Function at 0x427640
Capabilities:
Accept command line arguments
Check mutex on windows
Create mailslot
Create thread
Delete file
Extract resource via kernel32 functions
Get file system object information

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1450
call fcn.0040aeb0
mov eax, dword [0x4372c4]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0xb1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0xb18], 0
mov dword [ebp - 0xb0c], 0
mov dword [ebp - 0xb10], 0
xor eax, eax
mov word [ebp - 0x698], ax
push 0x45e
push 0
lea ecx, [ebp - 0x696]
push ecx
call fcn.00401a70
add esp, 0xc
xor edx, edx
mov word [ebp - 0xb00], dx
push 0x45e
push 0
lea eax, [ebp - 0xafe]
push eax
call fcn.00401a70
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0xd20], cx
push 0x1fe
push 0
lea edx, [ebp - 0xd1e]
push edx
call fcn.00401a70
add esp, 0xc
xor eax, eax
mov word [ebp - 0xf30], ax
push 0x1fe
push 0
lea ecx, [ebp - 0xf2e]
push ecx
call fcn.00401a70
add esp, 0xc
xor edx, edx
mov word [ebp - 0x210], dx
push 0x1fe
push 0
lea eax, [ebp - 0x20e]
push eax
call fcn.00401a70
add esp, 0xc
mov dword [ebp - 0x21c], 0
lea ecx, [ebp - 0xd25]
call fcn.00401520
mov dword [ebp - 0x220], str.ErrorInfo.log
lea ecx, [ebp - 0xb00]
mov dword [ebp - 0xd24], ecx
call dword [sym.imp.KERNEL32.dll_GetACP]
mov dword [ebp - 0x218], eax
mov edx, dword [ebp - 0x218]
push edx
call fcn.00413260
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
lea ecx, [ebp - 0xf31]
call fcn.00401520
lea eax, [ebp - 0xf31]
push eax
call fcn.0040da80
lea ecx, [ebp - 0xf31]
call fcn.00401a20
mov ecx, dword [ebp + 8]
mov dword [0x44fa00], ecx
push 0x118
push 0x44fc68
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [ebp - 5]
call fcn.00401520
lea ecx, [ebp - 0x699]
call fcn.00401520
lea edx, [ebp - 5]
push edx
call fcn.0040b7e0
mov dword [ebp - 4], eax
lea eax, [ebp - 0x699]
push eax
call fcn.0040ee60
lea ecx, [ebp - 0xb0c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0xd2c], eax
cmp dword [ebp - 0xb0c], 2
jle 0x42799e
mov dword [ebp - 0xf38], 0xffffffff
lea edx, [ebp - 0x698]
mov dword [ebp - 0xf40], edx
mov dword [ebp - 0xf3c], 0
lea ecx, [ebp - 0xf41]
call fcn.00401520
mov dword [ebp - 0xb1c], 0x270f
mov dword [ebp - 0xb04], 0
jmp 0x42784b
mov eax, dword [ebp - 0xb04]
add eax, 1
mov dword [ebp - 0xb04], eax
mov ecx, dword [ebp - 0xb04]
movzx edx, word [ecx*2 + 0x44fc68]
test edx, edx
je 0x427898
mov eax, dword [ebp - 0xb04]
movzx ecx, word [eax*2 + 0x44fc68]
cmp ecx, 0x5c
je 0x427883
mov edx, dword [ebp - 0xb04]
movzx eax, word [edx*2 + 0x44fc68]
cmp eax, 0x2f
jne 0x427896
mov ecx, dword [ebp - 0xb04]
lea edx, [ecx*2 + 0x44fc68]
mov dword [ebp - 0xf3c], edx
jmp 0x42783c
cmp dword [ebp - 0xf3c], 0
je 0x4278bb
xor eax, eax
mov ecx, dword [ebp - 0xf3c]
mov word [ecx], ax
mov edx, dword [ebp - 0xf3c]
add edx, 2
mov dword [0x4387a4], edx
mov eax, dword [ebp - 0xd2c]
mov ecx, dword [eax + 4]
push ecx
call fcn.00403a8c
add esp, 4
mov dword [ebp - 0xf38], eax
mov edx, dword [ebp - 0xf40]
push edx
mov eax, dword [ebp - 0xf38]
push eax
lea ecx, [ebp - 0xf41]
push ecx
call fcn.0040d100
mov dword [ebp - 4], eax
lea edx, [ebp - 0xf38]
push edx
mov eax, dword [ebp - 0xf40]
push eax
lea ecx, [ebp - 0xf41]
push ecx
call fcn.0040bfe0
mov dword [ebp - 4], eax
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0xf38]
push eax
push str._____d___d__r_n
mov ecx, dword [ebp - 0xf40]
add ecx, 0x27
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x10
push 0x43376c
mov edx, dword [ebp - 0xf40]
push edx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push str.wiatrcvw.txt
push 0x44fc68
push 0x433794
lea eax, [ebp - 0xb00]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ecx, dword [ebp - 0xf40]
push ecx
mov edx, dword [ebp - 0xf40]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea eax, [ebp - 0xb00]
push eax
call fcn.004012b0
add esp, 0xc
lea ecx, [ebp - 0xf41]
call fcn.00401a20
jmp 0x4289a6
push str.GlobalFileEventMultexSW
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x44f15c], eax
cmp dword [0x44f15c], 0
jne 0x4279d6
mov dword [ebp - 0xb1c], 0x270e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb18], eax
jmp 0x4289a6
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb18], eax
cmp dword [ebp - 0xb18], 0xb7
jne 0x427a07
mov dword [ebp - 0xb1c], 0x270d
mov dword [ebp - 0xb18], 0
jmp 0x4289a6
lea ecx, [ebp - 0x1168]
call fcn.0040b790
push 1
lea ecx, [ebp - 0x1168]
call fcn.0040b4b0
test eax, eax
je 0x427a41
lea ecx, [ebp - 0x1168]
push ecx
call fcn.00412040
push 1
lea ecx, [ebp - 0x1168]
call fcn.0040b3d0
jmp 0x427b34
mov dword [ebp - 0xb1c], 0x3e2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb18], eax
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov eax, dword [ebp - 0x220]
push eax
push 0x44fc68
push 0x4337d4
lea ecx, [ebp - 0xd20]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov edx, dword [ebp - 0xb18]
push edx
lea ecx, [ebp - 0x1168]
call fcn.0040b6c0
push eax
movzx eax, word [ebp - 0x224]
push eax
movzx ecx, word [ebp - 0x226]
push ecx
movzx edx, word [ebp - 0x228]
push edx
movzx eax, word [ebp - 0x22a]
push eax
movzx ecx, word [ebp - 0x22e]
push ecx
movzx edx, word [ebp - 0x230]
push edx
push str._d__02d__02d__02d:_02d:_02d__s_Step___d__r_n
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov ecx, dword [ebp - 0xd24]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x698]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0xd24]
push eax
mov ecx, dword [ebp - 0xd24]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0xd20]
push edx
call fcn.004012b0
add esp, 0xc
lea ecx, [ebp - 0x1168]
call fcn.0040b700
jmp 0x4289a6
lea ecx, [ebp - 0x1168]
call fcn.0040b700
mov dword [ebp - 0x116c], 0
mov dword [ebp - 0xb04], 0
jmp 0x427b64
mov eax, dword [ebp - 0xb04]
add eax, 1
mov dword [ebp - 0xb04], eax
mov ecx, dword [ebp - 0xb04]
movzx edx, word [ecx*2 + 0x44fc68]
test edx, edx
je 0x427bb1
mov eax, dword [ebp - 0xb04]
movzx ecx, word [eax*2 + 0x44fc68]
cmp ecx, 0x5c
je 0x427b9c
mov edx, dword [ebp - 0xb04]
movzx eax, word [edx*2 + 0x44fc68]
cmp eax, 0x2f
jne 0x427baf
mov ecx, dword [ebp - 0xb04]
lea edx, [ecx*2 + 0x44fc68]
mov dword [ebp - 0x116c], edx
jmp 0x427b55
cmp dword [ebp - 0x116c], 0
je 0x427bd4
xor eax, eax
mov ecx, dword [ebp - 0x116c]
mov word [ecx], ax
mov edx, dword [ebp - 0x116c]
add edx, 2
mov dword [0x4387a4], edx
mov eax, dword [0x4387a4]
push eax
push 0x433838
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x427bf8
mov dword [ebp - 0xb1c], 0x3df
jmp 0x4289a6
push str.parser_manifest.xml
push 0x44fc68
push 0x433880
lea ecx, [ebp - 0x210]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push str.regist.txt
push 0x44fc68
push 0x4338a4
lea edx, [ebp - 0xf30]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0xb18]
push eax
lea ecx, [ebp - 0x210]
push ecx
call section..text
add esp, 8
test eax, eax
jge 0x427c5f
mov dword [ebp - 0xb1c], 0x3e0
jmp 0x4289a6
lea edx, [ebp - 0xb18]
push edx
lea eax, [ebp - 0xf30]
push eax
call section..text
add esp, 8
test eax, eax
jge 0x427ca8
push 9
lea ecx, [ebp - 0xf30]
push ecx
lea edx, [ebp - 0x210]
push edx
call fcn.0041e580
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jge 0x427ca6
mov dword [ebp - 0xb1c], 0x3e9
jmp 0x4289a6
jmp 0x427cd5
push 1
lea eax, [ebp - 0xf30]
push eax
lea ecx, [ebp - 0x210]
push ecx
call fcn.0041e580
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jge 0x427cd5
mov dword [ebp - 0xb1c], 0x3ea
jmp 0x4289a6
push str.parserchk.txt
push 0x44fc68
push 0x4338cc
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0xb18]
push eax
lea ecx, [ebp - 0x698]
push ecx
call section..text
add esp, 8
test eax, eax
jl 0x427d5b
mov dword [0x44fa28], 1
push str.parsernot.txt
push 0x44fc68
push 0x4338f4
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0xb18]
push eax
lea ecx, [ebp - 0x698]
push ecx
call section..text
add esp, 8
test eax, eax
jl 0x427d5b
mov dword [0x44fa28], 2
push 0x44fc68
push str._sHTTP_Parser.chm
push 0x44fe98
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp - 0x117c], 0
mov dword [ebp - 0x1170], 0
mov dword [ebp - 0x1174], 0
mov dword [ebp - 0x1178], 0
push str.BINTYPE
push 0x12d
mov edx, dword [0x44fa00]
push edx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x117c], eax
cmp dword [ebp - 0x117c], 0
je 0x427e67
push 0x460
push 0
lea eax, [ebp - 0x698]
push eax
call fcn.00401a70
add esp, 0xc
cmp dword [ebp - 0x117c], 0
je 0x427dfb
mov ecx, dword [ebp - 0x117c]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x1170], eax
cmp dword [ebp - 0x117c], 0
je 0x427e1b
mov eax, dword [ebp - 0x117c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x1174], eax
cmp dword [ebp - 0x1170], 0
je 0x427e37
mov edx, dword [ebp - 0x1170]
push edx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x1178], eax
lea eax, [ebp - 0x698]
push eax
push str.logo.gif
mov ecx, dword [ebp - 0x1174]
push ecx
mov edx, dword [ebp - 0x1178]
push edx
call fcn.00417c30
lea eax, [ebp - 0x698]
push eax
call fcn.00412000
mov dword [0x44fa04], eax
cmp dword [ebp - 0x1170], 0
je 0x427e7d
mov ecx, dword [ebp - 0x1170]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeResource]
push 0x44fc68
push str._s_themes_b_good.bmp
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x44fc68
push str._s_themes_b_bad.bmp
lea eax, [ebp - 0xb00]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x44fc68
push str._s_themes_b_desktop.bmp
lea ecx, [ebp - 0xd20]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea edx, [ebp - 0x698]
push edx
call fcn.00412000
mov dword [0x44fa08], eax
lea eax, [ebp - 0xb00]
push eax
call fcn.00412000
mov dword [0x44fa0c], eax
lea ecx, [ebp - 0xd20]
push ecx
call fcn.00412000
mov dword [0x44fa10], eax
mov dword [ebp - 0x1180], 0x900000
push 0
push 0
push 0x878
push str..mailslotparser_manage
call dword [sym.imp.KERNEL32.dll_CreateMailslotW]
mov dword [0x44f16c], eax
cmp dword [0x44f16c], 0xffffffff
jne 0x428020
mov dword [ebp - 0xb1c], 0x3e1
mov dword [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb18], eax
mov dword [0x44f16c], 0
lea edx, [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov eax, dword [ebp - 0x220]
push eax
push 0x44fc68
push 0x433a08
lea ecx, [ebp - 0xd20]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov edx, dword [ebp - 0xb18]
push edx
push str.Mail_Handle_Create_Error
movzx eax, word [ebp - 0x224]
push eax
movzx ecx, word [ebp - 0x226]
push ecx
movzx edx, word [ebp - 0x228]
push edx
movzx eax, word [ebp - 0x22a]
push eax
movzx ecx, word [ebp - 0x22e]
push ecx
movzx edx, word [ebp - 0x230]
push edx
push 0x433a48
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov ecx, dword [ebp - 0xd24]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x698]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0xd24]
push eax
mov ecx, dword [ebp - 0xd24]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0xd20]
push edx
call fcn.004012b0
add esp, 0xc
jmp 0x4289a6
push str.PARSER_SHARED_MAPMEMORY
mov eax, dword [ebp - 0x1180]
push eax
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [0x44f170], eax
cmp dword [0x44f170], 0
jne 0x428134
mov dword [ebp - 0xb1c], 0x3e1
mov dword [ebp - 4], 3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb18], eax
lea ecx, [ebp - 0x230]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edx, dword [ebp - 0x220]
push edx
push 0x44fc68
push 0x433ac4
lea eax, [ebp - 0xd20]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ecx, dword [ebp - 0xb18]
push ecx
push 0x433ad0
movzx edx, word [ebp - 0x224]
push edx
movzx eax, word [ebp - 0x226]
push eax
movzx ecx, word [ebp - 0x228]
push ecx
movzx edx, word [ebp - 0x22a]
push edx
movzx eax, word [ebp - 0x22e]
push eax
movzx ecx, word [ebp - 0x230]
push ecx
push 0x433b00
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov eax, dword [ebp - 0xd24]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x698]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0xd24]
push edx
mov eax, dword [ebp - 0xd24]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea ecx, [ebp - 0xd20]
push ecx
call fcn.004012b0
add esp, 0xc
jmp 0x4289a6
mov edx, dword [ebp - 0x1180]
push edx
push 0
push 0
push 2
mov eax, dword [0x44f170]
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [0x44f178], eax
cmp dword [0x44f178], 0
jne 0x428247
mov dword [ebp - 0xb1c], 0x3e1
mov dword [ebp - 4], 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb18], eax
lea ecx, [ebp - 0x230]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edx, dword [ebp - 0x220]
push edx
push 0x44fc68
push 0x433b4c
lea eax, [ebp - 0xd20]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ecx, dword [ebp - 0xb18]
push ecx
push str.Map_Handle_Create_Error
movzx edx, word [ebp - 0x224]
push edx
movzx eax, word [ebp - 0x226]
push eax
movzx ecx, word [ebp - 0x228]
push ecx
movzx edx, word [ebp - 0x22a]
push edx
movzx eax, word [ebp - 0x22e]
push eax
movzx ecx, word [ebp - 0x230]
push ecx
push 0x433b88
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov eax, dword [ebp - 0xd24]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x698]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0xd24]
push edx
mov eax, dword [ebp - 0xd24]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea ecx, [ebp - 0xd20]
push ecx
call fcn.004012b0
add esp, 0xc
jmp 0x4289a6
mov edx, dword [0x44f178]
add edx, 0x100000
mov dword [0x450630], edx
mov dword [ebp - 0x1188], 8
mov dword [ebp - 0x1184], 0x3ff
lea eax, [ebp - 0x1188]
push eax
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push 0x5460
push 0
push 0x439d28
call fcn.00401a70
add esp, 0xc
push 0x433bd4
push 0x44fc68
push 0x433bf0
lea ecx, [ebp - 0x698]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea edx, [ebp - 0xb18]
push edx
lea eax, [ebp - 0x698]
push eax
call section..text
add esp, 8
test eax, eax
jl 0x4282e0
push 0x439d28
push 0x5460
lea ecx, [ebp - 0x698]
push ecx
call fcn.004010e0
add esp, 0xc
mov dword [0x44fa14], 1
lea edx, [ebp - 0xb08]
push edx
push 0
push 0
push 0x419960
push 0
push 0
call fcn.004033a7
add esp, 0x18
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
jne 0x428401
mov dword [ebp - 0xb1c], 0x3e1
mov dword [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xb18], eax
lea eax, [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [ebp - 0x220]
push ecx
push 0x44fc68
push 0x433bfc
lea edx, [ebp - 0xd20]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov eax, dword [ebp - 0xb18]
push eax
push str.sessionSearchThread_Call_Error
movzx ecx, word [ebp - 0x224]
push ecx
movzx edx, word [ebp - 0x226]
push edx
movzx eax, word [ebp - 0x228]
push eax
movzx ecx, word [ebp - 0x22a]
push ecx
movzx edx, word [ebp - 0x22e]
push edx
movzx eax, word [ebp - 0x230]
push eax
push str._d__02d__02d__02d:_02d:_02d__s___d__r_n
lea ecx, [ebp - 0x698]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov edx, dword [ebp - 0xd24]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x698]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, dword [ebp - 0xd24]
push ecx
mov edx, dword [ebp - 0xd24]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea eax, [ebp - 0xd20]
push eax
call fcn.004012b0
add esp, 0xc
jmp 0x4289a6
call fcn.00412de0
push str._test.html
call fcn.00412600
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
je 0x428650
mov dword [ebp - 0xb04], 0
jmp 0x42843e
mov ecx, dword [ebp - 0xb04]
add ecx, 1
mov dword [ebp - 0xb04], ecx
mov edx, dword [ebp - 0xb04]
mov eax, dword [ebp - 0x238]
movzx ecx, word [eax + edx*2]
test ecx, ecx
je 0x42847f
mov edx, dword [ebp - 0xb04]
mov eax, dword [ebp - 0x238]
movzx ecx, word [eax + edx*2]
cmp ecx, 0x5c
jne 0x42847d
mov edx, dword [ebp - 0xb04]
mov eax, dword [ebp - 0x238]
lea ecx, [eax + edx*2 + 2]
mov dword [ebp - 0x21c], ecx
jmp 0x42842f
cmp dword [ebp - 0x21c], 0
jne 0x428492
mov dword [ebp - 0x21c], 0x433cac
mov edx, dword [ebp - 0x21c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0xb14], eax
mov dword [0x44fa18], 0xffffffff
mov dword [ebp - 0xb04], 0
jmp 0x4284ca
mov eax, dword [ebp - 0xb04]
add eax, 1
mov dword [ebp - 0xb04], eax
mov ecx, dword [ebp - 0xb04]
shl ecx, 7
movzx edx, word [ecx + 0x439828]
test edx, edx
je 0x428517
mov eax, dword [ebp - 0xb14]
push eax
mov ecx, dword [ebp - 0x21c]
push ecx
mov edx, dword [ebp - 0xb04]
shl edx, 7
add edx, 0x439828
push edx
call fcn.004013b0
add esp, 0xc
test eax, eax
jne 0x428515
mov eax, dword [ebp - 0xb04]
mov dword [0x44fa18], eax
jmp 0x428517
jmp 0x4284bb
cmp dword [0x44fa18], 0xffffffff
jne 0x4285b4
mov dword [ebp - 0x21c], str.msedge.exe
mov ecx, dword [ebp - 0x21c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0xb14], eax
mov dword [0x44fa18], 0xffffffff
mov dword [ebp - 0xb04], 0
jmp 0x428566
mov edx, dword [ebp - 0xb04]
add edx, 1
mov dword [ebp - 0xb04], edx
mov eax, dword [ebp - 0xb04]
shl eax, 7
movzx ecx, word [eax + 0x439828]
test ecx, ecx
je 0x4285b4
mov edx, dword [ebp - 0xb14]
push edx
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0xb04]
shl ecx, 7
add ecx, 0x439828
push ecx
call fcn.004013b0
add esp, 0xc
test eax, eax
jne 0x4285b2
mov edx, dword [ebp - 0xb04]
mov dword [0x44fa18], edx
jmp 0x4285b4
jmp 0x428557
cmp dword [0x44fa18], 0xffffffff
jne 0x428650
mov dword [ebp - 0x21c], str.iexplore.exe
mov eax, dword [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0xb14], eax
mov dword [0x44fa18], 0xffffffff
mov dword [ebp - 0xb04], 0
jmp 0x428603
mov ecx, dword [ebp - 0xb04]
add ecx, 1
mov dword [ebp - 0xb04], ecx
mov edx, dword [ebp - 0xb04]
shl edx, 7
movzx eax, word [edx + 0x439828]
test eax, eax
je 0x428650
mov ecx, dword [ebp - 0xb14]
push ecx
mov edx, dword [ebp - 0x21c]
push edx
mov eax, dword [ebp - 0xb04]
shl eax, 7
add eax, 0x439828
push eax
call fcn.004013b0
add esp, 0xc
test eax, eax
jne 0x42864e
mov ecx, dword [ebp - 0xb04]
mov dword [0x44fa18], ecx
jmp 0x428650
jmp 0x4285f4
push str.parsercommon.data
push 0x44fc68
push 0x433d1c
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0xb18]
push eax
lea ecx, [ebp - 0x698]
push ecx
call section..text
add esp, 8
test eax, eax
jl 0x4286d1
push 0x43f188
push 0x310
lea edx, [ebp - 0x698]
push edx
call fcn.004010e0
add esp, 0xc
test eax, eax
jl 0x4286ca
mov eax, dword [0x43f190]
mov dword [0x44fa18], eax
mov ecx, dword [0x43f194]
mov dword [0x438780], ecx
mov edx, dword [0x43f18c]
mov dword [0x44fa1c], edx
jmp 0x4286d1
mov byte [0x43f188], 0
movzx eax, byte [0x43f188]
test eax, eax
jne 0x428751
mov byte [0x43f188], 9
mov byte [0x43f189], 9
mov byte [0x43f18a], 3
mov byte [0x43f18b], 3
mov ecx, dword [0x44fa1c]
mov dword [0x43f18c], ecx
mov edx, dword [0x44fa18]
mov dword [0x43f190], edx
mov eax, dword [0x438780]
mov dword [0x43f194], eax
mov byte [0x43f198], 0
mov byte [0x43f199], 0
mov byte [0x43f19a], 0
mov byte [0x43f19c], 0
push 0
push 0x43f188
push 0x310
lea ecx, [ebp - 0x698]
push ecx
call fcn.004011d0
add esp, 0x10
push 0
push 0
push 0x21
push 0x10
push 0x10
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov dword [0x4505d0], eax
cmp dword [0x4505d0], 0
je 0x4287d0
mov dword [ebp - 0x1448], 0x99
jmp 0x42878a
mov edx, dword [ebp - 0x1448]
add edx, 1
mov dword [ebp - 0x1448], edx
cmp dword [ebp - 0x1448], 0xb5
jg 0x4287d0
push 0
push 0x10
push 0x10
push 1
movzx eax, word [ebp - 0x1448]
push eax
mov ecx, dword [0x44fa00]
push ecx
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [ebp - 0x1444], eax
mov edx, dword [ebp - 0x1444]
push edx
push 0xffffffffffffffff
mov eax, dword [0x4505d0]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
jmp 0x42877b
push 0x1000
push 0
push 0xff000000
push 0
push 0xf
push 0x14c
mov ecx, dword [0x44fa00]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_LoadImageW]
mov dword [0x4505cc], eax
push 0x4000
push 0x2b4
lea edx, [ebp - 0x1440]
push edx
push 0
push 0x433d28
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [0x4505c4], eax
push 0x4001
push 0x2b4
lea eax, [ebp - 0x1440]
push eax
push 0
push 0x433d30
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [0x4505c8], eax
push str.RICHED20.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x234], eax
push str.HHCTRL.OCX
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0
je 0x42887f
push str.HtmlHelpW
mov ecx, dword [ebp - 0x234]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x450638], eax
push str.imm32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0
je 0x4288b0
push str.ImmAssociateContext
mov edx, dword [ebp - 0x234]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x450634], eax
push 0x8d
mov eax, dword [0x44fa00]
push eax
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov dword [0x44f158], eax
push 0
push 0x423830
push 0
push 0x259
mov ecx, dword [0x44fa00]
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
mov dword [0x44f9f8], 0
mov dword [0x44fa14], 0
push 0x44fc68
push str._slist.txt
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x7530
mov ecx, dword [ebp - 0x214]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [ebp - 0x214]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x44f174], 0
je 0x428962
push 0x1388
mov eax, dword [0x44f174]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [0x44f174]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call fcn.00417d00
push str.sitelink.txt
push 0x44fc68
push str._s_s
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 0
push 0x439d28
push 0x5460
lea eax, [ebp - 0x698]
push eax
call fcn.004011d0
add esp, 0x10
mov dword [ebp - 4], eax
mov dword [ebp - 0x218], 0x10
cmp dword [0x4505d4], 0
je 0x4289c6
mov ecx, dword [0x4505d4]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp dword [0x4505cc], 0
je 0x4289dc
mov edx, dword [0x4505cc]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp dword [0x4505d0], 0
je 0x4289f1
mov eax, dword [0x4505d0]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp dword [0x44f178], 0
je 0x428a07
mov ecx, dword [0x44f178]
push ecx
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
cmp dword [0x44f170], 0
je 0x428a1d
mov edx, dword [0x44f170]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x44f16c], 0
je 0x428a32
mov eax, dword [0x44f16c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x44f15c], 0
je 0x428a48
mov ecx, dword [0x44f15c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0xb1c]
mov dword [ebp - 0x1450], edx
cmp dword [ebp - 0x1450], 0x3df
jg 0x428a82
cmp dword [ebp - 0x1450], 0x3df
je 0x428b2d
cmp dword [ebp - 0x1450], 0
je 0x428b1f
jmp case.default.0x428b13
cmp dword [ebp - 0x1450], 0x3e9
jg 0x428ad3
cmp dword [ebp - 0x1450], 0x3e9
je 0x428c35
cmp dword [ebp - 0x1450], 0x3e0
je 0x428b63
cmp dword [ebp - 0x1450], 0x3e1
je 0x428b99
cmp dword [ebp - 0x1450], 0x3e2
je 0x428bf5
jmp case.default.0x428b13
cmp dword [ebp - 0x1450], 0x270e
jg 0x428b1a
cmp dword [ebp - 0x1450], 0x270d
jge 0x428d86
mov eax, dword [ebp - 0x1450]
sub eax, 0x3ea
mov dword [ebp - 0x1450], eax
cmp dword [ebp - 0x1450], 3
ja case.default.0x428b13
mov ecx, dword [ebp - 0x1450]
jmp dword [ecx*4 + 0x428e4c]
jmp case.default.0x428b13
xor edx, edx
mov word [ebp - 0x698], dx
jmp 0x428de0
push 0
call fcn.00413260
test eax, eax
je 0x428b4c
push 0x433de0
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x428b5e
push str.There_is_a_problem_with_the_contents_of_the_module._n__1___I_cannot_run_the_program.
lea ecx, [ebp - 0x698]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x428de0
push 0
call fcn.00413260
test eax, eax
je 0x428b82
push 0x433ee0
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x428b94
push str.I_have_a_problem_with_my_module_configuration._n__2___I_cannot_run_the_program.
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x428de0
push 0
call fcn.00413260
test eax, eax
je 0x428bc6
mov ecx, dword [ebp - 0xb18]
push ecx
mov edx, dword [ebp - 4]
push edx
push 0x433fd8
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
jmp 0x428be6
mov ecx, dword [ebp - 0xb18]
push ecx
mov edx, dword [ebp - 4]
push edx
push str.OS_state_is_unstable___d_:__d_
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x218], 0x30
jmp 0x428de0
push 0
call fcn.00413260
test eax, eax
je 0x428c14
push 0x4340a0
lea ecx, [ebp - 0x698]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x428c26
push str.The_operating_environment_of_the_PC_is_unknown._nAbort_program_execution.
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [ebp - 0x218], 0x30
jmp 0x428de0
push 0
call fcn.00413260
test eax, eax
je 0x428c5b
mov eax, dword [ebp - 4]
push eax
push 0x434180
lea ecx, [ebp - 0x698]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x428c74
mov edx, dword [ebp - 4]
push edx
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__1_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x428de0
push 0
call fcn.00413260
test eax, eax
je 0x428c9f
mov ecx, dword [ebp - 4]
push ecx
push 0x434380
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x428cb8
mov eax, dword [ebp - 4]
push eax
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__2_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea ecx, [ebp - 0x698]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x428de0
push 0
call fcn.00413260
test eax, eax
je 0x428ce3
mov edx, dword [ebp - 4]
push edx
push 0x434580
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x428cfc
mov ecx, dword [ebp - 4]
push ecx
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__3_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x428de0
push 0
call fcn.00413260
test eax, eax
je 0x428d27
mov eax, dword [ebp - 4]
push eax
push 0x434780
lea ecx, [ebp - 0x698]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x428d40
mov edx, dword [ebp - 4]
push edx
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__4_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x428de0
push 0
call fcn.00413260
test eax, eax
je 0x428d6b
mov ecx, dword [ebp - 4]
push ecx
push 0x434980
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x428d84
mov eax, dword [ebp - 4]
push eax
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__5_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea ecx, [ebp - 0x698]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x428de0
push 0
call fcn.00413260
test eax, eax
je 0x428daf
mov edx, dword [ebp - 0xb18]
push edx
push 0x434b80
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x428dcb
mov ecx, dword [ebp - 0xb18]
push ecx
push str.Multiple_Programs_cannot_be_started.___d_
lea edx, [ebp - 0x698]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp - 0x218], 0x30
jmp 0x428de0
xor eax, eax
mov word [ebp - 0x698], ax
movzx ecx, word [ebp - 0x698]
test ecx, ecx
je 0x428e0b
mov edx, dword [ebp - 0x218]
push edx
push str._notification_BOX
lea eax, [ebp - 0x698]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0xb1c]
mov dword [ebp - 0x144c], ecx
lea ecx, [ebp - 0x699]
call fcn.00401a20
lea ecx, [ebp - 5]
call fcn.00401a20
lea ecx, [ebp - 0xd25]
call fcn.00401a20
mov eax, dword [ebp - 0x144c]
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.00401a54
mov esp, ebp
pop ebp
ret 0x10