Function at 0x447a1c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push pe_nt_image_headers32
mov eax, 0x51f513
call fcn.0051d3a0
mov esi, edx
mov dword [ebp - 0x104], esi
mov dword [ebp - 0x108], ecx
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x9c]
push 7
mov dword [ebp - 0xb0], eax
xor ebx, ebx
pop eax
push 0x443020
push fcn.0044f5a0
push eax
mov dword [ebp - 0xa8], eax
lea eax, [ebp - 0x9c]
push 0x10
push eax
mov dword [ebp - 0xd4], edi
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], 0x23
call fcn.0050ee40
mov dword [ebp - 4], 3
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov ecx, edi
mov byte [ebp - 4], 6
call fcn.00445ee1
mov edx, dword [esi]
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0xfc]
mov byte [ebp - 0xdd], bl
push eax
push ecx
mov dword [ebp - 0xfc], ebx
mov dword [ebp - 0x100], ebx
call fcn.004badb2
mov ecx, eax
test ecx, ecx
jns 0x447ad6
mov dword [ebp - 0x14], ecx
jmp 0x447ad8
mov ecx, ebx
test ecx, ecx
jns 0x447ae8
mov eax, ecx
shr eax, 0x1f
test al, al
jne 0x447b15
int3
mov ecx, dword [ebp - 0x100]
cmp ecx, dword [ebp - 0xfc]
jne 0x447af9
push esi
jmp 0x447b05
mov eax, dword [esi]
lea eax, [eax + ecx*2]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x5343d0
call fcn.00450735
test eax, eax
jns 0x447b23
mov ecx, eax
call fcn.004bd5d5
mov esi, eax
mov ebx, esi
jmp 0x448f5a
mov eax, dword [0x5343d0]
xor esi, esi
mov edi, dword [ebp - 0x104]
inc esi
mov dword [ebp - 0xf8], eax
mov al, bl
mov ebx, dword [ebp - 0x108]
push 0x2f
mov dword [ebp - 0x100], eax
pop edx
mov dword [ebp - 0x14], 0x2d
cmp esi, ebx
jae 0x447b90
mov ecx, dword [edi + esi*4]
movzx eax, word [ecx]
cmp ax, dx
je 0x447b64
cmp ax, word [ebp - 0x14]
jne 0x447b85
lea eax, [ecx + 2]
push 0x418500
push eax
call fcn.005039e0
neg eax
pop ecx
pop ecx
sbb al, al
inc al
push 0x2f
mov dword [ebp - 0x100], eax
pop edx
jmp 0x447b8b
mov eax, dword [ebp - 0x100]
inc esi
test al, al
je 0x447b4f
mov edi, dword [ebp - 0xd4]
push 0
pop ebx
test al, al
jne 0x447bb2
push ecx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, 0x41010012
mov ecx, eax
call fcn.00444347
xor ecx, ecx
inc ecx
mov dword [ebp - 0xf4], ecx
cmp dword [ebp - 0x108], ecx
je 0x448cd0
xor eax, eax
lea edi, [ebp - 0xc0]
stosd dword es:[edi], eax
lea edx, [ebp - 0xc0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0xcc]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0xec]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov edi, dword [ebp - 0x104]
mov ecx, dword [edi + ecx*4]
call fcn.004dcef0
mov esi, eax
test esi, esi
js 0x447b1c
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x448cb1
mov edx, dword [ebp - 0xb8]
push 0x2f
pop esi
movzx ecx, word [edx]
cmp cx, si
je 0x447cf8
push 0x2d
pop esi
cmp cx, si
je 0x447cf8
cmp byte [ebp - 0xdd], 0
mov ecx, dword [ebp - 0xf4]
mov eax, dword [edi + ecx*4]
mov dword [ebp - 0x14], eax
je 0x448d63
lea eax, [ebp - 0xdc]
mov byte [ebp - 0xd5], bl
push eax
lea eax, [ebp - 0x14]
mov dword [ebp - 0xdc], ebx
push eax
lea ecx, [ebp - 0xb4]
call fcn.00450cff
mov esi, eax
test esi, esi
jns 0x447c7a
mov al, bl
jmp 0x447c86
cmp dword [ebp - 0xdc], 0
mov esi, ebx
setne al
test esi, esi
js 0x448d50
test al, al
jne 0x448cb1
mov eax, dword [ebp - 0xf4]
lea ecx, [ebp - 0xb4]
mov byte [ebp - 0xd5], 1
mov eax, dword [edi + eax*4]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0xd5]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00450dd3
mov esi, eax
test esi, esi
js 0x448f5c
mov eax, dword [ebp - 0xf4]
push ecx
lea ecx, [ebp - 0x20]
mov eax, dword [edi + eax*4]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.0044eacf
mov esi, dword [eax]
test esi, esi
js 0x448d50
jmp 0x448cb1
dec eax
mov byte [ebp - 0xdd], bl
sub eax, 1
mov dword [ebp - 0x28], ebx
lea ecx, [edx + 2]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xb8], ecx
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x24], ebx
je 0x448eac
push 0x3a
push ecx
call fcn.0050fc25
mov dword [ebp - 0x14], eax
pop ecx
pop ecx
test eax, eax
je 0x447d73
mov ecx, dword [ebp - 0xb8]
lea edi, [ebp - 0xcc]
mov edx, eax
mov dword [ebp - 0xc4], ecx
sub edx, ecx
lea ecx, [eax + 2]
and edx, 0xfffffffe
mov dword [ebp - 0xcc], edx
mov dword [ebp - 0xc8], edx
lea edx, [ebp - 0xec]
call fcn.004dcef0
mov esi, eax
test esi, esi
js 0x447b1c
jmp 0x447d79
lea edi, [ebp - 0xc0]
lea eax, [ebp - 0x28]
mov edx, fcn.004e0f10
push eax
push fcn.004e1120
mov ecx, edi
call fcn.004e0226
mov esi, eax
test esi, esi
js 0x447b1c
or dword [ebp - 0xd0], 0xffffffff
mov ecx, 0x78f36e7f
mov edx, dword [ebp - 0x24]
mov esi, ebx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xdc], esi
cmp edx, ecx
ja 0x448463
jb 0x447dc7
cmp eax, 0xdc4f680d
ja 0x448463
cmp eax, 0xdc4f680d
jne 0x447e17
cmp edx, ecx
jne 0x447e17
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408830
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
add eax, 0x2c
jmp 0x448be9
mov ecx, 0x1bac5e66
cmp edx, ecx
ja 0x448131
jb 0x447e31
cmp eax, 0x56d06246
ja 0x448131
cmp eax, 0x56d06246
jne 0x447e90
cmp edx, ecx
jne 0x447e90
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x409244
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
call fcn.00451fe2
mov esi, eax
test esi, esi
js 0x447b1c
mov eax, dword [ebp - 0xd4]
add eax, 0x1c
jmp 0x448be9
mov ecx, 0xcad5
cmp edx, ecx
ja 0x44800e
jb 0x447eaa
cmp eax, 0xfffed7ea
ja 0x44800e
cmp eax, 0xfffed7ea
jne 0x447ef7
cmp edx, ecx
jne 0x447ef7
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408a40
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
jmp 0x448be9
cmp eax, 0xffff4c99
jne 0x447f0a
cmp edx, 0x7799
je 0x448d9b
cmp eax, 0xffff019c
jne 0x447f5e
cmp edx, 0xaf7f
jne 0x447f5e
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408d64
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
add eax, 0xc
jmp 0x448be9
cmp eax, 0xfffeeaef
jne 0x447fb2
cmp edx, 0xbf4b
jne 0x447fb2
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408d10
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
add eax, 0x40
jmp 0x448be9
cmp eax, 0xfffee4da
jne 0x448782
cmp edx, 0xc32d
jne 0x448782
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408c74
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
add eax, 0x38
jmp 0x448be9
cmp eax, 0xfffed466
jne 0x448062
cmp edx, 0xcdcb
jne 0x448062
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408a70
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
add eax, 4
jmp 0x448be9
cmp eax, 0x7e0002fe
jne 0x4480b7
cmp edx, 0x44e6b8d
jne 0x4480b7
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408c5c
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
mov byte [eax + 0x6a], 1
jmp 0x448cb1
cmp eax, 0xa0e07c01
jne 0x4480d4
cmp edx, 0x459a6dd
jne 0x4480d4
mov eax, dword [ebp - 0xd4]
add eax, 0x44
jmp 0x448bef
cmp eax, 0xe067a419
jne 0x448782
cmp edx, 0x12a2ee84
jne 0x448782
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408db8
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x448f5c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
mov byte [eax + 0x6f], 1
jmp 0x448cb1
mov ecx, 0x4b192fd2
cmp edx, ecx
ja 0x4482fb
jb 0x44814b
cmp eax, 0x7d86767d
ja 0x4482fb
cmp eax, 0x7d86767d
jne 0x44819b
cmp edx, ecx
jne 0x44819b
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x4087c4
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
mov byte [eax + 0x70], bl
jmp 0x448cb1
cmp eax, 0x7e9966d4
jne 0x4481f2
cmp edx, 0x1e889884
jne 0x4481f2
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408ecc
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov esi, dword [ebp - 0xd4]
mov word [esi + 0x67], 0x101
jmp 0x448cb1
cmp eax, 0xa8b46d3f
jne 0x448247
cmp edx, 0x2615d41c
jne 0x448247
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408878
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
mov byte [eax + 0x6d], 1
jmp 0x448cb1
cmp eax, 0x9dc8eb93
jne 0x44829e
cmp edx, 0x32354942
jne 0x44829e
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408cf8
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov ecx, dword [ebp - 0xd4]
lea eax, [ecx + 0x20]
lea esi, [ecx + 0x2c]
jmp 0x448bef
cmp eax, 0xe9a42ef1
jne 0x448782
cmp edx, 0x43297f38
jne 0x448782
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408ff8
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x448f5c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
mov byte [eax + 0x6e], 1
jmp 0x448cb1
cmp eax, 0x8c90d56a
jne 0x448350
cmp edx, 0x4edd6a8b
jne 0x448350
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x4090a0
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
mov byte [eax + 0x6c], 1
jmp 0x448cb1
cmp eax, 0x5fb62b26
jne 0x4483a5
cmp edx, 0x4f397d38
jne 0x4483a5
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x4087b8
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
mov byte [eax + 0x64], 1
jmp 0x448cb1
cmp eax, 0x19aee9e7
jne 0x448407
cmp edx, 0x510161d0
jne 0x448407
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x4092f8
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov esi, dword [ebp - 0xd4]
mov byte [esi + 0x61], 1
cmp dword [ebp - 0x14], 0
je 0x448cb1
lea eax, [esi + 0x18]
jmp 0x448be9
cmp eax, 0x3aab4e8
jne 0x448782
cmp edx, 0x726f61ab
jne 0x448782
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x409334
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
add eax, 0x20
jmp 0x448be9
mov ecx, 0xc2567bae
cmp edx, ecx
ja 0x448850
jb 0x44847d
cmp eax, 0xe4904ad1
ja 0x448850
cmp eax, 0xe4904ad1
jne 0x4484cb
cmp edx, ecx
jne 0x4484cb
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x4090c4
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov byte [ebp - 0xdd], 1
jmp 0x448cb1
mov ecx, 0xad4b85af
cmp edx, ecx
ja 0x44868f
jb 0x4484e5
cmp eax, 0x2dadd665
ja 0x44868f
cmp eax, 0x2dadd665
jne 0x448535
cmp edx, ecx
jne 0x448535
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408d4c
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
add eax, 0x10
jmp 0x448be9
cmp eax, 0x2761d213
jne 0x44858a
cmp edx, 0x889a53f5
jne 0x44858a
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408c2c
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
mov byte [eax + 0x6b], 1
jmp 0x448cb1
cmp eax, 0x6c18fc82
jne 0x4485df
cmp edx, 0x8a5531d0
jne 0x4485df
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408e6c
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
mov byte [eax + 0x67], 1
jmp 0x448cb1
cmp eax, 0xebc6886e
jne 0x448633
cmp edx, 0x90c1aaf6
jne 0x448633
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408a28
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
add eax, 0x54
jmp 0x448be9
cmp eax, 0xe49d584b
jne 0x448782
cmp edx, 0x97fe2991
jne 0x448782
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408d28
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
add eax, 0x3c
jmp 0x448be9
cmp eax, 0xd73ef0
jne 0x4486e4
cmp edx, 0xaf61d31b
jne 0x4486e4
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408ad0
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
mov byte [eax + 0x63], 1
jmp 0x448cb1
cmp eax, 0xf14042c6
jne 0x448734
cmp edx, 0xba3e984a
jne 0x448734
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408fd4
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
add eax, 0x14
jmp 0x448be9
cmp eax, 0xe99b88d2
jne 0x4487f7
cmp edx, 0xc168418c
jne 0x4487f7
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408f74
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x448f5c
cmp dword [ebp - 0xd0], 0
je 0x448cb1
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0x104]
push 1
push ecx
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
push ebx
push 0xc1010007
push ebx
push 0xc101007b
push ecx
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, dword [ebp - 0xf8]
mov ecx, eax
call fcn.00441bba
mov dword [ebp - 0xe8], 0x41d
mov esi, 0xc0000001
mov dword [ebp - 0xf0], 0x41a3a8
push esi
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xec], 0x41a3e8
mov dword [ebp - 0xe4], ebx
call fcn.004de872
jmp 0x448f5c
cmp eax, 0xe4a75928
jne 0x448782
cmp edx, 0xc250748c
jne 0x448782
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x4091b4
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
mov byte [eax + 0x62], 1
jmp 0x448cb1
mov ecx, 0xd6a9b0b7
cmp edx, ecx
ja 0x448aed
jb 0x44886a
cmp eax, 0x253ae3f2
ja 0x448aed
cmp eax, 0x253ae3f2
jne 0x4488ba
cmp edx, ecx
jne 0x4488ba
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x4088cc
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
mov byte [eax + 0x71], bl
jmp 0x448cb1
cmp eax, 0xdb5b0fbb
jne 0x4489e6
cmp edx, 0xcae89170
jne 0x4489e6
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408a4c
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x448f5c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov esi, dword [ebp - 0xe4]
mov dword [ebp - 0xdc], esi
test esi, esi
je 0x448e77
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x448921
sub ecx, edx
sar ecx, 1
je 0x448e77
mov dword [ebp - 0xfc], ebx
lea edi, [ecx + ecx]
mov byte [ebp - 4], 0x63
movzx eax, word [esi + edi - 2]
push 0x5c
pop edx
cmp ax, dx
je 0x448994
push 0x2f
pop edx
cmp ax, dx
je 0x448994
lea eax, [ecx + 2]
push eax
lea ecx, [ebp - 0xfc]
call fcn.0044f4fb
test eax, eax
je 0x448e09
push edi
push esi
mov esi, dword [ebp - 0xfc]
push esi
call fcn.00510ff0
add esp, 0xc
mov dword [ebp - 0xdc], esi
xor eax, eax
mov word [esi + edi + 2], ax
push 0x5c
pop eax
mov word [esi + edi], ax
mov eax, dword [ebp - 0xd4]
mov esi, dword [eax + 0x23c]
lea edi, [eax + 0x238]
mov ecx, edi
lea eax, [esi + 1]
push eax
call fcn.0044e9b7
test eax, eax
je 0x448e2a
mov eax, dword [edi]
lea ecx, [eax + esi*4]
lea eax, [ebp - 0xdc]
push eax
call fcn.00450735
test eax, eax
js 0x448e1f
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 6
call fcn.00442640
jmp 0x448cb1
cmp eax, 0xcba01474
jne 0x448a3b
cmp edx, 0xd2e89da2
jne 0x448a3b
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408bf0
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x448f5c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
mov byte [eax + 0x60], 1
jmp 0x448cb1
cmp eax, 0x3e69aaec
jne 0x448a90
cmp edx, 0xd4e6dff9
jne 0x448a90
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408d88
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov esi, dword [ebp - 0xd4]
mov byte [esi + 0x66], 1
jmp 0x4483f5
cmp eax, 0xed0bceaf
jne 0x448782
cmp edx, 0xd559b115
jne 0x448782
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x408b90
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
mov byte [eax + 0x69], 1
jmp 0x448cb1
cmp eax, 0xaccc9c23
jne 0x448b41
cmp edx, 0xe2224884
jne 0x448b41
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x40895c
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
add eax, 8
jmp 0x448be9
cmp eax, 0x65b84fff
jne 0x448b92
cmp edx, 0xe474abb2
jne 0x448b92
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x4092bc
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
add eax, 0x50
jmp 0x448be9
cmp eax, 0x4092ca88
jne 0x448c5c
cmp edx, 0xf032f1bd
jne 0x448c5c
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x4091a8
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov eax, dword [ebp - 0xd4]
add eax, 0x48
mov esi, dword [ebp - 0xdc]
test eax, eax
je 0x448cb1
mov ecx, dword [ebp - 0xe4]
mov dword [eax], ecx
test esi, esi
je 0x448c05
mov dword [esi], ecx
cmp dword [ebp - 0xec], 0
jne 0x448cb1
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0x104]
push 1
push ecx
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
push ebx
push 0xc1010008
push ebx
push 0xc101007b
push ecx
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, dword [ebp - 0xf8]
mov ecx, eax
call fcn.00441bba
mov dword [ebp - 0xe8], 0x42e
jmp 0x4487c7
cmp eax, 0x3fa47f17
jne 0x448782
cmp edx, 0xf2c14d37
jne 0x448782
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x409358
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov byte [0x533ec9], 1
mov ecx, dword [ebp - 0xf4]
inc ecx
mov dword [ebp - 0xf4], ecx
cmp ecx, dword [ebp - 0x108]
jne 0x447bc7
mov edi, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x108]
cmp ecx, 2
jb 0x448f39
mov eax, dword [ebp - 0x100]
test al, al
jne 0x448cee
cmp byte [edi + 0x60], al
je 0x448d0a
cmp ecx, 3
jb 0x448f39
test al, al
je 0x448d0a
cmp byte [edi + 0x60], 0
je 0x448d0a
cmp ecx, 4
jb 0x448f39
mov dl, byte [ebp - 0xdd]
lea eax, [ebp - 0x20]
mov ecx, dword [ebp - 0xf8]
push edi
push eax
call fcn.00449039
mov esi, eax
test esi, esi
js 0x448f5c
mov eax, dword [ebp - 0x1c]
lea ecx, [edi + 0x78]
sub eax, dword [ebp - 0x20]
sar eax, 2
add eax, 4
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.00442b49
mov esi, dword [eax]
test esi, esi
jns 0x448ee6
mov eax, esi
shr eax, 0x1f
xor al, 1
je 0x448f5c
int3
push 1
push ecx
lea eax, [ebp - 0x14]
push eax
push ebx
push 0xc1010007
push ebx
push 0xc101007b
push ecx
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, dword [ebp - 0xf8]
mov ecx, eax
call fcn.00441bba
mov dword [ebp - 0xe8], 0x444
jmp 0x4487c7
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
push fcn.004e1120
mov eax, fcn.004e0f10
push eax
push 0x40877c
mov edx, eax
call fcn.004dff9d
mov esi, eax
test esi, esi
js 0x447b1c
cmp dword [ebp - 0xd0], 0
jne 0x448782
mov ecx, dword [ebp - 0xf8]
lea eax, [ebp - 0x14]
push ecx
push eax
push ebx
mov dword [ebp - 0x14], ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, 0x41010013
mov ecx, eax
call fcn.00444347
mov ecx, dword [ebp - 0xd4]
call fcn.00445ee1
mov byte [0x533ec9], bl
jmp 0x448f5a
mov dword [ebp - 0xe8], 0x3f9
mov dword [ebp - 0xe4], 0x41a400
jmp 0x448e3e
mov ecx, eax
call fcn.004bd5d5
mov esi, eax
jmp 0x448e63
mov dword [ebp - 0xe8], 0x402
mov dword [ebp - 0xe4], 0x41a430
mov esi, 0xc0000017
mov dword [ebp - 0xf0], 0x41a3a8
push esi
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xec], 0x41a3e8
call fcn.004de872
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 6
call fcn.00442640
jmp 0x448f5c
push 1
push ecx
push ebx
push ebx
push 0xc10100aa
push ebx
push 0xc101007b
push ecx
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, dword [ebp - 0xf8]
mov ecx, eax
call fcn.00441bba
mov dword [ebp - 0xe8], 0x3f2
jmp 0x4487c7
mov esi, 0xc000000d
mov dword [ebp - 0xf0], 0x41a3a8
push esi
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xec], 0x41a3e8
mov dword [ebp - 0xe8], 0x2f8
mov dword [ebp - 0xe4], ebx
call fcn.004de872
jmp 0x447b1c
lea eax, [ebp - 0x20]
push eax
lea ecx, [edi + 0x78]
call fcn.00459f01
mov esi, eax
test esi, esi
js 0x448f5c
cmp dword [edi + 0x38], ebx
jne 0x448f17
cmp dword [edi + 0x30], ebx
jne 0x448f17
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
sub eax, ecx
and eax, 0xfffffffc
cmp eax, 4
jne 0x448f17
mov eax, dword [ecx]
mov dword [edi + 0x38], eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 3
call fcn.0044f6b1
lea ecx, [ebp - 0xb4]
mov dword [ebp - 4], 0x83
call fcn.00442d42
mov eax, ebx
jmp 0x448f7c
mov ecx, dword [ebp - 0xf8]
lea eax, [ebp - 0x14]
push ecx
push eax
push ebx
mov dword [ebp - 0x14], ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, 0x41010013
mov ecx, eax
call fcn.00444347
mov esi, ebx
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 3
call fcn.0044f6b1
lea ecx, [ebp - 0xb4]
mov dword [ebp - 4], 0x81
call fcn.00442d42
mov eax, esi
or dword [ebp - 4], 0xffffffff
call fcn.0051d34a
ret 4