Function at 0x40e2f7
Capabilities:
Encode data using xor

Disassembly:
push 0x9a4
mov eax, 0x4e60ab
call fcn.004bed19
mov esi, ecx
mov dword [ebp - 0x8e4], esi
xor edi, edi
mov dword [ebp - 4], edi
call fcn.00499991
push eax
lea ecx, [ebp - 0x8d0]
call fcn.004727f7
mov byte [ebp - 4], 1
mov eax, dword [esi + 4]
mov ecx, dword [esi]
push eax
push ecx
lea eax, [ebp - 0x8d0]
push str.before_VerifyArmadilloKey__d___d
push eax
call fcn.00402967
add esp, 0xc
lea eax, [ebp + 8]
mov dword [ebp - 0x8dc], esp
mov ecx, esp
push eax
call fcn.0040228a
mov ecx, esi
call fcn.0040c55a
test al, al
je 0x40f515
mov eax, dword [esi + 4]
mov esi, dword [esi]
push eax
push esi
lea eax, [ebp - 0x8d0]
push str.After_VerifyArmadilloKey__d___d
push eax
call fcn.00402967
add esp, 0x10
cmp byte [ebp + 0xc], 0
je 0x40f510
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x8c0]
mov dword [ebp - 0x8dc], eax
mov dword [ebp - 0x898], edi
mov dword [ebp - 0x8a0], edi
mov dword [ebp - 0x8c8], edi
call fcn.004024df
lea eax, [ebp - 0x8c0]
push eax
lea ecx, [ebp - 0x890]
mov byte [ebp - 4], 2
call fcn.0040228a
mov byte [ebp - 4], 3
mov ebx, dword [ebp - 0x890]
mov eax, dword [ebx - 0xc]
cmp eax, 0x17
je 0x40e3f6
add ebx, 0xfffffff0
mov ecx, ebx
call fcn.004027b0
mov ecx, dword [ebp - 0x8c0]
add ecx, 0xfffffff0
call fcn.004027b0
xor edi, edi
jmp 0x40f4ed
call fcn.00499991
push eax
lea ecx, [ebp - 0x8a8]
call fcn.004727f7
mov byte [ebp - 4], 4
call fcn.00499991
push eax
lea ecx, [ebp - 0x8a4]
call fcn.004727f7
mov byte [ebp - 4], 5
call fcn.00499991
push eax
lea ecx, [ebp - 0x894]
call fcn.004727f7
mov byte [ebp - 4], 6
call fcn.00499991
push eax
lea ecx, [ebp - 0x89c]
call fcn.004727f7
mov edi, 0x5267d0
push edi
xor ecx, ecx
lea esi, [ebp - 0x890]
mov byte [ebp - 4], 7
call fcn.004072a5
mov esi, eax
cmp esi, 0xffffffff
je 0x40eb02
push esi
push 0
lea eax, [ebp - 0x914]
push eax
lea ecx, [ebp - 0x890]
call fcn.0040731f
push eax
lea ecx, [ebp - 0x8a8]
mov byte [ebp - 4], 8
call fcn.0040257e
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x914]
add ecx, 0xfffffff0
call fcn.004027b0
push dword [ebx - 0xc]
inc esi
push esi
lea eax, [ebp - 0x908]
push eax
lea ecx, [ebp - 0x890]
call fcn.0040731f
push eax
lea ecx, [ebp - 0x890]
mov byte [ebp - 4], 9
call fcn.0040257e
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x908]
add ecx, 0xfffffff0
call fcn.004027b0
push edi
xor ecx, ecx
lea esi, [ebp - 0x890]
call fcn.004072a5
mov esi, eax
cmp esi, 0xffffffff
je 0x40e7e7
push esi
push 0
lea eax, [ebp - 0x900]
push eax
lea ecx, [ebp - 0x890]
call fcn.0040731f
push eax
lea ecx, [ebp - 0x8a4]
mov byte [ebp - 4], 0xa
call fcn.0040257e
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x900]
add ecx, 0xfffffff0
call fcn.004027b0
mov eax, dword [ebp - 0x890]
push dword [eax - 0xc]
inc esi
push esi
lea eax, [ebp - 0x904]
push eax
lea ecx, [ebp - 0x890]
call fcn.0040731f
push eax
lea ecx, [ebp - 0x890]
mov byte [ebp - 4], 0xb
call fcn.0040257e
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x904]
add ecx, 0xfffffff0
call fcn.004027b0
push edi
xor ecx, ecx
lea esi, [ebp - 0x890]
call fcn.004072a5
mov esi, eax
cmp esi, 0xffffffff
je 0x40e7e7
push esi
push 0
lea eax, [ebp - 0x910]
push eax
lea ecx, [ebp - 0x890]
call fcn.0040731f
push eax
lea ecx, [ebp - 0x894]
mov byte [ebp - 4], 0xc
call fcn.0040257e
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x910]
add ecx, 0xfffffff0
call fcn.004027b0
mov eax, dword [ebp - 0x890]
push dword [eax - 0xc]
inc esi
push esi
lea eax, [ebp - 0x90c]
push eax
lea ecx, [ebp - 0x890]
call fcn.0040731f
push eax
lea ecx, [ebp - 0x89c]
mov byte [ebp - 4], 0xd
call fcn.0040257e
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x90c]
add ecx, 0xfffffff0
call fcn.004027b0
push 6
pop edi
push 2
xor ecx, ecx
pop esi
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004985df
mov ebx, eax
mov eax, dword [ebp - 0x8a8]
pop ecx
mov ecx, ebx
mov dword [ebp - 0x8d8], ebx
sub ecx, eax
movzx edx, word [eax]
mov word [ecx + eax], dx
add eax, esi
test dx, dx
jne 0x40e624
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004985df
mov edx, eax
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x8d4], edx
pop ecx
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, esi
test cx, cx
jne 0x40e658
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004985df
mov edx, eax
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0x8b8], edx
pop ecx
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, esi
test cx, cx
jne 0x40e68c
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004985df
mov edx, eax
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x8b4], edx
pop ecx
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, esi
test cx, cx
jne 0x40e6c0
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004985df
mov edi, dword [ebp - 0x8d4]
pop ecx
mov ecx, eax
mov edx, ebx
sub edi, ebx
mov dword [ebp - 0x8cc], ecx
sub edx, ecx
mov dword [ebp - 0x8ac], 5
or dword [ebp - 0x898], 0xffffffff
or dword [ebp - 0x8a0], 0xffffffff
lea eax, [edx + ecx]
mov bl, byte [eax + edi]
mov al, byte [eax]
mov byte [ebp - 0x8c1], al
mov byte [ebp - 0x8b9], bl
xor eax, eax
mov bl, byte [ebp - 0x8b9]
cmp byte [eax + str.9PHVYB7EM6TW5SFZ8KUA3CNX4G2DRJ], bl
jne 0x40e73a
mov dword [ebp - 0x898], eax
mov bl, byte [ebp - 0x8c1]
cmp byte [eax + str.23456789ABCDEFGHJKMNPRSTUVWXYZ], bl
jne 0x40e74e
mov dword [ebp - 0x8a0], eax
inc eax
cmp eax, 0x1e
jl 0x40e726
mov eax, dword [ebp - 0x898]
sub eax, dword [ebp - 0x8a0]
jns 0x40e765
add eax, 0x1e
movsx ax, byte [eax + str.23456789ABCDEFGHJKMNPRSTUVWXYZ]
mov word [ecx], ax
add ecx, esi
dec dword [ebp - 0x8ac]
jne 0x40e702
mov edi, dword [ebp - 0x8cc]
xor eax, eax
push edi
mov ecx, 0x584a60
mov word [edi + 0xa], ax
call fcn.0040f54b
test eax, eax
je 0x40e82d
mov eax, 0x5267c4
mov edx, edi
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, esi
test cx, cx
jne 0x40e7a2
push dword [ebp - 0x8d8]
call fcn.004985ea
pop ecx
push dword [ebp - 0x8d4]
call fcn.004985ea
pop ecx
push edi
call fcn.004985ea
pop ecx
push dword [ebp - 0x8b8]
call fcn.004985ea
pop ecx
push dword [ebp - 0x8b4]
call fcn.004985ea
pop ecx
mov ecx, dword [ebp - 0x89c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x894]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x8a4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x890]
add ecx, 0xfffffff0
jmp 0x40e3dc
mov ebx, dword [ebp - 0x8b8]
mov al, byte [ebx]
xor ecx, ecx
cmp byte [ecx + str.VE9WMBCX8SP3DJT7A5GZUNHF2R6KY4], al
je 0x40e845
inc ecx
cmp ecx, 0xb
jl 0x40e837
mov al, byte [ebx + 2]
push 0xb
pop ecx
cmp byte [ecx + str.VE9WMBCX8SP3DJT7A5GZUNHF2R6KY4], al
je 0x40e859
inc ecx
cmp ecx, 0x17
jl 0x40e84b
mov al, byte [ebx + 4]
or edi, 0xffffffff
mov dword [ebp - 0x8c8], edi
mov dword [ebp - 0x8ac], edi
xor esi, esi
mov cl, byte [esi + str.VE9WMBCX8SP3DJT7A5GZUNHF2R6KY4]
cmp cl, al
jne 0x40e87d
mov dword [ebp - 0x8c8], esi
cmp cl, byte [ebx + 6]
jne 0x40e884
mov edi, esi
cmp cl, byte [ebx + 8]
jne 0x40e88f
mov dword [ebp - 0x8ac], esi
cmp dword [ebp - 0x8c8], 0
jl 0x40e8a5
test edi, edi
jl 0x40e8a5
cmp dword [ebp - 0x8ac], 0
jge 0x40e8ab
inc esi
cmp esi, 0x1e
jl 0x40e86d
mov eax, dword [ebp - 0x8c8]
cdq
sub eax, edx
mov ecx, eax
mov eax, edi
cdq
sar ecx, 1
add ecx, 0xe
sub eax, edx
sar eax, 1
mov dword [ebp - 0x898], ecx
mov dword [ebp - 0x8a0], eax
jne 0x40e8da
mov dword [ebp - 0x8a0], 0xc
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x8c8], 0x1e
test eax, eax
je 0x40e8f4
mov dword [ebp - 0x8c8], eax
cmp ecx, 0x64
jae 0x40e905
add ecx, 0x7d0
mov dword [ebp - 0x898], ecx
call fcn.00499991
push eax
lea ecx, [ebp - 0x8b0]
call fcn.004727f7
mov byte [ebp - 4], 0xe
xor edi, edi
mov eax, dword [ebp - 0x8b4]
mov al, byte [eax + edi*2]
xor esi, esi
cmp byte [esi + str.9PHVYB7EM6TW5SFZ8KUA3CNX4G2DRJ], al
je 0x40e935
inc esi
cmp esi, 0xa
jl 0x40e927
call fcn.00499991
push eax
lea ecx, [ebp - 0x8ac]
call fcn.004727f7
push esi
lea eax, [ebp - 0x8ac]
push 0x526688
push eax
mov byte [ebp - 4], 0xf
call fcn.00402967
mov esi, dword [ebp - 0x8ac]
add esp, 0xc
push dword [esi - 0xc]
lea ecx, [ebp - 0x8b0]
push esi
call fcn.0040f682
add esi, 0xfffffff0
mov ecx, esi
mov byte [ebp - 4], 0xe
call fcn.004027b0
inc edi
cmp edi, 5
jl 0x40e91c
mov esi, dword [ebp - 0x8b0]
push esi
call fcn.004ba70f
pop ecx
push 8
mov dword [ebp - 0x8e0], eax
pop ecx
xor eax, eax
mov word [ebp - 0x58], ax
push ebx
push dword [ebp - 0x8cc]
lea edi, [ebp - 0x56]
push dword [ebp - 0x8d8]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x58]
push 0x5267d4
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
push 0x12
call fcn.004985df
mov edi, eax
pop ecx
lea eax, [ebp - 0x9ac]
mov dword [ebp - 0x9b0], eax
push 3
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x9b0]
push eax
call fcn.00406d5a
mov ebx, dword [ebp - 0x9b0]
mov ecx, edi
mov eax, ebx
sub ecx, ebx
mov dl, byte [eax]
mov byte [ecx + eax], dl
inc eax
test dl, dl
jne 0x40e9fe
lea eax, [ebp - 0x9ac]
cmp ebx, eax
je 0x40ea19
push ebx
call fcn.004b9cc0
pop ecx
mov dword [ebp - 0x8ac], 0x11
mov eax, edi
xor ebx, ebx
movzx edx, byte [eax]
mov ecx, ebx
shr ecx, 8
shl ebx, 8
xor ecx, edx
xor ebx, dword [ecx*4 + 0x57d608]
and ebx, 0xffff
inc eax
dec dword [ebp - 0x8ac]
cmp dword [ebp - 0x8ac], 0
jg 0x40ea27
push edi
call fcn.004985ea
movzx eax, bx
cmp dword [ebp - 0x8e0], eax
pop ecx
push dword [ebp - 0x8d8]
sete bl
call fcn.004985ea
pop ecx
push dword [ebp - 0x8d4]
call fcn.004985ea
pop ecx
push dword [ebp - 0x8cc]
call fcn.004985ea
pop ecx
push dword [ebp - 0x8b8]
call fcn.004985ea
pop ecx
push dword [ebp - 0x8b4]
call fcn.004985ea
pop ecx
lea ecx, [esi - 0x10]
call fcn.004027b0
mov ecx, dword [ebp - 0x89c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x894]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x8a4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x890]
add ecx, 0xfffffff0
call fcn.004027b0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x8c0]
add ecx, 0xfffffff0
call fcn.004027b0
jmp 0x40eb56
mov ecx, dword [ebp - 0x89c]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x894]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x8a4]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.004027b0
lea ecx, [ebx - 0x10]
call fcn.004027b0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x8c0]
add ecx, 0xfffffff0
call fcn.004027b0
xor bl, bl
test bl, bl
je 0x40e3ef
lea eax, [ebp - 0x920]
call fcn.0040fbce
xor eax, eax
push eax
push eax
push eax
push dword [ebp - 0x8c8]
lea ecx, [ebp - 0x92c]
push dword [ebp - 0x8a0]
push dword [ebp - 0x898]
call fcn.0040f9d9
lea eax, [ebp - 0x920]
push eax
lea ecx, [ebp - 0x92c]
call fcn.0040f98f
test al, al
je 0x40ebd1
lea eax, [ebp - 0x920]
push eax
lea esi, [ebp - 0x8f0]
lea eax, [ebp - 0x92c]
call fcn.0040f90d
mov ecx, esi
call fcn.0040f8dd
fcomp qword [0x559620]
fnstsw ax
test ah, 0x41
je 0x40e3ef
push dword [ebp - 0x8dc]
lea ecx, [ebp - 0x8a4]
call fcn.004024df
lea ebx, [ebp - 0x8a4]
mov byte [ebp - 4], 0x10
call fcn.0040f5c6
mov ebx, eax
call fcn.0040f613
lea edi, [ebp - 0x8a4]
call fcn.004072d6
mov eax, edi
push eax
lea ecx, [ebp - 0x8a8]
call fcn.0040228a
lea ebx, [ebp - 0x8a8]
mov byte [ebp - 4], 0x11
call fcn.0040f5c6
mov ebx, eax
call fcn.0040f613
lea edi, [ebp - 0x8a8]
call fcn.004072d6
mov esi, dword [ebp - 0x8e4]
add esi, 8
mov eax, dword [esi]
mov eax, dword [eax - 0xc]
mov ebx, 0xff
test eax, eax
je 0x40ec6e
push dword [ebp - 0x8a8]
xor ecx, ecx
call fcn.004072a5
cmp eax, 0xffffffff
je 0x40ec6e
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.004027b0
jmp 0x40f0a0
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x8a8]
add ecx, 0xfffffff0
call fcn.004027b0
push esi
lea eax, [ebp - 0x8a4]
push eax
lea eax, [ebp - 0x8dc]
push eax
call fcn.004020b5
add esp, 0xc
push eax
mov ecx, esi
mov byte [ebp - 4], 0x12
call fcn.0040257e
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x8dc]
add ecx, 0xfffffff0
call fcn.004027b0
mov eax, dword [esi]
cmp dword [eax - 0xc], ebx
jle 0x40ece5
push ebx
lea eax, [ebp - 0x8e0]
push eax
mov ecx, esi
call fcn.0040739d
push eax
mov ecx, esi
mov byte [ebp - 4], 0x13
call fcn.0040257e
mov ecx, dword [ebp - 0x8e0]
add ecx, 0xfffffff0
call fcn.004027b0
mov edi, 0x584840
push edi
mov dword [ebp - 0x8b8], edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 4], 0x14
call fcn.00499991
push eax
lea ecx, [ebp - 0x8b4]
call fcn.004727f7
push 3
lea eax, [ebp - 0x8b4]
push 0x526688
push eax
mov byte [ebp - 4], 0x15
call fcn.00402967
mov eax, dword [esi]
add esp, 0xc
push dword [ebp - 0x8b4]
mov ecx, 0x584a68
mov dword [ebp - 0x8b0], eax
call fcn.004a7d87
push dword [ebp - 0x8b0]
mov ecx, eax
call fcn.004026bd
mov eax, dword [esi]
mov dword [ebp - 0x898], eax
lea eax, [ebp - 0x8b0]
push eax
lea esi, [ebp - 0x8fc]
mov dword [ebp - 0x8b0], SysReAllocString
call fcn.0040a64a
mov byte [ebp - 4], 0x16
call fcn.00499991
push eax
lea ecx, [ebp - 0x8a0]
call fcn.004727f7
push 3
mov byte [ebp - 4], 0x17
push dword [0x584a4c]
lea eax, [ebp - 0x8a0]
push dword [0x584a54]
push eax
call fcn.00402967
add esp, 0x10
call fcn.00499991
push eax
lea ecx, [ebp - 0x890]
call fcn.004727f7
push 0x200
lea eax, [ebp - 0x68c]
push 0
mov byte [ebp - 4], 0x18
push eax
mov dword [ebp - 0x8fc], 0x2001f
call fcn.004be850
add esp, 0xc
push ebx
push dword [ebp - 0x898]
lea eax, [ebp - 0x68c]
push eax
call fcn.004ba74e
mov eax, dword [0x584a64]
add esp, 0xc
cmp dword [eax - 0xc], 0
jne 0x40ee2f
mov ecx, dword [ebp - 0x890]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x8a0]
add ecx, 0xfffffff0
call fcn.004027b0
call fcn.0040a6c4
mov ecx, dword [ebp - 0x8f4]
add ecx, 0xfffffff0
call fcn.004027b0
jmp 0x40f08b
push 7
pop ecx
mov esi, str.Microsoft_Visual_C_Library
lea edi, [ebp - 0x34]
rep movsd dword es:[edi], dword [esi]
push 0x101
lea eax, [ebp - 0x184]
push 0
push eax
movsb byte es:[edi], byte [esi]
call fcn.004be850
add esp, 0xc
push 0x101
lea eax, [ebp - 0x28c]
push 0
push eax
call fcn.004be850
add esp, 0xc
xor eax, eax
mov edi, 0x100
mov byte [ebp + eax - 0x184], al
inc eax
cmp eax, edi
jb 0x40ee70
mov eax, dword [0x584a64]
xor ecx, ecx
xor esi, esi
cmp dword [eax - 0xc], ecx
je 0x40eea3
cmp esi, dword [eax - 0xc]
jb 0x40ee91
xor esi, esi
mov dl, byte [eax + esi*2]
inc esi
mov byte [ebp + ecx - 0x28c], dl
inc ecx
cmp ecx, edi
jb 0x40ee8a
jmp 0x40eebd
xor eax, eax
cmp esi, 0x1c
jb 0x40eeac
xor esi, esi
mov dl, byte [ebp + esi - 0x34]
inc esi
mov byte [ebp + eax - 0x28c], dl
inc eax
cmp eax, edi
jb 0x40eea5
xor edi, edi
mov dword [ebp - 0x894], edi
movzx edx, byte [ebp + edi - 0x28c]
add edx, dword [ebp - 0x894]
lea eax, [ebp + edi - 0x184]
mov cl, byte [eax]
movzx esi, cl
add esi, edx
and esi, ebx
mov edx, esi
movzx cx, cl
lea esi, [ebp + edx - 0x184]
mov dword [ebp - 0x894], edx
mov dl, byte [esi]
movzx ecx, cx
inc edi
mov byte [eax], dl
mov byte [esi], cl
cmp edi, 0x100
jb 0x40eec5
xor edi, edi
mov dword [ebp - 0x894], edi
mov dword [ebp - 0x89c], edi
inc edi
and edi, ebx
lea ecx, [ebp + edi - 0x184]
mov al, byte [ecx]
movzx edx, al
add edx, dword [ebp - 0x894]
movzx ax, al
and edx, ebx
movzx eax, ax
lea esi, [ebp + edx - 0x184]
mov dword [ebp - 0x894], edx
mov dl, byte [esi]
mov byte [ecx], dl
mov byte [esi], al
movzx ecx, byte [ecx]
movzx eax, al
add eax, ecx
mov ecx, dword [ebp - 0x89c]
and eax, ebx
movzx ax, byte [ebp + eax - 0x184]
movzx eax, ax
lea ecx, [ebp + ecx - 0x68c]
xor byte [ecx], al
inc dword [ebp - 0x89c]
cmp dword [ebp - 0x89c], 0x1fe
jb 0x40ef16
xor eax, eax
mov word [ebp - 0x48e], ax
call fcn.00499991
push eax
lea ecx, [ebp - 0x898]
call fcn.004727f7
push 3
mov byte [ebp - 4], 0x19
push dword [0x584a5c]
lea eax, [ebp - 0x898]
push eax
call fcn.00402967
add esp, 8
lea eax, [ebp - 0x898]
mov dword [ebp - 0x8b0], esp
mov ecx, esp
push eax
lea esi, [ebp - 0x68c]
call fcn.0040228a
mov ecx, esi
call fcn.0040b6c1
pop ecx
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x898]
add ecx, 0xfffffff0
call fcn.004027b0
mov edi, dword [ebp - 0x8a0]
push 1
push edi
push SysReAllocString
lea esi, [ebp - 0x8fc]
call fcn.0040a666
test eax, eax
je 0x40f022
push 0x200
lea eax, [ebp - 0x68c]
push eax
push dword [ebp - 0x890]
mov eax, esi
call fcn.0040a8f8
call fcn.0040a6c4
push 1
push edi
push reloc.OLEAUT32.dll_SysReAllocString
lea esi, [ebp - 0x8fc]
call fcn.0040a666
test eax, eax
je 0x40f057
push 0x200
lea eax, [ebp - 0x68c]
push eax
push dword [ebp - 0x890]
mov eax, esi
call fcn.0040a8f8
call fcn.0040a6c4
mov ecx, dword [ebp - 0x890]
add ecx, 0xfffffff0
call fcn.004027b0
lea ecx, [edi - 0x10]
call fcn.004027b0
lea esi, [ebp - 0x8fc]
call fcn.0040a6c4
mov ecx, dword [ebp - 0x8f4]
add ecx, 0xfffffff0
call fcn.004027b0
mov edi, 0x584840
mov ecx, dword [ebp - 0x8b4]
add ecx, 0xfffffff0
call fcn.004027b0
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x8a4]
add ecx, 0xfffffff0
call fcn.004027b0
push 0x400
push 0
lea eax, [ebp - 0x8cc]
push eax
lea ecx, [ebp - 0x920]
call fcn.0040f7c5
mov edi, 0x200
push edi
lea eax, [ebp - 0x88c]
push 0
push eax
mov byte [ebp - 4], 0x1a
call fcn.004be850
add esp, 0xc
push ebx
push dword [ebp - 0x8cc]
lea eax, [ebp - 0x88c]
push eax
call fcn.004ba74e
add esp, 0xc
lea eax, [ebp - 0x88c]
push eax
lea ecx, [ebp - 0x8b8]
call fcn.004024df
mov eax, 0x584840
push eax
mov dword [ebp - 0x8d4], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 4], 0x1c
call fcn.00499991
push eax
lea ecx, [ebp - 0x8b4]
call fcn.004727f7
push 2
lea eax, [ebp - 0x8b4]
push 0x526688
push eax
mov byte [ebp - 4], 0x1d
call fcn.00402967
mov esi, dword [ebp - 0x8b8]
add esp, 0xc
push dword [ebp - 0x8b4]
mov ecx, 0x584a68
call fcn.004a7d87
push esi
mov ecx, eax
call fcn.004026bd
mov eax, dword [ebp - 0x8b8]
mov dword [ebp - 0x898], eax
lea eax, [ebp - 0x8b0]
push eax
lea esi, [ebp - 0x30]
mov dword [ebp - 0x8b0], SysReAllocString
call fcn.0040a64a
mov byte [ebp - 4], 0x1e
call fcn.00499991
push eax
lea ecx, [ebp - 0x8a0]
call fcn.004727f7
push 2
mov byte [ebp - 4], 0x1f
push dword [0x584a4c]
lea eax, [ebp - 0x8a0]
push dword [0x584a54]
push eax
call fcn.00402967
add esp, 0x10
call fcn.00499991
push eax
lea ecx, [ebp - 0x8b0]
call fcn.004727f7
push edi
lea eax, [ebp - 0x48c]
push 0
mov byte [ebp - 4], 0x20
push eax
mov dword [ebp - 0x30], 0x2001f
call fcn.004be850
add esp, 0xc
push ebx
push dword [ebp - 0x898]
lea eax, [ebp - 0x48c]
push eax
call fcn.004ba74e
mov eax, dword [0x584a64]
add esp, 0xc
cmp dword [eax - 0xc], 0
jne 0x40f233
mov ecx, dword [ebp - 0x8b0]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x8a0]
add ecx, 0xfffffff0
jmp 0x40f45c
push 7
pop ecx
mov esi, str.Microsoft_Visual_C_Library
lea edi, [ebp - 0x78]
rep movsd dword es:[edi], dword [esi]
push 0x101
lea eax, [ebp - 0x184]
push 0
push eax
movsb byte es:[edi], byte [esi]
call fcn.004be850
add esp, 0xc
push 0x101
lea eax, [ebp - 0x28c]
push 0
push eax
call fcn.004be850
add esp, 0xc
xor eax, eax
mov edi, 0x100
mov byte [ebp + eax - 0x184], al
inc eax
cmp eax, edi
jb 0x40f274
mov eax, dword [0x584a64]
xor ecx, ecx
xor esi, esi
cmp dword [eax - 0xc], ecx
je 0x40f2a7
cmp esi, dword [eax - 0xc]
jb 0x40f295
xor esi, esi
mov dl, byte [eax + esi*2]
inc esi
mov byte [ebp + ecx - 0x28c], dl
inc ecx
cmp ecx, edi
jb 0x40f28e
jmp 0x40f2c1
xor eax, eax
cmp esi, 0x1c
jb 0x40f2b0
xor esi, esi
mov dl, byte [ebp + esi - 0x78]
inc esi
mov byte [ebp + eax - 0x28c], dl
inc eax
cmp eax, edi
jb 0x40f2a9
xor edi, edi
mov dword [ebp - 0x894], edi
movzx edx, byte [ebp + edi - 0x28c]
add edx, dword [ebp - 0x894]
lea eax, [ebp + edi - 0x184]
mov cl, byte [eax]
movzx esi, cl
add esi, edx
and esi, ebx
mov edx, esi
movzx cx, cl
lea esi, [ebp + edx - 0x184]
mov dword [ebp - 0x894], edx
mov dl, byte [esi]
movzx ecx, cx
inc edi
mov byte [eax], dl
mov byte [esi], cl
cmp edi, 0x100
jb 0x40f2c9
xor edi, edi
mov dword [ebp - 0x894], edi
mov dword [ebp - 0x89c], edi
inc edi
and edi, ebx
lea eax, [ebp + edi - 0x184]
mov cl, byte [eax]
movzx edx, cl
add edx, dword [ebp - 0x894]
movzx cx, cl
and edx, ebx
movzx ecx, cx
lea esi, [ebp + edx - 0x184]
mov dword [ebp - 0x894], edx
mov dl, byte [esi]
mov byte [eax], dl
mov byte [esi], cl
movzx eax, byte [eax]
movzx ecx, cl
add eax, ecx
mov ecx, dword [ebp - 0x89c]
and eax, ebx
movzx ax, byte [ebp + eax - 0x184]
movzx eax, ax
lea ecx, [ebp + ecx - 0x48c]
xor byte [ecx], al
inc dword [ebp - 0x89c]
cmp dword [ebp - 0x89c], 0x1fe
jb 0x40f31a
xor eax, eax
mov word [ebp - 0x28e], ax
call fcn.00499991
push eax
lea ecx, [ebp - 0x898]
call fcn.004727f7
push 2
mov byte [ebp - 4], 0x21
push dword [0x584a5c]
lea eax, [ebp - 0x898]
push eax
call fcn.00402967
add esp, 8
lea eax, [ebp - 0x898]
mov dword [ebp - 0x8d8], esp
mov ecx, esp
push eax
lea esi, [ebp - 0x48c]
call fcn.0040228a
mov ecx, esi
call fcn.0040b6c1
pop ecx
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x898]
add ecx, 0xfffffff0
call fcn.004027b0
mov edi, dword [ebp - 0x8a0]
push 1
push edi
push SysReAllocString
lea esi, [ebp - 0x30]
call fcn.0040a666
mov ebx, dword [ebp - 0x8b0]
test eax, eax
je 0x40f424
push 0x200
lea eax, [ebp - 0x48c]
push eax
push ebx
mov eax, esi
call fcn.0040a8f8
call fcn.0040a6c4
push 1
push edi
push reloc.OLEAUT32.dll_SysReAllocString
lea esi, [ebp - 0x30]
call fcn.0040a666
test eax, eax
je 0x40f451
push 0x200
lea eax, [ebp - 0x48c]
push eax
push ebx
mov eax, esi
call fcn.0040a8f8
call fcn.0040a6c4
lea ecx, [ebx - 0x10]
call fcn.004027b0
lea ecx, [edi - 0x10]
call fcn.004027b0
lea esi, [ebp - 0x30]
call fcn.0040a6c4
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp - 0x8b4]
add ecx, 0xfffffff0
call fcn.004027b0
push 0x584840
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x8b8]
add ecx, 0xfffffff0
call fcn.004027b0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x8cc]
add ecx, 0xfffffff0
call fcn.004027b0
mov edi, dword [ebp - 0x8e4]
push dword [edi + 4]
lea eax, [ebp - 0x8d0]
push dword [edi]
push str.After_InstallArmadilloCode__d___d
push eax
call fcn.00402967
add esp, 0x10
call fcn.0040e246
push dword [edi + 4]
lea eax, [ebp - 0x8d0]
push dword [edi]
push str.After_RefreshAllStatus__d___d
push eax
call fcn.00402967
mov edi, dword [edi + 4]
add esp, 0x10
mov ecx, dword [ebp - 0x8d0]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.004027b0
mov eax, edi
call fcn.004bed9c
ret 8
xor edi, edi
inc edi
jmp 0x40f4ed
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x40f4ed