Function at 0x425420
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x562fb9
mov eax, dword fs:[0]
push eax
sub esp, 0x2f0
mov eax, dword [0x5d26e8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0x28c], edi
mov eax, dword [ebp + 8]
mov dword [ebp - 0x284], eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x251]
call fcn.004fd3d0
mov byte [ebp - 4], 1
mov byte [ebp - 4], 2
push 0
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [edi + 0x6c]
mov dword [ebp - 0x258], ecx
mov edx, dword [edi + 0x7c]
mov dword [ebp - 0x278], edx
mov eax, dword [edi + 0x78]
mov dword [ebp - 0x288], eax
mov ecx, dword [edi + 0x70]
mov dword [ebp - 0x2a8], ecx
mov edx, dword [edi + 0x74]
mov dword [ebp - 0x2b4], edx
mov ebx, dword [edi + 0x80]
mov dword [ebp - 0x280], ebx
call fcn.00422260
mov dword [ebp - 0x290], eax
mov esi, dword [edi + 0x50]
mov byte [esi + 0x449], bl
mov byte [ebp - 0x265], 0
cmp byte [esi + 0x46a], 0
je 0x425bb3
push 1
push 0x58a919
mov ecx, esi
call fcn.0042a5b0
mov byte [esi + 0x454], 1
mov byte [esi + 0x448], 0
push 0x58a919
lea eax, [ebp - 0x2dc]
push eax
mov ecx, esi
call fcn.0042c110
test al, al
je 0x425ba8
mov ecx, dword [ebp - 0x2d4]
shr ecx, 0x10
and ecx, 0x7fff
mov dword [esi + 0xc], ecx
push 1
push 0x58a919
mov ecx, esi
call fcn.0042ae50
test eax, eax
jne 0x425ba8
mov edx, dword [esi]
push 1
push esi
mov eax, dword [edx + 0x20]
call eax
test eax, eax
jne 0x425ba8
push 1
push 1
movzx ecx, byte [esi + 0x449]
push ecx
mov ecx, esi
call fcn.0042a8d0
cmp byte [esi + 0x450], 0
je 0x425597
cmp eax, 4
je 0x42557c
cmp eax, 1
jne 0x425597
movzx edx, byte [esi + 0x448]
or dl, 0x30
mov byte [esi + 0x448], dl
mov edi, dword [ebp - 0x28c]
jmp 0x425d43
lea eax, [ebp - 0x29c]
push eax
call fcn.00422520
mov ecx, dword [eax]
mov dword [ebp - 0x2b0], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x2ac], edx
xor bl, bl
mov byte [ebp - 0x26e], bl
cmp byte [esi + 0x450], bl
je 0x425665
push 1
push 0x58a919
mov ecx, esi
call fcn.0042a5b0
test al, al
je 0x425665
cmp word [esi + 0x12], 0
jne 0x425633
lea edi, [esi + 0x14]
lea eax, [ebp - 0x274]
push eax
push 0x17
push edi
call fcn.00469d00
mov cx, word [ebp - 0x274]
mov word [ebp - 0x2be], cx
lea edx, [ebp - 0x274]
push edx
push 0x18
push edi
call fcn.00469d00
mov ax, word [ebp - 0x274]
mov word [ebp - 0x2c0], ax
push 0
mov ecx, esi
call fcn.00428070
mov bl, 1
mov byte [ebp - 0x26e], bl
test bl, bl
je 0x425b98
mov eax, dword [ebp - 0x2c0]
cdq
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x2b8], edx
movzx eax, byte [esi + 0x449]
cmp eax, 3
ja case.default.0x42565e
jmp dword [eax*4 + 0x4262b4]
lea ecx, [ebp - 0x2e8]
push ecx
lea edx, [ebp - 0x118]
push edx
push 0x104
push str..ini
push str.TasManager
xor edi, edi
push edi
call dword [sym.imp.KERNEL32.dll_SearchPathA]
test eax, eax
je 0x4256e4
mov dword [ebp - 0x250], edi
mov dword [ebp - 0x24c], edi
mov dword [ebp - 0x248], edi
mov dword [ebp - 0x244], edi
mov dword [ebp - 0x240], edi
mov dword [ebp - 0x23c], edi
lea eax, [ebp - 0x250]
push eax
lea ecx, [ebp - 0x118]
push ecx
call fcn.004a1e94
test eax, eax
je 0x4256e4
mov edi, dword [ebp - 0x250]
mov dword [ebp - 0x2a4], edi
mov edx, dword [ebp - 0x24c]
mov dword [ebp - 0x2a0], edx
jmp 0x4256f9
mov edi, 0x41b43985
mov dword [ebp - 0x2a4], edi
mov dword [ebp - 0x2a0], 0
lea eax, [ebp - 0x27c]
push eax
push 0xf003f
push 0
push str.SoftwareDataEnvDesSolLtdManager
push reloc.WSOCK32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x278], 4
test eax, eax
jne 0x4258d3
lea ecx, [ebp - 0x278]
push ecx
lea edx, [ebp - 0x26c]
push edx
lea eax, [ebp - 0x2b8]
push eax
push 0
push str.LastEnv
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ebx, eax
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2ec], 0
mov dword [ebp - 0x264], eax
rol eax, 0x17
mov dword [ebp - 0x264], eax
movsx ecx, byte [ebp - 0x264]
shr eax, 0x18
xor eax, ecx
mov byte [ebp - 0x261], al
movsx eax, byte [ebp - 0x263]
xor eax, ecx
mov byte [ebp - 0x263], al
movsx eax, al
movsx edx, byte [ebp - 0x262]
xor edx, eax
mov byte [ebp - 0x262], dl
xor eax, ecx
mov byte [ebp - 0x264], al
mov ecx, dword [ebp - 0x264]
mov eax, ecx
shr eax, 0x18
mov edx, ecx
shr edx, 0x12
xor al, dl
mov edx, ecx
shr edx, 0xc
xor al, dl
mov edx, ecx
shr edx, 6
xor al, dl
and al, 0x3f
mov edx, ecx
shr edx, 0x1e
xor al, dl
mov edx, ecx
and edx, 0x3f
cmp dl, al
je 0x4257ed
mov ecx, 0x7fffffc0
jmp 0x4257f0
and ecx, 0xffffffc0
mov dword [ebp - 0x264], ecx
mov dword [ebp - 0x26c], ecx
test ebx, ebx
je 0x4259cd
lea eax, [ebp - 0x288]
push eax
lea ecx, [ebp - 0x27c]
push ecx
push 0
push 0xf003f
push 0
push str.REG_DWORD
push 0
push str.SoftwareDataEnvDesSolLtdManager
push reloc.WSOCK32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov ebx, eax
mov dword [ebp - 0x26c], edi
mov ecx, edi
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x260], ecx
mov eax, ecx
shr eax, 6
xor eax, ecx
shr eax, 6
xor eax, ecx
shr eax, 6
xor eax, ecx
and eax, 0xfc0
mov edx, ecx
shr edx, 0x18
xor eax, edx
shr eax, 6
and ecx, 0xffffffc0
or eax, ecx
mov dword [ebp - 0x260], eax
shr eax, 8
movsx ecx, byte [ebp - 0x260]
xor eax, ecx
mov byte [ebp - 0x260], al
movsx ecx, byte [ebp - 0x25f]
movsx edx, byte [ebp - 0x25e]
xor edx, ecx
mov byte [ebp - 0x25e], dl
movsx eax, al
xor ecx, eax
mov byte [ebp - 0x25f], cl
movsx ecx, byte [ebp - 0x25d]
xor ecx, eax
mov byte [ebp - 0x25d], cl
mov eax, dword [ebp - 0x260]
ror eax, 0x17
mov dword [ebp - 0x260], eax
jmp 0x42599d
lea edx, [ebp - 0x288]
push edx
lea eax, [ebp - 0x27c]
push eax
push 0
push 0xf003f
push 0
push str.REG_DWORD
push 0
push str.SoftwareDataEnvDesSolLtdManager
push reloc.WSOCK32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov ebx, eax
mov dword [ebp - 0x26c], edi
mov ecx, edi
mov dword [ebp - 0x29c], ecx
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x25c], ecx
mov eax, ecx
shr eax, 6
xor eax, ecx
shr eax, 6
xor eax, ecx
shr eax, 6
xor eax, ecx
and eax, 0xfc0
mov edx, ecx
shr edx, 0x18
xor eax, edx
shr eax, 6
and ecx, 0xffffffc0
or eax, ecx
mov dword [ebp - 0x25c], eax
shr eax, 8
movsx ecx, byte [ebp - 0x25c]
xor eax, ecx
mov byte [ebp - 0x25c], al
movsx ecx, byte [ebp - 0x25b]
movsx edx, byte [ebp - 0x25a]
xor edx, ecx
mov byte [ebp - 0x25a], dl
movsx eax, al
xor ecx, eax
mov byte [ebp - 0x25b], cl
movsx ecx, byte [ebp - 0x259]
xor ecx, eax
mov byte [ebp - 0x259], cl
mov eax, dword [ebp - 0x25c]
ror eax, 0x17
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x26c], eax
mov edx, dword [ebp - 0x278]
push edx
lea eax, [ebp - 0x26c]
push eax
push 4
push 0
push str.LastEnv
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov dword [ebp - 0x26c], edi
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x2c0], eax
test ebx, ebx
jne 0x425b98
mov byte [ebp - 0x26e], 1
jmp 0x42563b
mov eax, dword [esi + 0x430]
shl eax, 0x10
cdq
mov ebx, eax
mov edi, edx
movzx eax, byte [esi + 0x440]
cdq
jmp 0x425a72
mov eax, dword [esi + 0x438]
shl eax, 0x10
cdq
mov ebx, eax
mov edi, edx
movzx eax, byte [esi + 0x442]
cdq
jmp 0x425a72
mov eax, dword [esi + 0x434]
shl eax, 0x10
cdq
mov ebx, eax
mov edi, edx
movzx eax, byte [esi + 0x441]
cdq
jmp 0x425a72
mov eax, dword [esi + 0x43c]
shl eax, 0x10
cdq
mov ebx, eax
mov edi, edx
movzx eax, byte [esi + 0x443]
cdq
jmp 0x425a72
mov edi, dword [ebp - 0x298]
mov ebx, dword [ebp - 0x29c]
mov edx, dword [ebp - 0x298]
mov eax, dword [ebp - 0x29c]
push 0
push 0x93a80
push edx
push eax
call fcn.004cf660
add eax, ebx
adc edx, edi
cmp dword [ebp - 0x2ac], edi
jl 0x425b7e
mov edi, dword [ebp - 0x2b0]
jg 0x425aa0
cmp edi, ebx
jb 0x425b7e
mov ecx, dword [ebp - 0x2ac]
cmp ecx, edx
jg 0x425b7e
jl 0x425ab8
cmp edi, eax
ja 0x425b7e
mov eax, dword [ebp - 0x2bc]
add eax, 0xffffeae8
cdq
xor eax, edx
sub eax, edx
cdq
cmp ecx, edx
jl 0x425b7e
jg 0x425adb
cmp edi, eax
jbe 0x425b7e
movzx eax, byte [esi + 0x449]
cmp dword [ebp - 0x280], eax
jne 0x425b63
movzx eax, byte [esi + 0x44b]
lea ecx, [eax + eax*4]
movzx edx, byte [esi + 0x44c]
lea ecx, [edx + ecx*2]
mov eax, dword [ebp - 0x2b4]
lea edx, [eax + eax*4]
mov eax, dword [ebp - 0x2a8]
lea edx, [eax + edx*2]
cmp edx, ecx
jg 0x425b63
mov eax, dword [ebp - 0x2d4]
shr eax, 0x10
and eax, 0x7fff
cmp eax, dword [esi + 0xc]
jne 0x425b48
mov ecx, esi
call fcn.0042acd0
cmp byte [esi + 0x44f], al
jne 0x425b48
mov dword [esi + 4], 0xffffffff
mov edi, dword [ebp - 0x28c]
jmp 0x425d43
movzx ecx, byte [esi + 0x448]
or cl, 0x21
mov byte [esi + 0x448], cl
mov edi, dword [ebp - 0x28c]
jmp 0x425d43
movzx edx, byte [esi + 0x448]
or dl, 0x22
mov byte [esi + 0x448], dl
mov edi, dword [ebp - 0x28c]
jmp 0x425d43
movzx eax, byte [esi + 0x448]
or al, 0x24
mov byte [esi + 0x448], al
mov edi, dword [ebp - 0x28c]
jmp 0x425d43
movzx ecx, byte [esi + 0x448]
or cl, 0x28
mov byte [esi + 0x448], cl
mov edi, dword [ebp - 0x28c]
jmp 0x425d43
mov ecx, dword [esi + 0x460]
mov edx, dword [ecx]
mov eax, dword [edx + 0x40]
call eax
mov ecx, dword [esi + 0x460]
cmp byte [ecx + 0x128], 0
je 0x425d17
cmp byte [ecx + 0x129], 0
jne 0x425d17
test eax, eax
jne 0x425d17
movzx eax, byte [esi + 0x449]
cmp eax, 3
ja case.default.0x425bf4
jmp dword [eax*4 + 0x4262c4]
mov eax, 1
jmp 0x425c1d
mov eax, 2
jmp 0x425c1d
mov eax, 4
jmp 0x425c1d
mov eax, 3
jmp 0x425c1d
mov eax, dword [ebp - 0x2b8]
push 0
push eax
call fcn.00552af0
test eax, eax
je 0x425d43
mov ecx, dword [esi + 0x460]
call fcn.0054b840
test eax, eax
je 0x425d43
mov ecx, dword [esi + 0x460]
push 0x57c8f4
push str.VersionMajor
call fcn.0054b870
push eax
call fcn.004d1a94
add esp, 4
mov edi, eax
mov ecx, dword [esi + 0x460]
push 0x57c8f4
push str.VersionMinor1
call fcn.0054b870
push eax
call fcn.004d1a94
add esp, 4
mov dword [ebp - 0x280], eax
mov ecx, dword [esi + 0x460]
push 0x57c8f4
push str.VersionMinor2
call fcn.0054b870
push eax
call fcn.004d1a94
add esp, 4
mov ebx, eax
mov ecx, dword [esi + 0x460]
push 0x57c8f4
push str.VersionMinor3
call fcn.0054b870
push eax
call fcn.004d1a94
add esp, 4
lea ecx, [edi + edi*4]
mov edx, dword [ebp - 0x280]
lea ecx, [edx + ecx*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ebx + ecx*2]
lea edx, [ecx + ecx*4]
lea ecx, [eax + edx*2]
mov eax, dword [ebp - 0x2b4]
lea eax, [eax + eax*4]
mov edx, dword [ebp - 0x2a8]
lea eax, [edx + eax*2]
lea eax, [eax + eax*4]
mov edx, dword [ebp - 0x288]
lea eax, [edx + eax*2]
lea eax, [eax + eax*4]
mov edx, dword [ebp - 0x278]
lea eax, [edx + eax*2]
mov edi, dword [ebp - 0x28c]
cmp ecx, eax
jl 0x425d43
mov dword [esi + 4], 0xffffffff
jmp 0x425d43
cmp byte [esi + 0x468], 0
jne 0x425d38
test al, 0x10
je 0x425d38
mov byte [esi + 0x468], 1
mov ecx, dword [esi + 0x460]
call fcn.00420b90
jmp 0x425d43
test al, 0x40
je 0x425d43
mov byte [ebp - 0x265], 1
mov eax, 1
add dword [esi + 4], eax
mov ebx, dword [ebp - 0x290]
cmp dword [ebp - 0x258], 0
je 0x425d7b
cmp dword [esi + 8], eax
jne 0x425d72
push 0
push 0x6e
push 0x111
mov eax, dword [ebx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
inc dword [esi + 8]
mov eax, dword [esi + 8]
add dword [esi + 4], eax
mov eax, dword [esi + 4]
cmp eax, 2
jle 0x425ddd
cmp eax, 7
jge 0x425ddd
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x425ddd
mov eax, dword [esi + 0x460]
push edx
cmp byte [eax + 0x128], dl
jne 0x425db3
push 0x8092
push 0x111
mov edx, dword [ebx + 0x1c]
push edx
jmp 0x425dd7
cmp byte [ebp - 0x265], 0
je 0x425dcc
push 0x8094
push 0x111
mov eax, dword [ebx + 0x1c]
push eax
jmp 0x425dd7
push 0x66
push 0x111
mov ecx, dword [ebx + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [esi + 4]
cmp eax, 7
jle 0x425e04
cmp eax, 0xd
jge 0x425e04
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x425e04
push edx
push edx
push 0x10
mov edx, dword [ebx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [esi + 4]
cmp eax, 0xd
jle 0x425e24
cmp eax, 0x13
jge 0x425e24
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x425e24
push edx
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov eax, dword [esi + 4]
cmp eax, 0x13
jle 0x425e4a
cdq
mov ecx, 3
idiv ecx
test edx, edx
jne 0x425e4a
push edx
push 0x68
push 0x111
mov edx, dword [ebx + 0x1c]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov byte [esi + 0x454], 0
push 0
mov ecx, esi
call fcn.00428070
push str.TasDocumentVersion
mov ecx, dword [edi + 0x60]
call fcn.004f96c0
test eax, eax
jne 0x425ed3
push 0x8043
lea eax, [ebp - 0x258]
push eax
call fcn.0041d0c0
add esp, 8
mov byte [ebp - 4], 3
mov eax, dword [eax]
push 0
push 0
push eax
call fcn.004a0dad
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x258]
call fcn.004022b0
call fcn.004fa300
push eax
mov ecx, dword [edi + 0x60]
push ecx
push 4
call fcn.004fc520
add esp, 0xc
mov edx, dword [edi + 0x84]
mov dword [eax], edx
push 0
push eax
push str.TasDocumentVersion
mov ecx, dword [edi + 0x60]
call fcn.004f9650
mov ecx, eax
call fcn.004fc440
jmp 0x425ee4
push 0
mov ecx, eax
call fcn.004fc3d0
mov ecx, dword [edi + 0x84]
mov dword [eax], ecx
mov byte [ebp - 0x26d], 0
mov eax, dword [edi + 0x5c]
test eax, eax
je 0x425f7a
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x284]
push edx
push eax
call fcn.004d1a67
add esp, 8
test eax, eax
jne 0x425f7a
mov byte [ebp - 0x26d], 1
mov ecx, dword [edi + 0x5c]
call fcn.00430380
test al, al
jne 0x425f7a
push 0x67
lea eax, [ebp - 0x258]
push eax
call fcn.0041d0c0
add esp, 8
mov byte [ebp - 4], 4
mov eax, dword [eax]
push 0
push 5
push eax
call fcn.004a0dad
cmp eax, 2
sete bl
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x258]
call fcn.004022b0
test bl, bl
je 0x425f14
mov dword [ebp - 0x2f4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x251]
call fcn.004fcd10
xor eax, eax
jmp 0x4261ca
push 0x60
call fcn.004947e1
add esp, 4
mov dword [ebp - 0x2b8], eax
mov byte [ebp - 4], 5
test eax, eax
je 0x425f9d
mov ecx, eax
call fcn.00430c00
mov esi, eax
jmp 0x425f9f
xor esi, esi
mov byte [ebp - 4], 2
mov edi, dword [ebp - 0x284]
lea esp, [esp]
push edi
lea ecx, [ebp - 0x284]
call fcn.004087e0
mov byte [ebp - 4], 6
xor ecx, ecx
cmp byte [ebp - 0x26d], cl
setne cl
add ecx, 3
push ecx
lea edx, [ebp - 0x284]
push edx
mov ecx, esi
call fcn.0042f2e0
test al, al
sete bl
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x284]
call fcn.004022b0
test bl, bl
je 0x42604f
push 0x67
lea eax, [ebp - 0x258]
push eax
call fcn.0041d0c0
add esp, 8
mov byte [ebp - 4], 7
mov eax, dword [eax]
push 0
push 5
push eax
call fcn.004a0dad
cmp eax, 2
sete bl
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x258]
call fcn.004022b0
test bl, bl
je 0x425fb0
mov dword [ebp - 0x2fc], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x251]
call fcn.004fcd10
xor eax, eax
jmp 0x4261ca
mov edi, dword [ebp - 0x28c]
mov edx, dword [edi]
push esi
mov ecx, edi
mov eax, dword [edx + 0xb8]
call eax
lea ecx, [ebp - 0x128]
push ecx
call dword [sym.imp.ole32.dll_CoCreateGuid]
lea edx, [ebp - 0x128]
push edx
lea eax, [ebp - 0x294]
push eax
call fcn.0041e0f0
add esp, 8
mov byte [ebp - 4], 8
mov bl, 9
mov byte [ebp - 4], bl
mov dword [esi + 0x24], 1
push 0x12
push str.database
push esi
mov ecx, dword [edi + 0x60]
call fcn.004f9c30
mov dword [esi + 0x24], 2
lea ecx, [ebp - 0x294]
push ecx
push str.database
lea edx, [ebp - 0x258]
push edx
call fcn.004240b0
add esp, 0xc
mov byte [ebp - 4], 0xa
mov eax, dword [eax]
push 0x12
push eax
push esi
mov ecx, dword [edi + 0x60]
call fcn.004f9d00
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x258]
call fcn.004022b0
xor ebx, ebx
mov dword [esi + 0x24], ebx
mov dword [ebp - 4], 8
mov eax, dword [edi]
push esi
mov ecx, edi
mov edx, dword [eax + 0xbc]
call edx
mov eax, dword [edi + 0x5c]
cmp eax, ebx
je 0x426112
mov ecx, dword [eax]
push eax
mov edx, dword [ecx + 8]
call edx
mov dword [edi + 0x5c], ebx
movzx eax, byte [edi + 0x64]
push eax
mov ecx, esi
call fcn.00430df0
test al, al
jne 0x426150
push 0x69
lea ecx, [ebp - 0x258]
push ecx
call fcn.0041d0c0
add esp, 8
mov byte [ebp - 4], 0xe
mov eax, dword [eax]
push ebx
push ebx
push eax
call fcn.004a0dad
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x258]
call fcn.004022b0
mov dword [edi + 0x5c], esi
cmp byte [edi + 0x8c], 0
je 0x42618f
push ebx
push 0x1b4
push ebx
mov edx, dword [edi + 0x88]
push edx
call fcn.004f9370
add esp, 0x10
mov ecx, eax
call fcn.004f9530
mov eax, dword [edi + 0x88]
push eax
call fcn.004ce2e1
add esp, 4
mov byte [edi + 0x8c], 0
mov edx, dword [edi]
push ebx
mov ecx, edi
mov eax, dword [edx + 0x5c]
call eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x294]
call fcn.004022b0
mov dword [ebp - 4], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x251]
call fcn.004fcd10
mov dword [ebp - 4], 0xffffffff
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004cdc91
mov esp, ebp
pop ebp
ret 4