Function at 0x4c2060
Capabilities:
Enumerate processes
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e9574
mov eax, dword fs:[0]
push eax
sub esp, 0x624
mov eax, dword [0x50b06c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor esi, esi
xor ebx, ebx
push esi
mov dword [ebp - 0x624], ebx
push 2
mov dword [ebp - 0x620], esi
mov dword [ebp - 0x628], esi
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov edi, eax
mov dword [ebp - 0x420], 0x128
lea eax, [ebp - 0x420]
mov dword [ebp - 0x62c], edi
push eax
push edi
call dword [sym.imp.KERNEL32.dll_Process32First]
lea eax, [ebp - 0x420]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x4c3c1f
push 0x10
push str.dGFza21nci5leGU
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
call fcn.00401320
mov dword [ebp - 4], 0
lea edx, [ebp - 0x178]
or ebx, 1
lea ecx, [ebp - 0x600]
mov dword [ebp - 0x624], ebx
call fcn.00402300
or ebx, 2
mov dword [ebp - 4], 1
cmp dword [eax + 0x14], 0x10
mov edi, ebx
mov dword [ebp - 0x624], ebx
jb 0x4c214b
mov eax, dword [eax]
lea ecx, [ebp - 0x3fc]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x4c2171
test dl, dl
je 0x4c216d
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x4c2171
add ecx, 2
add eax, 2
test dl, dl
jne 0x4c2151
xor eax, eax
jmp 0x4c2176
sbb eax, eax
or eax, 1
test eax, eax
je 0x4c32e8
push 0x10
push str.VGFza21nci5leGU
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x14c], 0xf
mov byte [ebp - 0x160], 0
call fcn.00401320
mov dword [ebp - 4], 2
lea edx, [ebp - 0x160]
or ebx, 4
lea ecx, [ebp - 0x5e8]
mov dword [ebp - 0x624], ebx
call fcn.00402300
mov ebx, edi
mov dword [ebp - 4], 3
or ebx, 0xc
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x624], ebx
mov edi, ebx
jb 0x4c21e8
mov eax, dword [eax]
lea ecx, [ebp - 0x3fc]
nop
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x4c2210
test dl, dl
je 0x4c220c
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x4c2210
add ecx, 2
add eax, 2
test dl, dl
jne 0x4c21f0
xor eax, eax
jmp 0x4c2215
sbb eax, eax
or eax, 1
test eax, eax
je 0x4c32e8
push 0xc
push str.ZG90YTIuZXhl
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0xf
mov byte [ebp - 0x148], 0
call fcn.00401320
mov dword [ebp - 4], 4
lea edx, [ebp - 0x148]
or ebx, 0x10
lea ecx, [ebp - 0x5d0]
mov dword [ebp - 0x624], ebx
call fcn.00402300
mov ebx, edi
mov dword [ebp - 4], 5
or ebx, 0x30
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x624], ebx
mov edi, ebx
jb 0x4c2287
mov eax, dword [eax]
lea ecx, [ebp - 0x3fc]
nop dword [eax]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x4c22b0
test dl, dl
je 0x4c22ac
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x4c22b0
add ecx, 2
add eax, 2
test dl, dl
jne 0x4c2290
xor eax, eax
jmp 0x4c22b5
sbb eax, eax
or eax, 1
test eax, eax
je 0x4c32e8
push 0xc
push str.Y3Nnby5leGU
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0xf
mov byte [ebp - 0x130], 0
call fcn.00401320
mov dword [ebp - 4], 6
lea edx, [ebp - 0x130]
or ebx, 0x40
lea ecx, [ebp - 0x5b8]
mov dword [ebp - 0x624], ebx
call fcn.00402300
mov ebx, edi
mov dword [ebp - 4], 7
or ebx, 0xc0
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x624], ebx
mov edi, ebx
jb 0x4c232a
mov eax, dword [eax]
lea ecx, [ebp - 0x3fc]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x4c2350
test dl, dl
je 0x4c234c
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x4c2350
add ecx, 2
add eax, 2
test dl, dl
jne 0x4c2330
xor eax, eax
jmp 0x4c2355
sbb eax, eax
or eax, 1
test eax, eax
je 0x4c32e8
push 0x10
push str.cGF5ZGF5LmV4ZQ
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0xf
mov byte [ebp - 0x118], 0
call fcn.00401320
mov dword [ebp - 4], 8
lea edx, [ebp - 0x118]
or ebx, 0x100
lea ecx, [ebp - 0x5a0]
mov dword [ebp - 0x624], ebx
call fcn.00402300
mov ebx, edi
mov dword [ebp - 4], 9
or ebx, 0x300
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x624], ebx
mov edi, ebx
jb 0x4c23cd
mov eax, dword [eax]
lea ecx, [ebp - 0x3fc]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x4c23f3
test dl, dl
je 0x4c23ef
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x4c23f3
add ecx, 2
add eax, 2
test dl, dl
jne 0x4c23d3
xor eax, eax
jmp 0x4c23f8
sbb eax, eax
or eax, 1
test eax, eax
je 0x4c32e8
push 0x14
push str.TWluZWNyYWZ0LmV4ZQ
lea ecx, [ebp - 0x2f8]
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x2e4], 0xf
mov byte [ebp - 0x2f8], 0
call fcn.00401320
mov dword [ebp - 4], 0xa
lea edx, [ebp - 0x2f8]
or ebx, 0x400
lea ecx, [ebp - 0x588]
mov dword [ebp - 0x624], ebx
call fcn.00402300
mov ebx, edi
mov dword [ebp - 4], 0xb
or ebx, 0xc00
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x624], ebx
mov edi, ebx
jb 0x4c2470
mov eax, dword [eax]
lea ecx, [ebp - 0x3fc]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x4c2496
test dl, dl
je 0x4c2492
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x4c2496
add ecx, 2
add eax, 2
test dl, dl
jne 0x4c2476
xor eax, eax
jmp 0x4c249b
sbb eax, eax
or eax, 1
test eax, eax
je 0x4c32e8
push 0x14
push str.VGhlRGl2aXNpb24uZXhl
lea ecx, [ebp - 0x2e0]
mov dword [ebp - 0x2d0], 0
mov dword [ebp - 0x2cc], 0xf
mov byte [ebp - 0x2e0], 0
call fcn.00401320
mov dword [ebp - 4], 0xc
lea edx, [ebp - 0x2e0]
or ebx, 0x1000
lea ecx, [ebp - 0x618]
mov dword [ebp - 0x624], ebx
call fcn.00402300
mov ebx, edi
mov dword [ebp - 4], 0xd
or ebx, 0x3000
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x624], ebx
mov edi, ebx
jb 0x4c2513
mov eax, dword [eax]
lea ecx, [ebp - 0x3fc]
nop dword [eax]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x4c2540
test dl, dl
je 0x4c253c
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x4c2540
add ecx, 2
add eax, 2
test dl, dl
jne 0x4c2520
xor eax, eax
jmp 0x4c2545
sbb eax, eax
or eax, 1
test eax, eax
je 0x4c32e8
push 0xc
push str.R1RBNS5leGU
lea ecx, [ebp - 0x2c8]
mov dword [ebp - 0x2b8], 0
mov dword [ebp - 0x2b4], 0xf
mov byte [ebp - 0x2c8], 0
call fcn.00401320
mov dword [ebp - 4], 0xe
lea edx, [ebp - 0x2c8]
or ebx, 0x4000
lea ecx, [ebp - 0x558]
mov dword [ebp - 0x624], ebx
call fcn.00402300
mov ebx, edi
mov dword [ebp - 4], 0xf
or ebx, 0xc000
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x624], ebx
mov edi, ebx
jb 0x4c25bd
mov eax, dword [eax]
lea ecx, [ebp - 0x3fc]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x4c25e3
test dl, dl
je 0x4c25df
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x4c25e3
add ecx, 2
add eax, 2
test dl, dl
jne 0x4c25c3
xor eax, eax
jmp 0x4c25e8
sbb eax, eax
or eax, 1
test eax, eax
je 0x4c32e8
push 0xc
push str.cmU3LmV4ZQ
lea ecx, [ebp - 0x2b0]
mov dword [ebp - 0x2a0], 0
mov dword [ebp - 0x29c], 0xf
mov byte [ebp - 0x2b0], 0
call fcn.00401320
mov dword [ebp - 4], 0x10
lea edx, [ebp - 0x2b0]
or ebx, 0x10000
lea ecx, [ebp - 0x540]
mov dword [ebp - 0x624], ebx
call fcn.00402300
mov ebx, edi
mov dword [ebp - 4], 0x11
or ebx, 0x30000
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x624], ebx
mov edi, ebx
jb 0x4c2660
mov eax, dword [eax]
lea ecx, [ebp - 0x3fc]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x4c2686
test dl, dl
je 0x4c2682
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x4c2686
add ecx, 2
add eax, 2
test dl, dl
jne 0x4c2666
xor eax, eax
jmp 0x4c268b
sbb eax, eax
or eax, 1
test eax, eax
je 0x4c32e8
push 0xc
push str.UHJleS5leGU
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x284], 0xf
mov byte [ebp - 0x298], 0
call fcn.00401320
mov dword [ebp - 4], 0x12
lea edx, [ebp - 0x298]
or ebx, 0x40000
lea ecx, [ebp - 0x528]
mov dword [ebp - 0x624], ebx
call fcn.00402300
mov ebx, edi
mov dword [ebp - 4], 0x13
or ebx, 0xc0000
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x624], ebx
mov edi, ebx
jb 0x4c2703
mov eax, dword [eax]
lea ecx, [ebp - 0x3fc]
nop dword [eax]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x4c2730
test dl, dl
je 0x4c272c
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x4c2730
add ecx, 2
add eax, 2
test dl, dl
jne 0x4c2710
xor eax, eax
jmp 0x4c2735
sbb eax, eax
or eax, 1
test eax, eax
je 0x4c32e8
push 0x14
push str.T3ZlcndhdGNoLmV4ZQ
lea ecx, [ebp - 0x280]
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x26c], 0xf
mov byte [ebp - 0x280], 0
call fcn.00401320
mov dword [ebp - 4], 0x14
lea edx, [ebp - 0x280]
or ebx, 0x100000
lea ecx, [ebp - 0x510]
mov dword [ebp - 0x624], ebx
call fcn.00402300
mov ebx, edi
mov dword [ebp - 4], 0x15
or ebx, 0x300000
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x624], ebx
mov edi, ebx
jb 0x4c27ad
mov eax, dword [eax]
lea ecx, [ebp - 0x3fc]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x4c27d3
test dl, dl
je 0x4c27cf
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x4c27d3
add ecx, 2
add eax, 2
test dl, dl
jne 0x4c27b3
xor eax, eax
jmp 0x4c27d8
sbb eax, eax
or eax, 1
test eax, eax
je 0x4c32e8
push 0xc
push str.TUsxMC5leGU
lea ecx, [ebp - 0x268]
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 0xf
mov byte [ebp - 0x268], 0
call fcn.00401320
mov dword [ebp - 4], 0x16
lea edx, [ebp - 0x268]
or ebx, 0x400000
lea ecx, [ebp - 0x4f8]
mov dword [ebp - 0x624], ebx
call fcn.00402300
mov ebx, edi
mov dword [ebp - 4], 0x17
or ebx, 0xc00000
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x624], ebx
mov edi, ebx
jb 0x4c2850
mov eax, dword [eax]
lea ecx, [ebp - 0x3fc]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x4c2876
test dl, dl
je 0x4c2872
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x4c2876
add ecx, 2
add eax, 2
test dl, dl
jne 0x4c2856
xor eax, eax
jmp 0x4c287b
sbb eax, eax
or eax, 1
test eax, eax
je 0x4c32e8
push 0x14
push str.Y3Jvc3NmaXJlLmV4ZQ
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 0xf
mov byte [ebp - 0x250], 0
call fcn.00401320
mov dword [ebp - 4], 0x18
lea edx, [ebp - 0x250]
or ebx, 0x1000000
lea ecx, [ebp - 0x4e0]
mov dword [ebp - 0x624], ebx
call fcn.00402300
mov ebx, edi
mov dword [ebp - 4], 0x19
or ebx, 0x3000000
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x624], ebx
mov edi, ebx
jb 0x4c28f3
mov eax, dword [eax]
lea ecx, [ebp - 0x3fc]
nop dword [eax]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x4c2920
test dl, dl
je 0x4c291c
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x4c2920
add ecx, 2
add eax, 2
test dl, dl
jne 0x4c2900
xor eax, eax
jmp 0x4c2925
sbb eax, eax
or eax, 1
test eax, eax
je 0x4c32e8
push 8
push str.cGIuZXhl
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 0xf
mov byte [ebp - 0x238], 0
call fcn.00401320
mov dword [ebp - 4], 0x1a
lea edx, [ebp - 0x238]
or ebx, 0x4000000
lea ecx, [ebp - 0x570]
mov dword [ebp - 0x624], ebx
call fcn.00402300
mov ebx, edi
mov dword [ebp - 4], 0x1b
or ebx, 0xc000000
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x624], ebx
mov edi, ebx
jb 0x4c299d
mov eax, dword [eax]
lea ecx, [ebp - 0x3fc]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x4c29c3
test dl, dl
je 0x4c29bf
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x4c29c3
add ecx, 2
add eax, 2
test dl, dl
jne 0x4c29a3
xor eax, eax
jmp 0x4c29c8
sbb eax, eax
or eax, 1
test eax, eax
je 0x4c32e8
push 0xc
push str.d290LmV4ZQ
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x20c], 0xf
mov byte [ebp - 0x220], 0
call fcn.00401320
mov dword [ebp - 4], 0x1c
lea edx, [ebp - 0x220]
or ebx, 0x10000000
lea ecx, [ebp - 0x4c8]
mov dword [ebp - 0x624], ebx
call fcn.00402300
mov ebx, edi
mov dword [ebp - 4], 0x1d
or ebx, 0x30000000
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x624], ebx
mov edi, ebx
jb 0x4c2a40
mov eax, dword [eax]
lea ecx, [ebp - 0x3fc]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x4c2a66
test dl, dl
je 0x4c2a62
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x4c2a66
add ecx, 2
add eax, 2
test dl, dl
jne 0x4c2a46
xor eax, eax
jmp 0x4c2a6b
sbb eax, eax
or eax, 1
test eax, eax
je 0x4c32e8
push 0xc
push str.bG9sLmV4ZQ
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x1f8], 0
mov dword [ebp - 0x1f4], 0xf
mov byte [ebp - 0x208], 0
call fcn.00401320
mov dword [ebp - 4], 0x1e
lea edx, [ebp - 0x208]
or ebx, 0x40000000
lea ecx, [ebp - 0x4b0]
mov dword [ebp - 0x624], ebx
call fcn.00402300
mov ebx, edi
mov dword [ebp - 4], 0x1f
or ebx, 0xc0000000
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x624], ebx
jb 0x4c2ae1
mov eax, dword [eax]
lea ecx, [ebp - 0x3fc]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x4c2b07
test dl, dl
je 0x4c2b03
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x4c2b07
add ecx, 2
add eax, 2
test dl, dl
jne 0x4c2ae7
xor eax, eax
jmp 0x4c2b0c
sbb eax, eax
or eax, 1
test eax, eax
je 0x4c32e8
push 0x10
push str.cGVyZm1vbi5leGU
lea ecx, [ebp - 0x1f0]
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x1dc], 0xf
mov byte [ebp - 0x1f0], 0
call fcn.00401320
mov dword [ebp - 4], 0x20
lea edx, [ebp - 0x1f0]
or esi, 1
lea ecx, [ebp - 0x498]
mov dword [ebp - 0x620], esi
mov dword [ebp - 0x628], esi
call fcn.00402300
mov ecx, eax
mov dword [ebp - 4], 0x21
mov eax, esi
or eax, 2
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0x620], eax
mov edi, eax
mov dword [ebp - 0x628], eax
jb 0x4c2b8c
mov ecx, dword [ecx]
lea edx, [ebp - 0x3fc]
mov al, byte [edx]
cmp al, byte [ecx]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c2bd4
cmp byte [ebp - 0x619], 0
je 0x4c2bd0
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c2bd4
add edx, 2
add ecx, 2
cmp byte [ebp - 0x619], 0
jne 0x4c2b92
xor ecx, ecx
jmp 0x4c2bd9
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4c32ee
push 0x10
push str.UGVyZm1vbi5leGU
lea ecx, [ebp - 0x1d8]
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x1c4], 0xf
mov byte [ebp - 0x1d8], 0
call fcn.00401320
mov dword [ebp - 4], 0x22
lea edx, [ebp - 0x1d8]
mov esi, dword [ebp - 0x620]
lea ecx, [ebp - 0x480]
or esi, 4
mov dword [ebp - 0x628], esi
call fcn.00402300
mov ecx, eax
mov dword [ebp - 4], 0x23
or edi, 0xc
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0x620], edi
mov dword [ebp - 0x628], edi
jb 0x4c2c55
mov ecx, dword [ecx]
lea edx, [ebp - 0x3fc]
nop dword [eax + eax]
mov al, byte [edx]
cmp al, byte [ecx]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c2ca2
cmp byte [ebp - 0x619], 0
je 0x4c2c9e
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c2ca2
add edx, 2
add ecx, 2
cmp byte [ebp - 0x619], 0
jne 0x4c2c60
xor ecx, ecx
jmp 0x4c2ca7
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4c32ee
push 0x18
push str.U3lzdGVtRXhwbG9yZXIuZXhl
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 0xf
mov byte [ebp - 0x1c0], 0
call fcn.00401320
mov dword [ebp - 4], 0x24
lea edx, [ebp - 0x1c0]
mov esi, dword [ebp - 0x620]
lea ecx, [ebp - 0x468]
or esi, 0x10
mov dword [ebp - 0x628], esi
call fcn.00402300
mov ecx, eax
mov dword [ebp - 4], 0x25
or edi, 0x30
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0x620], edi
mov dword [ebp - 0x628], edi
jb 0x4c2d23
mov ecx, dword [ecx]
lea edx, [ebp - 0x3fc]
nop dword [eax]
mov al, byte [edx]
cmp al, byte [ecx]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c2d72
cmp byte [ebp - 0x619], 0
je 0x4c2d6e
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c2d72
add edx, 2
add ecx, 2
cmp byte [ebp - 0x619], 0
jne 0x4c2d30
xor ecx, ecx
jmp 0x4c2d77
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4c32ee
push 0x10
push str.VGFza01hbi5leGU
lea ecx, [ebp - 0x1a8]
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x194], 0xf
mov byte [ebp - 0x1a8], 0
call fcn.00401320
mov dword [ebp - 4], 0x26
lea edx, [ebp - 0x1a8]
mov esi, dword [ebp - 0x620]
lea ecx, [ebp - 0x450]
or esi, 0x40
mov dword [ebp - 0x628], esi
call fcn.00402300
mov ecx, eax
mov dword [ebp - 4], 0x27
or edi, 0xc0
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0x620], edi
mov dword [ebp - 0x628], edi
jb 0x4c2df6
mov ecx, dword [ecx]
lea edx, [ebp - 0x3fc]
nop dword [eax]
mov al, byte [edx]
cmp al, byte [ecx]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c2e42
cmp byte [ebp - 0x619], 0
je 0x4c2e3e
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c2e42
add edx, 2
add ecx, 2
cmp byte [ebp - 0x619], 0
jne 0x4c2e00
xor ecx, ecx
jmp 0x4c2e47
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4c32ee
push 0x18
push str.UHJvY2Vzc0hhY2tlci5leGU
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x17c], 0xf
mov byte [ebp - 0x190], 0
call fcn.00401320
mov dword [ebp - 4], 0x28
lea edx, [ebp - 0x190]
mov esi, dword [ebp - 0x620]
lea ecx, [ebp - 0x438]
or esi, 0x100
mov dword [ebp - 0x628], esi
call fcn.00402300
mov ecx, eax
mov dword [ebp - 4], 0x29
or edi, 0x300
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0x620], edi
mov dword [ebp - 0x628], edi
jb 0x4c2ec9
mov ecx, dword [ecx]
lea edx, [ebp - 0x3fc]
nop
mov al, byte [edx]
cmp al, byte [ecx]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c2f12
cmp byte [ebp - 0x619], 0
je 0x4c2f0e
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c2f12
add edx, 2
add ecx, 2
cmp byte [ebp - 0x619], 0
jne 0x4c2ed0
xor ecx, ecx
jmp 0x4c2f17
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4c32ee
push 0x14
push str.cHJvY2V4cDY0LmV4ZQ
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
call fcn.00401320
mov dword [ebp - 4], 0x2a
lea edx, [ebp - 0x88]
mov esi, dword [ebp - 0x620]
lea ecx, [ebp - 0x100]
or esi, 0x400
mov dword [ebp - 0x628], esi
call fcn.00402300
mov ecx, eax
mov dword [ebp - 4], 0x2b
or edi, 0xc00
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0x620], edi
mov dword [ebp - 0x628], edi
jb 0x4c2f93
mov ecx, dword [ecx]
lea edx, [ebp - 0x3fc]
nop dword [eax]
mov al, byte [edx]
cmp al, byte [ecx]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c2fe2
cmp byte [ebp - 0x619], 0
je 0x4c2fde
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c2fe2
add edx, 2
add ecx, 2
cmp byte [ebp - 0x619], 0
jne 0x4c2fa0
xor ecx, ecx
jmp 0x4c2fe7
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4c32ee
push 0x10
push str.cHJvY2V4cC5leGU
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
call fcn.00401320
mov dword [ebp - 4], 0x2c
lea edx, [ebp - 0x70]
mov esi, dword [ebp - 0x620]
lea ecx, [ebp - 0xe8]
or esi, 0x1000
mov dword [ebp - 0x628], esi
call fcn.00402300
mov ecx, eax
mov dword [ebp - 4], 0x2d
or edi, 0x3000
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0x620], edi
mov dword [ebp - 0x628], edi
jb 0x4c305a
mov ecx, dword [ecx]
lea edx, [ebp - 0x3fc]
mov al, byte [edx]
cmp al, byte [ecx]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c30a2
cmp byte [ebp - 0x619], 0
je 0x4c309e
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c30a2
add edx, 2
add ecx, 2
cmp byte [ebp - 0x619], 0
jne 0x4c3060
xor ecx, ecx
jmp 0x4c30a7
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4c32ee
push 0x10
push str.UHJvY21vbi5leGU
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00401320
mov dword [ebp - 4], 0x2e
lea edx, [ebp - 0x28]
mov esi, dword [ebp - 0x620]
lea ecx, [ebp - 0xd0]
or esi, 0x4000
mov dword [ebp - 0x628], esi
call fcn.00402300
mov ecx, eax
mov dword [ebp - 4], 0x2f
or edi, 0xc000
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0x620], edi
mov dword [ebp - 0x628], edi
jb 0x4c311a
mov ecx, dword [ecx]
lea edx, [ebp - 0x3fc]
mov al, byte [edx]
cmp al, byte [ecx]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c3162
cmp byte [ebp - 0x619], 0
je 0x4c315e
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c3162
add edx, 2
add ecx, 2
cmp byte [ebp - 0x619], 0
jne 0x4c3120
xor ecx, ecx
jmp 0x4c3167
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4c32ee
push 0x10
push str.RGFwaG5lLmV4ZQ
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
call fcn.00401320
mov dword [ebp - 4], 0x30
lea edx, [ebp - 0x58]
mov esi, dword [ebp - 0x620]
lea ecx, [ebp - 0xb8]
or esi, 0x10000
mov dword [ebp - 0x628], esi
call fcn.00402300
mov ecx, eax
mov dword [ebp - 4], 0x31
or edi, 0x30000
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0x620], edi
mov dword [ebp - 0x628], edi
jb 0x4c31da
mov ecx, dword [ecx]
lea edx, [ebp - 0x3fc]
mov al, byte [edx]
cmp al, byte [ecx]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c3222
cmp byte [ebp - 0x619], 0
je 0x4c321e
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c3222
add edx, 2
add ecx, 2
cmp byte [ebp - 0x619], 0
jne 0x4c31e0
xor ecx, ecx
jmp 0x4c3227
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4c32ee
push 0x10
push str.VHNsR2FtZS5leGU
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.00401320
mov dword [ebp - 4], 0x32
lea edx, [ebp - 0x40]
mov esi, dword [ebp - 0x620]
lea ecx, [ebp - 0xa0]
or esi, 0x40000
mov dword [ebp - 0x628], esi
call fcn.00402300
mov ecx, eax
mov eax, edi
or eax, 0xc0000
mov dword [ebp - 0x620], eax
cmp dword [ecx + 0x14], 0x10
jb 0x4c328e
mov ecx, dword [ecx]
lea edx, [ebp - 0x3fc]
mov al, byte [edx]
cmp al, byte [ecx]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c32d6
cmp byte [ebp - 0x619], 0
je 0x4c32d2
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
mov byte [ebp - 0x619], al
mov eax, dword [ebp - 0x620]
jne 0x4c32d6
add edx, 2
add ecx, 2
cmp byte [ebp - 0x619], 0
jne 0x4c3294
xor ecx, ecx
jmp 0x4c32db
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x4c32ee
mov byte [ebp - 0x619], 0
jmp 0x4c32f5
mov eax, dword [ebp - 0x620]
mov byte [ebp - 0x619], 1
test eax, 0x80000
je 0x4c3370
mov ecx, dword [ebp - 0x8c]
and eax, 0xfff7ffff
mov dword [ebp - 0x620], eax
cmp ecx, 0x10
jb 0x4c3355
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0xa0]
cmp eax, 0x1000
jb 0x4c3346
test cl, 0x1f
jne 0x4c3c16
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x4c3c16
sub ecx, eax
sub ecx, 4
cmp ecx, 0x1f
ja 0x4c3c16
mov ecx, eax
push ecx
call fcn.00487cad
mov eax, dword [ebp - 0x620]
add esp, 4
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
mov dword [ebp - 4], 0x31
test eax, 0x40000
je 0x4c33e3
mov ecx, dword [ebp - 0x2c]
and eax, 0xfffbffff
mov dword [ebp - 0x620], eax
cmp ecx, 0x10
jb 0x4c33d1
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x40]
cmp eax, 0x1000
jb 0x4c33c2
test cl, 0x1f
jne 0x4c3c16
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x4c3c16
sub ecx, eax
sub ecx, 4
cmp ecx, 0x1f
ja 0x4c3c16
mov ecx, eax
push ecx
call fcn.00487cad
mov eax, dword [ebp - 0x620]
add esp, 4
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov dword [ebp - 4], 0x30
test eax, 0x20000
je 0x4c3465
mov ecx, dword [ebp - 0xa4]
and eax, 0xfffdffff
mov dword [ebp - 0x620], eax
cmp ecx, 0x10
jb 0x4c344a
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0xb8]
cmp eax, 0x1000
jb 0x4c343b
test cl, 0x1f
jne 0x4c3c16
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x4c3c16
sub ecx, eax
sub ecx, 4
cmp ecx, 0x1f
ja 0x4c3c16
mov ecx, eax
push ecx
call fcn.00487cad
mov eax, dword [ebp - 0x620]
add esp, 4
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
mov dword [ebp - 4], 0x2f
test eax, 0x10000
je 0x4c34d8
mov ecx, dword [ebp - 0x44]
and eax, 0xfffeffff
mov dword [ebp - 0x620], eax
cmp ecx, 0x10
jb 0x4c34c6
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x58]
cmp eax, 0x1000
jb 0x4c34b7
test cl, 0x1f
jne 0x4c3c16
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x4c3c16
sub ecx, eax
sub ecx, 4
cmp ecx, 0x1f
ja 0x4c3c16
mov ecx, eax
push ecx
call fcn.00487cad
mov eax, dword [ebp - 0x620]
add esp, 4
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
mov dword [ebp - 4], 0x2e
test eax, 0x8000
je 0x4c355a
mov ecx, dword [ebp - 0xbc]
and eax, 0xffff7fff
mov dword [ebp - 0x620], eax
cmp ecx, 0x10
jb 0x4c353f
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0xd0]
cmp eax, 0x1000
jb 0x4c3530
test cl, 0x1f
jne 0x4c3c16
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x4c3c16
sub ecx, eax
sub ecx, 4
cmp ecx, 0x1f
ja 0x4c3c16
mov ecx, eax
push ecx
call fcn.00487cad
mov eax, dword [ebp - 0x620]
add esp, 4
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
mov dword [ebp - 4], 0x2d
test eax, 0x4000
je 0x4c35cd
mov ecx, dword [ebp - 0x14]
and eax, 0xffffbfff
mov dword [ebp - 0x620], eax
cmp ecx, 0x10
jb 0x4c35bb
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x28]
cmp eax, 0x1000
jb 0x4c35ac
test cl, 0x1f
jne 0x4c3c16
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x4c3c16
sub ecx, eax
sub ecx, 4
cmp ecx, 0x1f
ja 0x4c3c16
mov ecx, eax
push ecx
call fcn.00487cad
mov eax, dword [ebp - 0x620]
add esp, 4
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 4], 0x2c
test eax, 0x2000
je 0x4c364f
mov ecx, dword [ebp - 0xd4]
and eax, 0xffffdfff
mov dword [ebp - 0x620], eax
cmp ecx, 0x10
jb 0x4c3634
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0xe8]
cmp eax, 0x1000
jb 0x4c3625
test cl, 0x1f
jne 0x4c3c16
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x4c3c16
sub ecx, eax
sub ecx, 4
cmp ecx, 0x1f
ja 0x4c3c16
mov ecx, eax
push ecx
call fcn.00487cad
mov eax, dword [ebp - 0x620]
add esp, 4
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0xf
mov byte [ebp - 0xe8], 0
mov dword [ebp - 4], 0x2b
test eax, 0x1000
je 0x4c36c2
mov ecx, dword [ebp - 0x5c]
and eax, 0xffffefff
mov dword [ebp - 0x620], eax
cmp ecx, 0x10
jb 0x4c36b0
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x70]
cmp eax, 0x1000
jb 0x4c36a1
test cl, 0x1f
jne 0x4c3c16
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x4c3c16
sub ecx, eax
sub ecx, 4
cmp ecx, 0x1f
ja 0x4c3c16
mov ecx, eax
push ecx
call fcn.00487cad
mov eax, dword [ebp - 0x620]
add esp, 4
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
mov dword [ebp - 4], 0x2a
test eax, 0x800
je 0x4c3744
mov ecx, dword [ebp - 0xec]
and eax, 0xfffff7ff
mov dword [ebp - 0x620], eax
cmp ecx, 0x10
jb 0x4c3729
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x100]
cmp eax, 0x1000
jb 0x4c371a
test cl, 0x1f
jne 0x4c3c16
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x4c3c16
sub ecx, eax
sub ecx, 4
cmp ecx, 0x1f
ja 0x4c3c16
mov ecx, eax
push ecx
call fcn.00487cad
mov eax, dword [ebp - 0x620]
add esp, 4
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0xf
mov byte [ebp - 0x100], 0
mov dword [ebp - 4], 0x29
test eax, 0x400
je 0x4c37bd
mov ecx, dword [ebp - 0x74]
and eax, 0xfffffbff
mov dword [ebp - 0x620], eax
cmp ecx, 0x10
jb 0x4c37a8
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x88]
cmp eax, 0x1000
jb 0x4c3799
test cl, 0x1f
jne 0x4c3c16
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x4c3c16
sub ecx, eax
sub ecx, 4
cmp ecx, 0x1f
ja 0x4c3c16
mov ecx, eax
push ecx
call fcn.00487cad
mov eax, dword [ebp - 0x620]
add esp, 4
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
test eax, 0x200
je 0x4c37e0
and eax, 0xfffffdff
lea ecx, [ebp - 0x438]
mov dword [ebp - 0x620], eax
call fcn.004012c0
mov eax, dword [ebp - 0x620]
test eax, 0x100
je 0x4c3803
and eax, 0xfffffeff
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x620], eax
call fcn.004012c0
mov eax, dword [ebp - 0x620]
test al, al
jns 0x4c3823
and eax, 0xffffff7f
lea ecx, [ebp - 0x450]
mov dword [ebp - 0x620], eax
call fcn.004012c0
mov eax, dword [ebp - 0x620]
test al, 0x40
je 0x4c3841
and eax, 0xffffffbf
lea ecx, [ebp - 0x1a8]
mov dword [ebp - 0x620], eax
call fcn.004012c0
mov eax, dword [ebp - 0x620]
test al, 0x20
je 0x4c385f
and eax, 0xffffffdf
lea ecx, [ebp - 0x468]
mov dword [ebp - 0x620], eax
call fcn.004012c0
mov eax, dword [ebp - 0x620]
test al, 0x10
je 0x4c387d
and eax, 0xffffffef
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x620], eax
call fcn.004012c0
mov eax, dword [ebp - 0x620]
test al, 8
je 0x4c389b
and eax, 0xfffffff7
lea ecx, [ebp - 0x480]
mov dword [ebp - 0x620], eax
call fcn.004012c0
mov eax, dword [ebp - 0x620]
test al, 4
je 0x4c38b9
and eax, 0xfffffffb
lea ecx, [ebp - 0x1d8]
mov dword [ebp - 0x620], eax
call fcn.004012c0
mov eax, dword [ebp - 0x620]
test al, 2
je 0x4c38d7
and eax, 0xfffffffd
lea ecx, [ebp - 0x498]
mov dword [ebp - 0x620], eax
call fcn.004012c0
mov eax, dword [ebp - 0x620]
test al, 1
je 0x4c38ef
and eax, 0xfffffffe
lea ecx, [ebp - 0x1f0]
mov dword [ebp - 0x620], eax
call fcn.004012c0
test ebx, ebx
jns 0x4c3904
lea ecx, [ebp - 0x4b0]
and ebx, 0x7fffffff
call fcn.004012c0
test ebx, 0x40000000
je 0x4c391d
lea ecx, [ebp - 0x208]
and ebx, 0xbfffffff
call fcn.004012c0
test ebx, 0x20000000
je 0x4c3936
lea ecx, [ebp - 0x4c8]
and ebx, 0xdfffffff
call fcn.004012c0
test ebx, 0x10000000
je 0x4c394f
lea ecx, [ebp - 0x220]
and ebx, 0xefffffff
call fcn.004012c0
test ebx, 0x8000000
je 0x4c3968
lea ecx, [ebp - 0x570]
and ebx, 0xf7ffffff
call fcn.004012c0
test ebx, 0x4000000
je 0x4c3981
lea ecx, [ebp - 0x238]
and ebx, 0xfbffffff
call fcn.004012c0
test ebx, 0x2000000
je 0x4c399a
lea ecx, [ebp - 0x4e0]
and ebx, 0xfdffffff
call fcn.004012c0
test ebx, 0x1000000
je 0x4c39b3
lea ecx, [ebp - 0x250]
and ebx, 0xfeffffff
call fcn.004012c0
test ebx, 0x800000
je 0x4c39cc
lea ecx, [ebp - 0x4f8]
and ebx, 0xff7fffff
call fcn.004012c0
test ebx, 0x400000
je 0x4c39e5
lea ecx, [ebp - 0x268]
and ebx, 0xffbfffff
call fcn.004012c0
test ebx, 0x200000
je 0x4c39fe
lea ecx, [ebp - 0x510]
and ebx, 0xffdfffff
call fcn.004012c0
test ebx, 0x100000
je 0x4c3a17
lea ecx, [ebp - 0x280]
and ebx, 0xffefffff
call fcn.004012c0
test ebx, 0x80000
je 0x4c3a30
lea ecx, [ebp - 0x528]
and ebx, 0xfff7ffff
call fcn.004012c0
test ebx, 0x40000
je 0x4c3a49
lea ecx, [ebp - 0x298]
and ebx, 0xfffbffff
call fcn.004012c0
test ebx, 0x20000
je 0x4c3a62
lea ecx, [ebp - 0x540]
and ebx, 0xfffdffff
call fcn.004012c0
test ebx, 0x10000
je 0x4c3a7b
lea ecx, [ebp - 0x2b0]
and ebx, 0xfffeffff
call fcn.004012c0
test ebx, 0x8000
je 0x4c3a94
lea ecx, [ebp - 0x558]
and ebx, 0xffff7fff
call fcn.004012c0
test ebx, 0x4000
je 0x4c3aad
lea ecx, [ebp - 0x2c8]
and ebx, 0xffffbfff
call fcn.004012c0
test ebx, 0x2000
je 0x4c3ac6
lea ecx, [ebp - 0x618]
and ebx, 0xffffdfff
call fcn.004012c0
test ebx, 0x1000
je 0x4c3adf
lea ecx, [ebp - 0x2e0]
and ebx, 0xffffefff
call fcn.004012c0
test ebx, 0x800
je 0x4c3af8
lea ecx, [ebp - 0x588]
and ebx, 0xfffff7ff
call fcn.004012c0
test ebx, 0x400
je 0x4c3b11
lea ecx, [ebp - 0x2f8]
and ebx, 0xfffffbff
call fcn.004012c0
test ebx, 0x200
je 0x4c3b2a
lea ecx, [ebp - 0x5a0]
and ebx, 0xfffffdff
call fcn.004012c0
test ebx, 0x100
je 0x4c3b43
lea ecx, [ebp - 0x118]
and ebx, 0xfffffeff
call fcn.004012c0
test bl, bl
jns 0x4c3b58
lea ecx, [ebp - 0x5b8]
and ebx, 0xffffff7f
call fcn.004012c0
test bl, 0x40
je 0x4c3b6b
lea ecx, [ebp - 0x130]
and ebx, 0xffffffbf
call fcn.004012c0
test bl, 0x20
je 0x4c3b7e
lea ecx, [ebp - 0x5d0]
and ebx, 0xffffffdf
call fcn.004012c0
test bl, 0x10
je 0x4c3b91
lea ecx, [ebp - 0x148]
and ebx, 0xffffffef
call fcn.004012c0
test bl, 8
je 0x4c3ba4
lea ecx, [ebp - 0x5e8]
and ebx, 0xfffffff7
call fcn.004012c0
test bl, 4
je 0x4c3bb7
lea ecx, [ebp - 0x160]
and ebx, 0xfffffffb
call fcn.004012c0
test bl, 2
je 0x4c3bca
lea ecx, [ebp - 0x600]
and ebx, 0xfffffffd
call fcn.004012c0
mov dword [ebp - 4], 0xffffffff
test bl, 1
je 0x4c3be4
lea ecx, [ebp - 0x178]
and ebx, 0xfffffffe
call fcn.004012c0
cmp byte [ebp - 0x619], 0
jne 0x4c3c1b
lea eax, [ebp - 0x420]
mov byte [ebp - 0x619], 0
push eax
push dword [ebp - 0x62c]
call dword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x4c3c1f
mov esi, dword [ebp - 0x620]
jmp 0x4c20e3
call fcn.004a30af
mov al, 1
jmp 0x4c3c25
mov al, byte [ebp - 0x619]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004879f1
mov esp, ebp
pop ebp
ret