Function at 0x41d54f
Capabilities:
Contain obfuscated stackstrings
Get common file path
Get program files directory
Get startup folder
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46a139
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x16c
push edi
mov dword [ebp - 0x164], ecx
mov eax, dword [ebp + 8]
push eax
push 0x66
mov ecx, dword [ebp - 0x164]
call fcn.0045cadf
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x164]
add ecx, 0x5c
call fcn.004164a0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x164]
add ecx, 0xb8
call fcn.004164a0
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x164]
add ecx, 0x114
call fcn.004164a0
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x164]
add ecx, 0x170
call fcn.004164a0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x164]
add ecx, 0x1cc
call fcn.004164a0
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x164]
add ecx, 0x228
call fcn.004164a0
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x164]
add ecx, 0x2c0
call fcn.0040dfd0
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x164]
add ecx, 0x2c4
call fcn.0040dfd0
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x164]
add ecx, 0x2c8
call fcn.0040dfd0
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x164]
add ecx, 0x2cc
call fcn.0040dfd0
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x164]
add ecx, 0x2d0
call fcn.0040dfd0
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x164]
add ecx, 0x2d4
call fcn.0040dfd0
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x164]
add ecx, 0x2d8
call fcn.0040dfd0
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x164]
add ecx, 0x2dc
call fcn.0040dfd0
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x164]
add ecx, 0x2e0
call fcn.0040dfd0
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x164]
add ecx, 0x2e4
call fcn.0040dfd0
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x164]
add ecx, 0x2e8
call fcn.0040dfd0
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x164]
add ecx, 0x2ec
call fcn.0040dfd0
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x164]
add ecx, 0x2f0
call fcn.0040dfd0
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x164]
add ecx, 0x2f4
call fcn.0040dfd0
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x164]
add ecx, 0x2f8
call fcn.0040dfd0
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x164]
add ecx, 0x2fc
call fcn.0040dfd0
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x164]
add ecx, 0x300
call fcn.0040dfd0
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x164]
add ecx, 0x304
call fcn.0040dfd0
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x164]
add ecx, 0x30c
call fcn.0040dfd0
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x164]
add ecx, 0x310
call fcn.0040dfd0
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x164]
add ecx, 0x314
call fcn.0040dfd0
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x164]
add ecx, 0x318
call fcn.0040dfd0
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x164]
add ecx, 0x31c
call fcn.0040dfd0
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x164]
add ecx, 0x320
call fcn.0040dfd0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x164]
add ecx, 0x324
call fcn.0040dfd0
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x164]
add ecx, 0x328
call fcn.0040dfd0
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x164]
add ecx, 0x32c
call fcn.0040dfd0
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x164]
add ecx, 0x330
call fcn.0040dfd0
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x164]
add ecx, 0x334
call fcn.0040dfd0
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x164]
add ecx, 0x338
call fcn.0040dfd0
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x164]
add ecx, 0x33c
call fcn.0040dfd0
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x164]
add ecx, 0x340
call fcn.0040dfd0
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x164]
add ecx, 0x344
call fcn.0040dfd0
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x164]
add ecx, 0x348
call fcn.0040dfd0
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x164]
add ecx, 0x34c
call fcn.0040dfd0
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x164]
add ecx, 0x350
call fcn.0040dfd0
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x164]
add ecx, 0x354
call fcn.0040dfd0
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x164]
add ecx, 0x364
call fcn.0040dfd0
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x164]
add ecx, 0x480
call fcn.0040dfd0
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x164]
add ecx, 0x484
call fcn.0040dfd0
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x164]
add ecx, 0x488
call fcn.0040dfd0
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x164]
add ecx, 0x48c
call fcn.0040dfd0
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x164]
add ecx, 0x490
call fcn.0040dfd0
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x164]
add ecx, 0x494
call fcn.0040dfd0
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x164]
add ecx, 0x498
call fcn.0040dfd0
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x164]
add ecx, 0x49c
call fcn.0040dfd0
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x164]
add ecx, 0x4a0
call fcn.0040dfd0
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x164]
add ecx, 0x4a4
call fcn.0040dfd0
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x164]
add ecx, 0x4a8
call fcn.0040dfd0
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x164]
add ecx, 0x4ac
call fcn.0040dfd0
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x164]
add ecx, 0x4b0
call fcn.0040dfd0
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x164]
add ecx, 0x4b4
call fcn.0040dfd0
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x164]
add ecx, 0x4b8
call fcn.0040dfd0
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x164]
add ecx, 0x4bc
call fcn.0040dfd0
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x164]
add ecx, 0x4c0
call fcn.0040dfd0
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x164]
add ecx, 0x4c4
call fcn.0040dfd0
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x164]
add ecx, 0x4c8
call fcn.0040dfd0
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0x164]
add ecx, 0x4cc
call fcn.0040dfd0
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x164]
add ecx, 0x4d0
call fcn.0040dfd0
mov byte [ebp - 4], 0x41
mov ecx, dword [ebp - 0x164]
add ecx, 0x4d4
call fcn.0040dfd0
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp - 0x164]
add ecx, 0x4d8
call fcn.0040dfd0
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x164]
add ecx, 0x4dc
call fcn.0040dfd0
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0x164]
add ecx, 0x4e0
call fcn.0040dfd0
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x164]
add ecx, 0x4e4
call fcn.0040dfd0
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0x164]
add ecx, 0x4e8
call fcn.0040dfd0
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x164]
add ecx, 0x4ec
call fcn.0040dfd0
mov byte [ebp - 4], 0x48
mov ecx, dword [ebp - 0x164]
add ecx, 0x4f0
call fcn.0040dfd0
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp - 0x164]
add ecx, 0x4f4
call fcn.0040dfd0
mov byte [ebp - 4], 0x4a
mov ecx, dword [ebp - 0x164]
add ecx, 0x4f8
call fcn.0040dfd0
mov byte [ebp - 4], 0x4b
mov ecx, dword [ebp - 0x164]
add ecx, 0x4fc
call fcn.0040dfd0
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0x164]
add ecx, 0x500
call fcn.0040dfd0
mov byte [ebp - 4], 0x4d
push fcn.0046051a
push fcn.0040dfd0
push 8
push 4
mov ecx, dword [ebp - 0x164]
add ecx, 0x504
push ecx
call fcn.0044d30b
mov byte [ebp - 4], 0x4e
push fcn.0046051a
push fcn.0040dfd0
push 8
push 4
mov edx, dword [ebp - 0x164]
add edx, 0x524
push edx
call fcn.0044d30b
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0x164]
add ecx, 0x54c
call fcn.00416260
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp - 0x164]
add ecx, 0x570
call fcn.0040dfd0
mov byte [ebp - 4], 0x51
mov ecx, dword [ebp - 0x164]
add ecx, 0x574
call fcn.0040dfd0
mov byte [ebp - 4], 0x52
push 0
mov ecx, dword [ebp - 0x164]
add ecx, 0x578
call fcn.0040f914
mov byte [ebp - 4], 0x53
mov ecx, dword [ebp - 0x164]
add ecx, 0x11d50
call fcn.00418c50
mov ecx, dword [ebp - 0x164]
add ecx, 0x11d60
call fcn.00418c50
mov ecx, dword [ebp - 0x164]
add ecx, 0x11d70
call fcn.00418c50
push fcn.00418c50
push 6
push 0x10
mov eax, dword [ebp - 0x164]
add eax, 0x11d80
push eax
call fcn.00444960
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f00
call fcn.0040dfd0
mov byte [ebp - 4], 0x54
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f04
call fcn.0040dfd0
mov byte [ebp - 4], 0x55
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f08
call fcn.0040dfd0
mov byte [ebp - 4], 0x56
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f0c
call fcn.0040dfd0
mov byte [ebp - 4], 0x57
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f10
call fcn.0040dfd0
mov byte [ebp - 4], 0x58
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f14
call fcn.0040dfd0
mov byte [ebp - 4], 0x59
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f18
call fcn.0040dfd0
mov byte [ebp - 4], 0x5a
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f1c
call fcn.0040dfd0
mov byte [ebp - 4], 0x5b
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f20
call fcn.0040dfd0
mov byte [ebp - 4], 0x5c
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f24
call fcn.0040dfd0
mov byte [ebp - 4], 0x5d
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f28
call fcn.0040dfd0
mov byte [ebp - 4], 0x5e
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f2c
call fcn.0040dfd0
mov byte [ebp - 4], 0x5f
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f60
call fcn.0040dfd0
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f64
call fcn.0040dfd0
mov byte [ebp - 4], 0x61
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f68
call fcn.00416260
mov byte [ebp - 4], 0x62
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f70
call fcn.0040dfd0
mov byte [ebp - 4], 0x63
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f74
call fcn.0040dfd0
mov byte [ebp - 4], 0x64
mov ecx, dword [ebp - 0x164]
mov dword [ecx], method.CDialog.virtual_0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x284], 0xffffffff
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x288], 0xffffffff
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x28c], 0xffffffff
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x290], 0xffffffff
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x294], 0xffffffff
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x298], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x29c], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x2a0], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x2a4], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x2a8], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x2ac], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x2b0], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x2b4], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x2b8], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x2bc], 0
push 0x486dfc
mov ecx, dword [ebp - 0x164]
add ecx, 0x2c0
call fcn.004606a3
push 0x486e00
mov ecx, dword [ebp - 0x164]
add ecx, 0x2c4
call fcn.004606a3
push 0x486e04
mov ecx, dword [ebp - 0x164]
add ecx, 0x2c8
call fcn.004606a3
push 0x486e08
mov ecx, dword [ebp - 0x164]
add ecx, 0x2cc
call fcn.004606a3
push 0x486e0c
mov ecx, dword [ebp - 0x164]
add ecx, 0x2d0
call fcn.004606a3
push 0x486e10
mov ecx, dword [ebp - 0x164]
add ecx, 0x2d4
call fcn.004606a3
push 0x486e14
mov ecx, dword [ebp - 0x164]
add ecx, 0x2d8
call fcn.004606a3
push 0x486e18
mov ecx, dword [ebp - 0x164]
add ecx, 0x2dc
call fcn.004606a3
push 0x486e1c
mov ecx, dword [ebp - 0x164]
add ecx, 0x2e0
call fcn.004606a3
push 0x486e20
mov ecx, dword [ebp - 0x164]
add ecx, 0x2e4
call fcn.004606a3
push 0x486e24
mov ecx, dword [ebp - 0x164]
add ecx, 0x2e8
call fcn.004606a3
push 0x486e28
mov ecx, dword [ebp - 0x164]
add ecx, 0x2ec
call fcn.004606a3
push 0x486e2c
mov ecx, dword [ebp - 0x164]
add ecx, 0x2f0
call fcn.004606a3
push 0x486e30
mov ecx, dword [ebp - 0x164]
add ecx, 0x2f4
call fcn.004606a3
push 0x486e34
mov ecx, dword [ebp - 0x164]
add ecx, 0x2f8
call fcn.004606a3
push 0x486e38
mov ecx, dword [ebp - 0x164]
add ecx, 0x2fc
call fcn.004606a3
push 0x486e3c
mov ecx, dword [ebp - 0x164]
add ecx, 0x300
call fcn.004606a3
push 0x486e40
mov ecx, dword [ebp - 0x164]
add ecx, 0x304
call fcn.004606a3
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x308], 0xffffffff
push 0x486e44
mov ecx, dword [ebp - 0x164]
add ecx, 0x30c
call fcn.004606a3
push 0x486e48
mov ecx, dword [ebp - 0x164]
add ecx, 0x310
call fcn.004606a3
push 0x486e4c
mov ecx, dword [ebp - 0x164]
add ecx, 0x314
call fcn.004606a3
push 0x486e50
mov ecx, dword [ebp - 0x164]
add ecx, 0x318
call fcn.004606a3
push 0x486e54
mov ecx, dword [ebp - 0x164]
add ecx, 0x31c
call fcn.004606a3
push 0x486e58
mov ecx, dword [ebp - 0x164]
add ecx, 0x320
call fcn.004606a3
push 0x486e5c
mov ecx, dword [ebp - 0x164]
add ecx, 0x324
call fcn.004606a3
push 0x486e60
mov ecx, dword [ebp - 0x164]
add ecx, 0x328
call fcn.004606a3
push 0x486e64
mov ecx, dword [ebp - 0x164]
add ecx, 0x32c
call fcn.004606a3
push 0x486e68
mov ecx, dword [ebp - 0x164]
add ecx, 0x330
call fcn.004606a3
push 0x486e6c
mov ecx, dword [ebp - 0x164]
add ecx, 0x334
call fcn.004606a3
push 0x486e70
mov ecx, dword [ebp - 0x164]
add ecx, 0x338
call fcn.004606a3
push 0x486e74
mov ecx, dword [ebp - 0x164]
add ecx, 0x33c
call fcn.004606a3
push 0x486e78
mov ecx, dword [ebp - 0x164]
add ecx, 0x340
call fcn.004606a3
push 0x486e7c
mov ecx, dword [ebp - 0x164]
add ecx, 0x344
call fcn.004606a3
push 0x486e80
mov ecx, dword [ebp - 0x164]
add ecx, 0x348
call fcn.004606a3
push 0x486e84
mov ecx, dword [ebp - 0x164]
add ecx, 0x34c
call fcn.004606a3
push 0x486e88
mov ecx, dword [ebp - 0x164]
add ecx, 0x350
call fcn.004606a3
push 0x486e8c
mov ecx, dword [ebp - 0x164]
add ecx, 0x354
call fcn.004606a3
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x358], 0xffffffff
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x35c], 0xffffffff
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x360], 0
push 0x486e90
mov ecx, dword [ebp - 0x164]
add ecx, 0x364
call fcn.004606a3
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x368], 0xffffffff
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x36c], 0xffffffff
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x370], 0xffffffff
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x374], 0xffffffff
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x35c], 0xffffffff
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x378], 0
push 0x80
call fcn.00416250
mov ecx, eax
call fcn.00416460
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x37c], eax
mov byte [ebp - 0x14c], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x14b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0
push 0x26
lea edx, [ebp - 0x14c]
push edx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
mov eax, dword [str.ISP_Tool]
push eax
mov ecx, dword [str.Realtek]
push ecx
lea edx, [ebp - 0x14c]
push edx
push str._s_s_s
mov eax, dword [ebp - 0x164]
add eax, 0x570
push eax
call fcn.0045b306
add esp, 0x14
mov ecx, dword [str.ispfile]
push ecx
push 0x482444
mov edx, dword [ebp - 0x164]
add edx, 0x570
push edx
lea eax, [ebp - 0x154]
push eax
call fcn.004607af
mov dword [ebp - 0x168], eax
mov ecx, dword [ebp - 0x168]
mov dword [ebp - 0x16c], ecx
mov byte [ebp - 4], 0x65
mov edx, dword [ebp - 0x16c]
push edx
lea eax, [ebp - 0x158]
push eax
call fcn.004607af
mov dword [ebp - 0x170], eax
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 0x174], ecx
mov byte [ebp - 4], 0x66
mov edx, dword [ebp - 0x174]
push edx
mov ecx, dword [ebp - 0x164]
add ecx, 0x574
call fcn.00460653
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x158]
call fcn.0046051a
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x154]
call fcn.0046051a
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x3ac], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x3b0], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x3b4], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x3b8], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x3bc], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x3c0], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x3c4], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x3c8], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x3cc], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x388], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x38c], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x390], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x394], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x398], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x39c], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x3a0], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x3a4], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x3a8], 0
push 0x486e94
mov ecx, dword [ebp - 0x164]
add ecx, 0x4e0
call fcn.004606a3
push 0x486e98
mov ecx, dword [ebp - 0x164]
add ecx, 0x4e4
call fcn.004606a3
push 0x486e9c
mov ecx, dword [ebp - 0x164]
add ecx, 0x4e8
call fcn.004606a3
push 0x486ea0
mov ecx, dword [ebp - 0x164]
add ecx, 0x4ec
call fcn.004606a3
push 0x486ea4
mov ecx, dword [ebp - 0x164]
add ecx, 0x4f0
call fcn.004606a3
push 0x486ea8
mov ecx, dword [ebp - 0x164]
add ecx, 0x4f4
call fcn.004606a3
push 0x486eac
mov ecx, dword [ebp - 0x164]
add ecx, 0x4f8
call fcn.004606a3
push 0x486eb0
mov ecx, dword [ebp - 0x164]
add ecx, 0x4fc
call fcn.004606a3
push 0x486eb4
mov ecx, dword [ebp - 0x164]
add ecx, 0x500
call fcn.004606a3
mov dword [ebp - 0x150], 0
jmp 0x41e61b
mov eax, dword [ebp - 0x150]
add eax, 1
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 8
jge 0x41e65a
push 0x486eb8
mov ecx, dword [ebp - 0x150]
mov edx, dword [ebp - 0x164]
lea ecx, [edx + ecx*4 + 0x504]
call fcn.004606a3
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x164]
mov dword [ecx + eax*4 + 0x11c14], 0
jmp 0x41e60c
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x450], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x454], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x458], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x45c], 0
push 0x486ebc
mov ecx, dword [ebp - 0x164]
add ecx, 0x4c0
call fcn.004606a3
push 0x486ec0
mov ecx, dword [ebp - 0x164]
add ecx, 0x4c4
call fcn.004606a3
push 0x486ec4
mov ecx, dword [ebp - 0x164]
add ecx, 0x4c8
call fcn.004606a3
push 0x486ec8
mov ecx, dword [ebp - 0x164]
add ecx, 0x4cc
call fcn.004606a3
push 0x486ecc
mov ecx, dword [ebp - 0x164]
add ecx, 0x4d0
call fcn.004606a3
push 0x486ed0
mov ecx, dword [ebp - 0x164]
add ecx, 0x4d4
call fcn.004606a3
push 0x486ed4
mov ecx, dword [ebp - 0x164]
add ecx, 0x4d8
call fcn.004606a3
push 0x486ed8
mov ecx, dword [ebp - 0x164]
add ecx, 0x4dc
call fcn.004606a3
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x460], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x464], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x468], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x46c], 0
push 0x486edc
mov ecx, dword [ebp - 0x164]
add ecx, 0x4a0
call fcn.004606a3
push 0x486ee0
mov ecx, dword [ebp - 0x164]
add ecx, 0x4a4
call fcn.004606a3
push 0x486ee4
mov ecx, dword [ebp - 0x164]
add ecx, 0x4a8
call fcn.004606a3
push 0x486ee8
mov ecx, dword [ebp - 0x164]
add ecx, 0x4ac
call fcn.004606a3
push 0x486eec
mov ecx, dword [ebp - 0x164]
add ecx, 0x4b0
call fcn.004606a3
push 0x486ef0
mov ecx, dword [ebp - 0x164]
add ecx, 0x4b4
call fcn.004606a3
push 0x486ef4
mov ecx, dword [ebp - 0x164]
add ecx, 0x4b8
call fcn.004606a3
push 0x486ef8
mov ecx, dword [ebp - 0x164]
add ecx, 0x4bc
call fcn.004606a3
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x470], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x474], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x478], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x47c], 0
push 0x486efc
mov ecx, dword [ebp - 0x164]
add ecx, 0x480
call fcn.004606a3
push 0x486f00
mov ecx, dword [ebp - 0x164]
add ecx, 0x484
call fcn.004606a3
push 0x486f04
mov ecx, dword [ebp - 0x164]
add ecx, 0x488
call fcn.004606a3
push 0x486f08
mov ecx, dword [ebp - 0x164]
add ecx, 0x48c
call fcn.004606a3
push 0x486f0c
mov ecx, dword [ebp - 0x164]
add ecx, 0x490
call fcn.004606a3
push 0x486f10
mov ecx, dword [ebp - 0x164]
add ecx, 0x494
call fcn.004606a3
push 0x486f14
mov ecx, dword [ebp - 0x164]
add ecx, 0x498
call fcn.004606a3
push 0x486f18
mov ecx, dword [ebp - 0x164]
add ecx, 0x49c
call fcn.004606a3
mov dword [ebp - 0x150], 0
jmp 0x41e945
mov edx, dword [ebp - 0x150]
add edx, 1
mov dword [ebp - 0x150], edx
cmp dword [ebp - 0x150], 0x20
jge 0x41e967
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x164]
mov dword [ecx + eax*4 + 0x3d0], 0
jmp 0x41e936
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x5ec], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x564], 1
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x568], 1
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x554], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x558], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x55c], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x560], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x56c], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x548], 1
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x544], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x380], 0
push 0x120
push 0
mov ecx, dword [ebp - 0x164]
add ecx, 0x11de0
push ecx
call fcn.0044ce10
add esp, 0xc
push 0x89
push 0x87
push 0x88
push 0x87
mov ecx, dword [ebp - 0x164]
add ecx, 0x1cc
call fcn.004166a0
push 0x98
push 0x99
push 0x97
push 0x99
mov ecx, dword [ebp - 0x164]
add ecx, 0x170
call fcn.004166a0
push 0x9c
push 0x9d
push 0x9b
push 0x9d
mov ecx, dword [ebp - 0x164]
add ecx, 0x114
call fcn.004166a0
push 0xa1
push 0xa0
push 0xa2
push 0xa0
mov ecx, dword [ebp - 0x164]
add ecx, 0xb8
call fcn.004166a0
push 0xa6
push 0xa5
push 0xa7
push 0xa5
mov ecx, dword [ebp - 0x164]
add ecx, 0x5c
call fcn.004166a0
push 0xba
push 0xb9
push 0xb7
push 0xb9
mov ecx, dword [ebp - 0x164]
add ecx, 0x228
call fcn.004166a0
mov byte [ebp - 0x31], 0x86
mov byte [ebp - 0x2f], 2
mov dword [ebp - 0x40], 0
push 0x482448
call fcn.0044d290
add esp, 4
push eax
push 0x482450
lea edx, [ebp - 0x2c]
push edx
call fcn.0044ce70
add esp, 0xc
mov dword [ebp - 0x48], 0x10
mov byte [ebp - 0x34], 0
mov dword [ebp - 0x3c], 0
mov byte [ebp - 0x30], 1
mov byte [ebp - 0x2d], 0x22
mov byte [ebp - 0x2e], 2
mov byte [ebp - 0x32], 0
mov byte [ebp - 0x33], 0
mov dword [ebp - 0x38], 0x2bc
mov dword [ebp - 0x44], 8
lea eax, [ebp - 0x48]
push eax
mov ecx, dword [ebp - 0x164]
add ecx, 0x54c
call fcn.004163a0
push 0x482458
push 0x20
push 0
push 0
push 2
push 0
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0xb
push 0x23
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f68
call fcn.004449b0
push 0x108
call fcn.00460a43
add esp, 4
mov dword [ebp - 0x160], eax
mov byte [ebp - 4], 0x67
cmp dword [ebp - 0x160], 0
je 0x41ebeb
mov ecx, dword [ebp - 0x160]
call fcn.004160b0
mov dword [ebp - 0x178], eax
jmp 0x41ebf5
mov dword [ebp - 0x178], 0
mov ecx, dword [ebp - 0x178]
mov dword [ebp - 0x15c], ecx
mov byte [ebp - 4], 0x64
mov edx, dword [ebp - 0x164]
mov eax, dword [ebp - 0x15c]
mov dword [edx + 0x11f44], eax
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x11f48], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x11f4c], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x11f50], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x11f54], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x11f58], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x11f5c], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x374], 1
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x164]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
mov esp, ebp
pop ebp
ret 4