Function at 0x44bfec
Capabilities:
Check os version
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 8
push 0x818
mov eax, 0x48ac02
call fcn.0048733c
mov dword [ebp - 0x7a8], ecx
xor eax, eax
lea esi, [ecx + 0xd4]
mov dword [ebp - 0x7a0], eax
lea ecx, [ebp - 0x4c0]
push dword [0x4ac9c4]
and dword [ebp - 0x4b0], eax
and dword [ebp - 0x4ac], eax
mov dword [ebp - 0x7a4], eax
call fcn.00423e8e
lea eax, [ebp - 0x7a0]
xor edi, edi
mov dword [ebp - 4], edi
mov ecx, esi
push eax
mov dword [ebp - 0x7a0], 0x4532
call fcn.00423096
cmp eax, dword [esi]
je 0x44c05e
cmp dword [eax + 0x10], 0x4532
jbe 0x44c060
mov eax, dword [esi]
cmp eax, dword [esi]
je 0x44c0a0
lea eax, [ebp - 0x7a0]
mov dword [ebp - 0x7a0], 0x4532
push eax
mov ecx, esi
call fcn.00423096
cmp eax, dword [esi]
je 0x44d7c3
cmp dword [eax + 0x10], 0x4532
ja 0x44d7c3
add eax, 0x14
lea ecx, [ebp - 0x4c0]
push eax
call fcn.00422457
cmp dword [ebp - 0x4b0], edi
je 0x44d7af
mov edx, dword [0x4ac9c4]
lea ecx, [ebp - 0x4c0]
call fcn.00426677
test eax, eax
je 0x44d7af
push edi
call fcn.0046a45c
pop ecx
mov dword [ebp - 0x474], edx
lea ecx, [ebp - 0x4c0]
mov edx, dword [0x4b5938]
mov dword [ebp - 0x478], eax
call fcn.00426677
test eax, eax
jne 0x44c222
push 0x208
lea eax, [ebp - 0x220]
push edi
push eax
call fcn.00460010
mov ecx, dword [ebp - 0x478]
add esp, 0xc
mov eax, dword [ebp - 0x474]
add ecx, 5
mov dword [ebp - 0x728], ecx
adc eax, edi
mov dword [ebp - 0x724], eax
lea eax, [ebp - 0x728]
push eax
call fcn.0046ec75
mov dword [ebp - 0x7a0], eax
mov edx, 0x143cfc6f
pop ecx
lea eax, [ebp - 0x798]
mov dword [ebp - 0x758], edx
push eax
lea ecx, [ebp - 0x754]
mov dword [ebp - 0x754], 0xa388fc4a
mov dword [ebp - 0x750], 0x10f52064
mov dword [ebp - 0x74c], 0x23a4ce4a
mov dword [ebp - 0x748], 0x9a26f9fa
mov dword [ebp - 0x744], 0xfda3e626
mov dword [ebp - 0x740], 0xd87351f6
mov dword [ebp - 0x73c], 0xa408c852
mov dword [ebp - 0x738], 0x8079d6df
mov dword [ebp - 0x734], 0x17c19612
call fcn.0044d7ce
pop ecx
push 0xa
pop ecx
mov esi, eax
lea edi, [ebp - 0x758]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x754]
push eax
lea ecx, [ebp - 0x470]
call fcn.004211e7
cmp dword [ebp - 0x45c], 8
push 4
pop eax
push dword [ebp - 0x7a0]
mov dword [ebp - 0x7a4], eax
lea eax, [ebp - 0x470]
cmovae eax, dword [ebp - 0x470]
push eax
lea eax, [ebp - 0x220]
push 0x104
push eax
call fcn.004734e9
add esp, 0x10
lea ecx, [ebp - 0x470]
call fcn.00421630
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x4c0]
call fcn.004211c2
lea eax, [ebp - 0x798]
mov dword [ebp - 0x754], 0xd7b4884a
mov edx, 0x143c886f
mov dword [ebp - 0x750], 0x132aae41
push eax
lea ecx, [ebp - 0x754]
mov dword [ebp - 0x758], edx
mov dword [ebp - 0x74c], 0x7f6cc2de
mov dword [ebp - 0x748], 0xaae107fb
mov dword [ebp - 0x744], 0x832263fa
mov dword [ebp - 0x740], 0xf1dc6f1b
mov dword [ebp - 0x73c], 0xe4df3b53
mov dword [ebp - 0x738], 0xa79794c6
mov dword [ebp - 0x734], 0x1e10fe81
call fcn.0044d7ce
pop ecx
push 0xa
pop ecx
mov esi, eax
lea edi, [ebp - 0x758]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x754]
push eax
lea ecx, [ebp - 0x470]
call fcn.004211e7
or dword [ebp - 0x7a4], 8
lea edx, [ebp - 0x458]
cmp dword [ebp - 0x45c], 8
lea ecx, [ebp - 0x470]
push edx
cmovae ecx, dword [ebp - 0x470]
lea edx, [ebp - 0x42c]
cmp dword [ebp - 0x4ac], 8
lea eax, [ebp - 0x4c0]
push edx
cmovae eax, dword [ebp - 0x4c0]
lea edx, [ebp - 0x430]
push edx
lea edx, [ebp - 0x434]
push edx
lea edx, [ebp - 0x438]
push edx
lea edx, [ebp - 0x43c]
push edx
push ecx
push eax
call fcn.0045aacc
add esp, 0x20
lea ecx, [ebp - 0x470]
mov esi, eax
call fcn.00421630
cmp esi, 6
jne 0x44d7af
call fcn.0044e78c
mov byte [ebp - 0x799], al
lea ecx, [ebp - 0x76c]
lea eax, [ebp - 0x748]
mov dword [ebp - 0x76c], 0xc7b99833
mov edx, 0x143c986f
mov dword [ebp - 0x768], 0x7cc1cf85
push eax
mov dword [ebp - 0x770], edx
mov dword [ebp - 0x764], 0x9efba090
mov dword [ebp - 0x760], 0xc29e3aa4
mov dword [ebp - 0x75c], 0xfa39
call fcn.0044d81c
pop ecx
push esi
pop ecx
mov esi, eax
lea edi, [ebp - 0x454]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x450]
push eax
lea ecx, [ebp - 0x470]
call fcn.004211e7
push 0x208
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 1
push 0
push eax
call fcn.00460010
add esp, 0xc
call fcn.00434b86
test al, al
je 0x44c3e2
lea eax, [ebp - 0x220]
push eax
xor eax, eax
push eax
push eax
push 0x1a
push eax
call dword [0x4b8c9c]
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x490]
call fcn.004211e7
lea eax, [ebp - 0x470]
mov byte [ebp - 4], 2
push eax
lea edx, [ebp - 0x490]
lea ecx, [ebp - 0x4d8]
call fcn.00451aef
pop ecx
lea ecx, [ebp - 0x490]
call fcn.00421630
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 5
call fcn.00421630
lea eax, [ebp - 0x798]
mov dword [ebp - 0x754], 0xa99d9606
mov edx, 0x143c966f
mov dword [ebp - 0x750], 0xef140bf2
push eax
lea ecx, [ebp - 0x754]
mov dword [ebp - 0x758], edx
mov dword [ebp - 0x74c], 0xbab5a518
mov dword [ebp - 0x748], 0x1fc0f4fb
mov dword [ebp - 0x744], 0x30ce4710
mov dword [ebp - 0x740], 0xdd5c6b95
mov dword [ebp - 0x73c], 0x46995533
mov dword [ebp - 0x738], 0xed87d62c
mov dword [ebp - 0x734], 0x68563072
call fcn.0044d7ce
pop ecx
push 0xa
pop ecx
mov esi, eax
lea edi, [ebp - 0x758]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x754]
push eax
lea ecx, [ebp - 0x7e0]
call fcn.004211e7
lea eax, [ebp - 0x458]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x430]
push eax
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x43c]
push eax
lea edx, [ebp - 0x7e0]
lea ecx, [ebp - 0x508]
call fcn.00452b05
add esp, 0x18
lea ecx, [ebp - 0x7e0]
mov byte [ebp - 4], 8
call fcn.00421630
push dword [ebp - 0x7a8]
and dword [ebp - 0x4e0], 0
lea ecx, [ebp - 0x4f0]
and dword [ebp - 0x4dc], 0
call fcn.00423e8e
mov byte [ebp - 4], 9
lea eax, [ebp - 0x730]
mov edx, 0x143c926f
mov dword [ebp - 0x714], 0x6db39241
mov dword [ebp - 0x718], edx
mov dword [ebp - 0x710], 0xd576832b
mov dword [ebp - 0x70c], 0xada4
push eax
lea ecx, [ebp - 0x714]
call fcn.00421ad6
mov esi, eax
lea edi, [ebp - 0x718]
pop ecx
lea eax, [ebp - 0x714]
push eax
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x490]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004211e7
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x508]
cmp dword [ebp - 0x4f4], 8
push dword [ebp - 0x4f8]
cmovae eax, dword [ebp - 0x508]
push eax
push ecx
lea ecx, [ebp - 0x490]
call fcn.00453494
push eax
lea ecx, [ebp - 0x538]
call fcn.004215e4
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 0xc
call fcn.00421630
lea eax, [ebp - 0x730]
mov dword [ebp - 0x714], 0x4fb59041
mov edx, 0x143c906f
mov dword [ebp - 0x710], 0x47bbbf62
push eax
lea ecx, [ebp - 0x714]
mov dword [ebp - 0x718], edx
mov dword [ebp - 0x70c], 0xb1dc
call fcn.00421ad6
mov esi, eax
lea edi, [ebp - 0x718]
pop ecx
lea eax, [ebp - 0x714]
push eax
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x470]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004211e7
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x508]
cmp dword [ebp - 0x4f4], 8
push dword [ebp - 0x4f8]
cmovae eax, dword [ebp - 0x508]
push eax
push ecx
lea ecx, [ebp - 0x470]
call fcn.00453494
push eax
lea ecx, [ebp - 0x574]
call fcn.004215e4
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0xf
call fcn.00421630
lea eax, [ebp - 0x508]
xor esi, esi
push eax
lea ecx, [ebp - 0x520]
mov dword [ebp - 0x510], esi
mov dword [ebp - 0x50c], esi
call fcn.00423e8e
lea ecx, [ebp - 0x4d8]
mov byte [ebp - 4], 0x10
call fcn.00427958
test al, al
jne 0x44c6c2
cmp dword [ebp - 0x4c4], 8
lea ecx, [ebp - 0x4d8]
cmovae ecx, dword [ebp - 0x4d8]
call fcn.00427ae6
push 0xb0
lea eax, [ebp - 0xc8]
push esi
push eax
call fcn.00460010
add esp, 0xc
mov dword [ebp - 0xc8], 0x4a0de0
mov dword [ebp - 0x60], vtable.std::basic_ios_char__struct_std::char_traits_char__.0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xc8]
mov eax, dword [ebp - 0x7a4]
or eax, 0xff0
push esi
mov dword [ebp - 0x7a0], eax
lea eax, [ebp - 0xc4]
push esi
push eax
call fcn.004518c9
mov dword [ebp - 4], 0x12
mov eax, dword [ebp - 0xc8]
push esi
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xc8], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xc8]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0xcc], eax
lea ecx, [ebp - 0xc4]
call fcn.004518a1
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x730]
mov edx, 0x143cbe6f
mov dword [ebp - 0x714], 0x1adbe14
push eax
lea ecx, [ebp - 0x714]
mov dword [ebp - 0x718], edx
mov dword [ebp - 0x710], 0xf7f35f5f
mov dword [ebp - 0x70c], 0x898650a2
call fcn.0044d86a
mov esi, eax
lea edi, [ebp - 0x718]
pop ecx
lea eax, [ebp - 0x714]
push eax
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x490]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004211e7
lea eax, [ebp - 0x538]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x4d8]
push eax
lea edx, [ebp - 0x490]
lea ecx, [ebp - 0x7c8]
call fcn.00452bed
pop ecx
pop ecx
mov byte [ebp - 4], 0x15
cmp dword [eax + 0x14], 8
jb 0x44c7da
mov eax, dword [eax]
push ecx
push ecx
push eax
lea ecx, [ebp - 0xc8]
call fcn.0045161d
lea ecx, [ebp - 0x7c8]
call fcn.00421630
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 0x13
call fcn.00421630
lea edx, [ebp - 0x520]
lea ecx, [ebp - 0x720]
call fcn.00426873
mov dword [ebp - 0x7a0], eax
mov byte [ebp - 4], 0x16
mov eax, 0x143cba6f
movaps xmm0, xmmword [0x4a1630]
xor esi, esi
movups xmmword [ebp - 0x790], xmm0
mov dword [ebp - 0x794], eax
movaps xmm0, xmmword [0x4a1070]
movups xmmword [ebp - 0x780], xmm0
mov dword [ebp - 0x758], eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x754], xmm0
movlpd qword [ebp - 0x74c], xmm0
movlpd qword [ebp - 0x744], xmm0
movlpd qword [ebp - 0x73c], xmm0
mov cl, byte [ebp + esi - 0x790]
xor cl, al
mov byte [ebp + esi - 0x754], cl
mov ecx, 0xbc8f
mul ecx
push 0
push 0x7fffffff
push edx
push eax
call fcn.00487410
inc esi
cmp esi, 0x1d
jb 0x44c86f
and dword [ebp - 0x760], 0
lea esi, [ebp - 0x758]
push 9
pop ecx
lea edi, [ebp - 0x794]
mov dword [ebp - 0x75c], 0xf
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x790]
mov byte [ebp - 0x770], 0
push eax
lea ecx, [ebp - 0x770]
call fcn.0042180c
push ecx
push ecx
lea eax, [ebp - 0x770]
mov byte [ebp - 4], 0x17
mov ecx, esp
push eax
call fcn.004535af
mov edx, dword [ebp - 0x7a0]
lea ecx, [ebp - 0x454]
call fcn.00451c58
pop ecx
pop ecx
lea ecx, [ebp - 0x770]
call fcn.00421a00
lea ecx, [ebp - 0x720]
mov byte [ebp - 4], 0x1a
call fcn.00421a00
lea edx, [ebp - 0x4f0]
lea ecx, [ebp - 0x748]
call fcn.00426873
mov dword [ebp - 0x7b0], eax
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x730]
mov edx, 0x143d6c6f
mov dword [ebp - 0x714], 0x33ac6c14
push eax
lea ecx, [ebp - 0x714]
mov dword [ebp - 0x718], edx
mov dword [ebp - 0x710], 0xf4510993
mov dword [ebp - 0x70c], 0xfff2e27e
call fcn.0044d86a
mov esi, eax
lea edi, [ebp - 0x718]
pop ecx
lea eax, [ebp - 0x714]
push eax
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x7c8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004211e7
mov esi, dword [ebp - 0x7a4]
or esi, 0x7ff0
mov dword [ebp - 0x7a0], esi
lea eax, [ebp - 0x574]
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x4d8]
push eax
lea edx, [ebp - 0x7c8]
lea ecx, [ebp - 0x788]
call fcn.00452bed
pop ecx
pop ecx
mov edx, eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x828]
call fcn.00426873
mov dword [ebp - 0x7ac], eax
mov byte [ebp - 4], 0x1e
lea edx, [ebp - 0x574]
lea ecx, [ebp - 0x810]
call fcn.00426873
mov dword [ebp - 0x494], eax
cmp byte [ebp - 0x799], 1
mov byte [ebp - 4], 0x1f
jne 0x44ca30
and dword [ebp - 0x480], 0
lea eax, [ebp - 0x454]
and dword [ebp - 0x47c], 0
lea ecx, [ebp - 0x490]
push eax
call fcn.0042151d
lea edi, [ebp - 0x490]
mov byte [ebp - 4], 0x20
or esi, 1
jmp 0x44ca68
and dword [ebp - 0x7d0], 0
lea ecx, [ebp - 0x7e0]
push 0x49d300
mov dword [ebp - 0x7cc], 0xf
mov byte [ebp - 0x7e0], 0
call fcn.0042180c
lea edi, [ebp - 0x7e0]
mov dword [ebp - 4], 0x21
or esi, 2
lea eax, [ebp - 0x7f8]
mov dword [ebp - 0x7a0], esi
push eax
mov dword [ebp - 0x7a4], esi
call fcn.0044d8b7
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 4], 0x22
push eax
call fcn.004535af
push dword [ebp - 0x7b0]
mov edx, edi
lea ecx, [ebp - 0x470]
push dword [ebp - 0x7ac]
push dword [ebp - 0x494]
call fcn.00452c87
add esp, 0x14
lea ecx, [ebp - 0x7f8]
call fcn.00421a00
mov eax, esi
test al, 2
je 0x44cade
and eax, 0xfffffffd
lea ecx, [ebp - 0x7e0]
mov dword [ebp - 0x7a4], eax
call fcn.00421a00
mov eax, dword [ebp - 0x7a4]
test al, 1
je 0x44caed
lea ecx, [ebp - 0x490]
call fcn.00421a00
lea ecx, [ebp - 0x810]
call fcn.00421a00
lea ecx, [ebp - 0x828]
call fcn.00421a00
lea ecx, [ebp - 0x788]
call fcn.00421630
lea ecx, [ebp - 0x7c8]
call fcn.00421630
lea ecx, [ebp - 0x748]
mov byte [ebp - 4], 0x2b
call fcn.00421a00
cmp dword [ebp - 0x45c], 0x10
lea edx, [ebp - 0x470]
push dword [ebp - 0x460]
cmovae edx, dword [ebp - 0x470]
lea ecx, [ebp - 0xc8]
call fcn.00453694
pop ecx
lea ecx, [ebp - 0xc4]
call fcn.00451865
test eax, eax
jne 0x44cb7c
mov eax, dword [ebp - 0xc8]
lea ecx, [ebp - 0xc8]
push 0
mov eax, dword [eax + 4]
add ecx, eax
mov eax, dword [ecx + 0xc]
or eax, 2
push eax
call fcn.004511be
lea eax, [ebp - 0x730]
mov dword [ebp - 0x714], 0x7fac6014
mov edx, 0x143d606f
mov dword [ebp - 0x710], 0xa4887096
push eax
lea ecx, [ebp - 0x714]
mov dword [ebp - 0x718], edx
mov dword [ebp - 0x70c], 0xa855fb2d
call fcn.0044d86a
mov esi, eax
lea edi, [ebp - 0x718]
pop ecx
lea eax, [ebp - 0x714]
push eax
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x770]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004211e7
lea eax, [ebp - 0x574]
mov byte [ebp - 4], 0x2c
push eax
lea eax, [ebp - 0x4d8]
push eax
lea edx, [ebp - 0x770]
lea ecx, [ebp - 0x4a8]
call fcn.00452bed
pop ecx
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x2d
call fcn.0044ee1c
lea ecx, [ebp - 0x4a8]
call fcn.00421630
lea ecx, [ebp - 0x770]
call fcn.00421630
lea ecx, [ebp - 0x470]
call fcn.00421a00
lea ecx, [ebp - 0x454]
call fcn.00421a00
lea ecx, [ebp - 0x60]
call fcn.0045077e
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x2e
push eax
mov dword [ebp - 0x60], vtable.std::ios_base.0
call fcn.0045b482
pop ecx
push 9
xor eax, eax
mov byte [ebp - 4], 0x10
pop ecx
lea edi, [ebp - 0x5e4]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x478]
push eax
lea eax, [ebp - 0x5e4]
push eax
call fcn.0046ec9c
mov eax, dword [ebp - 0x458]
and dword [ebp - 0x544], 0
mov dword [ebp - 0x55c], eax
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x558], eax
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x550], eax
mov eax, dword [ebp - 0x438]
dec eax
mov dword [ebp - 0x54c], eax
mov eax, dword [ebp - 0x43c]
add eax, 0xfffff894
and dword [ebp - 0x540], 0
mov dword [ebp - 0x548], eax
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x53c], eax
lea eax, [ebp - 0x55c]
push eax
call fcn.0046f19f
add esp, 0xc
cmp edx, dword [ebp - 0x474]
jg 0x44cf73
jl 0x44cd04
cmp eax, dword [ebp - 0x478]
ja 0x44cf73
lea eax, [ebp - 0x4a0]
mov dword [ebp - 0x714], 0x47aa184d
mov edx, 0x143d186f
mov dword [ebp - 0x710], 0xc985dad6
push eax
lea ecx, [ebp - 0x714]
mov dword [ebp - 0x718], edx
mov dword [ebp - 0x70c], 0x931e
call fcn.00421ad6
mov esi, eax
lea edi, [ebp - 0x718]
pop ecx
lea eax, [ebp - 0x714]
push eax
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x454]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004211e7
lea eax, [ebp - 0x4f0]
mov byte [ebp - 4], 0x2f
push eax
lea edx, [ebp - 0x454]
lea ecx, [ebp - 0x748]
call fcn.00452d67
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x30
call fcn.0044e854
lea ecx, [ebp - 0x748]
mov byte [ebp - 0x799], al
call fcn.00421630
lea ecx, [ebp - 0x454]
mov byte [ebp - 4], 0x10
call fcn.00421630
cmp byte [ebp - 0x799], 0
je 0x44ce4f
lea eax, [ebp - 0x4a0]
mov dword [ebp - 0x714], 0x29aa164d
mov edx, 0x143d166f
mov dword [ebp - 0x710], 0x3c511602
push eax
lea ecx, [ebp - 0x714]
mov dword [ebp - 0x718], edx
mov dword [ebp - 0x70c], 0x9756
call fcn.00421ad6
mov esi, eax
lea edi, [ebp - 0x718]
pop ecx
lea eax, [ebp - 0x714]
push eax
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x454]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004211e7
lea eax, [ebp - 0x4f0]
mov byte [ebp - 4], 0x31
push eax
lea edx, [ebp - 0x454]
lea ecx, [ebp - 0x748]
call fcn.00452d67
pop ecx
mov ecx, eax
mov byte [ebp - 4], 0x32
call fcn.0044ea9b
lea ecx, [ebp - 0x748]
call fcn.00421630
lea ecx, [ebp - 0x454]
mov byte [ebp - 4], 0x10
call fcn.00421630
push 0x44
lea eax, [ebp - 0x5c0]
push 0
push eax
call fcn.00460010
xor eax, eax
mov dword [ebp - 0x5c0], 0x44
lea edi, [ebp - 0x730]
mov dword [ebp - 0x594], 1
stosd dword es:[edi], eax
lea ecx, [ebp - 0x714]
add esp, 0xc
mov dword [ebp - 0x714], 0xbfac2014
mov edx, 0x143d206f
mov dword [ebp - 0x710], 0xfe0deb05
mov dword [ebp - 0x718], edx
stosd dword es:[edi], eax
mov dword [ebp - 0x70c], 0x2a62823d
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov word [ebp - 0x590], ax
lea eax, [ebp - 0x4a0]
push eax
call fcn.0044d86a
mov esi, eax
lea edi, [ebp - 0x718]
pop ecx
lea eax, [ebp - 0x714]
push eax
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x454]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004211e7
lea eax, [ebp - 0x538]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x4d8]
push eax
lea edx, [ebp - 0x454]
lea ecx, [ebp - 0x490]
call fcn.00452bed
pop ecx
pop ecx
lea ecx, [ebp - 0x454]
mov byte [ebp - 4], 0x35
call fcn.00421630
cmp dword [ebp - 0x47c], 8
lea ecx, [ebp - 0x730]
push ecx
lea ecx, [ebp - 0x5c0]
push ecx
lea eax, [ebp - 0x490]
cmovae eax, dword [ebp - 0x490]
sub esp, 0xc
push 0
push ecx
push ecx
push eax
push ecx
call fcn.00433e8e
test eax, eax
je 0x44cf63
push dword [ebp - 0x72c]
call fcn.00425fb9
push dword [ebp - 0x730]
call fcn.00425fb9
lea ecx, [ebp - 0x490]
call fcn.00421630
jmp 0x44d76d
push pe_nt_image_headers32
xor esi, esi
lea eax, [ebp - 0x704]
push esi
push eax
call fcn.00460010
add esp, 0xc
mov dword [ebp - 0x708], 0x11c
lea eax, [ebp - 0x708]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp byte [ebp - 0x799], 1
jne 0x44d601
xor eax, eax
lea edi, [ebp - 0x714]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x714], eax
mov dword [ebp - 0x710], eax
mov dword [ebp - 0x70c], eax
mov dword [ebp - 0x760], eax
mov dword [ebp - 0x75c], 7
mov word [ebp - 0x770], ax
mov byte [ebp - 4], 0x37
cmp dword [ebp - 0x704], 6
ja 0x44d144
jb 0x44d004
cmp dword [ebp - 0x700], 2
jae 0x44d144
lea eax, [ebp - 0x4a0]
mov dword [ebp - 0x72c], 0xf5af8a14
mov edx, 0x143d8a6f
mov dword [ebp - 0x728], 0x3a4e8800
push eax
lea ecx, [ebp - 0x72c]
mov dword [ebp - 0x730], edx
mov dword [ebp - 0x724], 0x5afca2be
call fcn.0044d86a
mov esi, eax
lea edi, [ebp - 0x730]
pop ecx
lea eax, [ebp - 0x72c]
push eax
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x7c8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004211e7
lea eax, [ebp - 0x538]
mov byte [ebp - 4], 0x48
push eax
lea eax, [ebp - 0x4d8]
push eax
lea edx, [ebp - 0x7c8]
lea ecx, [ebp - 0x788]
call fcn.00452bed
pop ecx
pop ecx
mov esi, eax
lea eax, [ebp - 0x748]
mov byte [ebp - 4], 0x49
push eax
call fcn.0044e2d9
mov edi, eax
lea eax, [ebp - 0x42c]
mov byte [ebp - 4], 0x4a
push eax
lea eax, [ebp - 0x430]
push eax
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x43c]
push eax
push esi
lea eax, [ebp - 0x520]
push eax
lea ecx, [ebp - 0x5b8]
call fcn.00453a9c
cmp dword [edi + 0x14], 8
mov edx, edi
jb 0x44d0db
mov edx, dword [edi]
mov ecx, dword [edi + 0x10]
lea esi, [ebp - 0x5b8]
sub esp, 0x10
mov eax, esp
push ecx
and dword [eax + 4], 0
lea ecx, [ebp - 0x454]
push edx
mov dword [eax], 0x11111dd
mov dword [eax + 8], esi
call fcn.004535ca
add esp, 0x18
lea eax, [ebp - 0x454]
lea ecx, [ebp - 0x770]
push eax
call fcn.0045072b
lea ecx, [ebp - 0x454]
call fcn.00421630
lea ecx, [ebp - 0x748]
call fcn.00421630
lea ecx, [ebp - 0x788]
call fcn.00421630
lea ecx, [ebp - 0x7c8]
jmp 0x44d4b1
lea eax, [ebp - 0x788]
push eax
call fcn.0044da4f
mov edx, eax
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x748]
call fcn.00452de1
push eax
lea ecx, [ebp - 0x770]
mov byte [ebp - 4], 0x39
call fcn.004224fb
lea ecx, [ebp - 0x748]
call fcn.00421630
lea ecx, [ebp - 0x788]
mov byte [ebp - 4], 0x37
call fcn.00421630
mov edx, 0x143de66f
mov dword [ebp - 0x724], 0x59d2e64d
lea ecx, [ebp - 0x724]
mov dword [ebp - 0x728], edx
call fcn.0044dbbb
mov dword [ebp - 0x728], eax
lea ecx, [ebp - 0x454]
lea eax, [ebp - 0x724]
mov dword [ebp - 0x724], edx
push eax
call fcn.004211e7
lea edx, [ebp - 0x454]
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x748]
call fcn.00452de1
push eax
lea ecx, [ebp - 0x770]
mov byte [ebp - 4], 0x3b
call fcn.004224fb
lea ecx, [ebp - 0x748]
call fcn.00421630
lea ecx, [ebp - 0x454]
mov byte [ebp - 4], 0x37
call fcn.00421630
lea eax, [ebp - 0x788]
push eax
call fcn.0044dc1b
lea ecx, [ebp - 0x520]
mov byte [ebp - 4], 0x3c
push ecx
mov edx, eax
lea ecx, [ebp - 0x748]
call fcn.00452d67
pop ecx
push eax
lea ecx, [ebp - 0x770]
mov byte [ebp - 4], 0x3d
call fcn.004224fb
lea ecx, [ebp - 0x748]
call fcn.00421630
lea ecx, [ebp - 0x788]
mov byte [ebp - 4], 0x37
call fcn.00421630
lea eax, [ebp - 0x788]
push eax
call fcn.0044dd58
mov edx, eax
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x748]
call fcn.00452de1
push eax
lea ecx, [ebp - 0x770]
mov byte [ebp - 4], 0x3f
call fcn.004224fb
lea ecx, [ebp - 0x748]
call fcn.00421630
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x788]
call fcn.00421630
lea eax, [ebp - 0x4a0]
mov dword [ebp - 0x72c], 0xffafe014
mov edx, 0x143de06f
mov dword [ebp - 0x728], 0xf1977bf0
push eax
lea ecx, [ebp - 0x72c]
mov dword [ebp - 0x730], edx
mov dword [ebp - 0x724], 0xa43bed0c
call fcn.0044d86a
mov esi, eax
lea edi, [ebp - 0x730]
pop ecx
lea eax, [ebp - 0x72c]
push eax
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x7c8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004211e7
lea eax, [ebp - 0x538]
mov byte [ebp - 4], 0x40
push eax
lea eax, [ebp - 0x4d8]
push eax
lea edx, [ebp - 0x7c8]
lea ecx, [ebp - 0x788]
call fcn.00452bed
pop ecx
pop ecx
mov esi, eax
lea eax, [ebp - 0x748]
mov byte [ebp - 4], 0x41
push eax
call fcn.0044e002
mov ecx, eax
mov byte [ebp - 4], 0x42
mov edx, esi
cmp dword [esi + 0x14], 8
jb 0x44d33f
mov edx, dword [esi]
cmp dword [ecx + 0x14], 8
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x498], edx
mov edx, ecx
mov dword [ebp - 0x494], eax
jb 0x44d358
mov edx, dword [ecx]
mov ecx, dword [ecx + 0x10]
lea esi, [ebp - 0x498]
sub esp, 0x10
mov eax, esp
push ecx
and dword [eax + 4], 0
lea ecx, [ebp - 0x454]
push edx
mov dword [eax], 0xd
mov dword [eax + 8], esi
call fcn.004535ca
add esp, 0x18
lea eax, [ebp - 0x454]
mov byte [ebp - 4], 0x43
push eax
lea ecx, [ebp - 0x770]
call fcn.004224fb
lea ecx, [ebp - 0x454]
call fcn.00421630
lea ecx, [ebp - 0x748]
call fcn.00421630
lea ecx, [ebp - 0x788]
call fcn.00421630
lea ecx, [ebp - 0x7c8]
mov byte [ebp - 4], 0x37
call fcn.00421630
lea eax, [ebp - 0x788]
push eax
call fcn.0044e10d
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x44
push ecx
lea ecx, [ebp - 0x42c]
mov edx, eax
push ecx
lea ecx, [ebp - 0x430]
push ecx
lea ecx, [ebp - 0x434]
push ecx
lea ecx, [ebp - 0x438]
push ecx
lea ecx, [ebp - 0x43c]
push ecx
lea ecx, [ebp - 0x748]
call fcn.00452b05
add esp, 0x18
push eax
lea ecx, [ebp - 0x770]
mov byte [ebp - 4], 0x45
call fcn.004224fb
lea ecx, [ebp - 0x748]
call fcn.00421630
lea ecx, [ebp - 0x788]
mov byte [ebp - 4], 0x37
call fcn.00421630
mov edx, 0x143dfc6f
mov dword [ebp - 0x724], 0xa3d2fc4d
lea ecx, [ebp - 0x724]
mov dword [ebp - 0x728], edx
call fcn.0044dbbb
mov dword [ebp - 0x728], eax
lea ecx, [ebp - 0x454]
lea eax, [ebp - 0x724]
mov dword [ebp - 0x724], edx
push eax
call fcn.004211e7
lea edx, [ebp - 0x454]
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x748]
call fcn.00452de1
push eax
lea ecx, [ebp - 0x770]
mov byte [ebp - 4], 0x47
call fcn.004224fb
lea ecx, [ebp - 0x748]
call fcn.00421630
lea ecx, [ebp - 0x454]
mov byte [ebp - 4], 0x37
call fcn.00421630
push 5
lea edx, [ebp - 0x714]
lea ecx, [ebp - 0x770]
call fcn.0044f27f
pop ecx
mov ecx, dword [0x4b5938]
cmp dword [ecx + 0x14], 8
jb 0x44d4dc
mov ecx, dword [ecx]
cmp dword [ebp - 0x4ac], 8
lea eax, [ebp - 0x4c0]
push ecx
cmovae eax, dword [ebp - 0x4c0]
push eax
call fcn.0046ae39
pop ecx
pop ecx
test eax, eax
jne 0x44d5d2
lea eax, [ebp - 0x788]
push eax
call fcn.0044e51b
lea ecx, [ebp - 0x520]
mov byte [ebp - 4], 0x4b
push ecx
mov edx, eax
lea ecx, [ebp - 0x748]
call fcn.00452d67
pop ecx
push eax
lea ecx, [ebp - 0x770]
call fcn.0045072b
lea ecx, [ebp - 0x748]
call fcn.00421630
lea ecx, [ebp - 0x788]
mov byte [ebp - 4], 0x37
call fcn.00421630
push 0x44
lea eax, [ebp - 0x5c0]
push 0
push eax
call fcn.00460010
xor eax, eax
mov dword [ebp - 0x5c0], 0x44
lea edi, [ebp - 0x730]
mov dword [ebp - 0x594], 1
stosd dword es:[edi], eax
lea ecx, [ebp - 0x730]
add esp, 0xc
stosd dword es:[edi], eax
push ecx
lea ecx, [ebp - 0x5c0]
push ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
cmp dword [ebp - 0x75c], 8
mov word [ebp - 0x590], ax
lea eax, [ebp - 0x770]
cmovae eax, dword [ebp - 0x770]
sub esp, 0xc
push 0
push ecx
push ecx
push eax
push ecx
call fcn.00433e8e
test eax, eax
je 0x44d5d2
push dword [ebp - 0x72c]
call fcn.00425fb9
push dword [ebp - 0x730]
call fcn.00425fb9
lea ecx, [ebp - 0x770]
call fcn.00421630
mov ecx, dword [ebp - 0x714]
test ecx, ecx
je 0x44d76d
mov eax, dword [ebp - 0x70c]
sub eax, ecx
push eax
push ecx
call fcn.004219b6
pop ecx
pop ecx
jmp 0x44d76d
cmp dword [ebp - 0x4dc], 8
lea ecx, [ebp - 0x4f0]
mov eax, dword [ebp - 0x4e0]
cmovae ecx, dword [ebp - 0x4f0]
sub esp, 0x10
mov dword [ebp - 0x494], eax
mov eax, esp
mov dword [ebp - 0x498], ecx
lea ecx, [ebp - 0x498]
push 4
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x454]
push 0x4a0f94
mov dword [eax], 0xd
mov dword [eax + 4], esi
call fcn.004535ca
add esp, 0x18
lea ecx, [ebp - 0x454]
mov byte [ebp - 4], 0x4c
call fcn.0044e854
lea ecx, [ebp - 0x454]
mov byte [ebp - 0x799], al
mov byte [ebp - 4], 0x10
call fcn.00421630
cmp byte [ebp - 0x799], 0
jne 0x44d76d
push 0x410
lea eax, [ebp - 0x428]
push esi
push eax
call fcn.00460010
mov esi, dword [ebp - 0x7a8]
add esp, 0xc
cmp dword [esi + 0x14], 8
jb 0x44d6a7
mov esi, dword [esi]
mov eax, dword [ebp - 0x430]
mov edi, dword [ebp - 0x42c]
mov dword [ebp - 0x494], eax
lea eax, [ebp - 0x748]
push eax
call fcn.0044e61f
cmp dword [eax + 0x14], 8
jb 0x44d6cd
mov eax, dword [eax]
push esi
push edi
push dword [ebp - 0x494]
push eax
lea eax, [ebp - 0x428]
push 0x208
push eax
call fcn.0045a9cd
add esp, 0x18
lea ecx, [ebp - 0x748]
call fcn.00421630
push 0x44
lea eax, [ebp - 0x5c0]
push 0
push eax
call fcn.00460010
xor eax, eax
mov dword [ebp - 0x5c0], 0x44
lea edi, [ebp - 0x718]
mov dword [ebp - 0x594], 1
stosd dword es:[edi], eax
add esp, 0xc
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov word [ebp - 0x590], ax
lea eax, [ebp - 0x718]
push eax
lea eax, [ebp - 0x5c0]
push eax
sub esp, 0xc
lea eax, [ebp - 0x428]
push 0
push ecx
push ecx
push eax
push ecx
call fcn.00433e8e
test eax, eax
je 0x44d76d
push dword [ebp - 0x714]
call fcn.00425fb9
push dword [ebp - 0x718]
call fcn.00425fb9
lea ecx, [ebp - 0x520]
call fcn.00421630
lea ecx, [ebp - 0x574]
call fcn.00421630
lea ecx, [ebp - 0x538]
call fcn.00421630
lea ecx, [ebp - 0x4f0]
call fcn.00421630
lea ecx, [ebp - 0x508]
call fcn.00421630
lea ecx, [ebp - 0x4d8]
call fcn.00421630
lea ecx, [ebp - 0x4c0]
call fcn.00421630
mov ecx, dword [ebp - 0x14]
call fcn.00487317
ret
push str.invalid_map_K__T__key
call fcn.0045acc0
int3