Function at 0x44cd84
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x40
mov dword [ebp - 0x10], 0xef59d06f
mov edi, dword [ebp - 0x30]
mov esi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x10]
cmp eax, 0xef59d06e
jle 0x44cdef
cmp eax, 0x2fcad01e
jg 0x44ce3f
cmp eax, 0x156253e8
jg 0x44cf12
cmp eax, 0x7e9f9ab
jle 0x44d02e
cmp eax, 0xdb71b0c
je 0x44d1ce
cmp eax, 0xe8c1cdd
jne 0x44d341
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0x34461859
jmp 0x44cd9d
cmp eax, 0xb6d6d64b
jg 0x44ce9c
cmp eax, 0xa657ae37
jg 0x44cf51
cmp eax, 0x99e1112e
jg 0x44d074
cmp eax, 0x88620ca7
je 0x44d1da
cmp eax, 0x8cdc0695
jne 0x44cd9d
cmp dword [ebp - 0x40], 0
mov eax, 0x99e1112f
je 0x44d324
mov eax, 0x156253e9
jmp 0x44d324
cmp eax, 0x5e8005ca
jg 0x44cfa8
cmp eax, 0x3c61ed52
jg 0x44d099
cmp eax, 0x2fcad01f
je 0x44d1f8
cmp eax, 0x34461859
jne 0x44cd9d
mov eax, dword [ebp - 0x14]
shr eax, 0xd
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x4421
dec edx
add eax, 0xde
mov dword [ebp - 0x14], eax
mov eax, 0xa657ae38
cmp ecx, edx
je 0x44d324
mov eax, 0xdb71b0c
jmp 0x44d324
cmp eax, 0xd6222b19
jg 0x44cfe6
cmp eax, 0xbdd66764
jg 0x44d0c4
cmp eax, 0xb6d6d64c
je 0x44d217
cmp eax, 0xb8477b3b
jne 0x44cd9d
push 0x18
push 0x4783a0
push dword [ebp - 0x20]
call fcn.00450060
add esp, 0xc
push 8
push 0x4783b8
push 0xc
push dword [ebp - 0x20]
call fcn.0044d360
add esp, 0x10
push dword [ebp - 0x20]
push dword [ebp - 0x44]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
sete byte [ebp - 0x15]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0x18aa780c
jmp 0x44cd9d
cmp eax, 0x208df622
jg 0x44d0f7
cmp eax, 0x156253e9
je 0x44d229
cmp eax, 0x18aa780c
jne 0x44cd9d
imul eax, dword [ebp - 0x14], 0x1360
add eax, 0xfff29aa0
shr eax, 6
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x7cf7d653
jmp 0x44cd9d
cmp eax, 0xa8f6b7d6
jg 0x44d121
cmp eax, 0xa657ae38
je 0x44d235
cmp eax, 0xa7fd4ba0
jne 0x44cd9d
shl edi, 9
add edi, 0x5e00
and edi, 0xfffff800
add edi, 0xffffffa3
push edi
call fcn.0044beb9
add esp, 4
mov eax, 0xed16efec
cmp edi, 0xca
jge 0x44d324
mov eax, 0xff542261
jmp 0x44d324
cmp eax, 0x78f4dec7
jg 0x44d146
cmp eax, 0x5e8005cb
je 0x44d24c
cmp eax, 0x689ef95a
jne 0x44cd9d
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
mov eax, 0xd6222b1a
cmp edx, ecx
je 0x44d324
mov eax, 0xcd43b188
jmp 0x44d324
cmp eax, 0xe8e81bb4
jg 0x44d184
cmp eax, 0xd6222b1a
je 0x44d26f
cmp eax, 0xdbe08cdf
jne 0x44cd9d
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffff69
add eax, ecx
shr eax, 7
imul eax, eax, 0x28c458
add eax, 0x2971a1
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x26b24fa0
jmp 0x44cd9d
cmp eax, 0xef59d06f
je 0x44d291
cmp eax, 0xff542261
jne 0x44cd9d
shr edi, 4
and edi, 0x7fffffe
imul edi, edi, 0xae
add edi, 0xffffb682
mov eax, 0x5e8005cb
cmp edi, 0x83
jl 0x44d324
mov eax, 0x26b24fa0
jmp 0x44d324
cmp eax, 0x99e1112f
je 0x44d2d9
cmp eax, 0xa024d5ed
jne 0x44cd9d
mov dword [ebp - 0x10], 0xaf375a7d
mov ebx, dword [ebp - 0x3c]
jmp 0x44cd9d
cmp eax, 0x3c61ed53
je 0x44d2a9
cmp eax, 0x3e87969b
jne 0x44cd9d
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x8cdc0695
jmp 0x44cd9d
cmp eax, 0xbdd66765
je 0x44d2bc
cmp eax, 0xcd43b188
jne 0x44cd9d
mov eax, dword [ebp - 0x14]
shr eax, 3
and eax, 0x7fffe
add eax, 0xffffffb5
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x208df623
jmp 0x44cd9d
cmp eax, 0x208df623
je 0x44d2e5
cmp eax, 0x26b24fa0
jne 0x44cd9d
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0xb6d6d64c
jmp 0x44cd9d
cmp eax, 0xa8f6b7d7
je 0x44d2f4
cmp eax, 0xaf375a7d
jne 0x44cd9d
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x10], 0xe8c1cdd
jmp 0x44cd9d
cmp eax, 0x78f4dec8
je 0x44d306
cmp eax, 0x7cf7d653
jne 0x44cd9d
mov edx, dword [ebp - 0x24]
mov eax, 0xa8f6b7d7
mov ecx, 0xa8f6b7d7
cmp edx, dword [ebp - 0x48]
je 0x44d173
mov ecx, 0x208df623
cmp byte [ebp - 0x15], 0
jne 0x44d324
mov eax, ecx
jmp 0x44d324
cmp eax, 0xe8e81bb5
je 0x44d32c
cmp eax, 0xed16efec
jne 0x44cd9d
shl edi, 0xc
add edi, 0xaef69
call fcn.0044cd84
push edi
push 0x57d3
call fcn.0044b2ec
add esp, 8
mov eax, 0xbdd66765
cmp edi, 0x59
jl 0x44d324
mov eax, 0x78f4dec8
jmp 0x44d324
mov dword [ebp - 0x10], 0x3e87969b
jmp 0x44cd9d
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x44], eax
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0xe8e81bb5
jmp 0x44cd9d
imul eax, dword [ebp - 0x14], 0xb4
add eax, 0xffffffca
shr eax, 0xd
and eax, 0xfffffffe
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xb8477b3b
jmp 0x44cd9d
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0x3c61ed53
jmp 0x44cd9d
mov dword [ebp - 0x10], 0x88620ca7
jmp 0x44cd9d
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
add eax, 0x10
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0xdbe08cdf
jmp 0x44cd9d
shl edi, 0x19
add edi, 0x76000000
call fcn.0044cd84
push edi
call fcn.0044beb9
add esp, 4
mov dword [ebp - 0x10], 0x8cdc0695
jmp 0x44cd9d
imul eax, dword [ebp - 0x14], 0x2b40000
add eax, 0xffc0000
and eax, 0x1ffc0000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x7e9f9ac
xor esi, esi
jmp 0x44cd9d
mov eax, dword fs:[0x30]
add eax, 0xc
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0xa657ae38
jmp 0x44cd9d
mov dword [ebp - 0x14], 0x83
mov dword [ebp - 0x10], 0xa024d5ed
jmp 0x44cd9d
shl edi, 0xb
add edi, 0x27800
push 0xb
push edi
call fcn.0044b10c
add esp, 8
push edi
call fcn.0044beb9
add esp, 4
mov dword [ebp - 0x10], 0x689ef95a
jmp 0x44cd9d
mov dword [ebp - 0x10], 0xaf375a7d
mov ebx, dword [ebp - 0x1c]
jmp 0x44cd9d
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x10], 0x7e9f9ac
jmp 0x44cd9d
imul edi, edi, 0xc60
add edi, 0xffffcb50
mov eax, 0xa657ae38
cmp edi, 0xb7
jge 0x44d324
mov eax, 0xb6d6d64c
mov dword [ebp - 0x10], eax
jmp 0x44cd9d
mov eax, dword [ebp - 0x20]
mov word [eax + 0x18], 0
mov dword [ebp - 0x10], 0x2fcad01f
jmp 0x44cd9d
cmp eax, 0x7e9f9ac
jne 0x44cd9d
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], ebx
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret