Function at 0x444830
Capabilities:
Authenticate hmac
Create directory
Encode data using xor
Get common file path
Get startup folder
Read .ini file

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53037d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x16e8
push ebx
call fcn.00505c90
mov eax, ecx
push esi
mov dword [ebp - 0xf0], eax
push edi
mov dword [ebp - 0x34], 0
push 0
mov dword [ebp - 4], 3
call fcn.0048ab80
sub esp, 0x10
mov dword [ebp - 0x2e], 0xdbd6dfc3
mov esi, esp
mov dword [ebp - 0xf4], esp
sub esp, 8
mov word [ebp - 0x2a], 0xc7dd
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
mov edi, 1
mov word [ebp - 0x14], 0
mov ecx, esp
mov dword [ebp - 0x34], edi
movups xmmword [ebp - 0x28], xmm0
mov byte [ebp - 0x12], 0
call fcn.00489eb0
mov ecx, esi
call fcn.0048ab50
add esp, 8
mov byte [ebp - 4], 4
xor ecx, ecx
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2e], al
inc ecx
cmp ecx, 6
jb 0x4448d7
lea eax, [ebp - 0x2e]
mov dword [0x565548], ecx
push eax
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x28], 0
call fcn.00402b70
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x250]
call fcn.00402c10
mov ecx, dword [ebp - 0xf0]
push eax
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.0048a7d0
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 3
call fcn.00402ad0
push 0x104
lea eax, [ebp - 0x6f8]
push 0
push eax
call fcn.00506f10
add esp, 0xc
lea eax, [ebp - 0x6f8]
push eax
push 0
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea eax, [ebx + 8]
push eax
lea edx, [ebp - 0x6f8]
lea ecx, [ebp - 0x348]
call fcn.00490a90
add esp, 4
mov byte [ebp - 4], 7
xorps xmm0, xmm0
mov dword [ebp - 0x1a0], 0xddc3c0f3
xor ecx, ecx
mov dword [ebp - 0x19c], 0xd3d9ddd5
mov dword [ebp - 0x198], 0xd4d096c4
mov byte [ebp - 0x194], 0xd2
movups xmmword [ebp - 0x193], xmm0
mov dword [ebp - 0x183], 0
mov word [ebp - 0x17f], 0
mov byte [ebp - 0x17d], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x1a0], al
inc ecx
cmp ecx, 0xd
jb 0x4449c5
lea eax, [ebp - 0x1a0]
mov dword [0x56557c], ecx
push eax
lea ecx, [ebp - 0x3e8]
mov byte [ebp - 0x193], 0
call fcn.00402b70
lea ecx, [ebp - 0x3e8]
mov byte [ebp - 4], 8
call fcn.00402c10
push eax
lea edx, [ebp - 0x348]
lea ecx, [ebp - 0x330]
call fcn.004909d0
add esp, 4
lea ecx, [ebp - 0x3e8]
mov byte [ebp - 4], 0xa
call fcn.00402ad0
lea ecx, [ebp - 0x330]
call fcn.00402c10
push eax
push 0x1000
lea eax, [ebp - 0x16f8]
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionNamesA]
lea esi, [ebp - 0x16f8]
mov dword [ebp - 0x128], esi
nop dword [eax]
nop word [eax + eax]
xorps xmm0, xmm0
mov dword [ebp - 0x2f], 0xd4dec2ff
mov word [ebp - 0x2b], 0xd8da
xor ecx, ecx
mov byte [ebp - 0x29], 0xd0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov word [ebp - 0x14], 0
mov byte [ebp - 0x12], 0
nop dword [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2f], al
inc ecx
cmp ecx, 7
jb 0x444a90
lea eax, [ebp - 0x2f]
mov dword [0x565560], ecx
push eax
lea ecx, [ebp - 0x250]
mov byte [ebp - 0x28], 0
call fcn.00402b70
or edi, 0x40000
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x34], edi
call fcn.00402c10
push 7
push eax
push esi
call fcn.0051269e
add esp, 0xc
lea ecx, [ebp - 0x250]
mov esi, eax
call fcn.00402ad0
test esi, esi
jne 0x446dee
push 0x104
lea eax, [ebp - 0x5f0]
push esi
push eax
call fcn.00506f10
add esp, 0xc
lea ecx, [ebp - 0x330]
call fcn.00402c10
xorps xmm0, xmm0
mov dword [ebp - 0x2c], 0xdac5d1ff
mov esi, eax
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x14], 0
xor ecx, ecx
mov byte [ebp - 0x12], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2c], al
inc ecx
cmp ecx, 4
jb 0x444b32
lea eax, [ebp - 0x2c]
mov dword [0x5655d8], ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x28], 0
call fcn.00402b70
lea ecx, [ebp - 0x9c]
call fcn.00402c10
push esi
push 0x104
lea ecx, [ebp - 0x5f0]
push ecx
push 0
push eax
push dword [ebp - 0x128]
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp - 0x9c]
call fcn.00402ad0
xorps xmm0, xmm0
mov byte [ebp - 0x140], 0xf3
movups xmmword [ebp - 0x13f], xmm0
mov dword [ebp - 0x12f], 0
xor ecx, ecx
mov word [ebp - 0x12b], 0
mov byte [ebp - 0x129], 0
nop dword [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x140], al
inc ecx
cmp ecx, 1
jb 0x444bc0
lea eax, [ebp - 0x140]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x13f], 0
call fcn.00402b70
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0xb
call fcn.00402c10
push eax
lea edx, [ebp - 0x348]
lea ecx, [ebp - 0x2f4]
call fcn.004909d0
add esp, 4
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 0xc
push ecx
mov edx, eax
lea ecx, [ebp - 0x238]
call fcn.00490a30
add esp, 4
lea ecx, [ebp - 0x2f4]
call fcn.00402ad0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0xf
call fcn.00402ad0
xorps xmm0, xmm0
mov dword [ebp - 0xbf], 0xd5dedcf3
mov dword [ebp - 0xbb], 0x98c6dada
xor ecx, ecx
mov dword [ebp - 0xb7], 0xd4d6cbdd
movups xmmword [ebp - 0xb3], xmm0
mov dword [ebp - 0xa3], 0
mov word [ebp - 0x9f], 0
mov byte [ebp - 0x9d], 0
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xbf], al
inc ecx
cmp ecx, 0xc
jb 0x444c90
lea eax, [ebp - 0xbf]
mov dword [0x565528], ecx
push eax
lea ecx, [ebp - 0x10c]
mov byte [ebp - 0xb3], 0
call fcn.00402b70
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x10
call fcn.00402c10
push eax
lea edx, [ebp - 0x238]
lea ecx, [ebp - 0x250]
call fcn.004909d0
add esp, 4
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x12
call fcn.00402ad0
xorps xmm0, xmm0
mov word [ebp - 0x17c], 0xd2dd
movups xmmword [ebp - 0x17a], xmm0
mov dword [ebp - 0x16a], 0
xor ecx, ecx
mov word [ebp - 0x166], 0
mov byte [ebp - 0x164], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x17c], al
inc ecx
cmp ecx, 2
jb 0x444d22
lea eax, [ebp - 0x17c]
mov dword [0x565598], ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x17a], 0
call fcn.00402b70
lea ecx, [ebp - 0x9c]
call fcn.00402c10
lea ecx, [ebp - 0x250]
mov esi, eax
call fcn.00402c10
push esi
push eax
call fcn.0050ad80
add esp, 8
lea ecx, [ebp - 0x9c]
mov esi, eax
call fcn.00402ad0
test esi, esi
jne 0x445315
xorps xmm0, xmm0
mov dword [ebp - 0x5e], 0xd5d8c3f3
mov dword [ebp - 0x5a], 0xc5dbdbdd
xor ecx, ecx
mov dword [ebp - 0x56], 0xd6c8cb99
mov word [ebp - 0x52], 0xc8d2
mov byte [ebp - 0x50], 0xd8
movups xmmword [ebp - 0x4f], xmm0
mov dword [ebp - 0x3f], esi
mov word [ebp - 0x3b], si
mov byte [ebp - 0x39], 0
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x5e], al
inc ecx
cmp ecx, 0xf
jb 0x444dc0
lea eax, [ebp - 0x5e]
mov dword [0x565558], ecx
push eax
lea ecx, [ebp - 0x278]
mov byte [ebp - 0x4f], 0
call fcn.00402b70
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x13
call fcn.00402c10
push eax
lea edx, [ebp - 0x238]
lea ecx, [ebp - 0x160]
call fcn.004909d0
add esp, 4
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x15
call fcn.00402ad0
lea ecx, [ebp - 0x160]
call fcn.00402c10
lea edx, [ebp - 0x144]
mov ecx, eax
call fcn.0041ac90
test eax, eax
jne 0x44530a
movaps xmm0, xmmword [0x552090]
xor ecx, ecx
movups xmmword [ebp - 0x2d9], xmm0
mov dword [ebp - 0x299], 0xad8b9f82
movaps xmm0, xmmword [0x551760]
movups xmmword [ebp - 0x2c9], xmm0
mov dword [ebp - 0x295], 0x9f929b9f
movaps xmm0, xmmword [0x551420]
movups xmmword [ebp - 0x2b9], xmm0
mov word [ebp - 0x291], 0x8b99
movaps xmm0, xmmword [0x551a90]
movups xmmword [ebp - 0x2a9], xmm0
mov dword [ebp - 0x27f], eax
xorps xmm0, xmm0
mov word [ebp - 0x27b], ax
movups xmmword [ebp - 0x28f], xmm0
mov byte [ebp - 0x279], al
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2d9], al
inc ecx
cmp ecx, 0x4a
jb 0x444eb0
lea eax, [ebp - 0x2d9]
mov dword [0x565644], ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x28f], 0
call fcn.00402b70
lea ecx, [ebp - 0x9c]
call fcn.00402c10
lea ecx, [ebp - 0x9c]
mov esi, eax
call fcn.00402ad0
mov ecx, dword [ebp - 0x144]
lea eax, [ebp - 0xe8]
push 0
push eax
push 0xffffffffffffffff
mov edx, esi
call fcn.004ea780
add esp, 0xc
test eax, eax
jne 0x4452ff
mov ecx, dword [ebp - 0xe8]
call fcn.004c6eb0
cmp eax, 0x64
jne 0x4452f4
nop
mov edi, dword [ebp - 0xe8]
xor edx, edx
mov ecx, edi
call fcn.004c73e0
mov dl, 1
mov ecx, eax
call fcn.004c3d20
mov ecx, edi
mov esi, eax
call fcn.004c7450
mov edi, dword [ebp - 0xe8]
mov edx, 1
mov ecx, edi
mov dword [ebp - 0x148], esi
call fcn.004c73e0
mov dl, 1
mov ecx, eax
call fcn.004c3d20
mov ecx, edi
mov esi, eax
call fcn.004c7450
mov edi, dword [ebp - 0xe8]
mov edx, 2
mov ecx, edi
mov dword [ebp - 0xf4], esi
call fcn.004c73e0
mov dl, 1
mov ecx, eax
call fcn.004c3d20
mov ecx, edi
mov esi, eax
call fcn.004c7450
mov dword [ebp - 0x1e4], esi
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x200]
push 0
mov byte [ebp - 0x208], 0
call fcn.0048e6c0
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x5f0]
sub esp, 0x10
mov dword [ebp - 0x2f], 0xd4dec2df
xorps xmm0, xmm0
mov dword [ebp - 0x84], esp
mov ecx, esp
mov word [ebp - 0x2b], 0xd8da
mov byte [ebp - 0x29], 0xd0
push eax
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov word [ebp - 0x14], 0
mov byte [ebp - 0x12], 0
call fcn.00491540
mov byte [ebp - 4], 0x18
xor ecx, ecx
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2f], al
inc ecx
cmp ecx, 7
jb 0x445010
lea eax, [ebp - 0x2f]
mov dword [0x565560], ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x28], 0
call fcn.00402b70
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x19
call fcn.00402c10
push eax
lea ecx, [ebp - 0x208]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x1a
call fcn.0048a7d0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x17
call fcn.00402ad0
sub esp, 0x10
mov word [ebp - 0x2b], 0xc2da
lea eax, [ebp - 0x1e4]
mov dword [ebp - 0x84], esp
xorps xmm0, xmm0
mov byte [ebp - 0x29], 0xdd
mov ecx, esp
mov dword [ebp - 0x18], 0
push eax
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x14], 0
mov byte [ebp - 0x12], 0
call fcn.00491430
mov byte [ebp - 4], 0x1b
xor ecx, ecx
nop dword [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2b], al
inc ecx
cmp ecx, 3
jb 0x4450b0
lea eax, [ebp - 0x2b]
mov dword [0x565590], ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x28], 0
call fcn.00402b70
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x1c
call fcn.00402c10
push eax
lea ecx, [ebp - 0x208]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.0048a7d0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x17
call fcn.00402ad0
sub esp, 0x10
mov dword [ebp - 0x2d], 0xdbd6dfc3
lea eax, [ebp - 0x148]
mov dword [ebp - 0x84], esp
xorps xmm0, xmm0
mov byte [ebp - 0x29], 0xdd
mov ecx, esp
mov dword [ebp - 0x18], 0
push eax
movups xmmword [ebp - 0x28], xmm0
mov word [ebp - 0x14], 0
mov byte [ebp - 0x12], 0
call fcn.00491430
mov byte [ebp - 4], 0x1e
xor ecx, ecx
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2d], al
inc ecx
cmp ecx, 5
jb 0x445150
lea eax, [ebp - 0x2d]
mov dword [0x565544], ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x28], 0
call fcn.00402b70
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x1f
call fcn.00402c10
push eax
lea ecx, [ebp - 0x208]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x20
call fcn.0048a7d0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x17
call fcn.00402ad0
sub esp, 0x10
mov dword [ebp - 0x7d], 0xc1c2d1df
lea eax, [ebp - 0xf4]
mov dword [ebp - 0x84], esp
xorps xmm0, xmm0
mov dword [ebp - 0x79], 0xd2c7dbc4
mov ecx, esp
mov dword [ebp - 0x65], 0
push eax
movups xmmword [ebp - 0x75], xmm0
mov word [ebp - 0x61], 0
mov byte [ebp - 0x5f], 0
call fcn.00491430
mov byte [ebp - 4], 0x21
xor ecx, ecx
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x7d], al
inc ecx
cmp ecx, 8
jb 0x4451f0
lea eax, [ebp - 0x7d]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x75], 0
call fcn.00402b70
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x22
call fcn.00402c10
push eax
lea ecx, [ebp - 0x208]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x23
call fcn.0048a7d0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x17
call fcn.00402ad0
xorps xmm0, xmm0
mov dword [ebp - 0x2e], 0xdbd6dfc3
mov word [ebp - 0x2a], 0xc7dd
xor ecx, ecx
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov word [ebp - 0x14], 0
mov byte [ebp - 0x12], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2e], al
inc ecx
cmp ecx, 6
jb 0x445273
lea eax, [ebp - 0x2e]
mov dword [0x565548], ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x28], 0
call fcn.00402b70
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x24
call fcn.00402c10
mov ecx, dword [ebp - 0xf0]
push eax
call fcn.00490ca0
lea ecx, [ebp - 0x208]
push ecx
mov ecx, eax
call fcn.0048a140
lea ecx, [ebp - 0x9c]
call fcn.00402ad0
lea ecx, [ebp - 0x208]
mov byte [ebp - 4], 0x15
call fcn.0048a7b0
mov ecx, dword [ebp - 0xe8]
call fcn.004c6eb0
cmp eax, 0x64
je 0x444f30
mov edi, dword [ebp - 0x38]
mov ecx, dword [ebp - 0xe8]
call fcn.004c6d70
mov ecx, dword [ebp - 0x144]
call fcn.0041b210
lea ecx, [ebp - 0x160]
jmp 0x446dcf
push esi
call fcn.0050e798
sub esp, 0x14
lea eax, [ebp - 0x250]
mov ecx, esp
push eax
call fcn.0048ccc0
lea ecx, [ebp - 0x2f4]
call fcn.0040d810
sub esp, 0x10
mov byte [ebp - 4], 0x25
mov eax, esp
lea edx, [ebp - 0x2f4]
lea ecx, [ebp - 0x308]
push 0
push 1
mov dword [eax + 0x24], 0
call fcn.00490ed0
add esp, 0x30
mov byte [ebp - 4], 0x26
xorps xmm0, xmm0
mov dword [ebp - 0x2e], 0xdbd6dfc3
xor ecx, ecx
mov word [ebp - 0x2a], 0xc7dd
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov word [ebp - 0x14], 0
mov byte [ebp - 0x12], 0
nop word [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2e], al
inc ecx
cmp ecx, 6
jb 0x445390
lea eax, [ebp - 0x2e]
mov dword [0x565548], ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x28], 0
call fcn.00402b70
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x27
call fcn.00402c10
push eax
lea ecx, [ebp - 0x308]
call fcn.00490ca0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x26
mov esi, eax
call fcn.00402ad0
push esi
lea ecx, [ebp - 0x260]
call fcn.0048e310
lea ecx, [ebp - 0x260]
call fcn.0048e2d0
lea eax, [ebp - 0x318]
mov ecx, esi
push eax
call fcn.0048a330
lea eax, [ebp - 0x318]
push eax
lea ecx, [ebp - 0x260]
call fcn.0048e1e0
test al, al
jne 0x445d67
lea ecx, [ebp - 0x260]
call fcn.00489fe0
push eax
lea ecx, [ebp - 0x1f8]
call fcn.0048a810
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x1a8]
push 0
mov byte [ebp - 0x1b0], 0
call fcn.0048e6c0
mov byte [ebp - 4], 0x2a
lea eax, [ebp - 0x5f0]
sub esp, 0x10
mov dword [ebp - 0x2f], 0xd4dec2df
xorps xmm0, xmm0
mov dword [ebp - 0x84], esp
mov ecx, esp
mov word [ebp - 0x2b], 0xd8da
mov byte [ebp - 0x29], 0xd0
push eax
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov word [ebp - 0x14], 0
mov byte [ebp - 0x12], 0
call fcn.00491540
mov byte [ebp - 4], 0x2b
xor ecx, ecx
nop dword [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2f], al
inc ecx
cmp ecx, 7
jb 0x4454a0
lea eax, [ebp - 0x2f]
mov dword [0x565560], ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x28], 0
call fcn.00402b70
or edi, 0x10000
mov dword [ebp - 0x34], edi
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x2c
call fcn.00402c10
push eax
lea ecx, [ebp - 0x1b0]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x2d
call fcn.0048a7d0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x2a
call fcn.00402ad0
xorps xmm0, xmm0
mov dword [ebp - 0xc0], 0xdfc3dfc9
mov dword [ebp - 0xbc], 0xdbd7c1e0
xor ecx, ecx
mov dword [ebp - 0xb8], 0xe8ecccde
mov byte [ebp - 0xb4], 0xf7
movups xmmword [ebp - 0xb3], xmm0
mov dword [ebp - 0xa3], 0
mov word [ebp - 0x9f], 0
mov byte [ebp - 0x9d], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xc0], al
inc ecx
cmp ecx, 0xd
jb 0x445550
lea eax, [ebp - 0xc0]
mov dword [0x56557c], ecx
push eax
lea ecx, [ebp - 0x10c]
mov byte [ebp - 0xb3], 0
call fcn.00402b70
or edi, 0x8000
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x10c]
or edi, 2
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x34], edi
call fcn.00402c10
push eax
lea ecx, [ebp - 0x1f8]
call fcn.00490ca0
cmp byte [eax], 0
je 0x44563b
xorps xmm0, xmm0
mov dword [ebp - 0x5c], 0xdfc3dfc9
mov dword [ebp - 0x58], 0xdbd7c1e0
xor eax, eax
mov dword [ebp - 0x54], 0xe8ecccde
mov byte [ebp - 0x50], 0xf7
movups xmmword [ebp - 0x4f], xmm0
mov dword [ebp - 0x3f], 0
mov word [ebp - 0x3b], 0
mov byte [ebp - 0x39], 0
lea ecx, [eax - 0x51]
xor byte [ebp + eax - 0x5c], cl
inc eax
cmp eax, 0xd
jb 0x4455e6
mov dword [0x56557c], eax
lea ecx, [ebp - 0x9c]
lea eax, [ebp - 0x5c]
mov byte [ebp - 0x4f], 0
push eax
call fcn.00402b70
mov dword [ebp - 4], 0x2f
lea ecx, [ebp - 0x9c]
or edi, 4
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x34], edi
call fcn.00402c10
push eax
lea ecx, [ebp - 0x1f8]
call fcn.00490ca0
mov byte [ebp - 0x11], 1
cmp byte [eax], 3
je 0x44563f
mov byte [ebp - 0x11], 0
mov eax, dword [ebp - 0x38]
test al, 4
je 0x44565d
and eax, 0xfffffffb
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 4], 0x2a
test al, 2
je 0x44567c
and eax, 0xfffffffd
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
call fcn.00402ad0
xor ecx, ecx
mov word [ebp - 0x2b], 0xc2da
xorps xmm0, xmm0
mov byte [ebp - 0x29], 0xdd
mov dword [ebp - 0x18], 0
mov word [ebp - 0x14], 0
mov byte [ebp - 0x12], 0
movups xmmword [ebp - 0x28], xmm0
cmp byte [ebp - 0x11], cl
je 0x44579f
mov dword [ebp - 0xc0], 0xdfc3dfc9
mov dword [ebp - 0xbc], 0xdbd7c1e0
mov dword [ebp - 0xb8], 0xe8ecccde
mov byte [ebp - 0xb4], 0xf7
movups xmmword [ebp - 0xb3], xmm0
mov dword [ebp - 0xa3], ecx
mov word [ebp - 0x9f], cx
mov byte [ebp - 0x9d], cl
nop dword [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xc0], al
inc ecx
cmp ecx, 0xd
jb 0x4456f0
lea eax, [ebp - 0xc0]
mov dword [0x56557c], ecx
push eax
lea ecx, [ebp - 0x10c]
mov byte [ebp - 0xb3], 0
call fcn.00402b70
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x30
call fcn.00402c10
sub esp, 0x10
lea ecx, [ebp - 0x1f8]
mov esi, esp
mov dword [ebp - 0x84], esp
push eax
call fcn.00490ca0
push eax
mov ecx, esi
call fcn.0048a810
mov byte [ebp - 4], 0x31
xor ecx, ecx
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2b], al
inc ecx
cmp ecx, 3
jb 0x445754
lea eax, [ebp - 0x2b]
mov dword [0x565590], ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x28], 0
call fcn.00402b70
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x32
call fcn.00402c10
push eax
lea ecx, [ebp - 0x1b0]
call fcn.00490ca0
mov byte [ebp - 4], 0x33
jmp 0x445866
mov dword [ebp - 0x7d], 0xc6c2dfc7
mov dword [ebp - 0x79], 0xd3d8d5dd
movups xmmword [ebp - 0x75], xmm0
mov dword [ebp - 0x65], 0
mov word [ebp - 0x61], 0
mov byte [ebp - 0x5f], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x7d], al
inc ecx
cmp ecx, 8
jb 0x4457c2
lea eax, [ebp - 0x7d]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x10c]
mov byte [ebp - 0x75], 0
call fcn.00402b70
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x34
call fcn.00402c10
sub esp, 0x10
lea ecx, [ebp - 0x1f8]
mov esi, esp
mov dword [ebp - 0x84], esp
push eax
call fcn.00490ca0
push eax
mov ecx, esi
call fcn.0048a810
mov byte [ebp - 4], 0x35
xor ecx, ecx
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2b], al
inc ecx
cmp ecx, 3
jb 0x445820
lea eax, [ebp - 0x2b]
mov dword [0x565590], ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x28], 0
call fcn.00402b70
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x36
call fcn.00402c10
push eax
lea ecx, [ebp - 0x1b0]
call fcn.00490ca0
mov byte [ebp - 4], 0x37
mov ecx, eax
call fcn.0048a7d0
lea ecx, [ebp - 0x9c]
call fcn.00402ad0
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x2a
call fcn.00402ad0
movaps xmm0, xmmword [0x551dc0]
xor ecx, ecx
movups xmmword [ebp - 0xc4], xmm0
mov byte [ebp - 0xb4], 0xda
xorps xmm0, xmm0
mov dword [ebp - 0xa3], 0
movups xmmword [ebp - 0xb3], xmm0
mov word [ebp - 0x9f], 0
mov byte [ebp - 0x9d], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xc4], al
inc ecx
cmp ecx, 0x11
jb 0x4458c2
lea eax, [ebp - 0xc4]
mov dword [0x565634], ecx
push eax
lea ecx, [ebp - 0x140]
mov byte [ebp - 0xb3], 0
call fcn.00402b70
mov edi, dword [ebp - 0x38]
or edi, 0x4000
mov dword [ebp - 0x34], edi
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x38
call fcn.00402c10
push eax
lea ecx, [ebp - 0x1f8]
call fcn.00490ca0
mov esi, eax
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x39
call fcn.00402be0
or edi, 0x80
lea edx, [ebp - 0x10c]
mov ecx, esi
mov dword [ebp - 0x34], edi
call fcn.004a0910
xorps xmm0, xmm0
mov dword [ebp - 0x7d], 0x84f2feea
mov dword [ebp - 0x79], 0xe99f8684
xor ecx, ecx
movups xmmword [ebp - 0x75], xmm0
mov dword [ebp - 0x65], 0
mov word [ebp - 0x61], 0
mov byte [ebp - 0x5f], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x7d], al
inc ecx
cmp ecx, 8
jb 0x445968
lea eax, [ebp - 0x7d]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x75], 0
call fcn.00402b70
or edi, 0x100
mov dword [ebp - 0x34], edi
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x3a
call fcn.00402c10
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x2d], 0xdbd6dfc3
xorps xmm0, xmm0
mov byte [ebp - 0x29], 0xdd
push ecx
mov edx, eax
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x124]
mov word [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
mov byte [ebp - 0x12], 0
call fcn.00490af0
sub esp, 0xc
mov byte [ebp - 4], 0x3b
mov ecx, esp
mov dword [ebp - 0x84], esp
push eax
call fcn.004914d0
mov byte [ebp - 4], 0x3c
xor ecx, ecx
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2d], al
inc ecx
cmp ecx, 5
jb 0x445a00
lea eax, [ebp - 0x2d]
mov dword [0x565544], ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x28], 0
call fcn.00402b70
or edi, 0x400
mov dword [ebp - 0x34], edi
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x3d
call fcn.00402c10
push eax
lea ecx, [ebp - 0x1b0]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.0048a7d0
lea ecx, [ebp - 0x9c]
call fcn.00402ad0
lea ecx, [ebp - 0x124]
call fcn.00402ad0
lea ecx, [ebp - 0x160]
call fcn.00402ad0
and edi, 0xffffff7f
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x34], edi
call fcn.00402ad0
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x2a
call fcn.00402ad0
movaps xmm0, xmmword [0x5519a0]
xor ecx, ecx
movups xmmword [ebp - 0xc4], xmm0
mov byte [ebp - 0xb4], 0xdb
xorps xmm0, xmm0
mov dword [ebp - 0xa3], 0
movups xmmword [ebp - 0xb3], xmm0
mov word [ebp - 0x9f], 0
mov byte [ebp - 0x9d], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xc4], al
inc ecx
cmp ecx, 0x11
jb 0x445ad5
lea eax, [ebp - 0xc4]
mov dword [0x565634], ecx
push eax
lea ecx, [ebp - 0x140]
mov byte [ebp - 0xb3], 0
call fcn.00402b70
or edi, 0x40
mov dword [ebp - 0x34], edi
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x3f
call fcn.00402c10
push eax
lea ecx, [ebp - 0x1f8]
call fcn.00490ca0
mov esi, eax
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x40
call fcn.00402be0
or edi, 0x20
lea edx, [ebp - 0x10c]
mov ecx, esi
mov dword [ebp - 0x34], edi
call fcn.004a0910
xorps xmm0, xmm0
mov dword [ebp - 0x7d], 0x84f2feea
mov dword [ebp - 0x79], 0xe99f8684
xor ecx, ecx
movups xmmword [ebp - 0x75], xmm0
mov dword [ebp - 0x65], 0
mov word [ebp - 0x61], 0
mov byte [ebp - 0x5f], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x7d], al
inc ecx
cmp ecx, 8
jb 0x445b72
lea eax, [ebp - 0x7d]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x160]
mov byte [ebp - 0x75], 0
call fcn.00402b70
or edi, 0x2000
mov dword [ebp - 0x34], edi
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x41
call fcn.00402c10
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x30], 0xc1c2d1df
xorps xmm0, xmm0
mov dword [ebp - 0x2c], 0xd2c7dbc4
push ecx
mov edx, eax
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x124]
mov word [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
mov byte [ebp - 0x12], 0
call fcn.00490af0
sub esp, 0xc
mov byte [ebp - 4], 0x42
mov ecx, esp
mov dword [ebp - 0x84], esp
push eax
call fcn.004914d0
mov byte [ebp - 4], 0x43
xor ecx, ecx
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x30], al
inc ecx
cmp ecx, 8
jb 0x445c06
lea eax, [ebp - 0x30]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x28], 0
call fcn.00402b70
or edi, 0x800
mov dword [ebp - 0x34], edi
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x44
call fcn.00402c10
push eax
lea ecx, [ebp - 0x1b0]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x45
call fcn.0048a7d0
lea ecx, [ebp - 0x9c]
call fcn.00402ad0
lea ecx, [ebp - 0x124]
call fcn.00402ad0
lea ecx, [ebp - 0x160]
call fcn.00402ad0
and edi, 0xffffffdf
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x34], edi
call fcn.00402ad0
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x2a
call fcn.00402ad0
xorps xmm0, xmm0
mov dword [ebp - 0x2e], 0xdbd6dfc3
mov word [ebp - 0x2a], 0xc7dd
xor ecx, ecx
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov word [ebp - 0x14], 0
mov byte [ebp - 0x12], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2e], al
inc ecx
cmp ecx, 6
jb 0x445cc4
lea eax, [ebp - 0x2e]
mov dword [0x565548], ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x28], 0
call fcn.00402b70
or edi, 0x20000
mov dword [ebp - 0x34], edi
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x46
call fcn.00402c10
mov ecx, dword [ebp - 0xf0]
push eax
call fcn.00490ca0
lea ecx, [ebp - 0x1b0]
push ecx
mov ecx, eax
call fcn.0048a140
lea ecx, [ebp - 0x9c]
call fcn.00402ad0
lea ecx, [ebp - 0x1b0]
call fcn.0048a7b0
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x26
call fcn.0048a7b0
lea ecx, [ebp - 0x260]
call fcn.00489f90
lea eax, [ebp - 0x318]
push eax
lea ecx, [ebp - 0x260]
call fcn.0048e1e0
test al, al
je 0x445422
xorps xmm0, xmm0
mov dword [ebp - 0x5d], 0xd3c4e1f3
mov dword [ebp - 0x59], 0xdbc0c0dd
xor ecx, ecx
mov dword [ebp - 0x55], 0xc8dcfbe8
mov word [ebp - 0x51], 0xcfcf
movups xmmword [ebp - 0x4f], xmm0
mov dword [ebp - 0x3f], 0
mov word [ebp - 0x3b], 0
mov byte [ebp - 0x39], 0
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x5d], al
inc ecx
cmp ecx, 0xe
jb 0x445da0
lea eax, [ebp - 0x5d]
mov dword [0x565524], ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x4f], 0
call fcn.00402b70
or edi, 0x10
mov dword [ebp - 0x34], edi
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x47
call fcn.00402c10
push eax
lea edx, [ebx + 0x20]
lea ecx, [ebp - 0x278]
call fcn.004909d0
add esp, 4
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x49
call fcn.00402ad0
lea ecx, [ebp - 0x278]
call fcn.00402c10
mov ecx, eax
call fcn.0040e050
test al, al
jne 0x445e2f
lea ecx, [ebp - 0x278]
call fcn.00402c10
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
je 0x446db3
xorps xmm0, xmm0
mov byte [ebp - 0xa0], 0
lea ecx, [ebp - 0x4e8]
movups xmmword [ebp - 0xc0], xmm0
movups xmmword [ebp - 0xb0], xmm0
call fcn.004a8d20
lea ecx, [ebp - 0x5f0]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x445e60
sub ecx, edx
lea eax, [ebp - 0x5f0]
push ecx
push eax
lea ecx, [ebp - 0x4e8]
call fcn.004a8b20
push 0
lea ecx, [ebp - 0x4e8]
call fcn.004a8bf0
cmp byte [ebp - 0x44c], 0
je 0x445eba
movups xmm0, xmmword [ebp - 0x43b]
mov al, byte [ebp - 0x41b]
mov byte [ebp - 0xa0], al
movups xmmword [ebp - 0xc0], xmm0
movups xmm0, xmmword [ebp - 0x42b]
movups xmmword [ebp - 0xb0], xmm0
xorps xmm0, xmm0
mov byte [ebp - 0x140], 0xf0
movups xmmword [ebp - 0x13f], xmm0
mov dword [ebp - 0x12f], 0
xor ecx, ecx
mov word [ebp - 0x12b], 0
mov byte [ebp - 0x129], 0
nop word [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x140], al
inc ecx
cmp ecx, 1
jb 0x445ef0
lea eax, [ebp - 0x140]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0x390]
mov byte [ebp - 0x13f], 0
call fcn.00402b70
or edi, 0x1000000
mov dword [ebp - 0x34], edi
lea ecx, [ebp - 0x390]
mov byte [ebp - 4], 0x4a
call fcn.00402c10
xorps xmm0, xmm0
mov byte [ebp - 0x160], 0xf3
mov esi, eax
mov dword [ebp - 0x14f], 0
movups xmmword [ebp - 0x15f], xmm0
mov word [ebp - 0x14b], 0
xor ecx, ecx
mov byte [ebp - 0x149], 0
nop word [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x160], al
inc ecx
cmp ecx, 1
jb 0x445f70
lea eax, [ebp - 0x160]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0x378]
mov byte [ebp - 0x15f], 0
call fcn.00402b70
or edi, 0x800000
mov dword [ebp - 0x34], edi
lea ecx, [ebp - 0x378]
mov byte [ebp - 4], 0x4b
call fcn.00402c10
push eax
lea edx, [ebp - 0x278]
lea ecx, [ebp - 0x418]
call fcn.004909d0
add esp, 4
lea ecx, [ebx + 0x38]
mov byte [ebp - 4], 0x4c
push ecx
mov edx, eax
lea ecx, [ebp - 0x400]
call fcn.00490bf0
add esp, 4
mov edx, eax
mov ecx, esi
mov byte [ebp - 4], 0x4d
lea eax, [ecx + 1]
mov dword [ebp - 0x38], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x445ff3
sub ecx, dword [ebp - 0x38]
push ecx
push esi
mov ecx, edx
call fcn.0048f5b0
push eax
lea ecx, [ebp - 0x360]
call fcn.00402b20
or edi, 0x100000
mov dword [ebp - 0x34], edi
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x4e
push eax
lea edx, [ebp - 0x360]
lea ecx, [ebp - 0x10c]
call fcn.00490a30
add esp, 4
lea ecx, [ebp - 0x360]
call fcn.00402ad0
lea ecx, [ebp - 0x400]
call fcn.00402ad0
lea ecx, [ebp - 0x418]
call fcn.00402ad0
lea ecx, [ebp - 0x378]
call fcn.00402ad0
lea ecx, [ebp - 0x390]
mov byte [ebp - 4], 0x54
call fcn.00402ad0
lea ecx, [ebp - 0x10c]
call fcn.00402c10
mov ecx, eax
call fcn.0040e050
test al, al
jne 0x4460a7
lea ecx, [ebp - 0x10c]
call fcn.00402c10
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
je 0x446da8
xorps xmm0, xmm0
mov dword [ebp - 0x7d], 0xcbd4dbf3
mov dword [ebp - 0x79], 0xd4d19a80
xor ecx, ecx
movups xmmword [ebp - 0x75], xmm0
mov dword [ebp - 0x65], 0
mov word [ebp - 0x61], 0
mov byte [ebp - 0x5f], 0
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x7d], al
inc ecx
cmp ecx, 8
jb 0x4460d0
lea eax, [ebp - 0x7d]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x75], 0
call fcn.00402b70
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x55
call fcn.00402c10
sub esp, 0x18
lea edx, [ebp - 0x238]
mov ecx, esp
push eax
call fcn.004909d0
add esp, 4
call fcn.0040dee0
add esp, 0x18
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x54
call fcn.00402ad0
cmp byte [ebp - 0x11], 0
je 0x4463dd
xorps xmm0, xmm0
mov word [ebp - 0x2a], 0xd2d8
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
xor ecx, ecx
mov word [ebp - 0x14], 0
mov byte [ebp - 0x12], 0
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2a], al
inc ecx
cmp ecx, 2
jb 0x446160
lea eax, [ebp - 0x2a]
mov dword [0x565598], ecx
push eax
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x28], 0
call fcn.00402b70
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0x56
call fcn.00402c10
xorps xmm0, xmm0
mov dword [ebp - 0xe3], 0xcbd4dbf3
mov esi, eax
mov dword [ebp - 0xdf], 0xd4d19a80
movups xmmword [ebp - 0xdb], xmm0
mov dword [ebp - 0xcb], 0
xor ecx, ecx
mov word [ebp - 0xc7], 0
mov byte [ebp - 0xc5], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xe3], al
inc ecx
cmp ecx, 8
jb 0x4461d2
lea eax, [ebp - 0xe3]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x220]
mov byte [ebp - 0xdb], 0
call fcn.00402b70
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x57
call fcn.00402c10
push eax
lea edx, [ebp - 0x10c]
lea ecx, [ebp - 0x17c]
call fcn.004909d0
add esp, 4
mov ecx, eax
call fcn.00402c10
push esi
push eax
call fcn.0050ad80
add esp, 8
lea ecx, [ebp - 0x17c]
mov esi, eax
mov dword [ebp - 0x38], esi
call fcn.00402ad0
lea ecx, [ebp - 0x220]
call fcn.00402ad0
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0x54
call fcn.00402ad0
test esi, esi
je 0x4463dd
xorps xmm0, xmm0
mov dword [ebp - 0x7c], 0x81c8d5c4
mov word [ebp - 0x78], 0xd09d
xor ecx, ecx
mov byte [ebp - 0x76], 0xd7
movups xmmword [ebp - 0x75], xmm0
mov dword [ebp - 0x65], 0
mov word [ebp - 0x61], 0
mov byte [ebp - 0x5f], 0
mov dword [ebp - 0x57], 0xcbd4dbf3
mov dword [ebp - 0x53], 0xd4d19a80
movups xmmword [ebp - 0x4f], xmm0
mov dword [ebp - 0x3f], 0
mov word [ebp - 0x3b], 0
mov byte [ebp - 0x39], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x7c], al
inc ecx
cmp ecx, 7
jb 0x4462b7
lea eax, [ebp - 0x7c]
mov dword [0x565560], ecx
push eax
lea ecx, [ebp - 0x124]
mov byte [ebp - 0x75], 0
call fcn.00402b70
sub esp, 0x18
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x84], esp
mov esi, esp
call fcn.00402c10
push eax
mov ecx, esi
call fcn.00402b70
mov byte [ebp - 4], 0x59
xor ecx, ecx
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x57], al
inc ecx
cmp ecx, 8
jb 0x446306
lea eax, [ebp - 0x57]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x4f], 0
call fcn.00402b70
sub esp, 0x18
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x1e0]
mov esi, esp
call fcn.00402c10
push eax
lea edx, [ebp - 0x238]
mov ecx, esi
call fcn.004909d0
add esp, 4
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 4], 0x5b
call fcn.004441b0
add esp, 0x30
push 0
push 0
push 0x20
push 0xffffffffffffffff
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x5c
push ecx
mov ecx, eax
call fcn.0048a540
lea ecx, [ebp - 0x3b0]
call fcn.0048a7b0
lea ecx, [ebp - 0x1e0]
call fcn.00402ad0
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x54
call fcn.00402ad0
lea ecx, [ebp - 0x9c]
call fcn.00402ac0
lea ecx, [ebp - 0x9c]
mov esi, eax
call fcn.00402c10
push dword [ebp - 0x38]
push esi
push 1
push eax
call fcn.00512b86
push dword [ebp - 0x38]
call fcn.0050e798
add esp, 0x14
lea ecx, [ebp - 0x9c]
call fcn.00402ad0
xorps xmm0, xmm0
mov dword [ebp - 0x57], 0xcbd4dbf3
mov dword [ebp - 0x53], 0xd4d19a87
xor ecx, ecx
movups xmmword [ebp - 0x4f], xmm0
mov dword [ebp - 0x3f], 0
mov word [ebp - 0x3b], 0
mov byte [ebp - 0x39], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x57], al
inc ecx
cmp ecx, 8
jb 0x446405
lea eax, [ebp - 0x57]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x124]
mov byte [ebp - 0x4f], 0
call fcn.00402b70
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x5d
call fcn.00402c10
sub esp, 0x18
lea edx, [ebp - 0x238]
mov ecx, esp
push eax
call fcn.004909d0
add esp, 4
call fcn.0040dee0
add esp, 0x18
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x54
call fcn.00402ad0
cmp byte [ebp - 0x11], 0
je 0x446710
xorps xmm0, xmm0
mov word [ebp - 0x2a], 0xd2d8
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
xor ecx, ecx
mov word [ebp - 0x14], 0
mov byte [ebp - 0x12], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2a], al
inc ecx
cmp ecx, 2
jb 0x446493
lea eax, [ebp - 0x2a]
mov dword [0x565598], ecx
push eax
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x28], 0
call fcn.00402b70
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x5e
call fcn.00402c10
xorps xmm0, xmm0
mov dword [ebp - 0x57], 0xcbd4dbf3
mov esi, eax
mov dword [ebp - 0x53], 0xd4d19a87
movups xmmword [ebp - 0x4f], xmm0
mov dword [ebp - 0x3f], 0
xor ecx, ecx
mov word [ebp - 0x3b], 0
mov byte [ebp - 0x39], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x57], al
inc ecx
cmp ecx, 8
jb 0x4464f3
lea eax, [ebp - 0x57]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x124]
mov byte [ebp - 0x4f], 0
call fcn.00402b70
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x5f
call fcn.00402c10
push eax
lea edx, [ebp - 0x10c]
lea ecx, [ebp - 0x17c]
call fcn.004909d0
add esp, 4
mov ecx, eax
call fcn.00402c10
push esi
push eax
call fcn.0050ad80
add esp, 8
lea ecx, [ebp - 0x17c]
mov esi, eax
mov dword [ebp - 0x38], esi
call fcn.00402ad0
lea ecx, [ebp - 0x124]
call fcn.00402ad0
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x54
call fcn.00402ad0
test esi, esi
je 0x446710
xorps xmm0, xmm0
mov dword [ebp - 0x7c], 0x86c8d5c4
mov word [ebp - 0x78], 0xd09d
xor ecx, ecx
mov byte [ebp - 0x76], 0xd7
movups xmmword [ebp - 0x75], xmm0
mov dword [ebp - 0x65], 0
mov word [ebp - 0x61], 0
mov byte [ebp - 0x5f], 0
mov dword [ebp - 0xe3], 0xcbd4dbf3
mov dword [ebp - 0xdf], 0xd4d19a87
movups xmmword [ebp - 0xdb], xmm0
mov dword [ebp - 0xcb], 0
mov word [ebp - 0xc7], 0
mov byte [ebp - 0xc5], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x7c], al
inc ecx
cmp ecx, 7
jb 0x4465e1
lea eax, [ebp - 0x7c]
mov dword [0x565560], ecx
push eax
lea ecx, [ebp - 0x220]
mov byte [ebp - 0x75], 0
call fcn.00402b70
sub esp, 0x18
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x220]
mov dword [ebp - 0xec], esp
mov esi, esp
call fcn.00402c10
push eax
mov ecx, esi
call fcn.00402b70
mov byte [ebp - 4], 0x61
xor ecx, ecx
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xe3], al
inc ecx
cmp ecx, 8
jb 0x446630
lea eax, [ebp - 0xe3]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0xdb], 0
call fcn.00402b70
sub esp, 0x18
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x1c8]
mov esi, esp
call fcn.00402c10
push eax
lea edx, [ebp - 0x238]
mov ecx, esi
call fcn.004909d0
add esp, 4
lea ecx, [ebp - 0x3c0]
mov byte [ebp - 4], 0x63
call fcn.004441b0
add esp, 0x30
push 0
push 0
push 0x20
push 0xffffffffffffffff
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x64
push ecx
mov ecx, eax
call fcn.0048a540
lea ecx, [ebp - 0x3c0]
call fcn.0048a7b0
lea ecx, [ebp - 0x1c8]
call fcn.00402ad0
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x54
call fcn.00402ad0
lea ecx, [ebp - 0x9c]
call fcn.00402ac0
lea ecx, [ebp - 0x9c]
mov esi, eax
call fcn.00402c10
push dword [ebp - 0x38]
push esi
push 1
push eax
call fcn.00512b86
push dword [ebp - 0x38]
call fcn.0050e798
add esp, 0x14
lea ecx, [ebp - 0x9c]
call fcn.00402ad0
xorps xmm0, xmm0
mov dword [ebp - 0x58], 0xc0d4d3f3
mov dword [ebp - 0x54], 0xd29b8cc7
xor ecx, ecx
mov byte [ebp - 0x50], 0xd5
movups xmmword [ebp - 0x4f], xmm0
mov dword [ebp - 0x3f], 0
mov word [ebp - 0x3b], 0
mov byte [ebp - 0x39], 0
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x58], al
inc ecx
cmp ecx, 9
jb 0x446740
lea eax, [ebp - 0x58]
mov dword [0x565630], ecx
push eax
lea ecx, [ebp - 0x124]
mov byte [ebp - 0x4f], 0
call fcn.00402b70
or edi, 0x2000000
mov dword [ebp - 0x34], edi
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x65
call fcn.00402c10
sub esp, 0x18
lea edx, [ebp - 0x238]
mov ecx, esp
push eax
call fcn.004909d0
add esp, 4
call fcn.0040dee0
add esp, 0x18
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x54
call fcn.00402ad0
cmp byte [ebp - 0x11], 0
je 0x446a5c
xorps xmm0, xmm0
mov word [ebp - 0x2a], 0xd2d8
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
xor ecx, ecx
mov word [ebp - 0x14], 0
mov byte [ebp - 0x12], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2a], al
inc ecx
cmp ecx, 2
jb 0x4467d7
lea eax, [ebp - 0x2a]
mov dword [0x565598], ecx
push eax
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x28], 0
call fcn.00402b70
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x66
call fcn.00402c10
xorps xmm0, xmm0
mov dword [ebp - 0xe4], 0xc0d4d3f3
mov esi, eax
mov dword [ebp - 0xe0], 0xd29b8cc7
mov byte [ebp - 0xdc], 0xd5
xor ecx, ecx
movups xmmword [ebp - 0xdb], xmm0
mov dword [ebp - 0xcb], 0
mov word [ebp - 0xc7], 0
mov byte [ebp - 0xc5], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xe4], al
inc ecx
cmp ecx, 9
jb 0x446850
lea eax, [ebp - 0xe4]
mov dword [0x565630], ecx
push eax
lea ecx, [ebp - 0x124]
mov byte [ebp - 0xdb], 0
call fcn.00402b70
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x67
call fcn.00402c10
push eax
lea edx, [ebp - 0x10c]
lea ecx, [ebp - 0x17c]
call fcn.004909d0
add esp, 4
mov ecx, eax
call fcn.00402c10
push esi
push eax
call fcn.0050ad80
add esp, 8
lea ecx, [ebp - 0x17c]
mov esi, eax
mov dword [ebp - 0x38], esi
call fcn.00402ad0
lea ecx, [ebp - 0x124]
call fcn.00402ad0
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x54
call fcn.00402ad0
test esi, esi
je 0x446a5c
xorps xmm0, xmm0
mov dword [ebp - 0x57], 0xc6c3d5cc
mov dword [ebp - 0x53], 0xd4d19a8b
xor ecx, ecx
movups xmmword [ebp - 0x4f], xmm0
mov dword [ebp - 0x3f], 0
mov word [ebp - 0x3b], 0
mov byte [ebp - 0x39], 0
mov dword [ebp - 0x7e], 0xc0d4d3f3
mov dword [ebp - 0x7a], 0xd29b8cc7
mov byte [ebp - 0x76], 0xd5
movups xmmword [ebp - 0x75], xmm0
mov dword [ebp - 0x65], 0
mov word [ebp - 0x61], 0
mov byte [ebp - 0x5f], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x57], al
inc ecx
cmp ecx, 8
jb 0x446936
lea eax, [ebp - 0x57]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x220]
mov byte [ebp - 0x4f], 0
call fcn.00402b70
sub esp, 0x18
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x220]
mov dword [ebp - 0xec], esp
mov esi, esp
call fcn.00402c10
push eax
mov ecx, esi
call fcn.00402b70
mov byte [ebp - 4], 0x69
xor ecx, ecx
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x7e], al
inc ecx
cmp ecx, 9
jb 0x446985
lea eax, [ebp - 0x7e]
mov dword [0x565630], ecx
push eax
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x75], 0
call fcn.00402b70
sub esp, 0x18
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x1c8]
mov esi, esp
call fcn.00402c10
push eax
lea edx, [ebp - 0x238]
mov ecx, esi
call fcn.004909d0
add esp, 4
lea ecx, [ebp - 0x3d0]
mov byte [ebp - 4], 0x6b
call fcn.004441b0
add esp, 0x30
push 0
push 0
push 0x20
push 0xffffffffffffffff
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x6c
push ecx
mov ecx, eax
call fcn.0048a540
lea ecx, [ebp - 0x3d0]
call fcn.0048a7b0
lea ecx, [ebp - 0x1c8]
call fcn.00402ad0
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x54
call fcn.00402ad0
lea ecx, [ebp - 0x9c]
call fcn.00402ac0
lea ecx, [ebp - 0x9c]
mov esi, eax
call fcn.00402c10
push dword [ebp - 0x38]
push esi
push 1
push eax
call fcn.00512b86
push dword [ebp - 0x38]
call fcn.0050e798
add esp, 0x14
lea ecx, [ebp - 0x9c]
call fcn.00402ad0
xorps xmm0, xmm0
mov dword [ebp - 0x58], 0xc0d4d3f3
mov dword [ebp - 0x54], 0xd29b8dc7
xor ecx, ecx
mov byte [ebp - 0x50], 0xd5
movups xmmword [ebp - 0x4f], xmm0
mov dword [ebp - 0x3f], 0
mov word [ebp - 0x3b], 0
mov byte [ebp - 0x39], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x58], al
inc ecx
cmp ecx, 9
jb 0x446a88
lea eax, [ebp - 0x58]
mov dword [0x565630], ecx
push eax
lea ecx, [ebp - 0x124]
mov byte [ebp - 0x4f], 0
call fcn.00402b70
or edi, 0x10000000
mov dword [ebp - 0x34], edi
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x6d
call fcn.00402c10
sub esp, 0x18
lea edx, [ebp - 0x238]
mov ecx, esp
push eax
call fcn.004909d0
add esp, 4
call fcn.0040dee0
add esp, 0x18
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x54
call fcn.00402ad0
cmp byte [ebp - 0x11], 0
je 0x446da8
xorps xmm0, xmm0
mov word [ebp - 0x2a], 0xd2d8
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
xor ecx, ecx
mov word [ebp - 0x14], 0
mov byte [ebp - 0x12], 0
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x2a], al
inc ecx
cmp ecx, 2
jb 0x446b20
lea eax, [ebp - 0x2a]
mov dword [0x565598], ecx
push eax
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 0x28], 0
call fcn.00402b70
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x6e
call fcn.00402c10
xorps xmm0, xmm0
mov dword [ebp - 0xe4], 0xc0d4d3f3
mov esi, eax
mov dword [ebp - 0xe0], 0xd29b8dc7
mov byte [ebp - 0xdc], 0xd5
xor ecx, ecx
movups xmmword [ebp - 0xdb], xmm0
mov dword [ebp - 0xcb], 0
mov word [ebp - 0xc7], 0
mov byte [ebp - 0xc5], 0
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xe4], al
inc ecx
cmp ecx, 9
jb 0x446ba0
lea eax, [ebp - 0xe4]
mov dword [0x565630], ecx
push eax
lea ecx, [ebp - 0x124]
mov byte [ebp - 0xdb], 0
call fcn.00402b70
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x6f
call fcn.00402c10
push eax
lea edx, [ebp - 0x10c]
lea ecx, [ebp - 0x17c]
call fcn.004909d0
add esp, 4
mov ecx, eax
call fcn.00402c10
push esi
push eax
call fcn.0050ad80
add esp, 8
lea ecx, [ebp - 0x17c]
mov esi, eax
mov dword [ebp - 0x38], esi
call fcn.00402ad0
lea ecx, [ebp - 0x124]
call fcn.00402ad0
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x54
call fcn.00402ad0
test esi, esi
je 0x446da8
xorps xmm0, xmm0
mov dword [ebp - 0x57], 0xc6c3d5cc
mov dword [ebp - 0x53], 0xd4d19a8a
xor ecx, ecx
movups xmmword [ebp - 0x4f], xmm0
mov dword [ebp - 0x3f], 0
mov word [ebp - 0x3b], 0
mov byte [ebp - 0x39], 0
mov dword [ebp - 0x7e], 0xc0d4d3f3
mov dword [ebp - 0x7a], 0xd29b8dc7
mov byte [ebp - 0x76], 0xd5
movups xmmword [ebp - 0x75], xmm0
mov dword [ebp - 0x65], 0
mov word [ebp - 0x61], 0
mov byte [ebp - 0x5f], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x57], al
inc ecx
cmp ecx, 8
jb 0x446c86
lea eax, [ebp - 0x57]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x220]
mov byte [ebp - 0x4f], 0
call fcn.00402b70
sub esp, 0x18
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0x220]
mov dword [ebp - 0xec], esp
mov esi, esp
call fcn.00402c10
push eax
mov ecx, esi
call fcn.00402b70
mov byte [ebp - 4], 0x71
xor ecx, ecx
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x7e], al
inc ecx
cmp ecx, 9
jb 0x446cd5
lea eax, [ebp - 0x7e]
mov dword [0x565630], ecx
push eax
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x75], 0
call fcn.00402b70
sub esp, 0x18
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0x1c8]
mov esi, esp
call fcn.00402c10
push eax
lea edx, [ebp - 0x238]
mov ecx, esi
call fcn.004909d0
add esp, 4
lea ecx, [ebp - 0x3a0]
mov byte [ebp - 4], 0x73
call fcn.004441b0
add esp, 0x30
push 0
push 0
push 0x20
push 0xffffffffffffffff
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x74
push ecx
mov ecx, eax
call fcn.0048a540
lea ecx, [ebp - 0x3a0]
call fcn.0048a7b0
lea ecx, [ebp - 0x1c8]
call fcn.00402ad0
lea ecx, [ebp - 0x220]
call fcn.00402ad0
lea ecx, [ebp - 0x9c]
call fcn.00402ac0
lea ecx, [ebp - 0x9c]
mov esi, eax
call fcn.00402c10
push dword [ebp - 0x38]
push esi
push 1
push eax
call fcn.00512b86
push dword [ebp - 0x38]
call fcn.0050e798
add esp, 0x14
lea ecx, [ebp - 0x9c]
call fcn.00402ad0
lea ecx, [ebp - 0x10c]
call fcn.00402ad0
lea ecx, [ebp - 0x278]
call fcn.00402ad0
lea ecx, [ebp - 0x308]
call fcn.0048a7b0
lea ecx, [ebp - 0x2f4]
call fcn.00402ad0
lea ecx, [ebp - 0x250]
call fcn.00402ad0
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 0xa
call fcn.00402ad0
mov esi, dword [ebp - 0x128]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc esi
add esi, eax
mov dword [ebp - 0x128], esi
cmp byte [esi], 0
jne 0x444a60
lea ecx, [ebp - 0x330]
call fcn.00402ad0
lea ecx, [ebp - 0x348]
call fcn.00402ad0
lea ecx, [ebx + 8]
call fcn.00402ad0
lea ecx, [ebx + 0x20]
call fcn.00402ad0
lea ecx, [ebx + 0x38]
call fcn.00402ad0
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret