Function at 0x44629b
Capabilities:
Enumerate processes

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x88
mov dword [ebp - 0x10], 0xef59d06f
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x10]
cmp eax, 0xff542260
jle 0x44632e
cmp eax, 0x34bd1267
jle 0x446394
cmp eax, 0x5ec060f4
jg 0x446477
cmp eax, 0x3e87969a
jg 0x446617
cmp eax, 0x3a3440c0
jle 0x446835
cmp eax, 0x3a3440c1
je 0x446c00
cmp eax, 0x3be83f10
je 0x446c56
cmp eax, 0x3c61ed53
jne 0x4462b4
push 0
push 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov eax, 0x7797d100
cmp ecx, 0xffffffff
je 0x447237
mov eax, 0xaf375a7d
jmp 0x447237
cmp eax, 0xb9510fb5
jg 0x446409
cmp eax, 0xa129cc5f
jg 0x4464c3
cmp eax, 0x8e86d707
jle 0x446678
cmp eax, 0x97d983c8
jle 0x44689b
cmp eax, 0x97d983c9
je 0x446c90
cmp eax, 0x99e1112f
je 0x446c9f
cmp eax, 0xa024d5ed
jne 0x4462b4
imul eax, dword [ebp - 0x18], 0xbb0
shr eax, 0xa
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xb6d6d64c
jmp 0x4462b4
cmp eax, 0x1430721a
jg 0x446544
cmp eax, 0x8a28674
jle 0x4466bf
cmp eax, 0xdb71b0b
jle 0x4468e1
cmp eax, 0xdb71b0c
je 0x446cbd
cmp eax, 0xe8c1cdd
je 0x446cf9
cmp eax, 0x11232b78
jne 0x4462b4
mov eax, dword [ebp - 0x14]
shl eax, 0xf
add eax, 0xffdc00f9
shr eax, 0xb
add eax, 0xce
mov dword [ebp - 0x14], eax
push 0x4ecf
push 0x4839
push 0x4ac
push eax
call fcn.004474a0
add esp, 0x10
jmp 0x4469b6
cmp eax, 0xcd43b187
jg 0x446590
cmp eax, 0xc281df7d
jle 0x4466f5
cmp eax, 0xc4d090b8
jle 0x446903
cmp eax, 0xc4d090b9
je 0x446d0e
cmp eax, 0xc67c9397
je 0x446d49
cmp eax, 0xc8b81755
jne 0x4462b4
mov esi, dword [ebp - 0x14]
shl esi, 8
add esi, 0xae8
mov dword [ebp - 0x14], esi
call fcn.00408e87
mov eax, 0xc2169140
cmp esi, 5
jl 0x447237
mov eax, 0x5ec060f5
jmp 0x447237
cmp eax, 0x7039db0e
jle 0x446759
cmp eax, 0x78f4dec7
jle 0x44692a
cmp eax, 0x78f4dec8
je 0x446d80
cmp eax, 0x7cf7d653
je 0x446d8c
cmp eax, 0x7f9054ae
jne 0x4462b4
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 0x59b395a8
jmp 0x4462b4
cmp eax, 0xaf375a7c
jle 0x44679f
cmp eax, 0xb6d6d64b
jle 0x446979
cmp eax, 0xb6d6d64c
je 0x446e7e
cmp eax, 0xb8330b2f
je 0x446da6
cmp eax, 0xb8477b3b
jne 0x4462b4
imul eax, dword [ebp - 0x18], 0x6b
add eax, 0x6b
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x6143
dec edx
shr eax, 6
add eax, eax
add eax, 0x10c
mov dword [ebp - 0x18], eax
mov eax, 0x3a3440c1
cmp ecx, edx
je 0x446528
mov eax, 0xe8e81bb5
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], 0x400
jmp 0x4462b4
cmp eax, 0x20c569ad
jle 0x4467cc
cmp eax, 0x26bf628e
jle 0x4469a0
cmp eax, 0x26bf628f
je 0x446dbf
cmp eax, 0x2fcad01f
je 0x446dcb
cmp eax, 0x34461859
jne 0x4462b4
mov eax, dword [ebp - 0x1c]
add eax, 0x24
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0xb8477b3b
jmp 0x4462b4
cmp eax, 0xe8e81bb4
jle 0x4467f9
cmp eax, 0xef59d06e
jle 0x4469c2
cmp eax, 0xef59d06f
je 0x446dd7
cmp eax, 0xf53515cd
je 0x446def
cmp eax, 0xfa548fda
jne 0x4462b4
mov ebx, dword [ebp - 0x14]
shl ebx, 0xe
add ebx, 0xfffdc000
mov dword [ebp - 0x14], ebx
push 0x24ac
push 0x3ee8
push ebx
call fcn.0042e7cb
add esp, 0xc
push ebx
push 0x257d
push 0x5560
push 0x12c6
call fcn.00447260
add esp, 0x10
mov eax, 0x3be83f10
cmp ebx, 0x9f
jl 0x44702e
jmp 0x447237
cmp eax, 0x59b395a7
jg 0x446a26
cmp eax, 0x3e87969b
je 0x446e2d
cmp eax, 0x54d51411
jne 0x44723f
imul esi, dword [ebp - 0x14], 0x768
add esi, 0xfffffa50
mov dword [ebp - 0x14], esi
push 0x4a56
push esi
push 0x5aaa
push 0xf61
call fcn.00447260
add esp, 0x10
mov eax, 0xdb71b0c
cmp esi, 0x7c
jb 0x447237
mov eax, 0xc4d090b9
jmp 0x447237
cmp eax, 0x88620ca6
jg 0x446a83
cmp eax, 0x817a5cc1
je 0x446e60
cmp eax, 0x866a7d67
jne 0x4462b4
imul ecx, dword [ebp - 0x14], 0xc5
shr ecx, 6
add ecx, 0xffffffeb
mov dword [ebp - 0x14], ecx
mov eax, 0xc281df7e
cmp ecx, 0x95
jb 0x446c86
jmp 0x447237
cmp eax, 0x7e9f9ab
jg 0x446aa5
cmp eax, 0xff542261
je 0x446e8a
cmp eax, 0xc778b8
jne 0x4462b4
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x10], 0x49764bbe
jmp 0x4462b4
cmp eax, 0xbf1c6bfd
jg 0x446af0
cmp eax, 0xb9510fb6
je 0x446e9f
cmp eax, 0xbdd66765
jne 0x4462b4
imul ecx, dword [ebp - 0x18], 0xb9
add ecx, 0xffffe25f
shr ecx, 0xc
imul ecx, ecx
imul edx, ecx, 0x48f1
dec edx
mov dword [ebp - 0x18], 0
mov eax, 0x1430721b
cmp ecx, edx
je 0x446745
mov eax, 0xa7fd4ba0
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x48], eax
jmp 0x4462b4
cmp eax, 0x6c27be99
jg 0x446b26
cmp eax, 0x5ec060f5
je 0x446ec9
cmp eax, 0x689ef95a
jne 0x4462b4
mov eax, dword [ebp - 0x18]
lea eax, [eax*8 - 0x187]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x99e1112f
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], ecx
jmp 0x4462b4
cmp eax, 0xa7fd4b9f
jg 0x446b4f
cmp eax, 0xa129cc60
je 0x446f0e
cmp eax, 0xa657ae38
jne 0x4462b4
mov dword [ebp - 0x10], 0x26b24fa0
jmp 0x4462b4
cmp eax, 0x18aa780b
jg 0x446ba1
cmp eax, 0x1430721b
je 0x446f3e
cmp eax, 0x156253e9
jne 0x4462b4
mov dword [ebp - 0x10], 0x88620ca7
jmp 0x4462b4
cmp eax, 0xdaef8b8d
jg 0x446bce
cmp eax, 0xcd43b188
je 0x446f77
cmp eax, 0xd6222b1a
jne 0x4462b4
mov ecx, dword [ebp - 0x6c]
mov eax, 0x689ef95a
cmp ecx, dword [ebp - 0x80]
ja 0x447237
mov eax, 0xed16efec
jmp 0x447237
cmp eax, 0x34bd1268
je 0x446f83
cmp eax, 0x39e54118
jne 0x4462b4
imul eax, dword [ebp - 0x14], 0x45
add eax, 0x12
shr eax, 0xb
mov ecx, eax
shl ecx, 7
lea esi, [ecx + eax*8]
lea eax, [ecx + eax*8]
add eax, 0xffff8dc8
mov dword [ebp - 0x14], eax
push 0x52a6
push eax
push 0x5c01
push 0x4b12
call fcn.00447380
add esp, 0x10
mov eax, 0x34461859
cmp esi, 0x7256
jb 0x447237
mov eax, 0x6c962797
jmp 0x447237
cmp eax, 0x8e86d708
je 0x446fc2
cmp eax, 0x96ab04d0
jne 0x4462b4
mov eax, dword [ebp - 0x14]
shr eax, 0xf
sub eax, 0xffffff80
mov dword [ebp - 0x14], eax
push 0x1b82
push 0x5dda
push 0x3f81
push eax
call fcn.004474a0
add esp, 0x10
mov dword [ebp - 0x10], 0x876fb38
jmp 0x4462b4
cmp eax, 0x8a28675
je 0x446ffe
cmp eax, 0xa4f48d1
jne 0x4462b4
mov dword [ebp - 0x10], 0xc3e5584b
jmp 0x4462b4
cmp eax, 0xc281df7e
je 0x447038
cmp eax, 0xc3e5584b
jne 0x4462b4
push dword [ebp - 0x20]
call edi
mov dword [ebp - 0x10], 0xa129cc60
jmp 0x4462b4
cmp eax, 0x7039db0f
je 0x44707b
cmp eax, 0x7797d100
jne 0x4462b4
mov eax, dword [ebp - 0x18]
mov ecx, 0xffffff20
add eax, ecx
imul ecx, eax, 0x5dc
imul eax, eax
imul edx, eax, 0x665
dec edx
add ecx, 0xffffe50c
mov dword [ebp - 0x18], ecx
mov ecx, 0x866a7d67
cmp eax, edx
je 0x446971
mov ecx, 0xc778b8
mov dword [ebp - 0x10], ecx
jmp 0x44714c
cmp eax, 0xaf375a7d
je 0x4470a4
cmp eax, 0xb19ba88c
jne 0x4462b4
imul eax, dword [ebp - 0x14], 0x6dd400
add eax, 0x19000
mov dword [ebp - 0x14], eax
jmp 0x4469b6
cmp eax, 0x20c569ae
je 0x4470b3
cmp eax, 0x26b24fa0
jne 0x4462b4
mov dword [ebp - 0x10], 0xdbe08cdf
jmp 0x4462b4
cmp eax, 0xe8e81bb5
je 0x4470f6
cmp eax, 0xed16efec
jne 0x4462b4
mov eax, dword [ebp - 0x18]
lea ecx, [eax + eax]
add ecx, 0x1c6
shr ecx, 2
mov eax, ecx
imul eax, ecx
shl ecx, 8
imul edx, eax, 0x68f9
add ecx, 0xffffff29
dec edx
shr ecx, 1
imul ecx, ecx, 0x37
mov dword [ebp - 0x18], ecx
mov ecx, 0xb9510fb6
cmp edx, eax
je 0x446a12
mov ecx, 0xa7fd4ba0
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x48], eax
jmp 0x4462b4
cmp eax, 0x59b395a8
je 0x447114
cmp eax, 0x5e8005cb
jne 0x4462b4
push dword [ebp - 0x3c]
push dword [ebp - 0x64]
push dword [ebp - 0x74]
call fcn.00450060
add esp, 0xc
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x74]
mov word [ecx + eax*2], 0xa
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x3c]
lea eax, [eax + ecx + 2]
mov dword [ebp - 0x40], eax
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call sub.KERNEL32.dll_Process32NextW
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x10], 0x6c27be9a
jmp 0x4462b4
cmp eax, 0x88620ca7
je 0x44713d
cmp eax, 0x8cdc0695
jne 0x4462b4
mov dword [ebp - 0x10], 0x156253e9
jmp 0x4462b4
cmp eax, 0x7e9f9ac
je 0x447157
cmp eax, 0x876fb38
jne 0x4462b4
mov eax, dword [ebp - 0x14]
shr eax, 4
and eax, 0xffffc00
or eax, 0x3f
mov dword [ebp - 0x14], eax
push eax
push 0xd8f
push 0x1b79
push 0x5c30
call fcn.00447380
add esp, 0x10
mov dword [ebp - 0x10], 0xdaef8b8e
jmp 0x4462b4
cmp eax, 0xbf1c6bfe
je 0x447180
cmp eax, 0xc2169140
jne 0x4462b4
push dword [ebp - 0x40]
push dword [ebp - 0x24]
push dword [ebp - 0x30]
push dword [ebp + 8]
call fcn.00428681
add esp, 0x10
mov dword [ebp - 0x10], 0x8e86d708
jmp 0x4462b4
cmp eax, 0x6c27be9a
je 0x4471aa
cmp eax, 0x6c962797
jne 0x4462b4
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0x34461859
jmp 0x4462b4
cmp eax, 0xa7fd4ba0
je 0x4471da
cmp eax, 0xa8f6b7d7
jne 0x4462b4
mov eax, dword [ebp - 0x68]
add eax, eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
add eax, 4
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x6c]
mov eax, 0x99e1112f
cmp edx, ecx
ja 0x446b8d
mov eax, 0xbdd66765
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x50], eax
jmp 0x4462b4
cmp eax, 0x18aa780c
je 0x446f6b
cmp eax, 0x208df623
jne 0x4462b4
mov eax, dword [ebp - 0x8c]
add eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x10], 0xcd43b188
jmp 0x4462b4
cmp eax, 0xdaef8b8e
je 0x4471f5
cmp eax, 0xdbe08cdf
jne 0x4462b4
push 0x400
call fcn.00460ec4
add esp, 4
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0xa024d5ed
jmp 0x4462b4
imul esi, dword [ebp - 0x14], 0x1da00
add esi, 0xffffba91
mov ebx, esi
shr ebx, 0xd
mov dword [ebp - 0x14], ebx
push 0x37ec
push 0x19a9
push ebx
push 0x16ef
call fcn.00447380
add esp, 0x10
push 0x25ea
push ebx
push 0x1104
call fcn.0042e7cb
add esp, 0xc
mov eax, 0x3c61ed53
cmp esi, 0x86000
jae 0x4471a0
jmp 0x447237
imul eax, dword [ebp - 0x14], 0xaf
add eax, 0x6f
shr eax, 3
imul esi, eax, 0xa7
mov dword [ebp - 0x14], esi
push esi
call fcn.00440ac8
add esp, 4
mov eax, 0x5e8005cb
cmp esi, 0xf1
jl 0x447237
mov eax, 0x3c61ed53
jmp 0x447237
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0xb8330b2f
jmp 0x4462b4
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x10], 0x208df623
jmp 0x4462b4
push 0x228
push 0
push dword [ebp - 0x7c]
call fcn.00450b60
add esp, 0xc
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x22c
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call sub.KERNEL32.dll_Process32FirstW
mov ecx, 0x8cdc0695
test eax, eax
je 0x446cf1
mov ecx, 0x3e87969b
mov dword [ebp - 0x10], ecx
jmp 0x4462b4
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x10], 0xdb71b0c
jmp 0x4462b4
mov eax, dword [ebp - 0x30]
mov word [eax + 0x1a], 0
push 0x1a
push 0x478110
push dword [ebp - 0x30]
call fcn.00450060
add esp, 0xc
push 6
push 0x47812a
push 0xd
push dword [ebp - 0x30]
call fcn.004474a0
add esp, 0x10
mov dword [ebp - 0x10], 0xc2169140
jmp 0x4462b4
imul eax, dword [ebp - 0x14], 0x1840
shr eax, 0xe
imul esi, eax, 0x17df
mov dword [ebp - 0x14], esi
push esi
call fcn.0044629b
add esp, 4
mov eax, 0xc8b81755
cmp esi, 0xc6
jae 0x447237
mov eax, 0x20c569ae
jmp 0x447237
mov dword [ebp - 0x10], 0xff542261
jmp 0x4462b4
push dword [ebp - 0x64]
call fcn.0046177a
add esp, 4
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0x18aa780c
jmp 0x4462b4
cmp dword [ebp - 0x40], 0
mov eax, 0xc778b8
je 0x446ff0
mov eax, 0x7f9054ae
jmp 0x446ff0
mov dword [ebp - 0x10], 0xa4f48d1
jmp 0x4462b4
mov dword [ebp - 0x10], 0x7cf7d653
jmp 0x4462b4
push eax
sub esp, 0x228
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0xa657ae38
jmp 0x4462b4
imul esi, dword [ebp - 0x14], 0x1b21f600
add esi, 0xffb94880
mov dword [ebp - 0x14], esi
push esi
push 0xeda
push 0x14f4
call fcn.0042e7cb
add esp, 0xc
mov eax, 0x34461859
cmp esi, 0xce
jl 0x447237
mov eax, 0xe8c1cdd
jmp 0x447237
imul eax, dword [ebp - 0x18], 0xbb
shr eax, 0xd
mov ecx, eax
imul ecx, eax
shl eax, 7
add eax, 0x1e80
imul edx, ecx, 0x1bd3
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x3c61ed53
cmp edx, ecx
jne 0x447232
jmp 0x447237
mov eax, dword [ebp - 0x14]
shr eax, 6
lea ebx, [eax*4 + 0x30b]
mov dword [ebp - 0x14], ebx
call fcn.00408e87
push ebx
call fcn.00440ac8
add esp, 4
mov dword [ebp - 0x10], 0x3c61ed53
jmp 0x4462b4
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0x8a28675
jmp 0x4462b4
mov ecx, dword [ebp - 0x14]
shl ecx, 0x18
or ecx, 0xa7
mov dword [ebp - 0x14], ecx
mov eax, 0xdbe08cdf
cmp ecx, 0xd6
jge 0x447237
mov eax, 0xf53515cd
jmp 0x447237
imul ebx, dword [ebp - 0x14], 0x459
add ebx, 0xffffebbd
mov dword [ebp - 0x14], ebx
push ebx
push 0x2165
push 0x5df7
push 0x10c6
call fcn.00447380
add esp, 0x10
call fcn.00408e87
mov eax, 0xc4d090b9
cmp ebx, 0x3e
jae 0x447237
mov eax, 0x6c27be9a
jmp 0x447237
mov ecx, dword [ebp - 0x18]
shr ecx, 9
imul eax, ecx, 0x39c00
imul ecx, ecx
imul edx, ecx, 0x400f
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xbf1c6bfe
cmp edx, ecx
je 0x447237
mov eax, 0x97d983c9
jmp 0x447237
mov ebx, dword [ebp - 0x14]
shl ebx, 0xa
or ebx, 0xe8
mov dword [ebp - 0x14], ebx
push 0x40d0
push 0x1f
push ebx
push 0x1a46
call fcn.00447260
add esp, 0x10
push ebx
call fcn.0044629b
add esp, 4
mov dword [ebp - 0x10], 0xa8f6b7d7
jmp 0x4462b4
mov dword [ebp - 0x10], 0x7e9f9ac
jmp 0x4462b4
imul eax, dword [ebp - 0x18], 0xab
add eax, 0xffff484f
mov ecx, eax
imul ecx, eax
shr eax, 1
imul edx, ecx, 0x689
dec edx
imul eax, eax, 0xc4
add eax, 0xfffeb47c
mov dword [ebp - 0x18], eax
mov eax, 0x96ab04d0
cmp edx, ecx
je 0x447237
mov eax, 0x26bf628f
jmp 0x447237
mov eax, dword [ebp - 0x18]
add eax, 0xffffffeb
shr eax, 0xc
mov ecx, eax
imul ecx, eax
shl eax, 7
imul edx, ecx, 0x557f
dec edx
add eax, 0xed
mov dword [ebp - 0x18], eax
mov eax, 0xc67c9397
cmp ecx, edx
je 0x446ff0
mov eax, 0xc778b8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
jmp 0x4462b4
mov eax, dword [ebp - 0x18]
shr eax, 6
lea ecx, [eax + eax*8]
lea eax, [eax + ecx*4]
shr eax, 5
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x6c7d
add eax, 0xcf
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xff542261
cmp edx, ecx
je 0x447237
mov eax, 0x5e8005cb
jmp 0x447237
imul ebx, dword [ebp - 0x14], 0xb6
add ebx, 0x94f1
mov dword [ebp - 0x14], ebx
push ebx
push 0x1b5
push 0xa7
push 0x2593
call fcn.00447380
add esp, 0x10
mov eax, 0xdbe08cdf
cmp ebx, 0xad
jae 0x447237
mov eax, 0x817a5cc1
jmp 0x447237
mov ecx, dword [ebp - 0x14]
add ecx, 0x6c
mov eax, ecx
shr eax, 0xd
mov dword [ebp - 0x14], eax
mov eax, 0x7cf7d653
cmp ecx, 0x10c000
jae 0x447237
mov eax, 0xdbe08cdf
jmp 0x447237
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0xe8c1cdd
jmp 0x4462b4
mov ebx, dword [ebp - 0x14]
shl ebx, 6
add ebx, 0x2601
mov dword [ebp - 0x14], ebx
push ebx
call fcn.00440ac8
add esp, 4
push 0x3701
push ebx
push 0x3007
call fcn.0042e7cb
add esp, 0xc
mov eax, 0x11232b78
cmp ebx, 0x45
jl 0x447237
mov eax, 0x54d51411
jmp 0x447237
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0x2fcad01f
jmp 0x4462b4
imul eax, dword [ebp - 0x18], 0x8c
add eax, 0xffffcaf4
shr eax, 5
imul eax, eax, 0xbe
add eax, 0xa87a
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xc4d090b9
jmp 0x4462b4
push dword [ebp - 0x20]
call edi
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0xc778b8
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
jmp 0x4462b4
push dword [ebp - 0x2c]
push dword [ebp - 0x88]
call fcn.00461221
add esp, 8
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x10], 0xd6222b1a
jmp 0x4462b4
mov eax, dword [ebp - 0x14]
shr eax, 3
imul ecx, eax, 0x70
add ecx, 0xffffff7c
mov dword [ebp - 0x14], ecx
mov eax, 0x7cf7d653
cmp ecx, 0x7f
jl 0x447237
mov eax, 0xdb71b0c
jmp 0x447237
cmp dword [ebp - 0x84], 0
mov eax, 0x34bd1268
je 0x4471bd
mov eax, 0xe8e81bb5
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x58], eax
jmp 0x4462b4
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0x78f4dec8
jmp 0x4462b4
mov ebx, dword [ebp - 0x14]
mov eax, 0xffffff2b
add ebx, eax
shr ebx, 1
and ebx, 0xffffffe0
mov dword [ebp - 0x14], ebx
push ebx
call fcn.0044629b
add esp, 4
push 0x5bc9
push 0x3403
push 0x5be
push ebx
call fcn.00447260
add esp, 0x10
mov eax, 0x7cf7d653
cmp ebx, 0x54
jae 0x447237
mov eax, 0x34461859
mov dword [ebp - 0x10], eax
jmp 0x4462b4
cmp eax, 0x49764bbe
jne 0x4462b4
push dword [ebp - 0x94]
call fcn.00460b1c
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret