Function at 0x496af0
Capabilities:
Contain obfuscated stackstrings
Inspect section memory permissions
Parse pe header
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x804
push ebx
push ebp
mov cl, 0x3e
xor ebx, ebx
push esi
push edi
mov byte [esp + 0x14], 0xeb
mov byte [esp + 0x15], cl
mov byte [esp + 0x16], 0x90
mov byte [esp + 0x17], 0x29
mov byte [esp + 0x18], 0x6f
mov byte [esp + 0x19], 0x2d
mov byte [esp + 0x1a], 0x48
mov byte [esp + 0x1b], 0x5d
mov byte [esp + 0x1c], 0x49
mov byte [esp + 0x1d], 0x48
mov byte [esp + 0x1e], 0x43
mov byte [esp + 0x1f], bl
mov byte [esp + 0x20], 2
mov byte [esp + 0x21], 8
mov byte [esp + 0x22], 1
mov byte [esp + 0x23], bl
mov byte [esp + 0x24], 2
mov byte [esp + 0x25], bl
mov byte [esp + 0x26], 2
mov byte [esp + 0x27], 0xa0
mov byte [esp + 0x28], 0x7c
mov byte [esp + 0x29], pe_nt_image_headers32
mov byte [esp + 0x2a], 0xc
mov byte [esp + 0x2b], bl
mov byte [esp + 0x2c], 0x20
mov byte [esp + 0x2d], bl
mov byte [esp + 0x2e], 0x20
mov byte [esp + 0x2f], bl
mov byte [esp + 0x30], bl
mov byte [esp + 0x31], bl
mov byte [esp + 0x32], bl
mov byte [esp + 0x33], bl
mov byte [esp + 0x34], 0xd5
mov byte [esp + 0x35], 0xf2
mov byte [esp + 0x36], 1
mov byte [esp + 0x37], bl
mov byte [esp + 0x38], bl
mov byte [esp + 0x39], bl
mov byte [esp + 0x3a], 0x29
mov byte [esp + 0x3b], 0x41
mov byte [esp + 0x3c], 1
mov byte [esp + 0x3d], 0x59
mov byte [esp + 0x3e], 0x3c
mov byte [esp + 0x3f], 0x4e
mov byte [esp + 0x40], 0x4f
mov byte [esp + 0x41], 0x20
mov byte [esp + 0x42], 0x4e
mov byte [esp + 0x43], 0x41
mov byte [esp + 0x44], 0x4d
mov byte [esp + 0x45], 0x45
mov byte [esp + 0x46], 0x20
mov byte [esp + 0x47], 0x20
mov byte [esp + 0x48], 0x20
mov byte [esp + 0x49], 0x20
mov byte [esp + 0x4a], 0x46
mov byte [esp + 0x4b], 0x41
mov byte [esp + 0x4c], 0x54
mov byte [esp + 0x4d], 0x31
mov byte [esp + 0x4e], 0x32
mov byte [esp + 0x4f], 0x20
mov byte [esp + 0x50], 0x20
mov byte [esp + 0x51], 0x20
mov byte [esp + 0x52], 0xf1
mov byte [esp + 0x53], 0x7d
mov byte [esp + 0x54], 0xfa
mov byte [esp + 0x55], 0x33
mov byte [esp + 0x56], 0xc9
mov byte [esp + 0x57], 0x8e
mov byte [esp + 0x58], 0xd1
mov byte [esp + 0x59], 0xbc
mov byte [esp + 0x5a], 0xfc
mov byte [esp + 0x5b], 0x7b
mov byte [esp + 0x5c], 0x16
mov byte [esp + 0x5d], 7
mov byte [esp + 0x5e], 0xbd
mov al, 0x66
mov dl, 0xcd
mov byte [esp + 0x5f], 0x78
mov byte [esp + 0x60], bl
mov byte [esp + 0x61], 0xc5
mov byte [esp + 0x62], 0x76
mov byte [esp + 0x63], bl
mov byte [esp + 0x64], 0x1e
mov byte [esp + 0x65], 0x56
mov byte [esp + 0x66], 0x16
mov byte [esp + 0x67], 0x55
mov byte [esp + 0x68], 0xbf
mov byte [esp + 0x69], 0x22
mov byte [esp + 0x6a], 5
mov byte [esp + 0x6b], 0x89
mov byte [esp + 0x6c], 0x7e
mov byte [esp + 0x6d], bl
mov byte [esp + 0x6e], 0x89
mov byte [esp + 0x6f], 0x4e
mov byte [esp + 0x70], 2
mov byte [esp + 0x71], 0xb1
mov byte [esp + 0x72], 0xb
mov byte [esp + 0x73], 0xfc
mov byte [esp + 0x74], 0xf3
mov byte [esp + 0x75], 0xa4
mov byte [esp + 0x76], 6
mov byte [esp + 0x77], 0x1f
mov byte [esp + 0x78], 0xbd
mov byte [esp + 0x79], bl
mov byte [esp + 0x7a], 0x7c
mov byte [esp + 0x7b], 0xc6
mov byte [esp + 0x7c], 0x45
mov byte [esp + 0x7d], 0xfe
mov byte [esp + 0x7e], 0xf
mov byte [esp + 0x7f], 0x8b
mov byte [esp + 0x80], 0x46
mov byte [esp + 0x81], 0x18
mov byte [esp + 0x82], 0x88
mov byte [esp + 0x83], 0x45
mov byte [esp + 0x84], 0xf9
mov byte [esp + 0x85], 0xfb
mov byte [esp + 0x86], 0x38
mov byte [esp + 0x87], al
mov byte [esp + 0x88], 0x24
mov byte [esp + 0x89], 0x7c
mov byte [esp + 0x8a], 4
mov byte [esp + 0x8b], dl
mov byte [esp + 0x8c], 0x13
mov byte [esp + 0x8d], 0x72
mov byte [esp + 0x8e], 0x3c
mov byte [esp + 0x8f], 0x8a
mov byte [esp + 0x90], 0x46
mov byte [esp + 0x91], 0x10
mov byte [esp + 0x92], 0x98
mov byte [esp + 0x93], 0xf7
mov byte [esp + 0x94], al
mov byte [esp + 0x95], 0x16
mov byte [esp + 0x96], 3
mov byte [esp + 0x97], 0x46
mov byte [esp + 0x98], 0x1c
mov byte [esp + 0x99], 0x13
mov byte [esp + 0x9a], 0x56
mov byte [esp + 0x9b], 0x1e
mov byte [esp + 0x9c], 3
mov byte [esp + 0x9d], 0x46
mov byte [esp + 0x9e], 0xe
mov byte [esp + 0x9f], 0x13
mov byte [esp + 0xa0], 0xd1
mov byte [esp + 0xa1], 0x50
mov byte [esp + 0xa2], 0x52
mov byte [esp + 0xa3], 0x89
mov byte [esp + 0xa4], 0x46
mov byte [esp + 0xa5], 0xfc
mov byte [esp + 0xa6], 0x89
mov byte [esp + 0xa7], 0x56
mov byte [esp + 0xa8], 0xfe
mov byte [esp + 0xa9], 0xb8
mov byte [esp + 0xaa], 0x20
mov byte [esp + 0xab], bl
mov byte [esp + 0xac], 0x8b
mov byte [esp + 0xad], 0x76
mov byte [esp + 0xd6], cl
mov byte [esp + 0xf1], cl
mov cl, 0xbe
mov byte [esp + 0xae], 0x11
mov byte [esp + 0xaf], 0xf7
mov byte [esp + 0xb0], 0xe6
mov byte [esp + 0xb1], 0x8b
mov byte [esp + 0xb2], 0x5e
mov byte [esp + 0xb3], 0xb
mov byte [esp + 0xb4], 3
mov byte [esp + 0xb5], 0xc3
mov byte [esp + 0xb6], 0x48
mov byte [esp + 0xb7], 0xf7
mov byte [esp + 0xb8], 0xf3
mov byte [esp + 0xb9], 1
mov byte [esp + 0xba], 0x46
mov byte [esp + 0xbb], 0xfc
mov byte [esp + 0xbc], 0x11
mov byte [esp + 0xbd], 0x4e
mov byte [esp + 0xbe], 0xfe
mov byte [esp + 0xbf], 0x5a
mov byte [esp + 0xc0], 0x58
mov byte [esp + 0xc1], 0xbb
mov byte [esp + 0xc2], bl
mov byte [esp + 0xc3], 7
mov byte [esp + 0xc4], 0x8b
mov byte [esp + 0xc5], 0xfb
mov byte [esp + 0xc6], 0xb1
mov byte [esp + 0xc7], 1
mov byte [esp + 0xc8], 0xe8
mov byte [esp + 0xc9], 0x94
mov byte [esp + 0xca], bl
mov byte [esp + 0xcb], 0x72
mov byte [esp + 0xcc], 0x47
mov byte [esp + 0xcd], 0x38
mov byte [esp + 0xce], 0x2d
mov byte [esp + 0xcf], 0x74
mov byte [esp + 0xd0], 0x19
mov byte [esp + 0xd1], 0xb1
mov byte [esp + 0xd2], 0xb
mov byte [esp + 0xd3], 0x56
mov byte [esp + 0xd4], 0x8b
mov byte [esp + 0xd5], 0x76
mov byte [esp + 0xd7], 0xf3
mov byte [esp + 0xd8], 0xa6
mov byte [esp + 0xd9], 0x5e
mov byte [esp + 0xda], 0x74
mov byte [esp + 0xdb], 0x4a
mov byte [esp + 0xdc], 0x4e
mov byte [esp + 0xdd], 0x74
mov byte [esp + 0xde], 0xb
mov byte [esp + 0xdf], 3
mov byte [esp + 0xe0], 0xf9
mov byte [esp + 0xe1], 0x83
mov byte [esp + 0xe2], 0xc7
mov byte [esp + 0xe3], 0x15
mov byte [esp + 0xe4], 0x3b
mov byte [esp + 0xe5], 0xfb
mov byte [esp + 0xe6], 0x72
mov byte [esp + 0xe7], 0xe5
mov byte [esp + 0xe8], 0xeb
mov byte [esp + 0xe9], 0xd7
mov byte [esp + 0xea], 0x2b
mov byte [esp + 0xeb], 0xc9
mov byte [esp + 0xec], 0xb8
mov byte [esp + 0xed], 0xd8
mov byte [esp + 0xee], 0x7d
mov byte [esp + 0xef], 0x87
mov byte [esp + 0xf0], 0x46
mov byte [esp + 0xf2], 0x3c
mov byte [esp + 0xf3], 0xd8
mov byte [esp + 0xf4], 0x75
mov byte [esp + 0xf5], 0x99
mov byte [esp + 0xf6], cl
mov byte [esp + 0xf7], 0x80
mov byte [esp + 0xf8], 0x7d
mov byte [esp + 0xf9], 0xac
mov byte [esp + 0xfa], 0x98
mov byte [esp + 0xfb], 3
mov byte [esp + 0xfc], 0xf0
mov byte [esp + 0xfd], 0xac
mov byte [esp + 0x10f], cl
mov byte [esp + 0x114], cl
mov byte [esp + 0x126], cl
mov cl, 0xc8
mov byte [esp + 0xfe], 0x84
mov byte [esp + 0xff], 0xc0
mov byte [esp + 0x100], 0x74
mov byte [esp + 0x101], 0x17
mov byte [esp + 0x102], 0x3c
mov byte [esp + 0x103], 0xff
mov byte [esp + 0x104], 0x74
mov byte [esp + 0x105], 9
mov byte [esp + 0x106], 0xb4
mov byte [esp + 0x107], 0xe
mov byte [esp + 0x108], 0xbb
mov byte [esp + 0x109], 7
mov byte [esp + 0x10a], bl
mov byte [esp + 0x10b], dl
mov byte [esp + 0x10c], 0x10
mov byte [esp + 0x10d], 0xeb
mov byte [esp + 0x10e], 0xee
mov byte [esp + 0x110], 0x83
mov byte [esp + 0x111], 0x7d
mov byte [esp + 0x112], 0xeb
mov byte [esp + 0x113], 0xe5
mov byte [esp + 0x115], 0x81
mov byte [esp + 0x116], 0x7d
mov byte [esp + 0x117], 0xeb
mov byte [esp + 0x118], 0xe0
mov byte [esp + 0x119], 0x33
mov byte [esp + 0x11a], 0xc0
mov byte [esp + 0x11b], dl
mov byte [esp + 0x11c], 0x16
mov byte [esp + 0x11d], 0x5e
mov byte [esp + 0x11e], 0x1f
mov byte [esp + 0x11f], 0x8f
mov byte [esp + 0x120], 4
mov byte [esp + 0x121], 0x8f
mov byte [esp + 0x122], 0x44
mov byte [esp + 0x123], 2
mov byte [esp + 0x124], dl
mov byte [esp + 0x125], 0x19
mov byte [esp + 0x127], 0x82
mov byte [esp + 0x128], 0x7d
mov byte [esp + 0x129], 0x8b
mov byte [esp + 0x12a], 0x7d
mov byte [esp + 0x12b], 0xf
mov byte [esp + 0x12c], 0x83
mov byte [esp + 0x12d], 0xff
mov byte [esp + 0x12e], 2
mov byte [esp + 0x12f], 0x72
mov byte [esp + 0x130], cl
mov byte [esp + 0x131], 0x8b
mov byte [esp + 0x132], 0xc7
mov byte [esp + 0x133], 0x48
mov byte [esp + 0x134], 0x48
mov byte [esp + 0x135], 0x8a
mov byte [esp + 0x136], 0x4e
mov byte [esp + 0x137], 0xd
mov byte [esp + 0x138], 0xf7
mov byte [esp + 0x139], 0xe1
mov byte [esp + 0x13a], 3
mov byte [esp + 0x13b], 0x46
mov byte [esp + 0x13c], 0xfc
mov byte [esp + 0x13d], 0x13
mov byte [esp + 0x13e], 0x56
mov byte [esp + 0x13f], 0xfe
mov byte [esp + 0x140], 0xbb
mov byte [esp + 0x141], bl
mov byte [esp + 0x142], 7
mov byte [esp + 0x143], 0x53
mov byte [esp + 0x144], 0xb1
mov byte [esp + 0x145], 4
mov byte [esp + 0x146], 0xe8
mov byte [esp + 0x147], 0x16
mov byte [esp + 0x148], bl
mov byte [esp + 0x149], 0x5b
mov byte [esp + 0x14a], 0x72
mov byte [esp + 0x14b], cl
mov byte [esp + 0x14c], 0x81
mov byte [esp + 0x14d], 0x3f
mov cl, 0x91
mov byte [esp + 0x14e], 0x4d
mov byte [esp + 0x14f], 0x5a
mov byte [esp + 0x150], 0x75
mov byte [esp + 0x151], 0xa7
mov byte [esp + 0x152], 0x81
mov byte [esp + 0x153], 0xbf
mov byte [esp + 0x154], bl
mov byte [esp + 0x155], 2
mov byte [esp + 0x156], 0x42
mov byte [esp + 0x157], 0x4a
mov byte [esp + 0x158], 0x75
mov byte [esp + 0x159], 0x9f
mov byte [esp + 0x15a], 0xea
mov byte [esp + 0x15b], bl
mov byte [esp + 0x15c], 2
mov byte [esp + 0x15d], 0x70
mov byte [esp + 0x15e], bl
mov byte [esp + 0x15f], 0x50
mov byte [esp + 0x160], 0x52
mov byte [esp + 0x161], 0x51
mov byte [esp + 0x162], cl
mov byte [esp + 0x163], 0x92
mov byte [esp + 0x164], 0x33
mov byte [esp + 0x165], 0xd2
mov byte [esp + 0x166], 0xf7
mov byte [esp + 0x167], 0x76
mov byte [esp + 0x168], 0x18
mov byte [esp + 0x169], cl
mov byte [esp + 0x16a], 0xf7
mov byte [esp + 0x16b], 0x76
mov byte [esp + 0x16c], 0x18
mov byte [esp + 0x16d], 0x42
mov byte [esp + 0x16e], 0x87
mov byte [esp + 0x16f], 0xca
mov byte [esp + 0x170], 0xf7
mov byte [esp + 0x171], 0x76
mov byte [esp + 0x172], 0x1a
mov byte [esp + 0x173], 0x8a
mov byte [esp + 0x174], 0xf2
mov byte [esp + 0x175], 0x8a
mov byte [esp + 0x176], 0x56
mov byte [esp + 0x177], 0x24
mov byte [esp + 0x178], 0x8a
mov byte [esp + 0x179], 0xe8
mov byte [esp + 0x17a], 0xd0
mov byte [esp + 0x17b], 0xcc
mov byte [esp + 0x17c], 0xd0
mov byte [esp + 0x17d], 0xcc
mov byte [esp + 0x17e], 0xa
mov byte [esp + 0x17f], 0xcc
mov byte [esp + 0x180], 0xb8
mov byte [esp + 0x181], 1
mov byte [esp + 0x182], 2
mov byte [esp + 0x183], dl
mov byte [esp + 0x184], 0x13
mov byte [esp + 0x185], 0x59
mov byte [esp + 0x186], 0x5a
mov byte [esp + 0x187], 0x58
mov byte [esp + 0x188], 0x72
mov byte [esp + 0x189], 9
mov byte [esp + 0x18a], 0x40
mov byte [esp + 0x18b], 0x75
mov byte [esp + 0x18c], 1
mov byte [esp + 0x18d], 0x42
mov byte [esp + 0x18e], 3
mov byte [esp + 0x18f], 0x5e
mov byte [esp + 0x190], 0xb
mov byte [esp + 0x191], 0xe2
mov byte [esp + 0x192], 0xcc
mov byte [esp + 0x193], 0xc3
mov byte [esp + 0x194], 3
mov byte [esp + 0x195], 0x18
mov byte [esp + 0x196], 1
mov byte [esp + 0x197], 0x27
mov byte [esp + 0x198], 0xd
mov byte [esp + 0x199], 0xa
mov byte [esp + 0x19a], 0x49
mov byte [esp + 0x19b], 0x6e
mov byte [esp + 0x19c], 0x76
mov byte [esp + 0x19d], 0x61
mov cl, 0x73
mov byte [esp + 0x19e], 0x6c
mov byte [esp + 0x19f], 0x69
mov byte [esp + 0x1a0], 0x64
mov byte [esp + 0x1a1], 0x20
mov byte [esp + 0x1a2], cl
mov byte [esp + 0x1a3], 0x79
mov byte [esp + 0x1a4], cl
mov byte [esp + 0x1a5], 0x74
mov byte [esp + 0x1a6], 0x65
mov byte [esp + 0x1a7], 0x6d
mov byte [esp + 0x1a8], 0x20
mov byte [esp + 0x1a9], 0x64
mov byte [esp + 0x1aa], 0x69
mov byte [esp + 0x1ab], cl
mov byte [esp + 0x1ac], 0x6b
mov byte [esp + 0x1ad], 0xff
mov byte [esp + 0x1ae], 0xd
mov byte [esp + 0x1af], 0xa
mov byte [esp + 0x1b0], 0x44
mov byte [esp + 0x1b1], 0x69
mov byte [esp + 0x1b2], cl
mov byte [esp + 0x1b3], 0x6b
mov byte [esp + 0x1b4], 0x20
mov byte [esp + 0x1b5], 0x49
mov byte [esp + 0x1b6], 0x2f
mov byte [esp + 0x1b7], 0x4f
mov byte [esp + 0x1b8], 0x20
mov byte [esp + 0x1b9], 0x65
mov byte [esp + 0x1ba], 0x72
mov byte [esp + 0x1bb], 0x72
mov byte [esp + 0x1bc], 0x6f
mov byte [esp + 0x1bd], 0x72
mov byte [esp + 0x1be], 0xff
mov byte [esp + 0x1bf], 0xd
mov byte [esp + 0x1c0], 0xa
mov byte [esp + 0x1c1], 0x52
mov byte [esp + 0x1c2], 0x65
mov byte [esp + 0x1c3], 0x70
mov byte [esp + 0x1c4], 0x6c
mov byte [esp + 0x1c5], 0x61
mov byte [esp + 0x1c6], 0x63
mov byte [esp + 0x1c7], 0x65
mov byte [esp + 0x1c8], 0x20
mov byte [esp + 0x1c9], 0x74
mov byte [esp + 0x1ca], 0x68
mov byte [esp + 0x1cb], 0x65
mov byte [esp + 0x1cc], 0x20
mov byte [esp + 0x1cd], 0x64
mov byte [esp + 0x1ce], 0x69
mov byte [esp + 0x1cf], cl
mov byte [esp + 0x1d0], 0x6b
mov byte [esp + 0x1d1], 0x2c
mov byte [esp + 0x1d2], 0x20
mov byte [esp + 0x1d3], 0x61
mov byte [esp + 0x1d4], 0x6e
mov byte [esp + 0x1d5], 0x64
mov byte [esp + 0x1d6], 0x20
mov byte [esp + 0x1d7], 0x74
mov byte [esp + 0x1d8], 0x68
mov byte [esp + 0x1d9], 0x65
mov byte [esp + 0x1da], 0x6e
mov byte [esp + 0x1db], 0x20
mov byte [esp + 0x1dc], 0x70
mov byte [esp + 0x1dd], 0x72
mov byte [esp + 0x1de], 0x65
mov byte [esp + 0x1df], cl
mov byte [esp + 0x1e0], cl
mov byte [esp + 0x1e1], 0x20
mov byte [esp + 0x1e2], 0x61
mov byte [esp + 0x1e3], 0x6e
mov byte [esp + 0x1e4], 0x79
mov byte [esp + 0x1e5], 0x20
mov byte [esp + 0x1e6], 0x6b
mov byte [esp + 0x1e7], 0x65
mov byte [esp + 0x1e8], 0x79
mov byte [esp + 0x1e9], 0xd
mov byte [esp + 0x1ea], 0xa
mov byte [esp + 0x1eb], bl
mov byte [esp + 0x1ec], 0x49
mov byte [esp + 0x1ed], 0x4f
mov byte [esp + 0x1ee], 0x20
mov byte [esp + 0x1ef], 0x20
mov byte [esp + 0x1f0], 0x20
mov byte [esp + 0x1f1], 0x20
mov byte [esp + 0x1f2], 0x20
mov byte [esp + 0x1f3], 0x20
mov byte [esp + 0x1f4], 0x53
mov byte [esp + 0x1f5], 0x59
mov byte [esp + 0x1f6], 0x53
mov byte [esp + 0x1f7], 0x4d
mov byte [esp + 0x1f8], 0x53
mov byte [esp + 0x1f9], 0x44
mov byte [esp + 0x1fa], 0x4f
mov byte [esp + 0x1fb], 0x53
mov byte [esp + 0x1fc], 0x20
mov byte [esp + 0x1fd], 0x20
mov byte [esp + 0x1fe], 0x20
mov byte [esp + 0x1ff], 0x53
mov byte [esp + 0x200], 0x59
mov byte [esp + 0x201], 0x53
mov byte [esp + 0x202], 0x80
mov byte [esp + 0x203], 1
mov byte [esp + 0x204], bl
mov byte [esp + 0x205], 0x57
mov byte [esp + 0x206], 0x49
mov byte [esp + 0x207], 0x4e
mov byte [esp + 0x208], 0x42
mov byte [esp + 0x209], 0x4f
mov byte [esp + 0x20a], 0x4f
mov byte [esp + 0x20b], 0x54
mov byte [esp + 0x20c], 0x20
mov byte [esp + 0x20d], 0x53
mov byte [esp + 0x20e], 0x59
mov byte [esp + 0x20f], 0x53
mov byte [esp + 0x210], bl
mov byte [esp + 0x211], bl
mov byte [esp + 0x212], 0x55
mov byte [esp + 0x213], 0xaa
mov byte [esp + 0x214], 0xeb
mov byte [esp + 0x215], 0x58
mov byte [esp + 0x216], 0x90
mov byte [esp + 0x217], 0x4d
mov byte [esp + 0x218], 0x53
mov byte [esp + 0x219], 0x44
mov byte [esp + 0x21a], 0x4f
mov byte [esp + 0x21b], 0x53
mov byte [esp + 0x21c], 0x35
mov byte [esp + 0x21d], 0x2e
mov byte [esp + 0x21e], 0x30
mov byte [esp + 0x21f], bl
mov byte [esp + 0x220], 2
mov byte [esp + 0x221], 8
mov byte [esp + 0x222], 0x20
mov byte [esp + 0x223], bl
mov byte [esp + 0x224], 2
mov byte [esp + 0x225], bl
mov byte [esp + 0x226], bl
mov byte [esp + 0x227], bl
mov byte [esp + 0x228], bl
mov byte [esp + 0x229], pe_nt_image_headers32
mov byte [esp + 0x22a], bl
mov byte [esp + 0x22b], bl
mov byte [esp + 0x22c], 0x3f
mov byte [esp + 0x22d], bl
mov byte [esp + 0x22e], 0xff
mov byte [esp + 0x22f], bl
mov byte [esp + 0x230], bl
mov byte [esp + 0x231], bl
mov byte [esp + 0x232], bl
mov byte [esp + 0x233], bl
mov byte [esp + 0x234], 0xfe
mov byte [esp + 0x235], 0xff
mov byte [esp + 0x236], 0x7c
mov byte [esp + 0x237], bl
mov byte [esp + 0x238], 0x11
mov byte [esp + 0x239], 0x1f
mov byte [esp + 0x23a], bl
mov byte [esp + 0x23b], bl
mov byte [esp + 0x23c], bl
mov byte [esp + 0x23d], bl
mov byte [esp + 0x23e], bl
mov byte [esp + 0x23f], bl
mov byte [esp + 0x240], 2
mov byte [esp + 0x241], bl
mov byte [esp + 0x242], bl
mov byte [esp + 0x243], bl
mov byte [esp + 0x244], 1
mov byte [esp + 0x245], bl
mov byte [esp + 0x246], 6
mov byte [esp + 0x247], bl
mov byte [esp + 0x248], bl
mov byte [esp + 0x249], bl
mov byte [esp + 0x24a], bl
mov byte [esp + 0x24b], bl
mov byte [esp + 0x24c], bl
mov byte [esp + 0x24d], bl
mov byte [esp + 0x24e], bl
mov byte [esp + 0x24f], bl
mov byte [esp + 0x250], bl
mov byte [esp + 0x251], bl
mov byte [esp + 0x252], bl
mov byte [esp + 0x253], bl
mov byte [esp + 0x254], bl
mov byte [esp + 0x255], bl
mov byte [esp + 0x256], 0x29
mov byte [esp + 0x257], dl
mov byte [esp + 0x258], 0x1e
mov byte [esp + 0x259], 0x6f
mov byte [esp + 0x25a], 0x9c
mov byte [esp + 0x25b], 0x4e
mov byte [esp + 0x25c], 0x4f
mov byte [esp + 0x25d], 0x20
mov byte [esp + 0x25e], 0x4e
mov byte [esp + 0x25f], 0x41
mov byte [esp + 0x260], 0x4d
mov byte [esp + 0x261], 0x45
mov byte [esp + 0x262], 0x20
mov byte [esp + 0x263], 0x20
mov byte [esp + 0x264], 0x20
mov byte [esp + 0x265], 0x20
mov byte [esp + 0x266], 0x46
mov byte [esp + 0x267], 0x41
mov byte [esp + 0x268], 0x54
mov byte [esp + 0x269], 0x33
mov byte [esp + 0x26a], 0x32
mov byte [esp + 0x26b], 0x20
mov byte [esp + 0x26c], 0x20
mov byte [esp + 0x26d], 0x20
mov byte [esp + 0x26e], 0x33
mov byte [esp + 0x26f], 0xc9
mov byte [esp + 0x270], 0x8e
mov byte [esp + 0x271], 0xd1
mov byte [esp + 0x272], 0xbc
mov byte [esp + 0x273], 0xf4
mov byte [esp + 0x274], 0x7b
mov byte [esp + 0x275], 0x8e
mov byte [esp + 0x276], 0xc1
mov byte [esp + 0x277], 0x8e
mov byte [esp + 0x278], 0xb9
mov byte [esp + 0x279], 0xbd
mov byte [esp + 0x27a], bl
mov byte [esp + 0x27b], 0x7c
mov byte [esp + 0x27c], 0x88
mov byte [esp + 0x27d], 0x4e
mov byte [esp + 0x27e], 2
mov byte [esp + 0x27f], 0x8a
mov byte [esp + 0x280], 0x56
mov byte [esp + 0x281], 0x40
mov byte [esp + 0x282], 0xb4
mov byte [esp + 0x283], 8
mov byte [esp + 0x284], dl
mov byte [esp + 0x285], 0x13
mov byte [esp + 0x286], cl
mov byte [esp + 0x287], 5
mov byte [esp + 0x288], 0xb9
mov byte [esp + 0x289], 0xff
mov byte [esp + 0x28a], 0xff
mov byte [esp + 0x28b], 0x8a
mov byte [esp + 0x28c], 0xf1
mov byte [esp + 0x28d], al
mov byte [esp + 0x28e], 0xf
mov byte [esp + 0x28f], 0xb6
mov byte [esp + 0x290], 0xc6
mov byte [esp + 0x291], 0x40
mov byte [esp + 0x292], al
mov byte [esp + 0x293], 0xf
mov byte [esp + 0x294], 0xb6
mov byte [esp + 0x295], 0xd1
mov byte [esp + 0x296], 0x80
mov byte [esp + 0x297], 0xe2
mov byte [esp + 0x298], 0x3f
mov byte [esp + 0x299], 0xf7
mov byte [esp + 0x29a], 0xe2
mov byte [esp + 0x29b], 0x86
mov byte [esp + 0x29c], dl
mov byte [esp + 0x29d], 0xc0
mov byte [esp + 0x29e], 0xed
mov byte [esp + 0x29f], 6
mov byte [esp + 0x2a0], 0x41
mov byte [esp + 0x2a1], al
mov byte [esp + 0x2a2], 0xf
mov byte [esp + 0x2a3], 0xb7
mov byte [esp + 0x2a4], 0xc9
mov byte [esp + 0x2a5], al
mov byte [esp + 0x2a6], 0xf7
mov byte [esp + 0x2a7], 0xe1
mov byte [esp + 0x2a8], al
mov byte [esp + 0x2a9], 0x89
mov byte [esp + 0x2aa], 0x46
mov byte [esp + 0x2ab], pe_nt_image_headers32
mov byte [esp + 0x2ac], 0x83
mov byte [esp + 0x2ad], 0x7e
mov byte [esp + 0x2ae], 0x16
mov byte [esp + 0x2af], bl
mov byte [esp + 0x2b0], 0x75
mov byte [esp + 0x2b1], 0x38
mov byte [esp + 0x2b2], 0x83
mov byte [esp + 0x2b3], 0x7e
mov byte [esp + 0x2b4], 0x2a
mov byte [esp + 0x2b5], bl
mov byte [esp + 0x2b6], 0x77
mov byte [esp + 0x2b7], 0x32
mov byte [esp + 0x2b8], al
mov byte [esp + 0x2b9], 0x8b
mov byte [esp + 0x2ba], 0x46
mov byte [esp + 0x2bb], 0x1c
mov byte [esp + 0x2bc], al
mov byte [esp + 0x2bd], 0x83
mov byte [esp + 0x2be], 0xc0
mov byte [esp + 0x2bf], 0xc
mov byte [esp + 0x2c0], 0xbb
mov byte [esp + 0x2c1], bl
mov byte [esp + 0x2c2], 0x80
mov byte [esp + 0x2c3], 0xb9
mov byte [esp + 0x2c4], 1
mov byte [esp + 0x2c5], bl
mov byte [esp + 0x2c6], 0xe8
mov byte [esp + 0x2c7], 0x2b
mov byte [esp + 0x2c8], bl
mov byte [esp + 0x2c9], 0xe9
mov byte [esp + 0x2ca], 0x48
mov byte [esp + 0x2cb], 3
mov byte [esp + 0x2cc], 0xa0
mov byte [esp + 0x2cd], 0xfa
mov byte [esp + 0x2ce], 0x7d
mov byte [esp + 0x2cf], 0xb4
mov byte [esp + 0x2d0], 0x7d
mov byte [esp + 0x2d1], 0x8b
mov byte [esp + 0x2d2], 0xf0
mov byte [esp + 0x2d3], 0xac
mov byte [esp + 0x2d4], 0x84
mov byte [esp + 0x2d5], 0xc0
mov byte [esp + 0x2d6], 0x74
mov byte [esp + 0x2d7], 0x17
mov byte [esp + 0x2d8], 0x3c
mov byte [esp + 0x2d9], 0xff
mov byte [esp + 0x2da], 0x74
mov byte [esp + 0x2db], 9
mov byte [esp + 0x2dc], 0xb4
mov byte [esp + 0x2dd], 0xe
mov byte [esp + 0x2de], 0xbb
mov byte [esp + 0x2df], 7
mov byte [esp + 0x2e0], bl
mov byte [esp + 0x2e1], dl
mov byte [esp + 0x2e2], 0x10
mov byte [esp + 0x2e3], 0xeb
mov byte [esp + 0x2e4], 0xee
mov byte [esp + 0x2e5], 0xa0
mov byte [esp + 0x2e6], 0xfb
mov byte [esp + 0x2e7], 0x7d
mov byte [esp + 0x2e8], 0xeb
mov byte [esp + 0x2e9], 0xe5
mov byte [esp + 0x2ea], 0xa0
mov byte [esp + 0x2eb], 0xf9
mov byte [esp + 0x2ec], 0x7d
mov byte [esp + 0x2ed], 0xeb
mov byte [esp + 0x2ee], 0xe0
mov byte [esp + 0x2ef], 0x98
mov byte [esp + 0x2f0], dl
mov byte [esp + 0x2f1], 0x16
mov byte [esp + 0x2f2], dl
mov byte [esp + 0x2f3], 0x19
mov byte [esp + 0x2f4], al
mov byte [esp + 0x2f5], 0x60
mov byte [esp + 0x2f6], al
mov byte [esp + 0x2f7], 0x3b
mov byte [esp + 0x2f8], 0x46
mov byte [esp + 0x2f9], pe_nt_image_headers32
mov byte [esp + 0x2fa], 0xf
mov byte [esp + 0x2fb], 0x82
mov byte [esp + 0x2fc], 0x48
mov byte [esp + 0x2fd], bl
mov byte [esp + 0x2fe], al
mov byte [esp + 0x2ff], 0x68
mov byte [esp + 0x300], bl
mov byte [esp + 0x301], al
mov byte [esp + 0x302], 0x50
mov byte [esp + 0x303], 6
mov byte [esp + 0x304], 0x53
mov byte [esp + 0x305], al
mov byte [esp + 0x306], 0x68
mov byte [esp + 0x307], 0x10
mov byte [esp + 0x308], bl
mov byte [esp + 0x309], 1
mov byte [esp + 0x30a], bl
mov byte [esp + 0x30b], 0x80
mov byte [esp + 0x30c], 0x7e
mov byte [esp + 0x30d], 2
mov byte [esp + 0x30e], bl
mov byte [esp + 0x30f], 0xf
mov byte [esp + 0x310], 0x85
mov byte [esp + 0x311], 2
mov byte [esp + 0x312], bl
mov byte [esp + 0x313], 0xb4
mov byte [esp + 0x314], 0x41
mov byte [esp + 0x315], 0xbb
mov byte [esp + 0x316], 0xaa
mov byte [esp + 0x317], 0x55
mov byte [esp + 0x318], 0x8a
mov byte [esp + 0x319], 0x56
mov byte [esp + 0x31a], 0x40
mov byte [esp + 0x31b], dl
mov byte [esp + 0x31c], 0x13
mov byte [esp + 0x31d], 0xf
mov byte [esp + 0x31e], 0x82
mov byte [esp + 0x31f], 0x1c
mov byte [esp + 0x320], bl
mov byte [esp + 0x321], 0x81
mov byte [esp + 0x322], 0xfb
mov byte [esp + 0x323], 0x55
mov byte [esp + 0x324], 0xaa
mov byte [esp + 0x325], 0xf
mov byte [esp + 0x326], 0x85
mov byte [esp + 0x327], 0x14
mov byte [esp + 0x328], bl
mov byte [esp + 0x329], 0xf6
mov byte [esp + 0x32a], 0xc1
mov byte [esp + 0x32b], 1
mov byte [esp + 0x32c], 0xf
mov byte [esp + 0x32d], 0x84
mov byte [esp + 0x32e], 0xd
mov byte [esp + 0x32f], bl
mov byte [esp + 0x330], 0xfe
mov byte [esp + 0x331], 0x46
mov byte [esp + 0x332], 2
mov byte [esp + 0x333], 0xb4
mov byte [esp + 0x334], 0x42
mov byte [esp + 0x335], 0x8a
mov byte [esp + 0x336], 0x56
mov byte [esp + 0x337], 0x40
mov byte [esp + 0x338], 0x8b
mov byte [esp + 0x339], 0xf4
mov byte [esp + 0x33a], dl
mov byte [esp + 0x33b], 0x13
mov byte [esp + 0x33c], 0xb0
mov byte [esp + 0x33d], 0xf9
mov byte [esp + 0x33e], al
mov byte [esp + 0x33f], 0x58
mov byte [esp + 0x340], al
mov byte [esp + 0x341], 0x58
mov byte [esp + 0x342], al
mov byte [esp + 0x343], 0x58
mov byte [esp + 0x344], al
mov byte [esp + 0x345], 0x58
mov byte [esp + 0x346], 0xeb
mov byte [esp + 0x347], 0x2a
mov byte [esp + 0x348], al
mov byte [esp + 0x349], 0x33
mov byte [esp + 0x34a], 0xd2
mov byte [esp + 0x34b], al
mov byte [esp + 0x34c], 0xf
mov byte [esp + 0x34d], 0xb7
mov byte [esp + 0x34e], 0x4e
mov byte [esp + 0x34f], 0x18
mov byte [esp + 0x350], al
mov byte [esp + 0x351], 0xf3
mov byte [esp + 0x352], 0xf1
mov byte [esp + 0x353], 0xfe
mov byte [esp + 0x354], 0xc2
mov byte [esp + 0x355], 0x8a
mov byte [esp + 0x356], 0xca
mov byte [esp + 0x357], al
mov byte [esp + 0x358], 0x8b
mov byte [esp + 0x359], 0xd0
mov byte [esp + 0x35a], al
mov byte [esp + 0x35b], 0xc1
mov byte [esp + 0x35c], 0xea
mov byte [esp + 0x35d], 0x10
mov byte [esp + 0x35e], 0xf7
mov byte [esp + 0x35f], 0x76
mov byte [esp + 0x360], 0x1a
mov byte [esp + 0x361], 0x86
mov byte [esp + 0x362], 0xd6
mov byte [esp + 0x363], 0x8a
mov byte [esp + 0x364], 0x56
mov byte [esp + 0x365], 0x40
mov byte [esp + 0x366], 0x8a
mov byte [esp + 0x367], 0xe8
mov byte [esp + 0x368], 0xc0
mov byte [esp + 0x369], 0x84
mov byte [esp + 0x36a], 6
mov byte [esp + 0x36b], 0xa
mov byte [esp + 0x36c], 0xcc
mov byte [esp + 0x36d], 0xb8
mov byte [esp + 0x36e], 1
mov byte [esp + 0x36f], 2
mov byte [esp + 0x370], dl
mov byte [esp + 0x371], 0x13
mov byte [esp + 0x372], al
mov byte [esp + 0x373], 0x61
mov byte [esp + 0x374], 0xf
mov byte [esp + 0x375], 0x82
mov byte [esp + 0x376], 0x54
mov byte [esp + 0x377], 0xff
mov byte [esp + 0x378], 0x81
mov byte [esp + 0x379], 0xc3
mov byte [esp + 0x37a], bl
mov byte [esp + 0x37b], 2
mov byte [esp + 0x37c], al
mov byte [esp + 0x37d], 0x40
mov byte [esp + 0x37e], 0x49
mov byte [esp + 0x37f], 0x4f
mov byte [esp + 0x380], 0x85
mov byte [esp + 0x381], 0x71
mov byte [esp + 0x382], 0xff
mov al, 0x4c
mov byte [esp + 0x383], 0xc3
mov byte [esp + 0x384], 0x4e
mov byte [esp + 0x385], 0x54
mov byte [esp + 0x386], al
mov byte [esp + 0x387], 0x44
mov byte [esp + 0x388], 0x52
mov byte [esp + 0x389], 0x20
mov byte [esp + 0x38a], 0x20
mov byte [esp + 0x38b], 0x20
mov byte [esp + 0x38c], 0x20
mov byte [esp + 0x38d], 0x20
mov byte [esp + 0x38e], 0x20
mov byte [esp + 0x38f], bl
mov byte [esp + 0x390], bl
mov byte [esp + 0x391], bl
mov byte [esp + 0x392], bl
mov byte [esp + 0x393], bl
mov byte [esp + 0x394], bl
mov byte [esp + 0x395], bl
mov byte [esp + 0x396], bl
mov byte [esp + 0x397], bl
mov byte [esp + 0x398], bl
mov byte [esp + 0x399], bl
mov byte [esp + 0x39a], bl
mov byte [esp + 0x39b], bl
mov byte [esp + 0x39c], bl
mov byte [esp + 0x39d], bl
mov byte [esp + 0x39e], bl
mov byte [esp + 0x39f], bl
mov byte [esp + 0x3a0], bl
mov byte [esp + 0x3a1], bl
mov byte [esp + 0x3a2], bl
mov byte [esp + 0x3a3], bl
mov byte [esp + 0x3a4], bl
mov byte [esp + 0x3a5], bl
mov byte [esp + 0x3a6], bl
mov byte [esp + 0x3a7], bl
mov byte [esp + 0x3a8], bl
mov byte [esp + 0x3a9], bl
mov byte [esp + 0x3aa], bl
mov byte [esp + 0x3ab], bl
mov byte [esp + 0x3ac], bl
mov byte [esp + 0x3ad], bl
mov byte [esp + 0x3ae], bl
mov byte [esp + 0x3af], bl
mov byte [esp + 0x3b0], bl
mov byte [esp + 0x3b1], bl
mov byte [esp + 0x3b2], bl
mov byte [esp + 0x3b3], bl
mov byte [esp + 0x3b4], bl
mov byte [esp + 0x3b5], bl
mov byte [esp + 0x3b6], bl
mov byte [esp + 0x3b7], bl
mov byte [esp + 0x3b8], bl
mov byte [esp + 0x3b9], bl
mov byte [esp + 0x3ba], bl
mov byte [esp + 0x3bb], bl
mov byte [esp + 0x3bc], bl
mov byte [esp + 0x3bd], bl
mov byte [esp + 0x3be], bl
mov byte [esp + 0x3bf], bl
mov byte [esp + 0x3c0], 0xd
mov byte [esp + 0x3c1], 0xa
mov byte [esp + 0x3c2], 0x4e
mov byte [esp + 0x3c3], 0x54
mov byte [esp + 0x3c4], al
mov byte [esp + 0x3c5], 0x44
mov byte [esp + 0x3c6], 0x52
mov byte [esp + 0x3c7], 0x20
mov byte [esp + 0x3c8], 0x69
mov byte [esp + 0x3c9], cl
mov byte [esp + 0x3ca], 0x20
mov byte [esp + 0x3cb], 0x6d
mov byte [esp + 0x3cc], 0x69
mov byte [esp + 0x3cd], cl
mov byte [esp + 0x3ce], cl
mov byte [esp + 0x3cf], 0x69
mov byte [esp + 0x3d0], 0x68
mov byte [esp + 0x3d1], 0x67
mov byte [esp + 0x3d2], 0xff
push ebx
mov byte [esp + 0x3d7], 0xd
mov byte [esp + 0x3d8], 0xa
mov byte [esp + 0x3d9], 0x44
mov byte [esp + 0x3da], 0x69
mov byte [esp + 0x3db], cl
mov byte [esp + 0x3dc], 0x6b
mov byte [esp + 0x3dd], 0x20
mov byte [esp + 0x3de], 0x65
mov byte [esp + 0x3df], 0x72
mov byte [esp + 0x3e0], 0x72
mov byte [esp + 0x3e1], 0x6f
mov byte [esp + 0x3e2], 0x72
mov byte [esp + 0x3e3], 0xff
mov byte [esp + 0x3e4], 0xd
mov byte [esp + 0x3e5], 0xa
mov byte [esp + 0x3e6], 0x50
mov byte [esp + 0x3e7], 0x72
mov byte [esp + 0x3e8], 0x65
mov byte [esp + 0x3e9], cl
mov byte [esp + 0x3ea], cl
mov byte [esp + 0x3eb], 0x20
mov byte [esp + 0x3ec], 0x61
mov byte [esp + 0x3ed], 0x6e
mov byte [esp + 0x3ee], 0x79
mov byte [esp + 0x3ef], 0x20
mov byte [esp + 0x3f0], 0x6b
mov byte [esp + 0x3f1], 0x65
mov byte [esp + 0x3f2], 0x79
mov byte [esp + 0x3f3], 0x20
mov byte [esp + 0x3f4], 0x74
mov byte [esp + 0x3f5], 0x6f
mov byte [esp + 0x3f6], 0x20
mov byte [esp + 0x3f7], 0x72
mov byte [esp + 0x3f8], 0x65
mov byte [esp + 0x3f9], cl
mov byte [esp + 0x3fa], 0x74
mov byte [esp + 0x3fb], 0x61
mov byte [esp + 0x3fc], 0x72
mov byte [esp + 0x3fd], 0x74
mov byte [esp + 0x3fe], 0xd
mov byte [esp + 0x3ff], 0xa
mov byte [esp + 0x400], bl
mov byte [esp + 0x401], bl
mov byte [esp + 0x402], bl
mov byte [esp + 0x403], bl
mov byte [esp + 0x404], bl
mov byte [esp + 0x405], bl
mov byte [esp + 0x406], bl
mov byte [esp + 0x407], bl
mov byte [esp + 0x408], bl
mov byte [esp + 0x409], bl
mov byte [esp + 0x40a], bl
mov byte [esp + 0x40b], bl
mov byte [esp + 0x40c], bl
mov byte [esp + 0x40d], bl
mov byte [esp + 0x40e], bl
mov byte [esp + 0x40f], bl
mov byte [esp + 0x410], bl
mov byte [esp + 0x411], 0xac
mov byte [esp + 0x412], 0xbf
mov byte [esp + 0x413], 0xcc
mov byte [esp + 0x414], bl
mov byte [esp + 0x415], bl
mov byte [esp + 0x416], 0x55
mov byte [esp + 0x417], 0xaa
call dword [sym.imp.MSVCRT.dll_time]
push eax
call dword [sym.imp.MSVCRT.dll_srand]
mov esi, dword [sym.imp.MSVCRT.dll_rand]
call esi
call esi
mov eax, dword [esp + 0x834]
push eax
call fcn.0049ccf0
mov esi, dword [esp + 0x82c]
add esp, 0xc
mov edx, eax
mov eax, dword [esp + 0x838]
cmp esi, 0x7d00
jg 0x498962
cmp eax, ebx
jne 0x498962
cmp esi, 0xb40
mov edi, 1
jg 0x498942
mov al, 1
jmp 0x498d71
cmp esi, 0x2000
jle 0x498d6f
cmp esi, 0x3800
setg al
dec eax
and al, 0xfc
add eax, 8
jmp 0x498d71
cmp esi, 0x3e8000
jg 0x4989cc
cmp eax, ebx
jne 0x4989cc
xor edi, edi
cmp esi, 0xfa00
jg 0x49897f
mov al, 1
jmp 0x498d71
cmp esi, 0x1f400
jle 0x498d6f
cmp esi, 0x3e800
jg 0x49899a
mov al, 4
jmp 0x498d71
cmp esi, 0x7d000
jg 0x4989a9
mov al, 8
jmp 0x498d71
cmp esi, 0xfa000
jg 0x4989b8
mov al, 0x10
jmp 0x498d71
cmp esi, 0x1f4000
setg al
dec eax
and al, 0xe0
add eax, 0x40
jmp 0x498d71
cmp esi, 0xfa0000
jg 0x4989db
mov byte [esp + 0x13], 8
jmp 0x4989fd
cmp esi, 0x1f40000
jg 0x4989ea
mov byte [esp + 0x13], 0x10
jmp 0x4989fd
cmp esi, 0x3e80000
setg al
dec eax
and al, 0xe0
add eax, 0x40
mov byte [esp + 0x13], al
mov ecx, 0x80
xor eax, eax
lea edi, [esp + 0x414]
mov byte [esp + 0x257], dl
rep stosd dword es:[edi], eax
mov ecx, 0x80
lea edi, [esp + 0x614]
rep stosd dword es:[edi], eax
mov cl, byte [esp + 0x13]
mov eax, edx
mov byte [esp + 0x221], cl
mov ecx, edx
shr eax, 8
mov byte [esp + 0x258], al
mov eax, dword [esp + 0x824]
shr edx, 0x18
mov byte [esp + 0x25a], dl
mov edx, eax
shr ecx, 0x10
sar edx, 8
mov byte [esp + 0x259], cl
mov byte [esp + 0x231], dl
mov ecx, eax
lea edx, [esp + 0x234]
mov byte [esp + 0x230], al
push ebx
sar ecx, 0x10
sar eax, 0x18
push edx
push esi
mov byte [esp + 0x23e], cl
mov byte [esp + 0x23f], al
call fcn.0049c210
add esp, 0xc
cmp esi, 0x200000
jge 0x498aa3
mov eax, 0x7d1
jmp 0x498b31
cmp esi, 0x400000
jge 0x498ab2
mov eax, 0xf91
jmp 0x498b31
cmp esi, 0x800000
jge 0x498ac1
mov eax, 0x1f11
jmp 0x498b31
cmp esi, 0x1000000
jge 0x498ad0
mov eax, 0x3e21
jmp 0x498b31
cmp esi, 0x2000000
jge 0x498adf
mov eax, 0x7c41
jmp 0x498b31
cmp esi, 0x4000000
jge 0x498aee
mov eax, 0xf881
jmp 0x498b31
cmp esi, 0x8000000
jge 0x498afd
mov eax, 0x1f101
jmp 0x498b31
cmp esi, 0x10000000
jge 0x498b0c
mov eax, 0x3e201
jmp 0x498b31
cmp esi, 0x20000000
jge 0x498b1b
mov eax, 0x7c401
jmp 0x498b31
xor eax, eax
cmp esi, 0x40000000
setge al
dec eax
and eax, 0xfff07800
add eax, 0x1f1001
lea ecx, [esp + 0x238]
push ebx
push ecx
push eax
call fcn.0049c210
mov eax, dword [esp + 0x83c]
add esp, 0xc
cmp eax, ebx
je 0x498b93
mov ebp, dword [esp + 0x834]
lea eax, [esp + 0x25b]
xor edx, edx
sub ebp, eax
mov edi, dword [esp + 0x834]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp edx, ecx
jge 0x498b83
lea esi, [esp + edx + 0x25b]
mov cl, byte [esi + ebp]
mov byte [esi], cl
jmp 0x498b8b
mov byte [esp + edx + 0x25b], 0x20
inc edx
cmp edx, 0xb
jl 0x498b60
jmp 0x498bbb
cmp dword [esp + 0x83c], ebx
je 0x498bbb
xor edx, edx
mov dword [esp + 0x25b], edx
mov dword [esp + 0x25f], edx
mov word [esp + 0x263], dx
mov byte [esp + 0x265], dl
mov esi, dword [esp + 0x818]
push esi
call fcn.0048f710
mov edi, dword [esp + 0x820]
lea eax, [esp + 0x218]
push eax
push edi
push 1
push esi
call fcn.0048f970
add esp, 0x14
test eax, eax
jne 0x498bf7
pop edi
pop esi
pop ebp
mov eax, 0xe5
pop ebx
add esp, 0x804
ret
lea ecx, [esp + 0x414]
lea edx, [edi + 1]
push ecx
push edx
push 1
push esi
mov byte [esp + 0x424], 0x52
mov byte [esp + 0x425], 0x52
mov byte [esp + 0x426], 0x61
mov byte [esp + 0x427], 0x41
mov byte [esp + 0x608], 0x72
mov byte [esp + 0x609], 0x72
mov byte [esp + 0x60a], 0x41
mov byte [esp + 0x60b], 0x61
mov byte [esp + 0x60c], 0xff
mov byte [esp + 0x60d], 0xff
mov byte [esp + 0x60e], 0xff
mov byte [esp + 0x60f], 0xff
mov byte [esp + 0x610], 2
mov byte [esp + 0x611], bl
mov byte [esp + 0x612], bl
mov byte [esp + 0x613], bl
mov byte [esp + 0x622], 0x55
mov byte [esp + 0x623], 0xaa
call fcn.0048f970
add esp, 0x10
test eax, eax
jne 0x498caf
pop edi
pop esi
pop ebp
mov eax, 0xe5
pop ebx
add esp, 0x804
ret
lea eax, [esp + 0x614]
lea ecx, [edi + 2]
push eax
push ecx
push 1
push esi
mov byte [esp + 0x822], 0x55
mov byte [esp + 0x823], 0xaa
call fcn.0048f970
add esp, 0x10
test eax, eax
jne 0x498cea
pop edi
pop esi
pop ebp
mov eax, 0xe5
pop ebx
add esp, 0x804
ret
lea edx, [esp + 0x214]
lea eax, [edi + 6]
push edx
push eax
push 1
push esi
call fcn.0048f970
add esp, 0x10
test eax, eax
jne 0x498d15
pop edi
pop esi
pop ebp
mov eax, 0xe5
pop ebx
add esp, 0x804
ret
lea ecx, [esp + 0x414]
lea edx, [edi + 7]
push ecx
push edx
push 1
push esi
call fcn.0048f970
add esp, 0x10
test eax, eax
jne 0x498d40
pop edi
pop esi
pop ebp
mov eax, 0xe5
pop ebx
add esp, 0x804
ret
lea eax, [esp + 0x614]
add edi, 8
push eax
push edi
push 1
push esi
call fcn.0048f970
add esp, 0x10
test eax, eax
jne 0x498efa
pop edi
pop esi
pop ebp
mov eax, 0xe5
pop ebx
add esp, 0x804
ret
mov al, 2
mov byte [esp + 0x21], al
mov eax, edx
mov ecx, edx
mov byte [esp + 0x3b], dl
shr eax, 0x10
shr ecx, 8
mov byte [esp + 0x3d], al
mov eax, dword [esp + 0x824]
shr edx, 0x18
mov byte [esp + 0x3c], cl
mov byte [esp + 0x3e], dl
mov ecx, eax
mov edx, eax
sar ecx, 8
sar edx, 0x10
sar eax, 0x18
cmp esi, 0xfa00
mov byte [esp + 0x31], cl
mov byte [esp + 0x32], dl
mov byte [esp + 0x33], al
mov byte [esp + 0x30], bl
mov byte [esp + 0x38], bl
jle 0x498de7
cmp edi, ebx
jne 0x498de7
lea eax, [esp + 0x34]
push ebx
add esi, 0xffffffdf
push eax
push esi
mov byte [esp + 0x33], bl
mov byte [esp + 0x34], bl
call fcn.0049c210
add esp, 0xc
mov byte [esp + 0x4e], 0x36
jmp 0x498e46
lea ecx, [esp + 0x27]
push ebx
add esi, 0xffffffdf
push ecx
push esi
mov byte [esp + 0x40], bl
mov byte [esp + 0x41], bl
mov byte [esp + 0x42], bl
mov byte [esp + 0x43], bl
mov byte [esp + 0x56], 0x46
mov byte [esp + 0x57], 0x41
mov byte [esp + 0x58], 0x54
mov byte [esp + 0x59], 0x31
mov byte [esp + 0x5a], 0x32
mov byte [esp + 0x5b], 0x20
mov byte [esp + 0x5c], 0x20
mov byte [esp + 0x5d], 0x20
call fcn.0049c210
mov edx, edi
add esp, 0xc
neg edx
sbb dl, dl
mov byte [esp + 0x29], pe_nt_image_headers32
and dl, 0xfc
add dl, 0x36
mov byte [esp + 0x4e], dl
cmp dword [esp + 0x828], 2
jne 0x498e57
mov byte [esp + 0x2a], 0xc
jmp 0x498e65
mov eax, edi
neg eax
sbb al, al
and al, 0xd
dec al
mov byte [esp + 0x2a], al
cmp dword [esp + 0x830], ebx
je 0x498ea5
mov ebp, dword [esp + 0x834]
lea ecx, [esp + 0x3f]
mov esi, ebp
sub esi, ecx
mov edi, ebp
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ebx, ecx
jge 0x498e98
lea eax, [esp + ebx + 0x3f]
mov dl, byte [esi + eax]
mov byte [eax], dl
jmp 0x498e9d
mov byte [esp + ebx + 0x3f], 0x20
inc ebx
cmp ebx, 0xb
jl 0x498e7d
jmp 0x498ec1
cmp dword [esp + 0x83c], ebx
je 0x498ec1
xor eax, eax
mov dword [esp + 0x3f], eax
mov dword [esp + 0x43], eax
mov word [esp + 0x47], ax
mov byte [esp + 0x49], al
mov esi, dword [esp + 0x818]
push esi
call fcn.0048f710
mov edx, dword [esp + 0x820]
lea ecx, [esp + 0x18]
push ecx
push edx
push 1
push esi
call fcn.0048f970
add esp, 0x14
test eax, eax
jne 0x498efa
pop edi
pop esi
pop ebp
mov eax, 0xe5
pop ebx
add esp, 0x804
ret
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x804
ret