Function at 0x443ea0
Capabilities:
Access peb ldr_data
Get ntdll base address
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x1a8
mov esi, esp
mov dword [esi + 0x190], ebp
mov dword [esi + 0x28], edx
mov dword [esi + 0x48], ecx
nop
mov dword [esi + 0x194], esp
mov dword [esi + 0x1a0], 0xffffffff
lea eax, [esi + 0x198]
mov dword [esi + 0x19c], 0x46f2f0
mov ecx, dword fs:[0]
mov dword [esi + 0x198], ecx
mov dword fs:[0], eax
call fcn.0046ecb0
mov edx, dword [0x836378]
mov ecx, dword [0x836368]
mov edi, 0x27b
sub edi, eax
mov dword [esi + 0x2c], edi
sub ecx, edi
add ecx, edx
call dword [0x834360]
call ecx
mov edx, eax
xor edx, 0x7bdbd6dd
mov edi, eax
xor edi, 0x7bdbd6cd
mov ecx, eax
xor ecx, 0x7bdbd6c1
mov dword [esi + 0x14], edi
mov dword [esi + edi + 0x7c], 0
mov dword [esi + 0xc], eax
xor eax, 0x7bdbd6de
mov dword [esi + 0x30], ecx
mov dword [esi + 0x24], eax
mov dword [esi + ecx + 0x7c], eax
mov dword [esi + 0x20], edx
mov word [esi + edx + 0x7c], 0
mov dword [esi + 0x7c], 0x75156c
mov dword [esi + 0x1a0], 6
lea ecx, [esi + 0xd8]
push 0x75155c
call fcn.00587490
nop
mov ebx, dword [esi + 0x20]
lea ecx, [esi + ebx]
add ecx, 0xd8
mov eax, dword [esi + 0x14]
mov eax, dword [esi + eax + 0xd8]
mov dword [esi + 0x18], eax
mov dword [esi + 0x3c], ecx
mov edx, ecx
mov eax, dword [esi + 0x30]
mov ecx, dword [esi + 0x24]
cmp dword [esi + eax + 0xd8], ecx
jbe 0x443fad
mov edx, dword [esi + ebx + 0xd8]
mov dword [esi + 8], edx
mov eax, dword [esi + 0x14]
mov edi, dword [esi + eax + 0x7c]
mov ecx, dword [esi + 0x30]
mov edx, dword [esi + ecx + 0x7c]
mov dword [esi + 4], edx
sub edx, edi
mov ecx, dword [esi + 0x18]
cmp edx, ecx
lea ebx, [esi + ebx + 0x7c]
nop
mov dword [esi + 0x40], ebx
jae 0x443fff
nop
mov dword [esi + 0x1a0], 0xb
sub esp, 0x10
movzx eax, byte [esi + 0x54]
mov byte [esp + 4], al
mov dword [esp + 0xc], ecx
mov eax, dword [esi + 8]
mov dword [esp + 8], eax
mov dword [esp], ecx
mov ecx, ebx
call fcn.00459820
jmp 0x44405d
nop
mov dword [esi + 0x1c], edi
add ecx, edi
mov dword [esi + 0x10], ecx
mov dword [esi + eax + 0x7c], ecx
mov eax, dword [esi + 4]
cmp eax, dword [esi + 0x24]
jbe 0x444019
mov ecx, dword [esi + 0x40]
mov ebx, dword [ecx]
mov edx, dword [0x836384]
mov ecx, dword [0x836350]
sub ecx, dword [esi + 0x2c]
add ecx, edx
mov eax, dword [esi + 0x1c]
lea eax, [ebx + eax*2]
mov dword [esi + 4], eax
mov edi, dword [esi + 0x18]
add edi, edi
mov dword [esi + 0x1a0], 0xffffffff
call dword [0x834360]
push edi
push dword [esi + 8]
push dword [esi + 4]
call ecx
add esp, 0xc
mov eax, dword [esi + 0x10]
mov word [ebx + eax*2], 0
nop
mov ecx, dword [esi + 0x14]
mov dword [esi + ecx + 0x54], 0
mov eax, dword [esi + 0x30]
mov dword [esi + eax + 0x54], 0
mov eax, dword [esi + 0xc]
xor eax, 0x7bdbd6c9
mov dword [esi + 8], eax
mov edx, dword [esi + 0x28]
mov eax, dword [edx + eax]
mov dword [esi + 4], eax
mov edi, edx
mov eax, dword [esi + 0x24]
cmp dword [edx + ecx], eax
jbe 0x444094
mov edi, dword [edx]
mov dword [esi + 0x1c], edi
mov eax, dword [esi + 0x20]
lea edx, [esi + eax]
add edx, 0x54
mov edi, dword [esi + 0xc]
mov eax, edi
xor eax, 0x7bdbd6d1
mov dword [esi + 0x18], eax
mov ebx, dword [esi + 4]
cmp ebx, eax
nop
mov dword [esi + 0x10], edx
jae 0x44410b
nop
mov eax, dword [0x836388]
mov ecx, dword [0x836364]
sub ecx, dword [esi + 0x2c]
add ecx, eax
mov dword [esi + 0x1a0], 0xffffffff
mov edi, edx
call dword [0x834360]
push dword [esi + 8]
push dword [esi + 0x1c]
push edi
call ecx
add esp, 0xc
mov edi, dword [esi + 0x14]
mov dword [esi + edi + 0x54], ebx
mov ecx, dword [esi + 0x30]
mov eax, dword [esi + 0x24]
mov dword [esi + ecx + 0x54], eax
mov dword [esi + 0x54], 0x75156c
nop
mov eax, dword [esi + 0x10]
mov dword [esi + 0x1c], eax
jmp 0x4441f9
nop
or ebx, dword [esi + 0x24]
cmp ebx, 0x7ffffffe
mov edx, 0x7ffffffe
cmovb edx, ebx
mov eax, edi
xor eax, 0x7bdbd127
cmp ebx, eax
mov dword [esi + 0x38], edx
lea eax, [edx + edx]
jbe 0x444182
mov edx, edi
xor edx, 0x4242937
cmp ebx, edx
mov dword [esi + 0x1a0], 0xb
jae 0x444fc1
mov ecx, edi
xor ecx, 0x7bdbd6fc
add eax, ecx
push eax
call fcn.0071993d
add esp, 4
nop
mov edx, dword [esi + 0xc]
mov edi, edx
xor edi, 0x7bdbd6fa
add edi, eax
mov ecx, edx
xor ecx, 0x7bdbd6c6
or edi, ecx
xor edi, ecx
mov ecx, edx
xor ecx, 0x84242925
mov dword [edi + ecx], eax
jmp 0x44419a
add eax, 2
mov dword [esi + 0x1a0], 0xb
push eax
call fcn.0071993d
add esp, 4
mov edi, eax
nop
mov eax, dword [esi + 0x10]
mov dword [eax], edi
mov eax, dword [0x836388]
mov ecx, dword [0x836364]
sub ecx, dword [esi + 0x2c]
add ecx, eax
mov ebx, dword [esi + 4]
lea eax, [ebx*2 + 2]
mov dword [esi + 0x34], eax
mov dword [esi + 0x1a0], 0xffffffff
call dword [0x834360]
push dword [esi + 0x34]
push dword [esi + 0x1c]
push edi
call ecx
add esp, 0xc
mov edi, dword [esi + 0x14]
mov dword [esi + edi + 0x54], ebx
mov ecx, dword [esi + 0x30]
mov eax, dword [esi + 0x38]
mov dword [esi + ecx + 0x54], eax
mov dword [esi + 0x54], 0x75156c
mov eax, dword [esi + 0x10]
mov eax, dword [eax]
mov dword [esi + 0x1c], eax
nop
mov eax, dword [esi + edi + 0x7c]
mov ecx, dword [esi + ecx + 0x7c]
mov edx, ecx
sub edx, eax
cmp edx, ebx
jae 0x44423b
nop
mov dword [esi + 0x1a0], 0xc
sub esp, 0x10
movzx eax, byte [esi + 0xbc]
mov byte [esp + 4], al
mov dword [esp + 0xc], ebx
mov eax, dword [esi + 0x1c]
mov dword [esp + 8], eax
mov dword [esp], ebx
mov ecx, dword [esi + 0x40]
call fcn.00459820
jmp 0x444288
add ebx, eax
mov dword [esi + 0x38], ebx
mov dword [esi + edi + 0x7c], ebx
mov edi, dword [esi + 0x40]
cmp ecx, dword [esi + 0x24]
jbe 0x444251
mov ecx, dword [esi + 0x40]
mov edi, dword [ecx]
mov edx, dword [0x836384]
mov ecx, dword [0x836350]
sub ecx, dword [esi + 0x2c]
add ecx, edx
lea eax, [edi + eax*2]
mov dword [esi + 0x34], eax
mov ebx, dword [esi + 4]
add ebx, ebx
call dword [0x834360]
push ebx
push dword [esi + 0x1c]
push dword [esi + 0x34]
call ecx
add esp, 0xc
mov eax, dword [esi + 0x38]
mov word [edi + eax*2], 0
nop
mov dword [esi + 0x1a0], 0xc
lea ecx, [esi + 0xbc]
push 0x751560
call fcn.00587490
nop
mov eax, dword [esi + 0x20]
lea ecx, [esi + eax]
add ecx, 0xbc
mov eax, dword [esi + 0x14]
mov edi, dword [esi + eax + 0xbc]
mov dword [esi + 0x38], ecx
mov edx, ecx
mov eax, dword [esi + 0x30]
mov ecx, dword [esi + 0x24]
cmp dword [esi + eax + 0xbc], ecx
jbe 0x4442d8
mov eax, dword [esi + 0x20]
mov edx, dword [esi + eax + 0xbc]
mov dword [esi + 4], edx
mov ebx, dword [esi + 0x14]
mov eax, dword [esi + ebx + 0x7c]
mov ecx, dword [esi + 0x30]
mov ecx, dword [esi + ecx + 0x7c]
mov edx, ecx
sub edx, eax
cmp edx, edi
jae 0x444322
nop
mov dword [esi + 0x1a0], 0xd
sub esp, 0x10
movzx eax, byte [esi + 0x98]
mov byte [esp + 4], al
mov dword [esp + 0xc], edi
mov eax, dword [esi + 4]
mov dword [esp + 8], eax
mov dword [esp], edi
mov ecx, dword [esi + 0x40]
call fcn.00459820
jmp 0x44437d
nop
mov dword [esi + 0x34], eax
add eax, edi
mov dword [esi + 0x1c], eax
mov dword [esi + ebx + 0x7c], eax
mov ebx, dword [esi + 0x40]
cmp ecx, dword [esi + 0x24]
jbe 0x44433c
mov ecx, dword [esi + 0x40]
mov ebx, dword [ecx]
mov edx, dword [0x836384]
mov ecx, dword [0x836350]
sub ecx, dword [esi + 0x2c]
add ecx, edx
mov eax, dword [esi + 0x34]
lea eax, [ebx + eax*2]
mov dword [esi + 0x34], eax
add edi, edi
mov dword [esi + 0x1a0], 0xffffffff
call dword [0x834360]
push edi
push dword [esi + 4]
push dword [esi + 0x34]
call ecx
add esp, 0xc
mov eax, dword [esi + 0x1c]
mov word [ebx + eax*2], 0
nop
mov eax, dword [0x7514c8]
mov dword [esi + 0x44], eax
mov eax, dword [0x75194c]
mov dword [esi + 0x1c], eax
mov eax, 0x752a44
add eax, dword [0x752a44]
mov dword [esi + 0x78], eax
mov dword [esi + 0x1a0], 0xd
call dword [0x83429c]
lea ecx, [esi + 0x7c]
push eax
call fcn.00458e50
nop
mov eax, dword [esi + 0x30]
mov eax, dword [esi + eax + 0xbc]
cmp eax, dword [esi + 0x24]
jbe 0x44441d
lea ecx, [eax + eax]
mov edx, ecx
xor edx, 2
and eax, 1
lea edx, [edx + eax*4]
mov ebx, dword [esi + 0xc]
mov eax, ebx
xor eax, 0x7bdbd926
cmp edx, eax
mov eax, dword [esi + 0x38]
mov eax, dword [eax]
jbe 0x444412
mov edx, ebx
xor edx, 0x84242925
lea edi, [eax + edx]
mov eax, dword [eax + edx]
sub edi, eax
mov edx, ebx
xor edx, 0x7bdbd6f9
cmp edi, edx
jae 0x444fc6
mov edx, ebx
xor edx, 0x7bdbd6fc
add ecx, edx
mov edx, ecx
nop
push edx
push eax
call fcn.0071996d
add esp, 8
nop
mov eax, dword [esi + 0x30]
mov ecx, dword [esi + eax + 0x54]
cmp ecx, dword [esi + 0x24]
jbe 0x444481
lea edx, [ecx*2 + 2]
mov ebx, dword [esi + 0xc]
mov eax, ebx
xor eax, 0x7bdbd926
cmp edx, eax
mov eax, dword [esi + 0x10]
mov eax, dword [eax]
jbe 0x444476
mov edx, ebx
xor edx, 0x84242925
lea edi, [eax + edx]
mov eax, dword [eax + edx]
sub edi, eax
mov edx, ebx
xor edx, 0x7bdbd6f9
cmp edi, edx
jae 0x444fd6
add ecx, ecx
mov edx, ebx
xor edx, 0x7bdbd6fc
add edx, ecx
add edx, dword [0x889928]
nop
push edx
push eax
call fcn.0071996d
add esp, 8
nop
mov eax, dword [esi + 0x30]
mov ecx, dword [esi + eax + 0xd8]
cmp ecx, dword [esi + 0x24]
jbe 0x4444e2
lea edx, [ecx*2 + 2]
mov ebx, dword [esi + 0xc]
mov eax, ebx
xor eax, 0x7bdbd926
cmp edx, eax
mov eax, dword [esi + 0x3c]
mov eax, dword [eax]
jbe 0x4444d7
mov edx, ebx
xor edx, 0x84242925
lea edi, [eax + edx]
mov eax, dword [eax + edx]
sub edi, eax
mov edx, ebx
xor edx, 0x7bdbd6f9
cmp edi, edx
jae 0x444fe6
add ecx, ecx
mov edx, ebx
xor edx, 0x7bdbd6fc
add edx, ecx
nop
push edx
push eax
call fcn.0071996d
add esp, 8
nop
mov eax, dword [esi + 0x48]
mov ecx, dword [esi + 0x20]
mov eax, dword [eax + ecx]
mov eax, dword [eax]
mov edx, dword [esi + 0xc]
mov ecx, edx
xor ecx, 0x7bdbd2fd
xor edx, 0x7bdbd6d5
mov edi, dword [esi + 0x30]
mov ebx, dword [esi + 0x24]
cmp dword [esi + edi + 0x7c], ebx
mov edi, dword [esi + 0x20]
mov ebx, dword [esi + edi + 0x7c]
mov edi, dword [esi + 0x40]
cmova edi, ebx
mov eax, dword [eax + ecx]
mov dword [esi + 0x10], eax
mov ecx, dword [esi + 0x48]
mov eax, dword [ecx + edx]
mov dword [esi + 4], eax
cmp byte [0x889ae1], 0
cmovne edi, ebx
mov eax, dword [esi + 0x18]
mov ebx, dword [ecx + eax]
mov dword [esi + 0x1a0], 0xffffffff
mov ecx, dword [esi + 0x10]
call dword [0x834360]
mov dword [esi + 0x1a0], 6
sub esp, 0x28
mov eax, dword [esi + 4]
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], ebx
xorps xmm0, xmm0
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], edi
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp], 0
call ecx
nop
mov edx, dword [esi + 0x48]
mov ecx, dword [edx]
mov dword [ecx], eax
mov eax, dword [edx]
cmp dword [eax], 0
je 0x444d79
nop
mov eax, dword [esi + 0x48]
mov ecx, dword [esi + 8]
mov eax, dword [eax + ecx]
mov edx, dword [0x889950]
mov dword [esi + 0x10], 0
mov ecx, dword [esi + 0x18]
add edx, dword [eax + ecx]
mov dword [esi + 4], edx
je 0x4445c3
mov ecx, dword [esi + 0x20]
mov eax, dword [eax + ecx]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 0x24]
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0x28]
cmp dword [edx + ecx], eax
jbe 0x4445d3
mov edx, dword [edx]
mov eax, dword [esi + 0xc]
mov edi, eax
xor edi, 0x7bdbd6f9
xor eax, 0x7bdbd699
lea ecx, [esi + 0xd8]
push 1
push eax
mov dword [esi + 0x3c], edi
push edi
push edx
call fcn.004629e0
nop
mov eax, dword [esi + 0xd8]
mov edx, dword [esi + 0x20]
lea ebx, [esi + 0xd8]
add ebx, dword [eax + edx]
mov ecx, dword [esi + 0xc]
mov eax, ecx
xor eax, 0x7bdbd6e1
mov dword [esi + 0x34], eax
mov eax, dword [eax + ebx]
test eax, eax
mov dword [esi + 0x98], eax
sete al
or al, byte [0x889ae0]
and al, 1
mov edi, dword [esi + 8]
mov dword [esi + edi + 0x54], 0
mov dword [esi + 0xbc], 0
mov byte [esi + edx + 0xbc], 1
mov byte [esi + edx + 0x98], al
mov eax, ecx
xor eax, 0x7bdbd6dc
mov byte [esi + eax + 0xbc], 0
mov byte [esi + eax + 0x98], 0
xor ecx, 0x7bdbd6d6
mov eax, dword [esi + 0x14]
mov dword [esi + 0x28], ecx
mov dword [esi + eax + 0x54], ecx
mov byte [esi + 0x54], 0
mov dword [esi + 0x1a0], 0xa
sub esp, 0x14
movzx eax, byte [esi + 0x50]
mov byte [esp + 0x10], al
movsd xmm0, qword [esi + 0xbc]
movsd qword [esp + 8], xmm0
movsd xmm0, qword [esi + 0x98]
movsd qword [esp], xmm0
lea ecx, [esi + 0x54]
call fcn.00465900
nop
mov eax, dword [esi + 4]
mov ecx, dword [esi + 8]
cmp dword [esi + ecx + 0x54], eax
jne 0x444709
nop
mov eax, dword [esi + 0x14]
mov edi, dword [esi + 0x28]
cmp dword [esi + eax + 0x54], edi
lea ebx, [esi + 0x54]
jbe 0x4446d3
mov ebx, dword [esi + 0x54]
mov eax, dword [0x83637c]
mov ecx, dword [0x836354]
sub ecx, dword [esi + 0x2c]
add ecx, eax
mov dword [esi + 0x1a0], 0xffffffff
call dword [0x834360]
push dword [esi + 4]
push dword [esi + 0x10]
push ebx
call ecx
add esp, 0xc
test eax, eax
sete al
mov dword [esi + 0x10], eax
jmp 0x444713
mov dword [esi + 0x10], 0
mov edi, dword [esi + 0x28]
nop
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + eax + 0x54]
cmp ecx, edi
jbe 0x44476d
lea edx, [ecx + 1]
mov ebx, dword [esi + 0xc]
mov eax, ebx
xor eax, 0x7bdbd926
cmp edx, eax
mov eax, dword [esi + 0x54]
jbe 0x444758
mov edx, ebx
xor edx, 0x84242925
lea edi, [eax + edx]
mov eax, dword [eax + edx]
sub edi, eax
cmp edi, dword [esi + 0x3c]
jae 0x445006
mov edx, ebx
xor edx, 0x7bdbd6fd
add ecx, edx
mov edx, ecx
nop
push edx
push eax
call fcn.0071996d
add esp, 8
mov dword [esi + 0x1a0], 0xffffffff
nop
mov eax, dword [esi + 0xd8]
mov ecx, dword [esi + 0x20]
mov eax, dword [eax + ecx]
mov dword [esi + eax + 0xd8], 0x751fec
mov eax, dword [esi + 0xd8]
mov eax, dword [eax + ecx]
mov ebx, dword [esi + 0xc]
mov ecx, ebx
xor ecx, 0x84242949
add ecx, eax
add eax, esi
add eax, 0xd8
mov edx, ebx
xor edx, 0x84242925
mov dword [edx + eax], ecx
xor ebx, 0x7bdbd6a9
mov eax, dword [0x836380]
mov edi, dword [0x83636c]
sub edi, dword [esi + 0x2c]
add edi, eax
lea eax, [esi + ebx]
add eax, 0xd8
mov dword [esi + 4], eax
mov eax, dword [esi + 8]
lea eax, [esi + eax + 0xd8]
mov dword [esi + 8], eax
mov dword [esi + 0x1a0], 0xffffffff
mov ecx, edi
call dword [0x834360]
mov ecx, dword [esi + 8]
call edi
mov dword [esi + ebx + 0xd8], 0x751858
mov dword [esi + 0x1a0], 4
push dword [esi + 4]
call fcn.0071af3f
add esp, 4
nop
movzx eax, byte [esi + 0x10]
mov ecx, dword [esi + 0x48]
mov ecx, dword [ecx]
mov dword [ecx], eax
cmp byte [0x889938], 0
jne 0x444836
nop
mov eax, dword [esi + 0x48]
mov eax, dword [eax]
cmp dword [eax], 0
jne 0x444d79
nop
cmp dword [0x889b64], 0
jne 0x44487d
nop
mov eax, dword [esi + 0xc]
xor eax, 0x7bdbd3a9
mov dword [esi + 0x1a0], 6
mov dword [esi + 4], eax
push eax
call fcn.0071993d
add esp, 4
nop
mov dword [esi + 0x1a0], 9
mov dword [esi + 8], eax
mov ecx, eax
call fcn.00465c90
nop
mov eax, dword [esi + 8]
mov dword [0x889b64], eax
nop
mov eax, dword [0x838e30]
xor eax, dword [esi + 0xc]
mov dword [esi + 0x3c], eax
cmp eax, 0x8ad713ae
mov edx, dword [0x838e1c]
jne 0x4448a2
mov ecx, edx
neg ecx
shl edx, cl
and edx, ecx
xor eax, eax
jmp 0x4448b1
mov eax, edx
xor eax, 1
mov ecx, edx
and ecx, 1
lea eax, [eax + ecx*2]
and edx, eax
nop
mov ecx, dword [0x889b64]
mov dword [esi + 0x70], ecx
mov dword [0x838e1c], eax
mov dword [esi + 0xa0], edx
test edx, edx
nop
mov edx, dword [esi + 0x78]
je 0x444dec
mov dword [esi + 4], 0
xor eax, eax
mov edx, dword [esi + 0xc]
cmp dword [0x838e48], edx
setne al
lea ecx, [eax + eax*8 + 0x2fc]
mov dword [esi + 8], ecx
lea eax, [eax + eax*8]
mov ecx, dword [esi + 0x70]
mov edi, dword [ecx + eax + 0x2fc]
test edi, edi
je 0x44493b
nop
mov eax, dword [0x83638c]
mov ebx, dword [0x836360]
sub ebx, dword [esi + 0x2c]
add ebx, eax
mov dword [esi + 0x1a0], 0xffffffff
mov ecx, ebx
call dword [0x834360]
mov ecx, edi
call ebx
mov eax, dword [esi + 0xc]
xor eax, 0x7bdbd6e9
push eax
push edi
call fcn.0071996d
add esp, 8
nop
mov eax, dword [esi + 0x70]
mov ecx, dword [esi + 8]
mov dword [eax + ecx], 0
mov eax, dword [0x889b24]
test eax, eax
je 0x444a7f
nop
mov ecx, dword [esi + 0x14]
mov eax, dword [eax + ecx]
mov ebx, dword [eax]
mov dword [esi + 0x1c], eax
cmp ebx, eax
je 0x444a7f
mov eax, dword [esi + 0xc]
mov ecx, eax
xor ecx, 0x7bdbd6c5
mov dword [esi + 0x28], ecx
mov ecx, eax
xor ecx, 0x7bdbd6e5
mov dword [esi + 0x3c], ecx
mov ecx, eax
xor ecx, 0x7bdbd6b9
mov dword [esi + 0x38], ecx
mov edi, eax
xor edi, 0x7bdbd6d4
xor eax, 0x7bdbd685
mov dword [esi + 0x44], eax
mov cl, 1
jmp 0x4449c1
mov eax, ebx
nop word cs:[eax + eax]
movzx ecx, byte [esi + 8]
inc cl
mov ebx, eax
cmp eax, dword [esi + 0x1c]
je 0x444a7f
nop
mov eax, dword [esi + 0x28]
mov dword [ebx + eax], 0
mov eax, dword [esi + 0x14]
mov dword [ebx + eax], 0
mov eax, dword [esi + 0x3c]
mov eax, dword [ebx + eax]
test eax, eax
nop
mov byte [esi + 8], cl
movzx ecx, cl
je 0x4449fe
nop
push eax
push ecx
mov eax, dword [esi + 0x34]
push dword [ebx + eax]
mov dword [esi + 0x10], ecx
call fcn.007311f0
mov ecx, dword [esi + 0x10]
add esp, 0xc
nop
mov eax, dword [esi + 0x38]
mov eax, dword [ebx + eax]
test eax, eax
je 0x444a1a
nop
push eax
push ecx
mov eax, dword [esi + 0x44]
push dword [ebx + eax]
call fcn.007311f0
add esp, 0xc
nop
mov eax, dword [esi + 0x18]
mov ecx, dword [ebx + eax]
cmp byte [ecx + edi], 0
je 0x444a70
nop
mov eax, dword [esi + 0x20]
mov eax, dword [ebx + eax]
cmp byte [eax + edi], 0
jne 0x4449b0
nop dword [eax + eax]
mov ecx, ebx
mov ebx, eax
mov eax, dword [esi + 0x18]
cmp ecx, dword [ebx + eax]
jne 0x4449a2
nop
mov eax, dword [esi + 0x20]
mov eax, dword [ebx + eax]
cmp byte [eax + edi], 0
je 0x444a40
jmp 0x4449b0
mov eax, ecx
mov ecx, dword [ecx]
cmp byte [ecx + edi], 0
je 0x444a70
jmp 0x4449b0
nop
mov edi, dword [0x889bd0]
test edi, edi
je 0x444ab1
nop
mov eax, dword [edi]
mov ebx, dword [eax]
mov dword [esi + 0x1a0], 0xffffffff
mov ecx, ebx
call dword [0x834360]
mov ecx, edi
push 1
call ebx
mov dword [0x889bd0], 0
mov byte [0x889b90], 1
cmp dword [0x889b64], 0
jne 0x444afe
nop
mov eax, dword [esi + 0xc]
xor eax, 0x7bdbd3a9
mov dword [esi + 0x1a0], 6
mov dword [esi + 0x14], eax
push eax
call fcn.0071993d
add esp, 4
nop
mov dword [esi + 0x1a0], 8
mov dword [esi + 0x18], eax
mov ecx, eax
call fcn.00465c90
nop
mov eax, dword [esi + 0x18]
mov dword [0x889b64], eax
nop
mov eax, dword [0x889b64]
mov edi, dword [esi + 0xc]
mov ecx, edi
xor ecx, 0x7bdbd2c1
mov ecx, dword [eax + ecx]
test ecx, ecx
je 0x444b73
mov edx, edi
xor edx, 0x7bdbd2cd
push ecx
push 1
push dword [eax + edx]
call fcn.007311f0
add esp, 0xc
cmp dword [0x889b64], 0
jne 0x444b73
xor edi, 0x7bdbd3a9
mov dword [esi + 0x1a0], 6
mov dword [esi + 0x14], edi
push edi
call fcn.0071993d
add esp, 4
nop
mov dword [esi + 0x1a0], 7
mov dword [esi + 0x18], eax
mov ecx, eax
call fcn.00465c90
nop
mov eax, dword [esi + 0x18]
mov dword [0x889b64], eax
nop
mov edi, dword [esi + 0xc]
mov edx, edi
mov ebx, edi
xor ebx, 0x7bdbd401
mov eax, edx
xor al, 0xc9
mov ch, dl
xor ch, 0x36
add ch, al
mov eax, edi
xor edx, 0x7bdbd405
cmp dword [esi + 0xa0], 1
sbb ch, 0xff
mov cl, al
xor cl, 0x1c
mov ah, cl
sub ah, byte [esi + 4]
mov edi, dword [0x889b64]
mov dword [esi + 4], edx
mov edx, dword [edi + edx]
mov dword [esi + 0x14], edi
mov dword [esi + 8], ebx
mov edi, dword [edi + ebx]
add ah, byte [0x751948]
mov ebx, dword [0x838e38]
xor ebx, dword [esi + 0xc]
cmp ebx, 0x4ec2ac66
jne 0x444bec
dec ah
mov al, ch
sub al, ah
mul ah
xor al, ch
sub al, ch
mul ch
mov cl, al
sub al, ch
mul ch
mov ah, al
sub ah, cl
and ah, al
jmp 0x444bf0
sub ah, cl
and ah, ch
movzx ecx, ah
mov eax, dword [0x838e34]
xor eax, dword [esi + 0xc]
cmp eax, 0xa8071c9a
mov eax, dword [0x889928]
jne 0x444c1a
mov ebx, eax
shl ebx, cl
mov ecx, ebx
sub ecx, eax
imul ecx, ebx
inc ecx
imul ecx, ebx
mov eax, ecx
jmp 0x444c1c
add eax, ecx
mov ecx, dword [esi + 0x14]
nop
mov dword [0x889928], eax
sub edx, edi
test edx, edx
jle 0x444cb2
mov eax, dword [esi + 0xc]
mov edx, eax
xor edx, 0x7bdbd659
mov dword [esi + 0x10], edx
mov edx, eax
xor edx, 0x7bdbd6a5
mov dword [esi + 0x28], edx
mov edx, eax
xor edx, 0x7bdbd6fd
mov dword [esi + 0x3c], edx
xor eax, 0x7bdbd649
mov dword [esi + 0x1c], eax
xor eax, eax
jmp 0x444c7d
nop
mov ebx, dword [esi + 0x18]
inc ebx
mov eax, dword [esi + 4]
mov eax, dword [ecx + eax]
mov edx, dword [esi + 8]
mov edi, dword [ecx + edx]
sub eax, edi
cdq
idiv dword [esi + 0x1c]
cmp ebx, eax
mov eax, ebx
jge 0x444cb2
nop
mov dword [esi + 0x18], eax
lea eax, [eax + eax*8]
shl eax, 4
add eax, edi
mov edx, dword [esi + 0x10]
cmp dword [edx + eax], 0
je 0x444c60
nop
mov edx, dword [esi + 0x3c]
mov edx, dword [eax + edx]
add eax, dword [esi + 0x28]
mov dword [esi + 0x1a0], 6
push eax
push edx
call fcn.005d3ae0
mov ecx, dword [esi + 0x14]
jmp 0x444c60
nop
mov eax, dword [esi + 0xc]
mov edx, eax
xor edx, 0x7bdbd435
xor eax, 0x7bdbd429
mov dword [esi + 4], eax
mov eax, dword [ecx + eax]
mov dword [esi + 8], edx
sub eax, dword [ecx + edx]
test eax, eax
jle 0x444d07
nop
mov dword [esi + 0x1a0], 6
xor edi, edi
nop
push 0
mov dword [esi + 0x18], edi
push edi
call fcn.005d3ae0
mov ecx, dword [esi + 0x14]
nop
mov edi, dword [esi + 0x18]
inc edi
mov eax, dword [esi + 4]
mov eax, dword [ecx + eax]
mov edx, dword [esi + 8]
sub eax, dword [ecx + edx]
sar eax, 2
cmp edi, eax
jl 0x444ce0
nop
movaps xmm0, xmmword [0x750910]
movups xmmword [0x87d377], xmm0
movups xmmword [0x87d367], xmm0
movups xmmword [0x87d357], xmm0
movups xmmword [0x87d347], xmm0
mov eax, dword [esi + 0x48]
mov ecx, dword [esi + 0x20]
mov eax, dword [eax + ecx]
mov eax, dword [eax]
mov ecx, dword [esi + 0xc]
xor ecx, 0x7bdbd739
mov eax, dword [eax + ecx]
mov dword [esi + 0x20], eax
mov dword [esi + 0x1a0], 6
call dword [0x8342ac]
mov edi, eax
mov dword [esi + 0x1a0], 0xffffffff
mov ecx, dword [esi + 0x20]
call dword [0x834360]
mov dword [esi + 0x1a0], 6
push 0xffffffffffffffff
push edi
call ecx
nop
mov eax, dword [esi + 0x30]
mov ecx, dword [esi + eax + 0x7c]
cmp ecx, dword [esi + 0x24]
jbe 0x444dd7
lea edx, [ecx*2 + 2]
mov ebx, dword [esi + 0xc]
mov eax, ebx
xor eax, 0x7bdbd926
cmp edx, eax
mov eax, dword [esi + 0x40]
mov eax, dword [eax]
jbe 0x444dcc
mov edx, ebx
xor edx, 0x84242925
lea edi, [eax + edx]
mov eax, dword [eax + edx]
sub edi, eax
mov edx, ebx
xor edx, 0x7bdbd6f9
cmp edi, edx
jae 0x444ff6
add ecx, ecx
xor ebx, 0x7bdbd6fc
add ebx, ecx
mov edx, ebx
nop
push edx
push eax
call fcn.0071996d
add esp, 8
nop
mov eax, dword [esi + 0x198]
mov dword fs:[0], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
nop
mov ebx, dword [edx]
cmp dword [esi + 0x1c], 0
jle 0x4448d2
mov eax, 0x7514c8
mov edi, dword [esi + 0x44]
mov ecx, edi
not ecx
and ecx, eax
not eax
and edi, eax
or eax, ecx
or edi, ecx
not eax
lea eax, [edi + eax*2]
mov dword [esi + 0x38], eax
add ebx, edx
mov dword [esi + 8], ebx
mov edx, dword [esi + 0xc]
mov eax, edx
xor eax, 0x5bf5f4c8
mov ecx, edx
xor ecx, 0x5d4195bf
mov edi, edx
shr edi, 1
mov ebx, edx
shl ebx, 0x1f
xor ebx, edx
xor ebx, 0x22be6a40
xor edi, 0xe23c3682
add ebx, ecx
adc edi, eax
add ebx, 1
mov dword [esi + 0xb0], ebx
adc edi, 0
mov dword [esi + 0xb4], edi
mov eax, edx
xor al, 0xda
mov byte [esi + 0x4f], al
mov eax, edx
xor eax, 0xf17c20d5
mov ecx, edx
xor ecx, 0xe83df2a
mov dword [esi + 0xa8], ecx
xor edx, 0xe193c9e7
mov dword [esi + 0xa4], edx
sub eax, edx
mov dword [esi + 0xac], eax
xor ebx, ebx
mov dword [esi + 4], 0
mov dword [esi + 0x28], 0
mov dword [esi + 0x74], 0
jmp 0x444ec2
mov eax, dword [esi + 4]
xor al, ch
mov dword [esi + 4], eax
inc ebx
cmp ebx, dword [esi + 0x1c]
jge 0x4448d9
mov eax, dword [esi + 0x38]
lea ecx, [eax + ebx]
cmp dword [esi + 0x3c], 0x70845d22
jne 0x444ee0
mov edx, dword [esi + 8]
sub edx, ecx
mov eax, dword [esi + 0x28]
sbb eax, 0
jmp 0x444f47
nop
mov edx, dword [esi + 8]
shl edx, cl
mov dword [esi + 0xb8], edx
test cl, 0x20
mov edi, 0
cmovne edx, edi
mov eax, edx
shl eax, cl
mov dword [esi + 0x10], eax
test cl, 0x20
mov eax, dword [esi + 0x10]
cmovne eax, edi
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x28]
mov edi, dword [esi + 8]
shld eax, edi, cl
test cl, 0x20
cmovne eax, dword [esi + 0xb8]
mov edi, eax
shld edi, edx, cl
test cl, 0x20
cmovne edi, dword [esi + 0x10]
add edx, dword [esi + 0xb0]
adc eax, dword [esi + 0xb4]
sub edx, dword [esi + 0x44]
sbb eax, edi
mov dword [0x838e38], 0xecb60ec4
add ecx, dword [esi + 0x18]
cmp edx, 1
sbb eax, 0
mov ch, byte [ecx]
jge 0x444eb0
mov eax, edx
mov cl, byte [esi + 0x4f]
shl al, cl
mov ah, 0xff
mov cl, al
shl ah, cl
not ah
and ch, ah
mov byte [esi + 0x44], ch
mov edi, dword [esi + 0x20]
mov eax, edi
xor eax, edx
add eax, dword [esi + 0xa8]
and edx, edi
lea eax, [eax + edx*2]
mov edx, eax
mov edi, dword [esi + 0xa4]
xor edx, edi
add ebx, dword [esi + 0xac]
add ebx, edx
mov ecx, dword [esi + 0x74]
lea edx, [ecx + 1]
mov dword [esi + 0x10], edx
and eax, edi
lea ebx, [ebx + eax*2]
mov eax, dword [esi + 0x78]
lea edi, [eax + ecx*4]
add edi, 4
add edi, dword [eax + ecx*4 + 4]
mov ch, byte [esi + 0x44]
mov dword [esi + 8], edi
mov dword [esi + 0x28], 0
nop
mov eax, dword [esi + 0x10]
mov dword [esi + 0x74], eax
jmp 0x444eb0
call fcn.00455870
nop
mov dword [esi + 0x1a0], 0
call fcn.006fce21
nop
mov dword [esi + 0x1a0], 1
call fcn.006fce21
nop
mov dword [esi + 0x1a0], 2
call fcn.006fce21
nop
mov dword [esi + 0x1a0], 5
call fcn.006fce21
nop
mov dword [esi + 0x1a0], 3
call fcn.006fce21
nop word cs:[eax + eax]
push ebp
sub esp, 0x28
lea esi, [ebp - 0x1a4]
mov ebp, dword [esi + 0x190]
nop
push dword [esi + 0x14]
push dword [esi + 0x18]
call fcn.0071996d
add esp, 8
add esp, 0x28
pop ebp
ret