Function at 0x4583a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5eea54
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1f8
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1e8], edi
push 1
push str.Memory_modules_manager
call fcn.0045f680
push 1
mov dword [ebp - 0x1ac], eax
lea ecx, [edi + 0x119c]
mov eax, dword [edi + 0x1f70]
push str.https:__www.carifred.com_uvk_help_module_manager.php
mov dword [ebp - 0x1a8], eax
mov dword [edi + 0x1f70], 0
call fcn.005dc260
mov esi, dword [edi + 0x14e4]
lea eax, [ebp - 0x10c]
push eax
push dword [ebp - 0x1ac]
mov dword [ebp - 0x1b0], esi
call dword [sym.imp.USER32.dll_GetClientRect]
push 0xffffffffffffffff
push 0x5f
push 0xa5
push 0xa
push 0x64
push dword [edi + 0x68]
mov ecx, edi
call fcn.0043ccb0
movsd xmm1, qword [0x6edb20]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x320
call fcn.005c42b0
push 0x37
push 0x50
push 3
push 0xa
mov ecx, edi
call fcn.0045fec0
push str.Modules_Manager
lea ecx, [edi + 0x1448]
call fcn.005dc510
push 0xffffffffffffffff
push 0x10000001
push 0x2d
push 0x5a
push 0x3c
push 5
lea ecx, [edi + 0x1448]
call fcn.005dc190
push eax
mov ecx, esi
call fcn.005c0890
push dword [edi + 0x1438]
mov ecx, esi
push 0xffffffffffffffff
call fcn.005bec70
movsd xmm1, qword [0x6edaf8]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
call fcn.005c42b0
push 0xffffffffffffffff
push 0x10000001
push 0x10
push 0x91
push 0x14
push 0x6e
push str.Removal_options:
mov ecx, esi
call fcn.005c0890
push dword [edi + 0x1438]
mov ecx, esi
push 0xffffffffffffffff
call fcn.005bec70
push ecx
push 0xffffffffffffffff
push ecx
push 0
push str.Use_this_option_if_you_want_to_move_the_selected_module_to_the_recycle_bin__recommended_.
push 1
push ecx
push 0x8c
push 0x32
push 0x73
push str._Move_to_recycle_bin
mov ecx, edi
call fcn.0045fbe0
push ecx
push 0xffffffffffffffff
push ecx
push 0
push str.Use_this_option_if_you_want_to_permanently_delete_the_selected_module._r_nThis_can_be_more_effective__but_doesnt_allow_to_easily_recover_the_deleted_file.
push 0
push ecx
push 0x8c
push 0x4b
push 0x73
push str._Delete_permanently
mov ecx, edi
mov dword [ebp - 0x1f0], eax
call fcn.0045fbe0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Delete_the_selected_module._Check__Delete_permanently__if_youre_sure_the_module_is_infected.
push 0x5f
push 0x50
push 0xa
push 0x10e
push 0x72
push str.Delete_module
mov dword [ebp - 0x1f4], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Show_information_on_the_selected_module__like_its_file_description_or_digital_signature.
push 0x5f
push 0x4b
push 0xa
push 0x163
push 0x8b
push str.Module_properties
mov dword [ebp - 0x1a0], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Refresh_the_process_and_modules_list.
push 0x5f
push 0x4b
push 0xa
push 0x1b3
push 0x8b
push str.Refresh__F5_
mov dword [ebp - 0x204], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Select_which_modules_to_display_in_the_list.
push 0x5f
push 0x4b
push 0xa
push 0x203
push 0xa4
push str.List_settings
mov dword [ebp - 0x1cc], eax
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
push str.Show_online_help__F1_
push 0x5f
mov dword [ebp - 0x1ec], eax
push 0x46
push 0xa
push 0x253
push 0x7d
push str.Help
mov ecx, edi
call fcn.0045fdf0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Go_back_to_the_home_page__Esc_
push 0x5f
push 0x4b
push 0xa
push 0x29e
push 0xb3
push str.Home
mov dword [edi + 0x11bc], eax
call fcn.0045fdf0
push 0
push 0x10800080
push 0x19
push 0xb9
push 0x23
push 0x2f3
push str.Find_a_module__CtrlF_
mov ecx, esi
mov dword [edi + 0x11c0], eax
call fcn.005c0a40
push 0x909090
push 0xffffffffffffffff
mov ecx, esi
mov dword [ebp - 0x194], eax
call fcn.005bec70
movsd xmm0, qword [0x6edb08]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push 0xffffffffffffffff
mov ecx, esi
call fcn.005beb10
push 0x40
push 0xffffffffffffffff
mov ecx, esi
call fcn.005bd3f0
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.List_menu
push 0x28
push 0x5a
push 0x41
push 0x2f3
push 0x86
push str.List_menu
call fcn.0045fd50
push 0
push ecx
mov dword [esp], 0x41500000
mov ecx, edi
push str.Find_next__F3_
push 0x28
push 0x5a
push 0x41
push 0x352
push 0x99
push str.Find_next
mov dword [ebp - 0x184], eax
call fcn.0045fd50
push 0
push str.ModulesManager
mov ecx, edi
mov dword [ebp - 0x1c8], eax
call fcn.0045f4d0
mov ecx, edi
call fcn.0045f300
xorps xmm0, xmm0
movq qword [ebp - 0x8c], xmm0
sub esp, 8
mov dword [ebp - 0x84], 0
lea ecx, [ebp - 0x8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x675498
push str.HKLM64SOFTWARECarifredUVK___Ultra_Virus_Killer
call fcn.005dc520
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xfc]
xorps xmm0, xmm0
mov dword [ebp - 0xf4], 0
movq qword [ebp - 0xfc], xmm0
call fcn.005dc5e0
push 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8c]
push 0xffffffffffffffff
mov dword [ebp - 0x94], 0
call fcn.005dc190
push eax
lea ecx, [ebp - 0x94]
call fcn.005d6a80
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 2
push eax
push str.DisplayFlag
lea ecx, [ebp - 0x94]
call fcn.005d66b0
test al, al
jne 0x458811
mov dword [ebp - 0x90], 1
movsd xmm1, qword [0x6edaf8]
mov ecx, esi
push 0
push str.Arial
push 1
push 0x190
mov byte [ebp - 0x17d], 0
mov byte [ebp - 0x175], 0
mov dword [ebp - 0x17c], 0
call fcn.005c42b0
push dword [ebp - 0x1a8]
lea eax, [ebp - 0x17c]
mov ecx, edi
push dword [ebp - 0x90]
push eax
call fcn.00458170
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.005c5730
push 0
push 1
mov ecx, edi
mov dword [ebp - 0x174], eax
call fcn.0043d720
push 0x48
call dword [sym.imp.USER32.dll_GetSystemMetrics]
movsd xmm0, qword [0x6edab8]
mov ecx, eax
comisd xmm0, xmmword [edi + 8]
mov dword [ebp - 0x18c], ecx
jb 0x4588b2
push 4
call dword [sym.imp.USER32.dll_GetSysColor]
mov ecx, dword [ebp - 0x18c]
or eax, 0xff000000
jmp 0x4588b4
xor eax, eax
push eax
push ecx
push ecx
push 0x8b
mov ecx, edi
mov dword [ebp - 0x198], eax
call fcn.00436420
push eax
lea ecx, [ebp - 0x154]
call fcn.005c6520
mov byte [ebp - 4], 3
mov ecx, esi
push dword [ebp - 0x154]
push str.Module_properties_tCtrlEnter
push dword [ebp - 0x184]
call fcn.005c1450
push 0
push eax
push dword [ebp - 0x184]
mov ecx, esi
mov dword [ebp - 0x1c4], eax
call fcn.005c56e0
push eax
call dword [sym.imp.USER32.dll_SetMenuDefaultItem]
push dword [ebp - 0x198]
mov eax, dword [ebp - 0x18c]
mov ecx, edi
push eax
push eax
push 0x72
call fcn.00436420
push eax
lea ecx, [ebp - 0x158]
call fcn.005c6520
push 0
mov byte [ebp - 4], 4
mov ecx, esi
push dword [ebp - 0x158]
push 0
push 0x32
push str.Move_selected_module_to_the_recycle_bin_tDel
push dword [ebp - 0x184]
call fcn.005c0400
push dword [ebp - 0x198]
mov dword [ebp - 0x1e4], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0x81
call fcn.00436420
push eax
lea ecx, [ebp - 0x15c]
call fcn.005c6520
push 0
mov byte [ebp - 4], 5
mov ecx, esi
push dword [ebp - 0x15c]
push 0
push 0x32
push str.Delete_selected_module_permanently_tShiftDel
push dword [ebp - 0x184]
call fcn.005c0400
push dword [ebp - 0x198]
mov dword [ebp - 0x1dc], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0x82
call fcn.00436420
push eax
lea ecx, [ebp - 0x170]
call fcn.005c6520
push 0
mov byte [ebp - 4], 6
push dword [ebp - 0x170]
push 0
push 0x32
push str.Kill_process_and_delete_module_tCtrlDel
push dword [ebp - 0x184]
mov ecx, esi
call fcn.005c0400
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x184]
mov ecx, esi
mov dword [ebp - 0x1d8], eax
call fcn.005c0400
push dword [ebp - 0x198]
mov eax, dword [ebp - 0x18c]
mov ecx, edi
push eax
push eax
push 0x7c
call fcn.00436420
push eax
lea ecx, [ebp - 0x160]
call fcn.005c6520
push 0
mov byte [ebp - 4], 7
mov ecx, esi
push dword [ebp - 0x160]
push 0
push 0x32
push str.Google_module_file_name_tCtrlG
push dword [ebp - 0x184]
call fcn.005c0400
push dword [ebp - 0x198]
mov dword [ebp - 0x1d4], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0x8a
call fcn.00436420
push eax
lea ecx, [ebp - 0x164]
call fcn.005c6520
push 0
mov byte [ebp - 4], 8
mov ecx, esi
push dword [ebp - 0x164]
push 0
push 0x32
push str.Go_to_process_tAltP
push dword [ebp - 0x184]
call fcn.005c0400
push dword [ebp - 0x198]
mov dword [ebp - 0x1bc], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0x80
call fcn.00436420
push eax
lea ecx, [ebp - 0x150]
call fcn.005c6520
push 0
mov byte [ebp - 4], 9
mov ecx, esi
push dword [ebp - 0x150]
push 0
push 0x32
push str.Verify_file_signature_tAltV
push dword [ebp - 0x184]
call fcn.005c0400
push dword [ebp - 0x198]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0xac
mov ecx, edi
call fcn.00436420
push eax
lea ecx, [ebp - 0x168]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0xa
mov ecx, esi
push dword [ebp - 0x168]
push 0
push 0x32
push str.Open_file_location_tCtrlL
push dword [ebp - 0x184]
call fcn.005c0400
push 0
push dword [ebp - 0x154]
mov ecx, esi
mov dword [ebp - 0x1e0], eax
push 0
push 0x32
push str.Module_file_properties_tCtrlP
push dword [ebp - 0x184]
call fcn.005c0400
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x184]
mov ecx, esi
mov dword [ebp - 0x1a8], eax
call fcn.005c0400
push dword [ebp - 0x198]
mov eax, dword [ebp - 0x18c]
mov ecx, edi
push eax
push eax
push 0x94
call fcn.00436420
push eax
lea ecx, [ebp - 0x16c]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0xb
mov ecx, esi
push dword [ebp - 0x16c]
push 0
push 0x32
push str.Refresh_F5
push dword [ebp - 0x184]
call fcn.005c0400
push 0
push 0
push 8
push 0x32
push 0
push dword [ebp - 0x184]
mov ecx, esi
mov dword [ebp - 0x1b8], eax
call fcn.005c0400
push 0
push dword [ebp - 0x150]
mov ecx, esi
push 0
push 0x32
push str.VirusTotal_report_tCtrlM
push dword [ebp - 0x184]
call fcn.005c0400
push dword [ebp - 0x198]
mov dword [ebp - 0x1b4], eax
mov ecx, edi
mov eax, dword [ebp - 0x18c]
push eax
push eax
push 0xb1
call fcn.00436420
push eax
lea ecx, [ebp - 0x14c]
call fcn.005c6520
push 0
mov byte [ebp - 4], 0xc
mov ecx, esi
push dword [ebp - 0x14c]
push 0
push 0x32
push str.Update_VirusTotal_results_tCtrlU
push dword [ebp - 0x184]
call fcn.005c0400
push 0
push dword [ebp - 0x14c]
mov ecx, esi
mov dword [ebp - 0x198], eax
push 0
push 0x32
push str.Hide_VirusTotal_clean_results_tCtrlH
push dword [ebp - 0x184]
call fcn.005c0400
push 0
mov ecx, edi
mov dword [ebp - 0x1c0], eax
call fcn.0045f170
mov edx, eax
mov cx, word [edi + 0x11c0]
mov eax, 0x74
mov word [ebp - 0x76], cx
mov word [ebp - 0x7e], ax
mov ecx, 0x2e
mov eax, dword [ebp - 0x1cc]
mov word [ebp - 0x7c], ax
mov eax, 0x1b
mov word [ebp - 0x78], ax
mov eax, 0x70
mov word [ebp - 0x72], ax
mov ax, word [edi + 0x11bc]
mov word [ebp - 0x70], ax
mov eax, 0x72
mov word [ebp - 0x6c], ax
mov eax, dword [ebp - 0x1c8]
mov word [ebp - 0x6a], ax
mov eax, 0xd
mov word [ebp - 0x66], ax
mov eax, dword [ebp - 0x1c4]
mov word [ebp - 0x64], ax
mov eax, dword [ebp - 0x1e4]
mov word [ebp - 0x5e], ax
mov eax, dword [ebp - 0x1dc]
mov word [ebp - 0x58], ax
mov eax, dword [ebp - 0x1d8]
mov word [ebp - 0x52], ax
mov eax, 0x47
mov word [ebp - 0x4e], ax
mov eax, dword [ebp - 0x1d4]
mov word [ebp - 0x4c], ax
mov eax, dword [ebp - 0x1bc]
mov word [ebp - 0x46], ax
mov eax, 0x56
mov word [ebp - 0x60], cx
mov word [ebp - 0x5a], cx
mov word [ebp - 0x54], cx
mov ecx, 0x50
mov word [ebp - 0x42], ax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x200], edx
mov byte [ebp - 0x80], 1
mov byte [ebp - 0x7a], 1
mov byte [ebp - 0x74], 1
mov byte [ebp - 0x6e], 1
mov byte [ebp - 0x68], 9
mov byte [ebp - 0x62], 1
mov byte [ebp - 0x5c], 5
mov byte [ebp - 0x56], 9
mov byte [ebp - 0x50], 9
mov byte [ebp - 0x4a], 0x11
mov word [ebp - 0x48], cx
mov byte [ebp - 0x44], 0x11
mov word [ebp - 0x40], ax
mov byte [ebp - 0x3e], 9
mov eax, 0x4c
mov word [ebp - 0x36], cx
mov word [ebp - 0x3c], ax
lea ecx, [ebp - 0x148]
mov eax, dword [ebp - 0x1e0]
mov word [ebp - 0x3a], ax
mov eax, dword [ebp - 0x1a8]
mov word [ebp - 0x34], ax
mov eax, 0x4d
mov word [ebp - 0x30], ax
mov eax, dword [ebp - 0x1b4]
mov word [ebp - 0x2e], ax
mov eax, 0x55
mov word [ebp - 0x2a], ax
mov eax, dword [ebp - 0x198]
mov word [ebp - 0x28], ax
mov eax, 0x48
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 0x1c0]
mov word [ebp - 0x22], ax
mov eax, 0x46
push 0
mov byte [ebp - 0x38], 9
mov byte [ebp - 0x32], 9
mov byte [ebp - 0x2c], 9
mov byte [ebp - 0x26], 9
mov byte [ebp - 0x20], 9
mov word [ebp - 0x1e], ax
mov word [ebp - 0x1c], dx
call fcn.005d0610
push 0x11
lea eax, [ebp - 0x80]
mov ecx, esi
push eax
call fcn.005c47a0
push dword [ebp - 0x174]
mov dword [ebp - 0x18c], 0
call dword [sym.imp.USER32.dll_SetFocus]
push 0x20
push dword [ebp - 0x194]
mov ecx, esi
call fcn.005bd3f0
xorps xmm0, xmm0
lea ecx, [ebp - 0xf0]
movups xmmword [ebp - 0xf0], xmm0
movq qword [ebp - 0xe0], xmm0
call fcn.005d9320
push dword [ebp - 0x1c8]
mov ecx, esi
mov byte [ebp - 4], 0xd
call fcn.005c4370
push 0
mov ecx, edi
call fcn.004771c0
test eax, eax
je 0x459ffc
mov ecx, dword [edi + 0x14a8]
mov eax, dword [sym.imp.USER32.dll_SendMessageW]
cmp ecx, 0xfffffffa
je 0x459ffc
cmp dword [edi + 0x14d8], esi
jne 0x459fb7
cmp ecx, dword [edi + 0x11c0]
je 0x459ff5
mov edx, dword [ebp - 0x194]
cmp ecx, 0xffffffb3
jne 0x458eb9
cmp dword [edi + 0x14b4], edx
je 0x458ec5
cmp ecx, dword [ebp - 0x200]
jne 0x458f6f
mov ecx, edi
call fcn.0046c220
push 0x80
push dword [ebp - 0x194]
mov ecx, esi
call fcn.005bd3f0
push dword [ebp - 0x194]
mov ecx, esi
call fcn.005bc230
push eax
lea ecx, [ebp - 0x8c]
call fcn.005dc1c0
push str.Find_a_module__CtrlF_
lea ecx, [ebp - 0x8c]
call fcn.005dc4c0
mov ecx, esi
test al, al
je 0x458f56
push 0
push 0
push dword [ebp - 0x194]
call fcn.005bcd30
push 0
push dword [ebp - 0x194]
mov ecx, esi
call fcn.005bec70
movsd xmm0, qword [0x6edb20]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push dword [ebp - 0x194]
mov ecx, esi
call fcn.005beb10
jmp 0x459fb7
push 0xffffffffffffffff
push 0
push 0xb1
push dword [ebp - 0x194]
call fcn.005befd0
jmp 0x459fb7
cmp ecx, 0xffffffb4
jne 0x459030
cmp dword [edi + 0x14b4], edx
jne 0x459030
push edx
mov ecx, esi
call fcn.005bc230
push eax
lea ecx, [ebp - 0x8c]
call fcn.005dc1c0
lea ecx, [ebp - 0x8c]
call fcn.005dc3a0
cmp eax, 3
jl 0x458e69
cmp dword [ebp - 0x18c], 0
jne 0x458fca
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
push ecx
lea ecx, [ebp - 0x8c]
call fcn.005dc190
push eax
push 0
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.005ba1b0
mov dword [ebp - 0x18c], eax
test eax, eax
je 0x459fb7
push eax
push 9
push 0x110b
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [ebp - 0x18c]
push 0
push 0x1114
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x18c], 0
jmp 0x459fb7
cmp ecx, dword [ebp - 0x1c8]
jne 0x45917b
push edx
mov ecx, esi
call fcn.005bc230
push eax
lea ecx, [ebp - 0x8c]
call fcn.005dc1c0
push str.Find_a_module__CtrlF_
lea ecx, [ebp - 0x8c]
call fcn.005dc4c0
test al, al
jne 0x459073
lea ecx, [ebp - 0x8c]
call fcn.005dbeb0
test al, al
je 0x4590cb
push 0
push 0
push dword [ebp - 0x194]
mov ecx, esi
call fcn.005bcd30
push 0
push dword [ebp - 0x194]
mov ecx, esi
call fcn.005bec70
movsd xmm0, qword [0x6edb20]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push dword [ebp - 0x194]
mov ecx, esi
call fcn.005beb10
push 0x80
push dword [ebp - 0x194]
mov ecx, esi
call fcn.005bd3f0
lea ecx, [ebp - 0x8c]
call fcn.005dbeb0
test al, al
jne 0x458e69
push ecx
call fcn.005dc190
push eax
push dword [ebp - 0x18c]
mov ecx, esi
push dword [ebp - 0x17c]
call fcn.005ba1b0
mov dword [ebp - 0x18c], eax
test eax, eax
je 0x459146
push eax
push 9
push 0x110b
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [ebp - 0x18c]
push 0
push 0x1114
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x80
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.005bd3f0
jmp 0x459fb7
push 0x80
push dword [ebp - 0x194]
mov ecx, esi
call fcn.005bd3f0
sub esp, 8
mov ecx, edi
push 0x8c
push 0x190
push 0
push esi
push 4
push str.Find_reached_the_end_of_the_list.
call fcn.0043e2e0
jmp 0x459fb7
cmp byte [ebp - 0x17d], 1
jne 0x4591a7
cmp dword [edi + 0x14a8], 0xffffff31
jne 0x4591a7
lea ecx, [ebp - 0x148]
call fcn.005d05f0
mov byte [ebp - 0x17d], 2
jmp 0x458e69
mov edx, dword [edi + 0x14a8]
mov ecx, dword [ebp - 0x17c]
mov dword [ebp - 0x190], edx
cmp edx, 0xffffffea
jne 0x4591c6
cmp dword [edi + 0x14b4], ecx
je 0x4591d2
cmp edx, dword [ebp - 0x184]
jne 0x4593af
cmp edx, dword [ebp - 0x184]
jne 0x459223
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SetFocus]
cmp byte [ebp - 0x17d], 2
jne 0x459217
xorps xmm1, xmm1
lea ecx, [ebp - 0x148]
call fcn.005d05a0
movsd xmm1, qword [0x6edb98]
comisd xmm1, xmm0
jbe 0x459217
mov byte [ebp - 0x17d], 0
jmp 0x458e69
mov eax, dword [sym.imp.USER32.dll_SendMessageW]
mov byte [ebp - 0x17d], 1
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call eax
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x1f8], eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [ebp - 0x1c4]
mov ecx, eax
test ecx, ecx
mov dword [ebp - 0x1fc], ecx
mov ecx, 0x40
mov eax, 0x20
cmove eax, ecx
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1a4], eax
cmp edx, ecx
jg 0x4592ad
mov edi, edx
mov edx, dword [ebp - 0x1b8]
cmp edi, edx
je 0x4592a2
push eax
push edi
mov ecx, esi
call fcn.005bd3f0
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x1b4]
mov edx, dword [ebp - 0x1b8]
inc edi
cmp edi, ecx
jle 0x459283
mov edi, dword [ebp - 0x1e8]
push 0
mov ecx, edi
call fcn.004356c0
mov ecx, dword [ebp - 0x1b0]
test al, al
mov eax, 0x40
mov esi, 0x20
cmovne esi, eax
push esi
push dword [ebp - 0x198]
call fcn.005bd3f0
push esi
push dword [ebp - 0x1c0]
mov esi, dword [ebp - 0x1b0]
mov ecx, esi
call fcn.005bd3f0
cmp dword [ebp - 0x1f8], 0
je 0x45930c
cmp dword [ebp - 0x1fc], 0
jne 0x45930c
push 0x20
push dword [ebp - 0x1bc]
mov ecx, esi
call fcn.005bd3f0
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x190], eax
jne 0x45937d
lea ecx, [ebp - 0x10c]
push ecx
push eax
mov ecx, esi
call fcn.005c5730
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je 0x459377
mov eax, dword [ebp - 0x10c]
mov ecx, esi
mov edx, dword [ebp - 0x184]
add eax, 0x5a
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x108]
add eax, 0x2d
mov dword [ebp - 0x1a4], eax
mov eax, 8
push dword [ebp - 0x1a4]
push dword [ebp - 0x19c]
push eax
push edx
call fcn.005bbfd0
jmp 0x459fb7
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x1a4], 0xffffffff
mov edx, eax
push dword [ebp - 0x1a4]
mov dword [ebp - 0x19c], 0xffffffff
xor eax, eax
push dword [ebp - 0x19c]
mov ecx, esi
push eax
push edx
call fcn.005bbfd0
jmp 0x459fb7
cmp edx, 0xffffffeb
jne 0x4593cf
cmp dword [edi + 0x14b4], ecx
jne 0x4593cf
push dword [ebp - 0x194]
push ecx
mov ecx, edi
call fcn.0043e280
jmp 0x459fb7
cmp edx, dword [ebp - 0x204]
je 0x459f59
cmp edx, dword [ebp - 0x1c4]
je 0x459f59
cmp edx, 0xfffffff2
jne 0x4593f8
cmp dword [edi + 0x14b4], ecx
je 0x459f59
mov edx, dword [edi + 0x14a8]
cmp edx, dword [ebp - 0x1ec]
jne 0x4594c6
push 0xd
push dword [edi + 0x11bc]
xorps xmm0, xmm0
push ecx
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0x12c]
push esi
movups xmmword [ebp - 0x12c], xmm0
movups xmmword [ebp - 0x11c], xmm0
call fcn.005b8800
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0xf
push eax
mov ecx, edi
call fcn.00456990
push dword [ebp - 0x1ac]
mov byte [ebp - 0x185], al
call dword [sym.imp.USER32.dll_BringWindowToTop]
cmp byte [ebp - 0x185], 0
jne 0x459477
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0xd
call fcn.005b8790
jmp 0x458e69
push 0
push dword [ebp - 0x90]
lea eax, [ebp - 0x17c]
mov ecx, edi
push eax
call fcn.00458170
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.005c5730
push 0
mov dword [ebp - 0x174], eax
lea ecx, [ebp - 0x94]
lea eax, [ebp - 0x90]
push eax
push 4
push str.DisplayFlag
call fcn.005d5f20
lea ecx, [ebp - 0x12c]
jmp 0x459fae
cmp edx, dword [ebp - 0x1e4]
je 0x459e49
mov ecx, dword [ebp - 0x1a0]
cmp edx, ecx
jne 0x4594f9
push 4
push dword [ebp - 0x1f0]
mov ecx, esi
call fcn.005bc500
test eax, eax
jne 0x459e44
mov ecx, dword [ebp - 0x1a0]
mov eax, dword [edi + 0x14a8]
cmp eax, dword [ebp - 0x1dc]
je 0x459cf7
cmp eax, ecx
jne 0x459526
push 4
push dword [ebp - 0x1f4]
mov ecx, esi
call fcn.005bc500
test eax, eax
jne 0x459cf7
mov eax, dword [edi + 0x14a8]
cmp eax, dword [ebp - 0x1d8]
jne 0x459727
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x1a4], eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x19c], ecx
test eax, eax
je 0x458e69
test ecx, ecx
je 0x458e69
lea ecx, [ebp - 0xf0]
push ecx
lea ecx, [ebp - 0x8c]
push ecx
push eax
push dword [ebp - 0x17c]
mov ecx, edi
call fcn.00456910
test al, al
je 0x458e69
push 0xd
push dword [edi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x17c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1a0]
movups xmmword [ebp - 0xb0], xmm0
push esi
call fcn.005b8800
sub esp, 8
mov byte [ebp - 4], 0x12
mov ecx, edi
push 0x8c
push 0
push 0
push 0
push 1
push str.Are_you_sure_you_want_to_kill_this_process_and_move_the_selected_module_to_the_recycle_bin_
call fcn.0043e2e0
test eax, eax
jne 0x459612
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.005b8790
jmp 0x458e69
xorps xmm0, xmm0
mov dword [ebp - 0xd0], 0
lea ecx, [ebp - 0xd8]
movq qword [ebp - 0xd8], xmm0
call fcn.005dc5e0
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0xd8]
mov byte [ebp - 0x185], 0
push eax
push dword [ebp - 0x19c]
mov ecx, edi
push dword [ebp - 0x17c]
call fcn.00456910
test al, al
je 0x459697
lea ecx, [ebp - 0xd8]
call fcn.005dafe0
mov ecx, eax
call fcn.005cc410
mov byte [ebp - 0x185], al
test al, al
je 0x459697
push dword [ebp - 0x19c]
push 0
push 0x1101
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0xc
lea ecx, [ebp - 0x8c]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0045a0e0
cmp eax, 1
jne 0x4596dc
cmp byte [ebp - 0x185], 0
jne 0x4596d5
push dword [ebp - 0x1a4]
push 0
push 0x1101
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
push str.The_selected_module_was_successfully_moved_to_the_recycle_bin.
jmp 0x4596e6
cmp eax, 2
jne 0x4596f1
push str.The_selected_module_was_scheduled_for_removal_on_reboot
lea ecx, [ebp - 0x8c]
call fcn.005dc510
sub esp, 8
lea ecx, [ebp - 0x8c]
push 0x8c
push 0x190
push 0
push 0
push 4
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0043e2e0
lea ecx, [ebp - 0xd8]
call fcn.005dc430
jmp 0x459fa8
cmp eax, dword [ebp - 0x1b4]
jne 0x4597a9
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x458e69
lea eax, [ebp - 0xf0]
mov ecx, edi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x190]
push dword [ebp - 0x17c]
call fcn.00456910
test al, al
je 0x458e69
push 0
lea ecx, [ebp - 0x8c]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.004359c0
jmp 0x459fb7
cmp eax, dword [ebp - 0x198]
jne 0x4597d3
push 0
mov ecx, edi
call fcn.004356c0
test al, al
jne 0x458e69
push 0
push ecx
mov ecx, edi
call fcn.00435850
or eax, 0x100
jmp 0x4597ff
cmp eax, dword [ebp - 0x1c0]
jne 0x459845
push 0
mov ecx, edi
call fcn.004356c0
test al, al
jne 0x458e69
push dword [edi + 0x1f78]
push ecx
mov ecx, edi
call fcn.00435850
or eax, 0x80
add esp, 4
push eax
push ecx
mov ecx, dword [ebp - 0x174]
call fcn.005a9770
mov ecx, dword [edi + 0x30]
mov dword [ebp - 0x190], eax
cmp ecx, 0xffffffff
je 0x45982e
test ecx, ecx
je 0x45982e
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x190]
mov dword [edi + 0x30], eax
test eax, eax
jne 0x459fb7
mov dword [edi + 0x30], 0xffffffff
jmp 0x459fb7
cmp eax, dword [ebp - 0x1d4]
jne 0x4598bd
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x458e69
push dword [ebp - 0x190]
mov ecx, esi
push dword [ebp - 0x17c]
call fcn.005ba070
push eax
lea ecx, [ebp - 0x8c]
call fcn.005dc1c0
push 0
lea ecx, [ebp - 0x8c]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0045ee00
jmp 0x459fb7
cmp eax, dword [ebp - 0x1bc]
jne 0x459973
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x45990a
mov eax, dword [ebp - 0x190]
test eax, eax
je 0x458e69
push 0
push eax
push dword [ebp - 0x17c]
xorps xmm0, xmm0
mov dword [ebp - 0xc4], 0
mov ecx, esi
movq qword [ebp - 0xcc], xmm0
call fcn.005ba070
push eax
lea ecx, [ebp - 0xcc]
call fcn.005dc570
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x6558f0
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x14
call fcn.005daa70
lea ecx, [ebp - 0xcc]
test eax, eax
jne 0x459fc5
mov byte [ebp - 4], 0xd
call fcn.005dc430
jmp 0x458e69
cmp eax, dword [ebp - 0x1d0]
jne 0x459ba0
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x458e69
push 0xd
push dword [edi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x17c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1a0]
movups xmmword [ebp - 0xb0], xmm0
push esi
call fcn.005b8800
push dword [ebp - 0x190]
mov byte [ebp - 4], 0x15
mov ecx, esi
push dword [ebp - 0x17c]
call fcn.005ba070
push eax
lea ecx, [ebp - 0x8c]
call fcn.005dc1c0
push 8
push 0
push 0x62439c
push str.__.
lea ecx, [ebp - 0x8c]
call fcn.005d9660
sub esp, 8
mov dword [ebp - 0x98], 0
xorps xmm0, xmm0
lea ecx, [ebp - 0x8c]
movq qword [ebp - 0xa0], xmm0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x635758
call fcn.005dc190
push eax
push str.Verifying
lea ecx, [ebp - 0xa0]
call fcn.005dc520
lea ecx, [edi + 0x14f0]
mov byte [ebp - 4], 0x16
call fcn.005b6220
push eax
mov edx, 0x1f4
lea ecx, [ebp - 0xa0]
call fcn.0058e5e0
push 0
push 0xffffffffffffffc4
sub esp, 8
lea ecx, [ebp - 0xa0]
push 0x46
push 0x258
push 0
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0043da60
mov ecx, eax
call fcn.005b66e0
lea ecx, [ebp - 0x8c]
call fcn.005dc190
xor edx, edx
mov ecx, eax
call fcn.00594240
push eax
lea ecx, [ebp - 0xa0]
call fcn.005dc1c0
lea ecx, [edi + 0x14f0]
call fcn.005b6220
push eax
mov edx, 0x1f4
lea ecx, [ebp - 0x8c]
call fcn.0058e5e0
sub esp, 0xc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x62781c
lea ecx, [ebp - 0x8c]
call fcn.005dc190
push eax
lea ecx, [ebp - 0xa0]
call fcn.005da510
lea ecx, [ebp - 0xa0]
call fcn.005dc190
push eax
push 0x64
lea ecx, [edi + 0x14f0]
call fcn.005b66e0
push 1
push str.Close
lea ecx, [edi + 0x14f0]
call fcn.005b64a0
push 0
push 0
mov ecx, edi
call fcn.0043d720
test eax, eax
jne 0x459b6e
push 5
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
mov ecx, edi
call fcn.0043d720
test eax, eax
je 0x459b57
push 2
lea ecx, [edi + 0x14f0]
call fcn.005b6250
lea ecx, [ebp - 0xa0]
call fcn.005dc430
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.005b8790
mov esi, dword [ebp - 0x1b0]
jmp 0x459fb7
cmp eax, dword [ebp - 0x1e0]
jne 0x459c34
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x458e69
push dword [ebp - 0x190]
mov ecx, esi
push dword [ebp - 0x17c]
call fcn.005ba070
push eax
lea ecx, [ebp - 0x8c]
call fcn.005dc1c0
push 8
push 0
push 0x62439c
push str.__.
lea ecx, [ebp - 0x8c]
call fcn.005d9660
lea ecx, [ebp - 0x8c]
call fcn.005dc190
xor edx, edx
mov ecx, eax
call fcn.00590c10
jmp 0x459fb7
cmp eax, dword [ebp - 0x1a8]
jne 0x459cb5
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
mov dword [ebp - 0x190], eax
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x458e69
lea eax, [ebp - 0xf0]
mov ecx, edi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x190]
push dword [ebp - 0x17c]
call fcn.00456910
push 0
lea ecx, [ebp - 0x8c]
call fcn.005dc190
push eax
push 2
push dword [ebp - 0x1ac]
call dword [sym.imp.SHELL32.dll_SHObjectProperties]
jmp 0x459fb7
cmp eax, dword [ebp - 0x1b8]
je 0x459cc9
cmp eax, dword [ebp - 0x1cc]
jne 0x459fb7
push 0
push dword [ebp - 0x90]
lea eax, [ebp - 0x17c]
mov ecx, edi
push eax
call fcn.00458170
push dword [ebp - 0x17c]
mov ecx, esi
call fcn.005c5730
mov dword [ebp - 0x174], eax
jmp 0x459fb7
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x19c], eax
test eax, eax
je 0x458e69
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x458e69
lea eax, [ebp - 0xf0]
mov ecx, edi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x19c]
push dword [ebp - 0x17c]
call fcn.00456910
test al, al
je 0x458e69
push 0xd
push dword [edi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x17c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1a0]
movups xmmword [ebp - 0xb0], xmm0
push esi
call fcn.005b8800
sub esp, 8
mov byte [ebp - 4], 0x11
mov ecx, edi
push 0x8c
push 0
push 0
push 0
push 1
push str.Are_you_sure_you_want_to_permanently_delete_the_selected_module_
call fcn.0043e2e0
test eax, eax
jne 0x459dc8
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.005b8790
jmp 0x458e69
push 0
push 0xe
lea ecx, [ebp - 0x8c]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0045a0e0
cmp eax, 1
jne 0x459e04
push dword [ebp - 0x19c]
push 0
push 0x1101
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
push str.The_selected_module_was_successfully_deleted.
jmp 0x459e0e
cmp eax, 2
jne 0x459e19
push str.The_selected_module_was_scheduled_for_removal_on_reboot
lea ecx, [ebp - 0x8c]
call fcn.005dc510
sub esp, 8
lea ecx, [ebp - 0x8c]
push 0x8c
push 0x190
push 0
push 0
push 4
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0043e2e0
jmp 0x459fa8
mov eax, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 9
push 0x110a
push dword [ebp - 0x174]
call eax
mov dword [ebp - 0x19c], eax
test eax, eax
je 0x458e69
push eax
push 3
push 0x110a
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x458e69
lea eax, [ebp - 0xf0]
mov ecx, edi
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x19c]
push dword [ebp - 0x17c]
call fcn.00456910
test al, al
je 0x458e69
push 0xd
push dword [edi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0xc0]
push dword [ebp - 0x17c]
movups xmmword [ebp - 0xc0], xmm0
push dword [ebp - 0x1a0]
movups xmmword [ebp - 0xb0], xmm0
push esi
call fcn.005b8800
sub esp, 8
mov byte [ebp - 4], 0x10
mov ecx, edi
push 0x8c
push 0
push 0
push 0
push 1
push str.Are_you_sure_you_want_to_move_the_selected_module_to_the_recycle_bin_
call fcn.0043e2e0
test eax, eax
jne 0x459f16
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.005b8790
jmp 0x458e69
push 0
push 0xc
lea ecx, [ebp - 0x8c]
call fcn.005dc190
push eax
mov ecx, edi
call fcn.0045a0e0
cmp eax, 1
jne 0x459e04
push dword [ebp - 0x19c]
push 0
push 0x1101
push dword [ebp - 0x174]
call dword [sym.imp.USER32.dll_SendMessageW]
push str.The_selected_module_was_successfully_moved_to_the_recycle_bin.
jmp 0x459e0e
push 0xd
push dword [edi + 0x11bc]
xorps xmm0, xmm0
push ecx
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0xc0]
push esi
movups xmmword [ebp - 0xc0], xmm0
movups xmmword [ebp - 0xb0], xmm0
call fcn.005b8800
mov byte [ebp - 4], 0xe
mov ecx, edi
push dword [ebp - 0x17c]
call fcn.00456e70
push dword [ebp - 0x1ac]
mov byte [ebp - 0x175], al
call dword [sym.imp.USER32.dll_BringWindowToTop]
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.005b8790
cmp byte [ebp - 0x175], 0
jne 0x459ffc
jmp 0x458e69
push 0
add eax, 3
mov byte [ebp - 0x175], 2
push eax
call fcn.005dad10
mov ecx, eax
call fcn.005dafe0
lea ecx, [ebp - 0xcc]
mov dword [edi + 0x1f70], eax
mov byte [ebp - 4], 0xd
call fcn.005dc430
jmp 0x459ffc
mov byte [ebp - 0x175], 1
push 0
push str.ModulesManager
mov ecx, edi
call fcn.0045f380
cmp byte [ebp - 0x175], 0
mov ecx, edi
sete al
movzx eax, al
push eax
call fcn.0045f260
lea ecx, [ebp - 0xf0]
call fcn.005d9280
lea ecx, [ebp - 0x14c]
call fcn.005c6500
lea ecx, [ebp - 0x16c]
call fcn.005c6500
lea ecx, [ebp - 0x168]
call fcn.005c6500
lea ecx, [ebp - 0x150]
call fcn.005c6500
lea ecx, [ebp - 0x164]
call fcn.005c6500
lea ecx, [ebp - 0x160]
call fcn.005c6500
lea ecx, [ebp - 0x170]
call fcn.005c6500
lea ecx, [ebp - 0x15c]
call fcn.005c6500
lea ecx, [ebp - 0x158]
call fcn.005c6500
lea ecx, [ebp - 0x154]
call fcn.005c6500
lea ecx, [ebp - 0x94]
call fcn.005d69e0
lea ecx, [ebp - 0xfc]
call fcn.005dc430
lea ecx, [ebp - 0x8c]
call fcn.005dc430
mov al, byte [ebp - 0x175]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret