Function at 0x42e720
Capabilities:
Get common file path
Query environment variable
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a7374
mov eax, dword fs:[0]
push eax
mov eax, 0xa230
call fcn.00583150
mov eax, dword [0x63ad78]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
call fcn.005036e0
push 0
mov ecx, dword [ebp - 0x14]
call fcn.00432350
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1b8], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1bc], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1a4], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x150], 1
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x154], 0
mov dword [0x63cd50], 0
mov ecx, dword [ebp - 0x14]
call fcn.00436d10
mov dword [0x63cd40], eax
mov dword [0x63cd44], edx
cmp dword [0x63cd40], 0
jne 0x42e7dc
cmp dword [0x63cd44], 0
jne 0x42e7dc
or eax, 0xffffffff
jmp 0x42fb12
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x188], 0
mov dword [eax + 0x18c], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x178], 0
push 0x5cdfa8
mov ecx, dword [ebp - 0x14]
add ecx, 0x290
call fcn.00411470
mov byte [ebp - 0x1014], 0
push 0xfff
push 0
lea eax, [ebp - 0x1013]
push eax
call fcn.00582ec0
add esp, 0xc
push 0
push 0x23
lea eax, [ebp - 0x1014]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
push str.ShengquGamesStartingShot
lea eax, [ebp - 0x1014]
push eax
call fcn.00583190
add esp, 8
lea eax, [ebp - 0x1014]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x23c
call fcn.00411470
push 0x5cdf88
mov ecx, dword [ebp - 0x14]
add ecx, 0x23c
call fcn.0040c050
push 0x5cdf78
mov ecx, dword [ebp - 0x14]
add ecx, 0x23c
call fcn.0040c050
mov ecx, dword [ebp - 0x14]
add ecx, 0x31c
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x23c
call fcn.0040c050
push 0
mov ecx, dword [ebp - 0x14]
add ecx, 0x23c
call fcn.00411660
push eax
call fcn.00584780
add esp, 8
cmp eax, 0xffffffff
jne 0x42e924
mov dword [ebp - 0x1018], 0
lea eax, [ebp - 0x1018]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x23c
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00436d80
mov dword [ebp - 0x101c], eax
cmp dword [ebp - 0x101c], 0
jne 0x42e924
cmp dword [ebp - 0x1018], 0
je 0x42e924
mov ecx, dword [ebp - 0x14]
add ecx, 0x23c
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00436e20
mov ecx, dword [ebp - 0x14]
add ecx, 0x23c
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x204
call fcn.00411470
push 0x5cdf88
mov ecx, dword [ebp - 0x14]
add ecx, 0x204
call fcn.0040c050
mov ecx, dword [ebp - 0x14]
add ecx, 0x31c
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x204
call fcn.0040c050
mov eax, dword [ebp - 0x14]
add eax, 0x204
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1e8
call fcn.0040c010
push str..ssconf
mov ecx, dword [ebp - 0x14]
add ecx, 0x204
call fcn.0040c050
mov ecx, dword [ebp - 0x14]
add ecx, 0x1e8
call fcn.00411660
push eax
mov eax, dword [0x64115c]
mov ecx, dword [eax]
mov edx, dword [0x64115c]
push edx
mov eax, dword [ecx + 4]
call eax
cmp dword [0x64115c], 0
je 0x42e9e2
push 0x22
push 0x22
push 0x5cdf38
mov eax, dword [0x64115c]
mov ecx, dword [eax]
mov edx, dword [0x64115c]
push edx
mov eax, dword [ecx + 8]
call eax
push str.dataupload.ssconf
mov ecx, dword [ebp - 0x14]
add ecx, 0x220
call fcn.00411470
push 0x60ec6e
lea ecx, [ebp - 0x1038]
call fcn.00410d30
mov dword [ebp - 4], 0
push 1
push str.DUCONF
mov ecx, dword [ebp - 0x14]
add ecx, 0x220
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x23c
call fcn.00411660
push eax
push 0xb5
mov ecx, dword [ebp - 0x14]
call fcn.00437b90
mov dword [ebp - 0x103c], eax
cmp dword [ebp - 0x103c], 0
jne 0x42eaef
mov eax, dword [ebp - 0x14]
add eax, 0x220
push eax
push 0x5cdf88
mov ecx, dword [ebp - 0x14]
add ecx, 0x23c
push ecx
lea edx, [ebp - 0xa22c]
push edx
call fcn.0042c360
add esp, 0xc
mov dword [ebp - 0xa230], eax
mov eax, dword [ebp - 0xa230]
mov dword [ebp - 0xa234], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xa234]
push ecx
lea edx, [ebp - 0xa210]
push edx
call fcn.00439490
add esp, 0xc
mov dword [ebp - 0xa238], eax
mov eax, dword [ebp - 0xa238]
mov dword [ebp - 0xa23c], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0xa23c]
push ecx
lea ecx, [ebp - 0x1038]
call fcn.0040c010
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa210]
call fcn.004115f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa22c]
call fcn.004115f0
jmp 0x42ebe5
cmp dword [ebp - 0x103c], 1
jne 0x42eb88
mov byte [ebp - 0x203c], 0
push 0xfff
push 0
lea eax, [ebp - 0x203b]
push eax
call fcn.00582ec0
add esp, 0xc
push 0x1000
lea eax, [ebp - 0x203c]
push eax
push str._temp_
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov eax, dword [ebp - 0x14]
add eax, 0x220
push eax
lea ecx, [ebp - 0x203c]
push ecx
lea edx, [ebp - 0xa1f4]
push edx
call fcn.0042c720
add esp, 0xc
mov dword [ebp - 0xa230], eax
mov eax, dword [ebp - 0xa230]
mov dword [ebp - 0xa234], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xa234]
push ecx
lea ecx, [ebp - 0x1038]
call fcn.0040c010
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa1f4]
call fcn.004115f0
jmp 0x42ebe5
cmp dword [0x64115c], 0
je 0x42ebad
push 0x22
push 0x22
push str.SSconf
mov eax, dword [0x64115c]
mov ecx, dword [eax]
mov edx, dword [0x64115c]
push edx
mov eax, dword [ecx + 8]
call eax
push 0
push str.SSconf
push str.11400190
call fcn.00505040
mov dword [ebp - 0xa1d8], 0xfffffffe
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.004115f0
mov eax, dword [ebp - 0xa1d8]
jmp 0x42fb12
push 0x60ec6e
lea ecx, [ebp - 0x2058]
call fcn.00410d30
mov byte [ebp - 4], 4
lea eax, [ebp - 0xa1d4]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004379c0
mov dword [ebp - 0xa230], eax
mov ecx, dword [ebp - 0xa230]
mov dword [ebp - 0xa234], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xa234]
push edx
lea ecx, [ebp - 0x2058]
call fcn.0040c010
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa1d4]
call fcn.004115f0
lea ecx, [ebp - 0x2058]
call fcn.00410f10
test eax, eax
jne 0x42ec69
push str.1.0.3
lea ecx, [ebp - 0x2074]
call fcn.00410d30
lea ecx, [ebp - 0x2074]
call fcn.004115f0
push 0x6144d4
push str.v202
lea ecx, [ebp - 0x2058]
call fcn.00411660
push eax
push 0x5cdee0
lea ecx, [ebp - 0x1038]
call fcn.00411660
push eax
call fcn.005046f0
mov ecx, dword [ebp - 0x14]
call fcn.0042d340
push eax
call fcn.00507940
mov dword [ebp - 0x2078], 0
jmp 0x42ecbe
mov eax, dword [ebp - 0x2078]
add eax, 1
mov dword [ebp - 0x2078], eax
cmp dword [ebp - 0x2078], 8
jge 0x42ed03
mov eax, dword [ebp - 0x2078]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + eax*4 + 0x610], 0
push 0x3018
push 0
mov eax, dword [ebp - 0x2078]
imul eax, eax, 0x3018
mov ecx, dword [ebp - 0x14]
lea edx, [ecx + eax + 0x630]
push edx
call fcn.00582ec0
add esp, 0xc
jmp 0x42ecaf
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x168], 0
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x164], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x160], 0
cmp dword [0x64115c], 0
je 0x42ed58
push 0x22
push 0x22
push 0x5cdecc
mov eax, dword [0x64115c]
mov ecx, dword [eax]
mov edx, dword [0x64115c]
push edx
mov eax, dword [ecx + 8]
call eax
mov byte [ebp - 0x3078], 0
push 0xfff
push 0
lea eax, [ebp - 0x3077]
push eax
call fcn.00582ec0
add esp, 0xc
lea eax, [ebp - 0x3078]
push eax
push 0x1000
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x3078]
push eax
lea ecx, [ebp - 0x3094]
call fcn.00410d30
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3094]
call fcn.00410f10
push eax
lea ecx, [ebp - 0x3094]
call fcn.00410f10
sub eax, 1
push eax
lea eax, [ebp - 0x30b0]
push eax
lea ecx, [ebp - 0x3094]
call fcn.0040c120
mov byte [ebp - 4], 7
lea eax, [ebp - 0x30b0]
push eax
push 0x5cdf88
call fcn.0040fab0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42edf9
push 0x5cdf88
lea ecx, [ebp - 0x3094]
call fcn.0040c050
push str.StartingShotTaskLink.ini
lea ecx, [ebp - 0x3094]
call fcn.0040c050
lea ecx, [ebp - 0x3094]
call fcn.00411660
push eax
push 0
push str.StartingShotTaskLink
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x198], eax
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x198], 0xa
jb 0x42ee4b
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x198], 0xc8
jbe 0x42ee53
mov ecx, dword [ebp - 0x14]
call fcn.0042fc00
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x198]
mov dword [0x62a1fc], ecx
mov ecx, dword [ebp - 0x14]
call fcn.0042fc20
mov byte [ebp - 0x40b0], 0
push 0xfff
push 0
lea eax, [ebp - 0x40af]
push eax
call fcn.00582ec0
add esp, 0xc
mov byte [ebp - 0x40b8], 0
xor eax, eax
mov dword [ebp - 0x40b7], eax
mov word [ebp - 0x40b3], ax
mov byte [ebp - 0x40b1], al
mov dword [ebp - 0x40bc], 0
push 0
mov ecx, dword [ebp - 0x14]
add ecx, 0x204
call fcn.00411660
push eax
call fcn.00584780
add esp, 8
cmp eax, 0xffffffff
jne 0x42efbb
mov dword [ebp - 0x40c0], 0xffffffff
mov dword [ebp - 0x40c4], 0
lea eax, [ebp - 0x40c4]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x23c
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00436d80
mov dword [ebp - 0x40c8], eax
cmp dword [ebp - 0x40c8], 0
jne 0x42ef36
cmp dword [ebp - 0x40c4], 0
je 0x42ef36
mov ecx, dword [ebp - 0x14]
add ecx, 0x23c
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00436e20
mov dword [ebp - 0x40c0], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x17c], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x180], 0
mov ecx, dword [ebp - 0x14]
call fcn.0042fbd0
mov ecx, dword [ebp - 0x14]
call fcn.0042fc40
mov ecx, dword [ebp - 0x14]
call fcn.00430ea0
mov ecx, dword [ebp - 0x14]
call fcn.00430ed0
mov dword [ebp - 0x40cc], 0
jmp 0x42ef8b
mov eax, dword [ebp - 0x40cc]
add eax, 1
mov dword [ebp - 0x40cc], eax
cmp dword [ebp - 0x40cc], 8
jge 0x42efa5
mov eax, dword [ebp - 0x40cc]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00431000
jmp 0x42ef7c
mov eax, dword [ebp - 0x40bc]
or eax, 0xf0
mov dword [ebp - 0x40bc], eax
jmp 0x42f854
mov byte [ebp - 0x50cc], 0
push 0xfff
push 0
lea eax, [ebp - 0x50cb]
push eax
call fcn.00582ec0
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x204
call fcn.00411660
push eax
push 0x1000
lea eax, [ebp - 0x50cc]
push eax
push 0x60ec6e
push str.StartingShotTaskCreateTime
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x50cc]
push eax
call fcn.00582530
add esp, 4
test eax, eax
jne 0x42f02c
mov eax, dword [ebp - 0x40bc]
or eax, 0x80
mov dword [ebp - 0x40bc], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x204
call fcn.00411660
push eax
push 0
push str.StartingShotTaskLastSizeHigh
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x17c], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x204
call fcn.00411660
push eax
push 0
push str.StartingShotTaskLastSizeLow
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x180], eax
mov byte [ebp - 0x60cc], 0
push 0xfff
push 0
lea eax, [ebp - 0x60cb]
push eax
call fcn.00582ec0
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x204
call fcn.00411660
push eax
push 0x1000
lea eax, [ebp - 0x60cc]
push eax
push 0x60ec6e
push str.StartingShotTaskHash
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x60cc]
push eax
call fcn.00582530
add esp, 4
test eax, eax
je 0x42f0f7
lea eax, [ebp - 0x60cc]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2e4
call fcn.00411470
jmp 0x42f10e
mov ecx, dword [ebp - 0x14]
call fcn.0042fbd0
mov eax, dword [ebp - 0x40bc]
or eax, 0x10
mov dword [ebp - 0x40bc], eax
mov byte [ebp - 0x70cc], 0
push 0xfff
push 0
lea eax, [ebp - 0x70cb]
push eax
call fcn.00582ec0
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x204
call fcn.00411660
push eax
push 0x1000
lea eax, [ebp - 0x70cc]
push eax
push 0x60ec6e
push str.StartingShotTaskSavePath
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x70cc]
push eax
call fcn.00582530
add esp, 4
test eax, eax
je 0x42f185
lea eax, [ebp - 0x70cc]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x274
call fcn.00411470
jmp 0x42f19c
mov ecx, dword [ebp - 0x14]
call fcn.0042fc40
mov eax, dword [ebp - 0x40bc]
or eax, 0x20
mov dword [ebp - 0x40bc], eax
mov ecx, dword [ebp - 0x14]
call fcn.0042fb30
mov dword [ebp - 0x70d0], eax
mov byte [ebp - 0x70d1], 1
mov byte [ebp - 0x70d2], 0
cmp dword [ebp - 0x70d0], 0
je 0x42f37f
mov dword [ebp - 0x70d8], 0
jmp 0x42f1e0
mov eax, dword [ebp - 0x70d8]
add eax, 1
mov dword [ebp - 0x70d8], eax
cmp dword [ebp - 0x70d8], 8
jge 0x42f37a
mov eax, dword [ebp - 0x14]
add eax, 0x274
push eax
lea ecx, [ebp - 0x70f4]
call fcn.00410d70
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x14]
add ecx, 0x274
call fcn.00410f10
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x274
call fcn.00410f10
sub eax, 1
push eax
lea eax, [ebp - 0x7110]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x274
call fcn.0040c120
mov byte [ebp - 4], 9
lea eax, [ebp - 0x7110]
push eax
push 0x5cdf88
call fcn.0040fab0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42f26a
push 0x5cdf88
lea ecx, [ebp - 0x70f4]
call fcn.0040c050
mov eax, dword [ebp - 0x70d8]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0x514]
call fcn.00411660
push eax
lea ecx, [ebp - 0x70f4]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x70f4]
call fcn.00411660
push eax
call fcn.00584780
add esp, 8
test eax, eax
je 0x42f357
push 0x60ec6e
call fcn.00582530
add esp, 4
test eax, eax
je 0x42f342
mov ecx, dword [ebp - 0x14]
add ecx, 0x300
call fcn.00411660
push eax
mov eax, dword [ebp - 0x70d8]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0x514]
call fcn.00411660
push eax
call fcn.005832b0
add esp, 8
test eax, eax
jne 0x42f342
push 0x60ec6e
lea ecx, [ebp - 0x70f4]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x70f4]
call fcn.00411660
push eax
call fcn.00584780
add esp, 8
test eax, eax
jne 0x42f342
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x7110]
call fcn.004115f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x70f4]
call fcn.004115f0
jmp 0x42f1d1
mov byte [ebp - 0x70d1], 0
mov eax, dword [ebp - 0x70d8]
mov byte [ebp + eax - 0x40b8], 1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x7110]
call fcn.004115f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x70f4]
call fcn.004115f0
jmp 0x42f1d1
jmp 0x42f59e
mov byte [ebp - 0x70d1], 0
mov byte [ebp - 0x7111], 0
mov dword [ebp - 0x7118], 0
mov dword [ebp - 0x7118], 0
jmp 0x42f3b2
mov eax, dword [ebp - 0x7118]
add eax, 1
mov dword [ebp - 0x7118], eax
cmp dword [ebp - 0x7118], 8
jge 0x42f58c
mov ecx, dword [ebp - 0x14]
add ecx, 0x274
call fcn.00411660
push eax
lea ecx, [ebp - 0x7134]
call fcn.00410d30
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x14]
add ecx, 0x274
call fcn.00410f10
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x274
call fcn.00410f10
sub eax, 1
push eax
lea eax, [ebp - 0x7150]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x274
call fcn.0040c120
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x7150]
push eax
push 0x5cdf88
call fcn.0040fab0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42f442
push 0x5cdf88
lea ecx, [ebp - 0x7134]
call fcn.0040c050
mov eax, dword [ebp - 0x7118]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0x514]
call fcn.00411660
push eax
lea ecx, [ebp - 0x7134]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x7134]
call fcn.00411660
push eax
call fcn.00584780
add esp, 8
test eax, eax
je 0x42f562
push 0x60ec6e
call fcn.00582530
add esp, 4
test eax, eax
je 0x42f521
mov ecx, dword [ebp - 0x14]
add ecx, 0x300
call fcn.00411660
push eax
mov eax, dword [ebp - 0x7118]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0x514]
call fcn.00411660
push eax
call fcn.005832b0
add esp, 8
test eax, eax
jne 0x42f521
push 0x60ec6e
lea ecx, [ebp - 0x7134]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x7134]
call fcn.00411660
push eax
call fcn.00584780
add esp, 8
test eax, eax
jne 0x42f521
mov byte [ebp - 0x70d2], 1
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x7150]
call fcn.004115f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x7134]
call fcn.004115f0
jmp 0x42f3a3
mov byte [ebp - 0x7111], 1
push 0x5cddf0
lea ecx, [ebp - 0x7134]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x7134]
call fcn.00411660
push eax
call fcn.00584780
add esp, 8
test eax, eax
je 0x42f560
mov eax, dword [ebp - 0x7118]
mov byte [ebp + eax - 0x40b8], 1
jmp 0x42f569
mov byte [ebp - 0x70d2], 1
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x7150]
call fcn.004115f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x7134]
call fcn.004115f0
jmp 0x42f3a3
movzx eax, byte [ebp - 0x7111]
test eax, eax
jne 0x42f59e
mov byte [ebp - 0x70d1], 1
movzx eax, byte [ebp - 0x70d1]
test eax, eax
jne 0x42f5b4
movzx eax, byte [ebp - 0x70d2]
test eax, eax
je 0x42f5ea
mov ecx, dword [ebp - 0x14]
call fcn.00434970
movzx eax, al
test eax, eax
je 0x42f5d6
mov eax, dword [ebp - 0x40bc]
or eax, 0xf0000
mov dword [ebp - 0x40bc], eax
jmp 0x42f5e5
mov eax, dword [ebp - 0x40bc]
or eax, 8
mov dword [ebp - 0x40bc], eax
jmp 0x42f681
mov dword [ebp - 0x7154], 0
mov byte [ebp - 0x7155], 1
jmp 0x42f60c
mov eax, dword [ebp - 0x7154]
add eax, 1
mov dword [ebp - 0x7154], eax
cmp dword [ebp - 0x7154], 8
jge 0x42f656
movzx eax, byte [ebp - 0x7155]
test eax, eax
je 0x42f63e
mov ecx, dword [ebp - 0x7154]
movzx edx, byte [ebp + ecx - 0x40b8]
test edx, edx
je 0x42f63e
mov dword [ebp - 0xa230], 1
jmp 0x42f648
mov dword [ebp - 0xa230], 0
mov al, byte [ebp - 0xa230]
mov byte [ebp - 0x7155], al
jmp 0x42f5fd
movzx eax, byte [ebp - 0x7155]
test eax, eax
je 0x42f672
mov eax, dword [ebp - 0x40bc]
or eax, 4
mov dword [ebp - 0x40bc], eax
jmp 0x42f681
mov eax, dword [ebp - 0x40bc]
or eax, 1
mov dword [ebp - 0x40bc], eax
mov byte [ebp - 0x8158], 0
push 0xfff
push 0
lea eax, [ebp - 0x8157]
push eax
call fcn.00582ec0
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x204
call fcn.00411660
push eax
push 0x1000
lea eax, [ebp - 0x8158]
push eax
push 0x60ec6e
push str.StartingShotTaskEntrence
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x8158]
push eax
call fcn.00582530
add esp, 4
test eax, eax
je 0x42f6f8
lea eax, [ebp - 0x8158]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2c8
call fcn.00411470
jmp 0x42f70f
mov ecx, dword [ebp - 0x14]
call fcn.00430ea0
mov eax, dword [ebp - 0x40bc]
or eax, 0x40
mov dword [ebp - 0x40bc], eax
mov dword [ebp - 0x815c], 0
jmp 0x42f72a
mov eax, dword [ebp - 0x815c]
add eax, 1
mov dword [ebp - 0x815c], eax
cmp dword [ebp - 0x815c], 8
jge 0x42f80e
mov byte [ebp - 0x915c], 0
push 0xfff
push 0
lea eax, [ebp - 0x915b]
push eax
call fcn.00582ec0
add esp, 0xc
mov byte [ebp - 0xa15c], 0
push 0xfff
push 0
lea eax, [ebp - 0xa15b]
push eax
call fcn.00582ec0
add esp, 0xc
mov eax, dword [ebp - 0x815c]
push eax
push str.StartingShotDownloadInfo_d
lea ecx, [ebp - 0xa15c]
push ecx
call fcn.0058307d
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x204
call fcn.00411660
push eax
push 0x1000
lea eax, [ebp - 0x915c]
push eax
push 0x60ec6e
lea ecx, [ebp - 0xa15c]
push ecx
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x915c]
push eax
call fcn.00582530
add esp, 4
test eax, eax
je 0x42f7f2
lea eax, [ebp - 0x915c]
push eax
mov ecx, dword [ebp - 0x815c]
imul ecx, ecx, 0x1c
mov edx, dword [ebp - 0x14]
lea ecx, [edx + ecx + 0x354]
call fcn.00411470
jmp 0x42f809
mov ecx, dword [ebp - 0x14]
call fcn.00430ed0
mov eax, dword [ebp - 0x815c]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00431000
jmp 0x42f71b
mov ecx, dword [ebp - 0x14]
add ecx, 0x2e4
call fcn.00410f10
test eax, eax
jne 0x42f854
cmp dword [0x64115c], 0
je 0x42f845
push 0x22
push 0x22
push 0x5cdd9c
mov eax, dword [0x64115c]
mov ecx, dword [eax]
mov edx, dword [0x64115c]
push edx
mov eax, dword [ecx + 8]
call eax
mov eax, dword [ebp - 0x40bc]
or eax, 2
mov dword [ebp - 0x40bc], eax
mov eax, dword [ebp - 0x40bc]
and eax, 0xf0
mov dword [ebp - 0xa160], eax
mov eax, dword [ebp - 0x40bc]
and eax, 4
mov dword [ebp - 0xa164], eax
mov eax, dword [ebp - 0x40bc]
and eax, 0xf0000
mov dword [ebp - 0xa168], eax
mov eax, dword [ebp - 0x40bc]
and eax, 8
mov dword [ebp - 0xa16c], eax
mov eax, dword [ebp - 0x40bc]
and eax, 1
mov dword [ebp - 0xa170], eax
cmp dword [ebp - 0xa160], 0xf0
jne 0x42f8be
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 1
jmp 0x42fa46
cmp dword [ebp - 0xa164], 4
jne 0x42f932
cmp dword [0x64115c], 0
je 0x42f8ec
push 0x22
push 0x22
push 0x5cdd7c
mov eax, dword [0x64115c]
mov ecx, dword [eax]
mov edx, dword [0x64115c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x204
call fcn.00411660
push eax
call fcn.00583278
add esp, 4
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 1
push 0
push 0x5cdd6c
push 0x5cdd48
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x14]
push ecx
call fcn.00504650
mov ecx, dword [ebp - 0x14]
call fcn.0042fc40
jmp 0x42fa46
cmp dword [ebp - 0xa168], 0xf0000
jne 0x42f996
cmp dword [0x64115c], 0
je 0x42f963
push 0x22
push 0x22
push 0x5cdd30
mov eax, dword [0x64115c]
mov ecx, dword [eax]
mov edx, dword [0x64115c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x274
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0042e510
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 8
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x150], 1
jmp 0x42fa46
cmp dword [ebp - 0xa16c], 8
jne 0x42f9ef
cmp dword [0x64115c], 0
je 0x42f9c4
push 0x22
push 0x22
push 0x5cdd20
mov eax, dword [0x64115c]
mov ecx, dword [eax]
mov edx, dword [0x64115c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x274
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0042e510
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x10
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x42fa46
cmp dword [ebp - 0xa170], 1
jne 0x42fa46
cmp dword [0x64115c], 0
je 0x42fa1d
push 0x22
push 0x22
push 0x5cdd00
mov eax, dword [0x64115c]
mov ecx, dword [eax]
mov edx, dword [0x64115c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x274
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0042e510
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0xf
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0xf
je 0x42fa6a
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0x10
je 0x42fa6a
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 8
je 0x42fa6a
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 9
jne 0x42fac3
mov ecx, dword [ebp - 0x14]
call fcn.004340f0
mov dword [ebp - 0xa1b8], 1
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x30b0]
call fcn.004115f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3094]
call fcn.004115f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2058]
call fcn.004115f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.004115f0
mov eax, dword [ebp - 0xa1b8]
jmp 0x42fb12
mov dword [ebp - 0xa1b4], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x30b0]
call fcn.004115f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3094]
call fcn.004115f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2058]
call fcn.004115f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.004115f0
mov eax, dword [ebp - 0xa1b4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005824ce
mov esp, ebp
pop ebp
ret