Function at 0x44e302
Capabilities:
Create thread

Disassembly:
push 0x154
mov eax, 0x4d685c
call fcn.004a9c2e
mov ebx, ecx
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x60]
push esi
push eax
call fcn.00450e57
and dword [ebp - 4], 0
lea eax, [ebp - 0xb8]
push esi
push eax
mov ecx, ebx
call fcn.004510f9
mov byte [ebp - 4], 1
mov al, byte [ebp + 0x10]
test al, al
je 0x44e35b
lea eax, [ebp - 0x60]
mov ecx, ebx
push eax
call fcn.0044d66a
test al, al
je 0x44e358
push dword [ebp - 0xb8]
jmp 0x44f444
mov al, byte [ebp + 0x10]
cmp dword [ebx + 0x110], 0
jne 0x44e372
push 0x1778
mov ecx, ebx
call fcn.00445047
jmp 0x44e34d
cmp byte [ebp + 0xc], 0
je 0x44e393
test al, al
je 0x44e38d
lea edx, [ebp - 0x60]
mov ecx, str._exe_bat_ps1_com_chm_msi_doc_xls_ppt_pps_wps_wpt_wks_xlr_wdb_vsd_pub_docx_docm_dotx_dotm_xlsx_xlsm_xltx_xltm_xlsb_xps_xlam_pptx_pptm_potx_potm_ppam_ppsx_ppsm_xsn_mpp_msg_dwf_flv_swf_odt_ods_wb3_pdf
call fcn.0044cce3
test al, al
jne 0x44e393
mov byte [ebp + 0xf], 1
jmp 0x44e397
mov byte [ebp + 0xf], 0
push dword [ebp - 0xb4]
mov edi, dword [ebp - 0xb8]
lea eax, [ebx + 0xe0]
push edi
push dword [eax + 4]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0xe8], eax
push dword [eax]
call fcn.00402a7d
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x30], 0
call fcn.00402b1a
push 0x4f4f0c
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 3
call fcn.004057fd
test al, al
jne 0x44e416
push str.6789
lea ecx, [ebp + 0x10]
call fcn.0042335e
push ecx
mov byte [ebp - 4], 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov ecx, ebx
call fcn.00444f54
mov ecx, dword [ebp + 0x10]
lea ecx, [ecx - 0x10]
call fcn.004238e7
mov byte [ebp - 4], 5
jmp 0x44f429
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x90]
call fcn.00402be8
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x84]
call fcn.00402be8
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 7
call fcn.00407188
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x6c]
call fcn.004199f6
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x54]
push dword [eax + 4]
mov esi, dword [ebp - 0x84]
push dword [eax]
push dword [ebp - 0x80]
push esi
call fcn.00402a7d
mov byte [ebp - 4], 0xa
push dword [ebp - 0x6c]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0x160]
call fcn.00449208
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x160], eax
lea eax, [ebp - 0xb8]
push eax
call fcn.00402ccc
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x150]
call fcn.00402ccc
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x144]
call fcn.00402ccc
cmp byte [ebp + 0xf], 0
mov byte [ebp - 0x100], 1
je 0x44e6b1
and dword [ebp - 0x14], 0
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x14]
mov eax, dword [ebx + 0xfc]
push edx
push 0x4f2608
push eax
mov ecx, dword [eax]
call dword [ecx]
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x44e6a3
and dword [ebp - 0x18], 0
lea edx, [ebp - 0x18]
mov byte [ebp - 4], 0xd
mov ecx, dword [eax]
push edx
push dword [ebp + 8]
push eax
call dword [ecx + 0xc]
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x44e692
and dword [ebp - 0x20], 0
lea edx, [ebp - 0x20]
mov byte [ebp - 4], 0xe
mov ecx, dword [eax]
push edx
push 0x4f2528
push eax
call dword [ecx]
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x44e681
cmp dword [ebp + 0x1c], 0
lea ecx, [ebp - 0x6c]
mov eax, 0x4effd0
cmovne eax, dword [ebp + 0x1c]
push eax
call fcn.00402b61
push ecx
lea eax, [ebp + 0xf]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x6c]
mov ecx, ebx
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x160]
push eax
push dword [ebp - 0x20]
call fcn.0044c93f
mov byte [ebp - 4], 0xe
push dword [ebp - 0x6c]
mov dword [ebp + 0xc], eax
call fcn.004a8d17
mov eax, dword [ebp + 0xc]
pop ecx
test eax, eax
jne 0x44e5fd
mov ecx, ebx
mov byte [ebp - 0x30], al
call fcn.0044fe80
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x44e5ab
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x44e5bc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x44e5cd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x160]
call fcn.00444060
push dword [ebp - 0x54]
call fcn.004a8d17
pop ecx
push esi
call fcn.004a8d17
pop ecx
push dword [ebp - 0x90]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x13
jmp 0x44f429
cmp eax, 0x80004004
je 0x44e796
cmp eax, 1
jne 0x44e796
cmp byte [ebp + 0x10], 0
jne 0x44e67a
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x44e628
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x19
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x44e639
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x44e64a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x160]
call fcn.00444060
push dword [ebp - 0x54]
call fcn.004a8d17
pop ecx
push esi
call fcn.004a8d17
pop ecx
push dword [ebp - 0x90]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x1b
jmp 0x44f429
mov eax, dword [ebp - 0x20]
mov byte [ebp + 0xf], 0
mov byte [ebp - 4], 0x1c
test eax, eax
je 0x44e68f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 0x1d
test eax, eax
je 0x44e6a0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 0x1e
test eax, eax
je 0x44e6b1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
push dword [ebp + 8]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x1f
call fcn.00401c32
xor eax, eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0xa0]
mov byte [ebp - 0xd], al
call fcn.00402b1a
mov byte [ebp - 4], 0x21
mov eax, dword [ebx + 0xf0]
test eax, eax
je 0x44e729
mov ecx, eax
mov eax, dword [ebx + 0xec]
mov ecx, dword [eax + ecx*4 - 4]
mov al, byte [ecx + 0x7c]
mov byte [ebp - 0xd], al
lea eax, [ecx + 0x80]
push eax
lea ecx, [ebp - 0xa0]
call fcn.00402ccc
mov eax, dword [ebx + 0xf0]
and dword [ebp - 0x38], 0
and dword [ebp - 0x34], 0
mov byte [ebp - 4], 0x22
test eax, eax
je 0x44e778
mov eax, dword [ebx + 0xec]
mov edx, dword [eax]
cmp byte [edx + 0x8c], 0
jne 0x44e778
cmp dword [edx + 0x20], 0
je 0x44e778
push 0x4f4ee8
add edx, 0x1c
lea ecx, [ebp - 0x48]
call fcn.00402ae8
pop ecx
mov byte [ebp - 4], 0x23
lea edx, [ebp - 0x38]
mov ecx, dword [eax]
call fcn.0044e215
push dword [ebp - 0x48]
call fcn.004a8d17
pop ecx
xor ecx, ecx
xor esi, esi
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0xe4], esi
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 0x24
cmp eax, 0xffffffff
jne 0x44e7f9
mov byte [ebp - 0x19], cl
jmp 0x44e806
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x44e7a7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x44e7b8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x44e7c9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x160]
call fcn.00444060
push dword [ebp - 0x54]
call fcn.004a8d17
pop ecx
push esi
call fcn.004a8d17
pop ecx
push dword [ebp - 0x90]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x17
jmp 0x44f429
push 0x3f
push eax
mov ecx, ebx
call fcn.00451221
mov byte [ebp - 0x19], al
lea ecx, [ebp - 0xe0]
call fcn.0042d002
mov al, byte [ebp - 0x19]
mov byte [ebp - 4], 0x25
cmp byte [ebp + 0xf], 0
mov byte [ebp - 0xdd], 1
mov byte [ebp - 0xdc], al
je 0x44e9a7
xor eax, eax
and dword [ebp - 0xf0], eax
mov dword [ebp - 0xf8], eax
mov byte [ebp - 4], 0x26
lea edx, [ebp - 0xf8]
mov eax, dword [ebx + 0xfc]
push edx
push 7
push dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
and dword [ebp - 0x20], 0
cmp byte [0x514823], 0
mov dword [ebp - 0x94], 0x400000
je 0x44e88b
mov ecx, dword [0x514980]
mov eax, dword [0x514984]
shrd ecx, eax, 2
shr eax, 2
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x20], eax
xorps xmm0, xmm0
lea edx, [ebp - 0x48]
lea ecx, [ebp - 0xf8]
movlpd qword [ebp - 0x48], xmm0
call fcn.0040c223
mov ecx, dword [ebp - 0x94]
test al, al
jne 0x44e8b5
mov eax, dword [ebp - 0x20]
mov edx, ecx
mov dword [ebp - 0x18], eax
jmp 0x44e8c1
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x18], eax
ja 0x44e98e
jb 0x44e8d7
cmp edx, ecx
ja 0x44e98e
xor ecx, ecx
cmp dword [ebp - 0x18], ecx
ja 0x44e8e6
cmp edx, ecx
jbe 0x44e98e
push 0x48
mov byte [ebp - 0xe0], 1
call fcn.004a8eb3
pop ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x94], eax
xor ecx, ecx
mov dword [eax + 4], ecx
mov dword [eax], vtable.CVirtFileSystem.0
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x20], ecx
mov dword [eax + 0x24], ecx
mov dword [eax + 0x28], ecx
mov dword [eax + 0x2c], ecx
lea esi, [eax + 0x38]
mov byte [ebp - 4], 0x29
or dword [eax + 0x30], 0xffffffff
mov ecx, esi
or dword [eax + 0x34], 0xffffffff
call fcn.00402b1a
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0xe4]
call fcn.0040aa0d
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x14]
add ecx, 0x400
mov edx, dword [ebp - 0x18]
adc edx, 0
mov dword [eax + 0x30], ecx
mov ecx, esi
mov dword [eax + 0x34], edx
lea eax, [ebp - 0x84]
push eax
call fcn.00402ccc
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov esi, dword [ebp - 0xe4]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov word [eax + 0x18], cx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 0x25
cmp word [ebp - 0xf8], 0
je 0x44e9a7
lea ecx, [ebp - 0xf8]
call fcn.0040870b
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00402ccc
lea eax, [ebp - 0xa0]
mov byte [ebp - 0xdb], 1
push eax
lea eax, [ebp - 0xd]
mov ecx, ebx
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0xe0]
push eax
call fcn.00446224
cmp dword [ebx + 0xf0], 0
mov dword [ebp - 0x40], eax
jbe 0x44ea18
mov edx, dword [ebx + 0xf0]
mov ecx, dword [ebx + 0xec]
mov al, byte [ebp - 0xd]
mov ecx, dword [ecx + edx*4 - 4]
mov byte [ecx + 0x7c], al
lea eax, [ebp - 0xa0]
push eax
sub ecx, 0xffffff80
call fcn.00402ccc
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0xa8], 0
je 0x44eaa8
lea ecx, [ebp - 0xcc]
call fcn.00401bb4
push dword [ebp - 0xd8]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x2a
test esi, esi
je 0x44ea4a
mov eax, dword [esi]
push esi
call dword [eax + 8]
push dword [ebp - 0x38]
call fcn.004a8d17
pop ecx
push dword [ebp - 0xa0]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0xac]
call fcn.00401bb4
push dword [ebp - 0x6c]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0x160]
call fcn.00444060
push dword [ebp - 0x54]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x84]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x90]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x2b
jmp 0x44f429
test eax, eax
je 0x44eb42
cmp eax, 0x80004004
je 0x44eabf
push eax
mov ecx, ebx
call fcn.00444f98
lea ecx, [ebp - 0xcc]
call fcn.00401bb4
push dword [ebp - 0xd8]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x2c
test esi, esi
je 0x44eae4
mov eax, dword [esi]
push esi
call dword [eax + 8]
push dword [ebp - 0x38]
call fcn.004a8d17
pop ecx
push dword [ebp - 0xa0]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0xac]
call fcn.00401bb4
push dword [ebp - 0x6c]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0x160]
call fcn.00444060
push dword [ebp - 0x54]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x84]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x90]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x2d
jmp 0x44f429
cmp dword [ebp - 0xbc], 0
je 0x44ee1b
mov eax, dword [ebp - 0x14]
cmp byte [eax + 0x19], 0
jne 0x44ee1b
cmp dword [eax + 0x28], 1
jb 0x44ee1b
mov eax, dword [eax + 0x24]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
cmp byte [eax + 0x28], 0
jne 0x44ee1b
mov edi, dword [eax + 8]
push 0x20
call fcn.004a8eb3
pop ecx
mov ecx, eax
mov dword [ebp + 0xc], ecx
push ecx
mov dword [ebp - 0x94], ecx
and dword [ecx + 4], 0
mov dword [ecx], vtable.CBufInStream.0
and dword [ecx + 0x1c], 0
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x40]
push esi
push edi
mov edi, dword [ebp + 0xc]
mov ecx, edi
push dword [eax]
call fcn.0040ba82
cmp dword [ebp + 0x1c], 0
lea ecx, [ebp - 0x48]
mov eax, 0x4effd0
cmovne eax, dword [ebp + 0x1c]
push eax
call fcn.00402b61
push ecx
lea eax, [ebp + 0xf]
mov byte [ebp - 4], 0x2f
push eax
lea eax, [ebp - 0x48]
mov ecx, ebx
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x160]
push eax
push edi
call fcn.0044c93f
mov byte [ebp - 4], 0x2e
push dword [ebp - 0x48]
mov dword [ebp + 0xc], eax
call fcn.004a8d17
mov eax, dword [ebp + 0xc]
pop ecx
test eax, eax
jne 0x44ecb9
mov ecx, ebx
mov byte [ebp - 0x30], al
call fcn.0044fe80
mov byte [ebp - 4], 0x30
mov eax, dword [edi]
push edi
call dword [eax + 8]
lea ecx, [ebp - 0xcc]
call fcn.00401bb4
push dword [ebp - 0xd8]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x31
test esi, esi
je 0x44ec41
mov eax, dword [esi]
push esi
call dword [eax + 8]
push dword [ebp - 0x38]
call fcn.004a8d17
pop ecx
push dword [ebp - 0xa0]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0xac]
call fcn.00401bb4
push dword [ebp - 0x6c]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0x160]
call fcn.00444060
push dword [ebp - 0x54]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x84]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x90]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x30]
call fcn.0040587b
push dword [ebp - 0x2c]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x78]
call fcn.004a8d17
pop ecx
jmp 0x44e34d
cmp eax, 0x80004004
je 0x44ef42
cmp eax, 1
jne 0x44ef42
cmp byte [ebp + 0x10], 0
jne 0x44ed64
mov byte [ebp - 4], 0x36
mov eax, dword [edi]
push edi
call dword [eax + 8]
lea ecx, [ebp - 0xcc]
call fcn.00401bb4
push dword [ebp - 0xd8]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x37
test esi, esi
je 0x44ed06
mov eax, dword [esi]
push esi
call dword [eax + 8]
push dword [ebp - 0x38]
call fcn.004a8d17
pop ecx
push dword [ebp - 0xa0]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0xac]
call fcn.00401bb4
push dword [ebp - 0x6c]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0x160]
call fcn.00444060
push dword [ebp - 0x54]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x84]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x90]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x38
jmp 0x44ec9a
mov ecx, dword [ebp - 0x14]
push 1
mov byte [ebp + 0xf], 0
call fcn.004369aa
test eax, eax
je 0x44ee07
mov byte [ebp - 4], 0x39
mov eax, dword [edi]
push edi
call dword [eax + 8]
lea ecx, [ebp - 0xcc]
call fcn.00401bb4
push dword [ebp - 0xd8]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x3a
test esi, esi
je 0x44eda9
mov eax, dword [esi]
push esi
call dword [eax + 8]
push dword [ebp - 0x38]
call fcn.004a8d17
pop ecx
push dword [ebp - 0xa0]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0xac]
call fcn.00401bb4
push dword [ebp - 0x6c]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0x160]
call fcn.00444060
push dword [ebp - 0x54]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x84]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x90]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x3b
jmp 0x44ec9a
mov byte [ebp - 4], 0x3c
mov eax, dword [edi]
push edi
call dword [eax + 8]
mov byte [ebp - 4], 0x25
mov edi, dword [ebp - 0xb8]
cmp dword [ebp - 0x34], 0
je 0x44ee59
mov ecx, dword [ebp - 0x54]
call fcn.004060c4
test al, al
je 0x44ee59
push 0x4f4ee8
lea edx, [ebp - 0x54]
lea ecx, [ebp - 0x48]
call fcn.00402ae8
pop ecx
mov byte [ebp - 4], 0x3d
lea edx, [ebp - 0x38]
mov ecx, dword [eax]
call fcn.0044e2ae
mov byte [ebp - 4], 0x25
push dword [ebp - 0x48]
call fcn.004a8d17
pop ecx
cmp byte [ebp + 0xf], 0
je 0x44f062
cmp dword [ebp + 0x1c], 0
lea ecx, [ebp - 0x48]
mov eax, 0x4effd0
cmovne eax, dword [ebp + 0x1c]
push eax
call fcn.00402b61
push ecx
lea eax, [ebp + 0xf]
mov byte [ebp - 4], 0x3e
push eax
lea eax, [ebp - 0x48]
mov ecx, ebx
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x160]
push eax
push 0
call fcn.0044c93f
mov byte [ebp - 4], 0x25
push dword [ebp - 0x48]
mov dword [ebp + 0xc], eax
call fcn.004a8d17
mov eax, dword [ebp + 0xc]
pop ecx
test eax, eax
jne 0x44efcf
mov ecx, ebx
mov byte [ebp - 0x30], al
call fcn.0044fe80
lea ecx, [ebp - 0xcc]
call fcn.00401bb4
push dword [ebp - 0xd8]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x3f
test esi, esi
je 0x44eee4
mov eax, dword [esi]
push esi
call dword [eax + 8]
push dword [ebp - 0x38]
call fcn.004a8d17
pop ecx
push dword [ebp - 0xa0]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0xac]
call fcn.00401bb4
push dword [ebp - 0x6c]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0x160]
call fcn.00444060
push dword [ebp - 0x54]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x84]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x90]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x40
jmp 0x44f429
mov byte [ebp - 4], 0x33
mov eax, dword [edi]
push edi
call dword [eax + 8]
lea ecx, [ebp - 0xcc]
call fcn.00401bb4
push dword [ebp - 0xd8]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x34
test esi, esi
je 0x44ef71
mov eax, dword [esi]
push esi
call dword [eax + 8]
push dword [ebp - 0x38]
call fcn.004a8d17
pop ecx
push dword [ebp - 0xa0]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0xac]
call fcn.00401bb4
push dword [ebp - 0x6c]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0x160]
call fcn.00444060
push dword [ebp - 0x54]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x84]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x90]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x35
jmp 0x44ec9a
cmp eax, 0x80004004
je 0x44efdf
cmp eax, 1
je 0x44f062
lea ecx, [ebp - 0xcc]
call fcn.00401bb4
push dword [ebp - 0xd8]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x41
test esi, esi
je 0x44f004
mov eax, dword [esi]
push esi
call dword [eax + 8]
push dword [ebp - 0x38]
call fcn.004a8d17
pop ecx
push dword [ebp - 0xa0]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0xac]
call fcn.00401bb4
push dword [ebp - 0x6c]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0x160]
call fcn.00444060
push dword [ebp - 0x54]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x84]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x90]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x42
jmp 0x44f429
cmp byte [ebp + 0x10], 0
jne 0x44f0ef
lea ecx, [ebp - 0xcc]
call fcn.00401bb4
push dword [ebp - 0xd8]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x43
test esi, esi
je 0x44f091
mov eax, dword [esi]
push esi
call dword [eax + 8]
push dword [ebp - 0x38]
call fcn.004a8d17
pop ecx
push dword [ebp - 0xa0]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0xac]
call fcn.00401bb4
push dword [ebp - 0x6c]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0x160]
call fcn.00444060
push dword [ebp - 0x54]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x84]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x90]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x44
jmp 0x44f429
push 0xc0
call fcn.004a8eb3
pop ecx
mov dword [ebp + 0x10], eax
mov ecx, eax
mov byte [ebp - 4], 0x45
call fcn.0044c57f
mov dword [ebp + 0x10], eax
add eax, 0x10
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x90]
mov dword [ebp + 0x1c], eax
push ecx
mov ecx, eax
call fcn.00402ccc
mov eax, dword [ebp + 0x10]
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [eax + 0x1c]
call fcn.00402ccc
mov eax, dword [ebp + 0x10]
mov cl, byte [ebp - 0xd]
mov byte [eax + 0xa8], cl
lea ecx, [ebp - 0xa0]
push ecx
lea ecx, [eax + 0xac]
mov byte [eax + 0x60], 1
call fcn.00402ccc
mov ecx, ebx
call fcn.0045466a
mov ecx, dword [ebp + 0x10]
push dword [ebp - 0x54]
mov byte [ecx + 0xb8], al
add ecx, 0x28
call fcn.00405c74
test al, al
jne 0x44f202
lea ecx, [ebp + 0x10]
call fcn.0044f471
lea ecx, [ebp - 0xcc]
call fcn.00401bb4
push dword [ebp - 0xd8]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x47
test esi, esi
je 0x44f1a4
mov eax, dword [esi]
push esi
call dword [eax + 8]
push dword [ebp - 0x38]
call fcn.004a8d17
pop ecx
push dword [ebp - 0xa0]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0xac]
call fcn.00401bb4
push dword [ebp - 0x6c]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0x160]
call fcn.00444060
push dword [ebp - 0x54]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x84]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x90]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x48
jmp 0x44f429
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 1
and dword [ebp + 0xc], 0
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x4a
cmp byte [ebp + 0x14], 0
push eax
push dword [ebx + 4]
je 0x44f22e
mov dl, byte [ebp + 0x18]
lea ecx, [ebp - 0x54]
call fcn.0044cf1a
jmp 0x44f23c
lea edx, [ebp - 0x54]
lea ecx, [ebp - 0x84]
call fcn.0044d3c0
pop ecx
pop ecx
mov ecx, eax
mov eax, dword [ebp + 0xc]
mov dword [ebp + 0x14], eax
test eax, eax
jne 0x44f30c
test ecx, ecx
je 0x44f30c
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x4b
call fcn.004083ee
mov byte [ebp - 4], 0x4c
mov eax, dword [ebp + 0x10]
cmp byte [eax + 0x60], 0
je 0x44f281
mov ecx, dword [eax + 0x1c]
call fcn.0040536a
mov ecx, dword [ebp + 0x1c]
mov ecx, dword [ecx]
call fcn.00404e15
lea ecx, [ebp + 0x10]
call fcn.0044f471
lea ecx, [ebp - 0xcc]
call fcn.00401bb4
push dword [ebp - 0xd8]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x4d
test esi, esi
je 0x44f2ae
mov eax, dword [esi]
push esi
call dword [eax + 8]
push dword [ebp - 0x38]
call fcn.004a8d17
pop ecx
push dword [ebp - 0xa0]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0xac]
call fcn.00401bb4
push dword [ebp - 0x6c]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0x160]
call fcn.00444060
push dword [ebp - 0x54]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x84]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x90]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x4e
jmp 0x44f429
mov eax, dword [ebx + 4]
mov ebx, dword [ebp + 0x10]
push dword [ebp - 0xe8]
lea ecx, [ebx + 0x9c]
mov dword [ebx + 0x98], eax
call fcn.00402ccc
mov eax, dword [ebp + 8]
lea ecx, [ebx + 4]
mov dword [ebx], eax
lea eax, [ebp - 0xb8]
push eax
call fcn.00402ccc
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x44f351
and dword [ebp + 0xc], 0
lea ecx, [ebx + 0x68]
push eax
call fcn.0044c3de
lea eax, [ebp + 0x14]
push eax
xor eax, eax
push eax
push ebx
push 0x44de28
push eax
push eax
call fcn.004af3aa
mov ebx, eax
add esp, 0x18
test ebx, ebx
jne 0x44f37b
call fcn.00401a66
test eax, eax
jne 0x44f45b
push ebx
mov ecx, 0x514ee8
call fcn.00401c32
inc dword [0x514ef4]
xor eax, eax
mov byte [ebp - 0x30], al
mov dword [ebp + 0x10], eax
mov byte [ebp - 0x40], al
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x4f
call fcn.004083ee
lea ecx, [ebp + 0x10]
call fcn.0044f471
lea ecx, [ebp - 0xcc]
call fcn.00401bb4
push dword [ebp - 0xd8]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x51
test esi, esi
je 0x44f3d0
mov eax, dword [esi]
push esi
call dword [eax + 8]
push dword [ebp - 0x38]
call fcn.004a8d17
pop ecx
push dword [ebp - 0xa0]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0xac]
call fcn.00401bb4
push dword [ebp - 0x6c]
call fcn.004a8d17
pop ecx
lea ecx, [ebp - 0x160]
call fcn.00444060
push dword [ebp - 0x54]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x84]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x90]
call fcn.004a8d17
pop ecx
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x30]
call fcn.0040587b
push dword [ebp - 0x2c]
call fcn.004a8d17
pop ecx
push dword [ebp - 0x78]
call fcn.004a8d17
pop ecx
push edi
call fcn.004a8d17
pop ecx
push dword [ebp - 0x60]
call fcn.004a8d17
pop ecx
call fcn.004a9bf7
ret 0x18
push 0x50be90
lea eax, [ebp + 0x14]
mov dword [ebp + 0x14], 0x425d0
push eax
call fcn.004ac72b
int3