Function at 0x42cf70
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4833f3
mov eax, dword fs:[0]
push eax
sub esp, 0xa8
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4a4720]
xor eax, esp
push eax
lea eax, [esp + 0xbc]
mov dword fs:[0], eax
mov eax, dword [esp + 0xd4]
mov ecx, dword [eax + 0x10]
sub ecx, dword [eax + 0xc]
test ecx, 0xfffffffc
jne 0x42cf24
call fcn.004440b8
xor ecx, ecx
xor ebp, ebp
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x42c6a2
push 0x80004005
call fcn.00401fc0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x50], eax
mov dword [esp + 0xc4], ebp
mov eax, str.AND_A.Enable1
cmp dword [esp + 0xd8], ebp
jne 0x42c6cc
mov eax, 0x48e50c
mov ecx, dword [esp + 0xd0]
push eax
push ecx
lea edx, [esp + 0x58]
push str.SELECT_A.Call_Id_A.API_Name_A.API_Fail_Level_A.Index_Id_A.Enable_A.Call_Notes_B.API_Show_Name_B.Fail_Message_B.Succeed_Message_A.Condition_FROM_Update_Call_A_INNER_JOIN_Update_API_B_ON_A.API_NameB.API_Name_WHERE_A.Phase_Id_d__s_ORDER_BY_A.Index_Id_ASC
push edx
call fcn.00403800
mov ebx, dword [esp + 0x60]
add esp, 0x10
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0x38]
push edx
push ecx
add ebx, 0xfffffff0
mov dword [esp + 0x5c], esp
mov esi, esp
push ebx
mov dword [esp + 0x44], ebp
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x48], ebp
mov dword [esp + 0x60], ebx
call fcn.00401fe0
add eax, 0x10
mov dword [esi], eax
mov eax, dword [esp + 0xe0]
add esp, 4
push eax
call fcn.0042ae40
cmp dword [esp + 0x30], ebp
mov edi, dword [esp + 0x34]
jle 0x42cec9
cmp dword [esp + 0x38], ebp
jle 0x42cec9
call fcn.004440b8
xor ecx, ecx
cmp eax, ebp
setne cl
cmp ecx, ebp
jne 0x42c761
push 0x80004005
call fcn.00401fc0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
mov byte [esp + 0xc4], 1
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x30]
inc edx
imul edx, ecx
xor ebp, ebp
cmp ecx, edx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x3c], ecx
jge 0x42cea1
mov esi, dword [esp + 0x3c]
mov eax, esi
cdq
idiv ecx
mov eax, dword [esp + 0x34]
mov edi, edx
mov edx, dword [eax + esi*4]
test edx, edx
jne 0x42c7b1
xor eax, eax
jmp 0x42c7c5
mov eax, edx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x42c7b6
sub eax, esi
sar eax, 1
push eax
push edx
lea ecx, [esp + 0x1c]
call fcn.00401da0
cmp edi, 9
ja case.default.0x42c7d9
jmp dword [edi*4 + 0x42cf48]
push 0x4c
call fcn.00443d07
add esp, 4
mov dword [esp + 0x1c], eax
mov byte [esp + 0xc4], 2
test eax, eax
je 0x42c804
push eax
call fcn.0042cf70
mov ebp, eax
jmp 0x42c806
xor ebp, ebp
mov byte [esp + 0xc4], 1
mov ecx, dword [esp + 0x14]
push ecx
mov dword [esp + 0x44], ebp
call fcn.00461856
mov edx, dword [esp + 0xd4]
mov dword [ebp + 4], eax
mov dword [ebp + 8], edx
add esp, 4
mov dword [ebp + 0x24], 0
jmp case.default.0x42c7d9
lea eax, [esp + 0x14]
lea ecx, [ebp + 0xc]
push eax
call fcn.00407570
jmp case.default.0x42c7d9
mov ecx, dword [esp + 0x14]
push ecx
call fcn.00461856
add esp, 4
mov dword [ebp + 0x10], eax
jmp case.default.0x42c7d9
mov edx, dword [esp + 0x14]
push edx
call fcn.00461856
add esp, 4
mov dword [ebp + 0x14], eax
jmp case.default.0x42c7d9
mov eax, dword [esp + 0x14]
push eax
call fcn.00461856
add esp, 4
mov dword [ebp + 0x18], eax
jmp case.default.0x42c7d9
lea edx, [esp + 0x14]
lea ecx, [ebp + 0x1c]
push edx
call fcn.00407570
jmp case.default.0x42c7d9
lea eax, [esp + 0x14]
lea ecx, [ebp + 0x28]
push eax
call fcn.00407570
jmp case.default.0x42c7d9
lea edx, [esp + 0x14]
lea ecx, [ebp + 0x2c]
push edx
call fcn.00407570
jmp case.default.0x42c7d9
lea eax, [esp + 0x14]
lea ecx, [ebp + 0x30]
push eax
call fcn.00407570
jmp case.default.0x42c7d9
lea edx, [esp + 0x14]
lea ecx, [ebp + 0x20]
push edx
call fcn.00407570
cmp dword [esp + 0xdc], 0
je 0x42ce6a
lea esi, [ebp + 0xc]
push str.UpdateFile
push esi
call fcn.0040d990
add esp, 8
test al, al
je 0x42cc59
mov eax, dword [esp + 0xcc]
push ebp
push eax
call fcn.0042d1b0
lea ecx, [esp + 0x6c]
mov ebx, eax
mov dword [esp + 0x18], 0
call fcn.00450200
lea ecx, [esp + 0x2c]
call fcn.00401f90
lea esi, [esp + 0xa0]
mov edi, ebx
mov byte [esp + 0xc4], 4
call fcn.0040dac0
mov ecx, dword [eax]
mov edx, dword [eax + 4]
lea esi, [esp + 0x80]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], edx
call fcn.0040dae0
mov esi, eax
lea edi, [esp + 0x20]
call fcn.00410f10
test al, al
je 0x42c9c6
lea ecx, [ecx]
lea esi, [esp + 0x20]
call fcn.00437b10
mov eax, dword [eax]
add eax, 8
push str.strSrvFile
push eax
call fcn.0040d990
add esp, 8
test al, al
jne 0x42c9bb
lea edi, [esp + 0xb0]
call fcn.0040db20
lea esi, [esp + 0x80]
mov edi, ebx
call fcn.0040dae0
mov esi, eax
lea edi, [esp + 0x20]
call fcn.00410f10
test al, al
jne 0x42c970
jmp 0x42c9c6
call fcn.00437b10
mov ecx, dword [eax]
mov dword [esp + 0x18], ecx
mov edx, dword [esp + 0x18]
push 0x7c
push ecx
add edx, 0x10
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
lea ebx, [esp + 0x78]
call fcn.00402050
call fcn.0043f1c0
mov eax, dword [esp + 0x7c]
add esp, 8
mov dword [esp + 0x18], 0
test eax, eax
jle 0x42cc00
mov esi, dword [esp + 0x18]
test esi, esi
jl 0x42cf40
cmp esi, eax
jge 0x42cf40
mov eax, dword [esp + 0x70]
lea eax, [eax + esi*4]
push eax
lea ecx, [esp + 0x30]
call fcn.00407570
lea ebx, [esp + 0x2c]
call fcn.0040f4b0
mov ebx, eax
call fcn.0040f530
mov ecx, dword [esp + 0x2c]
cmp dword [ecx - 0xc], 0
je 0x42cbef
push 0x4c
call fcn.00443d07
add esp, 4
mov dword [esp + 0x1c], eax
mov byte [esp + 0xc4], 5
test eax, eax
je 0x42ca63
push eax
call fcn.0042cf70
mov esi, eax
jmp 0x42ca65
xor esi, esi
mov byte [esp + 0xc4], 4
mov edx, dword [ebp + 4]
mov dword [esi + 4], edx
mov eax, dword [ebp + 8]
mov dword [esi + 8], eax
mov ecx, dword [ebp + 0x24]
mov dword [esi + 0x24], ecx
mov edx, dword [ebp + 0x10]
mov dword [esi + 0x10], edx
mov eax, dword [ebp + 0x14]
mov dword [esi + 0x14], eax
mov ecx, dword [ebp + 0x18]
lea eax, [ebp + 0xc]
mov dword [esi + 0x18], ecx
lea ecx, [esi + 0xc]
push eax
mov dword [esp + 0x20], esi
call fcn.00407570
lea eax, [ebp + 0x28]
lea ecx, [esi + 0x28]
push eax
call fcn.00407570
lea eax, [ebp + 0x2c]
lea ecx, [esi + 0x2c]
push eax
call fcn.00407570
lea eax, [ebp + 0x30]
lea ecx, [esi + 0x30]
push eax
call fcn.00407570
lea eax, [ebp + 0x20]
lea ecx, [esi + 0x20]
push eax
call fcn.00407570
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x42cb9a
call fcn.00462656
xor eax, eax
mov edi, dword [esp + 0x24]
cmp edi, dword [eax + 0x10]
jb 0x42caf2
call fcn.00462656
mov eax, dword [esp + 0xcc]
mov edx, dword [edi]
push esi
push eax
mov dword [esp + 0x5c], edx
call fcn.0042d1b0
mov ebx, eax
mov edi, dword [ebx + 0xc]
cmp edi, dword [ebx + 0x10]
jbe 0x42cb15
call fcn.00462656
mov esi, dword [ebx]
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], edi
nop
mov edi, dword [ebx + 0x10]
cmp dword [ebx + 0xc], edi
jbe 0x42cb2d
call fcn.00462656
mov eax, dword [ebx]
test esi, esi
je 0x42cb37
cmp esi, eax
je 0x42cb3c
call fcn.00462656
cmp dword [esp + 0x24], edi
je 0x42cbca
test esi, esi
jne 0x42cba1
call fcn.00462656
xor eax, eax
mov ecx, dword [esp + 0x24]
cmp ecx, dword [eax + 0x10]
jb 0x42cb5f
call fcn.00462656
mov edx, dword [esp + 0x24]
mov eax, dword [edx]
add eax, 8
push str.strSrvFile
push eax
call fcn.0040d990
add esp, 8
test al, al
jne 0x42cba9
test esi, esi
jne 0x42cba5
call fcn.00462656
xor eax, eax
mov ecx, dword [esp + 0x24]
cmp ecx, dword [eax + 0x10]
jb 0x42cb93
call fcn.00462656
add dword [esp + 0x24], 4
jmp 0x42cb20
mov eax, dword [eax]
jmp 0x42cae4
mov eax, dword [esi]
jmp 0x42cb51
mov eax, dword [esi]
jmp 0x42cb85
test esi, esi
jne 0x42cc52
call fcn.00462656
mov edi, dword [esp + 0x24]
cmp edi, dword [esi + 0x10]
jb 0x42cbc4
call fcn.00462656
mov edx, dword [edi]
mov dword [esp + 0x54], edx
mov ecx, dword [esp + 0x54]
lea eax, [esp + 0x2c]
add ecx, 0x10
push eax
call fcn.00407570
mov edi, dword [esp + 0xd4]
lea ebx, [esp + 0x1c]
call fcn.00410710
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x74]
inc esi
cmp esi, eax
mov dword [esp + 0x18], esi
jl 0x42ca00
test ebp, ebp
je 0x42cc14
mov eax, ebp
call fcn.0042a5c0
push ebp
call fcn.00443d41
add esp, 4
mov byte [esp + 0xc4], 3
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42cc3c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0xc4], 1
call fcn.004503b7
jmp case.default.0x42c7d9
mov esi, dword [esi]
jmp 0x42cbb6
push str.DeleteFileBatch
push esi
call fcn.0040d990
add esp, 8
test al, al
je 0x42ce6a
mov ecx, dword [esp + 0xcc]
push ebp
push ecx
call fcn.0042d1b0
lea esi, [esp + 0x44]
mov edi, eax
call fcn.0040dac0
lea edi, [esp + 0xa8]
call fcn.0040db20
mov esi, eax
call fcn.00437b10
lea edi, [esp + 0x98]
lea esi, [esp + 0x44]
call fcn.0040db20
mov esi, eax
call fcn.00437b10
mov ebx, dword [eax]
lea edi, [esp + 0x88]
lea esi, [esp + 0x44]
call fcn.0040db20
mov esi, eax
call fcn.00437b10
lea ecx, [esp + 0x58]
call fcn.00450200
lea ecx, [esp + 0x28]
call fcn.00401f90
push 0x7c
push ecx
mov byte [esp + 0xcc], 7
add ebx, 0x10
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
lea esi, [esp + 0x64]
call fcn.00402050
mov ebx, esi
call fcn.0043f1c0
add esp, 8
cmp dword [esp + 0x60], 0
mov dword [esp + 0x18], 0
jle 0x42ce43
mov esi, dword [esp + 0x18]
lea esp, [esp]
push esi
lea ecx, [esp + 0x5c]
call fcn.00410380
push eax
lea ecx, [esp + 0x2c]
call fcn.00407570
lea ebx, [esp + 0x28]
call fcn.0040f4b0
mov ebx, eax
call fcn.0040f530
mov edx, dword [esp + 0x28]
cmp dword [edx - 0xc], 0
je 0x42ce34
push 0x4c
call fcn.00443d07
add esp, 4
mov dword [esp + 0x1c], eax
mov byte [esp + 0xc4], 8
test eax, eax
je 0x42cd76
push eax
call fcn.0042cf70
mov esi, eax
jmp 0x42cd78
xor esi, esi
mov byte [esp + 0xc4], 7
mov eax, dword [ebp + 4]
mov dword [esi + 4], eax
mov ecx, dword [ebp + 8]
mov dword [esi + 8], ecx
mov edx, dword [ebp + 0x24]
mov dword [esi + 0x24], edx
mov eax, dword [ebp + 0x10]
mov dword [esi + 0x10], eax
mov ecx, dword [ebp + 0x14]
mov dword [esi + 0x14], ecx
mov edx, dword [ebp + 0x18]
lea eax, [ebp + 0xc]
push eax
lea ecx, [esi + 0xc]
mov dword [esp + 0x20], esi
mov dword [esi + 0x18], edx
call fcn.004075f0
lea eax, [ebp + 0x28]
push eax
lea ecx, [esi + 0x28]
call fcn.004075f0
lea ecx, [ebp + 0x2c]
push ecx
lea ecx, [esi + 0x2c]
call fcn.004075f0
lea edx, [ebp + 0x30]
push edx
lea ecx, [esi + 0x30]
call fcn.004075f0
mov eax, dword [esp + 0xcc]
push esi
push eax
call fcn.0042d1b0
lea esi, [esp + 0x90]
mov edi, eax
call fcn.0040dac0
mov ecx, dword [eax]
mov dword [esp + 0x44], ecx
mov edx, dword [eax + 4]
lea esi, [esp + 0x44]
mov dword [esp + 0x48], edx
call fcn.00410f30
mov esi, eax
call fcn.00437b10
mov eax, dword [eax]
lea ecx, [eax + 0x10]
lea eax, [esp + 0x28]
push eax
call fcn.00407570
mov edi, dword [esp + 0xd4]
lea ebx, [esp + 0x1c]
call fcn.00410710
mov esi, dword [esp + 0x18]
inc esi
cmp esi, dword [esp + 0x60]
mov dword [esp + 0x18], esi
jl 0x42cd20
test ebp, ebp
je 0x42ce4e
mov esi, ebp
call fcn.0042d0d0
lea ecx, [esp + 0x28]
call fcn.0042fe50
lea ecx, [esp + 0x58]
mov byte [esp + 0xc4], 1
call fcn.004503b7
jmp case.default.0x42c7d9
mov edi, dword [esp + 0xd4]
lea ebx, [esp + 0x40]
call fcn.00410710
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x3c]
lea edx, [ecx + 1]
mov ecx, dword [esp + 0x38]
imul edx, ecx
inc eax
cmp eax, edx
mov dword [esp + 0x3c], eax
jl 0x42c797
mov edi, dword [esp + 0x34]
mov ebx, dword [esp + 0x4c]
mov byte [esp + 0xc4], 0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42cec9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test edi, edi
je 0x42cf00
mov ebp, dword [edi - 4]
sub edi, 4
mov esi, 1
cmp ebp, esi
jl 0x42cef7
lea esp, [esp]
cmp dword [edi + esi*4], 0
je 0x42cef2
mov eax, dword [edi + esi*4]
push eax
call fcn.00443d41
add esp, 4
inc esi
cmp esi, ebp
jle 0x42cee0
push edi
call fcn.00443d41
add esp, 4
mov dword [esp + 0xc4], 0xffffffff
lea ecx, [ebx + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42cf24
mov ecx, dword [ebx]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push ebx
call edx
mov ecx, dword [esp + 0xbc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb4
ret 0x14
call fcn.00443ffb
lea ecx, [ecx]
loopne 0x42cf11
inc edx
add byte [eax], bh
enter 0x42, 0x4a
enter 0x42, 0x5f
enter 0x42, 0x74
enter 0x42, 0xffffffffffffff89
enter 0x42, 0xffffffffffffff9b
enter 0x42, 0xffffffffffffffad
enter 0x42, 0xffffffffffffffbf
enter 0x42, 0xffffffffffffffd1
enter 0x42, 0x6a
push 0xffffffffffffffff
invalid
invalid