Function at 0x42e780
Capabilities:
Get common file path
Query environment variable
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ad314
mov eax, dword fs:[0]
push eax
mov eax, 0xa230
call fcn.005890d0
mov eax, dword [0x63ee20]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
call fcn.00505e40
push 0
mov ecx, dword [ebp - 0x14]
call fcn.00433440
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1b8], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1bc], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1a4], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x150], 1
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x154], 0
mov dword [0x640e10], 0
mov ecx, dword [ebp - 0x14]
call fcn.00437e00
mov dword [0x640e00], eax
mov dword [0x640e04], edx
cmp dword [0x640e00], 0
jne 0x42e83c
cmp dword [0x640e04], 0
jne 0x42e83c
or eax, 0xffffffff
jmp 0x42fb6c
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x188], 0
mov dword [eax + 0x18c], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x178], 0
push 0x5d2fd8
mov ecx, dword [ebp - 0x14]
add ecx, 0x28c
call fcn.004115e0
mov byte [ebp - 0x1014], 0
push 0xfff
push 0
lea eax, [ebp - 0x1013]
push eax
call fcn.00588e40
add esp, 0xc
push 0
push 0x23
lea eax, [ebp - 0x1014]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
push str.ShengquGamesStartingShot
lea eax, [ebp - 0x1014]
push eax
call fcn.00589110
add esp, 8
lea eax, [ebp - 0x1014]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.004115e0
push 0x5d2fb8
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.0040c050
push 0x5d2fa8
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.0040c050
mov ecx, dword [ebp - 0x14]
add ecx, 0x318
call fcn.00411110
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.0040c050
push 0
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.00411110
push eax
call fcn.0058a890
add esp, 8
cmp eax, 0xffffffff
jne 0x42e984
mov dword [ebp - 0x1018], 0
lea eax, [ebp - 0x1018]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.00411110
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00437e70
mov dword [ebp - 0x101c], eax
cmp dword [ebp - 0x101c], 0
jne 0x42e984
cmp dword [ebp - 0x1018], 0
je 0x42e984
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.00411110
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00437f10
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.00411110
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.004115e0
push 0x5d2fb8
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.0040c050
mov ecx, dword [ebp - 0x14]
add ecx, 0x318
call fcn.00411110
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.0040c050
mov eax, dword [ebp - 0x14]
add eax, 0x200
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1e4
call fcn.0040c010
push str..ssconf
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.0040c050
mov ecx, dword [ebp - 0x14]
add ecx, 0x1e4
call fcn.00411110
push eax
mov eax, dword [0x64529c]
mov ecx, dword [eax]
mov edx, dword [0x64529c]
push edx
mov eax, dword [ecx + 4]
call eax
cmp dword [0x64529c], 0
je 0x42ea42
push 0x22
push 0x22
push 0x5d2f68
mov eax, dword [0x64529c]
mov ecx, dword [eax]
mov edx, dword [0x64529c]
push edx
mov eax, dword [ecx + 8]
call eax
push str.dataupload.ssconf
mov ecx, dword [ebp - 0x14]
add ecx, 0x21c
call fcn.004115e0
push 0x612d66
lea ecx, [ebp - 0x1038]
call fcn.00410ea0
mov dword [ebp - 4], 0
push 1
push str.DUCONF
mov ecx, dword [ebp - 0x14]
add ecx, 0x21c
call fcn.00411110
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.00411110
push eax
push 0xb5
mov ecx, dword [ebp - 0x14]
call fcn.00438c80
mov dword [ebp - 0x103c], eax
cmp dword [ebp - 0x103c], 0
jne 0x42eb4f
mov eax, dword [ebp - 0x14]
add eax, 0x21c
push eax
push 0x5d2fb8
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
push ecx
lea edx, [ebp - 0xa22c]
push edx
call fcn.0042c3b0
add esp, 0xc
mov dword [ebp - 0xa230], eax
mov eax, dword [ebp - 0xa230]
mov dword [ebp - 0xa234], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xa234]
push ecx
lea edx, [ebp - 0xa210]
push edx
call fcn.0043ac70
add esp, 0xc
mov dword [ebp - 0xa238], eax
mov eax, dword [ebp - 0xa238]
mov dword [ebp - 0xa23c], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0xa23c]
push ecx
lea ecx, [ebp - 0x1038]
call fcn.0040c010
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa210]
call fcn.00411770
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa22c]
call fcn.00411770
jmp 0x42ec45
cmp dword [ebp - 0x103c], 1
jne 0x42ebe8
mov byte [ebp - 0x203c], 0
push 0xfff
push 0
lea eax, [ebp - 0x203b]
push eax
call fcn.00588e40
add esp, 0xc
push 0x1000
lea eax, [ebp - 0x203c]
push eax
push str._temp_
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov eax, dword [ebp - 0x14]
add eax, 0x21c
push eax
lea ecx, [ebp - 0x203c]
push ecx
lea edx, [ebp - 0xa1f4]
push edx
call fcn.0042c760
add esp, 0xc
mov dword [ebp - 0xa230], eax
mov eax, dword [ebp - 0xa230]
mov dword [ebp - 0xa234], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xa234]
push ecx
lea ecx, [ebp - 0x1038]
call fcn.0040c010
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa1f4]
call fcn.00411770
jmp 0x42ec45
cmp dword [0x64529c], 0
je 0x42ec0d
push 0x22
push 0x22
push str.SSconf
mov eax, dword [0x64529c]
mov ecx, dword [eax]
mov edx, dword [0x64529c]
push edx
mov eax, dword [ecx + 8]
call eax
push 0
push str.SSconf
push str.11400190
call fcn.00507740
mov dword [ebp - 0xa1d8], 0xfffffffe
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.00411770
mov eax, dword [ebp - 0xa1d8]
jmp 0x42fb6c
push 0x612d66
lea ecx, [ebp - 0x2058]
call fcn.00410ea0
mov byte [ebp - 4], 4
lea eax, [ebp - 0xa1d4]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00438ab0
mov dword [ebp - 0xa230], eax
mov ecx, dword [ebp - 0xa230]
mov dword [ebp - 0xa234], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xa234]
push edx
lea ecx, [ebp - 0x2058]
call fcn.0040c010
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa1d4]
call fcn.00411770
lea ecx, [ebp - 0x2058]
call fcn.0040c0f0
test eax, eax
jne 0x42ecc9
push str.1.0.3
lea ecx, [ebp - 0x2074]
call fcn.00410ea0
lea ecx, [ebp - 0x2074]
call fcn.00411770
push 0x6185cc
push 0x5d2f18
lea ecx, [ebp - 0x2058]
call fcn.00411110
push eax
push 0x5d2f14
lea ecx, [ebp - 0x1038]
call fcn.00411110
push eax
call fcn.00506e10
mov ecx, dword [ebp - 0x14]
call fcn.0042d380
push eax
call fcn.0050a080
mov dword [ebp - 0x2078], 0
jmp 0x42ed1e
mov eax, dword [ebp - 0x2078]
add eax, 1
mov dword [ebp - 0x2078], eax
cmp dword [ebp - 0x2078], 7
jge 0x42ed63
mov eax, dword [ebp - 0x2078]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + eax*4 + 0x5b8], 0
push 0x3018
push 0
mov eax, dword [ebp - 0x2078]
imul eax, eax, 0x3018
mov ecx, dword [ebp - 0x14]
lea edx, [ecx + eax + 0x5d4]
push edx
call fcn.00588e40
add esp, 0xc
jmp 0x42ed0f
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x168], 0
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x164], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x160], 0
cmp dword [0x64529c], 0
je 0x42edb8
push 0x22
push 0x22
push 0x5d2f00
mov eax, dword [0x64529c]
mov ecx, dword [eax]
mov edx, dword [0x64529c]
push edx
mov eax, dword [ecx + 8]
call eax
mov byte [ebp - 0x3078], 0
push 0xfff
push 0
lea eax, [ebp - 0x3077]
push eax
call fcn.00588e40
add esp, 0xc
lea eax, [ebp - 0x3078]
push eax
push 0x1000
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x3078]
push eax
lea ecx, [ebp - 0x3094]
call fcn.00410ea0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3094]
call fcn.0040c0f0
push eax
lea ecx, [ebp - 0x3094]
call fcn.0040c0f0
sub eax, 1
push eax
lea eax, [ebp - 0x30b0]
push eax
lea ecx, [ebp - 0x3094]
call fcn.0040c130
mov byte [ebp - 4], 7
lea eax, [ebp - 0x30b0]
push eax
push 0x5d2fb8
call fcn.0040fbf0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42ee59
push 0x5d2fb8
lea ecx, [ebp - 0x3094]
call fcn.0040c050
push str.StartingShotTaskLink.ini
lea ecx, [ebp - 0x3094]
call fcn.0040c050
lea ecx, [ebp - 0x3094]
call fcn.00411110
push eax
push 0
push str.StartingShotTaskLink
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x198], eax
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x198], 0xa
jb 0x42eeab
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x198], 0xc8
jbe 0x42eeb3
mov ecx, dword [ebp - 0x14]
call fcn.0042fc60
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x198]
mov dword [0x62e2c8], ecx
mov ecx, dword [ebp - 0x14]
call fcn.0042fc80
mov byte [ebp - 0x40b0], 0
push 0xfff
push 0
lea eax, [ebp - 0x40af]
push eax
call fcn.00588e40
add esp, 0xc
mov byte [ebp - 0x40b8], 0
xor eax, eax
mov dword [ebp - 0x40b7], eax
mov word [ebp - 0x40b3], ax
mov dword [ebp - 0x40bc], 0
push 0
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411110
push eax
call fcn.0058a890
add esp, 8
cmp eax, 0xffffffff
jne 0x42f015
mov dword [ebp - 0x40c0], 0xffffffff
mov dword [ebp - 0x40c4], 0
lea eax, [ebp - 0x40c4]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.00411110
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00437e70
mov dword [ebp - 0x40c8], eax
cmp dword [ebp - 0x40c8], 0
jne 0x42ef90
cmp dword [ebp - 0x40c4], 0
je 0x42ef90
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.00411110
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00437f10
mov dword [ebp - 0x40c0], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x17c], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x180], 0
mov ecx, dword [ebp - 0x14]
call fcn.0042fc30
mov ecx, dword [ebp - 0x14]
call fcn.0042fca0
mov ecx, dword [ebp - 0x14]
call fcn.00431f90
mov ecx, dword [ebp - 0x14]
call fcn.00431fc0
mov dword [ebp - 0x40cc], 0
jmp 0x42efe5
mov eax, dword [ebp - 0x40cc]
add eax, 1
mov dword [ebp - 0x40cc], eax
cmp dword [ebp - 0x40cc], 7
jge 0x42efff
mov eax, dword [ebp - 0x40cc]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004320f0
jmp 0x42efd6
mov eax, dword [ebp - 0x40bc]
or eax, 0xf0
mov dword [ebp - 0x40bc], eax
jmp 0x42f8ae
mov byte [ebp - 0x50cc], 0
push 0xfff
push 0
lea eax, [ebp - 0x50cb]
push eax
call fcn.00588e40
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411110
push eax
push 0x1000
lea eax, [ebp - 0x50cc]
push eax
push 0x612d66
push str.StartingShotTaskCreateTime
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x50cc]
push eax
call fcn.005884b0
add esp, 4
test eax, eax
jne 0x42f086
mov eax, dword [ebp - 0x40bc]
or eax, 0x80
mov dword [ebp - 0x40bc], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411110
push eax
push 0
push str.StartingShotTaskLastSizeHigh
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x17c], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411110
push eax
push 0
push str.StartingShotTaskLastSizeLow
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x180], eax
mov byte [ebp - 0x60cc], 0
push 0xfff
push 0
lea eax, [ebp - 0x60cb]
push eax
call fcn.00588e40
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411110
push eax
push 0x1000
lea eax, [ebp - 0x60cc]
push eax
push 0x612d66
push str.StartingShotTaskHash
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x60cc]
push eax
call fcn.005884b0
add esp, 4
test eax, eax
je 0x42f151
lea eax, [ebp - 0x60cc]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2e0
call fcn.004115e0
jmp 0x42f168
mov ecx, dword [ebp - 0x14]
call fcn.0042fc30
mov eax, dword [ebp - 0x40bc]
or eax, 0x10
mov dword [ebp - 0x40bc], eax
mov byte [ebp - 0x70cc], 0
push 0xfff
push 0
lea eax, [ebp - 0x70cb]
push eax
call fcn.00588e40
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411110
push eax
push 0x1000
lea eax, [ebp - 0x70cc]
push eax
push 0x612d66
push str.StartingShotTaskSavePath
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x70cc]
push eax
call fcn.005884b0
add esp, 4
test eax, eax
je 0x42f1df
lea eax, [ebp - 0x70cc]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.004115e0
jmp 0x42f1f6
mov ecx, dword [ebp - 0x14]
call fcn.0042fca0
mov eax, dword [ebp - 0x40bc]
or eax, 0x20
mov dword [ebp - 0x40bc], eax
mov ecx, dword [ebp - 0x14]
call fcn.0042fb90
mov dword [ebp - 0x70d0], eax
mov byte [ebp - 0x70d1], 1
mov byte [ebp - 0x70d2], 0
cmp dword [ebp - 0x70d0], 0
je 0x42f3d9
mov dword [ebp - 0x70d8], 0
jmp 0x42f23a
mov eax, dword [ebp - 0x70d8]
add eax, 1
mov dword [ebp - 0x70d8], eax
cmp dword [ebp - 0x70d8], 7
jge 0x42f3d4
mov eax, dword [ebp - 0x14]
add eax, 0x270
push eax
lea ecx, [ebp - 0x70f4]
call fcn.00410ee0
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.0040c0f0
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.0040c0f0
sub eax, 1
push eax
lea eax, [ebp - 0x7110]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.0040c130
mov byte [ebp - 4], 9
lea eax, [ebp - 0x7110]
push eax
push 0x5d2fb8
call fcn.0040fbf0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42f2c4
push 0x5d2fb8
lea ecx, [ebp - 0x70f4]
call fcn.0040c050
mov eax, dword [ebp - 0x70d8]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0x4d8]
call fcn.00411110
push eax
lea ecx, [ebp - 0x70f4]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x70f4]
call fcn.00411110
push eax
call fcn.0058a890
add esp, 8
test eax, eax
je 0x42f3b1
push 0x612d66
call fcn.005884b0
add esp, 4
test eax, eax
je 0x42f39c
mov ecx, dword [ebp - 0x14]
add ecx, 0x2fc
call fcn.00411110
push eax
mov eax, dword [ebp - 0x70d8]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0x4d8]
call fcn.00411110
push eax
call fcn.00589230
add esp, 8
test eax, eax
jne 0x42f39c
push 0x612d66
lea ecx, [ebp - 0x70f4]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x70f4]
call fcn.00411110
push eax
call fcn.0058a890
add esp, 8
test eax, eax
jne 0x42f39c
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x7110]
call fcn.00411770
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x70f4]
call fcn.00411770
jmp 0x42f22b
mov byte [ebp - 0x70d1], 0
mov eax, dword [ebp - 0x70d8]
mov byte [ebp + eax - 0x40b8], 1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x7110]
call fcn.00411770
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x70f4]
call fcn.00411770
jmp 0x42f22b
jmp 0x42f5f8
mov byte [ebp - 0x70d1], 0
mov byte [ebp - 0x7111], 0
mov dword [ebp - 0x7118], 0
mov dword [ebp - 0x7118], 0
jmp 0x42f40c
mov eax, dword [ebp - 0x7118]
add eax, 1
mov dword [ebp - 0x7118], eax
cmp dword [ebp - 0x7118], 7
jge 0x42f5e6
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.00411110
push eax
lea ecx, [ebp - 0x7134]
call fcn.00410ea0
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.0040c0f0
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.0040c0f0
sub eax, 1
push eax
lea eax, [ebp - 0x7150]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.0040c130
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x7150]
push eax
push 0x5d2fb8
call fcn.0040fbf0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42f49c
push 0x5d2fb8
lea ecx, [ebp - 0x7134]
call fcn.0040c050
mov eax, dword [ebp - 0x7118]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0x4d8]
call fcn.00411110
push eax
lea ecx, [ebp - 0x7134]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x7134]
call fcn.00411110
push eax
call fcn.0058a890
add esp, 8
test eax, eax
je 0x42f5bc
push 0x612d66
call fcn.005884b0
add esp, 4
test eax, eax
je 0x42f57b
mov ecx, dword [ebp - 0x14]
add ecx, 0x2fc
call fcn.00411110
push eax
mov eax, dword [ebp - 0x7118]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0x4d8]
call fcn.00411110
push eax
call fcn.00589230
add esp, 8
test eax, eax
jne 0x42f57b
push 0x612d66
lea ecx, [ebp - 0x7134]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x7134]
call fcn.00411110
push eax
call fcn.0058a890
add esp, 8
test eax, eax
jne 0x42f57b
mov byte [ebp - 0x70d2], 1
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x7150]
call fcn.00411770
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x7134]
call fcn.00411770
jmp 0x42f3fd
mov byte [ebp - 0x7111], 1
push 0x5d2e24
lea ecx, [ebp - 0x7134]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x7134]
call fcn.00411110
push eax
call fcn.0058a890
add esp, 8
test eax, eax
je 0x42f5ba
mov eax, dword [ebp - 0x7118]
mov byte [ebp + eax - 0x40b8], 1
jmp 0x42f5c3
mov byte [ebp - 0x70d2], 1
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x7150]
call fcn.00411770
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x7134]
call fcn.00411770
jmp 0x42f3fd
movzx eax, byte [ebp - 0x7111]
test eax, eax
jne 0x42f5f8
mov byte [ebp - 0x70d1], 1
movzx eax, byte [ebp - 0x70d1]
test eax, eax
jne 0x42f60e
movzx eax, byte [ebp - 0x70d2]
test eax, eax
je 0x42f644
mov ecx, dword [ebp - 0x14]
call fcn.00435a60
movzx eax, al
test eax, eax
je 0x42f630
mov eax, dword [ebp - 0x40bc]
or eax, 0xf0000
mov dword [ebp - 0x40bc], eax
jmp 0x42f63f
mov eax, dword [ebp - 0x40bc]
or eax, 8
mov dword [ebp - 0x40bc], eax
jmp 0x42f6db
mov dword [ebp - 0x7154], 0
mov byte [ebp - 0x7155], 1
jmp 0x42f666
mov eax, dword [ebp - 0x7154]
add eax, 1
mov dword [ebp - 0x7154], eax
cmp dword [ebp - 0x7154], 7
jge 0x42f6b0
movzx eax, byte [ebp - 0x7155]
test eax, eax
je 0x42f698
mov ecx, dword [ebp - 0x7154]
movzx edx, byte [ebp + ecx - 0x40b8]
test edx, edx
je 0x42f698
mov dword [ebp - 0xa230], 1
jmp 0x42f6a2
mov dword [ebp - 0xa230], 0
mov al, byte [ebp - 0xa230]
mov byte [ebp - 0x7155], al
jmp 0x42f657
movzx eax, byte [ebp - 0x7155]
test eax, eax
je 0x42f6cc
mov eax, dword [ebp - 0x40bc]
or eax, 4
mov dword [ebp - 0x40bc], eax
jmp 0x42f6db
mov eax, dword [ebp - 0x40bc]
or eax, 1
mov dword [ebp - 0x40bc], eax
mov byte [ebp - 0x8158], 0
push 0xfff
push 0
lea eax, [ebp - 0x8157]
push eax
call fcn.00588e40
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411110
push eax
push 0x1000
lea eax, [ebp - 0x8158]
push eax
push 0x612d66
push str.StartingShotTaskEntrence
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x8158]
push eax
call fcn.005884b0
add esp, 4
test eax, eax
je 0x42f752
lea eax, [ebp - 0x8158]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2c4
call fcn.004115e0
jmp 0x42f769
mov ecx, dword [ebp - 0x14]
call fcn.00431f90
mov eax, dword [ebp - 0x40bc]
or eax, 0x40
mov dword [ebp - 0x40bc], eax
mov dword [ebp - 0x815c], 0
jmp 0x42f784
mov eax, dword [ebp - 0x815c]
add eax, 1
mov dword [ebp - 0x815c], eax
cmp dword [ebp - 0x815c], 7
jge 0x42f868
mov byte [ebp - 0x915c], 0
push 0xfff
push 0
lea eax, [ebp - 0x915b]
push eax
call fcn.00588e40
add esp, 0xc
mov byte [ebp - 0xa15c], 0
push 0xfff
push 0
lea eax, [ebp - 0xa15b]
push eax
call fcn.00588e40
add esp, 0xc
mov eax, dword [ebp - 0x815c]
push eax
push str.StartingShotDownloadInfo_d
lea ecx, [ebp - 0xa15c]
push ecx
call fcn.00588ffd
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411110
push eax
push 0x1000
lea eax, [ebp - 0x915c]
push eax
push 0x612d66
lea ecx, [ebp - 0xa15c]
push ecx
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x915c]
push eax
call fcn.005884b0
add esp, 4
test eax, eax
je 0x42f84c
lea eax, [ebp - 0x915c]
push eax
mov ecx, dword [ebp - 0x815c]
imul ecx, ecx, 0x1c
mov edx, dword [ebp - 0x14]
lea ecx, [edx + ecx + 0x350]
call fcn.004115e0
jmp 0x42f863
mov ecx, dword [ebp - 0x14]
call fcn.00431fc0
mov eax, dword [ebp - 0x815c]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004320f0
jmp 0x42f775
mov ecx, dword [ebp - 0x14]
add ecx, 0x2e0
call fcn.0040c0f0
test eax, eax
jne 0x42f8ae
cmp dword [0x64529c], 0
je 0x42f89f
push 0x22
push 0x22
push 0x5d2dd0
mov eax, dword [0x64529c]
mov ecx, dword [eax]
mov edx, dword [0x64529c]
push edx
mov eax, dword [ecx + 8]
call eax
mov eax, dword [ebp - 0x40bc]
or eax, 2
mov dword [ebp - 0x40bc], eax
mov eax, dword [ebp - 0x40bc]
and eax, 0xf0
mov dword [ebp - 0xa160], eax
mov eax, dword [ebp - 0x40bc]
and eax, 4
mov dword [ebp - 0xa164], eax
mov eax, dword [ebp - 0x40bc]
and eax, 0xf0000
mov dword [ebp - 0xa168], eax
mov eax, dword [ebp - 0x40bc]
and eax, 8
mov dword [ebp - 0xa16c], eax
mov eax, dword [ebp - 0x40bc]
and eax, 1
mov dword [ebp - 0xa170], eax
cmp dword [ebp - 0xa160], 0xf0
jne 0x42f918
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 1
jmp 0x42faa0
cmp dword [ebp - 0xa164], 4
jne 0x42f98c
cmp dword [0x64529c], 0
je 0x42f946
push 0x22
push 0x22
push 0x5d2db0
mov eax, dword [0x64529c]
mov ecx, dword [eax]
mov edx, dword [0x64529c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411110
push eax
call fcn.005891f8
add esp, 4
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 1
push 0
push 0x5d2da0
push 0x5d2d7c
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x14]
push ecx
call fcn.00506d70
mov ecx, dword [ebp - 0x14]
call fcn.0042fca0
jmp 0x42faa0
cmp dword [ebp - 0xa168], 0xf0000
jne 0x42f9f0
cmp dword [0x64529c], 0
je 0x42f9bd
push 0x22
push 0x22
push 0x5d2d64
mov eax, dword [0x64529c]
mov ecx, dword [eax]
mov edx, dword [0x64529c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.00411110
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0042e550
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 8
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x150], 1
jmp 0x42faa0
cmp dword [ebp - 0xa16c], 8
jne 0x42fa49
cmp dword [0x64529c], 0
je 0x42fa1e
push 0x22
push 0x22
push 0x5d2d54
mov eax, dword [0x64529c]
mov ecx, dword [eax]
mov edx, dword [0x64529c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.00411110
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0042e550
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x10
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x42faa0
cmp dword [ebp - 0xa170], 1
jne 0x42faa0
cmp dword [0x64529c], 0
je 0x42fa77
push 0x22
push 0x22
push 0x5d2d34
mov eax, dword [0x64529c]
mov ecx, dword [eax]
mov edx, dword [0x64529c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.00411110
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0042e550
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0xf
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0xf
je 0x42fac4
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0x10
je 0x42fac4
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 8
je 0x42fac4
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 9
jne 0x42fb1d
mov ecx, dword [ebp - 0x14]
call fcn.004351e0
mov dword [ebp - 0xa1b8], 1
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x30b0]
call fcn.00411770
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3094]
call fcn.00411770
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2058]
call fcn.00411770
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.00411770
mov eax, dword [ebp - 0xa1b8]
jmp 0x42fb6c
mov dword [ebp - 0xa1b4], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x30b0]
call fcn.00411770
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3094]
call fcn.00411770
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2058]
call fcn.00411770
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.00411770
mov eax, dword [ebp - 0xa1b4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0058844d
mov esp, ebp
pop ebp
ret