Function at 0x580910
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d32dd
mov eax, dword fs:[0]
push eax
sub esp, 0xe0
mov eax, dword [0x638fe4]
xor eax, ebp
mov dword [ebp - 0x18], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0xa0]
push eax
mov dword [ebp - 4], 0
push 0x5823b0
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xe0], edi
mov dword [ebp - 0x9c], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0xdc], 0x644170
mov dword [ebp - 0xa0], 0
call dword [sym.imp.USER32.dll_EnumWindows]
mov eax, dword [ebp - 0xa0]
test eax, eax
je 0x5809d2
push 0
push 0
push 0x46a
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [0x643be4]
test ecx, ecx
je 0x5809d2
xor eax, eax
cmp edi, 0x9fbf1
push 3
setne al
dec eax
and eax, 4
push dword [eax + 0x644028]
call ecx
mov ebx, dword [ebp + 0xc]
mov eax, 0xcea
cmp ebx, 0x1faf
je 0x5809e4
mov eax, ebx
mov ecx, dword [0x643bf4]
test ecx, ecx
je 0x580a0b
push eax
xor eax, eax
cmp edi, 0x9fbf1
push 0x10007
setne al
dec eax
and eax, 4
push dword [eax + 0x644028]
call ecx
push edi
mov dword [0x6441c4], 0
mov byte [0x6441e1], 0
call fcn.0057b950
test al, al
jne 0x580a79
push dword [ebp - 0x74]
mov edx, dword [0x64417c]
push ecx
mov ecx, dword [0x644178]
call fcn.00405440
mov eax, dword [0x644178]
add esp, 8
mov ecx, dword [0x644180]
sub ecx, eax
mov dword [0x64417c], eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 0x80
jae 0x580a79
push 0x80
mov ecx, 0x644178
call fcn.00404b60
xor eax, eax
mov dword [ebp - 0xac], eax
cmp eax, 0x2710
jge 0x581140
mov ecx, dword [0x643bf0]
xor eax, eax
test ecx, ecx
je 0x580ab2
cmp edi, 0x9fbf1
push 0x50020
setne al
dec eax
and eax, 4
push dword [eax + 0x644028]
call ecx
push edi
push dword [ebp + 0xc]
cmp eax, 0xff1
push ecx
setne bl
push 1
mov byte [ebp - 0xcc], bl
call fcn.005832c0
test al, al
jne 0x580aeb
push 0x62e4b0
lea eax, [ebp - 0xb0]
mov dword [ebp - 0xb0], 0x56b
push eax
call fcn.005479aa
mov ecx, dword [0x643bd8]
test ecx, ecx
je 0x5810c5
push dword [0x6441c8]
xor eax, eax
cmp edi, 0x9fbf1
setne al
dec eax
and eax, 4
push dword [eax + 0x644028]
call ecx
test al, al
je 0x5810c5
mov ecx, dword [0x6441c8]
mov eax, dword [ecx]
call dword [eax + 0x78]
mov ecx, dword [0x6441c8]
movzx eax, ax
mov dword [ebp - 0x98], eax
mov eax, dword [ecx]
call dword [eax + 0x14]
push eax
lea ecx, [ebp - 0x78]
call fcn.00403280
push ecx
mov byte [ebp - 4], 1
mov esi, esp
mov dword [ebp - 0x88], esi
mov eax, dword [ebp - 0x78]
add eax, 0xfffffff0
push eax
call fcn.004035b0
add esp, 4
lea ecx, [ebp - 0x7c]
add eax, 0x10
mov dl, bl
mov dword [esi], eax
call fcn.005b1c20
add esp, 4
mov byte [ebp - 4], 2
xor eax, eax
mov ecx, dword [0x643bf0]
test ecx, ecx
je 0x580b9e
cmp edi, 0x9fbf1
push 0x6020000
setne al
dec eax
and eax, 4
push dword [eax + 0x644028]
call ecx
push eax
mov edx, edi
lea ecx, [ebp - 0x70]
call fcn.005b5f80
add esp, 4
lea edx, [ebp - 0x70]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xb4]
call fcn.005b1770
mov byte [ebp - 4], 4
mov edx, dword [eax]
mov esi, dword [ebp - 0x70]
add esi, 0xfffffff0
lea ecx, [edx - 0x10]
cmp ecx, esi
je 0x580c09
cmp dword [esi + 0xc], 0
jl 0x580bfd
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x580bfd
push ecx
call fcn.004035b0
add esp, 4
mov ecx, esi
mov edi, eax
call fcn.00402670
lea eax, [edi + 0x10]
mov edi, dword [ebp - 0xa4]
mov dword [ebp - 0x70], eax
jmp 0x580c09
push dword [edx - 0xc]
lea ecx, [ebp - 0x70]
push edx
call fcn.00403620
mov byte [ebp - 4], 3
or eax, 0xffffffff
mov ecx, dword [ebp - 0xb4]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x580c54
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x580c50
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x580c50
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
push 0
push dword [edx + 4]
call ebx
jmp 0x580c5a
mov ecx, edx
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [ebp + 0xc], 0xcf5
jne 0x580cb6
mov ecx, dword [0x64405c]
mov eax, 0x2aaaaaab
sub ecx, dword [0x644058]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x580c8e
mov ecx, edi
call fcn.0058fbb0
call fcn.0058f6f0
cmp dword [0x639940], 0
jge 0x580d35
push 0x62e4b0
lea eax, [ebp - 0xb8]
mov dword [ebp - 0xb8], 0x98401
push eax
call fcn.005479aa
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x70]
mov ecx, dword [ecx - 0xc]
add ecx, 0xd
add ecx, dword [eax - 0xc]
cmp ecx, 0x104
jle 0x580ce8
push 0x62e4b0
lea eax, [ebp - 0xbc]
mov dword [ebp - 0xbc], 0x97903
push eax
call fcn.005479aa
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x580d0e
push 0x62e4b0
lea eax, [ebp - 0xc0]
mov dword [ebp - 0xc0], 0x97202
push eax
call fcn.005479aa
mov ecx, dword [ebp - 0x70]
call fcn.005b4740
test al, al
jne 0x580d35
push 0x62e4b0
lea eax, [ebp - 0xc4]
mov dword [ebp - 0xc4], 0x9f403
push eax
call fcn.005479aa
push 0xa0009
mov edx, edi
lea ecx, [ebp - 0x80]
call fcn.005b5f80
add esp, 4
xor eax, eax
mov byte [ebp - 4], 5
mov ecx, 0xff1
cmp word [ebp - 0x98], cx
setne al
sub esp, 8
dec eax
and eax, 0xfffff400
add eax, 0x1000
mov dword [ebp - 0x98], eax
fild dword [ebp - 0x98]
fstp qword [ebp - 0x8c]
fld qword [ebp - 0x8c]
mov ecx, dword [ebp - 0x80]
fstp qword [esp]
call fcn.005b4a20
add esp, 8
test al, al
jne 0x580dc0
mov ecx, dword [ebp - 0x94]
mov edx, 0x9e901
call fcn.0056c650
cmp eax, 2
jne 0x580dc0
mov dword [ebp - 0xc8], eax
lea eax, [ebp - 0xc8]
push 0x62e4b0
push eax
call fcn.005479aa
push dword [ebp - 0xcc]
lea edx, [ebp - 0x70]
lea ecx, [ebp - 0xd0]
call fcn.005b47d0
add esp, 4
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 6
call fcn.00403220
mov byte [ebp - 4], 5
or eax, 0xffffffff
mov ecx, dword [ebp - 0xd0]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x580e29
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x580e25
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x580e25
push 0
push dword [edx + 4]
call ebx
jmp 0x580e29
mov ecx, edx
call esi
push ecx
mov esi, esp
mov dword [ebp - 0x88], esi
mov eax, dword [ebp - 0x78]
add eax, 0xfffffff0
push eax
call fcn.004035b0
add esp, 4
add eax, 0x10
mov dword [esi], eax
call fcn.00584f50
lea edx, [ebp - 0x7c]
lea ecx, [ebp - 0x80]
call fcn.005b1de0
lea edx, [ebp - 0x7c]
mov ebx, eax
lea ecx, [ebp - 0x70]
call fcn.005b1de0
cmp ebx, eax
jg 0x580e69
mov ebx, eax
cmp ebx, 0x2710
jl 0x580e95
cmp dword [ebp + 0xc], 0x1faf
je 0x580e95
push 0x62e4b0
lea eax, [ebp - 0xd4]
mov dword [ebp - 0xd4], 0x97302
push eax
call fcn.005479aa
mov eax, dword [ebp - 0x94]
inc ebx
test eax, eax
je 0x580eba
mov esi, dword [0x6441c8]
mov ecx, eax
mov edi, dword [esi]
call fcn.00403040
push eax
mov ecx, esi
call dword [edi + 0x11c]
jmp 0x580eca
mov ecx, dword [0x6441c8]
push 0
mov eax, dword [ecx]
call dword [eax + 0x11c]
mov ecx, dword [0x6441c8]
push ebx
mov eax, dword [ecx]
call dword [eax + 0x13c]
mov eax, dword [ebp - 0x80]
add eax, 0xfffffff0
push eax
call fcn.004035b0
add esp, 4
lea esi, [eax + 0x10]
mov dword [ebp - 0x90], esi
mov byte [ebp - 4], 7
mov ecx, 1
mov eax, dword [esi - 8]
sub ecx, dword [esi - 4]
sub eax, 0x104
or eax, ecx
mov edi, dword [ebp - 0x7c]
jge 0x580f22
push 0x104
lea ecx, [ebp - 0x90]
call fcn.00402cf0
mov esi, dword [ebp - 0x90]
push edi
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push dword [esi - 8]
push esi
call fcn.0054c667
add esp, 8
test eax, eax
js 0x5810bb
cmp eax, dword [esi - 8]
jg 0x5810bb
mov dword [esi - 0xc], eax
xor ecx, ecx
mov word [esi + eax*2], cx
mov ecx, dword [0x6441c8]
push esi
mov eax, dword [ecx]
call dword [eax + 0x128]
mov ecx, dword [0x6441c8]
push dword [0x6441e4]
mov eax, dword [ecx]
call dword [eax + 0x218]
mov ecx, dword [0x6441c8]
push dword [0x6441e8]
mov eax, dword [ecx]
call dword [eax + 0x21c]
mov ecx, dword [0x64417c]
mov eax, 0x92492493
sub ecx, dword [0x644178]
mov esi, dword [0x644188]
sub esi, dword [0x644184]
imul ecx
mov eax, dword [0x644194]
sub eax, dword [0x644190]
add edx, ecx
mov ecx, dword [0x6441c8]
sar edx, 4
mov edi, edx
sar eax, 2
shr edi, 0x1f
add edi, edx
sar esi, 2
mov edx, dword [ecx]
add eax, esi
add eax, edi
push eax
call dword [edx + 0x220]
mov edi, dword [ebp - 0xa4]
push edi
call fcn.0057b8f0
mov ecx, dword [0x6441c8]
push eax
mov edx, dword [ecx]
call dword [edx + 0x224]
push dword [0x6441c8]
call dword [0x643b38]
mov ebx, dword [ebp + 0xc]
push 0
push ecx
push ebx
push ecx
call fcn.00584df0
lea eax, [ebp - 0xa8]
mov dword [ebp - 0xa8], 0
push eax
push ecx
push ebx
push ecx
call fcn.005804e0
sub esp, 8
mov esi, eax
push dword [ebp - 0x94]
call fcn.00583250
cmp esi, 1
je 0x581068
lea ecx, [ebp - 0x90]
call fcn.00402b90
lea ecx, [ebp - 0x80]
call fcn.00402b90
lea ecx, [ebp - 0x70]
call fcn.00402b90
lea ecx, [ebp - 0x7c]
call fcn.00402b90
lea ecx, [ebp - 0x78]
call fcn.00402b90
jmp 0x581140
push dword [ebp - 0xa8]
push edi
push ebx
push dword [ebp - 0x94]
call fcn.0057f6c0
lea ecx, [ebp - 0x90]
cmp eax, 1
jne 0x58103e
call fcn.00402b90
lea ecx, [ebp - 0x80]
call fcn.00402b90
lea ecx, [ebp - 0x70]
call fcn.00402b90
lea ecx, [ebp - 0x7c]
call fcn.00402b90
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0
call fcn.00402b90
mov eax, dword [ebp - 0xac]
inc eax
jmp 0x580a7b
push 0x80070057
call fcn.00402650
push 0x62e4b0
lea eax, [ebp - 0xd8]
mov dword [ebp - 0xd8], 0x571
push eax
call fcn.005479aa
mov esi, dword [ebp - 0xdc]
add esi, 0x44
cmp dword [esi], 0
jne 0x581123
push esi
call dword [0x643b34]
cmp dword [esi], 0
jne 0x581123
push esi
push dword [ebp - 0xe0]
call fcn.0058c230
cmp dword [esi], 0
jne 0x581123
mov eax, dword [ebp - 0xe8]
mov ecx, dword [eax]
mov eax, ecx
and eax, 0xff0000
cmp eax, 0x90000
jne 0x581123
mov dword [esi], ecx
sub esp, 8
push dword [ebp - 0xe4]
call fcn.00583250
mov eax, 0x581137
ret
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x643bf0]
test ecx, ecx
je 0x5814ae
xor eax, eax
cmp dword [ebp - 0x74], 0x9fbf1
push 0x50022
setne al
dec eax
and eax, 4
push dword [eax + 0x644028]
call ecx
mov esi, eax
mov eax, dword [0x643bf0]
test eax, eax
je 0x5814ae
xor ecx, ecx
cmp edi, 0x9fbf1
push 0x50021
setne cl
dec ecx
and ecx, 4
push dword [ecx + 0x644028]
call eax
cmp eax, 8
jl 0x5814ae
cmp esi, 0x13ed
je 0x5811c2
cmp esi, 0x13ee
je 0x5811c2
cmp esi, 0x13ef
jne 0x5814ae
mov ecx, dword [0x6441a0]
mov eax, 0x92492493
sub ecx, dword [0x64419c]
mov ebx, dword [0x644194]
mov edi, dword [0x644190]
imul ecx
mov eax, ebx
add edx, ecx
sub eax, edi
sar edx, 4
mov ecx, edx
sar eax, 2
shr ecx, 0x1f
add ecx, edx
add eax, ecx
mov ecx, dword [0x6441a4]
sub ecx, dword [0x64419c]
mov dword [ebp - 0x74], eax
mov eax, 0x92492493
imul ecx
add edx, ecx
mov ecx, dword [ebp - 0x74]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ecx
jae 0x581248
cmp ecx, 0x9249249
jbe 0x581231
push str.vector_T__too_long
call fcn.00545aee
push ecx
mov ecx, 0x64419c
call fcn.00404b60
mov ebx, dword [0x644194]
mov edi, dword [0x644190]
cmp edi, ebx
je 0x58135f
mov eax, dword [edi]
mov ecx, dword [eax - 0x10]
lea esi, [eax - 0x10]
mov dword [ebp - 0x74], eax
mov eax, dword [ecx]
cmp eax, vtable.ATL::CAtlStringMgr.0
je 0x581269
call dword [eax + 0x10]
mov ecx, eax
cmp dword [esi + 0xc], 0
lea eax, [esi + 0xc]
jl 0x58127b
cmp ecx, dword [esi]
jne 0x58127b
lock inc dword [eax]
jmp 0x5812b4
mov eax, dword [ecx]
lea ebx, [esi + 4]
push 2
push dword [ebx]
call dword [eax]
mov esi, eax
test esi, esi
je 0x581451
mov ecx, dword [ebx]
mov dword [esi + 4], ecx
mov edx, dword [ebx]
lea ecx, [edx*2 + 2]
push ecx
push dword [ebp - 0x74]
lea edx, [edx*2 + 2]
lea ecx, [esi + 0x10]
call fcn.0056c4f0
add esp, 8
lea eax, [esi + 0x10]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], eax
mov eax, 0x128e
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov word [ebp - 0x1c], ax
mov byte [ebp - 0x1a], 0
lea eax, [ebp - 0x34]
mov dword [ebp - 4], 9
push eax
mov ecx, 0x64419c
call fcn.00404080
mov dword [ebp - 4], 0xffffffff
or eax, 0xffffffff
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x581348
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x581344
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x581344
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x581348
mov ecx, edx
call esi
mov ebx, dword [0x644194]
add edi, 4
cmp edi, ebx
jne 0x581250
mov edi, dword [0x644190]
push dword [ebp - 0x88]
mov edx, ebx
push ecx
mov ecx, edi
call fcn.004053e0
mov eax, dword [0x644190]
add esp, 8
mov ecx, dword [0x644198]
sub ecx, eax
mov dword [0x644194], eax
sar ecx, 2
cmp ecx, 0x80
jae 0x58139e
push 0x80
mov ecx, 0x644190
call fcn.00404f10
mov ecx, dword [0x6441a0]
mov eax, 0x92492493
sub ecx, dword [0x64419c]
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x58168c
cmp dword [ebp + 0xc], 0x1faf
je 0x58168c
push dword [ebp - 0x88]
mov edx, dword [0x64417c]
push ecx
mov ecx, dword [0x644178]
call fcn.00405440
mov ebx, dword [0x6441a0]
mov eax, 0x92492493
mov edi, dword [0x64419c]
mov ecx, ebx
mov esi, dword [0x644178]
sub ecx, edi
imul ecx
add esp, 8
mov dword [0x64417c], esi
add edx, ecx
mov ecx, dword [0x644180]
sar edx, 4
sub ecx, esi
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x74], eax
mov eax, 0x92492493
imul ecx
add edx, ecx
mov ecx, dword [ebp - 0x74]
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ecx
jae 0x58146d
cmp ecx, 0x9249249
jbe 0x581456
push str.vector_T__too_long
call fcn.00545aee
call fcn.00402e60
push ecx
mov ecx, 0x644178
call fcn.00404b60
mov ebx, dword [0x6441a0]
mov edi, dword [0x64419c]
cmp edi, ebx
je 0x58148f
push edi
mov ecx, 0x644178
call fcn.00404080
mov ebx, dword [0x6441a0]
add edi, 0x1c
cmp edi, ebx
jne 0x581471
mov edi, dword [0x64419c]
push dword [ebp - 0x88]
mov edx, ebx
push ecx
mov ecx, edi
call fcn.00405440
mov eax, dword [0x64419c]
mov dword [0x6441a0], eax
jmp 0x581689
mov eax, dword [0x644194]
sub eax, dword [0x644190]
sar eax, 2
test eax, eax
je 0x58168c
cmp ebx, 0x1faf
je 0x58168c
push dword [ebp - 0x88]
mov edx, dword [0x64417c]
push ecx
mov ecx, dword [0x644178]
call fcn.00405440
mov eax, dword [0x644178]
add esp, 8
mov ecx, dword [0x644180]
mov esi, dword [0x644194]
sub ecx, eax
mov edi, dword [0x644190]
mov ebx, esi
mov dword [0x64417c], eax
sub ebx, edi
mov eax, 0x92492493
sar ebx, 2
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ebx
jae 0x581550
cmp ebx, 0x9249249
jbe 0x581539
push str.vector_T__too_long
call fcn.00545aee
push ebx
mov ecx, 0x644178
call fcn.00404b60
mov esi, dword [0x644194]
mov edi, dword [0x644190]
cmp edi, esi
je 0x58166f
mov ebx, 0x128e
lea ecx, [ecx]
mov eax, dword [edi]
mov ecx, dword [eax - 0x10]
lea esi, [eax - 0x10]
mov dword [ebp - 0x74], eax
mov eax, dword [ecx]
cmp eax, vtable.ATL::CAtlStringMgr.0
je 0x581579
call dword [eax + 0x10]
mov ecx, eax
cmp dword [esi + 0xc], 0
lea eax, [esi + 0xc]
jl 0x58158b
cmp ecx, dword [esi]
jne 0x58158b
lock inc dword [eax]
jmp 0x5815c9
mov eax, dword [ecx]
lea ebx, [esi + 4]
push 2
push dword [ebx]
call dword [eax]
mov esi, eax
test esi, esi
je 0x581451
mov ecx, dword [ebx]
mov dword [esi + 4], ecx
mov edx, dword [ebx]
lea ecx, [edx*2 + 2]
push ecx
push dword [ebp - 0x74]
lea edx, [edx*2 + 2]
lea ecx, [esi + 0x10]
call fcn.0056c4f0
add esp, 8
mov ebx, 0x128e
lea eax, [esi + 0x10]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov word [ebp - 0x38], bx
mov byte [ebp - 0x36], 0
lea eax, [ebp - 0x50]
mov dword [ebp - 4], 0xa
push eax
mov ecx, 0x644178
call fcn.00404080
mov dword [ebp - 4], 0xffffffff
or eax, 0xffffffff
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x581658
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x581654
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov esi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x581654
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x581658
mov ecx, edx
call esi
mov esi, dword [0x644194]
add edi, 4
cmp edi, esi
jne 0x581560
mov edi, dword [0x644190]
push dword [ebp - 0x88]
mov edx, esi
push ecx
mov ecx, edi
call fcn.004053e0
mov eax, dword [0x644190]
mov dword [0x644194], eax
add esp, 8
mov edx, dword [0x644188]
mov eax, edx
mov esi, dword [0x644184]
sub eax, esi
sar eax, 2
test eax, eax
je 0x581885
cmp esi, edx
je 0x58186a
nop
mov eax, dword [esi]
mov ebx, dword [eax - 0x10]
lea edi, [eax - 0x10]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebx]
cmp eax, vtable.ATL::CAtlStringMgr.0
je 0x5816ce
mov ecx, ebx
call dword [eax + 0x10]
mov ebx, eax
cmp dword [edi + 0xc], 0
lea eax, [edi + 0xc]
jl 0x5816e3
cmp ebx, dword [edi]
jne 0x5816e3
lock inc dword [eax]
jmp 0x5817bf
mov eax, dword [ebx]
lea edx, [edi + 4]
mov ecx, dword [edx]
mov dword [ebp - 0x78], edx
mov edi, dword [eax]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x581784
mov eax, ecx
not eax
shr eax, 0x1f
test eax, eax
jne 0x58170c
xor edi, edi
jmp 0x581790
mov eax, SysReAllocString
sub eax, ecx
cmp eax, 1
jl 0x581705
inc ecx
lea edx, [ecx + 7]
and edx, 0xfffffff8
mov dword [ebp - 0x74], edx
cmp ecx, edx
jle 0x58172a
xor edi, edi
jmp 0x58178d
mov eax, 2
mul edx
test edx, edx
ja 0x581726
jb 0x58173c
cmp eax, 0xffffffff
ja 0x581726
cmp eax, 0xffffffef
ja 0x581726
mov ecx, dword [ebx + 4]
lea edx, [eax + 0x10]
push edx
mov eax, dword [ecx]
mov edi, dword [eax]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x581760
push 0
push dword [ecx + 4]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
jmp 0x581762
call edi
mov edx, dword [ebp - 0x78]
mov edi, eax
test edi, edi
je 0x581790
mov eax, dword [ebp - 0x74]
dec eax
mov dword [edi], ebx
mov dword [edi + 0xc], 1
mov dword [edi + 8], eax
mov dword [edi + 4], 0
jmp 0x581790
push 2
push ecx
mov ecx, ebx
call edi
mov edi, eax
mov edx, dword [ebp - 0x78]
test edi, edi
je 0x581451
mov ecx, dword [edx]
mov dword [edi + 4], ecx
lea ecx, [edi + 0x10]
mov edx, dword [edx]
lea eax, [edx*2 + 2]
push eax
push dword [ebp - 0x9c]
lea edx, [edx*2 + 2]
call fcn.0056c4f0
add esp, 8
lea eax, [edi + 0x10]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x6c], eax
mov eax, 0x128e
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov word [ebp - 0x54], ax
mov byte [ebp - 0x52], 0
lea eax, [ebp - 0x6c]
mov dword [ebp - 4], 0xb
push eax
mov ecx, 0x644178
call fcn.00404080
mov dword [ebp - 4], 0xffffffff
or eax, 0xffffffff
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x581853
mov edx, dword [ecx]
push ecx
mov eax, dword [edx]
mov edi, dword [eax + 4]
cmp eax, vtable.ATL::CAtlStringMgr.0
jne 0x58184f
mov edx, dword [edx + 4]
mov eax, dword [edx]
mov edi, dword [eax + 4]
cmp eax, vtable.ATL::CWin32Heap.0
jne 0x58184f
push 0
push dword [edx + 4]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x581853
mov ecx, edx
call edi
mov edx, dword [0x644188]
add esi, 4
cmp esi, edx
jne 0x5816b0
mov esi, dword [0x644184]
push dword [ebp - 0x88]
push ecx
mov ecx, esi
call fcn.004053e0
mov eax, dword [0x644184]
add esp, 8
mov dword [0x644188], eax
xor eax, eax
cmp dword [0x6441b8], eax
setne al
inc eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.00544774
mov esp, ebp
pop ebp
ret 0xc