Function at 0x429030
Capabilities:
Accept command line arguments
Check mutex on windows
Create mailslot
Create thread
Delete file
Extract resource via kernel32 functions
Get comspec environment variable
Get file system object information
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1458
call fcn.0040b340
mov eax, dword [0x43e2c4]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0xb24], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0xb20], 0
mov dword [ebp - 0xb14], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 0xb18], 0
xor eax, eax
mov word [ebp - 0x6a0], ax
push 0x45e
push 0
lea ecx, [ebp - 0x69e]
push ecx
call fcn.00401f00
add esp, 0xc
xor edx, edx
mov word [ebp - 0xb08], dx
push 0x45e
push 0
lea eax, [ebp - 0xb06]
push eax
call fcn.00401f00
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0xd28], cx
push 0x1fe
push 0
lea edx, [ebp - 0xd26]
push edx
call fcn.00401f00
add esp, 0xc
xor eax, eax
mov word [ebp - 0xf38], ax
push 0x1fe
push 0
lea ecx, [ebp - 0xf36]
push ecx
call fcn.00401f00
add esp, 0xc
xor edx, edx
mov word [ebp - 0x210], dx
push 0x1fe
push 0
lea eax, [ebp - 0x20e]
push eax
call fcn.00401f00
add esp, 0xc
mov dword [ebp - 0x21c], 0
lea ecx, [ebp - 0xd2e]
call fcn.00401aa0
lea ecx, [ebp - 0xd2d]
call fcn.00401aa0
mov dword [ebp - 0x220], str.ErrorInfo.log
lea ecx, [ebp - 0xb08]
mov dword [ebp - 0xd2c], ecx
call dword [sym.imp.KERNEL32.dll_GetACP]
mov dword [ebp - 0x218], eax
mov edx, dword [ebp - 0x218]
push edx
call fcn.0040f280
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
lea ecx, [ebp - 0xf39]
call fcn.00401aa0
lea eax, [ebp - 0xf39]
push eax
call fcn.0042d590
lea ecx, [ebp - 0xf39]
call fcn.00401ab0
mov ecx, dword [ebp + 8]
mov dword [0x458314], ecx
push 0x118
push 0x458aa8
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [ebp - 5]
call fcn.00401aa0
lea ecx, [ebp - 0x6a1]
call fcn.00401aa0
lea edx, [ebp - 5]
push edx
call fcn.0042b130
mov dword [ebp - 4], eax
lea eax, [ebp - 0x6a1]
push eax
call fcn.0042ed40
lea ecx, [ebp - 0xd2e]
push ecx
call fcn.0042b100
lea edx, [ebp - 0xb14]
push edx
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0xd34], eax
cmp dword [ebp - 0xb14], 2
jle 0x4293ae
mov dword [ebp - 0xf40], 0xffffffff
lea eax, [ebp - 0x6a0]
mov dword [ebp - 0xf48], eax
mov dword [ebp - 0xf44], 0
lea ecx, [ebp - 0xf49]
call fcn.00401aa0
mov dword [ebp - 0xb24], 0x270f
mov dword [ebp - 0xb0c], 0
jmp 0x42925c
mov ecx, dword [ebp - 0xb0c]
add ecx, 1
mov dword [ebp - 0xb0c], ecx
mov edx, dword [ebp - 0xb0c]
movzx eax, word [edx*2 + 0x458aa8]
test eax, eax
je 0x4292a9
mov ecx, dword [ebp - 0xb0c]
movzx edx, word [ecx*2 + 0x458aa8]
cmp edx, 0x5c
je 0x429294
mov eax, dword [ebp - 0xb0c]
movzx ecx, word [eax*2 + 0x458aa8]
cmp ecx, 0x2f
jne 0x4292a7
mov edx, dword [ebp - 0xb0c]
lea eax, [edx*2 + 0x458aa8]
mov dword [ebp - 0xf44], eax
jmp 0x42924d
cmp dword [ebp - 0xf44], 0
je 0x4292cb
xor ecx, ecx
mov edx, dword [ebp - 0xf44]
mov word [edx], cx
mov eax, dword [ebp - 0xf44]
add eax, 2
mov dword [0x43ef68], eax
mov ecx, dword [ebp - 0xd34]
mov edx, dword [ecx + 4]
push edx
call fcn.00403f87
add esp, 4
mov dword [ebp - 0xf40], eax
mov eax, dword [ebp - 0xf48]
push eax
mov ecx, dword [ebp - 0xf40]
push ecx
lea edx, [ebp - 0xf49]
push edx
call fcn.0042ca50
mov dword [ebp - 4], eax
lea eax, [ebp - 0xf40]
push eax
mov ecx, dword [ebp - 0xf48]
push ecx
lea edx, [ebp - 0xf49]
push edx
call fcn.0042b930
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0xf40]
push ecx
push str._____d___d__r_n
mov edx, dword [ebp - 0xf48]
add edx, 0x27
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x10
push 0x43981c
mov eax, dword [ebp - 0xf48]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push str.wiatrcvw.txt
push 0x458aa8
push 0x439844
lea ecx, [ebp - 0xb08]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov edx, dword [ebp - 0xf48]
push edx
mov eax, dword [ebp - 0xf48]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea ecx, [ebp - 0xb08]
push ecx
call fcn.00401540
add esp, 0xc
lea ecx, [ebp - 0xf49]
call fcn.00401ab0
jmp 0x42a3be
push str.GlobalFileEventMultexSW
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x457a74], eax
cmp dword [0x457a74], 0
jne 0x4293e6
mov dword [ebp - 0xb24], 0x270e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb20], eax
jmp 0x42a3be
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb20], eax
cmp dword [ebp - 0xb20], 0xb7
jne 0x429417
mov dword [ebp - 0xb24], 0x270d
mov dword [ebp - 0xb20], 0
jmp 0x42a3be
lea ecx, [ebp - 0x1170]
call fcn.0042ae10
push 1
lea ecx, [ebp - 0x1170]
call fcn.0042ab30
test eax, eax
je 0x429451
lea edx, [ebp - 0x1170]
push edx
call fcn.00413c50
push 1
lea ecx, [ebp - 0x1170]
call fcn.0042aa50
jmp 0x429544
mov dword [ebp - 0xb24], 0x3e2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb20], eax
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [ebp - 0x220]
push ecx
push 0x458aa8
push 0x439884
lea edx, [ebp - 0xd28]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov eax, dword [ebp - 0xb20]
push eax
lea ecx, [ebp - 0x1170]
call fcn.0042ad40
push eax
movzx ecx, word [ebp - 0x228]
push ecx
movzx edx, word [ebp - 0x22a]
push edx
movzx eax, word [ebp - 0x22c]
push eax
movzx ecx, word [ebp - 0x22e]
push ecx
movzx edx, word [ebp - 0x232]
push edx
movzx eax, word [ebp - 0x234]
push eax
push str._d__02d__02d__02d:_02d:_02d__s_Step___d__r_n
lea ecx, [ebp - 0x6a0]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov edx, dword [ebp - 0xd2c]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x6a0]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, dword [ebp - 0xd2c]
push ecx
mov edx, dword [ebp - 0xd2c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea eax, [ebp - 0xd28]
push eax
call fcn.00401540
add esp, 0xc
lea ecx, [ebp - 0x1170]
call fcn.0042ad80
jmp 0x42a3be
lea ecx, [ebp - 0x1170]
call fcn.0042ad80
mov dword [ebp - 0x1174], 0
mov dword [ebp - 0xb0c], 0
jmp 0x429574
mov ecx, dword [ebp - 0xb0c]
add ecx, 1
mov dword [ebp - 0xb0c], ecx
mov edx, dword [ebp - 0xb0c]
movzx eax, word [edx*2 + 0x458aa8]
test eax, eax
je 0x4295c1
mov ecx, dword [ebp - 0xb0c]
movzx edx, word [ecx*2 + 0x458aa8]
cmp edx, 0x5c
je 0x4295ac
mov eax, dword [ebp - 0xb0c]
movzx ecx, word [eax*2 + 0x458aa8]
cmp ecx, 0x2f
jne 0x4295bf
mov edx, dword [ebp - 0xb0c]
lea eax, [edx*2 + 0x458aa8]
mov dword [ebp - 0x1174], eax
jmp 0x429565
cmp dword [ebp - 0x1174], 0
je 0x4295e3
xor ecx, ecx
mov edx, dword [ebp - 0x1174]
mov word [edx], cx
mov eax, dword [ebp - 0x1174]
add eax, 2
mov dword [0x43ef68], eax
mov ecx, dword [0x43ef68]
push ecx
push 0x4398e8
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x429608
mov dword [ebp - 0xb24], 0x3df
jmp 0x42a3be
push str.parser_manifest.xml
push 0x458aa8
push 0x439930
lea edx, [ebp - 0x210]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push str.regist.txt
push 0x458aa8
push 0x439954
lea eax, [ebp - 0xf38]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [ebp - 0xb20]
push ecx
lea edx, [ebp - 0x210]
push edx
call fcn.004010b0
add esp, 8
test eax, eax
jge 0x42966f
mov dword [ebp - 0xb24], 0x3e0
jmp 0x42a3be
lea eax, [ebp - 0xb20]
push eax
lea ecx, [ebp - 0xf38]
push ecx
call fcn.004010b0
add esp, 8
test eax, eax
jge 0x4296a0
push 9
lea edx, [ebp - 0xf38]
push edx
lea eax, [ebp - 0x210]
push eax
call fcn.00415c90
jmp 0x4296b5
push 1
lea ecx, [ebp - 0xf38]
push ecx
lea edx, [ebp - 0x210]
push edx
call fcn.00415c90
push str.parserchk.txt
push 0x458aa8
push 0x43997c
lea eax, [ebp - 0x6a0]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [ebp - 0xb20]
push ecx
lea edx, [ebp - 0x6a0]
push edx
call fcn.004010b0
add esp, 8
test eax, eax
jl 0x42973b
mov dword [0x45833c], 1
push str.parsernot.txt
push 0x458aa8
push 0x4399a4
lea eax, [ebp - 0x6a0]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [ebp - 0xb20]
push ecx
lea edx, [ebp - 0x6a0]
push edx
call fcn.004010b0
add esp, 8
test eax, eax
jl 0x42973b
mov dword [0x45833c], 2
push 0x458aa8
push str._sHTTP_Parser.chm
push 0x458cd8
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp - 0x1184], 0
mov dword [ebp - 0x1178], 0
mov dword [ebp - 0x117c], 0
mov dword [ebp - 0x1180], 0
push str.BINTYPE
push 0x12d
mov eax, dword [0x458314]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x1184], eax
cmp dword [ebp - 0x1184], 0
je 0x429846
push 0x460
push 0
lea ecx, [ebp - 0x6a0]
push ecx
call fcn.00401f00
add esp, 0xc
cmp dword [ebp - 0x1184], 0
je 0x4297da
mov edx, dword [ebp - 0x1184]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x1178], eax
cmp dword [ebp - 0x1184], 0
je 0x4297fa
mov ecx, dword [ebp - 0x1184]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x117c], eax
cmp dword [ebp - 0x1178], 0
je 0x429816
mov eax, dword [ebp - 0x1178]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x1180], eax
lea ecx, [ebp - 0x6a0]
push ecx
push str.logo.gif
mov edx, dword [ebp - 0x117c]
push edx
mov eax, dword [ebp - 0x1180]
push eax
call fcn.004193b0
lea ecx, [ebp - 0x6a0]
push ecx
call fcn.0040e5a0
mov dword [0x458318], eax
cmp dword [ebp - 0x1178], 0
je 0x42985c
mov edx, dword [ebp - 0x1178]
push edx
call dword [sym.imp.KERNEL32.dll_FreeResource]
push 0x458aa8
push str._s_themes_b_good.bmp
lea eax, [ebp - 0x6a0]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x458aa8
push str._s_themes_b_bad.bmp
lea ecx, [ebp - 0xb08]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x458aa8
push str._s_themes_b_desktop.bmp
lea edx, [ebp - 0xd28]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x6a0]
push eax
call fcn.0040e5a0
mov dword [0x45831c], eax
lea ecx, [ebp - 0xb08]
push ecx
call fcn.0040e5a0
mov dword [0x458320], eax
lea edx, [ebp - 0xd28]
push edx
call fcn.0040e5a0
mov dword [0x458324], eax
mov dword [ebp - 0x1188], 0x900000
push 0
push 0
push 0x878
push str..mailslotparser_manage
call dword [sym.imp.KERNEL32.dll_CreateMailslotW]
mov dword [0x457a80], eax
cmp dword [0x457a80], 0xffffffff
jne 0x4299ff
mov dword [ebp - 0xb24], 0x3e1
mov dword [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb20], eax
mov dword [0x457a80], 0
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [ebp - 0x220]
push ecx
push 0x458aa8
push 0x439ab8
lea edx, [ebp - 0xd28]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov eax, dword [ebp - 0xb20]
push eax
push str.Mail_Handle_Create_Error
movzx ecx, word [ebp - 0x228]
push ecx
movzx edx, word [ebp - 0x22a]
push edx
movzx eax, word [ebp - 0x22c]
push eax
movzx ecx, word [ebp - 0x22e]
push ecx
movzx edx, word [ebp - 0x232]
push edx
movzx eax, word [ebp - 0x234]
push eax
push 0x439af8
lea ecx, [ebp - 0x6a0]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov edx, dword [ebp - 0xd2c]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x6a0]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, dword [ebp - 0xd2c]
push ecx
mov edx, dword [ebp - 0xd2c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea eax, [ebp - 0xd28]
push eax
call fcn.00401540
add esp, 0xc
jmp 0x42a3be
push str.PARSER_SHARED_MAPMEMORY
mov ecx, dword [ebp - 0x1188]
push ecx
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [0x457a84], eax
cmp dword [0x457a84], 0
jne 0x429b13
mov dword [ebp - 0xb24], 0x3e1
mov dword [ebp - 4], 3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb20], eax
lea edx, [ebp - 0x234]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov eax, dword [ebp - 0x220]
push eax
push 0x458aa8
push 0x439b74
lea ecx, [ebp - 0xd28]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov edx, dword [ebp - 0xb20]
push edx
push 0x439b80
movzx eax, word [ebp - 0x228]
push eax
movzx ecx, word [ebp - 0x22a]
push ecx
movzx edx, word [ebp - 0x22c]
push edx
movzx eax, word [ebp - 0x22e]
push eax
movzx ecx, word [ebp - 0x232]
push ecx
movzx edx, word [ebp - 0x234]
push edx
push 0x439bb0
lea eax, [ebp - 0x6a0]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov ecx, dword [ebp - 0xd2c]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x6a0]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0xd2c]
push eax
mov ecx, dword [ebp - 0xd2c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0xd28]
push edx
call fcn.00401540
add esp, 0xc
jmp 0x42a3be
mov eax, dword [ebp - 0x1188]
push eax
push 0
push 0
push 2
mov ecx, dword [0x457a84]
push ecx
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [0x457a8c], eax
cmp dword [0x457a8c], 0
jne 0x429c27
mov dword [ebp - 0xb24], 0x3e1
mov dword [ebp - 4], 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb20], eax
lea edx, [ebp - 0x234]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov eax, dword [ebp - 0x220]
push eax
push 0x458aa8
push 0x439bfc
lea ecx, [ebp - 0xd28]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov edx, dword [ebp - 0xb20]
push edx
push str.Map_Handle_Create_Error
movzx eax, word [ebp - 0x228]
push eax
movzx ecx, word [ebp - 0x22a]
push ecx
movzx edx, word [ebp - 0x22c]
push edx
movzx eax, word [ebp - 0x22e]
push eax
movzx ecx, word [ebp - 0x232]
push ecx
movzx edx, word [ebp - 0x234]
push edx
push 0x439c38
lea eax, [ebp - 0x6a0]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov ecx, dword [ebp - 0xd2c]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x6a0]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0xd2c]
push eax
mov ecx, dword [ebp - 0xd2c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0xd28]
push edx
call fcn.00401540
add esp, 0xc
jmp 0x42a3be
mov eax, dword [0x457a8c]
add eax, 0x100000
mov dword [0x4591c0], eax
mov dword [ebp - 0x1190], 8
mov dword [ebp - 0x118c], 0x3ff
lea ecx, [ebp - 0x1190]
push ecx
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push 0x100
push 0x458678
push str.COMSPEC
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
jne 0x429c80
push str.cmd.exe
push 0x458678
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x5460
push 0
push 0x450968
call fcn.00401f00
add esp, 0xc
push 0x439ca4
push 0x458aa8
push 0x439cc0
lea edx, [ebp - 0x6a0]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0xb20]
push eax
lea ecx, [ebp - 0x6a0]
push ecx
call fcn.004010b0
add esp, 8
test eax, eax
jl 0x429ce6
push 0x450968
push 0x5460
lea edx, [ebp - 0x6a0]
push edx
call fcn.004012f0
add esp, 0xc
push 0x43ef6c
push 0x432ee0
call fcn.0040e5e0
mov dword [0x458328], 1
lea eax, [ebp - 0xb10]
push eax
push 0
push 0
push 0x41a390
push 0
push 0
call fcn.00403ceb
add esp, 0x18
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
jne 0x429e16
mov dword [ebp - 0xb24], 0x3e1
mov dword [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb20], eax
lea ecx, [ebp - 0x234]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edx, dword [ebp - 0x220]
push edx
push 0x458aa8
push 0x439ccc
lea eax, [ebp - 0xd28]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ecx, dword [ebp - 0xb20]
push ecx
push str.sessionSearchThread_Call_Error
movzx edx, word [ebp - 0x228]
push edx
movzx eax, word [ebp - 0x22a]
push eax
movzx ecx, word [ebp - 0x22c]
push ecx
movzx edx, word [ebp - 0x22e]
push edx
movzx eax, word [ebp - 0x232]
push eax
movzx ecx, word [ebp - 0x234]
push ecx
push str._d__02d__02d__02d:_02d:_02d__s___d__r_n
lea edx, [ebp - 0x6a0]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov eax, dword [ebp - 0xd2c]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x6a0]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0xd2c]
push edx
mov eax, dword [ebp - 0xd2c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea ecx, [ebp - 0xd28]
push ecx
call fcn.00401540
add esp, 0xc
jmp 0x42a3be
call fcn.0040ee00
push str._test.html
call fcn.0040e620
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
je 0x42a065
mov dword [ebp - 0xb0c], 0
jmp 0x429e53
mov edx, dword [ebp - 0xb0c]
add edx, 1
mov dword [ebp - 0xb0c], edx
mov eax, dword [ebp - 0xb0c]
mov ecx, dword [ebp - 0x23c]
movzx edx, word [ecx + eax*2]
test edx, edx
je 0x429e94
mov eax, dword [ebp - 0xb0c]
mov ecx, dword [ebp - 0x23c]
movzx edx, word [ecx + eax*2]
cmp edx, 0x5c
jne 0x429e92
mov eax, dword [ebp - 0xb0c]
mov ecx, dword [ebp - 0x23c]
lea edx, [ecx + eax*2 + 2]
mov dword [ebp - 0x21c], edx
jmp 0x429e44
cmp dword [ebp - 0x21c], 0
jne 0x429ea7
mov dword [ebp - 0x21c], 0x439d7c
mov eax, dword [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0xb1c], eax
mov dword [0x45832c], 0xffffffff
mov dword [ebp - 0xb0c], 0
jmp 0x429edf
mov ecx, dword [ebp - 0xb0c]
add ecx, 1
mov dword [ebp - 0xb0c], ecx
mov edx, dword [ebp - 0xb0c]
shl edx, 7
movzx eax, word [edx + 0x450468]
test eax, eax
je 0x429f2c
mov ecx, dword [ebp - 0xb1c]
push ecx
mov edx, dword [ebp - 0x21c]
push edx
mov eax, dword [ebp - 0xb0c]
shl eax, 7
add eax, 0x450468
push eax
call fcn.00401670
add esp, 0xc
test eax, eax
jne 0x429f2a
mov ecx, dword [ebp - 0xb0c]
mov dword [0x45832c], ecx
jmp 0x429f2c
jmp 0x429ed0
cmp dword [0x45832c], 0xffffffff
jne 0x429fc8
mov dword [ebp - 0x21c], str.msedge.exe
mov edx, dword [ebp - 0x21c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0xb1c], eax
mov dword [0x45832c], 0xffffffff
mov dword [ebp - 0xb0c], 0
jmp 0x429f7b
mov eax, dword [ebp - 0xb0c]
add eax, 1
mov dword [ebp - 0xb0c], eax
mov ecx, dword [ebp - 0xb0c]
shl ecx, 7
movzx edx, word [ecx + 0x450468]
test edx, edx
je 0x429fc8
mov eax, dword [ebp - 0xb1c]
push eax
mov ecx, dword [ebp - 0x21c]
push ecx
mov edx, dword [ebp - 0xb0c]
shl edx, 7
add edx, 0x450468
push edx
call fcn.00401670
add esp, 0xc
test eax, eax
jne 0x429fc6
mov eax, dword [ebp - 0xb0c]
mov dword [0x45832c], eax
jmp 0x429fc8
jmp 0x429f6c
cmp dword [0x45832c], 0xffffffff
jne 0x42a065
mov dword [ebp - 0x21c], str.iexplore.exe
mov ecx, dword [ebp - 0x21c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0xb1c], eax
mov dword [0x45832c], 0xffffffff
mov dword [ebp - 0xb0c], 0
jmp 0x42a017
mov edx, dword [ebp - 0xb0c]
add edx, 1
mov dword [ebp - 0xb0c], edx
mov eax, dword [ebp - 0xb0c]
shl eax, 7
movzx ecx, word [eax + 0x450468]
test ecx, ecx
je 0x42a065
mov edx, dword [ebp - 0xb1c]
push edx
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0xb0c]
shl ecx, 7
add ecx, 0x450468
push ecx
call fcn.00401670
add esp, 0xc
test eax, eax
jne 0x42a063
mov edx, dword [ebp - 0xb0c]
mov dword [0x45832c], edx
jmp 0x42a065
jmp 0x42a008
push str.parsercommon.data
push 0x458aa8
push 0x439dec
lea eax, [ebp - 0x6a0]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [ebp - 0xb20]
push ecx
lea edx, [ebp - 0x6a0]
push edx
call fcn.004010b0
add esp, 8
test eax, eax
jl 0x42a0e6
push 0x455dc8
push 0x310
lea eax, [ebp - 0x6a0]
push eax
call fcn.004012f0
add esp, 0xc
test eax, eax
jl 0x42a0df
mov ecx, dword [0x455dd0]
mov dword [0x45832c], ecx
mov edx, dword [0x455dd4]
mov dword [0x43ef40], edx
mov eax, dword [0x455dcc]
mov dword [0x458330], eax
jmp 0x42a0e6
mov byte [0x455dc8], 0
movzx ecx, byte [0x455dc8]
test ecx, ecx
jne 0x42a166
mov byte [0x455dc8], 9
mov byte [0x455dc9], 9
mov byte [0x455dca], 3
mov byte [0x455dcb], 3
mov edx, dword [0x458330]
mov dword [0x455dcc], edx
mov eax, dword [0x45832c]
mov dword [0x455dd0], eax
mov ecx, dword [0x43ef40]
mov dword [0x455dd4], ecx
mov byte [0x455dd8], 0
mov byte [0x455dd9], 0
mov byte [0x455dda], 0
mov byte [0x455ddc], 0
push 0
push 0x455dc8
push 0x310
lea edx, [ebp - 0x6a0]
push edx
call fcn.00401400
add esp, 0x10
push 0
push 0
push 0x21
push 0x10
push 0x10
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov dword [0x45915c], eax
cmp dword [0x45915c], 0
je 0x42a1e6
mov dword [ebp - 0x1450], 0x99
jmp 0x42a19f
mov eax, dword [ebp - 0x1450]
add eax, 1
mov dword [ebp - 0x1450], eax
cmp dword [ebp - 0x1450], 0xb5
jg 0x42a1e6
push 0
push 0x10
push 0x10
push 1
movzx ecx, word [ebp - 0x1450]
push ecx
mov edx, dword [0x458314]
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [ebp - 0x144c], eax
mov eax, dword [ebp - 0x144c]
push eax
push 0xffffffffffffffff
mov ecx, dword [0x45915c]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
jmp 0x42a190
push 0x1000
push 0
push 0xff000000
push 0
push 0xf
push 0x14c
mov edx, dword [0x458314]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_LoadImageW]
mov dword [0x459158], eax
push 0x4000
push 0x2b4
lea eax, [ebp - 0x1448]
push eax
push 0
push 0x439df8
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [0x459150], eax
push 0x4001
push 0x2b4
lea ecx, [ebp - 0x1448]
push ecx
push 0
push 0x439e00
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [0x459154], eax
push str.RICHED20.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x238], eax
push str.HHCTRL.OCX
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
je 0x42a295
push str.HtmlHelpW
mov edx, dword [ebp - 0x238]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4591c8], eax
push str.imm32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
je 0x42a2c6
push str.ImmAssociateContext
mov eax, dword [ebp - 0x238]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4591c4], eax
push 0x8d
mov ecx, dword [0x458314]
push ecx
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov dword [0x457a70], eax
push 0
push 0x425140
push 0
push 0x259
mov edx, dword [0x458314]
push edx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
mov dword [0x457a94], 0
mov dword [0x458328], 0
push 0x458aa8
push str._slist.txt
lea eax, [ebp - 0x6a0]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [ebp - 0x6a0]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x7530
mov edx, dword [ebp - 0x214]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x457a88], 0
je 0x42a37a
push 0x1388
mov ecx, dword [0x457a88]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [0x457a88]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call fcn.00414210
push str.sitelink.txt
push 0x458aa8
push str._s_s
lea eax, [ebp - 0x6a0]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 0
push 0x450968
push 0x5460
lea ecx, [ebp - 0x6a0]
push ecx
call fcn.00401400
add esp, 0x10
mov dword [ebp - 4], eax
mov dword [ebp - 0x218], 0x10
cmp dword [0x459160], 0
je 0x42a3de
mov edx, dword [0x459160]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp dword [0x459158], 0
je 0x42a3f3
mov eax, dword [0x459158]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp dword [0x45915c], 0
je 0x42a409
mov ecx, dword [0x45915c]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp dword [0x457a8c], 0
je 0x42a41f
mov edx, dword [0x457a8c]
push edx
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
cmp dword [0x457a84], 0
je 0x42a434
mov eax, dword [0x457a84]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x457a80], 0
je 0x42a44a
mov ecx, dword [0x457a80]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x457a74], 0
je 0x42a460
mov edx, dword [0x457a74]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xb24]
mov dword [ebp - 0x1458], eax
cmp dword [ebp - 0x1458], 0x3df
jg 0x42a49a
cmp dword [ebp - 0x1458], 0x3df
je 0x42a546
cmp dword [ebp - 0x1458], 0
je 0x42a538
jmp case.default.0x42a52c
cmp dword [ebp - 0x1458], 0x3e9
jg 0x42a4eb
cmp dword [ebp - 0x1458], 0x3e9
je 0x42a64e
cmp dword [ebp - 0x1458], 0x3e0
je 0x42a57c
cmp dword [ebp - 0x1458], 0x3e1
je 0x42a5b2
cmp dword [ebp - 0x1458], 0x3e2
je 0x42a60e
jmp case.default.0x42a52c
cmp dword [ebp - 0x1458], 0x270e
jg 0x42a533
cmp dword [ebp - 0x1458], 0x270d
jge 0x42a7d5
mov ecx, dword [ebp - 0x1458]
sub ecx, 0x3ea
mov dword [ebp - 0x1458], ecx
cmp dword [ebp - 0x1458], 3
ja case.default.0x42a52c
mov edx, dword [ebp - 0x1458]
jmp dword [edx*4 + 0x42a8a8]
jmp case.default.0x42a52c
xor eax, eax
mov word [ebp - 0x6a0], ax
jmp 0x42a82f
push 0
call fcn.0040f280
test eax, eax
je 0x42a565
push 0x439eb0
lea ecx, [ebp - 0x6a0]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x42a577
push str.There_is_a_problem_with_the_contents_of_the_module._n__1___I_cannot_run_the_program.
lea edx, [ebp - 0x6a0]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x42a82f
push 0
call fcn.0040f280
test eax, eax
je 0x42a59b
push 0x439fb0
lea eax, [ebp - 0x6a0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x42a5ad
push str.I_have_a_problem_with_my_module_configuration._n__2___I_cannot_run_the_program.
lea ecx, [ebp - 0x6a0]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x42a82f
push 0
call fcn.0040f280
test eax, eax
je 0x42a5df
mov edx, dword [ebp - 0xb20]
push edx
mov eax, dword [ebp - 4]
push eax
push 0x43a0a8
lea ecx, [ebp - 0x6a0]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
jmp 0x42a5ff
mov edx, dword [ebp - 0xb20]
push edx
mov eax, dword [ebp - 4]
push eax
push str.OS_state_is_unstable___d_:__d_
lea ecx, [ebp - 0x6a0]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x218], 0x30
jmp 0x42a82f
push 0
call fcn.0040f280
test eax, eax
je 0x42a62d
push 0x43a170
lea edx, [ebp - 0x6a0]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x42a63f
push str.The_operating_environment_of_the_PC_is_unknown._nAbort_program_execution.
lea eax, [ebp - 0x6a0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [ebp - 0x218], 0x30
jmp 0x42a82f
push 0
call fcn.0040f280
test eax, eax
je 0x42a67d
lea ecx, [ebp - 0xd2e]
push ecx
call fcn.0042ae70
push eax
push 0x43a250
lea edx, [ebp - 0x6a0]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42a69f
lea eax, [ebp - 0xd2e]
push eax
call fcn.0042ae70
push eax
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__1_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea ecx, [ebp - 0x6a0]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42a82f
push 0
call fcn.0040f280
test eax, eax
je 0x42a6d3
lea edx, [ebp - 0xd2e]
push edx
call fcn.0042ae70
push eax
push 0x43a450
lea eax, [ebp - 0x6a0]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42a6f5
lea ecx, [ebp - 0xd2e]
push ecx
call fcn.0042ae70
push eax
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__2_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea edx, [ebp - 0x6a0]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42a82f
push 0
call fcn.0040f280
test eax, eax
je 0x42a729
lea eax, [ebp - 0xd2e]
push eax
call fcn.0042ae70
push eax
push 0x43a650
lea ecx, [ebp - 0x6a0]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42a74b
lea edx, [ebp - 0xd2e]
push edx
call fcn.0042ae70
push eax
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__3_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea eax, [ebp - 0x6a0]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42a82f
push 0
call fcn.0040f280
test eax, eax
je 0x42a776
mov ecx, dword [ebp - 4]
push ecx
push 0x43a850
lea edx, [ebp - 0x6a0]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42a78f
mov eax, dword [ebp - 4]
push eax
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__4_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea ecx, [ebp - 0x6a0]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42a82f
push 0
call fcn.0040f280
test eax, eax
je 0x42a7ba
mov edx, dword [ebp - 4]
push edx
push 0x43aa50
lea eax, [ebp - 0x6a0]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42a7d3
mov ecx, dword [ebp - 4]
push ecx
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__5_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea edx, [ebp - 0x6a0]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42a82f
push 0
call fcn.0040f280
test eax, eax
je 0x42a7fe
mov eax, dword [ebp - 0xb20]
push eax
push 0x43ac50
lea ecx, [ebp - 0x6a0]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42a81a
mov edx, dword [ebp - 0xb20]
push edx
push 0x43ac80
lea eax, [ebp - 0x6a0]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp - 0x218], 0x30
jmp 0x42a82f
xor ecx, ecx
mov word [ebp - 0x6a0], cx
movzx edx, word [ebp - 0x6a0]
test edx, edx
je 0x42a85a
mov eax, dword [ebp - 0x218]
push eax
push str._notification_BOX
lea ecx, [ebp - 0x6a0]
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, dword [ebp - 0xb24]
mov dword [ebp - 0x1454], edx
lea ecx, [ebp - 0x6a1]
call fcn.00401ab0
lea ecx, [ebp - 5]
call fcn.00401ab0
lea ecx, [ebp - 0xd2d]
call fcn.00401ab0
lea ecx, [ebp - 0xd2e]
call fcn.00401ab0
mov eax, dword [ebp - 0x1454]
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.00401ee7
mov esp, ebp
pop ebp
ret 0x10