Function at 0x486d10
Capabilities:
Check for time delay via gettickcount
Check http status code
Contain obfuscated stackstrings
Encode data using xor
Hash data with crc32
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x658ed0
push 0x5c85d0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1e4c
call fcn.005c8e60
mov eax, dword [0x66f040]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1e58], edx
mov dword [ebp - 0x1e3c], ecx
mov edi, dword [ebp + 8]
mov dword [ebp - 0x1e34], edi
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x1e28], esi
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1e24], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1e30], eax
mov ebx, dword [ebp + 0x18]
mov dword [ebp - 0x1e40], ebx
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1e5c], eax
mov dword [esi], 0
push 0
push dword [0x680da4]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x488d59
mov dword [ebp - 0x1e1c], 0x70004f
mov dword [ebp - 0x1e18], 0x720065
mov dword [ebp - 0x1e14], 0x2f0061
mov dword [ebp - 0x1e10], 0x2e0039
mov dword [ebp - 0x1e0c], 0x300038
mov dword [ebp - 0x1e08], 0x280020
mov dword [ebp - 0x1e04], 0x61004d
mov dword [ebp - 0x1e00], 0x690063
mov dword [ebp - 0x1dfc], 0x74006e
mov dword [ebp - 0x1df8], 0x73006f
mov dword [ebp - 0x1df4], 0x3b0068
mov dword [ebp - 0x1df0], 0x490020
mov dword [ebp - 0x1dec], 0x74006e
mov dword [ebp - 0x1de8], 0x6c0065
mov dword [ebp - 0x1de4], 0x4d0020
mov dword [ebp - 0x1de0], 0x630061
mov dword [ebp - 0x1ddc], 0x4f0020
mov dword [ebp - 0x1dd8], 0x200053
mov dword [ebp - 0x1dd4], 0x3b0058
mov dword [ebp - 0x1dd0], 0x550020
mov dword [ebp - 0x1dcc], 0x20003b
mov dword [ebp - 0x1dc8], 0x6e0065
mov dword [ebp - 0x1dc4], 0x200029
mov dword [ebp - 0x1dc0], 0x720050
mov dword [ebp - 0x1dbc], 0x730065
mov dword [ebp - 0x1db8], 0x6f0074
mov dword [ebp - 0x1db4], 0x32002f
mov dword [ebp - 0x1db0], 0x32002e
mov dword [ebp - 0x1dac], 0x31002e
mov dword [ebp - 0x1da8], 0x200035
mov dword [ebp - 0x1da4], 0x650056
mov dword [ebp - 0x1da0], 0x730072
mov dword [ebp - 0x1d9c], 0x6f0069
mov dword [ebp - 0x1d98], 0x2f006e
mov dword [ebp - 0x1d94], 0x300031
mov dword [ebp - 0x1d90], 0x30002e
mov dword [ebp - 0x1d8c], 0x30
push 0x16c
push 0
lea eax, [ebp - 0x1d88]
push eax
call fcn.005c7c50
mov dword [ebp - 0x1c1c], 0x70004f
mov dword [ebp - 0x1c18], 0x720065
mov dword [ebp - 0x1c14], 0x2f0061
mov dword [ebp - 0x1c10], 0x2e0039
mov dword [ebp - 0x1c0c], 0x300036
mov dword [ebp - 0x1c08], 0x280020
mov dword [ebp - 0x1c04], 0x690057
mov dword [ebp - 0x1c00], 0x64006e
mov dword [ebp - 0x1bfc], 0x77006f
mov dword [ebp - 0x1bf8], 0x200073
mov dword [ebp - 0x1bf4], 0x54004e
mov dword [ebp - 0x1bf0], 0x360020
mov dword [ebp - 0x1bec], 0x30002e
mov dword [ebp - 0x1be8], 0x20003b
mov dword [ebp - 0x1be4], 0x3b0055
mov dword [ebp - 0x1be0], 0x650020
mov dword [ebp - 0x1bdc], 0x29006e
mov dword [ebp - 0x1bd8], 0x500020
mov dword [ebp - 0x1bd4], 0x650072
mov dword [ebp - 0x1bd0], 0x740073
mov dword [ebp - 0x1bcc], 0x2f006f
mov dword [ebp - 0x1bc8], 0x2e0032
mov dword [ebp - 0x1bc4], 0x2e0031
mov dword [ebp - 0x1bc0], 0x31
push 0x1a0
push 0
lea eax, [ebp - 0x1bbc]
push eax
call fcn.005c7c50
mov dword [ebp - 0x1a1c], 0x6f004d
mov dword [ebp - 0x1a18], 0x69007a
mov dword [ebp - 0x1a14], 0x6c006c
mov dword [ebp - 0x1a10], 0x2f0061
mov dword [ebp - 0x1a0c], 0x2e0035
mov dword [ebp - 0x1a08], 0x200030
mov dword [ebp - 0x1a04], 0x570028
mov dword [ebp - 0x1a00], 0x6e0069
mov dword [ebp - 0x19fc], 0x6f0064
mov dword [ebp - 0x19f8], 0x730077
mov dword [ebp - 0x19f4], 0x4e0020
mov dword [ebp - 0x19f0], 0x200054
mov dword [ebp - 0x19ec], 0x2e0036
mov dword [ebp - 0x19e8], 0x3b0031
mov dword [ebp - 0x19e4], 0x570020
mov dword [ebp - 0x19e0], 0x6e0069
mov dword [ebp - 0x19dc], 0x340036
mov dword [ebp - 0x19d8], 0x20003b
mov dword [ebp - 0x19d4], 0x360078
mov dword [ebp - 0x19d0], 0x3b0034
mov dword [ebp - 0x19cc], 0x720020
mov dword [ebp - 0x19c8], 0x3a0076
mov dword [ebp - 0x19c4], 0x370034
mov dword [ebp - 0x19c0], 0x30002e
mov dword [ebp - 0x19bc], 0x200029
mov dword [ebp - 0x19b8], 0x650047
mov dword [ebp - 0x19b4], 0x6b0063
mov dword [ebp - 0x19b0], 0x2f006f
mov dword [ebp - 0x19ac], 0x300032
mov dword [ebp - 0x19a8], 0x300031
mov dword [ebp - 0x19a4], 0x310030
mov dword [ebp - 0x19a0], 0x310030
mov dword [ebp - 0x199c], 0x460020
mov dword [ebp - 0x1998], 0x720069
mov dword [ebp - 0x1994], 0x660065
mov dword [ebp - 0x1990], 0x78006f
mov dword [ebp - 0x198c], 0x34002f
mov dword [ebp - 0x1988], 0x2e0037
mov dword [ebp - 0x1984], 0x30
push 0x164
push 0
lea eax, [ebp - 0x1980]
push eax
call fcn.005c7c50
mov dword [ebp - 0x181c], 0x6f004d
mov dword [ebp - 0x1818], 0x69007a
mov dword [ebp - 0x1814], 0x6c006c
mov dword [ebp - 0x1810], 0x2f0061
mov dword [ebp - 0x180c], 0x2e0035
mov dword [ebp - 0x1808], 0x200030
mov dword [ebp - 0x1804], 0x4d0028
mov dword [ebp - 0x1800], 0x630061
mov dword [ebp - 0x17fc], 0x6e0069
mov dword [ebp - 0x17f8], 0x6f0074
mov dword [ebp - 0x17f4], 0x680073
mov dword [ebp - 0x17f0], 0x20003b
mov dword [ebp - 0x17ec], 0x6e0049
mov dword [ebp - 0x17e8], 0x650074
mov dword [ebp - 0x17e4], 0x20006c
mov dword [ebp - 0x17e0], 0x61004d
mov dword [ebp - 0x17dc], 0x200063
mov dword [ebp - 0x17d8], 0x53004f
mov dword [ebp - 0x17d4], 0x580020
mov dword [ebp - 0x17d0], 0x780020
mov dword [ebp - 0x17cc], 0x79002e
mov dword [ebp - 0x17c8], 0x20003b
mov dword [ebp - 0x17c4], 0x760072
mov dword [ebp - 0x17c0], 0x34003a
mov dword [ebp - 0x17bc], 0x2e0032
mov dword [ebp - 0x17b8], 0x290030
mov dword [ebp - 0x17b4], 0x470020
mov dword [ebp - 0x17b0], 0x630065
mov dword [ebp - 0x17ac], 0x6f006b
mov dword [ebp - 0x17a8], 0x32002f
mov dword [ebp - 0x17a4], 0x310030
mov dword [ebp - 0x17a0], 0x300030
mov dword [ebp - 0x179c], 0x300031
mov dword [ebp - 0x1798], 0x200031
mov dword [ebp - 0x1794], 0x690046
mov dword [ebp - 0x1790], 0x650072
mov dword [ebp - 0x178c], 0x6f0066
mov dword [ebp - 0x1788], 0x2f0078
mov dword [ebp - 0x1784], 0x320034
mov dword [ebp - 0x1780], 0x30002e
xor eax, eax
mov word [ebp - 0x177c], ax
push 0x15e
push eax
lea eax, [ebp - 0x177a]
push eax
call fcn.005c7c50
mov dword [ebp - 0x161c], 0x6f004d
mov dword [ebp - 0x1618], 0x69007a
mov dword [ebp - 0x1614], 0x6c006c
mov dword [ebp - 0x1610], 0x2f0061
mov dword [ebp - 0x160c], 0x2e0035
mov dword [ebp - 0x1608], 0x200030
mov dword [ebp - 0x1604], 0x570028
mov dword [ebp - 0x1600], 0x6e0069
mov dword [ebp - 0x15fc], 0x6f0064
mov dword [ebp - 0x15f8], 0x730077
mov dword [ebp - 0x15f4], 0x4e0020
mov dword [ebp - 0x15f0], 0x200054
mov dword [ebp - 0x15ec], 0x2e0035
mov dword [ebp - 0x15e8], 0x290031
mov dword [ebp - 0x15e4], 0x410020
mov dword [ebp - 0x15e0], 0x700070
mov dword [ebp - 0x15dc], 0x65006c
mov dword [ebp - 0x15d8], 0x650057
mov dword [ebp - 0x15d4], 0x4b0062
mov dword [ebp - 0x15d0], 0x740069
mov dword [ebp - 0x15cc], 0x35002f
mov dword [ebp - 0x15c8], 0x370033
mov dword [ebp - 0x15c4], 0x33002e
mov dword [ebp - 0x15c0], 0x200036
mov dword [ebp - 0x15bc], 0x4b0028
mov dword [ebp - 0x15b8], 0x540048
mov dword [ebp - 0x15b4], 0x4c004d
mov dword [ebp - 0x15b0], 0x20002c
mov dword [ebp - 0x15ac], 0x69006c
mov dword [ebp - 0x15a8], 0x65006b
mov dword [ebp - 0x15a4], 0x470020
mov dword [ebp - 0x15a0], 0x630065
mov dword [ebp - 0x159c], 0x6f006b
mov dword [ebp - 0x1598], 0x200029
mov dword [ebp - 0x1594], 0x680043
mov dword [ebp - 0x1590], 0x6f0072
mov dword [ebp - 0x158c], 0x65006d
mov dword [ebp - 0x1588], 0x34002f
mov dword [ebp - 0x1584], 0x2e0039
mov dword [ebp - 0x1580], 0x2e0030
mov dword [ebp - 0x157c], 0x360032
mov dword [ebp - 0x1578], 0x330032
mov dword [ebp - 0x1574], 0x31002e
mov dword [ebp - 0x1570], 0x320031
mov dword [ebp - 0x156c], 0x530020
mov dword [ebp - 0x1568], 0x660061
mov dword [ebp - 0x1564], 0x720061
mov dword [ebp - 0x1560], 0x2f0069
mov dword [ebp - 0x155c], 0x330035
mov dword [ebp - 0x1558], 0x2e0037
mov dword [ebp - 0x1554], 0x360033
xor eax, eax
mov word [ebp - 0x1550], ax
push 0x132
push eax
lea eax, [ebp - 0x154e]
push eax
call fcn.005c7c50
mov dword [ebp - 0x141c], 0x6f004d
mov dword [ebp - 0x1418], 0x69007a
mov dword [ebp - 0x1414], 0x6c006c
mov dword [ebp - 0x1410], 0x2f0061
mov dword [ebp - 0x140c], 0x2e0035
mov dword [ebp - 0x1408], 0x200030
mov dword [ebp - 0x1404], 0x570028
mov dword [ebp - 0x1400], 0x6e0069
mov dword [ebp - 0x13fc], 0x6f0064
mov dword [ebp - 0x13f8], 0x730077
mov dword [ebp - 0x13f4], 0x4e0020
mov dword [ebp - 0x13f0], 0x200054
mov dword [ebp - 0x13ec], 0x2e0036
mov dword [ebp - 0x13e8], 0x290031
mov dword [ebp - 0x13e4], 0x410020
mov dword [ebp - 0x13e0], 0x700070
mov dword [ebp - 0x13dc], 0x65006c
mov dword [ebp - 0x13d8], 0x650057
mov dword [ebp - 0x13d4], 0x4b0062
mov dword [ebp - 0x13d0], 0x740069
mov dword [ebp - 0x13cc], 0x35002f
mov dword [ebp - 0x13c8], 0x370033
mov dword [ebp - 0x13c4], 0x33002e
mov dword [ebp - 0x13c0], 0x200036
mov dword [ebp - 0x13bc], 0x4b0028
mov dword [ebp - 0x13b8], 0x540048
mov dword [ebp - 0x13b4], 0x4c004d
mov dword [ebp - 0x13b0], 0x20002c
mov dword [ebp - 0x13ac], 0x69006c
mov dword [ebp - 0x13a8], 0x65006b
mov dword [ebp - 0x13a4], 0x470020
mov dword [ebp - 0x13a0], 0x630065
mov dword [ebp - 0x139c], 0x6f006b
mov dword [ebp - 0x1398], 0x200029
mov dword [ebp - 0x1394], 0x680043
mov dword [ebp - 0x1390], 0x6f0072
mov dword [ebp - 0x138c], 0x65006d
mov dword [ebp - 0x1388], 0x38002f
mov dword [ebp - 0x1384], 0x2e0037
mov dword [ebp - 0x1380], 0x2e0030
mov dword [ebp - 0x137c], 0x320034
mov dword [ebp - 0x1378], 0x300038
mov dword [ebp - 0x1374], 0x38002e
mov dword [ebp - 0x1370], 0x200038
mov dword [ebp - 0x136c], 0x610053
mov dword [ebp - 0x1368], 0x610066
mov dword [ebp - 0x1364], 0x690072
mov dword [ebp - 0x1360], 0x35002f
mov dword [ebp - 0x135c], 0x370033
mov dword [ebp - 0x1358], 0x33002e
mov dword [ebp - 0x1354], 0x36
push 0x134
push 0
lea eax, [ebp - 0x1350]
push eax
call fcn.005c7c50
add esp, 0x48
mov dword [ebp - 0x121c], 0x6f004d
mov dword [ebp - 0x1218], 0x69007a
mov dword [ebp - 0x1214], 0x6c006c
mov dword [ebp - 0x1210], 0x2f0061
mov dword [ebp - 0x120c], 0x2e0035
mov dword [ebp - 0x1208], 0x200030
mov dword [ebp - 0x1204], 0x570028
mov dword [ebp - 0x1200], 0x6e0069
mov dword [ebp - 0x11fc], 0x6f0064
mov dword [ebp - 0x11f8], 0x730077
mov dword [ebp - 0x11f4], 0x4e0020
mov dword [ebp - 0x11f0], 0x200054
mov dword [ebp - 0x11ec], 0x2e0036
mov dword [ebp - 0x11e8], 0x3b0031
mov dword [ebp - 0x11e4], 0x570020
mov dword [ebp - 0x11e0], 0x6e0069
mov dword [ebp - 0x11dc], 0x340036
mov dword [ebp - 0x11d8], 0x20003b
mov dword [ebp - 0x11d4], 0x360078
mov dword [ebp - 0x11d0], 0x290034
mov dword [ebp - 0x11cc], 0x410020
mov dword [ebp - 0x11c8], 0x700070
mov dword [ebp - 0x11c4], 0x65006c
mov dword [ebp - 0x11c0], 0x650057
mov dword [ebp - 0x11bc], 0x4b0062
mov dword [ebp - 0x11b8], 0x740069
mov dword [ebp - 0x11b4], 0x35002f
mov dword [ebp - 0x11b0], 0x370033
mov dword [ebp - 0x11ac], 0x33002e
mov dword [ebp - 0x11a8], 0x200036
mov dword [ebp - 0x11a4], 0x4b0028
mov dword [ebp - 0x11a0], 0x540048
mov dword [ebp - 0x119c], 0x4c004d
mov dword [ebp - 0x1198], 0x20002c
mov dword [ebp - 0x1194], 0x69006c
mov dword [ebp - 0x1190], 0x65006b
mov dword [ebp - 0x118c], 0x470020
mov dword [ebp - 0x1188], 0x630065
mov dword [ebp - 0x1184], 0x6f006b
mov dword [ebp - 0x1180], 0x200029
mov dword [ebp - 0x117c], 0x680043
mov dword [ebp - 0x1178], 0x6f0072
mov dword [ebp - 0x1174], 0x65006d
mov dword [ebp - 0x1170], 0x38002f
mov dword [ebp - 0x116c], 0x2e0037
mov dword [ebp - 0x1168], 0x2e0030
mov dword [ebp - 0x1164], 0x320034
mov dword [ebp - 0x1160], 0x300038
mov dword [ebp - 0x115c], 0x38002e
mov dword [ebp - 0x1158], 0x200038
mov dword [ebp - 0x1154], 0x610053
mov dword [ebp - 0x1150], 0x610066
mov dword [ebp - 0x114c], 0x690072
mov dword [ebp - 0x1148], 0x35002f
mov dword [ebp - 0x1144], 0x370033
mov dword [ebp - 0x1140], 0x33002e
mov dword [ebp - 0x113c], 0x36
push 0x11c
push 0
lea eax, [ebp - 0x1138]
push eax
call fcn.005c7c50
mov dword [ebp - 0x101c], 0x6f004d
mov dword [ebp - 0x1018], 0x69007a
mov dword [ebp - 0x1014], 0x6c006c
mov dword [ebp - 0x1010], 0x2f0061
mov dword [ebp - 0x100c], 0x2e0035
mov dword [ebp - 0x1008], 0x200030
mov dword [ebp - 0x1004], 0x570028
mov dword [ebp - 0x1000], 0x6e0069
mov dword [ebp - 0xffc], 0x6f0064
mov dword [ebp - 0xff8], 0x730077
mov dword [ebp - 0xff4], 0x4e0020
mov dword [ebp - 0xff0], 0x200054
mov dword [ebp - 0xfec], 0x2e0036
mov dword [ebp - 0xfe8], 0x3b0033
mov dword [ebp - 0xfe4], 0x570020
mov dword [ebp - 0xfe0], 0x6e0069
mov dword [ebp - 0xfdc], 0x340036
mov dword [ebp - 0xfd8], 0x20003b
mov dword [ebp - 0xfd4], 0x360078
mov dword [ebp - 0xfd0], 0x290034
mov dword [ebp - 0xfcc], 0x410020
mov dword [ebp - 0xfc8], 0x700070
mov dword [ebp - 0xfc4], 0x65006c
mov dword [ebp - 0xfc0], 0x650057
mov dword [ebp - 0xfbc], 0x4b0062
mov dword [ebp - 0xfb8], 0x740069
mov dword [ebp - 0xfb4], 0x35002f
mov dword [ebp - 0xfb0], 0x370033
mov dword [ebp - 0xfac], 0x33002e
mov dword [ebp - 0xfa8], 0x200036
mov dword [ebp - 0xfa4], 0x4b0028
mov dword [ebp - 0xfa0], 0x540048
mov dword [ebp - 0xf9c], 0x4c004d
mov dword [ebp - 0xf98], 0x20002c
mov dword [ebp - 0xf94], 0x69006c
mov dword [ebp - 0xf90], 0x65006b
mov dword [ebp - 0xf8c], 0x470020
mov dword [ebp - 0xf88], 0x630065
mov dword [ebp - 0xf84], 0x6f006b
mov dword [ebp - 0xf80], 0x200029
mov dword [ebp - 0xf7c], 0x680043
mov dword [ebp - 0xf78], 0x6f0072
mov dword [ebp - 0xf74], 0x65006d
mov dword [ebp - 0xf70], 0x38002f
mov dword [ebp - 0xf6c], 0x2e0036
mov dword [ebp - 0xf68], 0x2e0030
mov dword [ebp - 0xf64], 0x320034
mov dword [ebp - 0xf60], 0x300034
mov dword [ebp - 0xf5c], 0x31002e
mov dword [ebp - 0xf58], 0x380039
mov dword [ebp - 0xf54], 0x530020
mov dword [ebp - 0xf50], 0x660061
mov dword [ebp - 0xf4c], 0x720061
mov dword [ebp - 0xf48], 0x2f0069
mov dword [ebp - 0xf44], 0x330035
mov dword [ebp - 0xf40], 0x2e0037
mov dword [ebp - 0xf3c], 0x360033
xor eax, eax
mov word [ebp - 0xf38], ax
push 0x11a
push eax
lea eax, [ebp - 0xf36]
push eax
call fcn.005c7c50
mov dword [ebp - 0xe1c], 0x6f004d
mov dword [ebp - 0xe18], 0x69007a
mov dword [ebp - 0xe14], 0x6c006c
mov dword [ebp - 0xe10], 0x2f0061
mov dword [ebp - 0xe0c], 0x2e0035
mov dword [ebp - 0xe08], 0x200030
mov dword [ebp - 0xe04], 0x570028
mov dword [ebp - 0xe00], 0x6e0069
mov dword [ebp - 0xdfc], 0x6f0064
mov dword [ebp - 0xdf8], 0x730077
mov dword [ebp - 0xdf4], 0x4e0020
mov dword [ebp - 0xdf0], 0x200054
mov dword [ebp - 0xdec], 0x300031
mov dword [ebp - 0xde8], 0x30002e
mov dword [ebp - 0xde4], 0x20003b
mov dword [ebp - 0xde0], 0x690057
mov dword [ebp - 0xddc], 0x36006e
mov dword [ebp - 0xdd8], 0x3b0034
mov dword [ebp - 0xdd4], 0x780020
mov dword [ebp - 0xdd0], 0x340036
mov dword [ebp - 0xdcc], 0x200029
mov dword [ebp - 0xdc8], 0x700041
mov dword [ebp - 0xdc4], 0x6c0070
mov dword [ebp - 0xdc0], 0x570065
mov dword [ebp - 0xdbc], 0x620065
mov dword [ebp - 0xdb8], 0x69004b
mov dword [ebp - 0xdb4], 0x2f0074
mov dword [ebp - 0xdb0], 0x330035
mov dword [ebp - 0xdac], 0x2e0037
mov dword [ebp - 0xda8], 0x360033
mov dword [ebp - 0xda4], 0x280020
mov dword [ebp - 0xda0], 0x48004b
mov dword [ebp - 0xd9c], 0x4d0054
mov dword [ebp - 0xd98], 0x2c004c
mov dword [ebp - 0xd94], 0x6c0020
mov dword [ebp - 0xd90], 0x6b0069
mov dword [ebp - 0xd8c], 0x200065
mov dword [ebp - 0xd88], 0x650047
mov dword [ebp - 0xd84], 0x6b0063
mov dword [ebp - 0xd80], 0x29006f
mov dword [ebp - 0xd7c], 0x430020
mov dword [ebp - 0xd78], 0x720068
mov dword [ebp - 0xd74], 0x6d006f
mov dword [ebp - 0xd70], 0x2f0065
mov dword [ebp - 0xd6c], 0x370038
mov dword [ebp - 0xd68], 0x30002e
mov dword [ebp - 0xd64], 0x34002e
mov dword [ebp - 0xd60], 0x380032
mov dword [ebp - 0xd5c], 0x2e0030
mov dword [ebp - 0xd58], 0x360036
mov dword [ebp - 0xd54], 0x530020
mov dword [ebp - 0xd50], 0x660061
mov dword [ebp - 0xd4c], 0x720061
mov dword [ebp - 0xd48], 0x2f0069
mov dword [ebp - 0xd44], 0x330035
mov dword [ebp - 0xd40], 0x2e0037
mov dword [ebp - 0xd3c], 0x360033
xor eax, eax
mov word [ebp - 0xd38], ax
push 0x11a
push eax
lea eax, [ebp - 0xd36]
push eax
call fcn.005c7c50
mov dword [ebp - 0xc1c], 0x6f004d
mov dword [ebp - 0xc18], 0x69007a
mov dword [ebp - 0xc14], 0x6c006c
mov dword [ebp - 0xc10], 0x2f0061
mov dword [ebp - 0xc0c], 0x2e0035
mov dword [ebp - 0xc08], 0x200030
mov dword [ebp - 0xc04], 0x570028
mov dword [ebp - 0xc00], 0x6e0069
mov dword [ebp - 0xbfc], 0x6f0064
mov dword [ebp - 0xbf8], 0x730077
mov dword [ebp - 0xbf4], 0x4e0020
mov dword [ebp - 0xbf0], 0x200054
mov dword [ebp - 0xbec], 0x300031
mov dword [ebp - 0xbe8], 0x30002e
mov dword [ebp - 0xbe4], 0x20003b
mov dword [ebp - 0xbe0], 0x690057
mov dword [ebp - 0xbdc], 0x36006e
mov dword [ebp - 0xbd8], 0x3b0034
mov dword [ebp - 0xbd4], 0x780020
mov dword [ebp - 0xbd0], 0x340036
mov dword [ebp - 0xbcc], 0x200029
mov dword [ebp - 0xbc8], 0x700041
mov dword [ebp - 0xbc4], 0x6c0070
mov dword [ebp - 0xbc0], 0x570065
mov dword [ebp - 0xbbc], 0x620065
mov dword [ebp - 0xbb8], 0x69004b
mov dword [ebp - 0xbb4], 0x2f0074
mov dword [ebp - 0xbb0], 0x330035
mov dword [ebp - 0xbac], 0x2e0037
mov dword [ebp - 0xba8], 0x360033
mov dword [ebp - 0xba4], 0x280020
mov dword [ebp - 0xba0], 0x48004b
mov dword [ebp - 0xb9c], 0x4d0054
mov dword [ebp - 0xb98], 0x2c004c
mov dword [ebp - 0xb94], 0x6c0020
mov dword [ebp - 0xb90], 0x6b0069
mov dword [ebp - 0xb8c], 0x200065
mov dword [ebp - 0xb88], 0x650047
mov dword [ebp - 0xb84], 0x6b0063
mov dword [ebp - 0xb80], 0x29006f
mov dword [ebp - 0xb7c], 0x430020
mov dword [ebp - 0xb78], 0x720068
mov dword [ebp - 0xb74], 0x6d006f
mov dword [ebp - 0xb70], 0x2f0065
mov dword [ebp - 0xb6c], 0x390037
mov dword [ebp - 0xb68], 0x30002e
mov dword [ebp - 0xb64], 0x33002e
mov dword [ebp - 0xb60], 0x340039
mov dword [ebp - 0xb5c], 0x2e0035
mov dword [ebp - 0xb58], 0x340037
mov dword [ebp - 0xb54], 0x530020
mov dword [ebp - 0xb50], 0x660061
mov dword [ebp - 0xb4c], 0x720061
mov dword [ebp - 0xb48], 0x2f0069
mov dword [ebp - 0xb44], 0x330035
mov dword [ebp - 0xb40], 0x2e0037
mov dword [ebp - 0xb3c], 0x360033
mov dword [ebp - 0xb38], 0x450020
mov dword [ebp - str.fmod], 0x670064
mov dword [ebp - 0xb30], 0x37002f
mov dword [ebp - 0xb2c], 0x2e0039
mov dword [ebp - 0xb28], 0x2e0030
mov dword [ebp - 0xb24], 0x300033
mov dword [ebp - 0xb20], 0x2e0039
mov dword [ebp - 0xb1c], 0x330034
xor eax, eax
mov word [ebp - 0xb18], ax
push 0xfa
push eax
lea eax, [ebp - 0xb16]
push eax
call fcn.005c7c50
mov dword [ebp - 0xa1c], 0x6f004d
mov dword [ebp - 0xa18], 0x69007a
mov dword [ebp - 0xa14], 0x6c006c
mov dword [ebp - 0xa10], 0x2f0061
mov dword [ebp - 0xa0c], 0x2e0035
mov dword [ebp - 0xa08], 0x200030
mov dword [ebp - 0xa04], 0x580028
mov dword [ebp - 0xa00], 0x310031
mov dword [ebp - 0x9fc], 0x20003b
mov dword [ebp - 0x9f8], 0x69004c
mov dword [ebp - 0x9f4], 0x75006e
mov dword [ebp - 0x9f0], 0x200078
mov dword [ebp - 0x9ec], 0x380078
mov dword [ebp - 0x9e8], 0x5f0036
mov dword [ebp - 0x9e4], 0x340036
mov dword [ebp - 0x9e0], 0x200029
mov dword [ebp - 0x9dc], 0x700041
mov dword [ebp - 0x9d8], 0x6c0070
mov dword [ebp - 0x9d4], 0x570065
mov dword [ebp - 0x9d0], 0x620065
mov dword [ebp - 0x9cc], 0x69004b
mov dword [ebp - 0x9c8], 0x2f0074
mov dword [ebp - 0x9c4], 0x330035
mov dword [ebp - 0x9c0], 0x2e0037
mov dword [ebp - 0x9bc], 0x360033
mov dword [ebp - 0x9b8], 0x280020
mov dword [ebp - 0x9b4], 0x48004b
mov dword [ebp - 0x9b0], 0x4d0054
mov dword [ebp - 0x9ac], 0x2c004c
mov dword [ebp - 0x9a8], 0x6c0020
mov dword [ebp - 0x9a4], 0x6b0069
mov dword [ebp - 0x9a0], 0x200065
mov dword [ebp - 0x99c], 0x650047
mov dword [ebp - 0x998], 0x6b0063
mov dword [ebp - 0x994], 0x29006f
mov dword [ebp - 0x990], 0x430020
mov dword [ebp - 0x98c], 0x720068
mov dword [ebp - 0x988], 0x6d006f
mov dword [ebp - 0x984], 0x2f0065
mov dword [ebp - 0x980], 0x310035
mov dword [ebp - 0x97c], 0x30002e
mov dword [ebp - 0x978], 0x32002e
mov dword [ebp - 0x974], 0x300037
mov dword [ebp - 0x970], 0x2e0034
mov dword [ebp - 0x96c], 0x300031
mov dword [ebp - 0x968], 0x200033
mov dword [ebp - 0x964], 0x610053
mov dword [ebp - 0x960], 0x610066
mov dword [ebp - 0x95c], 0x690072
mov dword [ebp - 0x958], 0x35002f
mov dword [ebp - 0x954], 0x370033
mov dword [ebp - 0x950], 0x33002e
mov dword [ebp - 0x94c], 0x36
push 0x12c
push 0
lea eax, [ebp - 0x948]
push eax
call fcn.005c7c50
mov dword [ebp - 0x81c], 0x6f004d
mov dword [ebp - 0x818], 0x69007a
mov dword [ebp - 0x814], 0x6c006c
mov dword [ebp - 0x810], 0x2f0061
mov dword [ebp - 0x80c], 0x2e0035
mov dword [ebp - 0x808], 0x200030
mov dword [ebp - 0x804], 0x630028
mov dword [ebp - 0x800], 0x6d006f
mov dword [ebp - 0x7fc], 0x610070
mov dword [ebp - 0x7f8], 0x690074
mov dword [ebp - 0x7f4], 0x6c0062
mov dword [ebp - 0x7f0], 0x3b0065
mov dword [ebp - 0x7ec], 0x4d0020
mov dword [ebp - 0x7e8], 0x490053
mov dword [ebp - 0x7e4], 0x200045
mov dword [ebp - 0x7e0], 0x2e0039
mov dword [ebp - 0x7dc], 0x3b0030
mov dword [ebp - 0x7d8], 0x570020
mov dword [ebp - 0x7d4], 0x6e0069
mov dword [ebp - 0x7d0], 0x6f0064
mov dword [ebp - 0x7cc], 0x730077
mov dword [ebp - 0x7c8], 0x500020
mov dword [ebp - 0x7c4], 0x6f0068
mov dword [ebp - 0x7c0], 0x65006e
mov dword [ebp - 0x7bc], 0x4f0020
mov dword [ebp - 0x7b8], 0x200053
mov dword [ebp - 0x7b4], 0x2e0037
mov dword [ebp - 0x7b0], 0x3b0035
mov dword [ebp - 0x7ac], 0x540020
mov dword [ebp - 0x7a8], 0x690072
mov dword [ebp - 0x7a4], 0x650064
mov dword [ebp - 0x7a0], 0x74006e
mov dword [ebp - 0x79c], 0x35002f
mov dword [ebp - 0x798], 0x30002e
mov dword [ebp - 0x794], 0x20003b
mov dword [ebp - 0x790], 0x450049
mov dword [ebp - 0x78c], 0x6f004d
mov dword [ebp - 0x788], 0x690062
mov dword [ebp - 0x784], 0x65006c
mov dword [ebp - 0x780], 0x39002f
mov dword [ebp - 0x77c], 0x30002e
mov dword [ebp - 0x778], 0x29
push 0x158
push 0
lea eax, [ebp - 0x774]
push eax
call fcn.005c7c50
add esp, 0x48
mov dword [ebp - 0x61c], 0x6f004d
mov dword [ebp - 0x618], 0x69007a
mov dword [ebp - 0x614], 0x6c006c
mov dword [ebp - 0x610], 0x2f0061
mov dword [ebp - 0x60c], 0x2e0035
mov dword [ebp - 0x608], 0x2b0030
mov dword [ebp - 0x604], 0x630028
mov dword [ebp - 0x600], 0x6d006f
mov dword [ebp - 0x5fc], 0x610070
mov dword [ebp - 0x5f8], 0x690074
mov dword [ebp - 0x5f4], 0x6c0062
mov dword [ebp - 0x5f0], 0x3b0065
mov dword [ebp - 0x5ec], 0x4d002b
mov dword [ebp - 0x5e8], 0x490053
mov dword [ebp - 0x5e4], 0x2b0045
mov dword [ebp - 0x5e0], 0x2e0039
mov dword [ebp - 0x5dc], 0x3b0030
mov dword [ebp - 0x5d8], 0x57002b
mov dword [ebp - 0x5d4], 0x6e0069
mov dword [ebp - 0x5d0], 0x6f0064
mov dword [ebp - 0x5cc], 0x730077
mov dword [ebp - 0x5c8], 0x4e002b
mov dword [ebp - 0x5c4], 0x2b0054
mov dword [ebp - 0x5c0], 0x2e0035
mov dword [ebp - 0x5bc], 0x3b0031
mov dword [ebp - 0x5b8], 0x50002b
mov dword [ebp - 0x5b4], 0x73006f
mov dword [ebp - 0x5b0], 0x690065
mov dword [ebp - 0x5ac], 0x6f0064
mov dword [ebp - 0x5a8], 0x29006e
xor eax, eax
mov word [ebp - 0x5a4], ax
push 0x186
push eax
lea eax, [ebp - 0x5a2]
push eax
call fcn.005c7c50
mov dword [ebp - 0x41c], 0x6f004d
mov dword [ebp - 0x418], 0x69007a
mov dword [ebp - 0x414], 0x6c006c
mov dword [ebp - 0x410], 0x2f0061
mov dword [ebp - 0x40c], 0x2e0035
mov dword [ebp - 0x408], 0x2b0030
mov dword [ebp - 0x404], 0x630028
mov dword [ebp - 0x400], 0x6d006f
mov dword [ebp - 0x3fc], 0x610070
mov dword [ebp - 0x3f8], 0x690074
mov dword [ebp - 0x3f4], 0x6c0062
mov dword [ebp - 0x3f0], 0x3b0065
mov dword [ebp - 0x3ec], 0x4d002b
mov dword [ebp - 0x3e8], 0x490053
mov dword [ebp - 0x3e4], 0x2b0045
mov dword [ebp - 0x3e0], 0x2e0039
mov dword [ebp - 0x3dc], 0x3b0030
mov dword [ebp - 0x3d8], 0x57002b
mov dword [ebp - 0x3d4], 0x6e0069
mov dword [ebp - 0x3d0], 0x6f0064
mov dword [ebp - 0x3cc], 0x730077
mov dword [ebp - 0x3c8], 0x4e002b
mov dword [ebp - 0x3c4], 0x2b0054
mov dword [ebp - 0x3c0], 0x300031
mov dword [ebp - 0x3bc], 0x30002e
mov dword [ebp - 0x3b8], 0x2b003b
mov dword [ebp - 0x3b4], 0x6f0050
mov dword [ebp - 0x3b0], 0x650073
mov dword [ebp - 0x3ac], 0x640069
mov dword [ebp - 0x3a8], 0x6e006f
mov dword [ebp - 0x3a4], 0x29
push 0x184
push 0
lea eax, [ebp - 0x3a0]
push eax
call fcn.005c7c50
push 0x200
push 0
lea eax, [ebp - 0x21c]
push eax
call fcn.005c7c50
add esp, 0x24
mov edx, dword [0x671364]
test edx, edx
jns 0x4887f5
push 0
call fcn.005c58f8
push eax
call fcn.005c3e89
add esp, 8
call fcn.005c3e68
cdq
mov ecx, 0xf
idiv ecx
mov dword [0x671364], edx
shl edx, 9
lea eax, [ebp - 0x1e1c]
add eax, edx
push 0
push 0
push 0
push 0
push eax
call dword [0x680444]
mov dword [ebp - 0x1e2c], eax
test eax, eax
jne 0x488832
mov dword [esi], 2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x1e24]
mov dword [ecx], eax
jmp 0x488d59
mov ecx, dword [ebp - 0x1e3c]
lea edx, [ecx + 2]
jmp 0x488840
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x488840
sub ecx, edx
sar ecx, 1
or edx, 0xffffffff
xor esi, esi
lea eax, [ecx + ecx]
mov dword [ebp - 0x1e4c], eax
test eax, eax
je 0x488894
mov edi, dword [ebp - 0x1e3c]
mov ebx, eax
lea esp, [esp]
movzx ecx, byte [esi + edi]
movzx eax, dl
xor ecx, eax
shr edx, 8
xor edx, dword [ecx*4 + 0x649660]
inc esi
cmp esi, ebx
jb 0x488870
mov ebx, dword [ebp - 0x1e40]
mov edi, dword [ebp - 0x1e34]
not edx
mov ecx, dword [0x680410]
call fcn.00494110
push 0
push 0x84000102
push 0
push 0
push dword [ebp - 0x1e3c]
push dword [ebp - 0x1e2c]
call dword [0x680440]
mov esi, eax
mov dword [ebp - 0x1e3c], esi
test esi, esi
jne 0x4888f5
mov eax, dword [ebp - 0x1e28]
mov dword [eax], 3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x1e24]
mov dword [ecx], eax
push dword [ebp - 0x1e2c]
call dword [0x680434]
jmp 0x488d59
mov dword [ebp - 0x1e48], 0
mov dword [ebp - 0x1e50], 4
mov dword [ebp - 0x1e54], 0
lea eax, [ebp - 0x1e54]
push eax
lea eax, [ebp - 0x1e50]
push eax
lea eax, [ebp - 0x1e48]
push eax
push 0x20000013
push esi
call dword [0x680438]
test eax, eax
jne 0x48896a
mov eax, dword [ebp - 0x1e28]
mov dword [eax], 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x1e24]
mov dword [ecx], eax
push esi
call dword [0x680434]
push dword [ebp - 0x1e2c]
call dword [0x680434]
jmp 0x488d59
mov edx, dword [ebp - 0x1e48]
cmp edx, 0xc8
je 0x48898e
mov eax, dword [ebp - 0x1e28]
mov dword [eax], 5
mov ecx, dword [ebp - 0x1e24]
mov dword [ecx], edx
jmp 0x488952
lea eax, [ebp - 0x1e54]
push eax
lea eax, [ebp - 0x1e50]
push eax
lea eax, [ebp - 0x1e48]
push eax
push 0x20000005
push esi
call dword [0x680438]
test eax, eax
jne 0x4889c1
mov eax, dword [ebp - 0x1e28]
mov dword [eax], 6
jmp 0x488944
mov ecx, dword [ebp - 0x1e48]
mov dword [edi], ecx
test ecx, ecx
jne 0x4889de
mov eax, dword [ebp - 0x1e28]
mov dword [eax], 7
jmp 0x488944
mov byte [ebp - 0x1e1d], 0
mov dword [ebp - 0x1e38], 0
mov eax, dword [ebp - 0x1e30]
test eax, eax
je 0x488b6d
mov ecx, eax
call fcn.0045f600
mov dword [ebp - 0x1e4c], eax
mov ecx, eax
call fcn.0045f4f0
test al, al
jne 0x488a26
mov edx, dword [ebp - 0x1e5c]
mov ecx, dword [ebp - 0x1e4c]
call fcn.0045f510
push 0x3f
push dword [ebp - 0x1e30]
call fcn.005c0e37
add esp, 8
test eax, eax
je 0x488a3f
xor ecx, ecx
mov word [eax], cx
push 0x64b910
push dword [ebp - 0x1e30]
lea eax, [ebp - 0x1e38]
push eax
call fcn.005c1930
add esp, 0xc
cmp dword [ebp - 0x1e38], 0
jne 0x488a73
mov eax, dword [ebp - 0x1e28]
mov dword [eax], 0xa
jmp 0x488944
mov byte [ebp - 0x1e1d], 1
mov dword [ebp - 0x1e44], 0
xor esi, esi
mov edi, dword [edi]
mov eax, 0x8000
cmp edi, eax
cmovg edi, eax
mov dword [ebp - 0x1e40], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push esi
push esi
push 0x4c9
push dword [0x680c00]
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, dword [ebp - 0x1e58]
test ecx, ecx
je 0x488af0
mov eax, dword [ebp - 0x1e34]
push dword [eax]
push ecx
push str.Recovering...__s__d_bytes.
push 0x6809e8
call fcn.00463930
add esp, 0x10
push esi
push esi
push 0x4c8
push dword [0x680c00]
call dword [sym.imp.USER32.dll_PostMessageW]
lea esp, [esp]
wait
mov dword [ebp - 4], 0
lea eax, [ebp - 0x1e44]
push eax
push edi
cmp byte [ebp - 0x1e1d], 0
jne 0x488baa
lea eax, [esi + ebx]
push eax
push dword [ebp - 0x1e3c]
call dword [0x680430]
test eax, eax
jne 0x488bee
mov eax, dword [ebp - 0x1e28]
mov dword [eax], 9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x1e24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1e34]
mov dword [eax], 0
test ebx, ebx
je 0x488b58
push ebx
call fcn.0049a336
add esp, 4
xor ebx, ebx
mov dword [ebp - 0x1e30], ebx
wait
mov dword [ebp - 4], 0xfffffffe
jmp 0x488cde
lea eax, [ecx + 2]
push eax
call fcn.0049a32d
add esp, 4
mov dword [ebp - 0x1e30], eax
lea eax, [ebp - 0x1e30]
push eax
call fcn.0048bb60
mov ebx, dword [ebp - 0x1e30]
test ebx, ebx
jne 0x488a7a
mov eax, dword [ebp - 0x1e28]
mov dword [eax], 8
jmp 0x488944
push ebx
push dword [ebp - 0x1e3c]
call dword [0x680430]
test eax, eax
jne 0x488bee
mov eax, dword [ebp - 0x1e28]
mov dword [eax], 9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x1e24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1e34]
mov dword [eax], 0
wait
mov dword [ebp - 4], 0xfffffffe
jmp 0x488cde
cmp byte [ebp - 0x1e1d], 0
je 0x488c0e
push dword [ebp - 0x1e38]
push 1
push dword [ebp - 0x1e44]
push ebx
call fcn.005c1b98
add esp, 0x10
add esi, dword [ebp - 0x1e44]
mov dword [ebp - 0x1e60], esi
mov eax, dword [ebp - 0x1e34]
mov ecx, dword [eax]
mov edi, ecx
sub edi, esi
cmp edi, 0x8000
mov eax, 0x8000
cmovg edi, eax
test esi, esi
je 0x488c8f
movd xmm0, esi
cvtdq2pd xmm0, xmm0
mov eax, esi
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x64e0f0]
cvtpd2ps xmm1, xmm0
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
shr ecx, 0x1f
addsd xmm0, qword [ecx*8 + 0x64e0f0]
cvtpd2ps xmm0, xmm0
divss xmm1, xmm0
movd xmm0, dword [0x680bfc]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
cvttss2si eax, xmm0
mov dword [ebp - 0x1e40], eax
mov dword [ebp - 0x1e64], eax
jmp 0x488c95
mov eax, dword [ebp - 0x1e40]
push 0
push eax
push 0x4c9
push dword [0x680c00]
call dword [sym.imp.USER32.dll_PostMessageW]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
wait
mov dword [ebp - 4], 0xfffffffe
push 5
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00486980
test eax, eax
jne 0x488cde
cmp dword [ebp - 0x1e44], eax
je 0x488cde
mov eax, dword [ebp - 0x1e34]
cmp esi, dword [eax]
jne 0x488af0
mov eax, dword [ebp - 0x1e3c]
test eax, eax
je 0x488cef
push eax
call dword [0x680434]
mov eax, dword [ebp - 0x1e2c]
test eax, eax
je 0x488d00
push eax
call dword [0x680434]
cmp byte [ebp - 0x1e1d], 0
je 0x488d22
push dword [ebp - 0x1e38]
call fcn.005c1ccd
push dword [ebp - 0x1e38]
call fcn.005c1e76
add esp, 8
mov eax, ebx
jmp 0x488d5b
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.005c02df
mov esp, ebp
pop ebp
ret