Function at 0x433ce0
Capabilities:
Authenticate hmac
Encode data using xor
Get common file path
Get startup folder
Inspect section memory permissions
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52ea3e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x4f8
push esi
mov esi, ecx
mov byte [ebp - 0x15], dl
mov dword [ebp - 0x174], esi
push edi
mov dword [ebp - 0x14], 1
mov dword [ebp - 4], 0
push ecx
call fcn.0048ab80
mov byte [ebp - 4], 3
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x44], esp
sub esp, 8
mov dword [ebp - 0x37], 0xd9dedfcc
mov eax, esp
mov word [ebp - 0x33], 0xd1da
xorps xmm0, xmm0
mov byte [ebp - 0x31], 0xc6
mov edi, 1
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x14], edi
movups xmmword [ebp - 0x30], xmm0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
mov dword [eax], 0
mov dword [eax + 4], 0
call fcn.0048ab50
add esp, 8
mov dword [ebp - 4], 4
xor ecx, ecx
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 7
jb 0x433d93
lea eax, [ebp - 0x37]
mov dword [0x565560], ecx
push eax
lea ecx, [ebp - 0xfc]
mov byte [ebp - 0x30], 0
call fcn.00402b70
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xfc]
call fcn.00402c10
push eax
mov ecx, esi
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.0048a7d0
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 3
call fcn.00402ad0
push 0x104
lea eax, [ebp - 0x508]
push 0
push eax
call fcn.00506f10
add esp, 0xc
lea eax, [ebp - 0x508]
push eax
movzx eax, byte [ebp - 0x15]
xor eax, 1
push 0
push 0
lea eax, [eax*2 + 0x1a]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea eax, [ebx + 0x10]
push eax
lea edx, [ebp - 0x508]
lea ecx, [ebp - 0x200]
call fcn.00490a90
add esp, 4
mov dword [ebp - 4], 7
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
cmp byte [ebx + 8], 0
mov byte [ebp - 4], 8
jne 0x43418f
sub esp, 0x18
lea eax, [ebp - 0x200]
mov ecx, esp
push eax
call fcn.0048ccc0
push 0
mov dl, 1
lea ecx, [ebp - 0x14c]
call fcn.0042a0f0
add esp, 0x1c
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 9
call fcn.0048b950
test eax, eax
jne 0x433eec
call fcn.0048eeb0
lea ecx, [ebp - 0xcc]
call fcn.0048eeb0
lea ecx, [ebp - 0x200]
call fcn.00402ad0
lea ecx, [ebx + 0x10]
call fcn.00402ad0
lea ecx, [ebx + 0x28]
call fcn.00402ad0
lea ecx, [ebx + 0x40]
call fcn.00402ad0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
xor esi, esi
mov dword [ebp - 0x6c], esi
call fcn.0048b950
test eax, eax
je 0x43417e
nop
cmp byte [ebx + 0xc], 0
je 0x433f70
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0xc6d4fef3
mov dword [ebp - 0x34], 0xddc7dbc4
xor ecx, ecx
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x38], al
inc ecx
cmp ecx, 8
jb 0x433f30
lea eax, [ebp - 0x38]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x300]
mov byte [ebp - 0x30], 0
call fcn.00402b70
or edi, 2
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x300]
mov dword [ebp - 0x14], edi
call fcn.00402c10
mov edi, eax
jmp 0x433f75
mov edi, 0x5443dc
push esi
lea ecx, [ebp - 0x14c]
call fcn.0048b930
xorps xmm0, xmm0
mov dword [ebp - 0xa8], eax
mov byte [ebp - 0xe4], 0xf3
xor ecx, ecx
movups xmmword [ebp - 0xe3], xmm0
mov dword [ebp - 0xd3], 0
mov word [ebp - 0xcf], 0
mov byte [ebp - 0xcd], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xe4], al
inc ecx
cmp ecx, 1
jb 0x433fb4
lea eax, [ebp - 0xe4]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0xfc]
mov byte [ebp - 0xe3], 0
call fcn.00402b70
lea ecx, [ebp - 0xfc]
mov dword [ebp - 4], 0xb
call fcn.00402c10
push eax
lea edx, [ebp - 0x200]
lea ecx, [ebp - 0x1e8]
call fcn.004909d0
add esp, 4
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x288]
push dword [ebp - 0xa8]
mov edx, eax
call fcn.00490bf0
sub esp, 0x14
mov byte [ebp - 4], 0xd
mov ecx, esp
mov edx, eax
push edi
call fcn.00490a30
add esp, 4
lea ecx, [ebp - 0x188]
xor dl, dl
push 0
call fcn.0042a0f0
add esp, 0x1c
lea ecx, [ebp - 0x288]
call fcn.00402ad0
lea ecx, [ebp - 0x1e8]
call fcn.00402ad0
lea ecx, [ebp - 0xfc]
call fcn.00402ad0
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x14]
test al, 2
je 0x434085
and eax, 0xfffffffd
lea ecx, [ebp - 0x300]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
lea ecx, [ebp - 0x188]
call fcn.0048b950
test eax, eax
je 0x434155
xor edi, edi
mov dword [ebp - 0x68], edi
call fcn.0048b950
test eax, eax
je 0x434155
nop word [eax + eax]
push edi
lea ecx, [ebp - 0x188]
call fcn.0048b930
push 0
lea ecx, [ebx + 0x28]
push ecx
mov ecx, eax
call fcn.0048c7e0
cmp eax, 0xffffffff
je 0x43413e
lea ecx, [ebp - 0xcc]
xor edi, edi
call fcn.0048b950
mov dword [ebp - 0xa8], eax
test eax, eax
je 0x434123
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x14c]
call fcn.0048b930
push edi
lea ecx, [ebp - 0xcc]
mov esi, eax
call fcn.0048b930
mov edx, esi
mov ecx, eax
call fcn.00490c70
mov esi, dword [ebp - 0x6c]
test al, al
jne 0x43413b
inc edi
cmp edi, dword [ebp - 0xa8]
jb 0x4340f0
push esi
lea ecx, [ebp - 0x14c]
call fcn.0048b930
push eax
lea ecx, [ebp - 0xcc]
call fcn.0048ba10
mov edi, dword [ebp - 0x68]
inc edi
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x68], edi
call fcn.0048b950
cmp edi, eax
jb 0x4340b0
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 9
call fcn.0048eeb0
inc esi
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x6c], esi
call fcn.0048b950
mov edi, dword [ebp - 0x14]
cmp esi, eax
jb 0x433f00
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 8
call fcn.0048eeb0
jmp 0x4341c4
push 0x5443dc
lea ecx, [ebp - 0xfc]
call fcn.00402b70
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0xcc]
call fcn.0048b9b0
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 8
call fcn.00402ad0
lea ecx, [ebp - 0xcc]
call fcn.0048b950
test eax, eax
jne 0x434208
push 0x5443dc
lea ecx, [ebp - 0xfc]
call fcn.00402b70
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0xcc]
call fcn.0048b9b0
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 8
call fcn.00402ad0
xorps xmm0, xmm0
mov byte [ebp - 0xe4], 0xf3
movups xmmword [ebp - 0xe3], xmm0
mov dword [ebp - 0xd3], 0
xor ecx, ecx
mov word [ebp - 0xcf], 0
mov byte [ebp - 0xcd], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xe4], al
inc ecx
cmp ecx, 1
jb 0x434235
lea eax, [ebp - 0xe4]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0xfc]
mov byte [ebp - 0xe3], 0
call fcn.00402b70
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x15
call fcn.00402c10
push eax
lea edx, [ebp - 0x200]
lea ecx, [ebp - 0x288]
call fcn.004909d0
sub esp, 0x14
mov byte [ebp - 4], 0x16
lea edx, [ebx + 0x40]
mov ecx, esp
push edx
mov edx, eax
call fcn.00490bf0
add esp, 4
call fcn.0040dee0
add esp, 0x18
mov byte [ebp - 0x15], al
lea ecx, [ebp - 0x288]
call fcn.00402ad0
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 8
call fcn.00402ad0
cmp byte [ebp - 0x15], 0
jne 0x4343ee
movaps xmm0, xmmword [0x551b70]
xor ecx, ecx
movups xmmword [ebp - 0x40], xmm0
mov dword [ebp - 0x20], 0
xorps xmm0, xmm0
mov word [ebp - 0x1c], 0
movups xmmword [ebp - 0x30], xmm0
mov byte [ebp - 0x1a], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x40], al
inc ecx
cmp ecx, 0x10
jb 0x4342f1
lea eax, [ebp - 0x40]
mov dword [0x565628], ecx
push eax
lea ecx, [ebp - 0xfc]
mov byte [ebp - 0x30], 0
call fcn.00402b70
sub esp, 0x18
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xfc]
mov esi, esp
call fcn.00402c10
push eax
lea edx, [ebp - 0x200]
mov ecx, esi
call fcn.004909d0
add esp, 4
call fcn.0040dee0
add esp, 0x18
mov byte [ebp - 0x15], al
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 8
call fcn.00402ad0
cmp byte [ebp - 0x15], 0
je 0x4343ee
xorps xmm0, xmm0
mov dword [ebp - 0x3f], 0xd3d2dfe3
mov dword [ebp - 0x3b], 0xd3c7e4df
xor ecx, ecx
mov dword [ebp - 0x37], 0xd097cbd1
mov word [ebp - 0x33], 0xd3c8
mov byte [ebp - 0x31], 0xd3
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
nop word [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x3f], al
inc ecx
cmp ecx, 0xf
jb 0x4343a0
lea eax, [ebp - 0x3f]
mov dword [0x565558], ecx
push eax
lea ecx, [ebp - 0xfc]
mov byte [ebp - 0x30], 0
call fcn.00402b70
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x18
call fcn.00402c10
push eax
lea ecx, [ebx + 0x40]
call fcn.0048cae0
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 8
call fcn.00402ad0
xorps xmm0, xmm0
mov byte [ebp - 0xe4], 0xf3
movups xmmword [ebp - 0xe3], xmm0
mov dword [ebp - 0xd3], 0
xor ecx, ecx
mov word [ebp - 0xcf], 0
mov byte [ebp - 0xcd], 0
nop dword [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xe4], al
inc ecx
cmp ecx, 1
jb 0x434420
lea eax, [ebp - 0xe4]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0xfc]
mov byte [ebp - 0xe3], 0
call fcn.00402b70
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x19
call fcn.00402c10
push eax
lea edx, [ebp - 0x200]
lea ecx, [ebp - 0x288]
call fcn.004909d0
sub esp, 0x14
mov byte [ebp - 4], 0x1a
lea edx, [ebx + 0x40]
mov ecx, esp
push edx
mov edx, eax
call fcn.00490bf0
add esp, 4
lea ecx, [ebp - 0x338]
call fcn.0040d810
add esp, 0x18
lea ecx, [ebp - 0x288]
call fcn.00402ad0
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x1d
call fcn.00402ad0
push 0x5443dc
lea ecx, [ebp - 0x300]
call fcn.00402b70
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x328], 0
je 0x434817
sub esp, 0x28
lea edx, [ebp - 0x338]
mov eax, esp
lea ecx, [ebp - 0x170]
push 0
push 1
mov dword [eax + 0x24], 0
call fcn.00490ed0
add esp, 0x30
mov byte [ebp - 4], 0x1f
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0xd1eec3c0
xor ecx, ecx
mov dword [ebp - 0x34], 0xc2c5cdc1
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x38], al
inc ecx
cmp ecx, 8
jb 0x434521
lea eax, [ebp - 0x38]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x2a0]
mov byte [ebp - 0x30], 0
call fcn.00402b70
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x2a0]
or edi, 4
mov dword [ebp - 0x14], edi
call fcn.00402c10
push eax
lea ecx, [ebp - 0x170]
call fcn.00490ca0
cmp byte [eax], 0
je 0x434670
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0xd1eec3c0
mov dword [ebp - 0x34], 0xc2c5cdc1
xor ecx, ecx
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
nop word [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x38], al
inc ecx
cmp ecx, 8
jb 0x4345a0
lea eax, [ebp - 0x38]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x248]
mov byte [ebp - 0x30], 0
call fcn.00402b70
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x248]
or edi, 8
mov dword [ebp - 0x14], edi
call fcn.00402c10
push eax
lea ecx, [ebp - 0x170]
call fcn.00490ca0
xorps xmm0, xmm0
mov dword [ebp - 0x3d], 0xc0d2deca
mov esi, eax
mov dword [ebp - 0x39], 0xd3c1c4ca
mov dword [ebp - 0x35], 0xdfd2e7d3
xor ecx, ecx
mov byte [ebp - 0x31], 0xc2
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x3d], al
inc ecx
cmp ecx, 0xd
jb 0x434620
lea eax, [ebp - 0x3d]
mov dword [0x56557c], ecx
push eax
lea ecx, [ebp - 0xfc]
mov byte [ebp - 0x30], 0
call fcn.00402b70
mov dword [ebp - 4], 0x22
lea ecx, [ebp - 0xfc]
or edi, 0x10
mov dword [ebp - 0x14], edi
call fcn.00402c10
push eax
mov ecx, esi
call fcn.00490ca0
mov byte [ebp - 0x15], 1
cmp byte [eax], 0
jne 0x434674
mov byte [ebp - 0x15], 0
mov eax, dword [ebp - 0x14]
test al, 0x10
je 0x43468f
and eax, 0xffffffef
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test al, 8
je 0x4346a7
and eax, 0xfffffff7
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0x1f
test al, 4
je 0x4346c3
and eax, 0xfffffffb
lea ecx, [ebp - 0x2a0]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
cmp byte [ebp - 0x15], 0
je 0x434805
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0xd1eec3c0
mov dword [ebp - 0x34], 0xc2c5cdc1
xor ecx, ecx
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x38], al
inc ecx
cmp ecx, 8
jb 0x4346f5
lea eax, [ebp - 0x38]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x248]
mov byte [ebp - 0x30], 0
call fcn.00402b70
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x23
call fcn.00402c10
push eax
lea ecx, [ebp - 0x170]
call fcn.00490ca0
xorps xmm0, xmm0
mov dword [ebp - 0x3d], 0xc0d2deca
mov esi, eax
mov dword [ebp - 0x39], 0xd3c1c4ca
mov dword [ebp - 0x35], 0xdfd2e7d3
xor ecx, ecx
mov byte [ebp - 0x31], 0xc2
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x3d], al
inc ecx
cmp ecx, 0xd
jb 0x434770
lea eax, [ebp - 0x3d]
mov dword [0x56557c], ecx
push eax
lea ecx, [ebp - 0xfc]
mov byte [ebp - 0x30], 0
call fcn.00402b70
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x24
call fcn.00402c10
push eax
mov ecx, esi
call fcn.00490ca0
lea ecx, [ebp - 0x1e8]
push ecx
mov ecx, eax
call fcn.00490de0
mov edx, eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x288]
call fcn.004029b0
push eax
lea ecx, [ebp - 0x300]
call fcn.0048cb40
lea ecx, [ebp - 0x288]
call fcn.00402ad0
lea ecx, [ebp - 0x1e8]
call fcn.00402ad0
lea ecx, [ebp - 0xfc]
call fcn.00402ad0
lea ecx, [ebp - 0x248]
call fcn.00402ad0
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0x1e
call fcn.0048a7b0
mov edi, dword [ebp - 0x14]
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0x88], 0
call fcn.0048b950
test eax, eax
je 0x436ec6
cmp byte [ebx + 8], 0
je 0x434858
push 0x5443dc
lea ecx, [ebp - 0x114]
call fcn.00402b70
mov esi, eax
mov byte [ebp - 4], 0x26
or edi, 0x20
jmp 0x434900
xorps xmm0, xmm0
mov byte [ebp - 0xa0], 0xf3
movups xmmword [ebp - 0x9f], xmm0
mov dword [ebp - 0x8f], 0
xor ecx, ecx
mov word [ebp - 0x8b], 0
mov byte [ebp - 0x89], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xa0], al
inc ecx
cmp ecx, 1
jb 0x434885
lea eax, [ebp - 0xa0]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0xc0]
mov byte [ebp - 0x9f], 0
call fcn.00402b70
mov dword [ebp - 4], 0x27
lea ecx, [ebp - 0xc0]
or edi, 0x40
mov dword [ebp - 0x14], edi
call fcn.00402c10
push dword [ebp - 0x88]
lea ecx, [ebp - 0xcc]
mov esi, eax
call fcn.0048b930
push esi
mov edx, eax
lea ecx, [ebp - 0x2e8]
call fcn.004909d0
add esp, 4
mov esi, eax
mov dword [ebp - 4], 0x28
or edi, 0x80
xorps xmm0, xmm0
mov dword [ebp - 0x14], edi
mov byte [ebp - 0x84], 0xf3
xor ecx, ecx
movups xmmword [ebp - 0x83], xmm0
mov dword [ebp - 0x73], 0
mov word [ebp - 0x6f], 0
mov byte [ebp - 0x6d], 0
nop word [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x84], al
inc ecx
cmp ecx, 1
jb 0x434930
lea eax, [ebp - 0x84]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x83], 0
call fcn.00402b70
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0x29
call fcn.00402c10
push eax
lea edx, [ebp - 0x200]
lea ecx, [ebp - 0x270]
call fcn.004909d0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x1e8]
call fcn.00490c50
sub esp, 0x14
mov byte [ebp - 4], 0x2b
lea edx, [ebx + 0x40]
mov ecx, esp
push edx
mov edx, eax
call fcn.00490bf0
add esp, 4
call fcn.0040dee0
add esp, 0x18
lea ecx, [ebp - 0x1e8]
test al, al
sete byte [ebp - 0x15]
call fcn.00402ad0
lea ecx, [ebp - 0x270]
call fcn.00402ad0
lea ecx, [ebp - 0x64]
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test al, al
jns 0x4349f3
and eax, 0xffffff7f
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test al, 0x40
je 0x434a0b
and eax, 0xffffffbf
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0x1e
test al, 0x20
je 0x434a27
and eax, 0xffffffdf
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
cmp byte [ebp - 0x15], 0
je 0x434d35
xor ecx, ecx
cmp byte [ebx + 8], cl
je 0x434ad2
xorps xmm0, xmm0
mov dword [ebp - 0x3f], 0xd3d2dfe3
mov dword [ebp - 0x3b], 0xd3c7e4df
mov dword [ebp - 0x37], 0xd097cbd1
mov word [ebp - 0x33], 0xd3c8
mov byte [ebp - 0x31], 0xd3
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], ecx
mov word [ebp - 0x1c], cx
mov byte [ebp - 0x1a], cl
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x3f], al
inc ecx
cmp ecx, 0xf
jb 0x434a70
lea eax, [ebp - 0x3f]
mov dword [0x565558], ecx
push eax
lea ecx, [ebp - 0x114]
mov byte [ebp - 0x30], 0
call fcn.00402b70
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x114]
mov edi, dword [ebp - 0x14]
or edi, 0x100
mov dword [ebp - 0x14], edi
call fcn.00402c10
push eax
lea ecx, [ebp - 0x2e8]
call fcn.00402b70
mov esi, eax
mov dword [ebp - 4], 0x2d
or edi, 0x200
jmp 0x434b85
movaps xmm0, xmmword [0x551b70]
movups xmmword [ebp - 0x13c], xmm0
mov dword [ebp - 0x11c], 0
xorps xmm0, xmm0
mov word [ebp - 0x118], 0
movups xmmword [ebp - 0x12c], xmm0
mov byte [ebp - 0x116], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x13c], al
inc ecx
cmp ecx, 0x10
jb 0x434b04
lea eax, [ebp - 0x13c]
mov dword [0x565628], ecx
push eax
lea ecx, [ebp - 0xc0]
mov byte [ebp - 0x12c], 0
call fcn.00402b70
mov dword [ebp - 4], 0x2e
lea ecx, [ebp - 0xc0]
mov edi, dword [ebp - 0x14]
or edi, 0x400
mov dword [ebp - 0x14], edi
call fcn.00402c10
push dword [ebp - 0x88]
lea ecx, [ebp - 0xcc]
mov esi, eax
call fcn.0048b930
push esi
mov edx, eax
lea ecx, [ebp - 0x270]
call fcn.004909d0
add esp, 4
mov esi, eax
mov dword [ebp - 4], 0x2f
or edi, 0x800
xorps xmm0, xmm0
mov dword [ebp - 0x14], edi
mov byte [ebp - 0x84], 0xf3
xor ecx, ecx
movups xmmword [ebp - 0x83], xmm0
mov dword [ebp - 0x73], 0
mov word [ebp - 0x6f], 0
mov byte [ebp - 0x6d], 0
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x84], al
inc ecx
cmp ecx, 1
jb 0x434bb0
lea eax, [ebp - 0x84]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x83], 0
call fcn.00402b70
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0x30
call fcn.00402c10
push eax
lea edx, [ebp - 0x200]
lea ecx, [ebp - 0x1e8]
call fcn.004909d0
sub esp, 0x14
mov byte [ebp - 4], 0x31
mov ecx, esp
mov edx, eax
push esi
call fcn.00490c50
add esp, 4
call fcn.0040dee0
add esp, 0x18
mov byte [ebp - 0x15], al
lea ecx, [ebp - 0x1e8]
call fcn.00402ad0
lea ecx, [ebp - 0x64]
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test eax, 0x800
je 0x434c50
and eax, 0xfffff7ff
lea ecx, [ebp - 0x270]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test eax, 0x400
je 0x434c6d
and eax, 0xfffffbff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test eax, 0x200
je 0x434c8a
and eax, 0xfffffdff
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0x1e
test eax, 0x100
je 0x434cab
and eax, 0xfffffeff
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
cmp byte [ebp - 0x15], 0
je 0x434d35
xorps xmm0, xmm0
mov dword [ebp - 0x3f], 0xd3d2dfe3
mov dword [ebp - 0x3b], 0xd3c7e4df
xor ecx, ecx
mov dword [ebp - 0x37], 0xd097cbd1
mov word [ebp - 0x33], 0xd3c8
mov byte [ebp - 0x31], 0xd3
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x3f], al
inc ecx
cmp ecx, 0xf
jb 0x434cf0
lea eax, [ebp - 0x3f]
mov dword [0x565558], ecx
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x30], 0
call fcn.00402b70
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x32
call fcn.00402c10
push eax
lea ecx, [ebx + 0x40]
call fcn.0048cae0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x1e
call fcn.00402ad0
cmp byte [ebx + 8], 0
je 0x434d5d
push 0x5443dc
lea ecx, [ebp - 0x114]
call fcn.00402b70
mov esi, eax
mov byte [ebp - 4], 0x33
or dword [ebp - 0x14], 0x1000
jmp 0x434e05
xorps xmm0, xmm0
mov byte [ebp - 0x84], 0xf3
movups xmmword [ebp - 0x83], xmm0
mov dword [ebp - 0x73], 0
xor ecx, ecx
mov word [ebp - 0x6f], 0
mov byte [ebp - 0x6d], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x84], al
inc ecx
cmp ecx, 1
jb 0x434d81
lea eax, [ebp - 0x84]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0xc0]
mov byte [ebp - 0x83], 0
call fcn.00402b70
mov dword [ebp - 4], 0x34
lea ecx, [ebp - 0xc0]
mov edi, dword [ebp - 0x14]
or edi, 0x2000
mov dword [ebp - 0x14], edi
call fcn.00402c10
push dword [ebp - 0x88]
lea ecx, [ebp - 0xcc]
mov esi, eax
call fcn.0048b930
push esi
mov edx, eax
lea ecx, [ebp - 0x2e8]
call fcn.004909d0
add esp, 4
mov esi, eax
or edi, 0x4000
mov dword [ebp - 4], 0x35
mov dword [ebp - 0x14], edi
xorps xmm0, xmm0
mov byte [ebp - 0xa0], 0xf3
movups xmmword [ebp - 0x9f], xmm0
mov dword [ebp - 0x8f], 0
xor ecx, ecx
mov word [ebp - 0x8b], 0
mov byte [ebp - 0x89], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xa0], al
inc ecx
cmp ecx, 1
jb 0x434e32
lea eax, [ebp - 0xa0]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x9f], 0
call fcn.00402b70
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0x36
call fcn.00402c10
push eax
lea edx, [ebp - 0x200]
lea ecx, [ebp - 0x270]
call fcn.004909d0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x1e8]
call fcn.00490c50
sub esp, 0x14
mov byte [ebp - 4], 0x38
lea edx, [ebx + 0x40]
mov ecx, esp
push edx
mov edx, eax
call fcn.00490bf0
add esp, 4
lea ecx, [ebp - 0xfc]
call fcn.0040d810
add esp, 0x18
lea ecx, [ebp - 0x1e8]
call fcn.00402ad0
lea ecx, [ebp - 0x270]
call fcn.00402ad0
lea ecx, [ebp - 0x64]
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test eax, 0x4000
je 0x434ef8
and eax, 0xffffbfff
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test eax, 0x2000
je 0x434f15
and eax, 0xffffdfff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x3f
test eax, 0x1000
je 0x434f33
and eax, 0xffffefff
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
push 0x5443dc
lea ecx, [ebp - 0x2a0]
call fcn.00402b70
mov byte [ebp - 4], 0x40
cmp dword [ebp - 0xec], 0
je 0x435314
cmp dword [ebp - 0x2f0], 0
jne 0x435314
sub esp, 0x28
lea edx, [ebp - 0xfc]
mov eax, esp
lea ecx, [ebp - 0x310]
push 0
push 1
mov dword [eax + 0x24], 0
call fcn.00490ed0
add esp, 0x30
mov byte [ebp - 4], 0x41
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0xd1eec3c0
xor ecx, ecx
mov dword [ebp - 0x34], 0xc2c5cdc1
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x38], al
inc ecx
cmp ecx, 8
jb 0x434fb1
lea eax, [ebp - 0x38]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x114]
mov byte [ebp - 0x30], 0
call fcn.00402b70
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x114]
mov edi, dword [ebp - 0x14]
or edi, 0x8000
mov dword [ebp - 0x14], edi
call fcn.00402c10
push eax
lea ecx, [ebp - 0x310]
call fcn.00490ca0
cmp byte [eax], 0
je 0x435146
xorps xmm0, xmm0
mov dword [ebp - 0x134], 0xd1eec3c0
mov dword [ebp - 0x130], 0xc2c5cdc1
xor ecx, ecx
movups xmmword [ebp - 0x12c], xmm0
mov dword [ebp - 0x11c], 0
mov word [ebp - 0x118], 0
mov byte [ebp - 0x116], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x134], al
inc ecx
cmp ecx, 8
jb 0x435042
lea eax, [ebp - 0x134]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0xc0]
mov byte [ebp - 0x12c], 0
call fcn.00402b70
mov dword [ebp - 4], 0x43
lea ecx, [ebp - 0xc0]
or edi, 0x10000
mov dword [ebp - 0x14], edi
call fcn.00402c10
push eax
lea ecx, [ebp - 0x310]
call fcn.00490ca0
xorps xmm0, xmm0
mov dword [ebp - 0x1ac], 0xc0d2deca
mov esi, eax
mov dword [ebp - 0x1a8], 0xd3c1c4ca
mov dword [ebp - 0x1a4], 0xdfd2e7d3
xor ecx, ecx
mov byte [ebp - 0x1a0], 0xc2
movups xmmword [ebp - 0x19f], xmm0
mov dword [ebp - 0x18f], 0
mov word [ebp - 0x18b], 0
mov byte [ebp - 0x189], 0
nop word [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x1ac], al
inc ecx
cmp ecx, 0xd
jb 0x4350f0
lea eax, [ebp - 0x1ac]
mov dword [0x56557c], ecx
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x19f], 0
call fcn.00402b70
mov dword [ebp - 4], 0x44
lea ecx, [ebp - 0x64]
or edi, 0x20000
mov dword [ebp - 0x14], edi
call fcn.00402c10
push eax
mov ecx, esi
call fcn.00490ca0
mov byte [ebp - 0x15], 1
cmp byte [eax], 0
jne 0x43514a
mov byte [ebp - 0x15], 0
mov eax, dword [ebp - 0x14]
test eax, 0x20000
je 0x435167
and eax, 0xfffdffff
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test eax, 0x10000
je 0x435184
and eax, 0xfffeffff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0x41
test eax, 0x8000
je 0x4351a5
and eax, 0xffff7fff
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
cmp byte [ebp - 0x15], 0
je 0x435305
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0xd1eec3c0
mov dword [ebp - 0x34], 0xc2c5cdc1
xor ecx, ecx
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x38], al
inc ecx
cmp ecx, 8
jb 0x4351d7
lea eax, [ebp - 0x38]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0xc0]
mov byte [ebp - 0x30], 0
call fcn.00402b70
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x45
call fcn.00402c10
push eax
lea ecx, [ebp - 0x310]
call fcn.00490ca0
xorps xmm0, xmm0
mov dword [ebp - 0x139], 0xc0d2deca
mov esi, eax
mov dword [ebp - 0x135], 0xd3c1c4ca
mov dword [ebp - 0x131], 0xdfd2e7d3
xor ecx, ecx
mov byte [ebp - 0x12d], 0xc2
movups xmmword [ebp - 0x12c], xmm0
mov dword [ebp - 0x11c], 0
mov word [ebp - 0x118], 0
mov byte [ebp - 0x116], 0
nop word [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x139], al
inc ecx
cmp ecx, 0xd
jb 0x435270
lea eax, [ebp - 0x139]
mov dword [0x56557c], ecx
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x12c], 0
call fcn.00402b70
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x46
call fcn.00402c10
push eax
mov ecx, esi
call fcn.00490ca0
lea ecx, [ebp - 0x270]
push ecx
mov ecx, eax
call fcn.00490de0
mov edx, eax
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1e8]
call fcn.004029b0
push eax
lea ecx, [ebp - 0x2a0]
call fcn.0048cb40
lea ecx, [ebp - 0x1e8]
call fcn.00402ad0
lea ecx, [ebp - 0x270]
call fcn.00402ad0
lea ecx, [ebp - 0x64]
call fcn.00402ad0
lea ecx, [ebp - 0xc0]
call fcn.00402ad0
lea ecx, [ebp - 0x310]
mov byte [ebp - 4], 0x40
call fcn.0048a7b0
mov eax, dword [ebp - 0x290]
test eax, eax
jne 0x435338
lea eax, [ebp - 0x300]
push eax
lea ecx, [ebp - 0x2a0]
call fcn.0048cb10
mov eax, dword [ebp - 0x290]
test eax, eax
push ecx
lea ecx, [ebp - 0x320]
setne byte [ebp - 0xa3]
call fcn.0048ab80
mov byte [ebp - 4], 0x48
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x44], esp
sub esp, 8
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
call fcn.0048ab50
add esp, 8
push dword [ebp - 0x88]
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x49
call fcn.0048b930
push eax
lea ecx, [ebp - 0x320]
call fcn.0048a420
mov ecx, eax
mov byte [ebp - 4], 0x48
call fcn.0048a7d0
cmp byte [ebx + 0xc], 0
je 0x435417
xorps xmm0, xmm0
mov dword [ebp - 0x38], 0xc5c5d5e1
mov dword [ebp - 0x34], 0xeadec6dc
xor ecx, ecx
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
nop dword [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x38], al
inc ecx
cmp ecx, 8
jb 0x4353d0
lea eax, [ebp - 0x38]
mov dword [0x565624], ecx
push eax
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 0x30], 0
call fcn.00402b70
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x1e8]
mov edi, dword [ebp - 0x14]
or edi, 0x40000
mov dword [ebp - 0x14], edi
call fcn.00402c10
mov dword [ebp - 0x68], eax
jmp 0x435421
mov edi, dword [ebp - 0x14]
mov dword [ebp - 0x68], 0x5443dc
cmp byte [ebx + 8], 0
je 0x43544b
push 0x5443dc
lea ecx, [ebp - 0x130]
call fcn.00402b70
mov esi, eax
mov dword [ebp - 4], 0x4b
or edi, 0x80000
jmp 0x4354ee
xorps xmm0, xmm0
mov byte [ebp - 0x84], 0xf3
movups xmmword [ebp - 0x83], xmm0
mov dword [ebp - 0x73], 0
xor ecx, ecx
mov word [ebp - 0x6f], 0
mov byte [ebp - 0x6d], 0
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x84], al
inc ecx
cmp ecx, 1
jb 0x435470
lea eax, [ebp - 0x84]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0x270]
mov byte [ebp - 0x83], 0
call fcn.00402b70
mov dword [ebp - 4], 0x4c
lea ecx, [ebp - 0x270]
or edi, 0x100000
mov dword [ebp - 0x14], edi
call fcn.00402c10
push dword [ebp - 0x88]
lea ecx, [ebp - 0xcc]
mov esi, eax
call fcn.0048b930
push esi
mov edx, eax
lea ecx, [ebp - 0x1a0]
call fcn.004909d0
add esp, 4
mov esi, eax
mov dword [ebp - 4], 0x4d
or edi, 0x200000
xorps xmm0, xmm0
mov dword [ebp - 0x14], edi
mov byte [ebp - 0xa0], 0xf3
xor ecx, ecx
movups xmmword [ebp - 0x9f], xmm0
mov dword [ebp - 0x8f], 0
mov word [ebp - 0x8b], 0
mov byte [ebp - 0x89], 0
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xa0], al
inc ecx
cmp ecx, 1
jb 0x435520
lea eax, [ebp - 0xa0]
mov dword [0x565620], ecx
push eax
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 0x9f], 0
call fcn.00402b70
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x4e
call fcn.00402c10
push eax
lea edx, [ebp - 0x200]
lea ecx, [ebp - 0x3fc]
call fcn.004909d0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x3e4]
call fcn.00490c50
add esp, 4
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x3cc]
push dword [ebp - 0x68]
mov edx, eax
call fcn.00490a30
add esp, 4
lea ecx, [ebx + 0x28]
mov byte [ebp - 4], 0x51
push ecx
mov edx, eax
lea ecx, [ebp - 0x288]
call fcn.00490bf0
add esp, 4
lea ecx, [ebp - 0x3cc]
call fcn.00402ad0
lea ecx, [ebp - 0x3e4]
call fcn.00402ad0
lea ecx, [ebp - 0x3fc]
call fcn.00402ad0
lea ecx, [ebp - 0x2e8]
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test eax, 0x200000
je 0x435607
and eax, 0xffdfffff
lea ecx, [ebp - 0x1a0]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test eax, 0x100000
je 0x435624
and eax, 0xffefffff
lea ecx, [ebp - 0x270]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
test eax, 0x80000
je 0x435641
and eax, 0xfff7ffff
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x5a
test eax, 0x40000
je 0x43565f
and eax, 0xfffbffff
lea ecx, [ebp - 0x1e8]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
lea ecx, [ebp - 0x288]
call fcn.00402c10
lea edx, [ebp - 0xa8]
mov ecx, eax
call fcn.0041ac90
test eax, eax
jne 0x436df3
movaps xmm0, xmmword [0x550f00]
xor ecx, ecx
movups xmmword [ebp - 0x3b4], xmm0
mov dword [ebp - 0x354], 0x77787b60
movaps xmm0, xmmword [0x551580]
movups xmmword [ebp - 0x3a4], xmm0
mov byte [ebp - 0x350], 0x60
movaps xmm0, xmmword [0x5516c0]
movups xmmword [ebp - 0x394], xmm0
mov dword [ebp - 0x33f], eax
movaps xmm0, xmmword [0x550e30]
movups xmmword [ebp - 0x384], xmm0
mov word [ebp - 0x33b], ax
movaps xmm0, xmmword [0x550e10]
movups xmmword [ebp - 0x374], xmm0
mov byte [ebp - 0x339], al
movaps xmm0, xmmword [0x550cb0]
movups xmmword [ebp - 0x364], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x34f], xmm0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x3b4], al
inc ecx
cmp ecx, 0x65
jb 0x435703
lea eax, [ebp - 0x3b4]
mov dword [0x56555c], ecx
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x34f], 0
call fcn.00402b70
lea ecx, [ebp - 0x64]
call fcn.00402c10
lea ecx, [ebp - 0x64]
mov esi, eax
call fcn.00402ad0
push ecx
lea eax, [ebp - 0x6c]
mov edx, esi
mov esi, dword [ebp - 0xa8]
push eax
push ecx
mov ecx, esi
call fcn.004ea780
add esp, 0xc
test eax, eax
jne 0x436dec
mov edi, dword [ebp - 0x6c]
mov ecx, edi
call fcn.004c6eb0
cmp eax, 0x64
jne 0x436de5
lea eax, [ebp - 0x13f]
mov dword [ebp - 0x2c0], eax
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x158]
push 0
mov byte [ebp - 0x160], 0
call fcn.0048e6c0
mov byte [ebp - 4], 0x5c
test edi, edi
je 0x4357ec
cmp dword [edi + 0x2c], 0
je 0x4357c7
xor eax, eax
cmp ax, word [edi + 0x30]
jae 0x4357c7
mov eax, dword [edi]
mov eax, dword [eax + 0x44]
test eax, eax
je 0x4357c2
push eax
call dword [0x562d18]
add esp, 4
mov ecx, dword [edi + 0x2c]
jmp 0x4357f1
mov eax, dword [edi]
test eax, eax
je 0x4357ec
mov eax, dword [eax + 0x44]
test eax, eax
je 0x4357de
push eax
call dword [0x562d18]
add esp, 4
push 0
push 0x19
push dword [edi]
call fcn.004b5810
add esp, 0xc
mov ecx, 0x54a500
mov dl, 1
call fcn.004c3d20
mov dword [ebp - 0x48], eax
test edi, edi
je 0x435852
mov esi, dword [edi]
mov ecx, dword [edi + 0x64]
test esi, esi
je 0x435835
cmp byte [esi + 0x1e], 0
jne 0x435818
mov eax, esi
cmp ecx, 0xc0a
jne 0x435830
push 0
push 7
push esi
call fcn.004b5810
mov byte [esi + 0x1e], 0
add esp, 0xc
mov eax, dword [edi]
mov ecx, 7
mov edx, dword [esi + 0x18]
jmp 0x43583c
mov edx, 0xff
mov eax, esi
and ecx, edx
mov dword [edi + 0x64], ecx
mov eax, dword [eax + 0x44]
test eax, eax
je 0x435852
push eax
call dword [0x562d20]
add esp, 4
xorps xmm0, xmm0
mov dword [ebp - 0x36], 0xd3dcdfcb
push 0x18
mov word [ebp - 0x32], 0xdada
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
movq qword [ebp - 0x250], xmm0
mov byte [ebp - 0x258], 3
call fcn.00504cb0
mov esi, eax
add esp, 4
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x2bc], esi
mov byte [ebp - 4], 0x5d
xorps xmm0, xmm0
mov edx, dword [ebp - 0x48]
mov ecx, edx
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x48], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4358c0
sub ecx, dword [ebp - 0x48]
push ecx
push edx
mov ecx, esi
call fcn.00402c40
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x250], esi
mov byte [ebp - 4], 0x5e
xor ecx, ecx
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x36], al
inc ecx
cmp ecx, 6
jb 0x4358f0
mov dword [0x565548], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x36]
mov byte [ebp - 0x30], 0
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x54], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x50], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x435923
sub ecx, edx
lea eax, [ebp - 0x36]
push ecx
push eax
lea ecx, [ebp - 0x64]
call fcn.00402c40
or dword [ebp - 0x14], 0x2000000
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x5f
call fcn.00402c10
mov cl, byte [ebp - 0x160]
mov esi, eax
test cl, cl
jne 0x435989
push 1
lea ecx, [ebp - 0x2c8]
mov byte [ebp - 0x160], 1
call fcn.0048e6c0
mov ecx, dword [ebp - 0x2c8]
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x158], ecx
mov dword [ebp - 0x154], eax
jmp 0x43599b
cmp cl, 1
jne 0x436f28
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x68], eax
mov ecx, esi
mov dword [ebp - 0x238], 0
xorps xmm0, xmm0
mov dword [ebp - 0x234], 0
movups xmmword [ebp - 0x248], xmm0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4359c0
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x248]
call fcn.00402c40
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp - 0x68]
push eax
call fcn.00493e70
lea ecx, [ebp - 0x248]
mov esi, eax
call fcn.00402ad0
mov cl, byte [esi]
mov eax, dword [ebp - 0x24c]
mov edi, dword [ebp - 0x44]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x258], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0x250], ecx
lea ecx, [ebp - 0x258]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x24c], edx
call fcn.0048a7b0
mov byte [ebp - 4], 0x5c
mov ecx, dword [ebp - 0x50]
mov edi, dword [ebp - 0x6c]
cmp ecx, 0x10
jb 0x435a68
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x435a5e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436f23
push ecx
push edx
call fcn.00504f31
add esp, 8
xorps xmm0, xmm0
mov byte [ebp - 0xa0], 0x9e
movups xmmword [ebp - 0x9f], xmm0
mov dword [ebp - 0x8f], 0
xor ecx, ecx
mov word [ebp - 0x8b], 0
mov byte [ebp - 0x89], 0
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xa0], al
inc ecx
cmp ecx, 1
jb 0x435a95
mov dword [0x565620], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0xa0]
mov byte [ebp - 0x9f], 0
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x54], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x50], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x435ad1
sub ecx, edx
lea eax, [ebp - 0xa0]
push ecx
push eax
lea ecx, [ebp - 0x64]
call fcn.00402c40
or dword [ebp - 0x14], 0x80000000
mov byte [ebp - 4], 0x64
lea edx, [ebp - 0x64]
cmp dword [ebp - 0x50], 0x10
xorps xmm0, xmm0
movups xmmword [ebp - 0xc0], xmm0
cmovae edx, dword [ebp - 0x64]
mov ecx, edx
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x435b23
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xc0]
call fcn.00402c40
mov byte [ebp - 4], 0x65
test edi, edi
je 0x435b92
cmp dword [edi + 0x2c], 0
je 0x435b6d
mov eax, 1
cmp ax, word [edi + 0x30]
jae 0x435b6d
mov eax, dword [edi]
mov eax, dword [eax + 0x44]
test eax, eax
je 0x435b65
push eax
call dword [0x562d18]
add esp, 4
mov ecx, dword [edi + 0x2c]
add ecx, 0x28
jmp 0x435b97
mov eax, dword [edi]
test eax, eax
je 0x435b92
mov eax, dword [eax + 0x44]
test eax, eax
je 0x435b84
push eax
call dword [0x562d18]
add esp, 4
push 0
push 0x19
push dword [edi]
call fcn.004b5810
add esp, 0xc
mov ecx, 0x54a500
mov dl, 1
call fcn.004c3d20
mov edx, eax
mov dword [ebp - 0x48], edx
test edi, edi
je 0x435bfd
mov esi, dword [edi]
mov ecx, dword [edi + 0x64]
test esi, esi
je 0x435bdd
cmp byte [esi + 0x1e], 0
jne 0x435bc0
mov eax, esi
cmp ecx, 0xc0a
jne 0x435bd8
push 0
push 7
push esi
call fcn.004b5810
mov byte [esi + 0x1e], 0
add esp, 0xc
mov eax, dword [edi]
mov ecx, 7
mov edx, dword [esi + 0x18]
jmp 0x435be4
mov edx, 0xff
mov eax, esi
and ecx, edx
mov dword [edi + 0x64], ecx
mov eax, dword [eax + 0x44]
test eax, eax
je 0x435bfa
push eax
call dword [0x562d20]
add esp, 4
mov edx, dword [ebp - 0x48]
mov ecx, edx
mov dword [ebp - 0x104], 0
xorps xmm0, xmm0
mov dword [ebp - 0x100], 0
movups xmmword [ebp - 0x114], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x435c20
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x114]
call fcn.00402c40
cmp dword [ebp - 0xac], 0x10
lea eax, [ebp - 0xc0]
mov ecx, dword [ebp - 0xc0]
xorps xmm0, xmm0
mov edx, dword [ebp - 0x114]
cmovae eax, ecx
push dword [ebp - 0xb0]
setae byte [ebp - 0x49]
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x100], 0x10
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x44], edx
cmovae ecx, edx
mov dword [ebp - 0x38], 0xc2c5c4c7
mov edx, dword [ebp - 0x104]
setae byte [ebp - 0x15]
push eax
mov dword [ebp - 0x34], 0xcfd9dafc
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
movq qword [ebp - 0x228], xmm0
mov byte [ebp - 0x230], 4
call fcn.0049c9a0
mov byte [ebp - 0x1b8], al
add esp, 8
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x224], eax
mov byte [ebp - 4], 0x67
xor ecx, ecx
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x38], al
inc ecx
cmp ecx, 8
jb 0x435ce0
mov dword [0x565624], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x38]
mov byte [ebp - 0x30], 0
movups xmmword [ebp - 0x84], xmm0
mov dword [ebp - 0x74], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x70], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x435d16
sub ecx, edx
lea eax, [ebp - 0x38]
push ecx
push eax
lea ecx, [ebp - 0x84]
call fcn.00402c40
or dword [ebp - 0x14], 0x40000000
mov byte [ebp - 4], 0x68
lea edx, [ebp - 0x84]
cmp dword [ebp - 0x70], 0x10
xorps xmm0, xmm0
movups xmmword [ebp - 0x2b8], xmm0
cmovae edx, dword [ebp - 0x84]
mov ecx, edx
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2a4], 0
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x435d70
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x2b8]
call fcn.00402c40
lea eax, [ebp - 0x2b8]
mov byte [ebp - 4], 0x69
mov ecx, dword [ebp - 0x68]
push eax
call fcn.00493e70
mov byte [ebp - 4], 0x68
mov esi, eax
mov ecx, dword [ebp - 0x2a4]
cmp ecx, 0x10
jb 0x435dd9
mov edx, dword [ebp - 0x2b8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x435dcf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436f23
push ecx
push edx
call fcn.00504f31
add esp, 8
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2a4], 0xf
mov byte [ebp - 0x2b8], 0
mov al, byte [esi]
mov edx, dword [ebp - 0x1b8]
mov byte [esi], 4
mov ecx, dword [esi + 0xc]
mov byte [ebp - 0x230], al
mov eax, dword [esi + 8]
mov dword [esi + 8], edx
mov edx, dword [ebp - 0x1b4]
mov dword [ebp - 0x224], ecx
lea ecx, [ebp - 0x230]
mov dword [esi + 0xc], edx
mov dword [ebp - 0x228], eax
call fcn.0048a7b0
mov byte [ebp - 4], 0x66
mov ecx, dword [ebp - 0x70]
cmp ecx, 0x10
jb 0x435e69
mov edx, dword [ebp - 0x84]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x435e5f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436f23
push ecx
push edx
call fcn.00504f31
add esp, 8
cmp byte [ebp - 0x15], 0
mov byte [ebp - 4], 0x65
je 0x435ea5
mov ecx, dword [ebp - 0x100]
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x435e9b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436f23
push ecx
push edx
call fcn.00504f31
add esp, 8
cmp byte [ebp - 0x49], 0
mov byte [ebp - 4], 0x64
je 0x435ee1
mov ecx, dword [ebp - 0xac]
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x435ed7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436f23
push ecx
push edx
call fcn.00504f31
add esp, 8
mov byte [ebp - 4], 0x5c
mov ecx, dword [ebp - 0x50]
cmp ecx, 0x10
jb 0x435f19
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x435f0f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436f23
push ecx
push edx
call fcn.00504f31
add esp, 8
test edi, edi
je 0x435f6e
cmp dword [edi + 0x2c], 0
je 0x435f49
mov eax, 2
cmp ax, word [edi + 0x30]
jae 0x435f49
mov eax, dword [edi]
mov eax, dword [eax + 0x44]
test eax, eax
je 0x435f41
push eax
call dword [0x562d18]
add esp, 4
mov ecx, dword [edi + 0x2c]
add ecx, 0x50
jmp 0x435f73
mov eax, dword [edi]
test eax, eax
je 0x435f6e
mov eax, dword [eax + 0x44]
test eax, eax
je 0x435f60
push eax
call dword [0x562d18]
add esp, 4
push 0
push 0x19
push dword [edi]
call fcn.004b5810
add esp, 0xc
mov ecx, 0x54a500
mov dl, 1
call fcn.004c3d20
mov dword [ebp - 0x44], eax
test edi, edi
je 0x435fd4
mov esi, dword [edi]
mov ecx, dword [edi + 0x64]
test esi, esi
je 0x435fb7
cmp byte [esi + 0x1e], 0
jne 0x435f9a
mov eax, esi
cmp ecx, 0xc0a
jne 0x435fb2
push 0
push 7
push esi
call fcn.004b5810
mov byte [esi + 0x1e], 0
add esp, 0xc
mov eax, dword [edi]
mov ecx, 7
mov edx, dword [esi + 0x18]
jmp 0x435fbe
mov edx, 0xff
mov eax, esi
and ecx, edx
mov dword [edi + 0x64], ecx
mov eax, dword [eax + 0x44]
test eax, eax
je 0x435fd4
push eax
call dword [0x562d20]
add esp, 4
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0xdac5d1df
push 0x18
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
movq qword [ebp - 0x218], xmm0
mov byte [ebp - 0x220], 3
call fcn.00504cb0
mov esi, eax
add esp, 4
lea eax, [ebp - 0x13d]
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], esi
mov byte [ebp - 4], 0x6d
xorps xmm0, xmm0
mov edx, dword [ebp - 0x44]
mov ecx, edx
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x44], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436046
sub ecx, dword [ebp - 0x44]
push ecx
push edx
mov ecx, esi
call fcn.00402c40
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x218], esi
mov byte [ebp - 4], 0x6e
xor ecx, ecx
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x34], al
inc ecx
cmp ecx, 4
jb 0x436070
mov dword [0x5655d8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x30], 0
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x54], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x50], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4360a3
sub ecx, edx
lea eax, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x64]
call fcn.00402c40
or dword [ebp - 0x14], 0x20000000
mov byte [ebp - 4], 0x6f
lea esi, [ebp - 0x64]
cmp dword [ebp - 0x50], 0x10
xorps xmm0, xmm0
movups xmmword [ebp - 0xe4], xmm0
cmovae esi, dword [ebp - 0x64]
mov edx, esi
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xd0], 0
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x4360f2
sub edx, ecx
lea ecx, [ebp - 0xe4]
push edx
push esi
call fcn.00402c40
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 0x70
mov ecx, dword [ebp - 0x68]
push eax
call fcn.00493e70
mov byte [ebp - 4], 0x6f
mov esi, eax
mov ecx, dword [ebp - 0xd0]
cmp ecx, 0x10
jb 0x43615b
mov edx, dword [ebp - 0xe4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x436151
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436f23
push ecx
push edx
call fcn.00504f31
add esp, 8
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xd0], 0xf
mov byte [ebp - 0xe4], 0
mov al, byte [esi]
mov edi, dword [ebp - 0x48]
mov byte [esi], 3
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x220], al
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x218], ecx
lea ecx, [ebp - 0x220]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x214], edx
call fcn.0048a7b0
mov byte [ebp - 4], 0x5c
mov ecx, dword [ebp - 0x50]
mov edi, dword [ebp - 0x6c]
cmp ecx, 0x10
jb 0x4361e8
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4361de
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436f23
push ecx
push edx
call fcn.00504f31
add esp, 8
xorps xmm0, xmm0
mov byte [ebp - 0xa0], 0x9e
movups xmmword [ebp - 0x9f], xmm0
mov dword [ebp - 0x8f], 0
xor eax, eax
mov word [ebp - 0x8b], 0
mov byte [ebp - 0x89], 0
lea ecx, [eax - 0x51]
xor byte [ebp + eax - 0xa0], cl
inc eax
cmp eax, 1
jb 0x436215
xorps xmm0, xmm0
mov dword [0x565620], eax
lea ecx, [ebp - 0xa0]
mov byte [ebp - 0x9f], 0
movups xmmword [ebp - 0x84], xmm0
mov dword [ebp - 0x74], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x70], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436252
sub ecx, edx
lea eax, [ebp - 0xa0]
push ecx
push eax
lea ecx, [ebp - 0x84]
call fcn.00402c40
or dword [ebp - 0x14], 0x10000000
mov byte [ebp - 4], 0x74
lea edx, [ebp - 0x84]
cmp dword [ebp - 0x70], 0x10
xorps xmm0, xmm0
movups xmmword [ebp - 0x114], xmm0
cmovae edx, dword [ebp - 0x84]
mov ecx, edx
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x100], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4362b0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x114]
call fcn.00402c40
mov byte [ebp - 4], 0x75
test edi, edi
je 0x43631f
cmp dword [edi + 0x2c], 0
je 0x4362fa
mov eax, 3
cmp ax, word [edi + 0x30]
jae 0x4362fa
mov eax, dword [edi]
mov eax, dword [eax + 0x44]
test eax, eax
je 0x4362f2
push eax
call dword [0x562d18]
add esp, 4
mov ecx, dword [edi + 0x2c]
add ecx, 0x78
jmp 0x436324
mov eax, dword [edi]
test eax, eax
je 0x43631f
mov eax, dword [eax + 0x44]
test eax, eax
je 0x436311
push eax
call dword [0x562d18]
add esp, 4
push 0
push 0x19
push dword [edi]
call fcn.004b5810
add esp, 0xc
mov ecx, 0x54a500
mov dl, 1
call fcn.004c3d20
mov edx, eax
mov dword [ebp - 0x48], edx
test edi, edi
je 0x43638a
mov esi, dword [edi]
mov ecx, dword [edi + 0x64]
test esi, esi
je 0x43636a
cmp byte [esi + 0x1e], 0
jne 0x43634d
mov eax, esi
cmp ecx, 0xc0a
jne 0x436365
push 0
push 7
push esi
call fcn.004b5810
mov byte [esi + 0x1e], 0
add esp, 0xc
mov eax, dword [edi]
mov ecx, 7
mov edx, dword [esi + 0x18]
jmp 0x436371
mov edx, 0xff
mov eax, esi
and ecx, edx
mov dword [edi + 0x64], ecx
mov eax, dword [eax + 0x44]
test eax, eax
je 0x436387
push eax
call dword [0x562d20]
add esp, 4
mov edx, dword [ebp - 0x48]
mov ecx, edx
mov dword [ebp - 0xb0], 0
xorps xmm0, xmm0
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xc0], xmm0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4363b0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xc0]
call fcn.00402c40
cmp dword [ebp - 0x100], 0x10
lea eax, [ebp - 0x114]
mov ecx, dword [ebp - 0x114]
xorps xmm0, xmm0
push dword [ebp - 0x104]
mov esi, dword [ebp - 0xc0]
cmovae eax, ecx
mov edx, dword [ebp - 0xb0]
setae byte [ebp - 0x15]
cmp dword [ebp - 0xac], 0x10
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0xc0]
cmovae ecx, esi
mov dword [ebp - 0x36], 0xc7d2d5dc
push eax
setae byte [ebp - 0x49]
mov word [ebp - 0x32], 0xd1c1
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
movq qword [ebp - 0x208], xmm0
mov byte [ebp - 0x210], 4
call fcn.0049c9a0
mov byte [ebp - 0x1c0], al
add esp, 8
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x204], eax
mov byte [ebp - 4], 0x77
xor ecx, ecx
nop word [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x36], al
inc ecx
cmp ecx, 6
jb 0x436470
mov dword [0x565548], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x36]
mov byte [ebp - 0x30], 0
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x54], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x50], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4364a3
sub ecx, edx
lea eax, [ebp - 0x36]
push ecx
push eax
lea ecx, [ebp - 0x64]
call fcn.00402c40
or dword [ebp - 0x14], 0x1000000
mov byte [ebp - 4], 0x78
lea eax, [ebp - 0x64]
cmp dword [ebp - 0x50], 0x10
lea ecx, [ebp - 0x160]
cmovae eax, dword [ebp - 0x64]
push eax
call fcn.00490ca0
mov cl, byte [eax]
mov edi, dword [ebp - 0x1c0]
mov byte [eax], 4
mov edx, dword [eax + 0xc]
mov byte [ebp - 0x210], cl
mov ecx, dword [eax + 8]
mov dword [eax + 8], edi
mov edi, dword [ebp - 0x1bc]
mov dword [ebp - 0x208], ecx
lea ecx, [ebp - 0x210]
mov dword [eax + 0xc], edi
mov dword [ebp - 0x204], edx
call fcn.0048a7b0
mov byte [ebp - 4], 0x76
mov ecx, dword [ebp - 0x50]
mov edi, dword [ebp - 0x6c]
cmp ecx, 0x10
jb 0x436550
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x436546
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436f23
push ecx
push edx
call fcn.00504f31
add esp, 8
cmp byte [ebp - 0x49], 0
mov byte [ebp - 4], 0x75
je 0x436589
mov ecx, dword [ebp - 0xac]
mov eax, esi
inc ecx
cmp ecx, 0x1000
jb 0x43657f
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436f23
push ecx
push esi
call fcn.00504f31
add esp, 8
cmp byte [ebp - 0x15], 0
mov byte [ebp - 4], 0x74
je 0x4365c5
mov ecx, dword [ebp - 0x100]
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4365bb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436f23
push ecx
push edx
call fcn.00504f31
add esp, 8
mov byte [ebp - 4], 0x5c
mov ecx, dword [ebp - 0x70]
cmp ecx, 0x10
jb 0x436600
mov edx, dword [ebp - 0x84]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4365f6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436f23
push ecx
push edx
call fcn.00504f31
add esp, 8
test edi, edi
je 0x436658
cmp dword [edi + 0x2c], 0
je 0x436633
mov eax, 4
cmp ax, word [edi + 0x30]
jae 0x436633
mov eax, dword [edi]
mov eax, dword [eax + 0x44]
test eax, eax
je 0x436628
push eax
call dword [0x562d18]
add esp, 4
mov ecx, dword [edi + 0x2c]
add ecx, 0xa0
jmp 0x43665d
mov eax, dword [edi]
test eax, eax
je 0x436658
mov eax, dword [eax + 0x44]
test eax, eax
je 0x43664a
push eax
call dword [0x562d18]
add esp, 4
push 0
push 0x19
push dword [edi]
call fcn.004b5810
add esp, 0xc
mov ecx, 0x54a500
mov dl, 1
call fcn.004c3d20
mov dword [ebp - 0x48], eax
test edi, edi
je 0x4366c1
mov esi, dword [edi]
mov ecx, dword [edi + 0x64]
test esi, esi
je 0x4366a1
cmp byte [esi + 0x1e], 0
jne 0x436684
mov eax, esi
cmp ecx, 0xc0a
jne 0x43669c
push 0
push 7
push esi
call fcn.004b5810
mov byte [esi + 0x1e], 0
add esp, 0xc
mov eax, dword [edi]
mov ecx, 7
mov edx, dword [esi + 0x18]
jmp 0x4366a8
mov edx, 0xff
mov eax, esi
and ecx, edx
mov dword [edi + 0x64], ecx
mov eax, dword [eax + 0x44]
test eax, eax
je 0x4366be
push eax
call dword [0x562d20]
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
call fcn.00512854
add esp, 4
push 0
push 0xf4240
push edx
push eax
call fcn.0052a450
sub eax, 0xb6109100
mov dword [ebp - 0x3e], 0xdbc1c8ca
mov dword [ebp - 0x188], eax
xorps xmm0, xmm0
lea eax, [ebp - 0x188]
mov dword [ebp - 0x3a], 0xdfc1d5c1
push eax
lea eax, [ebp - 0x1d0]
mov dword [ebp - 0x36], 0xdbfdd6d8
sbb edx, 2
mov word [ebp - 0x32], 0xd9cf
push eax
mov dword [ebp - 0x184], edx
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
mov byte [ebp - 0x1d0], 0
movq qword [ebp - 0x1c8], xmm0
call fcn.0049db20
mov byte [ebp - 4], 0x7a
xor ecx, ecx
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x3e], al
inc ecx
cmp ecx, 0xe
jb 0x436747
mov dword [0x565524], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x3e]
mov byte [ebp - 0x30], 0
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x54], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x50], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436780
sub ecx, edx
lea eax, [ebp - 0x3e]
push ecx
push eax
lea ecx, [ebp - 0x64]
call fcn.00402c40
or dword [ebp - 0x14], 0x8000000
mov byte [ebp - 4], 0x7b
lea eax, [ebp - 0x64]
cmp dword [ebp - 0x50], 0x10
lea ecx, [ebp - 0x160]
cmovae eax, dword [ebp - 0x64]
push eax
call fcn.00490ca0
mov edi, eax
mov dl, byte [edi]
mov cl, byte [ebp - 0x1d0]
mov eax, dword [ebp - 0x1c8]
mov byte [edi], cl
mov ecx, dword [ebp - 0x1c4]
mov esi, dword [edi + 0xc]
mov byte [ebp - 0x1d0], dl
mov edx, dword [edi + 8]
mov dword [edi + 0xc], ecx
lea ecx, [ebp - 0x1d0]
mov dword [edi + 8], eax
mov dword [ebp - 0x1c8], edx
mov dword [ebp - 0x1c4], esi
call fcn.0048a7b0
mov byte [ebp - 4], 0x5c
mov ecx, dword [ebp - 0x50]
cmp ecx, 0x10
jb 0x436831
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x436827
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436f23
push ecx
push edx
call fcn.00504f31
add esp, 8
mov edi, dword [ebp - 0x6c]
test edi, edi
je 0x43688c
cmp dword [edi + 0x2c], 0
je 0x436867
mov eax, 5
cmp ax, word [edi + 0x30]
jae 0x436867
mov eax, dword [edi]
mov eax, dword [eax + 0x44]
test eax, eax
je 0x43685c
push eax
call dword [0x562d18]
add esp, 4
mov ecx, dword [edi + 0x2c]
add ecx, 0xc8
jmp 0x436891
mov eax, dword [edi]
test eax, eax
je 0x43688c
mov eax, dword [eax + 0x44]
test eax, eax
je 0x43687e
push eax
call dword [0x562d18]
add esp, 4
push 0
push 0x19
push dword [edi]
call fcn.004b5810
add esp, 0xc
mov ecx, 0x54a500
mov dl, 1
call fcn.004c3d20
mov dword [ebp - 0x44], eax
test edi, edi
je 0x4368f2
mov esi, dword [edi]
mov ecx, dword [edi + 0x64]
test esi, esi
je 0x4368d5
cmp byte [esi + 0x1e], 0
jne 0x4368b8
mov edx, esi
cmp ecx, 0xc0a
jne 0x4368d0
push 0
push 7
push esi
call fcn.004b5810
mov byte [esi + 0x1e], 0
add esp, 0xc
mov edx, dword [edi]
mov ecx, 7
mov eax, dword [esi + 0x18]
jmp 0x4368dc
mov eax, 0xff
mov edx, esi
and eax, ecx
mov dword [edi + 0x64], eax
mov eax, dword [edx + 0x44]
test eax, eax
je 0x4368f2
push eax
call dword [0x562d20]
add esp, 4
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0xd7dcd1c1
push 0x18
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
movq qword [ebp - 0x168], xmm0
mov byte [ebp - 0x170], 3
call fcn.00504cb0
mov esi, eax
add esp, 4
lea eax, [ebp - 0x13e]
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], esi
mov byte [ebp - 4], 0x7d
xorps xmm0, xmm0
mov edx, dword [ebp - 0x44]
mov ecx, edx
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x44], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436964
sub ecx, dword [ebp - 0x44]
push ecx
push edx
mov ecx, esi
call fcn.00402c40
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x168], esi
mov byte [ebp - 4], 0x7e
xor ecx, ecx
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x34], al
inc ecx
cmp ecx, 4
jb 0x436990
mov dword [0x5655d8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x30], 0
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x54], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x50], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4369c3
sub ecx, edx
lea eax, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x64]
call fcn.00402c40
or dword [ebp - 0x14], 0x4000000
mov byte [ebp - 4], 0x7f
lea eax, [ebp - 0x64]
cmp dword [ebp - 0x50], 0x10
lea ecx, [ebp - 0x160]
cmovae eax, dword [ebp - 0x64]
push eax
call fcn.00490ca0
mov esi, eax
mov cl, byte [esi]
mov eax, dword [ebp - 0x164]
mov edi, dword [ebp - 0x48]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x170], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0x168], ecx
lea ecx, [ebp - 0x170]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x164], edx
call fcn.0048a7b0
mov byte [ebp - 4], 0x5c
mov ecx, dword [ebp - 0x50]
mov edi, dword [ebp - 0x6c]
cmp ecx, 0x10
jb 0x436a6f
mov edx, dword [ebp - 0x64]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x436a65
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436f23
push ecx
push edx
call fcn.00504f31
add esp, 8
mov edx, 7
mov ecx, edi
call fcn.004c74b0
mov edx, 7
mov ecx, edi
mov esi, eax
call fcn.004c75a0
mov dword [ebp - 0x44], eax
test eax, eax
jle 0x436cf8
push 0x5443dc
lea ecx, [ebp - 0x64]
call fcn.00402b70
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x84]
push dword [ebp - 0x44]
push esi
call fcn.00402bb0
cmp byte [ebp - 0xa3], 0
mov byte [ebp - 4], 0x82
je 0x436bbe
xorps xmm0, xmm0
mov word [ebp - 0xa2], 0x81d9
mov byte [ebp - 0xa0], 0x81
xor ecx, ecx
movups xmmword [ebp - 0x9f], xmm0
mov dword [ebp - 0x8f], 0
mov word [ebp - 0x8b], 0
mov byte [ebp - 0x89], 0
nop dword [eax + eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0xa2], al
inc ecx
cmp ecx, 3
jb 0x436b00
lea eax, [ebp - 0xa2]
mov dword [0x565590], ecx
push eax
lea ecx, [ebp - 0x114]
mov byte [ebp - 0x9f], 0
call fcn.00402b70
mov byte [ebp - 4], 0x83
lea ecx, [ebp - 0x114]
or dword [ebp - 0x14], 0x400000
call fcn.00402c10
push eax
push esi
call fcn.00506580
add esp, 8
test eax, eax
jne 0x436bb8
xorps xmm0, xmm0
mov word [ebp - 0x33], 0x81d9
mov byte [ebp - 0x31], 0x80
xor ecx, ecx
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], eax
mov word [ebp - 0x1c], ax
mov byte [ebp - 0x1a], al
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x33], al
inc ecx
cmp ecx, 3
jb 0x436b71
lea eax, [ebp - 0x33]
mov dword [0x565590], ecx
push eax
lea ecx, [ebp - 0xc0]
mov byte [ebp - 0x30], 0
call fcn.00402b70
or dword [ebp - 0x14], 0x800000
lea ecx, [ebp - 0xc0]
call fcn.00402c10
push eax
push esi
call fcn.00506580
add esp, 8
test eax, eax
je 0x436bbe
mov byte [ebp - 0x15], 1
jmp 0x436bc2
mov byte [ebp - 0x15], 0
mov eax, dword [ebp - 0x14]
test eax, 0x800000
je 0x436be2
and eax, 0xff7fffff
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0x82
test eax, 0x400000
je 0x436c03
and eax, 0xffbfffff
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x14], eax
call fcn.00402ad0
cmp byte [ebp - 0x15], 0
je 0x436c45
sub esp, 0x18
lea eax, [ebp - 0x84]
mov ecx, esp
mov dword [ebp - 0x44], esp
push eax
call fcn.0048ccc0
sub esp, 0x18
mov byte [ebp - 4], 0x84
lea eax, [ebp - 0x2a0]
mov ecx, esp
push eax
call fcn.0048ccc0
xor dl, dl
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x64]
call fcn.004296a0
add esp, 0x30
jmp 0x436c53
push ecx
lea edx, [ebp - 0x64]
mov ecx, esi
call fcn.00429570
add esp, 4
sub esp, 0x10
mov dword [ebp - 0x35], 0xc7ddd1d9
lea eax, [ebp - 0x64]
mov dword [ebp - 0x44], esp
xorps xmm0, xmm0
mov byte [ebp - 0x31], 0xd6
mov ecx, esp
mov dword [ebp - 0x20], 0
push eax
movups xmmword [ebp - 0x30], xmm0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
call fcn.004913c0
mov byte [ebp - 4], 0x85
xor ecx, ecx
nop dword [eax]
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x35], al
inc ecx
cmp ecx, 5
jb 0x436c90
lea eax, [ebp - 0x35]
mov dword [0x565544], ecx
push eax
lea ecx, [ebp - 0xc0]
mov byte [ebp - 0x30], 0
call fcn.00402b70
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0xc0]
call fcn.00402c10
push eax
lea ecx, [ebp - 0x160]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x87
call fcn.0048a7d0
lea ecx, [ebp - 0xc0]
call fcn.00402ad0
lea ecx, [ebp - 0x84]
call fcn.00402ad0
jmp 0x436d88
mov edx, 6
mov ecx, edi
call fcn.004c7790
sub esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x48], esp
xorps xmm0, xmm0
mov dword [ebp - 0x35], 0xc7ddd1d9
mov ecx, esp
mov byte [ebp - 0x31], 0xd6
push eax
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
call fcn.00491430
mov byte [ebp - 4], 0x88
xor ecx, ecx
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x35], al
inc ecx
cmp ecx, 5
jb 0x436d41
lea eax, [ebp - 0x35]
mov dword [0x565544], ecx
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x30], 0
call fcn.00402b70
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0x64]
call fcn.00402c10
push eax
lea ecx, [ebp - 0x160]
call fcn.00490ca0
mov ecx, eax
mov byte [ebp - 4], 0x8a
call fcn.0048a7d0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x5c
call fcn.00402ad0
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0xcc]
lea eax, [eax + eax*2]
lea eax, [ecx + eax*8]
push eax
lea ecx, [ebp - 0x320]
call fcn.0048a420
lea ecx, [ebp - 0x160]
push ecx
mov ecx, eax
call fcn.0048a140
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x5a
call fcn.0048a7b0
mov ecx, edi
call fcn.004c6eb0
cmp eax, 0x64
je 0x435781
mov esi, dword [ebp - 0xa8]
mov ecx, edi
call fcn.004c6d70
mov ecx, esi
call fcn.0041b210
xorps xmm0, xmm0
mov dword [ebp - 0x37], 0xd9dedfcc
mov word [ebp - 0x33], 0xd1da
xor ecx, ecx
mov byte [ebp - 0x31], 0xc6
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], 0
mov byte [ebp - 0x1a], 0
nop
mov al, cl
sub al, 0x51
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 7
jb 0x436e20
lea eax, [ebp - 0x37]
mov dword [0x565560], ecx
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x30], 0
call fcn.00402b70
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x8b
call fcn.00402c10
mov ecx, dword [ebp - 0x174]
push eax
call fcn.00490ca0
lea ecx, [ebp - 0x320]
push ecx
mov ecx, eax
call fcn.0048a140
lea ecx, [ebp - 0x64]
call fcn.00402ad0
lea ecx, [ebp - 0x288]
call fcn.00402ad0
lea ecx, [ebp - 0x320]
call fcn.0048a7b0
lea ecx, [ebp - 0x2a0]
call fcn.00402ad0
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x1e
call fcn.00402ad0
mov esi, dword [ebp - 0x88]
lea ecx, [ebp - 0xcc]
inc esi
mov dword [ebp - 0x88], esi
call fcn.0048b950
cmp esi, eax
jae 0x436ec6
mov edi, dword [ebp - 0x14]
jmp 0x434834
lea ecx, [ebp - 0x300]
call fcn.00402ad0
lea ecx, [ebp - 0x338]
call fcn.00402ad0
lea ecx, [ebp - 0xcc]
call fcn.0048eeb0
lea ecx, [ebp - 0x200]
call fcn.00402ad0
lea ecx, [ebx + 0x10]
call fcn.00402ad0
lea ecx, [ebx + 0x28]
call fcn.00402ad0
lea ecx, [ebx + 0x40]
call fcn.00402ad0
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.0050a1d0
lea ecx, [ebp - 0x160]
call fcn.0048e990
push eax
lea ecx, [ebp - 0x130]
call fcn.00402b70
push eax
mov edx, str.cannot_use_operator___with_a_string_argument_with
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x1a0]
call fcn.00490af0
add esp, 4
push eax
mov edx, 0x131
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x38]
call fcn.00408d70
add esp, 4
lea eax, [ebp - 0x38]
push 0x5607d0
push eax
call fcn.0050691b
int3