Function at 0x427d30
Capabilities:
Contain obfuscated stackstrings
Get common file path
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fa82c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x784
push esi
push edi
mov edi, ecx
mov byte [ebp - 0xd], dl
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0x14], 1
mov dword [ebp - 4], 2
push ecx
call fcn.0045d410
mov byte [ebp - 4], 3
sub esp, 0x10
mov dword [ebp - 0x14], 1
mov ecx, esp
mov dword [ebp - 0x34], esp
sub esp, 8
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
call fcn.0045d2c0
add esp, 8
mov dword [ebp - 4], 4
lea eax, [ebp - 0x148]
push eax
call fcn.00429e10
mov esi, eax
xor edx, edx
movzx ecx, byte [edx + esi]
push ecx
call fcn.004606a0
mov byte [edx + esi], al
inc edx
cmp edx, 7
jb 0x427db3
push esi
mov ecx, edi
call fcn.004639b0
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.0045cee0
push 0x104
lea eax, [ebp - 0x728]
push 0
push eax
call fcn.004d1ee0
add esp, 0xc
lea eax, [ebp - 0x728]
push eax
movzx eax, byte [ebp - 0xd]
xor eax, 1
push 0
push 0
lea eax, [eax*2 + 0x1a]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea eax, [ebp + 8]
push eax
lea edx, [ebp - 0x728]
lea ecx, [ebp - 0x190]
call fcn.00463710
add esp, 4
mov dword [ebp - 4], 5
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov byte [ebp - 4], 6
cmp byte [ebp + 0x20], 0
jne 0x42810a
push 0
sub esp, 0x18
mov byte [ebp - 0xd], 1
lea eax, [ebp - 0x190]
mov dword [ebp - 0x34], esp
mov ecx, esp
push eax
call fcn.0045f3c0
mov byte [ebp - 4], 7
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb8]
mov dl, byte [ebp - 0xd]
call fcn.004215d0
add esp, 0x1c
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xb8]
call fcn.0045e1e0
test eax, eax
jne 0x427efc
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 6
call fcn.004612b0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5c]
call fcn.004612b0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x190]
call fcn.00402890
mov dword [ebp - 4], 1
lea ecx, [ebp + 8]
call fcn.00402890
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x28]
call fcn.00402890
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x40]
call fcn.00402890
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
xor edi, edi
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x1c], edi
call fcn.0045e1e0
test eax, eax
je 0x4280f9
push 0x16
call fcn.004606a0
mov byte [ebp - 0xd], al
nop
cmp byte [ebp + 0x24], 0
je 0x427f4b
lea eax, [ebp - 0x45]
push eax
call fcn.00429e30
mov esi, eax
xor edx, edx
mov dword [ebp - 0x20], esi
movzx ecx, byte [edx + esi]
push ecx
call fcn.004606a0
mov byte [edx + esi], al
inc edx
cmp edx, 8
jb 0x427f36
jmp 0x427f52
mov dword [ebp - 0x20], 0x51959c
push edi
lea ecx, [ebp - 0xb8]
call fcn.0045e1c0
mov esi, eax
mov byte [ebp - 0x15], 0
mov al, byte [ebp - 0xd]
lea edx, [ebp - 0x190]
mov byte [ebp - 0x16], al
lea ecx, [ebp - 0x2e0]
lea eax, [ebp - 0x16]
push eax
call fcn.004635e0
add esp, 4
mov byte [ebp - 4], 9
mov edx, eax
push 0
push esi
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 0xe], 0
call fcn.00463840
mov byte [ebp - 4], 0xa
sub esp, 0x14
mov ecx, esp
mov dword [ebp - 0x34], esp
mov edx, eax
push dword [ebp - 0x20]
call fcn.00463670
add esp, 4
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xcc]
mov dl, byte [ebp - 0xe]
call fcn.004215d0
add esp, 0x1c
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1a8]
call fcn.00402890
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x2e0]
call fcn.00402890
lea ecx, [ebp - 0xcc]
call fcn.0045e1e0
test eax, eax
je 0x4280d3
mov ecx, dword [ebp - 0xc8]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0xcc]
xor esi, esi
imul ecx
mov dword [ebp - 0x20], esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4280d3
nop word [eax + eax]
push esi
lea ecx, [ebp - 0xcc]
call fcn.0045e1c0
push 0
lea ecx, [ebp + 0x28]
push ecx
mov ecx, eax
call fcn.0045eed0
cmp eax, 0xffffffff
je 0x4280aa
lea ecx, [ebp - 0x5c]
xor esi, esi
call fcn.0045e1e0
mov dword [ebp - 0x94], eax
test eax, eax
je 0x428092
push edi
lea ecx, [ebp - 0xb8]
call fcn.0045e1c0
push esi
lea ecx, [ebp - 0x5c]
mov edi, eax
call fcn.0045e1c0
mov edx, edi
mov ecx, eax
call fcn.00463940
mov edi, dword [ebp - 0x1c]
test al, al
jne 0x4280a7
inc esi
cmp esi, dword [ebp - 0x94]
jb 0x428062
push edi
lea ecx, [ebp - 0xb8]
call fcn.0045e1c0
push eax
lea ecx, [ebp - 0x5c]
call fcn.0045e260
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xc8]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0xcc]
inc esi
imul ecx
mov dword [ebp - 0x20], esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x428030
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xcc]
call fcn.004612b0
inc edi
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x1c], edi
call fcn.0045e1e0
cmp edi, eax
jb 0x427f20
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb8]
call fcn.004612b0
jmp 0x42813c
push 0x51959c
lea ecx, [ebp - 0x248]
call fcn.00402790
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x5c]
call fcn.0045e200
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x248]
call fcn.00402890
lea ecx, [ebp - 0x5c]
call fcn.0045e1e0
test eax, eax
jne 0x42817a
push 0x51959c
lea ecx, [ebp - 0x248]
call fcn.00402790
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x5c]
call fcn.0045e200
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x248]
call fcn.00402890
push 0x16
mov byte [ebp - 0x15], 0
call fcn.004606a0
mov byte [ebp - 0xe], al
lea edx, [ebp - 0x190]
mov byte [ebp - 0x16], al
lea ecx, [ebp - 0x1a8]
lea eax, [ebp - 0x16]
push eax
call fcn.004635e0
mov byte [ebp - 4], 0x11
sub esp, 0x14
lea edx, [ebp + 0x40]
mov dword [ebp - 0x34], esp
mov ecx, esp
push edx
mov edx, eax
call fcn.00463840
add esp, 4
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], 0x11
call fcn.0040b890
add esp, 0x18
mov byte [ebp - 0xd], al
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1a8]
call fcn.00402890
cmp byte [ebp - 0xd], 0
jne 0x428260
lea eax, [ebp - 0x3f1]
push eax
call fcn.00429e50
mov esi, eax
xor edx, edx
movzx ecx, byte [edx + esi]
push ecx
call fcn.004606a0
mov byte [edx + esi], al
inc edx
cmp edx, 0x10
jb 0x4281f6
sub esp, 0x18
lea edx, [ebp - 0x190]
mov ecx, esp
mov dword [ebp - 0x34], esp
push esi
call fcn.004635e0
add esp, 4
mov byte [ebp - 4], 0x13
mov byte [ebp - 4], 6
call fcn.0040b890
add esp, 0x18
test al, al
je 0x428260
lea eax, [ebp - 0x1b8]
push eax
call fcn.00423910
mov esi, eax
xor edx, edx
movzx ecx, byte [edx + esi]
push ecx
call fcn.004606a0
mov byte [edx + esi], al
inc edx
cmp edx, 0xf
jb 0x428244
push esi
lea ecx, [ebp + 0x40]
call fcn.0045f240
mov al, byte [ebp - 0xe]
lea edx, [ebp - 0x190]
mov byte [ebp - 0x16], al
lea ecx, [ebp - 0x1a8]
lea eax, [ebp - 0x16]
mov byte [ebp - 0x15], 0
push eax
call fcn.004635e0
mov byte [ebp - 4], 0x14
sub esp, 0x14
lea edx, [ebp + 0x40]
mov dword [ebp - 0x34], esp
mov ecx, esp
push edx
mov edx, eax
call fcn.00463840
add esp, 4
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x384]
call fcn.0040b4c0
add esp, 0x18
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1a8]
call fcn.00402890
push 0x51959c
lea ecx, [ebp - 0x354]
call fcn.00402790
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x374], 0
je 0x42846e
push 0
push 1
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x34], esp
push ecx
call fcn.0045c7a0
mov byte [ebp - 4], 0x19
mov byte [ebp - 4], 0x18
lea edx, [ebp - 0x384]
lea ecx, [ebp - 0xa8]
call fcn.00463b70
add esp, 0x30
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x45]
push eax
call fcn.00423940
mov esi, eax
xor edx, edx
nop
movzx ecx, byte [edx + esi]
push ecx
call fcn.004606a0
mov byte [edx + esi], al
inc edx
cmp edx, 8
jb 0x428320
push esi
lea ecx, [ebp - 0xa8]
call fcn.004639b0
cmp byte [eax], 0
je 0x428459
lea eax, [ebp - 0x45]
push eax
call fcn.00423940
mov esi, eax
xor edx, edx
movzx ecx, byte [edx + esi]
push ecx
call fcn.004606a0
mov byte [edx + esi], al
inc edx
cmp edx, 8
jb 0x428355
push esi
lea ecx, [ebp - 0xa8]
call fcn.004639b0
mov edi, eax
lea eax, [ebp - 0xb8]
push eax
call fcn.00423960
mov esi, eax
xor edx, edx
movzx ecx, byte [edx + esi]
push ecx
call fcn.004606a0
mov byte [edx + esi], al
inc edx
cmp edx, 0xd
jb 0x428386
push esi
mov ecx, edi
call fcn.004639b0
cmp byte [eax], 0
je 0x428459
lea eax, [ebp - 0x45]
push eax
call fcn.00423940
mov esi, eax
xor edx, edx
nop word [eax + eax]
movzx ecx, byte [edx + esi]
push ecx
call fcn.004606a0
mov byte [edx + esi], al
inc edx
cmp edx, 8
jb 0x4283c0
push esi
lea ecx, [ebp - 0xa8]
call fcn.004639b0
mov edi, eax
lea eax, [ebp - 0xb8]
push eax
call fcn.00423960
mov esi, eax
xor edx, edx
movzx ecx, byte [edx + esi]
push ecx
call fcn.004606a0
mov byte [edx + esi], al
inc edx
cmp edx, 0xd
jb 0x4283f1
push esi
mov ecx, edi
call fcn.004639b0
lea ecx, [ebp - 0x2e0]
push ecx
mov ecx, eax
call fcn.00463af0
mov byte [ebp - 4], 0x1b
mov edx, eax
lea ecx, [ebp - 0x1a8]
call fcn.00402680
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x354]
push eax
call fcn.0045f2a0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1a8]
call fcn.00402890
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x2e0]
call fcn.00402890
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xa0]
push dword [ebp - 0xa8]
call fcn.00460940
mov ecx, dword [ebp - 0x58]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x5c]
xor edi, edi
imul ecx
mov dword [ebp - 0x20], edi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x429c15
cmp byte [ebp + 0x20], 0
je 0x4284b2
push 0x51959c
lea ecx, [ebp - 0x5e4]
call fcn.00402790
mov esi, eax
mov byte [ebp - 4], 0x1d
or dword [ebp - 0x14], 2
jmp 0x4284e6
mov al, byte [ebp - 0xe]
lea ecx, [ebp - 0x5c]
push edi
mov byte [ebp - 0x63], 0
mov byte [ebp - 0x64], al
call fcn.0045e1c0
lea ecx, [ebp - 0x64]
mov edx, eax
push ecx
lea ecx, [ebp - 0x5cc]
call fcn.004635e0
add esp, 4
mov esi, eax
mov dword [ebp - 4], 0x1e
or dword [ebp - 0x14], 4
mov al, byte [ebp - 0xe]
lea edx, [ebp - 0x190]
mov byte [ebp - 0x66], al
lea ecx, [ebp - 0x584]
lea eax, [ebp - 0x66]
mov byte [ebp - 0x65], 0
push eax
call fcn.004635e0
mov dword [ebp - 4], 0x1f
mov edx, eax
push esi
lea ecx, [ebp - 0x56c]
call fcn.004638e0
mov byte [ebp - 4], 0x20
sub esp, 0x10
lea edx, [ebp + 0x40]
mov dword [ebp - 0x31c], esp
mov ecx, esp
push edx
mov edx, eax
call fcn.00463840
add esp, 4
mov byte [ebp - 4], 0x21
mov byte [ebp - 4], 0x20
call fcn.0040b890
add esp, 0x18
test al, al
sete byte [ebp - 0xd]
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x56c]
call fcn.00402890
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x584]
call fcn.00402890
mov dword [ebp - 4], 0x1d
mov eax, dword [ebp - 0x14]
test al, 4
je 0x42858d
and eax, 0xfffffffb
lea ecx, [ebp - 0x5cc]
mov dword [ebp - 0x14], eax
call fcn.00402890
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0x18
test al, 2
je 0x4285a9
and eax, 0xfffffffd
lea ecx, [ebp - 0x5e4]
mov dword [ebp - 0x14], eax
call fcn.00402890
cmp byte [ebp - 0xd], 0
je 0x42871c
cmp byte [ebp + 0x20], 0
je 0x4285fb
lea eax, [ebp - 0x610]
push eax
call fcn.00423910
mov esi, eax
xor edx, edx
nop dword [eax]
movzx ecx, byte [edx + esi]
push ecx
call fcn.004606a0
mov byte [edx + esi], al
inc edx
cmp edx, 0xf
jb 0x4285d0
push esi
lea ecx, [ebp - 0x44c]
call fcn.00402790
mov esi, eax
mov byte [ebp - 4], 0x22
or dword [ebp - 0x14], 8
jmp 0x42864a
lea eax, [ebp - 0x621]
push eax
call fcn.00429e50
mov esi, eax
xor edx, edx
nop dword [eax + eax]
movzx ecx, byte [esi + edx]
push ecx
call fcn.004606a0
mov byte [esi + edx], al
inc edx
cmp edx, 0x10
jb 0x428610
push edi
lea ecx, [ebp - 0x5c]
call fcn.0045e1c0
push esi
mov edx, eax
lea ecx, [ebp - 0x434]
call fcn.004635e0
add esp, 4
mov esi, eax
mov dword [ebp - 4], 0x23
or dword [ebp - 0x14], 0x10
mov al, byte [ebp - 0xe]
lea edx, [ebp - 0x190]
mov byte [ebp - 0x68], al
lea ecx, [ebp - 0x41c]
lea eax, [ebp - 0x68]
mov byte [ebp - 0x67], 0
push eax
call fcn.004635e0
mov dword [ebp - 4], 0x24
sub esp, 0x14
mov ecx, esp
mov dword [ebp - 0x300], esp
mov edx, eax
push esi
call fcn.004638e0
add esp, 4
mov byte [ebp - 4], 0x25
mov byte [ebp - 4], 0x24
call fcn.0040b890
add esp, 0x18
mov byte [ebp - 0xd], al
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x41c]
call fcn.00402890
mov dword [ebp - 4], 0x22
mov eax, dword [ebp - 0x14]
test al, 0x10
je 0x4286ca
and eax, 0xffffffef
lea ecx, [ebp - 0x434]
mov dword [ebp - 0x14], eax
call fcn.00402890
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0x18
test al, 8
je 0x4286e6
and eax, 0xfffffff7
lea ecx, [ebp - 0x44c]
mov dword [ebp - 0x14], eax
call fcn.00402890
cmp byte [ebp - 0xd], 0
je 0x42871c
lea eax, [ebp - 0x3f0]
push eax
call fcn.00423910
mov esi, eax
xor edx, edx
nop dword [eax]
movzx ecx, byte [edx + esi]
push ecx
call fcn.004606a0
mov byte [edx + esi], al
inc edx
cmp edx, 0xf
jb 0x428700
push esi
lea ecx, [ebp + 0x40]
call fcn.0045f240
cmp byte [ebp + 0x20], 0
je 0x42873e
push 0x51959c
lea ecx, [ebp - 0x4ac]
call fcn.00402790
mov esi, eax
mov byte [ebp - 4], 0x26
or dword [ebp - 0x14], 0x20
jmp 0x428772
mov al, byte [ebp - 0xe]
lea ecx, [ebp - 0x5c]
push edi
mov byte [ebp - 0x69], 0
mov byte [ebp - 0x6a], al
call fcn.0045e1c0
lea ecx, [ebp - 0x6a]
mov edx, eax
push ecx
lea ecx, [ebp - 0x494]
call fcn.004635e0
add esp, 4
mov esi, eax
mov dword [ebp - 4], 0x27
or dword [ebp - 0x14], 0x40
mov al, byte [ebp - 0xe]
lea edx, [ebp - 0x190]
mov byte [ebp - 0x70], al
lea ecx, [ebp - 0x47c]
lea eax, [ebp - 0x70]
mov byte [ebp - 0x6f], 0
push eax
call fcn.004635e0
mov dword [ebp - 4], 0x28
mov edx, eax
push esi
lea ecx, [ebp - 0x464]
call fcn.004638e0
mov byte [ebp - 4], 0x29
sub esp, 0x10
lea edx, [ebp + 0x40]
mov dword [ebp - 0x304], esp
mov ecx, esp
push edx
mov edx, eax
call fcn.00463840
add esp, 4
mov byte [ebp - 4], 0x2a
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x248]
call fcn.0040b4c0
add esp, 0x18
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x464]
call fcn.00402890
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x47c]
call fcn.00402890
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x14]
test al, 0x40
je 0x428816
and eax, 0xffffffbf
lea ecx, [ebp - 0x494]
mov dword [ebp - 0x14], eax
call fcn.00402890
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x2f
test al, 0x20
je 0x42882f
and eax, 0xffffffdf
lea ecx, [ebp - 0x4ac]
mov dword [ebp - 0x14], eax
call fcn.00402890
push 0x51959c
lea ecx, [ebp - 0x2c8]
call fcn.00402790
mov byte [ebp - 4], 0x30
cmp dword [ebp - 0x238], 0
je 0x4289f6
cmp dword [ebp - 0x344], 0
jne 0x4289f6
push 0
push 1
sub esp, 0x28
mov ecx, esp
mov dword [ebp - 0x308], esp
push ecx
call fcn.0045c7a0
mov byte [ebp - 4], 0x31
mov byte [ebp - 4], 0x30
lea edx, [ebp - 0x248]
lea ecx, [ebp - 0x280]
call fcn.00463b70
add esp, 0x30
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0x3fa]
push eax
call fcn.00423940
mov esi, eax
xor edx, edx
movzx ecx, byte [esi + edx]
push ecx
call fcn.004606a0
mov byte [esi + edx], al
inc edx
cmp edx, 8
jb 0x4288a2
push esi
lea ecx, [ebp - 0x280]
call fcn.004639b0
cmp byte [eax], 0
je 0x4289e1
lea eax, [ebp - 0x403]
push eax
call fcn.00423940
mov esi, eax
xor edx, edx
nop word [eax + eax]
movzx ecx, byte [esi + edx]
push ecx
call fcn.004606a0
mov byte [esi + edx], al
inc edx
cmp edx, 8
jb 0x4288e0
push esi
lea ecx, [ebp - 0x280]
call fcn.004639b0
mov edi, eax
lea eax, [ebp - 0x5f2]
push eax
call fcn.00423960
mov esi, eax
xor edx, edx
movzx ecx, byte [edx + esi]
push ecx
call fcn.004606a0
mov byte [edx + esi], al
inc edx
cmp edx, 0xd
jb 0x428911
push esi
mov ecx, edi
call fcn.004639b0
cmp byte [eax], 0
je 0x4289de
lea eax, [ebp - 0xc9]
push eax
call fcn.00423940
mov esi, eax
xor edx, edx
movzx ecx, byte [edx + esi]
push ecx
call fcn.004606a0
mov byte [edx + esi], al
inc edx
cmp edx, 8
jb 0x428945
push esi
lea ecx, [ebp - 0x280]
call fcn.004639b0
mov edi, eax
lea eax, [ebp - 0x600]
push eax
call fcn.00423960
mov esi, eax
xor edx, edx
movzx ecx, byte [edx + esi]
push ecx
call fcn.004606a0
mov byte [edx + esi], al
inc edx
cmp edx, 0xd
jb 0x428976
push esi
mov ecx, edi
call fcn.004639b0
lea ecx, [ebp - 0x4dc]
push ecx
mov ecx, eax
call fcn.00463af0
mov byte [ebp - 4], 0x33
mov edx, eax
lea ecx, [ebp - 0x4c4]
call fcn.00402680
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x2c8]
push eax
call fcn.0045f2a0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x4c4]
call fcn.00402890
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x4dc]
call fcn.00402890
mov edi, dword [ebp - 0x20]
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x278]
push dword [ebp - 0x280]
call fcn.00460940
mov eax, dword [ebp - 0x2b8]
test eax, eax
jne 0x428a1a
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0x2c8]
call fcn.0045f270
mov eax, dword [ebp - 0x2b8]
test eax, eax
push ecx
lea ecx, [ebp - 0x1b8]
setne byte [ebp - 0x39]
call fcn.0045d410
mov byte [ebp - 4], 0x35
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x30c], esp
sub esp, 8
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
call fcn.0045d2c0
add esp, 8
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x5c]
push edi
call fcn.0045e1c0
push eax
lea ecx, [ebp - 0x1b8]
call fcn.0045cb40
mov byte [ebp - 4], 0x35
mov ecx, eax
call fcn.0045cee0
cmp byte [ebp + 0x24], 0
je 0x428aa5
lea eax, [ebp - 0xb3]
push eax
call fcn.00429e80
mov esi, eax
xor edx, edx
nop dword [eax]
movzx ecx, byte [esi + edx]
push ecx
call fcn.004606a0
mov byte [esi + edx], al
inc edx
cmp edx, 8
jb 0x428a90
jmp 0x428aaa
mov esi, 0x51959c
cmp byte [ebp + 0x20], 0
je 0x428acf
push 0x51959c
lea ecx, [ebp - 0x554]
call fcn.00402790
mov edi, eax
mov byte [ebp - 4], 0x37
or dword [ebp - 0x14], 0x80
jmp 0x428b06
mov al, byte [ebp - 0xe]
lea ecx, [ebp - 0x5c]
push edi
mov byte [ebp - 0x6d], 0
mov byte [ebp - 0x6e], al
call fcn.0045e1c0
lea ecx, [ebp - 0x6e]
mov edx, eax
push ecx
lea ecx, [ebp - 0x53c]
call fcn.004635e0
add esp, 4
mov edi, eax
mov dword [ebp - 4], 0x38
or dword [ebp - 0x14], 0x100
mov al, byte [ebp - 0xe]
lea edx, [ebp - 0x190]
mov byte [ebp - 0x6c], al
lea ecx, [ebp - 0x524]
lea eax, [ebp - 0x6c]
mov byte [ebp - 0x6b], 0
push eax
call fcn.004635e0
mov dword [ebp - 4], 0x39
mov edx, eax
push edi
lea ecx, [ebp - 0x50c]
call fcn.004638e0
mov byte [ebp - 4], 0x3a
mov edx, eax
push esi
lea ecx, [ebp - 0x4f4]
call fcn.00463670
mov byte [ebp - 4], 0x3b
lea ecx, [ebp + 0x28]
push ecx
mov edx, eax
lea ecx, [ebp - 0x1a8]
call fcn.00463840
add esp, 0x10
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x4f4]
call fcn.00402890
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x50c]
call fcn.00402890
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x524]
call fcn.00402890
mov byte [ebp - 4], 0x40
mov eax, dword [ebp - 0x14]
test eax, 0x100
je 0x428bb5
and eax, 0xfffffeff
lea ecx, [ebp - 0x53c]
mov dword [ebp - 0x14], eax
call fcn.00402890
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x41
test al, al
jns 0x428bd0
and eax, 0xffffff7f
lea ecx, [ebp - 0x554]
mov dword [ebp - 0x14], eax
call fcn.00402890
lea ecx, [ebp - 0x1a8]
call fcn.0045f0a0
lea edx, [ebp - 0x94]
mov ecx, eax
call fcn.004141f0
test eax, eax
jne 0x429b6f
lea eax, [ebp - 0x78e]
push eax
call fcn.00429ea0
mov esi, eax
xor edx, edx
movzx ecx, byte [edx + esi]
push ecx
call fcn.004606a0
mov byte [edx + esi], al
inc edx
cmp edx, 0x65
jb 0x428c00
mov edi, dword [ebp - 0x94]
lea eax, [ebp - 0x1c]
push ecx
push eax
push ecx
mov edx, esi
mov ecx, edi
call fcn.004aa9b0
add esp, 0xc
test eax, eax
jne 0x429b68
mov esi, dword [ebp - 0x1c]
mov ecx, esi
call fcn.00496250
cmp eax, 0x64
jne 0x429b61
push 0x7b
call fcn.004606a0
mov byte [ebp - 0xd], al
push 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x30], 0
call fcn.00460c60
mov byte [ebp - 4], 0x43
xor edx, edx
mov ecx, esi
call fcn.00496540
xorps xmm0, xmm0
mov dword [ebp - 0x98], eax
lea edx, [ebp - 0x98]
mov byte [ebp - 0xdc], 0
lea ecx, [ebp - 0xdc]
movq qword [ebp - 0xd4], xmm0
call fcn.004747d0
mov byte [ebp - 4], 0x44
xor ecx, ecx
mov dword [ebp - 0x7e], 0x2b27252e
mov word [ebp - 0x7a], 0x2423
mov byte [ebp - 0x78], 0
nop dword [eax + eax]
movzx eax, byte [ebp + ecx - 0x7e]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x7e], al
inc ecx
cmp ecx, 6
jb 0x428cb0
lea eax, [ebp - 0x7e]
push eax
lea ecx, [ebp - 0x30]
call fcn.004639b0
mov edi, eax
mov byte [ebp - 4], 0x45
mov dl, byte [edi]
mov cl, byte [ebp - 0xdc]
mov eax, dword [ebp - 0xd4]
mov byte [edi], cl
mov esi, dword [edi + 0xc]
mov ecx, dword [ebp - 0xd0]
mov byte [ebp - 0xdc], dl
mov byte [ebp - 0x130], dl
mov edx, dword [edi + 8]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov dword [ebp - 0xd4], edx
mov dword [ebp - 0xd0], esi
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0xd4]
push dword [ebp - 0x130]
call fcn.00460940
mov al, byte [ebp - 0xd]
lea ecx, [ebp - 0x3c]
xorps xmm0, xmm0
mov byte [ebp - 0x3b], 0
mov byte [ebp - 0x3c], al
lea edx, [ecx + 1]
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x428d54
sub ecx, edx
lea eax, [ebp - 0x3c]
push ecx
push eax
lea ecx, [ebp - 0x178]
call fcn.00402aa0
mov byte [ebp - 4], 0x46
mov edx, 1
mov ecx, dword [ebp - 0x1c]
call fcn.00496540
mov edx, eax
mov dword [ebp - 0x150], 0
mov ecx, edx
mov dword [ebp - 0x14c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x160], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x428da3
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x160]
call fcn.00402aa0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x178]
cmp dword [ebp - 0x164], 0x10
lea edx, [ebp - 0x160]
mov eax, dword [ebp - 0x178]
mov esi, dword [ebp - 0x150]
cmovae ecx, eax
cmp dword [ebp - 0x14c], 0x10
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x160]
cmovae edx, eax
mov dword [ebp - 0x98], eax
cmp esi, dword [ebp - 0x168]
jne 0x428e4c
sub esi, 4
jb 0x428e16
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x428e1b
add edx, 4
add ecx, 4
sub esi, 4
jae 0x428e05
cmp esi, 0xfffffffc
je 0x428e48
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x428e4c
cmp esi, 0xfffffffd
je 0x428e48
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x428e4c
cmp esi, 0xfffffffe
je 0x428e48
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x428e4c
cmp esi, 0xffffffff
je 0x428e48
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
jne 0x428e4c
mov dl, 1
jmp 0x428e4e
xor dl, dl
xorps xmm0, xmm0
mov byte [ebp - 0x12c], 0
lea ecx, [ebp - 0x12c]
movq qword [ebp - 0x124], xmm0
call fcn.00474870
mov byte [ebp - 4], 0x48
xor ecx, ecx
mov dword [ebp - 0x45], 0x3a3e3e22
mov dword [ebp - 0x41], 0x33262405
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp + ecx - 0x45]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x45], al
inc ecx
cmp ecx, 8
jb 0x428e83
mov al, byte [ebp - 0x30]
test al, al
jne 0x428ec7
push 1
lea ecx, [ebp - 0x258]
mov byte [ebp - 0x30], 1
call fcn.00460c60
mov eax, dword [ebp - 0x254]
mov esi, dword [ebp - 0x258]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], eax
mov al, byte [ebp - 0x30]
jmp 0x428eca
mov esi, dword [ebp - 0x28]
cmp al, 1
jne 0x429d7c
xorps xmm0, xmm0
mov dword [ebp - 0x1c0], 0
lea edx, [ebp - 0x45]
mov dword [ebp - 0x1bc], 0
movups xmmword [ebp - 0x1d0], xmm0
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x428ef6
sub edx, ecx
lea eax, [ebp - 0x45]
push edx
push eax
lea ecx, [ebp - 0x1d0]
call fcn.00402aa0
mov byte [ebp - 4], 0x49
lea eax, [ebp - 0x1d0]
push eax
mov ecx, esi
call fcn.00466ef0
mov edi, eax
mov byte [ebp - 4], 0x48
mov ecx, dword [ebp - 0x1bc]
cmp ecx, 0x10
jb 0x428f61
mov edx, dword [ebp - 0x1d0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x428f57
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x429dab
push ecx
push edx
call fcn.004b9cb1
add esp, 8
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1bc], 0xf
mov byte [ebp - 0x1d0], 0
mov byte [ebp - 4], 0x4c
mov cl, byte [edi]
mov al, byte [ebp - 0x12c]
mov byte [edi], al
mov edx, dword [edi + 8]
mov esi, dword [edi + 0xc]
mov eax, dword [ebp - 0x124]
mov byte [ebp - 0x12c], cl
mov byte [ebp - 0x134], cl
mov ecx, dword [ebp - 0x120]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov dword [ebp - 0x124], edx
mov dword [ebp - 0x120], esi
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x124]
push dword [ebp - 0x134]
call fcn.00460940
mov byte [ebp - 4], 0x46
mov eax, dword [ebp - 0x14c]
cmp eax, 0x10
jb 0x42900f
mov edx, dword [ebp - 0x98]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x429005
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x429dab
push ecx
push edx
call fcn.004b9cb1
add esp, 8
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x14c], 0xf
mov byte [ebp - 0x160], 0
mov byte [ebp - 4], 0x43
mov eax, dword [ebp - 0x164]
cmp eax, 0x10
jb 0x429067
mov edx, dword [ebp - 0x38]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x42905d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x429dab
push ecx
push edx
call fcn.004b9cb1
add esp, 8
mov ecx, dword [ebp - 0x1c]
mov edx, 2
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
call fcn.00496540
xorps xmm0, xmm0
mov dword [ebp - 0x38], eax
lea edx, [ebp - 0x38]
mov byte [ebp - 0x11c], 0
lea ecx, [ebp - 0x11c]
movq qword [ebp - 0x114], xmm0
call fcn.004747d0
mov byte [ebp - 4], 0x4d
xor ecx, ecx
mov dword [ebp - 0x4f], 0x223e2b3a
mov byte [ebp - 0x4b], 0
movzx eax, byte [ebp + ecx - 0x4f]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 4
jb 0x4290c3
mov al, byte [ebp - 0x30]
test al, al
jne 0x429107
push 1
lea ecx, [ebp - 0x260]
mov byte [ebp - 0x30], 1
call fcn.00460c60
mov eax, dword [ebp - 0x25c]
mov esi, dword [ebp - 0x260]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], eax
mov al, byte [ebp - 0x30]
jmp 0x42910a
mov esi, dword [ebp - 0x28]
cmp al, 1
jne 0x429d2b
xorps xmm0, xmm0
mov dword [ebp - 0x1d8], 0
lea edx, [ebp - 0x4f]
mov dword [ebp - 0x1d4], 0
movups xmmword [ebp - 0x1e8], xmm0
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x429136
sub edx, ecx
lea eax, [ebp - 0x4f]
push edx
push eax
lea ecx, [ebp - 0x1e8]
call fcn.00402aa0
mov byte [ebp - 4], 0x4e
lea eax, [ebp - 0x1e8]
push eax
mov ecx, esi
call fcn.00466ef0
mov edi, eax
mov byte [ebp - 4], 0x4d
mov ecx, dword [ebp - 0x1d4]
cmp ecx, 0x10
jb 0x4291a1
mov edx, dword [ebp - 0x1e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x429197
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x429dab
push ecx
push edx
call fcn.004b9cb1
add esp, 8
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1d4], 0xf
mov byte [ebp - 0x1e8], 0
mov byte [ebp - 4], 0x51
mov cl, byte [edi]
mov al, byte [ebp - 0x11c]
mov byte [edi], al
mov edx, dword [edi + 8]
mov esi, dword [edi + 0xc]
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x11c], cl
mov byte [ebp - 0x138], cl
mov ecx, dword [ebp - 0x110]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov dword [ebp - 0x114], edx
mov dword [ebp - 0x110], esi
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x114]
push dword [ebp - 0x138]
call fcn.00460940
mov al, byte [ebp - 0xd]
lea ecx, [ebp - 0x16]
xorps xmm0, xmm0
mov byte [ebp - 0x15], 0
mov byte [ebp - 0x16], al
lea edx, [ecx + 1]
movups xmmword [ebp - 0x2b0], xmm0
mov dword [ebp - 0x2a0], 0
mov dword [ebp - 0x29c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x429240
sub ecx, edx
lea eax, [ebp - 0x16]
push ecx
push eax
lea ecx, [ebp - 0x2b0]
call fcn.00402aa0
mov byte [ebp - 4], 0x52
mov edx, 3
mov ecx, dword [ebp - 0x1c]
call fcn.00496540
mov edx, eax
mov dword [ebp - 0x288], 0
mov ecx, edx
mov dword [ebp - 0x284], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x298], xmm0
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x429290
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x298]
call fcn.00402aa0
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x2b0]
cmp dword [ebp - 0x29c], 0x10
lea edx, [ebp - 0x298]
mov esi, dword [ebp - 0x288]
cmovae ecx, dword [ebp - 0x2b0]
cmp dword [ebp - 0x284], 0x10
cmovae edx, dword [ebp - 0x298]
cmp esi, dword [ebp - 0x2a0]
jne 0x42932c
sub esi, 4
jb 0x4292f6
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x4292fb
add edx, 4
add ecx, 4
sub esi, 4
jae 0x4292e5
cmp esi, 0xfffffffc
je 0x429328
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x42932c
cmp esi, 0xfffffffd
je 0x429328
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x42932c
cmp esi, 0xfffffffe
je 0x429328
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x42932c
cmp esi, 0xffffffff
je 0x429328
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
jne 0x42932c
mov dl, 1
jmp 0x42932e
xor dl, dl
xorps xmm0, xmm0
mov byte [ebp - 0x10c], 0
lea ecx, [ebp - 0x10c]
movq qword [ebp - 0x104], xmm0
call fcn.00474870
mov byte [ebp - 4], 0x54
xor ecx, ecx
mov dword [ebp - 0x77], 0x3f292f39
mov word [ebp - 0x73], 0x2f38
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp + ecx - 0x77]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 6
jb 0x429362
lea eax, [ebp - 0x77]
push eax
lea ecx, [ebp - 0x30]
call fcn.004639b0
mov edi, eax
mov byte [ebp - 4], 0x55
mov dl, byte [edi]
mov cl, byte [ebp - 0x10c]
mov eax, dword [ebp - 0x104]
mov byte [edi], cl
mov esi, dword [edi + 0xc]
mov ecx, dword [ebp - 0x100]
mov byte [ebp - 0x10c], dl
mov byte [ebp - 0x13c], dl
mov edx, dword [edi + 8]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov dword [ebp - 0x104], edx
mov dword [ebp - 0x100], esi
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x104]
push dword [ebp - 0x13c]
call fcn.00460940
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x298]
call fcn.00402890
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x2b0]
call fcn.00402890
mov ecx, dword [ebp - 0x1c]
mov edx, 4
call fcn.00496540
push eax
call fcn.004dd826
add esp, 4
push 0
push 0xf4240
push edx
push eax
call fcn.004f54a0
sub eax, 0xb6109100
mov byte [ebp - 0xfc], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0xfc]
sbb edx, 2
movq qword [ebp - 0xf4], xmm0
push edx
push eax
call fcn.00474890
add esp, 8
mov byte [ebp - 4], 0x56
xor ecx, ecx
mov dword [ebp - 0x8d], 0x233a322f
mov dword [ebp - 0x89], 0x233e2b38
mov dword [ebp - 0x85], 0x2b0e2425
mov word [ebp - 0x81], 0x2f3e
mov byte [ebp - 0x7f], 0
nop word [eax + eax]
movzx eax, byte [ebp + ecx - 0x8d]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x8d], al
inc ecx
cmp ecx, 0xe
jb 0x429480
mov al, byte [ebp - 0x30]
test al, al
jne 0x4294ca
push 1
lea ecx, [ebp - 0x270]
mov byte [ebp - 0x30], 1
call fcn.00460c60
mov eax, dword [ebp - 0x26c]
mov esi, dword [ebp - 0x270]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], eax
mov al, byte [ebp - 0x30]
jmp 0x4294cd
mov esi, dword [ebp - 0x28]
cmp al, 1
jne 0x429cf9
xorps xmm0, xmm0
mov dword [ebp - 0x1f0], 0
lea edx, [ebp - 0x8d]
mov dword [ebp - 0x1ec], 0
movups xmmword [ebp - 0x200], xmm0
lea ecx, [edx + 1]
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x429500
sub edx, ecx
lea eax, [ebp - 0x8d]
push edx
push eax
lea ecx, [ebp - 0x200]
call fcn.00402aa0
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x200]
push eax
mov ecx, esi
call fcn.00466ef0
mov edi, eax
mov byte [ebp - 4], 0x56
mov ecx, dword [ebp - 0x1ec]
cmp ecx, 0x10
jb 0x42956e
mov edx, dword [ebp - 0x200]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x429564
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x429dab
push ecx
push edx
call fcn.004b9cb1
add esp, 8
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x1ec], 0xf
mov byte [ebp - 0x200], 0
mov byte [ebp - 4], 0x5a
mov cl, byte [edi]
mov al, byte [ebp - 0xfc]
mov byte [edi], al
mov edx, dword [edi + 8]
mov esi, dword [edi + 0xc]
mov eax, dword [ebp - 0xf4]
mov byte [ebp - 0xfc], cl
mov byte [ebp - 0x140], cl
mov ecx, dword [ebp - 0xf0]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov dword [ebp - 0xf4], edx
mov dword [ebp - 0xf0], esi
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0xf4]
push dword [ebp - 0x140]
call fcn.00460940
mov ecx, dword [ebp - 0x1c]
mov edx, 5
call fcn.00496540
xorps xmm0, xmm0
mov dword [ebp - 0x38], eax
lea edx, [ebp - 0x38]
mov byte [ebp - 0xec], 0
lea ecx, [ebp - 0xec]
movq qword [ebp - 0xe4], xmm0
call fcn.004747d0
mov byte [ebp - 4], 0x5b
xor ecx, ecx
mov dword [ebp - 0x4a], 0x2f272b24
mov byte [ebp - 0x46], 0
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x4a]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x4a], al
inc ecx
cmp ecx, 4
jb 0x429620
mov al, byte [ebp - 0x30]
test al, al
jne 0x429664
push 1
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x30], 1
call fcn.00460c60
mov eax, dword [ebp - 0x24c]
mov esi, dword [ebp - 0x250]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], eax
mov al, byte [ebp - 0x30]
jmp 0x429667
mov esi, dword [ebp - 0x28]
cmp al, 1
jne 0x429cc7
xorps xmm0, xmm0
mov dword [ebp - 0x208], 0
lea edx, [ebp - 0x4a]
mov dword [ebp - 0x204], 0
movups xmmword [ebp - 0x218], xmm0
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x429693
sub edx, ecx
lea eax, [ebp - 0x4a]
push edx
push eax
lea ecx, [ebp - 0x218]
call fcn.00402aa0
mov byte [ebp - 4], 0x5c
lea eax, [ebp - 0x218]
push eax
mov ecx, esi
call fcn.00466ef0
mov edi, eax
mov byte [ebp - 4], 0x5b
mov ecx, dword [ebp - 0x204]
cmp ecx, 0x10
jb 0x4296fe
mov edx, dword [ebp - 0x218]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4296f4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x429dab
push ecx
push edx
call fcn.004b9cb1
add esp, 8
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x204], 0xf
mov byte [ebp - 0x218], 0
mov byte [ebp - 4], 0x5f
mov cl, byte [edi]
mov al, byte [ebp - 0xec]
mov byte [edi], al
mov edx, dword [edi + 8]
mov esi, dword [edi + 0xc]
mov eax, dword [ebp - 0xe4]
mov byte [ebp - 0xec], cl
mov byte [ebp - 0xbc], cl
mov ecx, dword [ebp - 0xe0]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov dword [ebp - 0xe4], edx
mov dword [ebp - 0xe0], esi
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0xe4]
push dword [ebp - 0xbc]
call fcn.00460940
mov ecx, dword [ebp - 0x1c]
mov edx, 7
call fcn.004964b0
mov ecx, dword [ebp - 0x1c]
mov edx, 7
mov edi, eax
call fcn.004964d0
mov esi, eax
test esi, esi
jle 0x429989
push 0x51959c
lea ecx, [ebp - 0x36c]
call fcn.00402790
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x2e0]
push esi
push edi
call fcn.004027d0
mov byte [ebp - 4], 0x61
cmp byte [ebp - 0x39], 0
je 0x429876
lea eax, [ebp - 0x310]
push eax
call fcn.00429f60
mov esi, eax
xor edx, edx
movzx ecx, byte [edx + esi]
push ecx
call fcn.004606a0
mov byte [edx + esi], al
inc edx
cmp edx, 3
jb 0x4297d1
push esi
push edi
call fcn.004d1390
add esp, 8
test eax, eax
jne 0x429823
lea eax, [ebp - 0x314]
push eax
call fcn.00429f70
mov esi, eax
xor edx, edx
movzx ecx, byte [esi + edx]
push ecx
call fcn.004606a0
mov byte [esi + edx], al
inc edx
cmp edx, 3
jb 0x429802
push esi
push edi
call fcn.004d1390
add esp, 8
test eax, eax
je 0x429876
sub esp, 0x18
mov byte [ebp - 0x3a], 0
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x318], esp
mov ecx, esp
lea esi, [ebp - 0x36c]
push eax
call fcn.0045f3c0
mov byte [ebp - 4], 0x62
sub esp, 0x18
lea eax, [ebp - 0x2c8]
mov dword [ebp - 0x33c], esp
mov ecx, esp
push eax
call fcn.0045f3c0
mov byte [ebp - 4], 0x63
mov byte [ebp - 4], 0x61
mov ecx, esi
mov dl, byte [ebp - 0x3a]
call fcn.00421160
add esp, 0x30
jmp 0x429887
push ecx
lea edx, [ebp - 0x36c]
mov ecx, edi
call fcn.00420fd0
add esp, 4
sub esp, 0x10
lea eax, [ebp - 0x36c]
mov ecx, esp
mov dword [ebp - 0x320], esp
push eax
call fcn.00464070
mov byte [ebp - 4], 0x64
lea eax, [ebp - 0x3ba]
push eax
call fcn.00429f80
mov esi, eax
xor edx, edx
movzx ecx, byte [edx + esi]
push ecx
call fcn.004606a0
mov byte [edx + esi], al
inc edx
cmp edx, 5
jb 0x4298b2
mov al, byte [ebp - 0x30]
test al, al
jne 0x4298f4
push 1
lea ecx, [ebp - 0x268]
mov byte [ebp - 0x30], 1
call fcn.00460c60
mov eax, dword [ebp - 0x264]
mov edi, dword [ebp - 0x268]
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], eax
mov al, byte [ebp - 0x30]
jmp 0x4298f7
mov edi, dword [ebp - 0x28]
cmp al, 1
jne 0x429db0
mov edx, esi
mov dword [ebp - 0x328], 0
xorps xmm0, xmm0
mov dword [ebp - 0x324], 0
movups xmmword [ebp - 0x338], xmm0
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x429922
sub edx, ecx
lea ecx, [ebp - 0x338]
push edx
push esi
call fcn.00402aa0
mov byte [ebp - 4], 0x65
lea eax, [ebp - 0x338]
push eax
mov ecx, edi
call fcn.00466ef0
mov esi, eax
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x338]
call fcn.00402890
mov byte [ebp - 4], 0x61
mov ecx, esi
call fcn.0045cee0
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x2e0]
call fcn.00402890
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x36c]
call fcn.00402890
jmp 0x429b16
mov ecx, dword [ebp - 0x1c]
mov edx, 6
call fcn.00496540
xorps xmm0, xmm0
mov dword [ebp - 0x38], eax
lea edx, [ebp - 0x38]
mov byte [ebp - 0xa8], 0
lea ecx, [ebp - 0xa8]
movq qword [ebp - 0xa0], xmm0
call fcn.004747d0
mov byte [ebp - 4], 0x68
xor ecx, ecx
mov dword [ebp - 0x62], 0x3f262b3c
mov word [ebp - 0x5e], 0x2f
nop dword [eax]
movzx eax, byte [ebp + ecx - 0x62]
push eax
call fcn.004606a0
mov byte [ebp + ecx - 0x62], al
inc ecx
cmp ecx, 5
jb 0x4299d0
mov al, byte [ebp - 0x30]
test al, al
jne 0x429a14
push 1
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x30], 1
call fcn.00460c60
mov eax, dword [ebp - 0x144]
mov esi, dword [ebp - 0x148]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], eax
mov al, byte [ebp - 0x30]
jmp 0x429a17
mov esi, dword [ebp - 0x28]
cmp al, 1
jne 0x429c95
xorps xmm0, xmm0
mov dword [ebp - 0x220], 0
lea edx, [ebp - 0x62]
mov dword [ebp - 0x21c], 0
movups xmmword [ebp - 0x230], xmm0
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x429a43
sub edx, ecx
lea eax, [ebp - 0x62]
push edx
push eax
lea ecx, [ebp - 0x230]
call fcn.00402aa0
mov byte [ebp - 4], 0x69
lea eax, [ebp - 0x230]
push eax
mov ecx, esi
call fcn.00466ef0
mov edi, eax
mov byte [ebp - 4], 0x68
mov ecx, dword [ebp - 0x21c]
cmp ecx, 0x10
jb 0x429aae
mov edx, dword [ebp - 0x230]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x429aa4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x429dab
push ecx
push edx
call fcn.004b9cb1
add esp, 8
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
mov byte [ebp - 4], 0x6c
mov cl, byte [edi]
mov al, byte [ebp - 0xa8]
mov byte [edi], al
mov edx, dword [edi + 8]
mov esi, dword [edi + 0xc]
mov eax, dword [ebp - 0xa0]
mov byte [ebp - 0xa8], cl
mov byte [ebp - 0x34], cl
mov ecx, dword [ebp - 0x9c]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov dword [ebp - 0xa0], edx
mov dword [ebp - 0x9c], esi
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0xa0]
push dword [ebp - 0x34]
call fcn.00460940
mov eax, dword [ebp - 0x20]
lea ecx, [eax + eax*2]
mov eax, dword [ebp - 0x5c]
lea eax, [eax + ecx*8]
push eax
lea ecx, [ebp - 0x1b8]
call fcn.0045cb40
lea ecx, [ebp - 0x30]
push ecx
mov ecx, eax
call fcn.0045c860
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x28]
push dword [ebp - 0x30]
call fcn.00460940
mov esi, dword [ebp - 0x1c]
mov ecx, esi
call fcn.00496250
cmp eax, 0x64
je 0x428c50
mov edi, dword [ebp - 0x94]
mov ecx, esi
call fcn.00495ec0
mov ecx, edi
call fcn.00414540
lea eax, [ebp - 0x3e0]
push eax
call fcn.00429e10
mov esi, eax
xor edx, edx
nop
movzx ecx, byte [edx + esi]
push ecx
call fcn.004606a0
mov byte [edx + esi], al
inc edx
cmp edx, 7
jb 0x429b80
mov ecx, dword [ebp - 0xc0]
push esi
call fcn.004639b0
lea ecx, [ebp - 0x1b8]
push ecx
mov ecx, eax
call fcn.0045c860
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x1a8]
call fcn.00402890
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x1b0]
push dword [ebp - 0x1b8]
call fcn.00460940
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x2c8]
call fcn.00402890
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x248]
call fcn.00402890
mov ecx, dword [ebp - 0x58]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x5c]
mov edi, dword [ebp - 0x20]
imul ecx
inc edi
sar edx, 2
mov eax, edx
mov dword [ebp - 0x20], edi
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x428490
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x354]
call fcn.00402890
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x384]
call fcn.00402890
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5c]
call fcn.004612b0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x190]
call fcn.00402890
mov dword [ebp - 4], 1
lea ecx, [ebp + 8]
call fcn.00402890
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x28]
call fcn.00402890
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x40]
call fcn.00402890
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x30]
call fcn.00460f50
push eax
lea ecx, [ebp - 0x3b4]
call fcn.00402790
mov byte [ebp - 4], 0x6a
mov edx, str.cannot_use_operator___with_a_string_argument_with
push eax
lea ecx, [ebp - 0x39c]
call fcn.004637a0
mov byte [ebp - 4], 0x6b
jmp 0x429ddd
lea ecx, [ebp - 0x30]
call fcn.00460f50
push eax
lea ecx, [ebp - 0x3b4]
call fcn.00402790
mov byte [ebp - 4], 0x5d
mov edx, str.cannot_use_operator___with_a_string_argument_with
push eax
lea ecx, [ebp - 0x39c]
call fcn.004637a0
mov byte [ebp - 4], 0x5e
jmp 0x429ddd
lea ecx, [ebp - 0x30]
call fcn.00460f50
push eax
lea ecx, [ebp - 0x3b4]
call fcn.00402790
mov byte [ebp - 4], 0x58
mov edx, str.cannot_use_operator___with_a_string_argument_with
push eax
lea ecx, [ebp - 0x39c]
call fcn.004637a0
mov byte [ebp - 4], 0x59
jmp 0x429ddd
lea ecx, [ebp - 0x30]
call fcn.00460f50
push eax
lea ecx, [ebp - 0x59c]
call fcn.00402790
mov byte [ebp - 4], 0x4f
mov edx, str.cannot_use_operator___with_a_string_argument_with
push eax
lea ecx, [ebp - 0x5b4]
call fcn.004637a0
mov byte [ebp - 4], 0x50
push eax
mov edx, 0x131
lea ecx, [ebp - 0x3d8]
call fcn.00409a50
add esp, 8
lea eax, [ebp - 0x3d8]
push 0x5366c8
jmp 0x429dfc
lea ecx, [ebp - 0x30]
call fcn.00460f50
push eax
lea ecx, [ebp - 0x5b4]
call fcn.00402790
mov byte [ebp - 4], 0x4a
mov edx, str.cannot_use_operator___with_a_string_argument_with
push eax
lea ecx, [ebp - 0x59c]
call fcn.004637a0
mov byte [ebp - 4], 0x4b
jmp 0x429d58
call fcn.004d51a0
lea ecx, [ebp - 0x30]
call fcn.00460f50
push eax
lea ecx, [ebp - 0x39c]
call fcn.00402790
mov byte [ebp - 4], 0x66
mov edx, str.cannot_use_operator___with_a_string_argument_with
push eax
lea ecx, [ebp - 0x3b4]
call fcn.004637a0
mov byte [ebp - 4], 0x67
push eax
mov edx, 0x131
lea ecx, [ebp - 0x2fc]
call fcn.00409a50
add esp, 8
lea eax, [ebp - 0x2fc]
push 0x5366c8
push eax
call fcn.004d172b
int3