + 0x4b0]
add eax, 0x837571
mov ecx, dword [entry0]
mov dword [ecx + 0x4b0], eax
jb 0x492b16
jae 0x492b16
call 0x4b5602
add byte [ebx + 0x3e7502f8], al
call 0x492d45
cmp eax, 2
jne 0x492b5e
mov eax, dword [0x4af434]
xor edx, edx
mov ecx, 0x12c
div ecx
mov ecx, edx
mov eax, dword [0x4af980]
xor edx, edx
mov esi, 0x837571
div esi
mov eax, dword [entry0]
mov ecx, dword [eax + ecx*4]
add ecx, edx
mov eax, dword [0x4af434]
xor edx, edx
mov esi, 0x12c
div esi
mov eax, dword [entry0]
mov dword [eax + edx*4], ecx
pushal
call 0xcd22ba7
nop
mov dword [0x4af440], 2
jo 0x492b6d
jno 0x492b6d
jno 0x492b57
jmp 0x491ac9
push edi
out dx, eax
invalid
pop eax
pop ebx
pop ecx
pop edx
pop edi
pop esi
leave
jmp dword [0x4ae860]
pop edi
pop esi
pop ebx
leave
ret