Function at 0x48e9cc
Capabilities:
Check os version
Contain obfuscated stackstrings
Create process on windows
Create thread
Get common file path
Resume thread

Disassembly:
mov eax, 0x56ee43
call fcn.00524444
sub esp, 0x944
push ebx
push esi
push edi
mov dword [ebp - 0x6c], ecx
xor edi, edi
lea ecx, [ebp - 0x1f8]
push edi
call fcn.0048dbb6
mov esi, 0x622c94
lea ecx, [ebp - 0x10]
push esi
mov dword [ebp - 4], edi
call fcn.0053ebbd
push 1
lea ecx, [ebp - 0x30]
pop ebx
push esi
mov byte [ebp - 4], bl
call fcn.0053ebbd
push esi
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call fcn.0053ebbd
mov eax, dword [0x5c5008]
cmp dword [0x629d7c], edi
mov byte [ebp - 4], 3
mov dword [0x629c84], edi
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x48], eax
je 0x48ea53
mov dword [ebp - 0x3c], ebx
mov edi, dword [ebp + 8]
xor ecx, ecx
cmp edi, 0xffffffff
mov dword [ebp - 0x2c], ecx
je 0x48ead3
cmp edi, 0xfffffffd
je 0x48eac7
cmp edi, 0xfffffffe
jne 0x48eb48
lea ecx, [ebp - 0x1f8]
call fcn.0048dd82
cmp dword [ebp - 0x110], 0
je 0x49020f
push dword [ebp - 0x114]
lea ecx, [ebp - 0x10]
call fcn.0053ec88
push esi
push dword [ebp - 0x10]
call fcn.00524dbe
pop ecx
test eax, eax
pop ecx
je 0x49020f
cmp dword [ebp - 0xfc], 0
je 0x48ec30
push dword [ebp - 0x100]
lea ecx, [ebp - 0x18]
call fcn.0053ec88
jmp 0x48ec30
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x38], ecx
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp - 0x11c], ecx
lea ecx, [ebp - 0x1f8]
call fcn.005453a7
cmp eax, ebx
jne 0x49020f
push esi
push dword [ebp - 0x124]
call fcn.00524dbe
pop ecx
test eax, eax
pop ecx
je 0x49020f
xor esi, esi
cmp dword [ebp - 0x50], esi
jne 0x48eb23
xor eax, eax
cmp dword [ebp - 0x11c], esi
sete al
mov dword [ebp - 0x48], eax
mov dword [0x5c5008], eax
lea eax, [ebp - 0x124]
lea ecx, [ebp - 0x10]
push eax
call fcn.0053ec88
cmp dword [ebp - 0xfc], esi
je 0x48eb48
push dword [ebp - 0x100]
lea ecx, [ebp - 0x18]
call fcn.0053ec88
test edi, edi
jl 0x48eb51
cmp edi, 9
jle 0x48eb63
cmp edi, 0xa
jl 0x48ec30
cmp edi, 0x13
jg 0x48ec30
cmp edi, 0xa
jl 0x48eb81
cmp edi, 0x13
jg 0x48eb81
mov eax, dword [ebp - 0x6c]
push dword [eax + 0x1a54]
call dword [sym.imp.KERNEL32.dll_GlobalLock]
lea esi, [edi - 0xa]
jmp 0x48eb92
mov eax, dword [ebp - 0x6c]
push dword [eax + 0x1a50]
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov esi, edi
test eax, eax
je 0x48ec30
imul esi, esi, 0x668
add esi, eax
lea ecx, [ebp - 0x10]
push esi
call fcn.0053ecd8
lea eax, [esi + 0x208]
lea ecx, [ebp - 0x18]
push eax
call fcn.0053ecd8
mov eax, dword [esi + 0x650]
mov ebx, dword [esi + 0x658]
mov dword [ebp - 0x38], eax
mov eax, dword [esi + 0x660]
mov dword [ebp - 0x3c], eax
mov eax, dword [esi + 0x664]
mov dword [ebp - 0x54], eax
mov eax, dword [esi + 0x654]
mov dword [ebp - 0x50], eax
mov eax, dword [esi + 0x65c]
mov dword [ebp - 0x5c], eax
xor eax, eax
cmp dword [esi + 0x64c], eax
sete al
cmp edi, 0xa
mov dword [ebp - 0x48], eax
jl 0x48ec10
cmp edi, 0x13
jg 0x48ec10
mov eax, dword [ebp - 0x6c]
push dword [eax + 0x1a54]
jmp 0x48ec19
mov eax, dword [ebp - 0x6c]
push dword [eax + 0x1a50]
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
test ebx, ebx
je 0x48ec30
call fcn.0055c7c5
mov ecx, dword [eax + 4]
call fcn.004375cf
call fcn.0055c7c5
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x44]
add eax, 0x1c8
push eax
call fcn.0053e8c4
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x60]
push eax
mov byte [ebp - 4], 4
call fcn.0053e8c4
mov byte [ebp - 4], 5
call fcn.0055c7c5
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x44]
push ecx
mov ecx, eax
call fcn.004420df
mov eax, dword [0x61d784]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], eax
push 0x622c94
mov byte [ebp - 4], 9
push dword [ebp - 0x44]
call fcn.00524dbe
pop ecx
test eax, eax
pop ecx
je 0x48ede3
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x24]
push eax
call fcn.0053ec88
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0x28]
push eax
call fcn.0053ec88
push 0x2e
lea ecx, [ebp - 0x24]
call fcn.0053aa62
mov esi, eax
test esi, esi
jle 0x48ecf5
push 0x5c
lea ecx, [ebp - 0x24]
call fcn.0053aa62
cmp eax, esi
jge 0x48ecf5
lea eax, [ebp + 8]
push esi
push eax
lea ecx, [ebp - 0x24]
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xa
call fcn.0053ec88
lea ecx, [ebp + 8]
mov byte [ebp - 4], 9
call fcn.0053eb4f
push 0x5c
lea ecx, [ebp - 0x24]
call fcn.0053aa62
mov esi, eax
test esi, esi
jle 0x48ed52
inc esi
lea eax, [ebp + 8]
push esi
push eax
lea ecx, [ebp - 0x24]
call fcn.0053a8b5
push eax
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xb
call fcn.0053ec88
lea ecx, [ebp + 8]
mov byte [ebp - 4], 9
call fcn.0053eb4f
lea eax, [ebp + 8]
push esi
push eax
lea ecx, [ebp - 0x24]
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xc
call fcn.0053ec88
lea ecx, [ebp + 8]
mov byte [ebp - 4], 9
call fcn.0053eb4f
push 0x2e
lea ecx, [ebp - 0x28]
call fcn.0053aa62
test eax, eax
jle 0x48ed86
push eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x28]
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xd
call fcn.0053ec88
lea ecx, [ebp + 8]
mov byte [ebp - 4], 9
call fcn.0053eb4f
push 0x5c
lea ecx, [ebp - 0x28]
call fcn.0053aa62
mov esi, eax
test esi, esi
jle 0x48ede3
inc esi
lea eax, [ebp + 8]
push esi
push eax
lea ecx, [ebp - 0x28]
call fcn.0053a8b5
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xe
call fcn.0053ec88
lea ecx, [ebp + 8]
mov byte [ebp - 4], 9
call fcn.0053eb4f
lea eax, [ebp + 8]
push esi
push eax
lea ecx, [ebp - 0x28]
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xf
call fcn.0053ec88
lea ecx, [ebp + 8]
mov byte [ebp - 4], 9
call fcn.0053eb4f
mov esi, str._Env:
lea ecx, [ebp - 0x10]
push esi
call fcn.0053aa84
mov ecx, dword [0x61d784]
and byte [ebp - 0x3b4], 0
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x80], ecx
cmp eax, 0xffffffff
mov byte [ebp - 4], 0x11
je 0x48eeee
xor edi, edi
mov edx, dword [ebp - 0x10]
add eax, 5
xor ebx, ebx
mov dword [ebp - 0x1c], eax
mov ecx, dword [edx - 8]
cmp eax, ecx
mov dword [ebp + 8], ecx
jge 0x48ee5c
mov cl, byte [eax + edx]
cmp cl, 0x5c
je 0x48ee4d
cmp cl, 0x20
je 0x48ee4d
cmp cl, 9
je 0x48ee4d
cmp cl, 0xd
je 0x48ee4d
cmp cl, 0xa
je 0x48ee4d
mov byte [ebp + ebx - 0x3b4], cl
jmp 0x48ee55
and byte [ebp + ebx - 0x3b4], 0
inc ebx
inc eax
cmp eax, dword [ebp + 8]
jl 0x48ee28
and byte [ebp + ebx - 0x3b4], 0
lea eax, [ebp - 0x3b4]
push eax
call fcn.00528211
cmp eax, edi
pop ecx
je 0x48ee78
push eax
jmp 0x48ee7d
push 0x622c94
lea ecx, [ebp - 0x40]
call fcn.0053ecd8
lea eax, [ebp - 0x3b4]
lea ecx, [ebp - 0x58]
push eax
call fcn.0053ebbd
push eax
lea eax, [ebp - 0x4c]
push esi
push eax
mov byte [ebp - 4], 0x12
call fcn.0053ee58
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x13
call fcn.0053ec88
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x12
call fcn.0053eb4f
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x11
call fcn.0053eb4f
push dword [ebp - 0x40]
lea eax, [ebp - 0x10]
push dword [ebp - 0x80]
push eax
call fcn.0047a8d8
add esp, 0xc
lea ecx, [ebp - 0x10]
push esi
call fcn.0053aa84
cmp eax, 0xffffffff
jne 0x48ee13
jmp 0x48eef0
xor edi, edi
push esi
lea ecx, [ebp - 0x18]
call fcn.0053aa84
mov ecx, dword [0x61d784]
mov dword [ebp - 0x84], ecx
cmp eax, 0xffffffff
mov byte [ebp - 4], 0x14
je 0x48efe5
mov edx, dword [ebp - 0x18]
add eax, 5
xor ebx, ebx
mov edi, dword [edx - 8]
cmp eax, edi
jge 0x48ef4d
mov cl, byte [eax + edx]
cmp cl, 0x20
je 0x48ef41
cmp cl, 9
je 0x48ef41
cmp cl, 0xd
je 0x48ef41
cmp cl, 0xa
je 0x48ef41
mov byte [ebp + ebx - 0x3b4], cl
jmp 0x48ef49
and byte [ebp + ebx - 0x3b4], 0
inc ebx
inc eax
jmp 0x48ef1d
and byte [ebp + ebx - 0x3b4], 0
lea eax, [ebp - 0x3b4]
push eax
call fcn.00528211
test eax, eax
pop ecx
je 0x48ef69
push eax
jmp 0x48ef6e
push 0x622c94
lea ecx, [ebp - 0x40]
call fcn.0053ecd8
lea eax, [ebp - 0x3b4]
lea ecx, [ebp - 0x1c]
push eax
call fcn.0053ebbd
push eax
lea eax, [ebp + 8]
push esi
push eax
mov byte [ebp - 4], 0x15
call fcn.0053ee58
push eax
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x16
call fcn.0053ec88
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x15
call fcn.0053eb4f
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x14
call fcn.0053eb4f
push dword [ebp - 0x40]
lea eax, [ebp - 0x18]
push dword [ebp - 0x84]
push eax
call fcn.0047a8d8
add esp, 0xc
lea ecx, [ebp - 0x18]
push esi
call fcn.0053aa84
cmp eax, 0xffffffff
jne 0x48ef12
xor edi, edi
mov ecx, dword [0x62ae38]
push edi
call fcn.005555eb
test eax, eax
je 0x48f5f6
mov ecx, dword [0x62ae38]
push edi
call fcn.005555eb
mov ecx, eax
call fcn.00557481
mov esi, eax
cmp esi, edi
je 0x48f76d
mov ecx, dword [esi + 0x3c]
mov eax, dword [ecx]
call dword [eax + 0x58]
test eax, eax
je 0x48f02f
cmp dword [ebp - 0x5c], edi
je 0x48f02f
mov ecx, dword [esi + 0x3c]
call fcn.00474018
mov eax, dword [esi + 0x3c]
lea ecx, [ebp + 8]
add eax, 0x20
mov dword [ebp - 0x5c], edi
push eax
call fcn.0053e8c4
mov eax, dword [esi + 0x3c]
mov byte [ebp - 4], 0x17
mov ebx, 0x5bc994
cmp dword [eax + 0x188], edi
je 0x48f0a3
push 0x5c1530
push 0x5c1b88
lea ecx, [ebp + 8]
mov dword [ebp - 0x5c], 1
call fcn.0053a701
push ebx
lea ecx, [ebp + 8]
call fcn.0053aa84
cmp eax, 0xffffffff
je 0x48f0a3
inc eax
lea ecx, [ebp + 8]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0053a8b5
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x18
call fcn.0053ec88
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x17
call fcn.0053eb4f
lea eax, [ebp + 8]
lea ecx, [ebp - 0x20]
push eax
call fcn.0053e8c4
mov byte [ebp - 4], 0x19
call fcn.0055c7c5
mov eax, dword [eax + 4]
lea ecx, [ebp + 8]
push ecx
mov ecx, eax
call fcn.004420df
mov eax, dword [0x61d784]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x74], eax
lea eax, [ebp + 8]
lea ecx, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x1d
call fcn.0053e8c4
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x1e
call fcn.0053e8c4
push 0x2e
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x1f
call fcn.0053aa62
mov edi, eax
test edi, edi
jle 0x48f165
push 0x5c
lea ecx, [ebp + 8]
call fcn.0053aa62
cmp eax, edi
jge 0x48f165
lea eax, [ebp - 0x14]
push edi
push eax
lea ecx, [ebp + 8]
call fcn.0053a8b5
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x20
call fcn.0053ec88
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1f
call fcn.0053eb4f
lea eax, [ebp - 0x14]
push edi
push eax
lea ecx, [ebp + 8]
call fcn.0053a9ea
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x21
call fcn.0053ec88
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1f
call fcn.0053eb4f
cmp dword [ebp - 0x5c], 0
je 0x48f17c
push 0x2f
lea ecx, [ebp + 8]
call fcn.0053aa62
mov edi, eax
cmp edi, 0xffffffff
jne 0x48f188
push 0x5c
lea ecx, [ebp + 8]
call fcn.0053aa62
mov edi, eax
test edi, edi
jle 0x48f1d9
inc edi
lea eax, [ebp - 0x14]
push edi
push eax
lea ecx, [ebp + 8]
call fcn.0053a8b5
push eax
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x22
call fcn.0053ec88
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1f
call fcn.0053eb4f
lea eax, [ebp - 0x14]
push edi
push eax
lea ecx, [ebp + 8]
call fcn.0053a9ea
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x23
call fcn.0053ec88
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1f
call fcn.0053eb4f
push 0x2e
lea ecx, [ebp - 0x20]
call fcn.0053aa62
mov edi, eax
test edi, edi
jle 0x48f243
push 0x5c
lea ecx, [ebp - 0x20]
call fcn.0053aa62
cmp eax, edi
jge 0x48f243
lea eax, [ebp - 0x14]
push edi
push eax
lea ecx, [ebp - 0x20]
call fcn.0053a8b5
push eax
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x24
call fcn.0053ec88
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1f
call fcn.0053eb4f
lea eax, [ebp - 0x14]
push edi
push eax
lea ecx, [ebp - 0x20]
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x25
call fcn.0053ec88
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1f
call fcn.0053eb4f
cmp dword [ebp - 0x5c], 0
je 0x48f25a
push 0x2f
lea ecx, [ebp - 0x20]
call fcn.0053aa62
mov edi, eax
cmp edi, 0xffffffff
jne 0x48f266
push 0x5c
lea ecx, [ebp - 0x20]
call fcn.0053aa62
mov edi, eax
test edi, edi
jle 0x48f2b7
inc edi
lea eax, [ebp - 0x14]
push edi
push eax
lea ecx, [ebp - 0x20]
call fcn.0053a8b5
push eax
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x26
call fcn.0053ec88
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1f
call fcn.0053eb4f
lea eax, [ebp - 0x14]
push edi
push eax
lea ecx, [ebp - 0x20]
call fcn.0053a9ea
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x27
call fcn.0053ec88
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1f
call fcn.0053eb4f
lea eax, [ebp + 8]
lea ecx, [ebp - 0x34]
push eax
call fcn.0053e8c4
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x7c]
push eax
mov byte [ebp - 4], 0x28
call fcn.0053e8c4
push 0x5c
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x29
call fcn.0053aeb9
push 0x5c
lea ecx, [ebp - 0x7c]
call fcn.0053aeb9
mov ecx, dword [esi + 0x138]
mov edi, dword [esi + 0x13c]
mov eax, dword [0x61d784]
inc ecx
inc edi
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov esi, 0x5bd950
push ecx
lea eax, [ebp - 0x90]
push esi
push eax
mov byte [ebp - 4], 0x2b
call fcn.0053ae0a
add esp, 0xc
lea eax, [ebp - 0x8c]
push edi
push esi
push eax
call fcn.0053ae0a
add esp, 0xc
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x94]
push eax
call fcn.0053e8c4
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x88]
push eax
mov byte [ebp - 4], 0x2c
call fcn.0053e8c4
mov edi, 0x5c1530
lea eax, [ebp - 0x94]
push edi
push ebx
push eax
mov byte [ebp - 4], 0x2d
call fcn.0047a809
push edi
lea eax, [ebp - 0x88]
push ebx
push eax
call fcn.0047a809
push dword [ebp - 0x70]
lea eax, [ebp - 0x10]
push 0x5c7b90
push eax
call fcn.0047a809
push dword [ebp - 0x1c]
lea eax, [ebp - 0x10]
push 0x5c7b8c
push eax
call fcn.0047a809
push dword [ebp - 0x7c]
lea eax, [ebp - 0x10]
push esi
push eax
call fcn.0047a809
push dword [ebp - 0x34]
push 0x5c7b88
lea eax, [ebp - 0x10]
push eax
call fcn.0047a809
add esp, 0x48
mov ebx, 0x5c7b84
lea eax, [ebp - 0x10]
push dword [ebp - 0x20]
push ebx
push eax
call fcn.0047a809
push dword [ebp + 8]
mov edi, 0x5c7b80
lea eax, [ebp - 0x10]
push edi
push eax
call fcn.0047a809
push dword [ebp - 0x74]
lea eax, [ebp - 0x10]
push 0x5c7b7c
push eax
call fcn.0047a809
push dword [ebp - 0x58]
lea eax, [ebp - 0x10]
push 0x5c7b78
push eax
call fcn.0047a809
push dword [ebp - 0x68]
lea eax, [ebp - 0x10]
push 0x5c7b74
push eax
call fcn.0047a809
push dword [ebp - 0x4c]
lea eax, [ebp - 0x10]
push 0x5c7b70
push eax
call fcn.0047a809
add esp, 0x48
lea eax, [ebp - 0x18]
push dword [ebp - 0x7c]
push esi
push eax
call fcn.0047a809
push dword [ebp - 0x34]
lea eax, [ebp - 0x18]
push 0x5c7b88
push eax
call fcn.0047a809
push dword [ebp - 0x20]
lea eax, [ebp - 0x18]
push ebx
push eax
call fcn.0047a809
push dword [ebp + 8]
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.0047a809
push dword [ebp - 0x28]
mov edi, 0x5c7b6c
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.0047a809
push dword [ebp - 0x24]
mov esi, 0x5c7b68
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.0047a809
add esp, 0x48
lea eax, [ebp - 0x10]
push dword [ebp - 0x28]
push edi
push eax
call fcn.0047a809
push dword [ebp - 0x24]
lea eax, [ebp - 0x10]
push esi
push eax
call fcn.0047a809
push dword [ebp - 0x64]
lea eax, [ebp - 0x10]
push 0x5c7b64
push eax
call fcn.0047a809
push dword [ebp - 0x78]
lea eax, [ebp - 0x10]
push 0x5c7b60
push eax
call fcn.0047a809
push dword [ebp - 0x60]
lea eax, [ebp - 0x10]
push 0x5c7b5c
push eax
call fcn.0047a809
push dword [ebp - 0x44]
lea eax, [ebp - 0x10]
push 0x5c7b58
push eax
call fcn.0047a809
add esp, 0x48
lea eax, [ebp - 0x10]
push dword [ebp - 0x8c]
push str._col_
push eax
call fcn.0047a809
push dword [ebp - 0x90]
lea eax, [ebp - 0x10]
push str._line_
push eax
call fcn.0047a809
push dword [ebp - 0x88]
lea eax, [ebp - 0x10]
push str._uf_
push eax
call fcn.0047a809
push dword [ebp - 0x94]
lea eax, [ebp - 0x10]
push str._up_
push eax
call fcn.0047a809
add esp, 0x30
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x2c
call fcn.0053eb4f
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x2b
call fcn.0053eb4f
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x2a
call fcn.0053eb4f
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x29
call fcn.0053eb4f
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x28
call fcn.0053eb4f
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x1f
call fcn.0053eb4f
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x1e
call fcn.0053eb4f
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1d
call fcn.0053eb4f
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x1c
call fcn.0053eb4f
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x1b
call fcn.0053eb4f
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1a
call fcn.0053eb4f
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x19
call fcn.0053eb4f
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x17
call fcn.0053eb4f
mov byte [ebp - 4], 0x14
lea ecx, [ebp + 8]
call fcn.0053eb4f
jmp 0x48f76b
mov edi, 0x622c94
lea eax, [ebp - 0x10]
push edi
push 0x5c7b90
push eax
call fcn.0047a809
push edi
lea eax, [ebp - 0x10]
push 0x5c7b8c
push eax
call fcn.0047a809
mov esi, 0x5bd950
push edi
lea eax, [ebp - 0x10]
push esi
push eax
call fcn.0047a809
push edi
lea eax, [ebp - 0x10]
push 0x5c7b88
push eax
call fcn.0047a809
mov ebx, 0x5c7b84
push edi
lea eax, [ebp - 0x10]
push ebx
push eax
call fcn.0047a809
push edi
mov edi, 0x5c7b80
lea eax, [ebp - 0x10]
push edi
push eax
call fcn.0047a809
add esp, 0x48
lea eax, [ebp - 0x10]
push 0x622c94
push 0x5c7b7c
push eax
call fcn.0047a809
push 0x622c94
lea eax, [ebp - 0x10]
push 0x5c7b78
push eax
call fcn.0047a809
push 0x622c94
lea eax, [ebp - 0x10]
push 0x5c7b74
push eax
call fcn.0047a809
push 0x622c94
lea eax, [ebp - 0x10]
push 0x5c7b70
push eax
call fcn.0047a809
push 0x622c94
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.0047a809
mov esi, 0x622c94
lea eax, [ebp - 0x18]
push esi
push 0x5c7b88
push eax
call fcn.0047a809
add esp, 0x48
lea eax, [ebp - 0x18]
push esi
push ebx
push eax
call fcn.0047a809
push esi
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.0047a809
push dword [ebp - 0x28]
mov edi, 0x5c7b6c
lea eax, [ebp - 0x18]
push edi
push eax
call fcn.0047a809
push dword [ebp - 0x24]
mov esi, 0x5c7b68
lea eax, [ebp - 0x18]
push esi
push eax
call fcn.0047a809
push dword [ebp - 0x28]
lea eax, [ebp - 0x10]
push edi
push eax
call fcn.0047a809
push dword [ebp - 0x24]
lea eax, [ebp - 0x10]
push esi
push eax
call fcn.0047a809
add esp, 0x48
lea eax, [ebp - 0x10]
push dword [ebp - 0x64]
push 0x5c7b64
push eax
call fcn.0047a809
push dword [ebp - 0x78]
lea eax, [ebp - 0x10]
push 0x5c7b60
push eax
call fcn.0047a809
push dword [ebp - 0x60]
lea eax, [ebp - 0x10]
push 0x5c7b5c
push eax
call fcn.0047a809
push dword [ebp - 0x44]
lea eax, [ebp - 0x10]
push 0x5c7b58
push eax
call fcn.0047a809
add esp, 0x30
xor edi, edi
mov ecx, dword [0x62ae38]
push edi
call fcn.005555eb
test eax, eax
je 0x48f7f3
mov ecx, dword [0x62ae38]
push edi
call fcn.005555eb
mov ecx, eax
call fcn.00557481
mov ebx, eax
cmp ebx, edi
mov dword [ebp - 0x2c], ebx
je 0x48f7f3
mov esi, str._sel_
lea ecx, [ebp - 0x10]
push esi
call fcn.0053aa84
cmp eax, 0xffffffff
je 0x48f7f3
mov al, byte [0x65054c]
push 1
push eax
lea ecx, [ebp + 8]
call fcn.0053a3f4
push 0x73
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x2e
call fcn.0053ef52
lea eax, [ebp + 8]
push edi
push eax
push dword [ebx + 0x1c]
call fcn.004d52d2
push dword [ebp + 8]
lea eax, [ebp - 0x10]
push esi
push eax
call fcn.0047a809
add esp, 0x18
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x14
call fcn.0053eb4f
mov esi, str._modify_
lea ecx, [ebp - 0x10]
push esi
call fcn.0053aa84
cmp eax, 0xffffffff
je 0x48f878
push 0x622c94
lea eax, [ebp - 0x10]
push esi
push eax
call fcn.0047a809
add esp, 0xc
lea ecx, [ebp - 0x25c]
push edi
call fcn.00424f8c
lea eax, [ebp - 0x10]
lea ecx, [ebp - 0x200]
push eax
mov byte [ebp - 4], 0x2f
call fcn.0053ec88
lea ecx, [ebp - 0x25c]
call fcn.005453a7
cmp eax, 1
jne 0x48f8dd
lea eax, [ebp - 0x200]
lea ecx, [ebp - 0x10]
push eax
call fcn.0053ec88
lea ecx, [ebp - 0x200]
mov byte [ebp - 4], 0x31
call fcn.0053eb4f
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x14
call fcn.00544fa4
lea eax, [ebp - 0x10]
push str._...
push eax
lea eax, [ebp + 8]
push eax
call fcn.0053ede4
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x32
call fcn.0053ec88
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x14
call fcn.0053eb4f
mov ebx, dword [ebp - 0x6c]
cmp dword [ebp - 0x38], edi
mov dword [ebx + 0x7ac], edi
mov eax, dword [0x629d64]
mov dword [ebp - 0x14], eax
je 0x48f9b9
cmp dword [ebp - 0x50], edi
jne 0x48f9b9
mov eax, dword [ebp - 0x3c]
cmp eax, 3
jne 0x48f900
mov dword [ebx + 0x1a20], 1
jmp 0x48f975
lea ecx, [ebp - 0x200]
mov byte [ebp - 4], 0x30
call fcn.0053eb4f
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x14
call fcn.00544fa4
jmp 0x4901a0
cmp eax, 2
mov dword [ebx + 0x1a20], edi
je 0x48f975
cmp eax, edi
jne 0x48f92e
cmp dword [ebx + 0x370], edi
je 0x48f926
cmp byte [ebx + 0x49d], 0
lea esi, [ebx + 0x49d]
jne 0x48f993
lea esi, [ebx + 0x49d]
jmp 0x48f97b
cmp eax, 1
jne 0x48f999
mov ecx, dword [ebx + 0x36c]
cmp ecx, edi
je 0x48f956
mov eax, dword [ecx]
push edi
call dword [eax + 0x5c]
mov ecx, dword [ebx + 0x36c]
push edi
push edi
add ecx, 0x208
call fcn.00479fcc
cmp dword [ebx + 0x36c], edi
je 0x48f96d
cmp byte [ebx + 0x5a2], 0
lea esi, [ebx + 0x5a2]
jne 0x48f993
lea esi, [ebx + 0x5a2]
jmp 0x48f97b
lea esi, [ebx + 0x398]
and byte [esi], 0
push esi
call fcn.004ac72a
pop ecx
push esi
push edi
push 0x5c7b18
push esi
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
mov dword [ebx + 0x7ac], esi
mov eax, dword [ebp - 0x54]
cmp eax, edi
je 0x48f9b1
mov ecx, dword [ebp - 0x2c]
mov dword [ebx + 0x3638], eax
mov dword [ebx + 0x3634], ecx
jmp 0x48f9cd
mov dword [ebx + 0x3634], edi
jmp 0x48f9cd
mov eax, dword [ebp - 0x54]
cmp eax, 1
jg 0x48f9a0
mov dword [ebx + 0x3634], edi
mov dword [ebx + 0x3638], edi
mov esi, dword [sym.imp.KERNEL32.dll_GetVersionExA]
lea eax, [ebp - 0x448]
push eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x448], 0x94
call esi
cmp dword [ebp - 0x438], 2
jne 0x48f9f9
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x48], edi
mov dword [ebp + 8], edi
je 0x48fa15
cmp dword [ebp - 0x38], edi
je 0x48fa15
cmp dword [0x5c5018], edi
mov dword [ebp - 0x34], 1
jne 0x48fa18
mov dword [ebp - 0x34], edi
cmp dword [ebp - 0x14], edi
je 0x48fbee
cmp dword [ebp - 0x50], edi
je 0x48fa2f
cmp dword [ebp - 0x38], edi
je 0x48fb6a
cmp dword [ebp - 0x1c], edi
jne 0x48fa83
lea eax, [ebp - 0x950]
push 0x400
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea eax, [ebp - 0x950]
push str.command.com__E:2048__c
push eax
call fcn.005254c0
pop ecx
lea eax, [ebp - 0x10]
pop ecx
push eax
lea eax, [ebp - 0x950]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0053ee58
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x33
call fcn.0053ec88
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x14]
jmp 0x48fac2
push str.cmd__c
lea ecx, [ebp - 0x1c]
call fcn.0053ebbd
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x34
push ecx
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0053ed7e
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x35
call fcn.0053ec88
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x34
call fcn.0053eb4f
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1c]
call fcn.0053eb4f
cmp dword [ebp - 0x38], edi
je 0x48fb6a
cmp dword [ebp - 0x3c], edi
jne 0x48fb18
push 0x5c7aec
lea ecx, [ebp - 0x1c]
call fcn.0053ebbd
push dword [ebx + 0x7ac]
mov byte [ebp - 4], 0x36
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0053ede4
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x37
call fcn.0053ef67
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x36
call fcn.0053eb4f
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1c]
jmp 0x48fb59
push 0x5c7ae8
lea ecx, [ebp - 0x1c]
call fcn.0053ebbd
push dword [ebx + 0x7ac]
mov byte [ebp - 4], 0x38
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0053ede4
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x39
call fcn.0053ef67
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x38
call fcn.0053eb4f
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1c]
call fcn.0053eb4f
cmp dword [ebp - 0x48], edi
je 0x48fb6a
mov dword [ebp + 8], 1
cmp dword [ebp - 0x48], edi
mov dword [ebp - 0xec], 0x44
mov dword [ebp - 0xe8], edi
mov dword [ebp - 0xe0], str.UltraEdit_DOS
mov dword [ebp - 0xe4], edi
mov dword [ebp - 0xd4], edi
mov dword [ebp - 0xd0], edi
mov dword [ebp - 0xd8], edi
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0xb4], edi
mov dword [ebp - 0xb0], edi
mov dword [ebp - 0xac], edi
mov word [ebp - 0xbc], di
mov dword [ebp - 0xb8], edi
mov word [ebp - 0xba], di
je 0x48ffd2
cmp dword [ebp - 0x50], edi
je 0x48fbdf
cmp dword [ebp - 0x38], edi
je 0x48ffd2
mov dword [ebp - 0xc0], 1
jmp 0x48ffd8
cmp dword [ebp - 0x50], edi
je 0x48fbfc
cmp dword [ebp - 0x38], edi
je 0x48fecf
cmp dword [ebp - 0x38], edi
je 0x48fd7c
cmp dword [ebp - 0x34], edi
jne 0x48fd85
call fcn.0055c7c5
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x2c]
add eax, 0x1c4
push eax
call fcn.0053e8c4
mov eax, dword [0x61d784]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x48], edi
mov byte [ebp - 4], 0x3b
je 0x48fc4b
push 0x5c7ac4
lea ecx, [ebp - 0x3c]
call fcn.0053ecd8
mov dword [ebp + 8], 1
jmp 0x48fc58
push 0x5c7ac0
lea ecx, [ebp - 0x3c]
call fcn.0053ecd8
call fcn.0055c7c5
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, eax
call fcn.004420df
push str.UEDOS32.EXE_
lea ecx, [ebp - 0x70]
call fcn.0053ebbd
mov esi, eax
push 0x5b85bc
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x3c
call fcn.0053ebbd
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x3d
push ecx
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.0053ed7e
push esi
push eax
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x3e
push eax
call fcn.0053ed7e
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x3f
push ecx
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.0053ed7e
push dword [ebx + 0x7ac]
mov byte [ebp - 4], 0x40
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0053ede4
push str._CG
push eax
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x41
push eax
call fcn.0053ede4
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x42
push ecx
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0053ed7e
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x43
call fcn.0053ec88
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x42
call fcn.0053eb4f
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x41
call fcn.0053eb4f
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x40
call fcn.0053eb4f
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x3f
call fcn.0053eb4f
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x3e
call fcn.0053eb4f
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x68]
call fcn.0053eb4f
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x3c
call fcn.0053eb4f
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x3b
call fcn.0053eb4f
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x3a
call fcn.0053eb4f
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x2c]
jmp 0x48fe81
cmp dword [ebp - 0x34], edi
je 0x48fe18
push 0x5b85bc
lea ecx, [ebp - 0x54]
call fcn.0053ebbd
mov esi, eax
push str._s__c__
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x44
call fcn.0053ebbd
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x45
push ecx
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0053ed7e
push esi
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x46
push eax
call fcn.0053ed7e
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x47
call fcn.0053ec88
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x46
call fcn.0053eb4f
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x45
call fcn.0053eb4f
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x44
call fcn.0053eb4f
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x14
call fcn.0053eb4f
cmp dword [ebp - 0x48], edi
je 0x48fecf
mov dword [ebp + 8], 1
jmp 0x48fecf
lea eax, [ebp - 0x28c]
mov dword [ebp - 0x28c], 0x94
push eax
call esi
cmp dword [ebp - 0x27c], 2
je 0x48fe8b
lea eax, [ebp - 0x550]
push 0x105
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea eax, [ebp - 0x550]
push str.command.com__c
push eax
call fcn.005254c0
pop ecx
lea eax, [ebp - 0x10]
pop ecx
push eax
lea eax, [ebp - 0x550]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0053ee58
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x48
call fcn.0053ec88
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x14]
call fcn.0053eb4f
jmp 0x48fb6a
push str.cmd.exe__c
lea ecx, [ebp - 0x1c]
call fcn.0053ebbd
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x49
push ecx
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0053ed7e
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x4a
call fcn.0053ec88
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x49
call fcn.0053eb4f
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x14
call fcn.0053eb4f
cmp dword [ebp - 0x34], edi
je 0x48fb6a
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x98], edi
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebx + 0x7ac]
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0xa8]
push 4
push eax
push 0x48e434
push edi
push edi
mov dword [ebp - 0x9c], 0x629d48
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
cmp esi, edi
jne 0x48ff78
mov eax, dword [0x61d784]
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x4b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00404c80
pop ecx
pop ecx
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x4c
call fcn.0053ec88
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4b
call fcn.0053eb4f
push edi
push edi
push dword [ebp + 8]
call fcn.0054ed65
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x14
call fcn.0053eb4f
jmp 0x49018e
cmp dword [ebp + 8], edi
je 0x48ffa2
cmp dword [ebx + 0x1a20], edi
je 0x48ffa2
cmp dword [0x5c500c], edi
je 0x48ffa2
push edi
push 0xa
mov ecx, ebx
call fcn.0049326b
push edi
mov ecx, ebx
push dword [ebp - 0x30]
call fcn.00493281
push esi
mov dword [0x629d48], 1
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push 2
push esi
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
cmp dword [ebp - 0x98], edi
jne 0x49018e
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x48ffbc
mov dword [ebp - 0xc0], edi
push 0x622c94
push dword [ebp - 0x18]
call fcn.00524dbe
pop ecx
test eax, eax
pop ecx
je 0x48fffc
push 0x200
lea ecx, [ebp - 0x18]
call fcn.0053ef7f
mov esi, eax
jmp 0x48fffe
xor esi, esi
lea eax, [ebp - 0xa4]
lea ecx, [ebp - 0x10]
push eax
lea eax, [ebp - 0xec]
push eax
push esi
push edi
push 0x10
push 1
push edi
push edi
push 0xff
call fcn.0053ef7f
push eax
push edi
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x49012c
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, edi
mov dword [ebp - 0x1c], eax
je 0x490048
push 0xffffffffffffffff
lea ecx, [ebp - 0x18]
call fcn.0053efce
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
call fcn.0053efce
mov eax, dword [0x61d784]
mov dword [ebp + 8], eax
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x4d
dec eax
je 0x4900cb
dec eax
je 0x4900c7
dec eax
je 0x4900c3
dec eax
dec eax
je 0x4900bf
sub eax, 0xa
je 0x4900bb
lea eax, [ebp - 0x2b0]
push 0xa
push eax
push dword [ebp - 0x1c]
call fcn.00525629
add esp, 0xc
lea ecx, [ebp + 8]
push 0x1c
call fcn.00545796
lea eax, [ebp - 0x2b0]
lea ecx, [ebp - 0x14]
push eax
call fcn.0053ebbd
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x4e
call fcn.0053ef67
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4d
call fcn.0053eb4f
jmp 0x4900d5
push 0x4e
jmp 0x4900cd
push 0x4d
jmp 0x4900cd
push 0x4c
jmp 0x4900cd
push 0x1d
jmp 0x4900cd
push 0x4b
lea ecx, [ebp + 8]
call fcn.00545796
push 0x5c1974
lea ecx, [ebp + 8]
call fcn.0053ef2b
lea eax, [ebp - 0x10]
lea ecx, [ebp + 8]
push eax
call fcn.0053ef67
mov eax, dword [0x61d784]
mov dword [ebp - 0x2c], eax
push 0x1c
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4f
call fcn.00545796
push edi
mov ecx, ebx
push dword [ebp - 0x2c]
push dword [ebp + 8]
call fcn.0054239a
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4d
call fcn.0053eb4f
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x14
call fcn.0053eb4f
jmp 0x49016e
cmp esi, edi
je 0x49013a
push 0xffffffffffffffff
lea ecx, [ebp - 0x18]
call fcn.0053efce
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
call fcn.0053efce
cmp dword [ebp + 8], edi
je 0x49016e
cmp dword [ebx + 0x1a20], edi
je 0x49016e
cmp dword [0x5c500c], edi
je 0x49016e
push edi
push 0xa
mov ecx, ebx
call fcn.0049326b
push edi
mov ecx, ebx
push dword [ebp - 0x30]
call fcn.00493281
push dword [ebp - 0xa0]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.0055c7c5
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0xa4]
mov dword [eax + 0x144], ecx
call fcn.0055c7c5
mov eax, dword [eax + 4]
mov dword [eax + 0x118], 1
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x11
call fcn.0053eb4f
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x10
call fcn.0053eb4f
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 9
call fcn.0053eb4f
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 8
call fcn.0053eb4f
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 7
call fcn.0053eb4f
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 6
call fcn.0053eb4f
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 5
call fcn.0053eb4f
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 4
call fcn.0053eb4f
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 3
call fcn.0053eb4f
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call fcn.0053eb4f
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.0053eb4f
and byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.0053eb4f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f8]
call fcn.0048dc97
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 4