Function at 0x438470
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x7f6978
mov eax, dword fs:[0]
push eax
sub esp, 0x178
mov eax, dword [0x908074]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [0x1803d70]
lea ecx, [ebp - 0x184]
push 0
mov dword [ebp - 0x16c], esi
call fcn.0045afd0
lea edx, [esi + 0x15c]
mov dword [ebp - 4], 0
mov ecx, edx
mov dword [ebp - 0x20], 0
xor eax, eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
lea edi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4384e0
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x30]
call fcn.0040db70
lea edx, [ebp - 0x30]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x48]
call fcn.0041ae80
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 0x10
jb 0x438514
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0045af80
push 0x8ce51c
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 3
call fcn.0045b930
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.0045b560
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x34]
cmp edx, 0x10
jb 0x438579
mov ecx, dword [ebp - 0x48]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43856f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43933c
push edx
push ecx
call fcn.00479a82
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0xf
mov byte [ebp - 0x48], 0
cmp edx, 8
jb 0x4385c9
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4385bf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x439341
push edx
push ecx
call fcn.00479a82
add esp, 8
lea edx, [esi + 0x11c]
mov dword [ebp - 0x20], 0
mov ecx, edx
mov dword [ebp - 0x1c], 7
xor eax, eax
mov word [ebp - 0x30], ax
lea edi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4385f0
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x30]
call fcn.0040db70
lea edx, [ebp - 0x30]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x48]
call fcn.0041ae80
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 0x10
jb 0x438624
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0045af80
push 0x8ce524
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 6
call fcn.0045b930
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.0045b560
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x34]
cmp edx, 0x10
jb 0x438689
mov ecx, dword [ebp - 0x48]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43867f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x439346
push edx
push ecx
call fcn.00479a82
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0xf
mov byte [ebp - 0x48], 0
cmp edx, 8
jb 0x4386d9
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4386cf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43934b
push edx
push ecx
call fcn.00479a82
add esp, 8
sub esp, 0x18
lea eax, [esi + 8]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0045ad10
push 0x8ce52c
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 7
call fcn.0045b930
mov ecx, eax
mov byte [ebp - 4], 0
call fcn.0045b560
lea edx, [esi + 0x7ec]
lea ecx, [ebp - 0x48]
call fcn.0041ae80
mov byte [ebp - 4], 8
cmp dword [eax + 0x14], 0x10
jb 0x438723
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0045af80
push 0x8ce534
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 9
call fcn.0045b930
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.0045b560
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x34]
cmp edx, 0x10
jb 0x438788
mov ecx, dword [ebp - 0x48]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43877e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x439350
push edx
push ecx
call fcn.00479a82
add esp, 8
mov edx, 0x1803e08
lea ecx, [ebp - 0x48]
call fcn.0041ae80
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], 0x10
jb 0x4387a1
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0045af80
push 0x8ce53c
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0xb
call fcn.0045b930
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.0045b560
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x34]
cmp edx, 0x10
jb 0x438806
mov ecx, dword [ebp - 0x48]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4387fc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x439355
push edx
push ecx
call fcn.00479a82
add esp, 8
lea edx, [esi + 0x864]
lea ecx, [ebp - 0x48]
call fcn.0041ae80
mov byte [ebp - 4], 0xc
cmp dword [eax + 0x14], 0x10
jb 0x438820
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0045af80
push 0x8ce540
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0xd
call fcn.0045b930
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.0045b560
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x34]
cmp edx, 0x10
jb 0x438885
mov ecx, dword [ebp - 0x48]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43887b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43935a
push edx
push ecx
call fcn.00479a82
add esp, 8
lea ecx, [ebp - 0x15c]
call fcn.0045f1a0
lea eax, [ebp - 0x184]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x15c]
call fcn.00460470
push 0x408
call fcn.006c0a86
mov edi, eax
add esp, 4
mov dword [ebp - 0x168], edi
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0xf
mov byte [ebp - 0x48], 0
mov byte [ebp - 4], 0x11
mov esi, 5
cmp byte [0x8ced43], 0
mov eax, dword [0x8ced3c]
mov edx, dword [0x17f9f7c]
mov dword [ebp - 0x18], eax
mov eax, dword [0x8ced40]
mov dword [ebp - 0x14], eax
je 0x438a5f
xor ecx, ecx
mov dword [ebp - 0x160], ecx
cmp edx, 2
jl 0x438a20
movaps xmm2, xmmword [0x8d1650]
mov ecx, 0x1f
movaps xmm4, xmmword [0x8d1710]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm1, xmm4
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
movd xmm5, esi
psrad xmm1, xmm5
movd xmm6, ecx
movaps xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x8d1680]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x8d1660]
paddd xmm2, xmmword [0x8d1650]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x8d16c0]
movd xmm0, dword [0x8ced3c]
packuswb xmm1, xmm1
paddb xmm1, xmmword [0x8d16d0]
pxor xmm1, xmm0
movaps xmm0, xmm2
movd dword [ebp - 0x18], xmm1
movaps xmm1, xmm2
punpckldq xmm1, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm1, xmm4
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x8d1680]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x8d16c0]
packuswb xmm1, xmm1
paddb xmm1, xmmword [0x8d16d0]
movd xmm0, eax
pxor xmm1, xmm0
movd dword [ebp - 0x14], xmm1
jmp 0x438a5f
mov eax, 0x92492493
imul ecx
add edx, ecx
mov cl, 1
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
sub cl, al
mov al, cl
shl al, 3
sub al, cl
mov ecx, dword [ebp - 0x160]
shl al, 3
add al, cl
xor byte [ebp + ecx - 0x18], al
inc ecx
mov dword [ebp - 0x160], ecx
cmp ecx, 8
jl 0x438a20
mov edx, dword [0x17f9f7c]
lea esi, [ebp - 0x18]
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x438a65
mov eax, dword [0x8ced3c]
sub esi, ecx
cmp byte [0x8ced43], 0
mov dword [ebp - 0x18], eax
mov eax, dword [0x8ced40]
mov dword [ebp - 0x14], eax
je 0x438beb
xor ecx, ecx
mov dword [ebp - 0x160], ecx
cmp edx, 2
jl 0x438bb2
movaps xmm2, xmmword [0x8d1650]
mov eax, 5
movaps xmm5, xmmword [0x8d1710]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
movd xmm6, eax
psrad xmm1, xmm6
mov eax, 0x1f
movaps xmm0, xmm1
movd xmm7, eax
mov eax, dword [0x8d16d0]
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x8d1680]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x8d1660]
paddd xmm2, xmmword [0x8d1650]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x8d16c0]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [0x8ced3c]
pxor xmm1, xmm0
movaps xmm0, xmm2
movd dword [ebp - 0x18], xmm1
movaps xmm1, xmm2
punpckldq xmm1, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x8d1680]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x8d16c0]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [0x8ced40]
pxor xmm1, xmm0
movd dword [ebp - 0x14], xmm1
jmp 0x438beb
mov eax, 0x92492493
imul ecx
add edx, ecx
mov cl, 1
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
sub cl, al
mov al, cl
shl al, 3
sub al, cl
mov ecx, dword [ebp - 0x160]
shl al, 3
add al, cl
xor byte [ebp + ecx - 0x18], al
inc ecx
mov dword [ebp - 0x160], ecx
cmp ecx, 8
jl 0x438bb2
push esi
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x168]
call fcn.00408de0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x168]
call fcn.00408eb0
lea edx, [ebp - 0x48]
lea ecx, [ebp - 0x98]
call fcn.00403950
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0x98]
cmp dword [ebp - 0x84], 0x10
mov dword [ebp - 0x20], 0
cmovae edx, dword [ebp - 0x98]
mov ecx, edx
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x438c50
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x30]
call fcn.00406070
lea edx, [ebp - 0x30]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x80]
call fcn.00419ce0
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x1c]
cmp edx, 0x10
jb 0x438caa
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x438ca0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43935f
push edx
push ecx
call fcn.00479a82
add esp, 8
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
xorps xmm0, xmm0
mov dword [ebp - 0xf8], 0
xor eax, eax
movlpd qword [ebp - 0x110], xmm0
movaps xmm0, xmmword [0x8d16a0]
mov dword [ebp - 0xf4], 7
mov word [ebp - 0x108], ax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], 7
mov word [ebp - 0xf0], ax
movups xmmword [ebp - 0xd8], xmm0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x30]
cmp dword [ebp - 0x6c], 8
lea eax, [ebp - 0x80]
push ecx
cmovae eax, dword [ebp - 0x80]
lea ecx, [ebp - 0x110]
push eax
push 0x8ce588
call fcn.004540b0
cmp dword [ebp - 0x20], 0
jne 0x438d3a
xor esi, esi
jmp 0x439191
push ecx
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0xb0]
call fcn.004039c0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
push 0x408
call fcn.006c0a86
mov esi, eax
add esp, 8
mov dword [ebp - 0x164], esi
mov byte [ebp - 4], 0x1a
cmp byte [0x8ced43], 0
mov eax, dword [0x8ced3c]
mov edx, dword [0x8ced40]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
je 0x438ef9
xor ecx, ecx
cmp dword [0x17f9f7c], 2
mov dword [ebp - 0x160], ecx
jl 0x438ec0
movaps xmm2, xmmword [0x8d1650]
mov eax, 5
movaps xmm5, xmmword [0x8d1710]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
movd xmm6, eax
psrad xmm1, xmm6
mov eax, 0x1f
movaps xmm0, xmm1
movd xmm7, eax
mov eax, dword [0x8d16d0]
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x8d1680]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x8d1660]
paddd xmm2, xmmword [0x8d1650]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x8d16c0]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [0x8ced3c]
pxor xmm1, xmm0
movaps xmm0, xmm2
movd dword [ebp - 0x18], xmm1
movaps xmm1, xmm2
punpckldq xmm1, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x8d1680]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x8d16c0]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, edx
pxor xmm1, xmm0
movd dword [ebp - 0x14], xmm1
jmp 0x438ef9
mov eax, 0x92492493
imul ecx
add edx, ecx
mov cl, 1
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
sub cl, al
mov al, cl
shl al, 3
sub al, cl
mov ecx, dword [ebp - 0x160]
shl al, 3
add al, cl
xor byte [ebp + ecx - 0x18], al
inc ecx
mov dword [ebp - 0x160], ecx
cmp ecx, 8
jl 0x438ec0
lea edx, [ebp - 0x18]
lea ecx, [edx + 1]
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x438f00
mov eax, dword [0x8ced3c]
sub edx, ecx
cmp byte [0x8ced43], 0
mov dword [ebp - 0x50], eax
mov eax, dword [0x8ced40]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x4c], eax
je 0x439090
xor ecx, ecx
cmp dword [0x17f9f7c], 2
mov dword [ebp - 0x160], ecx
jl 0x439054
movaps xmm2, xmmword [0x8d1650]
mov eax, 5
movaps xmm5, xmmword [0x8d1710]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
movd xmm6, eax
psrad xmm1, xmm6
mov eax, 0x1f
movaps xmm0, xmm1
movd xmm7, eax
mov eax, dword [0x8d16d0]
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x8d1680]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x8d1660]
paddd xmm2, xmmword [0x8d1650]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x8d16c0]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [0x8ced3c]
pxor xmm1, xmm0
movaps xmm0, xmm2
movd dword [ebp - 0x50], xmm1
movaps xmm1, xmm2
punpckldq xmm1, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x8d1680]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x8d16c0]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [0x8ced40]
pxor xmm1, xmm0
movd dword [ebp - 0x4c], xmm1
jmp 0x439090
mov eax, 0x92492493
imul ecx
add edx, ecx
mov cl, 1
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
sub cl, al
mov al, cl
shl al, 3
sub al, cl
mov ecx, dword [ebp - 0x160]
shl al, 3
add al, cl
xor byte [ebp + ecx - 0x50], al
inc ecx
mov dword [ebp - 0x160], ecx
cmp ecx, 8
jl 0x439054
mov edx, dword [ebp - 0x14]
push edx
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x164]
call fcn.00408de0
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x164]
call fcn.00408eb0
mov edx, dword [ebp - 0x58]
test edx, edx
je 0x4390eb
mov ecx, dword [ebp - 0x16c]
lea eax, [ebp - 0x68]
add ecx, 0x84
cmp ecx, eax
je 0x4390df
cmp dword [ebp - 0x54], 0x10
push edx
cmovae eax, dword [ebp - 0x68]
push eax
call fcn.00406070
mov dword [ebp - 0x164], 1
jmp 0x4390f5
mov dword [ebp - 0x164], 0
test esi, esi
je 0x439102
push esi
call fcn.006c0569
add esp, 4
mov edx, dword [ebp - 0x54]
cmp edx, 0x10
jb 0x439136
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43912c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x439364
push edx
push ecx
call fcn.00479a82
add esp, 8
mov edx, dword [ebp - 0x9c]
cmp edx, 0x10
jb 0x439170
mov ecx, dword [ebp - 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x439166
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x439369
push edx
push ecx
call fcn.00479a82
add esp, 8
mov esi, dword [ebp - 0x164]
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
lea ecx, [ebp - 0x110]
call fcn.004525e0
mov edx, dword [ebp - 0x1c]
cmp edx, 0x10
jb 0x4391d0
mov ecx, dword [ebp - 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4391c6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43936e
push edx
push ecx
call fcn.00479a82
add esp, 8
mov edx, dword [ebp - 0x6c]
cmp edx, 8
jb 0x43920a
mov ecx, dword [ebp - 0x80]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x439200
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x439373
push edx
push ecx
call fcn.00479a82
add esp, 8
mov edx, dword [ebp - 0x84]
xor eax, eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], ax
cmp edx, 0x10
jb 0x439258
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43924e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x439378
push edx
push ecx
call fcn.00479a82
add esp, 8
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
cmp edx, 0x10
jb 0x4392a7
mov ecx, dword [ebp - 0x48]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43929d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43937d
push edx
push ecx
call fcn.00479a82
add esp, 8
test edi, edi
je 0x4392b4
push edi
call fcn.006c0569
add esp, 4
mov edx, dword [ebp - 0xb4]
cmp edx, 0x10
jb 0x4392ee
mov ecx, dword [ebp - 0xc8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4392e4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x439382
push edx
push ecx
call fcn.00479a82
add esp, 8
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0xf
mov byte [ebp - 0xc8], 0
call fcn.0044d4d0
lea ecx, [ebp - 0x184]
call fcn.0045b480
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00479846
mov esp, ebp
pop ebp
ret
call fcn.006ba549
call fcn.006ba549
call fcn.006ba549
call fcn.006ba549
call fcn.006ba549
call fcn.006ba549
call fcn.006ba549
call fcn.006ba549
call fcn.006ba549
call fcn.006ba549
call fcn.006ba549
call fcn.006ba549
call fcn.006ba549
call fcn.006ba549
call fcn.006ba549
int3