Function at 0x4566d0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Hide graphical window

Disassembly:
push ebp
lea ebp, [esp - 0x74]
sub esp, 0x74
push 0xffffffffffffffff
push 0x6191af
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x94
push ebx
push esi
push edi
xor esi, esi
mov dword [ebp - 0x10], esp
mov byte [ebp + 0x6b], 0
mov byte [ebp + 0x6a], 0
mov word [0x6b4288], si
mov dword [ebp + 0x64], esi
mov dword [ebp + 0x60], 0xffffffff
call fcn.00458290
lea ecx, [ebp - 0x70]
call fcn.0044d680
mov ebx, dword [ebp + 0x7c]
mov dword [ebp - 4], esi
mov dword [ebp + 0x6c], 1
mov byte [ebp - 4], 1
lea eax, [ebp + 0x69]
push eax
lea ecx, [ebp + 0x70]
push ecx
lea edx, [ebp + 0x6c]
push edx
mov ecx, ebx
call fcn.0052437c
test al, al
je 0x457cc7
mov edi, 1
add dword [ebp + 0x64], edi
cmp byte [ebp + 0x69], 0
jne 0x45678f
mov ecx, dword [0x6b48b8]
test ecx, ecx
je 0x456772
mov eax, dword [ecx]
mov edx, dword [ebp + 0x70]
mov eax, dword [eax + 0x14]
push edx
call eax
jmp 0x456732
mov ecx, dword [ebp + 0x70]
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
mov ecx, dword [0x6b48a0]
call fcn.00476220
jmp 0x456732
mov esi, dword [ebp + 0x70]
add esi, 2
mov dword [ebp + 0x70], esi
mov ecx, 0x63295c
mov eax, esi
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4567c6
test dx, dx
je 0x4567c2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4567c6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4567a0
xor eax, eax
jmp 0x4567cb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4567ee
lea edx, [ebp - 0x3c]
push str.Command_line_flags:_n_n___autorecover______________Scan_for_auto_recover_files_n___b__src_dir___dst_dir_____Add_batch_entries_for_a_directory_n___blockDebugOutput_________Block_debug_output_from_specific_DLLs_n____________dllname_...__n___c________________________Clear_job_list_n___capture__________________Switch_to_capture_mode_n___capaudiorec__onoff______Enable_disable_capture_audio_recording_n___capaudioplay__onoff_____Enable_disable_capture_audio_playback_n___capchannel__ch____freq___Set_capture_channel__opt._frequency_in_MHz__n____________________________Use_antenna:_n__or_cable:_n__to_force_mode_n___capdevice__devname_______Set_capture_device_n___capfile__filename________Set_capture_filename_n___capfileinc__filename_____Set_capture_filename_and_bump_until_clear_n___capfilealloc__size_______Preallocate_capture_file_in_megabytes_n___capstart___time__s_______Capture_with_optional_time_limit_n_____________________________default_is_minutes__use_s_for_seconds__n___cmd__command_____________Run_quick_script_command_n___F__filter________________Load_filter_n___h________________________Disable_exception_filter_n___hexedit___filename_______Open_hex_editor_n___hexview___filename_______Open_hex_editor__read_only_mode__n___i__script____args..._____Invoke_script_with_arguments_n___master__file_____________Join_shared_job_queue_in_non_autostart_mode_n___min______________________Start_minimized_n___max______________________Start_maximized_n___noStupidAntiDebugChecks__Stop_lame_drivers_from_screwing_up_debugging_n____________________________sessions_n___p__src___dst_____________Add_a_batch_entry_for_a_file_n___portable_________________Switch_to_portable_settings_mode_n___priority__pri____________Start_in_low__belowNormal__normal__aboveNormal__n____________________________high__or_realtime_priority_n___queryVersion_____________Return_build_number_n___r________________________Run_job_queue_n___resetall_________________Reset_all_settings_to_defaults_n___s__script________________Run_a_script_n___safecpu__________________Do_not_use_CPU_extensions_on_startup_n___slave__file______________Join_shared_job_queue_in_autostart_mode_n___topmost__________________Create_window_as_always_on_top_n___vdxadebug________________Enable_filter_acceleration_debug_window_n___x________________________Exit_when_complete_n
push edx
call fcn.0051c348
add esp, 8
push 0x694d20
lea eax, [ebp - 0x3c]
push eax
call fcn.005f8355
mov ecx, str.autorecover
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45681b
test dx, dx
je 0x456817
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45681b
add eax, 4
add ecx, 4
test dx, dx
jne 0x4567f5
xor eax, eax
jmp 0x456820
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x45682d
mov byte [ebp + 0x6a], 1
jmp 0x456732
mov ecx, 0x63203c
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45685a
test dx, dx
je 0x456856
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45685a
add eax, 4
add ecx, 4
test dx, dx
jne 0x456834
xor eax, eax
jmp 0x45685f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x45686f
mov byte [0x6b3f10], 1
jmp 0x456732
mov ecx, 0x632038
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45689c
test dx, dx
je 0x456898
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45689c
add eax, 4
add ecx, 4
test dx, dx
jne 0x456876
xor eax, eax
jmp 0x4568a1
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4568ff
lea ecx, [ebp + 0x70]
push ecx
lea edx, [ebp + 0x6c]
push edx
mov ecx, ebx
call fcn.005243be
test al, al
je 0x4568e0
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp + 0x6c]
push ecx
mov ecx, ebx
call fcn.005243be
test al, al
je 0x4568e0
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp + 0x70]
push edx
push eax
call fcn.0045a720
add esp, 8
jmp 0x456732
lea ecx, [ebp - 0x18]
push str.Command_line_error:_syntax_is__b__src_dir___dst_dir_
push ecx
call fcn.0051c348
add esp, 8
push 0x694d20
lea edx, [ebp - 0x18]
push edx
call fcn.005f8355
mov ecx, str.blockDebugOutput
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45692c
test dx, dx
je 0x456928
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45692c
add eax, 4
add ecx, 4
test dx, dx
jne 0x456906
xor eax, eax
jmp 0x456931
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4569a8
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp + 0x6c]
push ecx
mov ecx, ebx
call fcn.005243be
test al, al
jne 0x456967
lea edx, [ebp + 0x40]
push str.Command_line_error:_syntax_is__blockDebugOutput__filter_
push edx
call fcn.0051c348
add esp, 8
push 0x694d20
lea eax, [ebp + 0x40]
push eax
call fcn.005f8355
mov ecx, dword [ebp + 0x70]
push 0xffffffffffffffff
push ecx
lea edx, [ebp - 0x7c]
push edx
call fcn.0051b523
add esp, 0xc
mov eax, dword [eax]
push eax
mov byte [ebp - 4], 2
call fcn.005d61b0
mov eax, dword [ebp - 0x7c]
add esp, 4
cmp eax, 0x6575c8
mov byte [ebp - 4], 1
je 0x456732
push eax
call fcn.005f7371
add esp, 4
jmp 0x456732
mov ecx, 0x631f9c
mov eax, esi
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4569d6
test dx, dx
je 0x4569d2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4569d6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4569b0
xor eax, eax
jmp 0x4569db
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4569e9
call fcn.004582b0
jmp 0x456732
mov ecx, str.capture
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x456a16
test dx, dx
je 0x456a12
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x456a16
add eax, 4
add ecx, 4
test dx, dx
jne 0x4569f0
xor eax, eax
jmp 0x456a1b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x456a39
push eax
mov eax, dword [0x6b48ac]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
push edi
mov ecx, eax
call fcn.0048e1d0
jmp 0x456732
mov ecx, str.capaudiorec
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x456a66
test dx, dx
je 0x456a62
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x456a66
add eax, 4
add ecx, 4
test dx, dx
jne 0x456a40
xor eax, eax
jmp 0x456a6b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x456c65
cmp dword [0x6b48b8], eax
jne 0x456a9a
lea ecx, [ebp - 0x58]
push str.Command_line_error:_not_in_capture_mode
push ecx
call fcn.0051c348
add esp, 8
push 0x694d20
lea edx, [ebp - 0x58]
push edx
call fcn.005f8355
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp + 0x6c]
push ecx
mov ecx, ebx
call fcn.005243be
test al, al
je 0x456c46
mov eax, dword [ebp + 0x70]
mov edx, 0x631f44
mov ecx, eax
jmp 0x456ac0
mov si, word [ecx]
cmp si, word [edx]
jne 0x456ae6
test si, si
je 0x456ae2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x456ae6
add ecx, 4
add edx, 4
test si, si
jne 0x456ac0
xor ecx, ecx
jmp 0x456aeb
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
je 0x456c33
mov edx, 0x631f38
mov ecx, eax
lea ebx, [ebx]
mov si, word [ecx]
cmp si, word [edx]
jne 0x456b26
test si, si
je 0x456b22
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x456b26
add ecx, 4
add edx, 4
test si, si
jne 0x456b00
xor ecx, ecx
jmp 0x456b2b
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
je 0x456c33
mov edx, 0x631f30
mov ecx, eax
lea ebx, [ebx]
mov si, word [ecx]
cmp si, word [edx]
jne 0x456b66
test si, si
je 0x456b62
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x456b66
add ecx, 4
add edx, 4
test si, si
jne 0x456b40
xor ecx, ecx
jmp 0x456b6b
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
je 0x456c33
mov edx, 0x631f28
mov ecx, eax
lea ebx, [ebx]
mov si, word [ecx]
cmp si, word [edx]
jne 0x456ba6
test si, si
je 0x456ba2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x456ba6
add ecx, 4
add edx, 4
test si, si
jne 0x456b80
xor ecx, ecx
jmp 0x456bab
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
je 0x456c1f
mov edx, 0x631f1c
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x456bdc
test si, si
je 0x456bd8
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x456bdc
add ecx, 4
add edx, 4
test si, si
jne 0x456bb6
xor ecx, ecx
jmp 0x456be1
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
je 0x456c1f
mov ecx, 0x631f14
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x456c16
test dx, dx
je 0x456c12
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x456c16
add eax, 4
add ecx, 4
test dx, dx
jne 0x456bf0
xor eax, eax
jmp 0x456c1b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x456c46
mov ecx, dword [0x6b48b8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x2c]
push 0
call eax
jmp 0x456732
mov ecx, dword [0x6b48b8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x2c]
push edi
call eax
jmp 0x456732
lea ecx, [ebp + 0x38]
push str.Command_line_error:_syntax_is__capaudiorec_onoff
push ecx
call fcn.0051c348
add esp, 8
push 0x694d20
lea edx, [ebp + 0x38]
push edx
call fcn.005f8355
mov ecx, str.capaudioplay
mov eax, esi
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x456c96
test dx, dx
je 0x456c92
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x456c96
add eax, 4
add ecx, 4
test dx, dx
jne 0x456c70
xor eax, eax
jmp 0x456c9b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x456e95
cmp dword [0x6b48b8], eax
jne 0x456cca
lea eax, [ebp - 0x20]
push str.Command_line_error:_not_in_capture_mode
push eax
call fcn.0051c348
add esp, 8
push 0x694d20
lea ecx, [ebp - 0x20]
push ecx
call fcn.005f8355
lea edx, [ebp + 0x70]
push edx
lea eax, [ebp + 0x6c]
push eax
mov ecx, ebx
call fcn.005243be
test al, al
je 0x456e76
mov eax, dword [ebp + 0x70]
mov edx, 0x631f44
mov ecx, eax
jmp 0x456cf0
mov si, word [ecx]
cmp si, word [edx]
jne 0x456d16
test si, si
je 0x456d12
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x456d16
add ecx, 4
add edx, 4
test si, si
jne 0x456cf0
xor ecx, ecx
jmp 0x456d1b
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
je 0x456e63
mov edx, 0x631f38
mov ecx, eax
lea ebx, [ebx]
mov si, word [ecx]
cmp si, word [edx]
jne 0x456d56
test si, si
je 0x456d52
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x456d56
add ecx, 4
add edx, 4
test si, si
jne 0x456d30
xor ecx, ecx
jmp 0x456d5b
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
je 0x456e63
mov edx, 0x631f30
mov ecx, eax
lea ebx, [ebx]
mov si, word [ecx]
cmp si, word [edx]
jne 0x456d96
test si, si
je 0x456d92
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x456d96
add ecx, 4
add edx, 4
test si, si
jne 0x456d70
xor ecx, ecx
jmp 0x456d9b
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
je 0x456e63
mov edx, 0x631f28
mov ecx, eax
lea ebx, [ebx]
mov si, word [ecx]
cmp si, word [edx]
jne 0x456dd6
test si, si
je 0x456dd2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x456dd6
add ecx, 4
add edx, 4
test si, si
jne 0x456db0
xor ecx, ecx
jmp 0x456ddb
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
je 0x456e4f
mov edx, 0x631f1c
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x456e0c
test si, si
je 0x456e08
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x456e0c
add ecx, 4
add edx, 4
test si, si
jne 0x456de6
xor ecx, ecx
jmp 0x456e11
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
je 0x456e4f
mov ecx, 0x631f14
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x456e46
test dx, dx
je 0x456e42
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x456e46
add eax, 4
add ecx, 4
test dx, dx
jne 0x456e20
xor eax, eax
jmp 0x456e4b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x456e76
mov ecx, dword [0x6b48b8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x30]
push 0
call eax
jmp 0x456732
mov ecx, dword [0x6b48b8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x30]
push edi
call eax
jmp 0x456732
lea ecx, [ebp + 0x30]
push str.Command_line_error:_syntax_is__capaudioplay_onoff
push ecx
call fcn.0051c348
add esp, 8
push 0x694d20
lea edx, [ebp + 0x30]
push edx
call fcn.005f8355
mov ecx, str.capchannel
mov eax, esi
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x456ec6
test dx, dx
je 0x456ec2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x456ec6
add eax, 4
add ecx, 4
test dx, dx
jne 0x456ea0
xor eax, eax
jmp 0x456ecb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x456fe6
cmp dword [0x6b48b8], eax
jne 0x456efa
lea eax, [ebp - 0x40]
push str.Command_line_error:_not_in_capture_mode
push eax
call fcn.0051c348
add esp, 8
push 0x694d20
lea ecx, [ebp - 0x40]
push ecx
call fcn.005f8355
lea edx, [ebp + 0x70]
push edx
lea eax, [ebp + 0x6c]
push eax
mov ecx, ebx
call fcn.005243be
test al, al
jne 0x456f2c
lea ecx, [ebp + 0x28]
push str.Command_line_error:_syntax_is__capchannel__antenna:cable:__channel_
push ecx
call fcn.0051c348
add esp, 8
push 0x694d20
lea edx, [ebp + 0x28]
push edx
call fcn.005f8355
mov eax, dword [ebp + 0x70]
push 8
push str.antenna:
push eax
call fcn.005fb2b9
add esp, 0xc
test eax, eax
jne 0x456f57
mov ecx, dword [0x6b48b8]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x24]
call eax
add dword [ebp + 0x70], 0x10
jmp 0x456f80
mov ecx, dword [ebp + 0x70]
push 6
push str.cable:
push ecx
call fcn.005fb2b9
add esp, 0xc
test eax, eax
jne 0x456f80
mov ecx, dword [0x6b48b8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x24]
push edi
call eax
add dword [ebp + 0x70], 0xc
mov edi, dword [0x6b48b8]
mov ecx, dword [ebp + 0x70]
mov esi, dword [edi]
push ecx
add esi, 0x1c
call fcn.005fb2b4
mov edx, dword [esi]
add esp, 4
push eax
mov ecx, edi
call edx
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp + 0x6c]
push ecx
mov ecx, ebx
call fcn.005243be
test al, al
je 0x456732
mov edx, dword [ebp + 0x70]
mov esi, dword [0x6b48b8]
push 0
push edx
call fcn.005fb290
fmul qword [0x628560]
fstp qword [esp]
call fcn.00519e42
mov edx, dword [esi]
add esp, 8
push eax
mov eax, dword [edx + 0x20]
mov ecx, esi
call eax
jmp 0x456732
mov ecx, str.capdevice
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457016
test dx, dx
je 0x457012
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457016
add eax, 4
add ecx, 4
test dx, dx
jne 0x456ff0
xor eax, eax
jmp 0x45701b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4570b8
cmp dword [0x6b48b8], eax
jne 0x45704a
lea ecx, [ebp - 0x28]
push str.Command_line_error:_not_in_capture_mode
push ecx
call fcn.0051c348
add esp, 8
push 0x694d20
lea edx, [ebp - 0x28]
push edx
call fcn.005f8355
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp + 0x6c]
push ecx
mov ecx, ebx
call fcn.005243be
test al, al
jne 0x45707c
lea edx, [ebp + 0x20]
push str.Command_line_error:_syntax_is__capdevice__device_
push edx
call fcn.0051c348
add esp, 8
push 0x694d20
lea eax, [ebp + 0x20]
push eax
call fcn.005f8355
mov ecx, dword [0x6b48b8]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x70]
mov edx, dword [edx + 0x10]
push eax
call edx
test al, al
jne 0x456732
mov eax, dword [ebp + 0x70]
push eax
lea ecx, [ebp - 0x54]
push str.Unable_to_initialize_capture_device:__ls_n
push ecx
call fcn.0051c348
add esp, 0xc
push 0x694d20
lea edx, [ebp - 0x54]
push edx
call fcn.005f8355
mov ecx, str.capfile
mov eax, esi
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4570e6
test dx, dx
je 0x4570e2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4570e6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4570c0
xor eax, eax
jmp 0x4570eb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x45715e
cmp dword [0x6b48b8], eax
jne 0x457116
lea eax, [ebp + 0x18]
push str.Command_line_error:_not_in_capture_mode
push eax
call fcn.0051c348
add esp, 8
push 0x694d20
lea ecx, [ebp + 0x18]
push ecx
call fcn.005f8355
lea edx, [ebp + 0x70]
push edx
lea eax, [ebp + 0x6c]
push eax
mov ecx, ebx
call fcn.005243be
test al, al
jne 0x457148
lea ecx, [ebp - 0x30]
push str.Command_line_error:_syntax_is__capfile__filename_
push ecx
call fcn.0051c348
add esp, 8
push 0x694d20
lea edx, [ebp - 0x30]
push edx
call fcn.005f8355
mov ecx, dword [0x6b48b8]
mov eax, dword [ecx]
mov edx, dword [ebp + 0x70]
mov eax, dword [eax + 0x14]
push edx
call eax
jmp 0x456732
mov ecx, str.capfileinc
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45718b
test dx, dx
je 0x457187
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45718b
add eax, 4
add ecx, 4
test dx, dx
jne 0x457165
xor eax, eax
jmp 0x457190
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457217
cmp dword [0x6b48b8], eax
jne 0x4571bf
lea ecx, [ebp + 0x10]
push str.Command_line_error:_not_in_capture_mode
push ecx
call fcn.0051c348
add esp, 8
push 0x694d20
lea edx, [ebp + 0x10]
push edx
call fcn.005f8355
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp + 0x6c]
push ecx
mov ecx, ebx
call fcn.005243be
test al, al
jne 0x4571f1
lea edx, [ebp + 0x4c]
push str.Command_line_error:_syntax_is__capfileinc__filename_
push edx
call fcn.0051c348
add esp, 8
push 0x694d20
lea eax, [ebp + 0x4c]
push eax
call fcn.005f8355
mov ecx, dword [0x6b48b8]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x70]
mov edx, dword [edx + 0x14]
push eax
call edx
mov ecx, dword [0x6b48b4]
mov eax, dword [ecx]
mov edx, dword [eax + 0x188]
call edx
jmp 0x456732
mov ecx, str.capfilealloc
mov eax, esi
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457246
test dx, dx
je 0x457242
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457246
add eax, 4
add ecx, 4
test dx, dx
jne 0x457220
xor eax, eax
jmp 0x45724b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457303
cmp dword [0x6b48b8], eax
jne 0x45727a
lea eax, [ebp + 8]
push str.Command_line_error:_not_in_capture_mode
push eax
call fcn.0051c348
add esp, 8
push 0x694d20
lea ecx, [ebp + 8]
push ecx
call fcn.005f8355
lea edx, [ebp + 0x70]
push edx
lea eax, [ebp + 0x6c]
push eax
mov ecx, ebx
call fcn.005243be
test al, al
jne 0x4572ac
lea ecx, [ebp - 0x38]
push str.Command_line_error:_syntax_is__capfileinc__filename_
push ecx
call fcn.0051c348
add esp, 8
push 0x694d20
lea edx, [ebp - 0x38]
push edx
call fcn.005f8355
mov eax, dword [ebp + 0x70]
push 0
push 0
push eax
call fcn.005fb163
add esp, 0xc
test eax, eax
jne 0x4572e3
mov ecx, dword [ebp + 0x70]
push ecx
lea edx, [ebp]
push str.Command_line_error:_invalid_size__ls_for_preallocating_capture_file.
push edx
call fcn.0051c348
add esp, 0xc
push 0x694d20
lea eax, [ebp]
push eax
call fcn.005f8355
mov ecx, dword [0x6b48b4]
mov edx, dword [ecx]
xor esi, esi
shld esi, eax, 0x14
shl eax, 0x14
push esi
push eax
mov eax, dword [edx + 0x170]
call eax
jmp 0x456732
mov ecx, str.capstart
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457336
test dx, dx
je 0x457332
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457336
add eax, 4
add ecx, 4
test dx, dx
jne 0x457310
xor eax, eax
jmp 0x45733b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4573d8
cmp dword [0x6b48b8], eax
jne 0x45736a
lea ecx, [ebp - 0x50]
push str.Command_line_error:_not_in_capture_mode
push ecx
call fcn.0051c348
add esp, 8
push 0x694d20
lea edx, [ebp - 0x50]
push edx
call fcn.005f8355
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp + 0x6c]
push ecx
mov ecx, ebx
call fcn.005243be
test al, al
je 0x4573c6
mov edx, dword [ebp + 0x70]
cmp word [edx], 0
mov edi, 0x3c
je 0x4573ac
mov eax, edx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x457390
sub eax, esi
sar eax, 1
cmp word [edx + eax*2 - 2], 0x73
jne 0x4573ac
mov edi, 1
push edx
call fcn.005fb2b4
imul eax, edi
mov ecx, dword [0x6b48b8]
mov edx, dword [ecx]
add esp, 4
push eax
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [0x6b48b8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x34]
call eax
jmp 0x456732
mov ecx, str.changelog
mov eax, esi
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457406
test dx, dx
je 0x457402
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457406
add eax, 4
add ecx, 4
test dx, dx
jne 0x4573e0
xor eax, eax
jmp 0x45740b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457419
call fcn.00411d70
jmp 0x456732
mov ecx, 0x631c6c
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457446
test dx, dx
je 0x457442
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457446
add eax, 4
add ecx, 4
test dx, dx
jne 0x457420
xor eax, eax
jmp 0x45744b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x45751d
lea ecx, [ebp + 0x70]
push ecx
lea edx, [ebp + 0x6c]
push edx
mov ecx, ebx
call fcn.005243be
test al, al
jne 0x457485
lea eax, [ebp + 0x48]
push str.Command_line_error:_syntax_is__cmd__script_
push eax
call fcn.0051c348
add esp, 8
push 0x694d20
lea ecx, [ebp + 0x48]
push ecx
call fcn.005f8355
mov edx, dword [ebp + 0x70]
push edx
lea ecx, [ebp + 0x50]
call fcn.00410170
mov ecx, dword [ebp + 0x54]
mov edx, dword [ebp + 0x50]
sub ecx, edx
sar ecx, 1
mov byte [ebp - 4], 3
xor eax, eax
cmp eax, ecx
jae 0x4574b9
cmp word [edx + eax*2], 0x27
jne 0x4574b5
mov word [edx + eax*2], 0x22
mov edx, dword [ebp + 0x50]
add eax, edi
jmp 0x4574a1
push 0x3b
lea ecx, [ebp + 0x50]
call fcn.00455530
lea eax, [ebp + 0x50]
push eax
lea ecx, [ebp - 0x88]
push ecx
call fcn.0051b61b
add esp, 8
mov eax, dword [eax]
push 0
push eax
mov byte [ebp - 4], 4
call fcn.00485d20
mov eax, dword [ebp - 0x88]
add esp, 8
cmp eax, 0x6575c8
je 0x4574fd
push eax
call fcn.005f7371
add esp, 4
mov eax, dword [ebp + 0x50]
cmp eax, 0x6575cc
mov byte [ebp - 4], 1
je 0x456732
push eax
call fcn.005f7371
add esp, 4
jmp 0x456732
mov ecx, 0x631c34
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45754a
test dx, dx
je 0x457546
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45754a
add eax, 4
add ecx, 4
test dx, dx
jne 0x457524
xor eax, eax
jmp 0x45754f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x45755d
call fcn.004558f0
jmp 0x456732
mov ecx, 0x631c30
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45758a
test dx, dx
je 0x457586
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45758a
add eax, 4
add ecx, 4
test dx, dx
jne 0x457564
xor eax, eax
jmp 0x45758f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x45762b
lea edx, [ebp + 0x70]
push edx
lea eax, [ebp + 0x6c]
push eax
mov ecx, ebx
call fcn.005243be
test al, al
jne 0x4575c9
lea ecx, [ebp + 0x44]
push str.Command_line_error:_syntax_is__F__filter_
push ecx
call fcn.0051c348
add esp, 8
push 0x694d20
lea edx, [ebp + 0x44]
push edx
call fcn.005f8355
mov eax, dword [ebp + 0x70]
push eax
call fcn.0046c2a0
add esp, 4
call fcn.004e4020
mov ecx, dword [ebp + 0x70]
push 0xffffffffffffffff
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0051b523
add esp, 0xc
mov eax, dword [eax]
push eax
push 0xff
push str.Loaded_external_filter_module:__s
mov byte [ebp - 4], 5
call fcn.0044cd70
mov eax, dword [ebp - 0xa0]
add esp, 0xc
cmp eax, 0x6575c8
mov byte [ebp - 4], 1
je 0x456732
push eax
call fcn.005f7371
add esp, 4
jmp 0x456732
mov ecx, 0x631760
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457658
test dx, dx
je 0x457654
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457658
add eax, 4
add ecx, 4
test dx, dx
jne 0x457632
xor eax, eax
jmp 0x45765d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x45766d
push eax
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
jmp 0x456732
mov ecx, str.hexedit
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45769a
test dx, dx
je 0x457696
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45769a
add eax, 4
add ecx, 4
test dx, dx
jne 0x457674
xor eax, eax
jmp 0x45769f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4576cb
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp + 0x6c]
push ecx
mov ecx, ebx
call fcn.005243be
push 0
test al, al
je 0x457713
mov edx, dword [ebp + 0x70]
push edx
push 0
call fcn.004bf870
add esp, 0xc
jmp 0x456732
mov ecx, 0x631bc0
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4576f8
test dx, dx
je 0x4576f4
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4576f8
add eax, 4
add ecx, 4
test dx, dx
jne 0x4576d2
xor eax, eax
jmp 0x4576fd
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457724
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp + 0x6c]
push ecx
mov ecx, ebx
call fcn.005243be
push edi
jmp 0x4576b4
push 0
push 0
call fcn.004bf870
add esp, 0xc
jmp 0x456732
mov ecx, 0x631bbc
mov eax, esi
jmp 0x457730
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457756
test dx, dx
je 0x457752
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457756
add eax, 4
add ecx, 4
test dx, dx
jne 0x457730
xor eax, eax
jmp 0x45775b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457806
lea eax, [ebp + 0x34]
push eax
lea ecx, [ebp + 0x6c]
push ecx
mov ecx, ebx
call fcn.005243be
test al, al
jne 0x457795
lea edx, [ebp + 0x3c]
push str.Command_line_error:_syntax_is__i__script____args_..._
push edx
call fcn.0051c348
add esp, 8
push 0x694d20
lea eax, [ebp + 0x3c]
push eax
call fcn.005f8355
mov ecx, 0x6b3f1c
call fcn.00456250
nop
lea ecx, [ebp + 0x70]
push ecx
lea edx, [ebp + 0x6c]
push edx
mov ecx, ebx
call fcn.005243be
test al, al
je 0x4577f3
mov eax, dword [ebp + 0x70]
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x94]
push ecx
call fcn.0051b523
add esp, 0xc
push eax
mov ecx, 0x6b3f1c
mov byte [ebp - 4], 6
call fcn.00456690
mov eax, dword [ebp - 0x94]
cmp eax, 0x6575c8
mov byte [ebp - 4], 1
je 0x4577a0
push eax
call fcn.005f7371
add esp, 4
jmp 0x4577a0
mov edx, dword [ebp + 0x34]
push 0
push edx
call fcn.00485b00
add esp, 8
jmp 0x456732
mov ecx, str.lockd3d
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457836
test dx, dx
je 0x457832
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457836
add eax, 4
add ecx, 4
test dx, dx
jne 0x457810
xor eax, eax
jmp 0x45783b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457872
test byte [0x6b3f38], 1
jne 0x456732
or dword [0x6b3f38], edi
mov ecx, 0x6b3f28
mov byte [ebp - 4], 7
call fcn.004557c0
push 0x625340
call fcn.005f9915
add esp, 4
jmp 0x45672e
mov ecx, str.master
mov eax, esi
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4578a6
test dx, dx
je 0x4578a2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4578a6
add eax, 4
add ecx, 4
test dx, dx
jne 0x457880
xor eax, eax
jmp 0x4578ab
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4578f5
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp + 0x6c]
push ecx
mov ecx, ebx
call fcn.005243be
test al, al
jne 0x4578e1
lea edx, [ebp + 0x2c]
push str.Command_line_error:_syntax_is__master__queue_file_
push edx
call fcn.0051c348
add esp, 8
push 0x694d20
lea eax, [ebp + 0x2c]
push eax
call fcn.005f8355
mov ecx, dword [ebp + 0x70]
push 0
push edi
push ecx
call fcn.004582d0
add esp, 0xc
jmp 0x456732
mov ecx, str.noStupidAntiDebugChecks
mov eax, esi
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457926
test dx, dx
je 0x457922
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457926
add eax, 4
add ecx, 4
test dx, dx
jne 0x457900
xor eax, eax
jmp 0x45792b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457985
push str.kernel32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0x631aec
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea edx, [ebp + 0x5c]
push edx
push 0x40
mov esi, eax
push 3
push esi
call edi
test eax, eax
je 0x456732
mov ax, word [0x631ae8]
mov word [esi], ax
mov cl, byte [0x631aea]
lea edx, [ebp + 0x5c]
push edx
mov byte [esi + 2], cl
mov eax, dword [ebp + 0x5c]
push eax
push 3
push esi
call edi
jmp 0x456732
mov ecx, 0x631ae4
mov eax, esi
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4579b6
test dx, dx
je 0x4579b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4579b6
add eax, 4
add ecx, 4
test dx, dx
jne 0x457990
xor eax, eax
jmp 0x4579bb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457a19
lea ecx, [ebp + 0x70]
push ecx
lea edx, [ebp + 0x6c]
push edx
mov ecx, ebx
call fcn.005243be
test al, al
je 0x4579fa
lea eax, [ebp + 0x24]
push eax
lea ecx, [ebp + 0x6c]
push ecx
mov ecx, ebx
call fcn.005243be
test al, al
je 0x4579fa
mov edx, dword [ebp + 0x24]
mov eax, dword [ebp + 0x70]
push edx
push eax
call fcn.0045a6f0
add esp, 8
jmp 0x456732
lea ecx, [ebp + 0x1c]
push str.Command_line_error:_syntax_is__p__src_file___dst_file_
push ecx
call fcn.0051c348
add esp, 8
push 0x694d20
lea edx, [ebp + 0x1c]
push edx
call fcn.005f8355
mov ecx, str.priority
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457a46
test dx, dx
je 0x457a42
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457a46
add eax, 4
add ecx, 4
test dx, dx
jne 0x457a20
xor eax, eax
jmp 0x457a4b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457c86
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp + 0x6c]
push ecx
mov ecx, ebx
call fcn.005243be
test al, al
jne 0x457a85
lea edx, [ebp + 0x14]
push str.Command_line_error:_syntax_is__priority__priority_
push edx
call fcn.0051c348
add esp, 8
push 0x694d20
lea eax, [ebp + 0x14]
push eax
call fcn.005f8355
mov esi, dword [ebp + 0x70]
mov ecx, 0x631a54
mov eax, esi
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457ab6
test dx, dx
je 0x457ab2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457ab6
add eax, 4
add ecx, 4
test dx, dx
jne 0x457a90
xor eax, eax
jmp 0x457abb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457ad3
push 0x20
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x456732
mov ecx, str.aboveNormal
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457b06
test dx, dx
je 0x457b02
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457b06
add eax, 4
add ecx, 4
test dx, dx
jne 0x457ae0
xor eax, eax
jmp 0x457b0b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457b26
push 0x8000
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x456732
mov ecx, str.belowNormal
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457b56
test dx, dx
je 0x457b52
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457b56
add eax, 4
add ecx, 4
test dx, dx
jne 0x457b30
xor eax, eax
jmp 0x457b5b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457b76
push 0x4000
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x456732
mov ecx, str.high
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457ba6
test dx, dx
je 0x457ba2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457ba6
add eax, 4
add ecx, 4
test dx, dx
jne 0x457b80
xor eax, eax
jmp 0x457bab
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457bc6
push 0x80
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x456732
mov ecx, 0x631a10
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457bf6
test dx, dx
je 0x457bf2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457bf6
add eax, 4
add ecx, 4
test dx, dx
jne 0x457bd0
xor eax, eax
jmp 0x457bfb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457c13
push 0x40
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x456732
mov ecx, str.realtime
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457c46
test dx, dx
je 0x457c42
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457c46
add eax, 4
add ecx, 4
test dx, dx
jne 0x457c20
xor eax, eax
jmp 0x457c4b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457c66
push 0x100
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
jmp 0x456732
push esi
lea ecx, [ebp + 0xc]
push str.Command_line_error:_unknown_priority__ls
push ecx
call fcn.0051c348
add esp, 0xc
push 0x694d20
lea edx, [ebp + 0xc]
push edx
call fcn.005f8355
mov ecx, str.queryVersion
mov eax, esi
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457cb6
test dx, dx
je 0x457cb2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457cb6
add eax, 4
add ecx, 4
test dx, dx
jne 0x457c90
xor eax, eax
jmp 0x457cbb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457cfd
mov eax, dword [section..const]
mov dword [ebp + 0x60], eax
cmp dword [ebp + 0x64], 0
jne 0x458090
cmp byte [0x6b3f04], 0
je 0x458099
lea ecx, [ebp - 0x24]
push str.This_application_allows_usage_of_VirtualDub_from_the_command_line._To_use_nthe_program_interactively__launch_VirtualDub.exe_directly._n_nUsage:_vdub.exe_____switches___video_file___..._n_______vdub.exe____for_help_n
push ecx
call fcn.0051c348
add esp, 8
push 0x694d20
lea edx, [ebp - 0x24]
push edx
call fcn.005f8355
mov ecx, 0x6318d8
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457d2a
test dx, dx
je 0x457d26
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457d2a
add eax, 4
add ecx, 4
test dx, dx
jne 0x457d04
xor eax, eax
jmp 0x457d2f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457d54
call fcn.004582a0
call fcn.004583a0
mov bl, al
call fcn.00458290
test bl, bl
je 0x457cc7
mov ebx, dword [ebp + 0x7c]
jmp 0x456732
mov ecx, 0x6318d4
mov eax, esi
jmp 0x457d60
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457d86
test dx, dx
je 0x457d82
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457d86
add eax, 4
add ecx, 4
test dx, dx
jne 0x457d60
xor eax, eax
jmp 0x457d8b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457dd4
lea ecx, [ebp + 0x70]
push ecx
lea edx, [ebp + 0x6c]
push edx
mov ecx, ebx
call fcn.005243be
test al, al
jne 0x457dc1
lea eax, [ebp + 4]
push str.Command_line_error:_syntax_is__s__script_
push eax
call fcn.0051c348
add esp, 8
push 0x694d20
lea ecx, [ebp + 4]
push ecx
call fcn.005f8355
mov edx, dword [ebp + 0x70]
push 0
push edx
call fcn.00485b00
add esp, 8
jmp 0x456732
mov ecx, str.safecpu
mov eax, esi
jmp 0x457de0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457e06
test dx, dx
je 0x457e02
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457e06
add eax, 4
add ecx, 4
test dx, dx
jne 0x457de0
xor eax, eax
jmp 0x457e0b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x456732
mov ecx, str.slave
mov eax, esi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457e46
test dx, dx
je 0x457e42
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457e46
add eax, 4
add ecx, 4
test dx, dx
jne 0x457e20
xor eax, eax
jmp 0x457e4b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457efe
lea eax, [ebp + 0x70]
push eax
lea ecx, [ebp + 0x6c]
push ecx
mov ecx, ebx
call fcn.005243be
test al, al
jne 0x457e85
lea edx, [ebp - 0x14]
push str.Command_line_error:_syntax_is__slave__queue_file_
push edx
call fcn.0051c348
add esp, 8
push 0x694d20
lea eax, [ebp - 0x14]
push eax
call fcn.005f8355
mov ecx, dword [ebp + 0x70]
push edi
push edi
push ecx
call fcn.004582d0
add esp, 0xc
cmp byte [0x6b3f04], 0
jne 0x457eb9
call fcn.0045e850
mov edx, dword [0x6b48ac]
push 7
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov byte [ebp + 0x6b], 0
jmp 0x456732
lea eax, [ebp + 0x70]
push eax
push edi
lea ecx, [ebp - 0x4c]
push str.Joining_shared_job_queue_in_slave_mode:__ls
push ecx
call fcn.0051c148
add esp, 0x10
push eax
push 0
mov byte [ebp - 4], 8
call fcn.00520d92
mov eax, dword [ebp - 0x4c]
add esp, 8
cmp eax, 0x6575cc
mov byte [ebp - 4], 1
je 0x457ef5
push eax
call fcn.005f7371
add esp, 4
mov byte [ebp + 0x6b], 0
jmp 0x456732
mov ecx, 0x6317fc
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457f2b
test dx, dx
je 0x457f27
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457f2b
add eax, 4
add ecx, 4
test dx, dx
jne 0x457f05
xor eax, eax
jmp 0x457f30
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457f40
mov byte [0x6b3f05], 1
jmp 0x456732
mov ecx, 0x6317f8
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457f6d
test dx, dx
je 0x457f69
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457f6d
add eax, 4
add ecx, 4
test dx, dx
jne 0x457f47
xor eax, eax
jmp 0x457f72
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457f82
mov byte [0x6b3f11], 1
jmp 0x456732
mov ecx, str.vdxadebug
mov eax, esi
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457fb6
test dx, dx
je 0x457fb2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457fb6
add eax, 4
add ecx, 4
test dx, dx
jne 0x457f90
xor eax, eax
jmp 0x457fbb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x457fcd
push edi
call fcn.0046cff0
add esp, 4
jmp 0x456732
mov ecx, 0x6317d0
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x457ffa
test dx, dx
je 0x457ff6
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x457ffa
add eax, 4
add ecx, 4
test dx, dx
jne 0x457fd4
xor eax, eax
jmp 0x457fff
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x45802e
mov edi, dword [sym.imp.KERNEL32.dll_VirtualAlloc]
xor esi, esi
jmp 0x458010
cmp esi, 6
jge 0x456732
push 4
push 0x2000
push 0x10000000
push 0
call edi
add esi, 1
jmp 0x458010
mov ecx, 0x6317cc
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45805b
test dx, dx
je 0x458057
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45805b
add eax, 4
add ecx, 4
test dx, dx
jne 0x458035
xor eax, eax
jmp 0x458060
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x458070
sub dword [ebp + 0x64], edi
mov byte [ebp + 0x6b], 1
jmp 0x456732
push esi
lea edx, [ebp - 0x1c]
push str.Command_line_error:_unknown_switch__ls
push edx
call fcn.0051c348
add esp, 0xc
push 0x694d20
lea eax, [ebp - 0x1c]
push eax
call fcn.005f8355
cmp byte [0x6b3f04], 0
jne 0x4580ad
cmp byte [ebp + 0x6b], 0
jne 0x4580ad
mov eax, dword [0x6b48ac]
push eax
lea ecx, [ebp - 0x70]
call fcn.0044e5b0
mov dword [ebp - 4], 0
call fcn.004582a0
mov esi, dword [ebp + 0x60]
test esi, esi
jl 0x4581a0
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xffffffff
call fcn.0044d690
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add ebp, 0x74
mov esp, ebp
pop ebp
ret
cmp byte [ebp + 0x6b], 0
je 0x4581cb
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xffffffff
call fcn.0044d690
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add ebp, 0x74
mov esp, ebp
pop ebp
ret
cmp dword [ebp + 0x64], 0
jne 0x4581e3
cmp byte [0x6b3f04], 0
jne 0x4581e3
call fcn.0046d060
test al, al
jne 0x4581e9
cmp byte [ebp + 0x6a], 0
je 0x4581f8
mov ecx, dword [0x6b48ac]
push ecx
call fcn.00410b10
add esp, 4
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xffffffff
call fcn.0044d690
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
or eax, 0xffffffff
mov dword fs:[0], ecx
pop ebx
add ebp, 0x74
mov esp, ebp
pop ebp
ret