Function at 0x461fbe
Capabilities:
Contain obfuscated stackstrings
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xa8c
cmp byte [ebp + 0xc], 0
push ebx
push esi
push edi
mov esi, ecx
je 0x463a67
xor ebx, ebx
cmp byte [ebp + 0x10], bl
je 0x461ffb
mov dword [edx], ebx
inc ebx
jmp 0x461ff2
mov ecx, dword [edx]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0x268dd2ac
inc dword [edx]
cmp dword [edx], ebx
jl 0x461fe5
jmp 0x463a6d
xor eax, eax
mov dword [esp + 0x13c], 0x35003606
inc ebx
mov dword [esp + 0x140], 0x3b023c03
mov byte [esp + 0x144], bl
mov edx, eax
mov dword [esp + 0x145], 0x83e053a
mov edi, eax
mov dword [esp + 0x149], 0x80e2173d
mov dword [esp + 0x14d], 0x3a1cf755
mov dword [esp + 0x151], 0x81c4a32c
mov dword [esp + 0x155], 0xde313bdf
mov dword [esp + 0x159], 0x2d49b81e
mov dword [esp + 0x15d], 0x5247f5a7
mov dword [esp + 0x161], 0x44094407
mov word [esp + 0x165], 0x4a04
cmp edx, 0xe
jne 0x46208e
push 0x17
pop edi
push 0x23
pop edx
jmp 0x4620c2
movzx ecx, byte [esp + edx + 0x13d]
lea esi, [edi - 1]
sub ecx, edx
add esi, ecx
jns 0x4620b2
or ecx, 0xffffffff
sub ecx, esi
add esi, 0x100
and ecx, 0xffffff00
add esi, ecx
movzx ecx, byte [esp + edx + 0x13c]
mov word [esp + ecx*2 + 0x5ec], si
add edx, 2
cmp edx, 0x2b
jb 0x462081
xor ecx, ecx
mov dword [esp + 0x1a0], 0x35083502
mov edi, eax
mov word [esp + 0x600], cx
mov dword [esp + 0x1a4], 0xe6243605
mov edx, eax
mov dword [esp + 0x1a8], 0xc0b1b9a9
mov dword [esp + 0x1ac], 0xab162a5a
mov dword [esp + 0x1b0], 0x80d0f38d
mov dword [esp + 0x1b4], 0x1e2f5349
mov dword [esp + 0x1b8], 0xb1c0cd7d
mov dword [esp + 0x1bc], 0x341e8737
mov dword [esp + 0x1c0], 0x340af116
mov dword [esp + 0x1c4], 0xd7bea602
mov dword [esp + 0x1c8], 0x3e03971a
mov word [esp + 0x1cc], 0x3d09
mov byte [esp + 0x1ce], bl
mov dword [esp + 0x1cf], 0x441063c
mov dword [esp + 0x1d3], 0x7430047
mov byte [esp + 0x1d7], 0x48
mov dword [esp + 0x494], edi
cmp edx, 6
jne 0x4621b0
push eax
push 0x376f
push ecx
lea edx, [esp + 0x4a0]
call fcn.0046546b
mov edi, dword [esp + 0x4a0]
add esp, 0xc
xor eax, eax
push 0x28
pop edx
jmp 0x4621e4
movzx ecx, byte [esp + edx + 0x1a1]
lea esi, [edi - 1]
sub ecx, edx
add esi, ecx
jns 0x4621d4
or ecx, 0xffffffff
sub ecx, esi
add esi, 0x100
and ecx, 0xffffff00
add esi, ecx
movzx ecx, byte [esp + edx + 0x1a0]
mov word [esp + ecx*2 + 0x604], si
add edx, 2
cmp edx, 0x38
jb 0x462187
xor ecx, ecx
mov word [esp + 0xa8], 0x3905
mov edx, eax
mov word [esp + 0x618], cx
mov edi, eax
mov byte [esp + 0xaa], bl
mov dword [esp + 0xab], 0x3350634
mov dword [esp + 0xaf], 0x73d023e
mov dword [esp + 0xb3], 0xcbe00f3c
mov dword [esp + 0xb7], 0x17c31293
mov dword [esp + 0xbb], 0x4615a413
mov dword [esp + 0xbf], 0xc0a9c59
mov dword [esp + 0xc3], 0x48093f00
mov dword [esp + 0xc7], 0x4a044a08
mov dword [esp + 0x488], edx
mov dword [esp + 0x14], edi
cmp edx, 0xc
jne 0x4622b1
push eax
push eax
push 0x280f
mov edx, 0x3d5a
lea ecx, [esp + 0x20]
call fcn.00461df2
add esp, 0xc
lea eax, [esp + 0x488]
mov edx, 0x4c9a
push ebx
push eax
push ecx
call fcn.0046546b
mov edx, dword [esp + 0x494]
add esp, 0xc
mov edi, dword [esp + 0x14]
xor eax, eax
jmp 0x4622e5
movzx ecx, byte [esp + edx + 0xa9]
lea esi, [edi - 1]
sub ecx, edx
add esi, ecx
jns 0x4622d5
or ecx, 0xffffffff
sub ecx, esi
add esi, 0x100
and ecx, 0xffffff00
add esi, ecx
movzx ecx, byte [esp + edx + 0xa8]
mov word [esp + ecx*2 + 0x5d4], si
add edx, 2
mov dword [esp + 0x488], edx
cmp edx, 0x23
jb 0x46226e
xor ecx, ecx
mov dword [esp + 0xcc], 0x37023408
mov word [esp + 0x5e8], cx
mov edx, eax
mov dword [esp + 0xd0], 0x3e033609
mov edi, eax
mov dword [esp + 0xd4], 0x3d004107
mov dword [esp + 0xd8], 0x47043e05
mov dword [esp + 0xdc], 0xb5104306
mov dword [esp + 0xe0], 0x6a8c2f1d
mov dword [esp + 0xe4], 0xb6d58bde
mov dword [esp + 0xe8], 0x1f9a91cb
mov word [esp + 0xec], 0x1ca1
mov byte [esp + 0xee], bl
mov byte [esp + 0xef], 0x44
cmp edx, 0x12
jne 0x462384
push 0x10
pop edi
push 0x20
pop edx
jmp 0x4623b8
movzx ecx, byte [esp + edx + 0xcd]
lea esi, [edi - 1]
sub ecx, edx
add esi, ecx
jns 0x4623a8
or ecx, 0xffffffff
sub ecx, esi
add esi, 0x100
and ecx, 0xffffff00
add esi, ecx
movzx ecx, byte [esp + edx + 0xcc]
mov word [esp + ecx*2 + 0x61c], si
add edx, 2
cmp edx, 0x24
jb 0x462377
mov dword [esp + 0x580], eax
xor ecx, ecx
xor eax, eax
mov word [esp + 0x630], cx
mov word [esp + 0x570], ax
lea ecx, [esp + 0x570]
lea eax, [esp + 0x5ec]
mov dword [esp + 0x584], 7
push eax
call fcn.004610ab
xor eax, eax
mov dword [esp + 0x59c], 7
mov word [esp + 0x588], ax
lea ecx, [esp + 0x588]
lea eax, [esp + 0x604]
xor esi, esi
push eax
mov dword [esp + 0x59c], esi
call fcn.004610ab
xor eax, eax
mov dword [esp + 0x5b4], 7
mov word [esp + 0x5a0], ax
lea ecx, [esp + 0x5a0]
lea eax, [esp + 0x5d4]
mov dword [esp + 0x5b0], esi
push eax
call fcn.004610ab
xor eax, eax
mov dword [esp + 0x5cc], 7
mov word [esp + 0x5b8], ax
lea ecx, [esp + 0x5b8]
lea eax, [esp + 0x61c]
mov dword [esp + 0x5c8], esi
push eax
call fcn.004610ab
push dword [esp + 0x10]
lea ecx, [esp + 0x5d4]
xor eax, eax
push ecx
lea ecx, [esp + 0x578]
mov dword [esp + 0x4d4], eax
push ecx
push eax
lea ecx, [esp + 0x4dc]
mov dword [esp + 0x4e0], eax
mov dword [esp + 0x4e4], eax
call fcn.00464e9c
push 0x18
lea edi, [esp + 0x5d4]
mov dword [esp + 0x18], 3
pop eax
sub edi, eax
push esi
push ebx
mov ecx, edi
call fcn.0042b4eb
dec dword [esp + 0x14]
push 0x18
pop eax
jns 0x4624d6
xor eax, eax
mov dword [esp + 0x84], 0x68086603
lea edi, [esp + 0x5ec]
mov byte [esp + 0x88], bl
stosd dword es:[edi], eax
mov dword [esp + 0x89], 0xb6b0674
mov dword [esp + 0x8d], 0x78fafe28
mov dword [esp + 0x91], 0x5a8391da
stosd dword es:[edi], eax
mov dword [esp + 0x95], 0x81090cfd
mov dword [esp + 0x99], 0x7d047900
mov dword [esp + 0x9d], 0x7205740a
stosd dword es:[edi], eax
mov dword [esp + 0xa1], 0x89024107
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
lea edi, [esp + 0x604]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
lea edi, [esp + 0x5d4]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
lea edi, [esp + 0x61c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
mov edx, eax
mov edi, eax
cmp edx, 8
jne 0x46259c
push 0xb
pop edi
push 0x11
pop edx
jmp 0x4625d0
movzx ecx, byte [esp + edx + 0x85]
lea esi, [edi - 1]
sub ecx, edx
add esi, ecx
jns 0x4625c0
or ecx, 0xffffffff
sub ecx, esi
add esi, 0x100
and ecx, 0xffffff00
add esi, ecx
movzx ecx, byte [esp + edx + 0x84]
mov word [esp + ecx*2 + 0x634], si
add edx, 2
cmp edx, 0x21
jb 0x46258f
xor ecx, ecx
mov dword [esp + 0x168], 0x68072f04
mov word [esp + 0x64a], cx
mov edx, eax
mov dword [esp + 0x16c], 0x7f067102
mov edi, eax
mov dword [esp + 0x170], 0xd5266e05
mov dword [esp + 0x174], 0x1ce8ba76
mov dword [esp + 0x178], 0xa403f636
mov dword [esp + 0x17c], 0x5de4a758
mov dword [esp + 0x180], 0x346d7456
mov dword [esp + 0x184], 0x451acdb9
mov dword [esp + 0x188], 0x4c86c481
mov dword [esp + 0x18c], 0x5d311fc7
mov dword [esp + 0x190], 0xd680aba1
mov dword [esp + 0x194], 0x9105d346
mov word [esp + 0x198], 0x6e00
mov byte [esp + 0x19a], bl
mov word [esp + 0x19b], 0x36e
mov byte [esp + 0x19d], 0x72
cmp edx, 0xa
jne 0x46269a
push 0x26
pop edi
push 0x2e
pop edx
jmp 0x4626ce
movzx ecx, byte [esp + edx + 0x169]
lea esi, [edi - 1]
sub ecx, edx
add esi, ecx
jns 0x4626be
or ecx, 0xffffffff
sub ecx, esi
add esi, 0x100
and ecx, 0xffffff00
add esi, ecx
movzx ecx, byte [esp + edx + 0x168]
mov word [esp + ecx*2 + 0x51c], si
add edx, 2
cmp edx, 0x36
jb 0x46268d
xor ecx, ecx
mov dword [esp + 0x114], 0x67027905
mov esi, eax
mov word [esp + 0x52c], cx
mov byte [esp + 0x118], bl
mov dword [esp + 0x119], 0x66c0472
mov dword [esp + 0x11d], 0x186e006e
mov dword [esp + 0x121], 0x22f56c87
mov dword [esp + 0x125], 0x97257eee
mov dword [esp + 0x129], 0xdf63c6be
mov dword [esp + 0x12d], 0x4b810228
mov dword [esp + 0x131], 0x8b37a6cb
mov dword [esp + 0x135], 0x32e7d27
mov byte [esp + 0x139], 0x3b
mov dword [esp + 0x4c0], esi
cmp ecx, 0xc
jne 0x46277e
lea eax, [esp + 0x4c0]
xor dl, dl
push eax
mov cl, bl
call fcn.00463ba1
mov esi, dword [esp + 0x4c4]
pop ecx
push 0x22
pop ecx
jmp 0x4627b1
movzx eax, byte [esp + ecx + 0x115]
lea edx, [esi - 1]
sub eax, ecx
add edx, eax
jns 0x4627a1
or eax, 0xffffffff
sub eax, edx
add edx, 0x100
and eax, 0xffffff00
add edx, eax
movzx eax, byte [esp + ecx + 0x114]
mov word [esp + eax*2 + 0x4f8], dx
add ecx, 2
cmp ecx, 0x26
jb 0x46275b
xor eax, eax
mov dword [esp + 0x48], 0x7b062f04
mov word [esp + 0x506], ax
mov edx, eax
mov word [esp + 0x4c], 0x7102
mov edi, eax
mov byte [esp + 0x4e], bl
mov dword [esp + 0x4f], 0x971006c
mov dword [esp + 0x53], 0x30ff9ec2
mov dword [esp + 0x57], 0x671de10c
mov dword [esp + 0x5b], 0x7d037007
mov word [esp + 0x5f], 0x7405
cmp edx, 0xa
jne 0x46280e
push 9
pop edi
push 0x11
pop edx
jmp 0x46283c
movzx ecx, byte [esp + edx + 0x49]
lea esi, [edi - 1]
sub ecx, edx
add esi, ecx
jns 0x46282f
or ecx, 0xffffffff
sub ecx, esi
add esi, 0x100
and ecx, 0xffffff00
add esi, ecx
movzx ecx, byte [esp + edx + 0x48]
mov word [esp + ecx*2 + 0x508], si
add edx, 2
cmp edx, 0x19
jb 0x462801
xor ecx, ecx
mov dword [esp + 0xf0], 0xf1147100
mov word [esp + 0x518], cx
mov esi, eax
mov dword [esp + 0xf4], 0xab4b957e
mov edi, eax
mov dword [esp + 0xf8], 0x3fa417b3
mov word [esp + 0xfc], 0x2f5b
mov byte [esp + 0xfe], 0x6b
mov byte [esp + 0xff], bl
mov dword [esp + 0x100], 0x800b670e
mov dword [esp + 0x104], 0x6a0363b1
mov word [esp + 0x108], 0x6a07
mov byte [esp + 0x10a], bl
mov dword [esp + 0x10b], 0x2370470
mov dword [esp + 0x10f], 0x6720579
mov byte [esp + 0x113], 0x87
cmp esi, 2
jne 0x4628dd
push 0x14
pop edi
push edi
pop esi
jmp 0x46292b
movzx eax, byte [esp + esi + 0xf1]
xor dl, dl
sub eax, esi
mov ecx, 0x5526
dec eax
push 0x392f
add eax, edi
push 0x4c2b
mov dword [esp + 0x4c0], eax
lea eax, [esp + 0x4c0]
push ebx
push eax
call fcn.0041303d
movzx ecx, byte [esp + esi + 0x100]
add esp, 0x10
mov ax, word [esp + 0x4b8]
mov word [esp + ecx*2 + 0x530], ax
add esi, 2
cmp esi, 0x24
jb 0x4628d1
xor eax, eax
mov dword [esp + 0x30], 0x31076704
mov word [esp + 0x540], ax
mov edi, eax
mov dword [esp + 0x34], 0x7b036e02
mov edx, eax
mov byte [esp + 0x38], bl
mov dword [esp + 0x39], 0x81f026a
mov dword [esp + 0x3d], 0x6840070
mov dword [esp + 0x41], 0x5890981
mov word [esp + 0x45], 0xa82
mov byte [esp + 0x47], 0x7a
cmp edx, 0xa
jne 0x462983
push 2
pop edi
jmp 0x4629b1
movzx ecx, byte [esp + edx + 0x31]
lea esi, [edi - 1]
sub ecx, edx
add esi, ecx
jns 0x4629a4
or ecx, 0xffffffff
sub ecx, esi
add esi, 0x100
and ecx, 0xffffff00
add esi, ecx
movzx ecx, byte [esp + edx + 0x30]
mov word [esp + ecx*2 + 0x688], si
add edx, 2
cmp edx, 0x18
jb 0x462979
xor ecx, ecx
mov dword [esp + 0x64], 0x7a007303
mov esi, eax
mov word [esp + 0x69e], cx
mov word [esp + 0x68], 0x6a04
mov edi, eax
mov byte [esp + 0x6a], bl
mov dword [esp + 0x6b], 0x4c590d6f
mov dword [esp + 0x6f], 0x2da351a0
mov byte [esp + 0x73], bl
mov dword [esp + 0x74], 0x819f335d
mov dword [esp + 0x78], 0x5810798
mov dword [esp + 0x7c], 0x6720239
mov word [esp + 0x80], 0x874
mov byte [esp + 0x82], 0x76
mov dword [esp + 0xc], esi
cmp esi, 8
jne 0x462a3c
push 0xd
pop edi
push 0x6edd
push ecx
lea eax, [esp + 0x14]
xor cl, cl
push eax
call fcn.00440e29
mov esi, dword [esp + 0x18]
jmp 0x462a6d
movzx eax, byte [esp + esi + 0x65]
mov edx, 0xbb8
sub eax, esi
push ecx
dec eax
push ebx
add eax, edi
push ecx
lea ecx, [esp + 0x24]
mov dword [esp + 0x24], eax
call fcn.00465440
movzx ecx, byte [esp + esi + 0x70]
mov ax, word [esp + 0x24]
mov word [esp + ecx*2 + 0x568], ax
add esi, 2
add esp, 0xc
mov dword [esp + 0xc], esi
cmp esi, 0x1f
jb 0x462a1c
xor eax, eax
lea ecx, [esp + 0x7d0]
mov word [esp + 0x56e], ax
lea eax, [esp + 0x634]
push eax
call fcn.00460f33
lea eax, [esp + 0x51c]
push eax
lea ecx, [esp + 0x7ec]
call fcn.00460f33
lea eax, [esp + 0x4f8]
push eax
lea ecx, [esp + 0x804]
call fcn.00460f33
lea eax, [esp + 0x508]
push eax
lea ecx, [esp + 0x81c]
call fcn.00460f33
lea eax, [esp + 0x530]
push eax
lea ecx, [esp + 0x834]
call fcn.00460f33
lea eax, [esp + 0x688]
push eax
lea ecx, [esp + 0x84c]
call fcn.00460f33
lea eax, [esp + 0x55c]
push eax
lea ecx, [esp + 0x864]
call fcn.00460f33
push dword [esp + 0x10]
lea ecx, [esp + 0x87c]
xor eax, eax
push ecx
lea ecx, [esp + 0x7d8]
mov dword [esp + 0x4b4], eax
push ecx
push eax
lea ecx, [esp + 0x4bc]
mov dword [esp + 0x4c0], eax
mov dword [esp + 0x4c4], eax
call fcn.00464e9c
push fcn.0042ae54
push 7
push 0x18
pop eax
mov edx, eax
lea ecx, [esp + 0x7d8]
call fcn.00411f8f
xor eax, eax
lea edi, [esp + 0x634]
push 6
pop ecx
rep stosd dword es:[edi], eax
lea edi, [esp + 0x51c]
stosd dword es:[edi], eax
push 6
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
lea edi, [esp + 0x4fc]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [esp + 0x50c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
lea edi, [esp + 0x534]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
mov dword [esp + 0x28], 0x66006502
pop ecx
lea edi, [esp + 0x688]
mov byte [esp + 0x28], bl
rep stosd dword es:[edi], eax
lea edi, [esp + 0x55c]
mov dword [esp + 0x29], 0x83ba0472
stosd dword es:[edi], eax
push 0x18
pop ecx
mov byte [esp + 0x2d], 0x7c
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [esp + 0x4b0]
sub eax, dword [esp + 0x4ac]
cdq
idiv ecx
mov dword [esp + 0x18], eax
xor eax, eax
mov esi, eax
mov edi, eax
cmp esi, 6
jne 0x462c06
push 4
pop edi
push 8
pop esi
jmp 0x462c44
movzx eax, byte [esp + esi + 0x25]
sub eax, esi
dec eax
add eax, edi
mov dword [esp + 0x498], eax
lea eax, [esp + 0x498]
push eax
push ecx
push 0x78db
mov cl, bl
call fcn.00440e29
movzx ecx, byte [esp + esi + 0x30]
add esp, 0xc
mov ax, word [esp + 0x498]
mov word [esp + ecx*2 + 0x4d8], ax
add esi, 2
cmp esi, 0xa
jb 0x462bf9
xor eax, eax
lea ecx, [esp + 0x544]
mov word [esp + 0x4de], ax
lea eax, [esp + 0x4d8]
push eax
call fcn.00460f33
xor eax, eax
mov word [esp + 0x1c], 0x3000
mov edi, eax
mov dword [esp + 0x4d8], eax
mov dword [esp + 0x4dc], eax
mov edx, eax
mov byte [esp + 0x1e], bl
mov byte [esp + 0x1f], bl
mov byte [esp + 0x20], 0x46
mov dword [esp + 0x4a4], edi
cmp edx, 2
jne 0x462cd0
push ebx
push 0x45cf
push 0x57c0
push eax
push 0x5792
mov edx, 0x3e7b
lea ecx, [esp + 0x4b8]
call fcn.00464bac
mov edi, dword [esp + 0x4b8]
add esp, 0x14
mov edx, ebx
xor eax, eax
jmp 0x462cfe
movzx ecx, byte [esp + edx + 0x1d]
lea esi, [edi - 1]
sub ecx, edx
add esi, ecx
jns 0x462cf1
or ecx, 0xffffffff
sub ecx, esi
add esi, 0x100
and ecx, 0xffffff00
add esi, ecx
movzx ecx, byte [esp + edx + 0x1c]
mov word [esp + ecx*2 + 0x48c], si
add edx, 2
cmp edx, 5
jb 0x462c99
xor eax, eax
lea ecx, [esp + 0x4e0]
mov word [esp + 0x490], ax
lea eax, [esp + 0x48c]
push eax
call fcn.00460f33
mov edi, dword [esp + 0x4cc]
xor eax, eax
mov dword [esp + 0x48c], eax
mov word [esp + 0x490], ax
mov dword [esp + 0xc], edi
cmp edi, dword [esp + 0x4d0]
je 0x463490
push 0x18
pop ecx
mov dword [esp + 0x220], 0x7202661c
mov esi, eax
mov dword [esp + 0x224], 0x7903610f
mov edi, eax
mov dword [esp + 0x228], 0x70077205
mov dword [esp + 0x22c], 0x7c1d8619
mov dword [esp + 0x230], 0x330c7f12
mov byte [esp + 0x234], cl
mov dword [esp + 0x235], 0x17462188
mov dword [esp + 0x239], 0xa550e75
mov dword [esp + 0x23d], 0x1e92164c
mov dword [esp + 0x241], 0x6860d54
mov dword [esp + 0x245], 0x229a0891
mov dword [esp + 0x249], 0x149b0b96
mov dword [esp + 0x24d], 0x204f239c
mov dword [esp + 0x251], 0x1a971351
mov word [esp + 0x255], 0x1fa8
mov byte [esp + 0x257], 0x69
mov byte [esp + 0x258], bl
mov dword [esp + 0x259], 0xeaf5039f
mov dword [esp + 0x25d], 0xb410a104
mov dword [esp + 0x261], 0xb8155f09
mov word [esp + 0x265], 0xb71b
mov byte [esp + 0x267], al
mov word [esp + 0x268], 0x1165
mov byte [esp + 0x26a], 0xb0
cmp esi, 0x3a
jne 0x462e54
push 3
pop edi
push 0x3b
pop esi
jmp 0x462ea3
movzx eax, byte [esp + esi + 0x221]
xor dl, dl
sub eax, esi
mov ecx, 0x40c0
dec eax
push ebx
add eax, edi
push 0x5643
mov dword [esp + 0x4d0], eax
lea eax, [esp + 0x4d0]
push 0x7e2f
push eax
push ebx
call fcn.00464c35
movzx ecx, byte [esp + esi + 0x234]
add esp, 0x14
mov ax, word [esp + 0x4c8]
mov word [esp + ecx*2 + 0x8c8], ax
add esi, 2
cmp esi, 0x4b
jb 0x462e47
xor eax, eax
mov dword [esp + 0x388], 0x796c6402
push 0x18
pop ecx
mov word [esp + 0x910], ax
mov edx, eax
mov dword [esp + 0x38c], 0x121e2715
mov dword [esp + 0x390], 0xf39e0066
mov dword [esp + 0x394], 0x5cf8151d
mov dword [esp + 0x398], 0xcef6d7bf
mov dword [esp + 0x39c], 0x662c7159
mov dword [esp + 0x3a0], 0x60c98227
mov dword [esp + 0x3a4], 0xdbb4c306
mov dword [esp + 0x3a8], 0xdbdae928
mov dword [esp + 0x3ac], 0x29136323
mov dword [esp + 0x3b0], 0x7b433a09
mov dword [esp + 0x3b4], 0x601c2f3e
mov dword [esp + 0x3b8], 0x356a5822
mov dword [esp + 0x3bc], 0x75475d1d
mov dword [esp + 0x3c0], 0x85498726
mov dword [esp + 0x3c4], 0x75488344
mov dword [esp + 0x3c8], 0x77219761
mov dword [esp + 0x3cc], 0x9c3d994a
mov dword [esp + 0x3d0], 0x935a7e1b
mov dword [esp + 0x3d4], 0x88379010
mov dword [esp + 0x3d8], 0x7958a755
mov dword [esp + 0x3dc], 0xa83b7f16
mov dword [esp + 0x3e0], 0x7e205b08
mov dword [esp + 0x3e4], 0x8c17820a
mov dword [esp + 0x3e8], 0x656dac29
mov dword [esp + 0x3ec], 0xb227bb4d
mov dword [esp + 0x3f0], 0x91576d04
mov byte [esp + 0x3f4], bl
mov dword [esp + 0x3f5], 0x5eb7697e
mov dword [esp + 0x3f9], 0x307567c7
mov dword [esp + 0x3fd], 0x19c739c9
mov dword [esp + 0x401], 0x63c259a8
mov dword [esp + 0x405], 0x50b81fce
mov dword [esp + 0x409], 0x36cb41b7
mov dword [esp + 0x40d], 0x68d262c3
mov dword [esp + 0x411], 0x2ec92c9a
mov dword [esp + 0x415], 0xcd14d8
mov dword [esp + 0x419], 0x28e15d93
mov dword [esp + 0x41d], 0x2ae00eda
mov dword [esp + 0x421], 0x3ae334e0
mov dword [esp + 0x425], 0x45ee06e3
mov dword [esp + 0x429], 0x52ea40e8
mov dword [esp + 0x42d], 0x66f764f9
mov dword [esp + 0x431], 0x4cf20dad
mov byte [esp + 0x435], 0xf0
mov byte [esp + 0x436], cl
mov dword [esp + 0x437], 0x4f064edd
mov dword [esp + 0x43b], 0x54fb07f1
mov dword [esp + 0x43f], 0x2f0438fa
mov dword [esp + 0x443], 0x2d045300
mov dword [esp + 0x447], 0x510605ee
mov dword [esp + 0x44b], 0x35c70b0d
mov dword [esp + 0x44f], 0x1e1a311d
mov byte [esp + 0x453], bl
mov dword [esp + 0x454], 0x2346f856
mov dword [esp + 0x458], 0x2832e26b
mov dword [esp + 0x45c], 0x303cf85f
mov dword [esp + 0x460], 0x191adb03
mov dword [esp + 0x464], 0x30252312
mov dword [esp + 0x468], 0x93fe30f
mov dword [esp + 0x46c], 0x2e4b2365
mov dword [esp + 0x470], 0x30602c5b
mov dword [esp + 0x474], 0x3511445c
mov dword [esp + 0x478], 0x482b450c
mov dword [esp + 0x47c], 0x48333c42
mov word [esp + 0x480], 0x2b24
mov dword [esp + 0x10], eax
cmp edx, 6
jne 0x463191
push 0x1e
pop eax
push 0x22
pop edx
jmp 0x4631c5
movzx ecx, byte [esp + edx + 0x389]
lea esi, [eax - 1]
sub ecx, edx
add esi, ecx
jns 0x4631b5
or ecx, 0xffffffff
sub ecx, esi
add esi, 0x100
and ecx, 0xffffff00
add esi, ecx
movzx ecx, byte [esp + edx + 0x388]
mov word [esp + ecx*2 + 0x9b8], si
add edx, 2
cmp edx, 0xfa
jb 0x463184
xor eax, eax
mov dword [esp + 0x1d8], 0x23106007
mov edi, eax
mov word [esp + 0xa94], ax
mov dword [esp + 0x1dc], 0x7b025808
mov esi, eax
mov dword [esp + 0x1e0], 0x3a0b6d0c
mov dword [esp + 0x1e4], 0x61042d0d
mov dword [esp + 0x1e8], 0x8298481f
mov dword [esp + 0x1ec], 0x4fea5722
mov dword [esp + 0x1f0], 0x4f62f2b5
mov dword [esp + 0x1f4], 0x224feec1
mov dword [esp + 0x1f8], 0x2514b3
mov dword [esp + 0x1fc], 0xab7e7835
mov dword [esp + 0x200], 0xa2600652
mov word [esp + 0x204], 0x5edb
mov byte [esp + 0x206], 0xbe
mov byte [esp + 0x207], bl
mov dword [esp + 0x208], 0x9580540
mov dword [esp + 0x20c], 0xf370a6f
mov dword [esp + 0x210], 0xe41113b
mov dword [esp + 0x214], 0x3f0353
mov word [esp + 0x218], 0x641
mov byte [esp + 0x21a], 0x6a
mov dword [esp + 0x4c4], edi
cmp esi, 0x10
jne 0x4632e7
push eax
push 0x6090
lea eax, [esp + 0x4cc]
mov edx, 0x692a
push ebx
push eax
mov ecx, 0x32a8
call fcn.00441a29
mov edi, dword [esp + 0x4d4]
add esp, 0x10
push 0x2d
pop esi
jmp 0x463357
movzx ecx, byte [esp + esi + 0x1d9]
lea edx, [esp + 0x4a0]
push 0x1a96
push 0x2009
push 0x1027
push eax
push 0x3e96
push 0x1fb1
push ebx
push 0x159f
sub ecx, esi
push 0xa7c
dec ecx
add ecx, edi
push 0x3810
mov dword [esp + 0x4c8], ecx
mov ecx, 0x58a7
push ebx
push 0x2364
call fcn.00463a96
movzx ecx, byte [esp + esi + 0x208]
add esp, 0x30
mov ax, word [esp + 0x4a0]
mov word [esp + ecx*2 + 0x7a8], ax
add esi, 2
push 0
pop eax
cmp esi, 0x43
jb 0x4632b5
mov word [esp + 0x7cc], ax
call fcn.00467027
xor edx, edx
lea ecx, [esp + 0x6e8]
div dword [esp + 0x18]
lea eax, [esp + 0x7a8]
push eax
mov esi, edx
call fcn.00460f33
mov edi, dword [esp + 0xc]
lea ecx, [esp + 0x730]
push eax
push edi
lea eax, [esp + 0x9c0]
push eax
call fcn.00460f33
push eax
imul eax, esi, 0x18
lea ecx, [esp + 0x754]
add eax, dword [esp + 0x4b8]
push eax
lea eax, [esp + 0x8d8]
push eax
call fcn.00460f33
mov edx, eax
lea ecx, [esp + 0x6e0]
call fcn.00464d4b
pop ecx
mov edx, eax
lea ecx, [esp + 0x6ac]
call fcn.00464d7a
pop ecx
mov edx, eax
lea ecx, [esp + 0x780]
call fcn.00464d4b
pop ecx
mov edx, eax
lea ecx, [esp + 0x794]
call fcn.00464d7a
push ecx
push eax
lea ecx, [esp + 0x4ec]
call fcn.00464cc2
xor esi, esi
lea ecx, [esp + 0x790]
push esi
push ebx
call fcn.0042b4eb
push esi
push ebx
lea ecx, [esp + 0x780]
call fcn.0042b4eb
push esi
push ebx
lea ecx, [esp + 0x6a8]
call fcn.0042b4eb
push esi
push ebx
lea ecx, [esp + 0x6d8]
call fcn.0042b4eb
push esi
push ebx
lea ecx, [esp + 0x750]
call fcn.0042b4eb
push esi
push ebx
lea ecx, [esp + 0x738]
call fcn.0042b4eb
push esi
push ebx
lea ecx, [esp + 0x6f0]
call fcn.0042b4eb
push 0x18
pop eax
add edi, eax
push esi
mov dword [esp + 0x10], edi
pop eax
cmp edi, dword [esp + 0x4d0]
jne 0x462d4d
xor eax, eax
push 0x18
pop ecx
mov edi, eax
mov byte [esp + 0x270], cl
mov dword [esp + 0x271], 0x13771b74
mov esi, eax
mov dword [esp + 0x275], 0xc7e1069
mov dword [esp + 0x279], 0xd701c29
mov dword [esp + 0x27d], 0x7411f70
mov byte [esp + 0x281], 0x76
mov byte [esp + 0x282], bl
mov dword [esp + 0x283], 0xf850b79
mov dword [esp + 0x287], 0x23821173
mov dword [esp + 0x28b], 0x123d093b
mov dword [esp + 0x28f], 0x694088d
mov dword [esp + 0x293], 0x1745208f
mov dword [esp + 0x297], 0xaa21983
mov dword [esp + 0x29b], 0x1a9c025a
mov dword [esp + 0x29f], 0x199e1da2
mov dword [esp + 0x2a3], 0x63b020dd
mov dword [esp + 0x2a7], 0x4fc1e5d1
mov dword [esp + 0x2ab], 0xcbca12f2
mov dword [esp + 0x2af], 0x657d1f8
mov dword [esp + 0x2b3], 0xecb265e8
mov dword [esp + 0x2b7], 0xf0fdc888
mov dword [esp + 0x2bb], 0xa4145300
mov dword [esp + 0x2bf], 0x6c1ea422
mov dword [esp + 0x2c3], 0xa605ae16
mov dword [esp + 0x2c7], 0xa7046e21
mov dword [esp + 0x2cb], 0xbc157d0e
mov word [esp + 0x2cf], 0xb903
mov dword [esp + 0x49c], edi
cmp esi, 0x32
jne 0x4635e4
push 0x42d9
push ecx
lea eax, [esp + 0x4a4]
xor dl, dl
push eax
call fcn.00461671
mov edi, dword [esp + 0x4a8]
add esp, 0xc
push 0x49
pop esi
jmp 0x463628
movzx eax, byte [esp + esi + 0x271]
mov dl, bl
sub eax, esi
dec eax
add eax, edi
mov dword [esp + 0x4bc], eax
lea eax, [esp + 0x4bc]
push eax
push ecx
push 0x6028
call fcn.00461671
movzx ecx, byte [esp + esi + 0x27c]
add esp, 0xc
mov ax, word [esp + 0x4bc]
mov word [esp + ecx*2 + 0x878], ax
add esi, 2
cmp esi, 0x61
jb 0x4635bb
xor eax, eax
mov dword [esp + 0x2d8], 0x71384933
mov word [esp + 0x8c0], ax
push 0x18
pop eax
mov byte [esp + 0x2e6], al
xor eax, eax
mov edi, eax
mov dword [esp + 0x2dc], 0x6c0f3409
mov dword [esp + 0x2e0], 0x73126e31
mov esi, eax
mov byte [esp + 0x2e4], bl
mov byte [esp + 0x2e5], 0x3c
mov dword [esp + 0x2e7], 0x1c813b82
mov dword [esp + 0x2eb], 0x41811587
mov dword [esp + 0x2ef], 0x2c3b4d7c
mov dword [esp + 0x2f3], 0x3e824c92
mov dword [esp + 0x2f7], 0x10942383
mov dword [esp + 0x2fb], 0x3d940d95
mov dword [esp + 0x2ff], 0x2f490b97
mov dword [esp + 0x303], 0x4a4d46a4
mov dword [esp + 0x307], 0x39421a1
mov dword [esp + 0x30b], 0x43980553
mov dword [esp + 0x30f], 0x8a6069c
mov dword [esp + 0x313], 0x4ba2455b
mov dword [esp + 0x317], 0x1fb10ca2
mov dword [esp + 0x31b], 0x1bb92eb5
mov dword [esp + 0x31f], 0x47b234b9
mov dword [esp + 0x323], 0x366d397a
mov dword [esp + 0x327], 0x2bb21ab3
mov dword [esp + 0x32b], 0x3f7516c2
mov dword [esp + 0x32f], 0x24cd40b8
mov dword [esp + 0x333], 0x13c12ace
mov dword [esp + 0x337], 0x1ecf29c4
mov dword [esp + 0x33b], 0x22dd44d3
mov dword [esp + 0x33f], 0x3af512cc
mov dword [esp + 0x343], 0x1688441f
mov dword [esp + 0x347], 0x408f420b
mov dword [esp + 0x34b], 0xd2f1db12
mov dword [esp + 0x34f], 0x3500a475
mov dword [esp + 0x353], 0x11cf07cd
mov dword [esp + 0x357], 0x19d828e0
mov dword [esp + 0x35b], 0xaea0ee5
mov dword [esp + 0x35f], 0x48e649b8
mov dword [esp + 0x363], 0x1d9b25df
mov dword [esp + 0x367], 0x4eb14aa
mov dword [esp + 0x36b], 0x27f83ca3
mov dword [esp + 0x36f], 0x32f330dc
mov dword [esp + 0x373], 0x42ab00a9
mov dword [esp + 0x377], 0x2f437bb
mov dword [esp + 0x37b], 0x170220f4
mov dword [esp + 0x37f], 0x3aea2db5
mov word [esp + 0x383], 0x2600
mov byte [esp + 0x385], 0xc8
mov dword [esp + 0x4a8], edi
cmp esi, 0x68
jne 0x463896
push 0x4725
lea ecx, [esp + 0x4ac]
mov edx, 0x5819
push ecx
push 0xcb7
push ebx
push 0x10bc
push 0x3b88
push eax
push 0x49ab
push 0x2afb
push 0x463c
push ebx
push 0x1432
mov ecx, 0x2a9e
call fcn.00463a96
mov edi, dword [esp + 0x4d8]
add esp, 0x30
push 0x78
pop esi
jmp 0x4638d0
movzx ecx, byte [esp + esi + 0x2d9]
lea edx, [esp + 0x10]
sub ecx, esi
dec ecx
add ecx, edi
push ecx
push eax
mov dword [esp + 0x18], ecx
push ecx
mov ecx, 0x2c51
call fcn.00465440
movzx ecx, byte [esp + esi + 0x2e4]
add esp, 0xc
mov ax, word [esp + 0x10]
mov word [esp + ecx*2 + 0x918], ax
add esi, 2
push 0
pop eax
cmp esi, 0xae
jb 0x463840
mov word [esp + 0x9b4], ax
call fcn.00467027
xor edx, edx
lea ecx, [esp + 0x700]
div dword [esp + 0x18]
lea eax, [esp + 0x918]
push eax
mov esi, edx
call fcn.00460f33
push eax
imul eax, esi, 0x18
lea ecx, [esp + 0x6bc]
add eax, dword [esp + 0x4b0]
push eax
lea eax, [esp + 0x880]
push eax
call fcn.00460f33
mov edx, eax
lea ecx, [esp + 0x720]
call fcn.00464d4b
pop ecx
mov edx, eax
lea ecx, [esp + 0x764]
call fcn.00464d7a
push ecx
push eax
lea ecx, [esp + 0x4ec]
call fcn.00464cc2
xor esi, esi
lea ecx, [esp + 0x760]
push esi
push ebx
call fcn.0042b4eb
push esi
push ebx
lea ecx, [esp + 0x720]
call fcn.0042b4eb
push esi
push ebx
lea ecx, [esp + 0x6c0]
call fcn.0042b4eb
push esi
push ebx
lea ecx, [esp + 0x708]
call fcn.0042b4eb
xor eax, eax
mov dword [esp + 0x64c], 0x3c
push 0x12
pop ecx
lea edi, [esp + 0x878]
rep stosd dword es:[edi], eax
push 0x27
pop ecx
stosw word es:[edi], ax
xor eax, eax
lea edi, [esp + 0x918]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x544]
stosw word es:[edi], ax
xor eax, eax
cmp dword [esp + 0x558], 8
mov dword [esp + 0x650], eax
cmovae ecx, dword [esp + 0x544]
cmp dword [esp + 0x4f4], 8
mov dword [esp + 0x65c], ecx
lea ecx, [esp + 0x4e0]
cmovae ecx, dword [esp + 0x4e0]
mov dword [esp + 0x654], eax
mov dword [esp + 0x658], eax
mov dword [esp + 0x664], eax
mov dword [esp + 0x668], eax
mov dword [esp + 0x66c], eax
lea eax, [esp + 0x64c]
push eax
mov dword [esp + 0x664], ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
push esi
push ebx
lea ecx, [esp + 0x4e8]
call fcn.0042b4eb
push esi
push ebx
lea ecx, [esp + 0x54c]
call fcn.0042b4eb
lea ecx, [esp + 0x4ac]
call fcn.00464c8a
lea ecx, [esp + 0x4cc]
call fcn.00464c8a
jmp 0x463a6d
mov eax, dword [ebp + 8]
add dword [eax], 0x1d
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret