Function at 0x20475b00
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10c
push ebx
push esi
push edi
mov dword [ebp - 0xfc], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x1c], 4
cmp dword [0x20461dfc], 0
je 0x20475322
jmp 0x204798dd
mov eax, dword [0x20461dfc]
add eax, 1
mov dword [0x20461dfc], eax
or edi, 0
lea ecx, [ecx + 0x11ba]
lea ecx, [ecx - 0x11ba]
jne 0x2047534f
pushf
rol ecx, 0xa
ror ecx, 0xa
popf
xchg esp, esp
je 0x2047534f
add dword [ebx - 0x3797f714], 0x642047a0
push dword [0]
sub esp, 8
push 0x2047a0c8
push dword fs:[0]
mov dword fs:[0], esp
xchg ecx, eax
xchg ecx, eax
jnp 0x20475369
js 0x20475379
pushf
nop
popf
jb 0x20475372
lea ecx, [ecx]
xchg esp, esp
jns 0x20475379
mov esi, 0xff057fe8
invalid
call fcn.204658fd
cmp ecx, edi
jnp 0x20475382
lea esi, [esi + 0x2623]
sub esi, 0x2623
mov eax, eax
jp 0x204753aa
pushf
cmp edi, dword [esp + 8]
rol edi, 0x11
rol edi, 0xf
lea ebx, [ebx]
popf
lea esp, [esp]
jmp 0x204753a7
jnp 0x204753aa
sub eax, 0x69c05c7
inc esi
and byte [ecx], al
add byte [eax], al
add byte [ecx + 0x1c98fa], al
add byte [ebx - 0x3f74ff3a], al
mov dword [0x2046069c], 1
cmp edx, 0x1c98
add esi, 0
mov eax, eax
jnp 0x204753d1
pushf
cmp eax, dword [esp]
test eax, esi
xchg esp, esp
popf
jo 0x204753ce
jp 0x204753d1
jmp 0x6568448e
mov ecx, 0x204520f0
sub ecx, section.0000007
mov dword [0x20460904], ecx
lea ecx, [ecx + 0x57c1]
lea ecx, [ecx - 0x57c1]
rol esi, 0x13
ror esi, 0x13
jl 0x20475402
jnp 0x204753f8
mov esp, esp
jp 0x204753fc
lea edx, [edx]
jge 0x20475402
mov ecx, 0x4158bcd
or dword [esi + 0x20], eax
mov edx, dword [0x20460904]
and edx, 0x80000007
jns 0x20475415
dec edx
or edx, 0xfffffff8
inc edx
mov eax, dword [0x20460904]
sub eax, edx
mov dword [0x20460904], eax
xor edi, 0x647f
xor edi, 0x647f
xor ecx, dword [esp + 0xc]
xor ecx, dword [esp + 0xc]
xor ecx, dword [esp + 4]
xor ecx, dword [esp + 4]
jp 0x20475451
pushf
jmp 0x20475443
dec ecx
inc ecx
js 0x20475447
popf
lea esp, [esp]
jbe 0x2047544e
jnp 0x20475451
mov esi, 0x14fa6e8
add byte [ebx], bh
fdivr dword [ecx + 9]
call 0x2048a3fc
cmp ebx, eax
jns 0x20475463
je 0x2047545c
js 0x2047545e
jb 0x20475460
js 0x20475463
mov esp, 0x4604d068
and bh, bh
adc eax, sym.imp.KERNEL32.dll_LoadLibraryA
push 0x204604d0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x204604dc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x204604e8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
add esp, 0
jne 0x20475489
js 0x2047549b
pushf
shl esi, 0
jmp 0x20475492
popf
jle 0x20475496
mov ebx, ebx
jns 0x2047549b
mov eax, 0xffa6d8e8
invalid
call 0x2046fb78
jp 0x204754a2
ror eax, 0x1b
ror eax, 5
jo 0x204754c2
pushf
call 0x204754b1
lea esp, [esp + 4]
ror esp, 0
popf
jnp 0x204754bc
lea esp, [esp]
jno 0x204754c2
sub eax, 0xe3700d8b
inc ebp
and byte [ecx + 0x45c7ac0d], cl
and cl, al
in al, 0
mov ecx, dword [0x2045e370]
mov dword [0x2045c7ac], ecx
shl esp, 0
test esp, 0x7f18
ja 0x204754d9
jns 0x204754e2
jl 0x204754dd
js 0x204754df
js 0x204754e2
sub eax, 0xe374158b
inc ebp
and byte [ecx + 0x45bfe815], cl
and byte [ebx], dh
mov edx, dword [0x2045e374]
mov dword [0x2045bfe8], edx
jae 0x204754f0
js 0x204754f2
jg 0x20475510
pushf
nop
dec ecx
inc ecx
lea esi, [esi]
push ecx
pop ecx
popf
jle 0x20475501
lea ebx, [ebx + 0x5a2]
lea ebx, [ebx - 0x5a2]
jle 0x20475510
add eax, 0x45e378a1
and byte [ebx + 0x2045bfec], ah
mov eax, dword [0x2045e378]
mov dword [0x2045bfec], eax
test edi, 0x52f7
jno 0x2047552d
jnp 0x20475524
jae 0x20475526
xchg ebx, eax
xchg ebx, eax
lea eax, [eax]
jo 0x2047552d
mov eax, 0x7c68406a
jecxz 0x20475578
push 0x40
push 0x2045e37c
push 0x2045bff0
call fcn.20486934
add esp, 0xc
lea ecx, [ecx + 0x624c]
sub ecx, 0x624c
cmp edx, 0x45c
lea ecx, [ecx]
jno 0x2047555f
and byte [eax - 0x10], ch
mov edi, 0xf6e82045
adc eax, dword [ecx]
add byte [ebx - 0x7672f33c], al
dec esp
bound eax, qword [eax]
add byte [ecx + 0x624ce9], al
add byte [ecx + 0x45cfa], al
add byte [ebp - 0x14f78ef7], cl
add byte [esi], bh
jmp 0x20475559
jle 0x2047555b
jo 0x2047555f
mov ecx, 0xbc0d8b3d
jecxz 0x204755a9
mov ecx, dword [0x2045e3bc]
mov dword [0x2045c85c], ecx
test edi, 0x14e8
jnp 0x20475573
and byte [ecx + 0x45c85c0d], cl
and bh, dh
invalid
xor esp, 0
jp 0x20475590
pushf
cmp esp, 0x37dd
cmp eax, 0x2b9
popf
xchg edi, eax
xchg edi, eax
jl 0x2047558b
jmp 0x2047558d
jnp 0x20475590
mov esp, 0xe3c0158b
inc ebp
and byte [ecx + 0x45c86015], cl
and byte [ebx], bh
invalid
mov edx, dword [0x2045e3c0]
mov dword [0x2045c860], edx
cmp esi, eax
and edi, 0xffffffff
je 0x204755ae
pushf
std
cld
popf
jo 0x204755ab
jne 0x204755ae
mov ebx, 0x45e3c4a1
and byte [ebx + 0x2045c864], ah
mov eax, dword [0x2045e3c4]
mov dword [0x2045c864], eax
mov esi, esi
call 0x204755bf
add esp, 4
ror esp, 0
jl 0x204755da
lea eax, [eax + 0x3fdc]
lea eax, [eax - 0x3fdc]
jb 0x204755d5
jg 0x204755d7
jge 0x204755da
mov eax, 0xe3c80d8b
inc ebp
and byte [ecx + 0x45c8680d], cl
and byte [ebx + 0x45ea2015], cl
and byte [ecx + 0x45c88815], cl
and byte [ecx + 0x2045ea24], ah
mov ecx, dword [0x2045e3c8]
mov dword [0x2045c868], ecx
mov edx, dword [0x2045ea20]
mov dword [0x2045c888], edx
mov eax, dword [0x2045ea24]
mov dword [0x2045c88c], eax
mov ecx, dword [0x20456de4]
mov dword [0x2045c890], ecx
mov edx, dword [0x20456de8]
mov dword [0x2045c894], edx
shl esp, 0
cmc
stc
jl 0x20475620
jb 0x2047561d
jge 0x20475620
mov edx, 0xff224ce8
jmp dword [ebx + 0x20461a40]
call 0x20467871
mov dword [0x20461a40], eax
push 0x94
push 0
push 0x2045c040
call fcn.20480c68
add esp, 0xc
not eax
not eax
xchg esp, esp
jnp 0x2047564d
lea ecx, [ecx]
jp 0x2047564d
ljmp 0xc040:0x5c77b57
mov dword [0x2045c040], 0x94
cmp ecx, edx
jg 0x2047565b
cmp edx, 0x5aa9
jle 0x20475674
pushf
ror ecx, 0xc
rol ecx, 0xc
popf
xchg esp, esp
jg 0x20475671
jg 0x20475674
mov edx, 0x45c04068
and al, ch
mov esi, 0x330000f5
inc esp
and al, 4
push 0x2045c040
call 0x20484c3c
xor eax, dword [esp + 4]
xor eax, dword [esp + 4]
add esp, 0
jp 0x20475695
js 0x2047568d
jae 0x2047568f
jl 0x20475691
jnp 0x20475695
jmp 0x20e3bf81
push 0x9c
push 0
push 0x2045c1e8
call fcn.20480c68
add esp, 0xc
jns 0x204756ab
ror edi, 0
jl 0x204756b0
jae 0x204756c8
jbe 0x204756b4
lea esp, [esp]
xchg esp, esp
lea eax, [eax + 0x74ac]
lea eax, [eax - 0x74ac]
jb 0x204756c8
mov edi, 0xc1e805c7
inc ebp
and byte [eax + eax - 0xdd0000], bl
mov dword [0x2045c1e8], 0x9c
and edi, edi
jl 0x204756d6
je 0x204756de
lea esp, [esp]
jne 0x204756de
add eax, 0x45c1e868
and al, ch
push esp
cmc
add byte [eax], al
push 0x2045c1e8
call 0x20484c3c
js 0x204756ea
clc
cmp edi, 0x4cc0
jns 0x20475707
pushf
or esp, 0
xchg ecx, edx
xchg ecx, edx
nop
popf
nop
jle 0x20475702
jb 0x20475704
js 0x20475707
sub dword [eax + 0x14], 0x6a000001
add byte [eax - 0x2c], ch
rol byte [ebp + 0x20], 0xe8
push eax
mov ch, 0
add byte [ebx - 0x7203f33c], al
mov edi, 0x3f48
push 0x114
push 0
push 0x2045c0d4
call fcn.20480c68
add esp, 0xc
cld
lea edi, [edi + 0x3f48]
lea edi, [edi - 0x3f48]
jg 0x20475743
pushf
xor eax, 0
jp 0x20475731
add eax, 0
rol ebx, 0xf
rol ebx, 0x11
popf
jle 0x2047573e
jns 0x20475740
jle 0x20475743
add edi, 0x45c0d405
and byte [ecx + eax], dl
add byte [eax], al
mov dword [0x2045c0d4], 0x114
je 0x2047574f
cmp esi, dword [esp]
jge 0x2047575e
mov ecx, ecx
jle 0x20475758
js 0x2047575a
jl 0x2047575e
add dword [eax], 0x45c0d468
and al, ch
jmp 0x93d85769
push 0x2045c0d4
call 0x204740cd
nop
jae 0x20475774
xchg ebx, ebx
mov ecx, ecx
jl 0x20475771
jb 0x20475774
call fcn.204873e0
add byte [edx], ch
push 0x11c
push 0
push 0x2045c284
call fcn.20480c68
add esp, 0xc
lea edi, [edi + 0x1076]
lea edi, [edi - 0x1076]
jae 0x20475796
jle 0x204757a5
pushf
mov edx, edx
popf
jns 0x204757a0
jae 0x204757a2
jg 0x204757a5
xor eax, 0xc28405c7
inc ebp
and byte [ecx + eax], bl
add byte [eax], al
mov dword [0x2045c284], 0x11c
shr esp, 0
or esp, 0
shl ecx, 0
ja 0x204757ba
jo 0x204757d4
jmp 0x204757be
xchg esi, ecx
xchg esi, ecx
lea eax, [eax + 0x6483]
lea eax, [eax - 0x6483]
jge 0x204757d0
jno 0x204757d4
mov esp, 0xc28468c2
inc ebp
and al, ch
out dx, eax
call 0x20c157df
push 0x2045c284
call 0x204740cd
jns 0x204757e0
jb 0x204757ed
pushf
push edi
pop edi
popf
jae 0x204757ea
jae 0x204757ed
ljmp 0xa3ff:0xfee9b4e8
call 0x204641a6
mov dword [0x2045c3a0], eax
cmc
jae 0x204757ff
xchg esi, esi
jb 0x204757ff
mov ebp, 0x57ece8
add byte [ebx + 0x2045c3a4], ah
call 0x2047aff0
mov dword [0x2045c3a4], eax
lea esp, [esp]
jge 0x20475816
jl 0x20475810
jne 0x20475812
jl 0x20475816
mov esi, 0xe8006a1b
dec ebp
push ebx
invalid
push 0
call fcn.2046ab6a
mov dword [0x2045c3a8], eax
cmp eax, 0x7625
mov ebx, ebx
rol esi, 0xb
rol esi, 0x15
jns 0x20475849
pushf
xor edi, 0x5f3a
xor edi, 0x5f3a
shl esp, 0
popf
jns 0x20475846
js 0x20475849
sub dword [edx], 0x11b22e8
add byte [ebx + 0x2045c3ac], ah
push 0
call 0x20487372
mov dword [0x2045c3ac], eax
lea edi, [edi + 0x7b98]
sub edi, 0x7b98
jo 0x20475863
jns 0x20475865
test dword [esp + 8], edx
jg 0x2047587e
pushf
jns 0x2047586f
lea edx, [edx]
ror esi, 5
ror esi, 0x1b
popf
jg 0x2047587b
jle 0x2047587e
mov edi, 0x10468
add byte [eax - 0x50], ch
ret
push 0x104
push 0x2045c3b0
push 0
call fcn.2046c2c4
mov dword [0x2045c4b4], eax
sub esp, 0
jo 0x204758ab
pushf
neg ecx
neg ecx
jo 0x204758a1
popf
jns 0x204758a5
jmp 0x204758a7
nop
jno 0x204758ab
mov edx, 0x10468
add byte [eax - 0x48], ch
les eax, [ebp + 0x20]
push 0x104
push 0x2045c4b8
push 0
call fcn.20482bc4
mov dword [0x2045c6c0], eax
ror edx, 0x15
ror edx, 0xb
push edx
add edx, 0x369f
ror edx, 0xb
pop edx
and esp, 0xffffffff
je 0x204758e7
pushf
and ecx, ecx
shr esp, 0
js 0x204758e0
popf
jne 0x204758e4
jne 0x204758e7
add eax, 0x1098de8
add byte [ebx + 0x2045c6c4], ah
call 0x20486279
mov dword [0x2045c6c4], eax
cmp esp, 0x68c8
sub ecx, 0
jo 0x20475901
mov edi, edi
jno 0x20475901
mov ecx, 0xffced2e8
jmp dword [ebx + 0x2045c6c8]
call 0x204727d8
mov dword [0x2045c6c8], eax
add ebx, 0x2f7d
sub ebx, 0x2f7d
test ecx, ebx
ja 0x2047593c
pushf
test dword [esp + 0x10], eax
xor edi, esi
xor edi, esi
xor edi, 0x43fb
xor edi, 0x43fb
popf
mov ecx, ecx
jnp 0x20475937
jbe 0x20475939
jbe 0x2047593c
mov esi, 0xfedf9fe8
jmp dword [ebx + 0x2045c6cc]
call 0x204638e0
mov dword [0x2045c6cc], eax
jnp 0x20475948
cmp eax, edi
test ebx, 0x1b0e
lea edx, [edx]
je 0x20475959
jne 0x20475956
jne 0x20475959
lcall 0x117, 0xf2e8f66a
add byte [ebx + 0x2045c6d0], ah
push 0xfffffffffffffff6
call 0x20487152
mov dword [0x2045c6d0], eax
xor eax, esi
xor eax, esi
jl 0x2047598e
pushf
rol esp, 0
jns 0x20475972
call 0x20475977
add esp, 4
popf
lea ebx, [ebx + 0x3b2d]
lea ebx, [ebx - 0x3b2d]
lea esp, [esp]
jge 0x2047598e
mov eax, 0xbde8f56a
pop ss
add dword [eax], eax
push 0xfffffffffffffff5
call 0x20487152
mov dword [0x2045c6d4], eax
xor esp, 0
ror ecx, 6
ror ecx, 0x1a
cmp ecx, 0x6690
inc edx
dec edx
jg 0x204759c2
pushf
test dword [esp + 0x10], ebx
cmp edi, dword [esp + 4]
jl 0x204759b9
xchg ecx, eax
xchg ecx, eax
popf
jno 0x204759bf
jle 0x204759c2
sub dword [edx - 0xc], 0x11789e8
add byte [ebx + 0x2045c6d8], ah
push 0xfffffffffffffff4
call 0x20487152
mov dword [0x2045c6d8], eax
jp 0x204759d0
nop
jg 0x204759e0
pushf
ja 0x204759d7
popf
xchg esp, esp
jp 0x204759dd
jle 0x204759e0
jmp 0x1f2019cc
call 0x204632a4
mov dword [0x2045c6dc], eax
ror esi, 0xe
rol esi, 0xe
ror eax, 0xa
ror eax, 0x16
mov esp, esp
inc edi
dec edi
jbe 0x20475a0c
xchg ecx, ebx
xchg ecx, ebx
jg 0x20475a02
xchg edi, edx
xchg edi, edx
jb 0x20475a08
ja 0x20475a0c
mov ecx, 0xc6e4681c
inc ebp
and al, ch
mov ecx, dword [ebx - 0x137c0001]
add byte [ecx], bh
push 0x2045c6e4
call 0x2046e5a1
sub esp, 0
jns 0x20475a1b
ror edx, 0xa
rol edx, 0xa
xchg edx, edx
jb 0x20475a30
pushf
jb 0x20475a29
popf
jo 0x20475a2d
jae 0x20475a30
jmp 0x660e829c
push 0x2045c728
call 0x2046f466
shl ecx, 0
cmp ebx, 0x7175
xchg esi, ebx
xchg esi, ebx
add ecx, 0x3b5d
sub ecx, 0x3b5d
jbe 0x20475a70
pushf
clc
jle 0x20475a5a
nop
popf
jmp 0x20475a5f
lea edx, [edx + 0x2d10]
lea edx, [edx - 0x2d10]
jge 0x20475a6d
ja 0x20475a70
mov edx, 0x6e89e8
add byte [esi - 0x5d], ah
nop
mov dword [ebp + 0x20], 0x10700079
call 0x2047c8fe
mov word [0x2045c790], ax
jns 0x20475a7d
jo 0x20475a8f
pushf
test ecx, edi
cmp edi, dword [esp]
popf
jge 0x20475a8a
xchg edi, edi
jno 0x20475a8f
call 0x1f48047b
jmp dword [ebx + 0x2045c794]
call 0x20465b3d
mov dword [0x2045c794], eax
jg 0x20475a9b
jno 0x20475ab8
pushf
ror ecx, 0xa
ror ecx, 0x16
popf
lea ebx, [ebx + 0x4f7a]
lea ebx, [ebx - 0x4f7a]
jmp 0x20475ab5
jo 0x20475ab8
add eax, 0x78c4e8
add byte [esi - 0x5d], ah
cwde
mov dword [ebp + 0x20], 0x553fbf8d
add byte [eax], al
call 0x2047d381
mov word [0x2045c798], ax
lea edi, [edi + 0x553f]
lea edi, [edi - 0x553f]
and esp, 0xffffffff
je 0x20475af4
lea esi, [esi + 0x436a]
lea esi, [esi - 0x436a]
jg 0x20475ae2
lea eax, [eax + 0x25c1]
lea eax, [eax - 0x25c1]
jno 0x20475af0
jne 0x20475af4
mov edx, 0xe951e85a
add byte [eax], al
call 0x2048444a
mov dword [0x2045c79c], eax
push 0x24
push 0
push 0x2045c76c
call fcn.20480c68
add esp, 0xc
push 0x2045c76c
call fcn.2046a50c
call fcn.204670a0
test eax, eax
je 0x20475b46
cmp dword [0x2045c784], 0x182
je 0x20475b3a
cmp dword [0x2045c784], 0x1e6
jne 0x20475b44
mov dword [0x20461e00], 1
jmp 0x20475b76
xor eax, eax
mov ax, word [0x2045c76c]
test eax, eax
jne 0x20475b6c
xor ecx, ecx
mov cx, word [0x2045c78c]
cmp ecx, 5
jge 0x20475b6a
mov dword [0x20461e00], 1
jmp 0x20475b76
mov dword [0x20461e00], 1
mov edx, dword [0x20461e00]
mov dword [0x2045c7a4], edx
cmp dword [0x2045eaf8], 1
jne 0x20475c9b
push 5
push 0x204604f4
push 0x2045ead9
call fcn.2048290a
add esp, 0xc
test eax, eax
jne 0x20475bf9
push 0xa
call fcn.20486968
add esp, 4
test eax, eax
jne 0x20475bf4
push 0xb
call fcn.20486968
add esp, 4
test eax, eax
jne 0x20475bf4
push 0x14
call fcn.20486968
add esp, 4
test eax, eax
jne 0x20475bf4
mov dword [0x204606a8], 0x23
mov dword [0x20460674], 1
mov dword [0x204606a0], 1
jmp 0x20479995
jmp 0x20475c9b
push 5
push 0x204604fc
push 0x2045ead9
call fcn.2048290a
add esp, 0xc
test eax, eax
jne 0x20475c52
push 0xb
call fcn.20486968
add esp, 4
test eax, eax
jne 0x20475c50
push 0x14
call fcn.20486968
add esp, 4
test eax, eax
jne 0x20475c50
mov dword [0x204606a8], 0x23
mov dword [0x20460674], 1
mov dword [0x204606a0], 1
jmp 0x20479995
jmp 0x20475c9b
push 5
push 0x20460504
push 0x2045ead9
call fcn.2048290a
add esp, 0xc
test eax, eax
jne 0x20475c9b
push 0x14
call fcn.20486968
add esp, 4
test eax, eax
jne 0x20475c9b
mov dword [0x204606a8], 0x23
mov dword [0x20460674], 1
mov dword [0x204606a0], 1
jmp 0x20479995
add ebx, dword [esp]
sub ebx, dword [esp]
mov esp, esp
jge 0x20475cb6
pushf
test ecx, 0x365a
popf
je 0x20475cb1
jle 0x20475cb3
jl 0x20475cb6
mov esi, 0x6a2f6a
push 0x2f
push 0
lea eax, [ebp - 0x4c]
push eax
call fcn.20480c68
add esp, 0xc
jg 0x20475cc8
jne 0x20475cca
rol edi, 0
je 0x20475ceb
pushf
sub esp, 0
test dword [esp], edx
xchg ebx, edx
xchg ebx, edx
call 0x20475ce0
lea esp, [esp + 4]
popf
jae 0x20475ce8
jne 0x20475ceb
jmp 0x751ea2b5
mov byte [ebp - 0x29], 0x54
lea esp, [esp]
jle 0x20475d03
pushf
jno 0x20475cf8
popf
lea edi, [edi]
jmp 0x20475cfe
jbe 0x20475d00
jg 0x20475d03
add esi, 0x8378d345
les eax, [eax]
mov byte [ebp - 0x2d], 0x78
add esp, 0
nop
shl esp, 0
jbe 0x20475d19
jp 0x20475d12
ja 0x20475d14
jns 0x20475d16
ja 0x20475d19
mov edx, 0x75dc45c6
mov byte [ebp - 0x24], 0x75
lea edx, [edx]
add esp, 0
jb 0x20475d2e
pushf
nop
popf
jl 0x20475d2b
jae 0x20475d2e
mov edx, 0x5ebc45c6
mov byte [ebp - 0x44], 0x5e
cmp eax, dword [esp]
jns 0x20475d37
cmp ecx, dword [esp]
jge 0x20475d47
nop
js 0x20475d3f
mov edx, edx
lea esp, [esp]
jl 0x20475d47
mov edi, 0x75df45c6
mov byte [ebp - 0x21], 0x75
jns 0x20475d4d
xchg esp, esp
std
cld
jg 0x20475d53
jns 0x20475d5e
jnp 0x20475d57
jne 0x20475d59
jle 0x20475d5b
js 0x20475d5e
sub eax, 0x4dc545c6
mov byte [ebp - 0x3b], 0x4d
stc
rol ebx, 0x1b
rol ebx, 5
jno 0x20475d93
pushf
call 0x20475d72
add esp, 4
jl 0x20475d77
rol esi, 1
ror esi, 1
ror eax, 0
popf
lea edi, [edi + 0x1650]
lea edi, [edi - 0x1650]
jne 0x20475d8e
xchg edx, edx
jo 0x20475d93
add eax, 0x64da45c6
mov byte [ebp - 0x26], 0x64
rol esp, 0
jo 0x20475d9c
jb 0x20475da3
nop
jae 0x20475da3
mov edx, 0xb845c6c4
pop edx
mov byte [ebp - 0x48], 0x5a
add edi, 0
add esp, 0
test esp, 0x6518
add esp, 0
jbe 0x20475dd7
pushf
add esp, 0
push esi
add esi, 0x24df
ror esi, 0x18
pop esi
ror edi, 0
xor esp, 0
popf
mov esi, esi
ja 0x20475dd4
ja 0x20475dd7
ljmp 0xe3c1:0x4cb445c6
mov byte [ebp - 0x4c], 0x4c
shl ebx, 0
jl 0x20475dff
pushf
xor ebx, dword [esp]
xor ebx, dword [esp]
mov esp, esp
popf
xchg esp, esp
lea ecx, [ecx + 0x2c0a]
lea ecx, [ecx - 0x2c0a]
mov esp, esp
jge 0x20475dff
sub eax, 0x70ce45c6
mov byte [ebp - 0x32], 0x70
lea ebx, [ebx]
cmp ecx, dword [esp + 8]
je 0x20475e16
pushf
lea ecx, [ecx]
popf
jg 0x20475e13
jne 0x20475e16
xor eax, 0x48b745c6
mov byte [ebp - 0x49], 0x48
jb 0x20475e1c
js 0x20475e30
pushf
clc
and eax, eax
jo 0x20475e25
popf
jbe 0x20475e29
jmp 0x20475e2b
jns 0x20475e2d
jns 0x20475e30
mov esi, 0x47d045c6
mov byte [ebp - 0x30], 0x47
xchg esp, esp
jl 0x20475e61
pushf
ja 0x20475e3c
lea edx, [edx]
dec edi
inc edi
jo 0x20475e42
popf
lea ebx, [ebx + 0x1391]
lea ebx, [ebx - 0x1391]
jo 0x20475e52
lea eax, [eax + 0x246f]
lea eax, [eax - 0x246f]
jge 0x20475e61
mov esp, 0x32e145c6
mov byte [ebp - 0x1f], 0x32
jns 0x20475e67
or esi, esi
clc
jno 0x20475e7d
pushf
jb 0x20475e70
jp 0x20475e72
clc
popf
jle 0x20475e77
nop
jl 0x20475e7a
jo 0x20475e7d
mov esi, 0x61c845c6
mov byte [ebp - 0x38], 0x61
cmp ecx, 0xb94
cmp eax, dword [esp + 8]
jl 0x20475ea7
pushf
push edx
add edx, 0x62fc
ror edx, 9
pop edx
sub esp, 0
shl esp, 0
popf
ja 0x20475ea4
jge 0x20475ea7
add eax, 0x74de45c6
mov byte [ebp - 0x22], 0x74
jbe 0x20475ead
lea edi, [edi + 0x62fc]
sub edi, 0x62fc
nop
jl 0x20475ec6
nop
jno 0x20475ebf
jp 0x20475ec1
jg 0x20475ec3
jge 0x20475ec6
add eax, 0x77dd45c6
mov byte [ebp - 0x23], 0x77
xchg ebx, edx
xchg ebx, edx
jbe 0x20475ed0
cmc
jae 0x20475edb
nop
jae 0x20475ed6
nop
jb 0x20475edb
mov ecx, 0xba45c69b
push esi
mov byte [ebp - 0x46], 0x56
mov ecx, ecx
ror esp, 0
xor eax, edx
xor eax, edx
sub esp, 0
je 0x20475eff
pushf
call 0x20475ef4
add esp, 4
popf
lea esp, [esp]
jne 0x20475eff
mov edx, 0x55bf45c6
mov byte [ebp - 0x41], 0x55
cmp ebx, 0x5784
js 0x20475f15
mov esp, esp
nop
xchg esi, ecx
xchg esi, ecx
jns 0x20475f15
mov ecx, 0x66cd45c6
mov byte [ebp - 0x33], 0x66
mov esp, esp
js 0x20475f25
jns 0x20475f1f
jp 0x20475f21
jns 0x20475f25
mov edi, 0xd545c642
std
mov byte [ebp - 0x2b], 0x65
std
cld
neg edx
neg edx
jo 0x20475f31
rol ecx, 0
jns 0x20475f3c
xchg esp, esp
js 0x20475f3c
ljmp 0xfc49:0xbe45c643
mov byte [ebp - 0x42], 0x49
cld
xchg edx, esi
xchg edx, esi
call 0x20475f4a
add esp, 4
mov esi, esi
je 0x20475f62
xchg esp, esp
xchg ecx, esi
xchg ecx, esi
xchg edi, ebx
xchg edi, ebx
jns 0x20475f5d
jne 0x20475f62
add eax, 0x45c69316
fnstenv [eax + 0x33]
cmp al, 0x24
mov byte [ebp - 0x27], 0x70
xor edi, dword [esp]
xor edi, dword [esp]
cmp ecx, edx
jp 0x20475f88
pushf
jb 0x20475f74
or esp, 0
ror esp, 0
xor esi, edi
xor esi, edi
popf
jae 0x20475f82
nop
xchg edx, edx
jnp 0x20475f88
mov ebp, 0x77cc45c6
mov byte [ebp - 0x34], 0x77
mov ebx, ebx
je 0x20475f9c
ja 0x20475f92
mov ebx, ebx
jae 0x20475f96
jae 0x20475f98
jne 0x20475f9c
mov ebx, 0xc645c641
push ebx
mov byte [ebp - 0x3a], 0x53
test dword [esp], edx
dec ecx
inc ecx
js 0x20475fa7
jp 0x20475fb9
pushf
jae 0x20475fad
jne 0x20475faf
lea esp, [esp]
popf
jnp 0x20475fb6
jnp 0x20475fb9
xor eax, 0x48bb45c6
mov byte [ebp - 0x45], 0x48
xor ebx, 0x19c7
xor ebx, 0x19c7
and eax, eax
add esi, 0
jno 0x20475fe1
pushf
jmp 0x20475fd4
push ecx
pop ecx
xor ecx, ebx
xor ecx, ebx
popf
jnp 0x20475fde
jo 0x20475fe1
mov esp, 0x68db45c6
mov byte [ebp - 0x25], 0x68
jge 0x20475fe7
jo 0x20475fe9
jnp 0x20475ff8
mov edx, edx
jl 0x20475fef
je 0x20475ff1
jge 0x20475ff3
jp 0x20475ff8
add eax, 0x45c6e731
ret 0xc14d
mov byte [ebp - 0x3e], 0x4d
shl esp, 0
jg 0x2047600c
lea edi, [edi]
jbe 0x20476005
nop
xchg esi, esi
jle 0x2047600c
mov edi, 0xc445c623
pop eax
mov byte [ebp - 0x3c], 0x58
ror edx, 0x1d
ror edx, 3
or ecx, ecx
jae 0x20476038
pushf
lea esi, [esi + 0x7aaf]
lea esi, [esi - 0x7aaf]
jo 0x2047602a
or esp, 0
popf
xchg ebx, ebx
xchg ecx, eax
xchg ecx, eax
jbe 0x20476035
jb 0x20476038
mov esi, 0x55c345c6
mov byte [ebp - 0x3d], 0x55
add esi, 0x34cd
sub esi, 0x34cd
test esp, 0x765b
jl 0x20476050
jae 0x20476067
pushf
xchg edi, edx
xchg edi, edx
and ebx, ebx
and esp, 0xffffffff
xor esp, 0
popf
xchg ecx, eax
xchg ecx, eax
jb 0x20476067
add eax, 0x76d845c6
mov byte [ebp - 0x28], 0x76
jae 0x2047606d
jne 0x2047607b
jp 0x20476071
jle 0x20476073
mov esp, esp
jno 0x20476077
je 0x2047607b
jmp 0xf28d2684
mov byte [ebp - 0x2e], 0x73
rol ecx, 0x1e
rol ecx, 2
jnp 0x20476094
pushf
jnp 0x2047608b
xchg edi, edi
popf
js 0x20476091
jp 0x20476094
mov ebx, 0x55b645c6
mov byte [ebp - 0x4a], 0x55
rol esp, 0
shl esp, 0
test dword [esp + 4], edi
jnp 0x204760af
pushf
xchg esp, esp
popf
jbe 0x204760ac
jp 0x204760af
add esi, 0xc146bd45
les eax, [eax]
mov byte [ebp - 0x43], 0x46
rol esp, 0
call 0x204760bb
lea esp, [esp + 4]
rol ebx, 0xf
rol ebx, 0x11
neg edx
neg edx
jo 0x204760d7
jle 0x204760cd
ja 0x204760cf
mov byte [ebp - 0x31], 0x5e
nop
cmp edx, ecx
lea edi, [edi + 0x5fb8]
lea edi, [edi - 0x5fb8]
jg 0x204760fa
pushf
jge 0x204760f0
mov byte [ebp - 0x47], 0x43
xchg esi, edi
xchg esi, edi
cmp edi, ecx
shr esp, 0
je 0x2047611c
jge 0x204798df
stc
jg 0x204798e2
or esp, 0
jo 0x20479908
pushf
cmp esi, 0x46e9
lea ebx, [ebx + 0x7f65]
sub ebx, 0x7f65
or eax, eax
shr esp, 0
popf
nop
mov esp, esp
jno 0x20479908
sub eax, 0x5010458b
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [0x2045ff5c]
mov dword [0x204606d4], eax
xchg ebx, ecx
xchg ebx, ecx
xor edx, dword [esp]
xor edx, dword [esp]
ja 0x20479939
pushf
ror ebx, 0
popf
jle 0x20479934
jmp 0x20479936
jbe 0x20479939
mov eax, 0x6c743d83
inc ebp
and byte [eax], al
cmp dword [0x20456c74], 0
jne 0x2047998b
cmp dword [0x2046069c], 0
je 0x2047998b
call 0x20479950
lea esp, [esp + 4]
jp 0x2047995b
js 0x20479958
jnp 0x2047995b
mov esi, 0x7500ccc1
pop ss
ror esp, 0
jne 0x20479977
pushf
xor edx, dword [esp + 4]
xor edx, dword [esp + 4]
jo 0x2047996c
popf
lea eax, [eax]
jo 0x20479972
jne 0x20479974
je 0x20479977
mov esp, 0x58f64
add byte [eax], al
add byte [ebx + 0x5c70cc4], al
pushfd
push es
inc esi
and byte [eax], al
add byte [eax], al
add byte [ecx + 0x204606d4], ah
pop dword fs:[0]
add esp, 0xc
mov dword [0x2046069c], 0
mov eax, dword [0x204606d4]
jmp 0x20479eff
call fcn.204735f7
xor eax, eax
mov al, byte [0x2045e2fa]
test eax, eax
jne 0x204799af
call fcn.2046b806
mov dword [0x204608fc], eax
cmp dword [0x2045c050], 2
jne 0x204799de
cmp dword [0x2045c044], 6
jne 0x204799de
cmp dword [0x2045c7d4], 0
je 0x204799de
call fcn.2046bb17
mov dword [0x20461a3c], eax
call fcn.20487767
mov dword [0x20461a38], eax
xor ecx, ecx
mov cl, byte [0x2045ea38]
test ecx, ecx
je 0x20479a05
push 0xa1
push 0x2045ea38
lea edx, [ebp - 0xf0]
push edx
call fcn.20486934
add esp, 0xc
jmp 0x20479a1e
push 0xa1
push 0x204525b0
lea eax, [ebp - 0xf0]
push eax
call fcn.20486934
add esp, 0xc
mov dword [ebp - 0x18], 0
jmp 0x20479a30
mov ecx, dword [ebp - 0x18]
add ecx, 1
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], 0xa
jge 0x20479ad5
mov edx, dword [ebp - 0x18]
shl edx, 2
mov eax, dword [ebp + edx*4 - 0xf0]
xor eax, 0xab576c41
mov ecx, dword [ebp - 0x18]
shl ecx, 2
mov dword [ebp + ecx*4 - 0xf0], eax
mov edx, dword [ebp - 0x18]
shl edx, 2
mov eax, dword [ebp + edx*4 - 0xec]
xor eax, 0xab5ece77
mov ecx, dword [ebp - 0x18]
shl ecx, 2
mov dword [ebp + ecx*4 - 0xec], eax
sub esp, 0
nop
js 0x20479a92
mov esi, esi
jb 0x20479a82
lea edi, [edi + 0x7644]
lea edi, [edi - 0x7644]
jns 0x20479a92
mov ebx, 0xe8558bc4
mov edx, dword [ebp - 0x18]
shl edx, 2
mov eax, dword [ebp + edx*4 - 0xe8]
xor eax, 0xab633a25
mov ecx, dword [ebp - 0x18]
shl ecx, 2
mov dword [ebp + ecx*4 - 0xe8], eax
mov edx, dword [ebp - 0x18]
shl edx, 2
mov eax, dword [ebp + edx*4 - 0xe4]
xor eax, 0xab572a32
mov ecx, dword [ebp - 0x18]
shl ecx, 2
mov dword [ebp + ecx*4 - 0xe4], eax
jmp 0x20479a27
call fcn.2046aa0f
mov dword [0x20460900], eax
ror eax, 0
jbe 0x20479af1
pushf
xchg ecx, ebx
xchg ecx, ebx
popf
xchg edx, edx
ja 0x20479af1
mov ecx, 0x6743d83
inc esi
and byte [eax], al
cmp dword [0x20460674], 0
jne 0x20479b23
xor edi, dword [esp]
xor edi, dword [esp]
push esi
add esi, 0x10fd
ror esi, 0x18
pop esi
js 0x20479b1e
pushf
and ecx, ecx
test dword [esp + 4], edx
popf
lea ecx, [ecx]
mov edi, edi
jns 0x20479b1e
lcall 0x83ff, 0xfecc15e8
jecxz 0x20479b25
call 0x20466738
and ebx, 0xffffffff
dec dword [ebp + 0x6f4f9b]
add byte [ebp - 0x6f4e65], cl
inc dword [ebp + 0x58502414]
lea ebx, [ebx + 0x6f4f]
lea ebx, [ebx - 0x6f4f]
test dword [esp], edx
push eax
pop eax
jge 0x20479b40
mov eax, eax
jl 0x20479b40
mov edx, 0x3d831675
mov al, byte [0x204606]
cmp dword [0x204606a0], 0
jne 0x20479db0
jnp 0x20479b4f
and eax, 0xffffffff
jo 0x20479b54
ja 0x20479b56
ja 0x20479b65
pushf
cmp ebx, dword [esp + 4]
popf
jge 0x20479b62
jbe 0x20479b65
mov ecx, 0x90c158b
inc esi
and byte [ecx + 0x461e1c15], cl
and byte [edx], bh
mov edx, dword [0x2046090c]
mov dword [0x20461e1c], edx
jp 0x20479b73
test eax, 0x4810
shl ecx, 0
ja 0x20479b85
xchg ebx, ebx
lea edi, [edi]
jbe 0x20479b85
ljmp 0x2046:0x90ca13b
mov eax, dword [0x2046090c]
add eax, dword [0x2046068c]
mov dword [0x20461e18], eax
test esi, 0xcd7
jg 0x20479bb8
pushf
xchg esi, esi
popf
xchg ecx, ebx
xchg ecx, ebx
lea eax, [eax + 0x5430]
lea eax, [eax - 0x5430]
ja 0x20479bb5
jle 0x20479bb8
mov eax, 0xbf505157
enter 0x47a0, 0x20
push edi
push ecx
push eax
mov edi, 0x2047a0c8
ror esp, 0
lea ebx, [ebx + 0xdbd]
lea ebx, [ebx - 0xdbd]
push ecx
pop ecx
xor esi, 0
jno 0x20479be7
pushf
mov edi, edi
popf
ja 0x20479bde
xchg edi, esi
xchg edi, esi
xchg esi, esi
jo 0x20479be7
add eax, 0x69c3d80
inc esi
and byte [eax], al
cmp byte [0x2046069c], 0
je 0x20479bfe
nop
nop
je 0x20479bf9
mov esi, esi
jne 0x20479bf9
sub eax, 0x47a283bf
and byte [ecx + 0x772ff1], al
add byte [ecx + 0x772ff1], al
add byte [ebx], bh
pop esp
and al, 0xc
mov edi, 0x2047a283
xor ecx, 0x772f
xor ecx, 0x772f
cmp ebx, dword [esp + 0xc]
call 0x20479c13
lea esp, [esp + 4]
jge 0x20479c2f
pushf
mov eax, eax
test dword [esp], ebx
jp 0x20479c22
ror esi, 6
rol esi, 6
popf
jmp 0x20479c2c
jl 0x20479c2f
or dword [ebx + 0x461e180d], 0x83007b20
in al, 0xff
mov ecx, dword [0x20461e18]
jnp 0x20479c37
and esp, 0xffffffff
ja 0x20479c3c
rol edx, 0x17
rol edx, 9
jne 0x20479c4c
lea esp, [esp]
lea esi, [esi]
je 0x20479c4c
mov edi, 0x3b76cf3b
cmp ecx, edi
jbe 0x20479c8b
or ebx, 0
jns 0x20479c55
jns 0x20479c6b
pushf
stc
cmp esp, 0x3ec7
popf
jno 0x20479c64
jno 0x20479c66
xchg esp, esp
js 0x20479c6b
mov eax, 0x90b0cf2b
sub ecx, edi
mov al, 0x90
cld
jmp 0x20479c72
xor edx, dword [esp]
xor edx, dword [esp]
lea edi, [edi]
cmp esi, dword [esp + 0x10]
je 0x20479c89
je 0x20479c82
ja 0x20479c84
jge 0x20479c86
jne 0x20479c89
sub eax, 0xecc1aaf3
add al, bh
rep stosb byte es:[edi], al
shr esp, 0
clc
lea ebx, [ebx + 0x2343]
lea ebx, [ebx - 0x2343]
rol esp, 0
jo 0x20479ca9
jge 0x20479ca2
jge 0x20479ca4
jno 0x20479ca9
mov esp, 0x3d8b6790
sbb al, 0x1e
inc esi
and byte [edx - 0x7f], dl
ret 0x6a50
mov edi, dword [0x20461e1c]
push edx
add edx, 0x6a50
ror edx, 3
pop edx
xor eax, 0x22d4
xor eax, 0x22d4
jg 0x20479cd9
pushf
add ecx, dword [esp]
sub ecx, dword [esp]
neg ebx
neg ebx
popf
lea ebx, [ebx]
jle 0x20479cd9
mov esi, 0x4752d8b9
and bh, dh
ret 0x35c0
mov ecx, entry0
test edx, 0x35c0
je 0x20479ce6
cmp ebx, 0x6fe9
xchg ebx, ebx
jge 0x20479cfd
xchg edi, edi
jno 0x20479cf4
jo 0x20479cf6
jb 0x20479cf8
jl 0x20479cfd
call 0xef833ef5
cmp ecx, edi
jbe 0x20479d4c
lea eax, [eax + 0x653a]
lea eax, [eax - 0x653a]
ror esi, 0x1a
rol esi, 0x1a
ja 0x20479d1f
jg 0x20479d17
lea ebx, [ebx]
nop
jno 0x20479d1c
jbe 0x20479d1f
mov eax, 0xc483cf2b
add byte [ebx], ah
inc ecx
in al, dx
add byte [ebx + 0x661a77c0], cl
pushfd
sub ecx, edi
add esp, 0
and edi, edi
shr esp, 0
mov eax, eax
ja 0x20479d47
pushf
cmp ecx, dword [esp + 0x10]
stc
lea esi, [esi + 0x4a40]
lea esi, [esi - 0x4a40]
popf
ja 0x20479d44
jbe 0x20479d47
jmp 0x14442dfb
mov al, 0x90
cld
rep stosb byte es:[edi], al
clc
jl 0x20479d4f
add edx, 0x64d5
sub edx, 0x64d5
not edi
not edi
jg 0x20479d69
nop
jp 0x20479d64
jle 0x20479d69
sub eax, 0x22bf9c19
push ebx
inc edi
and ah, bh
mov edi, 0x20475322
cld
and edx, edx
jge 0x20479d7b
xchg ebx, ebx
jb 0x20479d77
jl 0x20479d7b
lcall 0x2047, 0x9995b9ed
mov ecx, 0x20479995
rol esp, 0
jg 0x20479d99
lea ebx, [ebx + 0x2e84]
lea ebx, [ebx - 0x2e84]
xchg esp, esp
jb 0x20479d95
jle 0x20479d99
add eax, 0xb0cf2b9e
nop
sub ecx, edi
mov al, 0x90
cld
rep stosb byte es:[edi], al
shl ebx, 0
jo 0x20479dad
nop
jmp 0x20479da8
jb 0x20479daa
jno 0x20479dad
mov eax, 0x835f5958
cmp eax, 0x204608fc
add byte [edi], cl
test dh, dl
add byte [eax], al
add byte [ebx + 0x45bfb40d], cl
and byte [ecx + 0xe1], al
add byte [ebp - 0x7c8b8a37], 0x3d
aam 0xc7
inc ebp
and byte [eax], al
pop eax
pop ecx
pop edi
cmp dword [0x204608fc], 0
je 0x20479e93
mov ecx, dword [0x2045bfb4]
and ecx, 0x80000000
test ecx, ecx
jne 0x20479e41
cmp dword [0x2045c7d4], 0
je 0x20479e41
push 0x242010
lea edx, [ebp - 0xf0]
push edx
push 0x20461bec
push 0
call dword [0x204608fc]
cmp dword [0x2045c050], 2
jne 0x20479e3f
cmp dword [0x2045c044], 6
jne 0x20479e3f
cmp dword [0x20461a38], 0xffffffff
je 0x20479e3f
push 0
lea eax, [ebp - 0xf4]
push eax
push 0
push 0x42010
push 0x19d
push 0x20461bec
push 0xa1
lea ecx, [ebp - 0xf0]
push ecx
mov edx, dword [0x20461a38]
push edx
push 0
call dword [0x20461a3c]
jmp 0x20479e5a
push 0x42010
lea eax, [ebp - 0xf0]
push eax
push 0x20461bec
push 0
call dword [0x204608fc]
mov dword [0x204606ac], 0
jmp 0x20479e75
mov ecx, dword [0x204606ac]
add ecx, 1
mov dword [0x204606ac], ecx
cmp dword [0x204606ac], 0xa1
jae 0x20479e91
mov edx, dword [0x204606ac]
mov byte [ebp + edx - 0xf0], 0
jmp 0x20479e66
jmp 0x20479eb9
xor eax, eax
mov al, byte [0x2045e2fa]
cmp eax, 1
jne 0x20479eb9
push 0x20461bec
lea ecx, [ebp - 0xf0]
push ecx
push 0x2046050c
call dword [sym.imp.MSVCRT.dll_printf]
add esp, 0xc
cmp dword [0x20460990], 0
jne 0x20479efd
cmp dword [0x20460900], 0
je 0x20479eda
mov edx, dword [0x204606a8]
push edx
call dword [0x20460900]
jmp 0x20479efd
cmp dword [0x2045c050], 2
jne 0x20479ef6
cmp dword [0x2045c044], 6
jne 0x20479ef6
push 0x63
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, 0x63
jmp 0x20479eff
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc