Function at 0x1008cf40
Capabilities:
Allocate or change rwx memory
Create directory
Encode data using xor
Execute shellcode via indirect call
Get file size
Inject thread
Read .ini file
Read file on windows
Resolve function by parsing pe exports
Spawn thread to rwx shellcode
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100c3556
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x4d8
mov eax, dword [0x100db040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp - 0x438]
call fcn.100049f0
push ecx
push 0x104f7724
push str.main.premium
lea ecx, [ebp - 0x438]
call fcn.10004b20
test al, al
je 0x1009035c
push 0
push 0x20
push 3
push 0
push 1
push connect
push str.main.premium
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x1009035c
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0x232bb8
jne 0x10090355
push 0
lea eax, [ebp - 0x48c]
mov dword [ebp - 0x48c], 0
push eax
push 0x232bb8
push 0x102c4b6c
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x10090355
xor ecx, ecx
mov eax, ecx
shr eax, 8
xor al, 0x15
add al, byte [ecx + 0x102c4b6c]
xor al, cl
xor al, 0xda
mov byte [ecx + 0x102c4b6c], al
inc ecx
cmp ecx, 0x232bb8
jb 0x1008d011
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x4d9556
call edi
lea eax, [ebp - 0x48c]
mov byte [0x4d9556], 0xe9
push eax
push dword [ebp - 0x48c]
push 1
push 0x4d9556
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x4d9557
call edi
lea eax, [ebp - 0x48c]
mov byte [0x4d9557], 0x8b
push eax
push dword [ebp - 0x48c]
push 1
push 0x4d9557
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x4d9558
call edi
lea eax, [ebp - 0x48c]
mov byte [0x4d9558], 0
push eax
push dword [ebp - 0x48c]
push 1
push 0x4d9558
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x4d9559
call edi
lea eax, [ebp - 0x48c]
mov byte [0x4d9559], 0
push eax
push dword [ebp - 0x48c]
push 1
push 0x4d9559
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x4d955a
call edi
lea eax, [ebp - 0x48c]
mov byte [0x4d955a], 0
push eax
push dword [ebp - 0x48c]
push 1
push 0x4d955a
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x4d9176
call edi
lea eax, [ebp - 0x48c]
mov byte [0x4d9176], 0xeb
push eax
push dword [ebp - 0x48c]
push 1
push 0x4d9176
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x4d9513
call edi
lea eax, [ebp - 0x48c]
mov byte [0x4d9513], 0x75
push eax
push dword [ebp - 0x48c]
push 1
push 0x4d9513
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x43e510
call edi
lea eax, [ebp - 0x48c]
mov byte [0x43e510], 0x50
push eax
push dword [ebp - 0x48c]
push 1
push 0x43e510
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x43e519
call edi
lea eax, [ebp - 0x48c]
mov byte [0x43e519], 0x50
push eax
push dword [ebp - 0x48c]
push 1
push 0x43e519
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x43e521
call edi
lea eax, [ebp - 0x48c]
mov byte [0x43e521], 0x18
push eax
push dword [ebp - 0x48c]
push 1
push 0x43e521
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x43dfd9
call edi
lea eax, [ebp - 0x48c]
mov byte [0x43dfd9], 0
push eax
push dword [ebp - 0x48c]
push 1
push 0x43dfd9
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x43e098
call edi
lea eax, [ebp - 0x48c]
mov byte [0x43e098], 0xeb
push eax
push dword [ebp - 0x48c]
push 1
push 0x43e098
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x43ec4b
call edi
lea eax, [ebp - 0x48c]
mov byte [0x43ec4b], 0xb0
push eax
push dword [ebp - 0x48c]
push 1
push 0x43ec4b
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x43ec4c
call edi
lea eax, [ebp - 0x48c]
mov byte [0x43ec4c], 1
push eax
push dword [ebp - 0x48c]
push 1
push 0x43ec4c
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x43ec4d
call edi
lea eax, [ebp - 0x48c]
mov byte [0x43ec4d], 0x90
push eax
push dword [ebp - 0x48c]
push 1
push 0x43ec4d
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x9cdf5a
call edi
lea eax, [ebp - 0x48c]
mov byte [0x9cdf5a], 7
push eax
push dword [ebp - 0x48c]
push 1
push 0x9cdf5a
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x52ab21
call edi
lea eax, [ebp - 0x48c]
mov byte [0x52ab21], 0xeb
push eax
push dword [ebp - 0x48c]
push 1
push 0x52ab21
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x9d20df
call edi
lea eax, [ebp - 0x48c]
mov byte [0x9d20df], 0
push eax
push dword [ebp - 0x48c]
push 1
push 0x9d20df
call edi
mov al, byte [0x102c4bd8]
inc al
mov byte [ebp - 0x48d], al
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x118ef48
call edi
mov al, byte [ebp - 0x48d]
mov byte [0x118ef48], al
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 1
push 0x118ef48
call edi
mov al, byte [0x102c4bda]
add al, 2
mov byte [ebp - 0x48d], al
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x118ef49
call edi
mov al, byte [ebp - 0x48d]
mov byte [0x118ef49], al
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 1
push 0x118ef49
call edi
mov al, byte [0x102c4bdb]
add al, 3
mov byte [ebp - 0x48d], al
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x118ef4a
call edi
mov al, byte [ebp - 0x48d]
mov byte [0x118ef4a], al
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 1
push 0x118ef4a
call edi
mov al, byte [0x102c4bdd]
add al, 4
mov byte [ebp - 0x48d], al
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x118ef4b
call edi
mov al, byte [ebp - 0x48d]
mov byte [0x118ef4b], al
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 1
push 0x118ef4b
call edi
mov al, byte [0x102c4bde]
add al, 5
mov byte [ebp - 0x48d], al
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x118ef4c
call edi
mov al, byte [ebp - 0x48d]
mov byte [0x118ef4c], al
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 1
push 0x118ef4c
call edi
movzx esi, word [0x102c4bce]
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 2
push 0x118d31c
call edi
lea eax, [ebp - 0x48c]
mov word [0x118d31c], si
push eax
push dword [ebp - 0x48c]
push 2
push 0x118d31c
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 4
push 0x4d7fbf
call edi
lea eax, [ebp - 0x48c]
mov dword [0x4d7fbf], 0x102c4bf1
push eax
push dword [ebp - 0x48c]
push 4
push 0x4d7fbf
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 4
push 0x4e0f40
call edi
lea eax, [ebp - 0x48c]
mov dword [0x4e0f40], 0x102c4c11
push eax
push dword [ebp - 0x48c]
push 4
push 0x4e0f40
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 4
push 0x9f3cdb
call edi
lea eax, [ebp - 0x48c]
mov dword [0x9f3cdb], 0x100d08bc
push eax
push dword [ebp - 0x48c]
push 4
push 0x9f3cdb
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 4
push 0x9f3d25
call edi
lea eax, [ebp - 0x48c]
mov dword [0x9f3d25], 0x100d08d0
push eax
push dword [ebp - 0x48c]
push 4
push 0x9f3d25
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 4
push 0x9f3d59
call edi
lea eax, [ebp - 0x48c]
mov dword [0x9f3d59], 0x100d08f8
push eax
push dword [ebp - 0x48c]
push 4
push 0x9f3d59
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 4
push 0x9f6b95
call edi
lea eax, [ebp - 0x48c]
mov dword [0x9f6b95], 0x100d0920
push eax
push dword [ebp - 0x48c]
push 4
push 0x9f6b95
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 4
push 0x9f6be2
call edi
lea eax, [ebp - 0x48c]
mov dword [0x9f6be2], 0x100d0934
push eax
push dword [ebp - 0x48c]
push 4
push 0x9f6be2
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 4
push 0x9f1668
call edi
lea eax, [ebp - 0x48c]
mov dword [0x9f1668], 0x100d094c
push eax
push dword [ebp - 0x48c]
push 4
push 0x9f1668
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 4
push 0x9f1758
call edi
lea eax, [ebp - 0x48c]
mov dword [0x9f1758], 0x100d095c
push eax
push dword [ebp - 0x48c]
push 4
push 0x9f1758
call edi
mov al, byte [0x102c4d68]
mov byte [ebp - 0x48d], al
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x8f378a
call edi
mov al, byte [ebp - 0x48d]
mov byte [0x8f378a], al
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 1
push 0x8f378a
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 2
push 0x6cccaa
call edi
mov eax, 0x6cccaa
mov ecx, 0x90909090
mov word [eax], cx
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 2
push 0x6cccaa
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 3
push 0xa6fbfd9
call edi
mov eax, 0xa6fbfd9
mov ecx, 0x90909090
mov word [eax], cx
mov byte [eax + 2], cl
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 3
push 0xa6fbfd9
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 3
push 0xa702afa
call edi
mov eax, 0xa702afa
mov ecx, 0x90909090
mov word [eax], cx
mov byte [eax + 2], cl
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 3
push 0xa702afa
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 0x20
push 0x118db1a
call edi
movups xmm0, xmmword [0x102c4bad]
mov eax, 0x118db1a
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x102c4bbd]
movups xmmword [eax + 0x10], xmm0
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 0x20
push 0x118db1a
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 0x11
push 0x118ef50
call edi
movups xmm0, xmmword [0x102c4be0]
mov ecx, 0x118ef50
movups xmmword [ecx], xmm0
mov al, byte [0x102c4bf0]
mov byte [ecx + 0x10], al
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 0x11
push ecx
call edi
push int.100947f0
push 0x65e94c
push 0xff
call fcn.10099d10
mov esi, dword [0x102c4eb4]
lea eax, [ebp - 0x48c]
add esp, 0xc
push eax
push 0x40
push 4
push 0x43a119
call edi
lea eax, [ebp - 0x48c]
mov dword [0x43a119], esi
push eax
push dword [ebp - 0x48c]
push 4
push 0x43a119
call edi
mov esi, dword [0x102c4eb4]
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 4
push 0x43fdf3
call edi
lea eax, [ebp - 0x48c]
mov dword [0x43fdf3], esi
push eax
push dword [ebp - 0x48c]
push 4
push 0x43fdf3
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x59ce01
call edi
lea eax, [ebp - 0x48c]
mov byte [0x59ce01], 0xdd
push eax
push dword [ebp - 0x48c]
push 1
push 0x59ce01
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 6
push 0x7d0473
call edi
mov eax, 0x7d0473
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 6
push 0x7d0473
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x9dbc28
call edi
lea eax, [ebp - 0x48c]
mov byte [0x9dbc28], 0x30
push eax
push dword [ebp - 0x48c]
push 1
push 0x9dbc28
call edi
push 0x823d03
push 0x823cdb
push 0xe9
call fcn.10099d10
push 0x823d7d
push 0x823d55
push 0xe9
call fcn.10099d10
mov al, byte [0x102c4e68]
add esp, 0x18
mov byte [ebp - 0x48d], al
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x4e0d51
call edi
mov al, byte [ebp - 0x48d]
mov byte [0x4e0d51], al
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 1
push 0x4e0d51
call edi
mov al, byte [0x102c4e68]
mov byte [ebp - 0x48d], al
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x4e0ef0
call edi
mov al, byte [ebp - 0x48d]
mov byte [0x4e0ef0], al
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 1
push 0x4e0ef0
call edi
mov al, byte [0x102c4e68]
mov byte [ebp - 0x48d], al
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x4e137a
call edi
mov al, byte [ebp - 0x48d]
mov byte [0x4e137a], al
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 1
push 0x4e137a
call edi
mov al, byte [0x102c4e68]
mov byte [ebp - 0x48d], al
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x4e1376
call edi
mov al, byte [ebp - 0x48d]
mov byte [0x4e1376], al
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 1
push 0x4e1376
call edi
mov al, byte [0x102c4e68]
mov byte [ebp - 0x48d], al
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x4e13a4
call edi
mov al, byte [ebp - 0x48d]
mov byte [0x4e13a4], al
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 1
push 0x4e13a4
call edi
mov eax, 0x102c50d8
nop
mov ecx, 0x21
lea edi, [ebp - 0xbc]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0x1c1
ja 0x1008dad2
imul edi, ecx, 0x84
mov esi, eax
mov ecx, 0x21
add edi, 0x10188934
rep movsd dword es:[edi], dword [esi]
add eax, 0x84
cmp eax, 0x102d38e0
jl 0x1008daa0
mov eax, 0x102d38e0
mov ecx, 0x21
lea edi, [ebp - 0xbc]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0x1c1
ja 0x1008db15
imul edi, ecx, 0x84
mov esi, eax
mov ecx, 0x21
add edi, 0x1019713c
rep movsd dword es:[edi], dword [esi]
add eax, 0x84
cmp eax, 0x102e20e8
jl 0x1008dae3
mov eax, 0x102e20e8
nop word [eax + eax]
mov ecx, 0x21
lea edi, [ebp - 0xbc]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0x1c1
ja 0x1008db62
imul edi, ecx, 0x84
mov esi, eax
mov ecx, 0x21
add edi, 0x101a5944
rep movsd dword es:[edi], dword [esi]
add eax, 0x84
cmp eax, 0x102f08f0
jl 0x1008db30
mov eax, 0x102f08f0
mov ecx, 0x2f
lea edi, [ebp - 0xf4]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xf4]
cmp ecx, 0x31
ja 0x1008dba2
imul edi, ecx, 0xbc
mov esi, eax
mov ecx, 0x2f
add edi, 0x101863f4
rep movsd dword es:[edi], dword [esi]
add eax, 0xbc
cmp eax, 0x102f2da8
jl 0x1008db73
mov edx, 0x102f2da8
mov ecx, 0x1e
lea edi, [ebp - 0xb0]
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xb0]
cmp ecx, 0x63
ja 0x1008dbe4
mov eax, ecx
mov esi, edx
shl eax, 4
sub eax, ecx
mov ecx, 0x1e
lea edi, [eax*8 + 0x1023e36c]
rep movsd dword es:[edi], dword [esi]
add edx, 0x78
cmp edx, 0x102f5c88
jl 0x1008dbb3
mov edx, 0x102f5c88
nop dword [eax]
nop dword [eax + eax]
movups xmm0, xmmword [edx + 0x10]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x43c], eax
mov eax, dword [edx]
movups xmmword [ebp - 0x45c], xmm0
movups xmm0, xmmword [edx + 0x20]
movups xmmword [ebp - 0x44c], xmm0
cmp eax, 0x7cf
ja 0x1008dc4d
movups xmm0, xmmword [edx]
imul ecx, eax, 0x34
mov eax, dword [edx + 0x30]
add ecx, 0x100e29d4
movups xmmword [ecx], xmm0
movups xmm0, xmmword [edx + 0x10]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [edx + 0x20]
movups xmmword [ecx + 0x20], xmm0
mov dword [ecx + 0x30], eax
add edx, 0x34
cmp edx, 0x1030f2c8
jl 0x1008dc00
movups xmm0, xmmword [0x1037a988]
mov edx, dword [0x1037a9c0]
movups xmm1, xmmword [0x1037a998]
movups xmm2, xmmword [0x1037a9a8]
movq xmm3, qword [0x1037a9b8]
movd ecx, xmm0
cmp ecx, 2
ja 0x1008dcb3
mov eax, ecx
shl eax, 4
sub eax, ecx
movups xmmword [eax*4 + 0x100dec30], xmm0
movups xmmword [eax*4 + 0x100dec40], xmm1
movups xmmword [eax*4 + 0x100dec50], xmm2
movq qword [eax*4 + 0x100dec60], xmm3
mov dword [eax*4 + 0x100dec68], edx
movups xmm0, xmmword [0x1037a9c4]
mov edx, dword [0x1037a9fc]
movups xmm1, xmmword [0x1037a9d4]
movups xmm2, xmmword [0x1037a9e4]
movq xmm3, qword [0x1037a9f4]
movd ecx, xmm0
cmp ecx, 2
ja 0x1008dd0e
mov eax, ecx
shl eax, 4
sub eax, ecx
movups xmmword [eax*4 + 0x100dec30], xmm0
movups xmmword [eax*4 + 0x100dec40], xmm1
movups xmmword [eax*4 + 0x100dec50], xmm2
movq qword [eax*4 + 0x100dec60], xmm3
mov dword [eax*4 + 0x100dec68], edx
movups xmm0, xmmword [0x1037aa00]
mov edx, dword [0x1037aa38]
movups xmm1, xmmword [0x1037aa10]
movups xmm2, xmmword [0x1037aa20]
movq xmm3, qword [0x1037aa30]
movd ecx, xmm0
cmp ecx, 2
ja 0x1008dd69
mov eax, ecx
shl eax, 4
sub eax, ecx
movups xmmword [eax*4 + 0x100dec30], xmm0
movups xmmword [eax*4 + 0x100dec40], xmm1
movups xmmword [eax*4 + 0x100dec50], xmm2
movq qword [eax*4 + 0x100dec60], xmm3
mov dword [eax*4 + 0x100dec68], edx
mov ecx, 0x1037aa3c
nop
movups xmm0, xmmword [ecx + 0x10]
mov edx, dword [ecx]
movups xmmword [ebp - 0x80], xmm0
movups xmm0, xmmword [ecx + 0x20]
movups xmmword [ebp - 0x70], xmm0
movups xmm0, xmmword [ecx + 0x30]
movups xmmword [ebp - 0x60], xmm0
movups xmm0, xmmword [ecx + 0x40]
movups xmmword [ebp - 0x50], xmm0
movq xmm0, qword [ecx + 0x50]
movq qword [ebp - 0x40], xmm0
cmp edx, 0x63
ja 0x1008dde1
movups xmm0, xmmword [ecx]
lea eax, [edx + 1]
mov dword [0x106a761c], eax
imul eax, edx, 0x58
add eax, 0x106a53b8
movups xmmword [eax], xmm0
movups xmm0, xmmword [ecx + 0x10]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [ecx + 0x20]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [ecx + 0x30]
movups xmmword [eax + 0x30], xmm0
movups xmm0, xmmword [ecx + 0x40]
movups xmmword [eax + 0x40], xmm0
movq xmm0, qword [ecx + 0x50]
movq qword [eax + 0x50], xmm0
add ecx, 0x58
cmp ecx, 0x1037cc9c
jl 0x1008dd70
mov eax, 0x1038a11c
mov ecx, 0x2d
lea edi, [ebp - 0xec]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xec]
cmp ecx, 0xbb7
ja 0x1008de23
imul edi, ecx, 0xb4
mov esi, eax
mov ecx, 0x2d
add edi, 0x100fc054
rep movsd dword es:[edi], dword [esi]
add eax, 0xb4
cmp eax, 0x1040de7c
jl 0x1008ddf1
push 0
push 0x1037cc9c
call fcn.10022450
push 1
push 0x103801bc
call fcn.10022450
mov edx, 0x103836dc
nop dword [eax]
movups xmm0, xmmword [edx + 0x10]
mov eax, dword [edx + 0x40]
mov dword [ebp - 0x3c], eax
mov eax, dword [edx]
movups xmmword [ebp - 0x6c], xmm0
movups xmm0, xmmword [edx + 0x20]
movups xmmword [ebp - 0x5c], xmm0
movups xmm0, xmmword [edx + 0x30]
movups xmmword [ebp - 0x4c], xmm0
cmp eax, 0xc7
ja 0x1008deb7
movups xmm0, xmmword [edx]
mov ecx, eax
shl ecx, 4
add ecx, eax
mov eax, dword [edx + 0x40]
movups xmmword [ecx*4 + 0x106ae068], xmm0
movups xmm0, xmmword [edx + 0x10]
movups xmmword [ecx*4 + 0x106ae078], xmm0
movups xmm0, xmmword [edx + 0x20]
movups xmmword [ecx*4 + 0x106ae088], xmm0
movups xmm0, xmmword [edx + 0x30]
movups xmmword [ecx*4 + 0x106ae098], xmm0
mov dword [ecx*4 + 0x106ae0a8], eax
add edx, 0x44
cmp edx, 0x10386bfc
jl 0x1008de50
mov edx, 0x10386bfc
nop word [eax + eax]
movups xmm0, xmmword [edx + 0x10]
mov eax, dword [edx + 0x40]
mov dword [ebp - 0x3c], eax
mov eax, dword [edx]
movups xmmword [ebp - 0x6c], xmm0
movups xmm0, xmmword [edx + 0x20]
movups xmmword [ebp - 0x5c], xmm0
movups xmm0, xmmword [edx + 0x30]
movups xmmword [ebp - 0x4c], xmm0
cmp eax, 0xc7
ja 0x1008df37
movups xmm0, xmmword [edx]
mov ecx, eax
shl ecx, 4
add ecx, eax
mov eax, dword [edx + 0x40]
movups xmmword [ecx*4 + 0x106b1588], xmm0
movups xmm0, xmmword [edx + 0x10]
movups xmmword [ecx*4 + 0x106b1598], xmm0
movups xmm0, xmmword [edx + 0x20]
movups xmmword [ecx*4 + 0x106b15a8], xmm0
movups xmm0, xmmword [edx + 0x30]
movups xmmword [ecx*4 + 0x106b15b8], xmm0
mov dword [ecx*4 + 0x106b15c8], eax
add edx, 0x44
cmp edx, 0x1038a11c
jl 0x1008ded0
mov edx, 0x1030f2c8
nop word [eax + eax]
movups xmm0, xmmword [edx + 0x10]
mov eax, dword [edx + 0x28]
mov dword [ebp - 0x43c], eax
mov eax, dword [edx]
movups xmmword [ebp - 0x454], xmm0
movq xmm0, qword [edx + 0x20]
movq qword [ebp - 0x444], xmm0
cmp eax, 0x1387
ja 0x1008dfa1
movups xmm0, xmmword [edx]
imul ecx, eax, 0x2c
mov eax, dword [edx + 0x28]
add ecx, 0x1028f004
movups xmmword [ecx], xmm0
movups xmm0, xmmword [edx + 0x10]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [edx + 0x20]
movq qword [ecx + 0x20], xmm0
mov dword [ecx + 0x28], eax
add edx, 0x2c
cmp edx, 0x10344e28
jl 0x1008df50
mov edx, 0x10344e28
movups xmm0, xmmword [edx + 0x10]
mov eax, dword [edx + 0x28]
mov dword [ebp - 0x43c], eax
mov eax, dword [edx]
movups xmmword [ebp - 0x454], xmm0
movq xmm0, qword [edx + 0x20]
movq qword [ebp - 0x444], xmm0
cmp eax, 0x1387
ja 0x1008e002
movups xmm0, xmmword [edx]
imul ecx, eax, 0x2c
mov eax, dword [edx + 0x28]
add ecx, 0x1024125c
movups xmmword [ecx], xmm0
movups xmm0, xmmword [edx + 0x10]
movups xmmword [ecx + 0x10], xmm0
movq xmm0, qword [edx + 0x20]
movq qword [ecx + 0x20], xmm0
mov dword [ecx + 0x28], eax
add edx, 0x2c
cmp edx, 0x1037a988
jl 0x1008dfb1
push 0x104264f4
push 1
call fcn.100421d0
push 0x104310d4
push 2
call fcn.100421d0
push 0x1043bcb4
push 1
call fcn.1003b8c0
push 0x104412a4
push 2
call fcn.1003b8c0
mov edx, 0x10446894
movups xmm0, xmmword [edx + 0x10]
mov eax, dword [edx + 0x48]
mov dword [ebp - 0x3c], eax
mov eax, dword [edx]
movups xmmword [ebp - 0x74], xmm0
movups xmm0, xmmword [edx + 0x20]
movups xmmword [ebp - 0x64], xmm0
movups xmm0, xmmword [edx + 0x30]
movups xmmword [ebp - 0x54], xmm0
movq xmm0, qword [edx + 0x40]
movq qword [ebp - 0x44], xmm0
cmp eax, 0x63
ja 0x1008e0a8
movups xmm0, xmmword [edx]
imul ecx, eax, 0x4c
mov eax, dword [edx + 0x48]
add ecx, 0x100decf4
movups xmmword [ecx], xmm0
movups xmm0, xmmword [edx + 0x10]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [edx + 0x20]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [edx + 0x30]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [edx + 0x40]
movq qword [ecx + 0x40], xmm0
mov dword [ecx + 0x48], eax
add edx, 0x4c
cmp edx, 0x10448644
jl 0x1008e042
mov edx, 0x10448644
nop dword [eax + eax]
mov eax, dword [edx + 0x18]
movq xmm0, qword [edx + 0x10]
mov dword [ebp - 0x43c], eax
mov eax, dword [edx]
movq qword [ebp - 0x444], xmm0
cmp eax, 0x1f3
ja 0x1008e10b
movups xmm0, xmmword [edx]
lea ecx, [eax*8]
sub ecx, eax
mov eax, dword [edx + 0x18]
movups xmmword [ecx*4 + 0x102177e4], xmm0
movq xmm0, qword [edx + 0x10]
movq qword [ecx*4 + 0x102177f4], xmm0
mov dword [ecx*4 + 0x102177fc], eax
add edx, 0x1c
cmp edx, 0x1044bcf4
jl 0x1008e0c0
mov edx, 0x1044bcf4
nop dword [eax + eax]
mov eax, dword [edx + 0x18]
movq xmm0, qword [edx + 0x10]
mov dword [ebp - 0x43c], eax
mov eax, dword [edx]
movq qword [ebp - 0x444], xmm0
cmp eax, 0x18f
ja 0x1008e16b
movups xmm0, xmmword [edx]
lea ecx, [eax*8]
sub ecx, eax
mov eax, dword [edx + 0x18]
movups xmmword [ecx*4 + 0x101d307c], xmm0
movq xmm0, qword [edx + 0x10]
movq qword [ecx*4 + 0x101d308c], xmm0
mov dword [ecx*4 + 0x101d3094], eax
add edx, 0x1c
cmp edx, 0x1044e8b4
jl 0x1008e120
mov edx, 0x1041058c
nop dword [eax + eax]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x43c], eax
mov eax, dword [edx]
cmp eax, 0x95
ja 0x1008e1aa
movups xmm0, xmmword [edx]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x10]
movups xmmword [ecx*4 + 0x100e0aac], xmm0
mov dword [ecx*4 + 0x100e0abc], eax
add edx, 0x14
cmp edx, 0x10411144
jl 0x1008e180
mov edx, 0x1040de7c
nop word [eax + eax]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x43c], eax
mov eax, dword [edx]
cmp eax, 0x1f3
ja 0x1008e1ea
movups xmm0, xmmword [edx]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x10]
movups xmmword [ecx*4 + 0x1028c6e4], xmm0
mov dword [ecx*4 + 0x1028c6f4], eax
add edx, 0x14
cmp edx, 0x1041058c
jl 0x1008e1c0
mov eax, 0x10411144
nop word [eax + eax]
mov ecx, 0x2f
lea edi, [ebp - 0xf4]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xf4]
cmp ecx, 0xc7
ja 0x1008e238
imul edi, ecx, 0xbc
mov esi, eax
mov ecx, 0x2f
add edi, 0x101bf1ac
rep movsd dword es:[edi], dword [esi]
inc dword [0x101bdc90]
add eax, 0xbc
cmp eax, 0x1041a424
jl 0x1008e200
mov ecx, 0x1041a424
nop dword [eax]
movups xmm0, xmmword [ecx + 0x10]
mov eax, dword [ecx]
movups xmmword [ebp - 0x458], xmm0
movups xmm0, xmmword [ecx + 0x20]
movups xmmword [ebp - 0x448], xmm0
cmp eax, 0xc7
ja 0x1008e290
movups xmm0, xmmword [ecx]
lea eax, [eax + eax*2]
shl eax, 4
add eax, 0x101f8874
movups xmmword [eax], xmm0
movups xmm0, xmmword [ecx + 0x10]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [ecx + 0x20]
movups xmmword [eax + 0x20], xmm0
add ecx, 0x30
cmp ecx, 0x1041c9a4
jl 0x1008e250
mov eax, 0x1041c9a4
mov ecx, 0x1f
lea edi, [ebp - 0xb4]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xb4]
cmp ecx, 0x27
ja 0x1008e2cc
imul edi, ecx, 0x7c
mov esi, eax
mov ecx, 0x1f
add edi, 0x100e166c
rep movsd dword es:[edi], dword [esi]
add eax, 0x7c
cmp eax, 0x1041dd04
jl 0x1008e2a0
mov ecx, dword [0x106b9bd0]
mov esi, 0x1041dd04
mov dword [ebp - 0x49c], ecx
nop word [eax + eax]
movups xmm0, xmmword [esi + 0x10]
movups xmm1, xmmword [esi]
movups xmmword [ebp - 0x468], xmm0
movups xmm0, xmmword [esi + 0x20]
movd eax, xmm1
movups xmmword [ebp - 0x458], xmm0
movups xmm0, xmmword [esi + 0x30]
movups xmmword [ebp - 0x478], xmm1
movups xmmword [ebp - 0x448], xmm0
cmp eax, 0xc7
ja 0x1008e490
lea eax, [ebp - 0x474]
mov ecx, 0x106b9bd0
push eax
lea eax, [ebp - 0x4c4]
push eax
call fcn.10042020
mov eax, dword [ebp - 0x4bc]
mov edi, dword [ebp - 0x474]
cmp byte [eax + 0xd], 0
jne 0x1008e361
cmp edi, dword [eax + 0x10]
jl 0x1008e361
mov ecx, dword [ebp - 0x49c]
jmp 0x1008e369
mov ecx, dword [ebp - 0x49c]
mov eax, ecx
test edi, edi
jle 0x1008e490
cmp eax, ecx
jne 0x1008e490
movups xmm0, xmmword [esi]
lea eax, [ebp - 0x80]
mov dword [ebp - 0x80], edi
push eax
movups xmmword [ebp - 0x7c], xmm0
lea eax, [ebp - 0x4e4]
mov ecx, 0x106b9bd0
movups xmmword [ebp - 0x4d8], xmm0
push eax
movups xmm0, xmmword [esi + 0x10]
movups xmmword [ebp - 0x6c], xmm0
movups xmmword [ebp - 0x4b8], xmm0
movups xmm0, xmmword [esi + 0x20]
movups xmmword [ebp - 0x5c], xmm0
movups xmmword [ebp - 0x30], xmm0
movups xmm0, xmmword [esi + 0x30]
movups xmmword [ebp - 0x448], xmm0
movups xmmword [ebp - 0x4c], xmm0
call fcn.10042020
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ebp - 0x488], xmm0
cmp byte [eax + 0xd], 0
jne 0x1008e3e7
cmp edi, dword [eax + 0x10]
jge 0x1008e490
cmp dword [0x106b9bd4], 0x30c30c3
je 0x10090378
mov dword [ebp - 0x4a4], 0x106b9bd0
mov dword [ebp - 4], 0
push 0x54
mov dword [ebp - 0x4a0], 0
call fcn.100a015e
mov dword [ebp - 4], 0xffffffff
add esp, 4
movups xmm0, xmmword [ebp - 0x4d8]
mov ecx, dword [ebp - 0x49c]
mov dword [eax + 0x10], edi
movups xmmword [eax + 0x14], xmm0
push eax
movups xmm0, xmmword [ebp - 0x4b8]
mov dword [ebp - 0x4a0], 0
push dword [ebp - 0x484]
movups xmmword [eax + 0x24], xmm0
movups xmm0, xmmword [ebp - 0x30]
push dword [ebp - 0x488]
movups xmmword [eax + 0x34], xmm0
movups xmm0, xmmword [ebp - 0x448]
movups xmmword [eax + 0x44], xmm0
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov ecx, 0x106b9bd0
mov word [eax + 0xc], 0
call fcn.10029010
mov ecx, dword [0x106b9bd0]
mov dword [ebp - 0x49c], ecx
add esi, 0x40
cmp esi, 0x10420f04
jl 0x1008e2f0
mov edx, 0x10420f04
nop dword [eax]
nop dword [eax + eax]
movups xmm0, xmmword [edx + 0x10]
mov eax, dword [edx + 0x38]
mov dword [ebp - 0x43c], eax
mov eax, dword [edx]
movups xmmword [ebp - 0x464], xmm0
movups xmm0, xmmword [edx + 0x20]
movups xmmword [ebp - 0x454], xmm0
movq xmm0, qword [edx + 0x30]
movq qword [ebp - 0x444], xmm0
cmp eax, 0x63
ja 0x1008e525
movups xmm0, xmmword [edx]
mov ecx, eax
shl ecx, 4
sub ecx, eax
mov eax, dword [edx + 0x38]
movups xmmword [ecx*4 + 0x100dd4bc], xmm0
movups xmm0, xmmword [edx + 0x10]
movups xmmword [ecx*4 + 0x100dd4cc], xmm0
movups xmm0, xmmword [edx + 0x20]
movups xmmword [ecx*4 + 0x100dd4dc], xmm0
movq xmm0, qword [edx + 0x30]
movq qword [ecx*4 + 0x100dd4ec], xmm0
mov dword [ecx*4 + 0x100dd4f4], eax
add edx, 0x3c
cmp edx, 0x10422674
jl 0x1008e4b0
mov eax, 0x1044e8b4
nop word [eax + eax]
mov ecx, 0x24
lea edi, [ebp - 0xc8]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xc8]
cmp ecx, 0x12b
ja 0x1008e572
lea edi, [ecx + ecx*8]
mov esi, eax
shl edi, 4
mov ecx, 0x24
add edi, 0x1021caf4
rep movsd dword es:[edi], dword [esi]
add eax, 0x90
cmp eax, 0x10459174
jl 0x1008e540
mov eax, 0x10459174
mov ecx, 0x24
lea edi, [ebp - 0xc8]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xc8]
cmp ecx, 0x12b
ja 0x1008e5b5
lea edi, [ecx + ecx*8]
mov esi, eax
shl edi, 4
mov ecx, 0x24
add edi, 0x102273b4
rep movsd dword es:[edi], dword [esi]
add eax, 0x90
cmp eax, 0x10463a34
jl 0x1008e583
mov eax, 0x10463a34
nop word [eax + eax]
mov ecx, 0x24
lea edi, [ebp - 0xc8]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xc8]
cmp ecx, 0x12b
ja 0x1008e602
lea edi, [ecx + ecx*8]
mov esi, eax
shl edi, 4
mov ecx, 0x24
add edi, 0x10231c74
rep movsd dword es:[edi], dword [esi]
add eax, 0x90
cmp eax, 0x1046e2f4
jl 0x1008e5d0
mov eax, 0x1046e2f4
mov ecx, 0x47
lea edi, [ebp - 0x154]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x154]
cmp ecx, 0x13
ja 0x1008e642
imul edi, ecx, 0x11c
mov esi, eax
mov ecx, 0x47
add edi, 0x1023cab4
rep movsd dword es:[edi], dword [esi]
add eax, 0x11c
cmp eax, 0x1046f924
jl 0x1008e613
mov eax, dword [0x106b89a8]
mov ecx, 0x32
mov esi, 0x1046f924
mov edi, 0x1023e0ec
rep movsd dword es:[edi], dword [esi]
mov edx, 0x1046f9ec
nop dword [eax]
cmp eax, 0x3e7
ja 0x1008e6ae
movq xmm0, qword [edx]
lea ecx, [eax*8]
sub ecx, eax
mov eax, dword [edx + 8]
movq qword [ecx*2 + 0x106b52f8], xmm0
mov dword [ecx*2 + 0x106b5300], eax
mov ax, word [edx + 0xc]
mov word [ecx*2 + 0x106b5304], ax
mov eax, dword [0x106b89a8]
inc eax
mov dword [0x106b89a8], eax
add edx, 0xe
cmp edx, 0x1047309c
jl 0x1008e670
mov ecx, dword [0x106b9180]
mov edx, 0x1047309c
mov eax, dword [edx]
cmp ecx, 0x1f3
ja 0x1008e6e2
mov dword [ecx*4 + 0x106b89b0], eax
mov ecx, dword [0x106b9180]
inc ecx
mov dword [0x106b9180], ecx
add edx, 4
cmp edx, 0x1047386c
jl 0x1008e6c4
mov edx, 0x1047386c
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x43c], eax
mov eax, dword [edx]
cmp eax, 0x1f3
ja 0x1008e71c
movups xmm0, xmmword [edx]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x10]
movups xmmword [ecx*4 + 0x101d5c44], xmm0
mov dword [ecx*4 + 0x101d5c54], eax
add edx, 0x14
cmp edx, 0x10475f7c
jl 0x1008e6f2
push 0x10475f7c
push 1
call fcn.1003ebf0
push 0x1047930c
push 2
call fcn.1003ebf0
mov edx, 0x1047c69c
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [edx + 0x18]
movq xmm0, qword [edx + 0x10]
mov dword [ebp - 0x43c], eax
mov eax, dword [edx]
movq qword [ebp - 0x444], xmm0
cmp eax, 0x63
ja 0x1008e799
movups xmm0, xmmword [edx]
lea ecx, [eax*8]
sub ecx, eax
mov eax, dword [edx + 0x18]
movups xmmword [ecx*4 + 0x10201524], xmm0
movq xmm0, qword [edx + 0x10]
movq qword [ecx*4 + 0x10201534], xmm0
mov dword [ecx*4 + 0x1020153c], eax
add edx, 0x1c
cmp edx, 0x1047d18c
jl 0x1008e750
mov eax, 0x1047d18c
nop dword [eax]
mov ecx, 0x21
lea edi, [ebp - 0xbc]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0x63
ja 0x1008e7df
imul edi, ecx, 0x84
mov esi, eax
mov ecx, 0x21
add edi, 0x101b41d4
rep movsd dword es:[edi], dword [esi]
add eax, 0x84
cmp eax, 0x1048051c
jl 0x1008e7b0
mov eax, 0x1048051c
mov ecx, 0x21
lea edi, [ebp - 0xbc]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0x63
ja 0x1008e81f
imul edi, ecx, 0x84
mov esi, eax
mov ecx, 0x21
add edi, 0x101b7564
rep movsd dword es:[edi], dword [esi]
add eax, 0x84
cmp eax, 0x104838ac
jl 0x1008e7f0
mov eax, 0x104838ac
mov ecx, 0x21
lea edi, [ebp - 0xbc]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0x63
ja 0x1008e85f
imul edi, ecx, 0x84
mov esi, eax
mov ecx, 0x21
add edi, 0x101ba8f4
rep movsd dword es:[edi], dword [esi]
add eax, 0x84
cmp eax, 0x10486c3c
jl 0x1008e830
mov eax, 0x101d835c
mov dword [eax], 0xffffffff
add eax, 0x108
cmp eax, 0x101f86fc
jl 0x1008e870
mov ecx, dword [0x101f86fc]
mov eax, 0x10486c3c
mov dword [ebp - 0x48c], eax
nop dword [eax]
nop word [eax + eax]
movups xmm0, xmmword [eax + 0x10]
movups xmm1, xmmword [eax]
movups xmmword [ebp - 0x464], xmm0
movups xmm0, xmmword [eax + 0x20]
movups xmmword [ebp - 0x474], xmm1
movups xmmword [ebp - 0x454], xmm0
movq xmm0, qword [eax + 0x30]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x43c], eax
movd eax, xmm1
movq qword [ebp - 0x444], xmm0
cmp eax, 0x1f3
ja 0x1008e94a
mov ax, word [ebp - 0x470]
mov word [ebp - 0x13c], ax
mov eax, dword [ebp - 0x470]
shr eax, 0x10
mov byte [ebp - 0x13a], al
lea eax, [ebp - 0x46d]
push eax
lea eax, [ebp - 0x139]
mov dword [ebp - 0x140], ecx
push str.DataSound_s.wav
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
imul edi, dword [ebp - 0x474], 0x108
lea esi, [ebp - 0x140]
mov ecx, 0x42
add esp, 0xc
add edi, 0x101d835c
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x101f86fc]
inc ecx
mov dword [0x101f86fc], ecx
mov eax, dword [ebp - 0x48c]
add eax, 0x3c
mov dword [ebp - 0x48c], eax
cmp eax, 0x1048e16c
jl 0x1008e8a0
mov edx, 0x1048e16c
nop dword [eax]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x43c], eax
mov eax, dword [edx]
cmp eax, 0xc7
ja 0x1008e99a
movups xmm0, xmmword [edx]
lea ecx, [eax + eax*4]
mov eax, dword [edx + 0x10]
movups xmmword [ecx*4 + 0x10869ae0], xmm0
mov dword [ecx*4 + 0x10869af0], eax
add edx, 0x14
cmp edx, 0x1048f10c
jl 0x1008e970
mov ecx, 0x1048f10c
nop word [eax + eax]
movups xmm0, xmmword [ecx + 0x10]
mov edx, dword [ecx]
movups xmmword [ebp - 0x460], xmm0
movups xmm0, xmmword [ecx + 0x20]
movups xmmword [ebp - 0x450], xmm0
movq xmm0, qword [ecx + 0x30]
movq qword [ebp - 0x440], xmm0
cmp edx, 0x18f
ja 0x1008ea17
movups xmm0, xmmword [ecx]
lea eax, [edx*8]
sub eax, edx
movups xmmword [eax*8 + 0x10180c6c], xmm0
movups xmm0, xmmword [ecx + 0x10]
movups xmmword [eax*8 + 0x10180c7c], xmm0
movups xmm0, xmmword [ecx + 0x20]
movups xmmword [eax*8 + 0x10180c8c], xmm0
movq xmm0, qword [ecx + 0x30]
movq qword [eax*8 + 0x10180c9c], xmm0
add ecx, 0x38
cmp ecx, 0x1049488c
jl 0x1008e9b0
mov edx, dword [0x1028ee00]
mov edi, 0x1049488c
mov dword [ebp - 0x498], edi
mov dword [ebp - 0x49c], edx
nop dword [eax]
mov ecx, dword [edi]
mov dword [ebp - 0x4a0], ecx
cmp ecx, 0x3e7
ja 0x1008eb8f
movups xmm0, xmmword [edi]
mov eax, dword [edx + 4]
xor esi, esi
mov dword [ebp - 0x48c], eax
movups xmmword [ebp - 0x448], xmm0
cmp byte [eax + 0xd], 0
movups xmm0, xmmword [edi + 0x10]
movups xmmword [ebp - 0x30], xmm0
movups xmm0, xmmword [edi + 0x20]
movups xmmword [ebp - 0x4d8], xmm0
movq xmm0, qword [edi + 0x30]
movq qword [ebp - 0x488], xmm0
jne 0x1008eab7
nop
mov dword [ebp - 0x48c], eax
cmp dword [eax + 0x10], ecx
jge 0x1008eaa2
mov eax, dword [eax + 8]
xor esi, esi
jmp 0x1008eaab
mov edx, eax
mov esi, 1
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x1008ea90
mov edi, dword [ebp - 0x498]
cmp byte [edx + 0xd], 0
jne 0x1008eac6
cmp ecx, dword [edx + 0x10]
jge 0x1008eb74
cmp dword [0x1028ee04], 0x35e50d7
je 0x10090378
mov dword [ebp - 0x4b0], 0x1028ee00
mov dword [ebp - 4], 1
push 0x4c
mov dword [ebp - 0x4ac], 0
call fcn.100a015e
mov dword [ebp - 4], 0xffffffff
add esp, 4
movups xmm0, xmmword [ebp - 0x448]
mov ecx, dword [ebp - 0x4a0]
mov dword [eax + 0x10], ecx
mov ecx, dword [ebp - 0x49c]
movups xmmword [eax + 0x14], xmm0
push eax
movups xmm0, xmmword [ebp - 0x30]
push esi
push dword [ebp - 0x48c]
movups xmmword [eax + 0x24], xmm0
mov dword [ebp - 0x4ac], 0
movups xmm0, xmmword [ebp - 0x4d8]
movups xmmword [eax + 0x34], xmm0
movq xmm0, qword [ebp - 0x488]
movq qword [eax + 0x44], xmm0
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov ecx, 0x1028ee00
mov word [eax + 0xc], 0
call fcn.10029010
mov edx, dword [0x1028ee00]
mov dword [ebp - 0x49c], edx
jmp 0x1008eb7a
mov edx, dword [ebp - 0x49c]
add edi, 0x38
mov dword [ebp - 0x498], edi
cmp edi, 0x104a234c
jl 0x1008ea40
mov ecx, 0x104d834c
movups xmm0, xmmword [ecx + 0x10]
mov eax, dword [ecx]
movups xmmword [ebp - 0x70], xmm0
movups xmm0, xmmword [ecx + 0x20]
movups xmmword [ebp - 0x60], xmm0
movups xmm0, xmmword [ecx + 0x30]
movups xmmword [ebp - 0x50], xmm0
movq xmm0, qword [ecx + 0x40]
movq qword [ebp - 0x40], xmm0
cmp eax, 0x31
ja 0x1008ebfd
movups xmm0, xmmword [ecx]
lea eax, [eax + eax*8]
movups xmmword [eax*8 + 0x1017fdbc], xmm0
movups xmm0, xmmword [ecx + 0x10]
movups xmmword [eax*8 + 0x1017fdcc], xmm0
movups xmm0, xmmword [ecx + 0x20]
movups xmmword [eax*8 + 0x1017fddc], xmm0
movups xmm0, xmmword [ecx + 0x30]
movups xmmword [eax*8 + 0x1017fdec], xmm0
movq xmm0, qword [ecx + 0x40]
movq qword [eax*8 + 0x1017fdfc], xmm0
add ecx, 0x48
cmp ecx, 0x104d915c
jl 0x1008eb94
push 0x1005d320
push 0x52a902
push 0xe9
call fcn.10099d10
mov ecx, dword [0x1023e35c]
add esp, 0xc
mov eax, dword [0x1023e360]
cmp ecx, eax
je 0x1008ec35
mov eax, ecx
mov dword [0x1023e360], eax
mov esi, 0x104d915c
nop word [eax + eax]
mov ecx, dword [esi]
mov edx, dword [esi + 4]
mov dword [ebp - 0x4b0], ecx
mov dword [ebp - 0x4ac], edx
test ecx, ecx
js 0x1008ec8a
cmp ecx, 0x32
jge 0x1008ec8a
cmp eax, dword [0x1023e364]
je 0x1008ec73
mov dword [eax], edx
mov eax, dword [0x1023e360]
add eax, 4
mov dword [0x1023e360], eax
jmp 0x1008ec8a
lea ecx, [ebp - 0x4ac]
push ecx
push eax
mov ecx, 0x1023e35c
call fcn.10042950
mov eax, dword [0x1023e360]
add esi, 8
cmp esi, 0x104d92ec
jl 0x1008ec40
push 0x104d92ec
call fcn.1003be30
mov edx, 0x104d9454
movq xmm0, qword [edx]
movq qword [ebp - 0x488], xmm0
mov eax, dword [ebp - 0x488]
cmp eax, 0x31
ja 0x1008ecd5
lea ecx, [eax + eax*2]
movq xmm0, xmm0
mov eax, dword [edx + 8]
movq qword [ecx*4 + 0x100dd25c], xmm0
mov dword [ecx*4 + 0x100dd264], eax
add edx, 0xc
cmp edx, 0x104d96ac
jl 0x1008eca4
mov esi, 0x104da264
nop word [eax + eax]
movups xmm1, xmmword [esi]
movq xmm0, qword [esi + 0x10]
movd eax, xmm1
movups xmmword [ebp - 0x450], xmm1
movq qword [ebp - 0x440], xmm0
cmp eax, 0x1387
ja 0x1008ee5b
mov eax, dword [ebp - 0x448]
cmp eax, 0xe
ja 0x1008ed31
cmp byte [eax + 0x10846618], 0
jne 0x1008ed31
mov byte [eax + 0x10846618], 1
lea eax, [ebp - 0x44c]
mov ecx, 0x10846610
push eax
lea eax, [ebp - 0x4e4]
push eax
call fcn.10042020
mov eax, dword [ebp - 0x4dc]
mov edi, dword [ebp - 0x44c]
cmp byte [eax + 0xd], 0
jne 0x1008ed60
cmp edi, dword [eax + 0x10]
jge 0x1008ed65
mov eax, dword [0x10846610]
mov ecx, dword [0x10846610]
mov dword [ebp - 0x4a0], ecx
cmp eax, ecx
jne 0x1008ee5b
movups xmm0, xmmword [esi]
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], edi
push eax
movups xmmword [ebp - 0x34], xmm0
lea eax, [ebp - 0x4d4]
mov ecx, 0x10846610
movups xmmword [ebp - 0x448], xmm0
push eax
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x488], xmm0
movq qword [ebp - 0x24], xmm0
call fcn.10042020
movq xmm0, qword [eax]
mov eax, dword [eax + 8]
movq qword [ebp - 0x4c4], xmm0
cmp byte [eax + 0xd], 0
jne 0x1008edcf
cmp edi, dword [eax + 0x10]
jge 0x1008ee5b
cmp dword [0x10846614], 0x5d1745d
je 0x10090378
mov dword [ebp - 0x4b0], 0x10846610
mov dword [ebp - 4], 2
push 0x2c
mov dword [ebp - 0x4ac], 0
call fcn.100a015e
mov dword [ebp - 4], 0xffffffff
add esp, 4
movups xmm0, xmmword [ebp - 0x448]
mov ecx, dword [ebp - 0x4a0]
mov dword [eax + 0x10], edi
movups xmmword [eax + 0x14], xmm0
push eax
movq xmm0, qword [ebp - 0x488]
push dword [ebp - 0x4c0]
movq qword [eax + 0x24], xmm0
push dword [ebp - 0x4c4]
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov ecx, 0x10846610
mov word [eax + 0xc], 0
mov dword [ebp - 0x4ac], 0
call fcn.10029010
add esi, 0x18
cmp esi, 0x104f7724
jl 0x1008ecf0
call fcn.10013f60
mov eax, 0x1063c359
mov byte [eax - 1], 0
mov dword [eax], 0xffffffff
mov dword [eax + 4], 0xffffffff
mov dword [eax + 8], 0xffffffff
mov dword [eax + 0xf], 0
add eax, 0x14
cmp eax, 0x10641179
jl 0x1008ee74
push 0x1006ad10
push 0x6458a6
push 0xe8
call fcn.10099d10
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x48c]
add esp, 0xc
push eax
push 0x40
push 1
push 0x7fa128
call edi
lea eax, [ebp - 0x48c]
mov byte [0x7fa128], 0x34
push eax
push dword [ebp - 0x48c]
push 1
push 0x7fa128
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x7ca8d8
call edi
lea eax, [ebp - 0x48c]
mov byte [0x7ca8d8], 3
push eax
push dword [ebp - 0x48c]
push 1
push 0x7ca8d8
call edi
mov esi, 2
mov dword [ebp - 0x49c], 0x24
xor edi, edi
mov dword [ebp - 0x48c], 1
mov dword [ebp - 0x498], esi
nop dword [eax]
lea ecx, [esi + 1]
mov eax, 0xf0f0f0f1
mul ecx
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x102c4be3]
xor al, byte [esi + 0x102c4b8e]
movzx esi, al
mov eax, 0xf0f0f0f1
mul dword [ebp - 0x498]
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x48c]
add dword [ebp - 0x48c], 4
mov al, byte [eax + 0x102c4be2]
xor al, byte [ecx + 0x102c4b8e]
movzx eax, al
add si, ax
mov eax, 0xf0f0f0f1
mul ecx
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x102c4be1]
xor al, byte [edi + 0x102c4b8e]
movzx eax, al
add si, ax
mov eax, 0xf0f0f0f1
mul edi
mov eax, edi
shr edx, 4
mov ecx, edx
shl ecx, 4
add ecx, edx
sub eax, ecx
mov al, byte [eax + 0x102c4be0]
xor al, byte [edi + 0x102c4b8d]
add edi, 4
movzx eax, al
add si, ax
add word [ebp - 0x49c], si
mov esi, dword [ebp - 0x498]
add esi, 4
mov dword [ebp - 0x498], esi
cmp esi, 0x22
jb 0x1008ef40
mov al, byte [ebp - 0x49c]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub al, 0x12
mov byte [0x104f9ffc], al
mov eax, dword [ebp - 0x49c]
shr eax, 8
dec al
mov byte [0x104f9e8f], al
mov eax, dword [0xffc934]
mov dword [0x1063c354], eax
mov eax, dword [0xffc968]
mov dword [0x1063c350], eax
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 4
push 0xffc934
call edi
lea eax, [ebp - 0x48c]
mov dword [0xffc934], 0x10082930
push eax
push dword [ebp - 0x48c]
push 4
push 0xffc934
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 4
push 0xffc968
call edi
lea eax, [ebp - 0x48c]
mov dword [0xffc968], 0x10082a90
push eax
push dword [ebp - 0x48c]
push 4
push 0xffc968
call edi
call fcn.10083070
push 0x100821d0
push 0x59fed6
push 0xe9
call fcn.10099d10
push 0x100841f0
push 0x594c7d
push 0xe9
call fcn.10099d10
push 0x10083720
push 0x9cab87
push 0xe8
call fcn.10099d10
push 0x10083720
push 0x9cc76f
push 0xe8
call fcn.10099d10
push 0x10084240
push 0x4e6f17
push 0xe9
call fcn.10099d10
push 0x10084270
push 0x5ef320
push 0xe9
call fcn.10099d10
add esp, 0x48
push 0x100842a0
push 0x9ea30a8
push 0xe9
call fcn.10099d10
push 0x100842d0
push 0x5eaf4b
push 0xe9
call fcn.10099d10
add esp, 0x18
call fcn.10015ef0
call fcn.10091a10
cmp dword [0x102c4d88], 0
je 0x1008f212
push 0x10099650
push 0x43e91b
push 0xe9
call fcn.10099d10
push 0x10099690
push 0x4e13da
push 0xe9
call fcn.10099d10
push 0x100996b0
push 0x633486
push 0xe9
call fcn.10099d10
push 0x100996f0
push 0x7ada2b
push 0xe9
call fcn.10099d10
push fcn.100995b0
push 0x43ec02
push 0xe8
call fcn.10099d10
push fcn.100995b0
push 0x4de332
push 0xe8
call fcn.10099d10
add esp, 0x48
push fcn.100995b0
push 0x4f749c
push 0xe8
call fcn.10099d10
push fcn.100995b0
push 0x635914
push 0xe8
call fcn.10099d10
add esp, 0x18
push 0x10099720
push 0x987bcc
push 0xff
call fcn.10099d10
push 0x10099790
push 0xa7d905c
push 0xe9
call fcn.10099d10
push 0x100998f0
push 0x62968d
push 0xe9
call fcn.10099d10
push 0x100999b0
push 0x7f19ff
push 0xe9
call fcn.10099d10
add esp, 0x30
cmp dword [0x102c4fb8], 1
jne 0x1008f304
push 0x100135a0
push 0x9a4f1b
push 0xe8
call fcn.10099d10
push 0x100135a0
push 0x9a5070
push 0xe8
call fcn.10099d10
push 0x100135a0
push 0x9a50af
push 0xe8
call fcn.10099d10
push 0x100135a0
push 0x9a50eb
push 0xe8
call fcn.10099d10
push 0x100135a0
push 0x9a5127
push 0xe8
call fcn.10099d10
push 0x100135c0
push 0x9a526d
push 0xe8
call fcn.10099d10
add esp, 0x48
push 0x100135c0
push 0x9a529c
push 0xe8
call fcn.10099d10
add esp, 0xc
cmp dword [0x104f9f84], 0
mov esi, dword [sym.imp.USER32.dll_SetWindowsHookExA]
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
jne 0x1008f338
call eax
push eax
push dword [0x104f9f80]
push 0x1001a780
push 7
call esi
mov dword [0x104f9f84], eax
test eax, eax
je 0x1008f358
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [0x104f9f88], 0
jne 0x1008f358
call eax
push eax
push dword [0x104f9f80]
push 0x1001b830
push 2
call esi
mov dword [0x104f9f88], eax
call fcn.10083320
push 0x100999d0
push 0x592571
push 0xe8
mov dword [0x10643c24], 0
mov byte [0x10643c14], 0
mov dword [0x10643c1c], 0xffffffff
mov dword [0x10643c20], 0xffffffff
mov dword [0x10643c18], 0xffffffff
call fcn.10099d10
add esp, 0xc
call fcn.10002180
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.10002660
push 0x10029270
push 0x106a5234
call fcn.10001c30
push 0x10029480
push 0x106a53b4
call fcn.10001c30
call fcn.100021f0
call fcn.1003b170
cmp dword [0x102c4e54], 1
jne 0x1008f3fc
push 0x10029600
push 0x51acf4
push 0xe9
call fcn.10099d10
add esp, 0xc
call fcn.10041640
cmp dword [0x102c4e5c], 0
je 0x1008f4ca
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 0x910
push 0x759e34
call edi
push 0x910
push 0x90
push 0x759e34
call fcn.100a23c0
add esp, 0xc
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 0x910
push 0x759e34
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 6
push 0x56bb13
call edi
mov eax, 0x56bb13
mov ecx, 0x90909090
mov dword [eax], ecx
mov word [eax + 4], cx
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 6
push 0x56bb13
call edi
push 0x1001fa00
push 0x759e34
push 0xe9
call fcn.10099d10
push 0x1001f970
push 0x56bb13
push 0xe9
call fcn.10099d10
push 0x1001f920
push 0x56c3ef
push 0xe9
call fcn.10099d10
add esp, 0x24
cmp dword [0x102c4e58], 1
je 0x1008f4e2
cmp dword [0x102c4ea4], 1
jne 0x1008f5e8
jmp 0x1008f4ef
cmp dword [0x102c4ea4], 1
jne 0x1008f5d1
push 0x10021400
push 0x57cca9
push 0xe9
call fcn.10099d10
push 0x10021460
push 0x57cf2c
push 0xe9
call fcn.10099d10
push 0x100214f0
push 0x57d6c6
push 0xe9
call fcn.10099d10
push 0x100216e0
push 0x57ed7b
push 0xe9
call fcn.10099d10
push 0x10021760
push 0x57cc7e
push 0xe9
call fcn.10099d10
push 0x100217d0
push 0x5f2425
push 0xe9
call fcn.10099d10
add esp, 0x48
push 0x10021820
push 0x57a32f
push 0xe9
call fcn.10099d10
push 0x100219b0
push 0x57cd83
push 0xe9
call fcn.10099d10
push 0x10021950
push 0x944b4d
push 0xe8
call fcn.10099d10
push 0x10021950
push 0x944b69
push 0xe8
call fcn.10099d10
push 0x10021950
push 0x9454e7
push 0xe8
call fcn.10099d10
add esp, 0x3c
push 0x100218c0
push 0x94545a
push 0xe8
call fcn.10099d10
add esp, 0xc
mov ecx, 0x10276e38
call fcn.1006e010
call fcn.10037180
call fcn.10059f50
cmp dword [0x102c4f28], 0
je 0x1008f630
push 0x1003ac90
push 0x788132
push 0xe8
call fcn.10099d10
push 0x1003acb0
push 0x78817f
push 0xe8
call fcn.10099d10
add esp, 0x18
cmp dword [0x102c5070], 0
je 0x1008f678
push 0x10076a00
push 0x943699
push 0xe9
call fcn.10099d10
push fcn.10076d60
push 0x92dcc0
push 0xe9
call fcn.10099d10
push 0x100771e0
push 0x981eed
push 0xe9
call fcn.10099d10
add esp, 0x24
push fcn.10077310
push 0x5c5c08
push 0xe9
call fcn.10099d10
add esp, 0xc
cmp dword [0x102c5070], 0
jne 0x1008f6af
push fcn.10044500
push 0x92df2c
push 0xe8
call fcn.10099d10
add esp, 0xc
push fcn.10044500
push 0x94380f
push 0xe8
call fcn.10099d10
push fcn.10044500
push 0x943924
push 0xe8
call fcn.10099d10
push fcn.10044500
push 0x947915
push 0xe8
call fcn.10099d10
push fcn.10044500
push 0x947a2f
push 0xe8
call fcn.10099d10
push fcn.10044500
push 0x97faef
push 0xe8
call fcn.10099d10
push fcn.10044500
push 0x981f97
push 0xe8
call fcn.10099d10
add esp, 0x48
push fcn.10044500
push 0x9840ff
push 0xe8
call fcn.10099d10
push 0x10045c10
push 0x992115
push 0xe9
call fcn.10099d10
push 0x100783c0
push 0x9cac5d
push 0xe9
call fcn.10099d10
push 0x10078460
push 0x5bfcb9
push 0xe9
call fcn.10099d10
push 0x10078520
push 0x5c5680
push 0xe9
call fcn.10099d10
push 0x10078320
push 0x515924
push 0xe9
call fcn.10099d10
add esp, 0x48
mov ecx, 0x102c4b68
call fcn.10093b70
push 0
push str.Logs
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
cmp dword [0x102c4e0c], 1
jne 0x1008f851
mov eax, 0x1027ccb4
nop
mov dword [eax], 0xffffffff
add eax, 0x20
cmp eax, 0x1028c6b4
jl 0x1008f7d0
push fcn.10077e70
push 0x7cf08c
push 0xff
mov dword [0x1028c6b4], 0
mov dword [0x1028c6bc], 0
mov dword [0x1028c6b8], 0
call fcn.10099d10
push fcn.10077fe0
push 0x7cf0fa
push 0xff
call fcn.10099d10
push 0x10078170
push 0x7cf053
push 0xe8
call fcn.10099d10
push 0x10078170
push 0x7cf0ba
push 0xe8
call fcn.10099d10
add esp, 0x30
cmp dword [0x102c4f8c], 1
mov eax, 0x1007d1a0
mov esi, 0x1007d300
cmove esi, eax
push esi
push 0x43e461
push 0xe8
call fcn.10099d10
push esi
push 0x43e4b0
push 0xe8
call fcn.10099d10
add esp, 0x18
cmp dword [0x102c4f90], 0
jne 0x1008f89a
cmp dword [0x102c4f8c], 0
je 0x1008f8c5
push 0x1007cb80
push 0x43e391
push 0xe8
call fcn.10099d10
push 0x1007cc50
push 0x43e5dc
push 0xe8
call fcn.10099d10
add esp, 0x18
push 0x100819b0
push 0x8f682f
push 0xe9
call fcn.10099d10
push 0x10081b80
push 0x4fa7f0
push 0xe9
call fcn.10099d10
push 0x10081b90
push 0x96a7e4
push 0xe9
call fcn.10099d10
mov eax, dword [0x104f9dc8]
add esp, 0x24
push str.._Settings.ini
push 0
push str.DiscordShowPresence
lea eax, [eax*2 + 0x231]
push str.Discord
mov dword [0x1028ee18], eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x104f9ff8], eax
test eax, eax
je 0x1008f95d
push 0
push 0
push 0
push 0x10062810
push 0
push 0
call esi
push 0
push 0
push 0
push 0x100627d0
push 0
push 0
call esi
call fcn.1007f4f0
push 0x104
lea eax, [ebp - 0x140]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x1008f9a7
lea eax, [ebp - 0x140]
push eax
push 0x104
push str.exceptions.log
call fcn.100a9652
push str..exp.log
push 0x104
push str.exceptions.log
call fcn.100a96ac
add esp, 0x18
cmp dword [0x106b91f4], 0
jne 0x1008fa68
push 0x1009b6e0
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
je 0x1008fa5e
push 0x100d1064
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x498], eax
test eax, eax
je 0x1008fa5e
lea ecx, [ebp - 0x48c]
mov dword [ebp - 0x48c], 0
push ecx
push 0x40
push 5
push eax
call edi
mov esi, eax
mov byte [ebp - 0x44c], 0xe9
mov eax, dword [ebp - 0x498]
mov ecx, method.std::_Ref_count_class_HELPER_VIEW_.virtual_12
sub ecx, eax
sub ecx, 5
mov dword [ebp - 0x44b], ecx
lea ecx, [ebp - 0x4a0]
push ecx
push 5
lea ecx, [ebp - 0x44c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test esi, esi
je 0x1008fa58
lea eax, [ebp - 0x49c]
push eax
push dword [ebp - 0x48c]
push 5
push dword [ebp - 0x498]
call edi
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x106b91f4], 1
call fcn.1009b2e0
cmp dword [0x104f9e74], 1
jne 0x1008fa87
push 0
push 0
push 0
push 0x1008cec0
push 0
push 0
call esi
mov eax, dword [0x102c4d94]
cmp eax, 3
jne 0x1008fac5
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x43781c
call edi
lea eax, [ebp - 0x48c]
mov byte [0x43781c], 6
push eax
push dword [ebp - 0x48c]
push 1
push 0x43781c
call edi
mov eax, dword [0x102c4d94]
cmp eax, 2
jne 0x1008fafe
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x43781c
call edi
lea eax, [ebp - 0x48c]
mov byte [0x43781c], 5
push eax
push dword [ebp - 0x48c]
push 1
push 0x43781c
call edi
mov eax, dword [0x102c4d94]
cmp eax, 1
jne 0x1008fb32
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x43781c
call edi
lea eax, [ebp - 0x48c]
mov byte [0x43781c], 4
push eax
push dword [ebp - 0x48c]
push 1
push 0x43781c
call edi
cmp dword [0x102c4da4], 1
jne 0x1008fb6a
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x5570e9
call edi
lea eax, [ebp - 0x48c]
mov byte [0x5570e9], 0xc3
push eax
push dword [ebp - 0x48c]
push 1
push 0x5570e9
call edi
cmp dword [0x102c4d9c], 1
jne 0x1008fbb8
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 0xb7
push 0x7de6f2
call edi
push 0xb7
push 0x90
push 0x7de6f2
call fcn.100a23c0
add esp, 0xc
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 0xb7
push 0x7de6f2
call edi
cmp dword [0x104f9e88], 0
je 0x1008fbf3
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 4
push 0x786d4a
call edi
lea eax, [ebp - 0x48c]
mov dword [0x786d4a], 0
push eax
push dword [ebp - 0x48c]
push 4
push 0x786d4a
call edi
cmp dword [0x104f9e84], 0
je 0x1008fc2e
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 4
push 0x75ccd7
call edi
lea eax, [ebp - 0x48c]
mov dword [0x75ccd7], 0
push eax
push dword [ebp - 0x48c]
push 4
push 0x75ccd7
call edi
cmp dword [0x104f9e80], 0
je 0x1008fc69
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 4
push 0x73c1c8
call edi
lea eax, [ebp - 0x48c]
mov dword [0x73c1c8], 0
push eax
push dword [ebp - 0x48c]
push 4
push 0x73c1c8
call edi
cmp dword [0x104f9e78], 0
je 0x1008fd14
cmp dword [0x102c5070], 0
jne 0x1008fce5
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 5
push 0x5927ec
call edi
mov eax, 0x5927ec
mov dword [eax], 0x90909090
mov byte [eax + 4], 0x90
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 5
push 0x5927ec
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x528d0d
call edi
lea eax, [ebp - 0x48c]
mov byte [0x528d0d], 0xc3
push eax
push dword [ebp - 0x48c]
push 1
push 0x528d0d
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x4f79d1
call edi
lea eax, [ebp - 0x48c]
mov byte [0x4f79d1], 0xc3
push eax
push dword [ebp - 0x48c]
push 1
push 0x4f79d1
call edi
cmp dword [0x102c4e60], 1
jne 0x1008fd34
push 0x99b557
push 0x99b54f
push 0xe9
call fcn.10099d10
add esp, 0xc
cmp dword [0x102c4e64], 1
jne 0x1008fd82
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 0x666
push 0x604f85
call edi
push 0x666
push 0x90
push 0x604f85
call fcn.100a23c0
add esp, 0xc
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 0x666
push 0x604f85
call edi
cmp dword [0x102c4e7c], 1
jne 0x1008fdca
push 0x7c4a66
push 0x7c488a
push 0xe9
call fcn.10099d10
push 0x1008cf00
push 0x8e6c32
push 0xe9
call fcn.10099d10
push 0x1008cf00
push 0xa38f0d7
push 0xe9
call fcn.10099d10
add esp, 0x24
cmp dword [0x102c4e78], 1
jne 0x1008fdea
push 0x8f47b6
push 0x8f479c
push 0xe9
call fcn.10099d10
add esp, 0xc
cmp dword [0x102c4da0], 1
jne 0x1009008b
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x5ad65c
call edi
lea eax, [ebp - 0x48c]
mov byte [0x5ad65c], 0
push eax
push dword [ebp - 0x48c]
push 1
push 0x5ad65c
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x5ad662
call edi
lea eax, [ebp - 0x48c]
mov byte [0x5ad662], 0
push eax
push dword [ebp - 0x48c]
push 1
push 0x5ad662
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x5ad668
call edi
lea eax, [ebp - 0x48c]
mov byte [0x5ad668], 0
push eax
push dword [ebp - 0x48c]
push 1
push 0x5ad668
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x5ad66e
call edi
lea eax, [ebp - 0x48c]
mov byte [0x5ad66e], 0
push eax
push dword [ebp - 0x48c]
push 1
push 0x5ad66e
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x5ad674
call edi
lea eax, [ebp - 0x48c]
mov byte [0x5ad674], 0
push eax
push dword [ebp - 0x48c]
push 1
push 0x5ad674
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x5ad67a
call edi
lea eax, [ebp - 0x48c]
mov byte [0x5ad67a], 0
push eax
push dword [ebp - 0x48c]
push 1
push 0x5ad67a
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 2
push 0x5ad680
call edi
xor eax, eax
mov word [0x5ad680], ax
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 2
push 0x5ad680
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x5c3b22
call edi
lea eax, [ebp - 0x48c]
mov byte [0x5c3b22], 0
push eax
push dword [ebp - 0x48c]
push 1
push 0x5c3b22
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x5c3b35
call edi
lea eax, [ebp - 0x48c]
mov byte [0x5c3b35], 0
push eax
push dword [ebp - 0x48c]
push 1
push 0x5c3b35
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x5c3b48
call edi
lea eax, [ebp - 0x48c]
mov byte [0x5c3b48], 0
push eax
push dword [ebp - 0x48c]
push 1
push 0x5c3b48
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x5c3b5b
call edi
lea eax, [ebp - 0x48c]
mov byte [0x5c3b5b], 0
push eax
push dword [ebp - 0x48c]
push 1
push 0x5c3b5b
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x5c3b6e
call edi
lea eax, [ebp - 0x48c]
mov byte [0x5c3b6e], 0
push eax
push dword [ebp - 0x48c]
push 1
push 0x5c3b6e
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 1
push 0x5c3b81
call edi
lea eax, [ebp - 0x48c]
mov byte [0x5c3b81], 0
push eax
push dword [ebp - 0x48c]
push 1
push 0x5c3b81
call edi
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 2
push 0x5c3b94
call edi
xor eax, eax
mov word [0x5c3b94], ax
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x48c]
push 2
push 0x5c3b94
call edi
cmp dword [0x102c4e30], 1
jne 0x10090337
mov esi, method.CryptoPP::BlockCipherFinal_1__class_CryptoPP::DES_XEX3::Base_.virtual_28
mov byte [ebp - 0x498], 0xe8
mov dword [ebp - 0x48c], 0
lea eax, [esi - 0x55b3cc]
mov dword [ebp - 0x497], eax
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 5
push 0x55b3c7
call edi
test eax, eax
je 0x10090106
mov eax, dword [ebp - 0x498]
mov ecx, 0x55b3c7
mov dword [ecx], eax
mov al, byte [ebp - 0x494]
mov byte [ecx + 4], al
lea eax, [ebp - 0x4a0]
push eax
push dword [ebp - 0x48c]
mov dword [ebp - 0x4a0], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1009010c
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [esi - 0x581c59]
mov byte [ebp - 0x498], 0xe8
mov dword [ebp - 0x497], eax
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 5
push 0x581c54
mov dword [ebp - 0x48c], 0
call edi
test eax, eax
je 0x10090175
mov eax, dword [ebp - 0x498]
mov ecx, 0x581c54
mov dword [ecx], eax
mov al, byte [ebp - 0x494]
mov byte [ecx + 4], al
lea eax, [ebp - 0x4a0]
push eax
push dword [ebp - 0x48c]
mov dword [ebp - 0x4a0], 0
push 5
push ecx
call edi
test eax, eax
jne 0x1009017b
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [esi - 0x861cd7]
mov byte [ebp - 0x498], 0xe8
mov dword [ebp - 0x497], eax
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 5
push 0x861cd2
mov dword [ebp - 0x48c], 0
call edi
test eax, eax
je 0x100901e4
mov eax, dword [ebp - 0x498]
mov ecx, 0x861cd2
mov dword [ecx], eax
mov al, byte [ebp - 0x494]
mov byte [ecx + 4], al
lea eax, [ebp - 0x4a0]
push eax
push dword [ebp - 0x48c]
mov dword [ebp - 0x4a0], 0
push 5
push ecx
call edi
test eax, eax
jne 0x100901ea
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [esi - 0x97d07f]
mov byte [ebp - 0x498], 0xe8
mov dword [ebp - 0x497], eax
lea eax, [ebp - 0x48c]
push eax
push 0x40
push 5
push 0x97d07a
mov dword [ebp - 0x48c], 0
call edi
test eax, eax
je 0x10090253
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100a0150
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x10
push str.Error
push str.Main.premium_not_found_or_invalid_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.10011840
int3