Function at 0x409e80
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x461ea1
mov eax, dword fs:[0]
push eax
sub esp, 0x358
mov eax, dword [0x474860]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x2ec], esi
mov eax, dword [ebp + 0x14]
mov ebx, dword [ebp + 0x1c]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x320], ebx
mov dword [ebp - 0x300], eax
mov dword [ebp - 4], 2
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
test eax, eax
jne 0x409f02
retf
call edi
cmp eax, 5
ja 0x409f46
sub byte [edx - 0x2a], dl
invalid
lea ecx, [ebp + 0x10]
call fcn.0040cbb0
test al, al
jne 0x409f95
push 0
lea ecx, [ebp + 0x10]
call fcn.0040cb90
cmp ax, 0x2f
je 0x409f95
lea eax, [ebp + 0x10]
push eax
mov edx, 0x46cf68
lea ecx, [ebp - 0x348]
call fcn.0040cad0
add esp, 4
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 3
call fcn.00406fd0
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 2
call fcn.00406fb0
cmp dword [ebp - 0x31c], 0
je 0x409fa9
mov byte [ebp - 0x2e6], 1
test ebx, ebx
jne 0x409fb0
mov byte [ebp - 0x2e6], 0
call edi
cmp eax, 4
ja 0x409fea
mov eax, 0x15bcea5e
or bl, ch
inc ecx
scasb al, byte es:[edi]
or esi, dword [ebp - 0xa9a8d9a]
not byte [ebx]
rol byte [0x27bf5b08], cl
and eax, ebx
cwde
lodsb al, byte [esi]
cmpsb byte [esi], byte es:[edi]
inc edx
inc ebp
push 0x63f56367
wait
lcall 0x45b4, 0xd8f6d11a
adc ebx, dword [ebp - 0x2d]
and dword [0xff5157ce], edx
xlatb
call edi
cmp eax, 9
ja 0x40a056
pop dword [edi + 0x32a139fb]
xchg edx, eax
jmp 0x40a05e
mov dword [ebp - 0x2e4], 0
add byte [eax], al
call edi
cmp eax, 4
ja 0x40a09a
xchg edx, eax
lds edx, [esi + 0x13]
mov esi, 0x47e76c8a
and dword [edi - 0x7f], ecx
jmp 0x5c415c9f
mov dword [ebp - 0x224], 0
call edi
cmp eax, 9
ja 0x40a110
mov dword [ebx + 0x51], ebp
scasd eax, dword es:[edi]
pop eax
aas
push esp
push 0x18
outsb dx, byte [esi]
mov ebp, 0x729dec89
ljmp 0xd9f1
xor ebx, ebx
mov dword [ebp - 0x30c], ebx
call edi
cmp eax, 4
ja 0x40a152
xchg edx, eax
mov edi, 0x97a4dcfe
xchg dword [ecx + 0x7d], ecx
in al, 0x58
int1
ja 0x40a196
mov bh, 0x52
push ds
dec esp
mov ebp, 0x511d8a6c
fsubp st(4)
adc al, 0x57
dec esp
lcall 0xb20, 0x324
xor eax, 0x21bb98e0
outsb dx, byte [esi]
cmp dword [edi], esi
int 0x4e
xor ch, cl
invalid
call edi
test eax, eax
jne 0x40a16d
cmovb edx, dword [edx]
push ss
mov eax, dword [0x70e93d6b]
imul eax, dword [ecx + 0x24], 0xc8a45425
adc edi, dword [edi]
add al, 0x8c
bound ecx, qword [ecx - 0x31363]
invalid
mov dword [ebp - 0x314], ebx
call edi
cmp eax, 5
ja 0x40a1b7
invalid
inc edx
jp 0x40a147
insd dword es:[edi], dx
dec ebx
iretd
mov dword [ebp - 0x304], ebx
call edi
test eax, eax
jne 0x40a1d8
and eax, 0x25f0d970
leave
or ch, bl
lds esi, [ebx - 0x71]
aam 0x97
mov byte [ecx], bh
or dword [esi + 0x3345e4c1], ebx
shr byte [eax + 6], 2
add byte [eax], al
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x21c], ax
lea eax, [ebp - 0x21a]
push eax
call fcn.0044b2e0
add esp, 0xc
call edi
cmp eax, 6
ja 0x40a244
jne 0x40a1da
cli
sbb edx, edi
mov ebp, dword [ecx - 0x78]
mov dl, 0x95
cli
push cs
mov edx, 0x1e1dfec
sbb ecx, dword [edx - 0x391c4a8a]
inc edi
sti
add ah, dl
jecxz 0x40a21f
in eax, 0xe7
wait
inc ebx
xor ebx, dword [0xa2c8f4e3]
rcl byte [ebx], 0x3c
jne 0x40a21b
push ebx
add byte [esi*2 - 0x5074c210], bh
or al, 0xc7
cmp eax, 0xc70caf8b
pop dword [eax]
inc esi
xlatb
push 0xffffffffffffff8e
ja 0x40a226
or eax, 0xea3c6bda
jo 0x40a29d
mov ecx, cs
mov byte [0x88d8b96], al
std
invalid
mov ecx, dword [ebp - 0x2f8]
call fcn.00407120
push eax
lea eax, [ebp - 0x21c]
push 0x103
push eax
call fcn.00448820
add esp, 0xc
call edi
cmp eax, 1
ja 0x40a280
mov al, 0x32
sub dword [ecx], eax
mov bh, 0x87
sub esi, dword [0x49a63aab]
push ss
cmp al, 0x12
ljmp 0xe8cc
call fcn.0041cbb0
mov eax, dword [eax + 0x1b0]
lea ecx, [ebp - 0x21c]
push ecx
call eax
call edi
cmp eax, 6
ja 0x40a2e2
add cl, byte [esi + ebx*4 + 0x2129cbcb]
outsd dx, dword [esi]
xchg esi, eax
fdivp st(2)
cmp ebp, dword [edi - 0x24]
movsd dword es:[edi], dword [esi]
mov dl, bl
out 0xec, al
retf 0xb10a
sahf
retf
mov byte [ebp - 0x2e5], 1
call edi
cmp eax, 6
ja 0x40a337
scasb al, byte es:[edi]
and byte [eax], 0x25
in eax, 0xea
add dword [ecx + 0x49], edi
invalid
mov dword [ebp - 0x228], ebx
call edi
cmp eax, 3
ja 0x40a36d
mov ebx, 0x726fc5c0
aad 0x1c
in eax, 0xe0
pop esp
push ebx
sbb ebp, ebx
jae 0x40a2f1
mov byte [ebx + 0x2fbf7b21], 0x97
in al, 0x61
in al, dx
mov ch, 0xc9
xor bh, byte [eax]
sar byte [ebp - 0xf4c953a], 1
loope 0x40a3ad
jecxz 0x40a3c8
fmul st(3), st(0)
lea eax, [ebp - 0x228]
push eax
push ecx
lea eax, [ebp + 0x10]
mov ecx, esp
mov dword [ebp - 0x2f4], esp
push eax
call fcn.00406ee0
push ecx
mov byte [ebp - 4], 4
lea eax, [ebp + 0xc]
mov ecx, esp
mov dword [ebp - 0x318], esp
push eax
call fcn.00406ee0
push ecx
lea eax, [ebp + 8]
mov ecx, esp
push eax
mov byte [ebp - 4], 5
call fcn.00406ee0
mov ecx, esi
into
mov byte [ebp - 4], 2
call fcn.00404e70
call edi
cmp eax, 8
ja 0x40a419
sub byte [edx + ecx*2 + 0x56], al
dec eax
fcmovnu st(0), st(3)
out 0x16, al
inc ecx
xor byte [ebp + 0x12cfb3ab], 0xf4
add ch, byte [edx + 0x1b446d6b]
lodsb al, byte [esi]
sub ecx, edx
or eax, 0x20
push ebx
hlt
mov dword [ebp - 0x310], 0
call edi
cmp eax, 4
ja 0x40a45d
add byte [ebp - 1], 0xa6
pop edi
xchg edi, eax
je 0x40a474
xlatb
mov cl, bl
jmp 0xd94bf057
push 0x46cfb4
lea ecx, [ebp - 0x2e0]
call fcn.0040dcb0
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 6
inc ebp
cld
push es
lea edx, [ecx + 2]
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40a480
sub ecx, edx
sar ecx, 1
je 0x40a4c7
call fcn.0041cbb0
mov eax, dword [eax + 0x28c]
lea ecx, [ebp - 0x21c]
push ecx
call eax
test eax, eax
jne 0x40a4c7
invalid
call fcn.0041cbb0
mov eax, dword [eax + 0x238]
push 0
lea ecx, [ebp - 0x21c]
push ecx
call eax
test eax, eax
je 0x40bb6b
call fcn.0041cbb0
mov eax, dword [eax + 0x1f0]
push 0
push 0
push 0
push 0
push 0x46cf6c
call eax
mov dword [ebp - 0x308], eax
test eax, eax
jne 0x40a511
xor bl, bl
call edi
test eax, eax
jne 0x40bb71
mov dword [edi], esp
out dx, eax
arpl word [eax - 0x5c2fc665], dx
xchg edi, eax
jecxz 0x40a53a
mov dl, bl
sbb byte [edi + 0x3b], 0x81
nop
jno 0x40a49d
jmp 0x40bb71
mov dword [ebp - 0x250], 0
call fcn.0041cbb0
mov eax, dword [eax + 0x21c]
push 4
lea ecx, [ebp - 0x250]
push ecx
push 0x58
push dword [ebp - 0x308]
call eax
push ecx
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.00406ee0
mov ecx, esi
call fcn.0040c690
movzx esi, ax
mov dword [ebp - 0x318], esi
mov dword [ebp - 0x24c], 0xa8
call fcn.0041cbb0
push 4
mov eax, dword [eax + 0x21c]
lea ecx, [ebp - 0x24c]
push ecx
push 0x54
push dword [ebp - 0x308]
call eax
mov eax, 0x1bb
mov byte [ebp - 0x2ed], 0
cmp si, ax
jne 0x40a5bd
mov byte [ebp - 0x2ed], 1
mov dword [ebp - 0x248], 1
call fcn.0041cbb0
mov eax, dword [eax + 0x21c]
push 4
lea ecx, [ebp - 0x248]
push ecx
push 0x1f
push dword [ebp - 0x308]
call eax
call fcn.0041cbb0
push 0
push dword [ebp - 0x318]
lea ecx, [ebp + 0xc]
lea esi, [eax + 0x1f4]
call fcn.00407120
push eax
push dword [ebp - 0x308]
mov eax, dword [esi]
call eax
mov dword [ebp - 0x318], eax
test eax, eax
jne 0x40a61a
xor al, al
mov byte [ebp - 0x2e5], al
call edi
cmp eax, 1
ja 0x40bb4b
sbb al, 0x27
lodsb al, byte [esi]
sbb eax, dword [edi]
or bl, byte [ebx + 0x4d]
clc
in eax, 4
invalid
call fcn.004300d0
push eax
lea ecx, [ebp - 0x298]
call fcn.00402480
mov byte [ebp - 4], 7
cld
pop es
call fcn.0041cbb0
lea esi, [eax + 0x1f8]
xor eax, eax
cmp byte [ebp - 0x2ed], al
mov ecx, 0x800000
cmovne eax, ecx
push eax
push 0
push 0
push 0
lea ecx, [ebp + 0x10]
call fcn.00407120
push eax
lea ecx, [ebp - 0x298]
call fcn.00401e00
push eax
push dword [ebp - 0x318]
mov eax, dword [esi]
call eax
mov dword [ebp - 0x2fc], eax
test eax, eax
jne 0x40a6d0
xor al, al
mov byte [ebp - 0x2e5], al
call edi
cmp eax, 4
ja 0x40a6bc
outsb dx, byte [esi]
sbb dl, byte [ecx + 0x28]
lahf
imul byte [edi + 0x43b6c076]
jg 0x40a62d
wait
cwde
mov al, 0xaf
xchg ecx, eax
cmp eax, 0x2361a071
sti
nop
sub byte [esi + 0x69], al
cli
or byte [edi - 0x6e251ee], cl
pop ss
sbb dword [ebx - 0x4938c70c], esi
pop es
in al, dx
imul edi, dword es:[eax - 0x4fa47250], 0xfd688d8d
invalid
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 6
call fcn.00401eb0
jmp 0x40bb38
mov esi, dword [ebp - 0x2ec]
push 0
lea eax, [ebp - 0x280]
push eax
mov ecx, esi
call fcn.00409460
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 8
call fcn.00407130
test al, al
jne 0x40a727
call fcn.0041cbb0
push 0x20000000
push 0xffffffffffffffff
lea ecx, [ebp - 0x280]
lea esi, [eax + 0x210]
call fcn.00401e00
push eax
push dword [ebp - 0x2fc]
mov eax, dword [esi]
call eax
mov esi, dword [ebp - 0x2ec]
call fcn.0041cbb0
mov eax, dword [eax + 0x1fc]
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x2fc]
call eax
cmp eax, 1
je 0x40a77d
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor al, al
mov byte [ebp - 0x2e5], al
call edi
test eax, eax
jne 0x40bb0b
lahf
jl 0x40a6fe
sbb eax, dword [ebx + 0x26]
sbb al, 0x4e
stosd dword es:[edi], eax
sub al, 0x8d
lodsb al, byte [esi]
mov ebp, 0xceca29ac
into
jp 0x40a773
sal dword [eax - 0x17], 1
mov ss, word [ebx]
add byte [eax], al
call fcn.0041cbb0
mov eax, dword [eax + 0x200]
push 0
push dword [ebp - 0x2fc]
call eax
mov dword [ebp - 0x2f4], eax
call edi
cmp eax, 3
ja 0x40a7c8
lodsd eax, dword [esi]
push edi
and al, 0x8b
pop esi
jg 0x40a7e9
mov al, 0xac
mov byte [0xf03a9f0], al
nop
push ebp
lahf
cmpsb byte [esi], byte es:[edi]
sal dword [ebx + 0x3c978c4b], cl
outsd dx, dword [esi]
and al, 0xa
jbe 0x40a805
cmp ecx, dword [edi]
invalid
cmp dword [ebp - 0x2f4], 0
je 0x40bab9
mov dword [ebp - 0x244], 0
call edi
cmp eax, 1
ja 0x40a7fb
dec esp
inc ebx
mov eax, 0xd8492fbd
add ebp, dword [ebp + 0x6fdfa91f]
sbb dword [esi], esi
mov ebp, 0x3d8492f
fadd dword [ebx]
lodsd eax, dword [esi]
pop ds
test eax, 0x36196fdf
invalid
mov byte [ebp - 0x21d], 0
call edi
cmp eax, 6
clc
push es
ja 0x40a850
jbe 0x40a7ec
cmp byte [ecx], ah
lea eax, [edx]
out 0x1e, al
mov edx, 0xf243cf4e
hlt
jle 0x40a844
cmp eax, 0xa03ac7a8
popfd
invalid
invalid
lea eax, [ebp - 0x21d]
push eax
lea eax, [ebp - 0x244]
push eax
push dword [ebp - 0x2fc]
lea eax, [ebp - 0x268]
push eax
mov ecx, esi
call int.004079e0
mov byte [ebp - 4], 0xd
call edi
cmp eax, 1
ja 0x40a892
mov edx, 0xb457ca3b
adc dword [ecx - 0x631c6999], 3
leave
jae 0x40a840
mov byte [0xd099f97a], al
xchg edx, eax
lea eax, [ebp - 0x268]
push eax
mov ecx, esi
mov byte [ebp - 0x21d], 0
call int.004088d0
mov ecx, dword [ebp - 0x300]
mov dword [ecx], eax
mov dword [ebp - 0x228], eax
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x2b0]
push eax
mov ecx, esi
call fcn.00408c40
push dword [ebp + 0x20]
mov byte [ebp - 4], 0xe
push dword [ebp - 0x244]
mov ecx, esi
call fcn.00408170
test al, al
je 0x40add3
mov eax, dword [ebp - 0x300]
mov ecx, esi
mov dword [eax], 0
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x2c8]
push eax
mov dword [ebp - 0x228], 0
call fcn.00408570
push 1
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 0xf
call fcn.00404e60
push 0x46cd04
lea ecx, [ebp - 0x238]
call fcn.00406f00
mov byte [ebp - 4], 0x10
call edi
cmp eax, 9
ja 0x40a9a2
or dword [edx + 0x6471e976], ebx
pop edx
mov dh, 0xd4
sbb cl, ch
dec ebx
xchg esp, eax
mov al, byte [0x42f5ff35]
cmp ch, byte [ebx - 0x80]
jne 0x40a9b9
fldenv [esi - 0x5906a80c]
adc ah, dh
salc
mov cl, 0x4d
or dword fs:[ebx + 0x25], ecx
and al, 0x2c
hlt
push 1
lea ecx, [ebp - 0x230]
call fcn.00404e60
push 0x46cd04
lea ecx, [ebp - 0x230]
call fcn.00406f00
mov byte [ebp - 4], 0x11
call edi
cmp eax, 4
ja 0x40a9fd
invalid
jns 0x40a9d3
out dx, eax
jae 0x40aa33
xchg esi, esp
pushal
pop esi
xchg esi, eax
pop es
push esp
shr edi, 0xaf
test ah, bh
sbb eax, 0x3e9e71cd
cwde
invalid
push 1
lea ecx, [ebp - 0x23c]
call fcn.00404e60
push 0x46cd04
lea ecx, [ebp - 0x23c]
call fcn.00406f00
mov byte [ebp - 4], 0x12
call edi
cmp eax, 9
ja 0x40aa8a
or ebp, dword [ecx + 0x27203494]
and dword [esi - 0x736092a4], esi
sub eax, 0x78d98643
add al, 0x95
xchg cl, bl
js 0x40aa3b
xchg ebp, eax
test dword [ebx + 0x1369cef5], 0xd111c2d5
into
imul edx, dword [ebx], 0xd111c2d5
mov ch, 0xe
mov dword [0x5a260af2], eax
pop ss
add dword [ecx - 0x16], edx
jb 0x40aa61
cmc
mov ch, 0x2b
fcom dword [0x18200241]
ljmp 0xaaa4
xor eax, eax
pop esp
jo 0x40aad6
ljmp 0x69f:0xe676737c
call fcn.0041cbb0
cmp dword [eax + 4], 0
je 0x40aab3
call fcn.0041cbb0
lea ecx, [ebp - 0x2c8]
lea esi, [eax + 4]
call fcn.00401e00
push eax
mov eax, dword [esi]
call eax
mov esi, dword [ebp - 0x2ec]
push 1
lea ecx, [ebp - 0x234]
call fcn.00404e60
lea ecx, [ebp - 0x2c8]
call fcn.00401e00
push eax
lea ecx, [ebp - 0x234]
call fcn.00406f00
mov byte [ebp - 4], 0x13
call edi
inc esi
inc ebp
cld
adc edi, edi
xlatb
cmp eax, 8
ja 0x40ab3d
adc byte [ecx], 0xf2
jg 0x40ab66
std
mov bh, 0xda
stosd dword es:[edi], eax
clc
or byte [edx - 0x3e524049], 0x1c
mov bl, 0xa7
xchg edx, eax
mov cl, 0x22
adc eax, 0x53c87b55
dec esp
invalid
lea eax, [ebp - 0x23c]
push eax
push ecx
lea eax, [ebp - 0x234]
mov ecx, esp
push eax
call fcn.00406ee0
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x238]
call fcn.0040e140
add esp, 8
test al, al
je 0x40ad3f
or byte [eax + eax*8 + 0x1d0840f], al
add byte [eax], al
push 1
lea ecx, [ebp - 0x22c]
call fcn.00404e60
push 0x46cd04
lea ecx, [ebp - 0x22c]
call fcn.00406f00
mov byte [ebp - 4], 0x14
call edi
cmp eax, 5
ja 0x40abd4
loopne 0x40ac15
and dword [eax - 0x6d], edi
adc dword [edx + 0x644d77a7], ebx
or byte [edi - 0x1a], dl
xor al, 0xa
xor eax, 0x3112c5e1
invalid
push ecx
lea eax, [ebp - 0x234]
mov ecx, esp
push eax
call fcn.00406ee0
lea ecx, [ebp - 0x22c]
call fcn.0040e600
add esp, 4
test al, al
je 0x40ac70
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x328]
call fcn.00406f00
push 0x46cfec
mov edx, eax
lea ecx, [ebp - 0x33c]
mov byte [ebp - 4], 0x15
call fcn.00407040
add esp, 4
lea ecx, [ebp - 0x22c]
push ecx
mov edx, eax
lea ecx, [ebp - 0x344]
mov byte [ebp - 4], 0x16
call fcn.0040ca10
add esp, 4
mov ecx, dword [ebp - 0x2f8]
push eax
mov byte [ebp - 4], 0x17
call fcn.00406fd0
lea ecx, [ebp - 0x344]
call fcn.00406fb0
lea ecx, [ebp - 0x33c]
call fcn.00406fb0
lea ecx, [ebp - 0x328]
mov byte [ebp - 4], 0x14
call fcn.00406fb0
inc ebp
cld
adc eax, 0xffc423e8
inc dword [ebx - 0x7272fb3c]
aam 0xfd
invalid
push dword [ebp + 0x28]
mov eax, dword [ebp + 0x20]
push dword [ebp - 0x300]
mov ecx, dword [ebp - 0x320]
inc eax
push eax
push ecx
push dword [ebp - 0x31c]
lea eax, [ebp - 0x230]
push dword [ebp - 0x2f8]
push ecx
mov ecx, esp
mov dword [ebp - 0x2f4], esp
push eax
call fcn.00406ee0
push ecx
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x238]
mov ecx, esp
mov dword [ebp - 0x300], esp
push eax
call fcn.00406ee0
push ecx
lea eax, [ebp - 0x23c]
mov ecx, esp
push eax
mov byte [ebp - 4], 0x19
call fcn.00406ee0
mov ecx, esi
mov byte [ebp - 4], 0x14
call int.00409e80
test eax, eax
sete al
mov byte [ebp - 0x2e5], al
call edi
cmp eax, 2
ja 0x40ad0e
and edx, eax
invalid
jecxz 0x40acbb
mov eax, dword [0xbc5d4c6b]
invalid
mov eax, dword [ebp - 0x320]
test eax, eax
je 0x40ad20
mov eax, dword [eax]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x31c]
test eax, eax
je 0x40ad32
mov eax, dword [eax]
mov dword [ebp - 0x314], eax
lea ecx, [ebp - 0x22c]
call fcn.00406fb0
jmp 0x40ad81
xor al, al
mov byte [ebp - 0x2e5], al
call edi
cmp eax, 4
ja 0x40ad81
invalid
lea ecx, [ebp - 0x234]
call fcn.00406fb0
lea ecx, [ebp - 0x23c]
call fcn.00406fb0
lea ecx, [ebp - 0x230]
call fcn.00406fb0
lea ecx, [ebp - 0x238]
call fcn.00406fb0
lea ecx, [ebp - 0x2c8]
call fcn.00401eb0
lea ecx, [ebp - 0x2b0]
call fcn.00401eb0
lea ecx, [ebp - 0x268]
call fcn.00401eb0
jmp 0x40bb0b
cmp byte [ebp + 0x28], 0
je 0x40adb8
cmp byte [ebp - 0x2e6], 0
jne 0x40affc
lea ecx, [ebp - 0x2b0]
call fcn.00407130
test al, al
jne 0x40aea0
lea ecx, [ebp - 0x2b0]
call fcn.00401e00
push eax
lea ecx, [ebp - 0x324]
call fcn.00406f00
mov esi, eax
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x1a
call fcn.00406f00
push 0x46cfec
mov edx, eax
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 0x1b
call fcn.00407040
add esp, 4
push esi
mov edx, eax
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 0x1c
call fcn.0040ca10
add esp, 4
mov ebx, dword [ebp - 0x2f8]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x1d
call fcn.00406fd0
lea ecx, [ebp - 0x330]
call fcn.00406fb0
lea ecx, [ebp - 0x338]
call fcn.00406fb0
lea ecx, [ebp - 0x340]
call fcn.00406fb0
lea ecx, [ebp - 0x324]
mov byte [ebp - 4], 0xe
call fcn.00406fb0
mov esi, dword [ebp - 0x2ec]
jmp 0x40aea6
mov ebx, dword [ebp - 0x2f8]
push ebx
lea eax, [ebp + 0x10]
push eax
mov ecx, esi
call int.004098a0
call fcn.0041cbb0
push 0
push 0x80
push 2
push 0
push 1
push 0xc0000000
mov ecx, ebx
lea esi, [eax + 0x278]
call fcn.00407120
push eax
mov eax, dword [esi]
call eax
mov ebx, eax
mov dword [ebp - 0x310], ebx
call edi
cmp eax, 2
ja 0x40af09
mov dword [edx + 0x1d], eax
jmp 0x40af01
cmpsd dword [esi], dword es:[edi]
push esi
call 0x7909c78f
push esi
test ebx, ebx
jne 0x40affe
mov ebx, dword [ebp - 0x2f8]
mov ecx, ebx
call fcn.0040e480
test al, al
je 0x40af93
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x334]
call fcn.00406f00
push 0x46cfec
mov edx, eax
lea ecx, [ebp - 0x34c]
mov byte [ebp - 4], 0x1e
call fcn.00407040
add esp, 4
push ebx
mov edx, eax
lea ecx, [ebp - 0x32c]
mov byte [ebp - 4], 0x1f
call fcn.0040ca10
add esp, 4
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x20
call fcn.00406fd0
lea ecx, [ebp - 0x32c]
call fcn.00406fb0
lea ecx, [ebp - 0x34c]
call fcn.00406fb0
lea ecx, [ebp - 0x334]
mov byte [ebp - 4], 0xe
call fcn.00406fb0
mov ecx, dword [ebp - 0x2ec]
push ebx
lea eax, [ebp + 0x10]
push eax
call int.004098a0
call fcn.0041cbb0
push 0
push 0x80
push 2
push 0
push 1
push 0xc0000000
mov ecx, ebx
lea esi, [eax + 0x278]
call fcn.00407120
push eax
mov eax, dword [esi]
call eax
mov ebx, eax
mov dword [ebp - 0x310], ebx
call edi
cmp eax, 2
ja 0x40affe
imul ecx, esi, 0xffffffb5
cli
test eax, 0x867da2d3
push edx
and al, byte [ebx - 0x61]
add al, 0x5e
in eax, 0
push ecx
cmp al, 0xe9
or bl, byte [ebx]
mov ebx, 0x24c5ad2
lodsb al, byte [esi]
cli
pop ds
jmp 0x40affe
xor ebx, ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
cmp eax, 9
ja 0x40b070
mov cl, 0x6a
movsd dword es:[edi], dword [esi]
mov bl, 0x7a
ror ah, 3
jnp 0x40b03f
mov cl, byte [esi]
retf 0xda31
fstp xword [ecx - 0x70ef6b6d]
in al, dx
cmp al, 0x43
mov dh, 0x73
call 0x6be9e705
add dl, byte [esi]
add dh, byte [ebp - 0x721989b]
pop ebp
test byte [edx - 0x576889f7], bh
or byte [eax + 0x5f], ah
cld
inc ebx
inc esp
xor dword [ecx + 0x58], ecx
pop eax
cmp eax, 0x13b29a8c
cmpsb byte [esi], byte es:[edi]
mov dh, 0x5a
xor esi, esi
mov dword [ebp - 0x2ec], esi
call edi
cmp eax, 5
ja 0x40b0c0
adc byte [edi - 0x7935f05e], dl
mov edx, 0x7f969454
imul esp, dword [ecx + 0x3f], 0xffffff94
cmp cl, byte [ecx]
dec ecx
mov ah, 0x61
notrack jmp 0x40b0dd
pop es
mov bl, 0x3f
xor eax, 0xe1807bf6
jecxz 0x40b04a
and al, 0
mov dword [ebp - 0x2e4], 0
call edi
cmp eax, 5
ja 0x40b10e
add eax, 0x921f3d77
pop ds
xchg edx, eax
stc
neg byte [eax]
push ecx
wait
scasb al, byte es:[edi]
aas
popal
in eax, dx
and ebx, edi
lds esi, [esi + ebp]
pop esi
cmpsd dword [esi], dword es:[edi]
lodsb al, byte [esi]
stosd dword es:[edi], eax
js 0x40b0ce
mov dword [eax + 0x23374c9a], edx
inc esp
out 0x6a, al
mov dl, 0x90
inc esi
jecxz 0x40b0b2
push esi
invalid
call fcn.0041cbb0
mov eax, dword [eax + 0x204]
lea ecx, [ebp - 0x2e4]
push ecx
push dword [ebp - 0x2fc]
call eax
test eax, eax
je 0x40b91b
mov dword [ebp - 0x224], 1
call edi
cmp eax, 4
ja 0x40b174
dec ecx
mov cl, 0xa0
push esp
loop 0x40b0ef
mov ebp, 0x2adc138
cmpsd dword [esi], dword es:[edi]
cli
scasd eax, dword es:[edi]
wait
mov dl, 0xb
sal esp, cl
push ebp
push eax
mov ecx, 0x2245e663
mov byte [ebx - 0x72a826d2], dl
dec edx
cmpsd dword [esi], dword es:[edi]
rcl byte [esi], 0xa0
push cs
invalid
mov dword [ebp - 0x300], 0
call edi
cmp eax, 9
ja 0x40b1ea
pop edx
add byte [edx + 0x28], cl
or al, 0xd3
push edi
mov al, 0xa8
stosb byte es:[edi], al
adc al, 0xf2
mov bh, 0x36
cmp dword [ebx - 0x45aac197], 0x844e893f
pop es
inc ch
fimul dword [0x902f850a]
inc edx
frstor dword [ebp + 0x73]
dec edx
hlt
cmp dword [ebp - 0x224], 0
je 0x40b362
mov bl, byte [ebp - 0x21d]
lea ecx, [ecx]
mov esi, dword [ebp - 0x300]
inc esi
mov eax, 0x66666667
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x300], esi
lea ecx, [eax + eax*4]
add ecx, ecx
mov eax, esi
sub eax, ecx
je 0x40b22d
test bl, bl
jne 0x40b235
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x2e4]
inc eax
push eax
call fcn.0044738c
mov esi, eax
add esp, 4
mov dword [ebp - 0x30c], esi
call edi
cmp eax, 9
ja 0x40b2b9
imul edx, dword [ecx + 0x7f], 8
and ecx, ebp
mov byte [edx - 0x79], 0xc0
push 0x1a
loop 0x40b27b
sbb dword [eax], ebx
inc ecx
invalid
sub dword [esi - 0x6ce2f0a0], esp
jl 0x40b2cf
lds edi, [ecx + 0x7b]
mov bl, dl
xchg ebx, ebx
add edx, esi
salc
outsb dx, byte [esi]
mov byte [0xf27a2181], al
insd dword es:[edi], dx
or byte [edx], al
ficomp word [edi + 0x53]
add edi, dword [ebx - 0x14]
or byte [ebx], bh
jl 0x40b273
dec ebp
ja 0x40b283
je 0x40b2c0
dec ebx
cmpsb byte [esi], byte es:[edi]
iretd
test esi, esi
jne 0x40b374
add byte [ecx - 0x2e34b], cl
invalid
mov dword [ebp - 0x2e4], esi
call edi
cmp eax, 6
ja 0x40b315
add ecx, dword [ebx]
mov ecx, 0xf5cbd94f
or edi, dword [ecx - 0xa3426b1]
insd dword es:[di], dx
mov ecx, 0x28e9816c
mov dh, 0x1f
aam 0x54
lodsb al, byte [esi]
or esp, esp
ljmp 0x602b
mov dword [ebp - 0x224], 0
call edi
cmp eax, 1
ja 0x40b33b
outsb dx, byte [esi]
mov dl, cl
fdivp st(7)
out dx, eax
xchg ebx, eax
cld
mov ah, 0xe8
movsb byte es:[edi], byte [esi]
adc eax, 0x77c3d0c8
mov eax, dword [0xb3162584]
mov esi, dword [ebp - 0x2ec]
mov bl, byte [ebp - 0x21d]
test bl, bl
je 0x40b8f7
cmp dword [ebp - 0x224], 0
jne 0x40b200
mov ebx, dword [ebp - 0x310]
cmp dword [ebp - 0x2e4], 0
ja 0x40b0c0
jmp 0x40b949
mov eax, dword [ebp - 0x2e4]
inc eax
push eax
push 0
push esi
call fcn.0044b2e0
add esp, 0xc
call edi
cmp eax, 9
ja 0x40b3f3
mov esp, 0x9ba28275
sbb byte [edi], dl
cmpsb byte [esi], byte es:[edi]
test byte [ebp - 0xacfcb8d], dh
invalid
call fcn.0041cbb0
mov eax, dword [eax + 0x208]
lea ecx, [ebp - 0x224]
push ecx
push dword [ebp - 0x2e4]
push esi
push dword [ebp - 0x2fc]
call eax
test eax, eax
je 0x40b906
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x240], 0
call edi
cmp eax, 2
ja 0x40b458
inc esi
push edx
movsd dword es:[edi], dword [esi]
jns 0x40b43f
or al, 0xf1
int1
popal
and al, 0x57
xor eax, 0xa8aa98bb
xor byte [edx], 0x5a
pop edx
pop ebp
cld
sbb al, 0xf5
sub eax, 0xc3754bf2
sub dh, ah
cmp byte [ebp - 0x21d], 0
jne 0x40b745
cmp byte [ebp - 0x2e6], 0
je 0x40b705
mov esi, dword [ebp - 0x2e4]
inc esi
add esi, dword [ebp - 0x304]
call edi
cmp eax, 2
ja 0x40b4a5
invalid
push esi
call fcn.0044738c
add esp, 4
mov ebx, eax
call edi
cmp eax, 7
ja 0x40b508
fdivr qword [eax - 0x1e]
cwde
mov byte [eax - 0x63113047], dh
invalid
test ebx, ebx
je 0x40b64c
mov eax, dword [ebp - 0x314]
test eax, eax
je 0x40b5a8
cld
invalid
push dword [ebp - 0x304]
push eax
push esi
push ebx
call fcn.004488f8
add esp, 0x10
call edi
cmp eax, 6
ja 0x40b57d
xor byte [edx], al
pushal
mov edx, 0x74e22c7e
into
stc
jle 0x40b513
rol word [bp + si - 4], cl
daa
dec esi
rol dword [ecx + 0x3dc69f33], cl
sub byte [ecx + 0x7b], 0x1f
adc eax, 0x3855943e
retf 0x1b56
mov eax, dword [ebp - 0x314]
push eax
call fcn.004486af
add esp, 4
call edi
cmp eax, 1
ja 0x40b5a8
jae 0x40b5d8
dec ecx
xchg ah, cl
mov bh, 0xa8
imul ebx, dword [edx + 0x8c70f1a], 0xa9dd2e7b
sub dword [edi + 0x1cb5ff00], ebp
std
invalid
push dword [ebp - 0x2e4]
mov eax, dword [ebp - 0x304]
push dword [ebp - 0x30c]
sub esi, eax
add eax, ebx
push esi
push eax
call fcn.004488f8
add esp, 0x10
call edi
cmp eax, 7
ja 0x40b620
invalid
xchg ebx, eax
mov dh, 0x65
add al, 0x56
inc ebx
and byte [ecx + edx*8 + 0x4b230afd], 0xe8
xchg dword [edi + edi*4], esi
fdiv st(7), st(0)
sbb byte [esi - 0x33], dh
std
or ah, byte [ebx]
dec ebx
call 0xdcffea68
call [eax]
jbe 0x40b5b2
and eax, dword [esi]
fisttp dword [edi - 0x37]
iretd
mov dword [ebp - 0x314], ebx
call edi
cmp eax, 2
ja 0x40b64c
inc ebp
or al, 0x15
adc byte [ebp - 0x46], cl
imul ah
jnp 0x40b664
jmp 0x2f54cfac
mov eax, dword [ebp - 0x304]
add eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x304], eax
call edi
cmp eax, 8
ja 0x40b6c0
pop ebx
mov esi, 0x1df39399
sub ecx, dword [0xc6e47837]
mov al, byte [0x6a6fb9c2]
push esi
arpl dx, dx
invalid
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x240], eax
call edi
cmp eax, 3
ja 0x40b787
cmpsd dword [esi], dword es:[edi]
xchg esp, eax
xchg edx, eax
cmc
stosd dword es:[edi], eax
sbb eax, 0x296d0777
lcall 0xd20d, 0xcb0f8004
pop ss
std
invalid
cmp dword [ebp - 0x2e4], 0
jbe 0x40b787
call fcn.0041cbb0
mov ebx, dword [ebp - 0x310]
mov eax, dword [eax + 0x27c]
push 0
lea ecx, [ebp - 0x240]
push ecx
push dword [ebp - 0x2e4]
push esi
push ebx
call eax
test eax, eax
jne 0x40b787
mov esi, dword [ebp - 0x2ec]
jmp 0x40b362
mov eax, dword [ebp - 0x2e4]
test eax, eax
je 0x40b781
push eax
push esi
lea ecx, [ebp - 0x364]
call fcn.0040cbc0
push eax
lea ecx, [ebp - 0x2e0]
mov byte [ebp - 4], 0x21
call fcn.00403660
lea ecx, [ebp - 0x364]
mov byte [ebp - 4], 0xe
call fcn.00403bd0
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x240], eax
mov esi, dword [ebp - 0x2ec]
add esi, dword [ebp - 0x240]
mov dword [ebp - 0x2ec], esi
call edi
test eax, eax
jne 0x40b7b4
test eax, 0xc2b55c21
ret 0x81fe
mov ecx, dword [ebp - 0x228]
test ecx, ecx
je 0x40b8a0
cmp esi, ecx
jae 0x40b8a0
movd xmm0, esi
cvtdq2pd xmm0, xmm0
mov eax, esi
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x46e280]
cvtpd2ps xmm1, xmm0
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x46e280]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
movss dword [ebp - 0x2f4], xmm1
call edi
cmp eax, 1
ja 0x40b824
test eax, 0x187756aa
fmul qword [ecx + 0x4875c0c4]
sub ah, bh
cmp byte [edx + 0x210a70a2], bl
pop edx
mov eax, dword [0x85100ff3]
or al, 0xfd
invalid
movss xmm0, dword [ebp - 0x2f4]
mulss xmm0, dword [0x46e268]
push dword [ebp - 0x228]
mov edx, esi
cvttss2si ecx, xmm0
call fcn.00405130
add esp, 4
call edi
cmp eax, 7
ja 0x40b8a0
loop 0x40b879
add bh, bh
mov ch, 0xd8
std
invalid
cmpsb byte [esi], byte es:[edi]
cli
or byte [edx], ch
xchg ecx, eax
in eax, 0x7f
arpl word [ecx - 0x5a], dx
jg 0x40b831
fisubr dword [ebx - 0x11b6022e]
xchg esp, eax
dec ebp
aam 0x1d
sal dword [ebx + 1], cl
stc
pop eax
fst qword [edi]
cld
ret
mov edi, 0x535dffc5
scasd eax, dword es:[edi]
nop
add bl, byte [ecx - 0x33bd7c82]
dec ebp
and byte [eax + 0x580e118b], bl
out 0x67, eax
push cs
xchg esp, eax
mov ebx, 0x3c41ea90
mov ecx, 0x80d096a7
add dh, byte [ebp - 0xe44adc]
mov ch, 0xf4
cld
invalid
push dword [ebp - 0x30c]
call fcn.004486af
add esp, 4
call edi
cmp eax, 4
ja 0x40b8e8
lea edi, [eax + 0x5d]
imul edi, edi, 0x3e
std
sti
aas
in al, 0x15
fdivr dword [esi - 0x12]
ljmp 0x2524
mov dword [ebp - 0x30c], 0
jmp 0x40b341
mov dword [ebp - 0x224], 0
jmp 0x40b35c
mov esi, dword [ebp - 0x2ec]
mov dword [ebp - 0x224], 0
jmp 0x40b35c
xor al, al
mov byte [ebp - 0x2e5], al
call edi
cmp eax, 2
ja 0x40b949
mov word [ebx], gs
jns 0x40b8f2
cmp dword [edi], eax
js 0x40b977
ja 0x40b985
ficomp word [ecx - 0x7ebb94d9]
pushal
sub al, 0
mov cl, dl
cmpsd dword [esi], dword es:[edi]
stosb byte es:[edi], al
add dword [edi + 0x42], 0xfd92dd9
call dword [sym.imp.KERNEL32.dll_GetLastError]
test ebx, ebx
je 0x40b95a
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
cmp eax, 9
ja 0x40b9c6
cmp eax, 0x7e9459c0
loop 0x40b9e6
lds edx, [ecx + 0x70]
sti
adc dword [ebp - 0x39], ebx
int 0x5b
adc dword [eax + edi*8 + 0x603c0c64], 0xe07b314c
cmp al, 0x60
dec esp
xor dword [ebx - 0x20], edi
push ebp
mov ch, 0x4b
lcall 0xe2e1, 0x8c07ebeb
loope 0x40b969
shl byte [ebp - 2], 1
fnsave dword [eax]
xchg esi, eax
mov eax, 0x3fabfd03
pop eax
sbb ah, 0xbd
in al, dx
xlatb
invalid
cmp esi, 0x10000
jae 0x40ba9b
call fcn.0041cbb0
mov ecx, dword [ebp - 0x2f8]
lea esi, [eax + 0x168]
call fcn.00407120
push eax
mov eax, dword [esi]
call eax
call edi
cmp eax, 9
ja 0x40ba59
invalid
inc esi
lcall 0x8336, 0x200f5028
lcall 0x8ea0, 0x2f8f7a4e
jae 0x40ba68
test al, 0xce
in al, dx
invalid
xor al, al
mov byte [ebp - 0x2e5], al
call edi
cmp eax, 4
ja 0x40ba9b
pop esp
or al, 0x65
retf
lea ecx, [ebp - 0x2b0]
call fcn.00401eb0
lea ecx, [ebp - 0x268]
call fcn.00401eb0
mov ebx, dword [ebp - 0x30c]
jmp 0x40bb0b
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor al, al
mov byte [ebp - 0x2e5], al
call edi
cmp eax, 5
ja 0x40bb0b
mov ch, 0x95
fnstsw word [eax + 0x2091c4c2]
jbe 0x40bb1d
in al, 0x99
scasb al, byte es:[edi]
pop es
mov dword [0x92619789], eax
invalid
lea ecx, [ebp - 0x280]
call fcn.00401eb0
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 6
inc ebp
cld
push es
call fcn.00401eb0
call fcn.0041cbb0
push dword [ebp - 0x2fc]
mov eax, dword [eax + 0x20c]
call eax
call fcn.0041cbb0
push dword [ebp - 0x318]
mov eax, dword [eax + 0x20c]
call eax
call fcn.0041cbb0
push dword [ebp - 0x308]
mov eax, dword [eax + 0x20c]
call eax
test ebx, ebx
je 0x40bb6b
push ebx
call fcn.004486af
add esp, 4
mov bl, byte [ebp - 0x2e5]
cmp byte [ebp - 0x2e6], 0
je 0x40bc2c
mov ecx, dword [ebp - 0x31c]
mov eax, dword [ebp - 0x314]
mov dword [ecx], eax
call edi
cmp eax, 8
ja 0x40bbee
and esp, dword [ebx]
fmul dword [ebp + 0x21]
cmp al, 0x98
sub al, 0x6b
in eax, dx
sbb ch, byte [eax]
sub al, 0xc6
jge 0x40bc1a
pop ss
mov ebx, 0x7a4fd2b3
test dword [esi - 0x7c], ebp
cld
xlatb
pop edi
pop edx
pop ss
and ebx, esp
outsd dx, dword [esi]
add al, 0x87
imul ebp, edx, 0xffffff9b
invalid
mov ecx, dword [ebp - 0x320]
mov eax, dword [ebp - 0x304]
mov dword [ecx], eax
call edi
cmp eax, 3
ja 0x40bc2c
mov eax, 0x5eb9f677
xchg ecx, eax
ret 0x4f3e
pop edi
in al, 0xda
lcall 0xa55c, 0xecf227e1
in al, dx
call 0x31d5451c
xchg dword [ebx + 0xdbec033], esi
add byte [eax], al
add byte [ebx + ebx*8 - 0x2df7273], al
invalid
xor eax, eax
mov esi, 0xd
test bl, bl
lea ecx, [ebp - 0x2e0]
cmovne esi, eax
call fcn.00403bd0
lea ecx, [ebp + 8]
call fcn.00406fb0
lea ecx, [ebp + 0xc]
call fcn.00406fb0
lea ecx, [ebp + 0x10]
call fcn.00406fb0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00447bb9
mov esp, ebp
pop ebp
ret 0x24