Function at 0x4365c0
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5206ea
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb0
push ebx
push ebp
xor eax, eax
push esi
push edi
mov ebp, ecx
mov dword [esp + 0xac], 0x530160
mov word [esp + 0xb0], 0xffff
mov word [esp + 0xb2], ax
mov dword [esp + 0xc8], eax
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push 6
push 0x549e30
call fcn.004f58e0
mov ecx, dword [0x5540a8]
call fcn.004fa1d0
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push 6
push 0x549e28
call fcn.004f58e0
mov ecx, dword [0x5540a8]
call fcn.004fa410
mov ecx, dword [0x5540a8]
lea eax, [esp + 0xac]
push eax
call fcn.004fa550
cmp ax, 0xffff
je 0x438b8f
movsx eax, word [esp + 0xb0]
sub eax, 0
je 0x437d81
dec eax
je 0x43735e
dec eax
jne 0x43660d
push 8
push 0x548dac
lea ecx, [esp + 0x30]
call fcn.004f58e0
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc8], 0x3a
call fcn.004f5840
lea ecx, [esp + 0x60]
mov byte [esp + 0xc8], 0x3b
call fcn.004f5840
push 0
push 0
push ecx
mov byte [esp + 0xd4], 0x3c
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x3d
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549e20
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x3c
call fcn.004f91a0
push 6
push 0x5482c0
lea ecx, [esp + 0x30]
call fcn.004f5de0
lea ecx, [esp + 0x28]
push ecx
mov ecx, ebp
call fcn.004d3100
xor bl, bl
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0
call fcn.004f5870
lea edx, [esp + 0x34]
lea eax, [esp + 0x30]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
mov byte [esp + 0xdc], 0x3e
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 0x3c
call fcn.00435de0
test al, al
je 0x436794
lea ecx, [esp + 0x2c]
call fcn.004f5d00
cmp ax, 0x32
jle 0x436794
push 0x1c
lea ecx, [esp + 0x30]
call fcn.004f5b60
and eax, 0xff
lea eax, [eax + eax*2]
shl eax, 2
cdq
and edx, 0xf
add eax, edx
sar eax, 4
sub eax, 0x28
cmp eax, 0x3c
jg 0x43679d
inc bl
cmp bl, 5
jb 0x43671d
jmp 0x4367a6
cmp bl, 5
jb 0x436ca6
push 0
push 4
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x3f
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x549e18
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x3c
call fcn.004f91a0
cmp ax, 4
jne 0x436828
lea ecx, [esp + 0x60]
mov byte [esp + 0xc8], 0x3b
call fcn.004f5980
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc8], 0x3a
call fcn.004f5980
lea ecx, [esp + 0x28]
mov byte [esp + 0xc8], 0
call fcn.004f5980
jmp 0x43660d
mov cl, byte [esp + 0x1e]
mov edi, 0x554048
mov byte [esp + 0x3c], cl
or ecx, 0xffffffff
xor eax, eax
xor esi, esi
xor edx, edx
mov dword [esp + 0x44], esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x40], edx
mov ebx, ecx
mov dword [esp + 0x48], esi
cmp ebx, 0xfffffffd
jbe 0x43688d
call fcn.0051414b
mov edx, dword [esp + 0x40]
xor ecx, ecx
cmp edx, ecx
je 0x436887
mov al, byte [edx - 1]
test al, al
je 0x436887
cmp al, 0xff
je 0x436887
cmp ebx, ecx
jne 0x4368b4
dec al
mov byte [edx - 1], al
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], ecx
jmp 0x4368e5
mov esi, dword [esp + 0x48]
jmp 0x43688f
xor ecx, ecx
cmp ebx, ecx
jne 0x4368a0
push 1
lea ecx, [esp + 0x40]
call fcn.004013e0
jmp 0x4368e5
cmp esi, 0x1f
ja 0x4368a9
cmp esi, ebx
jae 0x4368c2
push 1
lea ecx, [esp + 0x40]
call fcn.004013e0
push ebx
lea ecx, [esp + 0x40]
call fcn.00401a80
mov edx, dword [esp + 0x40]
mov ecx, ebx
mov edi, edx
mov edx, ecx
mov esi, 0x554048
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x40]
mov dword [esp + 0x44], ebx
mov byte [eax + ebx], 0
mov cl, byte [0x554048]
xor edx, edx
mov dword [esp + 0x95], edx
mov byte [esp + 0xc8], 0x40
mov dword [esp + 0x99], edx
mov byte [esp + 0x94], cl
mov byte [esp + 0x9d], dl
mov edi, 0x548aa8
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x94]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 1
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0
call fcn.004f5870
lea ecx, [esp + 0x34]
lea edx, [esp + 0x30]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
mov byte [esp + 0xdc], 0x41
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 0x40
call fcn.00435de0
test al, al
je 0x4369cf
lea ecx, [esp + 0x2c]
call fcn.004f5d00
cmp ax, 0x32
jle 0x4369cf
push 0x1c
lea ecx, [esp + 0x30]
call fcn.004f5b60
and eax, 0xff
sub esp, 8
lea ecx, [esp + 0x9c]
lea eax, [eax + eax*2]
shl eax, 2
mov dword [esp + 0x38], eax
fild dword [esp + 0x38]
fmul qword [0x5302b0]
fsub qword [0x530198]
fstp qword [esp]
push str._.2f
push ecx
call fcn.0051497a
add esp, 0x10
lea edi, [esp + 0x94]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, ecx
cmp ebx, 0xfffffffd
jbe 0x4369ec
call fcn.0051414b
mov edi, dword [esp + 0x40]
xor esi, esi
cmp edi, esi
je 0x436a0c
mov al, byte [edi - 1]
test al, al
je 0x436a0c
cmp al, 0xff
je 0x436a0c
cmp ebx, esi
jne 0x436a57
dec al
mov byte [edi - 1], al
jmp 0x436a31
cmp ebx, esi
jne 0x436a3f
cmp edi, esi
je 0x436a31
mov al, byte [edi - 1]
lea ecx, [edi - 1]
test al, al
je 0x436a28
cmp al, 0xff
je 0x436a28
dec al
mov byte [ecx], al
jmp 0x436a31
push ecx
call fcn.00514140
add esp, 4
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
jmp 0x436a8a
mov eax, dword [esp + 0x48]
cmp eax, 0x1f
ja 0x436a4c
cmp eax, ebx
jae 0x436a65
push 1
lea ecx, [esp + 0x40]
call fcn.004013e0
push ebx
lea ecx, [esp + 0x40]
call fcn.00401a80
mov edi, dword [esp + 0x40]
mov ecx, ebx
lea esi, [esp + 0x94]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x40]
mov dword [esp + 0x44], ebx
xor esi, esi
mov byte [eax + ebx], 0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x549e10
call fcn.004f58e0
mov ecx, dword [0x5540b4]
call fcn.004ff740
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x549e08
call fcn.004f58e0
mov ecx, dword [0x5540b4]
call fcn.004ff8c0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x549e00
call fcn.004f58e0
sub esp, 0x10
lea edx, [esp + 0x50]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
mov byte [esp + 0xe0], 0x42
call fcn.0041fc70
push ecx
mov byte [esp + 0xe0], 0x43
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x549df8
call fcn.004f58e0
mov ecx, dword [0x5540b4]
mov byte [esp + 0xe0], 0x40
call fcn.004ffc60
mov ecx, dword [0x5540b4]
call fcn.004ffe70
test ax, ax
jne 0x436911
push 1
push ecx
xor esi, esi
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004f5870
lea eax, [esp + 0x34]
lea edx, [esp + 0x30]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0xdc], 0x44
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 0x40
call fcn.00435de0
test al, al
je 0x436d7c
lea ecx, [esp + 0x2c]
call fcn.004f5d00
cmp ax, 0x32
jl 0x436d7c
push 0x1c
lea ecx, [esp + 0x30]
call fcn.004f5b60
and eax, 0xff
lea eax, [eax + eax*2]
shl eax, 2
cdq
and edx, 0xf
add eax, edx
sar eax, 4
sub eax, 0x28
cmp eax, 0x46
jg 0x436c6d
push esi
push 4
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x46
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549df0
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x40
call fcn.004f91a0
cmp ax, 4
jne 0x436c6d
mov eax, dword [esp + 0x40]
cmp eax, esi
je 0x436c29
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x436c20
cmp al, 0xff
je 0x436c20
dec al
mov byte [ecx], al
jmp 0x436c29
push ecx
call fcn.00514140
add esp, 4
lea ecx, [esp + 0x60]
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
mov byte [esp + 0xc8], 0x3b
call fcn.004f5980
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc8], 0x3a
call fcn.004f5980
lea ecx, [esp + 0x28]
mov byte [esp + 0xc8], 0
call fcn.004f5980
jmp 0x43660d
mov eax, dword [esp + 0x40]
mov byte [esp + 0xc8], 0x3c
cmp eax, esi
je 0x436c9a
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x436c91
cmp al, 0xff
je 0x436c91
dec al
mov byte [ecx], al
jmp 0x436c9a
push ecx
call fcn.00514140
add esp, 4
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
xor esi, esi
push esi
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x47
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549de8
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x3c
call fcn.004f91a0
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push 8
push 0x548fa4
lea ecx, [esp + 0x30]
call fcn.004f5de0
push 8
push 0x548fb0
lea ecx, [esp + 0x68]
call fcn.004f5de0
lea eax, [esp + 0x28]
mov ecx, ebp
push eax
call fcn.004d3100
lea ecx, [esp + 0x60]
push ecx
mov ecx, ebp
call fcn.004d3100
xor bl, bl
push 1
push ecx
lea edx, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.004f5850
lea eax, [esp + 0x34]
lea edx, [esp + 0x30]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0xdc], 0x48
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 0x3c
call fcn.00435de0
test al, al
jne 0x436dc4
inc bl
cmp bl, 5
jb 0x436d2f
jmp 0x436dc9
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x45
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x5493d0
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x40
call fcn.004f91a0
jmp 0x436c04
cmp bl, 5
jb 0x436e44
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x49
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549de0
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x3c
call fcn.004f91a0
lea ecx, [esp + 0x60]
mov byte [esp + 0xc8], 0x3b
call fcn.004f5980
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc8], 0x3a
call fcn.004f5980
lea ecx, [esp + 0x28]
mov byte [esp + 0xc8], 0
call fcn.004f5980
jmp 0x43660d
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x4a
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549dd8
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x3c
call fcn.004f91a0
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x4b
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549dd0
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x3c
call fcn.004f91a0
push esi
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x4c
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549dc8
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x3c
call fcn.004f91a0
push 8
push 0x548fbc
lea ecx, [esp + 0x30]
call fcn.004f5de0
lea eax, [esp + 0x28]
mov ecx, ebp
push eax
call fcn.004d3100
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004f5870
lea ecx, [esp + 0x34]
lea edx, [esp + 0x30]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0xdc], 0x4d
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 0x3c
call fcn.00435de0
push 7
push 0x5493a8
lea ecx, [esp + 0x30]
call fcn.004f5de0
lea eax, [esp + 0x28]
mov ecx, ebp
push eax
call fcn.004d3100
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004f5870
lea ecx, [esp + 0x34]
lea edx, [esp + 0x30]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0xdc], 0x4e
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 0x3c
call fcn.00435de0
push esi
push 4
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x4f
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549dc0
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x3c
call fcn.004f91a0
cmp ax, 4
jne 0x43703d
lea ecx, [esp + 0x60]
mov byte [esp + 0xc8], 0x3b
call fcn.004f5980
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc8], 0x3a
call fcn.004f5980
lea ecx, [esp + 0x28]
mov byte [esp + 0xc8], 0
call fcn.004f5980
jmp 0x43660d
push 7
push 0x548828
lea ecx, [esp + 0x30]
call fcn.004f5de0
lea eax, [esp + 0x28]
mov ecx, ebp
push eax
call fcn.004d3100
mov cl, byte [esp + 0x1e]
mov edi, 0x554048
mov byte [esp + 0x78], cl
or ecx, 0xffffffff
xor eax, eax
xor edx, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x7c], edx
mov ebx, ecx
mov dword [esp + 0x80], esi
cmp ebx, 0xfffffffd
mov dword [esp + 0x84], esi
jbe 0x4370bd
call fcn.0051414b
mov edx, dword [esp + 0x7c]
xor edi, edi
cmp edx, edi
je 0x4370b4
mov al, byte [edx - 1]
test al, al
je 0x4370b4
cmp al, 0xff
je 0x4370b4
cmp ebx, edi
jne 0x437130
dec al
mov byte [edx - 1], al
jmp 0x4370e2
mov esi, dword [esp + 0x84]
jmp 0x4370bf
xor edi, edi
cmp ebx, edi
jne 0x4370f6
cmp edx, edi
je 0x4370e2
mov al, byte [edx - 1]
dec edx
test al, al
je 0x4370d9
cmp al, 0xff
je 0x4370d9
dec al
mov byte [edx], al
jmp 0x4370e2
push edx
call fcn.00514140
add esp, 4
mov dword [esp + 0x7c], edi
mov dword [esp + 0x80], edi
mov dword [esp + 0x84], edi
jmp 0x437164
cmp esi, 0x1f
ja 0x4370ff
cmp esi, ebx
jae 0x43713e
cmp edx, edi
je 0x43711e
mov al, byte [edx - 1]
dec edx
test al, al
je 0x437115
cmp al, 0xff
je 0x437115
dec al
mov byte [edx], al
jmp 0x43711e
push edx
call fcn.00514140
add esp, 4
mov dword [esp + 0x7c], edi
mov dword [esp + 0x80], edi
mov dword [esp + 0x84], edi
push ebx
lea ecx, [esp + 0x7c]
call fcn.00401a80
mov edx, dword [esp + 0x7c]
mov ecx, ebx
mov edi, edx
mov edx, ecx
mov esi, 0x554048
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x80], ebx
mov byte [eax + ebx], 0
mov cl, byte [0x554048]
xor edx, edx
mov dword [esp + 0xb5], edx
mov byte [esp + 0xc8], 0x50
mov dword [esp + 0xb9], edx
mov byte [esp + 0xb4], cl
mov byte [esp + 0xbd], dl
mov edi, 0x548aa8
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0xb4]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 1
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0
call fcn.004f5870
lea ecx, [esp + 0x34]
lea edx, [esp + 0x30]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0xdc], 0x51
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 0x50
call fcn.00435de0
test al, al
je 0x437253
lea ecx, [esp + 0x2c]
call fcn.004f5d00
cmp ax, 9
jne 0x437253
push 6
lea ecx, [esp + 0x30]
call fcn.004f5b60
xor ebx, ebx
push 7
lea ecx, [esp + 0x30]
mov bh, al
call fcn.004f5b60
and eax, 0xff
sub esp, 8
or ebx, eax
lea eax, [esp + 0xbc]
mov dword [esp + 0x38], ebx
fild dword [esp + 0x38]
fmul qword [0x530200]
fstp qword [esp]
push str._.2f
push eax
call fcn.0051497a
add esp, 0x10
lea ecx, [esp + 0xb4]
push ecx
lea ecx, [esp + 0x7c]
call fcn.0041fe80
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x549db8
call fcn.004f58e0
mov ecx, dword [0x5540b4]
call fcn.004ff740
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x549e08
call fcn.004f58e0
mov ecx, dword [0x5540b4]
call fcn.004ff8c0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x549db0
call fcn.004f58e0
sub esp, 0x10
lea edx, [esp + 0x8c]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
mov byte [esp + 0xe0], 0x52
call fcn.0041fc70
push ecx
mov byte [esp + 0xe0], 0x53
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x549da8
call fcn.004f58e0
mov ecx, dword [0x5540b4]
mov byte [esp + 0xe0], 0x50
call fcn.004ffc60
mov ecx, dword [0x5540b4]
call fcn.004ffe70
test ax, ax
jne 0x437190
lea ecx, [esp + 0x78]
mov byte [esp + 0xc8], 0x3c
call fcn.004010f0
lea ecx, [esp + 0x60]
mov byte [esp + 0xc8], 0x3b
call fcn.004f5980
lea ecx, [esp + 0x2c]
mov byte [esp + 0xc8], 0x3a
call fcn.004f5980
lea ecx, [esp + 0x28]
mov byte [esp + 0xc8], 0
call fcn.004f5980
jmp 0x43660d
push 8
push 0x548dac
lea ecx, [esp + 0x3c]
call fcn.004f58e0
lea ecx, [esp + 0x24]
mov byte [esp + 0xc8], 0x22
call fcn.004f5840
lea ecx, [esp + 0x5c]
mov byte [esp + 0xc8], 0x23
call fcn.004f5840
push 0
push 0
push ecx
mov byte [esp + 0xd4], 0x24
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x25
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549da0
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x24
call fcn.004f91a0
xor bl, bl
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0
call fcn.004f5870
lea eax, [esp + 0x2c]
lea edx, [esp + 0x3c]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0xdc], 0x26
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 0x24
call fcn.00435de0
test al, al
je 0x43748a
lea ecx, [esp + 0x24]
call fcn.004f5d00
cmp ax, 6
jl 0x43748a
lea ecx, [esp + 0x24]
call fcn.004f5d00
movsx eax, ax
sub eax, 6
push 4
cdq
and edx, 3
lea ecx, [esp + 0x28]
add eax, edx
mov esi, eax
sar esi, 2
call fcn.004f5b60
and eax, 0xff
cmp eax, esi
jge 0x43746e
push 4
lea ecx, [esp + 0x28]
call fcn.004f5b60
and eax, 0xff
jmp 0x437486
lea ecx, [esp + 0x24]
call fcn.004f5d00
movsx eax, ax
sub eax, 6
cdq
and edx, 3
add eax, edx
sar eax, 2
test eax, eax
je 0x437497
inc bl
cmp bl, 5
jb 0x4373de
jmp 0x43749c
cmp bl, 5
jb 0x4374ea
push 0
push 4
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x27
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d98
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x24
call fcn.004f91a0
cmp ax, 4
je 0x437d49
push 0
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x28
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549e20
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x24
call fcn.004f91a0
push 6
push 0x5482c0
lea ecx, [esp + 0x3c]
call fcn.004f5de0
lea eax, [esp + 0x34]
mov ecx, ebp
push eax
call fcn.004d3100
xor bl, bl
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0
call fcn.004f5870
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x3c]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0xdc], 0x29
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 0x24
call fcn.00435de0
test al, al
je 0x4375c3
lea ecx, [esp + 0x24]
call fcn.004f5d00
cmp ax, 0x32
jle 0x4375c3
push 0x1c
lea ecx, [esp + 0x28]
call fcn.004f5b60
and eax, 0xff
lea eax, [eax + eax*2]
shl eax, 2
cdq
and edx, 0xf
add eax, edx
sar eax, 4
sub eax, 0x28
cmp eax, 0x46
jg 0x4375cc
inc bl
cmp bl, 5
jb 0x43754c
jmp 0x4375d5
cmp bl, 5
jb 0x437a41
push 0
push 4
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x2a
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d90
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x24
call fcn.004f91a0
cmp ax, 4
je 0x437d49
mov al, byte [esp + 0x1e]
mov edi, 0x554048
mov byte [esp + 0x4c], al
or ecx, 0xffffffff
xor eax, eax
xor esi, esi
xor edx, edx
mov dword [esp + 0x54], esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x50], edx
mov ebx, ecx
mov dword [esp + 0x58], esi
cmp ebx, 0xfffffffd
jbe 0x437682
call fcn.0051414b
mov edx, dword [esp + 0x50]
test edx, edx
je 0x43767e
mov al, byte [edx - 1]
test al, al
je 0x43767e
cmp al, 0xff
je 0x43767e
test ebx, ebx
jne 0x4376a7
dec al
push ebx
lea ecx, [esp + 0x50]
mov byte [edx - 1], al
call fcn.004013e0
jmp 0x4376d8
mov esi, dword [esp + 0x58]
test ebx, ebx
jne 0x437693
push 1
lea ecx, [esp + 0x50]
call fcn.004013e0
jmp 0x4376d8
cmp esi, 0x1f
ja 0x43769c
cmp esi, ebx
jae 0x4376b5
push 1
lea ecx, [esp + 0x50]
call fcn.004013e0
push ebx
lea ecx, [esp + 0x50]
call fcn.00401a80
mov edx, dword [esp + 0x50]
mov ecx, ebx
mov edi, edx
mov edx, ecx
mov esi, 0x554048
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x50]
mov dword [esp + 0x54], ebx
mov byte [ebx + eax], 0
mov cl, byte [0x554048]
xor edx, edx
mov dword [esp + 0xa1], edx
mov byte [esp + 0xc8], 0x2b
mov dword [esp + 0xa5], edx
mov byte [esp + 0xa0], cl
mov byte [esp + 0xa9], dl
mov edi, 0x548aa8
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0xa0]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 1
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0
call fcn.004f5870
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x3c]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0xdc], 0x2c
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 0x2b
call fcn.00435de0
test al, al
je 0x4377c2
lea ecx, [esp + 0x24]
call fcn.004f5d00
cmp ax, 0x32
jle 0x4377c2
push 0x1c
lea ecx, [esp + 0x28]
call fcn.004f5b60
and eax, 0xff
sub esp, 8
lea ecx, [esp + 0xa8]
lea eax, [eax + eax*2]
shl eax, 2
mov dword [esp + 0x38], eax
fild dword [esp + 0x38]
fmul qword [0x5302b0]
fsub qword [0x530198]
fstp qword [esp]
push str._.2f
push ecx
call fcn.0051497a
add esp, 0x10
lea edi, [esp + 0xa0]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, ecx
cmp ebx, 0xfffffffd
jbe 0x4377df
call fcn.0051414b
mov edi, dword [esp + 0x50]
xor esi, esi
cmp edi, esi
je 0x43780b
mov al, byte [edi - 1]
test al, al
je 0x43780b
cmp al, 0xff
je 0x43780b
cmp ebx, esi
jne 0x437834
dec al
mov byte [edi - 1], al
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], esi
jmp 0x437867
cmp ebx, esi
jne 0x43781c
push 1
lea ecx, [esp + 0x50]
call fcn.004013e0
jmp 0x437867
mov eax, dword [esp + 0x58]
cmp eax, 0x1f
ja 0x437829
cmp eax, ebx
jae 0x437842
push 1
lea ecx, [esp + 0x50]
call fcn.004013e0
push ebx
lea ecx, [esp + 0x50]
call fcn.00401a80
mov edi, dword [esp + 0x50]
mov ecx, ebx
lea esi, [esp + 0xa0]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x50]
mov dword [esp + 0x54], ebx
xor esi, esi
mov byte [ebx + eax], 0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x549e10
call fcn.004f58e0
mov ecx, dword [0x5540b4]
call fcn.004ff740
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x549e08
call fcn.004f58e0
mov ecx, dword [0x5540b4]
call fcn.004ff8c0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x549e00
call fcn.004f58e0
sub esp, 0x10
lea edx, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
mov byte [esp + 0xe0], 0x2d
call fcn.0041fc70
push ecx
mov byte [esp + 0xe0], 0x2e
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x549df8
call fcn.004f58e0
mov ecx, dword [0x5540b4]
mov byte [esp + 0xe0], 0x2b
call fcn.004ffc60
mov ecx, dword [0x5540b4]
call fcn.004ffe70
test ax, ax
jne 0x437704
push 1
push ecx
xor esi, esi
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004f5870
lea eax, [esp + 0x2c]
lea edx, [esp + 0x3c]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0xdc], 0x2f
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 0x2b
call fcn.00435de0
test al, al
je 0x437b1b
lea ecx, [esp + 0x24]
call fcn.004f5d00
cmp ax, 0x32
jl 0x437b1b
push 0x1c
lea ecx, [esp + 0x28]
call fcn.004f5b60
and eax, 0xff
lea eax, [eax + eax*2]
shl eax, 2
cdq
and edx, 0xf
add eax, edx
sar eax, 4
sub eax, 0x28
cmp eax, 0x46
jg 0x437a08
push esi
push 4
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x31
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d88
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x2b
call fcn.004f91a0
cmp ax, 4
jne 0x437a08
mov eax, dword [esp + 0x50]
cmp eax, esi
je 0x437b83
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x437b7a
cmp al, 0xff
je 0x437b7a
dec al
mov byte [ecx], al
jmp 0x437b83
mov eax, dword [esp + 0x50]
mov byte [esp + 0xc8], 0x24
cmp eax, esi
je 0x437a35
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x437a2c
cmp al, 0xff
je 0x437a2c
dec al
mov byte [ecx], al
jmp 0x437a35
push ecx
call fcn.00514140
add esp, 4
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], esi
push 0
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x32
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d80
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x24
call fcn.004f91a0
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push 8
push 0x548f80
lea ecx, [esp + 0x3c]
call fcn.004f5de0
push 8
push 0x548f8c
lea ecx, [esp + 0x64]
call fcn.004f5de0
lea eax, [esp + 0x34]
mov ecx, ebp
push eax
call fcn.004d3100
lea ecx, [esp + 0x5c]
push ecx
mov ecx, ebp
call fcn.004d3100
xor bl, bl
push 1
push ecx
lea edx, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.004f5850
lea eax, [esp + 0x2c]
lea edx, [esp + 0x3c]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0xdc], 0x33
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 0x24
call fcn.00435de0
test al, al
jne 0x437b94
inc bl
cmp bl, 5
jb 0x437aca
jmp 0x437b99
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x30
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x5493d0
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x2b
call fcn.004f91a0
mov eax, dword [esp + 0x50]
cmp eax, esi
je 0x437b83
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x437b7a
cmp al, 0xff
je 0x437b7a
dec al
mov byte [ecx], al
jmp 0x437b83
push ecx
call fcn.00514140
add esp, 4
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], esi
jmp 0x437d49
cmp bl, 5
jb 0x437bcb
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x34
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d78
jmp 0x437d32
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x35
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d70
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x24
call fcn.004f91a0
push 0
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x36
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d68
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x24
call fcn.004f91a0
push 8
push 0x548f98
lea ecx, [esp + 0x3c]
call fcn.004f5de0
lea eax, [esp + 0x34]
mov ecx, ebp
push eax
call fcn.004d3100
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0
call fcn.004f5870
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x3c]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0xdc], 0x37
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 0x24
call fcn.00435de0
push 7
push 0x549340
lea ecx, [esp + 0x3c]
call fcn.004f5de0
lea eax, [esp + 0x34]
mov ecx, ebp
push eax
call fcn.004d3100
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0
call fcn.004f5870
mov byte [esp + 0xd0], 0x38
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x3c]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 0x24
call fcn.00435de0
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x39
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d60
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0x24
call fcn.004f91a0
lea ecx, [esp + 0x5c]
mov byte [esp + 0xc8], 0x23
call fcn.004f5980
lea ecx, [esp + 0x24]
mov byte [esp + 0xc8], 0x22
call fcn.004f5980
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], 0
call fcn.004f5980
jmp 0x43660d
push 8
push 0x548dac
lea ecx, [esp + 0x28]
call fcn.004f58e0
lea ecx, [esp + 0x18]
mov byte [esp + 0xc8], 1
call fcn.004f5840
lea ecx, [esp + 0x38]
mov byte [esp + 0xc8], 2
call fcn.004f5840
push 0
push 0
push ecx
mov byte [esp + 0xd4], 3
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 4
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x548254
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 3
call fcn.004f91a0
mov byte [esp + 0x1f], 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0
call fcn.004f5870
lea eax, [esp + 0x20]
lea edx, [esp + 0x28]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0xdc], 5
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 3
call fcn.00435de0
test al, al
je 0x437efe
lea ecx, [esp + 0x18]
call fcn.004f5d00
cmp ax, 0xa
jl 0x437efe
lea ecx, [esp + 0x18]
call fcn.004f5d00
movsx eax, ax
sub eax, 6
push 4
cdq
and edx, 3
lea ecx, [esp + 0x1c]
add eax, edx
mov esi, eax
sar esi, 2
call fcn.004f5b60
and eax, 0xff
cmp eax, esi
jge 0x437e97
push 4
lea ecx, [esp + 0x1c]
call fcn.004f5b60
jmp 0x437eaf
lea ecx, [esp + 0x18]
call fcn.004f5d00
movsx eax, ax
sub eax, 6
cdq
and edx, 3
add eax, edx
sar eax, 2
xor cl, cl
mov byte [esp + 0x1e], al
test al, al
mov byte [esp + 0x74], cl
jbe 0x437efe
movzx si, cl
shl esi, 2
lea ecx, [esp + 0x18]
lea eax, [esi + 5]
push eax
call fcn.004f5b60
add esi, 6
xor ebx, ebx
push esi
lea ecx, [esp + 0x1c]
mov bh, al
call fcn.004f5b60
mov bl, al
cmp ebx, 0x1336
je 0x437f11
mov cl, byte [esp + 0x74]
mov al, byte [esp + 0x1e]
inc cl
cmp cl, al
mov byte [esp + 0x74], cl
jb 0x437ebd
mov al, byte [esp + 0x1f]
inc al
cmp al, 5
mov byte [esp + 0x1f], al
jae 0x437f1c
jmp 0x437e04
cmp byte [esp + 0x1f], 5
jb 0x437f9e
push 0
push 4
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 6
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d58
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 3
call fcn.004f91a0
cmp ax, 4
jne 0x437fd7
lea ecx, [esp + 0x38]
mov byte [esp + 0xc8], 2
call fcn.004f5980
lea ecx, [esp + 0x18]
mov byte [esp + 0xc8], 1
call fcn.004f5980
lea ecx, [esp + 0x20]
mov byte [esp + 0xc8], 0
call fcn.004f5980
jmp 0x43660d
cmp byte [esp + 0x1e], 1
je 0x437fd7
push 0
push 4
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 7
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d50
jmp 0x437f49
push 0
push 4
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 8
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d48
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 3
call fcn.004f91a0
cmp ax, 4
je 0x437f66
push 0
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 9
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549e20
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 3
call fcn.004f91a0
push 7
push 0x549d40
lea ecx, [esp + 0x28]
call fcn.004f5de0
lea ecx, [esp + 0x20]
push ecx
mov ecx, ebp
call fcn.004d3100
xor bl, bl
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0
call fcn.004f5870
lea edx, [esp + 0x20]
lea eax, [esp + 0x28]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
mov byte [esp + 0xdc], 0xa
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 3
call fcn.00435de0
test al, al
je 0x438102
lea ecx, [esp + 0x18]
call fcn.004f5d00
cmp ax, 6
jle 0x438102
push 6
lea ecx, [esp + 0x1c]
call fcn.004f5b60
and eax, 0xff
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
fsub qword [0x530198]
fcomp qword [0x5303a0]
fnstsw ax
test ah, 0x41
je 0x43810f
inc bl
cmp bl, 5
jb 0x438087
jmp 0x438118
cmp bl, 5
jb 0x438576
xor esi, esi
push esi
push 4
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0xb
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d38
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 3
call fcn.004f91a0
cmp ax, 4
je 0x437f66
mov cl, byte [esp + 0x1e]
mov edi, 0x554048
mov byte [esp + 0x64], cl
or ecx, 0xffffffff
xor eax, eax
xor edx, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x68], edx
mov ebx, ecx
mov dword [esp + 0x6c], esi
cmp ebx, 0xfffffffd
mov dword [esp + 0x70], esi
jbe 0x4381c4
call fcn.0051414b
mov edx, dword [esp + 0x68]
test edx, edx
je 0x4381c0
mov al, byte [edx - 1]
test al, al
je 0x4381c0
cmp al, 0xff
je 0x4381c0
test ebx, ebx
jne 0x4381e9
dec al
push ebx
lea ecx, [esp + 0x68]
mov byte [edx - 1], al
call fcn.004013e0
jmp 0x43821a
mov esi, dword [esp + 0x70]
test ebx, ebx
jne 0x4381d5
push 1
lea ecx, [esp + 0x68]
call fcn.004013e0
jmp 0x43821a
cmp esi, 0x1f
ja 0x4381de
cmp esi, ebx
jae 0x4381f7
push 1
lea ecx, [esp + 0x68]
call fcn.004013e0
push ebx
lea ecx, [esp + 0x68]
call fcn.00401a80
mov edx, dword [esp + 0x68]
mov ecx, ebx
mov edi, edx
mov edx, ecx
mov esi, 0x554048
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x68]
mov dword [esp + 0x6c], ebx
mov byte [eax + ebx], 0
mov cl, byte [0x554048]
xor edx, edx
mov dword [esp + 0x89], edx
mov byte [esp + 0xc8], 0xc
mov dword [esp + 0x8d], edx
mov byte [esp + 0x88], cl
mov byte [esp + 0x91], dl
mov edi, 0x548aa8
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x88]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 1
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0
call fcn.004f5870
lea ecx, [esp + 0x20]
lea edx, [esp + 0x28]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0xdc], 0xd
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 0xc
call fcn.00435de0
test al, al
je 0x4382f8
lea ecx, [esp + 0x18]
call fcn.004f5d00
cmp ax, 6
jle 0x4382f8
push 6
lea ecx, [esp + 0x1c]
call fcn.004f5b60
and eax, 0xff
sub esp, 8
mov dword [esp + 0x38], eax
lea eax, [esp + 0x90]
fild dword [esp + 0x38]
fsub qword [0x530198]
fstp qword [esp]
push str._.2f
push eax
call fcn.0051497a
add esp, 0x10
lea edi, [esp + 0x88]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, ecx
cmp ebx, 0xfffffffd
jbe 0x438315
call fcn.0051414b
mov edi, dword [esp + 0x68]
test edi, edi
je 0x43833d
mov al, byte [edi - 1]
test al, al
je 0x43833d
cmp al, 0xff
je 0x43833d
test ebx, ebx
jne 0x438366
dec al
push ebx
lea ecx, [esp + 0x68]
mov byte [edi - 1], al
call fcn.004013e0
jmp 0x438397
test ebx, ebx
jne 0x43834e
push 1
lea ecx, [esp + 0x68]
call fcn.004013e0
jmp 0x438397
mov eax, dword [esp + 0x70]
cmp eax, 0x1f
ja 0x43835b
cmp eax, ebx
jae 0x438374
push 1
lea ecx, [esp + 0x68]
call fcn.004013e0
push ebx
lea ecx, [esp + 0x68]
call fcn.00401a80
mov edi, dword [esp + 0x68]
mov ecx, ebx
lea esi, [esp + 0x88]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x68]
mov dword [esp + 0x6c], ebx
mov byte [eax + ebx], 0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x549e10
call fcn.004f58e0
mov ecx, dword [0x5540b4]
call fcn.004ff740
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x549e08
call fcn.004f58e0
mov ecx, dword [0x5540b4]
call fcn.004ff8c0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x549e00
call fcn.004f58e0
sub esp, 0x10
lea edx, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
mov byte [esp + 0xe0], 0xe
call fcn.0041fc70
push ecx
mov byte [esp + 0xe0], 0xf
mov ecx, esp
mov dword [esp + 0x48], esp
push 6
push 0x549df8
call fcn.004f58e0
mov ecx, dword [0x5540b4]
mov byte [esp + 0xe0], 0xc
call fcn.004ffc60
mov ecx, dword [0x5540b4]
call fcn.004ffe70
test ax, ax
jne 0x438246
push 1
push ecx
xor esi, esi
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004f5870
lea eax, [esp + 0x20]
lea edx, [esp + 0x28]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0xdc], 0x10
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 0xc
call fcn.00435de0
test al, al
je 0x438650
lea ecx, [esp + 0x18]
call fcn.004f5d00
cmp ax, 6
jl 0x438650
push 6
lea ecx, [esp + 0x1c]
call fcn.004f5b60
and eax, 0xff
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
fsub qword [0x530198]
fcomp qword [0x5303a0]
fnstsw ax
test ah, 0x41
je 0x43853d
push esi
push 4
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x12
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d30
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0xc
call fcn.004f91a0
cmp ax, 4
jne 0x43853d
mov eax, dword [esp + 0x68]
cmp eax, esi
je 0x4386b8
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x4386af
cmp al, 0xff
je 0x4386af
dec al
mov byte [ecx], al
jmp 0x4386b8
mov eax, dword [esp + 0x68]
mov byte [esp + 0xc8], 3
cmp eax, esi
je 0x43856a
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x438561
cmp al, 0xff
je 0x438561
dec al
mov byte [ecx], al
jmp 0x43856a
push ecx
call fcn.00514140
add esp, 4
mov dword [esp + 0x68], esi
mov dword [esp + 0x6c], esi
mov dword [esp + 0x70], esi
push 0
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x13
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d28
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 3
call fcn.004f91a0
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push 8
push 0x549054
lea ecx, [esp + 0x28]
call fcn.004f5de0
push 8
push 0x549060
lea ecx, [esp + 0x40]
call fcn.004f5de0
lea eax, [esp + 0x20]
mov ecx, ebp
push eax
call fcn.004d3100
lea ecx, [esp + 0x38]
push ecx
mov ecx, ebp
call fcn.004d3100
xor bl, bl
push 1
push ecx
lea edx, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.004f5850
lea eax, [esp + 0x20]
lea edx, [esp + 0x28]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0xdc], 0x14
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 3
call fcn.00435de0
test al, al
jne 0x4386c9
inc bl
cmp bl, 5
jb 0x4385ff
jmp 0x4386ce
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x11
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x5493d0
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 0xc
call fcn.004f91a0
mov eax, dword [esp + 0x68]
cmp eax, esi
je 0x4386b8
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x4386af
cmp al, 0xff
je 0x4386af
dec al
mov byte [ecx], al
jmp 0x4386b8
push ecx
call fcn.00514140
add esp, 4
mov dword [esp + 0x68], esi
mov dword [esp + 0x6c], esi
mov dword [esp + 0x70], esi
jmp 0x437f66
cmp bl, 5
jb 0x438717
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x15
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d20
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 3
call fcn.004f91a0
jmp 0x437f66
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x16
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d18
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 3
call fcn.004f91a0
push 0
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x17
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d10
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 3
call fcn.004f91a0
push 8
push 0x54906c
lea ecx, [esp + 0x28]
call fcn.004f5de0
lea eax, [esp + 0x20]
mov ecx, ebp
push eax
call fcn.004d3100
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0
call fcn.004f5870
lea ecx, [esp + 0x20]
lea edx, [esp + 0x28]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0xdc], 0x18
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 3
call fcn.00435de0
push 7
push 0x5492e8
lea ecx, [esp + 0x28]
call fcn.004f5de0
lea eax, [esp + 0x20]
mov ecx, ebp
push eax
call fcn.004d3100
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0
call fcn.004f5870
mov byte [esp + 0xd0], 0x19
lea ecx, [esp + 0x20]
lea edx, [esp + 0x28]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 3
call fcn.00435de0
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x1c]
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x1a
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d08
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 3
call fcn.004f91a0
mov edx, dword [ebp]
mov ecx, ebp
call dword [edx + 0x18]
test ax, ax
jne 0x437f66
push 0
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x1b
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x54827c
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 3
call fcn.004f91a0
push 7
push 0x5483e8
lea ecx, [esp + 0x28]
call fcn.004f5de0
push 7
push 0x5483e0
lea ecx, [esp + 0x40]
call fcn.004f5de0
lea eax, [esp + 0x20]
mov ecx, ebp
push eax
call fcn.004d3100
lea ecx, [esp + 0x38]
push ecx
mov ecx, ebp
call fcn.004d3100
xor bl, bl
push 1
push ecx
lea edx, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.004f5850
lea eax, [esp + 0x20]
lea edx, [esp + 0x28]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0xdc], 0x1c
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 3
call fcn.00435de0
test al, al
jne 0x438977
inc bl
cmp bl, 5
jb 0x43892c
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x1d
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549d00
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 3
call fcn.004f91a0
push 0
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x1e
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x548254
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xd8], 3
call fcn.004f91a0
push 8
push 0x548dac
lea ecx, [esp + 0x28]
call fcn.004f5de0
mov byte [esp + 0x1f], 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0
call fcn.004f5870
lea eax, [esp + 0x20]
lea edx, [esp + 0x28]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov byte [esp + 0xdc], 0x1f
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0xd8], 3
call fcn.00435de0
test al, al
je 0x438b11
lea ecx, [esp + 0x18]
call fcn.004f5d00
cmp ax, 6
jl 0x438b11
mov byte [esp + 0x74], 0
lea ecx, [esp + 0x18]
call fcn.004f5d00
movsx eax, ax
sub eax, 6
push 4
cdq
and edx, 3
lea ecx, [esp + 0x1c]
add eax, edx
mov esi, eax
sar esi, 2
call fcn.004f5b60
and eax, 0xff
cmp eax, esi
jge 0x438ab1
push 4
lea ecx, [esp + 0x1c]
call fcn.004f5b60
and eax, 0xff
jmp 0x438ac9
lea ecx, [esp + 0x18]
call fcn.004f5d00
movsx eax, ax
sub eax, 6
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [esp + 0x74]
and ecx, 0xff
cmp ecx, eax
jge 0x438b11
movzx si, byte [esp + 0x74]
shl esi, 2
lea ecx, [esp + 0x18]
lea edx, [esi + 5]
push edx
call fcn.004f5b60
add esi, 6
xor ebx, ebx
push esi
lea ecx, [esp + 0x1c]
mov bh, al
call fcn.004f5b60
mov bl, al
cmp ebx, 0x1336
je 0x438b24
inc byte [esp + 0x74]
jmp 0x438a71
mov al, byte [esp + 0x1f]
inc al
cmp al, 5
mov byte [esp + 0x1f], al
jae 0x438b2b
jmp 0x438a14
cmp byte [esp + 0x1f], 5
jb 0x438b5d
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x20
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549cf8
jmp 0x4386fb
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xd8], 0x21
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x549cf0
jmp 0x4386fb
lea ecx, [esp + 0xac]
mov dword [esp + 0xc8], 0xffffffff
call fcn.00401000
mov ecx, dword [esp + 0xc0]
pop edi
xor ax, ax
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret