Function at 0x4c1fd1
Capabilities:
Contain obfuscated stackstrings
Enumerate processes

Disassembly:
push 0x7c4
mov eax, 0x5441db
call fcn.00506b61
push 0x69
pop ecx
mov esi, str.4nQlAhdMa12dSxX6cS7SjLEb3zLAMfUZSxViyroe5wxHsgITFt5whb0Bug5WFaSGLHGYIetxgFbA71JoZdGM2gksvrIvHUxNn91qwgxEJYSiGZtpj0TZfzdQTjrNhDWAv7FFkwd4JDgdXB6C6S92mPD7Z6ypBh4AgYvJjHOeBUaI8Nt3q0WxKVxTtKN5epvb36CViYM065YHdUX5gOvSQ687GyMrdGEWkHKTT18QPvQA1ewU3ePvSJQTtGNRJ3AmoxSb9D5kewCx8mNedJ22vGMRqx8n5EGoGF9cbkDSoMsThKV6TR1iaD9aaoPYDkbLf3D4ZbFs2pLWmSRd48lJuNXMZCMkOtd1jdRrQoMF60xG2A4FtIfH4wlFZ50prbVnvsB6XOV77tDkaEouWZB5MAGpojZi0XaqA1R
lea edi, [ebp - 0x33c]
rep movsd dword es:[edi], dword [esi]
push 0x48
pop ecx
mov esi, str.JGa4e8QMxneaIGENT3B0CuKlETmO00rFhlOyYewaUbxwsH5hs3RDT9G4FXIoB7NYdyM2chEzgYgnF0PBQd0sMShfHwRy7kVUM2KBQhL6jTIlCAFltNfZspC2A5SknUVff8SmnupIvcreypf6Kr73TCOW3AUD8i33knZWMA7runcN5fqYIap2sVKDlhLuSGusAiDNsochP6GqT4cBnEn9mpF5XIG5aGI6wTSF98NCSL7yvOkHrbohUmBlU0oKDloOFwfxcCnXIlQpg2AiafrfGUkH6GPtS330Kb
lea edi, [ebp - 0x198]
rep movsd dword es:[edi], dword [esi]
xor ebx, ebx
mov dword [ebp - 0x7d0], ebx
mov dword [ebp - 0x7cc], ebx
movsw word es:[edi], word [esi]
mov dword [ebp - 0x7c8], ebx
movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x33c]
mov dword [ebp - 4], ebx
push eax
lea ecx, [ebp - 0x354]
call fcn.00405820
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x7d0]
call fcn.00407e30
push ebx
push 1
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], bl
call fcn.0046d37e
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x354]
call fcn.00405820
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x7d0]
call fcn.00407e30
push ebx
push 1
lea ecx, [ebp - 0x354]
call fcn.0046d37e
mov edi, ebx
mov dword [ebp - 0x7b8], ebx
mov dword [ebp - 0x7bc], edi
mov dword [ebp - 0x7b4], ebx
mov dword [ebp - 0x7b0], ebx
mov dword [ebp - 0x7ac], ebx
mov dword [ebp - 0x7a8], ebx
xor eax, eax
mov byte [ebp - 4], 4
mov esi, str.7348100521350725563058530933695823301037
mov dword [ebp - 0x358], 7
push esi
mov dword [ebp - 0x35c], ebx
mov word [ebp - 0x36c], ax
call fcn.004f3a59
pop ecx
push eax
push esi
lea ecx, [ebp - 0x36c]
call fcn.00402650
lea eax, [ebp - 0x36c]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push 1
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 4
call fcn.00402590
mov dword [ebp - 0x358], 7
xor eax, eax
mov dword [ebp - 0x35c], ebx
mov esi, str.0336716015350242416615146926493141592020
mov word [ebp - 0x36c], ax
push esi
call fcn.004f3a59
pop ecx
push eax
push esi
lea ecx, [ebp - 0x36c]
call fcn.00402650
lea eax, [ebp - 0x36c]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push 1
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 4
call fcn.00402590
xor eax, eax
mov dword [ebp - 0x358], 7
mov esi, str.0163916906344737094656174049282309655016
mov dword [ebp - 0x35c], ebx
push esi
mov word [ebp - 0x36c], ax
call fcn.004f3a59
pop ecx
push eax
push esi
lea ecx, [ebp - 0x36c]
call fcn.00402650
lea eax, [ebp - 0x36c]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push 1
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 4
call fcn.00402590
xor eax, eax
mov dword [ebp - 0x358], 7
mov esi, str.3651266507364737104623190054302310655016
mov dword [ebp - 0x35c], ebx
push esi
mov word [ebp - 0x36c], ax
call fcn.004f3a59
pop ecx
push eax
push esi
lea ecx, [ebp - 0x36c]
call fcn.00402650
lea eax, [ebp - 0x36c]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push 1
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 4
call fcn.00402590
xor eax, eax
mov dword [ebp - 0x358], 7
mov esi, str.792481101203270007343359233468424011395207480404
mov dword [ebp - 0x35c], ebx
push esi
mov word [ebp - 0x36c], ax
call fcn.004f3a59
pop ecx
push eax
push esi
lea ecx, [ebp - 0x36c]
call fcn.00402650
lea eax, [ebp - 0x36c]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push 1
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 4
call fcn.00402590
xor eax, eax
mov dword [ebp - 0x358], 7
mov esi, str.51484852431663424345654241453134
mov dword [ebp - 0x35c], ebx
push esi
mov word [ebp - 0x36c], ax
call fcn.004f3a59
pop ecx
push eax
push esi
lea ecx, [ebp - 0x36c]
call fcn.00402650
lea eax, [ebp - 0x36c]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push 1
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 4
call fcn.00402590
xor eax, eax
mov dword [ebp - 0x358], 7
mov esi, str.680539650467563812656341424647280725484912325621
mov dword [ebp - 0x35c], ebx
push esi
mov word [ebp - 0x36c], ax
call fcn.004f3a59
pop ecx
push eax
push esi
lea ecx, [ebp - 0x36c]
call fcn.00402650
lea eax, [ebp - 0x36c]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push 1
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 4
call fcn.00402590
xor eax, eax
mov dword [ebp - 0x358], 7
mov esi, str.1417073716111351084942590552456261253030
mov dword [ebp - 0x35c], ebx
push esi
mov word [ebp - 0x36c], ax
call fcn.004f3a59
pop ecx
push eax
push esi
lea ecx, [ebp - 0x36c]
call fcn.00402650
lea eax, [ebp - 0x36c]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push 1
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 4
call fcn.00402590
mov dword [ebp - 0x358], 7
mov dword [ebp - 0x35c], ebx
xor eax, eax
mov esi, str.3338556111363851072523254210302319655216
push esi
mov word [ebp - 0x36c], ax
call fcn.004f3a59
pop ecx
push eax
push esi
lea ecx, [ebp - 0x36c]
call fcn.00402650
lea eax, [ebp - 0x36c]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
xor esi, esi
mov byte [ebp - 4], 4
push ebx
inc esi
lea ecx, [ebp - 0x36c]
push esi
call fcn.00402590
push ebx
push ebx
lea ecx, [ebp - 0x36c]
mov dword [ebp - 0x35c], ebx
mov dword [ebp - 0x358], ebx
call fcn.00402590
push str.926664480746042415323750033655501608204603086332030804366746044020572525
lea ecx, [ebp - 0x36c]
call fcn.00402600
lea eax, [ebp - 0x36c]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 4
call fcn.00402590
push str.0536451012470525126663421626170206486565
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.225745291652564516094757101521156439002128295943
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.7362204144603154483653394440184248403147
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
mov byte [ebp - 4], 4
push ebx
push esi
lea ecx, [ebp - 0x354]
call fcn.00402590
push str.6761194615446318244026471968564711505729
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.22368049645463241165321012043146
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.305245055468191855241034552409006424090708447070
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.54161671422545360563323942461523
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.3214193504173552045051671150516063312828
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.512169621164152915262450034557001106292419645112
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.926591571565483007444031404415141126081419655025
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.17257327171367661136492805712552113640401128156660684740
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.96045258006657370455291100645125
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.162864414557384908575354415727351633093945373248
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.4242970168126051685915623459051409002222
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.8431502862222834623063281746192829306144
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.0801856241476250164565441655292216645109
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.632792034566044941020034446627494239104941286369
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.9333156003455639073508386926493141592020
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x20
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.54138139086523485341595153453248
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.523525391102416552440056076441586830695052443147
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.056079461166414428207132074041306339572228203147
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.973552152850250938617144546465163547711748504163
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x24
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.371268501264653116473313094568216556333920645130
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.6460971805306749211902251556436324305352
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.8022900915281018483822292651574964445355
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.955955690732642802346429404664356825483040581616
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
mov byte [ebp - 4], 4
push esi
lea ecx, [ebp - 0x354]
call fcn.00402590
push str.7069600425413868710626327129396542082268
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x29
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.075399601133025215687118413547506726473139572020
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x2a
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.2345325911677143443650321157300619655224
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x2b
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.3211973024366266125814601858376870652300
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.9565641816550248212766391522651709294863
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.87578566102610161043553011334750102624203953002406664915
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.3113986015267042196657484345064041451802
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x2f
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.516948411551713819676447115548624460284248403147
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x30
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
push str.622322500320140608453142
lea ecx, [ebp - 0x3e4]
call fcn.004024f0
lea eax, [ebp - 0x3e4]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x3e4]
mov byte [ebp - 4], 4
call fcn.00402590
push str.664561452440631815671210282064500744112628203147
lea ecx, [ebp - 0x3cc]
call fcn.004024f0
lea eax, [ebp - 0x3cc]
mov byte [ebp - 4], 0x32
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x3cc]
mov byte [ebp - 4], 4
call fcn.00402590
push str.39005907146015231435493929070163
lea ecx, [ebp - 0x3b4]
call fcn.004024f0
lea eax, [ebp - 0x3b4]
mov byte [ebp - 4], 0x33
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x3b4]
mov byte [ebp - 4], 4
call fcn.00402590
push str.273442424032403936321044153270476951246040042929
lea ecx, [ebp - 0x39c]
call fcn.004024f0
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x39c]
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x39c]
mov byte [ebp - 4], 4
call fcn.00402590
push str.2762993010034255705038096665466866693309
lea ecx, [ebp - 0x42c]
call fcn.004024f0
lea eax, [ebp - 0x42c]
mov byte [ebp - 4], 0x35
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 4
call fcn.00402590
push str.3857421057165358420662664256314404365843
lea ecx, [ebp - 0x444]
call fcn.004024f0
lea eax, [ebp - 0x444]
mov byte [ebp - 4], 0x36
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x444]
mov byte [ebp - 4], 4
call fcn.00402590
push str.1222092711364007640164166401176664014740
lea ecx, [ebp - 0x45c]
call fcn.004024f0
lea eax, [ebp - 0x45c]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x45c]
mov byte [ebp - 4], 4
call fcn.00402590
push str.76419316371364450705016447291031
lea ecx, [ebp - 0x474]
call fcn.004024f0
lea eax, [ebp - 0x474]
mov byte [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x474]
mov byte [ebp - 4], 4
call fcn.00402590
push str.412134452917630704176340166548000836534820650926
lea ecx, [ebp - 0x3fc]
call fcn.004024f0
lea eax, [ebp - 0x3fc]
mov byte [ebp - 4], 0x39
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 4
call fcn.00402590
push str.696596441551474336243714362463261151573036283147
lea ecx, [ebp - 0x414]
call fcn.004024f0
lea eax, [ebp - 0x414]
mov byte [ebp - 4], 0x3a
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x414]
mov byte [ebp - 4], 4
call fcn.00402590
push str.324721531108644942480041662264124235203019655029
lea ecx, [ebp - 0x384]
call fcn.004024f0
lea eax, [ebp - 0x384]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [ebp - 0x7b0]
call fcn.0041bae0
push ebx
push esi
lea ecx, [ebp - 0x384]
mov byte [ebp - 4], 4
call fcn.00402590
push 0x22c
lea eax, [ebp - 0x7a4]
mov dword [ebp - 0x7c0], ebx
push ebx
push eax
call fcn.004e37a0
add esp, 0xc
push ebx
push 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov esi, eax
cmp esi, 0xffffffff
je 0x4c312a
lea eax, [ebp - 0x7a4]
mov dword [ebp - 0x7a4], 0x22c
push eax
push esi
call sub.KERNEL32.dll_Process32FirstW
test eax, eax
je 0x4c2e74
lea eax, [ebp - 0x780]
push eax
lea ecx, [ebp - 0x384]
call fcn.004024f0
lea eax, [ebp - 0x384]
mov byte [ebp - 4], 0x3c
push eax
lea ecx, [ebp - 0x7bc]
call fcn.0041bae0
push ebx
push 1
lea ecx, [ebp - 0x384]
mov byte [ebp - 4], 4
call fcn.00402590
lea eax, [ebp - 0x7a4]
push eax
push esi
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x4c2e23
mov edi, dword [ebp - 0x7bc]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x7b0]
cmp esi, dword [ebp - 0x7ac]
je 0x4c3124
cmp dword [esi + 0x14], 8
jb 0x4c2e97
mov eax, dword [esi]
jmp 0x4c2e99
mov eax, esi
push eax
lea ecx, [ebp - 0x354]
call fcn.004024f0
lea eax, [ebp - 0x354]
mov byte [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0x3e4]
push eax
call fcn.004cd4ec
pop ecx
pop ecx
lea eax, [ebp - 0x3e4]
mov byte [ebp - 4], 0x3e
push eax
lea ecx, [ebp - 0x3cc]
call fcn.00436420
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 0x3f
call fcn.004c86b0
lea eax, [ebp - 0x3cc]
mov byte [ebp - 4], 0x40
push eax
lea eax, [ebp - 0x36c]
push eax
lea ecx, [ebp - 0x578]
call fcn.004c86d2
push 0x64
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x41
push ebx
push eax
call fcn.004e37a0
add esp, 0xc
mov dword [ebp - 0x7c4], 0x64
cmp dword [esi + 0x14], 8
jb 0x4c2f27
mov eax, dword [esi]
jmp 0x4c2f29
mov eax, esi
push eax
lea ecx, [ebp - 0x384]
call fcn.004024f0
lea eax, [ebp - 0x384]
mov byte [ebp - 4], 0x42
push eax
lea eax, [ebp - 0x3fc]
push eax
call fcn.004cd4ec
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x384]
mov byte [ebp - 4], 0x44
call fcn.00402590
cmp dword [ebp - 0x358], 0x10
lea ecx, [ebp - 0x7c4]
push ecx
lea ecx, [ebp - 0x74]
push ecx
push dword [ebp - 0x35c]
lea eax, [ebp - 0x36c]
cmovae eax, dword [ebp - 0x36c]
push eax
call fcn.004c81f1
add esp, 0x10
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x414]
push eax
call fcn.00405820
lea eax, [ebp - 0x414]
mov byte [ebp - 4], 0x45
push eax
lea eax, [ebp - 0x3b4]
push eax
call fcn.004cd1cb
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x414]
mov byte [ebp - 4], 0x47
call fcn.0046d37e
cmp dword [ebp - 0x3a4], 0
sete al
test al, al
jne 0x4c3046
mov eax, dword [ebp - 0x7bc]
cmp eax, dword [ebp - 0x7b8]
je 0x4c3046
cmp dword [edi + 0x14], 8
jb 0x4c2fee
mov eax, dword [edi]
jmp 0x4c2ff0
mov eax, edi
push eax
lea ecx, [ebp - 0x39c]
call fcn.004024f0
lea eax, [ebp - 0x39c]
mov byte [ebp - 4], 0x48
push eax
call fcn.004cd323
pop ecx
push ebx
lea eax, [ebp - 0x3b4]
push eax
lea ecx, [ebp - 0x39c]
call fcn.004c3192
lea ecx, [ebp - 0x39c]
push ebx
cmp eax, 0xffffffff
jg 0x4c30bc
push 1
mov byte [ebp - 4], 0x47
call fcn.00402590
add edi, 0x18
cmp edi, dword [ebp - 0x7b8]
jne 0x4c2fe4
xor edi, edi
lea ecx, [ebp - 0x3b4]
push ebx
inc edi
push edi
call fcn.00402590
push ebx
push edi
lea ecx, [ebp - 0x3fc]
call fcn.0046d37e
push ebx
push edi
lea ecx, [ebp - 0x36c]
call fcn.0046d37e
lea ecx, [ebp - 0x578]
call fcn.00402160
push ebx
push edi
lea ecx, [ebp - 0x3cc]
call fcn.0046d37e
push ebx
push edi
lea ecx, [ebp - 0x3e4]
call fcn.0046d37e
push ebx
push edi
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 4
call fcn.00402590
add esi, 0x18
cmp esi, dword [ebp - 0x7ac]
je 0x4c3124
mov edi, dword [ebp - 0x7bc]
jmp 0x4c2e8d
xor esi, esi
inc esi
push esi
mov dword [ebp - 0x7c0], esi
call fcn.00402590
push ebx
push esi
lea ecx, [ebp - 0x3b4]
call fcn.00402590
push ebx
push esi
lea ecx, [ebp - 0x3fc]
call fcn.0046d37e
push ebx
push esi
lea ecx, [ebp - 0x36c]
call fcn.0046d37e
lea ecx, [ebp - 0x578]
call fcn.00402160
push ebx
push esi
lea ecx, [ebp - 0x3cc]
call fcn.0046d37e
push ebx
push esi
lea ecx, [ebp - 0x3e4]
call fcn.0046d37e
push ebx
push esi
lea ecx, [ebp - 0x354]
call fcn.00402590
mov ebx, dword [ebp - 0x7c0]
lea ecx, [ebp - 0x7b0]
call fcn.004c3153
lea ecx, [ebp - 0x7bc]
call fcn.004c3153
lea ecx, [ebp - 0x7d0]
call fcn.0046d3d0
mov eax, ebx
call fcn.00506b0b
ret