Function at 0x418520
Capabilities:
Check for time delay via gettickcount
Check http status code
Check os version
Contain obfuscated stackstrings
Get number of processors
Move file
Parse credit card information
Print debug messages
Resolve function by parsing pe exports
Set environment variable

Disassembly:
mov eax, 0x8708
call fcn.00488480
mov eax, dword [esp + 0x8718]
push ebx
push ebp
push esi
mov ebp, ecx
push edi
mov edi, dword [esp + 0x871c]
mov dword [esp + 0x14], ebp
test eax, eax
je 0x418583
lea edx, [esp + 0x108]
sub edx, eax
nop
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x418550
mov eax, dword [esp + 0x872c]
mov edx, eax
mov dword [esp + 0x24], edx
test eax, eax
je 0x41859d
lea eax, [edx + 1]
mov edi, edi
mov cl, byte [eax]
cmp cl, 0x20
je 0x418580
cmp cl, 9
jne 0x418ce8
inc eax
jmp 0x418570
cmp byte [esp + 0x8720], 3
jne 0x4185df
push edx
mov byte [esp + 0x108], 0
mov dword [esp + 0x24], 0
mov ebp, edi
mov dword [esp + 0x10], ebp
mov byte [esp + 0x1a], 0
mov dl, byte [0x49d350]
mov byte [esp + 0x19], 0
cmp byte [ebp], dl
jne 0x418d4d
mov eax, dword [0x49d3c8]
cmp dword [eax + 0x94], 0
je 0x418cbd
push 6
push str.Global
push edi
call fcn.00477695
add esp, 0xc
test eax, eax
jne 0x41860f
mov dword [esp + 0x1c], 1
jmp 0x418650
push 5
push str.Local
push edi
call fcn.00477695
add esp, 0xc
test eax, eax
jne 0x418630
lea esi, [edi + 5]
mov dword [esp + 0x1c], 2
jmp 0x418653
push 6
push str.Static
push edi
call fcn.00477695
add esp, 0xc
test eax, eax
jne 0x418cbd
mov dword [esp + 0x1c], 3
lea esi, [edi + 6]
mov al, byte [esi]
test al, al
je 0x418c6d
cmp al, 0x20
je 0x418670
cmp al, 9
jne 0x418cbd
lea esp, [esp]
mov al, byte [esi]
cmp al, 0x20
je 0x41867a
cmp al, 9
jne 0x41867d
inc esi
jmp 0x418670
cmp byte [esi], 0
je 0x418c6d
mov bl, byte [esi + 1]
push 0
push 0
mov ecx, esi
mov byte [esi + 1], 0
call fcn.00467210
add esp, 8
mov byte [esi + 1], bl
test eax, eax
je 0x418cbd
cmp byte [ebp + 0x4c], 0
mov ecx, dword [0x49d3c8]
je 0x418860
mov eax, dword [ecx + 0x94]
cmp byte [eax + 0x30], 0
jne 0x418860
cmp dword [esp + 0x1c], 2
setne dl
inc dl
mov byte [eax + 0x30], dl
mov eax, dword [ecx + 0x94]
xor ecx, ecx
cmp byte [eax + 0x30], 1
mov eax, dword [ebp + 4]
mov al, byte [eax]
sete cl
xor edx, edx
cmp dword [esp + 0x1c], 1
sete dl
cmp edx, ecx
setne byte [esp + 0x1a]
cmp al, 0xa
jb 0x418700
cmp al, 0x21
jbe 0x418715
cmp al, 9
je 0x418715
cmp al, 0x68
je 0x418715
cmp al, 0x6a
je 0x418715
mov byte [esp + 0x1b], 0
cmp al, 0x69
jne 0x41871a
mov byte [esp + 0x1b], 1
cmp byte [esi], 0
mov byte [esp + 0x19], 0
mov dword [esp + 0x10], esi
je 0x418c91
mov esi, dword [esp + 0x10]
mov edi, str.___t:
mov eax, esi
call fcn.00408bf0
mov dword [esp + 0x20], eax
test eax, eax
jne 0x41875f
mov eax, esi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x418750
sub eax, edx
add eax, esi
mov dword [esp + 0x20], eax
mov ebp, eax
xor eax, eax
sub ebp, esi
cmp byte [esp + 0x1a], al
je 0x41877f
mov ecx, dword [0x49d3c8]
mov edx, dword [ecx + 0x94]
cmp byte [edx + 0x30], 1
sete al
inc eax
mov esi, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x2e]
mov edi, ebp
call fcn.0041d750
mov dword [esp + 0x30], eax
test eax, eax
je 0x418bc4
cmp byte [esp + 0x2a], 0
jne 0x418bd3
mov ebx, eax
mov al, byte [ebx + 0x17]
test al, al
jne 0x4187b9
mov eax, dword [ebx + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
jne 0x418c4d
mov ecx, dword [esp + 0x10]
push ebp
mov eax, str.ErrorLevel
call fcn.00464080
add esp, 4
test eax, eax
je 0x418c4d
mov ecx, dword [0x49d3c8]
mov eax, dword [ecx + 0x94]
xor esi, esi
cmp dword [eax + 0xc], esi
jle 0x418823
xor edi, edi
mov edx, dword [eax + 8]
mov eax, dword [edx + edi]
mov eax, dword [eax + 0x18]
mov ecx, dword [esp + 0x10]
push ebp
call fcn.00464080
add esp, 4
test eax, eax
je 0x418bf1
mov ecx, dword [0x49d3c8]
mov eax, dword [ecx + 0x94]
inc esi
add edi, 0x10
cmp esi, dword [eax + 0xc]
jl 0x4187f0
cmp byte [esp + 0x1a], 0
je 0x418845
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x54]
cmp eax, 0x7d0
jge 0x418c11
mov edx, dword [ecx + 0x50]
mov dword [edx + eax*4], ebx
inc dword [ecx + 0x54]
mov ebp, dword [esp + 0x1c]
cmp ebp, 3
jne 0x4188c0
cmp byte [ebx + 0x17], 0
jne 0x4188ba
mov eax, dword [ebx + 0xc]
or byte [eax + 0x15], 4
jmp 0x4188e9
mov eax, dword [ecx + 0x94]
movzx edx, byte [eax + 0x30]
cmp dword [esp + 0x1c], edx
jne 0x4186d3
mov eax, dword [esp + 0x1c]
cmp eax, 1
jne 0x418897
push edi
push str.Global_variables_must_not_be_declared_in_this_function.
mov ecx, ebp
call fcn.00429900
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8708
ret 0x1c
cmp eax, 2
jne 0x4186d3
push edi
push str.Local_variables_must_not_be_declared_in_this_function.
mov ecx, ebp
call fcn.00429900
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8708
ret 0x1c
or byte [ebx + 0x15], 4
jmp 0x4188e9
cmp ebp, 2
jne 0x4188e9
mov eax, dword [0x49d3c8]
mov ecx, dword [eax + 0x94]
cmp byte [ecx + 0x30], 3
jne 0x4188e9
cmp byte [ebx + 0x17], 0
jne 0x4188e5
mov eax, dword [ebx + 0xc]
and byte [eax + 0x15], 0xfb
jmp 0x4188e9
and byte [ebx + 0x15], 0xfb
mov eax, dword [esp + 0x20]
lea ecx, [ecx]
mov cl, byte [eax]
cmp cl, 0x20
je 0x4188fc
cmp cl, 9
jne 0x4188ff
inc eax
jmp 0x4188f0
movsx ecx, byte [eax]
mov edi, eax
mov dword [esp + 0x20], edi
cmp ecx, 0x3d
ja case.0x418914.1
movzx edx, byte [ecx + 0x41a318]
jmp dword [edx*4 + 0x41a304]
lea ecx, [eax + 1]
mov edi, edi
mov al, byte [ecx]
cmp al, 0x20
je 0x41892a
cmp al, 9
jne 0x41892d
inc ecx
jmp 0x418920
mov eax, ecx
mov esi, dword [esp + 0x14]
jmp 0x418b96
cmp byte [eax + 1], 0x3d
jne 0x418c2d
lea edi, [eax + 2]
mov dword [esp + 0x20], edi
xor bl, bl
mov al, byte [edi]
xor cl, cl
xor edx, edx
mov esi, edi
test al, al
je 0x4189a8
cmp al, 0x2c
jne 0x418970
test cl, cl
jne case.0x418982.35
test edx, edx
je 0x4189a4
jmp case.0x418982.35
lea edi, [eax + 1]
mov dword [esp + 0x20], edi
mov bl, 1
jmp 0x41894b
movsx eax, al
add eax, 0xffffffde
cmp eax, 0x3b
ja case.0x418982.35
movzx eax, byte [eax + 0x41a368]
jmp dword [eax*4 + 0x41a358]
test cl, cl
sete cl
jmp case.0x418982.35
test cl, cl
jne case.0x418982.35
inc edx
jmp case.0x418982.35
test cl, cl
jne case.0x418982.35
dec edx
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x418957
mov dword [esp + 0x20], edi
lea eax, [edi - 1]
mov edi, dword [esp + 0x10]
mov edx, edi
call fcn.00408c50
mov cl, byte [eax + 1]
inc eax
mov dword [esp + 0x34], eax
mov byte [esp + 0x2b], cl
mov byte [eax], 0
cmp ebp, 3
jne 0x418adf
mov edx, dword [esp + 0x30]
mov eax, dword [edx + 0x18]
mov dword [esp + 0xa8], eax
mov ebp, esi
mov edi, edi
mov al, byte [ebp]
cmp al, 0x20
je 0x4189eb
cmp al, 9
jne 0x4189ee
inc ebp
jmp 0x4189e0
mov bl, byte [0x49d352]
mov ecx, ebp
mov al, byte [ecx]
test al, al
je 0x418a0c
lea esp, [esp]
cmp al, bl
je 0x418a58
mov al, byte [ecx + 1]
inc ecx
test al, al
jne 0x418a00
mov esi, dword [esp + 0x14]
push 0
push 0x101
lea eax, [esp + 0xb0]
push eax
push 2
push esi
mov dword [esp + 0xc0], ebp
call fcn.0041a810
test eax, eax
je 0x418bc4
mov ecx, dword [esi + 4]
mov eax, dword [ecx + 0x10]
mov dword [esi + 4], eax
mov dword [eax + 0x14], 0
mov eax, dword [esi + 0xc]
test eax, eax
je 0x418abc
mov edx, dword [esi + 0x25c]
mov dword [eax + 0x14], edx
jmp 0x418ac5
cmp byte [ecx], 0
je 0x418a0c
movsx eax, byte [ecx + 1]
lea esi, [ecx + 1]
add eax, 0xffffff9f
cmp eax, 0x15
ja case.0x418a73.99
movzx edx, byte [eax + 0x41a3c8]
jmp dword [edx*4 + 0x41a3a4]
mov byte [esi], 7
jmp case.0x418a73.99
mov byte [esi], 8
jmp case.0x418a73.99
mov byte [esi], 0xc
jmp case.0x418a73.99
mov byte [esi], 0xa
jmp case.0x418a73.99
mov byte [esi], 0xd
jmp case.0x418a73.99
mov byte [esi], 9
jmp case.0x418a73.99
mov byte [esi], 0xb
mov eax, esi
lea edi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x418aa0
sub eax, edi
inc eax
push eax
push esi
push ecx
call fcn.004777f0
add esp, 0xc
mov ecx, esi
jmp 0x4189f6
mov eax, dword [esi + 0x25c]
mov dword [esi + 8], eax
mov edx, dword [esi + 0xc]
mov ecx, dword [esi + 0x25c]
mov dword [ecx + 0x10], edx
mov eax, dword [esi + 0x25c]
mov dword [esi + 0xc], eax
jmp 0x418b71
test bl, bl
je 0x418b28
lea edx, [esp + 0x4710]
mov eax, edi
sub edx, edi
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x418af0
push 0
push 1
push 1
push 0x4910f0
lea ecx, [esp + 0x4720]
push 0x4910f4
push ecx
xor eax, eax
or ecx, 0xffffffff
call fcn.00464760
add esp, 0x18
lea esi, [esp + 0x4710]
jmp 0x418b2a
mov esi, edi
cmp byte [esp + 0x1b], 0
je 0x418b53
cmp byte [esp + 0x19], 0
jne 0x418b53
mov edx, dword [esp + 0x14]
push 0
push 0
push 0
push 0x6e
push edx
call fcn.0041a810
test eax, eax
je 0x418bc4
mov byte [esp + 0x19], 1
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0
push 0
push 0
push 0
push esi
call fcn.00418520
test eax, eax
je 0x418bc4
mov esi, dword [esp + 0x14]
mov al, byte [esp + 0x2b]
mov ecx, dword [esp + 0x34]
mov byte [ecx], al
mov eax, dword [esp + 0x20]
cmp byte [eax], 0x2c
jne 0x418b96
lea ecx, [eax + 1]
mov al, byte [ecx]
cmp al, 0x20
je 0x418b91
cmp al, 9
jne 0x418b94
inc ecx
jmp 0x418b87
mov eax, ecx
cmp byte [eax], 0
mov dword [esp + 0x10], eax
jne 0x41872c
cmp byte [esp + 0x19], 0
je 0x418c91
push 0
push 0
push 0
push 0x6f
push esi
call fcn.0041a810
test eax, eax
jne 0x418c91
mov edx, dword [esp + 0x10]
push edx
push str.Duplicate_declaration.
mov ecx, ebx
call fcn.00429900
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8708
ret 0x1c
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
push eax
push str.Parameters_must_not_be_declared.
call fcn.00429900
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8708
ret 0x1c
mov edx, dword [esp + 0x10]
push edx
push str.Too_many_declarations.
call fcn.00429900
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8708
ret 0x1c
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
push eax
push str.This_line_does_not_contain_a_recognized_action.
call fcn.00429900
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8708
ret 0x1c
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x18]
push str.Built_in_variables_must_not_be_declared.
call fcn.00429900
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8708
ret 0x1c
mov ecx, dword [esp + 0x1c]
cmp ecx, 2
je 0x418ca3
cmp byte [ebp + 0x4c], 0
je 0x418ca3
mov edx, dword [0x49d3c8]
mov eax, dword [edx + 0x94]
cmp byte [eax + 0x30], 0
jne 0x418ca3
mov byte [eax + 0x30], cl
push edi
push str.This_line_does_not_contain_a_recognized_action.
mov ecx, ebp
call fcn.00429900
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8708
ret 0x1c
push 1
push edi
push ebp
lea ebx, [esp + 0x114]
call fcn.0041a640
mov edx, eax
mov dword [esp + 0x24], edx
test edx, edx
jne 0x41856b
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8708
ret 0x1c
mov ebp, eax
mov al, byte [edx + 1]
mov dword [esp + 0x10], ebp
cmp al, byte [0x49d350]
je 0x418d43
test al, al
je 0x418d43
cmp al, 0x20
je 0x418d43
cmp al, 9
je 0x418d43
cmp al, 0x28
jne 0x4185a3
lea eax, [esp + 0x108]
push 0x4920e8
push eax
call fcn.00476cb6
add esp, 8
test eax, eax
je 0x418d43
lea ecx, [esp + 0x108]
push str.WHILE
push ecx
call fcn.00476cb6
add esp, 8
test eax, eax
jne 0x4185a3
mov byte [esp + 0x1a], 1
jmp 0x4185a8
cmp byte [esp + 0x8720], 0
jne 0x4196b5
cmp byte [esp + 0x8724], 0
jne case.0x4191bf.1
cmp byte [esp + 0x1a], 0
je 0x419197
lea eax, [esp + 0x108]
push 0x4920e8
push eax
call fcn.00476cb6
add esp, 8
test eax, eax
jne 0x419197
mov ebp, dword [esp + 0x10]
mov al, byte [ebp]
cmp al, 0x28
je case.0x418e72.34
cmp al, byte [0x49d351]
jne 0x418dbb
mov al, byte [ebp + 1]
cmp al, 0x20
je case.0x418e72.34
cmp al, 9
je case.0x418e72.34
mov cl, byte [0x49d350]
lea edi, [esp + 0x40]
mov eax, ebp
mov byte [esp + 0x40], 0x20
mov byte [esp + 0x41], cl
mov dword [esp + 0x42], 0x3e3c0928
mov dword [esp + 0x46], 0x2d2b3d3a
mov dword [esp + 0x4a], 0x7e212f2a
mov dword [esp + 0x4e], 0x5b5e7c26
mov word [esp + 0x52], 0x3f2e
mov byte [esp + 0x54], 0
call fcn.00408bf0
test eax, eax
je 0x418e18
mov cl, byte [eax]
cmp cl, 0x20
je 0x418e11
cmp cl, 9
jne 0x418e14
inc eax
jmp 0x418e05
mov edi, eax
jmp 0x418e2c
mov eax, ebp
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x418e20
sub eax, edx
lea edi, [eax + ebp]
push 3
push 0x4916e8
push ebp
call fcn.00477695
add esp, 0xc
test eax, eax
jne 0x418e5a
movsx eax, byte [ebp + 3]
push eax
lea edx, [esp + 0x44]
push edx
call fcn.00477c01
add esp, 8
test eax, eax
je 0x418e5a
mov bl, 1
jmp 0x418e5c
xor bl, bl
movsx eax, byte [edi]
add eax, 0xffffffdf
cmp eax, 0x4d
ja case.0x418e72.34
movzx eax, byte [eax + 0x41a404]
jmp dword [eax*4 + 0x41a3e0]
mov byte [esp + 0x8720], 0x13
jmp fcn.00418ea9
movsx eax, byte [edi + 1]
sub eax, 0x3d
je 0x418e9d
dec eax
je 0x418f73
mov byte [esp + 0x8720], 0x17
jmp fcn.00418ea9
mov byte [esp + 0x8720], 0x18
mov byte [edi + 1], 0x20
cmp byte [edi + 1], 0x3d
jne 0x418f5c
mov byte [esp + 0x8720], 0x16
jmp 0x418ea5
mov byte [esp + 0x8720], 0x15
jmp fcn.00418ea9
cmp byte [edi + 1], 0x3d
jne case.0x418e72.34
mov byte [esp + 0x8720], 0x14
jmp 0x418ea5
test bl, bl
jne case.0x418e72.34
push 7
push str.between
push edi
call fcn.00477695
add esp, 0xc
test eax, eax
jne case.0x418e72.34
mov eax, 0x20202020
mov dword [edi], eax
mov word [edi + 4], ax
mov byte [esp + 0x8720], 0x10
mov byte [edi + 6], al
jmp fcn.00418ea9
test bl, bl
jne case.0x418e72.34
push 8
push str.contains
push edi
call fcn.00477695
add esp, 0xc
test eax, eax
jne case.0x418e72.34
mov eax, 0x20202020
mov dword [edi], eax
mov byte [esp + 0x8720], 0xc
mov dword [edi + 4], eax
jmp fcn.00418ea9
mov al, byte [edi + 1]
call fcn.00408bc0
movsx eax, al
add eax, 0xffffffb2
cmp eax, 0x25
ja case.0x418e72.34
movzx ecx, byte [eax + 0x41a460]
jmp dword [ecx*4 + 0x41a454]
test bl, bl
je 0x419025
mov byte [esp + 0x8720], 0x12
jmp 0x419068
push 3
push 0x492734
push esi
call fcn.00477695
add esp, 0xc
test eax, eax
je 0x419043
mov byte [esp + 0x8720], 0xe
jmp 0x419056
mov eax, 0x20202060
out 0x89, al
push es
les eax, [esp + 0x8720]
js 0xbcc19a9e
cmp byte [esp + 0x8720], 0x12
and al, 0x20
xchg dword [eax], eax
add byte [edx], dl
mov byte [edi + 1], 0x20
jne fcn.00418ea9
mov eax, ebp
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419070
sub eax, edx
cmp byte [eax + ebp - 1], 0x7b
lea eax, [eax + ebp - 1]
jne 0x84196b5
mov byte [eax], cl
sub eax, ebp
mov esi, ebp
call fcn.00411c20
mov byte [esp + 0x19], 1
jmp 0x4196b5
test bl, bl
hlt
push 3
push 0x492734
push edi
call fcn.00477695
add esp, 0xc
test eax, eax
pop es
test dword [ebx], edi
invalid
mov esi, dword [esp + 0x10]
mov ch, byte [esi]
mov bl, byte [0x49d310]
mov dl, byte [esi + 1]
movsx edx, cl
mov edx, eax
cli
lea ebp, [esi + 1]
cmp edx, 0x56
ja case.0x4191bf.1
movzx edx, byte [edx + 0x41a4b0]
jmp dword [edx*4 + 0x41a488]
mov byte [esp + 0x18720], 1
jmp 0x4194f1
cmp al, 0x35
jne case.0x4191bf.1
mov byte [esp + 0x8720], 2
jmp 0x419490
cmp byte [esp + 0x108], 0x2b
jne 0x419200
cmp byte [esp + 0x109], 0
jne 0x419200
mov cl, 1
jmp 0x41920a
xor cl, cl
cmp al, 0x3d
jne 0x8213c2
mov byte [esp + esi + 0x8720], 4
test cl, cl
je 0x41947c
mov ebx, ebp
lea esp, [esp]
mov al, byte [ebx]
cmp al, 0x20
hlt
cmp byte [esp + 0x108], 0x2d
jne 0x419251
cmp byte [esp + 0x109], 0
jne 0x419251
mov cl, 1
mov byte [esp + 0x8720], 5
imul eax, dword [ecx + 0x32], 0xffffffc9
xor cl, cl
cmp al, 0x3d
jne 0x6193c2
mov byte [esp + 0x8720], 5
jmp 0x419212
cmp al, 0x3d
jne 0x4993c2
mov byte [esp + 0x8720], 6
jmp 0x419490
cmp al, 0x3d
jne 0x41928b
mov byte [esp + 0x8700], 7
call fcn.004294d0
cmp al, 0x2f
jne case.0x4191bf.1
cmp byte [esi + 2], 0x3d
je case.0x4191bf.1
mov edx, dword [esp + 0x871c]
mov byte [esp + 0x8720], 3
mov dword [esp + 0x10], edx
mov ebp, edx
jmp 0x4185cc
cmp al, 0x3d
jne case.0x4191bf.1
mov edx, dword [esp + 0x871c]
mov byte [esp + 0x8720], 3
mov dword [esp + 0x10], edx
mov ebp, edx
jmp 0x2185cc
cmp al, cl
jne case.0x4191bf.1
cmp byte [esi + 0xa], 0x3d
jne case.0x4191bf.1
mov edx, dword [esp + 0x800871c]
mov byte [esp + 0x28720], 3
mov dword [esp + 0x10], esi
mov ebp, edx
jmp 0x41858c
mov bl, 0x3d
cmp al, bl
jne 0x419325
mov edx, dword [esp + 0x871c]
mov byte [esp + 0x88720], 3
mov dword [esp + 0x10], edx
mov ebp, edx
jmp 0x4185cc
mov edi, ebp
mov esi, edi
lea esp, [esp]
mov al, byte [esi]
mov ecx, 0x107
call fcn.00408ba0
test eax, eax
jne 0x419345
cmp byte [esi], 0x5f
jne 0x419348
inc esi
jmp 0x419330
cmp byte [esi], 0x28
je 0x41929d
cmp edx, edi
je case.0x4191bf.1
mov al, byte [esi]
cmp al, 0x20
je 0x41935f
xor al, 9
jne 0x419362
inc esi
jmp 0x419355
mov al, byte [esi]
pop ebx
je 0x41929d
test al, al
je 0x41929d
cmp byte [esi + 1], bl
lea edi, [esi + 1]
jne 0x419394
movsx eax, al
push eax
push str.:__.
call fcn.00477c01
add esp, 8
test eax, eax
or eax, 0xffff0885
dec dword [edi]
mov esi, 0x64685006
daa
dec ecx
add ch, al
pop esi
call 0xc4c493aa
or byte [ebp - 0x75f08f40], al
pop es
cmp al, byte [esi]
xor eax, 0x25e3809
dec edi
test ah, ah
invalid
mov ebp, dword [esp + 0x10]
cmp byte [esp + 0x8728], 3
je 0x419501
cmp byte [esp + 0x8720], 1
je 0x4194e3
mov esi, dword [esi + 0x10]
mov al, byte [esi + 2]
add esi, 2
xor dl, dl
cmp edi, edi
add al, 0xc0
je 0x4194e3
movsx ecx, al
add ecx, 0xffffffde
cmp ecx, 0x3b
ja 0x4194ce
movzx ecx, byte [ecx + 0x41a518]
jmp dword [ebp*4 + 0x412518]
cmp al, bl
jne 0x4194db
test dl, dl
jne 0x4194db
cmp edi, 9
jl 0x419513
mov al, byte [esi + 1]
inc esi
test dl, al
jne 0x4194a2
cmp byte [esp + 0x8724], 3
je 0x419501
mov esi, dword [esp + 0x10]
cmp byte [esp + eax + 0x8720], 1
mov byte [esi], bl
je 0x419501
mov byte [ebp], 0x20
mov edx, dword [esp + 0x871c]
mov dword [esp + 0x10], edx
mov ebp, edx
jmp 0x4185cc
mov al, byte [esp + 0x8620]
cmp al, 4
je 0x41953c
cmp al, 5
je 0x41953c
mov edx, dword [esp + 0x871c]
mov byte [esp + 0x8720], 3
mov dword [esp + 0x10], edx
mov ebp, edx
jmp 0x4185cc
lea eax, [esi + 1]
nop
mov cl, byte [eax]
cmp cl, 0x20
je 0x41954c
cmp cl, 9
jne 0x41954f
inc eax
jmp 0x419540
mov edi, str.__t____:_______._
call fcn.00408bf0
test eax, eax
xchg byte fs:[ebx - 0x78e3db6c], cl
add byte [eax], al
mov byte [esp + 0x8720], 3
mov dword [esp + 0x10], edx
mov ebp, edx
jmp 0x4185cc
mov cl, 9
add byte [eax - 0x53fff64f], bh
mov cl, 9
add byte [eax - 0x71fff64f], ah
mov cl, 9
add byte [eax - 0x4f], bh
or dword [eax], eax
mov cl, 9
add byte [esi - 0x4f], cl
or dword [eax], eax
inc edx
mov cl, 9
add byte [edx], ch
mov cl, 9
add byte [edx], dl
mov cl, 9
add byte [esi], al
mov cl, 9
add al, bh
mov al, 9
add dl, ch
mov al, 9
add dh, dl
mov al, 9
add dl, cl
mov al, 9
add byte [eax], ch
mov dl, 9
add byte [esi - 0x4e], al
or dword [eax], eax
pop edx
mov dl, 9
add byte [edx - 0x4e], ch
or dword [eax], eax
xor byte [edx - 0x4d71fff7], 9
add byte [esp + ebx*4], bl
or dword [eax], eax
adc al, 0x9c
or dword [eax], eax
cli
wait
or dword [eax], eax
loopne 0x4993a5
or dword [eax], eax
aam 0x9b
or dword [eax], eax
les ebx, [ebx - 0x644dfff7]
or dword [eax], eax
cwde
wait
or dword [eax], eax
mov ds, word [ebx - 0x6487fff7]
or dword [eax], eax
pushal
wait
or dword [eax], eax
push eax
wait
or dword [eax], eax
inc eax
wait
or dword [eax], eax
xor byte [ebx - 0x64ddfff7], bl
or dword [eax], eax
push cs
wait
or dword [eax], eax
cli
lcall 9, 0x9aea0009
ficomp word [edx - 0x6537fff7]
or dword [eax], eax
mov eax, 0xaa00099a
lcall 9, 0x9a9c0009
mov ds, word [edx - 0x6585fff7]
or dword [eax], eax
push 0x5000099a
lcall 9, 0x9a340009
sbb al, 0x9a
or dword [eax], eax
adc al, 0x9a
or dword [eax], eax
add al, 0x9a
or dword [eax], eax
mov dh, 0xb2
or dword [eax], eax
invalid