Function at 0x4946d0
Capabilities:
Contain obfuscated stackstrings
Inspect section memory permissions
Parse pe header
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x808
push ebx
push ebp
mov cl, 0x3e
xor ebx, ebx
push esi
push edi
mov byte [esp + 0x14], 0xeb
mov byte [esp + 0x15], cl
mov byte [esp + 0x16], 0x90
mov byte [esp + 0x17], 0x29
mov byte [esp + 0x18], 0x6f
mov byte [esp + 0x19], 0x2d
mov byte [esp + 0x1a], 0x48
mov byte [esp + 0x1b], 0x5d
mov byte [esp + 0x1c], 0x49
mov byte [esp + 0x1d], 0x48
mov byte [esp + 0x1e], 0x43
mov byte [esp + 0x1f], bl
mov byte [esp + 0x20], 2
mov byte [esp + 0x21], 8
mov byte [esp + 0x22], 1
mov byte [esp + 0x23], bl
mov byte [esp + 0x24], 2
mov byte [esp + 0x25], bl
mov byte [esp + 0x26], 2
mov byte [esp + 0x27], 0xa0
mov byte [esp + 0x28], 0x7c
mov byte [esp + 0x29], pe_nt_image_headers32
mov byte [esp + 0x2a], 0xc
mov byte [esp + 0x2b], bl
mov byte [esp + 0x2c], 0x20
mov byte [esp + 0x2d], bl
mov byte [esp + 0x2e], 0x20
mov byte [esp + 0x2f], bl
mov byte [esp + 0x30], bl
mov byte [esp + 0x31], bl
mov byte [esp + 0x32], bl
mov byte [esp + 0x33], bl
mov byte [esp + 0x34], 0xd5
mov byte [esp + 0x35], 0xf2
mov byte [esp + 0x36], 1
mov byte [esp + 0x37], bl
mov byte [esp + 0x38], bl
mov byte [esp + 0x39], bl
mov byte [esp + 0x3a], 0x29
mov byte [esp + 0x3b], 0x41
mov byte [esp + 0x3c], 1
mov byte [esp + 0x3d], 0x59
mov byte [esp + 0x3e], 0x3c
mov byte [esp + 0x3f], 0x4e
mov byte [esp + 0x40], 0x4f
mov byte [esp + 0x41], 0x20
mov byte [esp + 0x42], 0x4e
mov byte [esp + 0x43], 0x41
mov byte [esp + 0x44], 0x4d
mov byte [esp + 0x45], 0x45
mov byte [esp + 0x46], 0x20
mov byte [esp + 0x47], 0x20
mov byte [esp + 0x48], 0x20
mov byte [esp + 0x49], 0x20
mov byte [esp + 0x4a], 0x46
mov byte [esp + 0x4b], 0x41
mov byte [esp + 0x4c], 0x54
mov byte [esp + 0x4d], 0x31
mov byte [esp + 0x4e], 0x32
mov byte [esp + 0x4f], 0x20
mov byte [esp + 0x50], 0x20
mov byte [esp + 0x51], 0x20
mov byte [esp + 0x52], 0xf1
mov byte [esp + 0x53], 0x7d
mov byte [esp + 0x54], 0xfa
mov byte [esp + 0x55], 0x33
mov byte [esp + 0x56], 0xc9
mov byte [esp + 0x57], 0x8e
mov byte [esp + 0x58], 0xd1
mov byte [esp + 0x59], 0xbc
mov byte [esp + 0x5a], 0xfc
mov byte [esp + 0x5b], 0x7b
mov byte [esp + 0x5c], 0x16
mov byte [esp + 0x5d], 7
mov byte [esp + 0x5e], 0xbd
mov al, 0x66
mov dl, 0xcd
mov byte [esp + 0x5f], 0x78
mov byte [esp + 0x60], bl
mov byte [esp + 0x61], 0xc5
mov byte [esp + 0x62], 0x76
mov byte [esp + 0x63], bl
mov byte [esp + 0x64], 0x1e
mov byte [esp + 0x65], 0x56
mov byte [esp + 0x66], 0x16
mov byte [esp + 0x67], 0x55
mov byte [esp + 0x68], 0xbf
mov byte [esp + 0x69], 0x22
mov byte [esp + 0x6a], 5
mov byte [esp + 0x6b], 0x89
mov byte [esp + 0x6c], 0x7e
mov byte [esp + 0x6d], bl
mov byte [esp + 0x6e], 0x89
mov byte [esp + 0x6f], 0x4e
mov byte [esp + 0x70], 2
mov byte [esp + 0x71], 0xb1
mov byte [esp + 0x72], 0xb
mov byte [esp + 0x73], 0xfc
mov byte [esp + 0x74], 0xf3
mov byte [esp + 0x75], 0xa4
mov byte [esp + 0x76], 6
mov byte [esp + 0x77], 0x1f
mov byte [esp + 0x78], 0xbd
mov byte [esp + 0x79], bl
mov byte [esp + 0x7a], 0x7c
mov byte [esp + 0x7b], 0xc6
mov byte [esp + 0x7c], 0x45
mov byte [esp + 0x7d], 0xfe
mov byte [esp + 0x7e], 0xf
mov byte [esp + 0x7f], 0x8b
mov byte [esp + 0x80], 0x46
mov byte [esp + 0x81], 0x18
mov byte [esp + 0x82], 0x88
mov byte [esp + 0x83], 0x45
mov byte [esp + 0x84], 0xf9
mov byte [esp + 0x85], 0xfb
mov byte [esp + 0x86], 0x38
mov byte [esp + 0x87], al
mov byte [esp + 0x88], 0x24
mov byte [esp + 0x89], 0x7c
mov byte [esp + 0x8a], 4
mov byte [esp + 0x8b], dl
mov byte [esp + 0x8c], 0x13
mov byte [esp + 0x8d], 0x72
mov byte [esp + 0x8e], 0x3c
mov byte [esp + 0x8f], 0x8a
mov byte [esp + 0x90], 0x46
mov byte [esp + 0x91], 0x10
mov byte [esp + 0x92], 0x98
mov byte [esp + 0x93], 0xf7
mov byte [esp + 0x94], al
mov byte [esp + 0x95], 0x16
mov byte [esp + 0x96], 3
mov byte [esp + 0x97], 0x46
mov byte [esp + 0x98], 0x1c
mov byte [esp + 0x99], 0x13
mov byte [esp + 0x9a], 0x56
mov byte [esp + 0x9b], 0x1e
mov byte [esp + 0x9c], 3
mov byte [esp + 0x9d], 0x46
mov byte [esp + 0x9e], 0xe
mov byte [esp + 0x9f], 0x13
mov byte [esp + 0xa0], 0xd1
mov byte [esp + 0xa1], 0x50
mov byte [esp + 0xa2], 0x52
mov byte [esp + 0xa3], 0x89
mov byte [esp + 0xa4], 0x46
mov byte [esp + 0xa5], 0xfc
mov byte [esp + 0xa6], 0x89
mov byte [esp + 0xa7], 0x56
mov byte [esp + 0xa8], 0xfe
mov byte [esp + 0xa9], 0xb8
mov byte [esp + 0xaa], 0x20
mov byte [esp + 0xab], bl
mov byte [esp + 0xac], 0x8b
mov byte [esp + 0xad], 0x76
mov byte [esp + 0xd6], cl
mov byte [esp + 0xf1], cl
mov cl, 0xbe
mov byte [esp + 0xae], 0x11
mov byte [esp + 0xaf], 0xf7
mov byte [esp + 0xb0], 0xe6
mov byte [esp + 0xb1], 0x8b
mov byte [esp + 0xb2], 0x5e
mov byte [esp + 0xb3], 0xb
mov byte [esp + 0xb4], 3
mov byte [esp + 0xb5], 0xc3
mov byte [esp + 0xb6], 0x48
mov byte [esp + 0xb7], 0xf7
mov byte [esp + 0xb8], 0xf3
mov byte [esp + 0xb9], 1
mov byte [esp + 0xba], 0x46
mov byte [esp + 0xbb], 0xfc
mov byte [esp + 0xbc], 0x11
mov byte [esp + 0xbd], 0x4e
mov byte [esp + 0xbe], 0xfe
mov byte [esp + 0xbf], 0x5a
mov byte [esp + 0xc0], 0x58
mov byte [esp + 0xc1], 0xbb
mov byte [esp + 0xc2], bl
mov byte [esp + 0xc3], 7
mov byte [esp + 0xc4], 0x8b
mov byte [esp + 0xc5], 0xfb
mov byte [esp + 0xc6], 0xb1
mov byte [esp + 0xc7], 1
mov byte [esp + 0xc8], 0xe8
mov byte [esp + 0xc9], 0x94
mov byte [esp + 0xca], bl
mov byte [esp + 0xcb], 0x72
mov byte [esp + 0xcc], 0x47
mov byte [esp + 0xcd], 0x38
mov byte [esp + 0xce], 0x2d
mov byte [esp + 0xcf], 0x74
mov byte [esp + 0xd0], 0x19
mov byte [esp + 0xd1], 0xb1
mov byte [esp + 0xd2], 0xb
mov byte [esp + 0xd3], 0x56
mov byte [esp + 0xd4], 0x8b
mov byte [esp + 0xd5], 0x76
mov byte [esp + 0xd7], 0xf3
mov byte [esp + 0xd8], 0xa6
mov byte [esp + 0xd9], 0x5e
mov byte [esp + 0xda], 0x74
mov byte [esp + 0xdb], 0x4a
mov byte [esp + 0xdc], 0x4e
mov byte [esp + 0xdd], 0x74
mov byte [esp + 0xde], 0xb
mov byte [esp + 0xdf], 3
mov byte [esp + 0xe0], 0xf9
mov byte [esp + 0xe1], 0x83
mov byte [esp + 0xe2], 0xc7
mov byte [esp + 0xe3], 0x15
mov byte [esp + 0xe4], 0x3b
mov byte [esp + 0xe5], 0xfb
mov byte [esp + 0xe6], 0x72
mov byte [esp + 0xe7], 0xe5
mov byte [esp + 0xe8], 0xeb
mov byte [esp + 0xe9], 0xd7
mov byte [esp + 0xea], 0x2b
mov byte [esp + 0xeb], 0xc9
mov byte [esp + 0xec], 0xb8
mov byte [esp + 0xed], 0xd8
mov byte [esp + 0xee], 0x7d
mov byte [esp + 0xef], 0x87
mov byte [esp + 0xf0], 0x46
mov byte [esp + 0xf2], 0x3c
mov byte [esp + 0xf3], 0xd8
mov byte [esp + 0xf4], 0x75
mov byte [esp + 0xf5], 0x99
mov byte [esp + 0xf6], cl
mov byte [esp + 0xf7], 0x80
mov byte [esp + 0xf8], 0x7d
mov byte [esp + 0xf9], 0xac
mov byte [esp + 0xfa], 0x98
mov byte [esp + 0xfb], 3
mov byte [esp + 0xfc], 0xf0
mov byte [esp + 0xfd], 0xac
mov byte [esp + 0x10f], cl
mov byte [esp + 0x114], cl
mov byte [esp + 0x126], cl
mov cl, 0xc8
mov byte [esp + 0xfe], 0x84
mov byte [esp + 0xff], 0xc0
mov byte [esp + 0x100], 0x74
mov byte [esp + 0x101], 0x17
mov byte [esp + 0x102], 0x3c
mov byte [esp + 0x103], 0xff
mov byte [esp + 0x104], 0x74
mov byte [esp + 0x105], 9
mov byte [esp + 0x106], 0xb4
mov byte [esp + 0x107], 0xe
mov byte [esp + 0x108], 0xbb
mov byte [esp + 0x109], 7
mov byte [esp + 0x10a], bl
mov byte [esp + 0x10b], dl
mov byte [esp + 0x10c], 0x10
mov byte [esp + 0x10d], 0xeb
mov byte [esp + 0x10e], 0xee
mov byte [esp + 0x110], 0x83
mov byte [esp + 0x111], 0x7d
mov byte [esp + 0x112], 0xeb
mov byte [esp + 0x113], 0xe5
mov byte [esp + 0x115], 0x81
mov byte [esp + 0x116], 0x7d
mov byte [esp + 0x117], 0xeb
mov byte [esp + 0x118], 0xe0
mov byte [esp + 0x119], 0x33
mov byte [esp + 0x11a], 0xc0
mov byte [esp + 0x11b], dl
mov byte [esp + 0x11c], 0x16
mov byte [esp + 0x11d], 0x5e
mov byte [esp + 0x11e], 0x1f
mov byte [esp + 0x11f], 0x8f
mov byte [esp + 0x120], 4
mov byte [esp + 0x121], 0x8f
mov byte [esp + 0x122], 0x44
mov byte [esp + 0x123], 2
mov byte [esp + 0x124], dl
mov byte [esp + 0x125], 0x19
mov byte [esp + 0x127], 0x82
mov byte [esp + 0x128], 0x7d
mov byte [esp + 0x129], 0x8b
mov byte [esp + 0x12a], 0x7d
mov byte [esp + 0x12b], 0xf
mov byte [esp + 0x12c], 0x83
mov byte [esp + 0x12d], 0xff
mov byte [esp + 0x12e], 2
mov byte [esp + 0x12f], 0x72
mov byte [esp + 0x130], cl
mov byte [esp + 0x131], 0x8b
mov byte [esp + 0x132], 0xc7
mov byte [esp + 0x133], 0x48
mov byte [esp + 0x134], 0x48
mov byte [esp + 0x135], 0x8a
mov byte [esp + 0x136], 0x4e
mov byte [esp + 0x137], 0xd
mov byte [esp + 0x138], 0xf7
mov byte [esp + 0x139], 0xe1
mov byte [esp + 0x13a], 3
mov byte [esp + 0x13b], 0x46
mov byte [esp + 0x13c], 0xfc
mov byte [esp + 0x13d], 0x13
mov byte [esp + 0x13e], 0x56
mov byte [esp + 0x13f], 0xfe
mov byte [esp + 0x140], 0xbb
mov byte [esp + 0x141], bl
mov byte [esp + 0x142], 7
mov byte [esp + 0x143], 0x53
mov byte [esp + 0x144], 0xb1
mov byte [esp + 0x145], 4
mov byte [esp + 0x146], 0xe8
mov byte [esp + 0x147], 0x16
mov byte [esp + 0x148], bl
mov byte [esp + 0x149], 0x5b
mov byte [esp + 0x14a], 0x72
mov byte [esp + 0x14b], cl
mov byte [esp + 0x14c], 0x81
mov byte [esp + 0x14d], 0x3f
mov cl, 0x91
mov byte [esp + 0x14e], 0x4d
mov byte [esp + 0x14f], 0x5a
mov byte [esp + 0x150], 0x75
mov byte [esp + 0x151], 0xa7
mov byte [esp + 0x152], 0x81
mov byte [esp + 0x153], 0xbf
mov byte [esp + 0x154], bl
mov byte [esp + 0x155], 2
mov byte [esp + 0x156], 0x42
mov byte [esp + 0x157], 0x4a
mov byte [esp + 0x158], 0x75
mov byte [esp + 0x159], 0x9f
mov byte [esp + 0x15a], 0xea
mov byte [esp + 0x15b], bl
mov byte [esp + 0x15c], 2
mov byte [esp + 0x15d], 0x70
mov byte [esp + 0x15e], bl
mov byte [esp + 0x15f], 0x50
mov byte [esp + 0x160], 0x52
mov byte [esp + 0x161], 0x51
mov byte [esp + 0x162], cl
mov byte [esp + 0x163], 0x92
mov byte [esp + 0x164], 0x33
mov byte [esp + 0x165], 0xd2
mov byte [esp + 0x166], 0xf7
mov byte [esp + 0x167], 0x76
mov byte [esp + 0x168], 0x18
mov byte [esp + 0x169], cl
mov byte [esp + 0x16a], 0xf7
mov byte [esp + 0x16b], 0x76
mov byte [esp + 0x16c], 0x18
mov byte [esp + 0x16d], 0x42
mov byte [esp + 0x16e], 0x87
mov byte [esp + 0x16f], 0xca
mov byte [esp + 0x170], 0xf7
mov byte [esp + 0x171], 0x76
mov byte [esp + 0x172], 0x1a
mov byte [esp + 0x173], 0x8a
mov byte [esp + 0x174], 0xf2
mov byte [esp + 0x175], 0x8a
mov byte [esp + 0x176], 0x56
mov byte [esp + 0x177], 0x24
mov byte [esp + 0x178], 0x8a
mov byte [esp + 0x179], 0xe8
mov byte [esp + 0x17a], 0xd0
mov byte [esp + 0x17b], 0xcc
mov byte [esp + 0x17c], 0xd0
mov byte [esp + 0x17d], 0xcc
mov byte [esp + 0x17e], 0xa
mov byte [esp + 0x17f], 0xcc
mov byte [esp + 0x180], 0xb8
mov byte [esp + 0x181], 1
mov byte [esp + 0x182], 2
mov byte [esp + 0x183], dl
mov byte [esp + 0x184], 0x13
mov byte [esp + 0x185], 0x59
mov byte [esp + 0x186], 0x5a
mov byte [esp + 0x187], 0x58
mov byte [esp + 0x188], 0x72
mov byte [esp + 0x189], 9
mov byte [esp + 0x18a], 0x40
mov byte [esp + 0x18b], 0x75
mov byte [esp + 0x18c], 1
mov byte [esp + 0x18d], 0x42
mov byte [esp + 0x18e], 3
mov byte [esp + 0x18f], 0x5e
mov byte [esp + 0x190], 0xb
mov byte [esp + 0x191], 0xe2
mov byte [esp + 0x192], 0xcc
mov byte [esp + 0x193], 0xc3
mov byte [esp + 0x194], 3
mov byte [esp + 0x195], 0x18
mov byte [esp + 0x196], 1
mov byte [esp + 0x197], 0x27
mov byte [esp + 0x198], 0xd
mov byte [esp + 0x199], 0xa
mov byte [esp + 0x19a], 0x49
mov byte [esp + 0x19b], 0x6e
mov byte [esp + 0x19c], 0x76
mov byte [esp + 0x19d], 0x61
mov cl, 0x73
mov byte [esp + 0x19e], 0x6c
mov byte [esp + 0x19f], 0x69
mov byte [esp + 0x1a0], 0x64
mov byte [esp + 0x1a1], 0x20
mov byte [esp + 0x1a2], cl
mov byte [esp + 0x1a3], 0x79
mov byte [esp + 0x1a4], cl
mov byte [esp + 0x1a5], 0x74
mov byte [esp + 0x1a6], 0x65
mov byte [esp + 0x1a7], 0x6d
mov byte [esp + 0x1a8], 0x20
mov byte [esp + 0x1a9], 0x64
mov byte [esp + 0x1aa], 0x69
mov byte [esp + 0x1ab], cl
mov byte [esp + 0x1ac], 0x6b
mov byte [esp + 0x1ad], 0xff
mov byte [esp + 0x1ae], 0xd
mov byte [esp + 0x1af], 0xa
mov byte [esp + 0x1b0], 0x44
mov byte [esp + 0x1b1], 0x69
mov byte [esp + 0x1b2], cl
mov byte [esp + 0x1b3], 0x6b
mov byte [esp + 0x1b4], 0x20
mov byte [esp + 0x1b5], 0x49
mov byte [esp + 0x1b6], 0x2f
mov byte [esp + 0x1b7], 0x4f
mov byte [esp + 0x1b8], 0x20
mov byte [esp + 0x1b9], 0x65
mov byte [esp + 0x1ba], 0x72
mov byte [esp + 0x1bb], 0x72
mov byte [esp + 0x1bc], 0x6f
mov byte [esp + 0x1bd], 0x72
mov byte [esp + 0x1be], 0xff
mov byte [esp + 0x1bf], 0xd
mov byte [esp + 0x1c0], 0xa
mov byte [esp + 0x1c1], 0x52
mov byte [esp + 0x1c2], 0x65
mov byte [esp + 0x1c3], 0x70
mov byte [esp + 0x1c4], 0x6c
mov byte [esp + 0x1c5], 0x61
mov byte [esp + 0x1c6], 0x63
mov byte [esp + 0x1c7], 0x65
mov byte [esp + 0x1c8], 0x20
mov byte [esp + 0x1c9], 0x74
mov byte [esp + 0x1ca], 0x68
mov byte [esp + 0x1cb], 0x65
mov byte [esp + 0x1cc], 0x20
mov byte [esp + 0x1cd], 0x64
mov byte [esp + 0x1ce], 0x69
mov byte [esp + 0x1cf], cl
mov byte [esp + 0x1d0], 0x6b
mov byte [esp + 0x1d1], 0x2c
mov byte [esp + 0x1d2], 0x20
mov byte [esp + 0x1d3], 0x61
mov byte [esp + 0x1d4], 0x6e
mov byte [esp + 0x1d5], 0x64
mov byte [esp + 0x1d6], 0x20
mov byte [esp + 0x1d7], 0x74
mov byte [esp + 0x1d8], 0x68
mov byte [esp + 0x1d9], 0x65
mov byte [esp + 0x1da], 0x6e
mov byte [esp + 0x1db], 0x20
mov byte [esp + 0x1dc], 0x70
mov byte [esp + 0x1dd], 0x72
mov byte [esp + 0x1de], 0x65
mov byte [esp + 0x1df], cl
mov byte [esp + 0x1e0], cl
mov byte [esp + 0x1e1], 0x20
mov byte [esp + 0x1e2], 0x61
mov byte [esp + 0x1e3], 0x6e
mov byte [esp + 0x1e4], 0x79
mov byte [esp + 0x1e5], 0x20
mov byte [esp + 0x1e6], 0x6b
mov byte [esp + 0x1e7], 0x65
mov byte [esp + 0x1e8], 0x79
mov byte [esp + 0x1e9], 0xd
mov byte [esp + 0x1ea], 0xa
mov byte [esp + 0x1eb], bl
mov byte [esp + 0x1ec], 0x49
mov byte [esp + 0x1ed], 0x4f
mov byte [esp + 0x1ee], 0x20
mov byte [esp + 0x1ef], 0x20
mov byte [esp + 0x1f0], 0x20
mov byte [esp + 0x1f1], 0x20
mov byte [esp + 0x1f2], 0x20
mov byte [esp + 0x1f3], 0x20
mov byte [esp + 0x1f4], 0x53
mov byte [esp + 0x1f5], 0x59
mov byte [esp + 0x1f6], 0x53
mov byte [esp + 0x1f7], 0x4d
mov byte [esp + 0x1f8], 0x53
mov byte [esp + 0x1f9], 0x44
mov byte [esp + 0x1fa], 0x4f
mov byte [esp + 0x1fb], 0x53
mov byte [esp + 0x1fc], 0x20
mov byte [esp + 0x1fd], 0x20
mov byte [esp + 0x1fe], 0x20
mov byte [esp + 0x1ff], 0x53
mov byte [esp + 0x200], 0x59
mov byte [esp + 0x201], 0x53
mov byte [esp + 0x202], 0x80
mov byte [esp + 0x203], 1
mov byte [esp + 0x204], bl
mov byte [esp + 0x205], 0x57
mov byte [esp + 0x206], 0x49
mov byte [esp + 0x207], 0x4e
mov byte [esp + 0x208], 0x42
mov byte [esp + 0x209], 0x4f
mov byte [esp + 0x20a], 0x4f
mov byte [esp + 0x20b], 0x54
mov byte [esp + 0x20c], 0x20
mov byte [esp + 0x20d], 0x53
mov byte [esp + 0x20e], 0x59
mov byte [esp + 0x20f], 0x53
mov byte [esp + 0x210], bl
mov byte [esp + 0x211], bl
mov byte [esp + 0x212], 0x55
mov byte [esp + 0x213], 0xaa
mov byte [esp + 0x214], 0xeb
mov byte [esp + 0x215], 0x58
mov byte [esp + 0x216], 0x90
mov byte [esp + 0x217], 0x4d
mov byte [esp + 0x218], 0x53
mov byte [esp + 0x219], 0x44
mov byte [esp + 0x21a], 0x4f
mov byte [esp + 0x21b], 0x53
mov byte [esp + 0x21c], 0x35
mov byte [esp + 0x21d], 0x2e
mov byte [esp + 0x21e], 0x30
mov byte [esp + 0x21f], bl
mov byte [esp + 0x220], 2
mov byte [esp + 0x221], 8
mov byte [esp + 0x222], 0x20
mov byte [esp + 0x223], bl
mov byte [esp + 0x224], 2
mov byte [esp + 0x225], bl
mov byte [esp + 0x226], bl
mov byte [esp + 0x227], bl
mov byte [esp + 0x228], bl
mov byte [esp + 0x229], pe_nt_image_headers32
mov byte [esp + 0x22a], bl
mov byte [esp + 0x22b], bl
mov byte [esp + 0x22c], 0x3f
mov byte [esp + 0x22d], bl
mov byte [esp + 0x22e], 0xff
mov byte [esp + 0x22f], bl
mov byte [esp + 0x230], bl
mov byte [esp + 0x231], bl
mov byte [esp + 0x232], bl
mov byte [esp + 0x233], bl
mov byte [esp + 0x234], 0xfe
mov byte [esp + 0x235], 0xff
mov byte [esp + 0x236], 0x7c
mov byte [esp + 0x237], bl
mov byte [esp + 0x238], 0x11
mov byte [esp + 0x239], 0x1f
mov byte [esp + 0x23a], bl
mov byte [esp + 0x23b], bl
mov byte [esp + 0x23c], bl
mov byte [esp + 0x23d], bl
mov byte [esp + 0x23e], bl
mov byte [esp + 0x23f], bl
mov byte [esp + 0x240], 2
mov byte [esp + 0x241], bl
mov byte [esp + 0x242], bl
mov byte [esp + 0x243], bl
mov byte [esp + 0x244], 1
mov byte [esp + 0x245], bl
mov byte [esp + 0x246], 6
mov byte [esp + 0x247], bl
mov byte [esp + 0x248], bl
mov byte [esp + 0x249], bl
mov byte [esp + 0x24a], bl
mov byte [esp + 0x24b], bl
mov byte [esp + 0x24c], bl
mov byte [esp + 0x24d], bl
mov byte [esp + 0x24e], bl
mov byte [esp + 0x24f], bl
mov byte [esp + 0x250], bl
mov byte [esp + 0x251], bl
mov byte [esp + 0x252], bl
mov byte [esp + 0x253], bl
mov byte [esp + 0x254], bl
mov byte [esp + 0x255], bl
mov byte [esp + 0x256], 0x29
mov byte [esp + 0x257], dl
mov byte [esp + 0x258], 0x1e
mov byte [esp + 0x259], 0x6f
mov byte [esp + 0x25a], 0x9c
mov byte [esp + 0x25b], 0x4e
mov byte [esp + 0x25c], 0x4f
mov byte [esp + 0x25d], 0x20
mov byte [esp + 0x25e], 0x4e
mov byte [esp + 0x25f], 0x41
mov byte [esp + 0x260], 0x4d
mov byte [esp + 0x261], 0x45
mov byte [esp + 0x262], 0x20
mov byte [esp + 0x263], 0x20
mov byte [esp + 0x264], 0x20
mov byte [esp + 0x265], 0x20
mov byte [esp + 0x266], 0x46
mov byte [esp + 0x267], 0x41
mov byte [esp + 0x268], 0x54
mov byte [esp + 0x269], 0x33
mov byte [esp + 0x26a], 0x32
mov byte [esp + 0x26b], 0x20
mov byte [esp + 0x26c], 0x20
mov byte [esp + 0x26d], 0x20
mov byte [esp + 0x26e], 0x33
mov byte [esp + 0x26f], 0xc9
mov byte [esp + 0x270], 0x8e
mov byte [esp + 0x271], 0xd1
mov byte [esp + 0x272], 0xbc
mov byte [esp + 0x273], 0xf4
mov byte [esp + 0x274], 0x7b
mov byte [esp + 0x275], 0x8e
mov byte [esp + 0x276], 0xc1
mov byte [esp + 0x277], 0x8e
mov byte [esp + 0x278], 0xb9
mov byte [esp + 0x279], 0xbd
mov byte [esp + 0x27a], bl
mov byte [esp + 0x27b], 0x7c
mov byte [esp + 0x27c], 0x88
mov byte [esp + 0x27d], 0x4e
mov byte [esp + 0x27e], 2
mov byte [esp + 0x27f], 0x8a
mov byte [esp + 0x280], 0x56
mov byte [esp + 0x281], 0x40
mov byte [esp + 0x282], 0xb4
mov byte [esp + 0x283], 8
mov byte [esp + 0x284], dl
mov byte [esp + 0x285], 0x13
mov byte [esp + 0x286], cl
mov byte [esp + 0x287], 5
mov byte [esp + 0x288], 0xb9
mov byte [esp + 0x289], 0xff
mov byte [esp + 0x28a], 0xff
mov byte [esp + 0x28b], 0x8a
mov byte [esp + 0x28c], 0xf1
mov byte [esp + 0x28d], al
mov byte [esp + 0x28e], 0xf
mov byte [esp + 0x28f], 0xb6
mov byte [esp + 0x290], 0xc6
mov byte [esp + 0x291], 0x40
mov byte [esp + 0x292], al
mov byte [esp + 0x293], 0xf
mov byte [esp + 0x294], 0xb6
mov byte [esp + 0x295], 0xd1
mov byte [esp + 0x296], 0x80
mov byte [esp + 0x297], 0xe2
mov byte [esp + 0x298], 0x3f
mov byte [esp + 0x299], 0xf7
mov byte [esp + 0x29a], 0xe2
mov byte [esp + 0x29b], 0x86
mov byte [esp + 0x29c], dl
mov byte [esp + 0x29d], 0xc0
mov byte [esp + 0x29e], 0xed
mov byte [esp + 0x29f], 6
mov byte [esp + 0x2a0], 0x41
mov byte [esp + 0x2a1], al
mov byte [esp + 0x2a2], 0xf
mov byte [esp + 0x2a3], 0xb7
mov byte [esp + 0x2a4], 0xc9
mov byte [esp + 0x2a5], al
mov byte [esp + 0x2a6], 0xf7
mov byte [esp + 0x2a7], 0xe1
mov byte [esp + 0x2a8], al
mov byte [esp + 0x2a9], 0x89
mov byte [esp + 0x2aa], 0x46
mov byte [esp + 0x2ab], pe_nt_image_headers32
mov byte [esp + 0x2ac], 0x83
mov byte [esp + 0x2ad], 0x7e
mov byte [esp + 0x2ae], 0x16
mov byte [esp + 0x2af], bl
mov byte [esp + 0x2b0], 0x75
mov byte [esp + 0x2b1], 0x38
mov byte [esp + 0x2b2], 0x83
mov byte [esp + 0x2b3], 0x7e
mov byte [esp + 0x2b4], 0x2a
mov byte [esp + 0x2b5], bl
mov byte [esp + 0x2b6], 0x77
mov byte [esp + 0x2b7], 0x32
mov byte [esp + 0x2b8], al
mov byte [esp + 0x2b9], 0x8b
mov byte [esp + 0x2ba], 0x46
mov byte [esp + 0x2bb], 0x1c
mov byte [esp + 0x2bc], al
mov byte [esp + 0x2bd], 0x83
mov byte [esp + 0x2be], 0xc0
mov byte [esp + 0x2bf], 0xc
mov byte [esp + 0x2c0], 0xbb
mov byte [esp + 0x2c1], bl
mov byte [esp + 0x2c2], 0x80
mov byte [esp + 0x2c3], 0xb9
mov byte [esp + 0x2c4], 1
mov byte [esp + 0x2c5], bl
mov byte [esp + 0x2c6], 0xe8
mov byte [esp + 0x2c7], 0x2b
mov byte [esp + 0x2c8], bl
mov byte [esp + 0x2c9], 0xe9
mov byte [esp + 0x2ca], 0x48
mov byte [esp + 0x2cb], 3
mov byte [esp + 0x2cc], 0xa0
mov byte [esp + 0x2cd], 0xfa
mov byte [esp + 0x2ce], 0x7d
mov byte [esp + 0x2cf], 0xb4
mov byte [esp + 0x2d0], 0x7d
mov byte [esp + 0x2d1], 0x8b
mov byte [esp + 0x2d2], 0xf0
mov byte [esp + 0x2d3], 0xac
mov byte [esp + 0x2d4], 0x84
mov byte [esp + 0x2d5], 0xc0
mov byte [esp + 0x2d6], 0x74
mov byte [esp + 0x2d7], 0x17
mov byte [esp + 0x2d8], 0x3c
mov byte [esp + 0x2d9], 0xff
mov byte [esp + 0x2da], 0x74
mov byte [esp + 0x2db], 9
mov byte [esp + 0x2dc], 0xb4
mov byte [esp + 0x2dd], 0xe
mov byte [esp + 0x2de], 0xbb
mov byte [esp + 0x2df], 7
mov byte [esp + 0x2e0], bl
mov byte [esp + 0x2e1], dl
mov byte [esp + 0x2e2], 0x10
mov byte [esp + 0x2e3], 0xeb
mov byte [esp + 0x2e4], 0xee
mov byte [esp + 0x2e5], 0xa0
mov byte [esp + 0x2e6], 0xfb
mov byte [esp + 0x2e7], 0x7d
mov byte [esp + 0x2e8], 0xeb
mov byte [esp + 0x2e9], 0xe5
mov byte [esp + 0x2ea], 0xa0
mov byte [esp + 0x2eb], 0xf9
mov byte [esp + 0x2ec], 0x7d
mov byte [esp + 0x2ed], 0xeb
mov byte [esp + 0x2ee], 0xe0
mov byte [esp + 0x2ef], 0x98
mov byte [esp + 0x2f0], dl
mov byte [esp + 0x2f1], 0x16
mov byte [esp + 0x2f2], dl
mov byte [esp + 0x2f3], 0x19
mov byte [esp + 0x2f4], al
mov byte [esp + 0x2f5], 0x60
mov byte [esp + 0x2f6], al
mov byte [esp + 0x2f7], 0x3b
mov byte [esp + 0x2f8], 0x46
mov byte [esp + 0x2f9], pe_nt_image_headers32
mov byte [esp + 0x2fa], 0xf
mov byte [esp + 0x2fb], 0x82
mov byte [esp + 0x2fc], 0x48
mov byte [esp + 0x2fd], bl
mov byte [esp + 0x2fe], al
mov byte [esp + 0x2ff], 0x68
mov byte [esp + 0x300], bl
mov byte [esp + 0x301], al
mov byte [esp + 0x302], 0x50
mov byte [esp + 0x303], 6
mov byte [esp + 0x304], 0x53
mov byte [esp + 0x305], al
mov byte [esp + 0x306], 0x68
mov byte [esp + 0x307], 0x10
mov byte [esp + 0x308], bl
mov byte [esp + 0x309], 1
mov byte [esp + 0x30a], bl
mov byte [esp + 0x30b], 0x80
mov byte [esp + 0x30c], 0x7e
mov byte [esp + 0x30d], 2
mov byte [esp + 0x30e], bl
mov byte [esp + 0x30f], 0xf
mov byte [esp + 0x310], 0x85
mov byte [esp + 0x311], 2
mov byte [esp + 0x312], bl
mov byte [esp + 0x313], 0xb4
mov byte [esp + 0x314], 0x41
mov byte [esp + 0x315], 0xbb
mov byte [esp + 0x316], 0xaa
mov byte [esp + 0x317], 0x55
mov byte [esp + 0x318], 0x8a
mov byte [esp + 0x319], 0x56
mov byte [esp + 0x31a], 0x40
mov byte [esp + 0x31b], dl
mov byte [esp + 0x31c], 0x13
mov byte [esp + 0x31d], 0xf
mov byte [esp + 0x31e], 0x82
mov byte [esp + 0x31f], 0x1c
mov byte [esp + 0x320], bl
mov byte [esp + 0x321], 0x81
mov byte [esp + 0x322], 0xfb
mov byte [esp + 0x323], 0x55
mov byte [esp + 0x324], 0xaa
mov byte [esp + 0x325], 0xf
mov byte [esp + 0x326], 0x85
mov byte [esp + 0x327], 0x14
mov byte [esp + 0x328], bl
mov byte [esp + 0x329], 0xf6
mov byte [esp + 0x32a], 0xc1
mov byte [esp + 0x32b], 1
mov byte [esp + 0x32c], 0xf
mov byte [esp + 0x32d], 0x84
mov byte [esp + 0x32e], 0xd
mov byte [esp + 0x32f], bl
mov byte [esp + 0x330], 0xfe
mov byte [esp + 0x331], 0x46
mov byte [esp + 0x332], 2
mov byte [esp + 0x333], 0xb4
mov byte [esp + 0x334], 0x42
mov byte [esp + 0x335], 0x8a
mov byte [esp + 0x336], 0x56
mov byte [esp + 0x337], 0x40
mov byte [esp + 0x338], 0x8b
mov byte [esp + 0x339], 0xf4
mov byte [esp + 0x33a], dl
mov byte [esp + 0x33b], 0x13
mov byte [esp + 0x33c], 0xb0
mov byte [esp + 0x33d], 0xf9
mov byte [esp + 0x33e], al
mov byte [esp + 0x33f], 0x58
mov byte [esp + 0x340], al
mov byte [esp + 0x341], 0x58
mov byte [esp + 0x342], al
mov byte [esp + 0x343], 0x58
mov byte [esp + 0x344], al
mov byte [esp + 0x345], 0x58
mov byte [esp + 0x346], 0xeb
mov byte [esp + 0x347], 0x2a
mov byte [esp + 0x348], al
mov byte [esp + 0x349], 0x33
mov byte [esp + 0x34a], 0xd2
mov byte [esp + 0x34b], al
mov byte [esp + 0x34c], 0xf
mov byte [esp + 0x34d], 0xb7
mov byte [esp + 0x34e], 0x4e
mov byte [esp + 0x34f], 0x18
mov byte [esp + 0x350], al
mov byte [esp + 0x351], 0xf3
mov byte [esp + 0x352], 0xf1
mov byte [esp + 0x353], 0xfe
mov byte [esp + 0x354], 0xc2
mov byte [esp + 0x355], 0x8a
mov byte [esp + 0x356], 0xca
mov byte [esp + 0x357], al
mov byte [esp + 0x358], 0x8b
mov byte [esp + 0x359], 0xd0
mov byte [esp + 0x35a], al
mov byte [esp + 0x35b], 0xc1
mov byte [esp + 0x35c], 0xea
mov byte [esp + 0x35d], 0x10
mov byte [esp + 0x35e], 0xf7
mov byte [esp + 0x35f], 0x76
mov byte [esp + 0x360], 0x1a
mov byte [esp + 0x361], 0x86
mov byte [esp + 0x362], 0xd6
mov byte [esp + 0x363], 0x8a
mov byte [esp + 0x364], 0x56
mov byte [esp + 0x365], 0x40
mov byte [esp + 0x366], 0x8a
mov byte [esp + 0x367], 0xe8
mov byte [esp + 0x368], 0xc0
mov byte [esp + 0x369], 0x84
mov byte [esp + 0x36a], 6
mov byte [esp + 0x36b], 0xa
mov byte [esp + 0x36c], 0xcc
mov byte [esp + 0x36d], 0xb8
mov byte [esp + 0x36e], 1
mov byte [esp + 0x36f], 2
mov byte [esp + 0x370], dl
mov byte [esp + 0x371], 0x13
mov byte [esp + 0x372], al
mov byte [esp + 0x373], 0x61
mov byte [esp + 0x374], 0xf
mov byte [esp + 0x375], 0x82
mov byte [esp + 0x376], 0x54
mov byte [esp + 0x377], 0xff
mov byte [esp + 0x378], 0x81
mov byte [esp + 0x379], 0xc3
mov byte [esp + 0x37a], bl
mov byte [esp + 0x37b], 2
mov byte [esp + 0x37c], al
mov byte [esp + 0x37d], 0x40
mov byte [esp + 0x37e], 0x49
mov byte [esp + 0x37f], 0x4f
mov byte [esp + 0x380], 0x85
mov byte [esp + 0x381], 0x71
mov byte [esp + 0x382], 0xff
mov al, 0x4c
mov byte [esp + 0x383], 0xc3
mov byte [esp + 0x384], 0x4e
mov byte [esp + 0x385], 0x54
mov byte [esp + 0x386], al
mov byte [esp + 0x387], 0x44
mov byte [esp + 0x388], 0x52
mov byte [esp + 0x389], 0x20
mov byte [esp + 0x38a], 0x20
mov byte [esp + 0x38b], 0x20
mov byte [esp + 0x38c], 0x20
mov byte [esp + 0x38d], 0x20
mov byte [esp + 0x38e], 0x20
mov byte [esp + 0x38f], bl
mov byte [esp + 0x390], bl
mov byte [esp + 0x391], bl
mov byte [esp + 0x392], bl
mov byte [esp + 0x393], bl
mov byte [esp + 0x394], bl
mov byte [esp + 0x395], bl
mov byte [esp + 0x396], bl
mov byte [esp + 0x397], bl
mov byte [esp + 0x398], bl
mov byte [esp + 0x399], bl
mov byte [esp + 0x39a], bl
mov byte [esp + 0x39b], bl
mov byte [esp + 0x39c], bl
mov byte [esp + 0x39d], bl
mov byte [esp + 0x39e], bl
mov byte [esp + 0x39f], bl
mov byte [esp + 0x3a0], bl
mov byte [esp + 0x3a1], bl
mov byte [esp + 0x3a2], bl
mov byte [esp + 0x3a3], bl
mov byte [esp + 0x3a4], bl
mov byte [esp + 0x3a5], bl
mov byte [esp + 0x3a6], bl
mov byte [esp + 0x3a7], bl
mov byte [esp + 0x3a8], bl
mov byte [esp + 0x3a9], bl
mov byte [esp + 0x3aa], bl
mov byte [esp + 0x3ab], bl
mov byte [esp + 0x3ac], bl
mov byte [esp + 0x3ad], bl
mov byte [esp + 0x3ae], bl
mov byte [esp + 0x3af], bl
mov byte [esp + 0x3b0], bl
mov byte [esp + 0x3b1], bl
mov byte [esp + 0x3b2], bl
mov byte [esp + 0x3b3], bl
mov byte [esp + 0x3b4], bl
mov byte [esp + 0x3b5], bl
mov byte [esp + 0x3b6], bl
mov byte [esp + 0x3b7], bl
mov byte [esp + 0x3b8], bl
mov byte [esp + 0x3b9], bl
mov byte [esp + 0x3ba], bl
mov byte [esp + 0x3bb], bl
mov byte [esp + 0x3bc], bl
mov byte [esp + 0x3bd], bl
mov byte [esp + 0x3be], bl
mov byte [esp + 0x3bf], bl
mov byte [esp + 0x3c0], 0xd
mov byte [esp + 0x3c1], 0xa
mov byte [esp + 0x3c2], 0x4e
mov byte [esp + 0x3c3], 0x54
mov byte [esp + 0x3c4], al
mov byte [esp + 0x3c5], 0x44
mov byte [esp + 0x3c6], 0x52
mov byte [esp + 0x3c7], 0x20
mov byte [esp + 0x3c8], 0x69
mov byte [esp + 0x3c9], cl
mov byte [esp + 0x3ca], 0x20
mov byte [esp + 0x3cb], 0x6d
mov byte [esp + 0x3cc], 0x69
mov byte [esp + 0x3cd], cl
mov byte [esp + 0x3ce], cl
mov byte [esp + 0x3cf], 0x69
mov byte [esp + 0x3d0], 0x68
mov byte [esp + 0x3d1], 0x67
mov byte [esp + 0x3d2], 0xff
push ebx
mov byte [esp + 0x3d7], 0xd
mov byte [esp + 0x3d8], 0xa
mov byte [esp + 0x3d9], 0x44
mov byte [esp + 0x3da], 0x69
mov byte [esp + 0x3db], cl
mov byte [esp + 0x3dc], 0x6b
mov byte [esp + 0x3dd], 0x20
mov byte [esp + 0x3de], 0x65
mov byte [esp + 0x3df], 0x72
mov byte [esp + 0x3e0], 0x72
mov byte [esp + 0x3e1], 0x6f
mov byte [esp + 0x3e2], 0x72
mov byte [esp + 0x3e3], 0xff
mov byte [esp + 0x3e4], 0xd
mov byte [esp + 0x3e5], 0xa
mov byte [esp + 0x3e6], 0x50
mov byte [esp + 0x3e7], 0x72
mov byte [esp + 0x3e8], 0x65
mov byte [esp + 0x3e9], cl
mov byte [esp + 0x3ea], cl
mov byte [esp + 0x3eb], 0x20
mov byte [esp + 0x3ec], 0x61
mov byte [esp + 0x3ed], 0x6e
mov byte [esp + 0x3ee], 0x79
mov byte [esp + 0x3ef], 0x20
mov byte [esp + 0x3f0], 0x6b
mov byte [esp + 0x3f1], 0x65
mov byte [esp + 0x3f2], 0x79
mov byte [esp + 0x3f3], 0x20
mov byte [esp + 0x3f4], 0x74
mov byte [esp + 0x3f5], 0x6f
mov byte [esp + 0x3f6], 0x20
mov byte [esp + 0x3f7], 0x72
mov byte [esp + 0x3f8], 0x65
mov byte [esp + 0x3f9], cl
mov byte [esp + 0x3fa], 0x74
mov byte [esp + 0x3fb], 0x61
mov byte [esp + 0x3fc], 0x72
mov byte [esp + 0x3fd], 0x74
mov byte [esp + 0x3fe], 0xd
mov byte [esp + 0x3ff], 0xa
mov byte [esp + 0x400], bl
mov byte [esp + 0x401], bl
mov byte [esp + 0x402], bl
mov byte [esp + 0x403], bl
mov byte [esp + 0x404], bl
mov byte [esp + 0x405], bl
mov byte [esp + 0x406], bl
mov byte [esp + 0x407], bl
mov byte [esp + 0x408], bl
mov byte [esp + 0x409], bl
mov byte [esp + 0x40a], bl
mov byte [esp + 0x40b], bl
mov byte [esp + 0x40c], bl
mov byte [esp + 0x40d], bl
mov byte [esp + 0x40e], bl
mov byte [esp + 0x40f], bl
mov byte [esp + 0x410], bl
mov byte [esp + 0x411], 0xac
mov byte [esp + 0x412], 0xbf
mov byte [esp + 0x413], 0xcc
mov byte [esp + 0x414], bl
mov byte [esp + 0x415], bl
mov byte [esp + 0x416], 0x55
mov byte [esp + 0x417], 0xaa
call dword [sym.imp.MSVCRT.dll_time]
push eax
call dword [sym.imp.MSVCRT.dll_srand]
mov edi, dword [sym.imp.MSVCRT.dll_rand]
add esp, 8
mov esi, 0xa
call edi
dec esi
jne 0x4964e6
call edi
add eax, 0x9380
mov dword [esp + 0x414], eax
call edi
mov esi, dword [esp + 0x824]
mov edx, eax
mov eax, dword [esp + 0x838]
cmp esi, 0x7d00
jg 0x49654b
cmp eax, ebx
jne 0x49654b
cmp esi, 0xb40
mov edi, 1
jg 0x49652b
mov al, 1
jmp 0x49695a
cmp esi, 0x2000
jle 0x496958
cmp esi, 0x3800
setg al
dec eax
and al, 0xfc
add eax, 8
jmp 0x49695a
cmp esi, 0x3e8000
jg 0x4965b5
cmp eax, ebx
jne 0x4965b5
xor edi, edi
cmp esi, 0xfa00
jg 0x496568
mov al, 1
jmp 0x49695a
cmp esi, 0x1f400
jle 0x496958
cmp esi, 0x3e800
jg 0x496583
mov al, 4
jmp 0x49695a
cmp esi, 0x7d000
jg 0x496592
mov al, 8
jmp 0x49695a
cmp esi, 0xfa000
jg 0x4965a1
mov al, 0x10
jmp 0x49695a
cmp esi, 0x1f4000
setg al
dec eax
and al, 0xe0
add eax, 0x40
jmp 0x49695a
cmp esi, 0xfa0000
jg 0x4965c4
mov byte [esp + 0x13], 8
jmp 0x4965e6
cmp esi, 0x1f40000
jg 0x4965d3
mov byte [esp + 0x13], 0x10
jmp 0x4965e6
cmp esi, 0x3e80000
setg al
dec eax
and al, 0xe0
add eax, 0x40
mov byte [esp + 0x13], al
mov ecx, 0x80
xor eax, eax
lea edi, [esp + 0x418]
mov byte [esp + 0x259], dl
rep stosd dword es:[edi], eax
mov ecx, 0x80
lea edi, [esp + 0x618]
rep stosd dword es:[edi], eax
mov al, byte [esp + 0x13]
push ebx
mov byte [esp + 0x225], al
mov eax, dword [esp + 0x418]
mov byte [esp + 0x25b], al
sar eax, 8
mov byte [esp + 0x25c], al
mov eax, dword [esp + 0x82c]
sar edx, 8
mov byte [esp + 0x25e], dl
mov byte [esp + 0x234], al
mov ecx, eax
mov edx, eax
sar eax, 0x18
mov byte [esp + 0x237], al
lea eax, [esp + 0x238]
sar ecx, 8
sar edx, 0x10
push eax
push esi
mov byte [esp + 0x23d], cl
mov byte [esp + 0x23e], dl
call fcn.0049c210
add esp, 0xc
cmp esi, 0x200000
jge 0x49668c
mov eax, 0x7d1
jmp 0x49671a
cmp esi, 0x400000
jge 0x49669b
mov eax, 0xf91
jmp 0x49671a
cmp esi, 0x800000
jge 0x4966aa
mov eax, 0x1f11
jmp 0x49671a
cmp esi, 0x1000000
jge 0x4966b9
mov eax, 0x3e21
jmp 0x49671a
cmp esi, 0x2000000
jge 0x4966c8
mov eax, 0x7c41
jmp 0x49671a
cmp esi, 0x4000000
jge 0x4966d7
mov eax, 0xf881
jmp 0x49671a
cmp esi, 0x8000000
jge 0x4966e6
mov eax, 0x1f101
jmp 0x49671a
cmp esi, 0x10000000
jge 0x4966f5
mov eax, 0x3e201
jmp 0x49671a
cmp esi, 0x20000000
jge 0x496704
mov eax, 0x7c401
jmp 0x49671a
xor eax, eax
cmp esi, 0x40000000
setge al
dec eax
and eax, 0xfff07800
add eax, 0x1f1001
lea ecx, [esp + 0x238]
push ebx
push ecx
push eax
call fcn.0049c210
mov eax, dword [esp + 0x83c]
add esp, 0xc
cmp eax, ebx
je 0x49677c
mov ebp, dword [esp + 0x834]
lea eax, [esp + 0x25b]
xor edx, edx
sub ebp, eax
mov edi, dword [esp + 0x834]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp edx, ecx
jge 0x49676c
lea esi, [esp + edx + 0x25b]
mov cl, byte [esi + ebp]
mov byte [esi], cl
jmp 0x496774
mov byte [esp + edx + 0x25b], 0x20
inc edx
cmp edx, 0xb
jl 0x496749
jmp 0x4967a4
cmp dword [esp + 0x83c], ebx
je 0x4967a4
xor edx, edx
mov dword [esp + 0x25b], edx
mov dword [esp + 0x25f], edx
mov word [esp + 0x263], dx
mov byte [esp + 0x265], dl
mov esi, dword [esp + 0x81c]
push esi
call fcn.0048f710
mov edi, dword [esp + 0x824]
lea eax, [esp + 0x218]
push eax
push edi
push 1
push esi
call fcn.0048f970
add esp, 0x14
test eax, eax
jne 0x4967e0
pop edi
pop esi
pop ebp
mov eax, 0xe5
pop ebx
add esp, 0x808
ret
lea ecx, [esp + 0x418]
lea edx, [edi + 1]
push ecx
push edx
push 1
push esi
mov byte [esp + 0x428], 0x52
mov byte [esp + 0x429], 0x52
mov byte [esp + 0x42a], 0x61
mov byte [esp + 0x42b], 0x41
mov byte [esp + 0x60c], 0x72
mov byte [esp + 0x60d], 0x72
mov byte [esp + 0x60e], 0x41
mov byte [esp + 0x60f], 0x61
mov byte [esp + 0x610], 0xff
mov byte [esp + 0x611], 0xff
mov byte [esp + 0x612], 0xff
mov byte [esp + 0x613], 0xff
mov byte [esp + 0x614], 2
mov byte [esp + 0x615], bl
mov byte [esp + 0x616], bl
mov byte [esp + 0x617], bl
mov byte [esp + 0x626], 0x55
mov byte [esp + 0x627], 0xaa
call fcn.0048f970
add esp, 0x10
test eax, eax
jne 0x496898
pop edi
pop esi
pop ebp
mov eax, 0xe5
pop ebx
add esp, 0x808
ret
lea eax, [esp + 0x618]
lea ecx, [edi + 2]
push eax
push ecx
push 1
push esi
mov byte [esp + 0x826], 0x55
mov byte [esp + 0x827], 0xaa
call fcn.0048f970
add esp, 0x10
test eax, eax
jne 0x4968d3
pop edi
pop esi
pop ebp
mov eax, 0xe5
pop ebx
add esp, 0x808
ret
lea edx, [esp + 0x214]
lea eax, [edi + 6]
push edx
push eax
push 1
push esi
call fcn.0048f970
add esp, 0x10
test eax, eax
jne 0x4968fe
pop edi
pop esi
pop ebp
mov eax, 0xe5
pop ebx
add esp, 0x808
ret
lea ecx, [esp + 0x418]
lea edx, [edi + 7]
push ecx
push edx
push 1
push esi
call fcn.0048f970
add esp, 0x10
test eax, eax
jne 0x496929
pop edi
pop esi
pop ebp
mov eax, 0xe5
pop ebx
add esp, 0x808
ret
lea eax, [esp + 0x618]
add edi, 8
push eax
push edi
push 1
push esi
call fcn.0048f970
add esp, 0x10
test eax, eax
jne 0x496ae3
pop edi
pop esi
pop ebp
mov eax, 0xe5
pop ebx
add esp, 0x808
ret
mov al, 2
mov byte [esp + 0x21], al
mov eax, dword [esp + 0x414]
mov byte [esp + 0x3b], al
mov byte [esp + 0x3d], dl
sar eax, 8
mov byte [esp + 0x3c], al
mov eax, dword [esp + 0x828]
sar edx, 8
mov byte [esp + 0x3e], dl
mov ecx, eax
mov edx, eax
mov byte [esp + 0x30], al
sar ecx, 8
sar edx, 0x10
sar eax, 0x18
cmp esi, 0xfa00
mov byte [esp + 0x38], bl
mov byte [esp + 0x31], cl
mov byte [esp + 0x32], dl
mov byte [esp + 0x33], al
jle 0x4969d0
cmp edi, ebx
jne 0x4969d0
lea eax, [esp + 0x34]
push ebx
add esi, 0xffffffdf
push eax
push esi
mov byte [esp + 0x33], bl
mov byte [esp + 0x34], bl
call fcn.0049c210
add esp, 0xc
mov byte [esp + 0x4e], 0x36
jmp 0x496a2f
lea ecx, [esp + 0x27]
push ebx
add esi, 0xffffffdf
push ecx
push esi
mov byte [esp + 0x40], bl
mov byte [esp + 0x41], bl
mov byte [esp + 0x42], bl
mov byte [esp + 0x43], bl
mov byte [esp + 0x56], 0x46
mov byte [esp + 0x57], 0x41
mov byte [esp + 0x58], 0x54
mov byte [esp + 0x59], 0x31
mov byte [esp + 0x5a], 0x32
mov byte [esp + 0x5b], 0x20
mov byte [esp + 0x5c], 0x20
mov byte [esp + 0x5d], 0x20
call fcn.0049c210
mov edx, edi
add esp, 0xc
neg edx
sbb dl, dl
mov byte [esp + 0x29], pe_nt_image_headers32
and dl, 0xfc
add dl, 0x36
mov byte [esp + 0x4e], dl
cmp dword [esp + 0x82c], 2
jne 0x496a40
mov byte [esp + 0x2a], 0xc
jmp 0x496a4e
mov eax, edi
neg eax
sbb al, al
and al, 0xd
dec al
mov byte [esp + 0x2a], al
cmp dword [esp + 0x830], ebx
je 0x496a8e
mov ebp, dword [esp + 0x834]
lea ecx, [esp + 0x3f]
mov esi, ebp
sub esi, ecx
mov edi, ebp
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ebx, ecx
jge 0x496a81
lea eax, [esp + ebx + 0x3f]
mov dl, byte [esi + eax]
mov byte [eax], dl
jmp 0x496a86
mov byte [esp + ebx + 0x3f], 0x20
inc ebx
cmp ebx, 0xb
jl 0x496a66
jmp 0x496aaa
cmp dword [esp + 0x83c], ebx
je 0x496aaa
xor eax, eax
mov dword [esp + 0x3f], eax
mov dword [esp + 0x43], eax
mov word [esp + 0x47], ax
mov byte [esp + 0x49], al
mov esi, dword [esp + 0x81c]
push esi
call fcn.0048f710
mov edx, dword [esp + 0x824]
lea ecx, [esp + 0x18]
push ecx
push edx
push 1
push esi
call fcn.0048f970
add esp, 0x14
test eax, eax
jne 0x496ae3
pop edi
pop esi
pop ebp
mov eax, 0xe5
pop ebx
add esp, 0x808
ret
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x808
ret