Function at 0x402f00
Capabilities:
Terminate process

Disassembly:
pop esi
repne movsb byte es:[edi], byte [esi]
call 0x4027a5
mov ebx, 0xa2a1de0
push 0x9dbd95a6
call ebp
cmp al, 6
jl 0x4027a0
cmp bl, 0xe0
jne 0x4027a0
mov ebx, 0x6f721347
push 0
push ebx
call ebp
xor eax, eax
push eax
push eax
push eax
push ebx
push eax
push eax
push 0x160d6838
call ebp
pop eax
pop eax
popal
jmp 0x4028b8
bound esi, qword [ebp + 0x66]
and byte [0x22622020], bh
and cl, byte [edx]
bound esi, qword [ebp + 0x66]
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x402933
bound ebx, qword [eax + edi*2 + 0x64]
pop esp
js 0x402939
cmp byte [eax + edi*2 + 0x66], bl
pop esp
js 0x402943
xor dword [eax + edi*2 + 0x36], ebx
popal
pop esp
js 0x402949
xor byte [eax + edi*2 + 0x64], bl
cmp dword [eax + edi*2 + 0x37], ebx
xor al, 0x5c
js 0x402925
xor al, 0x5c
js 0x40295d
xor al, 0x5c
js 0x402930
bound esp, qword [edx]
or ah, byte [edx + 0x75]
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x40293c
cmp dword [eax + edi*2 + 0x63], ebx
cmp dword [eax + edi*2 + 0x62], ebx
xor dword [eax + edi*2 + 0x35], ebx
xor dword [eax + edi*2 + 0x33], ebx
xor dword [eax + edi*2 + 0x34], ebx
xor ebx, dword [eax + edi*2 + 0x31]
cmp byte [eax + edi*2 + 0x38], bl
xor ebx, dword [eax + edi*2 + 0x63]
cmp byte [ebx], dh
pop esp
js 0x40298d
xor ebx, dword [eax + edi*2 + 0x30]
xor al, 0x5c
js 0x402962
xor ebx, dword [eax + edi*2 + 0x34]
pop esp
js 0x40296a
xor esp, dword [edx]
or ah, byte [edx + 0x75]
and byte [ebx], ch
bound esi, qword [ebp + 0x66]
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x4029aa
cmp dword [eax + edi*2 + 0x33], ebx
xor ebx, dword [eax + edi*2 + 0x39]
pop sp
js 0x402987
popal
pop esp
js 0x4029b9
xor eax, 0x3930785c
pop esp
js 0x402996
aaa
pop esp
js 0x402998
pop esp
pop esp
js 0x4029c7
aaa
pop esp
js 0x4029cf
pop esp
pop esp
js 0x4029a5
xor dword [eax + edi*2 + 0x66], ebx
and cl, byte fs:[edx]
bound esi, qword [ebp + 0x66]
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x4029b1
xor ebx, dword [eax + edi*2 + 0x30]
pop esp
js 0x4029be
cmp dword ss:[eax + edi*2 + 0x64], ebx
cmp dword [eax + edi*2 + 0x64], ebx
aaa
pop esp
js 0x4029c9
xor bl, byte [eax + edi*2 + 0x35]
arpl word [eax + edi*2 + 0x63], bx
js 0x4029fb
xor byte [eax + edi*2 + 0x31], bl
pop esp
js 0x4029d4
arpl word [eax + edi*2 + 0x38], bx
pop esp
pop esp
js 0x4029dd
pop esp
js 0x402a0e
xor byte [edx], ah
or ah, byte [edx + 0x75]
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x4029f2
xor byte [eax + edi*2 + 0x62], bl
bound ebx, qword [eax + edi*2 + 0x33]
bound esp, qword [edx + 0x5c]
js 0x4029f6
xor byte [eax + edi*2 + 0x35], bl
xor al, 0x5c
js 0x402a04
pop esp
js 0x402a31
xor al, 0x5c
js 0x402a0a
cmp byte [eax + edi*2 + 0x31], bl
pop esp
js 0x402a08
pop esp
js 0x402a41
arpl word [eax + edi*2 + 0x33], bx
js 0x402a12
xor dword [eax + edi*2 + 0x65], ebx
xor al, 0x5c
js 0x402a1e
xor ah, byte [edx]
or ah, byte [edx + 0x75]
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x402a26
and bl, byte [eax + edi*2 + 0x30]
xor byte [eax + edi*2 + 0x39], bl
popal
pop esp
js 0x402a60
pop sp
js 0x402a64
cmp byte [eax + edi*2 + 0x30], bl
js 0x402a36
cmp byte [eax + edi*2 + 0x35], bl
js 0x402a3f
pop esp
js 0x402a72
pop esp
js 0x402a45
pop esp
js 0x402a78
xor eax, 0x3931785c
pop esp
js 0x402a50
xor al, 0x5c
js 0x402a88
popal
and cl, byte [edx]
bound esi, qword [ebp + 0x66]
jne 0x402a8e
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x402a6a
xor al, 0x5c
js 0x402a6e
arpl word [eax + edi*2 + 0x36], bx
pop esp
js 0x402a6f
aaa
pop esp
js 0x402a6f
bound ebx, qword [eax + edi*2 + 0x37]
js 0x402a78
arpl word [eax + edi*2 + 0x63], bx
pop sp
js 0x402a7b
xor dword [eax + edi*2 + 0x66], ebx
xor al, 0x5c
js 0x402ab5
pop sp
pop sp
js 0x402a8d
aaa
pop esp
js 0x402abe
pop esp
js 0x402a91
xor dword [edx], esp
or ah, byte [edx + 0x75]
and byte [ebx], ch
bound esi, qword [ebp + 0x66]
and byte [ebx], ch
sub edi, dword [0x5c226220]
cmp eax, 0x5c226220
js 0x402aa2
xor bl, byte [eax + edi*2 + 0x63]
js 0x402ad3
arpl word [ecx], si
pop esp
xor dword [eax + edi*2 + 0x33], ebx
js 0x402aa7
xor ebx, dword [eax + edi*2 + 0x31]
popal
pop esp
js 0x402ade
bound edi, qword [eax]
pop esp
js 0x402ab4
cmp byte [eax + edi*2 + 0x34], bl
xor eax, 0x6437785c
pop esp
js 0x402ac1
cmp dword [eax + edi*2 + 0x35], ebx
xor bl, byte [eax + edi*2 + 0x65]
pop esp
js 0x402af5
pop esp
pop esp
js 0x402af8
xor eax, 0x6131785c
and cl, byte [edx]
bound esi, qword [ebp + 0x66]
and byte [ebx], ch
cmp eax, 0x5c226220
bound esp, qword [edx]
pop esp
js 0x402b0a
pop sp
js 0x402adc
pop esp
js 0x402ae7
xor eax, 0x3665785c
pop esp
js 0x402aed
xor eax, 0x3635785c
pop esp
js 0x402b24
pop esp
pop esp
js 0x402af5
xor dword [eax + edi*2 + 0x38], ebx
pop esp
js 0x402b2e
xor bl, byte [eax + edi*2 + 0x35]
bound ebx, qword [eax + edi*2 + 0x62]
and cl, byte gs:[edx]
bound esi, qword [ebp + 0x66]
and byte [ebx], ch
cmp eax, 0x5c226220
and byte [edx + 0x22], ah
pop esp
and bl, byte [eax + edi*2 + 0x32]
js 0x402b14
cmp dword [eax + edi*2 + 0x31], ebx
xor al, 0x5c
pop esp
js 0x402b4d
xor byte [eax + edi*2 + 0x65], bl
aaa
aaa
pop esp
js 0x402b29
xor dword [eax + edi*2 + 0x61], ebx
popal
pop esp
js 0x402b2d
xor al, 0x5c
js 0x402b36
xor ebx, dword [eax + edi*2 + 0x62]
pop esp
js 0x402b3a
arpl word [eax + edi*2 + 0x35], bx
cmp dword [eax + edi*2 + 0x33], ebx
cmp byte [edx], ah
or ah, byte [edx + 0x75]
and byte [ebx], ch
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x402b56
aaa
pop esp
js 0x402b53
pop esp
js 0x402b58
xor esi, dword [edx]
pop esp
js 0x402b5e
xor bl, byte [eax + edi*2 + 0x35]
xor dword [eax + edi*2 + 0x37], ebx
popal
pop esp
js 0x402b65
xor bl, byte [eax + edi*2 + 0x66]
aaa
pop esp
js 0x402b6f
pop sp
pop esp
js 0x402ba2
xor bl, byte [eax + edi*2 + 0x38]
xor dword [eax + edi*2 + 0x30], ebx
arpl word [eax + edi*2 + 0x32], bx
and cl, byte gs:[edx]
bound esi, qword [ebp + 0x66]
jne 0x402bb5
and byte [ebx], ch
cmp eax, 0x5c226220
bound esp, qword [edx]
pop esp
js 0x402bbc
pop esp
js 0x402bc0
pop esp
js 0x402b94
popal
pop esp
js 0x402bca
xor dword [eax + edi*2 + 0x35], ebx
pop esp
js 0x402b9d
xor bl, byte [eax + edi*2 + 0x62]
xor bl, byte [eax + edi*2 + 0x38]
cmp dword [eax + edi*2 + 0x38], ebx
cmp byte [ecx], bh
pop esp
js 0x402bac
pop sp
js 0x402bde
pop sp
js 0x402be1
xor al, 0x5c
js 0x402bb6
cmp byte [eax + edi*2 + 0x38], bl
aaa
and cl, byte [edx]
bound esi, qword [ebp + 0x66]
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x402bc6
xor ebx, dword [eax + edi*2 + 0x37]
pop esp
js 0x402bce
pop esp
js 0x402bd1
xor bl, byte [eax + edi*2 + 0x61]
js 0x402c00
pop esp
js 0x402c04
popal
popal
pop esp
js 0x402bdc
xor ebx, dword [eax + edi*2 + 0x36]
xor al, 0x5c
pop esp
js 0x402c10
arpl word [eax + edi*2 + 0x32], bx
xor ebx, dword [eax + edi*2 + 0x33]
js 0x402bea
xor esp, dword [ebp + 0x5c]
pop esp
js 0x402c1c
bound ebx, qword [eax + edi*2 + 0x30]
pop esp
js 0x402bef
xor esp, dword [edx]
or ah, byte [edx + 0x75]
and byte [ebx], ch
and cl, byte [edx]
bound esi, qword [ebp + 0x66]
and byte [ebx], ch
sub edi, dword [0x5c226220]
cmp eax, 0x5c226220
and bl, byte [eax + edi*2 + 0x32]
js 0x402c00
xor al, 0x5c
js 0x402c34
bound esp, qword [ebx + 0x5c]
js 0x402c0b
arpl word [eax + edi*2 + 0x35], bx
pop sp
js 0x402c0d
xor al, 0x5c
js 0x402c42
cmp dword [eax + edi*2 + 0x38], ebx
xor ebx, dword [eax + edi*2 + 0x65]
cmp byte [ebx], dh
pop esp
js 0x402c4b
cmp byte [eax + edi*2 + 0x38], bl
pop esp
js 0x402c21
aaa
pop esp
js 0x402c28
cmp dword [eax + edi*2 + 0x32], ebx
pop esp
js 0x402c30
and cl, byte fs:[edx]
bound esi, qword [ebp + 0x66]
and byte [ebx], ch
cmp eax, 0x5c226220
bound esp, qword [edx]
pop esp
js 0x402c3e
pop esp
js 0x402c3f
cmp dword [eax + edi*2 + 0x33], ebx
xor ebx, dword [eax + edi*2 + 0x61]
xor esi, dword [ebx]
pop esp
js 0x402c76
cmp byte [eax + edi*2 + 0x38], bl
xor al, 0x5c
js 0x402c7f
bound edi, qword [ecx]
pop esp
js 0x402c5a
cmp dword [eax + edi*2 + 0x39], ebx
arpl word [eax + edi*2 + 0x32], bx
xor bl, byte [eax + edi*2 + 0x66]
xor eax, 0x3066785c
pop esp
js 0x402c62
xor ax, 0x785c
xor byte [eax + edi*2 + 0x31], bl
xor dword [esi + 0x5c], esp
pop sp
js 0x402c69
xor al, 0x34
and cl, byte [edx]
bound esi, qword [ebp + 0x66]
and byte [ebx], ch
xor al, 0x22
or ah, byte [edx + 0x75]
and byte [ebx], ch
cmp eax, 0x5c226220
and byte [edx + 0x22], ah
bound esp, qword [edx]
pop esp
js 0x402ca6
xor dword [eax + edi*2 + 0x38], ebx
aaa
pop esp
js 0x402cae
bound esi, qword [0x3066785c]
xor eax, 0x3066785c
pop esp
js 0x402c88
xor dword [eax + edi*2 + 0x66], ebx
xor al, 0x5c
js 0x402c8c
pop esp
js 0x402c93
popal
pop esp
js 0x402c94
pop esp
js 0x402cc9
pop esp
pop esp
js 0x402ccf
arpl word [eax + edi*2 + 0x38], bx
popal
and cl, byte [edx]
bound esi, qword [ebp + 0x66]
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x402cb6
xor eax, 0x6263785c
pop esp
js 0x402cea
bound ebx, qword [eax + edi*2 + 0x30]
pop esp
js 0x402cbb
cmp dword [eax + edi*2 + 0x39], ebx
pop esp
js 0x402cc8
xor al, 0x5c
js 0x402cf4
popal
pop esp
js 0x402cf8
pop esp
js 0x402cd4
bound ebx, qword [eax + edi*2 + 0x31]
xor eax, 0x6233785c
pop esp
js 0x402d0a
arpl word [eax], si
pop esp
js 0x402cdc
xor byte [eax + edi*2 + 0x31], bl
and cl, byte ss:[edx]
bound esi, qword [ebp + 0x66]
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x402d1f
and bl, byte [eax + edi*2 + 0x65]
xor dword [eax + edi*2 + 0x39], ebx
pop esp
js 0x402cf7
xor eax, 0x3966785c
pop esp
js 0x402cfd
xor dword [eax + edi*2 + 0x31], ebx
js 0x402cfb
xor dword [ebx + 0x5c], esp
js 0x402d00
arpl word [eax + edi*2 + 0x32], bx
cmp dword [eax + edi*2 + 0x33], ebx
pop esp
js 0x402d05
pop esp
js 0x402d07
xor al, 0x5c
js 0x402d12
xor byte [eax + edi*2 + 0x39], bl
js 0x402d17
pop esp
js 0x402d43
bound ebx, qword [eax + edi*2 + 0x36]
xor esp, dword [edx]
or ah, byte [edx + 0x75]
and byte [ebx], ch
jne 0x402d52
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x402d29
xor al, 0x63
pop esp
arpl word [eax + edi*2 + 0x63], bx
js 0x402d5c
arpl word [ecx], di
pop esp
cmp dword [eax + edi*2 + 0x65], ebx
js 0x402d62
aaa
pop esp
js 0x402d62
popal
xor byte [eax + edi*2 + 0x37], bl
aaa
pop esp
js 0x402d6e
xor byte [eax + edi*2 + 0x30], bl
pop esp
js 0x402d3d
aaa
pop esp
js 0x402d47
pop esp
pop esp
js 0x402d7b
aaa
pop esp
js 0x402d7d
xor al, 0x5c
js 0x402d83
xor dword [eax + edi*2 + 0x30], ebx
js 0x402d51
cmp dword [edx], esp
or ah, byte [edx + 0x75]
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x402d95
pop esp
js 0x402d65
xor al, 0x5c
js 0x402d71
arpl word [eax + edi*2 + 0x64], bx
xor al, 0x5c
pop esp
js 0x402d73
arpl word [eax + edi*2 + 0x39], bx
arpl word [eax + edi*2 + 0x65], bx
cmp dword [ebx + 0x5c], esp
js 0x402dad
cmp dword gs:[eax + edi*2 + 0x62], ebx
cmp dword [eax + edi*2 + 0x62], ebx
pop esp
js 0x402db3
pop esp
pop esp
js 0x402d85
cmp dword [eax + edi*2 + 0x34], ebx
arpl word [eax + edi*2 + 0x37], bx
and cl, byte ss:[edx]
bound esi, qword [ebp + 0x66]
and byte [ebx], ch
cmp eax, 0x5c226220
and byte [edx + 0x22], ah
pop esp
js 0x402dd0
pop esp
js 0x402da2
xor esp, dword [ebp + 0x5c]
pop esp
js 0x402dd8
xor eax, 0x6463785c
pop esp
js 0x402db4
xor byte [eax + edi*2 + 0x39], bl
js 0x402db8
pop esp
js 0x402db6
xor dword [eax + edi*2 + 0x62], ebx
js 0x402de9
xor ebx, dword [eax + edi*2 + 0x37]
arpl word [eax + edi*2 + 0x32], bx
pop esp
js 0x402dc6
bound ebx, qword [eax + edi*2 + 0x65]
js 0x402dfc
and cl, byte [edx]
bound esi, qword [ebp + 0x66]
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x402e0b
and bl, byte [eax + edi*2 + 0x65]
xor ebx, dword [eax + edi*2 + 0x35]
aaa
pop esp
js 0x402de5
aaa
xor byte [eax + edi*2 + 0x38], bl
pop sp
pop esp
js 0x402deb
aaa
pop esp
js 0x402e1e
pop esp
js 0x402df2
cmp dword [eax + edi*2 + 0x39], ebx
cmp dword [eax + edi*2 + 0x37], ebx
pop sp
js 0x402dfe
xor bl, byte [eax + edi*2 + 0x38]
cmp byte [eax + edi*2 + 0x37], bl
js 0x402e09
and cl, byte ss:[edx]
bound esi, qword [ebp + 0x66]
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x402e1a
popal
pop esp
js 0x402e18
pop esp
js 0x402e4d
xor al, 0x5c
js 0x402e25
pop esp
js 0x402e56
xor byte [eax + edi*2 + 0x36], bl
pop esp
js 0x402e2b
xor eax, 0x3334785c
pop esp
js 0x402e62
arpl word gs:[eax + edi*2 + 0x31], bx
arpl word [eax + edi*2 + 0x31], bx
pop esp
js 0x402e32
xor bl, byte [eax + edi*2 + 0x64]
arpl word [eax + edi*2 + 0x37], bx
pop esp
js 0x402e44
bound esp, qword [edx]
or ah, byte [edx + 0x75]
and byte [ebx], ch
cmp eax, 0x5c226220
and bl, byte [eax + edi*2 + 0x39]
js 0x402e55
popal
pop esp
js 0x402e59
xor dword [eax + edi*2 + 0x63], ebx
cmp dword [eax + edi*2 + 0x61], ebx
pop esp
js 0x402e89
popal
pop esp
js 0x402e61
xor eax, 0x37785c62
bound ebx, qword [eax + edi*2 + 0x37]
aaa
pop esp
js 0x402e98
arpl word [eax + edi*2 + 0x37], bx
xor bl, byte [eax + edi*2 + 0x34]
arpl word [eax + edi*2 + 0x37], bx
xor bl, byte [eax + edi*2 + 0x39]
aaa
pop esp
js 0x402e7d
and cl, byte fs:[edx]
bound esi, qword [ebp + 0x66]
and byte [ebx], ch
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x402e87
xor byte [esp + ebx*2 + 0x78], ah
cmp byte [edx + 0x5c], ah
js 0x402e91
pop esp
js 0x402e93
bound ebx, qword [eax + edi*2 + 0x32]
pop esp
js 0x402ec9
cmp byte [eax + edi*2 + 0x39], bl
cmp byte [eax + edi*2 + 0x39], bl
xor al, 0x5c
js 0x402e9d
xor dword [eax + edi*2 + 0x31], ebx
pop sp
js 0x402ed4
popal
pop esp
js 0x402ea9
pop esp
js 0x402eae
pop esp
js 0x402eb2
xor al, 0x5c
js 0x402ee4
bound esp, qword [edx]
or ah, byte [edx + 0x75]
and byte [ebx], ch
jne 0x402eef
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x402ef5
arpl word [ecx], si
xor dword [eax + edi*2 + 0x66], ebx
pop esp
js 0x402efc
pop sp
js 0x402efd
xor byte [eax + edi*2 + 0x32], bl
cmp dword [eax + edi*2 + 0x64], ebx
xor bh, byte [ecx]
pop esp
js 0x402f06
pop esp
js 0x402edb
cmp dword [eax + edi*2 + 0x64], ebx
popal
popal
pop esp
js 0x402f14
pop esp
js 0x402f13
xor byte [eax + edi*2 + 0x64], bl
xor byte [eax + edi*2 + 0x32], bl
pop esp
js 0x402f23
bound esp, qword [edx]
or ah, byte [edx + 0x75]
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x402f01
and bl, byte [eax + edi*2 + 0x34]
cmp dword [eax + edi*2 + 0x65], ebx
pop sp
js 0x402f09
xor al, 0x33
pop esp
js 0x402f3f
xor ebx, dword [eax + edi*2 + 0x66]
pop esp
js 0x402f3f
xor ebx, dword [eax + edi*2 + 0x66]
xor byte [eax + edi*2 + 0x33], bl
pop esp
xor esi, dword [esi]
pop esp
js 0x402f22
cmp byte [eax + edi*2 + 0x64], bl
pop esp
js 0x402f29
pop esp
js 0x402f2d
xor dword [eax + edi*2 + 0x64], ebx
xor al, 0x22
or ah, byte [edx + 0x75]
and byte [ebx], ch
invalid
bound esi, qword [ebp + 0x66]
jne 0x402f65
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x402f39
cmp byte [eax + edi*2 + 0x33], bl
pop esp
js 0x402f3f
xor ebx, dword [eax + edi*2 + 0x39]
xor bl, byte [eax + edi*2 + 0x61]
popal
pop esp
js 0x402f4f
xor byte [eax + edi*2 + 0x31], bl
bound ebx, qword [eax + edi*2 + 0x39]
xor dword [eax + edi*2 + 0x39], ebx
js 0x402f5d
cmp dword [esp + ebx*2], esi
xor al, 0x5c
js 0x402f59
pop esp
pop esp
js 0x402f8e
cmp byte [eax + edi*2 + 0x39], bl
pop esp
js 0x402f69
aaa
pop esp
js 0x402f67
popal
and cl, byte [edx]
bound esi, qword [ebp + 0x66]
and byte [ebx], ch
and byte [ebx], ch
cmp eax, 0x5c226220
js 0x402fa4
and bl, byte [eax + edi*2 + 0x61]
pop esp
js 0x402faa
xor al, 0x5c
js 0x402fae
xor eax, 0x3461785c
pop esp
xor al, 0x5c
js 0x402fb9
aaa
pop esp
js 0x402f90
bound ebx, qword [eax + edi*2 + 0x63]
js 0x402fbe
pop esp
js 0x402f8f
pop esp
js 0x402f9c
aaa
pop esp
js 0x402fc8
xor eax, 0x3131785c
pop esp
js 0x402fd3
js 0x402f9c
xor dword [eax + edi*2 + 0x64], ebx
and cl, byte gs:[edx]
pop edi
mov dword [ebp + 9], eax
lcall 0xd544, 0x6816c7c0
inc eax
add byte [eax], dh
adc eax, 0xd9c14c
add esp, 0xffffffe2
push 0x4b
call dword [sym.imp.MSVCRT.dll_exit]
inc eax
add byte [eax + 0x14], ch
aad 0x79
mov edi, 0x4a15ff7d
stosd dword es:[edi], eax
jle 0x402f9c
push 0xbf79d514
jge 0x402f96
call dword [0x7eab4a]
adc eax, 0x7eab4a
mov eax, dword [0x4102ac]
les ebx, fs:[esi - 0x7b]
rol bh, 0xa2
hlt
test eax, eax
invalid
add byte [esi], al
cmovg eax, dword [0x2e000001]
dec edi
add eax, 0x2e000001
imul byte [esi + 0x57410bc8]
push edi
mov ecx, dword [eax + ecx*4 - 0x10]
mov edx, dword [edx + ebp*8]
push ecx
lea eax, [ebp - 0x7900bc]
jmp 0x4192181d
inc ecx
cmp ch, byte [edx]
push 0x3e8
mov ecx, dword [esi + edi + 0x1c]
mov edx, dword [esi + edi + 0x10]
mov eax, dword [esi + edi + 0x14]
fimul word [ebp - 0x73]
mov ecx, dword [eax + edx*4 + 8]
mov ebx, dword [esi + edi + 0x18]
mov dword [ebp - 0x30], edx
mov edx, dword [ebp + 0xc]
or edi, 0x1f4
mov dword [ebp + 0xd2b8d4], eax
push edx
push ecx
call fcn.0040b590
mov eax, dword [edx - 0x74afad24]
ret