Function at 0x461042
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb0
push ebx
push esi
push edi
push esi
push edi
push edx
push ecx
push ebx
push eax
cmp dword [0x471a64], 0
jne 0x461cfb
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.kernel32.dll_GetLocalTime]
jmp 0x460cb7
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x84]
push eax
mov eax, dword [ebp - 0x88]
push eax
mov eax, dword [ebp - 0x8c]
push eax
call fcn.00460025
add esp, 0x10
mov dword [ebp - 0x3c], eax
jo 0x460ce0
jno 0x460ce0
and dword [esi - 0x39], 0xaa445
mov word [ebp - 0x5c], 0xa
mov eax, dword [0x4712ce]
mov word [0x471004], ax
jb 0x460cf6
jae 0x460cf6
sub bl, 0x59
jmp 0x460d51
push ecx
xor ecx, ecx
jecxz 0x460cfe
je 0x460d58
pop ecx
jmp 0x461cfb
jl 0x460d09
jge 0x460d09
add eax, edx
shr cl, 1
mov cl, 1
add byte [eax], al
jmp 0x460ebf
jle 0x460d13
jg 0x460d13
loopne 0x460cfd
jmp 0x4610e1
leave
add eax, dword [eax]
add byte [edx + 3], dh
jb 0x460d1d
jae 0x460d1d
add dword [eax - 0x17], esi
jo 0x460d07
jmp 0x460ebf
popfd
add dword [eax], eax
add byte [ebp + 3], dh
jne 0x460d27
je 0x460d27
sub cl, 0x5d
add dword [eax], eax
add byte [esi + 3], dh
jmp 0x460e89
jbe 0x460d31
ja 0x460d31
jb 0x460d1b
jmp 0x461cfb
lds ecx, [edi]
add byte [eax], al
jns 0x460d3b
js 0x460d3b
mov al, 0xeb
invalid
jmp 0x460d04
jbe 0x460d42
ja 0x460d42
imul ecx
js 0x460d46
jmp 0x460ebf
add byte [eax], al
add byte [edx + 3], bh
jp 0x460d4c
jnp 0x460d4c
jae 0x460d36
jmp 0x461cfb
stosb byte es:[edi], al
sldt word [eax]
nop
jmp 0x460d55
mov word [ebp - 0x4c], 0
jmp 0x460d61
mov ah, 0
add bl, ch
add al, 0x66
inc dword [ebp - 0x4c]
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 6
jge 0x460e89
jo 0x460d77
jno 0x460d77
ljmp 0xffff:0x25b4458b
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov dword [ebp - 0x90], eax
jmp 0x460e56
jbe 0x460d8f
ja 0x460d8f
mov bl, 0x66
inc dword [ebp - 0x68]
inc word [ebp - 0x68]
jns 0x460d98
js 0x460d98
mov ch, cl
out 0, eax
add byte [eax], al
jmp case.default.0x460e65
jp 0x460da2
jnp 0x460da2
test dword [esi - 0x39], esp
inc ebp
stosb byte es:[edi], al
add byte [eax], al
mov word [ebp - 0x56], 0
jl 0x460dad
jge 0x460dad
xchg cl, ch
rol byte [eax], cl
add byte [eax], al
jmp case.default.0x460e65
jmp 0x460db5
mov word [ebp - 0x5e], 0xffff
jo 0x460dc0
jno 0x460dc0
mov cl, ch
mov edi, 0x72000000
jb 0x460dca
jae 0x460dca
jmp case.default.0x460e65
jb 0x460dca
jae 0x460dca
and dword [esi - 0x39], 0x45
rol byte [eax], 0
mov word [ebp - 0x40], 0
jmp 0x460dd6
inc word [ebp - 0x40]
mov eax, dword [ebp - 0x40]
and eax, 0xffff
cmp eax, 3
jge 0x460e27
jne 0x460de8
je 0x460de8
and dword [esi - 0x39], 0x45
mov eax, 0x4eb0000
mov word [ebp - 0x48], 0
jmp 0x460df4
inc word [ebp - 0x48]
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, 3
jge 0x460e25
jbe 0x460e06
ja 0x460e06
test byte [ebx - 0xda3fbb], cl
inc dword [eax]
add byte [ebx - 0x1e7e47b3], cl
invalid
mov eax, dword [ebp - 0x40]
and eax, 0xffff
mov ecx, dword [ebp - 0x48]
and ecx, 0xffff
add ecx, ecx
lea eax, [ecx + eax*8]
mov word [eax + ebp - 0x74], 0
jmp 0x460df0
jmp 0x460dd2
jns 0x460e2c
js 0x460e2c
test ebx, ebp
push esi
jmp case.default.0x460e65
jb 0x460e33
jae 0x460e33
mov dl, 0x66
mov dword [ebp - 0x58], 0x3750000
mov word [ebp - 0x58], 0
jne 0x460e3e
je 0x460e3e
mov ebx, ebp
inc esp
jmp case.default.0x460e65
jle 0x460e45
jg 0x460e45
mov al, 0x66
mov dword [ebp - 0x6e], 0x31510000
leave
mov word [ebp - 0x6e], 0
push ecx
xor ecx, ecx
jecxz 0x460e51
xchg dword [ecx - 0x15], ebx
xor bl, ch
cmp dword cs:[ebp - 0x90], 5
pop ecx
jmp case.default.0x460e65
cmp dword [ebp - 0x90], 5
ja case.default.0x460e65
mov eax, dword [ebp - 0x90]
jmp dword [eax*4 + 0x460e6c]
jmp 0x460d5d
jp 0x460e8e
jnp 0x460e8e
add ebx, ebp
das
jmp 0x460ebf
jl 0x460e95
jge 0x460e95
adc ecx, ebp
daa
push es
add byte [eax], al
jmp 0x4614c1
jle 0x460e9f
jg 0x460e9f
jne 0x460e89
jmp 0x461cfb
push edi
push cs
add byte [eax], al
push ecx
xor ecx, ecx
jecxz 0x460eaa
jno 0x460f04
pop ecx
jmp 0x460ebf
jmp 0x460eb0
jmp 0x4618be
jo 0x460eba
jno 0x460eba
ja 0x460ea4
jmp 0x461cfb
cmp al, 0xe
add byte [eax], al
jb 0x460ec4
jae 0x460ec4
ret 0xc766
mov word [ebp - 0x4c], 0
jmp 0x460ed0
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 3
jge 0x460fc6
jne 0x460ee6
je 0x460ee6
les ecx, [ebx - 0xda4bbb]
inc dword [eax]
add byte [ebx - 0x1e7e4bb3], cl
invalid
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
add eax, 7
mov dword [ebp - 0x94], eax
jmp 0x460f9c
scasd eax, dword es:[edi]
ror dword [ebx - 0x1e7e4bb3], 0xff
inc dword [eax]
add byte [edi], cl
scasd eax, dword es:[edi]
rol dword [ebx - 0x7a76f840], 0x6c
invalid
jo 0x460f22
jno 0x460f22
mov ebp, ecx
lea eax, [ebx]
add byte [eax], al
jmp 0x4612b4
jp 0x460f2c
jnp 0x460f2c
loopne 0x460f60
xor eax, eax
mov ax, word [ebp - 0x56]
shl byte [esi - 0x75], 0x45
stosb byte es:[edi], al
mov ecx, 5
cdq
idiv ecx
lea eax, [edx - 2]
cmp eax, 1
sbb ecx, ecx
inc ecx
xor eax, eax
mov ax, word [ebp - 0x56]
mov ebx, 3
cdq
idiv ebx
lea eax, [edx - 1]
cmp eax, 1
sbb eax, eax
inc eax
or ecx, eax
je 0x460f7f
jl 0x460f63
jge 0x460f63
jmp 0x460fca
mov ax, word [ebp - 0x58]
mov word [ebp - 0x5e], ax
jle 0x460f70
jg 0x460f70
fisub word [esi - 0x39]
inc ebp
cmpsb byte [esi], byte es:[edi]
add dword [eax], eax
mov word [ebp - 0x5a], 1
push ecx
xor ecx, ecx
jecxz 0x460f7c
lds ebx, [ecx - 0x15]
push es
pop ecx
jmp 0x460f85
mov word [ebp - 0x5a], 0
jmp 0x460f88
jmp 0x460fc1
jbe 0x460f8f
ja 0x460f8f
mov ebx, 0xaa45ff66
inc word [ebp - 0x56]
jns 0x460f98
js 0x460f98
fucomi st(3)
daa
jmp 0x460fc1
jmp 0x460fc1
cmp dword [ebp - 0x94], 7
je 0x460f8a
cmp dword [ebp - 0x94], 8
je 0x460f27
cmp dword [ebp - 0x94], 0x17
je 0x460f1d
jmp 0x460fc1
jmp 0x460ecc
jns 0x460fcb
js 0x460fcb
invalid
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 7
cdq
idiv ecx
lea eax, [edx - 2]
cmp eax, 1
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ebx, 0xb
cdq
idiv ebx
lea eax, [edx - 5]
cmp eax, 1
sbb eax, eax
neg eax
or ecx, eax
je 0x461025
jp 0x461008
jnp 0x461008
or al, 0x66
mov eax, dword [ebp - 0x58]
mov ax, word [ebp - 0x58]
mov word [ebp - 0x5e], ax
jl 0x461015
jge 0x461015
mov edx, 0xa645c766
add dword [eax], eax
mov word [ebp - 0x5a], 1
jle 0x461020
jg 0x461020
invalid
jmp 0x4612b4
push ecx
xor ecx, ecx
jecxz 0x46102b
int 0x59
pop ecx
xor eax, eax
mov ax, word [ebp - 0x6e]
xchg edx, eax
mov dword [ebp - 0x98], eax
jmp 0x4610a0
jmp 0x46103d
jmp 0x4618d8
jo 0x461047
jno 0x461047
js 0x461031
jmp 0x461981
xor eax, 0x72000009
add esi, dword [ebx + 1]
jb 0x461051
jae 0x461051
add dword [edx + 0x944e9], esp
mov byte [0x944e9], al
jmp 0x46199a
add byte [ebp + 3], dh
jne 0x46105b
je 0x46105b
invalid
jmp 0x4619e8
jbe 0x461065
ja 0x461065
loopne 0x46104f
jmp 0x4619ee
test byte [ecx], cl
add byte [eax], al
jns 0x46106f
js 0x46106f
ret 0x1de9
jmp 0x461a91
jp 0x461079
jnp 0x461079
mov dword [0xa90e9], eax
add byte [ebx + eax + 0x7d], bh
jl 0x461083
jge 0x461083
invalid
jmp 0x461b0e
jl 0x461083
jge 0x461083
add ebp, ecx
and dword [ebx], ecx
add byte [eax], al
jmp 0x461ba9
jle 0x46108d
jg 0x46108d
and eax, 0xc01e9
add byte [ecx + 0x31], dl
push ecx
xor ecx, ecx
jmp 0x461c93
push ecx
xor ecx, ecx
jecxz 0x461098
jge 0x4610f2
pop ecx
jmp 0x461ccf
cmp dword [ebp - 0x98], 9
ja case.default.0x4610af
mov eax, dword [ebp - 0x98]
jmp dword [eax*4 + 0x4610b6]
jmp 0x4610e1
jo 0x4610e6
jno 0x4610e6
add dword [ecx - 0x22b17], esp
mov eax, dword [0xfffdd4e9]
jmp 0x460ebf
push dword [edx + 3]
jb 0x4610f0
jae 0x4610f0
mov cl, 0xe9
dec eax
jmp 0x460d3d
cld
invalid
jne 0x4610fa
je 0x4610fa
js 0x4610e4
jmp 0x461cfb
cld
or eax, dword [eax]
add byte [esi + 3], dh
jbe 0x461104
ja 0x461104
shl byte [esi - 0x39], 1
inc ebp
mov ah, 0
add bl, ch
add al, 0x66
inc dword [ebp - 0x4c]
mov word [ebp - 0x4c], 0
jmp 0x461110
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 4
jge 0x461299
jns 0x461126
js 0x461126
ror dword [ebx - 0xda4bbb], 1
inc dword [eax]
add byte [ebx - 0x1e7e4bb3], cl
invalid
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
lea ecx, [ecx + ecx*2]
add eax, ecx
inc eax
mov dword [ebp - 0x9c], eax
jmp 0x461249
jle 0x461159
jg 0x461159
jge case.0x4611f0.3
xor eax, eax
mov ax, word [ebp - 0x6e]
shl byte [esi - 0x75], 0x45
xchg edx, eax
mov ecx, dword [ebp - 0x5c]
and ecx, 0xffff
cmp eax, ecx
jne case.default.0x4611f0
push ecx
xor ecx, ecx
jecxz 0x461176
sub al, 0x59
pop ecx
xor eax, eax
mov ax, word [ebp - 0x56]
mov ecx, 9
cdq
idiv ecx
mov dword [ebp - 0xa0], edx
jmp 0x4611e1
jmp 0x461190
jmp 0x4610f5
jo 0x46119a
jno 0x46119a
mov cl, 0xe9
push ss
std
invalid
jmp 0x460eb5
jmp 0x4611a2
jmp 0x4618d0
jb 0x4611ac
jae 0x4611ac
mov bl, 0xe9
jmp 0x764611ae
invalid
jmp 0x460e9a
jne 0x4611b6
je 0x4611b6
mov ah, 0xe9
cmp eax, 0xebfffffb
jmp 0x4611be
mov ch, 0xe9
test bl, bh
invalid
push dword [esi + 3]
jbe 0x4611c8
jmp 0x460cf8
jmp 0x4611be
jmp 0x460d47
jbe 0x4611c8
ja 0x4611c8
mov dh, 0xe9
pop edi
sti
invalid
jmp 0x460d2c
jmp 0x4611d0
jmp 0x4612a8
jns 0x4611da
js 0x4611da
mov eax, 0x2f4e9
add bl, ch
cmp al, byte [ebx - 0x9f43]
dec dword [eax]
jmp 0x4614d3
cmp dword [ebp - 0xa0], 8
ja case.default.0x4611f0
mov eax, dword [ebp - 0xa0]
jmp dword [eax*4 + 0x4611f7]
add bl, ch
add ecx, esp
jmp 0x46121e
jmp case.0x461266.4
jp 0x461225
jnp 0x461225
jge 0x46128c
inc word [ebp - 0x6e]
inc dword [ebp - 0x6e]
jl 0x46122e
jge 0x46122e
jge 0x46121a
jmp case.0x461266.4
jmp 0x461233
jmp 0x461233
add dword [esi + 0x37a7feb], ecx
jmp 0x4612b4
jp 0x46123a
jnp 0x46123a
and ah, byte [esi - 0x39]
inc ebp
cmpsb byte [esi], byte es:[edi]
add dword [eax], eax
mov word [ebp - 0x5a], 1
jl 0x461245
jge 0x461245
loop 0x461231
jmp case.0x461266.4
dec ebp
jmp case.0x461266.4
dec dword [ebp - 0x9c]
cmp dword [ebp - 0x9c], 0x12
ja case.0x461266.4
mov eax, dword [ebp - 0x9c]
xor ecx, ecx
mov cl, byte [eax + 0x461281]
jmp dword [ecx*4 + 0x46126d]
add al, 4
add al, 4
add al, 4
add al, 3
jmp 0x46110c
jle 0x46129e
jg 0x46129e
and cl, ch
sbb al, 0xfc
invalid
jmp 0x460ebf
jmp 0x4612a6
jmp 0x461299
push ecx
xor ecx, ecx
jecxz 0x4612ae
jno 0x461308
pop ecx
jmp 0x461cfb
jmp 0x4612b7
mov word [ebp - 0x4c], 0
jmp 0x4612c3
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 8
jge 0x4614c1
jo 0x4612d9
jno 0x4612d9
ror dword [ebx - 0xda4bbb], 1
inc dword [eax]
add byte [ebx - 0x1e7e4bb3], cl
invalid
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
add eax, ecx
inc eax
mov dword [ebp - 0xa4], eax
jmp 0x46143b
jmp 0x461307
xor eax, eax
mov ax, word [ebp - 0x5a]
shl byte [esi - 0x75], 0x45
cmpsb byte [esi], byte es:[edi]
cdq
xor eax, edx
sub eax, edx
and eax, 1
xor eax, edx
sub eax, edx
mov dword [ebp - 0xa8], eax
jmp 0x461335
jb 0x461326
jae 0x461326
jecxz 0x461310
jmp 0x460fc6
wait
cld
invalid
jmp 0x46132e
jmp 0x4614db
cmp dword [ebp - 0xa8], 0
je 0x461321
cmp dword [ebp - 0xa8], 1
je 0x46132b
jmp 0x461349
jne 0x46134e
je 0x46134e
fldl2t
imul eax, dword [ecx], 0x3750000
jne 0x461358
jmp case.0x461458.8
jne 0x461358
je 0x461358
mov edi, 0x5ae045c7
add dword [eax], eax
add bl, ch
add ebp, edx
mov dword [ebp - 0x20], 0x15a
jmp 0x461362
mov dword [ebp - 0x28], 0x4e35
jbe 0x46136e
ja 0x46136e
sbb ebp, ecx
dec ecx
add dword [eax], eax
add bl, ch
jmp 0x461376
mov ebp, 0xec7d83
jmp case.0x461458.8
jmp 0x461376
cmp dword [ebp - 0x14], 0
je 0x46138b
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x28]
and eax, 0xffff
add dword [ebp - 0x24], eax
jp 0x461390
jnp 0x461390
imul ecx
daa
add dword [eax], eax
add bl, ch
jmp 0x461398
mov esi, 0xfe0458b
scasd eax, dword es:[edi]
inc ebp
in al, 0x25
invalid
jmp case.0x461458.8
jmp 0x461398
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x1c]
and eax, 0xffff
mov dword [ebp - 0x24], eax
jns 0x4613ac
js 0x4613ac
sub ebp, ecx
or eax, dword [ecx]
add byte [eax], al
jmp case.0x461458.8
jmp 0x4613b4
mov eax, dword [ebp - 0x24]
shl eax, 0x10
and eax, 0xffff0000
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x28]
add eax, ecx
inc eax
mov dword [ebp - 0x30], eax
jl 0x4613d1
jge 0x4613d1
cmp ebp, ecx
out 0, al
add byte [eax], al
jmp case.0x461458.8
jmp 0x4613d9
mov eax, dword [ebp - 0x3c]
shr eax, 0x10
mov dword [ebp - 0x14], eax
jb 0x4613e7
jae 0x4613e7
aam 0x8b
inc ebp
les esp, [0xffff]
mov eax, dword [ebp - 0x3c]
and eax, 0xffff
mov dword [ebp - 0x1c], eax
jmp 0x4613f5
jmp case.0x461458.8
push ecx
xor ecx, ecx
jecxz 0x461400
mov ebx, 0xd0658159
invalid
pop ecx
and dword [ebp - 0x30], 0x7fff
jmp 0x46140b
mov eax, dword [ebp - 0x30]
mov word [ebp - 0x38], ax
jo 0x461417
jno 0x461417
mov ebp, ecx
mov al, byte [0xeb000000]
jmp 0x46141f
mov ebp, 0x89d0458b
inc ebp
les edi, [esi + 3]
jmp case.0x461458.8
jmp 0x46141f
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3c], eax
jle 0x46142a
jg 0x46142a
mov esp, 0x10d06dc1
shr dword [ebp - 0x30], 0x10
jmp 0x461431
jmp case.0x461458.8
dec dword [ebp - 0xa4]
cmp dword [ebp - 0xa4], 0x38
ja case.0x461458.8
mov eax, dword [ebp - 0xa4]
xor ecx, ecx
mov cl, byte [eax + 0x461483]
jmp dword [ecx*4 + 0x46145f]
jmp 0x4612bf
jmp 0x4614c4
jmp 0x460ebf
jbe 0x4614ce
ja 0x4614ce
adc cl, ch
sar ecx, 1
invalid
jmp 0x460ea4
jmp 0x4614d6
jmp 0x461cfb
jns 0x4614e0
js 0x4614e0
fisub dword [esi - 0x39]
inc ebp
mov ah, 0
add bl, ch
add al, 0x66
inc dword [ebp - 0x4c]
mov word [ebp - 0x4c], 0
jmp 0x4614ec
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 7
jge 0x4618b9
jmp 0x461500
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
inc eax
mov dword [ebp - 0xac], eax
jmp 0x461790
jbe 0x461531
ja 0x461531
fmul qword [ebx - 0xda53bb]
inc dword [eax]
add byte [ebp + 0x4d8b4004], cl
mov byte [ecx + 0xffffe1], al
add byte [ebx], al
shl dword [esi - 0x77], 0x45
enter 0x1eb, 0x1d
mov eax, dword [ebp - 0x54]
and eax, 0xffff
lea eax, [eax + eax*2]
mov ecx, dword [ebp - 0x78]
and ecx, 0xffff
add eax, ecx
mov word [ebp - 0x38], ax
jmp 0x46154e
mov ax, word [ebp - 0x38]
mov word [ebp - 0x58], ax
jns 0x46155b
js 0x46155b
sub eax, 0x354e9
add bl, ch
jmp 0x461563
invalid
jmp case.0x4617b4.7
jmp 0x461563
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 3
cdq
idiv ecx
mov word [ebp - 0x78], dx
jle 0x46157c
jg 0x46157c
mov ecx, gs
xor eax, dword [ebx]
add byte [eax], al
jmp case.0x4617b4.7
jmp 0x461584
mov eax, dword [ebp - 0x54]
and eax, 0xffff
mov ecx, dword [ebp - 0x78]
and ecx, 0xffff
add ecx, ecx
lea eax, [ecx + eax*8]
inc word [eax + ebp - 0x74]
jne 0x4615a4
je 0x4615a4
or eax, 0xa8458b66
mov ax, word [ebp - 0x58]
mov word [ebp - 0x5e], ax
jmp 0x4615af
jmp case.0x4617b4.7
jo 0x4615b9
jno 0x4615b9
mov esp, dword [esi - 0x39]
inc ebp
mov eax, 0x4eb0000
mov word [ebp - 0x48], 0
jmp 0x4615c5
inc word [ebp - 0x48]
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, 3
jge 0x461623
jmp 0x4615d5
mov eax, dword [ebp - 0x54]
and eax, 0xffff
mov ecx, dword [ebp - 0x78]
and ecx, 0xffff
add ecx, ecx
lea eax, [ecx + eax*8]
mov eax, dword [eax + ebp - 0x74]
and eax, 0xffff
mov ecx, dword [ebp - 0x54]
and ecx, 0xffff
mov edx, dword [ebp - 0x48]
and edx, 0xffff
add edx, edx
lea ecx, [edx + ecx*8]
mov ecx, dword [ecx + ebp - 0x74]
and ecx, 0xffff
cmp eax, ecx
jle 0x461621
mov ax, word [ebp - 0x48]
mov word [ebp - 0x78], ax
jmp 0x4615c1
jb 0x461628
jae 0x461628
call 0x489e15
add byte [edx + 3], bh
jp 0x461632
jmp case.0x4617b4.7
jp 0x461632
jnp 0x461632
in al, 0x8b
inc ebp
enter 0xffffffffffffff25, 0xffffffffffffffff
add byte [eax], al
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 9
cdq
idiv ecx
mov word [ebp - 0x38], dx
jmp 0x461649
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 3
cdq
idiv ecx
mov word [ebp - 0x54], ax
jl 0x461662
jge 0x461662
lcall 0xeb00, 0x24de9
add ecx, ebp
jmp case.0x4617b4.7
jmp 0x46166a
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 9
cdq
idiv ecx
mov dword [ebp - 0xb0], edx
jmp 0x4616d8
jp 0x461687
jnp 0x461687
invalid
jmp 0x4610eb
jmp 0x46168f
jmp 0x460ead
jl 0x461699
jge 0x461699
ljmp 0xeb00:0x228e9
jmp 0x4618c6
jmp 0x4616a1
jmp 0x460e90
jle 0x4616ab
jg 0x4616ab
out 0xe9, al
pop esi
idiv bh
call dword [ecx + 0x31]
push ecx
xor ecx, ecx
jmp 0x460d0e
push ecx
xor ecx, ecx
jecxz 0x4616b6
in al, 0x59
pop ecx
jmp 0x460d36
jmp 0x4616bf
jmp 0x460d22
jo 0x4616c9
jno 0x4616c9
loopne 0x4616b3
jmp 0x4612a3
aad 0xfb
invalid
jmp 0x4616d1
jmp 0x4614c9
cmp dword [ebp - 0xb0], 8
ja case.default.0x4616e7
mov eax, dword [ebp - 0xb0]
jmp dword [eax*4 + 0x4616ee]
jmp 0x461715
mov word [ebp - 0x40], 0
jmp 0x461721
inc word [ebp - 0x40]
mov eax, dword [ebp - 0x40]
and eax, 0xffff
cmp eax, 3
jge 0x461783
push ecx
xor ecx, ecx
jecxz 0x461734
mov esp, 0xc0458b59
pop ecx
mov eax, dword [ebp - 0x40]
and eax, 0xffff
mov ecx, dword [ebp - 0x78]
and ecx, 0xffff
add ecx, ecx
lea eax, [ecx + eax*8]
mov eax, dword [eax + ebp - 0x74]
and eax, 0xffff
mov ecx, dword [ebp - 0x54]
and ecx, 0xffff
mov edx, dword [ebp - 0x78]
and edx, 0xffff
add edx, edx
lea ecx, [edx + ecx*8]
mov ecx, dword [ecx + ebp - 0x74]
and ecx, 0xffff
cmp eax, ecx
jge 0x461781
mov ax, word [ebp - 0x40]
mov word [ebp - 0x54], ax
jmp 0x46171d
jmp 0x461786
jmp case.0x4617b4.7
dec dword [ebp - 0xac]
cmp dword [ebp - 0xac], 0xd8
ja case.0x4617b4.7
mov eax, dword [ebp - 0xac]
xor ecx, ecx
mov cl, byte [eax + 0x4617db]
jmp dword [ecx*4 + 0x4617bb]
jmp 0x4614e8
jb 0x4618be
jae 0x4618be
test eax, 0xe92101eb
stc
cmc
invalid
jmp 0x4618c1
jmp 0x460ebf
jne 0x4618cb
je 0x4618cb
xor ecx, ebp
dec eax
hlt
jmp 0x460d18
jmp 0x4618d3
jmp 0x461cfb
nop
jne 0x4618de
je 0x4618de
mov al, 0xe8
xchg ecx, eax
and eax, 0x3d830000
jl 0x4618f7
call fcn.00463e74
cmp dword [0x47107c], 0
inc edi
add byte [eax], al
jne 0x46194e
call fcn.00461e5b
test eax, eax
je 0x461949
mov eax, dword [0x471f30]
dec eax
mov ecx, eax
lea eax, [eax + eax*4]
pop ds
inc edi
add byte [eax - 0x75], cl
enter 0x48d, 0xffffffffffffff80
lea eax, [eax + eax*4]
lea eax, [ecx + eax*2]
lea eax, [eax*2 + 0x471010]
add eax, 0x614
mov dword [ebp - 0x2c], eax
cmp dword [0x4715e2], 0
je 0x461937
push 0x40
mov eax, 0x471010
add eax, 0x5d6
push eax
mov eax, dword [ebp - 0x2c]
push eax
push 0
call dword [sym.imp.user32.dll_MessageBoxA]
mov dword [0x471a64], 1
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_ExitProcess]
call fcn.00462aef
mov word [ebp - 0x48], 0
jmp 0x46195a
inc word [ebp - 0x48]
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, 0x1e
jge 0x46197c
mov eax, dword [ebp - 0x48]
and eax, 0xffff
mov dword [eax*4 + 0x4710a4], 0xffffffff
jmp 0x461956
jmp 0x4610ff
nop
jbe 0x461987
ja 0x461987
mov dl, 0xe8
fst qword [ecx]
add byte [eax], al
call 0x462b69
test eax, eax
jne 0x461995
jmp 0x461d08
jmp 0x4610ff
nop
jns 0x4619a0
js 0x4619a0
mov ah, 0x83
cmp eax, 0x471a20
add byte [edx + edi - 0x39], dh
inc ebp
clc
or eax, dword [eax]
add byte [eax], al
cmp dword [0x471a20], 0
je 0x4619e3
mov dword [ebp - 8], 0xb
jmp 0x4619b3
lea eax, [ebp - 0x34]
push eax
push 0
lea eax, [ebp - 8]
push eax
push 0x460b69
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xffffffff
jne 0x4619e3
jmp 0x4619d8
push 0x9999
call dword [sym.imp.kernel32.dll_ExitProcess]
jmp 0x4610ff
nop
jmp 0x4610ff
nop
jl 0x4619f4
jge 0x4619f4
mov eax, 0x471a2ca1
add byte [eax - 0x18], dl
jmp esp
mov eax, dword [0x471a2c]
push eax
call fcn.0045fefe
add esp, 4
mov dword [0x471a2c], eax
mov eax, dword [0x471a30]
push eax
call fcn.0045fefe
add esp, 4
mov dword [0x471a30], eax
mov eax, dword [0x471a34]
push eax
call fcn.0045fefe
add esp, 4
mov dword [0x471a34], eax
mov eax, dword [0x471a38]
push eax
call fcn.0045fefe
add esp, 4
mov dword [0x471a38], eax
mov eax, dword [0x471a3c]
push eax
call fcn.0045fefe
add esp, 4
mov dword [0x471a3c], eax
mov eax, dword [0x471a40]
push eax
call fcn.0045fefe
add esp, 4
mov dword [0x471a40], eax
mov eax, dword [0x471a44]
push eax
call fcn.0045fefe
add esp, 4
mov dword [0x471a44], eax
mov eax, dword [0x471a48]
push eax
call fcn.0045fefe
add esp, 4
mov dword [0x471a48], eax
jmp 0x4610ff
nop
jle 0x461a97
jg 0x461a97
mov edx, 0x471a4ca1
add byte [eax - 0x18], dl
pop esp
in al, 0xff
inc dword [ebx + 0x4ca304c4]
sbb al, byte [edi]
mov eax, dword [0x471a4c]
push eax
call fcn.0045fefe
add esp, 4
mov dword [0x471a4c], eax
mov eax, dword [0x471a50]
push eax
call fcn.0045fefe
add esp, 4
mov dword [0x471a50], eax
mov eax, dword [0x471a54]
push eax
call fcn.0045fefe
add esp, 4
mov dword [0x471a54], eax
mov eax, dword [0x471a58]
push eax
call fcn.0045fefe
add esp, 4
mov dword [0x471a58], eax
mov eax, dword [0x471a5c]
push eax
call fcn.0045fefe
add esp, 4
mov dword [0x471a5c], eax
mov eax, dword [0x471a60]
push eax
call fcn.0045fefe
add esp, 4
mov dword [0x471a60], eax
jmp 0x4610ff
nop
push ecx
xor ecx, ecx
jecxz 0x461b15
mov edi, 0x4c05c759
and eax, 0x47
add byte [eax], al
pop ecx
mov dword [0x47254c], 0
call dword [sym.imp.kernel32.dll_GetVersion]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x80000000
jae 0x461b66
push 0x471f44
call dword [sym.imp.kernel32.dll_LoadLibraryA]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x461b64
push 0x471f50
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
mov dword [0x47254c], eax
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.kernel32.dll_FreeLibrary]
jmp 0x461ba4
xor eax, eax
mov al, byte [ebp - 0xc]
cmp eax, 4
jge 0x461b72
jmp 0x461ba4
push 0x471f60
call dword [sym.imp.kernel32.dll_LoadLibraryA]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x461ba4
push 0x471f6c
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
mov dword [0x47254c], eax
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.kernel32.dll_FreeLibrary]
jmp 0x4610ff
nop
jmp 0x461bad
cmp dword [0x4712a6], 0
je 0x461c8e
mov dword [ebp - 0x7c], 0x400
mov eax, dword [ebp - 0x7c]
cmp dword [0x4712c2], eax
jge 0x461bd4
mov eax, dword [0x4712c2]
mov dword [ebp - 0x7c], eax
mov eax, dword [0x471074]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
call fcn.004636db
add esp, 4
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
call fcn.00460ab4
add esp, 4
mov dword [ebp - 0x10], eax
mov word [ebp - 0x48], 0
jmp 0x461c06
inc word [ebp - 0x48]
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, dword [ebp - 0x7c]
jge 0x461c7a
call fcn.00461d0d
mov eax, dword [ebp - 0x48]
and eax, 0xffff
push eax
mov eax, dword [ebp - 4]
inc dword [eax]
add byte [eax - 0x75], dl
inc ebp
cld
push eax
call fcn.0046366c
add esp, 8
test eax, eax
jne 0x461c78
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, dword [ebp - 0x10]
jl 0x461c51
mov eax, dword [ebp - 0x10]
add eax, 4
mov ecx, dword [ebp - 0x48]
and ecx, 0xffff
cmp eax, ecx
jg 0x461c78
mov eax, dword [ebp - 0x48]
and eax, 0xffff
mov ecx, dword [ebp - 0x44]
xor edx, edx
mov dl, byte [ecx + eax]
xor eax, eax
mov al, byte [0x4712c6]
sub edx, eax
mov eax, dword [ebp - 0x48]
and eax, 0xffff
mov ecx, dword [ebp - 0x44]
mov byte [ecx + eax], dl
jmp 0x461c02
mov dword [0x47104c], 1
mov dword [0x4712a6], 0
jmp 0x4610ff
nop
jo 0x461c99
jno 0x461c99
jno 0x461c1d
cmp dword [0x4712b6], 0
je 0x461cca
cmp eax, 0x4712b6
add byte [eax + ebp - 0x7f], dh
cmp eax, 0x4712d6
push esi
inc edx
xor eax, 0x680f754d
cmp dword [0x4712d6], 0x4d354256
jne 0x461cbd
push 0x471f7c
call fcn.0045ff7a
add esp, 4
jmp 0x461cca
jl 0x461cd0
inc edi
add al, ch
ret 0xffe2
push 0x471f8c
call fcn.0045ff7a
add esp, 4
jmp 0x4610ff
cmp dword [0x47107c], 0
jne 0x461ce1
cmp eax, 0x47107c
add byte [ebp + 9], dh
cmp dword [0x4712ae], 0
je 0x461ce1
add byte [eax + 0x1730372], dl
nop
jb 0x461ce7
jae 0x461ce7
jae 0x461caf
mov dword [0x471a64], 1
add eax, 0x471a64
add dword [eax], eax
add byte [eax], al
jo 0x461cf6
jno 0x461cf6
jno 0x461ce0
jmp 0x4610ff
add al, 0xf4
invalid
pop eax
pop ebx
pop ecx
pop edx
pop edi
pop esi
leave
jmp dword [0x471020]
pop edi
pop esi
pop ebx
leave
ret