Function at 0x422830
Capabilities:
Get common file path
Get startup folder

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ff7bb
mov eax, dword fs:[0]
push eax
sub esp, 0x30c
mov eax, dword [0x54c728]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push eax
mov dword [ebp - 0x26c], eax
call fcn.00432aa0
add esp, 4
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DefWindowProcW]
lea eax, [ebp - 0x268]
mov dword [ebp - 0x268], 8
push eax
mov dword [ebp - 0x264], 0x44
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push 0
lea eax, [ebp - 0x280]
mov dword [ebp - 0x280], 1
push eax
lea eax, [ebp - 0x270]
mov dword [ebp - 0x27c], 0
push eax
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x270], 0
call sub.gdiplus.dll_GdiplusStartup
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.004ccab0
add esp, 0xc
lea eax, [ebp - 0x218]
push 0
push 0x1a
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push str.AlmondTheaterSpaceLog_almond_theatre.log
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0x50984c
push 0x6400000
push 0
push 1
lea eax, [ebp - 0x218]
push eax
call fcn.004a8600
call fcn.00422740
mov esi, eax
mov dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 0
push eax
push 0x50984c
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.004042a0
mov dword [ebp - 4], 0
xor eax, eax
push 3
mov dword [ebp - 0x238], 0
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x234], 0
push 0x50af14
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.004042a0
mov byte [ebp - 4], 1
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x248]
push eax
mov ecx, esi
call fcn.00434520
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x248]
call fcn.00402770
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x230]
call fcn.00402770
call fcn.004a8510
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x422b18
push 0x74
mov dword [ebp - 0x220], eax
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], eax
push str.d:jenkins.jenkinsworkspace_start_theater_start_theater_app_start_theater_appplanet_theater_srcplanet_theater.cc
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], al
call fcn.004083c0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x248]
push 3
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
push 0x50a33c
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], 0
call fcn.004083c0
mov byte [ebp - 4], 3
lea eax, [ebp - 0x230]
push 0x3d
push eax
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x318]
call fcn.0040a1c0
mov esi, eax
mov byte [ebp - 4], 4
push str.init_app.
push esi
call fcn.004063b0
add esp, 8
call fcn.004a8510
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x318]
call fcn.004064c0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x248]
call fcn.00405b20
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x230]
call fcn.00405b20
mov ecx, dword [0x5530c8]
mov edi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ecx, ecx
jne 0x422b8b
push 0x54c030
call edi
cmp dword [0x5530c8], 0
jne 0x422b7e
push 0x1118
call fcn.004a9676
add esp, 4
mov dword [ebp - 0x264], eax
mov dword [ebp - 4], 6
test eax, eax
je 0x422b65
mov ecx, eax
call fcn.00402330
jmp 0x422b67
xor eax, eax
mov dword [ebp - 4], 0xffffffff
xor edx, edx
lea ecx, [ebp - 0x264]
lock or dword [ecx], edx
mov dword [0x5530c8], eax
push 0x54c030
call ebx
mov ecx, dword [0x5530c8]
call fcn.0041da10
test al, al
jne 0x422ca5
call fcn.004a8510
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x4236cf
push 0x74
mov dword [ebp - 0x220], eax
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], eax
push str.d:jenkins.jenkinsworkspace_start_theater_start_theater_app_start_theater_appplanet_theater_srcplanet_theater.cc
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], al
call fcn.004083c0
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x248]
push 3
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
push 0x50a33c
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], 0
call fcn.004083c0
mov byte [ebp - 4], 8
lea eax, [ebp - 0x230]
push 0x40
push eax
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x318]
call fcn.0040a1c0
mov esi, eax
mov byte [ebp - 4], 9
push str.install_file_fail.
push esi
call fcn.004063b0
add esp, 8
call fcn.004a8510
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x318]
call fcn.004064c0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x248]
call fcn.00405b20
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x230]
call fcn.00405b20
jmp 0x4236cf
mov ecx, dword [0x5530c8]
test ecx, ecx
jne 0x422d0c
push 0x54c030
call edi
cmp dword [0x5530c8], 0
jne 0x422cff
push 0x1118
call fcn.004a9676
add esp, 4
mov dword [ebp - 0x264], eax
mov dword [ebp - 4], 0xb
test eax, eax
je 0x422ce6
mov ecx, eax
call fcn.00402330
jmp 0x422ce8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
xor edx, edx
lea ecx, [ebp - 0x264]
lock or dword [ecx], edx
mov dword [0x5530c8], eax
push 0x54c030
call ebx
mov ecx, dword [0x5530c8]
call fcn.0041da20
test al, al
jne 0x422e09
call fcn.004a8510
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x4236cf
push 0x74
mov dword [ebp - 0x220], eax
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], eax
push str.d:jenkins.jenkinsworkspace_start_theater_start_theater_app_start_theater_appplanet_theater_srcplanet_theater.cc
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], al
call fcn.004083c0
mov dword [ebp - 4], 0xc
lea ecx, [ebp - 0x248]
push 3
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
push 0x50a33c
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], 0
call fcn.004083c0
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x230]
push 0x44
push eax
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x318]
call fcn.0040a1c0
mov esi, eax
mov byte [ebp - 4], 0xe
push str.launch_install_dir_app.
push esi
call fcn.004063b0
add esp, 8
call fcn.004a8510
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x318]
call fcn.004064c0
mov byte [ebp - 4], 0xc
jmp 0x422c83
mov ecx, dword [0x5530c8]
test ecx, ecx
jne 0x422e70
push 0x54c030
call edi
cmp dword [0x5530c8], 0
jne 0x422e63
push 0x1118
call fcn.004a9676
add esp, 4
mov dword [ebp - 0x264], eax
mov dword [ebp - 4], 0x10
test eax, eax
je 0x422e4a
mov ecx, eax
call fcn.00402330
jmp 0x422e4c
xor eax, eax
mov dword [ebp - 4], 0xffffffff
xor edx, edx
lea ecx, [ebp - 0x264]
lock or dword [ecx], edx
mov dword [0x5530c8], eax
push 0x54c030
call ebx
mov ecx, dword [0x5530c8]
push dword [ebp - 0x26c]
call fcn.0041d4d0
test al, al
jne 0x422f73
call fcn.004a8510
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x4236cf
push 0x74
mov dword [ebp - 0x220], eax
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], eax
push str.d:jenkins.jenkinsworkspace_start_theater_start_theater_app_start_theater_appplanet_theater_srcplanet_theater.cc
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], al
call fcn.004083c0
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0x248]
push 3
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
push 0x50a33c
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], 0
call fcn.004083c0
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x230]
push 0x48
push eax
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x318]
call fcn.0040a1c0
mov esi, eax
mov byte [ebp - 4], 0x13
push str.init_app_fail.
push esi
call fcn.004063b0
add esp, 8
call fcn.004a8510
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x318]
call fcn.004064c0
mov byte [ebp - 4], 0x11
jmp 0x422c83
call fcn.004a8510
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x42310f
push 0x74
mov dword [ebp - 0x220], eax
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], eax
push str.d:jenkins.jenkinsworkspace_start_theater_start_theater_app_start_theater_appplanet_theater_srcplanet_theater.cc
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], al
call fcn.004083c0
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0x260]
push 3
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0
push 0x50a33c
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
call fcn.004083c0
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x230]
push 0x4b
push eax
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x318]
call fcn.0040a1c0
mov esi, eax
mov byte [ebp - 4], 0x17
push str.init_app_succ.
push esi
call fcn.004063b0
add esp, 8
call fcn.004a8510
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x318]
call fcn.004064c0
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x24c]
cmp edx, 0x10
jb 0x423098
mov ecx, dword [ebp - 0x260]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x42308e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x423747
push edx
push ecx
call fcn.004a96a6
add esp, 8
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x21c]
cmp edx, 0x10
jb 0x4230f4
mov ecx, dword [ebp - 0x230]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4230ea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42374c
push edx
push ecx
call fcn.004a96a6
add esp, 8
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
mov eax, dword [0x553470]
mov dword [ebp - 0x26c], eax
test eax, eax
jne 0x4231cd
push 0x54c0f0
call edi
cmp dword [0x553470], 0
jne 0x4231bb
push 0x38
call fcn.004a9676
mov esi, eax
add esp, 4
mov dword [ebp - 0x264], esi
mov dword [ebp - 4], 0x19
test esi, esi
je 0x4231a1
mov dword [esi], vtable.StatisticsWrapper.0
xor eax, eax
mov dword [esi + 4], 0x64
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 7
mov word [esi + 8], ax
mov byte [ebp - 4], 0x1a
mov dword [esi + 0x30], eax
mov dword [esi + 0x34], 7
mov word [esi + 0x20], ax
mov byte [ebp - 4], 0x1b
call fcn.004d41d0
cdq
mov ecx, 0x64
idiv ecx
inc edx
mov dword [esi + 4], edx
mov byte [ebp - 4], 0x19
jmp 0x4231a3
xor esi, esi
mov dword [ebp - 4], 0xffffffff
xor ecx, ecx
lea eax, [ebp - 0x264]
lock or dword [eax], ecx
mov dword [0x553470], esi
push 0x54c0f0
call ebx
mov eax, dword [0x553470]
mov dword [ebp - 0x26c], eax
mov eax, dword [eax]
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x238], 0
mov esi, dword [eax]
xor eax, eax
push eax
push 0x50984c
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
call fcn.004042a0
mov dword [ebp - 4], 0x1c
xor eax, eax
push 3
mov dword [ebp - 0x250], 0
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x24c], 0
push 0x50af14
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
call fcn.004042a0
mov byte [ebp - 4], 0x1d
xor eax, eax
push 5
mov dword [ebp - 0x220], 0
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], 0
push str.start
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.004042a0
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x248]
mov ecx, dword [ebp - 0x26c]
push 0x64
push eax
push 1
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x230]
push eax
call esi
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x42330d
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x423303
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x423751
push edx
push ecx
call fcn.004a96a6
add esp, 8
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x24c]
cmp edx, 8
jb 0x42336e
mov ecx, dword [ebp - 0x260]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x423364
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x423756
push edx
push ecx
call fcn.004a96a6
add esp, 8
xor eax, eax
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x4233d2
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4233c8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42375b
push edx
push ecx
call fcn.004a96a6
add esp, 8
mov ecx, dword [0x5530c8]
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
test ecx, ecx
jne 0x423456
push 0x54c030
call edi
cmp dword [0x5530c8], 0
jne 0x423449
push 0x1118
call fcn.004a9676
add esp, 4
mov dword [ebp - 0x264], eax
mov dword [ebp - 4], 0x1f
test eax, eax
je 0x423430
mov ecx, eax
call fcn.00402330
jmp 0x423432
xor eax, eax
mov dword [ebp - 4], 0xffffffff
xor edx, edx
lea ecx, [ebp - 0x264]
lock or dword [ecx], edx
mov dword [0x5530c8], eax
push 0x54c030
call ebx
mov ecx, dword [0x5530c8]
call fcn.0041d950
mov ecx, dword [0x5530c8]
test ecx, ecx
jne 0x4234c2
push 0x54c030
call edi
cmp dword [0x5530c8], 0
jne 0x4234b5
push 0x1118
call fcn.004a9676
add esp, 4
mov dword [ebp - 0x264], eax
mov dword [ebp - 4], 0x20
test eax, eax
je 0x42349c
mov ecx, eax
call fcn.00402330
jmp 0x42349e
xor eax, eax
mov dword [ebp - 4], 0xffffffff
xor edx, edx
lea ecx, [ebp - 0x264]
lock or dword [ecx], edx
mov dword [0x5530c8], eax
push 0x54c030
call ebx
mov ecx, dword [0x5530c8]
call fcn.0041e120
mov ecx, dword [0x5530c8]
test ecx, ecx
jne 0x42352e
push 0x54c030
call edi
cmp dword [0x5530c8], 0
jne 0x423521
push 0x1118
call fcn.004a9676
add esp, 4
mov dword [ebp - 0x264], eax
mov dword [ebp - 4], 0x21
test eax, eax
je 0x423508
mov ecx, eax
call fcn.00402330
jmp 0x42350a
xor eax, eax
mov dword [ebp - 4], 0xffffffff
xor edx, edx
lea ecx, [ebp - 0x264]
lock or dword [ecx], edx
mov dword [0x5530c8], eax
push 0x54c030
call ebx
mov ecx, dword [0x5530c8]
call fcn.0041e8c0
call fcn.004a8510
push 1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
movzx eax, al
sub eax, 1
jne 0x4236cf
push 0x74
mov dword [ebp - 0x220], eax
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], eax
push str.d:jenkins.jenkinsworkspace_start_theater_start_theater_app_start_theater_appplanet_theater_srcplanet_theater.cc
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], al
call fcn.004083c0
mov dword [ebp - 4], 0x22
lea ecx, [ebp - 0x248]
push 3
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
push 0x50a33c
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], 0
call fcn.004083c0
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x230]
push 0x50
push eax
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x318]
call fcn.0040a1c0
mov esi, eax
mov byte [ebp - 4], 0x24
push str.app_end.
push esi
call fcn.004063b0
add esp, 8
call fcn.004a8510
push esi
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x1c]
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x318]
call fcn.004064c0
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x234]
cmp edx, 0x10
jb 0x423658
mov ecx, dword [ebp - 0x248]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x42364e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x423760
push edx
push ecx
call fcn.004a96a6
add esp, 8
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0xf
mov byte [ebp - 0x248], 0
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x21c]
cmp edx, 0x10
jb 0x4236b4
mov ecx, dword [ebp - 0x230]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4236aa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x423765
push edx
push ecx
call fcn.004a96a6
add esp, 8
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0xf
mov byte [ebp - 0x230], 0
call fcn.004039c0
mov ecx, eax
call fcn.0041eb20
call fcn.004039c0
cmp dword [0x5530c8], 0
je 0x423711
push 0x54c030
call edi
mov ecx, dword [0x5530c8]
test ecx, ecx
je 0x42370a
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [0x5530c8], 0
push 0x54c030
call ebx
call fcn.004a8c90
push dword [ebp - 0x270]
call sub.gdiplus.dll_GdiplusShutdown
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a995c
mov esp, ebp
pop ebp
ret 0x10
call fcn.004d003c
call fcn.004d003c
call fcn.004d003c
call fcn.004d003c
call fcn.004d003c
call fcn.004d003c
call fcn.004d003c
int3