Function at 0x436c50
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Download url
Encode data using xor
Hash data using fnv
Manually build aes constants
Parse pe header
Receive data
Reference http user-agent string
Resolve function by fnv-1a hash
Resolve function by parsing pe exports
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a47d1
mov eax, dword fs:[0]
push eax
push ecx
push ebx
sub esp, 0x5d0
mov eax, dword [0x510140]
xor eax, ebp
mov dword [ebp - 0x24], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebx + 8]
lea ecx, [ebp - 0x198]
push dword [ebp - 0x36c]
mov dword [ebp - 0x32c], eax
xor eax, eax
mov dword [ebp - 0x388], eax
call fcn.004041d0
push 8
push str.C:1.wav
lea ecx, [ebp - 0x198]
mov dword [ebp - 4], 0
call fcn.004041f0
lea ecx, [ebp - 0x198]
mov dword [ebp - 4], 1
call fcn.004041c0
push 0
push 0
push eax
push str.https:__github.com_Kostyalll_1221_raw_main_1.wav
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
push 0x20009
push 0
push str.C:1.wav
call dword [sym.imp.WINMM.dll_PlaySoundA]
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x374], ecx
cmp ecx, edi
je 0x43a76d
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x43a76d
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
sub ecx, 4
dec edx
mov dword [ebp - 0x364], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x36c], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x43a759
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x436d75
cmp esi, 0x60ac7e39
jne 0x43a759
mov eax, dword [ebp - 0x374]
mov edx, dword [ebp - 0x364]
push 0
push 0
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edi
add eax, edi
push 0
push 0x402bc0
push 0
movzx eax, word [eax + edx*2]
push 0
mov eax, dword [ecx + eax*4]
add eax, edi
call eax
mov ecx, 0x513cc8
call fcn.00432400
push 0
push str.C:WindowsLogsDirectX_render.log
lea ecx, [ebp - 0x490]
call fcn.0043faa0
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 2
call fcn.00435a80
lea ecx, [ebp - 0x490]
mov byte [ebp - 0x366], al
mov byte [ebp - 4], 1
call fcn.004350a0
cmp byte [ebp - 0x366], 0
je 0x436e3f
push 0
push str.C:WindowsLogsDirectX_render.log
lea ecx, [ebp - 0x4a8]
call fcn.0043faa0
lea ecx, [ebp - 0x4a8]
mov byte [ebp - 4], 3
call fcn.00435b50
lea ecx, [ebp - 0x4a8]
mov byte [ebp - 4], 1
call fcn.004350a0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.00436010
test eax, eax
jne 0x436e73
push eax
push 0x503ee8
push str.Open_Loader_As_Administrator
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push dword [ebp - 0x36c]
lea ecx, [ebp - 0x1b0]
call fcn.004041d0
push 3
push 0x503f10
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 4
call fcn.004041f0
mov byte [ebp - 4], 5
call fcn.00435f70
call fcn.004360a0
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x436eba
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.00436100
mov byte [ebp - 0x3dc], 0x21
mov al, 0x45
mov dl, al
mov byte [ebp - 0x366], 0x4d
xor al, byte [ebp - 0x3dc]
mov cl, 0x12
xor cl, byte [ebp - 0x3dc]
mov ah, 0x18
mov byte [ebp - 0x3db], al
mov dh, dl
mov al, byte [ebp - 0x366]
mov ch, 0xf
mov byte [ebp - 0x3da], cl
mov cl, byte [ebp - 0x3dc]
xor al, cl
mov byte [ebp - 0x365], 0x4d
mov byte [ebp - 0x3d5], al
xor ah, cl
mov al, byte [ebp - 0x365]
xor dl, cl
xor ch, cl
mov byte [ebp - 0x3d8], ah
xor dh, cl
mov byte [ebp - 0x3d3], 0
xor al, cl
mov byte [ebp - 0x3d9], dl
mov byte [ebp - 0x3d4], al
mov eax, dword fs:[0x30]
mov byte [ebp - 0x3d7], ch
mov byte [ebp - 0x3d6], dh
mov byte [ebp - 0x3d3], 0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x374], ecx
cmp ecx, edi
je 0x43a752
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x43a752
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
sub ecx, 4
dec edx
mov dword [ebp - 0x364], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x36c], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x43a73e
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x436fa6
cmp esi, 0x53b2070f
jne 0x43a73e
mov eax, dword [ebp - 0x374]
mov edx, dword [ebp - 0x364]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edi
add eax, edi
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x3db]
add eax, edi
push ecx
call eax
mov al, 0x37
mov dword [ebp - 0x41c], 0x53045337
mov dword [ebp - 0x418], 0x3680e4f
xor ecx, ecx
mov dword [ebp - 0x414], 0x5b531904
mov word [ebp - 0x410], 0x5b
nop word [eax + eax]
xor byte [ebp + ecx - 0x41b], al
inc ecx
cmp ecx, 0xc
jae 0x437035
mov al, byte [ebp - 0x41c]
jmp 0x437020
mov eax, dword fs:[0x30]
mov byte [ebp - 0x40f], 0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x374], ecx
cmp ecx, edi
je 0x43a737
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x43a737
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
nop dword [eax]
sub ecx, 4
dec edx
mov dword [ebp - 0x364], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x36c], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x43a723
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4370a5
cmp esi, 0x53b2070f
jne 0x43a723
mov eax, dword [ebp - 0x374]
mov edx, dword [ebp - 0x364]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edi
add eax, edi
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x41b]
add eax, edi
push ecx
call eax
mov al, 7
mov dword [ebp - 0x434], 0x494e5f07
mov dword [ebp - 0x430], 0x36535257
xor ecx, ecx
mov dword [ebp - 0x42c], 0x63293458
mov word [ebp - 0x428], 0x6b6b
mov byte [ebp - 0x426], 0
xor byte [ebp + ecx - 0x433], al
inc ecx
cmp ecx, 0xd
jae 0x437135
mov al, byte [ebp - 0x434]
jmp 0x437120
mov eax, dword fs:[0x30]
mov byte [ebp - 0x426], 0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x374], ecx
cmp ecx, edi
je 0x43a71c
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x43a71c
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
nop dword [eax]
sub ecx, 4
dec edx
mov dword [ebp - 0x364], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x36c], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x43a708
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4371a5
cmp esi, 0x53b2070f
jne 0x43a708
mov eax, dword [ebp - 0x374]
mov edx, dword [ebp - 0x364]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edi
add eax, edi
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x433]
add eax, edi
push ecx
call eax
mov byte [ebp - 0x400], 0x5f
mov al, 0x31
xor al, byte [ebp - 0x400]
mov cl, 0x2b
xor cl, byte [ebp - 0x400]
mov dl, 0x3b
mov byte [ebp - 0x3ff], al
mov ah, 0x33
mov byte [ebp - 0x3fe], cl
mov ch, ah
mov cl, byte [ebp - 0x400]
mov dh, 0x71
mov byte [ebp - 0x365], dl
xor ch, cl
mov al, byte [ebp - 0x365]
xor dl, cl
xor al, cl
mov byte [ebp - 0x366], ah
mov byte [ebp - 0x3f9], al
xor dh, cl
mov al, byte [ebp - 0x366]
xor al, cl
mov byte [ebp - 0x35d], ah
mov byte [ebp - 0x3f8], al
xor ah, cl
mov al, byte [ebp - 0x35d]
xor al, cl
mov byte [ebp - 0x3fc], ah
mov byte [ebp - 0x3f7], al
mov eax, dword fs:[0x30]
mov byte [ebp - 0x3f6], 0
mov byte [ebp - 0x3fd], dl
mov byte [ebp - 0x3fb], ch
mov byte [ebp - 0x3fa], dh
mov byte [ebp - 0x3f6], 0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x374], ecx
cmp ecx, edi
je 0x43a701
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x43a701
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
sub ecx, 4
dec edx
mov dword [ebp - 0x364], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x36c], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x43a6ed
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4372e7
cmp esi, 0x53b2070f
jne 0x43a6ed
mov eax, dword [ebp - 0x374]
mov edx, dword [ebp - 0x364]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edi
add eax, edi
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x3ff]
add eax, edi
push ecx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x374], ecx
cmp ecx, edi
je 0x43a6e6
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x43a6e6
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
nop dword [eax]
sub ecx, 4
dec edx
mov dword [ebp - 0x364], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x36c], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x43a6d2
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x437395
cmp esi, 0xb26629a5
jne 0x43a6d2
mov eax, dword [ebp - 0x374]
mov edx, dword [ebp - 0x364]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edi
add eax, edi
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, edi
call eax
mov ecx, dword fs:[0x30]
mov dword [ebp - 0x39c], eax
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0xc]
nop word [eax + eax]
mov edi, dword [ecx + 0x18]
mov edx, dword [edi + 0x3c]
mov eax, dword [edx + edi + 0x78]
add eax, edi
mov dword [ebp - 0x374], eax
cmp eax, edi
je 0x43a6cb
mov edx, dword [eax + 0x18]
test edx, edx
je 0x43a6cb
mov eax, dword [eax + 0x20]
lea eax, [eax + edx*4]
add eax, edi
nop dword [eax]
sub eax, 4
dec edx
mov dword [ebp - 0x364], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x36c], eax
mov edx, dword [eax]
mov al, byte [edx + edi]
add edx, edi
inc edx
test al, al
je 0x43a6b7
movsx eax, al
lea edx, [edx + 1]
xor eax, esi
imul esi, eax, 0x1000193
mov al, byte [edx - 1]
test al, al
jne 0x437445
cmp esi, 0x1a4f5149
jne 0x43a6b7
mov eax, dword [ebp - 0x374]
mov edx, dword [ebp - 0x364]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edi
add eax, edi
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x1ec]
push ecx
push dword [ebp - 0x39c]
add eax, edi
call eax
mov eax, dword [ebp - 0x1e4]
mov ch, 0x5e
cdq
mov cl, 0x4b
sub eax, edx
mov byte [ebp - 0x3ac], 0x2a
sar eax, 1
sub eax, 0xc8
mov byte [ebp - 0x35d], ch
mov dword [ebp - 0x330], 0
mov dword [ebp - 0x35c], 0x30
mov dword [ebp - 0x354], 0x436820
movd xmm0, eax
mov eax, dword [ebp - 0x1e0]
cdq
sub eax, edx
mov dword [ebp - 0x358], 3
sar eax, 1
mov dl, 0x59
sub eax, 0xc8
mov byte [ebp - 0x3a4], 0
cvtdq2ps xmm0, xmm0
mov dh, 0x4f
mov byte [ebp - 0x3a4], 0
movss dword [0x513e28], xmm0
movd xmm0, eax
xor eax, eax
mov dword [ebp - 0x39c], eax
xor al, al
mov dword [ebp - 0x3a0], eax
mov byte [ebp - 0x366], al
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x348], eax
mov al, 0x7a
xor al, byte [ebp - 0x3ac]
mov ah, 0x42
mov byte [ebp - 0x3ab], al
mov al, byte [ebp - 0x3ac]
xor cl, al
xor dl, al
xor ah, al
mov byte [ebp - 0x3aa], cl
xor ch, al
mov byte [ebp - 0x3a8], ah
xor dh, al
mov byte [ebp - 0x3a9], dl
mov al, byte [ebp - 0x35d]
xor al, byte [ebp - 0x3ac]
cvtdq2ps xmm0, xmm0
mov byte [ebp - 0x3a5], al
lea eax, [ebp - 0x3ab]
mov dword [ebp - 0x334], eax
mov eax, dword fs:[0x30]
mov byte [ebp - 0x3a7], ch
mov byte [ebp - 0x3a6], dh
movss dword [0x513e2c], xmm0
xorps xmm0, xmm0
movlpd qword [ebp - 0x350], xmm0
movlpd qword [ebp - 0x344], xmm0
movlpd qword [ebp - 0x33c], xmm0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x374], ecx
cmp ecx, edi
je 0x43a6b0
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x43a6b0
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
nop
sub ecx, 4
dec edx
mov dword [ebp - 0x364], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x36c], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x43a69c
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x437615
cmp esi, 0xeca33424
jne 0x43a69c
mov eax, dword [ebp - 0x374]
mov edx, dword [ebp - 0x364]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edi
add eax, edi
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x35c]
add eax, edi
push ecx
call eax
test ax, ax
jne 0x437822
movaps xmm0, xmmword [0x505980]
mov al, 0x3e
mov byte [ebp - 0x9c], 0x6e
mov ch, 0x1a
xor al, byte [ebp - 0x9c]
mov cl, 0xf
mov byte [ebp - 0x9b], al
mov dl, 0x1d
mov al, byte [ebp - 0x9c]
mov ah, 6
mov byte [ebp - 0x35d], ch
xor cl, al
xor dl, al
mov byte [ebp - 0x94], 0
xor ah, al
mov byte [ebp - 0x9a], cl
xor ch, al
mov byte [ebp - 0x99], dl
mov dh, 0xb
mov byte [ebp - 0x97], ch
xor dh, al
mov byte [ebp - 0x98], ah
mov al, byte [ebp - 0x35d]
xor al, byte [ebp - 0x9c]
xor ecx, ecx
mov byte [ebp - 0x96], dh
mov byte [ebp - 0x95], al
mov byte [ebp - 0x94], 0
movups xmmword [ebp - 0xc0], xmm0
mov dword [ebp - 0xb0], 0x2e24233d
mov word [ebp - 0xac], 0x3d25
mov byte [ebp - 0xaa], 0
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ebp - 0xc0]
xor byte [ebp + ecx - 0xbf], al
inc ecx
cmp ecx, 0x15
jb 0x437710
mov eax, dword fs:[0x30]
mov byte [ebp - 0xaa], 0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x374], ecx
cmp ecx, edi
je 0x4377ae
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x4377ae
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
nop dword [eax + eax]
sub ecx, 4
dec edx
mov dword [ebp - 0x388], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x364], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x43779e
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x437781
cmp esi, 0x23a979e4
je 0x4377b2
mov edx, dword [ebp - 0x388]
mov ecx, dword [ebp - 0x364]
test edx, edx
jne 0x437760
mov eax, dword [eax]
jmp 0x437736
mov edx, dword [ebp - 0x374]
mov ecx, dword [ebp - 0x388]
push 0
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
lea ecx, [ebp - 0x9b]
push ecx
lea ecx, [ebp - 0xbf]
mov eax, dword [eax + edi]
push ecx
add eax, edi
push 0
call eax
lea ecx, [ebp - 0x1b0]
call fcn.00404120
lea ecx, [ebp - 0x198]
call fcn.00404120
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.004a1871
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
mov byte [ebp - 0x3b8], 0x2b
mov al, 0x7b
xor al, byte [ebp - 0x3b8]
mov ch, 0x5f
mov byte [ebp - 0x3b7], al
mov ah, 0x43
mov al, byte [ebp - 0x3b8]
mov cl, 0x4a
xor cl, al
mov byte [ebp - 0x35d], ch
xor ah, al
mov byte [ebp - 0x3b0], 0
xor ch, al
mov byte [ebp - 0x3b4], ah
mov dl, 0x58
mov byte [ebp - 0x3b6], cl
xor dl, al
mov byte [ebp - 0x3b3], ch
mov dh, 0x4e
mov byte [ebp - 0x3b5], dl
xor dh, al
mov byte [ebp - 0x3b0], 0
mov al, byte [ebp - 0x35d]
xor al, byte [ebp - 0x3b8]
mov byte [ebp - 0x3b1], al
mov eax, dword fs:[0x30]
mov byte [ebp - 0x3b2], dh
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x374], ecx
cmp ecx, edi
je 0x43a695
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x43a695
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
nop
sub ecx, 4
dec edx
mov dword [ebp - 0x364], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x36c], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x43a681
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4378f5
cmp esi, 0x177258eb
jne 0x43a681
mov eax, dword [ebp - 0x374]
mov edx, dword [ebp - 0x364]
push 0
push dword [ebp - 0x348]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edi
push 0
push 0
push 0x190
add eax, edi
push 0x190
push 0xa
push 0xa
movzx eax, word [eax + edx*2]
push connect
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x3b7]
push ecx
push dword [ebp - 0x334]
add eax, edi
push 0
call eax
mov dword [ebp - 0x32c], eax
test eax, eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
jne 0x437ba2
nop
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x374], ecx
cmp ecx, edi
je 0x4379f3
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x4379f3
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
sub ecx, 4
dec edx
mov dword [ebp - 0x388], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x364], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x4379e3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4379c6
cmp esi, 0x5e93403c
je 0x4379f7
mov edx, dword [ebp - 0x388]
mov ecx, dword [ebp - 0x364]
test edx, edx
jne 0x4379a5
mov eax, dword [eax]
jmp 0x437980
mov edx, dword [ebp - 0x374]
mov ecx, dword [ebp - 0x388]
push dword [ebp - 0x348]
mov eax, dword [edx + 0x24]
push dword [ebp - 0x334]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
movaps xmm0, xmmword [str.eBJOFG]
mov al, 0x4c
mov byte [ebp - 0x9c], 0x1c
mov ch, 0x68
xor al, byte [ebp - 0x9c]
mov cl, 0x7d
mov byte [ebp - 0x9b], al
mov dl, 0x6f
mov al, byte [ebp - 0x9c]
mov ah, 0x74
mov byte [ebp - 0x35d], ch
xor cl, al
xor dl, al
mov byte [ebp - 0x94], 0
xor ah, al
mov byte [ebp - 0x9a], cl
xor ch, al
mov byte [ebp - 0x99], dl
mov dh, 0x79
mov byte [ebp - 0x97], ch
xor dh, al
mov byte [ebp - 0x98], ah
mov al, byte [ebp - 0x35d]
xor al, byte [ebp - 0x9c]
xor ecx, ecx
mov byte [ebp - 0x96], dh
mov byte [ebp - 0x95], al
mov byte [ebp - 0x94], 0
movups xmmword [ebp - 0xc0], xmm0
mov dword [ebp - 0xb0], 0x474d4a54
mov word [ebp - 0xac], 0x544c
mov byte [ebp - 0xaa], 0
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp - 0xc0]
xor byte [ebp + ecx - 0xbf], al
inc ecx
cmp ecx, 0x15
jb 0x437ad0
mov eax, dword fs:[0x30]
mov byte [ebp - 0xaa], 0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x374], ecx
cmp ecx, edi
je 0x437b6e
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x437b6e
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
nop dword [eax + eax]
sub ecx, 4
dec edx
mov dword [ebp - 0x388], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x364], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x437b5e
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x437b41
cmp esi, 0x23a979e4
je 0x437b72
mov edx, dword [ebp - 0x388]
mov ecx, dword [ebp - 0x364]
test edx, edx
jne 0x437b20
mov eax, dword [eax]
jmp 0x437af6
mov edx, dword [ebp - 0x374]
mov ecx, dword [ebp - 0x388]
push 0
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
lea ecx, [ebp - 0x9b]
push ecx
lea ecx, [ebp - 0xbf]
jmp 0x4377dd
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x374], ecx
cmp ecx, edi
je 0x43a67a
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x43a67a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
nop
sub ecx, 4
dec edx
mov dword [ebp - 0x364], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x36c], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x43a666
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x437bf5
cmp esi, 0x8f360cf6
jne 0x43a666
mov eax, dword [ebp - 0x374]
mov edx, dword [ebp - 0x364]
push 0x20
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edi
add eax, edi
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, edi
call eax
mov dword [0x513c3c], eax
test eax, eax
jne 0x437e82
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x374], ecx
cmp ecx, edi
je 0x437cce
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x437cce
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
nop word [eax + eax]
sub ecx, 4
dec edx
mov dword [ebp - 0x388], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x364], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x437cbe
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x437ca1
cmp esi, 0x5e93403c
je 0x437cd2
mov edx, dword [ebp - 0x388]
mov ecx, dword [ebp - 0x364]
test edx, edx
jne 0x437c80
mov eax, dword [eax]
jmp 0x437c52
mov edx, dword [ebp - 0x374]
mov ecx, dword [ebp - 0x388]
push dword [ebp - 0x348]
mov eax, dword [edx + 0x24]
push dword [ebp - 0x334]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
movaps xmm0, xmmword [0x5058e0]
mov al, 0x21
mov byte [ebp - 0x9c], 0x71
mov ch, 5
xor al, byte [ebp - 0x9c]
mov cl, 0x10
mov byte [ebp - 0x9b], al
mov dl, 2
mov al, byte [ebp - 0x9c]
mov ah, 0x19
mov byte [ebp - 0x35d], ch
xor cl, al
xor dl, al
mov byte [ebp - 0x94], 0
xor ah, al
mov byte [ebp - 0x9a], cl
xor ch, al
mov byte [ebp - 0x99], dl
mov dh, 0x14
mov byte [ebp - 0x97], ch
xor dh, al
mov byte [ebp - 0x98], ah
mov al, byte [ebp - 0x35d]
xor al, byte [ebp - 0x9c]
xor ecx, ecx
mov byte [ebp - 0x96], dh
mov byte [ebp - 0x95], al
mov byte [ebp - 0x94], 0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd0], 0x3d2e2b26
mov dword [ebp - 0xcc], 0x2e036722
mov dword [ebp - 0xc8], 0x33242235
mov word [ebp - 0xc4], 0x1f
nop dword [eax + eax]
mov al, byte [ebp - 0xe0]
xor byte [ebp + ecx - 0xdf], al
inc ecx
cmp ecx, 0x1c
jb 0x437db0
mov eax, dword fs:[0x30]
mov byte [ebp - 0xc3], 0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x374], ecx
cmp ecx, edi
je 0x437e4e
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x437e4e
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
nop dword [eax + eax]
sub ecx, 4
dec edx
mov dword [ebp - 0x388], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x364], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x437e3e
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x437e21
cmp esi, 0x23a979e4
je 0x437e52
mov edx, dword [ebp - 0x388]
mov ecx, dword [ebp - 0x364]
test edx, edx
jne 0x437e00
mov eax, dword [eax]
jmp 0x437dd6
mov edx, dword [ebp - 0x374]
mov ecx, dword [ebp - 0x388]
push 0
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
lea ecx, [ebp - 0x9b]
push ecx
lea ecx, [ebp - 0xdf]
jmp 0x4377dd
mov dword [ebp - 0x370], 0xcb5e953b
mov dword [ebp - 0x36c], 0xe89f8f49
mov eax, dword [ebp - 0x370]
mov ecx, dword [ebp - 0x36c]
mov dword [ebp - 0x45c], ecx
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x370], 0x18c8fb25
mov dword [ebp - 0x36c], 0x2d69b088
mov eax, dword [ebp - 0x370]
mov ecx, dword [ebp - 0x36c]
mov dword [ebp - 0x454], ecx
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x370], 0xa56de24d
mov dword [ebp - 0x36c], 0x8decb67f
mov eax, dword [ebp - 0x370]
mov ecx, dword [ebp - 0x36c]
mov dword [ebp - 0x370], 0x6cb18c46
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x36c], 0x2d69b0ee
mov eax, dword [ebp - 0x370]
mov ecx, dword [ebp - 0x36c]
movaps xmm1, xmmword [ebp - 0x460]
push dword [ebp - 0x36c]
mov dword [ebp - 0x84], ecx
lea ecx, [ebp - 0x204]
mov dword [ebp - 0x88], eax
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0x460], xmm1
call fcn.004041d0
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 6
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437f65
sub ecx, edx
lea eax, [ebp - 0x460]
push ecx
push eax
lea ecx, [ebp - 0x204]
call fcn.004041f0
mov byte [ebp - 4], 7
xorps xmm0, xmm0
movlpd qword [0x513c04], xmm0
movlpd qword [0x513c10], xmm0
mov dword [0x513c18], 0
mov dword [0x513c20], 0
movlpd qword [0x513c30], xmm0
mov dword [0x513c24], 1
mov dword [0x513c1c], 1
mov dword [0x513c0c], 0
mov dword [0x513c28], 1
mov dword [0x513c2c], 0x50
mov dword [0x513c38], 1
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov ecx, dword [0x513c3c]
mov edi, dword [ebp - 0x32c]
push 0x513c40
push 0x513c04
mov eax, dword [ecx]
push 0x40
push edi
push 1
push 0
push ecx
call dword [eax + 0x40]
test eax, eax
jns 0x438101
mov eax, dword [0x513c3c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x374], ecx
cmp ecx, edi
je 0x4380be
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x4380be
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
nop dword [eax + eax]
sub ecx, 4
dec edx
mov dword [ebp - 0x388], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x364], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x4380ae
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x438091
cmp esi, 0x5e93403c
je 0x4380c2
mov edx, dword [ebp - 0x388]
mov ecx, dword [ebp - 0x364]
test edx, edx
jne 0x438070
mov eax, dword [eax]
jmp 0x438043
mov edx, dword [ebp - 0x374]
mov ecx, dword [ebp - 0x388]
push dword [ebp - 0x348]
mov eax, dword [edx + 0x24]
push dword [ebp - 0x334]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
lea ecx, [ebp - 0x204]
call fcn.00404120
jmp 0x4377e7
xor ecx, ecx
call fcn.004083d0
mov esi, dword [0x513c00]
movss xmm3, dword [0x50571c]
push 0
push 0
mov ecx, dword [esi + 0x98]
push 0x19681
push 0x4b9a68
call fcn.004200b0
movss xmm3, dword [0x505728]
mov ecx, dword [esi + 0x98]
push 0
push 0
push 0x30840
push 0x4d30f8
call fcn.00420030
mov ecx, edi
mov dword [ebp - 0x374], eax
call fcn.00424560
mov ecx, dword [0x513c40]
call fcn.00424270
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x378], ecx
cmp ecx, edi
je 0x43a65f
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x43a65f
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
sub ecx, 4
dec edx
mov dword [ebp - 0x364], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x36c], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x43a64b
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4381d7
cmp esi, 0xc98b9e00
jne 0x43a64b
mov eax, dword [ebp - 0x378]
mov edx, dword [ebp - 0x364]
push 5
push dword [ebp - 0x32c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edi
add eax, edi
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, edi
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x364], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x378], ecx
cmp ecx, esi
je 0x43a644
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43a644
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x36c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x43a633
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x438282
cmp esi, 0x8bc7bca8
jne 0x43a633
mov eax, dword [ebp - 0x378]
mov edx, dword [ebp - 0x364]
push dword [ebp - 0x32c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov esi, dword [0x513c00]
lea ecx, [ebp - 0x5b8]
push 0xc8
push 0xff
push 0xff
push 0xff
mov dword [esi + 0x1548], 0x41000000
mov dword [esi + 0x154c], 0x40800000
mov dword [esi + 0x1578], 0x41600000
mov dword [esi + 0x1580], 0x41000000
mov dword [esi + 0x1520], 0x3f000000
mov dword [esi + 0x1544], 0
mov dword [esi + 0x1554], 0
mov dword [esi + 0x151c], 0
mov dword [esi + 0x1550], 0
mov dword [esi + 0x1540], 0
mov dword [esi + 0x157c], 0x41100000
mov dword [esi + 0x1584], 0x41400000
mov dword [esi + 0x1588], 0x40800000
call fcn.00434930
push 0xff
push 0x14
push 0x14
movups xmm0, xmmword [eax]
push 0x14
lea ecx, [ebp - 0x5c8]
movups xmmword [esi + 0x15c4], xmm0
call fcn.00434930
push 0xff
push 0x3c
push 0x3c
movups xmm0, xmmword [eax]
push 0x3c
lea ecx, [ebp - 0x4d8]
movups xmmword [esi + 0x15e4], xmm0
call fcn.00434930
push 0xff
push 0x1e
push 0x1e
movups xmm0, xmmword [eax]
push 0x1e
lea ecx, [ebp - 0x4e8]
movups xmmword [esi + 0x15f4], xmm0
call fcn.00434930
push 0xff
push 0x19
push 0x19
movups xmm0, xmmword [eax]
push 0x19
lea ecx, [ebp - 0x4f8]
movups xmmword [esi + 0x1604], xmm0
call fcn.00434930
push 0xc8
push 0xaa
push 0x84
movups xmm0, xmmword [eax]
push 0x82
lea ecx, [ebp - 0x508]
movups xmmword [esi + 0x1634], xmm0
call fcn.00434930
push 0xff
push 0xaa
push 0x84
movups xmm0, xmmword [eax]
push 0x82
lea ecx, [ebp - 0x518]
movups xmmword [esi + 0x1644], xmm0
call fcn.00434930
movups xmm0, xmmword [eax]
movups xmmword [esi + 0x1654], xmm0
lea ecx, [ebp - 0x528]
call fcn.00434910
push 0x96
push 0xaa
push 0x84
movups xmm0, xmmword [eax]
push 0x82
lea ecx, [ebp - 0x538]
movups xmmword [esi + 0x16a4], xmm0
call fcn.00434930
push 0xc8
push 0xaa
push 0x84
movups xmm0, xmmword [eax]
push 0x82
lea ecx, [ebp - 0x548]
movups xmmword [esi + 0x16b4], xmm0
call fcn.00434930
push 0xff
push 0xaa
push 0x84
movups xmm0, xmmword [eax]
push 0x82
lea ecx, [ebp - 0x558]
movups xmmword [esi + 0x16c4], xmm0
call fcn.00434930
push 0xc8
push 0xaa
push 0x84
movups xmm0, xmmword [eax]
push 0x82
lea ecx, [ebp - 0x568]
movups xmmword [esi + 0x16d4], xmm0
call fcn.00434930
push 0xff
push 0xaa
push 0x84
movups xmm0, xmmword [eax]
push 0x82
lea ecx, [ebp - 0x578]
movups xmmword [esi + 0x16f4], xmm0
call fcn.00434930
push 0xff
push 0x19
push 0x19
movups xmm0, xmmword [eax]
push 0x19
lea ecx, [ebp - 0x588]
movups xmmword [esi + 0x1704], xmm0
call fcn.00434930
push 0xc8
push 0xaa
push 0x84
movups xmm0, xmmword [eax]
push 0x82
lea ecx, [ebp - 0x598]
movups xmmword [esi + 0x1714], xmm0
call fcn.00434930
push 0xff
push 0xaa
push 0x84
movups xmm0, xmmword [eax]
push 0x82
lea ecx, [ebp - 0x5a8]
movups xmmword [esi + 0x1724], xmm0
call fcn.00434930
push 0xff
push 0x19
push 0x19
movups xmm0, xmmword [eax]
push 0x19
lea ecx, [ebp - 0x4b8]
movups xmmword [esi + 0x1734], xmm0
call fcn.00434930
push 0xc8
push 0xaa
push 0x84
movups xmm0, xmmword [eax]
push 0x82
lea ecx, [ebp - 0x5d8]
movups xmmword [esi + 0x1744], xmm0
call fcn.00434930
push 0xff
push 0xaa
push 0x84
movups xmm0, xmmword [eax]
push 0x82
lea ecx, [ebp - 0x4c8]
movups xmmword [esi + 0x1754], xmm0
call fcn.00434930
movups xmm0, xmmword [eax]
mov eax, dword fs:[0x30]
movups xmmword [esi + 0x1764], xmm0
mov dword [ebp - 0x1b4], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1cc], xmm0
movq qword [ebp - 0x1bc], xmm0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x378], ecx
cmp ecx, edi
je 0x43a62c
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x43a62c
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
nop dword [eax]
sub ecx, 4
dec edx
mov dword [ebp - 0x364], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x36c], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x43a618
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x438695
cmp esi, 0x1bad7009
jne 0x43a618
mov eax, dword [ebp - 0x378]
mov edx, dword [ebp - 0x364]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edi
add eax, edi
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x124]
add eax, edi
push ecx
call eax
mov dword [ebp - 0x370], 0xd5199625
mov dword [ebp - 0x36c], 0x8decb67f
mov eax, dword [ebp - 0x370]
mov ecx, dword [ebp - 0x36c]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x370], 0x6cb18c46
mov dword [ebp - 0x36c], 0x2d69b0ee
mov eax, dword [ebp - 0x370]
mov ecx, dword [ebp - 0x36c]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0x370], 0xa56de24d
mov dword [ebp - 0x36c], 0x8decb67f
mov eax, dword [ebp - 0x370]
mov ecx, dword [ebp - 0x36c]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x370], 0x6cb18c46
mov dword [ebp - 0x36c], 0x2d69b0ee
mov eax, dword [ebp - 0x370]
mov ecx, dword [ebp - 0x36c]
movaps xmm1, xmmword [ebp - 0x180]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x180]
mov dword [ebp - 0xb4], ecx
lea ecx, [ebp - 0x328]
xorps xmm1, xmmword [ebp - 0xc0]
push eax
movaps xmmword [ebp - 0x180], xmm1
call fcn.00404180
mov byte [ebp - 4], 8
nop dword [eax]
cmp dword [ebp - 0x1c8], 0x12
je 0x43a3eb
mov eax, dword [0x513e90]
test eax, eax
jne 0x438892
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x36c], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x364], ecx
cmp ecx, esi
je 0x43886a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43886a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax + eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x378], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x43885d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x438840
cmp esi, 0x2706d4d4
je 0x43886e
mov ecx, dword [ebp - 0x378]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x438820
mov eax, dword [eax]
jmp 0x4387f0
mov eax, dword [ebp - 0x364]
mov edx, dword [ebp - 0x36c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
mov dword [0x513e90], eax
push 1
push 0
push 0
push 0
lea ecx, [ebp - 0x1cc]
push ecx
call eax
test eax, eax
je 0x438a42
mov eax, dword [0x513e80]
test eax, eax
jne 0x438964
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x364], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x378], ecx
cmp ecx, esi
je 0x43893a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43893a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x36c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x43892d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x438910
cmp esi, 0xe2f28554
je 0x43893e
mov ecx, dword [ebp - 0x36c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4388f0
mov eax, dword [eax]
jmp 0x4388c4
mov esi, dword [ebp - 0x378]
mov edx, dword [ebp - 0x364]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x513e80], eax
lea ecx, [ebp - 0x1cc]
push ecx
call eax
mov eax, dword [0x513ea0]
test eax, eax
jne 0x438a34
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x364], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x378], ecx
cmp ecx, esi
je 0x438a0a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x438a0a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax + eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x36c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4389fd
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4389e0
cmp esi, 0x1b39d169
je 0x438a0e
mov ecx, dword [ebp - 0x36c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4389c0
mov eax, dword [eax]
jmp 0x438990
mov esi, dword [ebp - 0x378]
mov edx, dword [ebp - 0x364]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x513ea0], eax
lea ecx, [ebp - 0x1cc]
push ecx
call eax
jmp 0x4387c0
cmp dword [0x513e00], 0
jne 0x438a59
cmp dword [0x513e08], 0
je 0x438a59
call fcn.004242a0
call fcn.00424a10
call fcn.00409590
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov esi, dword [0x513e9c]
test esi, esi
jne 0x438b33
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x364], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x378], ecx
cmp ecx, esi
je 0x438b0a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x438b0a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax + eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x36c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x438afd
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x438ae0
cmp esi, 0x83b8d5ab
je 0x438b0e
mov ecx, dword [ebp - 0x36c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x438ac0
mov eax, dword [eax]
jmp 0x438a90
mov eax, dword [ebp - 0x378]
mov edx, dword [ebp - 0x364]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov esi, dword [ecx + eax*4]
add esi, edx
mov dword [0x513e9c], esi
cvttss2si ecx, dword [0x513e2c]
push 0
push 0xeb
push 0x190
cvttss2si eax, dword [0x513e28]
push ecx
push eax
push 0
push dword [ebp - 0x32c]
call esi
mov eax, dword [0x513c00]
or dword [eax + 0x1a78], 3
mov dword [eax + 0x1a98], 0x43c80000
mov dword [eax + 0x1a9c], 0x436b0000
mov dword [eax + 0x1a80], 1
mov dword [eax + 0x1a88], 0
mov dword [eax + 0x1a8c], 0
mov dword [eax + 0x1a90], 0
mov dword [eax + 0x1a94], 0
mov dword [eax + 0x1a7c], 1
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov byte [ebp - 0x3c4], 6
mov al, 0x56
xor al, byte [ebp - 0x3c4]
mov ch, 0x72
mov byte [ebp - 0x3c3], al
mov cl, 0x67
mov al, byte [ebp - 0x3c4]
mov dl, 0x75
mov byte [ebp - 0x35d], ch
xor cl, al
xor dl, al
mov byte [ebp - 0x3c2], cl
xor ch, al
mov byte [ebp - 0x3c1], dl
mov ah, 0x6e
mov byte [ebp - 0x3bf], ch
mov dh, 0x63
mov byte [ebp - 0x3bc], 0
xor dh, al
mov byte [ebp - 0x3bc], 0
xor ah, al
mov byte [ebp - 0x3be], dh
mov al, byte [ebp - 0x35d]
lea ecx, [ebp - 0x3c3]
xor al, byte [ebp - 0x3c4]
xor edx, edx
push 0x13f
mov byte [ebp - 0x3c0], ah
mov byte [ebp - 0x3bd], al
call fcn.0040d500
mov edi, dword [ebp - 0x39c]
add esp, 4
test edi, edi
jne 0x438db1
push edi
push str.C:WindowsPashtetUserDatauserdata.txt
lea ecx, [ebp - 0x114]
call fcn.0043fad0
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 9
call fcn.00435a80
lea ecx, [ebp - 0x114]
mov byte [ebp - 0x35d], al
mov byte [ebp - 4], 8
call fcn.004350a0
cmp byte [ebp - 0x35d], 0
je 0x438da2
push 0xc0
lea eax, [ebp - 0x310]
push edi
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x310]
push 1
push 0x40
push 1
push str.C:WindowsPashtetUserDatauserdata.txt
call fcn.0043b680
push dword [ebp - 0x36c]
lea ecx, [ebp - 0xfc]
call fcn.004041d0
lea ecx, [ebp - 0xfc]
call fcn.00436620
push edi
lea edx, [ebp - 0xfc]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x310]
call fcn.00444590
add esp, 4
lea ecx, [ebp - 0x310]
call fcn.0043b5a0
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0xc
call fcn.004041c0
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00404180
mov ecx, 0x513cc8
call fcn.00433420
mov dword [ebp - 0x39c], 2
mov dword [ebp - 4], 0xb
jmp 0x438d77
lea ecx, [ebp - 0xfc]
call fcn.00404120
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 8
call fcn.0043b5d0
lea ecx, [ebp - 0x298]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
jmp 0x439fff
mov dword [ebp - 0x39c], 1
jmp 0x439fff
cmp edi, 1
jne 0x4393db
movss xmm0, dword [0x50573c]
call fcn.0040feb0
mov ecx, dword [ebp - 0x374]
call fcn.0040ff90
call fcn.004269a0
mov edx, 0xffc32957
xor ecx, ecx
call fcn.004101b0
sub esp, 0x18
mov ecx, esp
push 0x503ee8
call fcn.00404180
call fcn.00436b10
add esp, 0x18
mov esi, edi
mov ecx, edi
call fcn.00410210
call fcn.004100d0
call fcn.004269f0
call fcn.004269f0
movaps xmm0, xmmword [str.lLL]
xor ecx, ecx
movups xmmword [ebp - 0xf4], xmm0
mov al, byte [ebp - 0xf4]
xor byte [ebp + ecx - 0xf3], al
inc ecx
cmp ecx, 0xe
jb 0x438e22
lea eax, [ebp - 0xf3]
mov byte [ebp - 0xe5], 0
push eax
call fcn.00425550
movss xmm1, dword [0x505778]
add esp, 4
movss xmm0, dword [0x505740]
call fcn.00410560
mov dh, 4
mov byte [ebp - 0x43e], 0
mov al, 0x27
mov byte [ebp - 0x444], dh
mov cl, al
mov byte [ebp - 0x43e], 0
push 0
mov ah, 0x61
mov dword [ebp - 0x478], 0
xor al, dh
mov dword [ebp - 0x474], 0
xor ah, dh
mov byte [ebp - 0x443], al
push 0
mov byte [ebp - 0x440], ah
mov dl, 0x4f
push 0
lea eax, [ebp - 0x478]
mov ch, 0x7d
xor cl, dh
xor ch, dh
push eax
xor dl, dh
mov byte [ebp - 0x442], cl
mov byte [ebp - 0x441], dl
xor edx, edx
mov byte [ebp - 0x43f], ch
lea ecx, [ebp - 0x443]
push 0x40
push 0x513e40
call fcn.00428260
add esp, 0x18
lea ecx, [ebp - 0x154]
push 0x513e40
call fcn.00404180
xor ecx, ecx
mov byte [ebp - 4], 0xe
call fcn.00407fd0
mov edx, dword [ebp - 0x3a0]
test al, al
movzx ecx, dl
cmovne ecx, esi
mov dword [ebp - 0x36c], ecx
call fcn.0040ff40
call fcn.004269f0
call fcn.004269f0
movss xmm0, dword [0x505738]
call fcn.00410440
mov dh, 0x3f
mov byte [ebp - 0x436], 0
mov cl, 0x50
mov byte [ebp - 0x43c], dh
mov dl, 0x58
mov dword [ebp - 0x470], 0
xor cl, dh
mov dword [ebp - 0x46c], 0
mov al, 0x73
mov byte [ebp - 0x43a], cl
mov ah, 0x56
mov byte [ebp - 0x436], 0
mov ch, 0x51
xor al, dh
xor dl, dh
mov byte [ebp - 0x43b], al
xor ah, dh
mov byte [ebp - 0x439], dl
xor ch, dh
mov byte [ebp - 0x438], ah
mov byte [ebp - 0x437], ch
lea edx, [ebp - 0x470]
push 0
lea ecx, [ebp - 0x43b]
call fcn.00425d70
add esp, 4
test al, al
je 0x43921b
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0xf
call fcn.004041c0
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00404180
mov ecx, 0x513cc8
call fcn.00433420
push 0
push str.C:WindowsPashtetUserDatauserdata.txt
lea ecx, [ebp - 0x114]
call fcn.0043fad0
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x10
call fcn.00435a80
lea ecx, [ebp - 0x114]
mov byte [ebp - 0x35d], al
mov byte [ebp - 4], 0xf
call fcn.004350a0
cmp byte [ebp - 0x35d], 0
push 0
jne 0x4390b6
push str.C:WindowsPashtetUserData
lea ecx, [ebp - 0xfc]
call fcn.0043fb00
push 0
push str.userdata.txt
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x11
call fcn.00444730
push eax
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x12
call fcn.00434bf0
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x11
call fcn.004350a0
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0xfc]
call fcn.00434f00
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00435e40
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x11
call fcn.004350a0
push 0xb0
lea eax, [ebp - 0x300]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0xfc]
lea ecx, [ebp - 0x300]
push 1
push 0x40
push 2
push eax
call fcn.0043fb30
mov byte [ebp - 4], 0x14
jmp 0x4391cc
push str.C:WindowsPashtetUserDatauserdata.txt
lea ecx, [ebp - 0x114]
call fcn.0043fad0
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x15
call fcn.00435a80
lea ecx, [ebp - 0x114]
mov byte [ebp - 0x35d], al
mov byte [ebp - 4], 0xf
call fcn.004350a0
cmp byte [ebp - 0x35d], 0
je 0x43920a
push 0
push str.C:WindowsPashtetUserDatauserdata.txt
lea ecx, [ebp - 0x114]
call fcn.0043fad0
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x16
call fcn.00435b50
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0xf
call fcn.004350a0
push 0
push str.C:WindowsPashtetUserData
lea ecx, [ebp - 0xfc]
call fcn.0043fb00
push 0
push str.userdata.txt
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x17
call fcn.00444730
push eax
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x18
call fcn.00434bf0
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x17
call fcn.004350a0
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0xfc]
call fcn.00434f00
mov ecx, eax
mov byte [ebp - 4], 0x19
call fcn.00435e40
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x17
call fcn.004350a0
push 0xb0
lea eax, [ebp - 0x300]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0xfc]
lea ecx, [ebp - 0x300]
push 1
push 0x40
push 2
push eax
call fcn.0043fb30
mov byte [ebp - 4], 0x1a
lea edx, [ebp - 0x154]
lea ecx, [ebp - 0x300]
call fcn.0043f910
lea ecx, [ebp - 0x300]
call fcn.0043a9c0
lea ecx, [ebp - 0x298]
call fcn.0043a9f0
lea ecx, [ebp - 0x298]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0xfc]
call fcn.004350a0
mov dword [ebp - 0x39c], 2
mov dword [ebp - 4], 0xe
xor ecx, ecx
call fcn.00407fd0
mov ecx, dword [ebp - 0x36c]
test al, al
movzx ecx, cl
cmovne ecx, esi
mov dword [ebp - 0x3a0], ecx
lea ecx, [ebp - 0x154]
jmp 0x439ff6
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
cmp edi, 2
jne 0x439fff
mov ecx, dword [ebp - 0x374]
call fcn.0040ff90
call fcn.004269a0
mov edx, 0xffc32957
xor ecx, ecx
call fcn.004101b0
sub esp, 0x18
mov ecx, esp
push 0x503ee8
call fcn.00404180
call fcn.00436b10
add esp, 0x18
mov esi, 1
mov ecx, esi
call fcn.00410210
call fcn.004100d0
push str.Welcome_back_user
lea ecx, [ebp - 0x114]
call fcn.00404180
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x1c
call fcn.004041c0
push ecx
mov dword [esp], 0xbf800000
lea ecx, [ebp - 0x1d4]
push 0
push 0
mov edx, eax
call fcn.0040b1a0
add esp, 0xc
call fcn.004269f0
movss xmm1, dword [ebp - 0x1d4]
mulss xmm1, dword [0x5056a4]
movss xmm0, dword [0x505744]
subss xmm0, xmm1
call fcn.00410440
lea ecx, [ebp - 0x114]
call fcn.004041c0
push eax
call fcn.00425550
mov eax, dword [0x513d60]
add esp, 4
movups xmm0, xmmword [0x513d40]
mov dword [ebp - 0xc4], eax
lea eax, [ebp - 0xe4]
push eax
movups xmmword [ebp - 0xe4], xmm0
push str._a__m__d__y__H:_M:_S__Z
movups xmm0, xmmword [0x513d50]
lea eax, [ebp - 0x78]
push 0x50
push eax
movups xmmword [ebp - 0xd4], xmm0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
add esp, 0x10
lea eax, [ebp - 0x78]
lea ecx, [ebp - 0x13c]
push eax
call fcn.00404180
mov edi, dword [ebp - 0x388]
or edi, 0x20000
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x1d
call fcn.004041c0
push eax
lea ecx, [ebp - 0x24c]
call fcn.00404180
lea eax, [ebp - 0x389]
mov byte [ebp - 4], 0x1e
push eax
push 0x15
push 0
lea eax, [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x234]
call fcn.0043e480
or edi, 0x40000
mov dword [ebp - 0x388], edi
lea eax, [ebp - 0x234]
mov byte [ebp - 4], 0x1f
push eax
lea eax, [ebp - 0x21c]
push str.Subscription_expires_on:
push eax
call fcn.0043ec10
add esp, 0xc
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x20
call fcn.004041c0
push ecx
mov dword [esp], 0xbf800000
lea ecx, [ebp - 0x1dc]
push 0
push 0
mov edx, eax
call fcn.0040b1a0
add esp, 0xc
call fcn.004269f0
movss xmm1, dword [ebp - 0x1dc]
mulss xmm1, dword [0x5056a4]
movss xmm0, dword [0x505744]
subss xmm0, xmm1
call fcn.00410440
lea ecx, [ebp - 0x21c]
call fcn.004041c0
push eax
call fcn.00425550
add esp, 4
lea eax, [ebp - 0xfc]
push 0x510300
push str.Version:
push eax
call fcn.0043ec10
add esp, 0xc
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x21
call fcn.004041c0
push ecx
mov dword [esp], 0xbf800000
lea ecx, [ebp - 0x9c]
push 0
push 0
mov edx, eax
call fcn.0040b1a0
movss xmm1, dword [ebp - 0x9c]
add esp, 0xc
mulss xmm1, dword [0x5056a4]
movss xmm0, dword [0x505744]
subss xmm0, xmm1
call fcn.00410440
lea ecx, [ebp - 0xfc]
call fcn.004041c0
push eax
call fcn.00425550
add esp, 4
call fcn.004269f0
movss xmm0, dword [0x505738]
call fcn.00410440
movss xmm0, dword [0x505740]
call fcn.00410490
mov ch, 0x57
mov dword [ebp - 0x468], 0
mov al, 0x1b
mov dword [ebp - 0x464], 0
mov cl, 0x38
mov byte [ebp - 0x424], ch
mov dl, 0x36
mov byte [ebp - 0x41f], 0
xor al, ch
xor cl, ch
xor dl, ch
mov byte [ebp - 0x423], al
mov ah, 0x33
mov byte [ebp - 0x422], cl
mov byte [ebp - 0x421], dl
xor ah, ch
push 0
lea edx, [ebp - 0x468]
mov byte [ebp - 0x420], ah
lea ecx, [ebp - 0x423]
mov byte [ebp - 0x41f], 0
call fcn.00425d70
add esp, 4
test al, al
je 0x439f9e
mov byte [ebp - 0x3e8], 4
mov al, 0x67
xor al, byte [ebp - 0x3e8]
mov cl, 0x77
xor cl, byte [ebp - 0x3e8]
mov dh, 0x61
mov byte [ebp - 0x3e7], al
mov ch, 0x2a
mov byte [ebp - 0x3e6], cl
mov dl, 0x63
mov cl, byte [ebp - 0x3e8]
mov ah, 0x6b
mov byte [ebp - 0x35d], 0x7c
xor ch, cl
mov al, byte [ebp - 0x35d]
xor dl, cl
xor al, cl
mov byte [ebp - 0x365], dh
mov byte [ebp - 0x3e1], al
xor ah, cl
mov al, byte [ebp - 0x365]
xor dh, cl
xor al, cl
mov byte [ebp - 0x3e3], ch
mov byte [ebp - 0x3df], 0
lea ecx, [ebp - 0x3e7]
mov byte [ebp - 0x3e5], dl
mov byte [ebp - 0x3e4], ah
mov byte [ebp - 0x3e2], dh
mov byte [ebp - 0x3e0], al
mov byte [ebp - 0x3df], 0
call fcn.0042ab40
test eax, eax
jne 0x43994b
mov byte [ebp - 0x384], 0x40
mov al, 0x10
xor al, byte [ebp - 0x384]
mov ch, 0x34
mov byte [ebp - 0x383], al
mov ah, 0x28
mov al, byte [ebp - 0x384]
mov cl, 0x21
xor cl, al
mov byte [ebp - 0x35d], ch
xor ah, al
mov byte [ebp - 0x382], cl
xor ch, al
mov byte [ebp - 0x398], 0x4a
mov dl, 0x33
mov byte [ebp - 0x380], ah
xor dl, al
mov byte [ebp - 0x365], 0x2d
mov dh, 0x25
mov byte [ebp - 0x381], dl
xor dh, al
mov byte [ebp - 0x37f], ch
mov al, byte [ebp - 0x35d]
mov cl, 0x3a
xor al, byte [ebp - 0x384]
mov ah, 0x24
xor cl, byte [ebp - 0x398]
mov dl, 0x2f
mov byte [ebp - 0x37d], al
mov ch, 0x6a
mov al, 5
mov byte [ebp - 0x396], cl
xor al, byte [ebp - 0x398]
mov cl, byte [ebp - 0x398]
mov byte [ebp - 0x397], al
xor ah, cl
mov byte [ebp - 0x35d], 0x39
xor dl, cl
mov al, byte [ebp - 0x35d]
xor ch, cl
xor al, cl
mov byte [ebp - 0x37e], dh
mov byte [ebp - 0x391], al
mov dh, 0x29
mov al, byte [ebp - 0x365]
xor dh, cl
xor al, cl
mov byte [ebp - 0x366], 0x25
mov byte [ebp - 0x390], al
mov al, byte [ebp - 0x366]
xor al, cl
mov byte [ebp - 0x394], ah
mov byte [ebp - 0x38f], al
mov eax, dword fs:[0x30]
mov byte [ebp - 0x37c], 0
mov byte [ebp - 0x38e], 0
mov byte [ebp - 0x37c], 0
mov byte [ebp - 0x395], dl
mov byte [ebp - 0x393], ch
mov byte [ebp - 0x392], dh
mov byte [ebp - 0x38e], 0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x364], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x378], ecx
cmp ecx, esi
je 0x43990a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43990a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax + eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x36c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4398fd
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4398e0
cmp esi, 0x23a979e4
je 0x43990e
mov ecx, dword [ebp - 0x36c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4398c0
mov eax, dword [eax]
jmp 0x439890
mov esi, dword [ebp - 0x378]
mov edx, dword [ebp - 0x364]
push 0x10
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
lea ecx, [ebp - 0x383]
push ecx
lea ecx, [ebp - 0x397]
add eax, edx
push ecx
push 0
call eax
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.00435f70
call fcn.004360a0
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x439967
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.00436100
mov byte [ebp - 0x3f4], 0x2e
mov al, 0x5d
xor al, byte [ebp - 0x3f4]
mov cl, 0x5a
xor cl, byte [ebp - 0x3f4]
mov dl, 0x4b
mov byte [ebp - 0x3f3], al
mov ch, 0x43
mov byte [ebp - 0x35d], dl
mov ah, 0x4f
mov al, byte [ebp - 0x35d]
xor dh, dh
mov byte [ebp - 0x3f2], cl
mov cl, byte [ebp - 0x3f4]
xor al, cl
mov byte [ebp - 0x365], 0x56
mov byte [ebp - 0x3ed], al
xor ch, cl
mov al, byte [ebp - 0x365]
xor ah, cl
xor al, cl
mov byte [ebp - 0x366], dl
mov byte [ebp - 0x3ec], al
xor dl, cl
mov al, byte [ebp - 0x366]
xor dh, cl
xor al, cl
mov byte [ebp - 0x3ef], ch
lea ecx, [ebp - 0x3f3]
mov byte [ebp - 0x3f1], dl
mov byte [ebp - 0x3f0], ah
mov byte [ebp - 0x3ee], dh
mov byte [ebp - 0x3eb], al
mov byte [ebp - 0x3ea], 0
call fcn.0042ab40
mov byte [ebp - 0x3d0], 0x61
mov al, 2
xor al, byte [ebp - 0x3d0]
mov cl, 0x12
xor cl, byte [ebp - 0x3d0]
mov dh, 4
mov byte [ebp - 0x3cf], al
mov ch, 0x4f
mov byte [ebp - 0x3ce], cl
mov dl, 6
mov cl, byte [ebp - 0x3d0]
mov ah, 0xe
mov byte [ebp - 0x35d], 0x19
xor ch, cl
mov al, byte [ebp - 0x35d]
xor dl, cl
xor al, cl
mov byte [ebp - 0x365], dh
mov byte [ebp - 0x3c9], al
xor ah, cl
mov al, byte [ebp - 0x365]
xor dh, cl
xor al, cl
mov byte [ebp - 0x3cb], ch
mov byte [ebp - 0x3c7], 0
lea ecx, [ebp - 0x3cf]
mov byte [ebp - 0x3cd], dl
mov byte [ebp - 0x3cc], ah
mov byte [ebp - 0x3ca], dh
mov byte [ebp - 0x3c8], al
mov byte [ebp - 0x3c7], 0
call fcn.0042ab40
lea ecx, [ebp - 0x445]
call fcn.0043a780
mov esi, eax
mov ecx, esi
call fcn.0043d770
push esi
lea ecx, [ebp - 0x180]
call fcn.00404180
mov byte [ebp - 4], 0x22
lea edx, [ebp - 0x328]
push 0x513c4c
lea ecx, [ebp - 0x154]
call fcn.0043ece0
add esp, 4
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x23
push ecx
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.0043ed40
add esp, 0xc
lea ecx, [ebp - 0x154]
call fcn.00404120
lea ecx, [ebp - 0xc0]
call fcn.00436600
mov byte [ebp - 4], 0x26
call fcn.004669d0
push 1
mov esi, eax
push 0x34
push esi
call fcn.00466a80
add esp, 0xc
push str.Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_118.0.0.0_Safari_537.36
push 0x2722
push esi
call fcn.00466a80
add esp, 0xc
push 0x436ab0
push 0x4e2b
push esi
call fcn.00466a80
add esp, 0xc
lea eax, [ebp - 0xc0]
push eax
push 0x2711
push esi
call fcn.00466a80
add esp, 0xc
lea ecx, [ebp - 0xd8]
call fcn.004041c0
push eax
push 0x2712
push esi
call fcn.00466a80
add esp, 0xc
push esi
call fcn.00466a70
add esp, 4
push esi
call fcn.004669b0
mov byte [ebp - 0x398], 0x77
mov cl, 4
xor cl, byte [ebp - 0x398]
mov al, 0x14
xor al, byte [ebp - 0x398]
mov dh, 0x12
mov byte [ebp - 0x397], al
mov dl, 0x10
mov byte [ebp - 0x396], cl
mov ah, 0x18
mov cl, byte [ebp - 0x398]
mov ch, 0x59
mov byte [ebp - 0x35d], 0xf
xor dl, cl
mov al, byte [ebp - 0x35d]
xor ah, cl
mov byte [ebp - 0x365], dh
xor ch, cl
xor dh, cl
mov byte [ebp - 0x38f], 0
add esp, 4
mov byte [ebp - 0x395], dl
xor al, cl
mov byte [ebp - 0x394], ah
mov byte [ebp - 0x393], ch
mov byte [ebp - 0x392], dh
mov byte [ebp - 0x391], al
mov al, byte [ebp - 0x365]
xor al, cl
mov byte [ebp - 0x38f], 0
lea ecx, [ebp - 0x397]
mov byte [ebp - 0x390], al
call fcn.0042ab40
mov esi, eax
test esi, esi
jne 0x439e1b
mov byte [ebp - 0x384], 0x1f
mov al, 0x4f
xor al, byte [ebp - 0x384]
mov ch, 0x6b
mov byte [ebp - 0x383], al
mov ah, 0x77
mov al, byte [ebp - 0x384]
mov cl, 0x7e
xor cl, al
mov byte [ebp - 0x35d], ch
xor ah, al
mov byte [ebp - 0x382], cl
xor ch, al
mov byte [ebp - 0x40c], 0x60
mov dl, 0x6c
mov byte [ebp - 0x365], 0x5a
xor dl, al
mov byte [ebp - 0x380], ah
mov dh, 0x7a
mov byte [ebp - 0x366], 0x27
xor dh, al
mov byte [ebp - 0x381], dl
mov al, byte [ebp - 0x35d]
mov cl, 0x10
xor al, byte [ebp - 0x384]
mov ah, 0xe
xor cl, byte [ebp - 0x40c]
mov dl, 5
mov byte [ebp - 0x37d], al
mov al, 0x2f
mov byte [ebp - 0x389], al
xor al, byte [ebp - 0x40c]
mov byte [ebp - 0x40b], al
mov byte [ebp - 0x40a], cl
mov cl, byte [ebp - 0x40c]
mov byte [ebp - 0x35d], 0x33
xor ah, cl
mov al, byte [ebp - 0x35d]
xor dl, cl
xor al, cl
mov byte [ebp - 0x37f], ch
mov byte [ebp - 0x405], al
mov ch, 0x40
mov al, byte [ebp - 0x365]
xor ch, cl
xor al, cl
mov byte [ebp - 0x37e], dh
mov byte [ebp - 0x404], al
mov dh, 0x23
mov al, byte [ebp - 0x366]
xor dh, cl
xor al, cl
mov byte [ebp - 0x408], ah
mov byte [ebp - 0x403], al
mov al, byte [ebp - 0x389]
xor al, cl
mov byte [ebp - 0x37c], 0
mov byte [ebp - 0x402], al
mov eax, dword fs:[0x30]
mov byte [ebp - 0x401], 0
mov byte [ebp - 0x37c], 0
mov byte [ebp - 0x409], dl
mov byte [ebp - 0x407], ch
mov byte [ebp - 0x406], dh
mov byte [ebp - 0x401], 0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x364], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x378], ecx
cmp ecx, esi
je 0x439dda
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x439dda
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax + eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x36c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x439dcd
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x439db0
cmp esi, 0x23a979e4
je 0x439dde
mov ecx, dword [ebp - 0x36c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x439d90
mov eax, dword [eax]
jmp 0x439d60
mov esi, dword [ebp - 0x378]
mov edx, dword [ebp - 0x364]
push 0x10
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
lea ecx, [ebp - 0x383]
push ecx
lea ecx, [ebp - 0x40b]
add eax, edx
push ecx
push 0
call eax
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
lea ecx, [ebp - 0xc0]
call fcn.004041c0
mov edx, eax
mov ecx, esi
call fcn.0042b250
push 0
push 0x503ee8
call dword [sym.imp.USER32.dll_FindWindowA]
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push 0
push 0
call dword [sym.imp.WINMM.dll_PlaySoundA]
push 0xc0
lea eax, [ebp - 0x310]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x310]
push 1
push 0x40
push 1
push str.C:WindowsPashtetUserDatauserdata.txt
call fcn.0043b680
lea ecx, [ebp - 0x154]
call fcn.00436600
push 0
lea edx, [ebp - 0x154]
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x310]
call fcn.00444590
add esp, 4
lea ecx, [ebp - 0x310]
call fcn.0043b5a0
lea ecx, [ebp - 0x154]
call fcn.004041c0
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00404180
mov ecx, 0x513cc8
call fcn.00433420
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 0x384], 2
mov al, 0x61
xor al, byte [ebp - 0x384]
mov cl, 0x71
xor cl, byte [ebp - 0x384]
mov dh, 0x67
mov byte [ebp - 0x383], al
mov ch, 0x2c
mov byte [ebp - 0x382], cl
mov dl, 0x65
mov cl, byte [ebp - 0x384]
mov ah, 0x6d
mov byte [ebp - 0x389], 0x7a
xor ch, cl
mov al, byte [ebp - 0x389]
xor dl, cl
xor al, cl
mov byte [ebp - 0x35d], dh
mov byte [ebp - 0x37d], al
xor ah, cl
mov al, byte [ebp - 0x35d]
xor dh, cl
xor al, cl
mov byte [ebp - 0x37f], ch
mov byte [ebp - 0x37b], 0
lea ecx, [ebp - 0x383]
mov byte [ebp - 0x381], dl
mov byte [ebp - 0x380], ah
mov byte [ebp - 0x37e], dh
mov byte [ebp - 0x37c], al
mov byte [ebp - 0x37b], 0
call fcn.0042ab40
test eax, eax
je 0x4393d3
lea ecx, [ebp - 0x154]
call fcn.00404120
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 0x26
call fcn.0043b5d0
lea ecx, [ebp - 0x298]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
jmp 0x439e51
xor ecx, ecx
call fcn.00407fd0
mov edx, dword [ebp - 0x3a0]
test al, al
movzx ecx, dl
cmovne ecx, esi
mov byte [ebp - 0x3a0], cl
lea ecx, [ebp - 0xfc]
call fcn.00404120
lea ecx, [ebp - 0x21c]
call fcn.00404120
lea ecx, [ebp - 0x234]
call fcn.00404120
lea ecx, [ebp - 0x24c]
call fcn.00404120
lea ecx, [ebp - 0x13c]
call fcn.00404120
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 8
call fcn.00404120
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.0040fb40
call fcn.0040ab40
mov eax, dword [0x513c40]
push 0
push 7
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x513c40]
push 0
push 0x1b
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x513c40]
push 0
push 0xae
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x513c40]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x43a08e
call fcn.0040adf0
mov eax, dword [0x513c00]
xor ecx, ecx
add eax, 0x1c4c
cmp byte [eax], cl
cmovne ecx, eax
call fcn.00423d60
mov eax, dword [0x513c40]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov ecx, dword [0x513c40]
push 0
push 0
push 0
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x44]
cmp eax, 0x88760868
jne 0x43a0de
mov eax, dword [0x513c40]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x43a0de
call fcn.004244f0
mov eax, dword [0x513c40]
push 0x513c04
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
cmp dword [0x513e08], 0
je 0x43a0de
call fcn.004242a0
mov eax, dword [0x513e38]
test eax, eax
jne 0x43a1a4
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x364], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x378], ecx
cmp ecx, esi
je 0x43a17a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43a17a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax + eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x36c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x43a16d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x43a150
cmp esi, 0x1bad7009
je 0x43a17e
mov ecx, dword [ebp - 0x36c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x43a130
mov eax, dword [eax]
jmp 0x43a100
mov esi, dword [ebp - 0x378]
mov edx, dword [ebp - 0x364]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x513e38], eax
lea ecx, [ebp - 0x11c]
push ecx
call eax
mov eax, dword [0x513ea4]
test eax, eax
jne 0x43a274
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x364], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x378], ecx
cmp ecx, esi
je 0x43a24a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43a24a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax + eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x36c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x43a23d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x43a220
cmp esi, 0x95466b05
je 0x43a24e
mov ecx, dword [ebp - 0x36c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x43a200
mov eax, dword [eax]
jmp 0x43a1d0
mov esi, dword [ebp - 0x378]
mov edx, dword [ebp - 0x364]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x513ea4], eax
push 1
call eax
test ax, ax
je 0x43a3c0
mov eax, dword [0x513e3c]
test eax, eax
jne 0x43a344
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x364], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x378], ecx
cmp ecx, esi
je 0x43a31a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43a31a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax + eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x36c], ecx
dec edi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x43a30d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x43a2f0
cmp esi, 0x8fe07322
je 0x43a31e
mov ecx, dword [ebp - 0x36c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x43a2d0
mov eax, dword [eax]
jmp 0x43a2a0
mov esi, dword [ebp - 0x378]
mov edx, dword [ebp - 0x364]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x513e3c], eax
call eax
cmp eax, dword [ebp - 0x32c]
jne 0x43a3c0
cmp byte [ebp - 0x3a0], 0
jne 0x43a3c0
mov ecx, dword [ebp - 0x11c]
mov eax, ecx
sub eax, dword [ebp - 0x124]
mov edx, dword [ebp - 0x118]
mov dword [ebp - 0x124], ecx
movd xmm0, eax
mov eax, edx
sub eax, dword [ebp - 0x120]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x120], edx
addss xmm0, dword [0x513e28]
movss dword [0x513e28], xmm0
movd xmm0, eax
xor al, al
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x3a0], eax
mov byte [ebp - 0x366], al
addss xmm0, dword [0x513e2c]
movss dword [0x513e2c], xmm0
jmp 0x4387c0
mov edx, dword [ebp - 0x118]
xor al, al
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x120], edx
mov dword [ebp - 0x3a0], eax
mov byte [ebp - 0x366], al
jmp 0x4387c0
call fcn.004244f0
mov ecx, dword [0x513e08]
test ecx, ecx
je 0x43a40a
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x513e08], 0
mov esi, dword [0x513c00]
mov ecx, esi
mov dword [0x513e10], 0
call fcn.0040a210
cmp dword [0x513c00], esi
jne 0x43a433
mov dword [0x513c00], 0
mov ecx, esi
call fcn.00415720
mov ecx, dword [0x513c40]
test ecx, ecx
je 0x43a454
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x513c40], 0
mov ecx, dword [0x513c3c]
test ecx, ecx
je 0x43a46e
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x513c3c], 0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x378], ecx
cmp ecx, edi
je 0x43a4f3
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x43a4f3
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
sub ecx, 4
dec edx
mov dword [ebp - 0x374], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x36c], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x43a4e3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x43a4c6
cmp esi, 0x94c486dd
je 0x43a4f7
mov edx, dword [ebp - 0x374]
mov ecx, dword [ebp - 0x36c]
test edx, edx
jne 0x43a4a5
mov eax, dword [eax]
jmp 0x43a480
mov edx, dword [ebp - 0x378]
mov ecx, dword [ebp - 0x374]
push dword [ebp - 0x32c]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov edi, dword [eax + 0x18]
mov ecx, dword [edi + 0x3c]
mov ecx, dword [ecx + edi + 0x78]
add ecx, edi
mov dword [ebp - 0x378], ecx
cmp ecx, edi
je 0x43a5a3
mov edx, dword [ecx + 0x18]
test edx, edx
je 0x43a5a3
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edx*4]
add ecx, edi
sub ecx, 4
dec edx
mov dword [ebp - 0x374], edx
mov esi, 0x811c9dc5
mov dword [ebp - 0x36c], ecx
mov edx, dword [ecx]
mov cl, byte [edx + edi]
add edx, edi
inc edx
test cl, cl
je 0x43a593
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x43a576
cmp esi, 0x5e93403c
je 0x43a5a7
mov edx, dword [ebp - 0x374]
mov ecx, dword [ebp - 0x36c]
test edx, edx
jne 0x43a555
mov eax, dword [eax]
jmp 0x43a530
mov edx, dword [ebp - 0x378]
mov ecx, dword [ebp - 0x374]
push dword [ebp - 0x348]
mov eax, dword [edx + 0x24]
push dword [ebp - 0x334]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edi]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edi]
add eax, edi
call eax
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
lea ecx, [ebp - 0x328]
call fcn.00404120
lea ecx, [ebp - 0x204]
call fcn.00404120
lea ecx, [ebp - 0x1b0]
call fcn.00404120
lea ecx, [ebp - 0x198]
call fcn.00404120
jmp 0x437802
mov edx, dword [ebp - 0x364]
mov ecx, dword [ebp - 0x36c]
test edx, edx
jne 0x438670
mov eax, dword [eax]
jmp 0x438640
mov ecx, dword [ebp - 0x36c]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x438263
mov eax, dword [eax]
jmp 0x438230
mov edx, dword [ebp - 0x364]
mov ecx, dword [ebp - 0x36c]
test edx, edx
jne 0x4381b2
mov eax, dword [eax]
jmp 0x438185
mov edx, dword [ebp - 0x364]
mov ecx, dword [ebp - 0x36c]
test edx, edx
jne 0x437bd0
mov eax, dword [eax]
jmp 0x437ba2
mov edx, dword [ebp - 0x364]
mov ecx, dword [ebp - 0x36c]
test edx, edx
jne 0x4378d0
mov eax, dword [eax]
jmp 0x4378a1
mov edx, dword [ebp - 0x364]
mov ecx, dword [ebp - 0x36c]
test edx, edx
jne 0x4375f0
mov eax, dword [eax]
jmp 0x4375c2
mov edx, dword [ebp - 0x364]
mov eax, dword [ebp - 0x36c]
test edx, edx
jne 0x437420
mov ecx, dword [ecx]
jmp 0x4373f0
mov edx, dword [ebp - 0x364]
mov ecx, dword [ebp - 0x36c]
test edx, edx
jne 0x437370
mov eax, dword [eax]
jmp 0x437340
mov edx, dword [ebp - 0x364]
mov ecx, dword [ebp - 0x36c]
test edx, edx
jne 0x4372c2
mov eax, dword [eax]
jmp 0x437295
mov edx, dword [ebp - 0x364]
mov ecx, dword [ebp - 0x36c]
test edx, edx
jne 0x437180
mov eax, dword [eax]
jmp 0x437150
mov edx, dword [ebp - 0x364]
mov ecx, dword [ebp - 0x36c]
test edx, edx
jne 0x437080
mov eax, dword [eax]
jmp 0x437050
mov edx, dword [ebp - 0x364]
mov ecx, dword [ebp - 0x36c]
test edx, edx
jne 0x436f81
mov eax, dword [eax]
jmp 0x436f54
mov edx, dword [ebp - 0x364]
mov ecx, dword [ebp - 0x36c]
test edx, edx
jne 0x436d50
mov eax, dword [eax]
jmp 0x436d23