Function at 0x42c248
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7f8
mov al, byte [ebp + 0x10]
and dword [ebp + 0x10], 1
push ebx
push esi
push edi
push dword [ebp + 0xc]
and al, 0xf0
lea ecx, [ebp - 0x94]
mov byte [ebp - 0x1e], al
call fcn.0044cf2d
mov eax, dword [ebp + 0xc]
or dword [ebp - 0x50], 0xffffffff
or dword [ebp - 0x78], 0xffffffff
xor ebx, ebx
lea ecx, [ebp + 0xc]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x8c], ebx
call fcn.0040f4e0
lea ecx, [ebp - 0x4c]
mov byte [ebp - 0x12], 0xff
mov byte [ebp - 0x11], 0xff
mov byte [ebp - 0x14], bl
mov byte [ebp - 0x2a], bl
mov byte [ebp - 5], bl
mov byte [ebp - 8], bl
mov byte [ebp - 0x1d], bl
mov byte [ebp - 0x29], bl
mov byte [ebp - 0x55], bl
mov byte [ebp - 7], bl
mov byte [ebp - 0x15], bl
mov dword [ebp - 0x54], 0xffff0000
mov dword [ebp - 0x6c], ebx
mov byte [ebp - 0x39], bl
call fcn.004441a1
push 1
lea eax, [ebp + 0xc]
push eax
push 0x4c0128
mov dword [ebp - 0x268], ebx
mov word [ebp - 0x2fc], bx
call fcn.004460ea
add esp, 0xc
test al, al
jne 0x42c2f6
cmp byte [ebp - 0x1e], al
mov byte [ebp - 0x1f], al
je 0x42c2fe
cmp byte [ebp - 0x1e], 0
mov byte [ebp - 0x1f], 1
setne byte [ebp - 0x31]
cmp byte [ebp - 0x1f], 0
je 0x42c310
mov byte [ebp - 0x12], 0
mov byte [ebp - 0x11], 1
mov edi, dword [ebp + 0xc]
mov ax, word [edi]
cmp ax, 0x2d
mov byte [ebp - 0x13], 0x2a
jne 0x42c325
mov cl, al
mov byte [ebp - 0x13], cl
movsx ecx, byte [ebp - 0x13]
movzx eax, ax
cmp eax, ecx
push 2
mov dword [ebp - 0x254], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x60], ecx
pop esi
jne 0x42c7a6
movzx eax, word [edi + 2]
cmp eax, dword [ebp - 0x60]
jne 0x42c788
push 1
lea eax, [ebp + 0xc]
push eax
add edi, 4
push 0x4c2328
mov dword [ebp + 0xc], edi
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c379
mov dword [ebp + 0x10], 1
jmp 0x42c771
push esi
lea eax, [ebp + 0xc]
push eax
push 0x4c2324
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c398
mov byte [ebp - 0x12], 1
jmp 0x42c771
push 3
pop edi
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c1230
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c3ba
mov byte [ebp - 0x12], 0
jmp 0x42c771
push 4
lea eax, [ebp + 0xc]
push eax
push str.nrcd
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c3da
mov byte [ebp - 0x11], 2
jmp 0x42c771
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c2318
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c3f9
mov byte [ebp - 0x11], 0
jmp 0x42c771
mov eax, dword [ebp + 0xc]
mov cx, word [eax]
or cx, 0x20
cmp cx, 0x71
jne 0x42c55b
mov cx, word [eax + 2]
or cx, 0x20
cmp cx, 0x64
jne 0x42c55b
add eax, 4
mov dword [ebp + 0xc], eax
push ebx
lea eax, [ebp + 0xc]
push eax
push 0x4bd7d2
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c444
mov byte [ebp - 5], 1
jmp 0x42c771
xor edi, edi
inc edi
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c2314
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c466
mov byte [ebp - 5], 0x23
jmp 0x42c771
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c1290
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c485
mov byte [ebp - 5], 0x2a
jmp 0x42c771
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c2310
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c4a4
mov byte [ebp - 5], 0x24
jmp 0x42c771
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c230c
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c4c3
mov byte [ebp - 5], 0x40
jmp 0x42c771
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c2308
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c4e2
mov byte [ebp - 5], 0x3d
jmp 0x42c771
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c2304
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c501
mov byte [ebp - 5], 0x3c
jmp 0x42c771
push edi
push dword [ebp + 0xc]
push 0x4c2300
call fcn.0043f11b
add esp, 0xc
test al, al
je 0x42c541
add dword [ebp + 0xc], esi
mov edi, dword [ebp + 0xc]
lea eax, [ebp + 0xc]
push eax
call fcn.00405676
mov eax, dword [ebp + 0xc]
cmp word [eax], bx
pop ecx
je 0x42c534
mov word [eax], bx
add dword [ebp + 0xc], esi
cmp word [edi], bx
je 0x42c591
mov dword [ebp - 0x254], edi
jmp 0x42c591
sub dword [ebp + 0xc], 4
cmp byte [ebp - 0x13], 0x2a
jne 0x42c767
mov edi, dword [ebp + 0xc]
mov edx, edi
xor ecx, ecx
jmp 0x42c75f
push 4
push eax
push str.arg:
call fcn.0043f11b
add esp, 0xc
test al, al
je 0x42c59e
add dword [ebp + 0xc], 8
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x24], eax
lea eax, [ebp + 0xc]
push eax
call fcn.00405676
mov eax, dword [ebp + 0xc]
cmp word [eax], bx
pop ecx
je 0x42c591
mov word [eax], bx
add dword [ebp + 0xc], esi
lea ecx, [ebp + 0xc]
call fcn.0040f4e0
jmp 0x42c771
push esi
lea eax, [ebp + 0xc]
push eax
push 0x4c22f4
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c5c0
mov dword [ebp - 0x54], 1
jmp 0x42c771
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c22f0
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c5de
mov dword [ebp - 0x54], ebx
jmp 0x42c771
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c22ec
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c5fd
mov byte [ebp - 0x1d], 1
jmp 0x42c771
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c22e8
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c61c
mov byte [ebp - 0x29], 1
jmp 0x42c771
push 1
lea eax, [ebp + 0xc]
push eax
push 0x4c1b2c
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c63c
mov byte [ebp - 0x55], 1
jmp 0x42c771
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4bde88
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c65b
mov byte [ebp - 0x15], 1
jmp 0x42c771
push esi
lea eax, [ebp + 0xc]
push eax
push 0x4c22e4
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c67a
mov byte [ebp - 0x39], 1
jmp 0x42c771
push 4
lea eax, [ebp + 0xc]
push eax
push str.bool
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c69a
mov byte [ebp - 0x15], 2
jmp 0x42c771
push 5
push dword [ebp + 0xc]
push str.sret:
call fcn.0043f11b
add esp, 0xc
test al, al
je 0x42c6b9
add dword [ebp + 0xc], esi
mov byte [ebp - 7], 1
jmp 0x42c6cf
push 4
push dword [ebp + 0xc]
push 0x4c22cc
call fcn.0043f11b
add esp, 0xc
test al, al
je 0x42c728
add dword [ebp + 0xc], 8
mov edi, dword [ebp + 0xc]
lea eax, [ebp + 0xc]
push eax
call fcn.00405676
mov eax, dword [ebp + 0xc]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp - 0x4c]
call fcn.004442c5
lea ecx, [ebp + 0xc]
call fcn.0040f4e0
mov ecx, dword [ebp + 8]
push ebx
lea eax, [ebp - 0x4c]
push eax
call fcn.00402ed1
push dword [ebp - 0x4c]
mov byte [ebp - 0x2a], 1
push 0x4bdeb0
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x42c771
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 0x2a], 3
mov word [eax], bx
jmp 0x42c771
push 1
lea eax, [ebp + 0xc]
push eax
push 0x4c123c
call fcn.004460ea
add esp, 0xc
test al, al
je 0x42c545
mov byte [ebp - 8], 1
jmp 0x42c771
mov eax, ecx
call fcn.0040f4c7
test al, al
jne 0x42c767
cmp cx, 0x2c
je 0x42c782
add edi, esi
mov dword [ebp + 0xc], edi
mov cx, word [edi]
cmp cx, bx
jne 0x42c749
lea eax, [ebp + 0xc]
push eax
call fcn.00408ddd
pop ecx
mov edi, dword [ebp + 0xc]
movzx eax, word [edi]
cmp eax, dword [ebp - 0x60]
je 0x42c343
jmp 0x42c788
lea edi, [edx - 4]
mov dword [ebp + 0xc], edi
cmp byte [ebp - 0x1d], 0
je 0x42c7a6
mov ecx, dword [ebp + 8]
push 0xffffffffffffff9c
push 0x4bca2c
push ebx
push edi
call fcn.0045906e
mov esi, eax
jmp 0x42ebc8
push 0x6e
pop ecx
xor eax, eax
push 0x6a
lea edi, [ebp - 0x24c]
mov dword [ebp - 0x250], ebx
rep stosd dword es:[edi], eax
pop ecx
push 0x69
lea edi, [ebp - 0x4a4]
rep stosd dword es:[edi], eax
pop ecx
lea edi, [ebp - 0x64c]
rep stosd dword es:[edi], eax
push 0x69
pop ecx
lea edi, [ebp - 0x7f4]
mov dword [ebp - 0x7f8], ebx
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x40], ebx
call fcn.0044440f
mov esi, dword [sym.imp.SHLWAPI.dll_StrChrW]
lea eax, [ebp - 0x4a8]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
push 0x2c
push eax
mov dword [ebp - 0x4a8], eax
mov dword [ebp - 0x650], eax
mov dword [ebp - 0x5c], 1
call esi
cmp eax, ebx
mov dword [ebp - 0x28], eax
mov edi, eax
je 0x42c837
sub eax, dword [ebp - 0x84]
sar eax, 1
inc edi
inc edi
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], edi
cmp edi, ebx
mov dword [ebp - 0x4a4], edi
mov dword [ebp - 0x64c], edi
je 0x42c85f
push 0xc
push edi
push str._LoadLibrary
call fcn.0043f11b
add esp, 0xc
test al, al
mov byte [ebp - 9], 1
jne 0x42c863
mov byte [ebp - 9], 0
cmp edi, ebx
je 0x42c87f
push 0xf
push edi
push str._GetProcAddress
call fcn.0043f11b
add esp, 0xc
test al, al
mov byte [ebp - 7], 1
jne 0x42c883
mov byte [ebp - 7], 0
cmp edi, ebx
je 0x42c89f
push 0xc
push edi
push str._FreeLibrary
call fcn.0043f11b
add esp, 0xc
test al, al
mov byte [ebp - 6], 1
jne 0x42c8a3
mov byte [ebp - 6], 0
mov al, byte [ebp - 6]
or al, byte [ebp - 7]
or al, byte [ebp - 9]
cmp edi, ebx
mov byte [ebp - 0x45], al
je 0x42c8d4
cmp word [edi], 0x2a
jne 0x42c8d4
xor eax, eax
mov ax, word [edi + 2]
cmp ax, 0x2c
je 0x42c8ce
call fcn.0040f4f6
test al, al
je 0x42c8d4
mov byte [ebp - 0x13], 1
jmp 0x42c8f4
cmp byte [ebp - 0x1f], 0
mov byte [ebp - 0x13], 0
jne 0x42c8f4
cmp byte [ebp - 0x31], 0
jne 0x42c8f4
cmp byte [ebp - 9], 0
jne 0x42c8f4
cmp byte [ebp - 6], 0
mov byte [ebp - 0x1d], 1
je 0x42c8f8
mov byte [ebp - 0x1d], 0
mov al, byte [ebp - 7]
or al, byte [ebp - 9]
je 0x42c904
or byte [ebp - 0x39], 0x10
cmp byte [ebp - 0x29], 0
jne 0x42ca12
cmp byte [ebp - 0x1d], 0
je 0x42ca12
mov eax, dword [ebp + 0x14]
cmp eax, ebx
mov dword [ebp - 0x1c], eax
jne 0x42c928
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1c], eax
push 0x2c
push dword [ebp - 0x1c]
call esi
cmp eax, ebx
mov dword [ebp - 0x1c], eax
je 0x42c941
mov word [eax], bx
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x24], ebx
je 0x42c9dc
lea eax, [ebp - 0x1c]
push eax
call fcn.00405676
mov eax, dword [ebp - 0x1c]
cmp word [eax], bx
pop ecx
je 0x42c963
mov word [eax], bx
add dword [ebp - 0x1c], 2
lea ecx, [ebp - 0x1c]
call fcn.0040f4e0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5c], 2
jmp 0x42c9d5
cmp dword [ebp - 0x5c], 0x6a
jge 0x42ca12
mov ecx, dword [ebp - 0x24]
mov dx, word [ecx]
cmp dx, bx
je 0x42c997
add ecx, 2
cmp word [ecx], bx
je 0x42c997
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x60], eax
xor eax, eax
cmp dx, 0x7e
setne al
dec eax
and eax, 0xfffffee8
add eax, 0x5a5
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00419ea1
mov edx, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x60]
add esp, 0xc
inc dword [ebp - 0x5c]
mov dword [ebp - 0x1c], eax
mov dword [ebp + edx*4 - 0x4a8], ecx
cmp word [eax], bx
jne 0x42c977
jmp 0x42ca12
xor edi, edi
inc edi
mov dword [ebp - 0x5c], edi
cmp eax, ebx
je 0x42ca12
cmp edi, 2
jl 0x42c9f2
mov dword [ebp + edi*4 - 0x4a8], eax
push 0x2c
inc edi
push eax
mov dword [ebp - 0x5c], edi
call esi
cmp eax, ebx
mov dword [ebp - 0x1c], eax
je 0x42ca0d
mov word [eax], bx
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp edi, 0x6a
jl 0x42c9e2
mov eax, dword [ebp - 0x28]
cmp eax, ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x60], ebx
je 0x42ca26
mov word [eax - 2], bx
cmp byte [ebp - 0x13], 0
jne 0x42ca44
cmp eax, ebx
je 0x42ca44
cmp word [eax], 0x2a
jne 0x42ca44
inc dword [ebp - 0x74]
inc eax
inc eax
cmp word [eax], 0x2a
je 0x42ca36
mov dword [ebp - 0x28], eax
cmp eax, ebx
mov dword [ebp - 0x10], ebx
je 0x42caac
cmp dword [ebp - 0x24], ebx
je 0x42caa2
mov edx, dword [ebp - 0x28]
jmp 0x42ca6b
xor eax, eax
mov ax, word [edx]
cmp ax, 0x2c
je 0x42ca70
call fcn.0040f4c7
test al, al
jne 0x42ca70
inc edx
inc edx
cmp word [edx], bx
jne 0x42ca55
cmp word [edx], bx
je 0x42caac
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], edx
call fcn.0040f4e0
mov eax, dword [ebp - 0x10]
cmp word [eax], 0x2c
jne 0x42ca92
add dword [ebp - 0x10], 2
call fcn.0040f4e0
mov eax, dword [ebp - 0x10]
cmp word [eax], bx
jne 0x42ca9d
mov dword [ebp - 0x10], ebx
mov word [edx], bx
jmp 0x42caac
push 0x2c
push dword [ebp - 0x28]
call esi
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0xc]
cmp word [eax], bx
jne 0x42cac4
cmp byte [ebp - 0x45], 0
jne 0x42cac4
mov esi, 0x80070057
jmp 0x42eba7
cmp dword [ebp - 0x24], ebx
jne 0x42cadc
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x42cadc
cmp word [eax], bx
je 0x42cadc
mov word [eax], bx
add dword [ebp - 0x10], 2
mov edi, dword [ebp - 0x28]
push 0x2e
push edi
call esi
cmp eax, ebx
je 0x42cb25
mov word [eax], bx
inc eax
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x70]
push eax
call fcn.00405676
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x30]
pop ecx
je 0x42cb25
cmp word [eax], bx
je 0x42cb0d
mov word [eax], bx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0044073a
pop ecx
pop ecx
mov al, byte [ebp - 0x2a]
and al, 2
mov byte [ebp - 0x45], al
je 0x42cb3b
cmp edi, ebx
je 0x42cb3b
cmp word [edi], bx
jne 0x42cb3b
mov dword [ebp - 0x28], ebx
test al, al
je 0x42cbc6
mov ecx, dword [ebp - 0x10]
cmp ecx, ebx
je 0x42cbc6
cmp dword [ebp - 0x24], ebx
je 0x42cba8
mov edx, ecx
xor eax, eax
jmp 0x42cb69
cmp ax, 0x2c
je 0x42cb71
call fcn.0040f4c7
test al, al
jne 0x42cb71
inc ecx
inc ecx
mov dword [ebp - 0x10], ecx
mov ax, word [ecx]
cmp ax, bx
jne 0x42cb55
sub ecx, edx
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x4c]
call fcn.004442c5
mov eax, dword [ebp - 0x10]
cmp word [eax], bx
je 0x42cbc3
lea ecx, [ebp - 0x10]
mov edx, eax
call fcn.0040f4e0
mov eax, dword [ebp - 0x10]
cmp word [eax], 0x2c
jne 0x42cba3
add dword [ebp - 0x10], 2
call fcn.0040f4e0
mov word [edx], bx
jmp 0x42cbbb
mov ecx, dword [ebp + 8]
push ebx
push 0x2c
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00438f7b
mov eax, dword [ebp - 0x10]
cmp word [eax], bx
jne 0x42cbc6
mov dword [ebp - 0x10], ebx
push 0x20a
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x38], ebx
call fcn.004441bf
cmp byte [ebp - 0x11], 0
mov byte [ebp - 0x2a], 0
jg 0x42cbf7
push dword [ebp - 0x90]
push 0x208
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
cmp byte [ebp - 9], 0
mov eax, dword [ebp - 0x10]
je 0x42cc16
cmp eax, ebx
je 0x42cc16
cmp word [eax], 0x5e
jne 0x42cc16
cmp word [eax + 2], 0x2a
jne 0x42cc16
xor edi, edi
inc edi
jmp 0x42cc18
xor edi, edi
cmp byte [ebp - 9], 0
je 0x42cc3d
cmp eax, ebx
je 0x42cc3d
cmp word [eax], 0x5e
jne 0x42cc3d
push 0x2a
pop esi
cmp word [eax + 2], si
je 0x42cc40
mov dword [ebp - 0x84], 1
jmp 0x42cc4a
push 0x2a
pop esi
cmp edi, ebx
mov dword [ebp - 0x84], ebx
je 0x42cc4f
inc eax
inc eax
mov dword [ebp - 0x10], eax
cmp byte [ebp - 9], 0
je 0x42cc9f
cmp byte [ebp - 8], 0
jne 0x42cc9f
mov ecx, dword [ebp - 0x4c]
mov cx, word [ecx]
cmp cx, bx
je 0x42cc95
cmp cx, si
je 0x42cc95
cmp eax, ebx
je 0x42cc9f
cmp word [eax], si
je 0x42cc9f
push eax
lea eax, [ebp - 0x12]
push eax
call fcn.00411bcb
pop ecx
pop ecx
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 4], eax
mov byte [ebp - 0x14], 1
jmp 0x42eaa2
mov esi, 0x80070057
jmp 0x42eb9c
cmp byte [ebp - 7], 0
je 0x42cd2f
cmp word [eax], si
mov byte [ebp - 0x14], 1
jne 0x42ccb7
inc eax
inc eax
mov dword [ebp - 0x10], eax
mov cx, word [eax]
cmp cx, si
je 0x42ccc5
cmp cx, 0x23
jne 0x42cccb
mov byte [ebp - 8], 1
jmp 0x42ccb2
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
call fcn.0045030b
cmp dword [ebp - 0x10], ebx
pop ecx
pop ecx
je 0x42ead1
add dword [ebp - 0x10], 2
je 0x42ead1
push dword [ebp - 0x10]
lea ecx, [ebp + 0x10]
call fcn.00402d18
cmp byte [ebp - 8], 0
je 0x42cd18
mov ecx, dword [ebp - 0x68]
mov eax, ecx
or eax, dword [ebp - 0x64]
je 0x42cd27
push dword [ebp + 0x10]
call fcn.004101c3
jmp 0x42cd24
push dword [ebp + 0x10]
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 4], eax
lea ecx, [ebp + 0x10]
jmp 0x42d7ab
cmp byte [ebp - 6], 0
je 0x42cd9e
cmp word [eax], si
mov byte [ebp - 0x14], 1
jne 0x42cd43
inc eax
inc eax
mov dword [ebp - 0x10], eax
mov cx, word [eax]
cmp cx, si
je 0x42cd51
cmp cx, 0x23
jne 0x42cd57
mov byte [ebp - 8], 1
jmp 0x42cd3e
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
call fcn.0045030b
cmp byte [ebp - 8], 1
pop ecx
pop ecx
jle 0x42cd8d
mov ecx, dword [ebp - 0x68]
mov eax, ecx
or eax, dword [ebp - 0x64]
je 0x42ead1
call fcn.0041017c
mov dword [ebp - 4], ebx
jmp 0x42ead1
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - 4], eax
jmp 0x42ead1
cmp byte [ebp - 0x1e], 0
mov byte [ebp - 6], 0
je 0x42cdac
mov byte [ebp - 6], 1
cmp eax, ebx
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov ecx, 0x4c2276
jne 0x42ced6
cmp dword [ebp - 0x28], ebx
jne 0x42cdc9
mov dword [ebp - 0x28], ecx
jmp 0x42cde5
push dword [ebp - 0x28]
push ecx
call edi
test eax, eax
je 0x42cde5
push dword [ebp - 0x28]
push 0x4c224a
call edi
test eax, eax
jne 0x42ced6
cmp dword [ebp - 0x54], ebx
mov byte [ebp - 6], 0xff
jge 0x42cdf5
mov dword [ebp - 0x54], 0x31
cmp byte [ebp - 0x54], 0
je 0x42ced6
lea ecx, [ebp + 0x10]
call fcn.004441a1
push 0xffffffffffffffff
push str.___exe:_
lea ecx, [ebp + 0x14]
call fcn.0044cf63
lea eax, [ebp + 0x14]
push eax
lea ecx, [ebp + 0x10]
call fcn.0044cfc3
lea ecx, [ebp + 0x14]
call fcn.0043dd41
push 0x51c
lea ecx, [ebp + 0x10]
call fcn.004441e6
mov eax, dword [ebp + 0x10]
push 0x208
add eax, 0x10
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0xffffffffffffffff
push str.____nowin___nfb___hide_PECMDpecmd_cmd_CALL__
lea ecx, [ebp + 0x14]
call fcn.0044cf63
push dword [eax]
lea ecx, [ebp + 0x10]
call fcn.0044420d
lea ecx, [ebp + 0x14]
call fcn.0043dd41
mov eax, dword [ebp - 0x50]
cmp eax, ebx
jl 0x42ce7c
mov ecx, dword [ebp - 0x94]
mov word [ecx + eax*2], bx
push dword [ebp - 0x94]
lea ecx, [ebp + 0x10]
call fcn.0044420d
push 0xffffffffffffffff
push 0x4c2204
lea ecx, [ebp + 0x14]
call fcn.0044cf63
push dword [eax]
lea ecx, [ebp + 0x10]
call fcn.0044420d
lea ecx, [ebp + 0x14]
call fcn.0043dd41
push dword [ebp - 0x28]
lea ecx, [ebp + 0x10]
call fcn.0044420d
mov ecx, dword [ebp + 8]
push ebx
push ebx
push ebx
push ebx
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040a2d5
lea ecx, [ebp + 0x10]
mov esi, eax
call fcn.0043dd41
jmp 0x42eb9c
mov eax, dword [ebp - 0x28]
cmp eax, ebx
je 0x42ebea
cmp word [eax], bx
je 0x42ebea
cmp byte [ebp - 0x29], 0
jne 0x42cf47
cmp byte [ebp - 0x1d], 0
je 0x42cf47
cmp dword [ebp + 0x14], ebx
je 0x42cf47
push 2
pop esi
cmp dword [ebp - 0x5c], esi
lea eax, [ebp - 0x650]
mov dword [ebp - 0x44], eax
mov dword [ebp + 0x14], ebx
jle 0x42cf3f
mov ecx, dword [ebp + 8]
push 1
push ebx
lea eax, [ebp + 0x14]
push eax
push dword [ebp + esi*4 - 0x4a8]
call fcn.00454cef
mov eax, dword [ebp + 0x14]
mov dword [ebp + esi*4 - 0x650], eax
mov dword [ebp + esi*4 - 0x7f8], eax
inc esi
cmp esi, dword [ebp - 0x5c]
mov dword [ebp + 0x14], ebx
jl 0x42cf0f
lea ecx, [ebp + 0x14]
call fcn.0043dd41
cmp byte [ebp - 0x29], 0
push 2
pop ecx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x7c], ebx
jne 0x42d2bd
cmp byte [ebp - 0x1d], 0
je 0x42d2bd
mov eax, dword [ebp - 0x44]
cmp dword [eax + 4], 0
je 0x42d2bd
cmp byte [ebp - 0x45], 0
je 0x42cf84
mov eax, dword [eax + 8]
test eax, eax
mov dword [ebp - 0x1c], eax
je 0x42cf84
push 3
pop ecx
cmp dword [ebp - 0x8c], 0
je 0x42cf9d
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x40], 1
cmp dword [ebp - 0x40], 0x64
mov al, byte [ebp - 5]
mov byte [ebp + 0x17], al
ja 0x42d2bd
mov eax, ecx
mov ecx, dword [ebp - 0x44]
shl eax, 2
add ecx, eax
lea eax, [ebp + eax - 0x4ac]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
add dword [ebp - 0x24], 4
add dword [ebp - 0x70], 4
test eax, eax
mov dword [ebp - 0x1c], eax
je 0x42d2bd
mov ecx, dword [ebp - 0x40]
mov dx, word [eax]
lea ecx, [ebp + ecx*4 - 0x250]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x254]
xor bl, bl
test ecx, ecx
jne 0x42cfff
mov cl, byte [ebp + 0x17]
mov byte [ebp - 5], cl
jmp 0x42d022
cmp word [ecx], 0
je 0x42d01f
mov cl, byte [ecx]
mov byte [ebp - 5], cl
mov ecx, dword [ebp - 0x254]
add ecx, 2
cmp word [ecx], 0
je 0x42d01f
mov dword [ebp - 0x254], ecx
mov cl, byte [ebp - 5]
cmp cl, 0x23
je 0x42d0c5
cmp cl, 0x2a
je 0x42d0c5
cmp cl, 0x3c
je 0x42d0c5
cmp cl, 0x24
je 0x42d1af
cmp cl, 0x40
je 0x42d1cb
cmp cl, 0x3d
je 0x42d1e2
cmp cl, 0x7e
je 0x42d1c0
test cl, cl
jne 0x42d181
cmp dx, 0x23
je 0x42d279
cmp dx, 0x3c
jne 0x42d2aa
cmp word [eax], 0x3c
jne 0x42d088
inc eax
inc eax
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x1c]
xor esi, esi
push eax
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x7c], esi
call fcn.00450423
mov eax, dword [ebp - 0x80]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x40]
mov dword [ebp + ecx*4 - 0x250], eax
mov eax, dword [ebp - 0x7c]
inc ecx
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x40], ecx
mov dword [ebp + ecx*4 - 0x250], eax
jmp 0x42d2aa
cmp dx, 0x3c
je 0x42d181
cmp dx, 0x23
je 0x42d181
cmp dx, 0x2a
je 0x42d181
cmp dx, 0x24
je 0x42d181
cmp dx, 0x40
je 0x42d181
cmp dx, 0x3d
je 0x42d181
cmp dx, 0x7e
je 0x42d181
cmp cl, 0x23
je 0x42d279
cmp cl, 0x3c
je 0x42d07d
cmp word [eax], 0x2a
jne 0x42d124
inc eax
inc eax
mov dword [ebp - 0x1c], eax
mov cx, word [eax]
xor edi, edi
cmp cx, 0x7e
jne 0x42d1f2
inc eax
inc eax
mov edi, 0xfde9
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x44]
call fcn.004441a1
mov ecx, dword [ebp + 8]
push 0
push 0x2c
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00438f7b
mov ecx, dword [ebp + 8]
and dword [ebp - 0x1c], 0
push 0
push 0xffffffffffffffff
push 0
push dword [ebp - 0x44]
call fcn.004108b2
test eax, eax
je 0x42d203
mov eax, dword [eax + 4]
mov dword [ebp - 0x1c], eax
jmp 0x42d206
inc eax
movzx ecx, dx
inc eax
sub ecx, 0x23
mov dword [ebp - 0x1c], eax
mov bl, 1
je 0x42d279
sub ecx, 7
je 0x42d119
sub ecx, 0x12
je 0x42d07d
dec ecx
je 0x42d1e2
sub ecx, 3
je 0x42d1cb
sub ecx, 0x3e
je 0x42d1c0
mov ecx, dword [ebp - 0x40]
lea ecx, [ebp + ecx*4 - 0x250]
mov dword [ecx], eax
jmp 0x42d2aa
test eax, eax
mov edi, 0xfde9
je 0x42d1af
jmp 0x42d21d
xor edi, edi
test eax, eax
jne 0x42d21d
mov eax, dword [ebp - 0x40]
lea eax, [ebp + eax*4 - 0x250]
and dword [eax], edi
jmp 0x42d2aa
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx]
movsx eax, bl
lea ecx, [ecx + eax*2]
jmp 0x42d29e
cmp cx, 0x40
jne 0x42d13d
xor edi, edi
jmp 0x42d13d
mov eax, dword [ebp - 0x1c]
test di, di
je 0x42d263
test eax, eax
je 0x42d25b
cmp word [eax], 0
je 0x42d263
lea ecx, [ebp - 0x44]
call fcn.0043dd41
push 4
call fcn.004aa2e8
test eax, eax
pop ecx
je 0x42d230
and dword [eax], 0
mov esi, eax
jmp 0x42d232
xor esi, esi
movzx eax, di
push eax
push 0xffffffffffffffff
push dword [ebp - 0x1c]
mov ecx, esi
call fcn.00444129
mov eax, dword [esi]
push esi
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x1c], eax
call fcn.0040f521
mov eax, dword [ebp - 0x1c]
jmp 0x42d1af
mov eax, 0x4bca2c
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x40]
lea ecx, [ebp + ecx*4 - 0x250]
mov dword [ecx], eax
lea ecx, [ebp - 0x44]
call fcn.0043dd41
jmp 0x42d2aa
cmp word [eax], 0x23
jne 0x42d284
inc eax
inc eax
mov dword [ebp - 0x1c], eax
and dword [ebp - 0x80], 0
and dword [ebp - 0x7c], 0
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00450423
pop ecx
pop ecx
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x40]
lea eax, [ebp + eax*4 - 0x250]
mov dword [eax], ecx
inc dword [ebp - 0x40]
cmp byte [ebp - 0x55], 0
jne 0x42d2bd
cmp dword [ebp - 0x40], 0x64
jbe 0x42cfc4
mov esi, dword [ebp - 0x28]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push str._DllRegisterServer
push esi
call ebx
xor edi, edi
test eax, eax
jne 0x42d2f0
cmp dword [ebp - 0x54], edi
mov esi, 0x4c2276
mov dword [ebp - 0x28], esi
mov byte [ebp - 6], 0xff
jge 0x42d2ec
mov dword [ebp - 0x54], 0x31
mov byte [ebp - 0x12], 1
push str._DllUnregisterServer
push esi
call ebx
test eax, eax
jne 0x42d318
cmp dword [ebp - 0x54], edi
mov esi, 0x4c224a
mov dword [ebp - 0x28], esi
mov byte [ebp - 6], 0xff
jge 0x42d314
mov dword [ebp - 0x54], 0x71
mov byte [ebp - 0x12], 1
xor ecx, ecx
mov cx, word [esi]
xor ebx, ebx
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x24], ebx
mov eax, ecx
call fcn.00443d5b
test al, al
jne 0x42d365
cmp cx, 0x26
jne 0x42d356
mov ecx, dword [ebp + 8]
push edi
push 0xffffffffffffffff
push edi
push esi
call fcn.004108b2
cmp eax, edi
je 0x42d381
mov ebx, dword [eax + 4]
cmp ebx, edi
mov dword [ebp - 0x24], ebx
je 0x42d381
jmp 0x42d39f
mov edx, dword [ebp + 0xc]
cmp word [edx], 0x23
jne 0x42d3b4
cmp word [edx + 2], di
jne 0x42d3b4
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x70], esi
call fcn.00450423
mov ebx, dword [ebp - 0x68]
mov eax, ebx
or eax, dword [ebp - 0x64]
pop ecx
pop ecx
jne 0x42d39c
mov al, byte [ebp - 0x31]
neg al
sbb eax, eax
and eax, 0x7ff8ffa9
add eax, 0x80070057
mov dword [ebp - 4], eax
xor edi, edi
jmp 0x42eb3d
mov dword [ebp - 0x24], ebx
cmp byte [ebp - 0x11], 0
mov byte [ebp - 6], 1
jge 0x42d3ad
mov byte [ebp - 0x11], 1
mov edx, dword [ebp + 0xc]
mov byte [ebp - 0x13], 0
cmp byte [ebp - 9], 0
je 0x42d3c5
mov eax, edx
mov edx, dword [ebp - 0x10]
mov dword [ebp + 0xc], edx
mov dword [ebp - 0x10], eax
cmp edx, edi
mov byte [ebp - 7], 0
mov dword [ebp - 0x50], edi
je 0x42d3e9
cmp word [edx], 0x22
jne 0x42d3dd
mov dword [ebp - 0x50], 1
push edx
call fcn.00412ce4
mov edx, eax
pop ecx
mov dword [ebp + 0xc], edx
push 0x2a
mov ecx, edx
pop esi
mov dword [ebp - 0x30], ecx
cmp word [edx], si
mov byte [ebp + 0x17], 0
jne 0x42d40c
lea eax, [ecx + 2]
cmp word [eax], si
jne 0x42d40c
mov ecx, eax
mov dword [ebp - 0x30], ecx
cmp word [ecx], si
je 0x42d3fa
mov di, word [ecx]
cmp di, si
jne 0x42d493
xor eax, eax
mov ax, word [ecx + 2]
push eax
call fcn.00443c3d
add esp, 4
test al, al
jne 0x42d42b
or byte [ebp - 8], 2
cmp di, si
jne 0x42d493
xor eax, eax
lea esi, [ecx + 2]
mov ax, word [esi]
push eax
call fcn.00443c3d
add esp, 4
test al, al
je 0x42d493
cmp ecx, edx
seta al
and dword [ebp - 0x258], 0
and dword [ebp - 0x254], 0
inc al
mov byte [ebp + 0x17], al
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x30], esi
call fcn.0045030b
test eax, eax
pop ecx
pop ecx
jle 0x42cc95
mov eax, dword [ebp - 0x258]
test eax, eax
je 0x42cc95
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x38], eax
jmp 0x42d49d
test di, di
jne 0x42d4a3
xor ecx, ecx
mov dword [ebp - 0x30], ecx
cmp byte [ebp + 0x17], 0
jne 0x42d4ba
test ecx, ecx
je 0x42d4ba
cmp word [ecx], 0x2e
jne 0x42d4ba
cmp word [ecx + 2], 0
jne 0x42d4ba
mov byte [ebp - 0x1e], 1
jmp 0x42d4c4
cmp byte [ebp + 0x17], 0
mov byte [ebp - 0x1e], 0
jne 0x42d538
cmp byte [ebp - 0x13], 0
je 0x42d538
cmp byte [ebp - 8], 0
jne 0x42d538
cmp byte [ebp - 0x1e], 0
je 0x42d4dd
mov eax, dword [0x4d7c7c]
jmp 0x42d4e7
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, dword [ebp + 0xc]
test eax, eax
jne 0x42d508
push edx
lea eax, [ebp - 0x12]
push eax
call fcn.00411bcb
pop ecx
pop ecx
push dword [ebp + 0xc]
mov byte [ebp - 0x2a], 1
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x42d50e
and dword [ebp - 4], 0
jmp 0x42d526
cmp byte [ebp - 0x31], 0
je 0x42d51d
and dword [ebp - 4], 0
jmp 0x42eaa2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 4], eax
cmp byte [ebp - 0x2a], 1
je 0x42eaa2
mov esi, dword [ebp - 4]
jmp 0x42eb9c
push edx
lea eax, [ebp - 0x12]
push eax
call fcn.00411bcb
test ebx, ebx
pop ecx
pop ecx
jne 0x42da8b
cmp byte [ebp - 8], bl
mov ecx, dword [0x4d7c7c]
mov esi, dword [ebp - 0x30]
jne 0x42d58a
xor edi, edi
cmp dword [ebp - 0x38], edi
jne 0x42d58c
cmp byte [ebp - 6], 0
jne 0x42d58c
cmp esi, edi
je 0x42d584
cmp word [esi], 0x2e
jne 0x42d7fb
cmp word [esi + 2], di
jne 0x42d7fb
mov dword [ebp - 0x38], ecx
jmp 0x42d594
mov byte [ebp - 6], 2
jmp 0x42d58c
xor edi, edi
cmp esi, edi
je 0x42d951
cmp dword [ebp - 0x38], edi
jne 0x42d965
cmp byte [ebp - 8], 0
je 0x42d7fb
xor edx, edx
cmp dword [ebp - 0x50], edx
mov dword [ebp - 0x264], edx
mov dword [ebp - 0x260], edx
mov dword [ebp - 0x25c], edx
mov bx, word [esi]
mov edi, esi
jne 0x42d5de
cmp bx, 0x23
jne 0x42d5de
xor eax, eax
mov ax, word [esi + 2]
push eax
call fcn.00443c3d
add esp, 4
test al, al
jne 0x42d628
cmp bx, 0x2a
jne 0x42d5eb
inc esi
inc esi
mov dword [ebp - 0x30], esi
mov edi, esi
cmp word [esi], 0x22
mov dword [ebp - 0x50], edx
jne 0x42d61c
inc esi
inc esi
push 0x22
lea eax, [ebp + 0x14]
mov dword [ebp - 0x30], esi
mov dword [ebp + 0x14], esi
call fcn.00405636
mov edi, dword [ebp + 0x14]
cmp word [edi], 0
pop ecx
je 0x42d61c
and word [edi], 0
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0x50], edi
inc edi
inc edi
cmp bx, 0x2a
jne 0x42d6db
xor edx, edx
mov eax, dword [0x4d7f98]
xor ebx, ebx
jmp 0x42d639
cmp cx, 0x23
je 0x42d641
inc edi
inc edi
mov cx, word [edi]
cmp cx, dx
jne 0x42d631
cmp word [edi], dx
mov esi, edi
je 0x42d665
mov cx, word [esi]
cmp cx, 0x7c
je 0x42d660
cmp cx, 0x3a
je 0x42d660
inc esi
inc esi
cmp word [esi], dx
jne 0x42d648
jmp 0x42d665
mov word [esi], dx
inc esi
inc esi
cmp word [esi], dx
jne 0x42d66f
mov esi, str.EXEDATA
cmp word [edi], 0x23
jne 0x42d6ea
mov ecx, dword [ebp - 0x50]
cmp ecx, edx
mov word [edi], dx
je 0x42d682
mov word [ecx], dx
mov ecx, dword [ebp - 0x30]
cmp word [ecx], 0x2e
jne 0x42d69e
lea edx, [ecx + 2]
cmp word [edx], 0
jne 0x42d69e
mov eax, dword [0x4d7c7c]
mov ecx, edx
mov dword [ebp - 0x30], ecx
cmp word [ecx], 0
je 0x42d6b1
push 2
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ebx, eax
test eax, eax
mov word [edi], 0x23
je 0x42d6ce
push 0
lea ecx, [ebp - 0x264]
push ecx
push esi
push edi
push eax
call fcn.00414f82
add esp, 0x14
test ebx, ebx
je 0x42d6ea
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x42d6ea
lea eax, [ebp - 0x264]
push eax
push esi
call fcn.00414946
pop ecx
pop ecx
mov edi, dword [ebp - 0x264]
test edi, edi
mov ebx, dword [ebp - 0x260]
jne 0x42d720
xor eax, eax
cmp byte [ebp - 9], al
lea ecx, [ebp - 0x264]
sete al
mov byte [ebp - 0x15], 1
mov dword [ebp - 0x6c], 1
mov dword [ebp - 4], eax
call fcn.0043dd41
jmp 0x42d956
lea eax, [ebp - 0x88]
push 0x28
push eax
call fcn.004107e9
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x42d73d
mov ecx, esi
call fcn.00414576
add esi, 4
push ebx
push edi
mov ecx, esi
mov dword [ebp - 0x60], esi
call fcn.0041db24
test eax, eax
je 0x42d7da
cmp byte [ebp - 9], 0
je 0x42d7b5
mov ecx, dword [ebp - 0x10]
xor edi, edi
xor eax, eax
cmp ecx, edi
je 0x42d76a
cmp word [ecx], di
jne 0x42d772
mov ecx, dword [ebp - 0x4c]
cmp word [ecx], di
je 0x42d774
mov eax, ecx
cmp eax, edi
mov dword [ebp - 4], esi
mov byte [ebp - 0x14], 1
je 0x42d7a5
mov ecx, dword [ebp - 0x264]
mov dword [esi + 8], ecx
lea ecx, [ebp - 0x88]
push ecx
push eax
push esi
push dword [ebp + 8]
mov dword [ebp - 0x264], edi
call fcn.0042bd64
add esp, 0x10
mov dword [ebp - 0x60], edi
lea ecx, [ebp - 0x264]
call fcn.0043dd41
jmp 0x42ead1
push dword [ebp - 0x28]
lea ecx, [ebp - 0x50]
call fcn.00402d18
push dword [eax]
mov ecx, esi
call fcn.004101c3
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x24], eax
call fcn.0043dd41
cmp dword [ebp - 0x24], 0
jne 0x42d7f0
xor eax, eax
cmp byte [ebp - 9], al
mov byte [ebp - 0x15], 1
sete al
mov dword [ebp - 0x6c], 1
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x264]
jmp 0x42da83
xor eax, eax
mov ax, word [esi]
and eax, 0xffdf
je 0x42d80e
mov eax, dword [esi]
and eax, 0xffdfffdf
cmp byte [ebp - 0x1e], 0
je 0x42d81c
mov dword [ebp - 0x38], ecx
jmp 0x42d943
cmp eax, 0x45004b
jne 0x42d867
push esi
push dword [0x4d6300]
call fcn.0043f15a
test al, al
pop ecx
pop ecx
jne 0x42d85d
push 8
push dword [ebp - 0x30]
push dword [0x4d6300]
call fcn.0043f11b
add esp, 0xc
test al, al
je 0x42d932
mov esi, dword [ebp - 0x30]
cmp word [esi + 0x10], di
jne 0x42d935
mov eax, dword [0x4d7fe0]
jmp 0x42d940
cmp eax, 0x530055
jne 0x42d8b2
push esi
push dword [0x4d62fc]
call fcn.0043f15a
test al, al
pop ecx
pop ecx
jne 0x42d8a8
push 6
push dword [ebp - 0x30]
push dword [0x4d62fc]
call fcn.0043f11b
add esp, 0xc
test al, al
je 0x42d932
mov esi, dword [ebp - 0x30]
cmp word [esi + 0xc], di
jne 0x42d935
mov eax, dword [0x4d7fdc]
jmp 0x42d940
cmp eax, 0x440047
jne 0x42d8f2
push esi
push dword [0x4d62f8]
call fcn.0043f15a
test al, al
pop ecx
pop ecx
jne 0x42d8eb
push 5
push dword [ebp - 0x30]
push dword [0x4d62f8]
call fcn.0043f11b
add esp, 0xc
test al, al
je 0x42d932
mov esi, dword [ebp - 0x30]
cmp word [esi + 0xa], di
jne 0x42d935
mov eax, dword [0x4d7fe4]
jmp 0x42d940
cmp eax, 0x4c004f
jne 0x42d935
push esi
push dword [0x4d62f4]
call fcn.0043f15a
test al, al
pop ecx
pop ecx
jne 0x42d92b
push 5
push dword [ebp - 0x30]
push dword [0x4d62f4]
call fcn.0043f11b
add esp, 0xc
test al, al
je 0x42d932
mov esi, dword [ebp - 0x30]
cmp word [esi + 0xa], di
jne 0x42d935
mov eax, dword [0x4d7fe8]
jmp 0x42d940
mov esi, dword [ebp - 0x30]
push esi
mov byte [ebp - 7], 1
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], edi
jne 0x42d965
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 4], eax
cmp dword [ebp - 0x38], edi
jne 0x42d965
cmp byte [ebp - 0x1f], 0
jne 0x42db4f
jmp 0x42eaa2
push dword [ebp - 0x28]
lea ecx, [ebp - 0x44]
call fcn.00402d18
test byte [ebp + 0x17], 2
push dword [ebp - 0x44]
je 0x42d983
mov ecx, dword [ebp - 0x38]
call fcn.004101c3
jmp 0x42d98c
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, edi
mov dword [ebp - 0x24], eax
jne 0x42da80
cmp byte [ebp - 0x29], 0
je 0x42da77
cmp byte [ebp - 5], 0
jne 0x42da77
mov esi, dword [ebp - 0x28]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ebx, eax
xor eax, eax
lea edi, [ebx + ebx]
mov ax, word [edi + esi - 2]
and eax, 0xffdf
cmp ax, 0x41
je 0x42da77
cmp ax, 0x57
je 0x42da77
push 4
call fcn.004aa2e8
mov esi, eax
test esi, esi
pop ecx
je 0x42d9f5
lea eax, [ebx + 2]
push eax
mov ecx, esi
call fcn.004441bf
jmp 0x42d9f7
xor esi, esi
push esi
lea ecx, [ebp - 0x274]
call fcn.0040f521
push ebx
push dword [ebp - 0x28]
push dword [esi]
call fcn.0040561e
mov esi, dword [esi]
mov dword [ebp - 0x28], esi
add esi, edi
and word [esi + 2], 0
add esp, 0xc
cmp byte [ebp + 0x17], 2
mov word [esi], 0x57
push dword [ebp - 0x44]
jne 0x42da35
mov ecx, dword [ebp - 0x38]
call fcn.004101c3
jmp 0x42da3e
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
mov dword [ebp - 0x24], eax
jne 0x42da80
push dword [ebp - 0x28]
lea ecx, [ebp - 0x50]
mov word [esi], 0x41
call fcn.00402d18
push dword [eax]
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x24], eax
call fcn.0043dd41
cmp dword [ebp - 0x24], 0
je 0x42da77
mov byte [ebp - 5], 0x40
jmp 0x42da80
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x44]
call fcn.0043dd41
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x74]
test eax, eax
jle 0x42daa2
test ebx, ebx
je 0x42daa2
dec eax
js 0x42daa2
inc eax
dec eax
mov ebx, dword [ebx]
jne 0x42da9a
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x8c], 0
je 0x42db09
cmp dword [ebp - 0x78], 0
jge 0x42db0f
mov eax, dword [ebx]
or dword [ebp + 0x14], 0xffffffff
mov esi, 0x4ca384
lea edi, [ebp - 0x284]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp + 0x14]
push ecx
push 0x800
push 1
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x8c]
push ecx
lea ecx, [ebp - 0x284]
push ecx
movsd dword es:[edi], dword [esi]
mov eax, dword [eax + 0x14]
push ebx
call eax
test eax, eax
mov ecx, dword [ebp + 0x14]
lea edx, [ecx + 6]
mov dword [ebp - 0x78], edx
jne 0x42daf6
test ecx, ecx
jge 0x42db09
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x42db01
inc eax
mov dword [ebp - 0x6c], eax
jmp 0x42eaa2
cmp dword [ebp - 0x78], 0
jl 0x42db24
cmp dword [ebp - 0x78], 0
mov esi, ebx
jl 0x42db2a
mov eax, dword [ebx]
mov ecx, dword [ebp - 0x78]
mov ebx, dword [eax + ecx*4]
mov dword [ebp - 0x24], ebx
jmp 0x42db2a
mov esi, dword [ebp - 0x250]
cmp byte [ebp - 0x1f], 0
je 0x42db96
cmp byte [ebp - 7], 1
jne 0x42db4f
cmp byte [ebp - 6], 0
jg 0x42db4f
cmp dword [ebp - 0x38], 0
je 0x42db4f
push dword [ebp - 0x38]
mov byte [ebp - 7], 2
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp byte [ebp - 0x31], 0
je 0x42db5d
mov esi, dword [ebp - 0x24]
jmp 0x42eb9c
cmp dword [ebp - 0x24], 0
je 0x42db7b
push dword [ebp - 0x24]
lea eax, [ebp - 0x2fc]
push str.0x_p
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x2fc]
push eax
push dword [ebp - 0x4c]
call fcn.004438ac
cmp byte [ebp - 7], 2
jmp 0x42d52a
xor edi, edi
cmp ebx, edi
mov byte [ebp + 0x17], 0
je case.default.0x42e525
test byte [ebp - 0x54], 7
je 0x42dc01
call fcn.00442da9
cmp dword [ebp - 0x54], edi
je 0x42dc01
cmp dword [0x4d84a8], edi
je 0x42dc01
cmp dword [0x4d84ac], edi
je 0x42dc01
push 0x4d8d1c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, dword [ebp + 8]
mov al, byte [edi + 0xe]
test al, 2
jne 0x42dbf4
test al, 1
jne 0x42dbe1
mov byte [ebp + 0x17], 1
or byte [ebp + 0x17], 2
or al, 3
push 0
mov byte [edi + 0xe], al
call dword [0x4d84a8]
jmp 0x42dbff
push 0x4d8d1c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor edi, edi
cmp byte [ebp - 0x15], 0
je 0x42dc0e
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp byte [ebp - 0x29], 0
je 0x42dcc0
cmp byte [ebp - 5], 0x40
mov dword [ebp - 0x74], edi
mov byte [ebp - 0x14], 1
mov word [ebp + 0x12], di
jne 0x42dc43
cmp dword [ebp - 0x10], edi
je 0x42dc48
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [ebp - 0x10]
lea ecx, [ebp - 0x74]
call fcn.00444129
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jne 0x42dc4e
lea eax, [ebp + 0x12]
mov dword [ebp - 0x10], eax
mov esi, dword [0x4d7f98]
push 0
push dword [ebp + 8]
call fcn.00412570
cmp dword [ebp - 0x28], 0
pop ecx
pop ecx
push 5
pop edi
je 0x42dc9a
push 0x12
push dword [ebp - 0x28]
push str.InstallHinfSection
call fcn.0043f11b
add esp, 0xc
test al, al
je 0x42dc9a
mov eax, dword [ebp - 0x28]
cmp word [eax + 0x24], 0
je 0x42dc96
cmp word [eax + 0x26], 0
mov word [eax + 0x24], 1
jne 0x42dc9a
xor edi, edi
xor esi, esi
mov eax, dword [ebp + 8]
push edi
push dword [ebp - 0x10]
push esi
push dword [eax + 0x28]
call fcn.0043e35a
pop ecx
push eax
call ebx
lea ecx, [ebp - 0x74]
mov dword [ebp - 4], eax
call fcn.0043dd41
xor edi, edi
jmp case.default.0x42e525
cmp dword [ebp + 0x10], 1
mov ecx, dword [ebp - 0x40]
jne 0x42e510
push 0x64
pop eax
cmp eax, ecx
sbb al, al
inc al
cmp ecx, 0x10
mov byte [ebp - 0x14], al
ja case.default.0x42dce2
jmp dword [ecx*4 + 0x42ec4c]
push esi
call ebx
jmp 0x42dcf8
push dword [ebp - 0x24c]
push esi
call ebx
pop ecx
pop ecx
jmp 0x42ea3f
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0xc
jmp 0x42ea3f
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x10
jmp 0x42ea3f
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x14
jmp 0x42ea3f
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x18
jmp 0x42ea3f
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x1c
jmp 0x42ea3f
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x20
jmp 0x42ea3f
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x24
jmp 0x42ea3f
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x28
jmp 0x42ea3f
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x2c
jmp 0x42ea3f
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x30
jmp 0x42ea3f
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x34
jmp 0x42ea3f
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x38
jmp 0x42ea3f
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x3c
jmp 0x42ea3f
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x40
jmp 0x42ea3f
cmp ecx, 0x14
ja 0x42e0e4
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x50
jmp 0x42ea3f
cmp ecx, 0x1e
ja 0x42e1a6
push dword [ebp - 0x1dc]
push dword [ebp - 0x1e0]
push dword [ebp - 0x1e4]
push dword [ebp - 0x1e8]
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
push dword [ebp - 0x1f4]
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x78
jmp 0x42ea3f
cmp ecx, 0x28
ja 0x42e2a7
push dword [ebp - 0x1b4]
push dword [ebp - 0x1b8]
push dword [ebp - 0x1bc]
push dword [ebp - 0x1c0]
push dword [ebp - 0x1c4]
push dword [ebp - 0x1c8]
push dword [ebp - 0x1cc]
push dword [ebp - 0x1d0]
push dword [ebp - 0x1d4]
push dword [ebp - 0x1d8]
push dword [ebp - 0x1dc]
push dword [ebp - 0x1e0]
push dword [ebp - 0x1e4]
push dword [ebp - 0x1e8]
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
push dword [ebp - 0x1f4]
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0xa0
jmp 0x42ea3f
cmp ecx, 0x64
ja case.default.0x42e525
push dword [ebp - 0xc4]
push dword [ebp - 0xc8]
push dword [ebp - 0xcc]
push dword [ebp - 0xd0]
push dword [ebp - 0xd4]
push dword [ebp - 0xd8]
push dword [ebp - 0xdc]
push dword [ebp - 0xe0]
push dword [ebp - 0xe4]
push dword [ebp - 0xe8]
push dword [ebp - 0xec]
push dword [ebp - 0xf0]
push dword [ebp - 0xf4]
push dword [ebp - 0xf8]
push dword [ebp - 0xfc]
push dword [ebp - 0x100]
push dword [ebp - 0x104]
push dword [ebp - 0x108]
push dword [ebp - 0x10c]
push dword [ebp - 0x110]
push dword [ebp - 0x114]
push dword [ebp - 0x118]
push dword [ebp - 0x11c]
push dword [ebp - 0x120]
push dword [ebp - 0x124]
push dword [ebp - 0x128]
push dword [ebp - 0x12c]
push dword [ebp - 0x130]
push dword [ebp - 0x134]
push dword [ebp - 0x138]
push dword [ebp - 0x13c]
push dword [ebp - 0x140]
push dword [ebp - 0x144]
push dword [ebp - 0x148]
push dword [ebp - 0x14c]
push dword [ebp - 0x150]
push dword [ebp - 0x154]
push dword [ebp - 0x158]
push dword [ebp - 0x15c]
push dword [ebp - 0x160]
push dword [ebp - 0x164]
push dword [ebp - 0x168]
push dword [ebp - 0x16c]
push dword [ebp - 0x170]
push dword [ebp - 0x174]
push dword [ebp - 0x178]
push dword [ebp - 0x17c]
push dword [ebp - 0x180]
push dword [ebp - 0x184]
push dword [ebp - 0x188]
push dword [ebp - 0x18c]
push dword [ebp - 0x190]
push dword [ebp - 0x194]
push dword [ebp - 0x198]
push dword [ebp - 0x19c]
push dword [ebp - 0x1a0]
push dword [ebp - 0x1a4]
push dword [ebp - 0x1a8]
push dword [ebp - 0x1ac]
push dword [ebp - 0x1b0]
push dword [ebp - 0x1b4]
push dword [ebp - 0x1b8]
push dword [ebp - 0x1bc]
push dword [ebp - 0x1c0]
push dword [ebp - 0x1c4]
push dword [ebp - 0x1c8]
push dword [ebp - 0x1cc]
push dword [ebp - 0x1d0]
push dword [ebp - 0x1d4]
push dword [ebp - 0x1d8]
push dword [ebp - 0x1dc]
push dword [ebp - 0x1e0]
push dword [ebp - 0x1e4]
push dword [ebp - 0x1e8]
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
push dword [ebp - 0x1f4]
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x190
jmp 0x42ea3f
push 0x14
pop eax
cmp eax, ecx
sbb al, al
inc al
cmp ecx, 0x14
mov byte [ebp - 0x14], al
ja case.default.0x42e525
jmp dword [ecx*4 + 0x42ec90]
call ebx
jmp 0x42ea3f
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42ea3f
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
mov dword [ebp - 4], eax
cmp byte [ebp - 0x15], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x6c], eax
je 0x42ea66
cmp byte [ebp - 0x15], 2
jne 0x42ea5d
push eax
call fcn.0040f584
pop ecx
jmp 0x42ea63
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x6c], eax
cmp byte [ebp - 7], 0
jle 0x42ea80
cmp byte [ebp - 6], 0
jg 0x42ea80
cmp dword [ebp - 0x38], edi
je 0x42ea80
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp byte [ebp + 0x17], 0
je 0x42eaa2
call dword [0x4d84ac]
mov al, byte [ebp + 0x17]
mov ecx, dword [ebp + 8]
not al
and byte [ecx + 0xe], al
push 0x4d8d1c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [ebp - 0x11], 0
jg 0x42eab4
push dword [ebp - 0x90]
call fcn.00411b89
pop ecx
mov eax, dword [ebp - 0x68]
or eax, dword [ebp - 0x64]
je 0x42eac2
cmp byte [ebp - 0x11], 0
jg 0x42eac7
call fcn.004149ac
cmp byte [ebp - 0x1f], 0
jne 0x42d530
mov eax, dword [ebp - 0x4c]
mov ax, word [eax]
xor edi, edi
cmp ax, di
je 0x42eb31
cmp ax, 0x2a
je 0x42eb28
cmp byte [ebp - 0x14], 0
je 0x42eb28
cmp byte [ebp - 0x39], 0
mov eax, str.0x_X
jne 0x42eafa
mov eax, 0x4c21f0
cmp byte [ebp - 9], 0
je 0x42eb12
cmp byte [ebp - 8], 0
je 0x42eb12
cmp dword [ebp - 4], edi
jne 0x42eb14
mov eax, 0x4bca2c
jmp 0x42eb14
inc eax
inc eax
push dword [ebp - 4]
push eax
lea eax, [ebp - 0x2fc]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp byte [ebp - 0x15], 0
jne 0x42eb31
mov dword [ebp - 0x6c], edi
mov ecx, dword [ebp - 0x60]
cmp ecx, edi
je 0x42eb3d
call fcn.0041017c
mov eax, dword [ebp - 0x4c]
cmp word [eax], di
je 0x42eb79
cmp word [eax], 0x2a
je 0x42eb79
cmp dword [ebp - 0x84], edi
je 0x42eb69
cmp dword [ebp - 4], edi
je 0x42eb69
push eax
push dword [ebp - 4]
push dword [ebp + 8]
call fcn.0042be9a
add esp, 0xc
jmp 0x42eb79
lea ecx, [ebp - 0x2fc]
push ecx
mov ecx, dword [ebp + 8]
push eax
call fcn.004438ac
mov esi, dword [ebp - 0x5c]
cmp esi, edi
jge 0x42eb99
mov eax, dword [ebp + esi*4 - 0x7f8]
cmp eax, edi
je 0x42eb96
lea ecx, [ebp + 8]
mov dword [ebp + 8], eax
call fcn.0043dd41
inc esi
js 0x42eb80
mov esi, dword [ebp - 0x6c]
lea ecx, [ebp - 0x90]
call fcn.0043dd41
lea ecx, [ebp - 0x88]
call fcn.0043dd41
lea ecx, [ebp - 0x274]
call fcn.00455fb5
lea ecx, [ebp - 0x274]
call fcn.0043dd41
lea ecx, [ebp - 0x268]
call fcn.0043dd41
lea ecx, [ebp - 0x4c]
call fcn.0043dd41
lea ecx, [ebp - 0x94]
call fcn.0043dd41
mov eax, esi
jmp 0x42ec45
lea ecx, [ebp - 0x90]
call fcn.0043dd41
lea ecx, [ebp - 0x88]
call fcn.0043dd41
lea ecx, [ebp - 0x274]
call fcn.00455fb5
lea ecx, [ebp - 0x274]
call fcn.0043dd41
lea ecx, [ebp - 0x268]
call fcn.0043dd41
lea ecx, [ebp - 0x4c]
call fcn.0043dd41
lea ecx, [ebp - 0x94]
call fcn.0043dd41
mov al, byte [ebp - 0x31]
neg al
sbb eax, eax
and eax, 0x7ff8ffa9
add eax, 0x80070057
pop edi
pop esi
pop ebx
leave
ret 0x10