Function at 0x41dac0
Capabilities:
Get hostname
Get session user name
Get system information on windows
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bb858
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1234
call fcn.00436380
mov eax, dword [0x4e3180]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 8]
mov dword [ebp - 4], 0
mov esi, dword fs:[0x2c]
movaps xmm0, xmmword [0x4dc1a0]
movups xmmword [ebp - 0x1150], xmm0
mov dword [ebp - 0x115c], eax
movaps xmm0, xmmword [0x4dc1d0]
mov esi, dword [esi]
mov dword [ebp - 0x111c], eax
mov eax, dword [0x4e66a8]
movups xmmword [ebp - 0x1140], xmm0
mov word [ebp - 0x1120], 0x4506
movaps xmm0, xmmword [0x4dc160]
movups xmmword [ebp - 0x1130], xmm0
mov byte [ebp - 0x111e], 0x9b
cmp eax, dword [esi + 4]
jle 0x41dbc3
push 0x4e66a8
call fcn.00434e40
add esp, 4
cmp dword [0x4e66a8], 0xffffffff
jne 0x41dbc3
xorps xmm0, xmm0
mov byte [0x4e682b], 1
movlpd qword [ebp - 0x10f4], xmm0
mov edx, dword [ebp - 0x10f0]
mov ecx, dword [ebp - 0x10f4]
mov al, byte [ebp + ecx - 0x1150]
mov byte [ecx + 0x4e67f8], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x41dbac
cmp ecx, 0x33
jb 0x41db90
push 0x4bf200
call fcn.00435110
push 0x4e66a8
call fcn.00434def
add esp, 8
mov ecx, 0x4e67f8
call fcn.00404e60
lea eax, [ebp - 0x10e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edx, dword [ebp - 0x10d0]
lea ecx, [ebp - 0xdc4]
call fcn.0041f9b0
lea eax, [ebp - 0xd78]
mov dword [ebp - 0xd78], 0x400
push eax
lea eax, [ebp - 0x940]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea eax, [ebp - 0xd7c]
mov dword [ebp - 0xd7c], 0x400
push eax
lea eax, [ebp - 0xd40]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
xorps xmm0, xmm0
mov dword [ebp - 0xd64], 0
movups xmmword [ebp - 0xd74], xmm0
mov dword [ebp - 0xd60], 0xf
mov byte [ebp - 0xd74], 0
movups xmmword [ebp - 0xd5c], xmm0
mov dword [ebp - 0xd4c], 0
mov dword [ebp - 0xd48], 0xf
mov byte [ebp - 0xd5c], 0
mov byte [ebp - 4], 3
movaps xmm0, xmmword [0x4dc040]
mov eax, dword [0x4e6618]
mov dword [ebp - 0xd44], 0x3e8
movups xmmword [ebp - 0x1108], xmm0
mov word [ebp - 0x10f8], 0x590c
mov byte [ebp - 0x10f6], 0x9b
cmp eax, dword [esi + 4]
jle 0x41dd13
push 0x4e6618
call fcn.00434e40
add esp, 4
cmp dword [0x4e6618], 0xffffffff
jne 0x41dd13
xorps xmm0, xmm0
mov byte [0x4e663f], 1
movlpd qword [ebp - 0x10f4], xmm0
mov edx, dword [ebp - 0x10f0]
mov ecx, dword [ebp - 0x10f4]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x1108]
mov byte [ecx + 0x4e662c], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x41dcfc
cmp ecx, 0x13
jb 0x41dce0
push 0x4bf1c0
call fcn.00435110
push 0x4e6618
call fcn.00434def
add esp, 8
mov ecx, 0x4e662c
call fcn.00404e00
lea eax, [ebp - 0xd44]
push eax
lea eax, [ebp - 0x43c]
push eax
push 0
push 0xffff
push 0x4e662c
push 0x4e67f8
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegGetValueA]
lea esi, [ebp - 0x43c]
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x41dd50
xor edi, edi
sub esi, ecx
je 0x41dd92
nop dword [eax]
movsx eax, byte [ebp + edi - 0x43c]
push eax
call fcn.0043a540
add esp, 4
test eax, eax
je 0x41dd8d
movsx eax, byte [ebp + edi - 0x43c]
push eax
call fcn.0043a744
add esp, 4
mov byte [ebp + edi - 0x43c], al
inc edi
cmp edi, esi
jb 0x41dd60
lea ecx, [ebp - 0x43c]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41dda0
sub ecx, edx
lea eax, [ebp - 0x43c]
push ecx
push eax
lea ecx, [ebp - 0xd74]
call fcn.00410ea0
mov eax, dword fs:[0x2c]
movaps xmm0, xmmword [0x4dc200]
movups xmmword [ebp - 0x1108], xmm0
mov word [ebp - 0x10f8], 0x2b0c
mov ecx, dword [eax]
mov eax, dword [0x4e66d8]
cmp eax, dword [ecx + 4]
jle 0x41de53
push 0x4e66d8
call fcn.00434e40
add esp, 4
cmp dword [0x4e66d8], 0xffffffff
jne 0x41de53
xorps xmm0, xmm0
mov byte [0x4e677e], 1
movlpd qword [ebp - 0x10f4], xmm0
mov edx, dword [ebp - 0x10f0]
mov ecx, dword [ebp - 0x10f4]
nop dword [eax]
mov al, byte [ebp + ecx - 0x1108]
mov byte [ecx + 0x4e676c], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x41de3c
cmp ecx, 0x12
jb 0x41de20
push 0x4bf180
call fcn.00435110
push 0x4e66d8
call fcn.00434def
add esp, 8
mov ecx, 0x4e676c
call fcn.00404c80
lea eax, [ebp - 0xd44]
push eax
lea eax, [ebp - 0x43c]
push eax
push 0
push 0xffff
push 0x4e676c
push 0x4e67f8
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegGetValueA]
lea esi, [ebp - 0x43c]
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x41de90
xor edi, edi
sub esi, ecx
je 0x41ded2
nop dword [eax]
movsx eax, byte [ebp + edi - 0x43c]
push eax
call fcn.0043a540
add esp, 4
test eax, eax
je 0x41decd
movsx eax, byte [ebp + edi - 0x43c]
push eax
call fcn.0043a744
add esp, 4
mov byte [ebp + edi - 0x43c], al
inc edi
cmp edi, esi
jb 0x41dea0
lea ecx, [ebp - 0x43c]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41dee0
sub ecx, edx
lea eax, [ebp - 0x43c]
push ecx
push eax
lea ecx, [ebp - 0xd5c]
call fcn.00410ea0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0xd9c], 0
push 0x4db89c
lea ecx, [ebp - 0xdac]
mov dword [ebp - 0xd98], 0
movups xmmword [ebp - 0xdac], xmm0
call fcn.004052e0
lea eax, [ebp - 0xef0]
mov byte [ebp - 4], 4
push eax
call dword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileA]
mov edi, dword fs:[0x2c]
lea edx, [ebp - 0xeec]
movaps xmm0, xmmword [0x4dc2a0]
test eax, eax
mov eax, dword [0x4e67d0]
mov ecx, str.none
cmovne ecx, edx
mov word [ebp - 0x10f8], 0x5f11
mov dword [ebp - 0x10f0], ecx
mov ecx, dword [edi]
movups xmmword [ebp - 0x1118], xmm0
mov byte [ebp - 0x10f6], 0x9b
movaps xmm0, xmmword [0x4dc2f0]
movups xmmword [ebp - 0x1108], xmm0
cmp eax, dword [ecx + 4]
jle 0x41e003
push 0x4e67d0
call fcn.00434e40
add esp, 4
cmp dword [0x4e67d0], 0xffffffff
jne 0x41e003
xorps xmm0, xmm0
mov byte [0x4e686b], 1
movlpd qword [ebp - 0x10ec], xmm0
mov edx, dword [ebp - 0x10e8]
mov ecx, dword [ebp - 0x10ec]
nop dword [eax]
mov al, byte [ebp + ecx - 0x1118]
mov byte [ecx + 0x4e6848], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x41dfec
cmp ecx, 0x23
jb 0x41dfd0
push 0x4bf140
call fcn.00435110
push 0x4e67d0
call fcn.00434def
add esp, 8
mov ecx, 0x4e6848
call fcn.0041f8f0
mov ecx, 0x4e6848
mov dword [ebp - method.cpr::StringHolder_class_cpr::Url_.virtual_0], vtable.cpr::StringHolder_class_cpr::Url_.0
xorps xmm0, xmm0
mov dword [ebp - 0x1128], 0
movups xmmword [ebp - 0x1138], xmm0
mov dword [ebp - 0x1124], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41e040
sub ecx, edx
push ecx
push 0x4e6848
lea ecx, [ebp - 0x1138]
call fcn.004052e0
mov dword [ebp - method.cpr::StringHolder_class_cpr::Url_.virtual_0], vtable.cpr::Url.0
push 0x1d0
lea eax, [ebp - 0x10c0]
mov byte [ebp - 4], 5
push 0
push eax
call fcn.00437330
add esp, 0xc
lea ecx, [ebp - 0x10c0]
call fcn.00420170
lea eax, [ebp - 0x113c]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x10c0]
call fcn.00421130
lea eax, [ebp - 0x1244]
push eax
lea ecx, [ebp - 0x10c0]
call fcn.00420b20
lea ecx, [ebp - 0x10c0]
call fcn.00412c80
movups xmm0, xmmword [ebp - 0x1238]
mov byte [ebp - 0x1238], 0
movups xmmword [ebp - 0xd94], xmm0
movq xmm0, qword [ebp - 0x1228]
movq qword [ebp - 0xd84], xmm0
mov dword [ebp - 0x1228], 0
mov dword [ebp - 0x1224], 0xf
lea ecx, [ebp - 0x1244]
call fcn.004097a0
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x1124]
cmp ecx, 0xf
jbe 0x41e13e
mov edx, dword [ebp - 0x1138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41e134
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ed99
push ecx
push edx
call fcn.00435125
add esp, 8
push 0x104
lea eax, [ebp - 0x540]
mov dword [ebp - 0x1128], 0
push eax
push 0
mov dword [ebp - 0x1124], 0xf
mov byte [ebp - 0x1138], 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0xb0
lea eax, [ebp - 0xe74]
push 0
push eax
call fcn.00437330
add esp, 0xc
lea ecx, [ebp - 0xe74]
push 1
call fcn.0041f540
mov byte [ebp - 4], 9
mov ecx, dword [edi]
movaps xmm0, xmmword [0x4dc210]
mov eax, dword [0x4e65f0]
movups xmmword [ebp - 0x110c], xmm0
mov dword [ebp - 0x10fc], 0xd3bb110c
cmp eax, dword [ecx + 4]
jle 0x41e223
push 0x4e65f0
call fcn.00434e40
add esp, 4
cmp dword [0x4e65f0], 0xffffffff
jne 0x41e223
xorps xmm0, xmm0
mov byte [0x4e67e8], 1
movlpd qword [ebp - 0x10ec], xmm0
mov edx, dword [ebp - 0x10e8]
mov ecx, dword [ebp - 0x10ec]
nop
mov al, byte [ebp + ecx - 0x110c]
mov byte [ecx + 0x4e67d4], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x41e20c
cmp ecx, 0x14
jb 0x41e1f0
push 0x4bf100
call fcn.00435110
push 0x4e65f0
call fcn.00434def
add esp, 8
mov ecx, 0x4e67d4
call fcn.00404ce0
lea eax, [ebp - 0xe64]
push 0x4e67d4
push eax
call fcn.00411e10
add esp, 8
lea ecx, [ebp - 0x940]
push ecx
push eax
call fcn.00411e10
add esp, 8
push 0x4dbf1c
push eax
call fcn.00411e10
mov ecx, dword [edi]
mov esi, eax
mov eax, dword [0x4e6748]
add esp, 8
mov dword [ebp - 0x1100], 0xa1fe583c
mov dword [ebp - 0x10fc], 0x3fc8b3da
mov word [ebp - 0x10f8], 0xb53
mov byte [ebp - 0x10f6], 0x9b
cmp eax, dword [ecx + 4]
jle 0x41e303
push 0x4e6748
call fcn.00434e40
add esp, 4
cmp dword [0x4e6748], 0xffffffff
jne 0x41e303
xorps xmm0, xmm0
mov byte [0x4e6837], 1
movlpd qword [ebp - 0x10ec], xmm0
mov edx, dword [ebp - 0x10e8]
mov ecx, dword [ebp - 0x10ec]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x1100]
mov byte [ecx + 0x4e682c], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x41e2ec
cmp ecx, 0xb
jb 0x41e2d0
push 0x4bf0c0
call fcn.00435110
push 0x4e6748
call fcn.00434def
add esp, 8
mov ecx, 0x4e682c
call fcn.00404d40
push 0x4e682c
push esi
call fcn.00411e10
add esp, 8
lea ecx, [ebp - 0xd40]
push ecx
push eax
call fcn.00411e10
add esp, 8
push 0x4dbf1c
push eax
call fcn.00411e10
mov ecx, dword [edi]
mov esi, eax
movaps xmm0, xmmword [0x4dc100]
add esp, 8
mov eax, dword [0x4e6660]
movups xmmword [ebp - 0x110c], xmm0
mov dword [ebp - 0x10fc], 0xe9e94e1b
mov word [ebp - 0x10f8], 0xd294
cmp eax, dword [ecx + 4]
jle 0x41e3d3
push 0x4e6660
call fcn.00434e40
add esp, 4
cmp dword [0x4e6660], 0xffffffff
jne 0x41e3d3
xorps xmm0, xmm0
mov byte [0x4e6696], 1
movlpd qword [ebp - 0x10ec], xmm0
mov edx, dword [ebp - 0x10e8]
mov ecx, dword [ebp - 0x10ec]
nop
mov al, byte [ebp + ecx - 0x110c]
mov byte [ecx + 0x4e6680], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x41e3bc
cmp ecx, 0x16
jb 0x41e3a0
push 0x4bf080
call fcn.00435110
push 0x4e6660
call fcn.00434def
add esp, 8
mov ecx, 0x4e6680
call fcn.0041f890
push 0x4e6680
push esi
call fcn.00411e10
add esp, 8
mov ecx, eax
cmp dword [ebp - 0xd60], 0xf
lea eax, [ebp - 0xd74]
cmova eax, dword [ebp - 0xd74]
push dword [ebp - 0xd64]
push eax
push ecx
call fcn.0041fb50
add esp, 0xc
push 0x4dbf1c
push eax
call fcn.00411e10
mov ecx, dword [edi]
mov esi, eax
mov eax, dword [0x4e6640]
add esp, 8
mov dword [ebp - 0x1104], 0xa7e8523a
mov dword [ebp - 0x1100], 0x1485bfd1
mov dword [ebp - 0x10fc], 0xe9fe4608
mov word [ebp - 0x10f8], 0xd294
cmp eax, dword [ecx + 4]
jle 0x41e4c3
push 0x4e6640
call fcn.00434e40
add esp, 4
cmp dword [0x4e6640], 0xffffffff
jne 0x41e4c3
xorps xmm0, xmm0
mov byte [0x4e6846], 1
movlpd qword [ebp - 0x10ec], xmm0
mov edx, dword [ebp - 0x10e8]
mov ecx, dword [ebp - 0x10ec]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x1104]
mov byte [ecx + 0x4e6838], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x41e4ac
cmp ecx, 0xe
jb 0x41e490
push 0x4bf040
call fcn.00435110
push 0x4e6640
call fcn.00434def
add esp, 8
mov ecx, 0x4e6838
call fcn.00404ec0
push 0x4e6838
push esi
call fcn.00411e10
add esp, 8
mov ecx, eax
cmp dword [ebp - 0xd48], 0xf
lea eax, [ebp - 0xd5c]
cmova eax, dword [ebp - 0xd5c]
push dword [ebp - 0xd4c]
push eax
push ecx
call fcn.0041fb50
add esp, 0xc
push 0x4dbf1c
push eax
call fcn.00411e10
mov ecx, dword [edi]
mov esi, eax
mov eax, dword [0x4e67f4]
add esp, 8
mov dword [ebp - 0x1104], 0xb0f45939
mov dword [ebp - 0x1100], 0x35d6a1d1
mov dword [ebp - 0x10fc], 0xd3bb111b
cmp eax, dword [ecx + 4]
jle 0x41e5b3
push 0x4e67f4
call fcn.00434e40
add esp, 4
cmp dword [0x4e67f4], 0xffffffff
jne 0x41e5b3
xorps xmm0, xmm0
mov byte [0x4e6628], 1
movlpd qword [ebp - 0x10ec], xmm0
mov edx, dword [ebp - 0x10e8]
mov ecx, dword [ebp - 0x10ec]
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1104]
mov byte [ecx + 0x4e661c], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x41e59c
cmp ecx, 0xc
jb 0x41e580
push 0x4bf000
call fcn.00435110
push 0x4e67f4
call fcn.00434def
add esp, 8
mov ecx, 0x4e661c
call fcn.00404f80
push 0x4e661c
push esi
call fcn.00411e10
movaps xmm0, xmmword [0x4dbf30]
lea edi, [ebp - 0x1108]
add esp, 8
mov dword [ebp - 0x10e8], eax
mov eax, accept
xor ecx, ecx
movups xmmword [ebp - 0x1108], xmm0
push ebx
cpuid
mov esi, ebx
pop ebx
mov dword [edi], eax
lea eax, [ebp - 0x54]
mov dword [edi + 4], esi
push 0x40
mov dword [edi + 8], ecx
mov dword [edi + 0xc], edx
mov esi, dword [ebp - 0x1108]
push 0
push eax
mov dword [ebp - 0x1158], esi
call fcn.00437330
mov edi, accept
add esp, 0xc
cmp esi, edi
jb 0x41e693
mov eax, edi
xor ecx, ecx
push ebx
cpuid
mov dword [ebp - 0x1154], ebx
pop ebx
lea esi, [ebp - 0x1108]
mov dword [esi], eax
lea eax, [ebp - 0x1108]
mov esi, dword [ebp - 0x1154]
mov dword [eax + 4], esi
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
cmp edi, reloc.WS2_32.dll_bind
jne 0x41e662
movups xmm0, xmmword [ebp - 0x1108]
movups xmmword [ebp - 0x54], xmm0
jmp 0x41e68a
cmp edi, reloc.WS2_32.dll_closesocket
jne 0x41e677
movups xmm0, xmmword [ebp - 0x1108]
movups xmmword [ebp - 0x44], xmm0
jmp 0x41e68a
cmp edi, reloc.WS2_32.dll_connect
jne 0x41e68a
movups xmm0, xmmword [ebp - 0x1108]
movups xmmword [ebp - 0x34], xmm0
inc edi
cmp edi, dword [ebp - 0x1158]
jbe 0x41e622
xorps xmm0, xmm0
mov dword [ebp - 0x1128], 0
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x1124], 0
movups xmmword [ebp - 0x1138], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41e6b7
sub ecx, edx
lea eax, [ebp - 0x54]
push ecx
push eax
lea ecx, [ebp - 0x1138]
call fcn.004052e0
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x1138]
cmp dword [ebp - 0x1124], 0xf
push dword [ebp - 0x1128]
cmova eax, dword [ebp - 0x1138]
push eax
push dword [ebp - 0x10e8]
call fcn.0041fb50
add esp, 0xc
push 0x4dbf1c
push eax
call fcn.00411e10
mov edi, dword fs:[0x2c]
mov esi, eax
mov eax, dword [0x4e6754]
add esp, 8
mov dword [ebp - 0x1104], 0xb7e94a21
mov dword [ebp - 0x1100], 0x3fd7b3c3
mov ecx, dword [edi]
mov dword [ebp - 0x10fc], 0xe9df6249
mov word [ebp - 0x10f8], 0xd294
cmp eax, dword [ecx + 4]
jle 0x41e7b3
push 0x4e6754
call fcn.00434e40
add esp, 4
cmp dword [0x4e6754], 0xffffffff
jne 0x41e7b3
xorps xmm0, xmm0
mov byte [0x4e6672], 1
movlpd qword [ebp - 0x10ec], xmm0
mov edx, dword [ebp - 0x10e8]
mov ecx, dword [ebp - 0x10ec]
nop
mov al, byte [ebp + ecx - 0x1104]
mov byte [ecx + 0x4e6664], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x41e79c
cmp ecx, 0xe
jb 0x41e780
push 0x4befc0
call fcn.00435110
push 0x4e6754
call fcn.00434def
add esp, 8
mov ecx, 0x4e6664
call fcn.00404ec0
push 0x4e6664
push esi
call fcn.00411e10
add esp, 8
push dword [ebp - 0x10f0]
push eax
call fcn.00411e10
add esp, 8
push 0x4dbf1c
push eax
call fcn.00411e10
mov ecx, dword [edi]
mov esi, eax
mov eax, dword [0x4e66ac]
add esp, 8
mov dword [ebp - 0x1104], 0xb6e9433d
mov dword [ebp - 0x1100], 0x1985b6d5
mov dword [ebp - 0x10fc], 0xa7f55e06
mov word [ebp - 0x10f8], 0xf28e
mov byte [ebp - 0x10f6], 0xa5
cmp eax, dword [ecx + 4]
jle 0x41e893
push 0x4e66ac
call fcn.00434e40
add esp, 4
cmp dword [0x4e66ac], 0xffffffff
jne 0x41e893
xorps xmm0, xmm0
mov byte [0x4e676b], 1
movlpd qword [ebp - 0x10f4], xmm0
mov edx, dword [ebp - 0x10f0]
mov ecx, dword [ebp - 0x10f4]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x1104]
mov byte [ecx + 0x4e675c], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x41e87c
cmp ecx, 0xf
jb 0x41e860
push 0x4bef80
call fcn.00435110
push 0x4e66ac
call fcn.00434def
add esp, 8
mov ecx, 0x4e675c
call fcn.004100c0
push 0x4e675c
push esi
call fcn.00411e10
add esp, 8
mov ecx, eax
cmp dword [ebp - 0xdb0], 0xf
lea eax, [ebp - 0xdc4]
cmova eax, dword [ebp - 0xdc4]
push dword [ebp - 0xdb4]
push eax
push ecx
call fcn.0041fb50
add esp, 0xc
push 0x4dbf1c
push eax
call fcn.00411e10
mov ecx, dword [edi]
mov esi, eax
mov eax, dword [0x4e6758]
add esp, 8
mov dword [ebp - 0x1104], 0xa1e95e2a
mov dword [ebp - 0x1100], 0x7ad1bcd1
mov dword [ebp - 0x10fc], 0xbbef4a39
mov word [ebp - 0x10f8], 0xf28e
mov byte [ebp - 0x10f6], 0xa5
cmp eax, dword [ecx + 4]
jle 0x41e993
push 0x4e6758
call fcn.00434e40
add esp, 4
cmp dword [0x4e6758], 0xffffffff
jne 0x41e993
xorps xmm0, xmm0
mov byte [0x4e6613], 1
movlpd qword [ebp - 0x10f4], xmm0
mov edx, dword [ebp - 0x10f0]
mov ecx, dword [ebp - 0x10f4]
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1104]
mov byte [ecx + 0x4e6604], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x41e97c
cmp ecx, 0xf
jb 0x41e960
push 0x4bef40
call fcn.00435110
push 0x4e6758
call fcn.00434def
add esp, 8
mov ecx, 0x4e6604
call fcn.004100c0
push 0x4e6604
push esi
call fcn.00411e10
add esp, 8
lea ecx, [ebp - 0x540]
push ecx
push eax
call fcn.00411e10
add esp, 8
push 0x4dbf1c
push eax
call fcn.00411e10
mov ecx, dword [edi]
mov esi, eax
mov eax, dword [0x4e6744]
add esp, 8
mov dword [ebp - 0x10f4], 0xf3a17b20
mov byte [ebp - 0x10f0], 0xb4
cmp eax, dword [ecx + 4]
jle 0x41ea53
push 0x4e6744
call fcn.00434e40
add esp, 4
cmp dword [0x4e6744], 0xffffffff
jne 0x41ea53
xorps xmm0, xmm0
mov byte [0x4e6799], 1
movlpd qword [ebp - 0x10ec], xmm0
mov edx, dword [ebp - 0x10e8]
mov ecx, dword [ebp - 0x10ec]
nop
mov al, byte [ebp + ecx - 0x10f4]
mov byte [ecx + 0x4e6794], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x41ea3c
cmp ecx, 5
jb 0x41ea20
push 0x4bef00
call fcn.00435110
push 0x4e6744
call fcn.00434def
add esp, 8
mov ecx, 0x4e6794
call fcn.00404da0
push 0x4e6794
push esi
call fcn.00411e10
add esp, 8
mov ecx, eax
cmp dword [ebp - 0xd80], 0xf
lea eax, [ebp - 0xd94]
cmova eax, dword [ebp - 0xd94]
push dword [ebp - 0xd84]
push eax
push ecx
call fcn.0041fb50
add esp, 0xc
push 0x4dbf1c
push eax
call fcn.00411e10
mov ecx, dword [edi]
mov esi, eax
mov eax, dword [0x4e67b4]
add esp, 8
mov dword [ebp - 0x10f4], 0xb3fb4b63
mov byte [ebp - 0x10f0], 0xb4
cmp eax, dword [ecx + 4]
jle 0x41eb33
push 0x4e67b4
call fcn.00434e40
add esp, 4
cmp dword [0x4e67b4], 0xffffffff
jne 0x41eb33
xorps xmm0, xmm0
mov byte [0x4e669d], 1
movlpd qword [ebp - 0x10ec], xmm0
mov edx, dword [ebp - 0x10e8]
mov ecx, dword [ebp - 0x10ec]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x10f4]
mov byte [ecx + 0x4e6698], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x41eb1c
cmp ecx, 5
jb 0x41eb00
push 0x4beec0
call fcn.00435110
push 0x4e67b4
call fcn.00434def
add esp, 8
mov ecx, 0x4e6698
call fcn.00404da0
push 0x4e6698
push esi
call fcn.00411e10
mov byte [ebp - 4], 9
add esp, 8
mov ecx, dword [ebp - 0x1124]
cmp ecx, 0xf
jbe 0x41eb89
mov edx, dword [ebp - 0x1138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41eb7f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ed9e
push ecx
push edx
call fcn.00435125
add esp, 8
lea eax, [ebp - 0x1138]
push eax
lea ecx, [ebp - 0xe74]
call fcn.0041f450
push eax
lea ecx, [ebp - 0xdac]
call fcn.0040f7d0
mov ecx, dword [ebp - 0x1124]
cmp ecx, 0xf
jbe 0x41ebe1
mov edx, dword [ebp - 0x1138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41ebd7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41eda3
push ecx
push edx
call fcn.00435125
add esp, 8
mov esi, dword [ebp - 0x115c]
lea ecx, [ebp - 0xe74]
xorps xmm0, xmm0
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
movups xmm0, xmmword [ebp - 0xdac]
mov dword [esi + 0x14], 0
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0xd9c]
movq qword [esi + 0x10], xmm0
call fcn.0041d9f0
mov ecx, dword [ebp - 0xd80]
cmp ecx, 0xf
jbe 0x41ec57
mov edx, dword [ebp - 0xd94]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41ec4d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41eda8
push ecx
push edx
call fcn.00435125
add esp, 8
mov ecx, dword [ebp - 0xd48]
mov dword [ebp - 0xd84], 0
mov dword [ebp - 0xd80], 0xf
mov byte [ebp - 0xd94], 0
cmp ecx, 0xf
jbe 0x41ecac
mov edx, dword [ebp - 0xd5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41eca2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41eda8
push ecx
push edx
call fcn.00435125
add esp, 8
mov ecx, dword [ebp - 0xd60]
mov dword [ebp - 0xd4c], 0
mov dword [ebp - 0xd48], 0xf
mov byte [ebp - 0xd5c], 0
cmp ecx, 0xf
jbe 0x41ed01
mov edx, dword [ebp - 0xd74]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41ecf7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41eda8
push ecx
push edx
call fcn.00435125
add esp, 8
mov ecx, dword [ebp - 0xdb0]
mov dword [ebp - 0xd64], 0
mov dword [ebp - 0xd60], 0xf
mov byte [ebp - 0xd74], 0
cmp ecx, 0xf
jbe 0x41ed52
mov edx, dword [ebp - 0xdc4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41ed48
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41eda8
push ecx
push edx
call fcn.00435125
add esp, 8
mov eax, esi
jmp 0x41ed7b
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00434db6
mov esp, ebp
pop ebp
ret 4
call fcn.0043aacc
call fcn.0043aacc
call fcn.0043aacc
call fcn.0043aacc
int3