
L1: 8b ff ?? mov edi, edi
 56 ?? push esi
 57 ?? push edi
 be 9c f1 42 00 ?? mov esi, 0x0042f19c<"KERNEL32.DLL">
 56 ?? push esi
 ff 15 5c 82 43 00 ?? call dword ds:[0x0043825c]

L2: 85 c0 ?? test eax, eax
 75 07 ?? jne basic block L5

L3: 56 ?? push esi
 e8 48 0a 00 00 ?? call function 0x0040cc95

L4: 59 ?? pop ecx

L5: 8b f8 ?? mov edi, eax
 85 ff ?? test edi, edi
 0f 84 5e 01 00 00 ?? je basic block L37

L6: 8b 35 60 82 43 00 ?? mov esi, dword ds:[0x00438260]
 68 e8 f1 42 00 ?? push 0x0042f1e8<"FlsAlloc">
 57 ?? push edi
 ff d6 ?? call esi

L7: 68 dc f1 42 00 ?? push 0x0042f1dc<"FlsGetValue">
 57 ?? push edi
 a3 94 5e 43 00 ?? mov dword ds:[0x00435e94], eax
 ff d6 ?? call esi

L8: 68 d0 f1 42 00 ?? push 0x0042f1d0<"FlsSetValue">
 57 ?? push edi
 a3 98 5e 43 00 ?? mov dword ds:[0x00435e98], eax
 ff d6 ?? call esi

L9: 68 c8 f1 42 00 ?? push 0x0042f1c8<"FlsFree">
 57 ?? push edi
 a3 9c 5e 43 00 ?? mov dword ds:[0x00435e9c], eax
 ff d6 ?? call esi

L10: 83 3d 94 5e 43 00 00 ?? cmp dword ds:[0x00435e94], 0
 8b 35 6c 82 43 00 ?? mov esi, dword ds:[0x0043826c]
 a3 a0 5e 43 00 ?? mov dword ds:[0x00435ea0], eax
 74 16 ?? je basic block L14

L11: 83 3d 98 5e 43 00 00 ?? cmp dword ds:[0x00435e98], 0
 74 0d ?? je basic block L14

L12: 83 3d 9c 5e 43 00 00 ?? cmp dword ds:[0x00435e9c], 0
 74 04 ?? je basic block L14

L13: 85 c0 ?? test eax, eax
 75 24 ?? jne basic block L15

L14: a1 64 82 43 00 ?? mov eax, dword ds:[0x00438264]
 a3 98 5e 43 00 ?? mov dword ds:[0x00435e98], eax
 a1 70 82 43 00 ?? mov eax, dword ds:[0x00438270]
 c7 05 94 5e 43 00 59 be ?? mov dword ds:[0x00435e94], function 0x0040be59
 40 00
 89 35 9c 5e 43 00 ?? mov dword ds:[0x00435e9c], esi
 a3 a0 5e 43 00 ?? mov dword ds:[0x00435ea0], eax

L15: ff 15 68 82 43 00 ?? call dword ds:[0x00438268]

L16: a3 1c 48 43 00 ?? mov dword ds:[0x0043481c], eax
 83 f8 ff ?? cmp eax, 0xff<255,-1>
 0f 84 cc 00 00 00 ?? je basic block L38

L17: ff 35 98 5e 43 00 ?? push dword ds:[0x00435e98]
 50 ?? push eax
 ff d6 ?? call esi

L18: 85 c0 ?? test eax, eax
 0f 84 bb 00 00 00 ?? je basic block L38

L19: e8 f2 0c 00 00 ?? call function 0x0040cff7

L20: ff 35 94 5e 43 00 ?? push dword ds:[0x00435e94]
 e8 5c fa ff ff ?? call function 0x0040bd6c

L21: ff 35 98 5e 43 00 ?? push dword ds:[0x00435e98]
 a3 94 5e 43 00 ?? mov dword ds:[0x00435e94], eax
 e8 4c fa ff ff ?? call function 0x0040bd6c

L22: ff 35 9c 5e 43 00 ?? push dword ds:[0x00435e9c]
 a3 98 5e 43 00 ?? mov dword ds:[0x00435e98], eax
 e8 3c fa ff ff ?? call function 0x0040bd6c

L23: ff 35 a0 5e 43 00 ?? push dword ds:[0x00435ea0]
 a3 9c 5e 43 00 ?? mov dword ds:[0x00435e9c], eax
 e8 2c fa ff ff ?? call function 0x0040bd6c

L24: 83 c4 10 ?? add esp, 0x10<16>
 a3 a0 5e 43 00 ?? mov dword ds:[0x00435ea0], eax
 e8 22 1b 00 00 ?? call function 0x0040de6f

L25: 85 c0 ?? test eax, eax
 74 65 ?? je basic block L37

L26: 68 8a c0 40 00 ?? push function 0x0040c08a
 ff 35 94 5e 43 00 ?? push dword ds:[0x00435e94]
 e8 86 fa ff ff ?? call function 0x0040bde7

L27: 59 ?? pop ecx
 ff d0 ?? call eax

L28: a3 18 48 43 00 ?? mov dword ds:[0x00434818], eax
 83 f8 ff ?? cmp eax, 0xff<255,-1>
 74 48 ?? je basic block L37

L29: 68 14 02 00 00 ?? push 0x00000214<532>
 6a 01 ?? push 1
 e8 cb dc ff ff ?? call function 0x0040a045

L30: 8b f0 ?? mov esi, eax
 59 ?? pop ecx
 59 ?? pop ecx
 85 f6 ?? test esi, esi
 74 34 ?? je basic block L37

L31: 56 ?? push esi
 ff 35 18 48 43 00 ?? push dword ds:[0x00434818]
 ff 35 9c 5e 43 00 ?? push dword ds:[0x00435e9c]
 e8 53 fa ff ff ?? call function 0x0040bde7

L32: 59 ?? pop ecx
 ff d0 ?? call eax

L33: 85 c0 ?? test eax, eax
 74 1b ?? je basic block L37

L34: 6a 00 ?? push 0
 56 ?? push esi
 e8 6d fb ff ff ?? call function 0x0040bf10

L35: 59 ?? pop ecx
 59 ?? pop ecx
 ff 15 78 82 43 00 ?? call dword ds:[0x00438278]

L36: 83 4e 04 ff ?? or dword ds:[esi + 4], 0xff<255,-1>
 89 06 ?? mov dword ds:[esi], eax
 33 c0 ?? xor eax, eax
 40 ?? inc eax
 eb 07 ?? jmp basic block L39

L37: e8 18 fb ff ff ?? call function 0x0040bed3

L38: 33 c0 ?? xor eax, eax

L39: 5f ?? pop edi
 5e ?? pop esi
 c3 ?? ret

