Function at 0x432b99
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x564
push esi
push edi
push 6
mov dword [ebp - 0x218], ecx
pop ecx
push 0x1d
pop eax
mov dword [ebp - 0x21c], edx
mov dword [ebp - 0x208], 0x8f5dc6de
mov dword [ebp - 0x204], 0xe79e5dd1
mov dword [ebp - 0x200], 0x6ad945b2
mov dword [ebp - 0x1fc], 0x47a11839
mov dword [ebp - 0x1f8], 0xdcfd11bc
mov dword [ebp - 0x1f4], 0x7eb1bd3f
mov dword [ebp - 0x1f0], 0x7a4dddd8
mov dword [ebp - 0x1ec], 0xeace4f45
mov dword [ebp - 0x1e8], 0x150b27ba
mov dword [ebp - 0x1e4], 0xa989498d
mov dword [ebp - 0x1e0], 0x394c781c
mov dword [ebp - 0x1dc], 0xe24057bc
mov dword [ebp - 0x1d8], 0x1214b418
mov dword [ebp - 0x1d4], 0x244dd827
mov dword [ebp - 0x1d0], 0xc72fbe62
mov dword [ebp - 0x1cc], 0xff9d4f1c
mov dword [ebp - 0x1c8], 0x9eb62650
mov dword [ebp - 0x1c4], 0x1011b5e1
mov dword [ebp - 0x1c0], 0xb960444
mov dword [ebp - 0x1bc], 0xa512f114
mov dword [ebp - 0x1b8], 0xc4fc31c
mov dword [ebp - 0x1b4], 0x8914e24
mov dword [ebp - 0x1b0], 0x1f5a83ad
mov dword [ebp - 0x1ac], 0xf0bc2601
mov dword [ebp - 0x1a8], 0xb059d31
mov dword [ebp - 0x1a4], 0x13ea28ca
mov dword [ebp - 0x1a0], 0xf3355ba6
mov dword [ebp - 0x19c], 0x9be3db7e
mov dword [ebp - 0x198], 0xfb9a1082
mov dword [ebp - 0x194], 0xd3a6b833
mov dword [ebp - 0x190], 0xe17105a2
mov dword [ebp - 0x18c], 0x158dfc47
mov dword [ebp - 0x188], 0xf2f6ec84
mov word [ebp - 0x184], 0x5810
mov dword [ebp - 0x214], ecx
mov byte [ebp - 0x182], cl
mov dword [ebp - 0x181], 0xb541b6dc
mov dword [ebp - 0x17d], 0x337be0c9
mov dword [ebp - 0x179], 0xaaadf3c8
mov dword [ebp - 0x175], 0xde33f09a
mov dword [ebp - 0x171], 0x3236c449
mov dword [ebp - 0x16d], 0x37cf2020
mov dword [ebp - 0x169], 0x6589dad6
mov dword [ebp - 0x165], 0x463fada0
mov dword [ebp - 0x161], 0x8b53ddf
mov dword [ebp - 0x15d], 0xbf3a6776
mov dword [ebp - 0x159], 0xd3c76274
mov dword [ebp - 0x155], 0xfa730c69
mov dword [ebp - 0x151], 0x7230a142
mov dword [ebp - 0x14d], 0x527c5605
mov dword [ebp - 0x149], 0xc298d208
mov dword [ebp - 0x145], 0x60e7410d
mov dword [ebp - 0x141], 0x3ad8e27e
mov dword [ebp - 0x13d], 0xb3be831e
mov dword [ebp - 0x139], 0xc11c3e71
mov dword [ebp - 0x135], 0xf4d7d472
mov dword [ebp - 0x131], 0x56c504d7
mov dword [ebp - 0x12d], 0xb93d8ba8
mov word [ebp - 0x129], 0xff89
mov byte [ebp - 0x127], 0x14
mov dword [ebp - 0x210], eax
mov byte [ebp - 0x126], al
mov dword [ebp - 0x125], 0xf5671904
mov dword [ebp - 0x121], 0x8430c6c6
mov dword [ebp - 0x11d], 0x8e202fa
mov dword [ebp - 0x119], 0x86a735b4
mov dword [ebp - 0x115], 0xd9a811f2
mov dword [ebp - 0x111], 0xf7dfdb3e
mov dword [ebp - 0x10d], 0x9e2a8fa7
mov dword [ebp - 0x109], 0x11c4645f
mov dword [ebp - 0x105], 0xa026ad49
mov byte [ebp - 0x101], al
mov dword [ebp - 0x100], 0xe63ecaa9
mov esi, 0x402afc
mov byte [ebp - 0x8d], cl
push 0x17
lea edi, [ebp - 0x22c]
mov dword [ebp - 0xfc], 0xbd0fc82d
pop eax
movsd dword es:[edi], dword [esi]
push 9
mov dword [ebp - 0x28], eax
mov byte [ebp - 0xce], al
movsd dword es:[edi], dword [esi]
pop eax
mov byte [ebp - 0x8f], al
push 0xa
movsw word es:[edi], word [esi]
pop eax
mov dword [ebp - 0x20c], eax
mov byte [ebp - 0x7e], al
xor eax, eax
movsb byte es:[edi], byte [esi]
mov ecx, eax
mov esi, dword [0x44d918]
mov dword [ebp - 0xf8], 0xbd8503e5
mov dword [ebp - 0xf4], 0xf9b7b1b3
mov dword [ebp - 0xf0], 0xe133b8f6
mov dword [ebp - 0xec], 0xafc2a415
mov dword [ebp - 0xe8], 0x52ae68b4
mov dword [ebp - 0xe4], 0x7e7b2423
mov dword [ebp - 0xe0], 0x8ed55753
mov dword [ebp - 0xdc], 0x39991472
mov dword [ebp - 0xd8], 0xd386bca7
mov dword [ebp - 0xd4], 0x89b60174
mov word [ebp - 0xd0], 0x71da
mov dword [ebp - 0xcd], 0xef60c13f
mov dword [ebp - 0xc9], 0x998b5a38
mov dword [ebp - 0xc5], 0x495729d4
mov dword [ebp - 0xc1], 0x6ad5ddea
mov dword [ebp - 0xbd], 0x49b683c7
mov dword [ebp - 0xb9], 0x71b66d0f
mov dword [ebp - 0xb5], 0xfbbf252e
mov dword [ebp - 0xb1], 0x30e18870
mov dword [ebp - 0xad], 0x91beb07e
mov dword [ebp - 0xa9], 0xb54320b4
mov dword [ebp - 0xa5], 0xcf704b4b
mov dword [ebp - 0xa1], 0x593d5b0c
mov dword [ebp - 0x9d], 0x89e9cda7
mov dword [ebp - 0x99], 0x95d25d3d
mov dword [ebp - 0x95], 0x66835203
mov word [ebp - 0x91], 0x8d5
mov byte [ebp - 0x8e], 0x59
mov dword [ebp - 0x8c], 0x1e952289
mov dword [ebp - 0x88], 0x2b0220d7
mov dword [ebp - 0x84], 0x2ec4be21
mov word [ebp - 0x80], 0x927c
mov dword [ebp - 0x7d], 0xf0465e9
mov dword [ebp - 0x79], 0x99893671
mov dword [ebp - 0x75], 0xa1f20c91
mov byte [ebp - 0x71], 0xf4
and esi, 0xd75310ea
mov byte [ebp + ecx - 0x32c], cl
inc ecx
cmp ecx, 0x100
jb 0x433012
mov dword [ebp - 0xc], esi
mov edi, eax
mov esi, eax
xor edx, edx
mov cl, byte [ebp + edi - 0x32c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x20c]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x22c]
add eax, esi
add ecx, eax
movzx esi, cl
mov al, byte [ebp + esi - 0x32c]
mov byte [ebp + edi - 0x32c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + esi - 0x32c], al
cmp edi, 0x100
jb 0x43302f
xor eax, eax
xor dword [ebp - 0xc], 0x2b99c087
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + edi - 0x32c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x32c]
mov byte [ebp + edi - 0x32c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x32c], cl
movzx eax, byte [ebp + edi - 0x32c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x32c]
xor al, byte [ebp + esi - 0x208]
mov byte [ebp + esi - 0x564], al
inc esi
cmp esi, 0x198
jb 0x433086
push 0xa
pop ecx
mov byte [ebp - 0x4f], cl
lea edi, [ebp - 0x24]
mov byte [ebp - 0x4a], cl
xor eax, eax
push 6
pop ecx
mov esi, 0x402b08
mov byte [ebp - 0x3cc], al
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x70], 0xde2ad15
mov ecx, eax
mov dword [ebp - 0x6c], 0x447e5044
mov dword [ebp - 0x68], 0xd8dd36aa
mov dword [ebp - 0x64], 0xd7514215
mov dword [ebp - 0x60], 0x874b989
mov dword [ebp - 0x5c], 0x4ce7cd3d
mov dword [ebp - 0x58], 0x3a037ebd
mov dword [ebp - 0x54], 0x48a6b9bd
mov byte [ebp - 0x50], 0x9c
mov dword [ebp - 0x4e], 0x54c2ab9f
mov dword [ebp - 0x49], 0x5fb8d029
mov dword [ebp - 0x45], 0xcef5a990
mov dword [ebp - 0x41], 0x4b21e60c
mov dword [ebp - 0x3d], 0xae754804
mov dword [ebp - 0x39], 0xca1d831
mov dword [ebp - 0x35], 0x2607f0a2
mov byte [ebp - 0x31], 0x26
mov dword [ebp - 8], eax
mov byte [ebp + ecx - 0x32c], cl
inc ecx
cmp ecx, 0x100
jb 0x433178
mov esi, dword [ebp - 0xc]
mov edi, eax
xor edx, edx
mov cl, byte [ebp + edi - 0x32c]
mov eax, edi
mov byte [ebp - 1], cl
div dword [ebp - 0x28]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x24]
add eax, dword [ebp - 8]
add ecx, eax
mov al, byte [str.no_space_on_device]
movzx edx, cl
mov ecx, str.no_space_on_device
mov dword [ebp - 8], edx
jmp 0x4331c6
sub al, 0x30
cmp al, 9
ja 0x4331cc
inc ecx
mov al, byte [ecx]
test al, al
jne 0x4331bd
jmp 0x4331d2
or esi, 0x86a18273
mov al, byte [ebp + edx - 0x32c]
sub esi, 0x33126c95
mov byte [ebp + edi - 0x32c], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + edx - 0x32c], al
cmp edi, 0x100
jb 0x43318d
xor eax, eax
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
push 0x40
mov cl, byte [ebp + edi - 0x32c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x32c]
mov byte [ebp + edi - 0x32c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x32c], cl
movzx eax, byte [ebp + edi - 0x32c]
add eax, edx
movzx eax, al
pop ecx
mov al, byte [ebp + eax - 0x32c]
xor al, byte [ebp + esi - 0x70]
mov byte [ebp + esi - 0x3c8], al
inc esi
cmp esi, ecx
jb 0x433205
mov dword [ebp - 0x1c], 0x3c
lea edi, [ebp - 0x348]
mov dword [ebp - 0x18], 0x64
mov esi, 0x402b08
mov dword [ebp - 0x14], 0x13
xor edx, edx
mov dword [ebp - 0x10], 0x735
movups xmm1, xmmword [ebp - 0x1c]
push 6
mov byte [ebp - 0x1d], cl
movaps xmm0, xmm1
mov byte [ebp - 0x388], dl
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [ebp - 0x24], 0x7ea78835
movups xmm0, xmm1
mov word [ebp - 0x20], 0x552
psrldq xmm0, 4
paddd xmm1, xmm0
mov byte [ebp - 0x1e], 0xe
movd eax, xmm1
mov dword [ebp - 0x1c], 0xc59a0e9f
mov dword [ebp - 0x18], 0xd77d4216
add eax, 0x18
mov dword [ebp - 0x14], 0x1b4899b4
mov dword [ebp - 0x20c], eax
pop eax
mov ecx, eax
mov dword [ebp - 0x10], 0x60ece803
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0xc]
mov ecx, 0x402d70
push 0x61
add esi, 0x3f2b7a38
pop edi
lea eax, [edi - 0x30]
push 9
pop edi
cmp ax, di
ja 0x433319
add ecx, 2
movzx eax, word [ecx]
mov edi, eax
test ax, ax
jne 0x4332ff
jmp 0x433357
cmp byte [str.mni_IN], dl
je 0x433340
inc edx
cmp edx, 0x15fe
je 0x433335
cmp byte [edx + str.mni_IN], 0
jne 0x433321
jmp 0x433340
call fcn.0042c837
add esi, 0x444ee54e
call fcn.0042c837
xor esi, 0xf7fb597f
and esi, 0xac47e7f6
add esi, 0x1c13346b
add esi, 0xf399e54
mov dword [0x44d918], esi
call fcn.0042c70c
xor eax, eax
mov edi, eax
mov ecx, eax
mov byte [ebp + ecx - 0x32c], cl
inc ecx
cmp ecx, 0x100
jb 0x43336e
mov esi, eax
xor edx, edx
mov cl, byte [ebp + esi - 0x32c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x28]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x348]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x32c]
mov byte [ebp + esi - 0x32c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x32c], al
cmp esi, 0x100
jb 0x433380
xor eax, eax
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
mov eax, dword [0x44d918]
sub eax, 0x27fefaa0
mov dword [ebp - 0x28], eax
mov dword [0x44d918], eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + edi - 0x32c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x32c]
mov byte [ebp + edi - 0x32c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x32c], cl
movzx eax, byte [ebp + edi - 0x32c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x32c]
xor al, byte [ebp + esi - 0x24]
mov byte [ebp + esi - 0x368], al
inc esi
cmp esi, 0x18
jb 0x4333df
push 7
pop ecx
mov esi, 0x402b20
mov dword [ebp - 0x30], 0xf7d51687
lea edi, [ebp - 0x34c]
mov byte [ebp - 0x2c], 0xb
rep movsd dword es:[edi], dword [esi]
xor eax, eax
mov edx, 0x402d70
mov byte [ebp - 0x350], al
mov ecx, eax
movsw word es:[edi], word [esi]
mov edi, eax
inc ecx
lea edx, [edx + 2]
cmp ecx, 0x1e1f
je 0x43348d
cmp word [edx], ax
jne 0x433465
cmp ecx, 0x1e3a
jle 0x43349e
call fcn.0042c837
mov eax, dword [ebp - 0x28]
add eax, 0xbda0ab6a
jmp 0x4334a6
call fcn.0042c70c
mov eax, dword [0x44d918]
xor eax, 0x4bde0005
jmp 0x4334a1
mov eax, dword [ebp - 0x28]
or eax, 0x4a76d395
add eax, 0xeedd1940
mov dword [0x44d918], eax
call fcn.0042c70c
xor eax, eax
mov ecx, eax
mov byte [ebp + ecx - 0x32c], cl
inc ecx
cmp ecx, 0x100
jb 0x4334b9
mov esi, eax
xor edx, edx
mov cl, byte [ebp + esi - 0x32c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x210]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x34c]
mov edx, 0x15a3
add eax, edi
add ecx, eax
movzx edi, cl
mov ecx, str.no_space_on_device
mov al, byte [ebp + edi - 0x32c]
mov byte [ebp + esi - 0x32c], al
movzx eax, byte [str.no_space_on_device]
jmp 0x433524
add edx, eax
inc ecx
cmp edx, 0x1ffd
ja 0x433663
movzx eax, byte [ecx]
test eax, eax
jne 0x433512
mov eax, dword [0x44d918]
add eax, 0x99a62a91
imul eax, eax, 0xcdfeda16
mov dword [0x44d918], eax
call fcn.0042c70c
mov al, byte [ebp - 1]
inc esi
mov byte [ebp + edi - 0x32c], al
cmp esi, 0x100
jb 0x4334cb
mov ecx, dword [0x44d918]
xor edx, edx
mov dword [ebp - 8], edx
mov edi, edx
mov esi, edx
lea eax, [edi + 1]
movzx edi, al
mov al, byte [ebp + edi - 0x32c]
mov byte [ebp - 1], al
mov dl, al
movzx eax, al
add eax, dword [ebp - 8]
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x32c]
mov byte [ebp + edi - 0x32c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x32c], dl
xor edx, edx
mov eax, edx
cmp byte [str.no_space_on_device], al
je 0x4335bc
inc eax
cmp eax, 0x25
jg 0x433672
cmp byte [eax + str.no_space_on_device], dl
jne 0x4335aa
imul eax, ecx, 0x10ae00c8
push str.no_space_on_device
mov dword [0x44d918], eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [0x44d918]
xor edx, edx
movzx eax, byte [ebp - 1]
xor ecx, 0x5d6ed007
mov dword [ebp - 0xc], ecx
movzx ecx, byte [ebp + edi - 0x32c]
add ecx, eax
movzx eax, cl
mov ecx, dword [ebp - 0xc]
mov al, byte [ebp + eax - 0x32c]
xor al, byte [ebp + esi - 0x30]
mov byte [ebp + esi - 0x228], al
inc esi
cmp esi, 5
jb 0x433568
mov esi, 0x401dfc
mov byte [ebp - 0x223], dl
lea edi, [ebp - 0x30]
mov dword [ebp - 0x18], 0x5adaeab5
push 0xa
pop eax
movsd dword es:[edi], dword [esi]
mov ecx, 0x402c74
push 0x66
mov word [ebp - 0x14], 0xb371
mov byte [ebp - 0x12], 0x26
movsw word es:[edi], word [esi]
mov byte [ebp - 0x11], al
mov dword [ebp - 0x10], 0xb98f0842
movsb byte es:[edi], byte [esi]
mov edi, edx
pop edx
sub dl, 0x30
cmp dl, 9
ja 0x43368e
inc ecx
mov al, byte [ecx]
mov dl, al
test al, al
jne 0x43364d
mov eax, dword [ebp - 0xc]
jmp 0x433696
imul eax, dword [0x44d918], 0x18c4423c
jmp 0x43352d
and ecx, 0x57aa93cd
cmp eax, 0x2d4
jle 0x4335bc
or ecx, 0x75009772
jmp 0x4335da
mov eax, dword [ebp - 0xc]
add eax, 0x67eda558
add eax, 0x6b7e9df4
mov dword [0x44d918], eax
call fcn.0042c70c
xor esi, esi
mov dword [ebp - 0x28], esi
push 0x61
mov ecx, 0x402d70
pop edx
lea eax, [edx - 0x30]
push 9
pop edx
cmp ax, dx
ja 0x4336d1
add ecx, 2
movzx eax, word [ecx]
mov edx, eax
test ax, ax
jne 0x4336b2
mov eax, dword [0x44d918]
jmp 0x4336db
mov eax, dword [0x44d918]
add eax, 0x15122e35
sub eax, 0x3cfd4cdd
mov dword [0x44d918], eax
call fcn.0042c70c
mov eax, dword [ebp - 0x28]
mov byte [ebp + eax - 0x32c], al
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x100
jb 0x4336aa
xor edx, edx
mov cl, byte [ebp + esi - 0x32c]
mov eax, esi
mov byte [ebp - 1], cl
div dword [ebp - 0x214]
movzx ecx, cl
movzx eax, byte [ebp + edx - 0x30]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x32c]
mov byte [ebp + esi - 0x32c], al
inc esi
mov al, byte [ebp - 1]
mov byte [ebp + edi - 0x32c], al
cmp esi, 0x100
jb 0x4336ff
xor eax, eax
mov dword [ebp - 8], eax
mov edi, eax
mov esi, eax
lea eax, [edi + 1]
movzx edi, al
mov eax, dword [ebp - 8]
mov cl, byte [ebp + edi - 0x32c]
movzx edx, cl
add eax, edx
movzx eax, al
mov dword [ebp - 8], eax
mov al, byte [ebp + eax - 0x32c]
mov byte [ebp + edi - 0x32c], al
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0x32c], cl
movzx eax, byte [ebp + edi - 0x32c]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x32c]
xor al, byte [ebp + esi - 0x18]
movzx eax, al
mov word [ebp + esi*2 - 0x384], ax
inc esi
cmp esi, 0xc
jb 0x43374c
xor eax, eax
mov dword [ebp - 0x20], 0x3c
xor ecx, ecx
mov word [ebp - 0x36c], ax
mov edx, ecx
mov dword [ebp - 0x1c], 0x23
mov dword [ebp - 0x18], 0x63
mov dword [ebp - 0x14], 0x5b
mov dword [ebp - 0x10], 0xfffffee3
sub edx, dword [ebp + eax*4 - 0x20]
inc eax
cmp eax, 5
jl 0x4337d8
mov al, byte [str.mni_IN]
mov dword [ebp - 0x210], edx
mov edx, str.mni_IN
jmp 0x433801
sub al, 0x30
cmp al, 9
ja 0x433a55
inc edx
mov al, byte [edx]
test al, al
jne 0x4337f4
mov eax, dword [0x44d918]
mov dword [ebp - 0x1c], 0x50
xorps xmm1, xmm1
mov dword [ebp - 0x18], 5
mov edx, ecx
mov dword [ebp - 0x14], 0x56
mov dword [ebp - 0x10], 0x5f55
movups xmm0, xmmword [ebp - 0x1c]
push 0xa
imul eax, eax, 0x63aa68ea
psubd xmm1, xmm0
mov dword [ebp - 0x1c], 0x45
movaps xmm0, xmm1
mov dword [ebp - 0x18], 0x26
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [ebp - 0x14], 0xc
movups xmm0, xmm1
mov dword [0x44d918], eax
psrldq xmm0, 4
paddd xmm1, xmm0
mov dword [ebp - 0x10], 0xffffff7f
movd eax, xmm1
add eax, 0x6800
mov dword [ebp - 0x214], eax
pop eax
mov dword [ebp - 0x20], eax
mov eax, ecx
sub edx, dword [ebp + eax*4 - 0x20]
inc eax
cmp eax, 5
jl 0x433889
push 0x40
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x30], 0x2e
mov dword [ebp - 0x2c], 0xffffff92
pop eax
add eax, dword [ebp + ecx*4 - 0x30]
inc ecx
cmp ecx, 2
jl 0x4338a7
mov dword [ebp - 0x1c], 0x5d
mov dword [ebp - 0x18], 0x50
mov dword [ebp - 0x14], 0x48
mov dword [ebp - 0x10], 0xfffffee1
movups xmm1, xmmword [ebp - 0x1c]
mov dword [ebp - 0x220], eax
movaps xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
paddd xmm1, xmm0
movd eax, xmm1
add eax, 0x2a
mov dword [ebp - 0x2c], eax
call fcn.00410e37
lea ecx, [ebp - 0x564]
mov dword [ebp - 8], eax
call fcn.004361ab
lea ecx, [ebp - 0x3c8]
mov edi, eax
call fcn.004361ab
mov ecx, dword [ebp - 0x20c]
mov esi, eax
add ecx, ecx
call fcn.0041e51b
mov edx, eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0xc], edx
push dword [eax + 0x1468]
lea ecx, [eax + 0x1e94]
push dword [ebp + 0xc]
push ecx
lea ecx, [eax + 0x1a84]
push ecx
lea ecx, [eax + 0x1674]
push ecx
mov ecx, dword [ebp - 8]
lea eax, [ebp - 0x384]
push eax
lea eax, [ecx + 0x146c]
push eax
push dword [ecx + 0x1460]
lea eax, [ecx + 0x1050]
push eax
push dword [ecx + 0x1464]
lea eax, [ecx + 0xc40]
push eax
lea eax, [ecx + 0x830]
push eax
lea eax, [ecx + 0x420]
push eax
lea eax, [ecx + 0x10]
push eax
push dword [ecx + 8]
push dword [ecx + 4]
push dword [ecx]
lea ecx, [ebp - 0x228]
push esi
push dword [ebp + 8]
push edi
push edx
call fcn.0041e657
mov edx, eax
lea ecx, [ebp - 0x368]
call fcn.0041e636
call eax
mov ecx, dword [ebp - 0xc]
call fcn.004369fb
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x218]
push eax
call fcn.004362f4
mov eax, dword [ebp - 0x214]
add esp, 0x58
add eax, eax
push eax
push dword [ebp - 0x210]
push dword [ebp - 0xc]
call fcn.004360de
mov ecx, dword [ebp - 0x218]
call fcn.004369c6
mov edx, dword [ebp - 0x21c]
push eax
call fcn.0041c49c
mov ecx, edi
call fcn.004369fb
push eax
push dword [ebp - 0x28]
push edi
call fcn.004360de
mov ecx, esi
call fcn.004369fb
push eax
push dword [ebp - 0x220]
push esi
call fcn.004360de
mov ecx, edi
call fcn.0041e600
mov ecx, esi
call fcn.0041e600
mov esi, dword [ebp - 8]
push 0x22a4
push dword [ebp - 0x2c]
push esi
call fcn.004360de
add esp, 0x34
mov ecx, esi
call fcn.0041e600
mov ecx, dword [ebp - 0xc]
call fcn.0041e600
pop edi
pop esi
leave
ret
mov eax, dword [0x44d918]
xor eax, 0xe1ad8992
jmp 0x43380a