Function at 0x406f8f
Capabilities:
Execute command
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x471505
mov eax, dword fs:[0]
push eax
push ecx
push ebx
sub esp, 0x6a0
mov eax, dword [0x48d030]
xor eax, ebp
mov dword [ebp - 0x24], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xorps xmm0, xmm0
mov dword [ebp - 0x5ac], 0
movups xmmword [ebp - 0x5bc], xmm0
mov dword [ebp - 0x5a8], 0xf
mov byte [ebp - 0x5bc], 0
mov dword [ebp - 4], 0
call fcn.00424150
lea ecx, [ebp - 0x664]
mov esi, eax
call fcn.004043a0
cmp dword [eax + 0x14], 0x10
jb 0x4066db
mov eax, dword [eax]
push eax
push str.v202w.omarraeia.com
lea eax, [ebp - 0x128]
push str.https:___s_api_desktopStartup__s
push eax
call fcn.00401160
mov ecx, dword [ebp - 0x650]
add esp, 0x10
cmp ecx, 0x10
jb 0x406731
mov edx, dword [ebp - 0x664]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406727
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x406727
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047012d
add esp, 8
lea eax, [ebp - 0x128]
push eax
push 0x2712
push esi
call fcn.004278a0
lea eax, [ebp - 0x5bc]
push eax
push 0x2711
push esi
call fcn.004278a0
push 0x405a40
push 0x4e2b
push esi
call fcn.004278a0
push esi
call fcn.00424190
lea eax, [ebp - 0x548]
mov dword [ebp - 0x548], 0
push eax
push 0x200002
push esi
call fcn.00424130
push esi
call fcn.00424110
add esp, 0x38
call fcn.004242d0
cmp dword [ebp - 0x548], 0xc8
je 0x4067ce
push 0
push 0x480274
push str.Couldnt_retrive_config
push dword [0x491b34]
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 0
call edi
mov esi, dword [sym.imp.KERNEL32.dll_TerminateProcess]
push eax
call esi
jmp 0x4067da
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, dword [sym.imp.KERNEL32.dll_TerminateProcess]
cmp dword [ebp - 0x5ac], 0x14
jae 0x406802
push 0
push 0x480274
push str.Something_Went_Wrong_0x0001_
push dword [0x491b34]
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call edi
push eax
call esi
push 0
push 0
push 0xc
call dword [sym.imp.libcrypto_1_1.dll_OPENSSL_init_crypto]
movups xmm0, xmmword [0x482f88]
mov al, byte [0x482fa8]
xor edx, edx
add esp, 0xc
mov byte [ebp - 0x584], al
cmp dword [0x4919b0], 2
movups xmmword [ebp - 0x5a4], xmm0
mov dword [ebp - 0x52c], edx
movups xmm0, xmmword [0x482f98]
movups xmmword [ebp - 0x594], xmm0
jl 0x4069a2
movaps xmm0, xmmword [str.3333333333333333ntrolSetServiceVirtualBox_Sharewine_get_unix_fiSYSTEMCurrentCo]
mov eax, 5
movaps xmm4, xmmword [0x484060]
movaps xmm3, xmmword [0x484140]
movaps xmm6, xmmword [str.9999]
movd xmm5, eax
mov eax, 0x1f
movaps xmmword [ebp - 0x570], xmm0
mov ecx, dword [ebp - 0x570]
movd xmm7, eax
nop dword [eax + eax]
movd xmm0, edx
lea eax, [edx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x4840d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [ebp + edx - 0x5a4]
xorps xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [ebp + edx - 0x5a4], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckldq xmm1, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
andps xmm1, xmmword [0x4840d0]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [ebp + edx - 0x5a0]
xorps xmm1, xmm0
movd dword [ebp + edx - 0x5a0], xmm1
add edx, 8
cmp edx, 0x20
jl 0x406890
mov dword [ebp - 0x52c], edx
cmp edx, 0x21
jge 0x4069df
mov eax, 0x8fb823ef
imul edx
add edx, dword [ebp - 0x52c]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x52c]
movsx eax, al
mov cl, dl
imul eax, eax, 0x39
sub cl, al
add cl, 0x33
xor byte [ebp + edx - 0x5a4], cl
inc edx
mov dword [ebp - 0x52c], edx
cmp edx, 0x21
jl 0x4069a2
xorps xmm0, xmm0
mov dword [ebp - 0x534], 0
lea ecx, [ebp - 0x5a4]
mov dword [ebp - 0x530], 0
movups xmmword [ebp - 0x544], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406a06
sub ecx, edx
lea eax, [ebp - 0x5a4]
push ecx
push eax
lea ecx, [ebp - 0x544]
call fcn.00417640
mov byte [ebp - 4], 1
lea edx, [ebp - 0x544]
cmp dword [ebp - 0x530], 0x10
xorps xmm0, xmm0
movups xmmword [ebp - 0x5ec], xmm0
cmovae edx, dword [ebp - 0x544]
mov ecx, edx
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5d8], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406a60
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x5ec]
call fcn.00417640
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x530]
cmp ecx, 0x10
jb 0x406ab4
mov edx, dword [ebp - 0x544]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406aaa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4075f3
push ecx
push edx
call fcn.0047012d
add esp, 8
push 0x10
xorps xmm0, xmm0
mov dword [ebp - 0x5c4], 0
push str.1164887942137711
lea ecx, [ebp - 0x5d4]
mov dword [ebp - 0x5c0], 0
movups xmmword [ebp - 0x5d4], xmm0
call fcn.00417640
mov byte [ebp - 4], 4
lea edx, [ebp - 0x5bc]
cmp dword [ebp - 0x5a8], 0x10
xorps xmm0, xmm0
movups xmmword [ebp - 0x570], xmm0
cmovae edx, dword [ebp - 0x5bc]
mov ecx, edx
mov dword [ebp - 0x560], 0
mov dword [ebp - 0x55c], 0
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406b20
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x570]
call fcn.00417640
lea eax, [ebp - 0x5d4]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x5ec]
push eax
lea edx, [ebp - 0x570]
lea ecx, [ebp - 0x694]
call fcn.00405570
add esp, 8
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x55c]
cmp ecx, 0x10
jb 0x406b9a
mov edx, dword [ebp - 0x570]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406b90
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4075f3
push ecx
push edx
call fcn.0047012d
add esp, 8
push 0
push 1
sub esp, 0x28
mov byte [ebp - 4], 8
mov eax, esp
lea edx, [ebp - 0x694]
lea ecx, [ebp - 0x580]
mov dword [eax + 0x24], 0
call fcn.00416580
add esp, 0x30
push str.banStatus
lea ecx, [ebp - 0x580]
mov byte [ebp - 4], 9
call fcn.004166a0
push str.status
mov ecx, eax
call fcn.004166a0
lea ecx, [ebp - 0x64c]
push ecx
mov ecx, eax
call fcn.00416810
push str.banStatus
lea ecx, [ebp - 0x580]
mov byte [ebp - 4], 0xa
call fcn.004166a0
push str.HWID
mov ecx, eax
call fcn.004166a0
lea ecx, [ebp - 0x664]
push ecx
mov ecx, eax
call fcn.00416810
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x64c]
cmp dword [ebp - 0x638], 0x10
mov ecx, str.ThisUserIsBanned
cmovae eax, dword [ebp - 0x64c]
nop dword [eax + eax]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x406c60
test dl, dl
je 0x406c5c
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x406c60
add ecx, 2
add eax, 2
test dl, dl
jne 0x406c40
xor eax, eax
jmp 0x406c65
sbb eax, eax
or eax, 1
test eax, eax
jne 0x406d11
lea ecx, [ebp - 0x570]
call fcn.004043a0
cmp dword [eax + 0x14], 0x10
jb 0x406c80
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x528]
push str.You_have_been_banned__1___nHWID_:__s__n
push eax
call fcn.00401160
mov ecx, dword [ebp - 0x55c]
add esp, 0xc
cmp ecx, 0x10
jb 0x406cd1
mov edx, dword [ebp - 0x570]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406cc7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x406cc7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047012d
add esp, 8
push 0
push 0x480274
lea eax, [ebp - 0x528]
mov dword [ebp - 0x560], 0
push eax
push dword [0x491b34]
mov dword [ebp - 0x55c], 0xf
mov byte [ebp - 0x570], 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call edi
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push str.harmfulProcessesList
lea ecx, [ebp - 0x580]
call fcn.004166a0
mov esi, eax
xorps xmm0, xmm0
lea eax, [ebp - 0x53c]
mov ecx, esi
push eax
movups xmmword [ebp - 0x53c], xmm0
call fcn.00410de0
lea eax, [ebp - 0x568]
mov ecx, esi
push eax
movups xmmword [ebp - 0x568], xmm0
call fcn.00410d30
lea eax, [ebp - 0x568]
push eax
lea ecx, [ebp - 0x53c]
call fcn.004168f0
test al, al
je 0x406e2f
lea ecx, [ebp - 0x53c]
call fcn.00410c20
lea ecx, [ebp - 0x59c]
push ecx
mov ecx, eax
call fcn.00416810
mov byte [ebp - 4], 0xc
mov ecx, dword [0x491c40]
cmp ecx, dword [0x491c44]
je 0x406dd3
xorps xmm0, xmm0
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ecx + 0x10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
add dword [0x491c40], 0x18
jmp 0x406ddf
push eax
push ecx
mov ecx, 0x491c3c
call fcn.0041c390
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x588]
cmp ecx, 0x10
jb 0x406e1f
mov edx, dword [ebp - 0x59c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406e15
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x406e15
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047012d
add esp, 8
lea ecx, [ebp - 0x53c]
call fcn.00410b80
jmp 0x406d50
push str.screenRecordProcessesList
lea ecx, [ebp - 0x580]
call fcn.004166a0
mov esi, eax
xorps xmm0, xmm0
lea eax, [ebp - 0x53c]
mov ecx, esi
push eax
movups xmmword [ebp - 0x53c], xmm0
call fcn.00410de0
lea eax, [ebp - 0x568]
mov ecx, esi
push eax
movups xmmword [ebp - 0x568], xmm0
call fcn.00410d30
nop
lea eax, [ebp - 0x568]
push eax
lea ecx, [ebp - 0x53c]
call fcn.004168f0
test al, al
je 0x406f9a
lea ecx, [ebp - 0x53c]
call fcn.00410c20
lea ecx, [ebp - 0x59c]
push ecx
mov ecx, eax
call fcn.00416810
mov byte [ebp - 4], 0xd
mov ecx, dword [0x491c4c]
cmp ecx, dword [0x491c50]
je 0x406ef3
xorps xmm0, xmm0
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ecx + 0x10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
add dword [0x491c4c], 0x18
jmp 0x406eff
push eax
push ecx
mov ecx, 0x491c48
call fcn.0041c390
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x588]
cmp ecx, 0x10
jb 0x406f3f
mov edx, dword [ebp - 0x59c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406f35
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x406f35
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047012d
add esp, 8
mov eax, dword [ebp - 0x53c]
movzx eax, byte [eax]
cmp eax, 9
ja case.0x406f54.0
movzx eax, byte [eax + 0x407630]
jmp dword [eax*4 + 0x407624]
mov eax, dword [ebp - 0x538]
lea ecx, [ebp - 0x52c]
mov dword [ebp - 0x52c], eax
call fcn.00415a80
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x538], eax
jmp 0x406e70
add dword [ebp - 0x534], 0x10
jmp 0x406e70
inc dword [ebp - 0x530]
jmp 0x406e70
push 0x50
call dword [sym.imp.USER32.dll_GetSystemMetrics]
cmp eax, 1
jle 0x407073
push str.preventMultipleMonitors
lea ecx, [ebp - 0x580]
call fcn.004166a0
lea ecx, [ebp - 0x6ac]
push ecx
mov ecx, eax
call fcn.00416810
mov edi, dword [ebp - 0x698]
lea eax, [ebp - 0x6ac]
mov esi, dword [ebp - 0x6ac]
cmp edi, 0x10
mov ecx, str.enabled
cmovae eax, esi
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x407006
test dl, dl
je 0x407002
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x407006
add ecx, 2
add eax, 2
test dl, dl
jne 0x406fe6
xor eax, eax
jmp 0x40700b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x407041
push eax
push str.Error
push str.Multiple_Monitors_Detected___Only_one_is_Accepted__
push dword [0x491b34]
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov edi, dword [ebp - 0x698]
mov esi, dword [ebp - 0x6ac]
cmp edi, 0x10
jb 0x407073
lea ecx, [edi + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x407069
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x407069
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.0047012d
add esp, 8
push str.latestVersion
lea ecx, [ebp - 0x580]
call fcn.004166a0
lea ecx, [ebp - 0x634]
push ecx
mov ecx, eax
call fcn.00416810
push str.killHarmfulProcesses
lea ecx, [ebp - 0x580]
mov byte [ebp - 4], 0xe
call fcn.004166a0
lea ecx, [ebp - 0x61c]
push ecx
mov ecx, eax
call fcn.00416810
push str.killscreenRecordingProcesses
lea ecx, [ebp - 0x580]
mov byte [ebp - 4], 0xf
call fcn.004166a0
lea ecx, [ebp - 0x604]
push ecx
mov ecx, eax
call fcn.00416810
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x604]
cmp dword [ebp - 0x5f0], 0x10
mov ecx, str.enabled
cmovae eax, dword [ebp - 0x604]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x407112
test dl, dl
je 0x40710e
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x407112
add ecx, 2
add eax, 2
test dl, dl
jne 0x4070f2
xor eax, eax
jmp 0x407117
sbb eax, eax
or eax, 1
test eax, eax
mov ecx, str.enabled
lea eax, [ebp - 0x61c]
sete byte [0x491c54]
cmp dword [ebp - 0x608], 0x10
cmovae eax, dword [ebp - 0x61c]
nop dword [eax]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x407160
test dl, dl
je 0x40715c
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x407160
add ecx, 2
add eax, 2
test dl, dl
jne 0x407140
xor eax, eax
jmp 0x407165
sbb eax, eax
or eax, 1
test eax, eax
lea ecx, [ebp - 0x580]
push str.preventProxyUsage
sete byte [0x48d064]
call fcn.004166a0
lea ecx, [ebp - 0x67c]
push ecx
mov ecx, eax
call fcn.00416810
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x67c]
mov edi, dword [ebp - 0x668]
mov ecx, str.enabled
mov esi, dword [ebp - 0x67c]
cmp edi, 0x10
cmovae eax, esi
nop dword [eax]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x4071d0
test dl, dl
je 0x4071cc
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x4071d0
add ecx, 2
add eax, 2
test dl, dl
jne 0x4071b0
xor eax, eax
jmp 0x4071d5
sbb eax, eax
or eax, 1
test eax, eax
mov ecx, str.1.0.3
lea eax, [ebp - 0x634]
sete byte [0x491c55]
cmp dword [ebp - 0x620], 0x10
cmovae eax, dword [ebp - 0x634]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x407217
test dl, dl
je 0x407213
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x407217
add ecx, 2
add eax, 2
test dl, dl
jne 0x4071f7
xor eax, eax
jmp 0x40721c
sbb eax, eax
or eax, 1
test eax, eax
je 0x40728c
push str.downloadUrl
lea ecx, [ebp - 0x580]
call fcn.004166a0
lea ecx, [ebp - 0x59c]
push ecx
mov ecx, eax
call fcn.00416810
push 0
push str.New_Version__
push str.New_version_available___nPress_Ok_to_be_redirected_to_download_link.
mov byte [ebp - 4], 0x12
push dword [0x491b34]
call dword [sym.imp.USER32.dll_MessageBoxA]
lea eax, [ebp - 0x59c]
push eax
lea ecx, [ebp - 0x570]
call fcn.004169e0
add esp, 4
lea ecx, [ebp - 0x570]
call fcn.00412980
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push 0xffffffffffffffff
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
cmp edi, 0x10
jb 0x4072bc
lea ecx, [edi + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x4072b2
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407453
push ecx
push esi
call fcn.0047012d
add esp, 8
mov ecx, dword [ebp - 0x5f0]
mov dword [ebp - 0x66c], 0
mov dword [ebp - 0x668], 0xf
mov byte [ebp - 0x67c], 0
cmp ecx, 0x10
jb 0x407311
mov edx, dword [ebp - 0x604]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407307
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407453
push ecx
push edx
call fcn.0047012d
add esp, 8
mov ecx, dword [ebp - 0x608]
mov dword [ebp - 0x5f4], 0
mov dword [ebp - 0x5f0], 0xf
mov byte [ebp - 0x604], 0
cmp ecx, 0x10
jb 0x407366
mov edx, dword [ebp - 0x61c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40735c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407453
push ecx
push edx
call fcn.0047012d
add esp, 8
mov ecx, dword [ebp - 0x620]
mov dword [ebp - 0x60c], 0
mov dword [ebp - 0x608], 0xf
mov byte [ebp - 0x61c], 0
cmp ecx, 0x10
jb 0x4073bb
mov edx, dword [ebp - 0x634]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4073b1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407453
push ecx
push edx
call fcn.0047012d
add esp, 8
mov ecx, dword [ebp - 0x650]
mov dword [ebp - 0x624], 0
mov dword [ebp - 0x620], 0xf
mov byte [ebp - 0x634], 0
cmp ecx, 0x10
jb 0x40740c
mov edx, dword [ebp - 0x664]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407402
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407453
push ecx
push edx
call fcn.0047012d
add esp, 8
mov ecx, dword [ebp - 0x638]
mov dword [ebp - 0x654], 0
mov dword [ebp - 0x650], 0xf
mov byte [ebp - 0x664], 0
cmp ecx, 0x10
jb 0x407463
mov edx, dword [ebp - 0x64c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407459
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x407459
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047012d
add esp, 8
lea ecx, [ebp - 0x580]
mov dword [ebp - 0x63c], 0
mov dword [ebp - 0x638], 0xf
mov byte [ebp - 0x64c], 0
call fcn.00411180
jmp 0x4074cc
mov ecx, dword [ebp - 0x680]
cmp ecx, 0x10
jb 0x407506
mov edx, dword [ebp - 0x694]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4074fc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4075f3
push ecx
push edx
call fcn.0047012d
add esp, 8
mov ecx, dword [ebp - 0x5c0]
mov dword [ebp - 0x684], 0
mov dword [ebp - 0x680], 0xf
mov byte [ebp - 0x694], 0
cmp ecx, 0x10
jb 0x40755b
mov edx, dword [ebp - 0x5d4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407551
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4075f3
push ecx
push edx
call fcn.0047012d
add esp, 8
mov ecx, dword [ebp - 0x5d8]
mov dword [ebp - 0x5c4], 0
mov dword [ebp - 0x5c0], 0xf
mov byte [ebp - 0x5d4], 0
cmp ecx, 0x10
jb 0x4075ac
mov edx, dword [ebp - 0x5ec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4075a2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4075f3
push ecx
push edx
call fcn.0047012d
add esp, 8
mov ecx, dword [ebp - 0x5a8]
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x5d8], 0xf
mov byte [ebp - 0x5ec], 0
cmp ecx, 0x10
jb 0x407603
mov edx, dword [ebp - 0x5bc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4075f9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4075f9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0047012d
add esp, 8
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.0046fb30
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret