Function at 0x4412a0
Capabilities:
Enumerate processes
Get process image filename

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x384
push ebx
push esi
push edi
push 0
push 0
push 0
push 0
mov ebx, ecx
push 0
push 0x20a
mov dword [ebp - 0x50], ebx
call fcn.0049f9b0
mov esi, eax
mov ecx, 0x82
xor eax, eax
mov dword [ebp - 0x28], esi
mov edi, esi
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x78]
push eax
call fcn.00461540
push eax
lea eax, [ebp - 0x158]
push eax
call fcn.004615a0
add esp, 0x24
cmp byte [ebp - 0x55], 0
jge 0x441306
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x441306
push eax
call fcn.0044d750
add esp, 4
cmp byte [ebp - 0x61], 0
jge 0x44131c
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x44131c
push eax
call fcn.0044d750
add esp, 4
cmp byte [ebp - 0x6d], 0
jge 0x441332
mov eax, dword [ebp - 0x78]
test eax, eax
je 0x441332
push eax
call fcn.0044d750
add esp, 4
push 0
push 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov edi, eax
mov dword [ebp - 0x4c], edi
test edi, edi
je 0x441dcc
cmp edi, 0xffffffff
je 0x441dcc
xorps xmm0, xmm0
mov dword [ebp - 0xa4], 0
movups xmmword [ebp - 0xb4], xmm0
lea eax, [ebp - 0xb4]
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xb4], eax
lea ecx, [ebx + 0xc8]
mov dword [ebp - 0xb0], eax
lea eax, [ebp - 0x48]
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov byte [ebp - 0xa8], 0
mov dword [ebp - 0x40], 0
mov byte [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov byte [ebp - 0xec], 0
mov byte [ebp - 0xe1], 0xb
mov word [ebp - 0xe0], ax
mov byte [ebp - 0xd5], 5
mov word [ebp - 0xd4], ax
mov byte [ebp - 0xc9], 5
call fcn.0045e7a0
mov edi, dword [ebx + 0x10]
lea eax, [ebx + 0xc]
mov dword [ebp - 0x20], edi
cmp edi, eax
je 0x4416d1
nop
lea eax, [edi + 0x50]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.004615a0
add esp, 8
lea ecx, [ebp - 0xb4]
push eax
push dword [ebp + 0xc]
lea eax, [ebp - 0xf4]
push eax
call fcn.00440630
test byte [ebp - 0x55], 0x80
je 0x44142c
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x44142c
push eax
call fcn.0044d750
add esp, 4
test byte [ebp - 0x61], 0x80
je 0x441442
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x441442
push eax
call fcn.0044d750
add esp, 4
test byte [ebp - 0x6d], 0x80
je 0x441458
mov eax, dword [ebp - 0x78]
test eax, eax
je 0x441458
push eax
call fcn.0044d750
add esp, 4
lea eax, [edi + 0x10]
push eax
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x78]
push eax
call fcn.004615a0
add esp, 8
lea ecx, [ebp - 0xec]
push eax
call fcn.0045cd30
test byte [ebp - 0x55], 0x80
je 0x44148d
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x44148d
push eax
call fcn.0044d750
add esp, 4
test byte [ebp - 0x61], 0x80
je 0x4414a3
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x4414a3
push eax
call fcn.0044d750
add esp, 4
test byte [ebp - 0x6d], 0x80
je 0x4414b9
mov eax, dword [ebp - 0x78]
test eax, eax
je 0x4414b9
push eax
call fcn.0044d750
add esp, 4
mov byte [ebp - 0x14], 0
mov ebx, 0x5ffcb4
mov byte [ebp - 9], 0xb
inc ebx
cmp byte [ebx], 0
jne 0x4414c6
sub ebx, 0x5ffcb4
cmp ebx, 0xb
jbe 0x441505
push 0
push 0
push 0
push 0
lea eax, [ebx + 1]
push 0
push eax
call fcn.0049f9b0
mov ecx, ebx
mov dword [ebp - 0x10], ebx
or ecx, 0x80000000
mov edx, eax
add esp, 0x18
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x14], edx
shr ecx, 0x18
jmp 0x441511
mov edx, dword [ebp - 0x14]
mov al, 0xb
sub al, bl
mov byte [ebp - 9], al
mov cl, al
test cl, cl
lea eax, [ebp - 0x14]
push ebx
cmovs eax, edx
push 0x5ffcb4
push eax
call fcn.005d67e0
mov al, byte [ebp - 9]
add esp, 0xc
test al, al
jns 0x441537
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x10]
jmp 0x44153f
movzx eax, al
lea ecx, [ebp - 9]
sub ecx, eax
lea eax, [ebp - 0x14]
mov byte [ecx], 0
push eax
lea ecx, [ebp - 0xec]
call fcn.0045cf90
test byte [ebp - 9], 0x80
je 0x441567
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x441567
push eax
call fcn.0044d750
add esp, 4
mov ebx, dword [ebp - 0x40]
lea esi, [ebp - 0x48]
test ebx, ebx
je 0x441591
mov edi, dword [ebp - 0x30]
push edi
lea ecx, [ebx + 0x10]
call fcn.0045cec0
test al, al
jne 0x441588
mov esi, ebx
mov ebx, dword [ebx + 4]
jmp 0x44158a
mov ebx, dword [ebx]
test ebx, ebx
jne 0x441574
mov edi, dword [ebp - 0x20]
lea ecx, [ebp - 0x48]
lea eax, [esi + 0x10]
mov dword [ebp - 0x24], eax
lea ebx, [edi + 0x10]
cmp esi, ecx
je 0x4415b3
push eax
mov ecx, ebx
call fcn.0045cec0
test al, al
je 0x4416a6
jmp 0x4415b6
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x48]
cmp esi, ecx
je 0x441605
lea eax, [ebp - 0x48]
cmp esi, eax
je 0x441605
push esi
call fcn.0049fd70
mov ecx, dword [ebp - 0x24]
add esp, 4
mov dword [ebp - 0x2c], eax
push ebx
call fcn.0045cec0
test al, al
je 0x441639
mov ecx, dword [ebp - 0x2c]
add ecx, 0x10
push ecx
mov ecx, ebx
call fcn.0045cec0
test al, al
je 0x441639
cmp dword [esi], 0
je 0x4415fd
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 8], 1
jmp 0x44161f
mov byte [ebp - 8], 0
mov eax, esi
jmp 0x441623
cmp dword [ebp - 0x38], 0
je 0x441639
add ecx, 0x10
push ebx
call fcn.0045cec0
test al, al
je 0x441639
mov eax, dword [ebp - 0x48]
mov byte [ebp - 8], 0
test eax, eax
je 0x441639
push ebx
push dword [ebp - 8]
lea ecx, [ebp - 0x48]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00440560
mov esi, dword [ebp - 0x18]
jmp 0x4416a6
mov ebx, dword [ebp - 0x40]
lea esi, [ebp - 0x48]
mov al, 1
test ebx, ebx
je 0x441667
mov edi, dword [ebp - 0x30]
lea eax, [ebx + 0x10]
mov ecx, edi
push eax
call fcn.0045cec0
mov esi, ebx
test al, al
je 0x44165e
mov ebx, dword [ebx + 4]
jmp 0x441660
mov ebx, dword [ebx]
test ebx, ebx
jne 0x441648
mov edi, dword [ebp - 0x20]
mov ebx, esi
test al, al
je 0x44167d
cmp esi, dword [ebp - 0x44]
je 0x44168d
push esi
call fcn.0049fa40
add esp, 4
mov esi, eax
lea eax, [edi + 0x10]
push eax
lea ecx, [esi + 0x10]
call fcn.0045cec0
test al, al
je 0x4416a3
lea eax, [edi + 0x10]
push eax
push 0
push ebx
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x48]
call fcn.00440560
mov esi, dword [ebp - 0x54]
mov dword [ebp - 0x18], esi
lea eax, [ebp - 0xec]
push eax
lea ecx, [esi + 0x34]
call fcn.0045cd30
push edi
call fcn.0049fd70
mov edi, eax
add esp, 4
mov eax, dword [ebp - 0x50]
add eax, 0xc
mov dword [ebp - 0x20], edi
cmp edi, eax
jne 0x4413f0
push 0x228
lea eax, [ebp - 0x380]
mov dword [ebp - 0x384], 0x22c
push 0
xor bl, bl
push eax
mov byte [ebp - 1], bl
call fcn.005d6d60
mov edi, dword [ebp - 0x4c]
lea eax, [ebp - 0x384]
add esp, 0xc
push eax
push edi
call sub.KERNEL32.dll_Process32FirstW
test eax, eax
je 0x441c9f
nop
push dword [ebp - 0x37c]
push 0
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
mov dword [ebp - 0xf0], esi
test esi, esi
je 0x441db0
cmp esi, 0xffffffff
je 0x441db0
push 0x105
push dword [ebp - 0x28]
push esi
call sub.PSAPI.DLL_GetProcessImageFileNameW
test eax, eax
je 0x441d59
mov eax, dword [ebp - 0x28]
cmp word [eax], 0
je 0x441c83
xor ecx, ecx
mov byte [ebp - 9], 5
mov word [ebp - 0x14], cx
mov ebx, eax
nop dword [eax + eax]
add ebx, 2
cmp word [ebx], cx
jne 0x441770
sub ebx, eax
and ebx, 0xfffffffe
sar ebx, 1
lea edi, [ebx + ebx]
cmp ebx, 5
jbe 0x4417b5
push 0
push 0
push 0
push 0
lea eax, [edi + 2]
push 0
push eax
call fcn.0049f9b0
mov ecx, ebx
mov dword [ebp - 0x10], ebx
or ecx, 0x80000000
mov edx, eax
add esp, 0x18
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x14], edx
shr ecx, 0x18
jmp 0x4417c1
mov edx, dword [ebp - 0x14]
mov al, 5
sub al, bl
mov byte [ebp - 9], al
mov cl, al
test cl, cl
lea eax, [ebp - 0x14]
push edi
push dword [ebp - 0x28]
cmovs eax, edx
push eax
call fcn.005d67e0
mov al, byte [ebp - 9]
add esp, 0xc
test al, al
jns 0x4417e8
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
lea ecx, [ecx + eax*2]
jmp 0x4417f2
movzx eax, al
lea ecx, [ebp - 0xa]
add eax, eax
sub ecx, eax
xor eax, eax
mov word [ecx], ax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xc4]
push eax
call fcn.00460b60
add esp, 8
lea ecx, [ebp - 0x9c]
push eax
call fcn.0045cc50
test byte [ebp - 0xb9], 0x80
je 0x441832
mov eax, dword [ebp - 0xc4]
test eax, eax
je 0x441832
push eax
call fcn.0044d750
add esp, 4
test byte [ebp - 9], 0x80
je 0x441848
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x441848
push eax
call fcn.0044d750
add esp, 4
mov ecx, dword [ebp - 0x50]
mov edi, dword [ecx + 0x10]
lea eax, [ecx + 0xc]
mov dword [ebp - 0x24], edi
cmp edi, eax
je 0x441c2c
nop dword [eax]
mov eax, dword [ebp + 8]
test eax, eax
je 0x441878
push eax
lea ecx, [edi + 0x10]
call fcn.0045cdf0
test al, al
je 0x441c0a
cmp byte [edi + 0x98], 0
jne 0x4418d5
mov esi, dword [ebp - 0xac]
lea ebx, [ebp - 0xb4]
test esi, esi
je 0x4418d5
lea eax, [ebp - 0x9c]
push eax
lea ecx, [esi + 0x10]
call fcn.0045cec0
test al, al
jne 0x4418ab
mov ebx, esi
mov esi, dword [esi + 4]
jmp 0x4418ad
mov esi, dword [esi]
test esi, esi
jne 0x441891
lea eax, [ebp - 0xb4]
cmp ebx, eax
je 0x4418d5
lea eax, [ebx + 0x10]
push eax
lea ecx, [ebp - 0x9c]
call fcn.0045cec0
test al, al
jne 0x4418d5
mov byte [edi + 0x98], 1
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x9c]
call fcn.0045cdf0
test al, al
jne 0x441c0a
mov ebx, dword [ebp - 0x40]
lea eax, [edi + 0x10]
mov dword [ebp - 8], eax
lea esi, [ebp - 0x48]
test ebx, ebx
je 0x44191e
mov edi, eax
push edi
lea ecx, [ebx + 0x10]
call fcn.0045cec0
test al, al
jne 0x441915
mov esi, ebx
mov ebx, dword [ebx + 4]
jmp 0x441917
mov ebx, dword [ebx]
test ebx, ebx
jne 0x441901
mov edi, dword [ebp - 0x24]
mov ebx, dword [ebp - 8]
lea ecx, [ebp - 0x48]
lea eax, [esi + 0x10]
mov dword [ebp - 0x18], eax
cmp esi, ecx
je 0x441940
push eax
mov ecx, ebx
call fcn.0045cec0
test al, al
je 0x441a40
jmp 0x441943
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x48]
cmp esi, ecx
je 0x441992
lea eax, [ebp - 0x48]
cmp esi, eax
je 0x441992
push esi
call fcn.0049fd70
mov ecx, dword [ebp - 0x18]
add esp, 4
mov dword [ebp - 0x30], eax
push ebx
call fcn.0045cec0
test al, al
je 0x4419c6
mov ecx, dword [ebp - 0x30]
add ecx, 0x10
push ecx
mov ecx, ebx
call fcn.0045cec0
test al, al
je 0x4419c6
cmp dword [esi], 0
je 0x44198a
mov eax, dword [ebp - 0x30]
mov byte [ebp - 0x20], 1
jmp 0x4419ac
mov byte [ebp - 0x20], 0
mov eax, esi
jmp 0x4419b0
cmp dword [ebp - 0x38], 0
je 0x4419c6
add ecx, 0x10
push ebx
call fcn.0045cec0
test al, al
je 0x4419c6
mov eax, dword [ebp - 0x48]
mov byte [ebp - 0x20], 0
test eax, eax
je 0x4419c6
push ebx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00440560
mov esi, dword [ebp - 0x2c]
jmp 0x441a40
mov ebx, dword [ebp - 0x40]
lea esi, [ebp - 0x48]
mov al, 1
test ebx, ebx
je 0x4419f4
mov edi, dword [ebp - 8]
lea eax, [ebx + 0x10]
mov ecx, edi
push eax
call fcn.0045cec0
mov esi, ebx
test al, al
je 0x4419eb
mov ebx, dword [ebx + 4]
jmp 0x4419ed
mov ebx, dword [ebx]
test ebx, ebx
jne 0x4419d5
mov edi, dword [ebp - 0x24]
mov ecx, esi
mov dword [ebp - 0x54], ecx
test al, al
je 0x441a11
cmp esi, dword [ebp - 0x44]
je 0x441b40
push esi
call fcn.0049fa40
add esp, 4
mov esi, eax
mov ebx, dword [ebp - 8]
lea ecx, [esi + 0x10]
push ebx
call fcn.0045cec0
test al, al
je 0x441a3d
mov ecx, dword [ebp - 0x54]
push ebx
push 0
push ecx
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x48]
call fcn.00440560
mov esi, dword [ebp - 0xb8]
mov dword [ebp - 0x2c], esi
add esi, 0x34
lea ecx, [ebp - 0x9c]
push esi
call fcn.0045db20
test al, al
je 0x441c0a
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x9c]
call fcn.0045d3b0
test byte [ebp - 0x91], 0x80
lea ecx, [ebp - 0x9c]
cmovne ecx, dword [ebp - 0x9c]
cmp byte [ebx + 0xb], 0
jge 0x441a82
mov ebx, dword [ebx]
test byte [ebp - 0x6d], 0x80
lea eax, [ebp - 0x78]
push 4
cmovne eax, dword [ebp - 0x78]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x10c], eax
lea eax, [ebp - 0x134]
push eax
push str._s_is_running_in__s___u__s_
push 3
mov dword [ebp - 0x134], 1
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x124], 1
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x114], 2
mov dword [ebp - 0xfc], ecx
mov dword [ebp - 0x104], 1
call fcn.0044dbd0
mov ebx, dword [ebp + 0xc]
add esp, 0x10
mov byte [ebp - 1], 1
test ebx, ebx
je 0x441bc8
push 0
push 0
push 0
push 0
push 0
push 0x34
call fcn.0049f9b0
mov dword [ebp - 0x18], eax
add esp, 0x18
mov byte [eax + 0x10], 0
mov byte [eax + 0x1b], 0xb
lea esi, [eax + 0x10]
mov al, byte [ebp - 0x91]
test al, al
jns 0x441b48
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x9c]
add ecx, edx
jmp 0x441b59
mov ebx, dword [ebp - 8]
jmp 0x441a24
movzx eax, al
lea ecx, [ebp - 0x91]
lea edx, [ebp - 0x9c]
sub ecx, eax
push ecx
push edx
mov ecx, esi
call fcn.004409b0
xor eax, eax
mov byte [esi + 0x17], 5
mov word [esi + 0xc], ax
mov ecx, ebx
mov word [esi + 0x18], ax
lea eax, [ebp - 0x19]
push esi
push eax
mov byte [esi + 0x23], 5
call fcn.00440140
cmp byte [ebp - 0x19], 0
mov ebx, eax
je 0x441bbd
cmp ebx, dword [ebp + 0xc]
je 0x441ba3
lea edx, [ebx + 0x10]
mov ecx, esi
push edx
call fcn.0045cec0
test al, al
jne 0x441ba3
mov eax, 1
jmp 0x441ba5
xor eax, eax
push eax
push dword [ebp + 0xc]
push ebx
push dword [ebp - 0x18]
call fcn.0049fdc0
mov ebx, dword [ebp + 0xc]
add esp, 0x10
inc dword [ebx + 0x10]
jmp 0x441bc8
push dword [ebp - 0x18]
mov ecx, dword [ebp + 0xc]
call fcn.004400e0
test byte [ebp - 0x55], 0x80
je 0x441bde
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x441bde
push eax
call fcn.0044d750
add esp, 4
test byte [ebp - 0x61], 0x80
je 0x441bf4
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x441bf4
push eax
call fcn.0044d750
add esp, 4
test byte [ebp - 0x6d], 0x80
je 0x441c0a
mov eax, dword [ebp - 0x78]
test eax, eax
je 0x441c0a
push eax
call fcn.0044d750
add esp, 4
push edi
call fcn.0049fd70
mov edi, eax
add esp, 4
mov eax, dword [ebp - 0x50]
add eax, 0xc
mov dword [ebp - 0x24], edi
cmp edi, eax
jne 0x441860
mov esi, dword [ebp - 0xf0]
test byte [ebp - 0x79], 0x80
je 0x441c45
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x441c45
push eax
call fcn.0044d750
add esp, 4
test byte [ebp - 0x85], 0x80
je 0x441c61
mov eax, dword [ebp - 0x90]
test eax, eax
je 0x441c61
push eax
call fcn.0044d750
add esp, 4
test byte [ebp - 0x91], 0x80
je 0x441c7d
mov eax, dword [ebp - 0x9c]
test eax, eax
je 0x441c7d
push eax
call fcn.0044d750
add esp, 4
mov edi, dword [ebp - 0x4c]
mov bl, byte [ebp - 1]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x384]
push eax
push edi
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x441710
mov ecx, dword [ebp - 0x50]
test bl, bl
sete byte [ebp + 0xf]
lea ecx, [ecx + 0xc8]
call fcn.0045e7b0
cmp byte [ebp - 0xc9], 0
jge 0x441ccf
mov eax, dword [ebp - 0xd4]
test eax, eax
je 0x441ccf
push eax
call fcn.0044d750
add esp, 4
cmp byte [ebp - 0xd5], 0
jge 0x441ceb
mov eax, dword [ebp - 0xe0]
test eax, eax
je 0x441ceb
push eax
call fcn.0044d750
add esp, 4
cmp byte [ebp - 0xe1], 0
jge 0x441d07
mov eax, dword [ebp - 0xec]
test eax, eax
je 0x441d07
push eax
call fcn.0044d750
add esp, 4
push dword [ebp - 0x40]
lea ecx, [ebp - 0x48]
call fcn.00440870
mov ebx, dword [ebp - 0xac]
test ebx, ebx
je 0x441d47
nop dword [eax]
push dword [ebx]
lea ecx, [ebp - 0xb4]
call fcn.00440930
mov esi, dword [ebx + 4]
lea ecx, [ebx + 0x10]
call fcn.0043fba0
push ebx
call fcn.0044d750
add esp, 4
mov ebx, esi
test esi, esi
jne 0x441d20
mov esi, dword [ebp - 0x28]
mov bl, byte [ebp + 0xf]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x441e15
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x37c]
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x98]
push 2
push eax
push str.Couldnt_get_command_line_for_process__d__error__d
push 3
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x98], 2
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x88], 2
call fcn.0044dbd0
add esp, 0x10
jmp 0x441c83
mov byte [ebp - 1], bl
test esi, esi
je 0x441c8a
mov byte [ebp - 1], bl
cmp esi, 0xffffffff
je 0x441c8a
jmp 0x441c83
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc0], eax
lea eax, [ebp - 0xc8]
push 1
push eax
push str.Couldnt_get_process_snapshot__error__d
push 3
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xc8], 2
call fcn.0044dbd0
add esp, 0x10
test edi, edi
je 0x441e13
mov bl, 1
cmp edi, 0xffffffff
jne 0x441d4d
mov bl, 1
lea ecx, [ebp - 0x158]
call fcn.0043fba0
test esi, esi
je 0x441e2d
push esi
call fcn.0044d750
add esp, 4
pop edi
pop esi
mov al, bl
pop ebx
mov esp, ebp
pop ebp
ret 8