Function at 0x445e50
Capabilities:
Check if file exists
Get file attributes
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xeb8
mov eax, dword [0x74d890]
xor eax, esp
mov dword [esp + 0xeb4], eax
push ebx
push ebp
push esi
push edi
push 0x208
lea eax, [esp + 0x6a8]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x446978
mov ecx, 0x157
mov word [esp + 0x24], cx
mov eax, 0x153
mov word [esp + 0x28], ax
mov edx, 0x15c
mov word [esp + 0x26], dx
mov ecx, 0x17f
mov word [esp + 0x2a], cx
mov eax, 0x132
mov word [esp + 0x2e], ax
mov ecx, 0x17b
mov eax, ecx
mov edx, 0x172
mov word [esp + 0x2c], dx
mov word [esp + 0x30], cx
mov edx, 0x168
mov word [esp + 0x34], ax
mov ecx, 0x132
mov word [esp + 0x32], dx
mov word [esp + 0x36], cx
mov eax, 0x171
mov edx, 0x154
mov ecx, 0x17d
mov word [esp + 0x3a], ax
mov eax, 0x174
mov word [esp + 0x38], dx
mov word [esp + 0x3c], cx
xor ecx, ecx
mov edx, 0x17f
mov word [esp + 0x40], ax
mov word [esp + 0x3e], dx
mov word [esp + 0x42], cx
xor eax, eax
jmp 0x445f30
movzx ecx, word [esp + eax + 0x24]
mov word [esp + eax + 0x1a4], cx
add eax, 2
test cx, cx
jne 0x445f30
lea edx, [esp + 0x1a4]
push edx
call fcn.00445e00
lea eax, [esp + 0x1a8]
push 0x2e
push eax
call fcn.006152e7
add esp, 0xc
test eax, eax
je 0x4468bd
mov edx, eax
mov edi, edi
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x445f70
lea edi, [esp + 0x6a4]
sub eax, edx
add edi, 0xfffffffe
jmp 0x445f90
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x445f90
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x6a4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x4468bd
mov ecx, 0x16c
mov word [esp + 0x28], cx
mov eax, 0x172
mov word [esp + 0x26], ax
mov edx, 0x157
mov word [esp + 0x24], dx
mov ecx, 0x172
mov word [esp + 0x2e], cx
mov eax, 0x16e
mov word [esp + 0x2c], ax
mov edx, 0x17b
mov word [esp + 0x2a], dx
mov word [esp + 0x30], dx
mov ecx, pe_nt_image_headers32
mov word [esp + 0x34], cx
mov eax, 0x16c
mov word [esp + 0x32], ax
mov edx, 0x15c
mov word [esp + 0x36], dx
mov ecx, 0x169
mov word [esp + 0x3a], cx
mov eax, 0x171
mov word [esp + 0x38], ax
mov edx, 0x172
mov word [esp + 0x3c], dx
mov ecx, 0x171
mov word [esp + 0x40], cx
mov eax, 0x174
mov word [esp + 0x3e], ax
mov edx, 0x17f
mov word [esp + 0x42], dx
mov ecx, pe_nt_image_headers32
mov word [esp + 0x46], cx
mov eax, 0x17c
mov word [esp + 0x44], ax
mov edx, 0x153
mov eax, 0x17f
mov ecx, 0x172
mov word [esp + 0x48], dx
mov edx, eax
mov word [esp + 0x4c], cx
mov word [esp + 0x4a], ax
mov ecx, 0x17b
mov eax, 0x179
mov word [esp + 0x52], cx
mov word [esp + 0x4e], dx
mov word [esp + 0x50], ax
lea ecx, [esp + 0x24]
mov edx, 0x16e
xor eax, eax
push ecx
mov word [esp + 0x58], dx
mov word [esp + 0x5a], ax
call fcn.00445e00
mov edx, 0x157
mov word [esp + 0x5c], dx
mov eax, 0x15c
mov word [esp + 0x5e], ax
mov ecx, 0x153
mov edx, pe_nt_image_headers32
mov word [esp + 0x60], cx
mov word [esp + 0x62], dx
mov eax, 0x16c
mov word [esp + 0x64], ax
mov ecx, 0x17b
mov edx, 0x16e
mov word [esp + 0x66], cx
mov word [esp + 0x68], dx
mov eax, 0x173
mov ecx, 0x177
mov edx, 0x172
mov word [esp + 0x6a], ax
mov eax, 0x17f
mov word [esp + 0x6c], cx
mov word [esp + 0x6e], dx
mov ecx, 0x16c
mov edx, 0x17b
mov word [esp + 0x70], ax
mov word [esp + 0x72], cx
mov word [esp + 0x74], dx
mov eax, 0x16d
mov word [esp + 0x76], ax
mov ecx, pe_nt_image_headers32
mov word [esp + 0x78], cx
mov edx, 0x17e
mov word [esp + 0x7a], dx
mov ecx, 0x17d
mov word [esp + 0x7e], cx
mov edx, 0x17f
mov word [esp + 0x80], dx
mov eax, 0x17b
mov word [esp + 0x7c], ax
mov ecx, 0x16d
mov word [esp + 0x84], cx
mov edx, 0x17b
mov word [esp + 0x86], dx
mov eax, 0x16b
mov word [esp + 0x82], ax
mov eax, pe_nt_image_headers32
mov word [esp + 0x88], ax
mov word [esp + 0x8e], ax
mov ecx, 0x177
mov word [esp + 0x8a], cx
mov edx, 0x16c
mov word [esp + 0x8c], dx
mov ecx, 0x17d
mov word [esp + 0x90], cx
mov edx, 0x17f
mov word [esp + 0x92], dx
mov eax, 0x172
mov ecx, eax
mov word [esp + 0x96], cx
mov edx, 0x171
mov word [esp + 0x98], dx
mov word [esp + 0x94], ax
mov ecx, pe_nt_image_headers32
mov word [esp + 0x9c], cx
mov edx, 0x16d
mov word [esp + 0x9e], dx
mov eax, 0x16c
mov word [esp + 0x9a], ax
mov word [esp + 0xa0], ax
mov ecx, 0x17f
mov word [esp + 0xa2], cx
mov edx, 0x16e
mov word [esp + 0xa4], dx
mov word [esp + 0xa6], ax
mov ecx, pe_nt_image_headers32
mov word [esp + 0xa8], cx
mov edx, 0x169
mov word [esp + 0xaa], dx
mov eax, 0x177
mov word [esp + 0xac], ax
mov ecx, 0x16c
mov word [esp + 0xae], cx
mov edx, 0x178
mov word [esp + 0xb0], dx
mov eax, pe_nt_image_headers32
mov word [esp + 0xb2], ax
mov ecx, 0x177
mov edx, 0x172
mov word [esp + 0xb4], cx
mov word [esp + 0xb6], dx
mov eax, 0x17d
mov word [esp + 0xb8], ax
mov ecx, 0x171
mov edx, 0x173
mov word [esp + 0xba], cx
mov word [esp + 0xbc], dx
mov eax, 0x170
mov ecx, 0x17f
mov edx, 0x16c
mov word [esp + 0xbe], ax
mov eax, 0x177
mov word [esp + 0xc0], cx
mov word [esp + 0xc2], dx
mov ecx, 0x17e
mov edx, 0x174
mov word [esp + 0xc4], ax
mov word [esp + 0xc6], cx
mov word [esp + 0xc8], dx
mov eax, 0x17b
mov word [esp + 0xca], ax
mov edx, 0x17d
mov word [esp + 0xce], dx
mov ecx, pe_nt_image_headers32
mov word [esp + 0xcc], cx
mov edx, 0x170
mov word [esp + 0xd4], dx
mov ecx, 0x173
mov word [esp + 0xd2], cx
mov eax, 0x171
mov word [esp + 0xd0], ax
mov word [esp + 0xd6], ax
mov edx, 0x17b
mov word [esp + 0xda], dx
mov ecx, 0x172
mov eax, ecx
mov word [esp + 0xd8], cx
mov word [esp + 0xdc], ax
mov edx, 0x16d
mov word [esp + 0xe0], dx
mov ecx, 0x16c
mov word [esp + 0xde], cx
mov edx, 0x171
mov word [esp + 0xe6], dx
mov eax, pe_nt_image_headers32
mov word [esp + 0xe2], ax
mov ecx, 0x17a
mov word [esp + 0xe4], cx
mov edx, 0x17c
mov word [esp + 0xec], dx
mov eax, 0x16b
mov word [esp + 0xe8], ax
mov ecx, 0x172
mov word [esp + 0xea], cx
mov eax, pe_nt_image_headers32
mov word [esp + 0xee], ax
mov word [esp + 0xf4], ax
mov edx, 0x172
mov word [esp + 0xf2], dx
mov ecx, 0x177
mov word [esp + 0xf0], cx
mov word [esp + 0xf6], cx
mov edx, 0x16c
mov word [esp + 0xf8], dx
mov eax, 0x16d
mov word [esp + 0xfa], ax
mov ecx, pe_nt_image_headers32
mov word [esp + 0xfc], cx
mov edx, 0x17a
mov word [esp + 0xfe], dx
mov eax, 0x171
mov word [esp + 0x100], ax
mov ecx, 0x174
mov word [esp + 0x102], cx
mov edx, 0x17c
mov word [esp + 0x104], dx
mov eax, 0x17b
mov word [esp + 0x106], ax
mov ecx, 0x16e
mov edx, 0x132
mov eax, 0x113
mov word [esp + 0x108], cx
mov word [esp + 0x10a], dx
mov edx, eax
mov ecx, 0x116
mov word [esp + 0x10c], ax
mov eax, ecx
mov word [esp + 0x10e], cx
mov word [esp + 0x110], dx
mov ecx, 0x150
mov edx, 0x174
mov word [esp + 0x112], ax
mov word [esp + 0x114], cx
mov word [esp + 0x116], dx
mov eax, 0x17b
mov ecx, 0x17f
mov edx, 0x16d
mov word [esp + 0x118], ax
mov word [esp + 0x11a], cx
mov word [esp + 0x11c], dx
mov word [esp + 0x11e], ax
mov word [esp + 0x124], ax
mov ecx, pe_nt_image_headers32
mov word [esp + 0x120], cx
mov edx, 0x17c
mov word [esp + 0x122], dx
mov edx, eax
mov word [esp + 0x128], dx
mov ecx, 0x174
mov word [esp + 0x126], cx
mov ecx, edx
mov word [esp + 0x12c], cx
mov eax, 0x16c
mov word [esp + 0x12a], ax
mov eax, 0x13e
mov word [esp + 0x130], ax
mov edx, pe_nt_image_headers32
mov word [esp + 0x12e], dx
mov ecx, 0x157
mov word [esp + 0x132], cx
mov eax, 0x153
mov word [esp + 0x136], ax
mov edx, 0x15c
mov word [esp + 0x134], dx
mov ecx, 0x17f
mov word [esp + 0x138], cx
mov eax, 0x132
mov word [esp + 0x13c], ax
mov ecx, 0x17b
mov eax, ecx
mov word [esp + 0x13e], cx
mov word [esp + 0x142], ax
mov edx, 0x172
mov word [esp + 0x13a], dx
mov edx, 0x168
mov word [esp + 0x140], dx
mov ecx, 0x132
mov word [esp + 0x144], cx
mov eax, 0x171
mov word [esp + 0x148], ax
mov edx, 0x154
mov word [esp + 0x146], dx
mov ecx, 0x17d
mov word [esp + 0x14a], cx
mov eax, 0x174
mov word [esp + 0x14e], ax
mov edx, 0x17f
mov word [esp + 0x14c], dx
mov ecx, 0x13e
mov word [esp + 0x150], cx
mov eax, 0x17a
mov word [esp + 0x154], ax
mov edx, pe_nt_image_headers32
mov word [esp + 0x152], dx
mov ecx, 0x171
mov word [esp + 0x156], cx
mov eax, 0x17c
mov word [esp + 0x15a], ax
mov edx, 0x174
mov ecx, 0x17b
mov word [esp + 0x158], dx
mov word [esp + 0x15c], cx
mov edx, 0x16e
mov eax, pe_nt_image_headers32
mov word [esp + 0x160], ax
mov ecx, 0x17a
mov word [esp + 0x15e], dx
mov word [esp + 0x162], cx
mov word [esp + 0x164], dx
mov eax, 0x171
mov ecx, 0x173
mov edx, 0x113
mov word [esp + 0x166], ax
mov eax, 0x116
mov word [esp + 0x168], cx
mov word [esp + 0x16a], dx
mov ecx, 0x13e
xor edx, edx
mov word [esp + 0x16c], ax
mov word [esp + 0x16e], cx
mov word [esp + 0x170], dx
lea eax, [esp + 0x5c]
push eax
call fcn.00445e00
mov edx, pe_nt_image_headers32
mov word [esp + 0x1a], dx
mov ecx, 0x13e
mov word [esp + 0x18], cx
mov edx, 0x174
mov eax, 0x17a
mov ecx, 0x171
mov word [esp + 0x20], dx
mov word [esp + 0x1c], ax
mov word [esp + 0x1e], cx
mov edx, 0x16e
mov eax, 0x17c
mov ecx, 0x17b
mov word [esp + 0x26], dx
mov word [esp + 0x22], ax
mov word [esp + 0x24], cx
lea edx, [esp + 0x18]
mov eax, 0x132
xor ecx, ecx
push edx
mov word [esp + 0x2c], ax
mov word [esp + 0x2e], cx
call fcn.00445e00
add esp, 0xc
xor eax, eax
jmp 0x4467e0
movzx ecx, word [esp + eax + 0x58]
mov word [esp + eax + 0x2a4], cx
add eax, 2
test cx, cx
jne 0x4467e0
lea eax, [esp + 0x6a4]
push 0x5c
push eax
call fcn.006152e7
add esp, 8
test eax, eax
je 0x446811
xor ecx, ecx
mov word [eax + 2], cx
lea eax, [esp + 0x6a4]
mov edx, eax
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x446820
lea edi, [esp + 0x2a4]
sub eax, edx
add edi, 0xfffffffe
jmp 0x446840
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x446840
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [esp + 0x10]
rep movsb byte es:[edi], byte [esi]
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x446862
lea edi, [esp + 0x2a4]
sub eax, edx
add edi, 0xfffffffe
lea esp, [esp]
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x446880
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
push 0x50000
mov ecx, eax
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x2ac]
push eax
and ecx, 3
push 0
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call fcn.00619f42
lea ecx, [esp + 0x6a4]
push 0x5c
push ecx
call fcn.006152e7
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x4468dd
add ebx, 2
xor edx, edx
mov word [ebx], dx
xor ebp, ebp
nop
xor eax, eax
jmp 0x4468f0
movzx ecx, word [esp + eax + 0x6a4]
mov word [esp + eax + 0xab4], cx
add eax, 2
test cx, cx
jne 0x4468f0
mov eax, dword [ebp*4 + 0x747d24]
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x446911
lea edi, [esp + 0xab4]
sub eax, edx
add edi, 0xfffffffe
jmp 0x446930
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x446930
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [esp + 0xab4]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x446993
cmp dword [esp + 0xecc], 0
jne 0x446978
xor ecx, ecx
inc ebp
cmp ebp, 0xa
mov word [ebx], cx
jl 0x4468e0
mov ecx, dword [esp + 0xec4]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
xor eax, eax
call fcn.006157d3
add esp, 0xeb8
ret
xor edx, edx
mov word [ebx], dx
mov edx, 0x16c
mov word [esp + 0x174], dx
mov ecx, 0x172
mov word [esp + 0x172], cx
mov eax, 0x157
mov word [esp + 0x170], ax
mov edx, 0x172
mov word [esp + 0x17a], dx
mov ecx, 0x16e
mov word [esp + 0x178], cx
mov eax, 0x17b
mov word [esp + 0x176], ax
mov word [esp + 0x17c], ax
mov edx, pe_nt_image_headers32
mov word [esp + 0x180], dx
mov ecx, 0x16c
mov word [esp + 0x17e], cx
mov eax, 0x15c
mov word [esp + 0x182], ax
mov edx, 0x169
mov word [esp + 0x186], dx
mov ecx, 0x171
mov word [esp + 0x184], cx
mov eax, 0x172
mov word [esp + 0x188], ax
mov edx, 0x171
mov word [esp + 0x18c], dx
mov ecx, 0x174
mov word [esp + 0x18a], cx
mov eax, 0x17f
mov word [esp + 0x18e], ax
mov edx, pe_nt_image_headers32
mov word [esp + 0x192], dx
mov ecx, 0x17c
mov word [esp + 0x190], cx
mov eax, 0x153
mov ecx, 0x17f
mov edx, 0x172
mov word [esp + 0x194], ax
mov eax, ecx
mov word [esp + 0x198], dx
mov word [esp + 0x196], cx
mov edx, 0x17b
mov ecx, 0x179
mov word [esp + 0x19e], dx
mov word [esp + 0x19a], ax
mov word [esp + 0x19c], cx
lea edx, [esp + 0x170]
mov eax, 0x16e
xor ecx, ecx
push edx
mov word [esp + 0x1a4], ax
mov word [esp + 0x1a6], cx
call fcn.00445e00
mov eax, 0x157
mov word [esp + 0x5c], ax
mov ecx, 0x15c
mov edx, 0x153
mov word [esp + 0x5e], cx
mov word [esp + 0x60], dx
mov eax, pe_nt_image_headers32
mov word [esp + 0x62], ax
mov ecx, 0x16c
mov edx, 0x17b
mov word [esp + 0x64], cx
mov word [esp + 0x66], dx
mov eax, 0x16e
mov ecx, 0x173
mov edx, 0x177
mov word [esp + 0x68], ax
mov eax, 0x172
mov word [esp + 0x6a], cx
mov word [esp + 0x6c], dx
mov ecx, 0x17f
mov edx, 0x16c
mov word [esp + 0x6e], ax
mov word [esp + 0x70], cx
mov word [esp + 0x72], dx
mov eax, 0x17b
mov word [esp + 0x74], ax
mov edx, pe_nt_image_headers32
mov word [esp + 0x78], dx
mov ecx, 0x16d
mov word [esp + 0x76], cx
mov eax, 0x17e
mov word [esp + 0x7a], ax
mov edx, 0x17d
mov word [esp + 0x7e], dx
mov ecx, 0x17b
mov word [esp + 0x7c], cx
mov eax, 0x17f
mov word [esp + 0x80], ax
mov edx, 0x16d
mov word [esp + 0x84], dx
mov ecx, 0x16b
mov word [esp + 0x82], cx
mov eax, 0x17b
mov word [esp + 0x86], ax
mov ecx, pe_nt_image_headers32
mov word [esp + 0x88], cx
mov word [esp + 0x8e], cx
mov edx, 0x177
mov word [esp + 0x8a], dx
mov eax, 0x16c
mov word [esp + 0x8c], ax
mov edx, 0x17d
mov word [esp + 0x90], dx
mov ecx, 0x172
mov edx, ecx
mov word [esp + 0x96], dx
mov eax, 0x17f
mov word [esp + 0x92], ax
mov eax, 0x171
mov word [esp + 0x98], ax
mov edx, pe_nt_image_headers32
mov word [esp + 0x9c], dx
mov word [esp + 0x94], cx
mov eax, 0x16d
mov word [esp + 0x9e], ax
mov edx, 0x17f
mov word [esp + 0xa2], dx
mov ecx, 0x16c
mov word [esp + 0x9a], cx
mov word [esp + 0xa0], cx
mov eax, 0x16e
mov word [esp + 0xa4], ax
mov word [esp + 0xa6], cx
mov edx, pe_nt_image_headers32
mov word [esp + 0xa8], dx
mov eax, 0x169
mov word [esp + 0xaa], ax
mov ecx, 0x177
mov word [esp + 0xac], cx
mov edx, 0x16c
mov word [esp + 0xae], dx
mov eax, 0x178
mov word [esp + 0xb0], ax
mov ecx, pe_nt_image_headers32
mov edx, 0x177
mov word [esp + 0xb2], cx
mov word [esp + 0xb4], dx
mov eax, 0x172
mov word [esp + 0xb6], ax
mov ecx, 0x17d
mov edx, 0x171
mov word [esp + 0xb8], cx
mov word [esp + 0xba], dx
mov eax, 0x173
mov ecx, 0x170
mov edx, 0x17f
mov word [esp + 0xbc], ax
mov eax, 0x16c
mov word [esp + 0xbe], cx
mov word [esp + 0xc0], dx
mov ecx, 0x177
mov edx, 0x17e
mov word [esp + 0xc2], ax
mov word [esp + 0xc4], cx
mov word [esp + 0xc6], dx
mov eax, 0x174
mov word [esp + 0xc8], ax
mov eax, 0x17d
mov word [esp + 0xce], ax
mov edx, pe_nt_image_headers32
mov word [esp + 0xcc], dx
mov eax, 0x170
mov word [esp + 0xd4], ax
mov ecx, 0x17b
mov word [esp + 0xca], cx
mov edx, 0x173
mov word [esp + 0xd2], dx
mov ecx, 0x171
mov word [esp + 0xd0], cx
mov word [esp + 0xd6], cx
mov eax, 0x17b
mov word [esp + 0xda], ax
mov edx, 0x172
mov ecx, edx
mov word [esp + 0xd8], dx
mov word [esp + 0xdc], cx
mov eax, 0x16d
mov word [esp + 0xe0], ax
mov edx, 0x16c
mov word [esp + 0xde], dx
mov eax, 0x171
mov word [esp + 0xe6], ax
mov ecx, pe_nt_image_headers32
mov word [esp + 0xe2], cx
mov edx, 0x17a
mov word [esp + 0xe4], dx
mov eax, 0x17c
mov word [esp + 0xec], ax
mov ecx, 0x16b
mov word [esp + 0xe8], cx
mov edx, 0x172
mov word [esp + 0xea], dx
mov ecx, pe_nt_image_headers32
mov word [esp + 0xee], cx
mov word [esp + 0xf4], cx
mov eax, 0x172
mov word [esp + 0xf2], ax
mov edx, 0x177
mov word [esp + 0xf0], dx
mov word [esp + 0xf6], dx
mov eax, 0x16c
mov word [esp + 0xf8], ax
mov ecx, 0x16d
mov word [esp + 0xfa], cx
mov edx, pe_nt_image_headers32
mov word [esp + 0xfc], dx
mov eax, 0x17a
mov word [esp + 0xfe], ax
mov ecx, 0x171
mov word [esp + 0x100], cx
mov edx, 0x174
mov word [esp + 0x102], dx
mov eax, 0x17c
mov word [esp + 0x104], ax
mov ecx, 0x17b
mov word [esp + 0x106], cx
mov edx, 0x16e
mov word [esp + 0x108], dx
mov eax, 0x132
mov ecx, 0x113
mov word [esp + 0x10a], ax
mov edx, 0x116
mov eax, ecx
mov word [esp + 0x10c], cx
mov ecx, edx
mov word [esp + 0x10e], dx
mov edx, 0x150
mov word [esp + 0x110], ax
mov eax, 0x174
mov word [esp + 0x112], cx
mov word [esp + 0x114], dx
mov ecx, 0x17b
mov edx, 0x17f
mov word [esp + 0x116], ax
mov word [esp + 0x118], cx
mov word [esp + 0x11a], dx
mov eax, 0x16d
mov word [esp + 0x11c], ax
mov edx, pe_nt_image_headers32
mov word [esp + 0x120], dx
mov eax, 0x17c
mov word [esp + 0x122], ax
mov eax, ecx
mov edx, 0x174
mov word [esp + 0x126], dx
mov edx, eax
mov word [esp + 0x128], ax
mov word [esp + 0x11e], cx
mov word [esp + 0x124], cx
mov eax, pe_nt_image_headers32
mov ecx, 0x16c
mov word [esp + 0x12e], ax
mov word [esp + 0x12a], cx
mov word [esp + 0x12c], dx
lea eax, [esp + 0x5c]
mov ecx, 0x13e
xor edx, edx
push eax
mov word [esp + 0x134], cx
mov word [esp + 0x136], dx
call fcn.00445e00
mov ecx, 0x13e
mov word [esp + 0x2c], cx
mov ecx, 0x177
mov word [esp + 0x32], cx
mov edx, pe_nt_image_headers32
mov word [esp + 0x2e], dx
mov eax, 0x17a
mov word [esp + 0x30], ax
mov ecx, pe_nt_image_headers32
mov word [esp + 0x38], cx
mov edx, 0x174
mov word [esp + 0x34], dx
mov eax, 0x17b
mov word [esp + 0x36], ax
mov ecx, 0x171
mov edx, 0x17a
mov eax, 0x16e
mov word [esp + 0x3e], cx
mov word [esp + 0x3a], dx
mov word [esp + 0x3c], ax
mov ecx, 0x116
mov edx, 0x173
mov eax, 0x113
mov word [esp + 0x44], cx
mov word [esp + 0x40], dx
mov word [esp + 0x42], ax
lea ecx, [esp + 0x2c]
mov edx, 0x13e
xor eax, eax
push ecx
mov word [esp + 0x4a], dx
mov word [esp + 0x4c], ax
call fcn.00445e00
mov eax, pe_nt_image_headers32
mov word [esp + 0x1e], ax
mov edx, 0x13e
mov word [esp + 0x1c], dx
mov eax, 0x174
mov ecx, 0x17a
mov edx, 0x171
mov word [esp + 0x24], ax
mov word [esp + 0x20], cx
mov word [esp + 0x22], dx
mov eax, 0x16e
mov ecx, 0x17c
mov edx, 0x17b
mov word [esp + 0x2a], ax
mov word [esp + 0x26], cx
mov word [esp + 0x28], dx
lea eax, [esp + 0x1c]
mov ecx, 0x132
xor edx, edx
push eax
mov word [esp + 0x30], cx
mov word [esp + 0x32], dx
call fcn.00445e00
add esp, 0x10
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x58]
mov word [esp + eax + 0x2a4], cx
add eax, 2
test cx, cx
jne 0x447110
mov eax, dword [ebp*4 + 0x747d24]
mov edx, eax
mov edi, edi
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x447130
lea edi, [esp + 0x2a4]
sub eax, edx
add edi, 0xfffffffe
jmp 0x447150
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x447150
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [esp + 0x24]
rep movsb byte es:[edi], byte [esi]
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x447172
lea edi, [esp + 0x2a4]
sub eax, edx
add edi, 0xfffffffe
lea esp, [esp]
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x447190
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [esp + 0x6a4]
rep movsb byte es:[edi], byte [esi]
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4471b5
lea edi, [esp + 0x2a4]
sub eax, edx
add edi, 0xfffffffe
lea esp, [esp]
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4471d0
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [esp + 0x10]
rep movsb byte es:[edi], byte [esi]
mov edx, eax
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4471f2
lea edi, [esp + 0x2a4]
sub eax, edx
add edi, 0xfffffffe
lea esp, [esp]
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x447210
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
push 0x50000
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x174]
push ecx
lea edx, [esp + 0x2ac]
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call fcn.00619f42
int3