Function at 0x4b8f73
Capabilities:
Encode data using xor

Disassembly:
push 0x5cc
mov eax, 0x5186c0
call fcn.004e3d9f
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov byte [ecx], 0
lea ecx, [ebp - 0x4ac]
push ecx
xor esi, esi
push eax
mov dword [ebp - 0x480], esi
call fcn.004b8604
push ecx
mov eax, esp
mov dword [ebp - 0x47c], esp
lea ecx, [ebp - 0x4ac]
push ecx
push str.Kay_Mili_GetRemainingRegDays_Mein_
push eax
mov dword [ebp - 4], esi
call fcn.0040dc86
add esp, 0xc
call fcn.00454d39
mov eax, dword [ebp - 0x4ac]
cmp dword [eax - 0xc], esi
pop ecx
jle 0x4b99f4
lea eax, [ebp - 0x4ac]
push eax
lea ecx, [ebp - 0x474]
call fcn.00402305
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 1
call fcn.00402305
mov byte [ebp - 4], 2
mov ebx, dword [ebp - 0x470]
mov eax, dword [ebx - 0xc]
cmp eax, 0x17
je 0x4b9023
lea ecx, [ebx - 0x10]
call fcn.0040285b
mov ecx, dword [ebp - 0x474]
jmp 0x4b99ec
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x4a8]
call fcn.004027f9
mov byte [ebp - 4], 3
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x4a0]
call fcn.004027f9
mov byte [ebp - 4], 4
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x4a4]
call fcn.004027f9
mov byte [ebp - 4], 5
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x49c]
call fcn.004027f9
mov edi, 0x5bfea4
push edi
xor ecx, ecx
lea esi, [ebp - 0x470]
mov byte [ebp - 4], 6
call fcn.0040788c
mov esi, eax
cmp esi, 0xffffffff
je 0x4b9721
push esi
push 0
lea eax, [ebp - 0x520]
push eax
lea ecx, [ebp - 0x470]
call fcn.00407906
push eax
lea ecx, [ebp - 0x4a8]
mov byte [ebp - 4], 7
call fcn.004025da
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x520]
add ecx, 0xfffffff0
call fcn.0040285b
push dword [ebx - 0xc]
inc esi
push esi
lea eax, [ebp - 0x51c]
push eax
lea ecx, [ebp - 0x470]
call fcn.00407906
push eax
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 8
call fcn.004025da
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x51c]
add ecx, 0xfffffff0
call fcn.0040285b
push edi
xor ecx, ecx
lea esi, [ebp - 0x470]
call fcn.0040788c
mov esi, eax
cmp esi, 0xffffffff
je 0x4b9415
push esi
push 0
lea eax, [ebp - 0x524]
push eax
lea ecx, [ebp - 0x470]
call fcn.00407906
push eax
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 9
call fcn.004025da
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x524]
add ecx, 0xfffffff0
call fcn.0040285b
mov eax, dword [ebp - 0x470]
push dword [eax - 0xc]
inc esi
push esi
lea eax, [ebp - 0x518]
push eax
lea ecx, [ebp - 0x470]
call fcn.00407906
push eax
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0xa
call fcn.004025da
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x518]
add ecx, 0xfffffff0
call fcn.0040285b
push edi
xor ecx, ecx
lea esi, [ebp - 0x470]
call fcn.0040788c
mov esi, eax
cmp esi, 0xffffffff
je 0x4b9415
push esi
push 0
lea eax, [ebp - 0x514]
push eax
lea ecx, [ebp - 0x470]
call fcn.00407906
push eax
lea ecx, [ebp - 0x4a4]
mov byte [ebp - 4], 0xb
call fcn.004025da
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x514]
add ecx, 0xfffffff0
call fcn.0040285b
mov eax, dword [ebp - 0x470]
push dword [eax - 0xc]
inc esi
push esi
lea eax, [ebp - 0x4f8]
push eax
lea ecx, [ebp - 0x470]
call fcn.00407906
push eax
lea ecx, [ebp - 0x49c]
mov byte [ebp - 4], 0xc
call fcn.004025da
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x4f8]
add ecx, 0xfffffff0
call fcn.0040285b
push 6
pop edi
push 2
xor ecx, ecx
pop esi
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004bd34c
pop ecx
mov ecx, eax
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x488], ecx
sub ecx, eax
movzx edx, word [eax]
mov word [ecx + eax], dx
add eax, esi
test dx, dx
jne 0x4b924f
xor ecx, ecx
mov eax, edi
mov edx, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004bd34c
mov edx, eax
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x4c0], edx
pop ecx
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, esi
test cx, cx
jne 0x4b9283
xor ecx, ecx
push 2
pop edx
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004bd34c
mov ebx, eax
mov eax, dword [ebp - 0x4a4]
mov edx, ebx
pop ecx
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
inc eax
inc eax
test cx, cx
jne 0x4b92b4
xor ecx, ecx
push 2
pop edx
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004bd34c
mov edx, eax
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x4d8], edx
pop ecx
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
inc eax
inc eax
test cx, cx
jne 0x4b92e9
xor ecx, ecx
push 2
pop edx
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004bd34c
mov esi, eax
mov eax, dword [ebp - 0x488]
pop ecx
mov ecx, dword [ebp - 0x4c0]
sub ecx, eax
mov dword [ebp - 0x478], eax
sub dword [ebp - 0x478], esi
mov dword [ebp - 0x4d0], esi
mov dword [ebp - 0x47c], ecx
mov dword [ebp - 0x4b0], 5
jmp 0x4b9348
mov ecx, dword [ebp - 0x47c]
mov eax, dword [ebp - 0x478]
or dword [ebp - 0x484], 0xffffffff
or dword [ebp - 0x480], 0xffffffff
add eax, esi
mov dl, byte [eax + ecx]
mov al, byte [eax]
xor ecx, ecx
cmp byte [ecx + str.9PHVYB7EM6TW5SFZ8KUA3CNX4G2DRJ], dl
jne 0x4b9373
mov dword [ebp - 0x484], ecx
cmp byte [ecx + str.23456789ABCDEFGHJKMNPRSTUVWXYZ], al
jne 0x4b9381
mov dword [ebp - 0x480], ecx
inc ecx
cmp ecx, 0x1e
jl 0x4b9365
mov eax, dword [ebp - 0x484]
sub eax, dword [ebp - 0x480]
jns 0x4b9398
add eax, 0x1e
movsx ax, byte [eax + str.23456789ABCDEFGHJKMNPRSTUVWXYZ]
mov word [esi], ax
inc esi
inc esi
dec dword [ebp - 0x4b0]
jne 0x4b9342
mov esi, dword [ebp - 0x4d0]
xor eax, eax
push esi
mov ecx, 0x60b2d0
mov word [esi + 0xa], ax
call fcn.00413eb9
test eax, eax
je 0x4b945b
mov eax, 0x5d078c
mov edx, esi
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
inc eax
inc eax
test cx, cx
jne 0x4b93d5
push dword [ebp - 0x488]
call fcn.004bd341
pop ecx
push dword [ebp - 0x4c0]
call fcn.004bd341
pop ecx
push esi
call fcn.004bd341
pop ecx
push ebx
call fcn.004bd341
pop ecx
push dword [ebp - 0x4d8]
call fcn.004bd341
pop ecx
mov ecx, dword [ebp - 0x49c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x4a4]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x4a0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x4a8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x470]
add ecx, 0xfffffff0
jmp 0x4b9013
mov al, byte [ebx]
xor edi, edi
xor ecx, ecx
cmp byte [ecx + str.VE9WMBCX8SP3DJT7A5GZUNHF2R6KY4], al
je 0x4b9471
inc ecx
cmp ecx, 0xb
jl 0x4b9461
jmp 0x4b9473
mov edi, ecx
mov cl, byte [ebx + 2]
push 0xb
pop edx
mov eax, edx
cmp byte [edx + str.VE9WMBCX8SP3DJT7A5GZUNHF2R6KY4], cl
je 0x4b948b
inc edx
cmp edx, 0x17
jl 0x4b947b
jmp 0x4b948d
mov eax, edx
or dword [ebp - 0x4b0], 0xffffffff
or dword [ebp - 0x484], 0xffffffff
or dword [ebp - 0x478], 0xffffffff
add eax, 0xfffffff5
xor esi, esi
mov cl, byte [esi + str.VE9WMBCX8SP3DJT7A5GZUNHF2R6KY4]
cmp cl, byte [ebx + 4]
jne 0x4b94b8
mov dword [ebp - 0x4b0], esi
cmp cl, byte [ebx + 6]
jne 0x4b94c3
mov dword [ebp - 0x484], esi
cmp cl, byte [ebx + 8]
jne 0x4b94ce
mov dword [ebp - 0x478], esi
xor ecx, ecx
cmp dword [ebp - 0x4b0], ecx
jl 0x4b94e8
cmp dword [ebp - 0x484], ecx
jl 0x4b94e8
cmp dword [ebp - 0x478], ecx
jge 0x4b94ee
inc esi
cmp esi, 0x1e
jl 0x4b94a7
imul eax, eax, 0x1e
imul edi, edi, 0x16d
lea eax, [edi + eax + 4]
mov dword [ebp - 0x480], eax
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x4f0]
call fcn.004027f9
mov byte [ebp - 4], 0xd
xor edi, edi
mov eax, dword [ebp - 0x4d8]
mov al, byte [eax + edi*2]
xor esi, esi
cmp byte [esi + str.9PHVYB7EM6TW5SFZ8KUA3CNX4G2DRJ], al
je 0x4b9531
inc esi
cmp esi, 0xa
jl 0x4b9523
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x4f4]
call fcn.004027f9
push esi
lea eax, [ebp - 0x4f4]
push 0x5b2754
push eax
mov byte [ebp - 4], 0xe
call fcn.00402a1d
mov esi, dword [ebp - 0x4f4]
add esp, 0xc
push dword [esi - 0xc]
lea ecx, [ebp - 0x4f0]
push esi
call fcn.00414446
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 0xd
call fcn.0040285b
inc edi
cmp edi, 5
jl 0x4b9518
mov esi, dword [ebp - 0x4f0]
push esi
call fcn.004df43f
pop ecx
push 8
mov dword [ebp - 0x47c], eax
pop ecx
xor eax, eax
mov word [ebp - 0x3c], ax
push ebx
push dword [ebp - 0x4d0]
lea edi, [ebp - 0x3a]
push dword [ebp - 0x488]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x3c]
push str._s__s__s
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
push 0x12
call fcn.004bd34c
mov edi, eax
pop ecx
lea eax, [ebp - 0x5d4]
mov dword [ebp - 0x5d8], eax
push 3
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x5d8]
push eax
call fcn.00407356
mov eax, dword [ebp - 0x5d8]
mov ecx, edi
sub ecx, eax
mov dl, byte [eax]
mov byte [eax + ecx], dl
inc eax
test dl, dl
jne 0x4b95f6
lea eax, [ebp - 0x5d4]
cmp dword [ebp - 0x5d8], eax
je 0x4b961a
push dword [ebp - 0x5d8]
call fcn.004de9e3
pop ecx
and dword [ebp - 0x478], 0
mov dword [ebp - 0x484], 0x11
mov eax, edi
movzx edx, byte [eax]
mov ecx, dword [ebp - 0x478]
shr ecx, 8
xor ecx, edx
mov edx, dword [ebp - 0x478]
shl edx, 8
xor edx, dword [ecx*4 + 0x6017a8]
and edx, 0xffff
inc eax
dec dword [ebp - 0x484]
cmp dword [ebp - 0x484], 0
mov dword [ebp - 0x478], edx
jg 0x4b962d
push edi
call fcn.004bd341
movzx eax, word [ebp - 0x478]
cmp dword [ebp - 0x47c], eax
pop ecx
push dword [ebp - 0x488]
sete byte [ebp - 0x48d]
call fcn.004bd341
pop ecx
push dword [ebp - 0x4c0]
call fcn.004bd341
pop ecx
push dword [ebp - 0x4d0]
call fcn.004bd341
pop ecx
push ebx
call fcn.004bd341
pop ecx
push dword [ebp - 0x4d8]
call fcn.004bd341
pop ecx
lea ecx, [esi - 0x10]
call fcn.0040285b
mov ecx, dword [ebp - 0x49c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x4a4]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x4a0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x4a8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x470]
add ecx, 0xfffffff0
call fcn.0040285b
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x474]
add ecx, 0xfffffff0
call fcn.0040285b
mov al, byte [ebp - 0x48d]
jmp 0x4b9777
mov ecx, dword [ebp - 0x49c]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x4a4]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x4a0]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x4a8]
add ecx, 0xfffffff0
call fcn.0040285b
add ebx, 0xfffffff0
mov ecx, ebx
call fcn.0040285b
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x474]
add ecx, 0xfffffff0
call fcn.0040285b
xor al, al
test al, al
je 0x4b99f4
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x494]
call fcn.004027f9
push dword [ebp - 0x480]
lea eax, [ebp - 0x494]
push str.GetRemainingRegDays_Ka_Validate_bhi_ho_gaya__d_days
push eax
mov byte [ebp - 4], 0xf
call fcn.00402a1d
pop ecx
pop ecx
lea eax, [ebp - 0x494]
mov dword [ebp - 0x47c], esp
mov ecx, esp
push eax
call fcn.00402305
call fcn.00454d39
pop ecx
push 2
lea eax, [ebp - 0x498]
push eax
call fcn.004b7aaa
push ecx
mov eax, esp
mov dword [ebp - 0x47c], esp
lea ecx, [ebp - 0x498]
push ecx
push str.GetRemainingRegDays_strInstallTime_nikala__
push eax
mov byte [ebp - 4], 0x11
call fcn.0040dc86
add esp, 0xc
call fcn.00454d39
fldz
pop ecx
fstp qword [ebp - 0x4e8]
mov ebx, 0x400
push ebx
xor esi, esi
push esi
push dword [ebp - 0x498]
lea ecx, [ebp - 0x4e8]
mov dword [ebp - 0x4e0], esi
call fcn.00445e46
test al, al
je 0x4b9a8e
push ecx
mov ecx, esp
mov dword [ebp - 0x47c], esp
push str.GetRemainingRegDays_strInstallTime_Parsekiya
call fcn.0040253b
call fcn.00454d39
pop ecx
cmp dword [ebp - 0x4e0], esi
jne 0x4b99d8
push ecx
mov ecx, esp
mov dword [ebp - 0x47c], esp
push str.GetRemainingRegDays_strInstallTime_Parsekiya___status_valid_aaya
call fcn.0040253b
call fcn.00454d39
pop ecx
lea eax, [ebp - 0x530]
call fcn.00445b7d
push ecx
mov ecx, esp
mov dword [ebp - 0x47c], esp
push str.GetRemainingRegDays_curtime_nikala
call fcn.0040253b
call fcn.00454d39
pop ecx
lea eax, [ebp - 0x530]
push eax
lea ecx, [ebp - 0x4e8]
call fcn.004bcfd0
test al, al
je 0x4b9965
push ecx
mov ecx, esp
mov dword [ebp - 0x48c], esp
push str.GetRemainingRegDays_timeInstalled___curtime
call fcn.0040253b
call fcn.00454d39
pop ecx
lea eax, [ebp - 0x530]
push eax
lea esi, [ebp - 0x548]
lea eax, [ebp - 0x4e8]
call fcn.00493003
mov ecx, esi
call fcn.00492fd3
fcomp qword [0x5d12b0]
push ecx
mov ecx, esp
mov dword [ebp - 0x48c], esp
fnstsw ax
test ah, 5
jp 0x4b993b
push str.GetRemainingRegDays___timeInstalled___curtime_and_nSpan.GetTotalDays_____3
call fcn.0040253b
call fcn.00454d39
pop ecx
mov ecx, dword [ebp - 0x498]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x494]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x4ac]
add ecx, 0xfffffff0
call fcn.0040285b
xor eax, eax
call fcn.004e3dfb
ret 8
push str.GetRemainingRegDays___timeInstalled___curtime_and_nSpan.GetTotalDays_____3_FALSE_hai
call fcn.0040253b
call fcn.00454d39
pop ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x48c], esp
push str.timeInstalled___curtime_nahi_hai_and_curtime___timeInstalled_bhi_nahi_hai
call fcn.0040253b
call fcn.00454d39
jmp 0x4b99d7
lea esi, [ebp - 0x4e8]
lea edi, [ebp - 0x530]
call fcn.004bcf95
test al, al
je 0x4b994b
push ecx
mov ecx, esp
mov dword [ebp - 0x47c], esp
push str.GetRemainingRegDays_curtime___timeInstalled
call fcn.0040253b
call fcn.00454d39
mov eax, esi
pop ecx
push eax
lea esi, [ebp - 0x53c]
mov eax, edi
call fcn.00493003
mov ecx, esi
call fcn.00492fd3
call fcn.004e5ce0
mov edi, eax
cmp edi, dword [ebp - 0x480]
jb 0x4b9a0b
push ecx
mov ecx, esp
mov dword [ebp - 0x47c], esp
push str.GetRemainingRegDays_nDaysPassed___nDaysAllowed_return_0_days_and_Epiredtrue
call fcn.0040253b
call fcn.00454d39
mov eax, dword [ebp + 0xc]
mov byte [eax], 1
pop ecx
mov ecx, dword [ebp - 0x498]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x494]
add ecx, 0xfffffff0
call fcn.0040285b
xor esi, esi
mov ecx, dword [ebp - 0x4ac]
add ecx, 0xfffffff0
call fcn.0040285b
mov eax, esi
jmp 0x4b9933
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x4bc]
call fcn.004027f9
mov esi, dword [ebp - 0x480]
push edi
push dword [ebp - 0x480]
sub esi, edi
push esi
lea eax, [ebp - 0x4bc]
push str.GetRemainingRegDays_return_kar_raha_hai____d_days__nDaysAllowed_d___nDaysPassed_d_
push eax
mov byte [ebp - 4], 0x12
call fcn.00402a1d
add esp, 0x14
push ecx
lea eax, [ebp - 0x4bc]
mov dword [ebp - 0x48c], esp
mov ecx, esp
push eax
call fcn.00402305
call fcn.00454d39
pop ecx
mov ecx, dword [ebp - 0x4bc]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x498]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x494]
add ecx, 0xfffffff0
call fcn.0040285b
jmp 0x4b99f6
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x4c8]
call fcn.004027f9
push dword [ebp - 0x480]
lea eax, [ebp - 0x4c8]
push str.GetRemainingRegDays_TimeInstalled_parse_nahi_kar_paya_
push eax
mov byte [ebp - 4], 0x13
call fcn.00402a1d
add esp, 0xc
push ecx
lea eax, [ebp - 0x4c8]
mov dword [ebp - 0x48c], esp
mov ecx, esp
push eax
call fcn.00402305
call fcn.00454d39
pop ecx
lea eax, [ebp - 0x554]
call fcn.00445b7d
mov esi, eax
lea edi, [ebp - 0x4e8]
movsd dword es:[edi], dword [esi]
push ebx
movsd dword es:[edi], dword [esi]
push 0
lea eax, [ebp - 0x4dc]
push eax
lea ecx, [ebp - 0x4e8]
movsd dword es:[edi], dword [esi]
call fcn.00445d15
mov eax, 0x6098a8
push eax
mov dword [ebp - 0x48c], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 4], 0x15
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x4d4]
call fcn.004027f9
push 2
lea eax, [ebp - 0x4d4]
push 0x5b2754
push eax
mov byte [ebp - 4], 0x16
call fcn.00402a1d
mov esi, dword [ebp - 0x4dc]
add esp, 0xc
push dword [ebp - 0x4d4]
mov ecx, 0x60b2d8
call fcn.004ccb16
push esi
mov ecx, eax
call fcn.00402719
mov edi, dword [ebp - 0x4dc]
lea eax, [ebp - 0x4ec]
push eax
lea esi, [ebp - 0x510]
mov dword [ebp - 0x4ec], VariantCopy
call fcn.0040ac2c
mov byte [ebp - 4], 0x17
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x4cc]
call fcn.004027f9
push 2
mov byte [ebp - 4], 0x18
push dword [0x60b2bc]
lea eax, [ebp - 0x4cc]
push dword [0x60b2c4]
push eax
call fcn.00402a1d
add esp, 0x10
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x4b4]
call fcn.004027f9
push 0x200
lea eax, [ebp - 0x46c]
push 0
mov byte [ebp - 4], 0x19
push eax
mov dword [ebp - 0x510], 0x2001f
call fcn.004e38a0
add esp, 0xc
mov ebx, 0xff
push ebx
lea eax, [ebp - 0x46c]
push edi
push eax
call fcn.004dfd1a
mov eax, dword [0x60b2d4]
add esp, 0xc
cmp dword [eax - 0xc], 0
jne 0x4b9c2c
mov ecx, dword [ebp - 0x4b4]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x4cc]
add ecx, 0xfffffff0
jmp 0x4b9e69
push 7
pop ecx
mov esi, str.Microsoft_Visual_C_Library
lea edi, [ebp - 0x5c]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, 0x101
push esi
lea eax, [ebp - 0x164]
push 0
push eax
call fcn.004e38a0
add esp, 0xc
push esi
lea eax, [ebp - 0x26c]
push 0
push eax
call fcn.004e38a0
add esp, 0xc
xor eax, eax
lea edx, [esi - 1]
cmp eax, edx
jae 0x4b9c76
mov byte [ebp + eax - 0x164], al
inc eax
jmp 0x4b9c68
mov eax, dword [0x60b2d4]
mov ecx, dword [eax - 0xc]
xor esi, esi
test ecx, ecx
je 0x4b9ca3
xor edi, edi
cmp edi, edx
jae 0x4b9cbf
cmp esi, ecx
jb 0x4b9c90
xor esi, esi
mov dl, byte [eax + esi*2]
mov byte [ebp + edi - 0x26c], dl
inc esi
inc edi
mov edx, 0x100
jmp 0x4b9c86
xor eax, eax
cmp eax, edx
jae 0x4b9cbf
cmp esi, 0x1c
jb 0x4b9cb0
xor esi, esi
mov cl, byte [ebp + esi - 0x5c]
mov byte [ebp + eax - 0x26c], cl
inc esi
inc eax
jmp 0x4b9ca5
xor edi, edi
mov dword [ebp - 0x474], edi
cmp edi, edx
jae 0x4b9d0b
movzx edx, byte [ebp + edi - 0x26c]
add edx, dword [ebp - 0x474]
lea eax, [ebp + edi - 0x164]
mov cl, byte [eax]
movzx esi, cl
add esi, edx
and esi, ebx
movzx cx, cl
mov dword [ebp - 0x474], esi
lea esi, [ebp + esi - 0x164]
mov dl, byte [esi]
movzx ecx, cx
mov byte [eax], dl
mov byte [esi], cl
inc edi
mov edx, 0x100
jmp 0x4b9cc7
xor edi, edi
mov dword [ebp - 0x474], edi
mov dword [ebp - 0x488], edi
cmp dword [ebp - 0x488], 0x1fe
jae 0x4b9d7e
inc edi
and edi, ebx
lea eax, [ebp + edi - 0x164]
mov cl, byte [eax]
movzx edx, cl
add edx, dword [ebp - 0x474]
movzx cx, cl
and edx, ebx
lea esi, [ebp + edx - 0x164]
movzx ecx, cx
mov dword [ebp - 0x474], edx
mov dl, byte [esi]
mov byte [eax], dl
mov edx, dword [ebp - 0x488]
mov byte [esi], cl
movzx eax, byte [eax]
movzx ecx, cl
add ecx, eax
and ecx, ebx
mov al, byte [ebp + ecx - 0x164]
lea edx, [ebp + edx - 0x46c]
xor byte [edx], al
inc dword [ebp - 0x488]
jmp 0x4b9d19
xor eax, eax
mov word [ebp - 0x26e], ax
call fcn.004be6f3
push eax
lea ecx, [ebp - 0x4c4]
call fcn.004027f9
push 2
mov byte [ebp - 4], 0x1a
push dword [0x60b2cc]
lea eax, [ebp - 0x4c4]
push eax
call fcn.00402a1d
add esp, 0xc
push ecx
lea eax, [ebp - 0x4c4]
mov dword [ebp - 0x4ec], esp
mov ecx, esp
push eax
lea esi, [ebp - 0x46c]
call fcn.00402305
mov ecx, esi
call fcn.004b7807
pop ecx
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x4c4]
add ecx, 0xfffffff0
call fcn.0040285b
mov edi, dword [ebp - 0x4cc]
push 1
push edi
push SysReAllocStringLen
lea esi, [ebp - 0x510]
call fcn.0040ac48
test eax, eax
je 0x4b9e23
push 0x200
lea eax, [ebp - 0x46c]
push eax
push dword [ebp - 0x4b4]
mov eax, esi
call fcn.0040aeda
call fcn.0040aca6
push 1
push edi
push reloc.OLEAUT32.dll_SysReAllocString
lea esi, [ebp - 0x510]
call fcn.0040ac48
test eax, eax
je 0x4b9e58
push 0x200
lea eax, [ebp - 0x46c]
push eax
push dword [ebp - 0x4b4]
mov eax, esi
call fcn.0040aeda
call fcn.0040aca6
mov ecx, dword [ebp - 0x4b4]
add ecx, 0xfffffff0
call fcn.0040285b
lea ecx, [edi - 0x10]
call fcn.0040285b
lea esi, [ebp - 0x510]
call fcn.0040aca6
mov ecx, dword [ebp - 0x508]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x4d4]
add ecx, 0xfffffff0
call fcn.0040285b
push dword [ebp - 0x48c]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x4dc]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x4c8]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x498]
add ecx, 0xfffffff0
call fcn.0040285b
mov ecx, dword [ebp - 0x494]
add ecx, 0xfffffff0
call fcn.0040285b
xor esi, esi
inc esi
jmp 0x4b99f6