Function at 0x867590
Capabilities:
Create thread
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x858
push ebx
push esi
push edi
mov dword [ebp - 0x14], 0
push 0x100
lea eax, [ebp - 0x114]
push eax
push 0
call dword [sym.imp.kernel32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.kernel32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x114]
push ecx
push 0x940170
lea edx, [ebp - 0x214]
push edx
call fcn.008d54f5
add esp, 0xc
push 0x84
push 0
push 0x95d160
call fcn.008d5570
add esp, 0xc
mov eax, dword [0x8e4ef8]
mov dword [0x95d1ae], eax
mov dword [0x958da4], 0
mov ecx, dword [0x95d1ae]
and ecx, 0x400
test ecx, ecx
je 0x86761b
mov dword [0x958da4], 1
mov dword [0x95f860], 0
mov edx, dword [0x95d1ae]
and edx, 0x200
test edx, edx
je 0x86763f
mov dword [0x95f860], 1
jmp 0x870238
jmp 0x87025f
mov ax, word [0x9585ec]
add ax, 1
mov word [0x9585ec], ax
call fcn.008c4020
call fcn.008c42d0
push 0x800
push 0
push 0x95f8c0
call fcn.008d5570
add esp, 0xc
push 0x8001
call dword [0x962834]
mov dword [0x9585d4], eax
mov ecx, dword [0x95d1ae]
and ecx, 2
test ecx, ecx
je 0x8705e4
push 0x18
push 0x94017c
push 0x95e360
call fcn.008d51c0
add esp, 0xc
mov dword [0x959060], 0x16
jmp 0x8702dd
mov edx, dword [0x959060]
sub edx, 1
mov dword [0x959060], edx
cmp dword [0x959060], 0
jl 0x87030a
mov eax, dword [0x959060]
mov ecx, dword [0x959060]
mov dl, byte [eax + 0x95e360]
xor dl, byte [ecx + 0x95e361]
mov eax, dword [0x959060]
mov byte [eax + 0x95e360], dl
jmp 0x8702ce
push 0x18
push 0x95e360
push 0x95df00
call fcn.008d51c0
add esp, 0xc
mov byte [0x95df18], 0
push 0x9586cc
push 0x20019
push 0
push 0x95df00
push reloc.ijl15.dll_Ordinal_2
call dword [0x959540]
test eax, eax
jne 0x87035c
mov ecx, dword [0x9586cc]
push ecx
call dword [0x9596ac]
mov dword [0x904b64], 1
cmp dword [0x904b64], 0
je 0x8705e4
push 0x934e58
call fcn.008bf1c0
push 0
call dword [0x95bf40]
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 0x8ccd40
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0
mov edx, dword [ebp - 0x218]
mov dword [ebp - 0x248], edx
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 6
mov dword [ebp - 0x238], 0x940198
mov dword [ebp - 0x234], 0x9401a4
lea eax, [ebp - 0x258]
push eax
call dword [0x95eae0]
mov word [ebp - 0x2a4], ax
push 0x10
call dword [0x95e8c0]
mov dword [ebp - 0x230], eax
push 0x11
call dword [0x95e8c0]
mov dword [ebp - 0x25c], eax
mov dword [0x95f87c], 0x12c
mov dword [0x9601a0], 0xc8
mov dword [0x95877c], 0
push 0
mov ecx, dword [ebp - 0x218]
push ecx
push 0
push 0
mov edx, dword [0x9601a0]
push edx
mov eax, dword [0x95f87c]
push eax
mov eax, dword [ebp - 0x25c]
sub eax, dword [0x9601a0]
cdq
sub eax, edx
sar eax, 1
push eax
mov eax, dword [ebp - 0x230]
sub eax, dword [0x95f87c]
cdq
sub eax, edx
sar eax, 1
push eax
push 0x80040000
push 0x9401b0
push 0x9401bc
push 0x80
call dword [0x95ea34]
mov dword [0x95877c], eax
cmp dword [0x95877c], 0
je 0x8705e4
push 0xa
mov ecx, dword [0x95877c]
push ecx
call dword [0x95def0]
lea edx, [ebp - 0x29c]
push edx
mov eax, dword [0x95877c]
push eax
call dword [0x9605b0]
mov dword [ebp - 0x2a0], eax
push 0x95de70
mov ecx, dword [0x95877c]
push ecx
call dword [0x9596a4]
lea edx, [ebp - 0x2b0]
push edx
lea eax, [ebp - 0x2ac]
push eax
call fcn.008bedb0
mov ecx, dword [ebp - 0x2b0]
push ecx
mov edx, dword [ebp - 0x2ac]
push edx
push 0xa
mov eax, dword [0x95f87c]
sub eax, dword [ebp - 0x2ac]
sub eax, 0x14
push eax
mov ecx, dword [ebp - 0x2a0]
push ecx
call fcn.008bee10
push 0x10
push 0x95de70
lea edx, [ebp - 0x228]
push edx
call fcn.008d51c0
add esp, 0xc
mov eax, dword [0x95de7c]
sub eax, dword [0x95de74]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [0x95de74]
lea edx, [ecx + eax - 0x28]
mov dword [ebp - 0x224], edx
push 0x10
lea eax, [ebp - 0x228]
push eax
push 0x95de70
call fcn.008d51c0
add esp, 0xc
push 0x8e43f8
call fcn.008c2b60
push 0x8e43f8
call fcn.008c2ff0
lea ecx, [ebp - 0x29c]
push ecx
mov edx, dword [0x95877c]
push edx
call dword [0x9626e0]
lea eax, [ebp - 0x228]
push eax
mov ecx, dword [0x95877c]
push ecx
call dword [0x9596a4]
push 1
lea edx, [ebp - 0x228]
push edx
mov eax, dword [0x95877c]
push eax
call dword [0x95f898]
mov ecx, dword [0x95877c]
push ecx
call dword [0x95e344]
lea edx, [ebp - 0x22c]
push edx
push 0
push 0
push 0x8cd010
push 0x3e8
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
mov dword [ebp - 0x2a8], eax
mov ax, word [0x9585ec]
add ax, 1
mov word [0x9585ec], ax
call fcn.008d3520
push 0
call fcn.008d3970
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
je 0x870653
mov ecx, dword [ebp - 0x2b4]
push ecx
call fcn.008d5e70
add esp, 4
test eax, eax
jbe 0x870653
push 0x80
mov edx, dword [ebp - 0x2b4]
push edx
push 0x8e35f8
call fcn.008c2c80
push 0
push 0x8e35f8
call fcn.008d3030
push 0x80
push 0x8e35f8
call fcn.008c2a80
push 5
call fcn.008d3970
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
je 0x8706ad
mov eax, dword [ebp - 0x2b4]
push eax
call fcn.008d5e70
add esp, 4
test eax, eax
jbe 0x8706ad
push 0x400
mov ecx, dword [ebp - 0x2b4]
push ecx
push 0x8e46f8
call fcn.008c2c80
push 0
push 0x8e46f8
call fcn.008d3030
push 0x400
push 0x8e46f8
call fcn.008c2a80
push 6
call fcn.008d3970
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
je 0x870707
mov edx, dword [ebp - 0x2b4]
push edx
call fcn.008d5e70
add esp, 4
test eax, eax
jbe 0x870707
push 0x400
mov eax, dword [ebp - 0x2b4]
push eax
push 0x8e4af8
call fcn.008c2c80
push 0
push 0x8e4af8
call fcn.008d3030
push 0x400
push 0x8e4af8
call fcn.008c2a80
push 1
call fcn.008d3970
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
je 0x870761
mov ecx, dword [ebp - 0x2b4]
push ecx
call fcn.008d5e70
add esp, 4
test eax, eax
jbe 0x870761
push 0x80
mov edx, dword [ebp - 0x2b4]
push edx
push 0x8e36f8
call fcn.008c2c80
push 0
push 0x8e36f8
call fcn.008d3030
push 0x80
push 0x8e36f8
call fcn.008c2a80
push 2
call fcn.008d3970
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
je 0x8707bb
mov eax, dword [ebp - 0x2b4]
push eax
call fcn.008d5e70
add esp, 4
test eax, eax
jbe 0x8707bb
push 0x80
mov ecx, dword [ebp - 0x2b4]
push ecx
push 0x8e3778
call fcn.008c2c80
push 0
push 0x8e3778
call fcn.008d3030
push 0x80
push 0x8e3778
call fcn.008c2a80
push 3
call fcn.008d3970
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
je 0x870815
mov edx, dword [ebp - 0x2b4]
push edx
call fcn.008d5e70
add esp, 4
test eax, eax
jbe 0x870815
push 0x80
mov eax, dword [ebp - 0x2b4]
push eax
push 0x8e38f8
call fcn.008c2c80
push 0
push 0x8e38f8
call fcn.008d3030
push 0x80
push 0x8e38f8
call fcn.008c2a80
push 4
call fcn.008d3970
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
je 0x87086f
mov ecx, dword [ebp - 0x2b4]
push ecx
call fcn.008d5e70
add esp, 4
test eax, eax
jbe 0x87086f
push 0x80
mov edx, dword [ebp - 0x2b4]
push edx
push 0x8e3cf8
call fcn.008c2c80
push 0
push 0x8e3cf8
call fcn.008d3030
push 0x80
push 0x8e3cf8
call fcn.008c2a80
call fcn.008d38b0
mov eax, dword [0x95d1ae]
and eax, 0x80
test eax, eax
je 0x870a9f
push 0x8e45f8
call fcn.008c2b60
push 0x8e45f8
lea ecx, [ebp - 0x334]
push ecx
call fcn.008d5d80
add esp, 8
push 0x8e45f8
call fcn.008c2b20
cmp dword [0x904b54], 0
je 0x8708dc
lea edx, [ebp - 0x334]
push edx
push 0x9401c8
push 0x95a800
call fcn.008d54f5
add esp, 0xc
push 0x95a800
push 0
call fcn.0085c920
lea eax, [ebp - 0x334]
push eax
call fcn.008c2bd0
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0
je 0x870a71
push 0xff
push 0x940224
call fcn.0085c880
push eax
mov ecx, dword [ebp - 0x338]
push ecx
call fcn.008c2ce0
push 1
push 0x940234
call fcn.0085c880
push eax
mov edx, dword [ebp - 0x338]
push edx
call fcn.008c2ce0
push 2
push 0x940244
call fcn.0085c880
push eax
mov eax, dword [ebp - 0x338]
push eax
call fcn.008c2ce0
push 5
push 0x940250
call fcn.0085c880
push eax
mov ecx, dword [ebp - 0x338]
push ecx
call fcn.008c2ce0
push 0xd
push 0x940260
call fcn.0085c880
push eax
mov edx, dword [ebp - 0x338]
push edx
call fcn.008c2ce0
push 0x14
push 0x940274
call fcn.0085c880
push eax
mov eax, dword [ebp - 0x338]
push eax
call fcn.008c2ce0
push 0x13
push 0x940284
call fcn.0085c880
push eax
mov ecx, dword [ebp - 0x338]
push ecx
call fcn.008c2ce0
push 0x1a
push 0x940294
call fcn.0085c880
push eax
mov edx, dword [ebp - 0x338]
push edx
call fcn.008c2ce0
push 0x1b
push 0x9402a0
call fcn.0085c880
push eax
mov eax, dword [ebp - 0x338]
push eax
call fcn.008c2ce0
push 0x1c
push 0x9402b0
call fcn.0085c880
push eax
mov ecx, dword [ebp - 0x338]
push ecx
call fcn.008c2ce0
push 0x1d
push 0x9402c0
call fcn.0085c880
push eax
mov edx, dword [ebp - 0x338]
push edx
call fcn.008c2ce0
push 0x1e
push 0x9402cc
call fcn.0085c880
push eax
mov eax, dword [ebp - 0x338]
push eax
call fcn.008c2ce0
push 0x100
push 0x9402dc
call fcn.0085c880
push eax
mov ecx, dword [ebp - 0x338]
push ecx
call fcn.008c2ce0
push 0x101
push 0x9402f4
call fcn.0085c880
push eax
mov edx, dword [ebp - 0x338]
push edx
call fcn.008c2ce0
mov eax, dword [ebp - 0x338]
push eax
call dword [0x9596ac]
jmp 0x870a9f
cmp dword [0x904b54], 0
je 0x870a9f
lea ecx, [ebp - 0x334]
push ecx
push 0x940308
push 0x95a800
call fcn.008d54f5
add esp, 0xc
push 0x95a800
push 0
call fcn.0085c920
jmp 0x879766
mov edx, dword [ebp + 0x10]
push edx
lea eax, [ebp - 0x73c]
push eax
call fcn.008d5d80
add esp, 8
lea ecx, [ebp - 0x73c]
push ecx
call fcn.008df46d
add esp, 4
push 0x940344
call fcn.0085c880
push eax
lea edx, [ebp - 0x73c]
push edx
call fcn.008d68e0
add esp, 8
mov dword [ebp - 0x748], eax
cmp dword [ebp - 0x748], 0
je 0x8798be
mov dword [0x904b54], 1
push 0x940354
call fcn.0085c880
push eax
call fcn.008d5e70
add esp, 4
mov dword [ebp - 0x744], eax
mov eax, dword [ebp - 0x748]
lea ecx, [ebp - 0x73c]
sub eax, ecx
mov edx, dword [ebp + 0x10]
add edx, eax
mov dword [ebp - 0x33c], edx
mov eax, dword [ebp - 0x748]
push eax
call fcn.008d5e70
add esp, 4
sub eax, dword [ebp - 0x744]
mov dword [ebp - 0x740], eax
mov ecx, dword [ebp - 0x740]
push ecx
mov edx, dword [ebp - 0x744]
mov eax, dword [ebp - 0x748]
lea ecx, [eax + edx + 1]
push ecx
mov edx, dword [ebp - 0x748]
push edx
call fcn.008d65a0
add esp, 0xc
mov eax, dword [ebp - 0x740]
push eax
mov ecx, dword [ebp - 0x744]
mov edx, dword [ebp - 0x33c]
lea eax, [edx + ecx + 1]
push eax
mov ecx, dword [ebp - 0x33c]
push ecx
call fcn.008d65a0
add esp, 0xc
mov edx, dword [ebp - 0x740]
mov eax, dword [ebp - 0x748]
lea ecx, [eax + edx - 1]
mov dword [ebp - 0x748], ecx
mov edx, dword [ebp - 0x740]
mov eax, dword [ebp - 0x33c]
lea ecx, [eax + edx - 1]
mov dword [ebp - 0x33c], ecx
mov edx, dword [ebp - 0x744]
add edx, 1
push edx
push 0
mov eax, dword [ebp - 0x748]
push eax
call fcn.008d5570
add esp, 0xc
mov ecx, dword [ebp - 0x744]
add ecx, 1
push ecx
push 0
mov edx, dword [ebp - 0x33c]
push edx
call fcn.008d5570
add esp, 0xc
jmp 0x8798c8
mov dword [0x904b54], 0
mov eax, dword [0x95d1ae]
and eax, 0x40
test eax, eax
je 0x8798de
mov dword [0x904b54], 1
cmp dword [0x904b54], 0
je 0x879af7
push 0x905e90
call fcn.008d2ef0
mov dword [ebp - 0x74c], eax
mov ecx, dword [ebp - 0x74c]
push ecx
call fcn.008d2ee0
push eax
push 0x95f460
call fcn.008d5d80
add esp, 8
mov edx, dword [ebp - 0x74c]
push edx
call fcn.008d2f40
cmp dword [0x9587c8], 0
jne 0x879934
call fcn.008cde90
mov dword [0x9587c8], eax
push 0x80
push 0x8e35f8
lea eax, [ebp - 0x7cc]
push eax
call fcn.008d51c0
add esp, 0xc
mov dword [0x959060], 0x7e
jmp 0x879968
mov ecx, dword [0x959060]
sub ecx, 1
mov dword [0x959060], ecx
cmp dword [0x959060], 0
jl 0x879999
mov edx, dword [0x959060]
mov eax, dword [0x959060]
mov cl, byte [ebp + edx - 0x7cc]
xor cl, byte [ebp + eax - 0x7cb]
mov edx, dword [0x959060]
mov byte [ebp + edx - 0x7cc], cl
jmp 0x879959
mov byte [ebp - 0x74c], 0
mov dword [0x959060], 0x3fe
jmp 0x8799b9
mov eax, dword [0x959060]
sub eax, 1
mov dword [0x959060], eax
cmp dword [0x959060], 0
jl 0x8799e8
mov ecx, dword [0x959060]
mov edx, dword [0x959060]
mov al, byte [ecx + 0x8e46f8]
xor al, byte [edx + 0x8e46f9]
mov ecx, dword [0x959060]
mov byte [ecx + 0x8e46f8], al
jmp 0x8799ac
push 0x400
push 0x8e46f8
lea edx, [ebp - 0x73c]
push edx
call fcn.008d51c0
add esp, 0xc
mov byte [ebp - 0x33c], 0
push 0x44
lea eax, [ebp - 0x7cc]
push eax
lea ecx, [ebp - 0x73c]
push ecx
push 0
call fcn.008c1bd0
cmp eax, 6
je 0x879a47
push 7
call fcn.0085b790
cmp dword [0x904b54], 0
je 0x879a40
push 0x940364
push 4
call fcn.0085c920
push 0
call fcn.008d50de
push 0x958db0
push 0x95dd00
push 0
push 0
push 0
push 1
push 0
push 0
push 0x95f460
push 0
call dword [0x95e300]
cmp eax, 1
jne 0x879af7
mov dword [0x959060], 0x3fe
jmp 0x879a8e
mov edx, dword [0x959060]
sub edx, 1
mov dword [0x959060], edx
cmp dword [0x959060], 0
jl 0x879abb
mov eax, dword [0x959060]
mov ecx, dword [0x959060]
mov dl, byte [eax + 0x8e4af8]
xor dl, byte [ecx + 0x8e4af9]
mov eax, dword [0x959060]
mov byte [eax + 0x8e4af8], dl
jmp 0x879a7f
push 0x400
push 0x8e4af8
lea ecx, [ebp - 0x73c]
push ecx
call fcn.008d51c0
add esp, 0xc
mov byte [ebp - 0x33c], 0
lea edx, [ebp - 0x7cc]
push edx
push 0x34
call fcn.0085c920
lea eax, [ebp - 0x73c]
push eax
push 0x33
call fcn.0085c920
cmp dword [0x904b54], 0
je 0x879b0c
push 0x94036c
push 0
call fcn.0085c920
mov ecx, dword [0x95d1ae]
and ecx, 0x2000
test ecx, ecx
je 0x879b31
cmp dword [0x904b54], 0
je 0x879b31
push 0x940394
push 0
call fcn.0085c920
push 0x919138
call fcn.008d2ef0
mov dword [ebp - 0x7d0], eax
mov edx, dword [ebp - 0x7d0]
push edx
call fcn.008d2ee0
push eax
call fcn.008c1bf0
test eax, eax
je 0x879b86
cmp dword [0x904b54], 0
je 0x879b84
mov eax, dword [0x91913c]
push eax
push 0x9403cc
push 0x95a800
call fcn.008d54f5
add esp, 0xc
push 0x95a800
push 0
call fcn.0085c920
jmp 0x879bb4
cmp dword [0x904b54], 0
je 0x879bb4
mov ecx, dword [0x91913c]
push ecx
push 0x940438
push 0x95a800
call fcn.008d54f5
add esp, 0xc
push 0x95a800
push 0
call fcn.0085c920
mov edx, dword [ebp - 0x7d0]
push edx
call fcn.008d2f40
mov eax, dword [0x95d1ae]
and eax, 0x20
test eax, eax
je 0x879beb
mov dword [0x9352d8], 0
cmp dword [0x904b54], 0
je 0x879beb
push 0x940494
push 0
call fcn.0085c920
mov dword [0x905e04], 0x8e3594
mov dword [0x9627c8], 1
mov ecx, dword [0x9627c8]
mov dword [0x961618], ecx
mov edx, dword [0x961618]
mov dword [0x958d10], edx
mov dword [0x9596a8], 1
mov eax, dword [0x9596a8]
mov dword [0x95dee4], eax
mov ecx, dword [0x95dee4]
mov dword [0x9596c4], ecx
mov dword [0x95f86c], 0x8e2d58
call dword [0x95bf94]
mov dword [0x958590], eax
call dword [0x95e314]
mov dword [0x958598], eax
cmp dword [0x904b54], 0
je 0x879c6c
push 0x94053c
push 2
call fcn.0085c920
push 0xb
push 0x9405c4
push 0x95e360
call fcn.008d51c0
add esp, 0xc
mov dword [0x959060], 9
jmp 0x879c9b
mov edx, dword [0x959060]
sub edx, 1
mov dword [0x959060], edx
cmp dword [0x959060], 0
jl 0x879cc8
mov eax, dword [0x959060]
mov ecx, dword [0x959060]
mov dl, byte [eax + 0x95e360]
xor dl, byte [ecx + 0x95e361]
mov eax, dword [0x959060]
mov byte [eax + 0x95e360], dl
jmp 0x879c8c
push 0xb
push 0x95e360
push 0x95df00
call fcn.008d51c0
add esp, 0xc
mov byte [0x95df0b], 0
push 0x95df00
push 0
push 0
call dword [0x96161c]
mov dword [0x95858c], eax
cmp dword [0x95858c], 0
jne 0x879d31
cmp dword [0x904b54], 0
je 0x879d15
push 0x9405d0
push 0
call fcn.0085c920
cmp dword [0x904b54], 0
je 0x879d2a
push 0x958818
push 4
call fcn.0085c920
push 0
call fcn.008d50de
call dword [0x95de60]
cmp eax, 0xb7
jne 0x879e02
cmp dword [0x95858c], 0
je 0x879d65
mov ecx, dword [0x95858c]
push ecx
call dword [0x959544]
mov edx, dword [0x95858c]
push edx
call dword [0x958d14]
cmp dword [0x958574], 0
je 0x879d7a
mov eax, dword [0x958574]
push eax
call dword [0x958da0]
cmp dword [0x958578], 0
je 0x879d90
mov ecx, dword [0x958578]
push ecx
call dword [0x958da0]
cmp dword [0x95857c], 0
je 0x879da6
mov edx, dword [0x95857c]
push edx
call dword [0x958da0]
cmp dword [0x958580], 0
je 0x879dbb
mov eax, dword [0x958580]
push eax
call dword [0x958da0]
cmp dword [0x958584], 0
je 0x879dd1
mov ecx, dword [0x958584]
push ecx
call dword [0x958da0]
cmp dword [0x904b54], 0
je 0x879de6
push 0x940658
push 0x20
call fcn.0085c920
cmp dword [0x904b54], 0
je 0x879dfb
push 0x95881c
push 4
call fcn.0085c920
push 0
call fcn.008d50de
cmp dword [0x904b54], 0
je 0x879e17
push 0x9406c0
push 2
call fcn.0085c920
jmp 0x882ba8
push 0x85b0c0
push dword fs:[0]
mov eax, dword fs:[0]
mov dword [0x9596bc], eax
mov dword fs:[0], esp
mov eax, 0x8ba318
mov dword [0x958cec], eax
mov dword [0x959064], 0x85b790
cmp dword [0x959064], 0x85b0b0
jbe 0x882bf2
mov dword [ebp - 0x854], 0x85b0b0
jmp 0x882bfe
mov edx, dword [0x959064]
mov dword [ebp - 0x854], edx
mov eax, dword [ebp - 0x854]
mov dword [0x959064], eax
mov dword [0x9586dc], 1
push ebp
mov ebp, esp
pushf
xor byte [ebp - 1], 1
popf
pop ebp
push 0xffffffffffffffff
mov ecx, dword [0x95858c]
push ecx
call dword [0x9603c0]
mov eax, 0x882cb8
mov dword [0x95e9ec], eax
mov eax, 0x89560a
mov dword [0x9627b0], eax
cmp dword [0x904b54], 0
je 0x882c57
push 0x940738
push 2
call fcn.0085c920
cmp dword [0x95877c], 0
je 0x882c79
mov edx, dword [0x95d1ae]
and edx, 2
test edx, edx
je 0x882c79
mov eax, dword [0x95877c]
push eax
call dword [0x95e344]
call fcn.0085bfa0
mov dword [0x95ea80], 0x85b0c0
mov ecx, dword [0x9596bc]
mov dword [0x95bfd4], ecx
call dword [0x95e9f0]
mov dword [0x9587b4], eax
mov edx, dword [0x9587b4]
mov dword [0x9587b0], edx
call fcn.008642f0
mov eax, 2
mov byte [eax], 0x50
mov edi, 0x403000
mov esi, 0x404120
cli
mov dword [eax - 0x3b012156], eax
or ch, byte [eax + 0x69df390a]
push ss
or al, 0x12
jp 0x882d1c
mov bl, 0x8b
dec ecx
fstp st(6)
mov dl, 0x61
lea ebx, [ecx]
invalid
movsd dword es:[edi], dword [esi]
arpl word [ecx + 0x41], bp
dec edx
sbb bl, byte [0xc71d207e]
invalid