Function at 0x42e760
Capabilities:
Get common file path
Query environment variable
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ad344
mov eax, dword fs:[0]
push eax
mov eax, 0xa22c
call fcn.005890a0
mov eax, dword [0x632e20]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
call fcn.00505c20
push 0
mov ecx, dword [ebp - 0x14]
call fcn.00433420
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1b8], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1bc], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1a4], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x150], 1
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x154], 0
mov dword [0x634e10], 0
mov ecx, dword [ebp - 0x14]
call fcn.00437dd0
mov dword [0x634e00], eax
mov dword [0x634e04], edx
cmp dword [0x634e00], 0
jne 0x42e81c
cmp dword [0x634e04], 0
jne 0x42e81c
or eax, 0xffffffff
jmp 0x42fb4c
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x188], 0
mov dword [eax + 0x18c], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x178], 0
push 0x5c9fbc
mov ecx, dword [ebp - 0x14]
add ecx, 0x280
call fcn.004115a0
mov byte [ebp - 0x1014], 0
push 0xfff
push 0
lea eax, [ebp - 0x1013]
push eax
call fcn.00588e10
add esp, 0xc
push 0
push 0x23
lea eax, [ebp - 0x1014]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
push str.ShengquGamesStartingShot
lea eax, [ebp - 0x1014]
push eax
call fcn.005890e0
add esp, 8
lea eax, [ebp - 0x1014]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x22c
call fcn.004115a0
push 0x5c9f9c
mov ecx, dword [ebp - 0x14]
add ecx, 0x22c
call fcn.0040c050
push 0x5c9f8c
mov ecx, dword [ebp - 0x14]
add ecx, 0x22c
call fcn.0040c050
mov ecx, dword [ebp - 0x14]
add ecx, 0x30c
call fcn.004110d0
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x22c
call fcn.0040c050
push 0
mov ecx, dword [ebp - 0x14]
add ecx, 0x22c
call fcn.004110d0
push eax
call fcn.0058a860
add esp, 8
cmp eax, 0xffffffff
jne 0x42e964
mov dword [ebp - 0x1018], 0
lea eax, [ebp - 0x1018]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x22c
call fcn.004110d0
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00437e40
mov dword [ebp - 0x101c], eax
cmp dword [ebp - 0x101c], 0
jne 0x42e964
cmp dword [ebp - 0x1018], 0
je 0x42e964
mov ecx, dword [ebp - 0x14]
add ecx, 0x22c
call fcn.004110d0
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00437ee0
mov ecx, dword [ebp - 0x14]
add ecx, 0x22c
call fcn.004110d0
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1f4
call fcn.004115a0
push 0x5c9f9c
mov ecx, dword [ebp - 0x14]
add ecx, 0x1f4
call fcn.0040c050
mov ecx, dword [ebp - 0x14]
add ecx, 0x30c
call fcn.004110d0
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1f4
call fcn.0040c050
mov eax, dword [ebp - 0x14]
add eax, 0x1f4
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1d8
call fcn.0040c010
push str..ssconf
mov ecx, dword [ebp - 0x14]
add ecx, 0x1f4
call fcn.0040c050
mov ecx, dword [ebp - 0x14]
add ecx, 0x1d8
call fcn.004110d0
push eax
mov eax, dword [0x63926c]
mov ecx, dword [eax]
mov edx, dword [0x63926c]
push edx
mov eax, dword [ecx + 4]
call eax
cmp dword [0x63926c], 0
je 0x42ea22
push 0x22
push 0x22
push 0x5c9f4c
mov eax, dword [0x63926c]
mov ecx, dword [eax]
mov edx, dword [0x63926c]
push edx
mov eax, dword [ecx + 8]
call eax
push str.dataupload.ssconf
mov ecx, dword [ebp - 0x14]
add ecx, 0x210
call fcn.004115a0
push 0x606d46
lea ecx, [ebp - 0x1038]
call fcn.00410e60
mov dword [ebp - 4], 0
push 1
push str.DUCONF
mov ecx, dword [ebp - 0x14]
add ecx, 0x210
call fcn.004110d0
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x22c
call fcn.004110d0
push eax
push 0xb5
mov ecx, dword [ebp - 0x14]
call fcn.00438c50
mov dword [ebp - 0x103c], eax
cmp dword [ebp - 0x103c], 0
jne 0x42eb2f
mov eax, dword [ebp - 0x14]
add eax, 0x210
push eax
push 0x5c9f9c
mov ecx, dword [ebp - 0x14]
add ecx, 0x22c
push ecx
lea edx, [ebp - 0xa228]
push edx
call fcn.0042c3b0
add esp, 0xc
mov dword [ebp - 0xa22c], eax
mov eax, dword [ebp - 0xa22c]
mov dword [ebp - 0xa230], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xa230]
push ecx
lea edx, [ebp - 0xa20c]
push edx
call fcn.0043ab20
add esp, 0xc
mov dword [ebp - 0xa234], eax
mov eax, dword [ebp - 0xa234]
mov dword [ebp - 0xa238], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0xa238]
push ecx
lea ecx, [ebp - 0x1038]
call fcn.0040c010
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa20c]
call fcn.00411720
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa228]
call fcn.00411720
jmp 0x42ec25
cmp dword [ebp - 0x103c], 1
jne 0x42ebc8
mov byte [ebp - 0x203c], 0
push 0xfff
push 0
lea eax, [ebp - 0x203b]
push eax
call fcn.00588e10
add esp, 0xc
push 0x1000
lea eax, [ebp - 0x203c]
push eax
push str._temp_
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov eax, dword [ebp - 0x14]
add eax, 0x210
push eax
lea ecx, [ebp - 0x203c]
push ecx
lea edx, [ebp - 0xa1f0]
push edx
call fcn.0042c760
add esp, 0xc
mov dword [ebp - 0xa22c], eax
mov eax, dword [ebp - 0xa22c]
mov dword [ebp - 0xa230], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xa230]
push ecx
lea ecx, [ebp - 0x1038]
call fcn.0040c010
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa1f0]
call fcn.00411720
jmp 0x42ec25
cmp dword [0x63926c], 0
je 0x42ebed
push 0x22
push 0x22
push str.SSconf
mov eax, dword [0x63926c]
mov ecx, dword [eax]
mov edx, dword [0x63926c]
push edx
mov eax, dword [ecx + 8]
call eax
push 0
push str.SSconf
push str.11400190
call fcn.00507520
mov dword [ebp - 0xa1d4], 0xfffffffe
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.00411720
mov eax, dword [ebp - 0xa1d4]
jmp 0x42fb4c
push 0x606d46
lea ecx, [ebp - 0x2058]
call fcn.00410e60
mov byte [ebp - 4], 4
lea eax, [ebp - 0xa1d0]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00438a80
mov dword [ebp - 0xa22c], eax
mov ecx, dword [ebp - 0xa22c]
mov dword [ebp - 0xa230], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xa230]
push edx
lea ecx, [ebp - 0x2058]
call fcn.0040c010
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa1d0]
call fcn.00411720
lea ecx, [ebp - 0x2058]
call fcn.0040c0f0
test eax, eax
jne 0x42eca9
push str.1.0.3
lea ecx, [ebp - 0x2074]
call fcn.00410e60
lea ecx, [ebp - 0x2074]
call fcn.00411720
push 0x60c5ac
push str.11.1.0.9
lea ecx, [ebp - 0x2058]
call fcn.004110d0
push eax
push 0x5c9ef0
lea ecx, [ebp - 0x1038]
call fcn.004110d0
push eax
call fcn.00506bd0
mov ecx, dword [ebp - 0x14]
call fcn.0042d360
push eax
call fcn.00509e00
mov dword [ebp - 0x2078], 0
jmp 0x42ecfe
mov eax, dword [ebp - 0x2078]
add eax, 1
mov dword [ebp - 0x2078], eax
cmp dword [ebp - 0x2078], 4
jge 0x42ed43
mov eax, dword [ebp - 0x2078]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + eax*4 + 0x4b0], 0
push 0x3018
push 0
mov eax, dword [ebp - 0x2078]
imul eax, eax, 0x3018
mov ecx, dword [ebp - 0x14]
lea edx, [ecx + eax + 0x4c0]
push edx
call fcn.00588e10
add esp, 0xc
jmp 0x42ecef
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x168], 0
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x164], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x160], 0
cmp dword [0x63926c], 0
je 0x42ed98
push 0x22
push 0x22
push 0x5c9edc
mov eax, dword [0x63926c]
mov ecx, dword [eax]
mov edx, dword [0x63926c]
push edx
mov eax, dword [ecx + 8]
call eax
mov byte [ebp - 0x3078], 0
push 0xfff
push 0
lea eax, [ebp - 0x3077]
push eax
call fcn.00588e10
add esp, 0xc
lea eax, [ebp - 0x3078]
push eax
push 0x1000
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x3078]
push eax
lea ecx, [ebp - 0x3094]
call fcn.00410e60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3094]
call fcn.0040c0f0
push eax
lea ecx, [ebp - 0x3094]
call fcn.0040c0f0
sub eax, 1
push eax
lea eax, [ebp - 0x30b0]
push eax
lea ecx, [ebp - 0x3094]
call fcn.0040c130
mov byte [ebp - 4], 7
lea eax, [ebp - 0x30b0]
push eax
push 0x5c9f9c
call fcn.0040fbc0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42ee39
push 0x5c9f9c
lea ecx, [ebp - 0x3094]
call fcn.0040c050
push str.StartingShotTaskLink.ini
lea ecx, [ebp - 0x3094]
call fcn.0040c050
lea ecx, [ebp - 0x3094]
call fcn.004110d0
push eax
push 0
push str.StartingShotTaskLink
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x198], eax
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x198], 0xa
jb 0x42ee8b
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x198], 0xc8
jbe 0x42ee93
mov ecx, dword [ebp - 0x14]
call fcn.0042fc40
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x198]
mov dword [0x6222c8], ecx
mov ecx, dword [ebp - 0x14]
call fcn.0042fc60
mov byte [ebp - 0x40b0], 0
push 0xfff
push 0
lea eax, [ebp - 0x40af]
push eax
call fcn.00588e10
add esp, 0xc
mov byte [ebp - 0x40b4], 0
xor eax, eax
mov word [ebp - 0x40b3], ax
mov byte [ebp - 0x40b1], al
mov dword [ebp - 0x40b8], 0
push 0
mov ecx, dword [ebp - 0x14]
add ecx, 0x1f4
call fcn.004110d0
push eax
call fcn.0058a860
add esp, 8
cmp eax, 0xffffffff
jne 0x42eff5
mov dword [ebp - 0x40bc], 0xffffffff
mov dword [ebp - 0x40c0], 0
lea eax, [ebp - 0x40c0]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x22c
call fcn.004110d0
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00437e40
mov dword [ebp - 0x40c4], eax
cmp dword [ebp - 0x40c4], 0
jne 0x42ef70
cmp dword [ebp - 0x40c0], 0
je 0x42ef70
mov ecx, dword [ebp - 0x14]
add ecx, 0x22c
call fcn.004110d0
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00437ee0
mov dword [ebp - 0x40bc], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x17c], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x180], 0
mov ecx, dword [ebp - 0x14]
call fcn.0042fc10
mov ecx, dword [ebp - 0x14]
call fcn.0042fc80
mov ecx, dword [ebp - 0x14]
call fcn.00431f70
mov ecx, dword [ebp - 0x14]
call fcn.00431fa0
mov dword [ebp - 0x40c8], 0
jmp 0x42efc5
mov eax, dword [ebp - 0x40c8]
add eax, 1
mov dword [ebp - 0x40c8], eax
cmp dword [ebp - 0x40c8], 4
jge 0x42efdf
mov eax, dword [ebp - 0x40c8]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004320d0
jmp 0x42efb6
mov eax, dword [ebp - 0x40b8]
or eax, 0xf0
mov dword [ebp - 0x40b8], eax
jmp 0x42f88e
mov byte [ebp - 0x50c8], 0
push 0xfff
push 0
lea eax, [ebp - 0x50c7]
push eax
call fcn.00588e10
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x1f4
call fcn.004110d0
push eax
push 0x1000
lea eax, [ebp - 0x50c8]
push eax
push 0x606d46
push str.StartingShotTaskCreateTime
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x50c8]
push eax
call fcn.00588480
add esp, 4
test eax, eax
jne 0x42f066
mov eax, dword [ebp - 0x40b8]
or eax, 0x80
mov dword [ebp - 0x40b8], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1f4
call fcn.004110d0
push eax
push 0
push str.StartingShotTaskLastSizeHigh
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x17c], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1f4
call fcn.004110d0
push eax
push 0
push str.StartingShotTaskLastSizeLow
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x180], eax
mov byte [ebp - 0x60c8], 0
push 0xfff
push 0
lea eax, [ebp - 0x60c7]
push eax
call fcn.00588e10
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x1f4
call fcn.004110d0
push eax
push 0x1000
lea eax, [ebp - 0x60c8]
push eax
push 0x606d46
push str.StartingShotTaskHash
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x60c8]
push eax
call fcn.00588480
add esp, 4
test eax, eax
je 0x42f131
lea eax, [ebp - 0x60c8]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2d4
call fcn.004115a0
jmp 0x42f148
mov ecx, dword [ebp - 0x14]
call fcn.0042fc10
mov eax, dword [ebp - 0x40b8]
or eax, 0x10
mov dword [ebp - 0x40b8], eax
mov byte [ebp - 0x70c8], 0
push 0xfff
push 0
lea eax, [ebp - 0x70c7]
push eax
call fcn.00588e10
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x1f4
call fcn.004110d0
push eax
push 0x1000
lea eax, [ebp - 0x70c8]
push eax
push 0x606d46
push str.StartingShotTaskSavePath
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x70c8]
push eax
call fcn.00588480
add esp, 4
test eax, eax
je 0x42f1bf
lea eax, [ebp - 0x70c8]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x264
call fcn.004115a0
jmp 0x42f1d6
mov ecx, dword [ebp - 0x14]
call fcn.0042fc80
mov eax, dword [ebp - 0x40b8]
or eax, 0x20
mov dword [ebp - 0x40b8], eax
mov ecx, dword [ebp - 0x14]
call fcn.0042fb70
mov dword [ebp - 0x70cc], eax
mov byte [ebp - 0x70cd], 1
mov byte [ebp - 0x70ce], 0
cmp dword [ebp - 0x70cc], 0
je 0x42f3b9
mov dword [ebp - 0x70d4], 0
jmp 0x42f21a
mov eax, dword [ebp - 0x70d4]
add eax, 1
mov dword [ebp - 0x70d4], eax
cmp dword [ebp - 0x70d4], 4
jge 0x42f3b4
mov eax, dword [ebp - 0x14]
add eax, 0x264
push eax
lea ecx, [ebp - 0x70f0]
call fcn.00410ea0
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x14]
add ecx, 0x264
call fcn.0040c0f0
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x264
call fcn.0040c0f0
sub eax, 1
push eax
lea eax, [ebp - 0x710c]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x264
call fcn.0040c130
mov byte [ebp - 4], 9
lea eax, [ebp - 0x710c]
push eax
push 0x5c9f9c
call fcn.0040fbc0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42f2a4
push 0x5c9f9c
lea ecx, [ebp - 0x70f0]
call fcn.0040c050
mov eax, dword [ebp - 0x70d4]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0x424]
call fcn.004110d0
push eax
lea ecx, [ebp - 0x70f0]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x70f0]
call fcn.004110d0
push eax
call fcn.0058a860
add esp, 8
test eax, eax
je 0x42f391
push 0x606d46
call fcn.00588480
add esp, 4
test eax, eax
je 0x42f37c
mov ecx, dword [ebp - 0x14]
add ecx, 0x2f0
call fcn.004110d0
push eax
mov eax, dword [ebp - 0x70d4]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0x424]
call fcn.004110d0
push eax
call fcn.00589200
add esp, 8
test eax, eax
jne 0x42f37c
push 0x606d46
lea ecx, [ebp - 0x70f0]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x70f0]
call fcn.004110d0
push eax
call fcn.0058a860
add esp, 8
test eax, eax
jne 0x42f37c
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x710c]
call fcn.00411720
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x70f0]
call fcn.00411720
jmp 0x42f20b
mov byte [ebp - 0x70cd], 0
mov eax, dword [ebp - 0x70d4]
mov byte [ebp + eax - 0x40b4], 1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x710c]
call fcn.00411720
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x70f0]
call fcn.00411720
jmp 0x42f20b
jmp 0x42f5d8
mov byte [ebp - 0x70cd], 0
mov byte [ebp - 0x710d], 0
mov dword [ebp - 0x7114], 0
mov dword [ebp - 0x7114], 0
jmp 0x42f3ec
mov eax, dword [ebp - 0x7114]
add eax, 1
mov dword [ebp - 0x7114], eax
cmp dword [ebp - 0x7114], 4
jge 0x42f5c6
mov ecx, dword [ebp - 0x14]
add ecx, 0x264
call fcn.004110d0
push eax
lea ecx, [ebp - 0x7130]
call fcn.00410e60
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x14]
add ecx, 0x264
call fcn.0040c0f0
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x264
call fcn.0040c0f0
sub eax, 1
push eax
lea eax, [ebp - 0x714c]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x264
call fcn.0040c130
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x714c]
push eax
push 0x5c9f9c
call fcn.0040fbc0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42f47c
push 0x5c9f9c
lea ecx, [ebp - 0x7130]
call fcn.0040c050
mov eax, dword [ebp - 0x7114]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0x424]
call fcn.004110d0
push eax
lea ecx, [ebp - 0x7130]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x7130]
call fcn.004110d0
push eax
call fcn.0058a860
add esp, 8
test eax, eax
je 0x42f59c
push 0x606d46
call fcn.00588480
add esp, 4
test eax, eax
je 0x42f55b
mov ecx, dword [ebp - 0x14]
add ecx, 0x2f0
call fcn.004110d0
push eax
mov eax, dword [ebp - 0x7114]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0x424]
call fcn.004110d0
push eax
call fcn.00589200
add esp, 8
test eax, eax
jne 0x42f55b
push 0x606d46
lea ecx, [ebp - 0x7130]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x7130]
call fcn.004110d0
push eax
call fcn.0058a860
add esp, 8
test eax, eax
jne 0x42f55b
mov byte [ebp - 0x70ce], 1
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x714c]
call fcn.00411720
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x7130]
call fcn.00411720
jmp 0x42f3dd
mov byte [ebp - 0x710d], 1
push 0x5c9e00
lea ecx, [ebp - 0x7130]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x7130]
call fcn.004110d0
push eax
call fcn.0058a860
add esp, 8
test eax, eax
je 0x42f59a
mov eax, dword [ebp - 0x7114]
mov byte [ebp + eax - 0x40b4], 1
jmp 0x42f5a3
mov byte [ebp - 0x70ce], 1
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x714c]
call fcn.00411720
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x7130]
call fcn.00411720
jmp 0x42f3dd
movzx eax, byte [ebp - 0x710d]
test eax, eax
jne 0x42f5d8
mov byte [ebp - 0x70cd], 1
movzx eax, byte [ebp - 0x70cd]
test eax, eax
jne 0x42f5ee
movzx eax, byte [ebp - 0x70ce]
test eax, eax
je 0x42f624
mov ecx, dword [ebp - 0x14]
call fcn.00435a30
movzx eax, al
test eax, eax
je 0x42f610
mov eax, dword [ebp - 0x40b8]
or eax, 0xf0000
mov dword [ebp - 0x40b8], eax
jmp 0x42f61f
mov eax, dword [ebp - 0x40b8]
or eax, 8
mov dword [ebp - 0x40b8], eax
jmp 0x42f6bb
mov dword [ebp - 0x7150], 0
mov byte [ebp - 0x7151], 1
jmp 0x42f646
mov eax, dword [ebp - 0x7150]
add eax, 1
mov dword [ebp - 0x7150], eax
cmp dword [ebp - 0x7150], 4
jge 0x42f690
movzx eax, byte [ebp - 0x7151]
test eax, eax
je 0x42f678
mov ecx, dword [ebp - 0x7150]
movzx edx, byte [ebp + ecx - 0x40b4]
test edx, edx
je 0x42f678
mov dword [ebp - 0xa22c], 1
jmp 0x42f682
mov dword [ebp - 0xa22c], 0
mov al, byte [ebp - 0xa22c]
mov byte [ebp - 0x7151], al
jmp 0x42f637
movzx eax, byte [ebp - 0x7151]
test eax, eax
je 0x42f6ac
mov eax, dword [ebp - 0x40b8]
or eax, 4
mov dword [ebp - 0x40b8], eax
jmp 0x42f6bb
mov eax, dword [ebp - 0x40b8]
or eax, 1
mov dword [ebp - 0x40b8], eax
mov byte [ebp - 0x8154], 0
push 0xfff
push 0
lea eax, [ebp - 0x8153]
push eax
call fcn.00588e10
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x1f4
call fcn.004110d0
push eax
push 0x1000
lea eax, [ebp - 0x8154]
push eax
push 0x606d46
push str.StartingShotTaskEntrence
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x8154]
push eax
call fcn.00588480
add esp, 4
test eax, eax
je 0x42f732
lea eax, [ebp - 0x8154]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2b8
call fcn.004115a0
jmp 0x42f749
mov ecx, dword [ebp - 0x14]
call fcn.00431f70
mov eax, dword [ebp - 0x40b8]
or eax, 0x40
mov dword [ebp - 0x40b8], eax
mov dword [ebp - 0x8158], 0
jmp 0x42f764
mov eax, dword [ebp - 0x8158]
add eax, 1
mov dword [ebp - 0x8158], eax
cmp dword [ebp - 0x8158], 4
jge 0x42f848
mov byte [ebp - 0x9158], 0
push 0xfff
push 0
lea eax, [ebp - 0x9157]
push eax
call fcn.00588e10
add esp, 0xc
mov byte [ebp - 0xa158], 0
push 0xfff
push 0
lea eax, [ebp - 0xa157]
push eax
call fcn.00588e10
add esp, 0xc
mov eax, dword [ebp - 0x8158]
push eax
push str.StartingShotDownloadInfo_d
lea ecx, [ebp - 0xa158]
push ecx
call fcn.00588fcd
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x1f4
call fcn.004110d0
push eax
push 0x1000
lea eax, [ebp - 0x9158]
push eax
push 0x606d46
lea ecx, [ebp - 0xa158]
push ecx
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x9158]
push eax
call fcn.00588480
add esp, 4
test eax, eax
je 0x42f82c
lea eax, [ebp - 0x9158]
push eax
mov ecx, dword [ebp - 0x8158]
imul ecx, ecx, 0x1c
mov edx, dword [ebp - 0x14]
lea ecx, [edx + ecx + 0x344]
call fcn.004115a0
jmp 0x42f843
mov ecx, dword [ebp - 0x14]
call fcn.00431fa0
mov eax, dword [ebp - 0x8158]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004320d0
jmp 0x42f755
mov ecx, dword [ebp - 0x14]
add ecx, 0x2d4
call fcn.0040c0f0
test eax, eax
jne 0x42f88e
cmp dword [0x63926c], 0
je 0x42f87f
push 0x22
push 0x22
push 0x5c9dac
mov eax, dword [0x63926c]
mov ecx, dword [eax]
mov edx, dword [0x63926c]
push edx
mov eax, dword [ecx + 8]
call eax
mov eax, dword [ebp - 0x40b8]
or eax, 2
mov dword [ebp - 0x40b8], eax
mov eax, dword [ebp - 0x40b8]
and eax, 0xf0
mov dword [ebp - 0xa15c], eax
mov eax, dword [ebp - 0x40b8]
and eax, 4
mov dword [ebp - 0xa160], eax
mov eax, dword [ebp - 0x40b8]
and eax, 0xf0000
mov dword [ebp - 0xa164], eax
mov eax, dword [ebp - 0x40b8]
and eax, 8
mov dword [ebp - 0xa168], eax
mov eax, dword [ebp - 0x40b8]
and eax, 1
mov dword [ebp - 0xa16c], eax
cmp dword [ebp - 0xa15c], 0xf0
jne 0x42f8f8
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 1
jmp 0x42fa80
cmp dword [ebp - 0xa160], 4
jne 0x42f96c
cmp dword [0x63926c], 0
je 0x42f926
push 0x22
push 0x22
push 0x5c9d8c
mov eax, dword [0x63926c]
mov ecx, dword [eax]
mov edx, dword [0x63926c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1f4
call fcn.004110d0
push eax
call fcn.005891c8
add esp, 4
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 1
push 0
push 0x5c9d7c
push 0x5c9d58
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x14]
push ecx
call fcn.00506b30
mov ecx, dword [ebp - 0x14]
call fcn.0042fc80
jmp 0x42fa80
cmp dword [ebp - 0xa164], 0xf0000
jne 0x42f9d0
cmp dword [0x63926c], 0
je 0x42f99d
push 0x22
push 0x22
push 0x5c9d40
mov eax, dword [0x63926c]
mov ecx, dword [eax]
mov edx, dword [0x63926c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x264
call fcn.004110d0
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0042e530
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 8
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x150], 1
jmp 0x42fa80
cmp dword [ebp - 0xa168], 8
jne 0x42fa29
cmp dword [0x63926c], 0
je 0x42f9fe
push 0x22
push 0x22
push 0x5c9d30
mov eax, dword [0x63926c]
mov ecx, dword [eax]
mov edx, dword [0x63926c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x264
call fcn.004110d0
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0042e530
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x10
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x42fa80
cmp dword [ebp - 0xa16c], 1
jne 0x42fa80
cmp dword [0x63926c], 0
je 0x42fa57
push 0x22
push 0x22
push 0x5c9d10
mov eax, dword [0x63926c]
mov ecx, dword [eax]
mov edx, dword [0x63926c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x264
call fcn.004110d0
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0042e530
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0xf
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0xf
je 0x42faa4
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0x10
je 0x42faa4
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 8
je 0x42faa4
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 9
jne 0x42fafd
mov ecx, dword [ebp - 0x14]
call fcn.004351b0
mov dword [ebp - 0xa1b4], 1
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x30b0]
call fcn.00411720
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3094]
call fcn.00411720
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2058]
call fcn.00411720
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.00411720
mov eax, dword [ebp - 0xa1b4]
jmp 0x42fb4c
mov dword [ebp - 0xa1b0], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x30b0]
call fcn.00411720
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3094]
call fcn.00411720
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2058]
call fcn.00411720
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.00411720
mov eax, dword [ebp - 0xa1b0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0058841d
mov esp, ebp
pop ebp
ret