Function at 0x488399
Capabilities:
Encode data using xor

Disassembly:
push 0x9a4
mov eax, 0x4dad1b
call fcn.004ae269
mov esi, ecx
mov dword [ebp - 0x8e4], esi
xor edi, edi
mov dword [ebp - 4], edi
call fcn.0048aa29
push eax
lea ecx, [ebp - 0x8d0]
call fcn.00402840
mov byte [ebp - 4], 1
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push eax
push ecx
lea eax, [ebp - 0x8d0]
push str.before_VerifyArmadilloKey__d___d
push eax
call fcn.00402a45
add esp, 0xc
lea eax, [ebp + 8]
mov dword [ebp - 0x8dc], esp
mov ecx, esp
push eax
call fcn.004025a1
mov ecx, esi
call fcn.0048626e
test al, al
je 0x4895b7
mov eax, dword [esi + 4]
mov esi, dword [esi]
push eax
push esi
lea eax, [ebp - 0x8d0]
push str.After_VerifyArmadilloKey__d___d
push eax
call fcn.00402a45
add esp, 0x10
cmp byte [ebp + 0xc], 0
je 0x4895b2
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x8c0]
mov dword [ebp - 0x8dc], eax
mov dword [ebp - 0x898], edi
mov dword [ebp - 0x8a0], edi
mov dword [ebp - 0x8c8], edi
call fcn.0040255d
lea eax, [ebp - 0x8c0]
push eax
lea ecx, [ebp - 0x890]
mov byte [ebp - 4], 2
call fcn.004025a1
mov byte [ebp - 4], 3
mov ebx, dword [ebp - 0x890]
mov eax, dword [ebx - 0xc]
cmp eax, 0x17
je 0x488498
add ebx, 0xfffffff0
mov ecx, ebx
call fcn.00402883
mov ecx, dword [ebp - 0x8c0]
add ecx, 0xfffffff0
call fcn.00402883
xor edi, edi
jmp 0x48958f
call fcn.0048aa29
push eax
lea ecx, [ebp - 0x8a8]
call fcn.00402840
mov byte [ebp - 4], 4
call fcn.0048aa29
push eax
lea ecx, [ebp - 0x8a4]
call fcn.00402840
mov byte [ebp - 4], 5
call fcn.0048aa29
push eax
lea ecx, [ebp - 0x894]
call fcn.00402840
mov byte [ebp - 4], 6
call fcn.0048aa29
push eax
lea ecx, [ebp - 0x89c]
call fcn.00402840
mov edi, 0x530b8c
push edi
xor ecx, ecx
lea esi, [ebp - 0x890]
mov byte [ebp - 4], 7
call fcn.004077b1
mov esi, eax
cmp esi, 0xffffffff
je 0x488ba4
push esi
push 0
lea eax, [ebp - 0x914]
push eax
lea ecx, [ebp - 0x890]
call fcn.0040782b
push eax
lea ecx, [ebp - 0x8a8]
mov byte [ebp - 4], 8
call fcn.0040262c
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x914]
add ecx, 0xfffffff0
call fcn.00402883
push dword [ebx - 0xc]
inc esi
push esi
lea eax, [ebp - 0x908]
push eax
lea ecx, [ebp - 0x890]
call fcn.0040782b
push eax
lea ecx, [ebp - 0x890]
mov byte [ebp - 4], 9
call fcn.0040262c
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x908]
add ecx, 0xfffffff0
call fcn.00402883
push edi
xor ecx, ecx
lea esi, [ebp - 0x890]
call fcn.004077b1
mov esi, eax
cmp esi, 0xffffffff
je 0x488889
push esi
push 0
lea eax, [ebp - 0x900]
push eax
lea ecx, [ebp - 0x890]
call fcn.0040782b
push eax
lea ecx, [ebp - 0x8a4]
mov byte [ebp - 4], 0xa
call fcn.0040262c
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x900]
add ecx, 0xfffffff0
call fcn.00402883
mov eax, dword [ebp - 0x890]
push dword [eax - 0xc]
inc esi
push esi
lea eax, [ebp - 0x904]
push eax
lea ecx, [ebp - 0x890]
call fcn.0040782b
push eax
lea ecx, [ebp - 0x890]
mov byte [ebp - 4], 0xb
call fcn.0040262c
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x904]
add ecx, 0xfffffff0
call fcn.00402883
push edi
xor ecx, ecx
lea esi, [ebp - 0x890]
call fcn.004077b1
mov esi, eax
cmp esi, 0xffffffff
je 0x488889
push esi
push 0
lea eax, [ebp - 0x910]
push eax
lea ecx, [ebp - 0x890]
call fcn.0040782b
push eax
lea ecx, [ebp - 0x894]
mov byte [ebp - 4], 0xc
call fcn.0040262c
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x910]
add ecx, 0xfffffff0
call fcn.00402883
mov eax, dword [ebp - 0x890]
push dword [eax - 0xc]
inc esi
push esi
lea eax, [ebp - 0x90c]
push eax
lea ecx, [ebp - 0x890]
call fcn.0040782b
push eax
lea ecx, [ebp - 0x89c]
mov byte [ebp - 4], 0xd
call fcn.0040262c
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x90c]
add ecx, 0xfffffff0
call fcn.00402883
push 6
pop edi
push 2
xor ecx, ecx
pop esi
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048964c
mov ebx, eax
mov eax, dword [ebp - 0x8a8]
pop ecx
mov ecx, ebx
mov dword [ebp - 0x8d8], ebx
sub ecx, eax
movzx edx, word [eax]
mov word [ecx + eax], dx
add eax, esi
test dx, dx
jne 0x4886c6
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048964c
mov edx, eax
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x8d4], edx
pop ecx
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, esi
test cx, cx
jne 0x4886fa
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048964c
mov edx, eax
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0x8b8], edx
pop ecx
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, esi
test cx, cx
jne 0x48872e
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048964c
mov edx, eax
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x8b4], edx
pop ecx
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, esi
test cx, cx
jne 0x488762
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048964c
mov edi, dword [ebp - 0x8d4]
pop ecx
mov ecx, eax
mov edx, ebx
sub edi, ebx
mov dword [ebp - 0x8cc], ecx
sub edx, ecx
mov dword [ebp - 0x8ac], 5
or dword [ebp - 0x898], 0xffffffff
or dword [ebp - 0x8a0], 0xffffffff
lea eax, [edx + ecx]
mov bl, byte [eax + edi]
mov al, byte [eax]
mov byte [ebp - 0x8c1], al
mov byte [ebp - 0x8b9], bl
xor eax, eax
mov bl, byte [ebp - 0x8b9]
cmp byte [eax + str.9PHVYB7EM6TW5SFZ8KUA3CNX4G2DRJ], bl
jne 0x4887dc
mov dword [ebp - 0x898], eax
mov bl, byte [ebp - 0x8c1]
cmp byte [eax + str.23456789ABCDEFGHJKMNPRSTUVWXYZ], bl
jne 0x4887f0
mov dword [ebp - 0x8a0], eax
inc eax
cmp eax, 0x1e
jl 0x4887c8
mov eax, dword [ebp - 0x898]
sub eax, dword [ebp - 0x8a0]
jns 0x488807
add eax, 0x1e
movsx ax, byte [eax + str.23456789ABCDEFGHJKMNPRSTUVWXYZ]
mov word [ecx], ax
add ecx, esi
dec dword [ebp - 0x8ac]
jne 0x4887a4
mov edi, dword [ebp - 0x8cc]
xor eax, eax
push edi
mov ecx, 0x566aa8
mov word [edi + 0xa], ax
call fcn.004118b1
test eax, eax
je 0x4888cf
mov eax, 0x539dbc
mov edx, edi
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, esi
test cx, cx
jne 0x488844
push dword [ebp - 0x8d8]
call fcn.00489657
pop ecx
push dword [ebp - 0x8d4]
call fcn.00489657
pop ecx
push edi
call fcn.00489657
pop ecx
push dword [ebp - 0x8b8]
call fcn.00489657
pop ecx
push dword [ebp - 0x8b4]
call fcn.00489657
pop ecx
mov ecx, dword [ebp - 0x89c]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x894]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x8a4]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x890]
add ecx, 0xfffffff0
jmp 0x48847e
mov ebx, dword [ebp - 0x8b8]
mov al, byte [ebx]
xor ecx, ecx
cmp byte [ecx + str.VE9WMBCX8SP3DJT7A5GZUNHF2R6KY4], al
je 0x4888e7
inc ecx
cmp ecx, 0xb
jl 0x4888d9
mov al, byte [ebx + 2]
push 0xb
pop ecx
cmp byte [ecx + str.VE9WMBCX8SP3DJT7A5GZUNHF2R6KY4], al
je 0x4888fb
inc ecx
cmp ecx, 0x17
jl 0x4888ed
mov al, byte [ebx + 4]
or edi, 0xffffffff
mov dword [ebp - 0x8c8], edi
mov dword [ebp - 0x8ac], edi
xor esi, esi
mov cl, byte [esi + str.VE9WMBCX8SP3DJT7A5GZUNHF2R6KY4]
cmp cl, al
jne 0x48891f
mov dword [ebp - 0x8c8], esi
cmp cl, byte [ebx + 6]
jne 0x488926
mov edi, esi
cmp cl, byte [ebx + 8]
jne 0x488931
mov dword [ebp - 0x8ac], esi
cmp dword [ebp - 0x8c8], 0
jl 0x488947
test edi, edi
jl 0x488947
cmp dword [ebp - 0x8ac], 0
jge 0x48894d
inc esi
cmp esi, 0x1e
jl 0x48890f
mov eax, dword [ebp - 0x8c8]
cdq
sub eax, edx
mov ecx, eax
mov eax, edi
cdq
sar ecx, 1
add ecx, 0xe
sub eax, edx
sar eax, 1
mov dword [ebp - 0x898], ecx
mov dword [ebp - 0x8a0], eax
jne 0x48897c
mov dword [ebp - 0x8a0], 0xc
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x8c8], 0x1e
test eax, eax
je 0x488996
mov dword [ebp - 0x8c8], eax
cmp ecx, 0x64
jae 0x4889a7
add ecx, 0x7d0
mov dword [ebp - 0x898], ecx
call fcn.0048aa29
push eax
lea ecx, [ebp - 0x8b0]
call fcn.00402840
mov byte [ebp - 4], 0xe
xor edi, edi
mov eax, dword [ebp - 0x8b4]
mov al, byte [eax + edi*2]
xor esi, esi
cmp byte [esi + str.9PHVYB7EM6TW5SFZ8KUA3CNX4G2DRJ], al
je 0x4889d7
inc esi
cmp esi, 0xa
jl 0x4889c9
call fcn.0048aa29
push eax
lea ecx, [ebp - 0x8ac]
call fcn.00402840
push esi
lea eax, [ebp - 0x8ac]
push 0x52303c
push eax
mov byte [ebp - 4], 0xf
call fcn.00402a45
mov esi, dword [ebp - 0x8ac]
add esp, 0xc
push dword [esi - 0xc]
lea ecx, [ebp - 0x8b0]
push esi
call fcn.00411e56
add esi, 0xfffffff0
mov ecx, esi
mov byte [ebp - 4], 0xe
call fcn.00402883
inc edi
cmp edi, 5
jl 0x4889be
mov esi, dword [ebp - 0x8b0]
push esi
call fcn.004ab21f
pop ecx
push 8
mov dword [ebp - 0x8e0], eax
pop ecx
xor eax, eax
mov word [ebp - 0x58], ax
push ebx
push dword [ebp - 0x8cc]
lea edi, [ebp - 0x56]
push dword [ebp - 0x8d8]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x58]
push str._s__s__s
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
push 0x12
call fcn.0048964c
mov edi, eax
pop ecx
lea eax, [ebp - 0x9ac]
mov dword [ebp - 0x9b0], eax
push 3
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x9b0]
push eax
call fcn.0040727b
mov ebx, dword [ebp - 0x9b0]
mov ecx, edi
mov eax, ebx
sub ecx, ebx
mov dl, byte [eax]
mov byte [ecx + eax], dl
inc eax
test dl, dl
jne 0x488aa0
lea eax, [ebp - 0x9ac]
cmp ebx, eax
je 0x488abb
push ebx
call fcn.004aa7c7
pop ecx
mov dword [ebp - 0x8ac], 0x11
mov eax, edi
xor ebx, ebx
movzx edx, byte [eax]
mov ecx, ebx
shr ecx, 8
shl ebx, 8
xor ecx, edx
xor ebx, dword [ecx*4 + 0x55e8a0]
and ebx, 0xffff
inc eax
dec dword [ebp - 0x8ac]
cmp dword [ebp - 0x8ac], 0
jg 0x488ac9
push edi
call fcn.00489657
movzx eax, bx
cmp dword [ebp - 0x8e0], eax
pop ecx
push dword [ebp - 0x8d8]
sete bl
call fcn.00489657
pop ecx
push dword [ebp - 0x8d4]
call fcn.00489657
pop ecx
push dword [ebp - 0x8cc]
call fcn.00489657
pop ecx
push dword [ebp - 0x8b8]
call fcn.00489657
pop ecx
push dword [ebp - 0x8b4]
call fcn.00489657
pop ecx
lea ecx, [esi - 0x10]
call fcn.00402883
mov ecx, dword [ebp - 0x89c]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x894]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x8a4]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x890]
add ecx, 0xfffffff0
call fcn.00402883
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x8c0]
add ecx, 0xfffffff0
call fcn.00402883
jmp 0x488bf8
mov ecx, dword [ebp - 0x89c]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x894]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x8a4]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.00402883
lea ecx, [ebx - 0x10]
call fcn.00402883
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x8c0]
add ecx, 0xfffffff0
call fcn.00402883
xor bl, bl
test bl, bl
je 0x488491
lea eax, [ebp - 0x920]
call fcn.004424d9
xor eax, eax
push eax
push eax
push eax
push dword [ebp - 0x8c8]
lea ecx, [ebp - 0x92c]
push dword [ebp - 0x8a0]
push dword [ebp - 0x898]
call fcn.004425fe
lea eax, [ebp - 0x920]
push eax
lea ecx, [ebp - 0x92c]
call fcn.00450cfe
test al, al
je 0x488c73
lea eax, [ebp - 0x920]
push eax
lea esi, [ebp - 0x8f0]
lea eax, [ebp - 0x92c]
call fcn.00450ca4
mov ecx, esi
call fcn.00450c74
fcomp qword [0x53a658]
fnstsw ax
test ah, 0x41
je 0x488491
push dword [ebp - 0x8dc]
lea ecx, [ebp - 0x8a4]
call fcn.0040255d
lea ebx, [ebp - 0x8a4]
mov byte [ebp - 4], 0x10
call fcn.0040c507
mov ebx, eax
call fcn.0040c554
lea edi, [ebp - 0x8a4]
call fcn.004077e2
mov eax, edi
push eax
lea ecx, [ebp - 0x8a8]
call fcn.004025a1
lea ebx, [ebp - 0x8a8]
mov byte [ebp - 4], 0x11
call fcn.0040c507
mov ebx, eax
call fcn.0040c554
lea edi, [ebp - 0x8a8]
call fcn.004077e2
mov esi, dword [ebp - 0x8e4]
add esi, 8
mov eax, dword [esi]
mov eax, dword [eax - 0xc]
mov ebx, 0xff
test eax, eax
je 0x488d10
push dword [ebp - 0x8a8]
xor ecx, ecx
call fcn.004077b1
cmp eax, 0xffffffff
je 0x488d10
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.00402883
jmp 0x489142
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.00402883
push esi
lea eax, [ebp - 0x8a4]
push eax
lea eax, [ebp - 0x8dc]
push eax
call fcn.00402163
add esp, 0xc
push eax
mov ecx, esi
mov byte [ebp - 4], 0x12
call fcn.0040262c
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x8dc]
add ecx, 0xfffffff0
call fcn.00402883
mov eax, dword [esi]
cmp dword [eax - 0xc], ebx
jle 0x488d87
push ebx
lea eax, [ebp - 0x8e0]
push eax
mov ecx, esi
call fcn.004078a9
push eax
mov ecx, esi
mov byte [ebp - 4], 0x13
call fcn.0040262c
mov ecx, dword [ebp - 0x8e0]
add ecx, 0xfffffff0
call fcn.00402883
mov edi, 0x565304
push edi
mov dword [ebp - 0x8b8], edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 4], 0x14
call fcn.0048aa29
push eax
lea ecx, [ebp - 0x8b4]
call fcn.00402840
push 3
lea eax, [ebp - 0x8b4]
push 0x52303c
push eax
mov byte [ebp - 4], 0x15
call fcn.00402a45
mov eax, dword [esi]
add esp, 0xc
push dword [ebp - 0x8b4]
mov ecx, 0x566ab0
mov dword [ebp - 0x8b0], eax
call fcn.00498eba
push dword [ebp - 0x8b0]
mov ecx, eax
call fcn.0040276b
mov eax, dword [esi]
mov dword [ebp - 0x898], eax
lea eax, [ebp - 0x8b0]
push eax
lea esi, [ebp - 0x8fc]
mov dword [ebp - 0x8b0], VariantCopyInd
call fcn.0040ab14
mov byte [ebp - 4], 0x16
call fcn.0048aa29
push eax
lea ecx, [ebp - 0x8a0]
call fcn.00402840
push 3
mov byte [ebp - 4], 0x17
push dword [0x566a94]
lea eax, [ebp - 0x8a0]
push dword [0x566a9c]
push eax
call fcn.00402a45
add esp, 0x10
call fcn.0048aa29
push eax
lea ecx, [ebp - 0x890]
call fcn.00402840
push 0x200
lea eax, [ebp - 0x68c]
push 0
mov byte [ebp - 4], 0x18
push eax
mov dword [ebp - 0x8fc], 0x2001f
call fcn.004adda0
add esp, 0xc
push ebx
push dword [ebp - 0x898]
lea eax, [ebp - 0x68c]
push eax
call fcn.004abafa
mov eax, dword [0x566aac]
add esp, 0xc
cmp dword [eax - 0xc], 0
jne 0x488ed1
mov ecx, dword [ebp - 0x890]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x8a0]
add ecx, 0xfffffff0
call fcn.00402883
call fcn.0040ab8e
mov ecx, dword [ebp - 0x8f4]
add ecx, 0xfffffff0
call fcn.00402883
jmp 0x48912d
push 7
pop ecx
mov esi, str.Microsoft_Visual_C_Library
lea edi, [ebp - 0x34]
rep movsd dword es:[edi], dword [esi]
push 0x101
lea eax, [ebp - 0x184]
push 0
push eax
movsb byte es:[edi], byte [esi]
call fcn.004adda0
add esp, 0xc
push 0x101
lea eax, [ebp - 0x28c]
push 0
push eax
call fcn.004adda0
add esp, 0xc
xor eax, eax
mov edi, 0x100
mov byte [ebp + eax - 0x184], al
inc eax
cmp eax, edi
jb 0x488f12
mov eax, dword [0x566aac]
xor ecx, ecx
xor esi, esi
cmp dword [eax - 0xc], ecx
je 0x488f45
cmp esi, dword [eax - 0xc]
jb 0x488f33
xor esi, esi
mov dl, byte [eax + esi*2]
inc esi
mov byte [ebp + ecx - 0x28c], dl
inc ecx
cmp ecx, edi
jb 0x488f2c
jmp 0x488f5f
xor eax, eax
cmp esi, 0x1c
jb 0x488f4e
xor esi, esi
mov dl, byte [ebp + esi - 0x34]
inc esi
mov byte [ebp + eax - 0x28c], dl
inc eax
cmp eax, edi
jb 0x488f47
xor edi, edi
mov dword [ebp - 0x894], edi
movzx edx, byte [ebp + edi - 0x28c]
add edx, dword [ebp - 0x894]
lea eax, [ebp + edi - 0x184]
mov cl, byte [eax]
movzx esi, cl
add esi, edx
and esi, ebx
mov edx, esi
movzx cx, cl
lea esi, [ebp + edx - 0x184]
mov dword [ebp - 0x894], edx
mov dl, byte [esi]
movzx ecx, cx
inc edi
mov byte [eax], dl
mov byte [esi], cl
cmp edi, 0x100
jb 0x488f67
xor edi, edi
mov dword [ebp - 0x894], edi
mov dword [ebp - 0x89c], edi
inc edi
and edi, ebx
lea ecx, [ebp + edi - 0x184]
mov al, byte [ecx]
movzx edx, al
add edx, dword [ebp - 0x894]
movzx ax, al
and edx, ebx
movzx eax, ax
lea esi, [ebp + edx - 0x184]
mov dword [ebp - 0x894], edx
mov dl, byte [esi]
mov byte [ecx], dl
mov byte [esi], al
movzx ecx, byte [ecx]
movzx eax, al
add eax, ecx
mov ecx, dword [ebp - 0x89c]
and eax, ebx
movzx ax, byte [ebp + eax - 0x184]
movzx eax, ax
lea ecx, [ebp + ecx - 0x68c]
xor byte [ecx], al
inc dword [ebp - 0x89c]
cmp dword [ebp - 0x89c], 0x1fe
jb 0x488fb8
xor eax, eax
mov word [ebp - 0x48e], ax
call fcn.0048aa29
push eax
lea ecx, [ebp - 0x898]
call fcn.00402840
push 3
mov byte [ebp - 4], 0x19
push dword [0x566aa4]
lea eax, [ebp - 0x898]
push eax
call fcn.00402a45
add esp, 8
lea eax, [ebp - 0x898]
mov dword [ebp - 0x8b0], esp
mov ecx, esp
push eax
lea esi, [ebp - 0x68c]
call fcn.004025a1
mov ecx, esi
call fcn.004853d5
pop ecx
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x898]
add ecx, 0xfffffff0
call fcn.00402883
mov edi, dword [ebp - 0x8a0]
push 1
push edi
push SysReAllocStringLen
lea esi, [ebp - 0x8fc]
call fcn.0040ab30
test eax, eax
je 0x4890c4
push 0x200
lea eax, [ebp - 0x68c]
push eax
push dword [ebp - 0x890]
mov eax, esi
call fcn.0040ad98
call fcn.0040ab8e
push 1
push edi
push reloc.OLEAUT32.dll_SysReAllocString
lea esi, [ebp - 0x8fc]
call fcn.0040ab30
test eax, eax
je 0x4890f9
push 0x200
lea eax, [ebp - 0x68c]
push eax
push dword [ebp - 0x890]
mov eax, esi
call fcn.0040ad98
call fcn.0040ab8e
mov ecx, dword [ebp - 0x890]
add ecx, 0xfffffff0
call fcn.00402883
lea ecx, [edi - 0x10]
call fcn.00402883
lea esi, [ebp - 0x8fc]
call fcn.0040ab8e
mov ecx, dword [ebp - 0x8f4]
add ecx, 0xfffffff0
call fcn.00402883
mov edi, 0x565304
mov ecx, dword [ebp - 0x8b4]
add ecx, 0xfffffff0
call fcn.00402883
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x8a4]
add ecx, 0xfffffff0
call fcn.00402883
push 0x400
push 0
lea eax, [ebp - 0x8cc]
push eax
lea ecx, [ebp - 0x920]
call fcn.0044265b
mov edi, 0x200
push edi
lea eax, [ebp - 0x88c]
push 0
push eax
mov byte [ebp - 4], 0x1a
call fcn.004adda0
add esp, 0xc
push ebx
push dword [ebp - 0x8cc]
lea eax, [ebp - 0x88c]
push eax
call fcn.004abafa
add esp, 0xc
lea eax, [ebp - 0x88c]
push eax
lea ecx, [ebp - 0x8b8]
call fcn.0040255d
mov eax, 0x565304
push eax
mov dword [ebp - 0x8d4], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 4], 0x1c
call fcn.0048aa29
push eax
lea ecx, [ebp - 0x8b4]
call fcn.00402840
push 2
lea eax, [ebp - 0x8b4]
push 0x52303c
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402a45
mov esi, dword [ebp - 0x8b8]
add esp, 0xc
push dword [ebp - 0x8b4]
mov ecx, 0x566ab0
call fcn.00498eba
push esi
mov ecx, eax
call fcn.0040276b
mov eax, dword [ebp - 0x8b8]
mov dword [ebp - 0x898], eax
lea eax, [ebp - 0x8b0]
push eax
lea esi, [ebp - 0x30]
mov dword [ebp - 0x8b0], VariantCopyInd
call fcn.0040ab14
mov byte [ebp - 4], 0x1e
call fcn.0048aa29
push eax
lea ecx, [ebp - 0x8a0]
call fcn.00402840
push 2
mov byte [ebp - 4], 0x1f
push dword [0x566a94]
lea eax, [ebp - 0x8a0]
push dword [0x566a9c]
push eax
call fcn.00402a45
add esp, 0x10
call fcn.0048aa29
push eax
lea ecx, [ebp - 0x8b0]
call fcn.00402840
push edi
lea eax, [ebp - 0x48c]
push 0
mov byte [ebp - 4], 0x20
push eax
mov dword [ebp - 0x30], 0x2001f
call fcn.004adda0
add esp, 0xc
push ebx
push dword [ebp - 0x898]
lea eax, [ebp - 0x48c]
push eax
call fcn.004abafa
mov eax, dword [0x566aac]
add esp, 0xc
cmp dword [eax - 0xc], 0
jne 0x4892d5
mov ecx, dword [ebp - 0x8b0]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x8a0]
add ecx, 0xfffffff0
jmp 0x4894fe
push 7
pop ecx
mov esi, str.Microsoft_Visual_C_Library
lea edi, [ebp - 0x78]
rep movsd dword es:[edi], dword [esi]
push 0x101
lea eax, [ebp - 0x184]
push 0
push eax
movsb byte es:[edi], byte [esi]
call fcn.004adda0
add esp, 0xc
push 0x101
lea eax, [ebp - 0x28c]
push 0
push eax
call fcn.004adda0
add esp, 0xc
xor eax, eax
mov edi, 0x100
mov byte [ebp + eax - 0x184], al
inc eax
cmp eax, edi
jb 0x489316
mov eax, dword [0x566aac]
xor ecx, ecx
xor esi, esi
cmp dword [eax - 0xc], ecx
je 0x489349
cmp esi, dword [eax - 0xc]
jb 0x489337
xor esi, esi
mov dl, byte [eax + esi*2]
inc esi
mov byte [ebp + ecx - 0x28c], dl
inc ecx
cmp ecx, edi
jb 0x489330
jmp 0x489363
xor eax, eax
cmp esi, 0x1c
jb 0x489352
xor esi, esi
mov dl, byte [ebp + esi - 0x78]
inc esi
mov byte [ebp + eax - 0x28c], dl
inc eax
cmp eax, edi
jb 0x48934b
xor edi, edi
mov dword [ebp - 0x894], edi
movzx edx, byte [ebp + edi - 0x28c]
add edx, dword [ebp - 0x894]
lea eax, [ebp + edi - 0x184]
mov cl, byte [eax]
movzx esi, cl
add esi, edx
and esi, ebx
mov edx, esi
movzx cx, cl
lea esi, [ebp + edx - 0x184]
mov dword [ebp - 0x894], edx
mov dl, byte [esi]
movzx ecx, cx
inc edi
mov byte [eax], dl
mov byte [esi], cl
cmp edi, 0x100
jb 0x48936b
xor edi, edi
mov dword [ebp - 0x894], edi
mov dword [ebp - 0x89c], edi
inc edi
and edi, ebx
lea eax, [ebp + edi - 0x184]
mov cl, byte [eax]
movzx edx, cl
add edx, dword [ebp - 0x894]
movzx cx, cl
and edx, ebx
movzx ecx, cx
lea esi, [ebp + edx - 0x184]
mov dword [ebp - 0x894], edx
mov dl, byte [esi]
mov byte [eax], dl
mov byte [esi], cl
movzx eax, byte [eax]
movzx ecx, cl
add eax, ecx
mov ecx, dword [ebp - 0x89c]
and eax, ebx
movzx ax, byte [ebp + eax - 0x184]
movzx eax, ax
lea ecx, [ebp + ecx - 0x48c]
xor byte [ecx], al
inc dword [ebp - 0x89c]
cmp dword [ebp - 0x89c], 0x1fe
jb 0x4893bc
xor eax, eax
mov word [ebp - 0x28e], ax
call fcn.0048aa29
push eax
lea ecx, [ebp - 0x898]
call fcn.00402840
push 2
mov byte [ebp - 4], 0x21
push dword [0x566aa4]
lea eax, [ebp - 0x898]
push eax
call fcn.00402a45
add esp, 8
lea eax, [ebp - 0x898]
mov dword [ebp - 0x8d8], esp
mov ecx, esp
push eax
lea esi, [ebp - 0x48c]
call fcn.004025a1
mov ecx, esi
call fcn.004853d5
pop ecx
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x898]
add ecx, 0xfffffff0
call fcn.00402883
mov edi, dword [ebp - 0x8a0]
push 1
push edi
push SysReAllocStringLen
lea esi, [ebp - 0x30]
call fcn.0040ab30
mov ebx, dword [ebp - 0x8b0]
test eax, eax
je 0x4894c6
push 0x200
lea eax, [ebp - 0x48c]
push eax
push ebx
mov eax, esi
call fcn.0040ad98
call fcn.0040ab8e
push 1
push edi
push reloc.OLEAUT32.dll_SysReAllocString
lea esi, [ebp - 0x30]
call fcn.0040ab30
test eax, eax
je 0x4894f3
push 0x200
lea eax, [ebp - 0x48c]
push eax
push ebx
mov eax, esi
call fcn.0040ad98
call fcn.0040ab8e
lea ecx, [ebx - 0x10]
call fcn.00402883
lea ecx, [edi - 0x10]
call fcn.00402883
lea esi, [ebp - 0x30]
call fcn.0040ab8e
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x8b4]
add ecx, 0xfffffff0
call fcn.00402883
push 0x565304
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x8b8]
add ecx, 0xfffffff0
call fcn.00402883
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x8cc]
add ecx, 0xfffffff0
call fcn.00402883
mov edi, dword [ebp - 0x8e4]
push dword [edi + 4]
lea eax, [ebp - 0x8d0]
push dword [edi]
push str.After_InstallArmadilloCode__d___d
push eax
call fcn.00402a45
add esp, 0x10
call fcn.00487f5a
push dword [edi + 4]
lea eax, [ebp - 0x8d0]
push dword [edi]
push str.After_RefreshAllStatus__d___d
push eax
call fcn.00402a45
mov edi, dword [edi + 4]
add esp, 0x10
mov ecx, dword [ebp - 0x8d0]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00402883
mov eax, edi
call fcn.004ae2ec
ret 8
xor edi, edi
inc edi
jmp 0x48958f
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x48958f