Function at 0x447021
Capabilities:
Encode data using xor

Disassembly:
push 0x1d8
mov eax, 0x464166
call fcn.00460852
mov al, 0x3a
xor esi, esi
mov dword [ebp - 0x1a8], esi
movsx ecx, al
mov dword [ebp - 0x1a4], esi
mov byte [ebp - 0x48], al
mov dword [ebp - 0x20], 0x495f7e66
mov dword [ebp - 0x1c], 0x4a554e51
mov byte [ebp - 0x18], 0
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x44], eax
inc edx
pop ecx
cmp edx, 8
jl 0x447065
push 8
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0043d0e5
movsx ecx, byte [ebp - 0x48]
mov dword [ebp - 0x24], eax
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x44], eax
inc edx
pop ecx
cmp edx, 8
jl 0x44709f
push dword [0x4769d8]
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x24]
call fcn.0043d15b
test eax, eax
je 0x4470de
mov dl, byte [ebp - 0x48]
xor ecx, ecx
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 8
jb 0x4470d1
mov byte [eax + 8], 0
push eax
lea ecx, [ebp - 0x78]
call fcn.0044ae6b
mov edi, eax
and dword [ebp - 4], 0
push 0xb
pop eax
movsx ecx, al
mov byte [ebp - 0x48], al
mov dword [ebp - 0x20], 0x594e585e
mov dword [ebp - 0x1c], 0x4d44595b
mov dword [ebp - 0x18], 0x4e4742
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x44], eax
inc edx
pop ecx
cmp edx, 8
jl 0x447118
push 0xb
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0043d0e5
movsx ecx, byte [ebp - 0x48]
mov dword [ebp - 0x24], eax
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x44], eax
inc edx
pop ecx
cmp edx, 8
jl 0x447152
push dword [0x4769d8]
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x24]
call fcn.0043d15b
test eax, eax
je 0x447191
mov dl, byte [ebp - 0x48]
xor ecx, ecx
xor byte [ecx + eax], dl
inc ecx
cmp ecx, 0xb
jb 0x447184
mov byte [eax + 0xb], 0
push eax
call fcn.004527dd
push edi
mov edx, eax
lea ecx, [ebp - 0x90]
call fcn.0044b238
pop ecx
pop ecx
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 2
call fcn.0044adca
push 0x6b
pop eax
movsx ecx, al
mov byte [ebp - 0x44], al
mov dword [ebp - 0x1c], 0x1f131f45
mov byte [ebp - 0x18], 0
call fcn.0043cd89
push 8
mov dword [ebp - 0x19c], eax
xor edx, edx
pop edi
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x40], eax
inc edx
pop ecx
cmp edx, edi
jl 0x4471d7
push 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0043d0e5
movsx ecx, byte [ebp - 0x44]
mov dword [ebp - 0x20], eax
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x40], eax
inc edx
pop ecx
cmp edx, edi
jl 0x447210
push dword [0x4769d8]
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x20]
call fcn.0043d15b
test eax, eax
je 0x44724e
mov dl, byte [ebp - 0x44]
xor ecx, ecx
xor byte [ecx + eax], dl
inc ecx
cmp ecx, 4
jb 0x447241
mov byte [eax + 4], 0
push eax
lea ecx, [ebp - 0x198]
call fcn.0044ae6b
push 0x40
pop eax
mov byte [ebp - 4], 3
movsx ecx, al
mov byte [ebp - 0x44], al
mov dword [ebp - 0x1c], 0x3024326e
mov byte [ebp - 0x18], 0
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x40], eax
inc edx
pop ecx
cmp edx, edi
jl 0x44727f
push 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0043d0e5
movsx ecx, byte [ebp - 0x44]
mov dword [ebp - 0x20], eax
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x40], eax
inc edx
pop ecx
cmp edx, edi
jl 0x4472b8
push dword [0x4769d8]
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x20]
call fcn.0043d15b
test eax, eax
je 0x4472f6
mov dl, byte [ebp - 0x44]
xor ecx, ecx
xor byte [ecx + eax], dl
inc ecx
cmp ecx, 4
jb 0x4472e9
mov byte [eax + 4], 0
push eax
lea ecx, [ebp - 0x180]
call fcn.0044ae6b
mov al, 0x69
mov byte [ebp - 4], 4
movsx ecx, al
mov byte [ebp - 0x44], al
mov dword [ebp - 0x1c], 0xa060d47
mov word [ebp - 0x18], 0x11
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x40], eax
inc edx
pop ecx
cmp edx, edi
jl 0x447328
push 5
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0043d0e5
movsx ecx, byte [ebp - 0x44]
mov dword [ebp - 0x20], eax
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x40], eax
inc edx
pop ecx
cmp edx, edi
jl 0x447361
push dword [0x4769d8]
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x20]
call fcn.0043d15b
test eax, eax
je 0x44739f
mov dl, byte [ebp - 0x44]
xor ecx, ecx
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 5
jb 0x447392
mov byte [eax + 5], 0
push eax
lea ecx, [ebp - 0x168]
call fcn.0044ae6b
push 0x36
pop eax
mov byte [ebp - 4], 5
movsx ecx, al
mov byte [ebp - 0x44], al
mov dword [ebp - 0x1c], 0x55595218
mov byte [ebp - 0x18], 0
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x40], eax
inc edx
pop ecx
cmp edx, edi
jl 0x4473d0
push 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0043d0e5
movsx ecx, byte [ebp - 0x44]
mov dword [ebp - 0x20], eax
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x40], eax
inc edx
pop ecx
cmp edx, edi
jl 0x447409
push dword [0x4769d8]
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x20]
call fcn.0043d15b
test eax, eax
je 0x447447
mov dl, byte [ebp - 0x44]
xor ecx, ecx
xor byte [ecx + eax], dl
inc ecx
cmp ecx, 4
jb 0x44743a
mov byte [eax + 4], 0
push eax
lea ecx, [ebp - 0x150]
call fcn.0044ae6b
push 0x40
pop eax
mov byte [ebp - 4], 6
movsx ecx, al
mov byte [ebp - 0x44], al
mov dword [ebp - 0x1c], 0x3030236e
mov byte [ebp - 0x18], 0
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x40], eax
inc edx
pop ecx
cmp edx, edi
jl 0x447478
push 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0043d0e5
movsx ecx, byte [ebp - 0x44]
mov dword [ebp - 0x20], eax
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x40], eax
inc edx
pop ecx
cmp edx, edi
jl 0x4474b1
push dword [0x4769d8]
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x20]
call fcn.0043d15b
test eax, eax
je 0x4474ef
mov dl, byte [ebp - 0x44]
xor ecx, ecx
xor byte [ecx + eax], dl
inc ecx
cmp ecx, 4
jb 0x4474e2
mov byte [eax + 4], 0
push eax
lea ecx, [ebp - 0x138]
call fcn.0044ae6b
push 7
pop eax
mov byte [ebp - 4], al
push 0x1c
pop eax
movsx ecx, al
mov byte [ebp - 0x40], al
mov word [ebp - 0x18], 0x7432
mov byte [ebp - 0x16], 0
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x3c], eax
inc edx
pop ecx
cmp edx, edi
jl 0x447521
push 2
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0043d0e5
movsx ecx, byte [ebp - 0x40]
mov dword [ebp - 0x1c], eax
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x3c], eax
inc edx
pop ecx
cmp edx, edi
jl 0x44755a
push dword [0x4769d8]
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x1c]
call fcn.0043d15b
test eax, eax
je 0x447598
mov dl, byte [ebp - 0x40]
xor ecx, ecx
xor byte [ecx + eax], dl
inc ecx
cmp ecx, 2
jb 0x44758b
mov byte [eax + 2], 0
push eax
lea ecx, [ebp - 0x120]
call fcn.0044ae6b
mov al, 0x73
mov byte [ebp - 4], 8
movsx ecx, al
mov byte [ebp - 0x44], al
mov dword [ebp - 0x1c], 0x3031b5d
mov byte [ebp - 0x18], 0
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x40], eax
inc edx
pop ecx
cmp edx, 8
jl 0x4475c8
push 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0043d0e5
movsx ecx, byte [ebp - 0x44]
mov dword [ebp - 0x20], eax
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x40], eax
inc edx
pop ecx
cmp edx, 8
jl 0x447602
push dword [0x4769d8]
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x20]
call fcn.0043d15b
test eax, eax
je 0x447641
mov dl, byte [ebp - 0x44]
xor ecx, ecx
xor byte [ecx + eax], dl
inc ecx
cmp ecx, 4
jb 0x447634
mov byte [eax + 4], 0
push eax
lea ecx, [ebp - 0x108]
call fcn.0044ae6b
mov al, 0x5a
mov byte [ebp - 4], 9
movsx ecx, al
mov byte [ebp - 0x44], al
mov dword [ebp - 0x1c], 0x3b2f3674
mov byte [ebp - 0x18], 0
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x40], eax
inc edx
pop ecx
cmp edx, 8
jl 0x447671
push 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0043d0e5
movsx ecx, byte [ebp - 0x44]
mov dword [ebp - 0x20], eax
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x40], eax
inc edx
pop ecx
cmp edx, 8
jl 0x4476ab
push dword [0x4769d8]
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x20]
call fcn.0043d15b
test eax, eax
je 0x4476ea
mov dl, byte [ebp - 0x44]
xor ecx, ecx
xor byte [ecx + eax], dl
inc ecx
cmp ecx, 4
jb 0x4476dd
mov byte [eax + 4], 0
push eax
lea ecx, [ebp - 0xf0]
call fcn.0044ae6b
push 7
pop eax
mov byte [ebp - 4], 0xa
movsx ecx, al
mov byte [ebp - 0x44], al
mov dword [ebp - 0x1c], 0x41666a29
mov dword [ebp - 0x18], 0x626b6e
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x40], eax
inc edx
pop ecx
cmp edx, 8
jl 0x44771e
push 7
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0043d0e5
movsx ecx, byte [ebp - 0x44]
mov dword [ebp - 0x20], eax
call fcn.0043cd89
mov dword [ebp - 0x19c], eax
xor edx, edx
push edx
lea ecx, [ebp - 0x19c]
call fcn.0043cdc8
mov dword [ebp + edx*4 - 0x40], eax
inc edx
pop ecx
cmp edx, 8
jl 0x447758
push dword [0x4769d8]
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x20]
call fcn.0043d15b
test eax, eax
je 0x447797
mov dl, byte [ebp - 0x44]
xor ecx, ecx
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 7
jb 0x44778a
mov byte [eax + 7], 0
push eax
lea ecx, [ebp - 0xd8]
call fcn.0044ae6b
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 0xb
push ecx
lea eax, [ebp - 0xc0]
push eax
push ecx
lea ecx, [ebp - 0x1bc]
call fcn.0044a881
push fcn.0044adca
push 9
push 0x18
lea eax, [ebp - 0x198]
mov byte [ebp - 4], 0xd
push eax
call fcn.0044c8f5
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0x90]
mov byte [ebp - 0x19c], 0
lea ecx, [ebp - 0x60]
push dword [ebp - 0x19c]
call fcn.0044c208
pop ecx
push ecx
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x1d8]
call fcn.0043e32e
lea ecx, [ebp - 0x60]
call fcn.0044af6c
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x1b0]
call fcn.004400d4
mov eax, dword [ebp - 0x1b0]
mov edi, dword [ebp - 0x1ac]
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x1c0], edi
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x1e0]
call fcn.004400d4
mov ecx, dword [ebp - 0x1dc]
xor edx, edx
xorps xmm0, xmm0
movlpd qword [ebp - 0x1cc], xmm0
and dword [ebp - 0x1c8], edx
mov dword [ebp - 0x1cc], edx
test ecx, ecx
je 0x447886
call fcn.0042a65e
mov edx, dword [ebp - 0x1cc]
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x1b0]
cmp eax, edx
je 0x447c8a
mov ecx, eax
mov byte [ebp - 4], 0x14
call fcn.0043dc65
test al, al
jne 0x447910
mov edi, dword [ebp - 0x19c]
mov ecx, edi
call fcn.0043dc80
test edx, edx
ja 0x447910
jb 0x4478c1
cmp eax, 0x7a120
jae 0x447910
lea eax, [ebp - 0x78]
lea ecx, [edi + 0x20]
push eax
call fcn.0043d69f
push ecx
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x15
push ecx
or esi, 1
mov ecx, eax
mov dword [ebp - 0x1a8], esi
call fcn.0044b2f0
or esi, 0x200002
lea ecx, [ebp - 0x60]
push 0x46ba28
mov dword [ebp - 0x1a4], esi
mov dword [ebp - 0x1a8], esi
call fcn.0044bde4
mov byte [ebp - 0x19d], 1
test al, al
je 0x447917
mov byte [ebp - 0x19d], 0
mov eax, dword [ebp - 0x1a4]
test al, 2
je 0x44793e
and eax, 0xfffffffd
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a8], eax
call fcn.0044adca
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 4], 0x14
test al, 1
je 0x447960
and eax, 0xfffffffe
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a8], eax
call fcn.0044af6c
cmp byte [ebp - 0x19d], 0
je 0x447c3a
mov eax, dword [ebp - 0x1b8]
mov edi, dword [ebp - 0x1bc]
mov dword [ebp - 0x1ac], eax
cmp edi, eax
je 0x447c3a
push edi
lea ecx, [ebp - 0x60]
call fcn.0044ae9c
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x2c]
mov eax, dword [ebp - 0x19c]
push ecx
lea ecx, [eax + 0x20]
call fcn.0043d69f
push ecx
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x78]
mov esi, dword [ebp - 0x1a4]
push ecx
or esi, 4
mov ecx, eax
mov dword [ebp - 0x1a8], esi
call fcn.0044b2f0
or esi, 0x40
mov dword [ebp - 4], 0x18
lea edx, [ebp - 0x60]
or esi, 8
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x1a4], esi
mov dword [ebp - 0x1a8], esi
call fcn.0044b5ed
test al, al
je 0x447a73
push ecx
mov ecx, dword [ebp - 0x19c]
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ecx + 0x20]
call fcn.0044b2f0
or esi, 0x8000
mov byte [ebp - 0x1d0], 0
lea edx, [ebp - 0xa8]
push dword [ebp - 0x1d0]
mov dword [ebp - 4], 0x19
lea ecx, [ebp - 0xc0]
or esi, 0x10
mov dword [ebp - 0x1a8], esi
call fcn.0044c208
pop ecx
mov dword [ebp - 4], 0x1a
lea ecx, [ebp - 0xc0]
or esi, 0x20
mov dword [ebp - 0x1a4], esi
mov dword [ebp - 0x1a8], esi
call fcn.0043e3f1
test edx, edx
ja 0x447a73
jb 0x447a6a
cmp eax, 0x30d40
jae 0x447a73
mov byte [ebp - 0x19d], 1
jmp 0x447a7a
mov byte [ebp - 0x19d], 0
mov eax, dword [ebp - 0x1a4]
test al, 0x20
je 0x447aa4
and eax, 0xffffffdf
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a8], eax
call fcn.0044af6c
mov eax, dword [ebp - 0x1a4]
test al, 0x10
je 0x447ac8
and eax, 0xffffffef
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a8], eax
call fcn.0044adca
mov eax, dword [ebp - 0x1a4]
test al, 8
je 0x447ae9
and eax, 0xfffffff7
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a8], eax
call fcn.0044adca
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 4], 0x16
test al, 4
je 0x447b0b
and eax, 0xfffffffb
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a8], eax
call fcn.0044af6c
cmp byte [ebp - 0x19d], 0
je 0x447c20
push ecx
mov ecx, dword [ebp - 0x19c]
lea eax, [ebp - 0xc0]
push eax
add ecx, 0x20
call fcn.0044b2f0
mov esi, dword [ebp - 0x1a4]
or esi, 0x1000
mov dword [ebp - 0x1a8], esi
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x78]
cmp dword [ebp - 0xac], 0x10
lea edi, [ebp - 0xc0]
push ecx
mov ecx, dword [ebp - 0x19c]
cmovae edi, dword [ebp - 0xc0]
push eax
lea ecx, [ecx + 0x20]
call fcn.0044b2f0
or esi, 0x200
mov dword [ebp - 0x1a8], esi
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x78]
mov eax, dword [ebp - 0x80]
inc eax
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0044ac14
push 6
push str.Files_
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.0044c020
push eax
lea ecx, [ebp - 0xa8]
call fcn.0044ae38
or esi, 0x100000
mov dword [ebp - 0x1a4], esi
mov dword [ebp - 0x1a8], esi
mov byte [ebp - 4], 0x1e
lea edx, [ebp - 0xa8]
cmp dword [ebp - 0x94], 0x10
mov ecx, dword [0x476790]
cmovae edx, dword [ebp - 0xa8]
push 2
push 0
push edi
call fcn.0042e104
add esp, 0xc
lea ecx, [ebp - 0xa8]
call fcn.0044adca
lea ecx, [ebp - 0x2c]
call fcn.0044adca
lea ecx, [ebp - 0x78]
call fcn.0044adca
lea ecx, [ebp - 0xc0]
call fcn.0044adca
inc dword [0x476778]
lea ecx, [ebp - 0x60]
call fcn.0044adca
jmp 0x447c40
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x14
call fcn.0044adca
mov eax, dword [ebp - 0x1ac]
add edi, 0x18
jmp 0x44797f
mov esi, dword [ebp - 0x1a4]
mov dword [ebp - 4], 0x13
jmp 0x447c62
lea ecx, [ebp - 0x1c4]
call fcn.0043e371
mov eax, dword [ebp - 0x1c4]
mov edi, dword [ebp - 0x1c0]
mov edx, dword [ebp - 0x1cc]
mov dword [ebp - 0x19c], eax
jmp 0x447890
test edi, edi
je 0x447c95
mov ecx, edi
call fcn.0042a65e
mov ecx, dword [ebp - 0x1d4]
test ecx, ecx
je 0x447ca4
call fcn.0042a65e
cmp dword [ebp - 0x7c], 0x10
lea eax, [ebp - 0x90]
cmovae eax, dword [ebp - 0x90]
and dword [ebp - 0x80], 0
mov byte [eax], 0
mov esi, dword [ebp - 0x1bc]
mov edi, dword [ebp - 0x1b8]
cmp esi, edi
je 0x447ce6
mov ecx, esi
call fcn.0044adca
add esi, 0x18
cmp esi, edi
jne 0x447ccc
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1b8], eax
lea ecx, [ebp - 0x1bc]
call fcn.0044af1c
lea ecx, [ebp - 0x90]
call fcn.0044adca
call fcn.004607a4
ret