Function at 0x48fa73
Capabilities:
Encode data using xor

Disassembly:
push 0x9a4
mov eax, 0x4e3a08
call fcn.004b6799
mov esi, ecx
mov dword [ebp - 0x8e4], esi
xor edi, edi
mov dword [ebp - 4], edi
call fcn.0049219b
push eax
lea ecx, [ebp - 0x8d0]
call fcn.00402802
mov byte [ebp - 4], 1
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push eax
push ecx
lea eax, [ebp - 0x8d0]
push str.before_VerifyArmadilloKey__d___d
push eax
call fcn.00402a07
add esp, 0xc
lea eax, [ebp + 8]
mov dword [ebp - 0x8dc], esp
mov ecx, esp
push eax
call fcn.004022fa
mov ecx, esi
call fcn.0048d948
test al, al
je 0x490c91
mov eax, dword [esi + 4]
mov esi, dword [esi]
push eax
push esi
lea eax, [ebp - 0x8d0]
push str.After_VerifyArmadilloKey__d___d
push eax
call fcn.00402a07
add esp, 0x10
cmp byte [ebp + 0xc], 0
je 0x490c8c
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x8c0]
mov dword [ebp - 0x8dc], eax
mov dword [ebp - 0x898], edi
mov dword [ebp - 0x8a0], edi
mov dword [ebp - 0x8c8], edi
call fcn.0040254f
lea eax, [ebp - 0x8c0]
push eax
lea ecx, [ebp - 0x890]
mov byte [ebp - 4], 2
call fcn.004022fa
mov byte [ebp - 4], 3
mov ebx, dword [ebp - 0x890]
mov eax, dword [ebx - 0xc]
cmp eax, 0x17
je 0x48fb72
add ebx, 0xfffffff0
mov ecx, ebx
call fcn.00402845
mov ecx, dword [ebp - 0x8c0]
add ecx, 0xfffffff0
call fcn.00402845
xor edi, edi
jmp 0x490c69
call fcn.0049219b
push eax
lea ecx, [ebp - 0x8a8]
call fcn.00402802
mov byte [ebp - 4], 4
call fcn.0049219b
push eax
lea ecx, [ebp - 0x8a4]
call fcn.00402802
mov byte [ebp - 4], 5
call fcn.0049219b
push eax
lea ecx, [ebp - 0x894]
call fcn.00402802
mov byte [ebp - 4], 6
call fcn.0049219b
push eax
lea ecx, [ebp - 0x89c]
call fcn.00402802
mov edi, 0x53f194
push edi
xor ecx, ecx
lea esi, [ebp - 0x890]
mov byte [ebp - 4], 7
call fcn.00407898
mov esi, eax
cmp esi, 0xffffffff
je 0x49027e
push esi
push 0
lea eax, [ebp - 0x914]
push eax
lea ecx, [ebp - 0x890]
call fcn.00407912
push eax
lea ecx, [ebp - 0x8a8]
mov byte [ebp - 4], 8
call fcn.004025ee
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x914]
add ecx, 0xfffffff0
call fcn.00402845
push dword [ebx - 0xc]
inc esi
push esi
lea eax, [ebp - 0x908]
push eax
lea ecx, [ebp - 0x890]
call fcn.00407912
push eax
lea ecx, [ebp - 0x890]
mov byte [ebp - 4], 9
call fcn.004025ee
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x908]
add ecx, 0xfffffff0
call fcn.00402845
push edi
xor ecx, ecx
lea esi, [ebp - 0x890]
call fcn.00407898
mov esi, eax
cmp esi, 0xffffffff
je 0x48ff63
push esi
push 0
lea eax, [ebp - 0x900]
push eax
lea ecx, [ebp - 0x890]
call fcn.00407912
push eax
lea ecx, [ebp - 0x8a4]
mov byte [ebp - 4], 0xa
call fcn.004025ee
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x900]
add ecx, 0xfffffff0
call fcn.00402845
mov eax, dword [ebp - 0x890]
push dword [eax - 0xc]
inc esi
push esi
lea eax, [ebp - 0x904]
push eax
lea ecx, [ebp - 0x890]
call fcn.00407912
push eax
lea ecx, [ebp - 0x890]
mov byte [ebp - 4], 0xb
call fcn.004025ee
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x904]
add ecx, 0xfffffff0
call fcn.00402845
push edi
xor ecx, ecx
lea esi, [ebp - 0x890]
call fcn.00407898
mov esi, eax
cmp esi, 0xffffffff
je 0x48ff63
push esi
push 0
lea eax, [ebp - 0x910]
push eax
lea ecx, [ebp - 0x890]
call fcn.00407912
push eax
lea ecx, [ebp - 0x894]
mov byte [ebp - 4], 0xc
call fcn.004025ee
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x910]
add ecx, 0xfffffff0
call fcn.00402845
mov eax, dword [ebp - 0x890]
push dword [eax - 0xc]
inc esi
push esi
lea eax, [ebp - 0x90c]
push eax
lea ecx, [ebp - 0x890]
call fcn.00407912
push eax
lea ecx, [ebp - 0x89c]
mov byte [ebp - 4], 0xd
call fcn.004025ee
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x90c]
add ecx, 0xfffffff0
call fcn.00402845
push 6
pop edi
push 2
xor ecx, ecx
pop esi
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00490db6
mov ebx, eax
mov eax, dword [ebp - 0x8a8]
pop ecx
mov ecx, ebx
mov dword [ebp - 0x8d8], ebx
sub ecx, eax
movzx edx, word [eax]
mov word [ecx + eax], dx
add eax, esi
test dx, dx
jne 0x48fda0
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00490db6
mov edx, eax
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x8d4], edx
pop ecx
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, esi
test cx, cx
jne 0x48fdd4
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00490db6
mov edx, eax
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0x8b8], edx
pop ecx
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, esi
test cx, cx
jne 0x48fe08
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00490db6
mov edx, eax
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x8b4], edx
pop ecx
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, esi
test cx, cx
jne 0x48fe3c
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00490db6
mov edi, dword [ebp - 0x8d4]
pop ecx
mov ecx, eax
mov edx, ebx
sub edi, ebx
mov dword [ebp - 0x8cc], ecx
sub edx, ecx
mov dword [ebp - 0x8ac], 5
or dword [ebp - 0x898], 0xffffffff
or dword [ebp - 0x8a0], 0xffffffff
lea eax, [edx + ecx]
mov bl, byte [eax + edi]
mov al, byte [eax]
mov byte [ebp - 0x8c1], al
mov byte [ebp - 0x8b9], bl
xor eax, eax
mov bl, byte [ebp - 0x8b9]
cmp byte [eax + str.9PHVYB7EM6TW5SFZ8KUA3CNX4G2DRJ], bl
jne 0x48feb6
mov dword [ebp - 0x898], eax
mov bl, byte [ebp - 0x8c1]
cmp byte [eax + str.23456789ABCDEFGHJKMNPRSTUVWXYZ], bl
jne 0x48feca
mov dword [ebp - 0x8a0], eax
inc eax
cmp eax, 0x1e
jl 0x48fea2
mov eax, dword [ebp - 0x898]
sub eax, dword [ebp - 0x8a0]
jns 0x48fee1
add eax, 0x1e
movsx ax, byte [eax + str.23456789ABCDEFGHJKMNPRSTUVWXYZ]
mov word [ecx], ax
add ecx, esi
dec dword [ebp - 0x8ac]
jne 0x48fe7e
mov edi, dword [ebp - 0x8cc]
xor eax, eax
push edi
mov ecx, 0x57a8d4
mov word [edi + 0xa], ax
call fcn.00411c99
test eax, eax
je 0x48ffa9
mov eax, 0x54c3f0
mov edx, edi
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, esi
test cx, cx
jne 0x48ff1e
push dword [ebp - 0x8d8]
call fcn.00490dab
pop ecx
push dword [ebp - 0x8d4]
call fcn.00490dab
pop ecx
push edi
call fcn.00490dab
pop ecx
push dword [ebp - 0x8b8]
call fcn.00490dab
pop ecx
push dword [ebp - 0x8b4]
call fcn.00490dab
pop ecx
mov ecx, dword [ebp - 0x89c]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [ebp - 0x894]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [ebp - 0x8a4]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [ebp - 0x890]
add ecx, 0xfffffff0
jmp 0x48fb58
mov ebx, dword [ebp - 0x8b8]
mov al, byte [ebx]
xor ecx, ecx
cmp byte [ecx + str.VE9WMBCX8SP3DJT7A5GZUNHF2R6KY4], al
je 0x48ffc1
inc ecx
cmp ecx, 0xb
jl 0x48ffb3
mov al, byte [ebx + 2]
push 0xb
pop ecx
cmp byte [ecx + str.VE9WMBCX8SP3DJT7A5GZUNHF2R6KY4], al
je 0x48ffd5
inc ecx
cmp ecx, 0x17
jl 0x48ffc7
mov al, byte [ebx + 4]
or edi, 0xffffffff
mov dword [ebp - 0x8c8], edi
mov dword [ebp - 0x8ac], edi
xor esi, esi
mov cl, byte [esi + str.VE9WMBCX8SP3DJT7A5GZUNHF2R6KY4]
cmp cl, al
jne 0x48fff9
mov dword [ebp - 0x8c8], esi
cmp cl, byte [ebx + 6]
jne 0x490000
mov edi, esi
cmp cl, byte [ebx + 8]
jne 0x49000b
mov dword [ebp - 0x8ac], esi
cmp dword [ebp - 0x8c8], 0
jl 0x490021
test edi, edi
jl 0x490021
cmp dword [ebp - 0x8ac], 0
jge 0x490027
inc esi
cmp esi, 0x1e
jl 0x48ffe9
mov eax, dword [ebp - 0x8c8]
cdq
sub eax, edx
mov ecx, eax
mov eax, edi
cdq
sar ecx, 1
add ecx, 0xe
sub eax, edx
sar eax, 1
mov dword [ebp - 0x898], ecx
mov dword [ebp - 0x8a0], eax
jne 0x490056
mov dword [ebp - 0x8a0], 0xc
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x8c8], 0x1e
test eax, eax
je 0x490070
mov dword [ebp - 0x8c8], eax
cmp ecx, 0x64
jae 0x490081
add ecx, 0x7d0
mov dword [ebp - 0x898], ecx
call fcn.0049219b
push eax
lea ecx, [ebp - 0x8b0]
call fcn.00402802
mov byte [ebp - 4], 0xe
xor edi, edi
mov eax, dword [ebp - 0x8b4]
mov al, byte [eax + edi*2]
xor esi, esi
cmp byte [esi + str.9PHVYB7EM6TW5SFZ8KUA3CNX4G2DRJ], al
je 0x4900b1
inc esi
cmp esi, 0xa
jl 0x4900a3
call fcn.0049219b
push eax
lea ecx, [ebp - 0x8ac]
call fcn.00402802
push esi
lea eax, [ebp - 0x8ac]
push 0x5305bc
push eax
mov byte [ebp - 4], 0xf
call fcn.00402a07
mov esi, dword [ebp - 0x8ac]
add esp, 0xc
push dword [esi - 0xc]
lea ecx, [ebp - 0x8b0]
push esi
call fcn.00412253
add esi, 0xfffffff0
mov ecx, esi
mov byte [ebp - 4], 0xe
call fcn.00402845
inc edi
cmp edi, 5
jl 0x490098
mov esi, dword [ebp - 0x8b0]
push esi
call fcn.004b329f
pop ecx
push 8
mov dword [ebp - 0x8e0], eax
pop ecx
xor eax, eax
mov word [ebp - 0x58], ax
push ebx
push dword [ebp - 0x8cc]
lea edi, [ebp - 0x56]
push dword [ebp - 0x8d8]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x58]
push str._s__s__s
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
push 0x12
call fcn.00490db6
mov edi, eax
pop ecx
lea eax, [ebp - 0x9ac]
mov dword [ebp - 0x9b0], eax
push 3
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x9b0]
push eax
call fcn.00407362
mov ebx, dword [ebp - 0x9b0]
mov ecx, edi
mov eax, ebx
sub ecx, ebx
mov dl, byte [eax]
mov byte [ecx + eax], dl
inc eax
test dl, dl
jne 0x49017a
lea eax, [ebp - 0x9ac]
cmp ebx, eax
je 0x490195
push ebx
call fcn.004b2850
pop ecx
mov dword [ebp - 0x8ac], 0x11
mov eax, edi
xor ebx, ebx
movzx edx, byte [eax]
mov ecx, ebx
shr ecx, 8
shl ebx, 8
xor ecx, edx
xor ebx, dword [ecx*4 + 0x5718f0]
and ebx, 0xffff
inc eax
dec dword [ebp - 0x8ac]
cmp dword [ebp - 0x8ac], 0
jg 0x4901a3
push edi
call fcn.00490dab
movzx eax, bx
cmp dword [ebp - 0x8e0], eax
pop ecx
push dword [ebp - 0x8d8]
sete bl
call fcn.00490dab
pop ecx
push dword [ebp - 0x8d4]
call fcn.00490dab
pop ecx
push dword [ebp - 0x8cc]
call fcn.00490dab
pop ecx
push dword [ebp - 0x8b8]
call fcn.00490dab
pop ecx
push dword [ebp - 0x8b4]
call fcn.00490dab
pop ecx
lea ecx, [esi - 0x10]
call fcn.00402845
mov ecx, dword [ebp - 0x89c]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [ebp - 0x894]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [ebp - 0x8a4]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [ebp - 0x890]
add ecx, 0xfffffff0
call fcn.00402845
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x8c0]
add ecx, 0xfffffff0
call fcn.00402845
jmp 0x4902d2
mov ecx, dword [ebp - 0x89c]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [ebp - 0x894]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [ebp - 0x8a4]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.00402845
lea ecx, [ebx - 0x10]
call fcn.00402845
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x8c0]
add ecx, 0xfffffff0
call fcn.00402845
xor bl, bl
test bl, bl
je 0x48fb6b
lea eax, [ebp - 0x920]
call fcn.00442a09
xor eax, eax
push eax
push eax
push eax
push dword [ebp - 0x8c8]
lea ecx, [ebp - 0x92c]
push dword [ebp - 0x8a0]
push dword [ebp - 0x898]
call fcn.00442b44
lea eax, [ebp - 0x920]
push eax
lea ecx, [ebp - 0x92c]
call fcn.00490cf0
test al, al
je 0x49034d
lea eax, [ebp - 0x920]
push eax
lea esi, [ebp - 0x8f0]
lea eax, [ebp - 0x92c]
call fcn.0046ac51
mov ecx, esi
call fcn.0046ac21
fcomp qword [0x54ccb0]
fnstsw ax
test ah, 0x41
je 0x48fb6b
push dword [ebp - 0x8dc]
lea ecx, [ebp - 0x8a4]
call fcn.0040254f
lea ebx, [ebp - 0x8a4]
mov byte [ebp - 4], 0x10
call fcn.0040c8c6
mov ebx, eax
call fcn.0040c913
lea edi, [ebp - 0x8a4]
call fcn.004078c9
mov eax, edi
push eax
lea ecx, [ebp - 0x8a8]
call fcn.004022fa
lea ebx, [ebp - 0x8a8]
mov byte [ebp - 4], 0x11
call fcn.0040c8c6
mov ebx, eax
call fcn.0040c913
lea edi, [ebp - 0x8a8]
call fcn.004078c9
mov esi, dword [ebp - 0x8e4]
add esi, 8
mov eax, dword [esi]
mov eax, dword [eax - 0xc]
mov ebx, 0xff
test eax, eax
je 0x4903ea
push dword [ebp - 0x8a8]
xor ecx, ecx
call fcn.00407898
cmp eax, 0xffffffff
je 0x4903ea
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.00402845
jmp 0x49081c
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.00402845
push esi
lea eax, [ebp - 0x8a4]
push eax
lea eax, [ebp - 0x8dc]
push eax
call fcn.00402125
add esp, 0xc
push eax
mov ecx, esi
mov byte [ebp - 4], 0x12
call fcn.004025ee
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x8dc]
add ecx, 0xfffffff0
call fcn.00402845
mov eax, dword [esi]
cmp dword [eax - 0xc], ebx
jle 0x490461
push ebx
lea eax, [ebp - 0x8e0]
push eax
mov ecx, esi
call fcn.00407990
push eax
mov ecx, esi
mov byte [ebp - 4], 0x13
call fcn.004025ee
mov ecx, dword [ebp - 0x8e0]
add ecx, 0xfffffff0
call fcn.00402845
mov edi, 0x579040
push edi
mov dword [ebp - 0x8b8], edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 4], 0x14
call fcn.0049219b
push eax
lea ecx, [ebp - 0x8b4]
call fcn.00402802
push 3
lea eax, [ebp - 0x8b4]
push 0x5305bc
push eax
mov byte [ebp - 4], 0x15
call fcn.00402a07
mov eax, dword [esi]
add esp, 0xc
push dword [ebp - 0x8b4]
mov ecx, 0x57a8dc
mov dword [ebp - 0x8b0], eax
call fcn.004a071a
push dword [ebp - 0x8b0]
mov ecx, eax
call fcn.0040272d
mov eax, dword [esi]
mov dword [ebp - 0x898], eax
lea eax, [ebp - 0x8b0]
push eax
lea esi, [ebp - 0x8fc]
mov dword [ebp - 0x8b0], VariantCopy
call fcn.0040acc7
mov byte [ebp - 4], 0x16
call fcn.0049219b
push eax
lea ecx, [ebp - 0x8a0]
call fcn.00402802
push 3
mov byte [ebp - 4], 0x17
push dword [0x57a8c0]
lea eax, [ebp - 0x8a0]
push dword [0x57a8c8]
push eax
call fcn.00402a07
add esp, 0x10
call fcn.0049219b
push eax
lea ecx, [ebp - 0x890]
call fcn.00402802
push 0x200
lea eax, [ebp - 0x68c]
push 0
mov byte [ebp - 4], 0x18
push eax
mov dword [ebp - 0x8fc], 0x2001f
call fcn.004b62d0
add esp, 0xc
push ebx
push dword [ebp - 0x898]
lea eax, [ebp - 0x68c]
push eax
call fcn.004b3b7a
mov eax, dword [0x57a8d8]
add esp, 0xc
cmp dword [eax - 0xc], 0
jne 0x4905ab
mov ecx, dword [ebp - 0x890]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [ebp - 0x8a0]
add ecx, 0xfffffff0
call fcn.00402845
call fcn.0040ad41
mov ecx, dword [ebp - 0x8f4]
add ecx, 0xfffffff0
call fcn.00402845
jmp 0x490807
push 7
pop ecx
mov esi, str.Microsoft_Visual_C_Library
lea edi, [ebp - 0x34]
rep movsd dword es:[edi], dword [esi]
push 0x101
lea eax, [ebp - 0x184]
push 0
push eax
movsb byte es:[edi], byte [esi]
call fcn.004b62d0
add esp, 0xc
push 0x101
lea eax, [ebp - 0x28c]
push 0
push eax
call fcn.004b62d0
add esp, 0xc
xor eax, eax
mov edi, 0x100
mov byte [ebp + eax - 0x184], al
inc eax
cmp eax, edi
jb 0x4905ec
mov eax, dword [0x57a8d8]
xor ecx, ecx
xor esi, esi
cmp dword [eax - 0xc], ecx
je 0x49061f
cmp esi, dword [eax - 0xc]
jb 0x49060d
xor esi, esi
mov dl, byte [eax + esi*2]
inc esi
mov byte [ebp + ecx - 0x28c], dl
inc ecx
cmp ecx, edi
jb 0x490606
jmp 0x490639
xor eax, eax
cmp esi, 0x1c
jb 0x490628
xor esi, esi
mov dl, byte [ebp + esi - 0x34]
inc esi
mov byte [ebp + eax - 0x28c], dl
inc eax
cmp eax, edi
jb 0x490621
xor edi, edi
mov dword [ebp - 0x894], edi
movzx edx, byte [ebp + edi - 0x28c]
add edx, dword [ebp - 0x894]
lea eax, [ebp + edi - 0x184]
mov cl, byte [eax]
movzx esi, cl
add esi, edx
and esi, ebx
mov edx, esi
movzx cx, cl
lea esi, [ebp + edx - 0x184]
mov dword [ebp - 0x894], edx
mov dl, byte [esi]
movzx ecx, cx
inc edi
mov byte [eax], dl
mov byte [esi], cl
cmp edi, 0x100
jb 0x490641
xor edi, edi
mov dword [ebp - 0x894], edi
mov dword [ebp - 0x89c], edi
inc edi
and edi, ebx
lea ecx, [ebp + edi - 0x184]
mov al, byte [ecx]
movzx edx, al
add edx, dword [ebp - 0x894]
movzx ax, al
and edx, ebx
movzx eax, ax
lea esi, [ebp + edx - 0x184]
mov dword [ebp - 0x894], edx
mov dl, byte [esi]
mov byte [ecx], dl
mov byte [esi], al
movzx ecx, byte [ecx]
movzx eax, al
add eax, ecx
mov ecx, dword [ebp - 0x89c]
and eax, ebx
movzx ax, byte [ebp + eax - 0x184]
movzx eax, ax
lea ecx, [ebp + ecx - 0x68c]
xor byte [ecx], al
inc dword [ebp - 0x89c]
cmp dword [ebp - 0x89c], 0x1fe
jb 0x490692
xor eax, eax
mov word [ebp - 0x48e], ax
call fcn.0049219b
push eax
lea ecx, [ebp - 0x898]
call fcn.00402802
push 3
mov byte [ebp - 4], 0x19
push dword [0x57a8d0]
lea eax, [ebp - 0x898]
push eax
call fcn.00402a07
add esp, 8
lea eax, [ebp - 0x898]
mov dword [ebp - 0x8b0], esp
mov ecx, esp
push eax
lea esi, [ebp - 0x68c]
call fcn.004022fa
mov ecx, esi
call fcn.0048caaf
pop ecx
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x898]
add ecx, 0xfffffff0
call fcn.00402845
mov edi, dword [ebp - 0x8a0]
push 1
push edi
push SysReAllocStringLen
lea esi, [ebp - 0x8fc]
call fcn.0040ace3
test eax, eax
je 0x49079e
push 0x200
lea eax, [ebp - 0x68c]
push eax
push dword [ebp - 0x890]
mov eax, esi
call fcn.0040af75
call fcn.0040ad41
push 1
push edi
push reloc.OLEAUT32.dll_SysReAllocString
lea esi, [ebp - 0x8fc]
call fcn.0040ace3
test eax, eax
je 0x4907d3
push 0x200
lea eax, [ebp - 0x68c]
push eax
push dword [ebp - 0x890]
mov eax, esi
call fcn.0040af75
call fcn.0040ad41
mov ecx, dword [ebp - 0x890]
add ecx, 0xfffffff0
call fcn.00402845
lea ecx, [edi - 0x10]
call fcn.00402845
lea esi, [ebp - 0x8fc]
call fcn.0040ad41
mov ecx, dword [ebp - 0x8f4]
add ecx, 0xfffffff0
call fcn.00402845
mov edi, 0x579040
mov ecx, dword [ebp - 0x8b4]
add ecx, 0xfffffff0
call fcn.00402845
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x8a4]
add ecx, 0xfffffff0
call fcn.00402845
push 0x400
push 0
lea eax, [ebp - 0x8cc]
push eax
lea ecx, [ebp - 0x920]
call fcn.00442ba1
mov edi, 0x200
push edi
lea eax, [ebp - 0x88c]
push 0
push eax
mov byte [ebp - 4], 0x1a
call fcn.004b62d0
add esp, 0xc
push ebx
push dword [ebp - 0x8cc]
lea eax, [ebp - 0x88c]
push eax
call fcn.004b3b7a
add esp, 0xc
lea eax, [ebp - 0x88c]
push eax
lea ecx, [ebp - 0x8b8]
call fcn.0040254f
mov eax, 0x579040
push eax
mov dword [ebp - 0x8d4], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 4], 0x1c
call fcn.0049219b
push eax
lea ecx, [ebp - 0x8b4]
call fcn.00402802
push 2
lea eax, [ebp - 0x8b4]
push 0x5305bc
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402a07
mov esi, dword [ebp - 0x8b8]
add esp, 0xc
push dword [ebp - 0x8b4]
mov ecx, 0x57a8dc
call fcn.004a071a
push esi
mov ecx, eax
call fcn.0040272d
mov eax, dword [ebp - 0x8b8]
mov dword [ebp - 0x898], eax
lea eax, [ebp - 0x8b0]
push eax
lea esi, [ebp - 0x30]
mov dword [ebp - 0x8b0], VariantCopy
call fcn.0040acc7
mov byte [ebp - 4], 0x1e
call fcn.0049219b
push eax
lea ecx, [ebp - 0x8a0]
call fcn.00402802
push 2
mov byte [ebp - 4], 0x1f
push dword [0x57a8c0]
lea eax, [ebp - 0x8a0]
push dword [0x57a8c8]
push eax
call fcn.00402a07
add esp, 0x10
call fcn.0049219b
push eax
lea ecx, [ebp - 0x8b0]
call fcn.00402802
push edi
lea eax, [ebp - 0x48c]
push 0
mov byte [ebp - 4], 0x20
push eax
mov dword [ebp - 0x30], 0x2001f
call fcn.004b62d0
add esp, 0xc
push ebx
push dword [ebp - 0x898]
lea eax, [ebp - 0x48c]
push eax
call fcn.004b3b7a
mov eax, dword [0x57a8d8]
add esp, 0xc
cmp dword [eax - 0xc], 0
jne 0x4909af
mov ecx, dword [ebp - 0x8b0]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [ebp - 0x8a0]
add ecx, 0xfffffff0
jmp 0x490bd8
push 7
pop ecx
mov esi, str.Microsoft_Visual_C_Library
lea edi, [ebp - 0x78]
rep movsd dword es:[edi], dword [esi]
push 0x101
lea eax, [ebp - 0x184]
push 0
push eax
movsb byte es:[edi], byte [esi]
call fcn.004b62d0
add esp, 0xc
push 0x101
lea eax, [ebp - 0x28c]
push 0
push eax
call fcn.004b62d0
add esp, 0xc
xor eax, eax
mov edi, 0x100
mov byte [ebp + eax - 0x184], al
inc eax
cmp eax, edi
jb 0x4909f0
mov eax, dword [0x57a8d8]
xor ecx, ecx
xor esi, esi
cmp dword [eax - 0xc], ecx
je 0x490a23
cmp esi, dword [eax - 0xc]
jb 0x490a11
xor esi, esi
mov dl, byte [eax + esi*2]
inc esi
mov byte [ebp + ecx - 0x28c], dl
inc ecx
cmp ecx, edi
jb 0x490a0a
jmp 0x490a3d
xor eax, eax
cmp esi, 0x1c
jb 0x490a2c
xor esi, esi
mov dl, byte [ebp + esi - 0x78]
inc esi
mov byte [ebp + eax - 0x28c], dl
inc eax
cmp eax, edi
jb 0x490a25
xor edi, edi
mov dword [ebp - 0x894], edi
movzx edx, byte [ebp + edi - 0x28c]
add edx, dword [ebp - 0x894]
lea eax, [ebp + edi - 0x184]
mov cl, byte [eax]
movzx esi, cl
add esi, edx
and esi, ebx
mov edx, esi
movzx cx, cl
lea esi, [ebp + edx - 0x184]
mov dword [ebp - 0x894], edx
mov dl, byte [esi]
movzx ecx, cx
inc edi
mov byte [eax], dl
mov byte [esi], cl
cmp edi, 0x100
jb 0x490a45
xor edi, edi
mov dword [ebp - 0x894], edi
mov dword [ebp - 0x89c], edi
inc edi
and edi, ebx
lea eax, [ebp + edi - 0x184]
mov cl, byte [eax]
movzx edx, cl
add edx, dword [ebp - 0x894]
movzx cx, cl
and edx, ebx
movzx ecx, cx
lea esi, [ebp + edx - 0x184]
mov dword [ebp - 0x894], edx
mov dl, byte [esi]
mov byte [eax], dl
mov byte [esi], cl
movzx eax, byte [eax]
movzx ecx, cl
add eax, ecx
mov ecx, dword [ebp - 0x89c]
and eax, ebx
movzx ax, byte [ebp + eax - 0x184]
movzx eax, ax
lea ecx, [ebp + ecx - 0x48c]
xor byte [ecx], al
inc dword [ebp - 0x89c]
cmp dword [ebp - 0x89c], 0x1fe
jb 0x490a96
xor eax, eax
mov word [ebp - 0x28e], ax
call fcn.0049219b
push eax
lea ecx, [ebp - 0x898]
call fcn.00402802
push 2
mov byte [ebp - 4], 0x21
push dword [0x57a8d0]
lea eax, [ebp - 0x898]
push eax
call fcn.00402a07
add esp, 8
lea eax, [ebp - 0x898]
mov dword [ebp - 0x8d8], esp
mov ecx, esp
push eax
lea esi, [ebp - 0x48c]
call fcn.004022fa
mov ecx, esi
call fcn.0048caaf
pop ecx
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x898]
add ecx, 0xfffffff0
call fcn.00402845
mov edi, dword [ebp - 0x8a0]
push 1
push edi
push SysReAllocStringLen
lea esi, [ebp - 0x30]
call fcn.0040ace3
mov ebx, dword [ebp - 0x8b0]
test eax, eax
je 0x490ba0
push 0x200
lea eax, [ebp - 0x48c]
push eax
push ebx
mov eax, esi
call fcn.0040af75
call fcn.0040ad41
push 1
push edi
push reloc.OLEAUT32.dll_SysReAllocString
lea esi, [ebp - 0x30]
call fcn.0040ace3
test eax, eax
je 0x490bcd
push 0x200
lea eax, [ebp - 0x48c]
push eax
push ebx
mov eax, esi
call fcn.0040af75
call fcn.0040ad41
lea ecx, [ebx - 0x10]
call fcn.00402845
lea ecx, [edi - 0x10]
call fcn.00402845
lea esi, [ebp - 0x30]
call fcn.0040ad41
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [ebp - 0x8b4]
add ecx, 0xfffffff0
call fcn.00402845
push 0x579040
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x8b8]
add ecx, 0xfffffff0
call fcn.00402845
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x8cc]
add ecx, 0xfffffff0
call fcn.00402845
mov edi, dword [ebp - 0x8e4]
push dword [edi + 4]
lea eax, [ebp - 0x8d0]
push dword [edi]
push str.After_InstallArmadilloCode__d___d
push eax
call fcn.00402a07
add esp, 0x10
call fcn.0048f634
push dword [edi + 4]
lea eax, [ebp - 0x8d0]
push dword [edi]
push str.After_RefreshAllStatus__d___d
push eax
call fcn.00402a07
mov edi, dword [edi + 4]
add esp, 0x10
mov ecx, dword [ebp - 0x8d0]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00402845
mov eax, edi
call fcn.004b681c
ret 8
xor edi, edi
inc edi
jmp 0x490c69
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x490c69