Function at 0x4bac00
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a63bb
mov eax, dword fs:[0]
push eax
sub esp, 0x960
mov eax, dword [0x608554]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0x958], edi
mov eax, dword [ebp + 8]
push eax
push 0xbdf
mov dword [ebp - 0x95c], edi
call fcn.00558cc1
lea esi, [edi + 0xa8]
mov dword [ebp - 4], 0
mov ecx, esi
mov dword [edi], vtable.CBaseDlgPrinterSelectDirect.0
mov dword [ebp - 0x958], esi
call fcn.0055247d
mov dword [esi], vtable.CListCtrl.0
lea esi, [edi + 0x128]
mov byte [ebp - 4], 1
mov ecx, esi
mov dword [ebp - 0x958], esi
call fcn.0055247d
mov dword [esi], vtable.CListCtrl.0
lea esi, [edi + 0x1a8]
mov byte [ebp - 4], 2
mov ecx, esi
mov dword [ebp - 0x958], esi
call fcn.0055247d
mov dword [esi], vtable.CListCtrl.0
lea esi, [edi + 0x230]
mov byte [ebp - 4], 3
mov ecx, esi
mov dword [ebp - 0x958], esi
call fcn.0055247d
mov dword [esi], vtable.CTabCtrl.0
lea ecx, [edi + 0x2b8]
mov byte [ebp - 4], 4
call fcn.004a2a90
lea ecx, [edi + 0x340]
mov byte [ebp - 4], 5
call fcn.004a2a90
lea esi, [edi + 0x3c8]
mov byte [ebp - 4], 6
mov ecx, esi
mov dword [ebp - 0x958], esi
call fcn.0055247d
mov dword [esi], vtable.CButton.0
lea esi, [edi + 0x448]
mov byte [ebp - 4], 7
mov ecx, esi
mov dword [ebp - 0x958], esi
call fcn.0055247d
mov dword [esi], vtable.CButton.0
lea esi, [edi + 0x4c8]
mov byte [ebp - 4], 8
mov ecx, esi
mov dword [ebp - 0x958], esi
call fcn.0055247d
mov dword [esi], vtable.CButton.0
lea esi, [edi + 0x548]
mov byte [ebp - 4], 9
mov ecx, esi
mov dword [ebp - 0x958], esi
call fcn.0055247d
mov dword [esi], vtable.CButton.0
lea ecx, [edi + 0x5c8]
mov byte [ebp - 4], 0xa
call fcn.004a2330
lea esi, [edi + 0x678]
mov byte [ebp - 4], 0xb
mov ecx, esi
mov dword [ebp - 0x958], esi
call fcn.0055247d
mov dword [esi], vtable.CStatic.0
mov dword [edi + 0x704], 0
mov dword [edi + 0x708], 0
mov dword [edi + 0x70c], 0
mov dword [edi + 0x710], 0
mov dword [edi + 0x714], 0
mov dword [edi + 0x718], 0
mov dword [edi + 0x71c], 0
mov dword [edi + 0x720], 0
mov dword [edi + 0x724], 0
mov dword [edi + 0x728], 0
mov dword [edi + 0x72c], 0
mov dword [edi + 0x730], 0
lea esi, [edi + 0x740]
mov byte [ebp - 4], 0x10
mov ecx, esi
mov dword [ebp - 0x958], esi
call fcn.0055247d
mov dword [esi], vtable.CButton.0
lea eax, [edi + 0x7d0]
xor ecx, ecx
mov dword [eax], vtable.UtilityDeviceDiscovery.0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x44], 7
mov word [eax + 0x30], cx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x18], ecx
push ecx
push 0x5d67c0
lea ecx, [ebp - 0x954]
mov byte [ebp - 4], 0x12
call fcn.0040a480
mov byte [ebp - 4], 0x13
mov ecx, dword [0x608f30]
cmp ecx, 0x608f30
je 0x4baecb
test byte [ecx + 0x1c], 1
je 0x4baecb
cmp dword [0x608f68], 8
mov eax, 0x608f54
mov edx, 0x5d6d08
cmovae eax, dword [0x608f54]
push eax
push dword [ecx + 0x14]
push dword [ecx + 0x10]
mov ecx, 0xa
call fcn.00401840
add esp, 0xc
push 0xfa0
push dword [0x61850c]
call dword [sym.imp.USER32.dll_LoadIconW]
push 0x800
mov dword [edi + 0x2b0], eax
lea eax, [ebp - 0x814]
push 0
push eax
call fcn.00571c00
add esp, 0xc
mov dword [ebp - 0x8ac], 0
xor eax, eax
mov dword [ebp - 0x8a8], 7
lea ecx, [ebp - 0x8bc]
mov word [ebp - 0x8bc], ax
push eax
push 0x5c6930
call fcn.004035d0
xor eax, eax
mov byte [ebp - 4], 0x14
push eax
push 0x5c6930
lea ecx, [ebp - 0x8a4]
mov dword [ebp - 0x894], 0
mov dword [ebp - 0x890], 7
mov word [ebp - 0x8a4], ax
call fcn.004035d0
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x814]
mov ecx, dword [0x6184f0]
push eax
push str.TEMPPATH
mov ecx, dword [ecx + 0x1c]
call fcn.004f65f0
push 0xc
xor eax, eax
mov dword [ebp - 0x81c], 0
push str.CDDI_SDK.dll
lea ecx, [ebp - 0x82c]
mov dword [ebp - 0x818], 7
mov word [ebp - 0x82c], ax
call fcn.004035d0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x88c]
push 1
xor eax, eax
mov dword [ebp - 0x87c], 0
push 0x5c692c
mov dword [ebp - 0x878], 7
mov word [ebp - 0x88c], ax
call fcn.004035d0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x874]
push 3
xor eax, eax
mov dword [ebp - 0x864], 0
push 0x5c7af8
mov dword [ebp - 0x860], 7
mov word [ebp - 0x874], ax
call fcn.004035d0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x85c]
push 1
xor eax, eax
mov dword [ebp - 0x84c], 0
push 0x5c692c
mov dword [ebp - 0x848], 7
mov word [ebp - 0x85c], ax
call fcn.004035d0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x814]
xor eax, eax
mov dword [ebp - 0x834], 0
mov dword [ebp - 0x830], 7
mov word [ebp - 0x844], ax
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bb070
sub ecx, edx
lea eax, [ebp - 0x814]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x844]
call fcn.004035d0
lea eax, [ebp - 0x85c]
mov byte [ebp - 4], 0x1a
push eax
lea edx, [ebp - 0x844]
lea ecx, [ebp - 0x91c]
call fcn.00425880
lea ecx, [ebp - 0x874]
mov byte [ebp - 4], 0x1b
push ecx
mov edx, eax
lea ecx, [ebp - 0x904]
call fcn.00425880
lea ecx, [ebp - 0x88c]
mov byte [ebp - 4], 0x1c
push ecx
mov edx, eax
lea ecx, [ebp - 0x8ec]
call fcn.00425880
lea ecx, [ebp - 0x82c]
mov byte [ebp - 4], 0x1d
push ecx
mov edx, eax
lea ecx, [ebp - 0x8d4]
call fcn.00425880
mov esi, eax
add esp, 0x10
lea eax, [ebp - 0x8bc]
cmp eax, esi
je 0x4bb136
mov ecx, eax
call fcn.00403570
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x8bc], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x8ac], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x8c0]
cmp edx, 8
jb 0x4bb176
mov ecx, dword [ebp - 0x8d4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb16c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc41
push edx
push ecx
call fcn.0056deb6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x8d8]
mov dword [ebp - 0x8c4], 0
mov dword [ebp - 0x8c0], 7
mov word [ebp - 0x8d4], ax
cmp edx, 8
jb 0x4bb1d7
mov ecx, dword [ebp - 0x8ec]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb1cd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc46
push edx
push ecx
call fcn.0056deb6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x8f0]
mov dword [ebp - 0x8dc], 0
mov dword [ebp - 0x8d8], 7
mov word [ebp - 0x8ec], ax
cmp edx, 8
jb 0x4bb238
mov ecx, dword [ebp - 0x904]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb22e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc4b
push edx
push ecx
call fcn.0056deb6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x908]
mov dword [ebp - 0x8f4], 0
mov dword [ebp - 0x8f0], 7
mov word [ebp - 0x904], ax
cmp edx, 8
jb 0x4bb299
mov ecx, dword [ebp - 0x91c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb28f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc50
push edx
push ecx
call fcn.0056deb6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x830]
mov dword [ebp - 0x90c], 0
mov dword [ebp - 0x908], 7
mov word [ebp - 0x91c], ax
cmp edx, 8
jb 0x4bb2fa
mov ecx, dword [ebp - 0x844]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb2f0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc55
push edx
push ecx
call fcn.0056deb6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x848]
mov dword [ebp - 0x834], 0
mov dword [ebp - 0x830], 7
mov word [ebp - 0x844], ax
cmp edx, 8
jb 0x4bb35b
mov ecx, dword [ebp - 0x85c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb351
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc5a
push edx
push ecx
call fcn.0056deb6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x860]
mov dword [ebp - 0x84c], 0
mov dword [ebp - 0x848], 7
mov word [ebp - 0x85c], ax
cmp edx, 8
jb 0x4bb3bc
mov ecx, dword [ebp - 0x874]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb3b2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc5f
push edx
push ecx
call fcn.0056deb6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x878]
mov dword [ebp - 0x864], 0
mov dword [ebp - 0x860], 7
mov word [ebp - 0x874], ax
cmp edx, 8
jb 0x4bb41d
mov ecx, dword [ebp - 0x88c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb413
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc64
push edx
push ecx
call fcn.0056deb6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x818]
mov dword [ebp - 0x87c], 0
mov dword [ebp - 0x878], 7
mov word [ebp - 0x88c], ax
cmp edx, 8
jb 0x4bb47e
mov ecx, dword [ebp - 0x82c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb474
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc69
push edx
push ecx
call fcn.0056deb6
add esp, 8
push 0x13
xor eax, eax
mov dword [ebp - 0x81c], 0
push str.DeviceDiscovery.dll
lea ecx, [ebp - 0x82c]
mov dword [ebp - 0x818], 7
mov word [ebp - 0x82c], ax
call fcn.004035d0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x844]
push 1
xor eax, eax
mov dword [ebp - 0x834], 0
push 0x5c692c
mov dword [ebp - 0x830], 7
mov word [ebp - 0x844], ax
call fcn.004035d0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x85c]
push 3
xor eax, eax
mov dword [ebp - 0x84c], 0
push 0x5c7af8
mov dword [ebp - 0x848], 7
mov word [ebp - 0x85c], ax
call fcn.004035d0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x874]
push 1
xor eax, eax
mov dword [ebp - 0x864], 0
push 0x5c692c
mov dword [ebp - 0x860], 7
mov word [ebp - 0x874], ax
call fcn.004035d0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x814]
xor eax, eax
mov dword [ebp - 0x87c], 0
mov dword [ebp - 0x878], 7
lea edx, [ecx + 2]
mov word [ebp - 0x88c], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4bb570
sub ecx, edx
lea eax, [ebp - 0x814]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x88c]
call fcn.004035d0
lea eax, [ebp - 0x874]
mov byte [ebp - 4], 0x22
push eax
lea edx, [ebp - 0x88c]
lea ecx, [ebp - 0x8d4]
call fcn.00425880
lea ecx, [ebp - 0x85c]
mov byte [ebp - 4], 0x23
push ecx
mov edx, eax
lea ecx, [ebp - 0x8ec]
call fcn.00425880
lea ecx, [ebp - 0x844]
mov byte [ebp - 4], 0x24
push ecx
mov edx, eax
lea ecx, [ebp - 0x904]
call fcn.00425880
lea ecx, [ebp - 0x82c]
mov byte [ebp - 4], 0x25
push ecx
mov edx, eax
lea ecx, [ebp - 0x91c]
call fcn.00425880
mov esi, eax
add esp, 0x10
lea eax, [ebp - 0x8a4]
cmp eax, esi
je 0x4bb636
mov ecx, eax
call fcn.00403570
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x8a4], xmm0
movq xmm0, qword [esi + 0x10]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
movq qword [ebp - 0x894], xmm0
mov word [esi], ax
mov edx, dword [ebp - 0x908]
cmp edx, 8
jb 0x4bb676
mov ecx, dword [ebp - 0x91c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb66c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc6e
push edx
push ecx
call fcn.0056deb6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x8f0]
mov dword [ebp - 0x90c], 0
mov dword [ebp - 0x908], 7
mov word [ebp - 0x91c], ax
cmp edx, 8
jb 0x4bb6d7
mov ecx, dword [ebp - 0x904]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb6cd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc73
push edx
push ecx
call fcn.0056deb6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x8d8]
mov dword [ebp - 0x8f4], 0
mov dword [ebp - 0x8f0], 7
mov word [ebp - 0x904], ax
cmp edx, 8
jb 0x4bb738
mov ecx, dword [ebp - 0x8ec]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb72e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc78
push edx
push ecx
call fcn.0056deb6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x8c0]
mov dword [ebp - 0x8dc], 0
mov dword [ebp - 0x8d8], 7
mov word [ebp - 0x8ec], ax
cmp edx, 8
jb 0x4bb799
mov ecx, dword [ebp - 0x8d4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb78f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc7d
push edx
push ecx
call fcn.0056deb6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x878]
mov dword [ebp - 0x8c4], 0
mov dword [ebp - 0x8c0], 7
mov word [ebp - 0x8d4], ax
cmp edx, 8
jb 0x4bb7fa
mov ecx, dword [ebp - 0x88c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb7f0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc82
push edx
push ecx
call fcn.0056deb6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x860]
mov dword [ebp - 0x87c], 0
mov dword [ebp - 0x878], 7
mov word [ebp - 0x88c], ax
cmp edx, 8
jb 0x4bb85b
mov ecx, dword [ebp - 0x874]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb851
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc87
push edx
push ecx
call fcn.0056deb6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x848]
mov dword [ebp - 0x864], 0
mov dword [ebp - 0x860], 7
mov word [ebp - 0x874], ax
cmp edx, 8
jb 0x4bb8bc
mov ecx, dword [ebp - 0x85c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb8b2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc8c
push edx
push ecx
call fcn.0056deb6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x830]
mov dword [ebp - 0x84c], 0
mov dword [ebp - 0x848], 7
mov word [ebp - 0x85c], ax
cmp edx, 8
jb 0x4bb91d
mov ecx, dword [ebp - 0x844]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb913
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc91
push edx
push ecx
call fcn.0056deb6
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x818]
mov dword [ebp - 0x834], 0
mov dword [ebp - 0x830], 7
mov word [ebp - 0x844], ax
cmp edx, 8
jb 0x4bb97e
mov ecx, dword [ebp - 0x82c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bb974
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc96
push edx
push ecx
call fcn.0056deb6
add esp, 8
cmp dword [ebp - 0x8a8], 8
lea eax, [ebp - 0x8bc]
push 8
cmovae eax, dword [ebp - 0x8bc]
push 0
push eax
mov dword [edi + 0x734], 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
cmp dword [ebp - 0x890], 8
lea esi, [ebp - 0x8a4]
mov dword [edi + 0x734], eax
cmovae esi, dword [ebp - 0x8a4]
xor eax, eax
mov edx, esi
mov dword [ebp - 0x81c], 0
mov dword [ebp - 0x818], 7
mov word [ebp - 0x82c], ax
lea ecx, [edx + 2]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x4bb9e3
sub edx, ecx
lea ecx, [ebp - 0x82c]
sar edx, 1
push edx
push esi
call fcn.004035d0
lea eax, [ebp - 0x82c]
push eax
lea ecx, [edi + 0x7d0]
call fcn.00401a50
mov edx, dword [ebp - 0x818]
mov esi, eax
cmp edx, 8
jb 0x4bba53
mov ecx, dword [ebp - 0x82c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4bba49
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bbc9b
push edx
push ecx
call fcn.0056deb6
add esp, 8
cmp dword [edi + 0x734], 0
je 0x4bbab4
test esi, esi
je 0x4bbab4
push 0x138
mov dword [0x618418], edi
mov byte [ebp - 4], 0x26
call fcn.0055070f
add esp, 4
mov dword [ebp - 0x958], eax
mov byte [ebp - 4], 0x27
test eax, eax
je 0x4bbaa0
push 0
mov ecx, eax
call fcn.004cb260
mov dword [edi + 0x738], eax
mov dword [ebp - 4], 0x15
jmp 0x4bbb39
xor eax, eax
mov dword [ebp - 4], 0x15
mov dword [edi + 0x738], eax
jmp 0x4bbb39
push 0
push 0
lea eax, [ebp - 0x958]
push eax
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0
push 0x1300
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov ecx, dword [0x608f30]
cmp ecx, 0x608f30
je 0x4bbb1e
test byte [ecx + 0x1c], 4
je 0x4bbb1e
cmp dword [0x608f68], 8
mov eax, 0x608f54
push dword [ebp - 0x958]
cmovae eax, dword [0x608f54]
mov edx, 0x5d6d08
push eax
push dword [ecx + 0x14]
push dword [ecx + 0x10]
mov ecx, 0xb
call fcn.00405920
add esp, 0x10
push 0
push 0x40
push dword [ebp - 0x958]
call fcn.00563da4
push dword [ebp - 0x958]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [edi + 0x704]
mov dword [edi + 0x708], eax
mov eax, dword [0x6184f0]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x7f4]
mov dword [edi + 0x7c4], eax
call fcn.0049ca70
cmp eax, 2
jne 0x4bbb6d
mov dword [edi + 0x7c4], 0
mov dword [edi + 0x7c8], 0
mov dword [edi + 0x7cc], 0
mov dword [edi + 0x700], 0
mov dword [edi + 0x228], 0
mov eax, dword [edi + 0x710]
mov dword [edi + 0x714], eax
mov eax, dword [edi + 0x71c]
mov dword [edi + 0x720], eax
mov eax, dword [edi + 0x728]
mov dword [edi + 0x72c], eax
mov byte [ebp - 0x950], 1
mov ecx, dword [0x608f30]
cmp ecx, 0x608f30
je 0x4bbc00
test byte [ecx + 0x1c], 1
je 0x4bbc00
cmp dword [0x608f68], 8
mov eax, 0x608f54
mov edx, 0x5d6d08
cmovae eax, dword [0x608f54]
push eax
push dword [ecx + 0x14]
push dword [ecx + 0x10]
mov ecx, 0xc
call fcn.00401840
add esp, 0xc
lea ecx, [ebp - 0x8a4]
call fcn.00403570
lea ecx, [ebp - 0x8bc]
call fcn.00403570
lea ecx, [ebp - 0x954]
call fcn.0040a570
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0056d977
mov esp, ebp
pop ebp
ret 4
call fcn.00574908
call fcn.00574908
call fcn.00574908
call fcn.00574908
call fcn.00574908
call fcn.00574908
call fcn.00574908
call fcn.00574908
call fcn.00574908
call fcn.00574908
call fcn.00574908
call fcn.00574908
call fcn.00574908
call fcn.00574908
call fcn.00574908
call fcn.00574908
call fcn.00574908
call fcn.00574908
call fcn.00574908
mov ecx, dword [ebp - 0x960]
call fcn.00551258
mov eax, dword [ebp - 0x95c]
mov eax, dword [eax + 0x734]
test eax, eax
je 0x4bbcc2
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push 0xa39
mov ecx, 0x618420
call fcn.0049fed0
push eax
call fcn.00502d80
add esp, 8
lea ecx, [ebp - 0x96c]
call fcn.004b1250
push 0x604f00
lea eax, [ebp - 0x96c]
push eax
call fcn.00571ef7
int3