Function at 0x444280
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xc0
mov dword [esp + 0x34], ecx
lea ecx, [esp + 0x9c]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.004450a0
test byte [esp + 0xa4], 1
jne 0x4442ca
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x7c], eax
jmp 0x44435f
lea esi, [ebp + 0x10]
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], eax
lea eax, [esp + 0x98]
lea edi, [esp + 0x20]
push eax
push edi
call fcn.00550abc
add esp, 8
mov word [esp + 0x1c], 0x104
mov dword [esp + 0xc], edi
lea eax, [esp + 0xc]
mov ecx, esp
push eax
push dword [esi + 4]
push ecx
call dword [esi]
add esp, 0xc
test byte [esp + 0x20], 1
je 0x444329
push dword [esp + 0x28]
call sub.libc.dll_operator_delete_void_
add esp, 4
mov ecx, dword [esp + 0x98]
test ecx, ecx
je 0x444339
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esp]
test eax, eax
je 0x44434f
mov ecx, dword [esp + 0x34]
or byte [ecx + 0xc], 1
mov dword [ecx], eax
jmp 0x444c7c
mov dword [esp + 0x70], 0
mov dword [esp + 0x7c], 0
lea ecx, [esp + 0x80]
mov edi, dword [ebp + 0xc]
push edi
mov ebx, dword [ebp + 8]
push ebx
call fcn.00445d00
test byte [esp + 0x88], 1
jne 0x4446c7
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x84]
add ecx, eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
cmp dword [edi + 0x1c], 0
je 0x444910
mov dword [esp + 0x68], 1
mov dword [esp + 0x6c], eax
mov ebx, eax
lea eax, [ebx + 0x14]
cmp eax, dword [esp + 0x8c]
ja 0x444caf
test bl, 3
mov eax, dword [ebp + 8]
jne 0x444da2
mov esi, ebx
movzx ebx, word [ebx]
cmp ebx, 1
jne 0x444e49
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xb8], eax
lea ecx, [esp + 0x58]
push eax
call fcn.004467b0
mov edi, eax
movzx eax, word [esi]
mov dword [edi], eax
movzx eax, word [esi + 2]
mov dword [edi + 4], eax
mov eax, esi
sub eax, dword [esp + 0x6c]
mov dword [edi + 8], eax
mov eax, dword [esi + 4]
cmp eax, dword [esp + 0x7c]
mov dword [esp + 0x78], esi
mov dword [esp + 0x74], edi
jae 0x44446b
add eax, dword [esp + 0x70]
mov edi, eax
push eax
call sub.msvcrt.dll_strlen
add esp, 4
cmp eax, 0xfffffff0
jae 0x444f71
mov ebx, eax
cmp eax, 0xb
jae 0x4444d3
mov eax, ebx
add al, bl
mov byte [esp + 0xc], al
lea esi, [esp + 0xd]
test ebx, ebx
jne 0x4444f5
jmp 0x444500
mov ebx, esi
mov dword [esp + 0x20], str._corrupt_vn_file:
mov dword [esp + 0x28], eax
mov word [esp + 0x30], 0x803
lea eax, [esp + 0x20]
mov dword [esp + 0xc], eax
mov dword [esp + 0x14], 0x55c957
mov word [esp + 0x1c], 0x302
mov ecx, esp
lea eax, [esp + 0xc]
push eax
call fcn.00550b46
test byte [edi + 0xc], 1
je 0x4444b4
push dword [edi + 0x14]
call sub.libc.dll_operator_delete_void_
add esp, 4
lea eax, [edi + 0xc]
mov ecx, dword [esp + 8]
mov dword [eax + 8], ecx
movsd xmm0, qword [esp]
movsd qword [eax], xmm0
cmp word [ebx + 2], 0
jne 0x44453c
jmp 0x4446a0
mov esi, ebx
or esi, 0xf
lea eax, [esi + 1]
push eax
call sub.libc.dll_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x14], eax
add esi, 2
mov dword [esp + 0xc], esi
mov esi, eax
mov dword [esp + 0x10], ebx
push ebx
push edi
push esi
call sub.msvcrt.dll_memmove
add esp, 0xc
mov byte [esi + ebx], 0
mov edi, dword [esp + 0x74]
test byte [edi + 0xc], 1
je 0x444519
push dword [edi + 0x14]
call sub.libc.dll_operator_delete_void_
add esp, 4
lea eax, [edi + 0xc]
mov ecx, dword [esp + 0x14]
mov dword [eax + 8], ecx
movsd xmm0, qword [esp + 0xc]
movsd qword [eax], xmm0
mov ebx, dword [esp + 0x78]
cmp word [ebx + 2], 0
je 0x4446a0
mov ecx, dword [ebx + 8]
add ecx, ebx
mov eax, edi
add eax, 0x18
mov dword [esp + 0xac], eax
xor edx, edx
jmp 0x444595
add esi, 0x10
mov ecx, esi
push str._corrupt_
call fcn.00550f42
mov ebx, dword [esp + 0x78]
mov edi, dword [esp + 0x74]
mov ecx, dword [esp + 0x90]
add ecx, dword [ecx + 0xc]
mov edx, dword [esp + 0xb0]
inc edx
movzx eax, word [ebx + 2]
cmp edx, eax
jae 0x4446a0
test cl, 3
jne 0x444940
lea eax, [ecx + 0x10]
cmp eax, dword [esp + 0x8c]
ja 0x444a9a
mov dword [esp + 0xb0], edx
mov eax, dword [edi + 0x1c]
mov dword [esp + 0xb4], eax
mov dword [esp + 0x90], ecx
mov ecx, dword [esp + 0xac]
push eax
call fcn.00446c20
mov ecx, dword [esp + 0x90]
mov esi, eax
mov eax, dword [ecx]
mov dword [esi], eax
movzx eax, word [ecx + 4]
mov dword [esi + 4], eax
movzx eax, word [ecx + 6]
mov dword [esi + 8], eax
mov eax, ecx
sub eax, dword [esp + 0x6c]
mov dword [esi + 0xc], eax
mov edi, dword [ecx + 8]
mov ebx, dword [esp + 0x7c]
sub ebx, edi
jbe 0x444560
cmp ebx, 0xfffffff0
jae 0x444f71
cmp ebx, 0xb
jae 0x444630
mov eax, ebx
add al, bl
mov byte [esp + 0xc], al
lea eax, [esp + 0xd]
jmp 0x44465c
mov eax, ebx
or eax, 0xf
mov dword [esp + 0xa8], eax
inc eax
push eax
call sub.libc.dll_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0xa8]
add ecx, 2
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
add edi, dword [esp + 0x70]
push ebx
push edi
push eax
mov edi, eax
call sub.msvcrt.dll_memmove
add esp, 0xc
mov byte [edi + ebx], 0
test byte [esi + 0x10], 1
je 0x444682
push dword [esi + 0x18]
call sub.libc.dll_operator_delete_void_
add esp, 4
add esi, 0x10
mov eax, dword [esp + 0x14]
mov dword [esi + 8], eax
movsd xmm0, qword [esp + 0xc]
movsd qword [esi], xmm0
jmp 0x44456f
add ebx, dword [ebx + 0xc]
mov ecx, dword [esp + 0x68]
inc ecx
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x68], ecx
cmp ecx, dword [eax + 0x1c]
jbe 0x4443c8
movsd xmm0, qword [esp + 0x58]
mov eax, dword [esp + 0x60]
jmp 0x444915
mov ecx, esp
push ebx
call fcn.0043a330
mov eax, edi
sub eax, dword [esp]
sar eax, 3
imul esi, eax, 0xcccccccd
mov eax, dword [ebx]
movzx eax, word [eax + 0x12]
push dword [edi + 4]
push eax
call fcn.005509d8
add esp, 8
mov word [esp + 0x30], 0x305
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], str._section_with_index
lea ebx, [esp + 0x20]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x14], esi
mov word [esp + 0x1c], 0x802
lea edi, [esp + 0xc]
lea esi, [esp + 0x40]
mov ecx, esi
push edi
call fcn.00550b46
mov ecx, esi
push str.cannot_read_content_of
push 0
call fcn.00550f48
movsd xmm0, qword [eax]
movsd qword [esp + 0x58], xmm0
mov ecx, dword [eax + 8]
mov dword [esp + 0x60], ecx
mov dword [eax], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
lea ecx, [esp + 0x58]
push 0x558038
call fcn.00550f36
movsd xmm0, qword [eax]
movsd qword [esp], xmm0
mov ecx, dword [eax + 8]
mov dword [esp + 8], ecx
mov dword [eax], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
xor eax, eax
test byte [esp + 0x88], 1
je 0x4447ac
mov eax, dword [esp + 0x80]
mov dword [esp + 0x80], 0
mov dword [esp + 0x94], eax
lea eax, [esp + 0x94]
lea ecx, [esp + 0x4c]
push eax
push ecx
call fcn.00550abc
add esp, 8
movzx eax, byte [esp + 0x4c]
test al, 1
je 0x4447db
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x50]
jmp 0x4447e1
shr eax, 1
lea edx, [esp + 0x4d]
mov ecx, esp
push eax
push edx
call fcn.00550f3c
movsd xmm0, qword [eax]
movsd qword [esp + 0x20], xmm0
mov ecx, dword [eax + 8]
mov dword [esp + 0x28], ecx
mov dword [eax], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov word [esp + 0x1c], 0x104
mov dword [esp + 0xc], ebx
push 0x1c
call sub.libc.dll_operator_new_unsigned_int_
add esp, 4
mov esi, eax
call fcn.00550996
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], 3
sub esp, 0xc
movsd xmm0, qword [esp + 0x44]
movsd qword [esp + 4], xmm0
mov dword [esp], edi
mov ecx, esi
call fcn.005507bc
mov eax, dword [esp + 0x34]
or byte [eax + 0xc], 1
mov dword [eax], esi
test byte [esp + 0x20], 1
jne 0x44489f
test byte [esp + 0x4c], 1
jne 0x4448b2
mov ecx, dword [esp + 0x94]
test ecx, ecx
je 0x444878
mov eax, dword [ecx]
call dword [eax + 4]
test byte [esp], 1
jne 0x4448cb
test byte [esp + 0x58], 1
jne 0x4448de
test byte [esp + 0x40], 1
jne 0x4448f1
test byte [esp + 0x88], 1
jne 0x444c61
jmp 0x444c7c
push dword [esp + 0x28]
call sub.libc.dll_operator_delete_void_
add esp, 4
test byte [esp + 0x4c], 1
je 0x444868
push dword [esp + 0x54]
call sub.libc.dll_operator_delete_void_
add esp, 4
mov ecx, dword [esp + 0x94]
test ecx, ecx
jne 0x444873
jmp 0x444878
push dword [esp + 8]
call sub.libc.dll_operator_delete_void_
add esp, 4
test byte [esp + 0x58], 1
je 0x444885
push dword [esp + 0x60]
call sub.libc.dll_operator_delete_void_
add esp, 4
test byte [esp + 0x40], 1
je 0x44488c
push dword [esp + 0x48]
call sub.libc.dll_operator_delete_void_
add esp, 4
test byte [esp + 0x88], 1
jne 0x444c61
jmp 0x444c7c
xorps xmm0, xmm0
xor eax, eax
mov ecx, dword [esp + 0x34]
and byte [ecx + 0xc], 0xfe
movlps qword [ecx], xmm0
mov dword [ecx + 8], eax
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
jmp 0x444c46
mov esi, ecx
mov ecx, esp
mov ebx, dword [ebp + 8]
push ebx
call fcn.0043a330
mov ecx, dword [ebp + 0xc]
mov eax, ecx
sub eax, dword [esp]
sar eax, 3
imul edi, eax, 0xcccccccd
mov eax, dword [ebx]
movzx eax, word [eax + 0x12]
push dword [ecx + 4]
push eax
call fcn.005509d8
add esp, 8
mov word [esp + 0x30], 0x305
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], str._section_with_index
lea ebx, [esp + 0x20]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x14], edi
mov word [esp + 0x1c], 0x802
lea ebx, [esp + 0x40]
mov ecx, ebx
lea edi, [esp + 0xc]
push edi
call fcn.00550b46
mov ecx, ebx
push str.invalid
push 0
call fcn.00550f48
movsd xmm0, qword [eax]
movsd qword [esp], xmm0
mov ecx, dword [eax + 8]
mov dword [esp + 8], ecx
mov dword [eax], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov ecx, esp
push str.:_found_a_misaligned_auxiliary_entry_at_offset_0x
call fcn.00550f36
movsd xmm0, qword [eax]
movsd qword [esp + 0x20], xmm0
mov ecx, dword [eax + 8]
mov dword [esp + 0x28], ecx
mov dword [eax], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
sub esi, dword [esp + 0x6c]
mov eax, esi
sar eax, 0x1f
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], esi
lea eax, [esp + 0x20]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x38]
mov dword [esp + 0x14], eax
mov word [esp + 0x1c], 0xe04
push 0x1c
call sub.libc.dll_operator_new_unsigned_int_
add esp, 4
mov esi, eax
call fcn.00550996
mov dword [esp + 0x50], eax
mov dword [esp + 0x4c], 3
sub esp, 0xc
movsd xmm0, qword [esp + 0x58]
movsd qword [esp + 4], xmm0
mov dword [esp], edi
mov ecx, esi
call fcn.005507bc
mov eax, dword [esp + 0x34]
or byte [eax + 0xc], 1
mov dword [eax], esi
test byte [esp + 0x20], 1
jne 0x444c11
test byte [esp], 1
jne 0x444c27
test byte [esp + 0x40], 1
jne 0x444c3a
jmp 0x444c46
mov ecx, esp
mov esi, dword [ebp + 8]
push esi
call fcn.0043a330
mov ecx, dword [ebp + 0xc]
mov eax, ecx
sub eax, dword [esp]
sar eax, 3
imul edi, eax, 0xcccccccd
mov eax, dword [esi]
movzx eax, word [eax + 0x12]
push dword [ecx + 4]
push eax
call fcn.005509d8
add esp, 8
mov word [esp + 0x30], 0x305
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], str._section_with_index
lea esi, [esp + 0x20]
mov dword [esp + 0xc], esi
mov dword [esp + 0x14], edi
mov word [esp + 0x1c], 0x802
lea edi, [esp + 0x4c]
mov ecx, edi
lea ebx, [esp + 0xc]
push ebx
call fcn.00550b46
mov ecx, edi
push str.invalid
push 0
call fcn.00550f48
movsd xmm0, qword [eax]
movsd qword [esp + 0x40], xmm0
mov ecx, dword [eax + 8]
mov dword [esp + 0x48], ecx
mov dword [eax], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
lea ecx, [esp + 0x40]
push str.:_version_dependency
call fcn.00550f36
movsd xmm0, qword [eax]
movsd qword [esp], xmm0
mov ecx, dword [eax + 8]
mov dword [esp + 8], ecx
mov dword [eax], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov eax, esp
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x28], eax
mov word [esp + 0x30], 0x804
mov dword [esp + 0xc], esi
mov dword [esp + 0x14], str._refers_to_an_auxiliary_entry_that_goes_past_the_end_of_the_section
mov word [esp + 0x1c], 0x302
push 0x1c
call sub.libc.dll_operator_new_unsigned_int_
add esp, 4
mov esi, eax
call fcn.00550996
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], 3
sub esp, 0xc
movsd xmm0, qword [esp + 0x44]
movsd qword [esp + 4], xmm0
mov dword [esp], ebx
mov ecx, esi
call fcn.005507bc
mov eax, dword [esp + 0x34]
or byte [eax + 0xc], 1
mov dword [eax], esi
test byte [esp], 1
jne 0x444be5
test byte [esp + 0x40], 1
jne 0x444bf8
test byte [esp + 0x4c], 1
jne 0x444c0b
jmp 0x444c46
push dword [esp + 8]
call sub.libc.dll_operator_delete_void_
add esp, 4
test byte [esp + 0x40], 1
je 0x444bdc
push dword [esp + 0x48]
call sub.libc.dll_operator_delete_void_
add esp, 4
test byte [esp + 0x4c], 1
je 0x444c46
push dword [esp + 0x54]
jmp 0x444c3e
push dword [esp + 0x28]
call sub.libc.dll_operator_delete_void_
add esp, 4
test byte [esp], 1
je 0x444a8a
push dword [esp + 8]
call sub.libc.dll_operator_delete_void_
add esp, 4
test byte [esp + 0x40], 1
je 0x444c46
push dword [esp + 0x48]
call sub.libc.dll_operator_delete_void_
add esp, 4
lea eax, [esp + 0x58]
mov dword [esp + 0xc], eax
lea ecx, [esp + 0xc]
call fcn.00447690
test byte [esp + 0x88], 1
je 0x444c7c
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x80], 0
test ecx, ecx
je 0x444c7c
mov eax, dword [ecx]
call dword [eax + 4]
test byte [esp + 0xa4], 1
je 0x444ca1
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x9c], 0
test ecx, ecx
je 0x444ca1
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esp + 0x34]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
mov ecx, esp
mov esi, dword [ebp + 8]
push esi
call fcn.0043a330
mov ecx, dword [ebp + 0xc]
mov eax, ecx
sub eax, dword [esp]
sar eax, 3
imul edi, eax, 0xcccccccd
mov eax, dword [esi]
movzx eax, word [eax + 0x12]
push dword [ecx + 4]
push eax
call fcn.005509d8
add esp, 8
mov word [esp + 0x30], 0x305
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], str._section_with_index
lea esi, [esp + 0x20]
mov dword [esp + 0xc], esi
mov dword [esp + 0x14], edi
mov word [esp + 0x1c], 0x802
lea edi, [esp + 0x4c]
mov ecx, edi
lea ebx, [esp + 0xc]
push ebx
call fcn.00550b46
mov ecx, edi
push str.invalid
push 0
call fcn.00550f48
movsd xmm0, qword [eax]
movsd qword [esp + 0x40], xmm0
mov ecx, dword [eax + 8]
mov dword [esp + 0x48], ecx
mov dword [eax], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
lea ecx, [esp + 0x40]
push str.:_version_dependency
call fcn.00550f36
movsd xmm0, qword [eax]
movsd qword [esp], xmm0
mov ecx, dword [eax + 8]
mov dword [esp + 8], ecx
mov dword [eax], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov eax, esp
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x28], eax
mov word [esp + 0x30], 0x804
mov dword [esp + 0xc], esi
mov dword [esp + 0x14], str._goes_past_the_end_of_the_section
jmp 0x444b88
mov ecx, esp
push eax
mov esi, eax
call fcn.0043a330
mov ecx, dword [ebp + 0xc]
mov eax, ecx
sub eax, dword [esp]
sar eax, 3
imul edi, eax, 0xcccccccd
mov eax, dword [esi]
movzx eax, word [eax + 0x12]
push dword [ecx + 4]
push eax
call fcn.005509d8
add esp, 8
mov word [esp + 0x30], 0x305
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], str._section_with_index
mov esi, ebx
lea ebx, [esp + 0x20]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x14], edi
mov word [esp + 0x1c], 0x802
lea ebx, [esp + 0x40]
mov ecx, ebx
lea edi, [esp + 0xc]
push edi
call fcn.00550b46
mov ecx, ebx
push str.invalid
push 0
call fcn.00550f48
movsd xmm0, qword [eax]
movsd qword [esp], xmm0
mov ecx, dword [eax + 8]
mov dword [esp + 8], ecx
mov dword [eax], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov ecx, esp
push str.:_found_a_misaligned_version_dependency_entry_at_offset_0x
jmp 0x4449e3
mov ecx, esp
push eax
mov esi, eax
call fcn.0043a330
mov ecx, dword [ebp + 0xc]
mov eax, ecx
sub eax, dword [esp]
sar eax, 3
imul edi, eax, 0xcccccccd
mov eax, dword [esi]
movzx eax, word [eax + 0x12]
push dword [ecx + 4]
push eax
call fcn.005509d8
add esp, 8
mov word [esp + 0x30], 0x305
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], str._section_with_index
lea esi, [esp + 0x20]
mov dword [esp + 0xc], esi
mov dword [esp + 0x14], edi
mov word [esp + 0x1c], 0x802
lea edi, [esp + 0x4c]
mov ecx, edi
lea eax, [esp + 0xc]
push eax
call fcn.00550b46
mov ecx, edi
push str.unable_to_dump
push 0
call fcn.00550f48
movsd xmm0, qword [eax]
movsd qword [esp + 0x40], xmm0
mov ecx, dword [eax + 8]
mov dword [esp + 0x48], ecx
mov dword [eax], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
lea ecx, [esp + 0x40]
push str.:_version
call fcn.00550f36
movsd xmm0, qword [eax]
movsd qword [esp], xmm0
mov ecx, dword [eax + 8]
mov dword [esp + 8], ecx
mov dword [eax], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov eax, esp
mov dword [esp + 0x20], eax
mov dword [esp + 0x28], ebx
mov word [esp + 0x30], 0x804
mov dword [esp + 0xc], esi
mov dword [esp + 0x14], str._is_not_yet_supported
mov word [esp + 0x1c], 0x302
push 0x1c
call sub.libc.dll_operator_new_unsigned_int_
add esp, 4
mov esi, eax
call fcn.00550996
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], 3
sub esp, 0xc
movsd xmm0, qword [esp + 0x44]
movsd qword [esp + 4], xmm0
lea eax, [esp + 0x18]
mov dword [esp], eax
jmp 0x444bbe
lea ecx, [esp + 0xc]
call fcn.00407790
int3