Function at 0x434e80
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2b0
push ebx
push esi
push edi
mov dword [ebp - 0x2a0], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x1bc], 4
mov eax, dword [ebp + 8]
mov dword [0x4220d4], eax
cmp dword [0x421860], 0
je 0x430657
cmp dword [ebp + 0xc], 0
jne 0x430657
cmp dword [0x4283fc], 0
je 0x430657
push 0x426d3c
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x426710], eax
mov ecx, dword [0x4283fc]
push ecx
call fcn.0042c845
cmp dword [0x428a38], 0
je 0x430665
jmp 0x434db8
mov edx, dword [0x428a38]
add edx, 1
mov dword [0x428a38], edx
and eax, eax
inc ebx
dec ebx
jo 0x43069a
pushf
std
cld
add esp, 0
mov eax, eax
lea edi, [edi + 0x473b]
lea edi, [edi - 0x473b]
popf
js 0x430693
jmp 0x430695
mov ecx, ecx
jno 0x43069a
mov esi, 0x6808ec83
mov dl, byte [edi + 0x43]
add byte [edi + edi*8 + 0x35], ah
add byte [eax], al
add byte [eax], al
sub esp, 8
push 0x43578a
push dword fs:[0]
mov dword fs:[0], esp
jns 0x4306b2
lea edx, [edx]
and esi, 0xffffffff
je 0x4306d8
pushf
add edx, 0x6f19
sub edx, 0x6f19
shr esp, 0
xor edx, 0
cmp esi, dword [esp]
popf
jno 0x4306d4
nop
jne 0x4306d8
mov esp, 0x8368e8
add cl, bh
call fcn.00438a45
stc
cmp ecx, eax
cmc
jnp 0x4306e3
jne 0x4306f1
pushf
and esp, 0xffffffff
popf
xchg edi, eax
xchg edi, eax
je 0x4306f1
mov eax, 0x83cc05c7
inc edx
add byte [ecx], al
add byte [eax], al
add byte [ebp - 0x72e98e02], al
mov dword [esi], edi
outsd dx, dword [esi]
add byte [eax], al
mov dword [0x4283cc], 1
test esi, edi
jno 0x430715
lea ecx, [ecx + 0x6f3e]
lea ecx, [ecx - 0x6f3e]
xchg esp, esp
jmp 0x43070f
jo 0x430711
jo 0x430715
call 0x8133c00c
inc ecx
add byte [section.0000004], ch
mov eax, 0x4180f0
sub eax, section.0000004
mov dword [0x426f74], eax
push edi
add edi, 0x3617
ror edi, 0xa
pop edi
jg 0x430741
pushf
nop
neg edx
neg edx
popf
mov esp, esp
jp 0x43073e
jle 0x430741
mov ecx, 0x6f740d8b
inc edx
add byte [ecx + 0x7e1], al
cmp byte [ecx + 5], 0x49
mov ecx, dword [0x426f74]
and ecx, 0x80000007
jns 0x430754
dec ecx
or ecx, 0xfffffff8
inc ecx
mov edx, dword [0x426f74]
sub edx, ecx
mov dword [0x426f74], edx
shl edi, 0
jp 0x430778
pushf
cmc
jb 0x43076c
or esp, 0
popf
jbe 0x430773
jns 0x430775
jnp 0x430778
mov esp, 0x7a5fe8
add byte [edx], dh
call 0x4381dc
jb 0x43077f
cmp edx, 0x3be8
ja 0x43079e
pushf
test eax, esi
xchg esi, edx
xchg esi, edx
rol eax, 0x19
rol eax, 7
popf
js 0x430799
jg 0x43079b
jbe 0x43079e
call 0x42b0540a
add bh, bh
adc eax, sym.imp.KERNEL32.dll_LoadLibraryA
push 0x426d4c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x426d58
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x426d64
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x426d74
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x426d80
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x426d8c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x426d98
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x426da8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x426db8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x426dc8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x426dd4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x426de4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x426df0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea ecx, [ecx]
jp 0x43083c
jnp 0x430833
jne 0x430835
nop
jle 0x430838
jnp 0x43083c
jmp 0xe370f0dd
call 0x42eb6e
js 0x430843
jl 0x430845
shr esp, 0
jp 0x43084f
je 0x43084c
jnp 0x43084f
mov ebp, 0x424b94a1
add byte [ebx + 0x421fd4], ah
mov eax, dword [0x424b94]
mov dword [0x421fd4], eax
rol esp, 0
jns 0x43085e
xor ecx, dword [esp]
xor ecx, dword [esp]
jne 0x43086d
xchg edi, ebx
xchg edi, ebx
je 0x43086d
xor eax, 0x4b980d8b
inc edx
add byte [ecx + 0x4218100d], cl
add ch, dh
mov ecx, dword [0x424b98]
mov dword [0x421810], ecx
cmc
jge 0x430885
jmp 0x43087e
jbe 0x430880
mov esi, esi
jl 0x430885
or dword [ebx + 0x424b9c15], 0x14158900
sbb byte [edx], al
mov edx, dword [0x424b9c]
mov dword [0x421814], edx
not edx
not edx
jb 0x43089c
lea ebx, [ebx]
jae 0x43089c
mov ebp, 0xa068406a
dec ebx
inc edx
add byte [eax + 0x18], ch
sbb byte [edx], al
push 0x40
push 0x424ba0
push 0x421818
call fcn.00437091
add esp, 0xc
mov edi, edi
jns 0x4308bb
jns 0x4308b6
xchg ebx, ebx
js 0x4308bb
and dword [ecx + 0x424be0], 0x422084a3
add byte [ebp + 0x7e08245c], al
add byte [ecx + 6], bh
mov eax, dword [0x424be0]
mov dword [0x422084], eax
test dword [esp + 8], ebx
jle 0x4308cb
jns 0x4308d3
mov esp, esp
js 0x4308d3
or dword [edx + 0x4be40d8b], 0xd890042
mov byte [eax], ah
inc edx
add byte [eax + eax + 0x71], bh
add byte [ebx + 5], dh
mov ecx, dword [0x424be4]
mov dword [0x422088], ecx
jl 0x4308e1
jno 0x4308e3
jae 0x4308ea
jne 0x4308e7
jb 0x4308ea
ljmp 0x42:0x4be8158b
mov edx, dword [0x424be8]
mov dword [0x42208c], edx
xor esp, 0
or edx, 0
neg esi
neg esi
test esp, 0x6013
jp 0x43091d
pushf
inc eax
dec eax
jae 0x43090e
jge 0x430910
xchg edi, edi
popf
js 0x430916
jle 0x430918
jnp 0x43091a
jnp 0x43091d
mov eax, 0x424beca1
add byte [ebx + 0x422090], ah
mov eax, dword [0x424bec]
mov dword [0x422090], eax
mov ecx, dword [0x425244]
mov dword [0x4220b0], ecx
mov edx, dword [0x425248]
mov dword [0x4220b4], edx
mov eax, dword [0x41c60c]
mov dword [0x4220b8], eax
mov ecx, dword [0x41c610]
mov dword [0x4220bc], ecx
shr esp, 0
jns 0x430967
xchg esp, esp
xchg edi, edi
mov ebx, ebx
xchg ecx, edx
xchg ecx, edx
js 0x430967
add eax, 0x1a57ce8
add byte [ebx + 0x428a10], ah
call 0x44aee8
mov dword [0x428a10], eax
push 0x94
push 0
push 0x421868
call fcn.0044f4cd
add esp, 0xc
rol ecx, 0
and ebx, ebx
lea ebx, [ebx + 0x5e83]
lea ebx, [ebx - 0x5e83]
and esi, esi
jno 0x4309a4
jno 0x43099c
xchg ebx, ecx
xchg ebx, ecx
jo 0x4309a4
mov edi, 0x6805c7d6
sbb byte [edx], al
xchg esp, eax
add byte [eax], al
add byte [ebx + 0xc283e4], cl
mov dword [0x421868], 0x94
mov esp, esp
add edx, 0
push eax
add eax, 0x3230
ror eax, 4
pop eax
je 0x4309c7
jnp 0x4309c1
mov eax, eax
jne 0x4309c7
sub eax, 0x18686811
inc edx
add al, ch
inc ecx
cmp byte [edx], al
add byte [ebx + 0x7000ec], al
push 0x421868
call 0x454212
sub esp, 0
jo 0x4309d6
jbe 0x4309e2
xchg esp, esp
jns 0x4309dc
jno 0x4309de
ja 0x4309e2
lcall 0, 0x9c6860
push 0x9c
push 0
push 0x421a10
call fcn.0044f4cd
add esp, 0xc
shr esp, 0
jo 0x430a02
jbe 0x4309fd
jp 0x4309ff
jno 0x430a02
mov ebp, 0x1a1005c7
inc edx
add byte [eax + eax + 0x1c330000], bl
and al, 0x33
sbb al, 0x24
mov dword [0x421a10], 0x9c
xor ebx, dword [esp]
xor ebx, dword [esp]
lea ecx, [ecx + 0x198b]
lea ecx, [ecx - 0x198b]
jns 0x430a20
jbe 0x430a40
pushf
jge 0x430a26
call 0x430a2b
lea esp, [esp + 4]
ror edi, 0xa
rol edi, 0xa
test dword [esp + 4], esi
popf
xchg ebx, ebx
ja 0x430a40
mov ecx, 0x421a1068
add al, ch
enter 0x237, 0
push 0x421a10
call 0x454212
shr esp, 0
cmp ecx, dword [esp + 4]
jns 0x430a5e
pushf
push edi
pop edi
popf
lea esi, [esi]
js 0x430a5e
sub eax, 0x11468
add byte [edx], ch
push 0x114
push 0
push 0x4218fc
call fcn.0044f4cd
add esp, 0xc
test dword [esp + 0xc], ebx
jl 0x430a8c
lea esi, [esi + 0x37f5]
lea esi, [esi - 0x37f5]
mov ecx, ecx
mov esp, esp
jge 0x430a8c
jmp 0xfc48d254
mov dword [0x4218fc], 0x114
call 0x430a9b
add esp, 4
jle 0x430aa9
mov esp, esp
jle 0x430aa4
jbe 0x430aa6
jg 0x430aa9
mov ebx, 0x4218fc68
add al, ch
xlatb
sbb al, 2
add byte [ebp - 0x163edbc4], al
add byte [edx + 0xd], bh
push 0x4218fc
call 0x45278a
test dword [esp], edi
shr ecx, 0
jp 0x430ac8
pushf
mov eax, eax
popf
xchg edx, ecx
xchg edx, ecx
jnp 0x430ac8
mov edi, 0x11c68
add byte [edx], ch
push 0x11c
push 0
push 0x421aac
call fcn.0044f4cd
add esp, 0xc
ror eax, 0
and esi, esi
xchg edi, edi
jno 0x430aec
jmp 0x430ae7
xchg edi, edi
jo 0x430aec
sub eax, 0x1aac05c7
inc edx
add byte [ecx + eax], bl
add byte [eax], al
mov dword [0x421aac], 0x11c
xchg ebx, edi
xchg ebx, edi
jb 0x430b01
js 0x430afe
jae 0x430b01
mov ebx, 0x421aac68
add al, ch
jg 0x430b25
push 0x421aac
call 0x45278a
add al, byte [eax]
push ecx
add ecx, 0x7a14
ror ecx, 5
pop ecx
xchg edx, esi
xchg edx, esi
ror ebx, 0
js 0x430b35
pushf
jb 0x430b23
jge 0x430b25
jbe 0x430b27
nop
popf
jnp 0x430b2c
lea ebx, [ebx]
xchg edx, ecx
xchg edx, ecx
jns 0x430b35
mov ebx, 0x1f4c9e8
add byte [ebx + 0x421bc8], ah
call 0x450003
mov dword [0x421bc8], eax
not edx
not edx
cmp ecx, eax
push edx
add edx, 0x2c35
ror edx, 0x15
pop edx
jl 0x430b63
pushf
lea edi, [edi]
jge 0x430b58
popf
jo 0x430b5c
jno 0x430b5e
jg 0x430b60
jge 0x430b63
mov ebx, 0x15a6fe8
add byte [ebx + 0x421bcc], ah
call 0x4465d7
mov dword [0x421bcc], eax
cmp edi, eax
js 0x430b71
jp 0x430b7f
lea esp, [esp]
xchg esp, esp
jl 0x430b7a
jmp 0x430b7c
jnp 0x430b7f
mov esi, 0x92e8006a
lahf
add dword [eax], eax
push 0
call 0x44ab18
mov dword [0x421bd0], eax
jb 0x430b8d
jae 0x430b8f
jbe 0x430b91
jge 0x430ba1
pushf
xchg edi, eax
xchg edi, eax
shr edi, 0
popf
jp 0x430b9e
jl 0x430ba1
sub dword [edx], 0x241dce8
add byte [ebx + 0x421bd4], ah
push 0
call 0x454d84
mov dword [0x421bd4], eax
nop
jmp 0x430bb0
test edi, ecx
call 0x430bb7
add esp, 4
jo 0x430bc3
jnp 0x430bbe
jbe 0x430bc0
jno 0x430bc3
mov esi, 0x10468
add byte [eax - 0x28], ch
sbb eax, dword [edx]
push 0x104
push 0x421bd8
push 0
call fcn.00439fcc
mov dword [0x421cdc], eax
stc
jg 0x430bdc
xor eax, 0
jbe 0x430be8
jp 0x430be3
jg 0x430be5
ja 0x430be8
add eax, 0x10468
add byte [eax - 0x20], ch
sbb al, 0x42
add byte [edx], ch
push 0x104
push 0x421ce0
push 0
call fcn.004571ba
mov dword [0x421ee8], eax
nop
or ebx, ebx
jns 0x430c03
jge 0x430c28
pushf
lea ebx, [ebx + 0x7758]
lea ebx, [ebx - 0x7758]
js 0x430c15
test esp, 0x3371
ror esi, 0xa
ror esi, 0x16
popf
xchg esp, esp
jl 0x430c28
call 0x1e77214
add byte [ebx + 0x421eec], ah
call 0x44b092
mov dword [0x421eec], eax
rol edx, 0x13
ror edx, 0x13
xor ebx, eax
xor ebx, eax
test dword [esp + 0xc], eax
jb 0x430c5b
pushf
and edi, edi
cmp esp, 0x4001
nop
and esp, 0xffffffff
popf
xchg esp, esp
xchg esi, esi
jnp 0x430c58
jae 0x430c5b
sub eax, 0x1adb0e8
add byte [ebx + 0x421ef0], ah
call 0x44ba10
mov dword [0x421ef0], eax
and edx, 0xffffffff
ja 0x430c7b
pushf
xor edx, esi
xor edx, esi
popf
mov ecx, ecx
xchg ecx, eax
xchg ecx, eax
jne 0x430c78
jbe 0x430c7b
mov ebx, 0x1bb7de8
add byte [ebx + 0x421ef4], ah
call 0x44c7fd
mov dword [0x421ef4], eax
xor esp, 0
jns 0x430c90
jnp 0x430c8c
js 0x430c90
sub eax, 0xe8f66a02
mov ah, 0xc4
invalid
push 0xfffffffffffffff6
call 0x42d14b
mov dword [0x421ef8], eax
ja 0x430c9e
cmp ebx, dword [esp]
xor ebx, 0
jno 0x430cbe
pushf
xchg edi, edi
jnp 0x430cac
call 0x430cb1
lea esp, [esp + 4]
popf
mov eax, eax
jbe 0x430cbb
jo 0x430cbe
mov esp, 0x86e8f56a
invalid
push 0xfffffffffffffff5
call 0x42d14b
mov dword [0x421efc], eax
jns 0x430ccc
cmp edx, dword [esp]
ja 0x430cd6
jae 0x430cd3
jbe 0x430cd6
mov edi, 0x6ee8f46a
invalid
push 0xfffffffffffffff4
call 0x42d14b
mov dword [0x421f00], eax
cmp edx, dword [esp]
jae 0x430ce7
jle 0x430cfc
pushf
sub esp, 0
jle 0x430cf0
cmp eax, dword [esp + 0xc]
popf
nop
js 0x430cf9
jg 0x430cfc
mov esi, 0x6841e8
add byte [ebx + 0x421f04], ah
call 0x437542
mov dword [0x421f04], eax
add edx, 0x7bbb
sub edx, 0x7bbb
jb 0x430d14
jle 0x430d16
jbe 0x430d18
jns 0x430d2d
pushf
clc
jo 0x430d1f
lea eax, [eax]
popf
jno 0x430d25
jb 0x430d27
lea esp, [esp]
js 0x430d2d
mov ebx, 0x421f0c68
add al, ch
lcall 0xe8f6, 0xb000156
add byte [eax], al
add byte [eax], al
push 0x421f0c
call 0x4463d1
or esi, esi
call 0x430d3e
add esp, 4
jp 0x430d43
jnp 0x430d56
pushf
ja 0x430d49
jge 0x430d4b
popf
jne 0x430d4f
jmp 0x430d51
jle 0x430d53
jp 0x430d56
mov ebx, 0x421f5068
add al, ch
adc dword [ecx + eax], 0xc100c4c1
loopne 0x430d66
push 0x421f50
call 0x4461e1
rol esp, 0
shl eax, 0
jg 0x430d6f
mov esp, esp
mov esp, esp
jle 0x430d6f
mov ebp, 0x12a25e8
add byte [esi - 0x5d], ah
mov eax, 0x7400421f
add byte [eax + eax - 0x7f], bh
div byte [ebp - 0x7effffda]
div byte [ebp - 0x72ffffda]
mov edi, 0x1234
call 0x443799
mov word [0x421fb8], ax
je 0x430d7c
jl 0x430d7e
xor esi, 0x26b5
xor esi, 0x26b5
lea edi, [edi + 0x1234]
lea edi, [edi - 0x1234]
jns 0x430d9d
jle 0x430d9a
js 0x430d9d
add eax, 0x151fce8
add byte [ebx + 0x421fbc], ah
call 0x445f9e
mov dword [0x421fbc], eax
call 0x430dac
lea esp, [esp + 4]
nop
lea esp, [esp]
jl 0x430db6
jae 0x430dbe
lea esp, [esp]
jb 0x430dbe
add eax, 0x13bdee8
add byte [esi - 0x5d], ah
rcr byte [edi], 0x42
add byte [ecx], dh
call 0x4449a1
mov word [0x421fc0], ax
jno 0x430dcb
jno 0x430dd6
lea esp, [esp]
xchg ecx, ecx
jo 0x430dd6
mov esp, 0x6eb1e890
add byte [eax], al
call 0x437c8c
mov dword [0x421fc4], eax
push 0x24
push 0
push 0x421f94
call fcn.0044f4cd
add esp, 0xc
push 0x421f94
call fcn.00458bc6
call fcn.00438155
test eax, eax
je 0x430e28
cmp dword [0x421fac], 0x182
je 0x430e1c
cmp dword [0x421fac], 0x1e6
jne 0x430e26
mov dword [0x428a3c], 1
jmp 0x430e58
xor edx, edx
mov dx, word [0x421f94]
test edx, edx
jne 0x430e4e
xor eax, eax
mov ax, word [0x421fb4]
cmp eax, 5
jge 0x430e4c
mov dword [0x428a3c], 1
jmp 0x430e58
mov dword [0x428a3c], 1
mov ecx, dword [0x428a3c]
mov dword [0x421fcc], ecx
push 0x190
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
mov dword [0x4220d8], eax
push 0x190
push 0
mov edx, dword [0x4220d8]
push edx
call fcn.0044f4cd
add esp, 0xc
cmp dword [0x42527c], 1
jne 0x430fc4
push 5
push 0x426dfc
push 0x42525c
call fcn.0045870f
add esp, 0xc
test eax, eax
jne 0x430f0e
push 0xa
call fcn.0044a35e
add esp, 4
test eax, eax
jne 0x430f09
push 0xb
call fcn.0044a35e
add esp, 4
test eax, eax
jne 0x430f09
push 0x14
call fcn.0044a35e
add esp, 4
test eax, eax
jne 0x430f09
mov dword [0x428aa0], 0x23
mov dword [0x428a34], 0x13
mov dword [0x42880c], 1
mov dword [0x4283d0], 1
jmp 0x434e80
jmp 0x430fc4
push 5
push 0x426e04
push 0x42525c
call fcn.0045870f
add esp, 0xc
test eax, eax
jne 0x430f71
push 0xb
call fcn.0044a35e
add esp, 4
test eax, eax
jne 0x430f6f
push 0x14
call fcn.0044a35e
add esp, 4
test eax, eax
jne 0x430f6f
mov dword [0x428aa0], 0x23
mov dword [0x428a34], 0x13
mov dword [0x42880c], 1
mov dword [0x4283d0], 1
jmp 0x434e80
jmp 0x430fc4
push 5
push 0x426e0c
push 0x42525c
call fcn.0045870f
add esp, 0xc
test eax, eax
jne 0x430fc4
push 0x14
call fcn.0044a35e
add esp, 4
test eax, eax
jne 0x430fc4
mov dword [0x428aa0], 0x23
mov dword [0x428a34], 0x13
mov dword [0x42880c], 1
mov dword [0x4283d0], 1
jmp 0x434e80
js 0x430fc6
neg esi
neg esi
jp 0x430fe9
pushf
jg 0x430fd0
jo 0x430fd2
xor ecx, edx
xor ecx, edx
add esi, 0x4739
sub esi, 0x4739
popf
xchg ebx, eax
xchg ebx, eax
jnp 0x430fe9
mov ecx, 0x6a2f6a
push 0x2f
push 0
lea eax, [ebp - 0x1ec]
push eax
call fcn.0044f4cd
add esp, 0xc
xor esp, 0
xchg edi, ecx
xchg edi, ecx
ja 0x431017
pushf
jne 0x431009
shl esi, 0
popf
jmp 0x431010
lea ebx, [ebx]
je 0x431014
jbe 0x431017
add eax, 0xfe3785c6
invalid
mov byte [ebp - 0x1c9], 0x54
push esi
pop esi
push esi
add esi, 0x2eda
ror esi, 0x17
pop esi
lea esi, [esi + 0x2600]
lea esi, [esi - 0x2600]
test esp, 0x413
jg 0x431044
mov edx, edx
jle 0x431044
xor eax, 0xfe3385c6
invalid
mov byte [ebp - 0x1cd], 0x78
cmp edi, 0x7e34
jl 0x431053
jne 0x431055
or esp, 0
je 0x431067
jmp 0x43105c
je 0x43105e
jae 0x431060
lea ebx, [ebx]
jne 0x431067
xor eax, 0x85c62f93
cmp al, 0xfe
invalid
mov byte [ebp - 0x1c4], 0x75
xchg ebx, esi
xchg ebx, esi
shl eax, 0
je 0x43108a
pushf
shl esp, 0
or edx, 0
jae 0x431081
popf
xchg edi, edi
xchg edi, eax
xchg edi, eax
jne 0x43108a
mov ebp, 0xfe1c85c6
invalid
mov byte [ebp - 0x1e4], 0x5e
rol edx, 2
ror edx, 2
js 0x4310ac
lea edi, [edi + 0x2136]
lea edi, [edi - 0x2136]
jmp 0x4310a7
jno 0x4310a9
jns 0x4310ac
mov edx, 0xfe3f85c6
invalid
mov byte [ebp - 0x1c1], 0x75
stc
test eax, edi
or esi, 0
push eax
pop eax
je 0x4310ce
pushf
shr edi, 0
lea esp, [esp]
popf
ja 0x4310c9
mov ebx, ebx
jne 0x4310ce
add eax, 0xfe2585c6
invalid
mov byte [ebp - 0x1db], 0x4d
jnp 0x4310d7
ja 0x4310ee
pushf
jle 0x4310dd
jg 0x4310df
xor ecx, eax
xor ecx, eax
popf
nop
ja 0x4310e8
lea esp, [esp]
jbe 0x4310ee
add eax, 0xfe3a85c6
invalid
mov byte [ebp - 0x1c6], 0x64
xor esp, 0
jno 0x4310fa
ja 0x431106
xchg esp, esp
jmp 0x431100
mov eax, eax
jbe 0x431106
xor eax, 0x1885c665
invalid
mov byte [ebp - 0x1e8], 0x5a
push edx
add edx, 0xb2b
ror edx, 9
pop edx
je 0x43111a
jg 0x431131
xchg ebx, ebx
mov esp, esp
jnp 0x431122
lea esi, [esi + 0x69e6]
lea esi, [esi - 0x69e6]
jle 0x431131
ljmp 0xffff:0xfe1485c6
mov byte [ebp - 0x1ec], 0x4c
xchg esi, edi
xchg esi, edi
add edx, 0x638f
sub edx, 0x638f
jne 0x431169
jnp 0x43114c
lea ebx, [ebx + 0x7890]
lea ebx, [ebx - 0x7890]
lea eax, [eax + 0x4e5e]
lea eax, [eax - 0x4e5e]
jg 0x431166
je 0x431169
add eax, 0xfe2e85c6
invalid
mov byte [ebp - 0x1d2], 0x70
lea esp, [esp]
ror ecx, 0x12
ror ecx, 0xe
xor edx, dword [esp + 0xc]
xor edx, dword [esp + 0xc]
and edx, edx
jnp 0x431199
pushf
ror edi, 0x17
rol edi, 0x17
jns 0x43118f
ror esp, 0
popf
mov ecx, ecx
jp 0x431199
jmp 0xfe5a9763
mov byte [ebp - 0x1e9], 0x48
shr esp, 0
jno 0x4311aa
xchg ecx, eax
xchg ecx, eax
jo 0x4311aa
mov edx, 0xfe3085c6
invalid
mov byte [ebp - 0x1d0], 0x47
rol ebx, 5
rol ebx, 0x1b
jns 0x4311c1
jo 0x4311bb
jmp 0x4311bd
nop
js 0x4311c1
add esi, 0xfffe4185
push dword [edx]
mov byte [ebp - 0x1bf], 0x32
ja 0x4311ca
jle 0x4311d9
jmp 0x4311ce
jno 0x4311d0
xchg esi, edx
xchg esi, edx
jg 0x4311d9
mov ebx, 0x85c68105
sub dh, bh
invalid
mov byte [ebp - 0x1d8], 0x61
or esi, 0
xor esp, 0
xchg ecx, edi
xchg ecx, edi
add ecx, 0
je 0x431204
pushf
lea ebx, [ebx + 0x124a]
sub ebx, 0x124a
popf
jns 0x431201
jne 0x431204
lcall 0xffff, 0xfe3e85c6
je 0x43127c
mov byte [ebp - 0x1c2], 0x74
jo 0x43120d
add byte [ebx + 9], bh
jnp 0x431218
ja 0x431211
je 0x431213
jp 0x431215
jp 0x431218
add eax, 0xfe3d85c6
invalid
mov byte [ebp - 0x1c3], 0x77
jae 0x431221
js 0x431242
pushf
neg ecx
neg ecx
lea edx, [edx + 0x52b3]
lea edx, [edx - 0x52b3]
push ecx
pop ecx
xchg esp, esp
popf
jp 0x43123d
jp 0x43123f
jns 0x431242
mov esi, 0xfe1a85c6
invalid
mov byte [ebp - 0x1e6], 0x56
or esp, 0
lea esp, [esp]
mov ecx, ecx
mov esp, esp
je 0x431260
xchg ebx, ebx
jl 0x431259
jno 0x43125b
jne 0x431260
adc dword [eax], 0x1f85c640
invalid
mov byte [ebp - 0x1e1], 0x55
xor eax, 0x859
xor eax, 0x859
cmp ecx, 0x725f
std
cld
mov ecx, ecx
je 0x431298
sbb esp, dword [esi - 0x64]
pushf
push edx
add edx, 0x4030
ror edx, 5
pop edx
shr esp, 0
dec esi
inc esi
mov esp, esp
popf
jge 0x431295
jne 0x431298
jmp 0xfe709862
mov byte [ebp - 0x1d3], 0x66
add edi, dword [esp]
sub edi, dword [esp]
xchg esi, esi
xor eax, dword [esp]
xor eax, dword [esp]
lea eax, [eax + 0x404d]
lea eax, [eax - 0x404d]
jno 0x4312c4
jge 0x4312bd
jae 0x4312bf
jno 0x4312c1
jo 0x4312c4
mov edi, 0xfe3585c6
invalid
mov byte [ebp - 0x1cb], 0x65
je 0x4312cd
jo 0x4312cf
shr edi, 0
jg 0x4312e0
ja 0x4312d6
jmp 0x4312d8
jl 0x4312da
jns 0x4312dc
jle 0x4312e0
add eax, 0x1e85c6ea
invalid
mov byte [ebp - 0x1e2], 0x49
clc
jge 0x4312ef
jl 0x4312ec
jl 0x4312ef
add eax, 0xfe3985c6
invalid
mov byte [ebp - 0x1c7], 0x70
push ecx
pop ecx
or esp, 0
neg esi
neg esi
inc edi
dec edi
jle 0x43130e
nop
jbe 0x431306
lea esi, [esi]
jl 0x43130a
jg 0x43130e
ljmp 0xfffe:0x2c85c6e6
mov byte [ebp - 0x1d4], 0x77
jle 0x431317
or esp, 0
shl eax, 0
js 0x43132e
lea esi, [esi + 0x2c99]
lea esi, [esi - 0x2c99]
jns 0x43132e
call 0xfe6998f8
invalid
mov byte [ebp - 0x1da], 0x53
test dword [esp + 4], eax
test dword [esp], ecx
jo 0x43134f
jno 0x431340
lea esi, [esi + 0x42e7]
lea esi, [esi - 0x42e7]
jno 0x43134f
xor eax, 0xfe1b85c6
invalid
mov byte [ebp - 0x1e5], 0x48
cmp eax, dword [esp + 0x10]
jb 0x431378
pushf
shr esp, 0
inc eax
dec eax
popf
lea edx, [edx + 0x17ca]
lea edx, [edx - 0x17ca]
jns 0x431373
lea ebx, [ebx]
jae 0x431378
mov esp, 0xfe3b85c6
invalid
mov byte [ebp - 0x1c5], 0x68
and edi, edi
cmp esp, 0x4568
mov edi, edi
inc eax
dec eax
jne 0x431397
lea edx, [edx]
lea esp, [esp]
jp 0x431394
je 0x431397
mov esi, 0xfe2285c6
invalid
mov byte [ebp - 0x1de], 0x4d
rol edx, 0x19
ror edx, 0x19
jle 0x4313c3
pushf
xor ebx, edi
xor ebx, edi
call 0x4313b1
lea esp, [esp + 4]
test ecx, eax
test eax, 0x2a18
popf
jae 0x4313c0
jg 0x4313c3
xor eax, 0xfe2485c6
invalid
mov byte [ebp - 0x1dc], 0x58
test dword [esp + 4], ebx
or edx, edx
jle 0x4313d2
jo 0x4313de
jmp 0x4313d6
jbe 0x4313d8
jns 0x4313da
nop
jno 0x4313de
mov byte [ebp - 0x1dd], 0x55
jns 0x4313e7
jno 0x431402
pushf
cmp ebx, dword [esp + 0xc]
xchg ebx, ecx
xchg ebx, ecx
ror esp, 0
popf
je 0x4313fa
nop
xchg ebx, edx
xchg ebx, edx
jo 0x431402
mov byte [ebp - 0x1c8], 0x76
test dword [esp + 0x10], eax
jbe 0x431423
pushf
jb 0x431413
mov byte [ebp - 0x1ce], 0x73
jo 0x43142c
and esp, 0xffffffff
rol ebx, 3
rol ebx, 0x1d
call 0x434dc6
add esp, 4
add esi, dword [esp]
sub esi, dword [esp]
jns 0x434def
pushf
xor eax, dword [esp + 8]
xor eax, dword [esp + 8]
cmp esp, 0x37d7
jmp 0x434de3
lea esp, [esp]
popf
jbe 0x434dea
jns 0x434dec
js 0x434def
add eax, 0x5010458b
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [0x425284]
mov dword [0x428464], eax
test esp, 0x61f2
or esp, 0
cmp edi, dword [esp + 8]
jne 0x434e26
pushf
ror edx, 8
rol edx, 8
popf
jle 0x434e21
nop
nop
je 0x434e26
add eax, 0xc49c3d83
inc ecx
add byte [eax], al
cmp dword [0x41c49c], 0
jne 0x434e76
cmp dword [0x4283cc], 0
je 0x434e76
mov esi, esi
jbe 0x434e52
pushf
std
cld
sub edx, 0
ror edi, 0xc
rol edi, 0xc
mov esp, esp
popf
ja 0x434e4f
ja 0x434e52
mov ebp, 0xc100c483
rol dword [edx], 0xc1
leave
add dh, byte [edx + 5]
add esp, 0
rol ecx, 2
ror ecx, 2
jb 0x434e62
jp 0x434e5f
jae 0x434e62
mov esp, 0x58f64
add byte [eax], al
add byte [ebx + 0x5c70cc4], al
int3
pop dword fs:[0]
add esp, 0xc
mov dword [0x4283cc], 0
mov eax, dword [0x428464]
jmp 0x435492
xor eax, eax
mov al, byte [0x424b38]
test eax, eax
jne 0x434e95
call fcn.0044a72f
mov dword [0x4283ec], eax
cmp dword [0x421878], 2
jne 0x434ec4
cmp dword [0x42186c], 6
jne 0x434ec4
cmp dword [0x421ffc], 0
je 0x434ec4
call fcn.0044c035
mov dword [0x426f64], eax
call fcn.00451f75
mov dword [0x426f60], eax
push 0xa1
push 0x4185b0
lea ecx, [ebp - 0x290]
push ecx
call fcn.00437091
add esp, 0xc
mov dword [ebp - 0x1b8], 0
jmp 0x434ef8
mov edx, dword [ebp - 0x1b8]
add edx, 1
mov dword [ebp - 0x1b8], edx
cmp dword [ebp - 0x1b8], 0xa
jge 0x434fc9
mov eax, dword [ebp - 0x1b8]
shl eax, 2
mov ecx, dword [ebp + eax*4 - 0x290]
xor ecx, 0xab576c41
mov edx, dword [ebp - 0x1b8]
shl edx, 2
mov dword [ebp + edx*4 - 0x290], ecx
mov eax, dword [ebp - 0x1b8]
shl eax, 2
mov ecx, dword [ebp + eax*4 - 0x28c]
xor ecx, 0xab5ece77
mov edx, dword [ebp - 0x1b8]
shl edx, 2
mov dword [ebp + edx*4 - 0x28c], ecx
cmp esp, 0x84f
je 0x434f78
pushf
ror ecx, 0x1b
rol ecx, 0x1b
inc ebx
dec ebx
popf
lea ecx, [ecx + 0x440a]
lea ecx, [ecx - 0x440a]
js 0x434f73
mov esi, esi
jne 0x434f78
mov eax, 0xfe48858b
invalid
mov eax, dword [ebp - 0x1b8]
shl eax, 2
mov ecx, dword [ebp + eax*4 - 0x288]
xor ecx, 0xab633a25
mov edx, dword [ebp - 0x1b8]
shl edx, 2
mov dword [ebp + edx*4 - 0x288], ecx
mov eax, dword [ebp - 0x1b8]
shl eax, 2
mov ecx, dword [ebp + eax*4 - 0x284]
xor ecx, 0xab572a32
mov edx, dword [ebp - 0x1b8]
shl edx, 2
mov dword [ebp + edx*4 - 0x284], ecx
jmp 0x434ee9
call fcn.0044f4fc
mov dword [0x4283f0], eax
add edx, 0x9fb
sub edx, 0x9fb
rol esp, 0
call 0x434fe7
add esp, 4
clc
je 0x434ff2
jns 0x434fef
jne 0x434ff2
mov edi, 0x880c3d83
inc edx
add byte [eax], al
cmp dword [0x42880c], 0
jne 0x43501a
add esi, 0x24b6
sub esi, 0x24b6
mov edx, edx
jns 0x435015
lea edx, [edx]
lea ecx, [ecx]
js 0x435011
js 0x435015
ljmp 2:0x738fe8b7
call 0x45c3a9
nop
ja 0x43502a
lea esp, [esp]
xchg esi, esi
mov esp, esp
lea esp, [esp]
jbe 0x43502a
add eax, 0x83d03d83
inc edx
add byte [eax], al
cmp dword [0x4283d0], 0
jne 0x4352c2
lea edx, [edx + 0x5824]
lea edx, [edx - 0x5824]
test edi, 0x1655
jl 0x43504b
dec ecx
inc ecx
js 0x435064
pushf
rol esp, 0
test edi, 0x834
stc
nop
popf
jbe 0x435060
nop
jns 0x435064
and dword [ecx + 0x426f9c], 0x428a6ca3
add byte [ebx], bh
add al, 0x24
mov eax, dword [0x426f9c]
mov dword [0x428a6c], eax
cmp eax, dword [esp]
jo 0x435073
jno 0x435075
jb 0x43507d
mov ecx, ecx
jae 0x43507d
xor eax, 0x9c0d8bee
outsd dx, dword [esi]
inc edx
add byte [ebx], al
or eax, 0x428a80
mov ecx, dword [0x426f9c]
add ecx, dword [0x428a80]
mov dword [0x428a68], ecx
lea edx, [edx + 0x7831]
sub edx, 0x7831
jl 0x4350bd
pushf
xor ebx, ecx
xor ebx, ecx
std
cld
cmp ecx, dword [esp]
popf
mov ebx, ebx
xchg esp, esp
lea edx, [edx + 0x665d]
lea edx, [edx - 0x665d]
jge 0x4350bd
adc dword [edi + 0x51], 0x578abf50
inc ebx
add byte [ebp - 0x397ea9ee], cl
fidivr dword [ebp]
add cl, al
into
pop ds
push edi
push ecx
push eax
mov edi, 0x43578a
lea edx, [edx]
push esi
add esi, 0x7dda
ror esi, 0x1f
pop esi
jne 0x4350d4
jo 0x4350e9
pushf
nop
dec eax
inc eax
mov esp, esp
popf
lea esp, [esp]
jle 0x4350e4
jp 0x4350e6
jno 0x4350e9
mov esp, 0x83cc3d80
inc edx
add byte [eax], al
cmp byte [0x4283cc], 0
je 0x435116
call 0x4350f7
lea esp, [esp + 4]
xor edi, ebx
xor edi, ebx
jo 0x435111
pushf
clc
test esi, ebx
popf
jbe 0x43510a
xchg esp, esp
jmp 0x43510e
jno 0x435111
sub eax, 0x435935bf
add bh, dh
fcompi st(7)
fist word [ebx - 0x7f]
ret
mov edi, 0x435935
neg edi
neg edi
push ebx
add ebx, 0x69df
ror ebx, 0xd
pop ebx
add ecx, 0x4a49
sub ecx, 0x4a49
add edi, dword [esp]
sub edi, dword [esp]
jns 0x435149
jo 0x43513b
xchg edi, ecx
xchg edi, ecx
jo 0x435141
xchg edi, ebx
xchg edi, ebx
js 0x435149
mov esp, 0x680d8b49
mov al, byte [edx]
mov ecx, dword [0x428a68]
call 0x435154
add esp, 4
rol esi, 0x15
rol esi, 0xb
and ebx, 0xffffffff
xchg esi, ebx
xchg esi, ebx
jae 0x435177
pushf
neg edx
neg edx
popf
xchg esp, esp
je 0x435172
xchg esp, esp
jb 0x435177
ljmp 0xe4c1:0x2c76cf3b
cmp ecx, edi
jbe 0x4351a7
shl esp, 0
nop
lea esp, [esp]
jb 0x43518f
pushf
xchg edi, eax
xchg edi, eax
popf
jge 0x43518c
jae 0x43518f
mov edx, 0x90b0cf2b
sub ecx, edi
mov al, 0x90
cld
jo 0x435196
jle 0x4351a5
mov esi, esi
xchg edi, ecx
xchg edi, ecx
jo 0x4351a0
jae 0x4351a2
jg 0x4351a5
mov esi, 0xc9c1aaf3
add byte [ecx + 0x16], dh
rep stosb byte es:[edi], al
ror ecx, 0
jno 0x4351c2
ja 0x4351ae
lea ecx, [ecx + 0x1fc0]
lea ecx, [ecx - 0x1fc0]
jae 0x4351bc
jle 0x4351be
jo 0x4351c2
lcall 0x428a, 0x6c3d8b5e
add byte [eax + 0x730077], dl
mov edi, dword [0x428a6c]
nop
ja 0x4351cb
jae 0x4351cd
je 0x4351d7
lea esp, [esp]
xchg esi, eax
xchg esi, eax
jne 0x4351d7
mov eax, 0x4305c9b9
add byte [ebx], dh
or al, 0x24
mov ecx, entry0
xor ecx, dword [esp]
xor ecx, dword [esp]
or ebx, 0
jno 0x4351ef
jno 0x4351e9
mov eax, eax
jo 0x4351ef
mov esp, 0x76cf3b26
cmp edi, dword [ebx]
cmp ecx, edi
jbe 0x43522e
jnp 0x4351f5
cmp ebx, ecx
je 0x435206
jg 0x4351fb
lea esp, [esp]
mov edx, edx
jo 0x435202
jne 0x435206
lcall 0x83f6, 0x8bcf2b7c
test byte [eax], 0x48
sub ecx, edi
mov esi, esi
xor esi, 0
dec eax
inc eax
cmp ebx, dword [esp]
jno 0x435229
pushf
mov esi, esi
jne 0x43521a
dec eax
inc eax
ror edi, 0x15
ror edi, 0xb
popf
jae 0x435226
jo 0x435229
call 0xf43fe2dd
stosb byte es:[edi], al
mov al, 0x90
cld
rep stosb byte es:[edi], al
jbe 0x435230
call 0x435235
lea esp, [esp + 4]
clc
jae 0x43523c
jbe 0x435257
pushf
add esi, 0x6aeb
sub esi, 0x6aeb
dec edx
inc edx
popf
jge 0x435252
js 0x435254
ja 0x435257
mov esi, 0x430665bf
add byte [ecx + 0x4026fc], al
add byte [edi + 0x24248de4], al
mov edi, 0x430665
cmp esp, 0x4026
xchg esp, esp
lea esp, [esp]
js 0x43526f
jp 0x43526b
jns 0x43526f
xor dword [ebx - 0x47], 0x434e80
mov ecx, 0x434e80
jno 0x435276
jle 0x435278
test dword [esp + 8], edx
je 0x435283
je 0x435280
jne 0x435283
ljmp 0xf3fc:0x90b0cf2b
sub ecx, edi
mov al, 0x90
cld
rep stosb byte es:[edi], al
ror esp, 0
nop
test dword [esp + 4], ecx
xor eax, 0
js 0x4352bf
pushf
xor ecx, 0x1810
xor ecx, 0x1810
test esp, 0xf1d
nop
xor eax, 0x13d2
xor eax, 0x13d2
popf
ja 0x4352ba
js 0x4352bc
jns 0x4352bf
xor eax, 0x835f5958
cmp eax, 0x428a34
add byte [ebp + 0xa], dh
pop eax
pop ecx
pop edi
cmp dword [0x428a34], 0
jne 0x4352d5
mov dword [0x428a34], 1
cmp dword [0x428a34], 0x13
jne 0x435320
mov edx, dword [0x428a34]
sub edx, 1
imul edx, edx, 0x66
add edx, 0x422274
mov dword [ebp - 0x29c], edx
push 0x42525c
mov eax, dword [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x1a0]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea edx, [ebp - 0x1a0]
mov dword [ebp - 0x29c], edx
jmp 0x435336
mov eax, dword [0x428a34]
sub eax, 1
imul eax, eax, 0x66
add eax, 0x422274
mov dword [ebp - 0x29c], eax
cmp dword [0x4283ec], 0
je 0x43541d
cmp dword [0x422a08], 0
je 0x43541d
mov ecx, dword [0x4217dc]
and ecx, 0x80000000
test ecx, ecx
jne 0x4353ce
cmp dword [0x421ffc], 0
je 0x4353ce
push 0x200040
push 0x422234
mov edx, dword [ebp - 0x29c]
push edx
push 0
call dword [0x4283ec]
cmp dword [0x421878], 2
jne 0x4353cc
cmp dword [0x42186c], 6
jne 0x4353cc
cmp dword [0x426f60], 0xffffffff
je 0x4353cc
push 0
lea eax, [ebp - 0x294]
push eax
push 0
push 0x200040
push 0x66
mov ecx, dword [ebp - 0x29c]
push ecx
push 0x3e
push 0x422234
mov edx, dword [0x426f60]
push edx
push 0
call dword [0x426f64]
jmp 0x4353e4
push 0x40
push 0x422234
mov eax, dword [ebp - 0x29c]
push eax
push 0
call dword [0x4283ec]
mov dword [0x428aa4], 0
jmp 0x4353ff
mov ecx, dword [0x428aa4]
add ecx, 1
mov dword [0x428aa4], ecx
cmp dword [0x428aa4], 0xa1
jae 0x43541b
mov edx, dword [0x428aa4]
mov byte [ebp + edx - 0x290], 0
jmp 0x4353f0
jmp 0x43544c
xor eax, eax
mov al, byte [0x424b38]
cmp eax, 1
jne 0x43544c
cmp dword [0x422a08], 0
je 0x43544c
mov ecx, dword [ebp - 0x29c]
push ecx
push 0x422234
push 0x426e14
call dword [sym.imp.MSVCRT.dll_printf]
add esp, 0xc
cmp dword [0x4283f8], 0
jne 0x435490
cmp dword [0x4283f0], 0
je 0x43546d
mov edx, dword [0x428a34]
push edx
call dword [0x4283f0]
jmp 0x435490
cmp dword [0x421878], 2
jne 0x435489
cmp dword [0x42186c], 6
jne 0x435489
push 0x63
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, 0x63
jmp 0x435492
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc