Function at 0x448eb0
Capabilities:
Authenticate hmac
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5dc
push ebx
push esi
push edi
mov dword [ebp - 0x56c], edx
mov edi, ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1a8], 0x5e
mov eax, dword [ebp - 0x1a8]
xor eax, 0x3c
mov word [ebp - 0x1a4], ax
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1c4], 0
xor eax, 0x44
mov dword [ebp - 0x24], 0
mov word [ebp - 0x1a2], ax
mov eax, dword [ebp - 0x1a8]
add eax, 2
mov dword [ebp - 0x14], 0
xor eax, 0x65
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1a0], ax
mov eax, dword [ebp - 0x1a8]
add eax, 3
mov dword [ebp - 0x18], 0
xor eax, 0x6c
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x19e], ax
mov eax, dword [ebp - 0x1a8]
add eax, 4
xor eax, 0x61
mov word [ebp - 0x19c], ax
mov eax, dword [ebp - 0x1a8]
add eax, 5
xor eax, 0x79
mov word [ebp - 0x19a], ax
mov eax, dword [ebp - 0x1a8]
add eax, 6
xor eax, 0x3e
mov word [ebp - 0x198], ax
mov eax, dword [ebp - 0x1a8]
add eax, 7
xor eax, 0x25
mov word [ebp - 0x196], ax
mov eax, dword [ebp - 0x1a8]
add eax, 8
xor eax, 0x73
mov word [ebp - 0x194], ax
mov eax, dword [ebp - 0x1a8]
add eax, 9
xor eax, 0x3c
mov word [ebp - 0x192], ax
mov eax, dword [ebp - 0x1a8]
add eax, 0xa
xor eax, 0x2f
mov word [ebp - 0x190], ax
mov eax, dword [ebp - 0x1a8]
add eax, 0xb
xor eax, 0x44
mov word [ebp - 0x18e], ax
mov eax, dword [ebp - 0x1a8]
add eax, 0xc
xor eax, 0x65
mov word [ebp - 0x18c], ax
mov eax, dword [ebp - 0x1a8]
add eax, 0xd
xor eax, 0x6c
mov word [ebp - 0x18a], ax
mov eax, dword [ebp - 0x1a8]
add eax, 0xe
xor eax, 0x61
mov word [ebp - 0x188], ax
mov eax, dword [ebp - 0x1a8]
add eax, 0xf
xor eax, 0x79
mov word [ebp - 0x186], ax
mov eax, dword [ebp - 0x1a8]
add eax, 0x10
xor eax, 0x3e
mov word [ebp - 0x184], ax
mov eax, dword [ebp - 0x1a8]
add eax, 0x11
mov word [ebp - 0x182], ax
mov eax, dword [ebp - 0x1a8]
movzx ecx, word [0x402da4]
add eax, 0x12
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x180], cx
mov eax, dword [ebp - 0x1a8]
movzx ecx, word [0x402da6]
add eax, 0x13
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x17e], cx
mov eax, dword [ebp - 0x1a8]
movzx ecx, word [0x402da8]
add eax, 0x14
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x17c], cx
mov eax, dword [ebp - 0x1a8]
movzx ecx, word [0x402daa]
add eax, 0x15
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x17a], cx
mov eax, dword [ebp - 0x1a8]
movzx ecx, word [0x402dac]
add eax, 0x16
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x178], cx
mov eax, dword [ebp - 0x1a8]
movzx ecx, word [0x402dae]
add eax, 0x17
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x176], cx
mov eax, dword [ebp - 0x1a8]
movzx ecx, word [0x402db0]
add eax, 0x18
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x174], cx
mov eax, dword [ebp - 0x1a8]
movzx ecx, word [0x402db2]
add eax, 0x19
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x172], cx
mov eax, dword [ebp - 0x1a8]
movzx ecx, word [0x402db4]
add eax, 0x1a
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x170], cx
mov eax, dword [ebp - 0x1a8]
movzx ecx, word [0x402db6]
add eax, 0x1b
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x16e], cx
mov eax, dword [ebp - 0x1a8]
movzx ecx, word [0x402db8]
add eax, 0x1c
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x16c], cx
mov eax, dword [ebp - 0x1a8]
movzx ecx, word [0x402dba]
add eax, 0x1d
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x16a], cx
mov eax, dword [ebp - 0x1a8]
movzx ecx, word [0x402dbc]
add eax, 0x1e
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x168], cx
mov eax, dword [ebp - 0x1a8]
movzx ecx, word [0x402dbe]
add eax, 0x1f
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x166], cx
mov eax, dword [ebp - 0x1a8]
movzx ecx, word [0x402dc0]
add eax, 0x20
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x164], cx
mov eax, dword [ebp - 0x1a8]
movzx ecx, word [0x402dc2]
add eax, 0x21
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x162], cx
mov eax, dword [ebp - 0x1a8]
movzx ecx, word [0x402dc4]
add eax, 0x22
movzx eax, ax
xor ecx, eax
xor eax, eax
mov word [ebp - 0x160], cx
xor edx, edx
mov word [ebp - 0x15e], ax
mov ax, word [ebp - 0x1a4]
nop dword [eax]
mov ax, word [ebp + edx*2 - 0x1a4]
mov ecx, dword [ebp - 0x1a8]
add ecx, edx
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0x1a4], cx
inc edx
cmp edx, 0x23
jb 0x449260
xor eax, eax
mov ecx, 0x47
mov word [ebp - 0x15e], ax
mov ebx, 0x49
mov word [ebp - 0x514], cx
mov eax, 0x50
mov word [ebp - 0x512], ax
mov edx, 0x78
mov eax, 0x83
mov esi, 0x79
mov word [ebp - 0x510], ax
mov eax, 0x70
mov word [ebp - 0x50e], ax
mov eax, 0x6e
mov word [ebp - 0x50c], ax
mov eax, 0x7a
mov word [ebp - 0x50a], bx
mov word [ebp - 0x508], cx
mov ecx, 0x4e
mov word [ebp - 0x506], cx
mov word [ebp - 0x504], ax
mov word [ebp - 0x502], dx
mov word [ebp - 0x500], dx
mov edx, 0x6c
mov word [ebp - 0x4fe], dx
mov edx, 0x6f
mov word [ebp - 0x4fc], si
mov word [ebp - 0x4fa], dx
mov edx, 0x7e
mov word [ebp - 0x4f8], bx
mov ebx, 0x30
mov word [ebp - 0x4f6], bx
mov ebx, 0x47
mov word [ebp - 0x4f4], dx
mov edx, 0x3a
mov word [ebp - 0x4f2], bx
mov word [ebp - 0x4f0], dx
mov edx, 0x72
mov word [ebp - 0x4ee], cx
mov ecx, 0x6c
mov word [ebp - 0x4ec], ax
mov eax, 0x78
mov word [ebp - 0x4ea], ax
mov word [ebp - 0x4e8], ax
mov word [ebp - 0x4e6], cx
mov ecx, 0x6f
mov word [ebp - 0x4e4], si
mov esi, 0x4c
mov word [ebp - 0x4e2], cx
mov ecx, 0x49
mov word [ebp - 0x4e0], cx
mov ecx, 0x7d
mov word [ebp - 0x4de], bx
mov ebx, 0x7e
mov word [ebp - 0x4dc], si
mov esi, 0x49
mov word [ebp - 0x4da], cx
mov ecx, 0x80
mov word [ebp - 0x4d8], dx
mov word [ebp - 0x4d6], cx
mov word [ebp - 0x4d4], ax
mov eax, 0x70
mov word [ebp - 0x4d2], ax
mov eax, 0x79
mov word [ebp - 0x4d0], ax
mov eax, 0x7f
mov word [ebp - 0x4ce], ax
mov word [ebp - 0x4cc], bx
mov ebx, 0x30
mov word [ebp - 0x4ca], si
mov esi, 0x47
mov word [ebp - 0x4c8], bx
mov ebx, 0x7e
mov word [ebp - 0x4c6], bx
mov word [ebp - 0x4c4], si
mov esi, 0x3a
mov word [ebp - 0x4c2], si
mov esi, 0x4c
mov word [ebp - 0x4c0], si
mov esi, 0x7d
mov word [ebp - 0x4be], si
mov word [ebp - 0x4bc], dx
mov edx, 0x70
mov word [ebp - 0x4ba], cx
mov ecx, 0x78
mov word [ebp - 0x4b8], cx
mov ecx, 0x79
mov word [ebp - 0x4b6], dx
mov word [ebp - 0x4b4], cx
mov ecx, 0x49
mov word [ebp - 0x4b2], ax
mov eax, 0x47
mov word [ebp - 0x4b0], bx
mov word [ebp - 0x4ae], cx
mov word [ebp - 0x4ac], ax
mov eax, 0x3a
mov word [ebp - 0x4aa], ax
mov eax, 0x50
mov word [ebp - 0x4a8], ax
mov eax, 0x83
mov word [ebp - 0x4a6], ax
mov eax, 0x6e
mov word [ebp - 0x4a4], dx
mov word [ebp - 0x4a2], ax
mov eax, 0xb
mov word [ebp - 0x4a0], cx
mov word [ebp - 0x49e], ax
movzx eax, word [0x402e20]
add eax, 0xb
mov word [ebp - 0x49c], ax
movzx eax, word [0x402e22]
add eax, 0xb
mov word [ebp - 0x49a], ax
movzx eax, word [0x402e24]
add eax, 0xb
mov word [ebp - 0x498], ax
movzx eax, word [0x402e26]
add eax, 0xb
mov word [ebp - 0x496], ax
movzx eax, word [0x402e28]
add eax, 0xb
mov word [ebp - 0x494], ax
movzx eax, word [0x402e2a]
add eax, 0xb
mov word [ebp - 0x492], ax
movzx eax, word [0x402e2c]
add eax, 0xb
mov word [ebp - 0x490], ax
movzx eax, word [0x402e2e]
add eax, 0xb
mov word [ebp - 0x48e], ax
movzx eax, word [0x402e30]
add eax, 0xb
mov word [ebp - 0x48c], ax
movzx eax, word [0x402e32]
add eax, 0xb
mov word [ebp - 0x48a], ax
movzx eax, word [0x402e34]
add eax, 0xb
mov word [ebp - 0x488], ax
movzx eax, word [0x402e36]
add eax, 0xb
mov word [ebp - 0x486], ax
movzx eax, word [0x402e38]
add eax, 0xb
mov word [ebp - 0x484], ax
movzx eax, word [0x402e3a]
add eax, 0xb
mov word [ebp - 0x482], ax
movzx eax, word [0x402e3c]
add eax, 0xb
mov word [ebp - 0x480], ax
movzx eax, word [0x402e3e]
add eax, 0xb
mov word [ebp - 0x47e], ax
movzx eax, word [0x402e40]
add eax, 0xb
mov word [ebp - 0x47c], ax
movzx eax, word [0x402e42]
add eax, 0xb
mov word [ebp - 0x47a], ax
movzx eax, word [0x402e44]
add eax, 0xb
mov word [ebp - 0x478], ax
movzx eax, word [0x402e46]
add eax, 0xb
mov word [ebp - 0x476], ax
movzx eax, word [0x402e48]
add eax, 0xb
mov word [ebp - 0x474], ax
movzx eax, word [0x402e4a]
add eax, 0xb
mov word [ebp - 0x472], ax
movzx eax, word [0x402e4c]
add eax, 0xb
mov word [ebp - 0x470], ax
movzx eax, word [0x402e4e]
add eax, 0xb
mov word [ebp - 0x46e], ax
movzx eax, word [0x402e50]
add eax, 0xb
mov word [ebp - 0x46c], ax
movzx eax, word [0x402e52]
add eax, 0xb
mov word [ebp - 0x46a], ax
movzx eax, word [0x402e54]
add eax, 0xb
mov word [ebp - 0x468], ax
movzx eax, word [0x402e56]
add eax, 0xb
mov word [ebp - 0x466], ax
movzx eax, word [0x402e58]
add eax, 0xb
mov word [ebp - 0x464], ax
movzx eax, word [0x402e5a]
add eax, 0xb
mov word [ebp - 0x462], ax
movzx eax, word [0x402e5c]
add eax, 0xb
mov word [ebp - 0x460], ax
movzx eax, word [0x402e5e]
add eax, 0xb
mov word [ebp - 0x45e], ax
movzx eax, word [0x402e60]
add eax, 0xb
mov word [ebp - 0x45c], ax
movzx eax, word [0x402e62]
add eax, 0xb
mov word [ebp - 0x45a], ax
movzx eax, word [0x402e64]
add eax, 0xb
mov word [ebp - 0x458], ax
movzx eax, word [0x402e66]
add eax, 0xb
mov word [ebp - 0x456], ax
movzx eax, word [0x402e68]
add eax, 0xb
mov word [ebp - 0x454], ax
movzx eax, word [0x402e6a]
add eax, 0xb
mov word [ebp - 0x452], ax
movzx eax, word [0x402e6c]
add eax, 0xb
mov word [ebp - 0x450], ax
movzx eax, word [0x402e6e]
add eax, 0xb
mov word [ebp - 0x44e], ax
movzx eax, word [0x402e70]
add eax, 0xb
mov word [ebp - 0x44c], ax
movzx eax, word [0x402e72]
add eax, 0xb
mov word [ebp - 0x44a], ax
movzx eax, word [0x402e74]
add eax, 0xb
mov word [ebp - 0x448], ax
movzx eax, word [0x402e76]
add eax, 0xb
mov word [ebp - 0x446], ax
movzx eax, word [0x402e78]
add eax, 0xb
mov word [ebp - 0x444], ax
movzx eax, word [0x402e7a]
add eax, 0xb
mov word [ebp - 0x442], ax
movzx eax, word [0x402e7c]
add eax, 0xb
mov word [ebp - 0x440], ax
movzx eax, word [0x402e7e]
add eax, 0xb
mov word [ebp - 0x43e], ax
movzx eax, word [0x402e80]
add eax, 0xb
mov word [ebp - 0x43c], ax
movzx eax, word [0x402e82]
add eax, 0xb
mov word [ebp - 0x43a], ax
movzx eax, word [0x402e84]
add eax, 0xb
mov word [ebp - 0x438], ax
movzx eax, word [0x402e86]
add eax, 0xb
mov word [ebp - 0x436], ax
movzx eax, word [0x402e88]
add eax, 0xb
mov word [ebp - 0x434], ax
movzx eax, word [0x402e8a]
add eax, 0xb
mov word [ebp - 0x432], ax
movzx eax, word [0x402e8c]
add eax, 0xb
mov word [ebp - 0x430], ax
movzx eax, word [0x402e8e]
add eax, 0xb
mov word [ebp - 0x42e], ax
movzx eax, word [0x402e90]
add eax, 0xb
mov word [ebp - 0x42c], ax
movzx eax, word [0x402e92]
add eax, 0xb
mov word [ebp - 0x42a], ax
movzx eax, word [0x402e94]
add eax, 0xb
mov word [ebp - 0x428], ax
xor eax, eax
mov word [ebp - 0x426], ax
xor ecx, ecx
mov ax, word [ebp - 0x514]
nop
mov ax, word [ebp + ecx*2 - 0x514]
movzx eax, ax
add eax, 0xfffffff5
mov word [ebp + ecx*2 - 0x514], ax
inc ecx
cmp ecx, 0x77
jb 0x449910
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x58c], eax
mov dword [ebp - 0x58], 0x1d
mov eax, dword [ebp - 0x58]
xor eax, 0x2f
mov word [ebp - 0x54], ax
mov eax, dword [ebp - 0x58]
inc eax
xor eax, 0x49
mov word [ebp - 0x52], ax
mov eax, dword [ebp - 0x58]
add eax, 2
xor eax, 0x4d
mov word [ebp - 0x50], ax
mov eax, dword [ebp - 0x58]
add eax, 3
xor eax, 0x20
mov word [ebp - 0x4e], ax
mov eax, dword [ebp - 0x58]
add eax, 4
xor eax, 0x22
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x58]
add eax, 5
xor eax, 0x25
mov word [ebp - 0x4a], ax
mov eax, dword [ebp - 0x58]
add eax, 6
xor eax, 0x73
mov word [ebp - 0x48], ax
mov eax, dword [ebp - 0x58]
add eax, 7
xor eax, 0x22
mov word [ebp - 0x46], ax
mov eax, dword [ebp - 0x58]
add eax, 8
xor eax, 0x20
mov word [ebp - 0x44], ax
mov eax, dword [ebp - 0x58]
add eax, 9
xor eax, 0x2f
mov word [ebp - 0x42], ax
mov eax, dword [ebp - 0x58]
add eax, 0xa
xor eax, 0x46
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x58]
add eax, 0xb
mov word [ebp - 0x3e], ax
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e38]
add eax, 0xc
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x3c], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e3a]
add eax, 0xd
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x3a], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e3c]
add eax, 0xe
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x38], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e3e]
add eax, 0xf
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x36], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e40]
add eax, 0x10
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x34], cx
mov eax, dword [ebp - 0x58]
add eax, 0x11
movzx ecx, word [0x402e42]
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x32], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e44]
add eax, 0x12
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x30], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e46]
add eax, 0x13
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x2e], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e48]
add eax, 0x14
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x2c], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e4a]
add eax, 0x15
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x2a], cx
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x402e4c]
add eax, 0x16
movzx eax, ax
xor ecx, eax
xor eax, eax
mov word [ebp - 0x28], cx
xor edx, edx
mov word [ebp - 0x26], ax
mov ax, word [ebp - 0x54]
nop
mov ax, word [ebp + edx*2 - 0x54]
mov ecx, dword [ebp - 0x58]
add ecx, edx
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0x54], cx
inc edx
cmp edx, 0x17
jb 0x449ad0
xor eax, eax
mov edx, 0x29
mov word [ebp - 0x26], ax
mov eax, 0x77
mov word [ebp - 0x1d0], dx
mov word [ebp - 0x1ce], ax
mov eax, 4
mov word [ebp - 0x1cc], ax
movzx eax, word [0x402e3e]
add eax, 4
mov word [ebp - 0x1ca], ax
movzx eax, word [0x402e40]
add eax, 4
mov word [ebp - 0x1c8], ax
xor eax, eax
mov word [ebp - 0x1c6], ax
xor ecx, ecx
mov ax, word [ebp - 0x1d0]
nop dword [eax + eax]
mov ax, word [ebp + ecx*2 - 0x1d0]
movzx eax, ax
add eax, 0xfffffffc
mov word [ebp + ecx*2 - 0x1d0], ax
inc ecx
cmp ecx, 5
jb 0x449b50
mov edx, dword [0x4f8a2c]
xor ebx, ebx
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x564], 0
mov eax, dword [edx + ebx*4]
test eax, eax
je 0x449ba7
xor ecx, ecx
cmp word [eax], cx
je 0x449ba7
lea eax, [eax + 2]
inc ecx
cmp word [eax], 0
jne 0x449b96
test ecx, ecx
je 0x449ba7
inc ebx
jmp 0x449b88
mov ecx, 0x800
call fcn.004baba0
mov esi, eax
mov dword [ebp - 0xc], esi
test esi, esi
je 0x44bf5b
mov eax, dword [edi]
push 0x400
push esi
push 1
push edi
call dword [eax + 0x38]
test eax, eax
js 0x44bf5b
mov dword [ebp - 0x8c], 0x6f
mov eax, dword [ebp - 0x8c]
xor eax, 0x50
mov word [ebp - 0x88], ax
mov eax, dword [ebp - 0x8c]
inc eax
xor eax, 0x72
mov word [ebp - 0x86], ax
mov eax, dword [ebp - 0x8c]
add eax, 2
xor eax, 0x65
mov word [ebp - 0x84], ax
mov eax, dword [ebp - 0x8c]
add eax, 3
xor eax, 0x66
mov word [ebp - 0x82], ax
mov eax, dword [ebp - 0x8c]
add eax, 4
xor eax, 0x65
mov word [ebp - 0x80], ax
mov eax, dword [ebp - 0x8c]
add eax, 5
xor eax, 0x72
mov word [ebp - 0x7e], ax
mov eax, dword [ebp - 0x8c]
add eax, 6
xor eax, 0x65
mov word [ebp - 0x7c], ax
mov eax, dword [ebp - 0x8c]
add eax, 7
xor eax, 0x6e
mov word [ebp - 0x7a], ax
mov eax, dword [ebp - 0x8c]
add eax, 8
xor eax, 0x63
mov word [ebp - 0x78], ax
mov eax, dword [ebp - 0x8c]
add eax, 9
xor eax, 0x65
mov word [ebp - 0x76], ax
mov eax, dword [ebp - 0x8c]
add eax, 0xa
xor eax, 0x73
mov word [ebp - 0x74], ax
mov eax, dword [ebp - 0x8c]
add eax, 0xb
mov word [ebp - 0x72], ax
mov eax, dword [ebp - 0x8c]
movzx ecx, word [0x4025e0]
add eax, 0xc
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x70], cx
mov eax, dword [ebp - 0x8c]
movzx ecx, word [0x4025e2]
add eax, 0xd
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x6e], cx
mov eax, dword [ebp - 0x8c]
movzx ecx, word [0x4025e4]
add eax, 0xe
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x6c], cx
mov eax, dword [ebp - 0x8c]
movzx ecx, word [0x4025e6]
add eax, 0xf
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x6a], cx
mov eax, dword [ebp - 0x8c]
movzx ecx, word [0x4025e8]
add eax, 0x10
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x68], cx
mov eax, dword [ebp - 0x8c]
movzx ecx, word [0x4025ea]
add eax, 0x11
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x66], cx
mov eax, dword [ebp - 0x8c]
movzx ecx, word [0x4025ec]
add eax, 0x12
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x64], cx
mov eax, dword [ebp - 0x8c]
movzx ecx, word [0x4025ee]
add eax, 0x13
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x62], cx
mov eax, dword [ebp - 0x8c]
movzx ecx, word [0x4025f0]
add eax, 0x14
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x60], cx
mov eax, dword [ebp - 0x8c]
movzx ecx, word [0x4025f2]
add eax, 0x15
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x5e], cx
mov eax, dword [ebp - 0x8c]
movzx ecx, word [0x4025f4]
add eax, 0x16
movzx eax, ax
xor ecx, eax
xor eax, eax
mov word [ebp - 0x5c], cx
xor edx, edx
mov word [ebp - 0x5a], ax
mov ax, word [ebp - 0x88]
nop dword [eax]
nop dword [eax + eax]
mov ax, word [ebp + edx*2 - 0x88]
mov ecx, dword [ebp - 0x8c]
add ecx, edx
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0x88], cx
inc edx
cmp edx, 0x17
jb 0x449dd0
mov edi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
xor eax, eax
mov word [ebp - 0x5a], ax
lea eax, [ebp - 0x88]
push eax
push esi
call edi
test eax, eax
je 0x44bf5b
mov eax, dword [0x4f081c]
test eax, eax
jne 0x449e24
call fcn.00411a10
mov dword [0x4f081c], eax
mov ecx, dword [0x4f07dc]
test ecx, ecx
jne 0x449e3d
mov ecx, eax
call fcn.00411b50
mov ecx, eax
mov dword [0x4f07dc], ecx
push 0
push esi
call ecx
mov dword [ebp - 0x210], 0x46
mov eax, 0x15
mov word [ebp - 0x20c], ax
mov ecx, 0x23
mov eax, 0x25
mov edx, 0x22
mov word [ebp - 0x20a], ax
mov eax, 0x2e
mov word [ebp - 0x208], ax
mov eax, 0x33
mov word [ebp - 0x206], cx
mov word [ebp - 0x204], dx
mov word [ebp - 0x202], ax
mov eax, 0x2a
mov word [ebp - 0x200], ax
mov eax, 0x12
mov word [ebp - 0x1fe], cx
mov ecx, 0x35
mov word [ebp - 0x1fc], dx
mov word [ebp - 0x1fa], ax
mov eax, 0x27
mov word [ebp - 0x1f8], ax
mov eax, 0x2d
mov word [ebp - 0x1f6], cx
mov word [ebp - 0x1f4], ax
mov eax, 0x46
mov word [ebp - 0x1f2], cx
mov word [ebp - 0x1f0], ax
movzx eax, word [0x402e5e]
xor eax, 0x46
mov word [ebp - 0x1ee], ax
movzx eax, word [0x402e60]
xor eax, 0x46
mov word [ebp - 0x1ec], ax
movzx eax, word [0x402e62]
xor eax, 0x46
mov word [ebp - 0x1ea], ax
movzx eax, word [0x402e64]
xor eax, 0x46
mov word [ebp - 0x1e8], ax
movzx eax, word [0x402e66]
xor eax, 0x46
mov word [ebp - 0x1e6], ax
movzx eax, word [0x402e68]
xor eax, 0x46
mov word [ebp - 0x1e4], ax
movzx eax, word [0x402e6a]
xor eax, 0x46
mov word [ebp - 0x1e2], ax
movzx eax, word [0x402e6c]
xor eax, 0x46
mov word [ebp - 0x1e0], ax
movzx eax, word [0x402e6e]
xor eax, 0x46
mov word [ebp - 0x1de], ax
movzx eax, word [0x402e70]
xor eax, 0x46
mov word [ebp - 0x1dc], ax
movzx eax, word [0x402e72]
xor eax, 0x46
mov word [ebp - 0x1da], ax
movzx eax, word [0x402e74]
xor eax, 0x46
mov word [ebp - 0x1d8], ax
movzx eax, word [0x402e76]
xor eax, 0x46
mov word [ebp - 0x1d6], ax
movzx eax, word [0x402e78]
xor eax, 0x46
mov word [ebp - 0x1d4], ax
xor eax, eax
mov word [ebp - 0x1d2], ax
xor edx, edx
mov ax, word [ebp - 0x20c]
mov ax, word [ebp + edx*2 - 0x20c]
movzx ecx, ax
mov eax, dword [ebp - 0x210]
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0x20c], cx
inc edx
cmp edx, 0x1d
jb 0x449ff1
xor eax, eax
mov word [ebp - 0x1d2], ax
lea eax, [ebp - 0x20c]
push eax
push esi
call edi
test eax, eax
je 0x44bf5b
mov eax, dword [0x4f081c]
test eax, eax
jne 0x44a043
call fcn.00411a10
mov dword [0x4f081c], eax
mov ecx, dword [0x4f07dc]
test ecx, ecx
jne 0x44a05c
mov ecx, eax
call fcn.00411b50
mov ecx, eax
mov dword [0x4f07dc], ecx
push 0
push esi
call ecx
mov dword [ebp - 0x264], 8
mov eax, 0x54
mov word [ebp - 0x260], ax
mov edx, 0x6c
mov eax, 0x5b
mov ecx, 0x7d
mov word [ebp - 0x25e], ax
mov eax, 0x6b
mov word [ebp - 0x25c], ax
mov eax, 0x60
mov word [ebp - 0x25a], ax
mov eax, 0x6d
mov word [ebp - 0x258], ax
mov word [ebp - 0x256], dx
mov word [ebp - 0x254], cx
mov ecx, 0x64
mov word [ebp - 0x252], cx
mov word [ebp - 0x250], ax
mov eax, 0x5c
mov word [ebp - 0x24e], dx
mov edx, 0x7b
mov word [ebp - 0x24c], ax
mov eax, 0x69
mov word [ebp - 0x24a], ax
mov eax, 0x63
mov word [ebp - 0x248], dx
mov word [ebp - 0x246], ax
mov eax, 0x26
mov word [ebp - 0x244], dx
mov word [ebp - 0x242], ax
mov eax, 0x70
mov word [ebp - 0x240], ax
mov eax, 0x65
mov word [ebp - 0x23e], ax
mov eax, 8
mov word [ebp - 0x23c], cx
mov word [ebp - 0x23a], ax
movzx eax, word [0x402e88]
xor eax, 8
mov word [ebp - 0x238], ax
movzx eax, word [0x402e8a]
xor eax, 8
mov word [ebp - 0x236], ax
movzx eax, word [0x402e8c]
xor eax, 8
mov word [ebp - 0x234], ax
movzx eax, word [0x402e8e]
xor eax, 8
mov word [ebp - 0x232], ax
movzx eax, word [0x402e90]
xor eax, 8
mov word [ebp - 0x230], ax
movzx eax, word [0x402e92]
xor eax, 8
mov word [ebp - 0x22e], ax
movzx eax, word [0x402e94]
xor eax, 8
mov word [ebp - 0x22c], ax
movzx eax, word [0x402e96]
xor eax, 8
mov word [ebp - 0x22a], ax
movzx eax, word [0x402e98]
xor eax, 8
mov word [ebp - 0x228], ax
movzx eax, word [0x402e9a]
xor eax, 8
mov word [ebp - 0x226], ax
movzx eax, word [0x402e9c]
xor eax, 8
mov word [ebp - 0x224], ax
movzx eax, word [0x402e9e]
xor eax, 8
mov word [ebp - 0x222], ax
movzx eax, word [0x402ea0]
xor eax, 8
mov word [ebp - 0x220], ax
movzx eax, word [0x402ea2]
xor eax, 8
mov word [ebp - 0x21e], ax
movzx eax, word [0x402ea4]
xor eax, 8
mov word [ebp - 0x21c], ax
movzx eax, word [0x402ea6]
xor eax, 8
mov word [ebp - 0x21a], ax
movzx eax, word [0x402ea8]
xor eax, 8
mov word [ebp - 0x218], ax
movzx eax, word [0x402eaa]
xor eax, 8
mov word [ebp - 0x216], ax
movzx eax, word [0x402eac]
xor eax, 8
mov word [ebp - 0x214], ax
xor eax, eax
mov word [ebp - 0x212], ax
xor edx, edx
mov ax, word [ebp - 0x260]
nop dword [eax]
mov ax, word [ebp + edx*2 - 0x260]
movzx ecx, ax
mov eax, dword [ebp - 0x264]
movzx eax, ax
xor eax, ecx
mov word [ebp + edx*2 - 0x260], ax
inc edx
cmp edx, 0x27
jb 0x44a2a0
lea edx, [ebp - 0x260]
xor eax, eax
mov ecx, edx
mov word [ebp - 0x212], ax
mov dword [ebp - 8], ecx
nop dword [eax + eax]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x44a2e0
sub edx, ecx
lea edi, [esi - 2]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x44a2f0
mov esi, dword [ebp - 8]
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x4f081c]
test ecx, ecx
jne 0x44a324
call fcn.00411a10
mov ecx, eax
mov dword [0x4f081c], ecx
mov eax, dword [0x4f0810]
test eax, eax
jne 0x44a337
call fcn.00411cc0
mov dword [0x4f0810], eax
mov esi, dword [ebp - 0xc]
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push esi
call eax
mov edi, eax
mov dword [ebp - 8], edi
cmp edi, 0xffffffff
je 0x44bf5e
mov eax, dword [0x4f081c]
test eax, eax
jne 0x44a370
call fcn.00411a10
mov dword [0x4f081c], eax
mov ecx, dword [0x4f0840]
test ecx, ecx
jne 0x44a389
mov ecx, eax
call fcn.00412a70
mov ecx, eax
mov dword [0x4f0840], ecx
push 0
push edi
call ecx
lea eax, [ebp - 0x588]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x800
call fcn.004baba0
mov dword [ebp - 0x24], eax
test eax, eax
je 0x44bf5e
mov dword [ebp - 0x15c], 0x25
mov eax, dword [ebp - 0x15c]
xor eax, 0x25
mov word [ebp - 0x158], ax
mov eax, dword [ebp - 0x15c]
inc eax
xor eax, 0x30
mov word [ebp - 0x156], ax
mov eax, dword [ebp - 0x15c]
add eax, 2
xor eax, 0x34
mov word [ebp - 0x154], ax
mov eax, dword [ebp - 0x15c]
add eax, 3
xor eax, 0x64
mov word [ebp - 0x152], ax
mov eax, dword [ebp - 0x15c]
add eax, 4
xor eax, 0x2d
mov word [ebp - 0x150], ax
mov eax, dword [ebp - 0x15c]
add eax, 5
xor eax, 0x25
mov word [ebp - 0x14e], ax
mov eax, dword [ebp - 0x15c]
add eax, 6
xor eax, 0x30
mov word [ebp - 0x14c], ax
mov eax, dword [ebp - 0x15c]
add eax, 7
xor eax, 0x32
mov word [ebp - 0x14a], ax
mov eax, dword [ebp - 0x15c]
add eax, 8
xor eax, 0x64
mov word [ebp - 0x148], ax
mov eax, dword [ebp - 0x15c]
add eax, 9
xor eax, 0x2d
mov word [ebp - 0x146], ax
mov eax, dword [ebp - 0x15c]
add eax, 0xa
xor eax, 0x25
mov word [ebp - 0x144], ax
mov eax, dword [ebp - 0x15c]
add eax, 0xb
xor eax, 0x30
mov word [ebp - 0x142], ax
mov eax, dword [ebp - 0x15c]
add eax, 0xc
xor eax, 0x32
mov word [ebp - 0x140], ax
mov eax, dword [ebp - 0x15c]
add eax, 0xd
xor eax, 0x64
mov word [ebp - 0x13e], ax
mov eax, dword [ebp - 0x15c]
add eax, 0xe
xor eax, 0x20
mov word [ebp - 0x13c], ax
mov eax, dword [ebp - 0x15c]
add eax, 0xf
xor eax, 0x25
mov word [ebp - 0x13a], ax
mov eax, dword [ebp - 0x15c]
add eax, 0x10
xor eax, 0x30
mov word [ebp - 0x138], ax
mov eax, dword [ebp - 0x15c]
add eax, 0x11
xor eax, 0x32
mov word [ebp - 0x136], ax
mov eax, dword [ebp - 0x15c]
add eax, 0x12
xor eax, 0x64
mov word [ebp - 0x134], ax
mov eax, dword [ebp - 0x15c]
add eax, 0x13
xor eax, 0x3a
mov word [ebp - 0x132], ax
mov eax, dword [ebp - 0x15c]
add eax, 0x14
xor eax, 0x25
mov word [ebp - 0x130], ax
mov eax, dword [ebp - 0x15c]
add eax, 0x15
xor eax, 0x30
mov word [ebp - 0x12e], ax
mov eax, dword [ebp - 0x15c]
add eax, 0x16
xor eax, 0x32
mov word [ebp - 0x12c], ax
mov eax, dword [ebp - 0x15c]
add eax, 0x17
xor eax, 0x64
mov word [ebp - 0x12a], ax
mov eax, dword [ebp - 0x15c]
add eax, 0x18
xor eax, 0x3a
mov word [ebp - 0x128], ax
mov eax, dword [ebp - 0x15c]
add eax, 0x19
xor eax, 0x25
mov word [ebp - 0x126], ax
mov eax, dword [ebp - 0x15c]
add eax, 0x1a
xor eax, 0x30
mov word [ebp - 0x124], ax
mov eax, dword [ebp - 0x15c]
add eax, 0x1b
xor eax, 0x32
mov word [ebp - 0x122], ax
mov eax, dword [ebp - 0x15c]
add eax, 0x1c
xor eax, 0x64
mov word [ebp - 0x120], ax
mov eax, dword [ebp - 0x15c]
add eax, 0x1d
mov word [ebp - 0x11e], ax
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402640]
add eax, 0x1e
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x11c], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402642]
add eax, 0x1f
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x11a], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402644]
add eax, 0x20
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x118], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402646]
add eax, 0x21
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x116], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402648]
add eax, 0x22
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x114], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x40264a]
add eax, 0x23
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x112], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x40264c]
add eax, 0x24
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x110], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x40264e]
add eax, 0x25
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x10e], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402650]
add eax, 0x26
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x10c], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402652]
add eax, 0x27
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x10a], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402654]
add eax, 0x28
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x108], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402656]
add eax, 0x29
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x106], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402658]
add eax, 0x2a
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x104], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x40265a]
add eax, 0x2b
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x102], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x40265c]
add eax, 0x2c
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x100], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x40265e]
add eax, 0x2d
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xfe], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402660]
add eax, 0x2e
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xfc], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402662]
add eax, 0x2f
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xfa], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402664]
add eax, 0x30
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xf8], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402666]
add eax, 0x31
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xf6], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402668]
add eax, 0x32
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xf4], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x40266a]
add eax, 0x33
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xf2], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x40266c]
add eax, 0x34
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xf0], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x40266e]
add eax, 0x35
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xee], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402670]
add eax, 0x36
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xec], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402672]
add eax, 0x37
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xea], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402674]
add eax, 0x38
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xe8], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402676]
add eax, 0x39
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xe6], cx
mov eax, dword [ebp - 0x15c]
movzx ecx, word [0x402678]
add eax, 0x3a
movzx eax, ax
xor ecx, eax
xor eax, eax
mov word [ebp - 0xe4], cx
xor edx, edx
mov word [ebp - 0xe2], ax
mov ax, word [ebp - 0x158]
nop word [eax + eax]
mov ax, word [ebp + edx*2 - 0x158]
mov ecx, dword [ebp - 0x15c]
add ecx, edx
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0x158], cx
inc edx
cmp edx, 0x3b
jb 0x44a930
xor eax, eax
mov word [ebp - 0xe2], ax
mov eax, dword [0x4f07ac]
test eax, eax
jne 0x44a96f
call fcn.00411d90
mov dword [0x4f07ac], eax
mov ecx, dword [0x4f07b8]
test ecx, ecx
jne 0x44a988
mov ecx, eax
call fcn.00411e30
mov ecx, eax
mov dword [0x4f07b8], ecx
movzx eax, word [ebp - 0x57c]
push eax
movzx eax, word [ebp - 0x57e]
push eax
movzx eax, word [ebp - 0x580]
push eax
movzx eax, word [ebp - 0x582]
push eax
movzx eax, word [ebp - 0x586]
push eax
movzx eax, word [ebp - 0x588]
push eax
lea eax, [ebp - 0x158]
push eax
push dword [ebp - 0x24]
call ecx
mov ecx, dword [0x4f07b4]
add esp, 0x20
test ecx, ecx
jne 0x44a9de
call fcn.00411f00
mov ecx, eax
mov dword [0x4f07b4], ecx
mov eax, dword [0x4f0814]
test eax, eax
jne 0x44a9f1
call fcn.00411fa0
mov dword [0x4f0814], eax
lea ecx, [ebp - 0x59c]
push ecx
call eax
test eax, eax
js 0x44bf5e
mov ecx, 0x800
call fcn.004baba0
mov dword [ebp - 0x14], eax
test eax, eax
je 0x44bf5e
mov eax, dword [0x4f07b4]
test eax, eax
jne 0x44aa2a
call fcn.00411f00
mov dword [0x4f07b4], eax
mov ecx, dword [0x4f07f4]
test ecx, ecx
jne 0x44aa43
mov ecx, eax
call fcn.00412070
mov ecx, eax
mov dword [0x4f07f4], ecx
push 0x400
push dword [ebp - 0x14]
lea eax, [ebp - 0x59c]
push eax
call ecx
test eax, eax
je 0x44bf5e
mov ecx, 0x1fffe
call fcn.004baba0
mov dword [ebp - 4], eax
test eax, eax
je 0x44bf5e
mov ecx, ebx
shl ecx, 0xb
add ecx, 2
call fcn.004baba0
mov dword [ebp - 0x20], eax
test eax, eax
je 0x44bf5e
mov edx, dword [ebp + 0xc]
xor ecx, ecx
mov eax, edx
test edx, edx
je 0x44aaaa
cmp word [edx], cx
je 0x44aaaa
nop dword [eax]
lea eax, [eax + 2]
inc ecx
cmp word [eax], 0
jne 0x44aaa0
shl ecx, 0xb
add ecx, 2
call fcn.004baba0
mov dword [ebp - 0x18], eax
test eax, eax
je 0x44bf5e
mov ecx, 0x1fffe
call fcn.004baba0
mov dword [ebp - 0x10], eax
test eax, eax
je 0x44bf91
mov ecx, 0x800
call fcn.004baba0
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x44bf5e
xor edi, edi
xor esi, esi
nop
mov eax, dword [0x4f8a2c]
cmp dword [esi + eax], 0
je 0x44af99
mov ecx, 0x800
call fcn.004baba0
mov dword [ebp - 0x1ac], eax
test eax, eax
je 0x44af8a
mov eax, dword [0x4f8a2c]
push dword [esi + eax]
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x1ac]
push 0x400
push eax
call fcn.004bb120
mov eax, dword [ebp - 0x20]
mov edx, 0x29
mov ecx, 0x26
add esp, 0x10
lea eax, [eax + edi*2]
mov dword [ebp - 0x1b8], eax
mov eax, 0x36
mov dword [ebp - 0x33c], 0x75
mov word [ebp - 0x338], ax
mov eax, 0x4f
mov word [ebp - 0x336], ax
mov eax, 0x22
mov word [ebp - 0x334], dx
mov word [ebp - 0x332], ax
mov eax, 0x1c
mov word [ebp - 0x330], ax
mov eax, 0x1b
mov word [ebp - 0x32e], ax
mov eax, 0x11
mov word [ebp - 0x32c], ax
mov eax, 0x1a
mov word [ebp - 0x32a], ax
mov eax, 2
mov word [ebp - 0x328], ax
mov eax, 6
mov word [ebp - 0x326], ax
mov word [ebp - 0x324], dx
mov word [ebp - 0x322], cx
mov ecx, 0xc
mov word [ebp - 0x320], cx
mov ecx, 1
mov word [ebp - 0x31e], ax
mov word [ebp - 0x31c], cx
mov ecx, 0x10
mov word [ebp - 0x31a], cx
mov ecx, 0x18
mov word [ebp - 0x318], cx
mov ecx, 0x46
mov word [ebp - 0x316], cx
mov ecx, 0x47
mov word [ebp - 0x314], cx
mov ecx, 0x14
mov word [ebp - 0x312], dx
mov edx, 1
mov word [ebp - 0x310], dx
mov word [ebp - 0x30e], cx
mov ecx, 0x10
mov word [ebp - 0x30c], ax
mov eax, 0x1e
mov word [ebp - 0x30a], ax
mov word [ebp - 0x308], ax
mov eax, 0x1c
mov word [ebp - 0x306], ax
mov eax, 0x19
mov word [ebp - 0x304], ax
mov word [ebp - 0x302], ax
mov eax, 0x5b
mov word [ebp - 0x300], ax
mov eax, 0xd
mov word [ebp - 0x2fe], cx
mov word [ebp - 0x2fc], ax
mov eax, 0x75
mov word [ebp - 0x2fa], cx
mov word [ebp - 0x2f8], ax
movzx eax, word [0x402eca]
xor eax, 0x75
mov word [ebp - 0x2f6], ax
movzx eax, word [0x402ecc]
xor eax, 0x75
mov word [ebp - 0x2f4], ax
movzx eax, word [0x402ece]
xor eax, 0x75
mov word [ebp - 0x2f2], ax
movzx eax, word [0x402ed0]
xor eax, 0x75
mov word [ebp - 0x2f0], ax
movzx eax, word [0x402ed2]
xor eax, 0x75
mov word [ebp - 0x2ee], ax
movzx eax, word [0x402ed4]
xor eax, 0x75
mov word [ebp - 0x2ec], ax
movzx eax, word [0x402ed6]
xor eax, 0x75
mov word [ebp - 0x2ea], ax
movzx eax, word [0x402ed8]
xor eax, 0x75
mov word [ebp - 0x2e8], ax
movzx eax, word [0x402eda]
xor eax, 0x75
mov word [ebp - 0x2e6], ax
movzx eax, word [0x402edc]
xor eax, 0x75
mov word [ebp - 0x2e4], ax
movzx eax, word [0x402ede]
xor eax, 0x75
mov word [ebp - 0x2e2], ax
movzx eax, word [0x402ee0]
xor eax, 0x75
mov word [ebp - 0x2e0], ax
movzx eax, word [0x402ee2]
xor eax, 0x75
mov word [ebp - 0x2de], ax
movzx eax, word [0x402ee4]
xor eax, 0x75
mov word [ebp - 0x2dc], ax
movzx eax, word [0x402ee6]
xor eax, 0x75
mov word [ebp - 0x2da], ax
movzx eax, word [0x402ee8]
xor eax, 0x75
mov word [ebp - 0x2d8], ax
movzx eax, word [0x402eea]
xor eax, 0x75
mov word [ebp - 0x2d6], ax
movzx eax, word [0x402eec]
xor eax, 0x75
mov word [ebp - 0x2d4], ax
movzx eax, word [0x402eee]
xor eax, 0x75
mov word [ebp - 0x2d2], ax
movzx eax, word [0x402ef0]
xor eax, 0x75
mov word [ebp - 0x2d0], ax
movzx eax, word [0x402ef2]
xor eax, 0x75
mov word [ebp - 0x2ce], ax
movzx eax, word [0x402ef4]
xor eax, 0x75
mov word [ebp - 0x2cc], ax
movzx eax, word [0x402ef6]
xor eax, 0x75
mov word [ebp - 0x2ca], ax
movzx eax, word [0x402ef8]
xor eax, 0x75
mov word [ebp - 0x2c8], ax
movzx eax, word [0x402efa]
xor eax, 0x75
mov word [ebp - 0x2c6], ax
movzx eax, word [0x402efc]
xor eax, 0x75
mov word [ebp - 0x2c4], ax
movzx eax, word [0x402efe]
xor eax, 0x75
mov word [ebp - 0x2c2], ax
movzx eax, word [0x402f00]
xor eax, 0x75
mov word [ebp - 0x2c0], ax
movzx eax, word [0x402f02]
xor eax, 0x75
mov word [ebp - 0x2be], ax
movzx eax, word [0x402f04]
xor eax, 0x75
mov word [ebp - 0x2bc], ax
movzx eax, word [0x402f06]
xor eax, 0x75
mov word [ebp - 0x2ba], ax
movzx eax, word [0x402f08]
xor eax, 0x75
mov word [ebp - 0x2b8], ax
xor eax, eax
mov word [ebp - 0x2b6], ax
xor edx, edx
mov ax, word [ebp - 0x338]
nop dword [eax + eax]
mov ax, word [ebp + edx*2 - 0x338]
movzx ecx, ax
mov eax, dword [ebp - 0x33c]
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0x338], cx
inc edx
cmp edx, 0x41
jb 0x44aef0
push dword [ebp - 0x1ac]
xor eax, eax
mov word [ebp - 0x2b6], ax
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x514]
push eax
mov eax, ebx
shl eax, 0xa
push eax
lea eax, [ebp - 0x1b8]
push eax
call fcn.004bb120
add esp, 0x14
push dword [ebp - 0x1b8]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add edi, eax
mov dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x578], eax
test eax, eax
je 0x44af8a
push 0x8000
lea eax, [ebp - 0x518]
push eax
lea eax, [ebp - 0x578]
push eax
push 0xffffffffffffffff
call fcn.00428d00
call eax
add esi, 4
cmp esi, 0xfa0
jb 0x44aaf0
lea eax, [ebp - 0x1b0]
push eax
push 0x2ce
push 0x4e1570
call fcn.00457d40
test eax, eax
je 0x44bf53
mov ebx, 0x2a
mov edx, 0x35
mov word [ebp - 0x424], bx
mov ecx, 0x37
mov word [ebp - 0x422], dx
mov eax, 0x5d
mov word [ebp - 0x420], cx
mov word [ebp - 0x41e], ax
mov word [ebp - 0x41c], bx
mov word [ebp - 0x41a], dx
mov word [ebp - 0x418], cx
mov word [ebp - 0x416], ax
mov word [ebp - 0x414], bx
mov word [ebp - 0x412], dx
mov word [ebp - 0x410], cx
mov word [ebp - 0x40e], ax
mov word [ebp - 0x40c], bx
mov word [ebp - 0x40a], dx
mov word [ebp - 0x408], cx
mov word [ebp - 0x406], ax
mov word [ebp - 0x404], bx
mov word [ebp - 0x402], dx
mov word [ebp - 0x400], cx
mov word [ebp - 0x3fe], ax
mov word [ebp - 0x3fc], bx
mov word [ebp - 0x3fa], dx
mov word [ebp - 0x3f8], cx
mov word [ebp - 0x3f6], ax
mov word [ebp - 0x3f4], bx
mov word [ebp - 0x3f2], dx
mov word [ebp - 0x3f0], cx
mov word [ebp - 0x3ee], ax
mov eax, 5
mov word [ebp - 0x3ec], ax
movzx eax, word [0x402f06]
add eax, 5
mov word [ebp - 0x3ea], ax
movzx eax, word [0x402f08]
add eax, 5
mov word [ebp - 0x3e8], ax
movzx eax, word [0x402f0a]
add eax, 5
mov word [ebp - 0x3e6], ax
movzx eax, word [0x402f0c]
add eax, 5
mov word [ebp - 0x3e4], ax
movzx eax, word [0x402f0e]
add eax, 5
mov word [ebp - 0x3e2], ax
movzx eax, word [0x402f10]
add eax, 5
mov word [ebp - 0x3e0], ax
movzx eax, word [0x402f12]
add eax, 5
mov word [ebp - 0x3de], ax
movzx eax, word [0x402f14]
add eax, 5
mov word [ebp - 0x3dc], ax
movzx eax, word [0x402f16]
add eax, 5
mov word [ebp - 0x3da], ax
movzx eax, word [0x402f18]
add eax, 5
mov word [ebp - 0x3d8], ax
movzx eax, word [0x402f1a]
add eax, 5
mov word [ebp - 0x3d6], ax
movzx eax, word [0x402f1c]
add eax, 5
mov word [ebp - 0x3d4], ax
movzx eax, word [0x402f1e]
add eax, 5
mov word [ebp - 0x3d2], ax
movzx eax, word [0x402f20]
add eax, 5
mov word [ebp - 0x3d0], ax
movzx eax, word [0x402f22]
add eax, 5
mov word [ebp - 0x3ce], ax
movzx eax, word [0x402f24]
add eax, 5
mov word [ebp - 0x3cc], ax
movzx eax, word [0x402f26]
add eax, 5
mov word [ebp - 0x3ca], ax
movzx eax, word [0x402f28]
add eax, 5
mov word [ebp - 0x3c8], ax
movzx eax, word [0x402f2a]
add eax, 5
mov word [ebp - 0x3c6], ax
movzx eax, word [0x402f2c]
add eax, 5
mov word [ebp - 0x3c4], ax
movzx eax, word [0x402f2e]
add eax, 5
mov word [ebp - 0x3c2], ax
movzx eax, word [0x402f30]
add eax, 5
mov word [ebp - 0x3c0], ax
movzx eax, word [0x402f32]
add eax, 5
mov word [ebp - 0x3be], ax
movzx eax, word [0x402f34]
add eax, 5
mov word [ebp - 0x3bc], ax
movzx eax, word [0x402f36]
add eax, 5
mov word [ebp - 0x3ba], ax
movzx eax, word [0x402f38]
add eax, 5
mov word [ebp - 0x3b8], ax
movzx eax, word [0x402f3a]
add eax, 5
mov word [ebp - 0x3b6], ax
movzx eax, word [0x402f3c]
add eax, 5
mov word [ebp - 0x3b4], ax
xor eax, eax
mov word [ebp - 0x3b2], ax
xor ecx, ecx
mov ax, word [ebp - 0x424]
nop dword [eax]
mov ax, word [ebp + ecx*2 - 0x424]
movzx eax, ax
add eax, 0xfffffffb
mov word [ebp + ecx*2 - 0x424], ax
inc ecx
cmp ecx, 0x39
jb 0x44b290
mov eax, dword [0x4f07ac]
test eax, eax
jne 0x44b2bf
call fcn.00411d90
mov dword [0x4f07ac], eax
mov ecx, dword [0x4f07b8]
test ecx, ecx
jne 0x44b2d8
mov ecx, eax
call fcn.00411e30
mov ecx, eax
mov dword [0x4f07b8], ecx
movzx eax, byte [0x4e250d]
push eax
movzx eax, byte [0x4e2507]
push eax
movzx eax, byte [0x4e2514]
push eax
movzx eax, byte [str.KOH_]
push eax
movzx eax, byte [0x4e2505]
push eax
movzx eax, byte [0x4e2508]
push eax
movzx eax, byte [0x4e2511]
push eax
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x5bc]
push eax
call ecx
mov dword [ebp - 0xe0], 0x5f
add esp, 0x24
mov eax, dword [ebp - 0xe0]
xor eax, 0x4e
mov word [ebp - 0xdc], ax
mov eax, dword [ebp - 0xe0]
inc eax
xor eax, 0x54
mov word [ebp - 0xda], ax
mov eax, dword [ebp - 0xe0]
add eax, 2
xor eax, 0x20
mov word [ebp - 0xd8], ax
mov eax, dword [ebp - 0xe0]
add eax, 3
xor eax, 0x41
mov word [ebp - 0xd6], ax
mov eax, dword [ebp - 0xe0]
add eax, 4
xor eax, 0x55
mov word [ebp - 0xd4], ax
mov eax, dword [ebp - 0xe0]
add eax, 5
xor eax, 0x54
mov word [ebp - 0xd2], ax
mov eax, dword [ebp - 0xe0]
add eax, 6
xor eax, 0x48
mov word [ebp - 0xd0], ax
mov eax, dword [ebp - 0xe0]
add eax, 7
xor eax, 0x4f
mov word [ebp - 0xce], ax
mov eax, dword [ebp - 0xe0]
add eax, 8
xor eax, 0x52
mov word [ebp - 0xcc], ax
mov eax, dword [ebp - 0xe0]
add eax, 9
xor eax, 0x49
mov word [ebp - 0xca], ax
mov eax, dword [ebp - 0xe0]
add eax, 0xa
xor eax, 0x54
mov word [ebp - 0xc8], ax
mov eax, dword [ebp - 0xe0]
add eax, 0xb
xor eax, 0x59
mov word [ebp - 0xc6], ax
mov eax, dword [ebp - 0xe0]
add eax, 0xc
xor eax, 0x5c
mov word [ebp - 0xc4], ax
mov eax, dword [ebp - 0xe0]
add eax, 0xd
xor eax, 0x53
mov word [ebp - 0xc2], ax
mov eax, dword [ebp - 0xe0]
add eax, 0xe
xor eax, 0x79
mov word [ebp - 0xc0], ax
mov eax, dword [ebp - 0xe0]
add eax, 0xf
xor eax, 0x73
mov word [ebp - 0xbe], ax
mov eax, dword [ebp - 0xe0]
add eax, 0x10
xor eax, 0x74
mov word [ebp - 0xbc], ax
mov eax, dword [ebp - 0xe0]
add eax, 0x11
xor eax, 0x65
mov word [ebp - 0xba], ax
mov eax, dword [ebp - 0xe0]
add eax, 0x12
xor eax, 0x6d
mov word [ebp - 0xb8], ax
mov eax, dword [ebp - 0xe0]
add eax, 0x13
mov word [ebp - 0xb6], ax
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402f30]
add eax, 0x14
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xb4], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402f32]
add eax, 0x15
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xb2], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402f34]
add eax, 0x16
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xb0], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402f36]
add eax, 0x17
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xae], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402f38]
add eax, 0x18
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xac], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402f3a]
add eax, 0x19
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xaa], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402f3c]
add eax, 0x1a
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xa8], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402f3e]
add eax, 0x1b
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xa6], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402f40]
add eax, 0x1c
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xa4], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402f42]
add eax, 0x1d
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xa2], cx
mov eax, dword [ebp - 0xe0]
add eax, 0x1e
movzx eax, ax
movzx ecx, word [0x402f44]
xor ecx, eax
mov word [ebp - 0xa0], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402f46]
add eax, 0x1f
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x9e], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402f48]
add eax, 0x20
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x9c], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402f4a]
add eax, 0x21
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x9a], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402f4c]
add eax, 0x22
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x98], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402f4e]
add eax, 0x23
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x96], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402f50]
add eax, 0x24
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x94], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402f52]
add eax, 0x25
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x92], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402f54]
add eax, 0x26
movzx eax, ax
xor ecx, eax
xor eax, eax
mov word [ebp - 0x90], cx
xor edx, edx
mov word [ebp - 0x8e], ax
mov ax, word [ebp - 0xdc]
nop word [eax + eax]
mov ax, word [ebp + edx*2 - 0xdc]
mov ecx, dword [ebp - 0xe0]
add ecx, edx
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0xdc], cx
inc edx
cmp edx, 0x27
jb 0x44b6d0
xor eax, eax
mov ecx, 0x56
mov word [ebp - 0x8e], ax
mov eax, 0x50
mov word [ebp - 0x2b4], ax
mov eax, 0x22
mov word [ebp - 0x2b2], cx
mov word [ebp - 0x2b0], ax
mov eax, 0x43
mov word [ebp - 0x2ae], ax
mov eax, 0x57
mov word [ebp - 0x2ac], ax
mov eax, 0x4a
mov word [ebp - 0x2aa], cx
mov word [ebp - 0x2a8], ax
mov eax, 0x51
mov word [ebp - 0x2a6], ax
mov eax, 0x54
mov word [ebp - 0x2a4], ax
mov eax, 0x4b
mov word [ebp - 0x2a2], ax
mov eax, 0x5b
mov word [ebp - 0x2a0], cx
mov word [ebp - 0x29e], ax
mov eax, 0x5e
mov word [ebp - 0x29c], ax
mov eax, 0x55
mov word [ebp - 0x29a], ax
mov eax, 0x7b
mov word [ebp - 0x298], ax
mov eax, 0x75
mov word [ebp - 0x296], ax
mov eax, 0x76
mov word [ebp - 0x294], ax
mov eax, 0x67
mov word [ebp - 0x292], ax
mov eax, 0x6f
mov word [ebp - 0x290], ax
mov eax, 2
mov word [ebp - 0x28e], ax
movzx eax, word [0x402f30]
add eax, 2
mov word [ebp - 0x28c], ax
movzx eax, word [0x402f32]
add eax, 2
mov word [ebp - 0x28a], ax
movzx eax, word [0x402f34]
add eax, 2
mov word [ebp - 0x288], ax
movzx eax, word [0x402f36]
add eax, 2
mov word [ebp - 0x286], ax
movzx eax, word [0x402f38]
add eax, 2
mov word [ebp - 0x284], ax
movzx eax, word [0x402f3a]
add eax, 2
mov word [ebp - 0x282], ax
movzx eax, word [0x402f3c]
add eax, 2
mov word [ebp - 0x280], ax
movzx eax, word [0x402f3e]
add eax, 2
mov word [ebp - 0x27e], ax
movzx eax, word [0x402f40]
add eax, 2
mov word [ebp - 0x27c], ax
movzx eax, word [0x402f42]
add eax, 2
mov word [ebp - 0x27a], ax
movzx eax, word [0x402f44]
add eax, 2
mov word [ebp - 0x278], ax
movzx eax, word [0x402f46]
add eax, 2
mov word [ebp - 0x276], ax
movzx eax, word [0x402f48]
add eax, 2
mov word [ebp - 0x274], ax
movzx eax, word [0x402f4a]
add eax, 2
mov word [ebp - 0x272], ax
movzx eax, word [0x402f4c]
add eax, 2
mov word [ebp - 0x270], ax
movzx eax, word [0x402f4e]
add eax, 2
mov word [ebp - 0x26e], ax
movzx eax, word [0x402f50]
add eax, 2
mov word [ebp - 0x26c], ax
movzx eax, word [0x402f52]
add eax, 2
mov word [ebp - 0x26a], ax
movzx eax, word [0x402f54]
add eax, 2
mov word [ebp - 0x268], ax
xor eax, eax
mov word [ebp - 0x266], ax
xor ecx, ecx
mov ax, word [ebp - 0x2b4]
nop word [eax + eax]
mov ax, word [ebp + ecx*2 - 0x2b4]
movzx eax, ax
add eax, 0xfffffffe
mov word [ebp + ecx*2 - 0x2b4], ax
inc ecx
cmp ecx, 0x27
jb 0x44b940
push dword [ebp - 0x20]
mov edi, dword [ebp + 8]
lea eax, [ebp - 0xdc]
push dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x24]
push eax
push edi
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x5bc]
push eax
push dword [ebp - 0x14]
push ebx
push eax
push dword [ebp - 0x1b0]
lea eax, [ebp - 0x10]
push 0xffff
push eax
call fcn.004bb120
add esp, 0x30
mov ecx, 0x800
call fcn.004baba0
mov esi, eax
test esi, esi
je 0x44ba3e
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x1bc], eax
mov eax, edx
test edx, edx
je 0x44b9d1
cmp word [edx], cx
je 0x44b9d1
lea eax, [eax + 2]
inc ecx
cmp word [eax], 0
jne 0x44b9c7
push 0x402f30
push edx
lea eax, [ebp - 0x514]
push eax
lea eax, [ecx + 0x400]
push eax
lea eax, [ebp - 0x1bc]
push eax
call fcn.004bb120
mov eax, dword [ebp - 0x1bc]
add esp, 0x14
test eax, eax
je 0x44ba12
xor ecx, ecx
cmp word [eax], cx
je 0x44ba12
cmp word [eax + 2], 0
lea eax, [eax + 2]
lea ecx, [ecx + 1]
jne 0x44ba05
push 0x8000
lea eax, [ebp - 0x574]
mov dword [ebp - 0x570], esi
push eax
lea eax, [ebp - 0x570]
mov dword [ebp - 0x574], 0
push eax
push 0xffffffffffffffff
call fcn.00428d00
call eax
mov edx, dword [ebp - 0x10]
xor ecx, ecx
mov eax, edx
test eax, eax
je 0x44ba5a
cmp word [edx], cx
je 0x44ba5a
nop
lea eax, [eax + 2]
inc ecx
cmp word [eax], 0
jne 0x44ba50
lea eax, [edx + ecx*2]
mov esi, 0x5c
mov dword [ebp - 0x568], eax
mov edx, 0x29
mov word [ebp - 0x3b0], dx
mov eax, 0x34
mov word [ebp - 0x3ae], ax
mov ecx, 0x36
mov word [ebp - 0x3ac], cx
mov word [ebp - 0x3aa], si
mov word [ebp - 0x3a8], dx
mov word [ebp - 0x3a6], ax
mov word [ebp - 0x3a4], cx
mov word [ebp - 0x3a2], si
mov word [ebp - 0x3a0], dx
mov word [ebp - 0x39e], ax
mov word [ebp - 0x39c], cx
mov word [ebp - 0x39a], si
mov word [ebp - 0x398], dx
mov word [ebp - 0x396], ax
mov word [ebp - 0x394], cx
mov word [ebp - 0x392], si
mov word [ebp - 0x390], dx
mov word [ebp - 0x38e], ax
mov word [ebp - 0x38c], cx
mov word [ebp - 0x38a], si
mov word [ebp - 0x388], dx
mov word [ebp - 0x386], ax
mov word [ebp - 0x384], cx
mov word [ebp - 0x382], si
mov word [ebp - 0x380], dx
mov word [ebp - 0x37e], ax
mov eax, 4
mov word [ebp - 0x37c], cx
mov word [ebp - 0x37a], si
mov word [ebp - 0x378], ax
movzx eax, word [0x402f06]
add eax, 4
mov word [ebp - 0x376], ax
movzx eax, word [0x402f08]
add eax, 4
mov word [ebp - 0x374], ax
movzx eax, word [0x402f0a]
add eax, 4
mov word [ebp - 0x372], ax
movzx eax, word [0x402f0c]
add eax, 4
mov word [ebp - 0x370], ax
movzx eax, word [0x402f0e]
add eax, 4
mov word [ebp - 0x36e], ax
movzx eax, word [0x402f10]
add eax, 4
mov word [ebp - 0x36c], ax
movzx eax, word [0x402f12]
add eax, 4
mov word [ebp - 0x36a], ax
movzx eax, word [0x402f14]
add eax, 4
mov word [ebp - 0x368], ax
movzx eax, word [0x402f16]
add eax, 4
mov word [ebp - 0x366], ax
movzx eax, word [0x402f18]
add eax, 4
mov word [ebp - 0x364], ax
movzx eax, word [0x402f1a]
add eax, 4
mov word [ebp - 0x362], ax
movzx eax, word [0x402f1c]
add eax, 4
mov word [ebp - 0x360], ax
movzx eax, word [0x402f1e]
add eax, 4
mov word [ebp - 0x35e], ax
movzx eax, word [0x402f20]
add eax, 4
mov word [ebp - 0x35c], ax
movzx eax, word [0x402f22]
add eax, 4
mov word [ebp - 0x35a], ax
movzx eax, word [0x402f24]
add eax, 4
mov word [ebp - 0x358], ax
movzx eax, word [0x402f26]
add eax, 4
mov word [ebp - 0x356], ax
movzx eax, word [0x402f28]
add eax, 4
mov word [ebp - 0x354], ax
movzx eax, word [0x402f2a]
add eax, 4
mov word [ebp - 0x352], ax
movzx eax, word [0x402f2c]
add eax, 4
mov word [ebp - 0x350], ax
movzx eax, word [0x402f2e]
add eax, 4
mov word [ebp - 0x34e], ax
movzx eax, word [0x402f30]
add eax, 4
mov word [ebp - 0x34c], ax
movzx eax, word [0x402f32]
add eax, 4
mov word [ebp - 0x34a], ax
movzx eax, word [0x402f34]
add eax, 4
mov word [ebp - 0x348], ax
movzx eax, word [0x402f36]
add eax, 4
mov word [ebp - 0x346], ax
movzx eax, word [0x402f38]
add eax, 4
mov word [ebp - 0x344], ax
movzx eax, word [0x402f3a]
add eax, 4
mov word [ebp - 0x342], ax
movzx eax, word [0x402f3c]
add eax, 4
mov word [ebp - 0x340], ax
xor eax, eax
mov word [ebp - 0x33e], ax
xor ecx, ecx
mov ax, word [ebp - 0x3b0]
nop word [eax + eax]
mov ax, word [ebp + ecx*2 - 0x3b0]
movzx eax, ax
add eax, 0xfffffffc
mov word [ebp + ecx*2 - 0x3b0], ax
inc ecx
cmp ecx, 0x39
jb 0x44bd40
mov eax, dword [0x4f07ac]
test eax, eax
jne 0x44bd6f
call fcn.00411d90
mov dword [0x4f07ac], eax
mov ecx, dword [0x4f07b8]
test ecx, ecx
jne 0x44bd88
mov ecx, eax
call fcn.00411e30
mov ecx, eax
mov dword [0x4f07b8], ecx
movzx eax, byte [0x4e2512]
push eax
movzx eax, byte [0x4e2514]
push eax
movzx eax, byte [0x4e250c]
push eax
movzx eax, byte [0x4e2501]
push eax
movzx eax, byte [0x4e2505]
push eax
movzx eax, byte [0x4e2509]
push eax
movzx eax, byte [0x4e2504]
push eax
lea eax, [ebp - 0x3b0]
push eax
lea eax, [ebp - 0x5dc]
push eax
call ecx
mov eax, dword [ebp - 0x56c]
add esp, 0x24
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push eax
push edi
push eax
lea eax, [ebp - 0x5dc]
push eax
push dword [ebp - 0x14]
push ebx
push eax
push dword [ebp - 0x1b0]
lea eax, [ebp - 0x568]
push 0xffff
push eax
call fcn.004bb120
add esp, 0x30
lea eax, [ebp - 0x1c0]
push eax
push 0x7f
push 0x4e1840
call fcn.00457d40
test eax, eax
je 0x44bf53
push dword [ebp - 0x10]
lea eax, [ebp - 4]
push dword [ebp - 0x1c0]
push 0xffff
push eax
call fcn.004bb120
mov ecx, dword [ebp - 4]
add esp, 0x10
mov eax, ecx
xor esi, esi
test eax, eax
je 0x44be5a
cmp word [ecx], si
je 0x44be5a
nop dword [eax]
lea eax, [eax + 2]
inc esi
cmp word [eax], 0
jne 0x44be50
mov eax, dword [0x4f081c]
test eax, eax
jne 0x44be70
call fcn.00411a10
mov ecx, dword [ebp - 4]
mov dword [0x4f081c], eax
mov edx, dword [0x4f07a8]
test edx, edx
jne 0x44be8c
mov ecx, eax
call fcn.00412140
mov ecx, dword [ebp - 4]
mov edx, eax
mov dword [0x4f07a8], edx
push 0
push 0
push 0
push 0
push esi
push ecx
push 0
push 0xfde9
call edx
mov edi, eax
test edi, edi
jle 0x44bf53
mov ecx, edi
call fcn.004baba0
mov ebx, eax
mov dword [ebp - 0x1c4], ebx
test ebx, ebx
je 0x44bf53
mov eax, dword [0x4f081c]
test eax, eax
jne 0x44bed3
call fcn.00411a10
mov dword [0x4f081c], eax
mov ecx, dword [0x4f07a8]
test ecx, ecx
jne 0x44beec
mov ecx, eax
call fcn.00412140
mov ecx, eax
mov dword [0x4f07a8], ecx
push 0
push 0
push edi
push ebx
push esi
push dword [ebp - 4]
push 0
push 0xfde9
call ecx
mov eax, dword [0x4f081c]
test eax, eax
jne 0x44bf12
call fcn.00411a10
mov dword [0x4f081c], eax
mov ecx, dword [0x4f0778]
test ecx, ecx
jne 0x44bf2b
mov ecx, eax
call fcn.00412210
mov ecx, eax
mov dword [0x4f0778], ecx
push 0
lea eax, [ebp - 0x564]
push eax
push edi
mov edi, dword [ebp - 8]
push ebx
push edi
call ecx
mov esi, dword [ebp - 0xc]
xor ecx, ecx
test eax, eax
mov eax, 1
cmovne ecx, eax
mov dword [ebp - 0x1b4], ecx
jmp 0x44bf5e
mov esi, dword [ebp - 0xc]
mov edi, dword [ebp - 8]
jmp 0x44bf5e
or edi, 0xffffffff
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x44bf91
mov dword [ebp - 0x558], eax
lea eax, [ebp - 0x55c]
push 0x8000
push eax
lea eax, [ebp - 0x558]
mov dword [ebp - 0x55c], 0
push eax
push 0xffffffffffffffff
call fcn.00428d00
call eax
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x44bfc4
mov dword [ebp - 0x550], eax
lea eax, [ebp - 0x554]
push 0x8000
push eax
lea eax, [ebp - 0x550]
mov dword [ebp - 0x554], 0
push eax
push 0xffffffffffffffff
call fcn.00428d00
call eax
mov eax, dword [ebp - 4]
test eax, eax
je 0x44bff7
mov dword [ebp - 0x548], eax
lea eax, [ebp - 0x54c]
push 0x8000
push eax
lea eax, [ebp - 0x548]
mov dword [ebp - 0x54c], 0
push eax
push 0xffffffffffffffff
call fcn.00428d00
call eax
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x44c02a
mov dword [ebp - 0x51c], eax
lea eax, [ebp - 0x560]
push 0x8000
push eax
lea eax, [ebp - 0x51c]
mov dword [ebp - 0x560], 0
push eax
push 0xffffffffffffffff
call fcn.00428d00
call eax
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x44c05d
mov dword [ebp - 0x524], eax
lea eax, [ebp - 0x520]
push 0x8000
push eax
lea eax, [ebp - 0x524]
mov dword [ebp - 0x520], 0
push eax
push 0xffffffffffffffff
call fcn.00428d00
call eax
mov eax, dword [ebp - 0x1c4]
test eax, eax
je 0x44c093
mov dword [ebp - 0x52c], eax
lea eax, [ebp - 0x528]
push 0x8000
push eax
lea eax, [ebp - 0x52c]
mov dword [ebp - 0x528], 0
push eax
push 0xffffffffffffffff
call fcn.00428d00
call eax
test esi, esi
je 0x44c0c3
push 0x8000
lea eax, [ebp - 0x530]
mov dword [ebp - 0x534], esi
push eax
lea eax, [ebp - 0x534]
mov dword [ebp - 0x530], 0
push eax
push 0xffffffffffffffff
call fcn.00428d00
call eax
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x44c0f6
mov dword [ebp - 0x53c], eax
lea eax, [ebp - 0x538]
push 0x8000
push eax
lea eax, [ebp - 0x53c]
mov dword [ebp - 0x538], 0
push eax
push 0xffffffffffffffff
call fcn.00428d00
call eax
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x44c129
mov dword [ebp - 0x544], eax
lea eax, [ebp - 0x540]
push 0x8000
push eax
lea eax, [ebp - 0x544]
mov dword [ebp - 0x540], 0
push eax
push 0xffffffffffffffff
call fcn.00428d00
call eax
cmp edi, 0xffffffff
je 0x44c136
push edi
call fcn.00411310
call eax
mov eax, dword [ebp - 0x1b4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8