Function at 0x42a6f6
Capabilities:
Shutdown system

Disassembly:
push 0x900
mov eax, 0x45536d
call fcn.004331ee
mov edi, dword [ebp + 8]
xor ebx, ebx
mov esi, dword [ebp + 0x10]
push ebx
push ebx
push 1
push ebx
mov dword [ebp - 0x8dc], edi
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
lea ecx, [ebp - 0x8c4]
call fcn.00426e91
lea ecx, [ebp - 0x490]
mov dword [ebp - 4], ebx
call fcn.0042d005
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 1
call fcn.0042d043
lea ecx, [ebp - 0x754]
mov byte [ebp - 4], 2
call fcn.0042cf52
lea ecx, [ebp - 0x664]
mov byte [ebp - 4], 3
call fcn.00423099
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x44], ebx
mov word [ebp - 0x54], ax
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x144], ebx
mov word [ebp - 0x154], ax
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0x12c], ebx
mov word [ebp - 0x13c], ax
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x5c], ebx
mov word [ebp - 0x6c], ax
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x74], ebx
mov word [ebp - 0x84], ax
mov dword [ebp - 0x110], ecx
mov dword [ebp - 0x114], ebx
mov word [ebp - 0x124], ax
mov dword [ebp - 0xf8], ecx
mov dword [ebp - 0xfc], ebx
mov word [ebp - 0x10c], ax
push ebx
push ebx
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
call fcn.00411703
push ebx
push ebx
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], ebx
call fcn.00411703
push 0x4057a0
lea ecx, [ebp - 0x8cc]
mov byte [ebp - 4], 0xd
call fcn.00426f0c
mov byte [ebp - 0x8d2], bl
mov byte [ebp - 0x8c6], bl
mov byte [ebp - 0x8ce], 1
mov byte [ebp - 0x8cd], bl
mov byte [ebp - 0x8d3], bl
mov byte [ebp - 0x8e0], bl
mov dword [ebp - 0x8d8], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x3c], 0x4049a0
push ebx
push ebx
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
call fcn.00411703
push ebx
mov byte [ebp - 4], 0x11
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [ebp - 0x3c]
push eax
call fcn.0042812a
pop ecx
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x8d2]
push eax
push esi
call fcn.00428357
add esp, 0x10
test al, al
je 0x42a98a
mov ecx, dword [0x45a014]
call fcn.0042715c
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00411703
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x4049a0
call fcn.00419050
cmp dword [ebp - 0x8cc], ebx
je 0x42a8e1
push dword [ebp - 0x8cc]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0xcc]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x10c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x124]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x84]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x6c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x13c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x154]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x54]
call fcn.00411703
lea ecx, [ebp - 0x664]
call fcn.004233fc
lea ecx, [ebp - 0x754]
call fcn.0042d10f
lea ecx, [ebp - 0x220]
call fcn.0042d177
lea ecx, [ebp - 0x490]
call fcn.0042d161
jmp 0x42cd23
cmp byte [ebp - 0x8d2], 0
lea eax, [ebp - 0x6c]
push eax
jne 0x42a99e
call fcn.00430644
jmp 0x42a9a3
call fcn.0042fc4d
mov eax, dword [ebp - 0x6c]
pop ecx
push 8
pop esi
cmp dword [ebp - 0x58], esi
jae 0x42a9b2
lea eax, [ebp - 0x6c]
push eax
call fcn.0042f405
mov eax, dword [ebp - 0x6c]
pop ecx
cmp dword [ebp - 0x58], esi
jae 0x42a9c4
lea eax, [ebp - 0x6c]
push ebx
push 0x4057bc
push eax
lea eax, [ebp - 0x84]
push ebx
push eax
call fcn.00430fd6
mov eax, dword [ebp - 0x84]
add esp, 0x14
cmp dword [ebp - 0x70], esi
jae 0x42a9ec
lea eax, [ebp - 0x84]
push dword [ebp - 0x8d2]
mov ecx, dword [0x45a014]
push eax
call fcn.00427e9b
cmp byte [ebp - 0x8d2], 0
je 0x42aa2f
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0xb8], esi
jae 0x42aa1b
lea eax, [ebp - 0xcc]
push eax
push 0x4057d8
push dword [0x45a014]
call fcn.004107b1
add esp, 0xc
push ebx
push ebx
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x264], ebx
mov dword [ebp - 0x260], ebx
call fcn.00411703
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0x12
push 0x40c
push eax
call fcn.004301de
cmp byte [ebp - 0x8d2], 0
pop ecx
pop ecx
jne 0x42ac16
call fcn.00427f7c
test al, al
je 0x42ac16
mov ecx, dword [0x45a014]
push 0x405854
call fcn.0041153d
call fcn.0042f062
test al, al
lea eax, [ebp - 0x2c]
je 0x42abda
push 0x598
push eax
call fcn.004301de
pop ecx
pop ecx
mov ecx, dword [ebp - 0x274]
cmp dword [ebp - 0x260], esi
jae 0x42aaba
lea ecx, [ebp - 0x274]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], esi
jae 0x42aac5
lea eax, [ebp - 0x2c]
push 0x44
push ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x42aade
push ebx
push 2
call dword [sym.imp.USER32.dll_ExitWindowsEx]
mov ecx, dword [0x45a014]
call fcn.0042715c
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push 1
lea ecx, [ebp - 0x274]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00411703
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x4049a0
call fcn.00419050
cmp dword [ebp - 0x8cc], 0
je 0x42ab2c
push dword [ebp - 0x8cc]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0xcc]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x10c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x124]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x84]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x6c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x13c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x154]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x54]
call fcn.00411703
lea ecx, [ebp - 0x664]
call fcn.004233fc
lea ecx, [ebp - 0x754]
call fcn.0042d10f
lea ecx, [ebp - 0x220]
call fcn.0042d177
lea ecx, [ebp - 0x490]
call fcn.0042d161
mov ebx, 0xbc2
jmp 0x42cd23
push 0x599
push eax
call fcn.004301de
pop ecx
pop ecx
mov ecx, dword [ebp - 0x274]
cmp dword [ebp - 0x260], esi
jae 0x42abfb
lea ecx, [ebp - 0x274]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], esi
jae 0x42ac06
lea eax, [ebp - 0x2c]
push 0x44
push ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x42aade
lea eax, [ebp - 0x2c]
push 0x40d
push eax
call fcn.004301de
pop ecx
pop ecx
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x274]
push eax
push ebx
push edi
lea ecx, [ebp - 0x490]
call fcn.0042dd8e
push ebx
push ebx
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], ebx
call fcn.00411703
push ebx
push ebx
lea ecx, [ebp - 0x3a0]
mov dword [ebp - 0x390], ebx
mov dword [ebp - 0x38c], ebx
call fcn.00411703
mov dword [ebp - 0x298], ebx
mov dword [ebp - 0x294], ebx
mov dword [ebp - 0x290], ebx
mov dword [ebp - 0x29c], 0x4049a0
mov dword [ebp - 0x2a8], ebx
mov dword [ebp - 0x2a4], ebx
mov dword [ebp - 0x2a0], ebx
mov dword [ebp - 0x2b4], ebx
mov dword [ebp - 0x2b0], ebx
mov dword [ebp - 0x2ac], ebx
lea eax, [ebp - 0x238]
mov byte [ebp - 4], 0x17
push eax
call fcn.00427e6e
pop ecx
push dword [ebp - 0x8d2]
lea eax, [ebp - 0x3a0]
push eax
call fcn.0042779a
pop ecx
pop ecx
lea eax, [ebp - 0x8e0]
push eax
call fcn.00427d23
pop ecx
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004277d0
add esp, 0xc
lea eax, [ebp - 0x29c]
push eax
call fcn.004280b6
pop ecx
lea eax, [ebp - 0x9c]
push eax
call fcn.0042fc4d
pop ecx
push 0x405888
lea ecx, [ebp - 0x29c]
call fcn.0041d48c
mov edx, eax
test edx, edx
je 0x42ada4
cmp byte [ebp - 0x8d2], 0
je 0x42ad5f
cmp dword [ebp - 0xbc], 0
sete al
test al, al
jne 0x42ad5f
cmp dword [ebp - 0xb8], esi
jb 0x42ad57
mov eax, dword [ebp - 0xcc]
jmp 0x42ad73
lea eax, [ebp - 0xcc]
jmp 0x42ad73
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x88], esi
jae 0x42ad73
lea eax, [ebp - 0x9c]
mov ecx, dword [ebp - 0x238]
cmp dword [ebp - 0x224], esi
jae 0x42ad87
lea ecx, [ebp - 0x238]
push eax
push ecx
push edx
lea ecx, [ebp - 0x8c4]
call fcn.0041108c
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x8c4]
call fcn.00427da6
cmp dword [ebp - 0x44], 0
sete al
test al, al
je 0x42adbf
lea eax, [ebp - 0x54]
push 0x418
push eax
call fcn.004301de
pop ecx
pop ecx
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x88], esi
jae 0x42add3
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x2e4]
call fcn.00410573
lea eax, [ebp - 0x2e4]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x2a8]
push eax
push dword [ebp - 0x8e0]
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x664]
call fcn.0042449d
push ebx
push 1
lea ecx, [ebp - 0x2e4]
call fcn.00411703
push ebx
push ebx
lea ecx, [ebp - 0x3f8]
mov dword [ebp - 0x3e8], ebx
mov dword [ebp - 0x3e4], ebx
call fcn.00411703
push ebx
push ebx
lea ecx, [ebp - 0x370]
mov dword [ebp - 0x360], ebx
mov dword [ebp - 0x35c], ebx
call fcn.00411703
push ebx
push ebx
lea ecx, [ebp - 0x388]
mov dword [ebp - 0x378], ebx
mov dword [ebp - 0x374], ebx
call fcn.00411703
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x40], esi
jae 0x42ae8a
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x2c]
push 0x3f4
push eax
call fcn.004301de
add esp, 0xc
lea eax, [ebp - 0x3f8]
push 0x3ec
push eax
call fcn.004301de
pop ecx
pop ecx
lea eax, [ebp - 0x370]
push 0x3eb
push eax
call fcn.004301de
pop ecx
pop ecx
lea eax, [ebp - 0x388]
push 0x41f
push eax
call fcn.004301de
pop ecx
pop ecx
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x388]
push eax
lea eax, [ebp - 0x370]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x2c]
push eax
push ebx
push edi
lea ecx, [ebp - 0x220]
call fcn.0042de14
cmp byte [ebp - 0x8d2], 0
push ebx
jne 0x42af1f
lea ecx, [ebp - 0x664]
call fcn.0042369b
mov byte [ebp - 0x8c5], al
jmp 0x42b011
push ebx
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ebx
call fcn.00411703
mov eax, dword [ebp - 0x9c]
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x88], esi
jae 0x42af4f
lea eax, [ebp - 0x9c]
push ebx
push 0x4058a0
push eax
lea eax, [ebp - 0xf4]
push ebx
push eax
call fcn.00430fd6
mov eax, dword [ebp - 0xf4]
add esp, 0x14
cmp dword [ebp - 0xe0], esi
jae 0x42af7a
lea eax, [ebp - 0xf4]
push eax
call fcn.004308ed
pop ecx
test al, al
je 0x42aff1
mov edi, 0x4049a0
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xdc], edi
mov eax, dword [ebp - 0xf4]
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0xe0], esi
jae 0x42afba
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0xdc]
call fcn.00419ebf
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x664]
call fcn.0042369b
lea ecx, [ebp - 0xdc]
mov byte [ebp - 0x8c5], al
mov dword [ebp - 0xdc], edi
call fcn.00419050
jmp 0x42b003
push ebx
lea ecx, [ebp - 0x664]
call fcn.0042369b
mov byte [ebp - 0x8c5], al
push ebx
push 1
lea ecx, [ebp - 0xf4]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x388]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x370]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x3f8]
call fcn.00411703
lea ecx, [ebp - 0x2b4]
call fcn.004223de
lea ecx, [ebp - 0x2a8]
call fcn.004223de
mov edi, 0x4049a0
lea ecx, [ebp - 0x29c]
mov dword [ebp - 0x29c], edi
call fcn.00419050
push ebx
push 1
lea ecx, [ebp - 0x3a0]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x238]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x274]
call fcn.00411703
cmp byte [ebp - 0x8c5], 0
mov dword [ebp - 4], 0x10
jne 0x42b347
lea ecx, [ebp - 0x490]
call fcn.0042ed04
lea ecx, [ebp - 0x4d0]
call fcn.0042317e
push ebx
push ebx
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ebx
call fcn.00411703
lea eax, [ebp - 0x4d0]
mov byte [ebp - 4], 0x22
push eax
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x664]
call fcn.004243cb
dec eax
lea ecx, [ebp - 0x664]
push eax
call fcn.004243a5
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x40], esi
jae 0x42b109
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x2c]
push 0x40b
push eax
call fcn.004301de
mov eax, dword [ebp - 0x2c]
add esp, 0xc
cmp dword [ebp - 0x18], esi
jae 0x42b126
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x220]
call fcn.0042e184
cmp dword [ebp - 0x4b0], 0
jne 0x42b163
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0xe0], esi
jae 0x42b14f
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x2c]
push 0x40a
push eax
call fcn.004301de
add esp, 0xc
jmp 0x42b19e
mov ecx, dword [ebp - 0x4c0]
cmp dword [ebp - 0x4ac], esi
jae 0x42b177
lea ecx, [ebp - 0x4c0]
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0xe0], esi
jae 0x42b18b
lea eax, [ebp - 0xf4]
push ecx
push eax
lea eax, [ebp - 0x2c]
push 0x41e
push eax
call fcn.004301de
add esp, 0x10
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], esi
jae 0x42b1a9
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00427ef8
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x220]
call fcn.0042d580
mov ecx, dword [0x45a014]
cmp dword [ecx], 0xffffffff
je 0x42b26f
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0xe0], esi
jae 0x42b1e8
lea eax, [ebp - 0xf4]
push eax
push 0x405948
push ecx
call fcn.004107b1
add esp, 0xc
cmp dword [ebp - 0x4b0], 0
je 0x42b228
mov eax, dword [ebp - 0x4c0]
cmp dword [ebp - 0x4ac], esi
jae 0x42b214
lea eax, [ebp - 0x4c0]
push eax
push 0x405998
push dword [0x45a014]
call fcn.004107b1
add esp, 0xc
push 2
lea ecx, [ebp - 0x220]
call fcn.0042d580
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x70], esi
jae 0x42b246
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x2c]
push 0x404
push eax
call fcn.004301de
mov eax, dword [ebp - 0x2c]
add esp, 0xc
cmp dword [ebp - 0x18], esi
jae 0x42b263
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x220]
call fcn.0042d31d
push ebx
lea ecx, [ebp - 0x220]
call fcn.0042ebe9
lea eax, [ebp - 0x2c]
push 0x3ea
push eax
call fcn.004301de
mov eax, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [ebp - 0x18], esi
jae 0x42b296
lea eax, [ebp - 0x2c]
push eax
push 1
lea ecx, [ebp - 0x220]
call fcn.0042e491
push 1
push 1
lea ecx, [ebp - 0x220]
call fcn.0042ea91
push ebx
push 2
lea ecx, [ebp - 0x220]
call fcn.0042ea91
push ebx
lea ecx, [ebp - 0x220]
call fcn.0042eaf5
push 1
lea ecx, [ebp - 0x220]
call fcn.0042ea59
mov ecx, dword [0x45a014]
call fcn.0042715c
push 1
push 1
lea ecx, [ebp - 0x220]
call fcn.0042df9e
lea ecx, [ebp - 0x220]
call fcn.0042ed8c
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x220]
call fcn.0042df9e
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push 1
lea ecx, [ebp - 0xf4]
call fcn.00411703
lea ecx, [ebp - 0x4d0]
call fcn.0042346a
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00411703
mov dword [ebp - 0x3c], edi
lea ecx, [ebp - 0x3c]
call fcn.00419050
jmp 0x42cc6f
lea ecx, [ebp - 0x664]
call fcn.004243cb
mov edi, eax
mov al, byte [ebp - 0x8d2]
test al, al
je 0x42b407
test edi, edi
jle 0x42b407
lea ecx, [ebp - 0x3e0]
call fcn.0042317e
lea ecx, [ebp - 0xb4]
call fcn.004105a4
lea eax, [ebp - 0x3e0]
mov byte [ebp - 4], 0x24
push eax
lea eax, [ebp - 0xb4]
push eax
push dword [ebp - 0x8d8]
lea ecx, [ebp - 0x664]
call fcn.004243a5
mov eax, dword [ebp - 0x3e0]
lea ecx, [ebp - 0xb4]
and eax, 0xf
push ebx
push 1
cmp al, 3
jne 0x42b3e5
inc dword [ebp - 0x8d8]
call fcn.00411703
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 4], 0x10
call fcn.0042346a
mov ecx, dword [ebp - 0x8d8]
cmp ecx, edi
jl 0x42b36a
mov al, byte [ebp - 0x8d2]
jmp 0x42b409
call fcn.00411703
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 4], 0x10
call fcn.0042346a
mov al, byte [ebp - 0x8d2]
mov ecx, dword [ebp - 0x8d8]
jmp 0x42b409
mov ecx, ebx
test edi, edi
je 0x42c473
test al, al
je 0x42b41d
cmp ecx, edi
je 0x42c473
lea ecx, [ebp - 0x490]
call fcn.0042ed04
cmp byte [ebp - 0x8d2], 0
jne 0x42ba8a
lea ecx, [ebp - 0x32c]
call fcn.004105a4
mov eax, dword [ebp - 0x54]
mov byte [ebp - 4], 0x26
cmp dword [ebp - 0x40], esi
jae 0x42b44f
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x32c]
push 0x4bd
push eax
call fcn.004301de
add esp, 0xc
lea eax, [ebp - 0x3c]
lea ecx, [ebp - 0x754]
push eax
lea eax, [ebp - 0x6c]
push eax
push 1
lea eax, [ebp - 0x32c]
push eax
push ebx
push dword [ebp - 0x8dc]
call fcn.0042dbda
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x664]
push eax
lea eax, [ebp - 0x754]
push eax
call fcn.0042991b
add esp, 0xc
test al, al
jne 0x42b5a6
mov ecx, dword [0x45a014]
call fcn.0042715c
lea ecx, [ebp - 0x754]
call fcn.0042ed04
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push 1
lea ecx, [ebp - 0x32c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00411703
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], 0x4049a0
call fcn.00419050
lea ecx, [ebp - 0x8cc]
call fcn.00426f9a
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0xcc]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x10c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x124]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x84]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x6c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x13c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x154]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x54]
call fcn.00411703
lea ecx, [ebp - 0x664]
call fcn.004233fc
lea ecx, [ebp - 0x754]
call fcn.0042d10f
lea ecx, [ebp - 0x220]
call fcn.0042d177
lea ecx, [ebp - 0x490]
call fcn.0042d161
mov ebx, 0x642
jmp 0x42cd23
lea ecx, [ebp - 0x754]
call fcn.0042ed04
push 1
lea ecx, [ebp - 0x220]
call fcn.0042ea59
push 1
lea ecx, [ebp - 0x220]
call fcn.0042ebe9
push ebx
push 2
lea ecx, [ebp - 0x220]
call fcn.0042ea91
push ebx
push 3
lea ecx, [ebp - 0x220]
call fcn.0042ea91
push ebx
lea ecx, [ebp - 0x220]
call fcn.0042eaf5
push 1
push 1
lea ecx, [ebp - 0x220]
call fcn.0042df9e
lea eax, [ebp - 0x2c]
push 0x3f2
push eax
call fcn.004301de
mov eax, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [ebp - 0x18], esi
jae 0x42b61d
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x220]
call fcn.0042e184
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x58], esi
jae 0x42b634
lea eax, [ebp - 0x6c]
push eax
push 0x4059e0
push dword [0x45a014]
call fcn.004107b1
mov eax, dword [ebp - 0x6c]
add esp, 0xc
cmp dword [ebp - 0x58], esi
jae 0x42b653
lea eax, [ebp - 0x6c]
push eax
call fcn.00427171
mov eax, dword [ebp - 0x6c]
pop ecx
cmp dword [ebp - 0x58], esi
jae 0x42b665
lea eax, [ebp - 0x6c]
push 1
push eax
lea ecx, [ebp - 0x664]
call fcn.00423a2c
test al, al
jne 0x42b96d
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x58], esi
jae 0x42b686
lea eax, [ebp - 0x6c]
push eax
push 0x405a34
push dword [0x45a014]
call fcn.004107b1
mov eax, dword [ebp - 0x54]
add esp, 0xc
cmp dword [ebp - 0x40], esi
jae 0x42b6a5
lea eax, [ebp - 0x54]
mov edi, dword [ebp - 0x6c]
mov dword [ebp - 0x8e0], eax
cmp dword [ebp - 0x58], esi
jae 0x42b6b6
lea edi, [ebp - 0x6c]
lea ecx, [ebp - 0x220]
call fcn.0042d759
push dword [ebp - 0x8e0]
lea ecx, [ebp - 0x664]
push eax
push 1
push ebx
push edi
call fcn.00423652
lea ecx, [ebp - 0x344]
call fcn.004105a4
mov dword [ebp - 0x358], ebx
mov dword [ebp - 0x354], ebx
mov dword [ebp - 0x350], ebx
mov dword [ebp - 0x34c], ebx
mov dword [ebp - 0x348], ebx
mov ecx, dword [ebp - 0x84]
mov byte [ebp - 4], 0x27
cmp dword [ebp - 0x70], esi
jae 0x42b715
lea ecx, [ebp - 0x84]
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x40], esi
jae 0x42b720
lea eax, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x358]
push ecx
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x664]
push eax
call fcn.0042a114
add esp, 0x14
lea ecx, [ebp - 0x220]
mov edi, eax
push 0x401088
call fcn.0042e872
test edi, edi
jns 0x42b95e
lea ecx, [ebp - 0x220]
call fcn.0042d8f8
test al, al
je 0x42b789
mov ecx, dword [0x45a014]
call fcn.0042715c
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x358]
call fcn.00426fa8
jmp 0x42b4c5
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x40], esi
jae 0x42b794
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x2c]
push 0x578
push eax
call fcn.004301de
mov eax, dword [ebp - 0x2c]
add esp, 0xc
cmp dword [ebp - 0x18], esi
jae 0x42b7b1
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x220]
call fcn.0042e184
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x28c]
call fcn.0041054b
mov eax, dword [ebp - 0x28c]
mov byte [ebp - 4], 0x28
cmp dword [ebp - 0x278], esi
jae 0x42b7e7
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x2c]
push 0x579
push eax
call fcn.004301de
mov eax, dword [ebp - 0x2c]
add esp, 0xc
cmp dword [ebp - 0x18], esi
jae 0x42b804
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00427ef8
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x220]
call fcn.0042d580
push dword [ebp - 0x350]
lea eax, [ebp - 0x2c]
push 0x57a
push eax
call fcn.004301de
mov eax, dword [ebp - 0x2c]
add esp, 0xc
cmp dword [ebp - 0x18], esi
jae 0x42b842
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x220]
call fcn.0042d31d
push 1
lea ecx, [ebp - 0x220]
call fcn.0042d580
mov eax, dword [0x45a014]
cmp dword [eax], 0xffffffff
je 0x42b8a3
push 2
lea ecx, [ebp - 0x220]
call fcn.0042d580
lea ecx, [ebp - 0x84]
call fcn.004116f8
push eax
lea eax, [ebp - 0x2c]
push 0x404
push eax
call fcn.004301de
add esp, 0xc
lea ecx, [ebp - 0x2c]
call fcn.004116f8
push eax
lea ecx, [ebp - 0x220]
call fcn.0042d31d
lea eax, [ebp - 0x2c]
push 0x3ea
push eax
call fcn.004301de
pop ecx
pop ecx
lea ecx, [ebp - 0x2c]
call fcn.004116f8
push eax
push 1
lea ecx, [ebp - 0x220]
call fcn.0042e491
push 1
push 1
lea ecx, [ebp - 0x220]
call fcn.0042ea91
push ebx
push 2
lea ecx, [ebp - 0x220]
call fcn.0042ea91
push ebx
lea ecx, [ebp - 0x220]
call fcn.0042ebe9
push 1
push 1
lea ecx, [ebp - 0x220]
call fcn.0042df9e
lea ecx, [ebp - 0x220]
call fcn.0042ed8c
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x220]
call fcn.0042df9e
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push 1
lea ecx, [ebp - 0x28c]
call fcn.00411703
lea ecx, [ebp - 0x358]
call fcn.00426fa8
lea ecx, [ebp - 0x32c]
push ebx
push 1
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00411703
mov dword [ebp - 0x3c], 0x4049a0
jmp 0x42b33a
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0x26
call fcn.00426fa8
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x220]
call fcn.0042df9e
mov dword [ebp - 0x25c], ebx
mov dword [ebp - 0x258], ebx
mov dword [ebp - 0x254], ebx
lea eax, [ebp - 0x25c]
mov byte [ebp - 4], 0x29
push eax
lea ecx, [ebp - 0x664]
call fcn.00424714
test al, al
jne 0x42ba71
lea ecx, [ebp - 0x410]
call fcn.004105a4
lea ecx, [ebp - 0x28c]
call fcn.004105a4
lea ecx, [ebp - 0x2fc]
call fcn.004105a4
lea ecx, [ebp - 0xb4]
call fcn.004105a4
mov esi, dword [ebp - 0x25c]
mov byte [ebp - 4], 0x2d
cmp esi, dword [ebp - 0x258]
je 0x42ba3e
mov ecx, esi
call fcn.004116f8
push eax
lea ecx, [ebp - 0x2e4]
call fcn.00410573
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 0x2e
call fcn.004116f8
push eax
lea ecx, [ebp - 0xb4]
call fcn.00412393
push 0x40108c
lea ecx, [ebp - 0xb4]
call fcn.00412393
push ebx
push 1
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 0x2d
call fcn.00411703
add esi, 0x18
jmp 0x42b9e1
lea ecx, [ebp - 0xb4]
call fcn.004116f8
push eax
push 0x57d
lea eax, [ebp - 0x90c]
push 2
push eax
call fcn.004105b7
add esp, 0x10
lea eax, [ebp - 0x90c]
push 0x455dcc
push eax
call fcn.004342c1
lea ecx, [ebp - 0x25c]
call fcn.004223de
push ebx
push 1
lea ecx, [ebp - 0x32c]
call fcn.00411703
push 1
lea ecx, [ebp - 0x220]
mov dword [ebp - 4], 0x10
call fcn.0042ea59
push 1
lea ecx, [ebp - 0x220]
call fcn.0042ebe9
lea eax, [ebp - 0x2c]
push 0x3e8
push eax
call fcn.004301de
pop ecx
pop ecx
push 1
push 1
lea ecx, [ebp - 0x220]
call fcn.0042ea91
lea ecx, [ebp - 0x2c]
call fcn.004116f8
push eax
push 1
lea ecx, [ebp - 0x220]
call fcn.0042e491
push ebx
push 2
lea ecx, [ebp - 0x220]
call fcn.0042ea91
push ebx
push 3
lea ecx, [ebp - 0x220]
call fcn.0042ea91
push ebx
lea ecx, [ebp - 0x220]
call fcn.0042eaf5
push 1
push 1
lea ecx, [ebp - 0x220]
call fcn.0042df9e
mov esi, dword [ebp - 0x8d8]
lea ecx, [ebp - 0x664]
push esi
call fcn.00423677
push esi
lea eax, [ebp - 0x664]
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00429429
add esp, 0xc
mov byte [ebp - 0x8c5], bl
cmp byte [ebp - 0x8cd], 0
jne 0x42bc90
lea ecx, [ebp - 0x2cc]
call fcn.004105a4
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 0x32
push eax
lea ecx, [ebp - 0x664]
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xd4], ebx
mov byte [ebp - 0xd0], bl
call fcn.00424322
cmp byte [ebp - 0xd0], 0
mov byte [ebp - 0x8cd], al
je 0x42c17f
push 0x401088
lea ecx, [ebp - 0x220]
call fcn.0042e872
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 0x8c5], bl
call fcn.0042317e
lea eax, [ebp - 0x3e0]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0x2cc]
push eax
push esi
lea ecx, [ebp - 0x664]
call fcn.004243a5
mov ecx, dword [ebp - 0x3e0]
cmp ecx, 7
je 0x42bf48
mov eax, ecx
and eax, 0xf
cmp al, 5
je 0x42bf48
test cl, 0x30
je 0x42beff
cmp dword [ebp - 0x12c], 0
jne 0x42bc67
lea eax, [ebp - 0x2cc]
push eax
lea ecx, [ebp - 0x10c]
call fcn.004106c6
cmp byte [ebp - 0x8d2], 0
lea ecx, [ebp - 0xcc]
jne 0x42bc33
lea ecx, [ebp - 0x9c]
call fcn.004116f8
lea ecx, [ebp - 0x124]
mov esi, eax
call fcn.004116f8
push eax
push esi
lea eax, [ebp - 0x13c]
push 0x405a68
push eax
call fcn.0042f6fb
mov ecx, dword [ebp - 0x3e0]
add esp, 0x10
mov esi, dword [ebp - 0x8d8]
mov byte [ebp - 0x8c6], 1
test cl, 0x10
je 0x42beff
lea ecx, [ebp - 0x3e0]
call fcn.0042346a
push ebx
push 1
lea ecx, [ebp - 0x2cc]
call fcn.00411703
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x220]
mov dword [ebp - 4], 0x10
call fcn.0042df9e
cmp byte [ebp - 0x8cd], 0
je 0x42c485
lea ecx, [ebp - 0x220]
call fcn.0042d8f8
neg al
sbb al, al
inc al
mov byte [ebp - 0x8ce], al
jmp 0x42c485
inc esi
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x8d8], esi
call fcn.0042d8f8
test al, al
jne 0x42bc77
cmp byte [ebp - 0x8cd], al
jne 0x42bf38
push esi
lea eax, [ebp - 0x664]
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00429429
add esp, 0xc
lea ecx, [ebp - 0x3e0]
call fcn.0042346a
jmp 0x42c2f0
test cl, 0x30
je 0x42bf66
lea eax, [ebp - 0x2cc]
mov byte [ebp - 0x8c6], 1
push eax
lea ecx, [ebp - 0x10c]
call fcn.004106c6
lea ecx, [ebp - 0x54]
call fcn.004116f8
cmp byte [ebp - 0x8c6], 0
push eax
lea eax, [ebp - 0x2c]
je 0x42bf82
push 0x3f9
jmp 0x42bf87
push 0x3f8
push eax
call fcn.004301de
add esp, 0xc
lea ecx, [ebp - 0x2c]
call fcn.004116f8
push eax
lea ecx, [ebp - 0x220]
call fcn.0042e184
push 0xffffffffffffffff
lea ecx, [ebp - 0x220]
call fcn.0042e126
cmp dword [ebp - 0x3c0], 0
jbe 0x42bfe7
lea ecx, [ebp - 0x3d0]
call fcn.004116f8
lea ecx, [ebp - 0x2cc]
mov esi, eax
call fcn.004116f8
push esi
push eax
lea eax, [ebp - 0x2c]
push 0x402
push eax
call fcn.004301de
add esp, 0x10
jmp 0x42c004
lea ecx, [ebp - 0x2cc]
call fcn.004116f8
push eax
lea eax, [ebp - 0x2c]
push 0x401
push eax
call fcn.004301de
add esp, 0xc
lea ecx, [ebp - 0x2c]
call fcn.004116f8
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00427ef8
pop ecx
pop ecx
push 2
lea ecx, [ebp - 0x220]
call fcn.0042d580
push ebx
lea eax, [ebp - 0x664]
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00428dde
mov eax, dword [0x45a014]
add esp, 0xc
cmp dword [eax], 0xffffffff
je 0x42c07a
lea ecx, [ebp - 0x84]
call fcn.004116f8
push eax
lea eax, [ebp - 0x2c]
push 0x404
push eax
call fcn.004301de
add esp, 0xc
lea ecx, [ebp - 0x2c]
call fcn.004116f8
push eax
lea ecx, [ebp - 0x220]
call fcn.0042d31d
push ebx
lea ecx, [ebp - 0x220]
call fcn.0042ebe9
cmp byte [ebp - 0x8c6], 0
je 0x42c0f5
push ebx
push ebx
call fcn.004294d4
pop ecx
pop ecx
push 1
push 1
lea ecx, [ebp - 0x220]
call fcn.0042d5ef
push 3
lea ecx, [ebp - 0x220]
call fcn.0042e532
push 3
lea ecx, [ebp - 0x220]
call fcn.0042e3ef
lea eax, [ebp - 0x220]
push eax
call fcn.00428c5d
pop ecx
mov ecx, dword [0x45a014]
call fcn.0042715c
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x3e0]
call fcn.0042346a
lea ecx, [ebp - 0x2cc]
jmp 0x42b93f
lea eax, [ebp - 0x2c]
push 0x3ea
push eax
call fcn.004301de
pop ecx
pop ecx
lea ecx, [ebp - 0x2c]
call fcn.004116f8
push eax
push 1
lea ecx, [ebp - 0x220]
call fcn.0042e491
push 1
push 1
lea ecx, [ebp - 0x220]
call fcn.0042ea91
push 1
push 1
lea ecx, [ebp - 0x220]
call fcn.0042d5ef
push ebx
push 2
lea ecx, [ebp - 0x220]
call fcn.0042ea91
mov ecx, dword [0x45a014]
call fcn.0042715c
push 1
push 1
lea ecx, [ebp - 0x220]
call fcn.0042df9e
lea ecx, [ebp - 0x220]
call fcn.0042ed8c
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x220]
call fcn.0042df9e
jmp 0x42c0d9
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xd4]
cmp eax, ecx
jbe 0x42c1de
test ecx, ecx
je 0x42c1de
test eax, eax
je 0x42c1de
cmp byte [ebp - 0x8c5], 0
jne 0x42c1d7
lea eax, [ebp - 0x2c]
push 0x417
push eax
call fcn.004301de
pop ecx
pop ecx
lea ecx, [ebp - 0x2c]
call fcn.004116f8
push eax
lea ecx, [ebp - 0x220]
call fcn.0042e872
mov ecx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd8]
mov byte [ebp - 0x8c5], 1
xor edx, edx
div ecx
push edx
jmp 0x42c1df
push eax
push ecx
lea ecx, [ebp - 0x220]
call fcn.0042d8ff
cmp byte [ebp - 0x8d3], 0
jne 0x42c2f0
lea ecx, [ebp - 0x220]
call fcn.0042d8f8
test al, al
je 0x42c2f0
lea ecx, [ebp - 0x28c]
call fcn.004105a4
lea eax, [ebp - 0x28c]
mov byte [ebp - 4], 0x34
push 0x406
push eax
call fcn.004301de
pop ecx
pop ecx
lea ecx, [ebp - 0xb4]
call fcn.004105a4
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x35
call fcn.004116f8
push eax
lea eax, [ebp - 0xb4]
push 0x3f4
push eax
call fcn.004301de
add esp, 0xc
lea ecx, [ebp - 0xb4]
call fcn.004116f8
lea ecx, [ebp - 0x28c]
mov esi, eax
call fcn.004116f8
lea ecx, [ebp - 0x220]
mov edi, eax
call fcn.0042d759
push 0x34
push esi
push edi
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x42c2c2
mov ecx, dword [0x45a014]
push 0x405a94
call fcn.0041153d
push 0xffffffffffffffff
lea ecx, [ebp - 0x220]
call fcn.0042e3ef
push ebx
push 1
lea ecx, [ebp - 0x220]
call fcn.0042d5ef
mov byte [ebp - 0x8d3], 1
jmp 0x42c2ce
push ebx
lea ecx, [ebp - 0x220]
call fcn.0042ea1e
push ebx
push 1
lea ecx, [ebp - 0xb4]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x28c]
call fcn.00411703
mov esi, dword [ebp - 0x8d8]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push 1
lea ecx, [ebp - 0x2cc]
call fcn.00411703
jmp 0x42bb46
lea ecx, [ebp - 0x490]
mov byte [ebp - 0x8ce], 1
call fcn.0042ed04
lea eax, [ebp - 0x2c]
push 0x3ea
push eax
call fcn.004301de
pop ecx
pop ecx
lea ecx, [ebp - 0x2c]
call fcn.004116f8
push eax
push 1
lea ecx, [ebp - 0x220]
call fcn.0042e491
push 1
push 1
lea ecx, [ebp - 0x220]
call fcn.0042d5ef
lea ecx, [ebp - 0x220]
call fcn.0042d8f8
cmp byte [ebp - 0x8c6], 0
je 0x42c704
test al, al
lea eax, [ebp - 0x2c]
je 0x42c4e0
push 0x408
jmp 0x42c4e5
push 0x409
push eax
call fcn.004301de
pop ecx
pop ecx
lea ecx, [ebp - 0x2c]
call fcn.004116f8
push eax
lea ecx, [ebp - 0x220]
call fcn.0042e184
lea eax, [ebp - 0x220]
push ebx
push eax
call fcn.00427ef8
cmp dword [ebp - 0xfc], 0
pop ecx
sete al
pop ecx
test al, al
jne 0x42c55c
lea ecx, [ebp - 0x10c]
call fcn.004116f8
push eax
lea eax, [ebp - 0x2c]
push 0x411
push eax
call fcn.004301de
add esp, 0xc
lea ecx, [ebp - 0x2c]
call fcn.004116f8
push eax
lea ecx, [ebp - 0x220]
call fcn.0042d31d
push 2
lea ecx, [ebp - 0x220]
call fcn.0042d580
push 1
lea eax, [ebp - 0x664]
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00428dde
add esp, 0xc
lea ecx, [ebp - 0x220]
call fcn.0042d8f8
test al, al
jne 0x42c5f8
lea ecx, [ebp - 0x13c]
call fcn.004116f8
lea ecx, [ebp - 0x6c]
mov esi, eax
call fcn.004116f8
push esi
push eax
call fcn.004294d4
pop ecx
pop ecx
lea ecx, [ebp - 0xb4]
call fcn.004105a4
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0x38
call fcn.004116f8
push ebx
push 0x4058a0
push eax
lea eax, [ebp - 0xb4]
push ebx
push eax
call fcn.00430fd6
add esp, 0x14
lea ecx, [ebp - 0xb4]
call fcn.004116f8
push eax
lea ecx, [ebp - 0x664]
call fcn.0042491c
push ebx
push 1
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0x10
call fcn.00411703
push 3
lea ecx, [ebp - 0x220]
call fcn.0042e532
push 3
lea ecx, [ebp - 0x220]
call fcn.0042e3ef
lea eax, [ebp - 0x220]
push eax
call fcn.00428c5d
pop ecx
mov ecx, dword [0x45a014]
call fcn.0042715c
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00411703
lea ecx, [ebp - 0x3c]
call fcn.00426f8f
lea ecx, [ebp - 0x8cc]
call fcn.00426f9a
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0xcc]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x10c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x124]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x84]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x6c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x13c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x154]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x54]
call fcn.00411703
lea ecx, [ebp - 0x664]
call fcn.004233fc
lea ecx, [ebp - 0x754]
call fcn.0042d10f
lea ecx, [ebp - 0x220]
call fcn.0042d177
lea ecx, [ebp - 0x490]
call fcn.0042d161
lea ecx, [ebp - 0x8c4]
call fcn.00426f3d
xor eax, eax
jmp 0x42cf14
test al, al
je 0x42c78d
lea eax, [ebp - 0x2c]
push 0x40e
push eax
call fcn.004301de
pop ecx
pop ecx
lea ecx, [ebp - 0x2c]
call fcn.004116f8
push eax
lea ecx, [ebp - 0x220]
call fcn.0042e184
lea eax, [ebp - 0x220]
push ebx
push eax
call fcn.00427ef8
push ebx
lea eax, [ebp - 0x664]
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00428dde
add esp, 0x14
lea ecx, [ebp - 0x220]
push ebx
call fcn.0042ebe9
push 1
push 1
lea ecx, [ebp - 0x220]
call fcn.0042df9e
lea ecx, [ebp - 0x220]
call fcn.0042ed8c
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x220]
call fcn.0042df9e
jmp 0x42c61f
mov al, byte [ebp - 0x8ce]
test al, al
je 0x42c61f
cmp dword [ebp - 0x79c], 0
sete al
test al, al
jne 0x42c61f
lea ecx, [ebp - 0x2fc]
call fcn.004105a4
lea eax, [ebp - 0x2fc]
mov byte [ebp - 4], 0x3a
push eax
lea ecx, [ebp - 0x8c4]
call fcn.00410949
lea ecx, [ebp - 0x2fc]
call fcn.004116f8
push 0x401118
push eax
lea ecx, [ebp - 0x8c4]
call fcn.00410703
test al, al
je 0x42c998
lea ecx, [ebp - 0x250]
call fcn.004105a4
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [ebp - 0x8c4]
call fcn.00410822
test eax, eax
je 0x42c986
lea ecx, [ebp - 0x314]
call fcn.004105a4
lea eax, [ebp - 0x314]
mov byte [ebp - 4], 0x3c
push eax
call fcn.00427dd6
pop ecx
lea eax, [ebp - 0x250]
push 0x4042dc
push eax
call fcn.00426e3c
pop ecx
pop ecx
test al, al
je 0x42c978
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.00426e26
pop ecx
pop ecx
test al, al
je 0x42c978
lea ecx, [ebp - 0x2e4]
call fcn.004105a4
lea ecx, [ebp - 0x410]
call fcn.004105a4
lea ecx, [ebp - 0x314]
mov byte [ebp - 4], 0x3e
call fcn.004116f8
lea ecx, [ebp - 0x250]
mov esi, eax
call fcn.004116f8
push esi
push eax
lea eax, [ebp - 0x2e4]
push 0x5a9
push eax
call fcn.004301de
add esp, 0x10
lea ecx, [ebp - 0x54]
call fcn.004116f8
push eax
lea eax, [ebp - 0x410]
push 0x3f4
push eax
call fcn.004301de
add esp, 0xc
lea ecx, [ebp - 0x410]
call fcn.004116f8
lea ecx, [ebp - 0x2e4]
mov esi, eax
call fcn.004116f8
push 0x30
push esi
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x314]
call fcn.004116f8
lea ecx, [ebp - 0x250]
mov esi, eax
call fcn.004116f8
push esi
push eax
push 0x405ad0
push dword [0x45a014]
call fcn.004107b1
mov ecx, dword [0x45a014]
add esp, 0x10
call fcn.0042715c
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push 1
lea ecx, [ebp - 0x410]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x2e4]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x314]
call fcn.00411703
lea ecx, [ebp - 0x250]
push ebx
push 1
call fcn.00411703
lea ecx, [ebp - 0x2fc]
jmp 0x42b93f
push ebx
push 1
lea ecx, [ebp - 0x314]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 0x3a
call fcn.00411703
lea ecx, [ebp - 0x8c4]
call fcn.0041076c
test al, al
je 0x42ca7e
push ebx
push ebx
lea ecx, [ebp - 0x8c4]
call fcn.0042713e
lea ecx, [ebp - 0x54]
call fcn.004116f8
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x8c4]
push eax
call fcn.00429dc8
add esp, 0xc
test eax, eax
jns 0x42ca05
push eax
push 0x405b38
push dword [0x45a014]
call fcn.004107b1
mov ecx, dword [0x45a014]
add esp, 0xc
call fcn.0042715c
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x42c96d
lea ecx, [ebp - 0xb4]
call fcn.004105a4
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x3f
push eax
call fcn.0042fdc7
pop ecx
lea ecx, [ebp - 0xb4]
call fcn.004116f8
lea ecx, [ebp - 0x220]
mov esi, eax
call fcn.0042d759
push eax
push esi
lea ecx, [ebp - 0x8c4]
call fcn.00411295
cmp eax, 1
je 0x42ca6c
cmp eax, 4
je 0x42ca6c
mov ecx, dword [0x45a014]
call fcn.0042715c
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0xb4]
jmp 0x42c965
push ebx
push 1
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0x3a
call fcn.00411703
mov ecx, dword [0x45a014]
push 0x405ba0
call fcn.0041153d
push ebx
lea ecx, [ebp - 0x220]
call fcn.0042ea59
lea ecx, [ebp - 0x124]
call fcn.004116f8
push eax
lea ecx, [ebp - 0x8c4]
call fcn.004109ac
push ebx
push 1
lea ecx, [ebp - 0x2fc]
call fcn.00411703
lea ecx, [ebp - 0x220]
mov dword [ebp - 4], 0x10
call fcn.0042ed09
jmp 0x42c61f
lea ecx, [ebp - 0x8cc]
call fcn.00426f9a
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0xcc]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x10c]
call fcn.00411703
push ebx
lea ecx, [ebp - 0x124]
push 1
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x84]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x6c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x13c]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x154]
call fcn.00411703
push ebx
push 1
lea ecx, [ebp - 0x54]
call fcn.00411703
lea ecx, [ebp - 0x664]
call fcn.004233fc
lea ecx, [ebp - 0x754]
call fcn.0042d10f
lea ecx, [ebp - 0x220]
call fcn.0042d177
lea ecx, [ebp - 0x490]
call fcn.0042d161
mov ebx, 0x643
lea ecx, [ebp - 0x8c4]
call fcn.00426f3d
mov eax, ebx
jmp 0x42cf14
call fcn.0043313b
ret 0x10