Function at 0x4f3042
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb0
push ebx
push esi
push edi
push esi
push edi
push edx
push ecx
push ebx
push eax
cmp dword [0x505a64], 0
jne 0x4f3cfb
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.kernel32.dll_GetLocalTime]
jmp 0x4f2cb7
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x84]
push eax
mov eax, dword [ebp - 0x88]
push eax
mov eax, dword [ebp - 0x8c]
push eax
call fcn.004f2025
add esp, 0x10
mov dword [ebp - 0x3c], eax
jo 0x4f2ce0
jno 0x4f2ce0
and dword [esi - 0x39], 0xaa445
mov word [ebp - 0x5c], 0xa
mov eax, dword [0x5052ce]
mov word [0x505004], ax
jb 0x4f2cf6
jae 0x4f2cf6
sub bl, 0x59
jmp 0x4f2d51
push ecx
xor ecx, ecx
jecxz 0x4f2cfe
je 0x4f2d58
pop ecx
jmp 0x4f3cfb
jl 0x4f2d09
jge 0x4f2d09
add eax, edx
shr cl, 1
mov cl, 1
add byte [eax], al
jmp 0x4f2ebf
jle 0x4f2d13
jg 0x4f2d13
loopne 0x4f2cfd
jmp 0x4f30e1
leave
add eax, dword [eax]
add byte [edx + 3], dh
jb 0x4f2d1d
jae 0x4f2d1d
add dword [eax - 0x17], esi
jo 0x4f2d07
jmp 0x4f2ebf
popfd
add dword [eax], eax
add byte [ebp + 3], dh
jne 0x4f2d27
je 0x4f2d27
sub cl, 0x5d
add dword [eax], eax
add byte [esi + 3], dh
jmp 0x4f2e89
jbe 0x4f2d31
ja 0x4f2d31
jb 0x4f2d1b
jmp 0x4f3cfb
lds ecx, [edi]
add byte [eax], al
jns 0x4f2d3b
js 0x4f2d3b
mov al, 0xeb
invalid
jmp 0x4f2d04
jbe 0x4f2d42
ja 0x4f2d42
imul ecx
js 0x4f2d46
jmp 0x4f2ebf
add byte [eax], al
add byte [edx + 3], bh
jp 0x4f2d4c
jnp 0x4f2d4c
jae 0x4f2d36
jmp 0x4f3cfb
stosb byte es:[edi], al
sldt word [eax]
nop
jmp 0x4f2d55
mov word [ebp - 0x4c], 0
jmp 0x4f2d61
mov ah, 0
add bl, ch
add al, 0x66
inc dword [ebp - 0x4c]
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 6
jge 0x4f2e89
jo 0x4f2d77
jno 0x4f2d77
ljmp 0xffff:0x25b4458b
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov dword [ebp - 0x90], eax
jmp 0x4f2e56
jbe 0x4f2d8f
ja 0x4f2d8f
mov bl, 0x66
inc dword [ebp - 0x68]
inc word [ebp - 0x68]
jns 0x4f2d98
js 0x4f2d98
mov ch, cl
out 0, eax
add byte [eax], al
jmp case.default.0x4f2e65
jp 0x4f2da2
jnp 0x4f2da2
test dword [esi - 0x39], esp
inc ebp
stosb byte es:[edi], al
add byte [eax], al
mov word [ebp - 0x56], 0
jl 0x4f2dad
jge 0x4f2dad
xchg cl, ch
rol byte [eax], cl
add byte [eax], al
jmp case.default.0x4f2e65
jmp 0x4f2db5
mov word [ebp - 0x5e], 0xffff
jo 0x4f2dc0
jno 0x4f2dc0
mov cl, ch
mov edi, 0x72000000
jb 0x4f2dca
jae 0x4f2dca
jmp case.default.0x4f2e65
jb 0x4f2dca
jae 0x4f2dca
and dword [esi - 0x39], 0x45
rol byte [eax], 0
mov word [ebp - 0x40], 0
jmp 0x4f2dd6
inc word [ebp - 0x40]
mov eax, dword [ebp - 0x40]
and eax, 0xffff
cmp eax, 3
jge 0x4f2e27
jne 0x4f2de8
je 0x4f2de8
and dword [esi - 0x39], 0x45
mov eax, 0x4eb0000
mov word [ebp - 0x48], 0
jmp 0x4f2df4
inc word [ebp - 0x48]
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, 3
jge 0x4f2e25
jbe 0x4f2e06
ja 0x4f2e06
test byte [ebx - 0xda3fbb], cl
inc dword [eax]
add byte [ebx - 0x1e7e47b3], cl
invalid
mov eax, dword [ebp - 0x40]
and eax, 0xffff
mov ecx, dword [ebp - 0x48]
and ecx, 0xffff
add ecx, ecx
lea eax, [ecx + eax*8]
mov word [eax + ebp - 0x74], 0
jmp 0x4f2df0
jmp 0x4f2dd2
jns 0x4f2e2c
js 0x4f2e2c
test ebx, ebp
push esi
jmp case.default.0x4f2e65
jb 0x4f2e33
jae 0x4f2e33
mov dl, 0x66
mov dword [ebp - 0x58], 0x3750000
mov word [ebp - 0x58], 0
jne 0x4f2e3e
je 0x4f2e3e
mov ebx, ebp
inc esp
jmp case.default.0x4f2e65
jle 0x4f2e45
jg 0x4f2e45
mov al, 0x66
mov dword [ebp - 0x6e], 0x31510000
leave
mov word [ebp - 0x6e], 0
push ecx
xor ecx, ecx
jecxz 0x4f2e51
xchg dword [ecx - 0x15], ebx
xor bl, ch
cmp dword cs:[ebp - 0x90], 5
pop ecx
jmp case.default.0x4f2e65
cmp dword [ebp - 0x90], 5
ja case.default.0x4f2e65
mov eax, dword [ebp - 0x90]
jmp dword [eax*4 + 0x4f2e6c]
jmp 0x4f2d5d
jp 0x4f2e8e
jnp 0x4f2e8e
add ebx, ebp
das
jmp 0x4f2ebf
jl 0x4f2e95
jge 0x4f2e95
adc ecx, ebp
daa
push es
add byte [eax], al
jmp 0x4f34c1
jle 0x4f2e9f
jg 0x4f2e9f
jne 0x4f2e89
jmp 0x4f3cfb
push edi
push cs
add byte [eax], al
push ecx
xor ecx, ecx
jecxz 0x4f2eaa
jno 0x4f2f04
pop ecx
jmp 0x4f2ebf
jmp 0x4f2eb0
jmp 0x4f38be
jo 0x4f2eba
jno 0x4f2eba
ja 0x4f2ea4
jmp 0x4f3cfb
cmp al, 0xe
add byte [eax], al
jb 0x4f2ec4
jae 0x4f2ec4
ret 0xc766
mov word [ebp - 0x4c], 0
jmp 0x4f2ed0
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 3
jge 0x4f2fc6
jne 0x4f2ee6
je 0x4f2ee6
les ecx, [ebx - 0xda4bbb]
inc dword [eax]
add byte [ebx - 0x1e7e4bb3], cl
invalid
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
add eax, 7
mov dword [ebp - 0x94], eax
jmp 0x4f2f9c
scasd eax, dword es:[edi]
ror dword [ebx - 0x1e7e4bb3], 0xff
inc dword [eax]
add byte [edi], cl
scasd eax, dword es:[edi]
rol dword [ebx - 0x7a76f840], 0x6c
invalid
jo 0x4f2f22
jno 0x4f2f22
mov ebp, ecx
lea eax, [ebx]
add byte [eax], al
jmp 0x4f32b4
jp 0x4f2f2c
jnp 0x4f2f2c
loopne 0x4f2f60
xor eax, eax
mov ax, word [ebp - 0x56]
shl byte [esi - 0x75], 0x45
stosb byte es:[edi], al
mov ecx, 5
cdq
idiv ecx
lea eax, [edx - 2]
cmp eax, 1
sbb ecx, ecx
inc ecx
xor eax, eax
mov ax, word [ebp - 0x56]
mov ebx, 3
cdq
idiv ebx
lea eax, [edx - 1]
cmp eax, 1
sbb eax, eax
inc eax
or ecx, eax
je 0x4f2f7f
jl 0x4f2f63
jge 0x4f2f63
jmp 0x4f2fca
mov ax, word [ebp - 0x58]
mov word [ebp - 0x5e], ax
jle 0x4f2f70
jg 0x4f2f70
fisub word [esi - 0x39]
inc ebp
cmpsb byte [esi], byte es:[edi]
add dword [eax], eax
mov word [ebp - 0x5a], 1
push ecx
xor ecx, ecx
jecxz 0x4f2f7c
lds ebx, [ecx - 0x15]
push es
pop ecx
jmp 0x4f2f85
mov word [ebp - 0x5a], 0
jmp 0x4f2f88
jmp 0x4f2fc1
jbe 0x4f2f8f
ja 0x4f2f8f
mov ebx, 0xaa45ff66
inc word [ebp - 0x56]
jns 0x4f2f98
js 0x4f2f98
fucomi st(3)
daa
jmp 0x4f2fc1
jmp 0x4f2fc1
cmp dword [ebp - 0x94], 7
je 0x4f2f8a
cmp dword [ebp - 0x94], 8
je 0x4f2f27
cmp dword [ebp - 0x94], 0x17
je 0x4f2f1d
jmp 0x4f2fc1
jmp 0x4f2ecc
jns 0x4f2fcb
js 0x4f2fcb
invalid
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 7
cdq
idiv ecx
lea eax, [edx - 2]
cmp eax, 1
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ebx, 0xb
cdq
idiv ebx
lea eax, [edx - 5]
cmp eax, 1
sbb eax, eax
neg eax
or ecx, eax
je 0x4f3025
jp 0x4f3008
jnp 0x4f3008
or al, 0x66
mov eax, dword [ebp - 0x58]
mov ax, word [ebp - 0x58]
mov word [ebp - 0x5e], ax
jl 0x4f3015
jge 0x4f3015
mov edx, 0xa645c766
add dword [eax], eax
mov word [ebp - 0x5a], 1
jle 0x4f3020
jg 0x4f3020
invalid
jmp 0x4f32b4
push ecx
xor ecx, ecx
jecxz 0x4f302b
int 0x59
pop ecx
xor eax, eax
mov ax, word [ebp - 0x6e]
xchg edx, eax
mov dword [ebp - 0x98], eax
jmp 0x4f30a0
jmp 0x4f303d
jmp 0x4f38d8
jo 0x4f3047
jno 0x4f3047
js 0x4f3031
jmp 0x4f3981
xor eax, 0x72000009
add esi, dword [ebx + 1]
jb 0x4f3051
jae 0x4f3051
add dword [edx + 0x944e9], esp
mov byte [0x944e9], al
jmp 0x4f399a
add byte [ebp + 3], dh
jne 0x4f305b
je 0x4f305b
invalid
jmp 0x4f39e8
jbe 0x4f3065
ja 0x4f3065
loopne 0x4f304f
jmp 0x4f39ee
test byte [ecx], cl
add byte [eax], al
jns 0x4f306f
js 0x4f306f
ret 0x1de9
jmp 0x4f3a91
jp 0x4f3079
jnp 0x4f3079
mov dword [0xa90e9], eax
add byte [ebx + eax + 0x7d], bh
jl 0x4f3083
jge 0x4f3083
invalid
jmp 0x4f3b0e
jl 0x4f3083
jge 0x4f3083
add ebp, ecx
and dword [ebx], ecx
add byte [eax], al
jmp 0x4f3ba9
jle 0x4f308d
jg 0x4f308d
and eax, 0xc01e9
add byte [ecx + 0x31], dl
push ecx
xor ecx, ecx
jmp 0x4f3c93
push ecx
xor ecx, ecx
jecxz 0x4f3098
jge 0x4f30f2
pop ecx
jmp 0x4f3ccf
cmp dword [ebp - 0x98], 9
ja case.default.0x4f30af
mov eax, dword [ebp - 0x98]
jmp dword [eax*4 + 0x4f30b6]
jmp 0x4f30e1
jo 0x4f30e6
jno 0x4f30e6
add dword [ecx - 0x22b17], esp
mov eax, dword [0xfffdd4e9]
jmp 0x4f2ebf
push dword [edx + 3]
jb 0x4f30f0
jae 0x4f30f0
mov cl, 0xe9
dec eax
jmp 0x4f2d3d
cld
invalid
jne 0x4f30fa
je 0x4f30fa
js 0x4f30e4
jmp 0x4f3cfb
cld
or eax, dword [eax]
add byte [esi + 3], dh
jbe 0x4f3104
ja 0x4f3104
shl byte [esi - 0x39], 1
inc ebp
mov ah, 0
add bl, ch
add al, 0x66
inc dword [ebp - 0x4c]
mov word [ebp - 0x4c], 0
jmp 0x4f3110
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 4
jge 0x4f3299
jns 0x4f3126
js 0x4f3126
ror dword [ebx - 0xda4bbb], 1
inc dword [eax]
add byte [ebx - 0x1e7e4bb3], cl
invalid
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
lea ecx, [ecx + ecx*2]
add eax, ecx
inc eax
mov dword [ebp - 0x9c], eax
jmp 0x4f3249
jle 0x4f3159
jg 0x4f3159
jge case.0x4f31f0.3
xor eax, eax
mov ax, word [ebp - 0x6e]
shl byte [esi - 0x75], 0x45
xchg edx, eax
mov ecx, dword [ebp - 0x5c]
and ecx, 0xffff
cmp eax, ecx
jne case.default.0x4f31f0
push ecx
xor ecx, ecx
jecxz 0x4f3176
sub al, 0x59
pop ecx
xor eax, eax
mov ax, word [ebp - 0x56]
mov ecx, 9
cdq
idiv ecx
mov dword [ebp - 0xa0], edx
jmp 0x4f31e1
jmp 0x4f3190
jmp 0x4f30f5
jo 0x4f319a
jno 0x4f319a
mov cl, 0xe9
push ss
std
invalid
jmp 0x4f2eb5
jmp 0x4f31a2
jmp 0x4f38d0
jb 0x4f31ac
jae 0x4f31ac
mov bl, 0xe9
jmp 0x764f31ae
invalid
jmp 0x4f2e9a
jne 0x4f31b6
je 0x4f31b6
mov ah, 0xe9
cmp eax, 0xebfffffb
jmp 0x4f31be
mov ch, 0xe9
test bl, bh
invalid
push dword [esi + 3]
jbe 0x4f31c8
jmp 0x4f2cf8
jmp 0x4f31be
jmp 0x4f2d47
jbe 0x4f31c8
ja 0x4f31c8
mov dh, 0xe9
pop edi
sti
invalid
jmp 0x4f2d2c
jmp 0x4f31d0
jmp 0x4f32a8
jns 0x4f31da
js 0x4f31da
mov eax, 0x2f4e9
add bl, ch
cmp al, byte [ebx - 0x9f43]
dec dword [eax]
jmp 0x4f34d3
cmp dword [ebp - 0xa0], 8
ja case.default.0x4f31f0
mov eax, dword [ebp - 0xa0]
jmp dword [eax*4 + 0x4f31f7]
add bl, ch
add ecx, esp
jmp 0x4f321e
jmp case.0x4f3266.4
jp 0x4f3225
jnp 0x4f3225
jge 0x4f328c
inc word [ebp - 0x6e]
inc dword [ebp - 0x6e]
jl 0x4f322e
jge 0x4f322e
jge 0x4f321a
jmp case.0x4f3266.4
jmp 0x4f3233
jmp 0x4f3233
add dword [esi + 0x37a7feb], ecx
jmp 0x4f32b4
jp 0x4f323a
jnp 0x4f323a
and ah, byte [esi - 0x39]
inc ebp
cmpsb byte [esi], byte es:[edi]
add dword [eax], eax
mov word [ebp - 0x5a], 1
jl 0x4f3245
jge 0x4f3245
loop 0x4f3231
jmp case.0x4f3266.4
dec ebp
jmp case.0x4f3266.4
dec dword [ebp - 0x9c]
cmp dword [ebp - 0x9c], 0x12
ja case.0x4f3266.4
mov eax, dword [ebp - 0x9c]
xor ecx, ecx
mov cl, byte [eax + 0x4f3281]
jmp dword [ecx*4 + 0x4f326d]
add al, 4
add al, 4
add al, 4
add al, 3
jmp 0x4f310c
jle 0x4f329e
jg 0x4f329e
and cl, ch
sbb al, 0xfc
invalid
jmp 0x4f2ebf
jmp 0x4f32a6
jmp 0x4f3299
push ecx
xor ecx, ecx
jecxz 0x4f32ae
jno 0x4f3308
pop ecx
jmp 0x4f3cfb
jmp 0x4f32b7
mov word [ebp - 0x4c], 0
jmp 0x4f32c3
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 8
jge 0x4f34c1
jo 0x4f32d9
jno 0x4f32d9
ror dword [ebx - 0xda4bbb], 1
inc dword [eax]
add byte [ebx - 0x1e7e4bb3], cl
invalid
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
add eax, ecx
inc eax
mov dword [ebp - 0xa4], eax
jmp 0x4f343b
jmp 0x4f3307
xor eax, eax
mov ax, word [ebp - 0x5a]
shl byte [esi - 0x75], 0x45
cmpsb byte [esi], byte es:[edi]
cdq
xor eax, edx
sub eax, edx
and eax, 1
xor eax, edx
sub eax, edx
mov dword [ebp - 0xa8], eax
jmp 0x4f3335
jb 0x4f3326
jae 0x4f3326
jecxz 0x4f3310
jmp 0x4f2fc6
wait
cld
invalid
jmp 0x4f332e
jmp 0x4f34db
cmp dword [ebp - 0xa8], 0
je 0x4f3321
cmp dword [ebp - 0xa8], 1
je 0x4f332b
jmp 0x4f3349
jne 0x4f334e
je 0x4f334e
fldl2t
imul eax, dword [ecx], 0x3750000
jne 0x4f3358
jmp case.0x4f3458.8
jne 0x4f3358
je 0x4f3358
mov edi, 0x5ae045c7
add dword [eax], eax
add bl, ch
add ebp, edx
mov dword [ebp - 0x20], 0x15a
jmp 0x4f3362
mov dword [ebp - 0x28], 0x4e35
jbe 0x4f336e
ja 0x4f336e
sbb ebp, ecx
dec ecx
add dword [eax], eax
add bl, ch
jmp 0x4f3376
mov ebp, 0xec7d83
jmp case.0x4f3458.8
jmp 0x4f3376
cmp dword [ebp - 0x14], 0
je 0x4f338b
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x28]
and eax, 0xffff
add dword [ebp - 0x24], eax
jp 0x4f3390
jnp 0x4f3390
imul ecx
daa
add dword [eax], eax
add bl, ch
jmp 0x4f3398
mov esi, 0xfe0458b
scasd eax, dword es:[edi]
inc ebp
in al, 0x25
invalid
jmp case.0x4f3458.8
jmp 0x4f3398
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x1c]
and eax, 0xffff
mov dword [ebp - 0x24], eax
jns 0x4f33ac
js 0x4f33ac
sub ebp, ecx
or eax, dword [ecx]
add byte [eax], al
jmp case.0x4f3458.8
jmp 0x4f33b4
mov eax, dword [ebp - 0x24]
shl eax, 0x10
and eax, 0xffff0000
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x28]
add eax, ecx
inc eax
mov dword [ebp - 0x30], eax
jl 0x4f33d1
jge 0x4f33d1
cmp ebp, ecx
out 0, al
add byte [eax], al
jmp case.0x4f3458.8
jmp 0x4f33d9
mov eax, dword [ebp - 0x3c]
shr eax, 0x10
mov dword [ebp - 0x14], eax
jb 0x4f33e7
jae 0x4f33e7
aam 0x8b
inc ebp
les esp, [0xffff]
mov eax, dword [ebp - 0x3c]
and eax, 0xffff
mov dword [ebp - 0x1c], eax
jmp 0x4f33f5
jmp case.0x4f3458.8
push ecx
xor ecx, ecx
jecxz 0x4f3400
mov ebx, 0xd0658159
invalid
pop ecx
and dword [ebp - 0x30], 0x7fff
jmp 0x4f340b
mov eax, dword [ebp - 0x30]
mov word [ebp - 0x38], ax
jo 0x4f3417
jno 0x4f3417
mov ebp, ecx
mov al, byte [0xeb000000]
jmp 0x4f341f
mov ebp, 0x89d0458b
inc ebp
les edi, [esi + 3]
jmp case.0x4f3458.8
jmp 0x4f341f
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3c], eax
jle 0x4f342a
jg 0x4f342a
mov esp, 0x10d06dc1
shr dword [ebp - 0x30], 0x10
jmp 0x4f3431
jmp case.0x4f3458.8
dec dword [ebp - 0xa4]
cmp dword [ebp - 0xa4], 0x38
ja case.0x4f3458.8
mov eax, dword [ebp - 0xa4]
xor ecx, ecx
mov cl, byte [eax + 0x4f3483]
jmp dword [ecx*4 + 0x4f345f]
jmp 0x4f32bf
jmp 0x4f34c4
jmp 0x4f2ebf
jbe 0x4f34ce
ja 0x4f34ce
adc cl, ch
sar ecx, 1
invalid
jmp 0x4f2ea4
jmp 0x4f34d6
jmp 0x4f3cfb
jns 0x4f34e0
js 0x4f34e0
fisub dword [esi - 0x39]
inc ebp
mov ah, 0
add bl, ch
add al, 0x66
inc dword [ebp - 0x4c]
mov word [ebp - 0x4c], 0
jmp 0x4f34ec
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 7
jge 0x4f38b9
jmp 0x4f3500
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
inc eax
mov dword [ebp - 0xac], eax
jmp 0x4f3790
jbe 0x4f3531
ja 0x4f3531
fmul qword [ebx - 0xda53bb]
inc dword [eax]
add byte [ebp + 0x4d8b4004], cl
mov byte [ecx + 0xffffe1], al
add byte [ebx], al
shl dword [esi - 0x77], 0x45
enter 0x1eb, 0x1d
mov eax, dword [ebp - 0x54]
and eax, 0xffff
lea eax, [eax + eax*2]
mov ecx, dword [ebp - 0x78]
and ecx, 0xffff
add eax, ecx
mov word [ebp - 0x38], ax
jmp 0x4f354e
mov ax, word [ebp - 0x38]
mov word [ebp - 0x58], ax
jns 0x4f355b
js 0x4f355b
sub eax, 0x354e9
add bl, ch
jmp 0x4f3563
invalid
jmp case.0x4f37b4.7
jmp 0x4f3563
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 3
cdq
idiv ecx
mov word [ebp - 0x78], dx
jle 0x4f357c
jg 0x4f357c
mov ecx, gs
xor eax, dword [ebx]
add byte [eax], al
jmp case.0x4f37b4.7
jmp 0x4f3584
mov eax, dword [ebp - 0x54]
and eax, 0xffff
mov ecx, dword [ebp - 0x78]
and ecx, 0xffff
add ecx, ecx
lea eax, [ecx + eax*8]
inc word [eax + ebp - 0x74]
jne 0x4f35a4
je 0x4f35a4
or eax, 0xa8458b66
mov ax, word [ebp - 0x58]
mov word [ebp - 0x5e], ax
jmp 0x4f35af
jmp case.0x4f37b4.7
jo 0x4f35b9
jno 0x4f35b9
mov esp, dword [esi - 0x39]
inc ebp
mov eax, 0x4eb0000
mov word [ebp - 0x48], 0
jmp 0x4f35c5
inc word [ebp - 0x48]
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, 3
jge 0x4f3623
jmp 0x4f35d5
mov eax, dword [ebp - 0x54]
and eax, 0xffff
mov ecx, dword [ebp - 0x78]
and ecx, 0xffff
add ecx, ecx
lea eax, [ecx + eax*8]
mov eax, dword [eax + ebp - 0x74]
and eax, 0xffff
mov ecx, dword [ebp - 0x54]
and ecx, 0xffff
mov edx, dword [ebp - 0x48]
and edx, 0xffff
add edx, edx
lea ecx, [edx + ecx*8]
mov ecx, dword [ecx + ebp - 0x74]
and ecx, 0xffff
cmp eax, ecx
jle 0x4f3621
mov ax, word [ebp - 0x48]
mov word [ebp - 0x78], ax
jmp 0x4f35c1
jb 0x4f3628
jae 0x4f3628
call 0x51be15
add byte [edx + 3], bh
jp 0x4f3632
jmp case.0x4f37b4.7
jp 0x4f3632
jnp 0x4f3632
in al, 0x8b
inc ebp
enter 0xffffffffffffff25, 0xffffffffffffffff
add byte [eax], al
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 9
cdq
idiv ecx
mov word [ebp - 0x38], dx
jmp 0x4f3649
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 3
cdq
idiv ecx
mov word [ebp - 0x54], ax
jl 0x4f3662
jge 0x4f3662
lcall 0xeb00, 0x24de9
add ecx, ebp
jmp case.0x4f37b4.7
jmp 0x4f366a
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 9
cdq
idiv ecx
mov dword [ebp - 0xb0], edx
jmp 0x4f36d8
jp 0x4f3687
jnp 0x4f3687
invalid
jmp 0x4f30eb
jmp 0x4f368f
jmp 0x4f2ead
jl 0x4f3699
jge 0x4f3699
ljmp 0xeb00:0x228e9
jmp 0x4f38c6
jmp 0x4f36a1
jmp 0x4f2e90
jle 0x4f36ab
jg 0x4f36ab
out 0xe9, al
pop esi
idiv bh
call dword [ecx + 0x31]
push ecx
xor ecx, ecx
jmp 0x4f2d0e
push ecx
xor ecx, ecx
jecxz 0x4f36b6
in al, 0x59
pop ecx
jmp 0x4f2d36
jmp 0x4f36bf
jmp 0x4f2d22
jo 0x4f36c9
jno 0x4f36c9
loopne 0x4f36b3
jmp 0x4f32a3
aad 0xfb
invalid
jmp 0x4f36d1
jmp 0x4f34c9
cmp dword [ebp - 0xb0], 8
ja case.default.0x4f36e7
mov eax, dword [ebp - 0xb0]
jmp dword [eax*4 + 0x4f36ee]
jmp 0x4f3715
mov word [ebp - 0x40], 0
jmp 0x4f3721
inc word [ebp - 0x40]
mov eax, dword [ebp - 0x40]
and eax, 0xffff
cmp eax, 3
jge 0x4f3783
push ecx
xor ecx, ecx
jecxz 0x4f3734
mov esp, 0xc0458b59
pop ecx
mov eax, dword [ebp - 0x40]
and eax, 0xffff
mov ecx, dword [ebp - 0x78]
and ecx, 0xffff
add ecx, ecx
lea eax, [ecx + eax*8]
mov eax, dword [eax + ebp - 0x74]
and eax, 0xffff
mov ecx, dword [ebp - 0x54]
and ecx, 0xffff
mov edx, dword [ebp - 0x78]
and edx, 0xffff
add edx, edx
lea ecx, [edx + ecx*8]
mov ecx, dword [ecx + ebp - 0x74]
and ecx, 0xffff
cmp eax, ecx
jge 0x4f3781
mov ax, word [ebp - 0x40]
mov word [ebp - 0x54], ax
jmp 0x4f371d
jmp 0x4f3786
jmp case.0x4f37b4.7
dec dword [ebp - 0xac]
cmp dword [ebp - 0xac], 0xd8
ja case.0x4f37b4.7
mov eax, dword [ebp - 0xac]
xor ecx, ecx
mov cl, byte [eax + 0x4f37db]
jmp dword [ecx*4 + 0x4f37bb]
jmp 0x4f34e8
jb 0x4f38be
jae 0x4f38be
test eax, 0xe92101eb
stc
cmc
invalid
jmp 0x4f38c1
jmp 0x4f2ebf
jne 0x4f38cb
je 0x4f38cb
xor ecx, ebp
dec eax
hlt
jmp 0x4f2d18
jmp 0x4f38d3
jmp 0x4f3cfb
nop
jne 0x4f38de
je 0x4f38de
mov al, 0xe8
xchg ecx, eax
and eax, 0x3d830000
jl 0x4f3937
call fcn.004f5e74
cmp dword [0x50507c], 0
push eax
add byte [eax], al
jne 0x4f394e
call fcn.004f3e5b
test eax, eax
je 0x4f3949
mov eax, dword [0x505f30]
dec eax
mov ecx, eax
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*2]
lea eax, [eax*2 + 0x505010]
add eax, 0x614
mov dword [ebp - 0x2c], eax
cmp dword [0x5055e2], 0
je 0x4f3937
push 0x40
mov eax, 0x505010
add eax, 0x5d6
push eax
mov eax, dword [ebp - 0x2c]
push eax
push 0
call dword [sym.imp.user32.dll_MessageBoxA]
mov dword [0x505a64], 1
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_ExitProcess]
call fcn.004f4aef
mov word [ebp - 0x48], 0
jmp 0x4f395a
inc word [ebp - 0x48]
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, 0x1e
jge 0x4f397c
mov eax, dword [ebp - 0x48]
and eax, 0xffff
mov dword [eax*4 + 0x5050a4], 0xffffffff
jmp 0x4f3956
jmp 0x4f30ff
nop
jbe 0x4f3987
ja 0x4f3987
mov dl, 0xe8
fst qword [ecx]
add byte [eax], al
call 0x4f4b69
test eax, eax
jne 0x4f3995
jmp 0x4f3d08
jmp 0x4f30ff
nop
jns 0x4f39a0
js 0x4f39a0
mov ah, 0x83
cmp eax, 0x505a20
add byte [edx + edi - 0x39], dh
inc ebp
clc
or eax, dword [eax]
add byte [eax], al
cmp dword [0x505a20], 0
je 0x4f39e3
mov dword [ebp - 8], 0xb
jmp 0x4f39b3
lea eax, [ebp - 0x34]
push eax
push 0
lea eax, [ebp - 8]
push eax
push 0x4f2b69
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xffffffff
jne 0x4f39e3
jmp 0x4f39d8
push 0x9999
call dword [sym.imp.kernel32.dll_ExitProcess]
jmp 0x4f30ff
nop
jmp 0x4f30ff
nop
jl 0x4f39f4
jge 0x4f39f4
mov eax, 0x505a2ca1
add byte [eax - 0x18], dl
jmp esp
mov eax, dword [0x505a2c]
push eax
call fcn.004f1efe
add esp, 4
mov dword [0x505a2c], eax
mov eax, dword [0x505a30]
push eax
call fcn.004f1efe
add esp, 4
mov dword [0x505a30], eax
mov eax, dword [0x505a34]
push eax
call fcn.004f1efe
add esp, 4
mov dword [0x505a34], eax
mov eax, dword [0x505a38]
push eax
call fcn.004f1efe
add esp, 4
mov dword [0x505a38], eax
mov eax, dword [0x505a3c]
push eax
call fcn.004f1efe
add esp, 4
mov dword [0x505a3c], eax
mov eax, dword [0x505a40]
push eax
call fcn.004f1efe
add esp, 4
mov dword [0x505a40], eax
mov eax, dword [0x505a44]
push eax
call fcn.004f1efe
add esp, 4
mov dword [0x505a44], eax
mov eax, dword [0x505a48]
push eax
call fcn.004f1efe
add esp, 4
mov dword [0x505a48], eax
jmp 0x4f30ff
nop
jle 0x4f3a97
jg 0x4f3a97
mov edx, 0x505a4ca1
add byte [eax - 0x18], dl
pop esp
in al, 0xff
inc dword [ebx + 0x4ca304c4]
pop edx
push eax
add byte [ecx + 0x505a50], ah
mov eax, dword [0x505a4c]
push eax
call fcn.004f1efe
add esp, 4
mov dword [0x505a4c], eax
mov eax, dword [0x505a50]
push eax
call fcn.004f1efe
add esp, 4
mov dword [0x505a50], eax
mov eax, dword [0x505a54]
push eax
call fcn.004f1efe
add esp, 4
mov dword [0x505a54], eax
mov eax, dword [0x505a58]
push eax
call fcn.004f1efe
add esp, 4
mov dword [0x505a58], eax
mov eax, dword [0x505a5c]
push eax
call fcn.004f1efe
add esp, 4
mov dword [0x505a5c], eax
mov eax, dword [0x505a60]
push eax
call fcn.004f1efe
add esp, 4
mov dword [0x505a60], eax
jmp 0x4f30ff
nop
push ecx
xor ecx, ecx
jecxz 0x4f3b15
mov edi, 0x4c05c759
push eax
add byte [eax], al
add byte [eax], al
add bh, bh
adc eax, sym.imp.kernel32.dll_GetVersion
pop ecx
mov dword [0x50654c], 0
call dword [sym.imp.kernel32.dll_GetVersion]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x80000000
jae 0x4f3b66
push 0x505f44
call dword [sym.imp.kernel32.dll_LoadLibraryA]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x4f3b64
push 0x505f50
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
mov dword [0x50654c], eax
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.kernel32.dll_FreeLibrary]
jmp 0x4f3ba4
xor eax, eax
mov al, byte [ebp - 0xc]
cmp eax, 4
jge 0x4f3b72
jmp 0x4f3ba4
push 0x505f60
call dword [sym.imp.kernel32.dll_LoadLibraryA]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x4f3ba4
push 0x505f6c
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
mov dword [0x50654c], eax
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.kernel32.dll_FreeLibrary]
jmp 0x4f30ff
nop
jmp 0x4f3bad
cmp dword [0x5052a6], 0
je 0x4f3c8e
mov dword [ebp - 0x7c], 0x400
mov eax, dword [ebp - 0x7c]
cmp dword [0x5052c2], eax
jge 0x4f3bd4
mov eax, dword [0x5052c2]
mov dword [ebp - 0x7c], eax
mov eax, dword [0x505074]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
call fcn.004f56db
add esp, 4
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
call fcn.004f2ab4
add esp, 4
mov dword [ebp - 0x10], eax
mov word [ebp - 0x48], 0
jmp 0x4f3c06
inc word [ebp - 0x48]
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, dword [ebp - 0x7c]
jge 0x4f3c7a
call fcn.004f3d0d
mov eax, dword [ebp - 0x48]
and eax, 0xffff
push eax
mov eax, dword [ebp - 4]
inc dword [eax]
add byte [eax - 0x75], dl
inc ebp
cld
push eax
call fcn.004f566c
add esp, 8
test eax, eax
jne 0x4f3c78
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, dword [ebp - 0x10]
jl 0x4f3c51
mov eax, dword [ebp - 0x10]
add eax, 4
mov ecx, dword [ebp - 0x48]
and ecx, 0xffff
cmp eax, ecx
jg 0x4f3c78
mov eax, dword [ebp - 0x48]
and eax, 0xffff
mov ecx, dword [ebp - 0x44]
xor edx, edx
mov dl, byte [ecx + eax]
xor eax, eax
mov al, byte [0x5052c6]
sub edx, eax
mov eax, dword [ebp - 0x48]
and eax, 0xffff
mov ecx, dword [ebp - 0x44]
mov byte [ecx + eax], dl
jmp 0x4f3c02
mov dword [0x50504c], 1
mov dword [0x5052a6], 0
jmp 0x4f30ff
nop
jo 0x4f3c99
jno 0x4f3c99
jno 0x4f3c1d
cmp dword [0x5052b6], 0
je 0x4f3cca
cmp eax, 0x5052b6
add byte [eax + ebp - 0x7f], dh
cmp eax, 0x5052d6
push esi
inc edx
xor eax, 0x680f754d
cmp dword [0x5052d6], 0x4d354256
jne 0x4f3cbd
push 0x505f7c
call fcn.004f1f7a
add esp, 4
jmp 0x4f3cca
jl 0x4f3d10
push eax
add al, ch
ret 0xffe2
push 0x505f8c
call fcn.004f1f7a
add esp, 4
jmp 0x4f30ff
cmp dword [0x50507c], 0
jne 0x4f3ce1
cmp dword [0x5052ae], 0
je 0x4f3ce1
add byte [eax + 0x1730372], dl
nop
jb 0x4f3ce7
jae 0x4f3ce7
jae 0x4f3caf
mov dword [0x505a64], 1
add eax, 0x505a64
add dword [eax], eax
add byte [eax], al
jo 0x4f3cf6
jno 0x4f3cf6
jno 0x4f3ce0
jmp 0x4f30ff
add al, 0xf4
invalid
pop eax
pop ebx
pop ecx
pop edx
pop edi
pop esi
leave
jmp dword [0x505020]
pop edi
pop esi
pop ebx
leave
ret
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x5052c6]
shr eax, 0x10
mov dword [ebp - 4], eax
mov eax, dword [0x5052c6]
and eax, 0xffff
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], 0x15a
mov dword [ebp - 0x14], 0x4e35
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 8]
and eax, 0xffff
mov dword [ebp - 0x10], eax
cmp dword [ebp - 4], 0
je 0x4f3d60
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 4]
and eax, 0xffff
add dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x10]
shl ecx, 0x10
and ecx, 0xffff0000
add eax, ecx
inc eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [0x5052c6], eax
shr dword [ebp - 0x18], 0x10
and dword [ebp - 0x18], 0x7fff
mov ax, word [ebp - 0x18]
jmp 0x4f3d92
pop edi
pop esi
pop ebx
leave
ret