Function at 0x427880
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49c61d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xc8
push esi
push edi
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x629148]
mov dword [eax + 0x20], 0
call fcn.004225c0
call fcn.00427700
cmp dword [0x629270], 0xf
mov ecx, 0x62925c
push 0x80e2
cmova ecx, dword [0x62925c]
xor edx, edx
call fcn.0045eaa0
mov eax, dword [0x628218]
add esp, 4
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0xd4], 0x6297e0
cmp eax, 0xffffffff
jne 0x42791c
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x427929
inc eax
lea ecx, [ebp - 0xd4]
push eax
call fcn.00436af0
add eax, esi
mov dword [ebp - 0x70], 0x17
xor edx, edx
mov ecx, 0x7e
div ecx
mov dword [ebp - 0xd4], ecx
xorps xmm0, xmm0
inc dl
movsx di, dl
movups xmmword [ebp - 0x4c], xmm0
mov eax, edi
movzx esi, di
xor eax, 0x53
mov word [ebp - 0x9e], di
mov word [ebp - 0x9c], ax
mov eax, esi
xor eax, 0x74
movzx ecx, ax
mov eax, edi
xor eax, 0x74
mov word [ebp - 0x92], cx
mov word [ebp - 0x9a], ax
mov eax, edi
xor eax, 0x72
mov word [ebp - 0x88], cx
mov word [ebp - 0x98], ax
mov eax, esi
xor eax, 0x65
xor esi, 0x72
movzx edx, ax
mov eax, edi
xor eax, 0x65
mov word [ebp - 0x94], dx
mov word [ebp - 0x96], ax
mov eax, edi
xor eax, 0x46
mov word [ebp - 0x86], dx
mov word [ebp - 0x90], ax
mov eax, edi
xor eax, 0x69
mov word [ebp - 0x7e], dx
mov word [ebp - 0x8e], ax
mov eax, edi
xor eax, 0x67
mov word [ebp - 0x7a], dx
mov word [ebp - 0x8c], ax
lea edx, [ebp - 0x70]
mov eax, edi
mov word [ebp - 0x84], si
xor eax, 0x68
mov word [ebp - 0x8a], ax
mov eax, edi
xor eax, 0x36
mov word [ebp - 0x82], ax
mov eax, edi
xor eax, 0x2e
mov word [ebp - 0x80], ax
mov eax, edi
xor eax, 0x78
mov word [ebp - 0x7c], ax
xor eax, eax
mov word [ebp - 0x78], ax
call fcn.00436a90
mov ecx, dword [ebp - 0x70]
xorps xmm0, xmm0
mov dword [ebp - 0x38], ecx
xor ecx, ecx
mov dword [ebp - 0x4c], eax
xor edx, edx
mov dword [ebp - 0x3c], 0x12
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
mov dword [eax + 0x20], 0
mov word [eax + 0x24], cx
nop dword [eax + eax]
mov ax, word [ebp + edx - 0x9c]
xor ax, di
cmp dword [ebp - 0x38], 7
movzx ecx, ax
lea eax, [ebp - 0x4c]
cmova eax, dword [ebp - 0x4c]
mov word [eax + edx], cx
add edx, 2
cmp edx, 0x24
jb 0x427a50
cmp dword [ebp - 0x38], 7
lea ecx, [ebp - 0x4c]
cmova ecx, dword [ebp - 0x4c]
call fcn.0043eca0
mov ecx, dword [ebp - 0x38]
mov byte [ebp - 0x11], al
cmp ecx, 7
jbe 0x427ac7
mov edx, dword [ebp - 0x4c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x427aba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x427aba
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0049ac51
mov al, byte [ebp - 0x11]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 7
mov word [ebp - 0x4c], cx
test al, al
je 0x429bb2
mov ecx, dword [0x629148]
xor edx, edx
push str.Background
mov eax, dword [ecx + 0x3e48]
movss xmm0, dword [eax + 0x14]
movss dword [ebp - 0x70], xmm0
movss xmm0, dword [eax + 0x18]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
movss dword [ebp - 0xd8], xmm0
mov eax, dword [eax + 0x264]
mov dword [ebp - 0x64], eax
mov eax, dword [ecx + 0x47c4]
mov ecx, dword [eax]
call fcn.00459130
mov eax, dword [0x629148]
add esp, 4
mov edx, 1
mov eax, dword [eax + 0x47c4]
push str.Foreground
mov ecx, dword [eax]
call fcn.00459130
movss xmm2, dword [ebp - 0x70]
lea ecx, [ebp - 0x44]
movss xmm1, dword [ebp - 0xd8]
movaps xmm0, xmm2
xorps xmm3, xmm3
add esp, 4
addss xmm0, xmm3
movss dword [ebp - 0x20], xmm0
movaps xmm0, xmm1
addss xmm0, xmm3
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [0x4c61e4]
addss xmm2, xmm0
addss xmm1, xmm0
movaps xmm0, xmmword [0x4c6360]
movups xmmword [ebp - 0x44], xmm0
movss dword [ebp - 0x74], xmm2
movss dword [ebp - 0x70], xmm1
call fcn.00454bd0
movaps xmm0, xmmword [0x4c6360]
lea ecx, [ebp - 0x44]
mov dword [ebp - 0xd8], eax
movups xmmword [ebp - 0x44], xmm0
call fcn.00454bd0
movaps xmm0, xmmword [0x4c63f0]
lea ecx, [ebp - 0x44]
mov edi, eax
movups xmmword [ebp - 0x44], xmm0
call fcn.00454bd0
movaps xmm0, xmmword [0x4c6360]
lea ecx, [ebp - 0x44]
mov esi, eax
movups xmmword [ebp - 0x44], xmm0
call fcn.00454bd0
push dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x64]
push edi
push esi
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00477780
call fcn.0041cd50
mov esi, dword [0x629148]
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x24], 0
movss xmm0, dword [esi + 0x3788]
lea ecx, [esi + 0x4764]
movss dword [ebp - 0x20], xmm0
call fcn.0046b830
push 0
mov dword [esi + 0x3788], 0x3f800000
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0x43eb0000
mov dword [ebp - 0x1c], 0x43c80000
push ecx
push eax
mov edx, 1
xor ecx, ecx
call fcn.0045bfd0
add esp, 0xc
test al, al
je 0x427dc5
push ecx
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], 0x428c0000
mov ecx, 0x4a17f8
mov dword [ebp - 0x1c], 0x420c0000
call fcn.00482400
add esp, 4
test al, al
je 0x427c94
mov dword [0x4ce0c8], 1
movss xmm1, dword [0x4c6230]
xorps xmm0, xmm0
call fcn.004643d0
push ecx
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], 0x428c0000
mov ecx, 0x4a17fc
mov dword [ebp - 0x1c], 0x420c0000
call fcn.00482400
add esp, 4
test al, al
je 0x427cd1
mov dword [0x4ce0c8], 2
movss xmm1, dword [0x4c6230]
xorps xmm0, xmm0
call fcn.004643d0
push ecx
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], 0x428c0000
mov ecx, 0x4a1800
mov dword [ebp - 0x1c], 0x420c0000
call fcn.00482400
add esp, 4
test al, al
je 0x427d0e
mov dword [0x4ce0c8], 3
movss xmm1, dword [0x4c6230]
xorps xmm0, xmm0
call fcn.004643d0
push ecx
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], 0x428c0000
mov ecx, 0x4a1804
mov dword [ebp - 0x1c], 0x420c0000
call fcn.00482400
add esp, 4
test al, al
je 0x427d4b
mov dword [0x4ce0c8], 4
movss xmm1, dword [0x4c6230]
xorps xmm0, xmm0
call fcn.004643d0
push ecx
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], 0x428c0000
mov ecx, 0x4a1808
mov dword [ebp - 0x1c], 0x420c0000
call fcn.00482400
add esp, 4
test al, al
je 0x427d88
mov dword [0x4ce0c8], 5
movss xmm1, dword [0x4c6230]
xorps xmm0, xmm0
call fcn.004643d0
push ecx
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], 0x428c0000
mov ecx, 0x4a180c
mov dword [ebp - 0x1c], 0x420c0000
call fcn.00482400
add esp, 4
test al, al
je 0x427dc5
mov dword [0x4ce0c8], 6
call fcn.0045c250
push 0
push ecx
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0x43eb0000
push eax
mov edx, 1
mov dword [ebp - 0x1c], 0x43c80000
xor ecx, ecx
call fcn.0045bfd0
add esp, 0xc
test al, al
je 0x429b9a
mov ecx, dword [0x629148]
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
movss xmm0, dword [ecx + 0x37f4]
addss xmm0, dword [eax + 0x134]
movss dword [eax + 0x134], xmm0
addss xmm0, dword [eax + 0x14]
addss xmm0, dword [eax + 0x138]
movss dword [eax + 0xf0], xmm0
mov eax, dword [0x4ce0c8]
cmp eax, 1
jne 0x427e50
call fcn.0043ad30
jmp 0x4286aa
cmp eax, 2
jne 0x42841a
mov ecx, 0x49fd85
call fcn.00484560
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x24]
call fcn.00434260
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.004314b0
mov ecx, eax
mov dword [ebp - 4], 0
call fcn.00432db0
push 0x627d98
push eax
call fcn.00496ec0
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0xffffffff
call fcn.00432ea0
cmp byte [0x627d98], 0
je 0x428410
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x6f]
call fcn.00434300
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00432000
push ecx
push 0x17
push 0x627bd8
mov ecx, eax
mov dword [ebp - 4], 1
call fcn.00432db0
mov edx, 0x6293ec
mov ecx, eax
call fcn.004851d0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x90]
call fcn.00432ea0
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x66]
call fcn.00434360
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00431bc0
push ecx
push 0x4a1820
push 0x50
push 0xa
mov ecx, eax
mov dword [ebp - 4], 2
call fcn.00432db0
mov edx, 0x627c34
mov ecx, eax
call fcn.00486830
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x90]
call fcn.00432ea0
mov ecx, 0x49fd86
call fcn.00484560
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x66]
call fcn.004343e0
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00431bc0
push ecx
push 0x4a182c
push 0xc
push ecx
mov ecx, eax
mov dword [ebp - 4], 3
call fcn.00432db0
movss xmm2, dword [0x4c60b8]
mov edx, 0x629048
mov ecx, eax
call fcn.00486020
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x90]
call fcn.00432ea0
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x21]
call fcn.00434460
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00431850
mov dword [ebp - 4], 4
push ecx
push 0x4a1838
push 0x37
push ecx
mov ecx, eax
call fcn.00432db0
movss xmm2, dword [0x4c60b8]
mov edx, 0x629038
mov ecx, eax
call fcn.00486020
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x90]
call fcn.00432ea0
mov eax, dword [0x629048]
test eax, eax
jns 0x428024
xor eax, eax
jmp 0x42802e
mov ecx, 0xc
cmp eax, ecx
cmovg eax, ecx
mov dword [0x629048], eax
mov eax, dword [0x629038]
test eax, eax
jns 0x428040
xor eax, eax
jmp 0x42804a
mov ecx, 0x37
cmp eax, ecx
cmovg eax, ecx
push dword [ebp - 0x63]
mov dword [0x629038], eax
push ecx
lea ecx, [ebp - 0x69]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
call fcn.004344f0
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00431760
mov ecx, eax
mov dword [ebp - 4], 5
call fcn.00432db0
lea edx, [ebp - 0x20]
mov ecx, eax
call fcn.004826d0
lea ecx, [ebp - 0x90]
mov byte [ebp - 0x11], al
mov dword [ebp - 4], 0xffffffff
call fcn.00432ea0
cmp byte [ebp - 0x11], 0
je 0x4280ee
mov ecx, dword [0x629048]
mov eax, dword [0x629038]
shl ecx, 4
sub ecx, dword [0x629048]
lea eax, [eax + ecx*4]
mov ecx, eax
shl ecx, 4
sub ecx, eax
shl ecx, 2
test ecx, ecx
jle 0x4280ee
lea ecx, [ebp - 0x20]
mov byte [0x628f30], 1
call fcn.0041cac0
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [0x6290a0], ecx
mov dword [0x6290a4], eax
movss xmm1, dword [0x4c6230]
xorps xmm0, xmm0
call fcn.004643d0
cmp byte [0x628f30], 0
je 0x4282a8
push dword [ebp - 0x63]
mov dword [ebp - 0x20], 0
push ecx
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x1c], 0
call fcn.00434580
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00431700
mov ecx, eax
mov dword [ebp - 4], 6
call fcn.00432db0
lea edx, [ebp - 0x20]
mov ecx, eax
call fcn.004826d0
lea ecx, [ebp - 0x90]
mov byte [ebp - 0x11], al
mov dword [ebp - 4], 0xffffffff
call fcn.00432ea0
cmp byte [ebp - 0x11], 0
je 0x428172
mov byte [0x628f30], 0
jmp 0x4282a8
cmp byte [0x628f30], 0
je 0x4282a8
lea ecx, [ebp - 0x20]
call fcn.0041cac0
mov ecx, dword [0x629048]
mov eax, dword [0x629038]
shl ecx, 4
sub ecx, dword [0x629048]
push 0
push 0x3b9aca00
lea eax, [eax + ecx*4]
mov ecx, dword [ebp - 0x20]
mov esi, eax
shl esi, 4
sub esi, eax
mov eax, dword [ebp - 0x1c]
shl esi, 2
sub ecx, dword [0x6290a0]
sbb eax, dword [0x6290a4]
push eax
push ecx
call fcn.0049bce0
push dword [ebp - 0x63]
sub esi, eax
mov dword [ebp - 0x70], esi
test esi, esi
jg 0x428210
push ecx
lea ecx, [ebp - 0x5c]
mov byte [0x628f30], 0
call fcn.00434620
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00431f70
mov ecx, eax
call fcn.00432d90
mov ecx, eax
call fcn.00426a40
lea ecx, [ebp - 0x90]
call fcn.004334f0
jmp 0x4282a8
mov eax, 0x91a2b3c5
mov ecx, esi
imul esi
add edx, esi
sar edx, 0xb
mov edi, edx
shr edi, 0x1f
add edi, edx
imul eax, edi, 0xe10
sub ecx, eax
mov eax, 0x88888889
imul ecx
mov eax, 0x88888889
add edx, ecx
sar edx, 5
mov esi, edx
shr esi, 0x1f
add esi, edx
imul dword [ebp - 0x70]
add edx, dword [ebp - 0x70]
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, ecx
shl eax, 4
sub eax, ecx
shl eax, 2
sub dword [ebp - 0x70], eax
push ecx
lea ecx, [ebp - 0x5c]
call fcn.00434700
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.004315d0
mov dword [ebp - 4], 7
mov ecx, dword [ebp - 0x70]
push ecx
push esi
push edi
mov ecx, eax
call fcn.00432db0
push eax
call fcn.00481a70
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x90]
call fcn.00432ea0
call fcn.004617e0
mov ecx, 0x49fd87
call fcn.00484560
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x24]
call fcn.00434820
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.004314b0
mov ecx, eax
mov dword [ebp - 4], 8
call fcn.00432db0
push 0x629401
push eax
call fcn.00496ec0
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0xffffffff
call fcn.00432ea0
cmp byte [0x629401], 0
je 0x42830c
mov byte [0x6293f8], 0
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x44]
call fcn.004348c0
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00431eb0
mov ecx, eax
mov dword [ebp - 4], 9
call fcn.00432db0
push 0x6293f8
push eax
call fcn.00496ec0
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0xffffffff
call fcn.00432ea0
cmp byte [0x6293f8], 0
je 0x428361
mov byte [0x629401], 0
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x25]
call fcn.00434980
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00431700
mov ecx, eax
mov dword [ebp - 4], 0xa
call fcn.00432db0
push 0x629401
push eax
call fcn.00496ec0
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0xffffffff
call fcn.00432ea0
cmp byte [0x629401], 0
je 0x4283b6
mov byte [0x6293f8], 0
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x21]
call fcn.00434a20
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00431850
mov ecx, eax
mov dword [ebp - 4], 0xb
call fcn.00432db0
push 0x6293f8
push eax
call fcn.00496ec0
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0xffffffff
call fcn.00432ea0
cmp byte [0x6293f8], 0
je 0x42840b
mov byte [0x629401], 0
call fcn.00461870
mov ecx, 0x49fd92
jmp 0x4286a5
cmp eax, 3
jne 0x4286af
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x20]
call fcn.00434ab0
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00431920
mov ecx, eax
mov dword [ebp - 4], 0xc
call fcn.00432db0
mov ecx, eax
call fcn.00484560
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0xffffffff
call fcn.00432ea0
mov ecx, 0x49fd93
call fcn.00484560
call fcn.004617e0
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x45]
call fcn.00434b30
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00431a10
mov ecx, eax
mov dword [ebp - 4], 0xd
call fcn.00432db0
push 0x6293f1
push eax
call fcn.00496ec0
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0xffffffff
call fcn.00432ea0
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x27]
call fcn.00434bf0
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00431e50
mov ecx, eax
mov dword [ebp - 4], 0xe
call fcn.00432db0
push 0x6293f1
push eax
call fcn.00496ec0
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0xffffffff
call fcn.00432ea0
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x26]
call fcn.00434c90
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00431d80
mov ecx, eax
mov dword [ebp - 4], 0xf
call fcn.00432db0
push 0x6293f1
push eax
call fcn.00496ec0
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0xffffffff
call fcn.00432ea0
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x65]
call fcn.00434d40
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00431c70
mov ecx, eax
mov dword [ebp - 4], 0x10
call fcn.00432db0
push 0x6293f1
push eax
call fcn.00496ec0
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0xffffffff
call fcn.00432ea0
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x43]
call fcn.00434db0
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00431d00
mov ecx, eax
mov dword [ebp - 4], 0x11
call fcn.00432db0
push 0x6293f1
push eax
call fcn.00496ec0
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0xffffffff
call fcn.00432ea0
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x24]
call fcn.00434e60
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.004314b0
mov ecx, eax
mov dword [ebp - 4], 0x12
call fcn.00432db0
push 0x6293f1
push eax
call fcn.00496ec0
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0xffffffff
call fcn.00432ea0
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x65]
call fcn.00434f00
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00431c70
mov ecx, eax
mov dword [ebp - 4], 0x13
call fcn.00432db0
push 0x6293f1
push eax
call fcn.00496ec0
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0xffffffff
call fcn.00432ea0
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x66]
call fcn.00434f70
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00431bc0
mov ecx, eax
mov dword [ebp - 4], 0x14
call fcn.00432db0
push 0x6293f1
push eax
call fcn.00496ec0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x90]
call fcn.00432ea0
call fcn.00461870
mov ecx, 0x49fda6
call fcn.00484560
mov eax, dword [0x4ce0c8]
cmp eax, 4
jne 0x429a66
mov eax, dword [0x628218]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x64], 0x6297e0
cmp eax, 0xffffffff
jne 0x4286dd
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x4286e7
inc eax
lea ecx, [ebp - 0x64]
push eax
call fcn.00436af0
add eax, esi
mov edi, dword [ebp - 0xd4]
xor edx, edx
mov byte [ebp - 0x77], 0
div edi
xorps xmm0, xmm0
mov dword [ebp - 0x3c], 0
mov ah, dl
mov dword [ebp - 0x38], 0
inc ah
mov al, ah
mov byte [ebp - 0x11], ah
xor al, 0x4f
mov byte [ebp - 0x90], ah
mov byte [ebp - 0x8f], al
mov dl, ah
mov al, ah
mov cl, ah
xor al, 0x6e
xor cl, 0x64
mov byte [ebp - 0x8e], al
xor dl, 0x20
mov al, ah
mov byte [ebp - 0x87], dl
xor al, 0x6c
mov byte [ebp - 0x7f], cl
mov byte [ebp - 0x8d], al
mov al, ah
xor al, 0x79
mov byte [ebp - 0x7e], dl
mov byte [ebp - 0x8c], al
mov al, ah
xor al, 0x20
mov byte [ebp - 0x7b], cl
mov byte [ebp - 0x8b], al
mov al, ah
xor al, 0x46
mov byte [ebp - 0x7a], cl
mov byte [ebp - 0x8a], al
mov al, ah
xor al, 0x6f
mov byte [ebp - 0x89], al
mov al, ah
xor al, 0x72
mov byte [ebp - 0x88], al
mov al, ah
xor al, 0x41
mov byte [ebp - 0x86], al
mov al, ah
xor al, 0x64
mov byte [ebp - 0x85], al
mov al, ah
xor al, 0x76
mov byte [ebp - 0x84], al
mov al, ah
xor al, 0x61
mov byte [ebp - 0x83], al
mov al, ah
xor al, 0x6e
mov byte [ebp - 0x82], al
mov al, ah
xor al, 0x63
mov byte [ebp - 0x81], al
mov al, ah
xor al, 0x65
mov byte [ebp - 0x80], al
mov al, ah
xor al, 0x4d
mov byte [ebp - 0x7d], al
mov al, ah
xor al, 0x6f
mov byte [ebp - 0x7c], al
mov al, ah
xor al, 0x65
mov byte [ebp - 0x79], al
mov al, ah
xor al, 0x72
push 0x20
mov byte [ebp - 0x78], al
movups xmmword [ebp - 0x4c], xmm0
call fcn.0049a9cb
mov dl, byte [ebp - 0x11]
xorps xmm0, xmm0
mov dword [ebp - 0x4c], eax
add esp, 4
mov dword [ebp - 0x3c], 0x18
xor esi, esi
mov dword [ebp - 0x38], 0x1f
movups xmmword [eax], xmm0
movq qword [eax + 0x10], xmm0
mov byte [eax + 0x18], 0
mov cl, byte [ebp + esi - 0x8f]
lea eax, [ebp - 0x4c]
xor cl, dl
cmp dword [ebp - 0x38], 0xf
cmova eax, dword [ebp - 0x4c]
mov byte [eax + esi], cl
inc esi
cmp esi, 0x18
jb 0x428813
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0xf
cmova ecx, dword [ebp - 0x4c]
call fcn.00484560
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x38]
cmp ecx, 0xf
jbe 0x428884
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42887a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42887a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0049ac51
add esp, 8
call fcn.004617e0
mov eax, dword [0x628218]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x64], 0x6297e0
cmp eax, 0xffffffff
jne 0x4288ae
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x4288b8
inc eax
lea ecx, [ebp - 0x64]
push eax
call fcn.00436af0
add eax, esi
mov byte [ebp - 0x19], 0
xor edx, edx
lea ecx, [ebp - 0x23]
div edi
inc dl
mov al, dl
mov byte [ebp - 0x23], dl
xor al, 0x4d
mov byte [ebp - 0x22], al
mov al, dl
xor al, 0x6f
mov byte [ebp - 0x21], al
mov al, dl
xor al, 0x74
mov byte [ebp - 0x20], al
mov al, dl
xor al, 0x69
mov byte [ebp - 0x1f], al
mov al, dl
xor al, 0x6f
mov byte [ebp - 0x1e], al
mov al, dl
xor al, 0x6e
mov byte [ebp - 0x1d], al
mov al, dl
xor al, 0x4b
mov byte [ebp - 0x1c], al
mov al, dl
xor al, 0x65
xor dl, 0x79
mov byte [ebp - 0x1b], al
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 0x1a], dl
call fcn.00431ac0
mov dword [ebp - 4], 0x16
cmp dword [eax + 0x14], 0xf
jbe 0x428923
mov eax, dword [eax]
push 0x6293f1
push eax
call fcn.00496ec0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x7c]
cmp ecx, 0xf
jbe 0x42896e
mov edx, dword [ebp - 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x428964
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x428964
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0049ac51
add esp, 8
movss xmm1, dword [0x4c6230]
xorps xmm0, xmm0
call fcn.004643d0
movss xmm1, dword [0x4c6230]
xorps xmm0, xmm0
call fcn.004643d0
mov eax, dword [0x628218]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x64], 0x6297e0
cmp eax, 0xffffffff
jne 0x4289b3
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x4289bd
inc eax
lea ecx, [ebp - 0x64]
push eax
call fcn.00436af0
add eax, esi
mov byte [ebp - 0x77], 0
xor edx, edx
mov dword [ebp - 0x3c], 0
div edi
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0
mov dh, dl
inc dh
mov al, dh
mov byte [ebp - 0x11], dh
xor al, 0x61
mov byte [ebp - 0x8f], dh
mov byte [ebp - 0x8e], al
mov ch, dh
mov al, dh
xor ch, 0x61
xor al, 0x63
mov byte [ebp - 0x89], ch
mov byte [ebp - 0x8d], al
mov ah, dh
mov al, dh
mov byte [ebp - 0x84], ch
xor al, 0x74
mov byte [ebp - 0x81], ch
mov byte [ebp - 0x8c], al
mov dl, dh
mov al, dh
mov byte [ebp - 0x7d], ch
xor al, 0x69
mov cl, dh
mov byte [ebp - 0x8b], al
xor ah, 0x74
mov al, dh
mov byte [ebp - 0x88], ah
xor al, 0x76
mov byte [ebp - 0x7c], ah
mov byte [ebp - 0x8a], al
xor dl, 0x69
mov al, dh
mov byte [ebp - 0x7f], dl
xor al, 0x65
mov byte [ebp - 0x7b], dl
mov byte [ebp - 0x87], al
xor cl, 0x6e
mov al, dh
mov byte [ebp - 0x80], cl
xor al, 0x73
mov byte [ebp - 0x79], cl
mov byte [ebp - 0x86], al
mov al, dh
xor al, 0x20
mov byte [ebp - 0x85], al
mov al, dh
xor al, 0x6e
mov byte [ebp - 0x83], al
mov al, dh
xor al, 0x20
mov byte [ebp - 0x82], al
mov al, dh
xor al, 0x6d
mov byte [ebp - 0x7e], al
mov al, dh
xor al, 0x6f
mov byte [ebp - 0x7a], al
mov al, dh
xor al, 0x2e
push 0x20
mov byte [ebp - 0x78], al
movups xmmword [ebp - 0x4c], xmm0
call fcn.0049a9cb
mov ch, byte [ebp - 0x11]
xorps xmm0, xmm0
mov dword [ebp - 0x4c], eax
add esp, 4
mov dword [ebp - 0x3c], 0x17
xor edx, edx
mov dword [ebp - 0x38], 0x1f
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov cl, byte [ebp + edx - 0x8e]
lea eax, [ebp - 0x4c]
xor cl, ch
cmp dword [ebp - 0x38], 0xf
cmova eax, dword [ebp - 0x4c]
mov byte [eax + edx], cl
inc edx
cmp edx, 0x17
jb 0x428ad4
mov dword [ebp - 4], 0x17
lea ecx, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0xf
cmova ecx, dword [ebp - 0x4c]
call fcn.00425c70
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x38]
cmp ecx, 0xf
jbe 0x428b45
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x428b3b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x428b3b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0049ac51
add esp, 8
mov eax, dword [0x628218]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x64], 0x6297e0
cmp eax, 0xffffffff
jne 0x428b6a
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x428b74
inc eax
lea ecx, [ebp - 0x64]
push eax
call fcn.00436af0
add eax, esi
mov byte [ebp - 0x34], 0
xor edx, edx
mov dword [ebp - 0x20], 0
div edi
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
mov cl, dl
inc cl
mov al, cl
mov byte [ebp - 0x11], cl
xor al, 0x41
mov byte [ebp - 0x47], cl
mov byte [ebp - 0x46], al
mov al, cl
xor al, 0x74
mov byte [ebp - 0x45], al
mov al, cl
xor al, 0x74
mov byte [ebp - 0x44], al
mov al, cl
xor al, 0x61
mov byte [ebp - 0x43], al
mov al, cl
xor al, 0x63
mov byte [ebp - 0x42], al
mov al, cl
xor al, 0x6b
mov byte [ebp - 0x41], al
mov al, cl
xor al, 0x43
mov byte [ebp - 0x40], al
mov al, cl
xor al, 0x6f
mov byte [ebp - 0x3f], al
mov al, cl
xor al, 0x6c
mov byte [ebp - 0x3e], al
mov al, cl
xor al, 0x6c
mov byte [ebp - 0x3d], al
mov al, cl
xor al, 0x69
mov byte [ebp - 0x3c], al
mov al, cl
xor al, 0x73
mov byte [ebp - 0x3b], al
mov al, cl
xor al, 0x69
mov byte [ebp - 0x3a], al
mov al, cl
xor al, 0x6f
mov byte [ebp - 0x39], al
mov al, cl
xor al, 0x6e
mov byte [ebp - 0x38], al
mov al, cl
xor al, 0x4b
mov byte [ebp - 0x37], al
mov al, cl
xor al, 0x65
mov byte [ebp - 0x36], al
mov al, cl
xor al, 0x79
push 0x20
mov byte [ebp - 0x35], al
movups xmmword [ebp - 0x30], xmm0
call fcn.0049a9cb
mov ch, byte [ebp - 0x11]
xorps xmm0, xmm0
mov dword [ebp - 0x30], eax
add esp, 4
mov dword [ebp - 0x20], 0x12
xor edx, edx
mov dword [ebp - 0x1c], 0x1f
movups xmmword [eax], xmm0
mov word [eax + 0x10], 0
mov byte [eax + 0x12], 0
nop dword [eax + eax]
mov cl, byte [ebp + edx - 0x46]
lea eax, [ebp - 0x30]
xor cl, ch
cmp dword [ebp - 0x1c], 0xf
cmova eax, dword [ebp - 0x30]
mov byte [eax + edx], cl
inc edx
cmp edx, 0x12
jb 0x428c50
mov dword [ebp - 4], 0x18
lea eax, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0xf
push 0x6293f1
cmova eax, dword [ebp - 0x30]
push eax
call fcn.00496ec0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0xf
jbe 0x428cc4
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x428cba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x428cba
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0049ac51
add esp, 8
movss xmm1, dword [0x4c6230]
xorps xmm0, xmm0
call fcn.004643d0
movss xmm1, dword [0x4c6230]
xorps xmm0, xmm0
call fcn.004643d0
push dword [ebp - 0x63]
lea ecx, [ebp - 0xcc]
push str.activates_a_hitbox_rectangle_from_the_characters_rectangle_list_over_a_frame_range.
call fcn.00435000
xorps xmm0, xmm0
mov dword [ebp - 0x3c], 0
push 0x60
mov edi, eax
mov dword [ebp - 0x38], 0
movups xmmword [ebp - 0x4c], xmm0
call fcn.0049a9cb
add esp, 4
mov dword [ebp - 0x3c], 0x54
mov esi, eax
mov dword [ebp - 0x38], 0x5f
mov dword [ebp - 0x4c], esi
push 0x54
push 0
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov byte [esi + 0x54], 0
xor edx, edx
nop
mov cl, byte [edi + edx + 1]
lea eax, [ebp - 0x4c]
xor cl, byte [edi]
cmp dword [ebp - 0x38], 0xf
cmova eax, dword [ebp - 0x4c]
mov byte [eax + edx], cl
inc edx
cmp edx, 0x54
jb 0x428d40
mov dword [ebp - 4], 0x19
lea ecx, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0xf
cmova ecx, dword [ebp - 0x4c]
call fcn.00425c70
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x38]
cmp ecx, 0xf
jbe 0x428dae
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x428da4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x428da4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0049ac51
add esp, 8
mov eax, dword [0x628218]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x64], 0x6297e0
cmp eax, 0xffffffff
jne 0x428dd3
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x428ddd
inc eax
lea ecx, [ebp - 0x64]
push eax
call fcn.00436af0
add eax, esi
mov edi, dword [ebp - 0xd4]
xor edx, edx
mov byte [ebp - 0x34], 0
div edi
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
mov cl, dl
mov dword [ebp - 0x1c], 0
inc cl
mov al, cl
mov byte [ebp - 0x11], cl
xor al, 0x44
mov byte [ebp - 0x47], cl
mov byte [ebp - 0x46], al
mov al, cl
xor al, 0x61
mov byte [ebp - 0x45], al
mov al, cl
xor al, 0x6d
mov byte [ebp - 0x44], al
mov al, cl
xor al, 0x61
mov byte [ebp - 0x43], al
mov al, cl
xor al, 0x67
mov byte [ebp - 0x42], al
mov al, cl
xor al, 0x65
mov byte [ebp - 0x41], al
mov al, cl
xor al, 0x43
mov byte [ebp - 0x40], al
mov al, cl
xor al, 0x6f
mov byte [ebp - 0x3f], al
mov al, cl
xor al, 0x6c
mov byte [ebp - 0x3e], al
mov al, cl
xor al, 0x6c
mov byte [ebp - 0x3d], al
mov al, cl
xor al, 0x69
mov byte [ebp - 0x3c], al
mov al, cl
xor al, 0x73
mov byte [ebp - 0x3b], al
mov al, cl
xor al, 0x69
mov byte [ebp - 0x3a], al
mov al, cl
xor al, 0x6f
mov byte [ebp - 0x39], al
mov al, cl
xor al, 0x6e
mov byte [ebp - 0x38], al
mov al, cl
xor al, 0x4b
mov byte [ebp - 0x37], al
mov al, cl
xor al, 0x65
mov byte [ebp - 0x36], al
mov al, cl
xor al, 0x79
push 0x20
mov byte [ebp - 0x35], al
movups xmmword [ebp - 0x30], xmm0
call fcn.0049a9cb
mov ch, byte [ebp - 0x11]
xorps xmm0, xmm0
mov dword [ebp - 0x30], eax
add esp, 4
mov dword [ebp - 0x20], 0x12
xor edx, edx
mov dword [ebp - 0x1c], 0x1f
movups xmmword [eax], xmm0
mov word [eax + 0x10], 0
mov byte [eax + 0x12], 0
nop word [eax + eax]
mov cl, byte [ebp + edx - 0x46]
lea eax, [ebp - 0x30]
xor cl, ch
cmp dword [ebp - 0x1c], 0xf
cmova eax, dword [ebp - 0x30]
mov byte [eax + edx], cl
inc edx
cmp edx, 0x12
jb 0x428ec0
mov dword [ebp - 4], 0x1a
lea eax, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0xf
push 0x6293f1
cmova eax, dword [ebp - 0x30]
push eax
call fcn.00496ec0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0xf
jbe 0x428f34
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x428f2a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x428f2a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0049ac51
add esp, 8
movss xmm1, dword [0x4c6230]
xorps xmm0, xmm0
call fcn.004643d0
movss xmm1, dword [0x4c6230]
xorps xmm0, xmm0
call fcn.004643d0
mov eax, dword [0x628218]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x64], 0x6297e0
cmp eax, 0xffffffff
jne 0x428f79
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x428f83
inc eax
lea ecx, [ebp - 0x64]
push eax
call fcn.00436af0
add eax, esi
xor edx, edx
div edi
mov cl, dl
inc cl
mov al, cl
mov byte [ebp - 0x11], cl
xor al, 0x61
mov byte [ebp - 0xa9], cl
mov byte [ebp - 0xa8], al
mov dl, cl
mov al, cl
xor dl, 0x74
xor al, 0x63
mov byte [ebp - 0xa2], dl
mov byte [ebp - 0xa7], al
mov dh, cl
mov al, cl
mov byte [ebp - 0x99], dl
xor al, 0x74
mov byte [ebp - 0x91], dl
mov byte [ebp - 0xa6], al
xor dh, 0x61
mov al, cl
mov dl, byte [ebp - 0x11]
xor al, 0x69
mov byte [ebp - 0xa3], dh
mov byte [ebp - 0xa5], al
mov ch, cl
mov al, cl
mov byte [ebp - 0x9e], dh
xor al, 0x76
mov byte [ebp - 0x90], dh
mov byte [ebp - 0xa4], al
mov ah, cl
mov al, cl
xor ah, 0x20
xor al, 0x65
mov byte [ebp - 0x9d], ah
mov byte [ebp - 0xa1], al
xor ch, 0x65
mov al, cl
mov byte [ebp - 0x95], ah
xor al, 0x73
mov byte [ebp - 0x93], ch
mov byte [ebp - 0xa0], al
mov al, cl
xor al, 0x20
mov byte [ebp - 0x9f], al
mov al, cl
xor al, 0x68
mov byte [ebp - 0x9c], al
mov al, cl
xor al, 0x75
xor cl, 0x72
mov byte [ebp - 0x9b], al
mov al, byte [ebp - 0x11]
xor al, 0x72
mov byte [ebp - 0x94], cl
mov byte [ebp - 0x9a], al
mov al, byte [ebp - 0x11]
xor al, 0x62
mov byte [ebp - 0x98], al
mov al, byte [ebp - 0x11]
xor al, 0x6f
mov byte [ebp - 0x97], al
mov al, byte [ebp - 0x11]
xor al, 0x78
mov byte [ebp - 0x96], al
mov al, byte [ebp - 0x11]
xor al, 0x63
mov byte [ebp - 0x92], al
mov al, dl
xor al, 0x6e
mov byte [ebp - 0x8f], al
mov al, dl
xor al, 0x67
mov byte [ebp - 0x8e], al
mov al, dl
xor al, 0x6c
mov byte [ebp - 0x8d], al
mov al, dl
mov byte [ebp - 0x8c], ch
xor al, 0x6f
mov byte [ebp - 0x8b], ah
mov byte [ebp - 0x8a], al
xorps xmm0, xmm0
mov al, dl
mov byte [ebp - 0x88], ch
xor al, 0x76
mov byte [ebp - 0x87], cl
mov byte [ebp - 0x89], al
mov al, dl
xor al, 0x66
mov byte [ebp - 0x86], ah
mov byte [ebp - 0x83], al
mov al, dl
xor al, 0x6d
mov byte [ebp - 0x85], dh
mov byte [ebp - 0x80], al
mov al, dl
xor al, 0x6e
mov byte [ebp - 0x84], ah
mov byte [ebp - 0x7b], al
mov al, dl
xor al, 0x67
mov byte [ebp - 0x82], cl
mov byte [ebp - 0x7a], al
mov al, dl
xor al, 0x2e
mov byte [ebp - 0x81], dh
push 0x40
mov byte [ebp - 0x7f], ch
mov byte [ebp - 0x7e], ah
mov byte [ebp - 0x7d], cl
mov byte [ebp - 0x7c], dh
mov byte [ebp - 0x79], ch
mov byte [ebp - 0x78], al
mov byte [ebp - 0x77], 0
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
call fcn.0049a9cb
add esp, 4
mov dword [ebp - 0x3c], 0x31
mov esi, eax
mov dword [ebp - 0x38], 0x3f
mov dword [ebp - 0x4c], esi
push 0x31
push 0
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov byte [esi + 0x31], 0
xor edx, edx
nop dword [eax]
mov cl, byte [ebp + edx - 0xa8]
lea eax, [ebp - 0x4c]
xor cl, byte [ebp - 0x11]
cmp dword [ebp - 0x38], 0xf
cmova eax, dword [ebp - 0x4c]
mov byte [eax + edx], cl
inc edx
cmp edx, 0x31
jb 0x429170
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0xf
cmova ecx, dword [ebp - 0x4c]
call fcn.00425c70
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x38]
cmp ecx, 0xf
jbe 0x4291e2
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4291d8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4291d8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0049ac51
add esp, 8
mov eax, dword [0x628218]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x64], 0x6297e0
cmp eax, 0xffffffff
jne 0x429207
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x429211
inc eax
lea ecx, [ebp - 0x64]
push eax
call fcn.00436af0
add eax, esi
mov byte [ebp - 0x19], 0
xor edx, edx
lea ecx, [ebp - 0x24]
div edi
inc dl
mov al, dl
mov byte [ebp - 0x24], dl
xor al, 0x54
mov byte [ebp - 0x23], al
mov al, dl
xor al, 0x72
mov byte [ebp - 0x22], al
mov al, dl
xor al, 0x69
mov byte [ebp - 0x21], al
mov al, dl
xor al, 0x67
mov byte [ebp - 0x20], al
mov al, dl
xor al, 0x67
mov byte [ebp - 0x1f], al
mov al, dl
xor al, 0x65
mov byte [ebp - 0x1e], al
mov al, dl
xor al, 0x72
mov byte [ebp - 0x1d], al
mov al, dl
xor al, 0x4b
mov byte [ebp - 0x1c], al
mov al, dl
xor al, 0x65
xor dl, 0x79
mov byte [ebp - 0x1b], al
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 0x1a], dl
call fcn.004314b0
mov dword [ebp - 4], 0x1c
cmp dword [eax + 0x14], 0xf
jbe 0x429283
mov eax, dword [eax]
push 0x6293f1
push eax
call fcn.00496ec0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x7c]
cmp ecx, 0xf
jbe 0x4292ce
mov edx, dword [ebp - 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4292c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4292c4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0049ac51
add esp, 8
movss xmm1, dword [0x4c6230]
xorps xmm0, xmm0
call fcn.004643d0
movss xmm1, dword [0x4c6230]
xorps xmm0, xmm0
call fcn.004643d0
mov eax, dword [0x628218]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x64], 0x6297e0
cmp eax, 0xffffffff
jne 0x429313
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x42931d
inc eax
lea ecx, [ebp - 0x64]
push eax
call fcn.00436af0
add eax, esi
xor edx, edx
div edi
mov dh, dl
inc dh
mov al, dh
mov byte [ebp - 0x11], dh
xor al, 0x64
mov byte [ebp - 0x9a], dh
mov byte [ebp - 0x99], al
mov ah, dh
mov al, dh
xor ah, 0x65
xor al, 0x65
mov byte [ebp - 0x96], ah
mov byte [ebp - 0x98], al
mov ch, dh
mov al, dh
mov byte [ebp - 0x91], ah
xor al, 0x74
mov byte [ebp - 0x8c], ah
mov byte [ebp - 0x97], al
mov dl, dh
mov al, dh
mov byte [ebp - 0x87], ah
xor al, 0x72
mov byte [ebp - 0x7f], ah
mov byte [ebp - 0x95], al
mov cl, dh
mov al, dh
xor cl, 0x20
xor al, 0x6d
mov byte [ebp - 0x8b], cl
mov byte [ebp - 0x94], al
xor ch, 0x74
mov al, dh
mov byte [ebp - 0x8e], ch
xor al, 0x69
mov byte [ebp - 0x84], cl
mov byte [ebp - 0x93], al
xor dl, 0x73
mov al, dh
mov byte [ebp - 0x85], dl
xor al, 0x6e
mov byte [ebp - 0x92], al
mov al, dh
xor al, 0x73
mov byte [ebp - 0x90], al
mov al, dh
xor al, 0x20
mov byte [ebp - 0x8f], al
mov al, dh
xor al, 0x68
mov byte [ebp - 0x8d], al
mov al, dh
xor al, 0x6d
mov byte [ebp - 0x8a], al
mov al, dh
xor al, 0x6f
mov byte [ebp - 0x89], al
mov al, dh
xor al, 0x76
mov byte [ebp - 0x88], al
mov al, dh
xor al, 0x27
mov byte [ebp - 0x86], al
mov al, dh
xor al, 0x63
mov byte [ebp - 0x83], al
mov al, dh
xor al, 0x61
mov byte [ebp - 0x82], al
mov al, dh
xor al, 0x6e
mov byte [ebp - 0x81], al
mov al, dh
xor al, 0x63
mov byte [ebp - 0x80], al
mov al, dh
xor al, 0x6c
mov byte [ebp - 0x7e], al
mov al, dh
mov byte [ebp - 0x7d], cl
xor al, 0x6c
mov byte [ebp - 0x7a], dl
mov byte [ebp - 0x7c], al
xorps xmm0, xmm0
mov al, dh
mov byte [ebp - 0x79], ch
xor al, 0x69
mov byte [ebp - 0x77], 0
mov byte [ebp - 0x7b], al
mov al, dh
xor al, 0x2e
mov dword [ebp - 0x3c], 0
push 0x30
mov byte [ebp - 0x78], al
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x38], 0
call fcn.0049a9cb
mov dl, byte [ebp - 0x11]
xorps xmm0, xmm0
mov dword [ebp - 0x4c], eax
add esp, 4
mov dword [ebp - 0x3c], 0x22
xor esi, esi
mov dword [ebp - 0x38], 0x2f
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
mov word [eax + 0x20], 0
mov byte [eax + 0x22], 0
nop word [eax + eax]
mov cl, byte [ebp + esi - 0x99]
lea eax, [ebp - 0x4c]
xor cl, dl
cmp dword [ebp - 0x38], 0xf
cmova eax, dword [ebp - 0x4c]
mov byte [eax + esi], cl
inc esi
cmp esi, 0x22
jb 0x4294a0
mov dword [ebp - 4], 0x1d
lea ecx, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0xf
cmova ecx, dword [ebp - 0x4c]
call fcn.00425c70
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x38]
cmp ecx, 0xf
jbe 0x429511
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x429507
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x429507
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0049ac51
add esp, 8
mov eax, dword [0x628218]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x64], 0x6297e0
cmp eax, 0xffffffff
jne 0x429536
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x429540
inc eax
lea ecx, [ebp - 0x64]
push eax
call fcn.00436af0
add eax, esi
mov dword [ebp - 0x3c], 6
xor edx, edx
mov byte [ebp - 0x19], 0
div edi
xor esi, esi
mov edi, 0xf
mov ah, dl
mov dword [ebp - 0x38], edi
inc ah
xorps xmm0, xmm0
mov al, ah
mov byte [ebp - 0x11], ah
xor al, 0x65
mov cl, ah
mov byte [ebp - 0xcd], al
xor cl, 0x56
xor cl, ah
mov al, ah
xor al, 0x79
mov ch, ah
mov dl, ah
mov byte [ebp - 0x6d], al
mov dh, ah
xor ch, 0x66
xor ch, byte [ebp - 0x11]
lea eax, [ebp - 0x4c]
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x4c], esi
xor dl, 0x78
mov word [ebp - 0x48], si
xor dh, 0x4b
mov byte [ebp - 0x46], 0
mov byte [eax], cl
cmp dword [ebp - 0x38], edi
mov cl, byte [ebp - 0xcd]
cmova eax, dword [ebp - 0x4c]
mov byte [eax + 1], ch
lea eax, [ebp - 0x4c]
mov ch, byte [ebp - 0x11]
xor dl, ch
cmp dword [ebp - 0x38], edi
cmova eax, dword [ebp - 0x4c]
xor dh, ch
mov byte [eax + 2], dl
lea eax, [ebp - 0x4c]
cmp dword [ebp - 0x38], edi
cmova eax, dword [ebp - 0x4c]
xor cl, ch
mov byte [eax + 3], dh
lea eax, [ebp - 0x4c]
cmp dword [ebp - 0x38], edi
cmova eax, dword [ebp - 0x4c]
mov byte [eax + 4], cl
lea eax, [ebp - 0x4c]
mov cl, byte [ebp - 0x6d]
xor cl, ch
cmp dword [ebp - 0x38], edi
cmova eax, dword [ebp - 0x4c]
mov byte [eax + 5], cl
mov dword [ebp - 4], 0x1e
lea eax, [ebp - 0x4c]
cmp dword [ebp - 0x38], edi
push 0x6293f1
cmova eax, dword [ebp - 0x4c]
push eax
call fcn.00496ec0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x38]
cmp ecx, edi
jbe 0x42964d
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x429643
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x429643
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0049ac51
add esp, 8
movss xmm1, dword [0x4c6230]
xorps xmm0, xmm0
call fcn.004643d0
movss xmm1, dword [0x4c6230]
xorps xmm0, xmm0
call fcn.004643d0
mov eax, dword [0x628218]
mov esi, dword [0x628214]
sub eax, esi
mov dword [ebp - 0x64], 0x6297e0
cmp eax, 0xffffffff
jne 0x429692
mov ecx, 0x6297e0
call fcn.00436b40
jmp 0x42969c
inc eax
lea ecx, [ebp - 0x64]
push eax
call fcn.00436af0
add eax, esi
mov byte [ebp - 0x34], 0
xor edx, edx
mov dword [ebp - 0x20], 0
div dword [ebp - 0xd4]
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
mov ah, dl
inc ah
mov al, ah
mov byte [ebp - 0x6d], ah
xor al, 0x70
mov byte [ebp - 0x4b], ah
mov byte [ebp - 0x4a], al
mov dl, ah
mov al, ah
mov cl, ah
xor al, 0x6c
xor dl, 0x61
mov byte [ebp - 0x49], al
xor cl, 0x20
mov al, ah
mov byte [ebp - 0x44], dl
xor al, 0x61
mov byte [ebp - 0x43], cl
mov byte [ebp - 0x48], al
mov al, ah
xor al, 0x79
mov byte [ebp - 0x3e], dl
mov byte [ebp - 0x47], al
mov al, ah
xor al, 0x73
mov byte [ebp - 0x3c], cl
mov byte [ebp - 0x46], al
mov al, ah
xor al, 0x20
mov byte [ebp - 0x45], al
mov al, ah
xor al, 0x76
mov byte [ebp - 0x42], al
mov al, ah
xor al, 0x69
mov byte [ebp - 0x41], al
mov al, ah
xor al, 0x73
mov byte [ebp - 0x40], al
mov al, ah
xor al, 0x75
mov byte [ebp - 0x3f], al
mov al, ah
xor al, 0x6c
mov byte [ebp - 0x3d], al
mov al, ah
xor al, 0x65
mov byte [ebp - 0x3b], al
mov al, ah
xor al, 0x66
mov byte [ebp - 0x3a], al
mov al, ah
xor al, 0x66
mov byte [ebp - 0x39], al
mov al, ah
xor al, 0x65
mov byte [ebp - 0x38], al
mov al, ah
xor al, 0x63
mov byte [ebp - 0x37], al
mov al, ah
xor al, 0x74
mov byte [ebp - 0x36], al
mov al, ah
xor al, 0x2e
push 0x20
mov byte [ebp - 0x35], al
movups xmmword [ebp - 0x30], xmm0
call fcn.0049a9cb
add esp, 4
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x16
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0x1f
mov dl, byte [ebp - 0x6d]
xor esi, esi
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov word [eax + 0x14], 0
mov byte [eax + 0x16], 0
mov cl, byte [ebp + esi - 0x4a]
lea eax, [ebp - 0x30]
xor cl, dl
cmp dword [ebp - 0x1c], 0xf
cmova eax, dword [ebp - 0x30]
mov byte [eax + esi], cl
inc esi
cmp esi, 0x16
jb 0x429794
mov dword [ebp - 4], 0x1f
lea ecx, [ebp - 0x30]
cmp dword [ebp - 0x1c], 0xf
cmova ecx, dword [ebp - 0x30]
call fcn.00425c70
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0xf
jbe 0x429802
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4297f8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4297f8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0049ac51
add esp, 8
call fcn.00435f40
mov dl, al
mov byte [ebp - 0x34], 0
xor al, 0x65
mov byte [ebp - 0x45], dl
mov byte [ebp - 0x41], al
mov cl, dl
mov al, dl
xor cl, 0x4d
xor al, 0x73
mov byte [ebp - 0x44], cl
mov byte [ebp - 0x40], al
mov cl, dl
mov al, dl
xor cl, 0x6f
xor al, 0x74
mov byte [ebp - 0x43], cl
mov byte [ebp - 0x3e], al
mov cl, dl
mov al, dl
xor cl, 0x76
xor al, 0x20
mov byte [ebp - 0x42], cl
mov byte [ebp - 0x3d], al
mov cl, dl
mov al, dl
xor cl, 0x65
xor al, 0x52
mov byte [ebp - 0x3f], cl
mov byte [ebp - 0x3c], al
mov al, dl
xor al, 0x73
mov byte [ebp - 0x3b], cl
mov byte [ebp - 0x3a], al
mov al, dl
xor al, 0x61
mov byte [ebp - 0x39], cl
mov byte [ebp - 0x38], al
lea ecx, [ebp - 0x45]
mov al, dl
xor al, 0x72
mov byte [ebp - 0x37], al
mov al, dl
xor al, 0x63
xor dl, 0x68
mov byte [ebp - 0x36], al
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 0x35], dl
call fcn.00431a10
mov ecx, eax
mov dword [ebp - 4], 0x20
call fcn.00432db0
push 0x6293c1
push eax
call fcn.00496ec0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x7c]
cmp ecx, 0xf
jbe 0x4298e1
mov edx, dword [ebp - 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4298d7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4298d7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0049ac51
add esp, 8
push dword [ebp - 0x63]
mov dword [ebp - 0x80], 0
push ecx
lea ecx, [ebp - 0x6e]
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
call fcn.00435250
lea eax, [ebp - 0x4c]
push eax
call fcn.004319e0
sub esp, 8
mov dword [ebp - 4], 0x21
mov ecx, eax
push 0
push 0x100
call fcn.00432db0
mov edx, 0x628f38
mov ecx, eax
call fcn.00486eb0
add esp, 0x10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c]
call fcn.00432ea0
push dword [ebp - 0x63]
push ecx
lea ecx, [ebp - 0x25]
call fcn.004352b0
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, eax
call fcn.00431700
mov ecx, eax
mov dword [ebp - 4], 0x22
call fcn.00432db0
push 0x6293c9
push eax
call fcn.00496ec0
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
call fcn.00432ea0
push dword [ebp - 0x63]
mov dword [ebp - 0x20], 0x43960000
push ecx
lea ecx, [ebp - 0x67]
mov dword [ebp - 0x1c], 0x42480000
call fcn.00435350
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, eax
call fcn.00431920
mov ecx, eax
mov dword [ebp - 4], 0x23
call fcn.00432db0
sub esp, 8
lea edx, [ebp - 0x20]
mov ecx, eax
call fcn.0045c1e0
add esp, 8
mov byte [ebp - 0x6d], al
lea ecx, [ebp - 0x4c]
mov dword [ebp - 4], 0xffffffff
call fcn.00432ea0
cmp byte [ebp - 0x6d], 0
je 0x429a13
mov esi, 0x629050
push 0x628f38
push dword [esi]
call dword [sym.imp.VCRUNTIME140.dll_strstr]
add esp, 8
test eax, eax
je 0x429a03
push dword [esi]
push 0x4a1ab8
call fcn.00481a70
add esp, 8
add esi, 4
cmp esi, 0x62909c
jl 0x4299e0
call fcn.0045c250
mov esi, dword [0x629148]
mov edx, dword [esi + 0x46a0]
dec dword [esi + 0x4788]
dec word [esi + 0x5a04]
mov ecx, dword [esi + 0x4788]
mov eax, dword [esi + 0x4790]
shr edx, 2
mov eax, dword [eax + ecx*4 - 4]
mov dword [esi + 0x46a0], eax
test dl, 1
je 0x429a5a
test al, 4
jne 0x429a5a
mov eax, dword [esi + 0x5a00]
mov dword [esi + 0x3788], eax
mov ecx, 0x49fdb7
call fcn.00484560
jmp 0x429a7c
cmp eax, 5
jne 0x429a72
call fcn.00438b30
jmp 0x429a7c
cmp eax, 6
jne 0x429a7c
call fcn.00438ea0
call fcn.0045c250
push 0
push ecx
lea eax, [ebp - 0x20]
mov dword [ebp - 0x20], 0x43eb0000
push eax
mov edx, 3
mov dword [ebp - 0x1c], 0x42a00000
xor ecx, ecx
call fcn.0045bfd0
add esp, 0xc
test al, al
je 0x429b95
mov ecx, dword [0x629148]
mov eax, dword [ecx + 0x3e48]
movss xmm0, dword [eax + 0xf4]
movss xmm1, dword [eax + 0x22c]
movaps xmm2, xmm0
subss xmm2, dword [eax + 0x18]
subss xmm1, xmm0
addss xmm2, dword [eax + 0x7c]
subss xmm1, dword [0x4c6184]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
mulss xmm1, dword [0x4c6078]
mov byte [eax + 0x131], 1
movss xmm0, dword [eax + 0x18]
subss xmm0, dword [eax + 0x7c]
addss xmm2, xmm1
addss xmm0, xmm2
movss dword [eax + 0xf4], xmm0
call fcn.00426af0
mov ecx, dword [0x629148]
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x429b5d
movss xmm1, dword [0x4c6230]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
call fcn.00464040
push ecx
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], 0x42200000
mov ecx, 0x4a1abc
mov dword [ebp - 0x1c], 0x41f00000
call fcn.00482400
add esp, 4
test al, al
jne 0x429bb7
movss xmm1, dword [0x4c6230]
xorps xmm0, xmm0
call fcn.004643d0
call fcn.00423ba0
call fcn.0045c250
call fcn.00460f70
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00426a10
call fcn.00426a10
int3