Function at 0x411aa0
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45fe68
mov eax, dword fs:[0]
push eax
sub esp, 0x1cc
mov eax, dword [0x47a4a4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xbc], ecx
mov ecx, dword [ebp + 0x14]
push 4
mov dword [ebp - 0xd0], ecx
xor edx, edx
mov ebx, 7
xor esi, esi
push str.ARGS
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], esi
mov word [ebp - 0x28], dx
call fcn.004073d0
mov dword [ebp - 4], esi
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor ecx, ecx
mov word [ebp - 0x60], cx
mov ecx, eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], esi
lea edi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, si
jne 0x411b22
sub ecx, edi
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x64]
call fcn.004073d0
mov byte [ebp - 4], 1
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x64]
push eax
call fcn.0041ceb0
mov byte [ebp - 4], 0
mov edi, 8
cmp dword [ebp - 0x4c], edi
jb 0x411b66
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.0043ff5a
add esp, 4
xor edx, edx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], esi
mov word [ebp - 0x60], dx
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], edi
jb 0x411b8a
mov eax, dword [ebp - 0x28]
push eax
call fcn.0043ff5a
add esp, 4
mov eax, 1
xor ecx, ecx
cmp dword [ebp + 8], eax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], esi
mov word [ebp - 0x28], cx
mov dword [ebp - 0xcc], eax
jle 0x41227f
lea ebx, [ebx]
mov edx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xcc]
mov ecx, dword [edx + eax*4]
xor edi, edi
xor edx, edx
mov eax, ecx
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], edi
mov word [ebp - 0x28], dx
lea esi, [eax + 2]
mov dx, word [eax]
add eax, 2
cmp dx, di
jne 0x411bd6
sub eax, esi
sar eax, 1
push eax
push ecx
lea ecx, [ebp - 0x2c]
call fcn.004073d0
mov dword [ebp - 4], 2
push 4
call fcn.0044079c
add esp, 4
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc4], eax
mov byte [ebp - 4], 4
cmp eax, edi
je 0x411c1e
lea ecx, [ebp - 0x108]
mov dword [eax], ecx
jmp 0x411c20
xor eax, eax
mov byte [ebp - 4], 2
mov dword [ebp - 0x108], eax
mov byte [ebp - 4], 6
mov dword [ebp - 0xfc], edi
mov dword [ebp - 0xf8], edi
mov dword [ebp - 0xf4], edi
mov byte [ebp - 4], 7
mov dword [ebp - 0xf0], edi
mov dword [ebp - 0xec], edi
mov dword [ebp - 0xe8], edi
mov dword [ebp - 0xe4], edi
mov dword [ebp - 0xe0], edi
mov dword [ebp - 0xdc], edi
mov byte [ebp - 0xd8], 0
mov byte [ebp - 4], 8
push edi
push str._____S__S__
lea ecx, [ebp - 0x118]
call fcn.004048f0
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x28]
mov ecx, edx
cmp eax, 8
jae 0x411c9e
lea ecx, [ebp - 0x28]
mov esi, dword [ebp - 0x18]
lea ebx, [ecx + esi*2]
cmp ebx, edi
je 0x411cc7
mov ecx, edx
cmp eax, 8
jae 0x411cb2
lea ecx, [ebp - 0x28]
cmp ecx, ebx
ja 0x411cc7
mov ecx, edx
cmp eax, 8
jae 0x411cc0
lea ecx, [ebp - 0x28]
lea ecx, [ecx + esi*2]
cmp ebx, ecx
jbe 0x411cd2
call fcn.0044019c
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x28]
cmp eax, 8
jb 0x411da8
mov esi, edx
cmp edx, edi
je 0x411d03
mov ecx, edx
cmp eax, 8
jae 0x411ceb
lea ecx, [ebp - 0x28]
cmp ecx, esi
ja 0x411d03
cmp eax, 8
mov eax, edx
jae 0x411cf9
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x18]
lea eax, [eax + edx*2]
cmp esi, eax
jbe 0x411d08
call fcn.0044019c
mov ecx, dword [ebp - 0xc0]
push edi
push ecx
lea edx, [ebp - 0x108]
push edx
push ebx
lea eax, [ebp - 0x2c]
push eax
push esi
push eax
call fcn.0040d590
mov bl, al
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x118]
call fcn.004126d0
test bl, bl
je 0x411f4c
mov eax, 7
xor ecx, ecx
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x6c], edi
mov word [ebp - 0x7c], cx
mov byte [ebp - 4], 0xb
xor edx, edx
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x88], edi
mov word [ebp - 0x98], dx
mov byte [ebp - 4], 0xc
mov esi, dword [ebp - 0xf8]
mov edi, dword [ebp - 0xfc]
mov ecx, esi
sub ecx, edi
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 3
jle 0x411db0
ja 0x411da3
call fcn.0044019c
mov esi, dword [ebp - 0xf8]
mov edi, dword [ebp - 0xfc]
lea ebx, [edi + 0x3c]
jmp 0x411db6
lea esi, [ebp - 0x28]
jmp 0x411ce1
lea ebx, [ebp - 0xe8]
sub esi, edi
mov eax, 0x66666667
imul esi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 3
jle 0x411de0
ja 0x411ddb
call fcn.0044019c
mov edi, dword [ebp - 0xfc]
lea eax, [edi + 0x3c]
jmp 0x411de6
lea eax, [ebp - 0xe8]
mov ecx, dword [ebx + 0xc]
mov edx, dword [ebx + 8]
push ecx
mov ecx, dword [eax + 4]
push edx
mov edx, dword [eax]
push ecx
push edx
lea ecx, [ebp - 0x80]
call fcn.004092f0
mov esi, dword [ebp - 0xf8]
mov ebx, dword [ebp - 0xfc]
mov ecx, esi
sub ecx, ebx
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 4
jle 0x411e3b
ja 0x411e36
call fcn.0044019c
mov esi, dword [ebp - 0xf8]
mov ebx, dword [ebp - 0xfc]
lea edi, [ebx + 0x50]
jmp 0x411e41
lea edi, [ebp - 0xe8]
sub esi, ebx
mov eax, 0x66666667
imul esi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 4
jle 0x411e6b
ja 0x411e66
call fcn.0044019c
mov ebx, dword [ebp - 0xfc]
lea eax, [ebx + 0x50]
jmp 0x411e71
lea eax, [ebp - 0xe8]
mov ecx, dword [edi + 0xc]
mov edx, dword [edi + 8]
push ecx
mov ecx, dword [eax + 4]
push edx
mov edx, dword [eax]
push ecx
push edx
lea ecx, [ebp - 0x9c]
call fcn.004092f0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xc4], esp
push 0xffffffffffffffff
xor edi, edi
push edi
lea edx, [ebp - 0x9c]
mov esi, 7
xor eax, eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], edi
push edx
mov word [ecx + 4], ax
call fcn.004071e0
mov byte [ebp - 4], 0xd
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xc0], esp
push 0xffffffffffffffff
push edi
lea edx, [ebp - 0x80]
xor eax, eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], edi
push edx
mov word [ecx + 4], ax
call fcn.004071e0
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0xbc]
call fcn.00410ca0
mov byte [ebp - 4], 0xb
mov ebx, 8
cmp dword [ebp - 0x84], ebx
jb 0x411f12
mov eax, dword [ebp - 0x98]
push eax
call fcn.0043ff5a
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x88], edi
mov word [ebp - 0x98], cx
mov byte [ebp - 4], bl
cmp dword [ebp - 0x68], ebx
jb 0x411f3b
mov edx, dword [ebp - 0x7c]
push edx
call fcn.0043ff5a
add esp, 4
xor eax, eax
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x6c], edi
mov word [ebp - 0x7c], ax
jmp 0x41222d
push edi
push 0x466990
lea ecx, [ebp - 0x110]
call fcn.004048f0
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x28]
mov eax, edx
cmp ecx, 8
jae 0x411f77
lea eax, [ebp - 0x28]
mov esi, dword [ebp - 0x18]
lea ebx, [eax + esi*2]
cmp ebx, edi
je 0x411fa0
mov eax, edx
cmp ecx, 8
jae 0x411f8b
lea eax, [ebp - 0x28]
cmp eax, ebx
ja 0x411fa0
mov eax, edx
cmp ecx, 8
jae 0x411f99
lea eax, [ebp - 0x28]
lea eax, [eax + esi*2]
cmp ebx, eax
jbe 0x411fab
call fcn.0044019c
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x28]
cmp ecx, 8
jb 0x41207d
mov esi, edx
cmp edx, edi
je 0x411fdc
mov eax, edx
cmp ecx, 8
jae 0x411fc4
lea eax, [ebp - 0x28]
cmp eax, esi
ja 0x411fdc
mov eax, edx
cmp ecx, 8
jae 0x411fd2
lea eax, [ebp - 0x28]
mov ecx, dword [ebp - 0x18]
lea edx, [eax + ecx*2]
cmp esi, edx
jbe 0x411fe1
call fcn.0044019c
mov ecx, dword [ebp - 0xc0]
push 0
push ecx
lea edx, [ebp - 0x108]
push edx
lea eax, [ebp - 0x2c]
push ebx
mov ecx, eax
push ecx
push esi
push eax
call fcn.0040d590
mov bl, al
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x110]
call fcn.004126d0
test bl, bl
je 0x41221a
mov eax, 7
xor ecx, ecx
xor edx, edx
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], ecx
mov word [ebp - 0x60], dx
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x34], ecx
mov word [ebp - 0x44], ax
mov byte [ebp - 4], 0x12
mov esi, dword [ebp - 0xf8]
mov edi, dword [ebp - 0xfc]
mov ecx, esi
sub ecx, edi
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 3
jle 0x412085
ja 0x412078
call fcn.0044019c
mov esi, dword [ebp - 0xf8]
mov edi, dword [ebp - 0xfc]
lea ebx, [edi + 0x3c]
jmp 0x41208b
lea esi, [ebp - 0x28]
jmp 0x411fba
lea ebx, [ebp - 0xe8]
sub esi, edi
mov eax, 0x66666667
imul esi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 3
jle 0x4120b5
ja 0x4120b0
call fcn.0044019c
mov edi, dword [ebp - 0xfc]
add edi, 0x3c
jmp 0x4120bb
lea edi, [ebp - 0xe8]
mov ecx, dword [ebx + 0xc]
mov edx, dword [ebx + 8]
mov eax, dword [edi + 4]
push ecx
mov ecx, dword [edi]
push edx
push eax
push ecx
lea ecx, [ebp - 0x64]
call fcn.004092f0
mov edi, dword [ebp - 0xbc]
push 0x479058
lea edx, [ebp - 0x64]
push edx
mov ecx, edi
call fcn.0040cf30
test al, al
je 0x412120
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xc4], esp
xor eax, eax
push 0xffffffffffffffff
push eax
lea edx, [ebp - 0x64]
mov dword [ecx + 0x18], 7
mov dword [ecx + 0x14], 0
push edx
mov word [ecx + 4], ax
call fcn.004071e0
mov byte [ebp - 4], 0x13
jmp 0x4121bf
mov esi, dword [ebp - 0xcc]
inc esi
cmp esi, dword [ebp + 8]
jge 0x412190
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax + esi*4]
movzx ecx, word [eax]
cmp cx, 0x2f
je 0x412190
cmp cx, 0x2d
je 0x412190
push eax
lea ecx, [ebp - 0x48]
call fcn.00409090
sub esp, 0x1c
lea edx, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0xc4], esp
push edx
call fcn.00407ba0
mov byte [ebp - 4], 0x14
sub esp, 0x1c
lea eax, [ebp - 0x64]
mov ecx, esp
mov dword [ebp - 0xc0], esp
push eax
call fcn.00407ba0
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0x12
mov ecx, edi
call fcn.00410ca0
mov dword [ebp - 0xcc], esi
jmp 0x4121ca
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xc4], esp
xor edx, edx
push 0xffffffffffffffff
push edx
lea eax, [ebp - 0x64]
mov dword [ecx + 0x18], 7
mov dword [ecx + 0x14], 0
push eax
mov word [ecx + 4], dx
call fcn.004071e0
mov byte [ebp - 4], 0x16
mov byte [ebp - 4], 0x12
mov ecx, edi
call fcn.00410af0
mov byte [ebp - 4], 0x11
mov esi, 8
cmp dword [ebp - 0x30], esi
jb 0x4121e4
mov ecx, dword [ebp - 0x44]
push ecx
call fcn.0043ff5a
add esp, 4
mov ebx, 7
xor edi, edi
xor edx, edx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], edi
mov word [ebp - 0x44], dx
mov byte [ebp - 4], 8
cmp dword [ebp - 0x4c], esi
jb 0x41220c
mov eax, dword [ebp - 0x60]
push eax
call fcn.0043ff5a
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], edi
mov word [ebp - 0x60], cx
jmp 0x41222d
mov ecx, dword [ebp - 0xd0]
test ecx, ecx
je 0x41222d
lea edx, [ebp - 0x2c]
push edx
call fcn.0040f370
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x108]
call fcn.00407fc0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14], 8
jb 0x412255
mov eax, dword [ebp - 0x28]
push eax
call fcn.0043ff5a
add esp, 4
mov eax, dword [ebp - 0xcc]
inc eax
xor ecx, ecx
cmp eax, dword [ebp + 8]
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], cx
mov dword [ebp - 0xcc], eax
jl 0x411bb0
cmp byte [ebp + 0x10], 0
je 0x412290
mov ecx, dword [ebp - 0xbc]
call fcn.00410ea0
mov esi, dword [ebp - 0xbc]
push 1
xor edx, edx
push 0x46698c
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0xa0], 7
mov dword [ebp - 0xa4], 0
mov word [ebp - 0xb4], dx
call fcn.004073d0
mov dword [ebp - 4], 0x18
mov eax, dword [esi + 0x18]
mov ebx, dword [eax]
mov edi, dword [esi]
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc8], edi
nop
mov eax, dword [esi + 0x18]
mov esi, dword [esi]
mov dword [ebp - 0x10c], eax
test edi, edi
je 0x4122f3
cmp edi, esi
je 0x4122f8
call fcn.0044019c
cmp ebx, dword [ebp - 0x10c]
je 0x41255e
test edi, edi
jne 0x41247e
call fcn.0044019c
xor eax, eax
cmp ebx, dword [eax + 0x18]
jne 0x41231d
call fcn.0044019c
mov ecx, dword [ebx + 0x40]
mov dword [ebp - 0xd0], ecx
push 0x466970
lea ecx, [ebp - 0x1d8]
call fcn.00411990
mov esi, eax
mov byte [ebp - 4], 0x19
test edi, edi
jne 0x412485
call fcn.0044019c
xor eax, eax
cmp ebx, dword [eax + 0x18]
jne 0x412355
call fcn.0044019c
lea eax, [ebx + 0xc]
push eax
push esi
call fcn.00410200
lea edx, [ebp - 0xd0]
push edx
push eax
call fcn.004102e0
lea ecx, [ebp - 0x48]
push ecx
mov ecx, eax
call fcn.00408620
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1d8]
call fcn.0040ffb0
test edi, edi
jne 0x41248c
call fcn.0044019c
cmp ebx, dword [edi + 0x18]
jne 0x41239d
call fcn.0044019c
mov esi, dword [ebp - 0xc4]
mov eax, dword [esi + 0x3c]
mov edi, dword [eax]
mov ebx, dword [esi + 0x28]
jmp 0x4123b0
mov eax, dword [ebp - 0xc8]
test eax, eax
jne 0x412493
call fcn.0044019c
xor eax, eax
cmp esi, dword [eax + 0x18]
jne 0x4123cf
call fcn.0044019c
mov eax, dword [ebp - 0xc4]
mov esi, dword [eax + 0x3c]
add eax, 0xc
mov eax, dword [eax + 0x1c]
test ebx, ebx
je 0x4123e6
cmp ebx, eax
je 0x4123eb
call fcn.0044019c
cmp edi, esi
je 0x4124a5
test ebx, ebx
jne 0x41249a
call fcn.0044019c
xor eax, eax
cmp edi, dword [eax + 0x14]
jne 0x41240c
call fcn.0044019c
lea eax, [edi + 8]
push 0x46696c
push eax
lea edx, [ebp - 0x80]
push edx
call fcn.00408820
add esp, 0xc
mov byte [ebp - 4], 0x1c
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x48]
call fcn.004057b0
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x68], 8
jb 0x412448
mov eax, dword [ebp - 0x7c]
push eax
call fcn.0043ff5a
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x68], 7
mov dword [ebp - 0x6c], 0
mov word [ebp - 0x7c], cx
test ebx, ebx
jne 0x4124a1
call fcn.0044019c
xor eax, eax
cmp edi, dword [eax + 0x14]
jne 0x412471
call fcn.0044019c
mov edi, dword [edi]
mov esi, dword [ebp - 0xc4]
jmp 0x4123b0
mov eax, dword [edi]
jmp 0x412313
mov eax, dword [edi]
jmp 0x41234b
mov edi, dword [edi]
jmp 0x412393
mov eax, dword [eax]
jmp 0x4123c5
mov eax, dword [ebx]
jmp 0x412402
mov eax, dword [ebx]
jmp 0x412467
push 1
push 0x466968
lea ecx, [ebp - 0x48]
call fcn.004058d0
push 0x46696c
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x9c]
push eax
call fcn.00408820
add esp, 0xc
mov byte [ebp - 4], 0x1d
push 0xffffffffffffffff
xor esi, esi
push esi
push eax
lea ecx, [ebp - 0xb8]
call fcn.004057b0
mov byte [ebp - 4], 0x1b
mov ebx, 8
cmp dword [ebp - 0x84], ebx
jb 0x412501
mov ecx, dword [ebp - 0x98]
push ecx
call fcn.0043ff5a
add esp, 4
mov edi, 7
xor edx, edx
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x88], esi
mov word [ebp - 0x98], dx
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x30], ebx
jb 0x412530
mov eax, dword [ebp - 0x44]
push eax
call fcn.0043ff5a
add esp, 4
xor ecx, ecx
mov word [ebp - 0x44], cx
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x34], esi
call fcn.004127c0
mov esi, dword [ebp - 0xbc]
mov ebx, dword [ebp - 0xc4]
mov edi, dword [ebp - 0xc8]
jmp 0x4122e0
push 1
push 0x466964
lea ecx, [ebp - 0xb8]
call fcn.004058d0
push 4
xor edx, edx
mov esi, 7
xor edi, edi
push str.ARGS
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x34], edi
mov word [ebp - 0x44], dx
call fcn.004073d0
mov bl, 0x1e
mov byte [ebp - 4], bl
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x80]
push str.Args_map_dump:
push ecx
call fcn.00409700
add esp, 0xc
mov byte [ebp - 4], 0x1f
lea edx, [ebp - 0x48]
push edx
push eax
call fcn.0041ceb0
mov byte [ebp - 4], bl
mov ebx, 8
cmp dword [ebp - 0x68], ebx
jb 0x4125d6
mov eax, dword [ebp - 0x7c]
push eax
call fcn.0043ff5a
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x6c], edi
mov word [ebp - 0x7c], cx
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x30], ebx
jb 0x4125f7
mov edx, dword [ebp - 0x44]
push edx
call fcn.0043ff5a
add esp, 4
xor eax, eax
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x34], edi
mov word [ebp - 0x44], ax
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xa0], ebx
jb 0x412621
mov ecx, dword [ebp - 0xb4]
push ecx
call fcn.0043ff5a
add esp, 4
xor edx, edx
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0xa4], edi
mov word [ebp - 0xb4], dx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00440721
mov esp, ebp
pop ebp
ret 0x10