Function at 0x423b00
Capabilities:
Get installed programs

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5dea73
mov eax, dword fs:[0]
push eax
sub esp, 0x2e8
mov eax, dword [0x67432c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2dc], ecx
call fcn.00452215
test al, al
je 0x423b58
cmc
mov cl, 0x86
jmp 0x423b9a
call fcn.004520bc
test al, al
je 0x423b7f
mov al, byte [0xa6bc27e0]
xchg ebx, eax
int 0xd0
cmp cl, byte [0x64282bf2]
push ss
insb byte es:[edi], dx
push ecx
sub bl, byte [ebp - 0x43]
xchg dword [eax - 0x63c4894a], edx
sub eax, 0x8ddbf9a6
test dword [eax - 3], eax
invalid
lea eax, [ebp - 0x2c0]
push str.796258275971352110291246162408451651084622412943
push eax
call fcn.00452b2d
add esp, 8
mov dword [ebp - 4], 0
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x2e4], 0
mov dword [ebp - 0x2e0], 0
xor eax, eax
mov byte [ebp - 4], 1
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], eax
call fcn.00452620
test al, al
je 0x423bec
nop
cmc
invalid
call fcn.00452596
test al, al
je 0x423c10
mov eax, dword [0x295bc0c2]
wait
mov eax, 0xdb883673
fistp word [0x153f9b6a]
mov eax, 0x9079ab60
invalid
call fcn.00452551
test al, al
je 0x423c32
xlatb
push es
cld
call 0xad1629de
mov esi, 0xc040f586
cwde
into
xchg edi, eax
xor dword [esi], ecx
push cs
invalid
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea eax, [ebp - 0x2d4]
push eax
push 0x109
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0x423c86
mov ecx, dword [ebp - 0x2dc]
lea eax, [ebp - 0x2e8]
push eax
push dword [ebp - 0x2d4]
call fcn.00424cc0
push dword [ebp - 0x2d4]
mov esi, eax
mov dword [ebp - 0x2d0], esi
call edi
jmp 0x423c88
xor esi, esi
call fcn.00451fed
test al, al
je 0x423cb1
and byte [edx], dh
and eax, 0x34c727f7
xor ah, byte [0x34c727f7]
cmp dword [esi + 0x59], edi
loop 0x423c90
je 0x423c2a
dec ebp
pop edi
stc
jl 0x423c8d
and al, 0x43
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
jne 0x423cf5
lea eax, [ebp - 0x2d4]
push eax
push 9
push esi
push 0x5e8ff0
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
test eax, eax
jne 0x423cf5
mov ecx, dword es:[ebp - 0x2dc]
mov ecx, dword [ebp - 0x2dc]
lea eax, [ebp - 0x2e8]
push eax
push dword [ebp - 0x2d4]
call fcn.00424cc0
push dword [ebp - 0x2d4]
mov dword [ebp - 0x2d0], eax
call edi
call fcn.0045225a
test al, al
je 0x423d0e
or eax, 0x5fcb8731
in al, 0xb
outsd dx, dword [esi]
sub eax, 0x3ccda216
dec eax
inc esi
jmp 0x32b05fa
call fcn.004525db
test al, al
je 0x423d37
push edi
sub al, 0xf4
cdq
int3
call fcn.00451fed
test al, al
je 0x423d5e
int1
mov dword [0xf6c91597], eax
or eax, 0x37ae4196
jmp 0x423cce
mov eax, dword [ebp - 0x2d0]
test eax, eax
je 0x424bfd
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 0
push 0x20
push str.69c80f405229c892c97b217e5783008c
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 2
mov dword [ebp - 0x21c], 0xf
mov dword [ebp - 0x220], 0
mov byte [ebp - 0x230], 0
call fcn.004028a0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
mov eax, dword [ebp - 0x21c]
mov byte [ebp - 4], 2
cmp eax, 0x10
jb 0x423df3
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00402bc0
push 0x20
push str.f7ff0452f2d5b3266e221e3d56519e1b
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], 0xf
mov dword [ebp - 0x220], 0
mov byte [ebp - 0x230], 0
call fcn.004028a0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
mov eax, dword [ebp - 0x21c]
mov byte [ebp - 4], 2
cmp eax, 0x10
jb 0x423e58
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00402bc0
push 0x20
push str.30c6caa6917b96066ab71c192e75e4ac
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], 0xf
mov dword [ebp - 0x220], 0
mov byte [ebp - 0x230], 0
call fcn.004028a0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
mov eax, dword [ebp - 0x21c]
mov byte [ebp - 4], 2
cmp eax, 0x10
jb 0x423ebd
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00402bc0
push 0x20
push str.a661f2d90fff216c2229b9adf2f0c279
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], 0xf
mov dword [ebp - 0x220], 0
mov byte [ebp - 0x230], 0
call fcn.004028a0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
mov eax, dword [ebp - 0x21c]
mov byte [ebp - 4], 2
cmp eax, 0x10
jb 0x423f22
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00402bc0
push 0x20
push str.306359f69c56d04da5b2592fc5b7c3e3
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], 0xf
mov dword [ebp - 0x220], 0
mov byte [ebp - 0x230], 0
call fcn.004028a0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
mov eax, dword [ebp - 0x21c]
mov byte [ebp - 4], 2
cmp eax, 0x10
jb 0x423f87
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00402bc0
push 0x20
push str.00f0c9f9f007d0deb5e55660d9c5ac05
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], 0xf
mov dword [ebp - 0x220], 0
mov byte [ebp - 0x230], 0
call fcn.004028a0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
mov eax, dword [ebp - 0x21c]
mov byte [ebp - 4], 2
cmp eax, 0x10
jb 0x423fec
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00402bc0
push 0x20
push str.66449cb2c46de9fed9fd504d3692b3ec
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], 0xf
mov dword [ebp - 0x220], 0
mov byte [ebp - 0x230], 0
call fcn.004028a0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
mov eax, dword [ebp - 0x21c]
mov byte [ebp - 4], 2
cmp eax, 0x10
jb 0x424051
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00402bc0
push str.0739122b53eded7104ca65c9ae1ada76
lea ecx, [ebp - 0x260]
call fcn.00406390
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
mov eax, dword [ebp - 0x24c]
mov byte [ebp - 4], 2
cmp eax, 0x10
jb 0x424099
inc eax
lea ecx, [ebp - 0x260]
push eax
push dword [ebp - 0x260]
call fcn.00402bc0
push str.8fa440b0466037bccdd0a8f5dd251a23
lea ecx, [ebp - 0x260]
call fcn.00406390
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
mov eax, dword [ebp - 0x24c]
mov byte [ebp - 4], 2
cmp eax, 0x10
jb 0x4240e1
inc eax
lea ecx, [ebp - 0x260]
push eax
push dword [ebp - 0x260]
call fcn.00402bc0
call fcn.0045243d
test al, al
je 0x424107
sahf
sal dword [edi], 0xc4
je 0x424099
wait
cmpsd dword [esi], dword es:[edi]
pop ebp
jmp 0x424114
call fcn.00452215
test al, al
je 0x424130
test al, 0x1d
ja 0x42416b
adc dl, byte ss:[ebx + 0x650b6f8f]
fldcw word [eax]
cmp eax, 0x6f536fbd
adc ch, byte [esi + ebp*8 + 0x5e]
cmp byte [edx], ah
leave
push edx
shr byte [edi - 9], 0xf7
push str.78679240ab498305e7b9aa0ca832c3a2
lea ecx, [ebp - 0x260]
call fcn.00406390
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
mov eax, dword [ebp - 0x24c]
mov byte [ebp - 4], 2
cmp eax, 0x10
jb 0x424178
inc eax
lea ecx, [ebp - 0x260]
push eax
push dword [ebp - 0x260]
call fcn.00402bc0
call dword [eax - 1]
mov ch, 0xa0
std
invalid
push str.fcf0d6b5908e3bc64243cee867f5ab42
lea ecx, [ebp - 0x260]
call fcn.00406390
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
mov eax, dword [ebp - 0x24c]
mov byte [ebp - 4], 2
cmp eax, 0x10
jb 0x4241c0
inc eax
lea ecx, [ebp - 0x260]
push eax
push dword [ebp - 0x260]
call fcn.00402bc0
push str.e58f977b23a2d75c322439ddb1d990b1
lea ecx, [ebp - 0x248]
call fcn.00406390
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00404120
push str.bacdc88e0bb26d08994982e5a0c9e047
lea ecx, [ebp - 0x248]
call fcn.00406390
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00404120
push str.f81707b6dab7c190cdeeace04427ccf7
lea ecx, [ebp - 0x248]
call fcn.00406390
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00404120
push str.9a666e162bb4970fa3703713e5e93bea
lea ecx, [ebp - 0x248]
call fcn.00406390
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00404120
push str.7dad01656308d59ca0eb050766ccff1f
lea ecx, [ebp - 0x248]
call fcn.00406390
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00404120
push str.70bc5530fa5db6c07d54b6e4e716e48b
lea ecx, [ebp - 0x248]
call fcn.00406390
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00404120
push str.ad933e3c4e30b411de61c8520555f1ac
lea ecx, [ebp - 0x248]
call fcn.00406390
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00404120
push str.fbd4bec470fa56dc9bc2000c51fed08e
lea ecx, [ebp - 0x248]
call fcn.00406390
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00404120
push str.78b0259948f4e05574bfa543ff48ba68
lea ecx, [ebp - 0x248]
call fcn.00406390
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00404120
call fcn.00452596
test al, al
je 0x4243bc
add ch, al
mov eax, 0x68fffdfd
and byte [ebx - 0x7272ffa2], dl
mov eax, 0xe8fffffd
sbb byte [eax], ah
invalid
add byte [ebp - 0x24773], cl
invalid
jo 0x424362
sbb ch, 0x7e
jl 0x42436c
xchg esp, eax
int1
insd dword es:[edi], dx
mov al, ah
or edx, edx
mov byte [ebp - 0x3f], 0xd7
sbb eax, 0x68cf8b87
inc esp
xchg ebx, eax
pop esi
add byte [ebp - 0x24773], cl
invalid
push str.e1040b08ab777bf4738cd7fd0fc5e2fd
lea ecx, [ebp - 0x248]
call fcn.00406390
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00404120
push str.b0c554ae4592bc7dacd44e488d9953ca
lea ecx, [ebp - 0x248]
call fcn.00406390
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00404120
push str.e963de71fc4f8287027741390a510f70
lea ecx, [ebp - 0x248]
call fcn.00406390
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00404120
push str.105bf339f00c2269ab6b63e07617597d
lea ecx, [ebp - 0x248]
call fcn.00406390
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00404120
push str.19b1a347e7ccf11cb9e4bf3b1666fe39
lea ecx, [ebp - 0x248]
call fcn.00406390
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00404120
push str.f16d2a3f111e1471d8bb6ddc23a08ee9
lea ecx, [ebp - 0x248]
call fcn.00406390
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00404120
push str.653c1a9e60cc9e9c6edaae9f11613b84
lea ecx, [ebp - 0x248]
call fcn.00406390
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00404120
push str.d19262abb8302c80bf51cb2bf1123188
lea ecx, [ebp - 0x248]
call fcn.00406390
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00404120
push str.8cec558d4665d6e8f35d942b60a17b0b
lea ecx, [ebp - 0x248]
call fcn.00406390
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00418840
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.00404120
call fcn.004523f8
test al, al
je 0x4245b2
push esp
mov edi, 0x3e6b509c
xor eax, 0x219b9331
pushal
call 0x68f7769f
or byte [edx], al
add byte [eax], al
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00480620
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsW]
call fcn.0045250c
test al, al
je 0x424602
in eax, 0x1a
in al, dx
popfd
mov esi, 0x46bfec90
jg 0x424624
imul ecx, dword [ebx + 0x5c87d2c2], 0xffffffc8
xor eax, 0xb947cd2f
aam 0x9f
cmp esi, dword [ecx + 0x2b]
call fcn.00451fa8
test al, al
je 0x424624
mov dh, 0x6c
out dx, eax
clc
loopne 0x42464a
das
sbb edx, dword [esi + 0x57]
inc ecx
mov dl, 0xe6
lahf
in eax, dx
clc
sar byte [ebp + 0x75], 0x14
test al, 0x81
cmpsd dword [esi], dword es:[edi]
call fcn.0045225a
test al, al
je 0x424649
ret 0xe3a1
lea eax, [ebp - 0x218]
mov ecx, eax
mov dword [ebp - 0x2dc], eax
lea edx, [ecx + 2]
nop word [eax + eax]
test eax, ebp
std
invalid
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x424660
sub ecx, edx
sar ecx, 1
cmp ecx, 3
jne 0x424790
call fcn.0045250c
test al, al
je 0x424692
or esp, dword [ecx + 0x3f]
ret
call fcn.00452215
test al, al
je 0x4246ba
enter 0x59fb, 0x16
invalid
call fcn.00452032
test al, al
je 0x4246d9
int3
mov ebx, dword [ebp - 0x2dc]
lea ecx, [ebp - 0x230]
push ebx
call fcn.00404060
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x2c0]
mov byte [ebp - 4], 0x20
push eax
lea ecx, [ebp - 0x230]
call fcn.00405b10
push 1
push 0x5e6bac
lea ecx, [ebp - 0x230]
call fcn.00405c20
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x424748
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x2e8]
call fcn.00428760
add ebx, 8
mov esi, ebx
mov dword [ebp - 0x2dc], ebx
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x424756
mov eax, dword [ebp - 0x21c]
sub esi, ecx
sar esi, 1
mov byte [ebp - 4], 2
cmp eax, 8
jb 0x424787
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00402c10
cmp esi, 3
je 0x424678
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x2d0], eax
cmp eax, dword [ebp - 0x2e4]
je 0x424bee
nop dword [eax + eax]
cmp dword [ebp - 0x2d8], 0
jne 0x424bee
call fcn.00452620
test al, al
je 0x4247d9
sbb byte [ebx + 0x50], cl
imul edx, dword [ebx], 0xffffffcf
and al, cl
mov byte [0x76ccc576], al
inc ecx
sub eax, ecx
out 0xc7, eax
mov ebp, 0x2ddb8e8
add byte [eax + eax*8 - 0x4bc7e48c], al
xor dl, byte [ebp - 0x2b51b563]
hlt
call fcn.00452596
test al, al
je 0x4247fd
cmp byte [edx + esi - 0x51b5626b], dh
aam 0xf4
insb byte es:[edi], dx
sbb al, 0x75
xchg edx, eax
scasb al, byte es:[edi]
mov edi, 0xfdfaa4a6
xchg byte [ebx + 0x6400bd21], ch
fld xword [eax]
call fcn.00452551
test al, al
je 0x42481f
fsubr st(5)
inc ebx
or eax, 0x262bfdf4
add al, 0x4a
hlt
mov ebx, dword [ebp - 0x2d0]
cmp dword [ebx + 0x14], 8
jb 0x42482f
mov eax, dword [ebx]
jmp 0x424831
mov eax, ebx
push eax
lea ecx, [ebp - 0x2a8]
call fcn.00404060
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x2ec], 0
cmp dword [ebp - 0x294], 8
lea ecx, [ebp - 0x2f4]
lea eax, [ebp - 0x2a8]
mov byte [ebp - 4], 0x22
cmovae eax, dword [ebp - 0x2a8]
push ecx
push eax
call fcn.00459a02
mov esi, dword [ebp - 0x2f4]
add esp, 8
cmp esi, dword [ebp - 0x2f0]
je 0x424bac
nop word [eax + eax]
cmp dword [ebp - 0x2d8], 0
jne 0x424ba6
cmp dword [esi + 0x14], 8
jb 0x4248b7
mov eax, dword [esi]
jmp 0x4248b9
mov eax, esi
push eax
lea ecx, [ebp - 0x260]
call fcn.00404060
push 1
push 0
push 0x5e9488
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x23
call fcn.00405d50
cmp eax, 0xffffffff
jle 0x424b75
push 0xffffffffffffffff
inc eax
lea ecx, [ebp - 0x260]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.00419860
push 1
push 0
push 0x5e6c30
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x24
call fcn.00405d50
cmp eax, 0xffffffff
jle 0x4249a7
push eax
push 0
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x278]
call fcn.00419860
mov edi, eax
lea eax, [ebp - 0x278]
cmp eax, edi
je 0x424985
mov eax, dword [ebp - 0x264]
cmp eax, 8
jb 0x42495c
inc eax
lea ecx, [ebp - 0x278]
push eax
push dword [ebp - 0x278]
call fcn.00402c10
xor eax, eax
mov dword [ebp - 0x264], 7
push edi
lea ecx, [ebp - 0x278]
mov dword [ebp - 0x268], 0
mov word [ebp - 0x278], ax
call fcn.00405aa0
mov eax, dword [ebp - 0x234]
mov byte [ebp - 4], 0x24
cmp eax, 8
jb 0x4249a7
inc eax
lea ecx, [ebp - 0x248]
push eax
push dword [ebp - 0x248]
call fcn.00402c10
call fcn.00451fed
test al, al
je 0x4249c4
idiv byte [ecx]
mov byte [0x4e436036], al
xor dword [ebx], 0xbebd13bf
std
pushal
and ebx, edx
pop ebp
enter 0xffffffffffff8d92, 0xffffffffffffff85
mov ch, bh
invalid
lea eax, [ebp - 0x278]
push eax
call fcn.0045b93c
add esp, 4
mov dword [ebp - 0x27c], 7
xor eax, eax
mov dword [ebp - 0x280], 0
mov word [ebp - 0x290], ax
lea ecx, [ebp - 0x290]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.004029a0
push 1
push 0x5e6c30
lea ecx, [ebp - 0x290]
mov byte [ebp - 4], 0x26
call fcn.00405c20
push 9
push 0x5e6c34
lea ecx, [ebp - 0x290]
call fcn.00405c20
lea eax, [ebp - 0x290]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.00456845
add esp, 8
mov ecx, dword [ebp - 0x2cc]
mov eax, ecx
mov edi, dword [ebp - 0x21c]
mov byte [ebp - 4], 0x27
cmp ecx, dword [ebp - 0x2c8]
je 0x424ae7
cmp dword [eax + 0x14], 0x10
jb 0x424a6b
mov edx, dword [eax]
jmp 0x424a6d
mov edx, eax
cmp edi, 0x10
lea ecx, [ebp - 0x230]
cmovae ecx, dword [ebp - 0x230]
nop dword [eax]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x424aa0
test bl, bl
je 0x424a9c
mov bl, byte [ecx + 1]
cmp bl, byte [edx + 1]
jne 0x424aa0
add ecx, 2
add edx, 2
test bl, bl
jne 0x424a80
xor ecx, ecx
jmp 0x424aa5
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x424ab6
add eax, 0x18
cmp eax, dword [ebp - 0x2c8]
jne 0x424a61
jmp 0x424ae7
cmp dword [ebp - 0x264], 8
lea eax, [ebp - 0x278]
mov dword [ebp - 0x2d8], 1
cmovae eax, dword [ebp - 0x278]
push eax
call fcn.00405580
mov ecx, eax
call fcn.00410040
mov edi, dword [ebp - 0x21c]
cmp edi, 0x10
jb 0x424b01
lea eax, [edi + 1]
push eax
push dword [ebp - 0x230]
lea ecx, [ebp - 0x230]
call fcn.00402bc0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x21c], 0xf
mov dword [ebp - 0x220], 0
mov byte [ebp - 0x230], 0
cmp eax, 8
jb 0x424b3a
inc eax
lea ecx, [ebp - 0x290]
push eax
push dword [ebp - 0x290]
call fcn.00402c10
xor eax, eax
mov dword [ebp - 0x27c], 7
mov word [ebp - 0x290], ax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x280], 0
cmp eax, 8
jb 0x424b75
inc eax
lea ecx, [ebp - 0x278]
push eax
push dword [ebp - 0x278]
call fcn.00402c10
mov eax, dword [ebp - 0x24c]
mov byte [ebp - 4], 0x22
cmp eax, 8
jb 0x424b97
inc eax
lea ecx, [ebp - 0x260]
push eax
push dword [ebp - 0x260]
call fcn.00402c10
add esi, 0x18
cmp esi, dword [ebp - 0x2f0]
jne 0x4248a0
mov ebx, dword [ebp - 0x2d0]
lea ecx, [ebp - 0x2f4]
call fcn.00405ef0
mov eax, dword [ebp - 0x294]
mov byte [ebp - 4], 2
cmp eax, 8
jb 0x424bd9
inc eax
lea ecx, [ebp - 0x2a8]
push eax
push dword [ebp - 0x2a8]
call fcn.00402c10
add ebx, 0x18
mov dword [ebp - 0x2d0], ebx
cmp ebx, dword [ebp - 0x2e4]
jne 0x4247b0
lea ecx, [ebp - 0x2cc]
mov byte [ebp - 4], 1
call fcn.00406540
call fcn.0045225a
test al, al
je 0x424c16
stosd dword es:[edi], eax
int3
call fcn.004525db
test al, al
je 0x424c3f
dec edi
inc esi
mov dl, 0xfe
xchg dword [edx - 0x6b], ebp
ja 0x424c02
jbe 0x424bb7
sub al, 0x22
out dx, al
fist dword [ebp + 0x6374a358]
fst dword [edi - 0x40]
mov eax, dword [0x43bc2969]
mov byte [0xe84aaab6], al
test eax, 0x840002d3
sal byte [esi + ebx - 0x15], 0xaa
inc esi
and eax, esi
dec ebx
push ebp
std
stc
pop edi
adc ch, bl
sahf
int3
call fcn.00451fed
test al, al
je 0x424c66
jmp 0x424bf4
lea ecx, [ebp - 0x2e8]
call fcn.00405ef0
mov ecx, dword [ebp - 0x2ac]
cmp ecx, 8
jb 0x424c8f
inc ecx
push ecx
push dword [ebp - 0x2c0]
lea ecx, [ebp - 0x2c0]
call fcn.00402c10
mov eax, dword [ebp - 0x2d8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046d802
mov esp, ebp
pop ebp
ret