Function at 0x441ce0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58008e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1824
call fcn.0054e3f0
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov esi, ecx
mov dword [ebp - 0x10], esp
test ebx, ebx
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], 0
je 0x4433cd
push ebx
call fcn.00464ac0
mov eax, dword [esi + 0x1c]
add esp, 4
mov ecx, ebx
push eax
call fcn.00522250
mov ecx, dword [esi + 0x144]
mov dword [ebx], ecx
mov ecx, esi
call fcn.00445610
test al, al
mov byte [ebp - 0x2d], al
jne 0x441d53
mov byte [ebx + 0x2c5], 0
jmp 0x441d5a
mov al, byte [ebp + 0x14]
test al, al
je 0x441d64
mov eax, dword [esi + 0x2a4]
test eax, eax
jle 0x441d6b
mov byte [ebx + 0x2cf], 1
mov esi, dword [esi + 0x2a4]
test esi, esi
mov dword [ebp - 0x5c], esi
jle 0x441dde
mov edx, dword [ebp - 0x18]
mov al, byte [edx + 0xd80]
test al, al
jne 0x441dde
mov eax, edx
mov ecx, dword [eax + 0x1c0]
mov edx, dword [ecx + 8]
dec edx
xor eax, eax
cmp eax, edx
jg 0x441dde
mov edi, dword [ecx + 4]
mov esi, eax
shl esi, 4
mov esi, dword [edi + esi]
mov edi, dword [ebp - 0x5c]
cmp dword [esi + 0x390], edi
je 0x441db0
inc eax
jmp 0x441d93
test eax, eax
jl 0x441dde
mov ecx, dword [ecx + 4]
shl eax, 4
mov eax, dword [ecx + eax]
test eax, eax
je 0x441dde
mov ecx, dword [eax + 0x3a4]
add eax, 0x3a0
test ecx, ecx
jg 0x441dde
jl 0x441dd7
cmp dword [eax], 0
ja 0x441dde
mov byte [ebx + 0x2cf], 0
mov ecx, 0x63e5f8
call fcn.004defd0
mov edi, dword [ebp - 0x18]
mov dl, byte [0x63e5fc]
mov byte [ebp - 0x11], dl
mov eax, dword [edi + 0x2a4]
test eax, eax
jle 0x441e05
mov byte [0x63e5fc], 0
mov eax, dword [0x639ad4]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x34], eax
lea esi, [ebx + 0x20]
lea eax, [ebp - 0x2c]
push 0
push eax
mov ecx, esi
mov byte [ebp - 4], 2
call fcn.005080e0
mov ecx, dword [esi]
lea edx, [ebp - 0x34]
push ecx
push 0x615e9c
push edx
call fcn.00562ecb
add esp, 0xc
mov ecx, ebx
push 1
call fcn.005226a0
mov ecx, dword [0x63e61c]
test ecx, ecx
je 0x441e59
mov eax, dword [ebx + 0x390]
push eax
push 1
call fcn.004bbb90
mov eax, dword [edi + 0x5c]
mov byte [ebp - 0x19], 0
test eax, eax
je 0x441e95
mov cl, byte [eax + 0x36]
test cl, cl
je 0x441e7b
mov ecx, dword [ebx + 0x390]
mov dword [edi + 0xb90], ecx
mov byte [eax + 0x36], 0
mov eax, dword [edi + 0x5c]
mov cl, byte [eax + 0x38]
test cl, cl
je 0x441e95
mov edx, dword [ebx + 0x390]
mov dword [edi + 0xb94], edx
mov byte [eax + 0x38], 0
test byte [ebp + 0x24], 8
je 0x441ee9
mov eax, dword [ebx + 0x44]
cmp eax, 1
je 0x441ea8
cmp eax, 2
jne 0x441ee9
push 1
push 0
push 0
push 0
push ebx
mov ecx, edi
mov byte [ebx + 0x710], 1
mov byte [ebx + 0x2c0], 1
call fcn.004414e0
test eax, eax
jne 0x441ed7
mov al, byte [ebp - 0x11]
mov byte [0x63e5fc], al
jmp 0x441f82
mov byte [ebx + 0x710], 0
mov byte [ebx + 0x2c0], 0
mov byte [ebp - 0x19], 1
test byte [ebp + 0x24], 0x20
je 0x441fba
mov ecx, dword [ebp - 0x2c]
push 0x3f
push ecx
mov byte [ebp - 0x2e], 1
call fcn.0054e030
add esp, 8
test eax, eax
jne 0x441f47
lea ecx, [ebp - 0x1834]
call fcn.004e2750
mov edx, dword [ebp - 0x2c]
push 0
push edx
lea ecx, [ebp - 0x1834]
mov byte [ebp - 4], 3
call fcn.004e3640
test eax, eax
je 0x441f31
mov byte [ebp - 0x2e], 0
lea ecx, [ebp - 0x1834]
mov byte [ebp - 4], 2
call fcn.004e27a0
mov al, byte [ebp - 0x2e]
test al, al
je 0x441fba
mov eax, dword [ebx + 0x44]
cmp eax, 1
je 0x441f5e
cmp eax, 2
je 0x441f5e
mov al, byte [ebp - 0x11]
mov byte [0x63e5fc], al
jmp 0x441f82
push 1
push 1
push 0
push 0
push ebx
mov ecx, edi
mov byte [ebx + 0x710], 1
call fcn.004414e0
test eax, eax
jne 0x441faf
mov cl, byte [ebp - 0x11]
mov byte [0x63e5fc], cl
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
call fcn.0056a100
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.0056a100
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
mov byte [ebx + 0x710], 0
mov byte [ebp - 0x19], 1
mov eax, dword [ebp + 0x24]
test ah, 1
je 0x441fe2
mov eax, dword [ebx + 0x350]
mov byte [ebx + 0x165], 1
test eax, eax
je 0x44204b
lea edx, [ebp + 0x24]
push 4
mov dword [ebp + 0x24], 1
push edx
jmp 0x44203b
test al, 4
je 0x44204b
mov esi, dword [ebp + 0x1c]
test esi, esi
je 0x44204b
push esi
call fcn.0054e46e
add esp, 4
test eax, eax
je 0x44204b
push 0x2e
push esi
call fcn.0054e65e
add esp, 8
test eax, eax
je 0x44204b
push 8
push 0x61ad24
push eax
call fcn.005501e0
add esp, 0xc
test eax, eax
je 0x44204b
mov eax, dword [ebx + 0x350]
mov byte [ebx + 0x165], 1
test eax, eax
je 0x44204b
lea ecx, [ebp + 0x24]
push 4
mov dword [ebp + 0x24], 1
push ecx
push 4
push 0
push str.bChCnt
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [edi + 0x2a4]
test eax, eax
mov dword [ebp - 0x5c], eax
jle 0x442835
mov edx, dword [ebp - 0x18]
mov edx, dword [edx + 0x1c0]
mov ecx, dword [edx + 8]
dec ecx
xor eax, eax
cmp eax, ecx
mov dword [ebp - 0x50], eax
jg 0x442835
mov edi, dword [edx + 4]
mov esi, eax
shl esi, 4
mov esi, dword [edi + esi]
mov edi, dword [ebp - 0x5c]
cmp dword [esi + 0x390], edi
jne 0x44228d
test eax, eax
mov dword [ebp - 0x5c], eax
jl 0x442835
mov ecx, dword [edx + 4]
shl eax, 4
mov esi, dword [ecx + eax]
test esi, esi
mov dword [ebp + 0x24], esi
je 0x442835
mov al, byte [ebp - 0x19]
test al, al
jne 0x4420d5
mov ecx, dword [ebp - 0x18]
push 0
push 0
push 0
push 0
push ebx
mov byte [ebx + 0x710], 1
call fcn.004414e0
mov byte [ebx + 0x710], 0
mov eax, dword [esi + 0x138]
mov ecx, dword [esi + 0x13c]
mov edx, eax
or edx, ecx
je 0x442835
cmp eax, dword [ebx + 0x138]
jne 0x442835
cmp ecx, dword [ebx + 0x13c]
jne 0x442835
mov eax, dword [ebx + 0x3c]
mov ecx, dword [esi + 0x3c]
mov edx, dword [ebx + 0x20]
push eax
mov eax, dword [esi + 0x20]
push ecx
push edx
push eax
mov ecx, 0x63e568
call fcn.0041fb90
mov eax, dword [ebx + 0x124]
mov ecx, dword [esi + 0x124]
mov edx, dword [ebx + 0x120]
mov edi, dword [esi + 0x120]
push eax
push ecx
push edx
push edi
mov ecx, 0x63e558
call fcn.0041fa50
mov eax, dword [ebx + 0x14c]
mov ecx, dword [esi + 0x14c]
mov edx, dword [ebx + 0xe8]
mov edi, dword [esi + 0xe8]
push eax
push ecx
push edx
push edi
mov ecx, 0x63e548
call fcn.0041fa50
mov ecx, dword [ebp - 0x18]
mov al, byte [ecx + 0xd80]
test al, al
jne 0x442443
mov eax, dword [esi + 0x3a4]
test eax, eax
jg 0x442443
jl 0x442198
mov eax, dword [esi + 0x3a0]
test eax, eax
ja 0x442443
mov eax, dword [esi + 0x5c]
test eax, eax
je 0x4421b1
mov eax, dword [esi + 0x54]
test eax, eax
jne 0x4421a9
lea eax, [esi + 0x58]
push eax
mov ecx, ebx
call fcn.005225b0
mov esi, dword [esi + 0x60]
test esi, esi
je 0x4421c0
push esi
mov ecx, ebx
call fcn.0051e440
mov edx, dword [ebp + 0x24]
lea esi, [ebx + 0x94]
mov dword [ebp + 0x14], esi
mov eax, dword [edx + 0x394]
lea edi, [edx + 0x94]
mov dword [ebx + 0x394], eax
mov ecx, dword [edx + 0x2b8]
mov dword [ebx + 0x2b8], ecx
mov al, byte [edx + 0x2c4]
mov byte [ebx + 0x2c4], al
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, dword [ebp + 0x14]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov cl, byte [edx + 0x16e]
mov byte [ebx + 0x16e], cl
mov dl, byte [edx + 0x2c5]
mov byte [ebx + 0x2c5], dl
mov ecx, dword [0x63e61c]
test ecx, ecx
je 0x442266
cmp dword [ebx + 0x394], 1
je 0x442266
mov eax, dword [ebx + 0x390]
push 1
push eax
call fcn.004bbbd0
mov ecx, dword [ebx + 0x390]
mov edx, dword [ebx + 0x394]
push ecx
mov ecx, dword [0x63e61c]
push edx
call fcn.004bbb90
mov eax, dword [ebx + 0x390]
push 0
push 0
push eax
lea ecx, [ebx + 0x20]
call fcn.0052b680
mov ecx, dword [ebp + 0x24]
mov byte [ebp - 4], 5
call fcn.005245b0
mov edi, dword [ebp - 0x50]
mov esi, dword [ebp - 0x18]
jmp 0x4422a2
inc eax
jmp 0x44206b
mov ecx, dword [ebp + 0x24]
mov eax, dword [esi + 0x18c]
mov dword [ebp - 0x80], 1
mov dword [ebp - 4], 4
mov edx, dword [ecx + 0x390]
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x78], edx
mov edx, dword [eax + 0x1c]
push ecx
push 0xffffffffffffffff
push 0x100d
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
jl 0x4422f3
mov ecx, dword [esi + 0x18c]
push 0
push eax
push 0x1008
mov eax, dword [ecx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x63e61c]
test ecx, ecx
je 0x44230e
mov edx, dword [ebp + 0x24]
push 0
mov eax, dword [edx + 0x390]
push eax
call fcn.004bbbd0
mov esi, dword [esi + 0x1c0]
mov edx, 1
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
sub eax, edi
shl edi, 4
dec eax
add ecx, edi
mov edi, edx
dec edx
test edi, edi
je 0x442333
add ecx, 0x10
jmp 0x442327
test eax, eax
je 0x442358
mov ecx, dword [esi + 4]
shl eax, 4
push eax
mov eax, dword [ebp - 0x5c]
lea edx, [eax + 1]
shl edx, 4
shl eax, 4
add edx, ecx
add eax, ecx
push edx
push eax
call fcn.0054ee90
add esp, 0xc
mov ecx, dword [esi + 8]
mov eax, dword [ebp + 0x24]
dec ecx
mov byte [ebp - 4], 7
test eax, eax
mov dword [esi + 8], ecx
je 0x44238a
mov esi, eax
mov ecx, esi
call fcn.0051e0a0
push esi
call fcn.005664c5
mov esi, dword [ebp - 0x18]
add esp, 4
jmp 0x44239b
mov esi, dword [ebp - 0x18]
jmp 0x44239b
push 1
push 1
push ebx
lea ecx, [esi + 0x468]
mov dword [ebp - 4], 2
call fcn.00475bc0
mov eax, dword [esi + 0x1c]
mov ecx, ebx
push eax
call fcn.00522250
mov ecx, ebx
call fcn.00522790
mov eax, dword [esi + 0x1fc]
test eax, eax
je 0x4423d6
push eax
mov ecx, esi
call fcn.00446a30
mov ecx, dword [ebx + 0x390]
mov eax, dword [esi + 0x18c]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
lea edx, [ebp - 0x98]
mov dword [ebp - 0x98], 1
mov dword [ebp - 0x90], ecx
mov eax, dword [eax + 0x1c]
push edx
push 0xffffffffffffffff
push 0x100d
push eax
call edi
test eax, eax
jl 0x442421
mov ecx, dword [esi + 0x484]
push 1
push eax
push 0x1013
push ecx
call edi
push 0x63e040
lea ecx, [esi + 0x2a8]
mov dword [esi + 0x2a4], 0
call fcn.0056a289
mov esi, dword [ebp - 0x18]
jmp 0x4427ef
mov dl, byte [ebp - 0x11]
mov byte [0x63e5fc], dl
mov edx, dword [ebx + 0x38]
test edx, edx
je 0x442469
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x442469
push edx
mov ecx, esi
call fcn.005248b0
mov eax, dword [0x639ad4]
mov dword [ebp + 0x20], eax
lea ecx, [ebp + 0x20]
push 0
push ecx
lea ecx, [ebx + 0x20]
mov byte [ebp - 4], 0xa
call fcn.005080e0
lea ecx, [ebp - 0x1834]
call fcn.004e2750
mov edx, dword [ebx + 0x160]
mov eax, dword [ebp + 0x20]
push edx
push eax
lea ecx, [ebp - 0x1834]
mov byte [ebp - 4], 0xb
call fcn.004e2ac0
test eax, eax
je 0x4424be
push 1
push esi
lea ecx, [ebp - 0x1834]
call fcn.004e3060
test eax, eax
je 0x4424de
lea ecx, [ebp - 0x1834]
mov byte [ebp - 4], 0xa
call fcn.004e27a0
lea ecx, [ebp + 0x20]
mov byte [ebp - 4], 2
call fcn.0056a100
jmp 0x4433b5
mov ecx, dword [ebx + 0x30]
mov edx, dword [ebx + 0x2c]
push ecx
push edx
mov ecx, esi
call fcn.00522450
mov eax, dword [esi + 0x3c]
mov edi, dword [ebx + 0x3c]
test eax, eax
mov dword [ebp + 0x14], edi
je 0x442503
push eax
call fcn.005664c5
add esp, 4
test edi, edi
jne 0x44250c
mov dword [esi + 0x3c], edi
jmp 0x442570
mov edi, dword [ebp + 0x14]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x442520
mov dword [esi + 0x3c], eax
jmp 0x442570
mov edi, dword [ebp + 0x14]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.0056649c
mov edx, eax
lea ecx, [esi + 0x20]
add esp, 4
test edx, edx
mov dword [ecx + 0x1c], edx
jne 0x44254d
push str.URL::set_Cookie__:_Not_enough_memory__n
call fcn.0052a8b0
jmp 0x442570
mov edi, dword [ebp + 0x14]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebp + 0x24]
mov edi, dword [ebx + 0x174]
test edi, edi
je 0x4425dc
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x4425aa
mov ecx, dword [ebx + 0x174]
lea edx, [esi + 0x174]
push ecx
push 0x615e9c
push edx
call fcn.00562ecb
add esp, 0xc
mov byte [esi + 0x170], 1
jmp 0x4425dc
mov al, byte [ebx + 0x170]
test al, al
je 0x4425dc
mov al, byte [ebx + 0x2c3]
test al, al
je 0x4425dc
push 0x63e040
lea ecx, [esi + 0x174]
call fcn.0056a289
mov byte [esi + 0x170], 1
mov byte [esi + 0x2c3], 1
push 0
call fcn.0054f551
mov dword [esi + 0x140], eax
mov eax, dword [ebx + 0x158]
mov ecx, dword [ebx + 0x154]
mov edx, dword [ebx + 0x150]
push eax
mov eax, dword [ebx + 0x14c]
push ecx
push edx
push eax
mov eax, dword [ebx + 0x148]
push eax
mov eax, dword [ebx + 0xe8]
mov edi, dword [ebx + 0x120]
push eax
mov eax, dword [ebx + 0x12c]
push eax
mov eax, dword [ebx + 0x128]
push eax
mov eax, dword [ebx + 0x124]
push eax
push edi
push esi
call fcn.00444670
mov eax, dword [esi + 0x390]
add esp, 0x30
add esi, 0x20
push eax
mov ecx, esi
call fcn.0052bdf0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0x390]
mov byte [ebp - 4], 0xc
mov dword [ebp + 0x18], ecx
mov edx, dword [edx + 0x1c0]
mov dword [ebp + 0x14], edx
mov eax, dword [edx + 8]
dec eax
xor esi, esi
cmp esi, eax
jg 0x442685
mov edx, dword [edx + 4]
mov edi, esi
shl edi, 4
mov edx, dword [edx + edi]
cmp dword [edx + 0x390], ecx
je 0x442688
mov edx, dword [ebp + 0x14]
inc esi
jmp 0x442668
or esi, 0xffffffff
mov eax, dword [ebx + 0x5d0]
mov ecx, ebx
test eax, eax
mov dword [ebp + 0x1c], esi
mov byte [ebp - 4], 0xd
setne byte [ebp + 0x17]
call fcn.005245b0
jmp 0x4426b0
mov al, byte [ebp + 0x17]
mov dword [ebp - 4], 0xc
test al, al
je 0x4426dc
xor edi, edi
cmp edi, 0xa
jge 0x4426dc
push 0x32
call fcn.00417f80
mov eax, dword [ebx + 0x5d0]
add esp, 4
test eax, eax
je 0x4426dc
inc edi
jmp 0x4426c0
mov ecx, dword [0x63e61c]
test ecx, ecx
je 0x4426f1
mov eax, dword [ebp + 0x18]
push 0
push eax
call fcn.004bbbd0
test esi, esi
jl 0x44274a
mov ecx, dword [ebp - 0x18]
mov edi, esi
shl edi, 4
mov ecx, dword [ecx + 0x1c0]
mov edx, 1
mov dword [ebp + 0x14], ecx
mov eax, dword [ecx + 8]
mov ecx, dword [ecx + 4]
sub eax, esi
dec eax
add ecx, edi
mov edi, edx
dec edx
test edi, edi
je 0x442722
add ecx, 0x10
jmp 0x442716
mov edi, dword [ebp + 0x14]
test eax, eax
je 0x442747
mov ecx, dword [edi + 4]
lea edx, [esi + 1]
shl edx, 4
shl eax, 4
shl esi, 4
add edx, ecx
push eax
add esi, ecx
push edx
push esi
call fcn.0054ee90
add esp, 0xc
dec dword [edi + 8]
test ebx, ebx
mov byte [ebp - 4], 0xf
je 0x442762
mov ecx, ebx
call fcn.0051e0a0
push ebx
call fcn.005664c5
add esp, 4
mov esi, dword [ebp - 0x18]
push 0x63e040
mov dword [ebp - 4], 0xb
lea ecx, [esi + 0x2a8]
mov dword [esi + 0x2a4], 0
call fcn.0056a289
mov al, byte [esi + 0xd80]
test al, al
je 0x4427b6
mov eax, dword [ebp + 0x24]
mov ecx, dword [esi + 0x1c]
mov eax, dword [eax + 0x390]
push eax
push 0x1468
push 0x111
push ecx
jmp 0x4427ce
mov edx, dword [ebp + 0x24]
mov eax, dword [edx + 0x390]
push eax
mov eax, dword [esi + 0x1c]
push 0x1431
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
lea ecx, [ebp - 0x1834]
mov byte [ebp - 4], 0xa
call fcn.004e27a0
lea ecx, [ebp + 0x20]
mov byte [ebp - 4], 2
call fcn.0056a100
mov eax, dword [esi + 0xd7c]
test eax, eax
je 0x442827
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x44281d
mov edx, dword [esi + 0xd7c]
push 0
push 0
push 0x10
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [esi + 0xd7c], 0
mov cl, byte [ebp - 0x11]
mov byte [0x63e5fc], cl
jmp 0x4433b5
mov al, byte [ebp - 0x2d]
mov dl, byte [ebp - 0x11]
test al, al
mov byte [0x63e5fc], dl
je 0x44284c
mov al, byte [ebp + 0x14]
test al, al
je 0x44285f
mov edi, dword [ebp - 0x18]
xor esi, esi
cmp dword [edi + 0x2a4], esi
jle 0x4429a2
jmp 0x442864
mov edi, dword [ebp - 0x18]
xor esi, esi
push 0x330
call fcn.0056649c
mov ecx, eax
add esp, 4
mov dword [ebp + 0x14], ecx
cmp ecx, esi
mov byte [ebp - 4], 0x12
je 0x442897
mov eax, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x18]
push esi
push eax
lea eax, [edi + 0x650]
push edx
push eax
call fcn.00424f60
mov esi, eax
jmp 0x442899
xor esi, esi
test esi, esi
mov byte [ebp - 4], 2
je 0x4433b5
mov cl, byte [ebp + 0x20]
lea eax, [esi + 0xa4]
mov byte [esi + 0xa1], cl
mov edx, dword [ebp - 0x2c]
push edx
push 0x615e9c
push eax
call fcn.00562ecb
mov ecx, dword [ebp - 0x34]
add esp, 0xc
lea edx, [esi + 0xa8]
push ecx
push 0x615e9c
push edx
call fcn.00562ecb
mov eax, dword [ebx + 0x390]
mov dword [esi + 0x70], ebx
mov dword [esi + 0x74], eax
mov ecx, dword [edi + 0x1c0]
mov dword [esi + 0x68], ecx
mov edx, dword [edi + 0x1c]
lea eax, [edi + 0x468]
add esp, 0xc
mov dword [esi + 0x6c], edx
mov dword [esi + 0x64], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call fcn.005669ff
push eax
push 0x82
mov ecx, esi
call fcn.00565d15
mov ecx, dword [esi + 0x1c]
push ecx
mov ecx, ebx
call fcn.005248a0
push 5
mov ecx, esi
call fcn.00569801
mov eax, dword [edi + 0x2a4]
test eax, eax
jle 0x4433b5
mov eax, dword [edi + 0xd7c]
test eax, eax
je 0x442987
mov eax, dword [esi + 0x1c]
lea edx, [ebp - 0x78]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [edi + 0xd7c]
mov edx, dword [ecx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x442987
mov ecx, dword [edi + 0xd7c]
lea eax, [ebp - 0x78]
push eax
push 0x1466
mov edx, dword [ecx + 0x1c]
push 0x111
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [esi + 0x1c]
push 0
push 0x1465
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x4433b5
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x60], esi
mov word [ebp - 0x64], si
lea ecx, [ebp - 0x68]
add edi, 0x650
push 1
push ecx
push edi
mov ecx, ebx
mov byte [ebp - 4], 0x13
call fcn.00525f70
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x38], esi
mov word [ebp - 0x3c], si
mov eax, dword [ebp + 0x18]
mov byte [ebp - 4], 0x14
cmp eax, esi
je 0x4429e9
push eax
call fcn.0054e46e
add esp, 4
test eax, eax
jne 0x4429e9
mov dword [ebp + 0x18], esi
mov eax, dword [ebp + 0x1c]
cmp eax, esi
je 0x442c08
push eax
call fcn.0054e46e
add esp, 4
test eax, eax
jne 0x442a09
mov dword [ebp + 0x1c], esi
jmp 0x442c08
mov edx, dword [ebp + 0x1c]
push 0x2e
push edx
call fcn.0054e65e
add esp, 8
cmp eax, esi
je 0x442c08
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x44], esi
mov word [ebp - 0x48], si
add eax, 2
lea ecx, [ebp + 0x20]
push eax
mov byte [ebp - 4], 0x15
call fcn.0056a1c0
mov edx, dword [ebp + 0x20]
lea eax, [ebp + 8]
lea ecx, [ebp - 0x4c]
push eax
push ecx
push edx
mov ecx, edi
mov byte [ebp - 4], 0x16
call fcn.00472fb0
test al, al
je 0x442bf0
mov eax, dword [ebp + 8]
mov dword [ebx + 0x2b8], eax
mov eax, dword [ebp - 0x4c]
cmp eax, esi
je 0x442a6c
mov edi, eax
jmp 0x442a72
lea edi, [ebp - 0x48]
lea eax, [ebp - 0x48]
push eax
call fcn.0054e46e
add esp, 4
cmp word [edi + eax*2 - 2], 0x5c
mov esi, 0x615f1c
jne 0x442a8d
mov esi, 0x63e044
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x442a97
lea eax, [ebp - 0x48]
mov ecx, 0x6168c4
test ecx, ecx
je 0x442bf0
test eax, eax
je 0x442bf0
test esi, esi
je 0x442bf0
xor edi, edi
push eax
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x8c], edi
mov dword [ebp - 0x84], edi
mov word [ebp - 0x88], di
call fcn.00402b60
push esi
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x50], edi
mov word [ebp - 0x54], di
call fcn.00402b60
mov edx, dword [ebp + 0x1c]
lea ecx, [ebp - 0x28]
push edx
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x20], edi
mov word [ebp - 0x24], di
call fcn.00402b60
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x19
call fcn.00401070
push 0x6168c4
lea ecx, [ebp - 0x74]
call fcn.00403500
mov esi, dword [ebp - 0x6c]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
call fcn.00403580
push eax
call fcn.0054e46e
add esp, 4
lea ecx, [ebp - 0x58]
mov edi, eax
call fcn.00403580
push eax
call fcn.0054e46e
mov dword [ebp + 0x24], edi
mov edi, eax
add esp, 4
lea ecx, [ebp - 0x8c]
add edi, esi
call fcn.00403580
push eax
call fcn.0054e46e
mov ecx, dword [ebp + 0x24]
add edi, ecx
add eax, edi
lea edx, [eax + eax + 2]
push edx
call fcn.0056649c
add esp, 8
mov dword [ebp - 0x68], eax
test eax, eax
je 0x442bbd
lea ecx, [ebp - 0x28]
call fcn.00403580
push eax
lea ecx, [ebp - 0x58]
call fcn.00403580
push eax
lea ecx, [ebp - 0x8c]
call fcn.00403580
push eax
lea ecx, [ebp - 0x74]
call fcn.00403580
push eax
mov eax, dword [ebp - 0x68]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [ebp - 0x68]
push ecx
call fcn.0054e46e
add esp, 0x18
mov dword [ebp - 0x60], eax
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x19
call fcn.00401070
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x18
call fcn.00401070
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x17
call fcn.00401070
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x16
call fcn.00401070
lea ecx, [ebp + 0x20]
mov byte [ebp - 4], 0x15
call fcn.0056a100
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x14
call fcn.00401070
mov edi, dword [ebp + 0x18]
mov esi, dword [ebp + 0x1c]
test edi, edi
jne 0x442d1f
test esi, esi
jne 0x442d1f
mov eax, dword [ebx + 0xf4]
test eax, eax
jne 0x442c2e
lea eax, [ebx + 0xf8]
push eax
mov eax, dword [ebp - 0x18]
push 0xffffffffffffffff
lea edx, [ebp - 0x68]
mov ecx, dword [eax + 0x1c0]
push 0
push edx
call fcn.00454930
mov esi, dword [ebp - 0x68]
xor edi, edi
cmp esi, edi
je 0x442cc5
cmp dword [ebp - 0x40], edi
je 0x442cc5
push esi
call fcn.0054e46e
add esp, 4
test eax, eax
je 0x442cc5
mov eax, dword [ebp - 0x40]
cmp eax, esi
ja 0x442cc5
push eax
call fcn.0054e46e
mov ecx, dword [ebp - 0x40]
add esp, 4
lea edx, [ecx + eax*2]
cmp edx, esi
jb 0x442cc5
push esi
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x8c], edi
mov dword [ebp - 0x84], edi
mov word [ebp - 0x88], di
call fcn.00402b60
mov eax, dword [ebp - 0x8c]
mov byte [ebp - 4], 0x20
cmp eax, edi
jne 0x442cad
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x40]
call fcn.00402b60
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x8c]
jmp 0x443270
lea ecx, [ebp - 0x40]
call fcn.00401070
cmp esi, edi
je 0x443275
push esi
call fcn.0054e46e
add esp, 4
test eax, eax
je 0x443275
push esi
call fcn.0054e46e
lea eax, [eax + eax + 2]
push eax
call fcn.0056649c
add esp, 8
mov dword [ebp - 0x40], eax
test eax, eax
je 0x443275
push esi
call fcn.0054e46e
mov ecx, dword [ebp - 0x40]
push esi
push ecx
mov dword [ebp - 0x38], eax
call fcn.0054e449
add esp, 0xc
jmp 0x443275
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x442d29
lea eax, [ebp - 0x64]
lea edx, [ebp - 0x2b0]
lea ecx, [ebp - 0x6b0]
push edx
push ecx
lea edx, [ebp - 0x4b0]
lea ecx, [ebp - 0x54]
push edx
push ecx
push eax
call fcn.0054fba9
xor eax, eax
add esp, 0x14
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x44], eax
mov word [ebp - 0x48], ax
cmp esi, eax
mov byte [ebp - 4], 0x1b
je 0x442d6d
push esi
lea ecx, [ebp - 0x4c]
call fcn.00402b60
jmp 0x442e1b
lea edx, [ebp - 0x6b0]
lea ecx, [ebp - 0x4c]
push edx
call fcn.00402b60
lea eax, [ebp - 0x2b0]
test eax, eax
je 0x442e1b
lea ecx, [ebp - 0x2b0]
push ecx
call fcn.0054e46e
add esp, 4
test eax, eax
je 0x442e1b
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x442db1
push eax
call fcn.0054e46e
add esp, 4
mov esi, eax
jmp 0x442db3
xor esi, esi
lea edx, [ebp - 0x2b0]
push edx
call fcn.0054e46e
add eax, esi
lea eax, [eax + eax + 2]
push eax
call fcn.0056649c
mov esi, eax
add esp, 8
test esi, esi
je 0x442e1b
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x442df4
push eax
push esi
call fcn.0054e449
lea ecx, [ebp - 0x2b0]
push ecx
push esi
call fcn.0054e41f
add esp, 0x10
jmp 0x442e04
lea edx, [ebp - 0x2b0]
push edx
push esi
call fcn.0054e449
add esp, 8
lea ecx, [ebp - 0x4c]
call fcn.00401070
push esi
mov dword [ebp - 0x4c], esi
call fcn.0054e46e
add esp, 4
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x20], eax
mov word [ebp - 0x24], ax
cmp edi, eax
mov byte [ebp - 4], 0x1c
je 0x442edf
cmp eax, eax
je 0x442e8d
push edi
call fcn.0054e46e
add esp, 4
test eax, eax
je 0x442e8d
mov eax, dword [ebp - 0x28]
cmp eax, edi
ja 0x442e8d
push eax
call fcn.0054e46e
mov ecx, dword [ebp - 0x28]
add esp, 4
lea edx, [ecx + eax*2]
cmp edx, edi
jb 0x442e8d
push edi
lea ecx, [ebp - 0x74]
call fcn.004034d0
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x1d
call fcn.00403580
push eax
lea ecx, [ebp - 0x28]
call fcn.00402b60
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x1c
call fcn.00401070
jmp 0x443040
lea ecx, [ebp - 0x28]
call fcn.00401070
push edi
call fcn.0054e46e
add esp, 4
test eax, eax
je 0x443040
push edi
call fcn.0054e46e
lea eax, [eax + eax + 2]
push eax
call fcn.0056649c
add esp, 8
mov dword [ebp - 0x28], eax
test eax, eax
je 0x44304b
push edi
call fcn.0054e46e
mov ecx, dword [ebp - 0x28]
push edi
push ecx
mov dword [ebp - 0x20], eax
call fcn.0054e449
add esp, 0xc
jmp 0x443040
lea edx, [ebp - 0x54]
test edx, edx
je 0x442f49
cmp eax, eax
je 0x442f49
lea eax, [ebp - 0x54]
push eax
call fcn.0054e46e
add esp, 4
test eax, eax
je 0x442f49
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x54]
cmp eax, ecx
ja 0x442f49
push eax
call fcn.0054e46e
mov edx, dword [ebp - 0x28]
lea ecx, [ebp - 0x54]
add esp, 4
lea eax, [edx + eax*2]
cmp eax, ecx
jb 0x442f49
lea edx, [ebp - 0x54]
lea ecx, [ebp - 0x74]
push edx
call fcn.004034d0
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x1e
call fcn.00403580
push eax
lea ecx, [ebp - 0x28]
call fcn.00402b60
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x1c
call fcn.00401070
jmp 0x442fa1
lea ecx, [ebp - 0x28]
call fcn.00401070
lea eax, [ebp - 0x54]
test eax, eax
je 0x442fa1
lea ecx, [ebp - 0x54]
push ecx
call fcn.0054e46e
add esp, 4
test eax, eax
je 0x442fa1
lea edx, [ebp - 0x54]
push edx
call fcn.0054e46e
lea eax, [eax + eax + 2]
push eax
call fcn.0056649c
add esp, 8
mov dword [ebp - 0x28], eax
test eax, eax
je 0x442fa1
lea ecx, [ebp - 0x54]
push ecx
call fcn.0054e46e
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x54]
push edx
push eax
call fcn.0054e449
add esp, 0xc
lea ecx, [ebp - 0x4b0]
test ecx, ecx
je 0x443040
lea edx, [ebp - 0x4b0]
push edx
call fcn.0054e46e
add esp, 4
test eax, eax
je 0x443040
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x442fd6
push eax
call fcn.0054e46e
add esp, 4
mov esi, eax
jmp 0x442fd8
xor esi, esi
lea eax, [ebp - 0x4b0]
push eax
call fcn.0054e46e
add eax, esi
lea ecx, [eax + eax + 2]
push ecx
call fcn.0056649c
mov esi, eax
add esp, 8
test esi, esi
je 0x443040
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x443019
push eax
push esi
call fcn.0054e449
lea edx, [ebp - 0x4b0]
push edx
push esi
call fcn.0054e41f
add esp, 0x10
jmp 0x443029
lea eax, [ebp - 0x4b0]
push eax
push esi
call fcn.0054e449
add esp, 8
lea ecx, [ebp - 0x28]
call fcn.00401070
push esi
mov dword [ebp - 0x28], esi
call fcn.0054e46e
add esp, 4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x44304b
mov esi, eax
jmp 0x443051
lea esi, [ebp - 0x24]
lea eax, [ebp - 0x24]
push eax
call fcn.0054e46e
add esp, 4
cmp word [esi + eax*2 - 2], 0x5c
je 0x4430f8
mov ecx, 0x615f1c
test ecx, ecx
je 0x4430f8
push ecx
call fcn.0054e46e
add esp, 4
test eax, eax
je 0x4430f8
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x443094
push eax
call fcn.0054e46e
add esp, 4
mov esi, eax
jmp 0x443096
xor esi, esi
push 0x615f1c
call fcn.0054e46e
add eax, esi
lea edx, [eax + eax + 2]
push edx
call fcn.0056649c
mov esi, eax
add esp, 8
test esi, esi
je 0x4430f8
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x4430d3
push eax
push esi
call fcn.0054e449
push 0x615f1c
push esi
call fcn.0054e41f
add esp, 0x10
jmp 0x4430e1
push 0x615f1c
push esi
call fcn.0054e449
add esp, 8
lea ecx, [ebp - 0x28]
call fcn.00401070
push esi
mov dword [ebp - 0x28], esi
call fcn.0054e46e
add esp, 4
mov dword [ebp - 0x20], eax
mov esi, dword [ebp - 0x28]
test esi, esi
je 0x44315b
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x44315b
push esi
call fcn.0054e46e
add esp, 4
test eax, eax
je 0x44315b
mov eax, dword [ebp - 0x40]
cmp eax, esi
ja 0x44315b
push eax
call fcn.0054e46e
mov ecx, dword [ebp - 0x40]
add esp, 4
lea edx, [ecx + eax*2]
cmp edx, esi
jb 0x44315b
push esi
lea ecx, [ebp - 0x74]
call fcn.004034d0
mov eax, dword [ebp - 0x74]
mov byte [ebp - 4], 0x1f
test eax, eax
jne 0x443144
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x40]
call fcn.00402b60
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x1c
call fcn.00401070
jmp 0x4431a4
lea ecx, [ebp - 0x40]
call fcn.00401070
test esi, esi
je 0x4431a4
push esi
call fcn.0054e46e
add esp, 4
test eax, eax
je 0x4431a4
push esi
call fcn.0054e46e
lea eax, [eax + eax + 2]
push eax
call fcn.0056649c
add esp, 8
mov dword [ebp - 0x40], eax
test eax, eax
je 0x4431a4
push esi
call fcn.0054e46e
mov ecx, dword [ebp - 0x40]
push esi
push ecx
mov dword [ebp - 0x38], eax
call fcn.0054e449
add esp, 0xc
mov eax, dword [ebp - 0x4c]
test eax, eax
mov edi, eax
jne 0x4431b0
lea edi, [ebp - 0x48]
test edi, edi
je 0x44322d
push edi
call fcn.0054e46e
add esp, 4
test eax, eax
je 0x44322d
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x4431d5
push eax
call fcn.0054e46e
add esp, 4
mov esi, eax
jmp 0x4431d7
xor esi, esi
push edi
call fcn.0054e46e
add eax, esi
lea edx, [eax + eax + 2]
push edx
call fcn.0056649c
mov esi, eax
add esp, 8
test esi, esi
je 0x44322d
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x44320c
push eax
push esi
call fcn.0054e449
push edi
push esi
call fcn.0054e41f
add esp, 0x10
jmp 0x443216
push edi
push esi
call fcn.0054e449
add esp, 8
lea ecx, [ebp - 0x40]
call fcn.00401070
push esi
mov dword [ebp - 0x40], esi
call fcn.0054e46e
add esp, 4
mov dword [ebp - 0x38], eax
test byte [ebx + 0x15c], 0x5c
je 0x44325d
mov eax, dword [ebx + 0xf4]
test eax, eax
jne 0x443246
lea eax, [ebx + 0xf8]
mov ecx, dword [ebp - 0x18]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x40]
mov ecx, dword [ecx + 0x1c0]
push 0
push eax
call fcn.00454930
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1b
call fcn.00401070
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x4c]
call fcn.00401070
mov al, byte [ebp + 0x14]
test al, al
je 0x443292
mov esi, dword [ebp - 0x18]
mov byte [ebx + 0x16f], 1
mov byte [ebx + 0x16e], 1
jmp 0x4433f3
mov esi, dword [ebp - 0x18]
lea edx, [ebp - 0x40]
push 0
push edx
mov ecx, dword [esi + 0x1c0]
push ebx
call fcn.00454290
cmp eax, 2
jne 0x4433e5
mov ecx, dword [0x63e61c]
test ecx, ecx
je 0x4432c8
mov eax, dword [ebx + 0x390]
push 1
push eax
call fcn.004bbbd0
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx + 0x1c0]
mov eax, dword [ecx + 8]
dec eax
xor esi, esi
cmp esi, eax
jg 0x4432f9
mov edi, dword [ecx + 4]
mov edx, esi
shl edx, 4
mov edx, dword [edi + edx]
mov edi, dword [ebx + 0x390]
mov edx, dword [edx + 0x390]
cmp edx, edi
je 0x4432fc
inc esi
jmp 0x4432d7
or esi, 0xffffffff
mov eax, dword [ebx + 0x5d0]
mov dword [ebp + 0x14], esi
test eax, eax
je 0x443319
mov ecx, ebx
mov dword [ebx + 0xc], 1
call fcn.005245b0
jmp 0x44334a
mov ecx, ebx
call fcn.005245b0
test ebx, ebx
mov byte [ebp - 4], 0x21
je 0x443343
mov ecx, ebx
call fcn.0051e0a0
push ebx
call fcn.005664c5
add esp, 4
jmp 0x443343
mov dword [ebp - 4], 0x14
test esi, esi
jl 0x44339d
mov eax, dword [ebp - 0x18]
mov edi, esi
shl edi, 4
mov ebx, dword [eax + 0x1c0]
mov edx, 1
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 4]
sub eax, esi
dec eax
add ecx, edi
mov edi, edx
dec edx
test edi, edi
je 0x443378
add ecx, 0x10
jmp 0x44336c
test eax, eax
je 0x44339a
mov ecx, dword [ebx + 4]
lea edx, [esi + 1]
shl edx, 4
shl eax, 4
shl esi, 4
add edx, ecx
push eax
add esi, ecx
push edx
push esi
call fcn.0054ee90
add esp, 0xc
dec dword [ebx + 8]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x13
call fcn.00401070
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 2
call fcn.00401070
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
call fcn.0056a100
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.0056a100
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov eax, 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x20
mov eax, dword [ebp + 0x18]
test eax, eax
je 0x4433f3
mov byte [ebx + 0x16e], 1
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x4433fd
lea eax, [ebp - 0x3c]
push eax
mov ecx, ebx
call fcn.005225b0
push 1
push 1
push ebx
lea ecx, [esi + 0x468]
call fcn.00475bc0
mov ecx, ebx
call fcn.00522790
mov eax, dword [esi + 0x1fc]
test eax, eax
je 0x44342e
push eax
mov ecx, esi
call fcn.00446a30
mov eax, dword [ebx + 0x390]
mov edi, dword [ebp - 0x18]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0xa8], eax
mov eax, dword [edi + 0x18c]
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xb0], 1
push ecx
mov edx, dword [eax + 0x1c]
push 0xffffffffffffffff
push 0x100d
push edx
call esi
test eax, eax
jl 0x44339d
push 1
push eax
mov eax, dword [edi + 0x484]
push 0x1013
push eax
call esi
jmp 0x44339d