Function at 0x406fa0
Capabilities:
Encode data using xor
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
push esi
mov esi, dword [ebp - 2]
xor ebx, ebx
cmp edi, dword [ecx + 0x57]
mov dword [ebp - 0xc], esi
jne 0x406fba
mov esi, 0x1ef440
mov al, byte [esi]
sal byte [eax], 1
jl 0x406fd8
cmp al, 0x39
jg 0x40707d
push 0x40fe34
bnd call dword [sym.imp.MSVCRT.dll_strspn]
mov edi, dword [ebx + 0x7c83fe8b]
push dword [ebx]
rol byte [ebx - 0x510df73c], 0x7d
sar edi, 1
cmp edx, ecx
jne 0x40f97d
push esi
call dword [sym.imp.WSOCK32.dll_inet_addr]
mov dword [ebp - 8], eax
lea esi, [eax + 0x43]
lea ecx, [ebp - 0x14]
lea edx, [ebp - 0x24]
nop
inc ebp
in al, dx
mov ebp, edx
invalid
push esi
call dword [0x4021ac]
faddp st(3)
mov dword [esp + ecx + 0x35298575], ebp
fadd st(1)
inc eax
add bh, bh
salc
test eax, eax
je 0x407098
call esi
salc
pop edi
test eax, 0xafc8005
add byte [ebx - 0x75], bl
in eax, 0x5d
mov al, 0xa9
push ebx
add al, 0x80
xchg dword [ecx + ecx*4], eax
jae 0x4070d2
mov eax, dword [ebp + 0xc]
add edi, 4
mov ebx, esi
mov dword [ebp - 0x46], edi
or ecx, dword [eax + 0xc]
xchg byte [edi + ecx], bh
add byte [edi], cl
test dword [ebx - 1], ebx
invalid
in al, dx
add esi, 0x254
and cl, byte [ebp + 0xc]
push ebx
or al, 0x53
push esi
xor ebp, dword [ecx]
mov eax, dword [ecx]
mov edi, dword [edx + 4]
jp 0x4070e9
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 0x10]
push edi
das
jne 0x4070db
mov al, byte [eax]
mov dword [0x69ea84fc], ebp
jne 0x4070d9
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], edx
shld dword [edx - 0x74fffff6], ebp, cl
pop ebp
mov eax, edi
and dh, byte [esp + edi - 0x75]
inc ebp
hlt
jb 0x40f9f1
outsd dx, dword [esi]
jb 0x40f9a2
jae 0x40f9f8
jb 0x40f9ef
outsb dx, byte [esi]
and byte [bp + 0x6f], ch
je 0x40f9ad
jae 0x40f9ff
arpl word gs:[ecx + 0x66], bp
imul esp, dword [ebp + 0x64], 0x74657920
add byte [eax], al
jo 0x40f9ff
jae 0x40fa13
ja 0x40fa11
jb 0x40fa08
jae 0x40f9c6
outsd dx, dword fs:[esi]
and byte [esi + 0x6f], ch
je 0x40f9cd
insd dword es:[edi], dx
popal
je 0x40fa14
push 0x68540000
push esp
push 0x66207369
jne 0x40fa2a
invalid
je 0x40fa28
outsd dx, dword [esi]
outsb dx, byte [esi]
and byte [eax + 0x61], ch
jae 0x40f9e6
outsb dx, byte [esi]
outsd dx, dword [esi]
je 0x40f9ea
bound esp, qword [ebp + 0x65]
outsb dx, byte [esi]
and byte [ecx + 0x6d], ch
jo 0x40fa3f
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x40fa3e
and byte fs:[edi + 0x6e], ch
and byte [eax + ebp*2 + 0x69], dh
jae 0x40fa03
jo 0x40fa51
popal
je 0x40fa4e
outsd dx, dword [esi]
jb 0x40fa58
insd dword es:[edi], dx
add byte [eax], al
add byte [eax], al
add byte [eax + ebp*2 + 0x65], dl
push esp
invalid
jb 0x40fa5a
push 0x20657265
imul esi, dword [ebx + 0x20], 0x65206f6e
jb 0x40fa71
and byte [ecx + 0x73], ch
and byte [esi + 0x6f], ch
and byte [ebp + 0x72], ah
jb 0x40fa6f
outsd dx, dword [esi]
jb 0x40fa2e
and byte [eax + ebp*2 + 0x69], dh
jae 0x40fa28
je 0x40fa6d
imul esi, dword [ebx + 0x20], 0x756c6176
and byte gs:[ebx + 0x69], dh
jbe 0x40fa6b
insb byte es:[edi], dx
jne 0x40fa72
and byte [ebx + 0x69], dh
outsb dx, byte [si]
outsb dx, byte [esi]
imul esp, dword [esi + 0x69], 0x61207365
imul sp, word [ebp + 0x73], 0x6120
imul esp, dword [ebp + 0x73], 0x206e6120
imul ebp, dword [esi + 0x69], 0x6c616974
imul edi, dword [edx + 0x65], 0x72652064
outsb dx, byte [esi]
and byte [ecx + 0x6e], ch
imul esi, dword [ecx + ebp*2 + 0x61], 0x657a696c
and byte fs:[ebp + 0x72], ah
jb 0x40fa9c
jb 0x40fa9a
outsd dx, dword [esi]
jb 0x40fa4d
arpl word [edi + 0x64], bp
add byte gs:[eax], al
outsd dx, dword [esi]
add byte gs:[eax], al
add byte [ebx + 0x68], dl
push ebx
invalid
popal
jb 0x40fa9e
and byte fs:[ebp + 0x65], ch
insd dword es:[edi], dx
outsd dx, dword [esi]
jb 0x40faba
and byte [ecx + 0x73], ch
and byte [ecx + 0x6d], ch
jo 0x40fab5
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x40fab4
and byte fs:[ebp + 0x73], dh
and byte fs:[ebp + 0x73], dh
jne 0x40fac6
imul ebp, dword [esi + 0x67], 0x6b206120
and byte [ebx + 0x65], ch
jns 0x40fa7d
jns 0x40fa7d
jae 0x40fad8
jae 0x40fad5
insd dword es:[edi], dx
add byte [ebx + 0x68], dl
push ebx
invalid
popal
jb 0x40face
and byte fs:[ebp + 0x65], ch
insd dword es:[edi], dx
insd dword es:[edi], dx
insd dword es:[edi], dx
outsd dx, dword [esi]
jb 0x40faea
and byte [ecx + 0x73], ch
and byte [ecx + 0x6d], ch
jo 0x40fae5
imul esi, dword [ebx + 0x20], 0x6c706d69
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x40fae4
and byte fs:[ebp + 0x73], dh
imul ebp, dword [esi + 0x67], 0x6c696620
jae 0x40fa8d
add byte [eax], al
add byte [ebx + 0x68], dl
push ebx
invalid
popal
jb 0x40fafa
and byte fs:[ebp + 0x65], ch
insd dword es:[edi], dx
outsd dx, dword [esi]
jb 0x40fb16
jns 0x40fabe
and byte [ecx + 0x73], ch
and byte [ecx + 0x6d], ch
jo 0x40fb11
imul esi, dword [ebx + 0x20], 0x6c706d69
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x40fb10
and byte fs:[ecx + 0x6e], ah
outsd dx, dword [esi]
outsb dx, byte [esi]
jns 0x40fb20
outsd dx, dword [esi]
jne 0x40fb29
jae 0x40fb23
insb byte es:[edi], dx
jns 0x40fab9
add byte [eax], al
add byte [ebx + 0x6f], al
inc ebx
outsd dx, dword [esi]
add byte [eax], al
inc ebx
outsd dx, dword [esi]
jne 0x40fb2c
and byte fs:[esi + 0x6f], ch
je 0x40fae6
imul bp, word [esi + 0x64], 0x7320
jo 0x40fb33
arpl word [ecx + 0x66], bp
imul esp, dword [ebp + 0x64], 0x636f7320
jae 0x40fb46
arpl word [ebx + 0x65], bp
je 0x40fafc
imul esp, dword [ebp + 0x74], 0x20
imul ebp, dword [esi + 0x20], 0x6c6c6f70
and byte [ecx + ebp*2 + 0x73], ch
je 0x40fb17
insb byte es:[edi], dx
imul esi, dword [ebx + 0x74], 0x2e
jae 0x40fb5c
add byte cs:[eax], al
add byte [eax], al
add byte [eax], al
add byte [ebp + 0x6e], al
inc ebp
outsb dx, byte [esi]
inc ebp
outsb dx, byte [esi]
and byte fs:[edi + 0x66], ch
and byte [esi + 0x69], ah
insb byte es:[edi], dx
and byte gs:[esi + 0x6f], ah
jne 0x40fb6a
add byte fs:[eax], al
add byte [ebp + 0x69], cl
dec ebp
invalid
jae 0x40fb77
imul ebp, dword [esi + 0x67], 0x72617020
popal
insd dword es:[edi], dx
je 0x40fb75
jb 0x40fb32
and byte [esi + 0x6f], ah
outsw dx, word [esi]
jb 0x40fb36
je 0x40fb80
push 0x70732065
and byte gs:[ebx + 0x70], dh
arpl word gs:[ecx + 0x66], bp
imul esp, dword [ebp + 0x64], 0x6d6f6320
and byte [ebx + 0x6f], ah
insd dword es:[edi], dx
insd dword es:[edi], dx
popal
outsb dx, byte [esi]
and byte fs:[ecx + ebp*2 + 0x6e], ch
and byte gs:[edi + 0x70], ch
insb byte es:[edi], dx
imul ebp, dword [esi + 0x65], 0x74706f20
jo 0x40fba8
je 0x40fb9e
imul ebp, dword [edi + 0x6e], 0x64614200
inc edx
popal
and byte fs:[ebx + 0x68], ah
outsd dx, dword [esi]
outsb dx, byte [esi]
add byte [edx + 0x61], al
inc edx
popal
and byte fs:[ebx + 0x68], ah
popal
jb 0x40fba2
arpl word [ebp + 0x72], si
and byte [ebx + 0x70], dh
jae 0x40fbb8
arpl word gs:[ecx + 0x66], bp
imul esp, dword [ebp + 0x64], 0x206e6f20
arpl word [edi + 0x6d], bp
insd dword es:[edi], dx
popal
outsb dx, byte [esi]
and byte fs:[ecx + ebp*2 + 0x6e], ch
add byte gs:[eax + 0x61], dl
push eax
popal
jb 0x40fbd8
imul ebp, dword [esi + 0x65], 0x72615000
push eax
popal
jb 0x40fbd8
invalid
imul esp, dword [ecx + 0x6c], 0x73657220
jne 0x40fbd9
popal
insb byte es:[edi], dx
and byte [edx + 0x65], dh
jae 0x40fbe1
insb byte es:[edi], dx
je 0x40fbe2
and byte [ecx + 0x72], ah
and byte gs:[esi + 0x61], dh
popal
insb byte es:[edi], dx
imul esp, dword [eax + 0x62], 0x70207475
jb str.The_specified_child_process_is_done_executing
outsd dx, dword [esi]
arpl word [ebp + 0x73], sp
jae 0x40fbef
outsb dx, byte [esi]
and byte [bx + di + 0x73], ch
and byte [ecx + 0x6e], ch
arpl word [edi + 0x6d], bp
jo 0x40fbff
je 0x40fbfb
add byte [eax], al
push esp
push 0x69742065
insd dword es:[edi], dx
outsd dx, dword gs:[esi]
jne 0x40fc17
je 0x40fbc4
and byte [ebx + 0x70], dh
jae 0x40fc16
arpl word gs:[ecx + 0x66], bp
imul esp, dword [ebp + 0x64], 0x73616820
and byte [ebp + 0x78], ah
jo 0x40fc1f
imul esp, dword [esi + 0x69], 0x68206465
popal
jae 0x40fbd2
js 0x40fc25
imul esi, dword [edx + 0x65], 0x64
push esp
push 0x70732065
jb 0x40fc1d
add byte fs:[eax], al
add byte [eax + ebp*2 + 0x65], dl
push esp
push 0x70732065
arpl word gs:[ecx + 0x66], bp
imul esp, dword [ebp + 0x64], 0x69686320
insb byte es:[edi], dx
imul esp, dword [esi + 0x69], 0x63206465
push 0x20646c69
jo 0x40fc44
and byte fs:[eax + 0x72], dh
outsd dx, dword [esi]
arpl word [ebp + 0x73], sp
jae 0x40fbf8
imul esi, dword [ebx + 0x20], 0x20746f6e
jae 0x40fbfb
outsb dx, byte [esi]
outsd dx, dword [esi]
je 0x40fbff
outsd dx, dword fs:[esi]
outsb dx, byte [esi]
and byte gs:[ebp + 0x78], ah
arpl word gs:[ebp + 0x74], si
imul ebp, dword [esi + 0x67], 0x54000000
push esp
add byte [eax + ebp*2 + 0x65], dl
push esp
push 0x70732065
push esp
push 0x70732065
arpl word gs:[ecx + 0x66], bp
imul esp, dword [ebp + 0x64], 0x69686320
insb byte es:[edi], dx
and byte fs:[eax + 0x72], dh
imul esp, dword [esi + 0x69], 0x63206465
and byte fs:[ebx + 0x68], ah
imul ebp, dword [esp + 0x20], 0x636f7270
jae 0x40fc7e
push 0x20646c69
jo 0x40fc78
outsd dx, dword [esi]
arpl word [ebp + 0x73], sp
jae 0x40fc2c
and byte [ecx + 0x73], ch
and byte [edi + ebp*2 + 0x6e], ah
and byte gs:[ebp + 0x78], ah
imul esi, dword [ebx + 0x20], 0x656e6f64
and byte [ebp + 0x78], ah
arpl word gs:[ebp + 0x74], si
arpl word [ebp + 0x74], si
imul ebp, dword [esi + 0x67], 0x54000000
push esp
push 0x70732065
add byte [eax], al
add byte [eax + ebp*2 + 0x65], dl
push esp
push 0x70732065
jo 0x40fc8c
arpl word gs:[ecx + 0x66], bp
arpl word [ecx + 0x66], bp
imul esp, dword [ebp + 0x64], 0x72687420
and byte fs:[eax + ebp*2 + 0x72], dh
popal
and byte fs:[ecx + 0x73], ch
and byte [esi + 0x6f], ch
je 0x40fc5c
je 0x40fca1
arpl word [eax + 0x65], bp
add byte fs:[eax], al
add byte [eax], al
add byte [eax], al
push esp
push 0x70732065
arpl word gs:[ecx + 0x66], bp
imul esp, dword [ebp + 0x64], 0x72687420
popal
and byte fs:[ecx + 0x73], ch
and byte [ecx + 0x73], ch
and byte [ebp + 0x74], ah
popal
arpl word [eax + 0x65], bp
add byte fs:[eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
pop ecx
outsd dx, dword [esi]
jne 0x40fce6
and byte [ebx + 0x6f], ah
and byte gs:[edx + 0x75], ch
and byte gs:[edx + 0x75], ch
jae 0x40fcf2
and byte [esi + 0x6f], ah
jb 0x40fcee
sub al, 0x20
popal
outsb dx, byte [esi]
and byte fs:[ecx + 0x6f], bh
outsd dx, dword [esi]
jne 0x40fcaf
popal
jb 0x40fcf7
and byte [ebx + 0x75], ah
jb 0x40fd09
outsb dx, byte gs:[esi]
je 0x40fd07
jns 0x40fcbd
js 0x40fd05
arpl word [ebp + 0x74], si
jne 0x40fd17
imul ebp, dword [esi + 0x67], 0x206e6920
je 0x40fd14
and byte gs:[eax + 0x61], dh
popal
jb 0x40fd17
outsb dx, byte [esi]
je 0x40fcd5
jo 0x40fd29
outsd dx, dword [esi]
arpl word [ebp + 0x73], sp
jae 0x40fcbd
add byte [eax], al
add byte [ecx + 0x6f], bl
pop ecx
outsd dx, dword [esi]
jne 0x40fd36
and byte [ebx + 0x6f], ah
and byte gs:[edx + 0x75], ch
jae 0x40fd42
and byte [esi + 0x6f], ah
jb 0x40fd3e
sub al, 0x20
sub al, 0x20
popal
outsb dx, byte [esi]
and byte fs:[ecx + 0x6f], bh
jne 0x40fcff
popal
jb 0x40fd47
and byte [ebx + 0x75], ah
jb 0x40fd59
jb 0x40fd4d
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
je 0x40fd57
jns 0x40fd0d
js 0x40fd55
js 0x40fd55
arpl word [ebp + 0x74], si
imul ebp, dword [esi + 0x67], 0x206e6920
je 0x40fd64
je 0x40fd5d
outsb dx, byte [esi]
and byte [bx + di + 0x6e], ch
and byte [eax + ebp*2 + 0x65], dh
and byte [ebx + 0x68], ah
imul ebp, dword [esi + 0x20], 0x20656874
arpl word [eax + 0x69], bp
insb byte es:[edi], dx
and byte fs:[eax + 0x72], dh
and byte gs:[ebx + 0x68], ah
push 0x20646c69
jo 0x40fd78
imul ebp, dword [esp + 0x20], 0x636f7270
jae 0x40fd7e
jb 0x40fd76
outsd dx, dword [esi]
arpl word [ebp + 0x73], sp
jae str.Internal_error
jae 0x40fd7e
add byte [ecx + 0x6e], cl
dec ecx
outsb dx, byte [esi]
dec ecx
outsb dx, byte [esi]
je 0x40fd75
jb 0x40fd80
popal
insb byte es:[edi], dx
and byte [ebp + 0x72], ah
jb 0x40fd88
jb 0x40fd1b
add byte [eax + ebp*2 + 0x65], dl
push esp
push 0x72702065
outsd dx, dword [esi]
arpl word [ebp + 0x73], sp
jae 0x40fd48
imul esi, dword [ebx + 0x20], 0x20746f6e
jae 0x40fd4b
outsb dx, byte [esi]
outsd dx, dword [esi]
je 0x40fd4f
jb 0x40fd96
arpl word [edi + 0x67], bp
outsb dx, byte [esi]
imul edi, dword [edx + 0x65], 0x2e64
jp 0x40fd9d
add byte cs:[eax], al
push esp
push 0x69672065
and byte gs:[edi + 0x69], ah
jbe 0x40fda9
outsb dx, byte [esi]
and byte [eax + 0x61], dh
popal
je 0x40fdb2
and byte [ebx + 0x6f], ah
arpl word [edi + 0x6e], bp
outsb dx, byte [esi]
je 0x40fdb1
popal
imul ebp, dword [esi + 0x65], 0x69772064
ja 0x40fdc0
insb byte es:[edi], dx
arpl word fs:[ecx + 0x72], sp
arpl word [ecx + 0x72], sp
and byte fs:[ebx + 0x68], ah
and byte [ebx + 0x68], ah
popal
jb 0x40fdc4
arpl word [ebp + 0x72], si
jae 0x40fd69
je 0x40fdcb
jb 0x40fddb
add byte [eax], al
add byte [eax], al
push esp
push 0x69672065
add byte [eax], al
add byte [eax + ebp*2 + 0x65], dl
push esp
push 0x69672065
jbe 0x40fdd9
outsb dx, byte [esi]
and byte [eax + 0x61], dh
jo 0x40fdd9
je 0x40fde2
and byte [ecx + 0x73], ch
and byte [ebp + 0x69], ch
insd dword es:[edi], dx
imul esi, dword [ebx + 0x66], 0x616d726f
jae 0x40fde8
outsd dx, dword [esi]
jb 0x40fdf2
popal
je 0x40fdfc
and byte fs:[edi + 0x72], ch
and byte [ebx + 0x6f], ah
outsb dx, byte [esi]
je str.The_given_path_is_relative
imul ebp, dword [esi + 0x65], 0x6e692064
and byte fs:[ecx + 0x6e], ch
jbe 0x40fdfd
insb byte es:[edi], dx
imul esp, dword [eax + 0x63], 0x61726168
arpl word [ebp + 0x72], si
jae 0x40fdab
add byte [eax + ebp*2 + 0x65], dl
push esp
push 0x69672065
imul esi, dword [esi + 0x65], 0x6170206e
jbe 0x40fe19
outsb dx, byte [esi]
and byte [eax + 0x61], dh
je 0x40fe22
and byte [edi + 0x61], dh
jae 0x40fddf
popal
bound ebp, qword [edi + 0x76]
and byte gs:[eax + ebp*2 + 0x65], dh
and byte [eax + ebp*2 + 0x65], dh
and byte [edx + 0x6f], dh
outsd dx, dword [esi]
je 0x40fdee
jo 0x40fe31
je 0x40fe3a
add byte [eax], al
push esp
push 0x69672065
jbe 0x40fe41
imul esi, dword [esi + 0x65], 0x6170206e
outsb dx, byte gs:[esi]
outsb dx, byte [esi]
and byte [eax + 0x61], dh
popal
je 0x40fe4a
and byte [ecx + 0x73], ch
and byte [ecx + 0x6e], ch
arpl word [edi + 0x6d], bp
jo 0x40fe59
je 0x40fe55
je 0x40fe55
add byte [eax], al
add byte [eax], al
push esp
push 0x69672065
jbe 0x40fe61
outsb dx, byte [esi]
and byte [eax + 0x61], dh
je 0x40fe6a
and byte [ecx + 0x73], ch
and byte [edx + 0x65], dh
insb byte es:[edi], dx
popal
je 0x40fe75
jbe 0x40fe73
add byte [eax], al
push esp
push 0x69672065
jbe 0x40fe7d
outsb dx, byte [esi]
and byte [eax + 0x61], dh
je 0x40fe86
and byte [ecx + 0x73], ch
and byte [ecx + 0x62], ah
jae 0x40fe95
popal
bound esi, qword [ebx + 0x6f]
insb byte es:[edi], dx
jne 0x40fe9d
add byte gs:[eax], al
push esp
push 0x70732065
arpl word gs:[ecx + 0x66], bp
jo 0x40fe98
arpl word [ecx + 0x66], bp
imul esp, dword [ebp + 0x64], 0x74656e20
ja 0x40feae
outsb dx, byte [esi]
je 0x40feb5
outsd dx, dword [esi]
jb 0x40feac
and byte [ebp + 0x61], ch
jae 0x40feb1
and byte [ecx + 0x73], ch
and byte [ecx + 0x6e], ch
jbe 0x40feaf
imul ebp, dword [esi + 0x76], 0x64696c61
add byte cs:[eax], al
push esp
insb byte es:[edi], dx
imul esp, dword [esi + ebp], 0x65685400
push esp
push 0x70732065
push 0x70732065
jo 0x40fec0
arpl word gs:[ecx + 0x66], bp
arpl word [ecx + 0x66], bp
imul esp, dword [ebp + 0x64], 0x20504920
popal
jb 0x40fecf
and byte [ecx + 0x50], cl
and byte [ecx + 0x64], ah
jb 0x40fecf
jae 0x40fedf
and byte [ecx + 0x73], ch
and byte [ecx + 0x6e], ch
jbe 0x40fed5
popal
insb byte es:[edi], dx
imul esp, dword [esi + ebp], 0x44000000
inc esp
push ebx
dec edi
and byte [edi + ebp*2 + 0x61], ch
and byte fs:[esi + 0x61], ah
popal
imul ebp, dword [ebp + 0x64], 0x206f4e00
dec esi
outsd dx, dword [esi]
and byte [ebx + 0x68], dh
popal
jb 0x40fef9
and byte fs:[ebp + 0x65], ch
and byte [ebp + 0x65], ch
insd dword es:[edi], dx
outsd dx, dword [esi]
jb 0x40ff15
and byte [ecx + 0x73], ch
and byte [ebx + 0x75], ah
jb 0x40ff16
imul esi, dword [ebx + 0x20], 0x72727563
outsb dx, byte gs:[esi]
je 0x40ff14
jns 0x40feca
popal
jbe 0x40ff0e
popal
imul ebp, dword [ecx + 0x62], 0x4e00656c
dec esi
insb byte es:[edi], dx
popal
bound ebp, qword [ebp]
dec esi
insb byte es:[edi], dx
add byte gs:[esi + 0x6f], cl
dec esi
outsd dx, dword [esi]
outsd dx, dword [esi]
and byte [eax + ebp*2 + 0x72], dh
popal
and byte fs:[ebx + 0x65], ch
jns 0x40fee2
jae 0x40ff38
jb 0x40ff3b
arpl word [ebp + esi*2 + 0x72], si
and byte gs:[edi + 0x61], dh
jae str.No_thread_was_provided_and_one_was_required.
and byte [eax + 0x72], dh
jo 0x40ff44
outsd dx, dword [esi]
jbe 0x40ff3e
and byte fs:[ecx + 0x6e], ah
and byte fs:[edi + 0x6e], ch
and byte gs:[edi + 0x61], dh
popal
jae 0x40ff05
jb 0x40ff4c
jno 0x40ff5e
imul esi, dword [edx + 0x65], 0x2e64
dec esi
outsd dx, dword [esi]
and byte [eax + ebp*2 + 0x72], dh
popal
and byte fs:[edi + 0x61], dh
and byte [edi + 0x61], dh
jae 0x40ff1e
jo 0x40ff72
outsd dx, dword [esi]
jbe 0x40ff6c
and byte fs:[ecx + 0x6e], ah
and byte fs:[ecx + 0x6e], ah
and byte fs:[edi + 0x6e], ch
and byte gs:[edi + 0x61], dh
and byte [edi + 0x61], dh
jae 0x40ff33
jb 0x40ff7a
jno 0x40ff8c
jno 0x40ff8c
jne 0x40ff81
imul esi, dword [edx + 0x65], 0x2e64
jb 0x40ff7f
add byte cs:[eax], al
add byte [eax], al
dec esi
outsd dx, dword [esi]
and byte [ebx + 0x6f], dh
arpl word [ebx + 0x65], bp
je 0x40ff4a
ja 0x40ff8d
jae 0x40ff4e
jo 0x40ffa2
outsd dx, dword [esi]
jbe 0x40ff9c
and byte fs:[ecx + 0x6e], ah
outsb dx, byte [esi]
and byte fs:[edi + 0x6e], ch
outsd dx, dword [esi]
outsb dx, byte [esi]
and byte gs:[edi + 0x61], dh
and byte [edi + 0x61], dh
jae 0x40ff63
jb 0x40ffaa
jno 0x40ffbc
jno 0x40ffbc
imul esi, dword [edx + 0x65], 0x2e64
add byte cs:[eax], al
add byte [eax], al
add byte [eax], al
dec esi
outsd dx, dword [esi]
and byte [eax + 0x6f], dh
insb byte es:[edi], dx
insb byte es:[edi], dx
and byte [ebx + 0x74], dh
jb 0x40ffd1
arpl word [ebp + esi*2 + 0x72], si
jne 0x40ffd2
and byte gs:[edi + 0x61], dh
popal
jae 0x40ff86
jo 0x40ffda
outsd dx, dword [esi]
jbe 0x40ffd4
and byte fs:[ecx + 0x6e], ah
and byte fs:[ecx + 0x6e], ah
and byte fs:[edi + 0x6e], ch
and byte [edi + 0x6e], ch
and byte gs:[edi + 0x61], dh
jae 0x40ff9b
and byte [edx + 0x65], dh
jb 0x40ffe2
jno 0x40fff4
imul esi, dword [edx + 0x65], 0x2e64
add byte cs:[eax], al
add byte [eax], al
dec esi
outsd dx, dword [esi]
and byte [edi + ebp*2 + 0x63], ch
imul esp, dword [eax], 0x77
popal
outsd dx, dword [esi]
arpl word [ebx + 0x20], bp
ja 0x40fff3
jae str.No_directory_was_provided_and_one_was_required.
jo 0x410008
outsd dx, dword [esi]
jbe 0x410002
and byte fs:[ecx + 0x6e], ah
and byte fs:[ecx + 0x6e], ah
and byte [ecx + 0x6e], ah
and byte fs:[edi + 0x6e], ch
outsb dx, byte [esi]
and byte gs:[edi + 0x61], dh
jae 0x40ffc9
jb str.No_process_was_provided_and_one_was_required.
jno 0x410022
jno 0x410022
imul esi, dword [edx + 0x65], 0x2e64
dec esi
outsd dx, dword [esi]
and byte [ecx + ebp*2 + 0x72], ah
arpl word gs:[edi + ebp*2 + 0x72], si
jns 0x40ffe1
je 0x41002d
jb 0x410039
and byte [edi + 0x61], dh
ja 0x410024
jae 0x40ffe5
jo 0x410039
outsd dx, dword [esi]
jbe 0x410033
imul esp, dword [ebp + 0x64], 0x646e6120
and byte fs:[ecx + 0x6e], ah
and byte fs:[edi + 0x6e], ch
and byte [edi + 0x6e], ch
outsd dx, dword [esi]
outsb dx, byte [esi]
and byte gs:[edi + 0x61], dh
jae 0x40fffa
jb 0x410041
jno 0x410053
imul esi, dword [edx + 0x65], 0x4e002e64
dec esi
add byte cs:[esi + 0x6f], cl
dec esi
outsd dx, dword [esi]
add byte cs:[esi + 0x6f], cl
dec esi
outsd dx, dword [esi]
outsd dx, dword [esi]
and byte [ecx + ebp*2 + 0x6d], dh
and byte gs:[edi + 0x61], dh
jae str.No_process_was_provided_and_one_was_required.
jo 0x410064
outsd dx, dword [esi]
jbe 0x41005e
imul esp, dword [ebp + 0x64], 0x646e6120
and byte [edi + 0x6e], ch
and byte fs:[ecx + 0x6e], ah
outsb dx, byte [esi]
and byte fs:[edi + 0x6e], ch
and byte gs:[edi + 0x61], dh
popal
jae 0x410025
jb 0x41006c
jno 0x41007e
jne 0x410073
imul esi, dword [edx + 0x65], 0x2e64
jb 0x410071
add byte cs:[eax], al
dec esi
outsd dx, dword [esi]
and byte [eax + 0x72], dh
outsd dx, dword [esi]
arpl word [ebp + 0x73], sp
jae 0x41003b
ja 0x41007e
jae 0x41003f
jo 0x410093
outsd dx, dword [esi]
jbe 0x41008d
and byte fs:[ecx + 0x6e], ah
and byte fs:[ecx + 0x6e], ah
and byte fs:[edi + 0x6e], ch
outsb dx, byte [esi]
and byte gs:[edi + 0x61], dh
jae 0x410054
and byte [edx + 0x65], dh
jb 0x41009b
jno 0x4100ad
imul esi, dword [edx + 0x65], 0x2e64
jb 0x4100a0
add byte cs:[eax], al
add byte [ecx + 0x6e], al
inc ecx
outsb dx, byte [esi]
outsb dx, byte [esi]
and byte [ecx + 0x6e], ch
jbe str.Unrecognized_Win32_error_code__d
insb byte es:[edi], dx
imul esp, dword [eax + 0x73], 0x656b636f
je 0x410072
ja 0x4100b5
popal
jae 0x410076
jb 0x4100bd
je 0x4100cf
jb 0x4100ca
add byte fs:[eax], al
add byte [eax], al
inc ecx
outsb dx, byte [esi]
and byte [ecx + 0x6e], ch
outsb dx, byte [esi]
jbe 0x4100c8
insb byte es:[edi], dx
imul esp, dword [eax + 0x64], 0x20657461
push 0x62207361
outsb dx, byte gs:[esi]
popal
je 0x4100d4
and byte [eax + 0x61], ch
popal
jae 0x410094
and byte [edx + 0x65], ah
bound esp, qword [ebp + 0x65]
outsb dx, byte [esi]
outsb dx, byte gs:[esi]
and byte [eax + 0x72], dh
outsd dx, dword [esi]
jbe 0x4100e7
add byte fs:[eax], al
add byte [ecx + 0x20], al
inc ecx
and byte [esi + 0x65], ch
ja 0x4100aa
jo 0x4100fb
outsd dx, dword [esi]
insb byte es:[edi], dx
and byte [ebx + 0x6f], ah
jne 0x4100ff
and byte fs:[esi + 0x6f], ch
and byte [esi + 0x6f], ch
je 0x4100b9
bound esp, qword [ebp + 0x20]
arpl word [edx + 0x65], si
popal
and byte [ebx + 0x72], ah
popal
je 0x410107
add byte cs:[eax], al
add byte [eax], al
push ebp
outsb dx, byte [esi]
jb 0x410111
arpl word [edi + 0x67], bp
outsb dx, byte [esi]
outsd dx, dword [esi]
outsb dx, byte [si]
imul edi, dword [edx + 0x65], 0x69572064
outsb dx, byte [esi]
xor esi, dword [edx]
and byte [ebp + 0x72], ah
push edi
imul ebp, dword [esi + 0x33], 0x72652032
xor ah, byte [eax]
jb 0x410130
jb 0x41012e
outsd dx, dword [esi]
jb 0x4100e1
arpl word [edi + 0x64], bp
and byte gs:[0x64], ah
add byte [eax + eax + 0x5c], bl
pop esp
invalid
pop esp
add byte [eax], al
add byte [eax], al
pop esp
add byte [eax + eax + 0x3f], bl
add byte [edi], bh
add byte [eax + eax + 0x55], bl
push ebp
add byte [esi], cl
inc ebx
add byte [eax + eax], bl
add byte [eax], al
add byte [eax + eax + 0x5c], bl
pop esp
add byte [eax + eax + 0x3f], bl
add byte [eax + eax + 0x3f], bl
add byte [eax + eax], bl
add byte [eax], al
add byte [eax], al
add byte [ebx + 0x61], al
inc ebx
popal
outsb dx, byte [esi]
arpl word [ebp + 0x6c], sp
dec ecx
outsd dx, dword [esi]
add byte [eax], al
add byte [eax], al
inc edi
je 0x41013f
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x410172
jb 0x410166
jae 0x410176
jae 0x410176
inc esi
imul ebp, dword [ebp + 0x53], 0x41657a69
add byte [eax], al
inc edi
insb byte es:[edi], dx
push ebx
imul edi, dword [edx + 0x65], 0x47000041
inc edi
je 0x410157
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x41018a
jae 0x41018e
inc esi
imul ebp, dword [ebp + 0x53], 0x57657a69
add byte [eax], al
pop edx
ja 0x41017c
jne 0x410192
jb 0x4101a8
jns 0x410179
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
jb 0x4101a2
popal
je 0x4101a1
outsd dx, dword [esi]
outsb dx, byte [esi]
inc esi
imul ebp, dword [ebp], 0x74654700
inc edi
je 0x410197
add byte [edi + 0x65], al
inc edi
je 0x410197
arpl word gs:[ebp + 0x72], si
imul esi, dword [ecx + edi*2 + 0x49], 0x6f666e
inc edi
je 0x4101a2
popal
insd dword es:[edi], dx
push ebx
push ebx
arpl word gs:[ebp + 0x72], si
imul esi, dword [ecx + edi*2 + 0x49], 0x416f666e
add byte [eax], al
add byte [edi + 0x65], al
inc edi
je 0x4101ba
add byte [eax], al
inc edi
je 0x4101ba
popal
insd dword es:[edi], dx
push ebx
arpl word gs:[ebp + 0x72], si
arpl word [ebp + 0x72], si
imul esi, dword [ecx + edi*2 + 0x49], 0x576f666e
je 0x4101f1
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
push edi
add byte [eax], al
add byte [ebp], dl
push ebp
add byte [esi], cl
inc ebx
add byte [eax + eax], bl
add byte [eax], al
add byte [edi + 0x65], al
inc edi
invalid
add byte [eax], al
inc edi
je 0x4101d5
je 0x4101d5
arpl word gs:[ecx + ebp*2 + 0x76], si
arpl word gs:[ecx + ebp*2 + 0x76], si
push edx
imul esp, dword [edi + 0x68], 0x72467374
outsd dx, dword [esi]
insd dword es:[edi], dx
inc ecx
arpl word [edi + edx*2], bp
add byte [eax], al
add byte [eax], al
add bh, bh
invalid
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add bh, bh
invalid