Function at 0x414db0
Capabilities:
Create thread
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x658
push ebx
push esi
push edi
mov dword [ebp - 0x14], 0
push 0x84
push 0
push 0x4fe620
call fcn.00473c80
add esp, 0xc
mov eax, dword [0x482eb0]
mov dword [0x4fe66e], eax
mov dword [0x4fa264], 0
mov ecx, dword [0x4fe66e]
and ecx, 0x400
test ecx, ecx
je 0x414e05
mov dword [0x4fa264], 1
mov dword [0x500d20], 0
mov edx, dword [0x4fe66e]
and edx, 0x200
test edx, edx
je 0x414e29
mov dword [0x500d20], 1
jmp 0x41c1dd
mov ax, word [0x4f9acc]
add ax, 1
mov word [0x4f9acc], ax
call fcn.00463020
call fcn.004632d0
push 0x800
push 0
push 0x500d80
call fcn.00473c80
add esp, 0xc
push 0x8001
call dword [0x503cf4]
mov dword [0x4f9ab4], eax
mov ecx, dword [0x4fe66e]
and ecx, 2
test ecx, ecx
je 0x41c51a
push 0x18
push 0x4dcc20
push 0x4ff820
call fcn.004738d0
add esp, 0xc
mov dword [0x4fa520], 0x16
jmp 0x41c25b
mov edx, dword [0x4fa520]
sub edx, 1
mov dword [0x4fa520], edx
cmp dword [0x4fa520], 0
jl 0x41c288
mov eax, dword [0x4fa520]
mov ecx, dword [0x4fa520]
mov dl, byte [eax + 0x4ff820]
xor dl, byte [ecx + 0x4ff821]
mov eax, dword [0x4fa520]
mov byte [eax + 0x4ff820], dl
jmp 0x41c24c
push 0x18
push 0x4ff820
push 0x4ff3c0
call fcn.004738d0
add esp, 0xc
mov byte [0x4ff3d8], 0
push 0x4f9bac
push 0x20019
push 0
push 0x4ff3c0
push 0x80000002
call dword [0x4faa00]
test eax, eax
jne 0x41c2da
mov ecx, dword [0x4f9bac]
push ecx
call dword [0x4fab64]
mov dword [0x4a6d24], 1
cmp dword [0x4a6d24], 0
je 0x41c51a
push 0x4d7318
call fcn.0045e200
push 0
call dword [0x4fd400]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0x462b90
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 6
mov dword [ebp - 0x38], 0x4dcc3c
mov dword [ebp - 0x34], 0x4dcc48
lea eax, [ebp - 0x58]
push eax
call dword [0x4fffa0]
mov word [ebp - 0xa4], ax
push 0x10
call dword [0x4ffd80]
mov dword [ebp - 0x30], eax
push 0x11
call dword [0x4ffd80]
mov dword [ebp - 0x5c], eax
mov dword [0x500d3c], 0x12c
mov dword [0x501660], 0xc8
mov dword [0x4f9c5c], 0
push 0
mov ecx, dword [ebp - 0x18]
push ecx
push 0
push 0
mov edx, dword [0x501660]
push edx
mov eax, dword [0x500d3c]
push eax
mov eax, dword [ebp - 0x5c]
sub eax, dword [0x501660]
cdq
sub eax, edx
sar eax, 1
push eax
mov eax, dword [ebp - 0x30]
sub eax, dword [0x500d3c]
cdq
sub eax, edx
sar eax, 1
push eax
push 0x80040000
push 0x4dcc54
push 0x4dcc60
push 0x80
call dword [0x4ffef4]
mov dword [0x4f9c5c], eax
cmp dword [0x4f9c5c], 0
je 0x41c51a
push 0xa
mov ecx, dword [0x4f9c5c]
push ecx
call dword [0x4ff3b0]
lea edx, [ebp - 0x9c]
push edx
mov eax, dword [0x4f9c5c]
push eax
call dword [0x501a70]
mov dword [ebp - 0xa0], eax
push 0x4ff330
mov ecx, dword [0x4f9c5c]
push ecx
call dword [0x4fab5c]
lea edx, [ebp - 0xb0]
push edx
lea eax, [ebp - 0xac]
push eax
call fcn.0045ddf0
mov ecx, dword [ebp - 0xb0]
push ecx
mov edx, dword [ebp - 0xac]
push edx
push 0xa
mov eax, dword [0x500d3c]
sub eax, dword [ebp - 0xac]
sub eax, 0x14
push eax
mov ecx, dword [ebp - 0xa0]
push ecx
call fcn.0045de50
push 0x10
push 0x4ff330
lea edx, [ebp - 0x28]
push edx
call fcn.004738d0
add esp, 0xc
mov eax, dword [0x4ff33c]
sub eax, dword [0x4ff334]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [0x4ff334]
lea edx, [ecx + eax - 0x28]
mov dword [ebp - 0x24], edx
push 0x10
lea eax, [ebp - 0x28]
push eax
push 0x4ff330
call fcn.004738d0
add esp, 0xc
push 0x4823b0
call fcn.00462730
push 0x4823b0
call fcn.00461c20
lea ecx, [ebp - 0x9c]
push ecx
mov edx, dword [0x4f9c5c]
push edx
call dword [0x503ba0]
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [0x4f9c5c]
push ecx
call dword [0x4fab5c]
push 1
lea edx, [ebp - 0x28]
push edx
mov eax, dword [0x4f9c5c]
push eax
call dword [0x500d58]
mov ecx, dword [0x4f9c5c]
push ecx
call dword [0x4ff804]
lea edx, [ebp - 0x2c]
push edx
push 0
push 0
push 0x462e60
push 0x3e8
push 0
call dword [sym.imp.kernel32.dll_CreateThread]
mov dword [ebp - 0xa8], eax
mov ax, word [0x4f9acc]
add ax, 1
mov word [0x4f9acc], ax
call fcn.00472030
push 0
call fcn.00472480
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
je 0x41c589
mov ecx, dword [ebp - 0xb4]
push ecx
call fcn.00474580
add esp, 4
test eax, eax
jbe 0x41c589
push 0x80
mov edx, dword [ebp - 0xb4]
push edx
push 0x4815b0
call fcn.00461870
push 0
push 0x4815b0
call fcn.00471b40
push 0x80
push 0x4815b0
call fcn.004616f0
push 5
call fcn.00472480
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
je 0x41c5e3
mov eax, dword [ebp - 0xb4]
push eax
call fcn.00474580
add esp, 4
test eax, eax
jbe 0x41c5e3
push 0x400
mov ecx, dword [ebp - 0xb4]
push ecx
push 0x4826b0
call fcn.00461870
push 0
push 0x4826b0
call fcn.00471b40
push 0x400
push 0x4826b0
call fcn.004616f0
push 6
call fcn.00472480
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
je 0x41c63d
mov edx, dword [ebp - 0xb4]
push edx
call fcn.00474580
add esp, 4
test eax, eax
jbe 0x41c63d
push 0x400
mov eax, dword [ebp - 0xb4]
push eax
push 0x482ab0
call fcn.00461870
push 0
push 0x482ab0
call fcn.00471b40
push 0x400
push 0x482ab0
call fcn.004616f0
push 1
call fcn.00472480
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
je 0x41c697
mov ecx, dword [ebp - 0xb4]
push ecx
call fcn.00474580
add esp, 4
test eax, eax
jbe 0x41c697
push 0x80
mov edx, dword [ebp - 0xb4]
push edx
push 0x4816b0
call fcn.00461870
push 0
push 0x4816b0
call fcn.00471b40
push 0x80
push 0x4816b0
call fcn.004616f0
push 2
call fcn.00472480
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
je 0x41c6f1
mov eax, dword [ebp - 0xb4]
push eax
call fcn.00474580
add esp, 4
test eax, eax
jbe 0x41c6f1
push 0x80
mov ecx, dword [ebp - 0xb4]
push ecx
push 0x481730
call fcn.00461870
push 0
push 0x481730
call fcn.00471b40
push 0x80
push 0x481730
call fcn.004616f0
push 3
call fcn.00472480
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
je 0x41c74b
mov edx, dword [ebp - 0xb4]
push edx
call fcn.00474580
add esp, 4
test eax, eax
jbe 0x41c74b
push 0x80
mov eax, dword [ebp - 0xb4]
push eax
push 0x4818b0
call fcn.00461870
push 0
push 0x4818b0
call fcn.00471b40
push 0x80
push 0x4818b0
call fcn.004616f0
push 4
call fcn.00472480
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
je 0x41c7a5
mov ecx, dword [ebp - 0xb4]
push ecx
call fcn.00474580
add esp, 4
test eax, eax
jbe 0x41c7a5
push 0x80
mov edx, dword [ebp - 0xb4]
push edx
push 0x481cb0
call fcn.00461870
push 0
push 0x481cb0
call fcn.00471b40
push 0x80
push 0x481cb0
call fcn.004616f0
call fcn.004723c0
mov eax, dword [0x4fe66e]
and eax, 0x80
test eax, eax
je 0x41c9d5
push 0x4825b0
call fcn.00462730
push 0x4825b0
lea ecx, [ebp - 0x134]
push ecx
call fcn.00474490
add esp, 8
push 0x4825b0
call fcn.00461ab0
cmp dword [0x4a6d14], 0
je 0x41c812
lea edx, [ebp - 0x134]
push edx
push 0x4dcc6c
push 0x4fbcc0
call fcn.00473c05
add esp, 0xc
push 0x4fbcc0
push 0
call fcn.0040a7c0
lea eax, [ebp - 0x134]
push eax
call fcn.004617c0
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
je 0x41c9a7
push 0xff
push 0x4dccc8
call fcn.0040a720
push eax
mov ecx, dword [ebp - 0x138]
push ecx
call fcn.004618d0
push 1
push 0x4dccd8
call fcn.0040a720
push eax
mov edx, dword [ebp - 0x138]
push edx
call fcn.004618d0
push 2
push 0x4dcce8
call fcn.0040a720
push eax
mov eax, dword [ebp - 0x138]
push eax
call fcn.004618d0
push 5
push 0x4dccf4
call fcn.0040a720
push eax
mov ecx, dword [ebp - 0x138]
push ecx
call fcn.004618d0
push 0xd
push 0x4dcd04
call fcn.0040a720
push eax
mov edx, dword [ebp - 0x138]
push edx
call fcn.004618d0
push 0x14
push 0x4dcd18
call fcn.0040a720
push eax
mov eax, dword [ebp - 0x138]
push eax
call fcn.004618d0
push 0x13
push 0x4dcd28
call fcn.0040a720
push eax
mov ecx, dword [ebp - 0x138]
push ecx
call fcn.004618d0
push 0x1a
push 0x4dcd38
call fcn.0040a720
push eax
mov edx, dword [ebp - 0x138]
push edx
call fcn.004618d0
push 0x1b
push 0x4dcd44
call fcn.0040a720
push eax
mov eax, dword [ebp - 0x138]
push eax
call fcn.004618d0
push 0x1c
push 0x4dcd54
call fcn.0040a720
push eax
mov ecx, dword [ebp - 0x138]
push ecx
call fcn.004618d0
push 0x1d
push 0x4dcd64
call fcn.0040a720
push eax
mov edx, dword [ebp - 0x138]
push edx
call fcn.004618d0
push 0x1e
push 0x4dcd70
call fcn.0040a720
push eax
mov eax, dword [ebp - 0x138]
push eax
call fcn.004618d0
push 0x100
push 0x4dcd80
call fcn.0040a720
push eax
mov ecx, dword [ebp - 0x138]
push ecx
call fcn.004618d0
push 0x101
push 0x4dcd98
call fcn.0040a720
push eax
mov edx, dword [ebp - 0x138]
push edx
call fcn.004618d0
mov eax, dword [ebp - 0x138]
push eax
call dword [0x4fab64]
jmp 0x41c9d5
cmp dword [0x4a6d14], 0
je 0x41c9d5
lea ecx, [ebp - 0x134]
push ecx
push 0x4dcdac
push 0x4fbcc0
call fcn.00473c05
add esp, 0xc
push 0x4fbcc0
push 0
call fcn.0040a7c0
jmp 0x423e22
mov edx, dword [ebp + 0x10]
push edx
lea eax, [ebp - 0x53c]
push eax
call fcn.00474490
add esp, 8
lea ecx, [ebp - 0x53c]
push ecx
call fcn.0047dc7d
add esp, 4
push 0x4dcde8
call fcn.0040a720
push eax
lea edx, [ebp - 0x53c]
push edx
call fcn.00474c20
add esp, 8
mov dword [ebp - 0x548], eax
cmp dword [ebp - 0x548], 0
je 0x423f7a
mov dword [0x4a6d14], 1
push 0x4dcdf8
call fcn.0040a720
push eax
call fcn.00474580
add esp, 4
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x548]
lea ecx, [ebp - 0x53c]
sub eax, ecx
mov edx, dword [ebp + 0x10]
add edx, eax
mov dword [ebp - 0x13c], edx
mov eax, dword [ebp - 0x548]
push eax
call fcn.00474580
add esp, 4
sub eax, dword [ebp - 0x544]
mov dword [ebp - 0x540], eax
mov ecx, dword [ebp - 0x540]
push ecx
mov edx, dword [ebp - 0x544]
mov eax, dword [ebp - 0x548]
lea ecx, [eax + edx + 1]
push ecx
mov edx, dword [ebp - 0x548]
push edx
call fcn.004748e0
add esp, 0xc
mov eax, dword [ebp - 0x540]
push eax
mov ecx, dword [ebp - 0x544]
mov edx, dword [ebp - 0x13c]
lea eax, [edx + ecx + 1]
push eax
mov ecx, dword [ebp - 0x13c]
push ecx
call fcn.004748e0
add esp, 0xc
mov edx, dword [ebp - 0x540]
mov eax, dword [ebp - 0x548]
lea ecx, [eax + edx - 1]
mov dword [ebp - 0x548], ecx
mov edx, dword [ebp - 0x540]
mov eax, dword [ebp - 0x13c]
lea ecx, [eax + edx - 1]
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x544]
add edx, 1
push edx
push 0
mov eax, dword [ebp - 0x548]
push eax
call fcn.00473c80
add esp, 0xc
mov ecx, dword [ebp - 0x544]
add ecx, 1
push ecx
push 0
mov edx, dword [ebp - 0x13c]
push edx
call fcn.00473c80
add esp, 0xc
jmp 0x423f84
mov dword [0x4a6d14], 0
mov eax, dword [0x4fe66e]
and eax, 0x40
test eax, eax
je 0x423f9a
mov dword [0x4a6d14], 1
cmp dword [0x4a6d14], 0
je 0x4241b3
push 0x4a8350
call fcn.00471a00
mov dword [ebp - 0x54c], eax
mov ecx, dword [ebp - 0x54c]
push ecx
call fcn.004719f0
push eax
push 0x500920
call fcn.00474490
add esp, 8
mov edx, dword [ebp - 0x54c]
push edx
call fcn.00471a50
cmp dword [0x4f9ca4], 0
jne 0x423ff0
call fcn.0046c960
mov dword [0x4f9ca4], eax
push 0x80
push 0x4815b0
lea eax, [ebp - 0x5cc]
push eax
call fcn.004738d0
add esp, 0xc
mov dword [0x4fa520], 0x7e
jmp 0x424024
mov ecx, dword [0x4fa520]
sub ecx, 1
mov dword [0x4fa520], ecx
cmp dword [0x4fa520], 0
jl 0x424055
mov edx, dword [0x4fa520]
mov eax, dword [0x4fa520]
mov cl, byte [ebp + edx - 0x5cc]
xor cl, byte [ebp + eax - 0x5cb]
mov edx, dword [0x4fa520]
mov byte [ebp + edx - 0x5cc], cl
jmp 0x424015
mov byte [ebp - 0x54c], 0
mov dword [0x4fa520], 0x3fe
jmp 0x424075
mov eax, dword [0x4fa520]
sub eax, 1
mov dword [0x4fa520], eax
cmp dword [0x4fa520], 0
jl 0x4240a4
mov ecx, dword [0x4fa520]
mov edx, dword [0x4fa520]
mov al, byte [ecx + 0x4826b0]
xor al, byte [edx + 0x4826b1]
mov ecx, dword [0x4fa520]
mov byte [ecx + 0x4826b0], al
jmp 0x424068
push 0x400
push 0x4826b0
lea edx, [ebp - 0x53c]
push edx
call fcn.004738d0
add esp, 0xc
mov byte [ebp - 0x13c], 0
push 0x44
lea eax, [ebp - 0x5cc]
push eax
lea ecx, [ebp - 0x53c]
push ecx
push 0
call fcn.00460bf0
cmp eax, 6
je 0x424103
push 7
call fcn.00409700
cmp dword [0x4a6d14], 0
je 0x4240fc
push 0x4dce08
push 4
call fcn.0040a7c0
push 0
call fcn.004737ee
push 0x4fa270
push 0x4ff1c0
push 0
push 0
push 0
push 1
push 0
push 0
push 0x500920
push 0
call dword [0x4ff7c0]
cmp eax, 1
jne 0x4241b3
mov dword [0x4fa520], 0x3fe
jmp 0x42414a
mov edx, dword [0x4fa520]
sub edx, 1
mov dword [0x4fa520], edx
cmp dword [0x4fa520], 0
jl 0x424177
mov eax, dword [0x4fa520]
mov ecx, dword [0x4fa520]
mov dl, byte [eax + 0x482ab0]
xor dl, byte [ecx + 0x482ab1]
mov eax, dword [0x4fa520]
mov byte [eax + 0x482ab0], dl
jmp 0x42413b
push 0x400
push 0x482ab0
lea ecx, [ebp - 0x53c]
push ecx
call fcn.004738d0
add esp, 0xc
mov byte [ebp - 0x13c], 0
lea edx, [ebp - 0x5cc]
push edx
push 0x34
call fcn.0040a7c0
lea eax, [ebp - 0x53c]
push eax
push 0x33
call fcn.0040a7c0
cmp dword [0x4a6d14], 0
je 0x4241c8
push 0x4dce10
push 0
call fcn.0040a7c0
mov ecx, dword [0x4fe66e]
and ecx, 0x2000
test ecx, ecx
je 0x4241ed
cmp dword [0x4a6d14], 0
je 0x4241ed
push 0x4dce38
push 0
call fcn.0040a7c0
push 0x4bb5f8
call fcn.00471a00
mov dword [ebp - 0x5d0], eax
mov edx, dword [ebp - 0x5d0]
push edx
call fcn.004719f0
push eax
call fcn.00460c10
test eax, eax
je 0x424242
cmp dword [0x4a6d14], 0
je 0x424240
mov eax, dword [0x4bb5fc]
push eax
push 0x4dce70
push 0x4fbcc0
call fcn.00473c05
add esp, 0xc
push 0x4fbcc0
push 0
call fcn.0040a7c0
jmp 0x424270
cmp dword [0x4a6d14], 0
je 0x424270
mov ecx, dword [0x4bb5fc]
push ecx
push 0x4dcedc
push 0x4fbcc0
call fcn.00473c05
add esp, 0xc
push 0x4fbcc0
push 0
call fcn.0040a7c0
mov edx, dword [ebp - 0x5d0]
push edx
call fcn.00471a50
mov eax, dword [0x4fe66e]
and eax, 0x20
test eax, eax
je 0x4242a7
mov dword [0x4d77c8], 0
cmp dword [0x4a6d14], 0
je 0x4242a7
push 0x4dcf38
push 0
call fcn.0040a7c0
mov dword [0x4a82c4], 0x48154c
mov dword [0x503c88], 1
mov ecx, dword [0x503c88]
mov dword [0x502ad8], ecx
mov edx, dword [0x502ad8]
mov dword [0x4fa1d0], edx
mov dword [0x4fab60], 1
mov eax, dword [0x4fab60]
mov dword [0x4ff3a4], eax
mov ecx, dword [0x4ff3a4]
mov dword [0x4fab7c], ecx
mov dword [0x500d2c], 0x480d10
call dword [0x4fd454]
mov dword [0x4f9a70], eax
call dword [0x4ff7d4]
mov dword [0x4f9a78], eax
cmp dword [0x4a6d14], 0
je 0x424328
push 0x4dcfe0
push 2
call fcn.0040a7c0
push 0xb
push 0x4dd068
push 0x4ff820
call fcn.004738d0
add esp, 0xc
mov dword [0x4fa520], 9
jmp 0x424357
mov edx, dword [0x4fa520]
sub edx, 1
mov dword [0x4fa520], edx
cmp dword [0x4fa520], 0
jl 0x424384
mov eax, dword [0x4fa520]
mov ecx, dword [0x4fa520]
mov dl, byte [eax + 0x4ff820]
xor dl, byte [ecx + 0x4ff821]
mov eax, dword [0x4fa520]
mov byte [eax + 0x4ff820], dl
jmp 0x424348
push 0xb
push 0x4ff820
push 0x4ff3c0
call fcn.004738d0
add esp, 0xc
mov byte [0x4ff3cb], 0
push 0x4ff3c0
push 0
push 0
call dword [0x502adc]
mov dword [0x4f9a6c], eax
cmp dword [0x4f9a6c], 0
jne 0x4243ed
cmp dword [0x4a6d14], 0
je 0x4243d1
push 0x4dd074
push 0
call fcn.0040a7c0
cmp dword [0x4a6d14], 0
je 0x4243e6
push 0x4f9cd4
push 4
call fcn.0040a7c0
push 0
call fcn.004737ee
call dword [0x4ff320]
cmp eax, 0xb7
jne 0x4244be
cmp dword [0x4f9a6c], 0
je 0x424421
mov ecx, dword [0x4f9a6c]
push ecx
call dword [0x4faa04]
mov edx, dword [0x4f9a6c]
push edx
call dword [0x4fa1d4]
cmp dword [0x4f9a54], 0
je 0x424436
mov eax, dword [0x4f9a54]
push eax
call dword [0x4fa260]
cmp dword [0x4f9a58], 0
je 0x42444c
mov ecx, dword [0x4f9a58]
push ecx
call dword [0x4fa260]
cmp dword [0x4f9a5c], 0
je 0x424462
mov edx, dword [0x4f9a5c]
push edx
call dword [0x4fa260]
cmp dword [0x4f9a60], 0
je 0x424477
mov eax, dword [0x4f9a60]
push eax
call dword [0x4fa260]
cmp dword [0x4f9a64], 0
je 0x42448d
mov ecx, dword [0x4f9a64]
push ecx
call dword [0x4fa260]
cmp dword [0x4a6d14], 0
je 0x4244a2
push 0x4dd0fc
push 0x20
call fcn.0040a7c0
cmp dword [0x4a6d14], 0
je 0x4244b7
push 0x4f9cd8
push 4
call fcn.0040a7c0
push 0
call fcn.004737ee
cmp dword [0x4a6d14], 0
je 0x4244d3
push 0x4dd164
push 2
call fcn.0040a7c0
jmp 0x42b9ba
push 0x4090c0
push dword fs:[0]
mov eax, dword fs:[0]
mov dword [0x4fab74], eax
mov dword fs:[0], esp
mov eax, 0x45935f
mov dword [0x4fa1ac], eax
mov dword [0x4fa524], 0x409700
cmp dword [0x4fa524], 0x4090b0
jbe 0x42ba04
mov dword [ebp - 0x654], 0x4090b0
jmp 0x42ba10
mov edx, dword [0x4fa524]
mov dword [ebp - 0x654], edx
mov eax, dword [ebp - 0x654]
mov dword [0x4fa524], eax
mov dword [0x4f9bbc], 1
push ebp
mov ebp, esp
pushf
xor byte [ebp - 1], 1
popf
pop ebp
push 0xffffffffffffffff
mov ecx, dword [0x4f9a6c]
push ecx
call dword [0x501880]
mov eax, 0x42bb16
mov dword [0x4ffeac], eax
mov eax, 0x43b116
mov dword [0x503c70], eax
cmp dword [0x4a6d14], 0
je 0x42ba69
push 0x4dd1dc
push 2
call fcn.0040a7c0
cmp dword [0x4f9c5c], 0
je 0x42ba8b
mov edx, dword [0x4fe66e]
and edx, 2
test edx, edx
je 0x42ba8b
mov eax, dword [0x4f9c5c]
push eax
call dword [0x4ff804]
call fcn.00409ef0
mov dword [0x4fff40], 0x4090c0
mov ecx, dword [0x4fab74]
mov dword [0x4fd494], ecx
call dword [0x4ffeb0]
mov dword [0x4f9c94], eax
mov edx, dword [0x4f9c94]
mov dword [0x4f9c90], edx
call fcn.00411b20
push 0x8400
call fcn.00473d41
add esp, 4
mov dword [0x4ffc2c], eax
mov dword [0x4fa4bc], 0
jmp 0x42baed
mov eax, dword [0x4fa4bc]
add eax, 1
mov dword [0x4fa4bc], eax
cmp dword [0x4fa4bc], 0x2100
jge 0x42bb0e
mov ecx, dword [0x4fa4bc]
mov edx, dword [0x4ffc2c]
mov dword [edx + ecx*4], 0x410a40
jmp 0x42bae0
mov eax, 2
mov byte [eax], 0x50
mov edi, 0x403000
mov esi, 0x404120
mov al, byte [0x50004faa]
push ebx
lodsd eax, dword [esi]
add dword [eax + eax], 0x73dd663a
add eax, 0x402edad4
add bh, bh
adc eax, 0x8b47c5c0
xor byte [esi], bl
mov esi, dword [eax]
push ds
jge 0x42bb3a
add al, bl
mov ch, 6
jecxz 0x42bb52
push esp
dec esi
dec ebx
add byte [ebx - 0x209883f2], al
nop
pushfd
sub byte [eax + 0x5c589667], bl
xchg esi, eax
pop eax
pop esp
into
in al, dx
sti
add dword [ebp - 0x7ff77040], edx
add byte [edx], cl
jb 0x42bba8
or byte [eax + 0x45720a00], al
out dx, eax
xchg byte [ecx + 0x6b203552], dl
inc esp
add eax, 0x2b330000
jp 0x42bba8
clc
imul edx, dword [edx + edi], 0xffffffc6
add dword [ebx + 0x243329bc], esp
wait
into
pop ss
sub al, 0x13
and al, 0x3c
les esi, [esi]
mov ecx, dword [0x243329bc]
pushal
sbb eax, esi
sbb al, 0x83
popal
leave
test dword [edx + 0x51], ecx
xchg ebp, eax
invalid
jl 0x42bc02
inc byte [ecx]
je 0x42bc2a
add ebx, esp
call 0x524151ae
push ecx
mov ecx, dword [eax]
inc ebx
xchg ebx, eax
loopne 0x42bbb4
je 0x42bb47
adc esp, dword [edx]
scasb al, byte es:[edi]
scasd eax, dword es:[edi]
adc dh, byte [ebp + 0x3f5bb143]
lea eax, [eax + eax]
ror byte [ebx + 0x5d], 0x8d
je 0x42bbd8
ja 0x42bb5d
sub eax, 0xb4875d0f
sub al, 0x43
inc ebx
add al, byte [edi - 0x368ab9c2]
mov dword [0x472de0f8], eax
xor ebp, dword [ebx]
cdq
pop ss
xor dword [ebp + 0x3b7e004f], eax
xchg ebp, eax
add byte [edi], bh
invalid
and al, 0x2a
add al, 0xff
adc eax, 0x4f9621
mov dword [0x416b26dd], eax
in al, dx
pop ebx
xchg ecx, eax
or eax, 0xabab0e54
xor eax, eax
pushal
sbb eax, 0xa2fcbdfe
enter 0x7022, 0
push 0x24bc8c00
test eax, 0xcfdda71
or dword [esi + 0x6133e530], esi
jno 0x42bc06
std
or al, 9
mov dh, 0x30
in eax, 0x33
popal
cmp byte [esi], al
imul edi, dword [eax], 0xf
add byte [eax], al
mov ebp, 0x9ab0a340
ret 0xafbc