Function at 0x41de84
Capabilities:
Contain obfuscated stackstrings
Get common file path
Get program files directory
Get startup folder
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46be09
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x16c
push edi
mov dword [ebp - 0x164], ecx
mov eax, dword [ebp + 8]
push eax
push 0x66
mov ecx, dword [ebp - 0x164]
call fcn.0045e786
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x164]
add ecx, 0x5c
call fcn.00416d60
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x164]
add ecx, 0xb8
call fcn.00416d60
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x164]
add ecx, 0x114
call fcn.00416d60
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x164]
add ecx, 0x170
call fcn.00416d60
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x164]
add ecx, 0x1cc
call fcn.00416d60
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x164]
add ecx, 0x228
call fcn.00416d60
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x164]
add ecx, 0x2c0
call fcn.0040e500
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x164]
add ecx, 0x2c4
call fcn.0040e500
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x164]
add ecx, 0x2c8
call fcn.0040e500
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x164]
add ecx, 0x2cc
call fcn.0040e500
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x164]
add ecx, 0x2d0
call fcn.0040e500
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x164]
add ecx, 0x2d4
call fcn.0040e500
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x164]
add ecx, 0x2d8
call fcn.0040e500
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x164]
add ecx, 0x2dc
call fcn.0040e500
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x164]
add ecx, 0x2e0
call fcn.0040e500
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x164]
add ecx, 0x2e4
call fcn.0040e500
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x164]
add ecx, 0x2e8
call fcn.0040e500
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x164]
add ecx, 0x2ec
call fcn.0040e500
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x164]
add ecx, 0x2f0
call fcn.0040e500
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x164]
add ecx, 0x2f4
call fcn.0040e500
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x164]
add ecx, 0x2f8
call fcn.0040e500
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x164]
add ecx, 0x2fc
call fcn.0040e500
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x164]
add ecx, 0x300
call fcn.0040e500
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x164]
add ecx, 0x304
call fcn.0040e500
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x164]
add ecx, 0x30c
call fcn.0040e500
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x164]
add ecx, 0x310
call fcn.0040e500
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x164]
add ecx, 0x314
call fcn.0040e500
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x164]
add ecx, 0x318
call fcn.0040e500
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x164]
add ecx, 0x31c
call fcn.0040e500
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x164]
add ecx, 0x320
call fcn.0040e500
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x164]
add ecx, 0x324
call fcn.0040e500
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x164]
add ecx, 0x328
call fcn.0040e500
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x164]
add ecx, 0x32c
call fcn.0040e500
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x164]
add ecx, 0x330
call fcn.0040e500
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x164]
add ecx, 0x334
call fcn.0040e500
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x164]
add ecx, 0x338
call fcn.0040e500
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x164]
add ecx, 0x33c
call fcn.0040e500
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x164]
add ecx, 0x340
call fcn.0040e500
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x164]
add ecx, 0x344
call fcn.0040e500
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x164]
add ecx, 0x348
call fcn.0040e500
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x164]
add ecx, 0x34c
call fcn.0040e500
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x164]
add ecx, 0x350
call fcn.0040e500
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x164]
add ecx, 0x354
call fcn.0040e500
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x164]
add ecx, 0x364
call fcn.0040e500
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x164]
add ecx, 0x480
call fcn.0040e500
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x164]
add ecx, 0x484
call fcn.0040e500
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x164]
add ecx, 0x488
call fcn.0040e500
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x164]
add ecx, 0x48c
call fcn.0040e500
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x164]
add ecx, 0x490
call fcn.0040e500
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x164]
add ecx, 0x494
call fcn.0040e500
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x164]
add ecx, 0x498
call fcn.0040e500
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x164]
add ecx, 0x49c
call fcn.0040e500
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x164]
add ecx, 0x4a0
call fcn.0040e500
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x164]
add ecx, 0x4a4
call fcn.0040e500
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x164]
add ecx, 0x4a8
call fcn.0040e500
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x164]
add ecx, 0x4ac
call fcn.0040e500
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x164]
add ecx, 0x4b0
call fcn.0040e500
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x164]
add ecx, 0x4b4
call fcn.0040e500
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x164]
add ecx, 0x4b8
call fcn.0040e500
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x164]
add ecx, 0x4bc
call fcn.0040e500
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x164]
add ecx, 0x4c0
call fcn.0040e500
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x164]
add ecx, 0x4c4
call fcn.0040e500
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x164]
add ecx, 0x4c8
call fcn.0040e500
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0x164]
add ecx, 0x4cc
call fcn.0040e500
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x164]
add ecx, 0x4d0
call fcn.0040e500
mov byte [ebp - 4], 0x41
mov ecx, dword [ebp - 0x164]
add ecx, 0x4d4
call fcn.0040e500
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp - 0x164]
add ecx, 0x4d8
call fcn.0040e500
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x164]
add ecx, 0x4dc
call fcn.0040e500
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0x164]
add ecx, 0x4e0
call fcn.0040e500
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x164]
add ecx, 0x4e4
call fcn.0040e500
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0x164]
add ecx, 0x4e8
call fcn.0040e500
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x164]
add ecx, 0x4ec
call fcn.0040e500
mov byte [ebp - 4], 0x48
mov ecx, dword [ebp - 0x164]
add ecx, 0x4f0
call fcn.0040e500
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp - 0x164]
add ecx, 0x4f4
call fcn.0040e500
mov byte [ebp - 4], 0x4a
mov ecx, dword [ebp - 0x164]
add ecx, 0x4f8
call fcn.0040e500
mov byte [ebp - 4], 0x4b
mov ecx, dword [ebp - 0x164]
add ecx, 0x4fc
call fcn.0040e500
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0x164]
add ecx, 0x500
call fcn.0040e500
mov byte [ebp - 4], 0x4d
push fcn.004621ea
push fcn.0040e500
push 8
push 4
mov ecx, dword [ebp - 0x164]
add ecx, 0x504
push ecx
call fcn.0044e07b
mov byte [ebp - 4], 0x4e
push fcn.004621ea
push fcn.0040e500
push 8
push 4
mov edx, dword [ebp - 0x164]
add edx, 0x524
push edx
call fcn.0044e07b
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0x164]
add ecx, 0x54c
call fcn.00416b10
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp - 0x164]
add ecx, 0x570
call fcn.0040e500
mov byte [ebp - 4], 0x51
mov ecx, dword [ebp - 0x164]
add ecx, 0x574
call fcn.0040e500
mov byte [ebp - 4], 0x52
push 0
mov ecx, dword [ebp - 0x164]
add ecx, 0x578
call fcn.00410199
mov byte [ebp - 4], 0x53
mov ecx, dword [ebp - 0x164]
add ecx, 0x11d58
call fcn.00416b60
mov ecx, dword [ebp - 0x164]
add ecx, 0x11d68
call fcn.00416b60
mov ecx, dword [ebp - 0x164]
add ecx, 0x11d78
call fcn.00416b60
push fcn.00416b60
push 6
push 0x10
mov eax, dword [ebp - 0x164]
add eax, 0x11d88
push eax
call fcn.004456d0
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f08
call fcn.0040e500
mov byte [ebp - 4], 0x54
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f0c
call fcn.0040e500
mov byte [ebp - 4], 0x55
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f10
call fcn.0040e500
mov byte [ebp - 4], 0x56
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f14
call fcn.0040e500
mov byte [ebp - 4], 0x57
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f18
call fcn.0040e500
mov byte [ebp - 4], 0x58
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f1c
call fcn.0040e500
mov byte [ebp - 4], 0x59
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f20
call fcn.0040e500
mov byte [ebp - 4], 0x5a
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f24
call fcn.0040e500
mov byte [ebp - 4], 0x5b
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f28
call fcn.0040e500
mov byte [ebp - 4], 0x5c
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f2c
call fcn.0040e500
mov byte [ebp - 4], 0x5d
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f30
call fcn.0040e500
mov byte [ebp - 4], 0x5e
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f34
call fcn.0040e500
mov byte [ebp - 4], 0x5f
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f6c
call fcn.0040e500
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f70
call fcn.0040e500
mov byte [ebp - 4], 0x61
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f74
call fcn.00416b10
mov byte [ebp - 4], 0x62
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f7c
call fcn.0040e500
mov byte [ebp - 4], 0x63
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f80
call fcn.0040e500
mov byte [ebp - 4], 0x64
mov ecx, dword [ebp - 0x164]
mov dword [ecx], method.CDialog.virtual_0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x284], 0xffffffff
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x288], 0xffffffff
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x28c], 0xffffffff
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x290], 0xffffffff
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x294], 0xffffffff
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x298], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x29c], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x2a0], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x2a4], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x2a8], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x2ac], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x2b0], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x2b4], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x2b8], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x2bc], 0
push 0x48b0f0
mov ecx, dword [ebp - 0x164]
add ecx, 0x2c0
call fcn.00462373
push 0x48b0f4
mov ecx, dword [ebp - 0x164]
add ecx, 0x2c4
call fcn.00462373
push 0x48b0f8
mov ecx, dword [ebp - 0x164]
add ecx, 0x2c8
call fcn.00462373
push 0x48b0fc
mov ecx, dword [ebp - 0x164]
add ecx, 0x2cc
call fcn.00462373
push 0x48b100
mov ecx, dword [ebp - 0x164]
add ecx, 0x2d0
call fcn.00462373
push 0x48b104
mov ecx, dword [ebp - 0x164]
add ecx, 0x2d4
call fcn.00462373
push 0x48b108
mov ecx, dword [ebp - 0x164]
add ecx, 0x2d8
call fcn.00462373
push 0x48b10c
mov ecx, dword [ebp - 0x164]
add ecx, 0x2dc
call fcn.00462373
push 0x48b110
mov ecx, dword [ebp - 0x164]
add ecx, 0x2e0
call fcn.00462373
push 0x48b114
mov ecx, dword [ebp - 0x164]
add ecx, 0x2e4
call fcn.00462373
push 0x48b118
mov ecx, dword [ebp - 0x164]
add ecx, 0x2e8
call fcn.00462373
push 0x48b11c
mov ecx, dword [ebp - 0x164]
add ecx, 0x2ec
call fcn.00462373
push 0x48b120
mov ecx, dword [ebp - 0x164]
add ecx, 0x2f0
call fcn.00462373
push 0x48b124
mov ecx, dword [ebp - 0x164]
add ecx, 0x2f4
call fcn.00462373
push 0x48b128
mov ecx, dword [ebp - 0x164]
add ecx, 0x2f8
call fcn.00462373
push 0x48b12c
mov ecx, dword [ebp - 0x164]
add ecx, 0x2fc
call fcn.00462373
push 0x48b130
mov ecx, dword [ebp - 0x164]
add ecx, 0x300
call fcn.00462373
push 0x48b134
mov ecx, dword [ebp - 0x164]
add ecx, 0x304
call fcn.00462373
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x308], 0xffffffff
push 0x48b138
mov ecx, dword [ebp - 0x164]
add ecx, 0x30c
call fcn.00462373
push 0x48b13c
mov ecx, dword [ebp - 0x164]
add ecx, 0x310
call fcn.00462373
push 0x48b140
mov ecx, dword [ebp - 0x164]
add ecx, 0x314
call fcn.00462373
push 0x48b144
mov ecx, dword [ebp - 0x164]
add ecx, 0x318
call fcn.00462373
push 0x48b148
mov ecx, dword [ebp - 0x164]
add ecx, 0x31c
call fcn.00462373
push 0x48b14c
mov ecx, dword [ebp - 0x164]
add ecx, 0x320
call fcn.00462373
push 0x48b150
mov ecx, dword [ebp - 0x164]
add ecx, 0x324
call fcn.00462373
push 0x48b154
mov ecx, dword [ebp - 0x164]
add ecx, 0x328
call fcn.00462373
push 0x48b158
mov ecx, dword [ebp - 0x164]
add ecx, 0x32c
call fcn.00462373
push 0x48b15c
mov ecx, dword [ebp - 0x164]
add ecx, 0x330
call fcn.00462373
push 0x48b160
mov ecx, dword [ebp - 0x164]
add ecx, 0x334
call fcn.00462373
push 0x48b164
mov ecx, dword [ebp - 0x164]
add ecx, 0x338
call fcn.00462373
push 0x48b168
mov ecx, dword [ebp - 0x164]
add ecx, 0x33c
call fcn.00462373
push 0x48b16c
mov ecx, dword [ebp - 0x164]
add ecx, 0x340
call fcn.00462373
push 0x48b170
mov ecx, dword [ebp - 0x164]
add ecx, 0x344
call fcn.00462373
push 0x48b174
mov ecx, dword [ebp - 0x164]
add ecx, 0x348
call fcn.00462373
push 0x48b178
mov ecx, dword [ebp - 0x164]
add ecx, 0x34c
call fcn.00462373
push 0x48b17c
mov ecx, dword [ebp - 0x164]
add ecx, 0x350
call fcn.00462373
push 0x48b180
mov ecx, dword [ebp - 0x164]
add ecx, 0x354
call fcn.00462373
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x358], 0xffffffff
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x35c], 0xffffffff
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x360], 0
push 0x48b184
mov ecx, dword [ebp - 0x164]
add ecx, 0x364
call fcn.00462373
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x368], 0xffffffff
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x36c], 0xffffffff
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x370], 0xffffffff
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x374], 0xffffffff
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x35c], 0xffffffff
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x378], 0
push 0x80
call fcn.00416b00
mov ecx, eax
call fcn.00416d20
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x37c], eax
mov byte [ebp - 0x14c], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x14b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0
push 0x26
lea edx, [ebp - 0x14c]
push edx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
mov eax, dword [str.ISP_Tool]
push eax
mov ecx, dword [str.Realtek]
push ecx
lea edx, [ebp - 0x14c]
push edx
push str._s_s_s
mov eax, dword [ebp - 0x164]
add eax, 0x570
push eax
call fcn.0045cfab
add esp, 0x14
mov ecx, dword [str.ispfile]
push ecx
push 0x4845a8
mov edx, dword [ebp - 0x164]
add edx, 0x570
push edx
lea eax, [ebp - 0x154]
push eax
call fcn.0046247f
mov dword [ebp - 0x168], eax
mov ecx, dword [ebp - 0x168]
mov dword [ebp - 0x16c], ecx
mov byte [ebp - 4], 0x65
mov edx, dword [ebp - 0x16c]
push edx
lea eax, [ebp - 0x158]
push eax
call fcn.0046247f
mov dword [ebp - 0x170], eax
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 0x174], ecx
mov byte [ebp - 4], 0x66
mov edx, dword [ebp - 0x174]
push edx
mov ecx, dword [ebp - 0x164]
add ecx, 0x574
call fcn.00462323
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x158]
call fcn.004621ea
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x154]
call fcn.004621ea
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x3ac], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x3b0], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x3b4], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x3b8], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x3bc], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x3c0], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x3c4], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x3c8], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x3cc], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x388], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x38c], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x390], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x394], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x398], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x39c], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x3a0], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x3a4], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x3a8], 0
push 0x48b188
mov ecx, dword [ebp - 0x164]
add ecx, 0x4e0
call fcn.00462373
push 0x48b18c
mov ecx, dword [ebp - 0x164]
add ecx, 0x4e4
call fcn.00462373
push 0x48b190
mov ecx, dword [ebp - 0x164]
add ecx, 0x4e8
call fcn.00462373
push 0x48b194
mov ecx, dword [ebp - 0x164]
add ecx, 0x4ec
call fcn.00462373
push 0x48b198
mov ecx, dword [ebp - 0x164]
add ecx, 0x4f0
call fcn.00462373
push 0x48b19c
mov ecx, dword [ebp - 0x164]
add ecx, 0x4f4
call fcn.00462373
push 0x48b1a0
mov ecx, dword [ebp - 0x164]
add ecx, 0x4f8
call fcn.00462373
push 0x48b1a4
mov ecx, dword [ebp - 0x164]
add ecx, 0x4fc
call fcn.00462373
push 0x48b1a8
mov ecx, dword [ebp - 0x164]
add ecx, 0x500
call fcn.00462373
mov dword [ebp - 0x150], 0
jmp 0x41ef50
mov eax, dword [ebp - 0x150]
add eax, 1
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 8
jge 0x41ef8f
push 0x48b1ac
mov ecx, dword [ebp - 0x150]
mov edx, dword [ebp - 0x164]
lea ecx, [edx + ecx*4 + 0x504]
call fcn.00462373
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x164]
mov dword [ecx + eax*4 + 0x11c14], 0
jmp 0x41ef41
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x450], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x454], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x458], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x45c], 0
push 0x48b1b0
mov ecx, dword [ebp - 0x164]
add ecx, 0x4c0
call fcn.00462373
push 0x48b1b4
mov ecx, dword [ebp - 0x164]
add ecx, 0x4c4
call fcn.00462373
push 0x48b1b8
mov ecx, dword [ebp - 0x164]
add ecx, 0x4c8
call fcn.00462373
push 0x48b1bc
mov ecx, dword [ebp - 0x164]
add ecx, 0x4cc
call fcn.00462373
push 0x48b1c0
mov ecx, dword [ebp - 0x164]
add ecx, 0x4d0
call fcn.00462373
push 0x48b1c4
mov ecx, dword [ebp - 0x164]
add ecx, 0x4d4
call fcn.00462373
push 0x48b1c8
mov ecx, dword [ebp - 0x164]
add ecx, 0x4d8
call fcn.00462373
push 0x48b1cc
mov ecx, dword [ebp - 0x164]
add ecx, 0x4dc
call fcn.00462373
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x460], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x464], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x468], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x46c], 0
push 0x48b1d0
mov ecx, dword [ebp - 0x164]
add ecx, 0x4a0
call fcn.00462373
push 0x48b1d4
mov ecx, dword [ebp - 0x164]
add ecx, 0x4a4
call fcn.00462373
push 0x48b1d8
mov ecx, dword [ebp - 0x164]
add ecx, 0x4a8
call fcn.00462373
push 0x48b1dc
mov ecx, dword [ebp - 0x164]
add ecx, 0x4ac
call fcn.00462373
push 0x48b1e0
mov ecx, dword [ebp - 0x164]
add ecx, 0x4b0
call fcn.00462373
push 0x48b1e4
mov ecx, dword [ebp - 0x164]
add ecx, 0x4b4
call fcn.00462373
push 0x48b1e8
mov ecx, dword [ebp - 0x164]
add ecx, 0x4b8
call fcn.00462373
push 0x48b1ec
mov ecx, dword [ebp - 0x164]
add ecx, 0x4bc
call fcn.00462373
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x470], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x474], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x478], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x47c], 0
push 0x48b1f0
mov ecx, dword [ebp - 0x164]
add ecx, 0x480
call fcn.00462373
push 0x48b1f4
mov ecx, dword [ebp - 0x164]
add ecx, 0x484
call fcn.00462373
push 0x48b1f8
mov ecx, dword [ebp - 0x164]
add ecx, 0x488
call fcn.00462373
push 0x48b1fc
mov ecx, dword [ebp - 0x164]
add ecx, 0x48c
call fcn.00462373
push 0x48b200
mov ecx, dword [ebp - 0x164]
add ecx, 0x490
call fcn.00462373
push 0x48b204
mov ecx, dword [ebp - 0x164]
add ecx, 0x494
call fcn.00462373
push 0x48b208
mov ecx, dword [ebp - 0x164]
add ecx, 0x498
call fcn.00462373
push 0x48b20c
mov ecx, dword [ebp - 0x164]
add ecx, 0x49c
call fcn.00462373
mov dword [ebp - 0x150], 0
jmp 0x41f27a
mov edx, dword [ebp - 0x150]
add edx, 1
mov dword [ebp - 0x150], edx
cmp dword [ebp - 0x150], 0x20
jge 0x41f29c
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x164]
mov dword [ecx + eax*4 + 0x3d0], 0
jmp 0x41f26b
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x5ec], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x564], 1
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x568], 1
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x554], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x558], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x55c], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x560], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x56c], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x548], 1
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x544], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x380], 0
push 0x120
push 0
mov ecx, dword [ebp - 0x164]
add ecx, 0x11de8
push ecx
call fcn.0044db80
add esp, 0xc
push 0x89
push 0x87
push 0x88
push 0x87
mov ecx, dword [ebp - 0x164]
add ecx, 0x1cc
call fcn.00416f60
push 0x98
push 0x99
push 0x97
push 0x99
mov ecx, dword [ebp - 0x164]
add ecx, 0x170
call fcn.00416f60
push 0x9c
push 0x9d
push 0x9b
push 0x9d
mov ecx, dword [ebp - 0x164]
add ecx, 0x114
call fcn.00416f60
push 0xa1
push 0xa0
push 0xa2
push 0xa0
mov ecx, dword [ebp - 0x164]
add ecx, 0xb8
call fcn.00416f60
push 0xa6
push 0xa5
push 0xa7
push 0xa5
mov ecx, dword [ebp - 0x164]
add ecx, 0x5c
call fcn.00416f60
push 0xba
push 0xb9
push 0xb7
push 0xb9
mov ecx, dword [ebp - 0x164]
add ecx, 0x228
call fcn.00416f60
mov byte [ebp - 0x31], 0x86
mov byte [ebp - 0x2f], 2
mov dword [ebp - 0x40], 0
push 0x4845ac
call fcn.0044e000
add esp, 4
push eax
push 0x4845b4
lea edx, [ebp - 0x2c]
push edx
call fcn.0044dbe0
add esp, 0xc
mov dword [ebp - 0x48], 0x10
mov byte [ebp - 0x34], 0
mov dword [ebp - 0x3c], 0
mov byte [ebp - 0x30], 1
mov byte [ebp - 0x2d], 0x22
mov byte [ebp - 0x2e], 2
mov byte [ebp - 0x32], 0
mov byte [ebp - 0x33], 0
mov dword [ebp - 0x38], 0x2bc
mov dword [ebp - 0x44], 8
lea eax, [ebp - 0x48]
push eax
mov ecx, dword [ebp - 0x164]
add ecx, 0x54c
call fcn.00416c60
push 0x4845bc
push 0x20
push 0
push 0
push 2
push 0
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0xb
push 0x23
mov ecx, dword [ebp - 0x164]
add ecx, 0x11f74
call fcn.00445720
push 0x110
call fcn.00462713
add esp, 4
mov dword [ebp - 0x160], eax
mov byte [ebp - 4], 0x67
cmp dword [ebp - 0x160], 0
je 0x41f520
mov ecx, dword [ebp - 0x160]
call fcn.00416960
mov dword [ebp - 0x178], eax
jmp 0x41f52a
mov dword [ebp - 0x178], 0
mov ecx, dword [ebp - 0x178]
mov dword [ebp - 0x15c], ecx
mov byte [ebp - 4], 0x64
mov edx, dword [ebp - 0x164]
mov eax, dword [ebp - 0x15c]
mov dword [edx + 0x11f50], eax
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x11f54], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x11f58], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x11f5c], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x11f60], 0
mov edx, dword [ebp - 0x164]
mov dword [edx + 0x11f64], 0
mov eax, dword [ebp - 0x164]
mov dword [eax + 0x11f68], 0
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 0x374], 1
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x164]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
mov esp, ebp
pop ebp
ret 4