Function at 0xb5b070
Capabilities:
Hide graphical window
Shutdown system

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0xbc9d3b
mov eax, dword fs:[0]
push eax
sub esp, 0x648
mov eax, dword [0xd08954]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov edx, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x644], edi
mov dword [ebp - 0x63c], edx
mov dword [ebp - 0x640], ecx
mov dword [ebp - 0x64c], 0
cmp esi, 0x7e
jae 0xb5b164
cmp esi, 0x4b
jb 0xb5b164
cmp dword [ebx + 0xdc], esi
je 0xbe20dd
cmp dword [ebx + 0x154], esi
je 0xbe20e9
cmp dword [ebx + 0x158], esi
je 0xbe20f9
mov ebx, dword [ebx + 0x1e0]
mov eax, dword [ebx]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x654], eax
cmp eax, fcn.00b5c260
jne 0xbe212a
lea eax, [ebp - 0x645]
push eax
push ecx
push edx
push esi
push edi
push ebx
call fcn.00b5c260
cmp byte [ebp - 0x645], 0
mov dword [ebp - 0x64c], eax
jne 0xb5b253
mov eax, dword [ebp - 0x64c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00bc0ea0
mov esp, ebp
pop ebp
ret 0x10
cmp esi, 0x313
jae 0xb5b196
cmp esi, 0x16
jb 0xb5b1a4
cmp esi, 0x113
jne 0xb5b1af
cmp edx, 0x1b
jne 0xb5b509
lea ecx, [ebx + 0x1b4]
call fcn.00b5a890
test eax, eax
jns 0xb5b140
jmp 0xbe21d7
cmp esi, 0x32b
jb case.0xb5b289.3
jmp 0xb5b16c
cmp esi, 0x12
jae case.0xb5b289.3
jmp 0xb5b171
cmp esi, 0x111
jbe 0xb5b26e
cmp esi, 0x550
ja 0xb5b2d7
je 0xb5b4cb
cmp esi, 0x40d
ja 0xb5b488
je case.0xb5b289.3
cmp esi, 0x2b1
ja 0xb5b30e
je 0xbe1dc2
cmp esi, 0x112
je 0xbe1d9f
cmp esi, 0x218
jne case.0xb5b289.3
mov eax, dword [ebx + 0x1e0]
push ecx
push edx
push esi
mov eax, dword [eax]
push edi
mov eax, dword [eax + 0x8c]
cmp eax, fcn.00ba5830
mov dword [ebp - 0x650], eax
mov eax, dword [ebx + 0x1e0]
push eax
jne 0xbe1d8a
call fcn.00ba5830
push dword [ebp - 0x640]
mov edi, dword [ebp - 0x63c]
mov ecx, ebx
push edi
push esi
call fcn.00b8fbf3
mov edi, dword [ebp - 0x644]
mov edx, dword [ebp - 0x63c]
mov ecx, dword [ebp - 0x640]
push ecx
push edx
push esi
push edi
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_DefWindowProcW]
jmp 0xb5b146
je 0xbe1d33
lea eax, [esi - 1]
cmp eax, 0xfe
ja case.0xb5b289.3
movzx eax, byte [eax + 0xb5b778]
jmp dword [eax*4 + 0xb5b748]
test ecx, ecx
je case.0xb5b497.1259
cmp dword [ecx], 0
je 0xb5b541
mov esi, dword [ebx + 0x1e0]
mov eax, dword [esi]
mov edi, dword [eax + 0x88]
lea eax, [ebp - 0x64c]
push eax
push ecx
push edx
push esi
cmp edi, fcn.00b5d590
jne 0xbe1b0e
call fcn.00b5d590
test al, al
jne 0xb5b140
jmp case.0xb5b497.1259
lea eax, [esi - 0x551]
cmp eax, 0x7b
ja case.0xb5b289.3
movzx eax, byte [eax + 0xb5b8dc]
jmp dword [eax*4 + 0xb5b878]
cmp byte [ebx + 0xf6], 0
jne 0xb5b140
push edx
mov ecx, ebx
call fcn.00b5af3e
jmp 0xb5b140
mov eax, esi
sub eax, 0x312
je 0xb5b56c
sub eax, 0x19
jne case.0xb5b289.3
push edx
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_IsWindow]
test eax, eax
je 0xb5b140
mov edi, dword [ebp - 0x63c]
push 0xfffffffffffffff0
push edi
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetWindowLongW]
push 0xffffffffffffffec
mov esi, eax
push edi
mov dword [ebp - 0x644], esi
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetWindowLongW]
mov dword [ebp - 0x654], eax
lea eax, [ebp - 0x628]
push 0x104
push eax
push edi
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetClassNameW]
test eax, eax
jle 0xb5b140
xor eax, eax
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x650]
push eax
push edi
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetWindowThreadProcessId]
test eax, eax
je 0xbe1ded
push dword [ebp - 0x650]
xor eax, eax
push eax
push 0x1000
mov word [ebp - 0x218], ax
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_1.dll_OpenProcess]
mov edi, eax
test edi, edi
je 0xb5b54e
lea eax, [ebp - 0x63c]
mov dword [ebp - 0x63c], 0x104
push eax
lea eax, [ebp - 0x420]
push eax
push 0
push edi
call dword [sym.imp.api_ms_win_core_psapi_l1_1_0.dll_QueryFullProcessImageNameW]
test eax, eax
je 0xbe1de3
lea ecx, [ebp - 0x218]
xor ebx, ebx
lea esi, [ebp - 0x420]
mov eax, ecx
mov edx, 0x104
sub esi, eax
jmp 0xb5b400
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0xb5b423
movzx eax, word [esi + ecx]
test ax, ax
je 0xb5b423
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0xb5b400
jmp 0xbe1dd6
test edx, edx
je 0xbe1dd6
mov esi, dword [ebp - 0x644]
xor eax, eax
mov word [ecx], ax
push edi
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
test ebx, ebx
js 0xb5b140
push 0xb2ba8c
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.api_ms_win_core_shlwapi_legacy_l1_1_0.dll_PathMatchSpecW]
test eax, eax
lea eax, [ebp - 0x218]
je 0xb5b468
push eax
call dword [sym.imp.api_ms_win_core_shlwapi_legacy_l1_1_0.dll_PathFindFileNameW]
mov ecx, dword [ebp - 0x640]
mov edx, esi
push eax
lea eax, [ebp - 0x628]
push eax
push dword [ebp - 0x654]
call fcn.00bc2a14
jmp 0xb5b140
lea eax, [esi - 0x4e5]
cmp eax, 0xf
ja case.0xb5b289.3
jmp dword [eax*4 + 0xb5b958]
test ecx, ecx
je 0xb5b4b4
cmp ecx, dword [ebx + 0x148]
je 0xb5b4b4
mov dword [ebx + 0x148], 0
cmp dword [ebx + 0x148], 0
jne case.0xb5b497.1259
mov eax, 1
jmp 0xb5b146
push 0
push edx
push 1
push ecx
lea eax, [ebx + 0x1c]
push eax
call fcn.00b5bbe0
jmp 0xb5b140
push ecx
push edx
mov ecx, ebx
call fcn.00b8f8e9
jmp 0xb5b140
push ecx
push edx
mov ecx, ebx
call fcn.00b5bd1c
jmp 0xb5b140
push edx
push ecx
mov ecx, ebx
call fcn.00b5bac1
jmp 0xb5b146
lea eax, [edx - 0x10]
cmp eax, 8
ja case.0xb5b515.20
jmp dword [eax*4 + 0xb5b998]
call dword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoFreeUnusedLibraries]
call dword [sym.imp.ntdll.dll_RtlFlushHeaps]
push 0x18
push dword [ebx + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_KillTimer]
lea eax, [ebx + 0x1c]
push eax
call fcn.00b5bdd0
jmp 0xb5b140
push ecx
mov ecx, ebx
call fcn.00b8fc84
jmp 0xb5b146
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ebx, eax
test ebx, ebx
jle 0xb5b43f
movzx ebx, bx
or ebx, 0x80070000
jmp 0xb5b43d
push ecx
push edx
mov ecx, ebx
call fcn.00b50ebf
test al, al
jne 0xb5b140
mov edi, dword [ebp - 0x63c]
mov ecx, ebx
cmp edi, 0x1f4
jb 0xbe1e02
push dword [ebp - 0x640]
push edi
call fcn.00b50f16
jmp 0xb5b140
cmp dword [ebx + 0xfc], 0
jne 0xb5b140
push ecx
push edx
push esi
push edi
mov ecx, ebx
call fcn.00b5ad80
jmp 0xb5b140
push ecx
push edx
mov ecx, ebx
call fcn.00b5123e
jmp 0xb5b140
mov ecx, ebx
call fcn.00b5b9de
jmp 0xb5b146
cmp dword [ebx + 0xe4], 0
jne 0xbe214f
push 0x17
push dword [ebx + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_KillTimer]
mov dword [ebx + 0xe8], 0
jmp 0xb5b140
mov ecx, ebx
call fcn.00b90a36
jmp 0xb5b146
mov ecx, ebx
call fcn.00b8f6bd
jmp 0xb5b140
mov ecx, dword [ebx + 0x1e0]
push ecx
mov eax, dword [ecx]
mov esi, dword [eax + 0x90]
cmp esi, fcn.00ba5810
jne 0xbe1f04
call fcn.00ba5810
mov eax, dword [ebx + 0x17c]
test eax, eax
je 0xb5b140
push eax
push 0
mov ecx, ebx
call fcn.00b8f8e9
jmp 0xb5b140
push 2
mov ecx, ebx
call fcn.00b90088
jmp 0xb5b140
test edx, edx
jne 0xbe205b
xor al, al
mov ecx, dword [ebx + 0x1e0]
mov byte [ebx + 0xf5], al
push ecx
mov eax, dword [ecx]
mov esi, dword [eax + 0xa0]
cmp esi, fcn.00ba59a0
jne 0xbe2062
call fcn.00ba59a0
jmp 0xb5b140
test edx, edx
jne 0xbe2071
xor al, al
mov ecx, dword [ebx + 0x1e0]
mov byte [ebx + 0xf4], al
push ecx
mov eax, dword [ecx]
mov esi, dword [eax + 0xa4]
cmp esi, fcn.00ba5870
jne 0xbe2078
call fcn.00ba5870
cmp byte [ebx + 0xf4], 0
je 0xb5b140
jmp 0xbe2087
test edx, edx
jne 0xb5b741
xor al, al
mov byte [ebx + 0xf6], al
test al, al
jne 0xbe20a6
mov dword [ebx + 0xf8], 0
mov ecx, dword [ebx + 0x1e0]
push ecx
mov eax, dword [ecx]
mov esi, dword [eax + 0xa8]
cmp esi, fcn.00ba5a30
jne 0xbe2062
call fcn.00ba5a30
jmp 0xb5b140
call dword [sym.imp.SHELL32.dll_Ordinal_733]
jmp 0xb5b140
push 0x11
push dword [ebx + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_KillTimer]
lea eax, [ebx + 0x1c]
push eax
call fcn.00b8ffb0
jmp 0xb5b140
mov al, 1
jmp 0xb5b6e0
mov ecx, edi
call dword [0xd0cffc]
call edi
jmp 0xb5b2ca
mov ecx, ebx
call fcn.00c36a9c
jmp 0xb5b146
test dl, 1
je 0xbe1b75
cmp byte [ebx + 0x1d9], 0
jne 0xbe1b40
lea eax, [ebx + 0x1c]
push eax
call fcn.00b8ffb0
push 1
mov ecx, ebx
call fcn.00c3671b
test eax, eax
je case.0xb5b497.1259
push 1
push 0xb2f6c4
push dword [ebx + 0x1dc]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_SetPropW]
mov byte [ebx + 0x1d8], 1
mov eax, 1
jmp 0xb5b146
push 1
push 0xb2f6c4
push dword [ebx + 0x1dc]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_SetPropW]
mov byte [ebx + 0x1d8], 1
jmp 0xb5b253
test byte [0xd0a5c0], 1
je 0xbe1bb5
push ecx
push edx
mov edx, 0xb3db80
call fcn.00c38dc1
mov edx, dword [ebp - 0x63c]
mov ecx, dword [ebp - 0x640]
test edx, edx
je 0xbe1ca3
test ecx, ecx
jns 0xbe1bd8
push ebx
push 0xb84cb0
push 0
push 0
mov dword [ebx + 0x44], 1
call dword [sym.imp.api_ms_win_ntuser_sysparams_l1_1_0.dll_EnumDisplayMonitors]
lea eax, [ebx + 0x1c]
push eax
call fcn.00b8ffb0
push 0
push dword [ebx + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_ShowWindow]
push 0
push dword [0xd0a20c]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_ShowWindow]
cmp dword [ebx + 0xfc], 0
jne 0xb5b140
test byte [ebp - 0x640], 1
jne 0xbe1c95
cmp dword [0xd0b1f4], 0
jne 0xbe1c95
cmp dword [ebx + 0x140], 0
je 0xbe1c95
mov dword [ebp - 0x644], 0
lea ecx, [ebp - 0x644]
mov dword [ebp - 4], 0
call fcn.00b8ba6f
mov eax, dword [ebx + 0x140]
lea ecx, [ebp - 0x644]
push ecx
push 0xb3e9c0
push 0xb3d7f0
mov esi, dword [eax]
push eax
mov esi, dword [esi + 0xc]
mov ecx, esi
call dword [0xd0cffc]
call esi
test eax, eax
js 0xbe1c83
mov eax, dword [ebp - 0x644]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0xc]
mov ecx, esi
call dword [0xd0cffc]
call esi
lea ecx, [ebp - 0x644]
mov dword [ebp - 4], 0xffffffff
call fcn.00b8ba6f
push dword [ebx + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_DestroyWindow]
jmp 0xb5b140
cmp byte [ebx + 0x1d9], 0
mov byte [ebx + 0x1d8], 0
jne 0xb5b140
push 0xb2f6c4
push dword [ebx + 0x1dc]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_RemovePropW]
jmp 0xb5b140
cmp dword [ebx + 0x90], 0
je 0xb5b25f
push 0x7f8a
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov eax, 1
jmp 0xb5b146
push 0xb2f6c4
push dword [ebx + 0x1dc]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_RemovePropW]
mov dword [ebx + 0x1dc], 0
jmp 0xb5b140
cmp dword [ebx + 0x84], 0
je 0xb5b140
push ecx
push edx
push esi
call dword [sym.imp.SndVolSSO.DLL_Ordinal_3]
jmp 0xb5b140
mov eax, dword [ebx + 0x1e0]
lea edi, [ebp - 0x64c]
push edi
mov edi, dword [ebp - 0x644]
push ecx
mov esi, dword [eax]
push edx
push 0x111
push edi
mov esi, dword [esi + 0x94]
mov ecx, esi
push eax
call dword [0xd0cffc]
call esi
test eax, eax
jne 0xb5b140
mov edi, dword [ebp - 0x63c]
push 1
push eax
push dword [ebp - 0x640]
movzx eax, di
push eax
lea eax, [ebx + 0x1c]
push eax
call fcn.00b8f560
jmp 0xb5b140
mov edi, dword [ebp - 0x650]
mov ecx, edi
call dword [0xd0cffc]
call edi
jmp 0xb5b238
mov eax, edx
and eax, 0xfff0
cmp eax, 0xf060
jne 0xb5b25f
push 0
sub esp, 8
mov ecx, ebx
call fcn.00c3679a
jmp 0xb5b140
push ecx
push edx
mov ecx, ebx
call fcn.00c37c5d
mov dword [ebp - 0x64c], eax
jmp 0xb5b140
sub ecx, 2
mov ebx, 0x8007007a
jmp 0xb5b42b
mov ebx, 0x80004005
jmp 0xb5b436
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ebx, eax
test ebx, ebx
jle 0xb5b43f
jmp 0xb5b55e
movzx eax, di
push eax
call fcn.00c36de8
jmp 0xb5b140
push ecx
push edx
push edi
mov ecx, ebx
call fcn.00c38b2c
mov edi, dword [ebp - 0x63c]
mov esi, eax
push edi
call dword [sym.imp.api_ms_win_shell_namespace_l1_1_0.dll_ILFree]
push dword [ebp - 0x640]
call dword [sym.imp.api_ms_win_shell_namespace_l1_1_0.dll_ILFree]
mov eax, esi
jmp 0xb5b146
push edx
push edi
mov ecx, ebx
call fcn.00c37edd
jmp 0xb5b146
push edx
push edi
call dword [sym.imp.USER32.dll_UnregisterHotKey]
jmp 0xb5b4c1
push ecx
push edx
push ecx
mov ecx, ebx
call fcn.00c38790
jmp 0xb5b146
push edx
push edi
mov ecx, ebx
call fcn.00c3880e
jmp 0xb5b146
xor eax, eax
test edx, edx
sete al
mov dword [ebx + 0x48], eax
mov eax, 1
jmp 0xb5b146
xor eax, eax
jmp 0xb5b146
push ecx
push 2
mov ecx, ebx
call fcn.00c38521
jmp 0xb5b146
push ecx
push edx
mov ecx, ebx
call fcn.00c36a2b
jmp 0xb5b146
mov ecx, ebx
call fcn.00c34f7b
jmp 0xb5b140
mov eax, dword [0xd0aff8]
mov dword [ebp - 0x64c], eax
jmp 0xb5b140
push ecx
mov ecx, ebx
call fcn.00c37c0d
jmp 0xb5b140
call fcn.00c71a24
jmp 0xb5b140
push 0x13
push 0
push 0
push 0
push 0
push 0
push edx
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_SetWindowPos]
jmp 0xb5b140
push ecx
mov ecx, ebx
call fcn.00c3743e
jmp 0xb5b140
mov ecx, esi
call dword [0xd0cffc]
call esi
jmp 0xb5b638
push edx
mov ecx, ebx
call fcn.00c365e0
jmp 0xb5b140
lea eax, [ebx + 0x1c]
push eax
call fcn.00b8ffb0
push 2
mov ecx, ebx
call fcn.00c3671b
jmp 0xb5b140
xor cl, cl
call fcn.00c73870
push 0
push 0xb284a8
mov edx, 3
mov ecx, 0xb472f8
call fcn.00b80eb2
jmp 0xb5b140
cmp dword [ebx + 0xec], edx
je 0xb5b140
mov dword [ebx + 0xec], edx
mov dword [ebx + 0x44], 0
test edx, edx
jne 0xbe1fa3
push ebx
push 0xb84cb0
push edx
push edx
call dword [sym.imp.api_ms_win_ntuser_sysparams_l1_1_0.dll_EnumDisplayMonitors]
push 0
lea ecx, [ebx + 0x1b4]
call fcn.00b9295c
test eax, eax
jns 0xb5b140
mov edx, 0x1035
jmp 0xbe21dc
lea ecx, [ebx + 0x1b4]
call fcn.00c6c354
jmp 0xb5b140
mov eax, dword [ebx + 0x1e0]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x98]
mov ecx, esi
call dword [0xd0cffc]
call esi
push 0x2bf20
push 0
push 0x2bf20
push 0x18
push dword [ebx + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_SetCoalescableTimer]
jmp 0xb5b140
movsx eax, dx
mov dword [ebp - 0x638], eax
shr edx, 0x10
movsx eax, dx
mov dword [ebp - 0x634], eax
movsx eax, cx
shr ecx, 0x10
mov dword [ebp - 0x630], eax
movsx eax, cx
mov dword [ebp - 0x62c], eax
mov eax, dword [ebx + 0x1e0]
push 1
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x9c]
mov ecx, esi
call dword [0xd0cffc]
call esi
lea eax, [ebp - 0x638]
mov ecx, ebx
push eax
call fcn.00c389d6
mov eax, dword [ebx + 0x1e0]
push 0
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x9c]
mov ecx, esi
call dword [0xd0cffc]
call esi
jmp 0xb5b140
mov al, 1
jmp 0xb5b66d
mov ecx, esi
call dword [0xd0cffc]
call esi
jmp 0xb5b140
mov al, 1
jmp 0xb5b6a2
mov ecx, esi
call dword [0xd0cffc]
call esi
jmp 0xb5b6c8
push 1
lea ecx, [ebx + 0x1b4]
call fcn.00b9295c
test eax, eax
jns 0xb5b140
mov edx, 0x1075
jmp 0xbe21dc
mov ecx, 0xfffffffc
call fcn.00bab2a0
test eax, eax
je 0xb5b6ee
cmp dword [ebx + 0xf8], 0
jne 0xb5b6f8
call fcn.00c3443a
xor ecx, ecx
test al, al
setne cl
inc ecx
mov dword [ebx + 0xf8], ecx
jmp 0xb5b6f8
push 0
push 0
call dword [sym.imp.USER32.dll_ExitWindowsEx]
jmp 0xbe2119
mov eax, dword [ebx + 0x1e0]
mov ecx, dword [eax]
mov edi, dword [ecx + 0xac]
jmp 0xbe2107
mov eax, dword [ebx + 0x1e0]
mov ecx, dword [eax]
mov edi, dword [ecx + 0xb0]
push edx
push eax
mov ecx, edi
call dword [0xd0cffc]
call edi
mov edi, dword [ebp - 0x644]
mov edx, dword [ebp - 0x63c]
mov ecx, dword [ebp - 0x640]
jmp 0xb5b100
lea edi, [ebp - 0x645]
push edi
mov edi, dword [ebp - 0x644]
push ecx
push edx
push esi
push edi
push ebx
mov ecx, eax
call dword [0xd0cffc]
call dword [ebp - 0x654]
jmp 0xb5b12d
call dword [sym.imp.SHELL32.dll_Ordinal_753]
mov dword [ebx + 0xe4], 0
jmp 0xb5b140
push 0x10
push dword [ebx + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_KillTimer]
lea eax, [ebx + 0x1c]
push eax
call fcn.00b8ffb0
mov byte [ebx + 0x150], 0
jmp 0xb5b140
push 0x12
push dword [ebx + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_KillTimer]
push ecx
push 0
mov ecx, ebx
call fcn.00b5123e
jmp 0xb5b140
push 0x13
push dword [ebx + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_KillTimer]
push dword [ebx + 0xb4]
mov ecx, ebx
call fcn.00c37858
jmp 0xb5b140
mov eax, dword [ebx + 0x1e0]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x5c]
mov ecx, esi
call dword [0xd0cffc]
call esi
jmp 0xb5b140
mov edx, 0x6b9
mov ecx, dword [ebp + 4]
push eax
push 0xb2b1d4
call fcn.00b913f8
jmp 0xb5b140