Function at 0x1047cbcb
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10298490
push 0x1027fd40
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
mov eax, 0x1910
call fcn.1048b900
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x2c], 0
push 3
push 0
call fcn.10481666
add esp, 8
push 0x10296c80
call dword [fcn.10296080]
mov dword [ebp - 0x28], eax
push 0x10296c60
mov eax, dword [ebp - 0x28]
push eax
call dword [fcn.10296078]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
je 0x1047cc47
push 1
push 0x100
call dword [ebp - 0xec]
push ecx
bswap ecx
not ecx
push eax
not eax
mov eax, 0x6c65696d
xchg ecx, eax
mov ecx, 0xdeadc0de
xchg ecx, eax
not eax
pop eax
not ecx
pop ecx
pushfd
pushal
xor ebx, ebx
je 0x1047cc6a
jmp 0x1047cc8b
xor ebx, ebx
je 0x1047cc6e
jmp 0x1047cc7d
mov ecx, 0x34f9c987
nop
stc
je 0x1047cc81
jmp 0x1047ccb1
xor eax, eax
je 0x1047cc73
mov eax, 0x4840c987
test eax, eax
jne 0x1047cc67
jmp 0xa2ae69f0
popal
popfd
xchg dx, ax
xchg dx, ax
mov eax, eax
mov dword [ebp - 0xe0], 0x94
lea ecx, [ebp - 0xe0]
push ecx
call dword [fcn.1029612c]
jo 0x1047ccb3
jl 0x1047ccb1
jmp 0x1047ccb5
je 0x1047ccae
jmp 0x1047ccae
cmp dword [ebp - 0xd0], 2
jne 0x1047ccc7
add dh, byte [ebp + 9]
mov byte [0x1029a6b0], 1
jmp 0x1047cce3
cmp dword [ebp - 0xdc], 4
jne 0x1047ccde
cmp dword [ebp - 0xd8], 0x5a
jb 0x1047ccde
call fcn.10481241
call fcn.10481317
xor edx, edx
mov dl, byte [0x1029a6b0]
mov al, 0xa6
sub dword [eax], edx
test edx, edx
jne 0x1047ccf5
cli
not esp
not esp
sti
mov eax, dword [0x10296444]
xor eax, dword [0x102963b4]
xor eax, dword [0x10296434]
and eax, 4
test eax, eax
je 0x1047cd14
mov byte [0x1029a671], 1
pushal
xor eax, eax
jne 0x1047cd1b
jmp 0x1047cd30
jmp 0x1047cd50
xor eax, eax
jne 0x1047cd38
jp 0x1047cd2e
jo 0x1047cd32
jmp 0x1047cd33
jb 0x1047cd37
jns 0x1047cd1c
call dword [0x74097900]
invalid
jns 0x1047cd39
je 0x1047cd22
jmp 0x1047ccbb
xchg ebx, ebx
jp 0x1047cd27
mov al, byte [0xf7506133]
ror byte [edi], 1
enter 0x7358, 0
xor esp, dword [ecx + 0x50]
popal
push eax
not eax
bswap eax
pop eax
jae 0x1047cd42
pushfd
pushal
jmp 0x1047cd71
sub edx, edx
jo 0x1047cd57
push cs
jmp 0x1047cd68
xor ecx, ecx
je 0x1047cd4f
jmp 0x1047cd61
adc cl, bh
stc
xor ecx, 3
je 0x1047cce7
jmp 0x1047cd5e
jmp 0x1047cd6c
jae 0x1047cd5a
sbb bl, bl
sbb bl, bl
xor ebx, ebx
jmp 0x1047cd51
jmp 0x1047cd4b
sbb al, 0xdb
jmp 0x1047cd74
jmp 0x1047cd45
popal
popfd
bswap eax
not ecx
bswap eax
not ecx
mov ecx, dword [0x10296444]
xor ecx, dword [0x102963b4]
xor ecx, dword [0x10296434]
and ecx, 0x200
test ecx, ecx
je 0x1047cda1
mov byte [0x1029a673], 1
pushal
xor eax, eax
jne 0x1047cda8
jmp 0x1047cdbd
jmp 0x1047cddd
xor eax, eax
jne 0x1047cdc5
jp 0x1047cdbb
jo 0x1047cdbf
jmp 0x1047cdc0
jb 0x1047cdc4
jns 0x1047cda9
call dword [0x74097900]
invalid
jns 0x1047cdc6
je 0x1047cdaf
jmp 0x1047cd48
xchg ebx, ebx
jp 0x1047cdb4
mov al, byte [0x6a6133]
xor esp, dword [ecx + 0x6a]
add bh, bh
adc eax, 0x10296050
popal
push 0
call dword [0x10296050]
mov edx, dword [0x102963d0]
xor edx, dword [0x102963b4]
xor edx, dword [0x10296418]
sbb byte [ecx + ebp + 0x10], ah
add eax, edx
mov dword [0x1029a684], eax
push ecx
bswap ecx
not ecx
push eax
not eax
mov eax, 0x6c65696d
xchg ecx, eax
mov ecx, 0xdeadc0de
xchg ecx, eax
not eax
pop eax
not ecx
pop ecx
pushfd
pushal
xor ebx, ebx
je 0x1047ce0b
jmp 0x1047ce2c
xor ebx, ebx
je 0x1047ce0f
jmp 0x1047ce1e
mov ecx, 0x34f9c987
nop
stc
je 0x1047ce22
jmp 0x1047ce52
xor eax, eax
je 0x1047ce14
mov eax, 0x4840c987
test eax, eax
jne 0x1047ce08
jmp 0xa2ae6b91
popal
popfd
xchg dx, ax
xchg dx, ax
mov eax, eax
mov eax, dword [0x102963ec]
xor eax, dword [0x102963f8]
xor eax, dword [0x10296434]
add eax, 0xfff
shr eax, 0xc
mov dword [0x1029a698], eax
jo 0x1047ce5b
jl 0x1047ce59
jmp 0x1047ce5d
je 0x1047ce56
jmp 0x1047ce56
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x104], 0xffffffff
push ecx
bswap ecx
not ecx
push eax
not eax
mov eax, 0x6c65696d
xchg ecx, eax
mov ecx, 0xdeadc0de
xchg ecx, eax
not eax
pop eax
not ecx
pop ecx
pushfd
pushal
xor ebx, ebx
je 0x1047ce91
jmp 0x1047ceb2
xor ebx, ebx
je 0x1047ce95
jmp 0x1047cea4
mov ecx, 0x34f9c987
nop
stc
je 0x1047cea8
jmp 0x1047ced8
xor eax, eax
je 0x1047ce9a
mov eax, 0x4840c987
test eax, eax
jne 0x1047ce8e
jmp 0xa2ae6c17
popal
popfd
xchg dx, ax
xchg dx, ax
mov eax, eax
push 0
call dword [0x1029615c]
add esp, 4
mov esi, eax
call dword [0x1029603c]
xor esi, eax
xor esi, dword [0x10296418]
push esi
lea ecx, [ebp - 0x324]
call fcn.104544d0
pushal
xor eax, eax
jne 0x1047cee8
fdiv st(4), st(0)
invalid
jmp 0x1047cefd
jmp 0x1047cf1d
xor eax, eax
jne 0x1047cf05
jp 0x1047cefb
jo 0x1047ceff
jmp 0x1047cf00
jb 0x1047cf04
jns 0x1047cee9
call dword [0x74097900]
invalid
jns 0x1047cf06
je 0x1047ceef
jmp 0x1047ce88
xchg ebx, ebx
jp 0x1047cef4
mov al, byte [0x8d8d6133]
fdiv st(4), st(0)
invalid
xor esp, dword [ecx - 0x73]
invalid
popal
lea ecx, [ebp - 0x324]
call fcn.104544f0
mov dword [ebp - 0x38], eax
jo 0x1047cf1e
jl 0x1047cf1c
jmp 0x1047cf20
je 0x1047cf19
sti
jmp 0x1047cf19
push ecx
bswap ecx
not ecx
push eax
not eax
mov eax, 0x6c65696d
xchg ecx, eax
mov ecx, 0xdeadc0de
xchg ecx, eax
not eax
pop eax
not ecx
pop ecx
pushfd
pushal
xor ebx, ebx
je 0x1047cf43
jmp 0x1047cf64
xor ebx, ebx
je 0x1047cf47
jmp 0x1047cf56
mov ecx, 0x34f9c987
nop
stc
je 0x1047cf5a
jmp 0x1047cf8a
xor eax, eax
je 0x1047cf4c
mov eax, 0x4840c987
test eax, eax
jne 0x1047cf40
jmp 0xa2ae6cc9
popal
popfd
xchg dx, ax
xchg dx, ax
mov eax, eax
push eax
not eax
bswap eax
pop eax
jae 0x1047cf74
pushfd
pushal
jmp 0x1047cfa3
sub edx, edx
jo 0x1047cf89
jmp 0x1047cf9a
xor ecx, ecx
je 0x1047cf81
jmp 0x1047cf93
stc
xor ecx, 3
je 0x1047cf19
jmp 0x1047cf90
add eax, 0x7410ebb9
out dx, eax
jmp 0x1047cf9e
jae 0x1047cf8c
sbb bl, bl
sbb bl, bl
xor ebx, ebx
jmp 0x1047cf83
jmp 0x1047cf7d
sbb al, 0xdb
jmp 0x1047cfa6
jmp 0x1047cf77
popal
popfd
bswap eax
not ecx
bswap eax
not ecx
mov dword [ebp - 0x31c], 0xc
jo 0x1047cfc3
jl 0x1047cfc1
jmp 0x1047cfc5
je 0x1047cfbe
jmp 0x1047cfbe
mov dword [ebp - 0x318], 0
pushal
xor eax, eax
jne 0x1047cfd6
jmp 0x1047cfeb
jmp 0x1047d00b
xor eax, eax
jne 0x1047cff3
jp 0x1047cfe9
jo 0x1047cfed
jmp 0x1047cfee
jb 0x1047cff2
jns 0x1047cfd7
call dword [0x74097900]
invalid
jns 0x1047cff4
je 0x1047cfdd
jmp 0x1047cf76
xchg ebx, ebx
jp 0x1047cfe2
mov al, byte [0x85c76133]
in al, dx
xor esp, dword [ecx - 0x39]
test esp, ebp
popal
mov dword [ebp - 0x314], 1
push eax
not eax
bswap eax
pop eax
jae 0x1047d007
cld
invalid
pushfd
pushal
jmp 0x1047d036
sub edx, edx
jo 0x1047d01c
sal byte [eax + 0xe], cl
jmp 0x1047d02d
xor ecx, ecx
je 0x1047d014
jmp 0x1047d026
stc
xor ecx, 3
je 0x1047cfac
jmp 0x1047d023
jmp 0x1047d031
jae 0x1047d01f
sbb bl, bl
sbb bl, bl
xor ebx, ebx
jmp 0x1047d016
jmp 0x1047d010
sbb al, 0xdb
jmp 0x1047d039
jmp 0x1047d00a
popal
popfd
bswap eax
not ecx
bswap eax
not ecx
push 0
push 0x1000
push 0
push 4
lea ecx, [ebp - 0x31c]
push ecx
push 0xffffffffffffffff
call dword [0x1029610c]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jne 0x1047d073
xor al, al
jmp 0x1047fa77
call dword [0x10296108]
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x328], 0
push 2
push 1
push 0
lea edx, [ebp - 0x328]
push edx
mov eax, dword [ebp - 0x320]
push eax
mov ecx, dword [ebp - 0x320]
push ecx
mov edx, dword [ebp - 0x320]
push edx
call dword [0x10296104]
push 0x1000
push 0
push 0
push 2
mov eax, dword [ebp - 0x104]
push eax
call dword [0x10296100]
mov dword [0x1029a694], eax
xor ecx, ecx
mov cl, byte [0x1029a29c]
test ecx, ecx
je 0x1047d0ed
lea ecx, [ebp - 0x324]
call fcn.104544f0
mov dword [ebp - 0x191c], eax
jmp 0x1047d0f6
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x191c], edx
mov eax, dword [ebp - 0x191c]
xor eax, dword [0x102963f8]
xor eax, dword [0x10296428]
xor eax, dword [0x10296440]
xor eax, dword [0x10296430]
xor eax, dword [0x10296424]
mov ecx, dword [0x1029a694]
mov dword [ecx], eax
mov edx, dword [0x1029a694]
mov eax, dword [ebp - 0x328]
mov dword [edx + 4], eax
call dword [0x10296134]
mov ecx, dword [0x1029a694]
mov dword [ecx + 8], eax
mov edx, dword [0x1029a694]
mov dword [edx + 0x20], 0
mov eax, dword [ebp - 0x104]
push eax
push 0x10296394
lea ecx, [ebp - 0x310]
push ecx
call dword [0x10296174]
add esp, 0xc
lea edx, [ebp - 0x310]
push edx
push 0x10296c5c
call dword [0x10296064]
push ecx
bswap ecx
not ecx
push eax
not eax
mov eax, 0x6c65696d
xchg ecx, eax
mov ecx, 0xdeadc0de
xchg ecx, eax
not eax
pop eax
not ecx
pop ecx
pushfd
pushal
xor ebx, ebx
je 0x1047d19e
jmp 0x1047d1bf
xor ebx, ebx
je 0x1047d1a2
jmp 0x1047d1b1
mov ecx, 0x34f9c987
nop
stc
je 0x1047d1b5
jmp 0x1047d1e5
xor eax, eax
je 0x1047d1a7
mov eax, 0x4840c987
test eax, eax
jne 0x1047d19b
jmp 0xa2ae6f24
popal
popfd
xchg dx, ax
xchg dx, ax
mov eax, eax
mov eax, dword [0x1029a698]
shl eax, 2
push eax
call fcn.1048b8dc
add esp, 4
mov dword [ebp - 0x18e4], eax
mov ecx, dword [ebp - 0x18e4]
mov dword [0x1029a6a0], ecx
or eax, 0x1029a6a0
mov edx, dword [0x1029a698]
shl edx, 4
shl edx, 2
push edx
call fcn.1048b8dc
add esp, 4
mov dword [ebp - 0x18e8], eax
mov eax, dword [ebp - 0x18e8]
mov dword [0x1029a67c], eax
mov ecx, dword [0x1029a698]
shl ecx, 2
push ecx
call fcn.1048b8dc
add esp, 4
mov dword [ebp - 0x18ec], eax
mov edx, dword [ebp - 0x18ec]
mov dword [0x1029a6a4], edx
mov eax, dword [0x1029a698]
shl eax, 2
push eax
call fcn.1048b8dc
add esp, 4
mov dword [ebp - 0x18f0], eax
mov ecx, dword [ebp - 0x18f0]
mov dword [0x1029a6a8], ecx
push 0x1000
call fcn.1048b8dc
test dword [eax], edx
out 0xff, eax
dec dword [ebx - 0x18ef73]
dec dword [ecx + 0x29a6a80d]
adc byte [eax], ch
adc byte [eax], al
add al, ch
jnp 0x1047d245
add byte [eax], al
add esp, 4
mov dword [ebp - 0x18f4], eax
mov edx, dword [ebp - 0x18f4]
mov dword [0x1029a6ac], edx
mov eax, dword [0x1029a698]
shl eax, 2
push eax
call fcn.1048b8dc
add esp, 4
mov dword [ebp - 0x18f8], eax
mov ecx, dword [ebp - 0x18f8]
mov dword [0x1029a678], ecx
push eax
not eax
bswap eax
pop eax
jae 0x1047d2a1
pushfd
pushal
jmp 0x1047d2d0
sub edx, edx
jo 0x1047d2b6
jmp 0x1047d2c7
xor ecx, ecx
je 0x1047d2ae
jmp 0x1047d2c0
stc
xor ecx, 3
je 0x1047d246
jmp 0x1047d2bd
jmp 0x1047d2cb
jae 0x1047d2b9
sbb bl, bl
sbb bl, bl
xor ebx, ebx
jmp 0x1047d2b0
jmp 0x1047d2aa
sbb al, 0xdb
jmp 0x1047d2d3
jmp 0x1047d2a4
popal
popfd
bswap eax
not ecx
bswap eax
not ecx
mov edx, dword [0x10296428]
xor edx, dword [ebp - 0x38]
push edx
lea ecx, [ebp - 0x24]
call fcn.104544d0
mov dword [ebp - 0x4c], 0
jmp 0x1047d301
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x4c], eax
mov ecx, dword [0x1029a698]
shl ecx, 4
cmp dword [ebp - 0x4c], ecx
jge 0x1047d343
lea ecx, [ebp - 0x24]
call fcn.104544f0
xor eax, dword [0x102963f8]
xor eax, dword [0x10296428]
xor eax, dword [0x10296440]
xor eax, dword [0x10296430]
xor eax, dword [0x10296424]
mov edx, dword [ebp - 0x4c]
mov ecx, dword [0x1029a67c]
mov dword [ecx + edx*4], eax
jmp 0x1047d2f8
pushal
xor eax, eax
jne 0x1047d34a
jmp 0x1047d35f
jmp 0x1047d37f
xor eax, eax
jne 0x1047d367
jp 0x1047d35d
jo 0x1047d361
jmp 0x1047d362
jb 0x1047d366
jns 0x1047d34b
call dword [0x74097900]
invalid
jns 0x1047d368
je 0x1047d351
jmp 0x1047d2ea
xchg ebx, ebx
jp 0x1047d356
mov al, byte [0x45c76133]
xor esp, dword [ecx - 0x39]
inc ebp
popal
mov dword [ebp - 0x48], 0
mov eax, 0
jmp 0x1047d37b
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x48]
cmp eax, dword [0x1029a698]
add eax, 0x1029a698
jge 0x1047d3c7
mov ecx, dword [ebp - 0x48]
mov edx, dword [0x1029a6a0]
mov dword [edx + ecx*4], 0xffffffff
mov eax, dword [ebp - 0x48]
mov ecx, dword [0x1029a6a4]
mov dword [ecx + eax*4], 0
mov edx, dword [ebp - 0x48]
mov eax, dword [0x1029a6a8]
mov dword [eax + edx*4], 0xffffffff
mov ecx, dword [ebp - 0x48]
mov edx, dword [0x1029a678]
mov dword [edx + ecx*4], 0
jmp 0x1047d372
push ecx
bswap ecx
not ecx
push eax
not eax
mov eax, 0x6c65696d
xchg ecx, eax
mov ecx, 0xdeadc0de
xchg ecx, eax
not eax
pop eax
not ecx
pop ecx
pushfd
pushal
xor ebx, ebx
je 0x1047d3ea
jmp 0x1047d40b
xor ebx, ebx
je 0x1047d3ee
jmp 0x1047d3fd
mov ecx, 0x34f9c987
nop
stc
je 0x1047d401
jmp 0x1047d431
xor eax, eax
je 0x1047d3f3
mov eax, 0x4840c987
test eax, eax
jne 0x1047d3e7
jmp 0xa2ae7170
popal
popfd
xchg dx, ax
xchg dx, ax
mov eax, eax
mov eax, dword [0x1029a698]
sar eax, 1
add eax, 1
mov dword [0x10296794], eax
xor ecx, ecx
adc byte [ebx], dh
leave
mov cl, byte [0x1029a672]
test ecx, ecx
jne 0x1047d474
jo 0x1047d437
jl 0x1047d435
add ebp, ebx
add eax, 0xebfb74e8
stc
cmp dword [0x10296794], 6
jae 0x1047d44c
jmp 0x1047d432
mov dword [0x10296794], 6
pushal
xor eax, eax
jne 0x1047d453
jmp 0x1047d468
jmp 0x1047d488
xor eax, eax
jne 0x1047d470
jp 0x1047d466
jo 0x1047d46a
jmp 0x1047d46b
jb 0x1047d46f
jns 0x1047d454
call dword [0x74097900]
invalid
jns 0x1047d471
je 0x1047d45a
jmp 0x1047d3f3
xchg ebx, ebx
jp 0x1047d45f
mov al, byte [0x62eb6133]
xor esp, dword [ecx - 0x15]
bound edx, qword [eax - 9]
ror byte [edi], 1
enter 0x7358, 0
popal
jmp 0x1047d4d6
push eax
not eax
bswap eax
pop eax
jae 0x1047d47c
pushfd
pushal
jmp 0x1047d4ab
sub edx, edx
jo 0x1047d491
jmp 0x1047d4a2
xor ecx, ecx
je 0x1047d489
add bl, ch
adc cl, bh
jmp 0x1047d49b
stc
xor ecx, 3
je 0x1047d421
jmp 0x1047d498
jmp 0x1047d4a6
jae 0x1047d494
sbb bl, bl
sbb bl, bl
xor ebx, ebx
jmp 0x1047d48b
jmp 0x1047d485
sbb al, 0xdb
jmp 0x1047d4ae
jmp 0x1047d47f
popal
popfd
bswap eax
not ecx
bswap eax
not ecx
cmp dword [0x10296794], 0x12
jae 0x1047d4cb
mov dword [0x10296794], 0x12
jo 0x1047d4d4
jl 0x1047d4d2
jmp 0x1047d4cf