Function at 0x44e39c
Capabilities:
Accept command line arguments
Get common file path
Get session user name

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x72
push 0
push 0
dec ecx
jne 0x44e3a4
push ebx
push esi
push edi
mov esi, edx
mov dword [ebp - 0x1c], eax
xor eax, eax
push ebp
push 0x44f4dc
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x150], 0
jne 0x44e3f7
mov dl, 1
mov eax, dword [0x435a14]
call fcn.0043dee0
mov ebx, eax
mov eax, dword [ebp - 0x1c]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x1c]
add eax, 0x150
mov edx, ebx
test edx, edx
je 0x44e3f2
sub edx, 0xffffffc0
call fcn.00408408
mov eax, esi
mov edx, dword [ebp - 0x1c]
mov edx, dword [edx + 0x150]
call fcn.00408408
mov eax, dword [ebp - 0x1c]
cmp byte [eax + 0x174], 0
je 0x44f42e
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x150]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jne 0x44f42e
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
mov edx, dword [edx + 0x150]
call fcn.00408408
lea eax, [ebp - 0x290]
mov edx, dword [ebp - 0x1c]
mov edx, dword [edx + 0x150]
mov ecx, 0x44f4f0
call fcn.00408434
mov eax, dword [ebp - 0x290]
mov edx, dword [eax]
call dword [edx + 0x18]
xor eax, eax
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x44e5b9
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
lea eax, [ebp - 0x298]
push eax
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + 0x1d4]
mov cl, 0x30
mov edx, 4
call fcn.0040d6c0
push dword [ebp - 0x298]
push 0x44f50c
lea eax, [ebp - 0x29c]
push eax
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + 0x1d6]
mov cl, 0x30
mov edx, 2
call fcn.0040d6c0
push dword [ebp - 0x29c]
push 0x44f50c
lea eax, [ebp - 0x2a0]
push eax
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + 0x1da]
mov cl, 0x30
mov edx, 2
call fcn.0040d6c0
push dword [ebp - 0x2a0]
push 0x44f51c
lea eax, [ebp - 0x2a4]
push eax
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + 0x1dc]
mov cl, 0x30
mov edx, 2
call fcn.0040d6c0
push dword [ebp - 0x2a4]
push 0x44f52c
lea eax, [ebp - 0x2a8]
push eax
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + 0x1de]
mov cl, 0x30
mov edx, 2
call fcn.0040d6c0
push dword [ebp - 0x2a8]
push 0x44f52c
lea eax, [ebp - 0x2ac]
push eax
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + 0x1e0]
mov cl, 0x30
mov edx, 2
call fcn.0040d6c0
push dword [ebp - 0x2ac]
push 0x44f51c
lea eax, [ebp - 0x2b0]
push eax
mov eax, dword [ebp - 0x1c]
movzx eax, word [eax + 0x1e2]
mov cl, 0x30
mov edx, 1
call fcn.0040d6c0
push dword [ebp - 0x2b0]
push 0x44f53c
lea eax, [ebp - 0x294]
mov edx, 0xe
call fcn.00405b3c
mov edx, dword [ebp - 0x294]
mov eax, 0x44f54c
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44e5c3
xor eax, eax
push ebp
push 0x44e5f8
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
lea eax, [ebp - 0x2b4]
call fcn.00430604
mov edx, dword [ebp - 0x2b4]
mov eax, 0x44f564
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44e602
xor eax, eax
push ebp
push 0x44e637
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
lea eax, [ebp - 0x2b8]
call fcn.0044cfcc
mov edx, dword [ebp - 0x2b8]
mov eax, 0x44f580
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44e641
xor eax, eax
push ebp
push 0x44e6aa
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x20], 0x104
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x139]
push eax
call sub.advapi32.dll_GetUserNameA
lea eax, [ebp - 0x10]
lea edx, [ebp - 0x139]
mov ecx, 0x105
push 0
call fcn.00405964
call fcn.0044cf0c
test al, al
je 0x44e691
lea eax, [ebp - 0x10]
mov edx, 0x44f59c
call fcn.004059f4
push ebp
mov edx, dword [ebp - 0x10]
mov eax, 0x44f5b4
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44e6b4
xor eax, eax
push ebp
push 0x44e799
push dword fs:[eax]
mov dword fs:[eax], esp
call sub.kernel32.dll_GetVersion_1
test eax, 0x80000000
jne 0x44e6dd
lea eax, [ebp - 0x10]
mov edx, 0x44f5cc
call fcn.004056dc
jmp 0x44e6e5
lea eax, [ebp - 0x10]
call fcn.0040562c
lea eax, [ebp - 0x14]
push eax
push 0x44f5dc
push dword [ebp - 0x10]
push 0x44f604
lea eax, [ebp - 0x2bc]
mov edx, 3
call fcn.00405b3c
mov edx, dword [ebp - 0x2bc]
mov ecx, 0x44f620
mov eax, 0x80000002
call fcn.0043063c
lea eax, [ebp - 0x2c0]
push eax
push 0x44f5dc
push dword [ebp - 0x10]
push 0x44f604
lea eax, [ebp - 0x2c4]
mov edx, 3
call fcn.00405b3c
mov edx, dword [ebp - 0x2c4]
mov ecx, 0x44f644
mov eax, 0x80000002
call fcn.0043063c
mov edx, dword [ebp - 0x2c0]
lea eax, [ebp - 0x10]
call fcn.004056dc
cmp dword [ebp - 0x14], 0
je 0x44e780
push dword [ebp - 0x10]
push 0x44f660
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00405b3c
push ebp
mov edx, dword [ebp - 0x10]
mov eax, 0x44f670
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44e7a3
xor eax, eax
push ebp
push 0x44e7d8
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
lea eax, [ebp - 0x2c8]
call fcn.0044d34c
mov edx, dword [ebp - 0x2c8]
mov eax, 0x44f690
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44e7e2
xor eax, eax
push ebp
push 0x44e817
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
lea eax, [ebp - 0x2cc]
call fcn.0044d3fc
mov edx, dword [ebp - 0x2cc]
mov eax, 0x44f6b0
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44e821
xor eax, eax
push ebp
push 0x44e856
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
lea eax, [ebp - 0x2d0]
call fcn.0044d444
mov edx, dword [ebp - 0x2d0]
mov eax, 0x44f6cc
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44e860
xor eax, eax
push ebp
push 0x44e895
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
lea eax, [ebp - 0x2d4]
call fcn.0044d49c
mov edx, dword [ebp - 0x2d4]
mov eax, 0x44f6e8
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44e89f
xor eax, eax
push ebp
push 0x44e92a
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x10]
call fcn.0044d5a0
cmp dword [ebp - 0x10], 0
je 0x44e920
call fcn.0044d650
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jne 0x44e8da
push ebp
mov edx, dword [ebp - 0x10]
mov eax, 0x44f704
call fcn.0044e2b4
pop ecx
jmp 0x44e920
push ebp
lea eax, [ebp - 0x2dc]
push eax
mov cl, 0x30
mov edx, 1
mov eax, dword [ebp - 0x2c]
call fcn.0040d5a4
push dword [ebp - 0x2dc]
push 0x44f71c
push dword [ebp - 0x10]
lea eax, [ebp - 0x2d8]
mov edx, 3
call fcn.00405b3c
mov edx, dword [ebp - 0x2d8]
mov eax, 0x44f72c
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44e934
xor eax, eax
push ebp
push 0x44e969
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
lea eax, [ebp - 0x2e0]
call fcn.0044d744
mov edx, dword [ebp - 0x2e0]
mov eax, 0x44f744
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44e973
lea eax, [ebp - 0x300]
call fcn.00415d48
cmp byte [ebp - 0x2f0], 0
je 0x44e9c6
xor eax, eax
push ebp
push 0x44e9bc
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
lea eax, [ebp - 0x304]
call fcn.0044d8c4
mov edx, dword [ebp - 0x304]
mov eax, 0x44f760
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44e9c6
xor eax, eax
push ebp
push 0x44eabe
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x44f774
push 0x44f79c
call sub.kernel32.dll_GetModuleHandleW_2
push eax
call fcn.00409400
mov dword [ebp - 8], eax
push 0x104
lea eax, [ebp - 0x139]
push eax
call sub.kernel32.dll_GetWindowsDirectoryA
lea edx, [ebp - 0x10]
xor eax, eax
call fcn.0042ff10
lea eax, [ebp - 0x10]
xor edx, edx
call fcn.0040583c
movzx eax, byte [eax]
call fcn.0040bd60
mov ebx, eax
movzx eax, byte [ebp - 0x139]
call fcn.0040bd60
cmp bl, al
je 0x44ea8e
push ebp
push ebp
lea edx, [ebp - 0x30c]
movzx eax, byte [ebp - 0x139]
call fcn.0044e13c
pop ecx
push dword [ebp - 0x30c]
push 0x44f7c4
push ebp
lea eax, [ebp - 0x10]
xor edx, edx
call fcn.0040583c
movzx eax, byte [eax]
lea edx, [ebp - 0x310]
call fcn.0044e13c
pop ecx
push dword [ebp - 0x310]
lea eax, [ebp - 0x308]
mov edx, 3
call fcn.00405b3c
mov edx, dword [ebp - 0x308]
mov eax, 0x44f7d4
call fcn.0044e2b4
pop ecx
jmp 0x44eab4
push ebp
push ebp
lea edx, [ebp - 0x314]
movzx eax, byte [ebp - 0x139]
call fcn.0044e13c
pop ecx
mov edx, dword [ebp - 0x314]
mov eax, 0x44f7d4
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44eac8
xor eax, eax
push ebp
push 0x44eafd
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
lea eax, [ebp - 0x318]
call fcn.0044d980
mov edx, dword [ebp - 0x318]
mov eax, 0x44f7f0
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44eb07
xor eax, eax
push ebp
push 0x44eb49
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
lea eax, [ebp - 0x31c]
push eax
call sub.kernel32.dll_GetCurrentProcessId
mov cl, 0x30
mov edx, 1
call fcn.0040d76c
mov edx, dword [ebp - 0x31c]
mov eax, 0x44f80c
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44eb53
xor eax, eax
push ebp
push 0x44eb88
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
lea eax, [ebp - 0x320]
call fcn.0044db5c
mov edx, dword [ebp - 0x320]
mov eax, 0x44f824
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44eb92
xor eax, eax
push ebp
push 0x44ebe5
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x5943f8], 0
je 0x44ebdb
call fcn.00403418
test eax, eax
jle 0x44ebdb
push ebp
call sub.kernel32.dll_GetCommandLineA
mov edx, eax
lea eax, [ebp - 0x324]
mov ecx, 0
call fcn.004058e0
mov edx, dword [ebp - 0x324]
mov eax, 0x44f844
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44ebef
xor eax, eax
push ebp
push 0x44ec37
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
lea edx, [ebp - 0x32c]
xor eax, eax
call fcn.0042ff10
mov eax, dword [ebp - 0x32c]
lea edx, [ebp - 0x328]
call fcn.0042ff44
mov edx, dword [ebp - 0x328]
mov eax, 0x44f860
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44ec41
xor eax, eax
push ebp
push 0x44ec9b
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
call sub.kernel32.dll_GetModuleHandleW_2
cmp eax, dword [0x5a5b20]
je 0x44ec91
push ebp
lea edx, [ebp - 0x334]
mov eax, dword [0x5a5b20]
call fcn.0042ff10
mov eax, dword [ebp - 0x334]
lea edx, [ebp - 0x330]
call fcn.0042ff44
mov edx, dword [ebp - 0x330]
mov eax, 0x44f878
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44eca5
xor eax, eax
push ebp
push 0x44eee8
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x594498], 0
je 0x44ecc8
lea edx, [ebp - 0x10]
xor eax, eax
call fcn.0042ff10
jmp 0x44ecd5
lea edx, [ebp - 0x10]
mov eax, dword [0x5a5b20]
call fcn.0042ff10
lea eax, [ebp - 0x27c]
push eax
mov eax, dword [ebp - 0x10]
call fcn.00405ce8
push eax
call sub.kernel32.dll_FindFirstFileA
mov ebx, eax
cmp ebx, 0xffffffff
je 0x44eede
push ebx
call sub.kernel32.dll_FindClose_1
xor eax, eax
push ebp
push 0x44ee5e
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x268]
push eax
call sub.kernel32.dll_FileTimeToLocalFileTime
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x268]
push eax
call sub.kernel32.dll_FileTimeToSystemTime
cmp byte [0x594498], 0
jne 0x44ed47
push 0
call sub.kernel32.dll_GetModuleHandleW_2
cmp eax, dword [0x5a5b20]
jne 0x44ed56
lea eax, [ebp - 0x14]
mov edx, 0x44f894
call fcn.004056dc
jmp 0x44ed63
lea eax, [ebp - 0x14]
mov edx, 0x44f8a8
call fcn.004056dc
push ebp
lea eax, [ebp - 0x33c]
push eax
movzx eax, word [ebp - 0x28c]
mov cl, 0x30
mov edx, 4
call fcn.0040d6c0
push dword [ebp - 0x33c]
push 0x44f50c
lea eax, [ebp - 0x340]
push eax
movzx eax, word [ebp - 0x28a]
mov cl, 0x30
mov edx, 2
call fcn.0040d6c0
push dword [ebp - 0x340]
push 0x44f50c
lea eax, [ebp - 0x344]
push eax
movzx eax, word [ebp - 0x286]
mov cl, 0x30
mov edx, 2
call fcn.0040d6c0
push dword [ebp - 0x344]
push 0x44f7c4
lea eax, [ebp - 0x348]
push eax
movzx eax, word [ebp - 0x284]
mov cl, 0x30
mov edx, 2
call fcn.0040d6c0
push dword [ebp - 0x348]
push 0x44f52c
lea eax, [ebp - 0x34c]
push eax
movzx eax, word [ebp - 0x282]
mov cl, 0x30
mov edx, 2
call fcn.0040d6c0
push dword [ebp - 0x34c]
push 0x44f8bc
lea eax, [ebp - 0x338]
mov edx, 0xa
call fcn.00405b3c
mov eax, dword [ebp - 0x338]
push eax
lea eax, [ebp - 0x350]
mov ecx, 0x44f8cc
mov edx, dword [ebp - 0x14]
call fcn.00405a70
mov eax, dword [ebp - 0x350]
pop edx
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44ee68
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0x1c]
call fcn.00439ad0
cmp dword [ebp - 0x354], 0
jne 0x44eebe
mov eax, dword [ebp - 0x10]
call fcn.004162fc
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0
jne 0x44ee97
cmp dword [ebp - 0x28], 0
je 0x44eede
push ebp
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea eax, [ebp - 0x358]
call fcn.004164ec
mov edx, dword [ebp - 0x358]
mov eax, 0x44f8e4
call fcn.0044e2b4
pop ecx
jmp 0x44eede
push ebp
lea edx, [ebp - 0x35c]
mov eax, dword [ebp - 0x1c]
call fcn.00439ad0
mov edx, dword [ebp - 0x35c]
mov eax, 0x44f8e4
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44eef2
xor eax, eax
push ebp
push 0x44ef88
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x44f8ec
call sub.kernel32.dll_GetModuleHandleW_2
mov ebx, eax
test ebx, ebx
je 0x44ef7e
push 0x104
lea eax, [ebp - 0x139]
push eax
push ebx
call sub.kernel32.dll_GetModuleFileNameA
test eax, eax
jbe 0x44ef7e
lea eax, [ebp - 0x360]
lea edx, [ebp - 0x139]
mov ecx, 0x105
push 0
call fcn.00405964
mov eax, dword [ebp - 0x360]
call fcn.004162fc
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0
jne 0x44ef59
cmp dword [ebp - 0x28], 0
je 0x44ef7e
push ebp
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea eax, [ebp - 0x364]
call fcn.004164ec
mov edx, dword [ebp - 0x364]
mov eax, 0x44f910
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44ef92
xor eax, eax
push ebp
push 0x44f039
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x44efec
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5a5b20]
call fcn.00416fe4
cmp byte [eax + 0x1a], 2
je 0x44efd1
push ebp
mov edx, 0x44f928
mov eax, 0x44f940
call fcn.0044e2b4
pop ecx
jmp 0x44efe2
push ebp
mov edx, 0x44f95c
mov eax, 0x44f940
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44f007
push ebp
lea eax, [ebp - 0x368]
mov edx, dword [0x5943e8]
mov ecx, 0
call fcn.004058e0
mov edx, dword [ebp - 0x368]
mov eax, 0x44f974
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44f043
lea ecx, [ebp - 0x14]
mov edx, 0x44f994
mov eax, dword [ebp - 0x1c]
call fcn.0043c7b0
mov dl, 0x7c
mov eax, dword [ebp - 0x14]
call fcn.0040db4c
test eax, eax
jle 0x44f217
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], 1
xor eax, eax
push ebp
push 0x44f201
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x10]
push eax
mov cl, 0x7c
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
call fcn.0040dc10
mov eax, dword [0x5a6c98]
call fcn.00407934
mov ebx, eax
test ebx, ebx
jl 0x44f1f7
inc ebx
mov dword [ebp - 0x30], 0
mov esi, dword [ebp - 0x30]
mov eax, esi
add esi, esi
add esi, esi
add esi, esi
sub esi, eax
mov eax, dword [0x5a6c98]
mov eax, dword [eax + esi*4]
mov edx, dword [ebp - 0x10]
call fcn.0040bf3c
test al, al
je 0x44f1ed
mov eax, dword [0x5a6c98]
cmp byte [eax + esi*4 + 0x18], 0
jne 0x44f1f7
mov eax, dword [0x5a6c98]
cmp dword [eax + esi*4 + 8], 0
je 0x44f116
push ebp
mov eax, dword [0x5a6c98]
mov ebx, dword [eax + esi*4 + 8]
lea eax, [ebp - 0x36c]
call ebx
mov edx, dword [ebp - 0x36c]
mov eax, dword [0x5a6c98]
mov eax, dword [eax + esi*4]
call fcn.0044e2b4
pop ecx
jmp 0x44f1f7
mov eax, dword [0x5a6c98]
cmp dword [eax + esi*4 + 0xc], 0
je 0x44f163
push ebp
mov eax, dword [0x5a6c98]
mov ebx, dword [eax + esi*4 + 0xc]
lea eax, [ebp - 0x374]
call ebx
mov edx, dword [ebp - 0x374]
lea eax, [ebp - 0x370]
mov ecx, 0
call fcn.00406738
mov edx, dword [ebp - 0x370]
mov eax, dword [0x5a6c98]
mov eax, dword [eax + esi*4]
call fcn.0044e2b4
pop ecx
jmp 0x44f1f7
mov eax, dword [0x5a6c98]
cmp dword [eax + esi*4 + 0x10], 0
je 0x44f1a3
push ebp
mov eax, dword [0x5a6c98]
mov ebx, dword [eax + esi*4 + 0x10]
lea edx, [ebp - 0x378]
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x44f18b
sub eax, 0xfffffe18
call ebx
mov edx, dword [ebp - 0x378]
mov eax, dword [0x5a6c98]
mov eax, dword [eax + esi*4]
call fcn.0044e2b4
pop ecx
jmp 0x44f1f7
push ebp
mov eax, dword [0x5a6c98]
mov ebx, dword [eax + esi*4 + 0x14]
lea edx, [ebp - 0x380]
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x44f1bf
sub eax, 0xfffffe18
call ebx
mov edx, dword [ebp - 0x380]
lea eax, [ebp - 0x37c]
mov ecx, 0
call fcn.00406738
mov edx, dword [ebp - 0x37c]
mov eax, dword [0x5a6c98]
mov eax, dword [eax + esi*4]
call fcn.0044e2b4
pop ecx
jmp 0x44f1f7
inc dword [ebp - 0x30]
dec ebx
jne 0x44f0aa
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44f20b
inc dword [ebp - 0x2c]
dec dword [ebp - 0x34]
jne 0x44f06f
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0x30], eax
xor eax, eax
push ebp
push 0x44f247
push dword fs:[eax]
mov dword fs:[eax], esp
push ebp
mov edx, 0x44f9a8
mov eax, 0x44f9cc
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44f251
xor eax, eax
push ebp
push 0x44f2a7
push dword fs:[eax]
mov dword fs:[eax], esp
add dword [0x594ce8], 1
adc dword [0x594cec], 0
push ebp
push dword [0x594cec]
push dword [0x594ce8]
lea ecx, [ebp - 0x384]
mov dl, 0x30
mov eax, 1
call fcn.0040d718
mov edx, dword [ebp - 0x384]
mov eax, 0x44f9e8
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44f2b1
xor eax, eax
push ebp
push 0x44f395
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x1c]
cmp byte [eax + 0x4f], 1
je 0x44f36b
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
call fcn.0044df90
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
call fcn.0044df24
push ebp
mov edx, dword [ebp - 0x14]
mov eax, 0x44fa08
call fcn.0044e2b4
pop ecx
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
call fcn.00405cd0
je 0x44f38b
lea edx, [ebp - 0x388]
mov eax, dword [ebp - 0x10]
call fcn.00432264
mov edx, dword [ebp - 0x388]
lea eax, [ebp - 0x10]
call fcn.004056dc
push 0
lea eax, [ebp - 0x10]
mov ecx, 0x44f7c4
mov edx, 0x44fa24
call fcn.0040bc28
push 0
lea eax, [ebp - 0x10]
mov ecx, 0x44f7c4
mov edx, 0x44fa34
call fcn.0040bc28
push 1
lea eax, [ebp - 0x10]
mov ecx, 0x44f7c4
mov edx, 0x44fa44
call fcn.0040bc28
push ebp
mov edx, dword [ebp - 0x10]
mov eax, 0x44fa54
call fcn.0044e2b4
pop ecx
jmp 0x44f38b
push ebp
lea edx, [ebp - 0x38c]
mov eax, dword [ebp - 0x1c]
call fcn.00439b44
mov edx, dword [ebp - 0x38c]
mov eax, 0x44fa54
call fcn.0044e2b4
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44f39f
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0xc]
xor eax, eax
push ebp
push 0x44f41c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
dec eax
test eax, eax
jl 0x44f3eb
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], 0
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
mov ecx, dword [eax + edx*8 + 4]
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
mov edx, dword [eax + edx*8]
mov eax, dword [ebp - 0x18]
mov ebx, dword [eax]
call dword [ebx + 0x28]
inc dword [ebp - 0x2c]
dec dword [ebp - 0x34]
jne 0x44f3c8
lea eax, [ebp - 0x390]
mov edx, dword [ebp - 0x1c]
mov edx, dword [edx + 0x150]
mov ecx, 0x44f4f0
call fcn.00408434
mov eax, dword [ebp - 0x390]
mov edx, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx + 0x14]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x44f426
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x10]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x44f4e6
lea eax, [ebp - 0x390]
call fcn.004083f0
lea eax, [ebp - 0x38c]
mov edx, 3
call fcn.00405650
lea eax, [ebp - 0x380]
call fcn.004064e4
lea eax, [ebp - 0x37c]
mov edx, 2
call fcn.00405650
lea eax, [ebp - 0x374]
call fcn.004064e4
lea eax, [ebp - 0x370]
mov edx, 0x1c
call fcn.00405650
lea eax, [ebp - 0x300]
mov edx, dword [0x415c2c]
call fcn.00406f84
lea eax, [ebp - 0x2e0]
mov edx, 0x14
call fcn.00405650
lea eax, [ebp - 0x290]
call fcn.004083f0
lea eax, [ebp - 0x18]
call fcn.004083f0
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.00405650
lea eax, [ebp - 4]
mov edx, dword [0x44e108]
call fcn.00407c14
ret