Function at 0x4943de
Capabilities:
Authenticate hmac
Encrypt data using speck
Inspect section memory permissions
Query environment variable

Disassembly:
ja 0x4a3e59
shr bl, 0x40
jbe 0x48c6b9
inc edx
dec ecx
jbe 0x4a3e59
xor al, 0x6a
sbb dword [ebp + 0x4a], edi
add byte [eax], al
inc ecx
add byte [eax + 0x60], al
add byte [ecx], al
add byte [eax], al
add al, 0
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], ah
add byte [eax], al
sub al, 0x2a
dec edx
add byte [edi + edi*2], dh
dec edx
add dl, ah
loopne 0x48c735
dec ecx
add byte [eax], ch
add byte [eax], al
movsb byte es:[edi], byte [esi]
fisttp word [eax]
and byte [eax], al
add byte [eax], al
push ecx
add byte [eax], al
add byte [eax + 0x590048de], bh
add byte [eax], al
add byte [ecx], bl
add byte [eax], al
loop 0x48c6eb
dec ecx
add byte [eax + eax], ah
add byte [eax - 0x6bffb54e], bh
invalid
test ecx, edi
jae 0x48c73c
mov ch, 0x7a
out dx, al
jae 0x4bbec4
xor al, 0xbf
xchg dh, bl
xchg bl, dh
mov eax, dword [esi + 4]
jne 0x4a81ea
mov edx, 0x34340001
push word [ebp + eax]
lea esi, [esi + 8]
mov dword [ebp + 0x60], esp
js 0x499217
shr di, 0x40
jns 0x48c779
jb 0x48c75b
jns 0x499217
fstp dword [edx - 0x18]
push 0x1f
add byte [eax], al
mov ax, 0xc
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
or al, 0x80
mov byte [eax], 0x66
and ecx, ecx
and byte [ebp + ebx], al
jb 0x4b0634
jmp dword [esi]
jb 0x48c91b
push esi
pop esi
mov eax, dword [esi + 4]
mov eax, dword [ebp + eax]
mov ebx, dword [esi + 8]
mov eax, dword [eax]
lea esi, [esi + 0xc]
cmp ch, ch
jno 0x4aad15
jo 0x48c8e5
mov ecx, 0x800fa93e
sub ah, ah
add dword [eax], eax
jo 0x4aad15
jne 0x4a37ef
je 0x48c8f6
xlatb
jnp 0x48c880
je 0x4a37ef
and eax, 0x24448f9f
cld
ret
sbb al, byte [ecx + ecx*4]
pop eax
jns 0x48fc0d
invalid
rcl ah, 1
call fcn.004af593
fstp dword [ecx + 0x424648d]
mov esp, ebp
pop ebp
ret
mov ch, ch
mov byte [esi + 0xba], bl
push esi
shr ebx, 0x40
xchg di, si
xchg esi, ebp
xchg ebp, esi
mov bl, bl
xchg si, di
mov byte [esi + 0xbb], cl
xchg bx, dx
xchg dx, bx
xchg cx, di
shr ecx, 0x40
xchg di, cx
jno 0x49bd9b
jo 0x48d43c
nop
cpuid
ret
jo 0x49bd9b
fmul dword [ecx + ebx + 0x4a7d]
inc ecx
add byte [eax + 0x60], al
add byte [ecx], al
add byte [eax], al
add al, 0
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], ah
add byte [eax], al
sub al, 0x2a
dec edx
add byte [edi + edi*2], dh
dec edx
add byte [ebp - 0x1affb5f2], dh
fisttp qword [edi]
add byte [eax], ch
add byte [eax], al
sub byte [esi], cl
dec edx
add byte [edi + 0x19004920], ch
jge 0x48d4cd
add byte [eax], al
inc ecx
add byte [eax], al
push 0
add dword [eax], eax
add byte [eax], al
popal
add byte [eax + 0x58], al
add byte [ecx], ah
add byte [eax], al
cmp al, byte [eax]
add byte [eax], al
sub al, 0x2a
dec edx
add byte [esi], bh
xor eax, 0x4ff70049
dec edx
add byte [edx + 0x3c840fe9], al
add byte [eax], al
add byte [ebp + 2], dh
je 0x48d4f0
jne 0x48d4b8
mov byte [ebp + 0x66d4458b], bh
xchg ebx, ecx
mov eax, dword [ebp - 0x2c]
xchg bx, cx
xchg cx, bx
jmp 0x48d4c2
push eax
call fcn.004bfcd0
add esp, 4
add byte [eax], al
push esi
call fcn.00490663
cmc
add esp, 4
pop edi
pop esi
xchg dx, di
xchg di, dx
pop ebx
mov esp, ebp
mov bx, bx
pop ebp
mov edx, edx
ret
push 3
jmp 0x48d4f3
push esi
call fcn.004b6571
add esp, 8
pop edi
pop esi
xchg si, ax
xchg si, ax
pop ebx
mov esp, ebp
pop ebp
ret
xor edx, edx
jb 0x49007e
mov eax, dword [ebp - 4]
mov eax, dword [eax*4 + 0x51edac]
cmp word [eax], 0xffff
je 0x49a9ec
mov ecx, ecx
jne 0x48d530
ficomp word [ebx]
mov ecx, eax
test bp, 0x35b6
cmp word [ecx], di
je 0x48d56c
jne 0x48d545
test eax, 0xc5f79e31
inc esi
js 0x48d58c
test ebp, 0xce427846
into
add ecx, 8
inc edx
cmp word [ecx], 0xffff
push edi
pop edi
jne 0x48d532
je 0x48d565
js 0x48d597
mov cs, word [0xd482e9]
add byte [edx + 0x73], ah
jmp 0x49a9ec
push esi
pop esi
mov eax, dword [eax + edx*8 + 4]
mov dh, dh
mov dword [ebp - 0xc], eax
js 0x49a9ec
jns 0x48d582
add dh, byte [esi]
inc ebx
jns 0x49a9ec
ficomp dword [edx]
and al, 4
or byte es:[esi], bl
shr bx, 0x40
shl bx, 0x20
mov eax, dword [esi + 4]
mov ax, ax
mov ebx, dword [esi + 8]
shr dl, 0x40
mov ebx, dword [ebp + ebx]
lea esi, [esi + 0xc]
shl ah, 0x20
mov word [ebx], ax
jmp dword [esi]
cmp al, 0x39
jg 0x48dcce
jle 0x48dca4
invalid
cmp di, 0xfff
shr si, 0x40
ja 0x4a659d
jbe 0x48dcb7
in eax, 0x77
sub di, 3
movsx ax, al
shl di, 4
add di, ax
jmp fcn.0049f8ba
cmp al, 0x41
mov ah, ah
jmp fcn.0049f885
mov ebx, dword [esi + 8]
mov ax, word [ebp + eax]
mov ebx, dword [ebp + ebx]
lea esi, [esi + 0xc]
and word [ebx], ax
jb 0x4b05fe
jmp dword [esi]
xor al, 0x26
mov dword [ebp + ebx], eax
mov dl, dl
jmp dword [esi]
lea eax, [ebx + 0x2d]
add ecx, 0
cmp eax, edi
call fcn.004b8adc
fdiv dword [eax + 0x6a]
mov eax, dword es:[esi]
jmp 0x48ed8b
push eax
jno 0x49c64d
jo 0x48ed98
test al, 0xf9
fisttp word [edi]
sub byte [edi + 0x340000d8], 0xee
jo 0x49c64d
xor al, 0xee
mov byte [esi + 0xbb], cl
jne 0x4a4df0
mov ch, ch
je 0x48edb3
xor eax, 0x840ffaa8
aaa
pushal
add dword [eax], eax
je 0x4a4df0
and eax, 0xffdf0110
imul eax
mov dh, dl
add dword [eax], eax
cmc
add esp, 4
add edi, eax
xchg cx, di
xchg di, cx
mov al, byte [edi]
test al, al
jb 0x4a1ce2
je 0x49a5dd
jne 0x48ede9
xor ebp, dword [ebp + 0x7e]
in eax, 0xeb
jmp 0x48edea
push eax
call fcn.004bcc3e
add esp, 4
stc
test eax, eax
jb 0x4a1d06
shl bx, 0x20
push 0x4b9c30
ret
lea esi, [esi + 0xc]
sbb word [ebp + ebx], ax
jmp dword [esi]
test di, di
jb 0x48d0db
jne 0x4a6572
je 0x48f6d6
pop esi
cmpsd dword [esi], dword es:[edi]
add eax, 0
add eax, 0
xor eax, eax
jb 0x48d0e2
pop edi
ja 0x4a6569
mov cl, cl
jbe 0x48f6f2
cpuid
nop
ret
jbe 0x4a6569
fidivr dword [ebp - 0x77]
mul byte [esi - 0x48]
or al, byte [eax]
pop edi
pop esi
pop ebx
mov esp, ebp
mov edx, edx
shr ax, 0x40
pop ebp
ret
test byte [ebp - 4], 0x10
jb 0x496921
je 0x4b04b6
shr ebx, 0x40
mov esi, esi
jne 0x48fc26
adc dword [ecx], eax
mov eax, 1
shr bp, 0x40
pop edi
shl dx, 0x20
pop esi
jmp 0x4a677d
shl edx, 1
shr si, 0x40
xchg cl, bl
xchg bl, cl
mov eax, dword [esi + 4]
jmp 0x48e9ae
xor eax, eax
jb 0x4a5063
pop ebp
mov dh, dh
ret
ja 0x4b02d2
jbe 0x4909f6
jp 0x490a1a
shr cl, 1
or dword [eax], eax
add byte [eax], al
cmp eax, dword [ebp + 0x3004c6]
jmp 0x490a04
mov byte [eax + esi], 0
shl al, 0x20
cmp edi, eax
ja 0x490a19
jbe 0x490a10
stosd dword es:[edi], eax
mov byte [ebp + 0x3744c61b], cl
inc dword [eax]
lea ebx, [ebx]
mov byte [edi + esi - 1], 0
push esi
pop esi
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
jmp 0x490a20
inc ebp
adc byte [ebx - 0x14f7b3], cl
invalid
push eax
push ecx
mov eax, dword [ebp - 0xc]
add eax, esi
push eax
call fcn.004baef5
add esp, 0xc
test eax, eax
jb 0x499219
je 0x49da77
jne 0x490a47
inc ebx
sal dword [eax - 0x75], cl
dec ebp
clc
mov ecx, dword [ebp - 8]
jmp 0x490a4b
push ecx
call fcn.0048e6f0
test edx, ecx
jae 0x490a5a
cpuid
ret
jae 0x4b9a3d
fpatan
cmp al, 0x3a
je 0x4ad4c0
jne 0x490ab8
nop
cpuid
ret 0x303c
cmp al, 0x30
jb 0x4ad4f5
shl dh, 0x20
jae 0x490ac9
cpuid
nop
ret
cmp al, 0x61
js 0x4953bd
jns 0x490ad7
push es
stosb byte es:[edi], al
mov dl, 0x38
jns 0x4953bd
and edx, 7
jb 0x4a1661
sub dh, 0
add eax, edx
shl cl, 0x20
sar eax, 3
test eax, eax
jb 0x4a166a
jle 0x4952f3
jg 0x492031
mov al, 0x9f
shr edx, 0x40
lea edi, [esi + 0x16]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0xc]
shr cx, 0x40
mov dword [ebp - 4], 8
mov cl, byte [ecx + edx + 0x10]
mov byte [edi], 0
mov dl, cl
shr cl, 1
and dl, 1
jb 0x4a1673
xor ebx, ebx
jb 0x4a167a
add edi, 0xc
push 0x4bb12e
ret
sbb al, 0x9d
mov ch, ch
xchg ch, bh
xchg bh, ch
jne 0x49233b
add byte [ebx + eax + 0x73], dh
sti
je 0x492334
jae 0x49232e
pop edi
lea esi, [esi + 8]
jmp dword [esi]
in al, dx
pop ss
mov esi, dword [esi + 4]
mov esi, dword [esi]
push 0x4a7547
ret
adc byte [eax - 0x73], 0x64
and al, 4
mov dx, word [ebp + 0x10]
push eax
mov word [esi + 0xbc], dx
shr bh, 0x40
push esi
mov bl, bl
mov byte [esi + 0xbb], 0
xchg bp, ax
xchg bp, ax
js 0x4a9d2d
jns 0x492376
nop
cpuid
ret
jns 0x4a9d2d
invalid
invalid
test al, 0x4a
test ecx, 0x100
jb 0x48ed84
jne 0x4bafbd
je 0x49428b
nop
cpuid
ret
je 0x4bafbd
and byte [eax - 0x73], 0x64
and al, 4
jne 0x4b01bb
je 0x4942a2
das
invalid
je 0x4b01bb
and eax, 0x7e92a
add byte [eax], al
jp 0x4942b5
jmp 0x4942b6
mov byte [edx + esi], 0xa
inc edx
inc eax
cmp edi, eax
ja 0x4a89e5
jbe 0x4942c3
int 0x11
sub edi, ebx
mov ebx, 0
je 0x4b028a
jne 0x4942d4
sti
jbe 0x4942e4
movsx ecx, byte [0x51ee46]
xor eax, eax
jb 0x48c777
mov esi, 0x51ee460d
add byte [ecx], dh
ror byte [edi], 0x82
xchg esp, eax
test bh, bh
dec dword [eax + 0x33048aed]
mov ch, ch
in eax, dx
mov al, byte [ebx + esi]
cmp eax, ecx
jne 0x4b2933
je 0x4942f6
nop
cpuid
ret
js 0x48ec5e
jns 0x494301
pop edi
jp 0x49434f
jns 0x48ec5e
fsubr st(3)
sbb dword [ebp + 0x4a], edi
add byte [eax], al
popal
add byte [eax + 0x68], al
add byte [ecx], ah
add byte [eax], al
mov edx, 0
adc al, byte [eax]
add byte [eax], al
inc edx
add byte [eax], al
push eax
add byte [eax], al
add byte [esi], ah
sub cl, byte [edx]
packuswb mm1, qword [ebx]
add byte [eax], al
add byte [eax], al
pop esp
add byte [eax], al
add byte [edi + 0x40004aff], cl
add byte [eax], al
add byte [eax + eax], bl
add byte [esi], cl
or dword [ecx], 0x4f
inc ebx
dec ecx
add dl, bl
mov cs, word [esi]
push cs
or dword [ecx], 0xffffffba
cmpsb byte [esi], byte es:[edi]
dec ebx
add byte [0x558b663f], ah
adc byte [ecx + 0xea], al
add byte [ecx + 0x4c4], al
add byte [esi - 0x77], ah
ror byte [edi], 0x81
sar byte [edx + 2], cl
add byte [eax + 2], dh
and al, 0x43
jo 0x4bbe44
and eax, 0xfff0fff3
adc eax, sym.imp.KERNEL32.dll_GetLocalTime
mov eax, dword [ebp - 4]
and eax, 0xffff
jb 0x492321
jmp 0x494395
push eax
xor eax, eax
jb 0x492331
mov ax, word [ebp - 6]
push eax
mov eax, dword [ebp - 8]
and eax, 0xffff
jb 0x492339
mov di, di
jmp 0x4943b7
push eax
mov eax, dword [ebp - 0x10]
and eax, 0xffff
jb 0x492346
jmp 0x4943c8
push eax
ja 0x4958a0
jbe 0x4943d6
dec ecx
cpuid
ret
jbe 0x4958a0
xor byte [edi - 0x71], 0x44
and al, 0xfc
lea edi, [edi]
mov eax, dword [ebp - 4]
cmp word [eax + eax + 0x51eda4], 0xffff
jne 0x48d50d
je 0x4943fc
mov bl, 0xff
test dword [ecx + 0xf87d], eax
add byte [eax], al
cmp dword [ebp - 8], 0
jne 0x48d4f0
mov bp, bp
je 0x494411
cli
lea ebx, [esi - 0x15]
jmp 0x494412
push esi
call fcn.004aca31
add ebx, 0
add esp, 4
test al, al
jb 0x49c7c8
jne 0x48d4f0
je 0x494437
mov ah, 0x7c
push esi
mov eax, eax
call fcn.00492553
add esp, 4
test al, 2
jb 0x49c7d1
jno 0x48d4ae
jo 0x494459
int 0x44
dec esi
cli
jo 0x48d4ae
push ecx
xchg esi, ebp
xchg ebp, esi
call fcn.0049ef2c
add esp, 8
lea ecx, [ebp - 0x110]
push 0
push ecx
call fcn.004b78a7
add esp, 8
lea ecx, [ebp - 0x110]
push ecx
call fcn.004b6787
mov di, ax
add esp, 4
lea ecx, [ebp - 0x110]
js 0x494ee8
lea ebx, [ebx]
jns 0x4944af
xor ch, byte [ecx - 0x76f0add6]
xor ecx, dword [edx]
add byte [eax], al
jns 0x494ee8
add eax, 0xdb896668
call fcn.00492553
ja 0x4ab475
jbe 0x4944cb
cpuid
ret
jbe 0x4ab475
fiadd dword [esi + 0x34]
mov byte [edx], cl
add al, 0xf2
add byte [eax], al
push eax
add byte [eax], al
add byte [eax], ch
push cs
dec edx
add bl, dh
pop ss
dec edx
add cl, cl
mov cl, 0x4b
add byte [eax], dl
add byte [eax], al
pop esp
add byte [eax], al
add cl, cl
mov cl, 0x4b
add byte [eax + eax], bl
add byte [eax], dl
add byte [eax], al
mov eax, 0xb004ab2
lodsb al, byte [esi]
invalid
push ecx
call fcn.0048d98b
add esp, 4
movzx ebx, ax
test di, di
jb 0x495f3e
je 0x495bfb
jne 0x494f0d
cpuid
ret
sub ebp, 0
jae 0x494f16
std
cpuid
ret
jae 0x495b9c
invalid
mov ecx, dword [ebp + 8]
push ebp
pop ebp
xor edx, edx
jb 0x4bc41c
mov al, byte [ecx + 5]
and al, 0x40
jb 0x4bc425
mov edx, edx
shr al, 6
shl bl, 0x20
mov dl, al
test edx, edx
jb 0x4bc432
je 0x498e94
shl ch, 0x20
jne 0x49532b
dec edi
mov dh, 0x81
jge 0x495326
cmp dword [ebp - 8], 0
add byte [eax], al
add byte [eax], al
shr bx, 0x40
jle 0x498e94
jg 0x495341
sub ch, al
movsd dword es:[edi], dword [esi]
jne 0x498e6d
je 0x49534c
out 0xea, al
dec edx
je 0x498e6d
or al, 0x82
daa
dec ebx
add byte [eax + eax], al
add byte [eax], al
cmp dword [edx], ecx
add dword [eax], eax
add byte [eax], al
push eax
add byte [eax], al
add byte [ecx - 0x28ffb654], ah
stc
dec edx
add byte [edx], dh
in eax, dx
dec edx
add byte [ebx + edx*2 + 0x49], bh
add byte [ebp + 0x19c3a20f], cl
jge 0x4953c9
add byte [eax], al
popal
add byte [eax + 0x54], al
add byte [ecx], ah
add byte [eax], al
mov esp, 0
adc byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
push eax
add byte [eax], al
add byte [ecx], dl
sub cl, byte [edx]
mov eax, dword [0x4d0049ac]
sub dword [ebx], ecx
xor ch, ch
dec edx
add byte [ebx + 0x3e004953], dh
inc ebp
retf 0xed32
jb 0x4953de
shl bh, 0x20
jae 0x4953cb
stosd dword es:[edi], eax
jne 0x4953ff
cmp al, 0x66
shl edi, 0x20
ja 0x4953de
jbe 0x4953dc
cpuid
nop
ret
sub al, 0x20
cmp al, 0x46
ja 0x4ad511
jbe 0x4953ec
nop
rol ebp, cl
invalid
cmp al, 0x41
jae 0x495408
jb 0x4953fa
sub al, 0x43
mov bh, 0xca
cmp al, 0x39
ja 0x4ad522
add dword [ecx], 0x90047600
jbe 0x495408
nop
cpuid
ret
mov edx, dword [ebp + 0xc]
sub al, 0x30
mov ebx, dword [edx]
mov edi, ebx
shl edi, 4
cmp al, 9
mov dword [edx], edi
shl ecx, 0x20
jbe 0x4b0e7f
ja 0x495426
mov ch, 0x72
fild qword [edi + eax]
sub al, 7
jno 0x4b0e7b
jo 0x495433
and byte [edx + edi*4 + 0xf], dh
add byte [edx - 0x46], 1
add byte [0x5126ff66], dh
jo 0x4b0e7b
xor eax, 0x5126ff66
fmul dword [edi]
mov byte [ebx + ecx*4 - 1], bh
invalid
call fcn.004bc14d
add esp, 0x10
mov ecx, dword [ebp + 8]
test ecx, ecx
jb 0x4a7549
je 0x4958c2
jne 0x4958c0
hlt
mov dword [ecx], eax
mov esp, ebp
pop ebp
ret
cmp di, 0x1b
je 0x495bc9
jne 0x495bad
sbb al, 0xcb
out 0x27, al
push edi
mov eax, dword [esi]
push eax
call fcn.004b6571
add esp, 8
pop edi
shl edi, 0x20
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test di, di
jb 0x495f45
jmp 0x495bef
jne 0x4a5477
je 0x495bfb
cpuid
ret
test ebx, ebx
jb 0x4bae5f
je 0x4a5477
jne 0x495c0f
cmp dh, al
push eax
jmp fcn.00495b9d
lea eax, [ebp - 8]
jno 0x4ab08c
jo 0x495c1d
fnstsw word [eax]
mov dl, 0xf
sub byte [ecx + 0x54], 1
add al, bl
push es
jo 0x4ab08c
fadd dword [esi]
mov cl, byte [ebp + 0x54]
mov ebx, dword [esi + 4]
lea esi, [esi + 8]
shl byte [ebp + ebx], cl
shr ecx, 0x40
jmp dword [esi]
je 0x495f58
add bh, bh
ret
jb 0x495f21
call fcn.004bae4f
and eax, 0x368d557a
mov ebp, esp
sub esp, 0x20
jmp 0x495f53
push ebx
shr ecx, 0x40
push esi
shl di, 0x20
push edi
mov esi, dword [ebp + 8]
jmp 0x495f62
push esi
mov eax, dword [esi]
test edi, 0x897812ee
add eax, 0x74
jmp 0x495f72
push eax
call fcn.0048f2e4
add esp, 8
test eax, eax
jb 0x4a0a1b
jmp fcn.0049ce5b
mov dword [0x51e834], 0xffffffff
push 0xb
jmp 0x496b33
push esi
call fcn.004b6571
add esp, 8
shr eax, 0x40
mov eax, 1
pop edi
pop esi
pop ebx
mov esi, esi
mov esp, ebp
mov ebx, ebx
pop ebp
mov dh, dh
ret
shl bx, 0x20
push esi
shl bl, 0x20
call fcn.004ad39b
add esp, 4
mov eax, dword [ebp + 0x24]
ja 0x4b4c4d
jbe 0x496b7a
fisttp qword [edi]
mov byte [0xcd860fc3], al
loopne 0x496b80
jbe 0x4b4c4d
add al, bl
dec esi
js 0x4a46f1
fmul dword [esi + 0xf]
mov byte [ecx - 0x25], ch
add byte [eax], al
jns 0x496b8e
aaa
sub al, 0x8e
pop eax
jns 0x4a46f1
fstp dword [esi + 0xbe45e8]
add byte [ecx + 0xcc4], al
add cl, bh
jb 0x496ba7
jno 0x496c18
lea ecx, [edi]
sbb al, 0x5d
add al, byte [eax]
jb 0x4bc985
fprem
shr ebx, 0x40
lea eax, [ebp - 0x238]
push 0
jmp 0x496c24
push eax
js 0x4ba52c
jns 0x496c32
outsb dx, byte fs:[esi]
int3
jns 0x4ba52c
invalid
not byte [ebp + ebx]
jmp dword [esi]
ror dword [esi + 0x55b4810f], cl
mov ch, ch
jne 0x4942b1
je 0x497393
cpuid
ret
inc ebx
jmp 0x4942aa
push ebx
pop ebx
lea esi, [esi + 8]
call fcn.0048fa65
fdivr dword [eax - 0x3dbbb71]
pop dword [esp - 4]
mov byte [esi + 0xba], bl
jmp 0x498639
push esi
mov byte [esi + 0xbb], cl
xchg dx, si
xchg si, dx
call fcn.004b9f58
xchg si, cx
xchg cx, si
shl ax, 0x20
mov dx, word [ebp + 0x10]
test di, 0x8cd0
push 0x4ba0ac
ret
add eax, 0x148f0f9b
pop esi
add dword [eax], eax
jle 0x498d4a
loope 0x498d3e
lea esi, [esi + 8]
jmp dword [esi]
mov edi, dword [ebp - 0x14]
lea ecx, [esi + 0x14]
mov eax, dword [ebp - 8]
mov bx, word [edi]
add edi, 2
mov word [ecx], bx
add ecx, 0xc
dec eax
jne 0x498e76
je 0x498e94
mov byte [esp + ecx*4 - 0x9f7b275], 0x41
add eax, 0xa3820f80
xor eax, 0x840f0002
js 0x498ea5
mov ecx, dword [ebp + 8]
test byte [ecx + 5], 0x80
jb 0x4bc444
je 0x498f1f
add byte [eax], al
jne 0x498eac
test ebp, edx
invalid
mov ecx, dword [ebp - 0x14]
or dx, dx
test edx, edx
jb 0x4bc44c
je 0x498ed6
shl bx, 0x20
jne 0x498ec9
push ebx
cld
das
shr ax, 0x40
lea ebp, [ebp]
mov edx, dword [ebp - 8]
lea ecx, [ecx + edx*2]
xor eax, eax
jb 0x498d48
add edi, 0x7e74c0b4
sub edi, 0x7e74c0b4
cmp dword [ebp - 8], eax
jle 0x498f1f
jg 0x498ef8
fdiv qword [eax]
add esp, dword [esi - 9]
ret
test bx, 0x3f54
add esi, 0x16
mov dl, byte [ecx + eax]
add esi, 0xc
inc eax
mov byte [esi - 0xc], dl
cmp dword [ebp - 8], eax
jg 0x498f03
jle 0x498f1f
nop
cpuid
ret 0x84e8
call 0x4934a8
and eax, 0x24648d5b
lea esp, [esp + 4]
mov eax, dword [ebp + 0x14]
lea ecx, [edx + edx*2]
lea edx, [ecx + ecx*4]
jmp fcn.004aafcd
xor eax, eax
jb 0x4a6ea6
mov dx, dx
pop edi
pop esi
pop ebx
mov bx, bx
mov esp, ebp
pop ebp
ret
xchg bx, cx
xchg cx, bx
mov dl, byte [ecx + esi + 1]
inc esi
test dl, dl
jb 0x4a6eb6
mov bl, bl
je 0x4a1043
jne 0x499a83
mov cl, byte [esi + 0xf3afa80]
test byte [ebp + esi*2 + 0x4750000], ah
cmp dl, 0x3a
je 0x4a1030
jne 0x499a92
movsb byte es:[edi], byte [esi]
sbb eax, 0xfa80ba00
xor byte [edi], cl
adc al, 0x75
add byte [eax], al
cmp dl, 0x30
jb 0x4a106b
jae 0x499a9f
xor al, 0x68
insb byte es:[edi], dx
push esi
dec ecx
add bl, al
fadd dword [ecx + ecx*4 + 0x4568bed]
mov ebx, dword [esi + 8]
mov eax, dword [eax + edx]
shl ebp, 0x20
lea esi, [esi + 0xc]
add dword [ebp + ebx], eax
jmp dword [esi]
push 0x49566c
ret
inc esi
push 0x4b0107
ret
mov ebx, dword [esi + 4]
mov ax, ax
lea esi, [esi + 8]
shr bl, 0x40
lea ecx, [ecx]
shr dword [ebx], cl
shl bp, 0x20
jmp dword [esi]
stc
invalid
sub byte [ecx - 0x3a773], cl
dec dword [edx - 0x7ad523bb]
nop
stc
invalid
jmp fcn.0049cb19
invalid
clc
invalid
mov ecx, dword [ebp - 8]
push ecx
push 0x4b3d93
ret
jmp 0x49e0ea
push esi
mov byte [esi + 0xbb], cl
push 0
call fcn.004b3653
shr bx, 0x40
shr dx, 0x40
shr dl, 0x40
mov dx, word [ebp + 0x10]
and ebp, ebp
add esp, 8
xchg bl, dh
xchg dh, bl
mov word [esi + 0xbc], dx
mov cl, byte [ebp + 0xc]
push eax
mov bl, bl
push edx
pop edx
ja 0x4b0cf3
jbe 0x49e130
cpuid
nop
ret
jbe 0x4b0cf3
invalid
mov dword [ebp - 0xa4], ecx
shr ecx, 0x40
mov dword [ebp - 0x94], eax
mov dword [ebp - 0xe0], 2
mov dword [ebp - 0xc8], 0x45
mov eax, dword [esi]
mov si, si
lea ecx, [ebp - 0x74]
add eax, 0x74
mov dword [ebp - 0x78], ecx
shr si, 0x40
ja 0x4bbf8a
jbe 0x49f67d
cpuid
nop
ret
jbe 0x4bbf8a
invalid
mov eax, dword [ebp + 0xc]
shl si, 0x20
mov word [eax], di
push eax
pop eax
pop edi
mov word [eax + 2], bx
shr dl, 0x40
pop esi
mov eax, 1
xchg di, bp
xchg bp, di
mov ebp, ebp
pop ebx
pop ebp
ret
setl byte [edi]
mov byte [eax], dh
imul eax, dword [ecx], 0xe2047900
push edx
and eax, 0x24890f2b
imul eax, dword [ecx], 0x86fb3400
fild word [esi + 0x645d8bfb]
lea eax, [eax]
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
mov bp, bp
lea esi, [esi + 0xc]
xor byte [ebx + edx], al
jb 0x4b48f0
jmp dword [esi]
xchg dx, bp
jmp 0x4a4161
add esi, 4
sub bh, 0
test ecx, 0x1000
jb 0x4b7071
jne 0x494271
je 0x4a0240
call 0xe60b2360
and cl, ch
jle 0x4a01db
shl ebp, 0x20
jmp fcn.004997c6
invalid
clc
cdq
stc
jb 0x4a09c7
invalid
jb 0x492008
fld dword [ecx]
lea ecx, [ebp - 0xc]
lea edx, [ebp - 0x38]
push ecx
xchg cx, ax
xchg cx, ax
mov dword [ebp - 0x20], eax
xchg ebx, eax
xchg ebx, eax
push 0
lea eax, [ebp - 0x138]
push 0x4baf88
ret
xor eax, 0xff890f7a
push edi
add byte [eax], al
js 0x4a0a29
mov eax, 0xfaba89d
and esi, 0x70000057
add ecx, dword [ebp - 0x7ff033e6]
fist dword [edi]
add bh, al
loopne 0x4a09be
jno 0x4a6215
jo 0x4a0a34
lea ebx, [edx]
int3
jo 0x4a6215
invalid
les ecx, [eax]
add byte [eax], al
add byte [ebp - 0xff7b], cl
call dword [ebx + 0x50]
call fcn.0048cfb3
call fcn.0048ebf3
xor al, 0xcd
cmp edx, 8
mov ch, ch
jno 0x48c6ac
jo 0x4a0a69
pop ds
cmp byte [edx - 0x43c27ff1], bh
invalid
jo 0x48c6ac
add byte [ebp - 0x78], 0xc9
lea ecx, [ecx]
mov byte [esi + 0xba], bl
jmp 0x4a0a7c
push esi
mov byte [esi + 0xbb], cl
mov esi, esi
call fcn.004a5dff
mov dx, word [ebp + 0x10]
add esp, 4
call fcn.004b1132
xor eax, 0x4c48198
add byte [eax], al
add byte [ebx - 0x17af07bb], cl
inc ebp
fdiv st(6), st(0)
inc dword [ecx + 0x4c4]
add byte [edi - 0x78], bl
in eax, dx
pop esi
pop ebx
mov esp, ebp
ja 0x4bca26
jbe 0x4a0ac4
nop
cpuid
ret
jbe 0x4bca26
add eax, 0xf0328b2
sub dword [edi - 0x47], 0x470ffff
cpuid
nop
ret
je 0x4a0fde
mov dl, 0xa
cmp eax, 0xfb840f4b
je 0x48efdf
invalid
test dl, dl
jb 0x4a6ed4
jne 0x4a45a7
je 0x4a1043
bnd jbe 0x4a0fd8
xor eax, eax
jb 0x497320
pop edi
shr cx, 0x40
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
jb 0x4ac8f1
lea eax, [eax]
mov ebp, ebp
pop edi
pop esi
pop ebx
mov esp, ebp
shl bx, 0x20
pop ebp
ret
sub byte [ebp + ecx*4 + 0x76], 8
push eax
pop eax
jmp dword [esi]
dec ebx
and eax, 0x8b04768b
jmp dword ss:[esi]
cmpsb byte [esi], byte es:[edi]
cmpsb byte [esi], byte es:[edi]
call 0x4b8003
and eax, 0xff4d8a08
xchg bh, dl
xchg dl, bh
call fcn.004b3972
mov word [esi + 0xbc], di
stc
xchg ebp, ecx
shr bp, 0x40
xchg ecx, ebp
jb 0x4a1989
retf 0xe75b
jb 0x4bc85c
xor eax, 0x4ab2b844
add byte [edx], al
pop ebp
mov byte [0x20004a4d], al
add byte [eax], al
add byte [eax + eax], dl
add byte [eax + 0x550048de], bh
add byte [eax], al
add byte [ebp], dl
add byte [eax], al
invalid
ja 0x49e0e9
jbe 0x4a1cc9
nop
cpuid
ret
jbe 0x49e0e9
fldenv [edi]
mov ebx, dword [esi + 8]
mov dh, dh
lea esi, [esi + 0xc]
add dword [ebp + ebx], eax
shl ch, 0x20
jmp dword [esi]
mov cl, byte [ebp + 0x54]
jmp 0x49a188
pop ebx
mov esp, ebp
push 0x4bc6c3
ret
xchg dx, cx
xchg cx, dx
inc esi
xor edi, edi
jb 0x4ac8f8
xchg ecx, edx
xchg edx, ecx
jno 0x495c25
jo 0x4a46fb
jo 0x495c25
add eax, 0x4ab2b840
mov esp, ebp
shr edi, 0x40
pop ebp
mov ah, ah
ret
shl cx, 0x20
push 4
push esi
ja 0x4bb266
jbe 0x4a494d
cpuid
fadd st(3), st(0)
jbe 0x4bb266
and eax, 0x4468b9e
mov eax, dword [ebp + eax]
mov ebx, dword [esi + 8]
shr di, 0x40
mov ax, word [eax]
shl bp, 0x20
lea esi, [esi + 0xc]
sbb word [ebp + ebx], ax
jmp dword [esi]
cmp di, 0x1b
je 0x4af4e4
jne 0x4a5488
rol esp, 1
sal dword [eax - 0x10f7a73], 1
invalid
lea eax, [ebp - 0x110]
push eax
lea ebp, [ebp]
call fcn.004aab09
add esp, 4
test ax, ax
jb 0x4bae66
je 0x4af4e4
jne 0x4a54b0
bound eax, qword [ecx + 0xfc7d]
add byte [eax], al
cmp dword [ebp - 4], 0
je 0x4b4356
jne 0x4a54c2
sti
pushfd
movsd dword es:[edi], dword [esi]
push 0x25
mov eax, dword [esi]
push eax
call fcn.004b6571
add esp, 8
pop edi
js 0x4b434e
jns 0x4a54de
movsb byte es:[edi], byte [esi]
push es
jns 0x4b434e
invalid
add eax, 0x49922046
add byte [eax], ch
add byte [eax], al
xor byte [esi + 0x49], al
add byte [eax], cl
add byte [eax], al
add byte [eax], ch
add byte [eax], al
aaa
xchg ecx, eax
dec edx
add byte [eax], bl
add byte [eax], al
push ecx
add byte [eax], al
add byte [edi], dh
xchg ecx, eax
dec edx
add byte [ecx], dl
add byte [eax], al
pop eax
add byte [eax], al
add byte [ecx], bl
jge 0x4a5c3c
add byte [eax], al
popal
add byte [eax + 0x68], al
add byte [ecx], ah
add byte [eax], al
mov edx, 0
adc al, byte [eax]
add byte [eax], al
inc edx
add byte [eax], al
push eax
add byte [eax], al
add byte [esi], ah
sub cl, byte [edx]
cmp dword [edx], ecx
add dword [eax], eax
add byte [eax], al
push eax
add byte [eax], al
add byte [ecx + 0x170049ac], ah
sahf
dec edx
add byte [edx], dh
in eax, dx
dec edx
add byte [edx], dh
pop esp
dec edx
add byte [eax - 0x2ebe4c9c], bh
dec ebx
add byte [eax + eax], ch
add byte [eax + eax], ch
add byte [ecx + 0x140049ac], ah
add byte [eax], al
mov eax, dword [0x140049ac]
dec dword [ecx]
push ds
cmpsb byte [esi], byte es:[edi]
dec ebx
add byte [eax], bl
add byte [eax], al
pop eax
add byte [eax], al
add byte [edx], dh
in eax, dx
dec edx
add byte [esi + 0x5c], bl
dec edx
add byte [edi], cl
mov byte [0xed32c39a], al
dec edx
add byte [edi + edi*8], dl
dec ecx
add byte [ebx + 0x5850fc76], cl
mov dword [ebp + 0x60], esp
shl ebp, 0x20
mov ebx, ebx
mov esi, dword [ebp + esi]
jmp dword [esi]
lea esi, [esi + 8]
mov di, di
jmp dword [esi]
pop esi
mov bx, bx
pop ebx
pop ebp
ret
mov bx, 0x20
jmp 0x49f8d4
xor eax, eax
jb 0x4af5b0
pop edi
mov ecx, ecx
pop esi
pop ebx
pop ebp
ret
xor eax, eax
jb 0x4af5bd
pop edi
pop esi
pop ebx
pop ebp
ret
xor eax, eax
jb 0x4aa052
pop edi
pop esi
pop ebx
pop ebp
ret
mov byte [0xc766c2], al
add byte [eax], al
mov esi, esi
pop esi
js 0x4a291d
jns 0x4a6e49
pop edi
dec esi
add dword [edi], ecx
mov esi, ecx
mov edx, 0x20daffff
jns 0x4a291d
fisub dword [eax]
xchg dh, cl
xchg cl, dh
js 0x4bc107
jns 0x4a6e60
sub bh, byte [edx]
call 0x52ebf773
add dword [eax], eax
jns 0x4bc107
and eax, 0x1f3966f0
jmp dword [esi]
sbb ah, byte [ebx - 0x40]
jmp 0x4a6ed8
inc ebx
jmp 0x4a6e34
push edi
fisttp qword [ecx + 0x45e8bc0]
xchg dh, bl
xchg bl, dh
lea esi, [esi + 8]
js 0x49731a
jns 0x4a6ece
jns 0x49731a
xor al, 0x3a
mov al, byte [esi + edi]
jmp 0x4a6eda
notrack jmp 0x4a6eda
push eax
call fcn.004b7850
jne 0x49cacb
xchg bh, ah
xchg ah, bh
je 0x4a6ef1
sub dword [ecx - 0x58], edi
les ecx, [edi]
test ah, dl
pop ebx
invalid
je 0x49cacb
xor al, 0xd4
shr eax, 0x40
push eax
mov dword [0x51e834], eax
call fcn.004aa263
add esp, 4
and ebx, ebx
jno 0x4a6f16
cpuid
iretd
jno 0x4b1828
xor eax, 0x895b5e21
in al, dx
pop ebp
ret
fisttp dword [0x20e1c166]
mov ebp, ebp
jbe 0x4b17b2
ja 0x4a755b
lea esi, [esi + 8]
jmp dword [esi]
mov ecx, dword [ebp - 8]
add ecx, eax
xchg cl, dh
xchg dh, cl
mov dword [ebp - 4], ecx
mov cl, byte [ecx]
mov edx, edx
mov byte [edx + esi], cl
mov ecx, dword [ebp - 4]
cmp byte [ecx], 0xd
jne 0x4942b5
je 0x4a8a08
ror byte [edi], 0xf
xchg dword [eax + 0x31], edi
add byte [eax], al
ja 0x4abb86
jbe 0x4a8a12
cmc
out 0xf, eax
xchg byte [esi + 0x31], ch
add byte [eax], al
jbe 0x4abb86
mov dword [ebp - 0xfc], eax
lea eax, [ebp - 4]
mov dword [ebp - 0xe8], edx
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x100], 0x47
lea eax, [ebp - 0x3c]
mov dword [ebp - 0xcc], ecx
mov ecx, 8
xchg ah, bl
xchg bl, ah
mov dword [ebp - 0xc0], eax
lea edx, [ebp - 0xac]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xe4], 0x44
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xa8], ecx
lea ecx, [ebp - 0x34]
lea eax, [ebp - 0x90]
jne 0x49f63a
je 0x4a8a8c
hlt
je 0x49f63a
invalid
fcomp st(0)
lea esp, [esp + 4]
mov eax, dword [ebp + 0x64]
mov edx, dword [esi + 4]
mov ebx, dword [esi + 8]
mov ax, word [eax + edx]
lea esi, [esi + 0xc]
add word [ebp + ebx], ax
jmp dword [esi]
and dword [ebp + ebx], eax
jb 0x4a023d
jmp dword [esi]
lea ecx, [ebp - 0x10]
jmp 0x4ab090
push eax
xchg bp, di
xchg di, bp
lea edx, [ebp - 0xc]
push ecx
jmp 0x4ab09d
push edx
call fcn.0048e706
add esp, 0xc
mov eax, 0
cmp dword [ebp - 8], 0x7cf
shr bx, 0x40
jl 0x4ab3d1
jge 0x4ab0c5
movsb byte es:[edi], byte [esi]
push ecx
pop ebx
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x10]
shr di, 0x40
push eax
mov edx, dword [ebp - 0xc]
push ecx
js 0x4ab3c5
jns 0x4ab0df
sbb byte [eax], ah
jns 0x4ab3c5
push edx
add esp, 4
test al, 2
jb 0x48e9d5
je 0x4a493a
jne 0x4ab48f
stc
dec esp
movsb byte es:[edi], byte [esi]
out 0x8b, al
inc ebp
aam 0x86
salc
mov eax, dword [ebp - 0x2c]
xchg dh, dl
xchg dl, dh
jmp 0x4ab497
push eax
call fcn.004bfcd0
add esp, 4
jmp 0x4ab4a5
push esi
call fcn.00490663
add esp, 4
pop edi
pop esi
shr cx, 0x40
xchg bx, cx
xchg cx, bx
pop ebx
jne 0x4a492f
je 0x4ab4cb
arpl word [edx - 0x7bf01957], bp
pop esi
xchg esp, eax
invalid
je 0x4a492f
and eax, 0x499220f7
add byte [eax + eax], ah
add byte [esi], bl
cmpsb byte [esi], byte es:[edi]
dec ebx
add byte [eax], dl
add byte [eax], al
push eax
add byte [eax], al
add byte [ecx - 0x2f], al
dec ebx
add byte [eax], ah
add byte [eax], al
add byte fs:[eax], al
add byte [eax + 0x510048de], bh
add byte [eax], al
add byte [ecx], dl
add byte [eax], al
in eax, dx
lodsb al, byte [esi]
dec ecx
add bl, al
pop ebx
dec edx
add ah, al
lodsb al, byte [esi]
dec ecx
add byte [ebx], dl
mov ch, 0x4a
add byte [ebx - 0x3b629847], dl
lodsb al, byte [esi]
dec ecx
add bl, al
pop ebx
dec edx
add byte [esi - 0x3f], ah
loop 0x4ab53f
call fcn.004b78a7
mov di, di
shl bx, 0x20
mov word [esi + 0xbc], di
add esp, 8
mov ebp, ebp
shr ax, 0x40
mov cl, byte [ebp - 1]
xchg dh, cl
lea esi, [esi]
xchg cl, dh
dec ebp
inc dword [esi - 0x79c97232]
int1
push edx
lea edx, [esi]
pop edx
jmp 0x48d402
mov cx, cx
shl dh, 0x20
shl bl, 0x20
push 0
jmp 0x4a196a
mov ebx, dword [esi + 4]
push 0x493770
ret
lea ecx, [edi - 1]
cmp ecx, eax
jbe 0x4942b1
ja 0x4abb95
lahf
stosd dword es:[edi], eax
mov ecx, dword [ebp - 4]
cmp byte [ecx + 1], 0xa
js 0x497385
jns 0x4abba6
sar byte [esi - 0x482676f1], cl
invalid
jns 0x497385
and eax, 0xd3880f94
mov ebp, 0x479ffff
cpuid
nop
ret
mov al, 0x1d
jmp 0x4abb43
xor al, 0xc5
jne 0x490aaa
je 0x4ad4c0
dec eax
stc
mov dword [0xfc084dc], eax
cmp byte [edi], 0xed
add byte [eax], al
test al, al
jb 0x4bc207
jne 0x499a64
je 0x4ad4d4
cpuid
mov esp, 0x669666c3
xchg esi, eax
xchg si, ax
xchg si, ax
push ebp
pop ebp
xor eax, eax
jb 0x4a5bc1
push ebx
pop ebx
pop edi
pop esi
pop ebx
mov esp, ebp
mov ax, ax
lea eax, [eax]
pop ebp
shr bl, 0x40
ret
xor eax, eax
jb 0x4afee0
pop edi
pop esi
xchg edx, eax
xchg edx, eax
pop ebx
mov esp, ebp
xchg cx, ax
xchg cx, ax
pop ebp
mov ax, ax
ret
xor eax, eax
jb 0x4afef8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
jb 0x4a6e93
pop edi
pop esi
push 0x499a44
ret
mov esp, ebp
shl di, 0x20
pop ebp
mov bp, bp
ret
mov edx, edx
xchg bh, dh
xchg dh, bh
push 0x12
mov eax, dword [esi]
shl si, 0x20
jmp 0x4af4f3
push eax
call fcn.004b6571
or ch, ch
add esp, 8
pop edi
pop esi
pop ebx
shr ch, 0x40
mov esp, ebp
pop ebp
ret
invalid
add eax, 0xce876634
xchg cx, si
mov ebx, dword [ebp + 0x64]
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
lea esi, [esi + 0xc]
test byte [ebx + edx], al
jb 0x4b33bc
mov si, si
jmp dword [esi]
jmp dword [esi]
retf
xor al, 0x7b
pop edi
pop esi
pop ebx
mov ebx, ebx
mov esp, ebp
ja 0x4bd679
jbe 0x4aff0d
das
cpuid
ret
jbe 0x4bd679
ja 0x4b7f94
jbe 0x4b00ff
sbb byte [esi - 0x7079f0ee], 0x7e
add byte [eax], al
jbe 0x4b7f94
xor eax, 0xfc08426
sub ch, 0xc0
add byte [eax], al
jmp 0x4ad4b4
call fcn.004b739c
mov dx, word [ebp + 0x10]
test di, 0xc47f
test ax, 0x83ed
add eax, 0
jae 0x4b01d5
sub esi, esi
or dword [edi], ecx
xor dword [edx - 0x26ffff4c], 0xffffffed
jae 0x4bb68d
fldln2
cmc
cmp dword [ebp - 0x10], 0
xchg ebp, ebx
xchg ebx, ebp
je 0x49da77
jne 0x4b02a2
xchg ebx, eax
xor esp, dword [edi]
mov dh, 0x81
inc ebp
hlt
add dword [ebp - 0xc], 0x2c
mov eax, edi
sub eax, dword [ebp - 0xc]
cmp eax, 0x31
jb 0x49da77
jae 0x4b02be
sub byte ss:[esi + 0x39f4458b], 0xc7
mov eax, dword [ebp - 0xc]
cmp edi, eax
jbe 0x490a12
lea ebx, [ebx]
shl esi, 0x20
ja 0x4b02d2
rol dword [ecx - 0x80], 1
cmp al, 0x30
or cl, byte [edi]
test byte [ecx], ah
pop es
invalid
cmp byte [eax + esi], 0xa
je 0x4909fd
jne 0x4b02e0
add al, 0x7c
shl dh, 0x20
inc eax
cmp edi, eax
jno 0x4909eb
jo 0x4b02f2
push esp
in al, 0xb6
jo 0x4909eb
xor al, 0xd8
jne 0x4b031b
push esi
pop esi
je 0x4b0308
and dword [ebx + ebp*8 - 4], eax
add di, 0
cmp byte [esi], 0
je 0x48f6c1
jne 0x4b031b
jo 0x4b038a
sub byte [edx - 0x3c7e99f2], cl
or cl, byte [eax + 0xaeb8166]
mov byte [ecx + ecx*8 - 0x1e27df1], al
invalid
mov cl, byte [esi]
add bx, 0x880a
sub bx, 0x880a
test cl, cl
jb 0x4a014c
shl ax, 0x20
je 0x4a657d
xchg bp, bx
xchg bx, bp
jne 0x4b0345
cpuid
nop
ret
cmp al, 0x46
jg 0x4a658e
mov bx, bx
jle 0x4b0356
nop
cpuid
ret 0x870f
ja 0x48dc97
jbe 0x4b0360
sub dword [edx + 0xf], 0xffffff86
xor ecx, ebx
std
inc esi
test byte [edx], 0x50
add byte [eax], al
add byte [eax], dl
add byte [eax], al
sub byte [esi], cl
dec edx
add byte [eax - 0x5effb6b0], al
lodsb al, byte [esi]
dec ecx
add byte [ecx + edx + 0x4b], ch
add byte [edx], dh
in eax, dx
dec edx
add byte [esi - 0x6dffb4fd], cl
jbe 0x48dc97
invalid
xchg edx, eax
mov dh, 0x18
inc edi
xor ch, ch
dec edx
add byte [ecx + edx + 0x4b], ch
add byte [edx + 0x20e4c08a], al
mov bl, bl
mov eax, dword [esi + 4]
mov dl, dl
lea esi, [esi + 8]
xchg bx, ax
xchg bx, ax
mov dword [ebp + 0x70], eax
xchg esi, ebx
xchg ebx, esi
mov dword [ebp + 0x74], esi
lea ecx, [ecx]
mov ebx, dword [ebp + 0x5c]
mov ecx, dword [ebp + 0x54]
mov ch, ch
mov edx, dword [ebp + 0x58]
mov esi, dword [ebp + 0x68]
mov edi, dword [ebp + 0x6c]
lea eax, [eax]
call dword [ebp + 0x70]
mov dword [ebp + 0x60], esp
mov dword [ebp + 0x68], esi
call fcn.004a4580
push edi
je 0x4a0220
add eax, 0xd926ffd8
inc edx
shl ebx, 0x20
mov esi, dword [esi + 4]
mov esi, dword [ebp + esi]
jno 0x4afb4c
jo 0x4b0658
cpuid
ret
jo 0x4afb4c
cmp dword [0x51ea78], 0
jne 0x4b067c
je 0x4b0674
salc
rcr al, 1
insb byte es:[edi], dx
mov eax, dword [0x51ea74]
ret
mov dword [0x51ea78], 0
xchg dh, dl
xchg dl, dh
push 0x58
push 0x51ea1c
shr ax, 0x40
push 0x51ea0c
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov dword [0x51ea74], eax
test eax, eax
jb 0x4a7576
je 0x4b06be
jne 0x4b06b9
cpuid
nop
ret
mov eax, 0x51ea1c
mov dword [0x51ea74], eax
ret
shl esi, 0x20
mov byte [esi + 0xba], cl
shr ch, 0x40
xchg bx, dx
shl bh, 0x20
shl di, 0x20
xchg dx, bx
xchg di, ax
mov ebx, ebx
xchg di, ax
mov byte [esi + 0xbb], 0
ja 0x4b00f4
shr edi, 0x40
jbe 0x4b0d28
inc byte [esi + 0x68]
and cl, byte [edi]
xchg dh, al
invalid
jbe 0x4b00f4
fcom dword [edi - 0x46]
fisttp word [eax]
or dword [eax], eax
add byte [eax], al
push eax
add byte [eax], al
add byte [esi - 0x3e], al
dec eax
add byte [eax], dl
add byte [eax], al
pop eax
add byte [eax], al
add byte [eax], ch
push cs
dec edx
add byte [esi], al
lea ecx, [ecx]
add eax, 0xc004946
add byte [eax], al
add byte [eax], dl
add byte [eax], al
push esp
cmc
dec edx
add byte [eax], al
add byte [eax], al
push eax
add byte [eax], al
add byte [ecx], bl
jge 0x4b0db5
add byte [eax], al
inc ecx
add byte [eax + 0x50], al
add byte [ecx], al
add byte [eax], al
sbb dword [eax], eax
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax + eax], dl
add byte [edx + ebp], ch
dec edx
add dl, bh
or dword [edx], 0
pop esp
add byte [eax], al
add byte [eax + ecx*4], dh
dec edx
add byte [ecx], dh
push ecx
add byte [eax], al
push esp
add byte [eax], al
add byte [eax], ch
push cs
dec edx
add byte [ecx*4 + 0x2490049], cl
dec ebx
add byte [eax + eax], dl
add byte [eax], bl
add byte [eax], al
out 0x80, al
dec ebx
add byte [edx + 0x58000000], ch
add byte [eax], al
add byte [eax], ch
push cs
add byte [eax], al
add dh, ah
or byte [ebx], 0xaa
add byte [eax], al
add byte [eax], bl
add byte [eax], al
sub byte [esi], cl
dec edx
add byte [eax], bl
lea ecx, [ecx]
sbb dword [ebp + 0x4a], edi
add byte [eax], al
inc eax
add byte [eax], al
pop eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
popal
add byte [eax + 0x68], al
add byte [ecx], ah
add byte [eax], al
add al, byte [eax]
add byte [eax], al
adc dword [edx], ebp
dec edx
add dl, ah
loopne 0x4b0e3c
add byte [eax], al
add byte [ecx], ah
sub byte [eax], 0
add byte [eax], al
and dword [eax], eax
add byte [edx], al
add byte [eax], al
add byte [ecx], dl
sub cl, byte [edx]
loop 0x4b0dd2
dec ecx
add byte [eax], ch
add byte [eax], al
loop 0x4b0dda
dec ecx
add byte [eax + eax], ah
add byte [eax + 0x510048de], bh
add byte [eax], al
add byte [ecx], dl
add byte [eax], al
mov eax, dword [0x240049ac]
xchg edx, eax
dec ebx
add byte [edx], dh
in eax, dx
dec edx
add byte [edi], bl
push cs
dec ebx
add byte [eax + 2], ch
out dx, eax
xor ch, ch
dec edx
add byte [edx + edx*4], ah
dec ebx
add cl, bl
dec byte [eax - 0x3e99bdfe]
call 0x4a139773
mov byte [edx], al
inc edx
shr ax, 0x40
mov eax, ecx
dec ecx
test eax, eax
jb 0x48c8c5
xchg si, cx
xchg esi, ecx
xchg cx, si
jne 0x4babdd
je 0x4b0e4c
lahf
jmp 0x4b0e80
pop esi
mov bl, bl
pop ebp
ret
shr ax, 0x40
jno 0x4b3c42
cmp dword [ebp + 0x7000002d], 0x41d64e04
jo 0x4b0e8b
dec esi
salc
inc ecx
fisttp word [edi]
xor byte [ecx - 0x27ffffd3], 0xb7
jo 0x4b3c42
fdiv dword [edi - 0x3dbbb71]
jmp dword ss:[esi]
cmp ax, 0x33c
jae 0x496b57
jb 0x4b1836
lodsd eax, dword [esi]
loopne 0x4b17d8
mov eax, dword [0x51e834]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor al, 0xe8
push ecx
add byte [eax - 1], dl
adc eax, sym.imp.KERNEL32.dll_CloseHandle
ja 0x496b26
jbe 0x4b184e
mov eax, dword [0xff6e420]
xchg dl, dl
push edx
invalid
jbe 0x496b26
add eax, 0x645d8bab
inc ebx
cmp edi, ebx
shr cx, 0x40
ja 0x4942d4
jbe 0x4b2946
rcr byte [0x25e8451c], 1
fcos
push dword [edx]
call 0x4b0270
xor al, 0x22
push ds
cmpsb byte [esi], byte es:[edi]
dec ebx
add byte [eax], dl
add byte [eax], al
pop eax
add byte [eax], al
add byte [eax], cl
lodsd eax, dword [esi]
dec ecx
add ah, bl
mov dh, 0x4b
add byte [ebp + esi*8 + 0x4a], dl
add byte [eax], al
add byte [eax], al
insb byte es:[edi], dx
add byte [eax], al
add byte [edx], bl
inc eax
dec edx
add byte [ecx + 0x29], bh
dec ebx
add byte [edi], cl
mov byte [0x401ac390], al
dec edx
add ah, bl
mov dh, 0x4b
add byte [0x3626ff2c], dh
add al, 0xc1
loopne 0x4b29aa
shr bx, 0x40
mov esi, dword [esi + 4]
mov esi, dword [ebp + esi]
shl bx, 0x20
jmp dword [esi]
mov byte [0xa840fc2], al
stosd dword es:[edi], eax
invalid
fadd st(6)
mov dx, dx
mov eax, dword [esi + 4]
lea esi, [esi + 8]
call fcn.004ae9b2
xor al, 0xd6
lea esi, [esi + 0xc]
mov al, al
mov dword [ebp + ebx], eax
jmp dword [esi]
xor edx, edx
jb 0x4bc1c5
mov dl, al
sub si, 0
or edx, edi
jb 0x4bc1e3
mov edi, dword [ebp + 0xc]
cmp edx, ebx
shr dx, 0x40
mov dword [edi], edx
jb 0x499a4d
jae 0x4b3c6f
rcr byte [edx + 0x66], cl
xchg esi, eax
xchg si, ax
xchg si, ax
mov al, byte [ecx + esi + 1]
js 0x499e6a
jns 0x4b3c81
outsd dx, dword [esi]
inc esi
jns 0x499e6a
xor eax, 0x3d84c79f
pushal
invalid
lea esp, [esp + 4]
ja 0x4a1cbd
jbe 0x4b4014
cpuid
nop
ret
jbe 0x4a1cbd
xor byte [edx - 0x73], 0
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
mov eax, dword [esi]
push eax
mov eax, eax
call fcn.004b6571
cmp bp, bp
add esp, 8
pop edi
pop esi
pop ebx
js 0x4af4d7
jns 0x4b437a
invalid
jns 0x4af4d7
or dl, 0x5d
ret
xor al, 0x14
je 0x4900bb
jne 0x4b48fd
imul esp, dword [eax - 0x17], 0xf
sub dword [esi + 0x70000047], 0xbebb2b03
jno 0x4b90b1
jo 0x4b4908
sub edi, dword [ebx - 0x5c7ff042]
inc edi
add byte [eax], al
jo 0x4b90b1
invalid
mov ecx, dword [ebp + 0x20]
mov edx, dword [ebp + 0x1c]
push eax
push ecx
jmp 0x4b4c58
push edx
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [0x51e834]
push esi
push 0x9c402458
jecxz 0x4b7085
popfd
jmp dword [esi - 4]
mov esi, esi
jmp dword [esi]
mov dh, dh
jmp 0x4b7f97
push esi
ja 0x4ab552
jbe 0x4b7fa3
std
mov ah, 0xf
xchg byte [ecx + 0x5ffff35], ch
inc ecx
jbe 0x4ab552
add eax, 0x24648d41
add al, 0xe8
mov al, 0x71
std
dec dword [eax + 0x645d8bed]
mov edx, dword [esi + 4]
js 0x498622
jns 0x4b7fc7
jecxz 0x4b8000
arpl word [edi], cx
mov dword [ebp + 6], edx
invalid
jns 0x498622
and eax, 0xe8c166ef
inc eax
pop edi
pop esi
pop ebx
mov ebx, ebx
mov esp, ebp
pop ebp
ret
push dword [eax + ebp*8]
lea esp, [esp + 4]
mov cl, cl
jne 0x49b97a
je 0x4b8013
sub dword [ebp + 0xf], edi
test byte [ecx + 0x39], ah
invalid
je 0x49b97a
fsincos
shr edi, 0x40
mov ax, word [ebp + eax]
shr edi, 0x40
mov ebx, dword [ebp + ebx]
lea esi, [esi + 0xc]
sbb word [ebx], ax
jmp dword [esi]
mov al, byte [esi]
inc esi
ja 0x4b0e29
jbe 0x4babec
cmp edi, eax
mov esp, ecx
jbe 0x4b0e29
invalid
add ebp, 0x531720c4
sub ebp, 0x531720c4
add esp, 0xc
mov cl, byte [ebp - 1]
mov si, si
mov byte [esi + 0xba], bl
shr si, 0x40
lea ecx, [ecx]
shl bh, 0x20
push esi
xchg dh, ah
lea edx, [edx]
mov cl, cl
xchg ah, dh
mov byte [esi + 0xbb], cl
xchg al, dh
xchg dh, al
push 1
shl dl, 0x20
shr ebp, 0x40
call fcn.004b3653
xchg bh, cl
mov ecx, ecx
xchg cl, bh
mov edx, edx
mov dx, word [ebp + 0x10]
add esp, 8
call fcn.0048e77c
xor eax, 0x8458b07