Function at 0x4313d0
Capabilities:
Authenticate hmac
Encode data using xor
Get common file path
Get startup folder
Inspect section memory permissions
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52e400
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x460
mov eax, ecx
mov byte [ebp - 0x15], dl
push esi
mov dword [ebp - 0x174], eax
push edi
mov dword [ebp - 0x14], 1
mov dword [ebp - 4], 0
push 0
call fcn.0048ab80
mov byte [ebp - 4], 3
sub esp, 0x10
mov esi, esp
mov dword [ebp - 0x44], esp
sub esp, 8
mov dword [ebp - 0x31], 0xd6c3d1cc
xorps xmm0, xmm0
mov byte [ebp - 0x2d], 0xc0
mov edi, 1
mov dword [ebp - 0x1c], 0
mov ecx, esp
mov dword [ebp - 0x14], edi
movups xmmword [ebp - 0x2c], xmm0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
call fcn.00489eb0
mov ecx, esi
call fcn.0048ab50
add esp, 8
mov dword [ebp - 4], 4
xor ecx, ecx
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x31], al
inc ecx
cmp ecx, 5
jb 0x431478
lea eax, [ebp - 0x31]
mov dword [0x565544], ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xdc]
call fcn.00402c10
mov esi, dword [ebp - 0x174]
mov ecx, esi
push eax
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.0048a7d0
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 3
call fcn.00402ad0
push 0x104
lea eax, [ebp - 0x470]
push 0
push eax
call fcn.00506f10
add esp, 0xc
lea eax, [ebp - 0x470]
push eax
movzx eax, byte [ebp - 0x15]
xor eax, 1
push 0
push 0
lea eax, [eax*2 + 0x1a]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea eax, [ebx + 0xc]
push eax
lea edx, [ebp - 0x470]
lea ecx, [ebp - 0x21c]
call fcn.00490a90
add esp, 4
lea ecx, [ebp - 0xa4]
mov dword [ebp - 4], 7
call fcn.0048bb30
cmp byte [ebx + 8], 0
mov byte [ebp - 4], 8
jne 0x43181e
sub esp, 0x18
lea eax, [ebp - 0x21c]
mov ecx, esp
push eax
call fcn.0048ccc0
push 0
mov dl, 1
lea ecx, [ebp - 0x154]
call fcn.0042a0f0
add esp, 0x1c
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 9
call fcn.0048b950
lea ecx, [ebp - 0x154]
test eax, eax
jne 0x4315ca
call fcn.0048ba40
lea ecx, [ebp - 0xa4]
call fcn.0048ba40
lea ecx, [ebp - 0x21c]
call fcn.00402ad0
lea ecx, [ebx + 0xc]
call fcn.00402ad0
lea ecx, [ebx + 0x24]
call fcn.00402ad0
lea ecx, [ebx + 0x3c]
call fcn.00402ad0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov dword [ebp - 0xa8], 0
call fcn.0048b950
test eax, eax
je 0x43180d
xor esi, esi
xor edi, edi
mov dword [ebp - 0x50], esi
nop dword [eax + eax]
push edi
lea ecx, [ebp - 0x154]
call fcn.0048b930
xorps xmm0, xmm0
mov dword [ebp - 0xac], eax
mov byte [ebp - 0xf8], 0xf3
xor ecx, ecx
movups xmmword [ebp - 0xf7], xmm0
mov dword [ebp - 0xe7], 0
mov word [ebp - 0xe3], 0
mov byte [ebp - 0xe1], 0
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xf8], al
inc ecx
cmp ecx, 1
jb 0x431630
lea eax, [ebp - 0xf8]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 0xf7], 0
call fcn.00402b70
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0xa
call fcn.00402c10
push eax
lea edx, [ebp - 0x21c]
lea ecx, [ebp - 0x23c]
call fcn.004909d0
sub esp, 0x14
mov byte [ebp - 4], 0xb
mov ecx, esp
mov edx, eax
push dword [ebp - 0xac]
call fcn.00490bf0
add esp, 4
lea ecx, [ebp - 0x12c]
xor dl, dl
push 0
call fcn.0042a0f0
add esp, 0x1c
lea ecx, [ebp - 0x23c]
call fcn.00402ad0
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0xe
call fcn.00402ad0
lea ecx, [ebp - 0x12c]
call fcn.0048b950
test eax, eax
jne 0x4316de
mov byte [ebp - 4], 9
jmp 0x4317df
mov ecx, dword [ebp - 0x128]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x12c]
xor edi, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4317d5
push edi
lea ecx, [ebp - 0x12c]
call fcn.0048b930
push 0
lea ecx, [ebx + 0x24]
push ecx
mov ecx, eax
call fcn.0048c7e0
cmp eax, 0xffffffff
je 0x4317af
mov esi, dword [ebp - 0xa4]
xor ecx, ecx
mov dword [ebp - 0x4c], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0xa0]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x431793
xor ecx, ecx
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0x154]
add ecx, esi
add eax, dword [ebp - 0x50]
push eax
call fcn.004944b0
test al, al
jne 0x4317ac
mov ecx, dword [ebp - 0xa0]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0xa4]
sub ecx, esi
add dword [ebp - 0x48], 0x18
inc dword [ebp - 0x4c]
imul ecx
mov ecx, dword [ebp - 0x48]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x4c], eax
jb 0x431750
mov eax, dword [ebp - 0x154]
lea ecx, [ebp - 0xa4]
mov esi, dword [ebp - 0x50]
add eax, esi
push eax
call fcn.00492100
jmp 0x4317af
mov esi, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x128]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x12c]
inc edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x431703
mov byte [ebp - 4], 9
mov edi, dword [ebp - 0xa8]
lea ecx, [ebp - 0x12c]
call fcn.0048ba40
inc edi
lea ecx, [ebp - 0x154]
add esi, 0x18
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0x50], esi
call fcn.0048b950
cmp edi, eax
jb 0x4315f0
mov edi, dword [ebp - 0x14]
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 8
call fcn.0048ba40
jmp 0x431853
push 0x5443dc
lea ecx, [ebp - 0xdc]
call fcn.00402b70
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0xa4]
call fcn.0048b9b0
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 8
call fcn.00402ad0
lea ecx, [ebp - 0xa4]
call fcn.0048b950
test eax, eax
jne 0x431897
push 0x5443dc
lea ecx, [ebp - 0xdc]
call fcn.00402b70
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0xa4]
call fcn.0048b9b0
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 8
call fcn.00402ad0
xorps xmm0, xmm0
mov byte [ebp - 0xf8], 0xf3
movups xmmword [ebp - 0xf7], xmm0
mov dword [ebp - 0xe7], 0
xor ecx, ecx
mov word [ebp - 0xe3], 0
mov byte [ebp - 0xe1], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xf8], al
inc ecx
cmp ecx, 1
jb 0x4318c4
lea eax, [ebp - 0xf8]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 0xf7], 0
call fcn.00402b70
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x11
call fcn.00402c10
push eax
lea edx, [ebp - 0x21c]
lea ecx, [ebp - 0x23c]
call fcn.004909d0
sub esp, 0x14
mov byte [ebp - 4], 0x12
lea edx, [ebx + 0x3c]
mov ecx, esp
push edx
mov edx, eax
call fcn.00490bf0
add esp, 4
call fcn.0040dee0
add esp, 0x18
mov byte [ebp - 0x15], al
lea ecx, [ebp - 0x23c]
call fcn.00402ad0
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 8
call fcn.00402ad0
cmp byte [ebp - 0x15], 0
jne 0x431a7e
movaps xmm0, xmmword [0x551b70]
xor ecx, ecx
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x1c], 0
xorps xmm0, xmm0
mov word [ebp - 0x18], 0
movups xmmword [ebp - 0x2c], xmm0
mov byte [ebp - 0x16], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x3c], al
inc ecx
cmp ecx, 0x10
jb 0x431980
lea eax, [ebp - 0x3c]
mov dword [0x565628], ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
sub esp, 0x18
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xdc]
mov esi, esp
call fcn.00402c10
push eax
lea edx, [ebp - 0x21c]
mov ecx, esi
call fcn.004909d0
add esp, 4
call fcn.0040dee0
add esp, 0x18
mov byte [ebp - 0x15], al
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 8
call fcn.00402ad0
cmp byte [ebp - 0x15], 0
je 0x431a7e
xorps xmm0, xmm0
mov dword [ebp - 0x3b], 0xd3d2dfe3
mov dword [ebp - 0x37], 0xd3c7e4df
xor ecx, ecx
mov dword [ebp - 0x33], 0xd097cbd1
mov word [ebp - 0x2f], 0xd3c8
mov byte [ebp - 0x2d], 0xd3
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x3b], al
inc ecx
cmp ecx, 0xf
jb 0x431a30
lea eax, [ebp - 0x3b]
mov dword [0x565558], ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x14
call fcn.00402c10
push eax
lea ecx, [ebx + 0x3c]
call fcn.0048cae0
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 8
call fcn.00402ad0
xorps xmm0, xmm0
mov byte [ebp - 0xf8], 0xf3
movups xmmword [ebp - 0xf7], xmm0
mov dword [ebp - 0xe7], 0
xor ecx, ecx
mov word [ebp - 0xe3], 0
mov byte [ebp - 0xe1], 0
nop dword [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xf8], al
inc ecx
cmp ecx, 1
jb 0x431ab0
lea eax, [ebp - 0xf8]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 0xf7], 0
call fcn.00402b70
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x15
call fcn.00402c10
push eax
lea edx, [ebp - 0x21c]
lea ecx, [ebp - 0x23c]
call fcn.004909d0
sub esp, 0x14
mov byte [ebp - 4], 0x16
lea edx, [ebx + 0x3c]
mov ecx, esp
push edx
mov edx, eax
call fcn.00490bf0
add esp, 4
lea ecx, [ebp - 0x338]
call fcn.0040d810
add esp, 0x18
lea ecx, [ebp - 0x23c]
call fcn.00402ad0
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x19
call fcn.00402ad0
push 0x5443dc
lea ecx, [ebp - 0x308]
call fcn.00402b70
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 0x1a
call fcn.00402ac0
test eax, eax
je 0x431ed7
sub esp, 0x28
mov ecx, esp
push 0
call fcn.0048a110
push 0
push 1
lea edx, [ebp - 0x338]
lea ecx, [ebp - 0x1d0]
call fcn.00490ed0
add esp, 0x30
mov byte [ebp - 4], 0x1b
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0xd1eec3c0
xor ecx, ecx
mov dword [ebp - 0x30], 0xc2c5cdc1
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x34], al
inc ecx
cmp ecx, 8
jb 0x431bb7
lea eax, [ebp - 0x34]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1bc]
mov edi, 3
mov dword [ebp - 0x14], edi
call fcn.00402c10
push eax
lea ecx, [ebp - 0x1d0]
call fcn.00490ca0
mov ecx, eax
call fcn.0048a530
test al, al
jne 0x431d31
xorps xmm0, xmm0
mov dword [ebp - 0x77], 0xd1eec3c0
mov dword [ebp - 0x73], 0xc2c5cdc1
xor ecx, ecx
movups xmmword [ebp - 0x6f], xmm0
mov dword [ebp - 0x5f], 0
mov word [ebp - 0x5b], 0
mov byte [ebp - 0x59], al
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 8
jb 0x431c37
lea eax, [ebp - 0x77]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x6f], 0
call fcn.00402b70
mov dword [ebp - 4], 0x1d
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x14], 7
call fcn.00402c10
push eax
lea ecx, [ebp - 0x1d0]
call fcn.00490ca0
xorps xmm0, xmm0
mov dword [ebp - 0x11c], 0xc0d2deca
mov esi, eax
mov dword [ebp - 0x118], 0xd3c1c4ca
mov dword [ebp - 0x114], 0xdfd2e7d3
xor ecx, ecx
mov byte [ebp - 0x110], 0xc2
movups xmmword [ebp - 0x10f], xmm0
mov dword [ebp - 0xff], 0
mov word [ebp - 0xfb], 0
mov byte [ebp - 0xf9], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x11c], al
inc ecx
cmp ecx, 0xd
jb 0x431cd0
lea eax, [ebp - 0x11c]
mov dword [0x56557c], ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 0x10f], 0
call fcn.00402b70
mov dword [ebp - 4], 0x1e
lea ecx, [ebp - 0xdc]
mov edi, 0xf
mov dword [ebp - 0x14], edi
call fcn.00402c10
push eax
mov ecx, esi
call fcn.00490ca0
mov ecx, eax
call fcn.0048a530
mov byte [ebp - 0x15], 1
test al, al
je 0x431d35
mov byte [ebp - 0x15], 0
mov eax, dword [ebp - 0x14]
test al, 8
je 0x431d50
and eax, 0xfffffff7
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test al, 4
je 0x431d68
and eax, 0xfffffffb
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0x1b
test al, 2
je 0x431d84
and eax, 0xfffffffd
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
cmp byte [ebp - 0x15], 0
je 0x431ec5
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0xd1eec3c0
mov dword [ebp - 0x30], 0xc2c5cdc1
xor ecx, ecx
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x34], al
inc ecx
cmp ecx, 8
jb 0x431db6
lea eax, [ebp - 0x34]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0x1f
call fcn.00402c10
push eax
lea ecx, [ebp - 0x1d0]
call fcn.00490ca0
xorps xmm0, xmm0
mov dword [ebp - 0x7c], 0xc0d2deca
mov esi, eax
mov dword [ebp - 0x78], 0xd3c1c4ca
mov dword [ebp - 0x74], 0xdfd2e7d3
xor ecx, ecx
mov byte [ebp - 0x70], 0xc2
movups xmmword [ebp - 0x6f], xmm0
mov dword [ebp - 0x5f], 0
mov word [ebp - 0x5b], 0
mov byte [ebp - 0x59], 0
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x7c], al
inc ecx
cmp ecx, 0xd
jb 0x431e30
lea eax, [ebp - 0x7c]
mov dword [0x56557c], ecx
push eax
lea ecx, [ebp - 0xdc]
mov byte [ebp - 0x6f], 0
call fcn.00402b70
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x20
call fcn.00402c10
push eax
mov ecx, esi
call fcn.00490ca0
lea ecx, [ebp - 0x98]
push ecx
mov ecx, eax
call fcn.00490de0
mov edx, eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x23c]
call fcn.004029b0
push eax
lea ecx, [ebp - 0x308]
call fcn.0048cb40
lea ecx, [ebp - 0x23c]
call fcn.00402ad0
lea ecx, [ebp - 0x98]
call fcn.00402ad0
lea ecx, [ebp - 0xdc]
call fcn.00402ad0
lea ecx, [ebp - 0x148]
call fcn.00402ad0
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 0x1a
call fcn.0048a7b0
mov edi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xa0]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0xa4]
xor esi, esi
imul ecx
mov dword [ebp - 0x50], esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x433c7f
nop
cmp byte [ebx + 8], 0
je 0x431f3c
push dword [ebp - 0x44]
lea ecx, [ebp - 0x1e8]
call fcn.00402c20
push 0
push 0x5443dc
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x22
call fcn.00402c40
lea esi, [ebp - 0x1e8]
mov byte [ebp - 4], 0x23
or edi, 0x10
jmp 0x431fdf
xorps xmm0, xmm0
mov byte [ebp - 0x170], 0xf3
movups xmmword [ebp - 0x16f], xmm0
mov dword [ebp - 0x15f], 0
xor ecx, ecx
mov word [ebp - 0x15b], 0
mov byte [ebp - 0x159], 0
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x170], al
inc ecx
cmp ecx, 1
jb 0x431f70
lea eax, [ebp - 0x170]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0x18c]
mov byte [ebp - 0x16f], 0
call fcn.00402b70
mov dword [ebp - 4], 0x24
lea ecx, [ebp - 0x18c]
or edi, 0x20
mov dword [ebp - 0x14], edi
call fcn.00402c10
mov ecx, dword [ebp - 0xa4]
lea edx, [esi + esi*2]
push eax
lea edx, [ecx + edx*8]
lea ecx, [ebp - 0x1a4]
call fcn.004909d0
add esp, 4
mov esi, eax
mov dword [ebp - 4], 0x25
or edi, 0x40
xorps xmm0, xmm0
mov dword [ebp - 0x14], edi
mov byte [ebp - 0xc4], 0xf3
xor ecx, ecx
movups xmmword [ebp - 0xc3], xmm0
mov dword [ebp - 0xb3], 0
mov word [ebp - 0xaf], 0
mov byte [ebp - 0xad], 0
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xc4], al
inc ecx
cmp ecx, 1
jb 0x432010
lea eax, [ebp - 0xc4]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 0xc3], 0
call fcn.00402b70
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 4], 0x26
call fcn.00402c10
push eax
lea edx, [ebp - 0x21c]
lea ecx, [ebp - 0x98]
call fcn.004909d0
add esp, 4
push esi
push eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x148]
push dword [ebp - 0x44]
call fcn.004944e0
sub esp, 0x18
mov byte [ebp - 4], 0x28
lea eax, [ebx + 0x3c]
mov ecx, esp
lea edx, [ebp - 0x148]
push eax
call fcn.00490bf0
add esp, 4
call fcn.0040dee0
add esp, 0x18
lea ecx, [ebp - 0x148]
test al, al
sete byte [ebp - 0x15]
call fcn.00402ad0
lea ecx, [ebp - 0x98]
call fcn.00402ad0
lea ecx, [ebp - 0x1bc]
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test al, 0x40
je 0x4320e0
and eax, 0xffffffbf
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test al, 0x20
je 0x4320f8
and eax, 0xffffffdf
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0x1a
test al, 0x10
je 0x432114
and eax, 0xffffffef
lea ecx, [ebp - 0x1e8]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
cmp byte [ebp - 0x15], 0
je 0x432422
xor ecx, ecx
cmp byte [ebx + 8], cl
je 0x4321c2
xorps xmm0, xmm0
mov dword [ebp - 0x3b], 0xd3d2dfe3
mov dword [ebp - 0x37], 0xd3c7e4df
mov dword [ebp - 0x33], 0xd097cbd1
mov word [ebp - 0x2f], 0xd3c8
mov byte [ebp - 0x2d], 0xd3
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], ecx
mov word [ebp - 0x18], cx
mov byte [ebp - 0x16], cl
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x3b], al
inc ecx
cmp ecx, 0xf
jb 0x432160
lea eax, [ebp - 0x3b]
mov dword [0x565558], ecx
push eax
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x1bc]
mov edi, dword [ebp - 0x14]
or edi, 0x80
mov dword [ebp - 0x14], edi
call fcn.00402c10
push eax
lea ecx, [ebp - 0x320]
call fcn.00402b70
mov esi, eax
mov dword [ebp - 4], 0x2a
or edi, 0x100
jmp 0x43225a
movaps xmm0, xmmword [0x551b70]
movups xmmword [ebp - 0x7f], xmm0
mov dword [ebp - 0x5f], 0
xorps xmm0, xmm0
mov word [ebp - 0x5b], 0
movups xmmword [ebp - 0x6f], xmm0
mov byte [ebp - 0x59], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x7f], al
inc ecx
cmp ecx, 0x10
jb 0x4321e5
lea eax, [ebp - 0x7f]
mov dword [0x565628], ecx
push eax
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x6f], 0
call fcn.00402b70
mov dword [ebp - 4], 0x2b
lea ecx, [ebp - 0x148]
mov edi, dword [ebp - 0x14]
or edi, 0x200
mov dword [ebp - 0x14], edi
call fcn.00402c10
push dword [ebp - 0x50]
lea ecx, [ebp - 0xa4]
mov esi, eax
call fcn.0048b930
push esi
mov edx, eax
lea ecx, [ebp - 0x1a4]
call fcn.004909d0
add esp, 4
mov esi, eax
mov dword [ebp - 4], 0x2c
or edi, 0x400
xorps xmm0, xmm0
mov dword [ebp - 0x14], edi
mov byte [ebp - 0xc4], 0xf3
xor ecx, ecx
movups xmmword [ebp - 0xc3], xmm0
mov dword [ebp - 0xb3], 0
mov word [ebp - 0xaf], 0
mov byte [ebp - 0xad], 0
nop word [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xc4], al
inc ecx
cmp ecx, 1
jb 0x432290
lea eax, [ebp - 0xc4]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0x18c]
mov byte [ebp - 0xc3], 0
call fcn.00402b70
lea ecx, [ebp - 0x18c]
mov dword [ebp - 4], 0x2d
call fcn.00402c10
push eax
lea edx, [ebp - 0x21c]
lea ecx, [ebp - 0x98]
call fcn.004909d0
sub esp, 0x14
mov byte [ebp - 4], 0x2e
mov ecx, esp
mov edx, eax
push esi
call fcn.00490c50
add esp, 4
call fcn.0040dee0
add esp, 0x18
mov byte [ebp - 0x15], al
lea ecx, [ebp - 0x98]
call fcn.00402ad0
lea ecx, [ebp - 0x18c]
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test eax, 0x400
je 0x432339
and eax, 0xfffffbff
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test eax, 0x200
je 0x432356
and eax, 0xfffffdff
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test eax, 0x100
je 0x432373
and eax, 0xfffffeff
lea ecx, [ebp - 0x320]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0x1a
test al, al
jns 0x432391
and eax, 0xffffff7f
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
cmp byte [ebp - 0x15], 0
je 0x432422
xorps xmm0, xmm0
mov dword [ebp - 0x3b], 0xd3d2dfe3
mov dword [ebp - 0x37], 0xd3c7e4df
xor ecx, ecx
mov dword [ebp - 0x33], 0xd097cbd1
mov word [ebp - 0x2f], 0xd3c8
mov byte [ebp - 0x2d], 0xd3
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x3b], al
inc ecx
cmp ecx, 0xf
jb 0x4323d4
lea eax, [ebp - 0x3b]
mov dword [0x565558], ecx
push eax
lea ecx, [ebp - 0x18c]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0x2f
call fcn.00402c10
push eax
lea ecx, [ebx + 0x3c]
call fcn.0048cae0
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0x1a
call fcn.00402ad0
cmp byte [ebx + 8], 0
je 0x432462
push dword [ebp - 0x44]
lea ecx, [ebp - 0x1e8]
call fcn.00402c20
push 0
push 0x5443dc
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x30
call fcn.00402c40
mov byte [ebp - 4], 0x31
lea esi, [ebp - 0x1e8]
or dword [ebp - 0x14], 0x800
jmp 0x43250e
xorps xmm0, xmm0
mov byte [ebp - 0xc4], 0xf3
movups xmmword [ebp - 0xc3], xmm0
mov dword [ebp - 0xb3], 0
xor ecx, ecx
mov word [ebp - 0xaf], 0
mov byte [ebp - 0xad], 0
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xc4], al
inc ecx
cmp ecx, 1
jb 0x432490
lea eax, [ebp - 0xc4]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 0xc3], 0
call fcn.00402b70
mov dword [ebp - 4], 0x32
lea ecx, [ebp - 0x1bc]
mov edi, dword [ebp - 0x14]
or edi, 0x1000
mov dword [ebp - 0x14], edi
call fcn.00402c10
mov ecx, dword [ebp - 0x50]
push eax
lea edx, [ecx + ecx*2]
mov ecx, dword [ebp - 0xa4]
lea edx, [ecx + edx*8]
lea ecx, [ebp - 0x1a4]
call fcn.004909d0
add esp, 4
mov esi, eax
or edi, 0x2000
mov dword [ebp - 4], 0x33
mov dword [ebp - 0x14], edi
xorps xmm0, xmm0
mov byte [ebp - 0x170], 0xf3
movups xmmword [ebp - 0x16f], xmm0
mov dword [ebp - 0x15f], 0
xor ecx, ecx
mov word [ebp - 0x15b], 0
mov byte [ebp - 0x159], 0
nop dword [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x170], al
inc ecx
cmp ecx, 1
jb 0x432540
lea eax, [ebp - 0x170]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x16f], 0
call fcn.00402b70
lea ecx, [ebp - 0x148]
mov dword [ebp - 4], 0x34
call fcn.00402c10
push eax
lea edx, [ebp - 0x21c]
lea ecx, [ebp - 0x98]
call fcn.004909d0
add esp, 4
push esi
push eax
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x18c]
push dword [ebp - 0x44]
call fcn.004944e0
sub esp, 0x18
mov byte [ebp - 4], 0x36
lea eax, [ebx + 0x3c]
mov ecx, esp
lea edx, [ebp - 0x18c]
push eax
call fcn.00490bf0
add esp, 4
lea ecx, [ebp - 0xdc]
call fcn.0040d810
add esp, 0x18
lea ecx, [ebp - 0x18c]
call fcn.00402ad0
lea ecx, [ebp - 0x98]
call fcn.00402ad0
lea ecx, [ebp - 0x148]
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test eax, 0x2000
je 0x432615
and eax, 0xffffdfff
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test eax, 0x1000
je 0x432632
and eax, 0xffffefff
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test eax, 0x800
je 0x43264c
and eax, 0xfffff7ff
lea ecx, [ebp - 0x1e8]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
push dword [ebp - 0x44]
lea ecx, [ebp - 0x254]
call fcn.00402c20
push 0
push 0x5443dc
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x3e
call fcn.00402c40
mov byte [ebp - 4], 0x3f
cmp dword [ebp - 0xcc], 0
je 0x432a14
cmp dword [ebp - 0x2f8], 0
jne 0x432a14
sub esp, 0x28
mov ecx, esp
push 0
call fcn.0048a110
push 0
push 1
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0xf0]
call fcn.00490ed0
add esp, 0x30
mov byte [ebp - 4], 0x40
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0xd1eec3c0
xor ecx, ecx
mov dword [ebp - 0x30], 0xc2c5cdc1
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x34], al
inc ecx
cmp ecx, 8
jb 0x4326e0
lea eax, [ebp - 0x34]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x1bc]
mov edi, dword [ebp - 0x14]
or edi, 0x4000
mov dword [ebp - 0x14], edi
call fcn.00402c10
push eax
lea ecx, [ebp - 0xf0]
call fcn.00490ca0
mov ecx, eax
call fcn.0048a530
test al, al
jne 0x432862
xorps xmm0, xmm0
mov dword [ebp - 0x77], 0xd1eec3c0
mov dword [ebp - 0x73], 0xc2c5cdc1
xor ecx, ecx
movups xmmword [ebp - 0x6f], xmm0
mov dword [ebp - 0x5f], 0
mov word [ebp - 0x5b], 0
mov byte [ebp - 0x59], al
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 8
jb 0x432764
lea eax, [ebp - 0x77]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x6f], 0
call fcn.00402b70
mov dword [ebp - 4], 0x42
lea ecx, [ebp - 0x148]
or edi, 0x8000
mov dword [ebp - 0x14], edi
call fcn.00402c10
push eax
lea ecx, [ebp - 0xf0]
call fcn.00490ca0
xorps xmm0, xmm0
mov dword [ebp - 0x11c], 0xc0d2deca
mov esi, eax
mov dword [ebp - 0x118], 0xd3c1c4ca
mov dword [ebp - 0x114], 0xdfd2e7d3
xor ecx, ecx
mov byte [ebp - 0x110], 0xc2
movups xmmword [ebp - 0x10f], xmm0
mov dword [ebp - 0xff], 0
mov word [ebp - 0xfb], 0
mov byte [ebp - 0xf9], 0
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x11c], al
inc ecx
cmp ecx, 0xd
jb 0x432800
lea eax, [ebp - 0x11c]
mov dword [0x56557c], ecx
push eax
lea ecx, [ebp - 0x18c]
mov byte [ebp - 0x10f], 0
call fcn.00402b70
mov dword [ebp - 4], 0x43
lea ecx, [ebp - 0x18c]
or edi, 0x10000
mov dword [ebp - 0x14], edi
call fcn.00402c10
push eax
mov ecx, esi
call fcn.00490ca0
mov ecx, eax
call fcn.0048a530
mov byte [ebp - 0x15], 1
test al, al
je 0x432866
mov byte [ebp - 0x15], 0
mov eax, dword [ebp - 0x14]
test eax, 0x10000
je 0x432886
and eax, 0xfffeffff
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test eax, 0x8000
je 0x4328a3
and eax, 0xffff7fff
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0x40
test eax, 0x4000
je 0x4328c4
and eax, 0xffffbfff
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
cmp byte [ebp - 0x15], 0
je 0x432a05
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0xd1eec3c0
mov dword [ebp - 0x30], 0xc2c5cdc1
xor ecx, ecx
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x34], al
inc ecx
cmp ecx, 8
jb 0x4328f6
lea eax, [ebp - 0x34]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0x44
call fcn.00402c10
push eax
lea ecx, [ebp - 0xf0]
call fcn.00490ca0
xorps xmm0, xmm0
mov dword [ebp - 0x7c], 0xc0d2deca
mov esi, eax
mov dword [ebp - 0x78], 0xd3c1c4ca
mov dword [ebp - 0x74], 0xdfd2e7d3
xor ecx, ecx
mov byte [ebp - 0x70], 0xc2
movups xmmword [ebp - 0x6f], xmm0
mov dword [ebp - 0x5f], 0
mov word [ebp - 0x5b], 0
mov byte [ebp - 0x59], 0
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x7c], al
inc ecx
cmp ecx, 0xd
jb 0x432970
lea eax, [ebp - 0x7c]
mov dword [0x56557c], ecx
push eax
lea ecx, [ebp - 0x18c]
mov byte [ebp - 0x6f], 0
call fcn.00402b70
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0x45
call fcn.00402c10
push eax
mov ecx, esi
call fcn.00490ca0
lea ecx, [ebp - 0x1a4]
push ecx
mov ecx, eax
call fcn.00490de0
mov edx, eax
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x98]
call fcn.004029b0
push eax
lea ecx, [ebp - 0x254]
call fcn.0048cb40
lea ecx, [ebp - 0x98]
call fcn.00402ad0
lea ecx, [ebp - 0x1a4]
call fcn.00402ad0
lea ecx, [ebp - 0x18c]
call fcn.00402ad0
lea ecx, [ebp - 0x148]
call fcn.00402ad0
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x3f
call fcn.0048a7b0
mov eax, dword [ebp - 0x244]
test eax, eax
jne 0x432a38
lea eax, [ebp - 0x308]
push eax
lea ecx, [ebp - 0x254]
call fcn.0048cb10
mov eax, dword [ebp - 0x244]
test eax, eax
setne byte [ebp - 0x80]
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1c8]
push 0
mov byte [ebp - 0x1d0], 0
call fcn.0048e6c0
mov byte [ebp - 4], 0x48
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x54], esp
sub esp, 8
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
call fcn.0048ab50
add esp, 8
mov eax, dword [ebp - 0x50]
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 0x49
lea esi, [eax + eax*2]
mov eax, dword [ebp - 0xa4]
shl esi, 3
add eax, esi
mov dword [ebp - 0xac], esi
push eax
call fcn.0048a420
mov ecx, eax
mov byte [ebp - 4], 0x48
call fcn.0048a7d0
cmp byte [ebx + 8], 0
je 0x432aec
push dword [ebp - 0x44]
lea ecx, [ebp - 0x1bc]
call fcn.00402c20
push 0
push 0x5443dc
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x4a
call fcn.00402c40
mov byte [ebp - 4], 0x4b
lea esi, [ebp - 0x1bc]
or dword [ebp - 0x14], 0x20000
jmp 0x432b98
xorps xmm0, xmm0
mov byte [ebp - 0xc4], 0xf3
movups xmmword [ebp - 0xc3], xmm0
mov dword [ebp - 0xb3], 0
xor ecx, ecx
mov word [ebp - 0xaf], 0
mov byte [ebp - 0xad], 0
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xc4], al
inc ecx
cmp ecx, 1
jb 0x432b20
lea eax, [ebp - 0xc4]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0x320]
mov byte [ebp - 0xc3], 0
call fcn.00402b70
mov dword [ebp - 4], 0x4c
lea ecx, [ebp - 0x320]
mov edi, dword [ebp - 0x14]
or edi, 0x40000
mov dword [ebp - 0x14], edi
call fcn.00402c10
mov edx, dword [ebp - 0xa4]
lea ecx, [ebp - 0x110]
push eax
lea edx, [edx + esi]
call fcn.004909d0
add esp, 4
mov esi, eax
or edi, 0x80000
mov dword [ebp - 4], 0x4d
mov dword [ebp - 0x14], edi
xorps xmm0, xmm0
mov byte [ebp - 0x170], 0xf3
movups xmmword [ebp - 0x16f], xmm0
mov dword [ebp - 0x15f], 0
xor ecx, ecx
mov word [ebp - 0x15b], 0
mov byte [ebp - 0x159], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x170], al
inc ecx
cmp ecx, 1
jb 0x432bc5
lea eax, [ebp - 0x170]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0x350]
mov byte [ebp - 0x16f], 0
call fcn.00402b70
lea ecx, [ebp - 0x350]
mov dword [ebp - 4], 0x4e
call fcn.00402c10
push eax
lea edx, [ebp - 0x21c]
lea ecx, [ebp - 0x368]
call fcn.004909d0
add esp, 4
push esi
push eax
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x18c]
push dword [ebp - 0x44]
call fcn.004944e0
lea eax, [ebx + 0x24]
mov byte [ebp - 4], 0x50
push eax
lea edx, [ebp - 0x18c]
lea ecx, [ebp - 0x23c]
call fcn.00490bf0
add esp, 4
lea ecx, [ebp - 0x18c]
call fcn.00402ad0
lea ecx, [ebp - 0x368]
call fcn.00402ad0
lea ecx, [ebp - 0x350]
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test eax, 0x80000
je 0x432c8d
and eax, 0xfff7ffff
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test eax, 0x40000
je 0x432caa
and eax, 0xfffbffff
lea ecx, [ebp - 0x320]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x57
test eax, 0x20000
je 0x432cc8
and eax, 0xfffdffff
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
lea ecx, [ebp - 0x23c]
call fcn.00402c10
lea edx, [ebp - 0xa8]
mov ecx, eax
call fcn.0041ac90
test eax, eax
jne 0x433ba0
movaps xmm0, xmmword [0x552370]
xor ecx, ecx
movups xmmword [ebp - 0x2f0], xmm0
mov dword [ebp - 0x270], 0x5643514c
movaps xmm0, xmmword [0x550eb0]
movups xmmword [ebp - 0x2e0], xmm0
mov byte [ebp - 0x26c], 0x40
movaps xmm0, xmmword [0x5515c0]
movups xmmword [ebp - 0x2d0], xmm0
mov dword [ebp - 0x25b], eax
movaps xmm0, xmmword [0x550dc0]
movups xmmword [ebp - 0x2c0], xmm0
mov word [ebp - 0x257], ax
movaps xmm0, xmmword [0x550ef0]
movups xmmword [ebp - 0x2b0], xmm0
mov byte [ebp - 0x255], al
movaps xmm0, xmmword [0x550cc0]
movups xmmword [ebp - 0x2a0], xmm0
movaps xmm0, xmmword [0x550cd0]
movups xmmword [ebp - 0x290], xmm0
movaps xmm0, xmmword [0x550ce0]
movups xmmword [ebp - 0x280], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x26b], xmm0
nop dword [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2f0], al
inc ecx
cmp ecx, 0x85
jb 0x432d90
lea eax, [ebp - 0x2f0]
mov dword [0x565614], ecx
push eax
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x26b], 0
call fcn.00402b70
lea ecx, [ebp - 0x148]
call fcn.00402c10
lea ecx, [ebp - 0x148]
mov esi, eax
call fcn.00402ad0
mov ecx, dword [ebp - 0xa8]
lea eax, [ebp - 0x48]
push 0
push eax
push 0
push 1
push 0xffffffffffffffff
mov edx, esi
call fcn.004ea640
add esp, 0x14
test eax, eax
jne 0x433637
mov ecx, dword [ebp - 0x48]
call fcn.004c6eb0
cmp eax, 0x64
jne 0x43362f
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x128]
push 0
mov byte [ebp - 0x130], 0
call fcn.0048e6c0
mov byte [ebp - 4], 0x59
xor edx, edx
mov edi, dword [ebp - 0x48]
mov ecx, edi
call fcn.004c73e0
mov dl, 1
mov ecx, eax
call fcn.004c3d20
mov ecx, edi
mov esi, eax
call fcn.004c7450
sub esp, 0x10
mov dword [ebp - 0x200], esi
lea eax, [ebp - 0x200]
mov dword [ebp - 0x54], esp
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0xd7dcd1c1
mov ecx, esp
mov dword [ebp - 0x34], 0xe9dbdbec
push eax
mov dword [ebp - 0x30], 0xdecbd9d4
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
call fcn.00491430
mov byte [ebp - 4], 0x5a
xor ecx, ecx
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x38], al
inc ecx
cmp ecx, 0xc
jb 0x432e97
lea eax, [ebp - 0x38]
mov dword [0x565528], ecx
push eax
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
or dword [ebp - 0x14], 0x80000000
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x5b
call fcn.00402c10
push eax
lea ecx, [ebp - 0x130]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x5c
call fcn.0048a7d0
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x59
call fcn.00402ad0
mov edi, dword [ebp - 0x48]
mov edx, 1
mov ecx, edi
call fcn.004c73e0
mov dl, 1
mov ecx, eax
call fcn.004c3d20
mov ecx, edi
mov esi, eax
call fcn.004c7450
movaps xmm0, xmmword [0x551ed0]
lea eax, [ebp - 0x204]
sub esp, 0x10
mov dword [ebp - 0x204], esi
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x54], esp
mov ecx, esp
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
push eax
movups xmmword [ebp - 0x2c], xmm0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
call fcn.00491430
mov byte [ebp - 4], 0x5d
xor ecx, ecx
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x3c], al
inc ecx
cmp ecx, 0x10
jb 0x432f60
lea eax, [ebp - 0x3c]
mov dword [0x565628], ecx
push eax
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
or dword [ebp - 0x14], 0x40000000
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x5e
call fcn.00402c10
push eax
lea ecx, [ebp - 0x130]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x5f
call fcn.0048a7d0
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x59
call fcn.00402ad0
mov edi, dword [ebp - 0x48]
mov edx, 2
mov ecx, edi
call fcn.004c73e0
mov dl, 1
mov ecx, eax
call fcn.004c3d20
mov ecx, edi
mov esi, eax
call fcn.004c7450
sub esp, 0x10
mov dword [ebp - 0x220], esi
lea eax, [ebp - 0x220]
mov dword [ebp - 0x54], esp
xorps xmm0, xmm0
mov dword [ebp - 0x3b], 0xdbc1c8ca
mov ecx, esp
mov dword [ebp - 0x37], 0xdfc1d5c1
push eax
mov dword [ebp - 0x33], 0xc3e6d6d8
mov word [ebp - 0x2f], 0xddde
mov byte [ebp - 0x2d], 0xcf
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
call fcn.00491430
mov byte [ebp - 4], 0x60
xor ecx, ecx
nop dword [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x3b], al
inc ecx
cmp ecx, 0xf
jb 0x433040
lea eax, [ebp - 0x3b]
mov dword [0x565558], ecx
push eax
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
or dword [ebp - 0x14], 0x20000000
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x61
call fcn.00402c10
push eax
lea ecx, [ebp - 0x130]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x62
call fcn.0048a7d0
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x59
call fcn.00402ad0
mov esi, dword [ebp - 0x48]
mov edx, 3
mov ecx, esi
call fcn.004c73e0
mov ecx, eax
call fcn.004c6e20
mov ecx, esi
mov dword [ebp - 0x54], eax
call fcn.004c7450
mov esi, dword [ebp - 0x48]
mov edx, 3
mov ecx, esi
call fcn.004c73e0
mov dl, 1
mov ecx, eax
call fcn.004c42b0
mov ecx, esi
mov edi, eax
call fcn.004c7450
push dword [ebp - 0x44]
lea ecx, [ebp - 0x1e8]
call fcn.00402c20
push 0
push 0x5443dc
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x63
call fcn.00402c40
push dword [ebp - 0x44]
lea ecx, [ebp - 0x148]
call fcn.00402c20
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x148]
mov esi, dword [ebp - 0x54]
push edi
push esi
call fcn.00402c40
cmp byte [ebp - 0x80], 0
mov byte [ebp - 4], 0x66
je 0x433215
xorps xmm0, xmm0
mov word [ebp - 0x72], 0x81d9
mov byte [ebp - 0x70], 0x81
xor ecx, ecx
movups xmmword [ebp - 0x6f], xmm0
mov dword [ebp - 0x5f], 0
mov word [ebp - 0x5b], 0
mov byte [ebp - 0x59], 0
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x72], al
inc ecx
cmp ecx, 3
jb 0x433160
lea eax, [ebp - 0x72]
mov dword [0x565590], ecx
push eax
lea ecx, [ebp - 0x98]
mov byte [ebp - 0x6f], 0
call fcn.00402b70
mov byte [ebp - 4], 0x67
lea ecx, [ebp - 0x98]
or dword [ebp - 0x14], 0x100000
call fcn.00402c10
push eax
push esi
call fcn.00506580
add esp, 8
test eax, eax
jne 0x43320f
xorps xmm0, xmm0
mov word [ebp - 0x2f], 0x81d9
mov byte [ebp - 0x2d], 0x80
xor ecx, ecx
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], eax
mov word [ebp - 0x18], ax
mov byte [ebp - 0x16], al
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2f], al
inc ecx
cmp ecx, 3
jb 0x4331c8
lea eax, [ebp - 0x2f]
mov dword [0x565590], ecx
push eax
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
or dword [ebp - 0x14], 0x200000
lea ecx, [ebp - 0x1a4]
call fcn.00402c10
push eax
push esi
call fcn.00506580
add esp, 8
test eax, eax
je 0x433215
mov byte [ebp - 0x15], 1
jmp 0x433219
mov byte [ebp - 0x15], 0
mov eax, dword [ebp - 0x14]
test eax, 0x200000
je 0x433239
and eax, 0xffdfffff
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0x66
test eax, 0x100000
je 0x43325a
and eax, 0xffefffff
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
cmp byte [ebp - 0x15], 0
je 0x43329f
sub esp, 0x18
lea eax, [ebp - 0x148]
mov ecx, esp
mov dword [ebp - 0x54], esp
push eax
call fcn.0048ccc0
sub esp, 0x18
mov byte [ebp - 4], 0x68
lea eax, [ebp - 0x254]
mov ecx, esp
push eax
call fcn.0048ccc0
xor dl, dl
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0x1e8]
call fcn.004296a0
add esp, 0x30
jmp 0x4332b4
push 0x800
lea edx, [ebp - 0x1e8]
mov ecx, esi
call fcn.00429570
add esp, 4
sub esp, 0x10
mov dword [ebp - 0x37], 0xd6c3d1cc
lea eax, [ebp - 0x1e8]
mov dword [ebp - 0x58], esp
xorps xmm0, xmm0
mov dword [ebp - 0x33], 0xdbc0daec
mov ecx, esp
mov word [ebp - 0x2f], 0xddd5
push eax
mov byte [ebp - 0x2d], 0xcb
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
call fcn.004913c0
mov byte [ebp - 4], 0x69
xor ecx, ecx
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0xb
jb 0x433300
lea eax, [ebp - 0x37]
mov dword [0x565530], ecx
push eax
lea ecx, [ebp - 0x98]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
or dword [ebp - 0x14], 0x4000000
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x6a
call fcn.00402c10
push eax
lea ecx, [ebp - 0x130]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x6b
call fcn.0048a7d0
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x66
call fcn.00402ad0
mov edi, dword [ebp - 0x48]
mov edx, 4
mov ecx, edi
call fcn.004c73e0
mov dl, 1
mov ecx, eax
call fcn.004c3d20
mov ecx, edi
mov esi, eax
call fcn.004c7450
sub esp, 0x10
mov dword [ebp - 0x224], esi
lea eax, [ebp - 0x224]
mov dword [ebp - 0x58], esp
xorps xmm0, xmm0
mov dword [ebp - 0x32], 0xd5d8c2c0
mov ecx, esp
mov word [ebp - 0x2e], 0xdada
push eax
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
call fcn.00491430
mov byte [ebp - 4], 0x6c
xor ecx, ecx
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x32], al
inc ecx
cmp ecx, 6
jb 0x4333d0
lea eax, [ebp - 0x32]
mov dword [0x565548], ecx
push eax
lea ecx, [ebp - 0x98]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
or dword [ebp - 0x14], 0x2000000
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x6d
call fcn.00402c10
push eax
lea ecx, [ebp - 0x130]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x6e
call fcn.0048a7d0
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x66
call fcn.00402ad0
mov edi, dword [ebp - 0x48]
mov edx, 5
mov ecx, edi
call fcn.004c73e0
mov dl, 1
mov ecx, eax
call fcn.004c3d20
mov ecx, edi
mov esi, eax
call fcn.004c7450
movaps xmm0, xmmword [0x552510]
lea eax, [ebp - 0x1ec]
sub esp, 0x10
mov dword [ebp - 0x1ec], esi
movups xmmword [ebp - 0x3e], xmm0
mov dword [ebp - 0x58], esp
mov ecx, esp
xorps xmm0, xmm0
mov word [ebp - 0x2e], 0xa4d6
push eax
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
call fcn.00491430
mov byte [ebp - 4], 0x6f
xor ecx, ecx
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x3e], al
inc ecx
cmp ecx, 0x12
jb 0x4334a0
lea eax, [ebp - 0x3e]
mov dword [0x5655dc], ecx
push eax
lea ecx, [ebp - 0x98]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
or dword [ebp - 0x14], 0x800000
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x70
call fcn.00402c10
push eax
lea ecx, [ebp - 0x130]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x71
call fcn.0048a7d0
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x66
call fcn.00402ad0
mov edi, dword [ebp - 0x48]
mov edx, 6
mov ecx, edi
call fcn.004c73e0
mov dl, 1
mov ecx, eax
call fcn.004c3d20
mov ecx, edi
mov esi, eax
call fcn.004c7450
sub esp, 0x10
mov dword [ebp - 0x1f0], esi
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x58], esp
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0xd9d2d9c1
mov ecx, esp
mov dword [ebp - 0x30], 0xd3d8d5dd
push eax
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
call fcn.00491430
mov byte [ebp - 4], 0x72
xor ecx, ecx
nop word [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x34], al
inc ecx
cmp ecx, 8
jb 0x433570
lea eax, [ebp - 0x34]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x98]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
or dword [ebp - 0x14], 0x400000
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x73
call fcn.00402c10
push eax
lea ecx, [ebp - 0x130]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x74
call fcn.0048a7d0
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x66
call fcn.00402ad0
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x1d0]
add eax, dword [ebp - 0xac]
push eax
call fcn.0048a420
lea ecx, [ebp - 0x130]
push ecx
mov ecx, eax
call fcn.0048a140
lea ecx, [ebp - 0x148]
call fcn.00402ad0
lea ecx, [ebp - 0x1e8]
call fcn.00402ad0
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x57
call fcn.0048a7b0
mov ecx, dword [ebp - 0x48]
call fcn.004c6eb0
cmp eax, 0x64
je 0x432e10
mov ecx, dword [ebp - 0x48]
call fcn.004c6d70
movaps xmm0, xmmword [0x552370]
xor ecx, ecx
movups xmmword [ebp - 0x2c1], xmm0
mov dword [ebp - 0x271], 0x706063a0
movaps xmm0, xmmword [0x552610]
movups xmmword [ebp - 0x2b1], xmm0
mov word [ebp - 0x26d], 0x7767
movaps xmm0, xmmword [0x551620]
movups xmmword [ebp - 0x2a1], xmm0
mov dword [ebp - 0x25b], 0
movaps xmm0, xmmword [0x5516e0]
movups xmmword [ebp - 0x291], xmm0
mov word [ebp - 0x257], 0
movaps xmm0, xmmword [0x550e20]
movups xmmword [ebp - 0x281], xmm0
mov byte [ebp - 0x255], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x26b], xmm0
nop word [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2c1], al
inc ecx
cmp ecx, 0x56
jb 0x4336c0
lea eax, [ebp - 0x2c1]
mov dword [0x565564], ecx
push eax
lea ecx, [ebp - 0x98]
mov byte [ebp - 0x26b], 0
call fcn.00402b70
lea ecx, [ebp - 0x98]
call fcn.00402c10
lea ecx, [ebp - 0x98]
mov esi, eax
call fcn.00402ad0
mov ecx, dword [ebp - 0xa8]
lea eax, [ebp - 0x4c]
push 0
push eax
push 0
push 1
push 0xffffffffffffffff
mov edx, esi
call fcn.004ea640
add esp, 0x14
test eax, eax
jne 0x433b95
mov ecx, dword [ebp - 0x4c]
call fcn.004c6eb0
cmp eax, 0x64
jne 0x433b8d
nop dword [eax]
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x150]
push 0
mov byte [ebp - 0x158], 0
call fcn.0048e6c0
mov byte [ebp - 4], 0x76
xor edx, edx
mov edi, dword [ebp - 0x4c]
mov ecx, edi
call fcn.004c73e0
mov dl, 1
mov ecx, eax
call fcn.004c3d20
mov ecx, edi
mov esi, eax
call fcn.004c7450
sub esp, 0x10
mov dword [ebp - 0x1f4], esi
lea eax, [ebp - 0x1f4]
mov dword [ebp - 0x58], esp
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0xd7dcd1c1
mov ecx, esp
mov dword [ebp - 0x34], 0xe9dbdbec
push eax
mov dword [ebp - 0x30], 0xdecbd9d4
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
call fcn.00491430
mov byte [ebp - 4], 0x77
xor eax, eax
lea ecx, [eax - 0x51]
xor byte [ebp + eax - 0x38], cl
inc eax
cmp eax, 0xc
jb 0x4337c7
mov dword [0x565528], eax
lea ecx, [ebp - 0x98]
lea eax, [ebp - 0x38]
mov byte [ebp - 0x2c], 0
push eax
call fcn.00402b70
or dword [ebp - 0x14], 0x8000000
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x78
call fcn.00402c10
push eax
lea ecx, [ebp - 0x158]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x79
call fcn.0048a7d0
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x76
call fcn.00402ad0
mov edi, dword [ebp - 0x4c]
mov edx, 1
mov ecx, edi
call fcn.004c73e0
mov dl, 1
mov ecx, eax
call fcn.004c3d20
mov ecx, edi
mov esi, eax
call fcn.004c7450
sub esp, 0x10
mov dword [ebp - 0x1f8], esi
lea eax, [ebp - 0x1f8]
mov dword [ebp - 0x58], esp
xorps xmm0, xmm0
mov dword [ebp - 0x35], 0xedc1c8ca
mov ecx, esp
mov dword [ebp - 0x31], 0xc2dbdbde
push eax
mov byte [ebp - 0x2d], 0xdf
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
call fcn.00491430
mov byte [ebp - 4], 0x7a
xor ecx, ecx
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x35], al
inc ecx
cmp ecx, 9
jb 0x433893
lea eax, [ebp - 0x35]
mov dword [0x565630], ecx
push eax
lea ecx, [ebp - 0x98]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
or dword [ebp - 0x14], 0x10000000
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x7b
call fcn.00402c10
push eax
lea ecx, [ebp - 0x158]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x7c
call fcn.0048a7d0
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x76
call fcn.00402ad0
mov edi, dword [ebp - 0x4c]
mov edx, 2
mov ecx, edi
call fcn.004c73e0
mov dl, 1
mov ecx, eax
call fcn.004c3d20
mov ecx, edi
mov esi, eax
call fcn.004c7450
sub esp, 0x10
mov dword [ebp - 0x1fc], esi
lea eax, [ebp - 0x1fc]
mov dword [ebp - 0x58], esp
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0xedc1c8ca
mov ecx, esp
mov dword [ebp - 0x30], 0xc4d4d1ca
push eax
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
call fcn.00491430
mov byte [ebp - 4], 0x7d
xor ecx, ecx
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x34], al
inc ecx
cmp ecx, 8
jb 0x433960
lea eax, [ebp - 0x34]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x98]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x7e
call fcn.00402c10
push eax
lea ecx, [ebp - 0x158]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x7f
call fcn.0048a7d0
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x76
call fcn.00402ad0
mov edi, dword [ebp - 0x4c]
mov edx, 3
mov ecx, edi
call fcn.004c73e0
mov dl, 1
mov ecx, eax
call fcn.004c3d20
mov ecx, edi
mov esi, eax
call fcn.004c7450
sub esp, 0x10
mov dword [ebp - 0x1c0], esi
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x58], esp
xorps xmm0, xmm0
mov dword [ebp - 0x35], 0xc6c2d1c3
mov ecx, esp
mov dword [ebp - 0x31], 0xc3dad2ec
push eax
mov byte [ebp - 0x2d], 0xc5
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
call fcn.00491430
mov byte [ebp - 4], 0x80
xor ecx, ecx
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x35], al
inc ecx
cmp ecx, 9
jb 0x433a27
lea eax, [ebp - 0x35]
mov dword [0x565630], ecx
push eax
lea ecx, [ebp - 0x98]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x81
call fcn.00402c10
push eax
lea ecx, [ebp - 0x158]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x82
call fcn.0048a7d0
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x76
call fcn.00402ad0
mov edi, dword [ebp - 0x4c]
mov edx, 4
mov ecx, edi
call fcn.004c73e0
mov dl, 1
mov ecx, eax
call fcn.004c3d20
mov ecx, edi
mov esi, eax
call fcn.004c7450
sub esp, 0x10
mov dword [ebp - 0x44], esi
lea eax, [ebp - 0x44]
mov dword [ebp - 0x58], esp
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0xd9d2d9c1
mov ecx, esp
mov dword [ebp - 0x30], 0xd3d8d5dd
push eax
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
call fcn.00491430
mov byte [ebp - 4], 0x83
xor ecx, ecx
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x34], al
inc ecx
cmp ecx, 8
jb 0x433ae4
lea eax, [ebp - 0x34]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x98]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
or dword [ebp - 0x14], 0x1000000
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x84
call fcn.00402c10
push eax
lea ecx, [ebp - 0x158]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x85
call fcn.0048a7d0
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x76
call fcn.00402ad0
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x1d0]
add eax, dword [ebp - 0xac]
push eax
call fcn.0048a420
lea ecx, [ebp - 0x158]
push ecx
mov ecx, eax
call fcn.0048a140
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x57
call fcn.0048a7b0
mov ecx, dword [ebp - 0x4c]
call fcn.004c6eb0
cmp eax, 0x64
je 0x433740
mov ecx, dword [ebp - 0x4c]
call fcn.004c6d70
mov ecx, dword [ebp - 0xa8]
call fcn.0041b210
xorps xmm0, xmm0
mov dword [ebp - 0x31], 0xd6c3d1cc
mov byte [ebp - 0x2d], 0xc0
xor ecx, ecx
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x18], 0
mov byte [ebp - 0x16], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x31], al
inc ecx
cmp ecx, 5
jb 0x433bc5
lea eax, [ebp - 0x31]
mov dword [0x565544], ecx
push eax
lea ecx, [ebp - 0x98]
mov byte [ebp - 0x2c], 0
call fcn.00402b70
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x86
call fcn.00402c10
mov ecx, dword [ebp - 0x174]
push eax
call fcn.00490ca0
lea ecx, [ebp - 0x1d0]
push ecx
mov ecx, eax
call fcn.0048a140
lea ecx, [ebp - 0x98]
call fcn.00402ad0
lea ecx, [ebp - 0x23c]
call fcn.00402ad0
lea ecx, [ebp - 0x1d0]
call fcn.0048a7b0
lea ecx, [ebp - 0x254]
call fcn.00402ad0
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x1a
call fcn.00402ad0
mov ecx, dword [ebp - 0xa0]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0xa4]
mov esi, dword [ebp - 0x50]
mov edi, dword [ebp - 0x14]
inc esi
imul ecx
mov dword [ebp - 0x50], esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x431f00
lea ecx, [ebp - 0x308]
call fcn.00402ad0
lea ecx, [ebp - 0x338]
call fcn.00402ad0
lea ecx, [ebp - 0xa4]
call fcn.0048eeb0
lea ecx, [ebp - 0x21c]
call fcn.00402ad0
lea ecx, [ebx + 0xc]
call fcn.00402ad0
lea ecx, [ebx + 0x24]
call fcn.00402ad0
lea ecx, [ebx + 0x3c]
call fcn.00402ad0
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret