Function at 0x497976
Capabilities:
Check os version

Disassembly:
cmpsb byte [esi], byte es:[edi]
movsd dword es:[edi], dword [esi]
mov dl, dl
lea ecx, [ecx]
mov eax, dword [esi + 4]
mov eax, dword [ebp + eax]
mov ebx, dword [esi + 8]
jmp 0x4afa41
add eax, 0x24448ff7
cld
pop ebp
ret
pop edi
shl bx, 0x20
jno 0x49937d
jo 0x484335
sbb al, 0xde
jo 0x49937d
add eax, 0x24648d4c
add al, 0x5d
ret
call fcn.004aa1cf
xor eax, 0x8768d61
mov dh, dh
push esi
mov esi, dword [esi - 4]
mov dx, dx
js 0x497375
jns 0x48478f
add dword [ebp + 0x2be0890f], esp
add dword [eax], eax
jns 0x497375
xor al, 0x8f
test ax, 0xf0b3
xor dl, cl
jb 0x4951e3
clc
add dl, 0x80
mov byte [ebp + esi - 8], dl
inc esi
cmp esi, 8
jl 0x49e664
jge 0x4847be
nop
cpuid
ret
js 0x486c7f
jns 0x4847c8
nop
mov eax, 0x24b1890f
add byte [eax], al
jns 0x486c7f
add eax, 0xfdb3132
and byte [edx + 0x39ffffef], 0xc9
xor edi, edi
jb 0x4904e4
ja 0x4a330a
jbe 0x4847ec
pop ss
push ss
jbe 0x4a330a
lea esi, [esi + 0xc]
test word [ebp + ebx], ax
jb 0x48e17c
xchg ebx, eax
xchg ebx, eax
jmp dword [esi]
invalid
mov byte [ebx], 0
call fcn.0048d7cf
js 0x494827
shl ch, 0x20
jns 0x4850d0
nop
cpuid
ret 0x890f
jns 0x494827
xor al, 0x55
mov ecx, dword [ebp - 8]
xor eax, eax
jb 0x4b3ea4
cmp word [ebp - 0xa], 0xfafa
setne al
dec eax
and eax, ecx
jb 0x4a9aa5
mov esp, ebp
pop ebp
push 0x49fe74
ret
add byte [edx - 0x78], 0xd9
shl esi, 0x20
shr ah, 0x40
shl word [edi], cl
mov bl, bl
jmp dword [esi]
jne 0x4855b5
je 0x48556b
xchg esi, eax
push ebp
cmp bp, bp
xor esi, esi
jb 0x4878d2
mov dl, byte [eax + 0xbc]
mov cl, byte [eax + esi + 0x2c]
cmc
sub dl, 0x34
xor cl, dl
jb 0x4878e0
add cl, 0x58
mov byte [ebp + esi - 0x10], cl
shr ecx, 0x40
shl di, 0x20
inc esi
cmp esi, 8
jl 0x485576
push ebp
pop ebp
jge 0x4855ae
adc eax, esi
shr ecx, cl
push es
add dword [eax], eax
in eax, dx
jl 0x485536
jmp 0x495be9
cmp cl, 2
jne 0x495b8c
stc
add cl, byte [edi]
test esi, ecx
add eax, 0x2740001
je 0x4855c2
xchg ecx, eax
stosd dword es:[edi], eax
xor esi, esi
jb 0x4a8e3c
mov edx, edx
mov dl, byte [eax + 0xbc]
mov cl, byte [eax + esi + 0x2c]
sub dl, 0x34
ja 0x495b61
jbe 0x4855e5
mov edi, 0xf6dcd91
xchg byte [esi + 5], dh
add dword [eax], eax
jbe 0x495b61
xor al, 0xff
mov eax, dword [esi + 4]
mov ebx, dword [esi + 8]
mov eax, dword [ebp + eax]
lea esi, [esi + 0xc]
test dword [ebx], eax
jb 0x48e8ea
lea eax, [eax]
jmp dword [esi]
pop edi
pop esi
xor eax, eax
jb 0x4a4700
mov edi, edi
pop ebx
pop ebp
ret
call fcn.004b076f
fidiv dword [ebx]
jmp 0x4a046a
add al, 0xf9
mov cl, byte [esi]
xchg esi, eax
xchg esi, eax
shl al, 4
test cl, cl
jb 0x49519d
je 0x4859be
jne 0x485a05
wait
cmp cl, 0x30
jb 0x4859be
jae 0x485a13
pop edi
call 0x6241da29
cmp cl, 0x61
jb 0x485a32
jae 0x485a22
invalid
cmp cl, 0x66
ja 0x485a32
jbe 0x485a2f
cmp eax, 0xe0c18017
add cl, 0xe0
cmp cl, 0x46
ja 0x4859be
jbe 0x485a40
imul ebp, esi, 0xffffffe8
cmp cl, 0x41
jae 0x485a5c
jb 0x485a4d
ret 0x804c
cmp cl, 0x39
ja 0x4859be
jbe 0x485a5c
ret 0xa20f
add cl, 0xd0
cmp cl, 9
jbe 0x485a72
mov bl, bl
ja 0x485a6f
pop edx
into
sub dword [eax + 0x8f8f9c1], eax
enter 0xffffffffffff820f, 0x3c
test dword [eax], 0x184d8b00
add cl, 0xf9
clc
or al, cl
jb 0x4951b7
mov ecx, dword [ebp + 0x18]
add esi, 2
shr cx, 0x40
mov byte [edx + ecx], al
inc edx
cmp edx, 8
jb 0x4bd0c4
jae 0x485a9d
ret 0xdb21
pop edi
pop esi
mov eax, 1
pop ebx
pop ebp
shr dh, 0x40
ret
jmp 0x49054a
call fcn.004886c3
invalid
cmp cx, 0x12c
je 0x4af130
jne 0x4875e5
pop eax
cpuid
ret
test bx, bx
jb 0x484a06
je 0x4998f1
jne 0x4875f8
loope 0x48757c
mov ax, ax
mov edi, dword [edi]
call fcn.004b5038
xor al, 0x71
push 0x495921
ret
pop edi
adc eax, 0x20e0c166
mov cl, byte [ebp + 0x34]
call fcn.004a8e2c
add eax, 0xfc085f7
sbb byte [edx], 0x10
add al, byte [eax]
jne 0x487905
je 0x4878f6
jp 0x48790a
and eax, 0xfd876688
xchg bp, di
xchg di, bp
mov ax, 0x14
pop esi
pop ebp
ret
mov ecx, dword [esi]
mov edx, dword [ebp + 0x18]
shr bl, 0x40
mov eax, dword [ebp + 0x14]
clc
add ecx, 0x74
push ecx
mov ecx, dword [ebp + 0x10]
xchg dl, ah
xchg ah, dl
push edx
mov ebp, ebp
mov edx, dword [ebp + 0xc]
shl edi, 0x20
push eax
mov eax, dword [ebp + 8]
jmp 0x48792f
push ecx
shl si, 0x20
jmp 0x487936
push edx
push eax
call fcn.00487949
add esp, 0x18
pop esi
pop ebp
ret
push cs
dec eax
mov ax, ax
push 0x4ab983
ret
mov ah, 0x81
call fcn.00494096
fld dword [edx + 0x68]
outsd dx, dword [esi]
invalid
jmp 0x4b7d92
pop edi
pop esi
jmp 0x4b7d71
shl ch, 0x20
mov eax, dword [esi + 4]
mov ebx, dword [esi + 8]
mov eax, dword [eax]
lea esi, [esi + 0xc]
mov cl, cl
mov dword [ebp + ebx], eax
ja 0x49ed3a
shl ecx, 0x20
jbe 0x489912
cpuid
ret
jbe 0x49ed3a
fidivr dword [esi + 0x4ab063]
invalid
pop ebp
ret
mov eax, dword [edi]
mov si, si
lea ecx, [ebp - 4]
mov dl, dl
jno 0x4afe86
jo 0x489a4d
jge 0x489a6d
xchg ecx, eax
jo 0x48fe84
jo 0x4afe86
add al, byte [eax]
xor eax, 0x24448f86
cld
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, 0x55668d
mov dword [ebp - 0xc], 1
mov al, byte [edi + 0x16]
inc edi
push ss
mov dword [ebp - 8], ebx
push eax
mov dword [ebp - 4], 0x556084
mov esi, 0x556a58
call fcn.00492575
or al, al
add esp, 4
test eax, eax
jb 0x4b648a
je 0x489abe
jne 0x489aa2
sbb esp, dword [esi - 0x39]
test eax, edi
invalid
mov dword [ebp - 8], 0x55668e
mov dword [ebp - 4], 0x556088
mov ebx, dword [ebp - 8]
mov esi, 0x556b60
cmp dword [edi + 8], 0x6873686c
push 0x49995a
ret
xchg bh, dh
xchg dh, bh
je 0x489ef0
xchg esp, eax
bnd je 0x4af832
je 0x4af832
push 0x100
lea ecx, [ebp - 0x100]
mov eax, dword [esi]
push eax
jmp 0x489f05
push ecx
call int.004b9ee6
lea edx, [ebp - 0x100]
lea eax, [eax]
push 0
push edx
call fcn.004a2c5f
push 0x4a5ce9
ret
mov eax, dword [ebp + 0x10]
js 0x49764c
jns 0x489f31
adc al, 0x4e
call 0x15d1ae61
xlatb
add byte [eax], al
jns 0x49764c
fisubr dword [esi + 0x68]
ja 0x489ee8
int1
in eax, dx
push 0x5562ad
jmp 0x489f44
push edi
jmp 0x489f47
push eax
call fcn.004cf040
add esp, 0x14
mov dword [ebp - 0x1c], eax
test eax, eax
jb 0x4a7327
je 0x498e14
jne 0x489f6b
cpuid
ret
push ebx
call fcn.004cee60
mov ecx, dword [ebp - 4]
push ecx
call fcn.004aae4e
mov edx, dword [ebp - 0xc]
jmp 0x489f7f
push edx
call fcn.004aae4e
mov eax, dword [ebp - 0x14]
push eax
call fcn.004aae4e
mov ecx, dword [ebp - 0x1c]
mov edx, dword [esi]
push ecx
push edx
call fcn.004a37b5
add esp, 0x18
shl esi, 0x20
pop edi
pop esi
pop ebx
mov esp, ebp
push 0x498e10
ret
shl dl, 0x20
call fcn.004ab92c
mov dl, dl
mov esi, eax
add esp, 0x18
test si, si
jb 0x4a17d2
je 0x4a1a26
invalid
push esi
ja 0x4850b9
jbe 0x48b46c
cpuid
nop
ret
jbe 0x4850b9
add eax, 0x1f896668
mov word [edi], bx
jmp dword [esi]
jbe 0x48b45f
mov bx, bx
mov edi, edi
xchg ebx, edi
xchg edi, ebx
call fcn.00495f35
fldenv [eax - 0x8f6a73]
invalid
mov eax, dword [ebp + 8]
test eax, eax
jb 0x4ad661
je 0x496325
mov ebp, ebp
jne 0x48b50c
sar byte [esi], 0xc0
out dx, eax
inc eax
shr bh, 0x40
mov dword [eax], 0
jno 0x496325
jo 0x48b520
enter 0xfffffffffffffcc7, 0xf
cmp bh, 0xad
add byte [eax], al
jo 0x496325
fadd st(5)
lea esi, [esi + 4]
mov dx, dx
shr dl, 0x40
stc
js 0x4a6095
jns 0x48b53c
in eax, dx
push ds
jns 0x4a6095
add dword [ebp + ebx], eax
jmp dword [esi]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
shr dx, 0x40
mov edx, dword [esi + 4]
push edi
lea ecx, [ebp - 0x28]
push edx
mov si, si
push ecx
push eax
call fcn.004c4790
add esp, 0x10
add esi, 0
test ax, ax
jb 0x4a71b4
je 0x48c3e0
jne 0x48c391
and eax, 0x558bc3cd
clc
mov edx, dword [ebp - 8]
push edx
call fcn.004aae4e
jmp 0x48c39b
push ebx
shl ebx, 0x20
call fcn.004cee60
mov eax, dword [ebp - 4]
push eax
call fcn.004aae4e
mov ecx, dword [ebp - 0xc]
jmp 0x48c3b3
push ecx
call fcn.004aae4e
mov edx, dword [ebp - 0x14]
push edx
call fcn.004aae4e
mov eax, dword [esi]
push 0xcf
push eax
call fcn.004a37b5
add esp, 0x1c
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, ebx
mov ecx, dword [ebp - 0x28]
xor eax, eax
jb 0x48d82f
xor edi, edi
jb 0x48d839
mov dword [ebp - 0x18], eax
test ecx, ecx
jb 0x489918
shl ch, 0x20
jbe 0x494745
ja 0x48c40e
fidivr dword [ecx]
xchg esi, eax
jno 0x4a596f
jo 0x48c41a
call 0xff70cf8
or byte [edi - 0x6b], 1
add byte [eax*8 + 0x4a33b9], dh
add dword [eax], eax
add byte [eax], al
xor byte [eax], al
add byte [eax], al
arpl word [eax], cx
jo 0x4a596f
xor al, 0xc5
mov ecx, 0x1004a33
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [ebx + 8], ah
dec ecx
add dl, dl
iretd
pop edi
pop esi
shl bp, 0x20
mov ax, 0x1e
pop ebx
mov esp, ebp
pop ebp
mov edx, edx
ret
shr ah, 0x40
mov ebx, dword [ebp + 0x18]
ja 0x4b01f4
jbe 0x48ca93
wait
mov ecx, 0x860fba9b
pop ebx
aaa
add al, byte [eax]
jbe 0x4b01f4
fsubr dword [ecx + edi*4]
xor ecx, dword [edx]
add al, byte [eax]
add byte [eax], al
xor byte [eax], al
add byte [eax], al
push esi
aas
dec ecx
add byte [ebx - 0x48ffb735], dh
add byte [ecx], cl
and byte [eax], al
add byte [eax], al
cmp al, 0
add byte [eax], al
pop edx
jae 0x48cb08
add ch, al
retf 0x48
add byte [ebp + ebp*4 + 0x48], ah
add byte [edi], ch
add byte [eax], al
add byte [eax + eax], dh
add byte [eax], al
imul esp, dword [edx + 0x4100004a], 0
xor byte [eax], 0
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], ch
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], cl
add byte [eax], al
aas
pop edi
dec ecx
add byte [ebx], bh
sbb cl, byte [ebx]
dec eax
add byte [eax], al
add byte [eax + eax], dh
add byte [eax], al
xchg esp, eax
dec ebp
dec ecx
add al, ah
or dword [edx], 0xffffffad
cli
dec eax
add byte [eax], cl
add byte [eax], al
invalid
shl ebx, 0x20
push 6
push ecx
lea edx, [ebp - 0x40]
push edi
push edx
js 0x48a18a
jns 0x48cffc
xor edi, dword [edi + ecx - 0x77]
mov cl, dl
invalid
jns 0x48a18a
fidiv dword [edi]
add byte [ebp + ebx], al
mov bh, bh
jmp dword [esi]
scasb al, byte es:[edi]
shl dl, 0x20
jmp 0x4898ef
and eax, 0x24448fb8
cld
mov byte [esi + 0xbb], al
shl di, 0x20
jne 0x49af8a
je 0x48d855
stosb byte es:[edi], al
cdq
invalid
je 0x49af8a
invalid
invalid
cmp byte [eax], 0x81
les eax, [eax + eax]
add byte [ebp - 0x23b6b], cl
invalid
invalid
xor al, 0x52
mov eax, dword [ebp + eax]
mov eax, eax
lea esi, [esi + 0xc]
test dword [ebx + edx], eax
jb 0x49e7d2
push 0xe
add ecx, 0x74
push eax
push ecx
call int.004b9ee6
mov edx, dword [esi]
push 0
push edx
mov edx, edx
call fcn.004a37b5
add esp, 0x20
shr dh, 0x40
pop esi
mov esp, ebp
pop ebp
ret
mov ebx, eax
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x60], ebx
xchg ch, cl
xchg cl, ch
lea eax, [ebp - 0x120]
mov dword [ebx + 0x18], ecx
mov ecx, dword [ebp - 0x1c]
xchg cx, bp
xchg bp, cx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xac], edx
mov edx, dword [ebp - 0xc]
lea eax, [ebp - 0x13c]
ja 0x4a6743
jbe 0x48f352
xor bl, ch
cwde
pop ss
jbe 0x4a6743
fcmovu st(0), st(4)
mov cl, byte [ebp + 0x34]
mov edi, edi
mov ebx, dword [esi + 4]
shr esi, 0x40
lea esi, [esi + 8]
rcl byte [ebx], cl
jmp dword [esi]
mov cx, cx
shl dx, 0x20
mov dx, dx
mov dx, word [ebp + 0x10]
xchg dh, cl
shl dx, 0x20
xchg cx, di
xchg di, cx
xchg cl, dh
xchg di, cx
xchg cx, di
ja 0x4b8dae
jbe 0x48f3ff
cpuid
nop
ret
jbe 0x4b8dae
fisubr dword [ebp - 0x77]
ror byte [edx - 0x7699f4bb], cl
fisttp dword [eax + 0xba9e]
add byte [eax + 0xbb86], cl
add byte [esi + 0xfc686f0], al
mov byte [ebx], ah
mov esi, 0x89660002
fstp xword [ecx + 4]
mov bh, 0xfa
xor bh, byte [edi + 0xf]
mov dword [esi + edi*4], edx
add al, byte [eax]
add eax, 0xef8097
test al, al
jb 0x4b41e5
je 0x4998f1
jne 0x48f44b
ret 0x6ac7
push 0
push 0
push 3
push 0
push 3
push 0xc0000000
push ecx
call dword [sym.imp.KERNEL32.DLL_CreateFileA]
cmp eax, 0xffffffff
mov dword [0x556089], eax
jne 0x48f494
je 0x48f477
mov edx, dword [edi]
push 7
push edx
call fcn.004a37b5
add esp, 8
pop edi
pop esi
pop ebx
shr ax, 0x40
mov esp, ebp
pop ebp
ret
jmp 0x48f495
mov eax, 1
pop esi
pop ebp
ret
push eax
jmp 0x48fa6a
push esi
call 0x48fa80
add esp, 8
pop esi
pop ebp
shr cx, 0x40
ret
add byte [eax], al
call 0x254949ad
xchg edi, eax
dec edx
add ch, dl
and dword [edi + 0x383e], ebx
add byte [ebp + ebp*4 + 0x48], ah
add ch, dl
and dword [edi + 0x383e], ebx
add byte [ebx - 0x5e], ch
dec edx
add byte [eax], al
popal
add byte [eax + 0x34], al
add byte [ecx], ah
add byte [eax], al
dec esi
add byte [eax], al
add byte [eax], al
adc byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
xor byte [eax], al
add byte [eax], al
lea ebp, [eax]
dec edx
add byte [ebp + ecx*2 - 0x32e1ffb7], dl
dec ecx
add byte [ebp + ebp*4 + 0x48], ah
add byte [edi], dl
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [ebx - 0x50], ah
dec edx
add bh, bh
inc dword [eax]
add byte [eax], dh
add byte [eax], al
add byte [ebp + ecx*2 - 0x32d9ffb7], dl
dec ecx
add byte [edi + 0x38004884], ah
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add al, dh
dec edi
dec ecx
add byte [edi], al
int1
add byte [eax], al
xor byte [eax], al
add byte [eax], al
xchg esp, eax
dec ebp
dec ecx
add byte [eax + 0x100491d], ah
dec ecx
add byte [edx + 0x2b], dh
dec esp
add byte [edx + 0x22004bb0], dl
dec dword [eax]
nop
cpuid
ret 0xb092
jne 0x49c6c4
dec ebp
xchg ebp, eax
sub byte [edi], cl
test bl, ah
inc edx
invalid
mov eax, dword [edi]
mov cl, byte [eax + 0xba]
cmp cl, 1
jno 0x485561
jo 0x49055f
mov dword [0xfc800f6a], eax
dec edi
invalid
jo 0x485561
fld dword [ebx + 0x5f]
pop esi
mov esp, ebp
mov dh, dh
pop ebp
ret
push ebp
sub cl, byte [edi]
sub dword [edx + 0x24], 0x4700003
invalid
mov eax, dword [ebp - 0x14]
jmp 0x49134d
push ebx
mov dword [edx], eax
jmp 0x4a1aad
mov ah, ah
jge 0x493dad
jl 0x493da0
cpuid
nop
ret
shl dx, 0x20
lea esi, [esi + 8]
jmp dword [esi]
mov esi, dword [esi + 4]
shl eax, 0x20
mov esi, dword [ebp + esi]
mov cx, cx
jmp dword [esi]
push eax
call fcn.004a37b5
cmc
add esp, 0x18
pop edi
pop esi
pop ebx
mov esp, ebp
shl cl, 0x20
pop ebp
ret
mov edx, dword [esi]
mov cl, cl
push 0x29a
push edx
mov ecx, ecx
call fcn.004a37b5
add esp, 8
pop edi
pop esi
pop ebx
xchg ah, ch
xchg ch, ah
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x28]
inc edi
cmp eax, ecx
mov dword [ebp - 0x18], eax
mov bp, bp
jb 0x4a596f
jae 0x494743
cpuid
nop
ret
mov ebp, ebp
mov ecx, dword [esi + 4]
mov edx, edi
push 2
add edx, ecx
ja 0x49a1fa
jbe 0x49475a
cpuid
nop
ret
jbe 0x49a1fa
fmul dword [edi]
call fcn.004c14c1
add eax, 0x48593b08
add cl, dh
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [ebp + ecx*2 - 0x1a0fffb7], dl
dec ebx
add bl, al
popal
dec edx
add byte [edx], dl
add byte [eax], al
xor byte [eax], al
add byte [eax], al
lodsb al, byte [esi]
cmp eax, 0x310048
add byte [eax], al
xor dword [eax], eax
add byte [eax], al
lodsd eax, dword fs:[esi]
dec eax
add byte [eax], al
add byte [eax], al
add byte [eax], cl
add byte [eax], al
arpl word [eax + 0xff004a], si
add byte [eax], al
xor byte [eax], al
add byte [eax], al
xchg esp, eax
dec ebp
dec ecx
add byte [esi - 0x1b], dh
dec eax
add byte [esp + edi*2 + 0x4c004b], dl
add byte [eax], al
dec esp
add byte [eax], al
add byte [ebp + 0x440048fa], ch
add byte [eax], al
add byte [esi + edi], al
dec ecx
add bh, bl
pop esp
or edx, dword [esi + 0x48]
add byte [eax], dh
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [ebp + ecx*2 - 0x1a79ffb7], dl
dec eax
add bl, bl
in eax, 0x4b
add bl, ah
arpl word [edx], cx
pop edx
stosb byte es:[edi], al
dec ebx
add dh, dh
inc edi
dec ecx
add byte [edi + esi*2 + 0x4baa5a43], ah
add bl, ah
arpl word [edx], cx
xor al, 0x23
mov ecx, dword [0x556089]
push ecx
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov dword [0x556089], ebx
jno 0x494a1e
jo 0x49481f
nop
sub edi, dword [esi + 0xf]
cmp cl, 1
add byte [eax], al
jo 0x494a1e
xor al, 0x3f
push 8
push 0
shr eax, 0x40
push 0x556b58
call fcn.0048d7cf
cmp esi, esi
add esp, 0x18
jno 0x4b53c6
jo 0x49484b
add esi, dword [edx]
jb 0x49485b
jo 0x4b53c6
xor byte [ebp + 0xb], 2
add al, bl
mov esp, 0x493f56
jo 0x4948a2
fdivr dword [esi + edx*2 + 0x6600493f]
jo 0x4948a2
add byte [edx + 0x73], bl
dec edx
pop edx
jae 0x4948a8
add byte [esi + 0x48], ah
dec ecx
add byte [ebx + ebp*8 + 0x4aa26bea], ah
add byte [eax], al
popal
add byte [eax + 0x34], al
add byte [ecx], ah
add byte [eax], al
or byte [eax], al
add byte [eax], al
add byte [ecx], dl
add byte [eax], al
add byte [ecx], al
add byte [eax], bh
add byte [eax], al
add byte [edi], bh
pop edi
dec ecx
add byte [ebx], bh
sbb cl, byte [ebx]
xor byte [eax], al
add byte [eax], al
xor byte [eax], al
add byte [eax], al
xchg esp, eax
dec ebp
dec ecx
add byte [ebx + 0x6b004841], dl
mov byte [0x6100004a], al
add byte [eax], dh
add byte [eax], al
add byte [ebp + ecx*2 + 0x41930049], dl
dec eax
add byte [ebx - 0x5e], ch
dec edx
add byte [eax], al
popal
add byte [ecx], ah
xor byte [eax + eax], 0
add byte [eax], al
and dword [eax], eax
add byte [eax + eax + 0x10000000], bh
add byte [eax], al
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add al, ch
and cl, byte [ebx]
lodsd eax, dword fs:[esi]
add byte [eax + 0x34], al
add byte [eax], al
add byte [ecx], ah
add byte [eax], al
mov esp, 0
adc byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
xor byte [eax], al
add byte [eax], al
call 0x644993e5
lodsd eax, dword [esi]
dec eax
add byte [ebx], cl
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [0xd2004a97], ah
jno 0x494885
fld dword [eax + eax]
add byte [ebp + ebp*4 + 0x48], ah
add dl, dl
jno 0x494891
fld dword [eax + eax]
add byte [edx - 0x26], bh
dec ecx
add byte [eax], dh
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [ebx], bh
sbb cl, byte [ebx]
cmp byte [eax], al
add byte [eax], al
xor byte [eax], al
add byte [eax], al
xchg esp, eax
dec ebp
dec ecx
add byte [edx + 0x5d], bl
dec eax
add byte [ebx], dl
leave
dec eax
add byte [eax + eax], dh
add byte [eax], al
xor al, 0
add byte [eax], al
fsub dword [ecx + 0x4a]
add byte [eax], al
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add al, dh
dec edi
dec ecx
add byte [esp + eax*4], dl
invalid
pop edi
pop esi
jne 0x4a66bc
mov si, si
je 0x494a2e
cld
shr byte [esi + 0xf], 0x84
mov byte [ecx + eax], bl
add byte [0x8768dd4], dh
je 0x4a66bc
xor eax, 0x8768dd4
jno 0x49935d
jo 0x494a45
cpuid
nop
ret
jo 0x49935d
xor byte [edx + 0x6a0e8b], 0x51
call fcn.004c1388
mov si, si
mov edx, dword [esi]
push 0x100
lea eax, [ebp - 0x110]
call fcn.004bc96c
xor al, 0xd4
mov esi, dword [ebp - 0x14]
lea edx, [eax + ecx]
cmp edx, esi
jbe 0x49980a
mov ah, ah
ja 0x494a83
sub bh, byte [ecx - 0xc0014eb]
jmp 0x494a84
push ebx
call fcn.004aae4e
jmp 0x4997ef
mov esp, ebp
shl dl, 0x20
pop ebp
ret
mov edx, dword [ebp + 0xc]
ja 0x491349
jbe 0x4950aa
and esi, edi
test byte [edi], cl
xchg byte [ecx + 0x34ffffc2], bl
push ss
jbe 0x491349
xor al, 0x16
mov di, di
mov eax, dword [esi + 4]
shl ecx, 0x20
mov ebx, dword [esi + 8]
jno 0x484771
jo 0x4950c8
jnp 0x495096
jo 0x484771
and eax, 0xc768dd2
shl dword [ebx], cl
js 0x4b7d53
jns 0x4950e1
cpuid
ret
jns 0x4b7d53
fimul dword [esi - 0x15]
push esi
shr dh, 0x40
call fcn.004a0c99
add esp, 8
cmp di, di
test eax, eax
jb 0x4a1c1c
jne 0x49512c
je 0x495110
push 0x458bbf64
or al, 0x89
neg byte [esi + 0x66]
mov dword [eax], 0xc766fffd
inc eax
add al, byte [eax]
cmp byte [eax + 1], 0x5d
mov eax, dword [ebp + 0xc]
mov esi, esi
pop esi
mov word [eax], 0xfffd
mov word [eax + 2], 0x8000
mov eax, 1
pop ebp
ret
push 0x556931
mov si, si
push esi
call fcn.004a0c99
add esp, 8
test eax, eax
jb 0x4a1c35
mov eax, dword [ebp + 0xc]
jne 0x48fa67
je 0x495156
adc dh, byte [ebx]
mov word [eax], 0
mov word [eax + 2], 0x100
jmp 0x48fa5d
inc eax
mov di, di
mov cl, byte [ebp + 0x34]
xchg esi, edi
xchg edi, esi
mov ebx, dword [esi + 4]
lea esi, [esi + 8]
shl word [ebx], cl
mov bp, bp
jmp dword [esi]
ror esp, 1
shr dx, 0x40
mov cl, byte [ebp + 0x34]
mov ebx, dword [esi + 4]
mov dl, dl
lea esi, [esi + 8]
shl dword [ebx], cl
jmp dword [esi]
invalid
xor cl, dl
jb 0x4a8e47
add cl, 0x58
mov byte [ebp + esi - 0x10], cl
inc esi
cmp esi, 8
jl 0x4855cc
push esi
pop esi
jge 0x495b85
cpuid
nop
ret
jmp 0x495be9
and ch, ch
test cl, cl
jb 0x4a17be
mov edi, edi
jne 0x495bd3
shr di, 0x40
je 0x495ba8
or dl, byte [edi + 0xc]
xchg ebx, eax
add eax, 0x2c
push 8
lea edx, [ebp - 0x10]
mov ecx, ecx
jmp 0x495bb5
push eax
lea ebp, [ebp]
jmp 0x495bbb
push edx
call int.004b9ee6
add esp, 0xc
xchg ch, dh
xchg dh, ch
jmp 0x495be9
shr cx, 0x40
mov eax, 0xd4d4d4d4
shl bp, 0x20
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov bx, bx
mov edi, dword [ebp + 8]
ja 0x4bf2a3
jbe 0x495bf8
lea ebp, [0x860f791e]
movsd dword es:[edi], dword [esi]
xchg esi, eax
add al, byte [eax]
jbe 0x4bf2a3
and byte [ebx], 0x8b
inc ebp
cld
push eax
call fcn.004aae4e
mov ecx, dword [ebp + 8]
push ecx
mov si, si
call fcn.004aae4e
mov edx, dword [esi]
jmp 0x495c18
push edi
call 0x4b7866
fcomp dword [edx]
fild dword [edx + 0x66]
xchg ebp, esi
xchg si, bp
mov dword [edi], ebx
jmp dword [esi]
mov ebx, 0x51b5e8a8
add al, byte [eax]
and eax, 0xe9004a97
add byte [eax], al
add byte [eax], cl
add byte [eax], al
invalid
test eax, eax
jb 0x495f3d
je 0x4acd0d
jne 0x496295
nop
cpuid
ret 0x458b
mov eax, dword [ebp - 4]
shl cx, 0x20
mov ebx, 1
mov ecx, dword [eax]
shr ah, 0x40
mov dword [0x555fdd], ecx
mov ecx, dword [eax]
test ecx, ecx
jb 0x495f49
jne 0x4962c8
je 0x4962c2
mov esp, 0x8bc3a20f
pop ebp
clc
mov ebx, dword [ebp - 8]
shl ebx, 0x20
jmp 0x4962c9
push eax
call edi
test ebx, ebx
jb 0x4bb117
je 0x4acd0d
jne 0x4962df
sal byte [esi], 1
mov edx, dword [ebp - 0x14]
push str.GetSystemMetrics
jmp 0x4962e8
push edx
call esi
call fcn.004b0014
fxch st(0)
lea esp, [esp + 4]
lea esi, [esi + 4]
shr si, 0x40
mov ebx, ebx
cmc
jmp dword [esi]
add byte [eax], al
add byte [ebp + ecx*2 + 0x2c020049], dl
dec ebx
add byte [ebx + 8], ah
dec ecx
add byte [ebx + 0x4d004bfb], al
adc cl, byte [edx]
xchg esp, eax
imul ecx, dword [ecx], 0x51b82070
dec ebp
adc cl, byte [edx]
cmp ebx, 0x4b
add byte [edx + 0x805ff], al
add byte [eax], al
add eax, 8
mov dword [ebp - 8], eax
mov esi, esi
mov ecx, dword [ebp - 8]
mov edx, dword [esi]
sub ecx, edi
jmp 0x4969b0
push ecx
jmp 0x4969b3
push edx
call fcn.004c1388
mov eax, dword [esi]
mov edi, dword [ebp - 8]
jmp 0x4969c0
push eax
shr edi, 3
call fcn.004c0a2e
clc
and eax, 0xffff
jb 0x487b9b
add esp, 0xc
cmp edi, eax
ja 0x494195
jbe 0x4969e9
dec ebp
nop
jnp 0x496975
mov ecx, dword [esi]
push cs
push edi
shr ah, 0x40
jmp 0x4969f0
push ecx
lea ebx, [ebx]
call fcn.00493363
add esp, 8
jmp 0x496a00
push ebx
call fcn.004cee60
mov eax, dword [ebp - 4]
push eax
call fcn.004aae4e
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.004aae4e
mov edx, dword [ebp - 0x14]
jmp 0x496a1d
push edx
call fcn.004aae4e
mov dl, dl
mov eax, dword [esi]
push 0
ja 0x49417b
jbe 0x496a35
adc bh, byte [ecx + 0x3d]
jbe 0x49417b
and eax, 0x8726ff19
xadd al, ah
and byte [edi], cl
add esp, 0xffffffed
invalid
mov dword [ebp + 0x40], esp
mov esi, dword [ebp + esi]
ja 0x4be26b
jbe 0x497388
outsd dx, dword [esi]
cmp eax, 0x860f476c
invalid
jbe 0x4be26b
mov dword [ebp - 0x70], ecx
call fcn.004ced60
mov edx, dword [ebp - 0x34]
mov edi, dword [ebp - 0x14]
jno 0x48f310
jo 0x4973a7
ror byte [ecx + 0x63800f94], 0x7f
invalid
jo 0x48f310
xor al, 0x6a
imul esp, dword [edx + 0x4100004a], 0
add byte [eax], 0
add byte [eax], al
add dword [eax], eax
add byte [eax + eax], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], al
aas
pop edi
dec ecx
add bl, dh
dec esp
dec ebx
add byte [ecx + 0x2004a33], bh
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [edi + 0x20004900], dh
add byte [eax], al
add byte [eax + eax], al
add byte [esi + 0x3f], dl
dec ecx
add byte [ecx], cl
jne 0x49743f
add byte [esi + 0x34004abc], dh
add byte [eax], al
add byte [eax + eax], dh
add byte [eax], al
pop edx
jae 0x497450
add byte [edi], cl
je 0x497453
add byte [edx + ebx*4], al
add ch, bl
xor eax, 0x30004b45
add byte [eax], al
add byte [eax + eax], bh
add byte [eax], al
xor eax, 0x3c004b45
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [ebx - 0x5e], ch
dec edx
add byte [eax], al
popal
add byte [eax + 0x38], al
add byte [ecx], ah
add byte [eax], al
mov esp, 0
adc byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
xor al, 0
add byte [eax], al
add byte [eax + eax], dh
add byte [eax], al
call 0x9449bf6e
jl 0x497499
add byte [eax + eax], dh
add byte [eax], al
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add ah, ch
xor byte [eax], al
add byte [eax], al
in al, dx
sub eax, 0xe0049
add byte [eax], al
xor byte [eax], al
add byte [eax], al
hlt
add byte [eax], al
add byte [ecx], ah
add byte [eax], al
and al, byte [eax]
add byte [eax], al
add byte [eax], dl
add byte [eax], al
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [ebp - 0x6bffb5d8], cl
dec ebp
dec ecx
add byte [ebx + 0x18], cl
dec edx
add al, dh
dec edi
dec ecx
add byte [eax - 0x1e], dl
add byte [eax], al
xor byte [eax], al
add byte [eax], al
xchg esp, eax
dec ebp
dec ecx
add byte [eax + ebx + 0x4a], dl
add byte [ebp + ebp*4 + 0x48], ah
add byte [eax], al
add byte [eax], al
add byte [eax], bh
add byte [eax], al
add byte [ebp + ebp*4 + 0x48], ah
add ah, ch
add al, 0
add byte [eax], dh
add byte [eax], al
add byte [ebx - 0x50], ah
dec edx
add bh, bh
inc dword [eax]
add byte [eax], dh
add byte [eax], al
add byte [ebp + ecx*2 - 0x7359ffb7], dl
dec ebx
add byte [ebp + 0x440048fa], ch
add byte [eax], al
add byte [esi + edi], al
dec ecx
add byte [eax + 0x48d01492], cl
add byte [eax], al
add byte [eax], al
add byte [eax + eax], al
add byte [ebp - 0x29], dh
dec ecx
add byte [eax + eax], dh
add byte [eax], al
xor al, 0
add byte [eax], al
or edx, dword [esi + 0x48]
add byte [eax], dh
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [ebp + ecx*2 - 0x289fffb7], dl
xchg esp, eax
dec ebp
dec ecx
add byte [eax - 0x29], ah
dec edx
add byte [esi + 0x3f], dl
dec ecx
add byte [ebx + 0x5a004975], dh
jae 0x49758a
add byte [ecx + 0x75], cl
dec ecx
add byte [edx + eax*4], cl
jmp 0x49752d
and cl, byte [ebx]
lodsd eax, dword [esi]
cli
dec eax
add byte [eax + eax], al
add byte [esi - 0x3a], cl
dec edx
add byte [eax + eax], dh
add byte [eax], al
xor byte [eax], al
add byte [eax], al
dec esi
invalid
mov ecx, dword [ebp + 0x14]
jmp 0x494a6e
mov ecx, dword [ebp + 0xc]
xchg cx, si
xchg si, cx
push esi
mov eax, eax
push 0
jne 0x48cfe6
je 0x49792a
cpuid
ret
je 0x48cfe6
fsub dword [esi + 0x4c481]
add byte [eax], al
test eax, eax
jb 0x487973
jne 0x497963
add byte [eax], al
je 0x49794c
test eax, 0x6aa027f4
push esi
push 0x2e
push esi
call fcn.004a37b5
test al, 0x6d
add esp, 8
jmp 0x4b0a14
js 0x49f338
jns 0x49796e
fisubr dword [ebp - 0x3b76f01a]
jns 0x497973
jns 0x49f338
add byte [edx + 0x24448f99], al
cld
sbb byte [ecx - 0x3dbbb71], 0xf7
sti
idiv ebx
mov eax, 0x66666667
mov bl, dl
or ax, ax
imul ecx
sar edx, 2
mov ecx, edx
stc
jb 0x497993
jno 0x497944
fimul word [edi]
xor al, 0x9c
add dword [eax], eax
jb 0x4b1689
invalid
push 0x48e886
ret
cmp ecx, eax
je 0x4b3f0c
jne 0x4981d4
sbb esp, dword [eax + 0x1d48880f]
invalid
js 0x489f22
jns 0x4981e0
pop ecx
sub byte [ebx], 0xe9
jns 0x489f22
fdivr dword [ebp + 0x211cce9]
add ah, ch
sub eax, 0x70049
add byte [eax], al
xor al, 0
add byte [eax], al
sbb edi, ebx
dec eax
add byte [eax], al
add byte [eax], al
cmp byte [eax], al
add byte [eax], al
hlt
jmp dword [esi]
mov eax, dword [ebp - 8]
jno 0x4b4b99
jo 0x498e21
pop edx
jo 0x4b4b99
jo 0x4b4b99
add ah, 0x8d
and al, 4
cmp ebx, 1
jne 0x4bee4a
je 0x498e3d
lea ebp, [eax + ebp*8 + 0x25ff9]
call 0x4bee3b
invalid
push 0x493e39
ret
pop esi
and dh, dh
xor ax, ax
jb 0x4a9315
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [edi]
push 7
jne 0x4b7cfa
je 0x499900
cmpsd dword [esi], dword es:[edi]
sub dl, byte [esi - 0x1c0b7bf1]
add dword [eax], eax
je 0x4b7cfa
ja 0x48f3d1
jbe 0x499910
bound edi, qword [esi]
jbe 0x48f3d1
fcmovb st(0), st(4)
push 0x55691b
jmp 0x49a200
push edx
call int.004b9ee6
mov eax, dword [ebp - 8]
add edi, 2
push eax
mov cl, cl
call fcn.004aae4e
add esp, 0x10
mov esi, esi
mov ecx, edi
mov dword [ebp - 8], edi
and ecx, 7
jb 0x487b94
je 0x4969a8
jne 0x49a23d
nop
cpuid
ret 0xf889
mov eax, edi
sub eax, ecx
test esp, edi
jno 0x49a248
mov word [eax], ds
iretd
jno 0x49699e
xor eax, 0x2f84688d
dec edx
add bl, al
xor eax, 0x24648d20
add al, 0xff
sahf
mov dword [0x40eec166], eax
mov eax, dword [esi + 4]
xchg cl, ch
xchg ch, cl
mov ebx, dword [esi + 8]
mov ebx, dword [ebp + ebx]
xchg dx, ax
xchg dx, ax
lea esi, [esi + 0xc]
and cx, cx
add byte [ebx], al
jmp dword [esi]
mov word [esi + 0xbc], di
push 0x4bc64c
ret
inc ebx
cmp cl, byte [edi]
xchg dword [edx - 0x1e], ebp
add byte [eax], al
jbe 0x49b09f
mov ch, 0xfe
push ds
leave
jbe 0x4a9303
and byte [edx], 0xe8
sbb byte [ecx + 2], 0
call fcn.004c0a2e
shl eax, 3
push esi
mov edi, eax
call fcn.004c0fbf
mov esi, dword [ebp + 0x1c]
sub edi, eax
add esp, 8
mov eax, dword [esi + 0xc]
test eax, eax
jb 0x4c2dc3
jne 0x48ca81
je 0x49b0d9
cpuid
nop
ret
jne 0x48ca6e
xchg bp, di
xchg di, bp
je 0x49b0e9
imul esi, dword [edx], 0xf
test byte [edi + 0x19], bh
invalid
je 0x48ca6e
and eax, 0x565f57e4
call fcn.004bcb93
mov edx, edx
mov eax, dword [edi + 0x3c]
add esp, 0x20
mov al, al
shl eax, 1
jne 0x4a2f53
je 0x49b114
push ecx
enter 0xffffffffffffa38f, 0xf
test byte [ecx], bh
jle 0x49b119
je 0x4a2f53
add byte [0x8c4812a], ah
and eax, 0x8c4812a
add byte [eax], al
add byte [esi - 0x48], ah
add al, byte [eax]
pop edi
pop esi
pop ebx
mov esp, ebp
jmp 0x49f807
cmp esi, 0x1c
jle 0x4b1033
shr dx, 0x40
jg 0x49d016
and eax, 0x50c3a20f
push eax
pop eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebx]
push ecx
jmp 0x49d020
push edx
call fcn.004a37b5
sub edi, 0
add esp, 8
pop edi
shr ax, 0x40
jne 0x4bcd37
je 0x49d042
je 0x49d06d
je 0x4bcd37
xor al, 0xb7
lea ecx, [ebp - 0x23c]
mov esi, esi
jmp 0x49d053
push ecx
call fcn.004c0a2e
and eax, 0xffff
jb 0x48b03a
push 0x4b94d6
ret
lds ecx, [eax - 0x57ca0001]
mov bp, bp
mov word [esi + 0xbc], dx
shl di, 0x20
call fcn.004b5aff
jne 0x4a0a3c
je 0x49d091
stosb byte es:[edi], al
xchg edx, eax
pop es
je 0x4a0a3c
and eax, 0x40edc039
mov bp, bp
js 0x4c2d53
jns 0x49d0ab
mov cl, bh
jns 0x49d0bb
jns 0x4c2d53
mov dword [edx - 0x26fffda4], esp
cmpsd dword [esi], dword es:[edi]
push eax
pop eax
dec byte [edi]
fldenv [edi + 0xffe5850]
jmp dword [esi]
mov bp, bp
mov esi, esi
dec word [edi]
mov dh, dh
jmp dword [esi]
push ecx
in eax, dx
mov eax, dword [esi + 4]
shl bx, 0x20
mov ebx, dword [esi + 8]
mov ax, ax
xchg ah, bh
xchg bh, ah
movsx eax, byte [ebp + eax]
lea esi, [esi + 0xc]
mov dword [ebp + ebx], eax
jmp dword [esi]
lahf
mov ebp, ebp
call fcn.004b9fa6
ret
pop ebp
ret
jmp fcn.004aca31
jmp dword [esi]
lea esi, [esi]
mov al, byte [ebp + 0xb]
mov bp, bp
shr ecx, 0x40
mov cx, cx
push esi
mov esi, esi
mov si, si
xchg dl, ch
mov bp, bp
xchg ch, dl
push 0
lea edi, [edi]
mov byte [esi + 0xba], bl
shr dx, 0x40
mov bh, bh
mov byte [esi + 0xbb], al
jno 0x4ba364
jo 0x4a0a78
dec eax
bnd jo 0x4ba364
jo 0x4ba364
fsub st(0)
push ecx
pop ecx
shl cx, 0x20
mov ecx, dword [esi + 4]
push edx
pop edx
mov ebx, dword [esi + 8]
lea esi, [esi + 0xc]
ror byte [ebx], cl
jmp dword [esi]
pop edi
pop esi
lea ecx, [ecx]
pop ebx
push eax
pop eax
mov esp, ebp
js 0x4ab928
push esi
pop esi
jns 0x4a1a45
jg 0x4a1a5a
clc
jns 0x4ab928
push esi
mov byte [esi + 0xba], cl
shl cl, 0x20
mov si, si
mov byte [esi + 0xbb], 0
xchg byte [ebx], bh
xchg bx, bp
shl ax, 0x20
xchg bp, bx
shr edx, 0x40
mov word [esi + 0xbc], dx
shl bp, 0x20
call fcn.0048d3d8
mov al, byte [ebp + 0xb]
push esi
shr bx, 0x40
mov byte [esi + 0xba], bl
shr cx, 0x40
mov byte [esi + 0xbb], al
shl ecx, 0x20
shr dl, 0x40
mov word [esi + 0xbc], di
shl edx, 0x20
push 0x4a800d
ret
call fcn.004aae4e
add esp, 4
mov bx, bx
jno 0x484326
jo 0x4a1ac6
retf 0x7806
jo 0x484326
xor al, 0xa0
call int.004b9ee6
mov eax, dword [ebp - 0x18]
jmp 0x4a60a5
test al, 7
jb 0x4bf182
je 0x4bc247
jne 0x4a2f67
nop
cpuid
ret 0xe8c1
shr eax, 3
inc eax
push eax
push esi
call fcn.00493363
mov dl, byte [edi + 0x3c]
mov eax, 8
shl dl, 1
call fcn.004bc1c1
and eax, 0xc768d17
test dword [ebp + ebx], eax
jb 0x4be4ff
jmp dword [esi]
mov edi, dword [ebp - 4]
mov bx, bx
push edi
jmp 0x4a3544
call fcn.004aae4e
mov ecx, dword [ebp + 0x1c]
jmp 0x4a354d
push ecx
call fcn.004aae4e
jne 0x4ab575
je 0x4a355f
mov word [esi - 0x69], es
je 0x4ab575
xor eax, 0xd1296661
add esp, 4
lea ebp, [ebp]
mov dword [edi], 0
test eax, eax
jb 0x49ed3c
je 0x4a60b1
jne 0x4a5981
pushfd
sbb al, 0x66
and ebx, ebx
and bx, bx
test al, 0x3f
jb 0x49ed5d
mov cx, cx
shl dl, 0x20
jne 0x4a60b1
je 0x4a599c
mov dword [0xff8966d9], eax
mov di, di
mov eax, dword [esi + 4]
mov ecx, edi
push 2
add ecx, eax
push 0x556917
push ecx
ja 0x4a28ec
jbe 0x4a59b9
mov ah, 0x72
jbe 0x4a28ec
and eax, 0x66f639f8
cmp ebx, ebx
add esp, 0xc
add edi, 2
shr al, 0x40
mov ecx, dword [ebp - 8]
mov edx, dword [esi + 4]
mov cl, byte [eax + ecx]
inc eax
mov byte [edi + edx], cl
ja 0x49472b
jbe 0x4a60cb
sahf
je 0x4a60db
jbe 0x49472b
xchg byte [edx - 0x1a], bl
invalid
and eax, 0x24448fde
cld
mov edx, dword [esi + 4]
mov ebx, dword [esi + 8]
xchg al, dh
xchg dh, al
mov ax, word [eax + edx]
pop esi
or byte [esi + 0x66c686f0], al
mov eax, dword [eax + edx]
lea esi, [esi + 0xc]
test dh, 0x7d
add word [ebp + ebx], ax
jmp dword [esi]
mov bp, bp
pop ebx
mov esi, esi
mov esp, ebp
pop ebp
jne 0x4b6cb7
je 0x4a66d1
cpuid
nop
ret
je 0x4b6cb7
and eax, 0xd326ff7b
insb byte es:[edi], dx
call 0x491459
add eax, 0x40eac0b5
mov al, byte [ebp + eax]
push ebp
pop ebp
lea esi, [esi + 0xc]
call fcn.0049da68
pop esi
mov bx, bx
pop ebx
pop ebp
ret
sal byte [ebx + 0x468bf688], 1
add al, 0xc0
out 0x20, al
mov ebx, dword [esi + 8]
mov ax, word [eax]
mov esi, esi
shr bl, 0x40
lea esi, [esi + 0xc]
call fcn.0048d824
mov dword [edi], 0xff40edc1
invalid
mov edi, 0x5d840fea
invalid
xor eax, 0xe8c1665b
inc eax
xchg cx, bp
xchg bp, cx
jae 0x4a7351
jb 0x4a7347
mov dh, 0xdf
push 0xffffffffffffff8d
jbe 0x4a7352
lea esi, [esi + 8]
mov ax, ax
jmp dword [esi]
mov esi, dword [esi + 4]
jbe 0x4a7358
mov eax, eax
jmp dword [esi]
invalid
jne 0x497af4
je 0x4a930f
pop ds
je 0x497af4
fdivr dword [esi - 0x7f]
invalid
invalid
or eax, edx
jb 0x4b1194
add dl, 0
xor ecx, 0x5120
jb 0x4c1c5a
xor eax, 0x85
jb 0x4c1c89
add eax, ecx
or esi, esi
sub dh, 0
and eax, 0xffff
jb 0x4c1cad
xchg dx, bp
shl ebp, 0x20
xchg bp, dx
mov ebx, ebx
js 0x49fb84
mov edi, edi
jns 0x4a9fee
aad 0x4a
jns 0x49fb84
fsub st(4)
add esp, 8
mov ax, 0x15
pop edi
pop esi
mov bl, bl
pop ebx
mov esp, ebp
pop ebp
ret
invalid
xchg si, ax
xchg si, ax
lea esi, [esi + 0xc]
sbb word [ebp + ebx], ax
xchg ah, dl
xchg dl, ah
jmp dword [esi]
js 0x48b4f5
jns 0x4acd19
xchg ebx, eax
int 0x7a
leave
jns 0x48b4f5
mov dword [eax + ebp*8 + 0xd1c0], 0xe8c10e8b
inc eax
lea eax, [ebp - 0x180]
jne 0x48f225
je 0x4acd3d
mov esp, 0xfc3a20f
test dl, ah
and al, 0xfe
inc dword [0x30ff39c0]
je 0x48f225
add eax, 0x30ff39c0
inc esp
sbb eax, 0xe6820f00
mov al, 0xff
invalid
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
shr ax, 0x40
ret
sub bl, 0
test bx, bx
jb 0x4b641c
shl ah, 0x20
je 0x4b0545
jne 0x4af14a
sub dword [ecx], eax
sbb eax, dword [eax - 0x117f463a]
mov ecx, 0xffffe381
add byte [eax], al
add dh, 0xb9
sub dh, 0xb9
and ebx, 0xffff
jb 0x4b6439
shl ebx, 8
push edx
pop edx
lea ebx, [ebx + 0x5b0e80]
test ebx, ebx
jb 0x4b6441
je 0x4998f1
jne 0x4af179
mov byte [0x3b80f5], cl
cmc
cmp byte [ebx], 0
je 0x4998f1
jne 0x4af189
nop
cpuid
ret
cmp cx, 0x12c
jne 0x489a37
je 0x4af19a
adc byte [ecx + 0x24], al
call 0xb4f929
mov eax, dword [edi]
push 0
push eax
call fcn.004a37b5
mov ecx, dword [edi]
push 0x14
push ecx
lea ebx, [ebx]
call fcn.004999d1
mov edx, dword [edi]
push 1
push edx
call fcn.004866de
add esp, 0x18
js 0x488dfc
jns 0x4af1cd
pop ebx
cpuid
ret
jns 0x488dfc
fadd st(6)
ja 0x4bc566
mov di, di
jbe 0x4afa50
inc ecx
cpuid
ret
jbe 0x4bc566
sbb byte [ebp + 0x20e3c166], 0x66
mov dword [esi + 0xbc], ecx
jne 0x490232
mov bh, bh
mov ebp, ebp
je 0x4afa72
and al, 0x16
xor byte [edi], cl
test byte [edx - 0x380001f9], bh
invalid
je 0x490232
invalid
push 0
push ecx
push 0x100
push eax
push 0x100
push eax
push 0x9c40244c
jmp 0x4afe9d
push ebx
call fcn.004b7d15
add esp, 0x20
test eax, eax
jb 0x4b57dc
je 0x48f477
jne 0x4afebd
mov edx, 0x178bc1c1
mov edx, dword [edi]
push 0x485203
ret
ljmp 0x90a2:0xf004b01
jmp 0x4b01f5
push ebx
mov dh, dh
mov bp, bp
push eax
call fcn.004c3240
mov eax, dword [ebx]
add esp, 8
test eax, eax
jb 0x4c232a
mov ebp, ebp
jne 0x4b0230
je 0x4b0220
wait
push eax
jns 0x4b01e2
shl ecx, 0x20
loope 0x4b0243
pop edi
pop esi
mov ax, 0x1e
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, edi
push 1
and edx, 0xffff
jb 0x4c2345
push ecx
pop ecx
lea ecx, [ebp - 0x40]
push edx
dec ebp
sar bh, 0xf2
mov edx, dword [esi]
add edx, 0x74
push ecx
jmp 0x4b0252
push edx
push eax
call fcn.004c3f40
add esp, 0x14
test ax, ax
jb 0x4c234d
je 0x49790f
jne 0x4b0275
shr byte [edi - 0x14fc740a], 0xff
invalid
mov eax, dword [ebx]
jmp 0x4b0278
push eax
call fcn.004aae4e
add esp, 4
mov ax, 0x20
pop edi
pop esi
pop ebx
mov esp, ebp
shr cx, 0x40
pop ebp
shl cl, 0x20
ret
and bl, bl
xor esi, esi
jb 0x4839b2
jne 0x4bc549
je 0x4b0559
mov eax, dword [0xea840f5c]
mov edi, 0xdf340000
je 0x4bc549
xor al, 0xdf
lea ecx, [ebp - 0x110]
mov dx, dx
push 0
push ecx
xchg esi, ebx
xchg ebx, esi
call fcn.004c1388
lea edx, [ebp - 0x510]
lea eax, [ebp - 0x110]
jmp 0x4b0584
push edx
push 0x49f88a
ret
xor esi, esi
jb 0x4c1474
mov eax, dword [ebp + esi - 0x5c]
test dh, 0xd1
test eax, eax
jb 0x4ac230
je 0x4b71ce
jne 0x4b104c
and edx, dword [ecx]
mov eax, dword [ebp + esi - 0x94]
push eax
xchg bl, bh
xchg bh, bl
js 0x4b71c3
jns 0x4b1064
nop
cpuid
ret 0x890f
jns 0x4b71c3
shl dx, 0x20
jb 0x4b7c74
lea edx, [edx]
jae 0x4b107c
nop
cpuid
ret
jmp dword [esi]
and eax, 0x4768d37
lds esp, [ebx - 0x78991278]
ljmp 0x6c26
insb byte es:[edi], dx
cmp byte [edi], cl
add dword [esi + 0x70fffd91], 0xe995e903
jo 0x48b474
jmp 0x805b0c8a
fcmovbe st(0), st(4)
mov cx, cx
lea eax, [ebp - 8]
push 8
lea ecx, [ebp - 0x1c]
shr cx, 0x40
jne 0x4bd2a5
je 0x4b3347
cpuid
and ebx, eax
je 0x4bd2a5
add eax, 0x24448f00
cld
jmp 0x4b3354
push esi
call fcn.00499d3f
add esp, 0x30
test ax, ax
jb 0x490948
jne 0x4a1a2f
je 0x4b3375
mov ch, 0x58
mov al, byte [0xff6ffeb]
sub dword [ecx], 0x70fffe7d
add al, byte [ecx]
adc ecx, dword [edi]
sbb byte [edi], 0x7d
invalid
jmp 0x4b3376
push esi
jno 0x49b0a7
jo 0x4b3382
add dword [ebx], edx
jo 0x49b0a7
and eax, 0x38558b69
div ebx
mov dword [ebp + 0x30], eax
mov dword [ebp + 0x38], edx
jmp dword [esi]
je 0x4bd09c
xor dh, 0x86
aam 0x86
loop 0x4b3ea4
test ecx, edi
pop ebx
invalid
dec ecx
add dl, dh
dec ecx
je 0x4b3e88
dec edx
add byte [edx - 0x2d], dh
dec eax
add byte [0xcc48129], dh
add byte [eax], al
add byte [ebx - 0x78], dl
fucomi st(0)
pop ebp
outsd dx, dword [esi]
invalid
cmp dword [ebp + 0x10], eax
mov di, di
je 0x49509c
jne 0x4b3f1e
out dx, eax
arpl word [ebp - 0xc0014d1], si
jmp 0x4b3f1f
push ebx
call fcn.004aae4e
cmc
cmc
add esp, 4
mov ax, 0xa
pop edi
pop esi
pop ebx
jno 0x495091
jo 0x4b3f40
lea esi, [ebx + 0x4b800fb6]
adc esi, edi
inc edi
jg 0x4b3ed4
jo 0x495091
invalid
inc ebp
cld
fisub dword [ebp + 0x66]
shl edi, 0x20
shl dh, 0x20
push esi
pop esi
xchg bp, ax
xchg bp, ax
jmp 0x493d92
std
lea esi, [esi + 8]
jmp dword [esi]
test eax, eax
jb 0x4a732f
mov si, si
je 0x49a21e
jne 0x4b4baf
xchg esp, eax
aas
mov al, byte [0xc0f0458b]
in eax, dx
inc eax
mov eax, dword [ebp - 0x10]
shr ch, 0x40
push eax
call fcn.004aae37
add esp, 4
mov dword [ebp - 8], eax
test eax, eax
jb 0x4a7197
jne 0x48c35a
xchg bp, cx
xchg cx, bp
mov al, al
je 0x4b4be0
push 0xffffffffffffffd3
mov edi, 0xe8595153
js 0x4b4b88
push ebx
push ecx
pop ecx
call fcn.004cee60
add dword [eax], eax
mov ecx, dword [ebp - 4]
shl ebx, 0x20
push ecx
call fcn.004aae4e
mov edx, dword [ebp - 0xc]
push edx
call fcn.004aae4e
mov eax, dword [ebp - 0x14]
mov dl, dl
mov ecx, ecx
push eax
call fcn.004aae4e
mov ecx, dword [esi]
push 0xc
push ecx
call fcn.004a37b5
add esp, 0x18
pop edi
ja 0x48c352
jbe 0x4b4c29
mov bh, 5
ja 0x4b4ca4
jbe 0x48c352
add eax, 0x4992ef49
add byte [eax + eax], al
add byte [esi + 0x40004abc], dh
add byte [eax], al
add byte [eax + eax], al
add byte [0x8004aad], ah
add byte [eax], al
add byte [eax + eax], dh
add byte [eax], al
imul esp, dword [edx + 0x6100004a], 0
xor byte [eax + eax], 0
add byte [eax], al
and dword [eax], eax
add byte [edx], bh
adc al, byte [eax]
add byte [eax], al
inc edx
add byte [eax], al
xor byte [eax], al
add byte [eax], al
test byte [eax + ecx*2 + 0x4a33b900], dh
add byte [ecx], al
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add byte [esi + 0x3f], dl
dec ecx
add byte [eax + 0x1b], ch
dec esp
add byte [edx + 0x73], bl
dec edx
add byte [esp + ecx*2 + 0x359b004b], dl
sub byte [ebx - 0x5e], ch
dec edx
add byte [eax], al
popal
add byte [eax + 0x34], al
add byte [ecx], ah
add byte [eax], al
or al, byte [eax]
add byte [eax], al
add byte [eax], dl
add byte [eax], al
add byte [eax], al
add byte [eax], dh
add byte [eax], al
add al, ch
and cl, byte [ebx]
xchg ecx, eax
pop edx
dec ecx
add byte [eax], dh
add byte [eax], al
add byte [eax], dh
add byte [eax], al
fisubr dword [ebx + ecx*4]
dec ebp
fmul qword [edi]
and dword [esi + eax], 0x86027000
inc ebp
jo 0x4b5e4b
sbb byte [edx + 0x4aa26b], 0
popal
add byte [eax + 0x38], al
add byte [ecx], ah
add byte [eax], al
mov esp, 0
adc byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
xor al, 0
add byte [eax], al
call 0x354ba33a
inc ebp
dec ebx
add byte [eax + eax], cl
add byte [eax + eax], bh
add byte [eax], al
xor eax, 0x3c004b45
add byte [eax], al
add byte [eax + eax], cl
add byte [esp + edi*2 + 0x34004b], dl
add byte [eax], al
xor byte [eax], al
add byte [eax], al
in al, dx
sub eax, 0xa0049
add byte [eax], al
xor byte [eax], al
add byte [eax], al
hlt
mov dl, dl
push edx
push 0
push eax
mov eax, dword [ebp - 0x10]
mov bh, bh
mov dh, dh
push eax
push ecx
push esi
push 6
mov dword [edi], 1
call fcn.0048448c
add ecx, 0x638e0b88
sub ecx, 0x638e0b88
add esp, 0x24
cmp ax, 0x1a
shl bl, 0x20
jne 0x4bccd8
je 0x4b5e90
cpuid
nop
ret
je 0x4bccd8
and eax, 0xd8d0f2f
add byte [eax], al
add byte [esp + eax - 0x3b], bh
cpuid
ret
pop esi
test dword [ebx + 0x5e8b0446], 0x40efc008
mov eax, dword [ebp + eax]
mov ebx, dword [ebp + ebx]
shl esi, 0x20
lea esi, [esi + 0xc]
add dword [ebx], eax
jmp dword [esi]
xchg ebx, eax
lodsd eax, dword [esi]
push 0x4b57ca
ret
add eax, 0xc768db4
xor byte [ebx], al
jb 0x4a2d6d
jmp dword [esi]
invalid
ret
call fcn.004aae4e
add esp, 4
add esi, 4
test esp, ecx
jae 0x4b71dc
nop
cpuid
ret
jae 0x49d000
add eax, 0xe5c16687
and cl, al
loop 0x4b71f0
and esi, esi
clc
ja 0x4a9fa3
scasd eax, dword es:[edi]
sub eax, 0x276ffff
jbe 0x4b71f8
insb byte es:[edi], dx
adc eax, 0x2da5860f
invalid
jbe 0x4a9fa3
fnstenv [eax + eax*4]
ljmp 0xa982
mov esi, ebx
lea ebx, [ebx]
ja 0x498dae
jbe 0x4b7c82
invalid
jbe 0x498dae
xor eax, 0x3726ff10
xchg bp, cx
xchg cx, bp
jne 0x488383
je 0x4b7ca0
test eax, 0xf8e11f1
test ch, bl
push es
std
invalid
je 0x488383
fdiv dword [edi]
imul esp, dword [edx + 0x6100004a], 0
cmp byte [eax], 0
add byte [eax], al
add byte [ecx], ah
add byte [eax], al
mov esp, 0
adc byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
xor al, 0
add byte [eax], al
call 0x14bc7ef
dec ecx
add byte [edi], ah
dec edx
add bh, ch
xchg edx, eax
dec ecx
add byte [eax + eax], bh
add byte [eax], al
lodsd eax, dword [esi]
cli
dec eax
add byte [eax + eax], bh
add byte [eax], al
xchg edx, eax
mov al, 0x4b
add al, dh
jl 0x4b7d36
add byte [edi], cl
mov byte [0xb092c326], al
dec ebx
add byte [edi], ah
dec edx
add byte [ebx + esi*8], dh
push eax
call fcn.004a37b5
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
xchg dx, cx
xchg cx, dx
pop ebp
ret
cmp esi, 0xfc085ff
sub al, 0x81
invalid
jmp dword [esi]
shr dl, 0x40
pop ebx
mov esp, ebp
jne 0x489a33
je 0x4b7d83
and eax, 0xfc3a20f
test byte [edx + 0x34fffd1c], ch
stc
je 0x489a33
xor al, 0xf9
push edx
call fcn.00499244
cmp dl, dl
add esp, 0x10
dec eax
jmp 0x4b9e4c
push esi
mov esi, esp
xchg al, cl
xchg cl, al
pushal
mov dh, dh
mov eax, 0
cpuid
call fcn.0049a0bd
fcom st(3)
test ebx, ebx
jb 0x48b479
je 0x4acd0d
jne 0x4b9e96
ja 0x4b9e4a
popfd
popfd
xchg bp, ax
xchg bp, ax
push str.WFFreeMemory
push edi
call esi
shl ebp, 0x20
mov edi, eax
test edi, edi
jb 0x48b489
je 0x4acd0d
jne 0x4b9ebb
pop ebx
cdq
fdiv dword [edx - 0x73]
push ebp
invalid
lea edx, [ebp - 0x10]
lea eax, [ebp - 4]
push edx
push eax
push 4
push 0xffffffff
push 0
call ebx
add ebx, 0
jno 0x4b9ed8
cpuid
ret
jno 0x496281
add byte [edx], 0x89
in al, dx
pop ebp
ret
shr ebp, 0x40
mov ecx, dword [ebp + 8]
mov eax, 4
stc
jne 0x4981c8
je 0x4bbe7d
nop
cpuid
ret
je 0x4981c8
fisub dword [edx + 0xf]
mov byte [esi], dl
sbb bh, bh
invalid
push 0x4a004a
ret
mov eax, esi
and eax, 0xffff
jb 0x4839c7
shl eax, 8
add eax, 0x5b0f80
push 0x4a19bf
ret
mov eax, dword [eax]
shl bl, 0x20
shr bx, 0x40
lea esi, [esi + 0xc]
and bx, bx
ja 0x48bf48
jbe 0x4bc581
cmp ch, bl
and al, 0x91
jbe 0x48bf48
fisubr dword [ebx - 0x7e07ba75]
les eax, [eax + eax]
add byte [eax], al
mov ecx, dword [esi]
mov esi, esi
jmp 0x4bc597
push eax
push ecx
call fcn.004a37b5
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
shl ah, 0x20
pop ebp
ret
mov dword [ebp - 0xc], eax
xchg dh, ch
xchg ch, dh
je 0x4bcd1a
jne 0x4bccea
loope 0x4bcd0e
out 0x66, al
cmp eax, 0x840f0017
add byte es:[eax], al
add byte [ecx - 0x7cfd8a01], cl
inc edi
cmp ax, 0x17
je 0x4bcd1a
mov edi, edi
jne 0x4bccfa
add dword [edi + 0x66], 0xffffff85
ror byte [edi], 0x82
ror esi, 1
invalid
test ax, ax
jb 0x4a9bd4
jne 0x4b102b
je 0x4bcd0f
cpuid
ret
sub eax, 0x20e1c166
shl cx, 0x20
jmp fcn.004a45a3
mov edx, dword [ebp - 0x10]
jmp 0x4bcd1e
push edx
call fcn.004aae4e
jno 0x4a4594
jo 0x4bcd2f
sbb ecx, dword es:[edi]
sbb byte [edi + 0x78], 0xfe
push dword [0xc9885ea7]
jo 0x4a4594
xor eax, 0xc9885ea7
pop esi
mov cl, cl
pop ebx
mov esp, ebp
pop ebp
ret
mov byte [edx + ecx], al
inc edx
cmp edx, 8
jb 0x4859dc
jae 0x4bd0b2
cpuid
fcmovb st(0), st(3)
mov eax, dword [ebp + 8]
mov cl, cl
inc edi
xor edx, edx
jb 0x48ee57
lea esi, [edi + eax + 1]
mov al, byte [esi - 1]
test al, al
jb 0x48ee60
shr edi, 0x40
je 0x4859be
shr dh, 0x40
jne 0x4bd0e1
invalid
cmp al, 0x30
jb 0x4859be
mov ebp, ebp
jae 0x4bd0f1
nop
cpuid
ret 0x613c
cmp al, 0x61
jb 0x4bd10e
jae 0x4bd0fd
cli
cmp dword [ecx], 0xf663cd2
xchg dword [edi], eax
add byte [eax], al
add byte [esi + 2], dh
cmp edx, edx
cmp al, 0x66
ja 0x4bd10e
jbe 0x4bd10b
xlatb
adc al, 0xf8
clc
add al, 0xe0
cmp al, 0x46
ja 0x4859be
jbe 0x4bd11c
push edi
loop 0x4bd0ae
mov ecx, 0x830f413c
pop ss
add byte [eax], al
add byte [esi + 0x5e], dl
cmp al, 0x41
jae 0x4bd13b
push esi
pop esi
jb 0x4bd12c
push ebx
cmp dh, cl
inc esp
cmc
cmp al, 0x39
ja 0x4859be
jbe 0x4bd13b
cpuid
nop
ret
add al, 0xd0
cmp al, 9
shl bp, 0x20
jbe 0x4859ec
ja 0x4bd14f
jae 0x4bd12d
xchg ebp, eax
insb byte es:[edi], dx
jno 0x4859ea
jo 0x4bd15b
cpuid
nop
ret
jo 0x4859ea
call fcn.0048cf22
jmp 0x4bd2a6
push eax
sbb ch, 0x52
jmp 0x4be503
push eax
mov bx, bx
push 4
push 0xffffffff
push 0
call ebx
test eax, eax
jb 0x4b22da
je 0x4be57b
xchg dx, bp
xchg bp, dx
jne 0x4be52d
push eax
js 0x4be524
inc ebp
mov eax, dword [ebp - 4]
shl ax, 0x20
mov ecx, dword [eax]
mov dword [0x555fdd], ecx
mov ecx, dword [eax]
test ecx, ecx
jb 0x4b22e6
je 0x4be559
jne 0x4be550
push ds
adc edi, eax
inc ebp
clc
add dword [eax], eax
add byte [eax], al
mov dword [ebp - 8], 1
mov edx, edx
push ecx
pop ecx
push eax
call edi
xchg di, si
xchg si, di
mov eax, dword [ebp - 8]
test eax, eax
jb 0x4b22f0
jne 0x4962df
je 0x4be57b
sub eax, 0xb368b806
pop esi
push ebp
add bh, bh
adc eax, sym.imp.KERNEL32.DLL_LoadLibraryA
push str.wfapi.dll
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
mov edi, eax
test edi, edi
jb 0x4b22f9
je 0x4acd0d
jne 0x4be59b
xchg edx, eax
inc esp
push str.WFQuerySessionInformationA
jmp 0x4be5a1
push edi
call esi
mov ebx, eax
js 0x4b9e82
jns 0x4be5b3
fistp qword [edx + 0x2f]
stosd dword es:[edi], eax
jns 0x4b9e82
fld dword [edi + ecx - 0x79]
adc byte [eax], al
add byte [eax], al
jbe 0x4be5c5
fld xword [ebx - 0x78]
ror byte [ebp - 0x7699f78a], cl
leave
mov dl, dl
lea esi, [esi + 8]
mov cx, cx
jmp dword [esi]
mov ecx, dword [ebp + 0x10]
lea edx, [ebp - 8]
jmp 0x4bee51
push ecx
push 0
push 0
jne 0x4b9253
je 0x4bee63
aas
mov ebp, 0x840f69b7
ljmp 0x493e
je 0x4b9253
add al, 0x3e
dec ecx
add byte [esi + 0x4be37f6e], dh
add byte [edx - 0x10ffb62a], ah
imul ecx, dword [edx], 0x25
ror dword [ebx - 0x3b7e03bb], 1
sbb byte [eax], al
add byte [eax], al
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
add eax, 0x89158bcb
pushal
push ebp
add bl, ch
push edx
mov dl, dl
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov ecx, dword [ebp + 8]
test cx, cx
jb 0x4b41f9
je 0x4af130
jne 0x4bf1ad
nop
cpuid
ret
ja 0x4875d4
jbe 0x4bf1b7
sub ch, byte [edi + ecx]
xchg byte [edi], dl
test ah, bh
invalid
jbe 0x4875d4
fmul dword [edx - 0x7b]
ror byte [edi], 0x82
fbld tbyte [esi - 0x7bf00004]
push ss
add byte [eax], al
add byte [esi - 0x77], ah
push dword [ebp + 4]
xor al, 0xa
mov byte [ecx - 1], bl
invalid
fsubr dword [eax + ebp*8 + 7]
popal
invalid
mov bh, 0xcf
mov ebx, ebx
xchg al, bl
xchg bl, al
mov ecx, dword [ebp + 0x34]
xchg dword [ebp + 0x48], esi
mov edi, dword [ebp + 0x4c]
shr edi, 0x40
rep movsd dword es:[edi], dword [esi]
xchg di, ax
xchg di, ax
xchg dword [ebp + 0x48], esi
mov dword [ebp + 0x34], ecx
mov cx, cx
lea esi, [esi + 4]
xchg bh, bl
xchg bl, bh
mov dword [ebp + 0x4c], edi
jmp dword [esi]
cmp ebx, dword [ecx]
mov eax, dword [ebp + 0x30]
mov edi, dword [ebp + 0x4c]
stosb byte es:[edi], al
shl ebx, 0x20
lea esi, [esi + 4]
mov cx, cx
ja 0x4c25bf
jbe 0x4c1ca7
enter 0xffffffffffffa20f, 0xffffffffffffffc3
jbe 0x4c25bf
fimul dword [edi]
jmp 0x4c1cb0
push esi
call fcn.004a37b5
add esp, 8
mov bh, bh
pop edi
pop esi
pop ebp
ret
ljmp 0x44e:0x8bc08926
invalid
xor eax, 0xf689669f
mov eax, dword [esi + 4]
mov ebx, dword [esi + 8]
mov ax, word [eax]
js 0x4ac401
jns 0x4c2367
cpuid
ret
jns 0x4ac401
mov dword [ebp + 0x4c], edi
shl di, 0x20
jmp dword [esi]
mov dx, dx
mov eax, dword [esi + 4]
lea esi, [esi + 8]
call fcn.004b05fb
fstp dword [ebx - 0x73]
lea esp, [esp + 4]
shl ebx, 8
push edi
mov ah, ah
push 0x100
jmp 0x4c2d73
push edi
lea edx, [ebx + 0x5b0e80]
push 0x9c40244c
push edx
call fcn.004b7d15
add esp, 0x20
jno 0x4af123
mov bp, bp
jo 0x4c2d99
inc ebx
fimul word [edi]
add byte [ebx + eax*8 + 0x3d05fffe], 0x39
invalid
jo 0x4af123
add eax, 0x66c6393d
shl ebp, 0x20
jae 0x4a34e0
jb 0x4c2db3
in eax, dx
jge 0x4c2dd0
mov dh, 0xe8
xchg byte [edi], ah
invalid
call fcn.004a553e
and eax, 0xedc16642
inc eax
call fcn.004c2313
add eax, 0x24448f62
cld
jmp 0x4c2dca
push esi
mov edi, eax
call fcn.004aae4e
cmp dh, 0xff
mov ecx, dword [ebp + 0x1c]
push ecx
lea ebp, [ebp]
call fcn.004aae4e
add esp, 0x18
or bl, bl
test edi, edi
jb 0x49b091
je 0x4bbe68
xchg cx, bp
xchg bp, cx
jne 0x4c2e01
aam 0xce
movsb byte es:[edi], byte [esi]
push ebx
call fcn.004aae4e
add esp, 4
mov ax, 0x15
pop edi
pop esi
pop ebx
mov esp, ebp
jno 0x4bbe62
jo 0x4c2e22
add ebp, dword [ebx - 0x12]
jo 0x4bbe62
invalid