Function at 0x445c10
Capabilities:
Reference sql statements

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49e929
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x3e0
mov eax, dword [0x4d7200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x3b4], edi
mov eax, dword [edi + 0xbc]
lea ecx, [edi + 0x2e8]
cmp eax, 0xffffffff
jne 0x445c6c
mov eax, dword [ecx]
mov edx, dword [edi + 0x2e4]
test edx, edx
je 0x448467
cmp eax, 1
jl 0x448467
cmp eax, dword [ecx]
jg 0x448467
lea eax, [eax + eax*8]
cmp dword [edx + eax*8 + 0xc], 0
je 0x448467
cmp dword [edx + eax*8], 0xf
jne 0x448467
push 2
push 0xffffffffffffffff
push 0x100c
push dword [edx + eax*8 + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, eax
test esi, esi
js 0x448467
xorps xmm0, xmm0
mov dword [ebp - 0x88], 0
movq qword [ebp - 0x90], xmm0
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x90], 0
mov byte [ebp - 0x88], 1
mov dword [ebp - 4], 0
xor eax, eax
movq qword [ebp - 0x9c], xmm0
xor edi, edi
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x98], edi
mov dword [ebp - 0x3bc], eax
mov dword [ebp - 0x9c], eax
mov byte [ebp - 0x94], 1
mov byte [ebp - 4], 1
push eax
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x3b4]
push esi
movq qword [ebp - 0xe0], xmm0
push dword [eax + 0xbc]
lea ecx, [eax + 0x2a8]
call fcn.00416470
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0xe0], eax
mov byte [ebp - 0xd8], 1
xorps xmm0, xmm0
mov dword [ebp - 0xcc], edi
movq qword [ebp - 0xd4], xmm0
mov dword [ebp - 0xd0], edi
mov dword [ebp - 0xd4], edi
mov byte [ebp - 0xcc], 1
mov eax, dword [ebp - 0x3b4]
push 3
push esi
mov byte [ebp - 4], 3
push dword [eax + 0xbc]
lea ecx, [eax + 0x2a8]
call fcn.00416470
mov ecx, eax
mov dword [ebp - 0xd0], edi
mov dword [ebp - 0x3ec], ecx
lea edx, [edi + 2]
test ecx, ecx
jne 0x445deb
mov byte [ebp - 0xcc], al
mov eax, 1
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov ecx, eax
add esp, 4
xor eax, eax
mov dword [ebp - 0x3ec], ecx
mov word [ecx], ax
mov byte [ebp - 0xcc], 1
mov dword [ebp - 0xd4], ecx
test ecx, ecx
jne 0x445e1f
push 2
call fcn.0048a2cb
mov ecx, eax
add esp, 4
xor eax, eax
mov dword [ebp - 0x3ec], ecx
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0xd0], eax
mov word [ecx], ax
mov byte [ebp - 0xcc], 1
xor esi, esi
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x84], ecx
mov byte [ebp - 0x88], 0
mov dword [ebp - 0x8c], 0
nop dword [eax]
inc esi
cmp word [esi*2 + str.SELECT__FROM_MSFT_Disk_WHERE_Number_], 0
jne 0x445e50
test ecx, ecx
je 0x445e71
xor eax, eax
cmp word [ecx], ax
je 0x445e6f
inc eax
cmp word [ecx + eax*2], 0
jne 0x445e67
add esi, eax
xor ecx, ecx
lea eax, [esi + 1]
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edi, str.SELECT__FROM_MSFT_Disk_WHERE_Number_
mov dword [ebp - 0x3c8], eax
add esp, 4
mov ecx, eax
mov edx, 0x53
sub edi, eax
mov word [ecx], dx
add ecx, 2
movzx eax, word [ecx + edi]
mov edx, eax
test ax, ax
jne 0x445ea1
mov eax, dword [ebp - 0x3ec]
mov edi, 0
test eax, eax
je 0x445ee4
movzx eax, word [eax]
mov edx, eax
test ax, ax
je 0x445ee4
mov edi, dword [ebp - 0x84]
mov word [ecx], ax
lea edi, [edi + 2]
movzx eax, word [edi]
add ecx, 2
test ax, ax
jne 0x445ed1
xor edi, edi
xor eax, eax
mov dword [ebp - 0x8c], esi
mov word [ecx], ax
mov ecx, dword [ebp - 0x3b4]
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x90], eax
mov byte [ebp - 0x88], 1
cmp byte [ecx + 0x150], 0
lea esi, [ecx + 0x138]
jne 0x445f2f
mov ecx, dword [esi]
test ecx, ecx
je 0x445f29
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x3c8]
mov ecx, dword [ebp - 0x3b4]
mov dword [esi], 0
mov edx, eax
mov ecx, dword [ecx + 0x130]
call fcn.0041a6c0
mov edx, dword [ebp - 0x3b4]
mov esi, eax
mov ecx, dword [edx + 0x134]
test ecx, ecx
je 0x445f60
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov edx, dword [ebp - 0x3b4]
test esi, esi
mov dword [edx + 0x134], esi
mov ecx, esi
mov byte [edx + 0x150], 0
setne al
mov byte [edx + 0x160], al
test ecx, ecx
je 0x4483f5
mov eax, dword [ecx]
lea edx, [ebp - 0x84]
push edx
lea edx, [ebp - 0x36c]
mov dword [ebp - 0x36c], 0
push edx
push 1
push 0xffffffffffffffff
push ecx
mov dword [ebp - 0x84], 0
call dword [eax + 0x10]
mov edx, dword [ebp - 0x3b4]
mov esi, dword [ebp - 0x36c]
mov ecx, dword [edx + 0x138]
test ecx, ecx
je 0x445fd0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov edx, dword [ebp - 0x3b4]
test esi, esi
mov dword [edx + 0x138], esi
mov byte [edx + 0x150], 0
setne al
cmp dword [edx + 0x138], 0
mov byte [edx + 0x160], al
je 0x4483f5
xorps xmm0, xmm0
movups xmmword [ebp - 0x100], xmm0
mov dword [ebp - 0x100], 0
movups xmmword [ebp - 0xf0], xmm0
push ecx
mov byte [ebp - 4], 4
lea eax, [edx + 0x2a8]
movaps xmm0, xmmword [0x4cd010]
lea ecx, [ebp - 0x100]
push 0
push dword [edx + 0x54]
movups xmmword [ebp - 0xf8], xmm0
mov dword [ebp - 0xe8], 0xd
push dword [edx + 0x44]
mov dword [ebp - 0xe4], 0
push eax
call fcn.00417480
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x3e8]
test ecx, ecx
jne 0x446082
push 2
call fcn.0048a2cb
mov ecx, eax
add esp, 4
xor eax, eax
mov dword [ebp - 0x3e8], ecx
mov dword [ebp - 0xe0], ecx
mov dword [ebp - 0xdc], eax
mov word [ecx], ax
xor eax, eax
mov byte [ebp - 0xd8], 1
mov dword [ebp - 0x90], 0
mov byte [ebp - 0x88], 0
mov dword [ebp - 0x8c], 0
test ecx, ecx
je 0x4460b8
cmp word [ecx], ax
je 0x4460b8
nop
inc eax
cmp word [ecx + eax*2], 0
jne 0x4460b0
xor ecx, ecx
nop word [eax + eax]
lea ecx, [ecx + 1]
cmp word [ecx*2 + 0x4c4e68], 0
jne 0x4460c0
lea esi, [ecx + eax]
mov edx, 2
xor ecx, ecx
mov dword [ebp - 0x3c4], esi
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov ecx, dword [ebp - 0x3e8]
add esp, 4
mov dword [ebp - 0x3c0], eax
mov edx, eax
test ecx, ecx
je 0x446131
movzx ecx, word [ecx]
mov esi, ecx
mov dword [ebp - 0x84], esi
test cx, cx
je 0x446131
mov esi, dword [ebp - 0x3e8]
movzx ecx, cx
sub esi, eax
mov word [edx], cx
add edx, 2
movzx eax, word [edx + esi]
mov ecx, eax
test ax, ax
jne 0x446120
mov esi, 0x4c4e68
mov ecx, 0x20
sub esi, edx
nop dword [eax]
mov word [edx], cx
lea edx, [edx + 2]
movzx eax, word [edx + esi]
mov ecx, eax
test ax, ax
jne 0x446140
mov esi, dword [ebp - 0x3c4]
xor eax, eax
mov word [edx], ax
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x8c], esi
mov esi, dword [ebp - 0x3c8]
push esi
mov dword [ebp - 0x90], eax
call fcn.00489f13
mov esi, dword [ebp - 0x3b4]
add esp, 4
push dword [esi + 0x4d8]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4461a1
mov eax, dword [esi + 0x4d8]
mov dword [ebp - 0x3e4], eax
jmp 0x4461ab
mov dword [ebp - 0x3e4], 0
push 0x268
lea eax, [ebp - 0x368]
push 0
push eax
call fcn.0048ba10
add esp, 0xc
mov byte [ebp - 0x88], 1
mov word [ebp - 0x330], 0
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x258], 0
mov byte [ebp - 0x250], 1
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x368]
push 1
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
call fcn.00417000
push ecx
push dword [ebp - 0x3e4]
add esi, 0x22c
lea eax, [ebp - 0x368]
push 0xffffffffffffffff
push SysReAllocString
push 0xffffffffffffffff
push 0xffffffffffffffff
push pe_nt_image_headers32
cmovne eax, esi
lea ecx, [ebp - 0x368]
mov esi, dword [ebp - 0x3c0]
push 0x226
push esi
push 0x4c3d00
mov dword [ebp - 0x1a8], eax
call fcn.0040bf80
push ecx
push 0xc
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xff000000
push pe_nt_image_headers32
push 0x226
lea ecx, [ebp - 0x368]
mov byte [ebp - 4], 7
call fcn.004167f0
cmp dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x84], eax
je 0x446310
mov eax, dword [ebp - 0x3b4]
xor esi, esi
add eax, 0x2f8
mov dword [ebp - 0x36c], eax
nop word [eax + eax]
mov eax, dword [eax]
test eax, eax
je 0x4462e8
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4462e8
mov eax, dword [ebp - 0x36c]
inc esi
add eax, 4
mov dword [ebp - 0x36c], eax
cmp esi, 0x30
jl 0x4462c0
jmp 0x44630a
mov ecx, dword [ebp - 0x3b4]
mov eax, dword [ebp - 0x84]
mov dword [ecx + esi*4 + 0x2f8], eax
inc esi
cmp esi, dword [ecx + 0x2f4]
jle 0x44630a
mov dword [ecx + 0x2f4], esi
mov esi, dword [ebp - 0x3c0]
movsd xmm0, qword [0x4cc778]
xor eax, eax
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x140], 0xffffff
movsd qword [ebp - 0x1f8], xmm0
mov dword [ebp - 0x1f0], 0x2bc
mov byte [ebp - 0x1ec], 1
mov byte [ebp - 0x1aa], 0
nop
inc eax
cmp word [eax*2 + 0x4bff50], 0
jne 0x446350
inc eax
push eax
push 0x4bff50
lea eax, [ebp - 0x1ea]
push 0x20
push eax
call fcn.0048d1b3
add esp, 0x10
mov dword [ebp - 0x178], 0x1400
lea ecx, [ebp - 0x368]
mov byte [ebp - 0x88], 1
call fcn.00416d40
test al, al
je 0x4463fd
mov eax, dword [ebp - 0x328]
push 0
push dword [ebp - 0x24c]
inc eax
push eax
push dword [ebp - 0x134]
movzx eax, byte [ebp - 0x120]
push 0x1c
push 0x21c
push 5
and eax, 1
push 5
shl eax, 0x11
add eax, 0x50000300
push eax
push esi
push 0x4c018c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x4463fd
push eax
push 0xd
lea ecx, [ebp - 0x368]
call fcn.00416ab0
movaps xmm0, xmmword [0x4cce50]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x32c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
movsd xmm0, qword [0x4cc778]
xor eax, eax
mov dword [ebp - 0x178], 0x400
movsd qword [ebp - 0x1f8], xmm0
mov dword [ebp - 0x1f0], 0x2bc
mov byte [ebp - 0x1ec], 1
mov byte [ebp - 0x1aa], 0
inc eax
cmp word [eax*2 + 0x4bff50], 0
jne 0x446431
inc eax
push eax
push 0x4bff50
lea eax, [ebp - 0x1ea]
push 0x20
push eax
call fcn.0048d1b3
mov eax, dword [ebp - 0x3c4]
add esp, 0x10
mov byte [ebp - 0x88], 0
test eax, eax
jne 0x44647e
cmp word [esi], ax
je 0x446478
nop dword [eax + eax]
inc eax
cmp word [esi + eax*2], 0
jne 0x446470
mov dword [ebp - 0x8c], eax
xor ecx, ecx
inc ecx
cmp word [ecx*2 + 0x4c4e8c], 0
jne 0x446480
add eax, ecx
mov edx, 2
mov dword [ebp - 0x3e0], eax
xor ecx, ecx
inc eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edi, 0x4c4e8c
mov dword [ebp - 0x3c8], eax
add esp, 4
mov edx, esi
mov ecx, eax
mov esi, 0x20
sub edi, eax
mov word [ecx], si
add ecx, 2
movzx eax, word [edi + ecx]
mov esi, eax
test ax, ax
jne 0x4464c4
mov esi, dword [ebp - 0x3c0]
movzx eax, word [esi]
mov edi, eax
mov dword [ebp - 0x84], edi
mov edi, 0
test ax, ax
je 0x446504
movzx eax, ax
mov word [ecx], ax
lea edx, [edx + 2]
movzx eax, word [edx]
add ecx, 2
test ax, ax
jne 0x4464f3
xor eax, eax
push esi
mov word [ecx], ax
call fcn.00489f13
mov eax, dword [ebp - 0x3e0]
lea ecx, [ebp - 0x368]
mov esi, dword [ebp - 0x3c8]
add esp, 4
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x8c], eax
mov byte [ebp - 0x88], 1
call fcn.00416d40
test al, al
je 0x4465ad
mov eax, dword [ebp - 0x328]
push 0
push dword [ebp - 0x24c]
inc eax
push eax
push dword [ebp - 0x134]
movzx eax, byte [ebp - 0x120]
push 0x1c
push 0x21c
push 5
and eax, 1
push 5
shl eax, 0x11
add eax, 0x50000300
push eax
push esi
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x4c018c
push 0
call esi
test eax, eax
je 0x4465b3
push eax
push 0xd
lea ecx, [ebp - 0x368]
call fcn.00416ab0
movaps xmm0, xmmword [0x4cce50]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x32c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
jmp 0x4465b3
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
movsd xmm0, qword [0x4cc768]
xor eax, eax
movsd qword [ebp - 0x1f8], xmm0
mov dword [ebp - 0x1f0], 0x190
mov byte [ebp - 0x1ec], 1
mov byte [ebp - 0x1aa], 0
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4bff50], di
jne 0x4465e0
inc eax
push eax
push 0x4bff50
lea eax, [ebp - 0x1ea]
push 0x20
push eax
call fcn.0048d1b3
add esp, 0x10
lea ecx, [ebp - 0x368]
call fcn.00416d40
test al, al
je 0x446678
mov eax, dword [ebp - 0x328]
push 0
push dword [ebp - 0x24c]
inc eax
push eax
push dword [ebp - 0x134]
movzx eax, byte [ebp - 0x120]
push 0x12
push 0x5a
push 0x3c
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4c4e94
push 0x4c018c
push 0
call esi
test eax, eax
je 0x446678
push eax
push 0xd
lea ecx, [ebp - 0x368]
call fcn.00416ab0
movaps xmm0, xmmword [0x4cc990]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x32c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
lea ecx, [ebp - 0x368]
call fcn.00416d40
test al, al
jne 0x44668b
xor esi, esi
jmp 0x4466fa
mov eax, dword [ebp - 0x328]
push 0
push dword [ebp - 0x24c]
inc eax
push eax
push dword [ebp - 0x134]
movzx eax, byte [ebp - 0x120]
push 0x12
push 0x5a
push 0x3c
and eax, 1
push 0xa0
shl eax, 0x11
add eax, 0x50010009
push eax
push 0x4c4eb4
push 0x4c019c
push 0
call esi
test eax, eax
jne 0x4466d5
xor esi, esi
jmp 0x4466fa
push eax
push 0x15
lea ecx, [ebp - 0x368]
call fcn.00416ab0
mov ecx, dword [ebp - 0x32c]
mov esi, eax
movaps xmm0, xmmword [0x4cc9a0]
lea edx, [esi + esi*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
lea ecx, [ebp - 0x368]
call fcn.00416d40
test al, al
jne 0x446711
mov dword [ebp - 0x3c4], edi
jmp 0x44678c
mov eax, dword [ebp - 0x328]
push 0
push dword [ebp - 0x24c]
inc eax
push eax
push dword [ebp - 0x134]
movzx eax, byte [ebp - 0x120]
push 0x12
push 0x5a
push 0x3c
and eax, 1
push 0x140
shl eax, 0x11
add eax, 0x50010009
push eax
push 0x4c4ec4
push 0x4c019c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
jne 0x446763
mov dword [ebp - 0x3c4], edi
jmp 0x44678c
push eax
push 0x15
lea ecx, [ebp - 0x368]
call fcn.00416ab0
mov ecx, dword [ebp - 0x32c]
movaps xmm0, xmmword [0x4cc9b0]
mov dword [ebp - 0x3c4], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
lea ecx, [ebp - 0x368]
call fcn.00416d40
test al, al
je 0x446805
mov eax, dword [ebp - 0x328]
push 0
push dword [ebp - 0x24c]
inc eax
push eax
push dword [ebp - 0x134]
movzx eax, byte [ebp - 0x120]
push 2
push 0x1fe
push 0x5f
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0
push 0x4c018c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x446805
push eax
push 0xd
lea ecx, [ebp - 0x368]
call fcn.00416ab0
movaps xmm0, xmmword [0x4cc820]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x32c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
push 0
push ecx
lea ecx, [ebp - 0x368]
call fcn.004136f0
mov ecx, dword [ebp - 0x3b4]
push 0x4c4ed4
lea ecx, [ecx + 0x130]
call fcn.0041b0e0
mov ecx, dword [ebp - 0x3b4]
cmp byte [ecx + 0x160], 0
jne 0x44683c
xor eax, eax
jmp 0x446855
cmp word [ecx + 0x140], 8
mov eax, dword [ecx + 0x148]
jne 0x446855
push eax
call fcn.0048e09c
add esp, 4
test eax, eax
lea ecx, [ebp - 0x368]
push 4
setne byte [ebp - 0x3d9]
test eax, eax
cmovne esi, dword [ebp - 0x3c4]
push esi
call fcn.00414360
test byte [ebp - 0x120], 1
jne 0x446885
or dword [ebp - 0x120], 1
lea ecx, [ebp - 0x368]
call fcn.00416d40
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
test al, al
je 0x446900
mov eax, dword [ebp - 0x328]
push 0
push dword [ebp - 0x24c]
inc eax
push eax
push dword [ebp - 0x134]
movzx eax, byte [ebp - 0x120]
push 0x12
push 0x5a
push 0x78
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4c4ee8
push 0x4c018c
push 0
call esi
test eax, eax
je 0x446900
push eax
push 0xd
lea ecx, [ebp - 0x368]
call fcn.00416ab0
movaps xmm0, xmmword [0x4cc9c0]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x32c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
lea ecx, [ebp - 0x368]
call fcn.00416d40
test al, al
jne 0x446913
xor esi, esi
jmp 0x446982
mov eax, dword [ebp - 0x328]
push 0
push dword [ebp - 0x24c]
inc eax
push eax
push dword [ebp - 0x134]
movzx eax, byte [ebp - 0x120]
push 0x12
push 0x6e
push 0x78
and eax, 1
push 0xa0
shl eax, 0x11
add eax, 0x50010009
push eax
push 0x4c4f04
push 0x4c019c
push 0
call esi
test eax, eax
jne 0x44695d
xor esi, esi
jmp 0x446982
push eax
push 0x15
lea ecx, [ebp - 0x368]
call fcn.00416ab0
mov ecx, dword [ebp - 0x32c]
mov esi, eax
movaps xmm0, xmmword [0x4cca80]
lea edx, [esi + esi*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
lea ecx, [ebp - 0x368]
call fcn.00416d40
test al, al
jne 0x446999
mov dword [ebp - 0x3c0], edi
jmp 0x446a14
mov eax, dword [ebp - 0x328]
push 0
push dword [ebp - 0x24c]
inc eax
push eax
push dword [ebp - 0x134]
movzx eax, byte [ebp - 0x120]
push 0x12
push 0x6e
push 0x78
and eax, 1
push 0x140
shl eax, 0x11
add eax, 0x50010009
push eax
push 0x4c4f1c
push 0x4c019c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
jne 0x4469eb
mov dword [ebp - 0x3c0], edi
jmp 0x446a14
push eax
push 0x15
lea ecx, [ebp - 0x368]
call fcn.00416ab0
mov ecx, dword [ebp - 0x32c]
movaps xmm0, xmmword [0x4cca90]
mov dword [ebp - 0x3c0], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
mov ecx, dword [ebp - 0x3b4]
add ecx, 0x130
push 0x4c4f30
call fcn.0041b0e0
mov ecx, dword [ebp - 0x3b4]
cmp byte [ecx + 0x160], 0
jne 0x446a3d
xor eax, eax
jmp 0x446a56
cmp word [ecx + 0x140], 8
mov eax, dword [ecx + 0x148]
jne 0x446a56
push eax
call fcn.0048e09c
add esp, 4
test eax, eax
lea ecx, [ebp - 0x368]
push 4
setne byte [ebp - 0x3da]
test eax, eax
cmovne esi, dword [ebp - 0x3c0]
push esi
call fcn.00414360
test byte [ebp - 0x120], 1
jne 0x446a86
or dword [ebp - 0x120], 1
lea ecx, [ebp - 0x368]
call fcn.00416d40
test al, al
je 0x446b02
mov eax, dword [ebp - 0x328]
push 0
push dword [ebp - 0x24c]
inc eax
push eax
push dword [ebp - 0x134]
movzx eax, byte [ebp - 0x120]
push 2
push 0x1fe
push 0x9b
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0
push 0x4c018c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x446b02
push eax
push 0xd
lea ecx, [ebp - 0x368]
call fcn.00416ab0
movaps xmm0, xmmword [0x4cc830]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x32c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
push 0
push ecx
lea ecx, [ebp - 0x368]
call fcn.004136f0
mov esi, dword [ebp - 0x3b4]
push 0x4c1f28
lea ecx, [esi + 0x130]
call fcn.0041b0e0
cmp byte [esi + 0x160], 0
jne 0x446b33
xor ecx, ecx
jmp 0x446b57
cmp word [esi + 0x140], 8
jne 0x446b50
push dword [esi + 0x148]
call fcn.0048e09c
add esp, 4
movzx ecx, ax
jmp 0x446b57
movzx ecx, word [esi + 0x148]
cmp cx, 2
mov dword [ebp - 0x3e4], ecx
mov edx, 0x4c4f54
mov dword [ebp - 0x3d0], 0xffffffff
mov ecx, esi
mov dword [ebp - 0xa0], edi
mov eax, 0x4c4f48
xorps xmm0, xmm0
push 0
cmovne eax, edx
movq qword [ebp - 0xa8], xmm0
push eax
lea ecx, [ecx + 0x130]
call fcn.0041b1c0
xor esi, esi
mov dword [ebp - 0x84], eax
test eax, eax
je 0x446bb7
cmp word [eax], si
je 0x446bb7
nop word [eax + eax]
inc esi
cmp word [eax + esi*2], di
jne 0x446bb0
xor ecx, ecx
mov dword [ebp - 0xa4], esi
lea eax, [esi + 1]
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
add esp, 4
mov dword [ebp - 0xa8], eax
test esi, esi
jle 0x446c06
mov edx, dword [ebp - 0x84]
mov ecx, eax
sub edx, eax
mov edi, esi
nop
mov ax, word [edx + ecx]
lea ecx, [ecx + 2]
mov word [ecx - 2], ax
sub edi, 1
jne 0x446bf0
mov eax, dword [ebp - 0xa8]
xor ecx, ecx
mov byte [ebp - 0xa0], 1
mov word [eax + esi*2], cx
mov eax, dword [ebp - 0x3e4]
mov byte [ebp - 4], 8
cmp ax, 2
jne 0x446d57
lea ecx, [ebp - 0x368]
call fcn.00416d40
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
test al, al
je 0x446ca5
mov eax, dword [ebp - 0x328]
push 0
push dword [ebp - 0x24c]
inc eax
push eax
push dword [ebp - 0x134]
movzx eax, byte [ebp - 0x120]
push 0x12
push 0x5a
push 0xb6
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4c4f68
push 0x4c018c
push 0
call esi
test eax, eax
je 0x446ca5
push eax
push 0xd
lea ecx, [ebp - 0x368]
call fcn.00416ab0
movaps xmm0, xmmword [0x4cc9d0]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x32c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
lea ecx, [ebp - 0x368]
mov byte [ebp - 0xa0], 1
call fcn.00416d40
test al, al
jne 0x446cca
mov dword [ebp - 0x3d0], 0
jmp 0x446e8f
test byte [ebp - 0x120], 1
mov eax, 0x50020080
push 0
push dword [ebp - 0x24c]
mov ecx, 0x50000080
cmovne ecx, eax
mov eax, dword [ebp - 0x328]
inc eax
or ecx, 0x10000
push eax
push dword [ebp - 0x134]
push 0x14
push pe_nt_image_headers32
push 0xb4
push 0xa0
push ecx
push dword [ebp - 0xa8]
push 0x4c0220
push 0x200
call esi
test eax, eax
jne 0x446d2d
mov dword [ebp - 0x3d0], eax
jmp 0x446e8f
push eax
push 0xc
lea ecx, [ebp - 0x368]
call fcn.00416ab0
mov ecx, dword [ebp - 0x32c]
mov esi, eax
movaps xmm0, xmmword [0x4cccf0]
lea edx, [esi + esi*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
jmp 0x446e89
cmp ax, 1
jne 0x446e8f
lea ecx, [ebp - 0x368]
call fcn.00416d40
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
test al, al
je 0x446ddf
mov eax, dword [ebp - 0x328]
push 0
push dword [ebp - 0x24c]
inc eax
push eax
push dword [ebp - 0x134]
movzx eax, byte [ebp - 0x120]
push 0x12
push 0x5a
push 0xb6
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4c4f80
push 0x4c018c
push 0
call esi
test eax, eax
je 0x446ddf
push eax
push 0xd
lea ecx, [ebp - 0x368]
call fcn.00416ab0
movaps xmm0, xmmword [0x4cc9d0]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x32c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
lea ecx, [ebp - 0x368]
mov byte [ebp - 0xa0], 1
call fcn.00416d40
test al, al
jne 0x446e04
mov dword [ebp - 0x3d0], 0
jmp 0x446e8f
test byte [ebp - 0x120], 1
mov eax, 0x50022080
push 0
push dword [ebp - 0x24c]
mov ecx, 0x50002080
cmovne ecx, eax
mov eax, dword [ebp - 0x328]
inc eax
or ecx, 0x10000
push eax
push dword [ebp - 0x134]
push 0x14
push pe_nt_image_headers32
push 0xb4
push 0xa0
push ecx
push dword [ebp - 0xa8]
push 0x4c0220
push 0x200
call esi
test eax, eax
jne 0x446e64
mov dword [ebp - 0x3d0], eax
jmp 0x446e8f
push eax
push 0xc
lea ecx, [ebp - 0x368]
call fcn.00416ab0
movaps xmm0, xmmword [0x4cccf0]
mov esi, eax
mov eax, dword [ebp - 0x32c]
lea ecx, [esi + esi*8]
movups xmmword [eax + ecx*8 + 0x24], xmm0
mov dword [ebp - 0x3d0], esi
lea ecx, [ebp - 0x368]
call fcn.00416d40
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
test al, al
je 0x446f0a
mov eax, dword [ebp - 0x328]
push 0
push dword [ebp - 0x24c]
inc eax
push eax
push dword [ebp - 0x134]
movzx eax, byte [ebp - 0x120]
push 2
push 0x1fe
push 0x5f
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0
push 0x4c018c
push 0
call esi
test eax, eax
je 0x446f0a
push eax
push 0xd
lea ecx, [ebp - 0x368]
call fcn.00416ab0
movaps xmm0, xmmword [0x4cc820]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x32c]
movups xmmword [eax + ecx*8 + 0x24], xmm0
push 0
push ecx
lea ecx, [ebp - 0x368]
call fcn.004136f0
cmp dword [ebp - 0x138], 0
je 0x446f9e
lea ecx, [ebp - 0x368]
call fcn.00416d40
test al, al
je 0x446f9e
mov eax, dword [ebp - 0x328]
push 0
push dword [ebp - 0x24c]
inc eax
push eax
push dword [ebp - 0x134]
movzx eax, byte [ebp - 0x120]
push 0x1e
push 0x64
push 0xf2
and eax, 1
push 0x122
shl eax, 0x11
add eax, 0x50010000
push eax
push 0x4c033c
push 0x4c019c
push 0
call esi
test eax, eax
je 0x446f9e
push eax
push 3
lea ecx, [ebp - 0x368]
call fcn.00416ab0
mov ecx, dword [ebp - 0x32c]
movaps xmm0, xmmword [0x4cced0]
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
jmp 0x446fa0
xor eax, eax
sub esp, 8
mov dword [ebp - 0x3d8], eax
lea ecx, [ebp - 0x368]
push 0x4c4260
push 0xffffffffffffffff
call fcn.00415120
cmp dword [ebp - 0x138], 0
je 0x44704b
lea ecx, [ebp - 0x368]
call fcn.00416d40
test al, al
je 0x44704b
mov eax, dword [ebp - 0x328]
push 0
push dword [ebp - 0x24c]
inc eax
push eax
push dword [ebp - 0x134]
movzx eax, byte [ebp - 0x120]
push 0x20
push 0x78
push 0xf0
and eax, 1
push 0x19a
shl eax, 0x11
add eax, 0x50010000
push eax
push 0x4c4fa0
push 0x4c019c
push 0
call esi
test eax, eax
je 0x44704b
push eax
push 3
lea ecx, [ebp - 0x368]
call fcn.00416ab0
mov ecx, dword [ebp - 0x32c]
movaps xmm0, xmmword [0x4ccf50]
mov dword [ebp - 0x36c], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
jmp 0x447055
mov dword [ebp - 0x36c], 0
sub esp, 8
lea ecx, [ebp - 0x368]
push 0x4c4fbc
push 0xffffffffffffffff
call fcn.00415120
mov esi, dword [ebp - 0x3d8]
mov eax, 0x1b
mov word [ebp - 0x1a], ax
mov eax, dword [ebp - 0x124]
mov byte [ebp - 0x1c], 1
mov word [ebp - 0x18], si
test eax, eax
je 0x447092
push eax
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
push 1
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
xor ecx, ecx
cmp eax, 0xffffffff
push 1
cmove eax, ecx
lea ecx, [ebp - 0x368]
push 1
mov dword [ebp - 0x124], eax
call fcn.0040db40
mov ecx, dword [ebp - 0x3b4]
push 0
call fcn.00428440
test eax, eax
je 0x447321
mov ecx, dword [ebp - 0x3b4]
mov eax, dword [ecx + 0x22c]
cmp eax, 0xfffffffa
je 0x4483ed
lea edx, [ebp - 0x368]
cmp dword [ecx + 0x25c], edx
jne 0x44730c
cmp eax, esi
je 0x4483ed
cmp eax, dword [ebp - 0x36c]
jne 0x44730c
push 0x43a2f0
push 0x445bd0
push 3
push 0x20
lea eax, [ebp - 0x80]
push eax
call fcn.0048a300
push 4
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x368]
push dword [ebp - 0x3c4]
call fcn.00415560
push 4
push dword [ebp - 0x3c0]
test eax, eax
mov dword [ebp - 0x3e0], eax
lea ecx, [ebp - 0x368]
setne byte [ebp - 0x3c9]
call fcn.00415560
push dword [ebp - 0x3d0]
test eax, eax
mov dword [ebp - 0x84], eax
lea ecx, [ebp - 0x368]
setne byte [ebp - 0x3b5]
call fcn.00415800
mov esi, eax
mov eax, dword [ebp - 0x3c8]
test esi, esi
jne 0x4471bc
test eax, eax
je 0x447194
push eax
call fcn.00489f13
add esp, 4
push 2
mov byte [ebp - 0x88], 0
mov dword [ebp - 0x8c], 0
call fcn.0048a2cb
add esp, 4
mov dword [ebp - 0x3c8], eax
xor ecx, ecx
mov word [eax], cx
jmp 0x4471db
test eax, eax
je 0x4471c9
push eax
call fcn.00489f13
add esp, 4
mov eax, esi
mov dword [ebp - 0x3c8], esi
mov dword [ebp - 0x8c], 0
mov cl, byte [ebp - 0x3d9]
mov byte [ebp - 0x88], 1
mov dword [ebp - 0x90], eax
cmp byte [ebp - 0x3c9], cl
jne 0x4472c2
mov cl, byte [ebp - 0x3da]
cmp byte [ebp - 0x3b5], cl
jne 0x4472c2
mov ecx, dword [ebp - 0xa8]
mov byte [ebp - 0xa0], 1
cmp eax, ecx
je 0x447240
test eax, eax
je 0x4472c2
sub eax, ecx
mov esi, ecx
mov dword [ebp - 0x3d4], eax
nop
movzx eax, word [eax + esi]
mov ecx, eax
test ax, ax
jne 0x447269
cmp word [esi], ax
jne 0x44726e
push ecx
mov ecx, dword [ebp - 0x3b4]
lea eax, [ebp - 0x368]
push 0x1c2
push 0x96
push eax
push 0
push 0x4c4ff8
call fcn.00432ac0
jmp 0x4472f0
cmp ax, word [esi]
je 0x4472b4
xor edx, edx
cmp dx, ax
jne 0x44727d
mov dword [ebp - 0x3f0], edx
jmp 0x44728f
push ecx
call fcn.0048e184
movzx eax, ax
add esp, 4
mov dword [ebp - 0x3f0], eax
movzx eax, word [esi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x44729f
xor eax, eax
jmp 0x4472ab
push ecx
call fcn.0048e184
add esp, 4
movzx eax, ax
cmp word [ebp - 0x3f0], ax
jne 0x4472c2
mov eax, dword [ebp - 0x3d4]
add esi, 2
jmp 0x447230
mov esi, dword [ebp - 0x3b4]
lea eax, [ebp - 0x368]
push ecx
push 0x1c2
push 0x96
push eax
push 1
push 0x4c5038
mov ecx, esi
call fcn.00432ac0
test eax, eax
jne 0x4473b8
push 0x43a2f0
push 3
push 0x20
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 8
push eax
call fcn.0048a1a8
mov esi, dword [ebp - 0x3d8]
mov ecx, dword [ebp - 0x3b4]
push 0
call fcn.00428440
test eax, eax
jne 0x4470d0
mov edi, 1
push dword [ebp - 0xa8]
call fcn.00489f13
add esp, 4
lea ecx, [ebp - 0x368]
mov byte [ebp - 4], 0x1a
call fcn.0040c540
mov eax, dword [ebp - 0x32c]
test eax, eax
je 0x447356
push eax
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x258]
test eax, eax
je 0x447369
push eax
call fcn.00489f13
add esp, 4
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0xe4]
mov esi, dword [ebp - 0x100]
test ecx, ecx
je 0x4473a2
test esi, esi
je 0x448417
push dword [ebp - 0xe8]
lea eax, [ebp - 0x100]
push dword [ebp - 0xf8]
push eax
call fcn.0040c930
call fcn.00403550
test esi, esi
je 0x448417
push esi
call fcn.00489f13
add esp, 4
jmp 0x448417
mov dword [ebp - 0x370], 0
mov al, byte [ebp - 0x3d9]
mov byte [ebp - 4], 0xe
cmp byte [ebp - 0x3c9], al
je 0x447707
mov edi, dword [ebp - 0x3e0]
lea eax, [ebp - 0x370]
mov edx, dword [esi + 0x138]
mov ecx, 0x4c4eb4
push eax
push 0
test edi, edi
mov eax, 0x4c4ec4
push 0
cmove eax, ecx
mov ecx, dword [esi + 0x130]
push eax
call fcn.0041a920
test al, al
je 0x4474d8
mov esi, dword [ebp - 0x370]
lea eax, [ebp - 0x380]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantClear]
push eax
call edi
lea eax, [ebp - 0x380]
mov byte [ebp - 4], 0xf
push eax
call edi
test esi, esi
je 0x44749f
mov eax, dword [esi]
lea ecx, [ebp - 0x380]
push 0
push 0
push ecx
push 0
push 0x4c04c0
push esi
call dword [eax + 0x10]
shr eax, 0x1f
xor al, 1
je 0x44749f
cmp word [ebp - 0x380], 8
jne 0x447485
push dword [ebp - 0x378]
call fcn.0048e09c
add esp, 4
mov byte [ebp - 4], 0xe
mov edi, eax
lea eax, [ebp - 0x380]
push eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
call eax
jmp 0x4474b3
mov edi, dword [ebp - 0x378]
lea eax, [ebp - 0x380]
mov byte [ebp - 4], 0xe
push eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
call eax
jmp 0x4474b3
lea eax, [ebp - 0x380]
mov byte [ebp - 4], 0xe
push eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
call eax
xor edi, edi
cmp dword [ebp - 0x3e0], 0
mov eax, 0x4c50bc
mov esi, 0x4c50ac
mov ecx, 0x4c5104
cmove esi, eax
test edi, edi
mov eax, 0x4c50e0
cmovne eax, ecx
jmp 0x4474ec
mov eax, 0x4c50bc
test edi, edi
mov esi, 0x4c50ac
cmove esi, eax
mov eax, 0x4c5104
mov edi, 0x4c50cc
mov dword [ebp - 0x98], 0
mov byte [ebp - 0x94], 0
xor edx, edx
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x3d0], edi
mov dword [ebp - 0x3c4], esi
mov dword [ebp - 0x3c0], 0x4c50a4
mov dword [ebp - 0x9c], 0
inc edx
cmp word [edx*2 + 0x4c5120], 0
jne 0x447530
xor ecx, ecx
cmp word [eax], cx
je 0x447579
mov edi, 0x4c50a4
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x3c0], edi
mov edi, dword [ebp - 0x3c4]
mov dword [ebp - 0x3c4], edi
mov edi, 0x4c50cc
mov dword [ebp - 0x3d0], edi
mov edi, dword [ebp - 0x3e0]
inc ecx
cmp word [edi + ecx*2], 0
jne 0x447571
add edx, ecx
xor ecx, ecx
nop dword [eax]
lea ecx, [ecx + 1]
cmp word [ecx*2 + 0x4c50cc], 0
jne 0x447580
lea edi, [ecx + edx]
test esi, esi
jne 0x4475b5
mov ecx, dword [ebp - 0x3c0]
mov edx, dword [ebp - 0x3d0]
mov dword [ebp - 0x3c0], ecx
mov dword [ebp - 0x3d0], edx
mov dword [ebp - 0x3d8], eax
jmp 0x4475ea
xor ecx, ecx
cmp word [esi], cx
je 0x4475e8
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x3c0], edx
mov edx, dword [ebp - 0x3d0]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x3d0], edx
inc ecx
cmp word [eax + ecx*2], 0
jne 0x4475e0
add edi, ecx
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4c50a4], 0
jne 0x4475f0
add edi, eax
xor ecx, ecx
mov edx, 2
mov dword [ebp - 0x3c4], edi
lea eax, [edi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edi, 0x4c5120
mov dword [ebp - 0x3bc], eax
add esp, 4
mov ecx, eax
mov edx, 0x54
sub edi, eax
mov word [ecx], dx
add ecx, 2
movzx eax, word [ecx + edi]
mov edx, eax
test ax, ax
jne 0x447634
mov edx, dword [ebp - 0x3d8]
test edx, edx
je 0x447681
movzx eax, word [edx]
mov edx, eax
mov dword [ebp - 0x3d4], edx
mov edx, dword [ebp - 0x3d8]
test ax, ax
je 0x447681
movzx eax, ax
nop dword [eax + eax]
mov word [ecx], ax
lea edx, [edx + 2]
movzx eax, word [edx]
add ecx, 2
test ax, ax
jne 0x447670
mov edi, dword [ebp - 0x3d0]
mov eax, 0x20
nop dword [eax]
mov word [ecx], ax
lea edi, [edi + 2]
movzx eax, word [edi]
add ecx, 2
test ax, ax
jne 0x447690
test esi, esi
je 0x4476c1
movzx eax, word [esi]
mov edx, eax
test ax, ax
je 0x4476c1
nop
mov word [ecx], ax
lea esi, [esi + 2]
movzx eax, word [esi]
add ecx, 2
test ax, ax
jne 0x4476b0
mov edi, dword [ebp - 0x3c0]
mov eax, 0x2e
nop dword [eax]
mov word [ecx], ax
lea edi, [edi + 2]
movzx eax, word [edi]
lea ecx, [ecx + 2]
test ax, ax
jne 0x4476d0
mov esi, dword [ebp - 0x3bc]
xor eax, eax
mov edi, dword [ebp - 0x3c4]
mov word [ecx], ax
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0x98], edi
mov byte [ebp - 0x94], 1
jmp 0x447709
xor esi, esi
mov al, byte [ebp - 0x3da]
cmp byte [ebp - 0x3b5], al
je 0x447a72
mov dword [ebp - 0xc8], 0
xor eax, eax
mov byte [ebp - 0xc0], 0
nop
inc eax
cmp word [eax*2 + 0x4c4f30], 0
jne 0x447730
mov dword [ebp - 0xc4], eax
xor ecx, ecx
inc eax
mov esi, 2
mul esi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0xc4]
xor ecx, ecx
mov dword [ebp - 0xc8], edx
test eax, eax
jle 0x44778d
mov ax, word [ecx*2 + 0x4c4f30]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc8]
cmp ecx, eax
jl 0x447770
xor ecx, ecx
mov word [edx + eax*2], cx
mov byte [ebp - 0xc0], 1
mov eax, dword [ebp - 0x84]
neg eax
mov word [ebp - 0xb8], si
sbb eax, eax
movzx eax, ax
mov word [ebp - 0xb0], ax
lea eax, [ebp - 0x370]
mov byte [ebp - 4], 0x11
push eax
push 1
lea eax, [ebp - 0xc8]
push eax
mov eax, dword [ebp - 0x3b4]
push 0x4c3268
mov edx, dword [eax + 0x138]
mov ecx, dword [eax + 0x130]
call fcn.0041a920
test al, al
je 0x447892
mov esi, dword [ebp - 0x370]
lea eax, [ebp - 0x390]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x390]
mov byte [ebp - 4], 0x12
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
test esi, esi
je 0x44787a
mov eax, dword [esi]
lea ecx, [ebp - 0x390]
push 0
push 0
push ecx
push 0
push 0x4c04c0
push esi
call dword [eax + 0x10]
shr eax, 0x1f
xor al, 1
je 0x44787a
cmp word [ebp - 0x390], 8
jne 0x447861
push dword [ebp - 0x388]
call fcn.0048e09c
add esp, 4
mov byte [ebp - 4], 0x11
mov esi, eax
lea eax, [ebp - 0x390]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x44788d
mov esi, dword [ebp - 0x388]
lea eax, [ebp - 0x390]
push eax
mov byte [ebp - 4], 0x11
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x44788d
lea eax, [ebp - 0x390]
mov byte [ebp - 4], 0x11
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
xor esi, esi
test esi, esi
sete al
cmp dword [ebp - 0x84], 0
mov ecx, 0x4c5134
mov edx, 0x4c5140
mov byte [ebp - 0x94], 0
cmove ecx, edx
mov esi, 0x4c50e0
test al, al
mov dword [ebp - 0x3e0], ecx
mov eax, 0x4c5104
cmove esi, eax
mov dword [ebp - 0x3d4], esi
test edi, edi
jne 0x4478ee
mov eax, dword [ebp - 0x3bc]
test eax, eax
je 0x4478e8
cmp word [eax], di
je 0x4478e8
nop dword [eax + eax]
inc edi
cmp word [eax + edi*2], 0
jne 0x4478e0
mov dword [ebp - 0x98], edi
xor eax, eax
lea eax, [eax + 1]
cmp word [eax*2 + 0x4c5158], 0
jne 0x4478f0
lea edx, [eax + edi]
xor eax, eax
cmp word [esi], ax
je 0x447910
inc eax
cmp word [esi + eax*2], 0
jne 0x447908
add edx, eax
xor eax, eax
cmp word [ecx], ax
je 0x447928
nop dword [eax]
inc eax
cmp word [ecx + eax*2], 0
jne 0x447920
lea edi, [eax + edx]
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4c50a4], 0
jne 0x447930
add edi, eax
xor ecx, ecx
mov edx, 2
mov dword [ebp - 0x3c4], edi
lea eax, [edi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov dword [ebp - 0x84], eax
mov edx, eax
mov eax, dword [ebp - 0x3bc]
add esp, 4
test eax, eax
je 0x447995
movzx ecx, word [eax]
mov eax, ecx
test cx, cx
je 0x447995
mov esi, dword [ebp - 0x3bc]
sub esi, edx
mov word [edx], cx
add edx, 2
movzx eax, word [edx + esi]
mov ecx, eax
test ax, ax
jne 0x447984
mov esi, 0x4c5158
mov ecx, 0x54
sub esi, edx
mov word [edx], cx
add edx, 2
movzx eax, word [edx + esi]
mov ecx, eax
test ax, ax
jne 0x4479a1
mov esi, dword [ebp - 0x3d4]
movzx eax, word [esi]
mov ecx, eax
test ax, ax
je 0x4479d3
mov word [edx], ax
lea esi, [esi + 2]
movzx eax, word [esi]
add edx, 2
test ax, ax
jne 0x4479c2
mov ecx, dword [ebp - 0x3e0]
movzx eax, word [ecx]
mov esi, eax
test ax, ax
je 0x4479f4
mov word [edx], ax
lea ecx, [ecx + 2]
movzx eax, word [ecx]
add edx, 2
test ax, ax
jne 0x4479e3
mov eax, 0x2e
mov edi, 0x4c50a4
nop
mov word [edx], ax
lea edi, [edi + 2]
movzx eax, word [edi]
lea edx, [edx + 2]
test ax, ax
jne 0x447a00
mov edi, dword [ebp - 0x3c4]
xor eax, eax
mov word [edx], ax
mov eax, dword [ebp - 0x3bc]
test eax, eax
je 0x447a2f
push eax
call fcn.00489f13
add esp, 4
mov esi, dword [ebp - 0x84]
lea eax, [ebp - 0xb8]
push eax
mov dword [ebp - 0x3bc], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0x98], edi
mov byte [ebp - 0x94], 1
mov byte [ebp - 4], 0xe
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x447a72
push eax
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x3e4]
cmp ax, 2
jne 0x448014
mov ecx, dword [ebp - 0x3c8]
mov edx, dword [ebp - 0xa8]
mov byte [ebp - 0xa0], 1
cmp ecx, edx
je 0x447ace
test ecx, ecx
je 0x447cb5
mov eax, ecx
mov esi, edx
sub eax, edx
mov dword [ebp - 0x3d4], eax
nop dword [eax]
movzx eax, word [esi + eax]
mov ecx, eax
test ax, ax
jne 0x447c5c
cmp word [esi], ax
jne 0x447c61
mov esi, dword [ebp - 0x3bc]
mov eax, 2
test edi, edi
jne 0x447aee
test esi, esi
je 0x447ae8
cmp word [esi], di
je 0x447ae8
inc edi
cmp word [esi + edi*2], 0
jne 0x447ae0
mov dword [ebp - 0x98], edi
cmp edi, eax
cmovle eax, edi
test edi, edi
je 0x447b05
sub edi, eax
xor eax, eax
mov dword [ebp - 0x98], edi
mov word [esi + edi*2], ax
mov byte [ebp - 0x94], 0
test edi, edi
jne 0x447b2e
test esi, esi
je 0x447b28
cmp word [esi], di
je 0x447b28
nop dword [eax]
inc edi
cmp word [esi + edi*2], 0
jne 0x447b20
mov dword [ebp - 0x98], edi
xor eax, eax
inc eax
cmp word [eax*2 + 0x4c5208], 0
jne 0x447b30
add eax, edi
xor ecx, ecx
mov dword [ebp - 0x84], eax
mov edx, 2
inc eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edi, 0x4c5208
mov dword [ebp - 0x3d4], eax
add esp, 4
mov edx, esi
mov ecx, eax
mov esi, 0x4f
sub edi, eax
mov word [ecx], si
add ecx, 2
movzx eax, word [ecx + edi]
mov esi, eax
test ax, ax
jne 0x447b74
mov edi, dword [ebp - 0x3bc]
test edi, edi
je 0x447bb1
movzx eax, word [edi]
mov esi, eax
test ax, ax
je 0x447bb1
nop dword [eax]
mov word [ecx], ax
lea edx, [edx + 2]
movzx eax, word [edx]
add ecx, 2
test ax, ax
jne 0x447ba0
xor eax, eax
mov word [ecx], ax
test edi, edi
je 0x447bc3
push edi
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x3d4]
mov ecx, eax
mov esi, dword [ebp - 0x3b4]
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x9c], ecx
mov ecx, dword [ebp - 0x84]
push ecx
push 0x1c2
mov dword [ebp - 0x98], ecx
lea ecx, [ebp - 0x368]
push 0xc8
push ecx
push 0
push eax
mov ecx, esi
mov byte [ebp - 0x94], 1
call fcn.00432ac0
mov edx, dword [esi + 0x138]
lea eax, [ebp - 0x370]
mov ecx, dword [esi + 0x130]
push eax
push 0
push 0
push 0x4c2038
call fcn.0041a920
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x370]
test eax, eax
je 0x447c41
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0x43a2f0
push 3
push 0x20
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 8
push eax
call fcn.0048a1a8
jmp 0x447321
cmp ax, word [esi]
je 0x447ca7
xor edx, edx
cmp dx, ax
jne 0x447c70
mov dword [ebp - 0x84], edx
jmp 0x447c82
push ecx
call fcn.0048e184
movzx eax, ax
add esp, 4
mov dword [ebp - 0x84], eax
movzx eax, word [esi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x447c92
xor eax, eax
jmp 0x447c9e
push ecx
call fcn.0048e184
add esp, 4
movzx eax, ax
cmp word [ebp - 0x84], ax
jne 0x447cb5
mov eax, dword [ebp - 0x3d4]
add esi, 2
jmp 0x447ab0
xor al, al
mov dword [ebp - 0xc8], 0
mov byte [ebp - 0xc0], al
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4c4f48], 0
jne 0x447cd0
mov dword [ebp - 0xc4], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0xc4]
xor ecx, ecx
mov dword [ebp - 0xc8], edx
test eax, eax
jle 0x447d2d
mov ax, word [ecx*2 + 0x4c4f48]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc8]
cmp ecx, eax
jl 0x447d10
xor ecx, ecx
mov word [edx + eax*2], cx
mov byte [ebp - 0xc0], 1
mov esi, dword [ebp - 0x3c8]
mov byte [ebp - 4], 0x13
test esi, esi
jne 0x447d6b
push 2
call fcn.0048a2cb
mov esi, eax
add esp, 4
xor eax, eax
mov dword [ebp - 0x3c8], esi
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x8c], eax
mov word [esi], ax
mov eax, 8
mov byte [ebp - 0x88], 1
push esi
mov word [ebp - 0xb8], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0xb0], eax
test eax, eax
jne 0x447d97
test esi, esi
jne 0x4484a8
lea eax, [ebp - 0x370]
mov byte [ebp - 4], 0x14
push eax
push 1
lea eax, [ebp - 0xc8]
push eax
mov eax, dword [ebp - 0x3b4]
push 0x4c3268
mov edx, dword [eax + 0x138]
mov ecx, dword [eax + 0x130]
call fcn.0041a920
test al, al
je 0x447e76
mov esi, dword [ebp - 0x370]
lea eax, [ebp - 0x3a0]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x3a0]
mov byte [ebp - 4], 0x15
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
test esi, esi
je 0x447e5c
mov eax, dword [esi]
lea ecx, [ebp - 0x3a0]
push 0
push 0
push ecx
push 0
push 0x4c04c0
push esi
call dword [eax + 0x10]
shr eax, 0x1f
xor al, 1
je 0x447e5c
cmp word [ebp - 0x3a0], 8
jne 0x447e43
push dword [ebp - 0x398]
call fcn.0048e09c
add esp, 4
mov byte [ebp - 4], 0x14
mov esi, eax
lea eax, [ebp - 0x3a0]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x447e6f
mov esi, dword [ebp - 0x398]
lea eax, [ebp - 0x3a0]
push eax
mov byte [ebp - 4], 0x14
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x447e6f
lea eax, [ebp - 0x3a0]
mov byte [ebp - 4], 0x14
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
xor esi, esi
test esi, esi
sete al
test al, al
mov ecx, 0x4c50e0
mov byte [ebp - 0x94], 0
mov eax, 0x4c5104
cmove ecx, eax
mov dword [ebp - 0x36c], ecx
test edi, edi
jne 0x447eb1
mov eax, dword [ebp - 0x3bc]
test eax, eax
je 0x447eab
cmp word [eax], di
je 0x447eab
inc edi
cmp word [eax + edi*2], 0
jne 0x447ea3
mov dword [ebp - 0x98], edi
xor eax, eax
nop dword [eax]
nop word [eax + eax]
lea eax, [eax + 1]
cmp word [eax*2 + 0x4c51a8], 0
jne 0x447ec0
lea edx, [edi + eax]
xor eax, eax
cmp word [ecx], ax
je 0x447ee0
inc eax
cmp word [ecx + eax*2], 0
jne 0x447ed8
lea edi, [eax + edx]
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4c5198], 0
jne 0x447ef0
add edi, eax
xor ecx, ecx
mov edx, 2
lea eax, [edi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov dword [ebp - 0x84], eax
mov edx, eax
mov eax, dword [ebp - 0x3bc]
add esp, 4
test eax, eax
je 0x447f51
movzx ecx, word [eax]
mov eax, ecx
test cx, cx
je 0x447f51
mov esi, dword [ebp - 0x3bc]
sub esi, edx
nop
mov word [edx], cx
add edx, 2
movzx eax, word [esi + edx]
mov ecx, eax
test ax, ax
jne 0x447f40
mov esi, 0x4c51a8
mov ecx, 0x54
sub esi, edx
nop dword [eax]
mov word [edx], cx
add edx, 2
movzx eax, word [esi + edx]
mov ecx, eax
test ax, ax
jne 0x447f60
mov ecx, dword [ebp - 0x36c]
movzx eax, word [ecx]
mov esi, eax
mov dword [ebp - 0x3d4], esi
mov esi, 0x4c5198
test ax, ax
je 0x447fa1
movzx eax, ax
nop
mov word [edx], ax
lea ecx, [ecx + 2]
movzx eax, word [ecx]
add edx, 2
test ax, ax
jne 0x447f90
mov eax, 0x20
mov word [edx], ax
lea esi, [esi + 2]
movzx eax, word [esi]
lea edx, [edx + 2]
test ax, ax
jne 0x447fa6
xor eax, eax
mov word [edx], ax
mov eax, dword [ebp - 0x3bc]
test eax, eax
je 0x447fcf
push eax
call fcn.00489f13
add esp, 4
mov esi, dword [ebp - 0x84]
lea eax, [ebp - 0xb8]
push eax
mov dword [ebp - 0x3bc], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0x98], edi
mov byte [ebp - 4], 0xe
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x447ace
push eax
call fcn.00489f13
add esp, 4
jmp 0x447ace
cmp ax, 1
jne 0x447ace
mov ecx, dword [ebp - 0x3c8]
mov edx, dword [ebp - 0xa8]
mov byte [ebp - 0xa0], al
cmp ecx, edx
je 0x447ace
test ecx, ecx
je 0x4480bc
mov eax, ecx
mov esi, edx
sub eax, edx
mov dword [ebp - 0x3d4], eax
nop dword [eax]
movzx eax, word [esi + eax]
mov ecx, eax
test ax, ax
jne 0x448066
cmp word [esi], ax
je 0x447ac8
jmp 0x44806b
cmp ax, word [esi]
je 0x4480b1
xor edx, edx
cmp dx, ax
jne 0x44807a
mov dword [ebp - 0x84], edx
jmp 0x44808c
push ecx
call fcn.0048e184
movzx eax, ax
add esp, 4
mov dword [ebp - 0x84], eax
movzx eax, word [esi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x44809c
xor eax, eax
jmp 0x4480a8
push ecx
call fcn.0048e184
add esp, 4
movzx eax, ax
cmp word [ebp - 0x84], ax
jne 0x4480bc
mov eax, dword [ebp - 0x3d4]
add esi, 2
jmp 0x448050
xor al, al
mov dword [ebp - 0xc8], 0
mov byte [ebp - 0xc0], al
xor eax, eax
inc eax
cmp word [eax*2 + 0x4c4f54], 0
jne 0x4480d0
mov dword [ebp - 0xc4], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0xc4]
xor ecx, ecx
mov dword [ebp - 0xc8], edx
test eax, eax
jle 0x44812d
mov ax, word [ecx*2 + 0x4c4f54]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc8]
cmp ecx, eax
jl 0x448110
xor ecx, ecx
mov word [edx + eax*2], cx
lea ecx, [ebp - 0x90]
mov byte [ebp - 0xc0], 1
call fcn.00402080
mov ecx, 0x17
mov dword [ebp - 0xb0], eax
mov word [ebp - 0xb8], cx
lea eax, [ebp - 0x370]
mov byte [ebp - 4], 0x16
push eax
push 1
lea eax, [ebp - 0xc8]
push eax
mov eax, dword [ebp - 0x3b4]
push 0x4c3268
mov edx, dword [eax + 0x138]
mov ecx, dword [eax + 0x130]
call fcn.0041a920
test al, al
je 0x448236
mov esi, dword [ebp - 0x370]
lea eax, [ebp - 0x3b0]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x3b0]
mov byte [ebp - 4], 0x17
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
test esi, esi
je 0x44821c
mov eax, dword [esi]
lea ecx, [ebp - 0x3b0]
push 0
push 0
push ecx
push 0
push 0x4c04c0
push esi
call dword [eax + 0x10]
shr eax, 0x1f
xor al, 1
je 0x44821c
cmp word [ebp - 0x3b0], 8
jne 0x448203
push dword [ebp - 0x3a8]
call fcn.0048e09c
add esp, 4
mov byte [ebp - 4], 0x16
mov esi, eax
lea eax, [ebp - 0x3b0]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x44822f
mov esi, dword [ebp - 0x3a8]
lea eax, [ebp - 0x3b0]
push eax
mov byte [ebp - 4], 0x16
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x44822f
lea eax, [ebp - 0x3b0]
mov byte [ebp - 4], 0x16
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
xor esi, esi
test esi, esi
sete al
test al, al
mov ecx, 0x4c50e0
mov byte [ebp - 0x94], 0
mov eax, 0x4c5104
cmove ecx, eax
mov dword [ebp - 0x36c], ecx
test edi, edi
jne 0x448271
mov eax, dword [ebp - 0x3bc]
test eax, eax
je 0x44826b
cmp word [eax], di
je 0x44826b
inc edi
cmp word [eax + edi*2], 0
jne 0x448263
mov dword [ebp - 0x98], edi
xor eax, eax
nop dword [eax]
nop word [eax + eax]
lea eax, [eax + 1]
cmp word [eax*2 + 0x4c51d4], 0
jne 0x448280
lea edx, [eax + edi]
xor eax, eax
cmp word [ecx], ax
je 0x4482a0
inc eax
cmp word [ecx + eax*2], 0
jne 0x448298
lea edi, [eax + edx]
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4c5198], 0
jne 0x4482b0
add edi, eax
xor ecx, ecx
mov edx, 2
lea eax, [edi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov dword [ebp - 0x84], eax
mov edx, eax
mov eax, dword [ebp - 0x3bc]
add esp, 4
test eax, eax
je 0x448311
movzx ecx, word [eax]
mov eax, ecx
test cx, cx
je 0x448311
mov esi, dword [ebp - 0x3bc]
sub esi, edx
nop
mov word [edx], cx
add edx, 2
movzx eax, word [esi + edx]
mov ecx, eax
test ax, ax
jne 0x448300
mov esi, 0x4c51d4
mov ecx, 0x54
sub esi, edx
nop dword [eax]
mov word [edx], cx
add edx, 2
movzx eax, word [esi + edx]
mov ecx, eax
test ax, ax
jne 0x448320
mov ecx, dword [ebp - 0x36c]
movzx eax, word [ecx]
mov esi, eax
mov dword [ebp - 0x3d4], esi
mov esi, 0x4c5198
test ax, ax
je 0x448361
movzx eax, ax
nop
mov word [edx], ax
lea ecx, [ecx + 2]
movzx eax, word [ecx]
add edx, 2
test ax, ax
jne 0x448350
mov eax, 0x20
mov word [edx], ax
lea esi, [esi + 2]
movzx eax, word [esi]
lea edx, [edx + 2]
test ax, ax
jne 0x448366
xor eax, eax
mov word [edx], ax
mov eax, dword [ebp - 0x3bc]
test eax, eax
je 0x44838f
push eax
call fcn.00489f13
add esp, 4
mov esi, dword [ebp - 0x84]
lea eax, [ebp - 0xb8]
push eax
mov dword [ebp - 0x3bc], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0x98], edi
mov byte [ebp - 4], 0xe
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0xc8]
test eax, eax
je 0x4483dc
push eax
call fcn.00489f13
mov ecx, dword [ebp - 0x90]
add esp, 4
mov dword [ebp - 0x3c8], ecx
jmp 0x447ace
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x3c8], eax
jmp 0x447ace
or edi, 0xffffffff
jmp 0x447326
push ecx
push 0x1c2
push 0x96
lea eax, [edx + 0x2a8]
mov ecx, edx
push eax
push 0
push 0x4c49e8
call fcn.00432ac0
xor edi, edi
mov eax, dword [ebp - 0x3ec]
test eax, eax
je 0x44842a
push eax
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x3e8]
test eax, eax
je 0x44843d
push eax
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x3bc]
test eax, eax
je 0x448450
push eax
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x3c8]
test eax, eax
je 0x448463
push eax
call fcn.00489f13
add esp, 4
mov eax, edi
jmp 0x44848a
push ecx
push 0x1c2
push 0x96
lea eax, [edi + 0x2a8]
mov ecx, edi
push eax
push 0
push 0x4c3bf8
call fcn.00432ac0
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00489f05
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x8007000e
call fcn.00489ba0
int3