Function at 0x418aa0
Capabilities:
Delete registry key
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x589b01
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1fcc
call fcn.0055d880
mov eax, dword [0x5eb770]
xor eax, esp
mov dword [esp + 0x1fc8], eax
push ebx
push esi
push edi
mov eax, dword [0x5eb770]
xor eax, esp
push eax
lea eax, [esp + 0x1fe0]
mov dword fs:[0], eax
xor ebx, ebx
push ebx
mov esi, ecx
mov edi, edx
push str.Tool_DeletePrinter
push ebx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x24], esi
mov dword [esp + 0x5c], edi
call fcn.0044ca70
add esp, 0xc
push ebx
push edi
push esi
push str.hWnd___08x__lpszPrinter___s__bJob___d
mov esi, 1
lea eax, [esp + 0x20]
push esi
push eax
mov dword [esp + 0x2000], ebx
call fcn.0044cd10
push 0x860
lea ecx, [esp + 0x1790]
push ebx
push ecx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x68], ebx
call fcn.0055ca80
add esp, 0x24
push 0x410
lea edx, [esp + 0x1368]
push ebx
push edx
mov dword [esp + 0x70], ebx
call fcn.0055ca80
add esp, 0xc
mov dword [esp + 0x6c], esi
mov dword [esp + 0x70], esi
mov dword [esp + 0x60], ebx
mov dword [esp + 0x68], esi
call fcn.0046d2d8
mov eax, dword [eax + 4]
push ebx
push esi
mov ecx, edi
mov dword [esp + 0x34], eax
call fcn.0041b830
add esp, 8
cmp eax, esi
jne 0x418bbb
push 3
push str.return___08x
lea ecx, [esp + 0x18]
push 2
push ecx
call fcn.0044cd10
add esp, 0x10
lea ecx, [esp + 0x10]
mov dword [esp + 0x1fe8], 0xffffffff
call fcn.0044cc70
lea eax, [ebx + 3]
jmp 0x4197d5
xor ebx, ebx
mov dword [esp + 0x5c], ebx
cmp edi, ebx
je 0x418bd0
mov ecx, edi
call fcn.0045dcf0
mov dword [esp + 0x5c], eax
xor eax, eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
lea edx, [esp + 0x74]
push edx
lea eax, [esp + 0x24]
push eax
push edi
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], 0xf000c
call dword [sym.imp.WINSPOOL.DRV_OpenPrinterW]
cmp eax, ebx
jne 0x418c4f
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x418cad
push 4
push str.return___08x
lea ecx, [esp + 0x18]
push 2
push ecx
call fcn.0044cd10
add esp, 0x10
lea ecx, [esp + 0x10]
mov dword [esp + 0x1fe8], 0xffffffff
call fcn.0044cc70
mov eax, 4
jmp 0x4197d5
lea edx, [esp + 0x1364]
mov ecx, edi
call fcn.0041be90
cmp eax, 0xffffffff
mov eax, dword [esp + 0x20]
jne 0x418c7c
push eax
call dword [sym.imp.WINSPOOL.DRV_ClosePrinter]
push esi
push str.return___08x
push 2
lea ecx, [esp + 0x1c]
push ecx
jmp 0x418cba
lea edx, [esp + 0x44]
push edx
push ebx
push ebx
push 3
push ebx
mov dword [esp + 0x58], ebx
mov ebx, dword [sym.imp.WINSPOOL.DRV_GetPrinterDriverW]
push eax
call ebx
test eax, eax
jne 0x418cdd
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x418cdd
mov ecx, dword [esp + 0x20]
push ecx
call dword [sym.imp.WINSPOOL.DRV_ClosePrinter]
push esi
push str.return___08x
push 2
lea edx, [esp + 0x1c]
push edx
call fcn.0044cd10
add esp, 0x10
lea ecx, [esp + 0x10]
mov dword [esp + 0x1fe8], 0xffffffff
call fcn.0044cc70
mov eax, esi
jmp 0x4197d5
mov eax, dword [esp + 0x44]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
mov dword [esp + 0x34], esi
test esi, esi
jne 0x418d04
mov ecx, dword [esp + 0x20]
push ecx
call dword [sym.imp.WINSPOOL.DRV_ClosePrinter]
jmp 0x4197a6
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x44]
push eax
push ecx
push esi
push 3
push 0
push edx
call ebx
test eax, eax
jne 0x418d43
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [esp + 0x20]
push eax
call dword [sym.imp.WINSPOOL.DRV_ClosePrinter]
push 1
push str.return___08x
push 2
lea ecx, [esp + 0x1c]
push ecx
jmp 0x4197b4
mov ecx, dword [esi + 0x1c]
push 0
call fcn.004115d0
add esp, 4
cmp eax, 1
jne 0x418e4b
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov edx, dword [esp + 0x20]
push edx
call dword [sym.imp.WINSPOOL.DRV_ClosePrinter]
lea ecx, [esp + 0x1c]
call fcn.00404860
lea ecx, [esp + 0x24]
call fcn.00404860
push 2
lea ecx, [esp + 0x20]
mov byte [esp + 0x1fec], 2
call fcn.00403520
push 3
lea ecx, [esp + 0x28]
call fcn.00403520
call fcn.0046d2d8
mov esi, dword [eax + 4]
mov eax, dword [esi + 0x130]
cmp byte [eax + 0x64], 0
je 0x418dee
mov ecx, dword [esp + 0x24]
mov edi, dword [esi + 0x138]
push ecx
call fcn.0040d0d0
push 0x20
push 0xa
lea ebx, [esp + 0x24]
call fcn.0040edb0
mov edx, dword [esp + 0x1c]
mov edi, dword [esi + 0x138]
push edx
call fcn.0040d0d0
mov edi, dword [esi + 0x138]
push 0x5b7dbc
call fcn.0040d0d0
jmp 0x418e05
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push 0x30
push eax
push ecx
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
push 2
push str.return___08x
lea eax, [esp + 0x18]
push 2
push eax
call fcn.0044cd10
add esp, 0x10
lea ecx, [esp + 0x24]
call fcn.004037a0
lea ecx, [esp + 0x1c]
call fcn.004037a0
lea ecx, [esp + 0x10]
mov dword [esp + 0x1fe8], 0xffffffff
call fcn.0044cc70
mov eax, 2
jmp 0x4197d5
push 0x80
lea ecx, [esp + 0xa0]
push 0
push ecx
call fcn.0055ca80
mov ecx, dword [esi + 0xc]
add esp, 0xc
push 1
push 0x40
lea edx, [esp + 0xa4]
call fcn.00411ff0
add esp, 8
test eax, eax
jne 0x418ea1
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov edx, dword [esp + 0x20]
push edx
call dword [sym.imp.WINSPOOL.DRV_ClosePrinter]
push 1
push str.return___08x
push 2
lea eax, [esp + 0x1c]
push eax
jmp 0x4197b4
push 0x820
lea ecx, [esp + 0x530]
push 0
push ecx
call fcn.0055ca80
lea edx, [esp + 0x54]
add esp, 0xc
push edx
lea edx, [esp + 0x530]
mov ecx, edi
mov dword [esp + 0x4c], 0
call fcn.0040fdd0
mov ebx, dword [esp + 0x30]
mov eax, dword [ebx + 0x634]
add esp, 4
mov dword [esp + 0x18], eax
call fcn.004588b0
test dword [eax + 0x14], 0x800
je 0x418f45
mov eax, edi
lea ecx, [esp + 0x80]
call fcn.00401a40
lea ecx, [esp + 0x52c]
mov byte [esp + 0x1fe8], 3
mov edx, dword [esp + 0x48]
push ecx
push edx
lea ebx, [esp + 0x28]
mov ecx, eax
call fcn.00419800
add esp, 8
lea esi, [esp + 0x80]
mov dword [esp + 0x38], eax
mov byte [esp + 0x1fe8], 0
call fcn.004024e0
mov esi, dword [esp + 0x34]
mov ebx, dword [esp + 0x2c]
jmp 0x418f72
mov eax, dword [esp + 0x20]
push eax
call dword [sym.imp.WINSPOOL.DRV_ClosePrinter]
test edi, edi
je 0x41979f
mov ecx, dword [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x4c]
push edi
lea edx, [esp + 0x534]
call fcn.004547c0
mov dword [esp + 0x38], eax
cmp dword [esp + 0x38], 0
jne 0x41979f
lea ecx, [esp + 0x28]
call fcn.00404860
lea ecx, [esp + 0x1c]
call fcn.00404860
lea ecx, [esp + 0x38]
call fcn.00404860
lea ecx, [esp + 0x58]
call fcn.00404860
mov byte [esp + 0x1fe8], 7
mov edx, dword [esi + 4]
push edx
lea ecx, [esp + 0x44]
call fcn.00403340
push 5
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x1ff0], 8
call fcn.0040a1c0
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x1fec], 9
call fcn.00404890
lea ecx, [esp + 0x18]
mov byte [esp + 0x1fe8], 8
call fcn.004037a0
mov ecx, dword [esi + 4]
push ecx
lea ecx, [esp + 0x50]
call fcn.00403340
lea ecx, [esp + 0x24]
call fcn.00404860
mov byte [esp + 0x1fe8], 0xb
mov eax, dword [esp + 0x4c]
lea edx, [esp + 0x24]
push edx
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x5c], esp
mov dword [esp + 0x20], esp
push eax
call fcn.00404900
mov ecx, dword [esp + 0x24]
add eax, 0x10
add esp, 4
mov dword [ecx], eax
call fcn.0041cef0
lea eax, [ebx + 0x5d8]
push 0x5b9f70
push eax
mov dword [esp + 0x28], eax
call fcn.00404f40
add esp, 0x10
test al, al
je 0x419070
mov ecx, dword [esi + 4]
lea edx, [esp + 0x9c]
push edx
push edi
call fcn.00424610
add esp, 8
jmp 0x419272
push edi
lea ecx, [esp + 0x34]
call fcn.00403340
push 2
push 0x5b9f78
push edi
mov byte [esp + 0x1ff4], 0xc
call fcn.0055943e
add esp, 0xc
test eax, eax
jne 0x419177
mov eax, dword [esp + 0x30]
mov eax, dword [eax - 0xc]
dec eax
push eax
lea ecx, [esp + 0x58]
push ecx
lea ecx, [esp + 0x38]
call fcn.0040a1c0
mov esi, dword [esp + 0x2c]
push eax
add esi, 0xf0
lea edx, [esp + 0x40]
push esi
push edx
mov byte [esp + 0x1ff4], 0xd
call fcn.0040a2c0
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1fec], 0xe
call fcn.00404890
lea ecx, [esp + 0x3c]
call fcn.004037a0
lea ecx, [esp + 0x54]
mov byte [esp + 0x1fe8], 0xc
call fcn.004037a0
push esi
lea ecx, [esp + 0x20]
call fcn.00404890
mov esi, dword [esp + 0x28]
push esi
push SysReAllocStringLen
call fcn.0041a0a0
mov ebx, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
add esp, 8
push esi
push SysReAllocStringLen
call ebx
push 0x5c
lea ecx, [esp + 0x2c]
call fcn.00418840
push eax
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x30]
call fcn.0040a240
mov byte [esp + 0x1fe8], 0xf
mov edi, dword [esp + 0x3c]
mov esi, SysReAllocStringLen
call fcn.0041a290
cmp eax, 1
jne 0x419161
push edi
push esi
call ebx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x1fe8], 0xc
call fcn.004037a0
jmp 0x419229
push edi
lea ecx, [esp + 0x40]
call fcn.00403340
push eax
lea ecx, [ebx + 0xec]
push ecx
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0x1ff4], 0x10
call fcn.0040a2c0
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1fec], 0x11
call fcn.00404890
lea ecx, [esp + 0x54]
call fcn.004037a0
lea ecx, [esp + 0x3c]
mov byte [esp + 0x1fe8], 0xc
call fcn.004037a0
lea eax, [ebx + 0xf0]
push eax
lea ecx, [esp + 0x20]
call fcn.00404890
mov esi, dword [esp + 0x28]
push esi
push SysReAllocStringLen
call fcn.0041a0a0
add esp, 8
push esi
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov ecx, dword [esp + 0x18]
push str.CAPT
push ecx
call fcn.00404f40
add esp, 8
test al, al
je 0x419229
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x419229
cmp dword [ebx + 0x668], 0
je 0x419229
mov esi, edi
call fcn.00427880
mov edi, dword [esp + 0x1c]
mov esi, SysReAllocStringLen
call fcn.0041a290
cmp eax, 1
jne 0x419259
mov ebx, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
push edi
push esi
call ebx
mov edi, str.SOFTWARECANON_
call fcn.0041a290
cmp eax, 1
jne 0x419259
push edi
push esi
call ebx
lea ecx, [esp + 0x30]
mov byte [esp + 0x1fe8], 0xb
call fcn.004037a0
mov edi, dword [esp + 0x50]
mov esi, dword [esp + 0x34]
push 0x208
xor ebx, ebx
lea edx, [esp + 0x328]
push ebx
push edx
call fcn.0055ca80
mov eax, dword [esi + 4]
add esp, 0xc
push edi
push eax
call fcn.00419ae0
add esp, 8
cmp eax, ebx
jne 0x4195b0
mov edx, dword [esp + 0x34]
mov eax, dword [edx + 4]
lea ecx, [esp + 0x324]
push ecx
push eax
call fcn.0041c9e0
push 0x206
lea edx, [esp + 0x12a]
xor ecx, ecx
push ebx
push edx
mov dword [esp + 0x64], eax
mov word [esp + 0x130], cx
call fcn.0055ca80
add esp, 0x14
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
mov esi, dword [esp + 0x2c]
mov byte [esp + 0x1fe8], 0x12
cmp dword [esi + 0x8bc], ebx
je 0x41935a
call fcn.00413710
mov ecx, str.SPOOLER
call fcn.00413910
call fcn.004588b0
call fcn.004188c0
test eax, eax
jne 0x419350
call fcn.004588b0
call fcn.004188e0
test eax, eax
jne 0x419350
call fcn.004588b0
call fcn.00418900
test eax, eax
jne 0x419350
call fcn.004588b0
call fcn.00418920
test eax, eax
jne 0x419350
mov dword [esi + 0x8bc], ebx
jmp 0x41935a
mov dword [esi + 0x8bc], 1
lea esi, [esp + 0x80]
call fcn.004069d0
mov edi, dword [esp + 0x34]
mov edx, dword [edi + 4]
push ebx
lea eax, [esp + 0x120]
push ebx
push eax
mov ecx, esi
call fcn.00421520
add esp, 0xc
call fcn.00423660
sub eax, ebx
je 0x419394
sub eax, 2
mov esi, 5
je 0x419396
mov esi, dword [edi]
mov ecx, dword [esp + 0x18]
push str.CAPT
push ecx
call fcn.00404f40
mov ebx, dword [esp + 0x34]
add esp, 8
test al, al
je 0x4193c6
cmp dword [ebx + 0x668], 0
je 0x4193c6
call fcn.00425750
test eax, eax
jne 0x4193c6
mov dword [esp + 0x68], eax
mov edx, dword [ebx + 0x634]
mov eax, dword [edi + 4]
mov ecx, dword [esp + 0x48]
push edx
push eax
push esi
lea edx, [esp + 0x538]
call fcn.004287b0
add esp, 0xc
mov esi, eax
neg esi
sbb esi, esi
inc esi
mov dword [esp + 0x6c], esi
je 0x419452
mov ecx, 0x5b69a4
lea eax, [esp + 0x11c]
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x419426
test dx, dx
je 0x419422
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x419426
add eax, 4
add ecx, 4
test dx, dx
jne 0x419400
xor eax, eax
jmp 0x41942b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x419452
push 0x5b69a4
lea ecx, [esp + 0x120]
push 1
push ecx
lea ecx, [esp + 0x8c]
mov edx, 0x5b69a4
call fcn.00421520
add esp, 0xc
cmp esi, 1
jne 0x419498
call fcn.004588b0
test dword [eax + 0x14], 0x800
je 0x41947b
mov eax, dword [edi + 4]
mov edx, dword [ebx + 0x164]
lea ecx, [ebx + 0x15c]
push eax
push edx
call fcn.0046c98a
cmp dword [esp + 0x50], 0
jne 0x41949e
lea ecx, [esp + 0x324]
call fcn.0041cbc0
mov dword [esp + 0x64], 1
jmp 0x41949e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, 1
lea esi, [esp + 0x80]
mov dword [esp + 0x60], ebx
mov byte [esp + 0x1fe8], 0xb
call fcn.004035c0
mov edx, dword [esp + 0x2c]
mov eax, dword [edx + 0x130]
cmp byte [eax + 0x6c], 0
jne 0x4195b0
mov ecx, dword [esp + 0x34]
mov ecx, dword [ecx + 4]
call fcn.00412470
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x41951d
call fcn.00412a70
lea edx, [esp + 0x18]
push edx
push 0x2001f
push 0
push str.SOFTWARECanonVDCSETUPVDCUser
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x2c], 0
call esi
test eax, eax
jne 0x41951d
mov eax, dword [esp + 0x18]
push eax
xor ebx, ebx
call edi
call fcn.004163a0
test eax, eax
je 0x4195bc
call fcn.00415fe0
xor ecx, ecx
push 0x616
push ecx
lea edx, [esp + 0xd56]
push edx
mov dword [esp + 0x3c], 0
mov word [esp + 0xd58], cx
call fcn.0055ca80
add esp, 0xc
push str.DIASUser
push str.SOFTWARECanonDIASSETUP
lea eax, [esp + 0xd54]
push str._s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [esp + 0x30]
push ecx
push 0x2001f
push 0
lea edx, [esp + 0xd58]
push edx
push reloc.OLEAUT32.dll_SysReAllocString
call esi
test eax, eax
jne 0x4195bc
mov eax, dword [esp + 0x30]
xor esi, esi
push eax
mov dword [esp + 0x74], esi
call edi
mov dword [esp + 0x30], esi
call fcn.00425310
mov edi, eax
jmp 0x4195c7
cmp dword [esp + 0x60], 0
mov ebx, 1
je 0x4195c5
call fcn.00425310
mov edi, eax
jmp 0x4195c7
mov edi, ebx
mov ecx, dword [esp + 0x34]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp dword [esp + 0x5c], 1
jne 0x4195f1
lea esi, [esp + 0x1774]
call fcn.0041baa0
cmp eax, 1
jne 0x4195f1
mov ecx, esi
call fcn.0045da30
cmp dword [esp + 0x64], 1
jne 0x419607
call fcn.00413710
mov ecx, str.SPOOLER
call fcn.00413910
mov eax, dword [esp + 0x24]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x54], esp
mov esi, esp
push eax
call fcn.00404900
add eax, 0x10
add esp, 4
mov dword [esi], eax
call fcn.0041d4e0
add esp, 4
cmp dword [esp + 0x6c], 0
jne 0x4196a5
push 6
push str.return___08x
lea edx, [esp + 0x18]
push 2
push edx
call fcn.0044cd10
add esp, 0x10
lea ecx, [esp + 0x24]
call fcn.004037a0
lea ecx, [esp + 0x4c]
call fcn.004037a0
lea ecx, [esp + 0x40]
call fcn.004037a0
lea ecx, [esp + 0x58]
call fcn.004037a0
lea ecx, [esp + 0x38]
call fcn.004037a0
lea ecx, [esp + 0x1c]
call fcn.004037a0
lea ecx, [esp + 0x28]
call fcn.004037a0
lea ecx, [esp + 0x10]
mov dword [esp + 0x1fe8], 0xffffffff
call fcn.0044cc70
mov eax, 6
jmp 0x4197d5
test ebx, ebx
je 0x41972f
cmp dword [esp + 0x70], 0
je 0x41972f
test edi, edi
je 0x41972f
cmp dword [esp + 0x68], 0
je 0x41972f
push 0
push str.return___08x
lea eax, [esp + 0x18]
push 2
push eax
call fcn.0044cd10
add esp, 0x10
lea ecx, [esp + 0x24]
call fcn.004037a0
lea ecx, [esp + 0x4c]
call fcn.004037a0
lea ecx, [esp + 0x40]
call fcn.004037a0
lea ecx, [esp + 0x58]
call fcn.004037a0
lea ecx, [esp + 0x38]
call fcn.004037a0
lea ecx, [esp + 0x1c]
call fcn.004037a0
lea ecx, [esp + 0x28]
call fcn.004037a0
lea ecx, [esp + 0x10]
mov dword [esp + 0x1fe8], 0xffffffff
call fcn.0044cc70
xor eax, eax
jmp 0x4197d5
push 5
push str.return___08x
lea ecx, [esp + 0x18]
push 2
push ecx
call fcn.0044cd10
add esp, 0x10
lea ecx, [esp + 0x24]
call fcn.004037a0
lea ecx, [esp + 0x4c]
call fcn.004037a0
lea ecx, [esp + 0x40]
call fcn.004037a0
lea ecx, [esp + 0x58]
call fcn.004037a0
lea ecx, [esp + 0x38]
call fcn.004037a0
lea ecx, [esp + 0x1c]
call fcn.004037a0
lea ecx, [esp + 0x28]
call fcn.004037a0
lea ecx, [esp + 0x10]
mov dword [esp + 0x1fe8], 0xffffffff
call fcn.0044cc70
mov eax, 5
jmp 0x4197d5
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 1
push str.return___08x
push 2
lea edx, [esp + 0x1c]
push edx
call fcn.0044cd10
add esp, 0x10
lea ecx, [esp + 0x10]
mov dword [esp + 0x1fe8], 0xffffffff
call fcn.0044cc70
mov eax, 1
mov ecx, dword [esp + 0x1fe0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1fc8]
xor ecx, esp
call fcn.0055649d
mov esp, ebp
pop ebp
ret