Function at 0x44fd20
Capabilities:
Encode data using xor
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5cefb6
mov eax, dword fs:[0]
push eax
sub esp, 0x2d4
mov eax, dword [0x65ebc0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp - 0x138]
mov dword [ebp - 4], 0
call fcn.0044bfa0
mov edx, eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x90]
call fcn.0044b8f0
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x124]
cmp ecx, 0xf
jbe 0x44fdb0
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44fda6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44fda6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005cae57
add esp, 8
lea eax, [ebp - 0x78]
mov dword [ebp - 0x128], 0
push eax
lea eax, [ebp - 0x74]
mov dword [ebp - 0x124], 0xf
push eax
mov byte [ebp - 0x138], 0
mov dword [ebp - 0x78], 0x64
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
xorps xmm0, xmm0
mov dword [ebp - 0x98], 0
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x94], 0
movups xmmword [ebp - 0xa8], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44fe04
sub ecx, edx
lea eax, [ebp - 0x74]
push ecx
push eax
lea ecx, [ebp - 0xa8]
call fcn.00466bc0
mov byte [ebp - 4], 4
xor ecx, ecx
mov dword [ebp - 0x100], 0x13171151
mov dword [ebp - 0xfc], 0x814230f
mov word [ebp - 0xf8], 0x42
mov byte [ebp - 0xf6], 1
nop word [eax + eax]
lea eax, [ecx + 0x77]
xor byte [ebp + ecx - 0x100], al
inc ecx
cmp ecx, 9
jb 0x44fe50
mov edx, 0xcb6a58
mov byte [ebp - 0xf6], 0
lea ecx, [ebp - 0x250]
call fcn.0044bd30
mov dword [ebp - 0x120], eax
mov byte [ebp - 4], 5
xor ecx, ecx
mov dword [ebp - 0xf4], 0x140e1751
mov dword [ebp - 0xf0], 0x1a140e1e
mov word [ebp - 0xec], 0x42
mov byte [ebp - 0xea], 1
nop word [eax + eax]
lea eax, [ecx + 0x77]
xor byte [ebp + ecx - 0xf4], al
inc ecx
cmp ecx, 9
jb 0x44feb0
mov edx, 0xcb6a40
mov byte [ebp - 0xea], 0
lea ecx, [ebp - 0x238]
call fcn.0044bd30
mov dword [ebp - 0x140], eax
mov byte [ebp - 4], 6
xor ecx, ecx
mov dword [ebp - 0xd0], 0x17181651
mov dword [ebp - 0xcc], 0x100411e
nop word [eax + eax]
lea eax, [ecx + 0x77]
xor byte [ebp + ecx - 0xd0], al
inc ecx
cmp ecx, 6
jb 0x44ff00
mov edx, 0xcb6af4
mov byte [ebp - 0xc9], 0
lea ecx, [ebp - 0x220]
call fcn.0044bd30
mov dword [ebp - 0x13c], eax
mov byte [ebp - 4], 7
xor ecx, ecx
mov dword [ebp - 0x110], 0x91c0b51
mov dword [ebp - 0x10c], 0x10121508
mov dword [ebp - 0x108], 0xbce416
mov byte [ebp - 0x104], 1
nop dword [eax + eax]
lea eax, [ecx + 0x77]
xor byte [ebp + ecx - 0x110], al
inc ecx
cmp ecx, 0xb
jb 0x44ff60
sub esp, 0x18
mov byte [ebp - 0x104], 0
lea eax, [ebp - 0x90]
mov dword [ebp - 0x11c], esp
mov ecx, esp
push eax
call fcn.00462ad0
sub esp, 0x18
mov byte [ebp - 4], 8
mov ecx, esp
mov dword [ebp - 0x144], esp
push 0xcb6b0c
call fcn.00462ad0
sub esp, 0x18
mov byte [ebp - 4], 9
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.00462ad0
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 7
call fcn.0044c0c0
add esp, 0x48
mov dword [ebp - 0x11c], eax
mov byte [ebp - 4], 0xa
xor ecx, ecx
mov dword [ebp - 0xe8], 0x91c1551
mov dword [ebp - 0xe4], 0x1b1a1d08
mov word [ebp - 0xe0], 0x42
mov byte [ebp - 0xde], 1
nop dword [eax + eax]
lea eax, [ecx + 0x77]
xor byte [ebp + ecx - 0xe8], al
inc ecx
cmp ecx, 9
jb 0x450000
sub esp, 0x18
mov byte [ebp - 0xde], 0
lea eax, [ebp - 0x90]
mov dword [ebp - 0x148], esp
mov ecx, esp
push eax
call fcn.00462ad0
sub esp, 0x18
mov byte [ebp - 4], 0xb
mov ecx, esp
mov dword [ebp - 0x144], esp
push 0xcb6b0c
call fcn.00462ad0
sub esp, 0x18
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0xa8]
mov ecx, esp
push eax
call fcn.00462ad0
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 0xa
call fcn.0044c0c0
add esp, 0x48
mov edi, eax
mov byte [ebp - 4], 0xd
xor ecx, ecx
mov dword [ebp - 0xdc], 0xf1a0851
mov dword [ebp - 0xd8], 0x430f1908
mov word [ebp - 0xd4], 0x100
lea eax, [ecx + 0x77]
xor byte [ebp + ecx - 0xdc], al
inc ecx
cmp ecx, 8
jb 0x450093
mov byte [ebp - 0xd3], 0
xor ecx, ecx
mov dword [ebp - 0xc8], 0x1e171b
mov byte [ebp - 0xc4], 1
nop dword [eax]
lea eax, [ecx + 0x77]
xor byte [ebp + ecx - 0xc8], al
inc ecx
cmp ecx, 3
jb 0x4500c0
xorps xmm0, xmm0
mov byte [ebp - 0xc4], 0
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x180], 0
movups xmmword [ebp - 0x190], xmm0
mov dword [ebp - 0x17c], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x450100
sub ecx, edx
lea eax, [ebp - 0xc8]
push ecx
push eax
lea ecx, [ebp - 0x190]
call fcn.00466bc0
lea edx, [ebp - 0x190]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x268]
call fcn.0044bd30
mov esi, eax
mov byte [ebp - 4], 0xf
xor ecx, ecx
mov dword [ebp - 0xc8], 0x1f090103
mov word [ebp - 0xc4], 0x46
mov byte [ebp - 0xc2], 1
lea eax, [ecx + 0x77]
xor byte [ebp + ecx - 0xc8], al
inc ecx
cmp ecx, 5
jb 0x450153
lea ecx, [ebp - 0xc8]
mov byte [ebp - 0xc2], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x450173
sub ecx, edx
lea eax, [ebp - 0xc8]
push ecx
push eax
push 0
mov ecx, esi
call fcn.004644b0
mov dword [ebp - 0x168], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x164], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x178], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x168], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x178]
call fcn.00462820
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1a8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x198], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push edi
lea eax, [ebp - 0x1a8]
mov byte [ebp - 4], 0x11
push eax
push dword [ebp - 0xc5]
lea ecx, [ebp - 0x138]
call fcn.00468290
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x138]
call fcn.00462820
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2e0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x2d0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x2e0]
push dword [ebp - 0x11c]
lea ecx, [ebp - 0x1d8]
push eax
push dword [ebp - 0xc5]
call fcn.00468290
lea eax, [ebp - 0x110]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x1d8]
call fcn.00462820
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2c8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x2b8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push dword [ebp - 0x13c]
lea eax, [ebp - 0x2c8]
mov byte [ebp - 4], 0x15
push eax
push dword [ebp - 0xc5]
lea ecx, [ebp - 0x1c0]
call fcn.00468290
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x1c0]
call fcn.00462820
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2b0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x2a0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push dword [ebp - 0x140]
lea eax, [ebp - 0x2b0]
mov byte [ebp - 4], 0x17
push eax
push dword [ebp - 0xc5]
lea ecx, [ebp - 0x1f0]
call fcn.00468290
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x1f0]
call fcn.00462820
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x118], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x108], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push dword [ebp - 0x120]
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x19
push eax
push dword [ebp - 0xc5]
lea ecx, [ebp - 0x208]
call fcn.00468290
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x208]
call fcn.00462820
mov dword [ebp - 0x150], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x160], xmm0
mov dword [ebp - 0x14c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x160], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x150], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x160]
call fcn.004628f0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xc0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xb0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x14c]
cmp ecx, 0xf
jbe 0x450486
mov edx, dword [ebp - 0x160]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x45047c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450a2f
push ecx
push edx
call fcn.005cae57
add esp, 8
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x14c], 0xf
mov byte [ebp - 0x160], 0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x1f4]
cmp ecx, 0xf
jbe 0x4504df
mov edx, dword [ebp - 0x208]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4504d5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450a2f
push ecx
push edx
call fcn.005cae57
add esp, 8
mov dword [ebp - 0x1f8], 0
mov dword [ebp - 0x1f4], 0xf
mov byte [ebp - 0x208], 0
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x104]
cmp ecx, 0xf
jbe 0x450538
mov edx, dword [ebp - 0x118]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x45052e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450a2f
push ecx
push edx
call fcn.005cae57
add esp, 8
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x1dc]
cmp ecx, 0xf
jbe 0x450576
mov edx, dword [ebp - 0x1f0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x45056c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450a2f
push ecx
push edx
call fcn.005cae57
add esp, 8
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x1dc], 0xf
mov byte [ebp - 0x1f0], 0
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x29c]
cmp ecx, 0xf
jbe 0x4505cf
mov edx, dword [ebp - 0x2b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4505c5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450a2f
push ecx
push edx
call fcn.005cae57
add esp, 8
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x1ac]
cmp ecx, 0xf
jbe 0x45060d
mov edx, dword [ebp - 0x1c0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450603
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450a2f
push ecx
push edx
call fcn.005cae57
add esp, 8
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 0xf
mov byte [ebp - 0x1c0], 0
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x2b4]
cmp ecx, 0xf
jbe 0x450666
mov edx, dword [ebp - 0x2c8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x45065c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450a2f
push ecx
push edx
call fcn.005cae57
add esp, 8
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x1c4]
cmp ecx, 0xf
jbe 0x4506a4
mov edx, dword [ebp - 0x1d8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x45069a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450a2f
push ecx
push edx
call fcn.005cae57
add esp, 8
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x1c4], 0xf
mov byte [ebp - 0x1d8], 0
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x2cc]
cmp ecx, 0xf
jbe 0x4506fd
mov edx, dword [ebp - 0x2e0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4506f3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450a2f
push ecx
push edx
call fcn.005cae57
add esp, 8
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x124]
cmp ecx, 0xf
jbe 0x45073b
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450731
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450a2f
push ecx
push edx
call fcn.005cae57
add esp, 8
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x194]
cmp ecx, 0xf
jbe 0x450794
mov edx, dword [ebp - 0x1a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x45078a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450a2f
push ecx
push edx
call fcn.005cae57
add esp, 8
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x4507d2
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4507c8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450a2f
push ecx
push edx
call fcn.005cae57
add esp, 8
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x254]
cmp ecx, 0xf
jbe 0x45082b
mov edx, dword [ebp - 0x268]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450821
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450a2f
push ecx
push edx
call fcn.005cae57
add esp, 8
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 0xf
mov byte [ebp - 0x268], 0
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x17c]
cmp ecx, 0xf
jbe 0x450884
mov edx, dword [ebp - 0x190]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x45087a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450a2f
push ecx
push edx
call fcn.005cae57
add esp, 8
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x17c], 0xf
mov byte [ebp - 0x190], 0
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x26c]
cmp ecx, 0xf
jbe 0x4508dd
mov edx, dword [ebp - 0x280]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4508d3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450a2f
push ecx
push edx
call fcn.005cae57
add esp, 8
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x26c], 0xf
mov byte [ebp - 0x280], 0
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x284]
cmp ecx, 0xf
jbe 0x450936
mov edx, dword [ebp - 0x298]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x45092c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450a2f
push ecx
push edx
call fcn.005cae57
add esp, 8
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x284], 0xf
mov byte [ebp - 0x298], 0
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x20c]
cmp ecx, 0xf
jbe 0x45098f
mov edx, dword [ebp - 0x220]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450985
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450a2f
push ecx
push edx
call fcn.005cae57
add esp, 8
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x20c], 0xf
mov byte [ebp - 0x220], 0
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x224]
cmp ecx, 0xf
jbe 0x4509e4
mov edx, dword [ebp - 0x238]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4509da
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450a2f
push ecx
push edx
call fcn.005cae57
add esp, 8
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 0xf
mov byte [ebp - 0x238], 0
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x23c]
cmp ecx, 0xf
jbe 0x450a3f
mov edx, dword [ebp - 0x250]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450a35
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x450a35
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005cae57
add esp, 8
sub esp, 0x18
mov dword [ebp - 0x240], 0
lea eax, [ebp - 0xc0]
mov dword [ebp - 0x23c], 0xf
mov ecx, esp
mov byte [ebp - 0x250], 0
push eax
call fcn.00462ad0
lea ecx, [ebp - 0x1a8]
call fcn.00450c20
mov ecx, dword [ebp - 0x194]
add esp, 0x18
cmp ecx, 0xf
jbe 0x450ab5
mov edx, dword [ebp - 0x1a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450aab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x450aab
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005cae57
add esp, 8
mov ecx, dword [ebp - 0xac]
cmp ecx, 0xf
jbe 0x450aef
mov edx, dword [ebp - 0xc0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450ae5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450b93
push ecx
push edx
call fcn.005cae57
add esp, 8
mov ecx, dword [ebp - 0x94]
cmp ecx, 0xf
jbe 0x450b25
mov edx, dword [ebp - 0xa8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450b1b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450b93
push ecx
push edx
call fcn.005cae57
add esp, 8
mov ecx, dword [ebp - 0x7c]
cmp ecx, 0xf
jbe 0x450b58
mov edx, dword [ebp - 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450b4e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x450b93
push ecx
push edx
call fcn.005cae57
add esp, 8
mov ecx, dword [ebp + 0x1c]
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
cmp ecx, 0xf
jbe 0x450ba3
mov edx, dword [ebp + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x450b99
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x450b99
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005cae57
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005caad7
mov esp, ebp
pop ebp
ret 0x18