Function at 0x4242a0
Capabilities:
Query or enumerate registry value
Resolve dns

Disassembly:
push 0xffffffffffffffff
push 0x456871
mov eax, dword fs:[0]
push eax
sub esp, 0x51c
mov eax, dword [0x467334]
xor eax, esp
mov dword [esp + 0x518], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x467334]
xor eax, esp
push eax
lea eax, [esp + 0x530]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [edi + 0x3a0]
mov dword [esp + 0x44], edi
cmp eax, 6
jbe 0x42433e
mov dword [edi + 0x3a0], 0
call fcn.0043c831
cdq
mov ecx, 0x14
idiv ecx
mov esi, edx
inc esi
call fcn.0043c831
cdq
idiv esi
cmp edx, esi
jg 0x42431b
mov eax, esi
cdq
idiv esi
test edx, edx
je 0x424325
call fcn.00419280
call fcn.004192f0
push 0
mov dword [edi + 0x39c], 1
call fcn.0043cb47
add esp, 4
jmp 0x4250d0
inc eax
mov dword [edi + 0x3a0], eax
call fcn.0043c831
cdq
mov ecx, 0x14
idiv ecx
mov esi, edx
inc esi
call fcn.0043c831
cdq
idiv esi
cmp edx, esi
jg 0x42436a
mov eax, esi
cdq
idiv esi
test edx, edx
je 0x424374
call fcn.004193a0
call fcn.00419470
xor eax, eax
mov ecx, 0xf
mov dword [esp + 0x24], eax
mov dword [esp + 0xf0], ecx
mov dword [esp + 0xec], eax
mov byte [esp + 0xdc], al
mov dword [esp + 0x538], eax
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xb4], eax
mov byte [esp + 0xa4], al
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd0], eax
mov byte [esp + 0xc0], al
lea edx, [esp + 0x24]
push edx
push 1
push eax
sub esp, 0x1c
mov esi, esp
mov byte [esp + 0x560], 2
mov dword [esi + 0x18], ecx
mov dword [esi + 0x14], eax
lea edi, [esi + 4]
mov byte [edi], al
mov eax, dword [esi + 0x18]
mov ebp, pe_nt_image_headers32
lea ebx, [esp + 0x50]
mov dword [esp + 0x44], esp
cmp eax, ebp
jb 0x4243fd
mov ecx, dword [edi]
jmp 0x4243ff
mov ecx, edi
cmp ecx, 0x45c8a0
ja 0x424438
cmp eax, ebp
jb 0x42440f
mov ecx, dword [edi]
jmp 0x424411
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, 0x45c8a0
jbe 0x424438
cmp eax, ebp
jb 0x424424
mov edi, dword [edi]
push 0x41
mov eax, 0x45c8a0
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402ea0
jmp 0x42447a
cmp eax, 0x41
jae 0x42444a
mov ecx, dword [esi + 0x14]
push ecx
push 0x41
mov ecx, esi
call fcn.00403800
mov ecx, dword [esi + 0x18]
cmp ecx, ebp
jb 0x424455
mov eax, dword [edi]
jmp 0x424457
mov eax, edi
push 0x41
push 0x45c8a0
push ecx
push eax
call fcn.0043c85e
add esp, 0x10
mov dword [esi + 0x14], 0x41
cmp dword [esi + 0x18], ebp
jb 0x424476
mov edi, dword [edi]
mov byte [edi + 0x41], 0
lea esi, [esp + 0x70]
call fcn.00401900
mov edx, ebx
mov ecx, eax
mov byte [esp + 0x544], 3
call fcn.00401a70
cmp dword [eax + 0x18], ebp
jb 0x42449e
mov eax, dword [eax + 4]
jmp 0x4244a1
add eax, 4
push eax
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov edi, eax
cmp dword [esp + 0x40], ebp
jb 0x4244c2
mov edx, dword [esp + 0x2c]
push edx
call fcn.0043c853
add esp, 4
lea esi, [esp + 0x48]
mov dword [esp + 0x40], 0xf
mov dword [esp + 0x3c], 0
mov byte [esp + 0x2c], 0
mov byte [esp + 0x538], 2
call fcn.00429050
test edi, edi
jne 0x424994
cmp dword [esp + 0x24], edi
je 0x424a0b
push 0x3ff
lea eax, [esp + 0x131]
push edi
push eax
mov byte [esp + 0x138], 0
call fcn.00444d20
add esp, 0xc
call fcn.00417b10
test eax, eax
je 0x424526
call fcn.004194e0
mov dword [esp + 0x1c], 0x400
call fcn.00403c90
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x130]
push edx
push 0
push 0
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x564], 2
mov dword [esi + 0x18], 0xf
lea edi, [esi + 4]
mov dword [esi + 0x14], 0
mov byte [edi], 0
mov eax, dword [esi + 0x18]
lea ebx, [esp + 0x54]
mov dword [esp + 0x44], esp
cmp eax, ebp
jb 0x42457b
mov ecx, dword [edi]
jmp 0x42457d
mov ecx, edi
cmp ecx, str.8_._
ja 0x4245ba
cmp eax, ebp
jb 0x42458d
mov ecx, dword [edi]
jmp 0x42458f
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, str.8_._
jbe 0x4245ba
cmp eax, ebp
jb 0x4245a2
mov edi, dword [edi]
mov ebp, 0x12
push ebp
mov eax, str.8_._
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402ea0
jmp 0x4245fc
mov ebp, 0x12
cmp eax, ebp
jae 0x4245cf
mov ecx, dword [esi + 0x14]
push ecx
push ebp
mov ecx, esi
call fcn.00403800
mov ecx, dword [esi + 0x18]
cmp ecx, 0x10
jb 0x4245db
mov eax, dword [edi]
jmp 0x4245dd
mov eax, edi
push ebp
push str.8_._
push ecx
push eax
call fcn.0043c85e
add esp, 0x10
cmp dword [esi + 0x18], 0x10
mov dword [esi + 0x14], ebp
jb 0x4245f8
mov edi, dword [edi]
mov byte [edi + 0x12], 0
lea esi, [esp + 0x74]
call fcn.00401900
mov edx, ebx
mov ecx, eax
mov byte [esp + 0x548], 6
call fcn.00401a70
cmp dword [eax + 0x18], 0x10
jb 0x424621
mov eax, dword [eax + 4]
jmp 0x424624
add eax, 4
mov edx, dword [esp + 0x34]
push eax
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ebx, pe_nt_image_headers32
mov edi, eax
cmp dword [esp + 0x40], ebx
jb 0x42464a
mov eax, dword [esp + 0x2c]
push eax
call fcn.0043c853
add esp, 4
lea esi, [esp + 0x48]
mov dword [esp + 0x40], 0xf
mov dword [esp + 0x3c], 0
mov byte [esp + 0x2c], 0
mov byte [esp + 0x538], 2
call fcn.00429050
test edi, edi
jne 0x4246a6
lea ecx, [esp + 0x12c]
push ecx
lea ecx, [esp + 0xdc]
call fcn.00402ca0
call fcn.004179f0
test eax, eax
je 0x424696
call fcn.00419f50
call fcn.004179a0
mov dword [esp + 0x538], 2
push 0x400
lea edx, [esp + 0x130]
push 0
push edx
mov dword [esp + 0x28], 0x400
call fcn.00444d20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x130]
push ecx
push 0
push 0
lea edx, [esp + 0x38]
push edx
sub esp, 0x1c
mov esi, esp
mov dword [esi + 0x18], 0xf
lea edi, [esi + 4]
mov dword [esi + 0x14], 0
mov byte [edi], 0
mov eax, dword [esi + 0x18]
mov dword [esp + 0x48], esp
cmp eax, ebx
jb 0x424703
mov ecx, dword [edi]
jmp 0x424705
mov ecx, edi
cmp ecx, 0x45c8f8
ja 0x42473d
cmp eax, ebx
jb 0x424715
mov ecx, dword [edi]
jmp 0x424717
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, 0x45c8f8
jbe 0x42473d
cmp eax, ebx
jb 0x42472a
mov edi, dword [edi]
push ebp
mov eax, 0x45c8f8
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402ea0
jmp 0x424778
cmp eax, ebp
jae 0x42474d
mov ecx, dword [esi + 0x14]
push ecx
push ebp
mov ecx, esi
call fcn.00403800
mov ecx, dword [esi + 0x18]
cmp ecx, ebx
jb 0x424758
mov eax, dword [edi]
jmp 0x42475a
mov eax, edi
push ebp
push 0x45c8f8
push ecx
push eax
call fcn.0043c85e
add esp, 0x10
mov dword [esi + 0x14], ebp
cmp dword [esi + 0x18], ebx
jb 0x424774
mov edi, dword [edi]
mov byte [edi + 0x12], 0
lea esi, [esp + 0x78]
call fcn.00401900
mov ecx, eax
mov byte [esp + 0x54c], 9
call fcn.00401db0
cmp dword [eax + 0x18], ebx
jb 0x42479a
mov eax, dword [eax + 4]
jmp 0x42479d
add eax, 4
mov edx, dword [esp + 0x34]
push eax
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov edi, eax
cmp dword [esp + 0x40], ebx
jb 0x4247be
mov eax, dword [esp + 0x2c]
push eax
call fcn.0043c853
add esp, 4
lea esi, [esp + 0x48]
mov dword [esp + 0x40], 0xf
mov dword [esp + 0x3c], 0
mov byte [esp + 0x2c], 0
mov byte [esp + 0x538], 2
call fcn.00429050
call fcn.00417ad0
test eax, eax
je 0x4247f2
call fcn.00418470
test edi, edi
jne 0x42480a
lea ecx, [esp + 0x12c]
push ecx
lea ecx, [esp + 0xa4]
call fcn.00402ca0
mov dword [esp + 0x1c], 0x400
call fcn.00403c90
test eax, eax
je 0x424832
call fcn.00419550
call dword [sym.imp.USER32.dll_GetActiveWindow]
call dword [sym.imp.USER32.dll_GetCapture]
call dword [sym.imp.USER32.dll_GetClipboardOwner]
push 0x400
lea edx, [esp + 0x130]
push 0
push edx
call fcn.00444d20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x130]
push ecx
push 0
push 0
lea edx, [esp + 0x38]
push edx
sub esp, 0x1c
mov esi, esp
mov dword [esi + 0x18], 0xf
lea edi, [esi + 4]
mov dword [esi + 0x14], 0
mov byte [edi], 0
mov eax, dword [esi + 0x18]
mov dword [esp + 0x48], esp
cmp eax, ebx
jb 0x424887
mov ecx, dword [edi]
jmp 0x424889
mov ecx, edi
cmp ecx, 0x45c90c
ja 0x4248c1
cmp eax, ebx
jb 0x424899
mov ecx, dword [edi]
jmp 0x42489b
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, 0x45c90c
jbe 0x4248c1
cmp eax, ebx
jb 0x4248ae
mov edi, dword [edi]
push ebp
mov eax, 0x45c90c
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402ea0
jmp 0x4248fc
cmp eax, ebp
jae 0x4248d1
mov ecx, dword [esi + 0x14]
push ecx
push ebp
mov ecx, esi
call fcn.00403800
mov ecx, dword [esi + 0x18]
cmp ecx, ebx
jb 0x4248dc
mov eax, dword [edi]
jmp 0x4248de
mov eax, edi
push ebp
push 0x45c90c
push ecx
push eax
call fcn.0043c85e
add esp, 0x10
mov dword [esi + 0x14], ebp
cmp dword [esi + 0x18], ebx
jb 0x4248f8
mov edi, dword [edi]
mov byte [edi + 0x12], 0
lea esi, [esp + 0x78]
call fcn.00401900
mov ecx, eax
mov byte [esp + 0x54c], 0xa
call fcn.00401db0
cmp dword [eax + 0x18], ebx
jb 0x42491e
mov eax, dword [eax + 4]
jmp 0x424921
add eax, 4
mov edx, dword [esp + 0x34]
push eax
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov edi, eax
cmp dword [esp + 0x40], ebx
jb 0x424942
mov eax, dword [esp + 0x2c]
push eax
call fcn.0043c853
add esp, 4
lea esi, [esp + 0x48]
mov dword [esp + 0x40], 0xf
mov dword [esp + 0x3c], 0
mov byte [esp + 0x2c], 0
mov byte [esp + 0x538], 2
call fcn.00429050
test edi, edi
jne 0x424994
lea ecx, [esp + 0x12c]
push ecx
lea ecx, [esp + 0xc0]
call fcn.00402ca0
call fcn.004179a0
sub eax, 1
jne 0x424994
call fcn.00439810
call fcn.00419640
mov eax, dword [esp + 0x24]
xor ebx, ebx
cmp eax, ebx
je 0x4249d0
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
push ebx
shr esi, 0x18
call fcn.0043cb47
imul eax, eax, 0x63
add esp, 4
cmp esi, eax
jbe 0x4249d0
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
call fcn.00418740
mov ebp, pe_nt_image_headers32
cmp dword [esp + 0xec], ebx
jne 0x424b20
lea edx, [esp + 0x28]
push edx
sub esp, 0x1c
mov esi, esp
mov dword [esi + 0x18], 0xf
lea edi, [esi + 4]
mov dword [esi + 0x14], ebx
mov byte [edi], 0
mov eax, dword [esi + 0x18]
mov dword [esp + 0x38], esp
cmp eax, ebp
jb 0x424a0f
mov ecx, dword [edi]
jmp 0x424a11
xor ebx, ebx
jmp 0x4249d5
mov ecx, edi
cmp ecx, 0x45c920
ja 0x424a49
cmp eax, ebp
jb 0x424a21
mov ecx, dword [edi]
jmp 0x424a23
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, 0x45c920
jbe 0x424a49
cmp eax, ebp
jb 0x424a36
mov edi, dword [edi]
push ebp
mov eax, 0x45c920
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402ea0
jmp 0x424a84
cmp eax, ebp
jae 0x424a59
mov ecx, dword [esi + 0x14]
push ecx
push ebp
mov ecx, esi
call fcn.00403800
mov ecx, dword [esi + 0x18]
cmp ecx, ebp
jb 0x424a64
mov eax, dword [edi]
jmp 0x424a66
mov eax, edi
push ebp
push 0x45c920
push ecx
push eax
call fcn.0043c85e
add esp, 0x10
mov dword [esi + 0x14], ebp
cmp dword [esi + 0x18], ebp
jb 0x424a80
mov edi, dword [edi]
mov byte [edi + 0x10], 0
lea esi, [esp + 0x68]
call fcn.00401900
push eax
mov byte [esp + 0x540], 0xb
call fcn.00401c70
mov byte [esp + 0x538], 0xc
cmp dword [eax + 0x18], ebp
jb 0x424aad
mov edx, dword [eax + 4]
jmp 0x424ab0
lea edx, [eax + 4]
mov eax, edx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x424ab5
sub eax, esi
push eax
push edx
lea ecx, [esp + 0xe0]
call fcn.004033f0
cmp dword [esp + 0x40], ebp
jb 0x424adf
mov edx, dword [esp + 0x2c]
push edx
call fcn.0043c853
add esp, 4
lea esi, [esp + 0x48]
mov dword [esp + 0x40], 0xf
mov dword [esp + 0x3c], ebx
mov byte [esp + 0x2c], 0
mov byte [esp + 0x538], 2
call fcn.00429050
lea eax, [esp + 0x23]
mov byte [esp + 0x23], 0
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x424b10
sub eax, edx
je 0x424b20
call fcn.00419f50
cmp dword [esp + 0xb4], ebx
jne 0x424c6e
lea eax, [esp + 0x28]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [esi + 0x18], 0xf
lea edi, [esi + 4]
mov dword [esi + 0x14], ebx
mov byte [edi], 0
mov eax, dword [esi + 0x18]
mov dword [esp + 0x38], esp
cmp eax, ebp
jb 0x424b56
mov ecx, dword [edi]
jmp 0x424b58
mov ecx, edi
cmp ecx, 0x45c934
ja 0x424b90
cmp eax, ebp
jb 0x424b68
mov ecx, dword [edi]
jmp 0x424b6a
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, 0x45c934
jbe 0x424b90
cmp eax, ebp
jb 0x424b7d
mov edi, dword [edi]
push ebp
mov eax, 0x45c934
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402ea0
jmp 0x424bcb
cmp eax, ebp
jae 0x424ba0
mov ecx, dword [esi + 0x14]
push ecx
push ebp
mov ecx, esi
call fcn.00403800
mov ecx, dword [esi + 0x18]
cmp ecx, ebp
jb 0x424bab
mov eax, dword [edi]
jmp 0x424bad
mov eax, edi
push ebp
push 0x45c934
push ecx
push eax
call fcn.0043c85e
add esp, 0x10
mov dword [esi + 0x14], ebp
cmp dword [esi + 0x18], ebp
jb 0x424bc7
mov edi, dword [edi]
mov byte [edi + 0x10], 0
lea esi, [esp + 0x68]
call fcn.00401900
mov ecx, eax
mov byte [esp + 0x53c], 0xd
call fcn.00401b50
mov byte [esp + 0x538], 0xe
cmp dword [eax + 0x18], ebp
jb 0x424bf5
mov edx, dword [eax + 4]
jmp 0x424bf8
lea edx, [eax + 4]
mov eax, edx
lea esi, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x424c00
sub eax, esi
push eax
push edx
lea ecx, [esp + 0xa8]
call fcn.004033f0
cmp dword [esp + 0x40], ebp
jb 0x424c2a
mov edx, dword [esp + 0x2c]
push edx
call fcn.0043c853
add esp, 4
lea esi, [esp + 0x48]
mov dword [esp + 0x40], 0xf
mov dword [esp + 0x3c], ebx
mov byte [esp + 0x2c], 0
mov byte [esp + 0x538], 2
call fcn.00429050
call fcn.00403c90
sub eax, 1
jne 0x424c60
call fcn.00439810
call fcn.00419710
call fcn.00417b10
test eax, eax
je 0x424c6e
call fcn.00419800
cmp dword [esp + 0xd0], ebx
jne 0x424d96
lea eax, [esp + 0x28]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [esi + 0x18], 0xf
lea edi, [esi + 4]
mov dword [esi + 0x14], ebx
mov byte [edi], 0
mov eax, dword [esi + 0x18]
mov dword [esp + 0x38], esp
cmp eax, ebp
jb 0x424ca4
mov ecx, dword [edi]
jmp 0x424ca6
mov ecx, edi
cmp ecx, 0x45c948
ja 0x424cdf
cmp eax, ebp
jb 0x424cb6
mov ecx, dword [edi]
jmp 0x424cb8
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, 0x45c948
jbe 0x424cdf
cmp eax, ebp
jb 0x424ccb
mov edi, dword [edi]
push 8
mov eax, 0x45c948
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402ea0
jmp 0x424d21
cmp eax, 8
jae 0x424cf1
mov ecx, dword [esi + 0x14]
push ecx
push 8
mov ecx, esi
call fcn.00403800
mov ecx, dword [esi + 0x18]
cmp ecx, ebp
jb 0x424cfc
mov eax, dword [edi]
jmp 0x424cfe
mov eax, edi
push 8
push 0x45c948
push ecx
push eax
call fcn.0043c85e
add esp, 0x10
mov dword [esi + 0x14], 8
cmp dword [esi + 0x18], ebp
jb 0x424d1d
mov edi, dword [edi]
mov byte [edi + 8], 0
lea esi, [esp + 0x68]
call fcn.00401900
push eax
mov byte [esp + 0x540], 0xf
call fcn.00401c70
mov byte [esp + 0x538], 0x10
cmp dword [eax + 0x18], ebp
jb 0x424d4a
mov edx, dword [eax + 4]
jmp 0x424d4d
lea edx, [eax + 4]
mov eax, edx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x424d52
sub eax, esi
push eax
push edx
lea ecx, [esp + 0xc4]
call fcn.004033f0
cmp dword [esp + 0x40], ebp
jb 0x424d7c
mov edx, dword [esp + 0x2c]
push edx
call fcn.0043c853
add esp, 4
lea esi, [esp + 0x48]
mov dword [esp + 0x40], 0xf
mov dword [esp + 0x3c], ebx
mov byte [esp + 0x2c], 0
call fcn.00429050
mov eax, dword [esp + 0xdc]
cmp dword [esp + 0xf0], ebp
jae 0x424dad
lea eax, [esp + 0xdc]
push eax
call sub.WS2_32.dll_gethostbyname
push ebx
mov esi, eax
call fcn.0043cb47
add esp, 4
call fcn.0043c831
call fcn.0043c831
mov dword [esp + 0x538], 2
cmp esi, ebx
jne 0x424e61
cmp dword [esp + 0xd4], ebp
jb 0x424df4
mov eax, dword [esp + 0xc0]
push eax
call fcn.0043c853
add esp, 4
mov esi, 0xf
mov dword [esp + 0xd4], esi
mov dword [esp + 0xd0], ebx
mov byte [esp + 0xc0], 0
cmp dword [esp + 0xb8], ebp
jb 0x424e28
mov ecx, dword [esp + 0xa4]
push ecx
call fcn.0043c853
add esp, 4
mov dword [esp + 0xb8], esi
mov dword [esp + 0xb4], ebx
mov byte [esp + 0xa4], 0
cmp dword [esp + 0xf0], ebp
jb 0x424e57
mov edx, dword [esp + 0xdc]
push edx
call fcn.0043c853
add esp, 4
mov eax, 0x80004005
jmp 0x4250d2
xor eax, eax
mov esi, 0xf
mov dword [esp + 0x10c], esi
mov dword [esp + 0x108], eax
mov byte [esp + 0xf8], al
sub esp, 0x1c
mov ecx, esp
mov bl, 0x13
mov byte [esp + 0x554], bl
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
mov dword [ecx + 0x14], eax
mov dword [ecx + 0x18], esi
push eax
mov byte [ecx + 4], al
lea eax, [esp + 0xe0]
push eax
lea edi, [esp + 0x11c]
call fcn.00402ea0
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x570], 0x14
mov dword [esp + 0x54], esp
push 0xffffffffffffffff
push 0
lea edx, [esp + 0xe0]
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], 0
push edx
mov byte [ecx + 4], 0
call fcn.00402ea0
mov byte [esp + 0x570], bl
call fcn.00434ed0
mov esi, eax
call fcn.00417b40
test eax, eax
je 0x424efb
call fcn.004198b0
call fcn.00417930
test eax, eax
je 0x424f0e
call fcn.00432560
call fcn.00401450
xor edi, edi
cmp esi, edi
jge 0x424ff8
mov eax, dword [esp + 0xc0]
cmp dword [esp + 0xd4], ebp
jae 0x424f2f
lea eax, [esp + 0xc0]
push eax
mov eax, dword [esp + 0xa8]
cmp dword [esp + 0xbc], ebp
jae 0x424f47
lea eax, [esp + 0xa8]
push eax
lea eax, [esp + 0x30]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x3f
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], edi
push str._DRN
mov byte [ecx + 4], 0
call fcn.004033f0
lea esi, [esp + 0x70]
call fcn.00401900
push eax
mov byte [esp + 0x548], 0x15
call fcn.00401c70
mov byte [esp + 0x540], 0x16
cmp dword [eax + 0x18], ebp
jb 0x424f99
mov eax, dword [eax + 4]
jmp 0x424f9c
add eax, 4
mov ecx, dword [esp + 0x4c]
push eax
push 1
push ecx
call fcn.0041c440
add esp, 0x14
lea ecx, [esp + 0x28]
call fcn.00402c70
lea esi, [esp + 0x48]
call fcn.00429050
lea ecx, [esp + 0xf4]
call fcn.00402c70
lea ecx, [esp + 0xbc]
call fcn.00402c70
lea ecx, [esp + 0xa0]
call fcn.00402c70
lea ecx, [esp + 0xd8]
call fcn.00402c70
mov eax, 0x80004005
jmp 0x4250d2
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x45a6ff
call fcn.00402c00
sub esp, 0x1c
mov byte [esp + 0x570], 0x17
lea edx, [esp + 0x12c]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
call fcn.00402c40
mov ebp, dword [esp + 0x7c]
lea esi, [ebp + 0x18]
mov ecx, esi
mov byte [esp + 0x570], bl
call fcn.00433c00
cmp eax, edi
jl 0x424fbe
mov dword [esp + 0x128], 0xf
mov dword [esp + 0x124], edi
mov byte [esp + 0x114], 0
lea ecx, [esp + 0x110]
mov eax, esi
mov byte [esp + 0x538], 0x18
call fcn.004344c0
lea ecx, [esp + 0x110]
test eax, eax
jge 0x42508b
call fcn.00402c70
jmp 0x424fbe
mov dword [ebp + 0x39c], 1
mov dword [ebp + 0x3a0], edi
call fcn.00402c70
lea ecx, [esp + 0xf4]
call fcn.00402c70
lea ecx, [esp + 0xbc]
call fcn.00402c70
lea ecx, [esp + 0xa0]
call fcn.00402c70
lea ecx, [esp + 0xd8]
call fcn.00402c70
xor eax, eax
mov ecx, dword [esp + 0x530]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x518]
xor ecx, esp
call fcn.0043c2d9
add esp, 0x528
ret