Function at 0x59047da0
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5915277a
push eax
mov eax, dword [esp + 0x20]
mov dword fs:[0], esp
sub esp, 0xe8
push ebx
push ebp
xor ebp, ebp
push esi
cmp eax, ebp
push edi
je 0x59047dcb
mov dword [eax], ebp
mov ebx, dword [esp + 0x108]
cmp ebx, ebp
je 0x590490ea
mov edx, dword [esp + 0x10c]
cmp edx, ebp
je 0x590490ea
mov eax, dword [0x59162880]
mov dword [esp + 0x24], eax
mov edi, 0x59188854
or ecx, 0xffffffff
xor eax, eax
xor esi, esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x100], ebp
push ecx
push 0x59188854
push edx
push ebx
mov dword [esp + 0x58], ebp
call fcn.5900d6d0
add esp, 0x10
cmp eax, 0xffffffff
je 0x59047f55
push eax
push ebx
lea ecx, [esp + 0x20]
call fcn.590a0970
lea ecx, [esp + 0x48]
lea edx, [esp + 0x14]
push ecx
push 0x59186bb0
push edx
lea ecx, [esp + 0x24]
mov byte [esp + 0x10c], 1
call fcn.590a53b0
mov byte [esp + 0x100], 2
mov eax, dword [esp + 0x14]
cmp dword [eax - 8], ebp
je 0x59047ea6
lea ecx, [esp + 0x48]
lea edx, [esp + 0x2c]
push ecx
push 0x59186bb0
push edx
lea ecx, [esp + 0x24]
inc esi
call fcn.590a53b0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x104], 3
call fcn.590a1040
lea ecx, [esp + 0x2c]
mov byte [esp + 0x100], 2
call fcn.590a0ec0
cmp esi, 4
jl 0x59047e5a
jmp 0x59047eaf
cmp esi, 4
jl 0x59047f33
mov eax, dword [esp + 0x14]
cmp dword [eax - 8], ebp
je 0x59047f33
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.590a0490
lea eax, [esp + 0x30]
mov byte [esp + 0x104], 2
push eax
call fcn.5900b190
add esp, 8
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x104], 5
call fcn.590a1040
lea ecx, [esp + 0x2c]
mov byte [esp + 0x100], 2
call fcn.590a0ec0
mov ecx, dword [esp + 0x14]
push str.NULL
push ecx
call fcn.59088717
add esp, 8
test eax, eax
je 0x59047f33
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x24]
push edx
call fcn.590a65a0
push str._21cn.com
lea ecx, [esp + 0x28]
call fcn.590a6e90
lea ecx, [esp + 0x14]
mov byte [esp + 0x100], 1
call fcn.590a0ec0
lea ecx, [esp + 0x18]
mov byte [esp + 0x100], 0
call fcn.590a0ec0
mov eax, dword [esp + 0x10c]
push 0x591892bc
push eax
push ebx
call fcn.5900f930
mov ebp, eax
add esp, 0xc
cmp ebp, 0xffffffff
je 0x590490d6
mov edi, 0x591892bc
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ebp, ecx
push ebp
push ebx
call fcn.59016920
mov esi, eax
mov eax, dword [esp + 0x114]
add esp, 8
sub eax, ebp
add ebx, ebp
lea ecx, [esp + 0x38]
push eax
push ebx
mov dword [esp + 0x110], ebx
mov dword [esp + 0x114], eax
call fcn.590a0970
lea ecx, [esp + 0x48]
lea edx, [esp + 0x10]
push ecx
push 0x59188924
mov byte [esp + 0x108], 7
push edx
lea ecx, [esp + 0x44]
mov dword [esp + 0x54], 0
call fcn.59082010
mov eax, dword [esp + 0x10]
mov byte [esp + 0x100], 8
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x59048008
lea ecx, [esp + 0x10]
mov byte [esp + 0x100], 7
call fcn.590a0ec0
jmp 0x590490c5
mov eax, dword [0x59162880]
mov dword [esp + 0x34], eax
mov byte [esp + 0x100], 0xa
mov dword [esp + 0x30], eax
mov byte [esp + 0x100], 0xb
mov dword [esp + 0x1c], eax
mov byte [esp + 0x100], 0xc
mov dword [esp + 0x3c], eax
mov byte [esp + 0x100], 0xd
mov dword [esp + 0x40], eax
mov byte [esp + 0x100], 0xe
mov dword [esp + 0x44], eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x100], 0xf
call fcn.590abbc0
lea ecx, [esp + 0xa8]
mov byte [esp + 0x100], 0x10
call fcn.590abbc0
lea ecx, [esp + 0xe8]
mov byte [esp + 0x100], 0x11
call fcn.590b3a40
mov edx, dword [esp + 0x10]
xor ebp, ebp
mov byte [esp + 0x100], 0x12
cmp dword [edx - 8], ebp
je 0x590485f3
mov bl, 0x21
mov edi, 0x59188604
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push 0x59188604
call fcn.590952c0
add esp, 0xc
test eax, eax
jne 0x59048182
mov edi, 0x59188604
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
lea ecx, [esp + 0xc4]
push ecx
lea ecx, [esp + 0x18]
call fcn.590a30b0
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x104], 0x13
call fcn.590a1040
lea ecx, [esp + 0xc0]
mov byte [esp + 0x100], 0x12
call fcn.590a0ec0
push ebp
lea edx, [esp + 0x14]
push esi
lea eax, [esp + 0xc0]
push edx
push eax
call fcn.59032600
add esp, 0x10
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x104], 0x14
call fcn.590a63d0
lea ecx, [esp + 0xb8]
mov byte [esp + 0x100], 0x12
call fcn.590a6240
mov ecx, dword [esp + 0x30]
lea edx, [esp + 0xc8]
push ecx
push edx
call fcn.5900b2f0
add esp, 8
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x104], 0x15
call fcn.590a63d0
mov byte [esp + 0x100], 0x12
lea ecx, [esp + 0xc8]
jmp 0x590485a6
mov edi, str.MTo
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x10]
not ecx
dec ecx
push ecx
push eax
push str.MTo
call fcn.590952c0
add esp, 0xc
test eax, eax
jne 0x5904822e
mov edi, str.MTo
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
lea ecx, [esp + 0xd4]
push ecx
lea ecx, [esp + 0x18]
call fcn.590a30b0
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x104], 0x16
call fcn.590a1040
lea ecx, [esp + 0xd0]
mov byte [esp + 0x100], 0x12
call fcn.590a0ec0
push ebp
lea edx, [esp + 0x14]
push esi
lea eax, [esp + 0xe0]
push edx
push eax
call fcn.59032600
add esp, 0x10
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x104], 0x17
call fcn.590a63d0
mov byte [esp + 0x100], 0x12
lea ecx, [esp + 0xd8]
jmp 0x590485a6
mov edi, str.MCC
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
mov ecx, dword [esp + 0x14]
push ecx
push str.MCC
call fcn.590952c0
add esp, 0xc
test eax, eax
jne 0x590482da
mov edi, str.MCC
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea edx, [esp + 0xe0]
push ecx
push edx
lea ecx, [esp + 0x18]
call fcn.590a30b0
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x104], 0x18
call fcn.590a1040
lea ecx, [esp + 0xe0]
mov byte [esp + 0x100], 0x12
call fcn.590a0ec0
push ebp
lea eax, [esp + 0x14]
push esi
lea ecx, [esp + 0xdc]
push eax
push ecx
call fcn.59032600
add esp, 0x10
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x104], 0x19
call fcn.590a63d0
mov byte [esp + 0x100], 0x12
lea ecx, [esp + 0xd4]
jmp 0x590485a6
mov edi, 0x591882d4
or ecx, 0xffffffff
xor eax, eax
mov edx, dword [esp + 0x10]
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push 0x591882d4
call fcn.590952c0
add esp, 0xc
test eax, eax
jne 0x59048386
mov edi, 0x591882d4
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0xc4]
push ecx
push eax
lea ecx, [esp + 0x18]
call fcn.590a30b0
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x104], 0x1a
call fcn.590a1040
lea ecx, [esp + 0xc4]
mov byte [esp + 0x100], 0x12
call fcn.590a0ec0
push ebp
lea ecx, [esp + 0x14]
push esi
lea edx, [esp + 0xec]
push ecx
push edx
call fcn.59032600
add esp, 0x10
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x104], 0x1b
call fcn.590a63d0
mov byte [esp + 0x100], 0x12
lea ecx, [esp + 0xe4]
jmp 0x590485a6
mov edi, 0x59188530
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x10]
not ecx
dec ecx
push ecx
push eax
push 0x59188530
call fcn.590952c0
add esp, 0xc
test eax, eax
jne 0x59048433
mov edi, 0x59188530
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
lea ecx, [esp + 0xd0]
push ecx
lea ecx, [esp + 0x18]
call fcn.590a30b0
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x104], 0x1c
call fcn.590a1040
lea ecx, [esp + 0xcc]
mov byte [esp + 0x100], 0x12
call fcn.590a0ec0
push 1
lea edx, [esp + 0x14]
push esi
lea eax, [esp + 0xe4]
push edx
push eax
call fcn.59032600
add esp, 0x10
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x104], 0x1d
call fcn.590a63d0
mov byte [esp + 0x100], 0x12
lea ecx, [esp + 0xdc]
jmp 0x590485a6
mov edi, str.AttachFileName
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
mov ecx, dword [esp + 0x14]
push ecx
push str.AttachFileName
call fcn.590952c0
add esp, 0xc
test eax, eax
jne 0x590485ab
mov edi, str.AttachFileName
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea edx, [esp + 0xbc]
push ecx
push edx
lea ecx, [esp + 0x18]
call fcn.590a30b0
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x104], 0x1e
call fcn.590a1040
lea ecx, [esp + 0xbc]
mov byte [esp + 0x100], 0x12
call fcn.590a0ec0
push ebp
lea eax, [esp + 0x14]
push esi
lea ecx, [esp + 0x20]
push eax
push ecx
call fcn.59032600
add esp, 0x10
mov edx, dword [esp + 0x18]
mov byte [esp + 0x100], 0x1f
cmp dword [edx - 8], ebp
je 0x5904859a
lea eax, [esp + 0x28]
lea ecx, [esp + 0x14]
push eax
push 0x5918d5c8
push ecx
lea ecx, [esp + 0x24]
mov dword [esp + 0x34], ebp
call fcn.590aaa40
mov edx, dword [esp + 0x14]
mov byte [esp + 0x100], 0x20
cmp dword [edx - 8], ebp
je 0x59048589
push 0x5c
lea ecx, [esp + 0x18]
call fcn.590a73f0
inc eax
lea ecx, [esp + 0x14]
push eax
lea eax, [esp + 0x30]
push eax
call fcn.590a8530
mov edx, dword [esp + 0x58]
lea ecx, [esp + 0x2c]
push ecx
push edx
lea ecx, [esp + 0x5c]
mov byte [esp + 0x108], bl
call fcn.590ac1d0
lea eax, [esp + 0x28]
lea ecx, [esp + 0x50]
push eax
push 0x5918d5c8
push ecx
lea ecx, [esp + 0x24]
call fcn.590aaa40
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x104], 0x22
call fcn.590a63d0
lea ecx, [esp + 0x50]
mov byte [esp + 0x100], bl
call fcn.590a6240
lea ecx, [esp + 0x2c]
mov byte [esp + 0x100], 0x20
call fcn.590a6240
mov edx, dword [esp + 0x14]
cmp dword [edx - 8], ebp
jne 0x590484fc
lea ecx, [esp + 0x14]
mov byte [esp + 0x100], 0x1f
call fcn.590a6240
mov byte [esp + 0x100], 0x12
lea ecx, [esp + 0x18]
call fcn.590a6240
lea eax, [esp + 0x48]
lea ecx, [esp + 0x20]
push eax
push 0x59188924
push ecx
lea ecx, [esp + 0x44]
call fcn.59082010
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x104], 0x23
call fcn.590a1040
lea ecx, [esp + 0x20]
mov byte [esp + 0x100], 0x12
call fcn.590a0ec0
mov edx, dword [esp + 0x10]
cmp dword [edx - 8], ebp
jne 0x5904809f
mov eax, dword [esp + 0x58]
xor esi, esi
cmp eax, ebp
jle 0x59048702
mov bl, 0x24
mov edx, dword [0x5916287c]
mov dword [esp + 0x28], edx
mov eax, dword [esp + 0x54]
push 0x2e
mov byte [esp + 0x104], bl
lea ecx, [eax + esi*4]
call fcn.590a73f0
cmp eax, 0xffffffff
je 0x5904865e
mov edx, dword [esp + 0x54]
inc eax
lea ecx, [esp + 0x20]
push eax
push ecx
lea ecx, [edx + esi*4]
call fcn.590a8530
mov eax, dword [eax]
lea ecx, [esp + 0x28]
push eax
mov byte [esp + 0x104], 0x25
call fcn.590a1200
lea ecx, [esp + 0x20]
mov byte [esp + 0x100], bl
call fcn.590a6240
lea eax, [esp + 0x18]
push 0x59188bd0
push eax
call fcn.59059db0
add esp, 8
mov eax, dword [esp + 0x118]
mov byte [esp + 0x100], 0x26
test eax, eax
jne 0x59048694
mov ecx, dword [esp + 0x18]
push ecx
call fcn.5900f7f0
add esp, 4
test eax, eax
je 0x590486d4
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x2c]
push edx
call fcn.590a5940
mov ecx, dword [esp + 0xac]
lea eax, [esp + 0x2c]
push eax
push ecx
lea ecx, [esp + 0xb0]
mov byte [esp + 0x108], 0x27
call fcn.590ac1d0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x100], 0x26
call fcn.590a6240
lea ecx, [esp + 0x18]
mov byte [esp + 0x100], bl
call fcn.590a0ec0
lea ecx, [esp + 0x28]
mov byte [esp + 0x100], 0x12
call fcn.590a0ec0
mov eax, dword [esp + 0x58]
inc esi
cmp esi, eax
jl 0x59048603
mov edx, dword [esp + 0x1c]
xor ebx, ebx
cmp dword [edx - 8], ebx
jne 0x59048807
mov eax, dword [esp + 0x3c]
cmp dword [eax - 8], ebx
jne 0x59048807
mov ecx, dword [esp + 0x44]
cmp dword [ecx - 8], ebx
jne 0x59048807
mov edx, dword [esp + 0x34]
cmp dword [edx - 8], ebx
jne 0x59048807
cmp dword [esp + 0xac], ebx
jne 0x59048807
mov eax, dword [esp + 0x40]
cmp dword [eax - 8], ebx
jne 0x59048807
lea ecx, [esp + 0xe8]
mov byte [esp + 0x100], 0x11
call fcn.590b3a50
lea ecx, [esp + 0xa8]
mov byte [esp + 0x100], 0x10
call fcn.590abbd0
lea ecx, [esp + 0x54]
mov byte [esp + 0x100], 0xf
call fcn.590abbd0
lea ecx, [esp + 0x44]
mov byte [esp + 0x100], 0xe
call fcn.590a6240
lea ecx, [esp + 0x40]
mov byte [esp + 0x100], 0xd
call fcn.590a6240
lea ecx, [esp + 0x3c]
mov byte [esp + 0x100], 0xc
call fcn.590a6240
lea ecx, [esp + 0x1c]
mov byte [esp + 0x100], 0xb
call fcn.590a6240
lea ecx, [esp + 0x30]
mov byte [esp + 0x100], 0xa
call fcn.590a6240
lea ecx, [esp + 0x34]
mov byte [esp + 0x100], 8
call fcn.590a6240
lea ecx, [esp + 0x10]
mov byte [esp + 0x100], 7
call fcn.590a0ec0
jmp 0x590490c5
mov eax, dword [esp + 0x118]
cmp eax, ebx
je 0x590488d1
mov dword [eax], 1
lea ecx, [esp + 0xe8]
mov byte [esp + 0x100], 0x11
call fcn.590b3a50
lea ecx, [esp + 0xa8]
mov byte [esp + 0x100], 0x10
call fcn.590abbd0
lea ecx, [esp + 0x54]
mov byte [esp + 0x100], 0xf
call fcn.590abbd0
lea ecx, [esp + 0x44]
mov byte [esp + 0x100], 0xe
call fcn.590a6240
lea ecx, [esp + 0x40]
mov byte [esp + 0x100], 0xd
call fcn.590a6240
lea ecx, [esp + 0x3c]
mov byte [esp + 0x100], 0xc
call fcn.590a6240
lea ecx, [esp + 0x1c]
mov byte [esp + 0x100], 0xb
call fcn.590a6240
lea ecx, [esp + 0x30]
mov byte [esp + 0x100], 0xa
call fcn.590a6240
lea ecx, [esp + 0x34]
mov byte [esp + 0x100], 8
call fcn.590a6240
lea ecx, [esp + 0x10]
mov byte [esp + 0x100], 7
call fcn.590a0ec0
jmp 0x590490c5
mov eax, dword [0x59162880]
mov dword [esp + 0x4c], eax
mov esi, dword [esp + 0x114]
mov byte [esp + 0x100], 0x2a
cmp esi, ebx
je 0x59048fb4
mov dword [esp + 0x80], eax
mov byte [esp + 0x100], 0x2b
mov dword [esp + 0x84], eax
mov byte [esp + 0x100], 0x2c
mov dword [esp + 0x88], eax
mov byte [esp + 0x100], 0x2d
mov dword [esp + 0x8c], eax
mov byte [esp + 0x100], 0x2e
mov dword [esp + 0x90], eax
mov byte [esp + 0x100], 0x2f
mov dword [esp + 0x94], eax
mov byte [esp + 0x100], 0x30
mov dword [esp + 0x98], eax
mov byte [esp + 0x100], 0x31
mov dword [esp + 0x9c], eax
mov ecx, dword [0x5916287c]
mov byte [esp + 0x100], 0x32
mov dword [esp + 0xa0], ecx
mov eax, dword [esi + 4]
mov edx, dword [esi]
mov ecx, dword [esi + 8]
mov byte [esp + 0x100], 0x34
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], edx
mov edx, dword [esi + 0xc]
lea eax, [esp + 0x78]
push eax
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], edx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov ecx, dword [esp + 0x110]
lea edx, [esp + 0x24]
mov dword [esp + 0x64], ecx
push edx
lea ecx, [esp + 0x88]
call fcn.590a63d0
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x8c]
push eax
call fcn.590a63d0
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x94]
call fcn.590a63d0
lea edx, [esp + 0x40]
lea ecx, [esp + 0x94]
push edx
call fcn.590a63d0
lea eax, [esp + 0x44]
lea ecx, [esp + 0x88]
push eax
call fcn.590a63d0
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x9c]
call fcn.590a63d0
lea edx, [esp + 0x30]
lea ecx, [esp + 0x9c]
push edx
call fcn.590a63d0
lea eax, [esp + 0x4c]
lea ecx, [esp + 0x80]
push eax
call fcn.590a63d0
lea ecx, [esp + 0x20]
push 0x59189484
push ecx
call fcn.59059ed0
add esp, 8
mov byte [esp + 0x100], 0x35
push eax
lea ecx, [esp + 0xa4]
call fcn.590a1040
lea ecx, [esp + 0x20]
mov byte [esp + 0x100], 0x34
call fcn.590a0ec0
mov edx, dword [esp + 0xa0]
push 0x180
push 0x8101
push edx
call fcn.5908928d
mov edi, eax
mov eax, dword [0x5916287c]
add esp, 0xc
mov dword [esp + 0x14], eax
cmp edi, 0xffffffff
mov byte [esp + 0x100], 0x36
je 0x59048b0d
mov ecx, dword [esp + 0x10c]
mov edx, dword [esp + 0x108]
push ecx
push edx
push edi
call fcn.5908909d
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x84]
mov edx, dword [esi + 0xc]
add esp, 0xc
push eax
mov eax, dword [esi + 8]
push ecx
mov ecx, dword [esi + 4]
push edx
mov edx, dword [esi]
push eax
push ecx
push edx
lea eax, [esp + 0x2c]
push str._r_n_r_nliTickBegin:_I64u__liTickEnd:_I64u__liTickRecord:_I64u
push eax
call fcn.590a3d20
mov ecx, dword [esp + 0x34]
add esp, 0x20
mov eax, dword [ecx - 8]
lea ecx, [esp + 0x14]
push eax
push ebx
call fcn.590a1b50
push eax
push edi
call fcn.5908909d
push edi
call fcn.59088fbd
add esp, 0x10
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10c]
mov eax, dword [edx - 8]
add eax, ecx
mov dword [esp + 0xa4], eax
mov eax, dword [0x591ad584]
mov edi, eax
cmp edi, eax
mov dword [esp + 0x28], edi
jl 0x59048d6a
lea ebp, [edi + 1]
cmp ebp, ebx
jne 0x59048b84
mov esi, dword [0x591ad580]
cmp esi, ebx
je 0x59048b73
mov edx, eax
dec eax
test edx, edx
je 0x59048b5f
lea ebp, [eax + 1]
mov ecx, esi
call fcn.59012880
add esi, 0x44
dec ebp
jne 0x59048b52
mov eax, dword [0x591ad580]
push eax
call fcn.5913d2f9
add esp, 4
mov dword [0x591ad580], ebx
mov dword [0x591ad588], ebx
mov dword [0x591ad584], ebx
jmp 0x59048d6a
mov ecx, dword [0x591ad580]
cmp ecx, ebx
jne 0x59048bfe
mov esi, ebp
shl esi, 4
add esi, ebp
shl esi, 2
push esi
call fcn.5913d2d0
mov ecx, esi
mov edi, eax
mov edx, ecx
xor eax, eax
shr ecx, 2
mov dword [0x591ad580], edi
mov ebx, edi
rep stosd dword es:[edi], eax
mov ecx, edx
add esp, 4
and ecx, 3
mov dword [esp + 0x20], ebx
rep stosb byte es:[edi], al
lea esi, [ebp]
mov dword [esp + 0x50], ebx
test ebx, ebx
mov byte [esp + 0x100], 0x37
je 0x59048bdb
mov ecx, ebx
call fcn.5901acf0
add ebx, 0x44
mov byte [esp + 0x100], 0x36
dec esi
mov dword [esp + 0x20], ebx
jne 0x59048bc4
mov dword [0x591ad588], ebp
mov dword [0x591ad584], ebp
jmp 0x59048d66
mov esi, dword [0x591ad588]
cmp ebp, esi
jg 0x59048caf
cmp eax, ebp
jge 0x59048c7d
mov esi, eax
mov edx, ebp
shl esi, 4
add esi, eax
sub edx, eax
xor eax, eax
lea esi, [ecx + esi*4]
mov ecx, edx
shl ecx, 4
add ecx, edx
mov edi, esi
shl ecx, 2
mov ebx, ecx
mov dword [esp + 0x20], esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, ebx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, edx
dec edx
test eax, eax
je 0x59048ca4
lea edi, [edx + 1]
mov bl, 0x36
mov dword [esp + 0x50], esi
test esi, esi
mov byte [esp + 0x100], 0x38
je 0x59048c61
mov ecx, esi
call fcn.5901acf0
add esi, 0x44
mov byte [esp + 0x100], bl
dec edi
mov dword [esp + 0x20], esi
jne 0x59048c4a
mov dword [0x591ad584], ebp
jmp 0x59048d66
jle 0x59048ca4
mov edx, ebp
sub eax, ebp
shl edx, 4
add edx, ebp
lea esi, [ecx + edx*4]
mov ecx, eax
dec eax
test ecx, ecx
je 0x59048ca4
lea edi, [eax + 1]
push 0
mov ecx, esi
call fcn.59061010
add esi, 0x44
dec edi
jne 0x59048c95
mov dword [0x591ad584], ebp
jmp 0x59048d66
mov ecx, dword [0x591ad58c]
cmp ecx, ebx
jne 0x59048cdd
cdq
and edx, 7
add eax, edx
mov ecx, eax
sar ecx, 3
cmp ecx, 4
jge 0x59048cd0
mov ecx, 4
jmp 0x59048cdd
cmp ecx, 0x400
jle 0x59048cdd
mov ecx, 0x400
lea eax, [ecx + esi]
cmp ebp, eax
mov dword [esp + 0x18], eax
jl 0x59048cec
mov dword [esp + 0x18], ebp
mov eax, dword [esp + 0x18]
mov edx, eax
shl edx, 4
add edx, eax
shl edx, 2
push edx
call fcn.5913d2d0
mov ebx, eax
mov eax, dword [0x591ad584]
mov ecx, eax
mov esi, dword [0x591ad580]
shl ecx, 4
add ecx, eax
mov edi, ebx
shl ecx, 2
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x591ad584]
mov ecx, ebp
mov edx, eax
sub ecx, eax
shl edx, 4
add edx, eax
push ecx
lea eax, [ebx + edx*4]
push eax
call fcn.59061560
mov ecx, dword [0x591ad580]
push ecx
call fcn.5913d2f9
mov edx, dword [esp + 0x28]
add esp, 0x10
mov dword [0x591ad580], ebx
mov dword [0x591ad584], ebp
mov dword [0x591ad588], edx
mov edi, dword [esp + 0x28]
mov ecx, dword [0x591ad580]
mov eax, edi
mov edx, dword [esp + 0x64]
lea esi, [esp + 0x68]
shl eax, 4
add eax, edi
lea ebp, [ecx + eax*4]
mov ecx, 6
lea eax, [esp + 0x80]
lea edi, [ebp + 4]
mov dword [ebp], edx
rep movsd dword es:[edi], dword [esi]
push eax
lea ecx, [ebp + 0x1c]
call fcn.590a63d0
lea ecx, [esp + 0x84]
push ecx
lea ecx, [ebp + 0x20]
call fcn.590a63d0
lea edx, [esp + 0x88]
lea ecx, [ebp + 0x24]
push edx
call fcn.590a63d0
lea eax, [esp + 0x8c]
lea ecx, [ebp + 0x28]
push eax
call fcn.590a63d0
lea ecx, [esp + 0x90]
push ecx
lea ecx, [ebp + 0x2c]
call fcn.590a63d0
lea edx, [esp + 0x94]
lea ecx, [ebp + 0x30]
push edx
call fcn.590a63d0
lea eax, [esp + 0x98]
lea ecx, [ebp + 0x34]
push eax
call fcn.590a63d0
lea ecx, [esp + 0x9c]
push ecx
lea ecx, [ebp + 0x38]
call fcn.590a63d0
lea edx, [esp + 0xa0]
lea ecx, [ebp + 0x3c]
push edx
call fcn.590a1040
mov eax, dword [esp + 0xa4]
lea ecx, [esp + 0x14]
mov dword [ebp + 0x40], eax
mov byte [esp + 0x100], 0x34
call fcn.590a0ec0
lea ecx, [esp + 0xa0]
mov byte [esp + 0x100], 0x40
call fcn.590a0ec0
lea ecx, [esp + 0x9c]
mov byte [esp + 0x100], 0x3f
call fcn.590a6240
lea ecx, [esp + 0x98]
mov byte [esp + 0x100], 0x3e
call fcn.590a6240
lea ecx, [esp + 0x94]
mov byte [esp + 0x100], 0x3d
call fcn.590a6240
lea ecx, [esp + 0x90]
mov byte [esp + 0x100], 0x3c
call fcn.590a6240
lea ecx, [esp + 0x8c]
mov byte [esp + 0x100], 0x3b
call fcn.590a6240
mov byte [esp + 0x100], 0x3a
lea ecx, [esp + 0x88]
call fcn.590a6240
lea ecx, [esp + 0x84]
mov byte [esp + 0x100], 0x39
call fcn.590a6240
lea ecx, [esp + 0x80]
mov byte [esp + 0x100], 0x2a
call fcn.590a6240
lea ecx, [esp + 0x4c]
mov byte [esp + 0x100], 0x12
call fcn.590a6240
lea ecx, [esp + 0xe8]
mov byte [esp + 0x100], 0x11
call fcn.590b3a50
lea ecx, [esp + 0xa8]
mov byte [esp + 0x100], 0x10
call fcn.590abbd0
lea ecx, [esp + 0x54]
mov byte [esp + 0x100], 0xf
call fcn.590abbd0
lea ecx, [esp + 0x44]
mov byte [esp + 0x100], 0xe
call fcn.590a6240
lea ecx, [esp + 0x40]
mov byte [esp + 0x100], 0xd
call fcn.590a6240
lea ecx, [esp + 0x3c]
mov byte [esp + 0x100], 0xc
call fcn.590a6240
lea ecx, [esp + 0x1c]
mov byte [esp + 0x100], 0xb
call fcn.590a6240
lea ecx, [esp + 0x30]
mov byte [esp + 0x100], 0xa
call fcn.590a6240
lea ecx, [esp + 0x34]
mov byte [esp + 0x100], 8
call fcn.590a6240
lea ecx, [esp + 0x10]
mov byte [esp + 0x100], 7
call fcn.590a0ec0
jmp 0x590490c5
lea ecx, [esp + 0xe8]
lea edx, [esp + 0x54]
push ecx
lea eax, [esp + 0xac]
push edx
lea ecx, [esp + 0x38]
push eax
lea edx, [esp + 0x40]
push ecx
lea eax, [esp + 0x54]
push edx
lea ecx, [esp + 0x54]
push eax
lea edx, [esp + 0x54]
push ecx
lea eax, [esp + 0x38]
push edx
mov edx, dword [esp + 0x12c]
lea ecx, [esp + 0x44]
push eax
mov eax, dword [esp + 0x12c]
push ecx
push edx
push eax
call fcn.59024d80
add esp, 0x30
lea ecx, [esp + 0x4c]
mov byte [esp + 0x100], 0x12
call fcn.590a6240
lea ecx, [esp + 0xe8]
mov byte [esp + 0x100], 0x11
call fcn.590b3a50
lea ecx, [esp + 0xa8]
mov byte [esp + 0x100], 0x10
call fcn.590abbd0
lea ecx, [esp + 0x54]
mov byte [esp + 0x100], 0xf
call fcn.590abbd0
lea ecx, [esp + 0x44]
mov byte [esp + 0x100], 0xe
call fcn.590a6240
lea ecx, [esp + 0x40]
mov byte [esp + 0x100], 0xd
call fcn.590a6240
lea ecx, [esp + 0x3c]
mov byte [esp + 0x100], 0xc
call fcn.590a6240
lea ecx, [esp + 0x1c]
mov byte [esp + 0x100], 0xb
call fcn.590a6240
lea ecx, [esp + 0x30]
mov byte [esp + 0x100], 0xa
call fcn.590a6240
lea ecx, [esp + 0x34]
mov byte [esp + 0x100], 8
call fcn.590a6240
lea ecx, [esp + 0x10]
mov byte [esp + 0x100], 7
call fcn.590a0ec0
lea ecx, [esp + 0x38]
mov byte [esp + 0x100], 0
call fcn.590a0ec0
lea ecx, [esp + 0x24]
mov dword [esp + 0x100], 0xffffffff
call fcn.590a6240
mov ecx, dword [esp + 0xf8]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xf4
ret