Function at 0x411370
Capabilities:
Contain obfuscated stackstrings
Copy file
Create directory
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x503b53
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe30
push ebx
push esi
push edi
mov edi, ecx
push 0x104
lea eax, [ebp - 0xd30]
mov dword [ebp - 4], 0
push 0
push eax
call fcn.004debb0
mov esi, dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea eax, [ebp - 0xd30]
add esp, 0xc
push eax
push 0
push 0
push 0x1a
push 0
call esi
push 0x104
lea eax, [ebp - 0xe38]
push 0
push eax
call fcn.004debb0
add esp, 0xc
lea eax, [ebp - 0xe38]
push eax
push 0
push 0
push 0x1c
push 0
call esi
movaps xmm0, xmmword [0x525d50]
lea ecx, [ebp - 0x2e3]
movups xmmword [ebp - 0x2e3], xmm0
mov dword [ebp - 0x2d3], 0x9b9a8896
mov word [ebp - 0x2cf], 0x98
mov byte [ebp - 0x2cd], 1
call fcn.00462ca0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x8b0]
call fcn.004027f0
lea ecx, [ebp - 0x2e3]
mov byte [ebp - 4], 1
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411440
sub ecx, edx
lea eax, [ebp - 0x2e3]
push ecx
push eax
lea ecx, [ebp - 0x8b0]
call fcn.00402810
lea eax, [ebp - 0x8b0]
mov byte [ebp - 4], 2
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x898]
call fcn.004698d0
add esp, 4
lea ecx, [ebp - 0x8b0]
mov byte [ebp - 4], 4
call fcn.00402660
lea ecx, [ebp - 0x898]
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test al, al
je 0x411599
lea ecx, [ebp - 0xe7]
mov dword [ebp - 0xe7], 0x839fabb5
mov dword [ebp - 0xe3], 0x8c8780
mov byte [ebp - 0xdf], 1
call fcn.0040b860
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5f0]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 5
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x411510
push 0
lea ecx, [ebp - 0x5f0]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x41158a
sub esp, 0x18
lea eax, [ebp - 0x5f0]
mov ecx, esp
mov dword [ebp - 0x14], esp
xor bl, bl
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 6
lea eax, [ebp - 0x898]
mov ecx, esp
push eax
call fcn.00465a60
mov cl, bl
mov byte [ebp - 4], 5
call fcn.0040f000
add esp, 0x30
test eax, eax
jne 0x411552
mov byte [edi], 1
jmp 0x41158a
lea ecx, [ebp - 0x5f0]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa78]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa78]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0xa78]
call fcn.00402660
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 4
call fcn.00402660
movaps xmm0, xmmword [0x525ce0]
lea ecx, [ebp - 0x387]
movups xmmword [ebp - 0x387], xmm0
mov word [ebp - 0x377], 0x8a
mov byte [ebp - 0x375], 1
call fcn.00462c70
push dword [ebp - 0x10]
lea ecx, [ebp - 0x8c8]
call fcn.004027f0
lea ecx, [ebp - 0x387]
mov byte [ebp - 4], 8
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4115e0
sub ecx, edx
lea eax, [ebp - 0x387]
push ecx
push eax
lea ecx, [ebp - 0x8c8]
call fcn.00402810
lea eax, [ebp - 0x8c8]
mov byte [ebp - 4], 9
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x880]
call fcn.004698d0
add esp, 4
lea ecx, [ebp - 0x8c8]
mov byte [ebp - 4], 0xb
call fcn.00402660
lea ecx, [ebp - 0x880]
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
je 0x41173c
lea ecx, [ebp - 0x141]
mov dword [ebp - 0x141], 0x8987afb5
mov dword [ebp - 0x13d], 0x859d9a8e
mov word [ebp - 0x139], 0x9c
mov byte [ebp - 0x137], 1
call fcn.0040a550
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5d8]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 0xc
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x4116b3
push 0
lea ecx, [ebp - 0x5d8]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x41172d
sub esp, 0x18
lea eax, [ebp - 0x5d8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x880]
mov ecx, esp
push eax
call fcn.00465a60
mov cl, bl
mov byte [ebp - 4], 0xc
call fcn.0040f000
add esp, 0x30
test eax, eax
jne 0x4116f5
mov byte [edi], 1
jmp 0x41172d
lea ecx, [ebp - 0x5d8]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa90]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa90]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0xa90]
call fcn.00402660
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 0xb
call fcn.00402660
movaps xmm0, xmmword [0x525dd0]
lea ecx, [ebp - 0x311]
movups xmmword [ebp - 0x311], xmm0
mov dword [ebp - 0x301], 0x99979698
mov word [ebp - 0x2fd], 0x89
mov byte [ebp - 0x2fb], 1
call fcn.00462ca0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x8e0]
call fcn.004027f0
lea ecx, [ebp - 0x311]
mov byte [ebp - 4], 0xf
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411790
sub ecx, edx
lea eax, [ebp - 0x311]
push ecx
push eax
lea ecx, [ebp - 0x8e0]
call fcn.00402810
lea eax, [ebp - 0x8e0]
mov byte [ebp - 4], 0x10
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x868]
call fcn.004698d0
add esp, 4
lea ecx, [ebp - 0x8e0]
mov byte [ebp - 4], 0x12
call fcn.00402660
lea ecx, [ebp - 0x868]
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
je 0x4118e3
lea ecx, [ebp - 0xde]
mov dword [ebp - 0xde], 0x8393afb5
mov dword [ebp - 0xda], 0x9c9b89
mov byte [ebp - 0xd6], 1
call fcn.0040b860
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x608]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x608]
mov byte [ebp - 4], 0x13
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x41185a
push 0
lea ecx, [ebp - 0x608]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x4118d4
sub esp, 0x18
lea eax, [ebp - 0x608]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x868]
mov ecx, esp
push eax
call fcn.00465a60
mov cl, bl
mov byte [ebp - 4], 0x13
call fcn.0040f000
add esp, 0x30
test eax, eax
jne 0x41189c
mov byte [edi], 1
jmp 0x4118d4
lea ecx, [ebp - 0x608]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xaa8]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xaa8]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0xaa8]
call fcn.00402660
lea ecx, [ebp - 0x608]
mov byte [ebp - 4], 0x12
call fcn.00402660
movaps xmm0, xmmword [0x5262c0]
lea ecx, [ebp - 0x2fa]
movups xmmword [ebp - 0x2fa], xmm0
mov dword [ebp - 0x2ea], 0x889e9695
mov word [ebp - 0x2e6], 0x8e
mov byte [ebp - 0x2e4], 1
call fcn.00462ca0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6b8]
call fcn.004027f0
lea ecx, [ebp - 0x2fa]
mov byte [ebp - 4], 0x16
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411931
sub ecx, edx
lea eax, [ebp - 0x2fa]
push ecx
push eax
lea ecx, [ebp - 0x6b8]
call fcn.00402810
lea eax, [ebp - 0x6b8]
mov byte [ebp - 4], 0x17
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x850]
call fcn.004698d0
add esp, 4
lea ecx, [ebp - 0x6b8]
mov byte [ebp - 4], 0x19
call fcn.00402660
lea ecx, [ebp - 0x850]
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
je 0x411a90
lea ecx, [ebp - 0x1dc]
mov dword [ebp - 0x1dc], 0x8987afb5
mov dword [ebp - 0x1d8], 0x859d9a8e
mov dword [ebp - 0x1d4], 0xb7a7be9c
mov word [ebp - 0x1d0], 0x100
call fcn.0040ee80
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x500]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x1a
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x411a07
push 0
lea ecx, [ebp - 0x500]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x411a81
sub esp, 0x18
lea eax, [ebp - 0x500]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x850]
mov ecx, esp
push eax
call fcn.00465a60
mov cl, bl
mov byte [ebp - 4], 0x1a
call fcn.0040f000
add esp, 0x30
test eax, eax
jne 0x411a49
mov byte [edi], 1
jmp 0x411a81
lea ecx, [ebp - 0x500]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xac0]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xac0]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0xac0]
call fcn.00402660
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x19
call fcn.00402660
movaps xmm0, xmmword [0x524db0]
lea ecx, [ebp - 0x3d2]
movups xmmword [ebp - 0x3d2], xmm0
mov byte [ebp - 0x3c2], 1
call fcn.00462b20
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6d0]
call fcn.004027f0
lea ecx, [ebp - 0x3d2]
mov byte [ebp - 4], 0x1d
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411ad0
sub ecx, edx
lea eax, [ebp - 0x3d2]
push ecx
push eax
lea ecx, [ebp - 0x6d0]
call fcn.00402810
lea eax, [ebp - 0x6d0]
mov byte [ebp - 4], 0x1e
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x838]
call fcn.004698d0
add esp, 4
lea ecx, [ebp - 0x6d0]
mov byte [ebp - 4], 0x20
call fcn.00402660
lea ecx, [ebp - 0x838]
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
je 0x411c23
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xf0], 0x8284a7b5
mov dword [ebp - 0xec], 0x809c88
mov byte [ebp - 0xe8], 1
call fcn.0040b860
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x458]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x21
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x411b9a
push 0
lea ecx, [ebp - 0x458]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x411c14
sub esp, 0x18
lea eax, [ebp - 0x458]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x838]
mov ecx, esp
push eax
call fcn.00465a60
mov cl, bl
mov byte [ebp - 4], 0x21
call fcn.0040f000
add esp, 0x30
test eax, eax
jne 0x411bdc
mov byte [edi], 1
jmp 0x411c14
lea ecx, [ebp - 0x458]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x8f8]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x8f8]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0x8f8]
call fcn.00402660
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x20
call fcn.00402660
movaps xmm0, xmmword [0x525a90]
lea ecx, [ebp - 0x39a]
movups xmmword [ebp - 0x39a], xmm0
mov word [ebp - 0x38a], 0x81
mov byte [ebp - 0x388], 1
call fcn.00462c70
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6e8]
call fcn.004027f0
lea ecx, [ebp - 0x39a]
mov byte [ebp - 4], 0x24
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411c67
sub ecx, edx
lea eax, [ebp - 0x39a]
push ecx
push eax
lea ecx, [ebp - 0x6e8]
call fcn.00402810
lea eax, [ebp - 0x6e8]
mov byte [ebp - 4], 0x25
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x35c]
call fcn.004698d0
add esp, 4
lea ecx, [ebp - 0x6e8]
mov byte [ebp - 4], 0x27
call fcn.00402660
lea ecx, [ebp - 0x35c]
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
je 0x41221e
lea ecx, [ebp - 0x1f9]
mov dword [ebp - 0x1f9], 0x948aa0b5
mov dword [ebp - 0x1f5], 0x99a3ce95
mov dword [ebp - 0x1f1], 0x80819793
mov word [ebp - 0x1ed], 0x8c
mov byte [ebp - 0x1eb], 1
call fcn.0040a6c0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x3ec]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 4], 0x28
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x411d48
push 0
lea ecx, [ebp - 0x3ec]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x41220f
lea ecx, [ebp - 0x16e]
mov dword [ebp - 0x16e], 0x8885a3b5
mov dword [ebp - 0x16a], 0x948a9688
mov dword [ebp - 0x166], 0x100b0b5
call fcn.0040ee50
push eax
lea edx, [ebp - 0x35c]
lea ecx, [ebp - 0xbe0]
call fcn.004697b0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
lea ecx, [ebp - 0xbe0]
mov byte [ebp - 4], 0x28
mov bl, al
call fcn.00402660
test bl, bl
je 0x411ede
lea ecx, [ebp - 0x17a]
mov dword [ebp - 0x17a], 0x8885a3b5
mov dword [ebp - 0x176], 0x948a9688
mov dword [ebp - 0x172], 0x100b0b5
call fcn.0040ee50
push eax
lea edx, [ebp - 0x3ec]
lea ecx, [ebp - 0x470]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x2a
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x411e21
push 0
lea ecx, [ebp - 0x470]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x411ecf
sub esp, 0x18
lea eax, [ebp - 0x470]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x186]
mov dword [ebp - 0x186], 0x8885a3b5
mov dword [ebp - 0x182], 0x948a9688
mov esi, esp
mov dword [ebp - 0x17e], 0x100b0b5
call fcn.0040ee50
push eax
lea edx, [ebp - 0x35c]
mov ecx, esi
call fcn.004697b0
add esp, 4
mov byte [ebp - 4], 0x2a
mov cl, bl
call fcn.0040f000
add esp, 0x30
test eax, eax
jne 0x411e91
mov byte [edi], 1
jmp 0x411ec9
lea ecx, [ebp - 0x470]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x910]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x910]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0x910]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x28
call fcn.00402660
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x218], 0x8f84a6b5
mov dword [ebp - 0x214], 0xa3cf828c
mov dword [ebp - 0x210], 0x95819d85
mov dword [ebp - 0x20c], 0x1009392
call fcn.0040efd0
push eax
lea edx, [ebp - 0x35c]
lea ecx, [ebp - 0xbf8]
call fcn.004697b0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x2d
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
lea ecx, [ebp - 0xbf8]
mov byte [ebp - 4], 0x28
mov bl, al
call fcn.00402660
test bl, bl
je 0x412092
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x228], 0x8f84a6b5
mov dword [ebp - 0x224], 0xa3cf828c
mov dword [ebp - 0x220], 0x95819d85
mov dword [ebp - 0x21c], 0x1009392
call fcn.0040efd0
push eax
lea edx, [ebp - 0x3ec]
lea ecx, [ebp - 0x488]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x488]
mov byte [ebp - 4], 0x2e
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x411fcb
push 0
lea ecx, [ebp - 0x488]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412083
sub esp, 0x18
lea eax, [ebp - 0x488]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00465a60
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x238]
sub esp, 0x18
mov dword [ebp - 0x238], 0x8f84a6b5
mov dword [ebp - 0x234], 0xa3cf828c
mov esi, esp
mov dword [ebp - 0x230], 0x95819d85
mov dword [ebp - 0x22c], 0x1009392
call fcn.0040efd0
push eax
lea edx, [ebp - 0x35c]
mov ecx, esi
call fcn.004697b0
add esp, 4
mov byte [ebp - 4], 0x2e
mov cl, bl
call fcn.0040f000
add esp, 0x30
test eax, eax
jne 0x412045
mov byte [edi], 1
jmp 0x41207d
lea ecx, [ebp - 0x488]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x928]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x928]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0x928]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x488]
mov byte [ebp - 4], 0x28
call fcn.00402660
movaps xmm0, xmmword [0x5265e0]
lea ecx, [ebp - 0x67a]
movups xmmword [ebp - 0x67a], xmm0
mov word [ebp - 0x66a], 0x100
call fcn.0040edc0
push eax
lea edx, [ebp - 0x35c]
lea ecx, [ebp - 0xc10]
call fcn.004697b0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x31
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
lea ecx, [ebp - 0xc10]
mov byte [ebp - 4], 0x28
mov bl, al
call fcn.00402660
test bl, bl
je 0x41220f
movaps xmm0, xmmword [0x5265e0]
lea ecx, [ebp - 0x68c]
movups xmmword [ebp - 0x68c], xmm0
mov word [ebp - 0x67c], 0x100
call fcn.0040edc0
push eax
lea edx, [ebp - 0x3ec]
lea ecx, [ebp - 0x4a0]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x32
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x41215d
push 0
lea ecx, [ebp - 0x4a0]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412204
sub esp, 0x18
lea eax, [ebp - 0x4a0]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00465a60
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x668]
movaps xmm0, xmmword [0x5265e0]
sub esp, 0x18
movups xmmword [ebp - 0x668], xmm0
mov word [ebp - 0x658], 0x100
mov esi, esp
call fcn.0040edc0
push eax
lea edx, [ebp - 0x35c]
mov ecx, esi
call fcn.004697b0
add esp, 4
mov byte [ebp - 4], 0x32
mov cl, bl
call fcn.0040f000
add esp, 0x30
test eax, eax
jne 0x4121c6
mov byte [edi], 1
jmp 0x4121fe
lea ecx, [ebp - 0x4a0]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x940]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x940]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0x940]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x4a0]
call fcn.00402660
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 4], 0x27
call fcn.00402660
movaps xmm0, xmmword [0x525ba0]
lea ecx, [ebp - 0x3c1]
movups xmmword [ebp - 0x3c1], xmm0
mov dword [ebp - 0x3b1], 0x9e9d98
mov byte [ebp - 0x3ad], 1
call fcn.0040eee0
push eax
lea ecx, [ebp - 0xc28]
call fcn.00402700
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x820]
call fcn.004698d0
add esp, 4
lea ecx, [ebp - 0xc28]
mov byte [ebp - 4], 0x37
call fcn.00402660
lea ecx, [ebp - 0x820]
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
je 0x412378
lea ecx, [ebp - 0x6d]
mov dword [ebp - 0x6d], 0x948aa0b5
mov word [ebp - 0x69], 0x95
mov byte [ebp - 0x67], 1
call fcn.004094f0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4b8]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x38
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x4122ef
push 0
lea ecx, [ebp - 0x4b8]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412369
sub esp, 0x18
lea eax, [ebp - 0x4b8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x820]
mov ecx, esp
push eax
call fcn.00465a60
mov cl, bl
mov byte [ebp - 4], 0x38
call fcn.0040f000
add esp, 0x30
test eax, eax
jne 0x412331
mov byte [edi], 1
jmp 0x412369
lea ecx, [ebp - 0x4b8]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x958]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x958]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0x958]
call fcn.00402660
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x37
call fcn.00402660
movaps xmm0, xmmword [0x525ec0]
lea ecx, [ebp - 0x32b]
movups xmmword [ebp - 0x32b], xmm0
mov dword [ebp - 0x31b], 0x909a8da5
mov dword [ebp - 0x317], 0x738b9b91
mov word [ebp - 0x313], 0x100
call fcn.0040a580
push eax
lea ecx, [ebp - 0xad8]
call fcn.00402700
push eax
lea edx, [ebp - 0xe38]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x808]
call fcn.004698d0
add esp, 4
lea ecx, [ebp - 0xad8]
mov byte [ebp - 4], 0x3d
call fcn.00402660
lea ecx, [ebp - 0x808]
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
je 0x4124ed
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0x8584a9b5
mov dword [ebp - 0x128], 0x99828183
mov word [ebp - 0x124], 0x100
call fcn.0040ee20
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4d0]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 0x3e
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x412464
push 0
lea ecx, [ebp - 0x4d0]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x4124de
sub esp, 0x18
lea eax, [ebp - 0x4d0]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x808]
mov ecx, esp
push eax
call fcn.00465a60
mov cl, bl
mov byte [ebp - 4], 0x3e
call fcn.0040f000
add esp, 0x30
test eax, eax
jne 0x4124a6
mov byte [edi], 1
jmp 0x4124de
lea ecx, [ebp - 0x4d0]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x970]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x970]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0x970]
call fcn.00402660
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 0x3d
call fcn.00402660
lea ecx, [ebp - 0x96]
mov dword [ebp - 0x96], 0x8199abb5
mov dword [ebp - 0x92], 0x969c82
mov byte [ebp - 0x8e], 1
call fcn.0040b860
push eax
lea ecx, [ebp - 0xaf0]
call fcn.00402700
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x7f0]
call fcn.004698d0
add esp, 4
lea ecx, [ebp - 0xaf0]
mov byte [ebp - 4], 0x43
call fcn.00402660
lea ecx, [ebp - 0x7f0]
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
je 0x412650
lea ecx, [ebp - 0x9f]
mov dword [ebp - 0x9f], 0x8199abb5
mov dword [ebp - 0x9b], 0x969c82
mov byte [ebp - 0x97], 1
call fcn.0040b860
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4e8]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x44
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x4125c7
push 0
lea ecx, [ebp - 0x4e8]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412641
sub esp, 0x18
lea eax, [ebp - 0x4e8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0x7f0]
mov ecx, esp
push eax
call fcn.00465a60
mov cl, bl
mov byte [ebp - 4], 0x44
call fcn.0040f000
add esp, 0x30
test eax, eax
jne 0x412609
mov byte [edi], 1
jmp 0x412641
lea ecx, [ebp - 0x4e8]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x988]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x988]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0x988]
call fcn.00402660
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x43
call fcn.00402660
movaps xmm0, xmmword [0x526070]
lea ecx, [ebp - 0x296]
movups xmmword [ebp - 0x296], xmm0
mov dword [ebp - 0x286], 0x88959f90
mov dword [ebp - 0x282], 0x6c9ea9a1
mov dword [ebp - 0x27e], 0x7777676d
mov word [ebp - 0x27a], 0x100
call fcn.00462880
push dword [ebp - 0x10]
lea ecx, [ebp - 0x700]
call fcn.004027f0
lea ecx, [ebp - 0x296]
mov byte [ebp - 4], 0x47
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4126b0
sub ecx, edx
lea eax, [ebp - 0x296]
push ecx
push eax
lea ecx, [ebp - 0x700]
call fcn.00402810
lea eax, [ebp - 0x700]
mov byte [ebp - 4], 0x48
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x7d8]
call fcn.004698d0
add esp, 4
lea ecx, [ebp - 0x700]
mov byte [ebp - 4], 0x4a
call fcn.00402660
lea ecx, [ebp - 0x7d8]
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
je 0x412803
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xa8], 0x9f8abdb5
mov dword [ebp - 0xa4], 0x868c8c
mov byte [ebp - 0xa0], 1
call fcn.0040b860
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x620]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x620]
mov byte [ebp - 4], 0x4b
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x41277a
push 0
lea ecx, [ebp - 0x620]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x4127f4
sub esp, 0x18
lea eax, [ebp - 0x620]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x4c
lea eax, [ebp - 0x7d8]
mov ecx, esp
push eax
call fcn.00465a60
mov cl, bl
mov byte [ebp - 4], 0x4b
call fcn.0040f000
add esp, 0x30
test eax, eax
jne 0x4127bc
mov byte [edi], 1
jmp 0x4127f4
lea ecx, [ebp - 0x620]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x9a0]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x9a0]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0x9a0]
call fcn.00402660
lea ecx, [ebp - 0x620]
mov byte [ebp - 4], 0x4a
call fcn.00402660
movaps xmm0, xmmword [0x526510]
lea ecx, [ebp - 0x43d]
movups xmmword [ebp - 0x43d], xmm0
mov word [ebp - 0x42d], 0x9b
mov byte [ebp - 0x42b], 1
call fcn.0040ab20
push eax
lea ecx, [ebp - 0xb08]
call fcn.00402700
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x7c0]
call fcn.004698d0
add esp, 4
lea ecx, [ebp - 0xb08]
mov byte [ebp - 4], 0x50
call fcn.00402660
sub esp, 0x18
lea eax, [ebp - 0x7c0]
mov ecx, esp
push eax
call fcn.00465a60
call fcn.0040beb0
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
add esp, 0x18
test al, al
je 0x4129ac
lea ecx, [ebp - 0xb1]
mov dword [ebp - 0xb1], 0x9882a8b5
mov dword [ebp - 0xad], 0x9d8b85
mov byte [ebp - 0xa9], 1
call fcn.0040b860
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x518]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x518]
mov byte [ebp - 4], 0x51
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x4128f1
push 0
lea ecx, [ebp - 0x518]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x41299d
lea ecx, [ebp - 0x192]
mov dword [ebp - 0x192], 0x988288b5
mov dword [ebp - 0x18e], 0xde9d8b85
mov dword [ebp - 0x18a], 0x1009095
call fcn.0040ee50
push eax
lea edx, [ebp - 0x518]
lea ecx, [ebp - 0xb20]
call fcn.004697b0
add esp, 4
mov ecx, eax
call fcn.004027a0
lea ecx, [ebp - 0x7c0]
mov esi, eax
call fcn.004027a0
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0xb20]
mov esi, eax
call fcn.00402660
test esi, esi
je 0x41295f
mov byte [edi], 1
jmp 0x412997
lea ecx, [ebp - 0x518]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x9b8]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x9b8]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0x9b8]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x518]
mov byte [ebp - 4], 0x50
call fcn.00402660
movaps xmm0, xmmword [0x5262b0]
lea ecx, [ebp - 0x342]
movups xmmword [ebp - 0x342], xmm0
mov dword [ebp - 0x332], 0x889e9695
mov word [ebp - 0x32e], 0x8e
mov byte [ebp - 0x32c], 1
call fcn.0040a6f0
push eax
lea ecx, [ebp - 0xb38]
call fcn.00402700
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x7a8]
call fcn.004698d0
add esp, 4
lea ecx, [ebp - 0xb38]
mov byte [ebp - 4], 0x55
call fcn.00402660
lea ecx, [ebp - 0x7a8]
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
je 0x412b32
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x208], 0x8987afb5
mov dword [ebp - 0x204], 0x9f9d9a8e
mov dword [ebp - 0x200], 0x8792b19f
mov word [ebp - 0x1fc], 0x9d
mov byte [ebp - 0x1fa], 1
call fcn.0040a6c0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x530]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x56
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x412aa6
push 0
lea ecx, [ebp - 0x530]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412b23
sub esp, 0x18
mov byte [ebp - 0x15], 0
lea eax, [ebp - 0x530]
mov dword [ebp - 0x10], esp
mov ecx, esp
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x7a8]
mov ecx, esp
push eax
call fcn.00465a60
mov cl, byte [ebp - 0x15]
mov byte [ebp - 4], 0x56
call fcn.0040f000
add esp, 0x30
test eax, eax
jne 0x412aeb
mov byte [edi], 1
jmp 0x412b23
lea ecx, [ebp - 0x530]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x9d0]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x9d0]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0x9d0]
call fcn.00402660
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x55
call fcn.00402660
movaps xmm0, xmmword [0x5261d0]
lea ecx, [ebp - 0x2cc]
movups xmmword [ebp - 0x2cc], xmm0
mov dword [ebp - 0x2bc], 0x96d59f8b
mov dword [ebp - 0x2b8], 0x91918e
mov byte [ebp - 0x2b4], 1
call fcn.004629a0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x718]
call fcn.004027f0
lea ecx, [ebp - 0x2cc]
mov byte [ebp - 4], 0x59
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412b81
sub ecx, edx
lea eax, [ebp - 0x2cc]
push ecx
push eax
lea ecx, [ebp - 0x718]
call fcn.00402810
lea eax, [ebp - 0x718]
mov byte [ebp - 4], 0x5a
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x790]
call fcn.004698d0
add esp, 4
lea ecx, [ebp - 0x718]
mov byte [ebp - 4], 0x5c
call fcn.00402660
sub esp, 0x18
lea eax, [ebp - 0x790]
mov ecx, esp
push eax
call fcn.00465a60
call fcn.0040beb0
add esp, 0x18
test al, al
je 0x412d0a
lea ecx, [ebp - 0x136]
mov dword [ebp - 0x136], 0x8282a8b5
mov dword [ebp - 0x132], 0x958c808c
mov word [ebp - 0x12e], 0x100
call fcn.0040ee20
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x548]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0x5d
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x412c58
push 0
lea ecx, [ebp - 0x548]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412cfb
movaps xmm0, xmmword [0x524e80]
lea ecx, [ebp - 0x69d]
movups xmmword [ebp - 0x69d], xmm0
mov byte [ebp - 0x68d], 1
call fcn.0040edf0
push eax
lea edx, [ebp - 0x548]
lea ecx, [ebp - 0xb50]
call fcn.004697b0
add esp, 4
mov ecx, eax
call fcn.004027a0
lea ecx, [ebp - 0x790]
mov esi, eax
call fcn.004027a0
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0xb50]
mov esi, eax
call fcn.00402660
test esi, esi
je 0x412cbd
mov byte [edi], 1
jmp 0x412cf5
lea ecx, [ebp - 0x548]
call fcn.004027a0
push eax
lea ecx, [ebp - 0x9e8]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x9e8]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0x9e8]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0x5c
call fcn.00402660
movaps xmm0, xmmword [0x525cd0]
lea ecx, [ebp - 0x417]
movups xmmword [ebp - 0x417], xmm0
mov word [ebp - 0x407], 0x8a
mov byte [ebp - 0x405], 1
call fcn.0040ab20
push eax
lea ecx, [ebp - 0xb68]
call fcn.00402700
push eax
lea edx, [ebp - 0xd30]
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x778]
call fcn.004698d0
add esp, 4
lea ecx, [ebp - 0xb68]
mov byte [ebp - 4], 0x61
call fcn.00402660
lea ecx, [ebp - 0x778]
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
je 0x412e7c
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x14c], 0x849fafb5
mov dword [ebp - 0x148], 0x858a9c88
mov word [ebp - 0x144], 0x9c
mov byte [ebp - 0x142], 1
call fcn.0040a550
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x560]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0x62
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x412df0
push 0
lea ecx, [ebp - 0x560]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x412e6d
sub esp, 0x18
mov byte [ebp - 0x15], 0
lea eax, [ebp - 0x560]
mov dword [ebp - 0x10], esp
mov ecx, esp
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x63
lea eax, [ebp - 0x778]
mov ecx, esp
push eax
call fcn.00465a60
mov cl, byte [ebp - 0x15]
mov byte [ebp - 4], 0x62
call fcn.0040f000
add esp, 0x30
test eax, eax
jne 0x412e35
mov byte [edi], 1
jmp 0x412e6d
lea ecx, [ebp - 0x560]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa00]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0xa00]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0xa00]
call fcn.00402660
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0x61
call fcn.00402660
lea ecx, [ebp - 0x25]
mov dword [ebp - 0x25], 0x8d9eadb5
mov dword [ebp - 0x21], 0x8e8a9f
mov byte [ebp - 0x1d], 1
call fcn.00462bb0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x730]
call fcn.004027f0
lea ecx, [ebp - 0x25]
mov byte [ebp - 4], 0x65
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412eb0
sub ecx, edx
lea eax, [ebp - 0x25]
push ecx
push eax
lea ecx, [ebp - 0x730]
call fcn.00402810
lea eax, [ebp - 0x730]
mov byte [ebp - 4], 0x66
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x374]
call fcn.004698d0
add esp, 4
lea ecx, [ebp - 0x730]
mov byte [ebp - 4], 0x68
call fcn.00402660
lea ecx, [ebp - 0x374]
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
je 0x413457
lea ecx, [ebp - 0xba]
mov dword [ebp - 0xba], 0x8d9eadb5
mov dword [ebp - 0xb6], 0x8e8a9f
mov byte [ebp - 0xb2], 1
call fcn.0040b860
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x404]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x404]
mov byte [ebp - 4], 0x69
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x412f7b
push 0
lea ecx, [ebp - 0x404]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x413448
lea ecx, [ebp - 0x19e]
mov dword [ebp - 0x19e], 0x8885a3b5
mov dword [ebp - 0x19a], 0x948a9688
mov dword [ebp - 0x196], 0x100b0b5
call fcn.0040ee50
push eax
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0xb80]
call fcn.004697b0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x6a
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
lea ecx, [ebp - 0xb80]
mov byte [ebp - 4], 0x69
mov bl, al
call fcn.00402660
test bl, bl
je 0x413111
lea ecx, [ebp - 0x1aa]
mov dword [ebp - 0x1aa], 0x8885a3b5
mov dword [ebp - 0x1a6], 0x948a9688
mov dword [ebp - 0x1a2], 0x100b0b5
call fcn.0040ee50
push eax
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x578]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 0x6b
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x413054
push 0
lea ecx, [ebp - 0x578]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x413102
sub esp, 0x18
lea eax, [ebp - 0x578]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x1b6]
mov dword [ebp - 0x1b6], 0x8885a3b5
mov dword [ebp - 0x1b2], 0x948a9688
mov esi, esp
mov dword [ebp - 0x1ae], 0x100b0b5
call fcn.0040ee50
push eax
lea edx, [ebp - 0x374]
mov ecx, esi
call fcn.004697b0
add esp, 4
mov byte [ebp - 4], 0x6b
mov cl, bl
call fcn.0040f000
add esp, 0x30
test eax, eax
jne 0x4130c4
mov byte [edi], 1
jmp 0x4130fc
lea ecx, [ebp - 0x578]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa18]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0xa18]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0xa18]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 0x69
call fcn.00402660
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x248], 0x8f84a6b5
mov dword [ebp - 0x244], 0xa3cf828c
mov dword [ebp - 0x240], 0x95819d85
mov dword [ebp - 0x23c], 0x1009392
call fcn.0040efd0
push eax
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0xb98]
call fcn.004697b0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x6e
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
lea ecx, [ebp - 0xb98]
mov byte [ebp - 4], 0x69
mov bl, al
call fcn.00402660
test bl, bl
je 0x4132c5
lea ecx, [ebp - 0x258]
mov dword [ebp - 0x258], 0x8f84a6b5
mov dword [ebp - 0x254], 0xa3cf828c
mov dword [ebp - 0x250], 0x95819d85
mov dword [ebp - 0x24c], 0x1009392
call fcn.0040efd0
push eax
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x590]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 0x6f
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x4131fe
push 0
lea ecx, [ebp - 0x590]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x4132b6
sub esp, 0x18
lea eax, [ebp - 0x590]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00465a60
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0x268]
sub esp, 0x18
mov dword [ebp - 0x268], 0x8f84a6b5
mov dword [ebp - 0x264], 0xa3cf828c
mov esi, esp
mov dword [ebp - 0x260], 0x95819d85
mov dword [ebp - 0x25c], 0x1009392
call fcn.0040efd0
push eax
lea edx, [ebp - 0x374]
mov ecx, esi
call fcn.004697b0
add esp, 4
mov byte [ebp - 4], 0x6f
mov cl, bl
call fcn.0040f000
add esp, 0x30
test eax, eax
jne 0x413278
mov byte [edi], 1
jmp 0x4132b0
lea ecx, [ebp - 0x590]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa30]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xa30]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0xa30]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 0x69
call fcn.00402660
movaps xmm0, xmmword [0x5265e0]
lea ecx, [ebp - 0x632]
movups xmmword [ebp - 0x632], xmm0
mov word [ebp - 0x622], 0x100
call fcn.0040edc0
push eax
lea edx, [ebp - 0x374]
lea ecx, [ebp - 0xbb0]
call fcn.004697b0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x72
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
lea ecx, [ebp - 0xbb0]
mov byte [ebp - 4], 0x69
mov bl, al
call fcn.00402660
test bl, bl
je 0x413442
movaps xmm0, xmmword [0x5265e0]
lea ecx, [ebp - 0x644]
movups xmmword [ebp - 0x644], xmm0
mov word [ebp - 0x634], 0x100
call fcn.0040edc0
push eax
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x5a8]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x5a8]
mov byte [ebp - 4], 0x73
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x413390
push 0
lea ecx, [ebp - 0x5a8]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x413437
sub esp, 0x18
lea eax, [ebp - 0x5a8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00465a60
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0x656]
movaps xmm0, xmmword [0x5265e0]
sub esp, 0x18
movups xmmword [ebp - 0x656], xmm0
mov word [ebp - 0x646], 0x100
mov esi, esp
call fcn.0040edc0
push eax
lea edx, [ebp - 0x374]
mov ecx, esi
call fcn.004697b0
add esp, 4
mov byte [ebp - 4], 0x73
mov cl, bl
call fcn.0040f000
add esp, 0x30
test eax, eax
jne 0x4133f9
mov byte [edi], 1
jmp 0x413431
lea ecx, [ebp - 0x5a8]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa48]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0xa48]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0xa48]
call fcn.00402660
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x5a8]
call fcn.00402660
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [ebp - 0x404]
mov byte [ebp - 4], 0x68
call fcn.00402660
movaps xmm0, xmmword [0x525e60]
lea ecx, [ebp - 0x2b3]
movups xmmword [ebp - 0x2b3], xmm0
mov dword [ebp - 0x2a3], 0x999c959d
mov dword [ebp - 0x29f], 0x6c9e89d3
mov dword [ebp - 0x29b], 0x77676d
mov byte [ebp - 0x297], 1
call fcn.004629d0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x748]
call fcn.004027f0
lea ecx, [ebp - 0x2b3]
mov byte [ebp - 4], 0x76
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4134b0
sub ecx, edx
lea eax, [ebp - 0x2b3]
push ecx
push eax
lea ecx, [ebp - 0x748]
call fcn.00402810
lea eax, [ebp - 0x748]
mov byte [ebp - 4], 0x77
push eax
lea edx, [ebp - 0xd30]
lea ecx, [ebp - 0x760]
call fcn.004698d0
add esp, 4
lea ecx, [ebp - 0x748]
mov byte [ebp - 4], 0x79
call fcn.00402660
sub esp, 0x18
lea eax, [ebp - 0x760]
mov ecx, esp
push eax
call fcn.00465a60
call fcn.0040beb0
add esp, 0x18
test al, al
je 0x41363d
lea ecx, [ebp - 0x1c2]
mov dword [ebp - 0x1c2], 0x809ea7b5
mov dword [ebp - 0x1be], 0x9fab8799
mov dword [ebp - 0x1ba], 0x1009796
call fcn.0040ee50
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5c0]
call fcn.004697b0
add esp, 4
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 4], 0x7a
call fcn.004027a0
mov ecx, eax
call fcn.0040bf40
test al, al
jne 0x413588
push 0
lea ecx, [ebp - 0x5c0]
call fcn.004027a0
push eax
call esi
test eax, eax
je 0x41362e
movaps xmm0, xmmword [0x526680]
lea ecx, [ebp - 0x42a]
movups xmmword [ebp - 0x42a], xmm0
mov word [ebp - 0x41a], 0x8d
mov byte [ebp - 0x418], 1
call fcn.0040ab20
push eax
lea edx, [ebp - 0x5c0]
lea ecx, [ebp - 0xbc8]
call fcn.004697b0
add esp, 4
mov ecx, eax
call fcn.004027a0
lea ecx, [ebp - 0x760]
mov esi, eax
call fcn.004027a0
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0xbc8]
mov esi, eax
call fcn.00402660
test esi, esi
je 0x4135f6
mov byte [edi], 1
jmp 0x41362e
lea ecx, [ebp - 0x5c0]
call fcn.004027a0
push eax
lea ecx, [ebp - 0xa60]
call fcn.00402700
push 0
mov dl, 1
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0xa60]
call fcn.0040c000
add esp, 4
lea ecx, [ebp - 0xa60]
call fcn.00402660
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 4], 0x79
call fcn.00402660
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0xc3]
mov dword [ebp - 0xc3], 0x8f9f83ab
mov dword [ebp - 0xbf], 0x818782
mov esi, esp
mov byte [ebp - 0xbb], 1
call fcn.0040b860
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0xfa]
mov dword [ebp - 0xfa], 0x898c85ad
mov dword [ebp - 0xf6], 0x9e86818e
mov esi, esp
mov word [ebp - 0xf2], 0x100
call fcn.0040ee20
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x104], 0x828484a8
mov dword [ebp - 0x100], 0x9e86818e
mov esi, esp
mov word [ebp - 0xfc], 0x100
call fcn.0040ee20
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xcc], 0xafbaa8ab
mov dword [ebp - 0xc8], 0x818782
mov esi, esp
mov byte [ebp - 0xc4], 1
call fcn.0040b860
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0x10e]
mov dword [ebp - 0x10e], 0x84988bad
mov dword [ebp - 0x10a], 0x959d81ae
mov esi, esp
mov word [ebp - 0x106], 0x100
call fcn.0040ee20
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x1ce]
mov dword [ebp - 0x1ce], 0x9e8486af
mov dword [ebp - 0x1ca], 0x9f8c8084
mov esi, esp
mov dword [ebp - 0x1c6], 0x1009c98
call fcn.0040ee50
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x75]
mov dword [ebp - 0x75], 0x828a98af
mov dword [ebp - 0x71], 0x1008186
mov esi, esp
call fcn.00410500
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x118], 0x858e98af
mov dword [ebp - 0x114], 0x9e86818e
mov esi, esp
mov word [ebp - 0x110], 0x100
call fcn.0040ee20
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x278]
sub esp, 0x18
mov dword [ebp - 0x278], 0x888785ae
mov dword [ebp - 0x274], 0x9e8681ae
mov esi, esp
mov dword [ebp - 0x270], 0xb8b4dad1
mov dword [ebp - 0x26c], 0x100dfb1
call fcn.0040efd0
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x8d]
mov dword [ebp - 0x8d], 0x83a8a5a0
mov dword [ebp - 0x89], 0x1008084
mov esi, esp
call fcn.00410500
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x1ea]
sub esp, 0x18
mov dword [ebp - 0x1ea], 0x858d84a0
mov dword [ebp - 0x1e6], 0x959b8783
mov esi, esp
mov dword [ebp - 0x1e2], 0x9a9a9d92
mov word [ebp - 0x1de], 0x100
call fcn.0040ee80
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
mov byte [ebp - 4], 0x87
sub esp, 0x18
mov dword [ebp - 0x7d], 0x838892a0
mov esi, esp
mov dword [ebp - 0x79], 0x1008084
lea ecx, [ebp - 0x7d]
call fcn.00410500
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x66]
mov dword [ebp - 0x66], 0x8d8c8fa4
mov dword [ebp - 0x62], 0x9e86818e
mov word [ebp - 0x5e], 0x100
call fcn.00462af0
sub esp, 0x18
lea eax, [ebp - 0x66]
mov ecx, esp
push eax
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0xd5]
mov dword [ebp - 0xd5], 0x8f8583a4
mov dword [ebp - 0xd1], 0x818782
mov esi, esp
mov byte [ebp - 0xcd], 1
call fcn.0040b860
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x122]
mov dword [ebp - 0x122], 0x89868ba7
mov dword [ebp - 0x11e], 0x9e86818e
mov esi, esp
mov word [ebp - 0x11a], 0x100
call fcn.0040ee20
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
mov byte [ebp - 4], 0x8b
mov dword [ebp - 0x157], 0x818298b9
mov dword [ebp - 0x153], 0x99808d88
sub esp, 0x18
mov word [ebp - 0x14f], 0x9f
lea ecx, [ebp - 0x157]
mov byte [ebp - 0x14d], 1
mov esi, esp
call fcn.0040a550
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
mov byte [ebp - 4], 0x8c
lea ecx, [ebp - 0x162]
sub esp, 0x18
mov dword [ebp - 0x162], 0x9e998fbd
mov dword [ebp - 0x15e], 0x99808d8c
mov esi, esp
mov word [ebp - 0x15a], 0x9f
mov byte [ebp - 0x158], 1
call fcn.0040a550
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
sub esp, 0x18
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x85]
mov dword [ebp - 0x85], 0x83a8abb0
mov dword [ebp - 0x81], 0x1008084
mov esi, esp
call fcn.00410500
push eax
mov ecx, esi
call fcn.00402700
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x9f8a89b3
mov word [ebp - 0x18], 0x85
mov byte [ebp - 0x16], 1
call fcn.00462e00
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x8f
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413c60
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x8e
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0x2e]
mov dword [ebp - 0x2e], 0x8f9d8f8d
mov dword [ebp - 0x2a], 0x818782
mov byte [ebp - 0x26], 1
call fcn.00462bb0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x2e]
mov byte [ebp - 4], 0x91
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413cd0
sub ecx, edx
lea eax, [ebp - 0x2e]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x90
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x4f]
mov dword [ebp - 0x4f], 0x858c838d
mov dword [ebp - 0x4b], 0x93838f99
mov dword [ebp - 0x47], 0x9d9b9e
mov byte [ebp - 0x43], 1
call fcn.00462b80
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x4f]
mov byte [ebp - 4], 0x93
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413d46
sub ecx, edx
lea eax, [ebp - 0x4f]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x92
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], 0x899f83a5
mov dword [ebp - 0x34], 0x9e86818e
mov word [ebp - 0x30], 0x100
call fcn.00462af0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x95
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413db7
sub ecx, edx
lea eax, [ebp - 0x38]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x94
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
mov byte [ebp - 4], 0x96
lea ecx, [ebp - 0x42]
mov dword [ebp - 0x42], 0x888f8fbb
mov dword [ebp - 0x3e], 0x9e86818e
mov word [ebp - 0x3a], 0x100
call fcn.00462af0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x42]
mov byte [ebp - 4], 0x97
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413e28
sub ecx, edx
lea eax, [ebp - 0x42]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x96
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x3ac]
movaps xmm0, xmmword [0x525cc0]
movups xmmword [ebp - 0x3ac], xmm0
mov word [ebp - 0x39c], 0x100
call fcn.00462b50
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 0x99
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413ea2
sub ecx, edx
lea eax, [ebp - 0x3ac]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x98
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00465a60
mov byte [ebp - 4], 0x9a
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x5c], 0x8b8f8fa5
mov dword [ebp - 0x58], 0xbccf9c88
mov dword [ebp - 0x54], 0x968498
mov byte [ebp - 0x50], 1
call fcn.00462b80
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.004027f0
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x9b
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413f20
sub ecx, edx
lea eax, [ebp - 0x5c]
push ecx
push eax
mov ecx, esi
call fcn.00402810
mov byte [ebp - 4], 0x9a
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.00410530
add esp, 0x30
lea ecx, [ebp - 0x760]
call fcn.00402660
lea ecx, [ebp - 0x374]
call fcn.00402660
lea ecx, [ebp - 0x778]
call fcn.00402660
lea ecx, [ebp - 0x790]
call fcn.00402660
lea ecx, [ebp - 0x7a8]
call fcn.00402660
lea ecx, [ebp - 0x7c0]
call fcn.00402660
lea ecx, [ebp - 0x7d8]
call fcn.00402660
lea ecx, [ebp - 0x7f0]
call fcn.00402660
lea ecx, [ebp - 0x808]
call fcn.00402660
lea ecx, [ebp - 0x820]
call fcn.00402660
lea ecx, [ebp - 0x35c]
call fcn.00402660
lea ecx, [ebp - 0x838]
call fcn.00402660
lea ecx, [ebp - 0x850]
call fcn.00402660
lea ecx, [ebp - 0x868]
call fcn.00402660
lea ecx, [ebp - 0x880]
call fcn.00402660
lea ecx, [ebp - 0x898]
call fcn.00402660
lea ecx, [ebp + 8]
call fcn.00402660
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret