Function at 0x423780
Capabilities:
Accept command line arguments
Check mutex on windows
Create mailslot
Create thread
Delete file
Extract resource via kernel32 functions
Get file system object information

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1450
call fcn.00409c20
mov eax, dword [0x437040]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0xb1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0xb18], 0
mov dword [ebp - 0xb0c], 0
mov dword [ebp - 0xb10], 0
xor eax, eax
mov word [ebp - 0x698], ax
push 0x45e
push 0
lea ecx, [ebp - 0x696]
push ecx
call fcn.00401a60
add esp, 0xc
xor edx, edx
mov word [ebp - 0xb00], dx
push 0x45e
push 0
lea eax, [ebp - 0xafe]
push eax
call fcn.00401a60
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0xd20], cx
push 0x1fe
push 0
lea edx, [ebp - 0xd1e]
push edx
call fcn.00401a60
add esp, 0xc
xor eax, eax
mov word [ebp - 0x210], ax
push 0x1fe
push 0
lea ecx, [ebp - 0x20e]
push ecx
call fcn.00401a60
add esp, 0xc
xor edx, edx
mov word [ebp - 0xf30], dx
push 0x1fe
push 0
lea eax, [ebp - 0xf2e]
push eax
call fcn.00401a60
add esp, 0xc
mov dword [ebp - 0x21c], 0
lea ecx, [ebp - 0xd25]
call fcn.00401000
mov dword [ebp - 0x220], str.ErrorInfo.log
lea ecx, [ebp - 0xb00]
mov dword [ebp - 0xd24], ecx
call dword [sym.imp.KERNEL32.dll_GetACP]
mov dword [ebp - 0x218], eax
mov edx, dword [ebp - 0x218]
push edx
call fcn.0040d8f0
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
lea ecx, [ebp - 0xf31]
call fcn.00401000
lea eax, [ebp - 0xf31]
push eax
call fcn.00427820
lea ecx, [ebp - 0xf31]
call fcn.00401a20
mov ecx, dword [ebp + 8]
mov dword [0x450ec8], ecx
push 0x118
push 0x451130
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [ebp - 5]
call fcn.00401000
lea ecx, [ebp - 0x699]
call fcn.00401000
lea edx, [ebp - 5]
push edx
call fcn.004255d0
mov dword [ebp - 4], eax
lea eax, [ebp - 0x699]
push eax
call fcn.00428c00
lea ecx, [ebp - 0xb0c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0xd2c], eax
cmp dword [ebp - 0xb0c], 2
jle 0x423ade
mov dword [ebp - 0xf38], 0xffffffff
lea edx, [ebp - 0x698]
mov dword [ebp - 0xf40], edx
mov dword [ebp - 0xf3c], 0
lea ecx, [ebp - 0xf41]
call fcn.00401000
mov dword [ebp - 0xb1c], 0x270f
mov dword [ebp - 0xb04], 0
jmp 0x42398b
mov eax, dword [ebp - 0xb04]
add eax, 1
mov dword [ebp - 0xb04], eax
mov ecx, dword [ebp - 0xb04]
movzx edx, word [ecx*2 + 0x451130]
test edx, edx
je 0x4239d8
mov eax, dword [ebp - 0xb04]
movzx ecx, word [eax*2 + 0x451130]
cmp ecx, 0x5c
je 0x4239c3
mov edx, dword [ebp - 0xb04]
movzx eax, word [edx*2 + 0x451130]
cmp eax, 0x2f
jne 0x4239d6
mov ecx, dword [ebp - 0xb04]
lea edx, [ecx*2 + 0x451130]
mov dword [ebp - 0xf3c], edx
jmp 0x42397c
cmp dword [ebp - 0xf3c], 0
je 0x4239fb
xor eax, eax
mov ecx, dword [ebp - 0xf3c]
mov word [ecx], ax
mov edx, dword [ebp - 0xf3c]
add edx, 2
mov dword [0x437ccc], edx
mov eax, dword [ebp - 0xd2c]
mov ecx, dword [eax + 4]
push ecx
call fcn.00403932
add esp, 4
mov dword [ebp - 0xf38], eax
mov edx, dword [ebp - 0xf40]
push edx
mov eax, dword [ebp - 0xf38]
push eax
lea ecx, [ebp - 0xf41]
push ecx
call fcn.00426ea0
mov dword [ebp - 4], eax
lea edx, [ebp - 0xf38]
push edx
mov eax, dword [ebp - 0xf40]
push eax
lea ecx, [ebp - 0xf41]
push ecx
call fcn.00425d80
mov dword [ebp - 4], eax
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0xf38]
push eax
push str._____d___d__r_n
mov ecx, dword [ebp - 0xf40]
add ecx, 0x27
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x10
push 0x433594
mov edx, dword [ebp - 0xf40]
push edx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push str.wiatrcvw.txt
push 0x451130
push 0x4335bc
lea eax, [ebp - 0xb00]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ecx, dword [ebp - 0xf40]
push ecx
mov edx, dword [ebp - 0xf40]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea eax, [ebp - 0xb00]
push eax
call fcn.004012c0
add esp, 0xc
lea ecx, [ebp - 0xf41]
call fcn.00401a20
jmp 0x424b77
push str.GlobalFileEventMultexSW
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x450628], eax
cmp dword [0x450628], 0
jne 0x423b16
mov dword [ebp - 0xb1c], 0x270e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb18], eax
jmp 0x424b77
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb18], eax
cmp dword [ebp - 0xb18], 0xb7
jne 0x423b47
mov dword [ebp - 0xb1c], 0x270d
mov dword [ebp - 0xb18], 0
jmp 0x424b77
lea ecx, [ebp - 0x1168]
call fcn.00425580
push 1
lea ecx, [ebp - 0x1168]
call fcn.004252a0
test eax, eax
je 0x423b81
lea ecx, [ebp - 0x1168]
push ecx
call fcn.00412390
push 1
lea ecx, [ebp - 0x1168]
call fcn.004251c0
jmp 0x423c74
mov dword [ebp - 0xb1c], 0x3e2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb18], eax
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov eax, dword [ebp - 0x220]
push eax
push 0x451130
push 0x4335fc
lea ecx, [ebp - 0xd20]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov edx, dword [ebp - 0xb18]
push edx
lea ecx, [ebp - 0x1168]
call fcn.004254b0
push eax
movzx eax, word [ebp - 0x224]
push eax
movzx ecx, word [ebp - 0x226]
push ecx
movzx edx, word [ebp - 0x228]
push edx
movzx eax, word [ebp - 0x22a]
push eax
movzx ecx, word [ebp - 0x22e]
push ecx
movzx edx, word [ebp - 0x230]
push edx
push str._d__02d__02d__02d:_02d:_02d__s_Step___d__r_n
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov ecx, dword [ebp - 0xd24]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x698]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0xd24]
push eax
mov ecx, dword [ebp - 0xd24]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0xd20]
push edx
call fcn.004012c0
add esp, 0xc
lea ecx, [ebp - 0x1168]
call fcn.004254f0
jmp 0x424b77
lea ecx, [ebp - 0x1168]
call fcn.004254f0
mov dword [ebp - 0x116c], 0
mov dword [ebp - 0xb04], 0
jmp 0x423ca4
mov eax, dword [ebp - 0xb04]
add eax, 1
mov dword [ebp - 0xb04], eax
mov ecx, dword [ebp - 0xb04]
movzx edx, word [ecx*2 + 0x451130]
test edx, edx
je 0x423cf1
mov eax, dword [ebp - 0xb04]
movzx ecx, word [eax*2 + 0x451130]
cmp ecx, 0x5c
je 0x423cdc
mov edx, dword [ebp - 0xb04]
movzx eax, word [edx*2 + 0x451130]
cmp eax, 0x2f
jne 0x423cef
mov ecx, dword [ebp - 0xb04]
lea edx, [ecx*2 + 0x451130]
mov dword [ebp - 0x116c], edx
jmp 0x423c95
cmp dword [ebp - 0x116c], 0
je 0x423d14
xor eax, eax
mov ecx, dword [ebp - 0x116c]
mov word [ecx], ax
mov edx, dword [ebp - 0x116c]
add edx, 2
mov dword [0x437ccc], edx
mov eax, dword [0x437ccc]
push eax
push 0x433660
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x423d38
mov dword [ebp - 0xb1c], 0x3df
jmp 0x424b77
push str.parser_manifest.xml
push 0x451130
push 0x4336a8
lea ecx, [ebp - 0x210]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push str.regist.txt
push 0x451130
push 0x4336cc
lea edx, [ebp - 0xf30]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0xb18]
push eax
lea ecx, [ebp - 0x210]
push ecx
call fcn.00401010
add esp, 8
test eax, eax
jge 0x423d9f
mov dword [ebp - 0xb1c], 0x3e0
jmp 0x424b77
lea edx, [ebp - 0xb18]
push edx
lea eax, [ebp - 0xf30]
push eax
call fcn.00401010
add esp, 8
test eax, eax
jge 0x423dea
push 0
push 9
lea ecx, [ebp - 0xf30]
push ecx
lea edx, [ebp - 0x210]
push edx
call fcn.00417300
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x423de8
mov dword [ebp - 0xb1c], 0x3e9
jmp 0x424b77
jmp 0x423e19
push 0
push 1
lea eax, [ebp - 0xf30]
push eax
lea ecx, [ebp - 0x210]
push ecx
call fcn.00417300
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x423e19
mov dword [ebp - 0xb1c], 0x3ea
jmp 0x424b77
push str.parserchk.txt
push 0x451130
push 0x4336f4
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0xb18]
push eax
lea ecx, [ebp - 0x698]
push ecx
call fcn.00401010
add esp, 8
test eax, eax
jl 0x423e9f
mov dword [0x450eec], 1
push str.parsernot.txt
push 0x451130
push 0x43371c
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0xb18]
push eax
lea ecx, [ebp - 0x698]
push ecx
call fcn.00401010
add esp, 8
test eax, eax
jl 0x423e9f
mov dword [0x450eec], 2
push 0x451130
push str._sHTTP_Parser.chm
push 0x451360
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp - 0x117c], 0
mov dword [ebp - 0x1170], 0
mov dword [ebp - 0x1174], 0
mov dword [ebp - 0x1178], 0
push str.BINTYPE
push 0x12d
mov edx, dword [0x450ec8]
push edx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x117c], eax
cmp dword [ebp - 0x117c], 0
je 0x423fab
push 0x460
push 0
lea eax, [ebp - 0x698]
push eax
call fcn.00401a60
add esp, 0xc
cmp dword [ebp - 0x117c], 0
je 0x423f3f
mov ecx, dword [ebp - 0x117c]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x1170], eax
cmp dword [ebp - 0x117c], 0
je 0x423f5f
mov eax, dword [ebp - 0x117c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x1174], eax
cmp dword [ebp - 0x1170], 0
je 0x423f7b
mov edx, dword [ebp - 0x1170]
push edx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x1178], eax
lea eax, [ebp - 0x698]
push eax
push str.logo.gif
mov ecx, dword [ebp - 0x1174]
push ecx
mov edx, dword [ebp - 0x1178]
push edx
call fcn.004122c0
lea eax, [ebp - 0x698]
push eax
call fcn.0040cc80
mov dword [0x450ecc], eax
cmp dword [ebp - 0x1170], 0
je 0x423fc1
mov ecx, dword [ebp - 0x1170]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeResource]
push 0x451130
push str._s_themes_b_good.bmp
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x451130
push str._s_themes_b_bad.bmp
lea eax, [ebp - 0xb00]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x451130
push str._s_themes_b_desktop.bmp
lea ecx, [ebp - 0xd20]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea edx, [ebp - 0x698]
push edx
call fcn.0040cc80
mov dword [0x450ed0], eax
lea eax, [ebp - 0xb00]
push eax
call fcn.0040cc80
mov dword [0x450ed4], eax
lea ecx, [ebp - 0xd20]
push ecx
call fcn.0040cc80
mov dword [0x450ed8], eax
mov dword [ebp - 0x1180], 0x900000
push 0
push 0
push 0x878
push str..mailslotparser_manage
call dword [sym.imp.KERNEL32.dll_CreateMailslotW]
mov dword [0x450634], eax
cmp dword [0x450634], 0xffffffff
jne 0x424164
mov dword [ebp - 0xb1c], 0x3e1
mov dword [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb18], eax
mov dword [0x450634], 0
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov eax, dword [ebp - 0x220]
push eax
push 0x451130
push 0x433830
lea ecx, [ebp - 0xd20]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov edx, dword [ebp - 0xb18]
push edx
push str.Mail_Handle_Create_Error
movzx eax, word [ebp - 0x224]
push eax
movzx ecx, word [ebp - 0x226]
push ecx
movzx edx, word [ebp - 0x228]
push edx
movzx eax, word [ebp - 0x22a]
push eax
movzx ecx, word [ebp - 0x22e]
push ecx
movzx edx, word [ebp - 0x230]
push edx
push 0x433870
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov ecx, dword [ebp - 0xd24]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x698]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0xd24]
push eax
mov ecx, dword [ebp - 0xd24]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0xd20]
push edx
call fcn.004012c0
add esp, 0xc
jmp 0x424b77
push str.PARSER_SHARED_MAPMEMORY
mov eax, dword [ebp - 0x1180]
push eax
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [0x450638], eax
cmp dword [0x450638], 0
jne 0x424278
mov dword [ebp - 0xb1c], 0x3e1
mov dword [ebp - 4], 3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb18], eax
lea ecx, [ebp - 0x230]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edx, dword [ebp - 0x220]
push edx
push 0x451130
push 0x4338ec
lea eax, [ebp - 0xd20]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ecx, dword [ebp - 0xb18]
push ecx
push 0x4338f8
movzx edx, word [ebp - 0x224]
push edx
movzx eax, word [ebp - 0x226]
push eax
movzx ecx, word [ebp - 0x228]
push ecx
movzx edx, word [ebp - 0x22a]
push edx
movzx eax, word [ebp - 0x22e]
push eax
movzx ecx, word [ebp - 0x230]
push ecx
push 0x433928
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov eax, dword [ebp - 0xd24]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x698]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0xd24]
push edx
mov eax, dword [ebp - 0xd24]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea ecx, [ebp - 0xd20]
push ecx
call fcn.004012c0
add esp, 0xc
jmp 0x424b77
mov edx, dword [ebp - 0x1180]
push edx
push 0
push 0
push 2
mov eax, dword [0x450638]
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [0x450640], eax
cmp dword [0x450640], 0
jne 0x42438b
mov dword [ebp - 0xb1c], 0x3e1
mov dword [ebp - 4], 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb18], eax
lea ecx, [ebp - 0x230]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edx, dword [ebp - 0x220]
push edx
push 0x451130
push 0x433974
lea eax, [ebp - 0xd20]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ecx, dword [ebp - 0xb18]
push ecx
push str.Map_Handle_Create_Error
movzx edx, word [ebp - 0x224]
push edx
movzx eax, word [ebp - 0x226]
push eax
movzx ecx, word [ebp - 0x228]
push ecx
movzx edx, word [ebp - 0x22a]
push edx
movzx eax, word [ebp - 0x22e]
push eax
movzx ecx, word [ebp - 0x230]
push ecx
push 0x4339b0
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov eax, dword [ebp - 0xd24]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x698]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0xd24]
push edx
mov eax, dword [ebp - 0xd24]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea ecx, [ebp - 0xd20]
push ecx
call fcn.004012c0
add esp, 0xc
jmp 0x424b77
mov edx, dword [0x450640]
add edx, 0x100000
mov dword [0x451af8], edx
mov dword [ebp - 0x1188], 8
mov dword [ebp - 0x1184], 0x3ff
lea eax, [ebp - 0x1188]
push eax
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push 0x5460
push 0
push 0x449688
call fcn.00401a60
add esp, 0xc
push 0x4339fc
push 0x451130
push 0x433a18
lea ecx, [ebp - 0x698]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea edx, [ebp - 0xb18]
push edx
lea eax, [ebp - 0x698]
push eax
call fcn.00401010
add esp, 8
test eax, eax
jl 0x424424
push 0x449688
push 0x5460
lea ecx, [ebp - 0x698]
push ecx
call fcn.004010f0
add esp, 0xc
mov dword [0x450edc], 1
lea edx, [ebp - 0xb08]
push edx
push 0
push 0
push 0x41b2d0
push 0
push 0
call fcn.00403792
add esp, 0x18
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
jne 0x424545
mov dword [ebp - 0xb1c], 0x3e1
mov dword [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb18], eax
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [ebp - 0x220]
push ecx
push 0x451130
push 0x433a24
lea edx, [ebp - 0xd20]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov eax, dword [ebp - 0xb18]
push eax
push str.sessionSearchThread_Call_Error
movzx ecx, word [ebp - 0x224]
push ecx
movzx edx, word [ebp - 0x226]
push edx
movzx eax, word [ebp - 0x228]
push eax
movzx ecx, word [ebp - 0x22a]
push ecx
movzx edx, word [ebp - 0x22e]
push edx
movzx eax, word [ebp - 0x230]
push eax
push str._d__02d__02d__02d:_02d:_02d__s___d__r_n
lea ecx, [ebp - 0x698]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov edx, dword [ebp - 0xd24]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x698]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, dword [ebp - 0xd24]
push ecx
mov edx, dword [ebp - 0xd24]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea eax, [ebp - 0xd20]
push eax
call fcn.004012c0
add esp, 0xc
jmp 0x424b77
call fcn.0040d470
push str._test.html
call fcn.0040ccc0
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
je 0x424794
mov dword [ebp - 0xb04], 0
jmp 0x424582
mov ecx, dword [ebp - 0xb04]
add ecx, 1
mov dword [ebp - 0xb04], ecx
mov edx, dword [ebp - 0xb04]
mov eax, dword [ebp - 0x238]
movzx ecx, word [eax + edx*2]
test ecx, ecx
je 0x4245c3
mov edx, dword [ebp - 0xb04]
mov eax, dword [ebp - 0x238]
movzx ecx, word [eax + edx*2]
cmp ecx, 0x5c
jne 0x4245c1
mov edx, dword [ebp - 0xb04]
mov eax, dword [ebp - 0x238]
lea ecx, [eax + edx*2 + 2]
mov dword [ebp - 0x21c], ecx
jmp 0x424573
cmp dword [ebp - 0x21c], 0
jne 0x4245d6
mov dword [ebp - 0x21c], 0x433ad4
mov edx, dword [ebp - 0x21c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0xb14], eax
mov dword [0x450ee0], 0xffffffff
mov dword [ebp - 0xb04], 0
jmp 0x42460e
mov eax, dword [ebp - 0xb04]
add eax, 1
mov dword [ebp - 0xb04], eax
mov ecx, dword [ebp - 0xb04]
shl ecx, 7
movzx edx, word [ecx + 0x449188]
test edx, edx
je 0x42465b
mov eax, dword [ebp - 0xb14]
push eax
mov ecx, dword [ebp - 0x21c]
push ecx
mov edx, dword [ebp - 0xb04]
shl edx, 7
add edx, 0x449188
push edx
call fcn.004013c0
add esp, 0xc
test eax, eax
jne 0x424659
mov eax, dword [ebp - 0xb04]
mov dword [0x450ee0], eax
jmp 0x42465b
jmp 0x4245ff
cmp dword [0x450ee0], 0xffffffff
jne 0x4246f8
mov dword [ebp - 0x21c], str.msedge.exe
mov ecx, dword [ebp - 0x21c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0xb14], eax
mov dword [0x450ee0], 0xffffffff
mov dword [ebp - 0xb04], 0
jmp 0x4246aa
mov edx, dword [ebp - 0xb04]
add edx, 1
mov dword [ebp - 0xb04], edx
mov eax, dword [ebp - 0xb04]
shl eax, 7
movzx ecx, word [eax + 0x449188]
test ecx, ecx
je 0x4246f8
mov edx, dword [ebp - 0xb14]
push edx
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0xb04]
shl ecx, 7
add ecx, 0x449188
push ecx
call fcn.004013c0
add esp, 0xc
test eax, eax
jne 0x4246f6
mov edx, dword [ebp - 0xb04]
mov dword [0x450ee0], edx
jmp 0x4246f8
jmp 0x42469b
cmp dword [0x450ee0], 0xffffffff
jne 0x424794
mov dword [ebp - 0x21c], str.iexplore.exe
mov eax, dword [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0xb14], eax
mov dword [0x450ee0], 0xffffffff
mov dword [ebp - 0xb04], 0
jmp 0x424747
mov ecx, dword [ebp - 0xb04]
add ecx, 1
mov dword [ebp - 0xb04], ecx
mov edx, dword [ebp - 0xb04]
shl edx, 7
movzx eax, word [edx + 0x449188]
test eax, eax
je 0x424794
mov ecx, dword [ebp - 0xb14]
push ecx
mov edx, dword [ebp - 0x21c]
push edx
mov eax, dword [ebp - 0xb04]
shl eax, 7
add eax, 0x449188
push eax
call fcn.004013c0
add esp, 0xc
test eax, eax
jne 0x424792
mov ecx, dword [ebp - 0xb04]
mov dword [0x450ee0], ecx
jmp 0x424794
jmp 0x424738
push str.parsercommon.data
push 0x451130
push 0x433b44
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0xb18]
push eax
lea ecx, [ebp - 0x698]
push ecx
call fcn.00401010
add esp, 8
test eax, eax
jl 0x424815
push 0x44eae8
push 0x310
lea edx, [ebp - 0x698]
push edx
call fcn.004010f0
add esp, 0xc
test eax, eax
jl 0x42480e
mov eax, dword [0x44eaf0]
mov dword [0x450ee0], eax
mov ecx, dword [0x44eaf4]
mov dword [0x437cb0], ecx
mov edx, dword [0x44eaec]
mov dword [0x450ee4], edx
jmp 0x424815
mov byte [0x44eae8], 0
movzx eax, byte [0x44eae8]
test eax, eax
jne 0x424895
mov byte [0x44eae8], 9
mov byte [0x44eae9], 9
mov byte [0x44eaea], 3
mov byte [0x44eaeb], 3
mov ecx, dword [0x450ee4]
mov dword [0x44eaec], ecx
mov edx, dword [0x450ee0]
mov dword [0x44eaf0], edx
mov eax, dword [0x437cb0]
mov dword [0x44eaf4], eax
mov byte [0x44eaf8], 0
mov byte [0x44eaf9], 0
mov byte [0x44eafa], 0
mov byte [0x44eafc], 0
push 0
push 0x44eae8
push 0x310
lea ecx, [ebp - 0x698]
push ecx
call fcn.004011e0
add esp, 0x10
push 0
push 0
push 0x21
push 0x10
push 0x10
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov dword [0x451a98], eax
cmp dword [0x451a98], 0
je 0x424914
mov dword [ebp - 0x1448], 0x99
jmp 0x4248ce
mov edx, dword [ebp - 0x1448]
add edx, 1
mov dword [ebp - 0x1448], edx
cmp dword [ebp - 0x1448], 0xb5
jg 0x424914
push 0
push 0x10
push 0x10
push 1
movzx eax, word [ebp - 0x1448]
push eax
mov ecx, dword [0x450ec8]
push ecx
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [ebp - 0x1444], eax
mov edx, dword [ebp - 0x1444]
push edx
push 0xffffffffffffffff
mov eax, dword [0x451a98]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
jmp 0x4248bf
push 0x1000
push 0
push 0xff000000
push 0
push 0xf
push 0x14c
mov ecx, dword [0x450ec8]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_LoadImageW]
mov dword [0x451a94], eax
push 0x4000
push 0x2b4
lea edx, [ebp - 0x1440]
push edx
push 0
push 0x433b50
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [0x451a8c], eax
push 0x4001
push 0x2b4
lea eax, [ebp - 0x1440]
push eax
push 0
push 0x433b58
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [0x451a90], eax
push str.RICHED20.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x234], eax
push str.HHCTRL.OCX
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0
je 0x4249c3
push str.HtmlHelpW
mov ecx, dword [ebp - 0x234]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x451b00], eax
push str.imm32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0
je 0x4249f4
push str.ImmAssociateContext
mov edx, dword [ebp - 0x234]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x451afc], eax
push 0x8d
mov eax, dword [0x450ec8]
push eax
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov dword [0x44fb24], eax
push 0
push 0x41f790
push 0
push 0x259
mov ecx, dword [0x450ec8]
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
mov dword [0x450ec0], 0
mov dword [0x450edc], 0
push 0x451130
push str._slist.txt
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x7530
mov ecx, dword [ebp - 0x214]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [ebp - 0x214]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x45063c], 0
je 0x424aa6
push 0x1388
mov eax, dword [0x45063c]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [0x45063c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x437cb4], 5
jne 0x424af2
cmp dword [0x437cc0], 0xa
jle 0x424ac4
mov dword [0x437cc4], 0xa
jmp 0x424ad9
cmp dword [0x437cc0], 0
jle 0x424ad9
mov edx, dword [0x437cc0]
mov dword [0x437cc4], edx
push 0
push 3
lea eax, [ebp - 0xf30]
push eax
lea ecx, [ebp - 0x210]
push ecx
call fcn.00417300
jmp 0x424b33
cmp dword [0x437cc0], 0xa
jle 0x424b07
mov dword [0x437cc4], 0xa
jmp 0x424b1c
cmp dword [0x437cc0], 0
jle 0x424b1c
mov edx, dword [0x437cc0]
mov dword [0x437cc4], edx
push 0
push 2
lea eax, [ebp - 0xf30]
push eax
lea ecx, [ebp - 0x210]
push ecx
call fcn.00417300
push 0
call fcn.00412950
push str.sitelink.txt
push 0x451130
push str._s_s
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 0
push 0x449688
push 0x5460
lea eax, [ebp - 0x698]
push eax
call fcn.004011e0
add esp, 0x10
mov dword [ebp - 4], eax
mov dword [ebp - 0x218], 0x10
cmp dword [0x451a9c], 0
je 0x424b97
mov ecx, dword [0x451a9c]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp dword [0x451a94], 0
je 0x424bad
mov edx, dword [0x451a94]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp dword [0x451a98], 0
je 0x424bc2
mov eax, dword [0x451a98]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp dword [0x450640], 0
je 0x424bd8
mov ecx, dword [0x450640]
push ecx
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
cmp dword [0x450638], 0
je 0x424bee
mov edx, dword [0x450638]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x450634], 0
je 0x424c03
mov eax, dword [0x450634]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x450628], 0
je 0x424c19
mov ecx, dword [0x450628]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0xb1c]
mov dword [ebp - 0x1450], edx
cmp dword [ebp - 0x1450], 0x3df
jg 0x424c53
cmp dword [ebp - 0x1450], 0x3df
je 0x424cfe
cmp dword [ebp - 0x1450], 0
je 0x424cf0
jmp case.default.0x424ce4
cmp dword [ebp - 0x1450], 0x3e9
jg 0x424ca4
cmp dword [ebp - 0x1450], 0x3e9
je 0x424e06
cmp dword [ebp - 0x1450], 0x3e0
je 0x424d34
cmp dword [ebp - 0x1450], 0x3e1
je 0x424d6a
cmp dword [ebp - 0x1450], 0x3e2
je 0x424dc6
jmp case.default.0x424ce4
cmp dword [ebp - 0x1450], 0x270e
jg 0x424ceb
cmp dword [ebp - 0x1450], 0x270d
jge 0x424f57
mov eax, dword [ebp - 0x1450]
sub eax, 0x3ea
mov dword [ebp - 0x1450], eax
cmp dword [ebp - 0x1450], 3
ja case.default.0x424ce4
mov ecx, dword [ebp - 0x1450]
jmp dword [ecx*4 + 0x42501c]
jmp case.default.0x424ce4
xor edx, edx
mov word [ebp - 0x698], dx
jmp 0x424fb1
push 0
call fcn.0040d8f0
test eax, eax
je 0x424d1d
push 0x433c08
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x424d2f
push str.There_is_a_problem_with_the_contents_of_the_module._n__1___I_cannot_run_the_program.
lea ecx, [ebp - 0x698]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x424fb1
push 0
call fcn.0040d8f0
test eax, eax
je 0x424d53
push 0x433d08
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x424d65
push str.I_have_a_problem_with_my_module_configuration._n__2___I_cannot_run_the_program.
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x424fb1
push 0
call fcn.0040d8f0
test eax, eax
je 0x424d97
mov ecx, dword [ebp - 0xb18]
push ecx
mov edx, dword [ebp - 4]
push edx
push 0x433e00
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
jmp 0x424db7
mov ecx, dword [ebp - 0xb18]
push ecx
mov edx, dword [ebp - 4]
push edx
push str.OS_state_is_unstable___d_:__d_
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x218], 0x30
jmp 0x424fb1
push 0
call fcn.0040d8f0
test eax, eax
je 0x424de5
push 0x433ec8
lea ecx, [ebp - 0x698]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x424df7
push str.The_operating_environment_of_the_PC_is_unknown._nAbort_program_execution.
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [ebp - 0x218], 0x30
jmp 0x424fb1
push 0
call fcn.0040d8f0
test eax, eax
je 0x424e2c
mov eax, dword [ebp - 4]
push eax
push 0x433fa8
lea ecx, [ebp - 0x698]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x424e45
mov edx, dword [ebp - 4]
push edx
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__1_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x424fb1
push 0
call fcn.0040d8f0
test eax, eax
je 0x424e70
mov ecx, dword [ebp - 4]
push ecx
push 0x4341a8
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x424e89
mov eax, dword [ebp - 4]
push eax
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__2_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea ecx, [ebp - 0x698]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x424fb1
push 0
call fcn.0040d8f0
test eax, eax
je 0x424eb4
mov edx, dword [ebp - 4]
push edx
push 0x4343a8
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x424ecd
mov ecx, dword [ebp - 4]
push ecx
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__3_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x424fb1
push 0
call fcn.0040d8f0
test eax, eax
je 0x424ef8
mov eax, dword [ebp - 4]
push eax
push 0x4345a8
lea ecx, [ebp - 0x698]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x424f11
mov edx, dword [ebp - 4]
push edx
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__4_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x424fb1
push 0
call fcn.0040d8f0
test eax, eax
je 0x424f3c
mov ecx, dword [ebp - 4]
push ecx
push 0x4347a8
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x424f55
mov eax, dword [ebp - 4]
push eax
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__5_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea ecx, [ebp - 0x698]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x424fb1
push 0
call fcn.0040d8f0
test eax, eax
je 0x424f80
mov edx, dword [ebp - 0xb18]
push edx
push 0x4349a8
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x424f9c
mov ecx, dword [ebp - 0xb18]
push ecx
push 0x4349d8
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp - 0x218], 0x30
jmp 0x424fb1
xor eax, eax
mov word [ebp - 0x698], ax
movzx ecx, word [ebp - 0x698]
test ecx, ecx
je 0x424fdc
mov edx, dword [ebp - 0x218]
push edx
push str._notification_BOX
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0xb1c]
mov dword [ebp - 0x144c], ecx
lea ecx, [ebp - 0x699]
call fcn.00401a20
lea ecx, [ebp - 5]
call fcn.00401a20
lea ecx, [ebp - 0xd25]
call fcn.00401a20
mov eax, dword [ebp - 0x144c]
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.00401a47
mov esp, ebp
pop ebp
ret 0x10