Function at 0x4f5042
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb0
push ebx
push esi
push edi
push esi
push edi
push edx
push ecx
push ebx
push eax
cmp dword [0x50ca64], 0
jne 0x4f5cfb
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.kernel32.dll_GetLocalTime]
jmp 0x4f4cb7
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x84]
push eax
mov eax, dword [ebp - 0x88]
push eax
mov eax, dword [ebp - 0x8c]
push eax
call fcn.004f4025
add esp, 0x10
mov dword [ebp - 0x3c], eax
jo 0x4f4ce0
jno 0x4f4ce0
and dword [esi - 0x39], 0xaa445
mov word [ebp - 0x5c], 0xa
mov eax, dword [0x50c2ce]
mov word [0x50c004], ax
jb 0x4f4cf6
jae 0x4f4cf6
sub bl, 0x59
jmp 0x4f4d51
push ecx
xor ecx, ecx
jecxz 0x4f4cfe
je 0x4f4d58
pop ecx
jmp 0x4f5cfb
jl 0x4f4d09
jge 0x4f4d09
add eax, edx
shr cl, 1
mov cl, 1
add byte [eax], al
jmp 0x4f4ebf
jle 0x4f4d13
jg 0x4f4d13
loopne 0x4f4cfd
jmp 0x4f50e1
leave
add eax, dword [eax]
add byte [edx + 3], dh
jb 0x4f4d1d
jae 0x4f4d1d
add dword [eax - 0x17], esi
jo 0x4f4d07
jmp 0x4f4ebf
popfd
add dword [eax], eax
add byte [ebp + 3], dh
jne 0x4f4d27
je 0x4f4d27
sub cl, 0x5d
add dword [eax], eax
add byte [esi + 3], dh
jmp 0x4f4e89
jbe 0x4f4d31
ja 0x4f4d31
jb 0x4f4d1b
jmp 0x4f5cfb
lds ecx, [edi]
add byte [eax], al
jns 0x4f4d3b
js 0x4f4d3b
mov al, 0xeb
invalid
jmp 0x4f4d04
jbe 0x4f4d42
ja 0x4f4d42
imul ecx
js 0x4f4d46
jmp 0x4f4ebf
add byte [eax], al
add byte [edx + 3], bh
jp 0x4f4d4c
jnp 0x4f4d4c
jae 0x4f4d36
jmp 0x4f5cfb
stosb byte es:[edi], al
sldt word [eax]
nop
jmp 0x4f4d55
mov word [ebp - 0x4c], 0
jmp 0x4f4d61
mov ah, 0
add bl, ch
add al, 0x66
inc dword [ebp - 0x4c]
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 6
jge 0x4f4e89
jo 0x4f4d77
jno 0x4f4d77
ljmp 0xffff:0x25b4458b
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov dword [ebp - 0x90], eax
jmp 0x4f4e56
jbe 0x4f4d8f
ja 0x4f4d8f
mov bl, 0x66
inc dword [ebp - 0x68]
inc word [ebp - 0x68]
jns 0x4f4d98
js 0x4f4d98
mov ch, cl
out 0, eax
add byte [eax], al
jmp case.default.0x4f4e65
jp 0x4f4da2
jnp 0x4f4da2
test dword [esi - 0x39], esp
inc ebp
stosb byte es:[edi], al
add byte [eax], al
mov word [ebp - 0x56], 0
jl 0x4f4dad
jge 0x4f4dad
xchg cl, ch
rol byte [eax], cl
add byte [eax], al
jmp case.default.0x4f4e65
jmp 0x4f4db5
mov word [ebp - 0x5e], 0xffff
jo 0x4f4dc0
jno 0x4f4dc0
mov cl, ch
mov edi, 0x72000000
jb 0x4f4dca
jae 0x4f4dca
jmp case.default.0x4f4e65
jb 0x4f4dca
jae 0x4f4dca
and dword [esi - 0x39], 0x45
rol byte [eax], 0
mov word [ebp - 0x40], 0
jmp 0x4f4dd6
inc word [ebp - 0x40]
mov eax, dword [ebp - 0x40]
and eax, 0xffff
cmp eax, 3
jge 0x4f4e27
jne 0x4f4de8
je 0x4f4de8
and dword [esi - 0x39], 0x45
mov eax, 0x4eb0000
mov word [ebp - 0x48], 0
jmp 0x4f4df4
inc word [ebp - 0x48]
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, 3
jge 0x4f4e25
jbe 0x4f4e06
ja 0x4f4e06
test byte [ebx - 0xda3fbb], cl
inc dword [eax]
add byte [ebx - 0x1e7e47b3], cl
invalid
mov eax, dword [ebp - 0x40]
and eax, 0xffff
mov ecx, dword [ebp - 0x48]
and ecx, 0xffff
add ecx, ecx
lea eax, [ecx + eax*8]
mov word [eax + ebp - 0x74], 0
jmp 0x4f4df0
jmp 0x4f4dd2
jns 0x4f4e2c
js 0x4f4e2c
test ebx, ebp
push esi
jmp case.default.0x4f4e65
jb 0x4f4e33
jae 0x4f4e33
mov dl, 0x66
mov dword [ebp - 0x58], 0x3750000
mov word [ebp - 0x58], 0
jne 0x4f4e3e
je 0x4f4e3e
mov ebx, ebp
inc esp
jmp case.default.0x4f4e65
jle 0x4f4e45
jg 0x4f4e45
mov al, 0x66
mov dword [ebp - 0x6e], 0x31510000
leave
mov word [ebp - 0x6e], 0
push ecx
xor ecx, ecx
jecxz 0x4f4e51
xchg dword [ecx - 0x15], ebx
xor bl, ch
cmp dword cs:[ebp - 0x90], 5
pop ecx
jmp case.default.0x4f4e65
cmp dword [ebp - 0x90], 5
ja case.default.0x4f4e65
mov eax, dword [ebp - 0x90]
jmp dword [eax*4 + 0x4f4e6c]
jmp 0x4f4d5d
jp 0x4f4e8e
jnp 0x4f4e8e
add ebx, ebp
das
jmp 0x4f4ebf
jl 0x4f4e95
jge 0x4f4e95
adc ecx, ebp
daa
push es
add byte [eax], al
jmp 0x4f54c1
jle 0x4f4e9f
jg 0x4f4e9f
jne 0x4f4e89
jmp 0x4f5cfb
push edi
push cs
add byte [eax], al
push ecx
xor ecx, ecx
jecxz 0x4f4eaa
jno 0x4f4f04
pop ecx
jmp 0x4f4ebf
jmp 0x4f4eb0
jmp 0x4f58be
jo 0x4f4eba
jno 0x4f4eba
ja 0x4f4ea4
jmp 0x4f5cfb
cmp al, 0xe
add byte [eax], al
jb 0x4f4ec4
jae 0x4f4ec4
ret 0xc766
mov word [ebp - 0x4c], 0
jmp 0x4f4ed0
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 3
jge 0x4f4fc6
jne 0x4f4ee6
je 0x4f4ee6
les ecx, [ebx - 0xda4bbb]
inc dword [eax]
add byte [ebx - 0x1e7e4bb3], cl
invalid
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
add eax, 7
mov dword [ebp - 0x94], eax
jmp 0x4f4f9c
scasd eax, dword es:[edi]
ror dword [ebx - 0x1e7e4bb3], 0xff
inc dword [eax]
add byte [edi], cl
scasd eax, dword es:[edi]
rol dword [ebx - 0x7a76f840], 0x6c
invalid
jo 0x4f4f22
jno 0x4f4f22
mov ebp, ecx
lea eax, [ebx]
add byte [eax], al
jmp 0x4f52b4
jp 0x4f4f2c
jnp 0x4f4f2c
loopne 0x4f4f60
xor eax, eax
mov ax, word [ebp - 0x56]
shl byte [esi - 0x75], 0x45
stosb byte es:[edi], al
mov ecx, 5
cdq
idiv ecx
lea eax, [edx - 2]
cmp eax, 1
sbb ecx, ecx
inc ecx
xor eax, eax
mov ax, word [ebp - 0x56]
mov ebx, 3
cdq
idiv ebx
lea eax, [edx - 1]
cmp eax, 1
sbb eax, eax
inc eax
or ecx, eax
je 0x4f4f7f
jl 0x4f4f63
jge 0x4f4f63
jmp 0x4f4fca
mov ax, word [ebp - 0x58]
mov word [ebp - 0x5e], ax
jle 0x4f4f70
jg 0x4f4f70
fisub word [esi - 0x39]
inc ebp
cmpsb byte [esi], byte es:[edi]
add dword [eax], eax
mov word [ebp - 0x5a], 1
push ecx
xor ecx, ecx
jecxz 0x4f4f7c
lds ebx, [ecx - 0x15]
push es
pop ecx
jmp 0x4f4f85
mov word [ebp - 0x5a], 0
jmp 0x4f4f88
jmp 0x4f4fc1
jbe 0x4f4f8f
ja 0x4f4f8f
mov ebx, 0xaa45ff66
inc word [ebp - 0x56]
jns 0x4f4f98
js 0x4f4f98
fucomi st(3)
daa
jmp 0x4f4fc1
jmp 0x4f4fc1
cmp dword [ebp - 0x94], 7
je 0x4f4f8a
cmp dword [ebp - 0x94], 8
je 0x4f4f27
cmp dword [ebp - 0x94], 0x17
je 0x4f4f1d
jmp 0x4f4fc1
jmp 0x4f4ecc
jns 0x4f4fcb
js 0x4f4fcb
invalid
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 7
cdq
idiv ecx
lea eax, [edx - 2]
cmp eax, 1
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ebx, 0xb
cdq
idiv ebx
lea eax, [edx - 5]
cmp eax, 1
sbb eax, eax
neg eax
or ecx, eax
je 0x4f5025
jp 0x4f5008
jnp 0x4f5008
or al, 0x66
mov eax, dword [ebp - 0x58]
mov ax, word [ebp - 0x58]
mov word [ebp - 0x5e], ax
jl 0x4f5015
jge 0x4f5015
mov edx, 0xa645c766
add dword [eax], eax
mov word [ebp - 0x5a], 1
jle 0x4f5020
jg 0x4f5020
invalid
jmp 0x4f52b4
push ecx
xor ecx, ecx
jecxz 0x4f502b
int 0x59
pop ecx
xor eax, eax
mov ax, word [ebp - 0x6e]
xchg edx, eax
mov dword [ebp - 0x98], eax
jmp 0x4f50a0
jmp 0x4f503d
jmp 0x4f58d8
jo 0x4f5047
jno 0x4f5047
js 0x4f5031
jmp 0x4f5981
xor eax, 0x72000009
add esi, dword [ebx + 1]
jb 0x4f5051
jae 0x4f5051
add dword [edx + 0x944e9], esp
mov byte [0x944e9], al
jmp 0x4f599a
add byte [ebp + 3], dh
jne 0x4f505b
je 0x4f505b
invalid
jmp 0x4f59e8
jbe 0x4f5065
ja 0x4f5065
loopne 0x4f504f
jmp 0x4f59ee
test byte [ecx], cl
add byte [eax], al
jns 0x4f506f
js 0x4f506f
ret 0x1de9
jmp 0x4f5a91
jp 0x4f5079
jnp 0x4f5079
mov dword [0xa90e9], eax
add byte [ebx + eax + 0x7d], bh
jl 0x4f5083
jge 0x4f5083
invalid
jmp 0x4f5b0e
jl 0x4f5083
jge 0x4f5083
add ebp, ecx
and dword [ebx], ecx
add byte [eax], al
jmp 0x4f5ba9
jle 0x4f508d
jg 0x4f508d
and eax, 0xc01e9
add byte [ecx + 0x31], dl
push ecx
xor ecx, ecx
jmp 0x4f5c93
push ecx
xor ecx, ecx
jecxz 0x4f5098
jge 0x4f50f2
pop ecx
jmp 0x4f5ccf
cmp dword [ebp - 0x98], 9
ja case.default.0x4f50af
mov eax, dword [ebp - 0x98]
jmp dword [eax*4 + 0x4f50b6]
jmp 0x4f50e1
jo 0x4f50e6
jno 0x4f50e6
add dword [ecx - 0x22b17], esp
mov eax, dword [0xfffdd4e9]
jmp 0x4f4ebf
push dword [edx + 3]
jb 0x4f50f0
jae 0x4f50f0
mov cl, 0xe9
dec eax
jmp 0x4f4d3d
cld
invalid
jne 0x4f50fa
je 0x4f50fa
js 0x4f50e4
jmp 0x4f5cfb
cld
or eax, dword [eax]
add byte [esi + 3], dh
jbe 0x4f5104
ja 0x4f5104
shl byte [esi - 0x39], 1
inc ebp
mov ah, 0
add bl, ch
add al, 0x66
inc dword [ebp - 0x4c]
mov word [ebp - 0x4c], 0
jmp 0x4f5110
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 4
jge 0x4f5299
jns 0x4f5126
js 0x4f5126
ror dword [ebx - 0xda4bbb], 1
inc dword [eax]
add byte [ebx - 0x1e7e4bb3], cl
invalid
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
lea ecx, [ecx + ecx*2]
add eax, ecx
inc eax
mov dword [ebp - 0x9c], eax
jmp 0x4f5249
jle 0x4f5159
jg 0x4f5159
jge case.0x4f51f0.3
xor eax, eax
mov ax, word [ebp - 0x6e]
shl byte [esi - 0x75], 0x45
xchg edx, eax
mov ecx, dword [ebp - 0x5c]
and ecx, 0xffff
cmp eax, ecx
jne case.default.0x4f51f0
push ecx
xor ecx, ecx
jecxz 0x4f5176
sub al, 0x59
pop ecx
xor eax, eax
mov ax, word [ebp - 0x56]
mov ecx, 9
cdq
idiv ecx
mov dword [ebp - 0xa0], edx
jmp 0x4f51e1
jmp 0x4f5190
jmp 0x4f50f5
jo 0x4f519a
jno 0x4f519a
mov cl, 0xe9
push ss
std
invalid
jmp 0x4f4eb5
jmp 0x4f51a2
jmp 0x4f58d0
jb 0x4f51ac
jae 0x4f51ac
mov bl, 0xe9
jmp 0x764f51ae
invalid
jmp 0x4f4e9a
jne 0x4f51b6
je 0x4f51b6
mov ah, 0xe9
cmp eax, 0xebfffffb
jmp 0x4f51be
mov ch, 0xe9
test bl, bh
invalid
push dword [esi + 3]
jbe 0x4f51c8
jmp 0x4f4cf8
jmp 0x4f51be
jmp 0x4f4d47
jbe 0x4f51c8
ja 0x4f51c8
mov dh, 0xe9
pop edi
sti
invalid
jmp 0x4f4d2c
jmp 0x4f51d0
jmp 0x4f52a8
jns 0x4f51da
js 0x4f51da
mov eax, 0x2f4e9
add bl, ch
cmp al, byte [ebx - 0x9f43]
dec dword [eax]
jmp 0x4f54d3
cmp dword [ebp - 0xa0], 8
ja case.default.0x4f51f0
mov eax, dword [ebp - 0xa0]
jmp dword [eax*4 + 0x4f51f7]
add bl, ch
add ecx, esp
jmp 0x4f521e
jmp case.0x4f5266.4
jp 0x4f5225
jnp 0x4f5225
jge 0x4f528c
inc word [ebp - 0x6e]
inc dword [ebp - 0x6e]
jl 0x4f522e
jge 0x4f522e
jge 0x4f521a
jmp case.0x4f5266.4
jmp 0x4f5233
jmp 0x4f5233
add dword [esi + 0x37a7feb], ecx
jmp 0x4f52b4
jp 0x4f523a
jnp 0x4f523a
and ah, byte [esi - 0x39]
inc ebp
cmpsb byte [esi], byte es:[edi]
add dword [eax], eax
mov word [ebp - 0x5a], 1
jl 0x4f5245
jge 0x4f5245
loop 0x4f5231
jmp case.0x4f5266.4
dec ebp
jmp case.0x4f5266.4
dec dword [ebp - 0x9c]
cmp dword [ebp - 0x9c], 0x12
ja case.0x4f5266.4
mov eax, dword [ebp - 0x9c]
xor ecx, ecx
mov cl, byte [eax + 0x4f5281]
jmp dword [ecx*4 + 0x4f526d]
add al, 4
add al, 4
add al, 4
add al, 3
jmp 0x4f510c
jle 0x4f529e
jg 0x4f529e
and cl, ch
sbb al, 0xfc
invalid
jmp 0x4f4ebf
jmp 0x4f52a6
jmp 0x4f5299
push ecx
xor ecx, ecx
jecxz 0x4f52ae
jno 0x4f5308
pop ecx
jmp 0x4f5cfb
jmp 0x4f52b7
mov word [ebp - 0x4c], 0
jmp 0x4f52c3
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 8
jge 0x4f54c1
jo 0x4f52d9
jno 0x4f52d9
ror dword [ebx - 0xda4bbb], 1
inc dword [eax]
add byte [ebx - 0x1e7e4bb3], cl
invalid
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
add eax, ecx
inc eax
mov dword [ebp - 0xa4], eax
jmp 0x4f543b
jmp 0x4f5307
xor eax, eax
mov ax, word [ebp - 0x5a]
shl byte [esi - 0x75], 0x45
cmpsb byte [esi], byte es:[edi]
cdq
xor eax, edx
sub eax, edx
and eax, 1
xor eax, edx
sub eax, edx
mov dword [ebp - 0xa8], eax
jmp 0x4f5335
jb 0x4f5326
jae 0x4f5326
jecxz 0x4f5310
jmp 0x4f4fc6
wait
cld
invalid
jmp 0x4f532e
jmp 0x4f54db
cmp dword [ebp - 0xa8], 0
je 0x4f5321
cmp dword [ebp - 0xa8], 1
je 0x4f532b
jmp 0x4f5349
jne 0x4f534e
je 0x4f534e
fldl2t
imul eax, dword [ecx], 0x3750000
jne 0x4f5358
jmp case.0x4f5458.8
jne 0x4f5358
je 0x4f5358
mov edi, 0x5ae045c7
add dword [eax], eax
add bl, ch
add ebp, edx
mov dword [ebp - 0x20], 0x15a
jmp 0x4f5362
mov dword [ebp - 0x28], 0x4e35
jbe 0x4f536e
ja 0x4f536e
sbb ebp, ecx
dec ecx
add dword [eax], eax
add bl, ch
jmp 0x4f5376
mov ebp, 0xec7d83
jmp case.0x4f5458.8
jmp 0x4f5376
cmp dword [ebp - 0x14], 0
je 0x4f538b
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x28]
and eax, 0xffff
add dword [ebp - 0x24], eax
jp 0x4f5390
jnp 0x4f5390
imul ecx
daa
add dword [eax], eax
add bl, ch
jmp 0x4f5398
mov esi, 0xfe0458b
scasd eax, dword es:[edi]
inc ebp
in al, 0x25
invalid
jmp case.0x4f5458.8
jmp 0x4f5398
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x1c]
and eax, 0xffff
mov dword [ebp - 0x24], eax
jns 0x4f53ac
js 0x4f53ac
sub ebp, ecx
or eax, dword [ecx]
add byte [eax], al
jmp case.0x4f5458.8
jmp 0x4f53b4
mov eax, dword [ebp - 0x24]
shl eax, 0x10
and eax, 0xffff0000
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x28]
add eax, ecx
inc eax
mov dword [ebp - 0x30], eax
jl 0x4f53d1
jge 0x4f53d1
cmp ebp, ecx
out 0, al
add byte [eax], al
jmp case.0x4f5458.8
jmp 0x4f53d9
mov eax, dword [ebp - 0x3c]
shr eax, 0x10
mov dword [ebp - 0x14], eax
jb 0x4f53e7
jae 0x4f53e7
aam 0x8b
inc ebp
les esp, [0xffff]
mov eax, dword [ebp - 0x3c]
and eax, 0xffff
mov dword [ebp - 0x1c], eax
jmp 0x4f53f5
jmp case.0x4f5458.8
push ecx
xor ecx, ecx
jecxz 0x4f5400
mov ebx, 0xd0658159
invalid
pop ecx
and dword [ebp - 0x30], 0x7fff
jmp 0x4f540b
mov eax, dword [ebp - 0x30]
mov word [ebp - 0x38], ax
jo 0x4f5417
jno 0x4f5417
mov ebp, ecx
mov al, byte [0xeb000000]
jmp 0x4f541f
mov ebp, 0x89d0458b
inc ebp
les edi, [esi + 3]
jmp case.0x4f5458.8
jmp 0x4f541f
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3c], eax
jle 0x4f542a
jg 0x4f542a
mov esp, 0x10d06dc1
shr dword [ebp - 0x30], 0x10
jmp 0x4f5431
jmp case.0x4f5458.8
dec dword [ebp - 0xa4]
cmp dword [ebp - 0xa4], 0x38
ja case.0x4f5458.8
mov eax, dword [ebp - 0xa4]
xor ecx, ecx
mov cl, byte [eax + 0x4f5483]
jmp dword [ecx*4 + 0x4f545f]
jmp 0x4f52bf
jmp 0x4f54c4
jmp 0x4f4ebf
jbe 0x4f54ce
ja 0x4f54ce
adc cl, ch
sar ecx, 1
invalid
jmp 0x4f4ea4
jmp 0x4f54d6
jmp 0x4f5cfb
jns 0x4f54e0
js 0x4f54e0
fisub dword [esi - 0x39]
inc ebp
mov ah, 0
add bl, ch
add al, 0x66
inc dword [ebp - 0x4c]
mov word [ebp - 0x4c], 0
jmp 0x4f54ec
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 7
jge 0x4f58b9
jmp 0x4f5500
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
inc eax
mov dword [ebp - 0xac], eax
jmp 0x4f5790
jbe 0x4f5531
ja 0x4f5531
fmul qword [ebx - 0xda53bb]
inc dword [eax]
add byte [ebp + 0x4d8b4004], cl
mov byte [ecx + 0xffffe1], al
add byte [ebx], al
shl dword [esi - 0x77], 0x45
enter 0x1eb, 0x1d
mov eax, dword [ebp - 0x54]
and eax, 0xffff
lea eax, [eax + eax*2]
mov ecx, dword [ebp - 0x78]
and ecx, 0xffff
add eax, ecx
mov word [ebp - 0x38], ax
jmp 0x4f554e
mov ax, word [ebp - 0x38]
mov word [ebp - 0x58], ax
jns 0x4f555b
js 0x4f555b
sub eax, 0x354e9
add bl, ch
jmp 0x4f5563
invalid
jmp case.0x4f57b4.7
jmp 0x4f5563
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 3
cdq
idiv ecx
mov word [ebp - 0x78], dx
jle 0x4f557c
jg 0x4f557c
mov ecx, gs
xor eax, dword [ebx]
add byte [eax], al
jmp case.0x4f57b4.7
jmp 0x4f5584
mov eax, dword [ebp - 0x54]
and eax, 0xffff
mov ecx, dword [ebp - 0x78]
and ecx, 0xffff
add ecx, ecx
lea eax, [ecx + eax*8]
inc word [eax + ebp - 0x74]
jne 0x4f55a4
je 0x4f55a4
or eax, 0xa8458b66
mov ax, word [ebp - 0x58]
mov word [ebp - 0x5e], ax
jmp 0x4f55af
jmp case.0x4f57b4.7
jo 0x4f55b9
jno 0x4f55b9
mov esp, dword [esi - 0x39]
inc ebp
mov eax, 0x4eb0000
mov word [ebp - 0x48], 0
jmp 0x4f55c5
inc word [ebp - 0x48]
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, 3
jge 0x4f5623
jmp 0x4f55d5
mov eax, dword [ebp - 0x54]
and eax, 0xffff
mov ecx, dword [ebp - 0x78]
and ecx, 0xffff
add ecx, ecx
lea eax, [ecx + eax*8]
mov eax, dword [eax + ebp - 0x74]
and eax, 0xffff
mov ecx, dword [ebp - 0x54]
and ecx, 0xffff
mov edx, dword [ebp - 0x48]
and edx, 0xffff
add edx, edx
lea ecx, [edx + ecx*8]
mov ecx, dword [ecx + ebp - 0x74]
and ecx, 0xffff
cmp eax, ecx
jle 0x4f5621
mov ax, word [ebp - 0x48]
mov word [ebp - 0x78], ax
jmp 0x4f55c1
jb 0x4f5628
jae 0x4f5628
call 0x51de15
add byte [edx + 3], bh
jp 0x4f5632
jmp case.0x4f57b4.7
jp 0x4f5632
jnp 0x4f5632
in al, 0x8b
inc ebp
enter 0xffffffffffffff25, 0xffffffffffffffff
add byte [eax], al
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 9
cdq
idiv ecx
mov word [ebp - 0x38], dx
jmp 0x4f5649
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 3
cdq
idiv ecx
mov word [ebp - 0x54], ax
jl 0x4f5662
jge 0x4f5662
lcall 0xeb00, 0x24de9
add ecx, ebp
jmp case.0x4f57b4.7
jmp 0x4f566a
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 9
cdq
idiv ecx
mov dword [ebp - 0xb0], edx
jmp 0x4f56d8
jp 0x4f5687
jnp 0x4f5687
invalid
jmp 0x4f50eb
jmp 0x4f568f
jmp 0x4f4ead
jl 0x4f5699
jge 0x4f5699
ljmp 0xeb00:0x228e9
jmp 0x4f58c6
jmp 0x4f56a1
jmp 0x4f4e90
jle 0x4f56ab
jg 0x4f56ab
out 0xe9, al
pop esi
idiv bh
call dword [ecx + 0x31]
push ecx
xor ecx, ecx
jmp 0x4f4d0e
push ecx
xor ecx, ecx
jecxz 0x4f56b6
in al, 0x59
pop ecx
jmp 0x4f4d36
jmp 0x4f56bf
jmp 0x4f4d22
jo 0x4f56c9
jno 0x4f56c9
loopne 0x4f56b3
jmp 0x4f52a3
aad 0xfb
invalid
jmp 0x4f56d1
jmp 0x4f54c9
cmp dword [ebp - 0xb0], 8
ja case.default.0x4f56e7
mov eax, dword [ebp - 0xb0]
jmp dword [eax*4 + 0x4f56ee]
jmp 0x4f5715
mov word [ebp - 0x40], 0
jmp 0x4f5721
inc word [ebp - 0x40]
mov eax, dword [ebp - 0x40]
and eax, 0xffff
cmp eax, 3
jge 0x4f5783
push ecx
xor ecx, ecx
jecxz 0x4f5734
mov esp, 0xc0458b59
pop ecx
mov eax, dword [ebp - 0x40]
and eax, 0xffff
mov ecx, dword [ebp - 0x78]
and ecx, 0xffff
add ecx, ecx
lea eax, [ecx + eax*8]
mov eax, dword [eax + ebp - 0x74]
and eax, 0xffff
mov ecx, dword [ebp - 0x54]
and ecx, 0xffff
mov edx, dword [ebp - 0x78]
and edx, 0xffff
add edx, edx
lea ecx, [edx + ecx*8]
mov ecx, dword [ecx + ebp - 0x74]
and ecx, 0xffff
cmp eax, ecx
jge 0x4f5781
mov ax, word [ebp - 0x40]
mov word [ebp - 0x54], ax
jmp 0x4f571d
jmp 0x4f5786
jmp case.0x4f57b4.7
dec dword [ebp - 0xac]
cmp dword [ebp - 0xac], 0xd8
ja case.0x4f57b4.7
mov eax, dword [ebp - 0xac]
xor ecx, ecx
mov cl, byte [eax + 0x4f57db]
jmp dword [ecx*4 + 0x4f57bb]
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
push es
jmp 0x4f54e8
jb 0x4f58be
jae 0x4f58be
test eax, 0xe92101eb
stc
cmc
invalid
jmp 0x4f58c1
jmp 0x4f4ebf
jne 0x4f58cb
je 0x4f58cb
xor ecx, ebp
dec eax
hlt
jmp 0x4f4d18
jmp 0x4f58d3
jmp 0x4f5cfb
nop
jne 0x4f58de
je 0x4f58de
mov al, 0xe8
xchg ecx, eax
and eax, 0x3d830000
jl 0x4f58a7
call fcn.004f7e74
cmp dword [0x50c07c], 0
push eax
add byte [eax], al
jne 0x4f594e
call fcn.004f5e5b
test eax, eax
je 0x4f5949
mov eax, dword [0x50cf30]
dec eax
mov ecx, eax
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*2]
lea eax, [eax*2 + 0x50c010]
add eax, 0x614
mov dword [ebp - 0x2c], eax
cmp dword [0x50c5e2], 0
je 0x4f5937
push 0x40
mov eax, 0x50c010
add eax, 0x5d6
push eax
mov eax, dword [ebp - 0x2c]
push eax
push 0
call dword [sym.imp.user32.dll_MessageBoxA]
mov dword [0x50ca64], 1
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_ExitProcess]
call fcn.004f6aef
mov word [ebp - 0x48], 0
jmp 0x4f595a
inc word [ebp - 0x48]
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, 0x1e
jge 0x4f597c
mov eax, dword [ebp - 0x48]
and eax, 0xffff
mov dword [eax*4 + 0x50c0a4], 0xffffffff
jmp 0x4f5956
jmp 0x4f50ff
nop
jbe 0x4f5987
ja 0x4f5987
mov dl, 0xe8
fst qword [ecx]
add byte [eax], al
call 0x4f6b69
test eax, eax
jne 0x4f5995
jmp 0x4f5d08
jmp 0x4f50ff
nop
jns 0x4f59a0
js 0x4f59a0
mov ah, 0x83
cmp eax, 0x50ca20
add byte [edx + edi - 0x39], dh
inc ebp
clc
or eax, dword [eax]
add byte [eax], al
cmp dword [0x50ca20], 0
je 0x4f59e3
mov dword [ebp - 8], 0xb
jmp 0x4f59b3
lea eax, [ebp - 0x34]
push eax
push 0
lea eax, [ebp - 8]
push eax
push 0x4f4b69
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xffffffff
jne 0x4f59e3
jmp 0x4f59d8
push 0x9999
call dword [sym.imp.kernel32.dll_ExitProcess]
jmp 0x4f50ff
nop
jmp 0x4f50ff
nop
jl 0x4f59f4
jge 0x4f59f4
mov eax, 0x50ca2ca1
add byte [eax - 0x18], dl
jmp esp
mov eax, dword [0x50ca2c]
push eax
call fcn.004f3efe
add esp, 4
mov dword [0x50ca2c], eax
mov eax, dword [0x50ca30]
push eax
call fcn.004f3efe
add esp, 4
mov dword [0x50ca30], eax
mov eax, dword [0x50ca34]
push eax
call fcn.004f3efe
add esp, 4
mov dword [0x50ca34], eax
mov eax, dword [0x50ca38]
push eax
call fcn.004f3efe
add esp, 4
mov dword [0x50ca38], eax
mov eax, dword [0x50ca3c]
push eax
call fcn.004f3efe
add esp, 4
mov dword [0x50ca3c], eax
mov eax, dword [0x50ca40]
push eax
call fcn.004f3efe
add esp, 4
mov dword [0x50ca40], eax
mov eax, dword [0x50ca44]
push eax
call fcn.004f3efe
add esp, 4
mov dword [0x50ca44], eax
mov eax, dword [0x50ca48]
push eax
call fcn.004f3efe
add esp, 4
mov dword [0x50ca48], eax
jmp 0x4f50ff
nop
jle 0x4f5a97
jg 0x4f5a97
mov edx, 0x50ca4ca1
add byte [eax - 0x18], dl
pop esp
in al, 0xff
inc dword [ebx + 0x4ca304c4]
retf 0x50
mov eax, dword [0x50ca4c]
push eax
call fcn.004f3efe
add esp, 4
mov dword [0x50ca4c], eax
mov eax, dword [0x50ca50]
push eax
call fcn.004f3efe
add esp, 4
mov dword [0x50ca50], eax
mov eax, dword [0x50ca54]
push eax
call fcn.004f3efe
add esp, 4
mov dword [0x50ca54], eax
mov eax, dword [0x50ca58]
push eax
call fcn.004f3efe
add esp, 4
mov dword [0x50ca58], eax
mov eax, dword [0x50ca5c]
push eax
call fcn.004f3efe
add esp, 4
mov dword [0x50ca5c], eax
mov eax, dword [0x50ca60]
push eax
call fcn.004f3efe
add esp, 4
mov dword [0x50ca60], eax
jmp 0x4f50ff
nop
push ecx
xor ecx, ecx
jecxz 0x4f5b15
mov edi, 0x4c05c759
aad 0x50
add byte [eax], al
add byte [eax], al
add bh, bh
adc eax, sym.imp.kernel32.dll_GetVersion
pop ecx
mov dword [0x50d54c], 0
call dword [sym.imp.kernel32.dll_GetVersion]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x80000000
jae 0x4f5b66
push 0x50cf44
call dword [sym.imp.kernel32.dll_LoadLibraryA]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x4f5b64
push 0x50cf50
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
mov dword [0x50d54c], eax
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.kernel32.dll_FreeLibrary]
jmp 0x4f5ba4
xor eax, eax
mov al, byte [ebp - 0xc]
cmp eax, 4
jge 0x4f5b72
jmp 0x4f5ba4
push 0x50cf60
call dword [sym.imp.kernel32.dll_LoadLibraryA]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x4f5ba4
push 0x50cf6c
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
mov dword [0x50d54c], eax
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.kernel32.dll_FreeLibrary]
jmp 0x4f50ff
nop
jmp 0x4f5bad
cmp dword [0x50c2a6], 0
je 0x4f5c8e
mov dword [ebp - 0x7c], 0x400
mov eax, dword [ebp - 0x7c]
cmp dword [0x50c2c2], eax
jge 0x4f5bd4
mov eax, dword [0x50c2c2]
mov dword [ebp - 0x7c], eax
mov eax, dword [0x50c074]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
call fcn.004f76db
add esp, 4
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
call fcn.004f4ab4
add esp, 4
mov dword [ebp - 0x10], eax
mov word [ebp - 0x48], 0
jmp 0x4f5c06
inc word [ebp - 0x48]
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, dword [ebp - 0x7c]
jge 0x4f5c7a
call fcn.004f5d0d
mov eax, dword [ebp - 0x48]
and eax, 0xffff
push eax
mov eax, dword [ebp - 4]
inc dword [eax]
add byte [eax - 0x75], dl
inc ebp
cld
push eax
call fcn.004f766c
add esp, 8
test eax, eax
jne 0x4f5c78
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, dword [ebp - 0x10]
jl 0x4f5c51
mov eax, dword [ebp - 0x10]
add eax, 4
mov ecx, dword [ebp - 0x48]
and ecx, 0xffff
cmp eax, ecx
jg 0x4f5c78
mov eax, dword [ebp - 0x48]
and eax, 0xffff
mov ecx, dword [ebp - 0x44]
xor edx, edx
mov dl, byte [ecx + eax]
xor eax, eax
mov al, byte [0x50c2c6]
sub edx, eax
mov eax, dword [ebp - 0x48]
and eax, 0xffff
mov ecx, dword [ebp - 0x44]
mov byte [ecx + eax], dl
jmp 0x4f5c02
mov dword [0x50c04c], 1
add dword [eax], eax
add byte [eax], al
mov dword [0x50c2a6], 0
jmp 0x4f50ff
nop
jo 0x4f5c99
jno 0x4f5c99
jno 0x4f5c1d
cmp dword [0x50c2b6], 0
je 0x4f5cca
cmp eax, 0x50c2b6
add byte [eax + ebp - 0x7f], dh
cmp eax, 0x50c2d6
push esi
inc edx
xor eax, 0x680f754d
cmp dword [0x50c2d6], 0x4d354256
jne 0x4f5cbd
push 0x50cf7c
call fcn.004f3f7a
add esp, 4
jmp 0x4f5cca
jl 0x4f5c80
push eax
add al, ch
ret 0xffe2
push 0x50cf8c
call fcn.004f3f7a
add esp, 4
jmp 0x4f50ff
cmp dword [0x50c07c], 0
jne 0x4f5ce1
cmp dword [0x50c2ae], 0
je 0x4f5ce1
add byte [eax + 0x1730372], dl
nop
jb 0x4f5ce7
jae 0x4f5ce7
jae 0x4f5caf
mov dword [0x50ca64], 1
add eax, 0x50ca64
add dword [eax], eax
add byte [eax], al
jo 0x4f5cf6
jno 0x4f5cf6
jno 0x4f5ce0
jmp 0x4f50ff
add al, 0xf4
invalid
pop eax
pop ebx
pop ecx
pop edx
pop edi
pop esi
leave
jmp dword [0x50c020]
pop edi
pop esi
pop ebx
leave
ret