Function at 0x4044c0
Capabilities:
Set current directory

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x188
mov eax, dword [0x442540]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebx + 0xc]
push esi
mov dword [ebp - 0x174], eax
mov eax, dword [ebx + 0x10]
push edi
mov dword [ebp - 0x180], eax
call fcn.0040b390
test al, al
jne 0x404ae4
push 0
xorps xmm0, xmm0
mov dword [ebp - 0xc0], 0
push 0x435414
lea ecx, [ebp - 0xd0]
movaps xmmword [ebp - 0xd0], xmm0
mov dword [ebp - 0xbc], 0
call fcn.004013c0
mov dword [ebp - 0x170], 0x7c87b305
mov dword [ebp - 0x16c], 0x7e994263
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x170], 0x22fc1d75
mov dword [ebp - 0x16c], 0xe3758fd6
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x170], 0x695a6796
mov dword [ebp - 0x16c], 0x52874b0f
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], ecx
mov dword [ebp - 0x170], 0x4555fe1
mov dword [ebp - 0x16c], 0x7598e718
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], ecx
mov dword [ebp - 0x170], 0xa2f04811
mov dword [ebp - 0x16c], 0x18eb95df
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0x170], 0xec167b89
mov dword [ebp - 0x16c], 0x47b4c51d
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0x170], 0x305c01ee
mov dword [ebp - 0x16c], 0x5e18dd79
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0x170], 0x2fa2e87c
mov dword [ebp - 0x16c], 0x30548cf4
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0x170], 0xfeedb51
mov dword [ebp - 0x16c], 0xcfc3443
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x170], 0x4c937406
mov dword [ebp - 0x16c], 0xc313e0f6
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x170], 0x491b33db
mov dword [ebp - 0x16c], 0x27f62e7d
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x170], 0x77302d88
mov dword [ebp - 0x16c], 0x1bf1b038
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x170], 0xd1872775
mov dword [ebp - 0x16c], 0x38bbcdff
xorps xmm0, xmm0
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x170], 0xcc252bda
mov dword [ebp - 0x16c], 0x2b94b772
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x170], 0x4239758f
mov dword [ebp - 0x16c], 0x5e18dd79
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x170], 0x2fa2e87c
mov dword [ebp - 0x16c], 0x30548cf4
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
movaps xmm1, xmmword [ebp - 0x110]
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0x110], xmm1
movaps xmm1, xmmword [ebp - 0x100]
xorps xmm1, xmmword [ebp - 0x80]
movaps xmmword [ebp - 0x100], xmm1
movaps xmm1, xmmword [ebp - 0xf0]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0xf0], xmm1
movaps xmm1, xmmword [ebp - 0xe0]
mov dword [ebp - 0x54], ecx
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x58], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0xe0], xmm1
movaps xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x404845
sub ecx, edx
lea eax, [ebp - 0x110]
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.004013c0
mov dword [ebp - 0x170], 0x619bba3d
xorps xmm0, xmm0
mov dword [ebp - 0x16c], 0x74d15c20
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x170], 0x7fe30776
mov dword [ebp - 0x16c], 0xa67b83db
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x170], 0x491b58b8
mov dword [ebp - 0x16c], 0x27f62e7d
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x170], 0x77302d88
mov dword [ebp - 0x16c], 0x1bf1b038
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x170], 0xfeedb51
mov dword [ebp - 0x16c], 0xcfc3443
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x170], 0x4c937406
mov dword [ebp - 0x16c], 0xc313e0f6
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x170], 0x491b33db
mov dword [ebp - 0x16c], 0x27f62e7d
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x170], 0x77302d88
mov dword [ebp - 0x16c], 0x1bf1b038
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
movaps xmm1, xmmword [ebp - 0x70]
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x50], xmm1
movaps xmm1, xmmword [ebp - 0x40]
mov dword [ebp - 0x54], ecx
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x58], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x40], xmm1
movaps xmmword [ebp - 0xb0], xmm0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4049d0
sub ecx, edx
lea eax, [ebp - 0x50]
push ecx
push eax
lea ecx, [ebp - 0xb0]
call fcn.004013c0
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0xb0]
push 2
push eax
call fcn.00407c20
mov ecx, dword [ebp - 0x9c]
add esp, 0x10
cmp ecx, 0xf
jbe 0x404a3f
mov edx, dword [ebp - 0xb0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404a35
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4058e1
push ecx
push edx
call fcn.00412d91
add esp, 8
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
cmp ecx, 0xf
jbe 0x404a8e
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404a84
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4058e1
push ecx
push edx
call fcn.00412d91
add esp, 8
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
cmp ecx, 0xf
jbe 0x404ada
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404ad0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4058e1
push ecx
push edx
call fcn.00412d91
add esp, 8
mov eax, 1
jmp 0x4058cc
mov dword [ebp - 0x168], 0xfbedb15
mov dword [ebp - 0x164], 0xcbd340f
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x168], 0x4cb3745f
mov dword [ebp - 0x164], 0xc347e0bb
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x168], 0x491b339a
mov dword [ebp - 0x164], 0x27f62e7d
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x168], 0x77302d88
mov dword [ebp - 0x164], 0x1bf1b038
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x168], 0xfeedb51
mov dword [ebp - 0x164], 0xcfc3443
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x168], 0x4c937406
mov dword [ebp - 0x164], 0xc313e0f6
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x168], 0x491b33db
mov dword [ebp - 0x164], 0x27f62e7d
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x168], 0x77302d88
mov dword [ebp - 0x164], 0x1bf1b038
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
movaps xmm1, xmmword [ebp - 0x50]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x70], xmm1
movaps xmm1, xmmword [ebp - 0x60]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x70]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
movaps xmmword [ebp - 0x60], xmm1
call dword [sym.imp.SHELL32.dll_SetCurrentProcessExplicitAppUserModelID]
mov dword [ebp - 0x168], 0x6b8fb43d
mov dword [ebp - 0x164], 0x68d24626
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x168], 0x4c93186a
mov dword [ebp - 0x164], 0xc313e0f6
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x168], 0xfeedb51
mov dword [ebp - 0x164], 0xcfc3443
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0x168], 0x4c937406
mov dword [ebp - 0x164], 0xc313e0f6
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], ecx
movaps xmm1, xmmword [ebp - 0xb0]
lea ecx, [ebp - 0x30]
xorps xmm1, xmmword [ebp - 0x30]
lea edx, [ecx + 1]
xorps xmm0, xmm0
movaps xmmword [ebp - 0x30], xmm1
movaps xmmword [ebp - 0x160], xmm0
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x14c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x404d10
sub ecx, edx
lea eax, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0x160]
call fcn.004013c0
mov dword [ebp - 0x168], 0xf8faf3c
xorps xmm0, xmm0
mov dword [ebp - 0x164], 0xcfc3443
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x168], 0x4c937406
mov dword [ebp - 0x164], 0xc313e0f6
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x168], 0xfeedb51
mov dword [ebp - 0x164], 0xcfc3443
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x168], 0x4c937406
mov dword [ebp - 0x164], 0xc313e0f6
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0xa4], ecx
lea ecx, [ebp - 0x30]
mov dword [ebp - 0xa8], eax
lea edx, [ecx + 1]
movaps xmm1, xmmword [ebp - 0xb0]
xorps xmm1, xmmword [ebp - 0x30]
movaps xmmword [ebp - 0x30], xmm1
movaps xmmword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x404e00
sub ecx, edx
lea eax, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0xd0]
call fcn.004013c0
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.004094b0
add esp, 4
push eax
lea eax, [ebp - 0x140]
push eax
call fcn.0040ce50
mov ecx, dword [ebp - 0x34]
add esp, 0xc
cmp ecx, 0xf
jbe 0x404e70
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404e66
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4058e6
push ecx
push edx
call fcn.00412d91
add esp, 8
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0xf
mov byte [ebp - 0x48], 0
cmp ecx, 0xf
jbe 0x404ebc
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404eb2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4058e6
push ecx
push edx
call fcn.00412d91
add esp, 8
lea eax, [ebp - 0x160]
mov dword [ebp - 0xc0], 0
push eax
lea eax, [ebp - 0x140]
mov dword [ebp - 0xbc], 0xf
push eax
lea eax, [ebp - 0x128]
mov byte [ebp - 0xd0], 0
push eax
call fcn.0040ce50
add esp, 0xc
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov dword [ebp - 0x17c], eax
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.00408ff0
add esp, 8
cmp dword [eax + 0x14], 7
jbe 0x404f1d
mov eax, dword [eax]
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push eax
call esi
lea ecx, [ebp - 0x48]
mov edi, eax
call fcn.004023d0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [ebp - 0x17c]
mov dword [ebp - 0x164], eax
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
test edi, edi
jne 0x405302
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0xd0]
push eax
call fcn.00408ff0
add esp, 8
cmp dword [eax + 0x14], 7
jbe 0x404f6e
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea ecx, [ebp - 0xd0]
call fcn.004023d0
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0xd0]
push eax
call fcn.00408ff0
add esp, 8
cmp dword [eax + 0x14], 7
jbe 0x404f9e
mov eax, dword [eax]
push eax
call esi
lea ecx, [ebp - 0xd0]
mov edi, eax
call fcn.004023d0
call dword [sym.imp.KERNEL32.dll_GetLastError]
test edi, edi
je 0x405308
cmp dword [ebp - 0x12c], 0xf
lea esi, [ebp - 0x140]
lea edx, [ebp - 0x160]
cmova esi, dword [ebp - 0x140]
cmp dword [ebp - 0x14c], 0xf
cmova edx, dword [ebp - 0x160]
mov dword [ebp - 0x168], 0x6b8fb41d
mov dword [ebp - 0x164], 0x7e9e5d0f
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x168], 0x6cea0667
mov dword [ebp - 0x164], 0xe460c5d1
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x168], 0x2a6e40fb
mov dword [ebp - 0x164], 0x43934b1e
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], ecx
mov dword [ebp - 0x168], 0x181049ed
mov dword [ebp - 0x164], 0x73929056
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], ecx
mov dword [ebp - 0x168], 0xb4e04914
mov dword [ebp - 0x164], 0x18d4b9df
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0x168], 0xa95742be
mov dword [ebp - 0x164], 0x59fbc311
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0x168], 0x671e55f6
mov dword [ebp - 0x164], 0x5e18fa0a
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0x168], 0x2fa2e87c
mov dword [ebp - 0x164], 0x30548cf4
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0x168], 0xfeedb51
mov dword [ebp - 0x164], 0xcfc3443
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x168], 0x4c937406
mov dword [ebp - 0x164], 0xc313e0f6
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x168], 0x491b33db
mov dword [ebp - 0x164], 0x27f62e7d
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x168], 0x77302d88
mov dword [ebp - 0x164], 0x1bf1b038
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x168], 0xd1872775
mov dword [ebp - 0x164], 0x38bbcdff
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x168], 0xcc252bda
mov dword [ebp - 0x164], 0x2b94b772
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x168], 0x4239758f
mov dword [ebp - 0x164], 0x5e18dd79
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x168], 0x2fa2e87c
mov dword [ebp - 0x164], 0x30548cf4
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
movaps xmm1, xmmword [ebp - 0x110]
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0x110], xmm1
movaps xmm1, xmmword [ebp - 0x100]
xorps xmm1, xmmword [ebp - 0x80]
movaps xmmword [ebp - 0x100], xmm1
movaps xmm1, xmmword [ebp - 0xf0]
xorps xmm1, xmmword [ebp - 0x70]
push 0
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x110]
push esi
push edx
movaps xmmword [ebp - 0xf0], xmm1
movaps xmm1, xmmword [ebp - 0xe0]
push eax
mov dword [ebp - 0x54], ecx
lea eax, [ebp - 0xb0]
xorps xmm1, xmmword [ebp - 0x60]
push eax
movaps xmmword [ebp - 0xe0], xmm1
call fcn.00401be0
add esp, 0x10
push eax
push 0x1650
call fcn.00407590
add esp, 0xc
lea ecx, [ebp - 0xb0]
call fcn.00402380
xor esi, esi
jmp 0x405312
mov eax, dword [ebp - 0x164]
xor esi, esi
test edi, edi
je 0x4053fc
mov dword [ebp - 0x168], 0x66b9b415
mov dword [ebp - 0x164], 0x659d792d
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x168], 0x4c937468
mov dword [ebp - 0x164], 0xc313e0f6
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x168], 0xfeedb51
mov dword [ebp - 0x164], 0xcfc3443
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0x168], 0x4c937406
mov dword [ebp - 0x164], 0xc313e0f6
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0xa8], eax
lea eax, [ebp - 0x30]
mov dword [ebp - 0xa4], ecx
movaps xmm1, xmmword [ebp - 0xb0]
xorps xmm1, xmmword [ebp - 0x30]
push eax
push edi
movaps xmmword [ebp - 0x30], xmm1
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4053f0
push dword [ebx + 0x14]
push dword [ebp - 0x180]
push dword [ebp - 0x174]
push dword [ebp - 0x16c]
call eax
add esp, 0x10
mov esi, eax
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x4057ea
push 1
push 1
push eax
lea eax, [ebp - 0xb0]
mov dword [ebp - 0x16c], 1
push eax
call fcn.0040a770
cmp dword [ebp - 0x9c], 0xf
lea esi, [ebp - 0xb0]
lea edx, [ebp - 0x128]
cmova esi, dword [ebp - 0xb0]
cmp dword [ebp - 0x114], 0xf
push esi
cmova edx, dword [ebp - 0x128]
mov dword [ebp - 0x178], 0x6387ba17
mov dword [ebp - 0x174], 0x78dc5026
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x178], 0x23ff5469
mov dword [ebp - 0x174], 0xe3298497
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x178], 0x6e6816fc
mov dword [ebp - 0x174], 0x54d32477
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x178], 0x77302d88
mov dword [ebp - 0x174], 0x1bf1b038
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x178], 0xfeedb51
mov dword [ebp - 0x174], 0xcfc3443
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x178], 0x4c937406
mov dword [ebp - 0x174], 0xc313e0f6
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x178], 0x491b33db
mov dword [ebp - 0x174], 0x27f62e7d
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x178], 0x77302d88
mov dword [ebp - 0x174], 0x1bf1b038
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
movaps xmm1, xmmword [ebp - 0x50]
xorps xmm1, xmmword [ebp - 0x70]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x70]
push edx
movaps xmmword [ebp - 0x70], xmm1
movaps xmm1, xmmword [ebp - 0x60]
push eax
mov dword [ebp - 0x34], ecx
lea eax, [ebp - 0x30]
xorps xmm1, xmmword [ebp - 0x40]
push eax
movaps xmmword [ebp - 0x60], xmm1
call fcn.00401be0
push 0
lea eax, [ebp - 0x30]
push eax
push 0x164f
call fcn.00407590
add esp, 0x2c
xorps xmm0, xmm0
push 0
push 0x435414
lea ecx, [ebp - 0xd0]
movaps xmmword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0
call fcn.004013c0
mov dword [ebp - 0x178], 0x6b8fb43d
xorps xmm0, xmm0
mov dword [ebp - 0x174], 0x68d14626
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x178], 0x22be186a
mov dword [ebp - 0x174], 0xaf3e9499
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x178], 0x287f52b4
mov dword [ebp - 0x174], 0x2793421f
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x178], 0x77302d88
mov dword [ebp - 0x174], 0x1bf1b038
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x178], 0xfeedb51
mov dword [ebp - 0x174], 0xcfc3443
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x178], 0x4c937406
mov dword [ebp - 0x174], 0xc313e0f6
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x178], 0x491b33db
mov dword [ebp - 0x174], 0x27f62e7d
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0x178], 0x77302d88
mov dword [ebp - 0x174], 0x1bf1b038
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
movaps xmm1, xmmword [ebp - 0x70]
xorps xmm1, xmmword [ebp - 0xf0]
movaps xmmword [ebp - 0x70], xmm1
movaps xmm1, xmmword [ebp - 0x60]
mov dword [ebp - 0xd4], ecx
lea ecx, [ebp - 0x70]
mov dword [ebp - 0xd8], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0xe0]
movaps xmmword [ebp - 0x60], xmm1
movaps xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x405760
sub ecx, edx
lea eax, [ebp - 0x70]
push ecx
push eax
lea ecx, [ebp - 0x50]
call fcn.004013c0
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x50]
push 2
push eax
call fcn.00407c20
add esp, 0x10
lea ecx, [ebp - 0x50]
call fcn.00402380
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0xf
jbe 0x4057d1
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4057c7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4058eb
push ecx
push edx
call fcn.00412d91
add esp, 8
lea ecx, [ebp - 0x30]
call fcn.00402380
lea ecx, [ebp - 0xb0]
call fcn.00402380
mov esi, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x114]
cmp ecx, 0xf
jbe 0x405824
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40581a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4058f0
push ecx
push edx
call fcn.00412d91
add esp, 8
mov ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0xf
mov byte [ebp - 0x128], 0
cmp ecx, 0xf
jbe 0x405879
mov edx, dword [ebp - 0x140]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40586f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4058f0
push ecx
push edx
call fcn.00412d91
add esp, 8
mov ecx, dword [ebp - 0x14c]
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0xf
mov byte [ebp - 0x140], 0
cmp ecx, 0xf
jbe 0x4058ca
mov edx, dword [ebp - 0x160]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4058c0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4058f0
push ecx
push edx
call fcn.00412d91
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.00412da4
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
call fcn.00417a7f
call fcn.00417a7f
call fcn.00417a7f
call fcn.00417a7f
int3