Function at 0xc50f3e
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x73c
push ebx
push esi
push edi
mov esi, 0xc72e98
mov dword [ebp - 0xc4], ecx
lea edi, [ebp - 0xb4]
mov dword [ebp - 0xc8], edx
push 0x38
pop eax
movsd dword es:[edi], dword [esi]
xor ecx, ecx
mov byte [ebp - 0x28], al
mov eax, ecx
mov dword [ebp - 0x27], 0x7dc01572
mov dword [ebp - 0x23], 0xc774ab34
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x1f], 0x77ad8616
mov dword [ebp - 0x1b], 0xae9d5906
mov dword [ebp - 0x17], 0xe4df9e5c
movsd dword es:[edi], dword [esi]
mov word [ebp - 0x13], 0x19f7
mov byte [ebp - 0x11], 0x80
mov dword [ebp - 0x6c], ecx
movsw word es:[edi], word [esi]
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc50fa0
mov eax, dword [str._b_]
mov ebx, dword [0xc78618]
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], ebx
call fcn.00c504eb
push 6
pop ecx
mov esi, 0xc704d0
lea edi, [ebp - 0x8c]
rep movsd dword es:[edi], dword [esi]
push 0x45
xor eax, eax
pop ecx
movsw word es:[edi], word [esi]
mov dword [ebp - 0x70], eax
cmp byte [ebp - 0x8c], cl
jne 0xc51057
mov esi, dword [ebp - 0xc]
test cl, cl
je 0xc51028
cmp byte [ebp + eax - 0x8c], 0
je 0xc51028
push ecx
push 0xc7858c
mov edx, esi
mov ecx, str.EventThrottleMaxEvents
call fcn.00c508dd
mov eax, dword [ebp - 0x70]
inc eax
pop ecx
pop ecx
mov dword [ebp - 0x70], eax
mov cl, byte [eax + str.EventThrottleMaxEvents]
cmp cl, byte [ebp + eax - 0x8c]
je 0xc50ff0
mov ecx, dword [ebp - 0xa0]
cmp ecx, eax
jae 0xc51057
cmp ecx, 0x213d
jne 0xc51040
add ebx, 0x1b6eb7ad
xor esi, 0x7edffaca
inc ecx
cmp ecx, eax
jb 0xc51032
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], ebx
mov esi, dword [ebp - 0xc0]
xor edx, edx
push 0xd
mov eax, esi
pop ecx
div ecx
mov bl, byte [ebp + esi - 0x348]
movzx ecx, bl
movzx eax, byte [ebp + edx - 0xb4]
add eax, dword [ebp - 0x6c]
add ecx, eax
movzx edx, cl
mov ecx, dword [ebp - 0xc]
add ecx, 0xd6eef0f9
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0xc], ecx
mov al, byte [ebp + edx - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + edx - 0x348], bl
mov ebx, dword [ebp - 8]
mov dword [ebp - 0xc0], esi
cmp esi, 0x100
jb 0xc50fc6
xor eax, eax
lea ebx, [ecx + 0x41f1ddc8]
mov dword [ebp - 0xc], ebx
mov edi, eax
mov esi, eax
mov ebx, eax
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [ebp + edi - 0x348]
movzx edx, cl
lea eax, [edx + ebx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x348]
mov byte [ebp + edi - 0x348], al
mov byte [ebp + ebx - 0x348], cl
movzx eax, byte [ebp + edi - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + esi - 0x28]
mov byte [ebp + esi - 0x400], al
inc esi
cmp esi, 0x18
jb 0xc510cb
mov esi, 0xc70054
lea edi, [ebp - 0xb0]
xor eax, eax
mov byte [ebp - 0x3e8], al
mov dword [ebp - 0x70], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov edi, eax
mov ebx, dword [ebp - 0xc]
mov esi, eax
call fcn.00c50548
xor ebx, 0x9a80a657
inc esi
cmp byte [esi + str.EventThrottleMaxEvents], 0
jne 0xc5113b
mov dword [ebp - 0xc], ebx
cmp esi, 0x1e0e
jne 0xc51169
mov ebx, dword [ebp - 8]
or ebx, 0x831be6c2
mov dword [ebp - 8], ebx
jmp 0xc51175
xor ebx, 0xdbc06948
mov dword [ebp - 0xc], ebx
mov ebx, dword [ebp - 8]
mov eax, dword [ebp - 0x70]
push 0
mov byte [ebp + eax - 0x348], al
inc eax
mov dword [ebp - 0x70], eax
cmp eax, 0x100
pop eax
jb 0xc51136
mov esi, eax
mov dl, byte [ebp + esi - 0x348]
mov eax, esi
and eax, 7
movzx ecx, dl
movzx eax, byte [ebp + eax - 0xb0]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + edi - 0x348], dl
cmp esi, 0x100
jb 0xc5118f
mov dl, byte [ebp - 0x347]
movzx ecx, dl
push ebx
mov al, byte [ebp + ecx - 0x348]
mov byte [ebp - 0x347], al
mov byte [ebp + ecx - 0x348], dl
movzx ecx, byte [ebp - 0x347]
movzx eax, dl
add ecx, eax
movzx eax, cl
push ecx
mov al, byte [ebp + eax - 0x348]
xor al, 0x2e
mov byte [ebp - 0xbe], al
xor eax, eax
mov byte [ebp - 0xbd], al
mov eax, 0xc730f0
mov edx, eax
mov ecx, eax
call fcn.00c50779
pop ecx
lea edi, [ebx - 0x10062112]
mov esi, str.EventThrottleMaxEvents
pop ecx
or edi, 0x234b23f9
push ecx
mov eax, 0xc7858c
mov edx, ebx
push eax
mov ecx, eax
call fcn.00c508dd
inc esi
mov ebx, edi
pop ecx
pop ecx
cmp byte [esi], 0
jne 0xc51231
push 0xe
pop eax
mov byte [ebp - 0x1b], al
lea edi, [ebp - 0x3a0]
push 9
pop eax
mov ecx, eax
mov dword [ebp - 8], ebx
mov esi, 0xc72ea8
mov dword [ebp - 0x28], 0x716c40d6
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
mov dword [ebp - 0x24], 0xcd54bffb
mov dword [ebp - 0x20], 0x40a0ecb0
mov edi, ecx
mov byte [ebp - 0x1c], 0xf6
mov eax, ecx
mov dword [ebp - 0x1a], 0xb2ee6024
mov dword [ebp - 0x16], 0x69e7e9b0
mov word [ebp - 0x12], 0x612a
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc51299
mov esi, ecx
xor ebx, ebx
call fcn.00c50972
inc esi
cmp word [esi*2 + 0xc730f0], bx
jne 0xc512ac
call fcn.00c50972
mov ebx, dword [ebp - 8]
mov edx, ebx
cmp esi, 0x1173
jne 0xc512e1
lea eax, [ebx + 0x427a2e3f]
push ecx
mov ecx, eax
mov dword [ebp - 0xc], eax
call fcn.00c50c5b
jmp 0xc512f9
mov esi, ebx
mov ecx, 0xc7858c
or esi, 0x9a994b33
push esi
push ebx
mov dword [ebp - 0xc], esi
call fcn.00c50634
pop ecx
pop ecx
xor eax, eax
mov ecx, eax
push 0x23
mov dword [ebp - 0x6c], ecx
pop esi
mov al, byte [ebp + ecx - 0x348]
xor edx, edx
mov byte [ebp - 1], al
mov eax, ecx
div esi
movzx ecx, byte [ebp - 1]
mov esi, 0xc72ecc
push 7
movzx eax, byte [ebp + edx - 0x3a0]
add eax, edi
lea edi, [ebp - 0x8c]
add ecx, eax
xor eax, eax
movzx edx, cl
pop ecx
rep movsd dword es:[edi], dword [esi]
push 0x68
pop ecx
mov dword [ebp - 8], edx
mov dword [ebp - 0x70], eax
cmp cx, word [ebp - 0x8c]
jne 0xc51385
test cx, cx
je 0xc51382
xor ecx, ecx
cmp word [ebp + eax - 0x8c], cx
je 0xc51382
mov edx, dword [ebp - 0xc]
push ecx
mov ecx, ebx
call fcn.00c50c5b
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
add eax, eax
pop ecx
movzx ecx, word [eax + 0xc730f0]
cmp cx, word [ebp + eax - 0x8c]
je 0xc5134b
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x6c]
mov al, byte [ebp + edx - 0x348]
mov edi, dword [ebp - 8]
push 0x23
mov byte [ebp + ecx - 0x348], al
inc ecx
mov al, byte [ebp - 1]
mov byte [ebp + edx - 0x348], al
mov dword [ebp - 0x6c], ecx
pop esi
cmp ecx, 0x100
jb 0xc51304
xor eax, eax
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
sub ebx, 0x354a5efc
movzx edi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + edi - 0x348]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x348]
mov byte [ebp + edi - 0x348], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x348], cl
movzx eax, byte [ebp + edi - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + esi - 0x28]
mov byte [ebp + esi - 0x41c], al
inc esi
cmp esi, 0x18
jb 0xc513bf
mov esi, 0xc72ee8
mov dword [ebp - 8], ebx
lea edi, [ebp - 0xb0]
mov dword [ebp - 0x9c], 0xa43b56b4
push 0x43
xor ecx, ecx
mov dword [ebp - 0x98], 0x8f263cc
movsd dword es:[edi], dword [esi]
pop eax
mov byte [ebp - 0x81], al
mov eax, ecx
mov byte [ebp - 0x404], cl
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x94], 0x591d3797
mov dword [ebp - 0x90], 0x2a82c1a2
mov dword [ebp - 0x8c], 0x27ffd6ee
movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x88], 0x7cdf4045
mov edi, ecx
mov word [ebp - 0x84], 0x6d35
mov byte [ebp - 0x82], 0x57
mov dword [ebp - 0x80], 0x853de8fa
mov dword [ebp - 0x7c], 0xefc9d391
mov dword [ebp - 0x78], 0xecc2d45e
mov dword [ebp - 0x74], 0xa46949c2
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc514ab
mov esi, ecx
mov dl, byte [ebp + esi - 0x348]
mov eax, esi
and eax, 7
movzx ecx, dl
movzx eax, byte [ebp + eax - 0xb0]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + edi - 0x348], dl
cmp esi, 0x100
jb 0xc514bc
xor eax, eax
mov ebx, eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [ebp + edi - 0x348]
movzx edx, cl
lea eax, [ebx + edx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x348]
mov byte [ebp + edi - 0x348], al
mov byte [ebp + ebx - 0x348], cl
movzx eax, byte [ebp + edi - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + esi - 0x9c]
mov byte [ebp + esi - 0x498], al
inc esi
cmp esi, 0x2c
jb 0xc51500
push 0x1e
pop eax
push 0xd
mov byte [ebp - 0x8a], al
lea edi, [ebp - 0x3e4]
pop eax
push 0x1a
mov byte [ebp - 0x89], al
xor edx, edx
pop eax
push 0x11
pop ecx
mov esi, 0xc6f760
mov byte [ebp - 0x72], al
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x46c], dl
mov esi, edx
mov dword [ebp - 0x9c], 0xbc644dea
mov eax, edx
mov dword [ebp - 0x98], 0x6ea29c75
mov dword [ebp - 0x94], 0xe8c3f551
mov dword [ebp - 0x90], 0xce2ac103
mov word [ebp - 0x8c], 0xecd0
mov dword [ebp - 0x88], 0xd0a94510
mov dword [ebp - 0x84], 0xbb8a1d93
mov dword [ebp - 0x80], 0x2037a7ea
mov dword [ebp - 0x7c], 0xb3b5fee5
mov dword [ebp - 0x78], 0x5348da77
mov word [ebp - 0x74], 0xa464
mov byte [ebp - 0x71], 0x49
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc515eb
mov ebx, edx
push 0x43
xor edx, edx
mov cl, byte [ebp + ebx - 0x348]
pop edi
mov eax, ebx
mov byte [ebp - 1], cl
div edi
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x3e4]
add eax, esi
add ecx, eax
movzx eax, cl
mov ecx, 0xc7858c
mov dword [ebp - 0xa0], eax
mov al, byte [ebp + eax - 0x348]
mov byte [ebp + ebx - 0x348], al
call fcn.00c5022d
push 0x12
pop eax
mov ecx, eax
lea edi, [ebp - 0x468]
mov esi, 0xc72ef8
mov al, byte [0xc7858c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp al, byte [ebp - 0x468]
jne 0xc51688
xor ecx, ecx
mov esi, ecx
test al, al
je 0xc51688
cmp byte [ebp + esi - 0x468], 0
je 0xc51688
call fcn.00c50429
mov al, byte [esi + 0xc7858d]
inc esi
cmp al, byte [ebp + esi - 0x468]
je 0xc51665
mov esi, dword [ebp - 0xa0]
inc ebx
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x348], al
cmp ebx, 0x100
jb 0xc515fc
mov ebx, dword [ebp - 8]
xor ecx, ecx
mov dword [ebp - 0x6c], ecx
mov eax, ecx
mov esi, ecx
inc eax
movzx edi, al
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xa0], edi
mov cl, byte [ebp + edi - 0x348]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0x6c], eax
mov al, byte [ebp + eax - 0x348]
mov byte [ebp + edi - 0x348], al
mov eax, dword [ebp - 0x6c]
mov byte [ebp + eax - 0x348], cl
movzx eax, byte [ebp + edi - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
mov byte [ebp - 1], al
xor eax, eax
mov edi, eax
push ecx
mov edx, ebx
mov ecx, ebx
call fcn.00c50c5b
imul ebx, ebx, 0x93fc2f81
inc edi
pop ecx
cmp byte [edi + str.EventThrottleMaxEvents], 0
jne 0xc51703
mov eax, 0xc730f0
mov dword [ebp - 8], ebx
push eax
push str.EventThrottleMaxEvents
mov edx, eax
mov ecx, eax
call fcn.00c50d2f
pop ecx
pop ecx
cmp edi, 0xea7
jae 0xc5174d
mov ecx, dword [ebp - 0xc]
or ecx, 0x5873f8a7
mov dword [ebp - 0xc], ecx
jmp 0xc51757
mov eax, ebx
or eax, 0x4d4ed0f
mov dword [ebp - 0xc], eax
mov al, byte [ebp + esi - 0x9c]
xor al, byte [ebp - 1]
mov byte [ebp + esi - 0x4c8], al
inc esi
mov eax, dword [ebp - 0xa0]
cmp esi, 0x2c
jb 0xc516b1
push 9
pop eax
push 0xb
pop ecx
push 0x68
mov byte [ebp - 0x87], al
lea edi, [ebp - 0xb8]
pop eax
mov byte [ebp - 0x7e], cl
xor edx, edx
mov byte [ebp - 0x7c], cl
mov esi, 0xc70550
push 5
mov byte [ebp - 0x7d], al
lea eax, [ebx - 0x165c560d]
pop ecx
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xc], eax
mov edi, edx
mov byte [ebp - 0x49c], dl
mov eax, edx
mov dword [ebp - 0x9c], 0x7897ba33
mov dword [ebp - 0x98], 0x25e0df2a
mov dword [ebp - 0x94], 0x259feec5
mov dword [ebp - 0x90], 0xe7506a84
mov dword [ebp - 0x8c], 0xb1c80379
mov byte [ebp - 0x88], 5
mov dword [ebp - 0x86], 0x2bbb5c39
mov dword [ebp - 0x82], 0x41becc0a
mov dword [ebp - 0x7b], 0x6546732c
mov dword [ebp - 0x77], 0x412e3abd
mov word [ebp - 0x73], 0xb15f
mov byte [ebp - 0x71], 0x92
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc5181a
push 0x13
mov esi, edx
pop ecx
xor edx, edx
mov bl, byte [ebp + esi - 0x348]
mov eax, esi
div ecx
movzx ecx, bl
push 0x13
movzx eax, byte [ebp + edx - 0xb8]
add eax, edi
add ecx, eax
movzx edi, cl
pop ecx
mov al, byte [ebp + edi - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + edi - 0x348], bl
cmp esi, 0x100
jb 0xc5182e
mov eax, dword [ebp - 0xc]
mov esi, str.EventThrottleMaxEvents
mov edx, dword [ebp - 8]
lea edi, [eax - 0x177d1dab]
push edx
push eax
mov ecx, str.EventThrottleMaxEvents
call fcn.00c50634
mov eax, dword [ebp - 0xc]
inc esi
pop ecx
pop ecx
mov edx, edi
cmp byte [esi], 0
jne 0xc5187f
xor eax, eax
mov ebx, eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [ebp + edi - 0x348]
movzx edx, cl
lea eax, [ebx + edx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x348]
mov byte [ebp + edi - 0x348], al
mov byte [ebp + ebx - 0x348], cl
movzx eax, byte [ebp + edi - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + esi - 0x9c]
mov byte [ebp + esi - 0x4f8], al
inc esi
cmp esi, 0x2c
jb 0xc518a0
push 0xb
pop ebx
push 0x1e
pop eax
push 0x45
pop ecx
push 9
xor dword [ebp - 0xc], 0x58a4534f
xor edx, edx
mov byte [ebp - 0x23f], al
pop eax
push 0xe
mov byte [ebp - 0x224], al
pop eax
push 0xd
mov byte [ebp - 0x214], al
pop eax
push 0x1a
mov byte [ebp - 0x213], al
pop eax
mov byte [ebp - 0x20e], al
mov byte [ebp - 0x1f8], al
push 0xd
pop eax
mov byte [ebp - 0x1cd], al
push 0x13
pop eax
mov byte [ebp - 0x1c6], al
xor eax, eax
inc eax
mov byte [ebp - 0x4cc], dl
mov word [ebp - 0x248], 0x47c7
mov byte [ebp - 0x246], 0x64
mov byte [ebp - 0x245], bl
mov byte [ebp - 0x244], 0xb0
mov byte [ebp - 0x243], bl
mov word [ebp - 0x242], 0x505c
mov byte [ebp - 0x240], 0x41
mov dword [ebp - 0x23e], 0x4f5325d9
mov dword [ebp - 0x23a], 0xc329f2c2
mov byte [ebp - 0x236], cl
mov dword [ebp - 0x235], 0x39196d72
mov dword [ebp - 0x231], 0x11c174cb
mov dword [ebp - 0x22d], 0xfbd469dd
mov dword [ebp - 0x229], 0x4f986ff8
mov byte [ebp - 0x225], 0xe9
mov dword [ebp - 0x223], 0xf0f097c3
mov dword [ebp - 0x21f], 0x970a651d
mov dword [ebp - 0x21b], 0x40baf076
mov word [ebp - 0x217], 0x9435
mov byte [ebp - 0x215], 0x5d
mov dword [ebp - 0x212], 0x73effaff
mov dword [ebp - 0x20d], 0x7802ede4
mov dword [ebp - 0x209], 0xd30e4ade
mov dword [ebp - 0x205], 0xa3fbeaff
mov dword [ebp - 0x201], 0x9f2976d4
mov dword [ebp - 0x1fd], 0x7d9f697f
mov byte [ebp - 0x1f9], 0x48
mov dword [ebp - 0x1f7], 0x255261bd
mov dword [ebp - 0x1f3], 0x515d50df
mov dword [ebp - 0x1ef], 0x52dc8836
mov dword [ebp - 0x1eb], 0xe4c814fa
mov dword [ebp - 0x1e7], 0x6bcb4b2d
mov dword [ebp - 0x1e3], 0x8bff9c14
mov dword [ebp - 0x1df], 0xc0378f78
mov dword [ebp - 0x1db], 0xaac7e11b
mov dword [ebp - 0x1d7], 0x214afad0
mov dword [ebp - 0x1d3], 0x88d44ec3
mov word [ebp - 0x1cf], 0x61cc
mov dword [ebp - 0x1cc], 0xf6205b77
mov word [ebp - 0x1c8], 0xbcaf
mov dword [ebp - 0x1c5], 0x7f4964a0
mov dword [ebp - 0x1c1], 0x97fbfc94
mov dword [ebp - 0x1bd], 0xb2bcc747
mov word [ebp - 0x1b9], 0x266
mov dword [ebp - 0xa0], eax
mov byte [ebp - 0x1b7], al
mov dword [ebp - 0x1b6], 0x91d25fe5
mov dword [ebp - 0x1b2], 0x15aec911
mov dword [ebp - 0x1ae], 0xce19cf44
mov dword [ebp - 0x1aa], 0x2128a176
push 0xe
pop eax
push 0x23
mov byte [ebp - 0x188], al
pop eax
push 9
mov byte [ebp - 0x173], al
mov byte [ebp - 0x169], al
mov byte [ebp - 0x147], al
pop eax
push 0xf
mov byte [ebp - 0x12e], al
pop eax
push 0x38
mov byte [ebp - 0x124], al
pop eax
push 0x12
mov byte [ebp - 0x13d], cl
pop ecx
push 0x1a
mov byte [ebp - 0x122], al
pop eax
push 0x43
mov byte [ebp - 0x115], al
mov dword [ebp - 0x1a6], 0xc2ba192
mov dword [ebp - 0x1a2], 0xf9bc9e10
mov dword [ebp - 0x19e], 0x81c977d3
mov dword [ebp - 0x19a], 0x7dbe7637
mov dword [ebp - 0x196], 0xec053302
mov dword [ebp - 0x192], 0x204da1da
mov dword [ebp - 0x18e], 0x47f4ac73
mov word [ebp - 0x18a], 0x34f1
mov dword [ebp - 0x187], 0x4a6fdf4f
mov dword [ebp - 0x183], 0xe3b05059
mov dword [ebp - 0x17f], 0x752a54c7
mov dword [ebp - 0x17b], 0xc9c9719f
mov dword [ebp - 0x177], 0x21f97e83
mov dword [ebp - 0x172], 0x2db9b3e3
mov dword [ebp - 0x16e], 0x5a49f0cc
mov byte [ebp - 0x16a], 0xbc
mov dword [ebp - 0x168], 0xf5b6d97a
mov dword [ebp - 0x164], 0x98348c3c
mov dword [ebp - 0x160], 0x80bfecc0
mov dword [ebp - 0x15c], 0xc7ed9067
mov dword [ebp - 0x158], 0x51227149
mov dword [ebp - 0x154], 0x69f5ad13
mov dword [ebp - 0x150], 0xbcaa31b7
mov dword [ebp - 0x14c], 0xd2041b88
mov byte [ebp - 0x148], 0x9b
mov dword [ebp - 0x146], 0xa342ea28
mov dword [ebp - 0x142], 0xad606eaf
mov byte [ebp - 0x13e], 0xad
mov dword [ebp - 0x13c], 0xb2658ed7
mov dword [ebp - 0x138], 0x9d221d6e
mov dword [ebp - 0x134], 0xae426a5f
mov word [ebp - 0x130], 0x7e81
mov dword [ebp - 0x12d], 0x6117b1
mov dword [ebp - 0x129], 0x243d3ec5
mov byte [ebp - 0x125], 0xbb
mov byte [ebp - 0x123], 0xa5
mov dword [ebp - 0x121], 0x359e9b95
mov word [ebp - 0x11d], 0xcb3d
mov byte [ebp - 0x11b], 0x6e
mov byte [ebp - 0x11a], cl
mov dword [ebp - 0x119], 0x2b5abab0
mov dword [ebp - 0x114], 0xb98e8299
mov dword [ebp - 0x110], 0xde9ca439
mov dword [ebp - 0x10c], 0x9c5383ab
mov dword [ebp - 0x108], 0x8c7d991c
mov dword [ebp - 0x104], 0x57366284
mov dword [ebp - 0x100], 0x56143ab7
mov dword [ebp - 0xfc], 0x3782b8ab
mov dword [ebp - 0xf8], 0xe0fcf6cb
mov dword [ebp - 0xf4], 0x609e221b
mov word [ebp - 0xf0], 0x495d
mov byte [ebp - 0xee], cl
mov dword [ebp - 0xed], 0x4919f251
mov dword [ebp - 0xe9], 0x2cf81f97
mov word [ebp - 0xe5], 0x7265
mov byte [ebp - 0xe3], 0x17
pop eax
mov esi, 0xc70f20
mov byte [ebp - 0xe2], al
lea edi, [ebp - 0xb4]
mov dword [ebp - 0xe1], 0x3e9ed760
mov word [ebp - 0xdd], 0x7d1d
mov eax, edx
mov byte [ebp - 0xdb], 0x5c
movsd dword es:[edi], dword [esi]
mov byte [ebp - 0xda], bl
mov dword [ebp - 0xd9], 0xf2c4d015
mov dword [ebp - 0xd5], 0x6df7c6
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xd1], 0x329d6cf2
mov dword [ebp - 0xcd], 0xecd5c877
mov byte [ebp - 0xc9], 0xd2
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edi, edx
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc51ddd
mov esi, edx
xor edx, edx
mov bl, byte [ebp + esi - 0x348]
push 0xd
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0xb4]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + edi - 0x348], bl
cmp esi, 0x100
jb 0xc51dee
xor eax, eax
mov ebx, eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [ebp + edi - 0x348]
movzx edx, cl
lea eax, [ebx + edx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x348]
mov byte [ebp + edi - 0x348], al
mov byte [ebp + ebx - 0x348], cl
movzx eax, byte [ebp + edi - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + esi - 0x248]
mov byte [ebp + esi - 0x73c], al
inc esi
cmp esi, 0x180
jb 0xc51e36
mov esi, str.IndexEfsSuccess
mov dword [ebp - 0x28], 0xc8d6e699
lea edi, [ebp - 0xb4]
mov dword [ebp - 0x24], 0xf3dd0a7c
xor ecx, ecx
mov dword [ebp - 0x20], 0x3bd722d3
mov byte [ebp - 0x5bc], cl
mov eax, ecx
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x1c], 0xc6111cf0
mov dword [ebp - 0x18], 0xf558e1b8
mov dword [ebp - 0x14], 0xda228669
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, ecx
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc51ed1
mov esi, ecx
xor edx, edx
mov bl, byte [ebp + esi - 0x348]
push 0xf
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0xb4]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + edi - 0x348], bl
cmp esi, 0x100
jb 0xc51ee2
xor eax, eax
mov ebx, eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [ebp + edi - 0x348]
movzx edx, cl
lea eax, [ebx + edx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x348]
mov byte [ebp + edi - 0x348], al
mov byte [ebp + ebx - 0x348], cl
movzx eax, byte [ebp + edi - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + esi - 0x28]
mov byte [ebp + esi - 0x398], al
inc esi
cmp esi, 0x18
jb 0xc51f2a
push 0x45
pop eax
push 0x1a
mov byte [ebp - 0x20], al
lea edi, [ebp - 0x90]
mov byte [ebp - 0x18], al
mov esi, str.resource_unavailable_try_again
pop eax
push 7
pop ecx
rep movsd dword es:[edi], dword [esi]
xor edx, edx
mov byte [ebp - 0x13], al
mov byte [ebp - 0x380], dl
mov eax, edx
mov dword [ebp - 0x28], 0xf0e67985
movsw word es:[edi], word [esi]
mov dword [ebp - 0x24], 0xf8376bd4
mov dword [ebp - 0x1f], 0x7a0c1f92
mov word [ebp - 0x1b], 0xd93c
movsb byte es:[edi], byte [esi]
mov byte [ebp - 0x19], 0xf4
mov edi, edx
mov dword [ebp - 0x17], 0x52fd5cbd
mov word [ebp - 0x12], 0x65bf
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc51fd4
mov esi, edx
xor edx, edx
mov bl, byte [ebp + esi - 0x348]
push 0x1e
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0x90]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + edi - 0x348], bl
cmp esi, 0x100
jb 0xc51fe5
xor eax, eax
mov ebx, eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [ebp + edi - 0x348]
movzx edx, cl
lea eax, [edx + ebx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x348]
mov byte [ebp + edi - 0x348], al
mov byte [ebp + ebx - 0x348], cl
movzx eax, byte [ebp + edi - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + esi - 0x28]
mov byte [ebp + esi - 0x8c], al
inc esi
cmp esi, 0x18
jb 0xc5202d
mov esi, 0xc71824
mov dword [ebp - 0x3c], 0x8a5254d4
lea edi, [ebp - 0xb0]
mov byte [ebp - 0x38], 0x73
push 0x1e
pop eax
movsd dword es:[edi], dword [esi]
xor ecx, ecx
mov byte [ebp - 0x37], al
mov byte [ebp - 0x17], al
mov eax, ecx
mov byte [ebp - 0x74], cl
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x36], 0x1fb34089
mov dword [ebp - 0x32], 0xbc6929da
mov dword [ebp - 0x2e], 0x7a3c0547
movsw word es:[edi], word [esi]
mov dword [ebp - 0x2a], 0x28579a27
mov edi, ecx
mov dword [ebp - 0x26], 0xa508d4cb
mov dword [ebp - 0x22], 0xf42f4491
mov dword [ebp - 0x1e], 0xeaf1ed9a
mov word [ebp - 0x1a], 0xf803
mov byte [ebp - 0x18], 0x51
mov dword [ebp - 0x16], 0x86988c95
mov word [ebp - 0x12], 0x62c7
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc520f1
mov esi, ecx
xor edx, edx
mov bl, byte [ebp + esi - 0x348]
push 9
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0xb0]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + edi - 0x348], bl
cmp esi, 0x100
jb 0xc52102
xor eax, eax
mov ebx, eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [ebp + edi - 0x348]
movzx edx, cl
lea eax, [edx + ebx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x348]
mov byte [ebp + edi - 0x348], al
mov byte [ebp + ebx - 0x348], cl
movzx eax, byte [ebp + edi - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + esi - 0x3c]
mov byte [ebp + esi - 0x528], al
inc esi
cmp esi, 0x2c
jb 0xc5214a
push 7
pop ecx
mov esi, str.SrchServiceObj
lea edi, [ebp - 0x30]
rep movsd dword es:[edi], dword [esi]
push 0x68
xor edx, edx
pop eax
movsw word es:[edi], word [esi]
mov ebx, edx
mov byte [ebp - 0x4fc], dl
cmp ax, word [ebp - 0x30]
jne 0xc521f8
mov ecx, edx
test ax, ax
je 0xc521f5
cmp word [ebp + ecx - 0x30], dx
je 0xc521f5
mov eax, 0xc730f0
push eax
push str.EventThrottleMaxEvents
mov edx, eax
mov ecx, eax
call fcn.00c50d2f
pop ecx
inc ebx
pop ecx
push 0
pop edx
lea ecx, [ebx + ebx]
movzx eax, word [ecx + 0xc730f0]
cmp ax, word [ebp + ecx - 0x30]
je 0xc521be
push 0x68
pop eax
push 0x43
mov byte [ebp - 0x15], al
lea edi, [ebp - 0x3dc]
pop eax
mov byte [ebp - 0x14], al
mov esi, 0xc6ff3c
push 0xe
pop eax
mov ecx, eax
mov dword [ebp - 0x3c], 0x8ac05b3f
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x38], 0xe87de041
mov eax, edx
mov dword [ebp - 0x34], 0xa3a7ce5b
mov dword [ebp - 0x30], 0x46c4ee72
movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x2c], 0x34ddf0c5
mov edi, edx
mov dword [ebp - 0x28], 0xd5abe0ae
mov dword [ebp - 0x24], 0x2bde38d
mov dword [ebp - 0x20], 0xedf32a70
mov dword [ebp - 0x1c], 0x59738364
mov word [ebp - 0x18], 0xe082
mov byte [ebp - 0x16], 0x93
mov word [ebp - 0x13], 0x4b90
mov byte [ebp - 0x11], 0xb1
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc5226b
mov esi, edx
xor edx, edx
mov bl, byte [ebp + esi - 0x348]
push 0x38
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0x3dc]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + edi - 0x348], bl
cmp esi, 0x100
jb 0xc5227c
xor eax, eax
mov ebx, eax
mov edi, eax
mov esi, eax
mov eax, dword [ebp - 0xc]
or eax, 0x4c2859af
mov dword [ebp - 8], eax
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [ebp + edi - 0x348]
movzx edx, cl
lea eax, [edx + ebx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x348]
mov byte [ebp + edi - 0x348], al
mov byte [ebp + ebx - 0x348], cl
movzx eax, byte [ebp + edi - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + esi - 0x3c]
mov byte [ebp + esi - 0x588], al
inc esi
cmp esi, 0x2c
jb 0xc522cf
push 0xe
pop ecx
mov esi, str.onecoreuap_base_appmodel_searchcommonutilscrchash.cxx
mov byte [ebp - 0x32], cl
lea edi, [ebp - 0x3dc]
mov dword [ebp - 0x3c], 0x48214222
rep movsd dword es:[edi], dword [esi]
push 0xd
pop eax
push 0x1a
mov byte [ebp - 0x31], al
xor edx, edx
pop eax
mov byte [ebp - 0x14], al
push 0x68
pop eax
movsb byte es:[edi], byte [esi]
mov byte [ebp - 0x12], al
mov edi, edx
mov byte [ebp - 0x55c], dl
mov eax, edx
mov dword [ebp - 0x38], 0x914f669c
mov word [ebp - 0x34], 0xbf57
mov dword [ebp - 0x30], 0x4c769464
mov dword [ebp - 0x2c], 0xfab94aea
mov dword [ebp - 0x28], 0x3e668d4d
mov dword [ebp - 0x24], 0x58fd9e3c
mov dword [ebp - 0x20], 0x2fb0922b
mov dword [ebp - 0x1c], 0x408dcf50
mov dword [ebp - 0x18], 0x6d9abd45
mov byte [ebp - 0x13], 6
mov byte [ebp - 0x11], 0x5a
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc5239e
mov esi, edx
xor edx, edx
mov bl, byte [ebp + esi - 0x348]
push 0x38
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0x3dc]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + edi - 0x348], bl
cmp esi, 0x100
jb 0xc523af
xor eax, eax
mov ebx, eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
sub dword [ebp - 0xc], 0x1c030df1
movzx edi, al
mov cl, byte [ebp + edi - 0x348]
movzx edx, cl
lea eax, [edx + ebx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x348]
mov byte [ebp + edi - 0x348], al
mov byte [ebp + ebx - 0x348], cl
movzx eax, byte [ebp + edi - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + esi - 0x3c]
mov byte [ebp + esi - 0x5b8], al
inc esi
cmp esi, 0x2c
jb 0xc523f7
mov esi, 0xc6f258
mov dword [ebp - 0x3c], 0xeacf9bf0
lea edi, [ebp - 0xb0]
mov dword [ebp - 0x38], 0xf0a920dc
push 0xb
xor ebx, ebx
mov dword [ebp - 0x34], 0x9081c22b
movsd dword es:[edi], dword [esi]
pop eax
mov byte [ebp - 0x1d], al
mov eax, ebx
mov byte [ebp - 0x58c], bl
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x30], 0x143196a7
mov dword [ebp - 0x2c], 0xc7593574
mov dword [ebp - 0x28], 0x1cf29ec9
movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x24], 0x25c59e4e
mov edi, ebx
mov word [ebp - 0x20], 0xe8cb
mov byte [ebp - 0x1e], 0xd7
mov dword [ebp - 0x1c], 0x4fe0e1c5
mov dword [ebp - 0x18], 0xaf75adad
mov dword [ebp - 0x14], 0x57d2d21b
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc524be
mov esi, ebx
mov dl, byte [ebp + esi - 0x348]
mov eax, esi
and eax, 7
movzx ecx, dl
movzx eax, byte [ebp + eax - 0xb0]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + edi - 0x348], dl
cmp esi, 0x100
jb 0xc524cf
xor eax, eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
and dword [ebp - 8], 0xc4dcab2c
movzx edi, al
mov cl, byte [ebp + edi - 0x348]
movzx edx, cl
lea eax, [edx + ebx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x348]
mov byte [ebp + edi - 0x348], al
mov byte [ebp + ebx - 0x348], cl
movzx eax, byte [ebp + edi - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + esi - 0x3c]
mov byte [ebp + esi - 0x44c], al
inc esi
cmp esi, 0x2c
jb 0xc52511
mov ecx, dword [ebp - 8]
lea edi, [ebp - 0xb4]
mov esi, 0xc707d8
mov word [ebp - 0x3c], 0x860
xor edx, edx
mov dword [ebp - 0x39], 0xcb6d72e1
push 0x38
pop eax
movsd dword es:[edi], dword [esi]
xor ecx, 0x98386308
mov byte [ebp - 0x3a], al
mov eax, edx
mov byte [ebp - 0x420], dl
mov dword [ebp - 0x35], 0xbad59979
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x31], 0x894b08ee
mov dword [ebp - 0x2d], 0xcfeca8ab
mov dword [ebp - 0x29], 0xf67e9fe3
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x25], 0xba792e44
mov dword [ebp - 0x21], 0x3382cecf
mov dword [ebp - 0x1d], 0x4ea54eb8
movsw word es:[edi], word [esi]
mov dword [ebp - 0x19], 0x1b5fe95c
mov dword [ebp - 0x15], 0x8ac5366f
mov byte [ebp - 0x11], 0xe1
movsb byte es:[edi], byte [esi]
mov dword [ebp - 8], ecx
mov edi, edx
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc525e7
imul eax, ecx, 0x447cf8b3
mov esi, edx
mov dword [ebp - 0x6c], eax
push 0xe
xor edx, edx
mov bl, byte [ebp + esi - 0x348]
pop ecx
mov eax, esi
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0xb4]
add eax, edi
mov edi, str.EventThrottleMaxEvents
add ecx, eax
movzx eax, cl
mov dword [ebp - 0xbc], eax
call fcn.00c50548
inc edi
cmp byte [edi], 0
jne 0xc5262e
mov edi, dword [ebp - 0xbc]
mov al, byte [ebp + edi - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + edi - 0x348], bl
cmp esi, 0x100
jb 0xc52601
mov esi, 0xc6f51c
lea edi, [ebp - 0xb0]
xor eax, eax
mov dword [ebp - 0xc], eax
mov ebx, eax
mov dword [ebp - 0x70], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, eax
mov al, byte [0xc7858c]
cmp al, byte [ebp - 0xb0]
jne 0xc526ba
test al, al
je 0xc526ba
cmp byte [ebp + esi - 0xb0], 0
je 0xc526ba
mov eax, 0xc730f0
push eax
push 0xc7858c
mov edx, eax
mov ecx, eax
call fcn.00c50d2f
mov al, byte [esi + 0xc7858d]
inc esi
pop ecx
pop ecx
cmp al, byte [ebp + esi - 0xb0]
je 0xc52686
movzx eax, byte [ebp + esi - 0xb0]
movzx ecx, byte [esi + 0xc7858c]
mov esi, dword [ebp - 8]
sub ecx, eax
cmp ecx, 0x20fe
jae 0xc526f2
mov eax, esi
mov edx, esi
or eax, 0xd09d985a
mov ecx, str.EventThrottleMaxEvents
push esi
push esi
mov dword [ebp - 0x6c], eax
call fcn.00c50634
pop ecx
pop ecx
jmp 0xc52700
add esi, 0xce87e07
mov dword [ebp - 8], esi
call fcn.00c50972
lea eax, [ebx + 1]
mov edi, esi
movzx eax, al
mov esi, str.EventThrottleMaxEvents
mov dword [ebp - 0xa4], eax
mov al, byte [ebp + eax - 0x348]
movzx ebx, al
mov byte [ebp - 1], al
mov eax, dword [ebp - 0xc]
add eax, ebx
mov dword [ebp - 0xbc], ebx
mov ebx, dword [ebp - 8]
or edi, 0xe94e3ecf
movzx eax, al
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x6c]
push ebx
push eax
mov edx, ebx
mov ecx, 0xc7858c
call fcn.00c50634
inc esi
mov eax, edi
pop ecx
pop ecx
mov dword [str._b_], eax
cmp byte [esi], 0
jne 0xc5273d
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0xa4]
mov ebx, edx
push 0
mov dword [ebp - 0x6c], edi
mov al, byte [ebp + ecx - 0x348]
mov byte [ebp + edx - 0x348], al
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x348], al
movzx eax, byte [ebp + edx - 0x348]
add eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x70]
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + ecx - 0x3c]
mov byte [ebp + ecx - 0x3d0], al
inc ecx
mov dword [ebp - 0x70], ecx
pop eax
cmp ecx, 0x2c
jb 0xc52677
xor ecx, ecx
lea eax, [edi + 0x3d7a96f5]
push ecx
push ecx
push ecx
xor ebx, ebx
mov byte [ebp - 0x3a4], cl
inc ebx
mov dword [0xc78618], eax
push ebx
push ecx
push 5
lea edx, [ebp - 0x400]
pop ecx
call fcn.00c4ba1b
call eax
mov dword [ebp - 0xc], eax
test eax, eax
jne 0xc527ef
mov eax, ebx
jmp 0xc53559
mov al, byte [0xc7858c]
lea edi, [ebp - 0xb0]
mov esi, str.ntdll.dll
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp al, byte [ebp - 0xb0]
jne 0xc52847
mov edi, dword [0xc78618]
xor ecx, ecx
mov esi, ecx
test al, al
je 0xc52847
cmp byte [ebp + esi - 0xb0], 0
je 0xc52847
mov edx, dword [str._b_]
mov ecx, str.EventThrottleMaxEvents
push edi
push edi
call fcn.00c50634
mov al, byte [esi + 0xc7858d]
inc esi
pop ecx
pop ecx
cmp al, byte [ebp + esi - 0xb0]
je 0xc52815
mov edi, dword [ebp - 0xc4]
mov ecx, edi
call fcn.00c4d317
mov ecx, 0x800
mov esi, eax
call fcn.00c4b9d3
push esi
cmp esi, 0x28
mov dword [ebp - 0x70], eax
mov esi, dword [ebp + 0x14]
mov edx, edi
mov ecx, esi
jbe 0xc52886
call fcn.00c4d11c
pop ecx
mov ecx, esi
call fcn.00c4d309
mov edx, eax
call fcn.00c4a289
jmp 0xc5288c
call fcn.00c4d11c
pop ecx
lea edx, [ebp - 0xbe]
mov ecx, esi
call fcn.00c4d470
lea ecx, [ebp - 0x41c]
mov dword [ebp - 8], eax
call fcn.00c4d02f
mov esi, eax
xor ecx, ecx
mov edx, esi
mov dword [ebp - 0x6c], esi
call fcn.00c4d470
mov ecx, esi
mov dword [ebp - 0xa4], eax
call fcn.00c4d309
push eax
xor ebx, ebx
push ebx
push esi
call fcn.00c4cf49
mov esi, dword [str._b_]
add esp, 0xc
mov edi, ebx
lea eax, [esi - 0x1abc8845]
mov dword [ebp - 0xc4], eax
mov dword [0xc78618], eax
push ecx
mov edx, esi
mov ecx, esi
call fcn.00c50c5b
inc edi
pop ecx
cmp word [edi*2 + 0xc730f0], bx
jne 0xc528e8
call fcn.00c50429
mov esi, dword [ebp - 0x34c]
mov ebx, dword [ebp - 0x70]
cmp esi, edi
jae 0xc52937
mov eax, dword [ebp - 0xc4]
and eax, 0x8fcbdcc0
mov dword [str._b_], eax
cmp esi, 0xf81
jne 0xc52932
mov ecx, str.EventThrottleMaxEvents
call fcn.00c5022d
inc esi
cmp esi, edi
jb 0xc52920
mov ecx, dword [ebp - 0x6c]
call fcn.00c4ba07
mov ecx, dword [ebp - 0xa4]
call fcn.00c4d5c1
mov edi, dword [ebp - 8]
mov esi, eax
mov ecx, edi
call fcn.00c4d309
push eax
mov edx, edi
mov ecx, ebx
call fcn.00c4d13f
xor eax, eax
mov dword [esp], 0x208
push eax
push dword [ebp + 0x14]
call fcn.00c4cf49
mov ecx, edi
call fcn.00c4d309
push eax
xor eax, eax
push eax
push edi
call fcn.00c4cf49
mov ecx, dword [ebp - 0xa4]
call fcn.00c4d309
push eax
xor eax, eax
push eax
push ecx
call fcn.00c4cf49
mov eax, dword [str._b_]
lea edx, [ebp - 0x498]
add esp, 0x24
xor eax, 0x63aa67ee
mov dword [0xc78618], eax
xor eax, eax
push eax
push eax
push 3
push eax
push eax
push esi
push ebx
push dword [ebp - 0xc]
push 5
pop ecx
call fcn.00c4ba1b
call eax
mov dword [ebp - 8], eax
test eax, eax
jne 0xc52b1b
push 0x38
pop eax
push 0x68
mov byte [ebp - 0x5b], al
lea edi, [ebp - 0x2c]
pop eax
push 6
pop ecx
mov esi, 0xc704a4
mov byte [ebp - 0x45], al
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
mov dword [ebp - 0x68], 0xde8196a1
mov dword [ebp - 0x64], 0xb7169847
mov eax, ecx
mov dword [ebp - 0x60], 0xfecb7760
movsw word es:[edi], word [esi]
mov byte [ebp - 0x5c], 0xa0
mov dword [ebp - 0x5a], 0x1c62dcea
mov dword [ebp - 0x56], 0x8bccb967
movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x52], 0x5308695b
mov edi, ecx
mov dword [ebp - 0x4e], 0xe2ada3be
mov dword [ebp - 0x4a], 0x773b3a7e
mov byte [ebp - 0x46], 0x27
mov dword [ebp - 0x44], 0x5152fe25
mov dword [ebp - 0x40], 0x2d16c229
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc52a42
mov esi, ecx
xor edx, edx
mov bl, byte [ebp + esi - 0x348]
push 0x1a
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0x2c]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + edi - 0x348], bl
cmp esi, 0x100
jb 0xc52a53
xor eax, eax
mov ebx, eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [ebp + edi - 0x348]
movzx edx, cl
lea eax, [edx + ebx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x348]
mov byte [ebp + edi - 0x348], al
mov byte [ebp + ebx - 0x348], cl
movzx eax, byte [ebp + edi - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + esi - 0x68]
mov byte [ebp + esi - 0x3c], al
inc esi
cmp esi, 0x2c
jb 0xc52a98
push dword [ebp - 0xc]
xor ebx, ebx
lea edx, [ebp - 0x3c]
push 5
pop ecx
mov byte [ebp - 0x10], bl
call fcn.00c4ba1b
call eax
mov esi, dword [ebp - 0x70]
push 0x800
push ebx
push esi
call fcn.00c4cf49
add esp, 0xc
mov ecx, esi
call fcn.00c4ba07
xor eax, eax
inc eax
jmp 0xc53559
push 0x800
xor eax, eax
push eax
push ebx
call fcn.00c4cf49
add esp, 0xc
mov ecx, ebx
call fcn.00c4ba07
mov ecx, dword [ebp - 0xc8]
call fcn.00c4d05e
mov ecx, dword [ebp + 8]
mov edi, eax
call fcn.00c4d05e
mov esi, eax
lea edx, [ebp - 0x4c8]
xor eax, eax
push eax
push 0x800000
push eax
push eax
push eax
push esi
push edi
push dword [ebp - 8]
push 5
pop ecx
call fcn.00c4ba1b
call eax
mov ebx, eax
mov ecx, edi
mov dword [ebp - 0x70], ebx
call fcn.00c4d317
push eax
xor eax, eax
push eax
push edi
call fcn.00c4cf49
mov ecx, esi
call fcn.00c4d317
push eax
xor eax, eax
push eax
push esi
call fcn.00c4cf49
add esp, 0x18
mov ecx, edi
call fcn.00c4ba07
mov ecx, esi
call fcn.00c4ba07
test ebx, ebx
jne 0xc52e2d
mov esi, 0xc72fdc
mov word [ebp - 0x68], 0x3711
lea edi, [ebp - 0xb4]
mov byte [ebp - 0x66], 0xe8
push 0x38
pop edx
movsd dword es:[edi], dword [esi]
xor ecx, ecx
push 0x68
pop eax
mov byte [ebp - 0x5d], al
movsd dword es:[edi], dword [esi]
push 0x1e
pop eax
mov byte [ebp - 0x49], al
mov eax, ecx
movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x65], dl
mov dword [ebp - 0x64], 0x292816ac
mov word [ebp - 0x60], 0xc6b
movsw word es:[edi], word [esi]
mov byte [ebp - 0x5e], 0x47
mov edi, ecx
mov dword [ebp - 0x5c], 0x80572c51
mov dword [ebp - 0x58], 0x4779f519
mov dword [ebp - 0x54], 0xb599d28a
mov dword [ebp - 0x50], 0xa2d700e2
mov word [ebp - 0x4c], 0x3f30
mov byte [ebp - 0x4a], 0xe7
mov dword [ebp - 0x48], 0x701947a1
mov dword [ebp - 0x44], 0x15ce191d
mov byte [ebp - 0x40], 0x46
mov byte [ebp - 0x3f], dl
mov word [ebp - 0x3e], 0xff14
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc52c2e
mov esi, ecx
xor edx, edx
mov bl, byte [ebp + esi - 0x348]
push 0xd
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0xb4]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + edi - 0x348], bl
cmp esi, 0x100
jb 0xc52c3f
xor eax, eax
mov ebx, eax
mov edi, eax
mov esi, eax
mov eax, dword [str._b_]
xor eax, 0xee93f180
mov dword [0xc78618], eax
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [ebp + edi - 0x348]
movzx edx, cl
lea eax, [edx + ebx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x348]
mov byte [ebp + edi - 0x348], al
mov byte [ebp + ebx - 0x348], cl
movzx eax, byte [ebp + edi - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + esi - 0x68]
mov byte [ebp + esi - 0x3c], al
inc esi
cmp esi, 0x2c
jb 0xc52c96
mov esi, 0xc6f7f0
mov dword [ebp - 0x68], 0x451036d3
lea edi, [ebp - 0xb8]
mov dword [ebp - 0x64], 0x69748403
push 9
xor ecx, ecx
mov dword [ebp - 0x60], 0x7ee03d4f
movsd dword es:[edi], dword [esi]
pop eax
mov byte [ebp - 0x49], al
mov eax, ecx
mov byte [ebp - 0x10], cl
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x5c], 0xe0d78bf8
mov dword [ebp - 0x58], 0x9a2a884e
mov dword [ebp - 0x54], 0xc19176f9
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x50], 0xd3b0aeb5
mov word [ebp - 0x4c], 0x4980
mov byte [ebp - 0x4a], pe_nt_image_headers32
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x48], 0x765de62d
mov dword [ebp - 0x44], 0x88b825c4
mov dword [ebp - 0x40], 0x8f6f03c3
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov edi, ecx
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc52d54
mov esi, ecx
xor edx, edx
mov bl, byte [ebp + esi - 0x348]
push 0x12
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0xb8]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + edi - 0x348], bl
cmp esi, 0x100
jb 0xc52d65
xor eax, eax
mov ebx, eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [ebp + edi - 0x348]
movzx edx, cl
lea eax, [ebx + edx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x348]
mov byte [ebp + edi - 0x348], al
mov byte [ebp + ebx - 0x348], cl
movzx eax, byte [ebp + edi - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + esi - 0x68]
mov byte [ebp + esi - 0x37c], al
inc esi
cmp esi, 0x2c
jb 0xc52dad
push dword [ebp - 8]
xor eax, eax
lea edx, [ebp - 0x3c]
push 5
pop ecx
mov byte [ebp - 0x350], al
call fcn.00c4ba1b
call eax
push dword [ebp - 0xc]
lea edx, [ebp - 0x37c]
push 5
pop ecx
call fcn.00c4ba1b
call eax
jmp 0xc52b13
lea eax, [ebp - 0x34c]
mov dword [ebp - 0x34c], 4
push eax
lea eax, [ebp - 0xbc]
push eax
push 0x1f
push ebx
push 5
lea edx, [ebp - 0x4f8]
pop ecx
call fcn.00c4ba1b
call eax
test eax, eax
je 0xc53021
push 0x12
pop eax
push 0x43
mov esi, 0xc7254c
mov byte [ebp - 0x5a], al
pop eax
lea edi, [ebp - 0xb0]
mov byte [ebp - 0x57], al
push 0x13
movsd dword es:[edi], dword [esi]
xor ecx, ecx
pop eax
mov byte [ebp - 0x4f], al
push 0x68
movsd dword es:[edi], dword [esi]
pop eax
mov byte [ebp - 0x40], al
mov eax, ecx
mov dword [ebp - 0x68], 0xc26f06cb
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x64], 0xd1e39318
mov edi, ecx
mov dword [ebp - 0x60], 0x167e4f50
mov word [ebp - 0x5c], 0x9930
mov word [ebp - 0x59], 0xb24b
mov dword [ebp - 0x56], 0x1aa97c0
mov word [ebp - 0x52], 0x4f8f
mov byte [ebp - 0x50], 0x83
mov dword [ebp - 0x4e], 0x5f9fc418
mov dword [ebp - 0x4a], 0xc6d9d92
mov dword [ebp - 0x46], 0x53d698c4
mov word [ebp - 0x42], 0xd45c
mov word [ebp - 0x3f], 0x1904
mov byte [ebp - 0x3d], 0x6c
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc52ee3
mov esi, ecx
xor edx, edx
mov bl, byte [ebp + esi - 0x348]
push 0xb
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0xb0]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + edi - 0x348], bl
cmp esi, 0x100
jb 0xc52ef4
mov esi, dword [0xc78618]
xor eax, eax
xor esi, 0xe0951792
mov ebx, eax
mov dword [ebp - 0xc4], esi
mov edi, eax
mov esi, eax
lea eax, [ebx + 1]
movzx ebx, al
mov cl, byte [ebp + ebx - 0x348]
movzx edx, cl
lea eax, [esi + edx]
movzx esi, al
mov al, byte [ebp + esi - 0x348]
mov byte [ebp + ebx - 0x348], al
mov byte [ebp + esi - 0x348], cl
movzx eax, byte [ebp + ebx - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + edi - 0x68]
mov byte [ebp + edi - 0x37c], al
inc edi
cmp edi, 0x2c
jb 0xc52f4e
mov esi, dword [ebp - 0xc4]
xor ebx, ebx
mov edi, ebx
cmp byte [0xc7858c], bl
je 0xc52fe4
call fcn.00c50acc
and esi, 0x4d6807b3
inc edi
cmp byte [edi + 0xc7858c], bl
jne 0xc52fb0
mov dword [str._b_], esi
cmp edi, 0x39e
jbe 0xc52fe4
lea eax, [esi + 0x1e8a5a78]
mov dword [0xc78618], eax
call fcn.00c504eb
jmp 0xc52ff3
mov eax, dword [0xc78618]
and eax, 0x6fc5aed0
mov dword [str._b_], eax
push 4
lea eax, [ebp - 0xbc]
mov byte [ebp - 0x350], bl
push eax
push 0x1f
push dword [ebp - 0x70]
lea edx, [ebp - 0x37c]
mov dword [ebp - 0xbc], 0x13380
push 5
pop ecx
call fcn.00c4ba1b
call eax
lea ecx, [ebp - 0x73c]
call fcn.00c4d05e
mov ebx, eax
lea edx, [ebp - 0x398]
xor ecx, ecx
mov dword [ebp - 0xc8], ebx
push ebx
inc ecx
call fcn.00c4ba1b
call eax
push dword [ebp + 0xc]
xor ecx, ecx
lea edx, [ebp - 0x8c]
inc ecx
mov esi, eax
call fcn.00c4ba1b
call eax
push eax
push dword [ebp + 0xc]
lea edx, [ebp - 0x528]
push esi
mov esi, dword [ebp - 0x70]
push ebx
push esi
push 5
pop ecx
call fcn.00c4ba1b
call eax
test eax, eax
jne 0xc534dd
mov esi, 0xc707d8
mov word [ebp - 0x68], 0x860
lea edi, [ebp - 0xb4]
mov dword [ebp - 0x65], 0xcb6d72e1
push 0x38
pop eax
movsd dword es:[edi], dword [esi]
xor ecx, ecx
mov byte [ebp - 0x66], al
mov eax, ecx
mov dword [ebp - 0x61], 0xbad59979
mov dword [ebp - 0x5d], 0x894b08ee
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x59], 0xcfeca8ab
mov dword [ebp - 0x55], 0xf67e9fe3
mov dword [ebp - 0x51], 0xba792e44
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x4d], 0x3382cecf
mov dword [ebp - 0x49], 0x4ea54eb8
mov dword [ebp - 0x45], 0x1b5fe95c
movsw word es:[edi], word [esi]
mov dword [ebp - 0x41], 0x8ac5366f
mov byte [ebp - 0x3d], 0xe1
movsb byte es:[edi], byte [esi]
mov edi, ecx
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc530e9
mov esi, ecx
xor edx, edx
mov bl, byte [ebp + esi - 0x348]
push 0xe
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0xb4]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + edi - 0x348], bl
cmp esi, 0x100
jb 0xc530fa
mov ebx, dword [0xc78618]
xor eax, eax
mov dword [ebp - 0x6c], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
and ebx, 0x78e55a2e
movzx edi, al
mov eax, dword [ebp - 0x6c]
mov cl, byte [ebp + edi - 0x348]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 0x6c], eax
mov al, byte [ebp + eax - 0x348]
mov byte [ebp + edi - 0x348], al
mov eax, dword [ebp - 0x6c]
mov byte [ebp + eax - 0x348], cl
movzx eax, byte [ebp + edi - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + esi - 0x68]
mov byte [ebp + esi - 0x37c], al
inc esi
cmp esi, 0x2c
jb 0xc53149
push 0x68
pop ecx
push 5
mov byte [ebp - 0x64], cl
lea edi, [ebp - 0x24]
mov byte [ebp - 0x4c], cl
mov esi, 0xc72fec
pop ecx
rep movsd dword es:[edi], dword [esi]
push 5
pop ecx
mov esi, 0xc73000
mov dword [0xc78618], ebx
lea edi, [ebp - 0xb8]
mov dword [ebp - 0x68], 0x54f5efb3
rep movsd dword es:[edi], dword [esi]
xor eax, eax
mov dword [ebp - 0x63], 0x3c8f2266
push 0x45
pop ecx
cmp byte [ebp - 0xb8], cl
mov byte [ebp - 0x350], al
mov dword [ebp - 0x5f], 0xd871584b
mov dword [ebp - 0x5b], 0xf94e2fb0
mov dword [ebp - 0x57], 0x1118a511
mov dword [ebp - 0x53], 0x13ede4e
mov word [ebp - 0x4f], 0xa07c
mov byte [ebp - 0x4d], 0xde
mov dword [ebp - 0x4b], 0x7688720a
mov dword [ebp - 0x47], 0x9cb261cf
mov dword [ebp - 0x43], 0xb024c32e
mov word [ebp - 0x3f], 0xc7da
mov byte [ebp - 0x3d], 0x85
mov dword [ebp - 0xa4], eax
jmp 0xc53263
test cl, cl
je 0xc53268
cmp byte [ebp + eax - 0xb8], 0
je 0xc53268
call fcn.00c50548
mov eax, dword [ebp - 0x6c]
inc eax
mov cl, byte [eax + str.EventThrottleMaxEvents]
cmp cl, byte [ebp + eax - 0xb8]
mov dword [ebp - 0x6c], eax
je 0xc5323f
call fcn.00c50acc
mov ecx, dword [ebp - 0x6c]
movzx eax, byte [ebp + ecx - 0xb8]
movzx ecx, byte [ecx + str.EventThrottleMaxEvents]
sub ecx, eax
cmp ecx, 0xae7
jae 0xc532a5
mov eax, ebx
mov edx, ebx
xor eax, 0xa0d4145a
mov ecx, 0xc7858c
push ebx
push eax
mov dword [str._b_], eax
call fcn.00c50634
jmp 0xc532c9
lea eax, [ebx + 0x184a1065]
xor eax, 0x93676e6d
mov dword [str._b_], eax
mov eax, 0xc730f0
push eax
push 0xc7858c
mov edx, eax
mov ecx, eax
call fcn.00c50d2f
pop ecx
pop ecx
xor ecx, ecx
mov edi, 0x100
mov eax, ecx
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, edi
jb 0xc532d4
mov esi, ecx
xor edx, edx
mov bl, byte [ebp + esi - 0x348]
push 0x13
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0x24]
add eax, dword [ebp - 0xa4]
add ecx, eax
movzx ecx, cl
mov dword [ebp - 0xa4], ecx
mov al, byte [ebp + ecx - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + ecx - 0x348], bl
cmp esi, edi
jb 0xc532e2
xor eax, eax
mov ebx, eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [ebp + edi - 0x348]
movzx edx, cl
lea eax, [edx + ebx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x348]
mov byte [ebp + edi - 0x348], al
mov byte [ebp + ebx - 0x348], cl
movzx eax, byte [ebp + edi - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + esi - 0x68]
mov byte [ebp + esi - 0x3c], al
inc esi
cmp esi, 0x2c
jb 0xc5332d
mov esi, 0xc73014
mov dword [ebp - 0x68], 0xc207559c
lea edi, [ebp - 0xb8]
mov dword [ebp - 0x64], 0xcb697cbb
push 0x38
pop eax
movsd dword es:[edi], dword [esi]
xor ebx, ebx
mov byte [ebp - 0x49], al
push 0xe
pop eax
movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x47], al
mov eax, ebx
mov byte [ebp - 0x10], bl
mov dword [ebp - 0x60], 0x22053cfa
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x5c], 0xfc8957ce
mov dword [ebp - 0x58], 0xef48af41
mov dword [ebp - 0x54], 0xc7fdbb4
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x50], 0xa0f0c63e
mov word [ebp - 0x4c], 0x3661
mov byte [ebp - 0x4a], 0x66
movsb byte es:[edi], byte [esi]
mov byte [ebp - 0x48], 0xb0
mov edi, ebx
mov dword [ebp - 0x46], 0x6f628187
mov dword [ebp - 0x42], 0x117edc01
mov word [ebp - 0x3e], 0xfc42
mov byte [ebp + eax - 0x348], al
inc eax
cmp eax, 0x100
jb 0xc533f2
mov esi, ebx
mov dl, byte [ebp + esi - 0x348]
mov eax, esi
push 0xf
pop ecx
and eax, ecx
movzx ecx, dl
movzx eax, byte [ebp + eax - 0xb8]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x348]
mov byte [ebp + esi - 0x348], al
inc esi
mov byte [ebp + edi - 0x348], dl
cmp esi, 0x100
jb 0xc53403
xor eax, eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [ebp + edi - 0x348]
movzx edx, cl
lea eax, [edx + ebx]
movzx ebx, al
mov al, byte [ebp + ebx - 0x348]
mov byte [ebp + edi - 0x348], al
mov byte [ebp + ebx - 0x348], cl
movzx eax, byte [ebp + edi - 0x348]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x348]
xor al, byte [ebp + esi - 0x68]
mov byte [ebp + esi - 0x558], al
inc esi
cmp esi, 0x2c
jb 0xc53447
push dword [ebp - 0x70]
xor eax, eax
lea edx, [ebp - 0x37c]
push 5
pop ecx
mov byte [ebp - 0x52c], al
call fcn.00c4ba1b
call eax
push dword [ebp - 8]
lea edx, [ebp - 0x3c]
push 5
pop ecx
call fcn.00c4ba1b
call eax
push dword [ebp - 0xc]
lea edx, [ebp - 0x558]
push 5
pop ecx
call fcn.00c4ba1b
call eax
mov ebx, dword [ebp - 0xc8]
jmp 0xc53538
push dword [ebp + 0x10]
lea edx, [ebp - 0x588]
push 0x80000
push dword [ebp + 0x14]
push esi
push 5
pop ecx
call fcn.00c4ba1b
call eax
push esi
push 5
lea edx, [ebp - 0x5b8]
pop ecx
call fcn.00c4ba1b
call eax
push dword [ebp - 8]
lea edx, [ebp - 0x44c]
push 5
pop ecx
call fcn.00c4ba1b
call eax
push dword [ebp - 0xc]
lea edx, [ebp - 0x3d0]
push 5
pop ecx
call fcn.00c4ba1b
call eax
xor eax, eax
mov dword [ebp - 0xa0], eax
mov ecx, ebx
call fcn.00c4d317
push eax
xor eax, eax
push eax
push ebx
call fcn.00c4cf49
add esp, 0xc
mov ecx, ebx
call fcn.00c4ba07
mov eax, dword [ebp - 0xa0]
pop edi
pop esi
pop ebx
leave
ret