Function at 0x421fb0
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4430d0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x190
mov eax, dword [0x45500c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x178], 1
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movq qword [eax], xmm0
mov dword [eax + 8], 0
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
push 0x3c
lea eax, [ebp - 0x124]
mov byte [ebp - 4], 2
push 0
push eax
mov dword [ebp - 0x178], 1
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x124], 0x447d24
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
push 0x40
call fcn.0043f6a2
xorps xmm0, xmm0
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
movups xmmword [ebp - 0x118], xmm0
mov dword [ebp - 0x120], eax
movups xmmword [ebp - 0x100], xmm0
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0xf
mov byte [ebp - 0x118], 0
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0xf
mov byte [ebp - 0x100], 0
mov dword [ebp - 0x124], 0x4477f0
mov dword [ebp - 4], 3
xor ecx, ecx
movaps xmm0, xmmword [0x44a0b0]
movups xmmword [ebp - 0xb4], xmm0
mov dword [ebp - 0x94], 0x6e797f68
movaps xmm0, xmmword [0x44a0c0]
movups xmmword [ebp - 0xa4], xmm0
mov dword [ebp - 0x90], 0x636875
nop
mov al, byte [ebp - 0xb4]
xor byte [ebp + ecx - 0xb3], al
inc ecx
cmp ecx, 0x26
jb 0x422120
xorps xmm0, xmm0
mov byte [ebp - 0x8d], 0
lea ecx, [ebp - 0xb3]
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x18], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x422158
sub ecx, edx
lea eax, [ebp - 0xb3]
push ecx
push eax
lea ecx, [ebp - 0x2c]
call fcn.004018f0
mov byte [ebp - 4], 4
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
lea ecx, [ebp - 0x118]
push dword [ebp - 0x1c]
cmovae eax, dword [ebp - 0x2c]
push eax
call fcn.00402b00
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x18]
cmp ecx, 0x10
jb 0x4221c7
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4221bd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x422f49
push ecx
push edx
call fcn.0043f923
add esp, 8
mov dl, 0x72
mov byte [ebp - 0x14d], 0
mov al, 0x1b
mov byte [ebp - 0x150], dl
mov cl, 0x16
mov byte [ebp - 0x14d], 0
xor al, dl
mov dword [ebp - 0x1c], 0
xor cl, dl
mov byte [ebp - 0x14f], al
mov byte [ebp - 0x14e], cl
xorps xmm0, xmm0
lea ecx, [ebp - 0x14f]
mov dword [ebp - 0x18], 0
movups xmmword [ebp - 0x2c], xmm0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x422210
sub ecx, edx
lea eax, [ebp - 0x14f]
push ecx
push eax
lea ecx, [ebp - 0x2c]
call fcn.004018f0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x120]
call fcn.004243b0
lea ecx, [ebx + 8]
cmp eax, ecx
je 0x422256
cmp dword [ebx + 0x1c], 0x10
push dword [ebx + 0x18]
cmovae ecx, dword [ebx + 8]
push ecx
mov ecx, eax
call fcn.00402b00
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x18]
cmp ecx, 0x10
jb 0x422290
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x422286
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x422286
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0043f923
add esp, 8
mov dh, 0x56
mov byte [ebp - 0x156], 0
mov cl, 0x39
mov byte [ebp - 0x15c], dh
mov dl, 0x3d
mov byte [ebp - 0x156], 0
xor cl, dh
mov dword [ebp - 0x1c], 0
mov al, 0x22
mov byte [ebp - 0x15a], cl
mov ah, 0x33
mov dword [ebp - 0x18], 0
mov ch, 0x38
xor al, dh
xor dl, dh
mov byte [ebp - 0x15b], al
xor ah, dh
mov byte [ebp - 0x159], dl
xor ch, dh
mov byte [ebp - 0x158], ah
mov byte [ebp - 0x157], ch
xorps xmm0, xmm0
lea ecx, [ebp - 0x15b]
movups xmmword [ebp - 0x2c], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4222f6
sub ecx, edx
lea eax, [ebp - 0x15b]
push ecx
push eax
lea ecx, [ebp - 0x2c]
call fcn.004018f0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x120]
call fcn.004243b0
lea ecx, [ebx + 0x20]
cmp eax, ecx
je 0x42233c
cmp dword [ebx + 0x34], 0x10
push dword [ebx + 0x30]
cmovae ecx, dword [ebx + 0x20]
push ecx
mov ecx, eax
call fcn.00402b00
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x18]
cmp ecx, 0x10
jb 0x422376
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42236c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42236c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0043f923
add esp, 8
push 0
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 7
call fcn.004263c0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x170]
xorps xmm0, xmm0
mov byte [ebp - 0x170], 0
mov edx, 0x45506c
movq qword [ebp - 0x168], xmm0
call fcn.00432c40
mov byte [ebp - 4], 9
mov dl, 0x2b
mov al, 0x48
mov byte [ebp - 0x150], dl
mov cl, al
mov byte [ebp - 0x14d], 0
xor cl, dl
mov byte [ebp - 0x14d], 0
xor al, dl
mov byte [ebp - 0x14e], cl
sub esp, 0x18
mov byte [ebp - 0x14f], al
mov edx, esp
lea ecx, [ebp - 0x14f]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x422400
sub ecx, esi
lea eax, [ebp - 0x14f]
push ecx
push eax
mov ecx, edx
call fcn.004018f0
lea ecx, [ebp - 0xd8]
call fcn.00429b20
mov edi, eax
mov al, byte [ebp - 0x170]
mov cl, byte [edi]
mov byte [edi], al
mov edx, dword [edi + 8]
mov esi, dword [edi + 0xc]
mov eax, dword [ebp - 0x168]
mov byte [ebp - 0x150], cl
mov byte [ebp - 0x170], cl
mov ecx, dword [ebp - 0x164]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
mov dword [ebp - 0x168], edx
mov dword [ebp - 0x164], esi
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x168]
push dword [ebp - 0x150]
call fcn.00425fb0
sub esp, 0x10
mov byte [ebp - 4], 8
lea eax, [ebp - 0x8c]
lea ecx, [ebp - 0xd8]
push eax
call fcn.004249b0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x124]
call fcn.004163f0
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x5c]
call fcn.0043dd60
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov esi, esp
mov dword [ebp - 0x174], esp
mov dword [ebp - 0x150], esi
mov ecx, 0x4583e0
cmp dword [0x4583f4], 8
push dword [0x4583f0]
cmovae ecx, dword [0x4583e0]
push ecx
push ecx
mov ecx, eax
call fcn.0040c110
xorps xmm0, xmm0
mov dword [ebp - 0x178], 5
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
xor ecx, ecx
mov dword [esi + 0x14], 0
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
sub esp, 0x18
mov byte [ebp - 4], 0xe
mov ecx, esp
push 0x4583bc
call fcn.00409d50
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0xd
push eax
push 0x1bb
mov dl, 1
lea ecx, [ebp - 0x74]
call fcn.00422f50
add esp, 0x38
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x48]
cmp ecx, 8
jb 0x422590
mov edx, dword [ebp - 0x5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x422586
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4225ce
push ecx
push edx
call fcn.0043f923
add esp, 8
xor eax, eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x18]
cmp ecx, 0x10
jb 0x4225de
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4225d4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4225d4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0043f923
add esp, 8
sub esp, 0x28
mov dword [ebp - 0x1c], 0
mov eax, esp
mov dword [ebp - 0x18], 0xf
lea edx, [ebp - 0x74]
mov byte [ebp - 0x2c], 0
lea ecx, [ebp - 0xc8]
push 0
push 1
mov dword [eax + 0x24], 0
call fcn.00427210
add esp, 0x18
mov byte [ebp - 4], 0x12
mov ecx, esp
xorps xmm0, xmm0
push 6
movups xmmword [ecx], xmm0
push str.status
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.004018f0
lea ecx, [ebp - 0xc8]
call fcn.00429b20
lea ecx, [ebp - 0x44]
push ecx
mov ecx, eax
call fcn.00427480
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x44]
cmp dword [ebp - 0x30], 0x10
mov edi, dword [ebp - 0x44]
mov esi, dword [ebp - 0x34]
setae byte [ebp - 0x151]
cmovae ecx, edi
cmp esi, 5
jne 0x422891
mov edx, str.error
sub esi, 4
jb 0x422691
nop dword [eax + eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x422696
add ecx, 4
add edx, 4
sub esi, 4
jae 0x422680
cmp esi, 0xfffffffc
je 0x4226ca
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4226c3
cmp esi, 0xfffffffd
je 0x4226ca
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4226c3
cmp esi, 0xfffffffe
je 0x4226ca
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4226c3
cmp esi, 0xffffffff
je 0x4226ca
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x4226ca
sbb eax, eax
or eax, 1
jmp 0x4226cc
xor eax, eax
test eax, eax
jne 0x422891
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x178], eax
cmp byte [ebp - 0x151], al
je 0x422712
mov ecx, dword [ebp - 0x30]
mov eax, edi
inc ecx
cmp ecx, 0x1000
jb 0x422708
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x422f49
push ecx
push edi
call fcn.0043f923
add esp, 8
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xc0]
push dword [ebp - 0xc8]
call fcn.00425fb0
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x60]
cmp ecx, 0x10
jb 0x422771
mov edx, dword [ebp - 0x74]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x422767
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x422f49
push ecx
push edx
call fcn.0043f923
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp ecx, 0x10
jb 0x4227be
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4227b4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x422f49
push ecx
push edx
call fcn.0043f923
add esp, 8
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xd0]
push dword [ebp - 0xd8]
call fcn.00425fb0
lea ecx, [ebp - 0x124]
call fcn.00416650
mov ecx, dword [ebx + 0x1c]
cmp ecx, 0x10
jb 0x422827
mov edx, dword [ebx + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42281d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x422f49
push ecx
push edx
call fcn.0043f923
add esp, 8
mov ecx, dword [ebx + 0x34]
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0xf
mov byte [ebx + 8], 0
cmp ecx, 0x10
jb 0x42286d
mov edx, dword [ebx + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x422863
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x422f49
push ecx
push edx
call fcn.0043f923
add esp, 8
mov eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0043f497
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov cl, 6
mov byte [ebp - 0x16c], 0x63
mov al, 0x11
mov byte [ebp - 0x152], cl
xor cl, byte [ebp - 0x16c]
mov dh, al
xor al, byte [ebp - 0x16c]
mov dl, 0x10
mov byte [ebp - 0x16b], al
mov ch, 0x16
mov byte [ebp - 0x16a], cl
mov ah, 0xc
mov cl, byte [ebp - 0x16c]
xorps xmm0, xmm0
mov byte [ebp - 0x151], 0
xor dl, cl
mov al, byte [ebp - 0x151]
xor dh, cl
xor al, cl
mov byte [ebp - 0x169], dl
mov byte [ebp - 0x165], al
xor ah, cl
mov al, byte [ebp - 0x152]
xor ch, cl
xor al, cl
mov byte [ebp - 0x166], dh
sub esp, 0x18
mov byte [ebp - 0x167], ch
mov edx, esp
mov byte [ebp - 0x163], 0
lea ecx, [ebp - 0x16b]
mov byte [ebp - 0x168], ah
mov byte [ebp - 0x164], al
lea esi, [ecx + 1]
mov byte [ebp - 0x163], 0
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x422940
sub ecx, esi
lea eax, [ebp - 0x16b]
push ecx
push eax
mov ecx, edx
call fcn.004018f0
lea ecx, [ebp - 0xc8]
call fcn.00429b20
mov esi, eax
xorps xmm0, xmm0
lea eax, [ebp - 0xe8]
mov ecx, esi
push eax
movups xmmword [ebp - 0xe8], xmm0
call fcn.004248f0
lea eax, [ebp - 0x134]
mov ecx, esi
push eax
movups xmmword [ebp - 0x134], xmm0
call fcn.00424840
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00427820
test al, al
je 0x422db2
nop dword [eax]
lea ecx, [ebp - 0xe8]
call fcn.00424720
mov esi, eax
mov byte [ebp - 0x14d], 0
mov dl, 0x3e
mov byte [ebp - 0x14d], 0
mov al, 0x57
mov byte [ebp - 0x150], dl
xor al, dl
mov cl, 0x5a
xor cl, dl
mov byte [ebp - 0x14f], al
lea eax, [ebp - 0x14f]
mov byte [ebp - 0x14e], cl
push eax
mov ecx, esi
call fcn.00427580
mov ecx, eax
call fcn.00427340
mov dword [ebp - 0x174], eax
mov cl, 0x18
mov al, 0x76
mov byte [ebp - 0x17b], 0
mov dl, 0x17
mov byte [ebp - 0x180], al
mov ch, 0x1b
mov byte [ebp - 0x17b], 0
mov dh, 0x13
xor cl, al
xor ch, al
mov byte [ebp - 0x17f], cl
xor dl, al
mov byte [ebp - 0x17d], ch
xor dh, al
mov byte [ebp - 0x17e], dl
lea eax, [ebp - 0x17f]
mov byte [ebp - 0x17c], dh
push eax
mov ecx, esi
call fcn.00427580
lea ecx, [ebp - 0xa4]
push ecx
mov ecx, eax
call fcn.00427480
mov byte [ebp - 4], 0x16
mov al, 0x13
mov byte [ebp - 0x16c], 0x65
xor cl, cl
xor al, byte [ebp - 0x16c]
mov dl, 0x17
mov byte [ebp - 0x16b], al
mov ah, 0x16
mov al, byte [ebp - 0x16c]
mov ch, 0xc
xor ch, al
mov byte [ebp - 0x164], cl
xor cl, al
mov byte [ebp - 0x152], 0xb
xor dl, al
mov byte [ebp - 0x16a], cl
xor ah, al
mov byte [ebp - 0x167], ch
mov dh, 0xa
mov byte [ebp - 0x168], ah
xor dh, al
mov byte [ebp - 0x169], dl
mov al, byte [ebp - 0x152]
mov ecx, esi
xor al, byte [ebp - 0x16c]
mov byte [ebp - 0x165], al
lea eax, [ebp - 0x16b]
push eax
mov byte [ebp - 0x166], dh
mov byte [ebp - 0x164], 0
call fcn.00427580
lea ecx, [ebp - 0x5c]
push ecx
mov ecx, eax
call fcn.00427480
mov ch, 0x75
mov byte [ebp - 4], 0x17
mov cl, 0x14
mov byte [ebp - 0x15c], ch
mov ah, cl
mov byte [ebp - 0x157], 0
mov al, 0x11
mov byte [ebp - 0x157], 0
xor al, ch
xor ah, ch
xor cl, ch
mov byte [ebp - 0x15b], al
mov dl, 1
mov byte [ebp - 0x158], ah
xor dl, ch
mov byte [ebp - 0x15a], cl
lea eax, [ebp - 0x15b]
mov byte [ebp - 0x159], dl
push eax
mov ecx, esi
call fcn.00427580
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, eax
call fcn.00427480
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x1c]
jb 0x422b5e
mov ecx, dword [ebp - 0x2c]
add eax, ecx
jmp 0x422b63
add eax, ecx
lea ecx, [ebp - 0x2c]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x14c]
call fcn.00427ce0
push 0x58
mov byte [ebp - 4], 0x19
call fcn.0043f6a2
mov esi, eax
mov dword [ebp - 0x194], esi
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x14c]
sub esp, 0x14
lea edi, [esi + 0xc]
xorps xmm0, xmm0
mov dword [ebp - 0x198], esp
movq qword [esi], xmm0
mov ecx, esp
mov dword [esi + 8], 0
push eax
mov dword [esi + 4], 1
mov dword [esi + 8], 1
mov dword [esi], vtable.std::_Ref_count_obj2_class_McRes::BlackDirectory_.0
call fcn.00409d50
sub esp, 0x18
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x19c], esp
mov ecx, esp
push eax
call fcn.0040a130
sub esp, 0x18
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0xa4]
mov ecx, esp
push eax
call fcn.0040a130
push dword [ebp - 0x174]
mov ecx, edi
mov byte [ebp - 4], 0x1a
call fcn.00437aa0
or dword [ebp - 0x178], 2
xorps xmm0, xmm0
movlpd qword [ebp - 0x18c], xmm0
mov dword [ebp - 0x18c], edi
mov dword [ebp - 0x188], esi
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x184]
mov ecx, dword [eax + 4]
cmp ecx, dword [eax + 8]
je 0x422c3d
mov dword [ecx], edi
mov dword [ecx + 4], esi
add dword [eax + 4], 8
jmp 0x422c77
lea edx, [ebp - 0x18c]
push edx
push ecx
mov ecx, eax
call fcn.0042c5a0
mov esi, dword [ebp - 0x188]
test esi, esi
je 0x422c77
or eax, 0xffffffff
lock xadd dword [esi + 4], eax
jne 0x422c77
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
jne 0x422c77
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x138]
cmp ecx, 8
jb 0x422cbb
mov edx, dword [ebp - 0x14c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x422cb1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x422280
push ecx
push edx
call fcn.0043f923
add esp, 8
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x18]
cmp ecx, 0x10
jb 0x422cf3
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x422ce9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x422280
push ecx
push edx
call fcn.0043f923
add esp, 8
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
cmp ecx, 0x10
jb 0x422d3d
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x422d33
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x422280
push ecx
push edx
call fcn.0043f923
add esp, 8
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp ecx, 0x10
jb 0x422d8d
mov edx, dword [ebp - 0xa4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x422d83
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x422280
push ecx
push edx
call fcn.0043f923
add esp, 8
lea ecx, [ebp - 0xe8]
call fcn.00424680
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00427820
test al, al
jne 0x4229b0
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x178], 0
cmp ecx, 0x10
jb 0x422df4
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x422dea
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x422f49
push ecx
push edx
call fcn.0043f923
add esp, 8
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xc0]
push dword [ebp - 0xc8]
call fcn.00425fb0
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x60]
cmp ecx, 0x10
jb 0x422e53
mov edx, dword [ebp - 0x74]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x422e49
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x422f49
push ecx
push edx
call fcn.0043f923
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp ecx, 0x10
jb 0x422ea0
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x422e96
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x422f49
push ecx
push edx
call fcn.0043f923
add esp, 8
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xd0]
push dword [ebp - 0xd8]
call fcn.00425fb0
lea ecx, [ebp - 0x124]
call fcn.00416650
mov ecx, dword [ebx + 0x1c]
cmp ecx, 0x10
jb 0x422f05
mov edx, dword [ebx + 8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x422efb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x422f49
push ecx
push edx
call fcn.0043f923
add esp, 8
mov ecx, dword [ebx + 0x34]
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0xf
mov byte [ebx + 8], 0
cmp ecx, 0x10
jb 0x42286d
mov edx, dword [ebx + 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x422863
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x422863
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3