Function at 0x439190
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46717d
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xc0
mov eax, dword [0x47d040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x58], 0
mov ecx, dword [0x48536c]
mov dword [ebp - 0x1c], ecx
mov eax, dword [ecx + 0x1a68]
mov byte [eax + 0x7c], 1
mov eax, dword [ecx + 0x1a68]
movss xmm0, dword [eax + 0x10]
movss xmm2, dword [eax + 0xc]
subss xmm0, dword [eax + 0x54]
subss xmm2, dword [eax + 0x50]
addss xmm0, dword [0x475b20]
addss xmm2, dword [0x475af8]
movss dword [eax + 0xcc], xmm0
movss dword [eax + 0xc8], xmm2
movss xmm1, dword [eax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xe0]
maxss xmm0, xmm2
movss dword [eax + 0xe4], xmm1
movss dword [eax + 0xe0], xmm0
mov eax, dword [ecx + 0x1a68]
lea esi, [eax + 0x1bc]
mov dword [ebp - 0x58], eax
mov dword [eax + 0x1a8], 0x42a80000
mov edi, dword [esi + 4]
mov ecx, dword [esi]
cmp ecx, edi
jne 0x439294
inc ecx
test edi, edi
je 0x43927f
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x439284
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.00417550
mov eax, dword [ebp - 0x58]
mov edx, dword [esi]
mov ecx, dword [esi + 8]
mov eax, dword [eax + 0x1a8]
mov dword [ebp - 0x4c], 0xe181e4b
mov dword [ebp - 0x48], 0xf026b19
mov dword [ecx + edx*4], eax
mov cl, 0x4b
mov eax, dword [ebp - 0x1c]
inc dword [esi]
mov dword [ebp - 0x44], 0x716b6b6b
mov word [ebp - 0x40], 0x6b
and dword [eax + 0x1b50], 0xfffffffe
xor eax, eax
nop dword [eax]
xor byte [ebp + eax - 0x4b], cl
inc eax
cmp eax, 0xc
jae 0x4392df
mov cl, byte [ebp - 0x4c]
jmp 0x4392d0
lea eax, [ebp - 0x4b]
mov byte [ebp - 0x3f], 0
push eax
call fcn.004284e0
mov esi, dword [0x48536c]
add esp, 4
mov eax, dword [esi + 0x1a68]
mov byte [eax + 0x7c], 1
mov ecx, dword [esi + 0x1a68]
mov edx, dword [ecx + 0x1bc]
sub edx, 1
mov dword [ecx + 0x1bc], edx
jne 0x439320
movss xmm0, dword [ecx + 0x26c]
jmp 0x43932c
mov eax, dword [ecx + 0x1c4]
movss xmm0, dword [eax + edx*4 - 4]
movss dword [ecx + 0x1a8], xmm0
mov eax, dword [esi + 0x1a68]
mov byte [eax + 0x7c], 1
mov eax, dword [esi + 0x1a68]
movss xmm0, dword [eax + 0x10]
movss xmm2, dword [eax + 0xc]
subss xmm0, dword [eax + 0x54]
subss xmm2, dword [eax + 0x50]
addss xmm0, dword [0x475b1c]
addss xmm2, dword [0x475b40]
movss dword [eax + 0xcc], xmm0
movss dword [eax + 0xc8], xmm2
movss xmm1, dword [eax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xe0]
maxss xmm0, xmm2
movss dword [eax + 0xe4], xmm1
movss dword [eax + 0xe0], xmm0
mov eax, dword [esi + 0x1a68]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x1a8], 0x432e0000
add eax, 0x1bc
mov dword [ebp - 0x58], eax
mov edi, dword [eax + 4]
mov ecx, dword [eax]
cmp ecx, edi
jne 0x4393ea
inc ecx
test edi, edi
je 0x4393d4
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x4393d9
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, dword [ebp - 0x58]
call fcn.00417550
mov eax, dword [ebp - 0x58]
mov edx, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 0x51], 0x7b
push 0
mov byte [ebp - 0x5d], 0x76
mov eax, dword [eax + 0x1a8]
mov dword [ecx + edx*4], eax
mov dl, 0x67
mov eax, dword [ebp - 0x58]
mov ch, 0x77
push 0
push 0
mov dh, 0x60
mov dword [ebp - 0x5c], 0
inc dword [eax]
mov al, 0x31
and dword [esi + 0x1b50], 0xfffffffe
mov cl, al
mov byte [ebp - 0x48], 0x12
mov ah, 0x61
xor al, byte [ebp - 0x48]
xor cl, byte [ebp - 0x48]
mov byte [ebp - 0x47], al
mov al, byte [ebp - 0x51]
mov byte [ebp - 0x46], cl
mov cl, byte [ebp - 0x48]
xor al, cl
mov byte [ebp - 0x3f], 0
mov byte [ebp - 0x41], al
xor ah, cl
mov al, byte [ebp - 0x5d]
xor dl, cl
xor al, cl
mov byte [ebp - 0x44], ah
mov byte [ebp - 0x40], al
xor dh, cl
lea eax, [ebp - 0x5c]
mov byte [ebp - 0x45], dl
push eax
xor ch, cl
mov byte [ebp - 0x42], dh
mov byte [ebp - 0x43], ch
xor edx, edx
push 0x15
push 0x4853b0
lea ecx, [ebp - 0x47]
mov byte [ebp - 0x3f], 0
mov dword [ebp - 0x58], 0
call fcn.0042be00
mov edi, dword [0x48536c]
add esp, 0x18
mov eax, dword [edi + 0x1a68]
mov byte [eax + 0x7c], 1
mov ecx, dword [edi + 0x1a68]
mov edx, dword [ecx + 0x1bc]
sub edx, 1
mov dword [ecx + 0x1bc], edx
jne 0x4394b7
movss xmm0, dword [ecx + 0x26c]
jmp 0x4394c3
mov eax, dword [ecx + 0x1c4]
movss xmm0, dword [eax + edx*4 - 4]
movss dword [ecx + 0x1a8], xmm0
mov eax, dword [edi + 0x1a68]
mov byte [eax + 0x7c], 1
mov eax, dword [edi + 0x1a68]
movss xmm0, dword [eax + 0x10]
movss xmm2, dword [eax + 0xc]
subss xmm0, dword [eax + 0x54]
subss xmm2, dword [eax + 0x50]
addss xmm0, dword [0x475b2c]
addss xmm2, dword [0x475af8]
movss dword [eax + 0xcc], xmm0
movss dword [eax + 0xc8], xmm2
movss xmm1, dword [eax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xe0]
maxss xmm0, xmm2
movss dword [eax + 0xe4], xmm1
movss dword [eax + 0xe0], xmm0
mov eax, dword [edi + 0x1a68]
lea esi, [eax + 0x1bc]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x1a8], 0x42a80000
mov eax, dword [esi + 4]
mov ecx, dword [esi]
cmp ecx, eax
jne 0x43957a
inc ecx
test eax, eax
je 0x439568
cdq
sub eax, edx
sar eax, 1
add eax, dword [esi + 4]
jmp 0x43956d
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.00417550
mov edx, dword [esi]
mov ecx, dword [esi + 8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x1a8]
mov dword [ecx + edx*4], eax
mov cl, 7
inc dword [esi]
and dword [edi + 0x1b50], 0xfffffffe
xor eax, eax
mov dword [ebp - 0x4c], 0x54465707
mov dword [ebp - 0x48], 0x55485054
mov dword [ebp - 0x44], 0x3d272743
mov word [ebp - 0x40], 0x27
xor byte [ebp + eax - 0x4b], cl
inc eax
cmp eax, 0xc
jae 0x4395c2
mov cl, byte [ebp - 0x4c]
jmp 0x4395b3
lea eax, [ebp - 0x4b]
mov byte [ebp - 0x3f], 0
push eax
call fcn.004284e0
mov esi, dword [0x48536c]
add esp, 4
mov eax, dword [esi + 0x1a68]
mov byte [eax + 0x7c], 1
mov ecx, dword [esi + 0x1a68]
mov edx, dword [ecx + 0x1bc]
sub edx, 1
mov dword [ecx + 0x1bc], edx
jne 0x439603
movss xmm0, dword [ecx + 0x26c]
jmp 0x43960f
mov eax, dword [ecx + 0x1c4]
movss xmm0, dword [eax + edx*4 - 4]
movss dword [ecx + 0x1a8], xmm0
mov eax, dword [esi + 0x1a68]
mov byte [eax + 0x7c], 1
mov eax, dword [esi + 0x1a68]
movss xmm0, dword [eax + 0x10]
movss xmm2, dword [eax + 0xc]
subss xmm0, dword [eax + 0x54]
subss xmm2, dword [eax + 0x50]
addss xmm0, dword [0x475b28]
addss xmm2, dword [0x475b40]
movss dword [eax + 0xcc], xmm0
movss dword [eax + 0xc8], xmm2
movss xmm1, dword [eax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xe0]
maxss xmm0, xmm2
movss dword [eax + 0xe4], xmm1
movss dword [eax + 0xe0], xmm0
mov eax, dword [esi + 0x1a68]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x1a8], 0x432e0000
add eax, 0x1bc
mov dword [ebp - 0x58], eax
mov edi, dword [eax + 4]
mov ecx, dword [eax]
cmp ecx, edi
jne 0x4396cd
inc ecx
test edi, edi
je 0x4396b7
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x4396bc
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, dword [ebp - 0x58]
call fcn.00417550
mov eax, dword [ebp - 0x58]
mov edx, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 0x5d], 0x30
mov byte [ebp - 0x51], 0x28
mov byte [ebp - 0x5e], 0x35
mov eax, dword [eax + 0x1a8]
mov dword [ecx + edx*4], eax
mov dl, 0x37
mov eax, dword [ebp - 0x58]
mov ch, 0x34
push 0
mov byte [ebp - 0x52], 0x23
mov dh, ch
push 0
inc dword [eax]
mov al, 0x64
and dword [esi + 0x1b50], 0xfffffffe
mov cl, al
mov byte [ebp - 0x4c], 0x47
mov ah, 0x26
xor al, byte [ebp - 0x4c]
xor cl, byte [ebp - 0x4c]
mov byte [ebp - 0x4b], al
mov al, byte [ebp - 0x5d]
mov byte [ebp - 0x4a], cl
mov cl, byte [ebp - 0x4c]
xor al, cl
mov byte [ebp - 0x41], 0
mov byte [ebp - 0x45], al
xor ah, cl
mov al, byte [ebp - 0x51]
xor dl, cl
xor al, cl
mov byte [ebp - 0x48], ah
mov byte [ebp - 0x44], al
xor dh, cl
mov al, byte [ebp - 0x5e]
xor ch, cl
xor al, cl
mov byte [ebp - 0x49], dl
mov byte [ebp - 0x43], al
mov al, byte [ebp - 0x52]
xor al, cl
mov byte [ebp - 0x47], ch
mov byte [ebp - 0x42], al
lea ecx, [ebp - 0x4b]
push 0
lea eax, [ebp - 0x5c]
mov byte [ebp - 0x46], dh
push eax
push 0x15
push 0x485424
xor edx, edx
mov byte [ebp - 0x41], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
call fcn.0042be00
mov esi, dword [0x48536c]
add esp, 0x18
mov eax, dword [esi + 0x1a68]
mov byte [eax + 0x7c], 1
mov ecx, dword [esi + 0x1a68]
mov edx, dword [ecx + 0x1bc]
sub edx, 1
mov dword [ecx + 0x1bc], edx
jne 0x4397b2
movss xmm0, dword [ecx + 0x26c]
jmp 0x4397be
mov eax, dword [ecx + 0x1c4]
movss xmm0, dword [eax + edx*4 - 4]
movss dword [ecx + 0x1a8], xmm0
mov dl, 0x7d
mov eax, dword [esi + 0x1a68]
mov cl, 0x7f
mov byte [ebp - 0x52], cl
mov ch, 0x69
mov dh, 0x6e
mov byte [eax + 0x7c], 1
mov eax, dword [esi + 0x1a68]
mov byte [ebp - 0x48], 0x3a
xor cl, byte [ebp - 0x48]
mov byte [ebp - 0x46], cl
movss xmm0, dword [eax + 0x10]
movss xmm2, dword [eax + 0xc]
subss xmm0, dword [eax + 0x54]
subss xmm2, dword [eax + 0x50]
mov cl, byte [ebp - 0x48]
xor dl, cl
mov byte [ebp - 0x3f], 0
xor ch, cl
mov byte [ebp - 0x45], dl
addss xmm0, dword [0x475b68]
addss xmm2, dword [0x475b44]
xor dh, cl
mov byte [ebp - 0x43], ch
mov byte [ebp - 0x42], dh
lea edx, [ebp - 0x5c]
push ecx
movss dword [eax + 0xcc], xmm0
movss dword [eax + 0xc8], xmm2
movss xmm1, dword [eax + 0xe4]
maxss xmm1, xmm0
mov dword [ebp - 0x5c], 0x432f0000
movss xmm0, dword [eax + 0xe0]
maxss xmm0, xmm2
mov dword [ebp - 0x58], 0x41980000
mov byte [ebp - 0x3f], 0
movss dword [eax + 0xe4], xmm1
movss dword [eax + 0xe0], xmm0
mov al, 0x68
mov byte [ebp - 0x5e], al
mov ah, 0x73
xor al, byte [ebp - 0x48]
xor ah, cl
mov byte [ebp - 0x47], al
mov al, byte [ebp - 0x52]
xor al, cl
mov byte [ebp - 0x44], ah
mov byte [ebp - 0x41], al
mov al, byte [ebp - 0x5e]
xor al, cl
lea ecx, [ebp - 0x47]
mov byte [ebp - 0x40], al
call fcn.00428c90
add esp, 4
test al, al
je 0x43a016
mov eax, dword [0x4853ac]
test eax, eax
je 0x4398ba
cmp dword [eax + 0x40028], 0
jne 0x4398bf
call fcn.00437020
xorps xmm0, xmm0
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x3c], vtable.ByteBuffer.0
movups xmmword [ebp - 0x2c], xmm0
mov byte [ebp - 0x38], 1
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
lea eax, [ebp - 0x1c]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0x20
call fcn.00405270
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x28]
mov edx, ecx
mov edi, dword [ebp - 0x30]
mov esi, dword [ebp - 0x2c]
inc edi
sub edx, esi
mov dword [ebp - 0x3c], vtable.Packet.0
mov byte [ebp - 0x20], 0xea
cmp edx, edi
jae 0x43995f
mov eax, dword [ebp - 0x24]
sub eax, esi
cmp edi, eax
jbe 0x43994e
push ecx
push edi
lea ecx, [ebp - 0x2c]
call fcn.004058a0
mov esi, dword [ebp - 0x2c]
jmp 0x43995f
sub edi, edx
push edi
push 0
push ecx
call fcn.00443480
add esp, 0xc
add dword [ebp - 0x28], edi
mov edi, dword [ebp - 0x30]
mov byte [esi + edi], 0x55
inc edi
mov dword [ebp - 0x30], edi
mov ecx, 0x4853b0
mov dword [ebp - 4], 2
xorps xmm0, xmm0
mov dword [ebp - 0xa8], 0
movups xmmword [ebp - 0xb8], xmm0
mov dword [ebp - 0xa4], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439997
sub ecx, edx
push ecx
push 0x4853b0
lea ecx, [ebp - 0xb8]
call fcn.00405360
mov byte [ebp - 4], 3
mov eax, 1
cmp dword [ebp - 0xa8], 0
mov dword [ebp - 0x58], eax
je 0x439acc
mov ecx, 0x485424
mov dword [ebp - 0xc0], 0
xorps xmm0, xmm0
mov dword [ebp - 0xbc], 0
movups xmmword [ebp - 0xd0], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4399f0
sub ecx, edx
push ecx
push 0x485424
lea ecx, [ebp - 0xd0]
call fcn.00405360
mov dword [ebp - 4], 4
mov eax, 3
cmp dword [ebp - 0xc0], 0
mov dword [ebp - 0x58], eax
je 0x439acc
mov ecx, 0x48543c
mov dword [ebp - 0x78], 0
xorps xmm0, xmm0
mov dword [ebp - 0x74], 0
movups xmmword [ebp - 0x88], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439a46
sub ecx, edx
push ecx
push 0x48543c
lea ecx, [ebp - 0x88]
call fcn.00405360
mov dword [ebp - 4], 5
mov eax, 7
cmp dword [ebp - 0x78], 0
mov dword [ebp - 0x58], eax
je 0x439acc
mov ecx, 0x48540c
mov dword [ebp - 0x90], 0
xorps xmm0, xmm0
mov dword [ebp - 0x8c], 0
movups xmmword [ebp - 0xa0], xmm0
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439aa0
sub ecx, edx
push ecx
push 0x48540c
lea ecx, [ebp - 0xa0]
call fcn.00405360
cmp dword [ebp - 0x90], 0
mov eax, 0xf
mov byte [ebp - 0x51], 0
jne 0x439ad0
mov byte [ebp - 0x51], 1
test al, 8
je 0x439b17
mov ecx, dword [ebp - 0x8c]
and eax, 0xfffffff7
mov dword [ebp - 0x58], eax
cmp ecx, 0xf
jbe 0x439b17
mov edx, dword [ebp - 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x439b0a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43a701
push ecx
push edx
call fcn.00440c00
mov eax, dword [ebp - 0x58]
add esp, 8
mov dword [ebp - 4], 4
test al, 4
je 0x439b62
mov ecx, dword [ebp - 0x74]
and eax, 0xfffffffb
mov dword [ebp - 0x58], eax
cmp ecx, 0xf
jbe 0x439b62
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x439b55
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43a701
push ecx
push edx
call fcn.00440c00
mov eax, dword [ebp - 0x58]
add esp, 8
mov dword [ebp - 4], 3
test al, 2
je 0x439bb0
mov ecx, dword [ebp - 0xbc]
and eax, 0xfffffffd
mov dword [ebp - 0x58], eax
cmp ecx, 0xf
jbe 0x439bb0
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x439ba3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43a701
push ecx
push edx
call fcn.00440c00
mov eax, dword [ebp - 0x58]
add esp, 8
mov dword [ebp - 4], 2
test al, 1
je 0x439bf5
mov ecx, dword [ebp - 0xa4]
cmp ecx, 0xf
jbe 0x439bf5
mov edx, dword [ebp - 0xb8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x439beb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43a701
push ecx
push edx
call fcn.00440c00
add esp, 8
cmp byte [ebp - 0x51], 0
je 0x439d5c
movaps xmm0, xmmword [0x475f40]
mov al, 0x29
mov byte [ebp - 0x6c], 0x6f
mov ah, 0x1b
xor al, byte [ebp - 0x6c]
xor dh, dh
mov byte [ebp - 0x6b], al
mov cl, 0xe
mov al, byte [ebp - 0x6c]
mov ch, 0x2d
xor cl, al
mov byte [ebp - 0x52], ah
xor ah, al
mov byte [ebp - 0x64], dh
xor ch, al
mov byte [ebp - 0x68], ah
xor dh, al
mov byte [ebp - 0x6a], cl
mov dl, 0x1c
mov byte [ebp - 0x67], ch
xor dl, al
mov byte [ebp - 0x66], dh
mov al, byte [ebp - 0x52]
xor al, byte [ebp - 0x6c]
xor ecx, ecx
mov byte [ebp - 0x65], al
lea eax, [ebp - 0x6b]
push 0x30
mov byte [ebp - 0x69], dl
mov byte [ebp - 0x64], 0
push eax
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x78], 0x746a6d24
mov dword [ebp - 0x74], 0x25777071
mov byte [ebp - 0x70], 0
nop dword [eax]
mov al, byte [ebp - 0x88]
xor byte [ebp + ecx - 0x87], al
inc ecx
cmp ecx, 0x17
jb 0x439c70
sub esp, 0x18
mov byte [ebp - 0x70], 0
mov edx, esp
lea ecx, [ebp - 0x87]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439cb0
sub ecx, edi
lea eax, [ebp - 0x87]
push ecx
push eax
mov ecx, edx
call fcn.00405360
lea eax, [ebp - 0xa0]
push eax
call fcn.00430ee0
add esp, 0x1c
cmp dword [eax + 0x14], 0xf
jbe 0x439cdf
mov eax, dword [eax]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x8c]
cmp ecx, 0xf
jbe 0x439d22
mov edx, dword [ebp - 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x439d18
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43a6fc
push ecx
push edx
call fcn.00440c00
add esp, 8
test esi, esi
je 0x43a6de
mov ecx, dword [ebp - 0x24]
mov eax, esi
sub ecx, esi
cmp ecx, 0x1000
jb 0x439d4d
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43a701
push ecx
push esi
call fcn.00440c00
add esp, 8
jmp 0x43a6de
mov ecx, 0x48540c
mov dword [ebp - 0x90], 0
xorps xmm0, xmm0
mov dword [ebp - 0x8c], 0
movups xmmword [ebp - 0xa0], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439d82
sub ecx, edx
push ecx
push 0x48540c
lea ecx, [ebp - 0xa0]
call fcn.00405360
mov ecx, 0x48543c
mov byte [ebp - 4], 6
xorps xmm0, xmm0
mov dword [ebp - 0x78], 0
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x74], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439dc0
sub ecx, edx
push ecx
push 0x48543c
lea ecx, [ebp - 0x88]
call fcn.00405360
mov ecx, 0x485424
mov byte [ebp - 4], 7
xorps xmm0, xmm0
mov dword [ebp - 0xc0], 0
movups xmmword [ebp - 0xd0], xmm0
mov dword [ebp - 0xbc], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439e04
sub ecx, edx
push ecx
push 0x485424
lea ecx, [ebp - 0xd0]
call fcn.00405360
mov ecx, 0x4853b0
mov byte [ebp - 4], 8
xorps xmm0, xmm0
mov dword [ebp - 0xa8], 0
movups xmmword [ebp - 0xb8], xmm0
mov dword [ebp - 0xa4], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x439e48
sub ecx, edx
push ecx
push 0x4853b0
lea ecx, [ebp - 0xb8]
call fcn.00405360
mov byte [ebp - 4], 9
lea eax, [ebp - 0xb8]
cmp dword [ebp - 0xa4], 0xf
lea ecx, [ebp - 0x3c]
cmova eax, dword [ebp - 0xb8]
push eax
call fcn.00402930
cmp dword [ebp - 0xbc], 0xf
lea eax, [ebp - 0xd0]
lea ecx, [ebp - 0x3c]
cmova eax, dword [ebp - 0xd0]
push eax
call fcn.00402930
cmp dword [ebp - 0x74], 0xf
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x3c]
cmova eax, dword [ebp - 0x88]
push eax
call fcn.00402930
cmp dword [ebp - 0x8c], 0xf
lea eax, [ebp - 0xa0]
lea ecx, [ebp - 0x3c]
cmova eax, dword [ebp - 0xa0]
push eax
call fcn.00402930
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0xa4]
cmp ecx, 0xf
jbe 0x439f15
mov edx, dword [ebp - 0xb8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x439f0b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43a701
push ecx
push edx
call fcn.00440c00
add esp, 8
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0xf
jbe 0x439f53
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x439f49
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43a701
push ecx
push edx
call fcn.00440c00
add esp, 8
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x74]
cmp ecx, 0xf
jbe 0x439f8e
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x439f84
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43a701
push ecx
push edx
call fcn.00440c00
add esp, 8
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x8c]
cmp ecx, 0xf
jbe 0x439fcc
mov edx, dword [ebp - 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x439fc2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43a701
push ecx
push edx
call fcn.00440c00
add esp, 8
push ecx
call fcn.00404140
lea eax, [ebp - 0x3c]
push eax
call fcn.00404010
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x43a016
mov edx, dword [ebp - 0x24]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x43a00c
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43a701
push edx
push ecx
call fcn.00440c00
add esp, 8
mov ecx, dword [0x48536c]
mov dword [ebp - 0x58], ecx
mov eax, dword [ecx + 0x1a68]
mov byte [eax + 0x7c], 1
mov eax, dword [ecx + 0x1a68]
movss xmm0, dword [eax + 0xc]
subss xmm0, dword [eax + 0x50]
movss xmm2, dword [eax + 0x10]
subss xmm2, dword [eax + 0x54]
addss xmm0, dword [0x475b64]
addss xmm2, dword [0x475b08]
movss dword [eax + 0xc8], xmm0
movss dword [eax + 0xcc], xmm2
movss xmm1, dword [eax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xe4]
maxss xmm0, xmm2
movss dword [eax + 0xe0], xmm1
movss dword [eax + 0xe4], xmm0
mov eax, dword [ecx + 0x1a68]
lea esi, [eax + 0x1bc]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x1a8], 0x42e00000
mov edi, dword [esi + 4]
mov ecx, dword [esi]
cmp ecx, edi
jne 0x43a0d2
inc ecx
test edi, edi
je 0x43a0bd
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x43a0c2
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.00417550
mov eax, dword [ebp - 0x1c]
mov edx, dword [esi]
mov ecx, dword [esi + 8]
mov eax, dword [eax + 0x1a8]
movaps xmm0, xmmword [0x475dd0]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x58]
inc dword [esi]
and dword [eax + 0x1b50], 0xfffffffe
xor ecx, ecx
movups xmmword [ebp - 0x50], xmm0
mov word [ebp - 0x40], 0x53
nop
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x10
jb 0x43a100
lea eax, [ebp - 0x4f]
mov byte [ebp - 0x3f], 0
push eax
call fcn.004284e0
mov edi, dword [0x48536c]
add esp, 4
mov eax, dword [edi + 0x1a68]
mov byte [eax + 0x7c], 1
mov ecx, dword [edi + 0x1a68]
mov edx, dword [ecx + 0x1bc]
sub edx, 1
mov dword [ecx + 0x1bc], edx
jne 0x43a14e
movss xmm0, dword [ecx + 0x26c]
jmp 0x43a15a
mov eax, dword [ecx + 0x1c4]
movss xmm0, dword [eax + edx*4 - 4]
movss dword [ecx + 0x1a8], xmm0
mov eax, dword [edi + 0x1a68]
mov byte [eax + 0x7c], 1
mov eax, dword [edi + 0x1a68]
movss xmm0, dword [eax + 0xc]
subss xmm0, dword [eax + 0x50]
movss xmm2, dword [eax + 0x10]
subss xmm2, dword [eax + 0x54]
addss xmm0, dword [0x475af8]
addss xmm2, dword [0x475b50]
movss dword [eax + 0xc8], xmm0
movss dword [eax + 0xcc], xmm2
movss xmm1, dword [eax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xe4]
maxss xmm0, xmm2
movss dword [eax + 0xe0], xmm1
movss dword [eax + 0xe4], xmm0
mov eax, dword [edi + 0x1a68]
lea esi, [eax + 0x1bc]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x1a8], 0x42a80000
mov eax, dword [esi + 4]
mov ecx, dword [esi]
cmp ecx, eax
jne 0x43a211
inc ecx
test eax, eax
je 0x43a1ff
cdq
sub eax, edx
sar eax, 1
add eax, dword [esi + 4]
jmp 0x43a204
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.00417550
mov edx, dword [esi]
mov ecx, dword [esi + 8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x1a8]
mov dword [ecx + edx*4], eax
mov cl, 0x5d
inc dword [esi]
and dword [edi + 0x1b50], 0xfffffffe
xor eax, eax
mov dword [ebp - 0x4c], 0xe1c0d5d
mov dword [ebp - 0x48], 0xf120a0e
mov dword [ebp - 0x44], 0x677d6f19
mov word [ebp - 0x40], 0x7d
nop word [eax + eax]
xor byte [ebp + eax - 0x4b], cl
inc eax
cmp eax, 0xc
jae 0x43a25f
mov cl, byte [ebp - 0x4c]
jmp 0x43a250
lea eax, [ebp - 0x4b]
mov byte [ebp - 0x3f], 0
push eax
call fcn.004284e0
mov edi, dword [0x48536c]
add esp, 4
mov eax, dword [edi + 0x1a68]
mov byte [eax + 0x7c], 1
mov ecx, dword [edi + 0x1a68]
mov edx, dword [ecx + 0x1bc]
sub edx, 1
mov dword [ecx + 0x1bc], edx
jne 0x43a2a0
movss xmm0, dword [ecx + 0x26c]
jmp 0x43a2ac
mov eax, dword [ecx + 0x1c4]
movss xmm0, dword [eax + edx*4 - 4]
movss dword [ecx + 0x1a8], xmm0
mov eax, dword [edi + 0x1a68]
mov byte [eax + 0x7c], 1
mov eax, dword [edi + 0x1a68]
movss xmm0, dword [eax + 0xc]
subss xmm0, dword [eax + 0x50]
movss xmm2, dword [eax + 0x10]
subss xmm2, dword [eax + 0x54]
addss xmm0, dword [0x475b40]
addss xmm2, dword [0x475b4c]
movss dword [eax + 0xc8], xmm0
movss dword [eax + 0xcc], xmm2
movss xmm1, dword [eax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xe4]
maxss xmm0, xmm2
movss dword [eax + 0xe0], xmm1
movss dword [eax + 0xe4], xmm0
mov eax, dword [edi + 0x1a68]
lea esi, [eax + 0x1bc]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x1a8], 0x432e0000
mov eax, dword [esi + 4]
mov ecx, dword [esi]
cmp ecx, eax
jne 0x43a363
inc ecx
test eax, eax
je 0x43a351
cdq
sub eax, edx
sar eax, 1
add eax, dword [esi + 4]
jmp 0x43a356
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.00417550
mov edx, dword [esi]
mov ecx, dword [esi + 8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x1a8]
mov dword [ecx + edx*4], eax
mov cl, 0x59
inc dword [esi]
and dword [edi + 0x1b50], 0xfffffffe
xor eax, eax
mov dword [ebp - 0x4c], 0x297a7a59
mov dword [ebp - 0x48], 0x2e2a2a38
mov dword [ebp - 0x44], 0x6b3d2b36
mov byte [ebp - 0x40], 0
nop word [eax + eax]
xor byte [ebp + eax - 0x4b], cl
inc eax
cmp eax, 0xb
jae 0x43a3af
mov cl, byte [ebp - 0x4c]
jmp 0x43a3a0
push 0
push 0
push 0
lea eax, [ebp - 0x5c]
mov byte [ebp - 0x40], 0
push eax
push 0x15
push 0x48543c
xor edx, edx
mov dword [ebp - 0x5c], 0
lea ecx, [ebp - 0x4b]
mov dword [ebp - 0x58], 0
call fcn.0042be00
mov edi, dword [0x48536c]
add esp, 0x18
mov eax, dword [edi + 0x1a68]
mov byte [eax + 0x7c], 1
mov ecx, dword [edi + 0x1a68]
mov edx, dword [ecx + 0x1bc]
sub edx, 1
mov dword [ecx + 0x1bc], edx
jne 0x43a410
movss xmm0, dword [ecx + 0x26c]
jmp 0x43a41c
mov eax, dword [ecx + 0x1c4]
movss xmm0, dword [eax + edx*4 - 4]
movss dword [ecx + 0x1a8], xmm0
mov eax, dword [edi + 0x1a68]
mov byte [eax + 0x7c], 1
mov eax, dword [edi + 0x1a68]
movss xmm0, dword [eax + 0xc]
subss xmm0, dword [eax + 0x50]
movss xmm2, dword [eax + 0x10]
subss xmm2, dword [eax + 0x54]
addss xmm0, dword [0x475af8]
addss xmm2, dword [0x475b60]
movss dword [eax + 0xc8], xmm0
movss dword [eax + 0xcc], xmm2
movss xmm1, dword [eax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xe4]
maxss xmm0, xmm2
movss dword [eax + 0xe0], xmm1
movss dword [eax + 0xe4], xmm0
mov eax, dword [edi + 0x1a68]
lea esi, [eax + 0x1bc]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x1a8], 0x429a0000
mov eax, dword [esi + 4]
mov ecx, dword [esi]
cmp ecx, eax
jne 0x43a4d3
inc ecx
test eax, eax
je 0x43a4c1
cdq
sub eax, edx
sar eax, 1
add eax, dword [esi + 4]
jmp 0x43a4c6
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.00417550
mov edx, dword [esi]
mov ecx, dword [esi + 8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x1a8]
mov dword [ecx + edx*4], eax
mov cl, 6
inc dword [esi]
and dword [edi + 0x1b50], 0xfffffffe
xor eax, eax
mov dword [ebp - 0x4c], 0x40435406
mov dword [ebp - 0x48], 0x48435443
mov dword [ebp - 0x44], 0x3c264345
mov byte [ebp - 0x40], 0
nop word [eax + eax]
xor byte [ebp + eax - 0x4b], cl
inc eax
cmp eax, 0xb
jae 0x43a51f
mov cl, byte [ebp - 0x4c]
jmp 0x43a510
lea eax, [ebp - 0x4b]
mov byte [ebp - 0x40], 0
push eax
call fcn.004284e0
mov esi, dword [0x48536c]
add esp, 4
mov eax, dword [esi + 0x1a68]
mov byte [eax + 0x7c], 1
mov ecx, dword [esi + 0x1a68]
mov edx, dword [ecx + 0x1bc]
sub edx, 1
mov dword [ecx + 0x1bc], edx
jne 0x43a560
movss xmm0, dword [ecx + 0x26c]
jmp 0x43a56c
mov eax, dword [ecx + 0x1c4]
movss xmm0, dword [eax + edx*4 - 4]
movss dword [ecx + 0x1a8], xmm0
mov eax, dword [esi + 0x1a68]
mov byte [eax + 0x7c], 1
mov eax, dword [esi + 0x1a68]
movss xmm0, dword [eax + 0xc]
subss xmm0, dword [eax + 0x50]
movss xmm2, dword [eax + 0x10]
subss xmm2, dword [eax + 0x54]
addss xmm0, dword [0x475b40]
addss xmm2, dword [0x475b5c]
movss dword [eax + 0xc8], xmm0
movss dword [eax + 0xcc], xmm2
movss xmm1, dword [eax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xe4]
maxss xmm0, xmm2
movss dword [eax + 0xe0], xmm1
movss dword [eax + 0xe4], xmm0
mov eax, dword [esi + 0x1a68]
lea edi, [eax + 0x1bc]
mov dword [ebp - 0x1c], eax
mov dword [eax + 0x1a8], 0x432f0000
mov eax, dword [edi + 4]
mov ecx, dword [edi]
cmp ecx, eax
jne 0x43a623
inc ecx
test eax, eax
je 0x43a611
cdq
sub eax, edx
sar eax, 1
add eax, dword [edi + 4]
jmp 0x43a616
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, edi
call fcn.00417550
mov edx, dword [edi]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 8]
push 0
push 0
mov eax, dword [eax + 0x1a8]
mov dword [ecx + edx*4], eax
mov dh, 0x5f
inc dword [edi]
mov al, 0x7c
and dword [esi + 0x1b50], 0xfffffffe
mov cl, al
mov ah, 0x3a
mov byte [ebp - 0x1c], dh
xor al, dh
mov byte [ebp - 0x16], 0
xor ah, dh
mov byte [ebp - 0x1b], al
mov byte [ebp - 0x18], ah
mov dl, 0x2d
push 0
lea eax, [ebp - 0x6c]
mov byte [ebp - 0x16], 0
mov ch, 0x39
mov dword [ebp - 0x6c], 0
xor cl, dh
mov dword [ebp - 0x68], 0
xor ch, dh
mov byte [ebp - 0x1a], cl
push eax
xor dl, dh
mov byte [ebp - 0x17], ch
mov byte [ebp - 0x19], dl
lea ecx, [ebp - 0x1b]
push 0x15
push 0x48540c
xor edx, edx
call fcn.0042be00
mov ecx, dword [0x48536c]
add esp, 0x18
mov eax, dword [ecx + 0x1a68]
mov byte [eax + 0x7c], 1
mov ecx, dword [ecx + 0x1a68]
mov edx, dword [ecx + 0x1bc]
sub edx, 1
mov dword [ecx + 0x1bc], edx
jne 0x43a6ca
movss xmm0, dword [ecx + 0x26c]
jmp 0x43a6d6
mov eax, dword [ecx + 0x1c4]
movss xmm0, dword [eax + edx*4 - 4]
movss dword [ecx + 0x1a8], xmm0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0044096c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004498c1
call fcn.004498c1
int3