Function at 0x4264e0
Capabilities:
Create thread
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
mov eax, dword [0x572c40]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 0x10]
mov ecx, 0xb64288
push edi
mov edi, dword [ebp + 8]
push 0x51984f
push 0x51984f
call fcn.0042e470
push 0x57bf8c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0
push dword [ebp + 0x14]
mov ecx, 0xb64288
push esi
push 1
push 0
push 0x565120
push 0
push edi
call fcn.0042b490
mov ebx, eax
test ebx, ebx
jne 0x426d0b
mov ecx, 0x129
mov esi, 0xb63938
mov edi, 0x57bae8
rep movsd dword es:[edi], dword [esi]
push 0x17
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
mov ecx, 0xb657b8
push ebx
push ebx
setne byte [0x57c7d3]
call fcn.00427790
push eax
push 0xb649bc
push str._s_s.log
push 0x104
push 0x57c7f8
call fcn.00407090
mov edi, dword [0xb65a1c]
add esp, 0x14
test edi, edi
jle 0x42661b
mov esi, dword [0xb65a20]
nop dword [eax]
mov ecx, str._NOEXECUTE
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4265c7
test dl, dl
je 0x4265c3
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4265c7
add eax, 2
add ecx, 2
test dl, dl
jne 0x4265a7
xor eax, eax
jmp 0x4265cc
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4265d7
mov byte [0x57c7d1], 1
mov ecx, str._LOAD
mov eax, esi
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x426600
test dl, dl
je 0x4265fc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x426600
add eax, 2
add ecx, 2
test dl, dl
jne 0x4265e0
xor eax, eax
jmp 0x426605
sbb eax, eax
or eax, 1
test eax, eax
jne 0x426610
mov byte [0x57c7d1], 1
add esi, 0x118
sub edi, 1
jne 0x4265a0
push 0
push 0
push 0x16
push 0x4b1
mov ecx, 0xb657d8
call fcn.00434a60
mov edi, dword [sym.imp.ole32.dll_CoUninitialize]
cmp eax, 0xffffffff
je 0x4273d4
push 0
push 0
push 0x1c
push 0x4b2
mov ecx, 0xb657d8
call fcn.00434a60
cmp eax, 0xffffffff
je 0x4273d4
push 0
push 0
push 0x1a
push 0x4b3
mov ecx, 0xb657d8
call fcn.00434a60
cmp eax, 0xffffffff
je 0x4273d4
push 0
push 0
push 0x15
push 0x4b4
mov ecx, 0xb657d8
call fcn.00434a60
cmp eax, 0xffffffff
je 0x4273d4
push 0
push 0
push 0x18
push 0x4b5
mov ecx, 0xb657d8
call fcn.00434a60
cmp eax, 0xffffffff
je 0x4273d4
push 0
push 0
push 0x19
push 0x4b6
mov ecx, 0xb657d8
call fcn.00434a60
cmp eax, 0xffffffff
je 0x4273d4
push 0
push 0
push 0x17
push 0x4b7
mov ecx, 0xb657d8
call fcn.00434a60
cmp eax, 0xffffffff
je 0x4273d4
push 0
push 0
push 0x20
push 0x4b8
mov ecx, 0xb657d8
call fcn.00434a60
cmp eax, 0xffffffff
je 0x4273d4
push 0
push 0
push 0x21
push 0x4b9
mov ecx, 0xb657d8
call fcn.00434a60
cmp eax, 0xffffffff
je 0x4273d4
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x40080
push 1
push 0x3f3
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x400c0
push 1
push 0x3f4
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x40080
push 1
push 0x3fc
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x40080
push 3
push 0x44c
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
mov esi, 1
nop dword [eax + eax]
sub esp, 8
lea eax, [esi + 0x44c]
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x40080
push 1
push eax
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
inc esi
cmp esi, 0x10
jle 0x426830
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x401c0
push 1
push 0x4b1
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x40180
push 1
push 0x4b2
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x40180
push 1
push 0x4b3
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x40180
push 1
push 0x4b4
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x40180
push 1
push 0x4b5
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x40180
push 1
push 0x4b6
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x40180
push 1
push 0x4b7
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x40180
push 1
push 0x4b8
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x40180
push 1
push 0x4b9
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x40180
push 1
push 0x515
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x40180
push 1
push 0x516
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0x566428
push 0xffff
push 0
push 0x80
push 3
push 0x3e8
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0x566438
push 0xffff
push 0
push 0x80
push 3
push 0x4b0
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0x566450
push 0xffff
push 0
push 0x80
push 3
push 0x514
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x3000001
push 6
push 0x4e0
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x3000000
push 6
push 0x4af
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x3000000
push 6
push 0x50d
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
sub esp, 8
mov ecx, 0xb64288
mov dword [esp + 4], 0
mov dword [esp], 0
push 0
push 0xffff
push 0xffff
push 0x3000000
push 6
push 0x50e
call fcn.00427fc0
cmp eax, 0xffffffff
je 0x4273cf
push 0
call fcn.004088e0
push dword [0xb643a0]
push dword [0xb6439c]
push dword [0xb64398]
push str.WindowManager__v_d._d._d__started__options_loaded_successfully
call fcn.004133e0
add esp, 0x14
cmp byte [0x57c913], 0
je 0x426d20
mov ecx, 0xb64288
call fcn.0042d720
test eax, eax
jne 0x426d20
push 1
push eax
push 2
mov ecx, 0xb64288
call fcn.0042e220
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00481761
mov esp, ebp
pop ebp
ret 0x10
push 0
push 0xb4cb58
push 0
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
cmp byte [0x57ca34], 0
jne 0x426d4d
push 0x57ca34
push 0
push 0
push 0x10
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
cmp byte [0x57c914], 0
mov eax, 0xa
mov ecx, 1
cmovne eax, ecx
cmp byte [0xb64bf6], 0
mov dword [0xb64bd8], eax
je 0x426d82
push 0
push 0
push ecx
push 0
push 0
mov ecx, 0xb64288
call fcn.004286a0
cmp byte [0x57c912], 0
jne 0x426d98
cmp byte [0xb64bf4], 0
jne 0x426d0b
push 0
call fcn.0043c250
add esp, 4
push 0
cmp eax, 2
je 0x42755a
push 0
push 0
push 0
push 0x10000400
push 1
push 0
push 0
mov ecx, 0xb657b8
call fcn.00427790
push eax
push fcn.00424190
push 0
mov ecx, 0xb64288
call fcn.004288e0
cmp eax, 0xffffffff
jne 0x426de9
mov ebx, 0x138e
jmp 0x4273d4
cmp dword [0xb64bdc], 0xa
mov eax, dword [0x57cb38]
mov dword [ebp - 0x54], eax
jl 0x426ffd
nop
push 0x30
call fcn.004817a0
add esp, 4
test eax, eax
je 0x426e19
mov ecx, eax
call fcn.00414670
mov ecx, eax
jmp 0x426e1b
xor ecx, ecx
mov dword [0xb4cb68], ecx
mov eax, dword [ecx]
call dword [eax]
test eax, eax
jne 0x426e3d
mov ecx, dword [0xb4cb68]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp eax, 0xffffffff
jne 0x426fc5
mov esi, dword [0xb4cb68]
test esi, esi
je 0x426e62
mov dword [esi], vtable.CVirtualDesktop.0
call edi
lea ecx, [esi + 0xc]
call fcn.00414760
push 0x28
push esi
call fcn.00481502
add esp, 8
push 0x30
call fcn.004817a0
add esp, 4
test eax, eax
je 0x426e7b
mov ecx, eax
call fcn.004146a0
mov ecx, eax
jmp 0x426e7d
xor ecx, ecx
mov dword [0xb4cb68], ecx
mov eax, dword [ecx]
call dword [eax]
test eax, eax
jne 0x426e9f
mov ecx, dword [0xb4cb68]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp eax, 0xffffffff
jne 0x426fc5
mov esi, dword [0xb4cb68]
test esi, esi
je 0x426ec4
mov dword [esi], vtable.CVirtualDesktop.0
call edi
lea ecx, [esi + 0xc]
call fcn.00414760
push 0x28
push esi
call fcn.00481502
add esp, 8
push 0x30
call fcn.004817a0
add esp, 4
test eax, eax
je 0x426edd
mov ecx, eax
call fcn.004146d0
mov ecx, eax
jmp 0x426edf
xor ecx, ecx
mov dword [0xb4cb68], ecx
mov eax, dword [ecx]
call dword [eax]
test eax, eax
jne 0x426f01
mov ecx, dword [0xb4cb68]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp eax, 0xffffffff
jne 0x426fc5
mov esi, dword [0xb4cb68]
test esi, esi
je 0x426f26
mov dword [esi], vtable.CVirtualDesktop.0
call edi
lea ecx, [esi + 0xc]
call fcn.00414760
push 0x28
push esi
call fcn.00481502
add esp, 8
push 0x30
call fcn.004817a0
add esp, 4
test eax, eax
je 0x426f3f
mov ecx, eax
call fcn.00414700
mov ecx, eax
jmp 0x426f41
xor ecx, ecx
mov dword [0xb4cb68], ecx
mov eax, dword [ecx]
call dword [eax]
test eax, eax
jne 0x426f5f
mov ecx, dword [0xb4cb68]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp eax, 0xffffffff
jne 0x426fc5
mov esi, dword [0xb4cb68]
test esi, esi
je 0x426f84
mov dword [esi], vtable.CVirtualDesktop.0
call edi
lea ecx, [esi + 0xc]
call fcn.00414760
push 0x28
push esi
call fcn.00481502
add esp, 8
push 0x30
call fcn.004817a0
add esp, 4
test eax, eax
je 0x426f9d
mov ecx, eax
call fcn.00414730
mov ecx, eax
jmp 0x426f9f
xor ecx, ecx
mov dword [0xb4cb68], ecx
mov eax, dword [ecx]
call dword [eax]
test eax, eax
jne 0x4271e4
mov ecx, dword [0xb4cb68]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp eax, 0xffffffff
je 0x4271e4
mov ecx, dword [0xb4cb68]
test ecx, ecx
je 0x427213
mov eax, dword [0xb659a8]
mov edx, dword [ecx]
push 0x464
mov eax, dword [eax]
push dword [eax]
call dword [edx + 0x28]
mov ecx, dword [0xb4cb68]
mov byte [0x57c7d2], 1
mov eax, dword [ecx]
call dword [eax + 0x10]
mov dword [0x57cb54], eax
call fcn.00422c30
test eax, eax
jne 0x42700b
call fcn.004078b0
cmp byte [0x57c7d1], 0
sete al
push eax
push eax
push 0
push dword [0x57c900]
call fcn.00423e00
push 1
push 0x5664cc
call fcn.004222e0
mov cx, word [0x57c916]
add esp, 0x18
mov esi, dword [sym.imp.USER32.dll_RegisterHotKey]
test cx, cx
je 0x427057
movzx eax, cl
push eax
movzx eax, ch
push eax
push 1
push dword [0x57c7d4]
call esi
mov cx, word [0x57c918]
test cx, cx
je 0x427075
movzx eax, cl
push eax
movzx eax, ch
push eax
push 2
push dword [0x57c7d4]
call esi
mov cx, word [0x57c91a]
test cx, cx
je 0x427093
movzx eax, cl
push eax
movzx eax, ch
push eax
push 3
push dword [0x57c7d4]
call esi
mov cx, word [0x57c91e]
test cx, cx
je 0x4270b1
movzx eax, cl
push eax
movzx eax, ch
push eax
push 5
push dword [0x57c7d4]
call esi
mov cx, word [0x57c91c]
test cx, cx
je 0x4270cf
movzx eax, cl
push eax
movzx eax, ch
push eax
push 4
push dword [0x57c7d4]
call esi
mov cx, word [0x57c920]
test cx, cx
je 0x4270ed
movzx eax, cl
push eax
movzx eax, ch
push eax
push 6
push dword [0x57c7d4]
call esi
mov cx, word [0x57cb3c]
test cx, cx
je 0x42710b
movzx eax, cl
push eax
movzx eax, ch
push eax
push 7
push dword [0x57c7d4]
call esi
mov cx, word [0x57cb44]
test cx, cx
je 0x427129
movzx eax, cl
push eax
movzx eax, ch
push eax
push 8
push dword [0x57c7d4]
call esi
mov cx, word [0x57cb4c]
test cx, cx
je 0x427147
movzx eax, cl
push eax
movzx eax, ch
push eax
push 9
push dword [0x57c7d4]
call esi
mov cx, word [0x57cb4e]
test cx, cx
je 0x427165
movzx eax, cl
push eax
movzx eax, ch
push eax
push 0xa
push dword [0x57c7d4]
call esi
cmp dword [0xb4cb68], 0
je 0x4271c3
push 1
call fcn.00423300
mov cx, word [0x57ca2c]
add esp, 4
test cx, cx
je 0x427199
movzx eax, cl
push eax
movzx eax, ch
push eax
push 0x12c
push dword [0x57c7d4]
call esi
cmp byte [0x57ca2e], 0
jne 0x4271c3
mov cx, word [0x57ca30]
test cx, cx
je 0x4271c3
movzx eax, cl
push eax
movzx eax, ch
push eax
push 0x190
push dword [0x57c7d4]
call esi
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [0xb51a00], eax
test eax, eax
jne 0x427241
mov ebx, 0x138e
jmp 0x4273d4
mov esi, dword [0xb4cb68]
test esi, esi
je 0x427209
mov dword [esi], vtable.CVirtualDesktop.0
call edi
lea ecx, [esi + 0xc]
call fcn.00414760
push 0x28
push esi
call fcn.00481502
add esp, 8
mov dword [0xb4cb68], 0
cmp byte [0xb64bf4], 0
je 0x426ffd
mov esi, dword [ebp - 0x54]
mov eax, esi
dec esi
mov dword [ebp - 0x54], esi
test eax, eax
jle 0x426ffd
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x426e00
lea eax, [ebp - 0x60]
push eax
push 0
push 0
push 0x415f30
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0xb51a04], eax
test eax, eax
jne 0x42726b
mov ebx, 0x138e
jmp 0x4273d4
call fcn.004232a0
mov eax, dword [0xb659a8]
push 2
mov eax, dword [eax]
push dword [eax]
call fcn.00422260
add esp, 8
push 0
push 0
push 0
push 0x424060
push 0
push 0x800c
push 0x8000
call dword [sym.imp.USER32.dll_SetWinEventHook]
mov esi, dword [sym.imp.USER32.dll_RegisterPowerSettingNotification]
push 0
push 0x51c4b0
push dword [0x57c7d4]
mov dword [ebp - 0x54], eax
call esi
push 0
push 0x51c4c0
push dword [0x57c7d4]
mov dword [ebp - 0x58], eax
call esi
push 0x4c
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x50]
push 0
push eax
call fcn.00483290
add esp, 0xc
lea eax, [ebp - 0x50]
push eax
call sub.POWRPROF.dll_GetPwrCapabilities
cmp byte [ebp - 0x4e], 0
movzx ecx, word [0xb63944]
movzx eax, word [0xb63940]
setne byte [0x57c7f5]
shl ecx, 0x10
or ecx, eax
cmp byte [0x57c7d1], 0
push ecx
sete al
movzx eax, al
push eax
push 1
call fcn.00415600
mov esi, dword [sym.imp.USER32.dll_PostMessageA]
add esp, 0xc
push 0
push 0
push 0x83ff
push dword [0x57c7d4]
call esi
cmp byte [0xb64bf5], 0
jne 0x42735a
cmp byte [0xb64bf4], 0
jne 0x42735a
push 0
push 0x4d2
push 0x83ff
push dword [0x57c7d4]
call esi
push dword [0xb51a00]
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov ecx, 0xb64288
call fcn.0042e290
call fcn.00423410
mov ecx, dword [0xb4cb68]
test ecx, ecx
je 0x42739c
mov eax, dword [ecx]
call dword [eax + 0x10]
test eax, eax
je 0x42739c
push 0
push 0xffffffffffffffff
push 0x464
push dword [0x57c7d4]
call fcn.00424190
push dword [ebp - 0x54]
call dword [sym.imp.USER32.dll_UnhookWinEvent]
push dword [ebp - 0x58]
mov esi, dword [sym.imp.USER32.dll_UnregisterPowerSettingNotification]
call esi
push dword [ebp - 0x5c]
call esi
mov eax, dword [0xb659a8]
mov eax, dword [eax]
push dword [eax]
call sub.WTSAPI32.dll_WTSUnRegisterSessionNotification
push 2
call fcn.004222a0
add esp, 4
jmp 0x4273d4
mov ebx, 0xf00b
push ebx
push str.WindowManager_stopped__error:__d_
call fcn.004133e0
mov eax, dword [0xb51a00]
add esp, 8
mov byte [0x5661e1], 0
test eax, eax
je 0x4273f9
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov eax, dword [0xb51a04]
test eax, eax
je 0x42741a
push 0xbb8
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [0xb51a04]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x57bf8c
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
push 0
push 0x5664cc
call fcn.004222e0
push 0x5664cc
call fcn.00421f20
add esp, 0xc
cmp dword [0xb4cb68], 0
je 0x4274bb
push 0
call fcn.00423300
mov esi, dword [sym.imp.USER32.dll_UnregisterHotKey]
add esp, 4
cmp word [0x57ca2c], 0
je 0x42746e
push 0x12c
push dword [0x57c7d4]
call esi
cmp word [0x57ca30], 0
je 0x427485
push 0x190
push dword [0x57c7d4]
call esi
mov ecx, dword [0xb4cb68]
push dword [0x57c7d4]
mov eax, dword [ecx]
call dword [eax + 0x2c]
mov esi, dword [0xb4cb68]
test esi, esi
je 0x4274bb
mov dword [esi], vtable.CVirtualDesktop.0
call edi
lea ecx, [esi + 0xc]
call fcn.00414760
push 0x28
push esi
call fcn.00481502
add esp, 8
call fcn.0040af80
xor esi, esi
cmp dword [0x566508], esi
jle 0x4274f2
xor edi, edi
nop dword [eax]
mov eax, dword [0x56650c]
mov ecx, 0xb64288
push 0
push 0
push dword [edi + eax]
call fcn.0042e5a0
inc esi
lea edi, [edi + 0xc]
cmp esi, dword [0x566508]
jl 0x4274d0
cmp dword [0x57c7d4], 0
je 0x42750e
push 0
push 0xffffffffffffffff
push 0
push 0xb64288
call fcn.0042ed20
add esp, 0x10
test ebx, ebx
je 0x427545
push 0
push 0x111
push 0
push ebx
mov ecx, 0xb657b8
call fcn.00427790
push eax
push 0
push 0
mov ecx, 0xb657b8
call fcn.00427790
push eax
push 0
push 0xb64288
call fcn.0042ebc0
add esp, 0x18
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00481761
mov esp, ebp
pop ebp
ret 0x10
call fcn.0048ebd9
int3