Function at 0x420d3c
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4ebf47
mov eax, dword fs:[0]
push eax
sub esp, 0xbe8
mov eax, dword [0x52e030]
xor eax, esp
mov dword [esp + 0xbe0], eax
push ebx
push esi
push edi
mov eax, dword [0x52e030]
xor eax, esp
push eax
lea eax, [esp + 0xbf8]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
xor ebx, ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], ebx
cmp eax, 0xe
ja case.default.0x420d9d
jmp dword [eax*4 + 0x421e34]
cmp esi, ebx
je 0x421042
push edx
call fcn.00421ee4
jmp 0x420edd
xor edi, edi
inc edi
cmp dword [0x536220], edi
jg 0x420e6f
call fcn.00428625
test eax, eax
je 0x420df2
call fcn.00428625
push eax
lea esi, [esp + 0x938]
call fcn.00402b1f
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], ebx
mov dword [esp + 0x10], edi
jmp 0x420e1b
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
lea eax, [esp + 0x98c]
push eax
call fcn.00428954
pop ecx
pop ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], edi
mov dword [esp + 0x10], 2
mov eax, edi
mov edi, 0x2f3
mov ebx, 0x505090
lea esi, [esp + 0x4f4]
call fcn.0042b7c4
mov dword [esp + 0xc00], 2
or dword [esp + 0x10], 4
push str.DISPID_NOTIFY_COMPLETE
push ecx
push 0x50508c
push ecx
mov ecx, dword [esp + 0x24]
add eax, 8
push eax
call fcn.00403796
pop ecx
pop ecx
push eax
call fcn.00403bcc
add esp, 0xc
push eax
call fcn.00403bcc
pop ecx
pop ecx
mov dword [esp + 0xc00], 1
test byte [esp + 0x10], 4
je 0x420e92
and dword [esp + 0x10], 0xfffffffb
lea ebx, [esp + 0x4f4]
call fcn.0042b903
and dword [esp + 0xc00], 0
test byte [esp + 0x10], 2
je 0x420eb6
and dword [esp + 0x10], 0xfffffffd
push 1
xor edi, edi
lea esi, [esp + 0x98c]
call fcn.00402dc7
or dword [esp + 0xc00], 0xffffffff
test byte [esp + 0x10], 1
je case.default.0x420d9d
and dword [esp + 0x10], 0xfffffffe
lea esi, [esp + 0x934]
push 1
xor edi, edi
call fcn.00402dc7
xor eax, eax
inc eax
mov ecx, dword [esp + 0xbf8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xbe0]
xor ecx, esp
call fcn.00475360
mov esp, ebp
pop ebp
ret 8
cmp dword [0x536220], 1
jg 0x420fc6
call fcn.00428625
test eax, eax
je 0x420f44
call fcn.00428625
push eax
lea esi, [esp + 0x9a8]
call fcn.00402b1f
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 3
mov dword [esp + 0x10], 8
jmp 0x420f71
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
lea eax, [esp + 0x970]
push eax
call fcn.00428954
pop ecx
pop ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 4
mov dword [esp + 0x10], 0x10
xor eax, eax
inc eax
mov edi, 0x2f8
mov ebx, 0x5050bc
lea esi, [esp + 0x234]
call fcn.0042b7c4
mov dword [esp + 0xc00], 5
or dword [esp + 0x10], 0x20
push str.DISPID_FILE_EXISTS
push ecx
push 0x5050b8
push ecx
mov ecx, dword [esp + 0x24]
add eax, 8
push eax
call fcn.00403796
pop ecx
pop ecx
push eax
call fcn.00403bcc
add esp, 0xc
push eax
call fcn.00403bcc
pop ecx
pop ecx
mov dword [esp + 0xc00], 4
test byte [esp + 0x10], 0x20
je 0x420fe9
and dword [esp + 0x10], 0xffffffdf
lea ebx, [esp + 0x234]
call fcn.0042b903
mov dword [esp + 0xc00], 3
test byte [esp + 0x10], 0x10
je 0x421010
and dword [esp + 0x10], 0xffffffef
push 1
xor edi, edi
lea esi, [esp + 0x970]
call fcn.00402dc7
or dword [esp + 0xc00], 0xffffffff
test byte [esp + 0x10], 8
je 0x421034
and dword [esp + 0x10], 0xfffffff7
push 1
xor edi, edi
lea esi, [esp + 0x9a8]
call fcn.00402dc7
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x421042
xor ecx, ecx
mov word [eax + 8], cx
xor eax, eax
jmp 0x420edd
cmp dword [0x536220], 1
jg 0x42110c
call fcn.00428625
test eax, eax
je 0x42108a
call fcn.00428625
push eax
lea esi, [esp + 0xa18]
call fcn.00402b1f
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 6
mov dword [esp + 0x10], 0x40
jmp 0x4210b7
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
lea eax, [esp + 0x9e0]
push eax
call fcn.00428954
pop ecx
pop ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 7
mov dword [esp + 0x10], 0x80
xor eax, eax
inc eax
mov edi, 0x2ff
mov ebx, 0x5050e4
lea esi, [esp + 0x24]
call fcn.0042b7c4
mov dword [esp + 0xc00], 8
or dword [esp + 0x10], 0x100
push str.DISPID_NAVIGATE
push ecx
push 0x5050e0
push ecx
mov ecx, dword [esp + 0x24]
add eax, 8
push eax
call fcn.00403796
pop ecx
pop ecx
push eax
call fcn.00403bcc
add esp, 0xc
push eax
call fcn.00403bcc
pop ecx
pop ecx
mov dword [esp + 0xc00], 7
test dword [esp + 0x10], 0x100
je 0x421132
and dword [esp + 0x10], 0xfffffeff
lea ebx, [esp + 0x24]
call fcn.0042b903
mov dword [esp + 0xc00], 6
test byte [esp + 0x10], 0x80
je 0x42115c
and dword [esp + 0x10], 0xffffff7f
push 1
xor edi, edi
lea esi, [esp + 0x9e0]
call fcn.00402dc7
or dword [esp + 0xc00], 0xffffffff
test byte [esp + 0x10], 0x40
je case.default.0x420d9d
and dword [esp + 0x10], 0xffffffbf
lea esi, [esp + 0xa14]
jmp 0x420ed1
cmp dword [0x536220], 1
jg 0x421246
call fcn.00428625
test eax, eax
je 0x4211c1
call fcn.00428625
push eax
lea esi, [esp + 0xa88]
call fcn.00402b1f
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 9
mov dword [esp + 0x10], 0x200
jmp 0x4211ee
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
lea eax, [esp + 0xa50]
push eax
call fcn.00428954
pop ecx
pop ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0xa
mov dword [esp + 0x10], 0x400
xor eax, eax
inc eax
mov edi, 0x304
mov ebx, 0x50510c
lea esi, [esp + 0x394]
call fcn.0042b7c4
mov dword [esp + 0xc00], 0xb
or dword [esp + 0x10], 0x800
push str.DISPID_SEARCH
push ecx
push 0x505108
push ecx
mov ecx, dword [esp + 0x24]
add eax, 8
push eax
call fcn.00403796
pop ecx
pop ecx
push eax
call fcn.00403bcc
add esp, 0xc
push eax
call fcn.00403bcc
pop ecx
pop ecx
mov dword [esp + 0xc00], 0xa
test dword [esp + 0x10], 0x800
je 0x42126f
and dword [esp + 0x10], 0xfffff7ff
lea ebx, [esp + 0x394]
call fcn.0042b903
mov dword [esp + 0xc00], 9
test dword [esp + 0x10], 0x400
je 0x42129c
and dword [esp + 0x10], 0xfffffbff
push 1
xor edi, edi
lea esi, [esp + 0xa50]
call fcn.00402dc7
or dword [esp + 0xc00], 0xffffffff
test dword [esp + 0x10], 0x200
je 0x4212c6
and dword [esp + 0x10], 0xfffffdff
push 1
xor edi, edi
lea esi, [esp + 0xa88]
call fcn.00402dc7
mov eax, dword [esp + 0x20]
cmp dword [eax + 8], 2
jb case.default.0x420d9d
push eax
call fcn.00421f00
jmp 0x420edd
cmp dword [0x536220], 1
jg 0x4213a5
call fcn.00428625
test eax, eax
je 0x421320
call fcn.00428625
push eax
lea esi, [esp + 0xaf8]
call fcn.00402b1f
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0xc
mov dword [esp + 0x10], 0x1000
jmp 0x42134d
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
lea eax, [esp + 0xac0]
push eax
call fcn.00428954
pop ecx
pop ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0xd
mov dword [esp + 0x10], 0x2000
xor eax, eax
inc eax
mov edi, 0x309
mov ebx, 0x50513c
lea esi, [esp + 0x654]
call fcn.0042b7c4
mov dword [esp + 0xc00], 0xe
or dword [esp + 0x10], 0x4000
push str.DISPID_DOWNLOAD_INFO
push ecx
push 0x505138
push ecx
mov ecx, dword [esp + 0x24]
add eax, 8
push eax
call fcn.00403796
pop ecx
pop ecx
push eax
call fcn.00403bcc
add esp, 0xc
push eax
call fcn.00403bcc
pop ecx
pop ecx
mov dword [esp + 0xc00], 0xd
test dword [esp + 0x10], 0x4000
je 0x4213ce
and dword [esp + 0x10], 0xffffbfff
lea ebx, [esp + 0x654]
call fcn.0042b903
mov dword [esp + 0xc00], 0xc
test dword [esp + 0x10], 0x2000
je 0x4213fb
and dword [esp + 0x10], 0xffffdfff
push 1
xor edi, edi
lea esi, [esp + 0xac0]
call fcn.00402dc7
or dword [esp + 0xc00], 0xffffffff
test dword [esp + 0x10], 0x1000
je case.default.0x420d9d
and dword [esp + 0x10], 0xffffefff
lea esi, [esp + 0xaf4]
jmp 0x420ed1
cmp dword [0x536220], 1
jg 0x4214eb
call fcn.00428625
test eax, eax
je 0x421466
call fcn.00428625
push eax
lea esi, [esp + 0xb68]
call fcn.00402b1f
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0xf
mov dword [esp + 0x10], 0x8000
jmp 0x421493
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
lea eax, [esp + 0xb30]
push eax
call fcn.00428954
pop ecx
pop ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0x10
mov dword [esp + 0x10], 0x10000
xor eax, eax
inc eax
mov edi, 0x30e
mov ebx, 0x50516c
lea esi, [esp + 0xd4]
call fcn.0042b7c4
mov dword [esp + 0xc00], 0x11
or dword [esp + 0x10], 0x20000
push str.DISPID_SHOW_RING_TONE
push ecx
push 0x505168
push ecx
mov ecx, dword [esp + 0x24]
add eax, 8
push eax
call fcn.00403796
pop ecx
pop ecx
push eax
call fcn.00403bcc
add esp, 0xc
push eax
call fcn.00403bcc
pop ecx
pop ecx
mov dword [esp + 0xc00], 0x10
test dword [esp + 0x10], 0x20000
je 0x421514
and dword [esp + 0x10], 0xfffdffff
lea ebx, [esp + 0xd4]
call fcn.0042b903
mov dword [esp + 0xc00], 0xf
test dword [esp + 0x10], 0x10000
je 0x421541
and dword [esp + 0x10], 0xfffeffff
push 1
xor edi, edi
lea esi, [esp + 0xb30]
call fcn.00402dc7
or dword [esp + 0xc00], 0xffffffff
test dword [esp + 0x10], 0x8000
je case.default.0x420d9d
and dword [esp + 0x10], 0xffff7fff
lea esi, [esp + 0xb64]
jmp 0x420ed1
cmp dword [0x536220], 1
jg 0x421631
call fcn.00428625
test eax, eax
je 0x4215ac
call fcn.00428625
push eax
lea esi, [esp + 0xbd8]
call fcn.00402b1f
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0x12
mov dword [esp + 0x10], 0x40000
jmp 0x4215d9
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
lea eax, [esp + 0xba0]
push eax
call fcn.00428954
pop ecx
pop ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0x13
mov dword [esp + 0x10], 0x80000
xor eax, eax
inc eax
mov edi, 0x313
mov ebx, 0x5051a0
lea esi, [esp + 0x184]
call fcn.0042b7c4
mov dword [esp + 0xc00], 0x14
or dword [esp + 0x10], 0x100000
push str.DISPID_SHOW_RINGBACK_TONE
push ecx
push 0x50519c
push ecx
mov ecx, dword [esp + 0x24]
add eax, 8
push eax
call fcn.00403796
pop ecx
pop ecx
push eax
call fcn.00403bcc
add esp, 0xc
push eax
call fcn.00403bcc
pop ecx
pop ecx
mov dword [esp + 0xc00], 0x13
test dword [esp + 0x10], 0x100000
je 0x42165a
and dword [esp + 0x10], 0xffefffff
lea ebx, [esp + 0x184]
call fcn.0042b903
mov dword [esp + 0xc00], 0x12
test dword [esp + 0x10], 0x80000
je 0x421687
and dword [esp + 0x10], 0xfff7ffff
push 1
xor edi, edi
lea esi, [esp + 0xba0]
call fcn.00402dc7
or dword [esp + 0xc00], 0xffffffff
test dword [esp + 0x10], 0x40000
je case.default.0x420d9d
and dword [esp + 0x10], 0xfffbffff
lea esi, [esp + 0xbd4]
jmp 0x420ed1
cmp dword [0x536220], 1
jg 0x421777
call fcn.00428625
test eax, eax
je 0x4216f2
call fcn.00428625
push eax
lea esi, [esp + 0xaa4]
call fcn.00402b1f
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0x15
mov dword [esp + 0x10], 0x200000
jmp 0x42171f
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
lea eax, [esp + 0x954]
push eax
call fcn.00428954
pop ecx
pop ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0x16
mov dword [esp + 0x10], 0x400000
xor eax, eax
inc eax
mov edi, 0x318
mov ebx, 0x5051cc
lea esi, [esp + 0x2e4]
call fcn.0042b7c4
mov dword [esp + 0xc00], 0x17
or dword [esp + 0x10], 0x800000
push str.DISPID_PAUSE_LISTEN
push ecx
push 0x5051c8
push ecx
mov ecx, dword [esp + 0x24]
add eax, 8
push eax
call fcn.00403796
pop ecx
pop ecx
push eax
call fcn.00403bcc
add esp, 0xc
push eax
call fcn.00403bcc
pop ecx
pop ecx
mov dword [esp + 0xc00], 0x16
test dword [esp + 0x10], 0x800000
je 0x4217a0
and dword [esp + 0x10], 0xff7fffff
lea ebx, [esp + 0x2e4]
call fcn.0042b903
mov dword [esp + 0xc00], 0x15
test dword [esp + 0x10], 0x400000
je 0x4217cd
and dword [esp + 0x10], 0xffbfffff
push 1
xor edi, edi
lea esi, [esp + 0x954]
call fcn.00402dc7
or dword [esp + 0xc00], 0xffffffff
test dword [esp + 0x10], 0x200000
je case.default.0x420d9d
and dword [esp + 0x10], 0xffdfffff
lea esi, [esp + 0xaa0]
jmp 0x420ed1
cmp dword [0x536220], 1
jg 0x4218bd
call fcn.00428625
test eax, eax
je 0x421838
call fcn.00428625
push eax
lea esi, [esp + 0xb4c]
call fcn.00402b1f
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0x18
mov dword [esp + 0x10], 0x1000000
jmp 0x421865
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
lea eax, [esp + 0x91c]
push eax
call fcn.00428954
pop ecx
pop ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0x19
mov dword [esp + 0x10], 0x2000000
xor eax, eax
inc eax
mov edi, 0x31d
mov ebx, 0x5051fc
lea esi, [esp + 0x444]
call fcn.0042b7c4
mov dword [esp + 0xc00], 0x1a
or dword [esp + 0x10], 0x4000000
push str.DISPID_PAUSE_DOWNLOAD
push ecx
push 0x5051f8
push ecx
mov ecx, dword [esp + 0x24]
add eax, 8
push eax
call fcn.00403796
pop ecx
pop ecx
push eax
call fcn.00403bcc
add esp, 0xc
push eax
call fcn.00403bcc
pop ecx
pop ecx
mov dword [esp + 0xc00], 0x19
test dword [esp + 0x10], 0x4000000
je 0x4218e6
and dword [esp + 0x10], 0xfbffffff
lea ebx, [esp + 0x444]
call fcn.0042b903
mov dword [esp + 0xc00], 0x18
test dword [esp + 0x10], 0x2000000
je 0x421913
and dword [esp + 0x10], 0xfdffffff
push 1
xor edi, edi
lea esi, [esp + 0x91c]
call fcn.00402dc7
or dword [esp + 0xc00], 0xffffffff
test dword [esp + 0x10], 0x1000000
je case.default.0x420d9d
and dword [esp + 0x10], 0xfeffffff
lea esi, [esp + 0xb48]
jmp 0x420ed1
cmp dword [0x536220], 1
jg 0x421a03
call fcn.00428625
test eax, eax
je 0x42197e
call fcn.00428625
push eax
lea esi, [esp + 0xadc]
call fcn.00402b1f
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0x1b
mov dword [esp + 0x10], 0x8000000
jmp 0x4219ab
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
lea eax, [esp + 0x9c4]
push eax
call fcn.00428954
pop ecx
pop ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0x1c
mov dword [esp + 0x10], 0x10000000
xor eax, eax
inc eax
mov edi, 0x322
mov ebx, 0x505234
lea esi, [esp + 0x5a4]
call fcn.0042b7c4
mov dword [esp + 0xc00], 0x1d
or dword [esp + 0x10], 0x20000000
push str.DISPID_ADD_FILES_TO_PLAYLIST
push ecx
push 0x505230
push ecx
mov ecx, dword [esp + 0x24]
add eax, 8
push eax
call fcn.00403796
pop ecx
pop ecx
push eax
call fcn.00403bcc
add esp, 0xc
push eax
call fcn.00403bcc
pop ecx
pop ecx
mov dword [esp + 0xc00], 0x1c
test dword [esp + 0x10], 0x20000000
je 0x421a2c
and dword [esp + 0x10], 0xdfffffff
lea ebx, [esp + 0x5a4]
call fcn.0042b903
mov dword [esp + 0xc00], 0x1b
test dword [esp + 0x10], 0x10000000
je 0x421a59
and dword [esp + 0x10], 0xefffffff
push 1
xor edi, edi
lea esi, [esp + 0x9c4]
call fcn.00402dc7
or dword [esp + 0xc00], 0xffffffff
test dword [esp + 0x10], 0x8000000
je case.default.0x420d9d
and dword [esp + 0x10], 0xf7ffffff
lea esi, [esp + 0xad8]
jmp 0x420ed1
cmp dword [0x536220], 1
jg 0x421b49
call fcn.00428625
test eax, eax
je 0x421ac4
call fcn.00428625
push eax
lea esi, [esp + 0xbbc]
call fcn.00402b1f
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0x1e
mov dword [esp + 0x10], 0x40000000
jmp 0x421af1
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
lea eax, [esp + 0x9fc]
push eax
call fcn.00428954
pop ecx
pop ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0x1f
mov dword [esp + 0x10], closesocket
xor eax, eax
inc eax
mov edi, 0x327
mov ebx, 0x50526c
lea esi, [esp + 0x704]
call fcn.0042b7c4
mov dword [esp + 0xc00], 0x20
push str.DISPID_CURRENT_USER_PLAYLIST
push ecx
push 0x505268
push ecx
mov ecx, dword [esp + 0x24]
add eax, 8
push eax
mov dword [esp + 0x2c], 1
call fcn.00403796
pop ecx
pop ecx
push eax
call fcn.00403bcc
add esp, 0xc
push eax
call fcn.00403bcc
pop ecx
pop ecx
mov dword [esp + 0xc00], 0x1f
test byte [esp + 0x18], 1
je 0x421b6c
and dword [esp + 0x18], 0xfffffffe
lea ebx, [esp + 0x704]
call fcn.0042b903
mov dword [esp + 0xc00], 0x1e
test dword [esp + 0x10], 0x80000000
je 0x421b99
and dword [esp + 0x10], 0x7fffffff
push 1
xor edi, edi
lea esi, [esp + 0x9fc]
call fcn.00402dc7
or dword [esp + 0xc00], 0xffffffff
test dword [esp + 0x10], 0x40000000
je case.default.0x420d9d
and dword [esp + 0x10], 0xbfffffff
lea esi, [esp + 0xbb8]
jmp 0x420ed1
cmp dword [0x536220], 1
jg 0x421c86
call fcn.00428625
test eax, eax
je 0x421c04
call fcn.00428625
push eax
lea esi, [esp + 0xb14]
call fcn.00402b1f
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0x21
mov dword [esp + 0x18], 2
jmp 0x421c31
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
lea eax, [esp + 0xa34]
push eax
call fcn.00428954
pop ecx
pop ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0x22
mov dword [esp + 0x18], 4
xor eax, eax
inc eax
mov edi, 0x32c
mov ebx, 0x50529c
lea esi, [esp + 0x864]
call fcn.0042b7c4
mov dword [esp + 0xc00], 0x23
or dword [esp + 0x18], 8
push str.DISPID_BATCH_DOWNLOAD
push ecx
push 0x505298
push ecx
mov ecx, dword [esp + 0x24]
add eax, 8
push eax
call fcn.00403796
pop ecx
pop ecx
push eax
call fcn.00403bcc
add esp, 0xc
push eax
call fcn.00403bcc
pop ecx
pop ecx
mov dword [esp + 0xc00], 0x22
test byte [esp + 0x18], 8
je 0x421ca9
and dword [esp + 0x18], 0xfffffff7
lea ebx, [esp + 0x864]
call fcn.0042b903
mov dword [esp + 0xc00], 0x21
test byte [esp + 0x18], 4
je 0x421cd0
and dword [esp + 0x18], 0xfffffffb
push 1
xor edi, edi
lea esi, [esp + 0xa34]
call fcn.00402dc7
or dword [esp + 0xc00], 0xffffffff
test byte [esp + 0x18], 2
je case.default.0x420d9d
and dword [esp + 0x18], 0xfffffffd
lea esi, [esp + 0xb10]
jmp 0x420ed1
cmp dword [0x536220], 1
jg 0x421db7
call fcn.00428625
test eax, eax
je 0x421d35
call fcn.00428625
push eax
lea esi, [esp + 0xb84]
call fcn.00402b1f
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0x24
mov dword [esp + 0x18], 0x10
jmp 0x421d62
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
lea eax, [esp + 0xa6c]
push eax
call fcn.00428954
pop ecx
pop ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc00], 0x25
mov dword [esp + 0x18], 0x20
xor eax, eax
inc eax
mov edi, 0x331
mov ebx, 0x5052c8
lea esi, [esp + 0x7b4]
call fcn.0042b7c4
mov dword [esp + 0xc00], 0x26
or dword [esp + 0x18], 0x40
push str.DISPID_BATCH_LISTEN
push ecx
push 0x5052c4
push ecx
mov ecx, dword [esp + 0x24]
add eax, 8
push eax
call fcn.00403796
pop ecx
pop ecx
push eax
call fcn.00403bcc
add esp, 0xc
push eax
call fcn.00403bcc
pop ecx
pop ecx
mov dword [esp + 0xc00], 0x25
test byte [esp + 0x18], 0x40
je 0x421dda
and dword [esp + 0x18], 0xffffffbf
lea ebx, [esp + 0x7b4]
call fcn.0042b903
mov dword [esp + 0xc00], 0x24
test byte [esp + 0x18], 0x20
je 0x421e01
and dword [esp + 0x18], 0xffffffdf
push 1
xor edi, edi
lea esi, [esp + 0xa6c]
call fcn.00402dc7
or dword [esp + 0xc00], 0xffffffff
test byte [esp + 0x18], 0x10
je case.default.0x420d9d
and dword [esp + 0x18], 0xffffffef
lea esi, [esp + 0xb80]
jmp 0x420ed1
push esi
push 0xe
call fcn.00421f5b
jmp 0x420edd