Function at 0x42b790
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4e6b17
mov eax, dword fs:[0]
push eax
sub esp, 0x138
mov eax, dword [0x53fa2c]
xor eax, esp
mov dword [esp + 0x134], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x53fa2c]
xor eax, esp
push eax
lea eax, [esp + 0x14c]
mov dword fs:[0], eax
mov esi, ecx
push ecx
lea edi, [esi + 0x78]
mov ecx, esp
mov dword [esp + 0x28], esp
push edi
call dword [sym.imp.mfc90.dll_Ordinal_300]
xor ebx, ebx
mov dword [esp + 0x158], ebx
lea eax, [esp + 0x18]
or ebp, 0xffffffff
push eax
mov dword [esp + 0x15c], ebp
call fcn.0048ecd0
add esp, 8
mov dword [esp + 0x154], 1
push str.10087F1A672B00D27B9C47
lea ecx, [esp + 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_1603]
test eax, eax
je 0x42ba65
test byte [0x10389dc], 3
je 0x42ba71
push 0x104
lea ecx, [esp + 0x48]
push ecx
push str.tc_dne_ut
push str.SOFTWARETrojanCut_tc_Env
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00491b30
add esp, 0x14
cmp eax, ebp
je 0x42b9c7
lea edx, [esp + 0x44]
push edx
lea ecx, [esp + 0x30]
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x154], 2
push 0x104
lea eax, [esp + 0x48]
push eax
push str.tc_dne
push str.SOFTWARETrojanCut_tc_Env
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00491b30
add esp, 0x14
cmp eax, ebp
je 0x42b9b5
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x154], 3
push 0x104
lea edx, [esp + 0x48]
push edx
push str.tc_dne_t
push str.SOFTWARETrojanCut_tc_Env
push reloc.OLEAUT32.dll_SysReAllocString
mov byte [esp + 0x58], bl
call fcn.00491b30
add esp, 0x14
cmp eax, ebp
je 0x42b9a3
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x154], 4
lea eax, [esp + 0x24]
push eax
call fcn.00410ab0
fldz
push 0x400
fstp qword [esp + 0x3c]
push ebx
lea ecx, [esp + 0x4c]
push ecx
lea ecx, [esp + 0x44]
mov dword [esp + 0x4c], ebx
call fcn.0042b610
push ebp
lea ecx, [esp + 0x3c]
call fcn.0042a360
push eax
lea ecx, [esp + 0x40]
call fcn.0042a330
push eax
lea ecx, [esp + 0x44]
call fcn.0042a300
push eax
lea ecx, [esp + 0x48]
call fcn.0042a2d0
push eax
lea ecx, [esp + 0x4c]
call fcn.0042a2a0
push eax
lea ecx, [esp + 0x50]
call fcn.0042a270
push eax
lea ecx, [esp + 0x4c]
call fcn.00409210
mov edx, dword [esp + 0x24]
sub edx, dword [esp + 0x30]
mov eax, dword [esp + 0x28]
sbb eax, dword [esp + 0x34]
sub esp, 8
mov dword [esp + 0x3c], eax
mov eax, esp
lea ecx, [esp + 0x38]
mov dword [esp + 0x38], edx
mov dword [esp + 0x2c], esp
mov dword [eax], 0xb4
mov dword [eax + 4], ebx
call fcn.0042a250
test al, al
je 0x42b9df
mov byte [esp + 0x154], 3
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x154], 2
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x154], 1
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov dword [esp + 0x154], ebp
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
xor al, al
jmp 0x42bec5
push edi
lea ecx, [esp + 0x30]
call dword [sym.imp.mfc90.dll_Ordinal_941]
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x2c]
push ecx
call fcn.00471be0
mov byte [esp + 0x160], 5
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.00402b60
add esp, 0x14
mov bl, al
mov byte [esp + 0x154], 4
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_601]
test bl, bl
je 0x42b991
mov byte [esp + 0x154], 3
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x154], 2
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x154], 1
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov dword [esp + 0x154], ebp
jmp 0x42beb9
lea eax, [esp + 0x24]
push ebp
push eax
call fcn.0042b320
add esp, 8
mov byte [esp + 0x154], 6
mov eax, dword [eax]
push eax
mov ecx, edi
call dword [sym.imp.mfc90.dll_Ordinal_1603]
test eax, eax
sete bl
mov byte [esp + 0x154], 1
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_601]
test bl, bl
jne 0x42ba65
lea ecx, [esp + 0x24]
push 0
push ecx
call fcn.0042b320
add esp, 8
mov byte [esp + 0x154], 7
mov eax, dword [eax]
push eax
mov ecx, edi
call dword [sym.imp.mfc90.dll_Ordinal_1603]
test eax, eax
sete bl
mov byte [esp + 0x154], 1
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_601]
test bl, bl
jne 0x42ba65
lea edx, [esp + 0x24]
push 1
push edx
call fcn.0042b320
add esp, 8
mov byte [esp + 0x154], 8
mov eax, dword [eax]
push eax
mov ecx, edi
call dword [sym.imp.mfc90.dll_Ordinal_1603]
test eax, eax
sete bl
mov byte [esp + 0x154], 1
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_601]
test bl, bl
jne 0x42ba65
call sub.mfc90.dll_Ordinal_1137
mov eax, dword [eax + 4]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x7c]
call eax
mov ebp, dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, eax
cmp byte [edi + 0x3244c], bl
jne 0x42bbea
push 0
push 1
mov ecx, edi
call fcn.004d6300
lea ecx, [esp + 0x1b]
call fcn.00401a40
mov byte [esp + 0x154], 9
push 0
push 0xc8
call fcn.0044a860
add esp, 8
push 0x64
call ebp
mov ecx, dword [esi + 0x20]
push ecx
push 0xc8
call fcn.0044a860
add esp, 8
cmp byte [edi + 0x3244c], 0
mov ebx, 1
jne 0x42bbd9
cmp ebx, 0x46
jg 0x42bd5f
push 0
push 0xc8
call fcn.0044a860
add esp, 8
push 0x64
call ebp
mov edx, dword [esi + 0x20]
push edx
push 0xc8
call fcn.0044a860
add esp, 8
inc ebx
cmp byte [edi + 0x3244c], 0
je 0x42bba2
mov byte [esp + 0x154], 1
lea ecx, [esp + 0x1b]
call fcn.00401a60
lea ebx, [edi + 0x32450]
mov ecx, ebx
mov dword [esp + 0x1c], ebx
call dword [sym.imp.mfc90.dll_Ordinal_2327]
mov byte [esi + 0x90], 0
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jne 0x42bce3
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov byte [esp + 0x154], 0xc
push 0xee31
lea ecx, [esp + 0x24]
push str.Get_d
push ecx
call dword [sym.imp.mfc90.dll_Ordinal_2539]
add esp, 0xc
push 0
push ecx
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call dword [sym.imp.mfc90.dll_Ordinal_300]
mov byte [esp + 0x15c], 0xd
mov byte [esp + 0x15c], 0xc
mov ecx, edi
call fcn.004a9f10
push 0
push 0xc8
call fcn.0044a860
add esp, 8
push 0x64
call ebp
mov eax, dword [esi + 0x20]
push eax
push 0xc8
call fcn.0044a860
add esp, 8
cmp byte [esi + 0x90], 0
mov ebx, 1
jne 0x42bccd
cmp ebx, 0x46
jg 0x42be0f
push 0
push 0xc8
call fcn.0044a860
add esp, 8
push 0x64
call ebp
mov ecx, dword [esi + 0x20]
push ecx
push 0xc8
call fcn.0044a860
add esp, 8
inc ebx
cmp byte [esi + 0x90], 0
je 0x42bc96
mov byte [esp + 0x154], 1
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov ebx, dword [esp + 0x1c]
mov ebx, dword [ebx]
push ebx
lea ecx, [esi + 0x78]
call dword [sym.imp.mfc90.dll_Ordinal_1607]
test eax, eax
je 0x42beae
push 0x4ff784
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov edi, eax
mov bl, 0x10
mov byte [esp + 0x154], bl
push 0xae
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x154], 0x11
mov edi, dword [edi]
mov eax, dword [eax]
push 0
push edi
push eax
mov ecx, esi
call sub.mfc90.dll_Ordinal_4502
mov byte [esp + 0x154], bl
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x154], 1
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x42bdf3
push 0x4ff784
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov ebp, eax
mov bl, 0xa
mov byte [esp + 0x154], bl
push 0xac
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x154], 0xb
mov ebp, dword [ebp]
mov eax, dword [eax]
push 0
push ebp
push eax
mov ecx, esi
call sub.mfc90.dll_Ordinal_4502
mov byte [esp + 0x154], bl
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x154], 9
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
push 0x5116d8
lea ecx, [edi + 0x32450]
call dword [sym.imp.mfc90.dll_Ordinal_820]
mov ecx, edi
mov byte [edi + 0x3244c], 0
call fcn.00495960
mov byte [esp + 0x154], 1
lea ecx, [esp + 0x1b]
call fcn.00401a60
mov dword [esp + 0x154], 0xffffffff
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
xor al, al
jmp 0x42bec5
push 0x4ff784
lea ecx, [esp + 0x30]
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov ebp, eax
mov bl, 0xe
mov byte [esp + 0x154], bl
push 0xad
lea ecx, [esp + 0x28]
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov byte [esp + 0x154], 0xf
mov ebp, dword [ebp]
mov eax, dword [eax]
push 0
push ebp
push eax
mov ecx, esi
call sub.mfc90.dll_Ordinal_4502
mov byte [esp + 0x154], bl
lea ecx, [esp + 0x24]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov byte [esp + 0x154], 0xc
lea ecx, [esp + 0x2c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov ecx, dword [esp + 0x1c]
push 0x5116d8
call dword [sym.imp.mfc90.dll_Ordinal_820]
mov byte [esi + 0x90], 0
mov ecx, edi
mov byte [edi + 0x3244c], 0
call fcn.00495960
mov byte [esp + 0x154], 1
lea ecx, [esp + 0x20]
call dword [sym.imp.mfc90.dll_Ordinal_601]
jmp 0x42bdf3
mov dword [esp + 0x154], 0xffffffff
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov al, 1
mov ecx, dword [esp + 0x14c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x134]
xor ecx, esp
call fcn.004e0148
add esp, 0x144
ret