Function at 0x448eda
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0x150
mov eax, 0x53ea1f
call fcn.0052c05f
mov edi, edx
mov dword [ebp - 0xf4], edi
mov dword [ebp - 0xf0], ecx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x98]
push 7
mov dword [ebp - 0xac], eax
xor ecx, ecx
pop eax
push fcn.00443a10
push fcn.00451f20
push eax
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0x98]
push 0x10
push eax
mov dword [ebp - 0xa8], ecx
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0x9c], 0x23
call fcn.0052b7c2
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov ecx, ebx
mov byte [ebp - 4], 1
call fcn.00446cc7
mov edx, dword [edi]
xor eax, eax
mov byte [ebp - 0xd9], al
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xe0]
push eax
push ecx
call fcn.004d0f2f
test eax, eax
jns 0x448faa
mov ecx, eax
call fcn.004d3a42
mov esi, eax
lea ecx, [ebp - 0x1c]
call fcn.00451f35
lea ecx, [ebp - 0xb0]
call fcn.00443627
mov eax, esi
jmp 0x44a540
mov ecx, dword [ebp - 0xe4]
cmp ecx, dword [ebp - 0xe0]
jne 0x44902d
push edi
mov ecx, 0x554458
call fcn.00452f1a
test eax, eax
js 0x448f87
mov eax, dword [0x554458]
xor esi, esi
push 0x2f
mov dword [ebp - 0xe0], eax
xor eax, eax
pop edx
mov dword [ebp - 0xec], eax
inc esi
mov dword [ebp - 0x10c], edx
mov dword [ebp - 0x108], 0x2d
cmp esi, dword [ebp - 0xf0]
jae 0x449051
mov ecx, dword [edi + esi*4]
movzx eax, word [ecx]
cmp ax, dx
je 0x44900c
cmp ax, word [ebp - 0x108]
jne 0x449044
lea eax, [ecx + 2]
push 0x416d48
push eax
call fcn.0051f636
neg eax
pop ecx
pop ecx
sbb al, al
inc al
push 0x2f
mov dword [ebp - 0xec], eax
pop edx
jmp 0x44904a
mov eax, dword [edi]
lea eax, [eax + ecx*2]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0xb8]
push eax
jmp 0x448fb9
mov eax, dword [ebp - 0xec]
inc esi
test al, al
je 0x448ff0
jmp 0x449074
push ecx
xor ecx, ecx
push ecx
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, 0x41010012
mov ecx, eax
call fcn.00444fa8
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xec], eax
xor esi, esi
inc esi
mov dword [ebp - 0xe4], esi
cmp dword [ebp - 0xf0], esi
je 0x44a502
xor eax, eax
lea edi, [ebp - 0xc4]
stosd dword es:[edi], eax
lea edx, [ebp - 0xc4]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0xd0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp - 0x100]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov edi, dword [ebp - 0xf4]
mov ecx, dword [edi + esi*4]
call fcn.004f6230
test eax, eax
js 0x448f8e
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x44a210
mov edx, dword [ebp - 0xbc]
movzx ecx, word [edx]
cmp cx, word [ebp - 0x10c]
je 0x4491cf
cmp cx, word [ebp - 0x108]
je 0x4491cf
cmp byte [ebp - 0xd9], 0
mov eax, dword [edi + esi*4]
je 0x44a2e3
mov dword [ebp - 0xb8], eax
lea ecx, [ebp - 0xb0]
xor eax, eax
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.00453532
mov esi, eax
test esi, esi
js 0x448f90
cmp dword [ebp - 0xd8], 0
setne al
test al, al
jne 0x4491be
mov esi, dword [ebp - 0xe4]
lea ecx, [ebp - 0xb0]
mov byte [ebp - 0xe5], 1
mov eax, dword [edi + esi*4]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0xe5]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.00453608
test eax, eax
js 0x448f8e
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp - 0x14]
jne 0x4491ac
push ecx
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00451f6a
mov esi, dword [ebp - 0xb4]
test esi, esi
js 0x448f90
mov ecx, dword [ebp - 0x18]
mov esi, dword [ebp - 0xe4]
test ecx, ecx
je 0x4491b8
mov eax, dword [edi + esi*4]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x18]
add ecx, 4
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xec], eax
jmp 0x44a20a
dec eax
lea ecx, [edx + 2]
sub eax, 1
mov dword [ebp - 0xbc], ecx
push 0
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], eax
pop eax
mov byte [ebp - 0xd9], al
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
je 0x44a4c8
push 0x3a
push ecx
call fcn.0052c8cb
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x44924a
mov ecx, dword [ebp - 0xbc]
lea esi, [ebp - 0xd0]
mov edx, edi
mov dword [ebp - 0xc8], ecx
sub edx, ecx
lea ecx, [edi + 2]
and edx, 0xfffffffe
mov dword [ebp - 0xd0], edx
mov dword [ebp - 0xcc], edx
lea edx, [ebp - 0x100]
call fcn.004f6230
test eax, eax
js 0x448f8e
jmp 0x449250
lea esi, [ebp - 0xc4]
lea eax, [ebp - 0x24]
mov edx, fcn.004fa620
push eax
push fcn.004fa860
mov ecx, esi
call fcn.004f98fa
test eax, eax
js 0x448f8e
mov edx, dword [ebp - 0x20]
xor eax, eax
mov ecx, 0x889a53f5
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x24]
cmp edx, ecx
ja 0x44996d
jb 0x449295
cmp eax, 0x2761d213
ja 0x44996d
cmp eax, 0x2761d213
jne 0x4492e5
cmp edx, ecx
jne 0x4492e5
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408b30
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov byte [ebx + 0x6b], 1
jmp 0x44a20a
mov ecx, 0x1e889884
cmp edx, ecx
ja 0x449647
jb 0x4492ff
cmp eax, 0x7e9966d4
ja 0x449647
cmp eax, 0x7e9966d4
jne 0x449351
cmp edx, ecx
jne 0x449351
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408dd0
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov word [ebx + 0x67], 0x101
jmp 0x44a20a
mov ecx, 0xcdcb
cmp edx, ecx
ja 0x449520
jb 0x44936b
cmp eax, 0xfffed466
ja 0x449520
cmp eax, 0xfffed466
jne 0x4493ba
cmp edx, ecx
jne 0x4493ba
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408974
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
lea eax, [ebx + 4]
jmp 0x44a110
cmp eax, 0xffff4c99
jne 0x4493cd
cmp edx, 0x7799
je 0x44a34b
cmp eax, 0xffff019c
jne 0x449420
cmp edx, 0xaf7f
jne 0x449420
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408c68
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
lea eax, [ebx + 0xc]
jmp 0x44a110
cmp eax, 0xfffeeaef
jne 0x449473
cmp edx, 0xbf4b
jne 0x449473
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408c14
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
lea eax, [ebx + 0x40]
jmp 0x44a110
cmp eax, 0xfffee4da
jne 0x4494c6
cmp edx, 0xc32d
jne 0x4494c6
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408b78
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
lea eax, [ebx + 0x38]
jmp 0x44a110
cmp eax, 0xfffed7ea
jne 0x449c38
cmp edx, 0xcad5
jne 0x449c38
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408944
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov eax, ebx
jmp 0x44a110
cmp eax, 0x7e0002fe
jne 0x449574
cmp edx, 0x44e6b8d
jne 0x449574
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408b60
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov byte [ebx + 0x6a], 1
jmp 0x44a20a
cmp eax, 0xa0e07c01
jne 0x44958b
cmp edx, 0x459a6dd
jne 0x44958b
lea eax, [ebx + 0x44]
jmp 0x44a110
cmp eax, 0xe067a419
jne 0x4495df
cmp edx, 0x12a2ee84
jne 0x4495df
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408cbc
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov byte [ebx + 0x6f], 1
jmp 0x44a20a
cmp eax, 0x56d06246
jne 0x449c38
cmp edx, 0x1bac5e66
jne 0x449c38
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x409154
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
call fcn.00454908
test eax, eax
js 0x448f8e
lea eax, [ebx + 0x1c]
jmp 0x44a110
mov ecx, 0x4edd6a8b
cmp edx, ecx
ja 0x44980c
jb 0x449661
cmp eax, 0x8c90d56a
ja 0x44980c
cmp eax, 0x8c90d56a
jne 0x4496b1
cmp edx, ecx
jne 0x4496b1
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408fb0
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov byte [ebx + 0x6c], 1
jmp 0x44a20a
cmp eax, 0xa8b46d3f
jne 0x449705
cmp edx, 0x2615d41c
jne 0x449705
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x40877c
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov byte [ebx + 0x6d], 1
jmp 0x44a20a
cmp eax, 0x9dc8eb93
jne 0x44975b
cmp edx, 0x32354942
jne 0x44975b
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408bfc
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
lea eax, [ebx + 0x20]
lea edx, [ebx + 0x2c]
jmp 0x44a116
cmp eax, 0xe9a42ef1
jne 0x4497af
cmp edx, 0x43297f38
jne 0x4497af
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408f08
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov byte [ebx + 0x6e], 1
jmp 0x44a20a
cmp eax, 0x7d86767d
jne 0x449c38
cmp edx, 0x4b192fd2
jne 0x449c38
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x4086c8
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
xor eax, eax
mov byte [ebx + 0x70], al
jmp 0x44a20a
cmp eax, 0x5fb62b26
jne 0x449860
cmp edx, 0x4f397d38
jne 0x449860
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x4086bc
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov byte [ebx + 0x64], 1
jmp 0x44a20a
cmp eax, 0x19aee9e7
jne 0x4498bf
cmp edx, 0x510161d0
jne 0x4498bf
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov eax, fcn.004fa620
mov ecx, esi
push eax
push 0x409208
mov edx, eax
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov byte [ebx + 0x61], 1
test edi, edi
je 0x44a20a
lea eax, [ebx + 0x18]
jmp 0x44a110
cmp eax, 0x3aab4e8
jne 0x449912
cmp edx, 0x726f61ab
jne 0x449912
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x409244
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
lea eax, [ebx + 0x20]
jmp 0x44a110
cmp eax, 0xdc4f680d
jne 0x449c38
cmp edx, 0x78f36e7f
jne 0x449c38
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408734
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
lea eax, [ebx + 0x2c]
jmp 0x44a110
mov ecx, 0xcab16e7d
cmp edx, ecx
ja 0x449d62
jb 0x449987
cmp eax, 0xd6412e56
ja 0x449d62
cmp eax, 0xd6412e56
jne 0x4499d7
cmp edx, ecx
jne 0x4499d7
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408ee4
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov byte [ebx + 0x73], 1
jmp 0x44a20a
mov ecx, 0xaf61d31b
cmp edx, ecx
ja 0x449b96
jb 0x4499f1
cmp eax, 0xd73ef0
ja 0x449b96
cmp eax, 0xd73ef0
jne 0x449a41
cmp edx, ecx
jne 0x449a41
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x4089d4
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov byte [ebx + 0x63], 1
jmp 0x44a20a
cmp eax, 0x6c18fc82
jne 0x449a95
cmp edx, 0x8a5531d0
jne 0x449a95
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408d70
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov byte [ebx + 0x67], 1
jmp 0x44a20a
cmp eax, 0xebc6886e
jne 0x449ae8
cmp edx, 0x90c1aaf6
jne 0x449ae8
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x40892c
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
lea eax, [ebx + 0x54]
jmp 0x44a110
cmp eax, 0xe49d584b
jne 0x449b3b
cmp edx, 0x97fe2991
jne 0x449b3b
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408c2c
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
lea eax, [ebx + 0x3c]
jmp 0x44a110
cmp eax, 0x2dadd665
jne 0x449c38
cmp edx, 0xad4b85af
jne 0x449c38
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408c50
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
lea eax, [ebx + 0x10]
jmp 0x44a110
cmp eax, 0xf14042c6
jne 0x449be5
cmp edx, 0xba3e984a
jne 0x449be5
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408ed8
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
lea eax, [ebx + 0x14]
jmp 0x44a110
cmp eax, 0xe99b88d2
jne 0x449caf
cmp edx, 0xc168418c
jne 0x449caf
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408e78
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
je 0x44a20a
mov ecx, dword [ebp - 0xe4]
xor ebx, ebx
mov eax, dword [ebp - 0xf4]
push 1
push ecx
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0xb4], eax
lea eax, [ebp - 0xb4]
push eax
push ebx
push 0xc1010007
push ebx
push 0xc101007b
push ecx
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, dword [ebp - 0xe0]
mov ecx, eax
call fcn.004422e5
mov dword [ebp - 0x14c], 0x418bc8
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x148], 0x418c08
mov esi, 0xc0000001
mov dword [ebp - 0x144], 0x425
mov dword [ebp - 0x140], ebx
jmp 0x44a4f7
cmp eax, 0xe4a75928
jne 0x449d03
cmp edx, 0xc250748c
jne 0x449d03
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x4090c4
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov byte [ebx + 0x62], 1
jmp 0x44a20a
cmp eax, 0xe4904ad1
jne 0x449c38
cmp edx, 0xc2567bae
jne 0x449c38
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408fd4
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov byte [ebp - 0xd9], 1
jmp 0x44a20a
mov ecx, 0xd6a9b0b7
cmp edx, ecx
ja 0x44a017
jb 0x449d7c
cmp eax, 0x253ae3f2
ja 0x44a017
cmp eax, 0x253ae3f2
jne 0x449dcd
cmp edx, ecx
jne 0x449dcd
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x4087d0
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
xor eax, eax
mov byte [ebx + 0x71], al
jmp 0x44a20a
cmp eax, 0xdb5b0fbb
jne 0x449f13
cmp edx, 0xcae89170
jne 0x449f13
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov eax, fcn.004fa620
mov ecx, esi
push eax
push 0x408950
mov edx, eax
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov edi, dword [ebp - 0xf8]
mov dword [ebp - 0xb8], edi
test edi, edi
je 0x44a46f
mov ecx, edi
xor esi, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, si
jne 0x449e3b
sub ecx, edx
sar ecx, 1
je 0x44a46f
xor eax, eax
mov dword [ebp - 0xd8], esi
lea eax, [ecx + ecx]
mov byte [ebp - 4], 2
push 0x5c
mov dword [ebp - 0xd4], eax
movzx eax, word [eax + edi - 2]
pop edx
cmp ax, dx
je 0x449ec1
push 0x2f
pop edx
cmp ax, dx
je 0x449ec1
lea eax, [ecx + 2]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00451e29
test eax, eax
je 0x44a3c3
push dword [ebp - 0xd4]
mov esi, dword [ebp - 0xd8]
push edi
push esi
call fcn.0052e380
mov eax, dword [ebp - 0xd4]
add esp, 0xc
xor ecx, ecx
mov dword [ebp - 0xb8], esi
mov word [eax + esi + 2], cx
push 0x5c
pop ecx
mov word [eax + esi], cx
mov edi, dword [ebx + 0x23c]
lea ecx, [ebx + 0x238]
lea eax, [edi + 1]
push eax
call fcn.00451312
test eax, eax
je 0x44a42b
mov eax, dword [ebx + 0x238]
lea ecx, [eax + edi*4]
lea eax, [ebp - 0xb8]
push eax
call fcn.00452f1a
test eax, eax
js 0x44a41c
mov byte [ebp - 4], 6
test esi, esi
je 0x449f0a
push esi
call dword [sym.imp.OLE32.dll_CoTaskMemFree]
mov byte [ebp - 4], 1
jmp 0x44a20a
cmp eax, 0xcba01474
jne 0x449f67
cmp edx, 0xd2e89da2
jne 0x449f67
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408af4
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov byte [ebx + 0x60], 1
jmp 0x44a20a
cmp eax, 0x3e69aaec
jne 0x449fbb
cmp edx, 0xd4e6dff9
jne 0x449fbb
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov eax, fcn.004fa620
mov ecx, esi
push eax
push 0x408c8c
mov edx, eax
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov byte [ebx + 0x66], 1
jmp 0x4498af
cmp eax, 0xed0bceaf
jne 0x449c38
cmp edx, 0xd559b115
jne 0x449c38
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408a94
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov byte [ebx + 0x69], 1
jmp 0x44a20a
cmp eax, 0xaccc9c23
jne 0x44a06a
cmp edx, 0xe2224884
jne 0x44a06a
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x408860
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
lea eax, [ebx + 8]
jmp 0x44a110
cmp eax, 0x65b84fff
jne 0x44a0ba
cmp edx, 0xe474abb2
jne 0x44a0ba
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov edi, fcn.004fa620
mov ecx, esi
push edi
push 0x4091cc
mov edx, edi
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
lea eax, [ebx + 0x50]
jmp 0x44a110
cmp eax, 0x4092ca88
jne 0x44a1b0
cmp edx, 0xf032f1bd
jne 0x44a1b0
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov eax, fcn.004fa620
mov ecx, esi
push eax
push 0x4090b8
mov edx, eax
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
lea eax, [ebx + 0x48]
mov edx, dword [ebp - 0xd8]
test eax, eax
je 0x44a20a
mov ecx, dword [ebp - 0xf8]
mov dword [eax], ecx
test edx, edx
je 0x44a12c
mov dword [edx], ecx
cmp dword [ebp - 0x100], 0
jne 0x44a20a
mov ecx, dword [ebp - 0xe4]
xor ebx, ebx
mov eax, dword [ebp - 0xf4]
push 1
push ecx
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0xb4], eax
lea eax, [ebp - 0xb4]
push eax
push ebx
push 0xc1010008
push ebx
push 0xc101007b
push ecx
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, dword [ebp - 0xe0]
mov ecx, eax
call fcn.004422e5
mov dword [ebp - 0x13c], 0x418bc8
lea ecx, [ebp - 0x13c]
mov dword [ebp - 0x138], 0x418c08
mov esi, 0xc0000001
mov dword [ebp - 0x134], 0x436
mov dword [ebp - 0x130], ebx
jmp 0x44a4f7
cmp eax, 0x3fa47f17
jne 0x449c38
cmp edx, 0xf2c14d37
jne 0x449c38
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov eax, fcn.004fa620
mov ecx, esi
push eax
push 0x409268
mov edx, eax
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov byte [0x553e31], 1
mov esi, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xf0]
inc esi
mov dword [ebp - 0xe4], esi
cmp esi, ecx
jne 0x449089
cmp ecx, 2
jb 0x44a502
mov eax, dword [ebp - 0xec]
test al, al
jne 0x44a23d
cmp byte [ebx + 0x60], al
je 0x44a259
cmp ecx, 3
jb 0x44a502
test al, al
je 0x44a259
cmp byte [ebx + 0x60], 0
je 0x44a259
cmp ecx, 4
jb 0x44a502
mov dl, byte [ebp - 0xd9]
lea eax, [ebp - 0x1c]
mov ecx, dword [ebp - 0xe0]
push ebx
push eax
call fcn.0044a602
test eax, eax
js 0x448f8e
mov eax, dword [ebp - 0x18]
lea ecx, [ebx + 0x78]
sub eax, dword [ebp - 0x1c]
sar eax, 2
add eax, 4
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.00443446
mov esi, dword [eax]
test esi, esi
js 0x448f90
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebx + 0x78]
call fcn.0045cf92
test eax, eax
js 0x448f8e
xor eax, eax
cmp dword [ebx + 0x38], eax
jne 0x44a52b
cmp dword [ebx + 0x30], eax
jne 0x44a52b
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
sub eax, ecx
and eax, 0xfffffffc
cmp eax, 4
jne 0x44a52b
mov eax, dword [ecx]
mov dword [ebx + 0x38], eax
jmp 0x44a52b
push 1
push ecx
mov dword [ebp - 0xb4], eax
xor ebx, ebx
lea eax, [ebp - 0xb4]
push eax
push ebx
push 0xc1010007
push ebx
push 0xc101007b
push ecx
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, dword [ebp - 0xe0]
mov ecx, eax
call fcn.004422e5
mov dword [ebp - 0x104], 0x418bc8
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x100], 0x418c08
mov esi, 0xc0000001
mov dword [ebp - 0xfc], 0x44c
mov dword [ebp - 0xf8], ebx
jmp 0x44a4f7
or dword [ebp - 0xd4], 0xffffffff
lea eax, [ebp - 0xd4]
push eax
push fcn.004fa860
mov eax, fcn.004fa620
mov ecx, esi
push eax
push 0x408680
mov edx, eax
call fcn.004f9657
test eax, eax
js 0x448f8e
cmp dword [ebp - 0xd4], 0
jne 0x449c38
mov ecx, dword [ebp - 0xe0]
lea eax, [ebp - 0xb4]
push ecx
push eax
xor eax, eax
mov dword [ebp - 0xb4], ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, 0x41010013
mov ecx, eax
call fcn.00444fa8
mov ecx, ebx
call fcn.00446cc7
xor eax, eax
mov byte [0x553e31], al
jmp 0x448f8e
mov edi, 0xc0000017
mov dword [ebp - 0x104], 0x418bc8
push edi
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x100], 0x418c08
mov dword [ebp - 0xfc], 0x3fc
mov dword [ebp - 0xf8], 0x418c20
call fcn.004f7c89
mov byte [ebp - 4], 3
cmp dword [ebp - 0xd8], 0
je 0x44a415
push dword [ebp - 0xd8]
call dword [sym.imp.OLE32.dll_CoTaskMemFree]
mov esi, edi
jmp 0x448f90
mov ecx, eax
call fcn.004d3a42
mov edi, eax
mov byte [ebp - 4], 5
jmp 0x44a468
mov edi, 0xc0000017
mov dword [ebp - 0x11c], 0x418bc8
push edi
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x118], 0x418c08
mov dword [ebp - 0x114], 0x405
mov dword [ebp - 0x110], 0x418c50
call fcn.004f7c89
mov byte [ebp - 4], 4
test esi, esi
je 0x44a415
push esi
jmp 0x44a40f
push 1
push ecx
xor ebx, ebx
push ebx
push ebx
push 0xc10100aa
push ebx
push 0xc101007b
push ecx
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, dword [ebp - 0xe0]
mov ecx, eax
call fcn.004422e5
mov dword [ebp - 0x12c], 0x418bc8
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x128], 0x418c08
mov esi, 0xc0000001
mov dword [ebp - 0x124], 0x3f5
mov dword [ebp - 0x120], ebx
jmp 0x44a4f7
mov dword [ebp - 0x15c], 0x418bc8
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x158], 0x418c08
mov esi, 0xc000000d
mov dword [ebp - 0x154], 0x2fb
mov dword [ebp - 0x150], eax
push esi
call fcn.004f7c89
jmp 0x448f90
mov ecx, dword [ebp - 0xe0]
lea eax, [ebp - 0xb4]
push ecx
push eax
xor eax, eax
mov dword [ebp - 0xb4], ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, 0x41010013
mov ecx, eax
call fcn.00444fa8
lea ecx, [ebp - 0x1c]
call fcn.00451f35
lea ecx, [ebp - 0xb0]
call fcn.00443627
xor eax, eax
call fcn.0052bffc
ret 4