Function at 0x42e780
Capabilities:
Get common file path
Query environment variable
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ad354
mov eax, dword fs:[0]
push eax
mov eax, 0xa254
call fcn.00589110
mov eax, dword [0x6d2e20]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
call fcn.00506380
push 0
mov ecx, dword [ebp - 0x14]
call fcn.00433440
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1b8], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1bc], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1a4], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x150], 1
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x154], 0
mov dword [0x6d4e10], 0
mov ecx, dword [ebp - 0x14]
call fcn.00437e40
mov dword [0x6d4e00], eax
mov dword [0x6d4e04], edx
cmp dword [0x6d4e00], 0
jne 0x42e83c
cmp dword [0x6d4e04], 0
jne 0x42e83c
or eax, 0xffffffff
jmp 0x42fb70
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x188], 0
mov dword [eax + 0x18c], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x178], 0
push 0x6421a8
mov ecx, dword [ebp - 0x14]
add ecx, 0x320
call fcn.00411550
mov byte [ebp - 0x1014], 0
push 0xfff
push 0
lea eax, [ebp - 0x1013]
push eax
call fcn.00588e80
add esp, 0xc
push 0
push 0x23
lea eax, [ebp - 0x1014]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
push str.ShengquGamesStartingShot
lea eax, [ebp - 0x1014]
push eax
call fcn.00589150
add esp, 8
lea eax, [ebp - 0x1014]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2cc
call fcn.00411550
push 0x642188
mov ecx, dword [ebp - 0x14]
add ecx, 0x2cc
call fcn.0040cc80
push 0x642178
mov ecx, dword [ebp - 0x14]
add ecx, 0x2cc
call fcn.0040cc80
mov ecx, dword [ebp - 0x14]
add ecx, 0x3ac
call fcn.00411080
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2cc
call fcn.0040cc80
push 0
mov ecx, dword [ebp - 0x14]
add ecx, 0x2cc
call fcn.00411080
push eax
call fcn.0058a8d0
add esp, 8
cmp eax, 0xffffffff
jne 0x42e984
mov dword [ebp - 0x1018], 0
lea eax, [ebp - 0x1018]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2cc
call fcn.00411080
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00437eb0
mov dword [ebp - 0x101c], eax
cmp dword [ebp - 0x101c], 0
jne 0x42e984
cmp dword [ebp - 0x1018], 0
je 0x42e984
mov ecx, dword [ebp - 0x14]
add ecx, 0x2cc
call fcn.00411080
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00437f50
mov ecx, dword [ebp - 0x14]
add ecx, 0x2cc
call fcn.00411080
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x294
call fcn.00411550
push 0x642188
mov ecx, dword [ebp - 0x14]
add ecx, 0x294
call fcn.0040cc80
mov ecx, dword [ebp - 0x14]
add ecx, 0x3ac
call fcn.00411080
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x294
call fcn.0040cc80
mov eax, dword [ebp - 0x14]
add eax, 0x294
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x278
call fcn.0040c010
push str..ssconf
mov ecx, dword [ebp - 0x14]
add ecx, 0x294
call fcn.0040cc80
mov ecx, dword [ebp - 0x14]
add ecx, 0x278
call fcn.00411080
push eax
mov eax, dword [0x6d94ec]
mov ecx, dword [eax]
mov edx, dword [0x6d94ec]
push edx
mov eax, dword [ecx + 4]
call eax
cmp dword [0x6d94ec], 0
je 0x42ea42
push 0x22
push 0x22
push 0x642138
mov eax, dword [0x6d94ec]
mov ecx, dword [eax]
mov edx, dword [0x6d94ec]
push edx
mov eax, dword [ecx + 8]
call eax
push str.dataupload.ssconf
mov ecx, dword [ebp - 0x14]
add ecx, 0x2b0
call fcn.00411550
push 0x6a6f4e
lea ecx, [ebp - 0x1038]
call fcn.00410e10
mov dword [ebp - 4], 0
push 1
push str.DUCONF
mov ecx, dword [ebp - 0x14]
add ecx, 0x2b0
call fcn.00411080
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2cc
call fcn.00411080
push eax
push 0xb5
mov ecx, dword [ebp - 0x14]
call fcn.00438cc0
mov dword [ebp - 0x103c], eax
cmp dword [ebp - 0x103c], 0
jne 0x42eb4f
mov eax, dword [ebp - 0x14]
add eax, 0x2b0
push eax
push 0x642188
mov ecx, dword [ebp - 0x14]
add ecx, 0x2cc
push ecx
lea edx, [ebp - 0xa250]
push edx
call fcn.0042c3b0
add esp, 0xc
mov dword [ebp - 0xa254], eax
mov eax, dword [ebp - 0xa254]
mov dword [ebp - 0xa258], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xa258]
push ecx
lea edx, [ebp - 0xa234]
push edx
call fcn.0043ad80
add esp, 0xc
mov dword [ebp - 0xa25c], eax
mov eax, dword [ebp - 0xa25c]
mov dword [ebp - 0xa260], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0xa260]
push ecx
lea ecx, [ebp - 0x1038]
call fcn.0040c010
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa234]
call fcn.004116e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa250]
call fcn.004116e0
jmp 0x42ec45
cmp dword [ebp - 0x103c], 1
jne 0x42ebe8
mov byte [ebp - 0x203c], 0
push 0xfff
push 0
lea eax, [ebp - 0x203b]
push eax
call fcn.00588e80
add esp, 0xc
push 0x1000
lea eax, [ebp - 0x203c]
push eax
push str._temp_
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov eax, dword [ebp - 0x14]
add eax, 0x2b0
push eax
lea ecx, [ebp - 0x203c]
push ecx
lea edx, [ebp - 0xa218]
push edx
call fcn.0042c760
add esp, 0xc
mov dword [ebp - 0xa254], eax
mov eax, dword [ebp - 0xa254]
mov dword [ebp - 0xa258], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xa258]
push ecx
lea ecx, [ebp - 0x1038]
call fcn.0040c010
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa218]
call fcn.004116e0
jmp 0x42ec45
cmp dword [0x6d94ec], 0
je 0x42ec0d
push 0x22
push 0x22
push str.SSconf
mov eax, dword [0x6d94ec]
mov ecx, dword [eax]
mov edx, dword [0x6d94ec]
push edx
mov eax, dword [ecx + 8]
call eax
push 0
push str.SSconf
push str.11400190
call fcn.00507c80
mov dword [ebp - 0xa1fc], 0xfffffffe
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.004116e0
mov eax, dword [ebp - 0xa1fc]
jmp 0x42fb70
push 0x6a6f4e
lea ecx, [ebp - 0x2058]
call fcn.00410e10
mov byte [ebp - 4], 4
lea eax, [ebp - 0xa1f8]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00438af0
mov dword [ebp - 0xa254], eax
mov ecx, dword [ebp - 0xa254]
mov dword [ebp - 0xa258], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xa258]
push edx
lea ecx, [ebp - 0x2058]
call fcn.0040c010
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa1f8]
call fcn.004116e0
lea ecx, [ebp - 0x2058]
call fcn.0040c0c0
test eax, eax
jne 0x42ecc9
push str.1.0.3
lea ecx, [ebp - 0x2074]
call fcn.00410e10
lea ecx, [ebp - 0x2074]
call fcn.004116e0
push 0x6ac7b4
push str.2024.09.17
lea ecx, [ebp - 0x2058]
call fcn.00411080
push eax
push str.100001900
lea ecx, [ebp - 0x1038]
call fcn.00411080
push eax
call fcn.00507350
mov ecx, dword [ebp - 0x14]
call fcn.0042d380
push eax
call fcn.0050a5c0
mov dword [ebp - 0x2078], 0
jmp 0x42ed1e
mov eax, dword [ebp - 0x2078]
add eax, 1
mov dword [ebp - 0x2078], eax
cmp dword [ebp - 0x2078], 0x2c
jge 0x42ed63
mov eax, dword [ebp - 0x2078]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + eax*4 + 0x1270], 0
push 0x3018
push 0
mov eax, dword [ebp - 0x2078]
imul eax, eax, 0x3018
mov ecx, dword [ebp - 0x14]
lea edx, [ecx + eax + 0x1320]
push edx
call fcn.00588e80
add esp, 0xc
jmp 0x42ed0f
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x168], 0
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x164], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x160], 0
cmp dword [0x6d94ec], 0
je 0x42edb8
push 0x22
push 0x22
push 0x6420c0
mov eax, dword [0x6d94ec]
mov ecx, dword [eax]
mov edx, dword [0x6d94ec]
push edx
mov eax, dword [ecx + 8]
call eax
mov byte [ebp - 0x3078], 0
push 0xfff
push 0
lea eax, [ebp - 0x3077]
push eax
call fcn.00588e80
add esp, 0xc
lea eax, [ebp - 0x3078]
push eax
push 0x1000
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x3078]
push eax
lea ecx, [ebp - 0x3094]
call fcn.00410e10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3094]
call fcn.0040c0c0
push eax
lea ecx, [ebp - 0x3094]
call fcn.0040c0c0
sub eax, 1
push eax
lea eax, [ebp - 0x30b0]
push eax
lea ecx, [ebp - 0x3094]
call fcn.0040c100
mov byte [ebp - 4], 7
lea eax, [ebp - 0x30b0]
push eax
push 0x642188
call fcn.0040fb90
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42ee59
push 0x642188
lea ecx, [ebp - 0x3094]
call fcn.0040cc80
push str.StartingShotTaskLink.ini
lea ecx, [ebp - 0x3094]
call fcn.0040cc80
lea ecx, [ebp - 0x3094]
call fcn.00411080
push eax
push 0
push str.StartingShotTaskLink
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x198], eax
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x198], 0xa
jb 0x42eeab
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x198], 0xc8
jbe 0x42eeb3
mov ecx, dword [ebp - 0x14]
call fcn.0042fc60
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x198]
mov dword [0x6c22c8], ecx
mov ecx, dword [ebp - 0x14]
call fcn.0042fc80
mov byte [ebp - 0x40b0], 0
push 0xfff
push 0
lea eax, [ebp - 0x40af]
push eax
call fcn.00588e80
add esp, 0xc
mov byte [ebp - 0x40dc], 0
push 0x2b
push 0
lea eax, [ebp - 0x40db]
push eax
call fcn.00588e80
add esp, 0xc
mov dword [ebp - 0x40e0], 0
push 0
mov ecx, dword [ebp - 0x14]
add ecx, 0x294
call fcn.00411080
push eax
call fcn.0058a8d0
add esp, 8
cmp eax, 0xffffffff
jne 0x42f019
mov dword [ebp - 0x40e4], 0xffffffff
mov dword [ebp - 0x40e8], 0
lea eax, [ebp - 0x40e8]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2cc
call fcn.00411080
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00437eb0
mov dword [ebp - 0x40ec], eax
cmp dword [ebp - 0x40ec], 0
jne 0x42ef94
cmp dword [ebp - 0x40e8], 0
je 0x42ef94
mov ecx, dword [ebp - 0x14]
add ecx, 0x2cc
call fcn.00411080
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00437f50
mov dword [ebp - 0x40e4], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x17c], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x180], 0
mov ecx, dword [ebp - 0x14]
call fcn.0042fc30
mov ecx, dword [ebp - 0x14]
call fcn.0042fca0
mov ecx, dword [ebp - 0x14]
call fcn.00431f90
mov ecx, dword [ebp - 0x14]
call fcn.00431fc0
mov dword [ebp - 0x40f0], 0
jmp 0x42efe9
mov eax, dword [ebp - 0x40f0]
add eax, 1
mov dword [ebp - 0x40f0], eax
cmp dword [ebp - 0x40f0], 0x2c
jge 0x42f003
mov eax, dword [ebp - 0x40f0]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004320f0
jmp 0x42efda
mov eax, dword [ebp - 0x40e0]
or eax, 0xf0
mov dword [ebp - 0x40e0], eax
jmp 0x42f8b2
mov byte [ebp - 0x50f0], 0
push 0xfff
push 0
lea eax, [ebp - 0x50ef]
push eax
call fcn.00588e80
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x294
call fcn.00411080
push eax
push 0x1000
lea eax, [ebp - 0x50f0]
push eax
push 0x6a6f4e
push str.StartingShotTaskCreateTime
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x50f0]
push eax
call fcn.005884f0
add esp, 4
test eax, eax
jne 0x42f08a
mov eax, dword [ebp - 0x40e0]
or eax, 0x80
mov dword [ebp - 0x40e0], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x294
call fcn.00411080
push eax
push 0
push str.StartingShotTaskLastSizeHigh
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x17c], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x294
call fcn.00411080
push eax
push 0
push str.StartingShotTaskLastSizeLow
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x180], eax
mov byte [ebp - 0x60f0], 0
push 0xfff
push 0
lea eax, [ebp - 0x60ef]
push eax
call fcn.00588e80
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x294
call fcn.00411080
push eax
push 0x1000
lea eax, [ebp - 0x60f0]
push eax
push 0x6a6f4e
push str.StartingShotTaskHash
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x60f0]
push eax
call fcn.005884f0
add esp, 4
test eax, eax
je 0x42f155
lea eax, [ebp - 0x60f0]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x374
call fcn.00411550
jmp 0x42f16c
mov ecx, dword [ebp - 0x14]
call fcn.0042fc30
mov eax, dword [ebp - 0x40e0]
or eax, 0x10
mov dword [ebp - 0x40e0], eax
mov byte [ebp - 0x70f0], 0
push 0xfff
push 0
lea eax, [ebp - 0x70ef]
push eax
call fcn.00588e80
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x294
call fcn.00411080
push eax
push 0x1000
lea eax, [ebp - 0x70f0]
push eax
push 0x6a6f4e
push str.StartingShotTaskSavePath
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x70f0]
push eax
call fcn.005884f0
add esp, 4
test eax, eax
je 0x42f1e3
lea eax, [ebp - 0x70f0]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x304
call fcn.00411550
jmp 0x42f1fa
mov ecx, dword [ebp - 0x14]
call fcn.0042fca0
mov eax, dword [ebp - 0x40e0]
or eax, 0x20
mov dword [ebp - 0x40e0], eax
mov ecx, dword [ebp - 0x14]
call fcn.0042fb90
mov dword [ebp - 0x70f4], eax
mov byte [ebp - 0x70f5], 1
mov byte [ebp - 0x70f6], 0
cmp dword [ebp - 0x70f4], 0
je 0x42f3dd
mov dword [ebp - 0x70fc], 0
jmp 0x42f23e
mov eax, dword [ebp - 0x70fc]
add eax, 1
mov dword [ebp - 0x70fc], eax
cmp dword [ebp - 0x70fc], 0x2c
jge 0x42f3d8
mov eax, dword [ebp - 0x14]
add eax, 0x304
push eax
lea ecx, [ebp - 0x7118]
call fcn.00410e50
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x14]
add ecx, 0x304
call fcn.0040c0c0
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x304
call fcn.0040c0c0
sub eax, 1
push eax
lea eax, [ebp - 0x7134]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x304
call fcn.0040c100
mov byte [ebp - 4], 9
lea eax, [ebp - 0x7134]
push eax
push 0x642188
call fcn.0040fb90
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42f2c8
push 0x642188
lea ecx, [ebp - 0x7118]
call fcn.0040cc80
mov eax, dword [ebp - 0x70fc]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0xd84]
call fcn.00411080
push eax
lea ecx, [ebp - 0x7118]
call fcn.0040cc80
push 0
lea ecx, [ebp - 0x7118]
call fcn.00411080
push eax
call fcn.0058a8d0
add esp, 8
test eax, eax
je 0x42f3b5
push 0x6a6f4e
call fcn.005884f0
add esp, 4
test eax, eax
je 0x42f3a0
mov ecx, dword [ebp - 0x14]
add ecx, 0x390
call fcn.00411080
push eax
mov eax, dword [ebp - 0x70fc]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0xd84]
call fcn.00411080
push eax
call fcn.00589270
add esp, 8
test eax, eax
jne 0x42f3a0
push 0x6a6f4e
lea ecx, [ebp - 0x7118]
call fcn.0040cc80
push 0
lea ecx, [ebp - 0x7118]
call fcn.00411080
push eax
call fcn.0058a8d0
add esp, 8
test eax, eax
jne 0x42f3a0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x7134]
call fcn.004116e0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x7118]
call fcn.004116e0
jmp 0x42f22f
mov byte [ebp - 0x70f5], 0
mov eax, dword [ebp - 0x70fc]
mov byte [ebp + eax - 0x40dc], 1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x7134]
call fcn.004116e0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x7118]
call fcn.004116e0
jmp 0x42f22f
jmp 0x42f5fc
mov byte [ebp - 0x70f5], 0
mov byte [ebp - 0x7135], 0
mov dword [ebp - 0x713c], 0
mov dword [ebp - 0x713c], 0
jmp 0x42f410
mov eax, dword [ebp - 0x713c]
add eax, 1
mov dword [ebp - 0x713c], eax
cmp dword [ebp - 0x713c], 0x2c
jge 0x42f5ea
mov ecx, dword [ebp - 0x14]
add ecx, 0x304
call fcn.00411080
push eax
lea ecx, [ebp - 0x7158]
call fcn.00410e10
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x14]
add ecx, 0x304
call fcn.0040c0c0
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x304
call fcn.0040c0c0
sub eax, 1
push eax
lea eax, [ebp - 0x7174]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x304
call fcn.0040c100
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x7174]
push eax
push 0x642188
call fcn.0040fb90
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42f4a0
push 0x642188
lea ecx, [ebp - 0x7158]
call fcn.0040cc80
mov eax, dword [ebp - 0x713c]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0xd84]
call fcn.00411080
push eax
lea ecx, [ebp - 0x7158]
call fcn.0040cc80
push 0
lea ecx, [ebp - 0x7158]
call fcn.00411080
push eax
call fcn.0058a8d0
add esp, 8
test eax, eax
je 0x42f5c0
push 0x6a6f4e
call fcn.005884f0
add esp, 4
test eax, eax
je 0x42f57f
mov ecx, dword [ebp - 0x14]
add ecx, 0x390
call fcn.00411080
push eax
mov eax, dword [ebp - 0x713c]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0xd84]
call fcn.00411080
push eax
call fcn.00589270
add esp, 8
test eax, eax
jne 0x42f57f
push 0x6a6f4e
lea ecx, [ebp - 0x7158]
call fcn.0040cc80
push 0
lea ecx, [ebp - 0x7158]
call fcn.00411080
push eax
call fcn.0058a8d0
add esp, 8
test eax, eax
jne 0x42f57f
mov byte [ebp - 0x70f6], 1
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x7174]
call fcn.004116e0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x7158]
call fcn.004116e0
jmp 0x42f401
mov byte [ebp - 0x7135], 1
push 0x641fe4
lea ecx, [ebp - 0x7158]
call fcn.0040cc80
push 0
lea ecx, [ebp - 0x7158]
call fcn.00411080
push eax
call fcn.0058a8d0
add esp, 8
test eax, eax
je 0x42f5be
mov eax, dword [ebp - 0x713c]
mov byte [ebp + eax - 0x40dc], 1
jmp 0x42f5c7
mov byte [ebp - 0x70f6], 1
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x7174]
call fcn.004116e0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x7158]
call fcn.004116e0
jmp 0x42f401
movzx eax, byte [ebp - 0x7135]
test eax, eax
jne 0x42f5fc
mov byte [ebp - 0x70f5], 1
movzx eax, byte [ebp - 0x70f5]
test eax, eax
jne 0x42f612
movzx eax, byte [ebp - 0x70f6]
test eax, eax
je 0x42f648
mov ecx, dword [ebp - 0x14]
call fcn.00435aa0
movzx eax, al
test eax, eax
je 0x42f634
mov eax, dword [ebp - 0x40e0]
or eax, 0xf0000
mov dword [ebp - 0x40e0], eax
jmp 0x42f643
mov eax, dword [ebp - 0x40e0]
or eax, 8
mov dword [ebp - 0x40e0], eax
jmp 0x42f6df
mov dword [ebp - 0x7178], 0
mov byte [ebp - 0x7179], 1
jmp 0x42f66a
mov eax, dword [ebp - 0x7178]
add eax, 1
mov dword [ebp - 0x7178], eax
cmp dword [ebp - 0x7178], 0x2c
jge 0x42f6b4
movzx eax, byte [ebp - 0x7179]
test eax, eax
je 0x42f69c
mov ecx, dword [ebp - 0x7178]
movzx edx, byte [ebp + ecx - 0x40dc]
test edx, edx
je 0x42f69c
mov dword [ebp - 0xa254], 1
jmp 0x42f6a6
mov dword [ebp - 0xa254], 0
mov al, byte [ebp - 0xa254]
mov byte [ebp - 0x7179], al
jmp 0x42f65b
movzx eax, byte [ebp - 0x7179]
test eax, eax
je 0x42f6d0
mov eax, dword [ebp - 0x40e0]
or eax, 4
mov dword [ebp - 0x40e0], eax
jmp 0x42f6df
mov eax, dword [ebp - 0x40e0]
or eax, 1
mov dword [ebp - 0x40e0], eax
mov byte [ebp - 0x817c], 0
push 0xfff
push 0
lea eax, [ebp - 0x817b]
push eax
call fcn.00588e80
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x294
call fcn.00411080
push eax
push 0x1000
lea eax, [ebp - 0x817c]
push eax
push 0x6a6f4e
push str.StartingShotTaskEntrence
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x817c]
push eax
call fcn.005884f0
add esp, 4
test eax, eax
je 0x42f756
lea eax, [ebp - 0x817c]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x358
call fcn.00411550
jmp 0x42f76d
mov ecx, dword [ebp - 0x14]
call fcn.00431f90
mov eax, dword [ebp - 0x40e0]
or eax, 0x40
mov dword [ebp - 0x40e0], eax
mov dword [ebp - 0x8180], 0
jmp 0x42f788
mov eax, dword [ebp - 0x8180]
add eax, 1
mov dword [ebp - 0x8180], eax
cmp dword [ebp - 0x8180], 0x2c
jge 0x42f86c
mov byte [ebp - 0x9180], 0
push 0xfff
push 0
lea eax, [ebp - 0x917f]
push eax
call fcn.00588e80
add esp, 0xc
mov byte [ebp - 0xa180], 0
push 0xfff
push 0
lea eax, [ebp - 0xa17f]
push eax
call fcn.00588e80
add esp, 0xc
mov eax, dword [ebp - 0x8180]
push eax
push str.StartingShotDownloadInfo_d
lea ecx, [ebp - 0xa180]
push ecx
call fcn.0058903d
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x294
call fcn.00411080
push eax
push 0x1000
lea eax, [ebp - 0x9180]
push eax
push 0x6a6f4e
lea ecx, [ebp - 0xa180]
push ecx
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x9180]
push eax
call fcn.005884f0
add esp, 4
test eax, eax
je 0x42f850
lea eax, [ebp - 0x9180]
push eax
mov ecx, dword [ebp - 0x8180]
imul ecx, ecx, 0x1c
mov edx, dword [ebp - 0x14]
lea ecx, [edx + ecx + 0x3e4]
call fcn.00411550
jmp 0x42f867
mov ecx, dword [ebp - 0x14]
call fcn.00431fc0
mov eax, dword [ebp - 0x8180]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004320f0
jmp 0x42f779
mov ecx, dword [ebp - 0x14]
add ecx, 0x374
call fcn.0040c0c0
test eax, eax
jne 0x42f8b2
cmp dword [0x6d94ec], 0
je 0x42f8a3
push 0x22
push 0x22
push 0x641f90
mov eax, dword [0x6d94ec]
mov ecx, dword [eax]
mov edx, dword [0x6d94ec]
push edx
mov eax, dword [ecx + 8]
call eax
mov eax, dword [ebp - 0x40e0]
or eax, 2
mov dword [ebp - 0x40e0], eax
mov eax, dword [ebp - 0x40e0]
and eax, 0xf0
mov dword [ebp - 0xa184], eax
mov eax, dword [ebp - 0x40e0]
and eax, 4
mov dword [ebp - 0xa188], eax
mov eax, dword [ebp - 0x40e0]
and eax, 0xf0000
mov dword [ebp - 0xa18c], eax
mov eax, dword [ebp - 0x40e0]
and eax, 8
mov dword [ebp - 0xa190], eax
mov eax, dword [ebp - 0x40e0]
and eax, 1
mov dword [ebp - 0xa194], eax
cmp dword [ebp - 0xa184], 0xf0
jne 0x42f91c
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 1
jmp 0x42faa4
cmp dword [ebp - 0xa188], 4
jne 0x42f990
cmp dword [0x6d94ec], 0
je 0x42f94a
push 0x22
push 0x22
push 0x641f70
mov eax, dword [0x6d94ec]
mov ecx, dword [eax]
mov edx, dword [0x6d94ec]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x294
call fcn.00411080
push eax
call fcn.00589238
add esp, 4
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 1
push 0
push 0x641f5c
push 0x641f38
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x14]
push ecx
call fcn.005072b0
mov ecx, dword [ebp - 0x14]
call fcn.0042fca0
jmp 0x42faa4
cmp dword [ebp - 0xa18c], 0xf0000
jne 0x42f9f4
cmp dword [0x6d94ec], 0
je 0x42f9c1
push 0x22
push 0x22
push 0x641f20
mov eax, dword [0x6d94ec]
mov ecx, dword [eax]
mov edx, dword [0x6d94ec]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x304
call fcn.00411080
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0042e550
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 8
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x150], 1
jmp 0x42faa4
cmp dword [ebp - 0xa190], 8
jne 0x42fa4d
cmp dword [0x6d94ec], 0
je 0x42fa22
push 0x22
push 0x22
push 0x641f10
mov eax, dword [0x6d94ec]
mov ecx, dword [eax]
mov edx, dword [0x6d94ec]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x304
call fcn.00411080
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0042e550
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x10
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x42faa4
cmp dword [ebp - 0xa194], 1
jne 0x42faa4
cmp dword [0x6d94ec], 0
je 0x42fa7b
push 0x22
push 0x22
push 0x641ef0
mov eax, dword [0x6d94ec]
mov ecx, dword [eax]
mov edx, dword [0x6d94ec]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x304
call fcn.00411080
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0042e550
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0xf
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0xf
je 0x42fac8
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0x10
je 0x42fac8
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 8
je 0x42fac8
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 9
jne 0x42fb21
mov ecx, dword [ebp - 0x14]
call fcn.00435220
mov dword [ebp - 0xa1dc], 1
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x30b0]
call fcn.004116e0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3094]
call fcn.004116e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2058]
call fcn.004116e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.004116e0
mov eax, dword [ebp - 0xa1dc]
jmp 0x42fb70
mov dword [ebp - 0xa1d8], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x30b0]
call fcn.004116e0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3094]
call fcn.004116e0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2058]
call fcn.004116e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.004116e0
mov eax, dword [ebp - 0xa1d8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0058848d
mov esp, ebp
pop ebp
ret