Function at 0x4d7128
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Query environment variable

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x238
call fcn.004d53d0
mov ebx, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], ebx
call fcn.00424ea0
call fcn.004d1420
mov ebx, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], ebx
call fcn.00424ea0
call fcn.004d28d4
mov ebx, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], ebx
lea ebx, [ebp - 0x5c]
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7f08]
test al, al
jne 0x4d71d5
mov dword [esp], 0x4e7f08
call fcn.004d5a00
test eax, eax
je 0x4d71d5
mov dword [esp], ebx
mov ecx, 0x4ec490
call fcn.0043167c
push eax
mov dword [esp], 0x4d6b78
call fcn.004013f0
mov dword [esp], 0x4e7f08
call fcn.004d5ad0
mov ecx, 0x4ec490
call fcn.0043164c
mov dword [esp], 0x4ec490
call fcn.00424ea0
call fcn.004d4750
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e80b8]
test al, al
jne 0x4d7252
mov dword [esp], 0x4e80b8
call fcn.004d5a00
test eax, eax
je 0x4d7252
mov dword [esp], ebx
mov ecx, 0x4ec8c0
call fcn.0043167c
push eax
mov dword [esp], 0x4d6b80
call fcn.004013f0
mov dword [esp], 0x4e80b8
call fcn.004d5ad0
mov ecx, 0x4ec8c0
call fcn.0043164c
mov dword [esp], 0x4ec8c0
call fcn.00424ea0
call fcn.004d4cc8
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e8150]
test al, al
jne 0x4d72cf
mov dword [esp], 0x4e8150
call fcn.004d5a00
test eax, eax
je 0x4d72cf
mov dword [esp], ebx
mov ecx, 0x4ec9e0
call fcn.0043167c
push edi
mov dword [esp], 0x4d6b94
call fcn.004013f0
mov dword [esp], 0x4e8150
call fcn.004d5ad0
mov ecx, 0x4ec9e0
mov esi, 0x4e7020
mov edi, ebx
call fcn.0043164c
mov dword [esp], 0x4ec9e0
call fcn.00424ea0
mov ecx, 0x39
mov dword [ebp - 0x98], 0xc5007ebe
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e8190]
test al, al
jne 0x4d733c
mov dword [esp], 0x4e8190
call fcn.004d5a00
test eax, eax
je 0x4d733c
mov dword [esp], ebx
mov ecx, 0x4ecaa0
call fcn.00431544
push esi
mov dword [esp], 0x4d6b98
call fcn.004013f0
mov dword [esp], 0x4e8190
call fcn.004d5ad0
mov ecx, 0x4ecaa0
call fcn.00431514
mov dword [esp], 0x4ecaa0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d7374
lea eax, [ebp - 0x98]
call eax
call fcn.004d1808
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.0042bee0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7a70]
test al, al
jne 0x4d73ca
mov dword [esp], 0x4e7a70
call fcn.004d5a00
test eax, eax
je 0x4d73ca
mov dword [esp], ebx
mov ecx, 0x4eba18
call fcn.0043167c
push ecx
mov dword [esp], 0x4d6ba8
call fcn.004013f0
mov dword [esp], 0x4e7a70
call fcn.004d5ad0
mov ecx, 0x4eba18
call fcn.0043164c
mov dword [esp], 0x4eba18
call fcn.00424ea0
call fcn.004d1b8c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d1e48
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7b48]
test al, al
jne 0x4d745d
mov dword [esp], 0x4e7b48
call fcn.004d5a00
test eax, eax
je 0x4d745d
mov dword [esp], ebx
mov ecx, 0x4ebbe8
call fcn.0043167c
push edx
mov dword [esp], 0x4d6bb4
call fcn.004013f0
mov dword [esp], 0x4e7b48
call fcn.004d5ad0
mov ecx, 0x4ebbe8
call fcn.0043164c
mov dword [esp], 0x4ebbe8
call fcn.00424ea0
call fcn.004d2230
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7bc8]
test al, al
jne 0x4d74da
mov dword [esp], 0x4e7bc8
call fcn.004d5a00
test eax, eax
je 0x4d74da
mov dword [esp], ebx
mov ecx, 0x4ebd20
call fcn.0043167c
push eax
mov dword [esp], 0x4d6bbc
call fcn.004013f0
mov dword [esp], 0x4e7bc8
call fcn.004d5ad0
mov ecx, 0x4ebd20
call fcn.0043164c
mov dword [esp], 0x4ebd20
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7c20]
test al, al
jne 0x4d7541
mov dword [esp], 0x4e7c20
call fcn.004d5a00
test eax, eax
je 0x4d7541
mov dword [esp], ebx
mov ecx, 0x4ebde0
call fcn.0043167c
push eax
mov dword [esp], 0x4d6bc0
call fcn.004013f0
mov dword [esp], 0x4e7c20
call fcn.004d5ad0
mov ecx, 0x4ebde0
mov edi, ebx
call fcn.0043164c
mov dword [esp], 0x4ebde0
call fcn.00424ea0
call fcn.004d2870
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
mov esi, 0x4e7020
call fcn.00424ea0
mov ecx, 0x39
mov dword [ebp - 0x98], 0xd91086c2
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e7ca8]
test al, al
jne 0x4d75c4
mov dword [esp], 0x4e7ca8
call fcn.004d5a00
test eax, eax
je 0x4d75c4
mov dword [esp], ebx
mov ecx, 0x4ebf00
call fcn.00431544
push eax
mov dword [esp], 0x4d6bc8
call fcn.004013f0
mov dword [esp], 0x4e7ca8
call fcn.004d5ad0
mov ecx, 0x4ebf00
call fcn.00431514
mov dword [esp], 0x4ebf00
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d75fc
lea eax, [ebp - 0x98]
call eax
call fcn.004d316c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov word [ebp - 0x54], 0x6a
mov ecx, 9
mov esi, 0xb
mov dword [ebp - 0x5c], 0x6d647e67
mov dword [ebp - 0x58], 0x69602d6e
mov eax, ecx
xor edx, edx
div esi
xor byte [ebp + ecx - 0x65], dl
inc ecx
cmp ecx, 0x12
jne 0x4d761a
mov eax, ebx
call fcn.00427d94
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7de8]
test al, al
jne 0x4d7682
mov dword [esp], 0x4e7de8
call fcn.004d5a00
test eax, eax
je 0x4d7682
mov dword [esp], ebx
mov ecx, 0x4ec218
call fcn.0043167c
push eax
mov dword [esp], 0x4d6bd8
call fcn.004013f0
mov dword [esp], 0x4e7de8
call fcn.004d5ad0
mov ecx, 0x4ec218
call fcn.0043164c
mov dword [esp], 0x4ec218
call fcn.00424ea0
call fcn.004d348c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7e80]
test al, al
jne 0x4d76ff
mov dword [esp], 0x4e7e80
call fcn.004d5a00
test eax, eax
je 0x4d76ff
mov dword [esp], ebx
mov ecx, 0x4ec338
call fcn.0043167c
push eax
mov dword [esp], 0x4d6be0
call fcn.004013f0
mov dword [esp], 0x4e7e80
call fcn.004d5ad0
mov ecx, 0x4ec338
call fcn.0043164c
mov dword [esp], 0x4ec338
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7ec0]
test al, al
jne 0x4d7766
mov dword [esp], 0x4e7ec0
call fcn.004d5a00
test eax, eax
je 0x4d7766
mov dword [esp], ebx
mov ecx, 0x4ec3e8
call fcn.0043167c
push edi
mov dword [esp], 0x4d6be4
call fcn.004013f0
mov dword [esp], 0x4e7ec0
call fcn.004d5ad0
mov ecx, 0x4ec3e8
call fcn.0043164c
mov dword [esp], 0x4ec3e8
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7f00]
test al, al
jne 0x4d77cd
mov dword [esp], 0x4e7f00
call fcn.004d5a00
test eax, eax
je 0x4d77cd
mov dword [esp], ebx
mov ecx, 0x4ec484
call fcn.0043167c
push esi
mov dword [esp], 0x4d6be8
call fcn.004013f0
mov dword [esp], 0x4e7f00
call fcn.004d5ad0
mov ecx, 0x4ec484
call fcn.0043164c
mov dword [esp], 0x4ec484
call fcn.00424ea0
call fcn.004d3bf8
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7fa0]
test al, al
jne 0x4d784a
mov dword [esp], 0x4e7fa0
call fcn.004d5a00
test eax, eax
je 0x4d784a
mov dword [esp], ebx
mov ecx, 0x4ec600
call fcn.0043167c
push ecx
mov dword [esp], 0x4d6bf0
call fcn.004013f0
mov dword [esp], 0x4e7fa0
call fcn.004d5ad0
mov ecx, 0x4ec600
mov edi, ebx
call fcn.0043164c
mov dword [esp], 0x4ec600
call fcn.00424ea0
call fcn.004d40a8
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
mov esi, 0x4e7020
call fcn.00424ea0
mov ecx, 0x39
mov dword [ebp - 0x98], 0xed208ec6
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e8020]
test al, al
jne 0x4d78cd
mov dword [esp], 0x4e8020
call fcn.004d5a00
test eax, eax
je 0x4d78cd
mov dword [esp], ebx
mov ecx, 0x4ec720
call fcn.00431544
push edx
mov dword [esp], 0x4d6bf8
call fcn.004013f0
mov dword [esp], 0x4e8020
call fcn.004d5ad0
mov ecx, 0x4ec720
call fcn.00431514
mov dword [esp], 0x4ec720
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d7905
lea eax, [ebp - 0x98]
call eax
call fcn.004d4624
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov ecx, ebx
call fcn.004313d0
mov eax, ebx
call fcn.00427d94
call fcn.004d4688
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d46ec
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d47b4
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d4818
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d487c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d48e0
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e80a0]
test al, al
jne 0x4d79e8
mov dword [esp], 0x4e80a0
call fcn.004d5a00
test eax, eax
je 0x4d79e8
mov dword [esp], ebx
mov ecx, 0x4ec84c
call fcn.0043167c
push eax
mov dword [esp], 0x4d6c20
call fcn.004013f0
mov dword [esp], 0x4e80a0
call fcn.004d5ad0
mov ecx, 0x4ec84c
mov edi, ebx
call fcn.0043164c
mov dword [esp], 0x4ec84c
call fcn.00424ea0
call fcn.004d4944
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
mov esi, 0x4e7020
call fcn.00424ea0
mov ecx, 0x39
mov dword [ebp - 0x98], 0x13096ca
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e80b0]
test al, al
jne 0x4d7a6b
mov dword [esp], 0x4e80b0
call fcn.004d5a00
test eax, eax
je 0x4d7a6b
mov dword [esp], ebx
mov ecx, 0x4ec880
call fcn.00431544
push eax
mov dword [esp], 0x4d6c2c
call fcn.004013f0
mov dword [esp], 0x4e80b0
call fcn.004d5ad0
mov ecx, 0x4ec880
call fcn.00431514
mov dword [esp], 0x4ec880
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d7aa3
lea eax, [ebp - 0x98]
call eax
call fcn.004d49a8
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov ecx, ebx
call fcn.00431448
mov eax, ebx
call fcn.00427d94
call fcn.004d4a0c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d4a70
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e80d8]
test al, al
jne 0x4d7b2e
mov dword [esp], 0x4e80d8
call fcn.004d5a00
test eax, eax
je 0x4d7b2e
mov dword [esp], ebx
mov ecx, 0x4ec8f0
call fcn.0043167c
push eax
mov dword [esp], 0x4d6c44
call fcn.004013f0
mov dword [esp], 0x4e80d8
call fcn.004d5ad0
mov ecx, 0x4ec8f0
mov edi, ebx
call fcn.0043164c
mov dword [esp], 0x4ec8f0
call fcn.00424ea0
call fcn.004d4ad4
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d4b38
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d4b9c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d4c00
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d4c64
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
mov esi, 0x4e7020
call fcn.00424ea0
mov ecx, 0x39
mov dword [ebp - 0x98], 0x15409ece
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e8108]
test al, al
jne 0x4d7c09
mov dword [esp], 0x4e8108
call fcn.004d5a00
test eax, eax
je 0x4d7c09
mov dword [esp], ebx
mov ecx, 0x4ec940
call fcn.00431544
push eax
mov dword [esp], 0x4d6c60
call fcn.004013f0
mov dword [esp], 0x4e8108
call fcn.004d5ad0
mov ecx, 0x4ec940
call fcn.00431514
mov dword [esp], 0x4ec940
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d7c41
lea eax, [ebp - 0x98]
call eax
call fcn.004d4d2c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [esp + 4], 0x270f
mov dword [esp], 0x3e8
call fcn.004266a8
mov edx, eax
mov edi, eax
shr edx, 0x1f
neg edi
cmovs edi, eax
mov dword [ebp - 0x210], edx
mov dword [esp + 4], 0xa
mov dword [esp], edi
call fcn.004c85e8
mov edx, dword [ebp - 0x210]
lea ecx, [ebp - 0x1fc]
mov esi, eax
mov dword [ebp - 0x204], ecx
lea ecx, [ebp - 0x204]
movzx eax, dl
add edx, esi
mov dword [ebp - 0x210], eax
mov dword [esp], edx
mov dword [esp + 4], 0x2d
call fcn.004bbe90
push eax
push eax
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov eax, dword [ebp - 0x210]
add eax, dword [ebp - 0x204]
mov dword [esp], eax
call fcn.004c8640
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e8120]
test al, al
jne 0x4d7d1b
mov dword [esp], 0x4e8120
call fcn.004d5a00
test eax, eax
je 0x4d7d1b
mov dword [esp], ebx
mov ecx, 0x4ec998
call fcn.0043167c
push edi
mov dword [esp], 0x4d6c70
call fcn.004013f0
mov dword [esp], 0x4e8120
call fcn.004d5ad0
mov ecx, 0x4ec998
call fcn.0043164c
mov dword [esp], 0x4ec998
call fcn.00424ea0
call fcn.004d4d90
mov ebx, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], ebx
call fcn.00424ea0
call fcn.004d4df4
mov ebx, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], ebx
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
lea ebx, [ebp - 0x5c]
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e8138]
test al, al
jne 0x4d7db1
mov dword [esp], 0x4e8138
call fcn.004d5a00
test eax, eax
je 0x4d7db1
mov dword [esp], ebx
mov ecx, 0x4ec9bc
call fcn.0043167c
push esi
mov dword [esp], 0x4d6c80
call fcn.004013f0
mov dword [esp], 0x4e8138
call fcn.004d5ad0
mov ecx, 0x4ec9bc
call fcn.0043164c
mov dword [esp], 0x4ec9bc
call fcn.00424ea0
call fcn.004d4e58
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e8148]
test al, al
jne 0x4d7e2e
mov dword [esp], 0x4e8148
call fcn.004d5a00
test eax, eax
je 0x4d7e2e
mov dword [esp], ebx
mov ecx, 0x4ec9d4
call fcn.0043167c
push ecx
mov dword [esp], 0x4d6c88
call fcn.004013f0
mov dword [esp], 0x4e8148
call fcn.004d5ad0
mov ecx, 0x4ec9d4
call fcn.0043164c
mov dword [esp], 0x4ec9d4
call fcn.00424ea0
call fcn.004d4ebc
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d4f20
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov esi, 0x4e7020
mov ecx, 0x39
mov edi, ebx
mov dword [ebp - 0x98], 0x2950a6d2
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e8168]
test al, al
jne 0x4d7ec7
mov dword [esp], 0x4e8168
call fcn.004d5a00
test eax, eax
je 0x4d7ec7
mov dword [esp], ebx
mov ecx, 0x4eca20
call fcn.00431544
push edx
mov dword [esp], 0x4d6c94
call fcn.004013f0
mov dword [esp], 0x4e8168
call fcn.004d5ad0
mov ecx, 0x4eca20
lea esi, [ebp - 0x98]
call fcn.00431514
mov dword [esp], 0x4eca20
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d7ef7
lea edi, [ebp - 0xb4]
mov dword [esp], edi
call fcn.0048bbb0
jmp 0x4d7f11
call esi
call fcn.004d4f84
mov edi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], edi
call fcn.00424ea0
jmp 0x4d7ee7
lea eax, [ebp - 0x114]
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0x114], 0x676f6c
mov dword [esp], eax
call fcn.004bfb6c
push eax
lea eax, [ebp - 0xfc]
mov dword [esp + 4], eax
lea eax, [ebp - 0xe4]
mov dword [esp], eax
call fcn.0042863c
lea eax, [ebp - 0xe4]
mov dword [esp + 4], eax
lea eax, [ebp - 0xcc]
mov dword [esp], eax
call fcn.004268fc
lea eax, [ebp - 0xcc]
mov ecx, esi
mov dword [esp], eax
call fcn.00492540
push eax
mov dword [esp + 8], esi
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.00493b18
mov dword [esp], ebx
lea ecx, [ebp - 0x1ec]
call fcn.004c41e8
push eax
mov ecx, ebx
call fcn.0049259c
mov ecx, esi
call fcn.0049259c
lea ecx, [ebp - 0xcc]
call fcn.004c0130
lea ecx, [ebp - 0xe4]
call fcn.004c0130
lea ecx, [ebp - 0xfc]
call fcn.004bbce0
lea eax, [ebp - 0x114]
mov dword [ebp - 0x114], 0x706d6574
lea ecx, [ebp - 0xfc]
mov byte [ebp - 0x110], 0
mov dword [esp], eax
call fcn.004bfb6c
push eax
lea eax, [ebp - 0xfc]
mov dword [esp + 4], eax
lea eax, [ebp - 0xe4]
mov dword [esp], eax
call fcn.0042863c
lea eax, [ebp - 0xe4]
mov dword [esp + 4], eax
lea eax, [ebp - 0xcc]
mov dword [esp], eax
call fcn.004268fc
lea eax, [ebp - 0xcc]
mov ecx, esi
mov dword [esp], eax
call fcn.00492540
push eax
mov dword [esp + 8], esi
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.00493b18
mov dword [esp], ebx
lea ecx, [ebp - 0x1d4]
call fcn.004c41e8
push ecx
mov ecx, ebx
call fcn.0049259c
mov ecx, esi
call fcn.0049259c
lea ecx, [ebp - 0xcc]
call fcn.004c0130
lea ecx, [ebp - 0xe4]
call fcn.004c0130
lea ecx, [ebp - 0xfc]
call fcn.004bbce0
lea eax, [ebp - 0x114]
mov dword [ebp - 0x114], 0x706d74
lea ecx, [ebp - 0xfc]
mov dword [esp], eax
call fcn.004bfb6c
push edx
lea eax, [ebp - 0xfc]
mov dword [esp + 4], eax
lea eax, [ebp - 0xe4]
mov dword [esp], eax
call fcn.0042863c
lea eax, [ebp - 0xe4]
mov dword [esp + 4], eax
lea eax, [ebp - 0xcc]
mov dword [esp], eax
call fcn.004268fc
lea eax, [ebp - 0xcc]
mov ecx, esi
mov dword [esp], eax
call fcn.00492540
push eax
mov dword [esp + 8], esi
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.00493b18
mov dword [esp], ebx
lea ecx, [ebp - 0x1bc]
call fcn.004c41e8
push eax
mov ecx, ebx
call fcn.0049259c
mov ecx, esi
call fcn.0049259c
lea ecx, [ebp - 0xcc]
call fcn.004c0130
lea ecx, [ebp - 0xe4]
call fcn.004c0130
lea ecx, [ebp - 0xfc]
call fcn.004bbce0
lea eax, [ebp - 0x114]
mov dword [ebp - 0x114], 0x657865
lea ecx, [ebp - 0xfc]
mov dword [esp], eax
call fcn.004bfb6c
push eax
lea eax, [ebp - 0xfc]
mov dword [esp + 4], eax
lea eax, [ebp - 0xe4]
mov dword [esp], eax
call fcn.0042863c
lea eax, [ebp - 0xe4]
mov dword [esp + 4], eax
lea eax, [ebp - 0xcc]
mov dword [esp], eax
call fcn.004268fc
lea eax, [ebp - 0xcc]
mov ecx, esi
mov dword [esp], eax
call fcn.00492540
push eax
lea ebx, [ebp - 0x5c]
mov dword [esp + 8], esi
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.00493b18
mov dword [esp], ebx
lea ecx, [ebp - 0x1a4]
call fcn.004c41e8
push eax
mov ecx, ebx
call fcn.0049259c
mov ecx, esi
call fcn.0049259c
lea ecx, [ebp - 0xcc]
call fcn.004c0130
lea ecx, [ebp - 0xe4]
call fcn.004c0130
lea ecx, [ebp - 0xfc]
call fcn.004bbce0
call fcn.0042a8d4
fstp qword [ebp - 0x210]
call fcn.004d4fe8
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d504c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e8188]
test al, al
jne 0x4d825b
mov dword [esp], 0x4e8188
call fcn.004d5a00
test eax, eax
je 0x4d825b
mov dword [esp], ebx
mov ecx, 0x4eca84
call fcn.0043167c
push edi
mov dword [esp], 0x4d6cb0
call fcn.004013f0
mov dword [esp], 0x4e8188
call fcn.004d5ad0
mov ecx, 0x4eca84
call fcn.0043164c
mov dword [esp], 0x4eca84
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e8198]
test al, al
jne 0x4d82c2
mov dword [esp], 0x4e8198
call fcn.004d5a00
test eax, eax
je 0x4d82c2
mov dword [esp], ebx
mov ecx, 0x4ecae0
call fcn.0043167c
push esi
mov dword [esp], 0x4d6cb4
call fcn.004013f0
mov dword [esp], 0x4e8198
call fcn.004d5ad0
mov ecx, 0x4ecae0
call fcn.0043164c
mov dword [esp], 0x4ecae0
call fcn.00424ea0
call fcn.004d50b0
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e81a8]
test al, al
jne 0x4d833f
mov dword [esp], 0x4e81a8
call fcn.004d5a00
test eax, eax
je 0x4d833f
mov dword [esp], ebx
mov ecx, 0x4ecaf8
call fcn.0043167c
push ecx
mov dword [esp], 0x4d6cbc
call fcn.004013f0
mov dword [esp], 0x4e81a8
call fcn.004d5ad0
mov ecx, 0x4ecaf8
call fcn.0043164c
mov dword [esp], 0x4ecaf8
call fcn.00424ea0
call fcn.004d5114
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d5178
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov esi, 0x4e7020
mov ecx, 0x39
mov edi, ebx
mov dword [ebp - 0x98], 0x3d60aed6
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e81c0]
test al, al
jne 0x4d83d8
mov dword [esp], 0x4e81c0
call fcn.004d5a00
test eax, eax
je 0x4d83d8
mov dword [esp], ebx
mov ecx, 0x4ecb20
call fcn.00431544
push edx
mov dword [esp], 0x4d6cd0
call fcn.004013f0
mov dword [esp], 0x4e81c0
call fcn.004d5ad0
mov ecx, 0x4ecb20
call fcn.00431514
mov dword [esp], 0x4ecb20
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d840a
call fcn.004d5240
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
jmp 0x4d842a
lea eax, [ebp - 0x98]
call eax
call fcn.004d51dc
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
jmp 0x4d83f2
call fcn.004d52a4
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e81e0]
test al, al
jne 0x4d8491
mov dword [esp], 0x4e81e0
call fcn.004d5a00
test eax, eax
je 0x4d8491
mov dword [esp], ebx
mov ecx, 0x4ecb84
call fcn.0043167c
push eax
mov dword [esp], 0x4d6ce8
call fcn.004013f0
mov dword [esp], 0x4e81e0
call fcn.004d5ad0
mov ecx, 0x4ecb84
call fcn.0043164c
mov dword [esp], 0x4ecb84
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e81e8]
test al, al
jne 0x4d84f8
mov dword [esp], 0x4e81e8
call fcn.004d5a00
test eax, eax
je 0x4d84f8
mov dword [esp], ebx
mov ecx, 0x4ecb90
call fcn.0043167c
push eax
mov dword [esp], 0x4d6cec
call fcn.004013f0
mov dword [esp], 0x4e81e8
call fcn.004d5ad0
mov ecx, 0x4ecb90
call fcn.0043164c
mov dword [esp], 0x4ecb90
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e81f0]
test al, al
jne 0x4d855f
mov dword [esp], 0x4e81f0
call fcn.004d5a00
test eax, eax
je 0x4d855f
mov dword [esp], ebx
mov ecx, 0x4ecb9c
call fcn.0043167c
push eax
mov dword [esp], 0x4d6cf0
call fcn.004013f0
mov dword [esp], 0x4e81f0
call fcn.004d5ad0
mov ecx, 0x4ecb9c
call fcn.0043164c
mov dword [esp], 0x4ecb9c
call fcn.00424ea0
call fcn.004d5308
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e8200]
test al, al
jne 0x4d85dc
mov dword [esp], 0x4e8200
call fcn.004d5a00
test eax, eax
je 0x4d85dc
mov dword [esp], ebx
mov ecx, 0x4ecbb4
call fcn.0043167c
push eax
mov dword [esp], 0x4d6cfc
call fcn.004013f0
mov dword [esp], 0x4e8200
call fcn.004d5ad0
mov ecx, 0x4ecbb4
call fcn.0043164c
mov dword [esp], 0x4ecbb4
call fcn.00424ea0
call fcn.004d536c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov esi, 0x4e7020
mov ecx, 0x39
mov edi, ebx
mov dword [ebp - 0x98], 0x5170b6da
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e8210]
test al, al
jne 0x4d865f
mov dword [esp], 0x4e8210
call fcn.004d5a00
test eax, eax
je 0x4d865f
mov dword [esp], ebx
mov ecx, 0x4ecbe0
call fcn.00431544
push eax
mov dword [esp], 0x4d6d04
call fcn.004013f0
mov dword [esp], 0x4e8210
call fcn.004d5ad0
mov ecx, 0x4ecbe0
call fcn.00431514
mov dword [esp], 0x4ecbe0
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d86a9
fld qword [ebp - 0x210]
lea eax, [ebp - 0x18c]
fisttp dword [ebp - 0x214]
mov edx, dword [ebp - 0x214]
mov dword [esp], eax
mov dword [esp + 8], edx
lea edx, [ebp - 0x204]
mov dword [esp + 4], edx
call fcn.00430518
jmp 0x4d86c9
lea eax, [ebp - 0x98]
call eax
call fcn.004d1484
mov ebx, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], ebx
call fcn.00424ea0
jmp 0x4d8679
mov dword [ebp - 0x5c], 0xc1eb1542
lea ebx, [ebp - 0x5c]
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e79c0]
test al, al
jne 0x4d871d
mov dword [esp], 0x4e79c0
call fcn.004d5a00
test eax, eax
je 0x4d871d
mov dword [esp], ebx
mov ecx, 0x4eb884
call fcn.0043167c
push edi
mov dword [esp], 0x4d6d14
call fcn.004013f0
mov dword [esp], 0x4e79c0
call fcn.004d5ad0
mov ecx, 0x4eb884
call fcn.0043164c
mov dword [esp], 0x4eb884
call fcn.00424ea0
call fcn.004d14e8
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d154c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d15b0
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d1614
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e79e8]
test al, al
jne 0x4d87dc
mov dword [esp], 0x4e79e8
call fcn.004d5a00
test eax, eax
je 0x4d87dc
mov dword [esp], ebx
mov ecx, 0x4eb8c0
call fcn.0043167c
push esi
mov dword [esp], 0x4d6d2c
call fcn.004013f0
mov dword [esp], 0x4e79e8
call fcn.004d5ad0
mov ecx, 0x4eb8c0
call fcn.0043164c
mov dword [esp], 0x4eb8c0
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e79f0]
test al, al
jne 0x4d8843
mov dword [esp], 0x4e79f0
call fcn.004d5a00
test eax, eax
je 0x4d8843
mov dword [esp], ebx
mov ecx, 0x4eb8cc
call fcn.0043167c
push ecx
mov dword [esp], 0x4d6d30
call fcn.004013f0
mov dword [esp], 0x4e79f0
call fcn.004d5ad0
mov ecx, 0x4eb8cc
call fcn.0043164c
mov dword [esp], 0x4eb8cc
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e79f8]
test al, al
jne 0x4d88aa
mov dword [esp], 0x4e79f8
call fcn.004d5a00
test eax, eax
je 0x4d88aa
mov dword [esp], ebx
mov ecx, 0x4eb8d8
call fcn.0043167c
push edx
mov dword [esp], 0x4d6d34
call fcn.004013f0
mov dword [esp], 0x4e79f8
call fcn.004d5ad0
mov ecx, 0x4eb8d8
call fcn.0043164c
mov dword [esp], 0x4eb8d8
call fcn.00424ea0
mov esi, 0x4e7020
mov ecx, 0x39
mov edi, ebx
mov dword [ebp - 0x98], 0x6580bede
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e7a00]
test al, al
jne 0x4d8917
mov dword [esp], 0x4e7a00
call fcn.004d5a00
test eax, eax
je 0x4d8917
mov dword [esp], ebx
mov ecx, 0x4eb900
call fcn.00431544
push eax
mov dword [esp], 0x4d6d38
call fcn.004013f0
mov dword [esp], 0x4e7a00
call fcn.004d5ad0
mov ecx, 0x4eb900
call fcn.00431514
mov dword [esp], 0x4eb900
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d8961
mov dword [esp], 4
call fcn.004d55e0
mov dword [eax], 0x4f7658
mov dword [ebp - 0x210], eax
call fcn.004d16dc
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
jmp 0x4d8981
lea eax, [ebp - 0x98]
call eax
call fcn.004d1678
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
jmp 0x4d8931
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7a18]
test al, al
jne 0x4d89d2
mov dword [esp], 0x4e7a18
call fcn.004d5a00
test eax, eax
je 0x4d89d2
mov dword [esp], ebx
mov ecx, 0x4eb958
call fcn.0043167c
push eax
mov dword [esp], 0x4d6d50
call fcn.004013f0
mov dword [esp], 0x4e7a18
call fcn.004d5ad0
mov ecx, 0x4eb958
call fcn.0043164c
mov dword [esp], 0x4eb958
call fcn.00424ea0
call fcn.004d1740
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d17a4
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7a38]
test al, al
jne 0x4d8a65
mov dword [esp], 0x4e7a38
call fcn.004d5a00
test eax, eax
je 0x4d8a65
mov dword [esp], ebx
mov ecx, 0x4eb988
call fcn.0043167c
push eax
mov dword [esp], 0x4d6d5c
call fcn.004013f0
mov dword [esp], 0x4e7a38
call fcn.004d5ad0
mov ecx, 0x4eb988
call fcn.0043164c
mov dword [esp], 0x4eb988
call fcn.00424ea0
call fcn.004d186c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7a48]
test al, al
jne 0x4d8ae2
mov dword [esp], 0x4e7a48
call fcn.004d5a00
test eax, eax
je 0x4d8ae2
mov dword [esp], ebx
mov ecx, 0x4eb9a0
call fcn.0043167c
push eax
mov dword [esp], 0x4d6d64
call fcn.004013f0
mov dword [esp], 0x4e7a48
call fcn.004d5ad0
mov ecx, 0x4eb9a0
call fcn.0043164c
mov dword [esp], 0x4eb9a0
call fcn.00424ea0
call fcn.004d18d0
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov esi, 0x4e7020
mov ecx, 0x39
mov edi, ebx
mov dword [ebp - 0x98], 0x7990c6e2
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e7a58]
test al, al
jne 0x4d8b65
mov dword [esp], 0x4e7a58
call fcn.004d5a00
test eax, eax
je 0x4d8b65
mov dword [esp], ebx
mov ecx, 0x4eb9c0
call fcn.00431544
push eax
mov dword [esp], 0x4d6d6c
call fcn.004013f0
mov dword [esp], 0x4e7a58
call fcn.004d5ad0
mov ecx, 0x4eb9c0
call fcn.00431514
mov dword [esp], 0x4eb9c0
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d8b9e
mov dword [ebp - 0x5c], 0x76444541
mov ecx, 0xb
lea ebx, [ebp - 0x5c]
mov dword [ebp - 0x58], 0x46736c6b
mov dword [ebp - 0x54], 0x7f6661
jmp 0x4d8bbe
lea eax, [ebp - 0x98]
call eax
call fcn.004d1934
mov ebx, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], ebx
call fcn.00424ea0
jmp 0x4d8b7f
mov eax, ecx
mov esi, 0xb
xor edx, edx
div esi
xor byte [ebp + ecx - 0x67], dl
inc ecx
cmp ecx, 0x16
jne 0x4d8bbe
lea eax, [ebp - 0x174]
xor edi, edi
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp], eax
call fcn.00425008
call fcn.004d1998
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7a78]
test al, al
jne 0x4d8c52
mov dword [esp], 0x4e7a78
call fcn.004d5a00
test eax, eax
je 0x4d8c52
mov dword [esp], ebx
mov ecx, 0x4eba24
call fcn.0043167c
push esi
mov dword [esp], 0x4d6d84
call fcn.004013f0
mov dword [esp], 0x4e7a78
call fcn.004d5ad0
mov ecx, 0x4eba24
call fcn.0043164c
mov dword [esp], 0x4eba24
call fcn.00424ea0
call fcn.004d19fc
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7a88]
test al, al
jne 0x4d8ccf
mov dword [esp], 0x4e7a88
call fcn.004d5a00
test eax, eax
je 0x4d8ccf
mov dword [esp], ebx
mov ecx, 0x4eba3c
call fcn.0043167c
push ecx
mov dword [esp], 0x4d6d8c
call fcn.004013f0
mov dword [esp], 0x4e7a88
call fcn.004d5ad0
mov ecx, 0x4eba3c
call fcn.0043164c
mov dword [esp], 0x4eba3c
call fcn.00424ea0
call fcn.004d1a60
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7a98]
test al, al
jne 0x4d8d4c
mov dword [esp], 0x4e7a98
call fcn.004d5a00
test eax, eax
je 0x4d8d4c
mov dword [esp], ebx
mov ecx, 0x4eba54
call fcn.0043167c
push edx
mov dword [esp], 0x4d6d94
call fcn.004013f0
mov dword [esp], 0x4e7a98
call fcn.004d5ad0
mov ecx, 0x4eba54
call fcn.0043164c
mov dword [esp], 0x4eba54
call fcn.00424ea0
call fcn.004d1ac4
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d1b28
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov esi, 0x4e7020
mov ecx, 0x39
mov edi, ebx
mov dword [ebp - 0x98], 0x8da0cee6
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e7ab0]
test al, al
jne 0x4d8de5
mov dword [esp], 0x4e7ab0
call fcn.004d5a00
test eax, eax
je 0x4d8de5
mov dword [esp], ebx
mov ecx, 0x4eba80
call fcn.00431544
push eax
mov dword [esp], 0x4d6dac
call fcn.004013f0
mov dword [esp], 0x4e7ab0
call fcn.004d5ad0
mov ecx, 0x4eba80
lea esi, [ebp - 0x98]
call fcn.00431514
mov dword [esp], 0x4eba80
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d8e3a
mov eax, dword [ebp - 0x210]
mov ecx, esi
mov eax, dword [eax]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x174]
mov dword [esp], eax
call fcn.004bfa90
push eax
lea esi, [ebp - 0x98]
mov ecx, ebx
mov dword [esp + 4], esi
mov eax, dword [ebp - 0x210]
mov dword [esp], eax
call edi
jmp 0x4d8e54
call esi
call fcn.004d1bf0
mov edi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], edi
call fcn.00424ea0
jmp 0x4d8e05
push eax
lea esi, [ebp - 0x174]
push eax
mov ecx, esi
mov dword [esp], ebx
call fcn.004bfcd0
mov ecx, ebx
push eax
call fcn.004bbce0
lea ecx, [ebp - 0x98]
call fcn.004bbce0
mov edx, dword [ebp - 0x214]
mov dword [esp + 4], esi
lea eax, [ebp - 0x15c]
mov dword [esp], eax
mov dword [esp + 8], edx
call fcn.00430518
call fcn.004d1c54
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7ad0]
test al, al
jne 0x4d8efc
mov dword [esp], 0x4e7ad0
call fcn.004d5a00
test eax, eax
je 0x4d8efc
mov dword [esp], ebx
mov ecx, 0x4ebae4
call fcn.0043167c
push eax
mov dword [esp], 0x4d6dc0
call fcn.004013f0
mov dword [esp], 0x4e7ad0
call fcn.004d5ad0
mov ecx, 0x4ebae4
call fcn.0043164c
mov dword [esp], 0x4ebae4
call fcn.00424ea0
call fcn.004d1cb8
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d1d1c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7ae8]
test al, al
jne 0x4d8f8f
mov dword [esp], 0x4e7ae8
call fcn.004d5a00
test eax, eax
je 0x4d8f8f
mov dword [esp], ebx
mov ecx, 0x4ebb08
call fcn.0043167c
push edi
mov dword [esp], 0x4d6dcc
call fcn.004013f0
mov dword [esp], 0x4e7ae8
call fcn.004d5ad0
mov ecx, 0x4ebb08
call fcn.0043164c
mov dword [esp], 0x4ebb08
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7af0]
test al, al
jne 0x4d8ff6
mov dword [esp], 0x4e7af0
call fcn.004d5a00
test eax, eax
je 0x4d8ff6
mov dword [esp], ebx
mov ecx, 0x4ebb14
call fcn.0043167c
push esi
mov dword [esp], 0x4d6dd0
call fcn.004013f0
mov dword [esp], 0x4e7af0
call fcn.004d5ad0
mov ecx, 0x4ebb14
call fcn.0043164c
mov dword [esp], 0x4ebb14
call fcn.00424ea0
call fcn.004d1d80
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d1de4
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov edi, ebx
mov esi, 0x4e7020
lea ebx, [ebp - 0x5c]
mov ecx, 0x39
rep movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x98], 0xa1b0d6ea
mov al, byte [0x4e7b10]
test al, al
jne 0x4d9092
mov dword [esp], 0x4e7b10
call fcn.004d5a00
test eax, eax
je 0x4d9092
mov dword [esp], ebx
mov ecx, 0x4ebb60
call fcn.00431544
push ecx
mov dword [esp], 0x4d6ddc
call fcn.004013f0
mov dword [esp], 0x4e7b10
call fcn.004d5ad0
mov ecx, 0x4ebb60
call fcn.00431514
mov dword [esp], 0x4ebb60
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d90c8
mov dword [ebp - 0x5c], 0x47465844
mov ecx, 0xb
mov dword [ebp - 0x58], 0x525f4c5d
mov dword [ebp - 0x54], 0x63685b
jmp 0x4d90e8
lea eax, [ebp - 0x98]
call eax
call fcn.004d1eac
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
jmp 0x4d90ac
mov eax, ecx
mov esi, 0xb
xor edx, edx
div esi
xor byte [ebp + ecx - 0x67], dl
inc ecx
cmp ecx, 0x16
jne 0x4d90e8
xor edx, edx
lea eax, [ebp - 0x144]
mov dword [esp + 8], edx
lea edx, [ebp - 0x5c]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00425008
call fcn.004d1f10
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7b28]
test al, al
jne 0x4d917f
mov dword [esp], 0x4e7b28
call fcn.004d5a00
test eax, eax
je 0x4d917f
mov dword [esp], ebx
mov ecx, 0x4ebbb8
call fcn.0043167c
push eax
mov dword [esp], 0x4d6df0
call fcn.004013f0
mov dword [esp], 0x4e7b28
call fcn.004d5ad0
mov ecx, 0x4ebbb8
call fcn.0043164c
mov dword [esp], 0x4ebbb8
call fcn.00424ea0
call fcn.004d1f74
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d1fd8
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d203c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d20a0
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d2104
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7b60]
test al, al
jne 0x4d9254
mov dword [esp], 0x4e7b60
call fcn.004d5a00
test eax, eax
je 0x4d9254
mov dword [esp], ebx
mov ecx, 0x4ebc0c
call fcn.0043167c
push eax
mov dword [esp], 0x4d6e08
call fcn.004013f0
mov dword [esp], 0x4e7b60
call fcn.004d5ad0
mov ecx, 0x4ebc0c
call fcn.0043164c
mov dword [esp], 0x4ebc0c
call fcn.00424ea0
mov esi, 0x4e7020
mov ecx, 0x39
mov edi, ebx
mov dword [ebp - 0x98], 0xb5c0deee
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e7b68]
test al, al
jne 0x4d92c1
mov dword [esp], 0x4e7b68
call fcn.004d5a00
test eax, eax
je 0x4d92c1
mov dword [esp], ebx
mov ecx, 0x4ebc20
call fcn.00431544
push eax
mov dword [esp], 0x4d6e0c
call fcn.004013f0
mov dword [esp], 0x4e7b68
call fcn.004d5ad0
mov ecx, 0x4ebc20
call fcn.00431514
mov dword [esp], 0x4ebc20
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d9304
mov eax, dword [ebp - 0x204]
lea esi, [ebp - 0x144]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
mov dword [esp + 4], esi
mov dword [esp + 8], eax
lea eax, [ebp - 0x5c]
mov dword [esp], eax
call fcn.00430518
jmp 0x4d9324
lea eax, [ebp - 0x98]
call eax
call fcn.004d2168
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
jmp 0x4d92db
mov dword [esp], ebx
mov ecx, esi
call fcn.004bfcd0
mov ecx, ebx
push eax
call fcn.004bbce0
call fcn.004d21cc
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7b80]
test al, al
jne 0x4d939d
mov dword [esp], 0x4e7b80
call fcn.004d5a00
test eax, eax
je 0x4d939d
mov dword [esp], ebx
mov ecx, 0x4ebc78
call fcn.0043167c
push eax
mov dword [esp], 0x4d6e20
call fcn.004013f0
mov dword [esp], 0x4e7b80
call fcn.004d5ad0
mov ecx, 0x4ebc78
call fcn.0043164c
mov dword [esp], 0x4ebc78
call fcn.00424ea0
call fcn.004d2294
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7b98]
test al, al
jne 0x4d941a
mov dword [esp], 0x4e7b98
call fcn.004d5a00
test eax, eax
je 0x4d941a
mov dword [esp], ebx
mov ecx, 0x4ebc9c
call fcn.0043167c
push edi
mov dword [esp], 0x4d6e28
call fcn.004013f0
mov dword [esp], 0x4e7b98
call fcn.004d5ad0
mov ecx, 0x4ebc9c
call fcn.0043164c
mov dword [esp], 0x4ebc9c
call fcn.00424ea0
call fcn.004d22f8
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d235c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d23c0
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d2424
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov esi, 0x4e7020
mov ecx, 0x39
mov edi, ebx
mov dword [ebp - 0x98], 0xc9d0e6f2
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e7bc0]
test al, al
jne 0x4d94df
mov dword [esp], 0x4e7bc0
call fcn.004d5a00
test eax, eax
je 0x4d94df
mov dword [esp], ebx
mov ecx, 0x4ebce0
call fcn.00431544
push esi
mov dword [esp], 0x4d6e40
call fcn.004013f0
mov dword [esp], 0x4e7bc0
call fcn.004d5ad0
mov ecx, 0x4ebce0
call fcn.00431514
mov dword [esp], 0x4ebce0
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d9520
mov word [ebp - 0x50], 0x43
mov ecx, 0xd
mov ebx, 0xd
mov dword [ebp - 0x5c], 0x494b4841
mov dword [ebp - 0x58], 0x434c4c45
mov dword [ebp - 0x54], 0x424b4042
jmp 0x4d9540
lea eax, [ebp - 0x98]
call eax
call fcn.004d2488
mov ebx, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], ebx
call fcn.00424ea0
jmp 0x4d94f9
mov eax, ecx
xor edx, edx
div ebx
xor byte [ebp + ecx - 0x69], dl
inc ecx
cmp ecx, 0x1a
jne 0x4d9540
lea eax, [ebp - 0x5c]
xor ebx, ebx
mov dword [esp + 4], eax
lea eax, [ebp - 0x12c]
mov dword [esp + 8], ebx
mov dword [esp], eax
call fcn.00425008
mov eax, dword [ebp - 0x210]
lea ecx, [ebp - 0x98]
mov eax, dword [eax]
mov esi, dword [eax + 4]
lea eax, [ebp - 0x12c]
mov dword [esp], eax
call fcn.004bfa90
push ecx
lea eax, [ebp - 0x98]
lea ebx, [ebp - 0x5c]
mov ecx, ebx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x210]
mov dword [esp], eax
call esi
push eax
lea ecx, [ebp - 0x12c]
push eax
mov dword [esp], ebx
call fcn.004bfcd0
mov ecx, ebx
push edx
call fcn.004bbce0
lea ecx, [ebp - 0x98]
call fcn.004bbce0
call fcn.004d24ec
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d2550
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d25b4
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d2618
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7bf8]
test al, al
jne 0x4d9671
mov dword [esp], 0x4e7bf8
call fcn.004d5a00
test eax, eax
je 0x4d9671
mov dword [esp], ebx
mov ecx, 0x4ebd68
call fcn.0043167c
push eax
mov dword [esp], 0x4d6e68
call fcn.004013f0
mov dword [esp], 0x4e7bf8
call fcn.004d5ad0
mov ecx, 0x4ebd68
call fcn.0043164c
mov dword [esp], 0x4ebd68
call fcn.00424ea0
call fcn.004d267c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7c08]
test al, al
jne 0x4d96ee
mov dword [esp], 0x4e7c08
call fcn.004d5a00
test eax, eax
je 0x4d96ee
mov dword [esp], ebx
mov ecx, 0x4ebd80
call fcn.0043167c
push eax
mov dword [esp], 0x4d6e70
call fcn.004013f0
mov dword [esp], 0x4e7c08
call fcn.004d5ad0
mov ecx, 0x4ebd80
call fcn.0043164c
mov dword [esp], 0x4ebd80
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7c10]
test al, al
jne 0x4d9755
mov dword [esp], 0x4e7c10
call fcn.004d5a00
test eax, eax
je 0x4d9755
mov dword [esp], ebx
mov ecx, 0x4ebd8c
call fcn.0043167c
push eax
mov dword [esp], 0x4d6e74
call fcn.004013f0
mov dword [esp], 0x4e7c10
call fcn.004d5ad0
mov ecx, 0x4ebd8c
call fcn.0043164c
mov dword [esp], 0x4ebd8c
call fcn.00424ea0
mov esi, 0x4e7020
mov ecx, 0x39
mov edi, ebx
mov dword [ebp - 0x98], 0xdde0eef6
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e7c18]
test al, al
jne 0x4d97c2
mov dword [esp], 0x4e7c18
call fcn.004d5a00
test eax, eax
je 0x4d97c2
mov dword [esp], ebx
mov ecx, 0x4ebda0
call fcn.00431544
push eax
mov dword [esp], 0x4d6e78
call fcn.004013f0
mov dword [esp], 0x4e7c18
call fcn.004d5ad0
mov ecx, 0x4ebda0
call fcn.00431514
mov dword [esp], 0x4ebda0
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d97f0
lea eax, [ebp - 0x12c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00422c68
jmp 0x4d9810
lea eax, [ebp - 0x98]
call eax
call fcn.004d26e0
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
jmp 0x4d97dc
mov dword [esp], ebx
lea ecx, [ebp - 0x12c]
call fcn.004bfcd0
mov ecx, ebx
push edi
call fcn.004bbce0
lea eax, [ebp - 0x174]
mov ecx, ebx
mov dword [esp], eax
call fcn.004bfa90
push esi
lea edx, [ebp - 0x12c]
mov eax, ebx
call fcn.004309f0
mov ecx, ebx
call fcn.004bbce0
call fcn.004d2744
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7c38]
test al, al
jne 0x4d98b2
mov dword [esp], 0x4e7c38
call fcn.004d5a00
test eax, eax
je 0x4d98b2
mov dword [esp], ebx
mov ecx, 0x4ebe04
call fcn.0043167c
push ecx
mov dword [esp], 0x4d6e90
call fcn.004013f0
mov dword [esp], 0x4e7c38
call fcn.004d5ad0
mov ecx, 0x4ebe04
call fcn.0043164c
mov dword [esp], 0x4ebe04
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7c40]
test al, al
jne 0x4d9919
mov dword [esp], 0x4e7c40
call fcn.004d5a00
test eax, eax
je 0x4d9919
mov dword [esp], ebx
mov ecx, 0x4ebe10
call fcn.0043167c
push edx
mov dword [esp], 0x4d6e94
call fcn.004013f0
mov dword [esp], 0x4e7c40
call fcn.004d5ad0
mov ecx, 0x4ebe10
call fcn.0043164c
mov dword [esp], 0x4ebe10
call fcn.00424ea0
call fcn.004d27a8
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d280c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7c58]
test al, al
jne 0x4d99ac
mov dword [esp], 0x4e7c58
call fcn.004d5a00
test eax, eax
je 0x4d99ac
mov dword [esp], ebx
mov ecx, 0x4ebe34
call fcn.0043167c
push eax
mov dword [esp], 0x4d6ea0
call fcn.004013f0
mov dword [esp], 0x4e7c58
call fcn.004d5ad0
mov ecx, 0x4ebe34
call fcn.0043164c
mov dword [esp], 0x4ebe34
call fcn.00424ea0
call fcn.004d2938
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7c78]
test al, al
jne 0x4d9a29
mov dword [esp], 0x4e7c78
call fcn.004d5a00
test eax, eax
je 0x4d9a29
mov dword [esp], ebx
mov ecx, 0x4ebe64
call fcn.0043167c
push eax
mov dword [esp], 0x4d6ea8
call fcn.004013f0
mov dword [esp], 0x4e7c78
call fcn.004d5ad0
mov ecx, 0x4ebe64
call fcn.0043164c
mov dword [esp], 0x4ebe64
call fcn.00424ea0
mov edi, ebx
mov esi, 0x4e7020
lea ebx, [ebp - 0x5c]
mov ecx, 0x39
rep movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x98], 0xf1f0f6fa
mov al, byte [0x4e7c80]
test al, al
jne 0x4d9a99
mov dword [esp], 0x4e7c80
call fcn.004d5a00
test eax, eax
je 0x4d9a99
mov dword [esp], ebx
mov ecx, 0x4ebe80
call fcn.00431544
push eax
mov dword [esp], 0x4d6eac
call fcn.004013f0
mov dword [esp], 0x4e7c80
call fcn.004d5ad0
mov ecx, 0x4ebe80
call fcn.00431514
mov dword [esp], 0x4ebe80
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d9acb
call fcn.004d2a00
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
jmp 0x4d9aeb
lea eax, [ebp - 0x98]
call eax
call fcn.004d299c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
jmp 0x4d9ab3
call fcn.004d2a64
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7ca0]
test al, al
jne 0x4d9b52
mov dword [esp], 0x4e7ca0
call fcn.004d5a00
test eax, eax
je 0x4d9b52
mov dword [esp], ebx
mov ecx, 0x4ebee4
call fcn.0043167c
push eax
mov dword [esp], 0x4d6ec8
call fcn.004013f0
mov dword [esp], 0x4e7ca0
call fcn.004d5ad0
mov ecx, 0x4ebee4
call fcn.0043164c
mov dword [esp], 0x4ebee4
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7cb0]
test al, al
jne 0x4d9bb9
mov dword [esp], 0x4e7cb0
call fcn.004d5a00
test eax, eax
je 0x4d9bb9
mov dword [esp], ebx
mov ecx, 0x4ebf40
call fcn.0043167c
push eax
mov dword [esp], 0x4d6ecc
call fcn.004013f0
mov dword [esp], 0x4e7cb0
call fcn.004d5ad0
mov ecx, 0x4ebf40
call fcn.0043164c
mov dword [esp], 0x4ebf40
call fcn.00424ea0
call fcn.004d2ac8
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7cc0]
test al, al
jne 0x4d9c36
mov dword [esp], 0x4e7cc0
call fcn.004d5a00
test eax, eax
je 0x4d9c36
mov dword [esp], ebx
mov ecx, 0x4ebf58
call fcn.0043167c
push edi
mov dword [esp], 0x4d6ed4
call fcn.004013f0
mov dword [esp], 0x4e7cc0
call fcn.004d5ad0
mov ecx, 0x4ebf58
call fcn.0043164c
mov dword [esp], 0x4ebf58
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7cc8]
test al, al
jne 0x4d9c9d
mov dword [esp], 0x4e7cc8
call fcn.004d5a00
test eax, eax
je 0x4d9c9d
mov dword [esp], ebx
mov ecx, 0x4ebf64
call fcn.0043167c
push esi
mov dword [esp], 0x4d6ed8
call fcn.004013f0
mov dword [esp], 0x4e7cc8
call fcn.004d5ad0
mov ecx, 0x4ebf64
call fcn.0043164c
mov dword [esp], 0x4ebf64
call fcn.00424ea0
call fcn.004d2b2c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov esi, 0x4e7020
mov ecx, 0x39
mov edi, ebx
mov dword [ebp - 0x98], 0x500fefe
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e7cd8]
test al, al
jne 0x4d9d20
mov dword [esp], 0x4e7cd8
call fcn.004d5a00
test eax, eax
je 0x4d9d20
mov dword [esp], ebx
mov ecx, 0x4ebf80
call fcn.00431544
push ecx
mov dword [esp], 0x4d6ee4
call fcn.004013f0
mov dword [esp], 0x4e7cd8
call fcn.004d5ad0
mov ecx, 0x4ebf80
call fcn.00431514
mov dword [esp], 0x4ebf80
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d9d5f
lea eax, [ebp - 0x12c]
mov ecx, ebx
mov dword [esp], eax
call fcn.004bfa90
push edx
lea eax, [ebp - 0x1a4]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00431304
jmp 0x4d9d7f
lea eax, [ebp - 0x98]
call eax
call fcn.004d2b90
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
jmp 0x4d9d3a
mov ecx, ebx
call fcn.004bbce0
lea eax, [ebp - 0x144]
mov ecx, ebx
mov dword [esp], eax
call fcn.004bfa90
push eax
lea eax, [ebp - 0x1ec]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00431304
mov ecx, ebx
call fcn.004bbce0
lea eax, [ebp - 0x18c]
mov ecx, ebx
mov dword [esp], eax
call fcn.004bfa90
push eax
lea eax, [ebp - 0x1d4]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00431304
mov ecx, ebx
call fcn.004bbce0
lea eax, [ebp - 0x15c]
mov ecx, ebx
mov dword [esp], eax
call fcn.004bfa90
push eax
lea eax, [ebp - 0x1bc]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00431304
mov ecx, ebx
call fcn.004bbce0
call fcn.004d2bf4
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d2c58
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d2cbc
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d2d20
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7d08]
test al, al
jne 0x4d9ead
mov dword [esp], 0x4e7d08
call fcn.004d5a00
test eax, eax
je 0x4d9ead
mov dword [esp], ebx
mov ecx, 0x4ebffc
call fcn.0043167c
push eax
mov dword [esp], 0x4d6f04
call fcn.004013f0
mov dword [esp], 0x4e7d08
call fcn.004d5ad0
mov ecx, 0x4ebffc
call fcn.0043164c
mov dword [esp], 0x4ebffc
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7d10]
test al, al
jne 0x4d9f17
mov dword [esp], 0x4e7d10
call fcn.004d5a00
test eax, eax
je 0x4d9f17
lea eax, [ebp - 0x5c]
mov ecx, 0x4ec008
mov dword [esp], eax
call fcn.0043167c
push eax
mov dword [esp], 0x4d6f0c
call fcn.004013f0
mov dword [esp], 0x4e7d10
call fcn.004d5ad0
mov ecx, 0x4ec008
call fcn.0043164c
mov dword [esp], 0x4ec008
call fcn.00424ea0
call fcn.004d2d84
mov ebx, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], ebx
call fcn.00424ea0
call fcn.004d2de8
mov ebx, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], ebx
call fcn.00424ea0
mov esi, 0x4e7020
mov ecx, 0x39
lea edi, [ebp - 0x5c]
mov dword [ebp - 0x98], 0x19100602
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e7d28]
test al, al
jne 0x4d9fb4
mov dword [esp], 0x4e7d28
call fcn.004d5a00
test eax, eax
je 0x4d9fb4
lea eax, [ebp - 0x5c]
mov ecx, 0x4ec040
mov dword [esp], eax
call fcn.00431544
push edi
mov dword [esp], 0x4d6f18
call fcn.004013f0
mov dword [esp], 0x4e7d28
call fcn.004d5ad0
mov ecx, 0x4ec040
lea ebx, [ebp - 0x98]
call fcn.00431514
mov dword [esp], 0x4ec040
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d9ff1
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7d38]
test al, al
jne 0x4da044
jmp 0x4da00b
call ebx
call fcn.004d2e4c
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
jmp 0x4d9fd4
mov dword [esp], 0x4e7d38
call fcn.004d5a00
test eax, eax
je 0x4da044
lea eax, [ebp - 0x5c]
mov ecx, 0x4ec08c
mov dword [esp], eax
call fcn.0043167c
push esi
mov dword [esp], 0x4d6f28
call fcn.004013f0
mov dword [esp], 0x4e7d38
call fcn.004d5ad0
mov ecx, 0x4ec08c
call fcn.0043164c
mov dword [esp], 0x4ec08c
call fcn.00424ea0
call fcn.004d2eb0
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7d48]
test al, al
jne 0x4da0c4
mov dword [esp], 0x4e7d48
call fcn.004d5a00
test eax, eax
je 0x4da0c4
lea eax, [ebp - 0x5c]
mov ecx, 0x4ec0a4
mov dword [esp], eax
call fcn.0043167c
push ecx
mov dword [esp], 0x4d6f34
call fcn.004013f0
mov dword [esp], 0x4e7d48
call fcn.004d5ad0
mov ecx, 0x4ec0a4
call fcn.0043164c
mov dword [esp], 0x4ec0a4
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7d50]
test al, al
jne 0x4da12e
mov dword [esp], 0x4e7d50
call fcn.004d5a00
test eax, eax
je 0x4da12e
lea eax, [ebp - 0x5c]
mov ecx, 0x4ec0b0
mov dword [esp], eax
call fcn.0043167c
push edx
mov dword [esp], 0x4d6f38
call fcn.004013f0
mov dword [esp], 0x4e7d50
call fcn.004d5ad0
mov ecx, 0x4ec0b0
call fcn.0043164c
mov dword [esp], 0x4ec0b0
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7d58]
test al, al
jne 0x4da198
mov dword [esp], 0x4e7d58
call fcn.004d5a00
test eax, eax
je 0x4da198
lea eax, [ebp - 0x5c]
mov ecx, 0x4ec0bc
mov dword [esp], eax
call fcn.0043167c
push eax
mov dword [esp], 0x4d6f3c
call fcn.004013f0
mov dword [esp], 0x4e7d58
call fcn.004d5ad0
mov ecx, 0x4ec0bc
call fcn.0043164c
mov dword [esp], 0x4ec0bc
call fcn.00424ea0
mov dword [ebp - 0x5c], 0xc1eb1542
mov dword [ebp - 0x58], 0x7c90ec48
mov byte [ebp - 0x54], 0x42
mov al, byte [0x4e7d60]
test al, al
jne 0x4da202
mov dword [esp], 0x4e7d60
call fcn.004d5a00
test eax, eax
je 0x4da202
lea eax, [ebp - 0x5c]
mov ecx, 0x4ec0c8
mov dword [esp], eax
call fcn.0043167c
push eax
mov dword [esp], 0x4d6f40
call fcn.004013f0
mov dword [esp], 0x4e7d60
call fcn.004d5ad0
mov ecx, 0x4ec0c8
call fcn.0043164c
mov dword [esp], 0x4ec0c8
call fcn.00424ea0
call fcn.004d2f14
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
call fcn.004d2f78
mov esi, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], esi
call fcn.00424ea0
mov esi, 0x4e7020
mov ecx, 0x39
lea edi, [ebp - 0x5c]
mov dword [ebp - 0x98], 0x2d200e06
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e7d78]
test al, al
jne 0x4da29f
mov dword [esp], 0x4e7d78
call fcn.004d5a00
test eax, eax
je 0x4da29f
lea eax, [ebp - 0x5c]
mov ecx, 0x4ec100
mov dword [esp], eax
call fcn.00431544
push eax
mov dword [esp], 0x4d6f4c
call fcn.004013f0
mov dword [esp], 0x4e7d78
call fcn.004d5ad0
mov ecx, 0x4ec100
call fcn.00431514
mov dword [esp], 0x4ec100
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4da32d
mov dword [esp], 0x4ee202
lea ecx, [ebp - 0x114]
call fcn.004c4214
push eax
mov eax, dword [ebp - 0x1ec]
lea ecx, [ebp - 0xe4]
mov esi, dword [ebp - 0x1e8]
mov ebx, dword [ebp - 0x110]
mov word [ebp - 0xdc], 0
mov dword [ebp - 0x210], eax
lea eax, [ebp - 0xdc]
mov edi, dword [ebp - 0x114]
lea edx, [esi + ebx]
mov dword [ebp - 0xe4], eax
xor eax, eax
mov dword [ebp - 0xcc], edx
mov dword [ebp - 0x214], edx
mov dword [ebp - 0xe0], eax
call fcn.004424a0
mov edx, dword [ebp - 0x214]
cmp eax, edx
jae 0x4da39d
jmp 0x4da34a
call ebx
call fcn.004d2fdc
mov ebx, eax
mov ecx, eax
call fcn.0043164c
mov dword [esp], ebx
call fcn.00424ea0
jmp 0x4da2b9
mov dword [esp + 4], ebx
lea ecx, [ebp - 0xe4]
mov dword [esp], edi
call fcn.004c1380
push edi
lea ecx, [ebp - 0xe4]
push edi
mov dword [esp + 4], esi
mov eax, dword [ebp - 0x210]
mov dword [esp], eax
call fcn.004c1380
push ebx
lea edi, [ebp - 0x114]
lea eax, [ebp - 0xe4]
push ebx
lea ebx, [ebp - 0xcc]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.004cff20
jmp 0x4da3f4