Function at 0x42e760
Capabilities:
Get common file path
Query environment variable
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ad3e4
mov eax, dword fs:[0]
push eax
mov eax, 0xa24c
call fcn.00589140
mov eax, dword [0x6aae20]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
call fcn.005060e0
push 0
mov ecx, dword [ebp - 0x14]
call fcn.00433450
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1b8], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1bc], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1a4], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x150], 1
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x154], 0
mov dword [0x6ace10], 0
mov ecx, dword [ebp - 0x14]
call fcn.00437e50
mov dword [0x6ace00], eax
mov dword [0x6ace04], edx
cmp dword [0x6ace00], 0
jne 0x42e81c
cmp dword [0x6ace04], 0
jne 0x42e81c
or eax, 0xffffffff
jmp 0x42fb75
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x188], 0
mov dword [eax + 0x18c], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x178], 0
push 0x624138
mov ecx, dword [ebp - 0x14]
add ecx, 0x2f8
call fcn.00411540
mov byte [ebp - 0x1014], 0
push 0xfff
push 0
lea eax, [ebp - 0x1013]
push eax
call fcn.00588eb0
add esp, 0xc
push 0
push 0x23
lea eax, [ebp - 0x1014]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
push str.ShengquGamesStartingShot
lea eax, [ebp - 0x1014]
push eax
call fcn.00589180
add esp, 8
lea eax, [ebp - 0x1014]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2a4
call fcn.00411540
push 0x624118
mov ecx, dword [ebp - 0x14]
add ecx, 0x2a4
call fcn.0040cc80
push 0x624108
mov ecx, dword [ebp - 0x14]
add ecx, 0x2a4
call fcn.0040cc80
mov ecx, dword [ebp - 0x14]
add ecx, 0x384
call fcn.00411070
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2a4
call fcn.0040cc80
push 0
mov ecx, dword [ebp - 0x14]
add ecx, 0x2a4
call fcn.00411070
push eax
call fcn.0058a900
add esp, 8
cmp eax, 0xffffffff
jne 0x42e964
mov dword [ebp - 0x1018], 0
lea eax, [ebp - 0x1018]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2a4
call fcn.00411070
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00437ec0
mov dword [ebp - 0x101c], eax
cmp dword [ebp - 0x101c], 0
jne 0x42e964
cmp dword [ebp - 0x1018], 0
je 0x42e964
mov ecx, dword [ebp - 0x14]
add ecx, 0x2a4
call fcn.00411070
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00437f60
mov ecx, dword [ebp - 0x14]
add ecx, 0x2a4
call fcn.00411070
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x26c
call fcn.00411540
push 0x624118
mov ecx, dword [ebp - 0x14]
add ecx, 0x26c
call fcn.0040cc80
mov ecx, dword [ebp - 0x14]
add ecx, 0x384
call fcn.00411070
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x26c
call fcn.0040cc80
mov eax, dword [ebp - 0x14]
add eax, 0x26c
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x250
call fcn.0040c010
push str..ssconf
mov ecx, dword [ebp - 0x14]
add ecx, 0x26c
call fcn.0040cc80
mov ecx, dword [ebp - 0x14]
add ecx, 0x250
call fcn.00411070
push eax
mov eax, dword [0x6b144c]
mov ecx, dword [eax]
mov edx, dword [0x6b144c]
push edx
mov eax, dword [ecx + 4]
call eax
cmp dword [0x6b144c], 0
je 0x42ea22
push 0x22
push 0x22
push 0x6240c8
mov eax, dword [0x6b144c]
mov ecx, dword [eax]
mov edx, dword [0x6b144c]
push edx
mov eax, dword [ecx + 8]
call eax
push str.dataupload.ssconf
mov ecx, dword [ebp - 0x14]
add ecx, 0x288
call fcn.00411540
push 0x67eed6
lea ecx, [ebp - 0x1038]
call fcn.00410e00
mov dword [ebp - 4], 0
push 1
push str.DUCONF
mov ecx, dword [ebp - 0x14]
add ecx, 0x288
call fcn.00411070
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2a4
call fcn.00411070
push eax
push 0xb5
mov ecx, dword [ebp - 0x14]
call fcn.00438cd0
mov dword [ebp - 0x103c], eax
cmp dword [ebp - 0x103c], 0
jne 0x42eb2f
mov eax, dword [ebp - 0x14]
add eax, 0x288
push eax
push 0x624118
mov ecx, dword [ebp - 0x14]
add ecx, 0x2a4
push ecx
lea edx, [ebp - 0xa248]
push edx
call fcn.0042c3b0
add esp, 0xc
mov dword [ebp - 0xa24c], eax
mov eax, dword [ebp - 0xa24c]
mov dword [ebp - 0xa250], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xa250]
push ecx
lea edx, [ebp - 0xa22c]
push edx
call fcn.0043ac70
add esp, 0xc
mov dword [ebp - 0xa254], eax
mov eax, dword [ebp - 0xa254]
mov dword [ebp - 0xa258], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0xa258]
push ecx
lea ecx, [ebp - 0x1038]
call fcn.0040c010
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa22c]
call fcn.004116c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa248]
call fcn.004116c0
jmp 0x42ec25
cmp dword [ebp - 0x103c], 1
jne 0x42ebc8
mov byte [ebp - 0x203c], 0
push 0xfff
push 0
lea eax, [ebp - 0x203b]
push eax
call fcn.00588eb0
add esp, 0xc
push 0x1000
lea eax, [ebp - 0x203c]
push eax
push str._temp_
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov eax, dword [ebp - 0x14]
add eax, 0x288
push eax
lea ecx, [ebp - 0x203c]
push ecx
lea edx, [ebp - 0xa210]
push edx
call fcn.0042c760
add esp, 0xc
mov dword [ebp - 0xa24c], eax
mov eax, dword [ebp - 0xa24c]
mov dword [ebp - 0xa250], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xa250]
push ecx
lea ecx, [ebp - 0x1038]
call fcn.0040c010
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa210]
call fcn.004116c0
jmp 0x42ec25
cmp dword [0x6b144c], 0
je 0x42ebed
push 0x22
push 0x22
push str.SSconf
mov eax, dword [0x6b144c]
mov ecx, dword [eax]
mov edx, dword [0x6b144c]
push edx
mov eax, dword [ecx + 8]
call eax
push 0
push str.SSconf
push str.11400190
call fcn.005079e0
mov dword [ebp - 0xa1f4], 0xfffffffe
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.004116c0
mov eax, dword [ebp - 0xa1f4]
jmp 0x42fb75
push 0x67eed6
lea ecx, [ebp - 0x2058]
call fcn.00410e00
mov byte [ebp - 4], 4
lea eax, [ebp - 0xa1f0]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00438b00
mov dword [ebp - 0xa24c], eax
mov ecx, dword [ebp - 0xa24c]
mov dword [ebp - 0xa250], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xa250]
push edx
lea ecx, [ebp - 0x2058]
call fcn.0040c010
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa1f0]
call fcn.004116c0
lea ecx, [ebp - 0x2058]
call fcn.0040c0c0
test eax, eax
jne 0x42eca9
push str.1.0.3
lea ecx, [ebp - 0x2074]
call fcn.00410e00
lea ecx, [ebp - 0x2074]
call fcn.004116c0
push 0x68473c
push str.v2023.09.06.0000
lea ecx, [ebp - 0x2058]
call fcn.00411070
push eax
push str.100001900
lea ecx, [ebp - 0x1038]
call fcn.00411070
push eax
call fcn.00507090
mov ecx, dword [ebp - 0x14]
call fcn.0042d360
push eax
call fcn.0050a2c0
mov dword [ebp - 0x2078], 0
jmp 0x42ecfe
mov eax, dword [ebp - 0x2078]
add eax, 1
mov dword [ebp - 0x2078], eax
cmp dword [ebp - 0x2078], 0x22
jge 0x42ed43
mov eax, dword [ebp - 0x2078]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + eax*4 + 0xf00], 0
push 0x3018
push 0
mov eax, dword [ebp - 0x2078]
imul eax, eax, 0x3018
mov ecx, dword [ebp - 0x14]
lea edx, [ecx + eax + 0xf88]
push edx
call fcn.00588eb0
add esp, 0xc
jmp 0x42ecef
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x168], 0
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x164], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x160], 0
cmp dword [0x6b144c], 0
je 0x42ed98
push 0x22
push 0x22
push 0x624048
mov eax, dword [0x6b144c]
mov ecx, dword [eax]
mov edx, dword [0x6b144c]
push edx
mov eax, dword [ecx + 8]
call eax
mov byte [ebp - 0x3078], 0
push 0xfff
push 0
lea eax, [ebp - 0x3077]
push eax
call fcn.00588eb0
add esp, 0xc
lea eax, [ebp - 0x3078]
push eax
push 0x1000
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x3078]
push eax
lea ecx, [ebp - 0x3094]
call fcn.00410e00
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3094]
call fcn.0040c0c0
push eax
lea ecx, [ebp - 0x3094]
call fcn.0040c0c0
sub eax, 1
push eax
lea eax, [ebp - 0x30b0]
push eax
lea ecx, [ebp - 0x3094]
call fcn.0040c100
mov byte [ebp - 4], 7
lea eax, [ebp - 0x30b0]
push eax
push 0x624118
call fcn.0040fb90
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42ee39
push 0x624118
lea ecx, [ebp - 0x3094]
call fcn.0040cc80
push str.StartingShotTaskLink.ini
lea ecx, [ebp - 0x3094]
call fcn.0040cc80
lea ecx, [ebp - 0x3094]
call fcn.00411070
push eax
push 0
push str.StartingShotTaskLink
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x198], eax
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x198], 0xa
jb 0x42ee8b
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x198], 0xc8
jbe 0x42ee93
mov ecx, dword [ebp - 0x14]
call fcn.0042fc70
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x198]
mov dword [0x69a2c8], ecx
mov ecx, dword [ebp - 0x14]
call fcn.0042fc90
mov byte [ebp - 0x40b0], 0
push 0xfff
push 0
lea eax, [ebp - 0x40af]
push eax
call fcn.00588eb0
add esp, 0xc
mov byte [ebp - 0x40d4], 0
xor eax, eax
mov dword [ebp - 0x40d3], eax
mov dword [ebp - 0x40cf], eax
mov dword [ebp - 0x40cb], eax
mov dword [ebp - 0x40c7], eax
mov dword [ebp - 0x40c3], eax
mov dword [ebp - 0x40bf], eax
mov dword [ebp - 0x40bb], eax
mov dword [ebp - 0x40b7], eax
mov byte [ebp - 0x40b3], al
mov dword [ebp - 0x40d8], 0
push 0
mov ecx, dword [ebp - 0x14]
add ecx, 0x26c
call fcn.00411070
push eax
call fcn.0058a900
add esp, 8
cmp eax, 0xffffffff
jne 0x42f01e
mov dword [ebp - 0x40dc], 0xffffffff
mov dword [ebp - 0x40e0], 0
lea eax, [ebp - 0x40e0]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2a4
call fcn.00411070
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00437ec0
mov dword [ebp - 0x40e4], eax
cmp dword [ebp - 0x40e4], 0
jne 0x42ef99
cmp dword [ebp - 0x40e0], 0
je 0x42ef99
mov ecx, dword [ebp - 0x14]
add ecx, 0x2a4
call fcn.00411070
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00437f60
mov dword [ebp - 0x40dc], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x17c], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x180], 0
mov ecx, dword [ebp - 0x14]
call fcn.0042fc40
mov ecx, dword [ebp - 0x14]
call fcn.0042fcb0
mov ecx, dword [ebp - 0x14]
call fcn.00431fa0
mov ecx, dword [ebp - 0x14]
call fcn.00431fd0
mov dword [ebp - 0x40e8], 0
jmp 0x42efee
mov eax, dword [ebp - 0x40e8]
add eax, 1
mov dword [ebp - 0x40e8], eax
cmp dword [ebp - 0x40e8], 0x22
jge 0x42f008
mov eax, dword [ebp - 0x40e8]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00432100
jmp 0x42efdf
mov eax, dword [ebp - 0x40d8]
or eax, 0xf0
mov dword [ebp - 0x40d8], eax
jmp 0x42f8b7
mov byte [ebp - 0x50e8], 0
push 0xfff
push 0
lea eax, [ebp - 0x50e7]
push eax
call fcn.00588eb0
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x26c
call fcn.00411070
push eax
push 0x1000
lea eax, [ebp - 0x50e8]
push eax
push 0x67eed6
push str.StartingShotTaskCreateTime
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x50e8]
push eax
call fcn.00588520
add esp, 4
test eax, eax
jne 0x42f08f
mov eax, dword [ebp - 0x40d8]
or eax, 0x80
mov dword [ebp - 0x40d8], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x26c
call fcn.00411070
push eax
push 0
push str.StartingShotTaskLastSizeHigh
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x17c], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x26c
call fcn.00411070
push eax
push 0
push str.StartingShotTaskLastSizeLow
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x180], eax
mov byte [ebp - 0x60e8], 0
push 0xfff
push 0
lea eax, [ebp - 0x60e7]
push eax
call fcn.00588eb0
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x26c
call fcn.00411070
push eax
push 0x1000
lea eax, [ebp - 0x60e8]
push eax
push 0x67eed6
push str.StartingShotTaskHash
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x60e8]
push eax
call fcn.00588520
add esp, 4
test eax, eax
je 0x42f15a
lea eax, [ebp - 0x60e8]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x34c
call fcn.00411540
jmp 0x42f171
mov ecx, dword [ebp - 0x14]
call fcn.0042fc40
mov eax, dword [ebp - 0x40d8]
or eax, 0x10
mov dword [ebp - 0x40d8], eax
mov byte [ebp - 0x70e8], 0
push 0xfff
push 0
lea eax, [ebp - 0x70e7]
push eax
call fcn.00588eb0
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x26c
call fcn.00411070
push eax
push 0x1000
lea eax, [ebp - 0x70e8]
push eax
push 0x67eed6
push str.StartingShotTaskSavePath
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x70e8]
push eax
call fcn.00588520
add esp, 4
test eax, eax
je 0x42f1e8
lea eax, [ebp - 0x70e8]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2dc
call fcn.00411540
jmp 0x42f1ff
mov ecx, dword [ebp - 0x14]
call fcn.0042fcb0
mov eax, dword [ebp - 0x40d8]
or eax, 0x20
mov dword [ebp - 0x40d8], eax
mov ecx, dword [ebp - 0x14]
call fcn.0042fba0
mov dword [ebp - 0x70ec], eax
mov byte [ebp - 0x70ed], 1
mov byte [ebp - 0x70ee], 0
cmp dword [ebp - 0x70ec], 0
je 0x42f3e2
mov dword [ebp - 0x70f4], 0
jmp 0x42f243
mov eax, dword [ebp - 0x70f4]
add eax, 1
mov dword [ebp - 0x70f4], eax
cmp dword [ebp - 0x70f4], 0x22
jge 0x42f3dd
mov eax, dword [ebp - 0x14]
add eax, 0x2dc
push eax
lea ecx, [ebp - 0x7110]
call fcn.00410e40
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x14]
add ecx, 0x2dc
call fcn.0040c0c0
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2dc
call fcn.0040c0c0
sub eax, 1
push eax
lea eax, [ebp - 0x712c]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2dc
call fcn.0040c100
mov byte [ebp - 4], 9
lea eax, [ebp - 0x712c]
push eax
push 0x624118
call fcn.0040fb90
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42f2cd
push 0x624118
lea ecx, [ebp - 0x7110]
call fcn.0040cc80
mov eax, dword [ebp - 0x70f4]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0xb2c]
call fcn.00411070
push eax
lea ecx, [ebp - 0x7110]
call fcn.0040cc80
push 0
lea ecx, [ebp - 0x7110]
call fcn.00411070
push eax
call fcn.0058a900
add esp, 8
test eax, eax
je 0x42f3ba
push 0x67eed6
call fcn.00588520
add esp, 4
test eax, eax
je 0x42f3a5
mov ecx, dword [ebp - 0x14]
add ecx, 0x368
call fcn.00411070
push eax
mov eax, dword [ebp - 0x70f4]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0xb2c]
call fcn.00411070
push eax
call fcn.005892a0
add esp, 8
test eax, eax
jne 0x42f3a5
push 0x67eed6
lea ecx, [ebp - 0x7110]
call fcn.0040cc80
push 0
lea ecx, [ebp - 0x7110]
call fcn.00411070
push eax
call fcn.0058a900
add esp, 8
test eax, eax
jne 0x42f3a5
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x712c]
call fcn.004116c0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x7110]
call fcn.004116c0
jmp 0x42f234
mov byte [ebp - 0x70ed], 0
mov eax, dword [ebp - 0x70f4]
mov byte [ebp + eax - 0x40d4], 1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x712c]
call fcn.004116c0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x7110]
call fcn.004116c0
jmp 0x42f234
jmp 0x42f601
mov byte [ebp - 0x70ed], 0
mov byte [ebp - 0x712d], 0
mov dword [ebp - 0x7134], 0
mov dword [ebp - 0x7134], 0
jmp 0x42f415
mov eax, dword [ebp - 0x7134]
add eax, 1
mov dword [ebp - 0x7134], eax
cmp dword [ebp - 0x7134], 0x22
jge 0x42f5ef
mov ecx, dword [ebp - 0x14]
add ecx, 0x2dc
call fcn.00411070
push eax
lea ecx, [ebp - 0x7150]
call fcn.00410e00
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x14]
add ecx, 0x2dc
call fcn.0040c0c0
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2dc
call fcn.0040c0c0
sub eax, 1
push eax
lea eax, [ebp - 0x716c]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2dc
call fcn.0040c100
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x716c]
push eax
push 0x624118
call fcn.0040fb90
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42f4a5
push 0x624118
lea ecx, [ebp - 0x7150]
call fcn.0040cc80
mov eax, dword [ebp - 0x7134]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0xb2c]
call fcn.00411070
push eax
lea ecx, [ebp - 0x7150]
call fcn.0040cc80
push 0
lea ecx, [ebp - 0x7150]
call fcn.00411070
push eax
call fcn.0058a900
add esp, 8
test eax, eax
je 0x42f5c5
push 0x67eed6
call fcn.00588520
add esp, 4
test eax, eax
je 0x42f584
mov ecx, dword [ebp - 0x14]
add ecx, 0x368
call fcn.00411070
push eax
mov eax, dword [ebp - 0x7134]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0xb2c]
call fcn.00411070
push eax
call fcn.005892a0
add esp, 8
test eax, eax
jne 0x42f584
push 0x67eed6
lea ecx, [ebp - 0x7150]
call fcn.0040cc80
push 0
lea ecx, [ebp - 0x7150]
call fcn.00411070
push eax
call fcn.0058a900
add esp, 8
test eax, eax
jne 0x42f584
mov byte [ebp - 0x70ee], 1
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x716c]
call fcn.004116c0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x7150]
call fcn.004116c0
jmp 0x42f406
mov byte [ebp - 0x712d], 1
push 0x623f6c
lea ecx, [ebp - 0x7150]
call fcn.0040cc80
push 0
lea ecx, [ebp - 0x7150]
call fcn.00411070
push eax
call fcn.0058a900
add esp, 8
test eax, eax
je 0x42f5c3
mov eax, dword [ebp - 0x7134]
mov byte [ebp + eax - 0x40d4], 1
jmp 0x42f5cc
mov byte [ebp - 0x70ee], 1
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x716c]
call fcn.004116c0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x7150]
call fcn.004116c0
jmp 0x42f406
movzx eax, byte [ebp - 0x712d]
test eax, eax
jne 0x42f601
mov byte [ebp - 0x70ed], 1
movzx eax, byte [ebp - 0x70ed]
test eax, eax
jne 0x42f617
movzx eax, byte [ebp - 0x70ee]
test eax, eax
je 0x42f64d
mov ecx, dword [ebp - 0x14]
call fcn.00435ab0
movzx eax, al
test eax, eax
je 0x42f639
mov eax, dword [ebp - 0x40d8]
or eax, 0xf0000
mov dword [ebp - 0x40d8], eax
jmp 0x42f648
mov eax, dword [ebp - 0x40d8]
or eax, 8
mov dword [ebp - 0x40d8], eax
jmp 0x42f6e4
mov dword [ebp - 0x7170], 0
mov byte [ebp - 0x7171], 1
jmp 0x42f66f
mov eax, dword [ebp - 0x7170]
add eax, 1
mov dword [ebp - 0x7170], eax
cmp dword [ebp - 0x7170], 0x22
jge 0x42f6b9
movzx eax, byte [ebp - 0x7171]
test eax, eax
je 0x42f6a1
mov ecx, dword [ebp - 0x7170]
movzx edx, byte [ebp + ecx - 0x40d4]
test edx, edx
je 0x42f6a1
mov dword [ebp - 0xa24c], 1
jmp 0x42f6ab
mov dword [ebp - 0xa24c], 0
mov al, byte [ebp - 0xa24c]
mov byte [ebp - 0x7171], al
jmp 0x42f660
movzx eax, byte [ebp - 0x7171]
test eax, eax
je 0x42f6d5
mov eax, dword [ebp - 0x40d8]
or eax, 4
mov dword [ebp - 0x40d8], eax
jmp 0x42f6e4
mov eax, dword [ebp - 0x40d8]
or eax, 1
mov dword [ebp - 0x40d8], eax
mov byte [ebp - 0x8174], 0
push 0xfff
push 0
lea eax, [ebp - 0x8173]
push eax
call fcn.00588eb0
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x26c
call fcn.00411070
push eax
push 0x1000
lea eax, [ebp - 0x8174]
push eax
push 0x67eed6
push str.StartingShotTaskEntrence
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x8174]
push eax
call fcn.00588520
add esp, 4
test eax, eax
je 0x42f75b
lea eax, [ebp - 0x8174]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x330
call fcn.00411540
jmp 0x42f772
mov ecx, dword [ebp - 0x14]
call fcn.00431fa0
mov eax, dword [ebp - 0x40d8]
or eax, 0x40
mov dword [ebp - 0x40d8], eax
mov dword [ebp - 0x8178], 0
jmp 0x42f78d
mov eax, dword [ebp - 0x8178]
add eax, 1
mov dword [ebp - 0x8178], eax
cmp dword [ebp - 0x8178], 0x22
jge 0x42f871
mov byte [ebp - 0x9178], 0
push 0xfff
push 0
lea eax, [ebp - 0x9177]
push eax
call fcn.00588eb0
add esp, 0xc
mov byte [ebp - 0xa178], 0
push 0xfff
push 0
lea eax, [ebp - 0xa177]
push eax
call fcn.00588eb0
add esp, 0xc
mov eax, dword [ebp - 0x8178]
push eax
push str.StartingShotDownloadInfo_d
lea ecx, [ebp - 0xa178]
push ecx
call fcn.0058906d
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x26c
call fcn.00411070
push eax
push 0x1000
lea eax, [ebp - 0x9178]
push eax
push 0x67eed6
lea ecx, [ebp - 0xa178]
push ecx
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x9178]
push eax
call fcn.00588520
add esp, 4
test eax, eax
je 0x42f855
lea eax, [ebp - 0x9178]
push eax
mov ecx, dword [ebp - 0x8178]
imul ecx, ecx, 0x1c
mov edx, dword [ebp - 0x14]
lea ecx, [edx + ecx + 0x3bc]
call fcn.00411540
jmp 0x42f86c
mov ecx, dword [ebp - 0x14]
call fcn.00431fd0
mov eax, dword [ebp - 0x8178]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00432100
jmp 0x42f77e
mov ecx, dword [ebp - 0x14]
add ecx, 0x34c
call fcn.0040c0c0
test eax, eax
jne 0x42f8b7
cmp dword [0x6b144c], 0
je 0x42f8a8
push 0x22
push 0x22
push 0x623f18
mov eax, dword [0x6b144c]
mov ecx, dword [eax]
mov edx, dword [0x6b144c]
push edx
mov eax, dword [ecx + 8]
call eax
mov eax, dword [ebp - 0x40d8]
or eax, 2
mov dword [ebp - 0x40d8], eax
mov eax, dword [ebp - 0x40d8]
and eax, 0xf0
mov dword [ebp - 0xa17c], eax
mov eax, dword [ebp - 0x40d8]
and eax, 4
mov dword [ebp - 0xa180], eax
mov eax, dword [ebp - 0x40d8]
and eax, 0xf0000
mov dword [ebp - 0xa184], eax
mov eax, dword [ebp - 0x40d8]
and eax, 8
mov dword [ebp - 0xa188], eax
mov eax, dword [ebp - 0x40d8]
and eax, 1
mov dword [ebp - 0xa18c], eax
cmp dword [ebp - 0xa17c], 0xf0
jne 0x42f921
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 1
jmp 0x42faa9
cmp dword [ebp - 0xa180], 4
jne 0x42f995
cmp dword [0x6b144c], 0
je 0x42f94f
push 0x22
push 0x22
push 0x623ef8
mov eax, dword [0x6b144c]
mov ecx, dword [eax]
mov edx, dword [0x6b144c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x26c
call fcn.00411070
push eax
call fcn.00589268
add esp, 4
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 1
push 0
push 0x623ee4
push 0x623ec0
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x14]
push ecx
call fcn.00506ff0
mov ecx, dword [ebp - 0x14]
call fcn.0042fcb0
jmp 0x42faa9
cmp dword [ebp - 0xa184], 0xf0000
jne 0x42f9f9
cmp dword [0x6b144c], 0
je 0x42f9c6
push 0x22
push 0x22
push 0x623ea8
mov eax, dword [0x6b144c]
mov ecx, dword [eax]
mov edx, dword [0x6b144c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2dc
call fcn.00411070
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0042e530
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 8
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x150], 1
jmp 0x42faa9
cmp dword [ebp - 0xa188], 8
jne 0x42fa52
cmp dword [0x6b144c], 0
je 0x42fa27
push 0x22
push 0x22
push 0x623e98
mov eax, dword [0x6b144c]
mov ecx, dword [eax]
mov edx, dword [0x6b144c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2dc
call fcn.00411070
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0042e530
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x10
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x42faa9
cmp dword [ebp - 0xa18c], 1
jne 0x42faa9
cmp dword [0x6b144c], 0
je 0x42fa80
push 0x22
push 0x22
push 0x623e78
mov eax, dword [0x6b144c]
mov ecx, dword [eax]
mov edx, dword [0x6b144c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2dc
call fcn.00411070
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0042e530
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0xf
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0xf
je 0x42facd
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0x10
je 0x42facd
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 8
je 0x42facd
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 9
jne 0x42fb26
mov ecx, dword [ebp - 0x14]
call fcn.00435230
mov dword [ebp - 0xa1d4], 1
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x30b0]
call fcn.004116c0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3094]
call fcn.004116c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2058]
call fcn.004116c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.004116c0
mov eax, dword [ebp - 0xa1d4]
jmp 0x42fb75
mov dword [ebp - 0xa1d0], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x30b0]
call fcn.004116c0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3094]
call fcn.004116c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2058]
call fcn.004116c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.004116c0
mov eax, dword [ebp - 0xa1d0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005884bd
mov esp, ebp
pop ebp
ret