Function at 0x447ae0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x822629
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x188
mov eax, dword [0x93bf44]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x168], esi
mov eax, dword [esi + 0xc]
mov dword [esi + 0x18], 1
test eax, eax
jne 0x447b47
call fcn.00673830
mov dword [esi + 0xc], eax
test eax, eax
je 0x448947
mov eax, dword [0x181cbec]
mov ecx, esi
cmp dword [eax + 0x784], 0
je 0x447b6a
push 0
mov dword [0x181cbdc], 1
push 5
jmp 0x448950
call fcn.004477b0
lea edi, [esi + 0x88]
xorps xmm0, xmm0
comisd xmm0, xmmword [edi]
jb 0x447bf2
add esi, 0x28
cmp dword [esi + 0x14], 8
jb 0x447b89
mov esi, dword [esi]
push esi
lea ecx, [ebp - 0x50]
call fcn.0040eba0
sub esp, 0x18
mov dword [ebp - 4], 0
mov eax, esp
lea ecx, [ebp - 0x50]
push ecx
push eax
call fcn.00446cb0
call fcn.004474d0
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x3c]
movsd qword [edi], xmm0
cmp edx, 8
jb 0x447bf2
mov ecx, dword [ebp - 0x50]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x447be8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448973
push edx
push ecx
call fcn.005c24d6
add esp, 8
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
movzx ecx, word [eax + 0x2c]
mov edi, 0x811c9dc5
mov esi, dword [eax + 0x30]
and ecx, 0xfffffffe
mov dword [ebp - 0x15c], edi
xor edi, edi
mov dword [ebp - 0x164], eax
lea edx, [ecx + esi]
inc ecx
shr ecx, 1
cmp esi, edx
cmova ecx, edi
mov dword [ebp - 0x160], ecx
test ecx, ecx
je 0x447c72
mov eax, dword [ebp - 0x15c]
mov dl, byte [esi]
lea ecx, [edx - 0x41]
cmp cl, 0x19
movsx ecx, dl
ja 0x447c46
or ecx, 0x20
xor ecx, eax
inc edi
imul eax, ecx, 0x1000193
add esi, 2
cmp edi, dword [ebp - 0x160]
jne 0x447c36
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x8ec4c73b
mov eax, dword [ebp - 0x164]
je 0x447c76
mov eax, dword [eax]
jmp 0x447bfe
mov esi, dword [eax + 0x18]
mov eax, dword [0x181d09c]
mov dword [ebp - 0x160], esi
test eax, eax
jne 0x447d56
test esi, esi
je 0x447d4f
mov eax, dword [esi + 0x3c]
mov ecx, dword [eax + esi + 0x78]
mov eax, dword [eax + esi + 0x7c]
add ecx, esi
mov dword [ebp - 0x184], eax
xor eax, eax
mov dword [ebp - 0x164], ecx
cmp ecx, esi
je 0x447d51
mov dword [ebp - 0x15c], eax
cmp dword [ecx + 0x18], eax
je 0x447d4f
mov edi, dword [ecx + 0x20]
add edi, esi
nop dword [eax + eax]
mov edx, dword [edi]
add edx, esi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x447d0b
mov al, cl
sub al, 0x41
cmp al, 0x19
movsx eax, cl
ja 0x447cee
or eax, 0x20
mov cl, byte [edx]
xor eax, esi
imul esi, eax, 0x1000193
inc edx
test cl, cl
jne 0x447ce0
cmp esi, 0xaeae5d63
je 0x447d28
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x164]
inc eax
add edi, 4
mov dword [ebp - 0x15c], eax
cmp eax, dword [ecx + 0x18]
je 0x447d4f
mov esi, dword [ebp - 0x160]
jmp 0x447cd0
mov eax, dword [ebp - 0x164]
mov esi, dword [ebp - 0x160]
mov edx, dword [ebp - 0x15c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, esi
jmp 0x447d51
xor eax, eax
mov dword [0x181d09c], eax
mov esi, dword [ebp - 0x168]
cmp dword [esi + 0x84], 0x10
lea edi, [esi + 0x70]
mov dword [ebp - 0x174], edi
mov ecx, edi
jb 0x447d72
mov ecx, dword [edi]
push ecx
call eax
test eax, eax
je 0x447f2d
sub esp, 0x18
mov ecx, esp
push edi
call fcn.00405d70
call fcn.0041dc80
add esp, 0x18
ucomisd xmm0, qword [esi + 0x88]
lahf
test ah, 0x44
jp 0x447db1
mov dword [0x181cbdc], 1
push 0
push 5
jmp 0x44894e
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
movzx ecx, word [eax + 0x2c]
mov edi, 0x811c9dc5
mov esi, dword [eax + 0x30]
and ecx, 0xfffffffe
mov dword [ebp - 0x15c], edi
xor edi, edi
mov dword [ebp - 0x160], eax
lea edx, [ecx + esi]
inc ecx
shr ecx, 1
cmp esi, edx
cmova ecx, edi
mov dword [ebp - 0x164], ecx
test ecx, ecx
je 0x447e31
mov eax, dword [ebp - 0x15c]
mov dl, byte [esi]
lea ecx, [edx - 0x41]
cmp cl, 0x19
movsx ecx, dl
ja 0x447e05
or ecx, 0x20
xor ecx, eax
inc edi
imul eax, ecx, 0x1000193
add esi, 2
cmp edi, dword [ebp - 0x164]
jne 0x447df5
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0xa3e6f6c3
mov eax, dword [ebp - 0x160]
je 0x447e35
mov eax, dword [eax]
jmp 0x447dbd
mov esi, dword [eax + 0x18]
mov eax, dword [0x181d0a0]
mov dword [ebp - 0x164], esi
test eax, eax
jne 0x447f16
test esi, esi
je 0x447f0f
mov eax, dword [esi + 0x3c]
mov ecx, dword [eax + esi + 0x78]
mov eax, dword [eax + esi + 0x7c]
add ecx, esi
mov dword [ebp - 0x184], eax
xor eax, eax
mov dword [ebp - 0x160], ecx
cmp ecx, esi
je 0x447f11
mov dword [ebp - 0x15c], eax
cmp dword [ecx + 0x18], eax
je 0x447f0f
mov edi, dword [ecx + 0x20]
add edi, esi
nop word [eax + eax]
mov edx, dword [edi]
add edx, esi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x447ecb
mov al, cl
sub al, 0x41
cmp al, 0x19
movsx eax, cl
ja 0x447eae
or eax, 0x20
mov cl, byte [edx]
xor eax, esi
imul esi, eax, 0x1000193
inc edx
test cl, cl
jne 0x447ea0
cmp esi, 0x677a31d7
je 0x447ee8
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x160]
inc eax
add edi, 4
mov dword [ebp - 0x15c], eax
cmp eax, dword [ecx + 0x18]
je 0x447f0f
mov esi, dword [ebp - 0x164]
jmp 0x447e90
mov eax, dword [ebp - 0x160]
mov esi, dword [ebp - 0x164]
mov edx, dword [ebp - 0x15c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, esi
jmp 0x447f11
xor eax, eax
mov dword [0x181d0a0], eax
mov ecx, dword [ebp - 0x174]
cmp dword [ecx + 0x14], 0x10
jb 0x447f24
mov ecx, dword [ecx]
push ecx
call eax
mov esi, dword [ebp - 0x168]
movsd xmm4, qword [esi + 0x88]
xorps xmm0, xmm0
comisd xmm0, xmm4
jb 0x447f48
push 0x82
jmp 0x44894c
cmp dword [esi + 0x68], 0
lea edi, [esi + 0x58]
mov ecx, dword [0x1816094]
mov dword [ebp - 0x184], edi
jne 0x4481f3
movups xmm0, xmmword [0x8ffc04]
movups xmmword [ebp - 0x24], xmm0
psrldq xmm0, 0xf
movd eax, xmm0
test al, al
je 0x448104
xor edx, edx
mov dword [ebp - 0x160], edx
cmp ecx, 2
jl 0x4480d0
movaps xmm5, xmmword [0x9036b0]
mov eax, 4
movaps xmm3, xmmword [0x903750]
xor ecx, ecx
movaps xmm7, xmmword [0x9036e0]
movd xmm6, eax
mov eax, 0x1f
movd xmm0, eax
movups xmmword [ebp - 0x50], xmm0
movaps xmm0, xmmword [0x903730]
movaps xmmword [ebp - 0x180], xmm0
mov edx, dword [ebp - 0x180]
nop
movd xmm0, ecx
lea eax, [ecx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm5
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movaps xmm0, xmm1
psrld xmm0, xmmword [ebp - 0x50]
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x903720]
packuswb xmm1, xmm1
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [ebp + ecx - 0x24]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [ebp + ecx - 0x24], xmm1
paddd xmm2, xmm5
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movaps xmm0, xmm1
psrld xmm0, xmmword [ebp - 0x50]
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x903720]
packuswb xmm1, xmm1
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [ebp + ecx - 0x20]
pxor xmm1, xmm0
movd dword [ebp + ecx - 0x20], xmm1
add ecx, 8
cmp ecx, 0x10
jl 0x447fd0
jmp 0x448104
mov eax, 0x4d4873ed
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x160]
movsx eax, al
mov cl, dl
imul eax, eax, 0x35
sub cl, al
add cl, 0x38
xor byte [ebp + edx - 0x24], cl
inc edx
mov dword [ebp - 0x160], edx
cmp edx, 0x10
jl 0x4480d0
sub esp, 8
lea eax, [ebp - 0x24]
movsd qword [esp], xmm4
push dword [esi + 0x24]
push eax
lea eax, [ebp - 0xe0]
push eax
call fcn.00415910
add esp, 0x14
lea ecx, [esi + 0x40]
mov dword [ebp - 4], 1
cmp dword [ecx + 0x14], 0x10
mov edx, dword [ecx + 0x10]
jb 0x448137
mov ecx, dword [ecx]
push edx
push ecx
push 0
mov ecx, eax
call fcn.00448b30
mov ecx, edi
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x98], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x98]
push eax
movq qword [ebp - 0x88], xmm0
call fcn.00405320
mov edx, dword [ebp - 0x84]
cmp edx, 0x10
jb 0x4481b2
mov ecx, dword [ebp - 0x98]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4481a8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448978
push edx
push ecx
call fcn.005c24d6
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0xcc]
cmp edx, 0x10
jb 0x4481f3
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4481e9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44897d
push edx
push ecx
call fcn.005c24d6
add esp, 8
sub esp, 0x18
mov ecx, esp
push edi
call fcn.00405d70
call fcn.0041dc80
add esp, 0x18
movsd qword [esi + 0x10], xmm0
comisd xmm0, xmmword [esi + 0x88]
lea edi, [esi + 0x10]
jae 0x447d9e
cmp byte [0x8ffc03], 0
mov eax, dword [0x8ffc00]
mov dword [ebp - 0x15c], eax
je 0x448317
xor edx, edx
cmp dword [0x1816094], 2
mov dword [ebp - 0x160], edx
jl 0x4482e0
movups xmm3, xmmword [0x9036b0]
mov ecx, 4
movaps xmm2, xmm3
movaps xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x903750]
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x903750]
shufps xmm2, xmm0, 0xdd
movd xmm0, ecx
mov ecx, 0x1f
psrad xmm2, xmm0
movaps xmm1, xmm2
movd xmm0, ecx
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x9036e0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x903720]
packuswb xmm1, xmm1
paddb xmm1, xmmword [0x903730]
movd xmm0, eax
pxor xmm1, xmm0
movd dword [ebp - 0x15c], xmm1
jmp 0x448317
mov eax, 0x4d4873ed
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x160]
movsx eax, al
mov cl, dl
imul eax, eax, 0x35
sub cl, al
add cl, 0x38
xor byte [ebp + edx - 0x15c], cl
inc edx
mov dword [ebp - 0x160], edx
cmp edx, 4
jl 0x4482e0
cmp dword [esi + 0x6c], 0x10
lea eax, [esi + 0x58]
jb 0x448323
mov eax, dword [esi + 0x58]
lea ecx, [ebp - 0x15c]
push ecx
push eax
call fcn.006dc4a6
add esp, 8
mov dword [esi], eax
test eax, eax
jne 0x448343
push 0x81
jmp 0x44894c
cmp dword [esi + 0x3c], 8
lea eax, [esi + 0x24]
mov dword [ebp - 0x198], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x194], eax
lea eax, [esi + 0x88]
mov dword [ebp - 0x190], eax
lea eax, [esi + 0x28]
mov dword [ebp - 0x18c], edi
jb 0x448372
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xb0]
call fcn.0040eba0
lea eax, [ebp - 0xb0]
mov dword [ebp - 4], 2
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.00446cb0
cmp dword [eax + 0x14], 0x10
jb 0x44839d
mov eax, dword [eax]
push eax
push 0x2712
push dword [esi + 0xc]
call fcn.00676de0
mov edx, dword [ebp - 0x54]
add esp, 0xc
cmp edx, 0x10
jb 0x4483e2
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4483d8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448982
push edx
push ecx
call fcn.005c24d6
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
cmp edx, 8
jb 0x44843b
mov ecx, dword [ebp - 0xb0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448431
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448987
push edx
push ecx
call fcn.005c24d6
add esp, 8
push 0
push 0xd
push dword [esi + 0xc]
call fcn.00676de0
push 0x258
push 0x4e
push dword [esi + 0xc]
call fcn.00676de0
push esi
push 0x2711
push dword [esi + 0xc]
call fcn.00676de0
push 0x4465b0
push 0x4e2b
push dword [esi + 0xc]
call fcn.00676de0
push 0
push 0x2b
push dword [esi + 0xc]
call fcn.00676de0
push 0x4465e0
push 0x4e58
push dword [esi + 0xc]
call fcn.00676de0
add esp, 0x48
lea eax, [ebp - 0x198]
push eax
push 0x2749
push dword [esi + 0xc]
call fcn.00676de0
cvttsd2si eax, qword [edi]
push eax
push 0x15
push dword [esi + 0xc]
call fcn.00676de0
push 0
push 0x40
push dword [esi + 0xc]
call fcn.00676de0
push 0
push 0x51
push dword [esi + 0xc]
call fcn.00676de0
push 1
push 0x34
push dword [esi + 0xc]
call fcn.00676de0
add esp, 0x3c
cmp dword [esi + 0xd8], 0
je 0x4485c8
cmp dword [esi + 0xdc], 8
lea eax, [esi + 0xc8]
jb 0x4484ff
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xc8]
call fcn.0040eba0
lea eax, [ebp - 0xc8]
mov dword [ebp - 4], 3
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.00446cb0
cmp dword [eax + 0x14], 0x10
jb 0x44852a
mov eax, dword [eax]
push eax
push 0x2720
push dword [esi + 0xc]
call fcn.00676de0
mov edx, dword [ebp - 0x6c]
add esp, 0xc
cmp edx, 0x10
jb 0x44856f
mov ecx, dword [ebp - 0x80]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x448565
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44898c
push edx
push ecx
call fcn.005c24d6
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0xb4]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0xf
mov byte [ebp - 0x80], 0
cmp edx, 8
jb 0x4485c8
mov ecx, dword [ebp - 0xc8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4485be
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448991
push edx
push ecx
call fcn.005c24d6
add esp, 8
xor edx, edx
lea edi, [ebp - 0x158]
cmp dword [0x1816094], 2
mov ecx, 0x1d
mov esi, str.uV_RPQ_
mov dword [ebp - 0x15c], edx
rep movsd dword es:[edi], dword [esi]
jl 0x448740
movaps xmm0, xmmword [0x903730]
mov eax, 4
movaps xmm4, xmmword [0x9036b0]
movaps xmm3, xmmword [0x903750]
movaps xmm6, xmmword [0x9036e0]
movd xmm5, eax
mov eax, 0x1f
movaps xmmword [ebp - 0x180], xmm0
mov ecx, dword [ebp - 0x180]
movd xmm7, eax
nop word [eax + eax]
movd xmm0, edx
lea eax, [edx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x903720]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [ebp + edx - 0x158]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [ebp + edx - 0x158], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x903720]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [ebp + edx - 0x154]
pxor xmm1, xmm0
movd dword [ebp + edx - 0x154], xmm1
add edx, 8
cmp edx, 0x70
jl 0x448630
mov dword [ebp - 0x15c], edx
cmp edx, 0x74
jge 0x448777
nop
mov eax, 0x4d4873ed
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x15c]
movsx eax, al
mov cl, dl
imul eax, eax, 0x35
sub cl, al
add cl, 0x38
xor byte [ebp + edx - 0x158], cl
inc edx
mov dword [ebp - 0x15c], edx
cmp edx, 0x74
jl 0x448740
mov esi, dword [ebp - 0x168]
lea eax, [ebp - 0x158]
push eax
push 0x2722
push dword [esi + 0xc]
call fcn.00676de0
push dword [esi + 0xc]
call fcn.00673870
push dword [esi]
mov edi, eax
call fcn.006d791d
add esp, 0x14
test edi, edi
je 0x447da8
cmp edi, 0x17
jne 0x448944
cmp dword [esi + 0x18], 3
jne 0x448940
cmp dword [esi + 0x68], 0
je 0x448940
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
movzx edx, word [eax + 0x2c]
mov esi, 0x811c9dc5
mov edi, dword [eax + 0x30]
and edx, 0xfffffffe
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x164], 0
lea ecx, [edx + edi]
inc edx
shr edx, 1
cmp edi, ecx
cmova edx, dword [ebp - 0x174]
mov dword [ebp - 0x174], edx
test edx, edx
je 0x448852
mov eax, dword [ebp - 0x164]
nop
mov dl, byte [edi]
lea ecx, [edx - 0x41]
cmp cl, 0x19
movsx ecx, dl
ja 0x448830
or ecx, 0x20
xor esi, ecx
inc eax
imul esi, esi, 0x1000193
add edi, 2
cmp eax, dword [ebp - 0x174]
jne 0x448820
mov eax, dword [ebp - 0x160]
cmp esi, 0xa3e6f6c3
je 0x448856
mov eax, dword [eax]
jmp 0x4487d6
mov esi, dword [eax + 0x18]
mov eax, dword [0x181d0a0]
mov dword [ebp - 0x164], esi
test eax, eax
jne 0x448929
test esi, esi
je 0x448922
mov eax, dword [esi + 0x3c]
mov ecx, dword [eax + esi + 0x78]
xor eax, eax
add ecx, esi
mov dword [ebp - 0x160], ecx
cmp ecx, esi
je 0x448924
mov dword [ebp - 0x15c], eax
cmp dword [ecx + 0x18], eax
je 0x448922
mov edi, dword [ecx + 0x20]
add edi, esi
mov edx, dword [edi]
add edx, esi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4488dc
mov al, cl
sub al, 0x41
cmp al, 0x19
movsx eax, cl
ja 0x4488bf
or eax, 0x20
mov cl, byte [edx]
xor esi, eax
imul esi, esi, 0x1000193
inc edx
test cl, cl
jne 0x4488b1
cmp esi, 0x677a31d7
je 0x4488f9
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x160]
inc eax
add edi, 4
mov dword [ebp - 0x15c], eax
cmp eax, dword [ecx + 0x18]
je 0x448922
mov esi, dword [ebp - 0x164]
jmp 0x4488a1
mov esi, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov edx, dword [ebp - 0x164]
mov eax, dword [esi + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
jmp 0x448924
xor eax, eax
mov dword [0x181d0a0], eax
mov ecx, dword [ebp - 0x184]
cmp dword [ecx + 0x14], 0x10
jb 0x448937
mov ecx, dword [ecx]
push ecx
call eax
mov esi, dword [ebp - 0x168]
push 0x17
jmp 0x44894c
push edi
jmp 0x44894c
push 0x80
push 4
mov ecx, esi
call fcn.00447070
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005c22ca
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
call fcn.006d1429
int3