Function at 0x4395c6
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2b0
push ebx
push esi
push edi
mov dword [ebp - 0x2a0], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x1bc], 4
mov eax, dword [ebp + 8]
mov dword [0x4100d4], eax
cmp dword [0x40f860], 0
je 0x438d97
cmp dword [ebp + 0xc], 0
jne 0x438d97
cmp dword [0x414330], 0
je 0x438d97
push 0x412d40
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x411190], eax
mov ecx, dword [0x414330]
push ecx
call fcn.00438811
cmp dword [0x414574], 0
je 0x438da5
jmp 0x43d68b
mov edx, dword [0x414574]
add edx, 1
mov dword [0x414574], edx
neg edi
neg edi
shr esp, 0
xor edx, dword [esp + 0x10]
xor edx, dword [esp + 0x10]
jle 0x438dc5
jg 0x438dd6
pushf
jge 0x438dcb
xchg edx, edi
xchg edx, edi
popf
jnp 0x438dd3
jle 0x438dd6
lcall 0xdd3a, 0x6808ec83
inc ebx
add byte [edi + edi*8 + 0x35], ah
add byte [eax], al
add byte [eax], al
sub esp, 8
push 0x43dd3a
push dword fs:[0]
mov dword fs:[0], esp
shr esp, 0
ja 0x438df1
jbe 0x438e0a
pushf
test esi, 0x241
xchg esp, esp
cmc
xor esp, 0
popf
jmp 0x438e05
jne 0x438e07
ja 0x438e0a
ljmp 0x8dff:0xfe236ae8
call fcn.0041b179
lea edi, [edi + 0x1e29]
lea edi, [edi - 0x1e29]
test eax, ebx
je 0x438e1f
jnp 0x438e31
pushf
shl edi, 0
popf
jmp 0x438e2a
mov edx, edx
js 0x438e2e
jp 0x438e31
call 0x306f93fc
inc ecx
add byte [ecx], al
add byte [eax], al
add cl, al
in al, 0
mov dword [0x41302c], 1
shl esp, 0
jp 0x438e56
pushf
rol esp, 0
cmc
stc
jns 0x438e49
popf
xchg edi, edx
xchg edi, edx
jp 0x438e51
jp 0x438e53
jnp 0x438e56
mov esi, 0x4060f0b8
add byte [section.0000006], ch
mov eax, 0x4060f0
sub eax, section.0000006
mov dword [0x412ff0], eax
neg edi
neg edi
jb 0x438e6b
jne 0x438e7b
pushf
rol esp, 0
popf
jmp 0x438e76
jo 0x438e78
je 0x438e7b
ljmp 0x41:0x2ff00d8b
mov ecx, dword [0x412ff0]
and ecx, 0x80000007
jns 0x438e8e
dec ecx
or ecx, 0xfffffff8
inc ecx
mov edx, dword [0x412ff0]
sub edx, ecx
mov dword [0x412ff0], edx
sub esp, 0
xor eax, ebx
xor eax, ebx
ror esp, 0
jns 0x438eba
pushf
jo 0x438eac
cmc
lea ebx, [ebx]
popf
jp 0x438eb3
jbe 0x438eb5
mov esp, esp
js 0x438eba
add eax, 0xffc4e5e8
push ebp
call 0x4353a4
cmc
xchg esi, ecx
xchg esi, ecx
shl esp, 0
jb 0x438ed8
pushf
cmp eax, edi
popf
jne 0x438ed1
xchg esp, esp
jmp 0x438ed5
jae 0x438ed8
mov ecx, 0x412d5068
add bh, bh
adc eax, sym.imp.KERNEL32.dll_LoadLibraryA
push 0x412d50
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x412d5c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x412d68
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x412d78
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x412d84
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x412d90
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x412d9c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x412dac
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x412dbc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x412dcc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x412dd8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x412de8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x412df4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jl 0x438f69
test ecx, ebx
nop
jb 0x438f81
pushf
not edx
not edx
mov edx, edx
push ebx
pop ebx
xchg ecx, ecx
popf
jnp 0x438f7e
jae 0x438f81
add eax, 0x62fee8
add al, ch
add byte [eax], al
add byte [eax], al
call 0x43f284
call 0x438f8b
add esp, 4
test esi, 0x474d
jae 0x438f96
cmc
jo 0x438fa6
lea esp, [esp]
xchg edx, edx
je 0x438fa0
jno 0x438fa2
jno 0x438fa6
lcall 0x41, 0xa3ca154
mov eax, dword [0x410a3c]
mov dword [0x40ffd4], eax
and esi, 0xffffffff
shl ecx, 0
add edx, 0
jnp 0x438fe1
pushf
and esp, 0xffffffff
lea esi, [esi + 0x4790]
lea esi, [esi - 0x4790]
add ebx, 0x70d2
sub ebx, 0x70d2
popf
xchg ebx, ebx
jge 0x438fde
jp 0x438fe1
sub eax, 0xa400d8b
inc ecx
add byte [ecx + 0x40f8100d], cl
add byte [edi + 0x72de87de], al
or al, byte [edi + 0x78e48bd2]
add byte [ebx + 2], dh
mov ecx, dword [0x410a40]
mov dword [0x40f810], ecx
xchg esi, ebx
xchg esi, ebx
jb 0x438ffd
xchg edx, edx
mov esp, esp
js 0x438ff9
jae 0x438ffd
lcall 0x410a, 0x44158b73
add byte [ecx + 0x40f81415], cl
add cl, al
invalid
mov edx, dword [0x410a44]
mov dword [0x40f814], edx
rol esi, 0x10
ror esi, 0x10
and edi, edi
sub esp, 0
je 0x43902e
pushf
xor esp, 0
test edi, eax
popf
lea edi, [edi + 0x6000]
lea edi, [edi - 0x6000]
jne 0x43902e
mov eax, 0x4868406a
or al, byte [ecx]
push 0x40
push 0x410a48
push 0x40f818
call fcn.0042ece7
add esp, 0xc
lea esp, [esp]
dec eax
inc eax
or edi, 0
ja 0x43904c
jl 0x439058
lea esp, [esp]
ja 0x439053
js 0x439055
jge 0x439058
mov edx, 0x410a88a1
add byte [ebx + 0x410084], ah
mov eax, dword [0x410a88]
mov dword [0x410084], eax
xor ecx, esi
xor ecx, esi
nop
cmp esi, ecx
jbe 0x439083
pushf
clc
nop
cld
popf
lea edi, [edi + 0x72cc]
lea edi, [edi - 0x72cc]
mov esp, esp
ja 0x439083
jmp 0xacf9e12
mov ecx, dword [0x410a8c]
mov dword [0x410088], ecx
add ecx, 0x77c2
sub ecx, 0x77c2
jae 0x43909d
jno 0x4390ba
pushf
add esp, 0
add edx, 0
jne 0x4390a9
popf
lea ebx, [ebx + 0x55bc]
lea ebx, [ebx - 0x55bc]
jo 0x4390ba
mov eax, 0xa90158b
inc ecx
add byte [ecx + 0x41008c15], cl
add bh, dh
sal bh, 1
sal byte [edi], 1
mov edx, dword [0x410a90]
mov dword [0x41008c], edx
not eax
not eax
ja 0x4390cc
ja 0x4390d4
ja 0x4390d0
jbe 0x4390d4
add eax, 0xa94a1f1
inc ecx
add byte [ebx + 0x410090], ah
mov eax, dword [0x410a94]
mov dword [0x410090], eax
mov ecx, dword [0x4110ec]
mov dword [0x4100b0], ecx
mov edx, dword [0x4110f0]
mov dword [0x4100b4], edx
mov eax, dword [0x40a60c]
mov dword [0x4100b8], eax
mov ecx, dword [0x40a610]
mov dword [0x4100bc], ecx
shr esi, 0
test edx, ecx
jne 0x439118
ja 0x439115
je 0x439118
xor eax, 0xfdedd7e8
jmp dword [ebx + 0x414558]
call 0x417ef4
mov dword [0x414558], eax
push 0x94
push 0
push 0x40f868
call fcn.0043280d
add esp, 0xc
call 0x43913b
lea esp, [esp + 4]
call 0x439144
lea esp, [esp + 4]
ror esp, 0
dec edi
inc edi
jb 0x439159
jg 0x439151
nop
xchg esp, esp
jle 0x439156
jae 0x439159
lcall 0x40, 0xf86805c7
xchg esp, eax
add byte [eax], al
add byte [ebx], cl
ror byte [ebp + 0x464e2424], 0x87
push dword [ebp + 0x11]
mov dword [0x40f868], 0x94
or eax, eax
lea esp, [esp]
dec esi
inc esi
xchg edi, edi
jne 0x43917f
pushf
nop
lea eax, [eax]
popf
ja 0x439177
jne 0x439179
lea esp, [esp]
je 0x43917f
add eax, 0x40f86868
add al, ch
sub ebp, dword [ebp + 0x7590fffe]
or eax, 0xff870072
push 0x40f868
call 0x423eb4
nop
jne 0x439199
jb 0x43918e
xchg edi, edi
jae 0x439192
jno 0x439194
je 0x439199
mov ebx, 0x9c68614e
add byte [eax], al
add byte [edx], ch
push 0x9c
push 0
push 0x40fa10
call fcn.0043280d
add esp, 0xc
cld
or esp, 0
jg 0x4391d2
pushf
rol esp, 0
lea ebx, [ebx + 0xa9c]
sub ebx, 0xa9c
or esp, 0
popf
xchg edx, ebx
xchg edx, ebx
je 0x4391cf
jle 0x4391d2
mov edi, 0xfa1005c7
inc eax
add byte [eax + eax - 0x750000], bl
mov dword [0x40fa10], 0x9c
mov edi, edi
ror esi, 8
ror esi, 0x18
jne 0x4391f1
js 0x4391e8
ja 0x4391ea
jl 0x4391ec
je 0x4391f1
mov ecx, 0x10683c69
cli
inc eax
add al, ch
mov ecx, 0x87fffeac
fiadd word [edi - 0x141b7822]
add byte [ecx + 5], dh
push 0x40fa10
call 0x423eb4
xchg esi, ebx
xchg esi, ebx
xchg esp, esp
jmp 0x439203
jno 0x43920a
lea edi, [edi]
jo 0x43920a
lcall 0x6a00, 0x11468
add byte [eax - 4], ch
clc
inc eax
add al, ch
xchg ebp, eax
invalid
push 0x114
push 0
push 0x40f8fc
call fcn.0043280d
add esp, 0xc
rol esp, 0
jns 0x439223
jp 0x43922e
jge 0x439227
jge 0x439229
jnp 0x43922e
mov edi, 0x5c7b365
cld
clc
inc eax
add byte [ecx + eax], dl
add byte [eax], al
mov dword [0x40f8fc], 0x114
ror esp, 0
jmp 0x43923d
cmp esi, dword [esp]
test esp, 0x624
jle 0x439260
pushf
nop
popf
jb 0x43924f
lea edi, [edi + 0x4529]
lea edi, [edi - 0x4529]
jae 0x43925d
jg 0x439260
mov eax, 0x40f8fc68
add al, ch
mov bh, 0x50
invalid
push 0x40f8fc
call 0x42e321
lea esi, [esi + 0x41ac]
lea esi, [esi - 0x41ac]
lea esi, [esi + 0x1c71]
lea esi, [esi - 0x1c71]
sub esp, 0
ja 0x43929b
pushf
call 0x43928e
lea esp, [esp + 4]
xchg edx, eax
xchg edx, eax
popf
xchg ebx, ebx
jbe 0x43929b
mov eax, 0x11c68
add byte [edx], ch
push 0x11c
push 0
push 0x40faac
call fcn.0043280d
add esp, 0xc
xor esp, 0
jb 0x4392c0
xchg ecx, eax
xchg ecx, eax
mov ebx, ebx
jg 0x4392ba
jl 0x4392bc
jae 0x4392c0
mov edx, 0xac05c7bc
cli
inc eax
add byte [ecx + eax], bl
add byte [eax], al
mov dword [0x40faac], 0x11c
xor edi, dword [esp + 8]
xor edi, dword [esp + 8]
cmp eax, dword [esp]
and ecx, ecx
jmp 0x4392d9
je 0x4392ed
pushf
nop
mov esp, esp
dec ebx
inc ebx
popf
jne 0x4392e6
lea ecx, [ecx]
xchg esp, esp
jne 0x4392ed
mov eax, 0x40faac68
add al, ch
sub dl, byte [eax - 1]
invalid
push 0x40faac
call 0x42e321
jmp 0x4392f9
add edi, 0x647e
sub edi, 0x647e
dec ecx
inc ecx
js 0x439316
mov eax, eax
jnp 0x43930d
xchg ecx, ecx
xchg ebx, edx
xchg ebx, edx
jns 0x439316
mov esi, 0xff0d36e8
jmp dword [ebx + 0x40fbc8]
call 0x42a051
mov dword [0x40fbc8], eax
cmp edi, esi
jl 0x439339
pushf
jp 0x439328
test ebx, eax
mov ecx, ecx
or eax, eax
popf
jg 0x439332
xchg ebx, ebx
ja 0x439336
jge 0x439339
mov esp, 0xfeff83e8
jmp dword [ebx + 0x40fbcc]
call 0x4292c1
mov dword [0x40fbcc], eax
push edx
pop edx
ror ecx, 1
ror ecx, 0x1f
jp 0x43934c
std
cld
je 0x439366
pushf
shr edx, 0
jnp 0x439357
sub edi, 0
jnp 0x43935c
popf
xchg esp, esp
jns 0x439362
nop
jne 0x439366
mov edi, 0x70e8006a
jmp 0x43936b
push 0
call fcn.00437edd
mov dword [0x40fbd0], eax
xchg esp, esp
jg 0x43937d
invalid
xchg esp, esp
jle 0x43937d
add eax, 0x6afb97
push 0
call fcn.00437153
mov dword [0x40fbd4], eax
jg 0x43938b
add ebx, dword [esp]
sub ebx, dword [esp]
sub edx, 0
jo 0x4393b0
pushf
test dword [esp], ebx
lea edi, [edi + 0x3fe3]
lea edi, [edi - 0x3fe3]
jns 0x4393a9
popf
xchg ecx, eax
xchg ecx, eax
jno 0x4393b0
sub eax, 0x10468
add byte [eax - 0x28], ch
sti
inc eax
add byte [edx], ch
push 0x104
push 0x40fbd8
push 0
call fcn.00427a0b
mov dword [0x40fcdc], eax
dec ebx
inc ebx
shl edx, 0
jbe 0x4393ec
pushf
xchg edx, esi
xchg edx, esi
jmp 0x4393d5
jg 0x4393d7
popf
lea edi, [edi]
lea edx, [edx]
lea eax, [eax + 0x529a]
lea eax, [eax - 0x529a]
ja 0x4393ec
jmp 0x449858
push 0x104
push 0x40fce0
push 0
call fcn.004226e9
mov dword [0x40fee8], eax
inc ebx
dec ebx
jns 0x439418
pushf
test dword [esp], ecx
jle 0x43940d
popf
lea edx, [edx]
jmp 0x439413
xchg edx, eax
xchg edx, eax
js 0x439418
sub eax, 0xfffe1e20
call 0x41b23d
mov dword [0x40feec], eax
jae 0x439424
jl 0x439426
js 0x43942f
jle 0x43942a
ja 0x43942c
jns 0x43942f
mov esi, 0xff4719e8
jmp dword [ebx + 0x40fef0]
call 0x42db4d
mov dword [0x40fef0], eax
rol ebx, 0
nop
rol esi, 0xb
ror esi, 0xb
jo 0x439459
lea ebx, [ebx + 0x2426]
lea ebx, [ebx - 0x2426]
jmp 0x439453
jns 0x439455
jno 0x439459
mov ebp, 0x2640e875
invalid
call 0x42ba9e
mov dword [0x40fef4], eax
jae 0x439465
xor esi, 0
ja 0x439476
pushf
cmc
jo 0x43946f
popf
jbe 0x439473
jbe 0x439476
add eax, 0x6fe8f66a
mov edx, 0xf8a3ffff
inc byte [eax]
push 0xfffffffffffffff6
call 0x434eec
mov dword [0x40fef8], eax
jns 0x439484
jp 0x43949a
pushf
ror ebx, 0x19
ror ebx, 7
and esp, 0xffffffff
or ecx, ecx
popf
lea esi, [esi]
jnp 0x43949a
ljmp 0xffba:0x4be8f56a
push 0xfffffffffffffff5
call 0x434eec
mov dword [0x40fefc], eax
shr edx, 0
je 0x4394ab
lea esp, [esp]
jno 0x4394c5
lea eax, [eax + 0x2a04]
lea eax, [eax - 0x2a04]
jno 0x4394be
lea ebx, [ebx]
jmp 0x4394c2
jo 0x4394c5
jmp 0x212c8933
push 0xfffffffffffffff4
call 0x434eec
mov dword [0x40ff00], eax
dec edi
inc edi
jne 0x4394e0
pushf
push edx
pop edx
popf
js 0x4394dd
je 0x4394e0
lcall 0xa3ff, 0xfdff37e8
add al, 0xff
inc eax
add cl, al
in al, 0
call 0x41941c
mov dword [0x40ff04], eax
shl esp, 0
std
cld
and esp, 0xffffffff
add esp, 0
jp 0x439508
mov eax, eax
lea ebx, [ebx + 0x7b57]
lea ebx, [ebx - 0x7b57]
jnp 0x439508
mov esi, 0x40ff0c68
add al, ch
shl dword [ecx + 0x78ffff], cl
push 0x40ff0c
call 0x4336e5
js 0x439514
or esp, 0
jl 0x439519
stc
jp 0x439527
xchg esi, edx
xchg esi, edx
xchg ebx, edx
xchg ebx, edx
jnp 0x439527
mov eax, 0x40ff5068
add al, ch
adc dword [edi], ebx
invalid
push 0x40ff50
call 0x41b442
or esp, 0
xor edx, 0x1ffd
xor edx, 0x1ffd
neg edi
neg edi
cmc
jb 0x43955c
mov ebx, ebx
mov ecx, ecx
lea eax, [eax + 0x4f60]
lea eax, [eax - 0x4f60]
js 0x439559
jae 0x43955c
mov esi, 0xfe0223e8
jmp dword [esi - 0x5d]
call 0x419784
mov word [0x40ffb8], ax
xchg edi, eax
xchg edi, eax
jnp 0x43957c
pushf
ror edi, 4
rol edi, 4
popf
lea eax, [eax]
lea ecx, [ecx]
jp 0x43957c
mov ebp, 0xfe7930e8
jmp dword [ebx + 0x40ffbc]
call 0x420eb1
mov dword [0x40ffbc], eax
rol ecx, 0x1c
ror ecx, 0x1c
inc eax
dec eax
clc
xchg edi, ecx
xchg edi, ecx
jge 0x4395a2
pushf
jmp 0x439599
popf
jl 0x43959d
jl 0x43959f
jl 0x4395a2
jmp 0xfe6ac58e
call 0x41bcd6
mov word [0x40ffc0], ax
test dword [esp + 4], ecx
shl eax, 0
jge 0x4395ba
nop
jl 0x4395ba
ljmp 0xa3ff:0xff1283e8
call 0x42a842
mov dword [0x40ffc4], eax
push 0x24
push 0
push 0x40ff94
call fcn.0043280d
add esp, 0xc
push 0x40ff94
call fcn.0042c487
call fcn.004310c9
test eax, eax
je 0x43960c
cmp dword [0x40ffac], 0x182
je 0x439600
cmp dword [0x40ffac], 0x1e6
jne 0x43960a
mov dword [0x414578], 1
jmp 0x43963c
xor edx, edx
mov dx, word [0x40ff94]
test edx, edx
jne 0x439632
xor eax, eax
mov ax, word [0x40ffb4]
cmp eax, 5
jge 0x439630
mov dword [0x414578], 1
jmp 0x43963c
mov dword [0x414578], 1
mov ecx, dword [0x414578]
mov dword [0x40ffcc], ecx
push 0x190
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
mov dword [0x4100d8], eax
push 0x190
push 0
mov edx, dword [0x4100d8]
push edx
call fcn.0043280d
add esp, 0xc
cmp dword [0x411124], 1
jne 0x4397fb
push 5
push 0x412e00
push 0x411104
call fcn.00428703
add esp, 0xc
test eax, eax
jne 0x4396f2
push 0xa
call fcn.00424249
add esp, 4
test eax, eax
jne 0x4396ed
push 0xb
call fcn.00424249
add esp, 4
test eax, eax
jne 0x4396ed
push 0x14
call fcn.00424249
add esp, 4
test eax, eax
jne 0x4396ed
mov dword [0x414138], 0x23
mov dword [0x41454c], 0x13
mov dword [0x414744], 1
mov dword [0x413030], 1
jmp 0x43d73e
jmp 0x4397fb
push 5
push 0x412e08
push 0x411104
call fcn.00428703
add esp, 0xc
test eax, eax
jne 0x439758
push 0xb
call fcn.00424249
add esp, 4
test eax, eax
jne 0x439753
push 0x14
call fcn.00424249
add esp, 4
test eax, eax
jne 0x439753
mov dword [0x414138], 0x23
mov dword [0x41454c], 0x13
mov dword [0x414744], 1
mov dword [0x413030], 1
jmp 0x43d73e
jmp 0x4397fb
push 5
push 0x412e10
push 0x411104
call fcn.00428703
add esp, 0xc
test eax, eax
jne 0x4397ad
push 0x14
call fcn.00424249
add esp, 4
test eax, eax
jne 0x4397ab
mov dword [0x414138], 0x23
mov dword [0x41454c], 0x13
mov dword [0x414744], 1
mov dword [0x413030], 1
jmp 0x43d73e
jmp 0x4397fb
push 5
push 0x412e18
push 0x411104
call fcn.00428703
add esp, 0xc
test eax, eax
jne 0x4397fb
call fcn.0041f02f
test eax, eax
jne 0x4397fb
mov dword [0x414138], 0x23
mov dword [0x41454c], 0x13
mov dword [0x414744], 1
mov dword [0x413030], 1
jmp 0x43d73e
js 0x4397fd
ror eax, 0xa
ror eax, 0x16
lea esi, [esi + 0x744f]
sub esi, 0x744f
or edx, edx
jbe 0x439826
mov esp, esp
lea esi, [esi + 0x4900]
lea esi, [esi - 0x4900]
jle 0x439823
ja 0x439826
mov esp, 0x6a2f6a
push 0x2f
push 0
lea eax, [ebp - 0x1ec]
push eax
call fcn.0043280d
add esp, 0xc
jbe 0x43983b
xor esp, 0
test dword [esp], edx
test ebx, 0x1573
jno 0x439854
js 0x43984b
xchg ecx, esi
xchg ecx, esi
jle 0x439851
jo 0x439854
mov ebp, 0xfe3785c6
invalid
mov byte [ebp - 0x1c9], 0x54
or ecx, 0
test esi, eax
sub ecx, 0
js 0x43987a
pushf
push ebx
pop ebx
not edi
not edi
popf
xchg esi, ebx
xchg esi, ebx
mov esi, esi
lea edx, [edx]
jns 0x43987a
mov eax, 0xfe3385c6
invalid
mov byte [ebp - 0x1cd], 0x78
ror ebx, 0xb
ror ebx, 0x15
jns 0x4398a1
pushf
add edi, 0xa91
sub edi, 0xa91
neg ecx
neg ecx
popf
nop
js 0x4398a1
mov esp, 0xfe3c85c6
invalid
mov byte [ebp - 0x1c4], 0x75
test dword [esp + 0x10], edx
jnp 0x4398cc
pushf
xor ebx, 0x39e8
xor ebx, 0x39e8
add esp, 0
or edx, edx
popf
jb 0x4398c5
jge 0x4398c7
mov eax, eax
jp 0x4398cc
add eax, 0xfe1c85c6
invalid
mov byte [ebp - 0x1e4], 0x5e
and ebx, 0xffffffff
jae 0x4398ec
pushf
test esp, 0x1d4
add esp, 0
jp 0x4398e5
popf
jl 0x4398e9
jb 0x4398ec
mov ebp, 0xfe3f85c6
invalid
mov byte [ebp - 0x1c1], 0x75
jp 0x4398f5
xor esp, 0
lea edi, [edi + 0x8cb]
lea edi, [edi - 0x8cb]
mov esp, esp
jne 0x43992b
pushf
call 0x43990f
add esp, 4
xchg edx, edx
cmp esi, dword [esp + 0x10]
xor edi, 0x7948
xor edi, 0x7948
popf
jp 0x439928
je 0x43992b
lcall 0xffff, 0xfe2585c6
dec ebp
mov byte [ebp - 0x1db], 0x4d
add esp, 0
test esi, ebx
jno 0x439939
jg 0x439952
pushf
mov esp, esp
stc
ror ecx, 6
ror ecx, 0x1a
or edx, 0
popf
jnp 0x43994d
jns 0x43994f
jle 0x439952
mov ecx, 0xfe3a85c6
invalid
mov byte [ebp - 0x1c6], 0x64
jb 0x43995b
test esp, 0x6080
xchg ecx, ecx
xor esi, dword [esp + 8]
xor esi, dword [esp + 8]
jle 0x439974
jge 0x43996f
ja 0x439971
jg 0x439974
mov ecx, 0xfe1885c6
invalid
mov byte [ebp - 0x1e8], 0x5a
shr edi, 0
call 0x439983
lea esp, [esp + 4]
je 0x43998e
jne 0x43998b
jne 0x43998e
mov esp, 0xfe1485c6
invalid
mov byte [ebp - 0x1ec], 0x4c
or esp, 0
jp 0x4399b1
pushf
jne 0x43999e
cmp esp, 0x71e
xchg esp, esp
popf
mov edi, edi
xchg ebx, eax
xchg ebx, eax
jmp 0x4399ae
jnp 0x4399b1
mov ecx, 0xfe2e85c6
invalid
mov byte [ebp - 0x1d2], 0x70
jbe 0x4399ba
jno 0x4399d7
pushf
lea edi, [edi]
rol eax, 8
ror eax, 8
push eax
add eax, 0x6e48
ror eax, 0x11
pop eax
popf
jg 0x4399d4
jo 0x4399d7
mov esi, 0xfe1785c6
invalid
mov byte [ebp - 0x1e9], 0x48
jmp 0x4399e0
lea esp, [esp]
ror esi, 0xd
ror esi, 0x13
jge 0x4399f0
jne 0x4399ed
jl 0x4399f0
mov ecx, 0xfe3085c6
invalid
mov byte [ebp - 0x1d0], 0x47
cmp esp, 0x7fb5
jge 0x4399ff
call 0x439a04
lea esp, [esp + 4]
ja 0x439a1d
pushf
sub edi, 0
nop
nop
sub edx, 0
popf
js 0x439a18
jb 0x439a1a
jbe 0x439a1d
mov esp, 0xfe4185c6
invalid
mov byte [ebp - 0x1bf], 0x32
ror ebx, 0x11
rol ebx, 0x11
jmp 0x439a2c
jge 0x439a2e
cmp ecx, edx
jo 0x439a37
nop
jno 0x439a37
sub eax, 0x2885c6b0
invalid
mov byte [ebp - 0x1d8], 0x61
cmp ebx, dword [esp + 8]
jl 0x439a44
rol ebx, 1
ror ebx, 1
xchg edi, ecx
xchg edi, ecx
jo 0x439a55
mov ecx, ecx
ja 0x439a52
jno 0x439a55
sub eax, 0xfe3e85c6
invalid
mov byte [ebp - 0x1c2], 0x74
xchg esi, esi
xor esp, 0
jl 0x439a68
mov eax, eax
jge 0x439a68
mov ebp, 0xfe3d85c6
invalid
mov byte [ebp - 0x1c3], 0x77
je 0x439a71
jge 0x439a7d
jbe 0x439a75
mov eax, eax
jbe 0x439a79
jl 0x439a7d
mov eax, 0x1a85c62e
invalid
mov byte [ebp - 0x1e6], 0x56
and esp, 0xffffffff
neg edi
neg edi
neg ecx
neg ecx
je 0x439a91
jno 0x439aab
pushf
jno 0x439a97
and eax, 0xffffffff
xor ecx, dword [esp]
xor ecx, dword [esp]
popf
ja 0x439aa4
xchg esi, eax
xchg esi, eax
jnp 0x439aa8
jo 0x439aab
xor eax, 0xfe1f85c6
invalid
mov byte [ebp - 0x1e1], 0x55
add esp, 0
std
cld
and esp, 0xffffffff
jb 0x439ac8
pushf
sub esp, 0
popf
jno 0x439ac5
jae 0x439ac8
mov esi, 0xfe2d85c6
invalid
mov byte [ebp - 0x1d3], 0x66
jge 0x439ad1
jb 0x439ad3
jbe 0x439ad5
jle 0x439ad7
ja 0x439ae2
xchg esi, esi
mov esp, esp
lea edx, [edx]
jbe 0x439ae2
lcall 0xffff, 0xfe3585c6
cmp ebx, dword gs:[esp + 0xc]
mov byte [ebp - 0x1cb], 0x65
cmp ebx, dword [esp + 0xc]
jmp 0x439aef
sub ecx, 0
add esi, 0x6c83
sub esi, 0x6c83
je 0x439b17
pushf
ja 0x439b04
xor esi, 0x3558
xor esi, 0x3558
popf
xchg ecx, ecx
jne 0x439b17
add eax, 0xfe1e85c6
invalid
mov byte [ebp - 0x1e2], 0x49
jge 0x439b20
xor esp, 0
jnp 0x439b30
jae 0x439b27
ja 0x439b29
jae 0x439b2b
xchg edx, eax
xchg edx, eax
jp 0x439b30
ljmp 0xffff:0xfe3985c6
mov byte [ebp - 0x1c7], 0x70
std
cld
xor edi, 0
ja 0x439b4f
pushf
mov esp, esp
jne 0x439b44
popf
xchg esp, esp
xchg esp, esp
jge 0x439b4c
jbe 0x439b4f
ljmp 0xffff:0xfe2c85c6
mov byte [ebp - 0x1d4], 0x77
xor esi, eax
xor esi, eax
ror eax, 0x1e
ror eax, 2
ja 0x439b67
xchg esp, esp
jbe 0x439b67
add eax, 0xfe2685c6
invalid
mov byte [ebp - 0x1da], 0x53
inc eax
dec eax
cmc
jb 0x439b87
pushf
xchg esi, ebx
xchg esi, ebx
or edx, edx
shl esp, 0
popf
jno 0x439b82
jb 0x439b84
jae 0x439b87
mov eax, 0xfe1b85c6
invalid
mov byte [ebp - 0x1e5], 0x48
cmp eax, edx
or esp, 0
xchg ebx, ebx
jne 0x439baa
pushf
jns 0x439b9b
push ecx
pop ecx
mov ecx, ecx
xchg edx, esi
xchg edx, esi
popf
lea ecx, [ecx]
je 0x439baa
add esi, 0xfffe3b85
jmp [eax - 0x7f]
mov byte [ebp - 0x1c5], 0x68
cmp esp, 0x4e13
ror eax, 3
rol eax, 3
jl 0x439bc4
nop
jge 0x439bc4
add eax, 0x2285c644
invalid
mov byte [ebp - 0x1de], 0x4d
rol ecx, 0x1e
ror ecx, 0x1e
inc edx
dec edx
js 0x439bdb
mov esp, esp
jns 0x439bdb
ljmp 0xfffe:0x2485c6e7
mov byte [ebp - 0x1dc], 0x58
jmp 0x439be4
inc ecx
dec ecx
call 0x439beb
add esp, 4
js 0x439bf6
lea eax, [eax]
jns 0x439bf6
mov eax, 0x2385c63d
invalid
mov byte [ebp - 0x1dd], 0x55
rol esi, 1
ror esi, 1
jb 0x439c11
pushf
clc
popf
xchg edi, edx
xchg edi, edx
mov esp, esp
jae 0x439c11
mov ebx, 0xfe3885c6
invalid
mov byte [ebp - 0x1c8], 0x76
cmp ebx, dword [esp + 4]
jae 0x439c1e
inc eax
dec eax
jle 0x439c31
call 0x43d690
lea esp, [esp + 4]
jb 0x43d6a5
pushf
sub edi, 0
shr ebx, 0
popf
jl 0x43d6a2
jae 0x43d6a5
mov ecx, 0x5010458b
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [0x412620]
mov dword [0x414780], eax
jp 0x43d6be
jae 0x43d6c0
call 0x43d6c5
add esp, 4
jbe 0x43d6dd
pushf
jg 0x43d6ce
lea edi, [edi]
sub esp, 0
shl esp, 0
popf
mov esp, esp
ja 0x43d6dd
xor eax, 0xa49c3d83
inc eax
add byte [eax], al
cmp dword [0x40a49c], 0
jne 0x43d734
cmp dword [0x41302c], 0
je 0x43d734
stc
sub edx, 0
ror edx, 0x1a
rol edx, 0x1a
jo 0x43d705
lea edi, [edi]
mov esp, esp
jg 0x43d701
jno 0x43d705
mov eax, 0x7c9077
nop
jl 0x43d708
shr esp, 0
je 0x43d720
pushf
test esp, 0x58d4
jp 0x43d717
jp 0x43d719
popf
jne 0x43d71d
jne 0x43d720
mov edx, 0x58f64
add byte [eax], al
add byte [ebx + 0x5c70cc4], al
sub al, 0x30
inc ecx
add byte [eax], al
add byte [eax], al
add byte [ecx + 0x414780], ah
pop dword fs:[0]
add esp, 0xc
mov dword [0x41302c], 0
mov eax, dword [0x414780]
jmp 0x43dcff
xor eax, eax
mov al, byte [0x4109e0]
test eax, eax
jne 0x43d753
call fcn.00418f23
mov dword [0x413024], eax
cmp dword [0x40f878], 2
jne 0x43d782
cmp dword [0x40f86c], 6
jne 0x43d782
cmp dword [0x40fffc], 0
je 0x43d782
call fcn.00416316
mov dword [0x412ffc], eax
call fcn.0042caf8
mov dword [0x412ff8], eax
push 0xa1
push 0x4065b0
lea ecx, [ebp - 0x290]
push ecx
call fcn.0042ece7
add esp, 0xc
mov dword [ebp - 0x1b8], 0
jmp 0x43d7b6
mov edx, dword [ebp - 0x1b8]
add edx, 1
mov dword [ebp - 0x1b8], edx
cmp dword [ebp - 0x1b8], 0xa
jge 0x43d879
mov eax, dword [ebp - 0x1b8]
shl eax, 2
mov ecx, dword [ebp + eax*4 - 0x290]
xor ecx, 0xab576c41
mov edx, dword [ebp - 0x1b8]
shl edx, 2
mov dword [ebp + edx*4 - 0x290], ecx
mov eax, dword [ebp - 0x1b8]
shl eax, 2
mov ecx, dword [ebp + eax*4 - 0x28c]
xor ecx, 0xab5ece77
mov edx, dword [ebp - 0x1b8]
shl edx, 2
mov dword [ebp + edx*4 - 0x28c], ecx
and esp, 0xffffffff
lea edx, [edx + 0x33be]
sub edx, 0x33be
shl esi, 0
jb 0x43d828
je 0x43d825
jae 0x43d828
add eax, 0xfe48858b
invalid
mov eax, dword [ebp - 0x1b8]
shl eax, 2
mov ecx, dword [ebp + eax*4 - 0x288]
xor ecx, 0xab633a25
mov edx, dword [ebp - 0x1b8]
shl edx, 2
mov dword [ebp + edx*4 - 0x288], ecx
mov eax, dword [ebp - 0x1b8]
shl eax, 2
mov ecx, dword [ebp + eax*4 - 0x284]
xor ecx, 0xab572a32
mov edx, dword [ebp - 0x1b8]
shl edx, 2
mov dword [ebp + edx*4 - 0x284], ecx
jmp 0x43d7a7
call fcn.0042645c
mov dword [0x413028], eax
jge 0x43d885
cmc
shl esp, 0
jb 0x43d894
mov esp, esp
jmp 0x43d88f
jae 0x43d894
add eax, 0x3d835f9e
inc esp
inc edi
inc ecx
add byte [eax], al
cmp dword [0x414744], 0
jne 0x43d8cc
call 0x43d8a2
lea esp, [esp + 4]
call 0x43d8ab
add esp, 4
dec ecx
inc ecx
ja 0x43d8c7
xchg edi, eax
xchg edi, eax
jns 0x43d8b6
lea edx, [edx + 0x21c7]
lea edx, [edx - 0x21c7]
xchg esp, esp
jbe 0x43d8c7
mov edi, 0xff3077e8
dec dword [ebx - 0x14ff8b37]
add bl, ch
add byte [eax + 0xb], dh
call 0x430943
mov ecx, ecx
je 0x43d8d0
jmp 0x43d8d2
jmp 0x43d8d4
jo 0x43d8e1
xchg edx, edx
xchg esi, eax
xchg esi, eax
xchg edi, edi
jno 0x43d8e1
mov edi, 0x3d832535
xor byte [eax], dh
inc ecx
add byte [eax], al
cmp dword [0x413030], 0
jne 0x43db2f
ja 0x43d8f0
rol edx, 0xd
ror edx, 0xd
jl 0x43d8fe
nop
jge 0x43d8fe
jmp 0xb0e51c6c
mov eax, dword [0x4140b0]
mov dword [0x414564], eax
xchg edx, ebx
xchg edx, ebx
shr edx, 0
cmp edx, dword [esp + 8]
ror edi, 0xf
rol edi, 0xf
jae 0x43d92f
pushf
and esi, 0xffffffff
cmp ecx, dword [esp + 0xc]
popf
mov esi, esi
jb 0x43d92a
xchg ebx, eax
xchg ebx, eax
jb 0x43d92f
xor eax, 0x40b00d8b
inc ecx
add byte [ebx], al
or eax, 0x413044
mov ecx, dword [0x4140b0]
add ecx, dword [0x413044]
mov dword [0x414560], ecx
xchg ecx, esi
xchg ecx, esi
jo 0x43d94d
jne 0x43d949
jno 0x43d94d
mov eax, 0x505157dc
push edi
push ecx
push eax
mov edi, 0x43dd3a
xchg ebx, esi
xchg ebx, esi
ror edi, 0x18
ror edi, 8
lea ecx, [ecx + 0x6d4b]
lea ecx, [ecx - 0x6d4b]
jp 0x43d980
pushf
ror esp, 0
cmp ecx, dword [esp + 4]
cmc
popf
jmp 0x43d97b
mov ebx, ebx
jnp 0x43d980
add eax, 0x302c3d80
inc ecx
add byte [eax], al
cmp byte [0x41302c], 0
je 0x43d999
nop
js 0x43d994
mov esp, esp
jle 0x43d990
jns 0x43d994
mov ebx, 0xdecbbf59
inc ebx
add byte [edi - 0x3087809], al
mov edi, 0x43decb
xchg edi, esi
xchg edi, esi
cld
mov esi, esi
rol ebx, 8
ror ebx, 8
jo 0x43d9c2
pushf
add eax, 0x3ec0
sub eax, 0x3ec0
xor esp, 0
rol ebx, 1
ror ebx, 1
popf
jo 0x43d9bf
jno 0x43d9c2
mov ebp, 0x45600d8b
mov ecx, dword [0x414560]
xor esp, 0
lea eax, [eax + 0xf81]
lea eax, [eax - 0xf81]
add esp, 0
std
cld
jb 0x43d9ea
inc ebp
inc ecx
add byte [ebx - 0x7f72ff0c], al
or dword [edi], 0x808d0000
jg 0x43d9c5
invalid
jp 0x43d9e0
jmp 0x43d9e2
xchg ebx, esi
xchg ebx, esi
jae 0x43d9ea
mov ecx, 0x76cf3b46
das
cmp ecx, edi
jbe 0x43da1d
shl esp, 0
mov esp, esp
jl 0x43d9fa
mov edi, edi
jge 0x43d9fa
mov eax, 0x90b0cf2b
sub ecx, edi
mov al, 0x90
cld
js 0x43da01
lea eax, [eax]
xor edx, dword [esp + 8]
xor edx, dword [esp + 8]
jno 0x43da1b
pushf
shl eax, 0
popf
xchg edx, esi
xchg edx, esi
jo 0x43da1b
mov ecx, 0xf385aaf3
rep stosb byte es:[edi], al
test ebx, esi
jl 0x43da36
pushf
sub esp, 0
shl ecx, 0
jbe 0x43da2b
popf
je 0x43da2f
jge 0x43da31
ja 0x43da33
jge 0x43da36
add eax, 0x45643d8b
inc ecx
add byte [ebp + 0x258cb6], cl
add byte [ecx + 0x258cee], al
add byte [ebx - 0x377cff38], al
add bh, dh
invalid
mov edi, dword [0x414564]
lea esi, [esi + 0x258c]
sub esi, 0x258c
or eax, 0
or eax, 0
test esp, 0x2af1
jge 0x43da5c
jo 0x43da58
jl 0x43da5c
ljmp 0x43:0x8d09b9ef
mov ecx, entry0
nop
ror ebx, 0
push esi
pop esi
neg eax
neg eax
jp 0x43da73
jle 0x43da6f
jnp 0x43da73
mov esp, 0x76cf3b55
xor eax, 0x3324248d
add al, 0x24
cmp ecx, edi
jbe 0x43daac
lea esp, [esp]
xor eax, dword [esp]
xor eax, dword [esp]
cld
jb 0x43da8f
jns 0x43da85
jb 0x43da87
jle 0x43da89
xchg edx, eax
xchg edx, eax
jae 0x43da8f
mov ecx, 0xa9cf2b50
movsd dword es:[edi], dword [esi]
cmp eax, dword [eax]
add cl, al
int3
sub ecx, edi
test eax, 0x3ba5
ror esp, 0
push esi
pop esi
shr ecx, 0
jge 0x43daa7
lea eax, [eax]
js 0x43daa4
jl 0x43daa7
mov ecx, 0xf3fc90b0
stosb byte es:[edi], al
mov al, 0x90
cld
rep stosb byte es:[edi], al
cmc
xor ecx, dword [esp]
xor ecx, dword [esp]
and edx, 0xffffffff
cmp edx, ecx
jns 0x43dac0
xchg esp, esp
js 0x43dac0
mov edx, 0x8da5bfb9
inc ebx
add byte [esi - 0x7f], dl
invalid
mov edi, 0x438da5
push esi
add esi, 0x71dc
ror esi, 0x15
pop esi
jle 0x43dae3
pushf
nop
shl ebx, 0
not edi
not edi
popf
jg 0x43dae0
jg 0x43dae3
xor eax, 0x43d73eb9
add cl, al
retf 0xc10e
mov ecx, 0x43d73e
ror edx, 0xe
rol edx, 0xe
lea eax, [eax + 0x3358]
lea eax, [eax - 0x3358]
xor esi, 0x261
xor esi, 0x261
ja 0x43db13
pushf
or eax, eax
popf
jb 0x43db10
jbe 0x43db13
mov ebp, 0x90b0cf2b
sub ecx, edi
mov al, 0x90
cld
rep stosb byte es:[edi], al
xchg ebx, eax
xchg ebx, eax
sub ecx, 0
jg 0x43db2c
jo 0x43db23
jnp 0x43db25
lea edi, [edi]
jo 0x43db29
jle 0x43db2c
mov eax, 0x835f5958
cmp eax, 0x41454c
add byte [ebp + 0xa], dh
pop eax
pop ecx
pop edi
cmp dword [0x41454c], 0
jne 0x43db42
mov dword [0x41454c], 1
cmp dword [0x41454c], 0x13
jne 0x43db8d
mov edx, dword [0x41454c]
sub edx, 1
imul edx, edx, 0x66
add edx, 0x410124
mov dword [ebp - 0x29c], edx
push 0x411104
mov eax, dword [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x1a0]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea edx, [ebp - 0x1a0]
mov dword [ebp - 0x29c], edx
jmp 0x43dba3
mov eax, dword [0x41454c]
sub eax, 1
imul eax, eax, 0x66
add eax, 0x410124
mov dword [ebp - 0x29c], eax
cmp dword [0x413024], 0
je 0x43dc8a
cmp dword [0x410920], 0
je 0x43dc8a
mov ecx, dword [0x40f7dc]
and ecx, 0x80000000
test ecx, ecx
jne 0x43dc3b
cmp dword [0x40fffc], 0
je 0x43dc3b
push 0x200040
push 0x4100e4
mov edx, dword [ebp - 0x29c]
push edx
push 0
call dword [0x413024]
cmp dword [0x40f878], 2
jne 0x43dc39
cmp dword [0x40f86c], 6
jne 0x43dc39
cmp dword [0x412ff8], 0xffffffff
je 0x43dc39
push 0
lea eax, [ebp - 0x294]
push eax
push 0
push 0x200040
push 0x66
mov ecx, dword [ebp - 0x29c]
push ecx
push 0x3e
push 0x4100e4
mov edx, dword [0x412ff8]
push edx
push 0
call dword [0x412ffc]
jmp 0x43dc51
push 0x40
push 0x4100e4
mov eax, dword [ebp - 0x29c]
push eax
push 0
call dword [0x413024]
mov dword [0x41413c], 0
jmp 0x43dc6c
mov ecx, dword [0x41413c]
add ecx, 1
mov dword [0x41413c], ecx
cmp dword [0x41413c], 0xa1
jae 0x43dc88
mov edx, dword [0x41413c]
mov byte [ebp + edx - 0x290], 0
jmp 0x43dc5d
jmp 0x43dcb9
xor eax, eax
mov al, byte [0x4109e0]
cmp eax, 1
jne 0x43dcb9
cmp dword [0x410920], 0
je 0x43dcb9
mov ecx, dword [ebp - 0x29c]
push ecx
push 0x4100e4
push 0x412e20
call dword [sym.imp.MSVCRT.dll_printf]
add esp, 0xc
cmp dword [0x41432c], 0
jne 0x43dcfd
cmp dword [0x413028], 0
je 0x43dcda
mov edx, dword [0x41454c]
push edx
call dword [0x413028]
jmp 0x43dcfd
cmp dword [0x40f878], 2
jne 0x43dcf6
cmp dword [0x40f86c], 6
jne 0x43dcf6
push 0x63
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, 0x63
jmp 0x43dcff
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
xchg ecx, eax
mov al, 0xb8
or al, 0x62
ja 0x4498dd
sal byte [ecx + edx*8], cl
lea edi, [edi]
fild qword [ebx*4 - 0x5b1beba9]
pushal
mov al, byte [0x3db5abc6]
mov esi, 0x83897a4d
sub ebx, dword [edx + 0x1544acba]
inc ecx
xor dword [edx], ebx
xor ch, byte [eax - 0x152151a5]
pop ebx
cmc
mov edx, dword [ebx + 0x48d68b3b]
retf 0x9003
clc
lodsb al, byte [esi]
pushal
xchg edx, eax
in eax, dx
xor eax, dword [0xc6009113]
stosb byte es:[edi], al
lodsb al, byte [esi]
mov ebp, 0x6a9042fd
out dx, eax
fsub dword [eax + 0x73d8e409]
iretd