Function at 0x45c7b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x35c
mov edi, dword [esp + 0x370]
mov eax, dword [esp + 0x37c]
lea ebx, [esp + 0xa8]
mov edx, dword [esp + 0x380]
mov ecx, dword [esp + 0x374]
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x14]
mov dword [esp + 0x24], edx
mov esi, dword [edi + 0x28]
mov edx, dword [eax + ecx*4]
mov eax, dword [eax + ecx*4 + 4]
mov dword [esp], ebx
sub eax, edx
add esi, edx
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x88]
mov dword [esp + 0x88], esi
mov dword [esp + 4], eax
call fcn.0045a230
test eax, eax
mov ebp, eax
jne 0x45c82d
mov edx, dword [esp + 0x8c]
test edx, edx
je 0x45c840
mov ebp, 0xb
add esp, 0x35c
mov eax, ebp
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [edi + 0x20]
mov ecx, dword [esp + 0x374]
movzx eax, byte [eax + ecx]
cmp dword [esp + 0xb4], eax
jne 0x45c828
mov eax, dword [esp + 0x388]
xor edx, edx
mov dword [esp + 4], ecx
mov dword [esp], edi
mov dword [esp + 0x34], edx
mov dword [esp + 0x30], eax
call fcn.0045aa60
xor eax, dword [esp + 0x388]
or edx, eax
jne 0x45c828
mov eax, dword [edi + 8]
mov ecx, dword [esp + 0x374]
mov edx, dword [esp + 0x374]
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x2c], eax
mov eax, dword [edi + 0x18]
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
mov ecx, dword [eax + ecx*4]
mov eax, dword [edi + 0x24]
mov dword [esp + 0x60], eax
mov eax, dword [edi + 0x1c]
mov eax, dword [eax + edx*4]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xa8]
lea edx, [eax - 1]
cmp edx, 3
jbe 0x45c990
mov ebp, 4
lea ebx, [esp + 0x90]
lea esi, [esp + 0x9c]
mov eax, dword [ebx]
add ebx, 4
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38c]
mov dword [esp], eax
call dword [eax + 4]
cmp ebx, esi
jne 0x45c908
test ebp, ebp
jne 0x45c82d
mov eax, dword [edi + 0xc]
test eax, eax
je 0x45c82d
mov edx, dword [esp + 0x374]
mov ecx, dword [esp + 0x374]
shr edx, 3
and ecx, 7
movzx edx, byte [eax + edx]
mov eax, pe_nt_image_headers32
sar eax, cl
test edx, eax
je 0x45c82d
mov eax, dword [esp + 0x388]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x384]
mov dword [esp], eax
call fcn.0045c420
mov edx, dword [edi + 0x10]
mov ebx, dword [esp + 0x374]
cmp eax, dword [edx + ebx*4]
mov eax, 3
cmovne ebp, eax
jmp 0x45c82d
cmp byte [esp + 0xe8], 1
jne 0x45c8f5
mov edx, dword [esp + 0xe4]
cmp edx, 0x21
je 0x45c9ba
cmp edx, 0x30101
je 0x45c9ba
test edx, edx
jne 0x45c8f5
cmp eax, 1
je 0x45d672
cmp eax, 2
je CompareFileTime
cmp eax, 4
jne 0x45c8f5
cmp byte [esp + 0xf4], 1
mov edx, dword [esp + 0xf0]
jne 0x45c8f5
cmp edx, 0x21
je 0x45c9ff
cmp edx, 0x30101
je 0x45c9ff
test edx, edx
jne 0x45c8f5
cmp byte [esp + 0x100], 1
mov edx, dword [esp + 0xfc]
jne 0x45c8f5
cmp edx, 0x21
je 0x45ca29
cmp edx, 0x30101
je 0x45ca29
test edx, edx
jne 0x45c8f5
cmp dword [esp + 0x108], 0x303011b
jne 0x45c8f5
cmp byte [esp + 0x10c], 4
jne 0x45c8f5
cmp dword [esp + 0xb0], 4
jne 0x45c8f5
cmp dword [esp + 0xb8], 2
jne 0x45c8f5
cmp dword [esp + 0xbc], 6
jne 0x45c8f5
cmp dword [esp + 0xc0], 1
jne 0x45c8f5
cmp dword [esp + 0xc4], 0
jne 0x45c8f5
cmp dword [esp + 0xac], 3
jne 0x45c8f5
cmp dword [esp + 0xc8], 5
jne 0x45c8f5
cmp dword [esp + 0xcc], 0
jne 0x45c8f5
cmp dword [esp + 0xd0], 4
jne 0x45c8f5
cmp dword [esp + 0xd4], 1
jne 0x45c8f5
cmp dword [esp + 0xd8], 3
jne 0x45c8f5
cmp dword [esp + 0xdc], 2
jne 0x45c8f5
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x54], esi
mov dword [esp + 0x6c], ebp
lea ecx, [edx + ecx*8]
mov dword [esp + 0x370], edi
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x40], ebx
lea ebx, [esp + 0x90]
shl ecx, 3
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x64], ecx
mov ebx, dword [esp + 0x40]
mov edx, dword [ebx + 0x3c]
cmp edx, 0x21
je 0x45cbc0
cmp edx, 0x30101
je 0x45cbc0
test edx, edx
je 0x45cbc0
cmp edx, 0x303011b
je 0x45ce5a
cmp dword [esp + 0x2c], 1
jne 0x45cbb0
cmp edx, 3
je 0x45ced3
cmp byte [esp + 0xf5], 0
jne 0x45cbb0
cmp edx, 0x3030401
je 0x45d4e2
jbe 0x45cd17
cmp edx, 0x3030701
je 0x45d556
cmp edx, 0x3030805
je 0x45d5b4
cmp edx, 0x3030501
je 0x45d585
mov edi, dword [esp + 0x370]
jmp 0x45c8f5
cmp eax, 4
je 0x45cde0
mov eax, dword [esp + 0x388]
mov ecx, 8
xor ebx, ebx
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x384]
mov dword [esp + 0x48], eax
mov esi, dword [esp + 0x50]
mov eax, dword [esi + ebx]
mov edx, dword [esi + ebx + 4]
mov ebx, dword [esi + ecx + 4]
mov ecx, dword [esi + ecx]
sub ecx, eax
sbb ebx, edx
add eax, dword [esp + 0x20]
mov dword [esp + 0x38], ecx
adc edx, dword [esp + 0x24]
mov dword [esp + 0x3c], ebx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x378]
mov dword [esp + 8], edx
mov dword [esp], eax
call fcn.0045e1f0
test eax, eax
jne 0x45ce4c
mov eax, dword [esp + 0x40]
mov eax, dword [eax + 0x3c]
test eax, eax
jne 0x45cd8b
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x44]
xor edi, edi
mov ebx, dword [esp + 0x3c]
mov edx, ecx
mov esi, eax
xor edx, eax
mov eax, edx
mov edx, ebx
or edx, eax
jne 0x45d795
mov eax, dword [esp + 0x44]
test eax, eax
je 0x45cd59
lea ebp, [esp + 0x110]
mov ebx, dword [esp + 0x48]
mov dword [esp + 0x38], ebp
jmp 0x45ccf6
mov dword [esp + 0x110], 0x40000
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
lea eax, [esp + 0x84]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x378]
mov dword [esp], eax
call dword [eax]
test eax, eax
jne 0x45ce4c
mov ebp, dword [esp + 0x110]
test ebp, ebp
je 0x45cf29
mov eax, dword [esp + 0x84]
mov dword [esp], ebx
add ebx, ebp
mov dword [esp + 8], ebp
mov dword [esp + 4], eax
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0x378]
xor edx, edx
sub esi, ebp
sbb edi, edx
mov dword [esp + 4], ebp
mov dword [esp], eax
call dword [eax + 4]
test eax, eax
jne 0x45ce4c
mov edx, edi
or edx, esi
je 0x45cd59
cmp edi, 0
ja 0x45cc77
cmp esi, 0x3ffff
ja 0x45cc77
mov dword [esp + 0x110], esi
jmp 0x45cc82
cmp edx, 0x3030103
je 0x45d511
cmp edx, 0x3030205
jne 0x45cbb0
mov eax, dword [esp + 0x388]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x384]
mov dword [esp], eax
call fcn.0045eac0
add dword [esp + 0x2c], 1
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0x2c]
add dword [esp + 0x40], 0xc
sub dword [esp + 0x4c], 4
cmp eax, ecx
ja 0x45cb3c
mov ebp, dword [esp + 0x6c]
mov edi, dword [esp + 0x370]
jmp 0x45c8fa
cmp eax, 0x30101
je RegOpenKeyExW
cmp eax, 0x21
jne 0x45cbb0
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x124], 0
mov dword [esp + 0x120], 0
movzx eax, byte [ecx + 0x41]
mov byte [esp + 0x68], al
cmp byte [esp + 0x68], 1
mov eax, dword [ecx + 0x38]
je 0x45d1e9
mov edi, dword [esp + 0x370]
mov ebp, 1
jmp 0x45c8fa
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x60]
add eax, dword [esp + 0x64]
mov dword [esp + 0x110], 3
mov dword [esp + 0x114], 2
mov dword [esp + 0x118], 0
cmp ecx, 1
mov ebx, dword [esp + ecx*4 + 0x110]
mov esi, dword [eax + ecx*8]
mov eax, dword [eax + ecx*8 + 4]
jbe 0x45cf3c
cmp dword [esp + 0x2c], 2
jne 0x45cbb0
mov ebp, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
cmp ebp, eax
jae 0x45cea2
mov edi, dword [esp + 0x370]
mov ebp, 5
jmp 0x45c8fa
mov edi, dword [esp + 0x370]
mov ebp, eax
jmp 0x45c8fa
mov eax, dword [esp + 0x50]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 8]
mov ebx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov edi, edx
mov dword [esp + 0x3c], edx
mov esi, eax
mov dword [esp + 0x38], eax
sub esi, ecx
sbb edi, ebx
cmp dword [esp + 0x2c], 3
jne 0x45cbb0
test edi, edi
mov dword [esp + 0x48], esi
je 0x45cf84
mov edi, dword [esp + 0x370]
mov ebp, 2
jmp 0x45c8fa
ja 0x45cea8
cmp edi, esi
jb 0x45ce3b
mov eax, dword [esp + 0x388]
mov dword [esp + 0x58], esi
mov dword [esp + 0x44], esi
sub eax, esi
add eax, dword [esp + 0x384]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x48], eax
shl ebx, 3
lea ecx, [ebx + 8]
jmp 0x45cbe6
cmp byte [esp + 0xf5], 1
jne 0x45cbb0
lea ebp, [esp + 0x110]
mov dword [esp], ebp
call fcn.0045f6b0
mov eax, dword [esp + 0x388]
mov ebx, dword [esp + 0x54]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x384]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xec]
movzx eax, byte [ebx + eax]
mov dword [esp], ebp
add eax, 1
mov dword [esp + 4], eax
call fcn.0045f820
jmp 0x45cd59
mov eax, 6
mov edi, dword [esp + 0x370]
mov ebp, eax
jmp 0x45c8fa
test eax, eax
mov dword [esp + 0x44], esi
jne 0x45ce91
mov eax, dword [esp + 0x38c]
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [eax]
test eax, eax
mov dword [esp + 0x48], eax
jne 0x45cf68
test esi, esi
jne 0x45ce91
mov eax, dword [esp + 0x4c]
mov edi, dword [esp + 0x48]
mov dword [eax + 4], edi
imul eax, dword [esp + 0x2c], 0xfffffffc
mov dword [esp + eax + 0xa0], esi
jmp 0x45cec8
mov eax, dword [esp + 0x38c]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [eax]
cmp dword [esp + 0x48], 0
mov dword [esp + 0x44], eax
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
je 0x45cfc1
cmp dword [esp + 0x44], 0
je 0x45ce91
add ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x378]
adc ebx, dword [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.0045e1f0
test eax, eax
jne 0x45ce4c
mov eax, edi
or eax, esi
je 0x45d0a5
mov eax, dword [esp + 0x44]
lea ebp, [esp + 0x110]
mov dword [esp + 0x38], ebp
mov ebx, eax
jmp 0x45d084
mov dword [esp + 0x110], 0x40000
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
lea eax, [esp + 0x84]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x378]
mov dword [esp], eax
call dword [eax]
test eax, eax
jne 0x45ce4c
mov ebp, dword [esp + 0x110]
test ebp, ebp
je 0x45cf29
mov eax, dword [esp + 0x84]
mov dword [esp], ebx
add ebx, ebp
mov dword [esp + 8], ebp
mov dword [esp + 4], eax
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0x378]
xor edx, edx
sub esi, ebp
sbb edi, edx
mov dword [esp + 4], ebp
mov dword [esp], eax
call dword [eax + 4]
test eax, eax
jne 0x45ce4c
mov edx, edi
or edx, esi
je 0x45d0a5
cmp edi, 0
ja 0x45d005
cmp esi, 0x3ffff
ja 0x45d005
mov dword [esp + 0x110], esi
jmp 0x45d010
mov ecx, dword [esp + 0x9c]
test cl, 3
jne 0x45d795
mov edx, dword [esp + 0xa0]
test dl, 3
jne 0x45d795
mov ebx, dword [esp + 0x58]
lea eax, [ecx + edx]
add eax, ebx
cmp dword [esp + 0x388], eax
jne 0x45d795
mov eax, dword [esp + 0x5c]
lea ebp, [esp + 0x110]
mov dword [esp], ebp
mov dword [esp + 0x110], eax
add eax, ebx
mov dword [esp + 0x120], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x114], eax
add eax, ecx
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x118], eax
add eax, edx
mov dword [esp + 0x128], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x11c], eax
add eax, dword [esp + 0x48]
mov dword [esp + 0x12c], eax
mov eax, dword [esp + 0x384]
mov dword [esp + 0x130], eax
add eax, dword [esp + 0x388]
mov dword [esp + 0x134], eax
call fcn.0045e3f0
mov dword [esp], ebp
call fcn.0045e430
test eax, eax
jne 0x45ce4c
mov eax, dword [esp + 0x110]
cmp dword [esp + 0x120], eax
jne 0x45d1d6
mov eax, dword [esp + 0x114]
cmp dword [esp + 0x124], eax
jne 0x45d1d6
mov eax, dword [esp + 0x128]
cmp dword [esp + 0x118], eax
jne 0x45d1d6
mov eax, dword [esp + 0x12c]
cmp dword [esp + 0x11c], eax
jne 0x45d1d6
cmp dword [esp + 0x148], 0
jne 0x45d1d6
mov eax, dword [esp + 0x134]
cmp dword [esp + 0x130], eax
jne 0x45d1d6
cmp dword [esp + 0x138], 0
je 0x45cd59
mov eax, 1
mov edi, dword [esp + 0x370]
mov ebp, eax
jmp 0x45c8fa
mov ebx, dword [esp + 0x38c]
lea ebp, [esp + 0x110]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x54]
movzx eax, byte [ebx + eax]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0045f910
test eax, eax
jne 0x45ce4c
mov eax, dword [esp + 0x48]
mov dword [esp], ebp
lea edi, [esp + 0x7c]
lea esi, [esp + 0x78]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x138], eax
call fcn.0045fa70
jmp 0x45d30e
mov dword [esp + 0x7c], 0x40000
mov eax, dword [esp + 0x378]
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [eax]
test eax, eax
jne DuplicateHandle
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x10], 1
mov dword [esp], ebp
mov ebx, dword [esp + 0x134]
mov dword [esp + 0x80], eax
lea eax, [esp + 0x84]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x80]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
call fcn.0045faa0
mov ecx, dword [esp + 0x80]
xor edx, edx
sub dword [esp + 0x7c], ecx
sub dword [esp + 0x38], ecx
mov dword [esp + 0x48], eax
sbb dword [esp + 0x3c], edx
cmp dword [esp + 0x48], 0
jne 0x45d705
cmp dword [esp + 0x84], 1
je 0x45d6ca
test ecx, ecx
jne 0x45d2f1
cmp ebx, dword [esp + 0x134]
je 0x45d74d
mov eax, dword [esp + 0x378]
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [eax + 4]
test eax, eax
mov dword [esp + 0x48], eax
jne 0x45d705
mov edx, dword [esp + 0x3c]
mov dword [esp + RegCloseKeyx78], 0
mov eax, dword [esp + 0x38]
cmp edx, 0
ja RegDeleteValueW
cmp eax, 0x3ffff
ja 0x45d242
mov eax, dword [esp + 0x38]
mov dword [esp + 0x7c], eax
jmp 0x45d24a
mov eax, dword [esp + 0x40]
mov ebx, dword [esp + 0x54]
lea ebp, [esp + 0x110]
mov dword [esp + RegQueryValueExWx124], 0
mov dword [esp + 0x120], 0
add ebx, dword [eax + 0x38]
movzx edx, byte [eax + 0x41]
mov dword [esp], ebp
mov eax, ebx
mov ebx, dword [esp + 0x38c]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp + 0xc], ebx
call fcn.00464780
test eax, eax
jne InitCommonControlsEx
mov eax, dword [esp + 0x48]
lea esi, [esp + 0x78]
mov dword [esp], ebp
lea edi, [esp + 0x7c]
mov dword [esp + 0x124], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x138], eax
call fcn.00463820
mov dword [esp + 0x68], esi
jmp GetObjectW
mov dword [esp + 0x7c], 0x40000
mov eax, dword [esp + 0x68]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov eax, dword [esp + 0x378]
mov dword [esp], eax
call dword [eax]
test eax, eax
jne CreateCompatibleBitmap
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x10], 1
xor ebx, ebx
mov dword [esp], ebp
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x134]
mov dword [esp + 0x48], eax
lea eax, [esp + 0x84]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x80]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
call fcn.00463860
mov edx, dword [esp + 0x80]
sub dword [esp + 0x7c], edx
sub dword [esp + 0x38], edx
sbb dword [esp + 0x3c], ebx
test eax, eax
jne 0x45d760
mov ecx, dword [esp + 0x84]
cmp ecx, 1
je 0x45d6ca
mov eax, dword [esp + 0x134]
cmp dword [esp + 0x44], eax
sete bl
cmp ecx, 4
sete cl
test bl, cl
je 0x45d48a
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov esi, ecx
or esi, ebx
je 0x45d6ed
cmp dword [esp + 0x48], eax
jne 0x45d498
test edx, edx
je DeleteDC
mov eax, dword [esp + 0x378]
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [eax + 4]
test eax, eax
jne 0x45d760
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x78], 0
mov eax, dword [esp + 0x38]
cmp edx, 0
ja 0x45d3bf
cmp eax, 0x3ffff
ja GetTextExtentPoint32W
mov eax, dword [esp + 0x38]
mov dword [esp + 0x7c], eax
jmp 0x45d3c7
mov eax, dword [esp + 0x388]
mov dword [esp + LineToxc], 0
mov dword [esp + 8], MoveToEx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x384]
mov dword [esp], eax
call fcn.0045eea0
jmp RoundRect
mov eax, dword [esp + 0x388]
lea ebp, [esp + 0x110]
mov dword [esp + 0x10], 0
mov dword [esp + 8], SelectObject
mov dword [esp + SetBkColorx110], 0
mov dword [esp + 0xc], ebp
mov dword [esp + 4], eax
mov eax, dword [esp + 0x384]
mov dword [esp], eax
call fcn.0045ed20
jmp SetDCBrushColor
mov eax, dword [esp + 0x388]
mov dword [esp + SetLayoutxc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x384]
mov dword [esp], eax
call fcn.0045e900
jmp SetTextColor
mov eax, dword [esp + 0x388]
mov dword [esp + 0xc], 0
mov dword [esp + 8], StretchBlt
mov dword [esp + 4], eax
mov eax, dword [esp + 0x384]
mov dword [esp], eax
call AddVectoredExceptionHandler
jmp 0x45cd59
mov eax, dword [esp + 0x388]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x384]
mov dword [esp], eax
call fcn.0045ec20
jmp 0x45cd59
cmp byte [esp + 0xf4], 1
jne 0x45c8f5
cmp dword [esp + 0xb0], 1
jne 0x45c8f5
cmp dword [esp + 0xb8], 0
jne 0x45c8f5
cmp dword [esp + 0xac], 1
jne 0x45c8f5
cmp dword [esp + 0xc8], 1
jne CreateEventA
cmp dword [esp + 0xcc], 0
jne CreateEventW
mov edx, dword [esp + 0xf0]
cmp edx, 0x3030401
je CreateFileA
ja 0x45d6a1
cmp edx, 0x3030103
je CreateFileW
cmp edx, 0x3030205
je CreateIoCompletionPort
cmp edx, 3
jne 0x45c8f5
jmp 0x45caf0
cmp dword [esp + 0xb0], 1
jne CreateMutexW
cmp dword [esp + 0xb8], 0
jne CreateProcessW
cmp dword [esp + 0xac], 0
jne 0x45c8f5
jmp CreateSemaphoreA
cmp edx, 0x3030701
je 0x45caf0
cmp edx, 0x3030805
je 0x45caf0
cmp edx, 0x3030501
jne 0x45c8f5
jmp CreateWaitableTimerW
mov eax, dword [esp + 0x44]
cmp dword [esp + 0x134], eax
jne FileTimeToLocalFileTime
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
mov ebx, eax
or ebx, edx
jne FileTimeToLocalFileTime
mov eax, dword [esp + 0x38c]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.00464640
jmp DeviceIoControl
mov edi, dword [esp + 0x370]
mov ecx, ebp
mov eax, dword [esp + 0x38c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00464640
mov ebp, dword [esp + 0x48]
jmp 0x45c8fa
mov ebx, eax
mov eax, dword [esp + 0x38c]
mov dword [esp], ebp
mov edi, dword [esp + 0x370]
mov ebp, ebx
mov dword [esp + 4], eax
call fcn.00464640
jmp 0x45c8fa
mov edi, dword [esp + 0x370]
mov ecx, ebp
mov dword [esp + 0x48], 1
jmp 0x45d70e
mov edi, dword [esp + 0x370]
mov ebx, eax
mov ecx, ebp
mov eax, dword [esp + 0x38c]
mov dword [esp], ecx
mov ebp, ebx
mov dword [esp + 4], eax
call fcn.00464640
jmp 0x45c8fa
mov edi, dword [esp + 0x370]
mov ecx, ebp
mov ebx, 1
jmp 0x45d76b
mov edi, dword [esp + 0x370]
mov ebp, 1
jmp 0x45c8fa
mov eax, dword [esp + 0x38c]
mov dword [esp], ebp
mov edi, dword [esp + 0x370]
mov dword [esp + 4], eax
call fcn.00464640
jmp 0x45d79c