Function at 0x446e60
Capabilities:
Encode data using xor
Get common file path
Read .ini file

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x530506
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1420
push ebx
call fcn.00505c90
push esi
mov esi, ecx
mov dword [ebp - 0x128], esi
push edi
mov dword [ebp - 0x14], 0
mov dword [ebp - 4], 2
lea ecx, [esi + 8]
push 0
mov byte [esi], 0
call fcn.0048e6c0
mov byte [ebp - 4], 1
sub esp, 8
mov dword [ebp - 0x14], 1
mov eax, esp
mov dword [ebp - 0xd3], 0xddc5c5ce
xorps xmm0, xmm0
mov dword [ebp - 0xcf], 0xdad9ddd5
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0xbb], 0
movups xmmword [ebp - 0xcb], xmm0
mov word [ebp - 0xb7], 0
mov byte [ebp - 0xb5], 0
mov dword [eax], 0
mov dword [eax + 4], 0
call fcn.0048ab50
add esp, 8
mov byte [ebp - 4], 3
xor ecx, ecx
lea eax, [ecx - 0x51]
xor byte [ebp + ecx - 0xd3], al
inc ecx
cmp ecx, 8
jb 0x446f24
mov dword [0x565624], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0xd3]
mov byte [ebp - 0xcb], 0
movups xmmword [ebp - 0xb4], xmm0
mov dword [ebp - 0xa4], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xa0], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x446f68
sub ecx, edx
lea eax, [ebp - 0xd3]
push ecx
push eax
lea ecx, [ebp - 0xb4]
call fcn.00402c40
mov dword [ebp - 0x14], 0x40001
mov byte [ebp - 4], 4
lea eax, [ebp - 0xb4]
cmp dword [ebp - 0xa0], 0x10
mov ecx, esi
cmovae eax, dword [ebp - 0xb4]
push eax
call fcn.00490ca0
mov edi, eax
mov dl, byte [edi]
mov cl, byte [ebp - 0xe8]
mov byte [edi], cl
mov ecx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xe0]
mov byte [ebp - 0xe8], dl
mov esi, dword [edi + 0xc]
mov edx, dword [edi + 8]
mov dword [edi + 0xc], ecx
lea ecx, [ebp - 0xe8]
mov dword [edi + 8], eax
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0xdc], esi
call fcn.0048a7b0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xa0]
cmp ecx, 0x10
jb 0x44702a
mov edx, dword [ebp - 0xb4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x447020
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448711
push ecx
push edx
call fcn.00504f31
add esp, 8
push 0x104
lea eax, [ebp - 0x430]
push 0
push eax
call fcn.00506f10
add esp, 0xc
lea eax, [ebp - 0x430]
push eax
push 0
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea ecx, [ebp - 0x430]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x447060
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebx + 0x18]
sub eax, edx
cmp eax, ecx
jb 0x448716
cmp dword [ebx + 0x1c], 0x10
lea eax, [ebx + 8]
push edx
cmovae eax, dword [ebx + 8]
push eax
push ecx
lea eax, [ebp - 0x430]
push eax
push ecx
push dword [ebp - 0x18]
lea ecx, [ebp - 0x198]
call fcn.004946d0
mov dword [ebp - 0x14], 0x60001
mov byte [ebp - 4], 6
xorps xmm0, xmm0
mov dword [ebp - 0xd8], 0xddc3c0f3
xor ecx, ecx
mov dword [ebp - 0xd4], 0xd3d9ddd5
mov dword [ebp - 0xd0], 0xd4d096c4
mov byte [ebp - 0xcc], 0xd2
movups xmmword [ebp - 0xcb], xmm0
mov dword [ebp - 0xbb], 0
mov word [ebp - 0xb7], 0
mov byte [ebp - 0xb5], 0
lea eax, [ecx - 0x51]
xor byte [ebp + ecx - 0xd8], al
inc ecx
cmp ecx, 0xd
jb 0x4470f5
mov dword [0x56557c], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0xd8]
mov byte [ebp - 0xcb], 0
movups xmmword [ebp - 0xb4], xmm0
mov dword [ebp - 0xa4], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xa0], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x447140
sub ecx, edx
lea eax, [ebp - 0xd8]
push ecx
push eax
lea ecx, [ebp - 0xb4]
call fcn.00402c40
mov dword [ebp - 0x14], 0x70001
mov byte [ebp - 4], 7
lea edx, [ebp - 0xb4]
cmp dword [ebp - 0xa0], 0x10
cmovae edx, dword [ebp - 0xb4]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x447180
sub ecx, esi
mov eax, closesocket
mov esi, dword [ebp - 0x188]
sub eax, esi
cmp eax, ecx
jb 0x44871b
cmp dword [ebp - 0x184], 0x10
lea eax, [ebp - 0x198]
push ecx
cmovae eax, dword [ebp - 0x198]
push edx
push esi
push eax
push ecx
push dword [ebp - 0x18]
lea ecx, [ebp - 0x180]
call fcn.004946d0
mov edi, 0x170001
mov dword [ebp - 0x14], edi
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0xa0]
cmp ecx, 0x10
jb 0x44720b
mov edx, dword [ebp - 0xb4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x447201
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448720
push ecx
push edx
call fcn.00504f31
add esp, 8
cmp dword [ebp - 0x16c], 0x10
lea eax, [ebp - 0x180]
cmovae eax, dword [ebp - 0x180]
push eax
push 0x1000
lea eax, [ebp - 0x1430]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionNamesA]
lea esi, [ebp - 0x1430]
mov dword [ebp - 0x9c], esi
nop
xorps xmm0, xmm0
mov dword [ebp - 0x6e], 0xd4dec2ff
mov word [ebp - 0x6a], 0xd8da
xor ecx, ecx
mov byte [ebp - 0x68], 0xd0
movups xmmword [ebp - 0x67], xmm0
mov dword [ebp - 0x57], 0
mov word [ebp - 0x53], 0
mov byte [ebp - 0x51], 0
nop dword [eax + eax]
lea eax, [ecx - 0x51]
xor byte [ebp + ecx - 0x6e], al
inc ecx
cmp ecx, 7
jb 0x447270
mov dword [0x565560], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x6e]
mov byte [ebp - 0x67], 0
movups xmmword [ebp - 0x120], xmm0
mov dword [ebp - 0x110], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x10c], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4472b0
sub ecx, edx
lea eax, [ebp - 0x6e]
push ecx
push eax
lea ecx, [ebp - 0x120]
call fcn.00402c40
or edi, 2
lea eax, [ebp - 0x120]
cmp dword [ebp - 0x10c], 0x10
push 7
cmovae eax, dword [ebp - 0x120]
push eax
push esi
mov dword [ebp - 0x14], edi
call fcn.0051269e
mov ecx, dword [ebp - 0x10c]
add esp, 0xc
test eax, eax
sete al
mov byte [ebp - 0x49], al
cmp ecx, 0x10
jb 0x447334
mov edx, dword [ebp - 0x120]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x447327
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448711
push ecx
push edx
call fcn.00504f31
mov al, byte [ebp - 0x49]
add esp, 8
test al, al
je 0x448624
push 0x104
lea eax, [ebp - 0x328]
push 0
push eax
call fcn.00506f10
add esp, 0xc
mov dword [ebp - 0x6b], 0xdac5d1ff
cmp dword [ebp - 0x16c], 0x10
lea esi, [ebp - 0x180]
xorps xmm0, xmm0
mov dword [ebp - 0x57], 0
cmovae esi, dword [ebp - 0x180]
xor ecx, ecx
movups xmmword [ebp - 0x67], xmm0
mov word [ebp - 0x53], 0
mov byte [ebp - 0x51], 0
lea eax, [ecx - 0x51]
xor byte [ebp + ecx - 0x6b], al
inc ecx
cmp ecx, 4
jb 0x447387
mov dword [0x5655d8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x6b]
mov byte [ebp - 0x67], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4473c0
sub ecx, edx
lea eax, [ebp - 0x6b]
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.00402c40
push esi
push 0x104
or edi, 0x40
lea ecx, [ebp - 0x328]
cmp dword [ebp - 0x34], 0x10
lea eax, [ebp - 0x48]
push ecx
cmovae eax, dword [ebp - 0x48]
push 0
push eax
push dword [ebp - 0x9c]
mov dword [ebp - 0x14], edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ecx, dword [ebp - 0x34]
cmp ecx, 0x10
jb 0x447437
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44742d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448711
push ecx
push edx
call fcn.00504f31
add esp, 8
xorps xmm0, xmm0
mov byte [ebp - 0x48], 0xf3
movups xmmword [ebp - 0x47], xmm0
mov dword [ebp - 0x37], 0
xor ecx, ecx
mov word [ebp - 0x33], 0
mov byte [ebp - 0x31], 0
lea eax, [ecx - 0x51]
xor byte [ebp + ecx - 0x48], al
inc ecx
cmp ecx, 1
jb 0x447455
mov dword [0x565620], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x48]
mov byte [ebp - 0x47], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x447487
sub ecx, edx
lea eax, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.00402c40
or edi, 0x80
mov dword [ebp - 0x14], edi
mov byte [ebp - 4], 0xa
lea edx, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0x10
cmovae edx, dword [ebp - 0x30]
mov ecx, edx
lea esi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4474c0
sub ecx, esi
mov eax, closesocket
mov esi, dword [ebp - 0x188]
sub eax, esi
cmp eax, ecx
jb 0x448716
cmp dword [ebp - 0x184], 0x10
lea eax, [ebp - 0x198]
push ecx
cmovae eax, dword [ebp - 0x198]
push edx
push esi
push eax
push ecx
push dword [ebp - 0x18]
lea ecx, [ebp - 0x68]
call fcn.004946d0
or edi, 0x100
mov dword [ebp - 0x14], edi
lea eax, [ebp - 0x328]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x68]
call fcn.0048c9d0
or edi, 0x200
mov dword [ebp - 0x14], edi
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1e8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1d8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x54]
cmp ecx, 0x10
jb 0x447587
mov edx, dword [ebp - 0x68]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44757d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448711
push ecx
push edx
call fcn.00504f31
add esp, 8
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x4475d1
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4475c7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448711
push ecx
push edx
call fcn.00504f31
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0xf0], 0
lea ecx, [ebp - 0x328]
mov dword [ebp - 0xec], 0
movups xmmword [ebp - 0x100], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4475f8
sub ecx, edx
lea eax, [ebp - 0x328]
push ecx
push eax
lea ecx, [ebp - 0x100]
call fcn.00402c40
mov byte [ebp - 4], 0xf
lea edi, [ebp - 0x100]
cmp dword [ebp - 0xec], 0x10
mov esi, dword [ebp - 0xf0]
cmovae edi, dword [ebp - 0x100]
test esi, esi
je 0x4477d0
push esi
push 0x2f
push edi
call fcn.00508700
add esp, 0xc
test eax, eax
je 0x4477d0
sub eax, edi
cmp eax, 0xffffffff
je 0x4477d0
xorps xmm0, xmm0
mov byte [ebp - 0x48], 0x80
movups xmmword [ebp - 0x47], xmm0
mov dword [ebp - 0x37], 0
xor ecx, ecx
mov word [ebp - 0x33], 0
mov byte [ebp - 0x31], 0
lea eax, [ecx - 0x51]
xor byte [ebp + ecx - 0x48], al
inc ecx
cmp ecx, 1
jb 0x447677
mov dword [0x565620], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x48]
mov byte [ebp - 0x47], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4476b0
sub ecx, edx
lea eax, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.00402c40
or dword [ebp - 0x14], 0x800
mov byte [ebp - 4], 0x10
lea edx, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0x10
xorps xmm0, xmm0
cmovae edx, dword [ebp - 0x30]
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x18], esp
mov ecx, edx
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
lea edi, [ecx + 1]
mov dword [esi + 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x447700
sub ecx, edi
push ecx
push edx
mov ecx, esi
call fcn.00402c40
sub esp, 0x18
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x100]
mov ecx, esp
push eax
call fcn.0048ccc0
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 0x10
call fcn.0040e4f0
add esp, 0x30
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x447771
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x447767
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448711
push ecx
push edx
call fcn.00504f31
add esp, 8
mov ecx, dword [ebp - 0x1cc]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x1d0]
sub ecx, esi
imul ecx
lea ecx, [ebp - 0x100]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
lea eax, [eax - 3]
lea eax, [esi + eax*8]
cmp ecx, eax
je 0x4477bb
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x4477ae
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x100]
call fcn.0048c8a0
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 0xf
call fcn.0048eeb0
mov esi, dword [ebp - 0xf0]
cmp dword [ebp - 0xec], 0x10
lea edi, [ebp - 0x100]
cmovae edi, dword [ebp - 0x100]
test esi, esi
je 0x44797a
push esi
push 0x5c
push edi
call fcn.00508700
add esp, 0xc
test eax, eax
je 0x44797a
sub eax, edi
cmp eax, 0xffffffff
je 0x44797a
xorps xmm0, xmm0
mov byte [ebp - 0x48], 0xf3
movups xmmword [ebp - 0x47], xmm0
mov dword [ebp - 0x37], 0
xor ecx, ecx
mov word [ebp - 0x33], 0
mov byte [ebp - 0x31], 0
nop dword [eax]
lea eax, [ecx - 0x51]
xor byte [ebp + ecx - 0x48], al
inc ecx
cmp ecx, 1
jb 0x447830
mov dword [0x565620], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x48]
mov byte [ebp - 0x47], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x447862
sub ecx, edx
lea eax, [ebp - 0x48]
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.00402c40
or dword [ebp - 0x14], 0x2000
mov byte [ebp - 4], 0x14
lea edx, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0x10
xorps xmm0, xmm0
cmovae edx, dword [ebp - 0x30]
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x18], esp
mov ecx, edx
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
lea edi, [ecx + 1]
mov dword [esi + 0x14], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4478b0
sub ecx, edi
push ecx
push edx
mov ecx, esi
call fcn.00402c40
sub esp, 0x18
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x100]
mov ecx, esp
push eax
call fcn.0048ccc0
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x14
call fcn.0040e4f0
add esp, 0x30
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x447921
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x447917
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448711
push ecx
push edx
call fcn.00504f31
add esp, 8
mov ecx, dword [ebp - 0x1c0]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x1c4]
sub ecx, esi
imul ecx
lea ecx, [ebp - 0x100]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
lea eax, [eax - 3]
lea eax, [esi + eax*8]
cmp ecx, eax
je 0x44796b
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x44795e
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x100]
call fcn.0048c8a0
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0xf
call fcn.0048eeb0
movaps xmm0, xmmword [0x551ce0]
xor ecx, ecx
movups xmmword [ebp - 0x7a], xmm0
mov word [ebp - 0x6a], 0xb4d6
xorps xmm0, xmm0
mov byte [ebp - 0x68], 0xa4
movups xmmword [ebp - 0x67], xmm0
mov dword [ebp - 0x57], 0
mov word [ebp - 0x53], 0
mov byte [ebp - 0x51], 0
nop dword [eax]
lea eax, [ecx - 0x51]
xor byte [ebp + ecx - 0x7a], al
inc ecx
cmp ecx, 0x13
jb 0x4479b0
mov dword [0x5655a8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x7a]
mov byte [ebp - 0x67], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4479e2
sub ecx, edx
lea eax, [ebp - 0x7a]
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.00402c40
mov edi, dword [ebp - 0x14]
or edi, 0x20
mov dword [ebp - 0x14], edi
mov byte [ebp - 4], 0x18
lea edx, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0x10
cmovae edx, dword [ebp - 0x30]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x447a15
sub ecx, esi
mov eax, closesocket
mov esi, dword [ebp - 0x1d8]
sub eax, esi
cmp eax, ecx
jb 0x448716
cmp dword [ebp - 0x1d4], 0x10
lea eax, [ebp - 0x1e8]
push ecx
cmovae eax, dword [ebp - 0x1e8]
push edx
push esi
push eax
push ecx
push dword [ebp - 0x18]
lea ecx, [ebp - 0x120]
call fcn.004946d0
or edi, 0x10
mov dword [ebp - 0x14], edi
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x447a98
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x447a8e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448711
push ecx
push edx
call fcn.00504f31
add esp, 8
xorps xmm0, xmm0
mov word [ebp - 0x69], 0xd2dd
movups xmmword [ebp - 0x67], xmm0
mov dword [ebp - 0x57], 0
xor ecx, ecx
mov word [ebp - 0x53], 0
mov byte [ebp - 0x51], 0
lea eax, [ecx - 0x51]
xor byte [ebp + ecx - 0x69], al
inc ecx
cmp ecx, 2
jb 0x447ab8
mov dword [0x565598], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x69]
mov byte [ebp - 0x67], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x447af0
sub ecx, edx
lea eax, [ebp - 0x69]
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.00402c40
or edi, 0x400
lea ecx, [ebp - 0x48]
cmp dword [ebp - 0x34], 0x10
lea eax, [ebp - 0x120]
mov dword [ebp - 0x14], edi
cmovae ecx, dword [ebp - 0x48]
cmp dword [ebp - 0x10c], 0x10
push ecx
cmovae eax, dword [ebp - 0x120]
push eax
call fcn.0050ad80
mov ecx, dword [ebp - 0x34]
add esp, 8
mov esi, eax
cmp ecx, 0x10
jb 0x447b6e
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x447b64
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448711
push ecx
push edx
call fcn.00504f31
add esp, 8
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0xf
mov byte [ebp - 0x48], 0
test esi, esi
je 0x44852e
push esi
call fcn.0050e798
add esp, 4
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xe0]
push 0
mov byte [ebp - 0xe8], 0
call fcn.0048e6c0
sub esp, 8
mov byte [ebp - 4], 0x1c
mov eax, esp
lea ecx, [ebp - 0x148]
mov dword [eax], 0
mov dword [eax + 4], 0
call fcn.0048ab50
add esp, 8
mov byte [ebp - 4], 0x1d
mov al, byte [ebp - 0xe8]
test al, al
jne 0x447c41
push 8
mov byte [ebp - 0xe8], 1
call fcn.00504cb0
mov esi, eax
add esp, 4
lea eax, [ebp - 0x101]
mov dword [ebp - 0x19c], esi
mov dword [ebp - 0x1a0], eax
mov byte [ebp - 4], 0x1e
push 0x38
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00504cb0
mov byte [ebp - 4], 0x1d
add esp, 4
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0xe0], esi
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
jmp 0x447c4f
cmp al, 1
jne 0x44877a
mov esi, dword [ebp - 0xe0]
lea eax, [ebp - 0x100]
mov ecx, esi
push eax
call fcn.0048e890
mov byte [ebp - 4], 0x1c
mov edi, eax
mov cl, byte [ebp - 0x148]
mov dl, byte [edi]
mov byte [edi], cl
mov ecx, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x140]
mov byte [ebp - 0x148], dl
mov esi, dword [edi + 0xc]
mov edx, dword [edi + 8]
mov dword [edi + 0xc], ecx
lea ecx, [ebp - 0x148]
mov dword [edi + 8], eax
mov dword [ebp - 0x140], edx
mov dword [ebp - 0x13c], esi
call fcn.0048a7b0
cmp dword [ebp - 0x10c], 0x10
lea ecx, [ebp - 0x120]
lea edx, [ebp - 0x124]
cmovae ecx, dword [ebp - 0x120]
call fcn.0041ac90
test eax, eax
jne 0x448440
movaps xmm0, xmmword [0x5521b0]
xor ecx, ecx
movups xmmword [ebp - 0x94], xmm0
mov dword [ebp - 0x74], 0xa0beb690
movaps xmm0, xmmword [0x5515e0]
movups xmmword [ebp - 0x84], xmm0
mov dword [ebp - 0x70], 0xa5bcbcbe
xorps xmm0, xmm0
mov dword [ebp - 0x6c], 0xa3abb7a3
mov byte [ebp - 0x68], 0xe0
movups xmmword [ebp - 0x67], xmm0
mov dword [ebp - 0x57], eax
mov word [ebp - 0x53], ax
mov byte [ebp - 0x51], al
lea eax, [ecx - 0x51]
xor byte [ebp + ecx - 0x94], al
inc ecx
cmp ecx, 0x2d
jb 0x447d11
mov dword [0x565534], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x94]
mov byte [ebp - 0x67], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x447d50
sub ecx, edx
lea eax, [ebp - 0x94]
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.00402c40
or dword [ebp - 0x14], 0x8000
lea esi, [ebp - 0x48]
mov edx, dword [ebp - 0x34]
cmp edx, 0x10
mov ecx, dword [ebp - 0x48]
setae al
cmovae esi, ecx
test al, al
je 0x447daf
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x447da5
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448711
push edx
push ecx
call fcn.00504f31
add esp, 8
mov ecx, dword [ebp - 0x124]
lea eax, [ebp - 0x108]
push 0
push eax
push 0
push 1
push 0xffffffffffffffff
mov edx, esi
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0xf
mov byte [ebp - 0x48], 0
call fcn.004ea640
add esp, 0x14
test eax, eax
jne 0x448435
mov edi, dword [ebp - 0x108]
mov ecx, edi
call fcn.004c6eb0
cmp eax, 0x64
jne 0x4483bd
lea eax, [ebp - 0x102]
mov dword [ebp - 0x1a8], eax
nop word [eax + eax]
test edi, edi
je 0x447e5f
cmp dword [edi + 0x2c], 0
je 0x447e3a
xor eax, eax
cmp ax, word [edi + 0x30]
jae 0x447e3a
mov eax, dword [edi]
mov eax, dword [eax + 0x44]
test eax, eax
je 0x447e35
push eax
call dword [0x562d18]
add esp, 4
mov ecx, dword [edi + 0x2c]
jmp 0x447e64
mov eax, dword [edi]
test eax, eax
je 0x447e5f
mov eax, dword [eax + 0x44]
test eax, eax
je 0x447e51
push eax
call dword [0x562d18]
add esp, 4
push 0
push 0x19
push dword [edi]
call fcn.004b5810
add esp, 0xc
mov ecx, 0x54a500
mov dl, 1
call fcn.004c3d20
mov dword [ebp - 0x98], eax
test edi, edi
je 0x447f21
mov esi, dword [edi]
mov ecx, dword [edi + 0x64]
test esi, esi
je 0x447eaf
cmp byte [esi + 0x1e], 0
jne 0x447e92
mov edx, esi
cmp ecx, 0xc0a
jne 0x447eaa
push 0
push 7
push esi
call fcn.004b5810
mov byte [esi + 0x1e], 0
add esp, 0xc
mov edx, dword [edi]
mov ecx, 7
mov eax, dword [esi + 0x18]
jmp 0x447eb6
mov eax, 0xff
mov edx, esi
and eax, ecx
mov dword [edi + 0x64], eax
mov eax, dword [edx + 0x44]
test eax, eax
je 0x447ecc
push eax
call dword [0x562d20]
add esp, 4
test edi, edi
je 0x447f21
cmp dword [edi + 0x2c], 0
je 0x447efc
mov eax, 1
cmp ax, word [edi + 0x30]
jae 0x447efc
mov eax, dword [edi]
mov eax, dword [eax + 0x44]
test eax, eax
je 0x447ef4
push eax
call dword [0x562d18]
add esp, 4
mov ecx, dword [edi + 0x2c]
add ecx, 0x28
jmp 0x447f26
mov eax, dword [edi]
test eax, eax
je 0x447f21
mov eax, dword [eax + 0x44]
test eax, eax
je 0x447f13
push eax
call dword [0x562d18]
add esp, 4
push 0
push 0x19
push dword [edi]
call fcn.004b5810
add esp, 0xc
mov ecx, 0x54a500
mov dl, 1
call fcn.004c3d20
mov dword [ebp - 0x50], eax
test edi, edi
je 0x447f87
mov esi, dword [edi]
mov ecx, dword [edi + 0x64]
test esi, esi
je 0x447f6a
cmp byte [esi + 0x1e], 0
jne 0x447f4d
mov eax, esi
cmp ecx, 0xc0a
jne 0x447f65
push 0
push 7
push esi
call fcn.004b5810
mov byte [esi + 0x1e], 0
add esp, 0xc
mov eax, dword [edi]
mov ecx, 7
mov edx, dword [esi + 0x18]
jmp 0x447f71
mov edx, 0xff
mov eax, esi
and ecx, edx
mov dword [edi + 0x64], ecx
mov eax, dword [eax + 0x44]
test eax, eax
je 0x447f87
push eax
call dword [0x562d20]
add esp, 4
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x130]
push 0
mov byte [ebp - 0x138], 0
call fcn.0048e6c0
mov byte [ebp - 4], 0x22
xorps xmm0, xmm0
push 0x18
mov dword [ebp - 0x6b], 0xd7dcd1c1
movups xmmword [ebp - 0x67], xmm0
mov dword [ebp - 0x57], 0
mov word [ebp - 0x53], 0
mov byte [ebp - 0x51], 0
movq qword [ebp - 0x150], xmm0
mov byte [ebp - 0x158], 3
call fcn.00504cb0
mov esi, eax
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1a4], esi
mov ecx, dword [ebp - 0x98]
xorps xmm0, xmm0
mov byte [ebp - 4], 0x23
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x448007
sub ecx, edx
push ecx
push dword [ebp - 0x98]
mov ecx, esi
call fcn.00402c40
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x150], esi
mov byte [ebp - 4], 0x24
xor ecx, ecx
lea eax, [ecx - 0x51]
xor byte [ebp + ecx - 0x6b], al
inc ecx
cmp ecx, 4
jb 0x448034
mov dword [0x5655d8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x6b]
mov byte [ebp - 0x67], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x448066
sub ecx, edx
lea eax, [ebp - 0x6b]
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.00402c40
or dword [ebp - 0x14], 8
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0x10
mov al, byte [ebp - 0x138]
cmovae ecx, dword [ebp - 0x30]
mov dword [ebp - 0x98], ecx
test al, al
jne 0x4480d3
push 1
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 0x138], 1
call fcn.0048e6c0
mov esi, dword [ebp - 0x1b8]
mov eax, dword [ebp - 0x1b4]
mov ecx, dword [ebp - 0x98]
mov dword [ebp - 0x130], esi
mov dword [ebp - 0x12c], eax
jmp 0x4480e1
cmp al, 1
jne 0x448725
mov esi, dword [ebp - 0x130]
mov edx, ecx
mov dword [ebp - 0xa4], 0
xorps xmm0, xmm0
mov dword [ebp - 0xa0], 0
movups xmmword [ebp - 0xb4], xmm0
lea eax, [edx + 1]
mov dword [ebp - 0x98], eax
nop word [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x448110
sub edx, dword [ebp - 0x98]
push edx
push ecx
lea ecx, [ebp - 0xb4]
call fcn.00402c40
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x26
push eax
mov ecx, esi
call fcn.00493e70
mov byte [ebp - 4], 0x25
mov esi, eax
mov ecx, dword [ebp - 0xa0]
cmp ecx, 0x10
jb 0x44817c
mov edx, dword [ebp - 0xb4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x448172
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448711
push ecx
push edx
call fcn.00504f31
add esp, 8
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa0], 0xf
mov byte [ebp - 0xb4], 0
mov al, byte [esi]
mov edi, dword [ebp - 0x18]
mov byte [esi], 3
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x158], al
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x150], ecx
lea ecx, [ebp - 0x158]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x14c], edx
call fcn.0048a7b0
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x448206
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4481fc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448711
push ecx
push edx
call fcn.00504f31
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x6c], 0xc7ddd1d9
push 0x18
mov byte [ebp - 0x68], 0xd6
movups xmmword [ebp - 0x67], xmm0
mov dword [ebp - 0x57], 0
mov word [ebp - 0x53], 0
mov byte [ebp - 0x51], 0
movq qword [ebp - 0x160], xmm0
mov byte [ebp - 0x168], 3
call fcn.00504cb0
mov esi, eax
add esp, 4
lea eax, [ebp - 0x103]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], esi
mov ecx, dword [ebp - 0x50]
xorps xmm0, xmm0
mov byte [ebp - 4], 0x2a
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x448277
sub ecx, edx
push ecx
push dword [ebp - 0x50]
mov ecx, esi
call fcn.00402c40
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x160], esi
mov byte [ebp - 4], 0x2b
xor eax, eax
lea ecx, [eax - 0x51]
xor byte [ebp + eax - 0x6c], cl
inc eax
cmp eax, 5
jb 0x4482a1
xorps xmm0, xmm0
mov dword [0x565544], eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 0x67], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4482d2
sub ecx, edx
lea eax, [ebp - 0x6c]
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.00402c40
or dword [ebp - 0x14], 4
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0x10
lea ecx, [ebp - 0x138]
cmovae eax, dword [ebp - 0x30]
push eax
call fcn.00490ca0
mov esi, eax
mov cl, byte [esi]
mov eax, dword [ebp - 0x15c]
mov edi, dword [ebp - 0x18]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x168], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0x160], ecx
lea ecx, [ebp - 0x168]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x15c], edx
call fcn.0048a7b0
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x108]
cmp ecx, 0x10
jb 0x44837e
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x448374
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448711
push ecx
push edx
call fcn.00504f31
add esp, 8
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0048a420
lea ecx, [ebp - 0x138]
push ecx
mov ecx, eax
call fcn.0048a140
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x1c
call fcn.0048a7b0
mov ecx, edi
call fcn.004c6eb0
cmp eax, 0x64
je 0x447e10
test edi, edi
je 0x448435
mov esi, dword [edi]
mov eax, dword [esi + 0x44]
mov dword [ebp - 0x18], eax
test eax, eax
je 0x4483d7
push eax
call dword [0x562d18]
add esp, 4
mov eax, dword [edi + 0x50]
mov dword [ebp - 0x50], 0
cmp eax, 0xbdf20da3
je 0x4483ef
cmp eax, 0x519c2973
jne 0x4483f9
mov ecx, edi
call fcn.004c5c80
mov dword [ebp - 0x50], eax
mov ecx, edi
call fcn.004c5e90
test esi, esi
je 0x448424
cmp byte [esi + 0x1e], 0
jne 0x448413
cmp dword [ebp - 0x50], 0xc0a
jne 0x448424
push 0
push 7
push esi
call fcn.004b5810
add esp, 0xc
mov byte [esi + 0x1e], 0
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x448435
push eax
call dword [0x562d20]
add esp, 4
mov ecx, dword [ebp - 0x124]
call fcn.0041b210
xorps xmm0, xmm0
mov dword [ebp - 0x6f], 0xddc5c5ce
mov dword [ebp - 0x6b], 0xdad9ddd5
xor ecx, ecx
movups xmmword [ebp - 0x67], xmm0
mov dword [ebp - 0x57], 0
mov word [ebp - 0x53], 0
mov byte [ebp - 0x51], 0
lea eax, [ecx - 0x51]
xor byte [ebp + ecx - 0x6f], al
inc ecx
cmp ecx, 8
jb 0x448468
mov dword [0x565624], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x6f]
mov byte [ebp - 0x67], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4484a0
sub ecx, edx
lea eax, [ebp - 0x6f]
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.00402c40
mov edi, dword [ebp - 0x14]
or edi, 0x4000
mov dword [ebp - 0x14], edi
mov byte [ebp - 4], 0x2e
lea eax, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0x10
mov ecx, dword [ebp - 0x128]
cmovae eax, dword [ebp - 0x30]
push eax
call fcn.00490ca0
lea ecx, [ebp - 0xe8]
push ecx
mov ecx, eax
call fcn.0048a140
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x10
jb 0x448523
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x448519
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448711
push ecx
push edx
call fcn.00504f31
add esp, 8
lea ecx, [ebp - 0xe8]
call fcn.0048a7b0
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x10c]
cmp ecx, 0x10
jb 0x44856c
mov edx, dword [ebp - 0x120]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x448562
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448711
push ecx
push edx
call fcn.00504f31
add esp, 8
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0xf
mov byte [ebp - 0x120], 0
cmp ecx, 0x10
jb 0x4485c5
mov edx, dword [ebp - 0x100]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4485bb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448711
push ecx
push edx
call fcn.00504f31
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0xf
mov byte [ebp - 0x100], 0
cmp ecx, 0x10
jb 0x44861e
mov edx, dword [ebp - 0x1e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x448614
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448711
push ecx
push edx
call fcn.00504f31
add esp, 8
mov esi, dword [ebp - 0x9c]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc esi
add esi, eax
mov dword [ebp - 0x9c], esi
cmp byte [esi], 0
jne 0x447240
mov ecx, dword [ebp - 0x16c]
cmp ecx, 0x10
jb 0x448677
mov edx, dword [ebp - 0x180]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44866d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448720
push ecx
push edx
call fcn.00504f31
add esp, 8
mov ecx, dword [ebp - 0x184]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0xf
mov byte [ebp - 0x180], 0
cmp ecx, 0x10
jb 0x4486c8
mov edx, dword [ebp - 0x198]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4486be
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448720
push ecx
push edx
call fcn.00504f31
add esp, 8
mov ecx, dword [ebx + 0x1c]
cmp ecx, 0x10
jb 0x4486f8
mov edx, dword [ebx + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4486ee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448720
push ecx
push edx
call fcn.00504f31
add esp, 8
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.0050a1d0
call fcn.004024b0
call fcn.004024b0
call fcn.0050a1d0
lea ecx, [ebp - 0x138]
call fcn.0048e990
push eax
lea ecx, [ebp - 0x68]
call fcn.00402b70
push eax
mov edx, str.cannot_use_operator___with_a_string_argument_with
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xb4]
call fcn.00490af0
add esp, 4
push eax
mov edx, 0x131
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x204]
call fcn.00408d70
add esp, 4
lea eax, [ebp - 0x204]
push 0x5607d0
push eax
call fcn.0050691b
lea ecx, [ebp - 0xe8]
call fcn.0048e990
push eax
lea ecx, [ebp - 0x21c]
call fcn.00402b70
push eax
mov edx, str.cannot_use_operator___with_a_string_argument_with
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x200]
call fcn.00490af0
add esp, 4
push eax
mov edx, 0x131
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0xd0]
call fcn.00408d70
add esp, 4
lea eax, [ebp - 0xd0]
push 0x5607d0
push eax
call fcn.0050691b
int3