Function at 0x44ebd0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4540c5
mov eax, dword fs:[0]
push eax
sub esp, 0x30
push ebx
push esi
push edi
mov eax, dword [0x471040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x28], ecx
lea ebx, [ecx + 4]
push str.jK6Ua1
mov dword [ebp - 0x10], ebx
call fcn.00429320
add esp, 4
inc eax
push eax
call fcn.0041bb8a
add esp, 4
mov esi, eax
mov dword [ebp - 0x24], esi
push str.jK6Ua1
push esi
call fcn.00429ab0
mov dword [ebp - 0x2c], esi
mov dword [ebp - 4], 0
push esi
mov dword [ebp - 0x3c], 0
call fcn.00429320
add esp, 0xc
inc eax
push eax
call fcn.0041bb8a
add esp, 4
mov edi, eax
mov dword [ebp - 0x14], edi
push esi
push edi
call fcn.00429ab0
add esp, 8
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 1
mov eax, dword [ebx]
mov esi, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x18], 0
mov edx, dword [eax + 4]
mov eax, edx
mov dword [ebp - 0x1c], edx
cmp byte [edx + 0xd], 0
jne 0x44eca8
nop
mov ecx, dword [eax + 0x10]
shr ecx, 0x1f
mov dword [ebp - 0x1c], eax
test cl, cl
je 0x44ec92
mov eax, dword [eax + 8]
jmp 0x44ec96
mov esi, eax
mov eax, dword [eax]
movzx ebx, cl
xor ebx, 1
cmp byte [eax + 0xd], 0
mov dword [ebp - 0x18], ebx
je 0x44ec80
mov ebx, dword [ebp - 0x10]
cmp byte [esi + 0xd], 0
jne 0x44ecb4
cmp dword [esi + 0x10], 0
jle 0x44ed31
cmp dword [ebx + 4], 0xaaaaaaa
je 0x44f646
mov dword [ebp - 0x34], ebx
mov byte [ebp - 4], 2
push 0x18
mov dword [ebp - 0x30], 0
call fcn.0041b904
mov edi, eax
add esp, 4
mov dword [ebp - 0x30], edi
push dword [ebp - 0x14]
mov byte [ebp - 4], 3
mov dword [edi + 0x10], 0
call fcn.00429320
add esp, 4
inc eax
push eax
call fcn.0041bb8a
add esp, 4
mov esi, eax
push dword [ebp - 0x14]
push esi
call fcn.00429ab0
mov eax, dword [ebp - 0x20]
add esp, 8
mov dword [edi + 0x14], esi
mov ecx, ebx
mov dword [edi], eax
mov dword [edi + 4], eax
push edi
push dword [ebp - 0x18]
mov dword [edi + 8], eax
push dword [ebp - 0x1c]
mov word [edi + 0xc], 0
call fcn.004083d8
mov edi, dword [ebp - 0x14]
push 1
push edi
call fcn.0041b8d3
push 1
push dword [ebp - 0x24]
mov dword [ebp - 4], 0xffffffff
call fcn.0041b8d3
push str.i5MQhHsRv0
call fcn.00429320
add esp, 0x14
inc eax
push eax
call fcn.0041bb8a
add esp, 4
mov esi, eax
mov dword [ebp - 0x20], esi
push str.i5MQhHsRv0
push esi
call fcn.00429ab0
mov dword [ebp - 0x2c], esi
mov dword [ebp - 4], 4
push esi
mov dword [ebp - 0x3c], 1
call fcn.00429320
add esp, 0xc
inc eax
push eax
call fcn.0041bb8a
add esp, 4
mov edi, eax
mov dword [ebp - 0x14], edi
push esi
push edi
call fcn.00429ab0
add esp, 8
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 5
mov eax, dword [ebx]
mov esi, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], 0
mov edx, dword [eax + 4]
mov eax, edx
mov dword [ebp - 0x18], edx
cmp byte [edx + 0xd], 0
jne 0x44edef
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x18], eax
cmp ecx, 1
jge 0x44edd7
mov eax, dword [eax + 8]
jmp 0x44eddb
mov esi, eax
mov eax, dword [eax]
xor ebx, ebx
cmp ecx, 1
setge bl
cmp byte [eax + 0xd], 0
mov dword [ebp - 0x1c], ebx
je 0x44edc7
mov ebx, dword [ebp - 0x10]
cmp byte [esi + 0xd], 0
jne 0x44edfb
cmp dword [esi + 0x10], 1
jle 0x44ee78
cmp dword [ebx + 4], 0xaaaaaaa
je 0x44f64b
mov dword [ebp - 0x34], ebx
mov byte [ebp - 4], 6
push 0x18
mov dword [ebp - 0x30], 0
call fcn.0041b904
mov edi, eax
add esp, 4
mov dword [ebp - 0x30], edi
push dword [ebp - 0x14]
mov byte [ebp - 4], 7
mov dword [edi + 0x10], 1
call fcn.00429320
add esp, 4
inc eax
push eax
call fcn.0041bb8a
add esp, 4
mov esi, eax
push dword [ebp - 0x14]
push esi
call fcn.00429ab0
mov eax, dword [ebp - 0x24]
add esp, 8
mov dword [edi + 0x14], esi
mov ecx, ebx
mov dword [edi], eax
mov dword [edi + 4], eax
push edi
push dword [ebp - 0x1c]
mov dword [edi + 8], eax
push dword [ebp - 0x18]
mov word [edi + 0xc], 0
call fcn.004083d8
mov edi, dword [ebp - 0x14]
push 1
push edi
call fcn.0041b8d3
push 1
push dword [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
call fcn.0041b8d3
push str.oLcOfLrOpq3
call fcn.00429320
add esp, 0x14
inc eax
push eax
call fcn.0041bb8a
add esp, 4
mov esi, eax
mov dword [ebp - 0x20], esi
push str.oLcOfLrOpq3
push esi
call fcn.00429ab0
mov dword [ebp - 0x2c], esi
mov dword [ebp - 4], 8
push esi
mov dword [ebp - 0x3c], 2
call fcn.00429320
add esp, 0xc
inc eax
push eax
call fcn.0041bb8a
add esp, 4
mov edi, eax
mov dword [ebp - 0x14], edi
push esi
push edi
call fcn.00429ab0
add esp, 8
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 9
mov eax, dword [ebx]
mov esi, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], 0
mov edx, dword [eax + 4]
mov eax, edx
mov dword [ebp - 0x18], edx
cmp byte [edx + 0xd], 0
jne 0x44ef38
nop
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x18], eax
cmp ecx, 2
jge 0x44ef20
mov eax, dword [eax + 8]
jmp 0x44ef24
mov esi, eax
mov eax, dword [eax]
xor ebx, ebx
cmp ecx, 2
setge bl
cmp byte [eax + 0xd], 0
mov dword [ebp - 0x1c], ebx
je 0x44ef10
mov ebx, dword [ebp - 0x10]
cmp byte [esi + 0xd], 0
jne 0x44ef44
cmp dword [esi + 0x10], 2
jle 0x44efc1
cmp dword [ebx + 4], 0xaaaaaaa
je 0x44f650
mov dword [ebp - 0x34], ebx
mov byte [ebp - 4], 0xa
push 0x18
mov dword [ebp - 0x30], 0
call fcn.0041b904
mov edi, eax
add esp, 4
mov dword [ebp - 0x30], edi
push dword [ebp - 0x14]
mov byte [ebp - 4], 0xb
mov dword [edi + 0x10], 2
call fcn.00429320
add esp, 4
inc eax
push eax
call fcn.0041bb8a
add esp, 4
mov esi, eax
push dword [ebp - 0x14]
push esi
call fcn.00429ab0
mov eax, dword [ebp - 0x24]
add esp, 8
mov dword [edi + 0x14], esi
mov ecx, ebx
mov dword [edi], eax
mov dword [edi + 4], eax
push edi
push dword [ebp - 0x1c]
mov dword [edi + 8], eax
push dword [ebp - 0x18]
mov word [edi + 0xc], 0
call fcn.004083d8
mov edi, dword [ebp - 0x14]
push 1
push edi
call fcn.0041b8d3
push 1
push dword [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
call fcn.0041b8d3
push str.b8rR_aNF
call fcn.00429320
add esp, 0x14
inc eax
push eax
call fcn.0041bb8a
add esp, 4
mov esi, eax
mov dword [ebp - 0x20], esi
push str.b8rR_aNF
push esi
call fcn.00429ab0
mov dword [ebp - 0x2c], esi
mov dword [ebp - 4], 0xc
push esi
mov dword [ebp - 0x3c], 3
call fcn.00429320
add esp, 0xc
inc eax
push eax
call fcn.0041bb8a
add esp, 4
mov edi, eax
mov dword [ebp - 0x14], edi
push esi
push edi
call fcn.00429ab0
add esp, 8
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 0xd
mov eax, dword [ebx]
mov esi, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], 0
mov edx, dword [eax + 4]
mov eax, edx
mov dword [ebp - 0x18], edx
cmp byte [edx + 0xd], 0
jne 0x44f07f
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x18], eax
cmp ecx, 3
jge 0x44f067
mov eax, dword [eax + 8]
jmp 0x44f06b
mov esi, eax
mov eax, dword [eax]
xor ebx, ebx
cmp ecx, 3
setge bl
cmp byte [eax + 0xd], 0
mov dword [ebp - 0x1c], ebx
je 0x44f057
mov ebx, dword [ebp - 0x10]
cmp byte [esi + 0xd], 0
jne 0x44f08b
cmp dword [esi + 0x10], 3
jle 0x44f108
cmp dword [ebx + 4], 0xaaaaaaa
je 0x44f655
mov dword [ebp - 0x34], ebx
mov byte [ebp - 4], 0xe
push 0x18
mov dword [ebp - 0x30], 0
call fcn.0041b904
mov edi, eax
add esp, 4
mov dword [ebp - 0x30], edi
push dword [ebp - 0x14]
mov byte [ebp - 4], 0xf
mov dword [edi + 0x10], 3
call fcn.00429320
add esp, 4
inc eax
push eax
call fcn.0041bb8a
add esp, 4
mov esi, eax
push dword [ebp - 0x14]
push esi
call fcn.00429ab0
mov eax, dword [ebp - 0x24]
add esp, 8
mov dword [edi + 0x14], esi
mov ecx, ebx
mov dword [edi], eax
mov dword [edi + 4], eax
push edi
push dword [ebp - 0x1c]
mov dword [edi + 8], eax
push dword [ebp - 0x18]
mov word [edi + 0xc], 0
call fcn.004083d8
mov edi, dword [ebp - 0x14]
push 1
push edi
call fcn.0041b8d3
push 1
push dword [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
call fcn.0041b8d3
mov ebx, dword [ebp - 0x28]
add esp, 0x10
mov ecx, ebx
push str.mt2Sky6Rjt6TlunRnT6
push 4
call fcn.00407f34
push str.nt2Sky6Rjt6TlunRnT6
push 5
mov ecx, ebx
call fcn.00407f34
push str.ot2Sky6Rjt6TlunRnT6
push 6
mov ecx, ebx
call fcn.00407f34
push str.lt2Sky6Rjt6TlunRnT6
push 7
mov ecx, ebx
call fcn.00407f34
push str.lyrRhuYRp1cBk9sP
push 8
mov ecx, ebx
call fcn.00407f34
push str.paMRaunTeu6PkTsSjCrRi1
push 9
mov ecx, ebx
call fcn.00407f34
push str.jybSpXMBXqMPnarOXu2Sky6Rjt6TlunRnT6
push 0xa
mov ecx, ebx
call fcn.00407f34
push str.aLcSk1NPj0sRkmbBjH7SjxbSc1
push 0xb
mov ecx, ebx
call fcn.00407f34
push str.XDNQXu2Sky6Rjt6TlunRnT6
push 0xc
mov ecx, ebx
call fcn.00407f34
push str.K9LI1mpN5X5K99LH4yqL19aJ9upH
push 0xd
mov ecx, ebx
call fcn.00407f34
push str.PyKLIyqGFq4K9HpN9DqNDDqH
push 0xe
mov ecx, ebx
call fcn.00407f34
push str.3y4KPyqGFq4K9HpN2HaJVHLIKmKH
push 0xf
mov ecx, ebx
call fcn.00407f34
push str.FipN2HaJVHLIKmKH
push 0x10
mov ecx, ebx
call fcn.00407f34
push str.35_J3L4JV94LEy5L9H5J51
push 0x11
mov ecx, ebx
call fcn.00407f34
push str.3mpJJLpN2HaJVHLIKmKH
push 0x12
mov ecx, ebx
call fcn.00407f34
push str.3y_JK5pGKyLGLH5IF9qN2HaJVHLIKmKH
push 0x13
mov ecx, ebx
call fcn.00407f34
push str.N5_KEa_J7y5L9H5J51
push 0x14
mov ecx, ebx
call fcn.00407f34
push str.EypNILpHBLKMVqpK71
push 0x15
mov ecx, ebx
call fcn.00407f34
push str.ILpHBLKMVapKVDpJI9LLGHLH4yLJJT4
push 0x16
mov ecx, ebx
call fcn.00407f34
push str.ILpHBLKMVapKVupJKyaK5DKI5PLH4yLJJT4
push 0x17
mov ecx, ebx
call fcn.00407f34
push str.5L5J1y5L9H5J51
push 0x18
mov ecx, ebx
call fcn.00407f34
push str.95pHILKHV94LEy5L9H5J51
push 0x19
mov ecx, ebx
call fcn.00407f34
push str.4LpGCa_J5yaGKupNKa4LCL4
push 0x1a
mov ecx, ebx
call fcn.00407f34
push str.115KV1LGJDqLF95HV1aKFHLH3HLH41
push 0x1b
mov ecx, ebx
call fcn.00407f34
push str.G5pKJTqJIHpNNy_K41
push 0x1c
mov ecx, ebx
call fcn.00407f34
push str.G5pKJTqJIHpN9DqN9upGF9aK5D4L
push 0x1d
mov ecx, ebx
call fcn.00407f34
push str.EypN9u4L59aJ5HqNDDqH
push 0x1e
mov ecx, ebx
call fcn.00407f34
push str.115KVDpJEuKH3HqKVHqJVa_J5HqNDDqH
push 0x1f
mov ecx, ebx
call fcn.00407f34
push str.JaqK3mpJ3ipN1u4HVa_J5HqN65KICL4HVqpK71
push 0x20
mov ecx, ebx
call fcn.00407f34
push str.K9LI1mpNDy4H5y5L9H5J51
push 0x21
mov ecx, ebx
call fcn.00407f34
push str.115KCapG1HLIFupNKa4LCL4
push 0x22
mov ecx, ebx
call fcn.00407f34
push str.J5_L5yLIJyaJFHqN1m4JFTLH41
push 0x23
mov ecx, ebx
call fcn.00407f34
push str.EypK1PLHVL4MGy_KKyaK55LL5D5L
push 0x24
mov ecx, ebx
call fcn.00407f34
push str.K9LI1mpNEypK1PLHVqpK71
push 0x25
mov ecx, ebx
call fcn.00407f34
push str.K9LI1mpNEyKHO1qJIHqNDDqH
push 0x26
mov ecx, ebx
call fcn.00407f34
push str.6L5JCyLHO1LII54L9y_JVupJKapG51
push 0x27
mov ecx, ebx
call fcn.00407f34
push str.5X5K99LGKapJEyaJFHLI3LpN2LpH9u4
push 0x28
mov ecx, ebx
call fcn.00407f34
push str.5X5K99LGKapJEyqL19aJ9upH
push 0x29
mov ecx, ebx
call fcn.00407f34
push str.Ky4H1aqNNy_K41
push 0x2a
mov ecx, ebx
call fcn.00407f34
push str.KyKJF9aKFTqNNy_K41
push 0x2b
mov ecx, ebx
call fcn.00407f34
push str.9upNEy5H1aqKVqpK71
push 0x2c
mov ecx, ebx
call fcn.00407f34
push str.K9LI1mpN5X5K99LHJyqJE1
push 0x2d
mov ecx, ebx
call fcn.00407f34
push str.6L5JCy5LIaKGCyqL19aJ9upH
push 0x2e
mov ecx, ebx
call fcn.00407f34
push str.115KVapKVmKIDa4L5HpNDDqH
push 0x2f
mov ecx, ebx
call fcn.00407f34
push str.115KCapG1HLIFupN9DqNLu_K5TKIJHLHIL4H
push 0x30
mov ecx, ebx
call fcn.00407f34
push str.115KVapKV9LH7apKKL_K5HpN6y_K
push 0x31
mov ecx, ebx
call fcn.00407f34
push str.115KVPLHIyLIEPpJ
push 0x32
mov ecx, ebx
call fcn.00407f34
push str.19pJLHqNNy_K41
push 0x33
mov ecx, ebx
call fcn.00407f34
push str.1L5L8y_KVqKG9m4LFyqKL9_I5D4L
push 0x34
mov ecx, ebx
call fcn.00407f34
push str.1L5L8y_KVqKG9m4LFyaGFHKM
push 0x35
mov ecx, ebx
call fcn.00407f34
push str.115KV54JILKG4aqNJHLGIHLH41
push 0x36
mov ecx, ebx
call fcn.00407f34
push str.115KVL4MGa_K5H4
push 0x37
mov ecx, ebx
call fcn.00407f34
push str.3LqKKyKJVHaK954JVHLIKmKH
push 0x38
mov ecx, ebx
call fcn.00407f34
push str.3LqKKyKJVHaK954JVqpK71
push 0x39
mov ecx, ebx
call fcn.00407f34
push str.3LqKKyKJVHaK954JVL4MGa_K5HpNN5_KE1
push 0x3a
mov ecx, ebx
call fcn.00407f34
push str.69LH5qKILqpNE5pHVTaJ4y5L9H5J51
push 0x3b
mov ecx, ebx
call fcn.00407f34
push str.3LqKKyKJVP_K5LKJ9LLJVqpK71
push 0x3c
mov ecx, ebx
call fcn.00407f34
push str.3y_JK5pGKyLGLH5IF9qN2HaJ
push 0x3d
mov ecx, ebx
call fcn.00407f34
push str.3y4KPyqGFq4KLHLHIyLI41
push 0x3e
mov ecx, ebx
call fcn.00407f34
push str.115KVDKGEupJKyqKK5_KK1
push 0x3f
mov ecx, ebx
call fcn.00407f34
push str.115KVDKGEupJKyqKK5_KKyqJEyaLD1
push 0x40
mov ecx, ebx
call fcn.00407f34
push str.N5_KEyLGG1qN35_JEy4LVD5L195L
push 0x41
mov ecx, ebx
call fcn.00407f34
push str.K9LI1mpN5XLHVL4MGa_K5HpNDDqH
push 0x42
mov ecx, ebx
call fcn.00407f34
push str.EypNILpHBLKMVPKICL4
push 0x43
mov ecx, ebx
call fcn.00407f34
push str.85_L5yaJFHqNILpG5a_L5HpNILpHBLKM
push 0x44
mov ecx, ebx
call fcn.00407f34
push str.PyKLIyqGFq4K9HpN9D5
push 0x45
mov ecx, ebx
call fcn.00407f34
push str.ILpHBLKMVa_JM54J9HpNDDqH
push 0x46
mov ecx, ebx
call fcn.00407f34
push str.115KVXKGJyLHO1LIIL4HVy_J
push 0x47
mov ecx, ebx
call fcn.00407f34
push str.JaqKVD4JFDpIVDLHKyaG1DpI
push 0x48
mov ecx, ebx
call fcn.00407f34
push str.115KVapKVupJKyLG3HLIM54L5HpNLu4L9m4
push 0x49
mov ecx, ebx
call fcn.00407f34
push str.ILpHBLKMVL4MGa_K5HpN4L_H1L5JKyLJJT4
push 0x4a
mov ecx, ebx
call fcn.00407f34
push str.LupIEypLEyLHI9qJIyLJJT4
push 0x4b
mov ecx, ebx
call fcn.00407f34
push str.3yKJGL5L59qN9H4
push 0x4c
mov ecx, ebx
call fcn.00407f34
push str.N9pIVDLGMLpNILKKLLpKKyLJJTpNKa4LCL4
push 0x4d
mov ecx, ebx
call fcn.00407f34
push str.N9pIVDLGMLpN3XKGETKHJyaK55LL5D5L
push 0x4e
mov ecx, ebx
call fcn.00407f34
push str.Ny_KB9pJFipNNy_K41
push 0x4f
mov ecx, ebx
call fcn.00407f34
push str.N5_JKy5LFyqK1PLHVD4I1upH5DqNKy4
push 0x50
mov ecx, ebx
call fcn.00407f34
push str.Ey4LVDLGMLpN2HaJVHLIKmKH
push 0x51
mov ecx, ebx
call fcn.00407f34
push str.J5_L5yaGKupNKa4LCL4
push 0x52
mov ecx, ebx
call fcn.00407f34
push str.3yKJGa4HV9KH5upN3y4K9L4HVqpK71
push 0x53
mov ecx, ebx
call fcn.00407f34
push str.9u_HFy5L9H5J51
push 0x54
mov ecx, ebx
call fcn.00407f34
push str.J5_L5y5LFyaH9mKHV94LEyqG115L9y_J
push 0x55
mov ecx, ebx
call fcn.00407f34
push str.115KVmKIDa4L454L5yaK55pG8L4HVqpK71
push 0x56
mov ecx, ebx
call fcn.00407f34
push str.3y_JK5pGKyLGLH5IF9qNDDqH
push 0x57
mov ecx, ebx
call fcn.00407f34
push str.3yMRlL7Ta9789H4
push 0x58
mov ecx, ebx
call fcn.00407f34
push str.4ybRaL4U
push 0x59
mov ecx, ebx
call fcn.00407f34
push str.ODKPhm683yMRla6Ra97
push 0x5a
mov ecx, ebx
call fcn.00407f34
push str.tDMPhmrOh97
push 0x5b
mov ecx, ebx
call fcn.00407f34
push str.r9rOpKrQaa7
push 0x5c
mov ecx, ebx
call fcn.00407f34
push str.jGMOp1
push 0x5d
mov ecx, ebx
call fcn.00407f34
push str.M9MO3yMRla6Ra97
push 0x5e
mov ecx, ebx
call fcn.00407f34
push str.CyrPo1
push 0x5f
mov ecx, ebx
call fcn.00407f34
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.00407f29
call fcn.00407f29
call fcn.00407f29
call fcn.00407f29
int3