Function at 0x444fc0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x98
mov eax, dword [0x463064]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x94], eax
mov ecx, 0x41
mov word [ebp - 0x84], cx
mov edx, 0x42
mov word [ebp - 0x82], dx
mov eax, 0x43
mov word [ebp - 0x80], ax
mov ecx, 0x44
mov word [ebp - 0x7e], cx
mov edx, 0x45
mov word [ebp - 0x7c], dx
mov eax, 0x46
mov word [ebp - 0x7a], ax
mov ecx, 0x47
mov word [ebp - 0x78], cx
mov edx, 0x48
mov word [ebp - 0x76], dx
mov eax, 0x49
mov word [ebp - 0x74], ax
mov ecx, 0x4a
mov word [ebp - 0x72], cx
mov edx, 0x4b
mov word [ebp - 0x70], dx
mov eax, 0x4c
mov word [ebp - 0x6e], ax
mov ecx, 0x4d
mov word [ebp - 0x6c], cx
mov edx, 0x4e
mov word [ebp - 0x6a], dx
mov eax, 0x4f
mov word [ebp - 0x68], ax
mov ecx, 0x50
mov word [ebp - 0x66], cx
mov edx, 0x51
mov word [ebp - 0x64], dx
mov eax, 0x52
mov word [ebp - 0x62], ax
mov ecx, 0x53
mov word [ebp - 0x60], cx
mov edx, 0x54
mov word [ebp - 0x5e], dx
mov eax, 0x55
mov word [ebp - 0x5c], ax
mov ecx, 0x56
mov word [ebp - 0x5a], cx
mov edx, 0x57
mov word [ebp - 0x58], dx
mov eax, 0x58
mov word [ebp - 0x56], ax
mov ecx, 0x59
mov word [ebp - 0x54], cx
mov edx, 0x5a
mov word [ebp - 0x52], dx
mov eax, 0x61
mov word [ebp - 0x50], ax
mov ecx, 0x62
mov word [ebp - 0x4e], cx
mov edx, 0x63
mov word [ebp - 0x4c], dx
mov eax, 0x64
mov word [ebp - 0x4a], ax
mov ecx, 0x65
mov word [ebp - 0x48], cx
mov edx, 0x66
mov word [ebp - 0x46], dx
mov eax, 0x67
mov word [ebp - 0x44], ax
mov ecx, 0x68
mov word [ebp - 0x42], cx
mov edx, 0x69
mov word [ebp - 0x40], dx
mov eax, 0x6a
mov word [ebp - 0x3e], ax
mov ecx, 0x6b
mov word [ebp - 0x3c], cx
mov edx, 0x6c
mov word [ebp - 0x3a], dx
mov eax, 0x6d
mov word [ebp - 0x38], ax
mov ecx, 0x6e
mov word [ebp - 0x36], cx
mov edx, 0x6f
mov word [ebp - 0x34], dx
mov eax, 0x70
mov word [ebp - 0x32], ax
mov ecx, 0x71
mov word [ebp - 0x30], cx
mov edx, 0x72
mov word [ebp - 0x2e], dx
mov eax, 0x73
mov word [ebp - 0x2c], ax
mov ecx, 0x74
mov word [ebp - 0x2a], cx
mov edx, 0x75
mov word [ebp - 0x28], dx
mov eax, 0x76
mov word [ebp - 0x26], ax
mov ecx, 0x77
mov word [ebp - 0x24], cx
mov edx, 0x78
mov word [ebp - 0x22], dx
mov eax, 0x79
mov word [ebp - 0x20], ax
mov ecx, 0x7a
mov word [ebp - 0x1e], cx
mov edx, 0x30
mov word [ebp - 0x1c], dx
mov eax, 0x31
mov word [ebp - 0x1a], ax
mov ecx, 0x32
mov word [ebp - 0x18], cx
mov edx, 0x33
mov word [ebp - 0x16], dx
mov eax, 0x34
mov word [ebp - 0x14], ax
mov ecx, 0x35
mov word [ebp - 0x12], cx
mov edx, 0x36
mov word [ebp - 0x10], dx
mov eax, 0x37
mov word [ebp - 0xe], ax
mov ecx, 0x38
mov word [ebp - 0xc], cx
mov edx, 0x39
mov word [ebp - 0xa], dx
mov eax, 0x2b
mov word [ebp - 8], ax
mov ecx, 0x2f
mov word [ebp - 6], cx
mov dword [ebp - 0x90], 0
jmp 0x445244
mov edx, dword [ebp - 0x90]
add edx, 1
mov dword [ebp - 0x90], edx
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x94]
jge 0x4452ca
mov byte [ebp - 0x85], 0
mov dword [ebp - 0x98], 0x40
mov dword [ebp - 0x8c], 0
jmp 0x44527e
mov ecx, dword [ebp - 0x8c]
add ecx, 1
mov dword [ebp - 0x8c], ecx
mov edx, dword [ebp - 0x8c]
cmp edx, dword [ebp - 0x98]
jae 0x4452b6
mov eax, dword [ebp - 0x8c]
movzx ecx, word [ebp + eax*2 - 0x84]
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp + 8]
movzx edx, word [eax + edx*2]
cmp ecx, edx
jne 0x4452b4
mov byte [ebp - 0x85], 1
jmp 0x4452b6
jmp 0x44526f
movzx eax, byte [ebp - 0x85]
test eax, eax
jne 0x4452c5
xor al, al
jmp 0x4452cc
jmp 0x445235
mov al, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00447417
mov esp, ebp
pop ebp
ret 4