Function at 0x411400
Capabilities:
Contain obfuscated stackstrings
Copy file
Create directory
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5047b3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe30
push ebx
push esi
push edi
mov edi, ecx
push 0x104
lea eax, [ebp - 0xd30]
mov dword [ebp - 4], 0
push 0
push eax
call fcn.004df810
mov esi, dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea eax, [ebp - 0xd30]
add esp, 0xc
push eax
push 0
push 0
push 0x1a
push 0
call esi
push 0x104
lea eax, [ebp - 0xe38]
push 0
push eax
call fcn.004df810
add esp, 0xc
lea eax, [ebp - 0xe38]
push eax
push 0
push 0
push 0x1c
push 0
call esi
movaps xmm0, xmmword [0x527780]
lea ecx, [ebp - 0x2e3]
movups xmmword [ebp - 0x2e3], xmm0
mov dword [ebp - 0x2d3], 0xc9ccdec4
mov word [ebp - 0x2cf], 0xca
mov byte [ebp - 0x2cd], 1
call fcn.004637c0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x8b0]
call fcn.00402850
lea ecx, [ebp - 0x2e3]
mov byte [ebp - 4], 1
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4114d0
sub ecx, edx
lea eax, [ebp - 0x2e3]
push ecx
push eax
lea ecx, [ebp - 0x8b0]
call fcn.00402870
lea eax, [ebp - 0x8b0]
mov byte [ebp - 4], 2
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x898]
call fcn.0046a3e0
add esp, 4
lea ecx, [ebp - 0x8b0]
mov byte [ebp - 4], 4
call fcn.00402670
lea ecx, [ebp - 0x898]
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test al, al
je 0x411629
lea ecx, [ebp - 0xe7]
mov dword [ebp - 0xe7], 0xf1e9ddc7
mov dword [ebp - 0xe3], 0xc2c9f2
mov byte [ebp - 0xdf], 1
call fcn.0040b8f0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5f0]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 5
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x4115a0
push 0
lea ecx, [ebp - 0x5f0]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x41161a
sub esp, 0x18
lea eax, [ebp - 0x5f0]
mov ecx, esp
mov dword [ebp - 0x14], esp
xor bl, bl
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 6
lea eax, [ebp - 0x898]
mov ecx, esp
push eax
call fcn.00466580
mov cl, bl
mov byte [ebp - 4], 5
call fcn.0040f090
add esp, 0x30
test eax, eax
jne 0x4115e2
mov byte [edi], 1
jmp 0x41161a
lea ecx, [ebp - 0x5f0]
call fcn.004027b0
push eax
lea ecx, [ebp - 0xa78]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa78]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0xa78]
call fcn.00402670
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 4
call fcn.00402670
movaps xmm0, xmmword [0x5276d0]
lea ecx, [ebp - 0x387]
movups xmmword [ebp - 0x387], xmm0
mov word [ebp - 0x377], 0xd8
mov byte [ebp - 0x375], 1
call fcn.00463790
push dword [ebp - 0x10]
lea ecx, [ebp - 0x8c8]
call fcn.00402850
lea ecx, [ebp - 0x387]
mov byte [ebp - 4], 8
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411670
sub ecx, edx
lea eax, [ebp - 0x387]
push ecx
push eax
lea ecx, [ebp - 0x8c8]
call fcn.00402870
lea eax, [ebp - 0x8c8]
mov byte [ebp - 4], 9
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x880]
call fcn.0046a3e0
add esp, 4
lea ecx, [ebp - 0x8c8]
mov byte [ebp - 4], 0xb
call fcn.00402670
lea ecx, [ebp - 0x880]
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
je 0x4117cc
lea ecx, [ebp - 0x141]
mov dword [ebp - 0x141], 0xfbf1d9c7
mov dword [ebp - 0x13d], 0xd7d3d4fc
mov word [ebp - 0x139], 0xce
mov byte [ebp - 0x137], 1
call fcn.0040a5e0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5d8]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 0xc
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x411743
push 0
lea ecx, [ebp - 0x5d8]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x4117bd
sub esp, 0x18
lea eax, [ebp - 0x5d8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x880]
mov ecx, esp
push eax
call fcn.00466580
mov cl, bl
mov byte [ebp - 4], 0xc
call fcn.0040f090
add esp, 0x30
test eax, eax
jne 0x411785
mov byte [edi], 1
jmp 0x4117bd
lea ecx, [ebp - 0x5d8]
call fcn.004027b0
push eax
lea ecx, [ebp - 0xa90]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa90]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0xa90]
call fcn.00402670
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 0xb
call fcn.00402670
movaps xmm0, xmmword [0x5275f0]
lea ecx, [ebp - 0x311]
movups xmmword [ebp - 0x311], xmm0
mov dword [ebp - 0x301], 0xcbc1c0ca
mov word [ebp - 0x2fd], 0xdb
mov byte [ebp - 0x2fb], 1
call fcn.004637c0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x8e0]
call fcn.00402850
lea ecx, [ebp - 0x311]
mov byte [ebp - 4], 0xf
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411820
sub ecx, edx
lea eax, [ebp - 0x311]
push ecx
push eax
lea ecx, [ebp - 0x8e0]
call fcn.00402870
lea eax, [ebp - 0x8e0]
mov byte [ebp - 4], 0x10
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x868]
call fcn.0046a3e0
add esp, 4
lea ecx, [ebp - 0x8e0]
mov byte [ebp - 4], 0x12
call fcn.00402670
lea ecx, [ebp - 0x868]
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
je 0x411973
lea ecx, [ebp - 0xde]
mov dword [ebp - 0xde], 0xf1e5d9c7
mov dword [ebp - 0xda], 0xd2d5fb
mov byte [ebp - 0xd6], 1
call fcn.0040b8f0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x608]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x608]
mov byte [ebp - 4], 0x13
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x4118ea
push 0
lea ecx, [ebp - 0x608]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x411964
sub esp, 0x18
lea eax, [ebp - 0x608]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x868]
mov ecx, esp
push eax
call fcn.00466580
mov cl, bl
mov byte [ebp - 4], 0x13
call fcn.0040f090
add esp, 0x30
test eax, eax
jne 0x41192c
mov byte [edi], 1
jmp 0x411964
lea ecx, [ebp - 0x608]
call fcn.004027b0
push eax
lea ecx, [ebp - 0xaa8]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xaa8]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0xaa8]
call fcn.00402670
lea ecx, [ebp - 0x608]
mov byte [ebp - 4], 0x12
call fcn.00402670
movaps xmm0, xmmword [0x526bd0]
lea ecx, [ebp - 0x2fa]
movups xmmword [ebp - 0x2fa], xmm0
mov dword [ebp - 0x2ea], 0xdac8c0c7
mov word [ebp - 0x2e6], 0xdc
mov byte [ebp - 0x2e4], 1
call fcn.004637c0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6b8]
call fcn.00402850
lea ecx, [ebp - 0x2fa]
mov byte [ebp - 4], 0x16
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4119c1
sub ecx, edx
lea eax, [ebp - 0x2fa]
push ecx
push eax
lea ecx, [ebp - 0x6b8]
call fcn.00402870
lea eax, [ebp - 0x6b8]
mov byte [ebp - 4], 0x17
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x850]
call fcn.0046a3e0
add esp, 4
lea ecx, [ebp - 0x6b8]
mov byte [ebp - 4], 0x19
call fcn.00402670
lea ecx, [ebp - 0x850]
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
je 0x411b20
lea ecx, [ebp - 0x1dc]
mov dword [ebp - 0x1dc], 0xfbf1d9c7
mov dword [ebp - 0x1d8], 0xd7d3d4fc
mov dword [ebp - 0x1d4], 0xe5f1e8ce
mov word [ebp - 0x1d0], 0x100
call fcn.0040ef10
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x500]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x1a
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x411a97
push 0
lea ecx, [ebp - 0x500]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x411b11
sub esp, 0x18
lea eax, [ebp - 0x500]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x850]
mov ecx, esp
push eax
call fcn.00466580
mov cl, bl
mov byte [ebp - 4], 0x1a
call fcn.0040f090
add esp, 0x30
test eax, eax
jne 0x411ad9
mov byte [edi], 1
jmp 0x411b11
lea ecx, [ebp - 0x500]
call fcn.004027b0
push eax
lea ecx, [ebp - 0xac0]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xac0]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0xac0]
call fcn.00402670
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x19
call fcn.00402670
movaps xmm0, xmmword [0x525e80]
lea ecx, [ebp - 0x3d2]
movups xmmword [ebp - 0x3d2], xmm0
mov byte [ebp - 0x3c2], 1
call fcn.00463640
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6d0]
call fcn.00402850
lea ecx, [ebp - 0x3d2]
mov byte [ebp - 4], 0x1d
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411b60
sub ecx, edx
lea eax, [ebp - 0x3d2]
push ecx
push eax
lea ecx, [ebp - 0x6d0]
call fcn.00402870
lea eax, [ebp - 0x6d0]
mov byte [ebp - 4], 0x1e
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x838]
call fcn.0046a3e0
add esp, 4
lea ecx, [ebp - 0x6d0]
mov byte [ebp - 4], 0x20
call fcn.00402670
lea ecx, [ebp - 0x838]
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
je 0x411cb3
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xf0], 0xf0f2d1c7
mov dword [ebp - 0xec], 0xced2fa
mov byte [ebp - 0xe8], 1
call fcn.0040b8f0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x458]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x21
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x411c2a
push 0
lea ecx, [ebp - 0x458]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x411ca4
sub esp, 0x18
lea eax, [ebp - 0x458]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x838]
mov ecx, esp
push eax
call fcn.00466580
mov cl, bl
mov byte [ebp - 4], 0x21
call fcn.0040f090
add esp, 0x30
test eax, eax
jne 0x411c6c
mov byte [edi], 1
jmp 0x411ca4
lea ecx, [ebp - 0x458]
call fcn.004027b0
push eax
lea ecx, [ebp - 0x8f8]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x8f8]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0x8f8]
call fcn.00402670
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x20
call fcn.00402670
movaps xmm0, xmmword [0x527080]
lea ecx, [ebp - 0x39a]
movups xmmword [ebp - 0x39a], xmm0
mov word [ebp - 0x38a], 0xd3
mov byte [ebp - 0x388], 1
call fcn.00463790
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6e8]
call fcn.00402850
lea ecx, [ebp - 0x39a]
mov byte [ebp - 4], 0x24
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411cf7
sub ecx, edx
lea eax, [ebp - 0x39a]
push ecx
push eax
lea ecx, [ebp - 0x6e8]
call fcn.00402870
lea eax, [ebp - 0x6e8]
mov byte [ebp - 4], 0x25
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x35c]
call fcn.0046a3e0
add esp, 4
lea ecx, [ebp - 0x6e8]
mov byte [ebp - 4], 0x27
call fcn.00402670
lea ecx, [ebp - 0x35c]
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
je 0x4122ae
lea ecx, [ebp - 0x1f9]
mov dword [ebp - 0x1f9], 0xe6fcd6c7
mov dword [ebp - 0x1f5], 0xcbed80e7
mov dword [ebp - 0x1f1], 0xd2d7c1c1
mov word [ebp - 0x1ed], 0xde
mov byte [ebp - 0x1eb], 1
call fcn.0040a750
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x3ec]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 4], 0x28
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x411dd8
push 0
lea ecx, [ebp - 0x3ec]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x41229f
lea ecx, [ebp - 0x16e]
mov dword [ebp - 0x16e], 0xfaf3d5c7
mov dword [ebp - 0x16a], 0xc6c4d8fa
mov dword [ebp - 0x166], 0x100e6e7
call fcn.0040eee0
push eax
lea edx, [ebp - 0x35c]
lea ecx, [ebp - 0xbe0]
call fcn.0046a2c0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
lea ecx, [ebp - 0xbe0]
mov byte [ebp - 4], 0x28
mov bl, al
call fcn.00402670
test bl, bl
je 0x411f6e
lea ecx, [ebp - 0x17a]
mov dword [ebp - 0x17a], 0xfaf3d5c7
mov dword [ebp - 0x176], 0xc6c4d8fa
mov dword [ebp - 0x172], 0x100e6e7
call fcn.0040eee0
push eax
lea edx, [ebp - 0x3ec]
lea ecx, [ebp - 0x470]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x2a
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x411eb1
push 0
lea ecx, [ebp - 0x470]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x411f5f
sub esp, 0x18
lea eax, [ebp - 0x470]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x186]
mov dword [ebp - 0x186], 0xfaf3d5c7
mov dword [ebp - 0x182], 0xc6c4d8fa
mov esi, esp
mov dword [ebp - 0x17e], 0x100e6e7
call fcn.0040eee0
push eax
lea edx, [ebp - 0x35c]
mov ecx, esi
call fcn.0046a2c0
add esp, 4
mov byte [ebp - 4], 0x2a
mov cl, bl
call fcn.0040f090
add esp, 0x30
test eax, eax
jne 0x411f21
mov byte [edi], 1
jmp 0x411f59
lea ecx, [ebp - 0x470]
call fcn.004027b0
push eax
lea ecx, [ebp - 0x910]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x910]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0x910]
call fcn.00402670
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x28
call fcn.00402670
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x218], 0xfdf2d0c7
mov dword [ebp - 0x214], 0xf181ccfe
mov dword [ebp - 0x210], 0xc7d7cbd7
mov dword [ebp - 0x20c], 0x100cdc0
call fcn.0040f060
push eax
lea edx, [ebp - 0x35c]
lea ecx, [ebp - 0xbf8]
call fcn.0046a2c0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x2d
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
lea ecx, [ebp - 0xbf8]
mov byte [ebp - 4], 0x28
mov bl, al
call fcn.00402670
test bl, bl
je 0x412122
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x228], 0xfdf2d0c7
mov dword [ebp - 0x224], 0xf181ccfe
mov dword [ebp - 0x220], 0xc7d7cbd7
mov dword [ebp - 0x21c], 0x100cdc0
call fcn.0040f060
push eax
lea edx, [ebp - 0x3ec]
lea ecx, [ebp - 0x488]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x488]
mov byte [ebp - 4], 0x2e
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x41205b
push 0
lea ecx, [ebp - 0x488]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x412113
sub esp, 0x18
lea eax, [ebp - 0x488]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466580
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x238]
sub esp, 0x18
mov dword [ebp - 0x238], 0xfdf2d0c7
mov dword [ebp - 0x234], 0xf181ccfe
mov esi, esp
mov dword [ebp - 0x230], 0xc7d7cbd7
mov dword [ebp - 0x22c], 0x100cdc0
call fcn.0040f060
push eax
lea edx, [ebp - 0x35c]
mov ecx, esi
call fcn.0046a2c0
add esp, 4
mov byte [ebp - 4], 0x2e
mov cl, bl
call fcn.0040f090
add esp, 0x30
test eax, eax
jne 0x4120d5
mov byte [edi], 1
jmp 0x41210d
lea ecx, [ebp - 0x488]
call fcn.004027b0
push eax
lea ecx, [ebp - 0x928]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x928]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0x928]
call fcn.00402670
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x488]
mov byte [ebp - 4], 0x28
call fcn.00402670
movaps xmm0, xmmword [0x526ef0]
lea ecx, [ebp - 0x67a]
movups xmmword [ebp - 0x67a], xmm0
mov word [ebp - 0x66a], 0x100
call fcn.0040ee50
push eax
lea edx, [ebp - 0x35c]
lea ecx, [ebp - 0xc10]
call fcn.0046a2c0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x31
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
lea ecx, [ebp - 0xc10]
mov byte [ebp - 4], 0x28
mov bl, al
call fcn.00402670
test bl, bl
je 0x41229f
movaps xmm0, xmmword [0x526ef0]
lea ecx, [ebp - 0x68c]
movups xmmword [ebp - 0x68c], xmm0
mov word [ebp - 0x67c], 0x100
call fcn.0040ee50
push eax
lea edx, [ebp - 0x3ec]
lea ecx, [ebp - 0x4a0]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x32
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x4121ed
push 0
lea ecx, [ebp - 0x4a0]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x412294
sub esp, 0x18
lea eax, [ebp - 0x4a0]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466580
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x668]
movaps xmm0, xmmword [0x526ef0]
sub esp, 0x18
movups xmmword [ebp - 0x668], xmm0
mov word [ebp - 0x658], 0x100
mov esi, esp
call fcn.0040ee50
push eax
lea edx, [ebp - 0x35c]
mov ecx, esi
call fcn.0046a2c0
add esp, 4
mov byte [ebp - 4], 0x32
mov cl, bl
call fcn.0040f090
add esp, 0x30
test eax, eax
jne 0x412256
mov byte [edi], 1
jmp 0x41228e
lea ecx, [ebp - 0x4a0]
call fcn.004027b0
push eax
lea ecx, [ebp - 0x940]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x940]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0x940]
call fcn.00402670
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x4a0]
call fcn.00402670
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 4], 0x27
call fcn.00402670
movaps xmm0, xmmword [0x527320]
lea ecx, [ebp - 0x3c1]
movups xmmword [ebp - 0x3c1], xmm0
mov dword [ebp - 0x3b1], 0xc8cbca
mov byte [ebp - 0x3ad], 1
call fcn.0040ef70
push eax
lea ecx, [ebp - 0xc28]
call fcn.00402710
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x820]
call fcn.0046a3e0
add esp, 4
lea ecx, [ebp - 0xc28]
mov byte [ebp - 4], 0x37
call fcn.00402670
lea ecx, [ebp - 0x820]
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
je 0x412408
lea ecx, [ebp - 0x6d]
mov dword [ebp - 0x6d], 0xe6fcd6c7
mov word [ebp - 0x69], 0xe7
mov byte [ebp - 0x67], 1
call fcn.00409530
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4b8]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x38
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x41237f
push 0
lea ecx, [ebp - 0x4b8]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x4123f9
sub esp, 0x18
lea eax, [ebp - 0x4b8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x820]
mov ecx, esp
push eax
call fcn.00466580
mov cl, bl
mov byte [ebp - 4], 0x38
call fcn.0040f090
add esp, 0x30
test eax, eax
jne 0x4123c1
mov byte [edi], 1
jmp 0x4123f9
lea ecx, [ebp - 0x4b8]
call fcn.004027b0
push eax
lea ecx, [ebp - 0x958]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x958]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0x958]
call fcn.00402670
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x37
call fcn.00402670
movaps xmm0, xmmword [0x526660]
lea ecx, [ebp - 0x32b]
movups xmmword [ebp - 0x32b], xmm0
mov dword [ebp - 0x31b], 0xc2ccdbf7
mov dword [ebp - 0x317], 0xc1c5d5c3
mov word [ebp - 0x313], 0x100
call fcn.0040a610
push eax
lea ecx, [ebp - 0xad8]
call fcn.00402710
push eax
lea edx, [ebp - 0xe38]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x808]
call fcn.0046a3e0
add esp, 4
lea ecx, [ebp - 0xad8]
mov byte [ebp - 4], 0x3d
call fcn.00402670
lea ecx, [ebp - 0x808]
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
je 0x41257d
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0xf7f2dfc7
mov dword [ebp - 0x128], 0xcbcccff1
mov word [ebp - 0x124], 0x100
call fcn.0040eeb0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4d0]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 0x3e
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x4124f4
push 0
lea ecx, [ebp - 0x4d0]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x41256e
sub esp, 0x18
lea eax, [ebp - 0x4d0]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x808]
mov ecx, esp
push eax
call fcn.00466580
mov cl, bl
mov byte [ebp - 4], 0x3e
call fcn.0040f090
add esp, 0x30
test eax, eax
jne 0x412536
mov byte [edi], 1
jmp 0x41256e
lea ecx, [ebp - 0x4d0]
call fcn.004027b0
push eax
lea ecx, [ebp - 0x970]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x970]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0x970]
call fcn.00402670
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 0x3d
call fcn.00402670
lea ecx, [ebp - 0x96]
mov dword [ebp - 0x96], 0xf3efddc7
mov dword [ebp - 0x92], 0xd8d2f0
mov byte [ebp - 0x8e], 1
call fcn.0040b8f0
push eax
lea ecx, [ebp - 0xaf0]
call fcn.00402710
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x7f0]
call fcn.0046a3e0
add esp, 4
lea ecx, [ebp - 0xaf0]
mov byte [ebp - 4], 0x43
call fcn.00402670
lea ecx, [ebp - 0x7f0]
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
je 0x4126e0
lea ecx, [ebp - 0x9f]
mov dword [ebp - 0x9f], 0xf3efddc7
mov dword [ebp - 0x9b], 0xd8d2f0
mov byte [ebp - 0x97], 1
call fcn.0040b8f0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4e8]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x44
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x412657
push 0
lea ecx, [ebp - 0x4e8]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x4126d1
sub esp, 0x18
lea eax, [ebp - 0x4e8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0x7f0]
mov ecx, esp
push eax
call fcn.00466580
mov cl, bl
mov byte [ebp - 4], 0x44
call fcn.0040f090
add esp, 0x30
test eax, eax
jne 0x412699
mov byte [edi], 1
jmp 0x4126d1
lea ecx, [ebp - 0x4e8]
call fcn.004027b0
push eax
lea ecx, [ebp - 0x988]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x988]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0x988]
call fcn.00402670
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x43
call fcn.00402670
movaps xmm0, xmmword [0x526960]
lea ecx, [ebp - 0x296]
movups xmmword [ebp - 0x296], xmm0
mov dword [ebp - 0x286], 0xdac3c9c2
mov dword [ebp - 0x282], 0xded0e7f3
mov dword [ebp - 0x27e], 0xc5c1d1df
mov word [ebp - 0x27a], 0x100
call fcn.004633a0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x700]
call fcn.00402850
lea ecx, [ebp - 0x296]
mov byte [ebp - 4], 0x47
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412740
sub ecx, edx
lea eax, [ebp - 0x296]
push ecx
push eax
lea ecx, [ebp - 0x700]
call fcn.00402870
lea eax, [ebp - 0x700]
mov byte [ebp - 4], 0x48
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x7d8]
call fcn.0046a3e0
add esp, 4
lea ecx, [ebp - 0x700]
mov byte [ebp - 4], 0x4a
call fcn.00402670
lea ecx, [ebp - 0x7d8]
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
je 0x412893
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xa8], 0xedfccbc7
mov dword [ebp - 0xa4], 0xc8c2fe
mov byte [ebp - 0xa0], 1
call fcn.0040b8f0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x620]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x620]
mov byte [ebp - 4], 0x4b
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x41280a
push 0
lea ecx, [ebp - 0x620]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x412884
sub esp, 0x18
lea eax, [ebp - 0x620]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x4c
lea eax, [ebp - 0x7d8]
mov ecx, esp
push eax
call fcn.00466580
mov cl, bl
mov byte [ebp - 4], 0x4b
call fcn.0040f090
add esp, 0x30
test eax, eax
jne 0x41284c
mov byte [edi], 1
jmp 0x412884
lea ecx, [ebp - 0x620]
call fcn.004027b0
push eax
lea ecx, [ebp - 0x9a0]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x9a0]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0x9a0]
call fcn.00402670
lea ecx, [ebp - 0x620]
mov byte [ebp - 4], 0x4a
call fcn.00402670
movaps xmm0, xmmword [0x526cc0]
lea ecx, [ebp - 0x43d]
movups xmmword [ebp - 0x43d], xmm0
mov word [ebp - 0x42d], 0xc9
mov byte [ebp - 0x42b], 1
call fcn.0040abb0
push eax
lea ecx, [ebp - 0xb08]
call fcn.00402710
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x7c0]
call fcn.0046a3e0
add esp, 4
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x50
call fcn.00402670
sub esp, 0x18
lea eax, [ebp - 0x7c0]
mov ecx, esp
push eax
call fcn.00466580
call fcn.0040bf40
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
add esp, 0x18
test al, al
je 0x412a3c
lea ecx, [ebp - 0xb1]
mov dword [ebp - 0xb1], 0xeaf4dec7
mov dword [ebp - 0xad], 0xd3c5f7
mov byte [ebp - 0xa9], 1
call fcn.0040b8f0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x518]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x518]
mov byte [ebp - 4], 0x51
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x412981
push 0
lea ecx, [ebp - 0x518]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x412a2d
lea ecx, [ebp - 0x192]
mov dword [ebp - 0x192], 0xeaf4fec7
mov dword [ebp - 0x18e], 0x8cd3c5f7
mov dword [ebp - 0x18a], 0x100c6c7
call fcn.0040eee0
push eax
lea edx, [ebp - 0x518]
lea ecx, [ebp - 0xb20]
call fcn.0046a2c0
add esp, 4
mov ecx, eax
call fcn.004027b0
lea ecx, [ebp - 0x7c0]
mov esi, eax
call fcn.004027b0
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0xb20]
mov esi, eax
call fcn.00402670
test esi, esi
je 0x4129ef
mov byte [edi], 1
jmp 0x412a27
lea ecx, [ebp - 0x518]
call fcn.004027b0
push eax
lea ecx, [ebp - 0x9b8]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x9b8]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0x9b8]
call fcn.00402670
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x518]
mov byte [ebp - 4], 0x50
call fcn.00402670
movaps xmm0, xmmword [0x526bc0]
lea ecx, [ebp - 0x342]
movups xmmword [ebp - 0x342], xmm0
mov dword [ebp - 0x332], 0xdac8c0c7
mov word [ebp - 0x32e], 0xdc
mov byte [ebp - 0x32c], 1
call fcn.0040a780
push eax
lea ecx, [ebp - 0xb38]
call fcn.00402710
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x7a8]
call fcn.0046a3e0
add esp, 4
lea ecx, [ebp - 0xb38]
mov byte [ebp - 4], 0x55
call fcn.00402670
lea ecx, [ebp - 0x7a8]
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
je 0x412bc2
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x208], 0xfbf1d9c7
mov dword [ebp - 0x204], 0xcdd3d4fc
mov dword [ebp - 0x200], 0xd5c4e7cd
mov word [ebp - 0x1fc], 0xcf
mov byte [ebp - 0x1fa], 1
call fcn.0040a750
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x530]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x56
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x412b36
push 0
lea ecx, [ebp - 0x530]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x412bb3
sub esp, 0x18
mov byte [ebp - 0x15], 0
lea eax, [ebp - 0x530]
mov dword [ebp - 0x10], esp
mov ecx, esp
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x7a8]
mov ecx, esp
push eax
call fcn.00466580
mov cl, byte [ebp - 0x15]
mov byte [ebp - 4], 0x56
call fcn.0040f090
add esp, 0x30
test eax, eax
jne 0x412b7b
mov byte [edi], 1
jmp 0x412bb3
lea ecx, [ebp - 0x530]
call fcn.004027b0
push eax
lea ecx, [ebp - 0x9d0]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x9d0]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0x9d0]
call fcn.00402670
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x55
call fcn.00402670
movaps xmm0, xmmword [0x526890]
lea ecx, [ebp - 0x2cc]
movups xmmword [ebp - 0x2cc], xmm0
mov dword [ebp - 0x2bc], 0xc483c9d9
mov dword [ebp - 0x2b8], 0xdfdfdc
mov byte [ebp - 0x2b4], 1
call fcn.004634c0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x718]
call fcn.00402850
lea ecx, [ebp - 0x2cc]
mov byte [ebp - 4], 0x59
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412c11
sub ecx, edx
lea eax, [ebp - 0x2cc]
push ecx
push eax
lea ecx, [ebp - 0x718]
call fcn.00402870
lea eax, [ebp - 0x718]
mov byte [ebp - 4], 0x5a
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x790]
call fcn.0046a3e0
add esp, 4
lea ecx, [ebp - 0x718]
mov byte [ebp - 4], 0x5c
call fcn.00402670
sub esp, 0x18
lea eax, [ebp - 0x790]
mov ecx, esp
push eax
call fcn.00466580
call fcn.0040bf40
add esp, 0x18
test al, al
je 0x412d9a
lea ecx, [ebp - 0x136]
mov dword [ebp - 0x136], 0xf0f4dec7
mov dword [ebp - 0x132], 0xc7c2cefe
mov word [ebp - 0x12e], 0x100
call fcn.0040eeb0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x548]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0x5d
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x412ce8
push 0
lea ecx, [ebp - 0x548]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x412d8b
movaps xmm0, xmmword [0x525db0]
lea ecx, [ebp - 0x69d]
movups xmmword [ebp - 0x69d], xmm0
mov byte [ebp - 0x68d], 1
call fcn.0040ee80
push eax
lea edx, [ebp - 0x548]
lea ecx, [ebp - 0xb50]
call fcn.0046a2c0
add esp, 4
mov ecx, eax
call fcn.004027b0
lea ecx, [ebp - 0x790]
mov esi, eax
call fcn.004027b0
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0xb50]
mov esi, eax
call fcn.00402670
test esi, esi
je 0x412d4d
mov byte [edi], 1
jmp 0x412d85
lea ecx, [ebp - 0x548]
call fcn.004027b0
push eax
lea ecx, [ebp - 0x9e8]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x9e8]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0x9e8]
call fcn.00402670
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0x5c
call fcn.00402670
movaps xmm0, xmmword [0x5276c0]
lea ecx, [ebp - 0x417]
movups xmmword [ebp - 0x417], xmm0
mov word [ebp - 0x407], 0xd8
mov byte [ebp - 0x405], 1
call fcn.0040abb0
push eax
lea ecx, [ebp - 0xb68]
call fcn.00402710
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x778]
call fcn.0046a3e0
add esp, 4
lea ecx, [ebp - 0xb68]
mov byte [ebp - 4], 0x61
call fcn.00402670
lea ecx, [ebp - 0x778]
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
je 0x412f0c
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x14c], 0xf6e9d9c7
mov dword [ebp - 0x148], 0xd7c4d2fa
mov word [ebp - 0x144], 0xce
mov byte [ebp - 0x142], 1
call fcn.0040a5e0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x560]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0x62
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x412e80
push 0
lea ecx, [ebp - 0x560]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x412efd
sub esp, 0x18
mov byte [ebp - 0x15], 0
lea eax, [ebp - 0x560]
mov dword [ebp - 0x10], esp
mov ecx, esp
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x63
lea eax, [ebp - 0x778]
mov ecx, esp
push eax
call fcn.00466580
mov cl, byte [ebp - 0x15]
mov byte [ebp - 4], 0x62
call fcn.0040f090
add esp, 0x30
test eax, eax
jne 0x412ec5
mov byte [edi], 1
jmp 0x412efd
lea ecx, [ebp - 0x560]
call fcn.004027b0
push eax
lea ecx, [ebp - 0xa00]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0xa00]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0xa00]
call fcn.00402670
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0x61
call fcn.00402670
lea ecx, [ebp - 0x25]
mov dword [ebp - 0x25], 0xffe8dbc7
mov dword [ebp - 0x21], 0xc0c4ed
mov byte [ebp - 0x1d], 1
call fcn.004636d0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x730]
call fcn.00402850
lea ecx, [ebp - 0x25]
mov byte [ebp - 4], 0x65
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412f40
sub ecx, edx
lea eax, [ebp - 0x25]
push ecx
push eax
lea ecx, [ebp - 0x730]
call fcn.00402870
lea eax, [ebp - 0x730]
mov byte [ebp - 4], 0x66
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x374]
call fcn.0046a3e0
add esp, 4
lea ecx, [ebp - 0x730]
mov byte [ebp - 4], 0x68
call fcn.00402670
lea ecx, [ebp - 0x374]
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
je 0x4134e7
lea ecx, [ebp - 0xba]
mov dword [ebp - 0xba], 0xffe8dbc7
mov dword [ebp - 0xb6], 0xc0c4ed
mov byte [ebp - 0xb2], 1
call fcn.0040b8f0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x404]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x404]
mov byte [ebp - 4], 0x69
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x41300b
push 0
lea ecx, [ebp - 0x404]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x4134d8
lea ecx, [ebp - 0x19e]
mov dword [ebp - 0x19e], 0xfaf3d5c7
mov dword [ebp - 0x19a], 0xc6c4d8fa
mov dword [ebp - 0x196], 0x100e6e7
call fcn.0040eee0
push eax
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0xb80]
call fcn.0046a2c0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x6a
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
lea ecx, [ebp - 0xb80]
mov byte [ebp - 4], 0x69
mov bl, al
call fcn.00402670
test bl, bl
je 0x4131a1
lea ecx, [ebp - 0x1aa]
mov dword [ebp - 0x1aa], 0xfaf3d5c7
mov dword [ebp - 0x1a6], 0xc6c4d8fa
mov dword [ebp - 0x1a2], 0x100e6e7
call fcn.0040eee0
push eax
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x578]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 0x6b
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x4130e4
push 0
lea ecx, [ebp - 0x578]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x413192
sub esp, 0x18
lea eax, [ebp - 0x578]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x1b6]
mov dword [ebp - 0x1b6], 0xfaf3d5c7
mov dword [ebp - 0x1b2], 0xc6c4d8fa
mov esi, esp
mov dword [ebp - 0x1ae], 0x100e6e7
call fcn.0040eee0
push eax
lea edx, [ebp - 0x374]
mov ecx, esi
call fcn.0046a2c0
add esp, 4
mov byte [ebp - 4], 0x6b
mov cl, bl
call fcn.0040f090
add esp, 0x30
test eax, eax
jne 0x413154
mov byte [edi], 1
jmp 0x41318c
lea ecx, [ebp - 0x578]
call fcn.004027b0
push eax
lea ecx, [ebp - 0xa18]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0xa18]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0xa18]
call fcn.00402670
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 0x69
call fcn.00402670
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x248], 0xfdf2d0c7
mov dword [ebp - 0x244], 0xf181ccfe
mov dword [ebp - 0x240], 0xc7d7cbd7
mov dword [ebp - 0x23c], 0x100cdc0
call fcn.0040f060
push eax
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0xb98]
call fcn.0046a2c0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x6e
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
lea ecx, [ebp - 0xb98]
mov byte [ebp - 4], 0x69
mov bl, al
call fcn.00402670
test bl, bl
je 0x413355
lea ecx, [ebp - 0x258]
mov dword [ebp - 0x258], 0xfdf2d0c7
mov dword [ebp - 0x254], 0xf181ccfe
mov dword [ebp - 0x250], 0xc7d7cbd7
mov dword [ebp - 0x24c], 0x100cdc0
call fcn.0040f060
push eax
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x590]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 0x6f
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x41328e
push 0
lea ecx, [ebp - 0x590]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x413346
sub esp, 0x18
lea eax, [ebp - 0x590]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466580
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0x268]
sub esp, 0x18
mov dword [ebp - 0x268], 0xfdf2d0c7
mov dword [ebp - 0x264], 0xf181ccfe
mov esi, esp
mov dword [ebp - 0x260], 0xc7d7cbd7
mov dword [ebp - 0x25c], 0x100cdc0
call fcn.0040f060
push eax
lea edx, [ebp - 0x374]
mov ecx, esi
call fcn.0046a2c0
add esp, 4
mov byte [ebp - 4], 0x6f
mov cl, bl
call fcn.0040f090
add esp, 0x30
test eax, eax
jne 0x413308
mov byte [edi], 1
jmp 0x413340
lea ecx, [ebp - 0x590]
call fcn.004027b0
push eax
lea ecx, [ebp - 0xa30]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xa30]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0xa30]
call fcn.00402670
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 0x69
call fcn.00402670
movaps xmm0, xmmword [0x526ef0]
lea ecx, [ebp - 0x632]
movups xmmword [ebp - 0x632], xmm0
mov word [ebp - 0x622], 0x100
call fcn.0040ee50
push eax
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0xbb0]
call fcn.0046a2c0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x72
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
lea ecx, [ebp - 0xbb0]
mov byte [ebp - 4], 0x69
mov bl, al
call fcn.00402670
test bl, bl
je 0x4134d2
movaps xmm0, xmmword [0x526ef0]
lea ecx, [ebp - 0x644]
movups xmmword [ebp - 0x644], xmm0
mov word [ebp - 0x634], 0x100
call fcn.0040ee50
push eax
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x5a8]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x5a8]
mov byte [ebp - 4], 0x73
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x413420
push 0
lea ecx, [ebp - 0x5a8]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x4134c7
sub esp, 0x18
lea eax, [ebp - 0x5a8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466580
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0x656]
movaps xmm0, xmmword [0x526ef0]
sub esp, 0x18
movups xmmword [ebp - 0x656], xmm0
mov word [ebp - 0x646], 0x100
mov esi, esp
call fcn.0040ee50
push eax
lea edx, [ebp - 0x374]
mov ecx, esi
call fcn.0046a2c0
add esp, 4
mov byte [ebp - 4], 0x73
mov cl, bl
call fcn.0040f090
add esp, 0x30
test eax, eax
jne 0x413489
mov byte [edi], 1
jmp 0x4134c1
lea ecx, [ebp - 0x5a8]
call fcn.004027b0
push eax
lea ecx, [ebp - 0xa48]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0xa48]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0xa48]
call fcn.00402670
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x5a8]
call fcn.00402670
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [ebp - 0x404]
mov byte [ebp - 4], 0x68
call fcn.00402670
movaps xmm0, xmmword [0x5266e0]
lea ecx, [ebp - 0x2b3]
movups xmmword [ebp - 0x2b3], xmm0
mov dword [ebp - 0x2a3], 0xcbcac3cf
mov dword [ebp - 0x29f], 0xded0c781
mov dword [ebp - 0x29b], 0xc1d1df
mov byte [ebp - 0x297], 1
call fcn.004634f0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x748]
call fcn.00402850
lea ecx, [ebp - 0x2b3]
mov byte [ebp - 4], 0x76
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413540
sub ecx, edx
lea eax, [ebp - 0x2b3]
push ecx
push eax
lea ecx, [ebp - 0x748]
call fcn.00402870
lea eax, [ebp - 0x748]
mov byte [ebp - 4], 0x77
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x760]
call fcn.0046a3e0
add esp, 4
lea ecx, [ebp - 0x748]
mov byte [ebp - 4], 0x79
call fcn.00402670
sub esp, 0x18
lea eax, [ebp - 0x760]
mov ecx, esp
push eax
call fcn.00466580
call fcn.0040bf40
add esp, 0x18
test al, al
je 0x4136cd
lea ecx, [ebp - 0x1c2]
mov dword [ebp - 0x1c2], 0xf2e8d1c7
mov dword [ebp - 0x1be], 0xcde5c9eb
mov dword [ebp - 0x1ba], 0x100c1c4
call fcn.0040eee0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5c0]
call fcn.0046a2c0
add esp, 4
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 4], 0x7a
call fcn.004027b0
mov ecx, eax
call fcn.0040bfd0
test al, al
jne 0x413618
push 0
lea ecx, [ebp - 0x5c0]
call fcn.004027b0
push eax
call esi
test eax, eax
je 0x4136be
movaps xmm0, xmmword [0x526e20]
lea ecx, [ebp - 0x42a]
movups xmmword [ebp - 0x42a], xmm0
mov word [ebp - 0x41a], 0xdf
mov byte [ebp - 0x418], 1
call fcn.0040abb0
push eax
lea edx, [ebp - 0x5c0]
lea ecx, [ebp - 0xbc8]
call fcn.0046a2c0
add esp, 4
mov ecx, eax
call fcn.004027b0
lea ecx, [ebp - 0x760]
mov esi, eax
call fcn.004027b0
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0xbc8]
mov esi, eax
call fcn.00402670
test esi, esi
je 0x413686
mov byte [edi], 1
jmp 0x4136be
lea ecx, [ebp - 0x5c0]
call fcn.004027b0
push eax
lea ecx, [ebp - 0xa60]
call fcn.00402710
push 0
mov dl, 1
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0xa60]
call fcn.0040c090
add esp, 4
lea ecx, [ebp - 0xa60]
call fcn.00402670
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 4], 0x79
call fcn.00402670
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0xc3]
mov dword [ebp - 0xc3], 0xfde9f5d9
mov dword [ebp - 0xbf], 0xcfc9f0
mov esi, esp
mov byte [ebp - 0xbb], 1
call fcn.0040b8f0
push eax
mov ecx, esi
call fcn.00402710
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0xfa]
mov dword [ebp - 0xfa], 0xfbfaf3df
mov dword [ebp - 0xf6], 0xccc8cffc
mov esi, esp
mov word [ebp - 0xf2], 0x100
call fcn.0040eeb0
push eax
mov ecx, esi
call fcn.00402710
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x104], 0xf0f2f2da
mov dword [ebp - 0x100], 0xccc8cffc
mov esi, esp
mov word [ebp - 0xfc], 0x100
call fcn.0040eeb0
push eax
mov ecx, esi
call fcn.00402710
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xcc], 0xddccded9
mov dword [ebp - 0xc8], 0xcfc9f0
mov esi, esp
mov byte [ebp - 0xc4], 1
call fcn.0040b8f0
push eax
mov ecx, esi
call fcn.00402710
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0x10e]
mov dword [ebp - 0x10e], 0xf6eefddf
mov dword [ebp - 0x10a], 0xc7d3cfdc
mov esi, esp
mov word [ebp - 0x106], 0x100
call fcn.0040eeb0
push eax
mov ecx, esi
call fcn.00402710
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x1ce]
mov dword [ebp - 0x1ce], 0xecf2f0dd
mov dword [ebp - 0x1ca], 0xcdc2cef6
mov esi, esp
mov dword [ebp - 0x1c6], 0x100caca
call fcn.0040eee0
push eax
mov ecx, esi
call fcn.00402710
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x75]
mov dword [ebp - 0x75], 0xf0fceedd
mov dword [ebp - 0x71], 0x100cff4
mov esi, esp
call fcn.00410590
push eax
mov ecx, esi
call fcn.00402710
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x118], 0xf7f8eedd
mov dword [ebp - 0x114], 0xccc8cffc
mov esi, esp
mov word [ebp - 0x110], 0x100
call fcn.0040eeb0
push eax
mov ecx, esi
call fcn.00402710
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x278]
sub esp, 0x18
mov dword [ebp - 0x278], 0xfaf1f3dc
mov dword [ebp - 0x274], 0xccc8cfdc
mov esi, esp
mov dword [ebp - 0x270], 0xeae28c83
mov dword [ebp - 0x26c], 0x10081e3
call fcn.0040f060
push eax
mov ecx, esi
call fcn.00402710
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x8d]
mov dword [ebp - 0x8d], 0xf1ded3d2
mov dword [ebp - 0x89], 0x100cef6
mov esi, esp
call fcn.00410590
push eax
mov ecx, esi
call fcn.00402710
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x1ea]
sub esp, 0x18
mov dword [ebp - 0x1ea], 0xf7fbf2d2
mov dword [ebp - 0x1e6], 0xc7d5c9f1
mov esi, esp
mov dword [ebp - 0x1e2], 0xc8cccbc0
mov word [ebp - 0x1de], 0x100
call fcn.0040ef10
push eax
mov ecx, esi
call fcn.00402710
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
mov byte [ebp - 4], 0x87
sub esp, 0x18
mov dword [ebp - 0x7d], 0xf1fee4d2
mov esi, esp
mov dword [ebp - 0x79], 0x100cef6
lea ecx, [ebp - 0x7d]
call fcn.00410590
push eax
mov ecx, esi
call fcn.00402710
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x66]
mov dword [ebp - 0x66], 0xfffaf9d6
mov dword [ebp - 0x62], 0xccc8cffc
mov word [ebp - 0x5e], 0x100
call fcn.00463610
sub esp, 0x18
lea eax, [ebp - 0x66]
mov ecx, esp
push eax
call fcn.00402710
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0xd5]
mov dword [ebp - 0xd5], 0xfdf3f5d6
mov dword [ebp - 0xd1], 0xcfc9f0
mov esi, esp
mov byte [ebp - 0xcd], 1
call fcn.0040b8f0
push eax
mov ecx, esi
call fcn.00402710
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x122]
mov dword [ebp - 0x122], 0xfbf0fdd5
mov dword [ebp - 0x11e], 0xccc8cffc
mov esi, esp
mov word [ebp - 0x11a], 0x100
call fcn.0040eeb0
push eax
mov ecx, esi
call fcn.00402710
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
mov byte [ebp - 4], 0x8b
mov dword [ebp - 0x157], 0xf3f4eecb
mov dword [ebp - 0x153], 0xcbcec3fa
sub esp, 0x18
mov word [ebp - 0x14f], 0xcd
lea ecx, [ebp - 0x157]
mov byte [ebp - 0x14d], 1
mov esi, esp
call fcn.0040a5e0
push eax
mov ecx, esi
call fcn.00402710
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
mov byte [ebp - 4], 0x8c
lea ecx, [ebp - 0x162]
sub esp, 0x18
mov dword [ebp - 0x162], 0xeceff9cf
mov dword [ebp - 0x15e], 0xcbcec3fe
mov esi, esp
mov word [ebp - 0x15a], 0xcd
mov byte [ebp - 0x158], 1
call fcn.0040a5e0
push eax
mov ecx, esi
call fcn.00402710
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
sub esp, 0x18
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x85]
mov dword [ebp - 0x85], 0xf1deddc2
mov dword [ebp - 0x81], 0x100cef6
mov esi, esp
call fcn.00410590
push eax
mov ecx, esi
call fcn.00402710
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0xedfcffc1
mov word [ebp - 0x18], 0xf7
mov byte [ebp - 0x16], 1
call fcn.00463920
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402850
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x8f
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413cf0
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.00402870
mov byte [ebp - 4], 0x8e
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0x2e]
mov dword [ebp - 0x2e], 0xfdebf9ff
mov dword [ebp - 0x2a], 0xcfc9f0
mov byte [ebp - 0x26], 1
call fcn.004636d0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402850
lea ecx, [ebp - 0x2e]
mov byte [ebp - 4], 0x91
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413d60
sub ecx, edx
lea eax, [ebp - 0x2e]
push ecx
push eax
mov ecx, esi
call fcn.00402870
mov byte [ebp - 4], 0x90
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x4f]
mov dword [ebp - 0x4f], 0xf7faf5ff
mov dword [ebp - 0x4b], 0xc1cdc1eb
mov dword [ebp - 0x47], 0xcbcdcc
mov byte [ebp - 0x43], 1
call fcn.004636a0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402850
lea ecx, [ebp - 0x4f]
mov byte [ebp - 4], 0x93
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413dd6
sub ecx, edx
lea eax, [ebp - 0x4f]
push ecx
push eax
mov ecx, esi
call fcn.00402870
mov byte [ebp - 4], 0x92
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], 0xfbe9f5d7
mov dword [ebp - 0x34], 0xccc8cffc
mov word [ebp - 0x30], 0x100
call fcn.00463610
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402850
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x95
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413e47
sub ecx, edx
lea eax, [ebp - 0x38]
push ecx
push eax
mov ecx, esi
call fcn.00402870
mov byte [ebp - 4], 0x94
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
mov byte [ebp - 4], 0x96
lea ecx, [ebp - 0x42]
mov dword [ebp - 0x42], 0xfaf9f9c9
mov dword [ebp - 0x3e], 0xccc8cffc
mov word [ebp - 0x3a], 0x100
call fcn.00463610
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402850
lea ecx, [ebp - 0x42]
mov byte [ebp - 4], 0x97
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413eb8
sub ecx, edx
lea eax, [ebp - 0x42]
push ecx
push eax
mov ecx, esi
call fcn.00402870
mov byte [ebp - 4], 0x96
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x3ac]
movaps xmm0, xmmword [0x5276e0]
movups xmmword [ebp - 0x3ac], xmm0
mov word [ebp - 0x39c], 0x100
call fcn.00463670
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402850
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 0x99
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413f32
sub ecx, edx
lea eax, [ebp - 0x3ac]
push ecx
push eax
mov ecx, esi
call fcn.00402870
mov byte [ebp - 4], 0x98
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466580
mov byte [ebp - 4], 0x9a
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x5c], 0xf9f9f9d7
mov dword [ebp - 0x58], 0xee81d2fa
mov dword [ebp - 0x54], 0xc0d2ca
mov byte [ebp - 0x50], 1
call fcn.004636a0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402850
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x9b
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413fb0
sub ecx, edx
lea eax, [ebp - 0x5c]
push ecx
push eax
mov ecx, esi
call fcn.00402870
mov byte [ebp - 4], 0x9a
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004105c0
add esp, 0x30
lea ecx, [ebp - 0x760]
call fcn.00402670
lea ecx, [ebp - 0x374]
call fcn.00402670
lea ecx, [ebp - 0x778]
call fcn.00402670
lea ecx, [ebp - 0x790]
call fcn.00402670
lea ecx, [ebp - 0x7a8]
call fcn.00402670
lea ecx, [ebp - 0x7c0]
call fcn.00402670
lea ecx, [ebp - 0x7d8]
call fcn.00402670
lea ecx, [ebp - 0x7f0]
call fcn.00402670
lea ecx, [ebp - 0x808]
call fcn.00402670
lea ecx, [ebp - 0x820]
call fcn.00402670
lea ecx, [ebp - 0x35c]
call fcn.00402670
lea ecx, [ebp - 0x838]
call fcn.00402670
lea ecx, [ebp - 0x850]
call fcn.00402670
lea ecx, [ebp - 0x868]
call fcn.00402670
lea ecx, [ebp - 0x880]
call fcn.00402670
lea ecx, [ebp - 0x898]
call fcn.00402670
lea ecx, [ebp + 8]
call fcn.00402670
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret