Function at 0x4497a6
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x48
mov dword [ebp - 0x10], 0xef59d06f
mov ebx, dword [ebp - 0x34]
mov edi, dword [ebp - 0x30]
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x10]
cmp eax, 0x8a28674
jg 0x449813
cmp eax, 0xb8477b3a
jle 0x44987c
cmp eax, 0xe8e81bb4
jle 0x449936
cmp eax, 0xef59d06e
jle 0x449a9f
cmp eax, 0xef59d06f
je 0x449c75
cmp eax, 0xff542261
je 0x449c81
cmp eax, 0x7e9f9ac
jne 0x4497bf
mov dword [ebp - 0x10], 0xdbe08cdf
mov edi, dword [ebp - 0x1c]
jmp 0x4497bf
cmp eax, 0x34461858
jg 0x4498c7
cmp eax, 0x18aa780b
jle 0x449966
cmp eax, 0x26b24f9f
jle 0x449ae8
cmp eax, 0x26b24fa0
je 0x449cce
cmp eax, 0x26bf628f
je 0x449ce6
cmp eax, 0x2fcad01f
jne 0x4497bf
mov cl, byte [ebp - 0x15]
cmp byte [ebp - 0x16], 0
mov eax, 0xa8f6b7d7
mov edx, 0xa8f6b7d7
jne 0x44986d
mov edx, 0x7e9f9ac
test cl, cl
jne 0x449f12
mov eax, edx
jmp 0x449f12
cmp eax, 0xa657ae37
jle 0x44999c
cmp eax, 0xa8f6b7d6
jle 0x449b30
cmp eax, 0xa8f6b7d7
je 0x449d28
cmp eax, 0xaf375a7d
je 0x449d5a
cmp eax, 0xb6d6d64c
jne 0x4497bf
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0x3c61ed53
jmp 0x4497bf
cmp eax, 0x5e8005ca
jle 0x449a35
cmp eax, 0x6c27be99
jle 0x449ba0
cmp eax, 0x6c27be9a
je 0x449d6f
cmp eax, 0x78f4dec8
je 0x449daf
cmp eax, 0x7cf7d653
jne 0x4497bf
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffff1c
add eax, ecx
mov ecx, eax
imul ecx, eax
shl eax, 6
imul edx, ecx, 0x5f7d
dec edx
add eax, 0x8c
mov dword [ebp - 0x14], eax
mov eax, 0x6c27be9a
cmp ecx, edx
je 0x449f12
mov eax, 0x2fcad01f
jmp 0x449f12
cmp eax, 0xcd43b187
jle 0x449bc2
cmp eax, 0xcd43b188
je 0x449dec
cmp eax, 0xdbe08cdf
jne 0x449f46
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x10], 0xb6d6d64c
jmp 0x4497bf
cmp eax, 0xe8c1cdc
jg 0x449bf0
cmp eax, 0x8a28675
je 0x449e0a
cmp eax, 0xdb71b0c
jne 0x4497bf
mov eax, dword [ebp - 0x1c]
add eax, 0x30
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x3e87969b
jmp 0x4497bf
cmp eax, 0x99e1112e
jg 0x449c20
cmp eax, 0x88620ca7
je 0x449e21
cmp eax, 0x8cdc0695
jne 0x4497bf
mov eax, dword [ebp - 0x20]
mov word [eax + 0x18], 0
mov eax, dword [ebp - 0x20]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 8], 0x18
mov dword [esp + 4], 0x4733b0
call fcn.0044ce50
add esp, 0xc
mov eax, dword [ebp - 0x20]
sub esp, 0x10
mov dword [esp], eax
mov dword [esp + 0xc], 5
mov dword [esp + 8], 0x4733c8
mov dword [esp + 4], 0xc
call fcn.00449f70
add esp, 0x10
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x20]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0xe8e81bb5
jmp 0x4497bf
cmp eax, 0x3c61ed52
jg 0x449c42
cmp eax, 0x34461859
je 0x449e3b
cmp eax, 0x34bd1268
jne 0x4497bf
imul ebx, ebx, 0x127a0
sub esp, 0x10
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0x5e59
mov dword [esp + 4], 0x30f2
mov dword [esp], 0x514e
call fcn.00449f70
add esp, 0x10
call fcn.004497a6
mov eax, 0xaf375a7d
cmp ebx, 0x54
jge 0x449f12
mov eax, 0x3e87969b
jmp 0x449f12
cmp eax, 0xe8e81bb5
je 0x449e57
cmp eax, 0xed16efec
jne 0x4497bf
imul ebx, ebx, 0x10e00
add ebx, 0x448da0
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], 0x2ee4
call fcn.004477bb
add esp, 8
call fcn.004497a6
mov dword [ebp - 0x10], 0x26b24fa0
jmp 0x4497bf
cmp eax, 0x18aa780c
je 0x449e93
cmp eax, 0x208df623
jne 0x4497bf
imul eax, dword [ebp - 0x14], 0xa1
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x1563
add eax, 0xea
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0x78f4dec8
cmp edx, ecx
je 0x449f12
mov eax, 0x689ef95a
jmp 0x449f12
cmp eax, 0xa657ae38
je 0x449ea8
cmp eax, 0xa7fd4ba0
jne 0x4497bf
shl ebx, 9
or ebx, 0x1e
sub esp, 0x10
mov dword [esp], ebx
mov dword [esp + 0xc], 0x2523
mov dword [esp + 8], 0x62c6
mov dword [esp + 4], 0x2b65
call fcn.00449f70
add esp, 8
mov dword [esp + 4], ebx
mov dword [esp], 0x356f
call fcn.004475bc
add esp, 8
mov eax, 0xed16efec
cmp ebx, 0xb5
jb 0x449f12
mov eax, 0xbdd66765
jmp 0x449f12
cmp eax, 0x5e8005cb
je 0x449ec0
cmp eax, 0x689ef95a
jne 0x4497bf
mov dword [ebp - 0x10], 0xcd43b188
jmp 0x4497bf
cmp eax, 0xb8477b3b
je 0x449eec
cmp eax, 0xbdd66765
jne 0x4497bf
imul ebx, ebx, 0x1a40
add ebx, 0x1d10
mov dword [ebp - 0x10], 0xb6d6d64c
jmp 0x4497bf
cmp eax, 0xe8c1cdd
je 0x449f02
cmp eax, 0x156253e9
jne 0x4497bf
mov eax, dword [ebp - 0x14]
lea eax, [eax + eax*4]
add eax, eax
add eax, 0xffffffa3
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x8cdc0695
jmp 0x4497bf
cmp eax, 0x99e1112f
je 0x449f1a
cmp eax, 0xa024d5ed
jne 0x4497bf
mov dword [ebp - 0x10], 0xaf375a7d
jmp 0x4497bf
cmp eax, 0x3c61ed53
je 0x449f2b
cmp eax, 0x3e87969b
jne 0x4497bf
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0x156253e9
jmp 0x4497bf
mov dword [ebp - 0x10], 0xa657ae38
jmp 0x4497bf
imul eax, ebx, 0xd2
add eax, 0x4d1c
shr eax, 4
lea ebx, [eax + eax*2]
shl ebx, 9
add ebx, 0x1d20
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], 0x2168
call fcn.004475bc
add esp, 8
call fcn.004497a6
mov eax, 0x26b24fa0
cmp ebx, 0x58
jl 0x449f12
mov eax, 0x5e8005cb
jmp 0x449f12
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x24], eax
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0xdbe08cdf
jmp 0x4497bf
mov dword [ebp - 0x28], edi
mov edi, esi
shr ebx, 4
call fcn.004497a6
sub esp, 8
mov dword [esp], 0x39a1
mov esi, 0xb8477b3b
and ebx, 0xffff800
mov dword [esp + 4], ebx
je 0x449d13
mov esi, 0xe8c1cdd
call fcn.004475bc
add esp, 8
mov dword [ebp - 0x10], esi
mov esi, edi
mov edi, dword [ebp - 0x28]
jmp 0x4497bf
mov eax, dword [ebp - 0x14]
add eax, 0xffffff85
shr eax, 0xd
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x7b1d
dec edx
add eax, 0xffffffe7
mov dword [ebp - 0x14], eax
mov eax, 0x2fcad01f
cmp edx, ecx
je 0x449f12
mov eax, 0x18aa780c
jmp 0x449f12
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0xe8c1cdd
jmp 0x4497bf
shr ebx, 2
add ebx, 0xcc
call fcn.004497a6
sub esp, 0x10
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x18d4
mov dword [esp + 4], 0x4bc5
mov dword [esp], 0x28f7
call fcn.00449f70
add esp, 0x10
mov dword [ebp - 0x10], 0x34bd1268
jmp 0x4497bf
shr ebx, 7
and ebx, 0x1ffff
add ebx, 0xfffffef0
call fcn.004497a6
sub esp, 4
mov dword [esp], ebx
call fcn.004488a3
add esp, 4
mov eax, 0x26b24fa0
cmp ebx, 0xb6
jb 0x449f12
mov eax, 0xff542261
jmp 0x449f12
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
mov eax, 0xd6222b1a
cmp edx, ecx
je 0x449e00
mov eax, 0x7e9f9ac
mov dword [ebp - 0x10], eax
xor esi, esi
jmp 0x4497bf
shl ebx, 5
add ebx, 0xfffff300
shr ebx, 1
mov dword [ebp - 0x10], 0xb6d6d64c
jmp 0x4497bf
cmp dword [ebp - 0x48], 0
sete byte [ebp - 0x15]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0xb8477b3b
jmp 0x4497bf
imul eax, dword [ebp - 0x14], 0x1b8000
shr eax, 8
add eax, 0xffffffd9
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xdb71b0c
jmp 0x4497bf
imul eax, dword [ebp - 0x14], 0xa9
add eax, 0xffffff9a
imul ecx, eax, 0x168
imul eax, eax
imul edx, eax, 0x53cf
add ecx, 0x658
dec edx
shr ecx, 0x1b
mov dword [ebp - 0x14], ecx
mov ecx, 0x8a28675
cmp edx, eax
je 0x449e8b
mov ecx, 0x88620ca7
mov dword [ebp - 0x10], ecx
jmp 0x4497bf
mov eax, dword [ebp - 0x1c]
add eax, 0x18
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0x99e1112f
jmp 0x4497bf
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0x26b24fa0
jmp 0x4497bf
and ebx, 0xfffffffc
shl ebx, 0xc
add ebx, 0x2d0000
and ebx, 0xffff8000
lea ebx, [ebx + ebx*2]
mov eax, 0xaf375a7d
cmp ebx, 0x3d800
jb 0x449ee7
mov eax, 0xb6d6d64c
shr ebx, 0xb
jmp 0x449f12
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x4c]
sete byte [ebp - 0x16]
mov dword [ebp - 0x10], 0x7cf7d653
jmp 0x4497bf
cmp dword [ebp - 0x3c], 0
mov eax, 0x208df623
je 0x449f12
mov eax, 0x34461859
mov dword [ebp - 0x10], eax
jmp 0x4497bf
mov eax, dword [ebp - 0x50]
mov esi, dword [eax]
mov dword [ebp - 0x10], 0xd6222b1a
jmp 0x4497bf
imul eax, dword [ebp - 0x14], 0x8e04
add eax, 0xffffff57
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xa024d5ed
jmp 0x4497bf
cmp eax, 0xd6222b1a
jne 0x4497bf
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], esi
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret