Function at 0x4ff55f
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2b0
push ebx
push esi
push edi
mov dword [ebp - 0x2a0], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x1bc], 4
mov eax, dword [ebp + 8]
mov dword [0x4df0d4], eax
cmp dword [0x4de860], 0
je 0x4fecb0
cmp dword [ebp + 0xc], 0
jne 0x4fecb0
cmp dword [0x4e5704], 0
je 0x4fecb0
push 0x4e3d50
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x4e2510], eax
mov ecx, dword [0x4e5704]
push ecx
call fcn.004ed05a
cmp dword [0x4e5710], 0
je 0x4fecbe
jmp 0x5036e0
mov edx, dword [0x4e5710]
add edx, 1
mov dword [0x4e5710], edx
cmc
js 0x4fecdf
lea edi, [edi + 0x2d82]
lea edi, [edi - 0x2d82]
jns 0x4fecdf
mov edx, 0x6808ec83
scasd eax, dword es:[edi]
aas
push eax
add byte [edi + edi*8 + 0x35], ah
add byte [eax], al
add byte [eax], al
sub esp, 8
push 0x503faf
push dword fs:[0]
mov dword fs:[0], esp
js 0x4fecf7
or ebx, 0
sub esp, 0
jge 0x4fed0b
jb 0x4fed01
xchg ebx, edi
xchg ebx, edi
lea edi, [edi]
jl 0x4fed0b
call 0x9224d53a
invalid
call fcn.004e7ee4
xchg edx, edx
jle 0x4fed14
jno 0x4fed25
pushf
jb 0x4fed1a
not eax
not eax
popf
mov esi, esi
jo 0x4fed25
mov eax, 0x3f7005c7
dec esi
add byte [ecx], al
add byte [eax], al
add byte [ecx], bh
mov dword [0x4e3f70], 1
jns 0x4fed31
add edx, 0
jo 0x4fed36
jge 0x4fed38
jg 0x4fed49
pushf
xor edi, dword [esp]
xor edi, dword [esp]
popf
je 0x4fed46
jle 0x4fed49
add eax, 0x4d50f0b8
add byte [section.0000004], ch
mov eax, 0x4d50f0
sub eax, section.0000004
mov dword [0x4e578c], eax
jnp 0x4fed5a
or eax, eax
ror ecx, 0x12
ror ecx, 0xe
js 0x4fed6c
xchg edx, edx
mov edi, edi
jns 0x4fed6c
cmp dword [eax - 0x75], 0x4e578c0d
add byte [ecx + 0x7e1], al
cmp byte [ecx + 5], 0x49
mov ecx, dword [0x4e578c]
and ecx, 0x80000007
jns 0x4fed7f
dec ecx
or ecx, 0xfffffff8
inc ecx
mov edx, dword [0x4e578c]
sub edx, ecx
mov dword [0x4e578c], edx
ror esp, 0
ror esi, 0x1c
ror esi, 4
cmp esp, 0x111a
jg 0x4feda3
mov ebx, ebx
jle 0x4feda3
mov ebx, 0x13190e8
add byte [ebp], dh
call 0x511f38
jne 0x4fedaa
cmp edx, dword [esp]
jo 0x4fedbe
lea ebx, [ebx + 0x6f63]
lea ebx, [ebx - 0x6f63]
jno 0x4fedbe
ljmp 0xff00:0x4e3d6068
push 0x4e3d60
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4e3d6c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4e3d78
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4e3d88
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4e3d94
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4e3da0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4e3dac
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4e3dbc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4e3dcc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4e3ddc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4e3de8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4e3df8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4e3e04
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, ebx
rol edi, 0
lea ecx, [ecx + 0xab3]
sub ecx, 0xab3
jne 0x4fee7f
pushf
add esi, 0x11be
sub esi, 0x11be
popf
lea edi, [edi + 0x1f67]
lea edi, [edi - 0x1f67]
je 0x4fee7f
mov edi, 0xffc37ae8
dec dword [ebp + 0x180489]
add byte [ebp - 0x180377], cl
push dword [esi]
call 0x4fb1fe
lea ecx, [ecx + 0x1804]
lea ecx, [ecx - 0x1804]
jbe 0x4fee92
mov esi, esi
jg 0x4fee96
je 0x4fee9d
mov edi, edi
jne 0x4fee9d
mov edi, 0x4e1b94a1
add byte [ebx + 0x4defd4], ah
mov eax, dword [0x4e1b94]
mov dword [0x4defd4], eax
and ecx, 0xffffffff
jno 0x4feeac
neg ebx
neg ebx
jo 0x4feecd
pushf
cmp edx, dword [esp + 0x10]
lea edx, [edx + 0x1084]
lea edx, [edx - 0x1084]
popf
jmp 0x4feec8
lea ebx, [ebx]
jno 0x4feecd
add eax, 0x1b980d8b
dec esi
add byte [ecx + 0x4de8100d], cl
add cl, al
retf
mov ecx, dword [0x4e1b98]
mov dword [0x4de810], ecx
ror ebx, 9
rol ebx, 9
jbe 0x4feeee
jnp 0x4feee3
xchg edi, ecx
xchg edi, ecx
jno 0x4feee9
jo 0x4feeeb
ja 0x4feeee
xor eax, 0x1b9c158b
dec esi
add byte [ecx + 0x4de81415], cl
add al, bh
mov edx, dword [0x4e1b9c]
mov dword [0x4de814], edx
clc
jb 0x4feefd
xor edx, dword [esp]
xor edx, dword [esp]
lea edi, [edi]
jbe 0x4fef10
mov edx, edx
js 0x4fef0b
je 0x4fef0d
ja 0x4fef10
mov esi, 0xa068406a
sbb ecx, dword [esi]
push 0x40
push 0x4e1ba0
push 0x4de818
call fcn.004fcc5f
add esp, 0xc
call 0x4fef29
add esp, 4
test dword [esp + 8], ecx
jp 0x4fef32
lea edi, [edi + 0x557]
lea edi, [edi - 0x557]
jno 0x4fef49
mov esp, esp
jae 0x4fef44
nop
jo 0x4fef49
add eax, 0x1be0a196
dec esi
add byte [ebx + 0x4df084], ah
mov eax, dword [0x4e1be0]
mov dword [0x4df084], eax
sub esi, 0
test dword [esp + 8], ebx
je 0x4fef5c
je 0x4fef67
je 0x4fef60
jmp 0x4fef62
jle 0x4fef64
jne 0x4fef67
or dword [ebx + 0x4e1be40d], 0x880d8900
invalid
mov ecx, dword [0x4e1be4]
mov dword [0x4df088], ecx
push eax
pop eax
jmp 0x4fef77
rol edx, 0xc
ror edx, 0xc
ja 0x4fef90
pushf
jno 0x4fef83
jle 0x4fef85
jle 0x4fef87
jne 0x4fef89
popf
lea ebx, [ebx]
jbe 0x4fef90
or dword [ebx + 0x4e1be815], 0x8c158900
invalid
mov edx, dword [0x4e1be8]
mov dword [0x4df08c], edx
jnp 0x4fef9e
cmp edx, 0x61a1
lea ebx, [ebx + 0x27ab]
lea ebx, [ebx - 0x27ab]
jle 0x4fefc0
pushf
jp 0x4fefb6
popf
nop
jb 0x4fefbb
lea eax, [eax]
jg 0x4fefc0
lcall 0xa300, 0x4e1beca1
nop
invalid
mov eax, dword [0x4e1bec]
mov dword [0x4df090], eax
mov ecx, dword [0x4e2244]
mov dword [0x4df0b0], ecx
mov edx, dword [0x4e2248]
mov dword [0x4df0b4], edx
mov eax, dword [0x4d960c]
mov dword [0x4df0b8], eax
mov ecx, dword [0x4d9610]
mov dword [0x4df0bc], ecx
xchg esp, esp
call 0x4fefff
add esp, 4
xchg ecx, ecx
shl esp, 0
jne 0x4ff029
pushf
jbe 0x4ff00d
lea edx, [edx + 0x4766]
lea edx, [edx - 0x4766]
jbe 0x4ff01b
ror esi, 0
popf
jbe 0x4ff022
ja 0x4ff024
jge 0x4ff026
je 0x4ff029
sub eax, 0xd658
call 0x50c686
mov dword [0x4e5708], eax
push 0x94
push 0
push 0x4de868
call fcn.00506175
add esp, 0xc
cmp esp, 0x733a
jae 0x4ff05c
jb 0x4ff051
jl 0x4ff053
xchg edi, edx
xchg edi, edx
jb 0x4ff05c
sub eax, 0x5c7992a
push 0x94004de8
add byte [eax], al
add cl, al
ret 0xc11c
mov dword [0x4de868], 0x94
rol edx, 0x1c
rol edx, 4
jo 0x4ff06e
cmp eax, dword [esp + 0x10]
jl 0x4ff074
jb 0x4ff091
pushf
jne 0x4ff07a
jl 0x4ff07c
lea esi, [esi + 0x6852]
sub esi, 0x6852
popf
jbe 0x4ff08c
jl 0x4ff08e
jae 0x4ff091
add eax, 0x4de86868
add al, ch
call dword [eax]
add byte [edx], bh
push 0x4de868
call 0x50419a
jp 0x4ff09d
jne 0x4ff09f
ror edi, 0
jl 0x4ff0d7
pushf
lea ebx, [ebx + 0x902]
lea ebx, [ebx - 0x902]
test edx, 0x713c
jnp 0x4ff0ba
xor ebx, 0x2f0a
xor ebx, 0x2f0a
popf
lea ecx, [ecx + 0x7fdf]
lea ecx, [ecx - 0x7fdf]
jge 0x4ff0d7
add eax, 0x9c68
add byte [edx], ch
push 0x9c
push 0
push 0x4dea10
call fcn.00506175
add esp, 0xc
lea ebx, [ebx]
rol eax, 0xe
rol eax, 0x12
test ecx, 0x4456
jp 0x4ff10f
pushf
mov esi, esi
lea esp, [esp]
xor edi, 0
popf
jns 0x4ff109
lea esp, [esp]
jnp 0x4ff10f
mov esi, 0xea1005c7
dec ebp
add byte [eax + eax - 0x750000], bl
mov dword [0x4dea10], 0x9c
mov edi, edi
jge 0x4ff125
xchg esp, esp
nop
mov esp, esp
jl 0x4ff125
jmp 0x4e3a0191
push 0x4dea10
call 0x50419a
lea esi, [esi]
xchg esp, esp
call 0x4ff138
add esp, 4
jne 0x4ff152
pushf
test dword [esp], edi
cld
jle 0x4ff145
test dword [esp + 8], esi
popf
jle 0x4ff14d
lea ebx, [ebx]
je 0x4ff152
mov esp, 0x11468
add byte [edx], ch
push 0x114
push 0
push 0x4de8fc
call fcn.00506175
add esp, 0xc
dec eax
inc eax
cmp eax, dword [esp + 0x10]
jns 0x4ff176
mov esp, esp
jmp 0x4ff172
js 0x4ff176
mov edi, 0xfc05c7c1
call 0x163f1cb
add byte [eax], al
mov dword [0x4de8fc], 0x114
jo 0x4ff182
jl 0x4ff184
jle 0x4ff186
jg 0x4ff19f
lea edi, [edi]
lea esp, [esp]
lea edi, [edi + 0x1ff6]
lea edi, [edi - 0x1ff6]
jp 0x4ff19b
jle 0x4ff19f
lcall 0x4d, 0xe8fc6815
push 0x4de8fc
call fcn.0050bd44
test esp, 0x50c3
cmp ebx, dword [esp]
call 0x4ff1b7
add esp, 4
push eax
pop eax
jg 0x4ff1d0
pushf
mov edi, edi
jl 0x4ff1c4
rol esp, 0
xchg edx, edx
popf
js 0x4ff1cd
jle 0x4ff1d0
lcall 0x6a00, 0x11c68
add byte [eax - 0x54], ch
ljmp 0x6f
push 0x11c
push 0
push 0x4deaac
call fcn.00506175
add esp, 0xc
xor ecx, dword [esp + 4]
xor ecx, dword [esp + 4]
jge 0x4ff1ee
shl esp, 0
nop
jp 0x4ff1f9
jmp 0x4ff1f6
jnp 0x4ff1f9
add eax, 0xeaac05c7
dec ebp
add byte [ecx + eax], bl
add byte [eax], al
mov dword [0x4deaac], 0x11c
add ebx, 0
jns 0x4ff208
sub ebx, 0
jle 0x4ff227
pushf
jae 0x4ff211
sub esp, 0
xor ebx, 0x3c29
xor ebx, 0x3c29
popf
je 0x4ff224
jg 0x4ff227
ljmp 0xe800:0x4deaac68
push 0x4deaac
call fcn.0050bd44
jge 0x4ff233
cmp eax, dword [esp]
push edx
pop edx
je 0x4ff249
pushf
mov edx, edx
cmp ecx, dword [esp + 8]
popf
jp 0x4ff246
jne 0x4ff249
mov ecx, 0xff9375e8
jmp dword [ebx + 0x4debc8]
call 0x4f85c3
mov dword [0x4debc8], eax
lea eax, [eax + 0x6392]
lea eax, [eax - 0x6392]
test esi, 0x7f42
or ebx, ebx
and eax, 0xffffffff
jge 0x4ff273
jle 0x4ff26e
jno 0x4ff270
jl 0x4ff273
mov esp, 0xe0bde8
add byte [ebx + 0x4debcc], ah
call 0x50d335
mov dword [0x4debcc], eax
test ebx, eax
xor esi, 0
jle 0x4ff298
pushf
jl 0x4ff288
shl edx, 0
test dword [esp], esi
popf
lea esp, [esp]
jne 0x4ff295
jg 0x4ff298
mov eax, 0xb0e8006a
xor al, 1
add byte [ebx + 0x4debd0], ah
push 0
call 0x51274f
mov dword [0x4debd0], eax
xchg ecx, edx
xchg ecx, edx
sub ebx, 0
rol edi, 0x11
rol edi, 0xf
jl 0x4ff2bc
xchg edx, eax
xchg edx, eax
jne 0x4ff2b7
jns 0x4ff2b9
jge 0x4ff2bc
sub eax, 0xc5e8006a
jbe 0x4ff2c2
push 0
call 0x506988
mov dword [0x4debd4], eax
add byte [ebx + 0x4debd4], ah
jnp 0x4ff2ca
xchg esi, eax
xchg esi, eax
dec ecx
inc ecx
jbe 0x4ff2d0
jle 0x4ff2f6
pushf
cmp edi, dword [esp + 4]
test dword [esp + 0x10], edx
neg eax
neg eax
nop
popf
jae 0x4ff2e5
jb 0x4ff2e7
lea edx, [edx + 0x65f3]
lea edx, [edx - 0x65f3]
jg 0x4ff2f6
call fcn.0050f762
add byte [eax - 0x28], ch
jmp 0x4ff34c
push 0x104
push 0x4debd8
push 0
call fcn.00507bf6
mov dword [0x4decdc], eax
xor edi, dword [esp + 0x10]
xor edi, dword [esp + 0x10]
jle 0x4ff316
lea edx, [edx]
lea edx, [edx + 0xd01]
lea edx, [edx - 0xd01]
js 0x4ff347
pushf
and ecx, 0xffffffff
cld
cmp ecx, dword [esp + 4]
jne 0x4ff332
popf
lea edx, [edx + 0x47ad]
lea edx, [edx - 0x47ad]
xchg ecx, edi
xchg ecx, edi
jns 0x4ff347
mov esi, 0x10468
add byte [eax - 0x20], ch
in al, dx
dec ebp
add byte [edx], ch
push 0x104
push 0x4dece0
push 0
call fcn.0050ad0a
mov dword [0x4deee8], eax
std
cld
jp 0x4ff361
jae 0x4ff363
ja 0x4ff365
jge 0x4ff387
pushf
add edi, dword [esp]
sub edi, dword [esp]
test esp, 0x77be
add esp, 0
call 0x4ff37d
lea esp, [esp + 4]
popf
nop
jl 0x4ff387
mov esi, 0x1307fe8
add byte [ebx + 0x4deeec], ah
call 0x51240b
mov dword [0x4deeec], eax
jg 0x4ff393
ja 0x4ff3b6
pushf
lea ebx, [ebx]
jo 0x4ff39b
jnp 0x4ff39d
not edi
not edi
popf
lea edx, [edx + 0x7fc5]
lea edx, [edx - 0x7fc5]
je 0x4ff3b1
jb 0x4ff3b3
jbe 0x4ff3b6
add eax, 0xfea773e8
jmp dword [ebx + 0x4deef0]
call 0x4e9b2e
mov dword [0x4deef0], eax
shr edx, 0
jno 0x4ff3cc
xchg esp, esp
xchg ecx, ecx
jo 0x4ff3cc
mov eax, 0xfeabd0e8
jmp dword [ebx + 0x4deef4]
call 0x4e9fa1
mov dword [0x4deef4], eax
mov eax, eax
call 0x4ff3dd
lea esp, [esp + 4]
neg eax
neg eax
test dword [esp], edx
jp 0x4ff3f4
mov ebx, ebx
jnp 0x4ff3ee
jno 0x4ff3f0
jnp 0x4ff3f4
sub eax, 0xe8f66a70
pop ebp
jecxz 0x4ff3fa
push 0xfffffffffffffff6
call 0x50d758
mov dword [0x4deef8], eax
add byte [ebx + 0x4deef8], ah
rol esp, 0
jp 0x4ff418
lea esi, [esi + 0x3ac9]
lea esi, [esi - 0x3ac9]
jg 0x4ff413
jo 0x4ff415
jnp 0x4ff418
add eax, 0x39e8f56a
jecxz 0x4ff41e
push 0xfffffffffffffff5
call 0x50d758
mov dword [0x4deefc], eax
add byte [ebx + 0x4deefc], ah
cmp ebx, dword [esp]
xor esp, 0
jnp 0x4ff438
mov edx, edx
xchg ebx, ebx
lea esp, [esp]
mov esp, esp
jp 0x4ff438
ljmp 0xe3:0x19e8f46a
push 0xfffffffffffffff4
call 0x50d758
mov dword [0x4def00], eax
lea esp, [esp]
jbe 0x4ff453
xchg edi, eax
xchg edi, eax
jno 0x4ff44d
nop
ja 0x4ff453
or ebx, 0xc725e8b2
add byte [eax], al
call 0x50bb7d
mov dword [0x4def04], eax
cmp esp, 0x2cfd
xor edx, 0x6e08
xor edx, 0x6e08
mov edi, edi
not ebx
not ebx
jns 0x4ff47e
xchg esp, esp
mov ebx, ebx
js 0x4ff47e
mov esi, 0x4def0c68
add al, ch
push ss
jle 0x4ff488
push 0x4def0c
call 0x51729e
add cl, bh
stc
jo 0x4ff4a8
pushf
call 0x4ff492
add esp, 4
call 0x4ff49a
lea esp, [esp + 4]
test dword [esp], ecx
popf
jno 0x4ff4a5
jno 0x4ff4a8
mov esi, 0x4def5068
add al, ch
dec ebp
push cs
add dword [eax], eax
push 0x4def50
call 0x5102ff
lea edi, [edi + 0x6c66]
lea edi, [edi - 0x6c66]
or eax, 0
cmc
je 0x4ff4c4
jne 0x4ff4cd
jb 0x4ff4c8
je 0x4ff4cd
lcall 0xac, 0xfae834c3
add byte [esi - 0x5d], ah
mov eax, 0x85004def
inc esp
and al, 0x10
call 0x50a1cc
mov word [0x4defb8], ax
test dword [esp + 0x10], eax
test esp, 0x7b54
je 0x4ff4f7
pushf
rol edi, 0x15
ror edi, 0x15
mov esp, esp
lea ebx, [ebx]
popf
jge 0x4ff4f4
jne 0x4ff4f7
lcall 0xa300, 0x1038fe8
mov esp, 0xb004def
push dword [ebp]
call 0x50f88b
mov dword [0x4defbc], eax
or edi, edi
jne 0x4ff505
nop
jnp 0x4ff527
pushf
test esp, 0x6c38
ror ecx, 0
nop
popf
jp 0x4ff518
lea esi, [esi + 0x117e]
lea esi, [esi - 0x117e]
jp 0x4ff527
mov ecx, 0x15e1fe8
add byte [esi - 0x5d], ah
shr bh, 0x4d
add byte [ebx + 0x1c76ffe0], al
call 0x51534b
mov word [0x4defc0], ax
and eax, 0xffffffff
jbe 0x4ff553
pushf
nop
jnp 0x4ff53c
lea esi, [esi + 0x5505]
sub esi, 0x5505
xchg edx, ecx
xchg edx, ecx
popf
jno 0x4ff550
ja 0x4ff553
lcall 0xa3ff, 0xff9a35e8
invalid
call 0x4f8f8d
mov dword [0x4defc4], eax
push 0x24
push 0
push 0x4def94
call fcn.00506175
add esp, 0xc
push 0x4def94
call fcn.004fdecc
call fcn.004eae2b
test eax, eax
je 0x4ff5a5
cmp dword [0x4defac], 0x182
je 0x4ff599
cmp dword [0x4defac], 0x1e6
jne 0x4ff5a3
mov dword [0x4e5714], 1
jmp 0x4ff5d5
xor edx, edx
mov dx, word [0x4def94]
test edx, edx
jne 0x4ff5cb
xor eax, eax
mov ax, word [0x4defb4]
cmp eax, 5
jge 0x4ff5c9
mov dword [0x4e5714], 1
jmp 0x4ff5d5
mov dword [0x4e5714], 1
mov ecx, dword [0x4e5714]
mov dword [0x4defcc], ecx
push 0x190
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
mov dword [0x4df0d8], eax
push 0x190
push 0
mov edx, dword [0x4df0d8]
push edx
call fcn.00506175
add esp, 0xc
cmp dword [0x4e227c], 1
jne 0x4ff741
push 5
push 0x4e3e10
push 0x4e225c
call fcn.004fa02a
add esp, 0xc
test eax, eax
jne 0x4ff68b
push 0xa
call fcn.0050ea2d
add esp, 4
test eax, eax
jne 0x4ff686
push 0xb
call fcn.0050ea2d
add esp, 4
test eax, eax
jne 0x4ff686
push 0x14
call fcn.0050ea2d
add esp, 4
test eax, eax
jne 0x4ff686
mov dword [0x4e5730], 0x23
mov dword [0x4e4154], 0x13
mov dword [0x4e4448], 1
mov dword [0x4e3f74], 1
jmp 0x5037a6
jmp 0x4ff741
push 5
push 0x4e3e18
push 0x4e225c
call fcn.004fa02a
add esp, 0xc
test eax, eax
jne 0x4ff6ee
push 0xb
call fcn.0050ea2d
add esp, 4
test eax, eax
jne 0x4ff6ec
push 0x14
call fcn.0050ea2d
add esp, 4
test eax, eax
jne 0x4ff6ec
mov dword [0x4e5730], 0x23
mov dword [0x4e4154], 0x13
mov dword [0x4e4448], 1
mov dword [0x4e3f74], 1
jmp 0x5037a6
jmp 0x4ff741
push 5
push 0x4e3e20
push 0x4e225c
call fcn.004fa02a
add esp, 0xc
test eax, eax
jne 0x4ff741
push 0x14
call fcn.0050ea2d
add esp, 4
test eax, eax
jne 0x4ff741
mov dword [0x4e5730], 0x23
mov dword [0x4e4154], 0x13
mov dword [0x4e4448], 1
mov dword [0x4e3f74], 1
jmp 0x5037a6
test esi, edi
xor edi, 0x767
xor edi, 0x767
ja 0x4ff759
jbe 0x4ff753
jno 0x4ff755
jbe 0x4ff759
lcall 0x8d00, 0x6a2f6a2f
test dword [esi + edi*8], edx
invalid
push 0x2f
push 0
lea eax, [ebp - 0x1ec]
push eax
call fcn.00506175
add esp, 0xc
ror esp, 0
rol ebx, 0x12
rol ebx, 0xe
stc
jb 0x4ff78c
xchg edi, edi
lea edx, [edx + 0x103a]
lea edx, [edx - 0x103a]
nop
jae 0x4ff78c
mov edi, 0x85c6a5cd
aaa
invalid
mov byte [ebp - 0x1c9], 0x54
test dword [esp + 4], eax
nop
clc
jo 0x4ff79b
ja 0x4ff7af
lea edx, [edx + 0x14ac]
lea edx, [edx - 0x14ac]
mov ecx, ecx
jbe 0x4ff7af
mov ebp, 0x3385c627
invalid
mov byte [ebp - 0x1cd], 0x78
cmp edi, dword [esp + 0x10]
test ecx, 0x4642
jg 0x4ff7cd
pushf
cmc
popf
nop
jne 0x4ff7ca
jle 0x4ff7cd
mov eax, 0xfe3c85c6
invalid
mov byte [ebp - 0x1c4], 0x75
cmp eax, dword [esp + 4]
jo 0x4ff7da
jle 0x4ff7dc
jle 0x4ff7ff
pushf
lea edi, [edi]
jge 0x4ff7e4
test edi, eax
lea edi, [edi + 0x6176]
sub edi, 0x6176
popf
lea esp, [esp]
jae 0x4ff7f9
lea esp, [esp]
jg 0x4ff7ff
lcall 0xffff, 0xfe1c85c6
pop esi
mov byte [ebp - 0x1e4], 0x5e
nop
add eax, dword [esp]
sub eax, dword [esp]
jg 0x4ff817
jl 0x4ff811
jnp 0x4ff813
jle 0x4ff817
xor eax, 0x3f85c6ae
invalid
mov byte [ebp - 0x1c1], 0x75
xor ecx, dword [esp + 4]
xor ecx, dword [esp + 4]
stc
add edi, 0x7026
sub edi, 0x7026
jae 0x4ff842
jmp 0x4ff837
xchg edi, esi
xchg edi, esi
jge 0x4ff83d
xchg esi, eax
xchg esi, eax
jb 0x4ff842
mov eax, 0xfe2585c6
invalid
mov byte [ebp - 0x1db], 0x4d
lea eax, [eax + 0x3ec5]
lea eax, [eax - 0x3ec5]
xor ecx, edi
xor ecx, edi
jp 0x4ff86a
pushf
jp 0x4ff85f
popf
jbe 0x4ff863
je 0x4ff865
jae 0x4ff867
jnp 0x4ff86a
mov ecx, 0xfe3a85c6
invalid
mov byte [ebp - 0x1c6], 0x64
ror ecx, 0x11
rol ecx, 0x11
xor esi, dword [esp + 4]
xor esi, dword [esp + 4]
xchg edx, edx
jg 0x4ff88c
mov eax, eax
jle 0x4ff887
mov ecx, ecx
jle 0x4ff88c
call 0xfe687e56
invalid
mov byte [ebp - 0x1e8], 0x5a
push edi
pop edi
je 0x4ff897
jb 0x4ff8a7
lea esi, [esi]
jae 0x4ff89d
xchg ebx, edi
xchg ebx, edi
jle 0x4ff8a3
jae 0x4ff8a7
sbb dword [eax], 0xfe1485c6
invalid
mov byte [ebp - 0x1ec], 0x4c
cmp esi, edi
xor ebx, dword [esp]
xor ebx, dword [esp]
ror esp, 0
js 0x4ff8d4
pushf
nop
add ebx, dword [esp]
sub ebx, dword [esp]
and edi, 0xffffffff
test esp, 0x45f8
popf
jp 0x4ff8d1
jns 0x4ff8d4
add eax, 0xfe2e85c6
invalid
mov byte [ebp - 0x1d2], 0x70
call 0x4ff8e0
add esp, 4
jo 0x4ff8fa
pushf
test esp, 0x5196
test ebx, 0x3884
popf
mov esp, esp
jno 0x4ff8fa
add eax, 0xfe1785c6
invalid
mov byte [ebp - 0x1e9], 0x48
xor edx, 0x239f
xor edx, 0x239f
cmp esi, ecx
lea ecx, [ecx]
mov esi, esi
jp 0x4ff91c
xchg esp, esp
jl 0x4ff919
jnp 0x4ff91c
mov esi, 0xfe3085c6
invalid
mov byte [ebp - 0x1d0], 0x47
js 0x4ff925
jle 0x4ff92d
xchg esp, esp
jg 0x4ff92d
mov edi, 0x4185c66b
invalid
mov byte [ebp - 0x1bf], 0x32
xchg edx, eax
xchg edx, eax
xor esp, 0
nop
not edi
not edi
jle 0x4ff951
pushf
ja 0x4ff944
popf
lea esp, [esp]
lea esp, [esp]
jb 0x4ff94e
jg 0x4ff951
add eax, 0xfe2885c6
invalid
mov byte [ebp - 0x1d8], 0x61
lea edi, [edi + 0xc30]
lea edi, [edi - 0xc30]
test esi, edx
xchg ecx, eax
xchg ecx, eax
ja 0x4ff96a
je 0x4ff98a
pushf
lea esi, [esi + 0x32e]
sub esi, 0x32e
jo 0x4ff97c
jo 0x4ff97e
test eax, 0x7ba0
popf
ja 0x4ff987
jne 0x4ff98a
sub eax, 0xfe3e85c6
invalid
mov byte [ebp - 0x1c2], 0x74
jae 0x4ff993
shl esp, 0
rol edi, 0x14
ror edi, 0x14
shr edx, 0
jg 0x4ff9a8
jl 0x4ff9a3
jmp 0x4ff9a5
jle 0x4ff9a8
xor eax, 0xfe3d85c6
invalid
mov byte [ebp - 0x1c3], 0x77
ror edi, 0xe
rol edi, 0xe
mov esp, esp
and esi, 0xffffffff
jg 0x4ff9bc
jge 0x4ff9dc
pushf
cld
lea esi, [esi]
test esp, 0x342e
popf
xchg ebx, ebx
lea ecx, [ecx + 0x5efa]
lea ecx, [ecx - 0x5efa]
jl 0x4ff9dc
sub eax, 0xfe1a85c6
invalid
mov byte [ebp - 0x1e6], 0x56
cmp esp, 0x22b8
add ecx, 0
or edx, edx
neg esi
neg esi
jno 0x4ffa01
xchg edi, edx
xchg edi, edx
jbe 0x4ff9fa
jmp 0x4ff9fc
jb 0x4ff9fe
jo 0x4ffa01
mov edi, 0xfe1f85c6
invalid
mov byte [ebp - 0x1e1], 0x55
jbe 0x4ffa0a
jb 0x4ffa0c
sub eax, 0
dec esi
inc esi
js 0x4ffa28
pushf
ror esi, 7
rol esi, 7
xor eax, esi
xor eax, esi
jl 0x4ffa21
popf
xchg esp, esp
jns 0x4ffa28
mov ebx, 0xfe2d85c6
invalid
mov byte [ebp - 0x1d3], 0x66
cmp ebx, dword [esp + 4]
jne 0x4ffa35
jns 0x4ffa44
pushf
ja 0x4ffa3b
popf
mov ebx, ebx
jbe 0x4ffa41
js 0x4ffa44
mov esp, 0xfe3585c6
invalid
mov byte [ebp - 0x1cb], 0x65
jns 0x4ffa4d
js 0x4ffa5d
pushf
xchg ebx, ebx
test dword [esp], eax
popf
jle 0x4ffa5a
jns 0x4ffa5d
mov ebx, 0xfe1e85c6
invalid
mov byte [ebp - 0x1e2], 0x49
ror edi, 0x1a
ror edi, 6
std
cld
add esi, dword [esp]
sub esi, dword [esp]
xor edi, 0
jb 0x4ffa92
pushf
lea edi, [edi]
lea eax, [eax]
push eax
add eax, 0x3acb
ror eax, 3
pop eax
popf
jmp 0x4ffa8b
jge 0x4ffa8d
jl 0x4ffa8f
jae 0x4ffa92
mov esi, 0xfe3985c6
invalid
mov byte [ebp - 0x1c7], 0x70
jle 0x4ffa9b
test esp, 0x20dc
je 0x4ffaa3
or edi, 0
jl 0x4ffabf
pushf
ror ecx, 9
ror ecx, 0x17
xor esi, eax
xor esi, eax
popf
jbe 0x4ffab8
mov edi, edi
xchg edi, edi
jge 0x4ffabf
mov ecx, 0xfe2c85c6
invalid
mov byte [ebp - 0x1d4], 0x77
ror eax, 3
rol eax, 3
rol esp, 0
jae 0x4ffad8
lea edx, [edx]
mov edi, edi
jb 0x4ffad8
mov esi, 0xfe2685c6
invalid
mov byte [ebp - 0x1da], 0x53
jno 0x4ffae1
add eax, dword [esp]
sub eax, dword [esp]
jae 0x4ffae9
test esp, 0x1e14
ja 0x4ffb00
test edi, eax
lea ebx, [ebx + 0x3953]
sub ebx, 0x3953
test esp, 0x124
ja 0x5036ff
ja 0x5036f8
mov ebx, ebx
lea edx, [edx]
jbe 0x5036ff
mov esi, 0x5010458b
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [0x4e2308]
mov dword [0x4e5ac4], eax
cld
ror edi, 0xe
ror edi, 0x12
ror eax, 0
jle 0x503722
jbe 0x503730
pushf
cld
popf
jb 0x50372b
mov esp, esp
ja 0x503730
add dword [ebx + 0x4d949c3d], 0x63750000
cmp dword [0x4d949c], 0
jne 0x50379c
cmp dword [0x4e3f70], 0
je 0x50379c
test dword [esp + 0xc], eax
shl eax, 0
push edx
add edx, 0x26d
ror edx, 0x1a
pop edx
jle 0x503756
jbe 0x50376c
pushf
xchg ecx, eax
xchg ecx, eax
push eax
pop eax
or ebx, 0
popf
mov edi, edi
jg 0x503767
xchg esi, esi
ja 0x50376c
mov ebx, 0xd9c18151
inc esi
add byte [eax], al
push ecx
add ecx, 0x46d9
ror ecx, 5
pop ecx
nop
jg 0x503788
pushf
shr esp, 0
xchg ecx, ecx
popf
je 0x503785
jle 0x503788
xor eax, 0x58f64
add byte [eax], al
add byte [ebx + 0x5c70cc4], al
jo 0x5037d5
pop dword fs:[0]
add esp, 0xc
mov dword [0x4e3f70], 0
dec esi
add byte [eax], al
add byte [eax], al
add byte [ecx + 0x4e5ac4], ah
mov eax, dword [0x4e5ac4]
jmp 0x503da3
xor eax, eax
mov al, byte [0x4e1b38]
test eax, eax
jne 0x5037bb
call fcn.00505a4b
mov dword [0x4e571c], eax
cmp dword [0x4de878], 2
jne 0x5037ea
cmp dword [0x4de86c], 6
jne 0x5037ea
cmp dword [0x4deffc], 0
je 0x5037ea
adc al, 0xe8
outsd dx, dword [esi]
int3
call fcn.004f044a
mov dword [0x4e4160], eax
call fcn.004ea3e0
mov dword [0x4e415c], eax
push 0xa1
push 0x4d55b0
lea ecx, [ebp - 0x290]
push ecx
call fcn.004fcc5f
add esp, 0xc
mov dword [ebp - 0x1b8], 0
jmp 0x50381e
mov edx, dword [ebp - 0x1b8]
add edx, 1
mov dword [ebp - 0x1b8], edx
cmp dword [ebp - 0x1b8], 0xa
jge 0x5038db
mov eax, dword [ebp - 0x1b8]
shl eax, 2
mov ecx, dword [ebp + eax*4 - 0x290]
xor ecx, 0xab576c41
mov edx, dword [ebp - 0x1b8]
shl edx, 2
mov dword [ebp + edx*4 - 0x290], ecx
mov eax, dword [ebp - 0x1b8]
shl eax, 2
mov ecx, dword [ebp + eax*4 - 0x28c]
xor ecx, 0xab5ece77
mov edx, dword [ebp - 0x1b8]
shl edx, 2
mov dword [ebp + edx*4 - 0x28c], ecx
add edi, 0
shl esi, 0
jne 0x50388a
mov edx, edx
nop
lea esp, [esp]
jo 0x503887
je 0x50388a
mov esi, 0xfe48858b
invalid
mov eax, dword [ebp - 0x1b8]
shl eax, 2
mov ecx, dword [ebp + eax*4 - 0x288]
xor ecx, 0xab633a25
mov edx, dword [ebp - 0x1b8]
shl edx, 2
mov dword [ebp + edx*4 - 0x288], ecx
mov eax, dword [ebp - 0x1b8]
shl eax, 2
mov ecx, dword [ebp + eax*4 - 0x284]
xor ecx, 0xab572a32
mov edx, dword [ebp - 0x1b8]
shl edx, 2
mov dword [ebp + edx*4 - 0x284], ecx
jmp 0x50380f
call fcn.004f02d0
mov dword [0x4e5720], eax
jge 0x5038e7
jle 0x5038f0
xchg edx, edx
jl 0x5038ed
jg 0x5038f0
mov eax, 0x44483d83
dec esi
add byte [eax], al
cmp dword [0x4e4448], 0
jne 0x503918
lea edx, [edx + 0x5aa2]
sub edx, 0x5aa2
ror esp, 0
lea esp, [esp]
cmc
jle 0x503913
je 0x503910
jg 0x503913
mov esp, 0xaa84e8
add byte [ebx - 0x367cff0d], al
add byte [esi + 7], dh
call 0x50e39c
xor ebx, 0
or ecx, 0
jbe 0x503927
nop
xchg esp, esp
ja 0x503927
xor eax, 0x743d8354
aas
dec esi
add byte [eax], al
cmp dword [0x4e3f74], 0
jne 0x503bd3
nop
add ecx, 0
add edx, 0x5481
sub edx, 0x5481
js 0x503964
pushf
xor edx, dword [esp]
xor edx, dword [esp]
and esi, esi
call 0x503955
add esp, 4
add esp, 0
popf
js 0x50395f
jne 0x503961
jns 0x503964
mov ebp, 0x4e416ca1
add byte [ebx + 0x4e56f8], ah
mov eax, dword [0x4e416c]
mov dword [0x4e56f8], eax
shl esp, 0
lea edx, [edx + 0x69e8]
lea edx, [edx - 0x69e8]
shl esp, 0
je 0x50399f
pushf
ror ecx, 0x19
ror ecx, 7
call 0x50398f
lea esp, [esp + 4]
sub esi, 0
popf
je 0x50399a
jp 0x50399c
jne 0x50399f
sub eax, 0x416c0d8b
dec esi
add byte [ebx], al
or eax, 0x4e56f0
mov ecx, dword [0x4e416c]
add ecx, dword [0x4e56f0]
mov dword [0x4e56f4], ecx
add eax, dword [esp]
sub eax, dword [esp]
and edi, edi
jo 0x5039dd
pushf
lea eax, [eax + 0x5b08]
lea eax, [eax - 0x5b08]
call 0x5039ce
lea esp, [esp + 4]
popf
js 0x5039d6
jne 0x5039d8
mov ecx, ecx
jno 0x5039dd
add eax, 0xbf505157
scasd eax, dword es:[edi]
aas
push eax
add cl, al
out 0, al
push edi
push ecx
push eax
mov edi, 0x503faf
shl esi, 0
std
cld
jnp 0x503a03
pushf
jmp 0x5039f0
popf
lea ebx, [ebx + 0x833]
lea ebx, [ebx - 0x833]
xchg esp, esp
jp 0x503a03
mov esi, 0x3f703d80
dec esi
add byte [eax], al
cmp byte [0x4e3f70], 0
je 0x503a33
jno 0x503a0e
lea eax, [eax + 0x66d6]
sub eax, 0x66d6
je 0x503a2e
lea esi, [esi + 0x7459]
lea esi, [esi - 0x7459]
jne 0x503a29
jns 0x503a2b
jne 0x503a2e
mov edx, 0x504193bf
add byte [eax], bh
mov edi, 0x504193
js 0x503a35
xor eax, 0xd31
xor eax, 0xd31
xor esi, dword [esp]
xor esi, dword [esp]
jge 0x503a51
xchg esi, esi
jge 0x503a4b
xchg esi, esi
jl 0x503a51
add eax, 0xf40d8b1a
push esi
dec esi
add byte [ebp + 0x78082474], al
adc ah, byte [esi - 0x64]
mov ecx, dword [0x4e56f4]
test dword [esp + 8], esi
js 0x503a6f
pushf
and esi, esi
sub ebx, 0
popf
xchg esp, esp
xchg ecx, edi
xchg ecx, edi
jns 0x503a6f
lcall 0x79, 0x3d76cf3b
cmp ecx, edi
jbe 0x503ab0
jns 0x503a75
shr eax, 0
or esp, 0
jae 0x503a91
pushf
ja 0x503a81
rol ecx, 0xc
rol ecx, 0x14
rol esi, 0
popf
jo 0x503a8e
jb 0x503a91
mov edi, 0x90b0cf2b
sub ecx, edi
mov al, 0x90
cld
test dword [esp + 0x10], ecx
jp 0x503a9c
nop
rol eax, 0xd
rol eax, 0x13
jle 0x503aae
ja 0x503aa7
jg 0x503aa9
jg 0x503aae
mov esp, 0xaaf3050b
rep stosb byte es:[edi], al
lea edx, [edx + 0x3a0b]
sub edx, 0x3a0b
cmp ecx, 0x4a5d
lea esp, [esp]
jns 0x503ad5
jl 0x503ac9
xchg ebx, ecx
xchg ebx, ecx
jnp 0x503acf
jg 0x503ad1
js 0x503ad5
mov eax, 0xf83d8b42
push esi
dec esi
add byte [ecx + 0x7172fc], al
add byte [edi + 0x4f], al
mov edi, dword [0x4e56f8]
cmp esp, 0x7172
inc edi
dec edi
ror ebx, 0
xchg edx, ebx
xchg edx, ebx
jp 0x503af3
lea eax, [eax]
xchg edi, edi
jnp 0x503af3
mov esp, 0x4fec22b9
add byte [edi], bh
mov ecx, entry0
jg 0x503afa
neg edx
neg edx
ror eax, 0x18
rol eax, 0x18
jl 0x503b21
pushf
test esp, 0x4131
stc
call 0x503b14
lea esp, [esp + 4]
popf
mov edi, edi
jge 0x503b1e
jge 0x503b21
mov ecx, 0x3e76cf3b
cmp ecx, edi
jbe 0x503b63
neg edx
neg edx
add edi, 0
xor esi, dword [esp + 4]
xor esi, dword [esp + 4]
and esp, 0xffffffff
jge 0x503b45
nop
mov ecx, ecx
jbe 0x503b3e
xchg ecx, ecx
jl 0x503b45
sub eax, 0xcf2b4134
sub ecx, edi
stc
and eax, eax
lea edx, [edx + 0x71f7]
lea edx, [edx - 0x71f7]
jnp 0x503b5e
jp 0x503b5a
jp 0x503b5e
mov edi, 0xfc90b007
mov al, 0x90
cld
rep stosb byte es:[edi], al
neg ecx
neg ecx
and eax, eax
ror esp, 0
ja 0x503b89
pushf
test ebx, 0x3e3b
call 0x503b7b
add esp, 4
popf
xchg esp, esp
jns 0x503b84
mov edx, edx
jbe 0x503b89
add eax, 0x4fecbebf
add byte [edi - 0x7c057806], al
int3
mov edi, 0x4fecbe
xchg edx, edi
xchg edx, edi
or esp, 0
inc eax
dec eax
jle 0x503b9f
jmp 0x503b9b
jg 0x503b9f
call 0x37f6f4c4
push eax
add byte [ebx + 0x137800cc], al
mov ecx, 0x5037a6
or esp, 0
js 0x503bbc
pushf
push ebx
add ebx, 0x55ab
ror ebx, 9
pop ebx
popf
nop
jns 0x503bbc
mov ebp, 0x90b0cf2b
sub ecx, edi
mov al, 0x90
cld
rep stosb byte es:[edi], al
jg 0x503bc5
cmp edi, eax
push edi
pop edi
jno 0x503bd0
xchg esp, esp
jo 0x503bd0
sbb dword [eax + 0x59], 0x543d835f
inc ecx
dec esi
add byte [eax], al
pop eax
pop ecx
pop edi
cmp dword [0x4e4154], 0
jne 0x503be6
mov dword [0x4e4154], 1
cmp dword [0x4e4154], 0x13
jne 0x503c31
mov edx, dword [0x4e4154]
sub edx, 1
imul edx, edx, 0x66
add edx, 0x4df274
mov dword [ebp - 0x29c], edx
push 0x4e225c
mov eax, dword [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x1a0]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea edx, [ebp - 0x1a0]
mov dword [ebp - 0x29c], edx
jmp 0x503c47
mov eax, dword [0x4e4154]
sub eax, 1
imul eax, eax, 0x66
add eax, 0x4df274
mov dword [ebp - 0x29c], eax
cmp dword [0x4e571c], 0
je 0x503d2e
cmp dword [0x4dfa08], 0
je 0x503d2e
mov ecx, dword [0x4de7dc]
and ecx, 0x80000000
test ecx, ecx
jne 0x503cdf
cmp dword [0x4deffc], 0
je 0x503cdf
push 0x200040
push 0x4df234
mov edx, dword [ebp - 0x29c]
push edx
push 0
call dword [0x4e571c]
cmp dword [0x4de878], 2
jne 0x503cdd
cmp dword [0x4de86c], 6
jne 0x503cdd
cmp dword [0x4e415c], 0xffffffff
je 0x503cdd
push 0
lea eax, [ebp - 0x294]
push eax
push 0
push 0x200040
push 0x66
mov ecx, dword [ebp - 0x29c]
push ecx
push 0x3e
push 0x4df234
mov edx, dword [0x4e415c]
push edx
push 0
call dword [0x4e4160]
jmp 0x503cf5
push 0x40
push 0x4df234
mov eax, dword [ebp - 0x29c]
push eax
push 0
call dword [0x4e571c]
mov dword [0x4e5734], 0
jmp 0x503d10
mov ecx, dword [0x4e5734]
add ecx, 1
mov dword [0x4e5734], ecx
cmp dword [0x4e5734], 0xa1
jae 0x503d2c
mov edx, dword [0x4e5734]
mov byte [ebp + edx - 0x290], 0
jmp 0x503d01
jmp 0x503d5d
xor eax, eax
mov al, byte [0x4e1b38]
cmp eax, 1
jne 0x503d5d
cmp dword [0x4dfa08], 0
je 0x503d5d
mov ecx, dword [ebp - 0x29c]
push ecx
push 0x4df234
push 0x4e3e28
call dword [sym.imp.MSVCRT.dll_printf]
add esp, 0xc
cmp dword [0x4e5700], 0
jne 0x503da1
cmp dword [0x4e5720], 0
je 0x503d7e
mov edx, dword [0x4e4154]
push edx
call dword [0x4e5720]
jmp 0x503da1
cmp dword [0x4de878], 2
jne 0x503d9a
cmp dword [0x4de86c], 6
jne 0x503d9a
push 0x63
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, 0x63
jmp 0x503da3
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc