Function at 0x469870
Capabilities:
Delete file
Encode data using base64
Get common file path
Get file attributes
Parse credit card information
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48401b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1758
call fcn.0047bda0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov ebx, dword [ebp + 8]
xor eax, eax
mov edi, ebx
or ecx, 0xffffffff
mov dword [ebp - 0x134], eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [ebp - 0x64], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x110], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0x2c], eax
lea edx, [ebp - 0x548]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 0x80
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x1c8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0x80
lea edx, [ebp - 0xa28]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea edi, [ebp - 0x548]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, 3
jge 0x469a27
mov eax, str.NORMAL
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov al, byte [ebp - 0x548]
cmp al, 0x5c
jne 0x469a47
mov eax, str.NORMAL
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor edx, edx
xor edi, edi
cmp al, 0x25
mov dword [ebp + 8], edx
jne 0x469a57
mov edi, 1
lea esi, [ecx - 2]
test esi, esi
jle 0x469a81
mov al, byte [ebp + esi - 0x548]
cmp al, 0x3a
jne 0x469a73
cmp byte [ebp + esi - 0x547], 0x5c
je 0x469a81
cmp edi, 1
jne 0x469a7c
cmp al, 0x5c
je 0x469a8a
dec esi
test esi, esi
jg 0x469a5e
cmp edi, 1
jne 0x469b33
sub ecx, esi
xor edx, edx
lea eax, [ecx - 1]
test eax, eax
jle 0x469ab2
mov ecx, eax
lea esi, [ebp + esi - 0x547]
mov edx, ecx
lea edi, [ebp - 0xfe8]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xfe8]
or ecx, 0xffffffff
xor eax, eax
mov byte [ebp + edx - 0xfe8], 0
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x548]
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [ebp - 0x1c8]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [ebp - 0x10e8]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x548]
push ecx
push edx
push 0x4966e0
push eax
call fcn.0047a8f8
lea edi, [ebp - 0x10e8]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x548]
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, dword [ebp + 8]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x469b7b
cmp esi, ecx
je 0x469b7b
test ecx, ecx
mov edx, ecx
jle 0x469b4c
cmp byte [ebp + edx - 0x548], 0x2e
je 0x469b4c
dec edx
test edx, edx
jg 0x469b3d
mov ecx, edx
xor eax, eax
sub ecx, esi
mov byte [ebp - 0x548], 0
add ecx, 5
test ecx, ecx
jle 0x469b73
lea esi, [esi + ebx - 1]
mov bl, byte [esi + eax]
mov byte [ebp + eax - 0x548], bl
inc eax
cmp eax, ecx
jl 0x469b64
mov byte [ebp + edx - 0x543], 0
lea edi, [ebp - 0x548]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x469b9e
cmp byte [ebp + ecx - 0x548], 0x2e
je 0x469b9e
dec ecx
test ecx, ecx
jg 0x469b8f
test edx, edx
mov byte [ebp + ecx - 0x544], 0
jne 0x469bc8
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x548]
push str.c:endpcache_newlsp.dll
push edx
call fcn.0047fde0
add esp, 8
test eax, eax
jne 0x469bfe
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x548]
push str.c:endpcachelockfile.dll
push eax
call fcn.0047fde0
add esp, 8
test eax, eax
jne 0x469c34
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x548]
push ecx
call fcn.004246a0
mov esi, eax
mov ebx, 1
add esp, 4
cmp esi, ebx
jge 0x469d4d
mov edx, dword [0x65cd64]
xor ebx, ebx
cmp edx, ebx
jle 0x469ceb
shl edx, 8
lea eax, [ebp - 0x548]
lea ecx, [edx + 0x62a3e4]
push eax
push ecx
call fcn.0047fde0
add esp, 8
test eax, eax
je 0x469d2f
mov edx, dword [0x65cd64]
lea edi, [ebp - 0x548]
mov esi, edx
or ecx, 0xffffffff
shl esi, 8
xor eax, eax
add esi, 0x62a4e4
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [ebp + 8], esi
mov eax, ecx
mov esi, edi
mov edi, dword [ebp + 8]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
inc edx
cmp edx, 0x64
mov dword [0x65cd64], edx
rep movsb byte es:[edi], byte [esi]
jne 0x469d2f
push 0x49fbc4
mov dword [0x65cd64], ebx
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, edx
lea edi, [ebp - 0x548]
shl esi, 8
or ecx, 0xffffffff
xor eax, eax
add esi, 0x62a4e4
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [ebp + 8], esi
mov eax, ecx
mov esi, edi
mov edi, dword [ebp + 8]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
inc edx
cmp edx, 0x64
mov dword [0x65cd64], edx
rep movsb byte es:[edi], byte [esi]
jne 0x469d2f
mov dword [0x65cd64], ebx
push 0x49fbc4
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x948]
lea edx, [ebp - 0x548]
push ecx
push edx
mov dword [ebp - 0x130], esi
call fcn.004290e0
movsx eax, ax
add esp, 8
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x24], eax
lea edx, [ebp - 0x48]
push ecx
lea eax, [ebp - 0x548]
xor edi, edi
push edx
push eax
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x78], edi
call dword [sym.imp.imagehlp.dll_MapFileAndCheckSumA]
test eax, eax
jne 0x469d9d
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x50]
cmp ecx, eax
je 0x469da2
mov edi, ebx
mov dword [ebp - 0x78], edi
mov eax, dword [ebp - 0x24]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
jge 0x469dda
cmp esi, 0x64000
jle 0x469e94
push 0x49fbb8
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp esi, 0x64000
jle 0x469e32
lea edx, [ebp - 0x948]
push str.Microsoft
push edx
call fcn.0047bec0
add esp, 8
test eax, eax
jne 0x469e32
lea eax, [ebp - 0x948]
lea ecx, [ebp - 0x10e8]
push eax
push 0x49fba0
push ecx
call fcn.0047a8f8
lea edx, [ebp - 0x10e8]
push edx
call fcn.00483565
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test edi, edi
jne 0x469e94
lea eax, [ebp - 0x948]
push str.Microsoft
push eax
call fcn.0047bec0
add esp, 8
test eax, eax
je 0x469e94
cmp dword [ebp - 0x24], 5
jle 0x469e94
cmp esi, 0x64000
jle 0x469e94
lea ecx, [ebp - 0x948]
lea edx, [ebp - 0x10e8]
push ecx
push 0x4a08d8
push edx
call fcn.0047a8f8
lea eax, [ebp - 0x10e8]
push eax
call fcn.00483565
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x948]
push str.Microsoft
push ecx
call fcn.0047bec0
add esp, 8
test eax, eax
je 0x469ee4
lea edx, [ebp - 0xa28]
lea eax, [ebp - 0x2c8]
push edx
push str._sAppPatch
push eax
mov dword [ebp - 0x20], ebx
call fcn.0047a8f8
lea ecx, [ebp - 0x2c8]
lea edx, [ebp - 0x548]
push ecx
push edx
call fcn.0047bec0
add esp, 0x14
test eax, eax
je 0x469ee4
inc dword [ebp - 0x24]
lea eax, [ebp - 0x548]
push str.WinRAR
push eax
call fcn.0047bec0
add esp, 8
test eax, eax
je 0x469f1a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x1c8]
lea edx, [ebp - 0x2c8]
push ecx
push str._smswsock.dll
push edx
call fcn.0047a8f8
lea eax, [ebp - 0x548]
lea ecx, [ebp - 0x2c8]
push eax
push ecx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x469f6a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x1c8]
lea eax, [ebp - 0x2c8]
push edx
push str._swsock32.dll
push eax
call fcn.0047a8f8
lea ecx, [ebp - 0x548]
lea edx, [ebp - 0x2c8]
push ecx
push edx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x469fba
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x1c8]
lea ecx, [ebp - 0x2c8]
push eax
push str._sws2_32.dll
push ecx
call fcn.0047a8f8
lea edx, [ebp - 0x548]
lea eax, [ebp - 0x2c8]
push edx
push eax
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a00a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x1c8]
lea edx, [ebp - 0x2c8]
push ecx
push str._sSETUPAPI.DLL
push edx
call fcn.0047a8f8
lea eax, [ebp - 0x548]
lea ecx, [ebp - 0x2c8]
push eax
push ecx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a05a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x1c8]
lea eax, [ebp - 0x2c8]
push edx
push str._sNETUI1.DLl
push eax
call fcn.0047a8f8
lea ecx, [ebp - 0x548]
lea edx, [ebp - 0x2c8]
push ecx
push edx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a0aa
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x1c8]
lea ecx, [ebp - 0x2c8]
push eax
push str._sMSI.DLL
push ecx
call fcn.0047a8f8
lea edx, [ebp - 0x548]
lea eax, [ebp - 0x2c8]
push edx
push eax
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a0fa
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x1c8]
lea edx, [ebp - 0x2c8]
push ecx
push str._sSHELL32.dll
push edx
call fcn.0047a8f8
lea eax, [ebp - 0x548]
lea ecx, [ebp - 0x2c8]
push eax
push ecx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a14a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x1c8]
lea eax, [ebp - 0x2c8]
push edx
push str._ses.dll
push eax
call fcn.0047a8f8
lea ecx, [ebp - 0x548]
lea edx, [ebp - 0x2c8]
push ecx
push edx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a19a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x1c8]
lea ecx, [ebp - 0x2c8]
push eax
push str._surlmon.dll
push ecx
call fcn.0047a8f8
lea edx, [ebp - 0x548]
lea eax, [ebp - 0x2c8]
push edx
push eax
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a1ea
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x1c8]
lea edx, [ebp - 0x2c8]
push ecx
push str._smshtml.dll
push edx
call fcn.0047a8f8
lea eax, [ebp - 0x548]
lea ecx, [ebp - 0x2c8]
push eax
push ecx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a23a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x1c8]
lea eax, [ebp - 0x2c8]
push edx
push str._smfc42u.dll
push eax
call fcn.0047a8f8
lea ecx, [ebp - 0x548]
lea edx, [ebp - 0x2c8]
push ecx
push edx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a28a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x1c8]
lea ecx, [ebp - 0x2c8]
push eax
push str._smprapi.dll
push ecx
call fcn.0047a8f8
lea edx, [ebp - 0x548]
lea eax, [ebp - 0x2c8]
push edx
push eax
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a2da
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x1c8]
lea edx, [ebp - 0x2c8]
push ecx
push str._scrypt32.dll
push edx
call fcn.0047a8f8
lea eax, [ebp - 0x548]
lea ecx, [ebp - 0x2c8]
push eax
push ecx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a32a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x1c8]
lea eax, [ebp - 0x2c8]
push edx
push str._scryptui.dll
push eax
call fcn.0047a8f8
lea ecx, [ebp - 0x548]
lea edx, [ebp - 0x2c8]
push ecx
push edx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a37a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x1c8]
lea ecx, [ebp - 0x2c8]
push eax
push str._s_shlwapi.dll
push ecx
call fcn.0047a8f8
lea edx, [ebp - 0x548]
lea eax, [ebp - 0x2c8]
push edx
push eax
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a3ca
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x1c8]
lea edx, [ebp - 0x2c8]
push ecx
push str._sinetcomm.dll
push edx
call fcn.0047a8f8
lea eax, [ebp - 0x548]
lea ecx, [ebp - 0x2c8]
push eax
push ecx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a41a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x1c8]
lea eax, [ebp - 0x2c8]
push edx
push str._s_rpcrt4.dll
push eax
call fcn.0047a8f8
lea ecx, [ebp - 0x548]
lea edx, [ebp - 0x2c8]
push ecx
push edx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a46a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x1c8]
lea ecx, [ebp - 0x2c8]
push eax
push str._scomdlg32.dll
push ecx
call fcn.0047a8f8
lea edx, [ebp - 0x548]
lea eax, [ebp - 0x2c8]
push edx
push eax
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a4ba
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x1c8]
lea edx, [ebp - 0x2c8]
push ecx
push str._s_advapi32.dll
push edx
call fcn.0047a8f8
lea eax, [ebp - 0x548]
lea ecx, [ebp - 0x2c8]
push eax
push ecx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a50a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x1c8]
lea eax, [ebp - 0x2c8]
push edx
push str._simagehlp.dll
push eax
call fcn.0047a8f8
lea ecx, [ebp - 0x548]
lea edx, [ebp - 0x2c8]
push ecx
push edx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a55a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x1c8]
lea ecx, [ebp - 0x2c8]
push eax
push str._skernel32.dll
push ecx
call fcn.0047a8f8
lea edx, [ebp - 0x548]
lea eax, [ebp - 0x2c8]
push edx
push eax
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a5aa
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x1c8]
lea edx, [ebp - 0x2c8]
push ecx
push str._slz32.dll
push edx
call fcn.0047a8f8
lea eax, [ebp - 0x548]
lea ecx, [ebp - 0x2c8]
push eax
push ecx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a5fa
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x1c8]
lea eax, [ebp - 0x2c8]
push edx
push str._solecli32.dll
push eax
call fcn.0047a8f8
lea ecx, [ebp - 0x548]
lea edx, [ebp - 0x2c8]
push ecx
push edx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a64a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x1c8]
lea ecx, [ebp - 0x2c8]
push eax
push str._soleaut32.dll
push ecx
call fcn.0047a8f8
lea edx, [ebp - 0x548]
lea eax, [ebp - 0x2c8]
push edx
push eax
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a69a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x1c8]
lea edx, [ebp - 0x2c8]
push ecx
push str._solecnv32.dll
push edx
call fcn.0047a8f8
lea eax, [ebp - 0x548]
lea ecx, [ebp - 0x2c8]
push eax
push ecx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a6ea
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x1c8]
lea eax, [ebp - 0x2c8]
push edx
push str._solesvr32.dll
push eax
call fcn.0047a8f8
lea ecx, [ebp - 0x548]
lea edx, [ebp - 0x2c8]
push ecx
push edx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a73a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x1c8]
lea ecx, [ebp - 0x2c8]
push eax
push str._solethk32.dll
push ecx
call fcn.0047a8f8
lea edx, [ebp - 0x548]
lea eax, [ebp - 0x2c8]
push edx
push eax
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a78a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x1c8]
lea edx, [ebp - 0x2c8]
push ecx
push str._sole32.dll
push edx
call fcn.0047a8f8
lea eax, [ebp - 0x548]
lea ecx, [ebp - 0x2c8]
push eax
push ecx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a7da
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x1c8]
lea eax, [ebp - 0x2c8]
push edx
push str._surl.dll
push eax
call fcn.0047a8f8
lea ecx, [ebp - 0x548]
lea edx, [ebp - 0x2c8]
push ecx
push edx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a82a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x1c8]
lea ecx, [ebp - 0x2c8]
push eax
push str._swininet.dll
push ecx
call fcn.0047a8f8
lea edx, [ebp - 0x548]
lea eax, [ebp - 0x2c8]
push edx
push eax
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a87a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x1c8]
lea edx, [ebp - 0x2c8]
push ecx
push str._swldap32.dll
push edx
call fcn.0047a8f8
lea eax, [ebp - 0x548]
lea ecx, [ebp - 0x2c8]
push eax
push ecx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a8ca
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x1c8]
lea eax, [ebp - 0x2c8]
push edx
push str._s_version.dll
push eax
call fcn.0047a8f8
lea ecx, [ebp - 0x548]
lea edx, [ebp - 0x2c8]
push ecx
push edx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a91a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x1c8]
lea ecx, [ebp - 0x2c8]
push eax
push str._suser32.dll
push ecx
call fcn.0047a8f8
lea edx, [ebp - 0x548]
lea eax, [ebp - 0x2c8]
push edx
push eax
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a96a
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x1c8]
lea edx, [ebp - 0x2c8]
push ecx
push str._sgdi32.dll
push edx
call fcn.0047a8f8
lea eax, [ebp - 0x548]
lea ecx, [ebp - 0x2c8]
push eax
push ecx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46a9ba
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x1c8]
lea eax, [ebp - 0x2c8]
push edx
push str._smsvbvm60.dll
push eax
call fcn.0047a8f8
lea ecx, [ebp - 0x548]
lea edx, [ebp - 0x2c8]
push ecx
push edx
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46aa0f
cmp dword [ebp - 0x20], ebx
jne 0x46aa0f
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edi, [ebp - 0x548]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x46aa43
lea esi, [ebp + ecx - 0x548]
mov dl, byte [esi]
cmp dl, 0x5c
mov byte [ebp + eax - 0x1468], dl
jne 0x46aa3d
cmp eax, 2
jge 0x46aa43
inc eax
dec esi
cmp eax, ecx
jl 0x46aa2a
sub ecx, eax
mov edx, ecx
test edx, edx
jle 0x46aa6a
mov ebx, ecx
lea esi, [ebp - 0x548]
lea edi, [ebp - 0xd68]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
mov ebx, 1
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor ecx, ecx
mov byte [ebp + edx - 0xd68], 0
test eax, eax
jle 0x46aa9d
lea esi, [ebp + edx - 0x547]
mov dl, byte [esi + ecx]
cmp dl, 0x5c
je 0x46aa90
mov byte [ebp + ecx - 0x1468], dl
jne 0x46aa98
mov byte [ebp + ecx - 0x1468], 0
inc ecx
cmp ecx, eax
jl 0x46aa7f
mov byte [ebp + eax - 0x1468], 0
mov al, byte [ebp - 0xd66]
cmp al, 0x5c
je 0x46aabd
mov byte [ebp - 0xd66], 0x5c
mov byte [ebp - 0xd65], 0
cmp byte [ebp - 0xd67], 0x3a
je 0x46ab82
lea edi, [ebp - 0xd68]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
mov dword [ebp + 8], ecx
jle 0x46aaf0
cmp byte [ebp + eax - 0xd68], 0x3a
je 0x46aaf0
inc eax
cmp eax, ecx
jl 0x46aae1
mov edx, ecx
sub edx, eax
lea edi, [edx + 1]
test edi, edi
jle 0x46ab20
mov ecx, edi
lea esi, [ebp + eax - 0xd69]
mov ebx, ecx
lea edi, [ebp - 0x1568]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
mov ebx, 1
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp + 8]
cmp eax, ecx
mov byte [ebp + edx - 0x1567], 0
jne 0x46ab59
lea eax, [ebp - 0x348]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea ecx, [ebp - 0x348]
lea edx, [ebp - 0x1568]
push ecx
push 0x48b2f4
push edx
call fcn.0047a8f8
add esp, 0xc
lea edi, [ebp - 0x1568]
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0xd68]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0xd66], 0x5c
je 0x46ab92
mov byte [ebp - 0xd66], 0x5c
lea ecx, [ebp - 0x548]
xor esi, esi
push ecx
mov dword [ebp - 0x108], esi
call fcn.00429f20
add esp, 4
cmp eax, ebx
je 0x46abcb
push 0x49f958
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [ebp - 0xd67], 0x3a
je 0x46abf2
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [ebp - 0xd66], 0x5c
je 0x46ac02
mov byte [ebp - 0xd66], 0x5c
lea edx, [ebp - 0x1c8]
push 0x80
push edx
mov dword [ebp - 0x34], esi
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea eax, [ebp - 0xa28]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea ecx, [ebp - 0x548]
push 0x100
lea edx, [ebp - 0x848]
push ecx
push edx
call fcn.0047b120
lea eax, [ebp - 0x1468]
push 0x40
lea ecx, [ebp - 0x9a8]
push eax
push ecx
call fcn.0047b120
lea edx, [ebp - 0xd68]
push edx
call fcn.004688e0
add esp, 0x1c
cmp eax, 2
jne 0x46acfc
lea eax, [ebp - 0x848]
push eax
call fcn.004299c0
add esp, 4
lea ecx, [ebp - 0x848]
push 0x80
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea edx, [ebp - 0x848]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x46accf
lea eax, [ebp - 0x848]
push eax
call fcn.00429f20
add esp, 4
cmp eax, ebx
jne 0x46accf
lea ecx, [ebp - 0x848]
push ecx
call fcn.00429e70
add esp, 4
lea edx, [ebp - 0x748]
mov edi, 0x49f4ec
jmp 0x46acda
lea edx, [ebp - 0x748]
mov edi, 0x49fd38
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x46d66b
cmp eax, ebx
jne 0x46ad4a
mov dword [ebp - 0x108], ebx
lea eax, [ebp - 0x548]
push eax
call fcn.00428d90
mov esi, eax
push 0x491c80
push esi
mov dword [ebp - 0x13c], esi
call fcn.0047fde0
add esp, 0xc
test eax, eax
jne 0x46ad84
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, esi
jne 0x46ad06
lea edx, [ebp - 0x548]
push str.KeyMask.dll
push edx
call fcn.0047bec0
add esp, 8
test eax, eax
je 0x46ad06
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x548]
push 0x80
lea edx, [ebp - 0xee8]
push ecx
push edx
call fcn.0047b120
lea eax, [ebp - 0x548]
push 0x80
lea ecx, [ebp - 0xde8]
push eax
push ecx
call fcn.0047b120
lea edi, [ebp - 0xa28]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea edi, [ebp - 0x1c8]
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov byte [ebp + edx - 0xee8], al
lea edx, [ebp - 0xa28]
mov byte [ebp + ecx - 0xde8], al
lea eax, [ebp - 0xee8]
push edx
push eax
call fcn.0047fde0
add esp, 0x20
test eax, eax
jne 0x46ae2f
push 0x491c80
push esi
mov dword [ebp - 0x34], ebx
call fcn.0047fde0
add esp, 8
test eax, eax
jne 0x46ae2f
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x1c8]
lea edx, [ebp - 0xde8]
push ecx
push edx
call fcn.0047fde0
add esp, 8
test eax, eax
jne 0x46ae7c
push 0x491c80
push esi
mov dword [ebp - 0x34], ebx
call fcn.0047fde0
add esp, 8
test eax, eax
jne 0x46ae7c
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x548]
push str.System32
push eax
call fcn.0047bec0
add esp, 8
test eax, eax
je 0x46aec7
push 0x491c80
push esi
mov dword [ebp - 0x34], ebx
call fcn.0047fde0
add esp, 8
test eax, eax
jne 0x46aec7
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x548]
push str.system32
push ecx
call fcn.0047bec0
add esp, 8
test eax, eax
je 0x46af12
push 0x491c80
push esi
mov dword [ebp - 0x34], ebx
call fcn.0047fde0
add esp, 8
test eax, eax
jne 0x46af12
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x548]
push str.system
push edx
call fcn.0047bec0
add esp, 8
test eax, eax
je 0x46af5d
push 0x491c80
push esi
mov dword [ebp - 0x34], ebx
call fcn.0047fde0
add esp, 8
test eax, eax
jne 0x46af5d
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0xa28]
lea ecx, [ebp - 0x10e8]
push eax
push str._s_fonts
push ecx
call fcn.0047a8f8
lea edx, [ebp - 0xd68]
lea eax, [ebp - 0x10e8]
push edx
push eax
call fcn.0047fde0
add esp, 0x14
test eax, eax
jne 0x46af95
mov dword [ebp - 0x100], ebx
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x46b016
cmp dword [ebp - 0x78], ebx
jne 0x46b016
lea ecx, [ebp - 0x1468]
push str.linkinfo.dll
push ecx
call fcn.0047fde0
add esp, 8
test eax, eax
jne 0x46b016
lea edx, [ebp - 0x848]
push 0x80
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [ebp - 0x848]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test eax, eax
jne 0x46accf
lea ecx, [ebp - 0x848]
push ecx
call fcn.00429f20
add esp, 4
cmp eax, ebx
jne 0x46accf
lea edx, [ebp - 0x848]
push edx
call fcn.00429e70
add esp, 4
lea edx, [ebp - 0x748]
mov edi, 0x49f4ec
jmp 0x46acda
xor edi, edi
push 0x62a450
mov dword [ebp - 4], 2
mov dword [ebp - 0x60], edi
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0x70], edi
mov dword [ebp + 8], edi
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0x74], edi
call fcn.00404650
add esp, 4
lea edx, [ebp - 0x548]
push 0x62a450
push edx
call fcn.004045b0
add esp, 8
cmp eax, edi
jne 0x46b098
push str.Load_file_faild_
mov ecx, 0x65cd80
call fcn.00479641
lea ecx, [ebp - 0x548]
push ecx
mov ecx, eax
call fcn.00479641
push 0xa
mov ecx, eax
call fcn.00479456
push 0x401430
mov ecx, eax
call fcn.00401410
mov esi, ebx
mov dword [ebp + 8], esi
jmp 0x46b7f4
mov edx, dword [0x62a458]
mov byte [ebp - 4], 3
push edx
call fcn.004046b0
add esp, 4
mov dword [ebp - 0x140], eax
mov eax, dword [0x62a458]
push eax
call fcn.004047a0
add esp, 4
cmp eax, edi
mov dword [ebp - 0x18], eax
jne 0x46b0f6
push str.Cant_get_ImportDesc:_PEInfo_Example
mov ecx, 0x65cd80
call fcn.00479641
push 0xa
mov ecx, eax
call fcn.00479456
push 0x401430
mov ecx, eax
call fcn.00401410
mov dword [ebp + 8], 2
jmp 0x46b7b6
mov dword [ebp - 0xe4], edi
cmp dword [eax + 0x10], edi
je 0x46b7b4
mov ecx, dword [ebp - 0x18]
mov eax, dword [0x62a458]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x140]
push edx
push eax
push ecx
call fcn.00404730
add esp, 0xc
mov edi, eax
mov eax, dword [ebp - 0x28]
inc eax
push 0x49b730
push edi
mov dword [ebp - 0x28], eax
call fcn.0047fde0
neg eax
sbb eax, eax
push str.user32.dll
inc eax
push edi
mov dword [ebp - 0x148], eax
call fcn.0047fde0
add esp, 0x10
neg eax
sbb eax, eax
inc eax
xor esi, esi
mov dword [ebp - 0x144], eax
cmp esi, 0x66
jge 0x46b209
lea edx, [esi + esi*2]
shl edx, 4
add edx, str.CreateRemoteThread
push edx
push edi
call fcn.0047bec0
add esp, 8
test eax, eax
je 0x46b203
cmp esi, 0xf
jle 0x46b192
cmp esi, 0x12
jge 0x46b192
mov dword [ebp - 0x9c], ebx
cmp esi, 0x1d
je 0x46b1a1
cmp esi, 0x1e
je 0x46b1a1
cmp esi, 0x39
jne 0x46b1a7
mov dword [ebp - 0x88], ebx
cmp esi, 0x1f
je 0x46b1b1
cmp esi, 0x20
jne 0x46b1b7
mov dword [ebp - 0x90], ebx
cmp esi, 0x21
je 0x46b1c1
cmp esi, 0x22
jne 0x46b1c7
mov dword [ebp - 0x98], ebx
cmp esi, 0x23
je 0x46b1d1
cmp esi, 0x24
jne 0x46b1d4
mov dword [ebp - 0x80], ebx
cmp esi, 0x2c
jne 0x46b1e5
mov dword [ebp - 0x94], ebx
inc esi
jmp 0x46b15b
cmp esi, 0x2d
je 0x46b200
cmp esi, 0x2e
jne 0x46b1fb
mov dword [ebp - 0x8c], ebx
inc esi
jmp 0x46b15b
cmp esi, 0x3d
jne 0x46b203
mov dword [ebp - 0x3c], ebx
inc esi
jmp 0x46b15b
mov eax, dword [0x62a458]
mov byte [ebp - 4], 4
push eax
mov dword [ebp - 0x138], 0
call fcn.004046b0
mov ecx, dword [0x62a458]
add esp, 4
mov esi, eax
push ecx
mov dword [ebp - 0x40], esi
call fcn.004047a0
mov ecx, dword [ebp - 0xe4]
add esp, 4
lea edx, [ecx + ecx*4]
lea ecx, [eax + edx*4]
mov eax, dword [eax + edx*4]
test eax, eax
jne 0x46b24f
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x6c], eax
push eax
mov eax, dword [0x62a458]
push eax
push esi
call fcn.00404730
add esp, 0xc
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x46b7b4
mov eax, dword [eax]
test eax, eax
je 0x46b77e
mov ecx, eax
shr ecx, 0x10
cmp ecx, 0x8000
jne 0x46b2d8
mov edi, 0x49b72c
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x968]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [ebp - 0xb68]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx]
and edx, 0xffff
push edx
push str.Ord:_08lX
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ebx, [ebp - 0xb68]
jmp 0x46b358
mov ecx, dword [0x62a458]
push eax
push ecx
push esi
call fcn.00404730
mov esi, eax
add esp, 0xc
test esi, esi
je 0x46b30f
xor edx, edx
lea eax, [ebp - 0x968]
mov dx, word [esi]
push edx
push str._04lX
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ebx, [esi + 2]
jmp 0x46b358
mov edi, 0x49b72c
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x968]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [ebp - 0xb48]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx]
push edx
push str.MemAddr:_08lX
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ebx, [ebp - 0xb48]
xor esi, esi
mov edi, 1
cmp esi, 0x66
jge 0x46b71a
lea ecx, [esi + esi*2]
shl ecx, 4
add ecx, str.CreateRemoteThread
push ecx
push ebx
call fcn.0047bec0
add esp, 8
test eax, eax
je 0x46b714
cmp esi, 0x45
jne 0x46b42d
lea edx, [ebp - 0x348]
push 0x80
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea eax, [ebp - 0x348]
lea ecx, [ebp - 0x1268]
push eax
push str._sMicrosoft.NETFramework
push ecx
call fcn.0047a8f8
lea edx, [ebp - 0x1268]
push edx
call fcn.0047c0d3
mov esi, eax
push str.c:endpcache
neg esi
sbb esi, esi
inc esi
call fcn.0047c0d3
add esp, 0x14
cmp esi, edi
jne 0x46b3f2
lea eax, [ebp - 0x948]
lea ecx, [ebp - 0xfe8]
push eax
push 0x49b6c8
push ecx
jmp 0x46b405
lea edx, [ebp - 0x948]
lea eax, [ebp - 0xfe8]
push edx
push 0x49b698
push eax
call fcn.0047a8f8
add esp, 0xc
lea ecx, [ebp - 0xfe8]
push ecx
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test esi, esi
jne 0x46b43a
mov dword [ebp - 0x4c], edi
inc esi
jmp 0x46b35f
cmp esi, edi
jne 0x46b447
mov dword [ebp - 0x68], edi
inc esi
jmp 0x46b35f
cmp esi, 2
je 0x46b714
cmp esi, 4
jne 0x46b461
mov dword [ebp - 0x124], edi
inc esi
jmp 0x46b35f
cmp esi, 5
jne 0x46b472
mov dword [ebp - 0x120], edi
inc esi
jmp 0x46b35f
cmp esi, 6
jne 0x46b483
mov dword [ebp - 0x110], edi
inc esi
jmp 0x46b35f
cmp esi, 7
jne 0x46b494
mov dword [ebp - 0xfc], edi
inc esi
jmp 0x46b35f
cmp esi, 8
jne 0x46b4a5
mov dword [ebp - 0xb0], edi
inc esi
jmp 0x46b35f
cmp esi, 9
jne 0x46b4b6
mov dword [ebp - 0xd4], edi
inc esi
jmp 0x46b35f
cmp esi, 0xa
jne 0x46b4c7
mov dword [ebp - 0xe8], edi
inc esi
jmp 0x46b35f
cmp esi, 0xb
jne 0x46b4d8
mov dword [ebp - 0xac], edi
inc esi
jmp 0x46b35f
jle 0x46b4e2
cmp esi, 0xf
jge 0x46b4e5
mov dword [ebp - 0x38], edi
cmp esi, 0xf
jne 0x46b4f3
mov dword [ebp - 0xec], edi
inc esi
jmp 0x46b35f
jle 0x46b500
cmp esi, 0x12
jge 0x46b500
mov dword [ebp - 0x9c], edi
cmp esi, 0x1b
jne 0x46b511
mov dword [ebp - 0x118], edi
inc esi
jmp 0x46b35f
cmp esi, 0x1c
jne 0x46b522
mov dword [ebp - 0x12c], edi
inc esi
jmp 0x46b35f
cmp esi, 0x1d
je 0x46b531
cmp esi, 0x1e
je 0x46b531
cmp esi, 0x39
jne 0x46b537
mov dword [ebp - 0x88], edi
cmp esi, 0x1f
je 0x46b541
cmp esi, 0x20
jne 0x46b547
mov dword [ebp - 0x90], edi
cmp esi, 0x21
je 0x46b551
cmp esi, 0x22
jne 0x46b557
mov dword [ebp - 0x98], edi
cmp esi, 0x23
je 0x46b561
cmp esi, 0x24
jne 0x46b564
mov dword [ebp - 0x80], edi
cmp esi, 0x25
je 0x46b56e
cmp esi, 0x26
jne 0x46b574
mov dword [ebp - 0xc4], edi
cmp esi, 0x27
jne 0x46b585
mov dword [ebp - 0xbc], edi
inc esi
jmp 0x46b35f
cmp esi, 0x28
jne 0x46b596
mov dword [ebp - 0xcc], edi
inc esi
jmp 0x46b35f
cmp esi, 0x29
jne 0x46b5a7
mov dword [ebp - 0x104], edi
inc esi
jmp 0x46b35f
cmp esi, 0x2c
jne 0x46b5b8
mov dword [ebp - 0x94], edi
inc esi
jmp 0x46b35f
cmp esi, 0x2d
jne 0x46b5c6
mov dword [ebp - 0x3c], edi
inc esi
jmp 0x46b35f
cmp esi, 0x2e
jne 0x46b5d7
mov dword [ebp - 0x8c], edi
inc esi
jmp 0x46b35f
cmp esi, 0x2f
jne 0x46b5e8
mov dword [ebp - 0x10c], edi
inc esi
jmp 0x46b35f
cmp esi, 0x30
jne 0x46b5f9
mov dword [ebp - 0xdc], edi
inc esi
jmp 0x46b35f
cmp esi, 0x31
jne 0x46b60a
mov dword [ebp - 0x11c], edi
inc esi
jmp 0x46b35f
cmp esi, 0x32
jne 0x46b61b
mov dword [ebp - 0xa4], edi
inc esi
jmp 0x46b35f
cmp esi, 0x34
jne 0x46b62c
mov dword [ebp - 0xb4], edi
inc esi
jmp 0x46b35f
cmp esi, 0x35
jne 0x46b63d
mov dword [ebp - 0xb8], edi
inc esi
jmp 0x46b35f
cmp esi, 0x36
jne 0x46b64e
mov dword [ebp - 0xc0], edi
inc esi
jmp 0x46b35f
cmp esi, 0x37
jne 0x46b663
mov dword [ebp - 0xc8], 0
inc esi
jmp 0x46b35f
cmp esi, 0x38
jne 0x46b674
mov dword [ebp - 0xd0], edi
inc esi
jmp 0x46b35f
cmp esi, 0x3a
je 0x46b683
cmp esi, 0x3b
je 0x46b683
cmp esi, 0x3c
jne 0x46b689
mov dword [ebp - 0xd8], edi
cmp esi, 0x3d
jne 0x46b697
mov dword [ebp - 0x3c], edi
inc esi
jmp 0x46b35f
cmp esi, 0x3e
jne 0x46b6a8
mov dword [ebp - 0xe0], edi
inc esi
jmp 0x46b35f
cmp esi, 0x3f
jne 0x46b6b9
mov dword [ebp - 0x84], edi
inc esi
jmp 0x46b35f
cmp esi, 0x40
jne 0x46b6c7
mov dword [ebp - 0x68], edi
inc esi
jmp 0x46b35f
cmp esi, 0x41
jne 0x46b6d8
mov dword [ebp - 0x114], edi
inc esi
jmp 0x46b35f
cmp esi, 0x46
je 0x46b6e7
cmp esi, 0x47
je 0x46b6e7
cmp esi, 0x48
jne 0x46b6ed
mov dword [ebp - 0x128], edi
cmp esi, 0x49
jne 0x46b6fe
mov dword [ebp - 0xf4], edi
inc esi
jmp 0x46b35f
cmp esi, 0x4a
jne 0x46b70c
inc esi
jmp 0x46b35f
mov ecx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x148]
inc ecx
cmp eax, edi
mov dword [ebp - 0x70], ecx
jne 0x46b72e
inc dword [ebp - 0x60]
cmp dword [ebp - 0x144], edi
jne 0x46b73c
inc dword [ebp - 0xa0]
cmp dword [ebp - 0x70], 0xc350
jg 0x46b77e
mov esi, dword [ebp - 0x138]
mov edx, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x1c]
mov eax, 4
inc esi
add edx, eax
add ecx, eax
mov dword [ebp - 0x138], esi
mov esi, dword [ebp - 0x40]
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x1c], ecx
mov eax, ecx
jmp 0x46b26d
mov ecx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0x18]
inc ecx
add eax, 0x14
mov dword [ebp - 4], 3
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0x18], eax
mov ebx, 1
xor edi, edi
jmp 0x46b0fc
xor edi, edi
mov edx, dword [0x62a458]
mov dword [ebp - 4], 2
push edx
mov byte [ebp - 4], 7
call fcn.004046d0
add esp, 4
cmp eax, edi
mov dword [ebp - 0x40], eax
jne 0x46b866
mov dword [ebp + 8], 6
mov edi, dword [ebp - 0x70]
mov esi, dword [ebp + 8]
mov dword [ebp - 4], 2
mov ebx, 1
mov edx, dword [0x62a458]
push edx
call fcn.00404680
add esp, 4
test eax, eax
jne 0x46b833
push str.Invalid_PE_Format_file_:
mov ecx, 0x65cd80
call fcn.00479641
push 0xa
mov ecx, eax
call fcn.00479456
push 0x401430
mov ecx, eax
call fcn.00401410
mov esi, 3
mov dword [ebp + 8], esi
push 0x62a450
call fcn.00404650
add esp, 4
cmp esi, ebx
jne 0x46b9d2
push 0x49b598
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x62a458]
push eax
call fcn.00404710
add esp, 4
xor ebx, ebx
mov edi, eax
mov dword [ebp - 0x6c], ebx
mov ecx, dword [ebp - 0x40]
cmp bx, word [ecx + 2]
jae 0x46b7e2
xor edx, edx
push str..asp
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x58], edx
mov byte [ebp - 0x54], dl
mov eax, dword [edi]
mov dword [ebp - 0x5c], eax
mov ecx, dword [edi + 4]
lea edx, [ebp - 0x5c]
mov dword [ebp - 0x58], ecx
push edx
call fcn.0047fde0
add esp, 8
mov esi, 1
test eax, eax
jne 0x46b8bb
mov dword [ebp - 0x30], esi
lea eax, [ebp - 0x5c]
push str..upx
push eax
call fcn.0047fde0
add esp, 8
test eax, eax
jne 0x46b8d3
mov dword [ebp - 0x30], esi
lea ecx, [ebp - 0x5c]
push str..upack
push ecx
call fcn.0047fde0
add esp, 8
test eax, eax
jne 0x46b8eb
mov dword [ebp - 0x30], esi
lea edx, [ebp - 0x5c]
push str..Pecompact
push edx
call fcn.0047fde0
add esp, 8
test eax, eax
jne 0x46b903
mov dword [ebp - 0x30], esi
lea eax, [ebp - 0x5c]
push str..aspack
push eax
call fcn.0047fde0
add esp, 8
test eax, eax
jne 0x46b91b
mov dword [ebp - 0x30], esi
lea ecx, [ebp - 0x5c]
push str..fsg
push ecx
call fcn.0047fde0
add esp, 8
test eax, eax
jne 0x46b933
mov dword [ebp - 0x30], esi
lea edx, [ebp - 0x5c]
push str.upx0
push edx
call fcn.0047fde0
add esp, 8
test eax, eax
jne 0x46b94b
mov dword [ebp - 0x30], esi
lea eax, [ebp - 0x5c]
push str.upx1
push eax
call fcn.0047fde0
add esp, 8
test eax, eax
jne 0x46b963
mov dword [ebp - 0x30], esi
lea ecx, [ebp - 0x5c]
push 0x48b7ec
push ecx
call fcn.0047bec0
add esp, 8
test eax, eax
jne 0x46b97b
inc dword [ebp - 0x74]
mov esi, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x6c]
inc esi
inc eax
cmp eax, 0x64
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x6c], eax
jg 0x46b7e2
add edi, 0x28
inc ebx
jmp 0x46b87b
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x18], edi
test esi, esi
mov dword [ebp - 0x1c], eax
je 0x46c0e7
cmp edi, ebx
jge 0x46c0e7
lea ecx, [ebp - 0xd68]
xor esi, esi
push ecx
mov dword [ebp - 0x28], esi
call fcn.0047c0d3
push 0x5585b20a
call fcn.004749bb
cmp esi, 2
jne 0x46c124
mov eax, dword [ebp - 0xa8]
test eax, eax
jle 0x46c124
test edi, edi
jne 0x46c124
mov eax, dword [ebp - 0x78]
test eax, eax
jne 0x46c124
cmp dword [ebp - 0x20], ebx
jne 0x46c124
push 0x4a0878
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0xac]
mov byte [ebp - 0x748], 0
cmp eax, ebx
jne 0x46c196
mov edi, 0x4a0864
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x24]
mov ecx, edx
and ecx, 3
cmp eax, ebx
rep movsb byte es:[edi], byte [esi]
jge 0x46c178
cmp dword [ebp - 0x130], 0x19000
jle 0x46c196
push 0x4a0850
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x128]
mov edx, dword [ebp - 0x60]
cmp eax, ebx
jne 0x46c1d5
mov ecx, dword [ebp - 0x24]
cmp ecx, ebx
jge 0x46c1b7
mov eax, dword [ebp - 0x130]
cmp eax, 0x32000
jle 0x46c1de
push 0x4a083c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x24]
cmp dword [ebp - 0xf4], ebx
jne 0x46c20f
cmp ecx, ebx
jge 0x46c1f1
cmp eax, 0x32000
jle 0x46c20f
push 0x4a0824
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x57800
jle 0x46c2a4
cmp dword [ebp - 0xa0], 0x3c
jle 0x46c260
cmp edx, 0x3c
jle 0x46c260
lea eax, [ebp - 0x948]
lea ecx, [ebp - 0x748]
push eax
push 0x49fd04
push ecx
call fcn.0047a8f8
lea edx, [ebp - 0x748]
push edx
call fcn.00483565
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edx, 0x46
jle 0x46c2a4
cmp eax, 0x64000
jle 0x46c2a4
lea eax, [ebp - 0x948]
lea ecx, [ebp - 0x748]
push eax
push 0x49fd04
push ecx
call fcn.0047a8f8
lea edx, [ebp - 0x748]
push edx
call fcn.00483565
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp ecx, ebx
jle 0x46c33a
cmp eax, 0x3e800
jle 0x46c33a
cmp dword [ebp - 0xa0], 0x3c
jle 0x46c2fd
cmp edx, 0x3c
jle 0x46c2fd
lea eax, [ebp - 0x948]
lea ecx, [ebp - 0x748]
push eax
push 0x49fd04
push ecx
call fcn.0047a8f8
lea edx, [ebp - 0x748]
push edx
call fcn.00483565
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp edx, 0x50
jle 0x46c33a
lea eax, [ebp - 0x948]
lea ecx, [ebp - 0x748]
push eax
push 0x49fd04
push ecx
call fcn.0047a8f8
lea edx, [ebp - 0x748]
push edx
call fcn.00483565
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x110]
xor ebx, ebx
cmp eax, 1
mov dword [ebp - 0x14], ebx
mov dword [ebp + 8], ebx
jne 0x46c37d
mov edi, 0x49b3b4
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x548]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
test al, 2
je 0x46c3c1
mov edi, 0x49b3a8
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov ebx, 1
mov eax, ecx
mov esi, edi
mov edi, edx
mov dword [ebp + 8], ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov dword [ebp - 0x14], ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0xb0]
mov eax, 1
cmp ecx, eax
jne 0x46c405
mov edi, 0x49ed54
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, 1
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp dword [ebp - 0x68], eax
jne 0x46c443
mov edi, 0x49b370
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, 1
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
cmp dword [ebp - 0x118], eax
jne 0x46c484
mov edi, 0x49b360
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, 1
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
cmp dword [ebp - 0x120], eax
je 0x46c494
cmp dword [ebp - 0xbc], eax
jne 0x46c4c9
mov edi, 0x49b354
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, 1
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp dword [ebp - 0x114], eax
jne 0x46c50a
mov edi, 0x49b344
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, 1
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
cmp dword [ebp - 0xc4], eax
jne 0x46c547
mov edi, 0x49b338
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, 1
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp dword [ebp - 0xfc], eax
jne 0x46c588
mov edi, 0x49b32c
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, 1
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
cmp dword [ebp - 0x4c], eax
jne 0x46c600
mov edi, 0x49b31c
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x20]
mov ecx, edx
and ecx, 3
inc ebx
cmp eax, 1
mov dword [ebp + 8], ebx
rep movsb byte es:[edi], byte [esi]
jne 0x46c600
mov edi, 0x49b260
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [ebp - 0x14], 1
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0xcc]
mov eax, 1
cmp ecx, eax
jne 0x46c64f
mov edi, 0x49b308
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [ebp - 0x14], 1
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, 1
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
cmp dword [ebp - 0x124], eax
jne 0x46c690
mov edi, 0x49b2fc
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, 1
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
cmp dword [ebp - 0xd4], eax
jne 0x46c6d1
mov edi, 0x49b2f0
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, 1
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
cmp dword [ebp - 0x104], eax
jne 0x46c70e
mov edi, 0x49b2e4
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, 1
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp dword [ebp - 0x38], eax
jne 0x46c7ad
cmp dword [ebp - 0xdc], eax
je 0x46c734
cmp dword [ebp - 0x11c], eax
je 0x46c734
lea edx, [ebp - 0x748]
mov edi, 0x49b2d8
jmp 0x46c77f
mov edi, 0x49b2cc
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0xa4]
mov ecx, edx
and ecx, 3
cmp eax, 1
rep movsb byte es:[edi], byte [esi]
lea edx, [ebp - 0x748]
mov edi, 0x49b2b8
je 0x46c77f
mov edi, 0x49b2a8
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, 1
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
cmp dword [ebp - 0x10c], eax
jne 0x46c7ee
mov edi, 0x49b298
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, 1
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
cmp dword [ebp - 0xec], eax
jne 0x46c836
mov edi, 0x49b28c
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [ebp - 0x44], 1
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, 1
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
cmp dword [ebp - 0x9c], eax
jne 0x46c87e
mov edi, 0x49b27c
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [ebp - 0x44], 1
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, 1
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
cmp dword [ebp - 0x30], eax
jne 0x46c8fd
mov edi, 0x49b26c
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x20]
mov ecx, edx
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov ecx, 1
mov dword [ebp + 8], ebx
cmp eax, ecx
jne 0x46c902
mov edi, 0x49b260
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 1
mov dword [ebp - 0x14], ecx
jmp 0x46c902
mov ecx, 1
cmp dword [ebp - 0x12c], ecx
jne 0x46c9c6
cmp dword [ebp - 0xb4], ecx
jne 0x46c9c6
cmp dword [ebp - 0xb8], ecx
jne 0x46c9c6
cmp dword [ebp - 0xc0], ecx
jne 0x46c976
mov eax, dword [ebp - 0x84]
lea edx, [ebp - 0x748]
cmp eax, ecx
mov edi, 0x49b24c
je 0x46c948
mov edi, 0x49b23c
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
mov ecx, 1
cmp dword [ebp - 0xc8], ecx
jne 0x46c9c6
mov eax, dword [ebp - 0x84]
lea edx, [ebp - 0x748]
cmp eax, ecx
mov edi, 0x49b224
je 0x46c998
mov edi, 0x49b210
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
mov ecx, 1
cmp dword [ebp - 0xd0], ecx
jne 0x46ca03
mov edi, 0x49b1ec
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 1
cmp dword [ebp - 0x88], ecx
jne 0x46ca4e
mov edi, 0x49b1d8
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x20]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test eax, eax
mov ecx, 1
jne 0x46ca4a
mov dword [ebp - 0x44], ecx
inc ebx
mov dword [ebp + 8], ebx
cmp dword [ebp - 0x90], ecx
jne 0x46ca8f
mov edi, str.internetl
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
mov ecx, 1
cmp dword [ebp - 0x98], ecx
jne 0x46cad0
mov edi, 0x49b1a8
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
mov ecx, 1
cmp dword [ebp - 0x80], ecx
jne 0x46cb0e
mov edi, 0x49b19c
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
mov ecx, 1
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x46cb55
mov eax, dword [ebp - 0x7c]
test eax, eax
jne 0x46cb55
mov edi, 0x49f92c
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
mov ecx, 1
cmp dword [ebp - 0x94], ecx
jne 0x46cb96
mov edi, 0x49b190
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
mov ecx, 1
cmp dword [ebp - 0x3c], ecx
jne 0x46cbd4
mov edi, 0x49f920
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
mov ecx, 1
cmp dword [ebp - 0x8c], ecx
jne 0x46cc15
mov edi, 0x49b158
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
mov ecx, 1
cmp dword [ebp - 0xd8], ecx
jne 0x46cc56
mov edi, 0x49b14c
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
mov ecx, 1
cmp dword [ebp - 0xe0], ecx
jne 0x46cc93
mov edi, 0x49b13c
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 1
mov eax, dword [ebp - 0x28]
cmp eax, ecx
jne 0x46cca1
mov eax, 4
jmp 0x46cca4
lea eax, [eax + eax*2]
cmp dword [ebp - 0x18], eax
jge 0x46cce5
mov edi, 0x49b12c
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov ecx, 1
mov dword [ebp + 8], ebx
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x1c]
test eax, eax
jle 0x46cd2d
cmp dword [ebp - 0x28], ecx
jne 0x46cd2d
mov edi, 0x49b108
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x1c]
mov ecx, edx
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
mov ecx, 1
cmp dword [ebp - 0xe8], ecx
jne 0x46cd7a
cmp eax, 5
jge 0x46cd7a
test eax, eax
jle 0x46cd7a
mov edi, 0x49f904
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x748]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
inc ebx
rep movsb byte es:[edi], byte [esi]
mov ecx, 1
mov dword [ebp + 8], ebx
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x24]
cmp eax, 7
jge 0x46ce9f
cmp dword [ebp - 0x34], ecx
jne 0x46ce1b
cmp eax, ecx
lea edx, [ebp - 0x748]
jge 0x46cdda
mov edi, 0x49b0d4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test ebx, ebx
mov ecx, 1
jle 0x46cdcf
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0xf8], ecx
jmp 0x46ce98
mov edi, str.
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x38]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 1
cmp eax, ecx
je 0x46ce95
cmp dword [ebp - 0x20], ecx
jne 0x46ce98
jmp 0x46ce95
cmp eax, ecx
lea edx, [ebp - 0x748]
jge 0x46ce5c
mov edi, 0x49b0ac
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 1
mov dword [ebp - 0xf8], ecx
jmp 0x46ce8b
mov edi, 0x49b09c
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 1
cmp dword [ebp - 0x38], ecx
je 0x46ce95
cmp dword [ebp - 0x20], ecx
jne 0x46ce98
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x24]
inc ebx
mov dword [ebp + 8], ebx
cmp dword [ebp - 0x2c], ecx
jne 0x46d010
test ebx, ebx
jle 0x46d010
cmp dword [ebp - 0x78], ecx
je 0x46cebd
cmp eax, ecx
jge 0x46d010
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea eax, [ebp - 0x848]
push eax
call esi
lea ecx, [ebp - 0x848]
push ecx
call fcn.00429f20
add esp, 4
cmp eax, 1
jne 0x46cf2f
lea edx, [ebp - 0x848]
push 0x80
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [ebp - 0x848]
push eax
call esi
test eax, eax
jne 0x46cf2f
lea ecx, [ebp - 0x848]
push ecx
call fcn.00429f20
add esp, 4
cmp eax, 1
jne 0x46cf2f
lea edx, [ebp - 0x848]
push edx
call fcn.00429e70
add esp, 4
lea edx, [ebp - 0x748]
mov edi, 0x4a07dc
jmp 0x46cf3a
lea edx, [ebp - 0x748]
mov edi, 0x4a0224
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, dword [0x65cd64]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
test edx, edx
rep movsb byte es:[edi], byte [esi]
jle 0x46cfc8
shl edx, 8
lea ecx, [ebp - 0x548]
lea edx, [edx + 0x62a3e4]
push ecx
push edx
call fcn.0047fde0
add esp, 8
test eax, eax
je 0x46d010
mov edx, dword [0x65cd64]
lea edi, [ebp - 0x548]
mov esi, edx
or ecx, 0xffffffff
shl esi, 8
xor eax, eax
add esi, 0x62a4e4
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [ebp - 0x40], esi
mov eax, ecx
mov esi, edi
mov edi, dword [ebp - 0x40]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
inc edx
cmp edx, 0x64
mov dword [0x65cd64], edx
rep movsb byte es:[edi], byte [esi]
jne 0x46d010
mov esi, edx
lea edi, [ebp - 0x548]
shl esi, 8
or ecx, 0xffffffff
xor eax, eax
add esi, 0x62a4e4
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [ebp - 0x40], esi
mov eax, ecx
mov esi, edi
mov edi, dword [ebp - 0x40]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
inc edx
cmp edx, 0x64
mov dword [0x65cd64], edx
rep movsb byte es:[edi], byte [esi]
jne 0x46d010
mov dword [0x65cd64], 0
cmp dword [ebp - 0x100], 1
jne 0x46d027
test ebx, ebx
jle 0x46d027
mov esi, 1
mov dword [ebp - 0x14], esi
jmp 0x46d02a
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x46d0e8
mov eax, dword [ebp - 0x108]
test eax, eax
jne 0x46d0e8
cmp esi, 1
je 0x46d050
test ebx, ebx
jle 0x46d0e8
lea edi, [ebp - 0x948]
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp - 0x2c], 0
repne scasb al, byte es:[edi]
mov eax, dword [ebp - 0x24]
not ecx
dec ecx
test eax, eax
jle 0x46d0a3
test ecx, ecx
jle 0x46d0a3
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0xe68]
push eax
lea edx, [ebp - 0x1468]
push ecx
lea eax, [ebp - 0xd68]
push edx
push eax
call fcn.0044a6e0
add esp, 0x10
cmp dword [ebp - 0x2c], 5
jle 0x46d0e8
cmp dword [ebp - 0x24], 6
jle 0x46d1cd
cmp ebx, 3
jge 0x46d127
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x46d127
test esi, esi
jne 0x46d127
cmp dword [ebp - 0x20], 1
jne 0x46d15d
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x46d15d
mov edx, dword [ebp - 0x13c]
lea ecx, [ebp - 0x10e8]
push ecx
push edx
call fcn.00455be0
movsx eax, ax
add esp, 8
cmp eax, 7
jle 0x46d1cd
cmp dword [ebp - 0x34], 1
jne 0x46d2d0
test ebx, ebx
jle 0x46d2d0
lea edi, [ebp - 0xd68]
or ecx, 0xffffffff
xor eax, eax
xor edx, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp eax, ecx
jge 0x46d203
push str.c:endpcache
mov dword [ebp - 4], 0xffffffff
call fcn.0047c0d3
add esp, 4
test ebx, ebx
jne 0x46d306
push 0x491c3c
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x46d366
lea ecx, [ebp - 0x748]
push ecx
call fcn.00483565
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret