Function at 0x407bf0
Capabilities:
Create thread
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42884c
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x2a0
mov eax, dword [0x439018]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
mov dword [ebp - 4], 1
call fcn.004163ca
add esp, 4
push eax
call fcn.00416284
add esp, 4
push 0
push 0
push 0
push 0x405210
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 4
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x30]
push str.SUB
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
call fcn.00402460
lea edx, [ebp - 0x30]
mov byte [ebp - 4], 2
lea ecx, [ebx + 0x20]
call fcn.00406040
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x1c]
cmp edx, 0x10
jb 0x407cda
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407cd0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4093a4
push edx
push ecx
call fcn.0040e226
add esp, 8
push 1
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x30]
push 0x435a38
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
call fcn.00402460
lea edx, [ebp - 0x30]
mov byte [ebp - 4], 3
lea ecx, [ebx + 8]
call fcn.00406040
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x1c]
cmp edx, 0x10
jb 0x407d49
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407d3f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4093a4
push edx
push ecx
call fcn.0040e226
add esp, 8
cmp dword [ebx + 0x1c], 0x10
lea eax, [ebx + 8]
mov edx, dword [ebx + 8]
lea ecx, [ebx + 8]
cmovae eax, edx
lea edi, [ebx + 8]
mov dword [ebp - 0x1f0], eax
cmovae ecx, edx
mov eax, dword [ebx + 0x18]
add eax, ecx
cmp dword [ebx + 0x1c], 0x10
mov dword [ebp - 0x1ec], eax
cmovae edi, edx
cmp edi, eax
je 0x407d9b
mov esi, dword [ebp - 0x1f0]
sub esi, edi
movzx eax, byte [edi]
push eax
call fcn.0041639a
mov byte [edi + esi], al
add esp, 4
inc edi
cmp edi, dword [ebp - 0x1ec]
jne 0x407d83
call fcn.00404d00
mov dword [ebp - 0x1ec], eax
call fcn.00404630
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0xf
mov byte [ebp - 0x84], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0xf
mov byte [ebp - 0x54], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0xf
mov byte [ebp - 0x6c], 0
mov byte [ebp - 4], 6
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x18], 0x2e564743
mov esi, dword [eax]
mov eax, dword [0x43ad4c]
cmp eax, dword [esi + 4]
jle 0x407e5a
push 0x43ad4c
call fcn.0040e36f
add esp, 4
cmp dword [0x43ad4c], 0xffffffff
jne 0x407e5a
mov eax, dword [ebp - 0x18]
push 0x429270
mov dword [0x43ad44], eax
call fcn.0040e796
add esp, 4
push 0x43ad4c
call fcn.0040e325
add esp, 4
mov al, byte [0x43ad47]
test al, al
je 0x407e7f
xor byte [0x43ad44], 0x2e
xor byte [0x43ad45], 0x2e
xor byte [0x43ad46], 0x2e
xor al, 0x2e
mov byte [0x43ad47], al
mov ecx, 0x43ad44
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407ea0
sub ecx, edx
push ecx
push 0x43ad44
lea ecx, [ebp - 0x30]
call fcn.00402460
push ecx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebx + 8]
call fcn.0040b6c0
mov edx, dword [ebp - 0x1c]
mov edi, eax
cmp edx, 0x10
jb 0x407efa
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407ef0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4093a4
push edx
push ecx
call fcn.0040e226
add esp, 8
test edi, edi
jne 0x408186
cmp dword [ebx + 0x1c], 0x10
lea ecx, [ebx + 8]
mov edx, dword [ebx + 0x18]
cmovae ecx, dword [ebx + 8]
push 6
push str.mixone
push ecx
call fcn.00402640
add esp, 0xc
cmp eax, 0xffffffff
je 0x4094d0
mov eax, dword [0x43ae48]
mov dword [ebp - 0x18], 0x2e4b4041
cmp eax, dword [esi + 4]
jle 0x407f75
push 0x43ae48
call fcn.0040e36f
add esp, 4
cmp dword [0x43ae48], 0xffffffff
jne 0x407f75
mov eax, dword [ebp - 0x18]
push 0x429260
mov dword [0x43acb8], eax
call fcn.0040e796
add esp, 4
push 0x43ae48
call fcn.0040e325
add esp, 4
mov al, byte [0x43acbb]
test al, al
je 0x407f9a
xor byte [0x43acb8], 0x2e
xor byte [0x43acb9], 0x2e
xor byte [0x43acba], 0x2e
xor al, 0x2e
mov byte [0x43acbb], al
mov ecx, 0x43acb8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407fb7
sub ecx, edx
push ecx
push 0x43acb8
lea ecx, [ebp - 0x30]
call fcn.00402460
movups xmm0, xmmword [ebp - 0x30]
mov eax, dword [0x43ae7c]
mov word [ebp - 0x3c], 0x2e6f
movups xmmword [ebp - 0x6c], xmm0
movq xmm0, qword [ebp - 0x20]
movq qword [ebp - 0x5c], xmm0
cmp eax, dword [esi + 4]
jle 0x40802d
push 0x43ae7c
call fcn.0040e36f
add esp, 4
cmp dword [0x43ae7c], 0xffffffff
jne 0x40802d
mov ax, word [ebp - 0x3c]
push 0x429250
mov word [0x43acb0], ax
call fcn.0040e796
add esp, 4
push 0x43ae7c
call fcn.0040e325
add esp, 4
mov al, byte [0x43acb1]
test al, al
je 0x408044
xor byte [0x43acb0], 0x2e
xor al, 0x2e
mov byte [0x43acb1], al
mov ecx, 0x43acb0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408061
sub ecx, edx
push ecx
push 0x43acb0
lea ecx, [ebp - 0x30]
call fcn.00402460
movups xmm0, xmmword [ebp - 0x30]
mov eax, dword [0x43af10]
mov dword [ebp - 0x18], 0x2e4b4041
movups xmmword [ebp - 0x84], xmm0
movq xmm0, qword [ebp - 0x20]
movq qword [ebp - 0x74], xmm0
cmp eax, dword [esi + 4]
jle 0x4080d9
push 0x43af10
call fcn.0040e36f
add esp, 4
cmp dword [0x43af10], 0xffffffff
jne 0x4080d9
mov eax, dword [ebp - 0x18]
push 0x429240
mov dword [0x43af24], eax
call fcn.0040e796
add esp, 4
push 0x43af10
call fcn.0040e325
add esp, 4
mov al, byte [0x43af27]
test al, al
je 0x4080fe
xor byte [0x43af24], 0x2e
xor byte [0x43af25], 0x2e
xor byte [0x43af26], 0x2e
xor al, 0x2e
mov byte [0x43af27], al
mov ecx, 0x43af24
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408120
sub ecx, edx
push ecx
push 0x43af24
lea ecx, [ebp - 0x30]
call fcn.00402460
mov edx, dword [ebp - 0x40]
cmp edx, 0x10
jb 0x408e3b
mov ecx, dword [ebp - 0x54]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408165
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4093a4
push edx
push ecx
call fcn.0040e226
movups xmm0, xmmword [ebp - 0x30]
add esp, 8
movups xmmword [ebp - 0x54], xmm0
movq xmm0, qword [ebp - 0x20]
movq qword [ebp - 0x44], xmm0
jmp 0x4094d0
mov eax, dword [0x43af20]
mov word [ebp - 0x18], 0x5b4b
mov byte [ebp - 0x39], 0x2e
cmp eax, dword [esi + 4]
jle 0x4081df
push 0x43af20
call fcn.0040e36f
add esp, 4
cmp dword [0x43af20], 0xffffffff
jne 0x4081df
mov ax, word [ebp - 0x18]
mov word [0x43ae54], ax
mov al, byte [ebp - 0x39]
push 0x429230
mov byte [0x43ae56], al
call fcn.0040e796
add esp, 4
push 0x43af20
call fcn.0040e325
add esp, 4
mov al, byte [0x43ae56]
test al, al
je 0x4081fd
xor byte [0x43ae54], 0x2e
xor byte [0x43ae55], 0x2e
xor al, 0x2e
mov byte [0x43ae56], al
mov ecx, 0x43ae54
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408220
sub ecx, edx
push ecx
push 0x43ae54
lea ecx, [ebp - 0x30]
call fcn.00402460
push ecx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebx + 8]
call fcn.0040b6c0
mov edx, dword [ebp - 0x1c]
mov edi, eax
cmp edx, 0x10
jb 0x40827a
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408270
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4093a4
push edx
push ecx
call fcn.0040e226
add esp, 8
mov eax, dword [esi + 4]
mov byte [ebp - 0x39], 0x2e
test edi, edi
jne 0x4087f6
mov word [ebp - 0x18], 0x5b4b
cmp dword [0x43ae5c], eax
jle 0x4082dc
push 0x43ae5c
call fcn.0040e36f
add esp, 4
cmp dword [0x43ae5c], 0xffffffff
jne 0x4082dc
mov ax, word [ebp - 0x18]
mov word [0x43ae14], ax
mov al, byte [ebp - 0x39]
push 0x429220
mov byte [0x43ae16], al
call fcn.0040e796
add esp, 4
push 0x43ae5c
call fcn.0040e325
add esp, 4
mov al, byte [0x43ae16]
test al, al
je 0x4082fa
xor byte [0x43ae14], 0x2e
xor byte [0x43ae15], 0x2e
xor al, 0x2e
mov byte [0x43ae16], al
mov ecx, 0x43ae14
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408317
sub ecx, edx
push ecx
push 0x43ae14
lea ecx, [ebp - 0x30]
call fcn.00402460
movups xmm0, xmmword [ebp - 0x30]
mov eax, dword [0x43acc4]
mov word [ebp - 0x3c], 0x2e6a
movups xmmword [ebp - 0x6c], xmm0
movq xmm0, qword [ebp - 0x20]
movq qword [ebp - 0x5c], xmm0
cmp eax, dword [esi + 4]
jle 0x40838d
push 0x43acc4
call fcn.0040e36f
add esp, 4
cmp dword [0x43acc4], 0xffffffff
jne 0x40838d
mov ax, word [ebp - 0x3c]
push 0x429210
mov word [0x43adc4], ax
call fcn.0040e796
add esp, 4
push 0x43acc4
call fcn.0040e325
add esp, 4
mov al, byte [0x43adc5]
test al, al
je 0x4083a4
xor byte [0x43adc4], 0x2e
xor al, 0x2e
mov byte [0x43adc5], al
mov ecx, 0x43adc4
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4083c1
sub ecx, edx
push ecx
push 0x43adc4
lea ecx, [ebp - 0x30]
call fcn.00402460
movups xmm0, xmmword [ebp - 0x30]
mov eax, dword [0x43ade0]
mov dword [ebp - 0x38], 0x40415b4b
movups xmmword [ebp - 0x84], xmm0
mov word [ebp - 0x34], 0x2e4b
movq xmm0, qword [ebp - 0x20]
movq qword [ebp - 0x74], xmm0
cmp eax, dword [esi + 4]
jle 0x408449
push 0x43ade0
call fcn.0040e36f
add esp, 4
cmp dword [0x43ade0], 0xffffffff
jne 0x408449
mov eax, dword [ebp - 0x38]
mov dword [0x43af38], eax
mov ax, word [ebp - 0x34]
push 0x429200
mov word [0x43af3c], ax
call fcn.0040e796
add esp, 4
push 0x43ade0
call fcn.0040e325
add esp, 4
mov al, byte [0x43af3d]
test al, al
je 0x40847c
xor byte [0x43af38], 0x2e
xor byte [0x43af39], 0x2e
xor byte [0x43af3a], 0x2e
xor byte [0x43af3b], 0x2e
xor byte [0x43af3c], 0x2e
xor al, 0x2e
mov byte [0x43af3d], al
mov ecx, 0x43af38
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4084a0
sub ecx, edx
push ecx
push 0x43af38
lea ecx, [ebp - 0x30]
call fcn.00402460
push ecx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebx + 8]
call fcn.0040b6c0
mov edx, dword [ebp - 0x1c]
mov edi, eax
cmp edx, 0x10
jb 0x4084fa
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4084f0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4093a4
push edx
push ecx
call fcn.0040e226
add esp, 8
mov eax, dword [esi + 4]
test edi, edi
jne 0x4085f7
mov dword [ebp - 0x18], 0x2e4b4041
cmp dword [0x43ae18], eax
jle 0x40854f
push 0x43ae18
call fcn.0040e36f
add esp, 4
cmp dword [0x43ae18], 0xffffffff
jne 0x40854f
mov eax, dword [ebp - 0x18]
push 0x4291f0
mov dword [0x43ad30], eax
call fcn.0040e796
add esp, 4
push 0x43ae18
call fcn.0040e325
add esp, 4
mov al, byte [0x43ad33]
test al, al
je 0x408574
xor byte [0x43ad30], 0x2e
xor byte [0x43ad31], 0x2e
xor byte [0x43ad32], 0x2e
xor al, 0x2e
mov byte [0x43ad33], al
mov ecx, 0x43ad30
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408591
sub ecx, edx
push ecx
push 0x43ad30
lea ecx, [ebp - 0x30]
call fcn.00402460
mov edx, dword [ebp - 0x40]
cmp edx, 0x10
jb 0x408e3b
mov ecx, dword [ebp - 0x54]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4085d6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4093a4
push edx
push ecx
call fcn.0040e226
movups xmm0, xmmword [ebp - 0x30]
add esp, 8
movups xmmword [ebp - 0x54], xmm0
movq xmm0, qword [ebp - 0x20]
movq qword [ebp - 0x44], xmm0
jmp 0x4094d0
mov dword [ebp - 0x38], 0x595a5b4b
mov word [ebp - 0x34], 0x2e41
cmp dword [0x43adb0], eax
jle 0x40864e
push 0x43adb0
call fcn.0040e36f
add esp, 4
cmp dword [0x43adb0], 0xffffffff
jne 0x40864e
mov eax, dword [ebp - 0x38]
mov dword [0x43ae0c], eax
mov ax, word [ebp - 0x34]
push 0x4291e0
mov word [0x43ae10], ax
call fcn.0040e796
add esp, 4
push 0x43adb0
call fcn.0040e325
add esp, 4
mov al, byte [0x43ae11]
test al, al
je 0x408681
xor byte [0x43ae0c], 0x2e
xor byte [0x43ae0d], 0x2e
xor byte [0x43ae0e], 0x2e
xor byte [0x43ae0f], 0x2e
xor byte [0x43ae10], 0x2e
xor al, 0x2e
mov byte [0x43ae11], al
mov ecx, 0x43ae0c
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4086a0
sub ecx, edx
push ecx
push 0x43ae0c
lea ecx, [ebp - 0x30]
call fcn.00402460
push ecx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebx + 8]
call fcn.0040b6c0
mov edx, dword [ebp - 0x1c]
mov edi, eax
cmp edx, 0x10
jb 0x4086fa
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4086f0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4093a4
push edx
push ecx
call fcn.0040e226
add esp, 8
test edi, edi
jne 0x4094d0
mov eax, dword [0x43aed0]
mov dword [ebp - 0x18], 0x2e41595a
cmp eax, dword [esi + 4]
jle 0x40874e
push 0x43aed0
call fcn.0040e36f
add esp, 4
cmp dword [0x43aed0], 0xffffffff
jne 0x40874e
mov eax, dword [ebp - 0x18]
push 0x4291d0
mov dword [0x43ae50], eax
call fcn.0040e796
add esp, 4
push 0x43aed0
call fcn.0040e325
add esp, 4
mov al, byte [0x43ae53]
test al, al
je 0x408773
xor byte [0x43ae50], 0x2e
xor byte [0x43ae51], 0x2e
xor byte [0x43ae52], 0x2e
xor al, 0x2e
mov byte [0x43ae53], al
mov ecx, 0x43ae50
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408790
sub ecx, edx
push ecx
push 0x43ae50
lea ecx, [ebp - 0x30]
call fcn.00402460
mov edx, dword [ebp - 0x40]
cmp edx, 0x10
jb 0x408e3b
mov ecx, dword [ebp - 0x54]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4087d5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4093a4
push edx
push ecx
call fcn.0040e226
movups xmm0, xmmword [ebp - 0x30]
add esp, 8
movups xmmword [ebp - 0x54], xmm0
movq xmm0, qword [ebp - 0x20]
movq qword [ebp - 0x44], xmm0
jmp 0x4094d0
mov word [ebp - 0x18], 0x5d5b
cmp dword [0x43ac48], eax
jle 0x408846
push 0x43ac48
call fcn.0040e36f
add esp, 4
cmp dword [0x43ac48], 0xffffffff
jne 0x408846
mov ax, word [ebp - 0x18]
mov word [0x43ad0c], ax
mov al, byte [ebp - 0x39]
push 0x4291c0
mov byte [0x43ad0e], al
call fcn.0040e796
add esp, 4
push 0x43ac48
call fcn.0040e325
add esp, 4
mov al, byte [0x43ad0e]
test al, al
je 0x408864
xor byte [0x43ad0c], 0x2e
xor byte [0x43ad0d], 0x2e
xor al, 0x2e
mov byte [0x43ad0e], al
mov ecx, 0x43ad0c
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408881
sub ecx, edx
push ecx
push 0x43ad0c
lea ecx, [ebp - 0x30]
call fcn.00402460
push ecx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebx + 8]
call fcn.0040b6c0
mov edx, dword [ebp - 0x1c]
mov edi, eax
cmp edx, 0x10
jb 0x4088db
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4088d1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4093a4
push edx
push ecx
call fcn.0040e226
add esp, 8
mov eax, dword [esi + 4]
mov byte [ebp - 0x39], 0x2e
test edi, edi
jne 0x408e52
mov word [ebp - 0x18], 0x5d5b
cmp dword [0x43adac], eax
jle 0x40893d
push 0x43adac
call fcn.0040e36f
add esp, 4
cmp dword [0x43adac], 0xffffffff
jne 0x40893d
mov ax, word [ebp - 0x18]
mov word [0x43ae78], ax
mov al, byte [ebp - 0x39]
push 0x4291b0
mov byte [0x43ae7a], al
call fcn.0040e796
add esp, 4
push 0x43adac
call fcn.0040e325
add esp, 4
mov al, byte [0x43ae7a]
test al, al
je 0x40895b
xor byte [0x43ae78], 0x2e
xor byte [0x43ae79], 0x2e
xor al, 0x2e
mov byte [0x43ae7a], al
mov ecx, 0x43ae78
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408978
sub ecx, edx
push ecx
push 0x43ae78
lea ecx, [ebp - 0x30]
call fcn.00402460
movups xmm0, xmmword [ebp - 0x30]
mov eax, dword [0x43ad48]
mov word [ebp - 0x3c], 0x2e6b
movups xmmword [ebp - 0x6c], xmm0
movq xmm0, qword [ebp - 0x20]
movq qword [ebp - 0x5c], xmm0
cmp eax, dword [esi + 4]
jle 0x4089ee
push 0x43ad48
call fcn.0040e36f
add esp, 4
cmp dword [0x43ad48], 0xffffffff
jne 0x4089ee
mov ax, word [ebp - 0x3c]
push 0x4291a0
mov word [0x43ad60], ax
call fcn.0040e796
add esp, 4
push 0x43ad48
call fcn.0040e325
add esp, 4
mov al, byte [0x43ad61]
test al, al
je 0x408a05
xor byte [0x43ad60], 0x2e
xor al, 0x2e
mov byte [0x43ad61], al
mov ecx, 0x43ad60
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408a22
sub ecx, edx
push ecx
push 0x43ad60
lea ecx, [ebp - 0x30]
call fcn.00402460
movups xmm0, xmmword [ebp - 0x30]
mov eax, dword [0x43adb4]
mov dword [ebp - 0x38], 0x40415d5b
movups xmmword [ebp - 0x84], xmm0
mov word [ebp - 0x34], 0x2e4b
movq xmm0, qword [ebp - 0x20]
movq qword [ebp - 0x74], xmm0
cmp eax, dword [esi + 4]
jle 0x408aaa
push 0x43adb4
call fcn.0040e36f
add esp, 4
cmp dword [0x43adb4], 0xffffffff
jne 0x408aaa
mov eax, dword [ebp - 0x38]
mov dword [0x43ad84], eax
mov ax, word [ebp - 0x34]
push 0x429190
mov word [0x43ad88], ax
call fcn.0040e796
add esp, 4
push 0x43adb4
call fcn.0040e325
add esp, 4
mov al, byte [0x43ad89]
test al, al
je 0x408add
xor byte [0x43ad84], 0x2e
xor byte [0x43ad85], 0x2e
xor byte [0x43ad86], 0x2e
xor byte [0x43ad87], 0x2e
xor byte [0x43ad88], 0x2e
xor al, 0x2e
mov byte [0x43ad89], al
mov ecx, 0x43ad84
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408b00
sub ecx, edx
push ecx
push 0x43ad84
lea ecx, [ebp - 0x30]
call fcn.00402460
push ecx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebx + 8]
call fcn.0040b6c0
mov edx, dword [ebp - 0x1c]
mov edi, eax
cmp edx, 0x10
jb 0x408b5a
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408b50
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4093a4
push edx
push ecx
call fcn.0040e226
add esp, 8
mov eax, dword [esi + 4]
test edi, edi
jne 0x408c57
mov dword [ebp - 0x18], 0x2e4b4041
cmp dword [0x43ad98], eax
jle 0x408baf
push 0x43ad98
call fcn.0040e36f
add esp, 4
cmp dword [0x43ad98], 0xffffffff
jne 0x408baf
mov eax, dword [ebp - 0x18]
push 0x429180
mov dword [0x43acd8], eax
call fcn.0040e796
add esp, 4
push 0x43ad98
call fcn.0040e325
add esp, 4
mov al, byte [0x43acdb]
test al, al
je 0x408bd4
xor byte [0x43acd8], 0x2e
xor byte [0x43acd9], 0x2e
xor byte [0x43acda], 0x2e
xor al, 0x2e
mov byte [0x43acdb], al
mov ecx, 0x43acd8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408bf1
sub ecx, edx
push ecx
push 0x43acd8
lea ecx, [ebp - 0x30]
call fcn.00402460
mov edx, dword [ebp - 0x40]
cmp edx, 0x10
jb 0x408e3b
mov ecx, dword [ebp - 0x54]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408c36
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4093a4
push edx
push ecx
call fcn.0040e226
movups xmm0, xmmword [ebp - 0x30]
add esp, 8
movups xmmword [ebp - 0x54], xmm0
movq xmm0, qword [ebp - 0x20]
movq qword [ebp - 0x44], xmm0
jmp 0x4094d0
mov dword [ebp - 0x38], 0x595a5d5b
mov word [ebp - 0x34], 0x2e41
cmp dword [0x43add4], eax
jle 0x408cae
push 0x43add4
call fcn.0040e36f
add esp, 4
cmp dword [0x43add4], 0xffffffff
jne 0x408cae
mov eax, dword [ebp - 0x38]
mov dword [0x43ad28], eax
mov ax, word [ebp - 0x34]
push 0x429170
mov word [0x43ad2c], ax
call fcn.0040e796
add esp, 4
push 0x43add4
call fcn.0040e325
add esp, 4
mov al, byte [0x43ad2d]
test al, al
je 0x408ce1
xor byte [0x43ad28], 0x2e
xor byte [0x43ad29], 0x2e
xor byte [0x43ad2a], 0x2e
xor byte [0x43ad2b], 0x2e
xor byte [0x43ad2c], 0x2e
xor al, 0x2e
mov byte [0x43ad2d], al
mov ecx, 0x43ad28
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408d00
sub ecx, edx
push ecx
push 0x43ad28
lea ecx, [ebp - 0x30]
call fcn.00402460
push ecx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebx + 8]
call fcn.0040b6c0
mov edx, dword [ebp - 0x1c]
mov edi, eax
cmp edx, 0x10
jb 0x408d5a
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408d50
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4093a4
push edx
push ecx
call fcn.0040e226
add esp, 8
test edi, edi
jne 0x4094d0
mov eax, dword [0x43af30]
mov dword [ebp - 0x18], 0x2e41595a
cmp eax, dword [esi + 4]
jle 0x408dae
push 0x43af30
call fcn.0040e36f
add esp, 4
cmp dword [0x43af30], 0xffffffff
jne 0x408dae
mov eax, dword [ebp - 0x18]
push 0x429160
mov dword [0x43adf8], eax
call fcn.0040e796
add esp, 4
push 0x43af30
call fcn.0040e325
add esp, 4
mov al, byte [0x43adfb]
test al, al
je 0x408dd3
xor byte [0x43adf8], 0x2e
xor byte [0x43adf9], 0x2e
xor byte [0x43adfa], 0x2e
xor al, 0x2e
mov byte [0x43adfb], al
mov ecx, 0x43adf8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408df0
sub ecx, edx
push ecx
push 0x43adf8
lea ecx, [ebp - 0x30]
call fcn.00402460
mov edx, dword [ebp - 0x40]
cmp edx, 0x10
jb 0x408e3b
mov ecx, dword [ebp - 0x54]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408e31
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4093a4
push edx
push ecx
call fcn.0040e226
add esp, 8
movups xmm0, xmmword [ebp - 0x30]
movups xmmword [ebp - 0x54], xmm0
movq xmm0, qword [ebp - 0x20]
movq qword [ebp - 0x44], xmm0
jmp 0x4094d0
mov dword [ebp - 0x38], 0x4b404740
cmp dword [0x43ae00], eax
jle 0x408ea1
push 0x43ae00
call fcn.0040e36f
add esp, 4
cmp dword [0x43ae00], 0xffffffff
jne 0x408ea1
mov eax, dword [ebp - 0x38]
mov dword [0x43ae60], eax
mov al, byte [ebp - 0x39]
push 0x429140
mov byte [0x43ae64], al
call fcn.0040e796
add esp, 4
push 0x43ae00
call fcn.0040e325
add esp, 4
mov al, byte [0x43ae64]
test al, al
je 0x408ecd
xor byte [0x43ae60], 0x2e
xor byte [0x43ae61], 0x2e
xor byte [0x43ae62], 0x2e
xor byte [0x43ae63], 0x2e
xor al, 0x2e
mov byte [0x43ae64], al
mov ecx, 0x43ae60
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408ef0
sub ecx, edx
push ecx
push 0x43ae60
lea ecx, [ebp - 0x30]
call fcn.00402460
push ecx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebx + 8]
call fcn.0040b6c0
mov edx, dword [ebp - 0x1c]
mov edi, eax
cmp edx, 0x10
jb 0x408f4a
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408f40
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4093a4
push edx
push ecx
call fcn.0040e226
add esp, 8
test edi, edi
jne 0x40942a
mov eax, dword [0x43ad34]
mov dword [ebp - 0x18], 0x2e4b4041
cmp eax, dword [esi + 4]
jle 0x408f9e
push 0x43ad34
call fcn.0040e36f
add esp, 4
cmp dword [0x43ad34], 0xffffffff
jne 0x408f9e
mov eax, dword [ebp - 0x18]
push 0x429130
mov dword [0x43ae68], eax
call fcn.0040e796
add esp, 4
push 0x43ad34
call fcn.0040e325
add esp, 4
mov al, byte [0x43ae6b]
test al, al
je 0x408fc3
xor byte [0x43ae68], 0x2e
xor byte [0x43ae69], 0x2e
xor byte [0x43ae6a], 0x2e
xor al, 0x2e
mov byte [0x43ae6b], al
mov ecx, 0x43ae68
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408fe0
sub ecx, edx
push ecx
push 0x43ae68
lea ecx, [ebp - 0x30]
call fcn.00402460
movups xmm0, xmmword [ebp - 0x30]
mov eax, dword [0x43ae94]
mov word [ebp - 0x3c], 0x2e6f
movups xmmword [ebp - 0x6c], xmm0
movq xmm0, qword [ebp - 0x20]
movq qword [ebp - 0x5c], xmm0
cmp eax, dword [esi + 4]
jle 0x409056
push 0x43ae94
call fcn.0040e36f
add esp, 4
cmp dword [0x43ae94], 0xffffffff
jne 0x409056
mov ax, word [ebp - 0x3c]
push 0x429120
mov word [0x43af0c], ax
call fcn.0040e796
add esp, 4
push 0x43ae94
call fcn.0040e325
add esp, 4
mov al, byte [0x43af0d]
test al, al
je 0x40906d
xor byte [0x43af0c], 0x2e
xor al, 0x2e
mov byte [0x43af0d], al
mov ecx, 0x43af0c
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409090
sub ecx, edx
push ecx
push 0x43af0c
lea ecx, [ebp - 0x30]
call fcn.00402460
movups xmm0, xmmword [ebp - 0x30]
mov eax, dword [0x43af98]
mov dword [ebp - 0x38], 0x4b404740
movups xmmword [ebp - 0x84], xmm0
mov byte [ebp - 0x39], 0x2e
movq xmm0, qword [ebp - 0x20]
movq qword [ebp - 0x74], xmm0
cmp eax, dword [esi + 4]
jle 0x409114
push 0x43af98
call fcn.0040e36f
add esp, 4
cmp dword [0x43af98], 0xffffffff
jne 0x409114
mov eax, dword [ebp - 0x38]
mov dword [0x43ad78], eax
mov al, byte [ebp - 0x39]
push 0x429100
mov byte [0x43ad7c], al
call fcn.0040e796
add esp, 4
push 0x43af98
call fcn.0040e325
add esp, 4
mov al, byte [0x43ad7c]
test al, al
je 0x409140
xor byte [0x43ad78], 0x2e
xor byte [0x43ad79], 0x2e
xor byte [0x43ad7a], 0x2e
xor byte [0x43ad7b], 0x2e
xor al, 0x2e
mov byte [0x43ad7c], al
mov ecx, 0x43ad78
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409160
sub ecx, edx
push ecx
push 0x43ad78
lea ecx, [ebp - 0x30]
call fcn.00402460
mov edx, dword [ebp - 0x40]
cmp edx, 0x10
jb 0x4091ab
mov ecx, dword [ebp - 0x54]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4091a1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4093a4
push edx
push ecx
call fcn.0040e226
add esp, 8
movups xmm0, xmmword [ebp - 0x30]
mov eax, dword [0x43ad38]
mov dword [ebp - 0x38], 0x4b404740
movups xmmword [ebp - 0x54], xmm0
mov dword [ebp - 0x34], 0x2e4b4041
movq xmm0, qword [ebp - 0x20]
movq qword [ebp - 0x44], xmm0
cmp eax, dword [esi + 4]
jle 0x409219
push 0x43ad38
call fcn.0040e36f
add esp, 4
cmp dword [0x43ad38], 0xffffffff
jne 0x409219
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
push 0x4290f0
mov dword [0x43ae04], eax
mov dword [0x43ae08], ecx
call fcn.0040e796
add esp, 4
push 0x43ad38
call fcn.0040e325
add esp, 4
mov al, byte [0x43ae0b]
test al, al
je 0x40925a
xor byte [0x43ae04], 0x2e
xor byte [0x43ae05], 0x2e
xor byte [0x43ae06], 0x2e
xor byte [0x43ae07], 0x2e
xor byte [0x43ae08], 0x2e
xor byte [0x43ae09], 0x2e
xor byte [0x43ae0a], 0x2e
xor al, 0x2e
mov byte [0x43ae0b], al
mov ecx, 0x43ae04
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409277
sub ecx, edx
push ecx
push 0x43ae04
lea ecx, [ebp - 0x30]
call fcn.00402460
push ecx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebx + 8]
call fcn.0040b6c0
mov edx, dword [ebp - 0x1c]
mov edi, eax
cmp edx, 0x10
jb 0x4092d1
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4092c7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4093a4
push edx
push ecx
call fcn.0040e226
add esp, 8
test edi, edi
jne 0x4093dc
mov eax, dword [0x43ad04]
mov dword [ebp - 0x18], 0x2e4b4041
cmp eax, dword [esi + 4]
jle 0x409325
push 0x43ad04
call fcn.0040e36f
add esp, 4
cmp dword [0x43ad04], 0xffffffff
jne 0x409325
mov eax, dword [ebp - 0x18]
push 0x4290e0
mov dword [0x43ae4c], eax
call fcn.0040e796
add esp, 4
push 0x43ad04
call fcn.0040e325
add esp, 4
mov al, byte [0x43ae4f]
test al, al
je 0x40934a
xor byte [0x43ae4c], 0x2e
xor byte [0x43ae4d], 0x2e
xor byte [0x43ae4e], 0x2e
xor al, 0x2e
mov byte [0x43ae4f], al
mov ecx, 0x43ae4c
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x409367
sub ecx, edx
push ecx
push 0x43ae4c
lea ecx, [ebp - 0x30]
call fcn.00402460
mov edx, dword [ebp - 0x40]
cmp edx, 0x10
jb 0x4093b3
mov ecx, dword [ebp - 0x54]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4093a9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4093a9
call fcn.004127f7
push edx
push ecx
call fcn.0040e226
add esp, 8
movups xmm0, xmmword [ebp - 0x30]
mov byte [ebp - 0x30], 0
movups xmmword [ebp - 0x54], xmm0
movq xmm0, qword [ebp - 0x20]
movq qword [ebp - 0x44], xmm0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
jmp 0x4094c8
call fcn.00409770
mov ecx, eax
call fcn.0040b570
push eax
lea ecx, [ebp - 0x30]
call fcn.004022c0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b6c0
lea ecx, [ebp - 0x30]
mov esi, eax
call fcn.004021f0
test esi, esi
jne 0x4094d0
call fcn.00409800
mov ecx, eax
call fcn.0040b520
push eax
lea ecx, [ebp - 0x30]
call fcn.004022c0
lea ecx, [ebp - 0x54]
jmp 0x4094c2
call fcn.00409880
mov ecx, eax
call fcn.0040b4e0
push eax
lea ecx, [ebp - 0x30]
call fcn.004022c0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b6c0
lea ecx, [ebp - 0x30]
mov esi, eax
call fcn.004021f0
test esi, esi
jne 0x4094d0
call fcn.00409900
mov ecx, eax
call fcn.0040b500
push eax
lea ecx, [ebp - 0x30]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x84]
call fcn.00402240
lea ecx, [ebp - 0x30]
call fcn.004021f0
call fcn.00409980
mov ecx, eax
call fcn.0040b520
push eax
lea ecx, [ebp - 0x30]
call fcn.004022c0
push eax
lea ecx, [ebp - 0x54]
call fcn.00402240
lea ecx, [ebp - 0x30]
call fcn.004021f0
call fcn.00409a00
mov ecx, eax
call fcn.0040b4e0
push eax
lea ecx, [ebp - 0x30]
call fcn.004022c0
lea ecx, [ebp - 0x6c]
push eax
call fcn.00402240
lea ecx, [ebp - 0x30]
call fcn.004021f0
cmp dword [ebp - 0x1f0], 0
je 0x4094e6
push 0x435a44
lea ecx, [ebp - 0x54]
call fcn.004021c0
cmp dword [ebp - 0x1ec], 0
je 0x4094fc
push 0x435a48
lea ecx, [ebp - 0x54]
call fcn.004021c0
sub esp, 0x10
lea ecx, [ebp - 0x1e8]
push 0x435a20
call fcn.004016e0
mov byte [ebp - 4], 7
call fcn.00409ba0
mov ecx, eax
call fcn.0040b540
push eax
lea ecx, [ebp - 0x2b0]
call fcn.004022c0
mov esi, eax
mov byte [ebp - 4], 8
call fcn.00409b20
mov ecx, eax
call fcn.0040b520
push eax
lea ecx, [ebp - 0x298]
call fcn.004022c0
mov edi, eax
mov byte [ebp - 4], 9
call fcn.00409a80
cmp byte [eax + 0x15], 0
je 0x40957a
movups xmm0, xmmword [eax]
mov ecx, 0x10
movaps xmm1, xmmword [str.................]
pxor xmm1, xmm0
movups xmmword [eax], xmm1
xor byte [ecx + eax], 0x2e
inc ecx
cmp ecx, 0x16
jb 0x409570
push eax
lea ecx, [ebp - 0x280]
call fcn.004022c0
push eax
mov edx, 0x43abec
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x268]
call fcn.0040bf00
add esp, 4
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xb
push ecx
mov edx, eax
lea ecx, [ebp - 0x250]
call fcn.0040bf60
add esp, 4
push edi
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x238]
call fcn.0040c010
add esp, 4
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0xd
push ecx
mov edx, eax
lea ecx, [ebp - 0x220]
call fcn.0040bf60
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x208]
call fcn.0040c010
add esp, 4
lea ecx, [ebx + 0x20]
mov byte [ebp - 4], 0xf
push ecx
mov edx, eax
lea ecx, [ebp - 0x9c]
call fcn.0040bf60
add esp, 4
lea ecx, [ebp - 0x208]
call fcn.004021f0
lea ecx, [ebp - 0x220]
call fcn.004021f0
lea ecx, [ebp - 0x238]
call fcn.004021f0
lea ecx, [ebp - 0x250]
call fcn.004021f0
lea ecx, [ebp - 0x268]
call fcn.004021f0
lea ecx, [ebp - 0x280]
call fcn.004021f0
lea ecx, [ebp - 0x298]
call fcn.004021f0
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 4], 0x18
call fcn.004021f0
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x9c]
call fcn.004021b0
push eax
lea ecx, [ebp - 0x1e8]
call fcn.00402080
test eax, eax
je 0x4096dd
mov eax, dword [ebp - 0x1c0]
xor ecx, ecx
cmp dword [ebp - 0x1b4], ecx
cmove eax, ecx
lea ecx, [ebp - 0x30]
push eax
call fcn.004022c0
mov edx, 0x435a4c
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x30]
call fcn.004025b0
test al, al
jne 0x40975c
mov edx, 0x435a20
lea ecx, [ebp - 0x30]
call fcn.004025b0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x30]
test al, al
jne 0x4096e6
call fcn.004021f0
push 0xbb8
call esi
jmp 0x409672
call fcn.004021f0
sub esp, 0x18
lea eax, [ebp - 0x84]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.0040b930
sub esp, 0x18
mov byte [ebp - 4], 0x1a
mov ecx, esp
mov dword [ebp - 0x3c], esp
push 0x43ac04
call fcn.0040b930
sub esp, 0x18
mov byte [ebp - 4], 0x1b
mov ecx, esp
push 0x43ac1c
call fcn.0040b930
cmp dword [ebp - 0x1ec], 0
mov byte [ebp - 4], 0x18
setne dl
cmp dword [ebp - 0x1f0], 0
setne cl
call fcn.00407220
add esp, 0x30
mov ecx, esp
push 0x43abd4
call fcn.0040b930
call fcn.004060c0
add esp, 0x18
call fcn.00405030
int3