Function at 0x4109f0
Capabilities:
Copy file
Create directory
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x5077b9
push eax
mov eax, 0x1044
mov dword fs:[0], esp
call fcn.004e0840
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 4], 0
lea eax, [ebp - 0xf4c]
push 0x104
push 0
push eax
call fcn.004e1ab0
mov esi, dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea eax, [ebp - 0xf4c]
add esp, 0xc
push eax
push 0
push 0
push 0x1a
push 0
call esi
push 0x104
lea eax, [ebp - 0x1050]
push 0
push eax
call fcn.004e1ab0
add esp, 0xc
lea eax, [ebp - 0x1050]
push eax
push 0
push 0
push 0x1c
push 0
call esi
lea ecx, [ebp - 0x11d]
mov dword [ebp - 0x11d], 0x859d89bb
mov dword [ebp - 0x119], 0xb28e8586
mov dword [ebp - 0x115], 0x93929fa3
mov dword [ebp - 0x111], 0x82a6d49f
mov dword [ebp - 0x10d], 0x9d988a98
mov word [ebp - 0x109], 0x9e
mov byte [ebp - 0x107], 1
call fcn.00465a40
lea eax, [ebp - 0x908]
mov ecx, eax
mov dword [ebp - 0x14], eax
call fcn.00402f30
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x11d]
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x410ae0
sub ecx, edx
lea eax, [ebp - 0x11d]
push ecx
push eax
lea ecx, [ebp - 0x908]
call fcn.00402ea0
mov byte [ebp - 4], 3
lea eax, [ebp - 0x908]
push eax
lea edx, [ebp - 0xf4c]
lea ecx, [ebp - 0xa28]
call fcn.0046d240
add esp, 4
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x908]
call fcn.00402c80
mov byte [ebp - 4], 5
lea eax, [ebp - 0x908]
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xa28]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test al, al
je 0x410c59
lea ecx, [ebp - 0x1a7]
mov dword [ebp - 0x1a7], 0x859da9bb
mov dword [ebp - 0x1a3], 0x8e8586
mov byte [ebp - 0x19f], 1
call fcn.0040ac80
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x920]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x920]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x410bc5
push 0
lea ecx, [ebp - 0x920]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x410c4a
sub esp, 0x18
lea eax, [ebp - 0x920]
mov ecx, esp
mov dword [ebp - 0x14], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xa
sub esp, 0x18
lea eax, [ebp - 0xa28]
mov dword [ebp - 0x10], esp
mov ecx, esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 9
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x410c0e
mov byte [edi], 1
jmp 0x410c4a
lea ecx, [ebp - 0x920]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xc80]
call fcn.00402b80
mov byte [ebp - 4], 0xc
mov dl, 1
push 0
lea ecx, [ebp - 0xc80]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xc80]
call fcn.00402b10
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x920]
call fcn.00402b10
lea ecx, [ebp - 0xb3]
mov dword [ebp - 0xb3], 0x8f85adbb
mov dword [ebp - 0xaf], 0x9b9f9888
mov dword [ebp - 0xab], 0x9386ac82
mov dword [ebp - 0xa7], 0x8290989f
mov word [ebp - 0xa3], 0x84
mov byte [ebp - 0xa1], 1
call fcn.00465a10
lea eax, [ebp - 0x600]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.00402f30
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xb3]
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x410cc0
sub ecx, edx
lea eax, [ebp - 0xb3]
push ecx
push eax
lea ecx, [ebp - 0x600]
call fcn.00402ea0
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x600]
push eax
lea edx, [ebp - 0xf4c]
lea ecx, [ebp - 0xa10]
call fcn.0046d240
add esp, 4
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x600]
call fcn.00402c80
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x600]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xa10]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
je 0x410e3c
lea ecx, [ebp - 0x24e]
mov dword [ebp - 0x24e], 0x8f85adbb
mov dword [ebp - 0x24a], 0x9b9f9888
mov word [ebp - 0x246], 0x82
mov byte [ebp - 0x244], 1
call fcn.00409930
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x618]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x618]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x410da8
push 0
lea ecx, [ebp - 0x618]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x410e2d
sub esp, 0x18
lea eax, [ebp - 0x618]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x16
sub esp, 0x18
lea eax, [ebp - 0xa10]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], 0x15
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x410df1
mov byte [edi], 1
jmp 0x410e2d
lea ecx, [ebp - 0x618]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xc98]
call fcn.00402b80
mov byte [ebp - 4], 0x18
mov dl, 1
push 0
lea ecx, [ebp - 0xc98]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xc98]
call fcn.00402b10
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x618]
call fcn.00402b10
lea ecx, [ebp - 0x106]
mov dword [ebp - 0x106], 0x8591adbb
mov dword [ebp - 0x102], 0xb29e998f
mov dword [ebp - 0xfe], 0x969e888a
mov dword [ebp - 0xfa], 0x81db8786
mov dword [ebp - 0xf6], 0x9f959496
mov word [ebp - 0xf2], 0x8f
mov byte [ebp - 0xf0], 1
call fcn.00465a40
lea eax, [ebp - 0x630]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.00402f30
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x106]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x410ea6
sub ecx, edx
lea eax, [ebp - 0x106]
push ecx
push eax
lea ecx, [ebp - 0x630]
call fcn.00402ea0
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x630]
push eax
lea edx, [ebp - 0xf4c]
lea ecx, [ebp - 0x9f8]
call fcn.0046d240
add esp, 4
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x630]
call fcn.00402c80
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x630]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x9f8]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
je 0x411019
lea ecx, [ebp - 0x19e]
mov dword [ebp - 0x19e], 0x8591adbb
mov dword [ebp - 0x19a], 0x9e998f
mov byte [ebp - 0x196], 1
call fcn.0040ac80
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x648]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x648]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x410f85
push 0
lea ecx, [ebp - 0x648]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x41100a
sub esp, 0x18
lea eax, [ebp - 0x648]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x22
sub esp, 0x18
lea eax, [ebp - 0x9f8]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x23
mov byte [ebp - 4], 0x21
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x410fce
mov byte [edi], 1
jmp 0x41100a
lea ecx, [ebp - 0x648]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xcb0]
call fcn.00402b80
mov byte [ebp - 4], 0x24
mov dl, 1
push 0
lea ecx, [ebp - 0xcb0]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xcb0]
call fcn.00402b10
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x648]
call fcn.00402b10
lea ecx, [ebp - 0xef]
mov dword [ebp - 0xef], 0x8f85adbb
mov dword [ebp - 0xeb], 0x9b9f9888
mov dword [ebp - 0xe7], 0xa6bddd82
mov dword [ebp - 0xe3], 0x9782a8b0
mov dword [ebp - 0xdf], 0x8e9c949b
mov word [ebp - 0xdb], 0x88
mov byte [ebp - 0xd9], 1
call fcn.00465a40
lea eax, [ebp - 0x660]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.00402f30
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xef]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411083
sub ecx, edx
lea eax, [ebp - 0xef]
push ecx
push eax
lea ecx, [ebp - 0x660]
call fcn.00402ea0
mov byte [ebp - 4], 0x27
lea eax, [ebp - 0x660]
push eax
lea edx, [ebp - 0xf4c]
lea ecx, [ebp - 0x9e0]
call fcn.0046d240
add esp, 4
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x660]
call fcn.00402c80
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x660]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x9e0]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
je 0x411202
lea ecx, [ebp - 0x344]
mov dword [ebp - 0x344], 0x8f85adbb
mov dword [ebp - 0x340], 0x9b9f9888
mov dword [ebp - 0x33c], 0xb1a5bc82
mov word [ebp - 0x338], 0x100
call fcn.0040ed40
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x678]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x678]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x41116e
push 0
lea ecx, [ebp - 0x678]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x4111f3
sub esp, 0x18
lea eax, [ebp - 0x678]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x2e
sub esp, 0x18
lea eax, [ebp - 0x9e0]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x2f
mov byte [ebp - 4], 0x2d
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x4111b7
mov byte [edi], 1
jmp 0x4111f3
lea ecx, [ebp - 0x678]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xcc8]
call fcn.00402b80
mov byte [ebp - 4], 0x30
mov dl, 1
push 0
lea ecx, [ebp - 0xcc8]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xcc8]
call fcn.00402b10
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x678]
call fcn.00402b10
lea ecx, [ebp - 0x55]
mov dword [ebp - 0x55], 0x8486a5bb
mov dword [ebp - 0x51], 0xb2829e8e
mov dword [ebp - 0x4d], 0x9e9d9198
mov dword [ebp - 0x49], 0x868096
mov byte [ebp - 0x45], 1
call fcn.004657d0
lea eax, [ebp - 0x690]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.00402f30
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x55]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411244
sub ecx, edx
lea eax, [ebp - 0x55]
push ecx
push eax
lea ecx, [ebp - 0x690]
call fcn.00402ea0
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0x690]
push eax
lea edx, [ebp - 0xf4c]
lea ecx, [ebp - 0x9c8]
call fcn.0046d240
add esp, 4
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x690]
call fcn.00402c80
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x690]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x9c8]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
je 0x4113b4
lea ecx, [ebp - 0x195]
mov dword [ebp - 0x195], 0x8486a5bb
mov dword [ebp - 0x191], 0x829e8e
mov byte [ebp - 0x18d], 1
call fcn.0040ac80
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x6a8]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x6a8]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x411320
push 0
lea ecx, [ebp - 0x6a8]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x4113a5
sub esp, 0x18
lea eax, [ebp - 0x6a8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x3a
sub esp, 0x18
lea eax, [ebp - 0x9c8]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x3b
mov byte [ebp - 4], 0x39
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x411369
mov byte [edi], 1
jmp 0x4113a5
lea ecx, [ebp - 0x6a8]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xaa0]
call fcn.00402b80
mov byte [ebp - 4], 0x3c
mov dl, 1
push 0
lea ecx, [ebp - 0xaa0]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xaa0]
call fcn.00402b10
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x6a8]
call fcn.00402b10
lea ecx, [ebp - 0x7a]
mov dword [ebp - 0x7a], 0x87868bbb
mov dword [ebp - 0x76], 0x8c8480c5
mov dword [ebp - 0x72], 0x8b85828a
mov dword [ebp - 0x6e], 0x8e949edd
mov word [ebp - 0x6a], 0x8f
mov byte [ebp - 0x68], 1
call fcn.00465a10
lea eax, [ebp - 0x6c0]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.00402f30
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x7a]
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411400
sub ecx, edx
lea eax, [ebp - 0x7a]
push ecx
push eax
lea ecx, [ebp - 0x6c0]
call fcn.00402ea0
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x6c0]
push eax
lea edx, [ebp - 0xf4c]
lea ecx, [ebp - 0x588]
call fcn.0046d240
add esp, 4
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x6c0]
call fcn.00402c80
mov byte [ebp - 4], 0x41
lea eax, [ebp - 0x6c0]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x588]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
je 0x411a38
lea ecx, [ebp - 0x362]
mov dword [ebp - 0x362], 0x9288a2bb
mov dword [ebp - 0x35e], 0x87a1cc93
mov dword [ebp - 0x35a], 0x8683958d
mov word [ebp - 0x356], 0x8a
mov byte [ebp - 0x354], 1
call fcn.00409ab0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5e8]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x5e8]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x4114ef
push 0
lea ecx, [ebp - 0x5e8]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x411a29
lea ecx, [ebp - 0x2db]
mov dword [ebp - 0x2db], 0x8e87a1bb
mov dword [ebp - 0x2d7], 0x8a88948e
mov dword [ebp - 0x2d3], 0x100b2ab
call fcn.0040ed10
push eax
lea edx, [ebp - 0x588]
lea ecx, [ebp - 0xe00]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x46
mov ecx, eax
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
mov bl, al
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0xe00]
call fcn.00402b10
test bl, bl
je 0x411690
lea ecx, [ebp - 0x2e7]
mov dword [ebp - 0x2e7], 0x8e87a1bb
mov dword [ebp - 0x2e3], 0x8a88948e
mov dword [ebp - 0x2df], 0x100b2ab
call fcn.0040ed10
push eax
lea edx, [ebp - 0x5e8]
lea ecx, [ebp - 0x6d8]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x6d8]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x4115c8
push 0
lea ecx, [ebp - 0x6d8]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x411681
sub esp, 0x18
lea eax, [ebp - 0x6d8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x48
sub esp, 0x18
lea ecx, [ebp - 0x2f3]
mov dword [ebp - 0x2f3], 0x8e87a1bb
mov dword [ebp - 0x2ef], 0x8a88948e
mov esi, esp
mov dword [ebp - 0x2eb], 0x100b2ab
mov dword [ebp - 0x14], esp
call fcn.0040ed10
push eax
lea edx, [ebp - 0x588]
mov ecx, esi
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x49
mov byte [ebp - 4], 0x47
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x41163f
mov byte [edi], 1
jmp 0x41167b
lea ecx, [ebp - 0x6d8]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xab8]
call fcn.00402b80
mov byte [ebp - 4], 0x4a
mov dl, 1
push 0
lea ecx, [ebp - 0xab8]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xab8]
call fcn.00402b10
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x6d8]
call fcn.00402b10
lea ecx, [ebp - 0x402]
mov dword [ebp - 0x402], 0x8986a4bb
mov dword [ebp - 0x3fe], 0xbdcd808a
mov dword [ebp - 0x3fa], 0x93839f9b
mov dword [ebp - 0x3f6], 0x1009194
call fcn.0040ee60
push eax
lea edx, [ebp - 0x588]
lea ecx, [ebp - 0xe18]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x4b
mov ecx, eax
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
mov bl, al
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0xe18]
call fcn.00402b10
test bl, bl
je 0x41184f
lea ecx, [ebp - 0x3b2]
mov dword [ebp - 0x3b2], 0x8986a4bb
mov dword [ebp - 0x3ae], 0xbdcd808a
mov dword [ebp - 0x3aa], 0x93839f9b
mov dword [ebp - 0x3a6], 0x1009194
call fcn.0040ee60
push eax
lea edx, [ebp - 0x5e8]
lea ecx, [ebp - 0x6f0]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x6f0]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x41177d
push 0
lea ecx, [ebp - 0x6f0]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x411840
sub esp, 0x18
lea eax, [ebp - 0x6f0]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x4d
sub esp, 0x18
lea ecx, [ebp - 0x3a2]
mov dword [ebp - 0x3a2], 0x8986a4bb
mov dword [ebp - 0x39e], 0xbdcd808a
mov esi, esp
mov dword [ebp - 0x39a], 0x93839f9b
mov dword [ebp - 0x396], 0x1009194
mov dword [ebp - 0x14], esp
call fcn.0040ee60
push eax
lea edx, [ebp - 0x588]
mov ecx, esi
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x4e
mov byte [ebp - 4], 0x4c
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x4117fe
mov byte [edi], 1
jmp 0x41183a
lea ecx, [ebp - 0x6f0]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xad0]
call fcn.00402b80
mov byte [ebp - 4], 0x4f
mov dl, 1
push 0
lea ecx, [ebp - 0xad0]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0xad0]
call fcn.00402b10
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x6f0]
call fcn.00402b10
lea ecx, [ebp - 0x4b5]
mov dword [ebp - 0x4b5], 0x998cbbbb
mov dword [ebp - 0x4b1], 0x80828598
mov dword [ebp - 0x4ad], 0x9d85a3cf
mov dword [ebp - 0x4a9], 0x93929581
mov word [ebp - 0x4a5], 0x100
call fcn.0040ec80
push eax
lea edx, [ebp - 0x588]
lea ecx, [ebp - 0xe30]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x50
mov ecx, eax
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
mov bl, al
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0xe30]
call fcn.00402b10
test bl, bl
je 0x411a29
lea ecx, [ebp - 0x4a3]
mov dword [ebp - 0x4a3], 0x998cbbbb
mov dword [ebp - 0x49f], 0x80828598
mov dword [ebp - 0x49b], 0x9d85a3cf
mov dword [ebp - 0x497], 0x93929581
mov word [ebp - 0x493], 0x100
call fcn.0040ec80
push eax
lea edx, [ebp - 0x5e8]
lea ecx, [ebp - 0x708]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x708]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x41194e
push 0
lea ecx, [ebp - 0x708]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x411a1a
sub esp, 0x18
lea eax, [ebp - 0x708]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x52
sub esp, 0x18
lea ecx, [ebp - 0x491]
mov dword [ebp - 0x491], 0x998cbbbb
mov dword [ebp - 0x48d], 0x80828598
mov esi, esp
mov dword [ebp - 0x489], 0x9d85a3cf
mov dword [ebp - 0x485], 0x93929581
mov word [ebp - 0x481], 0x100
mov dword [ebp - 0x14], esp
call fcn.0040ec80
push eax
lea edx, [ebp - 0x588]
mov ecx, esi
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x53
mov byte [ebp - 4], 0x51
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x4119d8
mov byte [edi], 1
jmp 0x411a14
lea ecx, [ebp - 0x708]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xae8]
call fcn.00402b80
mov byte [ebp - 4], 0x54
mov dl, 1
push 0
lea ecx, [ebp - 0xae8]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0xae8]
call fcn.00402b10
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x708]
call fcn.00402b10
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x5e8]
call fcn.00402b10
lea ecx, [ebp - 0x4dd]
mov dword [ebp - 0x4dd], 0x9288a2bb
mov dword [ebp - 0x4d9], 0x81a1b093
mov dword [ebp - 0x4d5], 0xd29d918c
mov dword [ebp - 0x4d1], 0x849a80a0
mov dword [ebp - 0x4cd], 0x9c9f96
mov byte [ebp - 0x4c9], 1
call fcn.0040ee90
push eax
lea ecx, [ebp - 0xe48]
call fcn.00402b80
mov byte [ebp - 4], 0x55
lea edx, [ebp - 0xf4c]
push eax
lea ecx, [ebp - 0x9b0]
call fcn.0046d240
add esp, 4
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0xe48]
call fcn.00402b10
lea ecx, [ebp - 0x9b0]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
je 0x411bc7
lea ecx, [ebp - 0xc1]
mov dword [ebp - 0xc1], 0x9288a2bb
mov word [ebp - 0xbd], 0x93
mov byte [ebp - 0xbb], 1
call fcn.00409390
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x720]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x720]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x411b33
push 0
lea ecx, [ebp - 0x720]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x411bb8
sub esp, 0x18
lea eax, [ebp - 0x720]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x59
sub esp, 0x18
lea eax, [ebp - 0x9b0]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x5a
mov byte [ebp - 4], 0x58
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x411b7c
mov byte [edi], 1
jmp 0x411bb8
lea ecx, [ebp - 0x720]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xb00]
call fcn.00402b80
mov byte [ebp - 4], 0x5b
mov dl, 1
push 0
lea ecx, [ebp - 0xb00]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0xb00]
call fcn.00402b10
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x720]
call fcn.00402b10
lea ecx, [ebp - 0x4f7]
mov dword [ebp - 0x4f7], 0x8386abbb
mov dword [ebp - 0x4f3], 0x87808385
mov dword [ebp - 0x4ef], 0x9b9eb3b3
mov dword [ebp - 0x4eb], 0x9f989b9d
mov dword [ebp - 0x4e7], 0x96988fab
mov dword [ebp - 0x4e3], 0x8d899997
mov word [ebp - 0x4df], 0x100
call fcn.00409960
push eax
lea ecx, [ebp - 0xce0]
call fcn.00402b80
mov byte [ebp - 4], 0x5c
lea edx, [ebp - 0x1050]
push eax
lea ecx, [ebp - 0x998]
call fcn.0046d240
add esp, 4
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0xce0]
call fcn.00402b10
lea ecx, [ebp - 0x998]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
je 0x411d65
lea ecx, [ebp - 0x1fd]
mov dword [ebp - 0x1fd], 0x8386abbb
mov dword [ebp - 0x1f9], 0x87808385
mov word [ebp - 0x1f5], 0x100
call fcn.0040ece0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x738]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x738]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x411cd1
push 0
lea ecx, [ebp - 0x738]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x411d56
sub esp, 0x18
lea eax, [ebp - 0x738]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x60
sub esp, 0x18
lea eax, [ebp - 0x998]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x61
mov byte [ebp - 4], 0x5f
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x411d1a
mov byte [edi], 1
jmp 0x411d56
lea ecx, [ebp - 0x738]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xb18]
call fcn.00402b80
mov byte [ebp - 4], 0x62
mov dl, 1
push 0
lea ecx, [ebp - 0xb18]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0xb18]
call fcn.00402b10
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x738]
call fcn.00402b10
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0x18c], 0x879ba9bb
mov dword [ebp - 0x188], 0x949e84
mov byte [ebp - 0x184], 1
call fcn.0040ac80
push eax
lea ecx, [ebp - 0xcf8]
call fcn.00402b80
mov byte [ebp - 4], 0x63
lea edx, [ebp - 0xf4c]
push eax
lea ecx, [ebp - 0x980]
call fcn.0046d240
add esp, 4
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0xcf8]
call fcn.00402b10
lea ecx, [ebp - 0x980]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
je 0x411ed7
lea ecx, [ebp - 0x183]
mov dword [ebp - 0x183], 0x879ba9bb
mov dword [ebp - 0x17f], 0x949e84
mov byte [ebp - 0x17b], 1
call fcn.0040ac80
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x750]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0x750]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x411e43
push 0
lea ecx, [ebp - 0x750]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x411ec8
sub esp, 0x18
lea eax, [ebp - 0x750]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x67
sub esp, 0x18
lea eax, [ebp - 0x980]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x68
mov byte [ebp - 4], 0x66
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x411e8c
mov byte [edi], 1
jmp 0x411ec8
lea ecx, [ebp - 0x750]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xb30]
call fcn.00402b80
mov byte [ebp - 4], 0x69
mov dl, 1
push 0
lea ecx, [ebp - 0xb30]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0xb30]
call fcn.00402b10
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x750]
call fcn.00402b10
lea ecx, [ebp - 0x21b]
mov dword [ebp - 0x21b], 0x8688bfbb
mov dword [ebp - 0x217], 0xb9998987
mov dword [ebp - 0x213], 0x9090838e
mov dword [ebp - 0x20f], 0x9ab6a89a
mov dword [ebp - 0x20b], 0x8e979d9e
mov dword [ebp - 0x207], 0x929caba7
mov dword [ebp - 0x203], 0x71756593
mov word [ebp - 0x1ff], 0x100
call fcn.00465320
lea eax, [ebp - 0x768]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.00402f30
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0x21b]
lea edx, [ecx + 1]
mov edi, edi
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411f50
sub ecx, edx
lea eax, [ebp - 0x21b]
push ecx
push eax
lea ecx, [ebp - 0x768]
call fcn.00402ea0
mov byte [ebp - 4], 0x6c
lea eax, [ebp - 0x768]
push eax
lea edx, [ebp - 0xf4c]
lea ecx, [ebp - 0x968]
call fcn.0046d240
add esp, 4
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x768]
call fcn.00402c80
mov byte [ebp - 4], 0x6e
lea eax, [ebp - 0x768]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x968]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
je 0x4120c3
lea ecx, [ebp - 0x17a]
mov dword [ebp - 0x17a], 0x9988bfbb
mov dword [ebp - 0x176], 0x848e8a
mov byte [ebp - 0x172], 1
call fcn.0040ac80
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x780]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0x780]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x41202f
push 0
lea ecx, [ebp - 0x780]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x4120b4
sub esp, 0x18
lea eax, [ebp - 0x780]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x73
sub esp, 0x18
lea eax, [ebp - 0x968]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x74
mov byte [ebp - 4], 0x72
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x412078
mov byte [edi], 1
jmp 0x4120b4
lea ecx, [ebp - 0x780]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xb48]
call fcn.00402b80
mov byte [ebp - 4], 0x75
mov dl, 1
push 0
lea ecx, [ebp - 0xb48]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0xb48]
call fcn.00402b10
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x780]
call fcn.00402b10
lea ecx, [ebp - 0x8d]
mov dword [ebp - 0x8d], 0x9e80aabb
mov dword [ebp - 0x89], 0xb29f8983
mov dword [ebp - 0x85], 0x9a85998d
mov dword [ebp - 0x81], 0x92db8696
mov word [ebp - 0x7d], 0x95
mov byte [ebp - 0x7b], 1
call fcn.00465a10
lea eax, [ebp - 0x798]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.00402f30
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x8d]
lea edx, [ecx + 1]
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412120
sub ecx, edx
lea eax, [ebp - 0x8d]
push ecx
push eax
lea ecx, [ebp - 0x798]
call fcn.00402ea0
mov byte [ebp - 4], 0x78
lea eax, [ebp - 0x798]
push eax
lea edx, [ebp - 0xf4c]
lea ecx, [ebp - 0x950]
call fcn.0046d240
add esp, 4
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0x798]
call fcn.00402c80
mov byte [ebp - 4], 0x7a
lea eax, [ebp - 0x798]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0x7a
sub esp, 0x18
lea eax, [ebp - 0x950]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x7e
mov byte [ebp - 4], 0x7a
call fcn.0040b2b0
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
add esp, 0x18
test al, al
je 0x4122de
lea ecx, [ebp - 0x171]
mov dword [ebp - 0x171], 0x9e80aabb
mov dword [ebp - 0x16d], 0x9f8983
mov byte [ebp - 0x169], 1
call fcn.0040ac80
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x7b0]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x7b0]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x412217
push 0
lea ecx, [ebp - 0x7b0]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x4122cf
lea ecx, [ebp - 0x2ff]
mov dword [ebp - 0x2ff], 0x9e808abb
mov dword [ebp - 0x2fb], 0xc09f8983
mov dword [ebp - 0x2f7], 0x100928b
call fcn.0040ed10
push eax
lea edx, [ebp - 0x7b0]
lea ecx, [ebp - 0xd10]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x80
mov ecx, eax
call fcn.004687e0
lea ecx, [ebp - 0x950]
mov esi, eax
call fcn.004687e0
push 0
push esi
push eax
call ebx
mov esi, eax
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0xd10]
call fcn.00402b10
test esi, esi
je 0x41228d
mov byte [edi], 1
jmp 0x4122c9
lea ecx, [ebp - 0x7b0]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xb60]
call fcn.00402b80
mov byte [ebp - 4], 0x81
mov dl, 1
push 0
lea ecx, [ebp - 0xb60]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0xb60]
call fcn.00402b10
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0x7b0]
call fcn.00402b10
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0xd8], 0x8f85adbb
mov dword [ebp - 0xd4], 0x819f9888
mov dword [ebp - 0xd0], 0x8190b381
mov dword [ebp - 0xcc], 0x9782a89b
mov dword [ebp - 0xc8], 0x8e9c949b
mov word [ebp - 0xc4], 0x88
mov byte [ebp - 0xc2], 1
call fcn.00465a40
lea eax, [ebp - 0xa40]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.00402f30
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0xd8]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412348
sub ecx, edx
lea eax, [ebp - 0xd8]
push ecx
push eax
lea ecx, [ebp - 0xa40]
call fcn.00402ea0
mov byte [ebp - 4], 0x84
lea eax, [ebp - 0xa40]
push eax
lea edx, [ebp - 0xf4c]
lea ecx, [ebp - 0x938]
call fcn.0046d240
add esp, 4
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0xa40]
call fcn.00402b10
lea ecx, [ebp - 0x938]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
je 0x4124c0
lea ecx, [ebp - 0x353]
mov dword [ebp - 0x353], 0x8f85adbb
mov dword [ebp - 0x34f], 0x819f9888
mov dword [ebp - 0x34b], 0x8190b381
mov word [ebp - 0x347], 0x9b
mov byte [ebp - 0x345], 1
call fcn.00409ab0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x7c8]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x7c8]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x412429
push 0
lea ecx, [ebp - 0x7c8]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x4124b1
sub esp, 0x18
mov byte [ebp - 0x15], 0
lea eax, [ebp - 0x7c8]
mov dword [ebp - 0x10], esp
mov ecx, esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x88
sub esp, 0x18
lea eax, [ebp - 0x938]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x89
mov byte [ebp - 4], 0x87
mov cl, byte [ebp - 0x15]
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x412475
mov byte [edi], 1
jmp 0x4124b1
lea ecx, [ebp - 0x7c8]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xb78]
call fcn.00402b80
mov byte [ebp - 4], 0x8a
mov dl, 1
push 0
lea ecx, [ebp - 0xb78]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0xb78]
call fcn.00402b10
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x7c8]
call fcn.00402b10
lea ecx, [ebp - 0x156]
mov dword [ebp - 0x156], 0x8480aabb
mov dword [ebp - 0x152], 0x8b8e828a
mov dword [ebp - 0x14e], 0x828191b3
mov dword [ebp - 0x14a], 0x998187de
mov dword [ebp - 0x146], 0x90d79d85
mov dword [ebp - 0x142], 0x939388
mov byte [ebp - 0x13e], 1
call fcn.00465440
lea eax, [ebp - 0x7e0]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.00402f30
mov byte [ebp - 4], 0x8c
lea ecx, [ebp - 0x156]
lea edx, [ecx + 1]
jmp 0x412530
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412530
sub ecx, edx
lea eax, [ebp - 0x156]
push ecx
push eax
lea ecx, [ebp - 0x7e0]
call fcn.00402ea0
mov byte [ebp - 4], 0x8d
lea eax, [ebp - 0x7e0]
push eax
lea edx, [ebp - 0xf4c]
lea ecx, [ebp - 0xa88]
call fcn.0046d240
add esp, 4
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0x7e0]
call fcn.00402c80
mov byte [ebp - 4], 0x8f
lea eax, [ebp - 0x7e0]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0x8f
sub esp, 0x18
lea eax, [ebp - 0xa88]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0x93
mov byte [ebp - 4], 0x8f
call fcn.0040b2b0
add esp, 0x18
test al, al
je 0x4126fb
lea ecx, [ebp - 0x1e9]
mov dword [ebp - 0x1e9], 0x8480aabb
mov dword [ebp - 0x1e5], 0x8b8e828a
mov word [ebp - 0x1e1], 0x100
call fcn.0040ece0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x7f8]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0x7f8]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x412623
push 0
lea ecx, [ebp - 0x7f8]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x4126ec
lea ecx, [ebp - 0x413]
mov dword [ebp - 0x413], 0x9a9989bb
mov dword [ebp - 0x40f], 0x81999fc6
mov dword [ebp - 0x40b], 0x98df959d
mov dword [ebp - 0x407], 0x9b9b80
mov byte [ebp - 0x403], 1
call fcn.0040ecb0
push eax
lea edx, [ebp - 0x7f8]
lea ecx, [ebp - 0xd28]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x95
mov ecx, eax
call fcn.004687e0
lea ecx, [ebp - 0xa88]
mov esi, eax
call fcn.004687e0
push 0
push esi
push eax
call ebx
mov esi, eax
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0xd28]
call fcn.00402b10
test esi, esi
je 0x4126aa
mov byte [edi], 1
jmp 0x4126e6
lea ecx, [ebp - 0x7f8]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xb90]
call fcn.00402b80
mov byte [ebp - 4], 0x96
mov dl, 1
push 0
lea ecx, [ebp - 0xb90]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0xb90]
call fcn.00402b10
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x7f8]
call fcn.00402b10
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0xa0], 0x829dadbb
mov dword [ebp - 0x9c], 0x9b889e8e
mov dword [ebp - 0x98], 0x9386ac82
mov dword [ebp - 0x94], 0x8290989f
mov word [ebp - 0x90], 0x84
mov byte [ebp - 0x8e], 1
call fcn.00465a10
lea eax, [ebp - 0x810]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.00402f30
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0xa0]
lea edx, [ecx + 1]
jmp 0x412760
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412760
sub ecx, edx
lea eax, [ebp - 0xa0]
push ecx
push eax
lea ecx, [ebp - 0x810]
call fcn.00402ea0
mov byte [ebp - 4], 0x99
lea eax, [ebp - 0x810]
push eax
lea edx, [ebp - 0xf4c]
lea ecx, [ebp - 0xa70]
call fcn.0046d240
add esp, 4
mov byte [ebp - 4], 0x9c
lea ecx, [ebp - 0x810]
call fcn.00402c80
mov byte [ebp - 4], 0x9b
lea eax, [ebp - 0x810]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0x9b
lea ecx, [ebp - 0xa70]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
je 0x4128dc
lea ecx, [ebp - 0x259]
mov dword [ebp - 0x259], 0x829dadbb
mov dword [ebp - 0x255], 0x9b889e8e
mov word [ebp - 0x251], 0x82
mov byte [ebp - 0x24f], 1
call fcn.00409930
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x828]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0x9f
lea ecx, [ebp - 0x828]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x412848
push 0
lea ecx, [ebp - 0x828]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x4128cd
sub esp, 0x18
lea eax, [ebp - 0x828]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xa0
sub esp, 0x18
lea eax, [ebp - 0xa70]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xa1
mov byte [ebp - 4], 0x9f
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x412891
mov byte [edi], 1
jmp 0x4128cd
lea ecx, [ebp - 0x828]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xba8]
call fcn.00402b80
mov byte [ebp - 4], 0xa2
mov dl, 1
push 0
lea ecx, [ebp - 0xba8]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0x9f
lea ecx, [ebp - 0xba8]
call fcn.00402b10
mov byte [ebp - 4], 0x9b
lea ecx, [ebp - 0x828]
call fcn.00402b10
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x168], 0x8b9cafbb
mov dword [ebp - 0x164], 0x8c8899
mov byte [ebp - 0x160], 1
call fcn.0040ac80
push eax
lea ecx, [ebp - 0xbc0]
call fcn.00402b80
mov byte [ebp - 4], 0xa3
lea edx, [ebp - 0xf4c]
push eax
lea ecx, [ebp - 0x5a0]
call fcn.0046d240
add esp, 4
mov byte [ebp - 4], 0xa6
lea ecx, [ebp - 0xbc0]
call fcn.00402c80
mov byte [ebp - 4], 0xa5
lea eax, [ebp - 0xbc0]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0xa5
lea ecx, [ebp - 0x5a0]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
je 0x412f14
lea ecx, [ebp - 0x15f]
mov dword [ebp - 0x15f], 0x8b9cafbb
mov dword [ebp - 0x15b], 0x8c8899
mov byte [ebp - 0x157], 1
call fcn.0040ac80
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5b8]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xa9
lea ecx, [ebp - 0x5b8]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x4129cb
push 0
lea ecx, [ebp - 0x5b8]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x412f05
lea ecx, [ebp - 0x2c3]
mov dword [ebp - 0x2c3], 0x8e87a1bb
mov dword [ebp - 0x2bf], 0x8a88948e
mov dword [ebp - 0x2bb], 0x100b2ab
call fcn.0040ed10
push eax
lea edx, [ebp - 0x5a0]
lea ecx, [ebp - 0xd40]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xaa
mov ecx, eax
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
mov bl, al
mov byte [ebp - 4], 0xa9
lea ecx, [ebp - 0xd40]
call fcn.00402b10
test bl, bl
je 0x412b6c
lea ecx, [ebp - 0x2b7]
mov dword [ebp - 0x2b7], 0x8e87a1bb
mov dword [ebp - 0x2b3], 0x8a88948e
mov dword [ebp - 0x2af], 0x100b2ab
call fcn.0040ed10
push eax
lea edx, [ebp - 0x5b8]
lea ecx, [ebp - 0x840]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xab
lea ecx, [ebp - 0x840]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x412aa4
push 0
lea ecx, [ebp - 0x840]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x412b5d
sub esp, 0x18
lea eax, [ebp - 0x840]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xac
sub esp, 0x18
lea ecx, [ebp - 0x2ab]
mov dword [ebp - 0x2ab], 0x8e87a1bb
mov dword [ebp - 0x2a7], 0x8a88948e
mov esi, esp
mov dword [ebp - 0x2a3], 0x100b2ab
mov dword [ebp - 0x14], esp
call fcn.0040ed10
push eax
lea edx, [ebp - 0x5a0]
mov ecx, esi
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xad
mov byte [ebp - 4], 0xab
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x412b1b
mov byte [edi], 1
jmp 0x412b57
lea ecx, [ebp - 0x840]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xbd8]
call fcn.00402b80
mov byte [ebp - 4], 0xae
mov dl, 1
push 0
lea ecx, [ebp - 0xbd8]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0xab
lea ecx, [ebp - 0xbd8]
call fcn.00402b10
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov byte [ebp - 4], 0xa9
lea ecx, [ebp - 0x840]
call fcn.00402b10
lea ecx, [ebp - 0x392]
mov dword [ebp - 0x392], 0x8986a4bb
mov dword [ebp - 0x38e], 0xbdcd808a
mov dword [ebp - 0x38a], 0x93839f9b
mov dword [ebp - 0x386], 0x1009194
call fcn.0040ee60
push eax
lea edx, [ebp - 0x5a0]
lea ecx, [ebp - 0xd58]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xaf
mov ecx, eax
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
mov bl, al
mov byte [ebp - 4], 0xa9
lea ecx, [ebp - 0xd58]
call fcn.00402b10
test bl, bl
je 0x412d2b
lea ecx, [ebp - 0x382]
mov dword [ebp - 0x382], 0x8986a4bb
mov dword [ebp - 0x37e], 0xbdcd808a
mov dword [ebp - 0x37a], 0x93839f9b
mov dword [ebp - 0x376], 0x1009194
call fcn.0040ee60
push eax
lea edx, [ebp - 0x5b8]
lea ecx, [ebp - 0x858]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xb0
lea ecx, [ebp - 0x858]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x412c59
push 0
lea ecx, [ebp - 0x858]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x412d1c
sub esp, 0x18
lea eax, [ebp - 0x858]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xb1
sub esp, 0x18
lea ecx, [ebp - 0x372]
mov dword [ebp - 0x372], 0x8986a4bb
mov dword [ebp - 0x36e], 0xbdcd808a
mov esi, esp
mov dword [ebp - 0x36a], 0x93839f9b
mov dword [ebp - 0x366], 0x1009194
mov dword [ebp - 0x14], esp
call fcn.0040ee60
push eax
lea edx, [ebp - 0x5a0]
mov ecx, esi
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xb2
mov byte [ebp - 4], 0xb0
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x412cda
mov byte [edi], 1
jmp 0x412d16
lea ecx, [ebp - 0x858]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xbf0]
call fcn.00402b80
mov byte [ebp - 4], 0xb3
mov dl, 1
push 0
lea ecx, [ebp - 0xbf0]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0xb0
lea ecx, [ebp - 0xbf0]
call fcn.00402b10
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov byte [ebp - 4], 0xa9
lea ecx, [ebp - 0x858]
call fcn.00402b10
lea ecx, [ebp - 0x425]
mov dword [ebp - 0x425], 0x998cbbbb
mov dword [ebp - 0x421], 0x80828598
mov dword [ebp - 0x41d], 0x9d85a3cf
mov dword [ebp - 0x419], 0x93929581
mov word [ebp - 0x415], 0x100
call fcn.0040ec80
push eax
lea edx, [ebp - 0x5a0]
lea ecx, [ebp - 0xd70]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xb4
mov ecx, eax
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
mov bl, al
mov byte [ebp - 4], 0xa9
lea ecx, [ebp - 0xd70]
call fcn.00402b10
test bl, bl
je 0x412f05
lea ecx, [ebp - 0x437]
mov dword [ebp - 0x437], 0x998cbbbb
mov dword [ebp - 0x433], 0x80828598
mov dword [ebp - 0x42f], 0x9d85a3cf
mov dword [ebp - 0x42b], 0x93929581
mov word [ebp - 0x427], 0x100
call fcn.0040ec80
push eax
lea edx, [ebp - 0x5b8]
lea ecx, [ebp - 0x870]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xb5
lea ecx, [ebp - 0x870]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x412e2a
push 0
lea ecx, [ebp - 0x870]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x412ef6
sub esp, 0x18
lea eax, [ebp - 0x870]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xb6
sub esp, 0x18
lea ecx, [ebp - 0x449]
mov dword [ebp - 0x449], 0x998cbbbb
mov dword [ebp - 0x445], 0x80828598
mov esi, esp
mov dword [ebp - 0x441], 0x9d85a3cf
mov dword [ebp - 0x43d], 0x93929581
mov word [ebp - 0x439], 0x100
mov dword [ebp - 0x14], esp
call fcn.0040ec80
push eax
lea edx, [ebp - 0x5a0]
mov ecx, esi
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xb7
mov byte [ebp - 4], 0xb5
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x412eb4
mov byte [edi], 1
jmp 0x412ef0
lea ecx, [ebp - 0x870]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xc08]
call fcn.00402b80
mov byte [ebp - 4], 0xb8
mov dl, 1
push 0
lea ecx, [ebp - 0xc08]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0xb5
lea ecx, [ebp - 0xc08]
call fcn.00402b10
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov byte [ebp - 4], 0xa9
lea ecx, [ebp - 0x870]
call fcn.00402b10
mov byte [ebp - 4], 0xa5
lea ecx, [ebp - 0x5b8]
call fcn.00402b10
lea ecx, [ebp - 0x336]
mov dword [ebp - 0x336], 0x8e8ca4bb
mov dword [ebp - 0x332], 0xce9f898c
mov dword [ebp - 0x32e], 0x978799a3
mov word [ebp - 0x32a], 0x100
call fcn.0040ed40
push eax
lea ecx, [ebp - 0xd88]
call fcn.00402b80
mov byte [ebp - 4], 0xb9
lea edx, [ebp - 0xf4c]
push eax
lea ecx, [ebp - 0x570]
call fcn.0046d240
add esp, 4
mov byte [ebp - 4], 0xbb
lea ecx, [ebp - 0xd88]
call fcn.00402b10
lea ecx, [ebp - 0x570]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
je 0x413553
lea ecx, [ebp - 0x328]
mov dword [ebp - 0x328], 0x8e8ca4bb
mov dword [ebp - 0x324], 0xce9f898c
mov dword [ebp - 0x320], 0x978799a3
mov word [ebp - 0x31c], 0x100
call fcn.0040ed40
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5d0]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xbc
lea ecx, [ebp - 0x5d0]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x41300a
push 0
lea ecx, [ebp - 0x5d0]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x413544
lea ecx, [ebp - 0x2cf]
mov dword [ebp - 0x2cf], 0x8e87a1bb
mov dword [ebp - 0x2cb], 0x8a88948e
mov dword [ebp - 0x2c7], 0x100b2ab
call fcn.0040ed10
push eax
lea edx, [ebp - 0x570]
lea ecx, [ebp - 0xda0]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xbd
mov ecx, eax
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
mov bl, al
mov byte [ebp - 4], 0xbc
lea ecx, [ebp - 0xda0]
call fcn.00402b10
test bl, bl
je 0x4131ab
lea ecx, [ebp - 0x29f]
mov dword [ebp - 0x29f], 0x8e87a1bb
mov dword [ebp - 0x29b], 0x8a88948e
mov dword [ebp - 0x297], 0x100b2ab
call fcn.0040ed10
push eax
lea edx, [ebp - 0x5d0]
lea ecx, [ebp - 0x888]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xbe
lea ecx, [ebp - 0x888]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x4130e3
push 0
lea ecx, [ebp - 0x888]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x41319c
sub esp, 0x18
lea eax, [ebp - 0x888]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xbf
sub esp, 0x18
lea ecx, [ebp - 0x293]
mov dword [ebp - 0x293], 0x8e87a1bb
mov dword [ebp - 0x28f], 0x8a88948e
mov esi, esp
mov dword [ebp - 0x28b], 0x100b2ab
mov dword [ebp - 0x14], esp
call fcn.0040ed10
push eax
lea edx, [ebp - 0x570]
mov ecx, esi
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xc0
mov byte [ebp - 4], 0xbe
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x41315a
mov byte [edi], 1
jmp 0x413196
lea ecx, [ebp - 0x888]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xc20]
call fcn.00402b80
mov byte [ebp - 4], 0xc1
mov dl, 1
push 0
lea ecx, [ebp - 0xc20]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0xbe
lea ecx, [ebp - 0xc20]
call fcn.00402b10
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov byte [ebp - 4], 0xbc
lea ecx, [ebp - 0x888]
call fcn.00402b10
lea ecx, [ebp - 0x3c2]
mov dword [ebp - 0x3c2], 0x8986a4bb
mov dword [ebp - 0x3be], 0xbdcd808a
mov dword [ebp - 0x3ba], 0x93839f9b
mov dword [ebp - 0x3b6], 0x1009194
call fcn.0040ee60
push eax
lea edx, [ebp - 0x570]
lea ecx, [ebp - 0xdb8]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xc2
mov ecx, eax
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
mov bl, al
mov byte [ebp - 4], 0xbc
lea ecx, [ebp - 0xdb8]
call fcn.00402b10
test bl, bl
je 0x41336a
lea ecx, [ebp - 0x3f2]
mov dword [ebp - 0x3f2], 0x8986a4bb
mov dword [ebp - 0x3ee], 0xbdcd808a
mov dword [ebp - 0x3ea], 0x93839f9b
mov dword [ebp - 0x3e6], 0x1009194
call fcn.0040ee60
push eax
lea edx, [ebp - 0x5d0]
lea ecx, [ebp - 0x8a0]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xc3
lea ecx, [ebp - 0x8a0]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x413298
push 0
lea ecx, [ebp - 0x8a0]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x41335b
sub esp, 0x18
lea eax, [ebp - 0x8a0]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xc4
sub esp, 0x18
lea ecx, [ebp - 0x3e2]
mov dword [ebp - 0x3e2], 0x8986a4bb
mov dword [ebp - 0x3de], 0xbdcd808a
mov esi, esp
mov dword [ebp - 0x3da], 0x93839f9b
mov dword [ebp - 0x3d6], 0x1009194
mov dword [ebp - 0x14], esp
call fcn.0040ee60
push eax
lea edx, [ebp - 0x570]
mov ecx, esi
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xc5
mov byte [ebp - 4], 0xc3
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x413319
mov byte [edi], 1
jmp 0x413355
lea ecx, [ebp - 0x8a0]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xc38]
call fcn.00402b80
mov byte [ebp - 4], 0xc6
mov dl, 1
push 0
lea ecx, [ebp - 0xc38]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0xc3
lea ecx, [ebp - 0xc38]
call fcn.00402b10
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov byte [ebp - 4], 0xbc
lea ecx, [ebp - 0x8a0]
call fcn.00402b10
lea ecx, [ebp - 0x45b]
mov dword [ebp - 0x45b], 0x998cbbbb
mov dword [ebp - 0x457], 0x80828598
mov dword [ebp - 0x453], 0x9d85a3cf
mov dword [ebp - 0x44f], 0x93929581
mov word [ebp - 0x44b], 0x100
call fcn.0040ec80
push eax
lea edx, [ebp - 0x570]
lea ecx, [ebp - 0xdd0]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xc7
mov ecx, eax
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
mov bl, al
mov byte [ebp - 4], 0xbc
lea ecx, [ebp - 0xdd0]
call fcn.00402b10
test bl, bl
je 0x413544
lea ecx, [ebp - 0x46d]
mov dword [ebp - 0x46d], 0x998cbbbb
mov dword [ebp - 0x469], 0x80828598
mov dword [ebp - 0x465], 0x9d85a3cf
mov dword [ebp - 0x461], 0x93929581
mov word [ebp - 0x45d], 0x100
call fcn.0040ec80
push eax
lea edx, [ebp - 0x5d0]
lea ecx, [ebp - 0x8b8]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xc8
lea ecx, [ebp - 0x8b8]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x413469
push 0
lea ecx, [ebp - 0x8b8]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x413535
sub esp, 0x18
lea eax, [ebp - 0x8b8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xc9
sub esp, 0x18
lea ecx, [ebp - 0x47f]
mov dword [ebp - 0x47f], 0x998cbbbb
mov dword [ebp - 0x47b], 0x80828598
mov esi, esp
mov dword [ebp - 0x477], 0x9d85a3cf
mov dword [ebp - 0x473], 0x93929581
mov word [ebp - 0x46f], 0x100
mov dword [ebp - 0x14], esp
call fcn.0040ec80
push eax
lea edx, [ebp - 0x570]
mov ecx, esi
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xca
mov byte [ebp - 4], 0xc8
mov cl, bl
call fcn.0040ef10
add esp, 0x30
test eax, eax
jne 0x4134f3
mov byte [edi], 1
jmp 0x41352f
lea ecx, [ebp - 0x8b8]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xc50]
call fcn.00402b80
mov byte [ebp - 4], 0xcb
mov dl, 1
push 0
lea ecx, [ebp - 0xc50]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0xc8
lea ecx, [ebp - 0xc50]
call fcn.00402b10
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov byte [ebp - 4], 0xbc
lea ecx, [ebp - 0x8b8]
call fcn.00402b10
mov byte [ebp - 4], 0xbb
lea ecx, [ebp - 0x5d0]
call fcn.00402b10
lea ecx, [ebp - 0x1df]
mov dword [ebp - 0x1df], 0x869ca5bb
mov dword [ebp - 0x1db], 0x81a9859f
mov dword [ebp - 0x1d7], 0x9fad9588
mov dword [ebp - 0x1d3], 0x9f819886
mov dword [ebp - 0x1cf], 0x9f9e9793
mov dword [ebp - 0x1cb], 0x929c8bd5
mov dword [ebp - 0x1c7], 0x756593
mov byte [ebp - 0x1c3], 1
call fcn.00465470
lea eax, [ebp - 0x8d0]
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.00402f30
mov byte [ebp - 4], 0xcd
lea ecx, [ebp - 0x1df]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4135c8
sub ecx, edx
lea eax, [ebp - 0x1df]
push ecx
push eax
lea ecx, [ebp - 0x8d0]
call fcn.00402ea0
mov byte [ebp - 4], 0xce
lea eax, [ebp - 0x8d0]
push eax
lea edx, [ebp - 0xf4c]
lea ecx, [ebp - 0xa58]
call fcn.0046d240
add esp, 4
mov byte [ebp - 4], 0xd1
lea ecx, [ebp - 0x8d0]
call fcn.00402c80
mov byte [ebp - 4], 0xd0
lea eax, [ebp - 0x8d0]
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0xd0
sub esp, 0x18
lea eax, [ebp - 0xa58]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xd4
mov byte [ebp - 4], 0xd0
call fcn.0040b2b0
add esp, 0x18
test al, al
je 0x41379b
lea ecx, [ebp - 0x287]
mov dword [ebp - 0x287], 0x869ca5bb
mov dword [ebp - 0x283], 0x81a9859f
mov dword [ebp - 0x27f], 0x1009588
call fcn.0040ed10
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x8e8]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xd5
lea ecx, [ebp - 0x8e8]
call fcn.004687e0
mov ecx, eax
call fcn.0040b340
test al, al
jne 0x4136bc
push 0
lea ecx, [ebp - 0x8e8]
call fcn.004687e0
push eax
call esi
test eax, eax
je 0x41378c
lea ecx, [ebp - 0x4c8]
mov dword [ebp - 0x4c8], 0x869c85bb
mov dword [ebp - 0x4c4], 0x8189859f
mov dword [ebp - 0x4c0], 0x85df9588
mov dword [ebp - 0x4bc], 0x93999892
mov word [ebp - 0x4b8], 0x83
mov byte [ebp - 0x4b6], 1
call fcn.00409ef0
push eax
lea edx, [ebp - 0x8e8]
lea ecx, [ebp - 0xde8]
call fcn.0046d070
add esp, 4
mov byte [ebp - 4], 0xd6
mov ecx, eax
call fcn.004687e0
lea ecx, [ebp - 0xa58]
mov esi, eax
call fcn.004687e0
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0xd5
lea ecx, [ebp - 0xde8]
call fcn.00402b10
test esi, esi
je 0x413750
mov byte [edi], 1
jmp 0x41378c
lea ecx, [ebp - 0x8e8]
call fcn.004687e0
push eax
lea ecx, [ebp - 0xc68]
call fcn.00402b80
mov byte [ebp - 4], 0xd7
mov dl, 1
push 0
lea ecx, [ebp - 0xc68]
call fcn.0040b4a0
add esp, 4
mov byte [ebp - 4], 0xd5
lea ecx, [ebp - 0xc68]
call fcn.00402b10
mov byte [ebp - 4], 0xd0
lea ecx, [ebp - 0x8e8]
call fcn.00402b10
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xd8
lea ecx, [ebp - 0x1e]
mov dword [ebp - 0x1e], 0x899d81a5
mov dword [ebp - 0x1a], 0x838584
mov byte [ebp - 0x16], 1
call fcn.00465930
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x40], esi
mov ecx, esi
mov dword [ebp - 0x44], esi
call fcn.00402f30
mov byte [ebp - 4], 0xda
lea ecx, [ebp - 0x1e]
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4137f0
sub ecx, edx
lea eax, [ebp - 0x1e]
push ecx
push eax
mov ecx, esi
call fcn.00402ea0
mov byte [ebp - 4], 0xdb
mov byte [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x44], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xdc
lea ecx, [ebp - 0x32]
mov dword [ebp - 0x32], 0x8f8e87a3
mov dword [ebp - 0x2e], 0x80848388
mov word [ebp - 0x2a], 0x100
call fcn.004657a0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x40], esp
mov dword [ebp - 0x10], esi
mov ecx, esi
mov dword [ebp - 0x14], esi
call fcn.00402f30
mov byte [ebp - 4], 0xde
lea ecx, [ebp - 0x32]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413864
sub ecx, edx
lea eax, [ebp - 0x32]
push ecx
push eax
mov ecx, esi
call fcn.00402ea0
mov byte [ebp - 4], 0xdf
mov byte [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x44], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xe0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x28], 0x848686a6
mov dword [ebp - 0x24], 0x80848388
mov word [ebp - 0x20], 0x100
call fcn.004657a0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x40], esp
mov dword [ebp - 0x10], esi
mov ecx, esi
mov dword [ebp - 0x14], esi
call fcn.00402f30
mov byte [ebp - 4], 0xe2
lea ecx, [ebp - 0x28]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4138d8
sub ecx, edx
lea eax, [ebp - 0x28]
push ecx
push eax
mov ecx, esi
call fcn.00402ea0
mov byte [ebp - 4], 0xe3
mov byte [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x44], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xe4
sub esp, 0x18
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x1b0], 0xa9b8aaa5
mov dword [ebp - 0x1ac], 0x838584
mov esi, esp
mov byte [ebp - 0x1a8], 1
mov dword [ebp - 0x40], esp
call fcn.0040ac80
push eax
mov ecx, esi
call fcn.00402b80
mov byte [ebp - 4], 0xe5
mov byte [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xe6
sub esp, 0x18
lea ecx, [ebp - 0x225]
mov dword [ebp - 0x225], 0x829a89a3
mov dword [ebp - 0x221], 0x8b9f83a8
mov esi, esp
mov word [ebp - 0x21d], 0x100
mov dword [ebp - 0x14], esp
call fcn.0040ece0
push eax
mov ecx, esi
call fcn.00402b80
mov byte [ebp - 4], 0xe7
mov byte [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x524], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xe8
sub esp, 0x18
lea ecx, [ebp - 0x27b]
mov dword [ebp - 0x27b], 0x988684a1
mov dword [ebp - 0x277], 0x818e8282
mov esi, esp
mov dword [ebp - 0x273], 0x1009e86
mov dword [ebp - 0x528], esp
call fcn.0040ed10
push eax
mov ecx, esi
call fcn.00402b80
mov byte [ebp - 4], 0xe9
mov byte [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x52c], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xea
sub esp, 0x18
lea ecx, [ebp - 0x12d]
mov dword [ebp - 0x12d], 0x84889aa1
mov dword [ebp - 0x129], 0x1008380
mov esi, esp
mov dword [ebp - 0x530], esp
call fcn.0040cfa0
push eax
mov ecx, esi
call fcn.00402b80
mov byte [ebp - 4], 0xeb
mov byte [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x554], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xec
sub esp, 0x18
lea ecx, [ebp - 0x22f]
mov dword [ebp - 0x22f], 0x838c9aa1
mov dword [ebp - 0x22b], 0x80848388
mov esi, esp
mov word [ebp - 0x227], 0x100
mov dword [ebp - 0x558], esp
call fcn.0040ece0
push eax
mov ecx, esi
call fcn.00402b80
mov byte [ebp - 4], 0xed
mov byte [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x520], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xee
sub esp, 0x18
lea ecx, [ebp - 0x3d2]
mov dword [ebp - 0x3d2], 0x8e8587a0
mov dword [ebp - 0x3ce], 0x808483a8
mov esi, esp
mov dword [ebp - 0x3ca], 0xbeb6d8cf
mov dword [ebp - 0x3c6], 0x100ddb7
mov dword [ebp - 0x518], esp
call fcn.0040ee60
push eax
mov ecx, esi
call fcn.00402b80
mov byte [ebp - 4], 0xef
mov byte [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x514], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xf0
lea ecx, [ebp - 0x125]
mov dword [ebp - 0x125], 0x85aaa7ae
mov dword [ebp - 0x121], 0x1008282
call fcn.0040cfa0
sub esp, 0x18
mov ebx, eax
mov esi, esp
mov dword [ebp - 0x510], esp
mov dword [ebp - 0x51c], esi
mov ecx, esi
mov dword [ebp - 0x50c], esi
call fcn.00402f30
mov byte [ebp - 4], 0xf2
mov ecx, ebx
lea edx, [ecx + 1]
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413ba0
sub ecx, edx
push ecx
push ebx
mov ecx, esi
call fcn.00402ea0
mov byte [ebp - 4], 0xf3
mov byte [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x50c], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xf4
sub esp, 0x18
lea ecx, [ebp - 0x31a]
mov dword [ebp - 0x31a], 0x838f86ae
mov dword [ebp - 0x316], 0x8b998585
mov esi, esp
mov dword [ebp - 0x312], 0x9c989f8c
mov word [ebp - 0x30e], 0x100
mov dword [ebp - 0x51c], esp
call fcn.0040ed40
push eax
mov ecx, esi
call fcn.00402b80
mov byte [ebp - 4], 0xf5
mov byte [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x510], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xf6
sub esp, 0x18
lea ecx, [ebp - 0x135]
mov dword [ebp - 0x135], 0x858a90ae
mov dword [ebp - 0x131], 0x1008282
mov esi, esp
mov dword [ebp - 0x514], esp
call fcn.0040cfa0
push eax
mov ecx, esi
call fcn.00402b80
mov byte [ebp - 4], 0xf7
mov byte [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x518], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xf8
sub esp, 0x18
lea ecx, [ebp - 0x239]
mov dword [ebp - 0x239], 0x8b8e8daa
mov dword [ebp - 0x235], 0x80848388
mov esi, esp
mov word [ebp - 0x231], 0x100
mov dword [ebp - 0x520], esp
call fcn.0040ece0
push eax
mov ecx, esi
call fcn.00402b80
mov byte [ebp - 4], 0xf9
mov byte [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x558], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xfa
sub esp, 0x18
lea ecx, [ebp - 0x1b9]
mov dword [ebp - 0x1b9], 0x898781aa
mov dword [ebp - 0x1b5], 0x838584
mov esi, esp
mov byte [ebp - 0x1b1], 1
mov dword [ebp - 0x554], esp
call fcn.0040ac80
push eax
mov ecx, esi
call fcn.00402b80
mov byte [ebp - 4], 0xfb
mov byte [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x530], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xfc
sub esp, 0x18
lea ecx, [ebp - 0x243]
mov dword [ebp - 0x243], 0x8f8489a9
mov dword [ebp - 0x23f], 0x80848388
mov esi, esp
mov word [ebp - 0x23b], 0x100
mov dword [ebp - 0x52c], esp
call fcn.0040ece0
push eax
mov ecx, esi
call fcn.00402b80
mov byte [ebp - 4], 0xfd
mov byte [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x528], esp
push eax
call fcn.00468b20
mov byte [ebp - 4], 0xfe
sub esp, 0x18
lea ecx, [ebp - 0x264]
mov dword [ebp - 0x264], 0x87809ab7
mov dword [ebp - 0x260], 0x87828f8e
mov esi, esp
mov word [ebp - 0x25c], 0x81
mov byte [ebp - 0x25a], 1
mov dword [ebp - 0x524], esp
call fcn.00409930
push eax
mov ecx, esi
call fcn.00402b80
mov byte [ebp - 4], 0xff
mov byte [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x44], esp
push eax
call fcn.00468b20
mov dword [ebp - 4], 0x100
sub esp, 0x18
lea ecx, [ebp - 0x26f]
mov dword [ebp - 0x26f], 0x989b8db3
mov dword [ebp - 0x26b], 0x87828f8a
mov esi, esp
mov word [ebp - 0x267], 0x81
mov byte [ebp - 0x265], 1
mov dword [ebp - 0x40], esp
call fcn.00409930
push eax
mov ecx, esi
call fcn.00402b80
mov byte [ebp - 4], 1
mov dword [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00468b20
mov dword [ebp - 4], 0x102
sub esp, 0x18
lea ecx, [ebp - 0x13d]
mov dword [ebp - 0x13d], 0x85aaa9be
mov dword [ebp - 0x139], 0x1008282
mov esi, esp
mov dword [ebp - 0x14], esp
call fcn.0040cfa0
push eax
mov ecx, esi
call fcn.00402b80
mov byte [ebp - 4], 3
mov dword [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x550], esp
push eax
call fcn.00468b20
mov dword [ebp - 4], 0x104
sub esp, 0x18
lea ecx, [ebp - 0xba]
mov dword [ebp - 0xba], 0x99888bbd
mov word [ebp - 0xb6], 0x83
mov esi, esp
mov byte [ebp - 0xb4], 1
mov dword [ebp - 0x54c], esp
call fcn.00409390
push eax
mov ecx, esi
call fcn.00402b80
mov byte [ebp - 4], 5
mov dword [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x548], esp
push eax
call fcn.00468b20
mov dword [ebp - 4], 0x106
sub esp, 0x18
lea ecx, [ebp - 0x1c2]
mov dword [ebp - 0x1c2], 0x899f8d83
mov dword [ebp - 0x1be], 0x838584
mov esi, esp
mov byte [ebp - 0x1ba], 1
mov dword [ebp - 0x544], esp
call fcn.0040ac80
push eax
mov ecx, esi
call fcn.00402b80
mov byte [ebp - 4], 7
mov dword [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x540], esp
push eax
call fcn.00468b20
mov dword [ebp - 4], 0x108
sub esp, 0x18
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0x30c], 0x838e8183
mov dword [ebp - 0x308], 0x8d818d9f
mov esi, esp
mov dword [ebp - 0x304], 0x9f9980
mov byte [ebp - 0x300], 1
mov dword [ebp - 0x53c], esp
call fcn.0040cd00
push eax
mov ecx, esi
call fcn.00402b80
mov byte [ebp - 4], 9
mov dword [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x538], esp
push eax
call fcn.00468b20
mov dword [ebp - 4], 0x10a
sub esp, 0x18
lea ecx, [ebp - 0x1f3]
mov dword [ebp - 0x1f3], 0x8f9d81ab
mov dword [ebp - 0x1ef], 0x80848388
mov esi, esp
mov word [ebp - 0x1eb], 0x100
mov dword [ebp - 0x534], esp
call fcn.0040ece0
push eax
mov ecx, esi
call fcn.00402b80
mov byte [ebp - 4], 0xb
mov dword [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x4fc], esp
push eax
call fcn.00468b20
mov dword [ebp - 4], 0x10c
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x8e8d8db5
mov dword [ebp - 0x38], 0x80848388
mov word [ebp - 0x34], 0x100
call fcn.004657a0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x508], esp
mov dword [ebp - 0x504], esi
mov ecx, esi
mov dword [ebp - 0x500], esi
call fcn.00402f30
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x3c]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4140d7
sub ecx, edx
lea eax, [ebp - 0x3c]
push ecx
push eax
mov ecx, esi
call fcn.00402ea0
mov byte [ebp - 4], 0xf
mov dword [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x500], esp
push eax
call fcn.00468b20
mov dword [ebp - 4], 0x110
lea ecx, [ebp - 0x67]
mov dword [ebp - 0x67], 0x8e8c89a3
mov dword [ebp - 0x63], 0x9d98808a
mov dword [ebp - 0x5f], 0x9b90bdcf
mov dword [ebp - 0x5b], 0x82909a9d
mov word [ebp - 0x57], 0x100
call fcn.00465800
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x504], esp
mov dword [ebp - 0x508], esi
mov ecx, esi
mov dword [ebp - 0x4fc], esi
call fcn.00402f30
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x67]
lea edx, [ecx + 1]
jmp 0x414170
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414170
sub ecx, edx
lea eax, [ebp - 0x67]
push ecx
push eax
mov ecx, esi
call fcn.00402ea0
mov byte [ebp - 4], 0x13
mov dword [ebp - 4], 0xd0
mov ecx, edi
call fcn.004100a0
add esp, 0x30
mov dword [ebp - 4], 0x114
lea ecx, [ebp - 0xa58]
call fcn.00402c80
mov dword [ebp - 4], 0xbb
lea eax, [ebp - 0xa58]
mov dword [ebp - 0x500], eax
mov dword [ebp - 4], 0x117
lea ecx, [ebp - 0x570]
call fcn.00402c80
mov dword [ebp - 4], 0xa5
lea eax, [ebp - 0x570]
mov dword [ebp - 0x504], eax
mov dword [ebp - 4], 0x11a
lea ecx, [ebp - 0x5a0]
call fcn.00402c80
mov dword [ebp - 4], 0x9b
lea eax, [ebp - 0x5a0]
mov dword [ebp - 0x508], eax
mov dword [ebp - 4], 0x11d
lea ecx, [ebp - 0xa70]
call fcn.00402c80
mov dword [ebp - 4], 0x8f
lea eax, [ebp - 0xa70]
mov dword [ebp - 0x4fc], eax
mov dword [ebp - 4], 0x120
lea ecx, [ebp - 0xa88]
call fcn.00402c80
mov dword [ebp - 4], 0x86
lea eax, [ebp - 0xa88]
mov dword [ebp - 0x534], eax
mov dword [ebp - 4], 0x123
lea ecx, [ebp - 0x938]
call fcn.00402c80
mov dword [ebp - 4], 0x7a
lea eax, [ebp - 0x938]
mov dword [ebp - 0x538], eax
mov dword [ebp - 4], 0x126
lea ecx, [ebp - 0x950]
call fcn.00402c80
mov dword [ebp - 4], 0x6e
lea eax, [ebp - 0x950]
mov dword [ebp - 0x53c], eax
mov dword [ebp - 4], 0x129
lea ecx, [ebp - 0x968]
call fcn.00402c80
mov dword [ebp - 4], 0x65
lea eax, [ebp - 0x968]
mov dword [ebp - 0x540], eax
mov dword [ebp - 4], 0x12c
lea ecx, [ebp - 0x980]
call fcn.00402c80
mov dword [ebp - 4], 0x5e
lea eax, [ebp - 0x980]
mov dword [ebp - 0x544], eax
mov dword [ebp - 4], 0x12f
lea ecx, [ebp - 0x998]
call fcn.00402c80
mov dword [ebp - 4], 0x57
lea eax, [ebp - 0x998]
mov dword [ebp - 0x548], eax
mov dword [ebp - 4], 0x132
lea ecx, [ebp - 0x9b0]
call fcn.00402c80
mov dword [ebp - 4], 0x41
lea eax, [ebp - 0x9b0]
mov dword [ebp - 0x54c], eax
mov dword [ebp - 4], 0x135
lea ecx, [ebp - 0x588]
call fcn.00402c80
mov dword [ebp - 4], 0x35
lea eax, [ebp - 0x588]
mov dword [ebp - 0x550], eax
mov dword [ebp - 4], 0x138
lea ecx, [ebp - 0x9c8]
call fcn.00402c80
mov dword [ebp - 4], 0x29
lea eax, [ebp - 0x9c8]
mov dword [ebp - 0x50c], eax
mov dword [ebp - 4], 0x13b
lea ecx, [ebp - 0x9e0]
call fcn.00402c80
mov dword [ebp - 4], 0x1d
lea eax, [ebp - 0x9e0]
mov dword [ebp - 0x51c], eax
mov dword [ebp - 4], 0x13e
lea ecx, [ebp - 0x9f8]
call fcn.00402c80
mov dword [ebp - 4], 0x11
lea eax, [ebp - 0x9f8]
mov dword [ebp - 0x510], eax
mov dword [ebp - 4], 0x141
lea ecx, [ebp - 0xa10]
call fcn.00402c80
mov dword [ebp - 4], 5
lea eax, [ebp - 0xa10]
mov dword [ebp - 0x514], eax
mov dword [ebp - 4], 0x144
lea ecx, [ebp - 0xa28]
call fcn.00402c80
mov dword [ebp - 4], 0
lea eax, [ebp - 0xa28]
mov dword [ebp - 0x518], eax
mov dword [ebp - 4], 0x147
lea ecx, [ebp + 8]
call fcn.00402c80
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp + 8]
mov dword [ebp - 0x520], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret