Function at 0x42ba3a
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7c4
push ebx
mov bl, byte [ebp + 0x10]
and dword [ebp + 0x10], 1
push esi
push edi
push dword [ebp + 0xc]
and bl, 0xf0
lea ecx, [ebp - 0x6c]
mov byte [ebp - 0x56], bl
call fcn.00448399
mov eax, dword [ebp + 0xc]
or dword [ebp - 0x20], 0xffffffff
lea ecx, [ebp + 0xc]
mov dword [ebp - 0x68], eax
call fcn.0040ea44
xor edi, edi
lea ecx, [ebp - 0x3c]
mov byte [ebp - 0x10], 0xff
mov byte [ebp - 0xe], 0xff
mov byte [ebp - 0xd], 0
mov byte [ebp - 0x1a], 0
mov byte [ebp - 1], 0
mov byte [ebp - 0xb], 0
mov byte [ebp - 0xa], 0
mov byte [ebp - 0x19], 0
mov byte [ebp - 0x42], 0
mov byte [ebp - 0x41], 0
mov byte [ebp - 0x11], 0
mov dword [ebp - 0x40], 0xffff0000
mov dword [ebp - 0x5c], edi
mov byte [ebp - 0x2d], 0
call fcn.0043fd9a
push 1
lea eax, [ebp + 0xc]
push eax
push 0x4b1eb4
mov dword [ebp - 0x244], edi
mov word [ebp - 0x2c8], di
call fcn.00441bc4
add esp, 0xc
test al, al
jne 0x42badf
test bl, bl
mov byte [ebp - 0x12], al
je 0x42bae5
mov byte [ebp - 0x12], 1
test bl, bl
setne byte [ebp - 0x1b]
cmp byte [ebp - 0x12], 0
je 0x42baf7
mov byte [ebp - 0x10], 0
mov byte [ebp - 0xe], 1
mov eax, dword [ebp + 0xc]
mov cx, word [eax]
cmp cx, 0x2d
mov byte [ebp - 0xf], 0x2a
jne 0x42bb0c
mov dl, cl
mov byte [ebp - 0xf], dl
movsx edx, byte [ebp - 0xf]
push 2
movzx ecx, cx
cmp ecx, edx
pop ebx
push 3
mov dword [ebp - 0x60], edx
pop esi
je 0x42bc49
push 0x6e
pop ecx
xor eax, eax
push 0x6a
xor ebx, ebx
lea edi, [ebp - 0x228]
mov dword [ebp - 0x22c], ebx
rep stosd dword es:[edi], eax
pop ecx
push 0x69
lea edi, [ebp - 0x470]
rep stosd dword es:[edi], eax
pop ecx
lea edi, [ebp - 0x618]
rep stosd dword es:[edi], eax
push 0x69
pop ecx
lea edi, [ebp - 0x7c0]
mov dword [ebp - 0x7c4], ebx
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x48], ebx
call fcn.00440008
mov esi, dword [sym.imp.SHLWAPI.dll_StrChrW]
lea eax, [ebp - 0x474]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + 0xc]
push 0x2c
push eax
mov dword [ebp - 0x474], eax
mov dword [ebp - 0x61c], eax
mov dword [ebp - 0x4c], 1
call esi
mov edi, eax
cmp edi, ebx
mov dword [ebp - 0x34], edi
je 0x42bbb4
sub eax, dword [ebp - 0x68]
sar eax, 1
inc edi
inc edi
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x34], edi
cmp edi, ebx
mov dword [ebp - 0x470], edi
mov dword [ebp - 0x618], edi
je 0x42bbdc
push 0xc
push edi
push str._LoadLibrary
call fcn.0043af58
add esp, 0xc
test al, al
mov byte [ebp - 0xc], 1
jne 0x42bbe0
mov byte [ebp - 0xc], 0
cmp edi, ebx
je 0x42bbfc
push 0xf
push edi
push str._GetProcAddress
call fcn.0043af58
add esp, 0xc
test al, al
mov byte [ebp - 0xa], 1
jne 0x42bc00
mov byte [ebp - 0xa], 0
cmp edi, ebx
je 0x42bc1c
push 0xc
push edi
push str._FreeLibrary
call fcn.0043af58
add esp, 0xc
test al, al
mov byte [ebp - 9], 1
jne 0x42bc20
mov byte [ebp - 9], 0
mov bl, byte [ebp - 9]
or bl, byte [ebp - 0xa]
xor ecx, ecx
or bl, byte [ebp - 0xc]
cmp edi, ecx
je 0x42bfcd
cmp word [edi], 0x2a
jne 0x42bfcd
mov byte [ebp - 0x43], 1
jmp 0x42bfed
push 3
pop esi
movzx ecx, word [eax + 2]
cmp ecx, dword [ebp - 0x60]
jne 0x42bfab
add eax, 4
mov dword [ebp + 0xc], eax
push 1
lea eax, [ebp + 0xc]
push eax
push 0x4b4354
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42bc7f
mov dword [ebp + 0x10], 1
jmp 0x42bf94
push ebx
lea eax, [ebp + 0xc]
push eax
push 0x4b4350
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42bc9e
mov byte [ebp - 0x10], 1
jmp 0x42bf94
push esi
lea eax, [ebp + 0xc]
push eax
push 0x4b367c
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42bcbd
mov byte [ebp - 0x10], 0
jmp 0x42bf94
push 4
lea eax, [ebp + 0xc]
push eax
push str.nrcd
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42bcdd
mov byte [ebp - 0xe], 2
jmp 0x42bf94
push esi
lea eax, [ebp + 0xc]
push eax
push 0x4b4344
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42bcfc
mov byte [ebp - 0xe], 0
jmp 0x42bf94
push ebx
lea eax, [ebp + 0xc]
push eax
push 0x4b4340
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42bd1b
mov byte [ebp - 1], 1
jmp 0x42bf94
push esi
lea eax, [ebp + 0xc]
push eax
push 0x4b433c
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42bd3a
mov byte [ebp - 1], 0x23
jmp 0x42bf94
push esi
lea eax, [ebp + 0xc]
push eax
push 0x4b4338
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42bd59
mov byte [ebp - 1], 0x2a
jmp 0x42bf94
push esi
lea eax, [ebp + 0xc]
push eax
push 0x4b4334
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42bd78
mov byte [ebp - 1], 0x24
jmp 0x42bf94
push esi
lea eax, [ebp + 0xc]
push eax
push 0x4b4330
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42bd97
mov byte [ebp - 1], 0x40
jmp 0x42bf94
push esi
lea eax, [ebp + 0xc]
push eax
push 0x4b432c
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42bdb6
mov byte [ebp - 1], 0x3d
jmp 0x42bf94
push ebx
lea eax, [ebp + 0xc]
push eax
push 0x4b4328
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42bdd8
mov dword [ebp - 0x40], 1
jmp 0x42bf94
push esi
lea eax, [ebp + 0xc]
push eax
push 0x4b4324
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42bdf6
mov dword [ebp - 0x40], edi
jmp 0x42bf94
push esi
lea eax, [ebp + 0xc]
push eax
push 0x4b4320
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42be15
mov byte [ebp - 0xa], 1
jmp 0x42bf94
push esi
lea eax, [ebp + 0xc]
push eax
push 0x4b431c
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42be34
mov byte [ebp - 0x19], 1
jmp 0x42bf94
push 1
lea eax, [ebp + 0xc]
push eax
push 0x4b1fa4
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42be54
mov byte [ebp - 0x42], 1
jmp 0x42bf94
push esi
lea eax, [ebp + 0xc]
push eax
push 0x4afcd0
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42be73
mov byte [ebp - 0x11], 1
jmp 0x42bf94
push esi
lea eax, [ebp + 0xc]
push eax
push 0x4b4318
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42be92
mov byte [ebp - 0x2d], 1
jmp 0x42bf94
push 4
lea eax, [ebp + 0xc]
push eax
push str.bool
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42beb2
mov byte [ebp - 0x11], 2
jmp 0x42bf94
push 5
push dword [ebp + 0xc]
push str.sret:
call fcn.0043af58
add esp, 0xc
test al, al
je 0x42bed1
add dword [ebp + 0xc], ebx
mov byte [ebp - 0x41], 1
jmp 0x42bee7
push 4
push dword [ebp + 0xc]
push str.ret:
call fcn.0043af58
add esp, 0xc
test al, al
je 0x42bf40
add dword [ebp + 0xc], 8
mov esi, dword [ebp + 0xc]
lea eax, [ebp + 0xc]
push eax
call fcn.0040549b
mov eax, dword [ebp + 0xc]
pop ecx
sub eax, esi
sar eax, 1
push eax
push esi
lea ecx, [ebp - 0x3c]
call fcn.0043febe
lea ecx, [ebp + 0xc]
call fcn.0040ea44
mov ecx, dword [ebp + 8]
push edi
lea eax, [ebp - 0x3c]
push eax
call fcn.00402e5f
push dword [ebp - 0x3c]
mov byte [ebp - 0x1a], 1
push 0x4afcf8
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
jne 0x42bf94
mov eax, dword [ebp - 0x3c]
mov byte [ebp - 0x1a], 3
mov word [eax], di
jmp 0x42bf94
push 1
lea eax, [ebp + 0xc]
push eax
push 0x4b42fc
call fcn.00441bc4
add esp, 0xc
test al, al
je 0x42bf5d
mov byte [ebp - 0xb], 1
jmp 0x42bf94
cmp byte [ebp - 0xf], 0x2a
jne 0x42bf8a
mov edx, dword [ebp + 0xc]
mov esi, edx
xor ecx, ecx
jmp 0x42bf82
mov eax, ecx
call fcn.0040ea2b
test al, al
jne 0x42bf8a
cmp cx, 0x2c
je 0x42bfa5
add edx, ebx
mov dword [ebp + 0xc], edx
mov cx, word [edx]
cmp cx, di
jne 0x42bf6c
lea eax, [ebp + 0xc]
push eax
call fcn.00405444
pop ecx
mov eax, dword [ebp + 0xc]
movzx ecx, word [eax]
cmp ecx, dword [ebp - 0x60]
je 0x42bc46
jmp 0x42bfab
lea eax, [esi - 4]
mov dword [ebp + 0xc], eax
cmp byte [ebp - 0xa], 0
je 0x42bb24
mov ecx, dword [ebp + 8]
push 0xffffffffffffff9c
push 0x4ae9fc
push edi
push eax
call fcn.00481dd3
mov esi, eax
jmp 0x42de72
cmp byte [ebp - 0x12], 0
mov byte [ebp - 0x43], 0
jne 0x42bfed
cmp byte [ebp - 0x1b], 0
jne 0x42bfed
cmp byte [ebp - 0xc], 0
jne 0x42bfed
cmp byte [ebp - 9], 0
mov byte [ebp - 0xf], 1
je 0x42bff1
mov byte [ebp - 0xf], 0
mov al, byte [ebp - 0xa]
or al, byte [ebp - 0xc]
je 0x42bffd
or byte [ebp - 0x2d], 0x10
cmp byte [ebp - 0x19], 0
jne 0x42c054
cmp byte [ebp - 0xf], 0
je 0x42c054
mov eax, dword [ebp + 0x14]
cmp eax, ecx
mov dword [ebp - 0x24], eax
jne 0x42c019
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x4c], 1
push 0x2c
push dword [ebp - 0x24]
call esi
test eax, eax
mov dword [ebp - 0x24], eax
je 0x42c052
and word [eax], 0
add dword [ebp - 0x24], 2
cmp dword [ebp - 0x4c], 2
jl 0x42c049
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x4c]
mov dword [ebp + ecx*4 - 0x474], eax
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 0x6a
jl 0x42c020
xor ecx, ecx
cmp edi, ecx
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x18], ecx
je 0x42c070
push 0x2c
push edi
call esi
mov dword [ebp - 0x18], eax
and word [edi - 2], 0
xor ecx, ecx
mov eax, dword [ebp + 0xc]
cmp word [eax], cx
jne 0x42c086
test bl, bl
jne 0x42c086
mov esi, 0x80070057
jmp 0x42de54
cmp dword [ebp - 0x18], ecx
je 0x42c095
mov eax, dword [ebp - 0x18]
mov word [eax], cx
add dword [ebp - 0x18], 2
mov al, byte [ebp - 0x1a]
and al, 2
mov byte [ebp - 0x55], al
je 0x42c0ad
cmp edi, ecx
je 0x42c0ad
cmp word [edi], cx
jne 0x42c0ad
xor edi, edi
mov dword [ebp - 0x34], edi
test al, al
je 0x42c0d7
cmp dword [ebp - 0x18], 0
je 0x42c0d7
mov ecx, dword [ebp + 8]
xor esi, esi
push esi
push 0x2c
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0043525c
mov eax, dword [ebp - 0x18]
cmp word [eax], si
jne 0x42c0d7
mov dword [ebp - 0x18], esi
xor ebx, ebx
push 0x20a
lea ecx, [ebp - 0x64]
mov dword [ebp - 8], ebx
mov dword [ebp - 0x2c], ebx
call fcn.0043fdb8
cmp byte [ebp - 0xe], bl
mov byte [ebp - 0x1a], bl
jg 0x42c102
push dword [ebp - 0x64]
push 0x208
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
cmp byte [ebp - 0xc], 0
mov eax, dword [ebp - 0x18]
je 0x42c123
cmp eax, ebx
je 0x42c123
cmp word [eax], 0x5e
jne 0x42c123
push 0x2a
pop esi
cmp word [eax + 2], si
jne 0x42c126
xor ecx, ecx
inc ecx
jmp 0x42c128
push 0x2a
pop esi
xor ecx, ecx
cmp byte [ebp - 0xc], 0
je 0x42c147
cmp eax, ebx
je 0x42c147
cmp word [eax], 0x5e
jne 0x42c147
cmp word [eax + 2], si
je 0x42c147
mov dword [ebp - 0x68], 1
jmp 0x42c14e
cmp ecx, ebx
mov dword [ebp - 0x68], ebx
je 0x42c153
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp byte [ebp - 0xc], 0
je 0x42c1a3
cmp byte [ebp - 0xb], 0
jne 0x42c1a3
mov ecx, dword [ebp - 0x3c]
mov cx, word [ecx]
cmp cx, bx
je 0x42c199
cmp cx, si
je 0x42c199
cmp eax, ebx
je 0x42c1a3
cmp word [eax], si
je 0x42c1a3
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00410dc3
pop ecx
pop ecx
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 8], eax
mov byte [ebp - 0xd], 1
jmp 0x42dd4c
mov esi, 0x80070057
jmp 0x42de4c
cmp byte [ebp - 0xa], 0
je 0x42c233
cmp word [eax], si
mov byte [ebp - 0xd], 1
jne 0x42c1bb
inc eax
inc eax
mov dword [ebp - 0x18], eax
mov cx, word [eax]
cmp cx, si
je 0x42c1c9
cmp cx, 0x23
jne 0x42c1cf
mov byte [ebp - 0xb], 1
jmp 0x42c1b6
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
call fcn.0044b318
cmp dword [ebp - 0x18], ebx
pop ecx
pop ecx
je 0x42dd78
add dword [ebp - 0x18], 2
je 0x42dd78
push dword [ebp - 0x18]
lea ecx, [ebp + 0x10]
call fcn.0040e99a
cmp byte [ebp - 0xb], 0
je 0x42c21c
mov ecx, dword [ebp - 0x54]
mov eax, ecx
or eax, dword [ebp - 0x50]
je 0x42c22b
push dword [ebp + 0x10]
call fcn.0040f65f
jmp 0x42c228
push dword [ebp + 0x10]
push dword [ebp - 0x54]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 8], eax
lea ecx, [ebp + 0x10]
jmp 0x42cb0e
cmp byte [ebp - 9], 0
je 0x42c2a2
cmp word [eax], si
mov byte [ebp - 0xd], 1
jne 0x42c247
inc eax
inc eax
mov dword [ebp - 0x18], eax
mov cx, word [eax]
cmp cx, si
je 0x42c255
cmp cx, 0x23
jne 0x42c25b
mov byte [ebp - 0xb], 1
jmp 0x42c242
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
call fcn.0044b318
cmp byte [ebp - 0xb], 1
pop ecx
pop ecx
jle 0x42c291
mov ecx, dword [ebp - 0x54]
mov eax, ecx
or eax, dword [ebp - 0x50]
je 0x42dd78
call fcn.0040f618
mov dword [ebp - 8], ebx
jmp 0x42dd78
push dword [ebp - 0x54]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - 8], eax
jmp 0x42dd78
cmp byte [ebp - 0x56], 0
mov byte [ebp - 9], 0
je 0x42c2b0
mov byte [ebp - 9], 1
cmp eax, ebx
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov ecx, 0x4b42d6
jne 0x42c3cf
cmp edi, ebx
jne 0x42c2ce
mov edi, ecx
mov dword [ebp - 0x34], edi
jmp 0x42c2e6
push edi
push ecx
call esi
test eax, eax
je 0x42c2e6
push edi
push 0x4b42aa
call esi
test eax, eax
jne 0x42c3cf
cmp dword [ebp - 0x40], ebx
mov byte [ebp - 9], 0xff
jge 0x42c2f6
mov dword [ebp - 0x40], 0x31
cmp byte [ebp - 0x40], 0
je 0x42c3cf
lea ecx, [ebp + 0x10]
call fcn.0043fd9a
push 0xffffffffffffffff
push str.___exe:_
lea ecx, [ebp + 0x14]
call fcn.004483cf
lea eax, [ebp + 0x14]
push eax
lea ecx, [ebp + 0x10]
call fcn.0044842f
lea ecx, [ebp + 0x14]
call fcn.00439cfd
push 0x51c
lea ecx, [ebp + 0x10]
call fcn.0043fddf
mov eax, dword [ebp + 0x10]
push 0x208
add eax, 0x10
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0xffffffffffffffff
push str.____nowin___nfb___hide_PECMDpecmd_cmd_CALL__
lea ecx, [ebp + 0x14]
call fcn.004483cf
push dword [eax]
lea ecx, [ebp + 0x10]
call fcn.0043fe06
lea ecx, [ebp + 0x14]
call fcn.00439cfd
mov eax, dword [ebp - 0x20]
cmp eax, ebx
jl 0x42c37a
mov ecx, dword [ebp - 0x6c]
mov word [ecx + eax*2], bx
push dword [ebp - 0x6c]
lea ecx, [ebp + 0x10]
call fcn.0043fe06
push 0xffffffffffffffff
push 0x4b4264
lea ecx, [ebp + 0x14]
call fcn.004483cf
push dword [eax]
lea ecx, [ebp + 0x10]
call fcn.0043fe06
lea ecx, [ebp + 0x14]
call fcn.00439cfd
push edi
lea ecx, [ebp + 0x10]
call fcn.0043fe06
mov ecx, dword [ebp + 8]
push ebx
push ebx
push ebx
push ebx
push ebx
push ecx
push dword [ebp + 0x10]
call fcn.00409c61
lea ecx, [ebp + 0x10]
mov esi, eax
call fcn.00439cfd
jmp 0x42de4c
cmp edi, ebx
je 0x42de91
cmp word [edi], bx
je 0x42de91
cmp byte [ebp - 0x19], 0
jne 0x42c43d
cmp byte [ebp - 0xf], 0
je 0x42c43d
cmp dword [ebp + 0x14], ebx
je 0x42c43d
push 2
pop esi
cmp dword [ebp - 0x4c], esi
lea eax, [ebp - 0x61c]
mov dword [ebp - 0x28], eax
mov dword [ebp + 0x14], ebx
jle 0x42c435
mov ecx, dword [ebp + 8]
push 1
push ebx
lea eax, [ebp + 0x14]
push eax
push dword [ebp + esi*4 - 0x474]
call fcn.0044ed7d
mov eax, dword [ebp + 0x14]
mov dword [ebp + esi*4 - 0x61c], eax
mov dword [ebp + esi*4 - 0x7c4], eax
inc esi
cmp esi, dword [ebp - 0x4c]
mov dword [ebp + 0x14], ebx
jl 0x42c405
lea ecx, [ebp + 0x14]
call fcn.00439cfd
cmp byte [ebp - 0x19], 0
push 2
pop eax
jne 0x42c662
cmp byte [ebp - 0xf], 0
je 0x42c662
mov ecx, dword [ebp - 0x28]
cmp dword [ecx + 4], 0
je 0x42c662
cmp byte [ebp - 0x55], 0
je 0x42c474
mov ecx, dword [ecx + 8]
test ecx, ecx
mov dword [ebp - 0x24], ecx
je 0x42c474
push 3
pop eax
mov ecx, dword [ebp - 0x28]
shl eax, 2
add ecx, eax
lea eax, [ebp + eax - 0x478]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
add dword [ebp - 0x28], 4
add dword [ebp - 0x20], 4
test eax, eax
mov dword [ebp - 0x24], eax
je 0x42c662
mov edi, dword [ebp - 0x48]
mov cx, word [eax]
lea edi, [ebp + edi*4 - 0x22c]
xor dl, dl
cmp byte [ebp - 1], 0x23
mov dword [edi], eax
je 0x42c61c
cmp byte [ebp - 1], 0x2a
je 0x42c549
cmp byte [ebp - 1], 0x24
je 0x42c64d
cmp byte [ebp - 1], 0x40
je 0x42c528
cmp byte [ebp - 1], 0x3d
je 0x42c539
cmp byte [ebp - 1], 0x7e
je 0x42c516
cmp byte [ebp - 1], dl
je 0x42c616
inc eax
inc eax
movzx ecx, cx
inc dl
cmp ecx, 0x23
mov dword [ebp - 0x24], eax
je 0x42c627
cmp ecx, 0x2a
je 0x42c549
cmp ecx, 0x3d
je 0x42c539
cmp ecx, 0x40
je 0x42c528
cmp ecx, 0x7e
jne 0x42c64d
test eax, eax
mov ebx, 0xfde9
je 0x42c64d
jmp 0x42c5c7
xor ebx, ebx
cmp eax, ebx
jne 0x42c5c7
mov dword [edi], ebx
jmp 0x42c64f
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ecx]
movsx eax, dl
lea eax, [ecx + eax*2]
jmp 0x42c64d
cmp word [eax], 0x2a
jne 0x42c554
inc eax
inc eax
mov dword [ebp - 0x24], eax
mov cx, word [eax]
xor esi, esi
xor ebx, ebx
cmp cx, 0x7e
jne 0x42c5a4
inc eax
inc eax
mov ebx, 0xfde9
mov dword [ebp - 0x24], eax
lea ecx, [ebp + 0x14]
call fcn.0043fd9a
mov ecx, dword [ebp + 8]
push esi
push 0x2c
lea eax, [ebp + 0x14]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0043525c
mov ecx, dword [ebp + 8]
push esi
push 0xffffffffffffffff
push esi
push dword [ebp + 0x14]
mov dword [ebp - 0x24], esi
call fcn.0040fd4e
cmp eax, esi
je 0x42c5ae
mov eax, dword [eax + 4]
mov dword [ebp - 0x24], eax
jmp 0x42c5b1
cmp cx, 0x40
jne 0x42c56b
xor ebx, ebx
jmp 0x42c56b
mov eax, dword [ebp - 0x24]
cmp bx, si
je 0x42c60a
cmp eax, esi
je 0x42c602
cmp word [eax], si
je 0x42c60a
lea ecx, [ebp + 0x14]
call fcn.00439cfd
push 4
call fcn.0049aa28
test eax, eax
pop ecx
je 0x42c5da
and dword [eax], 0
mov esi, eax
jmp 0x42c5dc
xor esi, esi
movzx eax, bx
push eax
push 0xffffffffffffffff
push dword [ebp - 0x24]
mov ecx, esi
call fcn.0043fd22
mov eax, dword [esi]
push esi
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x24], eax
call fcn.0040ea70
mov eax, dword [ebp - 0x24]
jmp 0x42c64d
mov eax, 0x4ae9fc
mov dword [ebp - 0x24], eax
lea ecx, [ebp + 0x14]
mov dword [edi], eax
call fcn.00439cfd
jmp 0x42c64f
cmp cx, 0x23
jne 0x42c64f
cmp word [eax], 0x23
jne 0x42c627
inc eax
inc eax
mov dword [ebp - 0x24], eax
and dword [ebp - 0x240], 0
and dword [ebp - 0x23c], 0
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0044b3c3
mov eax, dword [ebp - 0x240]
pop ecx
pop ecx
mov dword [edi], eax
inc dword [ebp - 0x48]
cmp byte [ebp - 0x42], 0
jne 0x42c662
cmp dword [ebp - 0x48], 0x64
jbe 0x42c489
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push str._DllRegisterServer
push dword [ebp - 0x34]
call esi
xor edi, edi
test eax, eax
jne 0x42c693
cmp dword [ebp - 0x40], edi
mov dword [ebp - 0x34], 0x4b42d6
mov byte [ebp - 9], 0xff
jge 0x42c68f
mov dword [ebp - 0x40], 0x31
mov byte [ebp - 0x10], 1
push str._DllUnregisterServer
push dword [ebp - 0x34]
call esi
test eax, eax
jne 0x42c6bc
cmp dword [ebp - 0x40], edi
mov dword [ebp - 0x34], 0x4b42aa
mov byte [ebp - 9], 0xff
jge 0x42c6b8
mov dword [ebp - 0x40], 0x71
mov byte [ebp - 0x10], 1
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x50], edi
cmp word [edx], 0x23
mov dword [ebp - 0x20], edi
jne 0x42c722
cmp word [edx + 2], di
jne 0x42c722
mov eax, dword [ebp - 0x34]
mov dword [ebp + 0x14], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp + 0x14]
push eax
call fcn.0044b3c3
mov eax, dword [ebp - 0x54]
pop ecx
pop ecx
mov ecx, eax
or ecx, dword [ebp - 0x50]
jne 0x42c70e
mov al, byte [ebp - 0x1b]
neg al
sbb eax, eax
and eax, 0x7ff8ffa9
add eax, 0x80070057
mov dword [ebp - 8], eax
xor edi, edi
jmp 0x42ddf0
cmp byte [ebp - 0xe], 0
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x20], eax
mov byte [ebp - 9], 1
jge 0x42c722
mov byte [ebp - 0xe], 1
cmp byte [ebp - 0xc], 0
je 0x42c733
mov eax, edx
mov edx, dword [ebp - 0x18]
mov dword [ebp + 0xc], edx
mov dword [ebp - 0x18], eax
cmp edx, edi
mov byte [ebp - 0xa], 0
mov dword [ebp - 0x28], edi
je 0x42c757
cmp word [edx], 0x22
jne 0x42c74b
mov dword [ebp - 0x28], 1
push edx
call fcn.00411f27
mov edx, eax
pop ecx
mov dword [ebp + 0xc], edx
push 0x2a
mov ecx, edx
pop esi
mov dword [ebp - 0x38], ecx
cmp word [edx], si
mov byte [ebp + 0x17], 0
jne 0x42c77a
lea eax, [ecx + 2]
cmp word [eax], si
jne 0x42c77a
mov ecx, eax
mov dword [ebp - 0x38], ecx
cmp word [ecx], si
je 0x42c768
mov di, word [ecx]
cmp di, si
jne 0x42c801
xor eax, eax
mov ax, word [ecx + 2]
push eax
call fcn.0043f865
add esp, 4
test al, al
jne 0x42c799
or byte [ebp - 0xb], 2
cmp di, si
jne 0x42c801
xor eax, eax
lea esi, [ecx + 2]
mov ax, word [esi]
push eax
call fcn.0043f865
add esp, 4
test al, al
je 0x42c801
cmp ecx, edx
seta al
and dword [ebp - 0x240], 0
and dword [ebp - 0x23c], 0
inc al
mov byte [ebp + 0x17], al
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x38], esi
call fcn.0044b318
test eax, eax
pop ecx
pop ecx
jle 0x42c199
mov eax, dword [ebp - 0x240]
test eax, eax
je 0x42c199
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
jmp 0x42c80b
test di, di
jne 0x42c811
xor ecx, ecx
mov dword [ebp - 0x38], ecx
cmp byte [ebp + 0x17], 0
jne 0x42c826
test ecx, ecx
je 0x42c826
cmp word [ecx], 0x2e
jne 0x42c826
cmp word [ecx + 2], 0
jne 0x42c826
mov bl, 1
jmp 0x42c82d
xor bl, bl
cmp byte [ebp + 0x17], bl
jne 0x42c89f
cmp byte [ebp - 0x43], 0
je 0x42c89f
cmp byte [ebp - 0xb], 0
jne 0x42c89f
test bl, bl
je 0x42c844
mov eax, dword [0x4c8c2c]
jmp 0x42c84e
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, dword [ebp + 0xc]
test eax, eax
jne 0x42c86f
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.00410dc3
pop ecx
pop ecx
push dword [ebp + 0xc]
mov byte [ebp - 0x1a], 1
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x42c875
and dword [ebp - 8], 0
jmp 0x42c88d
cmp byte [ebp - 0x1b], 0
je 0x42c884
and dword [ebp - 8], 0
jmp 0x42dd4c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 8], eax
cmp byte [ebp - 0x1a], 1
je 0x42dd4c
mov esi, dword [ebp - 8]
jmp 0x42de4c
push edx
lea eax, [ebp - 0x10]
push eax
call fcn.00410dc3
cmp dword [ebp - 0x20], 0
pop ecx
pop ecx
jne 0x42cd09
cmp byte [ebp - 0xb], 0
mov edi, dword [ebp - 0x38]
jne 0x42c8f3
xor esi, esi
cmp dword [ebp - 0x2c], esi
jne 0x42c8f5
cmp byte [ebp - 9], 0
jne 0x42c8f5
cmp edi, esi
je 0x42c8ed
cmp word [edi], 0x2e
jne 0x42cb5e
cmp word [edi + 2], si
jne 0x42cb5e
mov eax, dword [0x4c8c2c]
mov dword [ebp - 0x2c], eax
jmp 0x42c8fd
mov byte [ebp - 9], 2
jmp 0x42c8f5
xor esi, esi
cmp edi, esi
je 0x42cbd2
cmp dword [ebp - 0x2c], esi
jne 0x42cbe6
cmp byte [ebp - 0xb], 0
je 0x42cb5e
xor edx, edx
cmp dword [ebp - 0x28], edx
mov dword [ebp - 0x238], edx
mov dword [ebp - 0x234], edx
mov dword [ebp - 0x230], edx
mov bx, word [edi]
mov esi, edi
jne 0x42c947
cmp bx, 0x23
jne 0x42c947
xor eax, eax
mov ax, word [edi + 2]
push eax
call fcn.0043f865
add esp, 4
test al, al
jne 0x42c991
cmp bx, 0x2a
jne 0x42c954
inc edi
inc edi
mov dword [ebp - 0x38], edi
mov esi, edi
cmp word [edi], 0x22
mov dword [ebp - 0x28], edx
jne 0x42c985
inc edi
inc edi
push 0x22
lea eax, [ebp + 0x14]
mov dword [ebp - 0x38], edi
mov dword [ebp + 0x14], edi
call fcn.0043f8e8
mov esi, dword [ebp + 0x14]
cmp word [esi], 0
pop ecx
je 0x42c985
and word [esi], 0
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x28], esi
inc esi
inc esi
cmp bx, 0x2a
jne 0x42ca44
xor edx, edx
mov eax, dword [0x4c8f04]
xor ebx, ebx
jmp 0x42c9a2
cmp cx, 0x23
je 0x42c9aa
inc esi
inc esi
mov cx, word [esi]
cmp cx, dx
jne 0x42c99a
cmp word [esi], dx
mov edi, esi
je 0x42c9ce
mov cx, word [edi]
cmp cx, 0x7c
je 0x42c9c9
cmp cx, 0x3a
je 0x42c9c9
inc edi
inc edi
cmp word [edi], dx
jne 0x42c9b1
jmp 0x42c9ce
mov word [edi], dx
inc edi
inc edi
cmp word [edi], dx
jne 0x42c9d8
mov edi, str.EXEDATA
cmp word [esi], 0x23
jne 0x42ca53
mov ecx, dword [ebp - 0x28]
cmp ecx, edx
mov word [esi], dx
je 0x42c9eb
mov word [ecx], dx
mov ecx, dword [ebp - 0x38]
cmp word [ecx], 0x2e
jne 0x42ca07
lea edx, [ecx + 2]
cmp word [edx], 0
jne 0x42ca07
mov eax, dword [0x4c8c2c]
mov ecx, edx
mov dword [ebp - 0x38], ecx
cmp word [ecx], 0
je 0x42ca1a
push 2
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ebx, eax
test eax, eax
mov word [esi], 0x23
je 0x42ca37
push 0
lea ecx, [ebp - 0x238]
push ecx
push edi
push esi
push eax
call fcn.00414150
add esp, 0x14
test ebx, ebx
je 0x42ca53
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x42ca53
lea eax, [ebp - 0x238]
push eax
push edi
call fcn.00413b31
pop ecx
pop ecx
mov edi, dword [ebp - 0x238]
test edi, edi
mov ebx, dword [ebp - 0x234]
jne 0x42ca89
xor eax, eax
cmp byte [ebp - 0xc], al
lea ecx, [ebp - 0x238]
sete al
mov byte [ebp - 0x11], 1
mov dword [ebp - 0x5c], 1
mov dword [ebp - 8], eax
call fcn.00439cfd
jmp 0x42cbd7
lea eax, [ebp - 0x70]
push 0x28
push eax
call fcn.0040fc85
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x42caa3
mov ecx, esi
call fcn.004137a8
add esi, 4
push ebx
push edi
mov ecx, esi
mov dword [ebp - 0x60], esi
call fcn.0041df56
test eax, eax
je 0x42cb3d
cmp byte [ebp - 0xc], 0
je 0x42cb18
mov ecx, dword [ebp - 0x18]
xor edi, edi
xor eax, eax
cmp ecx, edi
je 0x42cad0
cmp word [ecx], di
jne 0x42cad8
mov ecx, dword [ebp - 0x3c]
cmp word [ecx], di
je 0x42cada
mov eax, ecx
cmp eax, edi
mov dword [ebp - 8], esi
mov byte [ebp - 0xd], 1
je 0x42cb08
mov ecx, dword [ebp - 0x238]
mov dword [esi + 8], ecx
lea ecx, [ebp - 0x70]
push ecx
push eax
push esi
push dword [ebp + 8]
mov dword [ebp - 0x238], edi
call fcn.0042b697
add esp, 0x10
mov dword [ebp - 0x60], edi
lea ecx, [ebp - 0x238]
call fcn.00439cfd
jmp 0x42dd78
push dword [ebp - 0x34]
lea ecx, [ebp + 0x14]
call fcn.0040e99a
push dword [eax]
mov ecx, esi
call fcn.0040f65f
lea ecx, [ebp + 0x14]
mov dword [ebp - 0x20], eax
call fcn.00439cfd
cmp dword [ebp - 0x20], 0
jne 0x42cb53
xor eax, eax
cmp byte [ebp - 0xc], al
mov byte [ebp - 0x11], 1
sete al
mov dword [ebp - 0x5c], 1
mov dword [ebp - 8], eax
lea ecx, [ebp - 0x238]
jmp 0x42cd04
mov ax, word [edi]
and ax, 0xffdf
cmp ax, 0x4b
jne 0x42cb85
push 0x4b4238
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x42cb82
mov eax, dword [0x4c8f4c]
jmp 0x42cbc2
mov edi, dword [ebp - 0x38]
mov ax, word [edi]
and ax, 0xffdf
cmp ax, 0x55
jne 0x42cbac
push str.user32.DLL
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x42cba9
mov eax, dword [0x4c8f48]
jmp 0x42cbc2
mov edi, dword [ebp - 0x38]
test bl, bl
je 0x42cbb7
mov eax, dword [0x4c8c2c]
jmp 0x42cbc2
push edi
mov byte [ebp - 0xa], 1
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
cmp eax, esi
mov dword [ebp - 0x2c], eax
jne 0x42cbe6
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 8], eax
cmp dword [ebp - 0x2c], esi
jne 0x42cbe6
cmp byte [ebp - 0x12], 0
jne 0x42cd2e
jmp 0x42dd4c
push dword [ebp - 0x34]
lea ecx, [ebp - 0x28]
call fcn.0040e99a
test byte [ebp + 0x17], 2
push dword [ebp - 0x28]
je 0x42cc04
mov ecx, dword [ebp - 0x2c]
call fcn.0040f65f
jmp 0x42cc0d
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, esi
mov dword [ebp - 0x20], eax
jne 0x42cd01
cmp byte [ebp - 0x19], 0
je 0x42ccf8
cmp byte [ebp - 1], 0
jne 0x42ccf8
mov esi, dword [ebp - 0x34]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ebx, eax
xor eax, eax
lea edi, [ebx + ebx]
mov ax, word [edi + esi - 2]
and eax, 0xffdf
cmp ax, 0x41
je 0x42ccf8
cmp ax, 0x57
je 0x42ccf8
push 4
call fcn.0049aa28
mov esi, eax
test esi, esi
pop ecx
je 0x42cc76
lea eax, [ebx + 2]
push eax
mov ecx, esi
call fcn.0043fdb8
jmp 0x42cc78
xor esi, esi
push esi
lea ecx, [ebp - 0x250]
call fcn.0040ea70
push ebx
push dword [ebp - 0x34]
push dword [esi]
call fcn.0040542c
mov esi, dword [esi]
mov dword [ebp - 0x34], esi
add esi, edi
and word [esi + 2], 0
add esp, 0xc
cmp byte [ebp + 0x17], 2
mov word [esi], 0x57
push dword [ebp - 0x28]
jne 0x42ccb6
mov ecx, dword [ebp - 0x2c]
call fcn.0040f65f
jmp 0x42ccbf
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
mov dword [ebp - 0x20], eax
jne 0x42cd01
push dword [ebp - 0x34]
lea ecx, [ebp + 0x14]
mov word [esi], 0x41
call fcn.0040e99a
push dword [eax]
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [ebp + 0x14]
mov dword [ebp - 0x20], eax
call fcn.00439cfd
cmp dword [ebp - 0x20], 0
je 0x42ccf8
mov byte [ebp - 1], 0x40
jmp 0x42cd01
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 8], eax
lea ecx, [ebp - 0x28]
call fcn.00439cfd
cmp byte [ebp - 0x12], 0
je 0x42cd75
cmp byte [ebp - 0xa], 1
jne 0x42cd2e
cmp byte [ebp - 9], 0
jg 0x42cd2e
cmp dword [ebp - 0x2c], 0
je 0x42cd2e
push dword [ebp - 0x2c]
mov byte [ebp - 0xa], 2
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp byte [ebp - 0x1b], 0
je 0x42cd3c
mov esi, dword [ebp - 0x20]
jmp 0x42de4c
cmp dword [ebp - 0x20], 0
je 0x42cd5a
push dword [ebp - 0x20]
lea eax, [ebp - 0x2c8]
push str.0x_p
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x2c8]
push eax
push dword [ebp - 0x3c]
call fcn.0043f62b
cmp byte [ebp - 0xa], 2
jmp 0x42c891
mov ebx, dword [ebp - 0x20]
xor esi, esi
cmp ebx, esi
mov byte [ebp + 0x17], 0
mov edi, 0x4c9c14
je case.default.0x42d771
test byte [ebp - 0x40], 7
je 0x42cde0
call fcn.0043ec94
cmp dword [ebp - 0x40], esi
je 0x42cde0
cmp dword [0x4c93d0], esi
je 0x42cde0
cmp dword [0x4c93d4], esi
je 0x42cde0
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov esi, dword [ebp + 8]
mov al, byte [esi + 0xe]
test al, 2
jne 0x42cdd7
test al, 1
jne 0x42cdc4
mov byte [ebp + 0x17], 1
or byte [ebp + 0x17], 2
or al, 3
push 0
mov byte [esi + 0xe], al
call dword [0x4c93d0]
jmp 0x42cdde
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor esi, esi
cmp byte [ebp - 0x11], 0
je 0x42cded
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp byte [ebp - 0x19], 0
je 0x42cea4
cmp byte [ebp - 1], 0x40
mov dword [ebp - 0x48], esi
mov byte [ebp - 0xd], 1
mov word [ebp + 0x12], si
jne 0x42ce22
cmp dword [ebp - 0x18], esi
je 0x42ce27
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x48]
call fcn.0043fd22
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jne 0x42ce2d
lea eax, [ebp + 0x12]
mov dword [ebp - 0x18], eax
mov esi, dword [0x4c8f04]
push 0
push dword [ebp + 8]
call fcn.004117b3
cmp dword [ebp - 0x34], 0
pop ecx
pop ecx
push 5
pop edi
je 0x42ce79
push 0x12
push dword [ebp - 0x34]
push str.InstallHinfSection
call fcn.0043af58
add esp, 0xc
test al, al
je 0x42ce79
mov eax, dword [ebp - 0x34]
cmp word [eax + 0x24], 0
je 0x42ce75
cmp word [eax + 0x26], 0
mov word [eax + 0x24], 1
jne 0x42ce79
xor edi, edi
xor esi, esi
mov eax, dword [ebp + 8]
push edi
push dword [ebp - 0x18]
push esi
push dword [eax + 0x28]
call fcn.0043a1e8
pop ecx
push eax
call ebx
lea ecx, [ebp - 0x48]
mov dword [ebp - 8], eax
call fcn.00439cfd
mov edi, 0x4c9c14
xor esi, esi
jmp case.default.0x42d771
cmp dword [ebp + 0x10], 1
mov ecx, dword [ebp - 0x48]
jne 0x42d75c
push 0x64
pop eax
cmp eax, ecx
sbb al, al
inc al
cmp ecx, 0x10
mov byte [ebp - 0xd], al
ja case.default.0x42cec6
jmp dword [ecx*4 + 0x42deea]
push dword [ebp - 0x22c]
call ebx
jmp 0x42cee6
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
pop ecx
pop ecx
jmp 0x42dcef
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
add esp, 0xc
jmp 0x42dcef
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
add esp, 0x10
jmp 0x42dcef
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
add esp, 0x14
jmp 0x42dcef
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
add esp, 0x18
jmp 0x42dcef
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
add esp, 0x1c
jmp 0x42dcef
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
add esp, 0x20
jmp 0x42dcef
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
add esp, 0x24
jmp 0x42dcef
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
add esp, 0x28
jmp 0x42dcef
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
add esp, 0x2c
jmp 0x42dcef
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
add esp, 0x30
jmp 0x42dcef
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
add esp, 0x34
jmp 0x42dcef
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
add esp, 0x38
jmp 0x42dcef
push dword [ebp - 0x1f4]
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
add esp, 0x3c
jmp 0x42dcef
push dword [ebp - 0x1f0]
push dword [ebp - 0x1f4]
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
add esp, 0x40
jmp 0x42dcef
cmp ecx, 0x14
ja 0x42d321
push dword [ebp - 0x1e0]
push dword [ebp - 0x1e4]
push dword [ebp - 0x1e8]
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
push dword [ebp - 0x1f4]
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
add esp, 0x50
jmp 0x42dcef
cmp ecx, 0x1e
ja 0x42d3e8
push dword [ebp - 0x1b8]
push dword [ebp - 0x1bc]
push dword [ebp - 0x1c0]
push dword [ebp - 0x1c4]
push dword [ebp - 0x1c8]
push dword [ebp - 0x1cc]
push dword [ebp - 0x1d0]
push dword [ebp - 0x1d4]
push dword [ebp - 0x1d8]
push dword [ebp - 0x1dc]
push dword [ebp - 0x1e0]
push dword [ebp - 0x1e4]
push dword [ebp - 0x1e8]
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
push dword [ebp - 0x1f4]
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
add esp, 0x78
jmp 0x42dcef
cmp ecx, 0x28
ja 0x42d4ee
push dword [ebp - 0x190]
push dword [ebp - 0x194]
push dword [ebp - 0x198]
push dword [ebp - 0x19c]
push dword [ebp - 0x1a0]
push dword [ebp - 0x1a4]
push dword [ebp - 0x1a8]
push dword [ebp - 0x1ac]
push dword [ebp - 0x1b0]
push dword [ebp - 0x1b4]
push dword [ebp - 0x1b8]
push dword [ebp - 0x1bc]
push dword [ebp - 0x1c0]
push dword [ebp - 0x1c4]
push dword [ebp - 0x1c8]
push dword [ebp - 0x1cc]
push dword [ebp - 0x1d0]
push dword [ebp - 0x1d4]
push dword [ebp - 0x1d8]
push dword [ebp - 0x1dc]
push dword [ebp - 0x1e0]
push dword [ebp - 0x1e4]
push dword [ebp - 0x1e8]
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
push dword [ebp - 0x1f4]
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
add esp, 0xa0
jmp 0x42dcef
cmp ecx, 0x64
ja case.default.0x42d771
push dword [ebp - 0xa0]
push dword [ebp - 0xa4]
push dword [ebp - 0xa8]
push dword [ebp - 0xac]
push dword [ebp - 0xb0]
push dword [ebp - 0xb4]
push dword [ebp - 0xb8]
push dword [ebp - 0xbc]
push dword [ebp - 0xc0]
push dword [ebp - 0xc4]
push dword [ebp - 0xc8]
push dword [ebp - 0xcc]
push dword [ebp - 0xd0]
push dword [ebp - 0xd4]
push dword [ebp - 0xd8]
push dword [ebp - 0xdc]
push dword [ebp - 0xe0]
push dword [ebp - 0xe4]
push dword [ebp - 0xe8]
push dword [ebp - 0xec]
push dword [ebp - 0xf0]
push dword [ebp - 0xf4]
push dword [ebp - 0xf8]
push dword [ebp - 0xfc]
push dword [ebp - 0x100]
push dword [ebp - 0x104]
push dword [ebp - 0x108]
push dword [ebp - 0x10c]
push dword [ebp - 0x110]
push dword [ebp - 0x114]
push dword [ebp - 0x118]
push dword [ebp - 0x11c]
push dword [ebp - 0x120]
push dword [ebp - 0x124]
push dword [ebp - 0x128]
push dword [ebp - 0x12c]
push dword [ebp - 0x130]
push dword [ebp - 0x134]
push dword [ebp - 0x138]
push dword [ebp - 0x13c]
push dword [ebp - 0x140]
push dword [ebp - 0x144]
push dword [ebp - 0x148]
push dword [ebp - 0x14c]
push dword [ebp - 0x150]
push dword [ebp - 0x154]
push dword [ebp - 0x158]
push dword [ebp - 0x15c]
push dword [ebp - 0x160]
push dword [ebp - 0x164]
push dword [ebp - 0x168]
push dword [ebp - 0x16c]
push dword [ebp - 0x170]
push dword [ebp - 0x174]
push dword [ebp - 0x178]
push dword [ebp - 0x17c]
push dword [ebp - 0x180]
push dword [ebp - 0x184]
push dword [ebp - 0x188]
push dword [ebp - 0x18c]
push dword [ebp - 0x190]
push dword [ebp - 0x194]
push dword [ebp - 0x198]
push dword [ebp - 0x19c]
push dword [ebp - 0x1a0]
push dword [ebp - 0x1a4]
push dword [ebp - 0x1a8]
push dword [ebp - 0x1ac]
push dword [ebp - 0x1b0]
push dword [ebp - 0x1b4]
push dword [ebp - 0x1b8]
push dword [ebp - 0x1bc]
push dword [ebp - 0x1c0]
push dword [ebp - 0x1c4]
push dword [ebp - 0x1c8]
push dword [ebp - 0x1cc]
push dword [ebp - 0x1d0]
push dword [ebp - 0x1d4]
push dword [ebp - 0x1d8]
push dword [ebp - 0x1dc]
push dword [ebp - 0x1e0]
push dword [ebp - 0x1e4]
push dword [ebp - 0x1e8]
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
push dword [ebp - 0x1f4]
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
add esp, 0x190
jmp 0x42dcef
push 0x14
pop eax
cmp eax, ecx
sbb al, al
inc al
cmp ecx, 0x14
mov byte [ebp - 0xd], al
ja case.default.0x42d771
jmp dword [ecx*4 + 0x42df2e]
call ebx
jmp 0x42dcef
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x1f4]
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x1f0]
push dword [ebp - 0x1f4]
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
push dword [ebp - 0x1f4]
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x1e8]
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
push dword [ebp - 0x1f4]
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x1e4]
push dword [ebp - 0x1e8]
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
push dword [ebp - 0x1f4]
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
jmp 0x42dcef
push dword [ebp - 0x1e0]
push dword [ebp - 0x1e4]
push dword [ebp - 0x1e8]
push dword [ebp - 0x1ec]
push dword [ebp - 0x1f0]
push dword [ebp - 0x1f4]
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
push dword [ebp - 0x204]
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push dword [ebp - 0x214]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
call ebx
mov dword [ebp - 8], eax
cmp byte [ebp - 0x11], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x5c], eax
je 0x42dd16
cmp byte [ebp - 0x11], 2
jne 0x42dd0d
push eax
call fcn.0043492e
pop ecx
jmp 0x42dd13
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x5c], eax
cmp byte [ebp - 0xa], 0
jle 0x42dd30
cmp byte [ebp - 9], 0
jg 0x42dd30
cmp dword [ebp - 0x2c], esi
je 0x42dd30
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov bl, byte [ebp + 0x17]
test bl, bl
je 0x42dd4c
call dword [0x4c93d4]
mov eax, dword [ebp + 8]
not bl
and byte [eax + 0xe], bl
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [ebp - 0xe], 0
jg 0x42dd5b
push dword [ebp - 0x64]
call fcn.00410d81
pop ecx
mov eax, dword [ebp - 0x54]
or eax, dword [ebp - 0x50]
je 0x42dd69
cmp byte [ebp - 0xe], 0
jg 0x42dd6e
call fcn.00413b97
cmp byte [ebp - 0x12], 0
jne 0x42c897
mov eax, dword [ebp - 0x3c]
mov ax, word [eax]
xor edi, edi
cmp ax, di
je 0x42dde4
cmp ax, 0x2a
je 0x42dddb
cmp byte [ebp - 0xd], 0
je 0x42dddb
cmp byte [ebp - 0x2d], 0
mov esi, 0x4b4208
jne 0x42dda1
mov esi, 0x4b41f8
cmp byte [ebp - 0x41], 0
mov eax, dword [ebp - 8]
je 0x42ddad
cdq
jmp 0x42ddaf
xor edx, edx
cmp byte [ebp - 0xc], 0
je 0x42ddc7
cmp byte [ebp - 0xb], 0
je 0x42ddc7
cmp dword [ebp - 8], edi
jne 0x42ddc9
mov esi, 0x4ae9fc
jmp 0x42ddc9
inc esi
inc esi
push esi
push edx
push eax
lea eax, [ebp - 0x2c8]
push eax
call fcn.0048c9e0
add esp, 0x10
cmp byte [ebp - 0x11], 0
jne 0x42dde4
mov dword [ebp - 0x5c], edi
mov ecx, dword [ebp - 0x60]
cmp ecx, edi
je 0x42ddf0
call fcn.0040f618
mov eax, dword [ebp - 0x3c]
cmp word [eax], di
je 0x42de29
cmp word [eax], 0x2a
je 0x42de29
cmp dword [ebp - 0x68], edi
je 0x42de19
cmp dword [ebp - 8], edi
je 0x42de19
push eax
push dword [ebp - 8]
push dword [ebp + 8]
call fcn.0042b7ba
add esp, 0xc
jmp 0x42de29
lea ecx, [ebp - 0x2c8]
push ecx
mov ecx, dword [ebp + 8]
push eax
call fcn.0043f62b
mov esi, dword [ebp - 0x4c]
cmp esi, edi
jge 0x42de49
mov eax, dword [ebp + esi*4 - 0x7c4]
cmp eax, edi
je 0x42de46
lea ecx, [ebp + 8]
mov dword [ebp + 8], eax
call fcn.00439cfd
inc esi
js 0x42de30
mov esi, dword [ebp - 0x5c]
lea ecx, [ebp - 0x64]
call fcn.00439cfd
lea ecx, [ebp - 0x70]
call fcn.00439cfd
lea ecx, [ebp - 0x250]
call fcn.0041372c
lea ecx, [ebp - 0x250]
call fcn.00439cfd
lea ecx, [ebp - 0x244]
call fcn.00439cfd
lea ecx, [ebp - 0x3c]
call fcn.00439cfd
lea ecx, [ebp - 0x6c]
call fcn.00439cfd
mov eax, esi
jmp 0x42dee3
lea ecx, [ebp - 0x64]
call fcn.00439cfd
lea ecx, [ebp - 0x70]
call fcn.00439cfd
lea ecx, [ebp - 0x250]
call fcn.0041372c
lea ecx, [ebp - 0x250]
call fcn.00439cfd
lea ecx, [ebp - 0x244]
call fcn.00439cfd
lea ecx, [ebp - 0x3c]
call fcn.00439cfd
lea ecx, [ebp - 0x6c]
call fcn.00439cfd
mov al, byte [ebp - 0x1b]
neg al
sbb eax, eax
and eax, 0x7ff8ffa9
add eax, 0x80070057
pop edi
pop esi
pop ebx
leave
ret 0x10