Function at 0x7fde48
Capabilities:
Execute anti-debugging instructions
Parse pe header

Disassembly:
add byte [eax], 0x91
xchg ecx, eax
mov ecx, dword [ebp - 4]
push eax
xchg ecx, eax
pop ecx
add eax, 1
push ebp
mov ebp, esp
leave
xchg dword [ebp - 4], ecx
mov ecx, eax
push dword [ebp - 4]
xchg dword [ebp - 4], ecx
pop ecx
jmp 0x1191b98
clc
add byte [ecx - 0x75], al
sar byte [ebx], cl
iretd
inc ecx
mov edx, edx
cmp ecx, edi
push eax
mov eax, dword [esp + 0xc]
pop eax
jb 0x7d1d04
xchg edx, eax
mov edx, dword [esi + 4]
push eax
xchg edx, eax
pop edx
jmp 0x1186acc
add byte [eax], al
movzx eax, word [esi + ecx*2 + 8]
lea edi, [edi]
xchg edx, ecx
mov ecx, eax
push edx
xchg edx, ecx
pop ecx
shr edx, 0xc
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x4b]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
cmp edx, 3
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x30]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
je 0xe13994
cmp edx, 0xa
pushfd
add ebp, 0x73
popfd
lea ebp, [ebp - 0x73]
jne 0xe14af4
jmp 0x7d5f6c
pushfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0xb]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg ecx, edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edx
mov edx, dword [esp]
rdtsc
lea eax, [eax]
and eax, 1
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x7c]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg ecx, edx
xchg dword [esp], ecx
xchg ecx, edx
lea esp, [esp + 4]
xchg edx, eax
xchg dword [esp], edx
xchg edx, eax
lea esp, [esp + 4]
je 0x1188f90
jne 0x1186248
jmp 0x1188f8e
rol dword [eax], 0xf
mov bh, 0x44
dec esi
or byte [ebx + eax*4 - 0x7262b53b], bl
insd dword es:[edi], dx
mov dh, 0x87
fimul dword [ebx - 0x2578ad28]
movzx eax, word [esi + ecx*2 + 8]
pushfd
add ebp, 0x4a
popfd
lea ebp, [ebp - 0x4a]
xchg edx, ebx
mov ebx, eax
push edx
xchg edx, ebx
pop ebx
shr edx, 0xc
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x58]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
cmp edx, 3
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x58]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
je 0x7d5f6c
cmp edx, 0xa
mov esi, esi
jne 0x7d0238
jmp 0x7d5f6c
push edx
add byte [edi - 0x3827406], al
xchg edx, edi
mov edi, dword [ebp - 4]
push edx
xchg edx, edi
pop edi
and eax, 0xfff
mov esi, esi
add eax, dword [esi]
pushfd
add ebp, 0x73
popfd
lea ebp, [ebp - 0x73]
add dword [eax + ebx], edx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x5f]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
jmp 0x7d0238
popfd
push eax
mov eax, ebx
pop eax
je 0xe1111c
jne 0xe1111c
jmp 0xe1111a
add byte [eax], al
inc ecx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x22]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
cmp ecx, edi
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x3c]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
jb 0x7d1d04
xchg ecx, eax
mov ecx, dword [esi + 4]
push eax
xchg ecx, eax
pop ecx
jmp 0x1186acc
add byte [eax], al
lea edi, [eax - 8]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x61]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
mov eax, 0x5084295f
push ecx
xchg ecx, eax
pop eax
pushfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x5f]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
push 0x5084295f
push esi
mov esi, dword [esp + 4]
xor ecx, esi
mov esi, dword [esp]
lea esp, [esp + 8]
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x58]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
shr edi, 1
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x71]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
je 0x1186acc
mov edi, edi
push ebp
mov ebp, esp
leave
jmp 0x7d1d04
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x7a]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
je 0x7d5480
jne 0x7d5480
jmp 0x7d547e
cmp eax, 0x487969f
and al, 0x96
xchg esi, eax
xchg dword [esp], eax
xchg esi, eax
lea esp, [esp + 4]
cmp edi, 8
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 1]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
jle 0x118ad44
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, dword [ecx + 0x5a]
xchg dword [esp], eax
xchg edx, eax
mov edx, dword [ecx + 0x56]
push eax
xchg edx, eax
pop edx
add eax, ebx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x6c]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
lea eax, [ecx + 0x72]
push ebp
mov ebp, esp
leave
xchg ebx, eax
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, eax
mov eax, dword [esp]
pushfd
lea esi, [esi]
call 0x7dc1cc
push edi
mov edi, dword [esp + 5]
pop edi
add dword [esp], 0x9ab13d
xchg dword [esp], eax
pushfd
add ebp, 0x47
popfd
lea ebp, [ebp - 0x47]
xchg dword [esp + 4], eax
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x2a]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], eax
pushfd
add ebp, 0x31
popfd
lea ebp, [ebp - 0x31]
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x63]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
jmp fcn.00e14ec4
pushfd
pushfd
add ebp, 1
popfd
lea ebp, [ebp - 1]
xchg ebx, eax
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, eax
mov eax, dword [esp]
xchg ecx, edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edx
mov edx, dword [esp]
rdtsc
pushfd
add ebp, 0x5d
popfd
lea ebp, [ebp - 0x5d]
and eax, 1
pushfd
add ebp, 0x22
popfd
lea ebp, [ebp - 0x22]
xchg ebx, edx
xchg dword [esp], ebx
xchg ebx, edx
lea esp, [esp + 4]
xchg ebx, eax
xchg dword [esp], ebx
xchg ebx, eax
lea esp, [esp + 4]
je 0xe19c98
jne 0x7dbd54
jmp 0xe19c96
or edi, dword [esi + edx*4 + 0x50fc758b]
xchg esi, eax
mov esi, dword [ebp - 4]
push eax
xchg esi, eax
pop esi
add eax, 1
mov eax, eax
xchg dword [ebp - 4], edi
mov edi, eax
push dword [ebp - 4]
xchg dword [ebp - 4], edi
pop edi
jmp 0x1191b98
pushfd
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x7a]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
mov eax, dword [esp]
xchg edi, edx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, edx
mov edx, dword [esp]
rdtsc
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x5d]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add al, 0x8b
or al, 0x24
lea esp, [esp + 4]
and al, 4
and eax, 1
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x33]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
xchg dword [esp], eax
xchg edx, eax
lea esp, [esp + 4]
xchg edx, eax
xchg dword [esp], edx
xchg edx, eax
lea esp, [esp + 4]
je 0x7dd6e8
jne 0xe0901c
jmp 0x7dd6e6
call fcn.0118aa54
cmpsd dword [esi], dword es:[edi]
scasb al, byte es:[edi]
insb byte es:[edi], dx
mov dl, 0x5d
pop eax
insb byte es:[edi], dx
mov ah, 0x50
pop edx
xor al, 0xcc
jg 0x7dd304
and al, 0x4e
xchg ebp, eax
push ebx
js 0x7dd30a
push ebx
mov ebx, eax
pop ebx
je 0xe16fcc
jne 0xe16fcc
jmp 0xe16fca
add byte [eax], al
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x58]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
je 0x7cfab4
jne 0x7cfab4
jmp 0x7cfab2
inc esi
in eax, dx
xchg edx, edi
mov edi, dword [ebp - 4]
push edx
xchg edx, edi
pop edi
and eax, 0xfff
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x31]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
add eax, dword [esi]
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x57]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
add dword [eax + ebx], edx
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x4d]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
jmp 0x7d0238
jmp 0x7dd354
in al, dx
add dword [edi + 0x241487f2], 0x648df287
and al, 4
xchg edx, esi
xchg dword [esp], edx
xchg edx, esi
lea esp, [esp + 4]
cmp edi, 8
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x19]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
jle 0x118ad44
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, dword [ecx + 0x5a]
xchg dword [esp], esi
xchg edx, eax
mov edx, dword [ecx + 0x56]
push eax
xchg edx, eax
pop edx
add eax, ebx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x7e]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
lea eax, [ecx + 0x72]
lea eax, [eax]
xchg esi, eax
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, eax
mov eax, dword [esp]
pushfd
pushfd
add ebp, 0x5a
popfd
lea ebp, [ebp - 0x5a]
call 0x7febee
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x1a]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0x98871b
xchg dword [esp], eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x65]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x66]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], eax
push eax
mov eax, ecx
pop eax
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x7e]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
jmp fcn.00e14ec4
mov esi, 0xf8788dd4
lea edi, [eax - 8]
lea edi, [edi]
xchg ecx, edx
mov edx, 0x6228e645
push ecx
xchg ecx, edx
pop edx
pushfd
pushfd
add ebp, 0x47
popfd
lea ebp, [ebp - 0x47]
push 0x6228e645
push edi
mov edi, dword [esp + 4]
xor ecx, edi
mov edi, dword [esp]
lea esp, [esp + 8]
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x1a]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
shr edi, 1
pushfd
add ebp, 0xe
popfd
lea ebp, [ebp - 0xe]
je 0x7d52e0
mov edi, edi
push ebp
mov ebp, esp
leave
jmp 0x7dc75c
pushfd
mov esi, esi
xchg ebx, eax
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, eax
mov eax, dword [esp]
xchg edi, edx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, edx
mov edx, dword [esp]
rdtsc
pushfd
add ebp, 0x36
popfd
lea ebp, [ebp - 0x36]
and eax, 1
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x7c]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ebx, edx
xchg dword [esp], ebx
xchg ebx, edx
lea esp, [esp + 4]
xchg esi, eax
xchg dword [esp], esi
xchg esi, eax
lea esp, [esp + 4]
je 0x11929fc
jne 0x11d3e68
jmp 0x11929fa
popfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x51]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
je 0x7dca80
jne 0x7dca80
jmp 0x7dca7e
xchg ecx, eax
mov ecx, dword [edx + ebx + 4]
push eax
xchg ecx, eax
pop ecx
xchg edi, esi
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, esi
mov esi, dword [esp]
lea esi, [edx + ebx]
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x71]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
test eax, eax
mov eax, eax
je 0x11872ed
jmp 0x118ff78
xor al, byte [eax]
popfd
push ebp
mov ebp, esp
leave
je 0x7d5f6c
jne 0x7d5f6c
jmp 0x7d5f6a
add byte [eax], al
push 0x20
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x6e]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
lea ecx, [ebp - 0x24]
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x17]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
mov ecx, dword [esp]
lea edx, [ebp - 0x12c]
lea ecx, [ecx]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
pushfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 7]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
call 0xe1118e
pushfd
add ebp, 0x17
popfd
lea ebp, [ebp - 0x17]
add dword [esp], 0x1191
xchg dword [esp], eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x6b]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], eax
mov ecx, ecx
xchg dword [esp], eax
pushfd
add ebp, 0x72
popfd
lea ebp, [ebp - 0x72]
popfd
pushfd
add ebp, 0x49
popfd
lea ebp, [ebp - 0x49]
jmp fcn.00e1bb4c
add byte [eax], al
popfd
push ecx
mov ecx, eax
pop ecx
je 0x1192270
jne 0x1192270
jmp 0x119226e
pushfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x1c]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg edi, edx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, edx
mov edx, dword [esp]
rdtsc
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x51]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
and eax, 1
lea edx, [edx]
xchg ecx, edx
xchg dword [esp], ecx
xchg ecx, edx
lea esp, [esp + 4]
xchg edi, eax
xchg dword [esp], edi
xchg edi, eax
lea esp, [esp + 4]
je 0xe0fb18
jne 0x1194e70
jmp 0xe0fb16
pushfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x47]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, eax
mov eax, dword [esp]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
rdtsc
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x36]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
and eax, 1
push ebp
mov ebp, esp
leave
xchg ecx, edx
xchg dword [esp], ecx
xchg ecx, edx
lea esp, [esp + 4]
xchg ecx, eax
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp + 4]
je 0x118a60c
jne 0xe1612c
jmp 0x118a60a
popfd
lea ebx, [ebx]
je 0x7d9ce4
jne 0x7d9ce4
jmp 0x7d9ce2
and byte [eax], al
xchg ebx, eax
mov eax, dword [ebp + 0xc]
push ebx
xchg ebx, eax
pop eax
xchg ecx, eax
mov eax, dword [ebx + 0x3c]
push ecx
xchg ecx, eax
pop eax
xchg edx, eax
mov eax, dword [ecx + ebx + 0xa0]
push edx
xchg edx, eax
pop eax
test edx, edx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x59]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
je 0x118ad44
xchg esi, eax
mov esi, ebx
push eax
xchg esi, eax
pop esi
push dword [ecx + ebx + 0x34]
cmp eax, dword [esp]
pushfd
not dword [esp + 4]
inc dword [esp + 4]
add eax, dword [esp + 4]
popfd
lea esp, [esp + 4]
xchg dword [ebp - 4], ecx
mov ecx, eax
push dword [ebp - 4]
xchg dword [ebp - 4], ecx
pop ecx
jmp 0xe0d030
add byte [eax], al
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x74]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
je 0x7d1d04
jne 0x7d1d04
jmp 0x7d1d02
popfd
lea edx, [edx]
je 0x118a18c
jne 0x118a18c
jmp 0x118a18a
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0xf]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
je 0x7d9db4
jne 0x7d9db4
jmp 0x7d9db2
ret
add esi, eax
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x60]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg edi, eax
mov edi, dword [esi + 4]
push eax
xchg edi, eax
pop edi
test eax, eax
push ebp
mov ebp, esp
leave
jne 0x802140
xchg ecx, edx
mov edx, dword [ebp + 8]
push ecx
xchg ecx, edx
pop edx
xchg edi, eax
mov eax, dword [ecx]
push edi
xchg edi, eax
pop eax
jmp 0xe08ab0
mov ecx, dword [ebp + 8]
call 0x7d6224
mov dh, 0x46
scasb al, byte es:[edi]
aas
pop ebx
f2xm1
xor ch, byte [edi - 0x26c56e4a]
or eax, dword [ebp + ebx*2 + 0x6809d461]
add esp, 0x10
call fcn.00779b34
fmul st(7), st(0)
push cs
add byte [ebp + 0x24448b50], bl
add al, 0x8d
inc eax
outsb dx, byte [esi]
popfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x6e]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
je 0x1186acc
jne 0x1186acc
jmp 0x1186aca
in eax, 0
add esi, eax
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x13]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
mov ecx, dword [esi + 4]
push eax
xchg ecx, eax
pop ecx
test eax, eax
push ecx
mov ecx, dword [esp]
pop ecx
jne 0x802140
xchg ecx, edx
mov edx, dword [ebp + 8]
push ecx
xchg ecx, edx
pop edx
xchg edi, edx
mov edx, dword [ecx]
push edi
xchg edi, edx
pop edx
jmp 0x7feb5c
aam 0
popfd
push esi
mov esi, eax
pop esi
je 0x802140
jne 0x802140
jmp 0x80213e
xor byte [eax], al
popfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x33]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
je 0x7d0238
jne 0x7d0238
jmp 0x7d0236
pushfd
mov ecx, ecx
xchg esi, eax
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, eax
mov eax, dword [esp]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
rdtsc
pushfd
add ebp, 0x51
popfd
lea ebp, [ebp - 0x51]
and eax, 1
pushfd
add ebp, 0x66
popfd
lea ebp, [ebp - 0x66]
xchg ecx, edx
xchg dword [esp], ecx
xchg ecx, edx
lea esp, [esp + 4]
xchg edi, eax
xchg dword [esp], edi
xchg edi, eax
lea esp, [esp + 4]
je 0x118a384
jne 0x1186350
jmp 0x118a382
cmp dword [ebp - 4], 0x20
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x25]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
jge 0x11d3c0c
xchg ecx, esi
mov esi, dword [ebp - 4]
push ecx
xchg ecx, esi
pop esi
movzx edx, byte [ecx + 0x11d835c]
push 0x3c
push ecx
mov ecx, dword [esp + 4]
xor edx, ecx
mov ecx, dword [esp]
lea esp, [esp + 8]
push 0xc3
cmp edx, dword [esp]
pushfd
not dword [esp + 4]
inc dword [esp + 4]
add edx, dword [esp + 4]
popfd
lea esp, [esp + 4]
xchg ecx, eax
mov ecx, dword [ebp - 4]
push eax
xchg ecx, eax
pop ecx
mov byte [ebp + eax - 0x24], dl
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x28]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
jmp 0x7dd2c0
add byte [eax], al
push 0x20
mov ecx, ecx
lea ecx, [ebp - 0x24]
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x31]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
mov ecx, dword [esp]
lea edx, [ebp - 0x12c]
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 2]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
pushfd
lea esi, [esi]
call 0x11922cd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x47]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0xffc80052
xchg dword [esp], eax
lea eax, [eax]
xchg dword [esp + 4], eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x5d]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], eax
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x45]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
popfd
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x56]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
jmp fcn.00e1bb4c
add byte [eax], al
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x20]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
je 0x7feb5c
jne 0x7feb5c
jmp 0x7feb5a
popfd
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 9]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
je 0x7fd584
jne 0x7fd584
jmp 0x7fd582
pushfd
mov ebx, ebx
xchg ebx, eax
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, eax
mov eax, dword [esp]
xchg ecx, edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edx
mov edx, dword [esp]
rdtsc
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x7a]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
and eax, 1
push ebp
mov ebp, esp
leave
xchg ecx, edx
xchg dword [esp], ecx
xchg ecx, edx
lea esp, [esp + 4]
xchg ecx, eax
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp + 4]
je 0xe1349c
jne 0x7d6c18
jmp 0xe1349a
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x2f]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
je 0x7dc140
jne 0x7dc140
jmp 0x7dc13e