Function at 0x410ee0
Capabilities:
Contain obfuscated stackstrings
Copy file
Create directory
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x503673
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe30
push ebx
push esi
push edi
mov edi, ecx
push 0x104
lea eax, [ebp - 0xd30]
mov dword [ebp - 4], 0
push 0
push eax
call fcn.004de6d0
mov esi, dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea eax, [ebp - 0xd30]
add esp, 0xc
push eax
push 0
push 0
push 0x1a
push 0
call esi
push 0x104
lea eax, [ebp - 0xe38]
push 0
push eax
call fcn.004de6d0
add esp, 0xc
lea eax, [ebp - 0xe38]
push eax
push 0
push 0
push 0x1c
push 0
call esi
movaps xmm0, xmmword [0x524f20]
lea ecx, [ebp - 0x2e3]
movups xmmword [ebp - 0x2e3], xmm0
mov dword [ebp - 0x2d3], 0x1f16041a
mov word [ebp - 0x2cf], 0x1c
mov byte [ebp - 0x2cd], 1
call fcn.004627f0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x8b0]
call fcn.004027f0
lea ecx, [ebp - 0x2e3]
mov byte [ebp - 4], 1
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x410fb0
sub ecx, edx
lea eax, [ebp - 0x2e3]
push ecx
push eax
lea ecx, [ebp - 0x8b0]
call fcn.00402810
lea eax, [ebp - 0x8b0]
mov byte [ebp - 4], 2
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x898]
call fcn.00469420
add esp, 4
lea ecx, [ebp - 0x8b0]
mov byte [ebp - 4], 4
call fcn.00402660
lea ecx, [ebp - 0x898]
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test al, al
je 0x411109
lea ecx, [ebp - 0xe7]
mov dword [ebp - 0xe7], 0x7132739
mov dword [ebp - 0xe3], 0x80304
mov byte [ebp - 0xdf], 1
call fcn.0040b3d0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5f0]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 5
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x411080
push 0
lea ecx, [ebp - 0x5f0]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x4110fa
sub esp, 0x18
lea eax, [ebp - 0x5f0]
mov ecx, esp
mov dword [ebp - 0x14], esp
xor bl, bl
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 6
lea eax, [ebp - 0x898]
mov ecx, esp
push eax
call fcn.004655b0
mov cl, bl
mov byte [ebp - 4], 5
call fcn.0040eb70
add esp, 0x30
test eax, eax
jne 0x4110c2
mov byte [edi], 1
jmp 0x4110fa
lea ecx, [ebp - 0x5f0]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa78]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa78]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0xa78]
call fcn.00402660
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 4
call fcn.00402660
movaps xmm0, xmmword [0x524ef0]
lea ecx, [ebp - 0x387]
movups xmmword [ebp - 0x387], xmm0
mov word [ebp - 0x377], 6
mov byte [ebp - 0x375], 1
call fcn.004627c0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x8c8]
call fcn.004027f0
lea ecx, [ebp - 0x387]
mov byte [ebp - 4], 8
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411150
sub ecx, edx
lea eax, [ebp - 0x387]
push ecx
push eax
lea ecx, [ebp - 0x8c8]
call fcn.00402810
lea eax, [ebp - 0x8c8]
mov byte [ebp - 4], 9
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x880]
call fcn.00469420
add esp, 4
lea ecx, [ebp - 0x8c8]
mov byte [ebp - 4], 0xb
call fcn.00402660
lea ecx, [ebp - 0x880]
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
je 0x4112ac
lea ecx, [ebp - 0x141]
mov dword [ebp - 0x141], 0xd0b2339
mov dword [ebp - 0x13d], 0x19191e0a
mov word [ebp - 0x139], 0
mov byte [ebp - 0x137], 1
call fcn.0040a0c0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5d8]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 0xc
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x411223
push 0
lea ecx, [ebp - 0x5d8]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x41129d
sub esp, 0x18
lea eax, [ebp - 0x5d8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x880]
mov ecx, esp
push eax
call fcn.004655b0
mov cl, bl
mov byte [ebp - 4], 0xc
call fcn.0040eb70
add esp, 0x30
test eax, eax
jne 0x411265
mov byte [edi], 1
jmp 0x41129d
lea ecx, [ebp - 0x5d8]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa90]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa90]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0xa90]
call fcn.00402660
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 0xb
call fcn.00402660
movaps xmm0, xmmword [0x525070]
lea ecx, [ebp - 0x311]
movups xmmword [ebp - 0x311], xmm0
mov dword [ebp - 0x301], 0x1d1b1a14
mov word [ebp - 0x2fd], 0xd
mov byte [ebp - 0x2fb], 1
call fcn.004627f0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x8e0]
call fcn.004027f0
lea ecx, [ebp - 0x311]
mov byte [ebp - 4], 0xf
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411300
sub ecx, edx
lea eax, [ebp - 0x311]
push ecx
push eax
lea ecx, [ebp - 0x8e0]
call fcn.00402810
lea eax, [ebp - 0x8e0]
mov byte [ebp - 4], 0x10
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x868]
call fcn.00469420
add esp, 4
lea ecx, [ebp - 0x8e0]
mov byte [ebp - 4], 0x12
call fcn.00402660
lea ecx, [ebp - 0x868]
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
je 0x411453
lea ecx, [ebp - 0xde]
mov dword [ebp - 0xde], 0x71f2339
mov dword [ebp - 0xda], 0x181f0d
mov byte [ebp - 0xd6], 1
call fcn.0040b3d0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x608]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x608]
mov byte [ebp - 4], 0x13
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x4113ca
push 0
lea ecx, [ebp - 0x608]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x411444
sub esp, 0x18
lea eax, [ebp - 0x608]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x868]
mov ecx, esp
push eax
call fcn.004655b0
mov cl, bl
mov byte [ebp - 4], 0x13
call fcn.0040eb70
add esp, 0x30
test eax, eax
jne 0x41140c
mov byte [edi], 1
jmp 0x411444
lea ecx, [ebp - 0x608]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xaa8]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xaa8]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0xaa8]
call fcn.00402660
lea ecx, [ebp - 0x608]
mov byte [ebp - 4], 0x12
call fcn.00402660
movaps xmm0, xmmword [str.9_v_r_n]
lea ecx, [ebp - 0x2fa]
movups xmmword [ebp - 0x2fa], xmm0
mov dword [ebp - 0x2ea], 0xc121a19
mov word [ebp - 0x2e6], 0xa
mov byte [ebp - 0x2e4], 1
call fcn.004627f0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6b8]
call fcn.004027f0
lea ecx, [ebp - 0x2fa]
mov byte [ebp - 4], 0x16
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4114a1
sub ecx, edx
lea eax, [ebp - 0x2fa]
push ecx
push eax
lea ecx, [ebp - 0x6b8]
call fcn.00402810
lea eax, [ebp - 0x6b8]
mov byte [ebp - 4], 0x17
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x850]
call fcn.00469420
add esp, 4
lea ecx, [ebp - 0x6b8]
mov byte [ebp - 4], 0x19
call fcn.00402660
lea ecx, [ebp - 0x850]
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
je 0x411600
lea ecx, [ebp - 0x1dc]
mov dword [ebp - 0x1dc], 0xd0b2339
mov dword [ebp - 0x1d8], 0x19191e0a
mov dword [ebp - 0x1d4], 0x333b2200
mov word [ebp - 0x1d0], 0x100
call fcn.0040e9f0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x500]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x1a
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x411577
push 0
lea ecx, [ebp - 0x500]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x4115f1
sub esp, 0x18
lea eax, [ebp - 0x500]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x850]
mov ecx, esp
push eax
call fcn.004655b0
mov cl, bl
mov byte [ebp - 4], 0x1a
call fcn.0040eb70
add esp, 0x30
test eax, eax
jne 0x4115b9
mov byte [edi], 1
jmp 0x4115f1
lea ecx, [ebp - 0x500]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xac0]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xac0]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0xac0]
call fcn.00402660
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x19
call fcn.00402660
movaps xmm0, xmmword [0x524d50]
lea ecx, [ebp - 0x3d2]
movups xmmword [ebp - 0x3d2], xmm0
mov byte [ebp - 0x3c2], 1
call fcn.00462670
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6d0]
call fcn.004027f0
lea ecx, [ebp - 0x3d2]
mov byte [ebp - 4], 0x1d
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411640
sub ecx, edx
lea eax, [ebp - 0x3d2]
push ecx
push eax
lea ecx, [ebp - 0x6d0]
call fcn.00402810
lea eax, [ebp - 0x6d0]
mov byte [ebp - 4], 0x1e
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x838]
call fcn.00469420
add esp, 4
lea ecx, [ebp - 0x6d0]
mov byte [ebp - 4], 0x20
call fcn.00402660
lea ecx, [ebp - 0x838]
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
je 0x411793
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xf0], 0x6082b39
mov dword [ebp - 0xec], 0x4180c
mov byte [ebp - 0xe8], 1
call fcn.0040b3d0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x458]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x21
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x41170a
push 0
lea ecx, [ebp - 0x458]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x411784
sub esp, 0x18
lea eax, [ebp - 0x458]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x838]
mov ecx, esp
push eax
call fcn.004655b0
mov cl, bl
mov byte [ebp - 4], 0x21
call fcn.0040eb70
add esp, 0x30
test eax, eax
jne 0x41174c
mov byte [edi], 1
jmp 0x411784
lea ecx, [ebp - 0x458]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x8f8]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x8f8]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0x8f8]
call fcn.00402660
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x20
call fcn.00402660
movaps xmm0, xmmword [0x525210]
lea ecx, [ebp - 0x39a]
movups xmmword [ebp - 0x39a], xmm0
mov word [ebp - 0x38a], 0xd
mov byte [ebp - 0x388], 1
call fcn.004627c0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6e8]
call fcn.004027f0
lea ecx, [ebp - 0x39a]
mov byte [ebp - 4], 0x24
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4117d7
sub ecx, edx
lea eax, [ebp - 0x39a]
push ecx
push eax
lea ecx, [ebp - 0x6e8]
call fcn.00402810
lea eax, [ebp - 0x6e8]
mov byte [ebp - 4], 0x25
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x35c]
call fcn.00469420
add esp, 4
lea ecx, [ebp - 0x6e8]
mov byte [ebp - 4], 0x27
call fcn.00402660
lea ecx, [ebp - 0x35c]
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
je 0x411d8e
lea ecx, [ebp - 0x1f9]
mov dword [ebp - 0x1f9], 0x10062c39
mov dword [ebp - 0x1f5], 0x5274a11
mov dword [ebp - 0x1f1], 0x41d0b0f
mov word [ebp - 0x1ed], 8
mov byte [ebp - 0x1eb], 1
call fcn.0040a230
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x3ec]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 4], 0x28
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x4118b8
push 0
lea ecx, [ebp - 0x3ec]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x411d7f
lea ecx, [ebp - 0x16e]
mov dword [ebp - 0x16e], 0xc092f39
mov dword [ebp - 0x16a], 0x80e120c
mov dword [ebp - 0x166], 0x1002c29
call fcn.0040e9c0
push eax
lea edx, [ebp - 0x35c]
lea ecx, [ebp - 0xbe0]
call fcn.00469300
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
lea ecx, [ebp - 0xbe0]
mov byte [ebp - 4], 0x28
mov bl, al
call fcn.00402660
test bl, bl
je 0x411a4e
lea ecx, [ebp - 0x17a]
mov dword [ebp - 0x17a], 0xc092f39
mov dword [ebp - 0x176], 0x80e120c
mov dword [ebp - 0x172], 0x1002c29
call fcn.0040e9c0
push eax
lea edx, [ebp - 0x3ec]
lea ecx, [ebp - 0x470]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x2a
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x411991
push 0
lea ecx, [ebp - 0x470]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x411a3f
sub esp, 0x18
lea eax, [ebp - 0x470]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x186]
mov dword [ebp - 0x186], 0xc092f39
mov dword [ebp - 0x182], 0x80e120c
mov esi, esp
mov dword [ebp - 0x17e], 0x1002c29
call fcn.0040e9c0
push eax
lea edx, [ebp - 0x35c]
mov ecx, esi
call fcn.00469300
add esp, 4
mov byte [ebp - 4], 0x2a
mov cl, bl
call fcn.0040eb70
add esp, 0x30
test eax, eax
jne 0x411a01
mov byte [edi], 1
jmp 0x411a39
lea ecx, [ebp - 0x470]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x910]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x910]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0x910]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x28
call fcn.00402660
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x218], 0xb082a39
mov dword [ebp - 0x214], 0x3f4b0608
mov dword [ebp - 0x210], 0x111d0119
mov dword [ebp - 0x20c], 0x1001716
call fcn.0040eb40
push eax
lea edx, [ebp - 0x35c]
lea ecx, [ebp - 0xbf8]
call fcn.00469300
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x2d
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
lea ecx, [ebp - 0xbf8]
mov byte [ebp - 4], 0x28
mov bl, al
call fcn.00402660
test bl, bl
je 0x411c02
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x228], 0xb082a39
mov dword [ebp - 0x224], 0x3f4b0608
mov dword [ebp - 0x220], 0x111d0119
mov dword [ebp - 0x21c], 0x1001716
call fcn.0040eb40
push eax
lea edx, [ebp - 0x3ec]
lea ecx, [ebp - 0x488]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x488]
mov byte [ebp - 4], 0x2e
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x411b3b
push 0
lea ecx, [ebp - 0x488]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x411bf3
sub esp, 0x18
lea eax, [ebp - 0x488]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.004655b0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x238]
sub esp, 0x18
mov dword [ebp - 0x238], 0xb082a39
mov dword [ebp - 0x234], 0x3f4b0608
mov esi, esp
mov dword [ebp - 0x230], 0x111d0119
mov dword [ebp - 0x22c], 0x1001716
call fcn.0040eb40
push eax
lea edx, [ebp - 0x35c]
mov ecx, esi
call fcn.00469300
add esp, 4
mov byte [ebp - 4], 0x2e
mov cl, bl
call fcn.0040eb70
add esp, 0x30
test eax, eax
jne 0x411bb5
mov byte [edi], 1
jmp 0x411bed
lea ecx, [ebp - 0x488]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x928]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x928]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0x928]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x488]
mov byte [ebp - 4], 0x28
call fcn.00402660
movaps xmm0, xmmword [0x5253e0]
lea ecx, [ebp - 0x67a]
movups xmmword [ebp - 0x67a], xmm0
mov word [ebp - 0x66a], 0x100
call fcn.0040e930
push eax
lea edx, [ebp - 0x35c]
lea ecx, [ebp - 0xc10]
call fcn.00469300
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x31
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
lea ecx, [ebp - 0xc10]
mov byte [ebp - 4], 0x28
mov bl, al
call fcn.00402660
test bl, bl
je 0x411d7f
movaps xmm0, xmmword [0x5253e0]
lea ecx, [ebp - 0x68c]
movups xmmword [ebp - 0x68c], xmm0
mov word [ebp - 0x67c], 0x100
call fcn.0040e930
push eax
lea edx, [ebp - 0x3ec]
lea ecx, [ebp - 0x4a0]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x32
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x411ccd
push 0
lea ecx, [ebp - 0x4a0]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x411d74
sub esp, 0x18
lea eax, [ebp - 0x4a0]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.004655b0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x668]
movaps xmm0, xmmword [0x5253e0]
sub esp, 0x18
movups xmmword [ebp - 0x668], xmm0
mov word [ebp - 0x658], 0x100
mov esi, esp
call fcn.0040e930
push eax
lea edx, [ebp - 0x35c]
mov ecx, esi
call fcn.00469300
add esp, 4
mov byte [ebp - 4], 0x32
mov cl, bl
call fcn.0040eb70
add esp, 0x30
test eax, eax
jne 0x411d36
mov byte [edi], 1
jmp 0x411d6e
lea ecx, [ebp - 0x4a0]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x940]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x940]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0x940]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x4a0]
call fcn.00402660
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 4], 0x27
call fcn.00402660
movaps xmm0, xmmword [0x525160]
lea ecx, [ebp - 0x3c1]
movups xmmword [ebp - 0x3c1], xmm0
mov dword [ebp - 0x3b1], 0x121114
mov byte [ebp - 0x3ad], 1
call fcn.0040ea50
push eax
lea ecx, [ebp - 0xc28]
call fcn.00402700
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x820]
call fcn.00469420
add esp, 4
lea ecx, [ebp - 0xc28]
mov byte [ebp - 4], 0x37
call fcn.00402660
lea ecx, [ebp - 0x820]
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
je 0x411ee8
lea ecx, [ebp - 0x6d]
mov dword [ebp - 0x6d], 0x10062c39
mov word [ebp - 0x69], 0x11
mov byte [ebp - 0x67], 1
call fcn.004094f0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4b8]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x38
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x411e5f
push 0
lea ecx, [ebp - 0x4b8]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x411ed9
sub esp, 0x18
lea eax, [ebp - 0x4b8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x820]
mov ecx, esp
push eax
call fcn.004655b0
mov cl, bl
mov byte [ebp - 4], 0x38
call fcn.0040eb70
add esp, 0x30
test eax, eax
jne 0x411ea1
mov byte [edi], 1
jmp 0x411ed9
lea ecx, [ebp - 0x4b8]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x958]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x958]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0x958]
call fcn.00402660
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x37
call fcn.00402660
movaps xmm0, xmmword [0x525b30]
lea ecx, [ebp - 0x32b]
movups xmmword [ebp - 0x32b], xmm0
mov dword [ebp - 0x31b], 0x14160129
mov dword [ebp - 0x317], 0xf0f1f15
mov word [ebp - 0x313], 0x100
call fcn.0040a0f0
push eax
lea ecx, [ebp - 0xad8]
call fcn.00402700
push eax
lea edx, [ebp - 0xe38]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x808]
call fcn.00469420
add esp, 4
lea ecx, [ebp - 0xad8]
mov byte [ebp - 4], 0x3d
call fcn.00402660
lea ecx, [ebp - 0x808]
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
je 0x41205d
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0x1082539
mov dword [ebp - 0x128], 0x5060507
mov word [ebp - 0x124], 0x100
call fcn.0040e990
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4d0]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 0x3e
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x411fd4
push 0
lea ecx, [ebp - 0x4d0]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x41204e
sub esp, 0x18
lea eax, [ebp - 0x4d0]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x808]
mov ecx, esp
push eax
call fcn.004655b0
mov cl, bl
mov byte [ebp - 4], 0x3e
call fcn.0040eb70
add esp, 0x30
test eax, eax
jne 0x412016
mov byte [edi], 1
jmp 0x41204e
lea ecx, [ebp - 0x4d0]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x970]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x970]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0x970]
call fcn.00402660
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 0x3d
call fcn.00402660
lea ecx, [ebp - 0x96]
mov dword [ebp - 0x96], 0x5152739
mov dword [ebp - 0x92], 0x121806
mov byte [ebp - 0x8e], 1
call fcn.0040b3d0
push eax
lea ecx, [ebp - 0xaf0]
call fcn.00402700
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x7f0]
call fcn.00469420
add esp, 4
lea ecx, [ebp - 0xaf0]
mov byte [ebp - 4], 0x43
call fcn.00402660
lea ecx, [ebp - 0x7f0]
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
je 0x4121c0
lea ecx, [ebp - 0x9f]
mov dword [ebp - 0x9f], 0x5152739
mov dword [ebp - 0x9b], 0x121806
mov byte [ebp - 0x97], 1
call fcn.0040b3d0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4e8]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x44
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x412137
push 0
lea ecx, [ebp - 0x4e8]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x4121b1
sub esp, 0x18
lea eax, [ebp - 0x4e8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0x7f0]
mov ecx, esp
push eax
call fcn.004655b0
mov cl, bl
mov byte [ebp - 4], 0x44
call fcn.0040eb70
add esp, 0x30
test eax, eax
jne 0x412179
mov byte [edi], 1
jmp 0x4121b1
lea ecx, [ebp - 0x4e8]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x988]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x988]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0x988]
call fcn.00402660
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x43
call fcn.00402660
movaps xmm0, xmmword [0x525800]
lea ecx, [ebp - 0x296]
movups xmmword [ebp - 0x296], xmm0
mov dword [ebp - 0x286], 0xc19131c
mov dword [ebp - 0x282], 0x101a2d25
mov dword [ebp - 0x27e], 0xf30b1b11
mov word [ebp - 0x27a], 0x100
call fcn.004623d0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x700]
call fcn.004027f0
lea ecx, [ebp - 0x296]
mov byte [ebp - 4], 0x47
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412220
sub ecx, edx
lea eax, [ebp - 0x296]
push ecx
push eax
lea ecx, [ebp - 0x700]
call fcn.00402810
lea eax, [ebp - 0x700]
mov byte [ebp - 4], 0x48
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x7d8]
call fcn.00469420
add esp, 4
lea ecx, [ebp - 0x700]
mov byte [ebp - 4], 0x4a
call fcn.00402660
lea ecx, [ebp - 0x7d8]
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
je 0x412373
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xa8], 0x1b063139
mov dword [ebp - 0xa4], 0x20808
mov byte [ebp - 0xa0], 1
call fcn.0040b3d0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x620]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x620]
mov byte [ebp - 4], 0x4b
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x4122ea
push 0
lea ecx, [ebp - 0x620]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412364
sub esp, 0x18
lea eax, [ebp - 0x620]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x4c
lea eax, [ebp - 0x7d8]
mov ecx, esp
push eax
call fcn.004655b0
mov cl, bl
mov byte [ebp - 4], 0x4b
call fcn.0040eb70
add esp, 0x30
test eax, eax
jne 0x41232c
mov byte [edi], 1
jmp 0x412364
lea ecx, [ebp - 0x620]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x9a0]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x9a0]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0x9a0]
call fcn.00402660
lea ecx, [ebp - 0x620]
mov byte [ebp - 4], 0x4a
call fcn.00402660
movaps xmm0, xmmword [0x5252f0]
lea ecx, [ebp - 0x43d]
movups xmmword [ebp - 0x43d], xmm0
mov word [ebp - 0x42d], 0x17
mov byte [ebp - 0x42b], 1
call fcn.0040a690
push eax
lea ecx, [ebp - 0xb08]
call fcn.00402700
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x7c0]
call fcn.00469420
add esp, 4
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x50
call fcn.00402660
sub esp, 0x18
lea eax, [ebp - 0x7c0]
mov ecx, esp
push eax
call fcn.004655b0
call fcn.0040ba20
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
add esp, 0x18
test al, al
je 0x41251c
lea ecx, [ebp - 0xb1]
mov dword [ebp - 0xb1], 0x1c0e2439
mov dword [ebp - 0xad], 0x190f01
mov byte [ebp - 0xa9], 1
call fcn.0040b3d0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x518]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x518]
mov byte [ebp - 4], 0x51
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x412461
push 0
lea ecx, [ebp - 0x518]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x41250d
lea ecx, [ebp - 0x192]
mov dword [ebp - 0x192], 0x1c0e0439
mov dword [ebp - 0x18e], 0x42190f01
mov dword [ebp - 0x18a], 0x1000c09
call fcn.0040e9c0
push eax
lea edx, [ebp - 0x518]
lea ecx, [ebp - 0xb20]
call fcn.00469300
add esp, 4
mov ecx, eax
call fcn.004027a0
lea ecx, [ebp - 0x7c0]
mov esi, eax
call fcn.004027a0
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0xb20]
mov esi, eax
call fcn.00402660
test esi, esi
je 0x4124cf
mov byte [edi], 1
jmp 0x412507
lea ecx, [ebp - 0x518]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x9b8]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x9b8]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0x9b8]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x518]
mov byte [ebp - 4], 0x50
call fcn.00402660
movaps xmm0, xmmword [0x5255a0]
lea ecx, [ebp - 0x342]
movups xmmword [ebp - 0x342], xmm0
mov dword [ebp - 0x332], 0xc121a19
mov word [ebp - 0x32e], 0xa
mov byte [ebp - 0x32c], 1
call fcn.0040a260
push eax
lea ecx, [ebp - 0xb38]
call fcn.00402700
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x7a8]
call fcn.00469420
add esp, 4
lea ecx, [ebp - 0xb38]
mov byte [ebp - 4], 0x55
call fcn.00402660
lea ecx, [ebp - 0x7a8]
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
je 0x4126a2
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x208], 0xd0b2339
mov dword [ebp - 0x204], 0x3191e0a
mov dword [ebp - 0x200], 0x30e2d03
mov word [ebp - 0x1fc], 0x19
mov byte [ebp - 0x1fa], 1
call fcn.0040a230
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x530]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x56
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x412616
push 0
lea ecx, [ebp - 0x530]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412693
sub esp, 0x18
mov byte [ebp - 0x15], 0
lea eax, [ebp - 0x530]
mov dword [ebp - 0x10], esp
mov ecx, esp
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x7a8]
mov ecx, esp
push eax
call fcn.004655b0
mov cl, byte [ebp - 0x15]
mov byte [ebp - 4], 0x56
call fcn.0040eb70
add esp, 0x30
test eax, eax
jne 0x41265b
mov byte [edi], 1
jmp 0x412693
lea ecx, [ebp - 0x530]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x9d0]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x9d0]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0x9d0]
call fcn.00402660
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x55
call fcn.00402660
movaps xmm0, xmmword [0x525990]
lea ecx, [ebp - 0x2cc]
movups xmmword [ebp - 0x2cc], xmm0
mov dword [ebp - 0x2bc], 0x12591307
mov dword [ebp - 0x2b8], 0x15150a
mov byte [ebp - 0x2b4], 1
call fcn.004624f0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x718]
call fcn.004027f0
lea ecx, [ebp - 0x2cc]
mov byte [ebp - 4], 0x59
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4126f1
sub ecx, edx
lea eax, [ebp - 0x2cc]
push ecx
push eax
lea ecx, [ebp - 0x718]
call fcn.00402810
lea eax, [ebp - 0x718]
mov byte [ebp - 4], 0x5a
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x790]
call fcn.00469420
add esp, 4
lea ecx, [ebp - 0x718]
mov byte [ebp - 4], 0x5c
call fcn.00402660
sub esp, 0x18
lea eax, [ebp - 0x790]
mov ecx, esp
push eax
call fcn.004655b0
call fcn.0040ba20
add esp, 0x18
test al, al
je 0x41287a
lea ecx, [ebp - 0x136]
mov dword [ebp - 0x136], 0x60e2439
mov dword [ebp - 0x132], 0x9080408
mov word [ebp - 0x12e], 0x100
call fcn.0040e990
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x548]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0x5d
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x4127c8
push 0
lea ecx, [ebp - 0x548]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x41286b
movaps xmm0, xmmword [0x524f00]
lea ecx, [ebp - 0x69d]
movups xmmword [ebp - 0x69d], xmm0
mov byte [ebp - 0x68d], 1
call fcn.0040e960
push eax
lea edx, [ebp - 0x548]
lea ecx, [ebp - 0xb50]
call fcn.00469300
add esp, 4
mov ecx, eax
call fcn.004027a0
lea ecx, [ebp - 0x790]
mov esi, eax
call fcn.004027a0
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0xb50]
mov esi, eax
call fcn.00402660
test esi, esi
je 0x41282d
mov byte [edi], 1
jmp 0x412865
lea ecx, [ebp - 0x548]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x9e8]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x9e8]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0x9e8]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0x5c
call fcn.00402660
movaps xmm0, xmmword [0x524ee0]
lea ecx, [ebp - 0x417]
movups xmmword [ebp - 0x417], xmm0
mov word [ebp - 0x407], 6
mov byte [ebp - 0x405], 1
call fcn.0040a690
push eax
lea ecx, [ebp - 0xb68]
call fcn.00402700
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x778]
call fcn.00469420
add esp, 4
lea ecx, [ebp - 0xb68]
mov byte [ebp - 4], 0x61
call fcn.00402660
lea ecx, [ebp - 0x778]
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
je 0x4129ec
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x14c], CreateCompatibleBitmap
mov dword [ebp - 0x148], 0x190e180c
mov word [ebp - 0x144], 0
mov byte [ebp - 0x142], 1
call fcn.0040a0c0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x560]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0x62
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x412960
push 0
lea ecx, [ebp - 0x560]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x4129dd
sub esp, 0x18
mov byte [ebp - 0x15], 0
lea eax, [ebp - 0x560]
mov dword [ebp - 0x10], esp
mov ecx, esp
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x63
lea eax, [ebp - 0x778]
mov ecx, esp
push eax
call fcn.004655b0
mov cl, byte [ebp - 0x15]
mov byte [ebp - 4], 0x62
call fcn.0040eb70
add esp, 0x30
test eax, eax
jne 0x4129a5
mov byte [edi], 1
jmp 0x4129dd
lea ecx, [ebp - 0x560]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa00]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0xa00]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0xa00]
call fcn.00402660
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0x61
call fcn.00402660
lea ecx, [ebp - 0x25]
mov dword [ebp - 0x25], 0x9122139
mov dword [ebp - 0x21], 0xa0e1b
mov byte [ebp - 0x1d], 1
call fcn.00462700
push dword [ebp - 0x10]
lea ecx, [ebp - 0x730]
call fcn.004027f0
lea ecx, [ebp - 0x25]
mov byte [ebp - 4], 0x65
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412a20
sub ecx, edx
lea eax, [ebp - 0x25]
push ecx
push eax
lea ecx, [ebp - 0x730]
call fcn.00402810
lea eax, [ebp - 0x730]
mov byte [ebp - 4], 0x66
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x374]
call fcn.00469420
add esp, 4
lea ecx, [ebp - 0x730]
mov byte [ebp - 4], 0x68
call fcn.00402660
lea ecx, [ebp - 0x374]
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
je 0x412fc7
lea ecx, [ebp - 0xba]
mov dword [ebp - 0xba], 0x9122139
mov dword [ebp - 0xb6], 0xa0e1b
mov byte [ebp - 0xb2], 1
call fcn.0040b3d0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x404]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x404]
mov byte [ebp - 4], 0x69
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x412aeb
push 0
lea ecx, [ebp - 0x404]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412fb8
lea ecx, [ebp - 0x19e]
mov dword [ebp - 0x19e], 0xc092f39
mov dword [ebp - 0x19a], 0x80e120c
mov dword [ebp - 0x196], 0x1002c29
call fcn.0040e9c0
push eax
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0xb80]
call fcn.00469300
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x6a
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
lea ecx, [ebp - 0xb80]
mov byte [ebp - 4], 0x69
mov bl, al
call fcn.00402660
test bl, bl
je 0x412c81
lea ecx, [ebp - 0x1aa]
mov dword [ebp - 0x1aa], 0xc092f39
mov dword [ebp - 0x1a6], 0x80e120c
mov dword [ebp - 0x1a2], 0x1002c29
call fcn.0040e9c0
push eax
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x578]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 0x6b
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x412bc4
push 0
lea ecx, [ebp - 0x578]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412c72
sub esp, 0x18
lea eax, [ebp - 0x578]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x1b6]
mov dword [ebp - 0x1b6], 0xc092f39
mov dword [ebp - 0x1b2], 0x80e120c
mov esi, esp
mov dword [ebp - 0x1ae], 0x1002c29
call fcn.0040e9c0
push eax
lea edx, [ebp - 0x374]
mov ecx, esi
call fcn.00469300
add esp, 4
mov byte [ebp - 4], 0x6b
mov cl, bl
call fcn.0040eb70
add esp, 0x30
test eax, eax
jne 0x412c34
mov byte [edi], 1
jmp 0x412c6c
lea ecx, [ebp - 0x578]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa18]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0xa18]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0xa18]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 0x69
call fcn.00402660
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x248], 0xb082a39
mov dword [ebp - 0x244], 0x3f4b0608
mov dword [ebp - 0x240], 0x111d0119
mov dword [ebp - 0x23c], 0x1001716
call fcn.0040eb40
push eax
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0xb98]
call fcn.00469300
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x6e
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
lea ecx, [ebp - 0xb98]
mov byte [ebp - 4], 0x69
mov bl, al
call fcn.00402660
test bl, bl
je 0x412e35
lea ecx, [ebp - 0x258]
mov dword [ebp - 0x258], 0xb082a39
mov dword [ebp - 0x254], 0x3f4b0608
mov dword [ebp - 0x250], 0x111d0119
mov dword [ebp - 0x24c], 0x1001716
call fcn.0040eb40
push eax
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x590]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 0x6f
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x412d6e
push 0
lea ecx, [ebp - 0x590]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412e26
sub esp, 0x18
lea eax, [ebp - 0x590]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.004655b0
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0x268]
sub esp, 0x18
mov dword [ebp - 0x268], 0xb082a39
mov dword [ebp - 0x264], 0x3f4b0608
mov esi, esp
mov dword [ebp - 0x260], 0x111d0119
mov dword [ebp - 0x25c], 0x1001716
call fcn.0040eb40
push eax
lea edx, [ebp - 0x374]
mov ecx, esi
call fcn.00469300
add esp, 4
mov byte [ebp - 4], 0x6f
mov cl, bl
call fcn.0040eb70
add esp, 0x30
test eax, eax
jne 0x412de8
mov byte [edi], 1
jmp 0x412e20
lea ecx, [ebp - 0x590]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa30]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xa30]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0xa30]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 0x69
call fcn.00402660
movaps xmm0, xmmword [0x5253e0]
lea ecx, [ebp - 0x632]
movups xmmword [ebp - 0x632], xmm0
mov word [ebp - 0x622], 0x100
call fcn.0040e930
push eax
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0xbb0]
call fcn.00469300
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x72
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
lea ecx, [ebp - 0xbb0]
mov byte [ebp - 4], 0x69
mov bl, al
call fcn.00402660
test bl, bl
je 0x412fb2
movaps xmm0, xmmword [0x5253e0]
lea ecx, [ebp - 0x644]
movups xmmword [ebp - 0x644], xmm0
mov word [ebp - 0x634], 0x100
call fcn.0040e930
push eax
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x5a8]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x5a8]
mov byte [ebp - 4], 0x73
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x412f00
push 0
lea ecx, [ebp - 0x5a8]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412fa7
sub esp, 0x18
lea eax, [ebp - 0x5a8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.004655b0
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0x656]
movaps xmm0, xmmword [0x5253e0]
sub esp, 0x18
movups xmmword [ebp - 0x656], xmm0
mov word [ebp - 0x646], 0x100
mov esi, esp
call fcn.0040e930
push eax
lea edx, [ebp - 0x374]
mov ecx, esi
call fcn.00469300
add esp, 4
mov byte [ebp - 4], 0x73
mov cl, bl
call fcn.0040eb70
add esp, 0x30
test eax, eax
jne 0x412f69
mov byte [edi], 1
jmp 0x412fa1
lea ecx, [ebp - 0x5a8]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa48]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0xa48]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0xa48]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x5a8]
call fcn.00402660
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [ebp - 0x404]
mov byte [ebp - 4], 0x68
call fcn.00402660
movaps xmm0, xmmword [0x525ac0]
lea ecx, [ebp - 0x2b3]
movups xmmword [ebp - 0x2b3], xmm0
mov dword [ebp - 0x2a3], 0x1d101911
mov dword [ebp - 0x29f], 0x101a0d57
mov dword [ebp - 0x29b], 0xb1b11
mov byte [ebp - 0x297], 1
call fcn.00462520
push dword [ebp - 0x10]
lea ecx, [ebp - 0x748]
call fcn.004027f0
lea ecx, [ebp - 0x2b3]
mov byte [ebp - 4], 0x76
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413020
sub ecx, edx
lea eax, [ebp - 0x2b3]
push ecx
push eax
lea ecx, [ebp - 0x748]
call fcn.00402810
lea eax, [ebp - 0x748]
mov byte [ebp - 4], 0x77
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x760]
call fcn.00469420
add esp, 4
lea ecx, [ebp - 0x748]
mov byte [ebp - 4], 0x79
call fcn.00402660
sub esp, 0x18
lea eax, [ebp - 0x760]
mov ecx, esp
push eax
call fcn.004655b0
call fcn.0040ba20
add esp, 0x18
test al, al
je 0x4131ad
lea ecx, [ebp - 0x1c2]
mov dword [ebp - 0x1c2], 0x4122b39
mov dword [ebp - 0x1be], 0x32f031d
mov dword [ebp - 0x1ba], 0x1000b0a
call fcn.0040e9c0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5c0]
call fcn.00469300
add esp, 4
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 4], 0x7a
call fcn.004027a0
mov ecx, eax
call fcn.0040bab0
test al, al
jne 0x4130f8
push 0
lea ecx, [ebp - 0x5c0]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x41319e
movaps xmm0, xmmword [0x5254a0]
lea ecx, [ebp - 0x42a]
movups xmmword [ebp - 0x42a], xmm0
mov word [ebp - 0x41a], 1
mov byte [ebp - 0x418], 1
call fcn.0040a690
push eax
lea edx, [ebp - 0x5c0]
lea ecx, [ebp - 0xbc8]
call fcn.00469300
add esp, 4
mov ecx, eax
call fcn.004027a0
lea ecx, [ebp - 0x760]
mov esi, eax
call fcn.004027a0
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0xbc8]
mov esi, eax
call fcn.00402660
test esi, esi
je 0x413166
mov byte [edi], 1
jmp 0x41319e
lea ecx, [ebp - 0x5c0]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa60]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0xa60]
call fcn.0040bb70
add esp, 4
lea ecx, [ebp - 0xa60]
call fcn.00402660
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 4], 0x79
call fcn.00402660
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0xc3]
mov dword [ebp - 0xc3], 0xb130f27
mov dword [ebp - 0xbf], 0x50306
mov esi, esp
mov byte [ebp - 0xbb], 1
call fcn.0040b3d0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0xfa]
mov dword [ebp - 0xfa], 0xd000921
mov dword [ebp - 0xf6], 0x202050a
mov esi, esp
mov word [ebp - 0xf2], 0x100
call fcn.0040e990
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x104], 0x6080824
mov dword [ebp - 0x100], 0x202050a
mov esi, esp
mov word [ebp - 0xfc], 0x100
call fcn.0040e990
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xcc], 0x2b362427
mov dword [ebp - 0xc8], 0x50306
mov esi, esp
mov byte [ebp - 0xc4], 1
call fcn.0040b3d0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0x10e]
mov dword [ebp - 0x10e], 0x140721
mov dword [ebp - 0x10a], 0x919052a
mov esi, esp
mov word [ebp - 0x106], 0x100
call fcn.0040e990
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x1ce]
mov dword [ebp - 0x1ce], 0x1a080a23
mov dword [ebp - 0x1ca], 0x3080400
mov esi, esp
mov dword [ebp - 0x1c6], 0x1000004
call fcn.0040e9c0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x75]
mov dword [ebp - 0x75], 0x6061423
mov dword [ebp - 0x71], 0x1000502
mov esi, esp
call fcn.00410070
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x118], 0x1021423
mov dword [ebp - 0x114], 0x202050a
mov esi, esp
mov word [ebp - 0x110], 0x100
call fcn.0040e990
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x278]
sub esp, 0x18
mov dword [ebp - 0x278], 0xc0b0922
mov dword [ebp - 0x274], 0x202052a
mov esi, esp
mov dword [ebp - 0x270], 0x3c28464d
mov dword [ebp - 0x26c], 0x1005b35
call fcn.0040eb40
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x8d]
mov dword [ebp - 0x8d], 0x724292c
mov dword [ebp - 0x89], 0x1000400
mov esi, esp
call fcn.00410070
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x1ea]
sub esp, 0x18
mov dword [ebp - 0x1ea], 0x101082c
mov dword [ebp - 0x1e6], 0x91f0307
mov esi, esp
mov dword [ebp - 0x1e2], 0x1e06010e
mov word [ebp - 0x1de], 0x100
call fcn.0040e9f0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
mov byte [ebp - 4], 0x87
sub esp, 0x18
mov dword [ebp - 0x7d], 0x7041e2c
mov esi, esp
mov dword [ebp - 0x79], 0x1000400
lea ecx, [ebp - 0x7d]
call fcn.00410070
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x66]
mov dword [ebp - 0x66], 0x9000328
mov dword [ebp - 0x62], 0x202050a
mov word [ebp - 0x5e], 0x100
call fcn.00462640
sub esp, 0x18
lea eax, [ebp - 0x66]
mov ecx, esp
push eax
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0xd5]
mov dword [ebp - 0xd5], 0xb090f28
mov dword [ebp - 0xd1], 0x50306
mov esi, esp
mov byte [ebp - 0xcd], 1
call fcn.0040b3d0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x122]
mov dword [ebp - 0x122], 0xd0a072b
mov dword [ebp - 0x11e], 0x202050a
mov esi, esp
mov word [ebp - 0x11a], 0x100
call fcn.0040e990
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
mov byte [ebp - 4], 0x8b
mov dword [ebp - 0x157], 0x50e1435
mov dword [ebp - 0x153], 0x504090c
sub esp, 0x18
mov word [ebp - 0x14f], 3
lea ecx, [ebp - 0x157]
mov byte [ebp - 0x14d], 1
mov esi, esp
call fcn.0040a0c0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
mov byte [ebp - 4], 0x8c
lea ecx, [ebp - 0x162]
sub esp, 0x18
mov dword [ebp - 0x162], 0x1a150331
mov dword [ebp - 0x15e], 0x5040908
mov esi, esp
mov word [ebp - 0x15a], 3
mov byte [ebp - 0x158], 1
call fcn.0040a0c0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
sub esp, 0x18
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x85]
mov dword [ebp - 0x85], 0x724273c
mov dword [ebp - 0x81], 0x1000400
mov esi, esp
call fcn.00410070
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x1b06053f
mov word [ebp - 0x18], 1
mov byte [ebp - 0x16], 1
call fcn.00462950
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x8f
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4137d0
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x8e
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0x2e]
mov dword [ebp - 0x2e], 0xb110301
mov dword [ebp - 0x2a], 0x50306
mov byte [ebp - 0x26], 1
call fcn.00462700
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x2e]
mov byte [ebp - 4], 0x91
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413840
sub ecx, edx
lea eax, [ebp - 0x2e]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x90
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x4f]
mov dword [ebp - 0x4f], 0x1000f01
mov dword [ebp - 0x4b], 0xf070b1d
mov dword [ebp - 0x47], 0x10702
mov byte [ebp - 0x43], 1
call fcn.004626d0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x4f]
mov byte [ebp - 4], 0x93
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4138b6
sub ecx, edx
lea eax, [ebp - 0x4f]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x92
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], 0xd130f29
mov dword [ebp - 0x34], 0x202050a
mov word [ebp - 0x30], 0x100
call fcn.00462640
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x95
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413927
sub ecx, edx
lea eax, [ebp - 0x38]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x94
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
mov byte [ebp - 4], 0x96
lea ecx, [ebp - 0x42]
mov dword [ebp - 0x42], 0xc030337
mov dword [ebp - 0x3e], 0x202050a
mov word [ebp - 0x3a], 0x100
call fcn.00462640
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x42]
mov byte [ebp - 4], 0x97
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413998
sub ecx, edx
lea eax, [ebp - 0x42]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x96
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x3ac]
movaps xmm0, xmmword [0x524ed0]
movups xmmword [ebp - 0x3ac], xmm0
mov word [ebp - 0x39c], 0x100
call fcn.004626a0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 0x99
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413a12
sub ecx, edx
lea eax, [ebp - 0x3ac]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x98
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004655b0
mov byte [ebp - 4], 0x9a
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x5c], 0xf030329
mov dword [ebp - 0x58], 0x204b180c
mov dword [ebp - 0x54], 0xa1804
mov byte [ebp - 0x50], 1
call fcn.004626d0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x9b
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413a90
sub ecx, edx
lea eax, [ebp - 0x5c]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x9a
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.004100a0
add esp, 0x30
lea ecx, [ebp - 0x760]
call fcn.00402660
lea ecx, [ebp - 0x374]
call fcn.00402660
lea ecx, [ebp - 0x778]
call fcn.00402660
lea ecx, [ebp - 0x790]
call fcn.00402660
lea ecx, [ebp - 0x7a8]
call fcn.00402660
lea ecx, [ebp - 0x7c0]
call fcn.00402660
lea ecx, [ebp - 0x7d8]
call fcn.00402660
lea ecx, [ebp - 0x7f0]
call fcn.00402660
lea ecx, [ebp - 0x808]
call fcn.00402660
lea ecx, [ebp - 0x820]
call fcn.00402660
lea ecx, [ebp - 0x35c]
call fcn.00402660
lea ecx, [ebp - 0x838]
call fcn.00402660
lea ecx, [ebp - 0x850]
call fcn.00402660
lea ecx, [ebp - 0x868]
call fcn.00402660
lea ecx, [ebp - 0x880]
call fcn.00402660
lea ecx, [ebp - 0x898]
call fcn.00402660
lea ecx, [ebp + 8]
call fcn.00402660
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret