Function at 0x4020d0
Capabilities:
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45a420
mov eax, dword fs:[0]
push eax
sub esp, 0xa0
mov eax, dword [0x614280]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xac], ecx
lea ecx, [ebp - 0x28]
call fcn.00411d40
mov dword [ebp - 4], 0
cmp dword [ebp + 0xc], 0
je 0x402125
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x28]
call fcn.00411ed0
lea ecx, [ebp - 0x28]
call fcn.00412930
movzx ecx, al
test ecx, ecx
je 0x4028bf
push 0x45b288
lea ecx, [ebp - 0x28]
call fcn.00411ed0
push 0x45b290
lea ecx, [ebp - 0x28]
call fcn.00411f10
push 0x45b294
lea ecx, [ebp - 0x28]
call fcn.00411f10
movzx edx, byte [0x614d4c]
test edx, edx
je 0x4028a5
add byte [eax], al
inc esp
mov ebx, eax
dec ecx
xor ebx, ebx
call dword [0xcc0]
dec eax
lea ecx, [esp + 0x38]
inc esp
mov ebx, eax
dec ecx
xor ebx, ebx
call dword [0xc5f]
dec esp
mov ebx, dword [esp + 0x38]
dec esp
xor ebx, ebx
dec eax
mov eax, 0xffffffff
invalid
push 0x45b29c
lea ecx, [ebp - 0x28]
call fcn.00411f10
push 0x45b2a0
lea ecx, [ebp - 0x28]
call fcn.00411f10
push str.JBndJNCUVyDJp
lea ecx, [ebp - 0x40]
call fcn.00411d00
mov byte [ebp - 4], 1
movzx eax, byte [0x614d4c]
test eax, eax
je 0x402e32
add byte [eax], al
neg dword [0x57cc0000]
or eax, dword [eax]
add byte [esi], bl
add byte [eax], al
aas
and byte [eax], al
add byte [eax + 0x63], dh
or eax, dword [eax]
inc eax
and byte [eax], al
add byte [edx + 0x68000022], bh
push edi
or eax, dword [eax]
shl byte [edx], 0
add byte [esi + 0x23], dl
add byte [eax], al
xor byte [edi + 0xb], 0
pushal
and eax, dword [eax]
add byte [ecx + 0x24], cl
add byte [eax], al
push eax
push edi
or eax, dword [eax]
push eax
and al, 0
add byte [ebp], ch
add byte [eax], bh
push edi
or eax, dword [eax]
jo 0x40294c
add byte [eax], al
sbb ah, byte [esi]
add byte [eax], al
inc eax
pop es
or eax, dword [eax]
and byte [esi], ah
add byte [eax], al
jecxz 0x40295d
add byte [eax], al
adc byte [edi], al
or eax, dword [eax]
lock add byte es:[eax], al
pop edi
daa
add byte [eax], al
in al, 6
or eax, dword [eax]
pushal
daa
add byte [eax], al
lds esp, [edi]
add ch, al
daa
add byte [eax], al
mov al, 6
or eax, dword [eax]
shl byte [edi], 1
add byte [eax], al
sbb dword [eax], ebp
add byte [eax], al
and ah, cl
or al, byte [eax]
and byte [eax], ch
add byte [eax], al
invalid
mov dword [ebp - 0x64], 0
lea ecx, [ebp - 0x40]
call fcn.00412b20
mov dword [ebp - 0x84], eax
movzx ecx, byte [0x614d4c]
test ecx, ecx
je 0x404195
ror dword [edx + 0x10], 0xff
leave
test ecx, ecx
jg 0x402e6d
dec eax
mov ecx, dword [edx]
dec esp
mov eax, dword [ecx]
inc ecx
mov eax, ebx
mov dword [ebp - 0x6c], 0
jmp 0x4041a7
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
mov eax, dword [ebp - 0x6c]
cmp eax, dword [0x612f8c]
jge 0x4041f3
mov ecx, dword [ebp - 0x6c]
movsx ebx, byte [ecx + 0x612f58]
mov edx, dword [ebp - 0x64]
push edx
lea ecx, [ebp - 0x40]
call fcn.00411ef0
movzx eax, word [eax]
xor ebx, eax
mov ecx, dword [ebp - 0x6c]
mov byte [ecx + 0x612f58], bl
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x84]
jl 0x4041f1
mov dword [ebp - 0x64], 0
jmp 0x40419e
movzx ecx, byte [0x614d4c]
test ecx, ecx
je 0x40557b
dec ebx
inc eax
dec eax
test eax, eax
jne 0x40a942
dec eax
test ecx, ecx
jne 0x40a940
dec eax
mov ecx, dword [ebx + 0x48]
call fcn.004020be
dec eax
mov dword [edi + 0x48], eax
dec eax
mov ecx, dword [ebx + 0x48]
dec eax
test eax, eax
jne 0x40a94d
dec eax
test ecx, ecx
jne 0x40a94b
dec eax
mov ecx, dword [ebx + 0x50]
call fcn.004020be
dec eax
mov dword [edi + 0x50], eax
dec eax
mov ecx, dword [ebx + 0x50]
dec eax
test eax, eax
jne 0x40a958
dec eax
test ecx, ecx
jne 0x40a956
xor eax, eax
dec eax
mov ebx, dword [esp + 0x40]
dec eax
mov ebp, dword [esp + 0x48]
dec eax
mov esi, dword [esp + 0x50]
dec eax
add esp, 0x30
pop edi
ret
call fcn.00401260
push 0xc
call fcn.00415716
add esp, 4
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x4055bc
xor edx, edx
mov eax, dword [ebp - 0x88]
mov dword [eax], edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov ecx, dword [ebp - 0x88]
call fcn.00411df0
mov dword [ebp - 0x90], eax
jmp 0x4055c6
mov dword [ebp - 0x90], 0
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x80], ecx
push 0x612f58
mov ecx, dword [ebp - 0x80]
call fcn.00401280
movzx edx, byte [0x614d4c]
test edx, edx
je 0x405f0f
pushal
dec eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x20], ebp
inc ebp
xor ecx, ecx
dec esp
mov eax, esi
xor edx, edx
dec ecx
mov ecx, ebp
call fcn.00404fb6
inc esp
mov ebp, eax
cmp eax, ebp
mov ecx, dword [ebp - 0x80]
call 0x401370
mov dword [ebp - 0x9c], eax
mov ecx, dword [ebp - 0x9c]
call fcn.004020a0
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x400
jge 0x406af4
movzx eax, byte [0x614d4c]
test eax, eax
je 0x406ad4
add byte [eax], al
add byte [eax], al
add byte [ebp + 0x52], al
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
inc ebx
inc esp
dec ebp
pop edi
inc ebx
dec edi
dec esi
dec esi
inc ebp
inc ebx
push esp
add byte [eax], al
add byte [ebp + 0x52], al
push edx
dec edi
push edx
pop edi
push edx
inc esp
push eax
pop edi
push eax
push edx
dec edi
push esp
dec edi
inc ebx
dec edi
dec esp
pop edi
inc ebp
push edx
push edx
dec edi
push edx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
inc ebp
push edx
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
inc ecx
inc ebx
inc ebx
dec edi
push ebp
dec esi
push esp
pop edi
push edx
inc ebp
push ebx
push esp
push edx
dec ecx
inc ebx
push esp
dec ecx
dec edi
dec esi
add byte [eax], al
add byte [ebp + 0x52], al
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
dec esi
dec edi
pop edi
inc esi
dec edi
push edx
inc ebx
inc ebp
pop edi
dec esp
dec edi
inc edi
dec edi
inc esi
inc esi
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebp + 0x52], al
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
push ebx
inc ebp
push ebx
push ebx
dec ecx
dec edi
dec esi
pop edi
dec ecx
dec esi
pop edi
push ebp
push ebx
inc ebp
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
inc ebp
push edx
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
inc ebp
dec esi
inc ebx
push edx
pop ecx
push eax
push esp
dec ecx
dec edi
dec esi
pop edi
dec esp
inc ebp
push esi
inc ebp
dec esp
pop edi
push edx
inc ebp
push ecx
push ebp
dec ecx
push edx
inc ebp
inc esp
add byte [eax], al
add byte [eax], al
add byte [ebp + 0x52], al
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
push edi
dec ecx
dec esi
push ebx
push esp
inc ecx
push esp
dec ecx
dec edi
dec esi
push ebx
pop edi
inc esp
dec ecx
push ebx
inc ecx
inc edx
dec esp
inc ebp
inc esp
add byte [eax], al
inc ebp
push edx
push edx
dec edi
push edx
pop edi
inc ecx
inc ebx
push esp
dec ecx
push esi
inc ecx
push esp
dec ecx
dec edi
dec esi
pop edi
inc ebx
dec edi
push ebp
dec esi
push esp
pop edi
inc ebp
pop eax
inc ebx
inc ebp
inc ebp
inc esp
inc ebp
inc esp
add byte [ebp + 0x52], al
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
push ebx
dec eax
inc ecx
inc esp
dec edi
push edi
pop edi
inc ebp
dec esi
inc esp
inc ebp
inc esp
pop edi
inc edx
pop ecx
pop edi
dec ebp
dec edi
inc esp
inc ebp
pop edi
inc ebx
dec eax
inc ecx
dec esi
inc edi
inc ebp
add byte [eax], al
add byte [ebp + 0x52], al
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
push ebx
dec eax
inc ecx
inc esp
dec edi
push edi
pop edi
dec esi
dec edi
push esp
pop edi
push edx
push ebp
dec esi
dec esi
dec ecx
dec esi
inc edi
add byte [eax], al
add byte [eax], al
inc ebp
push edx
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
dec esp
dec ecx
inc ebx
inc ebp
dec esi
push ebx
inc ebp
pop edi
inc ebp
pop eax
push eax
dec ecx
push edx
inc ebp
inc esp
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebp + 0x52], al
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
dec esp
dec ecx
inc ebx
inc ebp
dec esi
push ebx
inc ebp
pop edi
inc ebx
dec esp
dec ecx
inc ebp
dec esi
push esp
pop edi
dec ecx
dec esi
push esi
inc ecx
dec esp
dec ecx
inc esp
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
inc ebp
push edx
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
dec esp
dec ecx
inc ebx
inc ebp
dec esi
push ebx
inc ebp
pop edi
dec esi
dec edi
push esp
pop edi
inc ecx
push esi
inc ecx
dec ecx
dec esp
inc ecx
inc edx
dec esp
inc ebp
add byte [ebp + 0x52], al
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
inc ebx
dec esp
dec ecx
inc ebp
dec esi
push esp
pop edi
dec esp
dec ecx
inc ebx
inc ebp
dec esi
push ebx
inc ebp
pop edi
dec esi
dec edi
push esp
pop edi
push ebx
inc ebp
push esp
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
inc ebp
push edx
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
inc ebx
dec esp
dec ecx
inc ebp
dec esi
push esp
pop edi
dec esp
dec ecx
inc ebx
inc ebp
dec esi
push ebx
inc ebp
pop edi
dec ecx
dec esi
pop edi
push ebp
push ebx
inc ebp
add byte [ebp + 0x52], al
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
push ebx
dec eax
inc ecx
inc esp
dec edi
push edi
pop edi
inc esp
dec ecx
push ebx
inc ecx
inc edx
dec esp
inc ebp
inc esp
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebp + 0x52], al
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
push ebx
dec eax
inc ecx
inc esp
dec edi
push edi
pop edi
dec ecx
dec esi
push esi
inc ecx
dec esp
dec ecx
inc esp
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
inc ebp
push edx
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
dec ecx
dec esi
push esi
inc ecx
dec esp
dec ecx
inc esp
pop edi
push edi
inc esp
add byte [eax], al
add byte [eax], al
inc ebp
push edx
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
push edi
dec ecx
dec esi
push ebx
push esp
inc ecx
push esp
dec ecx
dec edi
dec esi
pop edi
inc ecx
inc ebx
inc ebx
inc ebp
push ebx
push ebx
pop edi
inc esp
inc ebp
dec esi
dec ecx
inc ebp
inc esp
add byte [eax], al
add byte [eax], al
add byte [eax], al
inc ebp
push edx
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
push ebx
dec eax
inc ecx
inc esp
dec edi
push edi
pop edi
inc esp
inc ebp
dec esi
dec ecx
inc ebp
inc esp
add byte [ebp + 0x52], al
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
inc ebx
dec edi
dec esi
push ebx
dec edi
dec esp
inc ebp
pop edi
inc ebx
dec edi
dec esi
dec esi
inc ebp
inc ebx
push esp
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebp + 0x52], al
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
inc ebx
dec edi
dec esi
push ebx
dec edi
dec esp
inc ebp
pop edi
inc esp
dec ecx
push ebx
inc ebx
dec edi
dec esi
dec esi
inc ebp
inc ebx
push esp
add byte [eax], al
add byte [eax], al
inc ebp
push edx
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
inc ebx
dec esp
dec ecx
inc ebp
dec esi
push esp
pop edi
push ecx
push ebp
inc ebp
push edx
pop ecx
pop edi
push esp
dec ecx
dec ebp
inc ebp
dec edi
push ebp
push esp
add byte [eax], al
inc ebp
push edx
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
dec esi
dec edi
push esp
pop edi
inc ebx
dec edi
dec esi
push ebx
dec edi
dec esp
inc ebp
add byte [eax], al
add byte [ebp + 0x52], al
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
dec esp
dec edi
inc edi
dec edi
dec esi
pop edi
inc esp
dec ecx
push ebx
inc ecx
inc edx
dec esp
inc ebp
inc esp
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
inc ebp
push edx
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
inc edi
push edx
inc ecx
push eax
dec eax
dec ecx
inc ebx
push ebx
pop edi
dec ecx
dec esi
push esi
inc ecx
dec esp
dec ecx
inc esp
add byte [eax], al
add byte [eax], al
add byte [eax], al
inc ebp
push edx
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
inc edx
inc ecx
inc esp
pop edi
push esi
dec ecx
inc esp
inc ebp
dec edi
pop edi
dec ebp
dec edi
inc esp
inc ebp
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
inc ebp
push edx
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
push edi
dec ecx
dec esi
push ebx
push esp
inc ecx
push esp
dec ecx
dec edi
dec esi
pop edi
inc edx
push ebp
push ebx
pop ecx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebp + 0x52], al
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
push edi
dec ecx
dec esi
push ebx
push esp
inc ecx
push esp
dec ecx
dec edi
dec esi
pop edi
inc ecx
dec esp
push edx
inc ebp
inc ecx
inc esp
pop ecx
pop edi
inc ebp
pop eax
dec ecx
push ebx
push esp
push ebx
add byte [eax], al
add byte [eax], al
add byte [ebp + 0x52], al
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
push edi
dec ecx
dec esi
push ebx
push esp
inc ecx
push esp
dec ecx
dec edi
dec esi
pop edi
dec esi
dec edi
push esp
pop edi
inc esi
dec edi
push ebp
dec esi
inc esp
add byte [eax], al
inc ebp
push edx
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
push esp
inc esp
pop edi
inc ebp
push edx
push edx
dec edi
push edx
add byte [eax], al
add byte [eax], al
add byte [eax], al
inc ebp
push edx
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
dec ebp
dec edi
inc esp
inc ebp
dec ebp
pop edi
push edx
inc ebp
push ebx
push eax
dec edi
dec esi
push ebx
inc ebp
pop edi
push esi
dec edi
dec ecx
inc ebx
inc ebp
add byte [eax], al
inc ebp
push edx
push edx
dec edi
push edx
pop edi
inc ebx
push esp
pop eax
pop edi
dec ebp
dec edi
inc esp
inc ebp
dec ebp
pop edi
push edx
inc ebp
push ebx
push eax
dec edi
dec esi
push ebx
inc ebp
pop edi
inc edx
push ebp
push ebx
pop ecx
add byte [eax], al
add byte [ebp + 0x52], al
push edx
dec edi
push edx
pop edi
inc ebx
push esp
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0xa4], ecx
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0x94], edx
cmp dword [ebp - 0x94], 0
je 0x406b27
push 1
mov ecx, dword [ebp - 0x94]
call fcn.00411f30
mov dword [ebp - 0xa8], eax
jmp 0x406b31
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0x80], 0
call fcn.00401270
movzx eax, byte [0x614d4c]
test eax, eax
je 0x4070fe
add byte gs:[0x2c00000b], ch
insb byte es:[edi], dx
add byte [ecx], ah
bound eax, qword [eax]
add byte gs:[eax + eax + 0x44], ch
add byte [edi], ch
insd dword es:[edi], dx
add byte [ecx], ah
imul eax, dword [eax], 0x49006e
inc esp
add byte [esi], ch
add byte [eax + eax + 0x6f], cl
add byte [ebx], ah
popal
add byte [eax + eax + 0x69], dh
add byte [edi], ch
outsb dx, byte [esi]
add byte [edi], ch
or eax, dword [eax]
add byte [esp + ebp*2], ah
add byte [ecx], ah
bound eax, qword [eax]
add byte gs:[eax + eax + 0x44], ch
add byte [edi], ch
insd dword es:[edi], dx
add byte [ecx], ah
imul eax, dword [eax], 0x49006e
inc esp
add byte [esi], ch
add byte [ebx], dl
imul eax, dword [eax], 0x65007a
retf
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x7c], 0
movzx ecx, byte [0x614d4c]
test ecx, ecx
je 0x407c01
je 0x407120
add byte ds:[0x3c006400], ah
add byte [edi], ch
add byte [esi], al
outsd dx, dword [esi]
add byte [edx], dh
insd dword es:[edi], dx
add byte [ecx], ah
je 0x407136
add byte ds:[0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
das
add byte [ebx], al
outsd dx, dword [esi]
add byte [eax + eax + 0x75], ch
add byte [ebp], ch
outsb dx, byte [esi]
add byte [esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc ebx
add byte [edi], ch
insb byte es:[edi], dx
add byte [ebp], dh
insd dword es:[edi], dx
add byte [esi], ch
add byte ds:[0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
dec esi
add byte [ecx], ah
insd dword es:[edi], dx
add byte [ebp], ah
add byte ds:[eax], dl
popal
add byte [edx], dh
add byte gs:[esi], ch
je 0x40719a
and byte [eax], al
inc ebp
add byte [ecx], cl
inc esp
add byte [eax + eax], bh
das
add byte [esi], cl
popal
add byte [ebp], ch
add byte gs:[esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc ebx
add byte [edi], ch
insb byte es:[edi], dx
add byte [ebp], dh
insd dword es:[edi], dx
add byte [esi], ch
dec ecx
add byte [eax + eax + 0x3e], al
add byte [eax + eax], dh
cmp al, 0
das
add byte [ebx], al
outsd dx, dword [esi]
add byte [eax + eax + 0x75], ch
add byte [ebp], ch
outsb dx, byte [esi]
add byte [ecx], cl
inc esp
add byte [esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc esi
add byte [eax + eax + 0x61], ch
add byte [edi], ah
jae 0x407208
add byte ds:[eax], dh
add byte [eax + eax], bh
das
add byte [esi], al
insb byte es:[edi], dx
add byte [ecx], ah
add byte [bp + di], dh
add byte ds:[0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
push esp
add byte [ecx], bh
jo 0x407234
add byte gs:[esi], bh
add byte [ebx], dh
add byte [eax + eax], bh
das
add byte [eax + eax + 0x79], dl
add byte [eax], dh
add byte gs:[esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc esi
add byte [edi], ch
jb 0x407260
insd dword es:[edi], dx
add byte [ecx], ah
je 0x407266
add byte ds:[0x3c006400], ah
add byte [edi], ch
add byte [esi], al
outsd dx, dword [esi]
add byte [edx], dh
insd dword es:[edi], dx
add byte [ecx], ah
je 0x40727c
add byte ds:[0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
das
add byte [ebx], al
outsd dx, dword [esi]
add byte [eax + eax + 0x75], ch
add byte [ebp], ch
outsb dx, byte [esi]
add byte [esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc ebx
add byte [edi], ch
insb byte es:[edi], dx
add byte [ebp], dh
insd dword es:[edi], dx
add byte [esi], ch
add byte ds:[0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
dec esi
add byte [ecx], ah
insd dword es:[edi], dx
add byte [ebp], ah
add byte ds:[ebx], al
push 0x6c006900
add byte [eax + eax + 0x72], ah
add byte [ebp], ah
outsb dx, byte [esi]
add byte [eax + eax], bh
das
add byte [esi], cl
popal
add byte [ebp], ch
add byte gs:[esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc ebx
add byte [edi], ch
insb byte es:[edi], dx
add byte [ebp], dh
insd dword es:[edi], dx
add byte [esi], ch
dec ecx
add byte [eax + eax + 0x3e], al
add byte [ecx], dh
add byte [ecx], dh
add byte [eax + eax], bh
das
add byte [ebx], al
outsd dx, dword [esi]
add byte [eax + eax + 0x75], ch
add byte [ebp], ch
outsb dx, byte [esi]
add byte [ecx], cl
inc esp
add byte [esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc esi
add byte [eax + eax + 0x61], ch
add byte [edi], ah
jae 0x40734c
add byte ds:[eax], dh
add byte [eax + eax], bh
das
add byte [esi], al
insb byte es:[edi], dx
add byte [ecx], ah
add byte [bp + di], dh
add byte ds:[0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
push esp
add byte [ecx], bh
jo 0x407378
add byte gs:[esi], bh
add byte [esi], dh
add byte [eax + eax], bh
das
add byte [eax + eax + 0x79], dl
add byte [eax], dh
add byte gs:[esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc esi
add byte [edi], ch
jb 0x4073a4
insd dword es:[edi], dx
add byte [ecx], ah
je 0x4073aa
add byte ds:[0x3c006400], ah
add byte [edi], ch
add byte [esi], al
outsd dx, dword [esi]
add byte [edx], dh
insd dword es:[edi], dx
add byte [ecx], ah
je 0x4073c0
add byte ds:[0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
das
add byte [ebx], al
outsd dx, dword [esi]
add byte [eax + eax + 0x75], ch
add byte [ebp], ch
outsb dx, byte [esi]
add byte [esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc ebx
add byte [edi], ch
insb byte es:[edi], dx
add byte [ebp], dh
insd dword es:[edi], dx
add byte [esi], ch
add byte ds:[0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
dec esi
add byte [ecx], ah
insd dword es:[edi], dx
add byte [ebp], ah
add byte ds:[eax], dl
popal
add byte [edx], dh
add byte gs:[esi], ch
je 0x407424
cmp al, 0
das
add byte [esi], cl
popal
add byte [ebp], ch
add byte gs:[esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc ebx
add byte [edi], ch
insb byte es:[edi], dx
add byte [ebp], dh
insd dword es:[edi], dx
add byte [esi], ch
dec ecx
add byte [eax + eax + 0x3e], al
add byte [ecx], dh
add byte [eax], dh
add byte [eax + eax], bh
das
add byte [ebx], al
outsd dx, dword [esi]
add byte [eax + eax + 0x75], ch
add byte [ebp], ch
outsb dx, byte [esi]
add byte [ecx], cl
inc esp
add byte [esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc esi
add byte [eax + eax + 0x61], ch
add byte [edi], ah
jae 0x40748c
add byte ds:[eax], dh
add byte [eax + eax], bh
das
add byte [esi], al
insb byte es:[edi], dx
add byte [ecx], ah
add byte [bp + di], dh
add byte ds:[0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
push esp
add byte [ecx], bh
jo 0x4074b8
add byte gs:[esi], bh
add byte [edx], dh
add byte [eax + eax], bh
das
add byte [eax + eax + 0x79], dl
add byte [eax], dh
add byte gs:[esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc esi
add byte [edi], ch
jb 0x4074e4
insd dword es:[edi], dx
add byte [ecx], ah
je 0x4074ea
add byte ds:[0x3c006400], ah
add byte [edi], ch
add byte [esi], al
outsd dx, dword [esi]
add byte [edx], dh
insd dword es:[edi], dx
add byte [ecx], ah
je 0x407500
add byte ds:[0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
das
add byte [ebx], al
outsd dx, dword [esi]
add byte [eax + eax + 0x75], ch
add byte [ebp], ch
outsb dx, byte [esi]
add byte [esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc ebx
add byte [edi], ch
insb byte es:[edi], dx
add byte [ebp], dh
insd dword es:[edi], dx
add byte [esi], ch
add byte ds:[0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
dec esi
add byte [ecx], ah
insd dword es:[edi], dx
add byte [ebp], ah
add byte ds:[esi], al
insb byte es:[edi], dx
add byte [ecx], ah
add byte [bp + di], dh
cmp al, 0
das
add byte [esi], cl
popal
add byte [ebp], ch
add byte gs:[esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc ebx
add byte [edi], ch
insb byte es:[edi], dx
add byte [ebp], dh
insd dword es:[edi], dx
add byte [esi], ch
dec ecx
add byte [eax + eax + 0x3e], al
add byte [0x2f003c00], dh
add byte [ebx], al
outsd dx, dword [esi]
add byte [eax + eax + 0x75], ch
add byte [ebp], ch
outsb dx, byte [esi]
add byte [ecx], cl
inc esp
add byte [esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc esi
add byte [eax + eax + 0x61], ch
add byte [edi], ah
jae 0x4075c8
add byte ds:[eax], dh
add byte [eax + eax], bh
das
add byte [esi], al
insb byte es:[edi], dx
add byte [ecx], ah
add byte [bp + di], dh
add byte ds:[0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
push esp
add byte [ecx], bh
jo 0x4075f4
add byte gs:[esi], bh
add byte [edx], dh
add byte [eax + eax], bh
das
add byte [eax + eax + 0x79], dl
add byte [eax], dh
add byte gs:[esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc esi
add byte [edi], ch
jb 0x407620
insd dword es:[edi], dx
add byte [ecx], ah
je 0x407626
add byte ds:[eax], dh
add byte [eax], bh
and eax, 0x38003000
add byte [eax], bl
cmp al, 0
das
add byte [esi], al
outsd dx, dword [esi]
add byte [edx], dh
insd dword es:[edi], dx
add byte [ecx], ah
je 0x407644
add byte ds:[0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
das
add byte [ebx], al
outsd dx, dword [esi]
add byte [eax + eax + 0x75], ch
add byte [ebp], ch
outsb dx, byte [esi]
add byte [esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc ebx
add byte [edi], ch
insb byte es:[edi], dx
add byte [ebp], dh
insd dword es:[edi], dx
add byte [esi], ch
add byte ds:[0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
dec esi
add byte [ecx], ah
insd dword es:[edi], dx
add byte [ebp], ah
add byte ds:[ebp], al
jbe 0x4076a0
add byte gs:[esi], ch
je 0x4076a6
cmp al, 0
das
add byte [esi], cl
popal
add byte [ebp], ch
add byte gs:[esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc ebx
add byte [edi], ch
insb byte es:[edi], dx
add byte [ebp], dh
insd dword es:[edi], dx
add byte [esi], ch
dec ecx
add byte [eax + eax + 0x3e], al
add byte [esi], dh
add byte [eax + eax], bh
das
add byte [ebx], al
outsd dx, dword [esi]
add byte [eax + eax + 0x75], ch
add byte [ebp], ch
outsb dx, byte [esi]
add byte [ecx], cl
inc esp
add byte [esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc esi
add byte [eax + eax + 0x61], ch
add byte [edi], ah
jae 0x40770c
add byte ds:[eax], dh
add byte [eax + eax], bh
das
add byte [esi], al
insb byte es:[edi], dx
add byte [ecx], ah
add byte [bp + di], dh
add byte ds:[0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
push esp
add byte [ecx], bh
jo 0x407738
add byte gs:[esi], bh
add byte [eax + eax], dh
cmp al, 0
das
add byte [eax + eax + 0x79], dl
add byte [eax], dh
add byte gs:[esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc esi
add byte [edi], ch
jb 0x407764
insd dword es:[edi], dx
add byte [ecx], ah
je 0x40776a
add byte ds:[0x3c007300], ah
add byte [edi], ch
add byte [esi], al
outsd dx, dword [esi]
add byte [edx], dh
insd dword es:[edi], dx
add byte [ecx], ah
je 0x407780
add byte ds:[0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
das
add byte [ebx], al
outsd dx, dword [esi]
add byte [eax + eax + 0x75], ch
add byte [ebp], ch
outsb dx, byte [esi]
add byte [esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc ebx
add byte [edi], ch
insb byte es:[edi], dx
add byte [ebp], dh
insd dword es:[edi], dx
add byte [esi], ch
add byte ds:[0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
dec esi
add byte [ecx], ah
insd dword es:[edi], dx
add byte [ebp], ah
add byte ds:[ebx], dl
je 0x4077dc
popal
add byte [edx], dh
je 0x4077e2
push esp
add byte [ecx], ch
insd dword es:[edi], dx
add byte [ebp], ah
cmp al, 0
das
add byte [esi], cl
popal
add byte [ebp], ch
add byte gs:[esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc ebx
add byte [edi], ch
insb byte es:[edi], dx
add byte [ebp], dh
insd dword es:[edi], dx
add byte [esi], ch
dec ecx
add byte [eax + eax + 0x3e], al
add byte [edi], dh
add byte [eax + eax], bh
das
add byte [ebx], al
outsd dx, dword [esi]
add byte [eax + eax + 0x75], ch
add byte [ebp], ch
outsb dx, byte [esi]
add byte [ecx], cl
inc esp
add byte [esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc esi
add byte [eax + eax + 0x61], ch
add byte [edi], ah
jae 0x407850
add byte ds:[eax], dh
add byte [eax + eax], bh
das
add byte [esi], al
insb byte es:[edi], dx
add byte [ecx], ah
add byte [bp + di], dh
add byte ds:[0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
push esp
add byte [ecx], bh
jo 0x40787c
add byte gs:[esi], bh
add byte [0x2f003c00], dh
add byte [eax + eax + 0x79], dl
add byte [eax], dh
add byte gs:[esi], bh
add byte [0x20000a00], cl
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax], ah
add byte [eax + eax], bh
inc esi
add byte [edi], ch
jb 0x4078a8
insd dword es:[edi], dx
add byte [ecx], ah
je 0x4078ae
add byte ds:[0x36004900], ah
push edi
mov dword [0x10012d5c], eax
call esi
pop esp
sub eax, 0xd6ff1001
push eax
call fcn.004037a3
pop ecx
mov dword [0x10012d64], eax
test eax, eax
invalid
call [ecx - 0x5d]
sub eax, 0xc0851001
je 0x40a96c
push 0x1000e158
push edi
call esi
push eax
call fcn.004037a3
pop ecx
mov dword [0x10012d60], eax
mov eax, dword [0x10012d60]
cmp eax, ebx
je 0x40a9c4
cmp dword [0x10012d64], ebx
je 0x40a9c4
push eax
call fcn.0040381e
push dword [0x10012d64]
mov esi, eax
call fcn.0040381e
pop ecx
pop ecx
mov edi, eax
test esi, esi
je 0x40a9c4
test edi, edi
je 0x40a9c4
call esi
test eax, eax
je 0x40a9bb
lea ecx, [ebp - 8]
push ecx
push 0xc
lea ecx, [ebp - 0x14]
push ecx
push 1
push eax
call edi
test eax, eax
je 0x40a9bb
test byte [ebp - 0xc], 1
jne 0x40a9c4
or dword [ebp + 0x10], 0x200000
jmp 0x40a9fd
mov eax, dword [0x10012d58]
cmp eax, ebx
je 0x40a9fd
push eax
call fcn.0040381e
pop ecx
test eax, eax
je 0x40a9fd
call eax
mov dword [ebp - 4], eax
test eax, eax
je 0x40a9fd
mov eax, dword [0x10012d5c]
cmp eax, ebx
je 0x40a9fd
push eax
call fcn.0040381e
pop ecx
test eax, eax
je 0x40a9fd
push dword [ebp - 4]
call eax
mov dword [ebp - 4], eax
push dword [0x10012d54]
call fcn.0040381e
pop ecx
test eax, eax
je 0x40aa1d
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [ebp - 4]
call eax
jmp 0x40aa1f
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret