Function at 0x4e9a80
Capabilities:
Contain obfuscated stackstrings
Enumerate files on windows
Enumerate files recursively

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x720
mov eax, dword [0x5c0290]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x524], 0x35395847
push edi
mov dword [ebp - 0x25c], ebx
mov dword [ebp - 0x520], 0x526f484f
mov dword [ebp - 0x51c], 0x4c307a63
mov dword [ebp - 0x518], 0x79555266
mov dword [ebp - 0x514], 0x6b643349
mov dword [ebp - 0x510], 0x33777746
mov dword [ebp - 0x50c], 0x36415463
mov dword [ebp - 0x508], 0x52495445
mov dword [ebp - 0x504], 0x484d4248
mov dword [ebp - 0x500], 0x36344845
mov dword [ebp - 0x4fc], 0x4d414161
mov dword [ebp - 0x4f8], 0x4334784a
mov dword [ebp - 0x4f4], 0x6741775a
mov dword [ebp - 0x4f0], 0x79564448
mov dword [ebp - 0x4ec], 0x54346e48
mov dword [ebp - 0x4e8], 0x77773363
mov dword [ebp - 0x4e4], 0x46516e43
mov dword [ebp - 0x4e0], 0x6e4d5149
mov dword [ebp - 0x4dc], 0x7a776d47
mov dword [ebp - 0x4d8], 0x77315249
mov dword [ebp - 0x4d4], 0x7345524c
mov dword [ebp - 0x4d0], 0x6f775148
mov dword [ebp - 0x4cc], 0x476b414f
mov dword [ebp - 0x4c8], 0x54515149
mov dword [ebp - 0x4c4], 0x396b6e42
mov dword [ebp - 0x4c0], 0x43736a64
mov dword [ebp - 0x4bc], 0x6367514f
mov dword [ebp - 0x4b8], 0x31385750
mov dword [ebp - 0x4b4], 0x6777544c
mov dword [ebp - 0x4b0], 0x44774241
mov dword [ebp - 0x4ac], 0x74455444
mov dword [ebp - 0x4a8], 0x6573524f
mov dword [ebp - 0x4a4], 0x72414449
mov dword [ebp - 0x4a0], 0x6b554448
mov dword [ebp - 0x49c], 0x67635244
mov dword [ebp - 0x498], 0x5567334e
mov dword [ebp - 0x494], 0x70306844
mov dword [ebp - 0x490], 0x69646a46
mov dword [ebp - 0x48c], 0x66304763
mov dword [ebp - 0x488], 0x31774449
mov dword [ebp - 0x484], 0x396f4145
mov dword [ebp - 0x480], 0x546f6745
mov dword [ebp - 0x47c], 0x44554265
mov dword [ebp - 0x478], 0x3277524d
mov dword [ebp - 0x474], 0x6255544a
mov dword [ebp - 0x470], 0x39555166
mov dword [ebp - 0x46c], 0x50414845
mov dword [ebp - 0x468], 0x4d555461
mov dword [ebp - 0x464], 0x42675741
mov dword [ebp - 0x460], 0x78466763
mov dword [ebp - 0x45c], 0x44497a4c
mov dword [ebp - 0x458], 0x76345450
mov dword [ebp - 0x454], 0x394e5750
mov dword [ebp - 0x450], 0x6b6f7748
mov dword [ebp - 0x44c], 0x7a637746
mov dword [ebp - 0x448], 0x444d7745
mov dword [ebp - 0x444], 0x6e30534e
mov dword [ebp - 0x440], 0x65346944
mov dword [ebp - 0x43c], 0x6b425347
mov dword [ebp - 0x438], 0x6734414c
mov dword [ebp - 0x434], 0x51415241
mov dword [ebp - 0x430], 0x44777748
mov dword [ebp - 0x42c], 0x2f55774a
mov dword [ebp - 0x428], 0x4f597a50
mov dword [ebp - 0x424], 0x376f4866
mov dword [ebp - 0x420], 0x6f464448
mov dword [ebp - 0x41c], 0x3741414d
mov dword [ebp - 0x418], 0x6d315448
mov dword [ebp - 0x414], 0x5a55684f
mov dword [ebp - 0x410], 0x784a5241
mov dword [ebp - 0x40c], 0x694d4464
mov dword [ebp - 0x408], 0x4b514141
mov dword [ebp - 0x404], 0x50385241
mov dword [ebp - 0x400], 0x2b597a49
mov dword [ebp - 0x3fc], 0x2f346750
mov dword [ebp - 0x3f8], 0x30354448
lea eax, [ebp - 0x254]
mov dword [ebp - 0x3f4], 0x46594241
push eax
sub esp, 0xc
mov dword [ebp - 0x3f0], 0x35556945
mov ecx, esp
mov dword [ebp - 0x3ec], 0x6d314749
lea eax, [ebp - 0x3cd]
mov dword [ebp - 0x3e8], 0x335a7764
mov dword [ebp - 0x3e4], 0x2b416a4b
push dword [ebp - 0x3cc]
mov dword [ebp - 0x3e0], 0x746f7a41
push eax
lea eax, [ebp - 0x524]
mov dword [ebp - 0x3dc], 0x3568684f
mov dword [ebp - 0x3d8], 0x79497a41
mov dword [ebp - 0x3d4], 0x41414141
mov word [ebp - 0x3d0], 0x5041
mov byte [ebp - 0x3ce], 0x73
push eax
push ebx
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.004660a0
lea eax, [ebp - 0x720]
push eax
call fcn.00480790
add esp, 0x10
mov ecx, dword [eax]
mov eax, dword [eax + 4]
sub eax, ecx
sar eax, 1
je 0x4eaed8
push ecx
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x6f0]
push eax
call fcn.004b8610
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, dword [ebp - 0x6f0]
or edi, 0xffffffff
add esi, 0xfffffff0
mov dword [ebp - 0x6ec], eax
mov ecx, edi
lea edx, [esi + 0xc]
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4e9e90
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x720]
test eax, eax
je 0x4e9eb5
push eax
call fcn.0053c1e0
add esp, 4
mov dword [ebp - 0x720], ebx
mov dword [ebp - 0x71c], ebx
mov dword [ebp - 0x718], ebx
cmp dword [ebp - 0x6ec], 0xffffffff
je 0x4eaead
test byte [ebp - 0x254], 0x10
je 0x4ea8c2
lea eax, [ebp - 0x228]
mov dword [ebp - 0x258], 0
push eax
lea ecx, [ebp - 0x258]
call fcn.004672d0
sub esp, 0xc
mov dword [ebp - 0x340], 0x744d7961
mov ecx, esp
mov dword [ebp - 0x33c], 0x33594341
lea eax, [ebp - 0x25d]
mov dword [ebp - 0x338], 0x46346865
mov dword [ebp - 0x334], 0x48386748
or ebx, 1
push dword [ebp - 0x3cc]
mov dword [ebp - 0x330], 0x3477524c
push eax
lea eax, [ebp - 0x340]
mov dword [ebp - 0x32c], 0x30394248
mov dword [ebp - 0x328], 0x39424149
mov dword [ebp - 0x324], 0x7a55524c
mov dword [ebp - 0x320], 0x5767544a
mov dword [ebp - 0x31c], 0x706f5248
mov dword [ebp - 0x318], 0x4d456d4b
mov dword [ebp - 0x314], 0x74776e50
mov dword [ebp - 0x310], 0x544d5765
mov dword [ebp - 0x30c], 0x6a497942
mov dword [ebp - 0x308], 0x4230414c
mov dword [ebp - 0x304], 0x79495341
mov dword [ebp - 0x300], 0x65384249
mov dword [ebp - 0x2fc], 0x4673784d
mov dword [ebp - 0x2f8], 0x2b45794b
mov dword [ebp - 0x2f4], 0x32527a49
mov dword [ebp - 0x2f0], 0x5a49674a
mov dword [ebp - 0x2ec], 0x7145695a
mov dword [ebp - 0x2e8], 0x37645241
mov dword [ebp - 0x2e4], 0x42456943
mov dword [ebp - 0x2e0], 0x4b34484a
mov dword [ebp - 0x2dc], 0x78745249
mov dword [ebp - 0x2d8], 0x364d414f
mov dword [ebp - 0x2d4], 0x316f7861
mov dword [ebp - 0x2d0], 0x65774444
mov dword [ebp - 0x2cc], 0x42516965
mov dword [ebp - 0x2c8], 0x79517950
mov dword [ebp - 0x2c4], 0x6d676e59
mov dword [ebp - 0x2c0], 0x6e597848
mov dword [ebp - 0x2bc], 0x6a494859
mov dword [ebp - 0x2b8], 0x51775842
mov dword [ebp - 0x2b4], 0x634d4443
mov dword [ebp - 0x2b0], 0x4c417964
mov dword [ebp - 0x2ac], 0x54555241
mov dword [ebp - 0x2a8], 0x5a346d4b
mov dword [ebp - 0x2a4], 0x31747a4d
mov dword [ebp - 0x2a0], 0x68527a46
mov dword [ebp - 0x29c], 0x3241694b
mov dword [ebp - 0x298], 0x6749434d
mov dword [ebp - 0x294], 0x48557941
mov dword [ebp - 0x290], 0x516b7849
mov dword [ebp - 0x28c], 0x6430424d
mov dword [ebp - 0x288], 0x6255544a
mov dword [ebp - 0x284], 0x6c59414d
mov dword [ebp - 0x280], 0x48736d4d
mov dword [ebp - 0x27c], 0x4d385464
mov dword [ebp - 0x278], 0x51416a4a
mov dword [ebp - 0x274], 0x41306847
mov dword [ebp - 0x270], 0x306f6d65
mov dword [ebp - 0x26c], 0x51553341
mov dword [ebp - 0x268], 0x456f6866
mov dword [ebp - 0x264], 0x41415163
mov word [ebp - 0x260], 0x4b41
mov byte [ebp - 0x25e], 0x55
push eax
push 0
mov dword [ebp - 0x25c], ebx
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
call fcn.004660a0
lea eax, [ebp - 0x714]
push eax
call fcn.00480790
add esp, 0x10
mov ecx, dword [eax]
mov eax, dword [eax + 4]
sub eax, ecx
sar eax, 1
je 0x4eaed8
xor eax, eax
test ecx, ecx
setne al
test eax, eax
je 0x4eaee2
mov edi, dword [ebp - 0x258]
push ecx
push edi
call fcn.0053ef62
add esp, 8
test eax, eax
je 0x4ea692
mov dword [ebp - 0x6e8], 0x36733361
mov dword [ebp - 0x6e4], 0x34745143
mov dword [ebp - 0x6e0], 0x45555246
mov dword [ebp - 0x6dc], 0x69496950
mov dword [ebp - 0x6d8], 0x6b347850
mov dword [ebp - 0x6d4], 0x76515164
mov dword [ebp - 0x6d0], 0x5938794d
mov dword [ebp - 0x6cc], 0x2b674447
mov dword [ebp - 0x6c8], 0x49417946
mov dword [ebp - 0x6c4], 0x316b6742
mov dword [ebp - 0x6c0], 0x48346a4e
mov dword [ebp - 0x6bc], 0x7a56584f
mov dword [ebp - 0x6b8], 0x36415744
mov dword [ebp - 0x6b4], 0x4d416948
mov dword [ebp - 0x6b0], 0x62497748
mov dword [ebp - 0x6ac], 0x426b4349
mov dword [ebp - 0x6a8], 0x4534674d
mov dword [ebp - 0x6a4], 0x48516745
mov dword [ebp - 0x6a0], 0x6330544b
mov dword [ebp - 0x69c], 0x4555694b
mov dword [ebp - 0x698], 0x78495166
mov dword [ebp - 0x694], 0x7051774f
mov dword [ebp - 0x690], 0x49515149
mov dword [ebp - 0x68c], 0x76594842
mov dword [ebp - 0x688], 0x6967584c
mov dword [ebp - 0x684], 0x43494446
mov dword [ebp - 0x680], 0x62557a47
mov dword [ebp - 0x67c], 0x7967544d
mov dword [ebp - 0x678], 0x6a4a5249
mov dword [ebp - 0x674], 0x4155694b
mov dword [ebp - 0x670], 0x67707846
mov dword [ebp - 0x66c], 0x78346a4d
mov dword [ebp - 0x668], 0x63595744
mov dword [ebp - 0x664], 0x38494450
mov dword [ebp - 0x660], 0x65557849
mov dword [ebp - 0x65c], 0x4734524d
mov dword [ebp - 0x658], 0x63456e44
mov dword [ebp - 0x654], 0x30386844
mov dword [ebp - 0x650], 0x47343243
mov dword [ebp - 0x64c], 0x4155694d
mov dword [ebp - 0x648], 0x396b5463
mov dword [ebp - 0x644], 0x35747a49
mov dword [ebp - 0x640], 0x5a55544a
mov dword [ebp - 0x63c], 0x556f534e
mov dword [ebp - 0x638], 0x35675247
mov dword [ebp - 0x634], 0x58385443
mov dword [ebp - 0x630], 0x59494265
mov dword [ebp - 0x62c], 0x66776943
mov dword [ebp - 0x628], 0x414d4165
mov dword [ebp - 0x624], 0x71415342
mov dword [ebp - 0x620], 0x46516864
mov dword [ebp - 0x61c], 0x58734841
mov dword [ebp - 0x618], 0x35647749
mov dword [ebp - 0x614], 0x4b51684f
mov dword [ebp - 0x610], 0x74384450
mov dword [ebp - 0x60c], 0x424d7946
mov dword [ebp - 0x608], 0x37775145
mov dword [ebp - 0x604], 0x44677a46
mov dword [ebp - 0x600], 0x5673794b
mov dword [ebp - 0x5fc], 0x4a6f524b
mov dword [ebp - 0x5f8], 0x34775444
mov dword [ebp - 0x5f4], 0x33516848
mov dword [ebp - 0x5f0], 0x636f784f
mov dword [ebp - 0x5ec], 0x55514248
mov dword [ebp - 0x5e8], 0x75635242
mov dword [ebp - 0x5e4], 0x6e736a42
mov dword [ebp - 0x5e0], 0x39426e4b
mov dword [ebp - 0x5dc], 0x64555145
mov dword [ebp - 0x5d8], 0x6367534c
mov dword [ebp - 0x5d4], 0x78347962
mov dword [ebp - 0x5d0], 0x6d645444
mov dword [ebp - 0x5cc], 0x4a51694d
mov dword [ebp - 0x5c8], 0x74494148
mov dword [ebp - 0x5c4], 0x664d4847
mov dword [ebp - 0x5c0], 0x74736866
mov dword [ebp - 0x5bc], 0x7167484b
mov dword [ebp - 0x5b8], 0x6d496a63
mov dword [ebp - 0x5b4], 0x3859694e
mov dword [ebp - 0x5b0], 0x6e746d4a
mov dword [ebp - 0x5ac], 0x42775844
mov dword [ebp - 0x5a8], 0x4e496a42
sub esp, 0xc
mov dword [ebp - 0x5a4], 0x53635145
mov ecx, esp
mov dword [ebp - 0x5a0], 0x746f6766
lea eax, [ebp - 0x526]
mov dword [ebp - 0x59c], 0x72427750
mov dword [ebp - 0x598], 0x6d735441
or ebx, 2
push dword [ebp - 0x3cc]
mov dword [ebp - 0x594], 0x4a4d7845
push eax
lea eax, [ebp - 0x6e8]
mov dword [ebp - 0x590], 0x31517846
mov dword [ebp - 0x58c], 0x4d557862
mov dword [ebp - 0x588], 0x78737849
mov dword [ebp - 0x584], 0x5573674e
mov dword [ebp - 0x580], 0x34456d4e
mov dword [ebp - 0x57c], 0x77316a50
mov dword [ebp - 0x578], 0x5434334f
mov dword [ebp - 0x574], 0x79425849
mov dword [ebp - 0x570], 0x4c774141
mov dword [ebp - 0x56c], 0x3370534e
mov dword [ebp - 0x568], 0x61517a41
mov dword [ebp - 0x564], 0x6338774c
mov dword [ebp - 0x560], 0x59417950
mov dword [ebp - 0x55c], 0x426f424b
mov dword [ebp - 0x558], 0x6259524b
mov dword [ebp - 0x554], 0x31747847
mov dword [ebp - 0x550], 0x54346e66
mov dword [ebp - 0x54c], 0x58514446
mov dword [ebp - 0x548], 0x2f314344
mov dword [ebp - 0x544], 0x68736e41
mov dword [ebp - 0x540], 0x35785847
mov dword [ebp - 0x53c], 0x6b30684b
mov dword [ebp - 0x538], 0x58494444
mov dword [ebp - 0x534], 0x78556e4a
mov dword [ebp - 0x530], 0x75634741
mov dword [ebp - 0x52c], 0x42414141
mov word [ebp - 0x528], 0x7753
push eax
push 0
mov dword [ebp - 0x25c], ebx
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
call fcn.004660a0
lea eax, [ebp - 0x6fc]
push eax
call fcn.00480790
add esp, 0x10
mov ecx, dword [eax]
mov eax, dword [eax + 4]
sub eax, ecx
sar eax, 1
je 0x4eaed8
xor eax, eax
test ecx, ecx
setne al
test eax, eax
je 0x4eaee2
push ecx
push edi
call fcn.0053ef62
add esp, 8
test eax, eax
je 0x4ea692
mov bl, 1
jmp 0x4ea694
xor bl, bl
mov ecx, dword [ebp - 0x25c]
test cl, 2
je 0x4ea6df
mov eax, dword [ebp - 0x6fc]
and ecx, 0xfffffffd
mov dword [ebp - 0x25c], ecx
test eax, eax
je 0x4ea6df
push eax
call fcn.0053c1e0
mov ecx, dword [ebp - 0x25c]
add esp, 4
mov dword [ebp - 0x6fc], 0
mov dword [ebp - 0x6f8], 0
mov dword [ebp - 0x6f4], 0
test cl, 1
je 0x4ea71e
mov eax, dword [ebp - 0x714]
and ecx, 0xfffffffe
mov dword [ebp - 0x25c], ecx
test eax, eax
je 0x4ea71e
push eax
call fcn.0053c1e0
add esp, 4
mov dword [ebp - 0x714], 0
mov dword [ebp - 0x710], 0
mov dword [ebp - 0x70c], 0
test bl, bl
je 0x4ea87e
mov esi, dword [ebp + 8]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [esi - 4], 0
lea edx, [esi - 4]
mov ecx, eax
jl 0x4ea74f
cmp ecx, dword [esi - 0x10]
jne 0x4ea74f
lea ebx, [esi - 0x10]
mov eax, 1
lock xadd dword [edx], eax
jmp 0x4ea788
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x4eaeec
mov ecx, dword [esi - 0xc]
mov dword [ebx + 4], ecx
mov ecx, dword [esi - 0xc]
lea eax, [ecx*2 + 2]
push eax
lea eax, [ecx*2 + 2]
push esi
push eax
lea eax, [ebx + 0x10]
push eax
call fcn.0053c67b
add esp, 0x10
mov eax, dword [ebx + 8]
lea esi, [ebx + 0x10]
mov ecx, 1
mov dword [ebp - 0x258], esi
sub ecx, dword [esi - 4]
sub eax, 0x104
or eax, ecx
jge 0x4ea7bb
push 0x104
lea ecx, [ebp - 0x258]
call fcn.00468e20
mov esi, dword [ebp - 0x258]
lea eax, [ebp - 0x228]
push eax
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push dword [esi - 8]
push esi
call fcn.0053eeff
add esp, 8
test eax, eax
js 0x4eaef1
cmp eax, dword [esi - 8]
jg 0x4eaef1
push dword [ebp + 0xc]
mov dword [esi - 0xc], eax
xor ecx, ecx
mov word [esi + eax*2], cx
add esi, 0xfffffff0
push ecx
mov dword [ebp - 0x258], esp
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
mov ecx, eax
jl 0x4ea81f
cmp ecx, dword [esi]
jne 0x4ea81f
mov ebx, esi
mov eax, 1
lock xadd dword [edx], eax
jmp 0x4ea854
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x4eaeec
mov ecx, dword [esi + 4]
lea eax, [esi + 0x10]
mov dword [ebx + 4], ecx
mov ecx, dword [esi + 4]
lea ecx, [ecx*2 + 2]
push ecx
push eax
push ecx
lea eax, [ebx + 0x10]
push eax
call fcn.0053c67b
add esp, 0x10
mov ecx, dword [ebp - 0x258]
lea eax, [ebx + 0x10]
mov dword [ecx], eax
call fcn.004e9a80
add esp, 8
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4ea87e
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4ea898
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
or edi, 0xffffffff
mov ebx, dword [ebp - 0x6ec]
lea eax, [ebp - 0x254]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x4eaea6
mov ebx, dword [ebp - 0x25c]
jmp 0x4e9ec2
mov esi, dword [ebp + 8]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [esi - 4], 0
lea edx, [esi - 4]
mov ecx, eax
jl 0x4ea8eb
cmp ecx, dword [esi - 0x10]
jne 0x4ea8eb
lea edi, [esi - 0x10]
mov eax, 1
lock xadd dword [edx], eax
jmp 0x4ea924
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov edi, eax
test edi, edi
je 0x4eaeec
mov ecx, dword [esi - 0xc]
mov dword [edi + 4], ecx
mov ecx, dword [esi - 0xc]
lea eax, [ecx*2 + 2]
push eax
lea eax, [ecx*2 + 2]
push esi
push eax
lea eax, [edi + 0x10]
push eax
call fcn.0053c67b
add esp, 0x10
mov eax, dword [edi + 8]
lea esi, [edi + 0x10]
mov ecx, 1
mov dword [ebp - 0x258], esi
sub ecx, dword [esi - 4]
sub eax, 0x104
or eax, ecx
jge 0x4ea957
push 0x104
lea ecx, [ebp - 0x258]
call fcn.00468e20
mov esi, dword [ebp - 0x258]
lea eax, [ebp - 0x228]
push eax
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push dword [esi - 8]
push esi
call fcn.0053eeff
add esp, 8
test eax, eax
js 0x4eaef1
cmp eax, dword [esi - 8]
jg 0x4eaef1
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
mov dword [ebp - 0x3c8], 0x73417a61
mov dword [ebp - 0x3c4], 0x7651694e
mov dword [ebp - 0x3c0], 0x34707948
mov dword [ebp - 0x3bc], 0x7835584d
mov dword [ebp - 0x3b8], 0x5a733342
mov dword [ebp - 0x3b4], 0x7a6f7a45
mov dword [ebp - 0x3b0], 0x656f7845
mov dword [ebp - 0x3ac], 0x77415159
mov dword [ebp - 0x3a8], 0x724d444c
mov dword [ebp - 0x3a4], 0x78634244
mov dword [ebp - 0x3a0], 0x68644463
mov dword [ebp - 0x39c], 0x3068674a
mov dword [ebp - 0x398], 0x3145784c
mov dword [ebp - 0x394], 0x6641784e
mov dword [ebp - 0x390], 0x47497942
mov dword [ebp - 0x38c], 0x6e30414a
mov dword [ebp - 0x388], 0x63775144
mov dword [ebp - 0x384], 0x3145444d
mov dword [ebp - 0x380], 0x6d6c5148
mov dword [ebp - 0x37c], 0x78467963
mov dword [ebp - 0x378], 0x57635745
mov dword [ebp - 0x374], 0x78747759
mov dword [ebp - 0x370], 0x46776750
mov dword [ebp - 0x36c], 0x43557950
mov dword [ebp - 0x368], 0x4e387847
mov dword [ebp - 0x364], 0x4c38684a
mov dword [ebp - 0x360], 0x4b457a64
mov dword [ebp - 0x35c], 0x6e787748
mov dword [ebp - 0x358], 0x716f574d
mov dword [ebp - 0x354], 0x64736e42
mov dword [ebp - 0x350], 0x33516a4c
mov dword [ebp - 0x34c], 0x3538684a
mov dword [ebp - 0x348], 0x36384243
mov dword [ebp - 0x344], 0x2f59484e
mov dword [ebp - 0x340], 0x7a30534b
mov dword [ebp - 0x33c], 0x52634348
mov dword [ebp - 0x338], 0x4859434c
mov dword [ebp - 0x334], 0x4f734859
mov dword [ebp - 0x330], 0x5738434d
mov dword [ebp - 0x32c], 0x73513346
mov dword [ebp - 0x328], 0x6a685844
mov dword [ebp - 0x324], 0x32777a49
mov dword [ebp - 0x320], 0x2f747848
mov dword [ebp - 0x31c], 0x4659484f
mov dword [ebp - 0x318], 0x2f706e47
mov dword [ebp - 0x314], 0x414d784b
mov dword [ebp - 0x310], 0x39523341
mov dword [ebp - 0x30c], 0x3755794e
mov dword [ebp - 0x308], 0x4b457841
mov dword [ebp - 0x304], 0x73387a63
mov dword [ebp - 0x300], 0x2b556764
mov dword [ebp - 0x2fc], 0x7341795a
mov dword [ebp - 0x2f8], 0x68315442
mov dword [ebp - 0x2f4], 0x78396949
mov dword [ebp - 0x2f0], 0x2b317842
mov dword [ebp - 0x2ec], 0x5767434c
mov dword [ebp - 0x2e8], 0x66384149
mov dword [ebp - 0x2e4], 0x4a45534c
mov dword [ebp - 0x2e0], 0x55595142
mov dword [ebp - 0x2dc], 0x78385264
mov dword [ebp - 0x2d8], 0x756f5246
mov dword [ebp - 0x2d4], 0x52737950
mov dword [ebp - 0x2d0], 0x6759414c
mov dword [ebp - 0x2cc], 0x48737744
mov dword [ebp - 0x2c8], 0x4e6f7a59
mov dword [ebp - 0x2c4], 0x4345694b
mov dword [ebp - 0x2c0], 0x37646a64
mov dword [ebp - 0x2bc], 0x37513243
mov dword [ebp - 0x2b8], 0x5645434f
mov dword [ebp - 0x2b4], 0x31424743
mov dword [ebp - 0x2b0], 0x69674242
mov dword [ebp - 0x2ac], 0x7878684a
mov dword [ebp - 0x2a8], 0x364d5742
mov dword [ebp - 0x2a4], 0x77497a49
mov dword [ebp - 0x2a0], 0x5a344847
mov dword [ebp - 0x29c], 0x305a6749
mov dword [ebp - 0x298], 0x36776743
mov dword [ebp - 0x294], 0x6d6b7a4d
sub esp, 0xc
mov dword [ebp - 0x290], 0x6a554248
mov ecx, esp
mov dword [ebp - 0x28c], 0x6d386a65
mov dword [ebp - 0x288], 0x584d6746
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x284], 0x79457748
mov dword [ebp - 0x280], 0x35774250
mov dword [ebp - 0x27c], 0x6f4d444f
mov dword [ebp - 0x278], 0x75635245
mov dword [ebp - 0x274], 0x6e306946
mov dword [ebp - 0x270], 0x6a55444f
mov dword [ebp - 0x26c], 0x75465244
mov dword [ebp - 0x268], 0x646f5348
mov dword [ebp - 0x264], 0x41774146
mov dword [ebp - 0x260], 0x4a454141
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
push dword [ebp - 0x3cc]
push eax
lea eax, [ebp - 0x3c8]
push eax
push 0
call fcn.004660a0
lea eax, [ebp - 0x708]
push eax
call fcn.00480790
add esp, 0x10
mov esi, dword [eax]
mov eax, dword [eax + 4]
sub eax, esi
sar eax, 1
je 0x4eaed8
lea eax, [ebp - 0x3cc]
push eax
lea ecx, [ebp - 0x258]
call fcn.004ce700
xor ecx, ecx
test esi, esi
setne cl
test ecx, ecx
je 0x4eaee2
push esi
push dword [eax]
call fcn.0053ef62
mov edx, dword [ebp - 0x3cc]
add esp, 8
test eax, eax
sete bl
add edx, 0xfffffff0
or edi, 0xffffffff
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4eadbe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x708]
test eax, eax
je 0x4eadef
push eax
call fcn.0053c1e0
add esp, 4
mov dword [ebp - 0x708], 0
mov dword [ebp - 0x704], 0
mov dword [ebp - 0x700], 0
mov esi, dword [ebp - 0x258]
test bl, bl
je 0x4eae84
push 0
push ecx
mov ecx, esp
push 0x582738
call fcn.004672d0
push dword [ebp + 0xc]
push ecx
mov ecx, dword [esi - 0x10]
mov dword [ebp - 0x258], esp
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [esi - 4], 0
lea edx, [esi - 4]
mov ecx, eax
jl 0x4eae3c
cmp ecx, dword [esi - 0x10]
jne 0x4eae3c
lea ebx, [esi - 0x10]
mov eax, 1
lock xadd dword [edx], eax
jmp 0x4eae6e
mov eax, dword [ecx]
push 2
push dword [esi - 0xc]
call dword [eax]
mov ebx, eax
test ebx, ebx
je 0x4eaeec
mov ecx, dword [esi - 0xc]
lea eax, [ebx + 0x10]
mov dword [ebx + 4], ecx
mov ecx, dword [esi - 0xc]
lea ecx, [ecx*2 + 2]
push ecx
push esi
push ecx
push eax
call fcn.0053c67b
add esp, 0x10
mov ecx, dword [ebp - 0x258]
lea eax, [ebx + 0x10]
mov dword [ecx], eax
call fcn.004e9880
add esp, 0x10
or edi, 0xffffffff
add esi, 0xfffffff0
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4ea89b
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4ea89b
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
jg 0x4eaec7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0053d3a0
mov esp, ebp
pop ebp
ret
push str.invalid_vector_T__subscript
call fcn.0053af06
push 0x80004005
call fcn.00468960
call fcn.00469160
push 0x80070057
call fcn.00468960
int3