Function at 0x488ac1
Capabilities:
Encode data using xor

Disassembly:
push 0x9a4
mov eax, 0x4db1f1
call fcn.004ae989
mov esi, ecx
mov dword [ebp - 0x8e4], esi
xor edi, edi
mov dword [ebp - 4], edi
call fcn.0048b151
push eax
lea ecx, [ebp - 0x8d0]
call fcn.00402821
mov byte [ebp - 4], 1
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push eax
push ecx
lea eax, [ebp - 0x8d0]
push str.before_VerifyArmadilloKey__d___d
push eax
call fcn.00402a45
add esp, 0xc
lea eax, [ebp + 8]
mov dword [ebp - 0x8dc], esp
mov ecx, esp
push eax
call fcn.00402582
mov ecx, esi
call fcn.00486996
test al, al
je 0x489cdf
mov eax, dword [esi + 4]
mov esi, dword [esi]
push eax
push esi
lea eax, [ebp - 0x8d0]
push str.After_VerifyArmadilloKey__d___d
push eax
call fcn.00402a45
add esp, 0x10
cmp byte [ebp + 0xc], 0
je 0x489cda
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x8c0]
mov dword [ebp - 0x8dc], eax
mov dword [ebp - 0x898], edi
mov dword [ebp - 0x8a0], edi
mov dword [ebp - 0x8c8], edi
call fcn.0040253e
lea eax, [ebp - 0x8c0]
push eax
lea ecx, [ebp - 0x890]
mov byte [ebp - 4], 2
call fcn.00402582
mov byte [ebp - 4], 3
mov ebx, dword [ebp - 0x890]
mov eax, dword [ebx - 0xc]
cmp eax, 0x17
je 0x488bc0
add ebx, 0xfffffff0
mov ecx, ebx
call fcn.00402883
mov ecx, dword [ebp - 0x8c0]
add ecx, 0xfffffff0
call fcn.00402883
xor edi, edi
jmp 0x489cb7
call fcn.0048b151
push eax
lea ecx, [ebp - 0x8a8]
call fcn.00402821
mov byte [ebp - 4], 4
call fcn.0048b151
push eax
lea ecx, [ebp - 0x8a4]
call fcn.00402821
mov byte [ebp - 4], 5
call fcn.0048b151
push eax
lea ecx, [ebp - 0x894]
call fcn.00402821
mov byte [ebp - 4], 6
call fcn.0048b151
push eax
lea ecx, [ebp - 0x89c]
call fcn.00402821
mov edi, 0x533020
push edi
xor ecx, ecx
lea esi, [ebp - 0x890]
mov byte [ebp - 4], 7
call fcn.004077ca
mov esi, eax
cmp esi, 0xffffffff
je 0x4892cc
push esi
push 0
lea eax, [ebp - 0x914]
push eax
lea ecx, [ebp - 0x890]
call fcn.00407844
push eax
lea ecx, [ebp - 0x8a8]
mov byte [ebp - 4], 8
call fcn.0040260d
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x914]
add ecx, 0xfffffff0
call fcn.00402883
push dword [ebx - 0xc]
inc esi
push esi
lea eax, [ebp - 0x908]
push eax
lea ecx, [ebp - 0x890]
call fcn.00407844
push eax
lea ecx, [ebp - 0x890]
mov byte [ebp - 4], 9
call fcn.0040260d
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x908]
add ecx, 0xfffffff0
call fcn.00402883
push edi
xor ecx, ecx
lea esi, [ebp - 0x890]
call fcn.004077ca
mov esi, eax
cmp esi, 0xffffffff
je 0x488fb1
push esi
push 0
lea eax, [ebp - 0x900]
push eax
lea ecx, [ebp - 0x890]
call fcn.00407844
push eax
lea ecx, [ebp - 0x8a4]
mov byte [ebp - 4], 0xa
call fcn.0040260d
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x900]
add ecx, 0xfffffff0
call fcn.00402883
mov eax, dword [ebp - 0x890]
push dword [eax - 0xc]
inc esi
push esi
lea eax, [ebp - 0x904]
push eax
lea ecx, [ebp - 0x890]
call fcn.00407844
push eax
lea ecx, [ebp - 0x890]
mov byte [ebp - 4], 0xb
call fcn.0040260d
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x904]
add ecx, 0xfffffff0
call fcn.00402883
push edi
xor ecx, ecx
lea esi, [ebp - 0x890]
call fcn.004077ca
mov esi, eax
cmp esi, 0xffffffff
je 0x488fb1
push esi
push 0
lea eax, [ebp - 0x910]
push eax
lea ecx, [ebp - 0x890]
call fcn.00407844
push eax
lea ecx, [ebp - 0x894]
mov byte [ebp - 4], 0xc
call fcn.0040260d
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x910]
add ecx, 0xfffffff0
call fcn.00402883
mov eax, dword [ebp - 0x890]
push dword [eax - 0xc]
inc esi
push esi
lea eax, [ebp - 0x90c]
push eax
lea ecx, [ebp - 0x890]
call fcn.00407844
push eax
lea ecx, [ebp - 0x89c]
mov byte [ebp - 4], 0xd
call fcn.0040260d
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x90c]
add ecx, 0xfffffff0
call fcn.00402883
push 6
pop edi
push 2
xor ecx, ecx
pop esi
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00489d74
mov ebx, eax
mov eax, dword [ebp - 0x8a8]
pop ecx
mov ecx, ebx
mov dword [ebp - 0x8d8], ebx
sub ecx, eax
movzx edx, word [eax]
mov word [ecx + eax], dx
add eax, esi
test dx, dx
jne 0x488dee
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00489d74
mov edx, eax
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x8d4], edx
pop ecx
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, esi
test cx, cx
jne 0x488e22
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00489d74
mov edx, eax
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0x8b8], edx
pop ecx
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, esi
test cx, cx
jne 0x488e56
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00489d74
mov edx, eax
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x8b4], edx
pop ecx
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, esi
test cx, cx
jne 0x488e8a
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00489d74
mov edi, dword [ebp - 0x8d4]
pop ecx
mov ecx, eax
mov edx, ebx
sub edi, ebx
mov dword [ebp - 0x8cc], ecx
sub edx, ecx
mov dword [ebp - 0x8ac], 5
or dword [ebp - 0x898], 0xffffffff
or dword [ebp - 0x8a0], 0xffffffff
lea eax, [edx + ecx]
mov bl, byte [eax + edi]
mov al, byte [eax]
mov byte [ebp - 0x8c1], al
mov byte [ebp - 0x8b9], bl
xor eax, eax
mov bl, byte [ebp - 0x8b9]
cmp byte [eax + str.9PHVYB7EM6TW5SFZ8KUA3CNX4G2DRJ], bl
jne 0x488f04
mov dword [ebp - 0x898], eax
mov bl, byte [ebp - 0x8c1]
cmp byte [eax + str.23456789ABCDEFGHJKMNPRSTUVWXYZ], bl
jne 0x488f18
mov dword [ebp - 0x8a0], eax
inc eax
cmp eax, 0x1e
jl 0x488ef0
mov eax, dword [ebp - 0x898]
sub eax, dword [ebp - 0x8a0]
jns 0x488f2f
add eax, 0x1e
movsx ax, byte [eax + str.23456789ABCDEFGHJKMNPRSTUVWXYZ]
mov word [ecx], ax
add ecx, esi
dec dword [ebp - 0x8ac]
jne 0x488ecc
mov edi, dword [ebp - 0x8cc]
xor eax, eax
push edi
mov ecx, 0x569d90
mov word [edi + 0xa], ax
call fcn.004118e6
test eax, eax
je 0x488ff7
mov eax, 0x53d518
mov edx, edi
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, esi
test cx, cx
jne 0x488f6c
push dword [ebp - 0x8d8]
call fcn.00489d7f
pop ecx
push dword [ebp - 0x8d4]
call fcn.00489d7f
pop ecx
push edi
call fcn.00489d7f
pop ecx
push dword [ebp - 0x8b8]
call fcn.00489d7f
pop ecx
push dword [ebp - 0x8b4]
call fcn.00489d7f
pop ecx
mov ecx, dword [ebp - 0x89c]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x894]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x8a4]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x890]
add ecx, 0xfffffff0
jmp 0x488ba6
mov ebx, dword [ebp - 0x8b8]
mov al, byte [ebx]
xor ecx, ecx
cmp byte [ecx + str.VE9WMBCX8SP3DJT7A5GZUNHF2R6KY4], al
je 0x48900f
inc ecx
cmp ecx, 0xb
jl 0x489001
mov al, byte [ebx + 2]
push 0xb
pop ecx
cmp byte [ecx + str.VE9WMBCX8SP3DJT7A5GZUNHF2R6KY4], al
je 0x489023
inc ecx
cmp ecx, 0x17
jl 0x489015
mov al, byte [ebx + 4]
or edi, 0xffffffff
mov dword [ebp - 0x8c8], edi
mov dword [ebp - 0x8ac], edi
xor esi, esi
mov cl, byte [esi + str.VE9WMBCX8SP3DJT7A5GZUNHF2R6KY4]
cmp cl, al
jne 0x489047
mov dword [ebp - 0x8c8], esi
cmp cl, byte [ebx + 6]
jne 0x48904e
mov edi, esi
cmp cl, byte [ebx + 8]
jne 0x489059
mov dword [ebp - 0x8ac], esi
cmp dword [ebp - 0x8c8], 0
jl 0x48906f
test edi, edi
jl 0x48906f
cmp dword [ebp - 0x8ac], 0
jge 0x489075
inc esi
cmp esi, 0x1e
jl 0x489037
mov eax, dword [ebp - 0x8c8]
cdq
sub eax, edx
mov ecx, eax
mov eax, edi
cdq
sar ecx, 1
add ecx, 0xe
sub eax, edx
sar eax, 1
mov dword [ebp - 0x898], ecx
mov dword [ebp - 0x8a0], eax
jne 0x4890a4
mov dword [ebp - 0x8a0], 0xc
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x8c8], 0x1e
test eax, eax
je 0x4890be
mov dword [ebp - 0x8c8], eax
cmp ecx, 0x64
jae 0x4890cf
add ecx, 0x7d0
mov dword [ebp - 0x898], ecx
call fcn.0048b151
push eax
lea ecx, [ebp - 0x8b0]
call fcn.00402821
mov byte [ebp - 4], 0xe
xor edi, edi
mov eax, dword [ebp - 0x8b4]
mov al, byte [eax + edi*2]
xor esi, esi
cmp byte [esi + str.9PHVYB7EM6TW5SFZ8KUA3CNX4G2DRJ], al
je 0x4890ff
inc esi
cmp esi, 0xa
jl 0x4890f1
call fcn.0048b151
push eax
lea ecx, [ebp - 0x8ac]
call fcn.00402821
push esi
lea eax, [ebp - 0x8ac]
push 0x52513c
push eax
mov byte [ebp - 4], 0xf
call fcn.00402a45
mov esi, dword [ebp - 0x8ac]
add esp, 0xc
push dword [esi - 0xc]
lea ecx, [ebp - 0x8b0]
push esi
call fcn.00411e73
add esi, 0xfffffff0
mov ecx, esi
mov byte [ebp - 4], 0xe
call fcn.00402883
inc edi
cmp edi, 5
jl 0x4890e6
mov esi, dword [ebp - 0x8b0]
push esi
call fcn.004ab93f
pop ecx
push 8
mov dword [ebp - 0x8e0], eax
pop ecx
xor eax, eax
mov word [ebp - 0x58], ax
push ebx
push dword [ebp - 0x8cc]
lea edi, [ebp - 0x56]
push dword [ebp - 0x8d8]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x58]
push str._s__s__s
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
push 0x12
call fcn.00489d74
mov edi, eax
pop ecx
lea eax, [ebp - 0x9ac]
mov dword [ebp - 0x9b0], eax
push 3
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x9b0]
push eax
call fcn.00407294
mov ebx, dword [ebp - 0x9b0]
mov ecx, edi
mov eax, ebx
sub ecx, ebx
mov dl, byte [eax]
mov byte [ecx + eax], dl
inc eax
test dl, dl
jne 0x4891c8
lea eax, [ebp - 0x9ac]
cmp ebx, eax
je 0x4891e3
push ebx
call fcn.004aaee4
pop ecx
mov dword [ebp - 0x8ac], 0x11
mov eax, edi
xor ebx, ebx
movzx edx, byte [eax]
mov ecx, ebx
shr ecx, 8
shl ebx, 8
xor ecx, edx
xor ebx, dword [ecx*4 + 0x5618a0]
and ebx, 0xffff
inc eax
dec dword [ebp - 0x8ac]
cmp dword [ebp - 0x8ac], 0
jg 0x4891f1
push edi
call fcn.00489d7f
movzx eax, bx
cmp dword [ebp - 0x8e0], eax
pop ecx
push dword [ebp - 0x8d8]
sete bl
call fcn.00489d7f
pop ecx
push dword [ebp - 0x8d4]
call fcn.00489d7f
pop ecx
push dword [ebp - 0x8cc]
call fcn.00489d7f
pop ecx
push dword [ebp - 0x8b8]
call fcn.00489d7f
pop ecx
push dword [ebp - 0x8b4]
call fcn.00489d7f
pop ecx
lea ecx, [esi - 0x10]
call fcn.00402883
mov ecx, dword [ebp - 0x89c]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x894]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x8a4]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x890]
add ecx, 0xfffffff0
call fcn.00402883
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x8c0]
add ecx, 0xfffffff0
call fcn.00402883
jmp 0x489320
mov ecx, dword [ebp - 0x89c]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x894]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x8a4]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.00402883
lea ecx, [ebx - 0x10]
call fcn.00402883
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x8c0]
add ecx, 0xfffffff0
call fcn.00402883
xor bl, bl
test bl, bl
je 0x488bb9
lea eax, [ebp - 0x920]
call fcn.004424d8
xor eax, eax
push eax
push eax
push eax
push dword [ebp - 0x8c8]
lea ecx, [ebp - 0x92c]
push dword [ebp - 0x8a0]
push dword [ebp - 0x898]
call fcn.004425fd
lea eax, [ebp - 0x920]
push eax
lea ecx, [ebp - 0x92c]
call fcn.0044fccb
test al, al
je 0x48939b
lea eax, [ebp - 0x920]
push eax
lea esi, [ebp - 0x8f0]
lea eax, [ebp - 0x92c]
call fcn.0044fc71
mov ecx, esi
call fcn.0044fc41
fcomp qword [0x53ddb0]
fnstsw ax
test ah, 0x41
je 0x488bb9
push dword [ebp - 0x8dc]
lea ecx, [ebp - 0x8a4]
call fcn.0040253e
lea ebx, [ebp - 0x8a4]
mov byte [ebp - 4], 0x10
call fcn.0040c520
mov ebx, eax
call fcn.0040c56d
lea edi, [ebp - 0x8a4]
call fcn.004077fb
mov eax, edi
push eax
lea ecx, [ebp - 0x8a8]
call fcn.00402582
lea ebx, [ebp - 0x8a8]
mov byte [ebp - 4], 0x11
call fcn.0040c520
mov ebx, eax
call fcn.0040c56d
lea edi, [ebp - 0x8a8]
call fcn.004077fb
mov esi, dword [ebp - 0x8e4]
add esi, 8
mov eax, dword [esi]
mov eax, dword [eax - 0xc]
mov ebx, 0xff
test eax, eax
je 0x489438
push dword [ebp - 0x8a8]
xor ecx, ecx
call fcn.004077ca
cmp eax, 0xffffffff
je 0x489438
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.00402883
jmp 0x48986a
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.00402883
push esi
lea eax, [ebp - 0x8a4]
push eax
lea eax, [ebp - 0x8dc]
push eax
call fcn.00402163
add esp, 0xc
push eax
mov ecx, esi
mov byte [ebp - 4], 0x12
call fcn.0040260d
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x8dc]
add ecx, 0xfffffff0
call fcn.00402883
mov eax, dword [esi]
cmp dword [eax - 0xc], ebx
jle 0x4894af
push ebx
lea eax, [ebp - 0x8e0]
push eax
mov ecx, esi
call fcn.004078c2
push eax
mov ecx, esi
mov byte [ebp - 4], 0x13
call fcn.0040260d
mov ecx, dword [ebp - 0x8e0]
add ecx, 0xfffffff0
call fcn.00402883
mov edi, 0x5685a0
push edi
mov dword [ebp - 0x8b8], edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 4], 0x14
call fcn.0048b151
push eax
lea ecx, [ebp - 0x8b4]
call fcn.00402821
push 3
lea eax, [ebp - 0x8b4]
push 0x52513c
push eax
mov byte [ebp - 4], 0x15
call fcn.00402a45
mov eax, dword [esi]
add esp, 0xc
push dword [ebp - 0x8b4]
mov ecx, 0x569d98
mov dword [ebp - 0x8b0], eax
call fcn.004995a1
push dword [ebp - 0x8b0]
mov ecx, eax
call fcn.0040274c
mov eax, dword [esi]
mov dword [ebp - 0x898], eax
lea eax, [ebp - 0x8b0]
push eax
lea esi, [ebp - 0x8fc]
mov dword [ebp - 0x8b0], VariantCopyInd
call fcn.0040ab2d
mov byte [ebp - 4], 0x16
call fcn.0048b151
push eax
lea ecx, [ebp - 0x8a0]
call fcn.00402821
push 3
mov byte [ebp - 4], 0x17
push dword [0x569d7c]
lea eax, [ebp - 0x8a0]
push dword [0x569d84]
push eax
call fcn.00402a45
add esp, 0x10
call fcn.0048b151
push eax
lea ecx, [ebp - 0x890]
call fcn.00402821
push 0x200
lea eax, [ebp - 0x68c]
push 0
mov byte [ebp - 4], 0x18
push eax
mov dword [ebp - 0x8fc], 0x2001f
call fcn.004ae4c0
add esp, 0xc
push ebx
push dword [ebp - 0x898]
lea eax, [ebp - 0x68c]
push eax
call fcn.004ac21a
mov eax, dword [0x569d94]
add esp, 0xc
cmp dword [eax - 0xc], 0
jne 0x4895f9
mov ecx, dword [ebp - 0x890]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x8a0]
add ecx, 0xfffffff0
call fcn.00402883
call fcn.0040aba7
mov ecx, dword [ebp - 0x8f4]
add ecx, 0xfffffff0
call fcn.00402883
jmp 0x489855
push 7
pop ecx
mov esi, str.Microsoft_Visual_C_Library
lea edi, [ebp - 0x34]
rep movsd dword es:[edi], dword [esi]
push 0x101
lea eax, [ebp - 0x184]
push 0
push eax
movsb byte es:[edi], byte [esi]
call fcn.004ae4c0
add esp, 0xc
push 0x101
lea eax, [ebp - 0x28c]
push 0
push eax
call fcn.004ae4c0
add esp, 0xc
xor eax, eax
mov edi, 0x100
mov byte [ebp + eax - 0x184], al
inc eax
cmp eax, edi
jb 0x48963a
mov eax, dword [0x569d94]
xor ecx, ecx
xor esi, esi
cmp dword [eax - 0xc], ecx
je 0x48966d
cmp esi, dword [eax - 0xc]
jb 0x48965b
xor esi, esi
mov dl, byte [eax + esi*2]
inc esi
mov byte [ebp + ecx - 0x28c], dl
inc ecx
cmp ecx, edi
jb 0x489654
jmp 0x489687
xor eax, eax
cmp esi, 0x1c
jb 0x489676
xor esi, esi
mov dl, byte [ebp + esi - 0x34]
inc esi
mov byte [ebp + eax - 0x28c], dl
inc eax
cmp eax, edi
jb 0x48966f
xor edi, edi
mov dword [ebp - 0x894], edi
movzx edx, byte [ebp + edi - 0x28c]
add edx, dword [ebp - 0x894]
lea eax, [ebp + edi - 0x184]
mov cl, byte [eax]
movzx esi, cl
add esi, edx
and esi, ebx
mov edx, esi
movzx cx, cl
lea esi, [ebp + edx - 0x184]
mov dword [ebp - 0x894], edx
mov dl, byte [esi]
movzx ecx, cx
inc edi
mov byte [eax], dl
mov byte [esi], cl
cmp edi, 0x100
jb 0x48968f
xor edi, edi
mov dword [ebp - 0x894], edi
mov dword [ebp - 0x89c], edi
inc edi
and edi, ebx
lea ecx, [ebp + edi - 0x184]
mov al, byte [ecx]
movzx edx, al
add edx, dword [ebp - 0x894]
movzx ax, al
and edx, ebx
movzx eax, ax
lea esi, [ebp + edx - 0x184]
mov dword [ebp - 0x894], edx
mov dl, byte [esi]
mov byte [ecx], dl
mov byte [esi], al
movzx ecx, byte [ecx]
movzx eax, al
add eax, ecx
mov ecx, dword [ebp - 0x89c]
and eax, ebx
movzx ax, byte [ebp + eax - 0x184]
movzx eax, ax
lea ecx, [ebp + ecx - 0x68c]
xor byte [ecx], al
inc dword [ebp - 0x89c]
cmp dword [ebp - 0x89c], 0x1fe
jb 0x4896e0
xor eax, eax
mov word [ebp - 0x48e], ax
call fcn.0048b151
push eax
lea ecx, [ebp - 0x898]
call fcn.00402821
push 3
mov byte [ebp - 4], 0x19
push dword [0x569d8c]
lea eax, [ebp - 0x898]
push eax
call fcn.00402a45
add esp, 8
lea eax, [ebp - 0x898]
mov dword [ebp - 0x8b0], esp
mov ecx, esp
push eax
lea esi, [ebp - 0x68c]
call fcn.00402582
mov ecx, esi
call fcn.00485afd
pop ecx
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x898]
add ecx, 0xfffffff0
call fcn.00402883
mov edi, dword [ebp - 0x8a0]
push 1
push edi
push SysReAllocStringLen
lea esi, [ebp - 0x8fc]
call fcn.0040ab49
test eax, eax
je 0x4897ec
push 0x200
lea eax, [ebp - 0x68c]
push eax
push dword [ebp - 0x890]
mov eax, esi
call fcn.0040adb1
call fcn.0040aba7
push 1
push edi
push reloc.OLEAUT32.dll_SysReAllocString
lea esi, [ebp - 0x8fc]
call fcn.0040ab49
test eax, eax
je 0x489821
push 0x200
lea eax, [ebp - 0x68c]
push eax
push dword [ebp - 0x890]
mov eax, esi
call fcn.0040adb1
call fcn.0040aba7
mov ecx, dword [ebp - 0x890]
add ecx, 0xfffffff0
call fcn.00402883
lea ecx, [edi - 0x10]
call fcn.00402883
lea esi, [ebp - 0x8fc]
call fcn.0040aba7
mov ecx, dword [ebp - 0x8f4]
add ecx, 0xfffffff0
call fcn.00402883
mov edi, 0x5685a0
mov ecx, dword [ebp - 0x8b4]
add ecx, 0xfffffff0
call fcn.00402883
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x8a4]
add ecx, 0xfffffff0
call fcn.00402883
push 0x400
push 0
lea eax, [ebp - 0x8cc]
push eax
lea ecx, [ebp - 0x920]
call fcn.0044265a
mov edi, 0x200
push edi
lea eax, [ebp - 0x88c]
push 0
push eax
mov byte [ebp - 4], 0x1a
call fcn.004ae4c0
add esp, 0xc
push ebx
push dword [ebp - 0x8cc]
lea eax, [ebp - 0x88c]
push eax
call fcn.004ac21a
add esp, 0xc
lea eax, [ebp - 0x88c]
push eax
lea ecx, [ebp - 0x8b8]
call fcn.0040253e
mov eax, 0x5685a0
push eax
mov dword [ebp - 0x8d4], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 4], 0x1c
call fcn.0048b151
push eax
lea ecx, [ebp - 0x8b4]
call fcn.00402821
push 2
lea eax, [ebp - 0x8b4]
push 0x52513c
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402a45
mov esi, dword [ebp - 0x8b8]
add esp, 0xc
push dword [ebp - 0x8b4]
mov ecx, 0x569d98
call fcn.004995a1
push esi
mov ecx, eax
call fcn.0040274c
mov eax, dword [ebp - 0x8b8]
mov dword [ebp - 0x898], eax
lea eax, [ebp - 0x8b0]
push eax
lea esi, [ebp - 0x30]
mov dword [ebp - 0x8b0], VariantCopyInd
call fcn.0040ab2d
mov byte [ebp - 4], 0x1e
call fcn.0048b151
push eax
lea ecx, [ebp - 0x8a0]
call fcn.00402821
push 2
mov byte [ebp - 4], 0x1f
push dword [0x569d7c]
lea eax, [ebp - 0x8a0]
push dword [0x569d84]
push eax
call fcn.00402a45
add esp, 0x10
call fcn.0048b151
push eax
lea ecx, [ebp - 0x8b0]
call fcn.00402821
push edi
lea eax, [ebp - 0x48c]
push 0
mov byte [ebp - 4], 0x20
push eax
mov dword [ebp - 0x30], 0x2001f
call fcn.004ae4c0
add esp, 0xc
push ebx
push dword [ebp - 0x898]
lea eax, [ebp - 0x48c]
push eax
call fcn.004ac21a
mov eax, dword [0x569d94]
add esp, 0xc
cmp dword [eax - 0xc], 0
jne 0x4899fd
mov ecx, dword [ebp - 0x8b0]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x8a0]
add ecx, 0xfffffff0
jmp 0x489c26
push 7
pop ecx
mov esi, str.Microsoft_Visual_C_Library
lea edi, [ebp - 0x78]
rep movsd dword es:[edi], dword [esi]
push 0x101
lea eax, [ebp - 0x184]
push 0
push eax
movsb byte es:[edi], byte [esi]
call fcn.004ae4c0
add esp, 0xc
push 0x101
lea eax, [ebp - 0x28c]
push 0
push eax
call fcn.004ae4c0
add esp, 0xc
xor eax, eax
mov edi, 0x100
mov byte [ebp + eax - 0x184], al
inc eax
cmp eax, edi
jb 0x489a3e
mov eax, dword [0x569d94]
xor ecx, ecx
xor esi, esi
cmp dword [eax - 0xc], ecx
je 0x489a71
cmp esi, dword [eax - 0xc]
jb 0x489a5f
xor esi, esi
mov dl, byte [eax + esi*2]
inc esi
mov byte [ebp + ecx - 0x28c], dl
inc ecx
cmp ecx, edi
jb 0x489a58
jmp 0x489a8b
xor eax, eax
cmp esi, 0x1c
jb 0x489a7a
xor esi, esi
mov dl, byte [ebp + esi - 0x78]
inc esi
mov byte [ebp + eax - 0x28c], dl
inc eax
cmp eax, edi
jb 0x489a73
xor edi, edi
mov dword [ebp - 0x894], edi
movzx edx, byte [ebp + edi - 0x28c]
add edx, dword [ebp - 0x894]
lea eax, [ebp + edi - 0x184]
mov cl, byte [eax]
movzx esi, cl
add esi, edx
and esi, ebx
mov edx, esi
movzx cx, cl
lea esi, [ebp + edx - 0x184]
mov dword [ebp - 0x894], edx
mov dl, byte [esi]
movzx ecx, cx
inc edi
mov byte [eax], dl
mov byte [esi], cl
cmp edi, 0x100
jb 0x489a93
xor edi, edi
mov dword [ebp - 0x894], edi
mov dword [ebp - 0x89c], edi
inc edi
and edi, ebx
lea eax, [ebp + edi - 0x184]
mov cl, byte [eax]
movzx edx, cl
add edx, dword [ebp - 0x894]
movzx cx, cl
and edx, ebx
movzx ecx, cx
lea esi, [ebp + edx - 0x184]
mov dword [ebp - 0x894], edx
mov dl, byte [esi]
mov byte [eax], dl
mov byte [esi], cl
movzx eax, byte [eax]
movzx ecx, cl
add eax, ecx
mov ecx, dword [ebp - 0x89c]
and eax, ebx
movzx ax, byte [ebp + eax - 0x184]
movzx eax, ax
lea ecx, [ebp + ecx - 0x48c]
xor byte [ecx], al
inc dword [ebp - 0x89c]
cmp dword [ebp - 0x89c], 0x1fe
jb 0x489ae4
xor eax, eax
mov word [ebp - 0x28e], ax
call fcn.0048b151
push eax
lea ecx, [ebp - 0x898]
call fcn.00402821
push 2
mov byte [ebp - 4], 0x21
push dword [0x569d8c]
lea eax, [ebp - 0x898]
push eax
call fcn.00402a45
add esp, 8
lea eax, [ebp - 0x898]
mov dword [ebp - 0x8d8], esp
mov ecx, esp
push eax
lea esi, [ebp - 0x48c]
call fcn.00402582
mov ecx, esi
call fcn.00485afd
pop ecx
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x898]
add ecx, 0xfffffff0
call fcn.00402883
mov edi, dword [ebp - 0x8a0]
push 1
push edi
push SysReAllocStringLen
lea esi, [ebp - 0x30]
call fcn.0040ab49
mov ebx, dword [ebp - 0x8b0]
test eax, eax
je 0x489bee
push 0x200
lea eax, [ebp - 0x48c]
push eax
push ebx
mov eax, esi
call fcn.0040adb1
call fcn.0040aba7
push 1
push edi
push reloc.OLEAUT32.dll_SysReAllocString
lea esi, [ebp - 0x30]
call fcn.0040ab49
test eax, eax
je 0x489c1b
push 0x200
lea eax, [ebp - 0x48c]
push eax
push ebx
mov eax, esi
call fcn.0040adb1
call fcn.0040aba7
lea ecx, [ebx - 0x10]
call fcn.00402883
lea ecx, [edi - 0x10]
call fcn.00402883
lea esi, [ebp - 0x30]
call fcn.0040aba7
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp - 0x8b4]
add ecx, 0xfffffff0
call fcn.00402883
push 0x5685a0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x8b8]
add ecx, 0xfffffff0
call fcn.00402883
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x8cc]
add ecx, 0xfffffff0
call fcn.00402883
mov edi, dword [ebp - 0x8e4]
push dword [edi + 4]
lea eax, [ebp - 0x8d0]
push dword [edi]
push str.After_InstallArmadilloCode__d___d
push eax
call fcn.00402a45
add esp, 0x10
call fcn.00488682
push dword [edi + 4]
lea eax, [ebp - 0x8d0]
push dword [edi]
push str.After_RefreshAllStatus__d___d
push eax
call fcn.00402a45
mov edi, dword [edi + 4]
add esp, 0x10
mov ecx, dword [ebp - 0x8d0]
add ecx, 0xfffffff0
call fcn.00402883
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00402883
mov eax, edi
call fcn.004aea0c
ret 8
xor edi, edi
inc edi
jmp 0x489cb7
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x489cb7