Function at 0x427314
Capabilities:
Shutdown system

Disassembly:
push 0x7dc
mov eax, 0x44d4cb
call fcn.004305db
mov eax, dword [ebp + 8]
xor ebx, ebx
mov esi, dword [ebp + 0x10]
push ebx
push ebx
push 1
push ebx
mov dword [ebp - 0x7ac], eax
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
lea ecx, [ebp - 0x7a0]
call fcn.00423adb
lea ecx, [ebp - 0x3ac]
mov dword [ebp - 4], ebx
call fcn.00429e93
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 1
call fcn.00429ec8
lea ecx, [ebp - 0x630]
mov byte [ebp - 4], 2
call fcn.00429de9
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 3
call fcn.0041ffcb
push 7
pop edi
xor eax, eax
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x34], ebx
mov word [ebp - 0x44], ax
mov dword [ebp - 0x278], edi
mov dword [ebp - 0x27c], ebx
mov word [ebp - 0x28c], ax
mov dword [ebp - 0x164], edi
mov dword [ebp - 0x168], ebx
mov word [ebp - 0x178], ax
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x74], ebx
mov word [ebp - 0x84], ax
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x8c], ebx
mov word [ebp - 0x9c], ax
mov dword [ebp - 0x124], edi
mov dword [ebp - 0x128], ebx
mov word [ebp - 0x138], ax
mov dword [ebp - 0x14c], edi
mov dword [ebp - 0x150], ebx
mov word [ebp - 0x160], ax
mov dword [ebp - 0x100], edi
mov dword [ebp - 0x104], ebx
mov word [ebp - 0x114], ax
mov dword [ebp - 0xe8], edi
mov dword [ebp - 0xec], ebx
mov word [ebp - 0xfc], ax
push 0x4057c8
lea ecx, [ebp - 0x7a4]
mov byte [ebp - 4], 0xd
call fcn.00423b4c
mov byte [ebp - 0x7b1], bl
mov byte [ebp - 0x7a6], bl
mov byte [ebp - 0x7ad], 1
mov byte [ebp - 0x7a7], bl
mov byte [ebp - 0x7b2], bl
mov byte [ebp - 0x7bc], bl
mov dword [ebp - 0x7b8], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x6c], 0x4049c8
xor eax, eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
mov word [ebp - 0x2c], ax
push ebx
mov byte [ebp - 4], 0x11
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [ebp - 0x6c]
push eax
call fcn.00424d8f
pop ecx
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x7b1]
push eax
push esi
call fcn.00424fbc
add esp, 0x10
test al, al
je 0x4275d4
mov edi, dword [0x452018]
or esi, 0xffffffff
cmp dword [edi], esi
je 0x4274ce
push dword [edi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi], esi
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040f2f2
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x6c], 0x4049c8
call fcn.004165bd
cmp dword [ebp - 0x7a4], 0
je 0x427509
push dword [ebp - 0x7a4]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebx
push 1
lea ecx, [ebp - 0xfc]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x114]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x160]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x138]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x84]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x178]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x28c]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x44]
call fcn.0040f2f2
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 3
call fcn.0042035c
lea ecx, [ebp - 0x630]
mov byte [ebp - 4], 2
call fcn.00429f8b
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 1
call fcn.00429ff3
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], bl
call fcn.00429fdd
lea ecx, [ebp - 0x7a0]
mov dword [ebp - 4], esi
call fcn.00423b9b
xor eax, eax
jmp 0x429dab
cmp byte [ebp - 0x7b1], 0
lea eax, [ebp - 0x84]
push eax
jne 0x4275eb
call fcn.0042d46a
jmp 0x4275f0
call fcn.0042ca7f
mov eax, dword [ebp - 0x84]
pop ecx
push 8
pop edi
cmp dword [ebp - 0x70], edi
jae 0x427605
lea eax, [ebp - 0x84]
push eax
call fcn.0042c255
mov eax, dword [ebp - 0x84]
pop ecx
cmp dword [ebp - 0x70], edi
jae 0x42761d
lea eax, [ebp - 0x84]
push ebx
push 0x4057e4
push eax
lea eax, [ebp - 0x9c]
push ebx
push eax
call fcn.0042de0a
mov eax, dword [ebp - 0x9c]
add esp, 0x14
cmp dword [ebp - 0x88], edi
jae 0x427648
lea eax, [ebp - 0x9c]
push dword [ebp - 0x7b1]
mov ecx, dword [0x452018]
push eax
call fcn.00424b00
cmp byte [ebp - 0x7b1], 0
je 0x42768b
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x100], edi
jae 0x427677
lea eax, [ebp - 0x114]
push eax
push 0x405800
push dword [0x452018]
call fcn.0040e3bb
add esp, 0xc
xor eax, eax
mov dword [ebp - 0xa0], 7
mov dword [ebp - 0xa4], ebx
mov word [ebp - 0xb4], ax
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x12
push 0x40c
push eax
call fcn.0042d006
cmp byte [ebp - 0x7b1], 0
pop ecx
pop ecx
jne 0x4278b0
call fcn.00424be1
test al, al
je 0x4278b0
mov esi, dword [0x452018]
mov ecx, esi
push 0x40587c
call fcn.0040f0e5
push 0x4010cc
mov ecx, esi
call fcn.0040f0e5
call fcn.0042beb2
test al, al
lea eax, [ebp - 0x2c]
je 0x427874
push 0x598
push eax
call fcn.0042d006
pop ecx
pop ecx
mov ecx, dword [ebp - 0xb4]
cmp dword [ebp - 0xa0], edi
jae 0x427724
lea ecx, [ebp - 0xb4]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jae 0x42772f
lea eax, [ebp - 0x2c]
push 0x44
push ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x427748
push ebx
push 2
call dword [sym.imp.USER32.dll_ExitWindowsEx]
mov edi, dword [0x452018]
or esi, 0xffffffff
cmp dword [edi], esi
je 0x42775d
push dword [edi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi], esi
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push 1
lea ecx, [ebp - 0xb4]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040f2f2
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x6c], 0x4049c8
call fcn.004165bd
cmp dword [ebp - 0x7a4], 0
je 0x4277a6
push dword [ebp - 0x7a4]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebx
push 1
lea ecx, [ebp - 0xfc]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x114]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x160]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x138]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x84]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x178]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x28c]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x44]
call fcn.0040f2f2
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 3
call fcn.0042035c
lea ecx, [ebp - 0x630]
mov byte [ebp - 4], 2
call fcn.00429f8b
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 1
call fcn.00429ff3
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], bl
call fcn.00429fdd
lea ecx, [ebp - 0x7a0]
mov dword [ebp - 4], esi
call fcn.00423b9b
mov eax, 0xbc2
jmp 0x429dab
push 0x599
push eax
call fcn.0042d006
pop ecx
pop ecx
mov ecx, dword [ebp - 0xb4]
cmp dword [ebp - 0xa0], edi
jae 0x427895
lea ecx, [ebp - 0xb4]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jae 0x4278a0
lea eax, [ebp - 0x2c]
push 0x44
push ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x427748
lea eax, [ebp - 0x2c]
push 0x40d
push eax
call fcn.0042d006
mov esi, dword [ebp - 0x7ac]
lea eax, [ebp - 0x6c]
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0xb4]
push eax
push ebx
push esi
lea ecx, [ebp - 0x3ac]
call fcn.0042abd8
push 7
pop eax
xor ecx, ecx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x4c], ebx
mov word [ebp - 0x5c], cx
mov dword [ebp - 0x17c], eax
xor eax, eax
mov dword [ebp - 0x180], ebx
mov word [ebp - 0x190], ax
mov dword [ebp - 0x298], ebx
mov dword [ebp - 0x294], ebx
mov dword [ebp - 0x290], ebx
mov dword [ebp - 0x29c], 0x4049c8
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x140], ebx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x118], ebx
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x17
push eax
call fcn.00424ad3
pop ecx
push dword [ebp - 0x7b1]
lea eax, [ebp - 0x190]
push eax
call fcn.004243f5
pop ecx
pop ecx
lea eax, [ebp - 0x7bc]
push eax
call fcn.00424988
pop ecx
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.0042442b
add esp, 0xc
lea eax, [ebp - 0x29c]
push eax
call fcn.00424d1b
pop ecx
lea eax, [ebp - 0xfc]
push eax
call fcn.0042ca7f
pop ecx
push 0x4058b0
lea ecx, [ebp - 0x29c]
call fcn.0041a7c7
mov edx, eax
test edx, edx
je 0x427a28
cmp byte [ebp - 0x7b1], 0
je 0x4279ec
cmp dword [ebp - 0x104], 0
je 0x4279ec
cmp dword [ebp - 0x100], edi
jb 0x4279e4
mov eax, dword [ebp - 0x114]
jmp 0x427a00
lea eax, [ebp - 0x114]
jmp 0x427a00
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0xe8], edi
jae 0x427a00
lea eax, [ebp - 0xfc]
mov ecx, dword [ebp - 0x5c]
cmp dword [ebp - 0x48], edi
jae 0x427a0b
lea ecx, [ebp - 0x5c]
push eax
push ecx
push edx
lea ecx, [ebp - 0x7a0]
call fcn.0040ec91
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x7a0]
call fcn.00424a0b
cmp dword [ebp - 0x34], 0
jne 0x427a3e
lea eax, [ebp - 0x44]
push 0x418
push eax
call fcn.0042d006
pop ecx
pop ecx
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0xe8], edi
jae 0x427a52
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.0040e1c3
lea eax, [ebp - 0x1a8]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x144]
push eax
push dword [ebp - 0x7bc]
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x540]
call fcn.004213c7
push ebx
push 1
lea ecx, [ebp - 0x1a8]
call fcn.0040f2f2
push 7
pop eax
xor ecx, ecx
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2ac], ebx
mov word [ebp - 0x2bc], cx
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x304], ebx
mov word [ebp - 0x314], cx
mov dword [ebp - 0x2e8], eax
xor eax, eax
mov dword [ebp - 0x2ec], ebx
mov word [ebp - 0x2fc], ax
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x30], edi
jae 0x427afb
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x2c]
push 0x3f4
push eax
call fcn.0042d006
add esp, 0xc
lea eax, [ebp - 0x2bc]
push 0x3ec
push eax
call fcn.0042d006
pop ecx
pop ecx
lea eax, [ebp - 0x314]
push 0x3eb
push eax
call fcn.0042d006
pop ecx
pop ecx
lea eax, [ebp - 0x2fc]
push 0x41f
push eax
call fcn.0042d006
pop ecx
pop ecx
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x2fc]
push eax
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x2c]
push eax
push ebx
push esi
lea ecx, [ebp - 0x274]
call fcn.0042ac5e
cmp byte [ebp - 0x7b1], 0
jne 0x427b90
push ebx
lea ecx, [ebp - 0x540]
call fcn.004205f4
mov byte [ebp - 0x7a5], al
jmp 0x427c87
xor eax, eax
mov dword [ebp - 0xb8], 7
mov dword [ebp - 0xbc], ebx
mov word [ebp - 0xcc], ax
mov eax, dword [ebp - 0xfc]
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0xe8], edi
jae 0x427bc1
lea eax, [ebp - 0xfc]
push ebx
push 0x4058c8
push eax
lea eax, [ebp - 0xcc]
push ebx
push eax
call fcn.0042de0a
mov eax, dword [ebp - 0xcc]
add esp, 0x14
cmp dword [ebp - 0xb8], edi
jae 0x427bec
lea eax, [ebp - 0xcc]
push eax
call fcn.0042d723
pop ecx
test al, al
je 0x427c67
mov esi, 0x4049c8
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xdc], esi
mov eax, dword [ebp - 0xcc]
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0xb8], edi
jae 0x427c2c
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0xdc]
call fcn.00417119
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x540]
call fcn.004205f4
lea ecx, [ebp - 0xdc]
mov byte [ebp - 0x7a5], al
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0xdc], esi
call fcn.004165bd
jmp 0x427c79
push ebx
lea ecx, [ebp - 0x540]
call fcn.004205f4
mov byte [ebp - 0x7a5], al
push ebx
push 1
lea ecx, [ebp - 0xcc]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x2fc]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x314]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x2bc]
call fcn.0040f2f2
lea ecx, [ebp - 0x120]
call fcn.0041f4a3
lea ecx, [ebp - 0x144]
call fcn.0041f4a3
lea ecx, [ebp - 0x29c]
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x29c], 0x4049c8
call fcn.004165bd
push ebx
push 1
lea ecx, [ebp - 0x190]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0xb4]
call fcn.0040f2f2
cmp byte [ebp - 0x7a5], 0
mov dword [ebp - 4], 0x10
jne 0x4280a7
lea ecx, [ebp - 0x3ac]
call fcn.0042bb52
lea ecx, [ebp - 0x2e4]
call fcn.004200aa
xor eax, eax
mov dword [ebp - 0xa0], 7
mov dword [ebp - 0xa4], ebx
mov word [ebp - 0xb4], ax
lea eax, [ebp - 0x2e4]
mov byte [ebp - 4], 0x22
push eax
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x540]
call fcn.004212f5
dec eax
lea ecx, [ebp - 0x540]
push eax
call fcn.004212cf
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x30], edi
jae 0x427d7f
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x2c]
push 0x40b
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x2c]
add esp, 0xc
cmp dword [ebp - 0x18], edi
jae 0x427d9c
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x274]
call fcn.0042afce
cmp dword [ebp - 0x2c4], 0
jne 0x427dd9
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0xa0], edi
jae 0x427dc5
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x2c]
push 0x40a
push eax
call fcn.0042d006
add esp, 0xc
jmp 0x427e14
mov ecx, dword [ebp - 0x2d4]
cmp dword [ebp - 0x2c0], edi
jae 0x427ded
lea ecx, [ebp - 0x2d4]
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0xa0], edi
jae 0x427e01
lea eax, [ebp - 0xb4]
push ecx
push eax
lea eax, [ebp - 0x2c]
push 0x41e
push eax
call fcn.0042d006
add esp, 0x10
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jae 0x427e1f
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.00424b5d
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x274]
call fcn.0042a3e4
mov ecx, dword [0x452018]
or esi, 0xffffffff
cmp dword [ecx], esi
je 0x427eea
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0xa0], edi
jae 0x427e60
lea eax, [ebp - 0xb4]
push eax
push 0x405970
push ecx
call fcn.0040e3bb
add esp, 0xc
cmp dword [ebp - 0x2c4], 0
je 0x427ea0
mov eax, dword [ebp - 0x2d4]
cmp dword [ebp - 0x2c0], edi
jae 0x427e8c
lea eax, [ebp - 0x2d4]
push eax
push 0x4059c0
push dword [0x452018]
call fcn.0040e3bb
add esp, 0xc
push 2
lea ecx, [ebp - 0x274]
call fcn.0042a3e4
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x88], edi
jae 0x427ec1
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x2c]
push 0x404
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x2c]
add esp, 0xc
cmp dword [ebp - 0x18], edi
jae 0x427ede
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x274]
call fcn.0042a181
push ebx
lea ecx, [ebp - 0x274]
call fcn.0042ba39
lea eax, [ebp - 0x2c]
push 0x3ea
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [ebp - 0x18], edi
jae 0x427f11
lea eax, [ebp - 0x2c]
push eax
push 1
lea ecx, [ebp - 0x274]
call fcn.0042b2db
push 1
push 1
lea ecx, [ebp - 0x274]
call fcn.0042b8dd
push ebx
push 2
lea ecx, [ebp - 0x274]
call fcn.0042b8dd
push ebx
lea ecx, [ebp - 0x274]
call fcn.0042b945
push 1
lea ecx, [ebp - 0x274]
call fcn.0042b8a3
mov ecx, dword [0x452018]
call fcn.00423db7
push 1
push 1
lea ecx, [ebp - 0x274]
call fcn.0042ade8
lea ecx, [ebp - 0x274]
call fcn.0042bbd8
push esi
push ebx
lea ecx, [ebp - 0x274]
call fcn.0042ade8
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push 1
lea ecx, [ebp - 0xb4]
call fcn.0040f2f2
lea ecx, [ebp - 0x2e4]
call fcn.004203e8
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040f2f2
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x6c], 0x4049c8
call fcn.004165bd
cmp dword [ebp - 0x7a4], 0
je 0x427fd9
push dword [ebp - 0x7a4]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebx
push 1
lea ecx, [ebp - 0xfc]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x114]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x160]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x138]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x84]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x178]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x28c]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x44]
call fcn.0040f2f2
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 3
call fcn.0042035c
lea ecx, [ebp - 0x630]
mov byte [ebp - 4], 2
call fcn.00429f8b
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 1
call fcn.00429ff3
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], bl
call fcn.00429fdd
lea ecx, [ebp - 0x7a0]
mov dword [ebp - 4], esi
call fcn.00423b9b
mov eax, 0x643
jmp 0x429dab
lea ecx, [ebp - 0x540]
call fcn.004212f5
mov esi, eax
mov al, byte [ebp - 0x7b1]
test al, al
je 0x428179
test esi, esi
jle 0x428179
lea ecx, [ebp - 0x2e4]
call fcn.004200aa
push ebx
push ebx
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x180], ebx
mov dword [ebp - 0x17c], ebx
call fcn.0040f2f2
lea eax, [ebp - 0x2e4]
mov byte [ebp - 4], 0x24
push eax
lea eax, [ebp - 0x190]
push eax
push dword [ebp - 0x7b8]
lea ecx, [ebp - 0x540]
call fcn.004212cf
mov eax, dword [ebp - 0x2e4]
lea ecx, [ebp - 0x190]
and eax, 0xf
push ebx
push 1
cmp al, 3
jne 0x428157
inc dword [ebp - 0x7b8]
call fcn.0040f2f2
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 0x10
call fcn.004203e8
mov ecx, dword [ebp - 0x7b8]
cmp ecx, esi
jl 0x4280ca
mov al, byte [ebp - 0x7b1]
jmp 0x42817b
call fcn.0040f2f2
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 0x10
call fcn.004203e8
mov al, byte [ebp - 0x7b1]
mov ecx, dword [ebp - 0x7b8]
jmp 0x42817b
mov ecx, ebx
test esi, esi
je 0x4292a6
test al, al
je 0x42818f
cmp ecx, esi
je 0x4292a6
lea ecx, [ebp - 0x3ac]
call fcn.0042bb52
cmp byte [ebp - 0x7b1], 0
jne 0x4289f9
push ebx
push ebx
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
call fcn.0040f2f2
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x26
cmp dword [ebp - 0x30], edi
jae 0x4281c6
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x5c]
push 0x4bd
push eax
call fcn.0042d006
add esp, 0xc
lea eax, [ebp - 0x6c]
lea ecx, [ebp - 0x630]
push eax
lea eax, [ebp - 0x84]
push eax
push 1
lea eax, [ebp - 0x5c]
push eax
push ebx
push dword [ebp - 0x7ac]
call fcn.0042aa24
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x540]
push eax
lea eax, [ebp - 0x630]
push eax
call fcn.0042654f
add esp, 0xc
test al, al
jne 0x428346
mov ecx, dword [0x452018]
call fcn.00423db7
lea ecx, [ebp - 0x630]
call fcn.0042bb52
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040f2f2
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x6c], 0x4049c8
call fcn.004165bd
cmp dword [ebp - 0x7a4], 0
je 0x428277
push dword [ebp - 0x7a4]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebx
push 1
lea ecx, [ebp - 0xfc]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x114]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x160]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x138]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x84]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x178]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x28c]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x44]
call fcn.0040f2f2
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 3
call fcn.0042035c
lea ecx, [ebp - 0x630]
mov byte [ebp - 4], 2
call fcn.00429f8b
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 1
call fcn.00429ff3
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], bl
call fcn.00429fdd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7a0]
call fcn.00423b9b
mov eax, 0x642
jmp 0x429dab
lea ecx, [ebp - 0x630]
call fcn.0042bb52
push 1
lea ecx, [ebp - 0x274]
call fcn.0042b8a3
push 1
lea ecx, [ebp - 0x274]
call fcn.0042ba39
push ebx
push 2
lea ecx, [ebp - 0x274]
call fcn.0042b8dd
push ebx
push 3
lea ecx, [ebp - 0x274]
call fcn.0042b8dd
push ebx
lea ecx, [ebp - 0x274]
call fcn.0042b945
push 1
push 1
lea ecx, [ebp - 0x274]
call fcn.0042ade8
lea eax, [ebp - 0x2c]
push 0x3f2
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [ebp - 0x18], edi
jae 0x4283bd
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x274]
call fcn.0042afce
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x70], edi
jae 0x4283da
lea eax, [ebp - 0x84]
push eax
push 0x405a08
push dword [0x452018]
call fcn.0040e3bb
mov eax, dword [ebp - 0x84]
add esp, 0xc
cmp dword [ebp - 0x70], edi
jae 0x4283ff
lea eax, [ebp - 0x84]
push eax
call fcn.00423dcc
mov eax, dword [ebp - 0x84]
pop ecx
cmp dword [ebp - 0x70], edi
jae 0x428417
lea eax, [ebp - 0x84]
push 1
push eax
lea ecx, [ebp - 0x540]
call fcn.00420980
test al, al
jne 0x428714
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x70], edi
jae 0x42843e
lea eax, [ebp - 0x84]
push eax
push 0x405a5c
push dword [0x452018]
call fcn.0040e3bb
mov eax, dword [ebp - 0x44]
add esp, 0xc
cmp dword [ebp - 0x30], edi
jae 0x42845d
lea eax, [ebp - 0x44]
mov esi, dword [ebp - 0x84]
mov dword [ebp - 0x7ac], eax
cmp dword [ebp - 0x70], edi
jae 0x428474
lea esi, [ebp - 0x84]
lea ecx, [ebp - 0x274]
call fcn.0042a5af
push dword [ebp - 0x7ac]
lea ecx, [ebp - 0x540]
push eax
push 1
push ebx
push esi
call fcn.004205ab
lea ecx, [ebp - 0x2d0]
call fcn.00423b78
mov ecx, dword [ebp - 0x9c]
mov byte [ebp - 4], 0x27
cmp dword [ebp - 0x88], edi
jae 0x4284b8
lea ecx, [ebp - 0x9c]
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x30], edi
jae 0x4284c3
lea eax, [ebp - 0x44]
push ecx
lea ecx, [ebp - 0x2d0]
push ecx
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x540]
push eax
call fcn.00426d19
add esp, 0x14
lea ecx, [ebp - 0x274]
mov esi, eax
push 0x4010c8
call fcn.0042b6be
test esi, esi
jns 0x428702
lea ecx, [ebp - 0x274]
call fcn.0042a744
test al, al
je 0x42852f
mov ecx, dword [0x452018]
call fcn.00423db7
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push 1
lea ecx, [ebp - 0x2bc]
call fcn.0040f2f2
jmp 0x428239
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x30], edi
jae 0x42853a
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x2c]
push 0x578
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x2c]
add esp, 0xc
cmp dword [ebp - 0x18], edi
jae 0x428557
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x274]
call fcn.0042afce
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x190]
call fcn.0040e19b
mov eax, dword [ebp - 0x190]
mov byte [ebp - 4], 0x28
cmp dword [ebp - 0x17c], edi
jae 0x42858d
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x2c]
push 0x579
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x2c]
add esp, 0xc
cmp dword [ebp - 0x18], edi
jae 0x4285aa
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.00424b5d
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x274]
call fcn.0042a3e4
push dword [ebp - 0x2c8]
lea eax, [ebp - 0x2c]
push 0x57a
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x2c]
add esp, 0xc
cmp dword [ebp - 0x18], edi
jae 0x4285e8
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x274]
call fcn.0042a181
push 1
lea ecx, [ebp - 0x274]
call fcn.0042a3e4
mov eax, dword [0x452018]
or esi, 0xffffffff
cmp dword [eax], esi
je 0x428657
push 2
lea ecx, [ebp - 0x274]
call fcn.0042a3e4
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x88], edi
jae 0x42862e
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x2c]
push 0x404
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x2c]
add esp, 0xc
cmp dword [ebp - 0x18], edi
jae 0x42864b
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x274]
call fcn.0042a181
lea eax, [ebp - 0x2c]
push 0x3ea
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [ebp - 0x18], edi
jae 0x428672
lea eax, [ebp - 0x2c]
push eax
push 1
lea ecx, [ebp - 0x274]
call fcn.0042b2db
push 1
push 1
lea ecx, [ebp - 0x274]
call fcn.0042b8dd
push ebx
push 2
lea ecx, [ebp - 0x274]
call fcn.0042b8dd
push ebx
lea ecx, [ebp - 0x274]
call fcn.0042ba39
push 1
push 1
lea ecx, [ebp - 0x274]
call fcn.0042ade8
lea ecx, [ebp - 0x274]
call fcn.0042bbd8
push esi
push ebx
lea ecx, [ebp - 0x274]
call fcn.0042ade8
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push 1
lea ecx, [ebp - 0x190]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x2bc]
call fcn.0040f2f2
lea ecx, [ebp - 0x5c]
push ebx
push 1
call fcn.0040f2f2
jmp 0x427fa6
push ebx
push 1
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 4], 0x26
call fcn.0040f2f2
or esi, 0xffffffff
lea ecx, [ebp - 0x274]
push esi
push ebx
call fcn.0042ade8
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x118], ebx
lea eax, [ebp - 0x120]
mov byte [ebp - 4], 0x29
push eax
lea ecx, [ebp - 0x540]
call fcn.00421644
test al, al
jne 0x428868
push ebx
push ebx
lea ecx, [ebp - 0x2bc]
mov dword [ebp - 0x2ac], ebx
mov dword [ebp - 0x2a8], ebx
call fcn.0040f2f2
push ebx
push ebx
lea ecx, [ebp - 0x314]
mov dword [ebp - 0x304], ebx
mov dword [ebp - 0x300], ebx
call fcn.0040f2f2
push ebx
push ebx
lea ecx, [ebp - 0x2fc]
mov dword [ebp - 0x2ec], ebx
mov dword [ebp - 0x2e8], ebx
call fcn.0040f2f2
push ebx
push ebx
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
call fcn.0040f2f2
mov esi, dword [ebp - 0x120]
mov byte [ebp - 4], 0x2d
cmp esi, dword [ebp - 0x11c]
je 0x42882c
cmp dword [esi + 0x14], edi
jb 0x4287d3
mov eax, dword [esi]
jmp 0x4287d5
mov eax, esi
push eax
lea ecx, [ebp - 0x190]
call fcn.0040e1c3
mov eax, dword [ebp - 0x190]
mov byte [ebp - 4], 0x2e
cmp dword [ebp - 0x17c], edi
jae 0x4287f9
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0xcc]
call fcn.00411fdd
push 0x4010cc
lea ecx, [ebp - 0xcc]
call fcn.00411fdd
push ebx
push 1
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x2d
call fcn.0040f2f2
add esi, 0x18
jmp 0x4287c2
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0xb8], edi
jae 0x428840
lea eax, [ebp - 0xcc]
push eax
push 0x57d
lea eax, [ebp - 0x7e8]
push 2
push eax
call fcn.0040e1f4
add esp, 0x10
lea eax, [ebp - 0x7e8]
push 0x44decc
push eax
call fcn.004304a7
lea ecx, [ebp - 0x120]
call fcn.0041f4a3
push ebx
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040f2f2
jmp 0x4289fc
or esi, 0xffffffff
push 1
lea ecx, [ebp - 0x274]
mov dword [ebp - 4], 0x10
call fcn.0042b8a3
push 1
lea ecx, [ebp - 0x274]
call fcn.0042ba39
lea eax, [ebp - 0x2c]
push 0x3e8
push eax
call fcn.0042d006
pop ecx
pop ecx
push 1
push 1
lea ecx, [ebp - 0x274]
call fcn.0042b8dd
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jae 0x428a47
lea eax, [ebp - 0x2c]
push eax
push 1
lea ecx, [ebp - 0x274]
call fcn.0042b2db
push ebx
push 2
lea ecx, [ebp - 0x274]
call fcn.0042b8dd
push ebx
push 3
lea ecx, [ebp - 0x274]
call fcn.0042b8dd
push ebx
lea ecx, [ebp - 0x274]
call fcn.0042b945
push 1
push 1
lea ecx, [ebp - 0x274]
call fcn.0042ade8
push dword [ebp - 0x7b8]
lea ecx, [ebp - 0x540]
call fcn.004205d0
push dword [ebp - 0x7b8]
lea eax, [ebp - 0x540]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.0042605d
add esp, 0xc
mov byte [ebp - 0x7a5], bl
cmp byte [ebp - 0x7a7], 0
jne 0x428c34
push ebx
push ebx
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], ebx
call fcn.0040f2f2
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x32
push eax
lea ecx, [ebp - 0x540]
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x140], ebx
mov byte [ebp - 0x13c], bl
call fcn.0042124f
cmp byte [ebp - 0x13c], 0
mov byte [ebp - 0x7a7], al
je 0x428f28
push 0x4010c8
lea ecx, [ebp - 0x274]
call fcn.0042b6be
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 0x7a5], bl
call fcn.004200aa
lea eax, [ebp - 0x2e4]
mov byte [ebp - 4], 0x33
push eax
lea eax, [ebp - 0xe4]
push eax
push dword [ebp - 0x7b8]
lea ecx, [ebp - 0x540]
call fcn.004212cf
mov ecx, dword [ebp - 0x2e4]
cmp ecx, 7
je 0x428cba
mov eax, ecx
and eax, 0xf
cmp al, 5
je 0x428cba
test cl, 0x30
je 0x428c71
cmp dword [ebp - 0x168], 0
jne 0x428c0f
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x160]
call fcn.0040e2ef
cmp byte [ebp - 0x7b1], 0
je 0x428bcb
cmp dword [ebp - 0x100], edi
jb 0x428bc3
mov eax, dword [ebp - 0x114]
jmp 0x428bdf
lea eax, [ebp - 0x114]
jmp 0x428bdf
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0xe8], edi
jae 0x428bdf
lea eax, [ebp - 0xfc]
mov ecx, dword [ebp - 0x138]
cmp dword [ebp - 0x124], edi
jae 0x428bf3
lea ecx, [ebp - 0x138]
push ecx
push eax
lea eax, [ebp - 0x178]
push 0x405a90
push eax
call fcn.0042c54b
mov ecx, dword [ebp - 0x2e4]
add esp, 0x10
mov byte [ebp - 0x7a6], 1
test cl, 0x10
je 0x428c71
lea ecx, [ebp - 0x2e4]
call fcn.004203e8
push ebx
push 1
lea ecx, [ebp - 0xe4]
call fcn.0040f2f2
push esi
push ebx
lea ecx, [ebp - 0x274]
mov dword [ebp - 4], 0x10
call fcn.0042ade8
cmp byte [ebp - 0x7a7], 0
je 0x4292bb
lea ecx, [ebp - 0x274]
call fcn.0042a744
neg al
sbb al, al
inc al
mov byte [ebp - 0x7ad], al
jmp 0x4292bb
inc dword [ebp - 0x7b8]
lea ecx, [ebp - 0x274]
call fcn.0042a744
test al, al
jne 0x428c1b
cmp byte [ebp - 0x7a7], al
jne 0x428caa
push dword [ebp - 0x7b8]
lea eax, [ebp - 0x540]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.0042605d
add esp, 0xc
lea ecx, [ebp - 0x2e4]
call fcn.004203e8
jmp 0x4290c0
test cl, 0x30
je 0x428cd8
lea eax, [ebp - 0xe4]
mov byte [ebp - 0x7a6], 1
push eax
lea ecx, [ebp - 0x160]
call fcn.0040e2ef
cmp byte [ebp - 0x7a6], 0
mov eax, dword [ebp - 0x44]
je 0x428cf4
cmp dword [ebp - 0x30], edi
jae 0x428cec
lea eax, [ebp - 0x44]
push eax
push 0x3f9
jmp 0x428d02
cmp dword [ebp - 0x30], edi
jae 0x428cfc
lea eax, [ebp - 0x44]
push eax
push 0x3f8
lea eax, [ebp - 0x2c]
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x2c]
add esp, 0xc
cmp dword [ebp - 0x18], edi
jae 0x428d19
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x274]
call fcn.0042afce
push esi
lea ecx, [ebp - 0x274]
call fcn.0042af70
cmp dword [ebp - 0x2c4], 0
jbe 0x428d77
mov ecx, dword [ebp - 0x2d4]
cmp dword [ebp - 0x2c0], edi
jae 0x428d4e
lea ecx, [ebp - 0x2d4]
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0xd0], edi
jae 0x428d62
lea eax, [ebp - 0xe4]
push ecx
push eax
lea eax, [ebp - 0x2c]
push 0x402
push eax
call fcn.0042d006
add esp, 0x10
jmp 0x428d9d
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0xd0], edi
jae 0x428d8b
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x2c]
push 0x401
push eax
call fcn.0042d006
add esp, 0xc
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], edi
jae 0x428da8
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.00424b5d
pop ecx
pop ecx
push 2
lea ecx, [ebp - 0x274]
call fcn.0042a3e4
push ebx
lea eax, [ebp - 0x540]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.00425a0c
mov eax, dword [0x452018]
add esp, 0xc
cmp dword [eax], esi
je 0x428e21
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x88], edi
jae 0x428df8
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x2c]
push 0x404
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x2c]
add esp, 0xc
cmp dword [ebp - 0x18], edi
jae 0x428e15
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x274]
call fcn.0042a181
push ebx
lea ecx, [ebp - 0x274]
call fcn.0042ba39
cmp byte [ebp - 0x7a6], 0
je 0x428e9c
push ebx
push ebx
call fcn.00426108
pop ecx
pop ecx
push 1
push 1
lea ecx, [ebp - 0x274]
call fcn.0042a451
push 3
lea ecx, [ebp - 0x274]
call fcn.0042b37c
push 3
lea ecx, [ebp - 0x274]
call fcn.0042b239
lea eax, [ebp - 0x274]
push eax
call fcn.0042588b
pop ecx
mov ecx, dword [0x452018]
call fcn.00423db7
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x2e4]
call fcn.004203e8
lea ecx, [ebp - 0xe4]
jmp 0x4286f5
lea eax, [ebp - 0x2c]
push 0x3ea
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [ebp - 0x18], edi
jae 0x428eb7
lea eax, [ebp - 0x2c]
push eax
push 1
lea ecx, [ebp - 0x274]
call fcn.0042b2db
push 1
push 1
lea ecx, [ebp - 0x274]
call fcn.0042b8dd
push 1
push 1
lea ecx, [ebp - 0x274]
call fcn.0042a451
push ebx
push 2
lea ecx, [ebp - 0x274]
call fcn.0042b8dd
mov ecx, dword [0x452018]
call fcn.00423db7
push 1
push 1
lea ecx, [ebp - 0x274]
call fcn.0042ade8
lea ecx, [ebp - 0x274]
call fcn.0042bbd8
push esi
push ebx
lea ecx, [ebp - 0x274]
call fcn.0042ade8
jmp 0x428e80
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x140]
cmp eax, ecx
jbe 0x428f8a
test ecx, ecx
je 0x428f8a
test eax, eax
je 0x428f8a
cmp byte [ebp - 0x7a5], 0
jne 0x428f83
lea eax, [ebp - 0x2c]
push 0x417
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [ebp - 0x18], edi
jae 0x428f64
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x274]
call fcn.0042b6be
mov ecx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x144]
mov byte [ebp - 0x7a5], 1
xor edx, edx
div ecx
push edx
jmp 0x428f8b
push eax
push ecx
lea ecx, [ebp - 0x274]
call fcn.0042a74b
cmp byte [ebp - 0x7b2], 0
jne 0x4290c0
lea ecx, [ebp - 0x274]
call fcn.0042a744
test al, al
je 0x4290c0
push ebx
push ebx
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
call fcn.0040f2f2
lea eax, [ebp - 0xcc]
mov byte [ebp - 4], 0x34
push 0x406
push eax
call fcn.0042d006
pop ecx
pop ecx
push ebx
push ebx
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
call fcn.0040f2f2
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 0x35
cmp dword [ebp - 0x30], edi
jae 0x429006
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x5c]
push 0x3f4
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x5c]
add esp, 0xc
cmp dword [ebp - 0x48], edi
jae 0x429023
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x7ac], eax
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0xb8], edi
jae 0x42903d
lea eax, [ebp - 0xcc]
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x7bc], eax
call fcn.0042a5af
push 0x34
push dword [ebp - 0x7ac]
push dword [ebp - 0x7bc]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x42909b
mov ecx, dword [0x452018]
push 0x405abc
call fcn.0040f13e
push esi
lea ecx, [ebp - 0x274]
call fcn.0042b239
push ebx
push 1
lea ecx, [ebp - 0x274]
call fcn.0042a451
mov byte [ebp - 0x7b2], 1
jmp 0x4290a7
push ebx
lea ecx, [ebp - 0x274]
call fcn.0042b868
push ebx
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0xcc]
call fcn.0040f2f2
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push 1
lea ecx, [ebp - 0xe4]
call fcn.0040f2f2
jmp 0x428abf
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 0x7ad], 1
call fcn.0042bb52
or esi, 0xffffffff
lea eax, [ebp - 0x2c]
push 0x3ea
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [ebp - 0x18], edi
jae 0x4292d6
lea eax, [ebp - 0x2c]
push eax
push 1
lea ecx, [ebp - 0x274]
call fcn.0042b2db
push 1
push 1
lea ecx, [ebp - 0x274]
call fcn.0042a451
lea ecx, [ebp - 0x274]
call fcn.0042a744
cmp byte [ebp - 0x7a6], 0
je 0x42948e
test al, al
lea eax, [ebp - 0x2c]
je 0x429319
push 0x408
jmp 0x42931e
push 0x409
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [ebp - 0x18], edi
jae 0x429331
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x274]
call fcn.0042afce
lea eax, [ebp - 0x274]
push ebx
push eax
call fcn.00424b5d
cmp dword [ebp - 0x150], 0
pop ecx
pop ecx
je 0x42939f
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x14c], edi
jae 0x429369
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x2c]
push 0x411
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x2c]
add esp, 0xc
cmp dword [ebp - 0x18], edi
jae 0x429386
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x274]
call fcn.0042a181
push 2
lea ecx, [ebp - 0x274]
call fcn.0042a3e4
push 1
lea eax, [ebp - 0x540]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.00425a0c
add esp, 0xc
lea ecx, [ebp - 0x274]
call fcn.0042a744
test al, al
jne 0x429457
mov ecx, dword [ebp - 0x178]
cmp dword [ebp - 0x164], edi
jae 0x4293de
lea ecx, [ebp - 0x178]
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x70], edi
jae 0x4293ef
lea eax, [ebp - 0x84]
push ecx
push eax
call fcn.00426108
pop ecx
pop ecx
push ebx
push ebx
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
call fcn.0040f2f2
mov eax, dword [ebp - 0x84]
mov byte [ebp - 4], 0x38
cmp dword [ebp - 0x70], edi
jae 0x42941d
lea eax, [ebp - 0x84]
push ebx
push 0x4058c8
push eax
lea eax, [ebp - 0x5c]
push ebx
push eax
call fcn.0042de0a
mov eax, dword [ebp - 0x5c]
add esp, 0x14
cmp dword [ebp - 0x48], edi
jae 0x42943c
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x540]
call fcn.0042184f
push ebx
push 1
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x10
call fcn.0040f2f2
push 3
lea ecx, [ebp - 0x274]
call fcn.0042b37c
push 3
lea ecx, [ebp - 0x274]
call fcn.0042b239
lea eax, [ebp - 0x274]
push eax
call fcn.0042588b
pop ecx
mov ecx, dword [0x452018]
call fcn.00423db7
jmp 0x4274d0
test al, al
je 0x429519
lea eax, [ebp - 0x2c]
push 0x40e
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x2c]
pop ecx
pop ecx
cmp dword [ebp - 0x18], edi
jae 0x4294b1
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x274]
call fcn.0042afce
lea eax, [ebp - 0x274]
push ebx
push eax
call fcn.00424b5d
push ebx
lea eax, [ebp - 0x540]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.00425a0c
add esp, 0x14
lea ecx, [ebp - 0x274]
push ebx
call fcn.0042ba39
push 1
push 1
lea ecx, [ebp - 0x274]
call fcn.0042ade8
lea ecx, [ebp - 0x274]
call fcn.0042bbd8
push esi
push ebx
lea ecx, [ebp - 0x274]
call fcn.0042ade8
jmp 0x42947e
mov al, byte [ebp - 0x7ad]
test al, al
je 0x42947e
cmp dword [ebp - 0x678], 0
je 0x42947e
push ebx
push ebx
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
call fcn.0040f2f2
lea eax, [ebp - 0xcc]
mov byte [ebp - 4], 0x3a
push eax
lea ecx, [ebp - 0x7a0]
call fcn.0040e559
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0xb8], edi
jae 0x429577
lea eax, [ebp - 0xcc]
push 0x401158
push eax
lea ecx, [ebp - 0x7a0]
call fcn.0040e30d
test al, al
je 0x429789
push ebx
push ebx
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], ebx
call fcn.0040f2f2
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [ebp - 0x7a0]
call fcn.0040e42c
test eax, eax
je 0x429777
push ebx
push ebx
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], ebx
call fcn.0040f2f2
lea eax, [ebp - 0xe4]
mov byte [ebp - 4], 0x3c
push eax
call fcn.00424a3b
pop ecx
lea eax, [ebp - 0xb4]
push 0x404304
push eax
call fcn.00423a9e
pop ecx
pop ecx
test al, al
je 0x429769
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xb4]
push eax
call fcn.00423a88
pop ecx
pop ecx
test al, al
je 0x429769
push ebx
push ebx
lea ecx, [ebp - 0x2a4]
mov dword [ebp - 0x294], ebx
mov dword [ebp - 0x290], ebx
call fcn.0040f2f2
push ebx
push ebx
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
call fcn.0040f2f2
mov ecx, dword [ebp - 0xe4]
mov byte [ebp - 4], 0x3e
cmp dword [ebp - 0xd0], edi
jae 0x42966a
lea ecx, [ebp - 0xe4]
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0xa0], edi
jae 0x42967e
lea eax, [ebp - 0xb4]
push ecx
push eax
lea eax, [ebp - 0x2a4]
push 0x5a9
push eax
call fcn.0042d006
mov eax, dword [ebp - 0x44]
add esp, 0x10
cmp dword [ebp - 0x30], edi
jae 0x42969f
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x5c]
push 0x3f4
push eax
call fcn.0042d006
mov ecx, dword [ebp - 0x5c]
add esp, 0xc
cmp dword [ebp - 0x48], edi
jae 0x4296bc
lea ecx, [ebp - 0x5c]
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0x290], edi
jae 0x4296d0
lea eax, [ebp - 0x2a4]
push 0x30
push ecx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0xe4]
cmp dword [ebp - 0xd0], edi
jae 0x4296ef
lea ecx, [ebp - 0xe4]
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0xa0], edi
jae 0x429703
lea eax, [ebp - 0xb4]
push ecx
push eax
push 0x405af8
push dword [0x452018]
call fcn.0040e3bb
mov ecx, dword [0x452018]
add esp, 0x10
call fcn.00423db7
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push 1
lea ecx, [ebp - 0x5c]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0x2a4]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0xe4]
call fcn.0040f2f2
lea ecx, [ebp - 0xb4]
push ebx
push 1
call fcn.0040f2f2
lea ecx, [ebp - 0xcc]
jmp 0x4286f5
push ebx
push 1
lea ecx, [ebp - 0xe4]
call fcn.0040f2f2
push ebx
push 1
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0x3a
call fcn.0040f2f2
lea ecx, [ebp - 0x7a0]
call fcn.0040e376
test al, al
je 0x429877
push ebx
push ebx
lea ecx, [ebp - 0x7a0]
call fcn.00423d99
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x30], edi
jae 0x4297b4
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x7a0]
push eax
call fcn.004269fc
add esp, 0xc
test eax, eax
jns 0x4297f9
push eax
push 0x405b60
push dword [0x452018]
call fcn.0040e3bb
mov ecx, dword [0x452018]
add esp, 0xc
call fcn.00423db7
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x42975e
push ebx
push ebx
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
call fcn.0040f2f2
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x3f
push eax
call fcn.0042cbf9
mov eax, dword [ebp - 0x5c]
pop ecx
cmp dword [ebp - 0x48], edi
jae 0x429822
lea eax, [ebp - 0x5c]
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x7ac], eax
call fcn.0042a5af
push eax
push dword [ebp - 0x7ac]
lea ecx, [ebp - 0x7a0]
call fcn.0040ee9a
cmp eax, 1
je 0x429868
cmp eax, 4
je 0x429868
mov ecx, dword [0x452018]
call fcn.00423db7
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x5c]
jmp 0x429756
push ebx
push 1
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x3a
call fcn.0040f2f2
mov ecx, dword [0x452018]
push 0x405bc8
call fcn.0040f13e
push ebx
lea ecx, [ebp - 0x274]
call fcn.0042b8a3
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x124], edi
jae 0x4298a7
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x7a0]
call fcn.0040e5bc
push ebx
push 1
lea ecx, [ebp - 0xcc]
call fcn.0040f2f2
lea ecx, [ebp - 0x274]
mov dword [ebp - 4], 0x10
call fcn.0042bb57
jmp 0x42947e
call fcn.0043052d
ret 0x10