Function at 0x44b470
Capabilities:
Authenticate hmac
Encode data using base64
Encode data using xor
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5ec
mov dword [ebp - 4], 0
mov eax, 0x78
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1c8], 0
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x578], edx
mov ecx, 0x48
mov dword [ebp - 0x1cc], 0
mov word [ebp - 0x42c], cx
mov esi, 0x50
mov word [ebp - 0x42a], si
mov edx, 0x71
mov word [ebp - 0x428], dx
mov ebx, 0x6d
mov word [ebp - 0x426], ax
mov esi, 0x4a
mov word [ebp - 0x424], bx
mov eax, 0x85
mov word [ebp - 0x422], ax
mov word [ebp - 0x420], si
mov esi, 0x31
mov word [ebp - 0x41e], si
mov esi, 0x7f
mov word [ebp - 0x41c], si
mov esi, 0x50
mov word [ebp - 0x41a], cx
mov ecx, 0x3b
mov word [ebp - 0x418], cx
mov ecx, 0x78
mov word [ebp - 0x416], si
mov word [ebp - 0x414], dx
mov word [ebp - 0x412], cx
mov word [ebp - 0x410], bx
mov word [ebp - 0x40e], ax
mov eax, 0x4a
mov word [ebp - 0x40c], ax
mov eax, 0xc
mov word [ebp - 0x40a], ax
movzx eax, word [0x402da4]
add eax, 0xc
mov dword [ebp - 0x24], 0
mov word [ebp - 0x408], ax
movzx eax, word [0x402da6]
add eax, 0xc
mov dword [ebp - 0x14], 0
mov word [ebp - 0x406], ax
movzx eax, word [0x402da8]
add eax, 0xc
mov dword [ebp - 0x20], 0
mov word [ebp - 0x404], ax
movzx eax, word [0x402daa]
add eax, 0xc
mov dword [ebp - 0x18], 0
mov word [ebp - 0x402], ax
movzx eax, word [0x402dac]
add eax, 0xc
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x400], ax
movzx eax, word [0x402dae]
add eax, 0xc
mov word [ebp - 0x3fe], ax
movzx eax, word [0x402db0]
add eax, 0xc
mov word [ebp - 0x3fc], ax
movzx eax, word [0x402db2]
add eax, 0xc
mov word [ebp - 0x3fa], ax
movzx eax, word [0x402db4]
add eax, 0xc
mov word [ebp - 0x3f8], ax
movzx eax, word [0x402db6]
add eax, 0xc
mov word [ebp - 0x3f6], ax
movzx eax, word [0x402db8]
add eax, 0xc
mov word [ebp - 0x3f4], ax
movzx eax, word [0x402dba]
add eax, 0xc
mov word [ebp - 0x3f2], ax
movzx eax, word [0x402dbc]
add eax, 0xc
mov word [ebp - 0x3f0], ax
movzx eax, word [0x402dbe]
add eax, 0xc
mov word [ebp - 0x3ee], ax
movzx eax, word [0x402dc0]
add eax, 0xc
mov word [ebp - 0x3ec], ax
movzx eax, word [0x402dc2]
add eax, 0xc
mov word [ebp - 0x3ea], ax
movzx eax, word [0x402dc4]
add eax, 0xc
mov word [ebp - 0x3e8], ax
xor eax, eax
mov word [ebp - 0x3e6], ax
xor ecx, ecx
mov ax, word [ebp - 0x42c]
nop word [eax + eax]
mov ax, word [ebp + ecx*2 - 0x42c]
movzx eax, ax
add eax, 0xfffffff4
mov word [ebp + ecx*2 - 0x42c], ax
inc ecx
cmp ecx, 0x23
jb 0x44b6d0
mov dword [ebp - 0x520], 0x64
mov ebx, 0x58
mov word [ebp - 0x51c], bx
mov eax, 0x21
mov word [ebp - 0x51a], ax
mov edx, 0x5a
mov eax, 0x1c
mov ecx, 0x27
mov word [ebp - 0x518], ax
mov esi, 0x17
mov eax, 1
mov word [ebp - 0x516], ax
mov eax, 7
mov word [ebp - 0x514], ax
mov eax, 0xb
mov word [ebp - 0x512], dx
mov word [ebp - 0x510], bx
mov word [ebp - 0x50e], cx
mov word [ebp - 0x50c], ax
mov eax, 9
mov word [ebp - 0x50a], ax
mov word [ebp - 0x508], ax
mov eax, 5
mov word [ebp - 0x506], ax
mov eax, 0xa
mov word [ebp - 0x504], ax
xor eax, eax
mov word [ebp - 0x502], ax
mov eax, 0xb
mov word [ebp - 0x500], dx
mov edx, 0x41
mov word [ebp - 0x4fe], dx
mov edx, 9
mov word [ebp - 0x4fc], si
mov word [ebp - 0x4fa], bx
mov ebx, 0x4b
mov word [ebp - 0x4f8], bx
mov word [ebp - 0x4f6], cx
mov ecx, 0xa
mov word [ebp - 0x4f4], ax
mov eax, 5
mov word [ebp - 0x4f2], dx
mov word [ebp - 0x4f0], dx
mov word [ebp - 0x4ee], ax
xor eax, eax
mov word [ebp - 0x4ec], cx
mov ecx, 0x11
mov word [ebp - 0x4ea], ax
mov eax, 0x5a
mov word [ebp - 0x4e8], ax
mov eax, 0x58
mov word [ebp - 0x4e6], ax
mov eax, 0x25
mov word [ebp - 0x4e4], ax
mov eax, 0x16
mov word [ebp - 0x4e2], ax
mov eax, 3
mov word [ebp - 0x4e0], ax
mov eax, 1
mov word [ebp - 0x4de], cx
mov ecx, 0x25
mov word [ebp - 0x4dc], dx
mov edx, 0x5a
mov word [ebp - 0x4da], ax
mov eax, 0xa
mov word [ebp - 0x4d8], ax
mov eax, 0x10
mov word [ebp - 0x4d6], ax
mov word [ebp - 0x4d4], si
mov word [ebp - 0x4d2], dx
mov edx, 0x41
mov word [ebp - 0x4d0], dx
mov edx, 0x58
mov word [ebp - 0x4ce], si
mov word [ebp - 0x4cc], dx
mov word [ebp - 0x4ca], bx
mov word [ebp - 0x4c8], cx
mov ecx, 0x16
mov word [ebp - 0x4c6], cx
mov ecx, 3
mov word [ebp - 0x4c4], cx
mov ecx, 0x11
mov word [ebp - 0x4c2], cx
mov ecx, 9
mov word [ebp - 0x4c0], cx
mov ecx, 1
mov word [ebp - 0x4be], cx
mov ecx, 0xa
mov word [ebp - 0x4bc], cx
mov ecx, 0x21
mov word [ebp - 0x4ba], ax
mov eax, 0x5a
mov word [ebp - 0x4b8], si
mov esi, 7
mov word [ebp - 0x4b6], ax
mov word [ebp - 0x4b4], dx
mov word [ebp - 0x4b2], bx
mov word [ebp - 0x4b0], cx
mov ecx, 0x1c
mov word [ebp - 0x4ae], cx
mov ecx, 1
mov word [ebp - 0x4ac], cx
mov word [ebp - 0x4aa], si
mov word [ebp - 0x4a8], ax
mov eax, 0x64
mov word [ebp - 0x4a6], ax
movzx eax, word [0x402e20]
xor eax, 0x64
mov word [ebp - 0x4a4], ax
movzx eax, word [0x402e22]
xor eax, 0x64
mov word [ebp - 0x4a2], ax
movzx eax, word [0x402e24]
xor eax, 0x64
mov word [ebp - 0x4a0], ax
movzx eax, word [0x402e26]
xor eax, 0x64
mov word [ebp - 0x49e], ax
movzx eax, word [0x402e28]
xor eax, 0x64
mov word [ebp - 0x49c], ax
movzx eax, word [0x402e2a]
xor eax, 0x64
mov word [ebp - 0x49a], ax
movzx eax, word [0x402e2c]
xor eax, 0x64
mov word [ebp - 0x498], ax
movzx eax, word [0x402e2e]
xor eax, 0x64
mov word [ebp - 0x496], ax
movzx eax, word [0x402e30]
xor eax, 0x64
mov word [ebp - 0x494], ax
movzx eax, word [0x402e32]
xor eax, 0x64
mov word [ebp - 0x492], ax
movzx eax, word [0x402e34]
xor eax, 0x64
mov word [ebp - 0x490], ax
movzx eax, word [0x402e36]
xor eax, 0x64
mov word [ebp - 0x48e], ax
movzx eax, word [0x402e38]
xor eax, 0x64
mov word [ebp - 0x48c], ax
movzx eax, word [0x402e3a]
xor eax, 0x64
mov word [ebp - 0x48a], ax
movzx eax, word [0x402e3c]
xor eax, 0x64
mov word [ebp - 0x488], ax
movzx eax, word [0x402e3e]
xor eax, 0x64
mov word [ebp - 0x486], ax
movzx eax, word [0x402e40]
xor eax, 0x64
mov word [ebp - 0x484], ax
movzx eax, word [0x402e42]
xor eax, 0x64
mov word [ebp - 0x482], ax
movzx eax, word [0x402e44]
xor eax, 0x64
mov word [ebp - 0x480], ax
movzx eax, word [0x402e46]
xor eax, 0x64
mov word [ebp - 0x47e], ax
movzx eax, word [0x402e48]
xor eax, 0x64
mov word [ebp - 0x47c], ax
movzx eax, word [0x402e4a]
xor eax, 0x64
mov word [ebp - 0x47a], ax
movzx eax, word [0x402e4c]
xor eax, 0x64
mov word [ebp - 0x478], ax
movzx eax, word [0x402e4e]
xor eax, 0x64
mov word [ebp - 0x476], ax
movzx eax, word [0x402e50]
xor eax, 0x64
mov word [ebp - 0x474], ax
movzx eax, word [0x402e52]
xor eax, 0x64
mov word [ebp - 0x472], ax
movzx eax, word [0x402e54]
xor eax, 0x64
mov word [ebp - 0x470], ax
movzx eax, word [0x402e56]
xor eax, 0x64
mov word [ebp - 0x46e], ax
movzx eax, word [0x402e58]
xor eax, 0x64
mov word [ebp - 0x46c], ax
movzx eax, word [0x402e5a]
xor eax, 0x64
mov word [ebp - 0x46a], ax
movzx eax, word [0x402e5c]
xor eax, 0x64
mov word [ebp - 0x468], ax
movzx eax, word [0x402e5e]
xor eax, 0x64
mov word [ebp - 0x466], ax
movzx eax, word [0x402e60]
xor eax, 0x64
mov word [ebp - 0x464], ax
movzx eax, word [0x402e62]
xor eax, 0x64
mov word [ebp - 0x462], ax
movzx eax, word [0x402e64]
xor eax, 0x64
mov word [ebp - 0x460], ax
movzx eax, word [0x402e66]
xor eax, 0x64
mov word [ebp - 0x45e], ax
movzx eax, word [0x402e68]
xor eax, 0x64
mov word [ebp - 0x45c], ax
movzx eax, word [0x402e6a]
xor eax, 0x64
mov word [ebp - 0x45a], ax
movzx eax, word [0x402e6c]
xor eax, 0x64
mov word [ebp - 0x458], ax
movzx eax, word [0x402e6e]
xor eax, 0x64
mov word [ebp - 0x456], ax
movzx eax, word [0x402e70]
xor eax, 0x64
mov word [ebp - 0x454], ax
movzx eax, word [0x402e72]
xor eax, 0x64
mov word [ebp - 0x452], ax
movzx eax, word [0x402e74]
xor eax, 0x64
mov word [ebp - 0x450], ax
movzx eax, word [0x402e76]
xor eax, 0x64
mov word [ebp - 0x44e], ax
movzx eax, word [0x402e78]
xor eax, 0x64
mov word [ebp - 0x44c], ax
movzx eax, word [0x402e7a]
xor eax, 0x64
mov word [ebp - 0x44a], ax
movzx eax, word [0x402e7c]
xor eax, 0x64
mov word [ebp - 0x448], ax
movzx eax, word [0x402e7e]
xor eax, 0x64
mov word [ebp - 0x446], ax
movzx eax, word [0x402e80]
xor eax, 0x64
mov word [ebp - 0x444], ax
movzx eax, word [0x402e82]
xor eax, 0x64
mov word [ebp - 0x442], ax
movzx eax, word [0x402e84]
xor eax, 0x64
mov word [ebp - 0x440], ax
movzx eax, word [0x402e86]
xor eax, 0x64
mov word [ebp - 0x43e], ax
movzx eax, word [0x402e88]
xor eax, 0x64
mov word [ebp - 0x43c], ax
movzx eax, word [0x402e8a]
xor eax, 0x64
mov word [ebp - 0x43a], ax
movzx eax, word [0x402e8c]
xor eax, 0x64
mov word [ebp - 0x438], ax
movzx eax, word [0x402e8e]
xor eax, 0x64
mov word [ebp - 0x436], ax
movzx eax, word [0x402e90]
xor eax, 0x64
mov word [ebp - 0x434], ax
movzx eax, word [0x402e92]
xor eax, 0x64
mov word [ebp - 0x432], ax
movzx eax, word [0x402e94]
xor eax, 0x64
mov word [ebp - 0x430], ax
xor eax, eax
mov word [ebp - 0x42e], ax
xor edx, edx
mov ax, word [ebp - 0x51c]
mov ax, word [ebp + edx*2 - 0x51c]
movzx ecx, ax
mov eax, dword [ebp - 0x520]
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0x51c], cx
inc edx
cmp edx, 0x77
jb 0x44bd72
xor eax, eax
mov word [ebp - 0x42e], ax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x598], eax
mov dword [ebp - 0x58], 0x31
mov eax, dword [ebp - 0x58]
xor eax, 0x2f
mov word [ebp - 0x54], ax
mov eax, dword [ebp - 0x58]
inc eax
xor eax, 0x49
mov word [ebp - 0x52], ax
mov eax, dword [ebp - 0x58]
add eax, 2
xor eax, 0x4d
mov word [ebp - 0x50], ax
mov eax, dword [ebp - 0x58]
add eax, 3
xor eax, 0x20
mov word [ebp - 0x4e], ax
mov eax, dword [ebp - 0x58]
add eax, 4
xor eax, 0x22
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x58]
add eax, 5
xor eax, 0x25
mov word [ebp - 0x4a], ax
mov eax, dword [ebp - 0x58]
add eax, 6
xor eax, 0x73
mov word [ebp - 0x48], ax
mov eax, dword [ebp - 0x58]
add eax, 7
xor eax, 0x22
mov word [ebp - 0x46], ax
mov eax, dword [ebp - 0x58]
add eax, 8
xor eax, 0x20
mov word [ebp - 0x44], ax
mov eax, dword [ebp - 0x58]
add eax, 9
xor eax, 0x2f
mov word [ebp - 0x42], ax
mov eax, dword [ebp - 0x58]
add eax, 0xa
xor eax, 0x46
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x58]
add eax, 0xb
mov word [ebp - 0x3e], ax
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e38]
add eax, 0xc
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x3c], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e3a]
add eax, 0xd
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x3a], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e3c]
add eax, 0xe
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x38], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e3e]
add eax, 0xf
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x36], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e40]
add eax, 0x10
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x34], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e42]
add eax, 0x11
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x32], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e44]
add eax, 0x12
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x30], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e46]
add eax, 0x13
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x2e], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e48]
add eax, 0x14
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x2c], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e4a]
add eax, 0x15
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x2a], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e4c]
add eax, 0x16
movzx eax, ax
xor ecx, eax
xor eax, eax
mov word [ebp - 0x28], cx
xor edx, edx
mov word [ebp - 0x26], ax
mov ax, word [ebp - 0x54]
mov ax, word [ebp + edx*2 - 0x54]
mov ecx, dword [ebp - 0x58]
add ecx, edx
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0x54], cx
inc edx
cmp edx, 0x17
jb 0x44bf41
xor eax, eax
mov word [ebp - 0x26], ax
mov eax, 0x51
mov dword [ebp - 0x1dc], 0x74
mov word [ebp - 0x1d8], ax
mov eax, 0x74
mov word [ebp - 0x1d6], si
mov word [ebp - 0x1d4], ax
movzx eax, word [0x402e3e]
xor eax, 0x74
mov word [ebp - 0x1d2], ax
movzx eax, word [0x402e40]
xor eax, 0x74
mov word [ebp - 0x1d0], ax
xor eax, eax
mov word [ebp - 0x1ce], ax
xor edx, edx
mov ax, word [ebp - 0x1d8]
nop
mov ax, word [ebp + edx*2 - 0x1d8]
movzx ecx, ax
mov eax, dword [ebp - 0x1dc]
movzx eax, ax
xor eax, ecx
mov word [ebp + edx*2 - 0x1d8], ax
inc edx
cmp edx, 5
jb 0x44bfc0
mov edx, dword [0x4fba1c]
xor eax, eax
mov word [ebp - 0x1ce], ax
xor ebx, ebx
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x570], eax
mov eax, dword [edx + ebx*4]
test eax, eax
je 0x44c021
xor ecx, ecx
cmp word [eax], cx
je 0x44c021
nop
lea eax, [eax + 2]
inc ecx
cmp word [eax], 0
jne 0x44c010
test ecx, ecx
je 0x44c021
inc ebx
jmp 0x44c001
mov ecx, 0x800
call fcn.004bca70
mov esi, eax
mov dword [ebp - 0xc], esi
test esi, esi
je 0x44e51f
mov eax, dword [edi]
push 0x400
push esi
push 1
push edi
call dword [eax + 0x38]
test eax, eax
js 0x44e51f
mov dword [ebp - 0x210], 0x70
mov eax, 0x20
mov word [ebp - 0x20c], ax
mov ecx, 0x15
mov eax, 2
mov edx, 0x16
mov word [ebp - 0x20a], ax
mov word [ebp - 0x208], cx
mov word [ebp - 0x206], dx
mov word [ebp - 0x204], cx
mov word [ebp - 0x202], ax
mov eax, 0x1e
mov word [ebp - 0x200], cx
mov word [ebp - 0x1fe], ax
mov eax, 0x13
mov word [ebp - 0x1fc], ax
mov eax, 3
mov word [ebp - 0x1fa], cx
mov word [ebp - 0x1f8], ax
mov eax, 0x70
mov word [ebp - 0x1f6], ax
movzx eax, word [0x4025e0]
xor eax, 0x70
mov word [ebp - 0x1f4], ax
movzx eax, word [0x4025e2]
xor eax, 0x70
mov word [ebp - 0x1f2], ax
movzx eax, word [0x4025e4]
xor eax, 0x70
mov word [ebp - 0x1f0], ax
movzx eax, word [0x4025e6]
xor eax, 0x70
mov word [ebp - 0x1ee], ax
movzx eax, word [0x4025e8]
xor eax, 0x70
mov word [ebp - 0x1ec], ax
movzx eax, word [0x4025ea]
xor eax, 0x70
mov word [ebp - 0x1ea], ax
movzx eax, word [0x4025ec]
xor eax, 0x70
mov word [ebp - 0x1e8], ax
movzx eax, word [0x4025ee]
xor eax, 0x70
mov word [ebp - 0x1e6], ax
movzx eax, word [0x4025f0]
xor eax, 0x70
mov word [ebp - 0x1e4], ax
movzx eax, word [0x4025f2]
xor eax, 0x70
mov word [ebp - 0x1e2], ax
movzx eax, word [0x4025f4]
xor eax, 0x70
mov word [ebp - 0x1e0], ax
xor eax, eax
mov word [ebp - 0x1de], ax
xor edx, edx
mov ax, word [ebp - 0x20c]
mov ax, word [ebp + edx*2 - 0x20c]
movzx ecx, ax
mov eax, dword [ebp - 0x210]
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0x20c], cx
inc edx
cmp edx, 0x17
jb 0x44c1a1
mov edi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
xor eax, eax
mov word [ebp - 0x1de], ax
lea eax, [ebp - 0x20c]
push eax
push esi
call edi
test eax, eax
je 0x44e51f
mov eax, dword [0x4f3810]
test eax, eax
jne 0x44c1f9
call fcn.00411870
mov dword [0x4f3810], eax
mov ecx, dword [0x4f37d8]
test ecx, ecx
jne 0x44c212
mov ecx, eax
call fcn.004119b0
mov ecx, eax
mov dword [0x4f37d8], ecx
push 0
push esi
call ecx
mov dword [ebp - 0x250], 0x1e
mov eax, 0x4d
mov word [ebp - 0x24c], ax
mov edx, 0x7b
mov eax, 0x7d
mov ecx, 0x7a
mov word [ebp - 0x24a], ax
mov eax, 0x76
mov word [ebp - 0x248], ax
mov eax, 0x6b
mov word [ebp - 0x246], dx
mov word [ebp - 0x244], cx
mov word [ebp - 0x242], ax
mov eax, 0x72
mov word [ebp - 0x240], ax
mov eax, 0x4a
mov word [ebp - 0x23e], dx
mov word [ebp - 0x23c], cx
mov ecx, 0x6d
mov word [ebp - 0x23a], ax
mov eax, 0x7f
mov word [ebp - 0x238], ax
mov eax, 0x75
mov word [ebp - 0x236], cx
mov word [ebp - 0x234], ax
mov eax, 0x1e
mov word [ebp - 0x232], cx
mov word [ebp - 0x230], ax
movzx eax, word [0x402e5e]
xor eax, 0x1e
mov word [ebp - 0x22e], ax
movzx eax, word [0x402e60]
xor eax, 0x1e
mov word [ebp - 0x22c], ax
movzx eax, word [0x402e62]
xor eax, 0x1e
mov word [ebp - 0x22a], ax
movzx eax, word [0x402e64]
xor eax, 0x1e
mov word [ebp - 0x228], ax
movzx eax, word [0x402e66]
xor eax, 0x1e
mov word [ebp - 0x226], ax
movzx eax, word [0x402e68]
xor eax, 0x1e
mov word [ebp - 0x224], ax
movzx eax, word [0x402e6a]
xor eax, 0x1e
mov word [ebp - 0x222], ax
movzx eax, word [0x402e6c]
xor eax, 0x1e
mov word [ebp - 0x220], ax
movzx eax, word [0x402e6e]
xor eax, 0x1e
mov word [ebp - 0x21e], ax
movzx eax, word [0x402e70]
xor eax, 0x1e
mov word [ebp - 0x21c], ax
movzx eax, word [0x402e72]
xor eax, 0x1e
mov word [ebp - 0x21a], ax
movzx eax, word [0x402e74]
xor eax, 0x1e
mov word [ebp - 0x218], ax
movzx eax, word [0x402e76]
xor eax, 0x1e
mov word [ebp - 0x216], ax
movzx eax, word [0x402e78]
xor eax, 0x1e
mov word [ebp - 0x214], ax
xor eax, eax
mov word [ebp - 0x212], ax
xor edx, edx
mov ax, word [ebp - 0x24c]
nop word [eax + eax]
mov ax, word [ebp + edx*2 - 0x24c]
movzx ecx, ax
mov eax, dword [ebp - 0x250]
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0x24c], cx
inc edx
cmp edx, 0x1d
jb 0x44c3d0
xor eax, eax
mov word [ebp - 0x212], ax
lea eax, [ebp - 0x24c]
push eax
push esi
call edi
test eax, eax
je 0x44e51f
mov eax, dword [0x4f3810]
test eax, eax
jne 0x44c422
call fcn.00411870
mov dword [0x4f3810], eax
mov ecx, dword [0x4f37d8]
test ecx, ecx
jne 0x44c43b
mov ecx, eax
call fcn.004119b0
mov ecx, eax
mov dword [0x4f37d8], ecx
push 0
push esi
call ecx
mov eax, 0x67
mov edi, 0x70
mov word [ebp - 0x2f4], ax
mov ecx, 0x6f
mov eax, 0x5e
mov edx, 0x77
mov word [ebp - 0x2f2], ax
mov eax, 0x6e
mov word [ebp - 0x2f0], ax
mov eax, 0x73
mov word [ebp - 0x2ee], ax
mov eax, 0x80
mov word [ebp - 0x2ec], di
mov word [ebp - 0x2ea], cx
mov word [ebp - 0x2e8], ax
mov eax, 0x5f
mov word [ebp - 0x2e6], dx
mov word [ebp - 0x2e4], di
mov word [ebp - 0x2e2], cx
mov ecx, 0x76
mov word [ebp - 0x2e0], ax
mov eax, 0x6c
mov word [ebp - 0x2de], ax
mov eax, 0x7e
mov word [ebp - 0x2dc], ax
mov word [ebp - 0x2da], cx
mov word [ebp - 0x2d8], ax
mov eax, 0x39
mov word [ebp - 0x2d6], ax
mov eax, 0x83
mov word [ebp - 0x2d4], ax
mov eax, 0x78
mov word [ebp - 0x2d2], ax
mov eax, 0xb
mov word [ebp - 0x2d0], dx
mov word [ebp - 0x2ce], ax
movzx eax, word [0x402e88]
add eax, 0xb
mov word [ebp - 0x2cc], ax
movzx eax, word [0x402e8a]
add eax, 0xb
mov word [ebp - 0x2ca], ax
movzx eax, word [0x402e8c]
add eax, 0xb
mov word [ebp - 0x2c8], ax
movzx eax, word [0x402e8e]
add eax, 0xb
mov word [ebp - 0x2c6], ax
movzx eax, word [0x402e90]
add eax, 0xb
mov word [ebp - 0x2c4], ax
movzx eax, word [0x402e92]
add eax, 0xb
mov word [ebp - 0x2c2], ax
movzx eax, word [0x402e94]
add eax, 0xb
mov word [ebp - 0x2c0], ax
movzx eax, word [0x402e96]
add eax, 0xb
mov word [ebp - 0x2be], ax
movzx eax, word [0x402e98]
add eax, 0xb
mov word [ebp - 0x2bc], ax
movzx eax, word [0x402e9a]
add eax, 0xb
mov word [ebp - 0x2ba], ax
movzx eax, word [0x402e9c]
add eax, 0xb
mov word [ebp - 0x2b8], ax
movzx eax, word [0x402e9e]
add eax, 0xb
mov word [ebp - 0x2b6], ax
movzx eax, word [0x402ea0]
add eax, 0xb
mov word [ebp - 0x2b4], ax
movzx eax, word [0x402ea2]
add eax, 0xb
mov word [ebp - 0x2b2], ax
movzx eax, word [0x402ea4]
add eax, 0xb
mov word [ebp - 0x2b0], ax
movzx eax, word [0x402ea6]
add eax, 0xb
mov word [ebp - 0x2ae], ax
movzx eax, word [0x402ea8]
add eax, 0xb
mov word [ebp - 0x2ac], ax
movzx eax, word [0x402eaa]
add eax, 0xb
mov word [ebp - 0x2aa], ax
movzx eax, word [0x402eac]
add eax, 0xb
mov word [ebp - 0x2a8], ax
xor eax, eax
mov word [ebp - 0x2a6], ax
xor ecx, ecx
mov ax, word [ebp - 0x2f4]
mov ax, word [ebp + ecx*2 - 0x2f4]
movzx eax, ax
add eax, 0xfffffff5
mov word [ebp + ecx*2 - 0x2f4], ax
inc ecx
cmp ecx, 0x27
jb 0x44c671
lea edx, [ebp - 0x2f4]
mov ecx, edx
mov dword [ebp - 8], ecx
nop dword [eax + eax]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x44c6a0
sub edx, ecx
lea edi, [esi - 2]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x44c6b0
mov esi, dword [ebp - 8]
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 0
push 0x80
push 2
push 0
mov ecx, edx
and ecx, 3
push 0
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0xc]
push 0x40000000
push esi
call dword [sym.imp.KERNEL32.DLL_CreateFileW]
mov edi, eax
mov dword [ebp - 8], edi
cmp edi, 0xffffffff
je 0x44e522
mov eax, dword [0x4f3810]
test eax, eax
jne 0x44c70a
call fcn.00411870
mov dword [0x4f3810], eax
mov ecx, dword [0x4f3834]
test ecx, ecx
jne 0x44c723
mov ecx, eax
call fcn.00412690
mov ecx, eax
mov dword [0x4f3834], ecx
push 0
push edi
call ecx
lea eax, [ebp - 0x594]
push eax
call dword [sym.imp.KERNEL32.DLL_GetSystemTime]
mov ecx, 0x800
call fcn.004bca70
mov dword [ebp - 0x24], eax
test eax, eax
je 0x44e522
mov dword [ebp - 0x128], 0x2a
mov eax, dword [ebp - 0x128]
xor eax, 0x25
mov word [ebp - 0x124], ax
mov eax, dword [ebp - 0x128]
inc eax
xor eax, 0x30
mov word [ebp - 0x122], ax
mov eax, dword [ebp - 0x128]
add eax, 2
xor eax, 0x34
mov word [ebp - 0x120], ax
mov eax, dword [ebp - 0x128]
add eax, 3
xor eax, 0x64
mov word [ebp - 0x11e], ax
mov eax, dword [ebp - 0x128]
add eax, 4
xor eax, 0x2d
mov word [ebp - 0x11c], ax
mov eax, dword [ebp - 0x128]
add eax, 5
xor eax, 0x25
mov word [ebp - 0x11a], ax
mov eax, dword [ebp - 0x128]
add eax, 6
xor eax, 0x30
mov word [ebp - 0x118], ax
mov eax, dword [ebp - 0x128]
add eax, 7
xor eax, 0x32
mov word [ebp - 0x116], ax
mov eax, dword [ebp - 0x128]
add eax, 8
xor eax, 0x64
mov word [ebp - 0x114], ax
mov eax, dword [ebp - 0x128]
add eax, 9
xor eax, 0x2d
mov word [ebp - 0x112], ax
mov eax, dword [ebp - 0x128]
add eax, 0xa
xor eax, 0x25
mov word [ebp - 0x110], ax
mov eax, dword [ebp - 0x128]
add eax, 0xb
xor eax, 0x30
mov word [ebp - 0x10e], ax
mov eax, dword [ebp - 0x128]
add eax, 0xc
xor eax, 0x32
mov word [ebp - 0x10c], ax
mov eax, dword [ebp - 0x128]
add eax, 0xd
xor eax, 0x64
mov word [ebp - 0x10a], ax
mov eax, dword [ebp - 0x128]
add eax, 0xe
xor eax, 0x20
mov word [ebp - 0x108], ax
mov eax, dword [ebp - 0x128]
add eax, 0xf
xor eax, 0x25
mov word [ebp - 0x106], ax
mov eax, dword [ebp - 0x128]
add eax, 0x10
xor eax, 0x30
mov word [ebp - 0x104], ax
mov eax, dword [ebp - 0x128]
add eax, 0x11
xor eax, 0x32
mov word [ebp - 0x102], ax
mov eax, dword [ebp - 0x128]
add eax, 0x12
xor eax, 0x64
mov word [ebp - 0x100], ax
mov eax, dword [ebp - 0x128]
add eax, 0x13
xor eax, 0x3a
mov word [ebp - 0xfe], ax
mov eax, dword [ebp - 0x128]
add eax, 0x14
xor eax, 0x25
mov word [ebp - 0xfc], ax
mov eax, dword [ebp - 0x128]
add eax, 0x15
xor eax, 0x30
mov word [ebp - 0xfa], ax
mov eax, dword [ebp - 0x128]
add eax, 0x16
xor eax, 0x32
mov word [ebp - 0xf8], ax
mov eax, dword [ebp - 0x128]
add eax, 0x17
xor eax, 0x64
mov word [ebp - 0xf6], ax
mov eax, dword [ebp - 0x128]
add eax, 0x18
xor eax, 0x3a
mov word [ebp - 0xf4], ax
mov eax, dword [ebp - 0x128]
add eax, 0x19
xor eax, 0x25
mov word [ebp - 0xf2], ax
mov eax, dword [ebp - 0x128]
add eax, 0x1a
xor eax, 0x30
mov word [ebp - 0xf0], ax
mov eax, dword [ebp - 0x128]
add eax, 0x1b
xor eax, 0x32
mov word [ebp - 0xee], ax
mov eax, dword [ebp - 0x128]
add eax, 0x1c
xor eax, 0x64
mov word [ebp - 0xec], ax
mov eax, dword [ebp - 0x128]
add eax, 0x1d
mov word [ebp - 0xea], ax
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402640]
add eax, 0x1e
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xe8], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402642]
add eax, 0x1f
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xe6], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402644]
add eax, 0x20
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xe4], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402646]
add eax, 0x21
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xe2], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402648]
add eax, 0x22
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xe0], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x40264a]
add eax, 0x23
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xde], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x40264c]
add eax, 0x24
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xdc], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x40264e]
add eax, 0x25
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xda], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402650]
add eax, 0x26
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xd8], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402652]
add eax, 0x27
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xd6], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402654]
add eax, 0x28
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xd4], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402656]
add eax, 0x29
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xd2], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402658]
add eax, 0x2a
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xd0], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x40265a]
add eax, 0x2b
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xce], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x40265c]
add eax, 0x2c
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xcc], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x40265e]
add eax, 0x2d
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xca], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402660]
add eax, 0x2e
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xc8], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402662]
add eax, 0x2f
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xc6], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402664]
add eax, 0x30
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xc4], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402666]
add eax, 0x31
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xc2], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402668]
add eax, 0x32
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xc0], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x40266a]
add eax, 0x33
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xbe], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x40266c]
add eax, 0x34
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xbc], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x40266e]
add eax, 0x35
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xba], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402670]
add eax, 0x36
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xb8], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402672]
add eax, 0x37
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xb6], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402674]
add eax, 0x38
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xb4], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402676]
add eax, 0x39
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xb2], cx
mov eax, dword [ebp - 0x128]
movzx ecx, word [0x402678]
add eax, 0x3a
movzx eax, ax
xor ecx, eax
xor eax, eax
mov word [ebp - 0xb0], cx
xor edx, edx
mov word [ebp - 0xae], ax
mov ax, word [ebp - 0x124]
nop dword [eax]
nop dword [eax + eax]
mov ax, word [ebp + edx*2 - 0x124]
mov ecx, dword [ebp - 0x128]
add ecx, edx
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0x124], cx
inc edx
cmp edx, 0x3b
jb 0x44ccd0
xor eax, eax
mov word [ebp - 0xae], ax
mov eax, dword [0x4f37a8]
test eax, eax
jne 0x44cd0f
call fcn.00411a80
mov dword [0x4f37a8], eax
mov ecx, dword [0x4f37b4]
test ecx, ecx
jne 0x44cd28
mov ecx, eax
call fcn.00411b20
mov ecx, eax
mov dword [0x4f37b4], ecx
movzx eax, word [ebp - 0x588]
push eax
movzx eax, word [ebp - 0x58a]
push eax
movzx eax, word [ebp - 0x58c]
push eax
movzx eax, word [ebp - 0x58e]
push eax
movzx eax, word [ebp - 0x592]
push eax
movzx eax, word [ebp - 0x594]
push eax
lea eax, [ebp - 0x124]
push eax
push dword [ebp - 0x24]
call ecx
mov ecx, dword [0x4f37b0]
add esp, 0x20
test ecx, ecx
jne 0x44cd7e
call fcn.00411bf0
mov ecx, eax
mov dword [0x4f37b0], ecx
mov eax, dword [0x4f3808]
test eax, eax
jne 0x44cd91
call fcn.00411c90
mov dword [0x4f3808], eax
lea ecx, [ebp - 0x5a8]
push ecx
call eax
test eax, eax
js 0x44e522
mov ecx, 0x800
call fcn.004bca70
mov dword [ebp - 0x14], eax
test eax, eax
je 0x44e522
mov eax, dword [0x4f37b0]
test eax, eax
jne 0x44cdca
call fcn.00411bf0
mov dword [0x4f37b0], eax
mov ecx, dword [0x4f37f0]
test ecx, ecx
jne 0x44cde3
mov ecx, eax
call fcn.00411d60
mov ecx, eax
mov dword [0x4f37f0], ecx
push 0x400
push dword [ebp - 0x14]
lea eax, [ebp - 0x5a8]
push eax
call ecx
test eax, eax
je 0x44e522
mov ecx, 0x1fffe
call fcn.004bca70
mov dword [ebp - 4], eax
test eax, eax
je 0x44e522
mov ecx, ebx
shl ecx, 0xb
add ecx, 2
call fcn.004bca70
mov dword [ebp - 0x20], eax
test eax, eax
je 0x44e522
mov edx, dword [ebp + 0xc]
xor ecx, ecx
mov eax, edx
test edx, edx
je 0x44ce4a
cmp word [edx], cx
je 0x44ce4a
nop dword [eax]
lea eax, [eax + 2]
inc ecx
cmp word [eax], 0
jne 0x44ce40
shl ecx, 0xb
add ecx, 2
call fcn.004bca70
mov dword [ebp - 0x18], eax
test eax, eax
je 0x44e522
mov ecx, 0x1fffe
call fcn.004bca70
mov dword [ebp - 0x10], eax
test eax, eax
je 0x44e555
mov ecx, 0x800
call fcn.004bca70
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x44e522
xor edi, edi
xor esi, esi
nop
mov eax, dword [0x4fba1c]
cmp dword [esi + eax], 0
je 0x44d598
mov ecx, 0x800
call fcn.004bca70
mov dword [ebp - 0x1b4], eax
test eax, eax
je 0x44d589
mov eax, dword [0x4fba1c]
push dword [esi + eax]
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x1b4]
push 0x400
push eax
call fcn.004bcff0
mov eax, dword [ebp - 0x20]
add esp, 0x10
lea eax, [eax + edi*2]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1b0], 9
mov eax, dword [ebp - 0x1b0]
xor eax, 0x43
mov word [ebp - 0x1ac], ax
mov eax, dword [ebp - 0x1b0]
inc eax
xor eax, 0x3a
mov word [ebp - 0x1aa], ax
mov eax, dword [ebp - 0x1b0]
add eax, 2
xor eax, 0x5c
mov word [ebp - 0x1a8], ax
mov eax, dword [ebp - 0x1b0]
add eax, 3
xor eax, 0x57
mov word [ebp - 0x1a6], ax
mov eax, dword [ebp - 0x1b0]
add eax, 4
xor eax, 0x69
mov word [ebp - 0x1a4], ax
mov eax, dword [ebp - 0x1b0]
add eax, 5
xor eax, 0x6e
mov word [ebp - 0x1a2], ax
mov eax, dword [ebp - 0x1b0]
add eax, 6
xor eax, 0x64
mov word [ebp - 0x1a0], ax
mov eax, dword [ebp - 0x1b0]
add eax, 7
xor eax, 0x6f
mov word [ebp - 0x19e], ax
mov eax, dword [ebp - 0x1b0]
add eax, 8
xor eax, 0x77
mov word [ebp - 0x19c], ax
mov eax, dword [ebp - 0x1b0]
add eax, 9
xor eax, 0x73
mov word [ebp - 0x19a], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0xa
xor eax, 0x5c
mov word [ebp - 0x198], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0xb
xor eax, 0x53
mov word [ebp - 0x196], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0xc
xor eax, 0x79
mov word [ebp - 0x194], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0xd
xor eax, 0x73
mov word [ebp - 0x192], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0xe
xor eax, 0x74
mov word [ebp - 0x190], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0xf
xor eax, 0x65
mov word [ebp - 0x18e], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0x10
xor eax, 0x6d
mov word [ebp - 0x18c], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0x11
xor eax, 0x33
mov word [ebp - 0x18a], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0x12
xor eax, 0x32
mov word [ebp - 0x188], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0x13
xor eax, 0x5c
mov word [ebp - 0x186], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0x14
xor eax, 0x74
mov word [ebp - 0x184], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0x15
xor eax, 0x61
mov word [ebp - 0x182], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0x16
xor eax, 0x73
mov word [ebp - 0x180], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0x17
xor eax, 0x6b
mov word [ebp - 0x17e], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0x18
xor eax, 0x6b
mov word [ebp - 0x17c], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0x19
xor eax, 0x69
mov word [ebp - 0x17a], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0x1a
xor eax, 0x6c
mov word [ebp - 0x178], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0x1b
xor eax, 0x6c
mov word [ebp - 0x176], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0x1c
xor eax, 0x2e
mov word [ebp - 0x174], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0x1d
xor eax, 0x65
mov word [ebp - 0x172], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0x1e
xor eax, 0x78
mov word [ebp - 0x170], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0x1f
xor eax, 0x65
mov word [ebp - 0x16e], ax
mov eax, dword [ebp - 0x1b0]
add eax, 0x20
mov word [ebp - 0x16c], ax
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402eca]
add eax, 0x21
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x16a], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402ecc]
add eax, 0x22
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x168], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402ece]
add eax, 0x23
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x166], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402ed0]
add eax, 0x24
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x164], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402ed2]
add eax, 0x25
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x162], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402ed4]
add eax, 0x26
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x160], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402ed6]
add eax, 0x27
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x15e], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402ed8]
add eax, 0x28
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x15c], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402eda]
add eax, 0x29
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x15a], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402edc]
add eax, 0x2a
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x158], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402ede]
add eax, 0x2b
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x156], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402ee0]
add eax, 0x2c
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x154], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402ee2]
add eax, 0x2d
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x152], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402ee4]
add eax, 0x2e
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x150], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402ee6]
add eax, 0x2f
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x14e], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402ee8]
add eax, 0x30
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x14c], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402eea]
add eax, 0x31
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x14a], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402eec]
add eax, 0x32
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x148], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402eee]
add eax, 0x33
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x146], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402ef0]
add eax, 0x34
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x144], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402ef2]
add eax, 0x35
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x142], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402ef4]
add eax, 0x36
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x140], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402ef6]
add eax, 0x37
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x13e], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402ef8]
add eax, 0x38
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x13c], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402efa]
add eax, 0x39
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x13a], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402efc]
add eax, 0x3a
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x138], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402efe]
add eax, 0x3b
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x136], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402f00]
add eax, 0x3c
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x134], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402f02]
add eax, 0x3d
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x132], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402f04]
add eax, 0x3e
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x130], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402f06]
add eax, 0x3f
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x12e], cx
mov eax, dword [ebp - 0x1b0]
movzx ecx, word [0x402f08]
add eax, 0x40
movzx eax, ax
xor ecx, eax
xor eax, eax
mov word [ebp - 0x12a], ax
mov word [ebp - 0x12c], cx
mov ax, word [ebp - 0x1ac]
xor eax, eax
nop word [eax + eax]
mov cx, word [ebp + eax*2 - 0x1ac]
mov edx, dword [ebp - 0x1b0]
add edx, eax
movzx ecx, cx
xor edx, ecx
mov word [ebp + eax*2 - 0x1ac], dx
inc eax
cmp eax, 0x41
jb 0x44d4f0
push dword [ebp - 0x1b4]
xor eax, eax
mov word [ebp - 0x12a], ax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x51c]
push eax
mov eax, ebx
shl eax, 0xa
push eax
lea eax, [ebp - 0x1c0]
push eax
call fcn.004bcff0
add esp, 0x14
push dword [ebp - 0x1c0]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
add edi, eax
mov dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x584], eax
test eax, eax
je 0x44d589
push 0x8000
lea eax, [ebp - 0x524]
push eax
lea eax, [ebp - 0x584]
push eax
push 0xffffffffffffffff
call fcn.0042a5f0
call eax
add esi, 4
cmp esi, 0xfa0
jb 0x44ce90
lea eax, [ebp - 0x1b8]
push eax
push 0x2ce
push 0x4e4570
call fcn.00459630
test eax, eax
je 0x44e517
mov dword [ebp - 0x3e4], 0xb
mov ecx, 0x2e
mov word [ebp - 0x3e0], cx
mov edx, 0x3b
mov word [ebp - 0x3de], dx
mov ebx, 0x39
mov word [ebp - 0x3dc], bx
mov eax, 0x53
mov word [ebp - 0x3da], ax
mov word [ebp - 0x3d8], cx
mov word [ebp - 0x3d6], dx
mov word [ebp - 0x3d4], bx
mov word [ebp - 0x3d2], ax
mov word [ebp - 0x3d0], cx
mov word [ebp - 0x3ce], dx
mov word [ebp - 0x3cc], bx
mov word [ebp - 0x3ca], ax
mov word [ebp - 0x3c8], cx
mov word [ebp - 0x3c6], dx
mov word [ebp - 0x3c4], bx
mov word [ebp - 0x3c2], ax
mov word [ebp - 0x3c0], cx
mov word [ebp - 0x3be], dx
mov word [ebp - 0x3bc], bx
mov word [ebp - 0x3ba], ax
mov word [ebp - 0x3b8], cx
mov word [ebp - 0x3b6], dx
mov word [ebp - 0x3b4], bx
mov word [ebp - 0x3b2], ax
mov word [ebp - 0x3b0], cx
mov word [ebp - 0x3ae], dx
mov word [ebp - 0x3ac], bx
mov word [ebp - 0x3aa], ax
mov eax, 0xb
mov word [ebp - 0x3a8], ax
movzx eax, word [0x402f06]
xor eax, 0xb
mov word [ebp - 0x3a6], ax
movzx eax, word [0x402f08]
xor eax, 0xb
mov word [ebp - 0x3a4], ax
movzx eax, word [0x402f0a]
xor eax, 0xb
mov word [ebp - 0x3a2], ax
movzx eax, word [0x402f0c]
xor eax, 0xb
mov word [ebp - 0x3a0], ax
movzx eax, word [0x402f0e]
xor eax, 0xb
mov word [ebp - 0x39e], ax
movzx eax, word [0x402f10]
xor eax, 0xb
mov word [ebp - 0x39c], ax
movzx eax, word [0x402f12]
xor eax, 0xb
mov word [ebp - 0x39a], ax
movzx eax, word [0x402f14]
xor eax, 0xb
mov word [ebp - 0x398], ax
movzx eax, word [0x402f16]
xor eax, 0xb
mov word [ebp - 0x396], ax
movzx eax, word [0x402f18]
xor eax, 0xb
mov word [ebp - 0x394], ax
movzx eax, word [0x402f1a]
xor eax, 0xb
mov word [ebp - 0x392], ax
movzx eax, word [0x402f1c]
xor eax, 0xb
mov word [ebp - 0x390], ax
movzx eax, word [0x402f1e]
xor eax, 0xb
mov word [ebp - 0x38e], ax
movzx eax, word [0x402f20]
xor eax, 0xb
mov word [ebp - 0x38c], ax
movzx eax, word [0x402f22]
xor eax, 0xb
mov word [ebp - 0x38a], ax
movzx eax, word [0x402f24]
xor eax, 0xb
mov word [ebp - 0x388], ax
movzx eax, word [0x402f26]
xor eax, 0xb
mov word [ebp - 0x386], ax
movzx eax, word [0x402f28]
xor eax, 0xb
mov word [ebp - 0x384], ax
movzx eax, word [0x402f2a]
xor eax, 0xb
mov word [ebp - 0x382], ax
movzx eax, word [0x402f2c]
xor eax, 0xb
mov word [ebp - 0x380], ax
movzx eax, word [0x402f2e]
xor eax, 0xb
mov word [ebp - 0x37e], ax
movzx eax, word [0x402f30]
xor eax, 0xb
mov word [ebp - 0x37c], ax
movzx eax, word [0x402f32]
xor eax, 0xb
mov word [ebp - 0x37a], ax
movzx eax, word [0x402f34]
xor eax, 0xb
mov word [ebp - 0x378], ax
movzx eax, word [0x402f36]
xor eax, 0xb
mov word [ebp - 0x376], ax
movzx eax, word [0x402f38]
xor eax, 0xb
mov word [ebp - 0x374], ax
movzx eax, word [0x402f3a]
xor eax, 0xb
mov word [ebp - 0x372], ax
movzx eax, word [0x402f3c]
xor eax, 0xb
mov word [ebp - 0x370], ax
xor eax, eax
mov word [ebp - 0x36e], ax
xor edx, edx
mov ax, word [ebp - 0x3e0]
mov ax, word [ebp + edx*2 - 0x3e0]
movzx ecx, ax
mov eax, dword [ebp - 0x3e4]
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0x3e0], cx
inc edx
cmp edx, ebx
jb 0x44d892
xor eax, eax
mov word [ebp - 0x36e], ax
mov eax, dword [0x4f37a8]
test eax, eax
jne 0x44d8d1
call fcn.00411a80
mov dword [0x4f37a8], eax
mov ecx, dword [0x4f37b4]
test ecx, ecx
jne 0x44d8ea
mov ecx, eax
call fcn.00411b20
mov ecx, eax
mov dword [0x4f37b4], ecx
movzx eax, byte [0x4e550d]
push eax
movzx eax, byte [0x4e5507]
push eax
movzx eax, byte [0x4e5514]
push eax
movzx eax, byte [0x4e5502]
push eax
movzx eax, byte [0x4e5505]
push eax
movzx eax, byte [0x4e5508]
push eax
movzx eax, byte [0x4e5511]
push eax
lea eax, [ebp - 0x3e0]
push eax
lea eax, [ebp - 0x5c8]
push eax
call ecx
mov dword [ebp - 0x2a4], 0x5c
mov eax, 0x12
mov word [ebp - 0x2a0], ax
mov ecx, 8
mov word [ebp - 0x29e], cx
mov eax, 0x7c
mov word [ebp - 0x29c], ax
add esp, 0x24
mov eax, 0x1d
mov word [ebp - 0x29a], ax
mov eax, 9
mov word [ebp - 0x298], ax
mov eax, 0x14
mov word [ebp - 0x296], cx
mov word [ebp - 0x294], ax
mov eax, 0x13
mov word [ebp - 0x292], ax
mov eax, 0xe
mov word [ebp - 0x290], ax
mov eax, 0x15
mov word [ebp - 0x28e], ax
mov eax, 5
mov word [ebp - 0x28c], cx
mov word [ebp - 0x28a], ax
xor eax, eax
mov word [ebp - 0x288], ax
mov eax, 0xf
mov word [ebp - 0x286], ax
mov eax, 0x25
mov word [ebp - 0x284], ax
mov eax, 0x2f
mov word [ebp - 0x282], ax
mov eax, 0x28
mov word [ebp - 0x280], ax
mov eax, 0x31
mov word [ebp - 0x27e], bx
mov word [ebp - 0x27c], ax
mov eax, 0x5c
mov word [ebp - 0x27a], ax
movzx eax, word [0x402f30]
xor eax, 0x5c
mov word [ebp - 0x278], ax
movzx eax, word [0x402f32]
xor eax, 0x5c
mov word [ebp - 0x276], ax
movzx eax, word [0x402f34]
xor eax, 0x5c
mov word [ebp - 0x274], ax
movzx eax, word [0x402f36]
xor eax, 0x5c
mov word [ebp - 0x272], ax
movzx eax, word [0x402f38]
xor eax, 0x5c
mov word [ebp - 0x270], ax
movzx eax, word [0x402f3a]
xor eax, 0x5c
mov word [ebp - 0x26e], ax
movzx eax, word [0x402f3c]
xor eax, 0x5c
mov word [ebp - 0x26c], ax
movzx eax, word [0x402f3e]
xor eax, 0x5c
mov word [ebp - 0x26a], ax
movzx eax, word [0x402f40]
xor eax, 0x5c
mov word [ebp - 0x268], ax
movzx eax, word [0x402f42]
xor eax, 0x5c
mov word [ebp - 0x266], ax
movzx eax, word [0x402f44]
xor eax, 0x5c
mov word [ebp - 0x264], ax
movzx eax, word [0x402f46]
xor eax, 0x5c
mov word [ebp - 0x262], ax
movzx eax, word [0x402f48]
xor eax, 0x5c
mov word [ebp - 0x260], ax
movzx eax, word [0x402f4a]
xor eax, 0x5c
mov word [ebp - 0x25e], ax
movzx eax, word [0x402f4c]
xor eax, 0x5c
mov word [ebp - 0x25c], ax
movzx eax, word [0x402f4e]
xor eax, 0x5c
mov word [ebp - 0x25a], ax
movzx eax, word [0x402f50]
xor eax, 0x5c
mov word [ebp - 0x258], ax
movzx eax, word [0x402f52]
xor eax, 0x5c
mov word [ebp - 0x256], ax
movzx eax, word [0x402f54]
xor eax, 0x5c
mov word [ebp - 0x254], ax
xor eax, eax
mov word [ebp - 0x252], ax
xor edx, edx
mov ax, word [ebp - 0x2a0]
mov ax, word [ebp + edx*2 - 0x2a0]
movzx ecx, ax
mov eax, dword [ebp - 0x2a4]
movzx eax, ax
xor eax, ecx
mov word [ebp + edx*2 - 0x2a0], ax
inc edx
cmp edx, 0x27
jb 0x44db72
xor eax, eax
mov word [ebp - 0x252], ax
mov dword [ebp - 0xac], 0x65
mov eax, dword [ebp - 0xac]
xor eax, 0x4e
mov word [ebp - 0xa8], ax
mov eax, dword [ebp - 0xac]
inc eax
xor eax, 0x54
mov word [ebp - 0xa6], ax
mov eax, dword [ebp - 0xac]
add eax, 2
xor eax, 0x20
mov word [ebp - 0xa4], ax
mov eax, dword [ebp - 0xac]
add eax, 3
xor eax, 0x41
mov word [ebp - 0xa2], ax
mov eax, dword [ebp - 0xac]
add eax, 4
xor eax, 0x55
mov word [ebp - 0xa0], ax
mov eax, dword [ebp - 0xac]
add eax, 5
xor eax, 0x54
mov word [ebp - 0x9e], ax
mov eax, dword [ebp - 0xac]
add eax, 6
xor eax, 0x48
mov word [ebp - 0x9c], ax
mov eax, dword [ebp - 0xac]
add eax, 7
xor eax, 0x4f
mov word [ebp - 0x9a], ax
mov eax, dword [ebp - 0xac]
add eax, 8
xor eax, 0x52
mov word [ebp - 0x98], ax
mov eax, dword [ebp - 0xac]
add eax, 9
xor eax, 0x49
mov word [ebp - 0x96], ax
mov eax, dword [ebp - 0xac]
add eax, 0xa
xor eax, 0x54
mov word [ebp - 0x94], ax
mov eax, dword [ebp - 0xac]
add eax, 0xb
xor eax, 0x59
mov word [ebp - 0x92], ax
mov eax, dword [ebp - 0xac]
add eax, 0xc
xor eax, 0x5c
mov word [ebp - 0x90], ax
mov eax, dword [ebp - 0xac]
add eax, 0xd
xor eax, 0x53
mov word [ebp - 0x8e], ax
mov eax, dword [ebp - 0xac]
add eax, 0xe
xor eax, 0x79
mov word [ebp - 0x8c], ax
mov eax, dword [ebp - 0xac]
add eax, 0xf
xor eax, 0x73
mov word [ebp - 0x8a], ax
mov eax, dword [ebp - 0xac]
add eax, 0x10
xor eax, 0x74
mov word [ebp - 0x88], ax
mov eax, dword [ebp - 0xac]
add eax, 0x11
xor eax, 0x65
mov word [ebp - 0x86], ax
mov eax, dword [ebp - 0xac]
add eax, 0x12
xor eax, 0x6d
mov word [ebp - 0x84], ax
mov eax, dword [ebp - 0xac]
add eax, 0x13
mov word [ebp - 0x82], ax
mov eax, dword [ebp - 0xac]
movzx ecx, word [0x402f30]
add eax, 0x14
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x80], cx
mov eax, dword [ebp - 0xac]
movzx ecx, word [0x402f32]
add eax, 0x15
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x7e], cx
mov eax, dword [ebp - 0xac]
movzx ecx, word [0x402f34]
add eax, 0x16
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x7c], cx
mov eax, dword [ebp - 0xac]
movzx ecx, word [0x402f36]
add eax, 0x17
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x7a], cx
mov eax, dword [ebp - 0xac]
movzx ecx, word [0x402f38]
add eax, 0x18
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x78], cx
mov eax, dword [ebp - 0xac]
movzx ecx, word [0x402f3a]
add eax, 0x19
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x76], cx
mov eax, dword [ebp - 0xac]
movzx ecx, word [0x402f3c]
add eax, 0x1a
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x74], cx
mov eax, dword [ebp - 0xac]
movzx ecx, word [0x402f3e]
add eax, 0x1b
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x72], cx
mov eax, dword [ebp - 0xac]
movzx ecx, word [0x402f40]
add eax, 0x1c
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x70], cx
mov eax, dword [ebp - 0xac]
movzx ecx, word [0x402f42]
add eax, 0x1d
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x6e], cx
mov eax, dword [ebp - 0xac]
movzx ecx, word [0x402f44]
add eax, 0x1e
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x6c], cx
mov eax, dword [ebp - 0xac]
movzx ecx, word [0x402f46]
add eax, 0x1f
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x6a], cx
mov eax, dword [ebp - 0xac]
movzx ecx, word [0x402f48]
add eax, 0x20
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x68], cx
mov eax, dword [ebp - 0xac]
add eax, 0x21
movzx eax, ax
movzx ecx, word [0x402f4a]
xor ecx, eax
mov word [ebp - 0x66], cx
mov eax, dword [ebp - 0xac]
movzx ecx, word [0x402f4c]
add eax, 0x22
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x64], cx
mov eax, dword [ebp - 0xac]
movzx ecx, word [0x402f4e]
add eax, 0x23
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x62], cx
mov eax, dword [ebp - 0xac]
movzx ecx, word [0x402f50]
add eax, 0x24
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x60], cx
mov eax, dword [ebp - 0xac]
movzx ecx, word [0x402f52]
add eax, 0x25
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x5e], cx
mov eax, dword [ebp - 0xac]
movzx ecx, word [0x402f54]
add eax, 0x26
movzx eax, ax
xor ecx, eax
xor eax, eax
mov word [ebp - 0x5c], cx
xor edx, edx
mov word [ebp - 0x5a], ax
mov ax, word [ebp - 0xa8]
nop word [eax + eax]
mov ax, word [ebp + edx*2 - 0xa8]
mov ecx, dword [ebp - 0xac]
add ecx, edx
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0xa8], cx
inc edx
cmp edx, 0x27
jb 0x44df10
push dword [ebp - 0x20]
mov edi, dword [ebp + 8]
xor eax, eax
push dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x24]
mov word [ebp - 0x5a], ax
lea eax, [ebp - 0x2a0]
push eax
push edi
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x5c8]
push eax
push dword [ebp - 0x14]
push ebx
push eax
push dword [ebp - 0x1b8]
lea eax, [ebp - 0x10]
push 0xffff
push eax
call fcn.004bcff0
add esp, 0x30
mov ecx, 0x800
call fcn.004bca70
mov esi, eax
test esi, esi
je 0x44e01b
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x1c4], eax
mov eax, edx
test edx, edx
je 0x44dfae
cmp word [edx], cx
je 0x44dfae
lea eax, [eax + 2]
inc ecx
cmp word [eax], 0
jne 0x44dfa4
push 0x402f30
push edx
lea eax, [ebp - 0x51c]
push eax
lea eax, [ecx + 0x400]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.004bcff0
mov eax, dword [ebp - 0x1c4]
add esp, 0x14
test eax, eax
je 0x44dfef
xor ecx, ecx
cmp word [eax], cx
je 0x44dfef
cmp word [eax + 2], 0
lea eax, [eax + 2]
lea ecx, [ecx + 1]
jne 0x44dfe2
push 0x8000
lea eax, [ebp - 0x580]
mov dword [ebp - 0x57c], esi
push eax
lea eax, [ebp - 0x57c]
mov dword [ebp - 0x580], 0
push eax
push 0xffffffffffffffff
call fcn.0042a5f0
call eax
mov edx, dword [ebp - 0x10]
xor ecx, ecx
mov eax, edx
test eax, eax
je 0x44e03a
cmp word [edx], cx
je 0x44e03a
nop dword [eax + eax]
lea eax, [eax + 2]
inc ecx
cmp word [eax], 0
jne 0x44e030
lea eax, [edx + ecx*2]
mov esi, 0x70
mov dword [ebp - 0x574], eax
mov edx, 0xd
mov dword [ebp - 0x36c], 0x28
mov ecx, 0x18
mov word [ebp - 0x368], dx
mov eax, 0x1a
mov word [ebp - 0x366], cx
mov word [ebp - 0x364], ax
mov word [ebp - 0x362], si
mov word [ebp - 0x360], dx
mov word [ebp - 0x35e], cx
mov word [ebp - 0x35c], ax
mov word [ebp - 0x35a], si
mov word [ebp - 0x358], dx
mov word [ebp - 0x356], cx
mov word [ebp - 0x354], ax
mov word [ebp - 0x352], si
mov word [ebp - 0x350], dx
mov word [ebp - 0x34e], cx
mov word [ebp - 0x34c], ax
mov word [ebp - 0x34a], si
mov word [ebp - 0x348], dx
mov word [ebp - 0x346], cx
mov word [ebp - 0x344], ax
mov word [ebp - 0x342], si
mov word [ebp - 0x340], dx
mov word [ebp - 0x33e], cx
mov word [ebp - 0x33c], ax
mov word [ebp - 0x33a], si
mov word [ebp - 0x338], dx
mov word [ebp - 0x336], cx
mov word [ebp - 0x334], ax
mov eax, 0x28
mov word [ebp - 0x332], si
mov word [ebp - 0x330], ax
movzx eax, word [0x402f06]
xor eax, 0x28
mov word [ebp - 0x32e], ax
movzx eax, word [0x402f08]
xor eax, 0x28
mov word [ebp - 0x32c], ax
movzx eax, word [0x402f0a]
xor eax, 0x28
mov word [ebp - 0x32a], ax
movzx eax, word [0x402f0c]
xor eax, 0x28
mov word [ebp - 0x328], ax
movzx eax, word [0x402f0e]
xor eax, 0x28
mov word [ebp - 0x326], ax
movzx eax, word [0x402f10]
xor eax, 0x28
mov word [ebp - 0x324], ax
movzx eax, word [0x402f12]
xor eax, 0x28
mov word [ebp - 0x322], ax
movzx eax, word [0x402f14]
xor eax, 0x28
mov word [ebp - 0x320], ax
movzx eax, word [0x402f16]
xor eax, 0x28
mov word [ebp - 0x31e], ax
movzx eax, word [0x402f18]
xor eax, 0x28
mov word [ebp - 0x31c], ax
movzx eax, word [0x402f1a]
xor eax, 0x28
mov word [ebp - 0x31a], ax
movzx eax, word [0x402f1c]
xor eax, 0x28
mov word [ebp - 0x318], ax
movzx eax, word [0x402f1e]
xor eax, 0x28
mov word [ebp - 0x316], ax
movzx eax, word [0x402f20]
xor eax, 0x28
mov word [ebp - 0x314], ax
movzx eax, word [0x402f22]
xor eax, 0x28
mov word [ebp - 0x312], ax
movzx eax, word [0x402f24]
xor eax, 0x28
mov word [ebp - 0x310], ax
movzx eax, word [0x402f26]
xor eax, 0x28
mov word [ebp - 0x30e], ax
movzx eax, word [0x402f28]
xor eax, 0x28
mov word [ebp - 0x30c], ax
movzx eax, word [0x402f2a]
xor eax, 0x28
mov word [ebp - 0x30a], ax
movzx eax, word [0x402f2c]
xor eax, 0x28
mov word [ebp - 0x308], ax
movzx eax, word [0x402f2e]
xor eax, 0x28
mov word [ebp - 0x306], ax
movzx eax, word [0x402f30]
xor eax, 0x28
mov word [ebp - 0x304], ax
movzx eax, word [0x402f32]
xor eax, 0x28
mov word [ebp - 0x302], ax
movzx eax, word [0x402f34]
xor eax, 0x28
mov word [ebp - 0x300], ax
movzx eax, word [0x402f36]
xor eax, 0x28
mov word [ebp - 0x2fe], ax
movzx eax, word [0x402f38]
xor eax, 0x28
mov word [ebp - 0x2fc], ax
movzx eax, word [0x402f3a]
xor eax, 0x28
mov word [ebp - 0x2fa], ax
movzx eax, word [0x402f3c]
xor eax, 0x28
mov word [ebp - 0x2f8], ax
xor eax, eax
mov word [ebp - 0x2f6], ax
xor edx, edx
mov ax, word [ebp - 0x368]
nop
mov ax, word [ebp + edx*2 - 0x368]
movzx ecx, ax
mov eax, dword [ebp - 0x36c]
movzx eax, ax
xor eax, ecx
mov word [ebp + edx*2 - 0x368], ax
inc edx
cmp edx, 0x39
jb 0x44e320
xor eax, eax
mov word [ebp - 0x2f6], ax
mov eax, dword [0x4f37a8]
test eax, eax
jne 0x44e360
call fcn.00411a80
mov dword [0x4f37a8], eax
mov ecx, dword [0x4f37b4]
test ecx, ecx
jne 0x44e379
mov ecx, eax
call fcn.00411b20
mov ecx, eax
mov dword [0x4f37b4], ecx
movzx eax, byte [0x4e5512]
push eax
movzx eax, byte [0x4e5514]
push eax
movzx eax, byte [0x4e550c]
push eax
movzx eax, byte [0x4e5501]
push eax
movzx eax, byte [0x4e5505]
push eax
movzx eax, byte [0x4e5509]
push eax
movzx eax, byte [0x4e5504]
push eax
lea eax, [ebp - 0x368]
push eax
lea eax, [ebp - 0x5e8]
push eax
call ecx
mov eax, dword [ebp - 0x578]
add esp, 0x24
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push eax
push edi
push eax
lea eax, [ebp - 0x5e8]
push eax
push dword [ebp - 0x14]
push ebx
push eax
push dword [ebp - 0x1b8]
lea eax, [ebp - 0x574]
push 0xffff
push eax
call fcn.004bcff0
add esp, 0x30
lea eax, [ebp - 0x1c8]
push eax
push 0x7f
push 0x4e4840
call fcn.00459630
test eax, eax
je 0x44e517
push dword [ebp - 0x10]
lea eax, [ebp - 4]
push dword [ebp - 0x1c8]
push 0xffff
push eax
call fcn.004bcff0
mov ecx, dword [ebp - 4]
add esp, 0x10
mov eax, ecx
xor esi, esi
test eax, eax
je 0x44e44a
cmp word [ecx], si
je 0x44e44a
nop
lea eax, [eax + 2]
inc esi
cmp word [eax], 0
jne 0x44e440
mov eax, dword [0x4f3810]
test eax, eax
jne 0x44e460
call fcn.00411870
mov ecx, dword [ebp - 4]
mov dword [0x4f3810], eax
mov edx, dword [0x4f37a4]
test edx, edx
jne 0x44e47c
mov ecx, eax
call fcn.00411e30
mov ecx, dword [ebp - 4]
mov edx, eax
mov dword [0x4f37a4], edx
push 0
push 0
push 0
push 0
push esi
push ecx
push 0
push 0xfde9
call edx
mov edi, eax
test edi, edi
jle 0x44e517
mov ecx, edi
call fcn.004bca70
mov ebx, eax
mov dword [ebp - 0x1cc], ebx
test ebx, ebx
je 0x44e517
mov eax, dword [0x4f3810]
test eax, eax
jne 0x44e4bf
call fcn.00411870
mov dword [0x4f3810], eax
mov ecx, dword [0x4f37a4]
test ecx, ecx
jne 0x44e4d8
mov ecx, eax
call fcn.00411e30
mov ecx, eax
mov dword [0x4f37a4], ecx
push 0
push 0
push edi
push ebx
push esi
push dword [ebp - 4]
push 0
push 0xfde9
call ecx
push 0
lea eax, [ebp - 0x570]
push eax
push edi
mov edi, dword [ebp - 8]
push ebx
push edi
call dword [sym.imp.KERNEL32.DLL_WriteFile]
mov esi, dword [ebp - 0xc]
xor ecx, ecx
test eax, eax
mov eax, 1
cmovne ecx, eax
mov dword [ebp - 0x1bc], ecx
jmp 0x44e522
mov esi, dword [ebp - 0xc]
mov edi, dword [ebp - 8]
jmp 0x44e522
or edi, 0xffffffff
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x44e555
mov dword [ebp - 0x564], eax
lea eax, [ebp - 0x568]
push 0x8000
push eax
lea eax, [ebp - 0x564]
mov dword [ebp - 0x568], 0
push eax
push 0xffffffffffffffff
call fcn.0042a5f0
call eax
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x44e588
mov dword [ebp - 0x55c], eax
lea eax, [ebp - 0x560]
push 0x8000
push eax
lea eax, [ebp - 0x55c]
mov dword [ebp - 0x560], 0
push eax
push 0xffffffffffffffff
call fcn.0042a5f0
call eax
mov eax, dword [ebp - 4]
test eax, eax
je 0x44e5bb
mov dword [ebp - 0x554], eax
lea eax, [ebp - 0x558]
push 0x8000
push eax
lea eax, [ebp - 0x554]
mov dword [ebp - 0x558], 0
push eax
push 0xffffffffffffffff
call fcn.0042a5f0
call eax
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x44e5ee
mov dword [ebp - 0x528], eax
lea eax, [ebp - 0x56c]
push 0x8000
push eax
lea eax, [ebp - 0x528]
mov dword [ebp - 0x56c], 0
push eax
push 0xffffffffffffffff
call fcn.0042a5f0
call eax
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x44e621
mov dword [ebp - 0x530], eax
lea eax, [ebp - 0x52c]
push 0x8000
push eax
lea eax, [ebp - 0x530]
mov dword [ebp - 0x52c], 0
push eax
push 0xffffffffffffffff
call fcn.0042a5f0
call eax
mov eax, dword [ebp - 0x1cc]
test eax, eax
je 0x44e657
mov dword [ebp - 0x538], eax
lea eax, [ebp - 0x534]
push 0x8000
push eax
lea eax, [ebp - 0x538]
mov dword [ebp - 0x534], 0
push eax
push 0xffffffffffffffff
call fcn.0042a5f0
call eax
test esi, esi
je 0x44e687
push 0x8000
lea eax, [ebp - 0x53c]
mov dword [ebp - 0x540], esi
push eax
lea eax, [ebp - 0x540]
mov dword [ebp - 0x53c], 0
push eax
push 0xffffffffffffffff
call fcn.0042a5f0
call eax
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x44e6ba
mov dword [ebp - 0x548], eax
lea eax, [ebp - 0x544]
push 0x8000
push eax
lea eax, [ebp - 0x548]
mov dword [ebp - 0x544], 0
push eax
push 0xffffffffffffffff
call fcn.0042a5f0
call eax
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x44e6ed
mov dword [ebp - 0x550], eax
lea eax, [ebp - 0x54c]
push 0x8000
push eax
lea eax, [ebp - 0x550]
mov dword [ebp - 0x54c], 0
push eax
push 0xffffffffffffffff
call fcn.0042a5f0
call eax
cmp edi, 0xffffffff
je 0x44e6fa
push edi
call fcn.00411330
call eax
mov eax, dword [ebp - 0x1bc]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8