Function at 0x14d0d810
Capabilities:
Acquire debug privileges
Compress data via winapi
Link many functions at runtime

Disassembly:
push ebp
lea ebp, [esp - 0x74]
sub esp, 0xc8
push ebx
push esi
push edi
push 0x258
push 0x14d120e0
call fcn.14d07cbe
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
pop ecx
pop ecx
push 0x14d03d90
call esi
push 0x14d03d80
mov dword [0x14d120e0], eax
call esi
push 0x14d03d74
mov dword [0x14d120e4], eax
call esi
push 0x14d03d68
mov dword [0x14d120e8], eax
call esi
push 0x14d01994
mov dword [0x14d120ec], eax
call esi
push 0x14d01934
mov dword [0x14d120f0], eax
call esi
push 0x14d01954
mov dword [0x14d120f4], eax
call esi
push 0x14d01770
mov dword [0x14d120f8], eax
call esi
push 0x14d03d5c
mov dword [0x14d120fc], eax
call esi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x14d03d4c
push dword [0x14d120e0]
mov dword [0x14d12100], eax
call esi
push 0x14d03d3c
push dword [0x14d120e0]
mov dword [0x14d12104], eax
call esi
push 0x14d03d28
push dword [0x14d120e0]
mov dword [0x14d12108], eax
call esi
push 0x14d03d20
push dword [0x14d120e0]
mov dword [0x14d1210c], eax
call esi
push 0x14d03d14
push dword [0x14d120e0]
mov dword [0x14d12110], eax
call esi
push 0x14d03d00
push dword [0x14d120e0]
mov dword [0x14d12114], eax
call esi
push 0x14d03cec
push dword [0x14d120e0]
mov dword [0x14d12118], eax
call esi
push 0x14d03cdc
push dword [0x14d120e0]
mov dword [0x14d1211c], eax
call esi
push 0x14d03cd0
push dword [0x14d120e0]
mov dword [0x14d12120], eax
call esi
push 0x14d03cc4
push dword [0x14d120e0]
mov dword [0x14d12124], eax
call esi
push 0x14d03cb8
push dword [0x14d120e0]
mov dword [0x14d12128], eax
call esi
mov dword [0x14d1212c], eax
push 0x14d03cac
push dword [0x14d120e0]
call esi
push 0x14d03ca0
push dword [0x14d120e0]
mov dword [0x14d12130], eax
call esi
push 0x14d03c94
push dword [0x14d120e0]
mov dword [0x14d12134], eax
call esi
push 0x14d03c88
push dword [0x14d120e0]
mov dword [0x14d12138], eax
call esi
push 0x14d03c7c
push dword [0x14d120e0]
mov dword [0x14d1213c], eax
call esi
push 0x14d03c70
push dword [0x14d120e0]
mov dword [0x14d12140], eax
call esi
push 0x14d03c64
push dword [0x14d120e0]
mov dword [0x14d12144], eax
call esi
push 0x14d03c50
push dword [0x14d120e0]
mov dword [0x14d12148], eax
call esi
push 0x14d03c3c
push dword [0x14d120e0]
mov dword [0x14d1214c], eax
call esi
push 0x14d03c30
push dword [0x14d120e0]
mov dword [0x14d12150], eax
call esi
push 0x14d03c24
push dword [0x14d120e0]
mov dword [0x14d12154], eax
call esi
push 0x14d03c14
push dword [0x14d120e0]
mov dword [0x14d12158], eax
call esi
push 0x14d03c04
push dword [0x14d120e0]
mov dword [0x14d1215c], eax
call esi
push 0x14d03bf8
push dword [0x14d120e0]
mov dword [0x14d12160], eax
call esi
push 0x14d03bec
push dword [0x14d120e0]
mov dword [0x14d12164], eax
call esi
push 0x14d03be0
push dword [0x14d120e0]
mov dword [0x14d12168], eax
call esi
push 0x14d03bcc
push dword [0x14d120e0]
mov dword [0x14d1216c], eax
call esi
push 0x14d03bb8
push dword [0x14d120e0]
mov dword [0x14d12170], eax
call esi
push 0x14d03ba8
push dword [0x14d120e0]
mov dword [0x14d12174], eax
call esi
push 0x14d03b94
push dword [0x14d120e0]
mov dword [0x14d12178], eax
call esi
mov dword [0x14d1217c], eax
push 0x14d03b84
push dword [0x14d120e0]
call esi
push 0x14d03b70
push dword [0x14d120e0]
mov dword [0x14d12180], eax
call esi
push 0x14d03b60
push dword [0x14d120e0]
mov dword [0x14d12184], eax
call esi
push 0x14d03b4c
push dword [0x14d120e0]
mov dword [0x14d12188], eax
call esi
push 0x14d03b40
push dword [0x14d120e0]
mov dword [0x14d1218c], eax
call esi
push 0x14d03b34
push dword [0x14d120e0]
mov dword [0x14d12190], eax
call esi
push 0x14d03b28
push dword [0x14d120e0]
mov dword [0x14d12194], eax
call esi
push 0x14d03b18
push dword [0x14d120e0]
mov dword [0x14d1219c], eax
call esi
push 0x14d03b04
push dword [0x14d120e0]
mov dword [0x14d12198], eax
call esi
push 0x14d03af4
push dword [0x14d120e0]
mov dword [0x14d121a0], eax
call esi
push 0x14d03ae0
push dword [0x14d120e0]
mov dword [0x14d121a4], eax
call esi
push 0x14d03acc
push dword [0x14d120e0]
mov dword [0x14d121a8], eax
call esi
push 0x14d03abc
push dword [0x14d120e0]
mov dword [0x14d121ac], eax
call esi
push 0x14d03aa0
push dword [0x14d120e0]
mov dword [0x14d121b0], eax
call esi
push 0x14d03a90
push dword [0x14d120e0]
mov dword [0x14d121b4], eax
call esi
push 0x14d03a80
push dword [0x14d120e0]
mov dword [0x14d121b8], eax
call esi
push 0x14d03a70
push dword [0x14d120e0]
mov dword [0x14d121bc], eax
call esi
push 0x14d03a60
push dword [0x14d120e0]
mov dword [0x14d121c0], eax
call esi
push 0x14d03a54
push dword [0x14d120e0]
mov dword [0x14d121c4], eax
call esi
push 0x14d03a48
push dword [0x14d120e0]
mov dword [0x14d121c8], eax
call esi
push 0x14d03a38
push dword [0x14d120e0]
mov dword [0x14d121cc], eax
call esi
push 0x14d03a24
push dword [0x14d120e0]
mov dword [0x14d121d0], eax
call esi
push 0x14d03a14
push dword [0x14d120e0]
mov dword [0x14d121d4], eax
call esi
push 0x14d03a04
push dword [0x14d120e0]
mov dword [0x14d121d8], eax
call esi
push 0x14d039f4
push dword [0x14d120e0]
mov dword [0x14d121dc], eax
call esi
push 0x14d039e4
push dword [0x14d120e0]
mov dword [0x14d121e0], eax
call esi
push 0x14d039d0
push dword [0x14d120e0]
mov dword [0x14d121e4], eax
call esi
push 0x14d039bc
push dword [0x14d120e0]
mov dword [0x14d121e8], eax
call esi
push 0x14d039a8
push dword [0x14d120e0]
mov dword [0x14d121ec], eax
call esi
push 0x14d03994
push dword [0x14d120e0]
mov dword [0x14d121f0], eax
call esi
push 0x14d03980
push dword [0x14d120e0]
mov dword [0x14d121f4], eax
call esi
push 0x14d03970
push dword [0x14d120e0]
mov dword [0x14d121f8], eax
call esi
push 0x14d03960
push dword [0x14d120e0]
mov dword [0x14d121fc], eax
call esi
push 0x14d0394c
push dword [0x14d120e0]
mov dword [0x14d12200], eax
call esi
push 0x14d03938
push dword [0x14d120e0]
mov dword [0x14d12204], eax
call esi
push 0x14d03924
push dword [0x14d120e0]
mov dword [0x14d12208], eax
call esi
push 0x14d03918
push dword [0x14d120e0]
mov dword [0x14d1220c], eax
call esi
push 0x14d03904
push dword [0x14d120e0]
mov dword [0x14d12210], eax
call esi
push 0x14d038f4
push dword [0x14d120e0]
mov dword [0x14d12214], eax
call esi
push 0x14d038e4
push dword [0x14d120e0]
mov dword [0x14d12218], eax
call esi
push 0x14d038d4
push dword [0x14d120e0]
mov dword [0x14d1221c], eax
call esi
push 0x14d038c4
push dword [0x14d120e0]
mov dword [0x14d12220], eax
call esi
push 0x14d038a8
push dword [0x14d120e0]
mov dword [0x14d12224], eax
call esi
push 0x14d03890
push dword [0x14d120e0]
mov dword [0x14d12228], eax
call esi
push 0x14d03878
push dword [0x14d120e0]
mov dword [0x14d1222c], eax
call esi
push 0x14d03868
push dword [0x14d120e0]
mov dword [0x14d12230], eax
call esi
push 0x14d0384c
push dword [0x14d120e0]
mov dword [0x14d12234], eax
call esi
push 0x14d03834
push dword [0x14d120e0]
mov dword [0x14d12238], eax
call esi
push 0x14d03824
push dword [0x14d120e0]
mov dword [0x14d1223c], eax
call esi
push 0x14d03810
push dword [0x14d120e0]
mov dword [0x14d12240], eax
call esi
push 0x14d03800
push dword [0x14d120e0]
mov dword [0x14d12244], eax
call esi
push 0x14d037f4
push dword [0x14d120e0]
mov dword [0x14d12248], eax
call esi
push 0x14d037e0
push dword [0x14d120e0]
mov dword [0x14d1224c], eax
call esi
push 0x14d037d4
push dword [0x14d120e0]
mov dword [0x14d12250], eax
call esi
push 0x14d037c8
push dword [0x14d120e0]
mov dword [0x14d12254], eax
call esi
push 0x14d037b0
push dword [0x14d120e4]
mov dword [0x14d12258], eax
call esi
push 0x14d03798
push dword [0x14d120e4]
mov dword [0x14d1225c], eax
call esi
push 0x14d03784
push dword [0x14d120e4]
mov dword [0x14d12260], eax
call esi
push 0x14d03770
push dword [0x14d120e4]
mov dword [0x14d12264], eax
call esi
push 0x14d03760
push dword [0x14d120e4]
mov dword [0x14d12268], eax
call esi
push 0x14d03754
push dword [0x14d120e4]
mov dword [0x14d1226c], eax
call esi
mov dword [0x14d12270], eax
push 0x14d03744
push dword [0x14d120e4]
call esi
push 0x14d03724
push dword [0x14d120e4]
mov dword [0x14d12274], eax
call esi
push 0x14d03708
push dword [0x14d120e4]
mov dword [0x14d12278], eax
call esi
push 0x14d036f0
push dword [0x14d120e8]
mov dword [0x14d1227c], eax
call esi
push 0x14d036dc
push dword [0x14d120e8]
mov dword [0x14d12280], eax
call esi
push 0x14d036cc
push dword [0x14d120ec]
mov dword [0x14d12284], eax
call esi
push 0x14d036c0
push dword [0x14d120ec]
mov dword [0x14d12288], eax
call esi
push 0x14d036b4
push dword [0x14d120ec]
mov dword [0x14d1228c], eax
call esi
push 0x14d036a8
push dword [0x14d120ec]
mov dword [0x14d12290], eax
call esi
push 0x14d0369c
push dword [0x14d120ec]
mov dword [0x14d12294], eax
call esi
push 0x14d03690
push dword [0x14d120ec]
mov dword [0x14d12298], eax
call esi
push 0x14d0367c
push dword [0x14d120ec]
mov dword [0x14d1229c], eax
call esi
push 0x14d03668
push dword [0x14d120f0]
mov dword [0x14d122a0], eax
call esi
push 0x14d03654
push dword [0x14d120f0]
mov dword [0x14d122a4], eax
call esi
push 0x14d03634
push dword [0x14d120f0]
mov dword [0x14d122a8], eax
call esi
push 0x14d01984
push dword [0x14d120f0]
mov dword [0x14d122ac], eax
call esi
push 0x14d03618
push dword [0x14d120f0]
mov dword [0x14d122b0], eax
call esi
push 0x14d01978
push dword [0x14d120f0]
mov dword [0x14d122b4], eax
call esi
push 0x14d03608
push dword [0x14d120f0]
mov dword [0x14d122b8], eax
call esi
push 0x14d01960
push dword [0x14d120f0]
mov dword [0x14d122bc], eax
call esi
mov dword [0x14d122c0], eax
push 0x14d035f0
push dword [0x14d120f4]
call esi
push 0x14d035e0
push dword [0x14d120f4]
mov dword [0x14d122c4], eax
call esi
push 0x14d01920
push dword [0x14d120f4]
mov dword [0x14d122c8], eax
call esi
push 0x14d035cc
push dword [0x14d120f4]
mov dword [0x14d122cc], eax
call esi
push 0x14d035b8
push dword [0x14d120f4]
mov dword [0x14d122d0], eax
call esi
push 0x14d035a4
push dword [0x14d120f4]
mov dword [0x14d122d4], eax
call esi
push 0x14d0190c
push dword [0x14d120f4]
mov dword [0x14d122d8], eax
call esi
push 0x14d018f8
push dword [0x14d120f4]
mov dword [0x14d122dc], eax
call esi
push 0x14d018e4
push dword [0x14d120f4]
mov dword [0x14d122e0], eax
call esi
push 0x14d018d0
push dword [0x14d120f4]
mov dword [0x14d122e4], eax
call esi
push 0x14d018bc
push dword [0x14d120f4]
mov dword [0x14d122e8], eax
call esi
push 0x14d018a8
push dword [0x14d120f4]
mov dword [0x14d122ec], eax
call esi
push 0x14d01894
push dword [0x14d120f4]
mov dword [0x14d122f0], eax
call esi
push 0x14d0358c
push dword [0x14d120f4]
mov dword [0x14d122f4], eax
call esi
push 0x14d03574
push dword [0x14d120f4]
mov dword [0x14d122f8], eax
call esi
push 0x14d03564
push dword [0x14d120f4]
mov dword [0x14d122fc], eax
call esi
push 0x14d01878
push dword [0x14d120f4]
mov dword [0x14d12300], eax
call esi
push 0x14d03548
push dword [0x14d120f4]
mov dword [0x14d12304], eax
call esi
push 0x14d03534
push dword [0x14d120f4]
mov dword [0x14d12308], eax
call esi
push 0x14d03518
push dword [0x14d120f4]
mov dword [0x14d1230c], eax
call esi
push 0x14d019a0
push dword [0x14d120f8]
mov dword [0x14d12310], eax
call esi
mov ebx, 0x14d019b4
push ebx
push dword [0x14d120f8]
mov dword [0x14d12314], eax
call esi
mov edi, 0x14d019a8
push edi
push dword [0x14d120f8]
mov dword [0x14d12318], eax
call esi
push 0x14d019a0
push dword [0x14d120fc]
mov dword [0x14d1231c], eax
call esi
push ebx
push dword [0x14d120fc]
mov dword [0x14d12320], eax
call esi
push 0x14d0194c
push dword [0x14d120fc]
mov dword [0x14d12324], eax
call esi
push 0x14d01940
push dword [0x14d120fc]
mov dword [0x14d12328], eax
call esi
push 0x14d0350c
push dword [0x14d120fc]
mov dword [0x14d1232c], eax
call esi
push edi
push dword [0x14d120fc]
mov dword [0x14d12330], eax
call esi
mov dword [0x14d12334], eax
xor ebx, ebx
xor eax, eax
cmp dword [eax + 0x14d120e0], ebx
je 0x14d0e3a7
add eax, 4
cmp eax, 0x258
jb 0x14d0e28f
call dword [0x14d12188]
mov dword [0x14d11ea0], eax
call dword [0x14d12170]
cmp byte [ebp + 0x7c], bl
mov dword [0x14d11a70], eax
mov dword [0x14d11e9c], 0x14d00000
je 0x14d0e2d5
push 0x8007
call dword [0x14d12108]
xor edi, edi
inc edi
push edi
mov esi, 0x14d120bc
push esi
call dword [0x14d12278]
push ebx
push ebx
push edi
push esi
call dword [0x14d1227c]
lea eax, [ebp + 0x70]
push eax
push 0x28
push dword [0x14d11a70]
mov dword [0x14d120d0], 0xc
mov dword [0x14d120d4], esi
mov dword [0x14d120d8], ebx
call dword [0x14d12264]
test eax, eax
je 0x14d0e360
lea eax, [ebp + 0x68]
push eax
push 0x14d034e8
push ebx
call dword [0x14d1225c]
test eax, eax
je 0x14d0e357
mov eax, dword [ebp + 0x68]
push ebx
mov dword [ebp + 0x5c], eax
mov eax, dword [ebp + 0x6c]
push ebx
push 0x10
mov dword [ebp + 0x60], eax
lea eax, [ebp + 0x58]
push eax
push ebx
push dword [ebp + 0x70]
mov dword [ebp + 0x58], edi
mov dword [ebp + 0x64], 2
call dword [0x14d12260]
push dword [ebp + 0x70]
call dword [0x14d12140]
push 0x14d11d88
mov dword [0x14d11d88], 0x114
mov word [str.Service_Pack_1], bx
call dword [0x14d12234]
push str.Service_Pack_1
call dword [0x14d1212c]
cmp eax, 0xe
jl 0x14d0e3ab
mov ax, word [0x14d11db6]
cmp ax, 0x31
jb 0x14d0e3ab
cmp ax, 0x39
ja 0x14d0e3ab
sub al, 0x30
mov byte [0x14d11b7c], al
jmp 0x14d0e3b1
xor al, al
jmp 0x14d0e3e0
mov byte [0x14d11b7c], bl
lea eax, [ebp - 0x54]
push eax
call dword [0x14d1223c]
mov ax, word [ebp + 0x46]
mov cx, word [ebp - 0xe]
neg ax
sbb eax, eax
and eax, dword [ebp + 0x54]
neg cx
sbb ecx, ecx
and ecx, dword [ebp]
add ecx, dword [ebp - 0x54]
add eax, ecx
mov word [0x14d11ea8], ax
mov al, 1
pop edi
pop esi
pop ebx
add ebp, 0x74
leave
ret