Function at 0x42cc79
Capabilities:
Check for peb ntglobalflag flag
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4abf69
mov eax, dword fs:[0]
push eax
sub esp, 0x50
push ebx
push esi
push edi
mov eax, dword [0x4d6674]
xor eax, esp
push eax
lea eax, [esp + 0x60]
mov dword fs:[0], eax
call fcn.0046e7df
push eax
lea ecx, [esp + 0x1c]
call fcn.00401764
and dword [esp + 0x68], 0
call fcn.0046e7df
push eax
lea ecx, [esp + 0x30]
call fcn.00401764
xor edi, edi
inc edi
mov byte [esp + 0x68], 1
call fcn.0046e7df
push eax
lea ecx, [esp + 0x2c]
call fcn.00401764
mov byte [esp + 0x68], 2
call fcn.0046e7df
push eax
lea ecx, [esp + 0x28]
call fcn.00401764
mov byte [esp + 0x68], 3
call fcn.0046e7df
push eax
lea ecx, [esp + 0x38]
call fcn.00401764
mov byte [esp + 0x68], 4
call fcn.0046e7df
push eax
lea ecx, [esp + 0x34]
call fcn.00401764
mov byte [esp + 0x68], 5
call fcn.0046e7df
push eax
lea ecx, [esp + 0x24]
call fcn.00401764
mov byte [esp + 0x68], 6
call fcn.0046e7df
push eax
lea ecx, [esp + 0x18]
call fcn.00401764
mov byte [esp + 0x68], 7
call fcn.0046e7df
push eax
lea ecx, [esp + 0x20]
call fcn.00401764
lea ecx, [esp + 0x14]
mov byte [esp + 0x68], 8
call fcn.00401979
mov ebx, dword [ebp + 8]
mov ecx, ebx
call fcn.0042c850
cmp dword [ebx + 0x4dc], 0
mov esi, eax
mov dword [esp + 0x38], esi
jne 0x42d858
mov eax, 0x190
cmp esi, eax
jl 0x42cdf1
mov edx, dword [ebx + 0x4f4]
cmp edx, 0x39
mov ecx, 0xc8
jne 0x42cd9f
mov dword [esp + 0x38], ecx
cmp dword [esp + 0x38], eax
jl 0x42cdf1
cmp edx, 0x3b
jne 0x42cdae
mov dword [esp + 0x38], ecx
cmp dword [esp + 0x38], eax
jl 0x42cdf1
cmp edx, 0x2d
jne 0x42cdbd
mov dword [esp + 0x38], ecx
cmp dword [esp + 0x38], eax
jl 0x42cdf1
cmp edx, 0x79
jne 0x42cdcc
mov dword [esp + 0x38], ecx
cmp dword [esp + 0x38], eax
jl 0x42cdf1
cmp edx, 0x29
jne 0x42cdf1
mov dword [esp + 0x38], ecx
lea ecx, [ebx + 0x518]
push 0x4b6094
mov dword [ebx + 0x13c], edi
call fcn.00403370
mov eax, dword [esp + 0x38]
lea ecx, [eax - 0x64]
mov edx, 0x12b
cmp ecx, edx
ja 0x42dea2
cmp dword [ebx + 0x4f4], 0x21
lea ecx, [edx + 0x21]
jne 0x42ce1f
cmp eax, ecx
je 0x42ce1f
mov dword [ebx + 0x4f4], 2
cmp dword [ebx + 0x4f4], 0x2f
jne 0x42ce32
mov dword [ebx + 0x4f4], 5
cmp dword [ebx + 0x4f4], 0x25
jne 0x42ce45
mov dword [ebx + 0x4f4], 2
cmp dword [ebx + 0x4f4], edi
jne 0x42ce57
mov dword [ebx + 0x4f4], 4
mov eax, dword [ebx + 0x4f4]
xor edi, edi
cmp eax, edi
jne 0x42cf08
push edi
push str.ProxyNeedToLogin
call fcn.0045a5d0
test eax, eax
pop ecx
pop ecx
je 0x42ce9c
push ebx
call fcn.00429c64
test eax, eax
je 0x42ce9c
lea ecx, [ebx + 0x4cc]
call fcn.00461052
test eax, eax
je 0x42ce9c
lea ecx, [ebx + 0x4d0]
call fcn.00461052
lea eax, [ebx + 0x54]
push str.ftps:__
push eax
call fcn.00460b6c
test eax, eax
pop ecx
pop ecx
jne 0x42ceeb
cmp dword [ebx + 0x49c], edi
jne 0x42ceeb
lea ecx, [ebx + 0x4cc]
call fcn.00461052
neg eax
sbb eax, eax
and eax, 0xffffffe4
add eax, 0x1e
mov dword [ebx + 0x4f4], eax
lea eax, [esp + 0x4c]
push 0x6e
push eax
call fcn.00461b1e
pop ecx
pop ecx
mov byte [esp + 0x68], 0xa
jmp 0x42cf86
push 0x6e
pop eax
push eax
mov dword [ebx + 0x4f4], eax
lea eax, [esp + 0x50]
push eax
call fcn.00461b1e
pop ecx
pop ecx
mov byte [esp + 0x68], 9
jmp 0x42cf86
cmp eax, 0x1f
jne 0x42cf2d
mov eax, dword [esp + 0x38]
add eax, 0xffffff38
push 0x63
pop ecx
cmp ecx, eax
sbb eax, eax
and eax, 0x1e
inc eax
inc eax
mov dword [ebx + 0x4f4], eax
jmp 0x42d55e
cmp eax, 0x6f
je 0x42d549
cmp eax, 0x75
je 0x42d549
cmp eax, 0x71
jne 0x42cf53
mov dword [ebx + 0x4f4], 0x72
jmp 0x42d55e
cmp eax, 0x73
jne 0x42cfb3
lea ecx, [ebx + 0x4cc]
call fcn.00461052
neg eax
sbb eax, eax
and eax, 0xffffffe4
add eax, 0x1e
mov dword [ebx + 0x4f4], eax
lea eax, [esp + 0x4c]
push 0x6e
push eax
call fcn.00461b1e
pop ecx
pop ecx
mov byte [esp + 0x68], 0xb
push eax
lea ecx, [ebx + 0x5c]
call fcn.004018c1
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
push 0
push 0x8b1
mov esi, ebx
call fcn.0043fa84
jmp 0x42d55e
cmp eax, 3
jne 0x42d029
mov eax, dword [esp + 0x38]
add eax, 0xffffff38
cmp eax, 0x63
ja 0x42d01a
lea eax, [ebx + 0x54]
push str.ftps:__
push eax
call fcn.00460b6c
test eax, eax
pop ecx
pop ecx
jne 0x42cfe6
cmp dword [ebx + 0x49c], edi
je 0x42d0bf
mov esi, dword [0x4db468]
call fcn.0047261a
push 0
mov eax, dword [eax + 4]
push str.FtpsUseCCC
push esi
mov ecx, eax
call fcn.00471a63
test eax, eax
je 0x42d0bf
mov dword [ebx + 0x4f4], 0x78
jmp 0x42d55e
mov dword [ebx + 0x4f4], 4
jmp 0x42d55e
cmp eax, 0x21
je 0x42d037
cmp eax, 5
jne 0x42d0ba
cmp dword [esp + 0x38], ecx
jne 0x42d04c
mov dword [ebx + 0x4f4], 0x2e
jmp 0x42d55e
cmp eax, 5
jne 0x42d0ba
lea eax, [esp + 0x4c]
push 0x6e
push eax
call fcn.00461b1e
pop ecx
pop ecx
lea ecx, [ebx + 0x5c]
push eax
mov byte [esp + 0x6c], 0xc
call fcn.004018c1
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
xor edi, edi
push edi
push 0x8b1
mov esi, ebx
call fcn.0043fa84
lea eax, [ebx + 0x54]
push str.ftps:__
push eax
call fcn.00460b6c
test eax, eax
pop ecx
pop ecx
jne 0x42d0a9
cmp dword [ebx + 0x49c], edi
je 0x42d0bf
mov esi, dword [0x4db468]
call fcn.0047261a
push edi
jmp 0x42cff3
cmp eax, 0x79
jne 0x42d0ce
mov dword [ebx + 0x4f4], 0x28
jmp 0x42d55e
cmp eax, 0x29
jne 0x42d18b
push 4
lea eax, [esp + 0x50]
lea esi, [ebx + 0x510]
push eax
mov ecx, esi
mov dword [ebx + 0x4f4], 0x2c
call fcn.004013ad
lea edi, [ebx + 0x518]
push eax
mov ecx, edi
mov byte [esp + 0x6c], 0xd
call fcn.004018c1
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
push str.Windows_NT
mov dword [ebx + 0x13c], 1
call fcn.0040326a
test eax, eax
jne 0x42d13f
push str.UNIX
call fcn.0040326a
test eax, eax
je 0x42d149
mov dword [ebx + 0x13c], 1
push 0x4b8f7c
push edi
call fcn.00460b6c
test eax, eax
pop ecx
pop ecx
je 0x42d164
mov dword [ebx + 0x13c], 3
push str.NETWARE
push edi
call fcn.00460b6c
test eax, eax
pop ecx
pop ecx
je 0x42d17f
mov dword [ebx + 0x13c], 5
and dword [ebx + 0x560], 0
jmp 0x42d55e
cmp eax, 0x2d
jne 0x42d2cc
mov edi, 0x4b72f0
lea esi, [ebx + 0x510]
push edi
mov dword [ebx + 0x4f4], 0x3a
call fcn.0040326a
test eax, eax
jl 0x42d2bb
push edi
call fcn.0040326a
inc eax
push eax
lea eax, [esp + 0x50]
push eax
mov ecx, esi
call fcn.004013ad
lea esi, [ebx + 0x564]
push eax
mov ecx, esi
mov byte [esp + 0x6c], 0xe
call fcn.004018c1
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
call fcn.0040326a
test eax, eax
jl 0x42d236
push edi
lea esi, [ebx + 0x564]
call fcn.0040326a
push eax
lea eax, [esp + 0x50]
lea esi, [ebx + 0x564]
push eax
mov ecx, esi
call fcn.004013d0
push eax
mov ecx, esi
mov byte [esp + 0x6c], 0xf
call fcn.004018c1
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
cmp dword [ebx + 0x13c], 3
jne 0x42d28b
mov cl, 0x2f
lea esi, [ebx + 0x564]
call fcn.00406bbf
test eax, eax
jl 0x42d284
mov cl, 0x2f
call fcn.00406bbf
push eax
lea eax, [esp + 0x50]
push eax
mov ecx, esi
call fcn.004013ad
push eax
mov ecx, esi
mov byte [esp + 0x6c], 0x10
call fcn.004018c1
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
jmp 0x42d28b
mov ecx, esi
call fcn.00401979
push 0
push 0x8da
mov esi, ebx
call fcn.0043fa84
test eax, eax
je 0x42d2bb
lea esi, [ebx + 0x564]
lea ecx, [ebx + 0x4a8]
push esi
call fcn.004018c1
push 0x4b4f70
mov ecx, esi
call fcn.00403370
mov eax, dword [ebx + 0x444]
mov dword [ebx + 0x448], eax
jmp 0x42d55e
cmp eax, 0x3b
jne 0x42d53f
add esi, 0xffffff9c
cmp esi, edx
ja 0x42d4f2
lea esi, [ebx + 0x50c]
mov edi, esi
call fcn.0040fb63
and dword [ebx + 0x5a4], 0
mov edi, dword [0x4db468]
call fcn.0047261a
mov eax, dword [eax + 4]
push 1
push str.UseModeZ
push edi
mov ecx, eax
call fcn.00471a63
test eax, eax
jne 0x42d31b
and dword [ebx + 0x5a4], eax
push str.APPE
call fcn.0040326a
xor ecx, ecx
test eax, eax
setge cl
push str.CHMOD
mov dword [ebx + 0x5a8], ecx
call fcn.0040326a
test eax, eax
jl 0x42d34a
mov dword [ebx + 0x570], 1
push str.REST_STREAM
call fcn.0040326a
test eax, eax
je 0x42d362
mov dword [ebx + 0x574], 1
call fcn.0046e7df
push eax
lea ecx, [esp + 0x3c]
call fcn.00401764
xor edi, edi
mov byte [esp + 0x68], 0x11
cmp dword [ebx + 0x574], edi
je 0x42d38e
push str.REST__
lea ecx, [esp + 0x3c]
call fcn.0040163d
cmp dword [ebx + 0x5a4], edi
je 0x42d3a4
push str.MODE_Z_
lea ecx, [esp + 0x3c]
call fcn.0040163d
cmp dword [ebx + 0x5a8], edi
je 0x42d3ba
push str.APPE_
lea ecx, [esp + 0x3c]
call fcn.0040163d
cmp dword [ebx + 0x570], edi
je 0x42d3d0
push str.CHMOD_
lea ecx, [esp + 0x3c]
call fcn.0040163d
cmp dword [ebx + 0x578], edi
je 0x42d3e6
push str.XMD5_
lea ecx, [esp + 0x3c]
call fcn.0040163d
push str.SIZE
call fcn.0040326a
test eax, eax
je 0x42d402
push str.SIZE_
lea ecx, [esp + 0x3c]
call fcn.0040163d
push str.MDTM
call fcn.0040326a
test eax, eax
je 0x42d41e
push str.MDTM_
lea ecx, [esp + 0x3c]
call fcn.0040163d
push str.AUTH_SSL
call fcn.0040326a
test eax, eax
jne 0x42d43a
push str.AUTH_TLS
call fcn.0040326a
test eax, eax
je 0x42d448
push str.FTPS_
lea ecx, [esp + 0x3c]
call fcn.0040163d
lea ecx, [esp + 0x38]
call fcn.00461052
test eax, eax
jne 0x42d4df
lea eax, [esp + 0x44]
push str.Features:
push eax
call fcn.00461ac5
lea ecx, [esp + 0x40]
push ecx
push eax
lea eax, [esp + 0x58]
push eax
mov byte [esp + 0x7c], 0x12
call fcn.004032e0
add esp, 0x14
push 0x4b4f64
push eax
lea eax, [esp + 0x54]
push eax
mov byte [esp + 0x74], 0x13
call fcn.0040145d
add esp, 0xc
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x6c], 0x14
call fcn.004018c1
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [esp + 0x48]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [esp + 0x68], 0x11
mov ecx, dword [esp + 0x44]
add ecx, 0xfffffff0
call fcn.0040174a
push edi
push 1
push edi
lea ecx, [esp + 0x44]
mov esi, ebx
call fcn.0043d153
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x38]
add ecx, 0xfffffff0
call fcn.0040174a
jmp 0x42d4ff
lea ecx, [ebx + 0x50c]
call fcn.00401979
xor edi, edi
cmp dword [ebx + 0x498], edi
je 0x42d51b
cmp dword [ebx + 0x21c], edi
jne 0x42d51b
mov dword [ebx + 0x4f4], 0x38
jmp 0x42d55e
or dword [ebx + 0x44c], 0xffffffff
lea eax, [ebx + 0x4a8]
push eax
mov edi, ebx
mov dword [ebx + 0x4d8], 1
call fcn.0042ec36
jmp 0x42d869
cmp eax, 0x39
jne 0x42d55e
jmp 0x42d869
push 0x64
push 0xc
mov esi, ebx
call fcn.00429cbf
mov dword [ebx + 0x4f4], 0x70
mov eax, dword [ebx + 0x4f4]
cmp eax, 2
jne 0x42daba
mov esi, 0x4b578c
push esi
lea eax, [esp + 0x50]
push str.ProxyFTP
push eax
call fcn.0045a6a6
add esp, 0xc
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x6c], 0x20
call fcn.004018c1
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
push ebx
call fcn.00429c64
test eax, eax
je 0x42d60f
push esi
lea eax, [esp + 0x50]
push str.ProxySkipServers
push eax
call fcn.0045a6a6
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x6c], 0x21
call fcn.004018c1
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
lea ecx, [esp + 0x18]
call fcn.00461052
test eax, eax
jne 0x42d60f
lea eax, [ebx + 0x4a4]
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.00461384
test eax, eax
pop ecx
pop ecx
je 0x42d60f
lea ecx, [esp + 0x1c]
call fcn.00401979
lea ecx, [esp + 0x1c]
call fcn.00461052
test eax, eax
jne 0x42da99
push ebx
call fcn.00429c64
test eax, eax
je 0x42da99
mov esi, 0x131
lea eax, [esp + 0x48]
push esi
push eax
call fcn.00461b1e
mov byte [esp + 0x70], 0x22
push dword [eax]
lea eax, [esp + 0x58]
push str.ProxyFtpType
push eax
call fcn.0045a6a6
add esp, 0x14
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x6c], 0x23
call fcn.004018c1
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x48]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [esp + 0x44]
push 0x12e
push eax
call fcn.00461b1e
pop ecx
pop ecx
push 0x24
pop edi
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x6c], 0x24
call fcn.004018c1
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x44]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [esp + 0x40]
push 0x12f
push eax
call fcn.00461b1e
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x6c], 0x25
call fcn.004018c1
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x40]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [esp + 0x3c]
push 0x130
push eax
call fcn.00461b1e
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x6c], 0x26
call fcn.004018c1
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x3c]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [esp + 0x38]
push esi
push eax
call fcn.00461b1e
pop ecx
pop ecx
mov byte [esp + 0x68], 0x27
push eax
lea ecx, [esp + 0x38]
call fcn.004018c1
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x38]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [esp + 0x50]
push 0x168
push eax
call fcn.00461b1e
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x28
call fcn.004018c1
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x50]
add ecx, 0xfffffff0
call fcn.0040174a
push 0x4b58c0
push 0x428
lea esi, [esp + 0x5c]
call fcn.00461b6d
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x6c], 0x29
call fcn.004018c1
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x54]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [esp + 0x58]
push str._Proxy_Login_Type._r_n
push eax
call fcn.00461ac5
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x64]
push eax
mov byte [esp + 0x7c], 0x2a
call fcn.004032e0
add esp, 0x14
push 2
push 1
push 0
mov ecx, eax
mov esi, ebx
mov byte [esp + 0x74], 0x2b
call fcn.0043d153
mov ecx, dword [esp + 0x54]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x58]
add ecx, 0xfffffff0
call fcn.0040174a
push dword [esp + 0x2c]
lea ecx, [esp + 0x1c]
call fcn.00403f56
test eax, eax
jne 0x42d8ec
movzx eax, word [ebx + 0x4bc]
cmp ax, 0x15
push dword [ebx + 0x4ac]
jne 0x42d83c
push dword [ebx + 0x4a4]
push str.CONNECT__s_r_nUSER__s_r_n
jmp 0x42da6d
movzx eax, ax
push eax
push dword [ebx + 0x4a4]
push str.CONNECT__s:_i_r_nUSER__s_r_n
lea eax, [esp + 0x24]
push eax
call fcn.00401a35
add esp, 0x14
push dword [ebx + 0x284]
lea ecx, [esp + 0x18]
mov edx, ebx
call fcn.0042cb2c
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [esp + 0x34]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [esp + 0x2c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.0040174a
xor eax, eax
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push dword [esp + 0x28]
lea ecx, [esp + 0x1c]
call fcn.00403f56
test eax, eax
jne 0x42d928
movzx eax, word [ebx + 0x4bc]
cmp ax, 0x15
jne 0x42d917
push dword [ebx + 0x4a4]
push str.OPEN__s_r_n
jmp 0x42d951
movzx eax, ax
push eax
push dword [ebx + 0x4a4]
push str.OPEN__s:_i_r_n
jmp 0x42d96f
push dword [esp + 0x24]
lea ecx, [esp + 0x1c]
call fcn.00403f56
test eax, eax
jne 0x42d987
movzx eax, word [ebx + 0x4bc]
cmp ax, 0x15
jne 0x42d960
push dword [ebx + 0x4a4]
push str.SITE__s_r_n
lea eax, [esp + 0x1c]
push eax
call fcn.00401a35
add esp, 0xc
jmp 0x42d97c
movzx eax, ax
push eax
push dword [ebx + 0x4a4]
push str.SITE__s:_i_r_n
lea eax, [esp + 0x20]
push eax
call fcn.00401a35
add esp, 0x10
mov dword [ebx + 0x4f4], edi
jmp 0x42d858
push dword [esp + 0x20]
lea ecx, [esp + 0x1c]
call fcn.00403f56
test eax, eax
jne 0x42d9fc
movzx eax, word [ebx + 0x4bc]
cmp ax, 0x15
push dword [ebx + 0x4cc]
jne 0x42d9cb
push dword [ebx + 0x4a4]
lea eax, [esp + 0x1c]
push dword [ebx + 0x4ac]
push 0x4b9218
push eax
call fcn.00401a35
add esp, 0x14
jmp 0x42d9ed
movzx eax, ax
push eax
push dword [ebx + 0x4a4]
lea eax, [esp + 0x20]
push dword [ebx + 0x4ac]
push str.USER__s__s:_i__s_r_n
push eax
call fcn.00401a35
add esp, 0x18
mov dword [ebx + 0x4f4], 0x1e
jmp 0x42d858
lea eax, [esp + 0x58]
push 0x416
push eax
call fcn.00461b1e
pop ecx
pop ecx
mov byte [esp + 0x68], 0x2c
push dword [eax]
lea ecx, [esp + 0x1c]
call fcn.00403f56
neg eax
sbb al, al
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x58]
inc al
add ecx, 0xfffffff0
mov byte [esp + 0x13], al
call fcn.0040174a
cmp byte [esp + 0x13], 0
je 0x42da4f
push dword [ebx + 0x4ac]
push str.USER__s_r_n
jmp 0x42de44
movzx eax, word [ebx + 0x4bc]
cmp ax, 0x15
jne 0x42da7f
push dword [ebx + 0x4a4]
push dword [ebx + 0x4ac]
push str.USER__s__s_r_n
lea eax, [esp + 0x20]
push eax
call fcn.00401a35
add esp, 0x10
jmp 0x42d858
movzx eax, ax
push eax
push dword [ebx + 0x4a4]
push dword [ebx + 0x4ac]
push str.USER__s__s:_i_r_n
jmp 0x42d84b
lea esi, [ebx + 0x4ac]
mov ecx, esi
call fcn.00461052
test eax, eax
je 0x42dab6
push str.anonymous
mov ecx, esi
call fcn.00403370
push dword [esi]
jmp 0x42da45
push 0x1e
pop edi
cmp eax, edi
jne 0x42dc67
lea eax, [esp + 0x54]
push 0x131
push eax
call fcn.00461b1e
mov byte [esp + 0x70], 0x2d
push dword [eax]
lea eax, [esp + 0x64]
push str.ProxyFtpType
push eax
call fcn.0045a6a6
add esp, 0x14
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x6c], 0x2e
call fcn.004018c1
mov ecx, dword [esp + 0x58]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x54]
add ecx, 0xfffffff0
call fcn.0040174a
lea esi, [ebx + 0x4cc]
mov ecx, esi
call fcn.00461052
test eax, eax
je 0x42db36
push str.anonymous
mov ecx, esi
call fcn.00403370
lea eax, [esp + 0x58]
push 0x416
push eax
call fcn.00461b1e
pop ecx
pop ecx
mov byte [esp + 0x68], 0x2f
push dword [eax]
lea ecx, [esp + 0x1c]
call fcn.00403f56
neg eax
sbb al, al
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x58]
inc al
add ecx, 0xfffffff0
mov byte [esp + 0x13], al
call fcn.0040174a
cmp byte [esp + 0x13], 0
je 0x42dbc7
movzx eax, word [ebx + 0x4bc]
cmp ax, 0x15
jne 0x42db9e
push dword [ebx + 0x4a4]
push dword [esi]
push dword [ebx + 0x4ac]
push str.USER__s__s__s_r_n
jmp 0x42d84b
movzx eax, ax
push eax
push dword [ebx + 0x4a4]
lea eax, [esp + 0x1c]
push dword [esi]
push dword [ebx + 0x4ac]
push str.USER__s__s__s:_i_r_n
push eax
call fcn.00401a35
add esp, 0x18
jmp 0x42d858
lea eax, [esp + 0x58]
push 0x428
push eax
call fcn.00461b1e
pop ecx
pop ecx
mov byte [esp + 0x68], 0x30
push dword [eax]
lea ecx, [esp + 0x1c]
call fcn.00403f56
neg eax
sbb al, al
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x58]
inc al
add ecx, 0xfffffff0
mov byte [esp + 0x13], al
call fcn.0040174a
cmp byte [esp + 0x13], 0
push dword [esi]
je 0x42da45
movzx eax, word [ebx + 0x4bc]
cmp ax, 0x15
jne 0x42dc40
push dword [ebx + 0x4a4]
lea eax, [esp + 0x1c]
push dword [ebx + 0x4ac]
push 0x4b9218
push eax
call fcn.00401a35
add esp, 0x14
jmp 0x42d97c
movzx eax, ax
push eax
push dword [ebx + 0x4a4]
lea eax, [esp + 0x20]
push dword [ebx + 0x4ac]
push str.USER__s__s:_i__s_r_n
push eax
call fcn.00401a35
add esp, 0x18
jmp 0x42d97c
cmp eax, 0x20
jne 0x42ddc0
lea eax, [esp + 0x54]
push 0x131
push eax
call fcn.00461b1e
mov byte [esp + 0x70], 0x31
push dword [eax]
lea eax, [esp + 0x64]
push str.ProxyFtpType
push eax
call fcn.0045a6a6
add esp, 0x14
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x6c], 0x32
call fcn.004018c1
mov ecx, dword [esp + 0x58]
add ecx, 0xfffffff0
call fcn.0040174a
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x54]
add ecx, 0xfffffff0
call fcn.0040174a
lea eax, [esp + 0x50]
push 0x416
push eax
call fcn.00461b1e
pop ecx
pop ecx
mov byte [esp + 0x68], 0x33
push dword [eax]
lea ecx, [esp + 0x1c]
call fcn.00403f56
neg eax
sbb al, al
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x50]
inc al
add ecx, 0xfffffff0
mov byte [esp + 0x13], al
call fcn.0040174a
cmp byte [esp + 0x13], 0
je 0x42dd55
lea edi, [ebx + 0x4d0]
mov ecx, edi
call fcn.00461052
test eax, eax
je 0x42dd24
push str.getrighttogo
mov ecx, edi
call fcn.00403370
lea esi, [ebx + 0x4b0]
mov ecx, esi
call fcn.00461052
test eax, eax
je 0x42dd41
push str.getrighttogo
mov ecx, esi
call fcn.00403370
push dword [ebx + 0x4a4]
push dword [edi]
push dword [esi]
push str.PASS__s__s_r_n
jmp 0x42d84b
push 0x4b58c0
push 0x428
lea esi, [esp + 0x60]
call fcn.00461b6d
pop ecx
pop ecx
mov byte [esp + 0x68], 0x34
push dword [eax]
lea ecx, [esp + 0x1c]
call fcn.00403f56
neg eax
sbb al, al
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x58]
inc al
add ecx, 0xfffffff0
mov byte [esp + 0x13], al
call fcn.0040174a
cmp byte [esp + 0x13], 0
je 0x42ddb8
lea esi, [ebx + 0x4b0]
mov ecx, esi
call fcn.00461052
test eax, eax
je 0x42de3d
push str.getrighttogo
jmp 0x42de36
lea esi, [ebx + 0x4d0]
jmp 0x42de26
cmp eax, 0x2e
jne 0x42ddeb
lea esi, [ebx + 0x4d0]
mov ecx, esi
call fcn.00461052
test eax, eax
je 0x42dde2
push str.getright_
mov ecx, esi
call fcn.00403370
push dword [esi]
push str.ACCT__s_r_n
jmp 0x42de44
cmp eax, 0x6e
jne 0x42ddfa
push str.AUTH_TLS_r_n
jmp 0x42de84
cmp eax, 0x74
jne 0x42de06
push str.AUTH_SSL_r_n
jmp 0x42de84
cmp eax, 0x70
je 0x42d869
cmp eax, 0x72
jne 0x42de1b
push str.PROT_P_r_n
jmp 0x42de84
cmp eax, 4
jne 0x42de56
lea esi, [ebx + 0x4b0]
mov ecx, esi
call fcn.00461052
test eax, eax
je 0x42de3d
push str.getright_
mov ecx, esi
call fcn.00403370
push dword [esi]
push str.PASS__s_r_n
lea eax, [esp + 0x1c]
push eax
call fcn.00401a35
add esp, 0xc
jmp 0x42d858
cmp eax, 0x2c
jne 0x42de62
push str.PWD_r_n
jmp 0x42de84
cmp eax, 0x78
jne 0x42de6e
push str.CCC_r_n
jmp 0x42de84
cmp eax, 0x28
jne 0x42de7a
push str.SYST_r_n
jmp 0x42de84
cmp eax, 0x3a
jne 0x42de92
push str.FEAT_r_n
lea ecx, [esp + 0x18]
call fcn.00403370
jmp 0x42d858
cmp eax, 0x38
jne 0x42d858
push str.HELP_SITE_r_n
jmp 0x42de84
or dword [ebx + 0x44c], 0xffffffff
push edi
mov ecx, ebx
call fcn.00444051
cmp dword [ebx + 0x260], 0
jne 0x42d869
cmp dword [ebx + 0x4f4], 3
jne 0x42df60
cmp dword [ebx + 0x49c], 0
jne 0x42df60
lea eax, [ebx + 0x54]
push str.ftps:__
push eax
call fcn.00460b6c
test eax, eax
pop ecx
pop ecx
jne 0x42df60
lea esi, [ebx + 0x508]
push str.secure
push esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
jne 0x42df14
push 0x4b902c
push esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
je 0x42df60
lea eax, [esp + 0x58]
push str.Trying_again_using_AUTH_TLS
push eax
mov dword [ebx + 0x49c], edi
call fcn.00461ac5
pop ecx
pop ecx
push 0
push edi
push 0
mov ecx, eax
mov esi, ebx
mov byte [esp + 0x74], 0x15
call fcn.0043d153
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x58]
add ecx, 0xfffffff0
call fcn.0040174a
push 0x1f4
mov ecx, ebx
call fcn.0043f89f
jmp 0x42d869
xor eax, eax
lea esi, [ebx + 0x508]
push str.user
push esi
mov dword [esp + 0x50], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x54], esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
je 0x42dfa6
push str._unknown
push esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
je 0x42dfa6
mov dword [esp + 0x40], edi
mov dword [esp + 0x48], edi
push str.Password_not_accepted
push esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
je 0x42dfbf
mov dword [esp + 0x40], edi
mov dword [esp + 0x48], edi
push str.Login_incorrect
push esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
je 0x42dfd8
mov dword [esp + 0x40], edi
mov dword [esp + 0x48], edi
push str.name_not_found
push esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
je 0x42dff1
mov dword [esp + 0x40], edi
mov dword [esp + 0x48], edi
push str.Password_incorrect
push esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
je 0x42e00a
mov dword [esp + 0x40], edi
mov dword [esp + 0x48], edi
push str._busy
push esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
je 0x42e01f
mov dword [esp + 0x3c], edi
push str.too_many
push esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
je 0x42e034
mov dword [esp + 0x3c], edi
push str.try
push esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
je 0x42e05a
push str._later
push esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
je 0x42e05a
mov dword [esp + 0x3c], edi
push str.maximum
push esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
je 0x42e080
push str._already_connected
push esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
je 0x42e080
mov dword [esp + 0x3c], edi
push str.too_many_connection
push esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
je 0x42e0a6
push str.from_your_host
push esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
je 0x42e0a6
mov dword [esp + 0x3c], edi
push str.minute
push esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
je 0x42e1d3
mov esi, dword [0x4db468]
call fcn.0047261a
mov eax, dword [eax + 4]
push edi
push str.BusyUseServerDelay
push esi
mov ecx, eax
call fcn.00471a63
test eax, eax
je 0x42e302
push dword [esp + 0x4c]
lea ecx, [esp + 0x40]
call fcn.00401a17
lea edi, [esp + 0x3c]
mov byte [esp + 0x68], 0x16
call fcn.0040fb63
push str.MINUTE
mov esi, edi
call fcn.0040326a
push eax
lea eax, [esp + 0x5c]
push eax
mov ecx, edi
call fcn.004013d0
push eax
mov ecx, edi
mov byte [esp + 0x6c], 0x17
call fcn.004018c1
mov byte [esp + 0x68], 0x16
mov ecx, dword [esp + 0x58]
add ecx, 0xfffffff0
call fcn.0040174a
call fcn.00403e99
mov ebx, edi
call fcn.00403e4b
mov esi, dword [esp + 0x3c]
push 0x20
push esi
call fcn.004897f2
test eax, eax
pop ecx
pop ecx
je 0x42e2eb
sub eax, esi
test eax, eax
jle 0x42e2eb
push 0x20
push esi
call fcn.004897f2
test eax, eax
pop ecx
pop ecx
jne 0x42e170
or eax, 0xffffffff
jmp 0x42e172
sub eax, esi
push eax
lea eax, [esp + 0x5c]
push eax
lea ecx, [esp + 0x44]
call fcn.004013ad
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x6c], 0x18
call fcn.004018c1
mov byte [esp + 0x68], 0x16
mov ecx, dword [esp + 0x58]
add ecx, 0xfffffff0
call fcn.0040174a
lea edi, [esp + 0x3c]
call fcn.00403e99
mov ebx, edi
call fcn.00403e4b
mov eax, edi
push eax
call fcn.00461e0a
imul eax, eax, 0x3c
test eax, eax
pop ecx
mov dword [esp + 0x44], eax
jle 0x42e2eb
inc eax
mov dword [esp + 0x44], eax
jmp 0x42e2eb
push str.second
push esi
call fcn.00460c15
test eax, eax
pop ecx
pop ecx
je 0x42e306
mov esi, dword [0x4db468]
call fcn.0047261a
mov eax, dword [eax + 4]
push edi
push str.BusyUseServerDelay
push esi
mov ecx, eax
call fcn.00471a63
test eax, eax
je 0x42e302
push dword [esp + 0x4c]
lea ecx, [esp + 0x40]
call fcn.00401a17
lea edi, [esp + 0x3c]
mov byte [esp + 0x68], 0x19
call fcn.0040fb63
push str.SECOND
mov esi, edi
call fcn.0040326a
push eax
lea eax, [esp + 0x5c]
push eax
mov ecx, edi
call fcn.004013d0
push eax
mov ecx, edi
mov byte [esp + 0x6c], 0x1a
call fcn.004018c1
mov byte [esp + 0x68], 0x19
mov ecx, dword [esp + 0x58]
add ecx, 0xfffffff0
call fcn.0040174a
call fcn.00403e99
mov ebx, edi
call fcn.00403e4b
mov esi, dword [esp + 0x3c]
push 0x20
push esi
call fcn.004897f2
test eax, eax
pop ecx
pop ecx
je 0x42e2eb
sub eax, esi
test eax, eax
jle 0x42e2eb
push 0x20
push esi
call fcn.004897f2
test eax, eax
pop ecx
pop ecx
jne 0x42e295
or eax, 0xffffffff
jmp 0x42e297
sub eax, esi
push eax
lea eax, [esp + 0x5c]
push eax
lea ecx, [esp + 0x44]
call fcn.004013ad
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x6c], 0x1b
call fcn.004018c1
mov byte [esp + 0x68], 0x19
mov ecx, dword [esp + 0x58]
add ecx, 0xfffffff0
call fcn.0040174a
lea edi, [esp + 0x3c]
call fcn.00403e99
mov ebx, edi
call fcn.00403e4b
mov eax, edi
push eax
call fcn.00461e0a
test eax, eax
pop ecx
mov dword [esp + 0x44], eax
jle 0x42e2eb
inc dword [esp + 0x44]
mov byte [esp + 0x68], 8
mov ecx, dword [esp + 0x3c]
add ecx, 0xfffffff0
call fcn.0040174a
mov ebx, dword [ebp + 8]
xor edi, edi
inc edi
mov dword [esp + 0x3c], edi
xor esi, esi
cmp dword [ebx + 0x498], esi
mov edi, str.BusyReconnect
jne 0x42e347
cmp dword [esp + 0x48], esi
jne 0x42e347
mov esi, dword [0x4db468]
call fcn.0047261a
mov eax, dword [eax + 4]
push 1
push edi
push esi
mov ecx, eax
call fcn.00471a63
test eax, eax
je 0x42e345
and dword [esp + 0x40], 0
mov dword [esp + 0x3c], 1
xor esi, esi
cmp dword [ebx + 0x438], esi
je 0x42e362
push 0xa
push 0x8e7
mov esi, ebx
call fcn.0043fa3a
jmp 0x42d869
mov eax, dword [ebx + 0x4f4]
cmp eax, 0x1f
je 0x42e76d
cmp eax, 0x21
je 0x42e76d
cmp eax, 0x6f
jne 0x42e3b5
mov dword [ebx + 0x4f4], 0x74
mov eax, dword [ebx + 0x4f4]
cmp eax, 5
jne 0x42e44a
cmp dword [esp + 0x38], 0x14c
jne 0x42e44a
mov dword [ebx + 0x4f4], 0x2e
jmp 0x42e498
cmp eax, 0x75
jne 0x42e389
mov eax, dword [ebx + 0x274]
cmp dword [eax + 0x124], esi
je 0x42e3d7
mov ecx, ebx
call fcn.0043f083
test eax, eax
jne 0x42d869
xor edi, edi
push edi
push 0x8b0
mov esi, ebx
mov dword [ebx + 0x10c], edi
call fcn.0043fa3a
cmp dword [0x4db238], edi
jne 0x42e408
cmp dword [ebx + 0x140], edi
jne 0x42e408
cmp dword [ebx + 0x21c], edi
je 0x42d869
lea eax, [esp + 0x58]
push 0x54a
push eax
call fcn.00461b1e
mov byte [esp + 0x70], 0x1d
push dword [ebx + 0x1c0]
push eax
call fcn.00427149
mov byte [esp + 0x78], 8
mov ecx, dword [esp + 0x68]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.0040174a
push 1
mov edi, ebx
call fcn.00444e8b
jmp 0x42d869
cmp eax, 3
je 0x42e454
cmp eax, 5
jne 0x42e498
cmp dword [esp + 0x40], esi
jne 0x42e5f9
cmp dword [esp + 0x3c], esi
jne 0x42e5f9
mov eax, dword [esp + 0x38]
cmp eax, 0x212
je 0x42e5f9
cmp eax, 0x1a5
je 0x42e5f9
cmp eax, 0x1c2
je 0x42e5f9
cmp eax, 0x1f4
je 0x42e5f9
and dword [ebx + 0x10c], 0
push 0
push 0x8b0
mov esi, ebx
call fcn.0043fa3a
push 1
push edi
push dword [0x4db468]
call dword [sym.imp.KERNEL32.DLL_GetProfileIntA]
xor edi, edi
test eax, eax
je 0x42e4e2
cmp dword [esp + 0x40], edi
jne 0x42e4e2
cmp dword [ebx + 0x498], edi
jne 0x42e4ee
push dword [esp + 0x44]
mov ecx, ebx
push 1
call fcn.00444fa6
jmp 0x42d869
cmp dword [ebx + 0x498], edi
je 0x42e59c
cmp dword [ebx + 0x560], edi
jne 0x42e567
lea eax, [esp + 0x58]
push 0x26d
push eax
call fcn.00461b1e
mov byte [esp + 0x70], 0x1f
mov ecx, dword [esp + 0x54]
push dword [ecx]
mov eax, dword [eax]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00401a35
mov byte [esp + 0x7c], 8
mov ecx, dword [esp + 0x6c]
add esp, 0x14
add ecx, 0xfffffff0
call fcn.0040174a
mov eax, ebx
call fcn.0043fa0e
cmp eax, edi
push 0xb4
push 0x34
push dword [esp + 0x20]
jne 0x42e54e
call fcn.0045841e
jmp 0x42e555
mov ecx, eax
call fcn.0045839d
add esp, 0xc
cmp eax, 6
jne 0x42e58a
mov dword [ebx + 0x560], 1
mov esi, dword [0x4db468]
call fcn.0047261a
mov eax, dword [eax + 4]
push 0x3c
push str.BusyPause
push esi
mov ecx, eax
call fcn.00471a63
mov dword [ebx + 0x584], eax
push edi
push 0x8b4
mov esi, ebx
call fcn.0043fa84
jmp 0x42d869
mov eax, dword [ebx + 0x274]
cmp dword [eax + 0x124], edi
je 0x42e5ed
lea eax, [esp + 0x18]
push str.Requires_Login_and_have_more_mirrors__discarding
push eax
call fcn.00401a35
pop ecx
pop ecx
push edi
push 1
push edi
lea ecx, [esp + 0x24]
mov esi, ebx
call fcn.0043d153
lea eax, [ebx + 0x54]
push eax
mov ecx, ebx
call fcn.0043e45e
cmp dword [ebx + 0x260], edi
jne 0x42d869
mov ecx, ebx
call fcn.0043f083
jmp 0x42d869
push 1
push 0x8b9
jmp 0x42e356
push 1
push edi
push dword [0x4db468]
call dword [sym.imp.KERNEL32.DLL_GetProfileIntA]
test eax, eax
je 0x42e63a
cmp dword [esp + 0x3c], esi
jne 0x42e618
cmp dword [esp + 0x40], esi
jne 0x42e63a
cmp dword [ebx + 0x498], esi
jne 0x42e63a
and dword [ebx + 0x10c], 0
push 0
push 0x8b0
mov esi, ebx
call fcn.0043fa3a
jmp 0x42e4d0
mov eax, dword [ebx + 0x274]
cmp dword [eax + 0x124], esi
je 0x42e6c6
cmp dword [esp + 0x3c], 0
jne 0x42e65f
cmp dword [esp + 0x40], 0
je 0x42e65f
call fcn.0040e120
test eax, eax
je 0x42e6c6
cmp dword [ebx + 0x498], 0
jne 0x42e6c6
mov eax, dword [0x4db468]
mov dword [esp + 0x58], eax
call fcn.0047261a
mov eax, dword [eax + 4]
push 0xa
push str.RetryConnectTimes
push dword [esp + 0x60]
lea esi, [ebx + 0x580]
mov edi, dword [esi]
mov ecx, eax
call fcn.00471a63
cmp edi, eax
jg 0x42e6c1
inc edi
mov ecx, ebx
mov dword [esi], edi
call fcn.0043f083
test eax, eax
jne 0x42d869
cmp dword [ebx + 0x260], eax
jne 0x42d869
mov dword [ebx + 0x10c], eax
push eax
jmp 0x42e629
mov edi, str.BusyReconnect
xor eax, eax
cmp dword [0x4db238], eax
jne 0x42e73f
cmp dword [ebx + 0x140], eax
jne 0x42e73f
cmp dword [ebx + 0x21c], eax
jne 0x42e73f
and dword [ebx + 0x10c], eax
push eax
push 0x8b0
mov esi, ebx
call fcn.0043fa3a
push 1
push 0x8b9
call fcn.0043fa3a
push 1
push edi
push dword [0x4db468]
call dword [sym.imp.KERNEL32.DLL_GetProfileIntA]
test eax, eax
je 0x42d869
xor eax, eax
cmp dword [esp + 0x3c], eax
jne 0x42e728
cmp dword [esp + 0x40], eax
jne 0x42d869
cmp dword [ebx + 0x498], eax
je 0x42d869
push eax
push 0x8e5
jmp 0x42e356
and dword [ebx + 0x10c], 0
push 0
push 0x8b0
mov esi, ebx
call fcn.0043fa3a
lea eax, [esp + 0x58]
push 0x179
push eax
call fcn.00461b1e
mov byte [esp + 0x70], 0x1e
jmp 0x42e41c
lea ecx, [ebx + 0x4cc]
call fcn.00401979
lea ecx, [ebx + 0x4d0]
call fcn.00401979
lea eax, [esp + 0x58]
push 0x179
push eax
call fcn.00461b1e
mov byte [esp + 0x70], 0x1c
push dword [ebx + 0x1c0]
push eax
call fcn.00427149
mov byte [esp + 0x78], 8
mov ecx, dword [esp + 0x68]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.0040174a
push 0
jmp 0x42e43e