Function at 0x424f71
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
push 8
call fcn.004485a4
add esp, 4
mov dword [ebp - 4], eax
mov edi, eax
mov esi, 0x4e404e
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
push 8
call fcn.004485a4
add esp, 4
mov dword [ebp - 0x34], eax
mov edi, eax
mov esi, 0x4e404e
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x38], 0
push 8
call fcn.004485a4
add esp, 4
mov dword [ebp - 0x3c], eax
mov edi, eax
mov esi, 0x4e404e
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x40], 0
push str.variable.ini
push dword [0x553df0]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x44], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x425054
mov eax, 0x4e4044
push eax
push 1
mov ebx, 0x44cc30
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x42507a
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 4]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x42509c
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x425098
imul eax, dword [ebx]
jmp 0x42508d
mov ecx, eax
test ecx, ecx
je 0x4250bb
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4250b4
push ebx
push eax
call fcn.004485aa
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4250a2
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov ebx, dword [ebp - 4]
call fcn.00401097
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x427139
push str.data.ini
push dword [0x553df0]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x42510b
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 8], eax
push VariantClear
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x425122
mov eax, 0x4e4044
push eax
push 1
mov ebx, 0x44ae90
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x42514c
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push str.SHAREG.db
push dword [0x553df0]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x44], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x42517e
mov eax, 0x4e4044
push eax
push 1
mov ebx, 0x44ae90
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4251a4
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [0x553f38]
test ebx, ebx
je 0x4251bb
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [0x553f38], eax
mov eax, 0x4e404e
xor ecx, ecx
test eax, eax
je 0x4251cf
mov ecx, dword [eax + 4]
push ecx
add eax, 8
push eax
mov eax, dword [0x553f38]
xor ebx, ebx
test eax, eax
je 0x4251e2
mov ebx, dword [eax + 4]
add eax, 8
push eax
cmp ebx, ecx
mov eax, 1
jne 0x4251f9
dec eax
test ecx, ecx
je 0x4251f9
call fcn.00402a7a
add esp, 0xc
test eax, eax
je 0x4252f5
mov eax, 0x5271e7
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
push 0x553f38
call fcn.004272bc
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x42522d
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x425241
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov eax, 0x4e404e
xor ecx, ecx
test eax, eax
je 0x425253
mov ecx, dword [eax + 4]
push ecx
add eax, 8
push eax
mov eax, dword [ebp - 0x10]
xor ebx, ebx
test eax, eax
je 0x425264
mov ebx, dword [eax + 4]
add eax, 8
push eax
cmp ebx, ecx
mov eax, 1
jne 0x42527b
dec eax
test ecx, ecx
je 0x42527b
call fcn.00402a7a
add esp, 0xc
test eax, eax
je 0x4252bf
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4252a0
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.004485a4
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [0x553f38]
test ebx, ebx
je 0x4252b4
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [0x553f38], eax
jmp 0x4252f5
mov eax, 0x4e404e
test eax, eax
je 0x4252db
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.004485a4
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [0x553f38]
test ebx, ebx
je 0x4252ef
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [0x553f38], eax
push str.SHADLL_s.ini
push dword [0x553df0]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x44], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x425323
mov eax, 0x4e4044
push eax
push 1
mov ebx, 0x44ae90
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x425349
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x42535d
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push str.var_data.ini
push dword [0x553df0]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x44], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x42538f
mov eax, 0x4e4044
push eax
push 1
mov ebx, 0x44ae90
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4253b5
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4253c9
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push str.SHADLL_s.ini
push dword [0x553df0]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x44], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x4253fb
mov eax, 0x4e4044
push eax
push 1
mov ebx, 0x44ae90
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x425421
push ebx
call fcn.004485aa
add esp, 4
push VariantClear
push 0
push 0x52720a
push 1
mov ebx, 0x44a060
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x4c], eax
push str.ximi
push dword [0x553df0]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x50], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x425470
mov eax, 0x4e4044
push eax
push 1
mov ebx, 0x44ae90
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x425496
push ebx
call fcn.004485aa
add esp, 4
push VariantClear
push 0
push 0x52720a
push 1
mov ebx, 0x44a060
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x58], eax
push str.var_data.ini
push dword [0x553df0]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x5c], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x5c]
test eax, eax
jne 0x4254e5
mov eax, 0x4e4044
push eax
push 1
mov ebx, 0x44ae90
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x42550b
push ebx
call fcn.004485aa
add esp, 4
push VariantClear
push 0
push 0x52720a
push 1
mov ebx, 0x44a060
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x64], eax
push str.variable.ini
push dword [0x553df0]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x68], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x68]
test eax, eax
jne 0x42555a
mov eax, 0x4e4044
push eax
push 1
mov ebx, 0x44ae90
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x425580
push ebx
call fcn.004485aa
add esp, 4
push VariantClear
push 0
push 0x52720a
push 1
mov ebx, 0x44a060
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x70], eax
push dword [ebp - 0x70]
push dword [ebp - 0x6c]
push dword [ebp - 0x64]
push dword [ebp - 0x60]
push dword [ebp - 0x58]
push dword [ebp - 0x54]
push dword [ebp - 0x4c]
push dword [ebp - 0x48]
mov ecx, 8
call fcn.00403d14
add esp, 0x20
mov dword [ebp - 0x74], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4255d9
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4255e9
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4255f9
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x425609
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x425619
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x425629
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x425639
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x70]
test ebx, ebx
je 0x425649
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x74]
push eax
mov ebx, dword [0x553f70]
test ebx, ebx
je 0x425660
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [0x553f70], eax
push str.GUItext.ini
push dword [0x553df0]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x44], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x425694
mov eax, 0x4e4044
push eax
push 1
mov ebx, 0x44ae90
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4256ba
push ebx
call fcn.004485aa
add esp, 4
mov eax, 0x527224
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.004272bc
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4256e2
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4256f2
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x425706
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
push 0x52722d
push dword [0x553df0]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x44], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x425738
mov eax, 0x4e4044
push eax
push 1
mov ebx, 0x44ae90
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x42575e
push ebx
call fcn.004485aa
add esp, 4
mov eax, 0x527239
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.004272bc
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x425786
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x425796
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4257aa
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 4]
call fcn.00401097
xor ecx, ecx
push eax
lea eax, [ebp - 0x24]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x426ee1
push str.variable.ini
push dword [0x553df0]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push 0
push 0
push 0
push VariantClear
push 0
push 0x527242
push VariantClear
push 0
mov ebx, dword [ebp - 0x48]
mov eax, dword [ebx]
test eax, eax
jne 0x425828
mov eax, 0x4e4044
push eax
push VariantClear
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x42583c
mov eax, 0x4e4044
push eax
push 4
mov ebx, 0x44caf0
call fcn.004485bc
add esp, 0x34
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x425862
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x425876
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
mov eax, 0x4e404e
test eax, eax
je 0x425896
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.004485a4
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4258a7
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push str._ProductName_
mov ebx, dword [ebp - 0x44]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x425920
mov eax, 0x5270f1
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
call fcn.004029e7
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x425903
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x425917
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push str._Version_
mov ebx, dword [ebp - 0x4c]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x425995
mov eax, 0x4e49c3
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
call fcn.004029e7
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x425978
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x42598c
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push str._CompanyCopyright_
mov ebx, dword [ebp - 0x4c]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x425a0a
mov eax, 0x4e4065
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
call fcn.004029e7
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4259ed
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x425a01
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push str._MainExe_
mov ebx, dword [ebp - 0x4c]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x425a7f
mov eax, 0x52727c
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
call fcn.004029e7
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x425a62
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x425a76
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push str._ProgramFiles_
mov ebx, dword [ebp - 0x4c]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x425b58
push VariantClear
push 0
push str.ProgramFiles
push 1
mov ebx, 0x449010
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x44], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
push 0x80000301
push 0
push 1
mov ebx, 6
call fcn.00401004
push VariantClear
push 0
push str.__x86_
push VariantClear
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x425b15
mov eax, 0x4e4044
push eax
push 6
mov ebx, 0x449ce0
call fcn.004485bc
add esp, 0x4c
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x425b3b
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x425b4f
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push str._ProgramFiles_x86_
mov ebx, dword [ebp - 0x4c]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x425bca
push VariantClear
push 0
push str.ProgramFiles
push 1
mov ebx, 0x449010
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x425bc1
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push str._TempDir_
mov ebx, dword [ebp - 0x48]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x425c5d
push 0x80000301
push 0
push 0xb
push 1
mov eax, 1
mov ebx, 0x498870
call fcn.004485d4
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
call fcn.004035e0
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x425c40
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x425c54
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push str._WindowsDir_
mov ebx, dword [ebp - 0x4c]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x425cf0
push 0x80000301
push 0
push 9
push 1
mov eax, 1
mov ebx, 0x498870
call fcn.004485d4
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
call fcn.004035e0
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x425cd3
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x425ce7
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push str._System32_
mov ebx, dword [ebp - 0x4c]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x425dd8
push 0x80000301
push 0
push 9
push 1
mov eax, 1
mov ebx, 0x498870
call fcn.004485d4
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
call fcn.004035e0
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x425d66
push ebx
call fcn.004485aa
add esp, 4
call fcn.0040834f
test eax, eax
je 0x425d7d
mov eax, str.Sysnative
jmp 0x425d82
mov eax, str.System32
mov dword [ebp - 0x50], eax
push dword [ebp - 0x50]
push dword [ebp - 0x48]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x425dab
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x425dbb
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x425dcf
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x58], ebx
push str._SysWoW64_
mov ebx, dword [ebp - 0x58]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x425e93
push 0x80000301
push 0
push 9
push 1
mov eax, 1
mov ebx, 0x498870
call fcn.004485d4
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
call fcn.004035e0
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x425e4e
push ebx
call fcn.004485aa
add esp, 4
push str.SysWoW64
push dword [ebp - 0x48]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x425e76
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x425e8a
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x50], ebx
push str._FONTS_
mov ebx, dword [ebp - 0x50]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x425f4e
push 0x80000301
push 0
push 9
push 1
mov eax, 1
mov ebx, 0x498870
call fcn.004485d4
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
call fcn.004035e0
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x425f09
push ebx
call fcn.004485aa
add esp, 4
push str.Fonts
push dword [ebp - 0x48]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x425f31
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x425f45
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x50], ebx
push str._MenuDir_
mov ebx, dword [ebp - 0x50]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x425fe1
push 0x80000301
push 0
push 6
push 1
mov eax, 1
mov ebx, 0x498870
call fcn.004485d4
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
call fcn.004035e0
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x425fc4
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x425fd8
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push str._InstallPath_
mov ebx, dword [ebp - 0x4c]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x426034
mov eax, str._InstallPath_
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x42602b
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push str._Desktop_
mov ebx, dword [ebp - 0x44]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x4260c7
push 0x80000301
push 0
push 3
push 1
mov eax, 1
mov ebx, 0x498870
call fcn.004485d4
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
call fcn.004035e0
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4260aa
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4260be
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push str._MyDocument_
mov ebx, dword [ebp - 0x4c]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x42615d
mov eax, str.SoftwareMicrosoftWindowsCurrentVersionExplorerShell_FoldersPersonal
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
push 3
call fcn.00427471
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x426124
push ebx
call fcn.004485aa
add esp, 4
lea eax, [ebp - 0x48]
push eax
call fcn.004035e0
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x426140
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x426154
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x50], ebx
push str._UserName_
mov ebx, dword [ebp - 0x50]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x4261b6
call fcn.0042782a
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4261ad
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push str._RunPath_
mov ebx, dword [ebp - 0x48]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x42621c
push 0
mov ebx, 0x448c40
call fcn.004485bc
add esp, 4
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x426213
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push str._AC_
mov ebx, dword [ebp - 0x48]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x42626f
mov eax, str._AC_
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x426266
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push str._QuickLaunch_
mov ebx, dword [ebp - 0x44]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x426397
fild dword [ebp - 0x30]
fstp qword [ebp - 0x48]
lea eax, [ebp - 0x48]
push eax
call fcn.004142f2
mov ebx, eax
test ebx, ebx
je 0x4262c1
push ebx
call fcn.004485aa
add esp, 4
cmp dword [ebp - 0x30], 6
jge 0x426331
push VariantClear
push 0
push str.userprofile
push 1
mov ebx, 0x449010
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x44], eax
push str.Application_DataMicrosoftInternet_ExplorerQuick_Launch
push dword [ebp - 0x44]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x426314
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x426328
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426392
push VariantClear
push 0
push str.userprofile
push 1
mov ebx, 0x449010
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x44], eax
push str.AppDataRoamingMicrosoftInternet_ExplorerQuick_Launch
push dword [ebp - 0x44]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x42637a
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x42638e
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push str._UserProfile_
mov ebx, dword [ebp - 0x44]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x426409
push VariantClear
push 0
push str.userprofile
push 1
mov ebx, 0x449010
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x426400
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push str._AppData_
mov ebx, dword [ebp - 0x48]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x42649c
push 0x80000301
push 0
push 8
push 1
mov eax, 1
mov ebx, 0x498870
call fcn.004485d4
add esp, 0x10
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
call fcn.004035e0
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x42647f
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x426493
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
push str._LastInPath_
mov ebx, dword [ebp - 0x4c]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x42655f
mov eax, 0x5270f1
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
call fcn.004029e7
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4264f4
push ebx
call fcn.004485aa
add esp, 4
push str.InstallLocation
push dword [ebp - 0x48]
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall_
mov ecx, 3
call fcn.00401df0
add esp, 0xc
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x426521
push ebx
call fcn.004485aa
add esp, 4
lea eax, [ebp - 0x4c]
push eax
push 4
call fcn.00427471
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x426542
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x426556
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x54], ebx
push str._ET_
mov ebx, dword [ebp - 0x54]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x4265b2
mov eax, str._ET_
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4265a9
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
jmp 0x426663
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push str._SysDrive_
mov ebx, dword [ebp - 0x44]
push dword [ebx]
call fcn.00401e4c
add esp, 8
cmp eax, 0
jne 0x426663
push VariantClear
push 0
push str.SystemDrive
push 1
mov ebx, 0x449010
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x44], eax
push 0x4e413d
push dword [ebp - 0x44]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x42662f
push ebx
call fcn.004485aa
add esp, 4
lea eax, [ebp - 0x48]
push eax
call fcn.004035e0
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x42664b
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x42665f
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x426676
mov eax, 0x4e4044
push eax
push 1
mov ebx, 0x44a060
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4266a0
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
push 0x80000301
push 0
push 0xa
push VariantClear
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x4266c3
mov eax, 0x4e4044
push eax
push 2
mov ebx, 0x4490b0
call fcn.004485bc
add esp, 0x1c
mov dword [ebp - 0x44], eax
push 0x5273e4
push dword [ebp - 0x44]
call fcn.00401e4c
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x426707
push ebx
call fcn.004485aa
add esp, 4
cmp dword [ebp - 0x48], 0
je 0x4268e0
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.004278d3
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x4268e0
mov ebx, dword [ebp - 0x34]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov ebx, dword [ebp - 0x34]
call fcn.00401097
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push 1
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 0x48]
lea eax, [ebp - 0x18]
push eax
call fcn.004173d3
mov eax, 0x4e4842
xor ecx, ecx
test eax, eax
je 0x426769
mov ecx, dword [eax + 4]
push ecx
add eax, 8
push eax
mov eax, dword [ebp - 0x38]
xor ebx, ebx
test eax, eax
je 0x42677a
mov ebx, dword [eax + 4]
add eax, 8
push eax
cmp ebx, ecx
mov eax, 1
jne 0x426791
dec eax
test ecx, ecx
je 0x426791
call fcn.00402a7a
add esp, 0xc
test eax, eax
je 0x426828
lea eax, [ebp - 0x3c]
push eax
push 4
mov eax, 2
call fcn.0044859e
add esp, 8
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x3c]
mov dword [ebp - 0x48], ebx
call fcn.00401077
mov dword [ebp - 0x4c], ecx
mov edi, dword [ebp - 0x48]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4267df
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x4c]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x48]
call fcn.004485b0
add esp, 8
mov dword [ebp - 0x3c], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x4c]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x44]
push edi
test eax, eax
je 0x426820
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.004485a4
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
jmp 0x4268e0
mov eax, 0x4e404e
test eax, eax
je 0x426844
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.004485a4
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x426855
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x3c]
push eax
push 4
mov eax, 2
call fcn.0044859e
add esp, 8
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x3c]
mov dword [ebp - 0x48], ebx
call fcn.00401077
mov dword [ebp - 0x4c], ecx
mov edi, dword [ebp - 0x48]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x42689c
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x4c]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x48]
call fcn.004485b0
add esp, 8
mov dword [ebp - 0x3c], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x4c]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x44]
push edi
test eax, eax
je 0x4268dd
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.004485a4
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
jne 0x42690e
mov eax, 0x4e4044
push eax
push 1
mov ebx, 0x44a060
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x48], eax
mov ebx, 6
call fcn.00401004
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x426941
mov eax, 0x4e404e
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x426955
mov eax, 0x4e404e
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x426969
mov eax, 0x4e404e
push eax
push 5
mov ebx, 0x44a640
call fcn.004485bc
add esp, 0x40
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x42698f
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4269a3
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push VariantClear
push 0
push 0x4e413d
push 1
mov ebx, 0x44a060
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x44], eax
push VariantClear
push 0
push 0x4e4776
push 1
mov ebx, 0x44a060
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x48], eax
mov ebx, 6
call fcn.00401004
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x426a06
mov eax, 0x4e404e
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x426a1a
mov eax, 0x4e404e
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x426a2e
mov eax, 0x4e404e
push eax
push 5
mov ebx, 0x44a640
call fcn.004485bc
add esp, 0x40
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x426a54
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x426a64
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x426a78
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
test eax, eax
je 0x426a88
mov ecx, dword [eax + 4]
push ecx
add eax, 8
push eax
mov eax, dword [ebp - 0x40]
xor ebx, ebx
test eax, eax
je 0x426a99
mov ebx, dword [eax + 4]
add eax, 8
push eax
cmp ebx, ecx
mov eax, 1
jne 0x426ab0
dec eax
test ecx, ecx
je 0x426ab0
call fcn.00402a7a
add esp, 0xc
test eax, eax
je 0x426bb6
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push 0x4e426d
mov ebx, dword [ebp - 0x44]
push dword [ebx]
push str.SXG_
mov ecx, 3
call fcn.00401df0
add esp, 0xc
mov dword [ebp - 0x48], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x426b06
mov eax, 0x4e4044
push eax
push 1
mov ebx, 0x44a060
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x426b2c
push ebx
call fcn.004485aa
add esp, 4
mov ebx, 6
call fcn.00401004
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x426b49
mov eax, 0x4e404e
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x426b5d
mov eax, 0x4e404e
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [0x553f38]
test eax, eax
jne 0x426b73
mov eax, 0x4e404e
push eax
push 5
mov ebx, 0x44a640
call fcn.004485bc
add esp, 0x40
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x426b99
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [0x553f38]
test ebx, ebx
je 0x426bb0
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [0x553f38], eax
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
jne 0x426be4
mov eax, 0x4e4044
push eax
push 1
mov ebx, 0x44a060
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x48], eax
mov ebx, 6
call fcn.00401004
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x426c17
mov eax, 0x4e404e
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x426c2b
mov eax, 0x4e404e
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [0x553f38]
test eax, eax
jne 0x426c41
mov eax, 0x4e404e
push eax
push 5
mov ebx, 0x44a640
call fcn.004485bc
add esp, 0x40
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x426c67
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [0x553f38]
test ebx, ebx
je 0x426c7e
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [0x553f38], eax
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
jne 0x426cb2
mov eax, 0x4e4044
push eax
push 1
mov ebx, 0x44a060
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x48], eax
mov ebx, 6
call fcn.00401004
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x426ce5
mov eax, 0x4e404e
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x426cf9
mov eax, 0x4e404e
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x426d0d
mov eax, 0x4e404e
push eax
push 5
mov ebx, 0x44a640
call fcn.004485bc
add esp, 0x40
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x426d33
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x426d47
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
jne 0x426d79
mov eax, 0x4e4044
push eax
push 1
mov ebx, 0x44a060
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x48], eax
mov ebx, 6
call fcn.00401004
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x426dac
mov eax, 0x4e404e
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x426dc0
mov eax, 0x4e404e
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x426dd4
mov eax, 0x4e404e
push eax
push 5
mov ebx, 0x44a640
call fcn.004485bc
add esp, 0x40
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x426dfa
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x426e0e
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 4]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x24]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x44], ebx
push VariantClear
push 0
mov ebx, dword [ebp - 0x44]
mov eax, dword [ebx]
test eax, eax
jne 0x426e40
mov eax, 0x4e4044
push eax
push 1
mov ebx, 0x44a060
call fcn.004485bc
add esp, 0x10
mov dword [ebp - 0x48], eax
mov ebx, 6
call fcn.00401004
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x426e73
mov eax, 0x4e404e
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x426e87
mov eax, 0x4e404e
push eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x426e9b
mov eax, 0x4e404e
push eax
push 5
mov ebx, 0x44a640
call fcn.004485bc
add esp, 0x40
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x426ec1
push ebx
call fcn.004485aa
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x426ed5
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
pop eax
pop ebx
pop ecx
jmp 0x4257bf
add esp, 0xc
push 1
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.00427a10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x426f0e
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 1
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x553f38
call fcn.00427a10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [0x553f38]
test ebx, ebx
je 0x426f40
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [0x553f38], eax
push 1
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00427a10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x426f70
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push 1
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00427a10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x426f9e
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
push 1
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00427a10
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x426fcc
push ebx
call fcn.004485aa
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x426fe3
mov eax, 0x4e404e
push eax
push VariantClear
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x426ff7
mov eax, 0x4e4044
push eax
push 2
mov ebx, 0x44af00
call fcn.004485bc
add esp, 0x1c
push str.SHADLL_s.ini
push dword [0x553df0]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x44], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x427038
mov eax, 0x4e404e
push eax
push VariantClear
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x42704c
mov eax, 0x4e4044
push eax
push 2
mov ebx, 0x44af00
call fcn.004485bc
add esp, 0x1c
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x42706f
push ebx
call fcn.004485aa
add esp, 4
push str.GUItext.ini
push dword [0x553df0]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x44], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x42709d
mov eax, 0x4e404e
push eax
push VariantClear
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x4270b1
mov eax, 0x4e4044
push eax
push 2
mov ebx, 0x44af00
call fcn.004485bc
add esp, 0x1c
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4270d4
push ebx
call fcn.004485aa
add esp, 4
push str.Except.ini
push dword [0x553df0]
mov ecx, 2
call fcn.00401df0
add esp, 8
mov dword [ebp - 0x44], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x427102
mov eax, 0x4e404e
push eax
push VariantClear
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x427116
mov eax, 0x4e4044
push eax
push 2
mov ebx, 0x44af00
call fcn.004485bc
add esp, 0x1c
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x427139
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 4]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x427157
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x427153
imul eax, dword [ebx]
jmp 0x427148
mov ecx, eax
test ecx, ecx
je 0x427176
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x42716f
push ebx
push eax
call fcn.004485aa
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x42715d
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x42718e
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x42719e
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4271ae
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4271be
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4271ce
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4271de
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4271ee
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4271fe
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x42720e
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x34]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x42722c
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x427228
imul eax, dword [ebx]
jmp 0x42721d
mov ecx, eax
test ecx, ecx
je 0x42724b
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x427244
push ebx
push eax
call fcn.004485aa
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x427232
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x427263
push ebx
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x3c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x427281
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x42727d
imul eax, dword [ebx]
jmp 0x427272
mov ecx, eax
test ecx, ecx
je 0x4272a0
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x427299
push ebx
push eax
call fcn.004485aa
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x427287
call fcn.004485aa
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4272b8
push ebx
call fcn.004485aa
add esp, 4
mov esp, ebp
pop ebp
ret