Function at 0x4a21ea
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10c
push ebx
push esi
push edi
mov dword [ebp - 0xfc], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x1c], 4
mov eax, dword [ebp + 8]
mov dword [0x470268], eax
cmp dword [0x4753ec], 0
je 0x49db42
jmp 0x4a215a
mov ecx, dword [0x4753ec]
add ecx, 1
mov dword [0x4753ec], ecx
nop
cmp eax, ecx
ror eax, 0x17
rol eax, 0x17
add edx, 0
jle 0x49db70
lea ecx, [ecx + 0x5a9d]
lea ecx, [ecx - 0x5a9d]
xchg edx, edx
jg 0x49db70
add eax, 0x6808ec83
mov edx, 0x64004a29
push dword [0]
sub esp, 8
push 0x4a29ba
push dword fs:[0]
mov dword fs:[0], esp
xor ecx, edx
xor ecx, edx
or eax, eax
call 0x49db91
add esp, 4
shr edx, 0
jns 0x49dbad
nop
lea edx, [edx + 0x27f5]
lea edx, [edx - 0x27f5]
lea ecx, [ecx]
jg 0x49dbaa
js 0x49dbad
add eax, 0x985ce8
add cl, al
invalid
call fcn.004a740e
rol esi, 0x16
ror esi, 0x16
js 0x49dbc5
ja 0x49dbbc
jp 0x49dbbe
xchg ecx, ecx
jp 0x49dbc2
jns 0x49dbc5
add eax, 0x3dbc05c7
inc edi
add byte [ecx], al
add byte [eax], al
add byte [ebx], cl
fild dword [edi - 0x72f98925]
adc dh, byte [edi + 2]
mov dword [0x473dbc], 1
or ebx, ebx
xchg ebx, ebx
jbe 0x49dbdb
lea edx, [edx]
ja 0x49dbdb
mov edx, 0x60f0ba4e
inc esi
add byte [ecx + 0x466000ea], al
add byte [ecx + 0x473dc415], cl
add byte [eax + 0x42b8898d], dl
add byte [eax], al
mov edx, 0x4660f0
sub edx, section.0000009
mov dword [0x473dc4], edx
nop
lea ecx, [ecx + 0x42b8]
lea ecx, [ecx - 0x42b8]
sub esi, 0
lea edi, [edi]
ja 0x49dc08
mov eax, eax
xchg ebx, eax
xchg ebx, eax
jbe 0x49dc08
mov ecx, 0x3dc4a1f6
inc edi
add byte [0x80000007], ah
mov eax, dword [0x473dc4]
and eax, 0x80000007
jns 0x49dc19
dec eax
or eax, 0xfffffff8
inc eax
mov ecx, dword [0x473dc4]
sub ecx, eax
mov dword [0x473dc4], ecx
rol ecx, 0x16
rol ecx, 0xa
jne 0x49dc35
jmp 0x49dc31
je 0x49dc35
mov eax, 0x6d4fe884
invalid
call 0x494989
je 0x49dc3c
jne 0x49dc3e
je 0x49dc49
xchg esi, ecx
xchg esi, ecx
xchg ebx, ebx
jne 0x49dc49
mov ebp, 0x473b0868
add bh, bh
adc eax, sym.imp.KERNEL32.dll_LoadLibraryA
push 0x473b08
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x473b14
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x473b20
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x473b30
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x473b3c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x473b48
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x473b54
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x473b64
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x473b74
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x473b84
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x473b90
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x473ba0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test edi, 0x3fc0
test esi, 0x470a
sub esp, 0
lea esp, [esp]
jg 0x49dcee
jno 0x49dce3
xchg ecx, ebx
xchg ecx, ebx
xchg edx, edx
jle 0x49dceb
jle 0x49dcee
xor eax, 0xfe6188e8
inc ecx
enter 0xffffffffffffc10d, 0xffffffffffffffc8
adc eax, ecx
ret 0xc111
call 0x483e7b
ror eax, 0xd
ror eax, 0x13
rol edx, 0x11
ror edx, 0x11
add eax, 0
js 0x49dd19
pushf
call 0x49dd0b
lea esp, [esp + 4]
cmc
popf
jne 0x49dd14
lea edi, [edi]
jns 0x49dd19
call 0x18fdf2a8
inc edi
add byte [ecx + 0x47016815], cl
add cl, al
in al, 0
mov edx, dword [0x4718b4]
mov dword [0x470168], edx
shl esp, 0
jl 0x49dd37
jb 0x49dd2c
jb 0x49dd2e
lea esp, [esp]
js 0x49dd33
jge 0x49dd37
add eax, 0x18b8a18f
inc edi
add byte [ebx + 0x46f9a4], ah
mov eax, dword [0x4718b8]
mov dword [0x46f9a4], eax
jbe 0x49dd43
rol ecx, 0
xchg edi, edx
xchg edi, edx
jg 0x49dd62
pushf
xor ecx, 0
ror ebx, 0x1f
rol ebx, 0x1f
ja 0x49dd59
jo 0x49dd5b
popf
lea esi, [esi]
jle 0x49dd62
mov ebp, 0x18bc0d8b
inc edi
add byte [ecx + 0x46f9a80d], cl
add byte [ebx], bh
pop esp
and al, 0x10
mov ecx, dword [0x4718bc]
mov dword [0x46f9a8], ecx
cmp ebx, dword [esp + 0x10]
cmp edi, esi
shr ebx, 0
jge 0x49dd8c
lea ebx, [ebx + 0x27cf]
lea ebx, [ebx - 0x27cf]
jl 0x49dd87
jl 0x49dd89
jl 0x49dd8c
mov esp, 0xc068406a
sbb byte [edi], al
push 0x40
push 0x4718c0
push 0x46f9ac
call fcn.0047d9d5
add esp, 0xc
lea ecx, [ecx + 0x24a1]
lea ecx, [ecx - 0x24a1]
cmp eax, ecx
jae 0x49ddbc
jg 0x49ddb2
jo 0x49ddb4
jo 0x49ddb6
mov edi, edi
jb 0x49ddbc
xor dword [ebx], 0x1900158b
inc edi
add byte [ecx + 0x47021815], cl
add byte [ebx - 0x1b7c001c], al
invalid
mov edx, dword [0x471900]
mov dword [0x470218], edx
and esp, 0xffffffff
and esp, 0xffffffff
jg 0x49ddd7
mov esi, esi
nop
jle 0x49ddd7
add eax, 0x1904a1f0
inc edi
add byte [ebx + 0x47021c], ah
mov eax, dword [0x471904]
mov dword [0x47021c], eax
inc ebx
dec ebx
rol esp, 0
jne 0x49de08
pushf
lea esi, [esi + 0x720c]
lea esi, [esi - 0x720c]
xchg edx, eax
xchg edx, eax
cmp ecx, dword [esp]
xchg esi, esi
popf
je 0x49de01
jmp 0x49de03
xchg ebx, eax
xchg ebx, eax
je 0x49de08
ljmp 0x47:0x19080d8b
mov ecx, dword [0x471908]
mov dword [0x470220], ecx
add eax, dword [esp]
sub eax, dword [esp]
and edi, 0xffffffff
add ebx, 0
ror esp, 0
jg 0x49de35
pushf
jmp 0x49de29
js 0x49de2b
shr eax, 0
popf
jl 0x49de32
jle 0x49de35
add eax, 0x190c158b
inc edi
add byte [ecx + 0x47022415], cl
add byte [ecx + 0x471f64], ah
mov edx, dword [0x47190c]
mov dword [0x470224], edx
mov eax, dword [0x471f64]
mov dword [0x470244], eax
mov ecx, dword [0x471f68]
mov dword [0x470248], ecx
mov edx, dword [0x46a7a0]
mov dword [0x47024c], edx
mov eax, dword [0x46a7a4]
mov dword [0x470250], eax
cmp edx, dword [esp]
jg 0x49de72
std
cld
test dword [esp + 8], ecx
jp 0x49de8a
pushf
jnp 0x49de7e
xchg esi, eax
xchg esi, eax
popf
js 0x49de84
nop
lea ebx, [ebx]
jnp 0x49de8a
ljmp 0xa3ff:0xff6569e8
call 0x4943f8
mov dword [0x4753c8], eax
push 0x94
push 0
push 0x46f9fc
call fcn.0048801b
add esp, 0xc
or ecx, 0
nop
call 0x49deb1
add esp, 4
jbe 0x49deb6
jle 0x49dec1
mov edx, edx
jg 0x49debc
je 0x49debe
jg 0x49dec1
mov ecx, 0xf9fc05c7
inc esi
add byte [eax + eax + 0x443b0000], dl
and al, 0xc
mov dword [0x46f9fc], 0x94
cmp eax, dword [esp + 0xc]
lea edx, [edx + 0x288c]
sub edx, 0x288c
lea esi, [esi]
jae 0x49def6
lea ecx, [ecx + 0x64c0]
lea ecx, [ecx - 0x64c0]
xchg ebx, edi
xchg ebx, edi
jns 0x49def1
mov eax, eax
jb 0x49def6
jmp 0x4743db62
push 0x46f9fc
call 0x49c4c1
jmp 0x49df02
xor esi, dword [esp + 4]
xor esi, dword [esp + 4]
jne 0x49df11
jmp 0x49df0e
je 0x49df11
mov ecx, 0x9c68
add byte [edx], ch
push 0x9c
push 0
push 0x46fba4
call fcn.0048801b
add esp, 0xc
mov esp, esp
jae 0x49df29
add edi, 0
jge 0x49df37
jg 0x49df30
xchg esi, ecx
xchg esi, ecx
jl 0x49df37
lcall 0x46, 0xfba405c7
pushfd
add byte [eax], al
add cl, al
out 0, al
mov dword [0x46fba4], 0x9c
shl esi, 0
ror eax, 0x1f
ror eax, 1
sub edx, 0
je 0x49df5b
pushf
neg eax
neg eax
popf
mov ebx, ebx
jne 0x49df5b
xor eax, 0x46fba468
add al, ch
pop esp
in eax, 0xff
inc ecx
leave
or cl, al
leave
sbb byte [ebx - 0x4072ff14], al
sar dword [eax], cl
add byte [ebp - 0x78d241], cl
inc dword [edi - 0x74fa8a2e]
invalid
push 0x46fba4
call 0x49c4c1
ror ecx, 8
ror ecx, 0x18
sub esp, 0
lea edi, [edi + 0x78d3]
lea edi, [edi - 0x78d3]
xchg edx, edx
jne 0x49df83
mov ebx, ebx
je 0x49df83
jmp 0x4af3ef
push 0x114
push 0
push 0x46fa90
call fcn.0048801b
add esp, 0xc
xor eax, dword [esp]
xor eax, dword [esp]
or esp, 0
jne 0x49dfaf
ja 0x49dfa4
xchg esp, esp
xchg ecx, edx
xchg ecx, edx
je 0x49dfaf
mov edx, 0x5c7a897
nop
cli
inc esi
add byte [ecx + eax], dl
add byte [eax], al
mov dword [0x46fa90], 0x114
ror esi, 6
ror esi, 0x1a
jno 0x49dfc8
jg 0x49dfc3
js 0x49dfc5
jo 0x49dfc8
call 0x47447034
add al, ch
add esi, edi
invalid
push 0x46fa90
call 0x47e100
jnp 0x49dfd4
call 0x49dfd9
add esp, 4
je 0x49dffb
pushf
rol ecx, 5
rol ecx, 0x1b
popf
lea eax, [eax + 0x783a]
lea eax, [eax - 0x783a]
lea edi, [edi]
jg 0x49dff8
jne 0x49dffb
jmp 0x4afc67
push 0x11c
push 0
push 0x46fc40
call fcn.0048801b
add esp, 0xc
test dword [esp], edi
jae 0x49e022
jl 0x49e016
jle 0x49e018
xchg ecx, edx
xchg ecx, edx
xchg ebx, ebx
jb 0x49e022
xor eax, 0x4005c77c
cld
inc esi
add byte [ecx + eax], bl
add byte [eax], al
mov dword [0x46fc40], 0x11c
jb 0x49e02e
jae 0x49e03c
pushf
jle 0x49e034
cmc
popf
jno 0x49e039
jb 0x49e03c
mov ebx, 0x46fc4068
add al, ch
mov edx, 0x83fffe00
ljmp 0x7de4
push 0x46fc40
call 0x47e100
sub edx, 0
jnp 0x49e056
xchg esp, esp
jge 0x49e04f
mov edi, edi
jmp 0x49e053
jp 0x49e056
mov edi, 0xfde295e8
jmp dword [ebx + 0x46fd5c]
call 0x47c2f0
mov dword [0x46fd5c], eax
rol eax, 0x14
rol eax, 0xc
call 0x49e06b
add esp, 4
nop
xchg esi, esi
jae 0x49e08a
pushf
test edx, edi
popf
lea ecx, [ecx + 0x3e22]
lea ecx, [ecx - 0x3e22]
xchg ecx, ecx
jb 0x49e08a
add eax, 0xffb7c9e8
jmp dword [ebx + 0x46fd60]
call 0x499858
mov dword [0x46fd60], eax
cmp esp, 0x1a50
xchg edi, edi
push edx
add edx, 0x67af
ror edx, 0xc
pop edx
test dword [esp + 0x10], esi
jnp 0x49e0bd
lea esi, [esi + 0x3533]
lea esi, [esi - 0x3533]
jp 0x49e0bd
sbb ebx, 0xdae8006a
adc bh, dh
jmp dword [ebx + 0x46fd64]
push 0
call fcn.0047f39e
mov dword [0x46fd64], eax
rol ecx, 0x10
rol ecx, 0x10
test dword [esp + 0x10], edi
add ecx, 0x72ad
sub ecx, 0x72ad
nop
jp 0x49e0f0
js 0x49e0e4
jge 0x49e0e6
jge 0x49e0e8
lea esp, [esp]
jnp 0x49e0f0
sbb dword [edx + edi - 0x117ff96], 0xa3fffe50
push 0x8d0046fd
adc dh, byte [ebx]
push 0
call 0x4831f5
mov dword [0x46fd68], eax
lea edx, [edx]
jae 0x49e100
js 0x49e108
jae 0x49e104
jns 0x49e108
call 0x14e49e9
add byte [eax], al
push 0x104
push 0x46fd6c
push 0
call fcn.00489417
mov dword [0x46fe70], eax
ror ecx, 0
jae 0x49e136
pushf
ror edi, 7
rol edi, 7
test eax, edx
popf
jg 0x49e131
jl 0x49e133
jb 0x49e136
lcall 0x6800, 0x10468
push 0x104
push 0x46fe74
push 0
je 0x49e13c
inc esi
add byte [edx], ch
call fcn.004877a0
mov dword [0x47007c], eax
ja 0x49e14e
cmp esi, dword [esp + 4]
mov esi, esi
jbe 0x49e15b
jge 0x49e158
ja 0x49e15b
mov ebx, 0xfdbe14e8
jmp dword [ebx + 0x470080]
call 0x479f74
mov dword [0x470080], eax
js 0x49e167
xor esi, 0x192e
xor esi, 0x192e
jns 0x49e18c
pushf
and edi, 0xffffffff
add eax, 0x3fb3
sub eax, 0x3fb3
popf
nop
jg 0x49e189
js 0x49e18c
mov edi, 0x4a43e8
add byte [ebx + 0x470084], ah
call 0x4a2bd4
mov dword [0x470084], eax
xchg edx, ebx
xchg edx, ebx
jle 0x49e1b3
pushf
and esp, 0xffffffff
ror edi, 9
rol edi, 9
xor eax, 0
popf
jae 0x49e1ae
jbe 0x49e1b0
jg 0x49e1b3
sub eax, 0xfffed8c8
call 0x48ba80
mov dword [0x470088], eax
shl edi, 0
or eax, eax
jne 0x49e1c9
jge 0x49e1c6
je 0x49e1c9
mov eax, 0x63e8f66a
inc edx
invalid
push 0xfffffffffffffff6
call 0x482433
mov dword [0x47008c], eax
ja 0x49e1d7
nop
neg edx
neg edx
je 0x49e1e9
jns 0x49e1e0
jae 0x49e1e2
jb 0x49e1e4
jne 0x49e1e9
or esp, 0xe8f56a20
inc ebx
inc edx
invalid
push 0xfffffffffffffff5
call 0x482433
mov dword [0x470090], eax
ror edi, 0
lea ebx, [ebx + 0x381b]
lea ebx, [ebx - 0x381b]
test esp, 0x5242
jns 0x49e20c
jo 0x49e214
xchg esi, esi
jno 0x49e214
sub eax, 0xe8f46a99
sbb byte [edx - 2], al
jmp dword [ebx + 0x470094]
push 0xfffffffffffffff4
call 0x482433
mov dword [0x470094], eax
shr esp, 0
ror eax, 0xe
rol eax, 0xe
jns 0x49e243
pushf
push ebx
pop ebx
stc
jp 0x49e232
popf
lea ecx, [ecx + 0x7d75]
lea ecx, [ecx - 0x7d75]
js 0x49e243
mov edi, 0xfe0bbce8
jmp dword [ebx + 0x470098]
call 0x47ee04
mov dword [0x470098], eax
and ecx, 0xffffffff
jbe 0x49e252
jle 0x49e254
jmp 0x49e256
jb 0x49e265
jb 0x49e25a
jmp 0x49e25c
jne 0x49e25e
jmp 0x49e260
jae 0x49e265
sub eax, 0xa06819d4
add byte [edi], al
push 0x4700a0
call fcn.0047ec42
dec edi
inc edi
push ecx
pop ecx
ja 0x49e275
jg 0x49e287
pushf
push eax
pop eax
mov esi, esi
add esp, 0
popf
jns 0x49e284
jle 0x49e287
mov edx, 0x4700e468
add al, ch
fst dword [esi + edi*8 - 1]
push 0x4700e4
call 0x48376a
test esp, 0x1bea
ror ebx, 0x1d
rol ebx, 0x1d
jge 0x49e2ae
pushf
jbe 0x49e2a3
jae 0x49e2a5
jo 0x49e2a7
popf
jb 0x49e2ab
jl 0x49e2ae
add eax, 0xff9861e8
jmp dword [esi - 0x5d]
call 0x497b14
mov word [0x47014c], ax
std
cld
jbe 0x49e2d5
pushf
ror edx, 0xd
ror edx, 0x13
rol eax, 0
xchg ecx, ecx
popf
jne 0x49e2ce
xchg esp, esp
jmp 0x49e2d2
ja 0x49e2d5
ljmp 0xa3ff:0xfeb564e8
call 0x48983e
mov dword [0x470150], eax
nop
jae 0x49e2e2
and esp, 0xffffffff
test esi, eax
jb 0x49e302
pushf
mov esp, esp
popf
xchg ecx, ecx
mov eax, eax
lea ebx, [ebx + 0x7e3a]
lea ebx, [ebx - 0x7e3a]
jae 0x49e302
jmp 0xfea03eee
call 0x483962
mov word [0x470154], ax
call 0x49e312
lea esp, [esp + 4]
test dword [esp + 0xc], edx
add esi, 0x7228
sub esi, 0x7228
je 0x49e334
jns 0x49e32a
xchg esp, esp
nop
mov eax, eax
jne 0x49e334
sub eax, 0x90e85a8f
fcos
jmp dword [ebx + 0x470158]
call 0x49bcc9
mov dword [0x470158], eax
push 0x24
push 0
push 0x470128
call fcn.0048801b
add esp, 0xc
push 0x470128
call fcn.0048b7aa
call fcn.004a752c
test eax, eax
je 0x49e386
cmp dword [0x470140], 0x182
je 0x49e37a
cmp dword [0x470140], 0x1e6
jne 0x49e384
mov dword [0x4753f0], 1
jmp 0x49e3b7
xor ecx, ecx
mov cx, word [0x470128]
test ecx, ecx
jne 0x49e3ad
xor edx, edx
mov dx, word [0x470148]
cmp edx, 5
jge 0x49e3ab
mov dword [0x4753f0], 1
jmp 0x49e3b7
mov dword [0x4753f0], 1
mov eax, dword [0x4753f0]
mov dword [0x470160], eax
push 0x190
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
mov dword [0x47026c], eax
push 0x190
push 0
mov ecx, dword [0x47026c]
push ecx
call fcn.0048801b
add esp, 0xc
cmp dword [0x47203c], 1
jne 0x49e503
push 5
push 0x473bac
push 0x47201d
call fcn.0048ae5d
add esp, 0xc
test eax, eax
jne 0x49e461
push 0xa
call fcn.004960f3
add esp, 4
test eax, eax
jne 0x49e45c
push 0xb
call fcn.004960f3
add esp, 4
test eax, eax
jne 0x49e45c
push 0x14
call fcn.004960f3
add esp, 4
test eax, eax
jne 0x49e45c
mov dword [0x473fb0], 0x24
mov dword [0x475404], 1
mov dword [0x473dc0], 1
jmp 0x4a21ea
jmp 0x49e503
push 5
push 0x473bb4
push 0x47201d
call fcn.0048ae5d
add esp, 0xc
test eax, eax
jne 0x49e4ba
push 0xb
call fcn.004960f3
add esp, 4
test eax, eax
jne 0x49e4b8
push 0x14
call fcn.004960f3
add esp, 4
test eax, eax
jne 0x49e4b8
mov dword [0x473fb0], 0x24
mov dword [0x475404], 1
mov dword [0x473dc0], 1
jmp 0x4a21ea
jmp 0x49e503
push 5
push 0x473bbc
push 0x47201d
call fcn.0048ae5d
add esp, 0xc
test eax, eax
jne 0x49e503
push 0x14
call fcn.004960f3
add esp, 4
test eax, eax
jne 0x49e503
mov dword [0x473fb0], 0x24
mov dword [0x475404], 1
mov dword [0x473dc0], 1
jmp 0x4a21ea
xchg esp, esp
or edi, edi
rol edx, 0x1d
ror edx, 0x1d
jnp 0x49e521
pushf
jo 0x49e513
stc
test dword [esp + 0x10], ecx
popf
js 0x49e51c
jb 0x49e51e
jp 0x49e521
sub dword [edx + 0x2f], 0x558d006a
mov ah, 0x52
push 0x2f
push 0
lea edx, [ebp - 0x4c]
push edx
call fcn.0048801b
add esp, 0xc
shr esp, 0
shl eax, 0
xor esp, 0
add esp, 0
jge 0x49e564
pushf
add esi, 0x1d59
sub esi, 0x1d59
sub esp, 0
xor eax, dword [esp + 4]
xor eax, dword [esp + 4]
shr ecx, 0
popf
mov ecx, ecx
jae 0x49e561
jl 0x49e564
mov edx, 0x54d745c6
mov byte [ebp - 0x29], 0x54
mov esp, esp
shl edx, 0
nop
jne 0x49e585
pushf
ror ecx, 0xe
rol ecx, 0xe
neg edx
neg edx
stc
popf
jle 0x49e581
nop
je 0x49e585
mov esp, 0x78d345c6
mov byte [ebp - 0x2d], 0x78
cmp edx, 0x5223
jb 0x49e591
and esp, 0xffffffff
xor eax, 0x64db
xor eax, 0x64db
jg 0x49e5c9
pushf
xor ebx, 0x69cb
xor ebx, 0x69cb
lea ebx, [ebx + 0x628f]
sub ebx, 0x628f
call 0x49e5bf
add esp, 4
popf
mov esp, esp
jle 0x49e5c9
call 0x76262b93
mov byte [ebp - 0x24], 0x75
test esi, ebx
lea edi, [edi + 0x6a58]
lea edi, [edi - 0x6a58]
jb 0x49e5dd
js 0x49e5eb
jmp 0x49e5e1
mov edx, edx
xchg esi, ebx
xchg esi, ebx
jns 0x49e5eb
mov edx, 0xbc45c608
pop esi
mov byte [ebp - 0x44], 0x5e
or esi, esi
inc esi
dec esi
ja 0x49e5ff
jle 0x49e5f7
xchg esp, esp
jne 0x49e5fb
jbe 0x49e5ff
jmp 0xdf8fac56
mov byte [ebp - 0x21], 0x75
ja 0x49e605
push ebx
pop ebx
jge 0x49e61d
lea esi, [esi]
jne 0x49e60d
lea eax, [eax + 0x15d2]
lea eax, [eax - 0x15d2]
jl 0x49e61d
mov esp, 0xc545c66d
dec ebp
mov byte [ebp - 0x3b], 0x4d
xor eax, 0x6c19
xor eax, 0x6c19
jge 0x49e643
pushf
jge 0x49e631
inc ebx
dec ebx
rol esi, 3
ror esi, 3
ror eax, 0
popf
lea edx, [edx]
jl 0x49e643
mov ebp, 0x64da45c6
mov byte [ebp - 0x26], 0x64
test esp, 0x7e94
jbe 0x49e64f
inc edi
dec edi
jmp 0x49e653
jae 0x49e66c
pushf
cmc
call 0x49e65d
lea esp, [esp + 4]
popf
jb 0x49e665
jbe 0x49e667
jmp 0x49e669
jb 0x49e66c
lcall 0x8d, 0x5ab845c6
mov byte [ebp - 0x48], 0x5a
lea eax, [eax]
or edi, edi
jo 0x49e684
lea esp, [esp]
lea ebx, [ebx]
jb 0x49e67d
lea ecx, [ecx]
jno 0x49e684
mov ebx, 0x45c60c76
mov ah, 0x4c
mov byte [ebp - 0x4c], 0x4c
jmp 0x49e68a
and esp, 0xffffffff
je 0x49e6a4
lea esp, [esp]
mov edi, edi
lea ebx, [ebx + 0x4064]
lea ebx, [ebx - 0x4064]
jne 0x49e6a4
ljmp 0xf870:0xce45c6c8
mov byte [ebp - 0x32], 0x70
clc
jg 0x49e6b5
jne 0x49e6ad
jns 0x49e6af
jmp 0x49e6b1
jle 0x49e6b5
mov ecx, 0xb745c6f0
dec eax
mov byte [ebp - 0x49], 0x48
add ebx, dword [esp]
sub ebx, dword [esp]
test esp, 0x6c84
cmp edi, 0xcda
js 0x49e6d2
jl 0x49e6cf
jns 0x49e6d2
mov ebx, 0x47d045c6
mov byte [ebp - 0x30], 0x47
push edi
pop edi
jns 0x49e6da
add edi, 0
jnp 0x49e6df
jnp 0x49e6ef
pushf
jmp 0x49e6e5
and ecx, 0xffffffff
popf
jns 0x49e6ec
jp 0x49e6ef
jmp 0x332b2cb9
mov byte [ebp - 0x1f], 0x32
jle 0x49e6f5
neg eax
neg eax
jo 0x49e6fb
mov esp, esp
je 0x49e704
jns 0x49e701
jne 0x49e704
call 0x62122cce
mov byte [ebp - 0x38], 0x61
lea esp, [esp]
cmp ecx, ebx
je 0x49e71b
pushf
xchg esp, esp
cld
popf
mov esp, esp
jne 0x49e71b
mov ebp, 0x74de45c6
mov byte [ebp - 0x22], 0x74
add esi, 0
jns 0x49e737
pushf
js 0x49e728
and esp, 0xffffffff
ror esi, 0
popf
jp 0x49e732
js 0x49e734
js 0x49e737
mov ebp, 0x77dd45c6
mov byte [ebp - 0x23], 0x77
not ebx
not ebx
jge 0x49e767
pushf
xor ebx, 0x2f
xor ebx, 0x2f
js 0x49e74b
jp 0x49e74d
add esp, 0
popf
xchg edx, edi
xchg edx, edi
lea esi, [esi + 0x15ae]
lea esi, [esi - 0x15ae]
jle 0x49e764
jl 0x49e767
add eax, 0x56ba45c6
mov byte [ebp - 0x46], 0x56
dec edi
inc edi
or edx, edx
and edi, edi
jbe 0x49e773
jbe 0x49e788
pushf
inc ecx
dec ecx
cmp esp, 0x1754
jb 0x49e781
popf
jp 0x49e785
ja 0x49e788
lcall 0xe487, 0x55bf45c6
mov byte [ebp - 0x41], 0x55
xchg esp, esp
jae 0x49e7a5
pushf
lea esp, [esp]
lea esi, [esi]
sub esi, 0
popf
jns 0x49e79e
js 0x49e7a0
je 0x49e7a2
jb 0x49e7a5
mov edx, 0x66cd45c6
mov byte [ebp - 0x33], 0x66
neg edx
neg edx
jno 0x49e7b6
jg 0x49e7b1
jg 0x49e7b3
jo 0x49e7b6
add eax, 0x65d545c6
mov byte [ebp - 0x2b], 0x65
xor ecx, edi
xor ecx, edi
jns 0x49e7c0
call 0x49e7c5
lea esp, [esp + 4]
xor esi, dword [esp]
xor esi, dword [esp]
jbe 0x49e7d8
jg 0x49e7d3
xchg ebx, ebx
ja 0x49e7d8
mov ecx, 0x49be45c6
mov byte [ebp - 0x42], 0x49
jg 0x49e7de
ror edx, 0
je 0x49e7f5
jns 0x49e7e5
lea edi, [edi + 0x1651]
lea edi, [edi - 0x1651]
jne 0x49e7f5
xor eax, 0xd945c6a8
jo 0x49e785
mov byte [ebp - 0x27], 0x70
mov edx, edx
ja 0x49e7fd
sal byte [edi], cl
xor ebx, 0x1f08
xor ebx, 0x1f08
nop
jl 0x49e81d
pushf
ror edx, 0x1c
ror edx, 4
popf
xchg esi, eax
xchg esi, eax
je 0x49e81a
jge 0x49e81d
ljmp 0x73:0x77cc45c6
mov byte [ebp - 0x34], 0x77
jae 0x49e823
jns 0x49e82a
xchg esp, esp
js 0x49e82a
add esi, 0x7353c645
add byte [eax + eax - 0x7d], bh
add byte [eax + 0xb], dh
mov byte [ebp - 0x3a], 0x53
jae 0x49e830
jl 0x49e832
xor ebx, 0
jo 0x49e842
pushf
dec esi
inc esi
popf
jbe 0x49e83f
jno 0x49e842
jmp 0x49052e0c
mov byte [ebp - 0x45], 0x48
or ebx, ebx
xor esp, 0
add ecx, dword [esp]
sub ecx, dword [esp]
jl 0x49e85f
jp 0x49e855
xchg esp, esp
xchg ebx, edi
xchg ebx, edi
jge 0x49e85f
mov ecx, 0xdb45c649
push 0xe6c1424a
add byte [edi + 0x661571f6], al
pushfd
mov byte [ebp - 0x25], 0x68
dec edx
inc edx
shl esi, 0
xchg esi, esi
jno 0x49e881
pushf
jle 0x49e870
popf
lea esi, [esi + 0x2874]
lea esi, [esi - 0x2874]
jo 0x49e881
mov esi, 0x4dc245c6
mov byte [ebp - 0x3e], 0x4d
shr esp, 0
test esi, ebx
jg 0x49e891
js 0x49e88e
jle 0x49e891
sub eax, 0x58c445c6
mov byte [ebp - 0x3c], 0x58
ja 0x49e897
jo 0x49e8a1
jle 0x49e89b
jge 0x49e89d
jno 0x49e8a1
mov edi, 0xc345c606
push ebp
mov byte [ebp - 0x3d], 0x55
cmp esp, 0x177b
xor esi, edi
xor esi, edi
je 0x49e8c7
pushf
and esi, esi
and edi, 0xffffffff
xor ebx, dword [esp + 4]
xor ebx, dword [esp + 4]
popf
jae 0x49e8c4
jne 0x49e8c7
add eax, 0x76d845c6
mov byte [ebp - 0x28], 0x76
xchg esp, esp
xchg edx, edx
test ecx, eax
jle 0x49e8d8
je 0x49e8d5
jg 0x49e8d8
add esi, 0x8b73d245
push edi
les ecx, [ebx - 0x3effff82]
retf
mov byte [ebp - 0x2e], 0x73
mov edi, edi
test esp, 0x7e8b
ror ebx, 0xe
ror ebx, 0x12
jg 0x49e8f2
ja 0x49e8ee
jle 0x49e8f2
mov edi, 0xb645c632
push ebp
mov byte [ebp - 0x4a], 0x55
jae 0x49e8f8
xor edx, 0
xchg ebx, eax
xchg ebx, eax
je 0x49e909
js 0x49e901
js 0x49e903
jo 0x49e905
nop
jne 0x49e909
add esi, 0x5746bd45
mov byte [ebp - 0x43], 0x46
push edi
pop edi
not edx
not edx
jae 0x49e915
sub ecx, 0
jo 0x49e926
xchg edx, edx
mov esp, esp
js 0x49e920
lea esp, [esp]
jno 0x49e926
mov ebx, 0x5ecf45c6
mov byte [ebp - 0x31], 0x5e
lea ebx, [ebx + 0x5873]
lea ebx, [ebx - 0x5873]
jno 0x49e938
test dword [esp], ebx
jg 0x49e947
jge 0x49e93f
mov byte [ebp - 0x47], 0x43
lea ebx, [ebx + 0x4deb]
lea ebx, [ebx - 0x4deb]
jle 0x49e959
xor ebx, 0x6be7
xor ebx, 0x6be7
ja 0x4a216e
jno 0x4a216a
jbe 0x4a216e
mov ecx, 0x10458bad
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [0x4726e4]
mov dword [0x475658], eax
shr eax, 0
dec esi
inc esi
jbe 0x4a219a
pushf
jb 0x4a2190
xor eax, 0
popf
ja 0x4a2197
ja 0x4a219a
sub eax, 0xa6303d83
inc esi
add byte [eax], al
cmp dword [0x46a630], 0
jne 0x4a21e0
cmp dword [0x473dbc], 0
je 0x4a21e0
rol esi, 0
jge 0x4a21c1
pushf
ror edi, 0
popf
jg 0x4a21ba
js 0x4a21bc
mov esi, esi
jl 0x4a21c1
jmp 0xbf2242
jge 0x4a21c3
jne 0x4a21c5
jl 0x4a21cc
ja 0x4a21c9
jge 0x4a21cc
jmp 0x4fb134
pop dword fs:[0]
add esp, 0xc
mov dword [0x473dbc], 0
mov eax, dword [0x475658]
jmp 0x4a2764
call fcn.00483d08
xor eax, eax
mov al, byte [0x471808]
test eax, eax
jne 0x4a2204
call fcn.0047d896
mov dword [0x47567c], eax
cmp dword [0x46fa0c], 2
jne 0x4a2233
cmp dword [0x46fa00], 6
jne 0x4a2233
cmp dword [0x470190], 0
je 0x4a2233
call fcn.0047fc2c
mov dword [0x4756fc], eax
call fcn.004973b5
mov dword [0x4756f8], eax
xor ecx, ecx
mov cl, byte [0x471f7c]
test ecx, ecx
je 0x4a225a
push 0xa1
push 0x471f7c
lea edx, [ebp - 0xf0]
push edx
call fcn.0047d9d5
add esp, 0xc
jmp 0x4a2273
push 0xa1
push 0x4665b0
lea eax, [ebp - 0xf0]
push eax
call fcn.0047d9d5
add esp, 0xc
mov dword [ebp - 0x18], 0
jmp 0x4a2285
mov ecx, dword [ebp - 0x18]
add ecx, 1
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], 0xa
jge 0x4a231f
mov edx, dword [ebp - 0x18]
shl edx, 2
mov eax, dword [ebp + edx*4 - 0xf0]
xor eax, 0xab576c41
mov ecx, dword [ebp - 0x18]
shl ecx, 2
mov dword [ebp + ecx*4 - 0xf0], eax
mov edx, dword [ebp - 0x18]
shl edx, 2
mov eax, dword [ebp + edx*4 - 0xec]
xor eax, 0xab5ece77
mov ecx, dword [ebp - 0x18]
shl ecx, 2
mov dword [ebp + ecx*4 - 0xec], eax
jp 0x4a22cf
js 0x4a22dc
jne 0x4a22d3
ja 0x4a22d5
jns 0x4a22d7
jo 0x4a22d9
jns 0x4a22dc
mov esi, 0xc1e8558b
loop 0x4a22e4
mov edx, dword [ebp - 0x18]
shl edx, 2
mov eax, dword [ebp + edx*4 - 0xe8]
xor eax, 0xab633a25
mov ecx, dword [ebp - 0x18]
shl ecx, 2
mov dword [ebp + ecx*4 - 0xe8], eax
mov edx, dword [ebp - 0x18]
shl edx, 2
mov eax, dword [ebp + edx*4 - 0xe4]
xor eax, 0xab572a32
mov ecx, dword [ebp - 0x18]
shl ecx, 2
mov dword [ebp + ecx*4 - 0xe4], eax
jmp 0x4a227c
xchg ebp, eax
sbb bh, bh
invalid
call fcn.00493bcd
mov dword [0x475680], eax
or edx, edx
xor esi, dword [esp + 4]
xor esi, dword [esp + 4]
mov edi, edi
xor ecx, 0
jno 0x4a234c
pushf
std
cld
xchg esi, esi
jno 0x4a2342
popf
nop
mov ecx, ecx
xchg edi, edi
jo 0x4a234c
add dword [ebx + 0x4754043d], 0x21750000
cmp dword [0x475404], 0
jne 0x4a2376
and edx, edx
add esp, 0
cmp ebx, ecx
or ebx, ebx
jns 0x4a2371
pushf
lea esi, [esi]
cmp ecx, dword [esp + 0xc]
popf
xchg esp, esp
jns 0x4a236e
js 0x4a2371
mov edi, 0xfd7232e8
push dword [ebx]
xor al, 0x24
call 0x4795a8
xor esi, dword [esp]
xor esi, dword [esp]
jns 0x4a237e
je 0x4a238c
lea esp, [esp]
ja 0x4a2385
jns 0x4a2387
jnp 0x4a2389
jne 0x4a238c
add eax, 0x3dc03d83
inc edi
add byte [eax], al
cmp dword [0x473dc0], 0
jne 0x4a2615
lea ecx, [ecx + 0x1330]
lea ecx, [ecx - 0x1330]
inc eax
dec eax
jns 0x4a23bd
pushf
nop
xchg edi, edx
xchg edi, edx
mov edi, edi
popf
jle 0x4a23b6
ja 0x4a23b8
ja 0x4a23ba
js 0x4a23bd
or dword [ebx + 0x47569015], 0xd4158900
cmp eax, 0xd7f70047
mov edx, dword [0x475690]
mov dword [0x473dd4], edx
not edi
not edi
not ecx
not ecx
jo 0x4a23d3
ja 0x4a23ef
pushf
and edi, 0xffffffff
popf
jnp 0x4a23de
lea ecx, [ecx]
lea esi, [esi + 0xae8]
lea esi, [esi - 0xae8]
jbe 0x4a23ef
jmp 0x47a0b494
mov eax, dword [0x475690]
add eax, dword [0x475624]
mov dword [0x473dd0], eax
add edx, dword [esp]
sub edx, dword [esp]
shl esp, 0
lea ebx, [ebx + 0x1684]
lea ebx, [ebx - 0x1684]
jl 0x4a2433
pushf
lea ecx, [ecx]
std
cld
mov ebx, ebx
popf
lea edx, [edx + 0x4990]
lea edx, [edx - 0x4990]
jne 0x4a242e
jne 0x4a2430
jge 0x4a2433
mov edi, 0xbf505157
mov edx, 0x83004a29
out dx, al
add bh, dh
salc
push edi
push ecx
push eax
mov edi, 0x4a29ba
sub esi, 0
not esi
not esi
ja 0x4a244f
xchg esi, esi
js 0x4a2448
xchg ecx, ecx
jb 0x4a244c
jbe 0x4a244f
jmp 0x3e0661d3
cmp byte [0x473dbc], 0
je 0x4a248b
jne 0x4a245a
test ecx, 0x1ba9
and ebx, ebx
and esp, 0xffffffff
jae 0x4a2486
pushf
cmc
jg 0x4a246c
xor esi, 0x4355
xor esi, 0x4355
shl ecx, 0
popf
jp 0x4a247f
lea edx, [edx]
jp 0x4a2483
jb 0x4a2486
mov ecx, 0x4a2b75bf
add byte [ebx + 0xe7cffe3], al
mov edi, 0x4a2b75
and ebx, 0xffffffff
jl 0x4a249e
pushf
test esi, edi
and ecx, 0xffffffff
popf
ja 0x4a249b
jge 0x4a249e
jmp 0x3e1a322d
mov ecx, dword [0x473dd0]
xor eax, dword [esp + 4]
xor eax, dword [esp + 4]
cmp ecx, eax
jle 0x4a24ca
pushf
sub esp, 0
shr edx, 0
stc
popf
lea ecx, [ecx + 0x140e]
lea ecx, [ecx - 0x140e]
jg 0x4a24ca
add eax, 0x2776cf3b
cmp ecx, edi
jbe 0x4a24f5
jg 0x4a24d0
jp 0x4a24de
xchg ebx, ebx
jns 0x4a24d6
ja 0x4a24d8
jb 0x4a24da
jnp 0x4a24de
mov ebp, 0xb0cf2b02
nop
sub ecx, edi
mov al, 0x90
cld
test eax, 0xe27
jnp 0x4a24ea
jge 0x4a24f3
jg 0x4a24ee
xchg ecx, ecx
jl 0x4a24f3
lcall 0x72, 0xef05aaf3
add byte [0x72ef], ch
rep stosb byte es:[edi], al
add eax, 0x72ef
sub eax, 0x72ef
shl esp, 0
ror edx, 0xb
ror edx, 0x15
jae 0x4a2527
pushf
xchg esp, esp
lea edx, [edx + 0x7f55]
lea edx, [edx - 0x7f55]
popf
xchg ebx, ebx
xchg ebx, ebx
xchg edx, esi
xchg edx, esi
jb 0x4a2527
mov ebx, 0x3dd43d8b
inc edi
add byte [ebx + 0x67900ef], al
mov edi, dword [0x473dd4]
sub edi, 0
jns 0x4a2538
jge 0x4a2534
js 0x4a2538
mov edx, 0xdaf0b9be
dec ecx
add byte [ebx - 0x37eff3c], al
xchg esi, eax
dec esp
add byte [eax], al
mov ecx, entry0
add esp, 0
cmp esp, 0x4c96
shl esp, 0
jo 0x4a255d
pushf
nop
call 0x4a2553
add esp, 4
popf
jle 0x4a255a
jno 0x4a255d
mov edi, 0x2f76cf3b
cmp ecx, edi
jbe 0x4a2590
jge 0x4a2563
and edi, edi
jl 0x4a256c
jbe 0x4a2569
jge 0x4a256c
mov esp, 0xe983cf2b
add byte [eax - 0x6399e88e], dl
sub ecx, edi
sub ecx, 0
nop
jb 0x4a258b
pushf
xchg ecx, edx
xchg ecx, edx
dec ecx
inc ecx
jo 0x4a257e
jp 0x4a2580
popf
jp 0x4a2584
jb 0x4a2586
jb 0x4a2588
jae 0x4a258b
mov esi, 0xf3fc90b0
stosb byte es:[edi], al
mov al, 0x90
cld
rep stosb byte es:[edi], al
jns 0x4a2592
xchg ebx, ebx
ja 0x4a2596
jns 0x4a25ad
jge 0x4a259a
lea ecx, [ecx + 0x390f]
lea ecx, [ecx - 0x390f]
lea esp, [esp]
js 0x4a25ad
sub eax, 0xdb42bff2
dec ecx
add ch, dh
mov edi, 0x49db42
cmc
test dword [esp], eax
jno 0x4a25b8
jbe 0x4a25c9
pushf
cld
cmp ecx, dword [esp]
popf
jae 0x4a25c4
xchg esp, esp
ja 0x4a25c9
jmp 0x4a6c1086
mov ecx, 0x4a21ea
rol esi, 0
dec edx
inc edx
cmp esi, edx
push ebx
add ebx, 0x38c2
ror ebx, 0x1a
pop ebx
jb 0x4a25ea
jbe 0x4a25e4
xchg ecx, ecx
jae 0x4a25ea
add eax, 0xb0cf2b3c
nop
sub ecx, edi
mov al, 0x90
cld
rep stosb byte es:[edi], al
ror esp, 0
cmc
sub edi, 0
clc
jno 0x4a2612
pushf
mov ecx, ecx
xchg esi, esi
popf
lea eax, [eax + 0x479c]
lea eax, [eax - 0x479c]
jo 0x4a2612
mov ebp, 0x835f5958
cmp eax, 0x47567c
add byte [edi], cl
test dh, dl
add byte [eax], al
add byte [ebx + 0x46f9700d], cl
add byte [ecx + 0xe1], al
add byte [ebp - 0x7c8b8a37], 0x3d
nop
add dword [edi], eax
add byte [ebx + ebp*2 + 0x68], dh
adc byte [eax], ah
and al, 0
pop eax
pop ecx
pop edi
cmp dword [0x47567c], 0
je 0x4a26f8
mov ecx, dword [0x46f970]
and ecx, 0x80000000
test ecx, ecx
jne 0x4a26a6
cmp dword [0x470190], 0
je 0x4a26a6
push 0x242010
lea edx, [ebp - 0xf0]
push edx
push 0x473e08
push 0
call dword [0x47567c]
cmp dword [0x46fa0c], 2
jne 0x4a26a4
cmp dword [0x46fa00], 6
jne 0x4a26a4
cmp dword [0x4756f8], 0xffffffff
je 0x4a26a4
push 0
lea eax, [ebp - 0xf4]
push eax
push 0
push 0x42010
push 0x19d
push 0x473e08
push 0xa1
lea ecx, [ebp - 0xf0]
push ecx
mov edx, dword [0x4756f8]
push edx
push 0
call dword [0x4756fc]
jmp 0x4a26bf
push 0x42010
lea eax, [ebp - 0xf0]
push eax
push 0x473e08
push 0
call dword [0x47567c]
mov dword [0x473fb4], 0
jmp 0x4a26da
mov ecx, dword [0x473fb4]
add ecx, 1
mov dword [0x473fb4], ecx
cmp dword [0x473fb4], 0xa1
jae 0x4a26f6
mov edx, dword [0x473fb4]
mov byte [ebp + edx - 0xf0], 0
jmp 0x4a26cb
jmp 0x4a271e
xor eax, eax
mov al, byte [0x471808]
cmp eax, 1
jne 0x4a271e
push 0x473e08
lea ecx, [ebp - 0xf0]
push ecx
push 0x473bc4
call dword [sym.imp.MSVCRT.dll_printf]
add esp, 0xc
cmp dword [0x4755a0], 0
jne 0x4a2762
cmp dword [0x475680], 0
je 0x4a273f
mov edx, dword [0x473fb0]
push edx
call dword [0x475680]
jmp 0x4a2762
cmp dword [0x46fa0c], 2
jne 0x4a275b
cmp dword [0x46fa00], 6
jne 0x4a275b
push 0x63
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, 0x63
jmp 0x4a2764
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
add dh, 0xa3
mov al, byte [0x84d90d0a]
inc eax
push ecx
push es
and dword [ebx + eax - 0x40], ecx
cmp al, 0x16
push 0x7e
fsubrp st(7)
lodsd eax, dword [esi]
lodsd eax, dword [esi]
lodsb al, byte [esi]
and edx, dword [eax + 0x6a0fd67c]
invalid
aam 0x5c
or ebp, dword [eax]
mov ah, 0xff
mov dl, 0xba
sub byte [ecx + 0x2b], 0x2f
stosd dword es:[edi], eax
cmp ebx, dword [ebp + 0x935181d]
sub eax, 0xd64554f7
sbb byte [0x54f72d09], dh
inc ebp
salc
cdq
xchg ecx, eax
jg 0x4afc0c
and al, 0x26
cdq
leave
mov byte [0x560ec3c5], al
out dx, eax
jp 0x4afc53
fidiv word [edi - 0x29]
pop eax
pop ecx
add al, 0x75
adc dword [eax], ebp
mov al, byte [0xbd27a6f7]
jmp 0x4afc42
in eax, 0x50
jge 0x4afc70
shl dl, 1
mov bh, 0x30
fcom dword [esi]
and ebp, ebx
cmp al, 0x10
push esi
add dword [edi - 0x14], ecx
bound eax, qword [edi - 4]
fdivr dword [edi + 0x4b]
add eax, ecx
cwde
xchg ecx, esp
xor dword [edi - 0x1a8ddc15], eax
ja 0x4afc9f
in eax, 0x77
xor eax, 0xf50f7778
jo 0x4afbfc
js 0x4afce3
pmaddwd mm6, qword [eax - 0x74]
adc al, 1
je 0x4afcf3
jae 0x4afbfc
inc ebx
push ebp
stc
aam 0x4b
push eax
daa
jg 0x4afcd5
invalid
iretd
inc edi
push es
fcomp qword [esi + ebp*8]
jnp 0x4afc76
xchg byte ss:[edx + ebx*4 + 0x7b], ah
test edx, edi
cli
push edi
div dword [ebx + 0x1987b982]
out 0x45, al
lock adc dl, byte [ebx + 0x26e8dc2e]
add byte [ebp + 0x3d], 0xfc
add byte es:[ebp + 0x3d], 0xfc
fcom st(4)
or esi, esp
mov dword [0xbf25588a], eax
mov byte [0xae98b15e], al
xchg ebx, eax
test dword [edx + 0x1885c714], edi
push cs
popal
cmp byte [esi], bl
jl 0x4afd80
aad 0xb6
mov byte [ecx + 0x297e7507], al
xchg ecx, eax
pop edx
mov byte [0x7f81cd5], al
clc
pop es
jns 0x4afd4a
push 0x9ab6524
mov ecx, 0x647c3a6f
cdq
neg dword [esi + 0x6d]
mov esp, 0xf2479f62
xor byte [edi], bh
call 0x95a81345
jmp 0x7104dc3a
cmp cl, byte [ebx + 0x3f0c4f2a]
add byte [ebp - 0x40cf4809], bh
push eax
jae 0x4afdd2
std
sub byte [ecx + 0x7c], bh
daa
jl 0x4afd85
je 0x4afd21
and al, 0x1f
movsd dword es:[edi], dword [esi]
in eax, dx
push esi
inc edi
jae 0x4afd23
jmp 0x7543cfbb
and dh, byte [esi]
push ebx
jno 0x4afd5c
salc
cmp edi, dword [ebx - 0x2b]
xchg dword [ebx - 0x41], ebx
xor al, 0x10
in eax, dx
rol dword [esi + 0x4e], cl
push 0x12
arpl word [ebp + 0xe], sp
das
enter 0x351a, 0x5a
insb byte es:[edi], dx
xchg edi, eax
js 0x4afe16
cmp dh, dh
xlatb
inc ebp
adc edi, ecx
pop esi
mov es, word [edi - 0x5a]
mov ecx, 0x30ddb191
or ebx, dword [esi]
and al, 0x91
movzx esp, word [ebx]
fcomp qword es:[eax + 0x73]
mov ebp, 0x36fc2ecd
add ebx, eax
sub dword [eax - 0x30], edx
mov ebx, 0xabcfb3a2
xchg edi, eax
cmp dword [esi], ebx
retf
ret 0xfb49
cmpsd dword [esi], dword es:[edi]
clc
inc eax
aad 0x38
mov al, 0x90
invalid
sbb edi, ecx
push edi
add ch, dh
add dword [ebx], ecx
push edi
daa
adc dword [eax + 0x3583d21c], 0x50
mov eax, 0x52e7c7ff
nop
sbb al, 0xd2
xor dword [0xc7ffb850], 0xffffffe7
push edx
je 0x4afe20
sti
jl 0x4afdfe
adc al, 0x63
jae 0x4afe4d
mov ebp, 0x8a7b14fc
cwde
pop ebx
push 0x64
jecxz 0x4afe8e
call 0xde6ff2dc
jl 0x4afea5
cmpsb byte [esi], byte es:[edi]
push edx
invalid
xchg esp, eax
salc
mov ebx, 0x5836cd2d
mov esi, dword [esi]
rcr byte [eax + 0x3a], cl
wait
sbb al, 0xd2
rol bl, cl
loop 0x4afe9f
or cl, bh
int 0x57
add ecx, 0x43ae9ba7
inc edi
neg byte [ebx]
cmc
shl dword [edi + 0x4743ae9b], 0xf6
sbb esi, ebp
je 0x4afedb
std
cdq
push ebx
enter 0x7612, 0xffffffffffffff9a
outsb dx, byte gs:[esi]
jo 0x4afe66
outsd dx, dword [esi]
salc
or byte [esp + eax + 0x82f8569], al
je 0x4afe4e
adc al, byte [ecx + esi*2 + 0x664eaf6f]
cli
cli
outsd dx, dword [esi]
aad 0xbc
xchg ecx, eax
dec edx
inc esp
inc ecx
sub byte [edx - 0x31], al
jno 0x4afed9
cmc
sub ecx, eax
cli
movsd dword es:[edi], dword [esi]
sbb esi, dword [edx + 0x163c43c4]
cmp al, 0x16
scasb al, byte es:[edi]
shr eax, cl
xlatb
mov ds, ebp
mov cl, 0x53
mov word [eax - 0x67], ss
cmp byte [esi - 0x3e], 0x7f
neg eax
fistp word [esi + 0x1e19d0a]
mov ecx, 0x1f87ba54
stosb byte es:[edi], al
push esp
bnd jno 0x4afed9
mov edi, 0x5e97c8c9
sbb bl, byte [edi + 0x63]
sar dword [ebp + ebp*4 - 0x60], cl
call 0xbfcd6bc7
pop eax
jl 0x4afee5
or dword [edx + ebx*4 - 0x4cfc250e], eax
test byte [edx - 0x4cfc250e], bl
pop edi
retf 0xfb69
sti
dec eax
mov word [edi], es
invalid
shl byte [edx + 0x13], 1
ljmp 0xf60c