Function at 0x41e38a
Capabilities:
Shutdown system

Disassembly:
push 0x86c
mov eax, 0x4426fa
call fcn.0042dc1b
mov eax, dword [ebp + 8]
mov dword [ebp - 0x7e4], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x7fc], eax
lea eax, [ebp - 0x7d0]
push eax
call fcn.00413cc7
lea esi, [ebp - 0x6b0]
call fcn.00408db8
lea esi, [ebp - 0x694]
call fcn.00408db8
xor ebx, ebx
mov dword [ebp - 0x660], 7
mov dword [ebp - 0x664], ebx
mov word [ebp - 0x674], bx
mov dword [ebp - 0x658], ebx
mov dword [ebp - 0x654], ebx
mov dword [ebp - 0x650], ebx
lea edi, [ebp - 0x330]
mov dword [ebp - 4], 4
call fcn.00422173
lea edi, [ebp - 0x170]
call fcn.00421988
lea edi, [ebp - 0x470]
call fcn.00422265
lea eax, [ebp - 0x648]
push eax
mov byte [ebp - 4], 7
call fcn.00415510
push 0xf
pop esi
push ebx
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x34], esi
call fcn.00408384
push ebx
lea ecx, [ebp - 0x2b4]
mov dword [ebp - 0x29c], esi
call fcn.00408384
push 7
pop edi
mov dword [ebp - 0x248], edi
mov dword [ebp - 0x24c], ebx
mov word [ebp - 0x25c], bx
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x54], ebx
mov word [ebp - 0x64], bx
push ebx
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x6c], esi
call fcn.00408384
mov dword [ebp - 0x1ac], edi
mov dword [ebp - 0x1b0], ebx
mov word [ebp - 0x1c0], bx
push ebx
lea ecx, [ebp - 0x27c]
mov dword [ebp - 0x264], esi
call fcn.00408384
push ebx
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x22c], esi
call fcn.00408384
mov dword [ebp - 0x174], edi
mov dword [ebp - 0x178], ebx
mov word [ebp - 0x188], bx
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xa8], ebx
mov word [ebp - 0xb8], bx
mov byte [ebp - 0x7d8], bl
mov byte [ebp - 0x7d2], bl
mov byte [ebp - 0x7d4], 1
mov byte [ebp - 0x7d3], bl
mov byte [ebp - 0x7d9], bl
mov byte [ebp - 0x810], bl
mov dword [ebp - 0x7e0], ebx
mov dword [ebp - 0x7f0], ebx
mov dword [ebp - 0x7ec], ebx
mov dword [ebp - 0x7e8], ebx
mov dword [ebp - 0x7f8], 0x40611c
push ebx
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x18], esi
call fcn.00408384
push ebx
mov byte [ebp - 4], 0x15
call dword [sym.imp.ole32.dll_CoInitialize]
call fcn.0041b820
lea edi, [ebp - 0x7f8]
call fcn.0041aef3
mov edx, dword [ebp - 0x7fc]
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x7d8]
push eax
lea ecx, [ebp - 0x27c]
call fcn.0041d297
cmp al, bl
pop ecx
pop ecx
je 0x41e691
mov eax, dword [0x449634]
mov esi, eax
mov eax, dword [eax]
cmp eax, 0xffffffff
je 0x41e589
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [esi], 0xffffffff
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.00408339
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x7f8]
mov dword [ebp - 0x7f8], 0x40611c
call fcn.0040e326
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0xbc]
call fcn.00408d21
push ebx
push edi
lea esi, [ebp - 0x18c]
call fcn.00408d21
push ebx
push edi
lea ecx, [ebp - 0x244]
call fcn.00408339
push ebx
push edi
lea ecx, [ebp - 0x27c]
call fcn.00408339
push ebx
push edi
lea esi, [ebp - 0x1c4]
call fcn.00408d21
push ebx
push edi
lea ecx, [ebp - 0x84]
call fcn.00408339
push ebx
push edi
lea esi, [ebp - 0x68]
call fcn.00408d21
push ebx
push edi
lea esi, [ebp - 0x260]
call fcn.00408d21
push ebx
push edi
lea ecx, [ebp - 0x2b4]
call fcn.00408339
push ebx
push edi
lea ecx, [ebp - 0x4c]
call fcn.00408339
lea eax, [ebp - 0x648]
push eax
mov byte [ebp - 4], 7
call fcn.004155fe
lea edi, [ebp - 0x470]
call fcn.004222ee
lea esi, [ebp - 0x170]
call fcn.00421a2b
lea ecx, [ebp - 0x330]
mov dword [ebp - 0x330], 0x406194
call fcn.0042145f
lea ecx, [ebp - 0x330]
call fcn.0042145f
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x7d0]
call fcn.0041a95f
xor eax, eax
jmp 0x420a3d
cmp byte [ebp - 0x7d8], bl
lea ecx, [ebp - 0x68]
jne 0x41e6a3
call fcn.00426c69
jmp 0x41e6a8
call fcn.00426ab2
cmp dword [ebp - 0x50], 8
mov eax, dword [ebp - 0x64]
jae 0x41e6b4
lea eax, [ebp - 0x64]
push eax
call fcn.00426d44
cmp dword [ebp - 0x50], 8
mov eax, dword [ebp - 0x64]
pop ecx
jae 0x41e6c7
lea eax, [ebp - 0x64]
push ebx
lea ecx, [ebp - 0x1c4]
push ecx
mov ecx, 0x405e90
mov ebx, eax
xor edi, edi
call fcn.00427113
cmp dword [ebp - 0x1ac], 8
mov eax, dword [ebp - 0x1c0]
pop ecx
pop ecx
jae 0x41e6f4
lea eax, [ebp - 0x1c0]
lea ecx, [ebp - 0x84]
push ecx
push eax
call fcn.00424680
cmp dword [ebp - 0x1ac], 8
mov eax, dword [ebp - 0x1c0]
pop ecx
pop ecx
jae 0x41e718
lea eax, [ebp - 0x1c0]
push dword [ebp - 0x7d8]
push eax
call fcn.00420fbc
xor ebx, ebx
cmp byte [ebp - 0x7d8], bl
je 0x41e756
cmp dword [ebp - 0x174], 8
mov eax, dword [ebp - 0x188]
jae 0x41e743
lea eax, [ebp - 0x188]
mov ecx, dword [0x449634]
push eax
push 0x405ea8
call fcn.004088a8
pop ecx
pop ecx
push ebx
lea ecx, [ebp - 0x1a8]
mov dword [ebp - 0x190], esi
call fcn.00408384
push 0x40c
lea esi, [ebp - 0x1a8]
mov byte [ebp - 4], 0x16
call fcn.00422d33
cmp byte [ebp - 0x7d8], bl
pop ecx
jne 0x41e95d
call fcn.0041a9a3
cmp al, bl
je 0x41e95d
push 0x405f24
call fcn.004086a5
call fcn.00423c04
cmp al, bl
lea esi, [ebp - 0x30]
je 0x41e921
push 0x598
call fcn.00422d33
cmp dword [ebp - 0x190], 0x10
pop ecx
mov ecx, dword [ebp - 0x1a4]
jae 0x41e7d0
lea ecx, [ebp - 0x1a4]
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x41e7dc
lea eax, [ebp - 0x2c]
push 0x44
push ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x41e7f5
push ebx
push 2
call dword [sym.imp.USER32.dll_ExitWindowsEx]
mov eax, dword [0x449634]
mov esi, eax
mov eax, dword [eax]
cmp eax, 0xffffffff
je 0x41e80a
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [esi], 0xffffffff
call dword [sym.imp.ole32.dll_CoUninitialize]
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x1a8]
call fcn.00408339
push ebx
push edi
lea ecx, [ebp - 0x30]
call fcn.00408339
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x7f8]
mov dword [ebp - 0x7f8], 0x40611c
call fcn.0040e326
push ebx
push edi
lea esi, [ebp - 0xbc]
call fcn.00408d21
push ebx
push edi
lea esi, [ebp - 0x18c]
call fcn.00408d21
push ebx
push edi
lea ecx, [ebp - 0x244]
call fcn.00408339
push ebx
push edi
lea ecx, [ebp - 0x27c]
call fcn.00408339
push ebx
push edi
lea esi, [ebp - 0x1c4]
call fcn.00408d21
push ebx
push edi
lea ecx, [ebp - 0x84]
call fcn.00408339
push ebx
push edi
lea esi, [ebp - 0x68]
call fcn.00408d21
push ebx
push edi
lea esi, [ebp - 0x260]
call fcn.00408d21
push ebx
push edi
lea ecx, [ebp - 0x2b4]
call fcn.00408339
push ebx
push edi
lea ecx, [ebp - 0x4c]
call fcn.00408339
lea eax, [ebp - 0x648]
push eax
mov byte [ebp - 4], 7
call fcn.004155fe
lea edi, [ebp - 0x470]
call fcn.004222ee
lea esi, [ebp - 0x170]
call fcn.00421a2b
lea ecx, [ebp - 0x330]
mov dword [ebp - 0x330], 0x406194
call fcn.0042145f
lea ecx, [ebp - 0x330]
call fcn.0042145f
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x7d0]
call fcn.0041a95f
mov eax, 0xbc2
jmp 0x420a3d
push 0x599
call fcn.00422d33
cmp dword [ebp - 0x190], 0x10
pop ecx
mov ecx, dword [ebp - 0x1a4]
jae 0x41e941
lea ecx, [ebp - 0x1a4]
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
jae 0x41e94d
lea eax, [ebp - 0x2c]
push 0x44
push ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x41e7f5
push 0x40d
lea esi, [ebp - 0x30]
call fcn.00422d33
pop ecx
push dword [ebp - 0x7e4]
mov edi, esi
lea edx, [ebp - 0x7f8]
lea ebx, [ebp - 0x1a8]
lea esi, [ebp - 0x330]
call fcn.004221e5
push 7
xor ebx, ebx
pop eax
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1cc], ebx
mov word [ebp - 0x1dc], bx
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2bc], ebx
mov word [ebp - 0x2cc], bx
mov dword [ebp - 0x838], ebx
mov dword [ebp - 0x834], ebx
mov dword [ebp - 0x830], ebx
mov dword [ebp - 0x840], 0x40611c
mov dword [ebp - 0x84c], ebx
mov dword [ebp - 0x848], ebx
mov dword [ebp - 0x844], ebx
mov dword [ebp - 0x820], ebx
mov dword [ebp - 0x81c], ebx
mov dword [ebp - 0x818], ebx
lea eax, [ebp - 0x1e0]
push eax
mov byte [ebp - 4], 0x1b
call fcn.0041ad1e
pop ecx
push dword [ebp - 0x7d8]
lea eax, [ebp - 0x2d0]
push eax
call fcn.0041ad42
pop ecx
pop ecx
lea ecx, [ebp - 0x810]
call fcn.0041ad70
lea eax, [ebp - 0x824]
push eax
lea eax, [ebp - 0x850]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.0041af8a
add esp, 0xc
lea edi, [ebp - 0x840]
call fcn.0041ae3c
lea ecx, [ebp - 0xbc]
call fcn.00426ab2
push 0x405f40
mov eax, edi
call fcn.0040e3ef
cmp eax, ebx
je 0x41eaea
cmp byte [ebp - 0x7d8], bl
je 0x41ea92
cmp dword [ebp - 0x178], ebx
je 0x41ea92
cmp dword [ebp - 0x174], 8
jb 0x41ea8a
mov ecx, dword [ebp - 0x188]
jmp 0x41eaa7
lea ecx, [ebp - 0x188]
jmp 0x41eaa7
cmp dword [ebp - 0xa4], 8
mov ecx, dword [ebp - 0xb8]
jae 0x41eaa7
lea ecx, [ebp - 0xb8]
cmp dword [ebp - 0x1c8], 8
mov edx, dword [ebp - 0x1dc]
jae 0x41eabc
lea edx, [ebp - 0x1dc]
push ecx
push edx
push eax
lea edi, [ebp - 0x7d0]
call fcn.0040734b
cmp dword [ebp - 0x69c], ebx
push 0xffffffffffffffff
lea ecx, [ebp - 0x4c]
push ebx
lea eax, [ebp - 0x6b0]
jne 0x41eae4
lea eax, [ebp - 0x694]
push eax
call fcn.004083a0
cmp dword [ebp - 0x38], ebx
jne 0x41eafd
push 0x418
lea esi, [ebp - 0x4c]
call fcn.00422d33
pop ecx
cmp dword [ebp - 0xa4], 8
mov eax, dword [ebp - 0xb8]
jae 0x41eb12
lea eax, [ebp - 0xb8]
lea ecx, [ebp - 0x34c]
call fcn.00416d5b
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x824]
push eax
lea eax, [ebp - 0x850]
push eax
mov byte [ebp - 4], 0x1c
push dword [ebp - 0x810]
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x648]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0041573b
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0x34c]
call fcn.00408d21
push 0xf
pop esi
push ebx
lea ecx, [ebp - 0x1fc]
mov dword [ebp - 0x1e4], esi
call fcn.00408384
push ebx
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x280], esi
call fcn.00408384
push ebx
lea ecx, [ebp - 0x3b0]
mov dword [ebp - 0x398], esi
call fcn.00408384
mov byte [ebp - 4], 0x1f
cmp dword [ebp - 0x34], 0x10
mov eax, dword [ebp - 0x48]
jae 0x41ebb9
lea eax, [ebp - 0x48]
push eax
push 0x3f4
lea esi, [ebp - 0x30]
call fcn.00422d33
pop ecx
pop ecx
push 0x3ec
lea esi, [ebp - 0x1fc]
call fcn.00422d33
pop ecx
push 0x3eb
lea esi, [ebp - 0x298]
call fcn.00422d33
pop ecx
push 0x41f
lea esi, [ebp - 0x3b0]
call fcn.00422d33
pop ecx
lea eax, [ebp - 0x7f8]
push eax
mov eax, esi
push eax
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x7e4]
lea esi, [ebp - 0x170]
call fcn.00421a57
cmp byte [ebp - 0x7d8], bl
jne 0x41ec49
xor edx, edx
lea ecx, [ebp - 0x648]
call fcn.00415a53
mov byte [ebp - 0x7d1], al
jmp 0x41ed47
mov dword [ebp - 0x88], 7
mov dword [ebp - 0x8c], ebx
mov word [ebp - 0x9c], bx
mov byte [ebp - 4], 0x20
cmp dword [ebp - 0xa4], 8
mov eax, dword [ebp - 0xb8]
jae 0x41ec79
lea eax, [ebp - 0xb8]
push ebx
lea ecx, [ebp - 0xa0]
push ecx
mov ecx, 0x405f4c
mov ebx, eax
xor edi, edi
call fcn.00427113
cmp dword [ebp - 0x88], 8
mov eax, dword [ebp - 0x9c]
pop ecx
pop ecx
jae 0x41eca6
lea eax, [ebp - 0x9c]
call fcn.00426c21
xor ebx, ebx
cmp al, bl
je 0x41ed21
mov esi, 0x40611c
mov dword [ebp - 0x804], ebx
mov dword [ebp - 0x800], ebx
mov dword [ebp - 0x7fc], ebx
mov dword [ebp - 0x80c], esi
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x88], 8
mov ecx, dword [ebp - 0x9c]
jae 0x41ece7
lea ecx, [ebp - 0x9c]
lea eax, [ebp - 0x80c]
push eax
call fcn.0040e6ba
lea edx, [ebp - 0x80c]
lea ecx, [ebp - 0x648]
call fcn.00415a53
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x80c]
mov byte [ebp - 0x7d1], al
mov dword [ebp - 0x80c], esi
call fcn.0040e326
jmp 0x41ed34
xor edx, edx
lea ecx, [ebp - 0x648]
call fcn.00415a53
mov byte [ebp - 0x7d1], al
push ebx
push 1
lea esi, [ebp - 0xa0]
call fcn.00408d21
xor edi, edi
xor ebx, ebx
inc edi
push ebx
push edi
lea ecx, [ebp - 0x3b0]
call fcn.00408339
push ebx
push edi
lea ecx, [ebp - 0x298]
call fcn.00408339
push ebx
push edi
lea ecx, [ebp - 0x1fc]
call fcn.00408339
lea esi, [ebp - 0x824]
call fcn.00420ba9
lea esi, [ebp - 0x850]
call fcn.00415483
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x840]
mov dword [ebp - 0x840], 0x40611c
call fcn.0040e326
push ebx
push edi
lea esi, [ebp - 0x2d0]
call fcn.00408d21
push ebx
push edi
lea esi, [ebp - 0x1e0]
call fcn.00408d21
push ebx
push edi
lea ecx, [ebp - 0x1a8]
call fcn.00408339
cmp byte [ebp - 0x7d1], bl
mov dword [ebp - 4], 0x14
jne 0x41f12c
lea esi, [ebp - 0x330]
call fcn.0042177c
lea edi, [ebp - 0x228]
call fcn.004154d1
push ebx
push ebx
lea ecx, [ebp - 0x1a8]
call fcn.00408339
mov eax, edi
push eax
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x63c]
mov byte [ebp - 4], 0x26
call fcn.0041a89d
dec eax
lea ecx, [ebp - 0x648]
call fcn.00415f22
cmp dword [ebp - 0x34], 0x10
mov eax, dword [ebp - 0x48]
jae 0x41ee2b
lea eax, [ebp - 0x48]
push eax
push 0x40b
lea esi, [ebp - 0x30]
call fcn.00422d33
mov eax, dword [ebp - 0x2c]
pop ecx
pop ecx
push 0x10
pop edi
cmp dword [ebp - 0x18], edi
jae 0x41ee49
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x170]
call fcn.00421fb5
cmp dword [ebp - 0x204], ebx
jne 0x41ee83
cmp dword [ebp - 0x190], edi
mov eax, dword [ebp - 0x1a4]
jae 0x41ee71
lea eax, [ebp - 0x1a4]
push eax
push 0x40a
lea esi, [ebp - 0x30]
call fcn.00422d33
pop ecx
pop ecx
jmp 0x41eebd
cmp dword [ebp - 0x200], edi
mov ecx, dword [ebp - 0x214]
jae 0x41ee97
lea ecx, [ebp - 0x214]
cmp dword [ebp - 0x190], edi
mov eax, dword [ebp - 0x1a4]
jae 0x41eeab
lea eax, [ebp - 0x1a4]
push ecx
push eax
push 0x41e
lea esi, [ebp - 0x30]
call fcn.00422d33
add esp, 0xc
cmp dword [ebp - 0x18], edi
mov eax, dword [ebp - 0x2c]
jae 0x41eec8
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x170]
call fcn.0041ab38
pop ecx
xor ecx, ecx
inc ecx
lea edi, [ebp - 0x170]
call fcn.00422116
mov esi, dword [0x449634]
cmp dword [esi], 0xffffffff
je 0x41ef85
cmp dword [ebp - 0x190], 0x10
mov eax, dword [ebp - 0x1a4]
jae 0x41ef07
lea eax, [ebp - 0x1a4]
push eax
push 0x405fb4
call fcn.0040883c
cmp dword [ebp - 0x204], ebx
pop ecx
pop ecx
je 0x41ef44
cmp dword [ebp - 0x200], 0x10
mov eax, dword [ebp - 0x214]
jae 0x41ef31
lea eax, [ebp - 0x214]
mov esi, dword [0x449634]
push eax
push 0x405fdc
call fcn.0040883c
pop ecx
pop ecx
push 2
pop ecx
lea edi, [ebp - 0x170]
call fcn.00422116
cmp dword [ebp - 0x6c], 0x10
mov eax, dword [ebp - 0x80]
jae 0x41ef5e
lea eax, [ebp - 0x80]
push eax
push 0x404
lea esi, [ebp - 0x30]
call fcn.00422d33
cmp dword [ebp - 0x18], 0x10
mov ebx, dword [ebp - 0x2c]
pop ecx
pop ecx
jae 0x41ef7a
lea ebx, [ebp - 0x2c]
lea ecx, [ebp - 0x170]
call fcn.004220bb
xor al, al
lea ebx, [ebp - 0x170]
call fcn.00421da8
push 0x3ea
lea esi, [ebp - 0x30]
call fcn.00422d33
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
pop ecx
jae 0x41efac
lea eax, [ebp - 0x2c]
xor ebx, ebx
push eax
inc ebx
mov eax, ebx
lea ecx, [ebp - 0x170]
call fcn.00421ea6
push ebx
mov al, bl
lea ecx, [ebp - 0x170]
call fcn.00421e46
push 2
xor al, al
lea ecx, [ebp - 0x170]
call fcn.00421e46
push 0
lea esi, [ebp - 0x170]
call fcn.00421ca2
mov eax, esi
push eax
mov al, bl
call fcn.00421764
mov esi, dword [0x449634]
call fcn.0042103c
mov byte [ebp - 0xd7], bl
mov dword [ebp - 0xc8], ebx
lea ebx, [ebp - 0x170]
call fcn.00421bee
or dword [ebp - 0xc8], 0xffffffff
xor ebx, ebx
mov byte [ebp - 0xd7], bl
call dword [sym.imp.ole32.dll_CoUninitialize]
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x1a8]
call fcn.00408339
lea esi, [ebp - 0x228]
call fcn.004154f7
push ebx
push edi
lea ecx, [ebp - 0x30]
call fcn.00408339
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x7f8]
mov dword [ebp - 0x7f8], 0x40611c
call fcn.0040e326
push ebx
push edi
lea esi, [ebp - 0xbc]
call fcn.00408d21
push ebx
push edi
lea esi, [ebp - 0x18c]
call fcn.00408d21
push ebx
push edi
lea ecx, [ebp - 0x244]
call fcn.00408339
push ebx
push edi
lea ecx, [ebp - 0x27c]
call fcn.00408339
push ebx
push edi
lea esi, [ebp - 0x1c4]
call fcn.00408d21
push ebx
push edi
lea ecx, [ebp - 0x84]
call fcn.00408339
push ebx
push edi
lea esi, [ebp - 0x68]
call fcn.00408d21
push ebx
push edi
lea esi, [ebp - 0x260]
call fcn.00408d21
push ebx
push edi
lea ecx, [ebp - 0x2b4]
call fcn.00408339
push ebx
push edi
lea ecx, [ebp - 0x4c]
call fcn.00408339
lea eax, [ebp - 0x648]
push eax
mov byte [ebp - 4], 7
call fcn.004155fe
lea edi, [ebp - 0x470]
call fcn.004222ee
lea esi, [ebp - 0x170]
call fcn.00421a2b
lea esi, [ebp - 0x330]
call fcn.004221d1
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x7d0]
call fcn.0041a95f
mov eax, 0x643
jmp 0x420a3d
lea eax, [ebp - 0x63c]
call fcn.0041a89d
cmp byte [ebp - 0x7d8], bl
mov dword [ebp - 0x810], eax
je 0x41f1d1
cmp eax, ebx
jle 0x41f1d1
lea edi, [ebp - 0x394]
call fcn.004154d1
lea esi, [ebp - 0x1fc]
call fcn.00408db8
mov eax, edi
push eax
mov eax, esi
push eax
mov eax, dword [ebp - 0x7e0]
lea ecx, [ebp - 0x648]
mov byte [ebp - 4], 0x28
call fcn.00415f22
mov eax, dword [ebp - 0x394]
and eax, 0xf
cmp al, 3
push ebx
mov ecx, esi
push 1
jne 0x41f1ba
inc dword [ebp - 0x7e0]
call fcn.00408339
mov esi, edi
mov byte [ebp - 4], 0x14
call fcn.004154f7
mov eax, dword [ebp - 0x7e0]
cmp eax, dword [ebp - 0x810]
jl 0x41f151
jmp 0x41f1ce
call fcn.00408339
lea esi, [ebp - 0x394]
mov byte [ebp - 4], 0x14
call fcn.004154f7
xor edi, edi
inc edi
mov eax, dword [ebp - 0x810]
cmp eax, ebx
je 0x4202ea
cmp byte [ebp - 0x7d8], bl
je 0x41f1f3
cmp dword [ebp - 0x7e0], eax
je 0x4202ea
lea esi, [ebp - 0x330]
call fcn.0042177c
cmp byte [ebp - 0x7d8], bl
jne 0x41f8b0
lea esi, [ebp - 0x1e0]
call fcn.00408db8
mov byte [ebp - 4], 0x2a
cmp dword [ebp - 0x34], 0x10
mov eax, dword [ebp - 0x48]
jae 0x41f225
lea eax, [ebp - 0x48]
push eax
push 0x4bd
lea esi, [ebp - 0x1e0]
call fcn.00422d33
pop ecx
pop ecx
lea eax, [ebp - 0x7f8]
push eax
lea eax, [ebp - 0x68]
push eax
push dword [ebp - 0x7e4]
mov eax, esi
lea esi, [ebp - 0x470]
call fcn.0042232e
lea eax, [ebp - 0x4c]
push eax
mov eax, esi
push eax
lea ecx, [ebp - 0x648]
call fcn.0041c06b
cmp al, bl
pop ecx
pop ecx
jne 0x41f384
mov esi, dword [0x449634]
call fcn.0042103c
lea esi, [ebp - 0x470]
call fcn.0042177c
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push edi
lea ecx, [ebp - 0x1e0]
call fcn.00408339
push ebx
push edi
lea ecx, [ebp - 0x30]
call fcn.00408339
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x7f8]
mov dword [ebp - 0x7f8], 0x40611c
call fcn.0040e326
push ebx
push edi
lea esi, [ebp - 0xbc]
call fcn.00408d21
push ebx
push edi
lea esi, [ebp - 0x18c]
call fcn.00408d21
push ebx
push edi
lea ecx, [ebp - 0x244]
call fcn.00408339
push ebx
push edi
lea ecx, [ebp - 0x27c]
call fcn.00408339
push ebx
push edi
lea esi, [ebp - 0x1c4]
call fcn.00408d21
push ebx
push edi
lea ecx, [ebp - 0x84]
call fcn.00408339
push ebx
push edi
lea esi, [ebp - 0x68]
call fcn.00408d21
push ebx
push edi
lea esi, [ebp - 0x260]
call fcn.00408d21
push ebx
push edi
lea ecx, [ebp - 0x2b4]
call fcn.00408339
push ebx
push edi
lea ecx, [ebp - 0x4c]
call fcn.00408339
lea eax, [ebp - 0x648]
push eax
mov byte [ebp - 4], 7
call fcn.004155fe
lea edi, [ebp - 0x470]
call fcn.004222ee
lea esi, [ebp - 0x170]
call fcn.00421a2b
lea esi, [ebp - 0x330]
call fcn.004221d1
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x7d0]
call fcn.0041a95f
mov eax, 0x642
jmp 0x420a3d
lea esi, [ebp - 0x470]
call fcn.0042177c
lea eax, [ebp - 0x170]
push eax
mov al, 1
call fcn.00421764
mov al, 1
lea ebx, [ebp - 0x170]
call fcn.00421da8
push 2
xor al, al
mov ecx, ebx
call fcn.00421e46
push 3
xor al, al
mov ecx, ebx
call fcn.00421e46
push 0
mov esi, ebx
call fcn.00421ca2
push 0x3f2
lea esi, [ebp - 0x30]
mov byte [ebp - 0xd7], 1
mov dword [ebp - 0xc8], 1
call fcn.00422d33
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
pop ecx
jae 0x41f3f4
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x170]
call fcn.00421fb5
mov eax, dword [ebp - 0x64]
push 8
pop esi
cmp dword [ebp - 0x50], esi
jae 0x41f40e
lea eax, [ebp - 0x64]
mov ecx, dword [0x449634]
push eax
push 0x406000
call fcn.004088a8
cmp dword [ebp - 0x50], esi
pop ecx
pop ecx
mov ecx, dword [ebp - 0x64]
jae 0x41f42c
lea ecx, [ebp - 0x64]
call fcn.0041b896
cmp dword [ebp - 0x50], esi
mov eax, dword [ebp - 0x64]
jae 0x41f43c
lea eax, [ebp - 0x64]
push eax
lea ebx, [ebp - 0x648]
call fcn.00416011
xor ebx, ebx
test al, al
jne 0x41f724
cmp dword [ebp - 0x50], esi
mov eax, dword [ebp - 0x64]
jae 0x41f45d
lea eax, [ebp - 0x64]
mov ecx, dword [0x449634]
push eax
push 0x406054
call fcn.004088a8
cmp dword [ebp - 0x34], 0x10
mov edi, dword [ebp - 0x48]
pop ecx
pop ecx
jae 0x41f47c
lea edi, [ebp - 0x48]
cmp dword [ebp - 0x50], esi
mov edx, dword [ebp - 0x64]
jae 0x41f487
lea edx, [ebp - 0x64]
lea eax, [ebp - 0x170]
call fcn.004217bf
push edi
push eax
push 1
lea eax, [ebp - 0x4f0]
push eax
mov eax, edx
lea edi, [ebp - 0x610]
call fcn.00414bb7
lea eax, [ebp - 0x210]
call fcn.0041a940
mov byte [ebp - 4], 0x2b
cmp dword [ebp - 0x6c], 0x10
mov ecx, dword [ebp - 0x80]
jae 0x41f4c5
lea ecx, [ebp - 0x80]
cmp dword [ebp - 0x34], 0x10
mov eax, dword [ebp - 0x48]
jae 0x41f4d1
lea eax, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x210]
push ecx
push eax
lea edx, [ebp - 0x170]
lea ecx, [ebp - 0x648]
call fcn.0041c750
add esp, 0xc
mov edi, eax
push 0x403de6
lea eax, [ebp - 0x170]
call fcn.00421e31
cmp edi, ebx
jge 0x41f716
cmp byte [ebp - 0xd8], 0
je 0x41f537
mov esi, dword [0x449634]
call fcn.0042103c
call dword [sym.imp.ole32.dll_CoUninitialize]
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0x1fc]
call fcn.00408d21
jmp 0x41f28e
cmp dword [ebp - 0x34], 0x10
mov eax, dword [ebp - 0x48]
jae 0x41f543
lea eax, [ebp - 0x48]
push eax
push 0x578
lea esi, [ebp - 0x30]
call fcn.00422d33
mov eax, dword [ebp - 0x2c]
pop ecx
pop ecx
push 0x10
pop ebx
cmp dword [ebp - 0x18], ebx
jae 0x41f561
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x170]
call fcn.00421fb5
lea esi, [ebp - 0x2d0]
call fcn.00408db8
mov byte [ebp - 4], 0x2c
cmp dword [ebp - 0x1e4], 8
mov eax, dword [ebp - 0x1f8]
jae 0x41f591
lea eax, [ebp - 0x1f8]
lea ecx, [ebp - 0x2d0]
push ecx
push eax
call fcn.00424680
cmp dword [ebp - 0x2b8], ebx
mov eax, dword [ebp - 0x2cc]
pop ecx
pop ecx
jae 0x41f5b4
lea eax, [ebp - 0x2cc]
push eax
push 0x579
lea esi, [ebp - 0x30]
call fcn.00422d33
cmp dword [ebp - 0x18], ebx
mov eax, dword [ebp - 0x2c]
pop ecx
pop ecx
jae 0x41f5cf
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x170]
call fcn.0041ab38
pop ecx
xor ecx, ecx
inc ecx
lea edi, [ebp - 0x170]
call fcn.00422116
push dword [ebp - 0x208]
lea esi, [ebp - 0x30]
push 0x57a
call fcn.00422d33
cmp dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x2c]
pop ecx
pop ecx
jae 0x41f60a
lea ebx, [ebp - 0x2c]
lea ecx, [ebp - 0x170]
call fcn.004220bb
xor ecx, ecx
inc ecx
lea edi, [ebp - 0x170]
call fcn.00422116
mov eax, dword [0x449634]
cmp dword [eax], 0xffffffff
je 0x41f668
push 2
pop ecx
call fcn.00422116
cmp dword [ebp - 0x6c], 0x10
mov eax, dword [ebp - 0x80]
jae 0x41f641
lea eax, [ebp - 0x80]
push eax
push 0x404
lea esi, [ebp - 0x30]
call fcn.00422d33
cmp dword [ebp - 0x18], 0x10
mov ebx, dword [ebp - 0x2c]
pop ecx
pop ecx
jae 0x41f65d
lea ebx, [ebp - 0x2c]
lea ecx, [ebp - 0x170]
call fcn.004220bb
push 0x3ea
lea esi, [ebp - 0x30]
call fcn.00422d33
cmp dword [ebp - 0x18], 0x10
mov eax, dword [ebp - 0x2c]
pop ecx
jae 0x41f682
lea eax, [ebp - 0x2c]
push eax
xor eax, eax
inc eax
lea ecx, [ebp - 0x170]
call fcn.00421ea6
push 1
mov al, 1
lea ecx, [ebp - 0x170]
call fcn.00421e46
push 2
xor al, al
lea ecx, [ebp - 0x170]
call fcn.00421e46
xor al, al
lea ebx, [ebp - 0x170]
call fcn.00421da8
mov byte [ebp - 0xd7], 1
mov dword [ebp - 0xc8], 1
call fcn.00421bee
or dword [ebp - 0xc8], 0xffffffff
xor ebx, ebx
mov byte [ebp - 0xd7], bl
call dword [sym.imp.ole32.dll_CoUninitialize]
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x2d0]
call fcn.00408339
push ebx
push edi
lea esi, [ebp - 0x1fc]
call fcn.00408d21
lea ecx, [ebp - 0x1e0]
push ebx
push edi
call fcn.00408339
jmp 0x41f043
push ebx
push 1
lea esi, [ebp - 0x1fc]
call fcn.00408d21
or dword [ebp - 0xc8], 0xffffffff
mov byte [ebp - 0xd7], 0
mov dword [ebp - 0x820], ebx
mov dword [ebp - 0x81c], ebx
mov dword [ebp - 0x818], ebx
lea eax, [ebp - 0x824]
push eax
lea ecx, [ebp - 0x648]
mov byte [ebp - 4], 0x2d
call fcn.00416150
test al, al
jne 0x41f897
lea esi, [ebp - 0x34c]
call fcn.00408db8
lea esi, [ebp - 0x3b0]
call fcn.00408db8
lea esi, [ebp - 0x2d0]
call fcn.00408db8
lea esi, [ebp - 0x298]
call fcn.00408db8
lea esi, [ebp - 0x800]
lea edi, [ebp - 0x824]
mov byte [ebp - 4], 0x31
call fcn.00416e41
mov ebx, dword [ebp - 0x800]
lea esi, [ebp - 0x814]
lea edi, [ebp - 0x824]
call fcn.004176a3
test ebx, ebx
mov esi, eax
je 0x41f7c4
cmp ebx, dword [esi]
je 0x41f7c9
call fcn.0042b0a4
mov edi, dword [ebp - 0x7fc]
cmp edi, dword [esi + 4]
je 0x41f864
lea esi, [ebp - 0x1fc]
call fcn.00408db8
test ebx, ebx
mov byte [ebp - 4], 0x32
jne 0x41f7f0
call fcn.0042b0a4
cmp edi, dword [ebx + 8]
jb 0x41f7fa
call fcn.0042b0a4
lea eax, [ebp - 0x1fc]
push eax
mov eax, edi
call fcn.004089eb
push eax
call fcn.00424680
pop ecx
pop ecx
lea ecx, [ebp - 0x1fc]
call fcn.004089dd
push eax
lea eax, [ebp - 0x298]
push eax
call fcn.0040abe5
push 0x403de8
lea eax, [ebp - 0x298]
push eax
call fcn.0040abe5
push 0
push 1
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x31
call fcn.00408339
cmp edi, dword [ebx + 8]
jb 0x41f856
call fcn.0042b0a4
add edi, 0x1c
mov dword [ebp - 0x7fc], edi
jmp 0x41f7a9
lea ecx, [ebp - 0x298]
call fcn.004089dd
push eax
push 0x57d
lea eax, [ebp - 0x878]
push 2
push eax
call fcn.0040897e
add esp, 0x10
push 0x443060
lea eax, [ebp - 0x878]
push eax
call fcn.0042d76b
lea esi, [ebp - 0x824]
call fcn.00420ba9
push ebx
push 1
lea ecx, [ebp - 0x1e0]
call fcn.00408339
lea eax, [ebp - 0x170]
push eax
mov al, 1
mov dword [ebp - 4], 0x14
call fcn.00421764
mov al, 1
lea ebx, [ebp - 0x170]
call fcn.00421da8
push 0x3e8
lea esi, [ebp - 0x30]
call fcn.00422d33
pop ecx
xor ebx, ebx
inc ebx
push ebx
mov al, bl
lea ecx, [ebp - 0x170]
call fcn.00421e46
mov ecx, esi
call fcn.004089dd
push eax
mov eax, ebx
lea ecx, [ebp - 0x170]
call fcn.00421ea6
push 2
xor al, al
lea ecx, [ebp - 0x170]
call fcn.00421e46
push 3
xor al, al
lea ecx, [ebp - 0x170]
call fcn.00421e46
push 0
lea esi, [ebp - 0x170]
call fcn.00421ca2
mov esi, dword [ebp - 0x7e0]
lea eax, [ebp - 0x63c]
mov byte [ebp - 0xd7], bl
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0x47c], esi
call fcn.0041a89d
cmp esi, eax
jge 0x41f95e
mov byte [ebp - 0x47f], bl
push esi
lea eax, [ebp - 0x648]
push eax
lea eax, [ebp - 0x170]
push eax
call fcn.0041c582
add esp, 0xc
mov byte [ebp - 0x7d1], 0
cmp byte [ebp - 0x7d3], 0
jne 0x41fafc
lea esi, [ebp - 0xa0]
call fcn.00408db8
xor eax, eax
mov byte [ebp - 4], 0x36
mov dword [ebp - 0x808], eax
mov dword [ebp - 0x804], eax
mov dword [ebp - 0x800], eax
mov byte [ebp - 0x7fc], al
lea eax, [ebp - 0x808]
push eax
lea ebx, [ebp - 0x648]
call fcn.00415f62
xor ebx, ebx
cmp byte [ebp - 0x7fc], bl
mov byte [ebp - 0x7d3], al
je 0x420029
push 0x403de6
lea eax, [ebp - 0x170]
call fcn.00421e31
lea edi, [ebp - 0x394]
mov byte [ebp - 0x7d1], bl
call fcn.004154d1
mov eax, edi
push eax
mov eax, esi
push eax
mov eax, dword [ebp - 0x7e0]
lea ecx, [ebp - 0x648]
mov byte [ebp - 4], 0x37
call fcn.00415f22
mov eax, dword [ebp - 0x394]
cmp eax, 7
je 0x41fe0a
mov ecx, eax
and ecx, 0xf
cmp cl, 5
je 0x41fe0a
test al, 0x30
je 0x41fdc4
cmp dword [ebp - 0x24c], ebx
jne 0x41facf
push ebx
push ebx
lea esi, [ebp - 0x1fc]
call fcn.00408d21
mov eax, esi
push eax
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0x38
call fcn.004089dd
push eax
call fcn.00424702
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x244]
call fcn.004083a0
cmp byte [ebp - 0x7d8], bl
lea eax, [ebp - 0x18c]
jne 0x41fa95
lea eax, [ebp - 0xbc]
call fcn.004089eb
mov esi, eax
lea eax, [ebp - 0x1fc]
call fcn.004089eb
push eax
push esi
lea eax, [ebp - 0x260]
push 0x406088
push eax
call fcn.0042445a
add esp, 0x10
push ebx
push 1
lea esi, [ebp - 0x1fc]
mov byte [ebp - 4], 0x37
call fcn.00408d21
test byte [ebp - 0x394], 0x10
mov byte [ebp - 0x7d2], 1
je 0x41fdc4
lea esi, [ebp - 0x394]
call fcn.004154f7
push ebx
push 1
lea ecx, [ebp - 0xa0]
call fcn.00408339
mov dword [ebp - 4], 0x14
or dword [ebp - 0xc8], 0xffffffff
cmp byte [ebp - 0x7d3], 0
mov byte [ebp - 0xd7], 0
je 0x41fb28
cmp byte [ebp - 0xd8], 0
sete byte [ebp - 0x7d4]
xor ebx, ebx
push 0x3ea
lea esi, [ebp - 0x30]
call fcn.00422d33
pop ecx
mov ecx, esi
call fcn.004089dd
push eax
xor eax, eax
inc eax
lea ecx, [ebp - 0x170]
call fcn.00421ea6
xor eax, eax
push 1
inc eax
lea ecx, [ebp - 0x170]
call fcn.00421e78
cmp byte [ebp - 0x7d2], bl
je 0x420417
cmp byte [ebp - 0xd8], bl
je 0x420301
push 0x408
jmp 0x420306
inc dword [ebp - 0x7e0]
cmp byte [ebp - 0xd8], bl
jne 0x41fae3
cmp byte [ebp - 0x7d3], bl
jne 0x41fdfa
push dword [ebp - 0x7e0]
lea eax, [ebp - 0x648]
push eax
lea eax, [ebp - 0x170]
push eax
call fcn.0041c582
add esp, 0xc
lea esi, [ebp - 0x394]
call fcn.004154f7
jmp 0x420177
test al, 0x30
je 0x41fe2a
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x244]
mov byte [ebp - 0x7d2], 1
call fcn.004083a0
lea ecx, [ebp - 0x4c]
call fcn.004089dd
cmp byte [ebp - 0x7d2], bl
push eax
lea esi, [ebp - 0x30]
je 0x41fe45
push 0x3f9
jmp 0x41fe4a
push 0x3f8
call fcn.00422d33
pop ecx
pop ecx
lea ecx, [ebp - 0x30]
call fcn.004089dd
push eax
lea eax, [ebp - 0x170]
call fcn.00421fb5
lea esi, [ebp - 0x170]
call fcn.00421fcd
cmp dword [ebp - 0x370], ebx
jbe 0x41fea2
lea ecx, [ebp - 0x384]
call fcn.004089dd
push eax
lea ecx, [ebp - 0xa0]
call fcn.004089dd
push eax
push 0x402
lea esi, [ebp - 0x30]
call fcn.00422d33
add esp, 0xc
jmp 0x41febd
lea ecx, [ebp - 0xa0]
call fcn.004089dd
push eax
push 0x401
lea esi, [ebp - 0x30]
call fcn.00422d33
pop ecx
pop ecx
lea ecx, [ebp - 0x30]
call fcn.004089dd
push eax
lea ecx, [ebp - 0x170]
call fcn.0041ab38
pop ecx
push 2
pop ecx
lea edi, [ebp - 0x170]
call fcn.00422116
push ebx
lea edx, [ebp - 0x648]
mov ecx, edi
call fcn.0041e0a4
mov eax, dword [0x449634]
cmp dword [eax], 0xffffffff
pop ecx
je 0x41ff24
lea ecx, [ebp - 0x84]
call fcn.004089dd
push eax
push 0x404
lea esi, [ebp - 0x30]
call fcn.00422d33
pop ecx
pop ecx
mov ecx, esi
call fcn.004089dd
mov ebx, eax
mov ecx, edi
call fcn.004220bb
xor al, al
lea ebx, [ebp - 0x170]
call fcn.00421da8
cmp byte [ebp - 0x7d2], 0
je 0x41ff91
push 0
xor ecx, ecx
call fcn.0041b9bf
xor eax, eax
pop ecx
inc eax
push eax
mov ecx, ebx
call fcn.00421e78
call fcn.00421f26
push 3
pop eax
mov esi, ebx
call fcn.00421ec7
mov edi, ebx
call fcn.0041bb01
mov esi, dword [0x449634]
call fcn.0042103c
call dword [sym.imp.ole32.dll_CoUninitialize]
lea esi, [ebp - 0x394]
call fcn.004154f7
xor ebx, ebx
xor edi, edi
inc edi
lea ecx, [ebp - 0xa0]
jmp 0x41f70a
push 0x3ea
lea esi, [ebp - 0x30]
call fcn.00422d33
pop ecx
mov ecx, esi
call fcn.004089dd
xor ebx, ebx
push eax
inc ebx
mov eax, ebx
lea ecx, [ebp - 0x170]
call fcn.00421ea6
push ebx
mov al, bl
lea ecx, [ebp - 0x170]
call fcn.00421e46
push ebx
mov eax, ebx
lea ecx, [ebp - 0x170]
call fcn.00421e78
push 2
xor al, al
lea ecx, [ebp - 0x170]
call fcn.00421e46
mov esi, dword [0x449634]
call fcn.0042103c
mov byte [ebp - 0xd7], bl
mov dword [ebp - 0xc8], ebx
lea ebx, [ebp - 0x170]
call fcn.00421bee
or dword [ebp - 0xc8], 0xffffffff
xor ebx, ebx
mov byte [ebp - 0xd7], bl
call dword [sym.imp.ole32.dll_CoUninitialize]
lea esi, [ebp - 0x394]
call fcn.004154f7
jmp 0x41ff83
mov edi, dword [ebp - 0x800]
cmp dword [ebp - 0x804], edi
jbe 0x420080
cmp edi, ebx
jbe 0x420080
cmp dword [ebp - 0x804], ebx
jbe 0x420080
cmp byte [ebp - 0x7d1], bl
jne 0x420073
push 0x417
lea esi, [ebp - 0x30]
call fcn.00422d33
pop ecx
mov ecx, esi
call fcn.004089dd
push eax
lea eax, [ebp - 0x170]
call fcn.00421e31
mov byte [ebp - 0x7d1], 1
mov eax, dword [ebp - 0x804]
xor edx, edx
div edi
push edx
jmp 0x420086
push dword [ebp - 0x804]
mov eax, edi
lea esi, [ebp - 0x170]
call fcn.00421de3
cmp byte [ebp - 0x7d9], bl
jne 0x420177
cmp byte [ebp - 0xd8], bl
je 0x420177
lea esi, [ebp - 0x298]
call fcn.00408db8
push 0x406
mov byte [ebp - 4], 0x39
call fcn.00422d33
pop ecx
lea esi, [ebp - 0x1fc]
call fcn.00408db8
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x3a
call fcn.004089dd
push eax
push 0x3f4
call fcn.00422d33
pop ecx
pop ecx
push 0x34
mov ecx, esi
call fcn.004089dd
push eax
lea ecx, [ebp - 0x298]
call fcn.004089dd
push eax
lea eax, [ebp - 0x170]
call fcn.004217bf
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x420142
push 0x4060b4
call fcn.004086a5
or eax, 0xffffffff
lea esi, [ebp - 0x170]
call fcn.00421ec7
xor eax, eax
push ebx
inc eax
mov ecx, esi
call fcn.00421e78
mov byte [ebp - 0x7d9], 1
jmp 0x42015b
cmp byte [ebp - 0xd7], bl
mov byte [ebp - 0xd8], bl
je 0x42015b
lea eax, [ebp - 0x170]
call fcn.00421d85
push ebx
push 1
lea ecx, [ebp - 0x1fc]
call fcn.00408339
push ebx
push 1
lea ecx, [ebp - 0x298]
call fcn.00408339
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push 1
lea ecx, [ebp - 0xa0]
call fcn.00408339
jmp 0x41f97c
lea esi, [ebp - 0x330]
mov byte [ebp - 0x7d4], 1
call fcn.0042177c
jmp 0x41fb2a
push 0x409
call fcn.00422d33
pop ecx
lea ecx, [ebp - 0x30]
call fcn.004089dd
push eax
lea eax, [ebp - 0x170]
call fcn.00421fb5
push ebx
lea ecx, [ebp - 0x170]
call fcn.0041ab38
cmp dword [ebp - 0x230], ebx
pop ecx
je 0x420374
lea ecx, [ebp - 0x244]
call fcn.004089dd
push eax
push 0x411
lea esi, [ebp - 0x30]
call fcn.00422d33
pop ecx
pop ecx
mov ecx, esi
call fcn.004089dd
mov ebx, eax
lea ecx, [ebp - 0x170]
call fcn.004220bb
push 2
pop ecx
lea edi, [ebp - 0x170]
call fcn.00422116
xor ebx, ebx
push 1
lea edx, [ebp - 0x648]
lea ecx, [ebp - 0x170]
call fcn.0041e0a4
cmp byte [ebp - 0xd8], bl
pop ecx
jne 0x4203f9
lea eax, [ebp - 0x260]
call fcn.004089eb
push eax
lea eax, [ebp - 0x68]
call fcn.004089eb
mov ecx, eax
call fcn.0041b9bf
pop ecx
push ebx
push ebx
lea esi, [ebp - 0x1fc]
call fcn.00408d21
push ebx
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0x3d
call fcn.004089eb
mov ecx, esi
push ecx
mov ecx, 0x405f4c
mov ebx, eax
xor edi, edi
call fcn.00427113
pop ecx
pop ecx
mov eax, esi
call fcn.004089eb
push eax
lea eax, [ebp - 0x648]
push eax
call fcn.0041635d
push edi
push 1
mov byte [ebp - 4], 0x14
call fcn.00408d21
lea ebx, [ebp - 0x170]
call fcn.00421f26
push 3
pop eax
mov esi, ebx
call fcn.00421ec7
mov edi, ebx
call fcn.0041bb01
jmp 0x420495
cmp byte [ebp - 0xd8], bl
je 0x420580
push 0x40e
lea esi, [ebp - 0x30]
call fcn.00422d33
pop ecx
mov ecx, esi
call fcn.004089dd
push eax
lea eax, [ebp - 0x170]
call fcn.00421fb5
push ebx
lea ecx, [ebp - 0x170]
call fcn.0041ab38
push ebx
lea edx, [ebp - 0x648]
lea ecx, [ebp - 0x170]
call fcn.0041e0a4
pop ecx
pop ecx
xor al, al
lea ebx, [ebp - 0x170]
call fcn.00421da8
mov byte [ebp - 0xd7], 1
mov dword [ebp - 0xc8], 1
call fcn.00421bee
or dword [ebp - 0xc8], 0xffffffff
mov byte [ebp - 0xd7], 0
xor ebx, ebx
mov esi, dword [0x449634]
call fcn.0042103c
call dword [sym.imp.ole32.dll_CoUninitialize]
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x30]
call fcn.00408339
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x7f8]
mov dword [ebp - 0x7f8], 0x40611c
call fcn.0040e326
push ebx
push edi
lea esi, [ebp - 0xbc]
call fcn.00408d21
push ebx
push edi
lea esi, [ebp - 0x18c]
call fcn.00408d21
push ebx
push edi
lea ecx, [ebp - 0x244]
call fcn.00408339
push ebx
push edi
lea ecx, [ebp - 0x27c]
call fcn.00408339
push ebx
push edi
lea esi, [ebp - 0x1c4]
call fcn.00408d21
push ebx
push edi
lea ecx, [ebp - 0x84]
call fcn.00408339
push ebx
push edi
lea esi, [ebp - 0x68]
call fcn.00408d21
push ebx
push edi
lea esi, [ebp - 0x260]
call fcn.00408d21
push ebx
push edi
lea ecx, [ebp - 0x2b4]
call fcn.00408339
push ebx
push edi
lea ecx, [ebp - 0x4c]
call fcn.00408339
lea eax, [ebp - 0x648]
push eax
mov byte [ebp - 4], 7
call fcn.004155fe
lea edi, [ebp - 0x470]
call fcn.004222ee
lea esi, [ebp - 0x170]
call fcn.00421a2b
lea esi, [ebp - 0x330]
call fcn.004221d1
jmp 0x41e67b
cmp byte [ebp - 0x7d4], bl
je 0x420497
cmp dword [ebp - 0x680], ebx
je 0x420497
lea esi, [ebp - 0x7d0]
mov byte [ebp - 4], 0x3e
call fcn.00407d29
cmp al, bl
je 0x42067d
push ebx
push ebx
push ebx
lea eax, [ebp - 0x65c]
push eax
xor eax, eax
mov edi, esi
call fcn.00414bb7
lea ecx, [ebp - 0x4c]
call fcn.004089dd
push eax
mov eax, esi
push eax
lea ecx, [ebp - 0x170]
call fcn.0041cbc3
cmp eax, ebx
pop ecx
pop ecx
jge 0x42060b
mov esi, dword [0x449634]
push eax
push 0x4060d0
call fcn.0040883c
mov esi, dword [0x449634]
pop ecx
pop ecx
call fcn.0042103c
call dword [sym.imp.ole32.dll_CoUninitialize]
xor edi, edi
inc edi
jmp 0x41f043
push ebx
push ebx
lea esi, [ebp - 0x1fc]
call fcn.00408d21
mov ecx, esi
mov byte [ebp - 4], 0x3f
call fcn.0042698a
lea eax, [ebp - 0x170]
call fcn.004217bf
push eax
mov eax, esi
call fcn.004089eb
push eax
lea ecx, [ebp - 0x7d0]
call fcn.00407e7e
xor edi, edi
inc edi
cmp eax, edi
je 0x42066c
mov esi, dword [0x449634]
call fcn.0042103c
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push edi
lea esi, [ebp - 0x1fc]
call fcn.00408d21
jmp 0x41f043
push ebx
push edi
lea esi, [ebp - 0x1fc]
mov byte [ebp - 4], 0x3e
call fcn.00408d21
push 0x406104
call fcn.004086a5
lea eax, [ebp - 0x170]
push eax
xor al, al
call fcn.00421764
lea ecx, [ebp - 0x27c]
call fcn.004089dd
mov edx, eax
lea ecx, [ebp - 0x7d0]
call fcn.004073ee
lea eax, [ebp - 0x170]
mov dword [ebp - 4], 0x14
call fcn.00421bc8
jmp 0x420497
call fcn.0042dc77
ret 0x10