Function at 0x448100
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Contain obfuscated stackstrings
Encode data using xor
Get ntdll base address
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47aa2b
mov eax, dword fs:[0]
push eax
sub esp, 0x69c
mov eax, dword [0x49d008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2d0], ecx
mov dword [ebp - 0x2d8], ecx
mov dword [ebp - 0x618], ecx
mov dword [ebp - 0x3d4], 0
mov dword [ebp - 4], 1
mov dword [ebp - 0x324], 0xe
mov eax, dword [ebp - 0x324]
xor al, 0x68
mov byte [ebp - 0x320], al
mov eax, dword [ebp - 0x324]
inc al
xor al, 0x74
mov byte [ebp - 0x31f], al
mov eax, dword [ebp - 0x324]
add al, 2
xor al, 0x74
mov byte [ebp - 0x31e], al
mov eax, dword [ebp - 0x324]
add al, 3
xor al, 0x70
mov byte [ebp - 0x31d], al
mov eax, dword [ebp - 0x324]
add al, 4
xor al, 0x73
mov byte [ebp - 0x31c], al
mov eax, dword [ebp - 0x324]
add al, 5
xor al, 0x3a
mov byte [ebp - 0x31b], al
mov eax, dword [ebp - 0x324]
add al, 6
xor al, 0x2f
mov byte [ebp - 0x31a], al
mov eax, dword [ebp - 0x324]
add al, 7
xor al, 0x2f
mov byte [ebp - 0x319], al
mov eax, dword [ebp - 0x324]
add al, 8
xor al, 0x6d
mov byte [ebp - 0x318], al
mov eax, dword [ebp - 0x324]
add al, 9
xor al, 0x61
mov byte [ebp - 0x317], al
mov eax, dword [ebp - 0x324]
add al, 0xa
xor al, 0x63
mov byte [ebp - 0x316], al
mov eax, dword [ebp - 0x324]
add al, 0xb
xor al, 0x68
mov byte [ebp - 0x315], al
mov eax, dword [ebp - 0x324]
add al, 0xc
xor al, 0x69
mov byte [ebp - 0x314], al
mov eax, dword [ebp - 0x324]
add al, 0xd
xor al, 0x70
mov byte [ebp - 0x313], al
mov eax, dword [ebp - 0x324]
add al, 0xe
xor al, 0x63
mov byte [ebp - 0x312], al
mov eax, dword [ebp - 0x324]
add al, 0xf
xor al, 0x68
mov byte [ebp - 0x311], al
mov eax, dword [ebp - 0x324]
add al, 0x10
xor al, 0x65
mov byte [ebp - 0x310], al
mov eax, dword [ebp - 0x324]
add al, 0x11
xor al, 0x61
mov byte [ebp - 0x30f], al
mov eax, dword [ebp - 0x324]
add al, 0x12
xor al, 0x74
mov byte [ebp - 0x30e], al
mov eax, dword [ebp - 0x324]
add al, 0x13
xor al, 0x73
mov byte [ebp - 0x30d], al
mov eax, dword [ebp - 0x324]
add al, 0x14
xor al, 0x2e
mov byte [ebp - 0x30c], al
mov eax, dword [ebp - 0x324]
add al, 0x15
xor al, 0x63
mov byte [ebp - 0x30b], al
mov eax, dword [ebp - 0x324]
add al, 0x16
xor al, 0x6f
mov byte [ebp - 0x30a], al
mov eax, dword [ebp - 0x324]
add al, 0x17
xor al, 0x6d
mov byte [ebp - 0x309], al
mov eax, dword [ebp - 0x324]
add al, 0x18
xor al, 0x2e
mov byte [ebp - 0x308], al
mov eax, dword [ebp - 0x324]
add al, 0x19
xor al, 0x62
mov byte [ebp - 0x307], al
mov eax, dword [ebp - 0x324]
add al, 0x1a
xor al, 0x72
mov byte [ebp - 0x306], al
mov eax, dword [ebp - 0x324]
add al, 0x1b
xor al, 0x2f
mov byte [ebp - 0x305], al
mov eax, dword [ebp - 0x324]
add al, 0x1c
xor al, 0x61
mov byte [ebp - 0x304], al
mov eax, dword [ebp - 0x324]
add al, 0x1d
xor al, 0x70
mov byte [ebp - 0x303], al
mov eax, dword [ebp - 0x324]
add al, 0x1e
xor al, 0x69
mov byte [ebp - 0x302], al
mov eax, dword [ebp - 0x324]
add al, 0x1f
xor al, 0x2f
mov byte [ebp - 0x301], al
mov eax, dword [ebp - 0x324]
add al, 0x20
xor al, 0x63
mov byte [ebp - 0x300], al
mov eax, dword [ebp - 0x324]
add al, 0x21
xor al, 0x68
mov byte [ebp - 0x2ff], al
mov eax, dword [ebp - 0x324]
add al, 0x22
xor al, 0x65
mov byte [ebp - 0x2fe], al
mov eax, dword [ebp - 0x324]
add al, 0x23
xor al, 0x63
mov byte [ebp - 0x2fd], al
mov eax, dword [ebp - 0x324]
add al, 0x24
xor al, 0x6b
mov byte [ebp - 0x2fc], al
mov eax, dword [ebp - 0x324]
add al, 0x25
xor al, 0x50
mov byte [ebp - 0x2fb], al
mov eax, dword [ebp - 0x324]
add al, 0x26
xor al, 0x72
mov byte [ebp - 0x2fa], al
mov eax, dword [ebp - 0x324]
add al, 0x27
xor al, 0x65
mov byte [ebp - 0x2f9], al
mov eax, dword [ebp - 0x324]
add al, 0x28
xor al, 0x49
mov byte [ebp - 0x2f8], al
mov eax, dword [ebp - 0x324]
add al, 0x29
xor al, 0x6e
mov byte [ebp - 0x2f7], al
mov eax, dword [ebp - 0x324]
add al, 0x2a
xor al, 0x66
mov byte [ebp - 0x2f6], al
mov eax, dword [ebp - 0x324]
add al, 0x2b
xor al, 0x6f
mov byte [ebp - 0x2f5], al
mov eax, dword [ebp - 0x324]
add al, 0x2c
xor al, 0x72
mov byte [ebp - 0x2f4], al
mov eax, dword [ebp - 0x324]
add al, 0x2d
xor al, 0x6d
mov byte [ebp - 0x2f3], al
mov eax, dword [ebp - 0x324]
add al, 0x2e
xor al, 0x61
mov byte [ebp - 0x2f2], al
mov eax, dword [ebp - 0x324]
add al, 0x2f
xor al, 0x74
mov byte [ebp - 0x2f1], al
mov eax, dword [ebp - 0x324]
add al, 0x30
xor al, 0x69
mov byte [ebp - 0x2f0], al
mov eax, dword [ebp - 0x324]
add al, 0x31
xor al, 0x6f
mov byte [ebp - 0x2ef], al
mov eax, dword [ebp - 0x324]
add al, 0x32
xor al, 0x6e
mov byte [ebp - 0x2ee], al
mov eax, dword [ebp - 0x324]
add al, 0x33
xor al, 0x73
mov byte [ebp - 0x2ed], al
mov eax, dword [ebp - 0x324]
add al, 0x34
xor al, 0x2e
mov byte [ebp - 0x2ec], al
mov eax, dword [ebp - 0x324]
add al, 0x35
xor al, 0x70
mov byte [ebp - 0x2eb], al
mov eax, dword [ebp - 0x324]
add al, 0x36
xor al, 0x68
mov byte [ebp - 0x2ea], al
mov eax, dword [ebp - 0x324]
add al, 0x37
xor al, 0x70
mov byte [ebp - 0x2e9], al
mov eax, dword [ebp - 0x324]
add al, 0x38
xor al, 0x3f
mov byte [ebp - 0x2e8], al
mov eax, dword [ebp - 0x324]
add al, 0x39
xor al, 0x68
mov byte [ebp - 0x2e7], al
mov eax, dword [ebp - 0x324]
add al, 0x3a
xor al, 0x77
mov byte [ebp - 0x2e6], al
mov eax, dword [ebp - 0x324]
add al, 0x3b
xor al, 0x69
mov byte [ebp - 0x2e5], al
mov eax, dword [ebp - 0x324]
add al, 0x3c
xor al, 0x64
mov byte [ebp - 0x2e4], al
mov eax, dword [ebp - 0x324]
add al, 0x3d
mov byte [ebp - 0x2e2], 0
xor al, 0x3d
xor edx, edx
mov byte [ebp - 0x2e3], al
mov al, byte [ebp - 0x320]
nop word [eax + eax]
mov al, byte [ebp + edx - 0x320]
mov ecx, dword [ebp - 0x324]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x320], cl
inc edx
cmp edx, 0x3e
jb 0x448550
cmp dword [ebp + 0x1c], 0x10
lea esi, [ebp + 8]
mov byte [ebp - 0x2e2], 0
cmovae esi, dword [ebp + 8]
xor ecx, ecx
mov byte [ebp - 0x394], 0x30
mov byte [ebp - 0x393], 0x7a
mov byte [ebp - 0x392], 0x7c
mov byte [ebp - 0x391], 0x79
mov byte [ebp - 0x390], 0x7e
mov byte [ebp - 0x38f], 0x6f
mov byte [ebp - 0x38e], 0x6d
mov byte [ebp - 0x38d], 0x7e
mov byte [ebp - 0x38c], 0x73
mov byte [ebp - 0x38b], 0x79
mov byte [ebp - 0x38a], 0x78
mov byte [ebp - 0x389], 0x5a
mov byte [ebp - 0x388], 0x73
mov byte [ebp - 0x387], 0x78
mov byte [ebp - 0x386], 0x47
mov byte [ebp - 0x385], 0
mov al, byte [ebp - 0x394]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x394]
sub al, 0xa
mov byte [ebp + ecx - 0x394], al
inc ecx
cmp ecx, 0xf
jb 0x448600
cmp dword [0x49e3dc], 0x10
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x2cc]
mov edi, 0x49e3c8
cmovae edi, dword [0x49e3c8]
push 0x2bc
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
push esi
mov esi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
lea eax, [ebp - 0x2cc]
push 0x2bc
push eax
call esi
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x2cc]
push 0x2bc
push eax
call esi
push edi
lea eax, [ebp - 0x2cc]
push 0x2bc
push eax
call esi
call dword [sym.imp.libcurl.dll_curl_easy_init]
mov esi, dword [sym.imp.libcurl.dll_curl_easy_setopt]
mov edi, eax
lea eax, [ebp - 0x2cc]
push eax
push 0x2712
push edi
call esi
push 1
push 0x2b
push edi
call esi
mov dword [ebp - 0x340], 0x34
add esp, 0x48
mov eax, dword [ebp - 0x340]
xor al, 0x63
mov byte [ebp - 0x33c], al
mov eax, dword [ebp - 0x340]
inc al
xor al, 0x75
mov byte [ebp - 0x33b], al
mov eax, dword [ebp - 0x340]
add al, 2
xor al, 0x72
mov byte [ebp - 0x33a], al
mov eax, dword [ebp - 0x340]
add al, 3
xor al, 0x6c
mov byte [ebp - 0x339], al
mov eax, dword [ebp - 0x340]
add al, 4
xor al, 0x2f
mov byte [ebp - 0x338], al
mov eax, dword [ebp - 0x340]
add al, 5
xor al, 0x37
mov byte [ebp - 0x337], al
mov eax, dword [ebp - 0x340]
add al, 6
xor al, 0x2e
mov byte [ebp - 0x336], al
mov eax, dword [ebp - 0x340]
add al, 7
xor al, 0x37
mov byte [ebp - 0x335], al
mov eax, dword [ebp - 0x340]
add al, 8
xor al, 0x33
mov byte [ebp - 0x334], al
mov eax, dword [ebp - 0x340]
add al, 9
xor al, 0x2e
mov byte [ebp - 0x333], al
mov eax, dword [ebp - 0x340]
add al, 0xa
xor al, 0x30
mov byte [ebp - 0x331], 0
mov byte [ebp - 0x332], al
xor edx, edx
mov al, byte [ebp - 0x33c]
nop dword [eax]
mov al, byte [ebp + edx - 0x33c]
mov ecx, dword [ebp - 0x340]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x33c], cl
inc edx
cmp edx, 0xb
jb 0x448770
lea eax, [ebp - 0x33c]
mov byte [ebp - 0x331], 0
push eax
push 0x2722
push edi
call esi
push 0
push 0x40
push edi
call esi
push 1
push 0xd5
push edi
call esi
push 0
push 0x40
push edi
call esi
push 0
push 0x51
push edi
call esi
mov esi, dword [ebp - 0x2d0]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [esi], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
push 0x43c7e0
push 0x4e2b
push edi
mov dword [ebp - 0x3d4], 1
call dword [sym.imp.libcurl.dll_curl_easy_setopt]
add esp, 0x48
push esi
push 0x2711
push edi
call dword [sym.imp.libcurl.dll_curl_easy_setopt]
push edi
call dword [sym.imp.libcurl.dll_curl_easy_perform]
push edi
call dword [sym.imp.libcurl.dll_curl_easy_cleanup]
lea ecx, [ebp - 0x3ac]
mov dword [ebp - 0x3b0], 0x36
mov byte [ebp - 0x3ac], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x3ec], 0
add esp, 0x14
mov byte [ebp - 0x3ac], 0
mov dword [ebp - 0x3dc], 0
mov dword [ebp - 0x3d8], 0xf
mov byte [ebp - 0x3ec], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x448870
sub ecx, edx
lea eax, [ebp - 0x3ac]
push ecx
push eax
lea ecx, [ebp - 0x3ec]
call fcn.00474d00
mov byte [ebp - 4], 2
xor ecx, ecx
mov byte [ebp - 0x348], 0x3f
mov byte [ebp - 0x347], 0x6b
mov byte [ebp - 0x346], 0x77
mov byte [ebp - 0x345], 0x70
mov byte [ebp - 0x344], 0x6f
mov byte [ebp - 0x343], 0x41
mov byte [ebp - 0x342], 0
mov al, byte [ebp - 0x348]
nop dword [eax]
mov al, byte [ebp + ecx - 0x348]
sub al, 3
mov byte [ebp + ecx - 0x348], al
inc ecx
cmp ecx, 6
jb 0x4488d0
lea ecx, [ebp - 0x348]
mov dword [ebp - 0x584], 0
mov dword [ebp - 0x574], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x570], 0xf
mov byte [ebp - 0x584], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x448914
sub ecx, edx
lea eax, [ebp - 0x348]
push ecx
push eax
lea ecx, [ebp - 0x584]
call fcn.00474d00
lea eax, [ebp - 0x3ec]
mov byte [ebp - 4], 3
push eax
sub esp, 0x18
lea edi, [ebp - 0x584]
mov ecx, esp
push esi
call fcn.00474480
mov edx, edi
lea ecx, [ebp - 0x5cc]
call fcn.0043c710
mov edi, eax
add esp, 0x1c
cmp esi, edi
je 0x4489d1
mov edx, dword [esi + 0x14]
cmp edx, 0x10
jb 0x44899f
mov ecx, dword [esi]
inc edx
cmp edx, 0x1000
jb 0x448995
mov eax, dword [ecx - 4]
add edx, 0x23
sub ecx, eax
mov dword [ebp - 0x2d0], eax
lea eax, [ecx - 4]
cmp eax, 0x1f
ja 0x448aab
mov ecx, dword [ebp - 0x2d0]
push edx
push ecx
call fcn.00476ef0
add esp, 8
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
movups xmm0, xmmword [edi]
movups xmmword [esi], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
mov ecx, dword [ebp - 0x5b8]
cmp ecx, 0x10
jb 0x448a0b
mov edx, dword [ebp - 0x5cc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x448a01
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448aab
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x570]
mov dword [ebp - 0x5bc], 0
mov dword [ebp - 0x5b8], 0xf
mov byte [ebp - 0x5cc], 0
cmp ecx, 0x10
jb 0x448a60
mov edx, dword [ebp - 0x584]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x448a56
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448aab
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x3d8]
mov dword [ebp - 0x574], 0
mov dword [ebp - 0x570], 0xf
mov byte [ebp - 0x584], 0
cmp ecx, 0x10
jb 0x448abb
mov edx, dword [ebp - 0x3ec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x448ab1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x448ab1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov dword [ebp - 0x3dc], 0
lea ecx, [ebp - 0x3a4]
mov dword [ebp - 0x3d8], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x3ec], 0
mov dword [ebp - 0x3a8], 0x6f
mov byte [ebp - 0x3a4], 0
mov dword [ebp - 0x41c], 0
mov byte [ebp - 0x3a4], 0
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0x408], 0xf
mov byte [ebp - 0x41c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x448b20
sub ecx, edx
lea eax, [ebp - 0x3a4]
push ecx
push eax
lea ecx, [ebp - 0x41c]
call fcn.00474d00
mov byte [ebp - 4], 4
xor edx, edx
mov dword [ebp - 0x378], 0x2f
mov byte [ebp - 0x374], 0x13
mov byte [ebp - 0x373], 0
mov byte [ebp - 0x372], 0x47
mov byte [ebp - 0x371], 0x5b
mov byte [ebp - 0x370], 0x42
mov byte [ebp - 0x36f], 0x43
mov byte [ebp - 0x36e], 0x11
mov al, byte [ebp - 0x374]
mov byte [ebp - 0x36d], 0
nop word [eax + eax]
mov al, byte [ebp + edx - 0x374]
mov ecx, dword [ebp - 0x378]
xor cl, al
mov byte [ebp + edx - 0x374], cl
inc edx
cmp edx, 7
jb 0x448b90
lea ecx, [ebp - 0x374]
mov dword [ebp - 0x404], 0
mov byte [ebp - 0x36d], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x3f4], 0
mov dword [ebp - 0x3f0], 0xf
mov byte [ebp - 0x404], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x448be1
sub ecx, edx
lea eax, [ebp - 0x374]
push ecx
push eax
lea ecx, [ebp - 0x404]
call fcn.00474d00
lea eax, [ebp - 0x41c]
mov byte [ebp - 4], 5
push eax
sub esp, 0x18
lea edi, [ebp - 0x404]
mov ecx, esp
push esi
call fcn.00474480
mov edx, edi
lea ecx, [ebp - 0x5e4]
call fcn.0043c710
mov edi, eax
add esp, 0x1c
cmp esi, edi
je 0x448c9e
mov edx, dword [esi + 0x14]
cmp edx, 0x10
jb 0x448c6c
mov ecx, dword [esi]
inc edx
cmp edx, 0x1000
jb 0x448c62
mov eax, dword [ecx - 4]
add edx, 0x23
sub ecx, eax
mov dword [ebp - 0x2d0], eax
lea eax, [ecx - 4]
cmp eax, 0x1f
ja 0x448d78
mov ecx, dword [ebp - 0x2d0]
push edx
push ecx
call fcn.00476ef0
add esp, 8
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
movups xmm0, xmmword [edi]
movups xmmword [esi], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
mov ecx, dword [ebp - 0x5d0]
cmp ecx, 0x10
jb 0x448cd8
mov edx, dword [ebp - 0x5e4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x448cce
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448d78
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x5d4], 0
mov dword [ebp - 0x5d0], 0xf
mov byte [ebp - 0x5e4], 0
cmp ecx, 0x10
jb 0x448d2d
mov edx, dword [ebp - 0x404]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x448d23
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448d78
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x408]
mov dword [ebp - 0x3f4], 0
mov dword [ebp - 0x3f0], 0xf
mov byte [ebp - 0x404], 0
cmp ecx, 0x10
jb 0x448d88
mov edx, dword [ebp - 0x41c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x448d7e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x448d7e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov dword [ebp - 0x40c], 0
lea ecx, [ebp - 0x3b4]
mov dword [ebp - 0x408], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x41c], 0
mov dword [ebp - 0x3b8], 0x19
mov byte [ebp - 0x3b4], 0
mov dword [ebp - 0x44c], 0
mov byte [ebp - 0x3b4], 0
mov dword [ebp - 0x43c], 0
mov dword [ebp - 0x438], 0xf
mov byte [ebp - 0x44c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x448df0
sub ecx, edx
lea eax, [ebp - 0x3b4]
push ecx
push eax
lea ecx, [ebp - 0x44c]
call fcn.00474d00
mov byte [ebp - 4], 6
xor ecx, ecx
mov byte [ebp - 0x350], 0x43
mov byte [ebp - 0x34f], 0x69
mov byte [ebp - 0x34e], 0x76
mov byte [ebp - 0x34d], 0x6b
mov byte [ebp - 0x34c], 0x80
mov byte [ebp - 0x34b], 0x45
mov byte [ebp - 0x34a], 0
mov al, byte [ebp - 0x350]
nop dword [eax]
mov al, byte [ebp + ecx - 0x350]
sub al, 7
mov byte [ebp + ecx - 0x350], al
inc ecx
cmp ecx, 6
jb 0x448e50
lea ecx, [ebp - 0x350]
mov dword [ebp - 0x434], 0
mov dword [ebp - 0x424], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x420], 0xf
mov byte [ebp - 0x434], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x448e94
sub ecx, edx
lea eax, [ebp - 0x350]
push ecx
push eax
lea ecx, [ebp - 0x434]
call fcn.00474d00
lea eax, [ebp - 0x44c]
mov byte [ebp - 4], 7
push eax
sub esp, 0x18
lea edi, [ebp - 0x434]
mov ecx, esp
push esi
call fcn.00474480
mov edx, edi
lea ecx, [ebp - 0x5fc]
call fcn.0043c710
mov edi, eax
add esp, 0x1c
cmp esi, edi
je 0x448f51
mov edx, dword [esi + 0x14]
cmp edx, 0x10
jb 0x448f1f
mov ecx, dword [esi]
inc edx
cmp edx, 0x1000
jb 0x448f15
mov eax, dword [ecx - 4]
add edx, 0x23
sub ecx, eax
mov dword [ebp - 0x2d0], eax
lea eax, [ecx - 4]
cmp eax, 0x1f
ja 0x44902b
mov ecx, dword [ebp - 0x2d0]
push edx
push ecx
call fcn.00476ef0
add esp, 8
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
movups xmm0, xmmword [edi]
movups xmmword [esi], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
mov ecx, dword [ebp - 0x5e8]
cmp ecx, 0x10
jb 0x448f8b
mov edx, dword [ebp - 0x5fc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x448f81
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44902b
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x420]
mov dword [ebp - 0x5ec], 0
mov dword [ebp - 0x5e8], 0xf
mov byte [ebp - 0x5fc], 0
cmp ecx, 0x10
jb 0x448fe0
mov edx, dword [ebp - 0x434]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x448fd6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44902b
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x438]
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x420], 0xf
mov byte [ebp - 0x434], 0
cmp ecx, 0x10
jb 0x44903b
mov edx, dword [ebp - 0x44c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449031
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x449031
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 0x2d1], 0
lea ecx, [ebp - 0x2d1]
mov al, byte [ebp - 0x2d1]
lea edx, [ecx + 1]
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0x43c], 0
mov dword [ebp - 0x438], 0xf
mov byte [ebp - 0x44c], 0
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x468], 0xf
mov byte [ebp - 0x47c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x449091
sub ecx, edx
lea eax, [ebp - 0x2d1]
push ecx
push eax
lea ecx, [ebp - 0x47c]
call fcn.00474d00
mov byte [ebp - 4], 8
xor edx, edx
mov dword [ebp - 0x384], 0x32
mov byte [ebp - 0x380], 0xe
mov byte [ebp - 0x37f], 0x1d
mov byte [ebp - 0x37e], 0x50
mov byte [ebp - 0x37d], 0x5d
mov byte [ebp - 0x37c], 0x56
mov byte [ebp - 0x37b], 0x4b
mov byte [ebp - 0x37a], 0xc
mov al, byte [ebp - 0x380]
mov byte [ebp - 0x379], 0
nop dword [eax + eax]
mov al, byte [ebp + edx - 0x380]
mov ecx, dword [ebp - 0x384]
xor cl, al
mov byte [ebp + edx - 0x380], cl
inc edx
cmp edx, 7
jb 0x449100
lea ecx, [ebp - 0x380]
mov dword [ebp - 0x464], 0
mov byte [ebp - 0x379], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x450], 0xf
mov byte [ebp - 0x464], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x449151
sub ecx, edx
lea eax, [ebp - 0x380]
push ecx
push eax
lea ecx, [ebp - 0x464]
call fcn.00474d00
lea eax, [ebp - 0x47c]
mov byte [ebp - 4], 9
push eax
sub esp, 0x18
lea edi, [ebp - 0x464]
mov ecx, esp
push esi
call fcn.00474480
mov edx, edi
lea ecx, [ebp - 0x614]
call fcn.0043c710
mov edi, eax
add esp, 0x1c
cmp esi, edi
je 0x44920e
mov edx, dword [esi + 0x14]
cmp edx, 0x10
jb 0x4491dc
mov ecx, dword [esi]
inc edx
cmp edx, 0x1000
jb 0x4491d2
mov eax, dword [ecx - 4]
add edx, 0x23
sub ecx, eax
mov dword [ebp - 0x2d0], eax
lea eax, [ecx - 4]
cmp eax, 0x1f
ja 0x4492e8
mov ecx, dword [ebp - 0x2d0]
push edx
push ecx
call fcn.00476ef0
add esp, 8
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
movups xmm0, xmmword [edi]
movups xmmword [esi], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
mov ecx, dword [ebp - 0x600]
cmp ecx, 0x10
jb 0x449248
mov edx, dword [ebp - 0x614]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44923e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4492e8
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x450]
mov dword [ebp - 0x604], 0
mov dword [ebp - 0x600], 0xf
mov byte [ebp - 0x614], 0
cmp ecx, 0x10
jb 0x44929d
mov edx, dword [ebp - 0x464]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449293
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4492e8
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x468]
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x450], 0xf
mov byte [ebp - 0x464], 0
cmp ecx, 0x10
jb 0x4492f8
mov edx, dword [ebp - 0x47c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4492ee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4492ee
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov dword [ebp - 0x46c], 0
lea ecx, [ebp - 0x3bc]
mov dword [ebp - 0x468], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x47c], 0
mov dword [ebp - 0x3c0], 0x65
mov byte [ebp - 0x3bc], 0
mov dword [ebp - 0x4ac], 0
mov byte [ebp - 0x3bc], 0
mov dword [ebp - 0x49c], 0
mov dword [ebp - 0x498], 0xf
mov byte [ebp - 0x4ac], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x449360
sub ecx, edx
lea eax, [ebp - 0x3bc]
push ecx
push eax
lea ecx, [ebp - 0x4ac]
call fcn.00474d00
mov byte [ebp - 4], 0xa
xor edx, edx
mov dword [ebp - 0x36c], 0x7d
mov byte [ebp - 0x368], 0x41
mov byte [ebp - 0x367], 0xd
mov byte [ebp - 0x366], 0x43
mov al, byte [ebp - 0x368]
mov byte [ebp - 0x365], 0
nop
mov al, byte [ebp + edx - 0x368]
mov ecx, dword [ebp - 0x36c]
xor cl, al
mov byte [ebp + edx - 0x368], cl
inc edx
cmp edx, 3
jb 0x4493b0
lea ecx, [ebp - 0x368]
mov dword [ebp - 0x494], 0
mov byte [ebp - 0x365], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x484], 0
mov dword [ebp - 0x480], 0xf
mov byte [ebp - 0x494], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x449401
sub ecx, edx
lea eax, [ebp - 0x368]
push ecx
push eax
lea ecx, [ebp - 0x494]
call fcn.00474d00
lea eax, [ebp - 0x4ac]
mov byte [ebp - 4], 0xb
push eax
sub esp, 0x18
lea edi, [ebp - 0x494]
mov ecx, esp
push esi
call fcn.00474480
mov edx, edi
lea ecx, [ebp - 0x6a8]
call fcn.0043c710
mov edi, eax
add esp, 0x1c
cmp esi, edi
je 0x4494be
mov edx, dword [esi + 0x14]
cmp edx, 0x10
jb 0x44948c
mov ecx, dword [esi]
inc edx
cmp edx, 0x1000
jb 0x449482
mov eax, dword [ecx - 4]
add edx, 0x23
sub ecx, eax
mov dword [ebp - 0x2d0], eax
lea eax, [ecx - 4]
cmp eax, 0x1f
ja 0x449598
mov ecx, dword [ebp - 0x2d0]
push edx
push ecx
call fcn.00476ef0
add esp, 8
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
movups xmm0, xmmword [edi]
movups xmmword [esi], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
mov ecx, dword [ebp - 0x694]
cmp ecx, 0x10
jb 0x4494f8
mov edx, dword [ebp - 0x6a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4494ee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449598
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x480]
mov dword [ebp - 0x698], 0
mov dword [ebp - 0x694], 0xf
mov byte [ebp - 0x6a8], 0
cmp ecx, 0x10
jb 0x44954d
mov edx, dword [ebp - 0x494]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449543
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449598
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x498]
mov dword [ebp - 0x484], 0
mov dword [ebp - 0x480], 0xf
mov byte [ebp - 0x494], 0
cmp ecx, 0x10
jb 0x4495a8
mov edx, dword [ebp - 0x4ac]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44959e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44959e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 0x2d2], 0
lea ecx, [ebp - 0x2d2]
mov al, byte [ebp - 0x2d2]
lea edx, [ecx + 1]
mov dword [ebp - 0x4dc], 0
mov dword [ebp - 0x49c], 0
mov dword [ebp - 0x498], 0xf
mov byte [ebp - 0x4ac], 0
mov dword [ebp - 0x4cc], 0
mov dword [ebp - 0x4c8], 0xf
mov byte [ebp - 0x4dc], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x449600
sub ecx, edx
lea eax, [ebp - 0x2d2]
push ecx
push eax
lea ecx, [ebp - 0x4dc]
call fcn.00474d00
mov byte [ebp - 4], 0xc
xor ecx, ecx
mov byte [ebp - 0x2e0], 0x3d
mov byte [ebp - 0x2df], 0x30
mov byte [ebp - 0x2de], 0x71
mov byte [ebp - 0x2dd], 0x3f
mov byte [ebp - 0x2dc], 0
mov al, byte [ebp - 0x2e0]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x2e0]
dec al
mov byte [ebp + ecx - 0x2e0], al
inc ecx
cmp ecx, 4
jb 0x449650
lea ecx, [ebp - 0x2e0]
mov dword [ebp - 0x4c4], 0
mov dword [ebp - 0x4b4], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4b0], 0xf
mov byte [ebp - 0x4c4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x449694
sub ecx, edx
lea eax, [ebp - 0x2e0]
push ecx
push eax
lea ecx, [ebp - 0x4c4]
call fcn.00474d00
lea eax, [ebp - 0x4dc]
mov byte [ebp - 4], 0xd
push eax
sub esp, 0x18
lea edi, [ebp - 0x4c4]
mov ecx, esp
push esi
call fcn.00474480
mov edx, edi
lea ecx, [ebp - 0x630]
call fcn.0043c710
mov edi, eax
add esp, 0x1c
cmp esi, edi
je 0x449751
mov edx, dword [esi + 0x14]
cmp edx, 0x10
jb 0x44971f
mov ecx, dword [esi]
inc edx
cmp edx, 0x1000
jb 0x449715
mov eax, dword [ecx - 4]
add edx, 0x23
sub ecx, eax
mov dword [ebp - 0x2d0], eax
lea eax, [ecx - 4]
cmp eax, 0x1f
ja 0x44982b
mov ecx, dword [ebp - 0x2d0]
push edx
push ecx
call fcn.00476ef0
add esp, 8
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
movups xmm0, xmmword [edi]
movups xmmword [esi], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
mov ecx, dword [ebp - 0x61c]
cmp ecx, 0x10
jb 0x44978b
mov edx, dword [ebp - 0x630]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449781
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44982b
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x4b0]
mov dword [ebp - 0x620], 0
mov dword [ebp - 0x61c], 0xf
mov byte [ebp - 0x630], 0
cmp ecx, 0x10
jb 0x4497e0
mov edx, dword [ebp - 0x4c4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4497d6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44982b
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x4c8]
mov dword [ebp - 0x4b4], 0
mov dword [ebp - 0x4b0], 0xf
mov byte [ebp - 0x4c4], 0
cmp ecx, 0x10
jb 0x44983b
mov edx, dword [ebp - 0x4dc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449831
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x449831
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov dword [ebp - 0x4cc], 0
lea ecx, [ebp - 0x3c4]
mov dword [ebp - 0x4c8], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x4dc], 0
mov dword [ebp - 0x3c8], 0x1d
mov byte [ebp - 0x3c4], 0
mov dword [ebp - 0x50c], 0
mov byte [ebp - 0x3c4], 0
mov dword [ebp - 0x4fc], 0
mov dword [ebp - 0x4f8], 0xf
mov byte [ebp - 0x50c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4498a0
sub ecx, edx
lea eax, [ebp - 0x3c4]
push ecx
push eax
lea ecx, [ebp - 0x50c]
call fcn.00474d00
mov byte [ebp - 4], 0xe
xor edx, edx
mov dword [ebp - 0x3a0], 9
mov byte [ebp - 0x39c], 0x35
mov byte [ebp - 0x39b], 0x61
mov byte [ebp - 0x39a], 0x38
mov byte [ebp - 0x399], 0x37
mov al, byte [ebp - 0x39c]
mov byte [ebp - 0x398], 0
nop word [eax + eax]
mov al, byte [ebp + edx - 0x39c]
mov ecx, dword [ebp - 0x3a0]
xor cl, al
mov byte [ebp + edx - 0x39c], cl
inc edx
cmp edx, 4
jb 0x449900
lea ecx, [ebp - 0x39c]
mov dword [ebp - 0x4f4], 0
mov byte [ebp - 0x398], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x4e4], 0
mov dword [ebp - 0x4e0], 0xf
mov byte [ebp - 0x4f4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x449951
sub ecx, edx
lea eax, [ebp - 0x39c]
push ecx
push eax
lea ecx, [ebp - 0x4f4]
call fcn.00474d00
lea eax, [ebp - 0x50c]
mov byte [ebp - 4], 0xf
push eax
sub esp, 0x18
lea edi, [ebp - 0x4f4]
mov ecx, esp
push esi
call fcn.00474480
mov edx, edi
lea ecx, [ebp - 0x648]
call fcn.0043c710
mov edi, eax
add esp, 0x1c
cmp esi, edi
je 0x449a0e
mov edx, dword [esi + 0x14]
cmp edx, 0x10
jb 0x4499dc
mov ecx, dword [esi]
inc edx
cmp edx, 0x1000
jb 0x4499d2
mov eax, dword [ecx - 4]
add edx, 0x23
sub ecx, eax
mov dword [ebp - 0x2d0], eax
lea eax, [ecx - 4]
cmp eax, 0x1f
ja 0x449ae8
mov ecx, dword [ebp - 0x2d0]
push edx
push ecx
call fcn.00476ef0
add esp, 8
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
movups xmm0, xmmword [edi]
movups xmmword [esi], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
mov ecx, dword [ebp - 0x634]
cmp ecx, 0x10
jb 0x449a48
mov edx, dword [ebp - 0x648]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449a3e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449ae8
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x4e0]
mov dword [ebp - 0x638], 0
mov dword [ebp - 0x634], 0xf
mov byte [ebp - 0x648], 0
cmp ecx, 0x10
jb 0x449a9d
mov edx, dword [ebp - 0x4f4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449a93
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449ae8
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x4f8]
mov dword [ebp - 0x4e4], 0
mov dword [ebp - 0x4e0], 0xf
mov byte [ebp - 0x4f4], 0
cmp ecx, 0x10
jb 0x449af8
mov edx, dword [ebp - 0x50c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449aee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x449aee
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov dword [ebp - 0x4fc], 0
lea ecx, [ebp - 0x3cc]
mov dword [ebp - 0x4f8], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x50c], 0
mov dword [ebp - 0x3d0], 0x49
mov byte [ebp - 0x3cc], 0
mov dword [ebp - 0x53c], 0
mov byte [ebp - 0x3cc], 0
mov dword [ebp - 0x52c], 0
mov dword [ebp - 0x528], 0xf
mov byte [ebp - 0x53c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x449b60
sub ecx, edx
lea eax, [ebp - 0x3cc]
push ecx
push eax
lea ecx, [ebp - 0x53c]
call fcn.00474d00
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x364], 0x37
mov eax, dword [ebp - 0x364]
xor al, 0x3c
mov byte [ebp - 0x360], al
mov eax, dword [ebp - 0x364]
inc al
xor al, 0x2f
mov byte [ebp - 0x35f], al
mov eax, dword [ebp - 0x364]
add al, 2
xor al, 0x68
mov byte [ebp - 0x35e], al
mov eax, dword [ebp - 0x364]
add al, 3
xor al, 0x31
mov byte [ebp - 0x35d], al
mov eax, dword [ebp - 0x364]
add al, 4
mov byte [ebp - 0x35b], 0
xor al, 0x3e
xor edx, edx
mov byte [ebp - 0x35c], al
mov al, byte [ebp - 0x360]
nop word [eax + eax]
mov al, byte [ebp + edx - 0x360]
mov ecx, dword [ebp - 0x364]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x360], cl
inc edx
cmp edx, 5
jb 0x449bf0
lea ecx, [ebp - 0x360]
mov dword [ebp - 0x524], 0
mov byte [ebp - 0x35b], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x514], 0
mov dword [ebp - 0x510], 0xf
mov byte [ebp - 0x524], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x449c43
sub ecx, edx
lea eax, [ebp - 0x360]
push ecx
push eax
lea ecx, [ebp - 0x524]
call fcn.00474d00
lea eax, [ebp - 0x53c]
mov byte [ebp - 4], 0x11
push eax
sub esp, 0x18
lea edi, [ebp - 0x524]
mov ecx, esp
push esi
call fcn.00474480
mov edx, edi
lea ecx, [ebp - 0x660]
call fcn.0043c710
mov edi, eax
add esp, 0x1c
cmp esi, edi
je 0x449d00
mov edx, dword [esi + 0x14]
cmp edx, 0x10
jb 0x449cce
mov ecx, dword [esi]
inc edx
cmp edx, 0x1000
jb 0x449cc4
mov eax, dword [ecx - 4]
add edx, 0x23
sub ecx, eax
mov dword [ebp - 0x2d0], eax
lea eax, [ecx - 4]
cmp eax, 0x1f
ja 0x449dda
mov ecx, dword [ebp - 0x2d0]
push edx
push ecx
call fcn.00476ef0
add esp, 8
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
movups xmm0, xmmword [edi]
movups xmmword [esi], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
mov ecx, dword [ebp - 0x64c]
cmp ecx, 0x10
jb 0x449d3a
mov edx, dword [ebp - 0x660]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449d30
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449dda
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x510]
mov dword [ebp - 0x650], 0
mov dword [ebp - 0x64c], 0xf
mov byte [ebp - 0x660], 0
cmp ecx, 0x10
jb 0x449d8f
mov edx, dword [ebp - 0x524]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449d85
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449dda
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x528]
mov dword [ebp - 0x514], 0
mov dword [ebp - 0x510], 0xf
mov byte [ebp - 0x524], 0
cmp ecx, 0x10
jb 0x449dea
mov edx, dword [ebp - 0x53c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449de0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x449de0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 0x2d3], 0
lea ecx, [ebp - 0x2d3]
mov al, byte [ebp - 0x2d3]
lea edx, [ecx + 1]
mov dword [ebp - 0x56c], 0
mov dword [ebp - 0x52c], 0
mov dword [ebp - 0x528], 0xf
mov byte [ebp - 0x53c], 0
mov dword [ebp - 0x55c], 0
mov dword [ebp - 0x558], 0xf
mov byte [ebp - 0x56c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x449e40
sub ecx, edx
lea eax, [ebp - 0x2d3]
push ecx
push eax
lea ecx, [ebp - 0x56c]
call fcn.00474d00
mov byte [ebp - 4], 0x12
xor ecx, ecx
mov byte [ebp - 0x358], 0x3d
mov byte [ebp - 0x357], 0x74
mov byte [ebp - 0x356], 0x71
mov byte [ebp - 0x355], 0x62
mov byte [ebp - 0x354], 0x6f
mov byte [ebp - 0x353], 0x3f
mov byte [ebp - 0x352], 0
mov al, byte [ebp - 0x358]
nop dword [eax]
mov al, byte [ebp + ecx - 0x358]
dec al
mov byte [ebp + ecx - 0x358], al
inc ecx
cmp ecx, 6
jb 0x449ea0
lea ecx, [ebp - 0x358]
mov dword [ebp - 0x554], 0
mov dword [ebp - 0x544], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x540], 0xf
mov byte [ebp - 0x554], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x449ee4
sub ecx, edx
lea eax, [ebp - 0x358]
push ecx
push eax
lea ecx, [ebp - 0x554]
call fcn.00474d00
lea eax, [ebp - 0x56c]
mov byte [ebp - 4], 0x13
push eax
sub esp, 0x18
lea edi, [ebp - 0x554]
mov ecx, esp
push esi
call fcn.00474480
mov edx, edi
lea ecx, [ebp - 0x678]
call fcn.0043c710
mov edi, eax
add esp, 0x1c
cmp esi, edi
je 0x449fa1
mov edx, dword [esi + 0x14]
cmp edx, 0x10
jb 0x449f6f
mov ecx, dword [esi]
inc edx
cmp edx, 0x1000
jb 0x449f65
mov eax, dword [ecx - 4]
add edx, 0x23
sub ecx, eax
mov dword [ebp - 0x2d0], eax
lea eax, [ecx - 4]
cmp eax, 0x1f
ja 0x44a07b
mov ecx, dword [ebp - 0x2d0]
push edx
push ecx
call fcn.00476ef0
add esp, 8
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
movups xmm0, xmmword [edi]
movups xmmword [esi], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
mov ecx, dword [ebp - 0x664]
cmp ecx, 0x10
jb 0x449fdb
mov edx, dword [ebp - 0x678]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449fd1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a07b
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x540]
mov dword [ebp - 0x668], 0
mov dword [ebp - 0x664], 0xf
mov byte [ebp - 0x678], 0
cmp ecx, 0x10
jb 0x44a030
mov edx, dword [ebp - 0x554]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44a026
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a07b
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x558]
mov dword [ebp - 0x544], 0
mov dword [ebp - 0x540], 0xf
mov byte [ebp - 0x554], 0
cmp ecx, 0x10
jb 0x44a08b
mov edx, dword [ebp - 0x56c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44a081
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44a081
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov byte [ebp - 0x2d4], 0
lea ecx, [ebp - 0x2d4]
mov al, byte [ebp - 0x2d4]
lea edx, [ecx + 1]
mov dword [ebp - 0x59c], 0
mov dword [ebp - 0x55c], 0
mov dword [ebp - 0x558], 0xf
mov byte [ebp - 0x56c], 0
mov dword [ebp - 0x58c], 0
mov dword [ebp - 0x588], 0xf
mov byte [ebp - 0x59c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44a0e1
sub ecx, edx
lea eax, [ebp - 0x2d4]
push ecx
push eax
lea ecx, [ebp - 0x59c]
call fcn.00474d00
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x330], 0x26
mov eax, dword [ebp - 0x330]
xor al, 0x3c
mov byte [ebp - 0x32c], al
mov eax, dword [ebp - 0x330]
inc al
xor al, 0x2f
mov byte [ebp - 0x32b], al
mov eax, dword [ebp - 0x330]
add al, 2
xor al, 0x73
mov byte [ebp - 0x32a], al
mov eax, dword [ebp - 0x330]
add al, 3
xor al, 0x70
mov byte [ebp - 0x329], al
mov eax, dword [ebp - 0x330]
add al, 4
xor al, 0x61
mov byte [ebp - 0x328], al
mov eax, dword [ebp - 0x330]
add al, 5
xor al, 0x6e
mov byte [ebp - 0x327], al
mov eax, dword [ebp - 0x330]
add al, 6
mov byte [ebp - 0x325], 0
xor al, 0x3e
xor edx, edx
mov byte [ebp - 0x326], al
mov al, byte [ebp - 0x32c]
nop dword [eax + eax]
mov al, byte [ebp + edx - 0x32c]
mov ecx, dword [ebp - 0x330]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x32c], cl
inc edx
cmp edx, 7
jb 0x44a190
lea ecx, [ebp - 0x32c]
mov dword [ebp - 0x5b4], 0
mov byte [ebp - 0x325], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x5a4], 0
mov dword [ebp - 0x5a0], 0xf
mov byte [ebp - 0x5b4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44a1e3
sub ecx, edx
lea eax, [ebp - 0x32c]
push ecx
push eax
lea ecx, [ebp - 0x5b4]
call fcn.00474d00
lea eax, [ebp - 0x59c]
mov byte [ebp - 4], 0x15
push eax
sub esp, 0x18
lea edi, [ebp - 0x5b4]
mov ecx, esp
push esi
call fcn.00474480
mov edx, edi
lea ecx, [ebp - 0x690]
call fcn.0043c710
mov edi, eax
add esp, 0x1c
cmp esi, edi
je 0x44a296
mov ecx, dword [esi + 0x14]
cmp ecx, 0x10
jb 0x44a264
mov eax, dword [esi]
inc ecx
cmp ecx, 0x1000
jb 0x44a25a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a34d
mov eax, edx
push ecx
push eax
call fcn.00476ef0
add esp, 8
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
movups xmm0, xmmword [edi]
movups xmmword [esi], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
mov ecx, dword [ebp - 0x67c]
cmp ecx, 0x10
jb 0x44a2d0
mov edx, dword [ebp - 0x690]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44a2c6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a34d
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov ecx, dword [ebp - 0x5a0]
mov dword [ebp - 0x680], 0
mov dword [ebp - 0x67c], 0xf
mov byte [ebp - 0x690], 0
cmp ecx, 0x10
jb 0x44a321
mov edx, dword [ebp - 0x5b4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44a317
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44a34d
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov ecx, dword [ebp - 0x588]
cmp ecx, 0x10
jb 0x44a35d
mov edx, dword [ebp - 0x59c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44a353
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44a353
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov ecx, dword [ebp + 0x1c]
cmp ecx, 0x10
jb 0x44a393
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44a389
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44a389
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00476ef0
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00476b4c
mov esp, ebp
pop ebp
ret