Function at 0x42509a
Capabilities:
Shutdown system

Disassembly:
push 0x904
mov eax, 0x449b95
call fcn.0042f42b
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
xor ebx, ebx
push ebx
push ebx
push 1
push ebx
mov dword [ebp - 0x8e0], eax
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
lea ecx, [ebp - 0x87c]
call fcn.004239a6
lea ecx, [ebp - 0x3a8]
mov dword [ebp - 4], ebx
call fcn.0042826a
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 1
call fcn.00428c5f
lea ecx, [ebp - 0x68c]
mov byte [ebp - 4], 2
call fcn.00429356
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 3
call fcn.0041f627
push 7
pop esi
xor eax, eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], ebx
mov word [ebp - 0x4c], ax
mov dword [ebp - 0x2c0], esi
mov dword [ebp - 0x2c4], ebx
mov word [ebp - 0x2d4], ax
mov dword [ebp - 0x1b4], esi
mov dword [ebp - 0x1b8], ebx
mov word [ebp - 0x1c8], ax
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x58], ebx
mov word [ebp - 0x68], ax
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x90], ebx
mov word [ebp - 0xa0], ax
mov dword [ebp - 0x17c], esi
mov dword [ebp - 0x180], ebx
mov word [ebp - 0x190], ax
mov dword [ebp - 0x198], esi
mov dword [ebp - 0x19c], ebx
mov word [ebp - 0x1ac], ax
mov dword [ebp - 0xfc], esi
mov dword [ebp - 0x100], ebx
mov word [ebp - 0x110], ax
mov dword [ebp - 0xe0], esi
mov dword [ebp - 0xe4], ebx
mov word [ebp - 0xf4], ax
push 0x405f24
lea ecx, [ebp - 0x880]
mov byte [ebp - 4], 0xd
call fcn.004236f6
mov byte [ebp - 0x888], bl
mov byte [ebp - 0x8d2], bl
mov byte [ebp - 0x8d4], 1
mov byte [ebp - 0x8d3], bl
mov byte [ebp - 0x8d5], bl
mov byte [ebp - 0x884], bl
mov dword [ebp - 0x8dc], ebx
mov dword [ebp - 0x898], ebx
mov dword [ebp - 0x894], ebx
mov dword [ebp - 0x890], ebx
mov dword [ebp - 0x89c], 0x404d18
xor eax, eax
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x30], ax
push ebx
mov byte [ebp - 4], 0x11
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [ebp - 0x89c]
push eax
call fcn.00421a4b
pop ecx
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x888]
push eax
push edi
call fcn.00424509
add esp, 0x10
cmp al, bl
je 0x425363
mov eax, dword [0x450100]
mov esi, eax
mov eax, dword [eax]
cmp eax, 0xffffffff
je 0x425260
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [esi], 0xffffffff
call dword [sym.imp.ole32.dll_CoUninitialize]
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x30]
call fcn.0040aa24
lea ecx, [ebp - 0x89c]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x89c], 0x404d18
call fcn.004158f9
cmp dword [ebp - 0x880], ebx
je 0x4252a3
push dword [ebp - 0x880]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebx
push esi
lea ecx, [ebp - 0xf4]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x110]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x1ac]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x190]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0xa0]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x68]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x1c8]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x2d4]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x4c]
call fcn.0040aa24
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 3
call fcn.0041f58e
lea ecx, [ebp - 0x68c]
mov byte [ebp - 4], 2
call fcn.00429407
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 1
call fcn.00428cfa
lea ecx, [ebp - 0x3a8]
mov byte [ebp - 4], bl
call fcn.004282a4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x87c]
call fcn.00423a22
xor eax, eax
jmp 0x427cd4
lea eax, [ebp - 0x68]
push eax
cmp byte [ebp - 0x888], bl
jne 0x425376
call fcn.0042bda0
jmp 0x42537b
call fcn.0042c83e
mov eax, dword [ebp - 0x68]
pop ecx
push 8
pop edi
cmp dword [ebp - 0x54], edi
jae 0x42538a
lea eax, [ebp - 0x68]
push eax
call fcn.0042c9db
mov eax, dword [ebp - 0x68]
pop ecx
cmp dword [ebp - 0x54], edi
jae 0x42539c
lea eax, [ebp - 0x68]
push ebx
push 0x405f0c
push eax
lea eax, [ebp - 0xa0]
push ebx
push eax
call fcn.0042bf95
mov eax, dword [ebp - 0xa0]
add esp, 0x14
cmp dword [ebp - 0x8c], edi
jae 0x4253c7
lea eax, [ebp - 0xa0]
push dword [ebp - 0x888]
mov ecx, dword [0x450100]
push eax
call fcn.0042369f
cmp byte [ebp - 0x888], bl
je 0x425409
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0xfc], edi
jae 0x4253f5
lea eax, [ebp - 0x110]
push eax
push 0x405e90
push dword [0x450100]
call fcn.0040ad06
add esp, 0xc
xor eax, eax
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xac], ebx
mov word [ebp - 0xbc], ax
lea eax, [ebp - 0xbc]
push 0x40c
push eax
mov byte [ebp - 4], 0x12
call fcn.0042c681
pop ecx
pop ecx
cmp byte [ebp - 0x888], bl
jne 0x425625
call fcn.00422c06
cmp al, bl
je 0x425625
mov ecx, dword [0x450100]
push 0x405e58
mov esi, ecx
call fcn.0040a9c9
push 0x4013e0
mov ecx, esi
call fcn.0040a9c9
call fcn.0042d37a
cmp al, bl
lea eax, [ebp - 0x30]
je 0x4255e9
push 0x598
push eax
call fcn.0042c681
pop ecx
pop ecx
mov ecx, dword [ebp - 0xbc]
cmp dword [ebp - 0xa8], edi
jae 0x42549d
lea ecx, [ebp - 0xbc]
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1c], edi
jae 0x4254a8
lea eax, [ebp - 0x30]
push 0x44
push ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x4254c1
push ebx
push 2
call dword [sym.imp.USER32.dll_ExitWindowsEx]
mov eax, dword [0x450100]
mov esi, eax
mov eax, dword [eax]
cmp eax, 0xffffffff
je 0x4254d6
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [esi], 0xffffffff
call dword [sym.imp.ole32.dll_CoUninitialize]
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0xbc]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x30]
call fcn.0040aa24
lea ecx, [ebp - 0x89c]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x89c], 0x404d18
call fcn.004158f9
cmp dword [ebp - 0x880], ebx
je 0x425526
push dword [ebp - 0x880]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebx
push esi
lea ecx, [ebp - 0xf4]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x110]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x1ac]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x190]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0xa0]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x68]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x1c8]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x2d4]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x4c]
call fcn.0040aa24
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 3
call fcn.0041f58e
lea ecx, [ebp - 0x68c]
mov byte [ebp - 4], 2
call fcn.00429407
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 1
call fcn.00428cfa
lea ecx, [ebp - 0x3a8]
mov byte [ebp - 4], bl
call fcn.004282a4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x87c]
call fcn.00423a22
mov eax, 0xbc2
jmp 0x427cd4
push 0x599
push eax
call fcn.0042c681
pop ecx
pop ecx
mov ecx, dword [ebp - 0xbc]
cmp dword [ebp - 0xa8], edi
jae 0x42560a
lea ecx, [ebp - 0xbc]
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1c], edi
jae 0x425615
lea eax, [ebp - 0x30]
push 0x44
push ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4254c1
lea eax, [ebp - 0x30]
push 0x40d
push eax
call fcn.0042c681
pop ecx
pop ecx
lea eax, [ebp - 0x89c]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0xbc]
push eax
push ebx
push dword [ebp - 0x8e0]
lea ecx, [ebp - 0x3a8]
call fcn.004292ca
xor eax, eax
mov dword [ebp - 0xc4], esi
mov dword [ebp - 0xc8], ebx
mov word [ebp - 0xd8], ax
mov dword [ebp - 0x118], esi
mov dword [ebp - 0x11c], ebx
mov word [ebp - 0x12c], ax
mov dword [ebp - 0x8bc], ebx
mov dword [ebp - 0x8b8], ebx
mov dword [ebp - 0x8b4], ebx
mov dword [ebp - 0x8c0], 0x404d18
mov dword [ebp - 0x8d0], ebx
mov dword [ebp - 0x8cc], ebx
mov dword [ebp - 0x8c8], ebx
mov dword [ebp - 0x8ac], ebx
mov dword [ebp - 0x8a8], ebx
mov dword [ebp - 0x8a4], ebx
lea eax, [ebp - 0xd8]
push eax
mov byte [ebp - 4], 0x17
call fcn.00421923
pop ecx
push dword [ebp - 0x888]
lea eax, [ebp - 0x12c]
push eax
call fcn.00421957
pop ecx
pop ecx
lea eax, [ebp - 0x884]
push eax
call fcn.004219c8
pop ecx
lea eax, [ebp - 0x8ac]
push eax
lea eax, [ebp - 0x8d0]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.00423ed6
lea eax, [ebp - 0x8c0]
add esp, 0xc
push eax
call fcn.00423728
pop ecx
lea eax, [ebp - 0xf4]
push eax
call fcn.0042c83e
pop ecx
push 0x405e40
lea ecx, [ebp - 0x8c0]
call fcn.004144de
cmp eax, ebx
je 0x4257a8
cmp byte [ebp - 0x888], bl
je 0x425763
cmp dword [ebp - 0x100], ebx
je 0x425763
cmp dword [ebp - 0xfc], edi
jb 0x42575b
mov ecx, dword [ebp - 0x110]
jmp 0x425777
lea ecx, [ebp - 0x110]
jmp 0x425777
mov ecx, dword [ebp - 0xf4]
cmp dword [ebp - 0xe0], edi
jae 0x425777
lea ecx, [ebp - 0xf4]
mov edx, dword [ebp - 0xd8]
cmp dword [ebp - 0xc4], edi
jae 0x42578b
lea edx, [ebp - 0xd8]
push ecx
push edx
push eax
lea ecx, [ebp - 0x87c]
call fcn.0040b3ee
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x87c]
call fcn.00422bd4
cmp dword [ebp - 0x3c], ebx
jne 0x4257bd
lea eax, [ebp - 0x4c]
push 0x418
push eax
call fcn.0042c681
pop ecx
pop ecx
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0xe0], edi
jae 0x4257d1
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x2f0]
call fcn.0040b3c2
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x8ac]
push eax
lea eax, [ebp - 0x8d0]
push eax
push dword [ebp - 0x884]
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x8c0]
push eax
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 0x18
call fcn.0041eb71
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x2f0]
call fcn.0040aa24
xor eax, eax
mov dword [ebp - 0x160], esi
mov dword [ebp - 0x164], ebx
mov word [ebp - 0x174], ax
mov dword [ebp - 0x2f8], esi
mov dword [ebp - 0x2fc], ebx
mov word [ebp - 0x30c], ax
mov dword [ebp - 0x314], esi
mov dword [ebp - 0x318], ebx
mov word [ebp - 0x328], ax
cmp dword [ebp - 0x38], 8
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x1b
jae 0x42587b
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x30]
push 0x3f4
push eax
call fcn.0042c681
add esp, 0xc
lea eax, [ebp - 0x174]
push 0x3ec
push eax
call fcn.0042c681
pop ecx
pop ecx
lea eax, [ebp - 0x30c]
push 0x3eb
push eax
call fcn.0042c681
pop ecx
pop ecx
lea eax, [ebp - 0x328]
push 0x41f
push eax
call fcn.0042c681
pop ecx
pop ecx
lea eax, [ebp - 0x89c]
push eax
lea eax, [ebp - 0x328]
push eax
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x30]
push eax
push ebx
push dword [ebp - 0x8e0]
lea ecx, [ebp - 0x2b8]
call fcn.00429486
cmp byte [ebp - 0x888], bl
jne 0x425917
push ebx
lea ecx, [ebp - 0x58c]
call fcn.0041d29d
mov byte [ebp - 0x8d1], al
jmp 0x425a03
xor eax, eax
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x74], ebx
mov word [ebp - 0x84], ax
cmp dword [ebp - 0xe0], 8
mov eax, dword [ebp - 0xf4]
mov byte [ebp - 4], 0x1c
jae 0x42593f
lea eax, [ebp - 0xf4]
push ebx
push 0x405e20
push eax
lea eax, [ebp - 0x84]
push ebx
push eax
call fcn.0042bf95
mov eax, dword [ebp - 0x84]
add esp, 0x14
cmp dword [ebp - 0x70], 8
jae 0x425968
lea eax, [ebp - 0x84]
push eax
call fcn.0042a0e5
pop ecx
cmp al, bl
je 0x4259e4
mov dword [ebp - 0x1d8], ebx
mov dword [ebp - 0x1d4], ebx
mov dword [ebp - 0x1d0], ebx
mov dword [ebp - 0x1dc], 0x404d18
cmp dword [ebp - 0x70], 8
mov eax, dword [ebp - 0x84]
mov byte [ebp - 4], 0x1d
jae 0x4259a5
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x1dc]
call fcn.004192e6
lea eax, [ebp - 0x1dc]
push eax
lea ecx, [ebp - 0x58c]
call fcn.0041d29d
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 0x8d1], al
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x1dc], 0x404d18
call fcn.004158f9
jmp 0x4259f6
push ebx
lea ecx, [ebp - 0x58c]
call fcn.0041d29d
mov byte [ebp - 0x8d1], al
push ebx
push edi
lea ecx, [ebp - 0x84]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x328]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x30c]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x174]
call fcn.0040aa24
lea ecx, [ebp - 0x8ac]
call fcn.0041c497
lea ecx, [ebp - 0x8d0]
call fcn.0041c497
lea ecx, [ebp - 0x8c0]
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x8c0], 0x404d18
call fcn.004158f9
push ebx
push edi
lea ecx, [ebp - 0x12c]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0xd8]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0xbc]
call fcn.0040aa24
mov dword [ebp - 4], 0x10
cmp byte [ebp - 0x8d1], bl
jne 0x425e19
lea ecx, [ebp - 0x3a8]
call fcn.004282c1
lea ecx, [ebp - 0x158]
call fcn.0041ce31
xor eax, eax
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xac], ebx
mov word [ebp - 0xbc], ax
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 0x22
call fcn.0041cbd3
dec eax
push eax
lea ecx, [ebp - 0x58c]
call fcn.0041d679
cmp dword [ebp - 0x38], 8
mov eax, dword [ebp - 0x4c]
jae 0x425af4
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x30]
push 0x40b
push eax
call fcn.0042c681
mov eax, dword [ebp - 0x30]
add esp, 0xc
push 8
pop esi
cmp dword [ebp - 0x1c], esi
jae 0x425b14
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.00428191
cmp dword [ebp - 0x138], ebx
jne 0x425b50
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0xa8], esi
jae 0x425b3c
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x30]
push 0x40a
push eax
call fcn.0042c681
add esp, 0xc
jmp 0x425b8b
mov ecx, dword [ebp - 0x148]
cmp dword [ebp - 0x134], esi
jae 0x425b64
lea ecx, [ebp - 0x148]
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0xa8], esi
jae 0x425b78
lea eax, [ebp - 0xbc]
push ecx
push eax
lea eax, [ebp - 0x30]
push 0x41e
push eax
call fcn.0042c681
add esp, 0x10
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1c], esi
jae 0x425b96
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.004217b2
pop ecx
pop ecx
push edi
lea ecx, [ebp - 0x2b8]
call fcn.00429bb5
mov eax, dword [0x450100]
cmp dword [eax], 0xffffffff
je 0x425c5c
mov ecx, dword [ebp - 0xbc]
cmp dword [ebp - 0xa8], esi
jae 0x425bd3
lea ecx, [ebp - 0xbc]
push ecx
push 0x405dd0
push eax
call fcn.0040ad06
add esp, 0xc
cmp dword [ebp - 0x138], ebx
je 0x425c12
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x134], esi
jae 0x425bfe
lea eax, [ebp - 0x148]
push eax
push 0x405d88
push dword [0x450100]
call fcn.0040ad06
add esp, 0xc
push 2
lea ecx, [ebp - 0x2b8]
call fcn.00429bb5
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x8c], esi
jae 0x425c33
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x30]
push 0x404
push eax
call fcn.0042c681
mov eax, dword [ebp - 0x30]
add esp, 0xc
cmp dword [ebp - 0x1c], esi
jae 0x425c50
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.00429b51
push ebx
lea ecx, [ebp - 0x2b8]
call fcn.0042806c
lea eax, [ebp - 0x30]
push 0x3ea
push eax
call fcn.0042c681
mov eax, dword [ebp - 0x30]
pop ecx
pop ecx
cmp dword [ebp - 0x1c], esi
jae 0x425c83
lea eax, [ebp - 0x30]
push eax
push edi
lea ecx, [ebp - 0x2b8]
call fcn.0042865d
push edi
push edi
lea ecx, [ebp - 0x2b8]
call fcn.004285e2
push ebx
push 2
lea ecx, [ebp - 0x2b8]
call fcn.004285e2
push ebx
lea ecx, [ebp - 0x2b8]
call fcn.0042896e
push edi
lea ecx, [ebp - 0x2b8]
call fcn.00427e5f
mov eax, dword [0x450100]
mov esi, eax
mov eax, dword [eax]
cmp eax, 0xffffffff
je 0x425cd8
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [esi], 0xffffffff
push edi
push edi
lea ecx, [ebp - 0x2b8]
call fcn.00427ffe
lea ecx, [ebp - 0x2b8]
call fcn.00427f9c
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x2b8]
call fcn.00427ffe
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push edi
lea ecx, [ebp - 0xbc]
call fcn.0040aa24
lea ecx, [ebp - 0x158]
call fcn.0041ce67
push ebx
push edi
lea ecx, [ebp - 0x30]
call fcn.0040aa24
lea ecx, [ebp - 0x89c]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x89c], 0x404d18
call fcn.004158f9
cmp dword [ebp - 0x880], ebx
je 0x425d56
push dword [ebp - 0x880]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebx
push edi
lea ecx, [ebp - 0xf4]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x110]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x1ac]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x190]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0xa0]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x68]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x1c8]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x2d4]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x4c]
call fcn.0040aa24
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 3
call fcn.0041f58e
lea ecx, [ebp - 0x68c]
mov byte [ebp - 4], 2
call fcn.00429407
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 1
call fcn.00428cfa
lea ecx, [ebp - 0x3a8]
mov byte [ebp - 4], bl
call fcn.004282a4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x87c]
call fcn.00423a22
mov eax, 0x643
jmp 0x427cd4
lea ecx, [ebp - 0x58c]
call fcn.0041cbd3
mov edi, eax
cmp byte [ebp - 0x888], bl
je 0x425ecb
cmp edi, ebx
jle 0x425ecd
lea ecx, [ebp - 0x6d4]
call fcn.0041ce31
xor eax, eax
mov dword [ebp - 0x118], esi
mov dword [ebp - 0x11c], ebx
mov word [ebp - 0x12c], ax
lea eax, [ebp - 0x6d4]
push eax
lea eax, [ebp - 0x12c]
push eax
push dword [ebp - 0x8dc]
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 0x24
call fcn.0041d679
mov eax, dword [ebp - 0x6d4]
and eax, 0xf
push ebx
lea ecx, [ebp - 0x12c]
push 1
cmp al, 3
jne 0x425eb7
inc dword [ebp - 0x8dc]
call fcn.0040aa24
lea ecx, [ebp - 0x6d4]
mov byte [ebp - 4], 0x10
call fcn.0041ce67
cmp dword [ebp - 0x8dc], edi
jl 0x425e3a
jmp 0x425ecb
call fcn.0040aa24
lea ecx, [ebp - 0x6d4]
mov byte [ebp - 4], 0x10
call fcn.0041ce67
cmp edi, ebx
je 0x42724e
cmp byte [ebp - 0x888], bl
je 0x425ee7
cmp dword [ebp - 0x8dc], edi
je 0x42724e
lea ecx, [ebp - 0x3a8]
call fcn.004282c1
cmp byte [ebp - 0x888], bl
jne 0x42699f
xor eax, eax
mov dword [ebp - 0xc4], esi
mov dword [ebp - 0xc8], ebx
mov word [ebp - 0xd8], ax
cmp dword [ebp - 0x38], 8
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x26
jae 0x425f23
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0xd8]
push 0x4bd
push eax
call fcn.0042c681
add esp, 0xc
lea eax, [ebp - 0x89c]
push eax
lea eax, [ebp - 0x68]
push eax
xor edi, edi
inc edi
push edi
lea eax, [ebp - 0xd8]
push eax
push ebx
push dword [ebp - 0x8e0]
lea ecx, [ebp - 0x68c]
call fcn.0042968d
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x58c]
push eax
lea eax, [ebp - 0x68c]
push eax
call fcn.00423a7b
add esp, 0xc
cmp al, bl
jne 0x4260b2
mov eax, dword [0x450100]
mov esi, eax
mov eax, dword [eax]
cmp eax, 0xffffffff
je 0x425f97
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [esi], 0xffffffff
lea ecx, [ebp - 0x68c]
call fcn.004282c1
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push edi
lea ecx, [ebp - 0xd8]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x30]
call fcn.0040aa24
lea ecx, [ebp - 0x89c]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x89c], 0x404d18
call fcn.004158f9
cmp dword [ebp - 0x880], ebx
je 0x425fef
push dword [ebp - 0x880]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebx
push edi
lea ecx, [ebp - 0xf4]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x110]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x1ac]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x190]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0xa0]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x68]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x1c8]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x2d4]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x4c]
call fcn.0040aa24
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 3
call fcn.0041f58e
lea ecx, [ebp - 0x68c]
mov byte [ebp - 4], 2
call fcn.00429407
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 1
call fcn.00428cfa
lea ecx, [ebp - 0x3a8]
mov byte [ebp - 4], bl
call fcn.004282a4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x87c]
call fcn.00423a22
mov eax, 0x642
jmp 0x427cd4
lea ecx, [ebp - 0x68c]
call fcn.004282c1
push edi
lea ecx, [ebp - 0x2b8]
call fcn.00427e5f
push edi
lea ecx, [ebp - 0x2b8]
call fcn.0042806c
push ebx
push 2
lea ecx, [ebp - 0x2b8]
call fcn.004285e2
push ebx
push 3
lea ecx, [ebp - 0x2b8]
call fcn.004285e2
push ebx
lea ecx, [ebp - 0x2b8]
call fcn.0042896e
push edi
push edi
lea ecx, [ebp - 0x2b8]
call fcn.00427ffe
lea eax, [ebp - 0x30]
push 0x3f2
push eax
call fcn.0042c681
cmp dword [ebp - 0x1c], 8
mov eax, dword [ebp - 0x30]
pop ecx
pop ecx
jae 0x426126
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.00428191
cmp dword [ebp - 0x54], 8
mov eax, dword [ebp - 0x68]
jae 0x42613e
lea eax, [ebp - 0x68]
push eax
push 0x405d30
push dword [0x450100]
call fcn.0040ad06
mov eax, dword [ebp - 0x68]
add esp, 0xc
cmp dword [ebp - 0x54], 8
jae 0x42615e
lea eax, [ebp - 0x68]
push eax
call fcn.00421b39
cmp dword [ebp - 0x54], 8
mov eax, dword [ebp - 0x68]
pop ecx
jae 0x426171
lea eax, [ebp - 0x68]
push edi
push eax
lea ecx, [ebp - 0x58c]
call fcn.0041e153
cmp al, bl
jne 0x4265d2
cmp dword [ebp - 0x54], 8
mov eax, dword [ebp - 0x68]
jae 0x426192
lea eax, [ebp - 0x68]
push eax
push 0x405cf8
push dword [0x450100]
call fcn.0040ad06
mov eax, dword [ebp - 0x4c]
add esp, 0xc
cmp dword [ebp - 0x38], 8
jae 0x4261b2
lea eax, [ebp - 0x4c]
cmp dword [ebp - 0x54], 8
mov edi, dword [ebp - 0x68]
mov dword [ebp - 0x884], eax
jae 0x4261c4
lea edi, [ebp - 0x68]
lea ecx, [ebp - 0x2b8]
call fcn.00427ed0
push dword [ebp - 0x884]
lea ecx, [ebp - 0x58c]
push eax
push 1
push ebx
push edi
call fcn.0041c9ff
lea ecx, [ebp - 0x140]
call fcn.0042178a
cmp dword [ebp - 0x8c], 8
mov ecx, dword [ebp - 0xa0]
mov byte [ebp - 4], 0x27
jae 0x426209
lea ecx, [ebp - 0xa0]
cmp dword [ebp - 0x38], 8
mov eax, dword [ebp - 0x4c]
jae 0x426215
lea eax, [ebp - 0x4c]
push ecx
lea ecx, [ebp - 0x140]
push ecx
push eax
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x58c]
push eax
call fcn.00422e93
add esp, 0x14
push 0x4016c0
lea ecx, [ebp - 0x2b8]
mov edi, eax
call fcn.00428119
cmp edi, ebx
jge 0x4265bd
lea ecx, [ebp - 0x2b8]
call fcn.0042801e
cmp al, bl
je 0x42633f
mov eax, dword [0x450100]
mov esi, eax
mov eax, dword [eax]
cmp eax, 0xffffffff
je 0x426276
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [esi], 0xffffffff
call dword [sym.imp.ole32.dll_CoUninitialize]
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x12c]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0xd8]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x30]
call fcn.0040aa24
lea ecx, [ebp - 0x89c]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x89c], 0x404d18
call fcn.004158f9
cmp dword [ebp - 0x880], ebx
je 0x4262d3
push dword [ebp - 0x880]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebx
push esi
lea ecx, [ebp - 0xf4]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x110]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x1ac]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x190]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0xa0]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x68]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x1c8]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x2d4]
call fcn.0040aa24
push ebx
push esi
jmp 0x426056
mov eax, dword [ebp - 0x4c]
push 8
pop edi
cmp dword [ebp - 0x38], edi
jae 0x42634d
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x30]
push 0x578
push eax
call fcn.0042c681
mov eax, dword [ebp - 0x30]
add esp, 0xc
cmp dword [ebp - 0x1c], edi
jae 0x42636a
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.00428191
xor eax, eax
push 0xffffffffffffffff
mov word [ebp - 0x84], ax
push ebx
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x74], ebx
call fcn.0040b217
mov eax, dword [ebp - 0x84]
mov byte [ebp - 4], 0x28
cmp dword [ebp - 0x70], edi
jae 0x4263af
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x30]
push 0x579
push eax
call fcn.0042c681
mov eax, dword [ebp - 0x30]
add esp, 0xc
cmp dword [ebp - 0x1c], edi
jae 0x4263cc
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.004217b2
pop ecx
pop ecx
xor esi, esi
inc esi
push esi
lea ecx, [ebp - 0x2b8]
call fcn.00429bb5
push dword [ebp - 0x138]
lea eax, [ebp - 0x30]
push 0x57a
push eax
call fcn.0042c681
mov eax, dword [ebp - 0x30]
add esp, 0xc
cmp dword [ebp - 0x1c], edi
jae 0x42640c
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.00429b51
push esi
lea ecx, [ebp - 0x2b8]
call fcn.00429bb5
mov eax, dword [0x450100]
cmp dword [eax], 0xffffffff
je 0x426478
push 2
lea ecx, [ebp - 0x2b8]
call fcn.00429bb5
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x8c], edi
jae 0x42644f
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x30]
push 0x404
push eax
call fcn.0042c681
mov eax, dword [ebp - 0x30]
add esp, 0xc
cmp dword [ebp - 0x1c], edi
jae 0x42646c
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.00429b51
lea eax, [ebp - 0x30]
push 0x3ea
push eax
call fcn.0042c681
mov eax, dword [ebp - 0x30]
pop ecx
pop ecx
cmp dword [ebp - 0x1c], edi
jae 0x426493
lea eax, [ebp - 0x30]
push eax
push esi
lea ecx, [ebp - 0x2b8]
call fcn.0042865d
push esi
push esi
lea ecx, [ebp - 0x2b8]
call fcn.004285e2
push ebx
push 2
lea ecx, [ebp - 0x2b8]
call fcn.004285e2
push ebx
lea ecx, [ebp - 0x2b8]
call fcn.0042806c
push esi
push esi
lea ecx, [ebp - 0x2b8]
call fcn.00427ffe
lea ecx, [ebp - 0x2b8]
call fcn.00427f9c
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x2b8]
call fcn.00427ffe
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push esi
lea ecx, [ebp - 0x84]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x12c]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0xd8]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x30]
call fcn.0040aa24
lea ecx, [ebp - 0x89c]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x89c], 0x404d18
call fcn.004158f9
cmp dword [ebp - 0x880], ebx
je 0x426551
push dword [ebp - 0x880]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebx
push esi
lea ecx, [ebp - 0xf4]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x110]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x1ac]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x190]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0xa0]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x68]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x1c8]
call fcn.0040aa24
push ebx
push esi
lea ecx, [ebp - 0x2d4]
call fcn.0040aa24
push ebx
push esi
jmp 0x425dbd
push ebx
push 1
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0x26
call fcn.0040aa24
xor edi, edi
inc edi
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x2b8]
call fcn.00427ffe
mov dword [ebp - 0x8ac], ebx
mov dword [ebp - 0x8a8], ebx
mov dword [ebp - 0x8a4], ebx
lea eax, [ebp - 0x8ac]
push eax
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 0x29
call fcn.0041ed80
cmp al, bl
jne 0x4266fe
xor eax, eax
mov dword [ebp - 0x160], esi
mov dword [ebp - 0x164], ebx
mov word [ebp - 0x174], ax
push ebx
push ebx
lea ecx, [ebp - 0x30c]
call fcn.0040aa24
push ebx
push ebx
lea ecx, [ebp - 0x328]
call fcn.0040aa24
push ebx
push ebx
lea ecx, [ebp - 0x12c]
call fcn.0040aa24
mov esi, dword [ebp - 0x8ac]
mov byte [ebp - 4], 0x2d
cmp esi, dword [ebp - 0x8a8]
je 0x4266c1
cmp dword [esi + 0x14], 8
jb 0x426668
mov eax, dword [esi]
jmp 0x42666a
mov eax, esi
push eax
lea ecx, [ebp - 0x2f0]
call fcn.0040b3c2
cmp dword [ebp - 0x2dc], 8
mov eax, dword [ebp - 0x2f0]
mov byte [ebp - 4], 0x2e
jae 0x42668f
lea eax, [ebp - 0x2f0]
push eax
lea ecx, [ebp - 0x12c]
call fcn.0040cf83
push 0x4013e0
lea ecx, [ebp - 0x12c]
call fcn.0040cf83
push ebx
push edi
lea ecx, [ebp - 0x2f0]
mov byte [ebp - 4], 0x2d
call fcn.0040aa24
add esi, 0x1c
jmp 0x426656
cmp dword [ebp - 0x118], 8
mov eax, dword [ebp - 0x12c]
jae 0x4266d6
lea eax, [ebp - 0x12c]
push eax
push 0x57d
lea eax, [ebp - 0x910]
push 2
push eax
call fcn.0040ad7d
add esp, 0x10
push 0x44a7b4
lea eax, [ebp - 0x910]
push eax
call fcn.0042ee98
lea ecx, [ebp - 0x8ac]
call fcn.0041c497
push ebx
push edi
lea ecx, [ebp - 0xd8]
call fcn.0040aa24
jmp 0x4269a2
xor edi, edi
inc edi
push edi
lea ecx, [ebp - 0x2b8]
mov dword [ebp - 4], 0x10
call fcn.00427e5f
push edi
lea ecx, [ebp - 0x2b8]
call fcn.0042806c
lea eax, [ebp - 0x30]
push 0x3e8
push eax
call fcn.0042c681
pop ecx
pop ecx
push edi
push edi
lea ecx, [ebp - 0x2b8]
call fcn.004285e2
cmp dword [ebp - 0x1c], 8
mov eax, dword [ebp - 0x30]
jae 0x4269ea
lea eax, [ebp - 0x30]
push eax
push edi
lea ecx, [ebp - 0x2b8]
call fcn.0042865d
push ebx
push 2
lea ecx, [ebp - 0x2b8]
call fcn.004285e2
push ebx
push 3
lea ecx, [ebp - 0x2b8]
call fcn.004285e2
push ebx
lea ecx, [ebp - 0x2b8]
call fcn.0042896e
push edi
push edi
lea ecx, [ebp - 0x2b8]
call fcn.00427ffe
push dword [ebp - 0x8dc]
lea ecx, [ebp - 0x58c]
call fcn.0041cb22
push dword [ebp - 0x8dc]
lea eax, [ebp - 0x58c]
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.0042227f
add esp, 0xc
mov byte [ebp - 0x8d1], bl
cmp byte [ebp - 0x8d3], bl
jne 0x426bc6
push ebx
push ebx
lea ecx, [ebp - 0x1e4]
call fcn.0040aa24
lea eax, [ebp - 0x8ac]
push eax
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 0x32
mov dword [ebp - 0x8ac], ebx
mov dword [ebp - 0x8a8], ebx
mov dword [ebp - 0x8a4], ebx
mov byte [ebp - 0x8a0], bl
call fcn.0041cb4d
mov byte [ebp - 0x8d3], al
cmp byte [ebp - 0x8a0], bl
je 0x426ebf
push 0x4016c0
lea ecx, [ebp - 0x2b8]
call fcn.00428119
lea ecx, [ebp - 0x158]
mov byte [ebp - 0x8d1], bl
call fcn.0041ce31
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x1e4]
push eax
push dword [ebp - 0x8dc]
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 0x33
call fcn.0041d679
mov eax, dword [ebp - 0x158]
cmp eax, esi
je 0x426c4c
mov ecx, eax
and ecx, 0xf
cmp cl, 5
je 0x426c4c
test al, 0x30
je 0x426c03
cmp dword [ebp - 0x1b8], ebx
jne 0x426b9e
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x1ac]
call fcn.0040b217
cmp byte [ebp - 0x888], bl
je 0x426b5e
cmp dword [ebp - 0xfc], 8
jb 0x426b56
mov eax, dword [ebp - 0x110]
jmp 0x426b73
lea eax, [ebp - 0x110]
jmp 0x426b73
cmp dword [ebp - 0xe0], 8
mov eax, dword [ebp - 0xf4]
jae 0x426b73
lea eax, [ebp - 0xf4]
cmp dword [ebp - 0x17c], 8
mov ecx, dword [ebp - 0x190]
jae 0x426b88
lea ecx, [ebp - 0x190]
push ecx
push eax
lea eax, [ebp - 0x1c8]
push 0x405ccc
push eax
call fcn.0042c0b9
add esp, 0x10
test byte [ebp - 0x158], 0x10
mov byte [ebp - 0x8d2], 1
je 0x426c03
lea ecx, [ebp - 0x158]
call fcn.0041ce67
push ebx
push edi
lea ecx, [ebp - 0x1e4]
call fcn.0040aa24
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x2b8]
mov dword [ebp - 4], 0x10
call fcn.00427ffe
cmp byte [ebp - 0x8d3], bl
je 0x427263
lea ecx, [ebp - 0x2b8]
call fcn.0042801e
neg al
sbb al, al
inc al
mov byte [ebp - 0x8d4], al
jmp 0x427263
inc dword [ebp - 0x8dc]
lea ecx, [ebp - 0x2b8]
call fcn.0042801e
cmp al, bl
jne 0x426bae
cmp byte [ebp - 0x8d3], bl
jne 0x426c3c
push dword [ebp - 0x8dc]
lea eax, [ebp - 0x58c]
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.0042227f
add esp, 0xc
lea ecx, [ebp - 0x158]
call fcn.0041ce67
jmp 0x42705d
test al, 0x30
je 0x426c6c
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 0x8d2], 1
call fcn.0040b217
mov eax, dword [ebp - 0x4c]
cmp byte [ebp - 0x8d2], bl
je 0x426c88
cmp dword [ebp - 0x38], 8
jae 0x426c80
lea eax, [ebp - 0x4c]
push eax
push 0x3f9
jmp 0x426c97
cmp dword [ebp - 0x38], 8
jae 0x426c91
lea eax, [ebp - 0x4c]
push eax
push 0x3f8
lea eax, [ebp - 0x30]
push eax
call fcn.0042c681
mov eax, dword [ebp - 0x30]
add esp, 0xc
push 8
pop esi
cmp dword [ebp - 0x1c], esi
jae 0x426cb1
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.00428191
push 0xffffffffffffffff
lea ecx, [ebp - 0x2b8]
call fcn.004281b3
cmp dword [ebp - 0x138], ebx
jbe 0x426d0f
mov ecx, dword [ebp - 0x148]
cmp dword [ebp - 0x134], esi
jae 0x426ce6
lea ecx, [ebp - 0x148]
mov eax, dword [ebp - 0x1e4]
cmp dword [ebp - 0x1d0], esi
jae 0x426cfa
lea eax, [ebp - 0x1e4]
push ecx
push eax
lea eax, [ebp - 0x30]
push 0x402
push eax
call fcn.0042c681
add esp, 0x10
jmp 0x426d35
mov eax, dword [ebp - 0x1e4]
cmp dword [ebp - 0x1d0], esi
jae 0x426d23
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x30]
push 0x401
push eax
call fcn.0042c681
add esp, 0xc
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1c], esi
jae 0x426d40
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.004217b2
pop ecx
pop ecx
push 2
lea ecx, [ebp - 0x2b8]
call fcn.00429bb5
push ebx
lea eax, [ebp - 0x58c]
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.00424e0d
mov eax, dword [0x450100]
add esp, 0xc
cmp dword [eax], 0xffffffff
je 0x426dba
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x8c], esi
jae 0x426d91
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x30]
push 0x404
push eax
call fcn.0042c681
mov eax, dword [ebp - 0x30]
add esp, 0xc
cmp dword [ebp - 0x1c], esi
jae 0x426dae
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.00429b51
push ebx
lea ecx, [ebp - 0x2b8]
call fcn.0042806c
cmp byte [ebp - 0x8d2], bl
je 0x426e39
push ebx
push ebx
call fcn.004237a1
pop ecx
pop ecx
push edi
push edi
lea ecx, [ebp - 0x2b8]
call fcn.00428621
push 3
lea ecx, [ebp - 0x2b8]
call fcn.00428700
push 3
lea ecx, [ebp - 0x2b8]
call fcn.0042868c
lea eax, [ebp - 0x2b8]
push eax
call fcn.00421c67
pop ecx
mov ecx, dword [0x450100]
call fcn.00421647
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x158]
call fcn.0041ce67
lea ecx, [ebp - 0x1e4]
push ebx
push edi
call fcn.0040aa24
jmp 0x425d1f
lea eax, [ebp - 0x30]
push 0x3ea
push eax
call fcn.0042c681
mov eax, dword [ebp - 0x30]
pop ecx
pop ecx
cmp dword [ebp - 0x1c], esi
jae 0x426e54
lea eax, [ebp - 0x30]
push eax
push edi
lea ecx, [ebp - 0x2b8]
call fcn.0042865d
push edi
push edi
lea ecx, [ebp - 0x2b8]
call fcn.004285e2
push edi
push edi
lea ecx, [ebp - 0x2b8]
call fcn.00428621
push ebx
push 2
lea ecx, [ebp - 0x2b8]
call fcn.004285e2
mov ecx, dword [0x450100]
call fcn.00421647
push edi
push edi
lea ecx, [ebp - 0x2b8]
call fcn.00427ffe
lea ecx, [ebp - 0x2b8]
call fcn.00427f9c
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x2b8]
call fcn.00427ffe
jmp 0x426e16
mov eax, dword [ebp - 0x8a4]
cmp dword [ebp - 0x8a8], eax
jbe 0x426f27
cmp eax, ebx
jbe 0x426f27
cmp dword [ebp - 0x8a8], ebx
jbe 0x426f27
cmp byte [ebp - 0x8d1], bl
jne 0x426f10
lea eax, [ebp - 0x30]
push 0x417
push eax
call fcn.0042c681
cmp dword [ebp - 0x1c], 8
mov eax, dword [ebp - 0x30]
pop ecx
pop ecx
jae 0x426efd
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.00428119
mov byte [ebp - 0x8d1], 1
mov eax, dword [ebp - 0x8a8]
xor edx, edx
div dword [ebp - 0x8a4]
push edx
push dword [ebp - 0x8a4]
jmp 0x426f2e
push dword [ebp - 0x8a8]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.004280b7
cmp byte [ebp - 0x8d5], bl
jne 0x42705d
lea ecx, [ebp - 0x2b8]
call fcn.0042801e
cmp al, bl
je 0x42705d
push ebx
push ebx
lea ecx, [ebp - 0x174]
call fcn.0040aa24
lea eax, [ebp - 0x174]
push 0x406
push eax
mov byte [ebp - 4], 0x34
call fcn.0042c681
pop ecx
pop ecx
push ebx
push ebx
lea ecx, [ebp - 0x12c]
call fcn.0040aa24
cmp dword [ebp - 0x38], 8
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 4], 0x35
jae 0x426f99
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x12c]
push 0x3f4
push eax
call fcn.0042c681
mov eax, dword [ebp - 0x12c]
add esp, 0xc
cmp dword [ebp - 0x118], 8
jae 0x426fc3
lea eax, [ebp - 0x12c]
cmp dword [ebp - 0x160], 8
mov edi, dword [ebp - 0x174]
mov dword [ebp - 0x884], eax
jae 0x426fde
lea edi, [ebp - 0x174]
lea ecx, [ebp - 0x2b8]
call fcn.00427ed0
push 0x34
push dword [ebp - 0x884]
push edi
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x427032
mov ecx, dword [0x450100]
push 0x405c94
call fcn.0040ab80
push 0xffffffffffffffff
lea ecx, [ebp - 0x2b8]
call fcn.0042868c
push ebx
push 1
lea ecx, [ebp - 0x2b8]
call fcn.00428621
mov byte [ebp - 0x8d5], 1
jmp 0x42703e
push ebx
lea ecx, [ebp - 0x2b8]
call fcn.0042802a
push ebx
push 1
lea ecx, [ebp - 0x12c]
call fcn.0040aa24
push ebx
push 1
lea ecx, [ebp - 0x174]
call fcn.0040aa24
xor edi, edi
inc edi
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push edi
lea ecx, [ebp - 0x1e4]
call fcn.0040aa24
jmp 0x426a5f
lea ecx, [ebp - 0x3a8]
mov byte [ebp - 0x8d4], 1
call fcn.004282c1
xor edi, edi
inc edi
lea eax, [ebp - 0x30]
push 0x3ea
push eax
call fcn.0042c681
mov eax, dword [ebp - 0x30]
pop ecx
pop ecx
push 8
pop esi
cmp dword [ebp - 0x1c], esi
jae 0x427281
lea eax, [ebp - 0x30]
push eax
push edi
lea ecx, [ebp - 0x2b8]
call fcn.0042865d
push edi
push edi
lea ecx, [ebp - 0x2b8]
call fcn.00428621
lea ecx, [ebp - 0x2b8]
call fcn.0042801e
cmp byte [ebp - 0x8d2], bl
je 0x4274d6
test al, al
lea eax, [ebp - 0x30]
je 0x4272c0
push 0x408
jmp 0x4272c5
push 0x409
push eax
call fcn.0042c681
mov eax, dword [ebp - 0x30]
pop ecx
pop ecx
cmp dword [ebp - 0x1c], esi
jae 0x4272d8
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.00428191
lea eax, [ebp - 0x2b8]
push ebx
push eax
call fcn.004217b2
pop ecx
pop ecx
cmp dword [ebp - 0x19c], ebx
je 0x427345
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x198], esi
jae 0x42730f
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x30]
push 0x411
push eax
call fcn.0042c681
mov eax, dword [ebp - 0x30]
add esp, 0xc
cmp dword [ebp - 0x1c], esi
jae 0x42732c
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.00429b51
push 2
lea ecx, [ebp - 0x2b8]
call fcn.00429bb5
push edi
lea eax, [ebp - 0x58c]
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.00424e0d
add esp, 0xc
lea ecx, [ebp - 0x2b8]
call fcn.0042801e
test al, al
jne 0x4273fb
mov ecx, dword [ebp - 0x1c8]
cmp dword [ebp - 0x1b4], esi
jae 0x427383
lea ecx, [ebp - 0x1c8]
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x54], esi
jae 0x42738e
lea eax, [ebp - 0x68]
push ecx
push eax
call fcn.004237a1
pop ecx
pop ecx
push ebx
push ebx
lea ecx, [ebp - 0x12c]
call fcn.0040aa24
mov eax, dword [ebp - 0x68]
mov byte [ebp - 4], 0x38
cmp dword [ebp - 0x54], esi
jae 0x4273b3
lea eax, [ebp - 0x68]
push ebx
push 0x405e20
push eax
lea eax, [ebp - 0x12c]
push ebx
push eax
call fcn.0042bf95
mov eax, dword [ebp - 0x12c]
add esp, 0x14
cmp dword [ebp - 0x118], esi
jae 0x4273de
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x58c]
call fcn.0041dc63
push ebx
push edi
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0x10
call fcn.0040aa24
push 3
lea ecx, [ebp - 0x2b8]
call fcn.00428700
push 3
lea ecx, [ebp - 0x2b8]
call fcn.0042868c
lea eax, [ebp - 0x2b8]
push eax
call fcn.00421c67
pop ecx
mov ecx, dword [0x450100]
call fcn.00421647
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push edi
lea ecx, [ebp - 0x30]
call fcn.0040aa24
lea ecx, [ebp - 0x89c]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x89c], 0x404d18
call fcn.004158f9
cmp dword [ebp - 0x880], ebx
je 0x42746a
push dword [ebp - 0x880]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebx
push edi
lea ecx, [ebp - 0xf4]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x110]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x1ac]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x190]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0xa0]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x68]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x1c8]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x2d4]
call fcn.0040aa24
push ebx
push edi
jmp 0x42530a
test al, al
je 0x427560
lea eax, [ebp - 0x30]
push 0x40e
push eax
call fcn.0042c681
mov eax, dword [ebp - 0x30]
pop ecx
pop ecx
cmp dword [ebp - 0x1c], esi
jae 0x4274f9
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.00428191
lea eax, [ebp - 0x2b8]
push ebx
push eax
call fcn.004217b2
push ebx
lea eax, [ebp - 0x58c]
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.00424e0d
add esp, 0x14
push ebx
lea ecx, [ebp - 0x2b8]
call fcn.0042806c
push edi
push edi
lea ecx, [ebp - 0x2b8]
call fcn.00427ffe
lea ecx, [ebp - 0x2b8]
call fcn.00427f9c
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x2b8]
call fcn.00427ffe
jmp 0x427422
cmp byte [ebp - 0x8d4], bl
je 0x427422
cmp dword [ebp - 0x72c], ebx
je 0x427422
push ebx
push ebx
lea ecx, [ebp - 0xd8]
call fcn.0040aa24
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0x87c]
mov byte [ebp - 4], 0x3a
call fcn.0040aafa
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0xc4], esi
jae 0x4275af
lea eax, [ebp - 0xd8]
push 0x4013fc
push eax
lea ecx, [ebp - 0x87c]
call fcn.0040ac98
cmp al, bl
je 0x427797
push ebx
push ebx
lea ecx, [ebp - 0xbc]
call fcn.0040aa24
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x87c]
mov byte [ebp - 4], 0x3b
call fcn.0040b4d5
cmp eax, ebx
je 0x427786
push ebx
push ebx
lea ecx, [ebp - 0x84]
call fcn.0040aa24
lea eax, [ebp - 0x84]
push eax
mov byte [ebp - 4], 0x3c
call fcn.00423638
pop ecx
push 0x404764
lea ecx, [ebp - 0xbc]
call fcn.0040edd0
cmp eax, ebx
je 0x427779
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0xbc]
call fcn.0041206a
cmp eax, ebx
je 0x427779
push ebx
push ebx
lea ecx, [ebp - 0x174]
call fcn.0040aa24
push ebx
push ebx
lea ecx, [ebp - 0x12c]
call fcn.0040aa24
mov ecx, dword [ebp - 0x84]
mov byte [ebp - 4], 0x3e
cmp dword [ebp - 0x70], esi
jae 0x427672
lea ecx, [ebp - 0x84]
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0xa8], esi
jae 0x427686
lea eax, [ebp - 0xbc]
push ecx
push eax
lea eax, [ebp - 0x174]
push 0x5a9
push eax
call fcn.0042c681
mov eax, dword [ebp - 0x4c]
add esp, 0x10
cmp dword [ebp - 0x38], esi
jae 0x4276a7
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x12c]
push 0x3f4
push eax
call fcn.0042c681
mov ecx, dword [ebp - 0x12c]
add esp, 0xc
cmp dword [ebp - 0x118], esi
jae 0x4276d0
lea ecx, [ebp - 0x12c]
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x160], esi
jae 0x4276e4
lea eax, [ebp - 0x174]
push 0x30
push ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x84]
cmp dword [ebp - 0x70], esi
jae 0x427700
lea ecx, [ebp - 0x84]
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0xa8], esi
jae 0x427714
lea eax, [ebp - 0xbc]
push ecx
push eax
push 0x405c30
push dword [0x450100]
call fcn.0040ad06
mov ecx, dword [0x450100]
add esp, 0x10
call fcn.00421647
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push edi
lea ecx, [ebp - 0x12c]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x174]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0x84]
call fcn.0040aa24
lea ecx, [ebp - 0xbc]
push ebx
push edi
call fcn.0040aa24
lea ecx, [ebp - 0xd8]
jmp 0x426e2d
push ebx
push edi
lea ecx, [ebp - 0x84]
call fcn.0040aa24
push ebx
push edi
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x3a
call fcn.0040aa24
lea ecx, [ebp - 0x87c]
call fcn.0040ae5d
cmp al, bl
je 0x427887
push ebx
push ebx
lea ecx, [ebp - 0x87c]
call fcn.004214e5
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x38], esi
jae 0x4277c2
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x87c]
push eax
call fcn.0042263a
add esp, 0xc
cmp eax, ebx
jge 0x427807
push eax
push 0x405bc8
push dword [0x450100]
call fcn.0040ad06
mov ecx, dword [0x450100]
add esp, 0xc
call fcn.00421647
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x42776e
push ebx
push ebx
lea ecx, [ebp - 0x84]
call fcn.0040aa24
lea eax, [ebp - 0x84]
push eax
mov byte [ebp - 4], 0x3f
call fcn.0042b71a
cmp dword [ebp - 0x70], esi
mov esi, dword [ebp - 0x84]
pop ecx
jae 0x427836
lea esi, [ebp - 0x84]
lea ecx, [ebp - 0x2b8]
call fcn.00427ed0
push eax
push esi
lea ecx, [ebp - 0x87c]
call fcn.0040aea6
cmp eax, edi
je 0x427873
cmp eax, 4
je 0x427873
mov ecx, dword [0x450100]
call fcn.00421647
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x84]
jmp 0x427767
push ebx
push edi
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x3a
call fcn.0040aa24
push 8
pop esi
mov ecx, dword [0x450100]
push 0x405b94
call fcn.0040ab80
push ebx
lea ecx, [ebp - 0x2b8]
call fcn.00427e5f
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x17c], esi
jae 0x4278b7
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x87c]
call fcn.0040b669
push ebx
push edi
lea ecx, [ebp - 0xd8]
call fcn.0040aa24
lea ecx, [ebp - 0x2b8]
mov dword [ebp - 4], 0x10
call fcn.00427f6f
jmp 0x427422
call fcn.0042f496
ret 0x10