Function at 0x44ef00
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4545e5
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
push ebx
push esi
push edi
mov eax, dword [0x471080]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x14], edi
lea esi, [edi + 4]
push str.jK6Ua1
mov dword [ebp - 0x1c], esi
call fcn.00429720
add esp, 4
inc eax
push eax
call fcn.0041bdfa
add esp, 4
mov ebx, eax
mov dword [ebp - 0x20], ebx
push str.jK6Ua1
push ebx
call fcn.00429eb0
mov dword [ebp - 0x28], ebx
mov dword [ebp - 4], 0
push ebx
mov dword [ebp - 0x38], 0
call fcn.00429720
add esp, 0xc
inc eax
push eax
call fcn.0041bdfa
add esp, 4
mov dword [ebp - 0x10], eax
push ebx
push eax
call fcn.00429eb0
mov eax, dword [ebp - 0x10]
add esp, 8
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 1
xor ebx, ebx
mov ecx, dword [esi]
mov dword [ebp - 0x24], ecx
mov eax, dword [ecx + 4]
mov dword [ebp - 0x18], eax
cmp byte [eax + 0xd], bl
jne 0x44efc9
cmp dword [eax + 0x10], 0
mov dword [ebp - 0x18], eax
jge 0x44efb7
mov eax, dword [eax + 8]
xor ebx, ebx
jmp 0x44efc0
mov ecx, eax
mov ebx, 1
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x44efa7
mov esi, dword [ebp - 0x1c]
cmp byte [ecx + 0xd], 0
jne 0x44efd5
cmp dword [ecx + 0x10], 0
jle 0x44f053
cmp dword [esi + 4], 0xaaaaaaa
je 0x44f981
mov dword [ebp - 0x30], esi
mov byte [ebp - 4], 2
push 0x18
mov dword [ebp - 0x2c], 0
call fcn.0041bb74
mov edi, eax
add esp, 4
mov dword [ebp - 0x2c], edi
push dword [ebp - 0x10]
mov byte [ebp - 4], 3
mov dword [edi + 0x10], 0
call fcn.00429720
add esp, 4
inc eax
push eax
call fcn.0041bdfa
add esp, 4
mov esi, eax
push dword [ebp - 0x10]
push esi
call fcn.00429eb0
mov eax, dword [ebp - 0x24]
add esp, 8
mov dword [edi + 0x14], esi
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
push edi
mov word [edi + 0xc], 0
mov edi, dword [ebp - 0x14]
push ebx
push dword [ebp - 0x18]
lea esi, [edi + 4]
mov ecx, esi
call fcn.0040838c
push 1
push dword [ebp - 0x10]
call fcn.0041bb43
push 1
push dword [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
call fcn.0041bb43
push str.i5MQhHsRv0
call fcn.00429720
add esp, 0x14
inc eax
push eax
call fcn.0041bdfa
add esp, 4
mov ebx, eax
mov dword [ebp - 0x24], ebx
push str.i5MQhHsRv0
push ebx
call fcn.00429eb0
mov dword [ebp - 0x28], ebx
mov dword [ebp - 4], 4
push ebx
mov dword [ebp - 0x38], 1
call fcn.00429720
add esp, 0xc
inc eax
push eax
call fcn.0041bdfa
add esp, 4
mov ebx, eax
mov dword [ebp - 0x18], ebx
push dword [ebp - 0x24]
push ebx
call fcn.00429eb0
add esp, 8
mov dword [ebp - 0x34], ebx
mov byte [ebp - 4], 5
mov ecx, dword [esi]
mov dword [ebp - 0x10], 0
mov eax, dword [ecx + 4]
mov dword [ebp - 0x20], eax
cmp byte [eax + 0xd], 0
jne 0x44f10f
cmp dword [eax + 0x10], 1
mov dword [ebp - 0x20], eax
jge 0x44f0fb
mov eax, dword [eax + 8]
mov dword [ebp - 0x10], 0
jmp 0x44f106
mov ecx, eax
mov dword [ebp - 0x10], 1
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x44f0e6
mov esi, dword [ebp - 0x1c]
cmp byte [ecx + 0xd], 0
jne 0x44f11f
cmp dword [ecx + 0x10], 1
jle 0x44f19f
cmp dword [esi + 4], 0xaaaaaaa
je 0x44f986
mov ebx, dword [esi]
mov dword [ebp - 0x30], esi
mov byte [ebp - 4], 6
push 0x18
mov dword [ebp - 0x2c], 0
call fcn.0041bb74
mov edi, eax
add esp, 4
mov dword [ebp - 0x2c], edi
push dword [ebp - 0x18]
mov byte [ebp - 4], 7
mov dword [edi + 0x10], 1
call fcn.00429720
add esp, 4
inc eax
push eax
call fcn.0041bdfa
add esp, 4
mov esi, eax
push dword [ebp - 0x18]
push esi
call fcn.00429eb0
mov dword [edi + 0x14], esi
add esp, 8
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
push edi
push dword [ebp - 0x10]
mov word [edi + 0xc], 0
mov edi, dword [ebp - 0x14]
push dword [ebp - 0x20]
lea ecx, [edi + 4]
call fcn.0040838c
mov ebx, dword [ebp - 0x18]
push 1
push ebx
call fcn.0041bb43
push 1
push dword [ebp - 0x24]
mov dword [ebp - 4], 0xffffffff
call fcn.0041bb43
lea esi, [edi + 4]
push str.oLcOfLrOpq3
mov dword [ebp - 0x1c], esi
call fcn.00429720
add esp, 0x14
inc eax
push eax
call fcn.0041bdfa
add esp, 4
mov ebx, eax
mov dword [ebp - 0x20], ebx
push str.oLcOfLrOpq3
push ebx
call fcn.00429eb0
mov dword [ebp - 0x28], ebx
mov dword [ebp - 4], 8
push ebx
mov dword [ebp - 0x38], 2
call fcn.00429720
add esp, 0xc
inc eax
push eax
call fcn.0041bdfa
add esp, 4
mov ebx, eax
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x20]
push ebx
call fcn.00429eb0
add esp, 8
mov dword [ebp - 0x34], ebx
mov byte [ebp - 4], 9
mov ecx, dword [esi]
mov dword [ebp - 0x18], 0
mov edx, dword [ecx + 4]
mov dword [ebp - 0x24], edx
cmp byte [edx + 0xd], 0
jne 0x44f266
mov eax, edx
nop dword [eax + eax]
cmp dword [eax + 0x10], 2
mov dword [ebp - 0x24], eax
jge 0x44f255
mov eax, dword [eax + 8]
mov dword [ebp - 0x18], 0
jmp 0x44f260
mov ecx, eax
mov dword [ebp - 0x18], 1
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x44f240
cmp byte [ecx + 0xd], 0
jne 0x44f276
cmp dword [ecx + 0x10], 2
jle 0x44f2f6
cmp dword [esi + 4], 0xaaaaaaa
je 0x44f98b
mov ebx, dword [esi]
mov dword [ebp - 0x30], esi
mov byte [ebp - 4], 0xa
push 0x18
mov dword [ebp - 0x2c], 0
call fcn.0041bb74
mov edi, eax
add esp, 4
mov dword [ebp - 0x2c], edi
push dword [ebp - 0x10]
mov byte [ebp - 4], 0xb
mov dword [edi + 0x10], 2
call fcn.00429720
add esp, 4
inc eax
push eax
call fcn.0041bdfa
add esp, 4
mov esi, eax
push dword [ebp - 0x10]
push esi
call fcn.00429eb0
mov ecx, dword [ebp - 0x1c]
add esp, 8
mov dword [edi + 0x14], esi
mov dword [edi], ebx
mov dword [edi + 4], ebx
push edi
push dword [ebp - 0x18]
mov dword [edi + 8], ebx
push dword [ebp - 0x24]
mov word [edi + 0xc], 0
call fcn.0040838c
mov edi, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x10]
push 1
push ebx
call fcn.0041bb43
push 1
push dword [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
call fcn.0041bb43
lea esi, [edi + 4]
push str.b8rR_aNF
mov dword [ebp - 0x1c], esi
call fcn.00429720
add esp, 0x14
inc eax
push eax
call fcn.0041bdfa
add esp, 4
mov ebx, eax
mov dword [ebp - 0x20], ebx
push str.b8rR_aNF
push ebx
call fcn.00429eb0
mov dword [ebp - 0x28], ebx
mov dword [ebp - 4], 0xc
push ebx
mov dword [ebp - 0x38], 3
call fcn.00429720
add esp, 0xc
inc eax
push eax
call fcn.0041bdfa
add esp, 4
mov ebx, eax
mov dword [ebp - 0x10], ebx
push dword [ebp - 0x20]
push ebx
call fcn.00429eb0
add esp, 8
mov dword [ebp - 0x34], ebx
mov byte [ebp - 4], 0xd
mov ecx, dword [esi]
mov dword [ebp - 0x18], 0
mov edx, dword [ecx + 4]
mov dword [ebp - 0x24], edx
cmp byte [edx + 0xd], 0
jne 0x44f3b6
mov eax, edx
nop
cmp dword [eax + 0x10], 3
mov dword [ebp - 0x24], eax
jge 0x44f3a5
mov eax, dword [eax + 8]
mov dword [ebp - 0x18], 0
jmp 0x44f3b0
mov ecx, eax
mov dword [ebp - 0x18], 1
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x44f390
cmp byte [ecx + 0xd], 0
jne 0x44f3c6
cmp dword [ecx + 0x10], 3
jle 0x44f446
cmp dword [esi + 4], 0xaaaaaaa
je 0x44f990
mov ebx, dword [esi]
mov dword [ebp - 0x30], esi
mov byte [ebp - 4], 0xe
push 0x18
mov dword [ebp - 0x2c], 0
call fcn.0041bb74
mov edi, eax
add esp, 4
mov dword [ebp - 0x2c], edi
push dword [ebp - 0x10]
mov byte [ebp - 4], 0xf
mov dword [edi + 0x10], 3
call fcn.00429720
add esp, 4
inc eax
push eax
call fcn.0041bdfa
add esp, 4
mov esi, eax
push dword [ebp - 0x10]
push esi
call fcn.00429eb0
mov ecx, dword [ebp - 0x1c]
add esp, 8
mov dword [edi + 0x14], esi
mov dword [edi], ebx
mov dword [edi + 4], ebx
push edi
push dword [ebp - 0x18]
mov dword [edi + 8], ebx
push dword [ebp - 0x24]
mov word [edi + 0xc], 0
call fcn.0040838c
mov edi, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x10]
push 1
push ebx
call fcn.0041bb43
push 1
push dword [ebp - 0x20]
mov dword [ebp - 4], 0xffffffff
call fcn.0041bb43
add esp, 0x10
mov ecx, edi
push str.mt2Sky6Rjt6TlunRnT6
push 4
call fcn.00407ee8
push str.nt2Sky6Rjt6TlunRnT6
push 5
mov ecx, edi
call fcn.00407ee8
push str.ot2Sky6Rjt6TlunRnT6
push 6
mov ecx, edi
call fcn.00407ee8
push str.lt2Sky6Rjt6TlunRnT6
push 7
mov ecx, edi
call fcn.00407ee8
push str.lyrRhuYRp1cBk9sP
push 8
mov ecx, edi
call fcn.00407ee8
push str.paMRaunTeu6PkTsSjCrRi1
push 9
mov ecx, edi
call fcn.00407ee8
push str.jybSpXMBXqMPnarOXu2Sky6Rjt6TlunRnT6
push 0xa
mov ecx, edi
call fcn.00407ee8
push str.aLcSk1NPj0sRkmbBjH7SjxbSc1
push 0xb
mov ecx, edi
call fcn.00407ee8
push str.XDNQXu2Sky6Rjt6TlunRnT6
push 0xc
mov ecx, edi
call fcn.00407ee8
push str.K9LI1mpN5X5K99LH4yqL19aJ9upH
push 0xd
mov ecx, edi
call fcn.00407ee8
push str.PyKLIyqGFq4K9HpN9DqNDDqH
push 0xe
mov ecx, edi
call fcn.00407ee8
push str.3y4KPyqGFq4K9HpN2HaJVHLIKmKH
push 0xf
mov ecx, edi
call fcn.00407ee8
push str.FipN2HaJVHLIKmKH
push 0x10
mov ecx, edi
call fcn.00407ee8
push str.35_J3L4JV94LEy5L9H5J51
push 0x11
mov ecx, edi
call fcn.00407ee8
push str.3mpJJLpN2HaJVHLIKmKH
push 0x12
mov ecx, edi
call fcn.00407ee8
push str.3y_JK5pGKyLGLH5IF9qN2HaJVHLIKmKH
push 0x13
mov ecx, edi
call fcn.00407ee8
push str.N5_KEa_J7y5L9H5J51
push 0x14
mov ecx, edi
call fcn.00407ee8
push str.EypNILpHBLKMVqpK71
push 0x15
mov ecx, edi
call fcn.00407ee8
push str.ILpHBLKMVapKVDpJI9LLGHLH4yLJJT4
push 0x16
mov ecx, edi
call fcn.00407ee8
push str.ILpHBLKMVapKVupJKyaK5DKI5PLH4yLJJT4
push 0x17
mov ecx, edi
call fcn.00407ee8
push str.5L5J1y5L9H5J51
push 0x18
mov ecx, edi
call fcn.00407ee8
push str.95pHILKHV94LEy5L9H5J51
push 0x19
mov ecx, edi
call fcn.00407ee8
push str.4LpGCa_J5yaGKupNKa4LCL4
push 0x1a
mov ecx, edi
call fcn.00407ee8
push str.115KV1LGJDqLF95HV1aKFHLH3HLH41
push 0x1b
mov ecx, edi
call fcn.00407ee8
push str.G5pKJTqJIHpNNy_K41
push 0x1c
mov ecx, edi
call fcn.00407ee8
push str.G5pKJTqJIHpN9DqN9upGF9aK5D4L
push 0x1d
mov ecx, edi
call fcn.00407ee8
push str.EypN9u4L59aJ5HqNDDqH
push 0x1e
mov ecx, edi
call fcn.00407ee8
push str.115KVDpJEuKH3HqKVHqJVa_J5HqNDDqH
push 0x1f
mov ecx, edi
call fcn.00407ee8
push str.JaqK3mpJ3ipN1u4HVa_J5HqN65KICL4HVqpK71
push 0x20
mov ecx, edi
call fcn.00407ee8
push str.K9LI1mpNDy4H5y5L9H5J51
push 0x21
mov ecx, edi
call fcn.00407ee8
push str.115KCapG1HLIFupNKa4LCL4
push 0x22
mov ecx, edi
call fcn.00407ee8
push str.J5_L5yLIJyaJFHqN1m4JFTLH41
push 0x23
mov ecx, edi
call fcn.00407ee8
push str.EypK1PLHVL4MGy_KKyaK55LL5D5L
push 0x24
mov ecx, edi
call fcn.00407ee8
push str.K9LI1mpNEypK1PLHVqpK71
push 0x25
mov ecx, edi
call fcn.00407ee8
push str.K9LI1mpNEyKHO1qJIHqNDDqH
push 0x26
mov ecx, edi
call fcn.00407ee8
push str.6L5JCyLHO1LII54L9y_JVupJKapG51
push 0x27
mov ecx, edi
call fcn.00407ee8
push str.5X5K99LGKapJEyaJFHLI3LpN2LpH9u4
push 0x28
mov ecx, edi
call fcn.00407ee8
push str.5X5K99LGKapJEyqL19aJ9upH
push 0x29
mov ecx, edi
call fcn.00407ee8
push str.Ky4H1aqNNy_K41
push 0x2a
mov ecx, edi
call fcn.00407ee8
push str.KyKJF9aKFTqNNy_K41
push 0x2b
mov ecx, edi
call fcn.00407ee8
push str.9upNEy5H1aqKVqpK71
push 0x2c
mov ecx, edi
call fcn.00407ee8
push str.K9LI1mpN5X5K99LHJyqJE1
push 0x2d
mov ecx, edi
call fcn.00407ee8
push str.6L5JCy5LIaKGCyqL19aJ9upH
push 0x2e
mov ecx, edi
call fcn.00407ee8
push str.115KVapKVmKIDa4L5HpNDDqH
push 0x2f
mov ecx, edi
call fcn.00407ee8
push str.115KCapG1HLIFupN9DqNLu_K5TKIJHLHIL4H
push 0x30
mov ecx, edi
call fcn.00407ee8
push str.115KVapKV9LH7apKKL_K5HpN6y_K
push 0x31
mov ecx, edi
call fcn.00407ee8
push str.115KVPLHIyLIEPpJ
push 0x32
mov ecx, edi
call fcn.00407ee8
push str.19pJLHqNNy_K41
push 0x33
mov ecx, edi
call fcn.00407ee8
push str.1L5L8y_KVqKG9m4LFyqKL9_I5D4L
push 0x34
mov ecx, edi
call fcn.00407ee8
push str.1L5L8y_KVqKG9m4LFyaGFHKM
push 0x35
mov ecx, edi
call fcn.00407ee8
push str.115KV54JILKG4aqNJHLGIHLH41
push 0x36
mov ecx, edi
call fcn.00407ee8
push str.115KVL4MGa_K5H4
push 0x37
mov ecx, edi
call fcn.00407ee8
push str.3LqKKyKJVHaK954JVHLIKmKH
push 0x38
mov ecx, edi
call fcn.00407ee8
push str.3LqKKyKJVHaK954JVqpK71
push 0x39
mov ecx, edi
call fcn.00407ee8
push str.3LqKKyKJVHaK954JVL4MGa_K5HpNN5_KE1
push 0x3a
mov ecx, edi
call fcn.00407ee8
push str.69LH5qKILqpNE5pHVTaJ4y5L9H5J51
push 0x3b
mov ecx, edi
call fcn.00407ee8
push str.3LqKKyKJVP_K5LKJ9LLJVqpK71
push 0x3c
mov ecx, edi
call fcn.00407ee8
push str.3y_JK5pGKyLGLH5IF9qN2HaJ
push 0x3d
mov ecx, edi
call fcn.00407ee8
push str.3y4KPyqGFq4KLHLHIyLI41
push 0x3e
mov ecx, edi
call fcn.00407ee8
push str.115KVDKGEupJKyqKK5_KK1
push 0x3f
mov ecx, edi
call fcn.00407ee8
push str.115KVDKGEupJKyqKK5_KKyqJEyaLD1
push 0x40
mov ecx, edi
call fcn.00407ee8
push str.N5_KEyLGG1qN35_JEy4LVD5L195L
push 0x41
mov ecx, edi
call fcn.00407ee8
push str.K9LI1mpN5XLHVL4MGa_K5HpNDDqH
push 0x42
mov ecx, edi
call fcn.00407ee8
push str.EypNILpHBLKMVPKICL4
push 0x43
mov ecx, edi
call fcn.00407ee8
push str.85_L5yaJFHqNILpG5a_L5HpNILpHBLKM
push 0x44
mov ecx, edi
call fcn.00407ee8
push str.PyKLIyqGFq4K9HpN9D5
push 0x45
mov ecx, edi
call fcn.00407ee8
push str.ILpHBLKMVa_JM54J9HpNDDqH
push 0x46
mov ecx, edi
call fcn.00407ee8
push str.115KVXKGJyLHO1LIIL4HVy_J
push 0x47
mov ecx, edi
call fcn.00407ee8
push str.JaqKVD4JFDpIVDLHKyaG1DpI
push 0x48
mov ecx, edi
call fcn.00407ee8
push str.115KVapKVupJKyLG3HLIM54L5HpNLu4L9m4
push 0x49
mov ecx, edi
call fcn.00407ee8
push str.ILpHBLKMVL4MGa_K5HpN4L_H1L5JKyLJJT4
push 0x4a
mov ecx, edi
call fcn.00407ee8
push str.LupIEypLEyLHI9qJIyLJJT4
push 0x4b
mov ecx, edi
call fcn.00407ee8
push str.3yKJGL5L59qN9H4
push 0x4c
mov ecx, edi
call fcn.00407ee8
push str.N9pIVDLGMLpNILKKLLpKKyLJJTpNKa4LCL4
push 0x4d
mov ecx, edi
call fcn.00407ee8
push str.N9pIVDLGMLpN3XKGETKHJyaK55LL5D5L
push 0x4e
mov ecx, edi
call fcn.00407ee8
push str.Ny_KB9pJFipNNy_K41
push 0x4f
mov ecx, edi
call fcn.00407ee8
push str.N5_JKy5LFyqK1PLHVD4I1upH5DqNKy4
push 0x50
mov ecx, edi
call fcn.00407ee8
push str.Ey4LVDLGMLpN2HaJVHLIKmKH
push 0x51
mov ecx, edi
call fcn.00407ee8
push str.J5_L5yaGKupNKa4LCL4
push 0x52
mov ecx, edi
call fcn.00407ee8
push str.3yKJGa4HV9KH5upN3y4K9L4HVqpK71
push 0x53
mov ecx, edi
call fcn.00407ee8
push str.9u_HFy5L9H5J51
push 0x54
mov ecx, edi
call fcn.00407ee8
push str.J5_L5y5LFyaH9mKHV94LEyqG115L9y_J
push 0x55
mov ecx, edi
call fcn.00407ee8
push str.115KVmKIDa4L454L5yaK55pG8L4HVqpK71
push 0x56
mov ecx, edi
call fcn.00407ee8
push str.3y_JK5pGKyLGLH5IF9qNDDqH
push 0x57
mov ecx, edi
call fcn.00407ee8
push str.3yMRlL7Ta9789H4
push 0x58
mov ecx, edi
call fcn.00407ee8
push str.4ybRaL4U
push 0x59
mov ecx, edi
call fcn.00407ee8
push str.ODKPhm683yMRla6Ra97
push 0x5a
mov ecx, edi
call fcn.00407ee8
push str.tDMPhmrOh97
push 0x5b
mov ecx, edi
call fcn.00407ee8
push str.r9rOpKrQaa7
push 0x5c
mov ecx, edi
call fcn.00407ee8
push str.jGMOp1
push 0x5d
mov ecx, edi
call fcn.00407ee8
push str.M9MO3yMRla6Ra97
push 0x5e
mov ecx, edi
call fcn.00407ee8
push str.CyrPo1
push 0x5f
mov ecx, edi
call fcn.00407ee8
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.00407edd
call fcn.00407edd
call fcn.00407edd
call fcn.00407edd
int3