Function at 0x42ecc0
Capabilities:
Access peb ldr_data
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x541628
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe4
push esi
push edi
push 0x180
mov dword [ebp - 0x14], ecx
call fcn.00511c75
mov edi, eax
mov dword [ebp - 0x10], edi
push 0x180
push 0
push edi
mov dword [ebp - 4], 0
call fcn.00513df0
add esp, 0x10
mov ecx, edi
call fcn.0043e090
lea eax, [edi + 0xf0]
lea ecx, [edi + 0xf8]
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], ecx
mov dword [ecx + 8], 0
mov dword [ecx + 0x18], 0
mov dword [ecx + 0x1c], 7
mov dword [ecx + 0x20], 0
mov dword [ecx + 0x30], 0
lea eax, [edi + 0x160]
mov dword [ecx + 0x34], 7
mov dword [ecx + 0x50], 0
mov dword [ecx + 0x58], 0
mov dword [ecx + 0x5c], 0
mov dword [ecx + 0x60], 0
mov byte [ecx + 0x64], 0
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [ebp - 0x78], eax
mov dword [edi + 0x170], 0
mov dword [edi + 0x174], 0
mov dword [edi + 0x178], 0
mov byte [edi + 0x17c], 0
mov dword [ebp - 0x30], edi
push 0x10
mov dword [ebp - 4], 3
call fcn.00511c75
mov esi, eax
mov dword [ebp - 0x80], edi
xorps xmm0, xmm0
mov dword [ebp - 0x24], esi
lea eax, [esi + 4]
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x64], eax
movq qword [esi], xmm0
mov dword [esi + 8], 0
mov dword [eax], 1
mov dword [esi + 8], 1
mov dword [esi], vtable.std::_Ref_count_struct_blackbone::ImageContext_.0
mov dword [esi + 0xc], edi
sub esp, 0x14
mov dword [ebp - 4], 4
mov ecx, esp
push dword [ebp + 0xc]
call fcn.00411520
lea ecx, [ebp - 0x60]
call fcn.0043dd60
mov edi, dword [ebp - 0x20]
add esp, 0x18
add edi, 0x20
mov dword [ebp - 0x18], eax
cmp edi, eax
je 0x42ee60
mov ecx, edi
call fcn.00413120
mov eax, dword [ebp - 0x18]
movups xmm0, xmmword [eax]
movups xmmword [edi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [edi + 0x10], xmm0
xor ecx, ecx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 4
nop
lea ecx, [ebp - 0x60]
call fcn.00413120
mov edx, dword [ebp - 0x20]
or edi, 0xffffffff
add edx, 0x20
mov ecx, dword [edx + 0x10]
mov dword [ebp - 0x3c], ecx
test ecx, ecx
je 0x42ef4a
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x1c], edx
jb 0x42ee8d
mov eax, dword [edx]
mov dword [ebp - 0x1c], eax
lea eax, [ecx - 1]
mov ecx, edi
cmp eax, 0xffffffff
cmovb ecx, eax
mov eax, dword [ebp - 0x1c]
cmp word [eax + ecx*2], 0x5c
lea eax, [eax + ecx*2]
mov ecx, dword [ebp - 0x1c]
je 0x42eeb5
cmp eax, ecx
je 0x42eebe
sub eax, 2
cmp word [eax], 0x5c
jne 0x42eea8
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
jne 0x42eefe
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x1c], edx
jb 0x42eecc
mov eax, dword [edx]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x3c]
mov ecx, edi
dec eax
cmp eax, 0xffffffff
cmovb ecx, eax
mov eax, dword [ebp - 0x1c]
cmp word [eax + ecx*2], 0x2f
lea eax, [eax + ecx*2]
mov ecx, dword [ebp - 0x1c]
je 0x42eef5
cmp eax, ecx
je 0x42ef4a
sub eax, 2
cmp word [eax], 0x2f
jne 0x42eee8
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x42ef4a
lea ecx, [eax + 1]
mov dword [ebp - 0x60], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
cmp eax, ecx
jb 0x42fd1c
sub eax, ecx
mov esi, edi
cmp eax, 0xffffffff
cmovb esi, eax
cmp dword [edx + 0x14], 8
mov dword [ebp - 0x18], esi
mov esi, dword [ebp - 0x24]
jb 0x42ef39
mov edx, dword [edx]
push dword [ebp - 0x18]
lea eax, [edx + ecx*2]
push eax
lea ecx, [ebp - 0x60]
call fcn.00408810
jmp 0x42ef53
push edx
lea ecx, [ebp - 0x60]
call fcn.00411520
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x60]
add eax, 8
cmp eax, edx
je 0x42ef94
mov ecx, eax
call fcn.00413120
mov ecx, dword [ebp - 0x20]
movups xmm0, xmmword [ebp - 0x60]
movups xmmword [ecx + 8], xmm0
movq xmm0, qword [ebp - 0x50]
movq qword [ecx + 0x18], xmm0
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x60]
call fcn.00413120
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp + 0x1c]
mov dword [ecx + 0x178], eax
shr eax, 0xf
and al, 1
push eax
push dword [ebp + 0xc]
call fcn.0043e290
mov dword [ebp - 0x18], eax
test eax, eax
jns 0x42f00c
mov ecx, dword [ebp - 0x10]
push 0
call fcn.0043e460
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp + 8]
mov dword [eax], ecx
mov byte [eax + 0xc], 0
mov eax, edi
lea edx, [esi + 4]
lock xadd dword [edx], eax
jne 0x42eff5
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea eax, [esi + 8]
lock xadd dword [eax], edi
dec edi
jne 0x42eff5
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov esi, dword [ebp + 8]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x18
test dword [ebp + 0x1c], 0x100
jne 0x42f0ca
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 0xc]
mov esi, dword [eax]
xor eax, eax
cmp byte [ecx + 0xd], al
lea ecx, [ebp - 0x60]
setne al
mov dword [ebp - 0x18], eax
call fcn.0043d940
push 0x667df8
push dword [ebp - 0x18]
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 9
push 0
push eax
lea eax, [ebp - 0x48]
push eax
lea ecx, [esi + 0x10]
call fcn.00435400
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 4
call fcn.00413120
mov esi, dword [ebp - 0x48]
test esi, esi
je 0x42f0a1
mov ecx, dword [ebp - 0x10]
push 0
call fcn.0043e460
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x64]
mov dword [ecx], 0
mov dword [ecx + 8], eax
mov eax, ecx
mov dword [ecx + 4], esi
mov byte [eax + 0xc], 1
mov eax, edi
lock xadd dword [edx], eax
jne 0x42f223
mov esi, dword [ebp - 0x24]
jmp 0x42efde
mov esi, dword [ebp - 0x44]
test esi, esi
je 0x42f0c7
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x42f0c7
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x42f0c7
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov esi, dword [ebp - 0x24]
mov edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
mov al, byte [edx + 0xd]
mov byte [ebp + 0xf], al
test al, al
jne 0x42f0fd
mov eax, dword [ecx]
mov eax, dword [eax + 8]
mov al, byte [eax + 0xd]
test al, al
jne 0x42f0fd
push 0
mov ecx, edx
call fcn.0043e460
mov eax, dword [ebp + 8]
mov dword [eax], 0xc0000359
jmp 0x42efcf
xor eax, eax
cmp byte [ebp + 0xf], al
setne al
mov dword [edx + 0x134], eax
mov eax, dword [ebp + 0x1c]
test al, 0x20
je 0x42f120
push dword [edx + 0x28]
push ecx
call fcn.004333d0
jmp 0x42f31e
test al, 0x10
je 0x42f321
mov eax, dword [edx + 0x20]
mov ecx, dword [edx + 0x24]
mov dword [ebp - 0x6c], eax
mov eax, dword [edx + 0x28]
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], 0
call fcn.0042e4b0
push 0
push 0x667388
lea ecx, [ebp - 0x60]
mov dword [ebp + 0xc], eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
call fcn.00408810
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp + 0xc]
cmp dword [ecx], 0
jle 0x42f17d
xor eax, eax
jmp 0x42f1df
push 0
push 0
push 3
push 0
push 3
push 0xc0000000
push 0x66a810
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edx, eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x18], edx
mov ecx, dword [eax]
cmp edx, ecx
je 0x42f1ba
test ecx, ecx
jle 0x42f1b6
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x18]
mov dword [eax], edx
mov ecx, edx
test ecx, ecx
jle 0x42f1c9
mov dword [eax + 4], 0
xor eax, eax
jmp 0x42f1df
sub esp, 0x18
lea eax, [ebp - 0x60]
mov ecx, esp
push eax
call fcn.00411520
mov ecx, dword [ebp + 0xc]
call fcn.004472c0
shr eax, 0x1f
lea ecx, [ebp - 0x60]
mov dword [ebp + 0xc], eax
mov byte [ebp - 4], 4
call fcn.00413120
cmp byte [ebp + 0xc], 0
je 0x42f239
mov ecx, dword [ebp - 0x10]
push 0
call fcn.0043e460
call fcn.0042e4b0
mov ecx, dword [ebp + 8]
lea edx, [esi + 4]
mov eax, dword [eax + 4]
mov dword [ecx], eax
mov eax, ecx
mov byte [eax + 0xc], 0
mov eax, edi
lock xadd dword [edx], eax
je 0x42efde
mov esi, ecx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x18
call fcn.0042e4b0
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0x2c]
sub esp, 0xc
mov ecx, dword [ecx]
push edx
lea edx, [ebp - 0x6c]
push edx
push dword [ecx + 4]
mov ecx, eax
call fcn.00447680
test eax, eax
jns 0x42f2ac
mov eax, dword [ebp - 0x10]
xorps xmm0, xmm0
movlpd qword [ebp - 0x6c], xmm0
mov dword [ebp - 0x28], 0
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x2c], eax
call fcn.0042e4b0
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0x2c]
sub esp, 0xc
mov ecx, dword [ecx]
push edx
lea edx, [ebp - 0x6c]
push edx
push dword [ecx + 4]
mov ecx, eax
call fcn.00447680
mov dword [ebp + 0xc], eax
test eax, eax
jns 0x42f2ac
mov ecx, dword [ebp - 0x10]
push 0
call fcn.0043e460
mov ecx, dword [ebp + 0xc]
jmp 0x42efca
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x48]
push 1
push 1
push 0x40
push dword [ebp - 0x2c]
mov eax, dword [eax]
push dword [ebp - 0x68]
add eax, 0x58
push dword [ebp - 0x6c]
push eax
call fcn.00439720
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x18], eax
mov ecx, dword [eax]
mov esi, dword [edx]
cmp esi, ecx
mov dword [ebp + 0xc], esi
mov esi, dword [ebp - 0x24]
je 0x42f2f6
mov dword [edx], ecx
mov ecx, dword [ebp + 0xc]
mov dword [eax], ecx
mov eax, dword [eax + 4]
mov ecx, dword [edx + 4]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x18]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x44]
mov dword [ebp + 0xc], ecx
test ecx, ecx
je 0x42f31e
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x42f31e
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x42f31e
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov ecx, dword [edx + 0xf0]
test ecx, ecx
je 0x42f336
mov eax, dword [ecx]
or eax, dword [ecx + 4]
jne 0x42f420
mov eax, dword [ebp - 0x14]
push 1
push dword [edx + 0x24]
push dword [edx + 0x20]
mov ecx, dword [eax]
lea eax, [ebp - 0x58]
push 0x40
push dword [edx + 0x28]
add ecx, 0x58
push eax
call fcn.0043c960
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x58], 0
jge 0x42f3b9
mov ecx, dword [ebp - 0x10]
push 0
call fcn.0043e460
cmp byte [ebp - 0x4c], 0
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x58]
mov dword [ecx], eax
mov eax, ecx
mov byte [eax + 0xc], 0
je 0x42efd3
mov ecx, dword [ebp - 0x50]
mov dword [ebp + 0x1c], ecx
test ecx, ecx
je 0x42efd3
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x42efd3
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp + 0x1c]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x42efd3
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x42efd3
mov dl, byte [ebp - 0x4c]
test dl, dl
je 0x42fd21
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
mov dword [ebp + 0xc], ecx
mov ecx, dword [ebp - 0x54]
cmp dword [ebp + 0xc], ecx
je 0x42f3f0
mov edx, dword [ebp - 0x38]
mov dword [eax], ecx
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x54], ecx
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0x50]
mov dword [edx + 4], eax
mov dl, byte [ebp - 0x4c]
mov dword [ebp - 0x50], ecx
jmp 0x42f3f3
mov ecx, dword [ebp - 0x50]
mov dword [ebp + 0xc], ecx
mov byte [ebp - 4], 4
test dl, dl
je 0x42f420
test ecx, ecx
je 0x42f420
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x42f420
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x42f420
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
test eax, eax
je 0x42f430
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x42f43e
xorps xmm0, xmm0
movlpd qword [ebp - 0x48], xmm0
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x20]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x10]
mov dword [edx + 4], eax
mov eax, dword [ecx + 0x28]
mov dword [edx + 0x38], eax
mov eax, dword [ebp + 0x1c]
or eax, 0x8000
cmp dword [ecx + 0x38], 0
cmovne eax, dword [ebp + 0x1c]
mov dword [ebp + 0xc], eax
test eax, 0x8000
jne 0x42f48b
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.00431ef0
mov ecx, dword [ebp - 0x10]
mov dword [ebp + 0x1c], eax
test eax, eax
jns 0x42f48b
push 0
call fcn.0043e460
mov ecx, dword [ebp + 0x1c]
jmp 0x42efca
sub esp, 8
lea edx, [esi + 4]
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
lock inc dword [edx]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x14]
mov dword [eax + 4], esi
call fcn.0042fd50
mov dword [ebp + 0x1c], eax
test eax, eax
jns 0x42f4db
mov ecx, dword [ebp - 0x10]
push 0
call fcn.0043e460
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0x1c]
mov dword [eax], ecx
mov byte [eax + 0xc], 0
mov eax, edi
lea ecx, [esi + 4]
lock xadd dword [ecx], eax
jmp 0x42efdc
sub esp, 8
lea ecx, [esi + 4]
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
lock inc dword [ecx]
mov ecx, dword [ebp - 0x10]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x14]
mov dword [eax + 4], esi
call fcn.0042ff60
mov dword [ebp + 0x1c], eax
test eax, eax
js 0x42f4b7
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov eax, dword [ecx + 0x3c]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0xc
test dword [ebp + 0xc], 0x100
push ecx
push ecx
je 0x42f5a6
lea eax, [ebp - 0xf0]
push eax
call fcn.00437300
mov esi, eax
push 0x60
mov byte [ebp - 4], 0xd
call fcn.00511c75
xorps xmm0, xmm0
mov dword [ebp + 0x1c], eax
add esp, 4
movq qword [eax], xmm0
mov dword [eax + 8], 0
mov dword [eax + 4], 1
mov dword [eax + 8], 1
mov dword [eax], vtable.std::_Ref_count_obj2_struct_blackbone::ModuleData_const__.0
add eax, 0x10
push esi
mov ecx, eax
mov dword [ebp - 0x1c], eax
call fcn.00434080
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0xd0]
mov esi, dword [ebp + 0x1c]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], esi
call fcn.00413120
lea ecx, [ebp - 0xe8]
call fcn.00413120
jmp 0x42f66e
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
lea eax, [ebp - 0xf0]
push eax
call fcn.00437300
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0xa0]
call fcn.00411520
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x88], eax
lea edx, [ebp - 0xf0]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x34]
call fcn.00437b10
push eax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [esi + 0x1c]
call fcn.00437be0
mov esi, dword [eax]
mov eax, dword [esi + 0x28]
test eax, eax
je 0x42f610
lock inc dword [eax + 4]
mov eax, dword [esi + 0x24]
mov ecx, dword [ebp - 0x30]
mov esi, dword [esi + 0x28]
mov dword [ebp - 0x1c], eax
mov dword [ebp + 0x1c], esi
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x42f644
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x42f644
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x18]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x42f644
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0xa0]
call fcn.00413120
lea ecx, [ebp - 0xd0]
call fcn.00413120
lea ecx, [ebp - 0xe8]
call fcn.00413120
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], esi
test dword [ebp + 0xc], 0x20000
jne 0x42f6a2
cmp dword [ebp - 0x3c], 1
jne 0x42f6a2
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov eax, dword [eax + 8]
cmp byte [eax + 0xc], 0
je 0x42f6a2
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
mov byte [ebp - 0x28], 1
call dword [sym.imp.KERNEL32.dll_Wow64DisableWow64FsRedirection]
jmp 0x42f6ad
mov dword [ebp - 0x2c], 0
mov byte [ebp - 0x28], 0
mov ecx, dword [ebp - 0x64]
push 0
sub esp, 8
mov byte [ebp - 4], 0x11
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
lock inc dword [ecx]
mov ecx, dword [ebp - 0x10]
mov esi, dword [ebp - 0x24]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x14]
mov dword [eax + 4], esi
call fcn.00430650
mov dword [ebp - 0x18], eax
test eax, eax
jns 0x42f757
mov ecx, dword [ebp - 0x10]
push 0
call fcn.0043e460
push dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
add eax, 8
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
add ecx, 0x10
call fcn.00437470
cmp byte [ebp - 0x28], 0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x18]
mov dword [eax], ecx
mov byte [eax + 0xc], 0
je 0x42f721
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_Wow64RevertWow64FsRedirection]
mov ecx, dword [ebp + 0x1c]
test ecx, ecx
je 0x42f4cd
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x42f4cd
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp + 0x1c]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x42f4cd
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x42f4cd
test dword [ebp + 0xc], 0x4000
jne 0x42f807
push 1
sub esp, 8
lea ecx, [esi + 4]
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
lock inc dword [ecx]
mov ecx, dword [ebp - 0x10]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x14]
mov dword [eax + 4], esi
call fcn.00430650
mov dword [ebp - 0x18], eax
test eax, eax
jns 0x42f807
mov ecx, dword [ebp - 0x10]
push 0
call fcn.0043e460
push dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
add eax, 8
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
add ecx, 0x10
call fcn.00437470
cmp byte [ebp - 0x28], 0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x18]
mov dword [eax], ecx
mov byte [eax + 0xc], 0
je 0x42f7d1
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_Wow64RevertWow64FsRedirection]
mov ecx, dword [ebp + 0x1c]
test ecx, ecx
je 0x42f4cd
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x42f4cd
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp + 0x1c]
mov eax, edi
lock xadd dword [ecx + 8], eax
jne 0x42f4cd
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x42f4cd
mov byte [ebp - 4], 0xc
cmp byte [ebp - 0x28], 0
je 0x42f81a
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_Wow64RevertWow64FsRedirection]
mov eax, dword [ebp + 0xc]
and eax, 0x10
mov dword [ebp - 0x30], eax
jne 0x42f92f
lea eax, [esi + 4]
lock inc dword [eax]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], esi
mov byte [ebp - 4], 0x12
mov ecx, dword [eax + 0x48]
mov eax, dword [eax + 0x4c]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x28], eax
cmp ecx, eax
je 0x42f908
mov eax, dword [ecx + 0x24]
test eax, 0x20000000
je 0x42f876
test eax, eax
jns 0x42f865
mov eax, 0x40
jmp 0x42f88d
and eax, 0x40000000
neg eax
sbb eax, eax
and eax, 0x10
add eax, 0x10
jmp 0x42f88d
test eax, eax
jns 0x42f881
mov eax, 4
jmp 0x42f88d
test eax, 0x40000000
je 0x42f8a4
mov eax, 2
push 0
push dword [ecx + 8]
push dword [ecx + 0xc]
mov ecx, dword [ebp - 0x38]
push eax
call fcn.00439ac0
test eax, eax
js 0x42f908
jmp 0x42f8f6
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
add eax, 0x58
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
test eax, eax
je 0x42f8c5
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x40], eax
jmp 0x42f8d9
xorps xmm0, xmm0
movlpd qword [ebp - 0x74], xmm0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x70], eax
mov edx, dword [ecx + 0xc]
xor eax, eax
add edx, dword [ebp - 0x70]
push 0x4000
push dword [ecx + 8]
adc eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x68]
push eax
push edx
call fcn.0043c990
mov ecx, dword [ebp - 0x18]
add ecx, 0x28
mov dword [ebp - 0x18], ecx
cmp ecx, dword [ebp - 0x28]
jne 0x42f850
lea ecx, [esi + 4]
mov byte [ebp - 4], 0xc
mov eax, edi
lock xadd dword [ecx], eax
jne 0x42f932
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lea ecx, [esi + 8]
mov eax, edi
lock xadd dword [ecx], eax
jne 0x42f92f
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
lea ecx, [esi + 4]
test dword [ebp + 0xc], 0x1000
jne 0x42f9a0
sub esp, 8
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
lock inc dword [ecx]
mov ecx, dword [ebp - 0x10]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x14]
mov dword [eax + 4], esi
call fcn.00430d70
mov dword [ebp - 0x28], eax
test eax, eax
jns 0x42f9a0
cmp eax, 0xc0000225
je 0x42f9a0
mov ecx, dword [ebp - 0x10]
push 0
call fcn.0043e460
push dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
add eax, 8
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
add ecx, 0x10
call fcn.00437470
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x28]
mov dword [eax], ecx
mov byte [eax + 0xc], 0
jmp 0x42f721
sub esp, 8
lea ecx, [esi + 4]
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
lock inc dword [ecx]
mov ecx, dword [ebp - 0x10]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x14]
mov dword [eax + 4], esi
call fcn.00431160
mov dword [ebp - 0x28], eax
test eax, eax
jns 0x42fa01
mov ecx, dword [ebp - 0x10]
push 0
call fcn.0043e460
push dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
add eax, 8
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
add ecx, 0x10
call fcn.00437470
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x28]
mov dword [eax], ecx
mov byte [eax + 0xc], 0
jmp 0x42f721
cmp dword [ebp - 0x30], 0
je 0x42fa4b
push dword [ebp - 0x38]
mov ecx, dword [ebp - 0x14]
call fcn.00433310
mov dword [ebp - 0x30], eax
test eax, eax
jns 0x42fa4b
mov ecx, dword [ebp - 0x10]
push 0
call fcn.0043e460
push dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
add eax, 8
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
add ecx, 0x10
call fcn.00437470
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x30]
mov dword [eax], ecx
mov byte [eax + 0xc], 0
jmp 0x42f721
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
test eax, eax
je 0x42fa61
mov edx, dword [eax]
mov dword [ebp - 0x18], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x40], edx
jmp 0x42fa75
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx + 0x2c]
test eax, eax
je 0x42fa89
xor edx, edx
add eax, dword [ebp - 0x18]
adc edx, dword [ebp - 0x40]
jmp 0x42fa97
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov dword [ecx + 0x150], eax
mov eax, dword [ebp + 0xc]
and al, 2
mov dword [ecx + 0x154], edx
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xff
mov dword [ecx + 0x148], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [eax + 0x34]
test edx, edx
je 0x42faed
push dword [ebp - 0x1c]
push dword [eax]
push dword [eax + 0x38]
lea eax, [ebp - 0x50]
push 1
push eax
call edx
mov eax, dword [ebp - 0x4c]
add esp, 0x14
mov ecx, dword [ebp - 0x10]
cmp eax, 0xde
je 0x42faea
mov dword [ecx + 0x148], eax
mov eax, dword [ebp - 0x14]
cmp dword [ecx + 0x148], 0
je 0x42fb09
mov ecx, dword [eax]
push dword [ebp - 0x20]
add ecx, 0x210
call fcn.00442a50
mov ecx, dword [ebp - 0x10]
test dword [ebp + 0xc], 0x10000
jne 0x42fc52
lea eax, [esi + 4]
lock inc dword [eax]
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], esi
mov byte [ebp - 4], 0x13
cmp byte [ecx + 0xd], 0
je 0x42fb36
mov eax, dword [ecx + 0x18]
add eax, 0xd0
jmp 0x42fb3e
mov eax, dword [ecx + 0x14]
add eax, 0xc0
mov eax, dword [eax]
test eax, eax
jne 0x42fb49
mov dword [ebp + 0xc], eax
jmp 0x42fb57
push 1
push eax
call fcn.0043ef80
mov ecx, dword [ebp - 0x10]
mov dword [ebp + 0xc], eax
mov eax, dword [ecx + 0xf0]
test eax, eax
je 0x42fb6e
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x40], eax
jmp 0x42fb82
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x18], eax
mov eax, dword [ecx + 8]
cdq
mov ecx, eax
mov esi, edx
mov eax, dword [ebp + 0xc]
cdq
sub eax, ecx
sbb edx, esi
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
adc edx, dword [ebp - 0x40]
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x42fc28
cmp dword [eax + 8], 0
je 0x42fc28
mov eax, dword [ebp - 0x14]
push edx
push dword [ebp - 0x30]
mov ecx, dword [eax]
push dword [ebp - 0x20]
add ecx, 0x210
call fcn.00443090
mov dword [ebp + 0xc], eax
mov ecx, edi
mov eax, dword [ebp - 0x64]
mov byte [ebp - 4], 0xc
lock xadd dword [eax], ecx
mov esi, dword [ebp - 0x24]
jne 0x42fbf0
mov edx, dword [esi]
mov ecx, esi
call dword [edx]
mov eax, edi
lea ecx, [esi + 8]
lock xadd dword [ecx], eax
jne 0x42fbf0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
cmp dword [ebp + 0xc], 0
jge 0x42fc52
mov ecx, dword [ebp - 0x10]
push 0
call fcn.0043e460
push dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
add eax, 8
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
add ecx, 0x10
call fcn.00437470
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov dword [eax], ecx
mov byte [eax + 0xc], 0
jmp 0x42f721
mov ecx, dword [ebp - 0x64]
mov eax, edi
mov byte [ebp - 4], 0xc
lock xadd dword [ecx], eax
mov esi, dword [ebp - 0x24]
jne 0x42fc52
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lea ecx, [esi + 8]
lock xadd dword [ecx], eax
jne 0x42fc52
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
test eax, eax
je 0x42fc62
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x42fc70
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
push dword [ebp - 0x78]
push eax
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.0043f020
mov ecx, dword [ebp - 0x10]
push 0
call fcn.0043e460
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
test eax, eax
je 0x42fc94
mov byte [eax + 0x10], 0
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + 0x24]
cmp ecx, dword [edx + 0x28]
je 0x42fcaf
mov eax, dword [ebp - 0x10]
mov dword [ecx], eax
mov dword [ecx + 4], esi
xor ecx, ecx
add dword [edx + 0x24], 8
jmp 0x42fcbf
lea eax, [ebp - 0x80]
push eax
push ecx
lea ecx, [edx + 0x20]
call fcn.00433c10
mov ecx, dword [ebp - 0x7c]
mov esi, dword [ebp + 8]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + 0xc], ecx
mov dword [esi], 0
mov dword [esi + 4], eax
mov eax, dword [ebp + 0x1c]
mov dword [esi + 8], eax
mov byte [esi + 0xc], 1
test ecx, ecx
je 0x42eff8
mov eax, edi
lock xadd dword [ecx + 4], eax
jne 0x42eff8
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp + 0xc]
lock xadd dword [ecx + 8], edi
dec edi
jne 0x42eff8
mov edx, dword [ecx]
call dword [edx + 4]
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret 0x18
call fcn.00413d60
call fcn.00402d00
int3