Function at 0x49ce4c
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb0
push ebx
push esi
push edi
push esi
push edi
push edx
push ecx
push ebx
push eax
cmp dword [0x4b7a5c], 0
jne 0x49db09
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.kernel32.dll_GetLocalTime]
jmp 0x49cacc
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x84]
push eax
mov eax, dword [ebp - 0x88]
push eax
mov eax, dword [ebp - 0x8c]
push eax
call fcn.0049c024
add esp, 0x10
mov dword [ebp - 0x3c], eax
jo 0x49caf5
jno 0x49caf5
and dword [esi - 0x39], 0xaa445
mov word [ebp - 0x5c], 0xa
jb 0x49cb00
jae 0x49cb00
sub bl, 0x59
jmp 0x49cb5b
push ecx
xor ecx, ecx
jecxz 0x49cb08
je 0x49cb62
pop ecx
jmp 0x49db09
jl 0x49cb13
jge 0x49cb13
add eax, edx
shr cl, 1
mov cl, 1
add byte [eax], al
jmp 0x49ccc9
jle 0x49cb1d
jg 0x49cb1d
loopne 0x49cb07
jmp 0x49ceeb
leave
add eax, dword [eax]
add byte [edx + 3], dh
jb 0x49cb27
jae 0x49cb27
add dword [eax - 0x17], esi
jo 0x49cb11
jmp 0x49ccc9
popfd
add dword [eax], eax
add byte [ebp + 3], dh
jne 0x49cb31
je 0x49cb31
sub cl, 0x5d
add dword [eax], eax
add byte [esi + 3], dh
jmp 0x49cc93
jbe 0x49cb3b
ja 0x49cb3b
jb 0x49cb25
jmp 0x49db09
leave
sldt word [eax]
jns 0x49cb45
js 0x49cb45
mov al, 0xeb
invalid
jmp 0x49cb0e
jbe 0x49cb4c
ja 0x49cb4c
imul ecx
js 0x49cb50
jmp 0x49ccc9
add byte [eax], al
add byte [edx + 3], bh
jp 0x49cb56
jnp 0x49cb56
jae 0x49cb40
jmp 0x49db09
scasb al, byte es:[edi]
sldt word [eax]
nop
jmp 0x49cb5f
mov word [ebp - 0x4c], 0
jmp 0x49cb6b
mov ah, 0
add bl, ch
add al, 0x66
inc dword [ebp - 0x4c]
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 6
jge 0x49cc93
jo 0x49cb81
jno 0x49cb81
ljmp 0xffff:0x25b4458b
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov dword [ebp - 0x90], eax
jmp 0x49cc60
jbe 0x49cb99
ja 0x49cb99
mov bl, 0x66
inc dword [ebp - 0x68]
inc word [ebp - 0x68]
jns 0x49cba2
js 0x49cba2
mov ch, cl
out 0, eax
add byte [eax], al
jmp case.default.0x49cc6f
jp 0x49cbac
jnp 0x49cbac
test dword [esi - 0x39], esp
inc ebp
stosb byte es:[edi], al
add byte [eax], al
mov word [ebp - 0x56], 0
jl 0x49cbb7
jge 0x49cbb7
xchg cl, ch
rol byte [eax], cl
add byte [eax], al
jmp case.default.0x49cc6f
jmp 0x49cbbf
mov word [ebp - 0x5e], 0xffff
jo 0x49cbca
jno 0x49cbca
mov cl, ch
mov edi, 0x72000000
jb 0x49cbd4
jae 0x49cbd4
jmp case.default.0x49cc6f
jb 0x49cbd4
jae 0x49cbd4
and dword [esi - 0x39], 0x45
rol byte [eax], 0
mov word [ebp - 0x40], 0
jmp 0x49cbe0
inc word [ebp - 0x40]
mov eax, dword [ebp - 0x40]
and eax, 0xffff
cmp eax, 3
jge 0x49cc31
jne 0x49cbf2
je 0x49cbf2
and dword [esi - 0x39], 0x45
mov eax, 0x4eb0000
mov word [ebp - 0x48], 0
jmp 0x49cbfe
inc word [ebp - 0x48]
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, 3
jge 0x49cc2f
jbe 0x49cc10
ja 0x49cc10
test byte [ebx - 0xda3fbb], cl
inc dword [eax]
add byte [ebx - 0x1e7e47b3], cl
invalid
mov eax, dword [ebp - 0x40]
and eax, 0xffff
mov ecx, dword [ebp - 0x48]
and ecx, 0xffff
add ecx, ecx
lea eax, [ecx + eax*8]
mov word [eax + ebp - 0x74], 0
jmp 0x49cbfa
jmp 0x49cbdc
jns 0x49cc36
js 0x49cc36
test ebx, ebp
push esi
jmp case.default.0x49cc6f
jb 0x49cc3d
jae 0x49cc3d
mov dl, 0x66
mov dword [ebp - 0x58], 0x3750000
mov word [ebp - 0x58], 0
jne 0x49cc48
je 0x49cc48
mov ebx, ebp
inc esp
jmp case.default.0x49cc6f
jle 0x49cc4f
jg 0x49cc4f
mov al, 0x66
mov dword [ebp - 0x6e], 0x31510000
leave
mov word [ebp - 0x6e], 0
push ecx
xor ecx, ecx
jecxz 0x49cc5b
xchg dword [ecx - 0x15], ebx
xor bl, ch
cmp dword cs:[ebp - 0x90], 5
pop ecx
jmp case.default.0x49cc6f
cmp dword [ebp - 0x90], 5
ja case.default.0x49cc6f
mov eax, dword [ebp - 0x90]
jmp dword [eax*4 + 0x49cc76]
jmp 0x49cb67
jp 0x49cc98
jnp 0x49cc98
add ebx, ebp
das
jmp 0x49ccc9
jl 0x49cc9f
jge 0x49cc9f
adc ecx, ebp
sub byte [esi], al
add byte [eax], al
jmp 0x49d2cc
jle 0x49cca9
jg 0x49cca9
jne 0x49cc93
jmp 0x49db09
pop ebx
push cs
add byte [eax], al
push ecx
xor ecx, ecx
jecxz 0x49ccb4
jno 0x49cd0e
pop ecx
jmp 0x49ccc9
jmp 0x49ccba
jmp 0x49d6cc
jo 0x49ccc4
jno 0x49ccc4
ja 0x49ccae
jmp 0x49db09
inc eax
push cs
add byte [eax], al
jb 0x49ccce
jae 0x49ccce
ret 0xc766
mov word [ebp - 0x4c], 0
jmp 0x49ccda
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 3
jge 0x49cdd0
jne 0x49ccf0
je 0x49ccf0
les ecx, [ebx - 0xda4bbb]
inc dword [eax]
add byte [ebx - 0x1e7e4bb3], cl
invalid
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
add eax, 7
mov dword [ebp - 0x94], eax
jmp 0x49cda6
scasd eax, dword es:[edi]
ror dword [ebx - 0x1e7e4bb3], 0xff
inc dword [eax]
add byte [edi], cl
scasd eax, dword es:[edi]
rol dword [ebx - 0x7a76f840], 0x6c
invalid
jo 0x49cd2c
jno 0x49cd2c
mov ebp, ecx
lea eax, [ebx]
add byte [eax], al
jmp 0x49d0be
jp 0x49cd36
jnp 0x49cd36
loopne 0x49cd6a
xor eax, eax
mov ax, word [ebp - 0x56]
shl byte [esi - 0x75], 0x45
stosb byte es:[edi], al
mov ecx, 5
cdq
idiv ecx
lea eax, [edx - 2]
cmp eax, 1
sbb ecx, ecx
inc ecx
xor eax, eax
mov ax, word [ebp - 0x56]
mov ebx, 3
cdq
idiv ebx
lea eax, [edx - 1]
cmp eax, 1
sbb eax, eax
inc eax
or ecx, eax
je 0x49cd89
jl 0x49cd6d
jge 0x49cd6d
jmp 0x49cdd4
mov ax, word [ebp - 0x58]
mov word [ebp - 0x5e], ax
jle 0x49cd7a
jg 0x49cd7a
fisub word [esi - 0x39]
inc ebp
cmpsb byte [esi], byte es:[edi]
add dword [eax], eax
mov word [ebp - 0x5a], 1
push ecx
xor ecx, ecx
jecxz 0x49cd86
lds ebx, [ecx - 0x15]
push es
pop ecx
jmp 0x49cd8f
mov word [ebp - 0x5a], 0
jmp 0x49cd92
jmp 0x49cdcb
jbe 0x49cd99
ja 0x49cd99
mov ebx, 0xaa45ff66
inc word [ebp - 0x56]
jns 0x49cda2
js 0x49cda2
fucomi st(3)
daa
jmp 0x49cdcb
jmp 0x49cdcb
cmp dword [ebp - 0x94], 7
je 0x49cd94
cmp dword [ebp - 0x94], 8
je 0x49cd31
cmp dword [ebp - 0x94], 0x17
je 0x49cd27
jmp 0x49cdcb
jmp 0x49ccd6
jns 0x49cdd5
js 0x49cdd5
invalid
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 7
cdq
idiv ecx
lea eax, [edx - 2]
cmp eax, 1
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ebx, 0xb
cdq
idiv ebx
lea eax, [edx - 5]
cmp eax, 1
sbb eax, eax
neg eax
or ecx, eax
je 0x49ce2f
jp 0x49ce12
jnp 0x49ce12
or al, 0x66
mov eax, dword [ebp - 0x58]
mov ax, word [ebp - 0x58]
mov word [ebp - 0x5e], ax
jl 0x49ce1f
jge 0x49ce1f
mov edx, 0xa645c766
add dword [eax], eax
mov word [ebp - 0x5a], 1
jle 0x49ce2a
jg 0x49ce2a
invalid
jmp 0x49d0be
push ecx
xor ecx, ecx
jecxz 0x49ce35
int 0x59
pop ecx
xor eax, eax
mov ax, word [ebp - 0x6e]
xchg edx, eax
mov dword [ebp - 0x98], eax
jmp 0x49ceaa
jmp 0x49ce47
jmp 0x49d6e6
jo 0x49ce51
jno 0x49ce51
js 0x49ce3b
jmp 0x49d78f
cmp dword [ecx], ecx
add byte [eax], al
jb 0x49ce5b
jae 0x49ce5b
add dword [edx + 0x948e9], esp
mov byte [0x948e9], al
jmp 0x49d7a8
add byte [ebp + 3], dh
jne 0x49ce65
je 0x49ce65
invalid
jmp 0x49d7f6
jbe 0x49ce6f
ja 0x49ce6f
loopne 0x49ce59
jmp 0x49d7fc
mov byte [ecx], cl
add byte [eax], al
jns 0x49ce79
js 0x49ce79
ret 0x21e9
jmp 0x49d89f
jp 0x49ce83
jnp 0x49ce83
mov dword [0xa94e9], eax
add byte [ebx + eax + 0x7d], bh
jl 0x49ce8d
jge 0x49ce8d
invalid
jmp 0x49d91c
jl 0x49ce8d
jge 0x49ce8d
add ebp, ecx
and eax, 0x7e00000b
jle 0x49ce97
jg 0x49ce97
jmp 0x49d9b7
jle 0x49ce97
jg 0x49ce97
and eax, 0xc05e9
add byte [ecx + 0x31], dl
push ecx
xor ecx, ecx
jmp 0x49daa1
push ecx
xor ecx, ecx
jecxz 0x49cea2
jge 0x49cefc
pop ecx
jmp 0x49dadd
cmp dword [ebp - 0x98], 9
ja case.default.0x49ceb9
mov eax, dword [ebp - 0x98]
jmp dword [eax*4 + 0x49cec0]
jmp 0x49ceeb
jo 0x49cef0
jno 0x49cef0
add dword [ecx - 0x22b17], esp
mov eax, dword [0xfffdd4e9]
jmp 0x49ccc9
push dword [edx + 3]
jb 0x49cefa
jae 0x49cefa
mov cl, 0xe9
dec eax
jmp 0x49cb47
cld
invalid
jne 0x49cf04
je 0x49cf04
js 0x49ceee
jmp 0x49db09
add byte [eax + eax], cl
add byte [esi + 3], dh
jbe 0x49cf0e
ja 0x49cf0e
shl byte [esi - 0x39], 1
inc ebp
mov ah, 0
add bl, ch
add al, 0x66
inc dword [ebp - 0x4c]
mov word [ebp - 0x4c], 0
jmp 0x49cf1a
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 4
jge 0x49d0a3
jns 0x49cf30
js 0x49cf30
ror dword [ebx - 0xda4bbb], 1
inc dword [eax]
add byte [ebx - 0x1e7e4bb3], cl
invalid
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
lea ecx, [ecx + ecx*2]
add eax, ecx
inc eax
mov dword [ebp - 0x9c], eax
jmp 0x49d053
jle 0x49cf63
jg 0x49cf63
jge case.0x49cffa.3
xor eax, eax
mov ax, word [ebp - 0x6e]
shl byte [esi - 0x75], 0x45
xchg edx, eax
mov ecx, dword [ebp - 0x5c]
and ecx, 0xffff
cmp eax, ecx
jne case.default.0x49cffa
push ecx
xor ecx, ecx
jecxz 0x49cf80
sub al, 0x59
pop ecx
xor eax, eax
mov ax, word [ebp - 0x56]
mov ecx, 9
cdq
idiv ecx
mov dword [ebp - 0xa0], edx
jmp 0x49cfeb
jmp 0x49cf9a
jmp 0x49ceff
jo 0x49cfa4
jno 0x49cfa4
mov cl, 0xe9
push ss
std
invalid
jmp 0x49ccbf
jmp 0x49cfac
jmp 0x49d6de
jb 0x49cfb6
jae 0x49cfb6
mov bl, 0xe9
jmp 0x7649cfb8
invalid
jmp 0x49cca4
jne 0x49cfc0
je 0x49cfc0
mov ah, 0xe9
cmp eax, 0xebfffffb
jmp 0x49cfc8
mov ch, 0xe9
test bl, bh
invalid
push dword [esi + 3]
jbe 0x49cfd2
jmp 0x49cb02
jmp 0x49cfc8
jmp 0x49cb51
jbe 0x49cfd2
ja 0x49cfd2
mov dh, 0xe9
pop edi
sti
invalid
jmp 0x49cb36
jmp 0x49cfda
jmp 0x49d0b2
jns 0x49cfe4
js 0x49cfe4
mov eax, 0x2f5e9
add bl, ch
cmp al, byte [ebx - 0x9f43]
dec dword [eax]
jmp 0x49d2de
cmp dword [ebp - 0xa0], 8
ja case.default.0x49cffa
mov eax, dword [ebp - 0xa0]
jmp dword [eax*4 + 0x49d001]
add bl, ch
add ecx, esp
jmp 0x49d028
jmp case.0x49d070.4
jp 0x49d02f
jnp 0x49d02f
jge 0x49d096
inc word [ebp - 0x6e]
inc dword [ebp - 0x6e]
jl 0x49d038
jge 0x49d038
jge 0x49d024
jmp case.0x49d070.4
jmp 0x49d03d
jmp 0x49d03d
add dword [esi + 0x37a7feb], ecx
jmp 0x49d0be
jp 0x49d044
jnp 0x49d044
and ah, byte [esi - 0x39]
inc ebp
cmpsb byte [esi], byte es:[edi]
add dword [eax], eax
mov word [ebp - 0x5a], 1
jl 0x49d04f
jge 0x49d04f
loop 0x49d03b
jmp case.0x49d070.4
dec ebp
jmp case.0x49d070.4
dec dword [ebp - 0x9c]
cmp dword [ebp - 0x9c], 0x12
ja case.0x49d070.4
mov eax, dword [ebp - 0x9c]
xor ecx, ecx
mov cl, byte [eax + 0x49d08b]
jmp dword [ecx*4 + 0x49d077]
add al, 4
add al, 4
add al, 4
add al, 3
jmp 0x49cf16
jle 0x49d0a8
jg 0x49d0a8
and cl, ch
sbb al, 0xfc
invalid
jmp 0x49ccc9
jmp 0x49d0b0
jmp 0x49d0a3
push ecx
xor ecx, ecx
jecxz 0x49d0b8
jno 0x49d112
pop ecx
jmp 0x49db09
jmp 0x49d0c1
mov word [ebp - 0x4c], 0
jmp 0x49d0cd
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 8
jge 0x49d2cc
jo 0x49d0e3
jno 0x49d0e3
ror dword [ebx - 0xda4bbb], 1
inc dword [eax]
add byte [ebx - 0x1e7e4bb3], cl
invalid
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
add eax, ecx
inc eax
mov dword [ebp - 0xa4], eax
jmp 0x49d246
jmp 0x49d111
xor eax, eax
mov ax, word [ebp - 0x5a]
shl byte [esi - 0x75], 0x45
cmpsb byte [esi], byte es:[edi]
cdq
xor eax, edx
sub eax, edx
and eax, 1
xor eax, edx
sub eax, edx
mov dword [ebp - 0xa8], eax
jmp 0x49d13f
jb 0x49d130
jae 0x49d130
jecxz 0x49d11a
jmp 0x49cdd0
wait
cld
invalid
jmp 0x49d138
jmp 0x49d2e6
cmp dword [ebp - 0xa8], 0
je 0x49d12b
cmp dword [ebp - 0xa8], 1
je 0x49d135
jmp 0x49d153
jne 0x49d158
je 0x49d158
fldl2t
push 1
add byte [eax], al
jmp case.0x49d263.8
jne 0x49d162
je 0x49d162
mov edi, 0x5ae045c7
add dword [eax], eax
add bl, ch
add ebp, edx
mov dword [ebp - 0x20], 0x15a
jmp 0x49d16c
mov dword [ebp - 0x28], 0x4e35
jbe 0x49d178
ja 0x49d178
sbb ebp, ecx
dec edx
add dword [eax], eax
add bl, ch
jmp 0x49d180
mov ebp, 0xec7d83
jmp case.0x49d263.8
jmp 0x49d180
cmp dword [ebp - 0x14], 0
je 0x49d195
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x14]
and eax, 0xffff
add dword [ebp - 0x24], eax
jp 0x49d19a
jnp 0x49d19a
imul ecx
sub byte [ecx], al
add byte [eax], al
jmp case.0x49d263.8
jmp 0x49d1a2
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x1c]
and eax, 0xffff
mov dword [ebp - 0x24], eax
jns 0x49d1b6
js 0x49d1b6
sub ebp, ecx
or al, 1
add byte [eax], al
jmp case.0x49d263.8
jmp 0x49d1be
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x24]
shl ecx, 0x10
and ecx, 0xffff0000
add eax, ecx
inc eax
mov dword [ebp - 0x30], eax
jl 0x49d1dc
jge 0x49d1dc
cmp ebp, ecx
out 0, al
add byte [eax], al
jmp case.0x49d263.8
jmp 0x49d1e4
mov eax, dword [ebp - 0x3c]
shr eax, 0x10
mov dword [ebp - 0x14], eax
jb 0x49d1f2
jae 0x49d1f2
aam 0x8b
inc ebp
les esp, [0xffff]
mov eax, dword [ebp - 0x3c]
and eax, 0xffff
mov dword [ebp - 0x1c], eax
jmp 0x49d200
jmp case.0x49d263.8
push ecx
xor ecx, ecx
jecxz 0x49d20b
mov ebx, 0xd0658159
invalid
pop ecx
and dword [ebp - 0x30], 0x7fff
jmp 0x49d216
mov eax, dword [ebp - 0x30]
mov word [ebp - 0x38], ax
jo 0x49d222
jno 0x49d222
mov ebp, ecx
mov al, byte [0xeb000000]
jmp 0x49d22a
mov ebp, 0x89d0458b
inc ebp
les edi, [esi + 3]
jmp case.0x49d263.8
jmp 0x49d22a
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3c], eax
jle 0x49d235
jg 0x49d235
mov esp, 0x10d06dc1
shr dword [ebp - 0x30], 0x10
jmp 0x49d23c
jmp case.0x49d263.8
dec dword [ebp - 0xa4]
cmp dword [ebp - 0xa4], 0x38
ja case.0x49d263.8
mov eax, dword [ebp - 0xa4]
xor ecx, ecx
mov cl, byte [eax + 0x49d28e]
jmp dword [ecx*4 + 0x49d26a]
jmp 0x49d0c9
jmp 0x49d2cf
jmp 0x49ccc9
jbe 0x49d2d9
ja 0x49d2d9
adc cl, ch
sar cl, 1
invalid
jmp 0x49ccae
jmp 0x49d2e1
jmp 0x49db09
jns 0x49d2eb
js 0x49d2eb
fisub dword [esi - 0x39]
inc ebp
mov ah, 0
add bl, ch
add al, 0x66
inc dword [ebp - 0x4c]
mov word [ebp - 0x4c], 0
jmp 0x49d2f7
inc word [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
cmp eax, 7
jge 0x49d6c7
jmp 0x49d30b
mov eax, dword [ebp - 0x4c]
and eax, 0xffff
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
and ecx, 0xffff
imul eax, ecx
inc eax
mov dword [ebp - 0xac], eax
jmp 0x49d59e
jbe 0x49d33c
ja 0x49d33c
fmul qword [ebx - 0xda53bb]
inc dword [eax]
add byte [ebp + 0x4d8b4004], cl
mov byte [ecx + 0xffffe1], al
add byte [ebx], al
shl dword [esi - 0x77], 0x45
enter 0x1eb, 0x1d
mov eax, dword [ebp - 0x54]
and eax, 0xffff
lea eax, [eax + eax*2]
mov ecx, dword [ebp - 0x78]
and ecx, 0xffff
add eax, ecx
mov word [ebp - 0x38], ax
jmp 0x49d359
mov ax, word [ebp - 0x38]
mov word [ebp - 0x58], ax
jns 0x49d366
js 0x49d366
sub eax, 0x357e9
add bl, ch
jmp 0x49d36e
invalid
jmp case.0x49d5c2.7
jmp 0x49d36e
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 3
cdq
idiv ecx
mov word [ebp - 0x78], dx
jle 0x49d387
jg 0x49d387
mov ecx, gs
add eax, dword ss:[eax]
add bl, ch
jmp 0x49d38f
jbe 0x49d31b
inc ebp
lodsb al, byte [esi]
jmp case.0x49d5c2.7
jmp 0x49d38f
mov eax, dword [ebp - 0x54]
and eax, 0xffff
mov ecx, dword [ebp - 0x78]
and ecx, 0xffff
add ecx, ecx
lea eax, [ecx + eax*8]
inc word [eax + ebp - 0x74]
jne 0x49d3af
je 0x49d3af
or eax, 0xa8458b66
mov ax, word [ebp - 0x58]
mov word [ebp - 0x5e], ax
jmp 0x49d3ba
jmp case.0x49d5c2.7
jo 0x49d3c4
jno 0x49d3c4
mov esp, dword [esi - 0x39]
inc ebp
mov eax, 0x4eb0000
mov word [ebp - 0x48], 0
jmp 0x49d3d0
inc word [ebp - 0x48]
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, 3
jge 0x49d430
jmp 0x49d3e0
mov eax, dword [ebp - 0x78]
and eax, 0xffff
mov ecx, dword [ebp - 0x54]
and ecx, 0xffff
shl ecx, 3
lea eax, [ecx + eax*2]
mov eax, dword [eax + ebp - 0x74]
and eax, 0xffff
mov ecx, dword [ebp - 0x48]
and ecx, 0xffff
mov edx, dword [ebp - 0x54]
and edx, 0xffff
shl edx, 3
lea ecx, [edx + ecx*2]
mov ecx, dword [ecx + ebp - 0x74]
and ecx, 0xffff
cmp eax, ecx
jle 0x49d42e
mov ax, word [ebp - 0x48]
mov word [ebp - 0x78], ax
jmp 0x49d3cc
jb 0x49d435
jae 0x49d435
call 0x4c5d22
add byte [edx + 3], bh
jp 0x49d43f
jmp case.0x49d5c2.7
jp 0x49d43f
jnp 0x49d43f
in al, 0x8b
inc ebp
enter 0xffffffffffffff25, 0xffffffffffffffff
add byte [eax], al
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 9
cdq
idiv ecx
mov word [ebp - 0x38], dx
jmp 0x49d456
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 3
cdq
idiv ecx
mov word [ebp - 0x54], ax
jl 0x49d46f
jge 0x49d46f
lcall 0xeb00, 0x24ee9
add ecx, ebp
jmp case.0x49d5c2.7
jmp 0x49d477
mov eax, dword [ebp - 0x38]
and eax, 0xffff
mov ecx, 9
cdq
idiv ecx
mov dword [ebp - 0xb0], edx
jmp 0x49d4e5
jp 0x49d494
jnp 0x49d494
invalid
jmp 0x49cef5
jmp 0x49d49c
jmp 0x49ccb7
jl 0x49d4a6
jge 0x49d4a6
ljmp 0xeb00:0x229e9
jmp 0x49d6d4
jmp 0x49d4ae
jmp 0x49cc9a
jle 0x49d4b8
jg 0x49d4b8
out 0xe9, al
pop ebx
idiv bh
call dword [ecx + 0x31]
push ecx
xor ecx, ecx
jmp 0x49cb18
push ecx
xor ecx, ecx
jecxz 0x49d4c3
in al, 0x59
pop ecx
jmp 0x49cb40
jmp 0x49d4cc
jmp 0x49cb2c
jo 0x49d4d6
jno 0x49d4d6
loopne 0x49d4c0
jmp 0x49d0ad
sar bl, cl
invalid
jmp 0x49d4de
jmp 0x49d2d4
cmp dword [ebp - 0xb0], 8
ja case.default.0x49d4f4
mov eax, dword [ebp - 0xb0]
jmp dword [eax*4 + 0x49d4fb]
jmp 0x49d522
mov word [ebp - 0x40], 0
jmp 0x49d52e
inc word [ebp - 0x40]
mov eax, dword [ebp - 0x40]
and eax, 0xffff
cmp eax, 3
jge 0x49d591
push ecx
xor ecx, ecx
jecxz 0x49d541
mov esp, 0xc0458b59
pop ecx
mov eax, dword [ebp - 0x40]
and eax, 0xffff
mov ecx, dword [ebp - 0x78]
and ecx, 0xffff
add ecx, ecx
lea eax, [ecx + eax*8]
mov eax, dword [eax + ebp - 0x74]
and eax, 0xffff
mov ecx, dword [ebp - 0x78]
and ecx, 0xffff
mov edx, dword [ebp - 0x54]
and edx, 0xffff
shl edx, 3
lea ecx, [edx + ecx*2]
mov ecx, dword [ecx + ebp - 0x74]
and ecx, 0xffff
cmp eax, ecx
jge 0x49d58f
mov ax, word [ebp - 0x40]
mov word [ebp - 0x54], ax
jmp 0x49d52a
jmp 0x49d594
jmp case.0x49d5c2.7
dec dword [ebp - 0xac]
cmp dword [ebp - 0xac], 0xd8
ja case.0x49d5c2.7
mov eax, dword [ebp - 0xac]
xor ecx, ecx
mov cl, byte [eax + 0x49d5e9]
jmp dword [ecx*4 + 0x49d5c9]
jmp 0x49d2f3
jb 0x49d6cc
jae 0x49d6cc
test eax, 0xe92101eb
cmc
cmc
invalid
jmp 0x49d6cf
jmp 0x49ccc9
jne 0x49d6d9
je 0x49d6d9
xor ecx, ebp
inc esp
hlt
jmp 0x49cb22
jmp 0x49d6e1
jmp 0x49db09
nop
jne 0x49d6ec
je 0x49d6ec
mov al, 0xe8
push esp
and eax, 0x3d830000
je 0x49d765
call fcn.0049fc45
cmp dword [0x4b7074], 0
dec ebx
add byte [eax], al
jne 0x49d75c
call fcn.0049dc67
test eax, eax
je 0x49d757
mov eax, dword [0x4b7f28]
dec eax
mov ecx, eax
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*2]
lea eax, [eax*2 + 0x4b7008]
add eax, 0x614
mov dword [ebp - 0x2c], eax
cmp dword [0x4b75da], 0
je 0x49d745
push 0x40
mov eax, 0x4b7008
add eax, 0x5d6
push eax
mov eax, dword [ebp - 0x2c]
push eax
push 0
call dword [sym.imp.user32.dll_MessageBoxA]
mov dword [0x4b7a5c], 1
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_ExitProcess]
call fcn.0049e8ca
mov word [ebp - 0x48], 0
jmp 0x49d768
inc word [ebp - 0x48]
inc dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, 0x1e
jge 0x49d78a
mov eax, dword [ebp - 0x48]
and eax, 0xffff
mov dword [eax*4 + 0x4b709c], 0xffffffff
jmp 0x49d764
jmp 0x49cf09
nop
jbe 0x49d795
ja 0x49d795
mov dl, 0xe8
mov al, byte [0x85000011]
sal byte [ebp + 5], 0xe9
jae 0x49d7a4
call 0x49e93a
test eax, eax
jne 0x49d7a3
jmp 0x49db16
add byte [eax], al
jmp 0x49cf09
popal
idiv edi
call dword [eax + 0x1780379]
nop
jns 0x49d7ae
js 0x49d7ae
mov ah, 0x83
cmp eax, 0x4b7a18
add byte [edx + edi - 0x39], dh
inc ebp
clc
or eax, dword [eax]
add byte [eax], al
cmp dword [0x4b7a18], 0
je 0x49d7f1
mov dword [ebp - 8], 0xb
jmp 0x49d7c1
lea eax, [ebp - 0x34]
push eax
push 0
lea eax, [ebp - 8]
push eax
push 0x49c97f
push 0
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xffffffff
jne 0x49d7f1
jmp 0x49d7e6
push 0x9999
call dword [sym.imp.kernel32.dll_ExitProcess]
jmp 0x49cf09
nop
jmp 0x49cf09
nop
jl 0x49d802
jge 0x49d802
mov eax, 0x4b7a24a1
add byte [eax - 0x18], dl
invalid
mov eax, dword [0x4b7a24]
push eax
call fcn.0049befd
add esp, 4
mov dword [0x4b7a24], eax
mov eax, dword [0x4b7a28]
push eax
call fcn.0049befd
add esp, 4
mov dword [0x4b7a28], eax
mov eax, dword [0x4b7a2c]
push eax
call fcn.0049befd
add esp, 4
mov dword [0x4b7a2c], eax
mov eax, dword [0x4b7a30]
push eax
call fcn.0049befd
add esp, 4
mov dword [0x4b7a30], eax
mov eax, dword [0x4b7a34]
push eax
call fcn.0049befd
add esp, 4
mov dword [0x4b7a34], eax
mov eax, dword [0x4b7a38]
push eax
call fcn.0049befd
add esp, 4
mov dword [0x4b7a38], eax
mov eax, dword [0x4b7a3c]
push eax
call fcn.0049befd
add esp, 4
mov dword [0x4b7a3c], eax
mov eax, dword [0x4b7a40]
push eax
call fcn.0049befd
add esp, 4
mov dword [0x4b7a40], eax
jmp 0x49cf09
nop
jle 0x49d8a5
jg 0x49d8a5
mov edx, 0x4b7a44a1
add byte [eax - 0x18], dl
dec ebp
out 0xff, al
inc dword [ebx + 0x44a304c4]
jp 0x49d902
mov eax, dword [0x4b7a44]
push eax
call fcn.0049befd
add esp, 4
mov dword [0x4b7a44], eax
mov eax, dword [0x4b7a48]
add byte [ecx + 0x4b7a48], ah
push eax
call fcn.0049befd
add esp, 4
mov dword [0x4b7a48], eax
mov eax, dword [0x4b7a4c]
push eax
call fcn.0049befd
add esp, 4
mov dword [0x4b7a4c], eax
mov eax, dword [0x4b7a50]
push eax
call fcn.0049befd
add esp, 4
mov dword [0x4b7a50], eax
mov eax, dword [0x4b7a54]
push eax
call fcn.0049befd
add esp, 4
mov dword [0x4b7a54], eax
mov eax, dword [0x4b7a58]
dec ebx
add byte [ecx + 0x4b7a58], ah
push eax
call fcn.0049befd
add esp, 4
mov dword [0x4b7a58], eax
jmp 0x49cf09
nop
push ecx
xor ecx, ecx
jecxz 0x49d923
mov edi, 0x9c05c759
test dword [ebx], ecx
add byte [eax], al
add byte [eax], al
pop ecx
mov dword [0x4b859c], 0
call dword [sym.imp.kernel32.dll_GetVersion]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x80000000
jae 0x49d974
push 0x4b7f3c
call dword [sym.imp.kernel32.dll_LoadLibraryA]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x49d972
push 0x4b7f48
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
mov dword [0x4b859c], eax
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.kernel32.dll_FreeLibrary]
jmp 0x49d9b2
xor eax, eax
mov al, byte [ebp - 0xc]
cmp eax, 4
jge 0x49d980
jmp 0x49d9b2
push 0x4b7f58
call dword [sym.imp.kernel32.dll_LoadLibraryA]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x49d9b2
push 0x4b7f64
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
mov dword [0x4b859c], eax
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.kernel32.dll_FreeLibrary]
jmp 0x49cf09
nop
jmp 0x49d9bb
cmp dword [0x4b729e], 0
je 0x49da9c
mov dword [ebp - 0x7c], 0x400
mov eax, dword [ebp - 0x7c]
cmp dword [0x4b72ba], eax
jge 0x49d9e2
mov eax, dword [0x4b72ba]
mov dword [ebp - 0x7c], eax
mov eax, dword [0x4b706c]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
call fcn.0049f4ac
add esp, 4
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
call fcn.0049c8ca
add esp, 4
mov dword [ebp - 0x10], eax
mov word [ebp - 0x48], 0
jmp 0x49da14
inc word [ebp - 0x48]
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, dword [ebp - 0x7c]
jge 0x49da88
call fcn.0049db1b
mov eax, dword [ebp - 0x48]
and eax, 0xffff
push eax
mov eax, dword [ebp - 4]
inc dword [eax]
add byte [eax - 0x75], dl
inc ebp
cld
push eax
call fcn.0049f43d
add esp, 8
test eax, eax
jne 0x49da86
mov eax, dword [ebp - 0x48]
and eax, 0xffff
cmp eax, dword [ebp - 0x10]
jl 0x49da5f
mov eax, dword [ebp - 0x10]
add eax, 4
mov ecx, dword [ebp - 0x48]
and ecx, 0xffff
cmp eax, ecx
jg 0x49da86
mov eax, dword [ebp - 0x48]
and eax, 0xffff
mov ecx, dword [ebp - 0x44]
xor edx, edx
mov dl, byte [ecx + eax]
xor eax, eax
mov al, byte [0x4b72be]
sub edx, eax
mov eax, dword [ebp - 0x48]
and eax, 0xffff
mov ecx, dword [ebp - 0x44]
mov byte [ecx + eax], dl
jmp 0x49da10
mov dword [0x4b7044], 1
mov dword [0x4b729e], 0
jmp 0x49cf09
nop
jo 0x49daa7
jno 0x49daa7
jno 0x49da2b
cmp dword [0x4b72ae], 0
je 0x49dad8
cmp eax, 0x4b72ae
add byte [eax + ebp - 0x7f], dh
cmp eax, 0x4b72ce
push esi
inc edx
xor eax, 0x680f754d
cmp dword [0x4b72ce], 0x4d354256
jne 0x49dacb
push 0x4b7f74
call fcn.0049bf79
add esp, 4
jmp 0x49dad8
je 0x49db3e
dec ebx
add al, ch
mov bl, 0xe4
invalid
push 0x4b7f84
call fcn.0049bf79
add esp, 4
jmp 0x49cf09
cmp dword [0x4b7074], 0
jne 0x49daef
cmp dword [0x4b72a6], 0
je 0x49daef
add byte [eax + 0x1730372], dl
nop
jb 0x49daf5
jae 0x49daf5
jae 0x49dabd
mov dword [0x4b7a5c], 1
add eax, 0x4b7a5c
add dword [eax], eax
add byte [eax], al
jo 0x49db04
jno 0x49db04
jno 0x49daee
jmp 0x49cf09
add ah, dh
invalid
pop eax
pop ebx
pop ecx
pop edx
pop edi
pop esi
leave
jmp dword [0x4b7018]
pop edi
pop esi
pop ebx
leave
ret
hlt