Function at 0x42c06e
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7f8
mov al, byte [ebp + 0x10]
and dword [ebp + 0x10], 1
push ebx
push esi
push edi
push dword [ebp + 0xc]
and al, 0xf0
lea ecx, [ebp - 0x94]
mov byte [ebp - 0x1e], al
call fcn.0044cd74
mov eax, dword [ebp + 0xc]
or dword [ebp - 0x50], 0xffffffff
or dword [ebp - 0x78], 0xffffffff
xor ebx, ebx
lea ecx, [ebp + 0xc]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x8c], ebx
call fcn.0040f369
lea ecx, [ebp - 0x4c]
mov byte [ebp - 0x12], 0xff
mov byte [ebp - 0x11], 0xff
mov byte [ebp - 0x14], bl
mov byte [ebp - 0x2a], bl
mov byte [ebp - 5], bl
mov byte [ebp - 8], bl
mov byte [ebp - 0x1d], bl
mov byte [ebp - 0x29], bl
mov byte [ebp - 0x55], bl
mov byte [ebp - 7], bl
mov byte [ebp - 0x15], bl
mov dword [ebp - 0x54], 0xffff0000
mov dword [ebp - 0x6c], ebx
mov byte [ebp - 0x39], bl
call fcn.00443f5b
push 1
lea eax, [ebp + 0xc]
push eax
push 0x4c0108
mov dword [ebp - 0x268], ebx
mov word [ebp - 0x2fc], bx
call fcn.00445f31
add esp, 0xc
test al, al
jne 0x42c11c
cmp byte [ebp - 0x1e], al
mov byte [ebp - 0x1f], al
je 0x42c124
cmp byte [ebp - 0x1e], 0
mov byte [ebp - 0x1f], 1
setne byte [ebp - 0x31]
cmp byte [ebp - 0x1f], 0
je 0x42c136
mov byte [ebp - 0x12], 0
mov byte [ebp - 0x11], 1
mov edi, dword [ebp + 0xc]
mov ax, word [edi]
cmp ax, 0x2d
mov byte [ebp - 0x13], 0x2a
jne 0x42c14b
mov cl, al
mov byte [ebp - 0x13], cl
movsx ecx, byte [ebp - 0x13]
movzx eax, ax
cmp eax, ecx
push 2
mov dword [ebp - 0x254], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x60], ecx
pop esi
jne 0x42c5cc
movzx eax, word [edi + 2]
cmp eax, dword [ebp - 0x60]
jne 0x42c5ae
push 1
lea eax, [ebp + 0xc]
push eax
add edi, 4
push 0x4c2308
mov dword [ebp + 0xc], edi
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c19f
mov dword [ebp + 0x10], 1
jmp 0x42c597
push esi
lea eax, [ebp + 0xc]
push eax
push 0x4c2304
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c1be
mov byte [ebp - 0x12], 1
jmp 0x42c597
push 3
pop edi
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c1210
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c1e0
mov byte [ebp - 0x12], 0
jmp 0x42c597
push 4
lea eax, [ebp + 0xc]
push eax
push str.nrcd
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c200
mov byte [ebp - 0x11], 2
jmp 0x42c597
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c22f8
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c21f
mov byte [ebp - 0x11], 0
jmp 0x42c597
mov eax, dword [ebp + 0xc]
mov cx, word [eax]
or cx, 0x20
cmp cx, 0x71
jne 0x42c381
mov cx, word [eax + 2]
or cx, 0x20
cmp cx, 0x64
jne 0x42c381
add eax, 4
mov dword [ebp + 0xc], eax
push ebx
lea eax, [ebp + 0xc]
push eax
push 0x4bd7b2
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c26a
mov byte [ebp - 5], 1
jmp 0x42c597
xor edi, edi
inc edi
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c22f4
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c28c
mov byte [ebp - 5], 0x23
jmp 0x42c597
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c1270
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c2ab
mov byte [ebp - 5], 0x2a
jmp 0x42c597
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c22f0
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c2ca
mov byte [ebp - 5], 0x24
jmp 0x42c597
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c22ec
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c2e9
mov byte [ebp - 5], 0x40
jmp 0x42c597
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c22e8
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c308
mov byte [ebp - 5], 0x3d
jmp 0x42c597
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c22e4
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c327
mov byte [ebp - 5], 0x3c
jmp 0x42c597
push edi
push dword [ebp + 0xc]
push 0x4c22e0
call fcn.0043eeea
add esp, 0xc
test al, al
je 0x42c367
add dword [ebp + 0xc], esi
mov edi, dword [ebp + 0xc]
lea eax, [ebp + 0xc]
push eax
call fcn.00405615
mov eax, dword [ebp + 0xc]
cmp word [eax], bx
pop ecx
je 0x42c35a
mov word [eax], bx
add dword [ebp + 0xc], esi
cmp word [edi], bx
je 0x42c3b7
mov dword [ebp - 0x254], edi
jmp 0x42c3b7
sub dword [ebp + 0xc], 4
cmp byte [ebp - 0x13], 0x2a
jne 0x42c58d
mov edi, dword [ebp + 0xc]
mov edx, edi
xor ecx, ecx
jmp 0x42c585
push 4
push eax
push str.arg:
call fcn.0043eeea
add esp, 0xc
test al, al
je 0x42c3c4
add dword [ebp + 0xc], 8
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x24], eax
lea eax, [ebp + 0xc]
push eax
call fcn.00405615
mov eax, dword [ebp + 0xc]
cmp word [eax], bx
pop ecx
je 0x42c3b7
mov word [eax], bx
add dword [ebp + 0xc], esi
lea ecx, [ebp + 0xc]
call fcn.0040f369
jmp 0x42c597
push esi
lea eax, [ebp + 0xc]
push eax
push 0x4c22d4
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c3e6
mov dword [ebp - 0x54], 1
jmp 0x42c597
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c22d0
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c404
mov dword [ebp - 0x54], ebx
jmp 0x42c597
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c22cc
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c423
mov byte [ebp - 0x1d], 1
jmp 0x42c597
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4c22c8
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c442
mov byte [ebp - 0x29], 1
jmp 0x42c597
push 1
lea eax, [ebp + 0xc]
push eax
push 0x4c1b0c
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c462
mov byte [ebp - 0x55], 1
jmp 0x42c597
push edi
lea eax, [ebp + 0xc]
push eax
push 0x4bde68
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c481
mov byte [ebp - 0x15], 1
jmp 0x42c597
push esi
lea eax, [ebp + 0xc]
push eax
push 0x4c22c4
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c4a0
mov byte [ebp - 0x39], 1
jmp 0x42c597
push 4
lea eax, [ebp + 0xc]
push eax
push str.bool
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c4c0
mov byte [ebp - 0x15], 2
jmp 0x42c597
push 5
push dword [ebp + 0xc]
push str.sret:
call fcn.0043eeea
add esp, 0xc
test al, al
je 0x42c4df
add dword [ebp + 0xc], esi
mov byte [ebp - 7], 1
jmp 0x42c4f5
push 4
push dword [ebp + 0xc]
push 0x4c22ac
call fcn.0043eeea
add esp, 0xc
test al, al
je 0x42c54e
add dword [ebp + 0xc], 8
mov edi, dword [ebp + 0xc]
lea eax, [ebp + 0xc]
push eax
call fcn.00405615
mov eax, dword [ebp + 0xc]
pop ecx
sub eax, edi
sar eax, 1
push eax
push edi
lea ecx, [ebp - 0x4c]
call fcn.0044407f
lea ecx, [ebp + 0xc]
call fcn.0040f369
mov ecx, dword [ebp + 8]
push ebx
lea eax, [ebp - 0x4c]
push eax
call fcn.00402eb0
push dword [ebp - 0x4c]
mov byte [ebp - 0x2a], 1
push 0x4bde90
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x42c597
mov eax, dword [ebp - 0x4c]
mov byte [ebp - 0x2a], 3
mov word [eax], bx
jmp 0x42c597
push 1
lea eax, [ebp + 0xc]
push eax
push 0x4c121c
call fcn.00445f31
add esp, 0xc
test al, al
je 0x42c36b
mov byte [ebp - 8], 1
jmp 0x42c597
mov eax, ecx
call fcn.0043daaf
test al, al
jne 0x42c58d
cmp cx, 0x2c
je 0x42c5a8
add edi, esi
mov dword [ebp + 0xc], edi
mov cx, word [edi]
cmp cx, bx
jne 0x42c56f
lea eax, [ebp + 0xc]
push eax
call fcn.00408ddd
pop ecx
mov edi, dword [ebp + 0xc]
movzx eax, word [edi]
cmp eax, dword [ebp - 0x60]
je 0x42c169
jmp 0x42c5ae
lea edi, [edx - 4]
mov dword [ebp + 0xc], edi
cmp byte [ebp - 0x1d], 0
je 0x42c5cc
mov ecx, dword [ebp + 8]
push 0xffffffffffffff9c
push 0x4bca0c
push ebx
push edi
call fcn.00458949
mov esi, eax
jmp 0x42e9eb
push 0x6e
pop ecx
xor eax, eax
push 0x6a
lea edi, [ebp - 0x24c]
mov dword [ebp - 0x250], ebx
rep stosd dword es:[edi], eax
pop ecx
push 0x69
lea edi, [ebp - 0x4a4]
rep stosd dword es:[edi], eax
pop ecx
lea edi, [ebp - 0x64c]
rep stosd dword es:[edi], eax
push 0x69
pop ecx
lea edi, [ebp - 0x7f4]
mov dword [ebp - 0x7f8], ebx
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x40], ebx
call fcn.004441c9
mov esi, dword [sym.imp.SHLWAPI.dll_StrChrW]
lea eax, [ebp - 0x4a8]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
push 0x2c
push eax
mov dword [ebp - 0x4a8], eax
mov dword [ebp - 0x650], eax
mov dword [ebp - 0x5c], 1
call esi
cmp eax, ebx
mov dword [ebp - 0x28], eax
mov edi, eax
je 0x42c65d
sub eax, dword [ebp - 0x84]
sar eax, 1
inc edi
inc edi
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], edi
cmp edi, ebx
mov dword [ebp - 0x4a4], edi
mov dword [ebp - 0x64c], edi
je 0x42c685
push 0xc
push edi
push str._LoadLibrary
call fcn.0043eeea
add esp, 0xc
test al, al
mov byte [ebp - 9], 1
jne 0x42c689
mov byte [ebp - 9], 0
cmp edi, ebx
je 0x42c6a5
push 0xf
push edi
push str._GetProcAddress
call fcn.0043eeea
add esp, 0xc
test al, al
mov byte [ebp - 7], 1
jne 0x42c6a9
mov byte [ebp - 7], 0
cmp edi, ebx
je 0x42c6c5
push 0xc
push edi
push str._FreeLibrary
call fcn.0043eeea
add esp, 0xc
test al, al
mov byte [ebp - 6], 1
jne 0x42c6c9
mov byte [ebp - 6], 0
mov al, byte [ebp - 6]
or al, byte [ebp - 7]
or al, byte [ebp - 9]
cmp edi, ebx
mov byte [ebp - 0x45], al
je 0x42c6fa
cmp word [edi], 0x2a
jne 0x42c6fa
xor eax, eax
mov ax, word [edi + 2]
cmp ax, 0x2c
je 0x42c6f4
call fcn.0040f37f
test al, al
je 0x42c6fa
mov byte [ebp - 0x13], 1
jmp 0x42c71a
cmp byte [ebp - 0x1f], 0
mov byte [ebp - 0x13], 0
jne 0x42c71a
cmp byte [ebp - 0x31], 0
jne 0x42c71a
cmp byte [ebp - 9], 0
jne 0x42c71a
cmp byte [ebp - 6], 0
mov byte [ebp - 0x1d], 1
je 0x42c71e
mov byte [ebp - 0x1d], 0
mov al, byte [ebp - 7]
or al, byte [ebp - 9]
je 0x42c72a
or byte [ebp - 0x39], 0x10
cmp byte [ebp - 0x29], 0
jne 0x42c838
cmp byte [ebp - 0x1d], 0
je 0x42c838
mov eax, dword [ebp + 0x14]
cmp eax, ebx
mov dword [ebp - 0x1c], eax
jne 0x42c74e
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1c], eax
push 0x2c
push dword [ebp - 0x1c]
call esi
cmp eax, ebx
mov dword [ebp - 0x1c], eax
je 0x42c767
mov word [eax], bx
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x24], ebx
je 0x42c802
lea eax, [ebp - 0x1c]
push eax
call fcn.00405615
mov eax, dword [ebp - 0x1c]
cmp word [eax], bx
pop ecx
je 0x42c789
mov word [eax], bx
add dword [ebp - 0x1c], 2
lea ecx, [ebp - 0x1c]
call fcn.0040f369
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5c], 2
jmp 0x42c7fb
cmp dword [ebp - 0x5c], 0x6a
jge 0x42c838
mov ecx, dword [ebp - 0x24]
mov dx, word [ecx]
cmp dx, bx
je 0x42c7bd
add ecx, 2
cmp word [ecx], bx
je 0x42c7bd
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x60], eax
xor eax, eax
cmp dx, 0x7e
setne al
dec eax
and eax, 0xfffffee8
add eax, 0x5a5
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00419ccc
mov edx, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x60]
add esp, 0xc
inc dword [ebp - 0x5c]
mov dword [ebp - 0x1c], eax
mov dword [ebp + edx*4 - 0x4a8], ecx
cmp word [eax], bx
jne 0x42c79d
jmp 0x42c838
xor edi, edi
inc edi
mov dword [ebp - 0x5c], edi
cmp eax, ebx
je 0x42c838
cmp edi, 2
jl 0x42c818
mov dword [ebp + edi*4 - 0x4a8], eax
push 0x2c
inc edi
push eax
mov dword [ebp - 0x5c], edi
call esi
cmp eax, ebx
mov dword [ebp - 0x1c], eax
je 0x42c833
mov word [eax], bx
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp edi, 0x6a
jl 0x42c808
mov eax, dword [ebp - 0x28]
cmp eax, ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x60], ebx
je 0x42c84c
mov word [eax - 2], bx
cmp byte [ebp - 0x13], 0
jne 0x42c86a
cmp eax, ebx
je 0x42c86a
cmp word [eax], 0x2a
jne 0x42c86a
inc dword [ebp - 0x74]
inc eax
inc eax
cmp word [eax], 0x2a
je 0x42c85c
mov dword [ebp - 0x28], eax
cmp eax, ebx
mov dword [ebp - 0x10], ebx
je 0x42c8d2
cmp dword [ebp - 0x24], ebx
je 0x42c8c8
mov edx, dword [ebp - 0x28]
jmp 0x42c891
xor eax, eax
mov ax, word [edx]
cmp ax, 0x2c
je 0x42c896
call fcn.0043daaf
test al, al
jne 0x42c896
inc edx
inc edx
cmp word [edx], bx
jne 0x42c87b
cmp word [edx], bx
je 0x42c8d2
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], edx
call fcn.0040f369
mov eax, dword [ebp - 0x10]
cmp word [eax], 0x2c
jne 0x42c8b8
add dword [ebp - 0x10], 2
call fcn.0040f369
mov eax, dword [ebp - 0x10]
cmp word [eax], bx
jne 0x42c8c3
mov dword [ebp - 0x10], ebx
mov word [edx], bx
jmp 0x42c8d2
push 0x2c
push dword [ebp - 0x28]
call esi
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0xc]
cmp word [eax], bx
jne 0x42c8ea
cmp byte [ebp - 0x45], 0
jne 0x42c8ea
mov esi, 0x80070057
jmp 0x42e9ca
cmp dword [ebp - 0x24], ebx
jne 0x42c902
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x42c902
cmp word [eax], bx
je 0x42c902
mov word [eax], bx
add dword [ebp - 0x10], 2
mov edi, dword [ebp - 0x28]
push 0x2e
push edi
call esi
cmp eax, ebx
je 0x42c94b
mov word [eax], bx
inc eax
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x70]
push eax
call fcn.00405615
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x30]
pop ecx
je 0x42c94b
cmp word [eax], bx
je 0x42c933
mov word [eax], bx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004404ef
pop ecx
pop ecx
mov al, byte [ebp - 0x2a]
and al, 2
mov byte [ebp - 0x45], al
je 0x42c961
cmp edi, ebx
je 0x42c961
cmp word [edi], bx
jne 0x42c961
mov dword [ebp - 0x28], ebx
test al, al
je 0x42c9ec
mov ecx, dword [ebp - 0x10]
cmp ecx, ebx
je 0x42c9ec
cmp dword [ebp - 0x24], ebx
je 0x42c9ce
mov edx, ecx
xor eax, eax
jmp 0x42c98f
cmp ax, 0x2c
je 0x42c997
call fcn.0043daaf
test al, al
jne 0x42c997
inc ecx
inc ecx
mov dword [ebp - 0x10], ecx
mov ax, word [ecx]
cmp ax, bx
jne 0x42c97b
sub ecx, edx
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x4c]
call fcn.0044407f
mov eax, dword [ebp - 0x10]
cmp word [eax], bx
je 0x42c9e9
lea ecx, [ebp - 0x10]
mov edx, eax
call fcn.0040f369
mov eax, dword [ebp - 0x10]
cmp word [eax], 0x2c
jne 0x42c9c9
add dword [ebp - 0x10], 2
call fcn.0040f369
mov word [edx], bx
jmp 0x42c9e1
mov ecx, dword [ebp + 8]
push ebx
push 0x2c
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00438db7
mov eax, dword [ebp - 0x10]
cmp word [eax], bx
jne 0x42c9ec
mov dword [ebp - 0x10], ebx
push 0x20a
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x30], ebx
call fcn.00443f79
cmp byte [ebp - 0x11], 0
mov byte [ebp - 0x2a], 0
jg 0x42ca1d
push dword [ebp - 0x90]
push 0x208
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
cmp byte [ebp - 9], 0
mov eax, dword [ebp - 0x10]
je 0x42ca3c
cmp eax, ebx
je 0x42ca3c
cmp word [eax], 0x5e
jne 0x42ca3c
cmp word [eax + 2], 0x2a
jne 0x42ca3c
xor edi, edi
inc edi
jmp 0x42ca3e
xor edi, edi
cmp byte [ebp - 9], 0
je 0x42ca63
cmp eax, ebx
je 0x42ca63
cmp word [eax], 0x5e
jne 0x42ca63
push 0x2a
pop esi
cmp word [eax + 2], si
je 0x42ca66
mov dword [ebp - 0x84], 1
jmp 0x42ca70
push 0x2a
pop esi
cmp edi, ebx
mov dword [ebp - 0x84], ebx
je 0x42ca75
inc eax
inc eax
mov dword [ebp - 0x10], eax
cmp byte [ebp - 9], 0
je 0x42cac5
cmp byte [ebp - 8], 0
jne 0x42cac5
mov ecx, dword [ebp - 0x4c]
mov cx, word [ecx]
cmp cx, bx
je 0x42cabb
cmp cx, si
je 0x42cabb
cmp eax, ebx
je 0x42cac5
cmp word [eax], si
je 0x42cac5
push eax
lea eax, [ebp - 0x12]
push eax
call fcn.00411a41
pop ecx
pop ecx
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 4], eax
mov byte [ebp - 0x14], 1
jmp 0x42e8c5
mov esi, 0x80070057
jmp 0x42e9bf
cmp byte [ebp - 7], 0
je 0x42cb55
cmp word [eax], si
mov byte [ebp - 0x14], 1
jne 0x42cadd
inc eax
inc eax
mov dword [ebp - 0x10], eax
mov cx, word [eax]
cmp cx, si
je 0x42caeb
cmp cx, 0x23
jne 0x42caf1
mov byte [ebp - 8], 1
jmp 0x42cad8
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
call fcn.00450152
cmp dword [ebp - 0x10], ebx
pop ecx
pop ecx
je 0x42e8f4
add dword [ebp - 0x10], 2
je 0x42e8f4
push dword [ebp - 0x10]
lea ecx, [ebp + 0x10]
call fcn.00402d16
cmp byte [ebp - 8], 0
je 0x42cb3e
mov ecx, dword [ebp - 0x68]
mov eax, ecx
or eax, dword [ebp - 0x64]
je 0x42cb4d
push dword [ebp + 0x10]
call fcn.00410036
jmp 0x42cb4a
push dword [ebp + 0x10]
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 4], eax
lea ecx, [ebp + 0x10]
jmp 0x42d5cd
cmp byte [ebp - 6], 0
je 0x42cbc4
cmp word [eax], si
mov byte [ebp - 0x14], 1
jne 0x42cb69
inc eax
inc eax
mov dword [ebp - 0x10], eax
mov cx, word [eax]
cmp cx, si
je 0x42cb77
cmp cx, 0x23
jne 0x42cb7d
mov byte [ebp - 8], 1
jmp 0x42cb64
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
call fcn.00450152
cmp byte [ebp - 8], 1
pop ecx
pop ecx
jle 0x42cbb3
mov ecx, dword [ebp - 0x68]
mov eax, ecx
or eax, dword [ebp - 0x64]
je 0x42e8f4
call fcn.0040ffef
mov dword [ebp - 4], ebx
jmp 0x42e8f4
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - 4], eax
jmp 0x42e8f4
cmp byte [ebp - 0x1e], 0
mov byte [ebp - 6], 0
je 0x42cbd2
mov byte [ebp - 6], 1
cmp eax, ebx
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov ecx, 0x4c2256
jne 0x42ccfc
cmp dword [ebp - 0x28], ebx
jne 0x42cbef
mov dword [ebp - 0x28], ecx
jmp 0x42cc0b
push dword [ebp - 0x28]
push ecx
call edi
test eax, eax
je 0x42cc0b
push dword [ebp - 0x28]
push 0x4c222a
call edi
test eax, eax
jne 0x42ccfc
cmp dword [ebp - 0x54], ebx
mov byte [ebp - 6], 0xff
jge 0x42cc1b
mov dword [ebp - 0x54], 0x31
cmp byte [ebp - 0x54], 0
je 0x42ccfc
lea ecx, [ebp + 0x10]
call fcn.00443f5b
push 0xffffffffffffffff
push str.___exe:_
lea ecx, [ebp + 0x14]
call fcn.0044cdaa
lea eax, [ebp + 0x14]
push eax
lea ecx, [ebp + 0x10]
call fcn.0044ce0a
lea ecx, [ebp + 0x14]
call fcn.0043db4f
push 0x51c
lea ecx, [ebp + 0x10]
call fcn.00443fa0
mov eax, dword [ebp + 0x10]
push 0x208
add eax, 0x10
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0xffffffffffffffff
push str.____nowin___nfb___hide_PECMDpecmd_cmd_CALL__
lea ecx, [ebp + 0x14]
call fcn.0044cdaa
push dword [eax]
lea ecx, [ebp + 0x10]
call fcn.00443fc7
lea ecx, [ebp + 0x14]
call fcn.0043db4f
mov eax, dword [ebp - 0x50]
cmp eax, ebx
jl 0x42cca2
mov ecx, dword [ebp - 0x94]
mov word [ecx + eax*2], bx
push dword [ebp - 0x94]
lea ecx, [ebp + 0x10]
call fcn.00443fc7
push 0xffffffffffffffff
push 0x4c21e4
lea ecx, [ebp + 0x14]
call fcn.0044cdaa
push dword [eax]
lea ecx, [ebp + 0x10]
call fcn.00443fc7
lea ecx, [ebp + 0x14]
call fcn.0043db4f
push dword [ebp - 0x28]
lea ecx, [ebp + 0x10]
call fcn.00443fc7
mov ecx, dword [ebp + 8]
push ebx
push ebx
push ebx
push ebx
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.0040a2d5
lea ecx, [ebp + 0x10]
mov esi, eax
call fcn.0043db4f
jmp 0x42e9bf
mov eax, dword [ebp - 0x28]
cmp eax, ebx
je 0x42ea0d
cmp word [eax], bx
je 0x42ea0d
cmp byte [ebp - 0x29], 0
jne 0x42cd6d
cmp byte [ebp - 0x1d], 0
je 0x42cd6d
cmp dword [ebp + 0x14], ebx
je 0x42cd6d
push 2
pop esi
cmp dword [ebp - 0x5c], esi
lea eax, [ebp - 0x650]
mov dword [ebp - 0x44], eax
mov dword [ebp + 0x14], ebx
jle 0x42cd65
mov ecx, dword [ebp + 8]
push 1
push ebx
lea eax, [ebp + 0x14]
push eax
push dword [ebp + esi*4 - 0x4a8]
call fcn.00454bdd
mov eax, dword [ebp + 0x14]
mov dword [ebp + esi*4 - 0x650], eax
mov dword [ebp + esi*4 - 0x7f8], eax
inc esi
cmp esi, dword [ebp - 0x5c]
mov dword [ebp + 0x14], ebx
jl 0x42cd35
lea ecx, [ebp + 0x14]
call fcn.0043db4f
cmp byte [ebp - 0x29], 0
push 2
pop ecx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x7c], ebx
jne 0x42d0e3
cmp byte [ebp - 0x1d], 0
je 0x42d0e3
mov eax, dword [ebp - 0x44]
cmp dword [eax + 4], 0
je 0x42d0e3
cmp byte [ebp - 0x45], 0
je 0x42cdaa
mov eax, dword [eax + 8]
test eax, eax
mov dword [ebp - 0x1c], eax
je 0x42cdaa
push 3
pop ecx
cmp dword [ebp - 0x8c], 0
je 0x42cdc3
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x40], 1
cmp dword [ebp - 0x40], 0x64
mov al, byte [ebp - 5]
mov byte [ebp + 0x17], al
ja 0x42d0e3
mov eax, ecx
mov ecx, dword [ebp - 0x44]
shl eax, 2
add ecx, eax
lea eax, [ebp + eax - 0x4ac]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
add dword [ebp - 0x24], 4
add dword [ebp - 0x70], 4
test eax, eax
mov dword [ebp - 0x1c], eax
je 0x42d0e3
mov ecx, dword [ebp - 0x40]
mov dx, word [eax]
lea ecx, [ebp + ecx*4 - 0x250]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x254]
xor bl, bl
test ecx, ecx
jne 0x42ce25
mov cl, byte [ebp + 0x17]
mov byte [ebp - 5], cl
jmp 0x42ce48
cmp word [ecx], 0
je 0x42ce45
mov cl, byte [ecx]
mov byte [ebp - 5], cl
mov ecx, dword [ebp - 0x254]
add ecx, 2
cmp word [ecx], 0
je 0x42ce45
mov dword [ebp - 0x254], ecx
mov cl, byte [ebp - 5]
cmp cl, 0x23
je 0x42ceeb
cmp cl, 0x2a
je 0x42ceeb
cmp cl, 0x3c
je 0x42ceeb
cmp cl, 0x24
je 0x42cfd5
cmp cl, 0x40
je 0x42cff1
cmp cl, 0x3d
je 0x42d008
cmp cl, 0x7e
je 0x42cfe6
test cl, cl
jne 0x42cfa7
cmp dx, 0x23
je 0x42d09f
cmp dx, 0x3c
jne 0x42d0d0
cmp word [eax], 0x3c
jne 0x42ceae
inc eax
inc eax
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x1c]
xor esi, esi
push eax
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x7c], esi
call fcn.00450311
mov eax, dword [ebp - 0x80]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x40]
mov dword [ebp + ecx*4 - 0x250], eax
mov eax, dword [ebp - 0x7c]
inc ecx
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x40], ecx
mov dword [ebp + ecx*4 - 0x250], eax
jmp 0x42d0d0
cmp dx, 0x3c
je 0x42cfa7
cmp dx, 0x23
je 0x42cfa7
cmp dx, 0x2a
je 0x42cfa7
cmp dx, 0x24
je 0x42cfa7
cmp dx, 0x40
je 0x42cfa7
cmp dx, 0x3d
je 0x42cfa7
cmp dx, 0x7e
je 0x42cfa7
cmp cl, 0x23
je 0x42d09f
cmp cl, 0x3c
je 0x42cea3
cmp word [eax], 0x2a
jne 0x42cf4a
inc eax
inc eax
mov dword [ebp - 0x1c], eax
mov cx, word [eax]
xor edi, edi
cmp cx, 0x7e
jne 0x42d018
inc eax
inc eax
mov edi, 0xfde9
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x44]
call fcn.00443f5b
mov ecx, dword [ebp + 8]
push 0
push 0x2c
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00438db7
mov ecx, dword [ebp + 8]
and dword [ebp - 0x1c], 0
push 0
push 0xffffffffffffffff
push 0
push dword [ebp - 0x44]
call fcn.00410728
test eax, eax
je 0x42d029
mov eax, dword [eax + 4]
mov dword [ebp - 0x1c], eax
jmp 0x42d02c
inc eax
movzx ecx, dx
inc eax
sub ecx, 0x23
mov dword [ebp - 0x1c], eax
mov bl, 1
je 0x42d09f
sub ecx, 7
je 0x42cf3f
sub ecx, 0x12
je 0x42cea3
dec ecx
je 0x42d008
sub ecx, 3
je 0x42cff1
sub ecx, 0x3e
je 0x42cfe6
mov ecx, dword [ebp - 0x40]
lea ecx, [ebp + ecx*4 - 0x250]
mov dword [ecx], eax
jmp 0x42d0d0
test eax, eax
mov edi, 0xfde9
je 0x42cfd5
jmp 0x42d043
xor edi, edi
test eax, eax
jne 0x42d043
mov eax, dword [ebp - 0x40]
lea eax, [ebp + eax*4 - 0x250]
and dword [eax], edi
jmp 0x42d0d0
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx]
movsx eax, bl
lea ecx, [ecx + eax*2]
jmp 0x42d0c4
cmp cx, 0x40
jne 0x42cf63
xor edi, edi
jmp 0x42cf63
mov eax, dword [ebp - 0x1c]
test di, di
je 0x42d089
test eax, eax
je 0x42d081
cmp word [eax], 0
je 0x42d089
lea ecx, [ebp - 0x44]
call fcn.0043db4f
push 4
call fcn.004aa268
test eax, eax
pop ecx
je 0x42d056
and dword [eax], 0
mov esi, eax
jmp 0x42d058
xor esi, esi
movzx eax, di
push eax
push 0xffffffffffffffff
push dword [ebp - 0x1c]
mov ecx, esi
call fcn.00443ee3
mov eax, dword [esi]
push esi
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x1c], eax
call fcn.0040f3aa
mov eax, dword [ebp - 0x1c]
jmp 0x42cfd5
mov eax, 0x4bca0c
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x40]
lea ecx, [ebp + ecx*4 - 0x250]
mov dword [ecx], eax
lea ecx, [ebp - 0x44]
call fcn.0043db4f
jmp 0x42d0d0
cmp word [eax], 0x23
jne 0x42d0aa
inc eax
inc eax
mov dword [ebp - 0x1c], eax
and dword [ebp - 0x80], 0
and dword [ebp - 0x7c], 0
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00450311
pop ecx
pop ecx
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x40]
lea eax, [ebp + eax*4 - 0x250]
mov dword [eax], ecx
inc dword [ebp - 0x40]
cmp byte [ebp - 0x55], 0
jne 0x42d0e3
cmp dword [ebp - 0x40], 0x64
jbe 0x42cdea
mov esi, dword [ebp - 0x28]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push str._DllRegisterServer
push esi
call ebx
xor edi, edi
test eax, eax
jne 0x42d116
cmp dword [ebp - 0x54], edi
mov esi, 0x4c2256
mov dword [ebp - 0x28], esi
mov byte [ebp - 6], 0xff
jge 0x42d112
mov dword [ebp - 0x54], 0x31
mov byte [ebp - 0x12], 1
push str._DllUnregisterServer
push esi
call ebx
test eax, eax
jne 0x42d13e
cmp dword [ebp - 0x54], edi
mov esi, 0x4c222a
mov dword [ebp - 0x28], esi
mov byte [ebp - 6], 0xff
jge 0x42d13a
mov dword [ebp - 0x54], 0x71
mov byte [ebp - 0x12], 1
xor ecx, ecx
mov cx, word [esi]
xor ebx, ebx
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x24], ebx
mov eax, ecx
call fcn.00443b15
test al, al
jne 0x42d18b
cmp cx, 0x26
jne 0x42d17c
mov ecx, dword [ebp + 8]
push edi
push 0xffffffffffffffff
push edi
push esi
call fcn.00410728
cmp eax, edi
je 0x42d1a7
mov ebx, dword [eax + 4]
cmp ebx, edi
mov dword [ebp - 0x24], ebx
je 0x42d1a7
jmp 0x42d1c5
mov edx, dword [ebp + 0xc]
cmp word [edx], 0x23
jne 0x42d1da
cmp word [edx + 2], di
jne 0x42d1da
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x70], esi
call fcn.00450311
mov ebx, dword [ebp - 0x68]
mov eax, ebx
or eax, dword [ebp - 0x64]
pop ecx
pop ecx
jne 0x42d1c2
mov al, byte [ebp - 0x31]
neg al
sbb eax, eax
and eax, 0x7ff8ffa9
add eax, 0x80070057
mov dword [ebp - 4], eax
xor edi, edi
jmp 0x42e960
mov dword [ebp - 0x24], ebx
cmp byte [ebp - 0x11], 0
mov byte [ebp - 6], 1
jge 0x42d1d3
mov byte [ebp - 0x11], 1
mov edx, dword [ebp + 0xc]
mov byte [ebp - 0x13], 0
cmp byte [ebp - 9], 0
je 0x42d1eb
mov eax, edx
mov edx, dword [ebp - 0x10]
mov dword [ebp + 0xc], edx
mov dword [ebp - 0x10], eax
cmp edx, edi
mov byte [ebp - 7], 0
mov dword [ebp - 0x50], edi
je 0x42d20f
cmp word [edx], 0x22
jne 0x42d203
mov dword [ebp - 0x50], 1
push edx
call fcn.00412ae5
mov edx, eax
pop ecx
mov dword [ebp + 0xc], edx
push 0x2a
mov ecx, edx
pop esi
mov dword [ebp - 0x38], ecx
cmp word [edx], si
mov byte [ebp + 0x17], 0
jne 0x42d232
lea eax, [ecx + 2]
cmp word [eax], si
jne 0x42d232
mov ecx, eax
mov dword [ebp - 0x38], ecx
cmp word [ecx], si
je 0x42d220
mov di, word [ecx]
cmp di, si
jne 0x42d2b9
xor eax, eax
mov ax, word [ecx + 2]
push eax
call fcn.004439f7
add esp, 4
test al, al
jne 0x42d251
or byte [ebp - 8], 2
cmp di, si
jne 0x42d2b9
xor eax, eax
lea esi, [ecx + 2]
mov ax, word [esi]
push eax
call fcn.004439f7
add esp, 4
test al, al
je 0x42d2b9
cmp ecx, edx
seta al
and dword [ebp - 0x258], 0
and dword [ebp - 0x254], 0
inc al
mov byte [ebp + 0x17], al
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x38], esi
call fcn.00450152
test eax, eax
pop ecx
pop ecx
jle 0x42cabb
mov eax, dword [ebp - 0x258]
test eax, eax
je 0x42cabb
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x30], eax
jmp 0x42d2c3
test di, di
jne 0x42d2c9
xor ecx, ecx
mov dword [ebp - 0x38], ecx
cmp byte [ebp + 0x17], 0
jne 0x42d2e0
test ecx, ecx
je 0x42d2e0
cmp word [ecx], 0x2e
jne 0x42d2e0
cmp word [ecx + 2], 0
jne 0x42d2e0
mov byte [ebp - 0x1e], 1
jmp 0x42d2ea
cmp byte [ebp + 0x17], 0
mov byte [ebp - 0x1e], 0
jne 0x42d35e
cmp byte [ebp - 0x13], 0
je 0x42d35e
cmp byte [ebp - 8], 0
jne 0x42d35e
cmp byte [ebp - 0x1e], 0
je 0x42d303
mov eax, dword [0x4d7c84]
jmp 0x42d30d
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, dword [ebp + 0xc]
test eax, eax
jne 0x42d32e
push edx
lea eax, [ebp - 0x12]
push eax
call fcn.00411a41
pop ecx
pop ecx
push dword [ebp + 0xc]
mov byte [ebp - 0x2a], 1
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x42d334
and dword [ebp - 4], 0
jmp 0x42d34c
cmp byte [ebp - 0x31], 0
je 0x42d343
and dword [ebp - 4], 0
jmp 0x42e8c5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 4], eax
cmp byte [ebp - 0x2a], 1
je 0x42e8c5
mov esi, dword [ebp - 4]
jmp 0x42e9bf
push edx
lea eax, [ebp - 0x12]
push eax
call fcn.00411a41
test ebx, ebx
pop ecx
pop ecx
jne 0x42d8ae
cmp byte [ebp - 8], bl
mov eax, dword [0x4d7c84]
mov esi, dword [ebp - 0x38]
jne 0x42d3ac
cmp dword [ebp - 0x30], ebx
jne 0x42d3ae
cmp byte [ebp - 6], bl
jne 0x42d3ae
cmp esi, ebx
je 0x42d3a6
cmp word [esi], 0x2e
jne 0x42d61d
cmp word [esi + 2], bx
jne 0x42d61d
mov dword [ebp - 0x30], eax
jmp 0x42d3b6
mov byte [ebp - 6], 2
jmp 0x42d3ae
xor ebx, ebx
cmp esi, ebx
je 0x42d774
cmp dword [ebp - 0x30], ebx
jne 0x42d788
cmp byte [ebp - 8], 0
je 0x42d61d
xor edx, edx
cmp dword [ebp - 0x50], edx
mov dword [ebp - 0x264], edx
mov dword [ebp - 0x260], edx
mov dword [ebp - 0x25c], edx
mov bx, word [esi]
mov edi, esi
jne 0x42d400
cmp bx, 0x23
jne 0x42d400
xor eax, eax
mov ax, word [esi + 2]
push eax
call fcn.004439f7
add esp, 4
test al, al
jne 0x42d44a
cmp bx, 0x2a
jne 0x42d40d
inc esi
inc esi
mov dword [ebp - 0x38], esi
mov edi, esi
cmp word [esi], 0x22
mov dword [ebp - 0x50], edx
jne 0x42d43e
inc esi
inc esi
push 0x22
lea eax, [ebp + 0x14]
mov dword [ebp - 0x38], esi
mov dword [ebp + 0x14], esi
call fcn.004a7e7b
mov edi, dword [ebp + 0x14]
cmp word [edi], 0
pop ecx
je 0x42d43e
and word [edi], 0
mov esi, dword [ebp - 0x38]
mov dword [ebp - 0x50], edi
inc edi
inc edi
cmp bx, 0x2a
jne 0x42d4fd
xor edx, edx
mov eax, dword [0x4d7fa0]
xor ebx, ebx
jmp 0x42d45b
cmp cx, 0x23
je 0x42d463
inc edi
inc edi
mov cx, word [edi]
cmp cx, dx
jne 0x42d453
cmp word [edi], dx
mov esi, edi
je 0x42d487
mov cx, word [esi]
cmp cx, 0x7c
je 0x42d482
cmp cx, 0x3a
je 0x42d482
inc esi
inc esi
cmp word [esi], dx
jne 0x42d46a
jmp 0x42d487
mov word [esi], dx
inc esi
inc esi
cmp word [esi], dx
jne 0x42d491
mov esi, str.EXEDATA
cmp word [edi], 0x23
jne 0x42d50c
mov ecx, dword [ebp - 0x50]
cmp ecx, edx
mov word [edi], dx
je 0x42d4a4
mov word [ecx], dx
mov ecx, dword [ebp - 0x38]
cmp word [ecx], 0x2e
jne 0x42d4c0
lea edx, [ecx + 2]
cmp word [edx], 0
jne 0x42d4c0
mov eax, dword [0x4d7c84]
mov ecx, edx
mov dword [ebp - 0x38], ecx
cmp word [ecx], 0
je 0x42d4d3
push 2
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ebx, eax
test eax, eax
mov word [edi], 0x23
je 0x42d4f0
push 0
lea ecx, [ebp - 0x264]
push ecx
push esi
push edi
push eax
call fcn.00414db6
add esp, 0x14
test ebx, ebx
je 0x42d50c
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x42d50c
lea eax, [ebp - 0x264]
push eax
push esi
call fcn.0041477a
pop ecx
pop ecx
mov edi, dword [ebp - 0x264]
test edi, edi
mov ebx, dword [ebp - 0x260]
jne 0x42d542
xor eax, eax
cmp byte [ebp - 9], al
lea ecx, [ebp - 0x264]
sete al
mov byte [ebp - 0x15], 1
mov dword [ebp - 0x6c], 1
mov dword [ebp - 4], eax
call fcn.0043db4f
jmp 0x42d779
lea eax, [ebp - 0x88]
push 0x28
push eax
call fcn.0041065f
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x42d55f
mov ecx, esi
call fcn.00414356
add esi, 4
push ebx
push edi
mov ecx, esi
mov dword [ebp - 0x60], esi
call fcn.0041d94f
test eax, eax
je 0x42d5fc
cmp byte [ebp - 9], 0
je 0x42d5d7
mov ecx, dword [ebp - 0x10]
xor edi, edi
xor eax, eax
cmp ecx, edi
je 0x42d58c
cmp word [ecx], di
jne 0x42d594
mov ecx, dword [ebp - 0x4c]
cmp word [ecx], di
je 0x42d596
mov eax, ecx
cmp eax, edi
mov dword [ebp - 4], esi
mov byte [ebp - 0x14], 1
je 0x42d5c7
mov ecx, dword [ebp - 0x264]
mov dword [esi + 8], ecx
lea ecx, [ebp - 0x88]
push ecx
push eax
push esi
push dword [ebp + 8]
mov dword [ebp - 0x264], edi
call fcn.0042bb8a
add esp, 0x10
mov dword [ebp - 0x60], edi
lea ecx, [ebp - 0x264]
call fcn.0043db4f
jmp 0x42e8f4
push dword [ebp - 0x28]
lea ecx, [ebp - 0x50]
call fcn.00402d16
push dword [eax]
mov ecx, esi
call fcn.00410036
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x24], eax
call fcn.0043db4f
cmp dword [ebp - 0x24], 0
jne 0x42d612
xor eax, eax
cmp byte [ebp - 9], al
mov byte [ebp - 0x15], 1
sete al
mov dword [ebp - 0x6c], 1
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x264]
jmp 0x42d8a6
xor edi, edi
mov di, word [esi]
and edi, 0xffdf
je 0x42d632
mov edi, dword [esi]
and edi, 0xffdfffdf
cmp byte [ebp - 0x1e], 0
jne 0x42d764
cmp edi, 0x45004b
jne 0x42d688
push esi
push dword [0x4d6318]
call fcn.0043ef29
test al, al
pop ecx
pop ecx
jne 0x42d67e
push 8
push dword [ebp - 0x38]
push dword [0x4d6318]
call fcn.0043eeea
add esp, 0xc
test al, al
je 0x42d70d
mov esi, dword [ebp - 0x38]
cmp word [esi + 0x10], bx
jne 0x42d710
mov eax, dword [0x4d7fe8]
jmp 0x42d764
cmp edi, 0x530055
jne 0x42d6cc
push esi
push dword [0x4d6314]
call fcn.0043ef29
test al, al
pop ecx
pop ecx
jne 0x42d6c2
push 6
push dword [ebp - 0x38]
push dword [0x4d6314]
call fcn.0043eeea
add esp, 0xc
test al, al
je 0x42d70d
mov esi, dword [ebp - 0x38]
cmp word [esi + 0xc], bx
jne 0x42d710
mov eax, dword [0x4d7fe4]
jmp 0x42d764
cmp edi, 0x440047
jne 0x42d710
push esi
push dword [0x4d6310]
call fcn.0043ef29
test al, al
pop ecx
pop ecx
jne 0x42d706
push 5
push dword [ebp - 0x38]
push dword [0x4d6310]
call fcn.0043eeea
add esp, 0xc
test al, al
je 0x42d70d
mov esi, dword [ebp - 0x38]
cmp word [esi + 0xa], bx
jne 0x42d710
mov eax, dword [0x4d7fec]
jmp 0x42d764
mov esi, dword [ebp - 0x38]
cmp dword [0x4d7ff0], ebx
je 0x42d759
cmp edi, 0x4c004f
jne 0x42d759
push esi
push dword [0x4d630c]
call fcn.0043ef29
test al, al
pop ecx
pop ecx
jne 0x42d752
push 5
push dword [ebp - 0x38]
push dword [0x4d630c]
call fcn.0043eeea
mov esi, dword [ebp - 0x38]
add esp, 0xc
test al, al
je 0x42d759
cmp word [esi + 0xa], bx
jne 0x42d759
mov eax, dword [0x4d7ff0]
jmp 0x42d764
push esi
mov byte [ebp - 7], 1
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
cmp eax, ebx
mov dword [ebp - 0x30], eax
jne 0x42d788
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 4], eax
cmp dword [ebp - 0x30], ebx
jne 0x42d788
cmp byte [ebp - 0x1f], 0
jne 0x42d972
jmp 0x42e8c5
push dword [ebp - 0x28]
lea ecx, [ebp - 0x44]
call fcn.00402d16
test byte [ebp + 0x17], 2
push dword [ebp - 0x44]
je 0x42d7a6
mov ecx, dword [ebp - 0x30]
call fcn.00410036
jmp 0x42d7af
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
mov dword [ebp - 0x24], eax
jne 0x42d8a3
cmp byte [ebp - 0x29], 0
je 0x42d89a
cmp byte [ebp - 5], 0
jne 0x42d89a
mov esi, dword [ebp - 0x28]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ebx, eax
xor eax, eax
lea edi, [ebx + ebx]
mov ax, word [edi + esi - 2]
and eax, 0xffdf
cmp ax, 0x41
je 0x42d89a
cmp ax, 0x57
je 0x42d89a
push 4
call fcn.004aa268
mov esi, eax
test esi, esi
pop ecx
je 0x42d818
lea eax, [ebx + 2]
push eax
mov ecx, esi
call fcn.00443f79
jmp 0x42d81a
xor esi, esi
push esi
lea ecx, [ebp - 0x274]
call fcn.0040f3aa
push ebx
push dword [ebp - 0x28]
push dword [esi]
call fcn.004055fd
mov esi, dword [esi]
mov dword [ebp - 0x28], esi
add esi, edi
and word [esi + 2], 0
add esp, 0xc
cmp byte [ebp + 0x17], 2
mov word [esi], 0x57
push dword [ebp - 0x44]
jne 0x42d858
mov ecx, dword [ebp - 0x30]
call fcn.00410036
jmp 0x42d861
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
mov dword [ebp - 0x24], eax
jne 0x42d8a3
push dword [ebp - 0x28]
lea ecx, [ebp - 0x50]
mov word [esi], 0x41
call fcn.00402d16
push dword [eax]
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x24], eax
call fcn.0043db4f
cmp dword [ebp - 0x24], 0
je 0x42d89a
mov byte [ebp - 5], 0x40
jmp 0x42d8a3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x44]
call fcn.0043db4f
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x74]
test eax, eax
jle 0x42d8c5
test ebx, ebx
je 0x42d8c5
dec eax
js 0x42d8c5
inc eax
dec eax
mov ebx, dword [ebx]
jne 0x42d8bd
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x8c], 0
je 0x42d92c
cmp dword [ebp - 0x78], 0
jge 0x42d932
mov eax, dword [ebx]
or dword [ebp + 0x14], 0xffffffff
mov esi, 0x4ca304
lea edi, [ebp - 0x284]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp + 0x14]
push ecx
push 0x800
push 1
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x8c]
push ecx
lea ecx, [ebp - 0x284]
push ecx
movsd dword es:[edi], dword [esi]
mov eax, dword [eax + 0x14]
push ebx
call eax
test eax, eax
mov ecx, dword [ebp + 0x14]
lea edx, [ecx + 6]
mov dword [ebp - 0x78], edx
jne 0x42d919
test ecx, ecx
jge 0x42d92c
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x42d924
inc eax
mov dword [ebp - 0x6c], eax
jmp 0x42e8c5
cmp dword [ebp - 0x78], 0
jl 0x42d947
cmp dword [ebp - 0x78], 0
mov esi, ebx
jl 0x42d94d
mov eax, dword [ebx]
mov ecx, dword [ebp - 0x78]
mov ebx, dword [eax + ecx*4]
mov dword [ebp - 0x24], ebx
jmp 0x42d94d
mov esi, dword [ebp - 0x250]
cmp byte [ebp - 0x1f], 0
je 0x42d9b9
cmp byte [ebp - 7], 1
jne 0x42d972
cmp byte [ebp - 6], 0
jg 0x42d972
cmp dword [ebp - 0x30], 0
je 0x42d972
push dword [ebp - 0x30]
mov byte [ebp - 7], 2
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp byte [ebp - 0x31], 0
je 0x42d980
mov esi, dword [ebp - 0x24]
jmp 0x42e9bf
cmp dword [ebp - 0x24], 0
je 0x42d99e
push dword [ebp - 0x24]
lea eax, [ebp - 0x2fc]
push str.0x_p
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x2fc]
push eax
push dword [ebp - 0x4c]
call fcn.00443666
cmp byte [ebp - 7], 2
jmp 0x42d350
xor edi, edi
cmp ebx, edi
mov byte [ebp + 0x17], 0
je case.default.0x42e348
test byte [ebp - 0x54], 7
je 0x42da24
call fcn.00442b63
cmp dword [ebp - 0x54], edi
je 0x42da24
cmp dword [0x4d84b0], edi
je 0x42da24
cmp dword [0x4d84b4], edi
je 0x42da24
push 0x4d8d24
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, dword [ebp + 8]
mov al, byte [edi + 0xe]
test al, 2
jne 0x42da17
test al, 1
jne 0x42da04
mov byte [ebp + 0x17], 1
or byte [ebp + 0x17], 2
or al, 3
push 0
mov byte [edi + 0xe], al
call dword [0x4d84b0]
jmp 0x42da22
push 0x4d8d24
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor edi, edi
cmp byte [ebp - 0x15], 0
je 0x42da31
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp byte [ebp - 0x29], 0
je 0x42dae3
cmp byte [ebp - 5], 0x40
mov dword [ebp - 0x74], edi
mov byte [ebp - 0x14], 1
mov word [ebp + 0x12], di
jne 0x42da66
cmp dword [ebp - 0x10], edi
je 0x42da6b
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [ebp - 0x10]
lea ecx, [ebp - 0x74]
call fcn.00443ee3
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jne 0x42da71
lea eax, [ebp + 0x12]
mov dword [ebp - 0x10], eax
mov esi, dword [0x4d7fa0]
push 0
push dword [ebp + 8]
call fcn.00412371
cmp dword [ebp - 0x28], 0
pop ecx
pop ecx
push 5
pop edi
je 0x42dabd
push 0x12
push dword [ebp - 0x28]
push str.InstallHinfSection
call fcn.0043eeea
add esp, 0xc
test al, al
je 0x42dabd
mov eax, dword [ebp - 0x28]
cmp word [eax + 0x24], 0
je 0x42dab9
cmp word [eax + 0x26], 0
mov word [eax + 0x24], 1
jne 0x42dabd
xor edi, edi
xor esi, esi
mov eax, dword [ebp + 8]
push edi
push dword [ebp - 0x10]
push esi
push dword [eax + 0x28]
call fcn.0043e129
pop ecx
push eax
call ebx
lea ecx, [ebp - 0x74]
mov dword [ebp - 4], eax
call fcn.0043db4f
xor edi, edi
jmp case.default.0x42e348
cmp dword [ebp + 0x10], 1
mov ecx, dword [ebp - 0x40]
jne 0x42e333
push 0x64
pop eax
cmp eax, ecx
sbb al, al
inc al
cmp ecx, 0x10
mov byte [ebp - 0x14], al
ja case.default.0x42db05
jmp dword [ecx*4 + 0x42ea72]
push esi
call ebx
jmp 0x42db1b
push dword [ebp - 0x24c]
push esi
call ebx
pop ecx
pop ecx
jmp 0x42e862
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0xc
jmp 0x42e862
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x10
jmp 0x42e862
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x14
jmp 0x42e862
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x18
jmp 0x42e862
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x1c
jmp 0x42e862
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x20
jmp 0x42e862
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x24
jmp 0x42e862
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x28
jmp 0x42e862
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x2c
jmp 0x42e862
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x30
jmp 0x42e862
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x34
jmp 0x42e862
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x38
jmp 0x42e862
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x3c
jmp 0x42e862
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x40
jmp 0x42e862
cmp ecx, 0x14
ja 0x42df07
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x50
jmp 0x42e862
cmp ecx, 0x1e
ja 0x42dfc9
push dword [ebp - 0x1dc]
push dword [ebp - 0x1e0]
push dword [ebp - 0x1e4]
push dword [ebp - 0x1e8]
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
push dword [ebp - 0x1f4]
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x78
jmp 0x42e862
cmp ecx, 0x28
ja 0x42e0ca
push dword [ebp - 0x1b4]
push dword [ebp - 0x1b8]
push dword [ebp - 0x1bc]
push dword [ebp - 0x1c0]
push dword [ebp - 0x1c4]
push dword [ebp - 0x1c8]
push dword [ebp - 0x1cc]
push dword [ebp - 0x1d0]
push dword [ebp - 0x1d4]
push dword [ebp - 0x1d8]
push dword [ebp - 0x1dc]
push dword [ebp - 0x1e0]
push dword [ebp - 0x1e4]
push dword [ebp - 0x1e8]
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
push dword [ebp - 0x1f4]
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0xa0
jmp 0x42e862
cmp ecx, 0x64
ja case.default.0x42e348
push dword [ebp - 0xc4]
push dword [ebp - 0xc8]
push dword [ebp - 0xcc]
push dword [ebp - 0xd0]
push dword [ebp - 0xd4]
push dword [ebp - 0xd8]
push dword [ebp - 0xdc]
push dword [ebp - 0xe0]
push dword [ebp - 0xe4]
push dword [ebp - 0xe8]
push dword [ebp - 0xec]
push dword [ebp - 0xf0]
push dword [ebp - 0xf4]
push dword [ebp - 0xf8]
push dword [ebp - 0xfc]
push dword [ebp - 0x100]
push dword [ebp - 0x104]
push dword [ebp - 0x108]
push dword [ebp - 0x10c]
push dword [ebp - 0x110]
push dword [ebp - 0x114]
push dword [ebp - 0x118]
push dword [ebp - 0x11c]
push dword [ebp - 0x120]
push dword [ebp - 0x124]
push dword [ebp - 0x128]
push dword [ebp - 0x12c]
push dword [ebp - 0x130]
push dword [ebp - 0x134]
push dword [ebp - 0x138]
push dword [ebp - 0x13c]
push dword [ebp - 0x140]
push dword [ebp - 0x144]
push dword [ebp - 0x148]
push dword [ebp - 0x14c]
push dword [ebp - 0x150]
push dword [ebp - 0x154]
push dword [ebp - 0x158]
push dword [ebp - 0x15c]
push dword [ebp - 0x160]
push dword [ebp - 0x164]
push dword [ebp - 0x168]
push dword [ebp - 0x16c]
push dword [ebp - 0x170]
push dword [ebp - 0x174]
push dword [ebp - 0x178]
push dword [ebp - 0x17c]
push dword [ebp - 0x180]
push dword [ebp - 0x184]
push dword [ebp - 0x188]
push dword [ebp - 0x18c]
push dword [ebp - 0x190]
push dword [ebp - 0x194]
push dword [ebp - 0x198]
push dword [ebp - 0x19c]
push dword [ebp - 0x1a0]
push dword [ebp - 0x1a4]
push dword [ebp - 0x1a8]
push dword [ebp - 0x1ac]
push dword [ebp - 0x1b0]
push dword [ebp - 0x1b4]
push dword [ebp - 0x1b8]
push dword [ebp - 0x1bc]
push dword [ebp - 0x1c0]
push dword [ebp - 0x1c4]
push dword [ebp - 0x1c8]
push dword [ebp - 0x1cc]
push dword [ebp - 0x1d0]
push dword [ebp - 0x1d4]
push dword [ebp - 0x1d8]
push dword [ebp - 0x1dc]
push dword [ebp - 0x1e0]
push dword [ebp - 0x1e4]
push dword [ebp - 0x1e8]
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
push dword [ebp - 0x1f4]
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
add esp, 0x190
jmp 0x42e862
push 0x14
pop eax
cmp eax, ecx
sbb al, al
inc al
cmp ecx, 0x14
mov byte [ebp - 0x14], al
ja case.default.0x42e348
jmp dword [ecx*4 + 0x42eab6]
call ebx
jmp 0x42e862
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
jmp 0x42e862
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
push dword [ebp - 0x240]
push dword [ebp - 0x244]
push dword [ebp - 0x248]
push dword [ebp - 0x24c]
push esi
call ebx
mov dword [ebp - 4], eax
cmp byte [ebp - 0x15], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x6c], eax
je 0x42e889
cmp byte [ebp - 0x15], 2
jne 0x42e880
push eax
call fcn.0043843b
pop ecx
jmp 0x42e886
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x6c], eax
cmp byte [ebp - 7], 0
jle 0x42e8a3
cmp byte [ebp - 6], 0
jg 0x42e8a3
cmp dword [ebp - 0x30], edi
je 0x42e8a3
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp byte [ebp + 0x17], 0
je 0x42e8c5
call dword [0x4d84b4]
mov al, byte [ebp + 0x17]
mov ecx, dword [ebp + 8]
not al
and byte [ecx + 0xe], al
push 0x4d8d24
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [ebp - 0x11], 0
jg 0x42e8d7
push dword [ebp - 0x90]
call fcn.004119ff
pop ecx
mov eax, dword [ebp - 0x68]
or eax, dword [ebp - 0x64]
je 0x42e8e5
cmp byte [ebp - 0x11], 0
jg 0x42e8ea
call fcn.004147e0
cmp byte [ebp - 0x1f], 0
jne 0x42d356
mov eax, dword [ebp - 0x4c]
mov ax, word [eax]
xor edi, edi
cmp ax, di
je 0x42e954
cmp ax, 0x2a
je 0x42e94b
cmp byte [ebp - 0x14], 0
je 0x42e94b
cmp byte [ebp - 0x39], 0
mov eax, str.0x_X
jne 0x42e91d
mov eax, 0x4c21d0
cmp byte [ebp - 9], 0
je 0x42e935
cmp byte [ebp - 8], 0
je 0x42e935
cmp dword [ebp - 4], edi
jne 0x42e937
mov eax, 0x4bca0c
jmp 0x42e937
inc eax
inc eax
push dword [ebp - 4]
push eax
lea eax, [ebp - 0x2fc]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp byte [ebp - 0x15], 0
jne 0x42e954
mov dword [ebp - 0x6c], edi
mov ecx, dword [ebp - 0x60]
cmp ecx, edi
je 0x42e960
call fcn.0040ffef
mov eax, dword [ebp - 0x4c]
cmp word [eax], di
je 0x42e99c
cmp word [eax], 0x2a
je 0x42e99c
cmp dword [ebp - 0x84], edi
je 0x42e98c
cmp dword [ebp - 4], edi
je 0x42e98c
push eax
push dword [ebp - 4]
push dword [ebp + 8]
call fcn.0042bcc0
add esp, 0xc
jmp 0x42e99c
lea ecx, [ebp - 0x2fc]
push ecx
mov ecx, dword [ebp + 8]
push eax
call fcn.00443666
mov esi, dword [ebp - 0x5c]
cmp esi, edi
jge 0x42e9bc
mov eax, dword [ebp + esi*4 - 0x7f8]
cmp eax, edi
je 0x42e9b9
lea ecx, [ebp + 8]
mov dword [ebp + 8], eax
call fcn.0043db4f
inc esi
js 0x42e9a3
mov esi, dword [ebp - 0x6c]
lea ecx, [ebp - 0x90]
call fcn.0043db4f
lea ecx, [ebp - 0x88]
call fcn.0043db4f
lea ecx, [ebp - 0x274]
call fcn.00455eba
lea ecx, [ebp - 0x274]
call fcn.0043db4f
lea ecx, [ebp - 0x268]
call fcn.0043db4f
lea ecx, [ebp - 0x4c]
call fcn.0043db4f
lea ecx, [ebp - 0x94]
call fcn.0043db4f
mov eax, esi
jmp 0x42ea68
lea ecx, [ebp - 0x90]
call fcn.0043db4f
lea ecx, [ebp - 0x88]
call fcn.0043db4f
lea ecx, [ebp - 0x274]
call fcn.00455eba
lea ecx, [ebp - 0x274]
call fcn.0043db4f
lea ecx, [ebp - 0x268]
call fcn.0043db4f
lea ecx, [ebp - 0x4c]
call fcn.0043db4f
lea ecx, [ebp - 0x94]
call fcn.0043db4f
mov al, byte [ebp - 0x31]
neg al
sbb eax, eax
and eax, 0x7ff8ffa9
add eax, 0x80070057
pop edi
pop esi
pop ebx
leave
ret 0x10