Function at 0x441d90
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ac8fe
mov eax, dword fs:[0]
push eax
sub esp, 0x38
push ebx
push esi
push edi
mov eax, dword [0x4dc6e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x4e4cac]
mov dword [ebp - 0x44], 0
test al, 1
jne 0x441df3
or eax, 1
mov dword [0x4e4cac], eax
push 0x4affa8
mov ecx, 0x4e4ca8
mov dword [ebp - 4], 0
call fcn.00403690
push 0x4ae310
call fcn.004909fb
add esp, 4
mov dword [ebp - 0x10], 0
mov edi, dword [ebp + 0xc]
mov dword [ebp - 4], 1
mov eax, dword [edi + 0x310]
test eax, eax
je 0x441e66
cmp word [eax], 0
je 0x441e66
mov ecx, dword [0x4e0634]
xor eax, eax
test ecx, ecx
jle 0x441e2f
cmp dword [eax*4 + 0x4e06f8], 0x26
je 0x441e66
inc eax
cmp eax, ecx
jl 0x441e20
push 0x4e4ca8
lea ecx, [ebp - 0x10]
call fcn.00403b70
push dword [edi + 0x310]
lea ecx, [ebp - 0x1c]
call fcn.00403690
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 1
call fcn.0048c930
mov eax, dword [edi + 0x314]
test eax, eax
je 0x441ecb
cmp word [eax], 0
je 0x441ecb
mov ecx, dword [0x4e0634]
xor eax, eax
test ecx, ecx
jle 0x441e94
cmp dword [eax*4 + 0x4e06f8], 0x409
je 0x441ecb
inc eax
cmp eax, ecx
jl 0x441e82
push 0x4e4ca8
lea ecx, [ebp - 0x10]
call fcn.00403b70
push dword [edi + 0x314]
lea ecx, [ebp - 0x1c]
call fcn.00403690
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 1
call fcn.0048c930
mov eax, dword [edi + 0x320]
test eax, eax
je 0x442066
cmp word [eax], 0
je 0x442066
mov ecx, dword [0x4e0634]
xor eax, eax
test ecx, ecx
jle 0x441f06
nop
cmp dword [eax*4 + 0x4e06f8], 0x408
je 0x442066
inc eax
cmp eax, ecx
jl 0x441ef0
push 0x4e4ca8
lea ecx, [ebp - 0x10]
call fcn.00403b70
push 0x4bbed0
lea ecx, [ebp - 0x1c]
call fcn.00403690
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 1
call fcn.0048c930
push dword [edi + 0x320]
call fcn.0048faa4
mov ebx, eax
add esp, 4
mov edx, ebx
mov dword [ebp - 0x14], ebx
lea eax, [edx + 2]
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x441f54
sub edx, eax
sar edx, 1
cmp edx, 0x64
jbe 0x44203c
mov ecx, ebx
xor edx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x441f73
sub ecx, esi
sar ecx, 1
cmp ecx, 0x64
jbe 0x44202a
mov edx, ebx
add ebx, 0xc8
xor edi, edi
movzx esi, word [ebx]
lea ecx, [ebp - 0x1c]
xor eax, eax
push edx
mov word [ebx], ax
call fcn.00403690
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 1
call fcn.0048c930
push 0x4bbef4
lea ecx, [ebp - 0x18]
call fcn.00403690
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.0048c930
mov eax, dword [ebp - 0x14]
lea ebx, [ebx + 0xc8]
add edi, 0x64
mov word [ebx - 0xc8], si
lea edx, [eax + edi*2]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x442006
sub ecx, esi
sar ecx, 1
cmp ecx, 0x64
ja 0x441f95
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0x24], edi
mov edi, dword [ebp + 0xc]
mov edx, dword [ebp - 0x24]
lea eax, [ebx + edx*2]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00403690
mov byte [ebp - 4], 7
jmp 0x44204e
push dword [edi + 0x320]
lea ecx, [ebp - 0x1c]
call fcn.00403690
mov byte [ebp - 4], 8
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 1
call fcn.0048c930
mov eax, dword [edi + 0x318]
test eax, eax
je 0x442102
cmp word [eax], 0
je 0x442102
mov ecx, dword [0x4e0634]
xor eax, eax
test ecx, ecx
jle 0x4420a2
lea ebx, [ebx]
cmp dword [eax*4 + 0x4e06f8], 0x425
je 0x442102
inc eax
cmp eax, ecx
jl 0x442090
push 0x4e4ca8
lea ecx, [ebp - 0x10]
call fcn.00403b70
push 0x4bbf04
lea ecx, [ebp - 0x1c]
call fcn.00403690
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 1
call fcn.0048c930
push dword [edi + 0x318]
lea ecx, [ebp - 0x1c]
call fcn.00403690
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 1
call fcn.0048c930
mov eax, dword [edi + 0x338]
test eax, eax
je 0x4421a2
cmp word [eax], 0
je 0x4421a2
mov ecx, dword [0x4e0634]
xor eax, eax
test ecx, ecx
jle 0x442142
jmp 0x442130
cmp dword [eax*4 + 0x4e06f8], 0x676
je 0x4421a2
inc eax
cmp eax, ecx
jl 0x442130
push 0x4e4ca8
lea ecx, [ebp - 0x10]
call fcn.00403b70
push 0x4bbf18
lea ecx, [ebp - 0x1c]
call fcn.00419410
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 1
call fcn.0048c930
push dword [edi + 0x338]
lea ecx, [ebp - 0x1c]
call fcn.00403690
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 1
call fcn.0048c930
mov eax, dword [edi + 0x31c]
test eax, eax
je 0x442242
cmp word [eax], 0
je 0x442242
mov ecx, dword [0x4e0634]
xor eax, eax
test ecx, ecx
jle 0x4421e2
jmp 0x4421d0
cmp dword [eax*4 + 0x4e06f8], 0x49d
je 0x442242
inc eax
cmp eax, ecx
jl 0x4421d0
push 0x4e4ca8
lea ecx, [ebp - 0x10]
call fcn.00403b70
push 0x4bbf28
lea ecx, [ebp - 0x1c]
call fcn.00403690
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 1
call fcn.0048c930
push dword [edi + 0x31c]
lea ecx, [ebp - 0x1c]
call fcn.00403690
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 1
call fcn.0048c930
cmp dword [edi + 0x35c], 0
je 0x4423ec
push 0x4e4ca8
lea ecx, [ebp - 0x10]
call fcn.00403b70
push 0x4bbf44
push dword [edi + 0x3c]
call fcn.00491646
add esp, 8
lea ecx, [ebp + 0xc]
test eax, eax
jne 0x442283
push 0x4bbf60
call fcn.00403690
mov byte [ebp - 4], 0xf
jmp 0x4422e9
push 0x4bbf88
call fcn.00403690
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 1
call fcn.0048c930
mov eax, dword [edi + 0x350]
test eax, eax
je 0x442301
push eax
lea ecx, [ebp + 0xc]
call fcn.00403690
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 1
call fcn.0048c930
push 0x4bbec4
lea ecx, [ebp + 0xc]
call fcn.00403690
mov byte [ebp - 4], 0x12
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 1
call fcn.0048c930
push dword [edi + 0x35c]
lea ecx, [ebp + 0xc]
call fcn.00403690
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 1
call fcn.0048c930
cmp dword [edi + 0x358], 0
je 0x442387
push 0x4bbec4
lea ecx, [ebp + 0xc]
call fcn.00403690
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 1
call fcn.0048c930
push dword [edi + 0x358]
lea ecx, [ebp + 0xc]
call fcn.00403690
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 1
call fcn.0048c930
cmp dword [edi + 0x354], 0
je 0x44294e
push 0x4bbec4
lea ecx, [ebp + 0xc]
call fcn.00403690
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 1
call fcn.0048c930
push dword [edi + 0x354]
lea ecx, [ebp + 0xc]
call fcn.00403690
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 1
call fcn.0048c930
jmp 0x44294e
push 0x4bbfa8
push dword [edi + 0x3c]
call fcn.00491646
add esp, 8
test eax, eax
je 0x4428e7
push 0x4bbfc0
push dword [edi + 0x3c]
call fcn.00491646
add esp, 8
test eax, eax
je 0x4428e7
push 0x4bbfdc
push dword [edi + 0x3c]
call fcn.00491646
add esp, 8
test eax, eax
je 0x4428e7
push 0x4bc00c
push dword [edi + 0x3c]
call fcn.00491646
add esp, 8
test eax, eax
je 0x442866
push 0x4bc00c
push dword [edi + 0x3c]
call fcn.00491646
add esp, 8
test eax, eax
je 0x442866
cmp dword [edi + 0x364], 0
je 0x4425bf
push 0x4e4ca8
lea ecx, [ebp - 0x10]
call fcn.00403b70
push 0x4bc034
lea ecx, [ebp + 0xc]
call fcn.00403690
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 1
call fcn.0048c930
mov esi, dword [edi + 0x364]
test esi, esi
je 0x44294e
jmp 0x4424c0
push 0x4bc054
lea ecx, [ebp + 0xc]
call fcn.00403690
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 1
call fcn.0048c930
push dword [esi]
lea ecx, [ebp - 0x1c]
call fcn.00403690
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 1
call fcn.0048c930
push 0x4bc060
lea ecx, [ebp - 0x18]
call fcn.00403690
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.0048c930
push dword [esi + 4]
lea ecx, [ebp - 0x14]
call fcn.00403690
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x1f
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.0048c930
push 0x4bc08c
lea ecx, [ebp - 0x20]
call fcn.00403690
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x20
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 1
call fcn.0048c930
push dword [esi + 8]
lea ecx, [ebp - 0x24]
call fcn.00403690
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call fcn.0048c930
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x4424c0
jmp 0x44294e
test byte [edi + 0x28], 0x20
je 0x44294e
cmp dword [edi + 0x360], 0
je 0x44264e
push 0x4bc0a8
lea ecx, [ebp - 0x24]
call fcn.00403690
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call fcn.0048c930
push dword [edi + 0x360]
lea ecx, [ebp - 0x24]
call fcn.00403690
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call fcn.0048c930
push 0x4bc0b0
lea ecx, [ebp - 0x24]
call fcn.00403690
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x24
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call fcn.0048c930
push 0x4e4ca8
lea ecx, [ebp - 0x10]
call fcn.00403b70
push 0x4bc0b4
lea ecx, [ebp - 0x24]
call fcn.00403690
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call fcn.0048c930
push 0x4e600c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov esi, dword [0x4e6028]
xor ebx, ebx
lea eax, [esi*4]
push eax
call fcn.0048fb2f
xor edx, edx
mov dword [ebp - 0x14], eax
add esp, 4
mov dword [ebp - 0x20], edx
test esi, esi
jle 0x4427d5
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
lea esp, [esp]
mov eax, dword [0x4e6024]
add eax, ecx
mov dword [ebp - 0x28], eax
mov eax, dword [eax + 0x24]
cmp eax, dword [edi + 0x44]
jne 0x4427c0
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x26
push dword [eax]
call fcn.00403690
push 0x4b73e8
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x27
call fcn.00419410
mov esi, eax
push 0x4bc0c8
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x28
call fcn.00419410
mov ecx, dword [ebp - 0x1c]
push eax
mov eax, dword [0x4e6024]
mov byte [ebp - 4], 0x29
push dword [ecx + eax + 4]
lea eax, [ebp - 0x34]
push eax
call fcn.00403a10
add esp, 0xc
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x2a
push ecx
lea ecx, [ebp - 0x30]
push ecx
mov ecx, eax
call fcn.00403a80
push esi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2b
push ecx
mov ecx, eax
call fcn.00403a80
push eax
lea ecx, [ebp - 0x18]
call fcn.00403910
lea ecx, [ebp - 0x2c]
call fcn.0048c930
lea ecx, [ebp - 0x30]
call fcn.0048c930
lea ecx, [ebp - 0x34]
call fcn.0048c930
lea ecx, [ebp - 0x38]
call fcn.0048c930
lea ecx, [ebp - 0x3c]
call fcn.0048c930
lea ecx, [ebp - 0x24]
call fcn.0048c930
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x442796
mov eax, dword [eax]
jmp 0x442798
xor eax, eax
push eax
call fcn.0048faa4
mov ecx, dword [ebp - 0x14]
add esp, 4
mov byte [ebp - 4], 1
mov dword [ecx + ebx*4], eax
lea ecx, [ebp - 0x18]
inc ebx
call fcn.0048c930
mov esi, dword [0x4e6028]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
inc edx
add ecx, 0x2c
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], ecx
cmp edx, esi
jl 0x4426c0
mov eax, dword [ebp - 0x14]
push 0x4511b0
push 4
push ebx
push eax
call fcn.00493f80
add esp, 0x10
xor esi, esi
test ebx, ebx
jle 0x442853
mov edi, dword [ebp - 0x14]
nop
push 0x4bbec4
lea ecx, [ebp - 0x24]
call fcn.00403690
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call fcn.0048c930
push dword [edi + esi*4]
lea ecx, [ebp - 0x20]
call fcn.00403690
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 1
call fcn.0048c930
push dword [edi + esi*4]
call fcn.0048faf7
inc esi
add esp, 4
cmp esi, ebx
jl 0x4427f0
mov edi, dword [ebp + 0xc]
push 0x4e600c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push dword [ebp - 0x14]
jmp 0x442946
cmp word [edi + 0x28e], 0x37
jb 0x44294e
mov eax, dword [edi + 0x54]
test eax, eax
je 0x44294e
push 0x4bc00c
push dword [eax + 0x3c]
call fcn.00491646
add esp, 8
test eax, eax
jne 0x44294e
push 0x4e4ca8
lea ecx, [ebp - 0x10]
call fcn.00403b70
push 0x4bc028
lea ecx, [ebp + 0xc]
call fcn.00403690
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 1
call fcn.0048c930
lea eax, [ebp - 0x10]
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x40]
push eax
push 0x441b00
call dword [sym.imp.USER32.dll_EnumWindows]
jmp 0x44294e
push dword [edi + 0x44]
call fcn.004503f0
mov esi, eax
add esp, 4
test esi, esi
je 0x44294e
push 0x4e4ca8
lea ecx, [ebp - 0x10]
call fcn.00403b70
push esi
lea ecx, [ebp - 0x3c]
call fcn.00403690
push eax
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x18
push 0x4bbffc
push eax
call fcn.00403a10
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x19
call fcn.00403b70
lea ecx, [ebp + 0xc]
call fcn.0048c930
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call fcn.0048c930
push esi
call fcn.0048faf7
add esp, 4
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x442966
mov eax, dword [eax]
test eax, eax
je 0x442966
push eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
jne 0x44299a
push 0x4e4ca8
lea ecx, [ebp - 0x10]
call fcn.00403b70
push dword [edi + 0x3c]
lea ecx, [ebp + 0xc]
call fcn.00403690
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b70
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 1
call fcn.0048c930
mov eax, dword [0x4e4ca8]
test eax, eax
je 0x4429a7
mov ecx, dword [eax]
jmp 0x4429a9
xor ecx, ecx
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4429b0
mov eax, dword [ebp - 0x10]
sub ecx, edx
sar ecx, 1
test eax, eax
je 0x4429ca
mov eax, dword [eax]
jmp 0x4429cc
xor eax, eax
mov edi, dword [ebp + 8]
lea eax, [eax + ecx*2]
push eax
mov ecx, edi
call fcn.00403690
mov esi, dword [ebp - 0x10]
test esi, esi
je 0x442a26
lea eax, [esi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x442a26
test esi, esi
je 0x442a26
mov eax, dword [esi]
test eax, eax
je 0x442a06
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x442a1d
push eax
call fcn.0049243b
add esp, 4
mov dword [esi + 4], 0
push esi
call fcn.0048f453
add esp, 4
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret