Function at 0x444f90
Capabilities:
Access peb ldr_data
Connect to wmi namespace via wbemlocator
Encode data using xor
Get number of processors
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c4
mov dword [ebp - 0xb0], 0
xor edx, edx
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0x68], 0x40
mov byte [ebp - 0x64], 0xf
mov byte [ebp - 0x63], 0x2c
mov byte [ebp - 0x62], 0x25
mov byte [ebp - 0x61], 0x73
mov byte [ebp - 0x60], 0x72
mov byte [ebp - 0x5f], 0x6e
push ebx
mov byte [ebp - 0x5e], 0x24
mov byte [ebp - 0x5d], 0x2c
push esi
mov byte [ebp - 0x5c], 0x2c
mov al, byte [ebp - 0x64]
push edi
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x54], 0
mov byte [ebp - 0x5b], 0
nop
mov al, byte [ebp + edx - 0x64]
movsx ecx, byte [ebp - 0x68]
movsx eax, al
xor eax, ecx
mov byte [ebp + edx - 0x64], al
inc edx
cmp edx, 9
jb 0x445020
mov ebx, dword [0x4f3810]
mov byte [ebp - 0x5b], 0
test ebx, ebx
jne 0x4450d1
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0xc], eax
mov edx, eax
mov dword [ebp - 4], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x14], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4450b8
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x14]
imul eax, eax, 0x1000193
mov dword [ebp - 0x14], eax
cmp edi, ebx
jne 0x445080
cmp eax, 0xa3e6f6c3
je 0x44682e
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x4450c9
cmp dword [ecx + 0x18], 0
jne 0x445061
xor ebx, ebx
mov dword [0x4f3810], ebx
mov eax, dword [0x4f3798]
test eax, eax
jne 0x44516e
test ebx, ebx
je 0x445167
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0x18], eax
lea eax, [ecx + ebx]
mov dword [ebp - 0x14], eax
cmp eax, ebx
je 0x445167
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x445167
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0xc], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x445155
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x445120
cmp edi, 0x4dbc712f
je 0x446839
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x14]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 0xc], eax
cmp ecx, dword [edx + 0x18]
jne 0x445110
xor eax, eax
mov dword [0x4f3798], eax
lea ecx, [ebp - 0x64]
push ecx
call eax
mov dword [ebp - 8], eax
test eax, eax
je 0x446825
mov dword [ebp - 0x34], 0x12
mov eax, dword [ebp - 0x34]
xor eax, 0x43
mov byte [ebp - 0x30], al
mov eax, dword [ebp - 0x34]
inc al
xor eax, 0x6f
mov byte [ebp - 0x2f], al
mov eax, dword [ebp - 0x34]
add al, 2
xor eax, 0x49
mov byte [ebp - 0x2e], al
mov eax, dword [ebp - 0x34]
add al, 3
xor eax, 0x6e
mov byte [ebp - 0x2d], al
mov eax, dword [ebp - 0x34]
add al, 4
xor eax, 0x69
mov byte [ebp - 0x2c], al
mov eax, dword [ebp - 0x34]
add al, 5
xor eax, 0x74
mov byte [ebp - 0x2b], al
mov eax, dword [ebp - 0x34]
add al, 6
xor eax, 0x69
mov byte [ebp - 0x2a], al
mov eax, dword [ebp - 0x34]
add al, 7
xor eax, 0x61
mov byte [ebp - 0x29], al
mov eax, dword [ebp - 0x34]
add al, 8
xor eax, 0x6c
mov byte [ebp - 0x28], al
mov eax, dword [ebp - 0x34]
add al, 9
xor eax, 0x69
mov byte [ebp - 0x27], al
mov eax, dword [ebp - 0x34]
add al, 0xa
xor eax, 0x7a
mov byte [ebp - 0x26], al
mov eax, dword [ebp - 0x34]
add al, 0xb
xor eax, 0x65
mov byte [ebp - 0x25], al
mov eax, dword [ebp - 0x34]
add al, 0xc
xor eax, 0x45
mov byte [ebp - 0x24], al
mov eax, dword [ebp - 0x34]
add al, 0xd
mov byte [ebp - 0x22], 0
xor eax, 0x78
xor edx, edx
mov byte [ebp - 0x23], al
mov al, byte [ebp - 0x30]
mov al, byte [ebp + edx - 0x30]
mov ecx, dword [ebp - 0x34]
add cl, dl
movsx eax, al
xor ecx, eax
mov byte [ebp + edx - 0x30], cl
inc edx
cmp edx, 0xe
jb 0x445227
mov ebx, dword [0x4f3810]
mov byte [ebp - 0x22], 0
test ebx, ebx
jne 0x4452e1
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0x14], eax
mov edx, eax
mov dword [ebp - 4], ecx
nop dword [eax]
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0xc], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4452c8
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0xc]
imul eax, eax, 0x1000193
mov dword [ebp - 0xc], eax
cmp edi, ebx
jne 0x445290
cmp eax, 0xa3e6f6c3
je 0x446857
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x14]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x4452d9
cmp dword [ecx + 0x18], 0
jne 0x445270
xor ebx, ebx
mov dword [0x4f3810], ebx
mov eax, dword [0x4f37bc]
test eax, eax
jne 0x44537e
test ebx, ebx
je 0x445377
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0x18], eax
lea eax, [ecx + ebx]
mov dword [ebp - 0x14], eax
cmp eax, ebx
je 0x445377
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x445377
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0xc], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x445365
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x445330
cmp edi, 0xb8e4e945
je 0x446862
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x14]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 0xc], eax
cmp ecx, dword [edx + 0x18]
jne 0x445320
xor eax, eax
mov dword [0x4f37bc], eax
lea ecx, [ebp - 0x30]
push ecx
push dword [ebp - 8]
call eax
mov dword [ebp - 0x18], eax
test eax, eax
je 0x446825
mov dword [ebp - 0x48], 0x46
mov eax, dword [ebp - 0x48]
xor eax, 0x43
mov byte [ebp - 0x44], al
mov eax, dword [ebp - 0x48]
inc al
xor eax, 0x6f
mov byte [ebp - 0x43], al
mov eax, dword [ebp - 0x48]
add al, 2
xor eax, 0x55
mov byte [ebp - 0x42], al
mov eax, dword [ebp - 0x48]
add al, 3
xor eax, 0x6e
mov byte [ebp - 0x41], al
mov eax, dword [ebp - 0x48]
add al, 4
xor eax, 0x69
mov byte [ebp - 0x40], al
mov eax, dword [ebp - 0x48]
add al, 5
xor eax, 0x6e
mov byte [ebp - 0x3f], al
mov eax, dword [ebp - 0x48]
add al, 6
xor eax, 0x69
mov byte [ebp - 0x3e], al
mov eax, dword [ebp - 0x48]
add al, 7
xor eax, 0x74
mov byte [ebp - 0x3d], al
mov eax, dword [ebp - 0x48]
add al, 8
xor eax, 0x69
mov byte [ebp - 0x3c], al
mov eax, dword [ebp - 0x48]
add al, 9
xor eax, 0x61
mov byte [ebp - 0x3b], al
mov eax, dword [ebp - 0x48]
add al, 0xa
xor eax, 0x6c
mov byte [ebp - 0x3a], al
mov eax, dword [ebp - 0x48]
add al, 0xb
xor eax, 0x69
mov byte [ebp - 0x39], al
mov eax, dword [ebp - 0x48]
add al, 0xc
xor eax, 0x7a
mov byte [ebp - 0x38], al
mov eax, dword [ebp - 0x48]
add al, 0xd
mov byte [ebp - 0x36], 0
xor eax, 0x65
xor edx, edx
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x44]
nop word [eax + eax]
mov al, byte [ebp + edx - 0x44]
mov ecx, dword [ebp - 0x48]
add cl, dl
movsx eax, al
xor ecx, eax
mov byte [ebp + edx - 0x44], cl
inc edx
cmp edx, 0xe
jb 0x445440
mov ebx, dword [0x4f3810]
mov byte [ebp - 0x36], 0
test ebx, ebx
jne 0x4454f1
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0x14], eax
mov edx, eax
mov dword [ebp - 4], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0xc], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4454d8
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0xc]
imul eax, eax, 0x1000193
mov dword [ebp - 0xc], eax
cmp edi, ebx
jne 0x4454a0
cmp eax, 0xa3e6f6c3
je 0x446880
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x14]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x4454e9
cmp dword [ecx + 0x18], 0
jne 0x445482
xor ebx, ebx
mov dword [0x4f3810], ebx
mov eax, dword [0x4f37bc]
test eax, eax
jne 0x445591
test ebx, ebx
je 0x44558a
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
mov eax, dword [eax + ebx + 0x7c]
mov dword [ebp - 0xb4], eax
lea eax, [ecx + ebx]
mov dword [ebp - 0x14], eax
cmp eax, ebx
je 0x44558a
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x44558a
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0xc], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x445578
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x445543
cmp edi, 0xb8e4e945
je 0x44688b
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x14]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 0xc], eax
cmp ecx, dword [edx + 0x18]
jne 0x445533
xor eax, eax
mov dword [0x4f37bc], eax
lea ecx, [ebp - 0x44]
push ecx
push dword [ebp - 8]
call eax
mov dword [ebp - 0xb4], eax
test eax, eax
je 0x446825
push 0
push 0
call dword [ebp - 0x18]
test eax, eax
js 0x446825
lea eax, [ebp - 0xb0]
push eax
push 0x401330
push 1
push 0
push 0x401400
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x4463e9
mov ecx, 0x800
call fcn.004bca70
mov dword [ebp - 0x58], eax
test eax, eax
je 0x4463e9
mov dword [ebp - 0x11c], 0x2a
mov ecx, 0x76
mov word [ebp - 0x118], cx
mov eax, 0xf
mov word [ebp - 0x116], cx
mov ebx, 0x69
mov word [ebp - 0x114], ax
mov esi, 0x7c
mov eax, 0x59
mov word [ebp - 0x112], ax
mov eax, 0x78
mov word [ebp - 0x110], cx
mov word [ebp - 0x10e], ax
mov eax, 0x65
mov word [ebp - 0x10c], ax
mov word [ebp - 0x10a], ax
mov eax, 0x7e
mov word [ebp - 0x108], ax
mov eax, 0x63
mov word [ebp - 0x106], cx
mov word [ebp - 0x104], bx
mov word [ebp - 0x102], ax
mov eax, 0x67
mov word [ebp - 0x100], ax
mov eax, 0x18
mov word [ebp - 0xfe], si
mov word [ebp - 0xfc], ax
mov eax, 0x2a
mov word [ebp - 0xfa], ax
movzx eax, word [0x40316c]
xor eax, 0x2a
mov word [ebp - 0xf8], ax
movzx eax, word [0x40316e]
xor eax, 0x2a
mov word [ebp - 0xf6], ax
movzx eax, word [0x403170]
xor eax, 0x2a
mov word [ebp - 0xf4], ax
movzx eax, word [0x403172]
xor eax, 0x2a
mov word [ebp - 0xf2], ax
movzx eax, word [0x403174]
xor eax, 0x2a
mov word [ebp - 0xf0], ax
movzx eax, word [0x403176]
xor eax, 0x2a
mov word [ebp - 0xee], ax
movzx eax, word [0x403178]
xor eax, 0x2a
mov word [ebp - 0xec], ax
movzx eax, word [0x40317a]
xor eax, 0x2a
mov word [ebp - 0xea], ax
movzx eax, word [0x40317c]
xor eax, 0x2a
mov word [ebp - 0xe8], ax
movzx eax, word [0x40317e]
xor eax, 0x2a
mov word [ebp - 0xe6], ax
movzx eax, word [0x403180]
xor eax, 0x2a
mov word [ebp - 0xe4], ax
movzx eax, word [0x403182]
xor eax, 0x2a
mov word [ebp - 0xe2], ax
movzx eax, word [0x403184]
xor eax, 0x2a
mov word [ebp - 0xe0], ax
movzx eax, word [0x403186]
xor eax, 0x2a
mov word [ebp - 0xde], ax
movzx eax, word [0x403188]
xor eax, 0x2a
mov word [ebp - 0xdc], ax
xor eax, eax
mov word [ebp - 0xda], ax
xor edx, edx
mov ax, word [ebp - 0x118]
nop word [eax + eax]
mov ax, word [ebp + edx*2 - 0x118]
movzx ecx, ax
movzx eax, word [ebp - 0x11c]
xor ecx, eax
mov word [ebp + edx*2 - 0x118], cx
inc edx
cmp edx, 0x1f
jb 0x4457c0
push dword [ebp - 0x10]
xor eax, eax
mov word [ebp - 0xda], ax
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x58]
push 0x400
push eax
call fcn.004bcff0
mov eax, dword [ebp - 0xb0]
lea edx, [ebp - 0x4c]
add esp, 0x10
mov ecx, dword [eax]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x58]
push eax
call dword [ecx + 0xc]
test eax, eax
js 0x4463e9
push 0x800
push 0xffffffffffffffff
push 3
push 3
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [ebp - 0x4c]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
test eax, eax
js 0x4463e9
mov eax, 0x4b
mov word [ebp - 0xd8], ax
mov eax, 0x7a
mov word [ebp - 0xd6], ax
mov eax, 0x6d
mov word [ebp - 0xd4], ax
mov word [ebp - 0xd2], bx
mov word [ebp - 0xd0], si
mov word [ebp - 0xce], ax
mov eax, 8
mov word [ebp - 0xcc], ax
movzx eax, word [0x40317a]
add eax, 8
mov word [ebp - 0xca], ax
movzx eax, word [0x40317c]
add eax, 8
mov word [ebp - 0xc8], ax
movzx eax, word [0x40317e]
add eax, 8
mov word [ebp - 0xc6], ax
movzx eax, word [0x403180]
add eax, 8
mov word [ebp - 0xc4], ax
movzx eax, word [0x403182]
add eax, 8
mov word [ebp - 0xc2], ax
movzx eax, word [0x403184]
add eax, 8
mov word [ebp - 0xc0], ax
xor eax, eax
mov word [ebp - 0xbe], ax
xor ecx, ecx
mov ax, word [ebp - 0xd8]
nop dword [eax]
mov ax, word [ebp + ecx*2 - 0xd8]
movzx eax, ax
add eax, 0xfffffff8
mov word [ebp + ecx*2 - 0xd8], ax
inc ecx
cmp ecx, 0xd
jb 0x445910
mov ebx, dword [0x4f37cc]
test ebx, ebx
jne 0x4459c1
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0xc], eax
mov edx, eax
mov dword [ebp - 4], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 8], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4459a8
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 8]
imul eax, eax, 0x1000193
mov dword [ebp - 8], eax
cmp edi, ebx
jne 0x445970
cmp eax, 0x733d6d1e
je 0x4468a9
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x4459b9
cmp dword [ecx + 0x18], 0
jne 0x445952
xor ebx, ebx
mov dword [0x4f37cc], ebx
mov eax, dword [0x4f378c]
test eax, eax
jne 0x445a53
test ebx, ebx
je 0x445a4c
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 0xc], eax
cmp eax, ebx
je 0x445a4c
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x445a4c
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 8], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x445a3a
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x445a05
cmp edi, 0x9b846262
je 0x4468b4
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 8], eax
cmp ecx, dword [edx + 0x18]
jne 0x4459f5
xor eax, eax
mov dword [0x4f378c], eax
lea ecx, [ebp - 0xd8]
push ecx
call eax
mov dword [ebp - 0x20], eax
test eax, eax
je 0x4463e9
mov dword [ebp - 0xa4], 0x33
mov ecx, dword [ebp - 0xa4]
xor ecx, 0x57
mov word [ebp - 0xa0], cx
mov ecx, dword [ebp - 0xa4]
inc ecx
xor ecx, 0x69
mov word [ebp - 0x9e], cx
mov eax, dword [ebp - 0xa4]
add eax, 2
xor eax, 0x6e
mov word [ebp - 0x9c], ax
mov eax, dword [ebp - 0xa4]
add eax, 3
xor eax, 0x33
mov word [ebp - 0x9a], ax
mov eax, dword [ebp - 0xa4]
add eax, 4
xor eax, 0x32
mov word [ebp - 0x98], ax
mov eax, dword [ebp - 0xa4]
add eax, 5
xor eax, 0x5f
mov word [ebp - 0x96], ax
mov eax, dword [ebp - 0xa4]
add eax, 6
xor eax, 0x50
mov word [ebp - 0x94], ax
mov eax, dword [ebp - 0xa4]
add eax, 7
xor eax, 0x72
mov word [ebp - 0x92], ax
mov eax, dword [ebp - 0xa4]
add eax, 8
xor eax, 0x6f
mov word [ebp - 0x90], ax
mov eax, dword [ebp - 0xa4]
add eax, 9
xor eax, 0x63
mov word [ebp - 0x8e], ax
mov eax, dword [ebp - 0xa4]
add eax, 0xa
xor eax, 0x65
mov word [ebp - 0x8c], ax
mov eax, dword [ebp - 0xa4]
add eax, 0xb
xor eax, 0x73
mov word [ebp - 0x8a], ax
mov eax, dword [ebp - 0xa4]
add eax, 0xc
xor eax, 0x73
mov word [ebp - 0x88], ax
mov eax, dword [ebp - 0xa4]
add eax, 0xd
mov word [ebp - 0x86], ax
mov eax, dword [ebp - 0xa4]
movzx ecx, word [0x403198]
add eax, 0xe
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x84], cx
mov eax, dword [ebp - 0xa4]
movzx ecx, word [0x40319a]
add eax, 0xf
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x82], cx
mov eax, dword [ebp - 0xa4]
movzx ecx, word [0x40319c]
add eax, 0x10
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x80], cx
mov eax, dword [ebp - 0xa4]
movzx ecx, word [0x40319e]
add eax, 0x11
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x7e], cx
mov eax, dword [ebp - 0xa4]
add eax, 0x12
movzx ecx, word [0x4031a0]
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x7c], cx
mov eax, dword [ebp - 0xa4]
movzx ecx, word [0x4031a2]
add eax, 0x13
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x7a], cx
mov eax, dword [ebp - 0xa4]
movzx ecx, word [0x4031a4]
add eax, 0x14
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x78], cx
mov eax, dword [ebp - 0xa4]
movzx ecx, word [0x4031a6]
add eax, 0x15
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x76], cx
mov eax, dword [ebp - 0xa4]
movzx ecx, word [0x4031a8]
add eax, 0x16
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x74], cx
mov eax, dword [ebp - 0xa4]
movzx ecx, word [0x4031aa]
add eax, 0x17
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x72], cx
mov eax, dword [ebp - 0xa4]
movzx ecx, word [0x4031ac]
add eax, 0x18
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x70], cx
mov eax, dword [ebp - 0xa4]
movzx ecx, word [0x4031ae]
add eax, 0x19
movzx eax, ax
xor ecx, eax
mov word [ebp - 0x6e], cx
mov eax, dword [ebp - 0xa4]
movzx ecx, word [0x4031b0]
add eax, 0x1a
movzx eax, ax
xor ecx, eax
xor eax, eax
mov word [ebp - 0x6c], cx
xor edx, edx
mov word [ebp - 0x6a], ax
mov ax, word [ebp - 0xa0]
nop dword [eax]
mov ax, word [ebp + edx*2 - 0xa0]
mov ecx, dword [ebp - 0xa4]
add ecx, edx
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0xa0], cx
inc edx
cmp edx, 0x1b
jb 0x445cd0
mov ebx, dword [0x4f37cc]
xor eax, eax
mov word [ebp - 0x6a], ax
test ebx, ebx
jne 0x445d91
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0xc], eax
mov edx, eax
mov dword [ebp - 4], ecx
nop
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 8], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x445d78
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 8]
imul eax, eax, 0x1000193
mov dword [ebp - 8], eax
cmp edi, ebx
jne 0x445d40
cmp eax, 0x733d6d1e
je 0x4468d2
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x445d89
cmp dword [ecx + 0x18], 0
jne 0x445d20
xor ebx, ebx
mov dword [0x4f37cc], ebx
mov eax, dword [0x4f378c]
test eax, eax
jne 0x445e2e
test ebx, ebx
je 0x445e27
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 0xc], eax
cmp eax, ebx
je 0x445e27
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x445e27
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 8], eax
nop dword [eax]
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x445e15
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x445de0
cmp edi, 0x9b846262
je 0x4468dd
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 8], eax
cmp ecx, dword [edx + 0x18]
jne 0x445dd0
xor eax, eax
mov dword [0x4f378c], eax
lea ecx, [ebp - 0xa0]
push ecx
call eax
mov dword [ebp - 0x54], eax
test eax, eax
je 0x4463e9
mov ecx, dword [ebp - 0x4c]
lea esi, [ebp - 0xac]
push 0
push esi
push 0
mov edx, dword [ecx]
push 0
push eax
push ecx
call dword [edx + 0x18]
test eax, eax
js 0x4463e9
mov eax, dword [ebp - 0xac]
lea edx, [ebp - 0xa8]
push 0
push edx
push 0
push dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x4c]
test eax, eax
js 0x4463e9
mov eax, dword [ebp - 0xa8]
lea edx, [ebp - 0x50]
push edx
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x3c]
test eax, eax
js 0x4463e9
mov eax, 8
mov ecx, 0x64
mov word [ebp - 0x1c0], ax
mov edi, 0x66
mov word [ebp - 0x1b0], cx
mov eax, 0x6e
mov word [ebp - 0x1ae], ax
mov esi, 0x2f
mov eax, 0x65
mov edx, 0x79
mov word [ebp - 0x1ac], ax
mov ebx, 0x30
mov word [ebp - 0x1aa], si
mov eax, 0x21
mov word [ebp - 0x1a8], di
mov word [ebp - 0x1a6], dx
mov word [ebp - 0x1a4], di
mov word [ebp - 0x1a2], ax
mov word [ebp - 0x1a0], bx
mov word [ebp - 0x19e], cx
mov ecx, 0x75
mov word [ebp - 0x19c], ax
mov eax, 0x23
mov word [ebp - 0x19a], ax
mov eax, 0x74
mov word [ebp - 0x198], ax
mov eax, 0x69
mov word [ebp - 0x196], ax
mov eax, 0x76
mov word [ebp - 0x194], ax
mov eax, 0x65
mov word [ebp - 0x192], cx
mov word [ebp - 0x190], ax
mov eax, 0x70
mov word [ebp - 0x18e], ax
mov eax, 0x78
mov word [ebp - 0x18c], ax
mov eax, 0x6f
mov word [ebp - 0x18a], ax
mov eax, 0x73
mov word [ebp - 0x188], si
mov word [ebp - 0x186], di
mov word [ebp - 0x184], dx
mov edx, 0x21
mov word [ebp - 0x182], di
mov word [ebp - 0x180], dx
mov word [ebp - 0x17e], bx
mov word [ebp - 0x17c], ax
mov eax, 0x67
mov word [ebp - 0x17a], dx
mov word [ebp - 0x178], bx
mov word [ebp - 0x176], ax
mov eax, 0x31
mov word [ebp - 0x174], dx
mov word [ebp - 0x172], bx
mov word [ebp - 0x170], cx
mov word [ebp - 0x16e], dx
mov word [ebp - 0x16c], ax
mov eax, 0x23
mov word [ebp - 0x16a], ax
mov eax, 1
mov word [ebp - 0x168], ax
movzx eax, word [0x4031e2]
inc eax
mov word [ebp - 0x166], ax
movzx eax, word [0x4031e4]
inc eax
mov word [ebp - 0x164], ax
movzx eax, word [0x4031e6]
inc eax
mov word [ebp - 0x162], ax
movzx eax, word [0x4031e8]
inc eax
mov word [ebp - 0x160], ax
movzx eax, word [0x4031ea]
inc eax
mov word [ebp - 0x15e], ax
movzx eax, word [0x4031ec]
inc eax
mov word [ebp - 0x15c], ax
movzx eax, word [0x4031ee]
inc eax
mov word [ebp - 0x15a], ax
movzx eax, word [0x4031f0]
inc eax
mov word [ebp - 0x158], ax
movzx eax, word [0x4031f2]
inc eax
mov word [ebp - 0x156], ax
movzx eax, word [0x4031f4]
inc eax
mov word [ebp - 0x154], ax
movzx eax, word [0x4031f6]
inc eax
mov word [ebp - 0x152], ax
movzx eax, word [0x4031f8]
inc eax
mov word [ebp - 0x150], ax
movzx eax, word [0x4031fa]
inc eax
mov word [ebp - 0x14e], ax
movzx eax, word [0x4031fc]
inc eax
mov word [ebp - 0x14c], ax
movzx eax, word [0x4031fe]
inc eax
mov word [ebp - 0x14a], ax
movzx eax, word [0x403200]
inc eax
mov word [ebp - 0x148], ax
movzx eax, word [0x403202]
inc eax
mov word [ebp - 0x146], ax
movzx eax, word [0x403204]
inc eax
mov word [ebp - 0x144], ax
movzx eax, word [0x403206]
inc eax
mov word [ebp - 0x142], ax
movzx eax, word [0x403208]
inc eax
mov word [ebp - 0x140], ax
movzx eax, word [0x40320a]
inc eax
mov word [ebp - 0x13e], ax
movzx eax, word [0x40320c]
inc eax
mov word [ebp - 0x13c], ax
movzx eax, word [0x40320e]
inc eax
mov word [ebp - 0x13a], ax
movzx eax, word [0x403210]
inc eax
mov word [ebp - 0x138], ax
movzx eax, word [0x403212]
inc eax
mov word [ebp - 0x136], ax
movzx eax, word [0x403214]
inc eax
mov word [ebp - 0x134], ax
movzx eax, word [0x403216]
inc eax
mov word [ebp - 0x132], ax
movzx eax, word [0x403218]
inc eax
mov word [ebp - 0x130], ax
movzx eax, word [0x40321a]
inc eax
mov word [ebp - 0x12e], ax
movzx eax, word [0x40321c]
inc eax
mov word [ebp - 0x12c], ax
movzx eax, word [0x40321e]
inc eax
mov word [ebp - 0x12a], ax
movzx eax, word [0x403220]
inc eax
mov word [ebp - 0x128], ax
movzx eax, word [0x403222]
inc eax
mov word [ebp - 0x126], ax
movzx eax, word [0x403224]
inc eax
mov word [ebp - 0x124], ax
movzx eax, word [0x403226]
inc eax
mov word [ebp - 0x122], ax
movzx eax, word [0x403228]
inc eax
mov word [ebp - 0x120], ax
xor eax, eax
mov word [ebp - 0x11e], ax
xor ecx, ecx
mov ax, word [ebp - 0x1b0]
nop dword [eax]
mov ax, word [ebp + ecx*2 - 0x1b0]
movzx eax, ax
dec eax
mov word [ebp + ecx*2 - 0x1b0], ax
inc ecx
cmp ecx, 0x49
jb 0x446250
mov ebx, dword [0x4f37cc]
test ebx, ebx
jne 0x446301
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0xc], eax
mov edx, eax
mov dword [ebp - 4], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 8], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4462e8
nop
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 8]
imul eax, eax, 0x1000193
mov dword [ebp - 8], eax
cmp edi, ebx
jne 0x4462b0
cmp eax, 0x733d6d1e
je 0x4468fb
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x4462f9
cmp dword [ecx + 0x18], 0
jne 0x446290
xor ebx, ebx
mov dword [0x4f37cc], ebx
mov eax, dword [0x4f378c]
test eax, eax
jne 0x44639e
test ebx, ebx
je 0x446397
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 0xc], eax
cmp eax, ebx
je 0x446397
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x446397
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 8], eax
nop dword [eax]
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x446385
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x446350
mov ecx, dword [ebp - 4]
cmp edi, 0x9b846262
je 0x446906
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 8], eax
cmp ecx, dword [edx + 0x18]
jne 0x446340
xor eax, eax
mov dword [0x4f378c], eax
lea ecx, [ebp - 0x1b0]
push ecx
call eax
push 0
mov dword [ebp - 0x1b8], eax
lea edx, [ebp - 0x1c0]
mov eax, dword [ebp - 0x50]
push edx
push 0
push 0x4031e4
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
test eax, eax
js 0x4463e9
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 0xbc]
push 0
push edx
push dword [ebp - 0x50]
mov ecx, dword [eax]
push 0
push 0
push dword [ebp - 0x20]
push dword [ebp - 0x54]
push eax
call dword [ecx + 0x60]
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4463f7
push eax
call dword [sym.imp.KERNEL32.DLL_LocalFree]
mov ecx, dword [ebp - 0xbc]
test ecx, ecx
je 0x446407
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x50]
test ecx, ecx
je 0x446414
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
cmp dword [ebp - 0x1b8], 0
je 0x446556
mov ebx, dword [0x4f37cc]
test ebx, ebx
jne 0x4464b6
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 8], eax
mov edx, eax
mov dword [ebp - 4], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x10], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x44649d
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x10]
imul eax, eax, 0x1000193
mov dword [ebp - 0x10], eax
cmp edi, ebx
jne 0x446465
cmp eax, 0x733d6d1e
je 0x446923
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x4464ae
cmp dword [ecx + 0x18], 0
jne 0x446447
xor ebx, ebx
mov dword [0x4f37cc], ebx
mov eax, dword [0x4f37dc]
test eax, eax
jne 0x44654e
test ebx, ebx
je 0x446547
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x446547
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x446547
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x10], eax
nop
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x446535
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x446500
mov ecx, dword [ebp - 4]
cmp edi, 0x8782d795
je 0x44692e
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 0x10], eax
cmp ecx, dword [edx + 0x18]
jne 0x4464f0
xor eax, eax
mov dword [0x4f37dc], eax
push dword [ebp - 0x1b8]
call eax
mov ecx, dword [ebp - 0xa8]
test ecx, ecx
je 0x446566
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0xac]
test ecx, ecx
je 0x446576
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
cmp dword [ebp - 0x20], 0
je 0x4466b4
mov ebx, dword [0x4f37cc]
test ebx, ebx
jne 0x446615
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 8], eax
mov edx, eax
mov dword [ebp - 4], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x10], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x4465fc
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x10]
imul eax, eax, 0x1000193
mov dword [ebp - 0x10], eax
cmp edi, ebx
jne 0x4465c4
cmp eax, 0x733d6d1e
je 0x44694b
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x44660d
cmp dword [ecx + 0x18], 0
jne 0x4465a6
xor ebx, ebx
mov dword [0x4f37cc], ebx
mov eax, dword [0x4f37dc]
test eax, eax
jne 0x4466af
test ebx, ebx
je 0x4466a8
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ecx + ebx]
mov dword [ebp - 8], eax
cmp eax, ebx
je 0x4466a8
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp dword [eax + 0x18], ecx
je 0x4466a8
mov eax, dword [eax + 0x20]
add eax, ebx
mov dword [ebp - 0x10], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
add esi, ebx
mov dl, byte [esi]
inc esi
test dl, dl
je 0x446696
movsx ecx, dl
lea esi, [esi + 1]
sub dl, 0x41
mov eax, ecx
or eax, 0x20
cmp dl, 0x19
mov dl, byte [esi - 1]
cmova eax, ecx
xor eax, edi
imul edi, eax, 0x1000193
test dl, dl
jne 0x446661
mov ecx, dword [ebp - 4]
cmp edi, 0x8782d795
je 0x446956
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
inc ecx
add eax, 4
mov dword [ebp - 4], ecx
mov dword [ebp - 0x10], eax
cmp ecx, dword [edx + 0x18]
jne 0x446651
xor eax, eax
mov dword [0x4f37dc], eax
push dword [ebp - 0x20]
call eax
cmp dword [ebp - 0x54], 0
je 0x4467f4
mov ebx, dword [0x4f37cc]
test ebx, ebx
jne 0x446753
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 8], eax
mov edx, eax
mov dword [ebp - 4], ecx
movzx ebx, word [ecx + 0x2c]
xor edi, edi
mov esi, dword [ecx + 0x30]
shr ebx, 1
mov dword [ebp - 0x10], 0x811c9dc5
lea eax, [esi + ebx*2]
cmp esi, eax
cmova ebx, edi
test ebx, ebx
je 0x44673a
mov cl, byte [esi]
lea esi, [esi + 2]
movsx edx, cl
sub cl, 0x41
mov eax, edx
or eax, 0x20
cmp cl, 0x19
cmova eax, edx
inc edi
xor eax, dword [ebp - 0x10]
imul eax, eax, 0x1000193
mov dword [ebp - 0x10], eax
cmp edi, ebx
jne 0x446702
cmp eax, 0x733d6d1e
je 0x446973
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, eax
mov dword [ebp - 4], ecx
cmp eax, edx
je 0x44674b
cmp dword [ecx + 0x18], 0
jne 0x4466e4
xor ebx, ebx
mov dword [0x4f37cc], ebx
mov eax, dword [0x4f37dc]
test eax, eax
jne 0x4467ef
test ebx, ebx
je 0x4467e8
mov eax, dword [ebx + 0x3c]
mov ecx, dword [eax + ebx + 0x78]
lea eax, [ebx + ecx]
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x4467e8
xor ecx, ecx
mov dword [ebp - 0x20], ecx
cmp dword [eax + 0x18], ecx
je 0x4467e8
mov eax, dword [eax + 0x20]
mov edx, dword [ebp - 4]
add eax, ebx
mov dword [ebp - 0x10], eax
mov esi, dword [eax]
mov edi, 0x811c9dc5
mov al, byte [esi + ebx]
add esi, ebx
inc esi
test al, al
je 0x4467d6
movsx edx, al
lea esi, [esi + 1]
sub al, 0x41
mov ecx, edx
or ecx, 0x20
cmp al, 0x19
mov al, byte [esi - 1]
cmova ecx, edx
xor ecx, edi
imul edi, ecx, 0x1000193
test al, al
jne 0x4467a3
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 4]
cmp edi, 0x8782d795
je 0x44697e
mov eax, dword [ebp - 0x10]
inc ecx
add eax, 4
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x10], eax
cmp ecx, dword [edx + 0x18]
jne 0x446792
xor eax, eax
mov dword [0x4f37dc], eax
push dword [ebp - 0x54]
call eax
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x446801
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x44680f
mov ecx, eax
call fcn.004bced0
mov ecx, dword [ebp - 0xb0]
test ecx, ecx
je 0x44681f
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
call dword [ebp - 0xb4]
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x4450cb
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x445169
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x4452db
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x445379
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x4454eb
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x44558c
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x4459bb
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x445a4e
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x445d8b
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, ebx
add eax, ebx
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, ebx
jmp 0x445e29
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x4462fb
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
add eax, ebx
jmp 0x446399
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x4464b0
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
add eax, ebx
jmp 0x446549
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x44660f
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
add eax, ebx
jmp 0x4466aa
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x18]
jmp 0x44674d
mov eax, dword [edx + 0x24]
lea eax, [eax + ecx*2]
movzx ecx, word [eax + ebx]
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + ebx]
add eax, ebx
jmp 0x4467ea