Function at 0x4402f6
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x4c
mov dword [ebp - 0x10], 0x26cfc4f5
mov edi, dword [ebp - 0x30]
mov esi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x10]
cmp eax, 0xd0ca3eaa
jg 0x440354
cmp eax, 0xbb321aee
jle 0x440395
cmp eax, 0xcaf9a3c3
jle 0x440415
cmp eax, 0xcfe746fd
jg 0x440507
cmp eax, 0xcaf9a3c4
je 0x440552
cmp eax, 0xcd3d190e
jne 0x44030f
mov dword [ebp - 0x10], 0x52c8d077
mov ebx, dword [ebp - 0x1c]
jmp 0x44030f
cmp eax, 0x26cfc4f4
jg 0x4403d5
cmp eax, 0xdc5149ce
jle 0x440445
cmp eax, 0xd7a6350
jle 0x440532
cmp eax, 0xd7a6351
je 0x440566
cmp eax, 0x25e14778
jne 0x44030f
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0xc5b885ad
jmp 0x44030f
cmp eax, 0xaf093425
jg 0x440491
cmp eax, 0x9027e669
je 0x440586
cmp eax, 0x90bc63b1
je 0x4405d9
cmp eax, 0xaefbe83b
jne 0x44030f
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0xb8f4343e
jmp 0x44030f
cmp eax, 0x52c8d076
jg 0x4404be
cmp eax, 0x26cfc4f5
je 0x440613
cmp eax, 0x28dccfc4
je 0x44061f
cmp eax, 0x371c40e4
jne 0x44030f
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0xd7a6351
jmp 0x44030f
cmp eax, 0xbb321aef
je 0x44063f
cmp eax, 0xc2fb37a8
je 0x440656
cmp eax, 0xc5b885ad
jne 0x44030f
mov dword [ebp - 0x10], 0x52c8d077
mov ebx, dword [ebp - 0x3c]
jmp 0x44030f
cmp eax, 0xd0ca3eab
je 0x440674
cmp eax, 0xd18709b5
je 0x440680
cmp eax, 0xd7b4234c
jne 0x44030f
imul edi, edi, 0xb0d5
call fcn.004402f6
call fcn.004402f6
mov eax, 0xcaf9a3c4
cmp edi, 0xaf
jb 0x440706
mov eax, 0xbb321aef
jmp 0x440706
cmp eax, 0xaf093426
je 0x44069e
cmp eax, 0xb325a231
je 0x4406b2
cmp eax, 0xb8f4343e
jne 0x44030f
mov dword [ebp - 0x10], 0x25e14778
jmp 0x44030f
cmp eax, 0x52c8d077
je 0x4406ca
cmp eax, 0x54ad69e3
je 0x4406d9
cmp eax, 0x78dccbf4
jne 0x44030f
mov edx, dword [ebp - 0x24]
mov eax, 0xf62cb4e1
mov ecx, 0xf62cb4e1
cmp edx, dword [ebp - 0x4c]
je 0x4404f6
mov ecx, 0xcd3d190e
cmp byte [ebp - 0x15], 0
jne 0x440706
mov eax, ecx
jmp 0x440706
cmp eax, 0xcfe746fe
je 0x4406f6
cmp eax, 0xd047fbe7
jne 0x44030f
mov eax, dword [ebp - 0x1c]
add eax, 0x18
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0xaf093426
jmp 0x44030f
cmp eax, 0xf62cb4e1
jne 0x44070e
mov eax, dword [ebp - 0x1c]
add eax, 0x18
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0x371c40e4
jmp 0x44030f
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0x54ad69e3
jmp 0x44030f
mov eax, dword [ebp - 0x14]
shl eax, 6
add eax, 0xa7
shr eax, 0x17
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xdc5149cf
mov esi, dword [ebp - 0x54]
jmp 0x44030f
mov eax, dword [ebp - 0x20]
mov word [eax + 0x18], 0
push 0x18
push 0x468df0
push dword [ebp - 0x20]
call fcn.00443560
add esp, 0xc
push 5
push 0x468e08
push 0xc
push dword [ebp - 0x20]
call fcn.00440730
add esp, 0x10
push dword [ebp - 0x20]
push dword [ebp - 0x48]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
sete byte [ebp - 0x15]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0x78dccbf4
jmp 0x44030f
mov eax, dword [ebp - 0x14]
add eax, 0xffffffe7
mov ecx, eax
shr ecx, 3
imul eax, eax
add ecx, 0xffffff37
imul edx, eax, 0x7117
shr ecx, 0xc
dec edx
add ecx, 0xffffffb9
mov dword [ebp - 0x14], ecx
mov ecx, 0xbb321aef
cmp eax, edx
je 0x44060b
mov ecx, 0xcfe746fe
mov dword [ebp - 0x10], ecx
jmp 0x44030f
mov dword [ebp - 0x10], 0xb325a231
jmp 0x44030f
mov eax, dword [ebp - 0x14]
mov ecx, 0x1fffff
and eax, ecx
lea eax, [eax*8 - 0x149]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xd18709b5
jmp 0x44030f
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
add eax, 0x10
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0xaefbe83b
jmp 0x44030f
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
mov eax, 0xdc5149cf
cmp edx, ecx
je 0x44066a
mov eax, 0xcd3d190e
mov dword [ebp - 0x10], eax
xor esi, esi
jmp 0x44030f
mov dword [ebp - 0x10], 0xd047fbe7
jmp 0x44030f
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x48], eax
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0x9027e669
jmp 0x44030f
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0x90bc63b1
jmp 0x44030f
mov eax, dword fs:[0x30]
add eax, 0xc
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0xbb321aef
jmp 0x44030f
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x10], 0xcaf9a3c4
jmp 0x44030f
mov eax, dword [ebp - 0x14]
lea ecx, [eax + eax*8]
lea ecx, [ecx + ecx*2]
add eax, ecx
add eax, 0x15
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xd0ca3eab
jmp 0x44030f
cmp dword [ebp - 0x44], 0
mov eax, 0xc2fb37a8
je 0x440706
mov eax, 0x28dccfc4
mov dword [ebp - 0x10], eax
jmp 0x44030f
cmp eax, 0xdc5149cf
jne 0x44030f
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], ebx
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret