Function at 0x448c60
Capabilities:
Get system firmware table

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c8d2b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x228
push ebx
push esi
push edi
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x184]
push 0xc73878
call fcn.00450240
push 0xc73890
lea ecx, [ebp - 0x16c]
mov dword [ebp - 4], 0
call fcn.00450240
mov byte [ebp - 4], 1
mov ecx, 0xc73878
cmp dword [0xc7388c], 0xf
mov eax, dword [0xc73888]
jbe 0x448cd0
mov ecx, dword [0xc73878]
lea esi, [ecx + eax]
lea edi, [ecx + eax]
jmp 0x448cdf
mov esi, 0xc73878
lea edi, [ecx + eax]
add esi, eax
mov ecx, 0xc73878
push 0
push esi
push ecx
call fcn.004c64e0
cmp eax, esi
je 0x448d01
lea ecx, [eax + 1]
cmp ecx, esi
je 0x448d01
mov dl, byte [ecx]
test dl, dl
je 0x448cfc
mov byte [eax], dl
inc eax
inc ecx
cmp ecx, esi
jne 0x448cf3
push edi
push eax
lea eax, [ebp - 0x10]
mov ecx, 0xc73878
push eax
call fcn.00450090
cmp dword [0xc738a4], 0xf
mov ecx, 0xc73890
mov eax, dword [0xc738a0]
jbe 0x448d32
mov ecx, dword [0xc73890]
lea esi, [ecx + eax]
lea edi, [ecx + eax]
jmp 0x448d41
mov esi, 0xc73890
lea edi, [ecx + eax]
add esi, eax
mov ecx, 0xc73890
push 0
push esi
push ecx
call fcn.004c64e0
cmp eax, esi
je 0x448d63
lea ecx, [eax + 1]
cmp ecx, esi
je 0x448d63
mov dl, byte [ecx]
test dl, dl
je 0x448d5e
mov byte [eax], dl
inc eax
inc ecx
cmp ecx, esi
jne 0x448d55
push edi
push eax
lea eax, [ebp - 0x10]
mov ecx, 0xc73890
push eax
call fcn.00450090
push 0xc73878
lea ecx, [ebp - 0xd0]
call fcn.00450240
push 0xc73890
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 2
call fcn.00450240
push 0
push 0
push 0
xorps xmm0, xmm0
mov byte [ebp - 4], 3
push 0x52534d42
movlpd qword [ebp - 0x30], xmm0
call dword [sym.imp.KERNEL32.dll_GetSystemFirmwareTable]
mov esi, eax
push esi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edi, eax
test edi, edi
je 0x44983e
push esi
push edi
push 0
push 0x52534d42
call dword [sym.imp.KERNEL32.dll_GetSystemFirmwareTable]
cmp eax, esi
jne 0x449848
add edi, 8
cmp byte [edi], 2
je 0x448e16
nop
movzx eax, byte [edi + 1]
add edi, eax
je 0x448e16
mov eax, edi
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x448e00
sub eax, edx
inc edi
add edi, eax
cmp byte [edi], cl
jne 0x448df8
inc edi
cmp byte [edi], 2
jne 0x448df0
mov cl, byte [edi + 7]
movzx eax, byte [edi + 1]
movzx edx, cl
add edi, eax
cmp edx, 1
jbe 0x448e41
dec edx
mov ecx, edi
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x448e30
sub ecx, esi
inc edi
add edi, ecx
sub edx, 1
jne 0x448e28
mov ecx, edi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x448e46
sub ecx, edx
mov eax, 0
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x38], eax
je 0x448e9a
mov esi, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], ecx
nop dword [eax + eax]
movzx eax, byte [eax + edi]
shld esi, ecx, 5
cdq
shl ecx, 5
sub ecx, dword [ebp - 0x2c]
sbb esi, dword [ebp - 0x34]
add ecx, eax
mov eax, dword [ebp - 0x38]
adc esi, edx
mov dword [ebp - 0x2c], ecx
inc eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], eax
cmp eax, dword [ebp - 0x10]
jb 0x448e70
jmp 0x448ea6
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
mov eax, 1
lea edi, [ebp - 0x20]
xor ecx, ecx
push ebx
cpuid
mov esi, ebx
pop ebx
mov dword [edi], eax
mov dword [edi + 4], esi
mov dword [edi + 8], ecx
mov dword [edi + 0xc], edx
mov eax, dword [ebp - 0x1c]
and eax, 0xffffff
add eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
cdq
mov edi, eax
mov esi, edx
shld esi, edi, 5
push ecx
shl edi, 5
lea ecx, [ebp - 0x234]
sub edi, eax
sbb esi, edx
add edi, dword [ebp - 0x2c]
adc esi, dword [ebp - 0x34]
call fcn.0044f130
push 0x4436e0
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 4
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base_____cdecl___class_std::ios_base___]
push esi
push edi
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64__]
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x234]
call fcn.0044f050
mov eax, dword [ebp - 0x234]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0x234]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x238], eax
lea ecx, [ebp - 0x21c]
call fcn.0044fd10
lea ecx, [ebp - 0x214]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x1cc]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 5
push eax
mov edx, str.Username
lea ecx, [ebp - 0x100]
call fcn.004533f0
add esp, 4
mov edi, eax
mov byte [ebp - 4], 6
mov edx, dword [edi + 0x14]
mov eax, edx
mov ecx, dword [edi + 0x10]
sub eax, ecx
cmp eax, 0xa
jb 0x448fca
lea eax, [ecx + 0xa]
mov dword [edi + 0x10], eax
mov eax, edi
cmp edx, 0xf
jbe 0x448fb1
mov eax, dword [edi]
push 0xa
lea esi, [eax + ecx]
push str.Password
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 0xa], 0
jmp 0x448fdf
push 0xa
push str.Password
push dword [ebp - 0x10]
mov ecx, edi
push 0xa
call fcn.004553a0
mov edi, eax
mov dword [ebp - 0x44], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x54], xmm0
mov dword [ebp - 0x40], 0
movups xmm0, xmmword [edi]
movups xmmword [ebp - 0x54], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x44], xmm0
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], 0
mov byte [edi], 0
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x54]
call fcn.00450180
mov dword [ebp - 0x18], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x18], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 6
push str.HWID
cmp eax, 6
jb 0x44909e
cmp edx, 0xf
lea esi, [ebp - 0x28]
lea eax, [ecx + 6]
cmova esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esi + 6], 0
lea eax, [ebp - 0x28]
jmp 0x4490ab
push dword [ebp - 0x10]
lea ecx, [ebp - 0x28]
push 6
call fcn.004553a0
mov dword [ebp - 0x78], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x74], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x88], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x78], xmm0
mov dword [eax + 0x14], 0xf
mov dword [eax + 0x10], 0
mov byte [eax], 0
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x88]
call fcn.00450180
xorps xmm0, xmm0
mov dword [ebp - 0x90], 0
movups xmmword [ebp - 0xa0], xmm0
mov dword [ebp - 0x8c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xa0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x90], xmm0
mov byte [ebp - 4], 0xb
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp - 0x74]
cmp ecx, 0xf
jbe 0x44917f
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449175
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449254
push ecx
push edx
call fcn.004c6df9
add esp, 8
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x4491cc
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4491c2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449254
push ecx
push edx
call fcn.004c6df9
add esp, 8
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x40]
cmp ecx, 0xf
jbe 0x449212
mov edx, dword [ebp - 0x54]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449208
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449254
push ecx
push edx
call fcn.004c6df9
add esp, 8
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0xf
mov byte [ebp - 0x54], 0
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0xec]
cmp ecx, 0xf
jbe 0x449264
mov edx, dword [ebp - 0x100]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44925a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44925a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004c6df9
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x70], 0
mov esi, 0xf
mov dword [ebp - 0x5c], 0
movups xmmword [ebp - 0x6c], xmm0
mov dword [ebp - 0x58], esi
mov byte [ebp - 0x6c], 0
mov ecx, dword [ebp - 0x3c]
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0xf
push eax
mov ecx, dword [ecx]
call fcn.0045aae0
lea ecx, [ebp - 0x6c]
mov edi, dword [eax]
add eax, 4
mov dword [ebp - 0x70], edi
cmp ecx, eax
je 0x4492d1
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x6c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x5c], xmm0
mov dword [eax + 0x14], esi
mov esi, dword [ebp - 0x58]
mov dword [eax + 0x10], 0
mov byte [eax], 0
mov ecx, dword [ebp - 0xec]
cmp ecx, 0xf
jbe 0x44930d
mov edx, dword [ebp - 0x100]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449303
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x449303
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004c6df9
add esp, 8
cmp esi, 0xf
mov dword [ebp - 0x18], 0
lea edx, [ebp - 0x6c]
mov dword [ebp - 0x14], 0
cmova edx, dword [ebp - 0x6c]
xorps xmm0, xmm0
mov ecx, edx
movups xmmword [ebp - 0x28], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x449331
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.004067f0
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x28]
cmp edi, 0xc8
jne 0x449452
cmp dword [ebp - 0x14], 0xf
mov ecx, 0xc738a8
push dword [ebp - 0x18]
cmova eax, dword [ebp - 0x28]
push eax
call fcn.004520a0
cmp byte [0xbd2481], 0
je 0x449387
lea edx, [ebp - 0xb8]
lea ecx, [ebp - 0xd0]
call fcn.00447750
mov edi, dword [ebp - 0x3c]
lea eax, [ebp - 0x28]
sub esp, 0x18
mov ecx, esp
mov esi, dword [edi]
push eax
call fcn.00450240
lea eax, [ebp - 0x154]
mov ecx, esi
push eax
call fcn.0045aec0
mov byte [ebp - 4], 0x11
mov ecx, 0xc73828
mov eax, dword [edi]
cmp dword [ebp - 0x140], 0xf
push dword [ebp - 0x144]
mov eax, dword [eax]
mov dword [0xc747ac], eax
lea eax, [ebp - 0x154]
cmova eax, dword [ebp - 0x154]
push eax
call fcn.004520a0
cmp dword [ebp - 0x128], 0xf
lea eax, [ebp - 0x13c]
push dword [ebp - 0x12c]
cmova eax, dword [ebp - 0x13c]
mov ecx, 0xc73840
push eax
call fcn.004520a0
movzx eax, byte [ebp - 0x123]
mov ecx, 0xc73860
cmp dword [ebp - 0x108], 0xf
push dword [ebp - 0x10c]
mov byte [0xc73859], al
movzx eax, byte [ebp - 0x124]
mov byte [0xc73858], al
lea eax, [ebp - 0x11c]
cmova eax, dword [ebp - 0x11c]
push eax
call fcn.004520a0
inc dword [0xbd2488]
lea ecx, [ebp - 0x154]
call fcn.00446910
jmp 0x4495ff
sub esp, 0x18
lea esi, [ebp - 0x54]
mov ecx, esp
push eax
call fcn.00450240
mov ecx, esi
call fcn.00446ae0
add esp, 0x18
mov byte [ebp - 4], 0x12
mov eax, esi
cmp dword [ebp - 0x40], 0xf
mov ecx, 0xc738d8
push dword [ebp - 0x44]
cmova eax, dword [ebp - 0x54]
push eax
mov byte [0xc74722], 1
call fcn.004520a0
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x40]
cmp ecx, 0xf
jbe 0x4494c7
mov edx, dword [ebp - 0x54]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4494bd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4494bd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004c6df9
add esp, 8
cmp dword [0xc7388c], 0xf
mov eax, 0xc73878
mov dword [0xc73888], 0
mov edi, 0x18
cmova eax, dword [0xc73878]
mov byte [eax], 0
mov edx, dword [0xc73888]
cmp edx, edi
jb 0x449515
cmp dword [0xc7388c], 0xf
mov eax, 0xc73878
mov dword [0xc73888], edi
cmova eax, dword [0xc73878]
mov byte [eax + 0x18], 0
jmp 0x449568
mov esi, dword [0xc7388c]
mov ecx, edi
mov eax, esi
sub ecx, edx
sub eax, edx
mov dword [ebp - 0x10], ecx
cmp ecx, eax
ja 0x449557
cmp esi, 0xf
mov dword [0xc73888], edi
mov eax, 0xc73878
cmova eax, dword [0xc73878]
push ecx
push 0
lea esi, [eax + edx]
push esi
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x10]
add esp, 0xc
mov byte [eax + esi], 0
jmp 0x449568
push 0
push ecx
push dword [ebp - 0x10]
push ecx
mov ecx, 0xc73878
call fcn.00455240
cmp dword [0xc738a4], 0xf
mov eax, 0xc73890
mov dword [0xc738a0], 0
cmova eax, dword [0xc73890]
mov byte [eax], 0
mov ecx, dword [0xc738a0]
cmp ecx, edi
jb 0x4495b1
cmp dword [0xc738a4], 0xf
mov eax, 0xc73890
mov dword [0xc738a0], edi
cmova eax, dword [0xc73890]
mov byte [eax + 0x18], 0
jmp 0x4495ff
mov edx, dword [0xc738a4]
sub edi, ecx
mov eax, edx
sub eax, ecx
cmp edi, eax
ja 0x4495ee
cmp edx, 0xf
mov dword [0xc738a0], 0x18
mov esi, 0xc73890
cmova esi, dword [0xc73890]
push edi
add esi, ecx
push 0
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov byte [edi + esi], 0
jmp 0x4495ff
push 0
push edi
push dword [ebp - 0x10]
mov ecx, 0xc73890
push edi
call fcn.00455240
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x449633
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449629
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44981d
push ecx
push edx
call fcn.004c6df9
add esp, 8
mov ecx, dword [ebp - 0x58]
cmp ecx, 0xf
jbe 0x449667
mov edx, dword [ebp - 0x6c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44965d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44981d
push ecx
push edx
call fcn.004c6df9
add esp, 8
mov ecx, dword [ebp - 0x8c]
cmp ecx, 0xf
jbe 0x4496a1
mov edx, dword [ebp - 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449697
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44981d
push ecx
push edx
call fcn.004c6df9
add esp, 8
mov ecx, dword [ebp - 0xd4]
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
cmp ecx, 0xf
jbe 0x4496f6
mov edx, dword [ebp - 0xe8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4496ec
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44981d
push ecx
push edx
call fcn.004c6df9
add esp, 8
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0xf
mov byte [ebp - 0xe8], 0
cmp ecx, 0xf
jbe 0x44974b
mov edx, dword [ebp - 0xb8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449741
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44981d
push ecx
push edx
call fcn.004c6df9
add esp, 8
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
cmp ecx, 0xf
jbe 0x4497a0
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449796
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44981d
push ecx
push edx
call fcn.004c6df9
add esp, 8
mov ecx, dword [ebp - 0x158]
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
cmp ecx, 0xf
jbe 0x4497f1
mov edx, dword [ebp - 0x16c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4497e7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44981d
push ecx
push edx
call fcn.004c6df9
add esp, 8
mov ecx, dword [ebp - 0x170]
cmp ecx, 0xf
jbe 0x44982d
mov edx, dword [ebp - 0x184]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449823
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x449823
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004c6df9
add esp, 8
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, str.Error_0
call fcn.00446a80
mov ecx, str.Error_1
call fcn.00446a80
int3