Function at 0x494388
Capabilities:
Terminate process

Disassembly:
add esp, 4
ror edx, 0
rol edi, 0x1b
rol edi, 5
popf
lea edi, [edi + 0x49d9]
lea edi, [edi - 0x49d9]
nop
ja 0x493ca5
sub dword [eax + 0x7c], 0xff00466e
adc eax, sym.imp.KERNEL32.dll_LoadLibraryA
push 0x466e7c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x466e88
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x466e94
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x466ea4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x466eb0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x466ebc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x466ec8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x466ed8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x466ee8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x466ef8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x466f04
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x466f14
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x466f20
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
ja 0x493d36
xchg ebx, ebx
lea esp, [esp]
jge 0x493d5a
pushf
rol ecx, 0
jbe 0x493d44
add eax, 0
cmp edi, 0x3d02
popf
xchg edi, edx
xchg edi, edx
jb 0x493d55
jp 0x493d57
jl 0x493d5a
lcall 0xc1ff, 0xfe0f82e8
in al, 0
call 0x474ce1
shl esp, 0
xor esp, 0
nop
jo 0x493d6d
jl 0x493d6a
jno 0x493d6d
jmp 0x4694d212
mov eax, dword [0x464b94]
mov dword [0x461fd4], eax
lea edx, [edx + 0x1bde]
lea edx, [edx - 0x1bde]
je 0x493d85
jns 0x493d87
jle 0x493d9f
pushf
cmp esp, 0x4c06
ror eax, 0x15
rol eax, 0x15
lea edi, [edi]
popf
nop
jg 0x493d9f
mov ebx, 0x4b980d8b
inc esi
add byte [ecx + 0x4618100d], cl
add byte [ebp - 0x6c4dbcc], al
mov ecx, dword [0x464b98]
mov dword [0x461810], ecx
test dword [esp], esi
cmp edi, ecx
jg 0x493dc6
pushf
test dword [esp], edi
cld
shl edi, 0
popf
ja 0x493dbf
mov eax, eax
lea esi, [esi]
jle 0x493dc6
mov esi, 0x4b9c158b
inc esi
add byte [ecx + 0x46181415], cl
add ch, bh
mov edx, dword [0x464b9c]
mov dword [0x461814], edx
std
cld
je 0x493dd6
shl esi, 0
ja 0x493de7
jg 0x493ddd
lea esp, [esp]
xchg edx, esi
xchg edx, esi
jbe 0x493de7
add eax, 0xa068406a
dec ebx
inc esi
add byte [eax + 0x18], ch
sbb byte [esi], al
push 0x40
push 0x464ba0
push 0x461818
call fcn.00470caa
add esp, 0xc
jbe 0x493dfd
shl eax, 0
xor edi, dword [esp + 0xc]
xor edi, dword [esp + 0xc]
jne 0x493e0a
je 0x493e21
pushf
test dword [esp + 0xc], eax
mov edi, edi
jbe 0x493e16
popf
jns 0x493e1a
xchg esp, esp
jno 0x493e1e
jne 0x493e21
add eax, 0x464be0a1
add byte [ebx + 0x462084], ah
mov eax, dword [0x464be0]
mov dword [0x462084], eax
xchg ecx, ecx
cmp esp, 0x65c1
ror esp, 0
js 0x493e53
pushf
test esp, 0x610a
xor edx, dword [esp + 0xc]
xor edx, dword [esp + 0xc]
jbe 0x493e4a
popf
jo 0x493e4e
lea eax, [eax]
jns 0x493e53
jmp 0x4c2d4be2
mov ecx, dword [0x464be4]
mov dword [0x462088], ecx
xor esp, 0
or edi, 0
xchg ebx, ebx
cmp esp, 0x1592
jb 0x493e8b
pushf
lea edi, [edi + 0x4f40]
lea edi, [edi - 0x4f40]
jle 0x493e7f
and esp, 0xffffffff
popf
jg 0x493e86
lea edi, [edi]
jae 0x493e8b
mov ecx, 0x4be8158b
inc esi
add byte [ecx + 0x46208c15], cl
add byte [ebx], ah
jmp dword [ebx]
mov edx, dword [0x464be8]
mov dword [0x46208c], edx
and edi, edi
and eax, eax
and edi, 0xffffffff
sub esp, 0
jbe 0x493eaa
jns 0x493ea5
jbe 0x493ea7
ja 0x493eaa
ljmp 0xa300:0x464beca1
mov eax, dword [0x464bec]
mov dword [0x462090], eax
mov ecx, dword [0x465244]
mov dword [0x4620b0], ecx
mov edx, dword [0x465248]
mov dword [0x4620b4], edx
mov eax, dword [0x45c60c]
mov dword [0x4620b8], eax
mov ecx, dword [0x45c610]
mov dword [0x4620bc], ecx
xor edx, dword [esp]
xor edx, dword [esp]
jne 0x493eea
jns 0x493ef2
jb 0x493eee
js 0x493ef2
mov edi, 0x9523e8f2
invalid
call 0x48d41a
mov dword [0x4679a4], eax
push 0x94
push 0
push 0x461868
call fcn.00491fdc
add esp, 0xc
nop
cmp ebx, dword [esp + 4]
jl 0x493f21
xchg esi, esi
jnp 0x493f1b
xchg esp, esp
jge 0x493f21
add eax, 0x6805c7f8
sbb byte [esi], al
xchg esp, eax
add byte [eax], al
add byte [ebx + 0x7200c8], al
mov dword [0x461868], 0x94
or eax, 0
jb 0x493f30
jle 0x493f38
jl 0x493f34
jg 0x493f38
sub dword [edx + 0x68], 0x461868
push 0x461868
call fcn.0049933a
jg 0x493f44
jns 0x493f46
and ebx, ebx
shr ecx, 0
jae 0x493f5b
xchg ebx, edx
xchg ebx, edx
js 0x493f53
jp 0x493f55
mov esi, esi
jb 0x493f5b
call 0xe5a840
add byte [eax], al
push 0x9c
push 0
push 0x461a10
call fcn.00491fdc
add esp, 0xc
lea esp, [esp]
rol edi, 0
jo 0x493f9f
pushf
jp 0x493f7b
shl esp, 0
xchg edi, ecx
xchg edi, ecx
lea eax, [eax + 0x2091]
lea eax, [eax - 0x2091]
popf
lea eax, [eax + 0x34c8]
lea eax, [eax - 0x34c8]
jno 0x493f9f
add eax, 0x1a1005c7
inc esi
add byte [eax + eax + 0x700000], bl
mov dword [0x461a10], 0x9c
jo 0x493fab
jge 0x493fad
jne 0x493fb7
jno 0x493fb1
jns 0x493fb3
je 0x493fb7
mov ecx, 0x1a106867
inc esi
add al, ch
jns 0x494012
push 0x461a10
call fcn.0049933a
add byte [eax], al
jnp 0x493fc3
nop
jb 0x493fde
pushf
xor esi, dword [esp + 4]
xor esi, dword [esp + 4]
mov edi, edi
ror esp, 0
popf
lea esi, [esi]
jno 0x493fdb
jae 0x493fde
call int.004a544a
add byte [edx], ch
push 0x114
push 0
push 0x4618fc
call fcn.00491fdc
add esp, 0xc
add edx, dword [esp]
sub edx, dword [esp]
shr edx, 0
jbe 0x493ffd
shl esi, 0
jbe 0x494021
pushf
and edi, 0xffffffff
rol edx, 4
ror edx, 4
js 0x49400f
xor edi, dword [esp]
xor edi, dword [esp]
popf
jge 0x494019
jbe 0x49401b
lea esp, [esp]
ja 0x494021
jmp 0x194545ec
mov dword [0x4618fc], 0x114
lea esi, [esi]
xchg edi, edi
jl 0x494031
jo 0x494033
jno 0x494046
pushf
sub eax, 0
clc
popf
jae 0x49403f
xchg ecx, eax
xchg ecx, eax
je 0x494043
jo 0x494046
mov ecx, 0x4618fc68
add al, ch
movsd dword es:[edi], dword [esi]
push 0x4618fc
call 0x47b5f5
stc
jbe 0x494053
jne 0x49404d
invalid
nop
clc
je 0x49405f
jno 0x494059
jno 0x49405b
nop
jne 0x49405f
jmp 0x4a5ccb
push 0x11c
push 0
push 0x461aac
call fcn.00491fdc
add esp, 0xc
nop
jae 0x494076
lea ecx, [ecx + 0x3a03]
lea ecx, [ecx - 0x3a03]
cld
js 0x494094
pushf
xchg edx, edx
popf
jae 0x49408d
jmp 0x49408f
xchg esi, esi
jns 0x494094
add eax, 0x1aac05c7
inc esi
add byte [ecx + eax], bl
add byte [eax], al
mov dword [0x461aac], 0x11c
lea ebx, [ebx + 0x19ef]
lea ebx, [ebx - 0x19ef]
rol esp, 0
ror esp, 0
rol eax, 0x1a
rol eax, 6
jb 0x4940bc
nop
jae 0x4940bc
call 0x4663ed28
add al, ch
das
push 0x461aac
call 0x47b5f5
nop
nop
xor ebx, dword [esp]
jne 0x4940c3
call dword [eax + 0x241c3390]
xor ebx, dword [esp]
je 0x4940da
js 0x4940d2
je 0x4940d4
nop
jbe 0x4940d7
jne 0x4940da
add eax, 0xff42bee8
jmp dword [ebx + 0x461bc8]
call 0x48839d
mov dword [0x461bc8], eax
nop
lea edi, [edi + 0x40a1]
lea edi, [edi - 0x40a1]
jno 0x494106
lea ecx, [ecx + 0x7dec]
lea ecx, [ecx - 0x7dec]
mov ebx, ebx
xchg esp, esp
jo 0x494106
ljmp 0xa3ff:0xff3ea7e8
call 0x487fb2
mov dword [0x461bcc], eax
add esp, 0
jle 0x494126
pushf
jns 0x494119
popf
xchg ecx, edx
xchg ecx, edx
jg 0x494121
mov eax, eax
jg 0x494126
xor eax, 0xa1e8006a
in eax, 0xff
jmp dword [ebx + 0x461bd0]
push 0
call fcn.004926ce
mov dword [0x461bd0], eax
je 0x494134
push edi
add edi, 0x5da7
ror edi, 0x14
pop edi
jl 0x494141
nop
je 0x49414c
lea esp, [esp]
jne 0x49414c
mov edx, 0x6a05cc
push 0
call fcn.004713ac
mov dword [0x461bd4], eax
js 0x49415a
ja 0x49416f
xchg esp, esp
lea ebx, [ebx + 0x7b03]
lea ebx, [ebx - 0x7b03]
xchg edx, eax
xchg edx, eax
jbe 0x49416f
mov ecx, 0x10468
add byte [eax - 0x28], ch
sbb eax, dword [esi]
push 0x104
push 0x461bd8
push 0
call fcn.00492c1d
mov dword [0x461cdc], eax
add esp, 0
jg 0x494190
jle 0x49418c
jle 0x494190
lcall 0, 0x104686e
push 0x104
push 0x461ce0
push 0
call fcn.00486996
mov dword [0x461ee8], eax
xor esi, dword [esp]
xor esi, dword [esp]
std
cld
xor esi, 0
jno 0x4941c6
lea ebx, [ebx + 0x5c9]
lea ebx, [ebx - 0x5c9]
je 0x4941c1
mov edx, edx
jo 0x4941c6
mov edi, 0xfd8405e8
jmp dword [ebx + 0x461eec]
call 0x46c5d0
mov dword [0x461eec], eax
inc esi
dec esi
test ecx, 0x5413
shl esp, 0
cmp edx, dword [esp]
jne 0x4941fb
pushf
and ebx, ebx
ror esi, 0xc
ror esi, 0x14
jb 0x4941ec
push edi
pop edi
popf
xchg edx, ebx
xchg edx, ebx
jg 0x4941f6
jnp 0x4941f8
je 0x4941fb
add eax, 0xffb288e8
jmp dword [ebx + 0x461ef0]
call 0x48f488
mov dword [0x461ef0], eax
lea esi, [esi + 0x50c3]
lea esi, [esi - 0x50c3]
inc esi
dec esi
jo 0x494226
lea esi, [esi + 0xfa8]
lea esi, [esi - 0xfa8]
jb 0x494223
jno 0x494226
mov edi, 0xfe4259e8
jmp dword [ebx + 0x461ef4]
call 0x478484
mov dword [0x461ef4], eax
rol eax, 0xc
ror eax, 0xc
jne 0x494251
pushf
cmp edx, 0x27d4
jl 0x494242
jbe 0x494244
xchg ecx, ecx
popf
jmp 0x49424a
jnp 0x49424c
lea ecx, [ecx]
je 0x494251
mov esi, 0x9ee8f66a
pop ebx
add byte [eax], al
push 0xfffffffffffffff6
call 0x499df6
mov dword [0x461ef8], eax
xor ebx, 0x4994
xor ebx, 0x4994
jl 0x49426b
mov esp, esp
js 0x494274
je 0x494271
jns 0x494274
mov edx, 0x7be8f56a
pop ebx
add byte [eax], al
push 0xfffffffffffffff5
call 0x499df6
mov dword [0x461efc], eax
and edi, edi
jp 0x494284
shr esi, 0
jp 0x49429e
jnp 0x49428b
jb 0x49428d
lea ebx, [ebx + 0x7947]
lea ebx, [ebx - 0x7947]
mov edx, edx
jnp 0x49429e
sub dword [edx - 0xc], 0x5b51e8
add byte [ebx + 0x461f00], ah
push 0xfffffffffffffff4
call 0x499df6
mov dword [0x461f00], eax
and edx, 0xffffffff
rol esi, 0x1c
rol esi, 4
test dword [esp], esi
jl 0x4942b8
jge 0x4942c7
jge 0x4942bc
xchg ebx, edi
xchg ebx, edi
mov esi, esi
mov ecx, ecx
jl 0x4942c7
mov esp, 0xfddf07e8
jmp dword [ebx + 0x461f04]
call 0x4721d3
mov dword [0x461f04], eax
std
cld
jbe 0x4942dd
xchg esi, edx
xchg esi, edx
ja 0x4942dd
add eax, 0x1f0c686a
inc esi
add al, ch
pop esi
mov al, byte [0xe683fffd]
invalid
push 0x461f0c
call 0x46e345
and esi, 0xffffffff
clc
jg 0x4942ed
jno 0x4942f8
mov edx, edx
jno 0x4942f3
nop
jo 0x4942f8
adc dword [edx + 0x461f5068], 0xd877e800
invalid
push 0x461f50
call 0x491b79
std
cld
not edx
not edx
lea edi, [edi + 0x6c57]
lea edi, [edi - 0x6c57]
jbe 0x49431d
nop
jl 0x494319
ja 0x49431d
mov ebp, 0x7af7e8c4
invalid
call 0x47be19
mov word [0x461fb8], ax
shl ebx, 0
std
cld
jns 0x49432f
jnp 0x494338
ja 0x494333
mov esp, esp
jp 0x494338
xor eax, 0xfdcc87e8
jmp dword [ebx + 0x461fbc]
call 0x470fc4
mov dword [0x461fbc], eax
xchg esp, esp
not eax
not eax
stc
lea eax, [eax]
jns 0x494360
pushf
test dword [esp], ebx
jg 0x494354
and ecx, 0xffffffff
popf
jno 0x49435b
jno 0x49435d
js 0x494360
mov edi, 0x7d59e8
add byte [esi - 0x5d], ah
rcr byte [edi], 0x46
add byte [ecx], dh
call 0x49c0be
mov word [0x461fc0], ax
jno 0x49436d
je 0x49437c
pushf
test edx, edi
popf
lea ebx, [ebx]
lea esi, [esi]
jne 0x49437c
mov esi, 0xfe6af7e8
jmp dword [ebx + 0x461fc4]
call 0x47ae78
mov dword [0x461fc4], eax
push 0x24
push 0
push 0x461f94
call fcn.00491fdc
add esp, 0xc
push 0x461f94
call fcn.0046c404
call fcn.00477c0a
test eax, eax
je 0x4943ce
cmp dword [0x461fac], 0x182
je 0x4943c2
cmp dword [0x461fac], 0x1e6
jne 0x4943cc
mov dword [0x468a50], 1
jmp 0x4943fe
xor edx, edx
mov dx, word [0x461f94]
test edx, edx
jne 0x4943f4
xor eax, eax
mov ax, word [0x461fb4]
cmp eax, 5
jge 0x4943f2
mov dword [0x468a50], 1
jmp 0x4943fe
mov dword [0x468a50], 1
mov ecx, dword [0x468a50]
mov dword [0x461fcc], ecx
push 0x190
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
mov dword [0x4620d8], eax
push 0x190
push 0
mov edx, dword [0x4620d8]
push edx
call fcn.00491fdc
add esp, 0xc
cmp dword [0x46527c], 1
jne 0x49456a
push 5
push 0x466f2c
push 0x46525c
call fcn.0049b956
add esp, 0xc
test eax, eax
jne 0x4944b4
push 0xa
call fcn.0047e2be
add esp, 4
test eax, eax
jne 0x4944af
push 0xb
call fcn.0047e2be
add esp, 4
test eax, eax
jne 0x4944af
push 0x14
call fcn.0047e2be
add esp, 4
test eax, eax
jne 0x4944af
mov dword [0x46799c], 0x23
mov dword [0x468a1c], 0x13
mov dword [0x467930], 1
mov dword [0x46713c], 1
jmp fcn.004984e8
jmp 0x49456a
push 5
push 0x466f34
push 0x46525c
call fcn.0049b956
add esp, 0xc
test eax, eax
jne 0x494517
push 0xb
call fcn.0047e2be
add esp, 4
test eax, eax
jne 0x494515
push 0x14
call fcn.0047e2be
add esp, 4
test eax, eax
jne 0x494515
mov dword [0x46799c], 0x23
mov dword [0x468a1c], 0x13
mov dword [0x467930], 1
mov dword [0x46713c], 1
jmp fcn.004984e8
jmp 0x49456a
push 5
push 0x466f3c
push 0x46525c
call fcn.0049b956
add esp, 0xc
test eax, eax
jne 0x49456a
push 0x14
call fcn.0047e2be
add esp, 4
test eax, eax
jne 0x49456a
mov dword [0x46799c], 0x23
mov dword [0x468a1c], 0x13
mov dword [0x467930], 1
mov dword [0x46713c], 1
jmp fcn.004984e8
xchg edx, eax
xchg edx, eax
lea ebx, [ebx + 0x277]
sub ebx, 0x277
jbe 0x494581
jbe 0x49457c
jge 0x49457e
ja 0x494581
call 0xb374ef
push 0x2f
push 0
lea eax, [ebp - 0x1ec]
push eax
call fcn.00491fdc
add esp, 0xc
xor ebx, dword [esp + 0x10]
xor ebx, dword [esp + 0x10]
jnp 0x49459e
js 0x4945a6
xchg ebx, ebx
nop
jns 0x4945a6
sub eax, 0xfe3785c6
invalid
mov byte [ebp - 0x1c9], 0x54
cmc
xor edx, 0x7510
xor edx, 0x7510
cmc
ror esi, 7
rol esi, 7
jp 0x4945dd
pushf
cmp ebx, 0x6ad1
nop
popf
lea ecx, [ecx + 0x7cf5]
lea ecx, [ecx - 0x7cf5]
jnp 0x4945dd
sub eax, 0xfe3385c6
invalid
mov byte [ebp - 0x1cd], 0x78
cld
jno 0x4945f6
lea ecx, [ecx + 0x894]
lea ecx, [ecx - 0x894]
jo 0x4945f6
mov ecx, 0xfe3c85c6
invalid
mov byte [ebp - 0x1c4], 0x75
call 0x494602
lea esp, [esp + 4]
jp 0x494612
ja 0x49460a
lea esp, [esp]
jnp 0x494612
add eax, 0x85c66469
sbb al, 0xfe
invalid
mov byte [ebp - 0x1e4], 0x5e
xchg esp, esp
push edi
pop edi
js 0x49462f
pushf
shl esp, 0
dec ecx
inc ecx
popf
ja 0x49462a
mov edx, edx
jns 0x49462f
mov esp, 0xfe3f85c6
invalid
mov byte [ebp - 0x1c1], 0x75
neg edx
neg edx
lea ebx, [ebx]
lea ebx, [ebx + 0x7cd9]
sub ebx, 0x7cd9
jge 0x494650
jo 0x49464c
jl 0x494650
mov edx, 0x2585c605
invalid
mov byte [ebp - 0x1db], 0x4d
js 0x494659
jo 0x494665
je 0x49465d
jne 0x49465f
xchg edi, eax
xchg edi, eax
jno 0x494665
mov ebp, 0x3a85c68c
invalid
mov byte [ebp - 0x1c6], 0x64
and esi, 0xffffffff
cmc
js 0x494692
pushf
and edx, edx
add esp, 0
call 0x49467e
add esp, 4
ror eax, 0x1d
rol eax, 0x1d
popf
jo 0x49468b
lea esi, [esi]
xchg esi, esi
jns 0x494692
add eax, 0xfe1885c6
invalid
mov byte [ebp - 0x1e8], 0x5a
push edx
add edx, 0x1ab9
ror edx, 8
pop edx
mov edi, edi
ja 0x4946c5
pushf
nop
call 0x4946b0
add esp, 4
ror ebx, 0x11
ror ebx, 0xf
ror ebx, 3
ror ebx, 0x1d
popf
nop
jbe 0x4946c5
mov eax, 0xfe1485c6
invalid
mov byte [ebp - 0x1ec], 0x4c
push ebx
pop ebx
jp 0x4946da
xchg edi, esi
xchg edi, esi
js 0x4946d6
jnp 0x4946da
mov esi, 0x2e85c6fc
invalid
mov byte [ebp - 0x1d2], 0x70
not edx
not edx
ja 0x494701
pushf
ror ebx, 0
push esi
add esi, 0x55a1
ror esi, 0xe
pop esi
add esp, 0
cld
popf
nop
jbe 0x494701
mov ebx, 0xfe1785c6
invalid
mov byte [ebp - 0x1e9], 0x48
not eax
not eax
sub ecx, 0
test edi, 0x331d
jo 0x49473f
pushf
add edi, 0x2d86
sub edi, 0x2d86
or esi, 0
neg ebx
neg ebx
popf
jne 0x494730
lea ecx, [ecx + 0x7538]
lea ecx, [ecx - 0x7538]
jno 0x49473f
mov ebp, 0xfe3085c6
invalid
mov byte [ebp - 0x1d0], 0x47
test ecx, 0x7b0c
test eax, esi
cmp edi, ecx
jle 0x494765
pushf
test esp, 0x1b75
ja 0x49475c
popf
lea edx, [edx]
jle 0x494762
jg 0x494765
mov esi, 0xfe4185c6
invalid
mov byte [ebp - 0x1bf], 0x32
ror esp, 0
jno 0x494771
ror esi, 0
ror edx, 0x16
rol edx, 0x16
jb 0x494792
pushf
dec edx
inc edx
xchg ecx, edi
xchg ecx, edi
shr eax, 0
popf
mov eax, eax
jmp 0x49478d
ja 0x49478f
jae 0x494792
add eax, 0xfe2885c6
invalid
mov byte [ebp - 0x1d8], 0x61
test dword [esp], ecx
jno 0x4947b2
jp 0x4947a0
xchg edx, edx
lea edx, [edx + 0x4562]
lea edx, [edx - 0x4562]
jo 0x4947b2
mov edx, 0x3e85c604
invalid
mov byte [ebp - 0x1c2], 0x74
nop
call 0x4947bf
add esp, 4
jns 0x4947cd
jp 0x4947c6
je 0x4947c8
js 0x4947cd
lcall 0xfe3d, 0x85c66db4
invalid
mov byte [ebp - 0x1c3], 0x77
rol ebx, 0
clc
ja 0x4947e1
js 0x4947dc
nop
jbe 0x4947e1
sub eax, 0x1a85c6d0
invalid
mov byte [ebp - 0x1e6], 0x56
ror esp, 0
cmp esi, dword [esp + 8]
and esp, 0xffffffff
add ecx, dword [esp]
sub ecx, dword [esp]
jb 0x49480d
pushf
jb 0x4947fe
jns 0x494800
jmp 0x494802
xor esp, 0
popf
xchg ebx, ebx
nop
jae 0x49480d
jmp 0xfe68cdd7
mov byte [ebp - 0x1e1], 0x55
lea eax, [eax + 0x62b6]
sub eax, 0x62b6
lea esi, [esi]
jno 0x49483b
pushf
ror edx, 0x18
rol edx, 0x18
ror ebx, 0
ror edx, 0xf
rol edx, 0xf
popf
lea ecx, [ecx]
jo 0x49483b
add eax, 0xfe2d85c6
invalid
mov byte [ebp - 0x1d3], 0x66
ror esi, 0x1d
rol esi, 0x1d
rol eax, 0xa
rol eax, 0x16
xor ebx, edi
xor ebx, edi
jae 0x49485e
xchg ecx, edx
xchg ecx, edx
xchg esp, esp
jb 0x49485e
lcall 0xfffe, 0x3585c660
jmp dword [ebp - 0x15]
mov byte [ebp - 0x1cb], 0x65
jmp 0x494867
js 0x49487f
lea ecx, [ecx + 0x5d2f]
lea ecx, [ecx - 0x5d2f]
jle 0x494877
xchg esp, esp
mov esp, esp
jns 0x49487f
add eax, 0x1e85c600
invalid
mov byte [ebp - 0x1e2], 0x49
ror esp, 0
shr esp, 0
and ecx, ecx
js 0x49489f
pushf
shr esp, 0
mov esi, esi
xchg ebx, ebx
popf
nop
jns 0x49489f
mov esi, 0xfe3985c6
invalid
mov byte [ebp - 0x1c7], 0x70
or edi, edi
jno 0x4948aa
or ebx, ebx
ja 0x4948b8
jp 0x4948b0
jns 0x4948b2
jg 0x4948b4
jbe 0x4948b8
mov edi, 0x2c85c609
invalid
mov byte [ebp - 0x1d4], 0x77
xor esi, 0x1066
xor esi, 0x1066
cmp esp, 0x2d86
jbe 0x4948d3
add edx, 0
je 0x4948eb
pushf
add esp, 0
nop
add esp, 0
or eax, 0
popf
mov eax, eax
jne 0x4948eb
mov edi, 0xfe2685c6
invalid
mov byte [ebp - 0x1da], 0x53
xchg esp, esp
jl 0x4948f6
ror edi, 0x10
ror edi, 0x10
lea ecx, [ecx + 0x7754]
sub ecx, 0x7754
jnp 0x49491c
pushf
xchg esi, edi
xchg esi, edi
lea edx, [edx]
ror esp, 0
popf
jns 0x494919
jp 0x49491c
mov ebx, 0xfe1b85c6
invalid
mov byte [ebp - 0x1e5], 0x48
rol eax, 7
ror eax, 7
ror esi, 7
rol esi, 7
jge 0x494940
pushf
jnp 0x494935
mov esp, esp
popf
lea eax, [eax]
ja 0x49493d
jl 0x494940
mov eax, 0xfe3b85c6
invalid
mov byte [ebp - 0x1c5], 0x68
jbe 0x494949
jns 0x49494b
jne 0x49494d
xchg edi, edi
jne 0x494965
lea edx, [edx]
lea ebx, [ebx + 0xdd8]
lea ebx, [ebx - 0xdd8]
mov eax, eax
je 0x494965
call 0x22cf0fd0
invalid
mov byte [ebp - 0x1de], 0x4d
cmp edx, dword [esp]
jne 0x494971
jnp 0x494982
lea ecx, [ecx + 0x1f23]
lea ecx, [ecx - 0x1f23]
jp 0x494982
call 0xfe6dcf4c
invalid
mov byte [ebp - 0x1dc], 0x58
jnp 0x49498b
je 0x4949a7
pushf
and ecx, ecx
rol eax, 0x1f
ror eax, 0x1f
xor edx, dword [esp]
xor edx, dword [esp]
nop
popf
mov esp, esp
jge 0x4949a4
jne 0x4949a7
mov ebx, 0xfe2385c6
invalid
mov byte [ebp - 0x1dd], 0x55
jno 0x4949b0
cmp esp, 0x7ecf
je 0x4949b8
rol ebx, 1
ror ebx, 1
jb 0x4949c6
jbe 0x4949c0
mov esp, esp
jae 0x4949c6
xor eax, 0x3885c664
invalid
mov byte [ebp - 0x1c8], 0x76
call 0x4949d2
add esp, 4
jne 0x4949d7
jns 0x4949e1
jge 0x4949db
nop
js 0x4949e1
mov ecx, 0x85c6cc3a
xor bh, dh
invalid
mov byte [ebp - 0x1ce], 0x73
mov edi, edi
jmp 0x4949ec
lea ebx, [ebx]
mov eax, eax
jl 0x494a0d
pushf
or edx, edx
js 0x4949f8
push ebx
pop ebx
xor ecx, 0x4a39
xor ecx, 0x4a39
popf
mov eax, eax
jge 0x494a0d
add esi, 0xfffe1685
call dword [ebp - 0x70]
mov byte [ebp - 0x1ea], 0x55
nop
je 0x494a17
jb 0x494a21
xchg edx, eax
xchg edx, eax
mov edx, edx
jae 0x494a21
mov edi, 0x1d85c6b4
invalid
mov byte [ebp - 0x1e3], 0x46
lea edx, [edx]
mov esp, esp
lea esi, [esi + 0x4293]
lea esi, [esi - 0x4293]
jge 0x494a43
mov ecx, ecx
jl 0x494a3e
lea ecx, [ecx]
jl 0x494a43
mov esp, 0xfe2f85c6
invalid
mov byte [ebp - 0x1d1], 0x5e
mov esi, esi
shl edx, 0
shl ebx, 0
jge 0x494a54
js 0x494a68
pushf
jmp 0x494a5a
not edi
not edi
popf
nop
jg 0x494a63
jmp 0x494a65
jns 0x494a68
mov byte [ebp - 0x1e7], 0x43
jl 0x494a71
rol esp, 0
dec esi
inc esi
js 0x494a7f
lea esi, [esi]
js 0x494a7c
jns 0x494a7f
mov byte [ebp - 0x1c0], 0x61
jmp 0x494a88
nop
not edi
not edi
js 0x494a8f
sub eax, 0x65aea3a5
mov dh, 0x99
mov dword [0x99b665ae], eax
sub al, 0xc7
int1
rep outsb dx, byte [esi]
jnp 0x4a5cea
sbb byte [ebp - 0x3798ee53], bh
jecxz 0x4a5d5b
add al, byte [edx + 0x23]
xchg ch, bh
mov ah, 0xd2
adc dword [edx], esi
sbb byte gs:[edi + 0x45b50a93], dh
xlatb
sub eax, 0x21eafa6d
mov eax, dword [0x3003304f]
sbb eax, 0x7b038d51
sub al, 0x20
add bl, al
dec ebx
or cl, byte [0x10b9c743]
jbe 0x4a5d16
mov bh, 0x93
or dh, byte [ebp + 0x6d2dd745]
cli
ljmp 0x3003
inc edi
movsd dword es:[edi], dword [esi]
mov ebx, 0x83604de3
popal
enter 0x12ce, 0xffffffffffffff93
test dword [edx - 0x3a], edx
xchg edi, eax
adc dl, byte [ebx - 0x6839ad7b]
bnd jp 0x4a5cc9
out dx, al
ret 0xe1e4
xlatb
mov cl, 0xd6
add dl, byte [edx + 0x21c3394d]
sahf
out dx, eax
or ah, byte [esi + 0x60]
arpl word [edx + 0x584fbc85], bx
cli
imul esi, dword [edi], 0x2469fecb
sbb bh, ah
stc
rcl byte [ecx + ebx*8]
aam 0x54
inc dword [ecx]
lahf
mov dh, 0xa3
push 0xffffffffffffffad
push es
jp 0x4a5d19
scasb al, byte es:[edi]
std
mov dl, 0x2e
dec esp
ja 0x4a5d9e
fisubr word [bx - 0x6c71]
sbb bl, 0xfc
fbstp tbyte [esi]
cmc
push edx
invalid
jl 0x4a5dd4
cmp dword [edi], 0x71c5894f
invalid
imul ebp, edx, 0x20
sbb bh, byte [esi - 0x39dd5ef9]
cmp ah, ah
setne byte [edi - 0x22bd3ebc]
mov cl, 0
adc byte [edi - 0x7d], ch
in al, 0xf
xchg ebp, eax
pop dword [ecx + eax*8 + 0x42]
fnsave dword [ecx - 0x7c90f000]
sbb ch, byte [eax + 0x7a]
sbb esp, ebp
fiadd word [esp + edi*8]
jno 0x4a5dca
shl byte [edi], 1
xchg edi, eax
push ebx
xor dword [esi - 0x7b], 3
lcall 0x3aa8, 0x1858d337
into
int 0xcd
push ss
ret 0xb2fa