Function at 0x464930
Capabilities:
Identify system language via api
Query or enumerate registry value
Write file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fc487
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x320
mov eax, dword [0x534090]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x2e4], edi
mov eax, dword [ebx + 8]
mov esi, dword [ebx + 0x10]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x2d0], eax
xor eax, eax
mov dword [ebp - 0x2dc], esi
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x2c0], eax
call fcn.00433fc0
xorps xmm0, xmm0
mov dword [ebp - 0x2c0], eax
movlpd qword [ebp - 0x318], xmm0
mov dword [ebp - 0x310], 0x5173c0
mov ecx, dword [eax]
mov dword [ebp - 0x30c], eax
mov dword [ebp - 0x308], 0
cmp dword [ecx], 0
je 0x464a24
lea eax, [ebp - 0x20]
movlpd qword [ebp - 0x20], xmm0
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
push 0x515300
push str._BDREINIT__::_CCrashInfo::WriteInfoFile___
push str._s_s
push 0x515300
push 0
push dword [ebp - 0x2c0]
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x314], ecx
call fcn.00433290
add esp, 0x18
mov dword [ebp - 4], 0
mov dword [ebp - 0xd0], 0
xor eax, eax
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 7
mov word [ebp - 0xd0], ax
push eax
push 0x4000100
push 2
push eax
push 7
push 0xc0010000
mov byte [ebp - 4], 2
push dword [ebp - 0x2cc]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ecx, dword [edi + 8]
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2cc], ecx
cmp ecx, 0xffffffff
je 0x464ab1
test ecx, ecx
je 0x464ab1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [ebp - 0x2cc]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov esi, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x2c0]
mov dword [edi + 8], eax
cmp eax, 0xffffffff
je 0x465e9c
test eax, eax
je 0x465e9c
push 0x35
push str.__xml_version_1.0__encoding_utf_8____r_n_dump_info__r_n
lea ecx, [ebp - 0xd0]
call fcn.0043a570
lea eax, [esi + 0x2a8dc]
mov ecx, 0x515378
test eax, eax
cmovne ecx, eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x1c], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x20]
push 0x23
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x38]
push str._t_product_info_identifier______r_n
mov dword [eax], 0xc
mov dword [eax + 4], 0
call fcn.0041d9e0
mov ecx, 0x800
add esp, 0x18
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x2c0], ecx
mov byte [ebp - 4], 6
lea eax, [ebp - 0x38]
cmp dword [ebp - 0x24], 8
lea ecx, [ebp - 0xd0]
push dword [ebp - 0x28]
cmovae eax, dword [ebp - 0x38]
push eax
call fcn.0043a570
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x24]
cmp edx, 8
jb 0x464b8a
mov ecx, dword [ebp - 0x38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x464b80
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x466185
push edx
push ecx
call fcn.004cb66f
add esp, 8
mov esi, dword [ebp - 0x2d0]
mov eax, dword [esi]
test eax, eax
je 0x464bcb
sub esp, 0x18
mov ecx, esp
push eax
call fcn.0043aee0
lea eax, [ebp - 0x50]
push eax
call fcn.004661b0
mov edx, eax
mov byte [ebp - 4], 7
mov ecx, 0x808
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x2c0], ecx
jb 0x464bd0
mov edx, dword [edx]
jmp 0x464bd0
mov edx, 0x515378
mov eax, dword [ebp - 0x2d4]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x1c], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x20], edx
push 0x14
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x38]
push str._t_email___email__r_n
mov dword [eax], 0xc
mov dword [eax + 4], 0
call fcn.0041d9e0
mov eax, dword [ebp - 0x2bc]
add esp, 0x18
or eax, 0x1000
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 4], 9
test al, 8
je 0x464c85
mov edx, dword [ebp - 0x3c]
and eax, 0xfffffff7
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x2c0], eax
cmp edx, 8
jb 0x464c71
mov ecx, dword [ebp - 0x50]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x464c67
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46618a
push edx
push ecx
call fcn.004cb66f
add esp, 8
xor eax, eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
cmp dword [ebp - 0x24], 8
lea eax, [ebp - 0x38]
push dword [ebp - 0x28]
cmovae eax, dword [ebp - 0x38]
lea ecx, [ebp - 0xd0]
push eax
call fcn.0043a570
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x24]
cmp edx, 8
jb 0x464cdd
mov ecx, dword [ebp - 0x38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x464cd3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46618f
push edx
push ecx
call fcn.004cb66f
add esp, 8
mov eax, dword [esi + 4]
test eax, eax
je 0x464d1d
sub esp, 0x18
mov ecx, esp
push eax
call fcn.0043aee0
lea eax, [ebp - 0x50]
push eax
call fcn.004661b0
mov edx, eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x2bc]
or ecx, 0x10
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x2c0], ecx
jb 0x464d22
mov edx, dword [edx]
jmp 0x464d22
mov edx, 0x515378
mov eax, dword [ebp - 0x2d4]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x1c], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x20], edx
push 0x18
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x38]
push str._t_subject___subject__r_n
mov dword [eax], 0xc
mov dword [eax + 4], 0
call fcn.0041d9e0
mov eax, dword [ebp - 0x2bc]
add esp, 0x18
or eax, 0x2000
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 4], 0xc
test al, 0x10
je 0x464dd7
mov edx, dword [ebp - 0x3c]
and eax, 0xffffffef
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x2c0], eax
cmp edx, 8
jb 0x464dc3
mov ecx, dword [ebp - 0x50]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x464db9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x466194
push edx
push ecx
call fcn.004cb66f
add esp, 8
xor eax, eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
cmp dword [ebp - 0x24], 8
lea eax, [ebp - 0x38]
push dword [ebp - 0x28]
cmovae eax, dword [ebp - 0x38]
lea ecx, [ebp - 0xd0]
push eax
call fcn.0043a570
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x24]
cmp edx, 8
jb 0x464e2f
mov ecx, dword [ebp - 0x38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x464e25
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x466199
push edx
push ecx
call fcn.004cb66f
add esp, 8
mov eax, dword [esi + 8]
test eax, eax
je 0x464e6f
sub esp, 0x18
mov ecx, esp
push eax
call fcn.0043aee0
lea eax, [ebp - 0x50]
push eax
call fcn.004661b0
mov edx, eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x2bc]
or ecx, 0x20
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x2c0], ecx
jb 0x464e74
mov edx, dword [edx]
jmp 0x464e74
mov edx, 0x515378
mov eax, dword [ebp - 0x2d4]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x1c], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x20], edx
push 0x24
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x38]
push str._t_USER_FEEDBACK___USER_FEEDBACK__r_n
mov dword [eax], 0xc
mov dword [eax + 4], 0
call fcn.0041d9e0
mov eax, dword [ebp - 0x2bc]
add esp, 0x18
or eax, 0x4000
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 4], 0xf
test al, 0x20
je 0x464f1d
mov edx, dword [ebp - 0x3c]
and eax, 0xffffffdf
mov dword [ebp - 0x2bc], eax
cmp edx, 8
jb 0x464f09
mov ecx, dword [ebp - 0x50]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x464eff
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46619e
push edx
push ecx
call fcn.004cb66f
add esp, 8
xor eax, eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
cmp dword [ebp - 0x24], 8
lea eax, [ebp - 0x38]
push dword [ebp - 0x28]
cmovae eax, dword [ebp - 0x38]
lea ecx, [ebp - 0xd0]
push eax
call fcn.0043a570
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x24]
cmp edx, 8
jb 0x464f75
mov ecx, dword [ebp - 0x38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x464f6b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4661a3
push edx
push ecx
call fcn.004cb66f
add esp, 8
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
movzx eax, ax
push 0x118
mov dword [ebp - 0x2c0], eax
lea eax, [ebp - 0x274]
push 0
push eax
call fcn.004cd810
add esp, 0xc
mov dword [ebp - 0x278], 0x11c
mov dword [ebp - 0x114], 0
xor eax, eax
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x100], 7
mov word [ebp - 0x114], ax
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 0x11
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x465171
lea eax, [ebp - 0xe8]
push eax
call fcn.004665b0
mov byte [ebp - 4], 0x12
mov edx, eax
cmp dword [eax + 0x14], 8
movzx ecx, byte [ebp - 0x15e]
mov esi, dword [ebp - 0x274]
mov edi, dword [ebp - 0x270]
mov dword [ebp - 0x2d0], ecx
mov ecx, dword [ebp - 0x2c0]
movzx ecx, cx
mov dword [ebp - 0x2cc], ecx
jb 0x465026
mov edx, dword [eax]
mov ecx, dword [eax + 0x10]
sub esp, 0x10
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0xb0], esi
mov esi, dword [ebp - 0x26c]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0xa0], esi
mov esi, dword [ebp - 0x268]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x98], esi
lea esi, [ebp - 0x264]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x90], esi
movzx esi, word [ebp - 0x164]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x88], esi
movzx esi, word [ebp - 0x162]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x80], esi
movzx esi, word [ebp - 0x160]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x78], esi
mov esi, dword [ebp - 0x2d0]
mov dword [ebp - 0x64], eax
mov eax, esp
mov dword [ebp - 0x5c], ecx
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x70], esi
mov esi, dword [ebp - 0x2cc]
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x60], edx
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x38]
push 0xce
push str._t_OS_INFO_MajorVersion___MinorVersion___BuildNumber___PlatformId___CSDVersion___ServicePackMajor___ServicePackMinor___SuiteMask___ProductType___OS_Lang_:04x__OS_Arch______r_n
mov dword [eax], 0x222c2222
mov dword [eax + 4], 0xd22
call fcn.0041d9e0
movups xmm0, xmmword [ebp - 0x38]
mov edi, dword [ebp - 0x2bc]
add esp, 0x18
or edi, 0x8000
movups xmmword [ebp - 0x114], xmm0
mov dword [ebp - 0x2bc], edi
movq xmm0, qword [ebp - 0x28]
movq qword [ebp - 0x104], xmm0
xor eax, eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 7
mov word [ebp - 0x38], ax
jmp 0x46536c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x2d0], eax
lea edx, [ebp - 0xb0]
xor eax, eax
mov dword [ebp - 0xb0], 0x80618057
lea ecx, [ebp - 0x50]
mov dword [ebp - 0xac], 0x806e8072
mov dword [ebp - 0xa8], 0x806e8069
mov dword [ebp - 0xa4], 0x802c8067
mov dword [ebp - 0xa0], 0x80638020
mov dword [ebp - 0x9c], 0x806c8061
mov dword [ebp - 0x98], 0x8069806c
mov dword [ebp - 0x94], 0x8067806e
mov dword [ebp - 0x90], 0x80478020
mov dword [ebp - 0x8c], 0x80748065
mov dword [ebp - 0x88], 0x80658056
mov dword [ebp - 0x84], 0x80738072
mov dword [ebp - 0x80], 0x806f8069
mov dword [ebp - 0x7c], 0x8045806e
mov dword [ebp - 0x78], 0x80208078
mov dword [ebp - 0x74], 0x80618066
mov dword [ebp - 0x70], 0x806c8069
mov dword [ebp - 0x6c], 0x80648065
mov dword [ebp - 0x68], 0x8020803a
mov dword [ebp - 0x64], 0x803a807b
mov dword [ebp - 0x60], 0x80788023
mov dword [ebp - 0x5c], 0x8000807d
mov word [ebp - 0x58], ax
call fcn.00416fb0
mov edi, dword [ebp - 0x2bc]
or edi, 0x10000
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], 8
lea edx, [ebp - 0x2cc]
lea ecx, [ebp - 0xe8]
cmovae eax, dword [ebp - 0x50]
mov dword [ebp - 0x2cc], eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.00417e30
add esp, 4
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x16
call fcn.0043a3c0
or edi, 0x20000
mov byte [ebp - 4], 0x17
lea esi, [ebp - 0x38]
cmp dword [ebp - 0x24], 8
cmovae esi, dword [ebp - 0x38]
call fcn.00433fc0
push esi
push 0
push str._BDREINIT__::_CCrashInfo::WriteInfoFile____
push 8
push eax
call fcn.00436d10
add esp, 0x14
lea ecx, [ebp - 0x38]
call fcn.0043b020
lea ecx, [ebp - 0xe8]
call fcn.0043b020
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x11
call fcn.0043b020
lea eax, [ebp - 0xe8]
push eax
call fcn.004665b0
mov byte [ebp - 4], 0x18
mov edx, eax
cmp dword [eax + 0x14], 8
mov ecx, dword [ebp - 0x2c0]
movzx esi, cx
jb 0x465307
mov edx, dword [eax]
mov ecx, dword [eax + 0x10]
sub esp, 0x10
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x44], eax
mov eax, esp
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x40], edx
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x38]
push 0xbb
push str._t_OS_INFO_MajorVersion___MinorVersion___BuildNumber___PlatformId___CSDVersion__ServicePackMajor___ServicePackMinor___SuiteMask___ProductType___OS_Lang_:04x__OS_Arch______r_n
mov dword [eax], 0xd2
mov dword [eax + 4], 0
call fcn.0041d9e0
add esp, 0x18
lea eax, [ebp - 0x38]
or edi, 0x40000
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x2bc], edi
push eax
call fcn.00439500
lea ecx, [ebp - 0x38]
call fcn.0043b020
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x11
call fcn.0043b020
cmp dword [ebp - 0x100], 8
lea eax, [ebp - 0x114]
push dword [ebp - 0x104]
cmovae eax, dword [ebp - 0x114]
lea ecx, [ebp - 0xd0]
push eax
call fcn.0043a570
mov eax, dword [ebp - 0x100]
cmp eax, 8
jb 0x4653bf
inc eax
lea ecx, [ebp - 0x114]
push eax
push dword [ebp - 0x114]
call fcn.0043afe0
xorps xmm0, xmm0
mov dword [ebp - 0xfc], 0x2c
movlpd qword [ebp - 0xf8], xmm0
movlpd qword [ebp - 0xf0], xmm0
movlpd qword [ebp - 0xe8], xmm0
movlpd qword [ebp - 0xe0], xmm0
movlpd qword [ebp - 0xd8], xmm0
mov dword [ebp - 0x50], 0
xor eax, eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], ax
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0xfc]
mov esi, dword [ebp - 0x2dc]
push 0x2c
push eax
push dword [esi + 0x19904]
call dword [sym.imp.KERNEL32.dll_K32GetProcessMemoryInfo]
test eax, eax
je 0x465566
mov eax, dword [ebp - 0x2d4]
sub esp, 0x10
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ebp - 0xf4]
mov esi, dword [ebp - 0xf0]
mov edi, dword [ebp - 0xec]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0xa8], ecx
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x88], ecx
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x80], ecx
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x78], ecx
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x70], ecx
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x68], ecx
mov ecx, dword [ebp - 0xd4]
mov dword [ebp - 0x5c], eax
mov eax, esp
mov dword [ebp - 0x60], ecx
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xa0], edx
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x90], edi
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x38]
push 0xfc
push str._t_MemInfo_PageFaultCount___PeakWorkingSetSize___WorkingSetSize___QuotaPeakPagedPoolUsage___QuotaPagedPoolUsage___QuotaPeakNonPagedPoolUsage___QuotaNonPagedPoolUsage___PagefileUsage___PeakPagefileUsage___PrivateUsage______r_n
mov dword [eax], 0x22222222
mov dword [eax + 4], 0x22
call fcn.0041d9e0
mov edi, dword [ebp - 0x2bc]
lea eax, [ebp - 0x38]
add esp, 0x18
lea ecx, [ebp - 0x50]
or edi, 0x80000
mov dword [ebp - 0x2bc], edi
push eax
call fcn.00439500
lea ecx, [ebp - 0x38]
call fcn.0043b020
mov esi, dword [ebp - 0x2dc]
jmp 0x465575
push 0xf
push str._t_ProcInfo____r_n
lea ecx, [ebp - 0x50]
call fcn.0043add0
cmp dword [ebp - 0x3c], 8
lea eax, [ebp - 0x50]
push dword [ebp - 0x40]
cmovae eax, dword [ebp - 0x50]
lea ecx, [ebp - 0xd0]
push eax
call fcn.0043a570
mov eax, dword [ebp - 0x3c]
cmp eax, 8
jb 0x4655a4
inc eax
lea ecx, [ebp - 0x50]
push eax
push dword [ebp - 0x50]
call fcn.0043afe0
mov dword [ebp - 0x38], 0
xor eax, eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 7
mov word [ebp - 0x38], ax
lea eax, [ebp - 0x2d8]
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x324]
push eax
push dword [esi + 0x19904]
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
test eax, eax
je 0x4659e6
mov esi, dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x324]
push eax
call esi
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x32c]
push eax
call esi
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x2d8]
push eax
call esi
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, eax
mov dword [ebp - 0x2c0], edx
mov edx, 0x1a9fbe77
mov dword [ebp - 0x2c4], ecx
mul edx
mov edi, 0x624dd2f
mov dword [ebp - 0xb8], eax
mov esi, edx
mov eax, ecx
mov ecx, 0x1a9fbe77
mul edi
mov edi, eax
mov dword [ebp - 0x2cc], edx
mov eax, dword [ebp - 0x2c0]
mul ecx
mov ecx, eax
mov dword [ebp - 0x2d0], edx
mov eax, dword [ebp - 0x2c0]
mov edx, 0x624dd2f
mul edx
add ecx, esi
mov esi, dword [ebp - 0x2c0]
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp - 0x2d0]
adc edx, 0
mov dword [ebp - 0x2e0], eax
add edi, ecx
mov ecx, dword [ebp - 0x2cc]
mov dword [ebp - 0xb8], edi
adc ecx, 0
xor eax, eax
add edx, ecx
mov ecx, dword [ebp - 0x2e0]
adc eax, eax
add ecx, edx
mov edx, dword [ebp - 0x1c]
adc edx, eax
mov eax, dword [ebp - 0x2c4]
sub eax, ecx
sbb esi, edx
shrd eax, esi, 1
shr esi, 1
add eax, ecx
adc esi, edx
shrd eax, esi, 9
shr esi, 9
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x2f4], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, eax
mov dword [ebp - 0x2c0], edx
mov edx, 0xd821dc3b
mov dword [ebp - 0x2cc], ecx
mul edx
mov edi, 0x179ec9cb
mov dword [ebp - 0xb8], eax
mov esi, edx
mov eax, ecx
mov ecx, 0xd821dc3b
mul edi
mov edi, eax
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2c0]
mul ecx
mov ecx, eax
mov dword [ebp - 0x2c4], edx
mov eax, dword [ebp - 0x2c0]
mov edx, 0x179ec9cb
mul edx
add ecx, esi
mov esi, dword [ebp - 0x2c0]
mov dword [ebp - 0x2d0], edx
mov edx, dword [ebp - 0x2c4]
adc edx, 0
mov dword [ebp - 0x2e0], eax
add edi, ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xb8], edi
adc ecx, 0
xor eax, eax
add edx, ecx
mov ecx, dword [ebp - 0x2e0]
adc eax, eax
add ecx, edx
mov edx, dword [ebp - 0x2d0]
adc edx, eax
mov eax, dword [ebp - 0x2cc]
sub eax, ecx
sbb esi, edx
shrd eax, esi, 1
shr esi, 1
add eax, ecx
adc esi, edx
shrd eax, esi, 0xf
shr esi, 0xf
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x2c0], edx
mov ecx, eax
mov edx, 0x7de6e565
mov edi, 0x4a90be58
mul edx
mov esi, edx
mov dword [ebp - 0xb8], eax
mov eax, ecx
mov ecx, 0x7de6e565
mul edi
mov dword [ebp - 0x1c], edx
mov edi, eax
mov eax, dword [ebp - 0x2c0]
mul ecx
mov dword [ebp - 0x2c4], edx
mov ecx, eax
mov eax, dword [ebp - 0x2c0]
mov edx, 0x4a90be58
mul edx
add ecx, esi
mov dword [ebp - 0x2d0], edx
mov edx, dword [ebp - 0x2c4]
adc edx, 0
mov dword [ebp - 0x2e0], eax
add edi, ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xb8], edi
adc ecx, 0
xor eax, eax
add edx, ecx
mov ecx, dword [ebp - 0x2e0]
adc eax, eax
add ecx, edx
mov edx, dword [ebp - 0x2d0]
adc edx, eax
shrd ecx, edx, 0x14
shr edx, 0x14
mov dword [ebp - 0xb8], ecx
mov dword [ebp - 0xb4], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0x2c0], edx
mov ecx, eax
mov edx, 0xf4cf721b
mov dword [ebp - 0x2cc], ecx
mul edx
mov edi, 0x8daea1d7
mov dword [ebp - 0x2c8], eax
mov esi, edx
mov eax, ecx
mul edi
mov ecx, 0xf4cf721b
mov edi, eax
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2c0]
mul ecx
mov ecx, eax
mov dword [ebp - 0x2c4], edx
mov eax, dword [ebp - 0x2c0]
mov edx, 0x8daea1d7
mul edx
add ecx, esi
mov esi, dword [ebp - 0x2c0]
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2d0], edx
mov edx, dword [ebp - 0x2c4]
adc edx, 0
add edi, ecx
mov ecx, dword [ebp - 0x1c]
adc ecx, 0
mov dword [ebp - 0x2c8], edi
xor eax, eax
add edx, ecx
mov ecx, dword [ebp - 0x2e0]
adc eax, eax
add ecx, edx
mov edx, dword [ebp - 0x2d0]
adc edx, eax
mov eax, dword [ebp - 0x2cc]
sub eax, ecx
sbb esi, edx
shrd eax, esi, 1
shr esi, 1
add eax, ecx
adc esi, edx
shrd eax, esi, 0x1a
mov dword [ebp - 0x2c8], eax
lea eax, [ebp - 0x2f8]
push eax
lea eax, [ebp - 0x300]
shr esi, 0x1a
push eax
lea eax, [ebp - 0xb8]
mov dword [ebp - 0x2c4], esi
push eax
lea eax, [ebp - 0x2c8]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x132]
push eax
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x136]
push eax
lea eax, [ebp - 0x13a]
push eax
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x11a]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x11e]
push eax
lea eax, [ebp - 0x122]
push eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x3e]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x42]
push eax
lea eax, [ebp - 0x46]
push eax
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.00466880
sub esp, 0x10
lea ecx, [ebp - 0x2b8]
mov eax, esp
push 0xe3
mov dword [eax + 8], ecx
lea ecx, [ebp - 0xe8]
push str._t_TimeInfo_CreationTime_:02d_:02d_:02d___:02d::02d::02d__tKernelTime_:02d_:02d_:02d___:02d::02d::02d__tUserTime_:02d_:02d_:02d___:02d::02d::02d__tSystemUpTime____:02d::02d::02d_____r_n
mov dword [eax], 0x16
mov dword [eax + 4], SysReAllocString
call fcn.0041d9e0
mov edi, dword [ebp - 0x2bc]
lea eax, [ebp - 0xe8]
add esp, 0x18
lea ecx, [ebp - 0x38]
or edi, 0x100000
push eax
call fcn.00439500
lea ecx, [ebp - 0xe8]
call fcn.0043b020
mov esi, dword [ebp - 0x2dc]
jmp 0x4659f5
push 0xf
push str._t_TimeInfo____r_n
lea ecx, [ebp - 0x38]
call fcn.0043add0
cmp dword [ebp - 0x24], 8
lea eax, [ebp - 0x38]
push dword [ebp - 0x28]
cmovae eax, dword [ebp - 0x38]
lea ecx, [ebp - 0xd0]
push eax
call fcn.0043a570
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x24]
cmp eax, 8
jb 0x465a28
inc eax
lea ecx, [ebp - 0x38]
push eax
push dword [ebp - 0x38]
call fcn.0043afe0
mov eax, dword [ebp - 0x2ec]
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0xb4], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xb8], str.CloudOverridesVersion
push 9
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x50]
push str._t_____r_n
mov dword [eax], 0xc
mov dword [eax + 4], 0
call fcn.0041d9e0
or edi, 0x200000
add esp, 0x18
mov dword [ebp - 0x2bc], edi
mov byte [ebp - 4], 0x1d
cmp byte [esi + 0x19908], 0
je 0x465b82
lea eax, [ebp - 0x2dc]
mov byte [ebp - 4], 0x1e
push eax
push 1
push 0
push str.SOFTWAREBitdefender_atc
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x2c4], 4
mov dword [ebp - 0x2dc], 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x465b6d
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0
push 0
push str.CloudOverridesVersion
push dword [ebp - 0x2dc]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x465b6d
mov eax, dword [ebp - 0x2ec]
sub esp, 0x10
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x24], eax
mov eax, esp
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], str.CloudOverridesVersion
mov dword [ebp - 0x28], str.CloudOverridesVersion
mov dword [eax + 8], ecx
lea ecx, [ebp - 0xe8]
push 0xf
push str._t_______r_n
mov dword [eax], 0xc2c
mov dword [eax + 4], 0
call fcn.0041d9e0
add esp, 0x18
lea eax, [ebp - 0xe8]
or edi, 0x400000
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x2bc], edi
push eax
call fcn.00439500
lea ecx, [ebp - 0xe8]
call fcn.0043b020
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x2dc]
test eax, eax
je 0x465b82
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x3c], 8
lea eax, [ebp - 0x50]
push dword [ebp - 0x40]
cmovae eax, dword [ebp - 0x50]
lea ecx, [ebp - 0xd0]
push eax
call fcn.0043a570
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 2
call fcn.0043b020
push 0xe
push str.__dump_info__r_n
lea ecx, [ebp - 0xd0]
call fcn.0043a570
call fcn.00433fc0
mov eax, dword [eax]
cmp dword [eax], 0
je 0x465caf
cmp dword [ebp - 0xbc], 8
lea eax, [ebp - 0xd0]
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], 0x807d807b
cmovae eax, dword [ebp - 0xd0]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x1c], 0x8000
call fcn.00416fb0
mov eax, dword [ebp - 0x2bc]
or eax, 0x800000
or eax, 0x40
mov byte [ebp - 4], 0x1f
cmp dword [ebp - 0x3c], 8
lea edx, [ebp - 0x1c]
mov dword [ebp - 0x2bc], eax
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0x2c0], eax
lea eax, [ebp - 0x50]
cmovae eax, dword [ebp - 0x50]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x2c4]
push eax
call fcn.004177d0
add esp, 4
mov dword [ebp - 4], 0x20
mov ecx, dword [ebp - 0x2bc]
or ecx, 0x80
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x2c0], ecx
lea ecx, [ebp - 0x38]
push eax
call fcn.0043a3c0
mov eax, dword [ebp - 0x2bc]
or eax, 0x1000000
mov dword [ebp - 4], 0x21
lea esi, [ebp - 0x38]
or eax, 0x100
cmp dword [ebp - 0x24], 8
mov dword [ebp - 0x2bc], eax
cmovae esi, dword [ebp - 0x38]
mov dword [ebp - 0x2c0], eax
call fcn.00433fc0
push esi
push 0
push str._BDREINIT__::_CCrashInfo::WriteInfoFile____
push 0
push eax
call fcn.00436d10
add esp, 0x14
mov eax, dword [ebp - 0x2bc]
test eax, 0x100
je 0x465cd5
and eax, 0xfffffeff
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x2bc], eax
call fcn.0043b020
mov eax, dword [ebp - 0x2bc]
test al, al
jns 0x465cf5
and eax, 0xffffff7f
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0x2bc], eax
call fcn.0043b020
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 4], 2
test al, 0x40
je 0x465d08
lea ecx, [ebp - 0x50]
call fcn.0043b020
cmp dword [ebp - 0xbc], 8
lea edx, [ebp - 0xd0]
lea ecx, [ebp - 0x154]
cmovae edx, dword [ebp - 0xd0]
call fcn.00433490
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x31c]
cmp dword [ebp - 0x140], 0x10
lea eax, [ebp - 0x154]
mov esi, dword [ebp - 0x2e4]
cmovae eax, dword [ebp - 0x154]
push 0
push ecx
push dword [ebp - 0x144]
push eax
push dword [esi + 8]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x465e89
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edx, [ebp - 0x94]
mov dword [ebp - 0x2e4], eax
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x94], 0x80728045
mov dword [ebp - 0x90], 0x806f8072
mov dword [ebp - 0x8c], 0x802c8072
mov dword [ebp - 0x88], 0x80638020
mov dword [ebp - 0x84], 0x806c8061
mov dword [ebp - 0x80], 0x8069806c
mov dword [ebp - 0x7c], 0x8067806e
mov dword [ebp - 0x78], 0x80578020
mov dword [ebp - 0x74], 0x80698072
mov dword [ebp - 0x70], 0x80658074
mov dword [ebp - 0x6c], 0x80698046
mov dword [ebp - 0x68], 0x8065806c
mov dword [ebp - 0x64], 0x8020803a
mov dword [ebp - 0x60], 0x807d807b
mov dword [ebp - 0x5c], 0x8000
call fcn.00416fb0
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x50]
cmp dword [ebp - 0x3c], 8
lea edx, [ebp - 0x2c4]
lea ecx, [ebp - 0xe8]
cmovae eax, dword [ebp - 0x50]
mov dword [ebp - 0x2c4], eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.00417e30
add esp, 4
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x24
call fcn.0043a3c0
mov byte [ebp - 4], 0x25
lea esi, [ebp - 0x38]
cmp dword [ebp - 0x24], 8
cmovae esi, dword [ebp - 0x38]
call fcn.00433fc0
push esi
push 0
push str._BDREINIT__::_CCrashInfo::WriteInfoFile____
push 8
push eax
call fcn.00436d10
add esp, 0x14
lea ecx, [ebp - 0x38]
call fcn.0043b020
lea ecx, [ebp - 0xe8]
call fcn.0043b020
lea ecx, [ebp - 0x50]
call fcn.0043b020
lea ecx, [ebp - 0x154]
xor esi, esi
call fcn.0043a130
jmp 0x46611d
mov esi, dword [esi + 8]
lea ecx, [ebp - 0x154]
call fcn.0043a130
jmp 0x46611d
call fcn.00433fc0
mov eax, dword [eax]
cmp dword [eax], 0
je 0x46600f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x2e4], eax
lea edx, [ebp - 0xa8]
xor eax, eax
mov dword [ebp - 0xa8], 0x80728045
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0xa4], 0x806f8072
mov dword [ebp - 0xa0], 0x802c8072
mov dword [ebp - 0x9c], 0x80638020
mov dword [ebp - 0x98], 0x806c8061
mov dword [ebp - 0x94], 0x8069806c
mov dword [ebp - 0x90], 0x8067806e
mov dword [ebp - 0x8c], 0x80438020
mov dword [ebp - 0x88], 0x80658072
mov dword [ebp - 0x84], 0x80748061
mov dword [ebp - 0x80], 0x80468065
mov dword [ebp - 0x7c], 0x806c8069
mov dword [ebp - 0x78], 0x80578065
mov dword [ebp - 0x74], 0x8020803a
mov dword [ebp - 0x70], 0x807d807b
mov dword [ebp - 0x6c], 0x8020802c
mov dword [ebp - 0x68], 0x806f8066
mov dword [ebp - 0x64], 0x803a8072
mov dword [ebp - 0x60], 0x807b8020
mov dword [ebp - 0x5c], 0x8000807d
mov word [ebp - 0x58], ax
call fcn.00416fb0
mov byte [ebp - 4], 3
lea eax, [ebp - 0x12c]
cmp dword [ebp - 0x118], 8
lea edx, [ebp - 0x1c]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x2c0], 0x201
cmovae eax, dword [ebp - 0x12c]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2e4]
push eax
call fcn.00466720
add esp, 8
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x38]
push eax
mov dword [ebp - 0x2c0], 0x203
call fcn.0043a3c0
mov dword [ebp - 4], 5
lea esi, [ebp - 0x38]
cmp dword [ebp - 0x24], 8
mov eax, 0x607
mov dword [ebp - 0x2bc], eax
cmovae esi, dword [ebp - 0x38]
mov dword [ebp - 0x2c0], eax
call fcn.00433fc0
push esi
push 0
push str._BDREINIT__::_CCrashInfo::WriteInfoFile____
push 0
push eax
call fcn.00436d10
add esp, 0x14
mov eax, dword [ebp - 0x2bc]
test al, 4
je 0x466076
mov edx, dword [ebp - 0x24]
and eax, 0xfffffffb
mov dword [ebp - 0x2bc], eax
cmp edx, 8
jb 0x466062
mov ecx, dword [ebp - 0x38]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x466052
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4661a8
push edx
push ecx
call fcn.004cb66f
mov eax, dword [ebp - 0x2bc]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 7
mov word [ebp - 0x38], cx
test al, 2
je 0x4660d7
mov edx, dword [ebp - 0x3c]
and eax, 0xfffffffd
mov dword [ebp - 0x2bc], eax
cmp edx, 8
jb 0x4660c3
mov ecx, dword [ebp - 0x50]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4660b3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4661a8
push edx
push ecx
call fcn.004cb66f
mov eax, dword [ebp - 0x2bc]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 7
mov word [ebp - 0x50], cx
test al, 1
je 0x46611b
mov edx, dword [ebp - 0x118]
cmp edx, 8
jb 0x46611b
mov ecx, dword [ebp - 0x12c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x466111
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4661a8
push edx
push ecx
call fcn.004cb66f
add esp, 8
xor esi, esi
mov eax, dword [ebp - 0xbc]
cmp eax, 8
jb 0x46613b
inc eax
lea ecx, [ebp - 0xd0]
push eax
push dword [ebp - 0xd0]
call fcn.0043afe0
xor eax, eax
mov dword [ebp - 0xc0], 0
lea ecx, [ebp - 0x318]
mov dword [ebp - 0xbc], 7
mov word [ebp - 0xd0], ax
call fcn.004331a0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004cb63e
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc
call fcn.004d05ef
call fcn.004d05ef
call fcn.004d05ef
call fcn.004d05ef
call fcn.004d05ef
call fcn.004d05ef
call fcn.004d05ef
call fcn.004d05ef
int3