Function at 0x447a40
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47a1c6
mov eax, dword fs:[0]
push eax
mov eax, 0x2b50
call fcn.00451fa0
mov eax, dword [0x49106c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
xor edi, edi
mov dword [ebp - 0x2b44], eax
mov dword [ebp - 0x2b58], eax
mov dword [ebp - 0x2b54], edi
mov dword [ebp - 0x2b48], eax
mov dword [ebp - 0x2b50], eax
mov dword [ebp - 4], edi
mov eax, 0x29
xor esi, esi
mov word [ebp - 0xe7c], ax
push 0x6a
lea eax, [ebp - 0xe7a]
mov dword [ebp - 0x2b40], esi
push esi
push eax
mov dword [ebp - 0xe90], 0x40005b
mov dword [ebp - 0xe8c], 0x40005a
mov dword [ebp - 0xe88], 0x4e0047
mov dword [ebp - 0xe84], 0x4c0007
mov dword [ebp - 0xe80], 0x4c0051
call fcn.004534f0
push 0x68
lea eax, [ebp - 0xdf8]
mov dword [ebp - 0xe10], 0x68007b
push esi
push eax
mov dword [ebp - 0xe0c], 0x44007f
mov dword [ebp - 0xe08], 0x470046
mov dword [ebp - 0xe04], 0x7006d
mov dword [ebp - 0xe00], 0x51004c
mov dword [ebp - 0xdfc], 0x29004c
call fcn.004534f0
mov eax, 0x29
mov dword [ebp - 0xd90], 0x68007b
push 0x6a
mov word [ebp - 0xd7c], ax
lea eax, [ebp - 0xd7a]
push esi
push eax
mov dword [ebp - 0xd8c], 0x44007f
mov dword [ebp - 0xd88], 0x470046
mov dword [ebp - 0xd84], 0x4c0007
mov dword [ebp - 0xd80], 0x4c0051
call fcn.004534f0
mov eax, 0x29
mov dword [ebp - 0xd10], 0x68007b
push 0x66
mov word [ebp - 0xcf8], ax
lea eax, [ebp - 0xcf6]
push esi
push eax
mov dword [ebp - 0xd0c], 0x5d007f
mov dword [ebp - 0xd08], 0x440040
mov dword [ebp - 0xd04], 0x5b004c
mov dword [ebp - 0xd00], 0x4c0007
mov dword [ebp - 0xcfc], 0x4c0051
call fcn.004534f0
push 0x70
lea eax, [ebp - 0xc80]
mov dword [ebp - 0xc90], 0x48005b
push esi
push eax
mov dword [ebp - 0xc8c], 0x7005f
mov dword [ebp - 0xc88], 0x51004c
mov dword [ebp - 0xc84], 0x29004c
call fcn.004534f0
push 0x68
lea eax, [ebp - 0x678]
mov dword [ebp - 0x690], 0x1f001a
push esi
push eax
mov dword [ebp - 0x68c], 0x7d0019
mov dword [ebp - 0x688], 0x48005b
mov dword [ebp - 0x684], 0x70050
mov dword [ebp - 0x680], 0x51004c
mov dword [ebp - 0x67c], 0x29004c
call fcn.004534f0
add esp, 0x48
mov dword [ebp - 0x610], 0x1f001a
push 0x68
lea eax, [ebp - 0x5f8]
mov dword [ebp - 0x60c], 0x7a0019
push esi
push eax
mov dword [ebp - 0x608], 0x4f0048
mov dword [ebp - 0x604], 0x7004c
mov dword [ebp - 0x600], 0x51004c
mov dword [ebp - 0x5fc], 0x29004c
call fcn.004534f0
push 0x5c
lea eax, [ebp - 0x56c]
mov dword [ebp - 0x590], 0x410073
push esi
push eax
mov dword [ebp - 0x58c], 0x6d005c
mov dword [ebp - 0x588], 0x470046
mov dword [ebp - 0x584], 0x6f004e
mov dword [ebp - 0x580], 0x470048
mov dword [ebp - 0x57c], 0x70004e
mov dword [ebp - 0x578], 0x7005c
mov dword [ebp - 0x574], 0x51004c
mov dword [ebp - 0x570], 0x29004c
call fcn.004534f0
push 0x6c
lea eax, [ebp - 0xefc]
mov dword [ebp - 0xf10], 0x1f001a
push esi
push eax
mov dword [ebp - 0xf0c], 0x5a0019
mov dword [ebp - 0xf08], 0x7004d
mov dword [ebp - 0xf04], 0x51004c
mov dword [ebp - 0xf00], 0x29004c
call fcn.004534f0
mov eax, 0x29
mov dword [ebp - 0x790], 0x7a0062
push 0x66
mov word [ebp - 0x778], ax
lea eax, [ebp - 0x776]
push esi
push eax
mov dword [ebp - 0x78c], 0x4f0048
mov dword [ebp - 0x788], 0x7a004c
mov dword [ebp - 0x784], 0x4a005f
mov dword [ebp - 0x780], 0x4c0007
mov dword [ebp - 0x77c], 0x4c0051
call fcn.004534f0
push 0x64
lea eax, [ebp - 0x6f4]
mov dword [ebp - 0x710], 0x7a0062
push esi
push eax
mov dword [ebp - 0x70c], 0x4f0048
mov dword [ebp - 0x708], 0x7d004c
mov dword [ebp - 0x704], 0x48005b
mov dword [ebp - 0x700], 0x70050
mov dword [ebp - 0x6fc], 0x51004c
mov dword [ebp - 0x6f8], 0x29004c
call fcn.004534f0
push 0x68
lea eax, [ebp - 0x9f8]
mov dword [ebp - 0xa10], 0x510042
push esi
push eax
mov dword [ebp - 0xa0c], 0x5d004c
mov dword [ebp - 0xa08], 0x48005b
mov dword [ebp - 0xa04], 0x70050
mov dword [ebp - 0xa00], 0x51004c
mov dword [ebp - 0x9fc], 0x29004c
call fcn.004534f0
add esp, 0x48
mov dword [ebp - 0x990], 0x510042
mov eax, 0x29
mov dword [ebp - 0x98c], 0x5a004c
mov dword [ebp - 0x988], 0x46004a
mov dword [ebp - 0x984], 0x4c005b
push 0x66
mov dword [ebp - 0x980], 0x4c0007
mov dword [ebp - 0x97c], 0x4c0051
mov word [ebp - 0x978], ax
push esi
lea eax, [ebp - 0x976]
push eax
call fcn.004534f0
mov eax, 0x29
mov dword [ebp - 0xb10], 0x780078
push 0x66
mov word [ebp - 0xaf8], ax
lea eax, [ebp - 0xaf6]
push esi
push eax
mov dword [ebp - 0xb0c], 0x6a0079
mov dword [ebp - 0xb08], 0x5b007d
mov dword [ebp - 0xb04], 0x500048
mov dword [ebp - 0xb00], 0x4c0007
mov dword [ebp - 0xafc], 0x4c0051
call fcn.004534f0
push 0x68
lea eax, [ebp - 0xa78]
mov dword [ebp - 0xa90], 0x780078
push esi
push eax
mov dword [ebp - 0xa8c], 0x6a0079
mov dword [ebp - 0xa88], 0x7d007b
mov dword [ebp - 0xa84], 0x70079
mov dword [ebp - 0xa80], 0x51004c
mov dword [ebp - 0xa7c], 0x29004c
call fcn.004534f0
mov eax, 0x29
mov dword [ebp - 0x410], 0x48006b
push 0x62
mov word [ebp - 0x3f4], ax
lea eax, [ebp - 0x3f2]
push esi
push eax
mov dword [ebp - 0x40c], 0x4d0040
mov dword [ebp - 0x408], 0x7a005c
mov dword [ebp - 0x404], 0x7a004d
mov dword [ebp - 0x400], 0x4a005f
mov dword [ebp - 0x3fc], 0x4c0007
mov dword [ebp - 0x3f8], 0x4c0051
call fcn.004534f0
push 0x60
lea eax, [ebp - 0x370]
mov dword [ebp - 0x390], 0x48006b
push esi
push eax
mov dword [ebp - 0x38c], 0x4d0040
mov dword [ebp - 0x388], 0x7a005c
mov dword [ebp - 0x384], 0x7d004d
mov dword [ebp - 0x380], 0x48005b
mov dword [ebp - 0x37c], 0x70050
mov dword [ebp - 0x378], 0x51004c
mov dword [ebp - 0x374], 0x29004c
call fcn.004534f0
push 0x60
lea eax, [ebp - 0x4f0]
mov dword [ebp - 0x510], 0x48006b
push esi
push eax
mov dword [ebp - 0x50c], 0x4d0040
mov dword [ebp - 0x508], 0x68005c
mov dword [ebp - 0x504], 0x7d0047
mov dword [ebp - 0x500], 0x48005b
mov dword [ebp - 0x4fc], 0x70050
mov dword [ebp - 0x4f8], 0x51004c
mov dword [ebp - 0x4f4], 0x29004c
call fcn.004534f0
add esp, 0x48
mov dword [ebp - 0x490], 0x48006b
mov eax, 0x29
mov dword [ebp - 0x48c], 0x4d0040
mov word [ebp - 0x474], ax
lea eax, [ebp - 0x472]
mov dword [ebp - 0x488], 0x68005c
push 0x62
push esi
mov dword [ebp - 0x484], 0x7a0047
mov dword [ebp - 0x480], 0x4a005f
mov dword [ebp - 0x47c], 0x4c0007
mov dword [ebp - 0x478], 0x4c0051
push eax
call fcn.004534f0
push 0x70
lea eax, [ebp - 0x1080]
mov dword [ebp - 0x1090], 0x5f0048
push esi
push eax
mov dword [ebp - 0x108c], 0x70059
mov dword [ebp - 0x1088], 0x51004c
mov dword [ebp - 0x1084], 0x29004c
call fcn.004534f0
mov eax, 0x29
mov dword [ebp - 0x1010], 0x4e004c
push 0x6e
mov word [ebp - 0x1000], ax
lea eax, [ebp - 0xffe]
push esi
push eax
mov dword [ebp - 0x100c], 0x40005c
mov dword [ebp - 0x1008], 0x4c0007
mov dword [ebp - 0x1004], 0x4c0051
call fcn.004534f0
mov eax, 0x29
mov dword [ebp - 0xf90], 0x42004c
push 0x6e
mov word [ebp - 0xf80], ax
lea eax, [ebp - 0xf7e]
push esi
push eax
mov dword [ebp - 0xf8c], 0x47005b
mov dword [ebp - 0xf88], 0x4c0007
mov dword [ebp - 0xf84], 0x4c0051
call fcn.004534f0
push 0x68
lea eax, [ebp - 0xbf8]
mov dword [ebp - 0xc10], 0x5a0064
push esi
push eax
mov dword [ebp - 0xc0c], 0x590064
mov dword [ebp - 0xc08], 0x47006c
mov dword [ebp - 0xc04], 0x7004e
mov dword [ebp - 0xc00], 0x51004c
mov dword [ebp - 0xbfc], 0x29004c
call fcn.004534f0
push 0x68
lea eax, [ebp - 0xb78]
mov dword [ebp - 0xb90], 0x5a0044
push esi
push eax
mov dword [ebp - 0xb8c], 0x4c005a
mov dword [ebp - 0xb88], 0x4c004a
mov dword [ebp - 0xb84], 0x7005a
mov dword [ebp - 0xb80], 0x51004c
mov dword [ebp - 0xb7c], 0x29004c
call fcn.004534f0
add esp, 0x48
mov dword [ebp - 0x910], 0x5a005c
mov eax, 0x29
mov dword [ebp - 0x90c], 0x5a0050
mov word [ebp - 0x8f8], ax
lea eax, [ebp - 0x8f6]
mov dword [ebp - 0x908], 0x40004d
push 0x66
push esi
push eax
mov dword [ebp - 0x904], 0x4e0048
mov dword [ebp - 0x900], 0x4c0007
mov dword [ebp - 0x8fc], 0x4c0051
call fcn.004534f0
mov eax, 0x29
mov dword [ebp - 0x890], 0x400061
push 0x62
mov word [ebp - 0x874], ax
lea eax, [ebp - 0x872]
push esi
mov dword [ebp - 0x88c], 0x5a0059
mov dword [ebp - 0x888], 0x48006d
mov dword [ebp - 0x884], 0x44004c
mov dword [ebp - 0x880], 0x470046
mov dword [ebp - 0x87c], 0x4c0007
mov dword [ebp - 0x878], 0x4c0051
push eax
call fcn.004534f0
mov eax, 0x29
mov dword [ebp - 0x810], 0x400061
push 0x66
mov word [ebp - 0x7f8], ax
lea eax, [ebp - 0x7f6]
push esi
push eax
mov dword [ebp - 0x80c], 0x5a0059
mov dword [ebp - 0x808], 0x5b007d
mov dword [ebp - 0x804], 0x500048
mov dword [ebp - 0x800], 0x4c0007
mov dword [ebp - 0x7fc], 0x4c0051
call fcn.004534f0
push 0x5c
lea eax, [ebp - 0x2ec]
mov dword [ebp - 0x310], 0x1a001b
push esi
push eax
mov dword [ebp - 0x30c], 0x1c001d
mov dword [ebp - 0x308], 0x7d007b
mov dword [ebp - 0x304], 0x5b0079
mov dword [ebp - 0x300], 0x5d0046
mov dword [ebp - 0x2fc], 0x4a004c
mov dword [ebp - 0x2f8], 0x7005d
mov dword [ebp - 0x2f4], 0x51004c
mov dword [ebp - 0x2f0], 0x29004c
call fcn.004534f0
push 0x54
lea eax, [ebp - 0x264]
mov dword [ebp - 0x290], 0x1a001b
push esi
push eax
mov dword [ebp - 0x28c], 0x1c001d
mov dword [ebp - 0x288], 0x48007a
mov dword [ebp - 0x284], 0x4c004f
mov dword [ebp - 0x280], 0x4c006a
mov dword [ebp - 0x27c], 0x5d0047
mov dword [ebp - 0x278], 0x5b004c
mov dword [ebp - 0x274], 0x5f007a
mov dword [ebp - 0x270], 0x7004a
mov dword [ebp - 0x26c], 0x51004c
mov dword [ebp - 0x268], 0x29004c
call fcn.004534f0
push 0x60
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x210], 0x1a001b
push esi
push eax
mov dword [ebp - 0x20c], 0x1c001d
mov dword [ebp - 0x208], 0x48007a
mov dword [ebp - 0x204], 0x4c004f
mov dword [ebp - 0x200], 0x5f007a
mov dword [ebp - 0x1fc], 0x7004a
mov dword [ebp - 0x1f8], 0x51004c
mov dword [ebp - 0x1f4], 0x29004c
call fcn.004534f0
add esp, 0x48
mov dword [ebp - 0x190], 0x1a001b
mov eax, 0x29
mov dword [ebp - 0x18c], 0x1c001d
mov word [ebp - 0x170], ax
lea eax, [ebp - 0x16e]
mov dword [ebp - 0x188], 0x48007a
push 0x5e
push esi
push eax
mov dword [ebp - 0x184], 0x4c004f
mov dword [ebp - 0x180], 0x5b007d
mov dword [ebp - 0x17c], 0x500048
mov dword [ebp - 0x178], 0x4c0007
mov dword [ebp - 0x174], 0x4c0051
call fcn.004534f0
mov dword [ebp - 0x110], 0x1a001b
mov dword [ebp - 0x10c], 0x1c001d
mov dword [ebp - 0x108], 0x46007a
mov dword [ebp - 0x104], 0x5d004f
mov dword [ebp - 0x100], 0x4e0064
mov dword [ebp - 0xfc], 0x7005b
mov dword [ebp - 0xf8], 0x51004c
mov dword [ebp - 0xf4], 0x29004c
push 0x60
lea eax, [ebp - 0xf0]
push esi
push eax
call fcn.004534f0
push 0x60
lea eax, [ebp - 0x70]
mov dword [ebp - 0x90], 0x1a001b
push esi
push eax
mov dword [ebp - 0x8c], 0x1c001d
mov dword [ebp - 0x88], 0x59007a
mov dword [ebp - 0x84], 0x4c004c
mov dword [ebp - 0x80], 0x5c004d
mov dword [ebp - 0x7c], 0x70059
mov dword [ebp - 0x78], 0x51004c
mov dword [ebp - 0x74], 0x29004c
call fcn.004534f0
add esp, 0x24
mov dword [ebp - 0x2b34], 0x22c
push esi
push 2
call dword [0x47b06c]
mov dword [ebp - 0x2b38], eax
cmp eax, 0xffffffff
je 0x448f07
lea ecx, [ebp - 0x2b34]
push ecx
push eax
call dword [0x47b074]
test eax, eax
je 0x4486f2
nop dword [eax]
xor eax, eax
mov dword [ebp - 0x28f8], 0
lea ecx, [ebp - 0x2b10]
mov dword [ebp - 0x28f4], 7
mov word [ebp - 0x2908], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4485f6
sub ecx, edx
lea eax, [ebp - 0x2b10]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x2908]
call fcn.00431d90
mov byte [ebp - 4], 1
cmp dword [ebp - 0x2b48], edi
je 0x448662
movups xmm0, xmmword [ebp - 0x2908]
mov dword [edi + 0x10], 0
xor eax, eax
mov dword [edi + 0x14], 0
mov edx, 7
movups xmmword [edi], xmm0
mov word [ebp - 0x2908], ax
movq xmm0, qword [ebp - 0x28f8]
movq qword [edi + 0x10], xmm0
add edi, 0x18
mov dword [ebp - 0x2b54], edi
jmp 0x44868d
lea eax, [ebp - 0x2908]
push eax
push edi
lea ecx, [ebp - 0x2b58]
call fcn.00449e60
mov eax, dword [ebp - 0x2b50]
mov edx, dword [ebp - 0x28f4]
mov edi, dword [ebp - 0x2b54]
mov dword [ebp - 0x2b48], eax
mov byte [ebp - 4], 0
cmp edx, 8
jb 0x4486cb
mov ecx, dword [ebp - 0x2908]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4486c1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448f24
push edx
push ecx
call fcn.00450fdf
add esp, 8
lea eax, [ebp - 0x2b34]
push eax
push dword [ebp - 0x2b38]
call dword [0x47b070]
test eax, eax
jne 0x4485d0
mov eax, dword [ebp - 0x2b58]
mov dword [ebp - 0x2b44], eax
push dword [ebp - 0x2b38]
call dword [0x47b204]
mov ecx, edi
mov dword [ebp - 0x2b4c], 0
sub ecx, dword [ebp - 0x2b44]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x2b5c], eax
je 0x448ea8
xor eax, eax
nop
mov ecx, dword [ebp - 0x2b44]
lea eax, [eax + eax*2]
cmp dword [ecx + eax*8 + 0x14], 8
lea edi, [ecx + eax*8]
mov dword [ebp - 0x2b38], edi
jb 0x448751
mov eax, dword [edi]
mov dword [ebp - 0x2b38], eax
push 0x208
lea eax, [ebp - 0x1298]
push 0
push eax
call fcn.004534f0
add esp, 0xc
mov dword [ebp - 0x2b3c], 0
lea esi, [ebp - 0xe90]
xor ecx, ecx
nop dword [eax]
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x1298], ax
inc ecx
cmp ecx, 0x40
jb 0x448780
push dword [ebp - 0x2b38]
lea eax, [ebp - 0x1298]
push eax
call fcn.0045b800
add esp, 8
test eax, eax
je 0x4487c7
mov eax, dword [ebp - 0x2b3c]
inc eax
mov dword [ebp - 0x2b3c], eax
cmp eax, 5
jb 0x448777
xor eax, eax
jmp 0x4487cc
mov eax, 1
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0x4487e6
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x14a0]
push 0
push eax
call fcn.004534f0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0x690]
nop dword [eax]
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x14a0], ax
inc ecx
cmp ecx, 0x40
jb 0x448812
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x14a0]
push eax
call fcn.0045b800
add esp, 8
test eax, eax
je 0x448859
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 3
jb 0x448810
xor eax, eax
jmp 0x44885e
mov eax, 2
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0x448878
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x16a8]
push 0
push eax
call fcn.004534f0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0xf10]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x16a8], ax
inc ecx
cmp ecx, 0x40
jb 0x4488a2
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x16a8]
push eax
call fcn.0045b800
add esp, 8
test eax, eax
je 0x4488e9
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 1
jb 0x4488a0
xor eax, eax
jmp 0x4488ee
mov eax, 4
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0x448908
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x18b0]
push 0
push eax
call fcn.004534f0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0x790]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x18b0], ax
inc ecx
cmp ecx, 0x40
jb 0x448932
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x18b0]
push eax
call fcn.0045b800
add esp, 8
test eax, eax
je 0x448979
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 2
jb 0x448930
xor eax, eax
jmp 0x44897e
mov eax, 8
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0x448998
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x1ab8]
push 0
push eax
call fcn.004534f0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0xa10]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x1ab8], ax
inc ecx
cmp ecx, 0x40
jb 0x4489c2
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x1ab8]
push eax
call fcn.0045b800
add esp, 8
test eax, eax
je 0x448a09
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 2
jb 0x4489c0
xor eax, eax
jmp 0x448a0e
mov eax, 0x10
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0x448a28
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x1cc0]
push 0
push eax
call fcn.004534f0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0xb10]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x1cc0], ax
inc ecx
cmp ecx, 0x40
jb 0x448a52
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x1cc0]
push eax
call fcn.0045b800
add esp, 8
test eax, eax
je 0x448a99
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 2
jb 0x448a50
xor eax, eax
jmp 0x448a9e
mov eax, 0x20
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0x448ab8
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x1ec8]
push 0
push eax
call fcn.004534f0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0x410]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x1ec8], ax
inc ecx
cmp ecx, 0x40
jb 0x448ae2
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x1ec8]
push eax
call fcn.0045b800
add esp, 8
test eax, eax
je 0x448b29
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 2
jb 0x448ae0
xor eax, eax
jmp 0x448b2e
mov eax, 0x40
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0x448b48
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x20d0]
push 0
push eax
call fcn.004534f0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0x510]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x20d0], ax
inc ecx
cmp ecx, 0x40
jb 0x448b72
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x20d0]
push eax
call fcn.0045b800
add esp, 8
test eax, eax
je 0x448bb9
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 2
jb 0x448b70
xor eax, eax
jmp 0x448bbe
mov eax, 0x80
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0x448bd8
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x22d8]
push 0
push eax
call fcn.004534f0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0x1090]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x22d8], ax
inc ecx
cmp ecx, 0x40
jb 0x448c02
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x22d8]
push eax
call fcn.0045b800
add esp, 8
test eax, eax
je 0x448c49
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 1
jb 0x448c00
xor eax, eax
jmp 0x448c4e
mov eax, 0x100
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0x448c68
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x24e0]
push 0
push eax
call fcn.004534f0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0x1010]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x24e0], ax
inc ecx
cmp ecx, 0x40
jb 0x448c92
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x24e0]
push eax
call fcn.0045b800
add esp, 8
test eax, eax
je 0x448cd9
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 2
jb 0x448c90
xor eax, eax
jmp 0x448cde
mov eax, 0x200
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0x448cf8
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x26e8]
push 0
push eax
call fcn.004534f0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0xc10]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x26e8], ax
inc ecx
cmp ecx, 0x40
jb 0x448d22
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x26e8]
push eax
call fcn.0045b800
add esp, 8
test eax, eax
je 0x448d69
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 2
jb 0x448d20
xor eax, eax
jmp 0x448d6e
mov eax, 0x400
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x2b3c], edi
jb 0x448d88
mov eax, dword [edi]
mov dword [ebp - 0x2b3c], eax
push 0x208
lea eax, [ebp - 0x28f0]
push 0
push eax
call fcn.004534f0
add esp, 0xc
mov dword [ebp - 0x2b38], 0
lea esi, [ebp - 0x910]
nop
xor ecx, ecx
mov ax, word [esi]
add esi, 2
xor ax, 0x29
mov word [ebp + ecx*2 - 0x28f0], ax
inc ecx
cmp ecx, 0x40
jb 0x448db2
push dword [ebp - 0x2b3c]
lea eax, [ebp - 0x28f0]
push eax
call fcn.0045b800
add esp, 8
test eax, eax
je 0x448df9
mov eax, dword [ebp - 0x2b38]
inc eax
mov dword [ebp - 0x2b38], eax
cmp eax, 3
jb 0x448db0
xor eax, eax
jmp 0x448dfe
mov eax, 0x800
or dword [ebp - 0x2b40], eax
cmp dword [edi + 0x14], 8
jb 0x448e0c
mov edi, dword [edi]
push 0x208
lea eax, [ebp - 0x2b10]
push 0
push eax
call fcn.004534f0
add esp, 0xc
mov dword [ebp - 0x2b3c], 0
lea esi, [ebp - 0x310]
xor eax, eax
mov cx, word [esi]
add esi, 2
xor cx, 0x29
mov word [ebp + eax*2 - 0x2b10], cx
inc eax
cmp eax, 0x40
jb 0x448e34
lea eax, [ebp - 0x2b10]
push edi
push eax
call fcn.0045b800
add esp, 8
test eax, eax
je 0x448e76
mov ecx, dword [ebp - 0x2b3c]
inc ecx
mov dword [ebp - 0x2b3c], ecx
cmp ecx, 6
jb 0x448e32
xor eax, eax
jmp 0x448e7b
mov eax, 0x1000
mov esi, dword [ebp - 0x2b40]
or esi, eax
mov eax, dword [ebp - 0x2b4c]
inc eax
mov dword [ebp - 0x2b40], esi
mov dword [ebp - 0x2b4c], eax
cmp eax, dword [ebp - 0x2b5c]
jb 0x448730
mov edi, dword [ebp - 0x2b54]
cmp dword [ebp - 0x2b44], 0
je 0x448f07
mov edx, edi
mov edi, dword [ebp - 0x2b44]
push ecx
mov ecx, edi
call fcn.0044a030
mov ecx, dword [ebp - 0x2b48]
mov eax, 0x2aaaaaab
sub ecx, edi
add esp, 4
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, edi
shl ecx, 3
cmp ecx, 0x1000
jb 0x448efd
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448f24
push ecx
push edi
call fcn.00450fdf
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00450f99
mov esp, ebp
pop ebp
ret
call fcn.004561f9
int3