Function at 0x4cf181
Capabilities:
Contain obfuscated stackstrings
Enumerate processes

Disassembly:
push 0x804
mov eax, 0x55357c
call fcn.00513ea1
push 0x67
pop ecx
mov esi, str.TbgW9X9YvgFOnJzq2OdA4BAYmTB98rSxjJczKLf6RDHGNYodHLFrxs6E0gKo0qS9kQx6kCfZj1sW39cbeQw1GR6pbkCiW9tyr8drxAdLbbWTMNRKkOAGVIzKTx5CljrEqS0i96X9W8yQPLXRuc0PtjsRUzNCyMkXDyBqU9xsBn2aMPueEhsVK4WZtZBZEp5gCMkendNQCZreJAD6CZwEz9716EF6FziWaMncd9mZVgmEvrIF13MzZC96ftRloCdAzzma5eWvQdDY4bnujsO25kodDzi1P7gpSIltTpLtabNQ8iaLUiCKfNU2YgCpO9J4EIdF4TQCzpgZR1MIHSh07E1kYl9zhW5hf2OwUIjWOoaHc9dn6eOPDMkONf1rlB429hcWlZ62smD3vHvLJQIIY9qKJBAoG
lea edi, [ebp - 0x37c]
rep movsd dword es:[edi], dword [esi]
push 0x5a
xor ebx, ebx
pop ecx
movsw word es:[edi], word [esi]
mov esi, str.o7zRApkF5XjIhymAWrcwnQikVf1xvAKf8tGBoeXUxmyUxEkcAgTdKSRI4whXaKe0QkXQUh6pct0VpchGIln6jIp6gYBHHXsYQfqAQmIxGjC9MH9r0AmMh7EuvqmhSkEqAupSQ8vFJxQEsRcLh2S4oOTFJ6iWi3C7q2YJ35e4HcAmSzo3HmHWJ4OST5lKrzWy3ne40HWGV2eAvXfg7AEdnOyJ7wbZLG5dnbvmiZAU5wpvQWErc7pSvI3UTlWYxnFJgm7rL2FH9dG41ZitTu6xFy2vNflRNNjt3m4HQ4m7ANjS2ZGmwaIW94m5evo2pn9ZOdtiZ0VP4OMHhQzrBKfNXZZVwKtrxqCSJuc98xG
mov dword [ebp - 0x810], ebx
lea edi, [ebp - 0x1dc]
mov dword [ebp - 0x80c], ebx
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x808], ebx
lea eax, [ebp - 0x37c]
mov dword [ebp - 4], ebx
push eax
lea ecx, [ebp - 0x394]
call fcn.004057d0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x810]
call fcn.00408170
push ebx
push 1
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], bl
call fcn.004096c0
lea eax, [ebp - 0x1dc]
push eax
lea ecx, [ebp - 0x394]
call fcn.004057d0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x810]
call fcn.00408170
push ebx
push 1
lea ecx, [ebp - 0x394]
call fcn.004096c0
mov edi, ebx
mov dword [ebp - 0x7f8], ebx
mov dword [ebp - 0x7fc], edi
mov dword [ebp - 0x7f4], ebx
mov dword [ebp - 0x7f0], ebx
mov dword [ebp - 0x7ec], ebx
mov dword [ebp - 0x7e8], ebx
xor eax, eax
mov byte [ebp - 4], 4
mov esi, str.7348100521350725563058530933695823301037
mov dword [ebp - 0x398], 7
push esi
mov dword [ebp - 0x39c], ebx
mov word [ebp - 0x3ac], ax
call fcn.00500d29
pop ecx
push eax
push esi
lea ecx, [ebp - 0x3ac]
call fcn.00402650
lea eax, [ebp - 0x3ac]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push 1
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 4
call fcn.00402590
mov dword [ebp - 0x398], 7
mov dword [ebp - 0x39c], ebx
xor eax, eax
mov esi, str.0336716015350242416615146926493141592020
push esi
mov word [ebp - 0x3ac], ax
call fcn.00500d29
pop ecx
push eax
push esi
lea ecx, [ebp - 0x3ac]
call fcn.00402650
lea eax, [ebp - 0x3ac]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push 1
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 4
call fcn.00402590
xor eax, eax
mov dword [ebp - 0x398], 7
mov esi, str.0163916906344737094656174049282309655016
mov dword [ebp - 0x39c], ebx
push esi
mov word [ebp - 0x3ac], ax
call fcn.00500d29
pop ecx
push eax
push esi
lea ecx, [ebp - 0x3ac]
call fcn.00402650
lea eax, [ebp - 0x3ac]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push 1
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 4
call fcn.00402590
xor eax, eax
mov dword [ebp - 0x398], 7
mov esi, str.3651266507364737104623190054302310655016
mov dword [ebp - 0x39c], ebx
push esi
mov word [ebp - 0x3ac], ax
call fcn.00500d29
pop ecx
push eax
push esi
lea ecx, [ebp - 0x3ac]
call fcn.00402650
lea eax, [ebp - 0x3ac]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push 1
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 4
call fcn.00402590
xor eax, eax
mov dword [ebp - 0x398], 7
mov esi, str.792481101203270007343359233468424011395207480404
mov dword [ebp - 0x39c], ebx
push esi
mov word [ebp - 0x3ac], ax
call fcn.00500d29
pop ecx
push eax
push esi
lea ecx, [ebp - 0x3ac]
call fcn.00402650
mov byte [ebp - 4], 9
lea eax, [ebp - 0x3ac]
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push 1
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 4
call fcn.00402590
xor eax, eax
mov dword [ebp - 0x398], 7
mov esi, str.51484852431663424345654241453134
mov dword [ebp - 0x39c], ebx
push esi
mov word [ebp - 0x3ac], ax
call fcn.00500d29
pop ecx
push eax
push esi
lea ecx, [ebp - 0x3ac]
call fcn.00402650
lea eax, [ebp - 0x3ac]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push 1
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 4
call fcn.00402590
xor eax, eax
mov dword [ebp - 0x398], 7
mov esi, str.680539650467563812656341424647280725484912325621
mov dword [ebp - 0x39c], ebx
push esi
mov word [ebp - 0x3ac], ax
call fcn.00500d29
pop ecx
push eax
push esi
lea ecx, [ebp - 0x3ac]
call fcn.00402650
lea eax, [ebp - 0x3ac]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push 1
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 4
call fcn.00402590
xor eax, eax
mov dword [ebp - 0x398], 7
mov esi, str.1417073716111351084942590552456261253030
mov dword [ebp - 0x39c], ebx
push esi
mov word [ebp - 0x3ac], ax
call fcn.00500d29
pop ecx
push eax
push esi
lea ecx, [ebp - 0x3ac]
call fcn.00402650
lea eax, [ebp - 0x3ac]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push 1
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 4
call fcn.00402590
mov dword [ebp - 0x398], 7
xor eax, eax
mov dword [ebp - 0x39c], ebx
mov esi, str.3338556111363851072523254210302319655216
mov word [ebp - 0x3ac], ax
push esi
call fcn.00500d29
pop ecx
push eax
push esi
lea ecx, [ebp - 0x3ac]
call fcn.00402650
lea eax, [ebp - 0x3ac]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
xor esi, esi
mov byte [ebp - 4], 4
push ebx
inc esi
lea ecx, [ebp - 0x3ac]
push esi
call fcn.00402590
push ebx
push ebx
lea ecx, [ebp - 0x3ac]
mov dword [ebp - 0x39c], ebx
mov dword [ebp - 0x398], ebx
call fcn.00402590
push str.926664480746042415323750033655501608204603086332030804366746044020572525
lea ecx, [ebp - 0x3ac]
call fcn.00402600
lea eax, [ebp - 0x3ac]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 4
call fcn.00402590
push str.0536451012470525126663421626170206486565
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.225745291652564516094757101521156439002128295943
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.7362204144603154483653394440184248403147
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
mov byte [ebp - 4], 4
push ebx
push esi
lea ecx, [ebp - 0x394]
call fcn.00402590
push str.6761194615446318244026471968564711505729
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.22368049645463241165321012043146
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.305245055468191855241034552409006424090708447070
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.54161671422545360563323942461523
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.3214193504173552045051671150516063312828
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.512169621164152915262450034557001106292419645112
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.926591571565483007444031404415141126081419655025
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.17257327171367661136492805712552113640401128156660684740
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.96045258006657370455291100645125
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.162864414557384908575354415727351633093945373248
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.4242970168126051685915623459051409002222
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.8431502862222834623063281746192829306144
lea ecx, [ebp - 0x394]
call fcn.004024f0
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x394]
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.0801856241476250164565441655292216645109
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.632792034566044941020034446627494239104941286369
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.9333156003455639073508386926493141592020
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x20
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.54138139086523485341595153453248
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.523525391102416552440056076441586830695052443147
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.056079461166414428207132074041306339572228203147
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.973552152850250938617144546465163547711748504163
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x24
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.371268501264653116473313094568216556333920645130
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.6460971805306749211902251556436324305352
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.8022900915281018483822292651574964445355
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.955955690732642802346429404664356825483040581616
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x394]
push esi
call fcn.00402590
push str.7069600425413868710626327129396542082268
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x29
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.075399601133025215687118413547506726473139572020
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x2a
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.2345325911677143443650321157300619655224
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x2b
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.3211973024366266125814601858376870652300
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.9565641816550248212766391522651709294863
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.87578566102610161043553011334750102624203953002406664915
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
mov byte [ebp - 4], 4
push ebx
push esi
lea ecx, [ebp - 0x394]
call fcn.00402590
push str.3113986015267042196657484345064041451802
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x2f
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.516948411551713819676447115548624460284248403147
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x30
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
push str.622322500320140608453142
lea ecx, [ebp - 0x424]
call fcn.004024f0
lea eax, [ebp - 0x424]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 4
call fcn.00402590
push str.664561452440631815671210282064500744112628203147
lea ecx, [ebp - 0x40c]
call fcn.004024f0
lea eax, [ebp - 0x40c]
mov byte [ebp - 4], 0x32
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 4
call fcn.00402590
push str.39005907146015231435493929070163
lea ecx, [ebp - 0x3f4]
call fcn.004024f0
lea eax, [ebp - 0x3f4]
mov byte [ebp - 4], 0x33
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x3f4]
mov byte [ebp - 4], 4
call fcn.00402590
push str.273442424032403936321044153270476951246040042929
lea ecx, [ebp - 0x3dc]
call fcn.004024f0
lea eax, [ebp - 0x3dc]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 4
call fcn.00402590
push str.2762993010034255705038096665466866693309
lea ecx, [ebp - 0x46c]
call fcn.004024f0
lea eax, [ebp - 0x46c]
mov byte [ebp - 4], 0x35
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x46c]
mov byte [ebp - 4], 4
call fcn.00402590
push str.3857421057165358420662664256314404365843
lea ecx, [ebp - 0x484]
call fcn.004024f0
lea eax, [ebp - 0x484]
mov byte [ebp - 4], 0x36
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x484]
mov byte [ebp - 4], 4
call fcn.00402590
push str.1222092711364007640164166401176664014740
lea ecx, [ebp - 0x49c]
call fcn.004024f0
lea eax, [ebp - 0x49c]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x49c]
mov byte [ebp - 4], 4
call fcn.00402590
push str.76419316371364450705016447291031
lea ecx, [ebp - 0x4b4]
call fcn.004024f0
lea eax, [ebp - 0x4b4]
mov byte [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x4b4]
mov byte [ebp - 4], 4
call fcn.00402590
push str.412134452917630704176340166548000836534820650926
lea ecx, [ebp - 0x43c]
call fcn.004024f0
lea eax, [ebp - 0x43c]
mov byte [ebp - 4], 0x39
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 4
call fcn.00402590
push str.696596441551474336243714362463261151573036283147
lea ecx, [ebp - 0x454]
call fcn.004024f0
lea eax, [ebp - 0x454]
mov byte [ebp - 4], 0x3a
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x454]
mov byte [ebp - 4], 4
call fcn.00402590
push str.324721531108644942480041662264124235203019655029
lea ecx, [ebp - 0x3c4]
call fcn.004024f0
lea eax, [ebp - 0x3c4]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [ebp - 0x7f0]
call fcn.004270f0
push ebx
push esi
lea ecx, [ebp - 0x3c4]
mov byte [ebp - 4], 4
call fcn.00402590
push 0x22c
lea eax, [ebp - 0x7e4]
mov dword [ebp - 0x800], ebx
push ebx
push eax
call fcn.004f0ae0
add esp, 0xc
push ebx
push 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov esi, eax
cmp esi, 0xffffffff
je 0x4d02d9
lea eax, [ebp - 0x7e4]
mov dword [ebp - 0x7e4], 0x22c
push eax
push esi
call sub.KERNEL32.dll_Process32FirstW
test eax, eax
je 0x4d0023
lea eax, [ebp - 0x7c0]
push eax
lea ecx, [ebp - 0x3c4]
call fcn.004024f0
lea eax, [ebp - 0x3c4]
mov byte [ebp - 4], 0x3c
push eax
lea ecx, [ebp - 0x7fc]
call fcn.004270f0
push ebx
push 1
lea ecx, [ebp - 0x3c4]
mov byte [ebp - 4], 4
call fcn.00402590
lea eax, [ebp - 0x7e4]
push eax
push esi
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x4cffd2
mov edi, dword [ebp - 0x7fc]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x7f0]
cmp esi, dword [ebp - 0x7ec]
je 0x4d02d3
cmp dword [esi + 0x14], 8
jb 0x4d0046
mov eax, dword [esi]
jmp 0x4d0048
mov eax, esi
push eax
lea ecx, [ebp - 0x394]
call fcn.004024f0
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0x424]
push eax
call fcn.004da65a
pop ecx
pop ecx
lea eax, [ebp - 0x424]
mov byte [ebp - 4], 0x3e
push eax
lea ecx, [ebp - 0x40c]
call fcn.00456780
lea ecx, [ebp - 0x5b8]
mov byte [ebp - 4], 0x3f
call fcn.004d580c
lea eax, [ebp - 0x40c]
mov byte [ebp - 4], 0x40
push eax
lea eax, [ebp - 0x3ac]
push eax
lea ecx, [ebp - 0x5b8]
call fcn.004d582e
push 0x64
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x41
push ebx
push eax
call fcn.004f0ae0
add esp, 0xc
mov dword [ebp - 0x804], 0x64
cmp dword [esi + 0x14], 8
jb 0x4d00d6
mov eax, dword [esi]
jmp 0x4d00d8
mov eax, esi
push eax
lea ecx, [ebp - 0x3c4]
call fcn.004024f0
lea eax, [ebp - 0x3c4]
mov byte [ebp - 4], 0x42
push eax
lea eax, [ebp - 0x43c]
push eax
call fcn.004da65a
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x3c4]
mov byte [ebp - 4], 0x44
call fcn.00402590
cmp dword [ebp - 0x398], 0x10
lea ecx, [ebp - 0x804]
push ecx
lea ecx, [ebp - 0x74]
push ecx
push dword [ebp - 0x39c]
lea eax, [ebp - 0x3ac]
cmovae eax, dword [ebp - 0x3ac]
push eax
call fcn.004d5267
add esp, 0x10
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x454]
push eax
call fcn.004057d0
lea eax, [ebp - 0x454]
mov byte [ebp - 4], 0x45
push eax
lea eax, [ebp - 0x3f4]
push eax
call fcn.004da339
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x454]
mov byte [ebp - 4], 0x47
call fcn.004096c0
cmp dword [ebp - 0x3e4], 0
sete al
test al, al
jne 0x4d01f5
mov eax, dword [ebp - 0x7fc]
cmp eax, dword [ebp - 0x7f8]
je 0x4d01f5
cmp dword [edi + 0x14], 8
jb 0x4d019d
mov eax, dword [edi]
jmp 0x4d019f
mov eax, edi
push eax
lea ecx, [ebp - 0x3dc]
call fcn.004024f0
lea eax, [ebp - 0x3dc]
mov byte [ebp - 4], 0x48
push eax
call fcn.004da491
pop ecx
push ebx
lea eax, [ebp - 0x3f4]
push eax
lea ecx, [ebp - 0x3dc]
call fcn.004d0341
lea ecx, [ebp - 0x3dc]
push ebx
cmp eax, 0xffffffff
jg 0x4d026b
push 1
mov byte [ebp - 4], 0x47
call fcn.00402590
add edi, 0x18
cmp edi, dword [ebp - 0x7f8]
jne 0x4d0193
xor edi, edi
lea ecx, [ebp - 0x3f4]
push ebx
inc edi
push edi
call fcn.00402590
push ebx
push edi
lea ecx, [ebp - 0x43c]
call fcn.004096c0
push ebx
push edi
lea ecx, [ebp - 0x3ac]
call fcn.004096c0
lea ecx, [ebp - 0x5b8]
call fcn.00402160
push ebx
push edi
lea ecx, [ebp - 0x40c]
call fcn.004096c0
push ebx
push edi
lea ecx, [ebp - 0x424]
call fcn.004096c0
push ebx
push edi
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 4
call fcn.00402590
add esi, 0x18
cmp esi, dword [ebp - 0x7ec]
je 0x4d02d3
mov edi, dword [ebp - 0x7fc]
jmp 0x4d003c
xor esi, esi
inc esi
push esi
mov dword [ebp - 0x800], esi
call fcn.00402590
push ebx
push esi
lea ecx, [ebp - 0x3f4]
call fcn.00402590
push ebx
push esi
lea ecx, [ebp - 0x43c]
call fcn.004096c0
push ebx
push esi
lea ecx, [ebp - 0x3ac]
call fcn.004096c0
lea ecx, [ebp - 0x5b8]
call fcn.00402160
push ebx
push esi
lea ecx, [ebp - 0x40c]
call fcn.004096c0
push ebx
push esi
lea ecx, [ebp - 0x424]
call fcn.004096c0
push ebx
push esi
lea ecx, [ebp - 0x394]
call fcn.00402590
mov ebx, dword [ebp - 0x800]
lea ecx, [ebp - 0x7f0]
call fcn.004d0302
lea ecx, [ebp - 0x7fc]
call fcn.004d0302
lea ecx, [ebp - 0x810]
call fcn.0047920e
mov eax, ebx
call fcn.00513e4b
ret