Function at 0x42b480
Capabilities:
Accept command line arguments

Disassembly:
invalid
invalid
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c1385
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x170
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
cmp dword [ebp + 8], 0
je 0x42b4b7
cmp dword [ebp + 0xc], 0
je 0x42b4b7
cmp dword [ebp + 0x10], 0
jne 0x42b4bf
mov eax, dword [ebp + 8]
jmp 0x42c213
mov dword [ebp - 0xc4], 0xc45
cmp dword [ebp - 0xc4], 0x2440
jle 0x42b588
loopne 0x42b46a
stosd dword es:[edi], eax
shr dword [edi - 0x5bc494c9], 0x93
loope 0x42b465
lodsd eax, dword [esi]
dec esi
add al, 0x2e
stc
sub al, 0x39
xor byte [ebp + 0x6de143b0], 0x28
mov edx, 0xdc861217
xchg ecx, eax
sti
int3
mov eax, dword [ebp + 8]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x7c], 0x54c8
mov dword [ebp - 0xe8], str.ribqxa_quccemw_nmvr_nununphxz_qcvkzk_pdgzmbm_wmhbul_kns_xjm_tvcuu_mopa
cmp dword [ebp - 0x7c], 0x563c
jle 0x42b61d
and dword [ebp - 0x58], 0
jmp 0x42b5b5
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xee2
jge 0x42b61d
and dword [ebp - 0x48], 0
jmp 0x42b5cb
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x79a3
jge 0x42b61b
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x48]
cdq
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], edx
push dword [ebp - 0x98]
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x108]
call fcn.00404f11
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aa5
push eax
call fcn.00494ce8
pop ecx
lea ecx, [ebp - 0x108]
call fcn.00402892
jmp 0x42b5c4
jmp 0x42b5ae
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x18], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x7c], 0x5194
jge 0x42b63c
push dword [ebp - 0xe8]
call fcn.00494ce8
pop ecx
jmp 0x42b658
or dword [ebp - 4], 0xffffffff
jmp 0x42b662
mov eax, dword [ebp + 0x10]
shr eax, 2
mov dword [ebp - 0x6c], eax
and dword [ebp - 0x64], 0
jmp 0x42b678
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x6c]
jae 0x42bb57
mov dword [ebp - 0x78], 0x5977
mov dword [ebp - 0xdc], str.hwlfjkxc_zhhvgiwv_ypk_bvdg_vhtpj_hrywzfocf_kuc_jsjumvoz
cmp dword [ebp - 0x78], 0x59bd
jle 0x42b727
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetMenu]
and dword [ebp - 0x28], 0
jmp 0x42b6bc
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x60d1
jge 0x42b727
and dword [ebp - 0x60], 0
jmp 0x42b6d2
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x4689
jge 0x42b725
mov eax, dword [ebp - 0x28]
cdq
idiv dword [ebp - 0x60]
mov eax, edx
cdq
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], edx
push dword [ebp - 0xa4]
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x138]
call fcn.00404f11
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aa5
push eax
call fcn.00494ce8
pop ecx
lea ecx, [ebp - 0x138]
call fcn.00402892
jmp 0x42b6cb
jmp 0x42b6b5
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov dword [ebp - 0x94], 0x8fe
cmp dword [ebp - 0x94], 0x1c9d
jle 0x42b80e
out dx, eax
salc
xor byte [edx], bl
push eax
cmpsd dword [esi], dword es:[edi]
cmpsb byte [esi], byte es:[edi]
hlt
mov dword [ebp - 4], 2
cmp dword [ebp - 0x78], 0x5956
jge 0x42b82a
push dword [ebp - 0xdc]
call fcn.00494ce8
pop ecx
jmp 0x42b846
or dword [ebp - 4], 0xffffffff
jmp 0x42b850
mov dword [ebp - 0x80], 0x2480
mov dword [ebp - 0xa0], str.jpgoztv_mnwvfc_kok
cmp dword [ebp - 0x80], 0x27a9
jle 0x42b92a
and dword [ebp - 0x30], 0
jmp 0x42b87b
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x3b2e
jge 0x42b92a
and dword [ebp - 0x50], 0
jmp 0x42b895
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x2d0c
jge 0x42b925
and dword [ebp - 0x38], 0
jmp 0x42b8af
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x2ee3
jge 0x42b920
and dword [ebp - 0x5c], 0
jmp 0x42b8c5
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x5b3c
jge 0x42b91e
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x5c]
sar eax, cl
cdq
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], edx
push dword [ebp - 0xb0]
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x168]
call fcn.00404f11
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aa5
push eax
call fcn.00494ce8
pop ecx
lea ecx, [ebp - 0x168]
call fcn.00402892
jmp 0x42b8be
jmp 0x42b8a8
jmp 0x42b88e
jmp 0x42b874
mov eax, dword [ebp - 0x14]
add eax, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 4
cmp dword [ebp - 0x80], 0x2260
jge 0x42b94f
push dword [ebp - 0xa0]
call fcn.00494ce8
pop ecx
jmp 0x42b9e3
or dword [ebp - 4], 0xffffffff
jmp 0x42b9ed
mov dword [ebp - 0x74], 0x405a
mov dword [ebp - 0xe4], str.uwvxcpebi_mjzhd_xnenqc_wxgieqcxm_pkjhdjzc
cmp dword [ebp - 0x74], 0x43da
jle 0x42bb07
and dword [ebp - 0x20], 0
jmp 0x42ba18
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x41ed
jge 0x42bb07
and dword [ebp - 0x40], 0
jmp 0x42ba32
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x1752
jge 0x42bb02
and dword [ebp - 0x1c], 0
jmp 0x42ba4c
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x1eb1
jge 0x42bafd
mov dword [ebp - 0xac], 0x74f
cmp dword [ebp - 0xac], 0x22ac
jle 0x42bab0
dec ecx
dec esp
invalid
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x20]
cdq
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], edx
push dword [ebp - 0xbc]
push dword [ebp - 0xc0]
lea ecx, [ebp - 0x120]
call fcn.00404f11
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aa5
push eax
call fcn.00494ce8
pop ecx
lea ecx, [ebp - 0x120]
call fcn.00402892
jmp 0x42ba45
jmp 0x42ba2b
jmp 0x42ba11
mov eax, dword [ebp - 0x18]
add eax, 4
mov dword [ebp - 0x18], eax
mov dword [ebp - 4], 6
cmp dword [ebp - 0x74], 0x3f1b
jge 0x42bb2c
push dword [ebp - 0xe4]
call fcn.00494ce8
pop ecx
jmp 0x42bb48
or dword [ebp - 4], 0xffffffff
jmp 0x42bb52
jmp 0x42b671
mov dword [ebp - 0x70], 0x4bad
mov dword [ebp - 0xec], str.ifsbxwmz_xmw_kbvobbel_ysw_kjwgfqi_xmyue
cmp dword [ebp - 0x70], 0x4db1
jle 0x42bcdd
push 0x1279
push 0
push 0
push 0x948
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
and dword [ebp - 0x24], 0
jmp 0x42bb96
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x5cb3
jge 0x42bcdd
and dword [ebp - 0x2c], 0
jmp 0x42bbb0
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x2006
jge 0x42bcd8
and dword [ebp - 0x34], 0
jmp 0x42bbca
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x4af4
jge 0x42bcd3
mov eax, dword [ebp - 0x24]
cdq
idiv dword [ebp - 0x2c]
imul edx, dword [ebp - 0x34]
mov eax, edx
cdq
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], edx
mov dword [ebp - 0xb8], 0xe9f
cmp dword [ebp - 0xb8], 0x1774
jle 0x42bc9c
sar edi, cl
or eax, ebx
call fcn.004a19d2
push dword [ebp - 0xc8]
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x150]
call fcn.00404f11
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aa5
push eax
call fcn.00494ce8
pop ecx
lea ecx, [ebp - 0x150]
call fcn.00402892
jmp 0x42bbc3
jmp 0x42bba9
jmp 0x42bb8f
mov eax, dword [ebp + 0x10]
xor edx, edx
push 4
pop ecx
div ecx
mov dword [ebp - 0x6c], edx
mov dword [ebp - 4], 8
cmp dword [ebp - 0x70], 0x4a91
jge 0x42bd06
push dword [ebp - 0xec]
call fcn.00494ce8
pop ecx
jmp 0x42bd22
or dword [ebp - 4], 0xffffffff
jmp 0x42bd2c
and dword [ebp - 0x68], 0
jmp 0x42bd39
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x6c]
jae 0x42c0f7
mov dword [ebp - 0x84], 0x4b7e
mov dword [ebp - 0x8c], str.ixdcwkw_mjacxfmkw_fheewgmt_jlyxkopxe
cmp dword [ebp - 0x84], 0x4d38
jle 0x42c003
mov dword [ebp - 0x88], 0xb09
cmp dword [ebp - 0x88], 0x1d24
jle 0x42be69
scasd eax, dword es:[edi]
mov dword [0xc25cf720], eax
dec ebx
mov esp, 0x3e026030
mov cl, 0xa6
imul esi, dword [ebx], 0x9a75eac3
xchg esi, eax
xchg ebp, eax
pop ss
xchg edx, eax
xor al, 0x24
dec edx
mov eax, dword [0x7eea7017]
loope 0x42bdae
int3
mov byte [0x2c2e3cf2], al
aad 0x4a
or bl, byte [eax]
stosd dword es:[edi], eax
cwde
pop esp
inc edx
cld
loopne 0x42bd8a
xchg dword [edx], esp
pop ebp
xchg esp, eax
sbb byte [esi], dl
fisubr dword [ebp - 0x3b8bde01]
in al, 0xb5
mov al, byte [0x87b1b87a]
sahf
mov edx, 0xce02f087
std
sal byte gs:[ecx], 1
mov eax, 0xec056924
invalid
and dword [ebp - 0x4c], 0
jmp 0x42be76
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x6e28
jge 0x42c003
and dword [ebp - 0x3c], 0
jmp 0x42be90
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x7e2c
jge 0x42bffe
and dword [ebp - 0x44], 0
jmp 0x42beaa
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x51fd
jge 0x42bff9
and dword [ebp - 0x54], 0
jmp 0x42bec4
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x30a0
jge 0x42bff4
mov eax, dword [ebp - 0x3c]
cdq
idiv dword [ebp - 0x44]
mov eax, dword [ebp - 0x4c]
sub eax, edx
mov ecx, dword [ebp - 0x54]
sar eax, cl
cdq
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], edx
mov dword [ebp - 0xe0], 0xaed
cmp dword [ebp - 0xe0], 0x2546
jle 0x42bfbd
or ah, bl
pop esp
or bh, byte [edx + 0x4bc4dccb]
invalid
push dword [ebp - 0xd4]
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x180]
call fcn.00404f11
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aa5
push eax
call fcn.00494ce8
pop ecx
lea ecx, [ebp - 0x180]
call fcn.00402892
jmp 0x42bebd
jmp 0x42bea3
jmp 0x42be89
jmp 0x42be6f
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov cl, byte [ecx]
mov byte [eax], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x84], 0x48a8
jge 0x42c0cc
mov dword [ebp - 0xd0], 0x1ad
cmp dword [ebp - 0xd0], 0x1ad5
jle 0x42c0c0
dec esi
sub ebp, ebp
retf
push dword [ebp - 0x8c]
call fcn.00494ce8
pop ecx
jmp 0x42c0e8
or dword [ebp - 4], 0xffffffff
jmp 0x42c0f2
jmp 0x42bd32
mov dword [ebp - 0x90], 0xd33
cmp dword [ebp - 0x90], 0x175c
jle 0x42c210
lodsb al, byte [esi]
cmp dh, 0x82
out dx, al
jne 0x42c11b
xchg ebp, eax
int3
sub eax, 0x910be940
xchg esi, eax
cmp al, 0xad
shr byte [esi - 0x52], 1
test dword [ebx + 0x71], edi
cmp eax, 0xe7691ede
scasd eax, dword es:[edi]
sub dword [edx - 0x80], 0x955bd663
xchg edx, eax
sbb dl, byte [eax + 0x68]
xchg edx, ecx
add byte [eax], al
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret