Function at 0x428380
Capabilities:
Allocate thread local storage
Check mutex on windows
Get graphical window text
Shutdown system

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xfc
mov dword [esp], 0
call sub.KERNEL32.dll_GetModuleHandleW
sub esp, 4
mov dword [0x45a930], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1000
mov dword [esp], 0
call sub.KERNEL32.dll_HeapCreate
sub esp, 0xc
mov dword [0x45a934], eax
call fcn.0042baab
call fcn.00443f70
call fcn.00443800
call fcn.004429a1
call fcn.00440ca0
call fcn.0043eddc
call fcn.0043e680
call fcn.0043dede
call fcn.0043d678
call fcn.0043d305
call fcn.0043d241
call fcn.0043cfa7
call fcn.0043c472
call fcn.0043be7e
call fcn.0043bbb0
call fcn.0043a985
call fcn.0043995c
call fcn.00436f43
call fcn.0042fbf7
call fcn.0042e5c0
call fcn.0042e1b7
call fcn.0042d8c6
call fcn.0042cfce
call fcn.0042c645
call fcn.0042c19d
call fcn.0042bbc7
mov dword [esp + 4], 0x45a8b0
mov dword [esp], str.DC1C5A9C_E88A_4dde_A5A1_60F82A20AEF7
call sub.ole32.dll_CLSIDFromString
sub esp, 8
mov dword [esp + 4], 0x45a88c
mov dword [esp], str.d57c7288_d4ad_4768_be02_9d969532d960
call sub.ole32.dll_IIDFromString
sub esp, 8
mov dword [esp + 4], 0x45a7b8
mov dword [esp], str.43826d1e_e718_42ee_bc55_a1e261c37bfe
call sub.ole32.dll_IIDFromString
sub esp, 8
mov dword [esp + 4], 0x45a830
mov dword [esp], str.1CF2B120_547D_101B_8E65_08002B2BD119
call sub.ole32.dll_IIDFromString
sub esp, 8
mov dword [esp + 4], 0x45a87c
mov dword [esp], str.00000000_0000_0000_0000_000000000000
call sub.ole32.dll_CLSIDFromString
sub esp, 8
mov dword [esp + 4], 0x45a810
mov dword [esp], str.88d96a05_f192_11d4_a65f_0040963251e5
call sub.ole32.dll_CLSIDFromString
sub esp, 8
mov dword [esp + 4], 0x45a7e0
mov dword [esp], str.2933BF96_7B36_11d2_B20E_00C04F983E60
call sub.ole32.dll_IIDFromString
sub esp, 8
mov byte [0x45a915], 0
mov byte [0x45a914], 0
mov dword [esp + 4], str.WimgApi.dll
mov dword [esp], 0x45a808
call fcn.00443ca0
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp], eax
call fcn.0042d172
sub esp, 4
call fcn.00443ad0
mov ebx, eax
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0043b329
sub esp, 8
mov dword [esp], str.x86libwim_15.dll
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x45a8f4
call fcn.00443b80
sub esp, 8
mov dword [0x45a870], 0
mov dword [0x45a8e0], 0
mov byte [0x45a860], 3
mov dword [esp + 0xc], 8
mov dword [esp + 8], 0x45202c
mov dword [esp + 4], 0x45a94c
mov dword [esp], 4
call fcn.0043d697
sub esp, 0x10
mov dword [esp + 0xc], 8
mov dword [esp + 8], 0x45202c
mov dword [esp + 4], 0x45a944
mov dword [esp], 4
call fcn.0043d697
sub esp, 0x10
mov dword [esp + 0xc], 8
mov dword [esp + 8], 0x45202c
mov dword [esp + 4], 0x45a93c
mov dword [esp], 4
call fcn.0043d697
sub esp, 0x10
mov dword [esp + 4], str.INDEX:R:
mov dword [esp], 0x45a7cc
call fcn.00443ca0
sub esp, 8
mov dword [esp + 4], 0x4574e4
mov eax, dword [0x45a7cc]
mov dword [esp], eax
call fcn.00441510
sub esp, 8
add eax, 1
mov dword [0x45a85c], eax
mov dword [esp + 4], str.NAME:L:
mov dword [esp], 0x45a848
call fcn.00443ca0
sub esp, 8
mov dword [esp + 4], 0x4574e4
mov eax, dword [0x45a848]
mov dword [esp], eax
call fcn.00441510
sub esp, 8
add eax, 1
mov dword [0x45a8d0], eax
mov dword [esp + 4], 0x455000
mov dword [esp], 0x45a8f0
call fcn.00443ca0
sub esp, 8
mov dword [esp + 4], 0x4574e4
mov eax, dword [0x45a8f0]
mov dword [esp], eax
call fcn.00441510
sub esp, 8
add eax, 1
mov dword [0x45a7d8], eax
mov dword [esp + 4], str.HardwareDescription:L:
mov dword [esp], 0x45a7b0
call fcn.00443ca0
sub esp, 8
mov dword [esp + 4], 0x4574e4
mov eax, dword [0x45a7b0]
mov dword [esp], eax
call fcn.00441510
sub esp, 8
add eax, 1
mov dword [0x45a82c], eax
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x24
call fcn.00401120
sub esp, 8
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x45a7c8
call fcn.00443b80
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x25
call fcn.00401120
sub esp, 8
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x45a89c
call fcn.00443b80
sub esp, 8
call fcn.00443980
mov eax, dword [0x45a7c8]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp + 4], 3
mov dword [esp], 0x45a8d4
call fcn.00443de0
sub esp, 0xc
call fcn.00443980
mov eax, dword [0x45a89c]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], str.Shell32.dll
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x45a8e8
call fcn.00443b80
sub esp, 8
call fcn.00443980
mov eax, dword [0x45a89c]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], str.imageres.dll
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x45a84c
call fcn.00443b80
sub esp, 8
call fcn.00443980
mov eax, dword [0x45a89c]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], 0x457b40
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x45a824
call fcn.00443b80
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp], eax
call fcn.0042d172
sub esp, 4
call fcn.00443ad0
mov ebx, eax
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0043b329
sub esp, 8
mov dword [esp], str.Wiminfo.icl
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x45a8fc
call fcn.00443b80
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp], eax
call fcn.0042d172
sub esp, 4
call fcn.00443ad0
mov ebx, eax
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0043b329
sub esp, 8
mov dword [esp], str.Wiminfo.icl
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x45a7d0
call fcn.00443b80
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp], eax
call fcn.0042d172
sub esp, 4
call fcn.00443ad0
mov ebx, eax
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0043b329
sub esp, 8
mov dword [esp], str.Wiminfo.icl
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x45a844
call fcn.00443b80
sub esp, 8
mov eax, dword [0x45a8fc]
mov dword [esp], eax
call fcn.0043ab11
sub esp, 4
not eax
not edx
or edx, eax
je 0x4291f0
mov eax, dword [0x45a7d0]
mov dword [esp], eax
call fcn.0043ab11
sub esp, 4
not eax
not edx
or edx, eax
je 0x429228
mov eax, dword [0x45a844]
mov dword [esp], eax
call fcn.0043ab11
sub esp, 4
not eax
not edx
or edx, eax
je 0x429260
mov dword [0x45a90c], 0xffffffff
mov dword [esp + 8], 0xdc
mov dword [esp + 4], 0xe1
mov dword [esp], 0xe1
call fcn.0043d22c
sub esp, 0xc
mov dword [0x45a910], eax
mov dword [0x45a850], 0xffffffff
mov dword [esp + 8], 0xe1
mov dword [esp + 4], 0xfe
mov dword [esp], 0xfe
call fcn.0043d22c
sub esp, 0xc
mov dword [0x45a854], eax
mov dword [0x45a820], 0xffffffff
mov dword [esp + 8], 0xe1
mov dword [esp + 4], 0xfe
mov dword [esp], 0xfe
call fcn.0043d22c
sub esp, 0xc
mov dword [0x45a828], eax
mov dword [0x45a8a4], 0xffffffff
mov dword [esp + 8], 0xe0
mov dword [esp + 4], 0xf5
mov dword [esp], 0xfe
call fcn.0043d22c
sub esp, 0xc
mov dword [0x45a8ac], eax
mov dword [0x45a8dc], 0xffffffff
mov dword [esp + 8], 0xf6
mov dword [esp + 4], 0xfa
mov dword [esp], 0xfb
call fcn.0043d22c
sub esp, 0xc
mov dword [0x45a8e4], eax
mov ecx, 0xffffffff
mov word [0x45a8ec], cx
mov dword [0x45a868], 0
mov dword [esp + 0x10], 0x45a920
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0xa
mov dword [esp + 4], 3
mov dword [esp], 0x208
call fcn.0043cfd0
sub esp, 0x14
mov dword [esp + 0x10], 0x45a91c
mov dword [esp + 0xc], 0x458120
mov dword [esp + 8], 8
mov dword [esp + 4], 3
mov dword [esp], 4
call fcn.0043cfd0
sub esp, 0x14
mov dword [esp + 8], 0x45a954
mov dword [esp + 4], 0x104
mov eax, dword [0x45a920]
mov dword [esp], eax
call fcn.00443e20
sub esp, 0xc
mov dword [esp + 8], 0x45a954
mov dword [esp + 4], 0x104
mov eax, dword [0x45a920]
add eax, 0x208
mov dword [esp], eax
call fcn.00443e20
sub esp, 0xc
mov dword [esp + 4], 0x45a954
mov eax, dword [0x45a91c]
mov dword [esp], eax
call fcn.00443ca0
sub esp, 8
mov dword [esp + 4], 0x45a954
mov eax, dword [0x45a91c]
add eax, 4
mov dword [esp], eax
call fcn.00443ca0
sub esp, 8
mov dword [esp + 0x4c], str.5b6748d6_2392_4836_ae12_642e90f59183
call fcn.004438e0
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
lea eax, [esp + 0x4c]
mov dword [esp], eax
call fcn.00443d50
sub esp, 8
mov eax, dword [esp + 0x4c]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.KERNEL32.dll_CreateMutexW
sub esp, 0xc
mov ebx, eax
call sub.KERNEL32.dll_GetLastError
cmp eax, 0xb7
jne 0x428bea
test ebx, ebx
jne 0x429298
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
call fcn.00416f10
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x455550
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00401a90
sub esp, 0x10
call fcn.00443ad0
mov dword [esp], eax
call fcn.004413d0
sub esp, 4
mov esi, eax
mov dword [esp + 0x34], eax
call fcn.00443a30
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x45532c
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00401a90
sub esp, 0x10
call fcn.00443ad0
mov dword [esp], eax
call fcn.004413d0
sub esp, 4
mov ebx, eax
mov dword [esp + 0x30], eax
call fcn.00443a30
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x45531c
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00401a90
sub esp, 0x10
call fcn.00443ad0
mov dword [esp], eax
call fcn.004413d0
sub esp, 4
mov ebp, eax
mov dword [esp + 0x2c], eax
call fcn.00443a30
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x455324
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00401a90
sub esp, 0x10
call fcn.00443ad0
mov dword [esp], eax
call fcn.004413d0
sub esp, 4
mov edi, eax
mov dword [esp + 0x20], eax
call fcn.00443a30
call fcn.004438e0
xor edx, edx
xor eax, eax
mov dword [esp + eax + 0x70], edx
add eax, 4
cmp eax, 0x20
jb 0x428d4f
call fcn.004438e0
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
call sub.USER32.dll_GetDesktopWindow
lea edx, [esp + 0x60]
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.USER32.dll_GetWindowRect
sub esp, 8
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x20]
test eax, eax
setle al
mov edx, dword [esp + 0x2c]
test edx, edx
setle dl
or edx, eax
mov byte [esp + 0x3b], dl
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x20]
add edx, eax
cmp edx, ecx
setg al
or al, byte [esp + 0x3b]
jne 0x428de8
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
add eax, edx
mov edx, 0x90cf0000
mov ecx, dword [esp + 0x3c]
cmp eax, ecx
jle 0x428dfb
mov edx, 0x90cf0001
mov esi, 0x258
mov ebx, 0x35c
xor ebp, ebp
xor edi, edi
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], str.Wim_Info_v0.9.8.3_x86
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 8], ebp
mov dword [esp + 4], edi
mov dword [esp], 0
call fcn.004394e4
sub esp, 0x1c
test eax, eax
jne 0x4292c0
call fcn.004438e0
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
mov eax, dword [0x45a85c]
mov dword [esp + 8], eax
mov eax, dword [0x45a7cc]
mov dword [esp + 4], eax
mov dword [esp], 7
call fcn.00402c00
sub esp, 0xc
mov eax, dword [0x45a8d0]
mov dword [esp + 8], eax
mov eax, dword [0x45a848]
mov dword [esp + 4], eax
mov dword [esp], 8
call fcn.00402c00
sub esp, 0xc
mov eax, dword [0x45a7d8]
mov dword [esp + 8], eax
mov eax, dword [0x45a8f0]
mov dword [esp + 4], eax
mov dword [esp], 9
call fcn.00402c00
sub esp, 0xc
mov dword [esp + 0xc], 1
mov eax, dword [0x45a85c]
mov dword [esp + 8], eax
mov eax, dword [0x45a7cc]
mov dword [esp + 4], eax
mov dword [esp], 7
call fcn.00417250
sub esp, 0x10
mov dword [esp + 0xc], 1
mov eax, dword [0x45a8d0]
mov dword [esp + 8], eax
mov eax, dword [0x45a848]
mov dword [esp + 4], eax
mov dword [esp], 8
call fcn.00417250
sub esp, 0x10
mov dword [esp + 0xc], 1
mov eax, dword [0x45a7d8]
mov dword [esp + 8], eax
mov eax, dword [0x45a8f0]
mov dword [esp + 4], eax
mov dword [esp], 9
call fcn.00417250
sub esp, 0x10
mov dword [esp], 1
call fcn.00402e10
sub esp, 4
mov dword [esp], str.QueryCancelAutoPlay
call sub.USER32.dll_RegisterWindowMessageW
sub esp, 4
mov dword [0x45a868], eax
mov dword [esp + 4], 1
mov dword [esp], eax
call sub.USER32.dll_ChangeWindowMessageFilter
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], 0x233
call sub.USER32.dll_ChangeWindowMessageFilter
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], 0x4a
call sub.USER32.dll_ChangeWindowMessageFilter
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], 0x49
call sub.USER32.dll_ChangeWindowMessageFilter
sub esp, 8
mov dword [esp + 4], 0xffffffec
mov eax, dword [0x45a7ac]
mov dword [esp], eax
call sub.USER32.dll_GetWindowLongW
sub esp, 8
or eax, 0x10
mov dword [esp + 8], eax
mov dword [esp + 4], 0xffffffec
mov eax, dword [0x45a7ac]
mov dword [esp], eax
call sub.USER32.dll_SetWindowLongW
sub esp, 0xc
mov dword [esp + 4], 0
mov dword [esp], 0x4027d0
call fcn.00439869
sub esp, 8
mov dword [esp + 4], 2
mov dword [esp], str.SeRestorePrivilege
call fcn.0040bd70
sub esp, 8
mov dword [esp + 4], 2
mov dword [esp], str.SeBackupPrivilege
call fcn.0040bd70
sub esp, 8
mov dword [esp], 0xa
call fcn.0042fd7d
sub esp, 4
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x31
mov dword [esp], eax
call sub.USER32.dll_SendMessageW
sub esp, 0x10
mov dword [0x45a908], eax
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.FontName
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00401a90
sub esp, 0x10
call fcn.004439d0
mov dword [esp + 4], eax
lea eax, [esp + 0x48]
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov dword [esp], 0x45a954
call fcn.00443da0
mov ebx, eax
lea esi, [esp + 0x58]
test eax, eax
je 0x42a3a0
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.ScanWithISO
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00401a90
sub esp, 0x10
call fcn.00443ad0
mov dword [esp], eax
call fcn.004413d0
sub esp, 4
mov ebx, eax
call fcn.00443a30
mov dword [esp + 4], ebx
mov dword [esp], 0x10
call fcn.0042fd99
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.ScanSkipOSDrive
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00401a90
sub esp, 0x10
call fcn.00443ad0
mov dword [esp], eax
call fcn.004413d0
sub esp, 4
mov ebx, eax
call fcn.00443a30
mov dword [esp + 4], ebx
mov dword [esp], 0xf
call fcn.0042fd99
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.ScanDepth
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00401a90
sub esp, 0x10
call fcn.00443ad0
mov dword [esp], eax
call fcn.004413d0
sub esp, 4
mov ebx, eax
call fcn.00443a30
mov eax, ebx
cmp ebx, 4
jg 0x42a4d8
test ebx, ebx
jg 0x42a4c8
mov edi, 2
xor ebp, ebp
mov eax, 2
jmp 0x42a4e4
call fcn.00443980
mov eax, dword [0x45a8e8]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x45a8fc
call fcn.00443b80
sub esp, 8
jmp 0x428987
call fcn.00443980
mov eax, dword [0x45a84c]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x45a7d0
call fcn.00443b80
sub esp, 8
jmp 0x4289a3
call fcn.00443980
mov eax, dword [0x45a824]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], 0x45a844
call fcn.00443b80
sub esp, 8
jmp 0x4289bf
mov dword [esp], ebx
call sub.KERNEL32.dll_CloseHandle
sub esp, 4
mov dword [0x45a938], 0xb7
call fcn.00428300
mov dword [esp], 0
call fcn.004394c8
sub esp, 4
mov dword [0x45a7ac], eax
mov dword [esp], eax
call sub.USER32.dll_GetDC
sub esp, 4
mov dword [0x45a7fc], eax
mov dword [esp + 4], 0x58
mov dword [esp], eax
call sub.GDI32.dll_GetDeviceCaps
sub esp, 8
mov dword [esp + 0x20], eax
fild dword [esp + 0x20]
fdiv dword [0x446574]
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fld st(0)
fstp qword [esp + 0x20]
mov dword [esp + 8], 2
fmul dword [0x446580]
fstp qword [esp]
call fcn.00443830
sub esp, 0xc
fstp qword [esp + 0x58]
fld qword [esp + 0x58]
fistp qword [esp + 0x90]
mov edi, dword [esp + 0x90]
mov dword [esp + 8], edi
mov dword [esp + 4], 0xffffffd2
mov eax, dword [0x45a8fc]
mov dword [esp], eax
call fcn.00401f60
sub esp, 0xc
mov dword [0x45a874], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0xfffffbff
mov eax, dword [0x45a7d0]
mov dword [esp], eax
call fcn.00401f60
sub esp, 0xc
mov dword [0x45a804], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0xffffbe87
mov eax, dword [0x45a8fc]
mov dword [esp], eax
call fcn.00401f60
sub esp, 0xc
mov dword [0x45a840], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0xffffff0e
mov eax, dword [0x45a8fc]
mov dword [esp], eax
call fcn.00401f60
sub esp, 0xc
mov dword [0x45a7a8], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0xffffff0f
mov eax, dword [0x45a8fc]
mov dword [esp], eax
call fcn.00401f60
sub esp, 0xc
mov dword [0x45a80c], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0xffffff0d
mov eax, dword [0x45a8fc]
mov dword [esp], eax
call fcn.00401f60
sub esp, 0xc
mov dword [0x45a8a0], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0xfffffeee
mov eax, dword [0x45a8fc]
mov dword [esp], eax
call fcn.00401f60
sub esp, 0xc
mov dword [0x45a8a8], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0xffffff1e
mov eax, dword [0x45a8fc]
mov dword [esp], eax
call fcn.00401f60
sub esp, 0xc
mov dword [0x45a858], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0xffffbe94
mov eax, dword [0x45a8fc]
mov dword [esp], eax
call fcn.00401f60
sub esp, 0xc
mov dword [0x45a900], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0xfffffff4
mov eax, dword [0x45a844]
mov dword [esp], eax
call fcn.00401f60
sub esp, 0xc
mov dword [0x45a864], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0xffffffd9
mov eax, dword [0x45a8fc]
mov dword [esp], eax
call fcn.00401f60
sub esp, 0xc
mov dword [0x45a7b4], eax
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp], eax
call fcn.0042d172
sub esp, 4
call fcn.00443ad0
mov dword [esp + 8], edi
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call fcn.00401f60
sub esp, 0xc
mov edi, eax
call fcn.00443a30
mov dword [0x45a878], edi
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0xffffeb42
mov eax, dword [0x45a7d0]
mov dword [esp], eax
call fcn.00401f60
sub esp, 0xc
mov dword [0x45a904], eax
mov dword [esp], 0
call fcn.004394c8
sub esp, 4
mov dword [esp + 8], 2
mov dword [esp + 4], eax
mov dword [esp], 0
call fcn.0042bbdb
sub esp, 0xc
mov dword [esp], 0
call fcn.0042bb01
sub esp, 4
mov dword [esp + 8], 0x401e90
mov dword [esp + 4], 0xfffffffc
mov dword [esp], eax
call sub.USER32.dll_SetWindowLongW
sub esp, 0xc
mov edi, eax
mov dword [esp], 0
call fcn.0042bb01
sub esp, 4
mov dword [esp + 8], edi
mov dword [esp + 4], str.oldproc
mov dword [esp], eax
call sub.USER32.dll_SetPropW
sub esp, 0xc
mov dword [esp], 0
call fcn.0042bb01
sub esp, 4
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0x454
mov dword [esp], eax
call sub.USER32.dll_SendMessageW
sub esp, 0x10
mov eax, dword [0x45a804]
mov dword [esp + 4], eax
mov dword [esp], 0
call fcn.0042c04f
sub esp, 8
mov eax, dword [0x45a874]
mov dword [esp + 4], eax
mov dword [esp], 1
call fcn.0042c04f
sub esp, 8
mov eax, dword [0x45a840]
mov dword [esp + 4], eax
mov dword [esp], 2
call fcn.0042c04f
sub esp, 8
call fcn.0042c061
mov eax, dword [0x45a7a8]
mov dword [esp + 4], eax
mov dword [esp], 3
call fcn.0042c04f
sub esp, 8
mov eax, dword [0x45a80c]
mov dword [esp + 4], eax
mov dword [esp], 4
call fcn.0042c04f
sub esp, 8
mov eax, dword [0x45a8a0]
mov dword [esp + 4], eax
mov dword [esp], 5
call fcn.0042c04f
sub esp, 8
mov eax, dword [0x45a8a8]
mov dword [esp + 4], eax
mov dword [esp], 6
call fcn.0042c04f
sub esp, 8
call fcn.0042c061
mov eax, dword [0x45a858]
mov dword [esp + 4], eax
mov dword [esp], 7
call fcn.0042c04f
sub esp, 8
call fcn.0042c061
mov eax, dword [0x45a900]
mov dword [esp + 4], eax
mov dword [esp], 8
call fcn.0042c04f
sub esp, 8
call fcn.0042c061
mov eax, dword [0x45a864]
mov dword [esp + 4], eax
mov dword [esp], 9
call fcn.0042c04f
sub esp, 8
call fcn.0042c061
mov eax, dword [0x45a904]
mov dword [esp + 4], eax
mov dword [esp], 0xa
call fcn.0042c04f
sub esp, 8
mov eax, dword [0x45a7b4]
mov dword [esp + 4], eax
mov dword [esp], 0xb
call fcn.0042c04f
sub esp, 8
mov eax, dword [0x45a878]
mov dword [esp + 4], eax
mov dword [esp], 0xc
call fcn.0042c04f
sub esp, 8
mov dword [esp + 0x74], 8
mov dword [esp + 0x70], 0x20
mov dword [esp], 0
call fcn.0042bb01
sub esp, 4
lea edi, [esp + 0x70]
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0xa
mov dword [esp + 4], 0x43f
mov dword [esp], eax
call sub.USER32.dll_SendMessageW
sub esp, 0x10
movzx eax, byte [esp + 0x81]
or eax, 8
mov byte [esp + 0x81], al
mov dword [esp], 0
call fcn.0042bb01
sub esp, 4
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0xa
mov dword [esp + 4], 0x440
mov dword [esp], eax
call sub.USER32.dll_SendMessageW
sub esp, 0x10
mov dword [esp], 0
call fcn.0042bb01
sub esp, 4
mov dword [esp + 0xc], 0
mov dword [esp + 8], 5
mov dword [esp + 4], 0x42f
mov dword [esp], eax
call sub.USER32.dll_SendMessageW
sub esp, 0x10
mov dword [esp + 8], str.Find_Files
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0042c098
sub esp, 0xc
mov dword [esp + 8], str.Open_WIM
mov dword [esp + 4], 1
mov dword [esp], 0
call fcn.0042c098
sub esp, 0xc
mov dword [esp + 8], str.Save_XML
mov dword [esp + 4], 2
mov dword [esp], 0
call fcn.0042c098
sub esp, 0xc
mov dword [esp + 8], 0x452378
mov dword [esp + 4], 3
mov dword [esp], 0
call fcn.0042c098
sub esp, 0xc
mov dword [esp + 8], str.Export
mov dword [esp + 4], 4
mov dword [esp], 0
call fcn.0042c098
sub esp, 0xc
mov dword [esp + 8], str.Apply
mov dword [esp + 4], 5
mov dword [esp], 0
call fcn.0042c098
sub esp, 0xc
mov dword [esp + 8], str.Window_Setup
mov dword [esp + 4], 6
mov dword [esp], 0
call fcn.0042c098
sub esp, 0xc
mov dword [esp + 8], str.Capture
mov dword [esp + 4], 7
mov dword [esp], 0
call fcn.0042c098
sub esp, 0xc
mov dword [esp + 8], 0x45255c
mov dword [esp + 4], 8
mov dword [esp], 0
call fcn.0042c098
sub esp, 0xc
mov dword [esp + 8], str.Dism_Driver
mov dword [esp + 4], 9
mov dword [esp], 0
call fcn.0042c098
sub esp, 0xc
mov dword [esp + 8], str.Font
mov dword [esp + 4], 0xb
mov dword [esp], 0
call fcn.0042c098
sub esp, 0xc
mov dword [esp + 8], 0x454d30
mov dword [esp + 4], 0xc
mov dword [esp], 0
call fcn.0042c098
sub esp, 0xc
mov dword [esp + 8], 0x4574e8
mov dword [esp + 4], 0xa
mov dword [esp], 0
call fcn.0042c098
sub esp, 0xc
mov dword [esp + 8], 1
mov dword [esp + 4], 2
mov dword [esp], 0
call fcn.0042bb1d
sub esp, 0xc
mov dword [esp + 8], 1
mov dword [esp + 4], 3
mov dword [esp], 0
call fcn.0042bb1d
sub esp, 0xc
mov dword [esp + 8], 1
mov dword [esp + 4], 4
mov dword [esp], 0
call fcn.0042bb1d
sub esp, 0xc
mov dword [esp + 8], 1
mov dword [esp + 4], 5
mov dword [esp], 0
call fcn.0042bb1d
sub esp, 0xc
mov dword [esp + 8], 1
mov dword [esp + 4], 6
mov dword [esp], 0
call fcn.0042bb1d
sub esp, 0xc
mov dword [esp], 0
call fcn.004394c8
sub esp, 4
mov dword [esp + 4], eax
mov dword [esp], 1
call fcn.0042c47a
sub esp, 8
mov dword [esp], 0x64
call fcn.0042c9b9
sub esp, 4
mov dword [esp + 0xc], 5
mov dword [esp + 8], str.Image_Count
mov dword [esp + 4], 0
mov dword [esp], 1
call fcn.0042c2f2
sub esp, 0x10
mov dword [esp], 0x28
call fcn.0042c9b9
sub esp, 4
mov dword [esp], 0x64
call fcn.0042c9b9
sub esp, 4
mov dword [esp + 0xc], 5
mov dword [esp + 8], str.TotalParts
mov dword [esp + 4], 2
mov dword [esp], 1
call fcn.0042c2f2
sub esp, 0x10
mov dword [esp], 0x28
call fcn.0042c9b9
sub esp, 4
mov dword [esp], 0x32
call fcn.0042c9b9
sub esp, 4
mov dword [esp + 0xc], 5
mov dword [esp + 8], 0x45629c
mov dword [esp + 4], 4
mov dword [esp], 1
call fcn.0042c2f2
sub esp, 0x10
mov dword [esp], 0x46
call fcn.0042c9b9
sub esp, 4
mov dword [esp], 0x32
call fcn.0042c9b9
sub esp, 4
mov dword [esp + 0xc], 5
mov dword [esp + 8], 0x454f38
mov dword [esp + 4], 6
mov dword [esp], 1
call fcn.0042c2f2
sub esp, 0x10
mov dword [esp], 0xffff0001
call fcn.0042c9b9
sub esp, 4
mov dword [esp], 0
call fcn.0042bac7
sub esp, 4
mov ebp, eax
mov dword [esp], 1
call fcn.0042c2b8
sub esp, 4
mov edi, eax
mov dword [esp], 0
call fcn.0042bac7
sub esp, 4
sub esi, ebp
sub esi, edi
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 4
call fcn.004330d7
sub esp, 0x14
mov dword [esp], 4
call fcn.0042fd7d
sub esp, 4
mov dword [esp + 8], 0x80000
mov dword [esp + 4], 0xffffffec
mov dword [esp], eax
call sub.USER32.dll_SetWindowLongW
sub esp, 0xc
mov dword [esp + 0x18], 0x40
mov dword [esp + 0x14], 0x45a954
mov dword [esp + 0x10], 0x17
mov dword [esp + 0xc], 0x1b
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 5
call fcn.00432ccb
sub esp, 0x1c
mov dword [esp + 0x18], 0x800
mov dword [esp + 0x14], 0x45a954
mov dword [esp + 0x10], 0x17
lea eax, [ebx - 0x1b]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1b
mov dword [esp], 6
call fcn.004335bd
sub esp, 0x1c
mov dword [esp], 4
call fcn.0042ff95
sub esp, 4
mov dword [esp + 0x1c], 0x4000000c
mov dword [esp + 0x18], 0x1ae
mov dword [esp + 0x14], 0x456da4
sub eax, 0x18
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0x18
mov dword [esp + 4], 0
mov dword [esp], 8
call fcn.004349cb
sub esp, 0x20
mov dword [esp], 8
call fcn.0042fd7d
sub esp, 4
mov dword [esp + 8], 0x80000
mov dword [esp + 4], 0xffffffec
mov dword [esp], eax
call sub.USER32.dll_SetWindowLongW
sub esp, 0xc
mov dword [esp + 0x14], 0x800
mov dword [esp + 0x10], 0x17
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0xa
call fcn.004325c7
sub esp, 0x18
mov dword [esp], 0xa
call fcn.0042fd7d
sub esp, 4
mov dword [esp + 0xc], 0x17
mov dword [esp + 8], 0
mov dword [esp + 4], 0x153
mov dword [esp], eax
call sub.USER32.dll_SendMessageW
sub esp, 0x10
mov dword [esp], 4
call fcn.0042ff95
sub esp, 4
mov dword [esp + 0x1c], 0x4000000c
mov dword [esp + 0x18], 0x64
mov dword [esp + 0x14], 0x455814
sub eax, 0x18
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0x18
mov dword [esp + 4], 0
mov dword [esp], 7
call fcn.004349cb
sub esp, 0x20
mov dword [esp], 7
call fcn.0042fd7d
sub esp, 4
mov dword [esp + 8], 0x80000
mov dword [esp + 4], 0xffffffec
mov dword [esp], eax
call sub.USER32.dll_SetWindowLongW
sub esp, 0xc
mov dword [esp], 4
call fcn.0042ff95
sub esp, 4
mov dword [esp + 0x1c], 0x4000000c
mov dword [esp + 0x18], 0x64
mov dword [esp + 0x14], 0x456da4
sub eax, 0x18
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0x18
mov dword [esp + 4], 0
mov dword [esp], 9
call fcn.004349cb
sub esp, 0x20
mov dword [esp + 0x18], 2
mov dword [esp + 0x14], 0x454c94
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x64
mov dword [esp + 8], 2
mov dword [esp + 4], 0
mov dword [esp], 0xc
call fcn.00433c13
sub esp, 0x1c
mov dword [esp + 0x1c], 3
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x32
mov dword [esp + 8], 2
mov dword [esp + 4], 0x6e
mov dword [esp], 0xd
call fcn.004372e6
sub esp, 0x20
mov dword [esp + 0x14], str.ISO
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x64
mov dword [esp + 8], 2
mov dword [esp + 4], 0xaa
mov dword [esp], 0x10
call fcn.00433367
sub esp, 0x18
mov dword [esp + 0x14], 0x454a44
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0xaa
mov dword [esp + 8], 2
mov dword [esp + 4], 0x10e
mov dword [esp], 0xf
call fcn.00433367
sub esp, 0x18
mov dword [esp + 0x14], 0x453cbc
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x5a
mov dword [esp + 8], 2
mov dword [esp + 4], 0x1ea
mov dword [esp], 0xe
call fcn.00432db0
sub esp, 0x18
mov dword [esp + 0x14], 0x455c58
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x5a
mov dword [esp + 8], 2
mov dword [esp + 4], 0x24e
mov dword [esp], 0x11
call fcn.00432db0
sub esp, 0x18
mov dword [esp + 0x14], 0x457ea4
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], 0x5a
mov dword [esp + 8], 2
mov dword [esp + 4], 0x2b2
mov dword [esp], 0x12
call fcn.00432db0
sub esp, 0x18
call fcn.004333c6
mov dword [esp + 8], 2
fld qword [esp + 0x20]
fmul dword [0x446578]
fstp qword [esp]
call fcn.00443830
sub esp, 0xc
fstp qword [esp + 0x58]
fld qword [esp + 0x58]
fistp qword [esp + 0x90]
mov eax, dword [esp + 0x90]
mov dword [esp + 8], eax
mov dword [esp + 4], 0xffffff01
mov eax, dword [0x45a8fc]
mov dword [esp], eax
call fcn.00401f60
sub esp, 0xc
mov dword [0x45a918], eax
mov dword [esp], 5
call fcn.0042fd7d
sub esp, 4
mov edx, dword [0x45a918]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 1
mov dword [esp + 4], 0xf7
mov dword [esp], eax
call sub.USER32.dll_SendMessageW
sub esp, 0x10
mov dword [esp + 4], 0x4551c8
mov dword [esp], 5
call fcn.004353e7
sub esp, 8
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0xffffff46
mov eax, dword [0x45a8fc]
mov dword [esp], eax
call fcn.00401f60
sub esp, 0xc
mov dword [0x45a7f0], eax
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0xffffff10
mov eax, dword [0x45a8fc]
mov dword [esp], eax
call fcn.00401f60
sub esp, 0xc
mov dword [0x45a800], eax
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0xfffffec0
mov eax, dword [0x45a8fc]
mov dword [esp], eax
call fcn.00401f60
sub esp, 0xc
mov dword [0x45a7f8], eax
mov dword [esp], 2
call fcn.0042f733
sub esp, 4
mov eax, dword [0x45a7a8]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x452378
mov dword [esp], 3
call fcn.0042f7c1
sub esp, 0xc
mov eax, dword [0x45a80c]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x453dc4
mov dword [esp], 4
call fcn.0042f7c1
sub esp, 0xc
call fcn.0042f86a
mov eax, dword [0x45a7f0]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x453774
mov dword [esp], 0x10
call fcn.0042f7c1
sub esp, 0xc
mov eax, dword [0x45a800]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x457408
mov dword [esp], 0x11
call fcn.0042f7c1
sub esp, 0xc
call fcn.0042f86a
mov eax, dword [0x45a900]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x453624
mov dword [esp], 8
call fcn.0042f7c1
sub esp, 0xc
call fcn.0042f86a
mov eax, dword [0x45a800]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x457188
mov dword [esp], 0x12
call fcn.0042f7c1
sub esp, 0xc
mov eax, dword [0x45a7f8]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x454950
mov dword [esp], 0x13
call fcn.0042f7c1
sub esp, 0xc
mov dword [esp], 3
call fcn.0042f733
sub esp, 4
mov eax, dword [0x45a904]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x454b54
mov dword [esp], 0xe
call fcn.0042f7c1
sub esp, 0xc
mov eax, dword [0x45a800]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x456868
mov dword [esp], 0xf
call fcn.0042f7c1
sub esp, 0xc
mov dword [esp + 8], 1
mov dword [esp + 4], 0xe
mov dword [esp], 3
call fcn.0042e505
sub esp, 0xc
mov dword [esp + 4], str.WimFiles
mov dword [esp], 0xa
call fcn.00402570
sub esp, 8
call fcn.004438e0
mov dword [esp + 0x90], 0
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.DirExList
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00401a90
sub esp, 0x10
call fcn.004439d0
mov dword [esp + 4], eax
lea ebx, [esp + 0x90]
mov dword [esp], ebx
call fcn.00443b80
sub esp, 8
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov dword [esp], 0x45a954
call fcn.00443da0
test eax, eax
jne 0x42a290
mov ebx, 1
jmp 0x42a360
call fcn.00443980
mov eax, dword [esp + 0x90]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
mov dword [esp], str.Windows_nSystem32_nSysWOW64_nWinSxS_nProgram_Files_nProgram_Files__x86__nProgramData_nMusic_nVideo_nPicture_n_WinREAgent_n_WINDOWS.BT_n_windows.ls_n_Windows.WS_nSystem_Volume_Information_nRecycled_n_Recycle.Bin_nDocuments_And_Settings_nBoot_nEFI_nTemp_ndlmanifests_netwproviders_nreplacementmanifests
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00443b80
sub esp, 8
mov dword [esp + 0x10], 7
mov eax, dword [esp + 0x90]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.DirExList
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00416b20
sub esp, 0x14
jmp 0x42a283
mov eax, dword [0x45a93c]
mov dword [esp], eax
call fcn.0043d5da
sub esp, 4
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x4580d4
mov dword [esp + 4], ebx
mov eax, dword [esp + 0x90]
mov dword [esp], eax
call fcn.004412a0
sub esp, 0x10
call fcn.004439d0
mov dword [esp + 4], eax
mov eax, dword [0x45a940]
add eax, 8
mov dword [esp], eax
call fcn.00443b80
sub esp, 8
add ebx, 1
mov dword [esp + 4], 0x4580d4
mov eax, dword [esp + 0x90]
mov dword [esp], eax
call fcn.00441510
sub esp, 8
add eax, 1
cmp eax, ebx
jge 0x42a300
mov eax, dword [esp + 0x90]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
jmp 0x428e2e
mov eax, dword [esp + 0x48]
mov dword [esp + 0x58], eax
call fcn.004438e0
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
lea esi, [esp + 0x58]
mov dword [esp], esi
call fcn.00443d50
sub esp, 8
lea edi, [esp + 0x90]
mov ecx, 0x17
mov eax, ebx
rep stosd dword es:[edi], eax
mov byte [esp + 0xa7], 1
mov byte [esp + 0xa8], 4
mov byte [esp + 0xab], 0
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
lea ebx, [esp + 0x90]
lea eax, [esp + 0xac]
mov dword [esp], eax
call fcn.00443790
sub esp, 8
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x401000
mov dword [esp + 4], ebx
mov eax, dword [0x45a7fc]
mov dword [esp], eax
call sub.GDI32.dll_EnumFontFamiliesExW
sub esp, 0x14
mov ebx, eax
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
test ebx, ebx
je 0x4290bb
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.FontSize
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00401a90
sub esp, 0x10
call fcn.00443ad0
mov dword [esp], eax
call fcn.004413d0
sub esp, 4
mov ebx, eax
call fcn.00443a30
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov eax, dword [0x45a7ac]
mov dword [esp], eax
call fcn.004031e0
sub esp, 0xc
jmp 0x4290bb
mov edi, ebx
mov ebp, ebx
sar ebp, 0x1f
jmp 0x42a4e4
mov edi, 4
xor ebp, ebp
mov eax, 4
mov dword [esp + 4], eax
mov dword [esp], 0xd
call fcn.0042fd99
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp], edi
mov dword [esp + 4], ebp
call fcn.00440fa0
sub esp, 0xc
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 4], eax
mov dword [esp], 0xd
call fcn.0043000b
sub esp, 8
call fcn.00443a30
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.PictureFiles
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00401a90
sub esp, 0x10
call fcn.00443b50
call fcn.004439d0
mov dword [esp + 4], eax
lea ebx, [esp + 0x44]
mov dword [esp], ebx
call fcn.00443b80
sub esp, 8
mov dword [esp + 4], 0x4580d4
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call fcn.00441510
sub esp, 8
test eax, eax
jne 0x42a660
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call fcn.0043ab11
sub esp, 4
test edx, edx
js 0x42a6b0
mov dword [esp + 4], 0x45a954
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call fcn.0040ea40
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.00439b8b
sub esp, 8
call fcn.004438e0
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov dword [esp + 4], 0x45a954
lea edi, [esp + 0x50]
mov dword [esp], edi
call fcn.00443ca0
sub esp, 8
mov dword [esp + 4], 0x45a954
lea ebp, [esp + 0x54]
mov dword [esp], ebp
call fcn.00443ca0
sub esp, 8
mov dword [esp + 4], 0x45a954
mov dword [esp], esi
call fcn.00443ca0
sub esp, 8
xor ebx, ebx
jmp 0x42a765
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x4580d4
mov dword [esp + 4], 1
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call fcn.004412a0
sub esp, 0x10
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.00443b80
sub esp, 8
jmp 0x42a5ae
call fcn.00403310
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov eax, dword [0x45a7ac]
mov dword [esp], eax
call sub.USER32.dll_InvalidateRect
sub esp, 0xc
mov dword [esp + 0xc], 0x301
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [0x45a7ac]
mov dword [esp], eax
call sub.USER32.dll_RedrawWindow
sub esp, 0x10
jmp 0x42a5dc
call fcn.00443980
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call fcn.00443c10
sub esp, 4
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0042da6e
sub esp, 8
call fcn.004439d0
mov dword [esp], 0x4574e4
call fcn.00443c10
sub esp, 4
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.00443b80
sub esp, 8
add ebx, 1
call fcn.0042da5a
cmp eax, ebx
jg 0x42a708
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4574e4
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call fcn.00441100
sub esp, 0xc
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.00443b80
sub esp, 8
mov ebx, 1
jmp 0x42a828
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0x45a954
mov dword [esp + 4], str._ImageFile:
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00441610
sub esp, 0x14
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00443b80
sub esp, 8
mov dword [esp + 8], str.WIM_files__.wim__.esd__.iso_.wim__.esd__.iso
mov dword [esp + 4], 0
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.0041a1f0
sub esp, 0xc
add ebx, 1
mov dword [esp + 4], 0x4574e4
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call fcn.00441510
sub esp, 8
add eax, 1
cmp eax, ebx
jl 0x42a9c8
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x4574e4
mov dword [esp + 4], ebx
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call fcn.004412a0
sub esp, 0x10
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00443b80
sub esp, 8
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.00443980
call fcn.004439d0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.004411a0
sub esp, 8
call fcn.00443ad0
mov ebp, eax
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.00441280
sub esp, 8
call fcn.004439d0
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00443b80
sub esp, 8
mov dword [esp + 0xc], 1
mov dword [esp + 8], 1
mov dword [esp + 4], str._ImageFile:
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00441c20
sub esp, 0x10
test eax, eax
jne 0x42a7b8
mov dword [esp + 0xc], 1
mov dword [esp + 8], 1
mov dword [esp + 4], str._RunCap
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00441c20
sub esp, 0x10
test eax, eax
je 0x42a988
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.004046e0
sub esp, 8
mov dword [esp + 0xc], 0x258
mov dword [esp + 8], 0x2fd
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0040ee60
sub esp, 0x10
jmp 0x42a825
mov dword [esp + 0xc], 1
mov dword [esp + 8], 1
mov dword [esp + 4], str._EnableWIMBOOT
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00441c20
sub esp, 0x10
test eax, eax
je 0x42a825
mov byte [0x45a914], 1
jmp 0x42a825
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x54]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call fcn.00443c70
sub esp, 4
call fcn.0041ee80
mov dword [esp + 4], str.WimFiles
mov dword [esp], 0xa
call fcn.00416d60
sub esp, 8
mov eax, dword [0x45a7f0]
mov dword [esp], eax
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov eax, dword [0x45a904]
mov dword [esp], eax
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov eax, dword [0x45a800]
mov dword [esp], eax
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov eax, dword [0x45a7f8]
mov dword [esp], eax
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov eax, dword [0x45a918]
mov dword [esp], eax
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov eax, dword [0x45a874]
mov dword [esp], eax
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov eax, dword [0x45a840]
mov dword [esp], eax
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov eax, dword [0x45a7a8]
mov dword [esp], eax
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov eax, dword [0x45a80c]
mov dword [esp], eax
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov eax, dword [0x45a858]
mov dword [esp], eax
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov eax, dword [0x45a8a0]
mov dword [esp], eax
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov eax, dword [0x45a8a8]
mov dword [esp], eax
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov eax, dword [0x45a900]
mov dword [esp], eax
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov eax, dword [0x45a864]
mov dword [esp], eax
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov eax, dword [0x45a7b4]
mov dword [esp], eax
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov eax, dword [0x45a878]
mov dword [esp], eax
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov eax, dword [0x45a7fc]
mov dword [esp + 4], eax
mov eax, dword [0x45a7ac]
mov dword [esp], eax
call sub.USER32.dll_ReleaseDC
sub esp, 8
mov eax, dword [0x45a7f4]
mov dword [esp], eax
call sub.GDI32.dll_DeleteObject
sub esp, 4
mov eax, dword [0x45a908]
mov dword [esp], eax
call sub.GDI32.dll_DeleteObject
sub esp, 4
mov eax, dword [0x45a8c8]
test eax, eax
jne 0x42ac60
mov eax, dword [0x45a94c]
mov dword [esp], eax
call fcn.0043d729
sub esp, 4
mov eax, dword [0x45a944]
mov dword [esp], eax
call fcn.0043d729
sub esp, 4
mov eax, dword [0x45a93c]
mov dword [esp], eax
call fcn.0043d729
sub esp, 4
call fcn.00443980
call fcn.00443980
mov eax, dword [0x45a91c]
mov ebx, dword [eax]
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp + 4], 2
mov dword [esp], ebx
call fcn.00407760
sub esp, 0xc
call fcn.00443a30
call fcn.00443980
call fcn.00443980
mov eax, dword [0x45a91c]
mov ebx, dword [eax + 4]
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp + 4], 2
mov dword [esp], ebx
call fcn.00407760
sub esp, 0xc
call fcn.00443a30
mov dword [esp], 0
call fcn.00439b9d
sub esp, 4
test eax, eax
je 0x42ac70
mov dword [esp], 0
call fcn.004398bf
sub esp, 4
movsx ebx, byte [0x45a860]
cmp bl, 1
jle 0x42ae50
mov dword [0x45a938], 0
call fcn.00428300
mov dword [esp], eax
call sub.GDI32.dll_DeleteObject
sub esp, 4
jmp 0x42ab75
call fcn.00443980
call fcn.00443980
call fcn.00443980
mov dword [esp], 0
call fcn.00439c65
sub esp, 4
mov ebx, eax
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp], ebx
sar ebx, 0x1f
mov dword [esp + 4], ebx
call fcn.00440fa0
sub esp, 0xc
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x455324
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00416b20
sub esp, 0x14
call fcn.00443a30
call fcn.00443980
call fcn.00443980
call fcn.00443980
mov dword [esp], 0
call fcn.00439cd4
sub esp, 4
mov ebx, eax
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp], ebx
sar ebx, 0x1f
mov dword [esp + 4], ebx
call fcn.00440fa0
sub esp, 0xc
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x45531c
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00416b20
sub esp, 0x14
call fcn.00443a30
call fcn.00443980
call fcn.00443980
call fcn.00443980
mov dword [esp], 0
call fcn.00439169
sub esp, 4
mov ebx, eax
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp], ebx
sar ebx, 0x1f
mov dword [esp + 4], ebx
call fcn.00440fa0
sub esp, 0xc
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x45532c
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00416b20
sub esp, 0x14
call fcn.00443a30
call fcn.00443980
call fcn.00443980
call fcn.00443980
mov dword [esp], 0
call fcn.004391e6
sub esp, 4
mov ebx, eax
call fcn.004439d0
mov dword [esp + 8], eax
mov dword [esp], ebx
sar ebx, 0x1f
mov dword [esp + 4], ebx
call fcn.00440fa0
sub esp, 0xc
call fcn.00443b50
call fcn.00443ad0
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x455550
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00416b20
sub esp, 0x14
call fcn.00443a30
jmp 0x42ac1d
call fcn.004438e0
mov dword [esp + 4], 2
mov dword [esp], str.SeShutdownPrivilege
call fcn.0040bd70
sub esp, 8
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], str.Exit
mov dword [esp], 0
call sub.ADVAPI32.dll_InitiateSystemShutdownW
sub esp, 0x14
jmp 0x42ac3c