Function at 0x369d7afc
Capabilities:
Get geographical location
Query or enumerate registry value

Disassembly:
mov eax, ebx
jmp 0x369d7edd
lea edi, [ebx*4 + 0x369c320c]
push dword [edi]
call sub.MSO.dll_Ordinal_295
mov dword [ebp - 0x218], eax
mov eax, dword [esi + 0x1f0]
mov ecx, 0x1f00
sub ecx, eax
push ecx
mov ecx, dword [esi + 0x1ec]
lea eax, [ecx + eax*2]
push eax
push dword [edi]
call sub.MSO.dll_Ordinal_6877
jmp 0x369d8320
push 0x214
mov eax, 0x36b57540
call fcn.369d76b0
mov esi, ecx
xor edi, edi
mov dword [ebp - 4], edi
mov eax, 0x3e00
call fcn.369d76e9
mov dword [ebp - 0x10], esp
mov ebx, esp
mov dword [ebp - 0x220], ebx
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.369d87c5
mov dword [esi + 0x1ec], ebx
mov dword [esi + 0x1f0], edi
and dword [esi + 0x194], 0xffdfffff
mov eax, dword [esi + 8]
mov ecx, 0x81d
cmp eax, ecx
ja 0x36a543ae
je 0x36a54383
mov ecx, 0x413
cmp eax, ecx
ja 0x369fc5a8
je 0x36a54383
cmp eax, 0x407
jb 0x369d7ba0
cmp eax, 0x408
jbe 0x36a54383
cmp eax, 0x409
jbe 0x369d7ba0
cmp eax, 0x40b
jbe 0x36a54383
cmp eax, 0x410
je 0x36a54383
lea ebx, [esi + 0x20]
mov eax, dword [esi]
push 8
push ebx
push 0x14
push esi
call dword [eax + 0x264]
movzx eax, byte [esi + 0x197]
and eax, 0xf
push eax
push 0x1009
mov ecx, esi
call fcn.36b2cc25
movzx eax, al
shl eax, 0x18
xor eax, dword [esi + 0x194]
and eax, 0xf000000
xor dword [esi + 0x194], eax
mov eax, dword [esi]
mov edi, 0x80
push edi
lea ecx, [ebp - 0x114]
push ecx
push 0xe
push esi
call dword [eax + 0x264]
mov ax, word [ebp - 0x114]
mov word [esi + 0x18], ax
and word [esi + 0x1a], 0
mov eax, dword [esi]
push edi
lea ecx, [ebp - 0x114]
push ecx
push 0xf
push esi
call dword [eax + 0x264]
mov ax, word [ebp - 0x114]
mov word [esi + 0x1c], ax
and word [esi + 0x1e], 0
cmp ax, 0xa0
je 0x36a54394
cmp word [esi + 0x22], 0
jne 0x369d7c6e
mov eax, dword [esi]
push esi
call dword [eax + 0x17c]
test eax, eax
jne 0x369f36b0
mov eax, dword [esi]
push esi
call dword [eax + 0x21c]
test eax, eax
jne 0x369f36ea
mov eax, dword [esi]
push esi
call dword [eax + 0x184]
test eax, eax
jne 0x369f3722
mov eax, dword [esi]
push edi
lea ecx, [ebp - 0x114]
push ecx
push 0x16
push esi
call dword [eax + 0x264]
mov ax, word [ebp - 0x114]
mov word [esi + 0x34], ax
and word [esi + 0x36], 0
mov eax, dword [esi]
push edi
lea ecx, [ebp - 0x114]
push ecx
push 0x17
push esi
call dword [eax + 0x264]
mov ax, word [ebp - 0x114]
mov word [esi + 0x38], ax
and word [esi + 0x3a], 0
cmp ax, 0xa0
je 0x36a54407
mov eax, dword [esi]
push 4
lea ecx, [esi + 0x3c]
push ecx
push 0x1d
push esi
call dword [eax + 0x264]
mov eax, dword [esi]
push 4
lea ecx, [esi + 0x44]
push ecx
push 0x1e
push esi
call dword [eax + 0x264]
mov eax, dword [esi]
push 0xa
lea ecx, [esi + 0x4c]
push ecx
push 0x28
push esi
call dword [eax + 0x264]
mov eax, dword [esi]
push 0xa
lea ecx, [esi + 0x60]
push ecx
push 0x29
push esi
call dword [eax + 0x264]
mov eax, dword [esi]
push 4
lea ecx, [esi + 0x74]
push ecx
push 0xc
push esi
call dword [eax + 0x264]
xor ebx, ebx
lea eax, [ebx + 0x44]
push eax
mov ecx, esi
call fcn.36b2cc25
mov dword [esi + ebx*4 + 0x7c], eax
mov edx, eax
xor ecx, ecx
call fcn.36b2cc25
mov dword [esi + ebx*4 + 0x114], eax
lea eax, [ebx + 0x38]
push eax
mov ecx, esi
call fcn.36b2cc25
mov dword [esi + ebx*4 + 0xac], eax
mov edx, eax
xor ecx, ecx
call fcn.36b2cc25
mov dword [esi + ebx*4 + 0x144], eax
inc ebx
cmp ebx, 0xc
jl 0x369d7d15
xor edi, edi
push dword [edi*4 + 0x369d846c]
mov ecx, esi
call fcn.36b2cc25
mov dword [esi + edi*4 + 0xdc], eax
push dword [edi*4 + 0x369d7950]
mov ecx, esi
call fcn.36b2cc25
mov dword [esi + edi*4 + 0xf8], eax
inc edi
cmp edi, 7
jl 0x369d7d5e
mov eax, dword [esi + 0x14]
or eax, 3
push 4
lea ecx, [esi + 0x174]
push ecx
push eax
mov eax, dword [esi]
push esi
call dword [eax + 0x44]
push eax
mov edi, dword [sym.imp.kernel32.dll_GetLocaleInfoW]
call edi
mov eax, dword [esi]
push 4
lea ecx, [esi + 0x17c]
push ecx
push 3
push esi
call dword [eax + 0x264]
lea ebx, [esi + 0x184]
movsx eax, word [ebx]
push eax
push 5
mov ecx, esi
call fcn.36b2cc25
mov word [ebx], ax
lea ebx, [esi + 0x186]
movsx eax, word [ebx]
push eax
push 0x71c4
mov ecx, esi
call fcn.36b2cc25
mov word [ebx], ax
lea ebx, [esi + 0x188]
movsx eax, word [ebx]
push eax
push 0x1004
mov ecx, esi
call fcn.36b2cc25
mov word [ebx], ax
mov eax, dword [esi + 0x14]
or eax, 0x1004
push 0x80
lea ecx, [ebp - 0x114]
push ecx
push eax
mov eax, dword [esi]
push esi
call dword [eax + 0x44]
push eax
call edi
test eax, eax
je 0x369d7e40
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVCR80.dll__wtoi]
pop ecx
mov word [esi + 0x18a], ax
mov eax, dword [esi + 0x194]
xor ebx, ebx
inc ebx
and eax, ebx
push eax
push 0x55
mov ecx, esi
call fcn.36b2cc25
mov ecx, dword [esi + 0x194]
xor ecx, eax
and ecx, ebx
xor dword [esi + 0x194], ecx
lea edi, [esi + 0x18c]
movzx eax, byte [edi]
push eax
push 0x19
mov ecx, esi
call fcn.36b2cc25
mov byte [edi], al
mov eax, dword [esi + 0x194]
shr eax, 1
and eax, ebx
push eax
push 0x54
mov ecx, esi
call fcn.36b2cc25
and eax, ebx
add eax, eax
mov ecx, dword [esi + 0x194]
and ecx, 0xffeffffd
or eax, ecx
mov dword [esi + 0x194], eax
lea edi, [esi + 0x191]
movzx eax, byte [edi]
push eax
push 0x1c
mov ecx, esi
call fcn.36b2cc25
mov byte [edi], al
movzx ecx, al
mov dword [ebp - 0x218], ecx
and dword [ebp - 0x218], 0xffffffe0
jne 0x369d7edb
mov eax, ebx
shl eax, cl
test ax, 0xc011
jne 0x369bf8c9
xor eax, eax
shl eax, 2
xor eax, dword [esi + 0x194]
and eax, 4
xor dword [esi + 0x194], eax
mov eax, dword [esi + 0x194]
test al, 4
jne 0x369d7f52
cmp dword [ebp - 0x218], 0
jne 0x369f36a9
mov edx, ebx
shl edx, cl
test dx, 0x2362
je 0x369f36a9
mov edi, ebx
cmp dword [ebp - 0x218], 0
jne 0x369f37c2
mov edx, ebx
shl edx, cl
test dx, 0x1326
je 0x369f37c2
mov edx, ebx
mov ecx, eax
shr ecx, 1
and ecx, ebx
je 0x369f3768
test edi, edi
je 0x369f3768
and eax, 0xffffffe7
mov dword [esi + 0x194], eax
lea edi, [esi + 0x192]
movzx eax, byte [edi]
push eax
push 0x1b
mov ecx, esi
call fcn.36b2cc25
mov byte [edi], al
lea edi, [esi + 0x193]
movzx eax, byte [edi]
push eax
push 0x1010
mov ecx, esi
call fcn.36b2cc25
mov byte [edi], al
lea edi, [esi + 0x18d]
movzx eax, byte [edi]
push eax
push 0x11
mov ecx, esi
call fcn.36b2cc25
mov byte [edi], al
lea edi, [esi + 0x18e]
movzx eax, byte [edi]
push eax
push 0x12
mov ecx, esi
call fcn.36b2cc25
mov byte [edi], al
lea edi, [esi + 0x18f]
movzx eax, byte [edi]
push eax
push 0x10
mov ecx, esi
call fcn.36b2cc25
mov byte [edi], al
lea edi, [esi + 0x190]
movzx eax, byte [edi]
push eax
push 0x18
mov ecx, esi
call fcn.36b2cc25
mov byte [edi], al
mov eax, dword [esi + 0x194]
shr eax, 5
and eax, 3
push eax
push 0x21
mov ecx, esi
call fcn.36b2cc25
and eax, 3
or eax, 4
shl eax, 5
mov ecx, dword [esi + 0x194]
and ecx, 0xffffff9f
or eax, ecx
mov dword [esi + 0x194], eax
shr eax, 8
and eax, ebx
push eax
push 0x27
mov ecx, esi
call fcn.36b2cc25
shl eax, 8
xor eax, dword [esi + 0x194]
mov edi, 0x100
and eax, edi
xor dword [esi + 0x194], eax
mov eax, dword [esi + 0x194]
shr eax, 9
and eax, ebx
push eax
push 0x26
mov ecx, esi
call fcn.36b2cc25
shl eax, 9
xor eax, dword [esi + 0x194]
and eax, 0x200
xor dword [esi + 0x194], eax
mov eax, dword [esi + 0x194]
shr eax, 0xa
and eax, ebx
push eax
push 0x23
mov ecx, esi
call fcn.36b2cc25
shl eax, 0xa
xor eax, dword [esi + 0x194]
and eax, 0x400
xor dword [esi + 0x194], eax
mov eax, dword [esi + 0x194]
shr eax, 0xb
and eax, ebx
push eax
push 0x25
mov ecx, esi
call fcn.36b2cc25
shl eax, 0xb
xor eax, dword [esi + 0x194]
and eax, 0x800
xor dword [esi + 0x194], eax
mov eax, dword [esi + 0x194]
shr eax, 0xc
and eax, ebx
push eax
push 0x1005
mov ecx, esi
call fcn.36b2cc25
shl eax, 0xc
xor eax, dword [esi + 0x194]
and eax, 0x1000
xor dword [esi + 0x194], eax
mov eax, dword [esi + 0x194]
shr eax, 0x13
not eax
and eax, ebx
push eax
push 0xd
mov ecx, esi
call fcn.36b2cc25
xor ecx, ecx
test eax, eax
sete cl
shl ecx, 0x13
xor ecx, dword [esi + 0x194]
and ecx, 0x80000
xor dword [esi + 0x194], ecx
lea eax, [esi + 0x3c]
test eax, eax
je 0x369d8134
mov ecx, dword [esi]
push 0x369d78dc
push eax
push esi
call dword [ecx + 0x230]
xor ecx, ecx
test eax, eax
sete cl
shl ecx, 0x10
xor ecx, dword [esi + 0x194]
and ecx, 0x10000
xor dword [esi + 0x194], ecx
lea eax, [esi + 0x20]
test eax, eax
je 0x369d8197
mov ecx, dword [esi]
push 0x369a55dc
lea eax, [esi + 0x20]
push eax
push esi
call dword [ecx + 0x230]
xor ecx, ecx
test eax, eax
sete cl
shl ecx, 0x11
xor ecx, dword [esi + 0x194]
and ecx, 0x20000
xor dword [esi + 0x194], ecx
mov ecx, dword [esi]
push 0x369c5ee4
lea eax, [esi + 0x20]
push eax
push esi
call dword [ecx + 0x230]
xor ecx, ecx
test eax, eax
sete cl
shl ecx, 0x12
xor ecx, dword [esi + 0x194]
and ecx, 0x40000
xor dword [esi + 0x194], ecx
mov eax, dword [esi]
push esi
call dword [eax + 0x48]
push eax
call sub.MSO.dll_Ordinal_296
mov byte [esi + 0x198], al
test dword [esi + 0x14], 0x80000000
je 0x36a5442f
mov dword [esi + 0x19c], 0x7ed
mov eax, dword [esi]
push esi
call dword [eax + 0x17c]
test eax, eax
jne 0x369fc5c4
mov eax, dword [esi]
push esi
call dword [eax + 0x214]
test eax, eax
jne 0x369fc5c4
mov eax, dword [esi]
push esi
call dword [eax + 0x21c]
test eax, eax
jne 0x369f3787
mov eax, 0xffff
mov word [esi + 0x1aa], ax
mov word [esi + 0x1a8], ax
mov word [esi + 0x1a4], ax
mov word [esi + 0x1a2], ax
mov word [esi + 0x1a0], ax
mov word [esi + 0x1a6], ax
and dword [esi + 0x1c8], 0
mov eax, dword [esi]
push esi
call dword [eax + 0x220]
test eax, eax
jne 0x36a5444e
mov eax, dword [esi]
push esi
call dword [eax + 0x198]
test eax, eax
jne 0x369f368d
push 0
push 0x1014
mov ecx, esi
call fcn.36b2cc25
dec eax
dec eax
neg eax
sbb eax, eax
inc eax
mov dword [esi + 0x1e0], eax
test dword [esi + 0x14], 0x80000000
je 0x36a54538
mov word [esi + 0x1dc], 0x5c
mov word [esi + 0x1cc], 0x7b
mov word [esi + 0x1d0], 0x7d
lea edi, [esi + 0x1d4]
mov word [edi], 0x2c
lea ebx, [esi + 0x1d8]
mov word [ebx], 0x3b
movzx eax, word [ebx]
cmp ax, word [esi + 0x18]
je 0x36a545af
cmp ax, word [esi + 0x34]
je 0x36a545af
movzx eax, word [edi]
cmp ax, word [esi + 0x18]
je 0x36a545c4
cmp ax, word [esi + 0x34]
je 0x36a545c4
xor ebx, ebx
cmp dword [esi + ebx*4 + 0x1f4], 0
jne 0x369d8356
mov ecx, dword [esi + 8]
cmp ecx, 0x409
je 0x369c31d4
mov eax, dword [esi + 0x1f0]
mov edx, 0x1f00
sub edx, eax
push edx
mov edx, dword [esi + 0x1ec]
lea eax, [edx + eax*2]
push eax
lea eax, [ebx + 0x3f49]
push eax
push ecx
call fcn.36b2cc25
mov dword [ebp - 0x218], eax
test eax, eax
je 0x369c31d4
mov eax, dword [esi + 0x1f0]
mov ecx, dword [esi + 0x1ec]
lea eax, [ecx + eax*2]
mov dword [esi + ebx*4 + 0x1f4], eax
mov ecx, dword [esi + 0x1f0]
mov eax, dword [ebp - 0x218]
add ecx, eax
mov edx, dword [esi + 0x1ec]
and word [edx + ecx*2], 0
inc eax
add dword [esi + 0x1f0], eax
inc ebx
cmp ebx, 0xf
jl 0x369d82d4
xor ebx, ebx
lea edi, [esi + ebx*4 + 0x230]
cmp dword [edi], 0
jne 0x369d83c0
mov eax, dword [esi + 0x1f0]
mov ecx, 0x1f00
sub ecx, eax
push ecx
mov ecx, dword [esi + 0x1ec]
lea eax, [ecx + eax*2]
push eax
lea eax, [ebx + 0x4273]
push eax
push dword [esi + 8]
call fcn.36b2cc25
mov ecx, dword [esi + 0x1f0]
mov edx, dword [esi + 0x1ec]
lea ecx, [edx + ecx*2]
mov dword [edi], ecx
mov ecx, dword [esi + 0x1f0]
add ecx, eax
mov edx, dword [esi + 0x1ec]
and word [edx + ecx*2], 0
inc eax
add dword [esi + 0x1f0], eax
inc ebx
cmp ebx, 2
jl 0x369d8362
call fcn.369d26d5
mov dword [ebp - 0x218], eax
xor ecx, ecx
push 4
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.36b2cc25
pop ecx
mov dword [esi + 0x23c], eax
xor ebx, ebx
cmp eax, ebx
je 0x36a545d9
cmp dword [ebp - 0x218], ebx
jle 0x369d8459
mov edi, ebx
shl edi, 2
lea eax, [ebp - 0x21c]
push eax
mov edx, dword [esi + 0x23c]
add edx, edi
mov ecx, ebx
call fcn.36b2cc25
cmp dword [esi + 0x238], 0
je 0x369d8450
mov eax, dword [esi + 0x1f0]
mov ecx, 0x1f00
sub ecx, eax
push ecx
mov ecx, dword [esi + 0x1ec]
lea eax, [ecx + eax*2]
push eax
push dword [ebp - 0x21c]
push dword [esi + 8]
call fcn.36b2cc25
test eax, eax
jg 0x36a545ee
inc ebx
cmp ebx, dword [ebp - 0x218]
jl 0x369d83fe
mov ecx, esi
call fcn.369d2730
lea esp, [ebp - 0x230]
call fcn.369d767b
ret
test dword [esi + 0x14], 0x80000000
je 0x36a54519
mov dword [esi + 0x1e4], 0xa0c
jmp 0x369d824b
xor edi, edi
jmp 0x369d7f17
movzx eax, word [ebx]
cmp ax, 0x5c
je 0x369f36c3
cmp ax, 0xa5
jne 0x36a5439f
mov word [ebx], 0xa5
mov word [esi + 0x30], 0x5c
mov word [esi + 0x32], 0xffe5
jmp 0x369d7c6e
movzx eax, word [ebx]
cmp ax, 0x5c
je 0x369f3703
cmp ax, 0xa5
je 0x369f3703
cmp ax, 0x20a9
jne 0x369d7c6e
mov word [ebx], 0x20a9
mov word [esi + 0x30], 0x5c
mov word [esi + 0x32], 0xa5
jmp 0x369d7c6e
movzx eax, word [ebx]
cmp ax, 0xa5
je 0x369f3735
cmp ax, 0xffe5
jne 0x369d7c6e
mov word [ebx], 0xffe5
mov word [esi + 0x30], 0xa5
and word [esi + 0x32], 0
jmp 0x369d7c6e
test ecx, ecx
je 0x36a54412
test edx, edx
je 0x369f37c9
test ecx, ecx
je 0x36a54422
and eax, 0xffffffef
or eax, 8
jmp 0x369d7f4c
mov word [esi + 0x1a0], 0xb144
mov word [esi + 0x1a2], 0xc6d4
mov word [esi + 0x1a4], 0xc77c
mov word [esi + 0x1a6], 0xc2dc
mov word [esi + 0x1a8], 0xbd84
mov word [esi + 0x1aa], 0xcd08
jmp 0x369d8222
xor edx, edx
jmp 0x369d7f35
and eax, 0xfffffff7
or eax, 0x10
jmp 0x369d7f4c
sub eax, 0x80c
je 0x36a54383
sub eax, 7
je 0x36a54383
sub eax, 3
jmp 0x369d7b9a
mov word [esi + 0x1a0], 0x5e74
mov word [esi + 0x1a2], 0x6708
mov word [esi + 0x1a4], 0x65e5
mov eax, dword [esi]
push esi
call dword [eax + 0x210]
neg eax
sbb eax, eax
and eax, 0xffffffb4
add eax, 0x6642
mov word [esi + 0x1a8], 0x5206
mov word [esi + 0x1aa], 0x79d2
jmp 0x369d821b
lea ebx, [esi + 0x20]
mov word [ebx], 0x20ac
mov word [esi + 0x22], di
jmp 0x369d7bb1
mov word [esi + 0x1c], 0x20
jmp 0x369d7c34
cmp ax, 0xffe5
je 0x369f36c3
jmp 0x369d7c6e
cmp eax, 0xc07
je 0x36a54383
cmp eax, 0xc0a
je 0x36a54383
cmp eax, 0x1007
je 0x36a54383
cmp eax, 0x140c
je 0x36a54383
cmp eax, 0x1809
je 0x36a54383
cmp eax, 0x180c
je 0x36a54383
cmp eax, 0xfffffbe1
jne 0x369d7ba0
lea ebx, [esi + 0x20]
mov word [ebx], 0x59
mov word [esi + 0x22], 0x54
mov word [esi + 0x24], 0x4c
mov word [esi + 0x26], di
mov dword [esi + 8], 0x41f
jmp 0x369d7bb1
mov word [esi + 0x38], 0x20
jmp 0x369d7cbe
test edx, edx
jne 0x369d7f49
test ecx, ecx
jne 0x369f3770
test edi, edi
je 0x369f37c9
jmp 0x369f377c
push 0x7ed
mov edx, 0x36a76e48
mov ecx, 0x36a54680
call fcn.36b2cc25
mov dword [esi + 0x19c], eax
jmp 0x369d81c0
mov dword [ebp - 0x218], edi
lea eax, [ebp - 0x21c]
push eax
push 0x20019
push 0
push 0x36a54648
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x36a544b6
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x214]
push eax
push 0
push 0
mov edi, 0x36a5462c
push edi
push dword [ebp - 0x21c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x36a544b6
push ebx
push edi
lea eax, [ebp - 0x214]
push eax
call sub.MSO.dll_Ordinal_639
test eax, eax
je 0x36a544b6
mov dword [esi + 0x1c8], ebx
xor edi, edi
mov eax, dword [edi*4 + 0x369d7950]
or eax, dword [esi + 0x14]
mov ecx, dword [esi + 0x1f0]
mov edx, 0x1f00
sub edx, ecx
push edx
mov edx, dword [esi + 0x1ec]
lea ecx, [edx + ecx*2]
push ecx
push eax
push 0x401
call dword [sym.imp.kernel32.dll_GetLocaleInfoW]
test eax, eax
je 0x36a5450d
mov eax, dword [esi + 0x1f0]
mov ecx, dword [esi + 0x1ec]
lea ebx, [ecx + eax*2]
push ebx
call sub.MSO.dll_Ordinal_295
inc eax
add dword [esi + 0x1f0], eax
mov dword [esi + edi*4 + 0x1ac], ebx
inc edi
cmp edi, 7
jge 0x369d823a
jmp 0x36a544b8
push 0xa0c
mov edx, 0x36a76efc
mov ecx, 0x36a54680
call fcn.36b2cc25
mov dword [esi + 0x1e4], eax
jmp 0x369d824b
push 2
pop ebx
push ebx
lea eax, [esi + 0x1dc]
push eax
push 0x5c
push 0x71bf
mov ecx, esi
call fcn.36b2cc25
push ebx
lea eax, [esi + 0x1cc]
push eax
push 0x7b
push 0x71c0
mov ecx, esi
call fcn.36b2cc25
push ebx
lea eax, [esi + 0x1d0]
push eax
push 0x7d
push 0x71c1
mov ecx, esi
call fcn.36b2cc25
lea edi, [esi + 0x1d4]
push ebx
push edi
push 0x2c
push 0x71c2
mov ecx, esi
call fcn.36b2cc25
lea ebx, [esi + 0x1d8]
push 2
push ebx
push 0x3b
push 0x71c3
mov ecx, esi
call fcn.36b2cc25
jmp 0x369d82a4
mov eax, dword [esi]
movzx ecx, word [edi]
push ecx
push esi
call dword [eax + 0x27c]
mov word [ebx], ax
jmp 0x369d82bb
mov eax, dword [esi]
movzx ecx, word [ebx]
push ecx
push esi
call dword [eax + 0x27c]
mov word [edi], ax
jmp 0x369d82d2
push ebx
push 0x30303030
call sub.MSO.dll_Ordinal_6848
mov eax, 0x8007000e
jmp 0x369d8460
mov ecx, dword [esi + 0x1f0]
mov edx, dword [esi + 0x1ec]
lea ecx, [edx + ecx*2]
mov edx, dword [esi + 0x23c]
mov dword [edi + edx], ecx
mov ecx, dword [esi + 0x1f0]
add ecx, eax
mov edx, dword [esi + 0x1ec]
and word [edx + ecx*2], 0
inc eax
add dword [esi + 0x1f0], eax
jmp 0x369d8450