Function at 0x49667e
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10c
push ebx
push esi
push edi
mov dword [ebp - 0xfc], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x1c], 4
mov eax, dword [ebp + 8]
mov dword [0x4848ac], eax
cmp dword [0x488960], 0
je 0x495e7e
jmp 0x49a49f
mov ecx, dword [0x488960]
add ecx, 1
mov dword [0x488960], ecx
stc
js 0x495e90
or edx, edx
shl esi, 0
jp 0x495ea4
pushf
cmc
test dword [esp], esi
popf
jns 0x495ea1
jnp 0x495ea4
mov edi, 0x6808ec83
aas
scasb al, byte es:[edi]
dec ecx
add byte [edi + edi*8 + 0x35], ah
add byte [eax], al
add byte [eax], al
sub esp, 8
push 0x49ae3f
push dword fs:[0]
mov dword fs:[0], esp
add edi, dword [esp]
sub edi, dword [esp]
push ecx
pop ecx
xor eax, edx
xor eax, edx
rol edi, 0
jle 0x495ee0
mov esp, esp
jg 0x495ecf
lea eax, [eax + 0x5cf3]
lea eax, [eax - 0x5cf3]
nop
jg 0x495ee0
mov esp, 0x6ebce8e8
invalid
call fcn.0048cda1
shr edx, 0
jg 0x495eee
nop
jle 0x495eee
mov ebx, 0x895405c7
dec eax
add byte [ecx], al
add byte [eax], al
add bh, dh
fcomi st(7)
fstp xword [edx + 7]
mov dword [0x488954], 1
neg ebx
neg ebx
jp 0x495f05
ja 0x495f00
jl 0x495f02
jnp 0x495f05
sub eax, 0x47a0f0ba
add byte [ecx + 0x47a000ea], al
add byte [ecx + 0x489e9815], cl
add byte [esi], bh
mov edx, 0x47a0f0
sub edx, section.0000004
mov dword [0x489e98], edx
jle 0x495f18
and edx, edx
sub edi, 0
shr esp, 0
jno 0x495f4c
pushf
lea ebx, [ebx]
lea edx, [edx + 0x309e]
sub edx, 0x309e
push edi
add edi, 0x2e4e
ror edi, 0x1f
pop edi
cmp esi, dword [esp + 0xc]
popf
jg 0x495f45
jae 0x495f47
jae 0x495f49
jo 0x495f4c
mov ebp, 0x489e98a1
add byte [0x80000007], ah
mov eax, dword [0x489e98]
and eax, 0x80000007
jns 0x495f5d
dec eax
or eax, 0xfffffff8
inc eax
mov ecx, dword [0x489e98]
sub ecx, eax
mov dword [0x489e98], ecx
jno 0x495f6d
jge 0x495f6f
add edi, dword [esp]
sub edi, dword [esp]
jge 0x495f92
pushf
jne 0x495f7b
lea edx, [edx + 0x361a]
lea edx, [edx - 0x361a]
popf
jnp 0x495f8b
js 0x495f8d
jne 0x495f8f
jl 0x495f92
mov edi, 0xff9b0fe8
inc ecx
ret 0xc10c
call 0x48faa6
rol edx, 0xc
rol edx, 0x14
add esp, 0
stc
ror esp, 0
jb 0x495faf
jge 0x495fa8
lea eax, [eax]
mov ecx, ecx
jae 0x495faf
sub eax, 0x4884b868
add bh, bh
adc eax, sym.imp.KERNEL32.dll_LoadLibraryA
push 0x4884b8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4884c4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4884d0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4884e0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4884ec
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4884f8
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x488504
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x488514
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x488524
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x488534
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x488540
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x488550
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jl 0x496035
rol esp, 0
jge 0x496041
lea esp, [esp]
jl 0x496041
jmp 0x1a5f48d4
call 0x4a7a5b
add eax, 0x5bad
sub eax, 0x5bad
clc
inc edi
dec edi
ja 0x496063
pushf
ror esi, 0
push edx
pop edx
popf
jb 0x496060
jbe 0x496063
mov ebx, 0x6378158b
dec eax
add byte [ecx + 0x4847ac15], cl
add byte [ecx + 0x2a69f1], al
add byte [ecx + 0x2a69f1], al
add al, bh
mov edx, dword [0x486378]
mov dword [0x4847ac], edx
xor ecx, 0x2a69
xor ecx, 0x2a69
clc
call 0x496081
lea esp, [esp + 4]
rol esi, 0
je 0x49609d
pushf
jne 0x49608e
jb 0x496090
jae 0x496092
popf
jle 0x496096
lea edx, [edx]
ja 0x49609a
jne 0x49609d
sub eax, 0x48637ca1
add byte [ebx + 0x483fe8], ah
mov eax, dword [0x48637c]
mov dword [0x483fe8], eax
jp 0x4960a9
jp 0x4960ab
shr edx, 0
ja 0x4960bb
lea edx, [edx]
mov ecx, ecx
xchg edx, ecx
xchg edx, ecx
jbe 0x4960bb
ljmp 0x48:0x63800d8b
mov ecx, dword [0x486380]
mov dword [0x483fec], ecx
jno 0x4960c9
xor esi, ecx
xor esi, ecx
mov edx, edx
jl 0x4960dc
xchg ecx, edi
xchg ecx, edi
xchg edi, esi
xchg edi, esi
jge 0x4960dc
add eax, 0x8468406a
arpl word [eax], cx
push 0x40
push 0x486384
push 0x483ff0
call fcn.004a3021
add esp, 0xc
nop
lea edi, [edi + 0x2de1]
sub edi, 0x2de1
jg 0x4960ff
jne 0x49610a
jp 0x496103
mov ebx, ebx
jle 0x496107
je 0x49610a
jmp 0x640d7699
mov edx, dword [0x4863c4]
mov dword [0x48485c], edx
shl eax, 0
jo 0x496132
pushf
lea edx, [edx + 0x7357]
sub edx, 0x7357
mov edx, edx
popf
js 0x49612f
jno 0x496132
add eax, 0x4863c8a1
add byte [ebx + 0x484860], ah
mov eax, dword [0x4863c8]
mov dword [0x484860], eax
jl 0x49613e
jb 0x496140
jns 0x496156
pushf
push eax
add eax, 0x2e92
ror eax, 0x11
pop eax
clc
popf
jb 0x496153
js 0x496156
or dword [ebx + 0x4863cc0d], 0x640d8900
dec eax
dec eax
add byte [0x47c8], dh
mov ecx, dword [0x4863cc]
mov dword [0x484864], ecx
xor eax, 0x47c8
xor eax, 0x47c8
and edi, edi
shr esi, 0
jp 0x49617f
jb 0x496175
jle 0x496177
mov edx, edx
jg 0x49617b
jnp 0x49617f
lcall 0x4863, 0xd0158bc8
add byte [ecx + 0x48486815], cl
add byte [ecx + 0x486a28], ah
mov edx, dword [0x4863d0]
mov dword [0x484868], edx
mov eax, dword [0x486a28]
mov dword [0x484888], eax
mov ecx, dword [0x486a2c]
mov dword [0x48488c], ecx
mov edx, dword [0x47ede4]
mov dword [0x484890], edx
mov eax, dword [0x47ede8]
mov dword [0x484894], eax
xor esp, 0
and ebx, ebx
or edi, 0
and edi, 0xffffffff
jbe 0x4961d3
lea ebx, [ebx + 0x388a]
lea ebx, [ebx - 0x388a]
ja 0x4961d3
mov edi, 0xffcaa9e8
jmp dword [ebx + 0x488754]
call 0x492c81
mov dword [0x488754], eax
push 0x94
push 0
push 0x484040
call fcn.0049baea
add esp, 0xc
rol edx, 0x1b
rol edx, 5
jns 0x4961f9
cmp ecx, edx
jge 0x496208
xchg edx, edx
jg 0x496201
xchg ebx, eax
xchg ebx, eax
xchg ecx, eax
xchg ecx, eax
jl 0x496208
call 0x408967d3
dec eax
add byte [eax + eax + 0x59510000], dl
mov dword [0x484040], 0x94
push ecx
pop ecx
shl esp, 0
push ebx
pop ebx
test ebx, ecx
jnp 0x496229
jae 0x49621f
jge 0x496221
jle 0x496223
je 0x496225
jp 0x496229
mov eax, 0x40406839
dec eax
add al, ch
mov ebx, ebp
invalid
push 0x484040
call 0x493fbe
shr esp, 0
xor ecx, esi
xor ecx, esi
shr esi, 0
ja 0x49624d
pushf
inc edi
dec edi
popf
mov ecx, ecx
nop
xchg ebx, ebx
jbe 0x49624d
mov esp, 0x9c68
add byte [edx], ch
push 0x9c
push 0
push 0x4841e8
call fcn.0049baea
add esp, 0xc
rol esi, 9
ror esi, 9
jnp 0x496283
pushf
and esp, 0xffffffff
popf
xchg esp, esp
lea ecx, [ecx + 0x2d46]
lea ecx, [ecx - 0x2d46]
jp 0x496280
jp 0x496283
mov ecx, 0x41e805c7
dec eax
add byte [eax + eax - 0x1b7d0000], bl
push dword [edi + ecx + 0x66]
pushfd
mov dword [0x4841e8], 0x9c
and esp, 0xffffffff
je 0x4962a1
pushf
cmp edx, esi
std
cld
popf
js 0x49629c
jae 0x49629e
jne 0x4962a1
mov esp, 0x4841e868
add al, ch
adc ebx, ebp
invalid
push 0x4841e8
call 0x493fbe
dec ecx
inc ecx
cmp edx, ebx
rol ebx, 0xf
rol ebx, 0x11
jmp 0x4962b7
jns 0x4962bf
nop
mov esp, esp
js 0x4962bf
mov ebp, 0x11468
add byte [edx], ch
push 0x114
push 0
push 0x4840d4
call fcn.0049baea
add esp, 0xc
mov eax, eax
shl edx, 0
jge 0x4962da
rol esp, 0
jae 0x4962eb
je 0x4962e1
lea eax, [eax]
lea esp, [esp]
jbe 0x4962e8
jb 0x4962eb
call 0x411d68b6
dec eax
add byte [ecx + eax], dl
add byte [eax], al
mov dword [0x4840d4], 0x114
ror edx, 0x1e
rol edx, 0x1e
jg 0x4962fd
shr edx, 0
jle 0x496302
jbe 0x49630e
xchg esi, eax
xchg esi, eax
jae 0x496308
lea esp, [esp]
ja 0x49630e
mov ebx, 0x4840d468
add al, ch
dec ebp
mov ecx, 0x730001
push 0x4840d4
call 0x4b1c65
jae 0x49631a
xor edi, dword [esp + 4]
xor edi, dword [esp + 4]
jno 0x496324
cmp edx, dword [esp]
jg 0x49632e
lea eax, [eax]
jle 0x49632e
mov esp, 0x11c68
add byte [edx], ch
push 0x11c
push 0
push 0x484284
call fcn.0049baea
add esp, 0xc
not edx
not edx
not esi
not esi
jbe 0x49636b
pushf
add edx, 0
xchg esp, esp
ror edx, 0
ja 0x496358
popf
lea edx, [edx + 0x3aa6]
lea edx, [edx - 0x3aa6]
je 0x496368
ja 0x49636b
call 0x42cd6936
dec eax
add byte [ecx + eax], bl
add byte [eax], al
mov dword [0x484284], 0x11c
and ecx, 0xffffffff
shl esp, 0
or esp, 0
jp 0x496387
mov esp, esp
xchg esp, esp
jnp 0x496387
mov edi, 0x48428468
add al, ch
aam 0xb8
add dword [eax], eax
push 0x484284
call 0x4b1c65
jp 0x496393
jb 0x496395
stc
jo 0x4963a9
pushf
rol esi, 7
ror esi, 7
inc ebx
dec ebx
popf
mov esi, esi
jno 0x4963a9
sub eax, 0x178e1
call 0x4adc8f
mov dword [0x4843a0], eax
jge 0x4963b5
shr ebx, 0
and esp, 0xffffffff
mov esp, esp
ja 0x4963ce
pushf
and esp, 0xffffffff
rol esp, 0
popf
mov esp, esp
jbe 0x4963ce
mov edx, 0x6f73e8
add byte [ebx + 0x4843a4], ah
call 0x49d346
mov dword [0x4843a4], eax
test dword [esp + 4], edi
inc eax
dec eax
jg 0x4963f6
pushf
jb 0x4963e4
ror ecx, 0x15
ror ecx, 0xb
shr eax, 0
popf
xchg esi, edx
xchg esi, edx
jle 0x4963f6
mov ebp, 0xd2e8006a
mov dword [ecx], eax
add byte [ebx + 0x4843a8], ah
push 0
call fcn.004aedcf
mov dword [0x4843a8], eax
xor ecx, dword [esp]
xor ecx, dword [esp]
je 0x496420
pushf
push esi
pop esi
call 0x496413
lea esp, [esp + 4]
popf
jno 0x49641b
xchg edx, eax
xchg edx, eax
jne 0x496420
mov esp, 0x11e8006a
pop dword [ecx]
add byte [ebx + 0x4843ac], ah
push 0
call 0x4af338
mov dword [0x4843ac], eax
lea eax, [eax]
jb 0x496430
ja 0x496432
je 0x496434
jbe 0x496442
jg 0x496438
mov ecx, ecx
jbe 0x49643c
lea ecx, [ecx]
ja 0x496442
mov ecx, 0x104683e
add byte [eax], al
push 0x104
push 0x4843b0
push 0
call fcn.0048cfec
mov dword [0x4844b4], eax
jae 0x49645a
clc
jne 0x496462
jae 0x49645f
je 0x496462
ljmp 0x6800:0x10468
push 0x104
push 0x4844b8
push 0
call 0x4b201d
mov dword [0x4846c0], eax
ror ecx, 0
jns 0x49647d
sub edx, 0
jns 0x496487
lea eax, [eax]
js 0x496487
lcall 0xa300, 0xe769e8
les eax, [esi + 0x48]
add byte [eax + eax - 0x7d], dh
hlt
call 0x4a4bf5
mov dword [0x4846c4], eax
je 0x496493
xor esp, 0
jg 0x496498
jb 0x49649f
jle 0x49649c
jae 0x49649f
add eax, 0xffd536e8
jmp dword [ebx + 0x4846c8]
call 0x4939da
mov dword [0x4846c8], eax
ror eax, 1
rol eax, 1
clc
sub eax, 0
ror ebx, 0
ja 0x4964c6
pushf
shr eax, 0
jne 0x4964bd
popf
jp 0x4964c1
je 0x4964c3
jbe 0x4964c6
mov esi, 0xeffce8
add byte [ebx + 0x4846cc], ah
call 0x4a54c7
mov dword [0x4846cc], eax
ror edx, 1
ror edx, 0x1f
xchg ecx, ecx
ror esp, 0
sub esi, 0
je 0x4964f7
pushf
jg 0x4964e3
xor edx, 0
and ebx, 0xffffffff
std
cld
popf
jg 0x4964ef
lea esp, [esp]
jp 0x4964f4
jne 0x4964f7
add eax, 0x73e8f66a
add byte [ecx], al
add byte [ebx + 0x4846d0], ah
push 0xfffffffffffffff6
call fcn.004a6571
mov dword [0x4846d0], eax
test edi, ecx
or edi, 0
push ecx
add ecx, 0x1a78
ror ecx, 3
pop ecx
rol esp, 0
jbe 0x496528
pushf
rol esp, 0
popf
jae 0x496521
jns 0x496523
jnp 0x496525
ja 0x496528
jmp 0x43325a96
push 0xfffffffffffffff5
call fcn.004a6571
mov dword [0x4846d4], eax
xchg edi, edi
js 0x496543
jnp 0x49653a
jnp 0x49653c
jg 0x49653e
jns 0x496543
mov ecx, 0xf46ae75b
push 0xfffffffffffffff4
call fcn.004a6571
mov dword [0x4846d8], eax
add esi, dword [esp]
sub esi, dword [esp]
jnp 0x49656c
pushf
ror esi, 0x1a
rol esi, 0x1a
popf
xchg edi, edx
xchg edi, edx
jl 0x496567
jg 0x496569
jp 0x49656c
sub eax, 0xffffde55
call 0x4943c6
mov dword [0x4846dc], eax
rol esp, 0
mov edx, edx
dec ebx
inc ebx
cmp esi, 0x14d5
jno 0x49658a
jle 0x496587
jo 0x49658a
mov ebp, 0x4846e468
add al, ch
sbb ah, ah
invalid
push 0x4846e4
call 0x4949ac
sub edi, 0
mov esp, esp
cmc
mov edi, edi
jl 0x4965bd
pushf
nop
xchg edx, ecx
xchg edx, ecx
and edi, 0xffffffff
popf
lea ebx, [ebx + 0x1e22]
lea ebx, [ebx - 0x1e22]
jae 0x4965b8
xchg edx, edx
jge 0x4965bd
mov ebx, 0x48472868
add al, ch
rcr byte [esi], 1
add dword [eax], eax
push 0x484728
call 0x4a8497
ror edi, 0
sub edx, 0
push esi
add esi, 0x1683
ror esi, 0xe
pop esi
jns 0x4965f2
pushf
add ebx, 0
popf
lea ebx, [ebx + 0x73d2]
lea ebx, [ebx - 0x73d2]
jns 0x4965ef
js 0x4965f2
add eax, 0x10689e8
add byte [esi - 0x5d], ah
nop
inc edi
dec eax
add cl, al
ror dword [eax], 0xc1
rcr dword [eax], 0xc1
in al, 0
call 0x4a6c80
mov word [0x484790], ax
rol ecx, 8
rol ecx, 0x18
shl esp, 0
nop
not ebx
not ebx
je 0x49661b
pushf
inc esi
dec esi
ror esp, 0
popf
mov esp, esp
jne 0x49661b
jmp 0x155e307
call 0x4a729c
mov dword [0x484794], eax
js 0x496627
rol edx, 0x12
rol edx, 0xe
shl esp, 0
lea esp, [esp]
js 0x496641
pushf
lea esi, [esi]
popf
lea esp, [esp]
jns 0x496641
call 0x16ee62d
add byte [esi - 0x5d], ah
cwde
inc edi
dec eax
add byte [edx], dh
call 0x4a8bc5
mov word [0x484798], ax
jb 0x49664e
xchg esp, esp
jnp 0x496672
pushf
and ebx, 0xffffffff
rol esi, 0x14
rol esi, 0xc
popf
jl 0x496661
lea eax, [eax + 0x15dc]
lea eax, [eax - 0x15dc]
lea edx, [edx]
jp 0x496672
sub eax, 0x1203ae8
add byte [ebx + 0x48479c], ah
call 0x4a86b1
mov dword [0x48479c], eax
push 0x24
push 0
push 0x48476c
call fcn.0049baea
add esp, 0xc
push 0x48476c
call fcn.00491fee
call fcn.004b29e1
test eax, eax
je 0x4966c4
cmp dword [0x484784], 0x182
je 0x4966b8
cmp dword [0x484784], 0x1e6
jne 0x4966c2
mov dword [0x488964], 1
jmp 0x4966f5
xor ecx, ecx
mov cx, word [0x48476c]
test ecx, ecx
jne 0x4966eb
xor edx, edx
mov dx, word [0x48478c]
cmp edx, 5
jge 0x4966e9
mov dword [0x488964], 1
jmp 0x4966f5
mov dword [0x488964], 1
mov eax, dword [0x488964]
mov dword [0x4847a4], eax
push 0x190
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
mov dword [0x4848b0], eax
push 0x190
push 0
mov ecx, dword [0x4848b0]
push ecx
call fcn.0049baea
add esp, 0xc
cmp dword [0x486b00], 1
jne 0x496841
push 5
push 0x48855c
push 0x486ae1
call fcn.004a0f34
add esp, 0xc
test eax, eax
jne 0x49679f
push 0xa
call fcn.0049e301
add esp, 4
test eax, eax
jne 0x49679a
push 0xb
call fcn.0049e301
add esp, 4
test eax, eax
jne 0x49679a
push 0x14
call fcn.0049e301
add esp, 4
test eax, eax
jne 0x49679a
mov dword [0x489e88], 0x23
mov dword [0x48894c], 1
mov dword [0x488958], 1
jmp 0x49a567
jmp 0x496841
push 5
push 0x488564
push 0x486ae1
call fcn.004a0f34
add esp, 0xc
test eax, eax
jne 0x4967f8
push 0xb
call fcn.0049e301
add esp, 4
test eax, eax
jne 0x4967f6
push 0x14
call fcn.0049e301
add esp, 4
test eax, eax
jne 0x4967f6
mov dword [0x489e88], 0x23
mov dword [0x48894c], 1
mov dword [0x488958], 1
jmp 0x49a567
jmp 0x496841
push 5
push 0x48856c
push 0x486ae1
call fcn.004a0f34
add esp, 0xc
test eax, eax
jne 0x496841
push 0x14
call fcn.0049e301
add esp, 4
test eax, eax
jne 0x496841
mov dword [0x489e88], 0x23
mov dword [0x48894c], 1
mov dword [0x488958], 1
jmp 0x49a567
xor edi, 0
ror esp, 0
jbe 0x496852
jb 0x49684b
jns 0x49684d
jb 0x49684f
ja 0x496852
sub dword [edx + 0x2f], 0x558d006a
mov ah, 0x52
push 0x2f
push 0
lea edx, [ebp - 0x4c]
push edx
call fcn.0049baea
add esp, 0xc
rol esp, 0
jl 0x496867
jg 0x49687a
pushf
xchg ecx, edi
xchg ecx, edi
jns 0x496871
popf
jmp 0x496875
je 0x496877
jle 0x49687a
mov ebx, 0x54d745c6
mov byte [ebp - 0x29], 0x54
rol edx, 0x16
rol edx, 0xa
ror ebx, 2
ror ebx, 0x1e
not ecx
not ecx
jnp 0x4968a1
pushf
neg edi
neg edi
popf
xchg esp, esp
mov ecx, ecx
mov eax, eax
jp 0x4968a1
add esi, 0xf778d345
invalid
mov byte [ebp - 0x2d], 0x78
neg edx
neg edx
cmc
xor esi, dword [esp + 0xc]
xor esi, dword [esp + 0xc]
js 0x4968ba
lea esi, [esi]
jns 0x4968ba
or dword [edi], 0x75dc45c6
mov byte [ebp - 0x24], 0x75
shr ecx, 0
xchg edi, edi
not ebx
not ebx
xor edx, 0x7626
xor edx, 0x7626
jns 0x4968e0
xchg esi, esi
jmp 0x4968d9
jo 0x4968db
jae 0x4968dd
js 0x4968e0
add esi, 0x7d5ebc45
add byte [ecx + 0x66157d91], dl
pushfd
mov byte [ebp - 0x44], 0x5e
jge 0x4968e6
xchg ecx, eax
xchg ecx, eax
jge 0x4968ff
pushf
jg 0x4968ee
jbe 0x4968f0
test edi, 0x3c86
jo 0x4968f8
popf
xchg esp, esp
jl 0x4968ff
add esi, 0x8375df45
hlt
mov byte [ebp - 0x21], 0x75
xor esp, 0
xor esi, edx
xor esi, edx
jae 0x496921
pushf
jno 0x496910
cmp eax, dword [esp + 0x10]
popf
jle 0x496918
xchg ebx, ebx
xchg esi, ecx
xchg esi, ecx
jb 0x496921
call 0x4e0eaeeb
mov byte [ebp - 0x3b], 0x4d
and edx, 0xffffffff
sub esi, 0
call 0x496930
lea esp, [esp + 4]
jno 0x49694c
pushf
xor edx, eax
xor edx, eax
mov eax, eax
dec edi
inc edi
popf
jg 0x496944
js 0x496946
lea esp, [esp]
jo 0x49694c
jmp 0x6523af16
mov byte [ebp - 0x26], 0x64
cmp ebx, dword [esp + 8]
test ebx, 0x6430
xchg esp, esp
mov esi, esi
jle 0x496976
pushf
push edx
add edx, 0x3e4b
ror edx, 0x1b
pop edx
popf
je 0x496971
jne 0x496973
jg 0x496976
mov edx, 0x5ab845c6
mov byte [ebp - 0x48], 0x5a
rol edi, 0xd
ror edi, 0xd
xchg esp, esp
mov ecx, ecx
jp 0x49698d
jae 0x496988
jne 0x49698a
jnp 0x49698d
mov ebp, 0x4cb445c6
mov byte [ebp - 0x4c], 0x4c
and esp, 0xffffffff
jl 0x4969a5
pushf
jle 0x49699a
popf
jno 0x49699e
mov esi, esi
jle 0x4969a2
jge 0x4969a5
sub eax, 0x70ce45c6
mov byte [ebp - 0x32], 0x70
rol esp, 0
jmp 0x4969ae
add esp, 0
lea ebx, [ebx]
je 0x4969c7
pushf
rol esp, 0
jmp 0x4969bc
jo 0x4969be
popf
jbe 0x4969c2
jo 0x4969c4
jne 0x4969c7
mov ecx, 0x48b745c6
mov byte [ebp - 0x49], 0x48
cmc
lea ebx, [ebx + 0x6b2d]
imul eax, dword [eax], 0
sub ebx, 0x6b2d
jae 0x4969e5
lea ecx, [ecx]
mov ebx, ebx
jle 0x4969e0
mov esp, esp
jb 0x4969e5
mov ebx, 0x47d045c6
mov byte [ebp - 0x30], 0x47
nop
neg eax
neg eax
jne 0x4969f0
nop
jl 0x496a07
pushf
mov ebx, ebx
or eax, eax
sub esp, 0
jl 0x4969fe
popf
jns 0x496a02
jnp 0x496a04
jge 0x496a07
mov ecx, 0x32e145c6
mov byte [ebp - 0x1f], 0x32
cmp edx, 0x6204
or edx, edx
ja 0x496a15
jg 0x496a25
pushf
shr esp, 0
jb 0x496a1e
popf
lea ecx, [ecx]
jle 0x496a25
mov ebp, 0x61c845c6
mov byte [ebp - 0x38], 0x61
jb 0x496a2b
inc ebx
dec ebx
lea ebx, [ebx + 0x5b8b]
lea ebx, [ebx - 0x5b8b]
push edx
pop edx
jbe 0x496a43
mov ebx, ebx
ja 0x496a43
sub eax, 0xde45c6bf
je 0x4969cf
mov byte [ebp - 0x22], 0x74
xchg esp, esp
test esi, ecx
in al, 0x85
into
rol edx, 0x11
rol edx, 0xf
ja 0x496a64
pushf
inc esi
dec esi
cmp ebx, dword [esp + 0xc]
popf
jbe 0x496a5f
jle 0x496a61
jbe 0x496a64
mov edi, 0x77dd45c6
mov byte [ebp - 0x23], 0x77
ror esi, 0x15
rol esi, 0x15
ja 0x496a70
jl 0x496a80
pushf
xor esi, 0
xchg edx, eax
xchg edx, eax
popf
xchg edx, eax
xchg edx, eax
jge 0x496a80
add esi, 0x8356ba45
ljmp 0x939c
mov byte [ebp - 0x46], 0x56
sub edx, 0
jo 0x496a9b
pushf
xchg ebx, eax
xchg ebx, eax
and esp, 0xffffffff
popf
ja 0x496a94
jo 0x496a96
lea eax, [eax]
jno 0x496a9b
mov ebp, 0x55bf45c6
mov byte [ebp - 0x41], 0x55
and eax, eax
jb 0x496aae
mov esp, esp
lea edx, [edx]
mov esp, esp
jae 0x496aae
add eax, 0x45c6b464
int 0x66
mov byte [ebp - 0x33], 0x66
or esp, 0
test dword [esp], eax
cmp ebx, edi
je 0x496ad5
pushf
xchg esp, esp
je 0x496ac2
jns 0x496ac4
popf
lea edx, [edx + 0x49f9]
lea edx, [edx - 0x49f9]
jne 0x496ad5
mov ecx, 0x65d545c6
mov byte [ebp - 0x2b], 0x65
lea eax, [eax + 0x6911]
lea eax, [eax - 0x6911]
xchg esp, esp
jge 0x496af5
jbe 0x496aeb
xchg esp, esp
jl 0x496aef
jg 0x496af1
jl 0x496af5
add eax, 0xbe45c6e2
dec ecx
mov byte [ebp - 0x42], 0x49
stc
rol eax, 0
and ebx, ebx
jp 0x496b14
lea esi, [esi + 0x2b26]
lea esi, [esi - 0x2b26]
jge 0x496b0f
jno 0x496b11
jnp 0x496b14
mov esi, 0x70d945c6
mov byte [ebp - 0x27], 0x70
mov ebx, ebx
jmp 0x496b1c
sub ebx, 0
jae 0x496b33
pushf
xchg esp, esp
test dword [esp], ecx
not eax
not eax
popf
jnp 0x496b30
jb 0x496b33
sub eax, 0x77cc45c6
mov byte [ebp - 0x34], 0x77
cmp esp, 0x10be
add ecx, 0x776c
sub ecx, 0x776c
je 0x496b58
jle 0x496b4d
js 0x496b4f
ja 0x496b51
jne 0x496b53
jne 0x496b58
mov edx, 0x45c66cd0
invalid
mov byte [ebp - 0x3a], 0x53
cmp ebx, 0x63a3
ror esi, 5
rol esi, 5
lea esp, [esp]
jbe 0x496b84
pushf
cmp ebx, dword [esp + 0x10]
test ebx, 0x321d
nop
popf
nop
lea ecx, [ecx]
jnp 0x496b81
ja 0x496b84
mov esi, 0x48bb45c6
mov byte [ebp - 0x45], 0x48
xor eax, dword [esp + 4]
xor eax, dword [esp + 4]
jnp 0x496ba7
pushf
lea esp, [esp]
mov ecx, ecx
nop
xor esi, dword [esp]
xor esi, dword [esp]
popf
jbe 0x496ba4
jp 0x496ba7
add eax, 0x68db45c6
mov byte [ebp - 0x25], 0x68
cmp edi, dword [esp]
shl ecx, 0
jp 0x496bc8
pushf
test dword [esp], eax
lea edx, [edx]
neg eax
neg eax
test dword [esp], ecx
popf
jle 0x496bc5
jnp 0x496bc8
mov eax, 0x4dc245c6
mov byte [ebp - 0x3e], 0x4d
jne 0x496bce
je 0x496bd8
lea edx, [edx]
xchg ecx, ecx
jne 0x496bd8
call 0xc48f31f2
pop eax
mov byte [ebp - 0x3c], 0x58
rol eax, 0xc
ror eax, 0xc
jl 0x496bee
mov ecx, ecx
nop
js 0x496be9
jge 0x496bee
mov edx, 0x45c62ba9
ret
mov byte [ebp - 0x3d], 0x55
xor edx, 0x4476
xor edx, 0x4476
lea esi, [esi + 0x167]
sub esi, 0x167
jno 0x496c2a
pushf
rol esp, 0
xor ecx, ebx
xor ecx, ebx
popf
jmp 0x496c19
lea edi, [edi + 0xe0a]
lea edi, [edi - 0xe0a]
lea ebx, [ebx]
jo 0x496c2a
add esi, 0x8d76d845
and al, 0x24
mov byte [ebp - 0x28], 0x76
lea esp, [esp]
cmp esi, 0x6268
lea ecx, [ecx + 0x26cf]
lea ecx, [ecx - 0x26cf]
jbe 0x496c4e
jge 0x496c47
jnp 0x496c49
jle 0x496c4b
ja 0x496c4e
sub eax, 0x73d245c6
mov byte [ebp - 0x2e], 0x73
xor esi, dword [esp]
xor esi, dword [esp]
jl 0x496c5a
sub edi, 0
test dword [esp + 0xc], ebx
je 0x496c6e
jbe 0x496c65
mov esp, esp
jbe 0x496c69
jo 0x496c6b
jne 0x496c6e
mov byte [ebp - 0x4a], 0x55
not edx
not edx
jbe 0x496c7e
jbe 0x496c7a
ja 0x496c7e
xor eax, 0xbd45c681
inc esi
mov byte [ebp - 0x43], 0x46
jne 0x496c84
jge 0x496c93
pushf
shl esi, 0
nop
popf
xchg esp, esp
jl 0x496c93
mov byte [ebp - 0x31], 0x5e
xchg edx, edx
jne 0x496c9b
jno 0x49a4a1
jg 0x49a4af
xchg ecx, eax
xchg ecx, eax
xchg ebx, edx
xchg ebx, edx
ja 0x49a4ab
jle 0x49a4af
xor eax, 0x10458bcd
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [0x487fec]
mov dword [0x488710], eax
add esp, 0
lea esp, [esp]
ja 0x49a4e5
pushf
lea ecx, [ecx]
or esi, esi
std
cld
jle 0x49a4d8
popf
xchg ebx, ecx
xchg ebx, ecx
xchg ebx, ecx
xchg ebx, ecx
jbe 0x49a4e5
mov esi, 0xec743d83
inc edi
add byte [eax], al
cmp dword [0x47ec74], 0
jne 0x49a55d
cmp dword [0x488954], 0
je 0x49a55d
test ebx, 0x187d
dec ecx
inc ecx
call 0x49a504
add esp, 4
or ecx, ecx
jnp 0x49a526
pushf
jns 0x49a50f
rol edx, 0x11
rol edx, 0xf
test edi, 0x74e3
nop
popf
nop
jne 0x49a521
xchg esp, esp
jp 0x49a526
mov ebx, 0xcc6c190
nop
rol esi, 0xc
ror esi, 0xc
test edi, ebx
jae 0x49a549
pushf
shl esp, 0
rol eax, 0x1f
ror eax, 0x1f
lea esi, [esi]
popf
mov eax, eax
mov eax, eax
jle 0x49a546
jb 0x49a549
mov eax, 0x58f64
add byte [eax], al
add byte [ebx + 0x5c70cc4], al
push esp
mov dword [eax], ecx
add byte [eax], al
add byte [eax], al
pop dword fs:[0]
add esp, 0xc
mov dword [0x488954], 0
mov eax, dword [0x488710]
jmp 0x49aa9e
call fcn.004b414e
xor eax, eax
mov al, byte [0x486302]
test eax, eax
jne 0x49a581
call fcn.004b2870
mov dword [0x48896c], eax
cmp dword [0x484050], 2
jne 0x49a5b0
cmp dword [0x484044], 6
jne 0x49a5b0
cmp dword [0x4847d4], 0
je 0x49a5b0
call fcn.004b123f
mov dword [0x48871c], eax
call fcn.0048c39f
mov dword [0x488718], eax
xor ecx, ecx
mov cl, byte [0x486a40]
test ecx, ecx
je 0x49a5d7
push 0xa1
push 0x486a40
lea edx, [ebp - 0xf0]
push edx
call fcn.004a3021
add esp, 0xc
jmp 0x49a5f0
push 0xa1
push 0x47a5b0
lea eax, [ebp - 0xf0]
push eax
call fcn.004a3021
add esp, 0xc
mov dword [ebp - 0x18], 0
jmp 0x49a602
mov ecx, dword [ebp - 0x18]
add ecx, 1
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], 0xa
jge 0x49a69d
mov edx, dword [ebp - 0x18]
shl edx, 2
mov eax, dword [ebp + edx*4 - 0xf0]
xor eax, 0xab576c41
mov ecx, dword [ebp - 0x18]
shl ecx, 2
mov dword [ebp + ecx*4 - 0xf0], eax
mov edx, dword [ebp - 0x18]
shl edx, 2
mov eax, dword [ebp + edx*4 - 0xec]
xor eax, 0xab5ece77
mov ecx, dword [ebp - 0x18]
shl ecx, 2
mov dword [ebp + ecx*4 - 0xec], eax
clc
xor edi, dword [esp]
xor edi, dword [esp]
jp 0x49a65a
xchg ecx, ecx
jno 0x49a657
jnp 0x49a65a
ljmp 0x2e2:0xc1e8558b
mov edx, dword [ebp - 0x18]
shl edx, 2
mov eax, dword [ebp + edx*4 - 0xe8]
xor eax, 0xab633a25
mov ecx, dword [ebp - 0x18]
shl ecx, 2
mov dword [ebp + ecx*4 - 0xe8], eax
mov edx, dword [ebp - 0x18]
shl edx, 2
mov eax, dword [ebp + edx*4 - 0xe4]
xor eax, 0xab572a32
mov ecx, dword [ebp - 0x18]
shl ecx, 2
mov dword [ebp + ecx*4 - 0xe4], eax
jmp 0x49a5f9
call fcn.004a74b1
mov dword [0x488970], eax
jae 0x49a6a9
lea edx, [edx + 0x1f28]
lea edx, [edx - 0x1f28]
jg 0x49a6ce
pushf
shr ecx, 0
xor esp, 0
jae 0x49a6c1
test dword [esp + 4], ecx
popf
jnp 0x49a6c9
lea esi, [esi]
jle 0x49a6ce
mov esi, 0x894c3d83
dec eax
add byte [eax], al
cmp dword [0x48894c], 0
jne 0x49a6f5
ror ecx, 0
add esi, 0x6b0
sub esi, 0x6b0
jbe 0x49a6f0
jbe 0x49a6ea
jg 0x49a6ec
ja 0x49a6f0
mov ebp, 0xe1c3e831
add byte [eax], al
call 0x4a88b8
dec ebx
inc ebx
sub esp, 0
jne 0x49a701
jo 0x49a6fe
je 0x49a701
mov ebx, 0x89583d83
dec eax
add byte [eax], al
cmp dword [0x488958], 0
jne 0x49a94f
ror edx, 0
jp 0x49a713
cmp ecx, dword [esp + 4]
jle 0x49a732
pushf
jb 0x49a71d
stc
nop
xor eax, 0x2d7c
xor eax, 0x2d7c
popf
lea esi, [esi]
jge 0x49a72f
jg 0x49a732
xor eax, 0x86d0158b
dec eax
add byte [ecx + 0x4886e415], cl
add cl, al
rol dword [edx], 0xc1
leave
add al, cl
mov dword [0x811bc7c1], 0x28d4fc
add cl, al
ret 0xc11b
mov edx, dword [0x4886d0]
mov dword [0x4886e4], edx
rol ecx, 2
ror ecx, 2
rol edi, 5
rol edi, 0x1b
cmp esp, 0x28d4
rol edx, 0x1b
ror edx, 0x1b
jae 0x49a764
lea esi, [esi]
mov edi, edi
jge 0x49a75e
jle 0x49a760
jb 0x49a764
xor eax, 0x86d0a1e5
dec eax
add byte [ebx], al
add eax, 0x489eac
mov eax, dword [0x4886d0]
add eax, dword [0x489eac]
mov dword [0x4886e0], eax
add esp, 0
shr esp, 0
cmp edi, ecx
xchg ecx, ecx
jno 0x49a789
jne 0x49a782
jnp 0x49a784
jns 0x49a786
jo 0x49a789
call 0xbf99f8e4
aas
scasb al, byte es:[edi]
dec ecx
add al, bh
push edi
push ecx
push eax
mov edi, 0x49ae3f
clc
jae 0x49a7ac
pushf
add eax, 0x2fdc
sub eax, 0x2fdc
std
cld
push eax
pop eax
nop
popf
lea eax, [eax]
jb 0x49a7ac
xor eax, 0x89543d80
dec eax
add byte [eax], al
cmp byte [0x488954], 0
je 0x49a7d8
rol edi, 0
je 0x49a7ba
cmc
shl edi, 0
jle 0x49a7d3
pushf
shr esp, 0
jae 0x49a7c7
add esp, 0
popf
jg 0x49a7ce
ja 0x49a7d0
jg 0x49a7d3
jmp 0x49f97596
mov edi, 0x49afcd
lea esi, [esi]
je 0x49a7ed
pushf
test ebx, 0x148f
popf
jp 0x49a7e8
xchg edx, edx
jne 0x49a7ed
ljmp 0x48:0x86e00d8b
mov ecx, dword [0x4886e0]
nop
jbe 0x49a7fd
xchg esp, esp
jl 0x49a7fa
ja 0x49a7fd
add eax, 0x2576cf3b
cmp ecx, edi
jbe 0x49a826
add ecx, dword [esp]
sub ecx, dword [esp]
jle 0x49a810
jl 0x49a80b
jne 0x49a80d
jg 0x49a810
sub dword [ebx], 0xfc90b0cf
sub ecx, edi
mov al, 0x90
cld
jg 0x49a817
jbe 0x49a824
je 0x49a81b
jg 0x49a81d
jmp 0x49a81f
ja 0x49a824
sub eax, 0xaaf32162
rep stosb byte es:[edi], al
jle 0x49a828
cmp ebx, ecx
jge 0x49a832
jb 0x49a82e
jl 0x49a832
sub dword [ecx - 0x791bc275], 0xe2c10048
add byte [ebx], dh
adc al, 0x24
mov edi, dword [0x4886e4]
shl edx, 0
xor edx, dword [esp]
xor edx, dword [esp]
lea edx, [edx]
lea eax, [eax + 0x6e45]
lea eax, [eax - 0x6e45]
jge 0x49a856
mov ebx, ebx
jl 0x49a856
ljmp 0x7000:0x495e2cb9
mov ecx, entry0
jo 0x49a85d
shl esp, 0
js 0x49a879
pushf
xor ecx, 0x66e9
xor ecx, 0x66e9
lea esi, [esi]
popf
ja 0x49a876
jns 0x49a879
mov ecx, 0x3476cf3b
cmp ecx, edi
jbe 0x49a8b1
jmp 0x49a87f
mov esp, esp
jns 0x49a88e
jo 0x49a885
jg 0x49a887
jg 0x49a889
xchg esp, esp
js 0x49a88e
sub eax, 0xc08bcf2b
sub ecx, edi
mov eax, eax
jl 0x49a8ac
pushf
ror eax, 5
rol eax, 5
ror ecx, 0x1c
rol ecx, 0x1c
xor esp, 0
popf
ja 0x49a8a9
jge 0x49a8ac
xor dword [eax - 0x550c0370], 0x760074
mov al, 0x90
cld
rep stosb byte es:[edi], al
je 0x49a8b3
jbe 0x49a8b5
jb 0x49a8bf
jmp 0x49a8b9
jl 0x49a8bb
jae 0x49a8bf
mov ebp, 0x5e7ebf09
dec ecx
add byte [ecx + 0x1356c2], al
add byte [ecx + 0x1356ea], al
add cl, al
into
adc cl, al
invalid
mov edi, 0x495e7e
add edx, 0x1356
sub edx, 0x1356
ror esi, 0x10
rol esi, 0x10
not edx
not edx
jne 0x49a8dc
jge 0x49a8e9
nop
jne 0x49a8e1
jmp 0x49a8e3
jge 0x49a8e5
jl 0x49a8e9
call 0xa5b162e5
dec ecx
add byte [ecx + 0x717c3], al
add byte [ecx + 0x717eb], al
add byte [edx], dh
mov ecx, 0x49a567
add ebx, 0x717
sub ebx, 0x717
jb 0x49a8fc
shl edi, 0
neg edx
neg edx
jl 0x49a921
pushf
xor edi, 0x3b89
xor edi, 0x3b89
nop
push edi
pop edi
popf
mov ecx, ecx
jae 0x49a91c
jbe 0x49a91e
jge 0x49a921
sub eax, 0x90b0cf2b
sub ecx, edi
mov al, 0x90
cld
rep stosb byte es:[edi], al
lea esi, [esi]
stc
cmp esp, 0x2fde
not edx
not edx
jge 0x49a94c
pushf
xor ecx, edx
xor ecx, edx
add esp, 0
add edi, 0
popf
xchg ebx, ebx
jnp 0x49a949
jl 0x49a94c
mov ebx, 0x835f5958
cmp eax, 0x48896c
add byte [edi], cl
test dh, dl
add byte [eax], al
add byte [ebx + 0x483fb40d], cl
add byte [ecx + 0xe1], al
add byte [ebp - 0x7c8b8a37], 0x3d
aam 0x47
dec eax
add byte [eax], al
pop eax
pop ecx
pop edi
cmp dword [0x48896c], 0
je 0x49aa32
mov ecx, dword [0x483fb4]
and ecx, 0x80000000
test ecx, ecx
jne 0x49a9e0
cmp dword [0x4847d4], 0
je 0x49a9e0
push 0x242010
lea edx, [ebp - 0xf0]
push edx
push 0x4889a8
push 0
call dword [0x48896c]
cmp dword [0x484050], 2
jne 0x49a9de
cmp dword [0x484044], 6
jne 0x49a9de
cmp dword [0x488718], 0xffffffff
je 0x49a9de
push 0
lea eax, [ebp - 0xf4]
push eax
push 0
push 0x42010
push 0x19d
push 0x4889a8
push 0xa1
lea ecx, [ebp - 0xf0]
push ecx
mov edx, dword [0x488718]
push edx
push 0
call dword [0x48871c]
jmp 0x49a9f9
push 0x42010
lea eax, [ebp - 0xf0]
push eax
push 0x4889a8
push 0
call dword [0x48896c]
mov dword [0x489e8c], 0
jmp 0x49aa14
mov ecx, dword [0x489e8c]
add ecx, 1
mov dword [0x489e8c], ecx
cmp dword [0x489e8c], 0xa1
jae 0x49aa30
mov edx, dword [0x489e8c]
mov byte [ebp + edx - 0xf0], 0
jmp 0x49aa05
jmp 0x49aa58
xor eax, eax
mov al, byte [0x486302]
cmp eax, 1
jne 0x49aa58
push 0x4889a8
lea ecx, [ebp - 0xf0]
push ecx
push 0x488574
call dword [sym.imp.MSVCRT.dll_printf]
add esp, 0xc
cmp dword [0x489bc0], 0
jne 0x49aa9c
cmp dword [0x488970], 0
je 0x49aa79
mov edx, dword [0x489e88]
push edx
call dword [0x488970]
jmp 0x49aa9c
cmp dword [0x484050], 2
jne 0x49aa95
cmp dword [0x484044], 6
jne 0x49aa95
push 0x63
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, 0x63
jmp 0x49aa9e
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc