Function at 0x42e720
Capabilities:
Get common file path
Query environment variable
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a7374
mov eax, dword fs:[0]
push eax
mov eax, 0xa230
call fcn.00583150
mov eax, dword [0x636d78]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
call fcn.005036e0
push 0
mov ecx, dword [ebp - 0x14]
call fcn.00432350
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1b8], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1bc], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x1a4], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x150], 1
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x154], 0
mov dword [0x638d50], 0
mov ecx, dword [ebp - 0x14]
call fcn.00436d10
mov dword [0x638d40], eax
mov dword [0x638d44], edx
cmp dword [0x638d40], 0
jne 0x42e7dc
cmp dword [0x638d44], 0
jne 0x42e7dc
or eax, 0xffffffff
jmp 0x42fb0c
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x188], 0
mov dword [eax + 0x18c], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x178], 0
push 0x5cafa8
mov ecx, dword [ebp - 0x14]
add ecx, 0x28c
call fcn.00411470
mov byte [ebp - 0x1014], 0
push 0xfff
push 0
lea eax, [ebp - 0x1013]
push eax
call fcn.00582ec0
add esp, 0xc
push 0
push 0x23
lea eax, [ebp - 0x1014]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
push str.ShengquGamesStartingShot
lea eax, [ebp - 0x1014]
push eax
call fcn.00583190
add esp, 8
lea eax, [ebp - 0x1014]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.00411470
push 0x5caf88
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.0040c050
push 0x5caf78
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.0040c050
mov ecx, dword [ebp - 0x14]
add ecx, 0x318
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.0040c050
push 0
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.00411660
push eax
call fcn.00584780
add esp, 8
cmp eax, 0xffffffff
jne 0x42e924
mov dword [ebp - 0x1018], 0
lea eax, [ebp - 0x1018]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00436d80
mov dword [ebp - 0x101c], eax
cmp dword [ebp - 0x101c], 0
jne 0x42e924
cmp dword [ebp - 0x1018], 0
je 0x42e924
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00436e20
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411470
push 0x5caf88
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.0040c050
mov ecx, dword [ebp - 0x14]
add ecx, 0x318
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.0040c050
mov eax, dword [ebp - 0x14]
add eax, 0x200
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1e4
call fcn.0040c010
push str..ssconf
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.0040c050
mov ecx, dword [ebp - 0x14]
add ecx, 0x1e4
call fcn.00411660
push eax
mov eax, dword [0x63d14c]
mov ecx, dword [eax]
mov edx, dword [0x63d14c]
push edx
mov eax, dword [ecx + 4]
call eax
cmp dword [0x63d14c], 0
je 0x42e9e2
push 0x22
push 0x22
push 0x5caf38
mov eax, dword [0x63d14c]
mov ecx, dword [eax]
mov edx, dword [0x63d14c]
push edx
mov eax, dword [ecx + 8]
call eax
push str.dataupload.ssconf
mov ecx, dword [ebp - 0x14]
add ecx, 0x21c
call fcn.00411470
push 0x60ac7e
lea ecx, [ebp - 0x1038]
call fcn.00410d30
mov dword [ebp - 4], 0
push 1
push str.DUCONF
mov ecx, dword [ebp - 0x14]
add ecx, 0x21c
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.00411660
push eax
push 0xb5
mov ecx, dword [ebp - 0x14]
call fcn.00437b90
mov dword [ebp - 0x103c], eax
cmp dword [ebp - 0x103c], 0
jne 0x42eaef
mov eax, dword [ebp - 0x14]
add eax, 0x21c
push eax
push 0x5caf88
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
push ecx
lea edx, [ebp - 0xa22c]
push edx
call fcn.0042c360
add esp, 0xc
mov dword [ebp - 0xa230], eax
mov eax, dword [ebp - 0xa230]
mov dword [ebp - 0xa234], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xa234]
push ecx
lea edx, [ebp - 0xa210]
push edx
call fcn.00439490
add esp, 0xc
mov dword [ebp - 0xa238], eax
mov eax, dword [ebp - 0xa238]
mov dword [ebp - 0xa23c], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0xa23c]
push ecx
lea ecx, [ebp - 0x1038]
call fcn.0040c010
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa210]
call fcn.004115f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa22c]
call fcn.004115f0
jmp 0x42ebe5
cmp dword [ebp - 0x103c], 1
jne 0x42eb88
mov byte [ebp - 0x203c], 0
push 0xfff
push 0
lea eax, [ebp - 0x203b]
push eax
call fcn.00582ec0
add esp, 0xc
push 0x1000
lea eax, [ebp - 0x203c]
push eax
push str._temp_
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov eax, dword [ebp - 0x14]
add eax, 0x21c
push eax
lea ecx, [ebp - 0x203c]
push ecx
lea edx, [ebp - 0xa1f4]
push edx
call fcn.0042c720
add esp, 0xc
mov dword [ebp - 0xa230], eax
mov eax, dword [ebp - 0xa230]
mov dword [ebp - 0xa234], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xa234]
push ecx
lea ecx, [ebp - 0x1038]
call fcn.0040c010
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa1f4]
call fcn.004115f0
jmp 0x42ebe5
cmp dword [0x63d14c], 0
je 0x42ebad
push 0x22
push 0x22
push str.SSconf
mov eax, dword [0x63d14c]
mov ecx, dword [eax]
mov edx, dword [0x63d14c]
push edx
mov eax, dword [ecx + 8]
call eax
push 0
push str.SSconf
push str.11400190
call fcn.00505040
mov dword [ebp - 0xa1d8], 0xfffffffe
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.004115f0
mov eax, dword [ebp - 0xa1d8]
jmp 0x42fb0c
push 0x60ac7e
lea ecx, [ebp - 0x2058]
call fcn.00410d30
mov byte [ebp - 4], 4
lea eax, [ebp - 0xa1d4]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.004379c0
mov dword [ebp - 0xa230], eax
mov ecx, dword [ebp - 0xa230]
mov dword [ebp - 0xa234], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xa234]
push edx
lea ecx, [ebp - 0x2058]
call fcn.0040c010
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa1d4]
call fcn.004115f0
lea ecx, [ebp - 0x2058]
call fcn.00410f10
test eax, eax
jne 0x42ec69
push str.1.0.3
lea ecx, [ebp - 0x2074]
call fcn.00410d30
lea ecx, [ebp - 0x2074]
call fcn.004115f0
push 0x6104e4
push str.v1.0.4.59
lea ecx, [ebp - 0x2058]
call fcn.00411660
push eax
push str.991002361
lea ecx, [ebp - 0x1038]
call fcn.00411660
push eax
call fcn.005046f0
mov ecx, dword [ebp - 0x14]
call fcn.0042d340
push eax
call fcn.00507940
mov dword [ebp - 0x2078], 0
jmp 0x42ecbe
mov eax, dword [ebp - 0x2078]
add eax, 1
mov dword [ebp - 0x2078], eax
cmp dword [ebp - 0x2078], 7
jge 0x42ed03
mov eax, dword [ebp - 0x2078]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + eax*4 + 0x5b8], 0
push 0x3018
push 0
mov eax, dword [ebp - 0x2078]
imul eax, eax, 0x3018
mov ecx, dword [ebp - 0x14]
lea edx, [ecx + eax + 0x5d4]
push edx
call fcn.00582ec0
add esp, 0xc
jmp 0x42ecaf
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x168], 0
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x164], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x160], 0
cmp dword [0x63d14c], 0
je 0x42ed58
push 0x22
push 0x22
push 0x5caec0
mov eax, dword [0x63d14c]
mov ecx, dword [eax]
mov edx, dword [0x63d14c]
push edx
mov eax, dword [ecx + 8]
call eax
mov byte [ebp - 0x3078], 0
push 0xfff
push 0
lea eax, [ebp - 0x3077]
push eax
call fcn.00582ec0
add esp, 0xc
lea eax, [ebp - 0x3078]
push eax
push 0x1000
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x3078]
push eax
lea ecx, [ebp - 0x3094]
call fcn.00410d30
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3094]
call fcn.00410f10
push eax
lea ecx, [ebp - 0x3094]
call fcn.00410f10
sub eax, 1
push eax
lea eax, [ebp - 0x30b0]
push eax
lea ecx, [ebp - 0x3094]
call fcn.0040c120
mov byte [ebp - 4], 7
lea eax, [ebp - 0x30b0]
push eax
push 0x5caf88
call fcn.0040fab0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42edf9
push 0x5caf88
lea ecx, [ebp - 0x3094]
call fcn.0040c050
push str.StartingShotTaskLink.ini
lea ecx, [ebp - 0x3094]
call fcn.0040c050
lea ecx, [ebp - 0x3094]
call fcn.00411660
push eax
push 0
push str.StartingShotTaskLink
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x198], eax
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x198], 0xa
jb 0x42ee4b
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x198], 0xc8
jbe 0x42ee53
mov ecx, dword [ebp - 0x14]
call fcn.0042fc00
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x198]
mov dword [0x6261fc], ecx
mov ecx, dword [ebp - 0x14]
call fcn.0042fc20
mov byte [ebp - 0x40b0], 0
push 0xfff
push 0
lea eax, [ebp - 0x40af]
push eax
call fcn.00582ec0
add esp, 0xc
mov byte [ebp - 0x40b8], 0
xor eax, eax
mov dword [ebp - 0x40b7], eax
mov word [ebp - 0x40b3], ax
mov dword [ebp - 0x40bc], 0
push 0
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411660
push eax
call fcn.00584780
add esp, 8
cmp eax, 0xffffffff
jne 0x42efb5
mov dword [ebp - 0x40c0], 0xffffffff
mov dword [ebp - 0x40c4], 0
lea eax, [ebp - 0x40c4]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00436d80
mov dword [ebp - 0x40c8], eax
cmp dword [ebp - 0x40c8], 0
jne 0x42ef30
cmp dword [ebp - 0x40c4], 0
je 0x42ef30
mov ecx, dword [ebp - 0x14]
add ecx, 0x238
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00436e20
mov dword [ebp - 0x40c0], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x17c], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x180], 0
mov ecx, dword [ebp - 0x14]
call fcn.0042fbd0
mov ecx, dword [ebp - 0x14]
call fcn.0042fc40
mov ecx, dword [ebp - 0x14]
call fcn.00430ea0
mov ecx, dword [ebp - 0x14]
call fcn.00430ed0
mov dword [ebp - 0x40cc], 0
jmp 0x42ef85
mov eax, dword [ebp - 0x40cc]
add eax, 1
mov dword [ebp - 0x40cc], eax
cmp dword [ebp - 0x40cc], 7
jge 0x42ef9f
mov eax, dword [ebp - 0x40cc]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00431000
jmp 0x42ef76
mov eax, dword [ebp - 0x40bc]
or eax, 0xf0
mov dword [ebp - 0x40bc], eax
jmp 0x42f84e
mov byte [ebp - 0x50cc], 0
push 0xfff
push 0
lea eax, [ebp - 0x50cb]
push eax
call fcn.00582ec0
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411660
push eax
push 0x1000
lea eax, [ebp - 0x50cc]
push eax
push 0x60ac7e
push str.StartingShotTaskCreateTime
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x50cc]
push eax
call fcn.00582530
add esp, 4
test eax, eax
jne 0x42f026
mov eax, dword [ebp - 0x40bc]
or eax, 0x80
mov dword [ebp - 0x40bc], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411660
push eax
push 0
push str.StartingShotTaskLastSizeHigh
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x17c], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411660
push eax
push 0
push str.StartingShotTaskLastSizeLow
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x180], eax
mov byte [ebp - 0x60cc], 0
push 0xfff
push 0
lea eax, [ebp - 0x60cb]
push eax
call fcn.00582ec0
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411660
push eax
push 0x1000
lea eax, [ebp - 0x60cc]
push eax
push 0x60ac7e
push str.StartingShotTaskHash
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x60cc]
push eax
call fcn.00582530
add esp, 4
test eax, eax
je 0x42f0f1
lea eax, [ebp - 0x60cc]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2e0
call fcn.00411470
jmp 0x42f108
mov ecx, dword [ebp - 0x14]
call fcn.0042fbd0
mov eax, dword [ebp - 0x40bc]
or eax, 0x10
mov dword [ebp - 0x40bc], eax
mov byte [ebp - 0x70cc], 0
push 0xfff
push 0
lea eax, [ebp - 0x70cb]
push eax
call fcn.00582ec0
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411660
push eax
push 0x1000
lea eax, [ebp - 0x70cc]
push eax
push 0x60ac7e
push str.StartingShotTaskSavePath
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x70cc]
push eax
call fcn.00582530
add esp, 4
test eax, eax
je 0x42f17f
lea eax, [ebp - 0x70cc]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.00411470
jmp 0x42f196
mov ecx, dword [ebp - 0x14]
call fcn.0042fc40
mov eax, dword [ebp - 0x40bc]
or eax, 0x20
mov dword [ebp - 0x40bc], eax
mov ecx, dword [ebp - 0x14]
call fcn.0042fb30
mov dword [ebp - 0x70d0], eax
mov byte [ebp - 0x70d1], 1
mov byte [ebp - 0x70d2], 0
cmp dword [ebp - 0x70d0], 0
je 0x42f379
mov dword [ebp - 0x70d8], 0
jmp 0x42f1da
mov eax, dword [ebp - 0x70d8]
add eax, 1
mov dword [ebp - 0x70d8], eax
cmp dword [ebp - 0x70d8], 7
jge 0x42f374
mov eax, dword [ebp - 0x14]
add eax, 0x270
push eax
lea ecx, [ebp - 0x70f4]
call fcn.00410d70
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.00410f10
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.00410f10
sub eax, 1
push eax
lea eax, [ebp - 0x7110]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.0040c120
mov byte [ebp - 4], 9
lea eax, [ebp - 0x7110]
push eax
push 0x5caf88
call fcn.0040fab0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42f264
push 0x5caf88
lea ecx, [ebp - 0x70f4]
call fcn.0040c050
mov eax, dword [ebp - 0x70d8]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0x4d8]
call fcn.00411660
push eax
lea ecx, [ebp - 0x70f4]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x70f4]
call fcn.00411660
push eax
call fcn.00584780
add esp, 8
test eax, eax
je 0x42f351
push 0x60ac7e
call fcn.00582530
add esp, 4
test eax, eax
je 0x42f33c
mov ecx, dword [ebp - 0x14]
add ecx, 0x2fc
call fcn.00411660
push eax
mov eax, dword [ebp - 0x70d8]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0x4d8]
call fcn.00411660
push eax
call fcn.005832b0
add esp, 8
test eax, eax
jne 0x42f33c
push 0x60ac7e
lea ecx, [ebp - 0x70f4]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x70f4]
call fcn.00411660
push eax
call fcn.00584780
add esp, 8
test eax, eax
jne 0x42f33c
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x7110]
call fcn.004115f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x70f4]
call fcn.004115f0
jmp 0x42f1cb
mov byte [ebp - 0x70d1], 0
mov eax, dword [ebp - 0x70d8]
mov byte [ebp + eax - 0x40b8], 1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x7110]
call fcn.004115f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x70f4]
call fcn.004115f0
jmp 0x42f1cb
jmp 0x42f598
mov byte [ebp - 0x70d1], 0
mov byte [ebp - 0x7111], 0
mov dword [ebp - 0x7118], 0
mov dword [ebp - 0x7118], 0
jmp 0x42f3ac
mov eax, dword [ebp - 0x7118]
add eax, 1
mov dword [ebp - 0x7118], eax
cmp dword [ebp - 0x7118], 7
jge 0x42f586
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.00411660
push eax
lea ecx, [ebp - 0x7134]
call fcn.00410d30
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.00410f10
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.00410f10
sub eax, 1
push eax
lea eax, [ebp - 0x7150]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.0040c120
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x7150]
push eax
push 0x5caf88
call fcn.0040fab0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x42f43c
push 0x5caf88
lea ecx, [ebp - 0x7134]
call fcn.0040c050
mov eax, dword [ebp - 0x7118]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0x4d8]
call fcn.00411660
push eax
lea ecx, [ebp - 0x7134]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x7134]
call fcn.00411660
push eax
call fcn.00584780
add esp, 8
test eax, eax
je 0x42f55c
push 0x60ac7e
call fcn.00582530
add esp, 4
test eax, eax
je 0x42f51b
mov ecx, dword [ebp - 0x14]
add ecx, 0x2fc
call fcn.00411660
push eax
mov eax, dword [ebp - 0x7118]
imul eax, eax, 0x1c
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + eax + 0x4d8]
call fcn.00411660
push eax
call fcn.005832b0
add esp, 8
test eax, eax
jne 0x42f51b
push 0x60ac7e
lea ecx, [ebp - 0x7134]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x7134]
call fcn.00411660
push eax
call fcn.00584780
add esp, 8
test eax, eax
jne 0x42f51b
mov byte [ebp - 0x70d2], 1
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x7150]
call fcn.004115f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x7134]
call fcn.004115f0
jmp 0x42f39d
mov byte [ebp - 0x7111], 1
push 0x5cade4
lea ecx, [ebp - 0x7134]
call fcn.0040c050
push 0
lea ecx, [ebp - 0x7134]
call fcn.00411660
push eax
call fcn.00584780
add esp, 8
test eax, eax
je 0x42f55a
mov eax, dword [ebp - 0x7118]
mov byte [ebp + eax - 0x40b8], 1
jmp 0x42f563
mov byte [ebp - 0x70d2], 1
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x7150]
call fcn.004115f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x7134]
call fcn.004115f0
jmp 0x42f39d
movzx eax, byte [ebp - 0x7111]
test eax, eax
jne 0x42f598
mov byte [ebp - 0x70d1], 1
movzx eax, byte [ebp - 0x70d1]
test eax, eax
jne 0x42f5ae
movzx eax, byte [ebp - 0x70d2]
test eax, eax
je 0x42f5e4
mov ecx, dword [ebp - 0x14]
call fcn.00434970
movzx eax, al
test eax, eax
je 0x42f5d0
mov eax, dword [ebp - 0x40bc]
or eax, 0xf0000
mov dword [ebp - 0x40bc], eax
jmp 0x42f5df
mov eax, dword [ebp - 0x40bc]
or eax, 8
mov dword [ebp - 0x40bc], eax
jmp 0x42f67b
mov dword [ebp - 0x7154], 0
mov byte [ebp - 0x7155], 1
jmp 0x42f606
mov eax, dword [ebp - 0x7154]
add eax, 1
mov dword [ebp - 0x7154], eax
cmp dword [ebp - 0x7154], 7
jge 0x42f650
movzx eax, byte [ebp - 0x7155]
test eax, eax
je 0x42f638
mov ecx, dword [ebp - 0x7154]
movzx edx, byte [ebp + ecx - 0x40b8]
test edx, edx
je 0x42f638
mov dword [ebp - 0xa230], 1
jmp 0x42f642
mov dword [ebp - 0xa230], 0
mov al, byte [ebp - 0xa230]
mov byte [ebp - 0x7155], al
jmp 0x42f5f7
movzx eax, byte [ebp - 0x7155]
test eax, eax
je 0x42f66c
mov eax, dword [ebp - 0x40bc]
or eax, 4
mov dword [ebp - 0x40bc], eax
jmp 0x42f67b
mov eax, dword [ebp - 0x40bc]
or eax, 1
mov dword [ebp - 0x40bc], eax
mov byte [ebp - 0x8158], 0
push 0xfff
push 0
lea eax, [ebp - 0x8157]
push eax
call fcn.00582ec0
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411660
push eax
push 0x1000
lea eax, [ebp - 0x8158]
push eax
push 0x60ac7e
push str.StartingShotTaskEntrence
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x8158]
push eax
call fcn.00582530
add esp, 4
test eax, eax
je 0x42f6f2
lea eax, [ebp - 0x8158]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2c4
call fcn.00411470
jmp 0x42f709
mov ecx, dword [ebp - 0x14]
call fcn.00430ea0
mov eax, dword [ebp - 0x40bc]
or eax, 0x40
mov dword [ebp - 0x40bc], eax
mov dword [ebp - 0x815c], 0
jmp 0x42f724
mov eax, dword [ebp - 0x815c]
add eax, 1
mov dword [ebp - 0x815c], eax
cmp dword [ebp - 0x815c], 7
jge 0x42f808
mov byte [ebp - 0x915c], 0
push 0xfff
push 0
lea eax, [ebp - 0x915b]
push eax
call fcn.00582ec0
add esp, 0xc
mov byte [ebp - 0xa15c], 0
push 0xfff
push 0
lea eax, [ebp - 0xa15b]
push eax
call fcn.00582ec0
add esp, 0xc
mov eax, dword [ebp - 0x815c]
push eax
push str.StartingShotDownloadInfo_d
lea ecx, [ebp - 0xa15c]
push ecx
call fcn.0058307d
add esp, 0xc
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411660
push eax
push 0x1000
lea eax, [ebp - 0x915c]
push eax
push 0x60ac7e
lea ecx, [ebp - 0xa15c]
push ecx
push str.StartingShotTask
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x915c]
push eax
call fcn.00582530
add esp, 4
test eax, eax
je 0x42f7ec
lea eax, [ebp - 0x915c]
push eax
mov ecx, dword [ebp - 0x815c]
imul ecx, ecx, 0x1c
mov edx, dword [ebp - 0x14]
lea ecx, [edx + ecx + 0x350]
call fcn.00411470
jmp 0x42f803
mov ecx, dword [ebp - 0x14]
call fcn.00430ed0
mov eax, dword [ebp - 0x815c]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00431000
jmp 0x42f715
mov ecx, dword [ebp - 0x14]
add ecx, 0x2e0
call fcn.00410f10
test eax, eax
jne 0x42f84e
cmp dword [0x63d14c], 0
je 0x42f83f
push 0x22
push 0x22
push 0x5cad90
mov eax, dword [0x63d14c]
mov ecx, dword [eax]
mov edx, dword [0x63d14c]
push edx
mov eax, dword [ecx + 8]
call eax
mov eax, dword [ebp - 0x40bc]
or eax, 2
mov dword [ebp - 0x40bc], eax
mov eax, dword [ebp - 0x40bc]
and eax, 0xf0
mov dword [ebp - 0xa160], eax
mov eax, dword [ebp - 0x40bc]
and eax, 4
mov dword [ebp - 0xa164], eax
mov eax, dword [ebp - 0x40bc]
and eax, 0xf0000
mov dword [ebp - 0xa168], eax
mov eax, dword [ebp - 0x40bc]
and eax, 8
mov dword [ebp - 0xa16c], eax
mov eax, dword [ebp - 0x40bc]
and eax, 1
mov dword [ebp - 0xa170], eax
cmp dword [ebp - 0xa160], 0xf0
jne 0x42f8b8
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 1
jmp 0x42fa40
cmp dword [ebp - 0xa164], 4
jne 0x42f92c
cmp dword [0x63d14c], 0
je 0x42f8e6
push 0x22
push 0x22
push 0x5cad70
mov eax, dword [0x63d14c]
mov ecx, dword [eax]
mov edx, dword [0x63d14c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x200
call fcn.00411660
push eax
call fcn.00583278
add esp, 4
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 1
push 0
push 0x5cad60
push 0x5cad3c
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x14]
push ecx
call fcn.00504650
mov ecx, dword [ebp - 0x14]
call fcn.0042fc40
jmp 0x42fa40
cmp dword [ebp - 0xa168], 0xf0000
jne 0x42f990
cmp dword [0x63d14c], 0
je 0x42f95d
push 0x22
push 0x22
push 0x5cad24
mov eax, dword [0x63d14c]
mov ecx, dword [eax]
mov edx, dword [0x63d14c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0042e510
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 8
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x150], 1
jmp 0x42fa40
cmp dword [ebp - 0xa16c], 8
jne 0x42f9e9
cmp dword [0x63d14c], 0
je 0x42f9be
push 0x22
push 0x22
push 0x5cad14
mov eax, dword [0x63d14c]
mov ecx, dword [eax]
mov edx, dword [0x63d14c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0042e510
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0x10
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x42fa40
cmp dword [ebp - 0xa170], 1
jne 0x42fa40
cmp dword [0x63d14c], 0
je 0x42fa17
push 0x22
push 0x22
push 0x5cacf4
mov eax, dword [0x63d14c]
mov ecx, dword [eax]
mov edx, dword [0x63d14c]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x270
call fcn.00411660
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0042e510
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x18], 0xf
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0xf
je 0x42fa64
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0x10
je 0x42fa64
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 8
je 0x42fa64
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 9
jne 0x42fabd
mov ecx, dword [ebp - 0x14]
call fcn.004340f0
mov dword [ebp - 0xa1b8], 1
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x30b0]
call fcn.004115f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3094]
call fcn.004115f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2058]
call fcn.004115f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.004115f0
mov eax, dword [ebp - 0xa1b8]
jmp 0x42fb0c
mov dword [ebp - 0xa1b4], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x30b0]
call fcn.004115f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3094]
call fcn.004115f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2058]
call fcn.004115f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.004115f0
mov eax, dword [ebp - 0xa1b4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005824ce
mov esp, ebp
pop ebp
ret