Function at 0x4861b7
Capabilities:
Print debug messages

Disassembly:
push esi
mov esi, esi
ror ecx, 0x15
ror ecx, 0xb
dec ecx
inc ecx
je 0x485875
jne 0x48586f
jle 0x485871
jne 0x485875
xor eax, 0x91d0a107
inc esi
add byte [esi - 0x3d], bl
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 0xc0
push ebx
push esi
push edi
xor esi, esi
mov ecx, 0x15
xor eax, eax
lea edi, [ebp - 0x84]
mov dword [ebp - 0x88], esi
rep stosd dword es:[edi], eax
push 0x46a8c8
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0xa5
lea eax, [ebp - 4]
push 0xa5
push eax
call fcn.0048fa00
add esp, 0xc
mov word [ebp - 0x94], 0xa
nop
xor edi, edi
mov ebx, 6
jmp 0x4858d9
mov eax, dword [0x4691d0]
pop esi
ret
xor esi, esi
cmp edi, 5
ja case.default.0x4858e2
jmp dword [edi*4 + 0x4862f4]
lea eax, [ebp - 0xac]
mov ecx, 3
mov esi, eax
xor edx, edx
add eax, 8
dec ecx
mov dword [esi], edx
mov word [esi + 4], dx
jne 0x4858f4
jmp case.default.0x4858e2
mov word [ebp - 0xa6], 0
dec edx
inc edx
neg esi
neg esi
push ecx
pop ecx
je 0x485925
jbe 0x48591b
js 0x48591d
jl 0x48591f
jb 0x485921
jne 0x485925
xor eax, 0x663feb18
inc dword [ebp - 0xa0]
jmp case.default.0x4858e2
inc word [ebp - 0xa0]
cmp ebx, 0x64ec
mov eax, eax
stc
nop
jns 0x48593f
jo 0x48593c
js 0x48593f
mov esp, 0xc76625eb
test dword [edx - 1], ebp
jmp case.default.0x4858e2
mov word [ebp - 0x96], 0xffff
jmp case.default.0x4858e2
mov word [ebp - 0x8e], si
mov esp, esp
jg 0x48595d
jge 0x485959
nop
jle 0x48595d
lcall 0x70b5, 0x896607eb
invalid
jmp case.default.0x4858e2
mov word [ebp - 0x90], si
inc edi
dec ebx
jne 0x4858d7
xor edi, edi
cmp di, 3
jae case.0x485f4b.0
mov ecx, edi
and ecx, 0xffff
mov eax, ecx
imul eax, ecx
imul eax, ecx
imul eax, ecx
add eax, 7
sub eax, 7
je 0x485a1d
dec eax
je 0x4859a8
sub eax, 0xf
je 0x485a48
inc edi
jmp 0x485970
mov ecx, dword [ebp - 0x8e]
mov esi, 5
and ecx, 0xffff
xor ebx, ebx
mov eax, ecx
cdq
idiv esi
mov eax, ecx
mov ecx, 3
cmp edx, 2
cdq
setne bl
idiv ecx
dec edx
neg edx
sbb edx, edx
neg edx
or ebx, edx
je 0x485a0e
mov dx, word [ebp - 0x90]
mov word [ebp - 0x92], 1
mov word [ebp - 0x96], dx
jne 0x4859f4
shr esi, 0
test dword [esp + 0xc], ecx
jno 0x485a08
nop
jnp 0x485a00
jb 0x485a02
mov ebx, ebx
jo 0x485a08
ljmp 0xffff:0x62e947d8
inc edi
jmp 0x485970
mov word [ebp - 0x92], 0
inc edi
jmp 0x485970
inc word [ebp - 0x8e]
xor ecx, dword [esp]
xor ecx, dword [esp]
add esp, 0
add ecx, 0x4851
sub ecx, 0x4851
jno 0x485a3b
jb 0x485a42
xchg edx, edx
jae 0x485a42
add dword [edi - 0x17], 0xffffff28
inc edi
jmp 0x485970
jl 0x485a4a
jnp case.0x485eac.0
pushf
lea esp, [esp]
lea edi, [edi + 0x7f19]
lea edi, [edi - 0x7f19]
cmp eax, dword [esp + 0xc]
jmp 0x485a63
popf
jg 0x485a67
jp case.0x485eac.0
mov ebp, 0x8366c933
stc
or byte [ecx - 0x7cf023b3], cl
inc edi
or byte [eax], al
add byte [ecx + 0xffffe1], al
add byte [ebp - 0x50f0febf], cl
rol dword [ebx - 0x78f0c708], 0xe6
add dword [eax], eax
add byte [ebx], dh
leave
xor ecx, ecx
cmp cx, 8
mov dword [ebp - 0x24], ecx
jae 0x4862c0
and ecx, 0xffff
lea eax, [ecx + 1]
imul eax, ecx
cmp eax, 0x38
ja case.0x485a96.7
xor ecx, ecx
mov cl, byte [eax + 0x486330]
jmp dword [ecx*4 + 0x48630c]
mov esi, dword [ebp - 0x30]
mov dword [ebp - 4], esi
lea ecx, [ecx]
or esp, 0
jp 0x485aaa
test esp, 0x2909
js 0x485ad9
add byte [eax + 0x27], bh
pushf
shr esp, 0
call 0x485abc
add esp, 4
push edx
add edx, 0x7976
ror edx, 0x1d
pop edx
rol eax, 0x1a
rol eax, 6
popf
jge 0x485ad4
jae 0x485ad6
jns 0x485ad9
sub eax, 0x8910eec1
jne 0x485aaf
shr esi, 0x10
mov dword [ebp - 0x30], esi
mov ecx, ecx
jns 0x485b04
pushf
push esi
add esi, 0x698b
ror esi, 4
pop esi
xor esp, 0
ror ebx, 0
add esp, 0
popf
jae 0x485afd
jno 0x485aff
jns 0x485b01
js 0x485b04
add eax, 0x41dc4d8b
mov ecx, dword [ebp - 0x24]
inc ecx
jmp 0x485a6c
mov eax, dword [ebp - 0xb8]
imul eax, dword [ebp - 0xc]
and eax, 0xffff
mov dword [ebp - 0xb0], eax
test esp, 0x20f7
ja 0x485b3f
jp 0x485b2c
lea ecx, [ecx + 0x1500]
lea ecx, [ecx - 0x1500]
jae 0x485b3a
jb 0x485b3c
jbe 0x485b3f
sub eax, 0x41dc4d8b
mov ecx, dword [ebp - 0x24]
inc ecx
jmp 0x485a6c
mov eax, dword [ebp - 4]
shr eax, 0x10
mov dword [ebp - 0xb4], eax
nop
neg ecx
neg ecx
or ecx, ecx
jge 0x485b5d
jne 0x485b69
nop
xchg edi, edi
jbe 0x485b64
jl 0x485b66
je 0x485b69
jmp 0x8c44a0f8
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x24]
and eax, 0xffff
inc ecx
mov dword [ebp - 0xb8], eax
jmp 0x485a6c
mov eax, dword [ebp - 0xb4]
test eax, eax
je case.0x485a96.7
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x24]
imul edx, eax
mov eax, dword [ebp - 0xb0]
and edx, 0xffff
add eax, edx
inc ecx
mov dword [ebp - 0xb0], eax
jmp 0x485a6c
push 0x5a
lea eax, [ebp - 0xc]
push 1
push eax
call fcn.0048fa00
add esp, 0xc
shr esp, 0
push esi
add esi, 0x20f9
ror esi, 0x1e
pop esi
js 0x485bd1
add eax, 0x1de7
sub eax, 0x1de7
jge 0x485be8
lea edx, [edx]
xchg edx, ecx
xchg edx, ecx
jmp 0x485be5
jl 0x485be8
mov esp, 0x4d8d1d6a
clc
push 0x1d
lea ecx, [ebp - 8]
push 0x4e
push ecx
call fcn.0048fa00
mov ecx, dword [ebp - 0x24]
add esp, 0xc
inc ecx
jmp 0x485a6c
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xb0]
imul edx, dword [ebp - 0xb8]
and eax, 0xffff
shl eax, 0x10
lea ecx, [edx + eax + 1]
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x24]
inc ecx
jmp 0x485a6c
mov eax, dword [ebp - 0x92]
and eax, 0xffff
and eax, 0x80000001
jns 0x485c40
dec eax
or eax, 0xfffffffe
inc eax
sub eax, 0
je 0x485c7d
dec eax
je 0x486044
mov ecx, dword [ebp - 0x24]
inc ecx
jmp 0x485a6c
mov eax, dword [ebp - 0x30]
and eax, 0x7fff
mov dword [ebp - 0x30], eax
inc edi
dec edi
xchg edx, ecx
xchg edx, ecx
jbe 0x485c68
jae 0x485c6a
jne 0x485c71
jg 0x485c6e
je 0x485c71
mov edx, 0x8be04589
dec ebp
fadd qword [ecx - 0x17]
out dx, eax
std
invalid
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x24]
inc ecx
jmp 0x485a6c
mov ecx, dword [ebp - 0x20]
mov esi, 0xb
and ecx, 0xffff
xor ebx, ebx
mov eax, ecx
cdq
idiv esi
mov eax, ecx
mov ecx, 7
cmp edx, 5
cdq
sete bl
idiv ecx
xor eax, eax
cmp edx, 2
sete al
or ebx, eax
je 0x485cca
mov cx, word [ebp - 0x90]
mov word [ebp - 0x92], 1
mov word [ebp - 0x96], cx
jmp case.0x485eac.0
mov eax, dword [ebp - 0xa6]
and eax, 0xffff
cmp eax, 9
ja case.default.0x485cde
jmp dword [eax*4 + 0x48636c]
nop
cmp ecx, eax
jnp 0x485cea
or ebx, 0
jge 0x485cf4
lea eax, [eax]
jl 0x485cf4
sub eax, 0x89f0558b
adc eax, 0x467d10
mov edx, dword [ebp - 0x10]
mov dword [0x467d10], edx
jmp 0x485e8b
nop
rol eax, 0xd
ror eax, 0xd
jg 0x485d11
jmp 0x485d0d
jle 0x485d11
mov esi, 0x7d10a183
inc esi
add byte [ebx + 0x4679740d], cl
add bh, dh
fmul dword [ebp + 0x15894114]
je 0x485d9e
mov eax, dword [0x467d10]
mov ecx, dword [0x467974]
neg eax
lea edx, [ecx + eax*2]
mov dword [0x467974], edx
jmp 0x485e8b
inc esi
add cl, ch
pop edi
add dword [eax], eax
add byte [ebx + 0x585000cc], al
or esp, 0
push eax
pop eax
or esp, 0
push eax
pop eax
neg ebx
neg ebx
js 0x485d37
je 0x485d53
pushf
cmp edx, dword [esp + 4]
rol esp, 0
xor ebx, dword [esp + 4]
xor ebx, dword [esp + 4]
popf
js 0x485d4e
jle 0x485d50
jne 0x485d53
call 0x17b46e7
add byte [eax], al
nop
jmp 0x485e8b
nop
cld
jae 0x485d5d
add edi, 0x56db
sub edi, 0x56db
je 0x485d81
pushf
je 0x485d6f
rol eax, 0
cmp edi, edx
jg 0x485d76
popf
je 0x485d7a
lea edi, [edi]
js 0x485d7e
jne 0x485d81
mov eax, 0xff78858d
invalid
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call fcn.00470930
add esp, 8
jmp 0x485e8b
nop
push 0x46a8c8
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
add bh, bh
adc eax, sym.imp.KERNEL32.dll_OutputDebugStringA
jnp 0x485da7
sub esp, 0
jl 0x485dac
push eax
add eax, 0xfda
ror eax, 0x11
pop eax
js 0x485dcd
pushf
or eax, 0
lea ebx, [ebx]
clc
add esi, dword [esp]
sub esi, dword [esp]
popf
jns 0x485dca
jns 0x485dcd
mov ecx, 0x7d18158b
inc esi
add byte [ecx - 0xbf6b], cl
push dword [eax + eax - 0xb]
mov edx, dword [0x467d18]
mov dword [ebp - 0xc0], edx
je 0x485ddb
cmc
je 0x485df8
pushf
cmp esi, 0x7823
or esp, 0
rol ebx, 0x1e
rol ebx, 2
popf
mov esp, esp
mov edi, edi
jne 0x485df8
ljmp 0x8900:0x467d14a1
mov eax, dword [0x467d14]
mov dword [ebp - 0xbc], eax
xor eax, ecx
xor eax, ecx
xchg esp, esp
jo 0x485e1a
pushf
jg 0x485e0f
xchg esp, esp
popf
jmp 0x485e15
jae 0x485e17
jno 0x485e1a
mov eax, 0xfed911e8
dec dword [ebp - 0x8773]
call dword [ecx - 0x18]
xor eax, 0x83ffff8c
les eax, [ebx + ebp*8]
pop ebx
call fcn.00473730
lea ecx, [ebp - 0x88]
push ecx
call fcn.0047ea60
add esp, 4
jmp 0x485e8b
nop
jmp 0x485e8b
jae 0x485e35
clc
cmp ebx, esi
jae case.default.0x485cde
pushf
inc ecx
dec ecx
lea eax, [eax]
lea esi, [esi]
ror esi, 0x1a
rol esi, 0x1a
popf
xchg esp, esp
lea eax, [eax + 0x74a2]
lea eax, [eax - 0x74a2]
jmp 0x485e5a
jb case.default.0x485cde
mov ebx, 0x11c8c190
nop
ror eax, 0x11
ror eax, 0xf
rol edx, 9
ror edx, 9
call 0x485e6f
lea esp, [esp + 4]
or esp, 0
jg 0x485e82
pushf
nop
popf
jns 0x485e7f
jle 0x485e82
jmp 0x8a30b411
mov edx, dword [ebp - 0x18]
mov dword [0x467d0c], edx
xor esi, esi
mov ecx, esi
and ecx, 0xffff
lea eax, [ecx + 3]
imul eax, ecx
cmp eax, 0x12
ja case.default.0x485f4b
xor ecx, ecx
mov cl, byte [eax + 0x4863a8]
jmp dword [ecx*4 + 0x486394]
inc word [ebp - 0xa6]
shr esp, 0
lea eax, [eax + 0x4ddc]
sub eax, 0x4ddc
std
cld
jb 0x485ed9
pushf
test eax, esi
popf
jmp 0x485ed4
lea eax, [eax]
jae 0x485ed9
jmp 0x48f3c6
jmp case.default.0x485f4b
nop
mov eax, eax
jo 0x485ef0
pushf
jp 0x485ee7
mov edx, edx
popf
jle 0x485eed
jno 0x485ef0
mov ebp, 0xff40958b
invalid
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xbc]
push edx
lea ecx, [ebp - 0x88]
push eax
push ecx
call fcn.0048ea70
add esp, 0xc
jmp 0x485e8b
nop
push 0x46a8b8
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x485e8b
mov dx, word [ebp - 0x94]
cmp word [ebp - 0xa6], dx
jne case.default.0x485f4b
mov eax, dword [ebp - 0x8e]
mov ecx, 9
and eax, 0xffff
cdq
idiv ecx
cmp edx, 8
ja case.default.0x485f4b
jmp dword [edx*4 + 0x4863bc]
mov word [ebp - 0x92], 1
clc
lea edx, [edx + 0x7e0b]
lea edx, [edx - 0x7e0b]
jbe case.default.0x485f4b
ja 0x485f6c
mov ebx, ebx
ja case.default.0x485f4b
call 0x83aea5a9
inc byte [edi + ecx]
adc byte [eax], 0xff
invalid
inc esi
cmp si, 4
jb 0x485e8d
nop
rol esp, 0
jp 0x485f8b
jo 0x485f85
ja 0x485f87
jnp 0x485f8b
jmp 0xc5deb58
mov edx, dword [0x467d0c]
mov eax, dword [0x467970]
lea ecx, [eax + edx*2]
mov dword [0x467970], ecx
jmp 0x485e8b
test dword [esp + 0xc], edi
cmp esp, 0x4a58
jle 0x485fcf
jns 0x485fb2
lea eax, [eax + 0x6f80]
lea eax, [eax - 0x6f80]
jb 0x485fc0
lea ebx, [ebx + 0x523d]
lea ebx, [ebx - 0x523d]
jg 0x485fcf
jmp 0x4b6dbc
jmp case.0x485f4b.0
call 0x485fd9
add esp, 4
sub esp, 0
mov esp, esp
call 0x485fe6
add esp, 4
jns 0x485ffd
pushf
cmp esi, 0x73b4
shr esp, 0
popf
jo 0x485ffa
js 0x485ffd
mov ebp, 0x2dfe9
add cl, al
rol ecx, 0xe
ror ecx, 0xe
jmp case.0x485f4b.0
rol ecx, 0xe
ror ecx, 0xe
je 0x486025
pushf
rol edx, 8
ror edx, 8
test eax, edi
shl esp, 0
xor edx, dword [esp + 4]
xor edx, dword [esp + 4]
popf
nop
jne 0x486025
sub eax, 0x2b7e9
add byte [ecx + 0x4506fa], al
cmp edx, 0x4506
jp 0x48603f
jmp case.0x485f4b.0
cmp edx, 0x4506
jp 0x48603f
jno 0x486034
jmp 0x486036
lea esi, [esi]
jl 0x48603a
jnp 0x48603f
call 0x9e316d42
add al, byte [eax]
add byte [ebx], dh
leave
jmp case.0x485f4b.0
xor ecx, ecx
mov dword [ebp - 0x24], ecx
and ecx, 0xffff
mov eax, ecx
imul eax, ecx
imul eax, ecx
cmp eax, 0xd8
ja case.0x48606a.7
xor edx, edx
mov dl, byte [eax + 0x486400]
jmp dword [edx*4 + 0x4863e0]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
and eax, 0xffff
and ecx, 0xffff
lea edx, [ecx + eax*4]
inc word [ebp + edx*2 - 0xac]
lea eax, [ebp + edx*2 - 0xac]
rol edi, 0x12
ror edi, 0x12
std
cld
lea edi, [edi + 0x7746]
lea edi, [edi - 0x7746]
jo 0x4860b7
pushf
lea eax, [eax]
xchg edi, edi
popf
jge 0x4860b4
jno 0x4860b7
mov eax, 0x70858b66
invalid
mov ax, word [ebp - 0x90]
mov word [ebp - 0x96], ax
jmp case.0x48606a.7
mov eax, dword [ebp - 0x20]
mov ecx, 3
and eax, 0xffff
cdq
idiv ecx
mov dword [ebp - 0x2c], edx
xor eax, esi
xor eax, esi
lea ebx, [ebx + 0x14d0]
lea ebx, [ebx - 0x14d0]
stc
jae 0x4860fe
pushf
test dword [esp], edx
xchg ecx, ecx
popf
lea eax, [eax]
jb 0x4860fe
sub ecx, 0x160
jmp case.0x48606a.7
mov ecx, dword [ebp - 0x28]
xor edx, edx
and ecx, 0xffff
shl ecx, 2
lea esi, [ebp + ecx*2 - 0xac]
jne 0x48611a
test dword [esp + 4], esi
ror eax, 6
rol eax, 6
jge 0x48613c
pushf
cmp ecx, dword [esp + 0x10]
ror esp, 0
jmp 0x486131
popf
jns 0x486135
jbe 0x486137
jo 0x486139
jl 0x48613c
ljmp 0xffff:0x25d4458b
mov eax, dword [ebp - 0x2c]
and eax, 0xffff
add eax, ecx
mov ax, word [ebp + eax*2 - 0xac]
cmp ax, word [esi]
jbe 0x486156
mov dword [ebp - 0x2c], edx
inc edx
add esi, 2
cmp dx, 3
jb 0x486118
jmp case.0x48606a.7
mov eax, dword [ebp - 0x20]
mov ecx, 9
and eax, 0xffff
cdq
idiv ecx
mov eax, 0x55555556
mov ecx, edx
mov dword [ebp - 0x20], edx
and ecx, 0xffff
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [ebp - 0x28], edx
test esp, 0x5460
lea ecx, [ecx]
call 0x48619e
lea esp, [esp + 4]
jle 0x4861b2
xchg ebx, edi
xchg ebx, edi
jp 0x4861aa
jb 0x4861ac
jb 0x4861ae
jg 0x4861b2
mov eax, 0xace988
add byte [eax], al
jmp case.0x48606a.7
mov eax, dword [ebp - 0x20]
mov ecx, 9
and eax, 0xffff
cdq
idiv ecx
cmp edx, 8
ja case.default.0x4861cc
jmp dword [edx*4 + 0x4864dc]
mov edx, dword [ebp - 0x2c]
xor eax, eax
and edx, 0xffff
lea ecx, [ebp + edx*2 - 0xac]
call 0x4861ea
add esp, 4
call 0x4861f2
lea esp, [esp + 4]
clc
lea esi, [esi + 0x3728]
lea esi, [esi - 0x3728]
jae 0x48620c
lea esi, [esi]
xchg esi, esi
jb 0x48620c
mov eax, 0x81d8758b
out 0xff, al
inc dword [eax]
add byte [ebp - 0x74994dcc], cl
mov ah, 0x75
push esp
invalid
mov esi, dword [ebp - 0x28]
and esi, 0xffff
lea esi, [edx + esi*4]
mov si, word [ebp + esi*2 - 0xac]
cmp si, word [ecx]
jbe 0x486228
mov dword [ebp - 0x28], eax
inc eax
add ecx, 8
cmp ax, 3
jb 0x4861e5
jmp case.0x48606a.7
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
lea ecx, [edx + eax*2]
add eax, ecx
mov dword [ebp - 0x20], eax
mov esp, esp
shl ebx, 0
je 0x48625c
pushf
nop
ror esi, 1
ror esi, 0x1f
popf
jle 0x486255
ja 0x486257
jb 0x486259
jne 0x48625c
xor eax, 0x70858966
invalid
mov word [ebp - 0x90], ax
mov ecx, dword [ebp - 0x24]
inc ecx
cmp cx, 7
mov dword [ebp - 0x24], ecx
jb 0x486049
jmp case.0x4861cc.1
shl edi, 0
jnp 0x486291
pushf
and eax, 0xffffffff
and ebx, ebx
shr esp, 0
jno 0x48628a
popf
lea ecx, [ecx]
jp 0x486291
mov ebx, 0xfff6d8e9
invalid
jmp case.0x4861cc.1
stc
jnp 0x4862ae
pushf
xor eax, 0x24ef
xor eax, 0x24ef
popf
nop
lea esp, [esp]
jp 0x4862ae
ljmp 0xc79:0x90905f57
push edi
pop edi
nop
nop
jns 0x4862c0
mov ecx, ecx
jne 0x4862b8
jle 0x4862ba
mov edi, edi
js 0x4862c0
mov ecx, 0xec8362
sub esp, 0
sub esp, 0
jno 0x4862dc
jne 0x4862ca
jns 0x4862cc
lea ebx, [ebx + 0x46c1]
lea ebx, [ebx - 0x46c1]
nop
jo 0x4862dc
mov edi, 0xfff68de9
call dword [eax + 0x46a8b868]
nop
push 0x46a8b8
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp case.0x4861cc.1
nop
push 0x46a8b8
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
add esi, 0x71bf
ror esi, 0xc
pop esi
popf
jl 0x48f3d4
lea ecx, [ecx + 0x6d3e]
lea ecx, [ecx - 0x6d3e]
mov ecx, ecx
ja 0x48f3e5
add esi, 0x526fe145
mov byte [ebp - 0x1f], 0x6f
push edx
pop edx
lea eax, [eax + 0x43f6]
sub eax, 0x43f6
stc
lea ebx, [ebx + 0xf1f]
lea ebx, [ebx - 0xf1f]
jb 0x48f41c
pushf
neg esi
neg esi
nop
add ecx, dword [esp]
sub ecx, dword [esp]
popf
lea esp, [esp]
jg 0x48f419
jae 0x48f41c
xor eax, 0x57de45c6
mov byte [ebp - 0x22], 0x57
ja 0x48f422
or esp, 0
jle 0x48f427
jne 0x48f436
lea esp, [esp]
jp 0x48f42e
jo 0x48f430
xchg esi, esi
je 0x48f436
mov esp, 0xe645c6b2
ja 0x48f3c6
mov byte [ebp - 0x1a], 0x77
mov edx, edx
add ebx, dword [esp]
rol byte [ebx], cl
sbb al, 0x24
sub ebx, dword [esp]
call 0x48f447
lea esp, [esp + 4]
jbe 0x48f462
pushf
and eax, 0xffffffff
sub esp, 0
xchg ebx, eax
xchg ebx, eax
ja 0x48f459
popf
jb 0x48f45d
jae 0x48f45f
ja 0x48f462
ljmp 0xff0b:0x68e845c6
mov byte [ebp - 0x18], 0x68
or edi, edi
jns 0x48f47a
pushf
inc esi
dec esi
cld
popf
jle 0x48f473
ja 0x48f475
jbe 0x48f477
js 0x48f47a
mov edi, 0x69e445c6
mov byte [ebp - 0x1c], 0x69
lea ecx, [ecx + 0x4c5b]
lea ecx, [ecx - 0x4c5b]
and eax, eax
mov edi, edi
jo 0x48f499
mov ebx, ebx
ja 0x48f494
jo 0x48f496
jno 0x48f499
xor eax, 0x5cdc45c6
mov byte [ebp - 0x24], 0x5c
sub edx, 0
shr esp, 0
jae 0x48f4a5
jbe 0x48f4bd
pushf
shr edx, 0
add ebx, 0
and eax, 0xffffffff
jl 0x48f4b4
popf
ja 0x48f4b8
xchg edx, edx
ja 0x48f4bd
add esi, 0x8168e945
stc
push 0x5300002b
mov byte [ebp - 0x17], 0x68
cmp ecx, 0x2b68
push ebx
add ebx, 0x2daf
ror ebx, 0x17
pop ebx
jns 0x48f4df
mov eax, eax
jno 0x48f4d8
jg 0x48f4da
xchg esp, esp
js 0x48f4df
mov ecx, 0x64e745c6
mov byte [ebp - 0x19], 0x64
xor edx, 0
xchg esp, esp
je 0x48f4ea
jmp 0x48f4ec
jo 0x48f50e
pushf
lea ebx, [ebx + 0x5c62]
lea ebx, [ebx - 0x5c62]
xchg edx, esi
xchg edx, esi
shl esp, 0
popf
xchg edi, edi
xchg esi, esi
jl 0x48f50b
jno 0x48f50e
add eax, 0x77e545c6
mov byte [ebp - 0x1b], 0x77
and edx, 0xffffffff
inc ecx
dec ecx
jg 0x48f519
jbe 0x48f521
jge 0x48f51d
ja 0x48f521
call 0xe28ebb24
push 0xfb81007a
pushfd
cmp al, byte [eax]
add byte [ebx - 0xe78ff38], al
mov byte [ebp - 0x1e], 0x68
jp 0x48f527
cmp ebx, 0x3a9c
or eax, 0
xchg ecx, esi
xchg ecx, esi
ja 0x48f543
jae 0x48f538
jnp 0x48f53a
js 0x48f53c
jbe 0x48f53e
jbe 0x48f543
mov esp, 0x45c6b9d3
ljmp 0x7d
mov byte [ebp - 0x16], 0x46
rol esp, 0
jge 0x48f54c
jg 0x48f553
jp 0x48f550
jle 0x48f553
add eax, 0xfbea4580
add byte [ebp - 0x16], 0xfb
shr edx, 0
jg 0x48f570
pushf
sub edx, 0
jmp 0x48f563
test ecx, eax
popf
js 0x48f569
jbe 0x48f56b
jg 0x48f56d
jle 0x48f570
jmp 0x912a4372
dec byte [ebp - 0x1f]
nop
add esp, 0
nop
rol esp, 0
ja 0x48f586
xchg ecx, ecx
jp 0x48f581
jg 0x48f583
jbe 0x48f586
add eax, 0x79df4dfe
add cl, al
les eax, [eax]
dec byte [ebp - 0x21]
jns 0x48f58b
rol esp, 0
xchg edx, edx
jl 0x48f5a5
pushf
shl eax, 0
test ebx, eax
jns 0x48f59b
sub esp, 0
popf
xchg edx, edx
jge 0x48f5a5
lcall 0x7c33, 0xfedd4580
and al, 0x10
add byte [ebp - 0x23], 0xfe
xor edi, dword [esp + 0x10]
xor edi, dword [esp + 0x10]
lea eax, [eax + 0x3247]
lea eax, [eax - 0x3247]
xor ecx, edx
xor ecx, edx
js 0x48f5e0
pushf
xor ecx, dword [esp]
xor ecx, dword [esp]
and edi, 0xffffffff
ror eax, 0x1a
rol eax, 0x1a
popf
lea esp, [esp]
xchg esp, esp
jg 0x48f5dd
jns 0x48f5e0
xor eax, 0xb0e4558a
cld
mov dl, byte [ebp - 0x1c]
mov al, 0xfc
add dl, al
mov byte [ebp - 0x1c], dl
ror esp, 0
xchg edx, edx
add edi, dword [esp]
sub edi, dword [esp]
js 0x48f603
jp 0x48f5f9
lea ebx, [ebx]
mov esp, esp
jp 0x48f5ff
jns 0x48f603
mov eax, 0xe24500a2
add byte [ebp - 0x1e], al
jl 0x48f608
jp 0x48f60a
cmp ebx, dword [esp + 0xc]
stc
jno 0x48f61c
mov ecx, ecx
jno 0x48f615
nop
ja 0x48f618
jo 0x48f61c
mov edi, 0xe9458063
std
add byte [ebp - 0x17], 0xfd
add eax, 0
ror eax, 0x1f
rol eax, 0x1f
xor esp, 0
jp 0x48f64a
pushf
xchg esp, esp
test dword [esp + 0x10], edx
popf
lea esi, [esi]
lea edx, [edx + 0xef]
lea edx, [edx - 0xef]
nop
jnp 0x48f64a
mov edx, 0xfbe04580
add byte [ebp - 0x20], 0xfb
test dword [esp], ebx
jns 0x48f669
pushf
nop
jp 0x48f658
js 0x48f65a
cmp ecx, 0x3f8f
popf
jp 0x48f664
je 0x48f666
js 0x48f669
call 0xb2274bf7
cld
mov dl, byte [ebp - 0x22]
mov cl, 0xfc
add dl, cl
mov byte [ebp - 0x22], dl
add edx, dword [esp]
sub edx, dword [esp]
jl 0x48f67b
jb 0x48f67d
jns 0x48f68a
jbe 0x48f681
lea ebx, [ebx]
lea eax, [eax]
xchg esp, esp
js 0x48f68a
mov eax, 0x83e54d00
iretd
add byte [ebp - 0x1b], cl
or edi, 0
lea esi, [esi + 0x2603]
lea esi, [esi - 0x2603]
lea ecx, [ecx + 0x7b8a]
lea ecx, [ecx - 0x7b8a]
je 0x48f6b9
pushf
cmp ecx, esi
popf
jnp 0x48f6b2
xchg edi, edi
xchg edx, edx
jne 0x48f6b9
sub eax, 0xfde74580
add byte [ebp - 0x19], 0xfd
mov ebx, ebx
test eax, 0x5645
lea esp, [esp]
jno 0x48f6ce
xchg esi, esi
jo 0x48f6ce
mov eax, 0xfbdc4580
add byte [ebp - 0x24], 0xfb
test ecx, 0x1e7e
shr esp, 0
xchg ebx, ebx
jne 0x48f6df
jge 0x48f6e8
je 0x48f6e3
jle 0x48f6e5
jl 0x48f6e8
xor eax, 0x8be84dfe
sar byte [ebx + ebx + 0x66], 0x9c
dec byte [ebp - 0x18]
mov eax, eax
jl 0x48f70a
pushf
std
cld
rol esi, 0xb
rol esi, 0x15
jae 0x48f6fb
cmp esp, 0x4338
popf
xchg esp, esp
mov ecx, ecx
jge 0x48f70a
mov eax, 0xb2e6458a
cld
mov al, byte [ebp - 0x1a]
mov dl, 0xfc
add al, dl
mov byte [ebp - 0x1a], al
jns 0x48f716
lea eax, [eax]
nop
and ecx, ecx
jp 0x48f73a
pushf
xor ebx, 0x1892
xor ebx, 0x1892
jns 0x48f72d
ror ecx, 5
rol ecx, 5
popf
jne 0x48f737
jnp 0x48f73a
ljmp 0xe4:0xc1e35500
add byte [ebp - 0x1d], dl
shl esp, 0
sub edi, 0
nop
jb 0x48f757
pushf
jo 0x48f74a
test edi, edx
popf
jp 0x48f750
jg 0x48f752
jae 0x48f754
jae 0x48f757
xor eax, 0x8dfc4d8b
inc ebp
fcom qword [eax + 0x51]
mov ecx, dword [ebp - 4]
lea eax, [ebp - 0x24]
push eax
push ecx
call fcn.00481320
push 0x10
lea edx, [ebp - 0x24]
push 0
push edx
mov esi, eax
call fcn.00474b40
add esp, 0xc
test dword [esp + 0xc], ebx
jo 0x48f796
pushf
rol ebx, 0x13
rol ebx, 0xd
jae 0x48f786
cld
neg edx
neg edx
popf
jl 0x48f78f
jo 0x48f791
jmp 0x48f793
jno 0x48f796
mov ecx, 0xb75f685
test esi, esi
jne 0x48f7a5
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x28
je 0x48f7a7
shr esp, 0
or edx, edx
rol edx, 0x18
ror edx, 0x18
js 0x48f7be
jnp 0x48f7b6
jge 0x48f7b8
xchg ecx, ecx
jns 0x48f7be
mov esi, 0xfce85656
or edi, edi
inc dword [ebx - 0x1b78fb3c]
push esi
call fcn.004801c0
add esp, 4
xchg esp, esp
mov ebx, ebx
jp 0x48f7e0
pushf
rol esp, 0
mov ecx, ecx
xor esp, 0
popf
jg 0x48f7db
ja 0x48f7dd
jnp 0x48f7e0
add eax, 0x8b2c458b
dec ebp
sub byte [ebx - 0x74afdbab], cl
inc ebp
and byte [ecx - 0x75], dl
dec ebp
sbb al, 0x52
mov eax, dword [ebp + 0x2c]
mov ecx, dword [ebp + 0x28]
mov edx, dword [ebp + 0x24]
push eax
mov eax, dword [ebp + 0x20]
push ecx
mov ecx, dword [ebp + 0x1c]
push edx
mov edx, dword [ebp + 0x18]
push eax
mov eax, dword [ebp + 0x14]
push ecx
mov ecx, dword [ebp + 0x10]
push edx
mov edx, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push ecx
push edx
push eax
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x28
adc byte [eax], dh
ret
xchg ah, dh
dec esp
pushal
outsb dx, byte [esi]
sbb dl, byte [esi]
loope 0x4b6d8c
aas
add eax, 0x48b3601d
pushal
mov bl, 0x48
lds edi, [eax + 0x60]
rcl byte [ebx + 0x7c], 0x71
jl 0x4b6d83
cld
mov al, 2
or byte [ebp - 0x5d], cl
sar byte [edx], cl
mov al, byte [esi + 0x32b9744e]
ffreep st(2)
invalid
loopne 0x4b6d08
sbb byte [ecx - 0x68], 0x28
imul byte [ecx + 0x6c]
mov eax, 0x38fc198a
mov byte [0x7ba9121a], al
or byte [edx], ah
cmp eax, 0xc9b02ebf
je 0x4b6d12
cdq
push ss
sbb dword [ebx], edx
test ebx, ebx
jecxz 0x4b6dba
inc esi
mov esi, 0x216a348
sahf
loopne 0x4b6d1e
wait
and dword [ecx], eax
mov bh, 0xc4
daa
sal byte [ebx + 0x49], 0xab
mov al, 0xc5
not dword fs:[edi + 0x54dfb44a]
aam 0x27
adc eax, 0x89f5c658
inc ebp
adc dword [ecx + 0x3158c61d], 0x1aaed55b
sub byte [ecx], ch
mov esi, 0xeb36bd79
sbb eax, 0x5b3158c6
aad 0xae
pop eax
xor dword [ebx - 0x2b], ebx
scasb al, byte es:[edi]
sbb ch, byte [eax]
sub dword [esi - 0x14c94287], edi
std
nop
push esp
inc ebp
loopne 0x4b6d6d
pop esp
out 0xbf, al
aaa
fsubr st(5)
xchg ebp, eax
retf