PROC__CatchVariable:
MOV EAX, [0049ABA4h] ; TLcfgSystem
MOV EAX, [EAX]
CALL PROC__00469EE0h ; TLcfgSystem.GetVariable
RET
NOP
NOP
NOP
PROC__ProcessNumberMask:
MOV DWORD PTR [ESP+0Ch], 30303030h ; 0 0 0 0
PUSH 10
POP ECX
MOV EAX, [EDX]
MOV [ESP-04h], EAX
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Fh], DL
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Eh], DL
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Dh], DL
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Ch], DL
MOV EAX, [ESP+04h]
MOV ECX, [ESP]
MOV [ESP+04h], ECX
ADD ESP, 4
RET
PROC__ProcessFilename:
PUSH EAX
PUSH ECX
PUSH ESI
SUB ESP, 8
XCHG ESI, EDX
CMP ESI, 9999
JA __SkipFilename
MOV EAX, [EBX+0Ch]
MOV EAX, [EAX-04h]
CMP EAX, 4
JB __SkipFilename
LEA ECX, [ESP+04h]
PUSH ECX
XOR ECX, ECX
MOV [ESP+04h], ESI
LEA EDX, [ESP+04h]
CALL PROC__ProcessNumberMask
MOV ECX, [EBX+0Ch]
MOV EDX, [ECX-04h]
SUB EDX, 4
MOV ESI, [EAX]
MOV [ECX+EDX], ESI
__SkipFilename:
ADD ESP, 8
POP ESI
POP ECX
POP EAX
RET
PROC__Detect10000:
CALL PROC__0045E524h
JMP __DetectNow
NOP
PROC__Detect50000:
CALL PROC__0045E524h
CMP EAX, 50000
JA __Process50000
__DetectNow:
CMP EAX, 10000
JA __Process10000
RET
__Process10000:
SUB EAX, 10000
XCHG EAX, EDX
CALL PROC__CatchVariable
RET
__Process50000:
SUB EAX, 50000
XCHG EAX, EDX
PUSH EDX
CALL PROC__CatchVariable
POP EDX
TEST EAX, EAX
JZ __Skip50000
PUSH EAX
INC EDX
CALL PROC__CatchVariable
XCHG EAX, EDX
CALL PROC__ProcessFilename
POP EAX
__Skip50000:
RET
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
(100 more NOPs...)
PROC__CatchVariable:
MOV EAX, [0049ABA4h] ; TLcfgSystem
MOV EAX, [EAX]
CALL PROC__00469DE0h ; TLcfgSystem.GetVariable
RET
NOP
NOP
NOP
PROC__ProcessNumberMask:
MOV DWORD PTR [ESP+0Ch], 30303030h ; 0 0 0 0
PUSH 10
POP ECX
MOV EAX, [EDX]
MOV [ESP-04h], EAX
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Fh], DL
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Eh], DL
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Dh], DL
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Ch], DL
MOV EAX, [ESP+04h]
MOV ECX, [ESP]
MOV [ESP+04h], ECX
ADD ESP, 4
RET
PROC__ProcessFilename:
PUSH EAX
PUSH ECX
PUSH ESI
SUB ESP, 8
XCHG ESI, EDX
CMP ESI, 9999
JA __SkipFilename
MOV EAX, [EBX+0Ch]
MOV EAX, [EAX-04h]
CMP EAX, 4
JB __SkipFilename
LEA ECX, [ESP+04h]
PUSH ECX
XOR ECX, ECX
MOV [ESP+04h], ESI
LEA EDX, [ESP+04h]
CALL PROC__ProcessNumberMask
MOV ECX, [EBX+0Ch]
MOV EDX, [ECX-04h]
SUB EDX, 4
MOV ESI, [EAX]
MOV [ECX+EDX], ESI
__SkipFilename:
ADD ESP, 8
POP ESI
POP ECX
POP EAX
RET
PROC__Detect10000:
CALL PROC__0045E424h
JMP __DetectNow
NOP
PROC__Detect50000:
CALL PROC__0045E424h
CMP EAX, 50000
JA __Process50000
__DetectNow:
CMP EAX, 10000
JA __Process10000
RET
__Process10000:
SUB EAX, 10000
XCHG EAX, EDX
CALL PROC__CatchVariable
RET
__Process50000:
SUB EAX, 50000
XCHG EAX, EDX
PUSH EDX
CALL PROC__CatchVariable
POP EDX
TEST EAX, EAX
JZ __Skip50000
PUSH EAX
INC EDX
CALL PROC__CatchVariable
XCHG EAX, EDX
CALL PROC__ProcessFilename
POP EAX
__Skip50000:
RET
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
(100 more NOPs...)
PROC__CatchVariable:
MOV EAX, [0049FB8Ch] ; TLcfgSystem
MOV EAX, [EAX]
CALL PROC__0046EEF0h ; TLcfgSystem.GetVariable
RET
NOP
NOP
NOP
PROC__ProcessNumberMask:
MOV DWORD PTR [ESP+0Ch], 30303030h ; 0 0 0 0
PUSH 10
POP ECX
MOV EAX, [EDX]
MOV [ESP-04h], EAX
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Fh], DL
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Eh], DL
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Dh], DL
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Ch], DL
MOV EAX, [ESP+04h]
MOV ECX, [ESP]
MOV [ESP+04h], ECX
ADD ESP, 4
RET
PROC__ProcessFilename:
PUSH EAX
PUSH ECX
PUSH ESI
SUB ESP, 8
XCHG ESI, EDX
CMP ESI, 9999
JA __SkipFilename
MOV EAX, [EBX+0Ch]
MOV EAX, [EAX-04h]
CMP EAX, 4
JB __SkipFilename
LEA ECX, [ESP+04h]
PUSH ECX
XOR ECX, ECX
MOV [ESP+04h], ESI
LEA EDX, [ESP+04h]
CALL PROC__ProcessNumberMask
MOV ECX, [EBX+0Ch]
MOV EDX, [ECX-04h]
SUB EDX, 4
MOV ESI, [EAX]
MOV [ECX+EDX], ESI
__SkipFilename:
ADD ESP, 8
POP ESI
POP ECX
POP EAX
RET
PROC__Detect10000:
CALL PROC__00463544h
JMP __DetectNow
NOP
PROC__Detect50000:
CALL PROC__00463544h
CMP EAX, 50000
JA __Process50000
__DetectNow:
CMP EAX, 10000
JA __Process10000
RET
__Process10000:
SUB EAX, 10000
XCHG EAX, EDX
CALL PROC__CatchVariable
RET
__Process50000:
SUB EAX, 50000
XCHG EAX, EDX
PUSH EDX
CALL PROC__CatchVariable
POP EDX
TEST EAX, EAX
JZ __Skip50000
PUSH EAX
INC EDX
CALL PROC__CatchVariable
XCHG EAX, EDX
CALL PROC__ProcessFilename
POP EAX
__Skip50000:
RET
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
(100 more NOPs...)
PROC__CatchVariable:
MOV EAX, [004A0B8Ch] ; TLcfgSystem
MOV EAX, [EAX]
CALL PROC__0046F7CCh ; TLcfgSystem.GetVariable
RET
NOP
NOP
NOP
PROC__ProcessNumberMask:
MOV DWORD PTR [ESP+0Ch], 30303030h ; 0 0 0 0
PUSH 10
POP ECX
MOV EAX, [EDX]
MOV [ESP-04h], EAX
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Fh], DL
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Eh], DL
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Dh], DL
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Ch], DL
MOV EAX, [ESP+04h]
MOV ECX, [ESP]
MOV [ESP+04h], ECX
ADD ESP, 4
RET
PROC__ProcessFilename:
PUSH EAX
PUSH ECX
PUSH ESI
SUB ESP, 8
XCHG ESI, EDX
CMP ESI, 9999
JA __SkipFilename
MOV EAX, [EBX+0Ch]
MOV EAX, [EAX-04h]
CMP EAX, 4
JB __SkipFilename
LEA ECX, [ESP+04h]
PUSH ECX
XOR ECX, ECX
MOV [ESP+04h], ESI
LEA EDX, [ESP+04h]
CALL PROC__ProcessNumberMask
MOV ECX, [EBX+0Ch]
MOV EDX, [ECX-04h]
SUB EDX, 4
MOV ESI, [EAX]
MOV [ECX+EDX], ESI
__SkipFilename:
ADD ESP, 8
POP ESI
POP ECX
POP EAX
RET
PROC__Detect10000:
CALL PROC__00463E08h
JMP __DetectNow
NOP
PROC__Detect50000:
CALL PROC__00463E08h
CMP EAX, 50000
JA __Process50000
__DetectNow:
CMP EAX, 10000
JA __Process10000
RET
__Process10000:
SUB EAX, 10000
XCHG EAX, EDX
CALL PROC__CatchVariable
RET
__Process50000:
SUB EAX, 50000
XCHG EAX, EDX
PUSH EDX
CALL PROC__CatchVariable
POP EDX
TEST EAX, EAX
JZ __Skip50000
PUSH EAX
INC EDX
CALL PROC__CatchVariable
XCHG EAX, EDX
CALL PROC__ProcessFilename
POP EAX
__Skip50000:
RET
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
(100 more NOPs...)
PROC__CatchVariable:
MOV EAX, [004CDC7Ch] ; TLcfgSystem
MOV EAX, [EAX]
CALL PROC__0048B398h ; TLcfgSystem.GetVariable
RET
NOP
NOP
NOP
PROC__ProcessNumberMask:
MOV DWORD PTR [ESP+0Ch], 30303030h ; 0 0 0 0
PUSH 10
POP ECX
MOV EAX, [EDX]
MOV [ESP-04h], EAX
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Fh], DL
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Eh], DL
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Dh], DL
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Ch], DL
MOV EAX, [ESP+04h]
MOV ECX, [ESP]
MOV [ESP+04h], ECX
ADD ESP, 4
RET
PROC__ProcessFilename:
PUSH EAX
PUSH ECX
PUSH ESI
SUB ESP, 8
XCHG ESI, EDX
CMP ESI, 9999
JA __SkipFilename
MOV EAX, [EBX+0Ch]
MOV EAX, [EAX-04h]
CMP EAX, 4
JB __SkipFilename
LEA ECX, [ESP+04h]
PUSH ECX
XOR ECX, ECX
MOV [ESP+04h], ESI
LEA EDX, [ESP+04h]
CALL PROC__ProcessNumberMask
MOV ECX, [EBX+0Ch]
MOV EDX, [ECX-04h]
SUB EDX, 4
MOV ESI, [EAX]
MOV [ECX+EDX], ESI
__SkipFilename:
ADD ESP, 8
POP ESI
POP ECX
POP EAX
RET
PROC__Detect10000:
CALL PROC__0047967Ch
JMP __DetectNow
NOP
PROC__Detect50000:
CALL PROC__0047967Ch
CMP EAX, 50000
JA __Process50000
__DetectNow:
CMP EAX, 10000
JA __Process10000
RET
__Process10000:
SUB EAX, 10000
XCHG EAX, EDX
CALL PROC__CatchVariable
RET
__Process50000:
SUB EAX, 50000
XCHG EAX, EDX
PUSH EDX
CALL PROC__CatchVariable
POP EDX
TEST EAX, EAX
JZ __Skip50000
PUSH EAX
INC EDX
CALL PROC__CatchVariable
XCHG EAX, EDX
CALL PROC__ProcessFilename
POP EAX
__Skip50000:
RET
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
(100 more NOPs...)
PROC__CatchVariable:
MOV EAX, [004CDC7Ch] ; TLcfgSystem
MOV EAX, [EAX]
CALL PROC__0048B354h ; TLcfgSystem.GetVariable
RET
NOP
NOP
NOP
PROC__ProcessNumberMask:
MOV DWORD PTR [ESP+0Ch], 30303030h ; 0 0 0 0
PUSH 10
POP ECX
MOV EAX, [EDX]
MOV [ESP-04h], EAX
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Fh], DL
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Eh], DL
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Dh], DL
XOR EDX, EDX
DIV ECX
ADD DL, 48
MOV BYTE PTR [ESP+0Ch], DL
MOV EAX, [ESP+04h]
MOV ECX, [ESP]
MOV [ESP+04h], ECX
ADD ESP, 4
RET
PROC__ProcessFilename:
PUSH EAX
PUSH ECX
PUSH ESI
SUB ESP, 8
XCHG ESI, EDX
CMP ESI, 9999
JA __SkipFilename
MOV EAX, [EBX+0Ch]
MOV EAX, [EAX-04h]
CMP EAX, 4
JB __SkipFilename
LEA ECX, [ESP+04h]
PUSH ECX
XOR ECX, ECX
MOV [ESP+04h], ESI
LEA EDX, [ESP+04h]
CALL PROC__ProcessNumberMask
MOV ECX, [EBX+0Ch]
MOV EDX, [ECX-04h]
SUB EDX, 4
MOV ESI, [EAX]
MOV [ECX+EDX], ESI
__SkipFilename:
ADD ESP, 8
POP ESI
POP ECX
POP EAX
RET
PROC__Detect10000:
CALL PROC__0047967Ch
JMP __DetectNow
NOP
PROC__Detect50000:
CALL PROC__0047967Ch
CMP EAX, 50000
JA __Process50000
__DetectNow:
CMP EAX, 10000
JA __Process10000
RET
__Process10000:
SUB EAX, 10000
XCHG EAX, EDX
CALL PROC__CatchVariable
RET
__Process50000:
SUB EAX, 50000
XCHG EAX, EDX
PUSH EDX
CALL PROC__CatchVariable
POP EDX
TEST EAX, EAX
JZ __Skip50000
PUSH EAX
INC EDX
CALL PROC__CatchVariable
XCHG EAX, EDX
CALL PROC__ProcessFilename
POP EAX
__Skip50000:
RET
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
NOP
(100 more NOPs...)