Function at 0x446ccb
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x244
mov eax, dword [0x49400c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x494938]
mov dword [ebp - 0x23c], ecx
push ebx
push esi
push edi
test eax, eax
jne 0x446da5
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + 0x18]
mov ecx, dword [edx + 0x3c]
mov ebx, dword [ecx + edx + 0x78]
add ebx, edx
cmp ebx, edx
je 0x446d84
mov esi, dword [ebx + 0x18]
test esi, esi
je 0x446d84
mov ecx, dword [ebx + 0x20]
lea ecx, [ecx + esi*4]
add ecx, edx
sub ecx, 4
mov dword [ebp - 0x238], 0x51989864
dec esi
mov dword [ebp - 0x240], ecx
mov edi, dword [ecx]
add edi, edx
mov dl, byte [edi]
inc edi
mov byte [ebp - 0x231], dl
test dl, dl
mov edx, dword [eax + 0x18]
je 0x446d80
mov cl, byte [ebp - 0x231]
mov edx, dword [ebp - 0x238]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [edi]
inc edi
test cl, cl
jne 0x446d53
mov dword [ebp - 0x238], edx
cmp dword [ebp - 0x238], 0x7cac91c
mov edx, dword [eax + 0x18]
je 0x446d8b
mov ecx, dword [ebp - 0x240]
test esi, esi
jne 0x446d1f
mov eax, dword [eax]
jmp 0x446d00
mov eax, dword [ebx + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [ebx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x494938], eax
push dword [0x494978]
push 8
call eax
mov dword [ebp - 0x240], eax
xor eax, eax
push 0x220
push eax
lea eax, [ebp - 0x22c]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x230], 0x224
mov eax, dword [0x49494c]
test eax, eax
jne 0x446e94
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + 0x18]
mov ecx, dword [edx + 0x3c]
mov ebx, dword [ecx + edx + 0x78]
add ebx, edx
cmp ebx, edx
je 0x446e73
mov esi, dword [ebx + 0x18]
test esi, esi
je 0x446e73
mov ecx, dword [ebx + 0x20]
lea ecx, [ecx + esi*4]
add ecx, edx
sub ecx, 4
mov dword [ebp - 0x238], 0xa8eb9fc7
dec esi
mov dword [ebp - 0x244], ecx
mov edi, dword [ecx]
add edi, edx
mov dl, byte [edi]
inc edi
mov byte [ebp - 0x231], dl
test dl, dl
mov edx, dword [eax + 0x18]
je 0x446e6f
mov cl, byte [ebp - 0x231]
mov edx, dword [ebp - 0x238]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [edi]
inc edi
test cl, cl
jne 0x446e42
mov dword [ebp - 0x238], edx
cmp dword [ebp - 0x238], 0xed14ac4a
mov edx, dword [eax + 0x18]
je 0x446e7a
mov ecx, dword [ebp - 0x244]
test esi, esi
jne 0x446e0e
mov eax, dword [eax]
jmp 0x446def
mov eax, dword [ebx + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [ebx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x49494c], eax
push dword [ebp - 0x23c]
lea ecx, [ebp - 0x210]
push ecx
call eax
pop ecx
pop ecx
test eax, eax
je 0x44711e
mov eax, dword [0x494960]
test eax, eax
jne 0x446f6b
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + 0x18]
mov ecx, dword [edx + 0x3c]
mov ebx, dword [ecx + edx + 0x78]
add ebx, edx
cmp ebx, edx
je 0x446f4a
mov esi, dword [ebx + 0x18]
test esi, esi
je 0x446f4a
mov ecx, dword [ebx + 0x20]
lea ecx, [ecx + esi*4]
add ecx, edx
sub ecx, 4
mov dword [ebp - 0x238], 0xfb0d49a2
dec esi
mov dword [ebp - 0x244], ecx
mov edi, dword [ecx]
add edi, edx
mov dl, byte [edi]
inc edi
mov byte [ebp - 0x231], dl
test dl, dl
mov edx, dword [eax + 0x18]
je 0x446f46
mov cl, byte [ebp - 0x231]
mov edx, dword [ebp - 0x238]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [edi]
inc edi
test cl, cl
jne 0x446f19
mov dword [ebp - 0x238], edx
cmp dword [ebp - 0x238], 0xa7fed0be
mov edx, dword [eax + 0x18]
je 0x446f51
mov ecx, dword [ebp - 0x244]
test esi, esi
jne 0x446ee5
mov eax, dword [eax]
jmp 0x446ec6
mov eax, dword [ebx + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [ebx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x494960], eax
lea ecx, [ebp - 0x230]
push ecx
push dword [ebp - 0x240]
call eax
test eax, eax
jne 0x446dd6
mov eax, dword [0x494950]
test eax, eax
jne 0x447040
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + 0x18]
mov ecx, dword [edx + 0x3c]
mov ebx, dword [ecx + edx + 0x78]
add ebx, edx
cmp ebx, edx
je 0x44701f
mov esi, dword [ebx + 0x18]
test esi, esi
je 0x44701f
mov ecx, dword [ebx + 0x20]
lea ecx, [ecx + esi*4]
add ecx, edx
sub ecx, 4
mov dword [ebp - 0x238], 0x4b101051
dec esi
mov dword [ebp - 0x23c], ecx
mov edi, dword [ecx]
add edi, edx
mov dl, byte [edi]
inc edi
mov byte [ebp - 0x231], dl
test dl, dl
mov edx, dword [eax + 0x18]
je 0x44701b
mov cl, byte [ebp - 0x231]
mov edx, dword [ebp - 0x238]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [edi]
inc edi
test cl, cl
jne 0x446fee
mov dword [ebp - 0x238], edx
cmp dword [ebp - 0x238], 0xc2ede1a0
mov edx, dword [eax + 0x18]
je 0x447026
mov ecx, dword [ebp - 0x23c]
test esi, esi
jne 0x446fba
mov eax, dword [eax]
jmp 0x446f9b
mov eax, dword [ebx + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [ebx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x494950], eax
push 0x11
push str.__Eris__
push str.Couldnt_find_module__open_cheat_as_administrator___nMake_sure_to_have_all_anti_viruses_disabled
push 0
call eax
mov eax, dword [0x494958]
test eax, eax
jne 0x44710e
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + 0x18]
mov ecx, dword [edx + 0x3c]
mov ebx, dword [ecx + edx + 0x78]
add ebx, edx
cmp ebx, edx
je 0x4470ed
mov esi, dword [ebx + 0x18]
test esi, esi
je 0x4470ed
mov ecx, dword [ebx + 0x20]
lea ecx, [ecx + esi*4]
add ecx, edx
sub ecx, 4
mov dword [ebp - 0x238], 0x27ed4552
dec esi
mov dword [ebp - 0x23c], ecx
mov edi, dword [ecx]
add edi, edx
mov dl, byte [edi]
inc edi
mov byte [ebp - 0x231], dl
test dl, dl
mov edx, dword [eax + 0x18]
je 0x4470e9
mov cl, byte [ebp - 0x231]
mov edx, dword [ebp - 0x238]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [edi]
inc edi
test cl, cl
jne 0x4470bc
mov dword [ebp - 0x238], edx
cmp dword [ebp - 0x238], 0xde8abe6a
mov edx, dword [eax + 0x18]
je 0x4470f4
mov ecx, dword [ebp - 0x23c]
test esi, esi
jne 0x447088
mov eax, dword [eax]
jmp 0x447069
mov eax, dword [ebx + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [ebx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x494958], eax
push 1
call eax
pop ecx
xor ecx, ecx
mov eax, ecx
mov edx, ecx
jmp 0x4471f0
mov eax, dword [0x494934]
test eax, eax
jne 0x4471dc
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + 0x18]
mov ecx, dword [edx + 0x3c]
mov ebx, dword [ecx + edx + 0x78]
add ebx, edx
cmp ebx, edx
je 0x4471bb
mov esi, dword [ebx + 0x18]
test esi, esi
je 0x4471bb
mov ecx, dword [ebx + 0x20]
lea ecx, [ecx + esi*4]
add ecx, edx
sub ecx, 4
mov dword [ebp - 0x238], 0x3758cb41
dec esi
mov dword [ebp - 0x23c], ecx
mov edi, dword [ecx]
add edi, edx
mov dl, byte [edi]
inc edi
mov byte [ebp - 0x231], dl
test dl, dl
mov edx, dword [eax + 0x18]
je 0x4471b7
mov cl, byte [ebp - 0x231]
mov edx, dword [ebp - 0x238]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [edi]
inc edi
test cl, cl
jne 0x44718a
mov dword [ebp - 0x238], edx
cmp dword [ebp - 0x238], 0x78d041e1
mov edx, dword [eax + 0x18]
je 0x4471c2
mov ecx, dword [ebp - 0x23c]
test esi, esi
jne 0x447156
mov eax, dword [eax]
jmp 0x447137
mov eax, dword [ebx + 0x24]
lea eax, [eax + esi*2]
movzx ecx, word [eax + edx]
mov eax, dword [ebx + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
mov dword [0x494934], eax
push dword [ebp - 0x240]
call eax
mov eax, dword [ebp - 0x214]
mov edx, dword [ebp - 0x218]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0044cc96
leave
ret