Function at 0x42c1c0
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa60
push ebx
push esi
push edi
push 0x400
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
xor ebx, ebx
push eax
push ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x18], 1
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x42c20c
push str.Get_Module_File_Name_failed
push str.oldlog_
lea esi, [ebx + 0x40]
call fcn.0040b830
add esp, 8
mov dword [ebp - 0x18], ebx
jmp 0x42cbe3
mov edx, dword [0x4ae214]
mov eax, dword [edx + 0xc]
mov ecx, 0x4ae214
call eax
add eax, 0x10
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
mov dword [ebp - 0x30], eax
test ecx, 0xffff0000
jne 0x42c24f
mov edx, ecx
movzx esi, dx
push ebx
push esi
call fcn.0040b110
add esp, 8
cmp eax, ebx
je 0x42c27f
push esi
push eax
lea ecx, [ebp - 0x30]
call fcn.00406e10
jmp 0x42c27f
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
lea edx, [eax + 2]
jmp 0x42c260
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x42c260
sub eax, edx
sar eax, 1
push eax
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
push eax
lea ecx, [ebp - 0x30]
call fcn.004069f0
mov edx, dword [0x4ae214]
mov eax, dword [edx + 0xc]
mov ecx, 0x4ae214
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
call eax
mov ecx, str.http
lea edi, [eax + 0x10]
mov dword [ebp - 0xc], edi
test ecx, 0xffff0000
jne 0x42c2ca
mov edx, ecx
movzx esi, dx
push ebx
push esi
call fcn.0040b110
add esp, 8
cmp eax, ebx
je 0x42c2dc
push esi
push eax
lea ecx, [ebp - 0xc]
call fcn.00406e10
jmp 0x42c2d9
push 4
push str.http
lea ecx, [ebp - 0xc]
call fcn.004069f0
mov edi, dword [ebp - 0xc]
push 1
lea ecx, [ebp - 0x28]
call fcn.00406c40
cmp dword [ebp - 0x24], ebx
je 0x42c354
mov ecx, dword [edi - 0x10]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
lea esi, [edi - 0x10]
call edx
cmp dword [esi + 0xc], ebx
lea ecx, [esi + 0xc]
jl 0x42c311
cmp eax, dword [esi]
jne 0x42c311
mov ebx, esi
mov eax, 1
lock xadd dword [ecx], eax
jmp 0x42c34a
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov ebx, eax
test ebx, ebx
jne 0x42c32a
call fcn.00406620
mov eax, dword [esi + 4]
mov dword [ebx + 4], eax
mov eax, dword [esi + 4]
lea eax, [eax + eax + 2]
push eax
add esi, 0x10
push esi
push eax
lea ecx, [ebx + 0x10]
push ecx
call dword [sym.imp.MSVCR100.dll_memcpy_s]
add esp, 0x10
mov edx, dword [ebp - 0x24]
add ebx, 0x10
mov dword [edx], ebx
xor ebx, ebx
add dword [ebp - 0x24], 4
add edi, 0xfffffff0
lea eax, [edi + 0xc]
or ecx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42c374
mov ecx, dword [edi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push edi
call eax
mov edx, dword [0x4ae214]
mov eax, dword [edx + 0xc]
mov ecx, 0x4ae214
call eax
add eax, 0x10
mov ecx, str.https
mov dword [ebp - 8], eax
test ecx, 0xffff0000
jne 0x42c3b6
mov edx, ecx
movzx esi, dx
push ebx
push esi
call fcn.0040b110
add esp, 8
cmp eax, ebx
je 0x42c3c5
push esi
push eax
lea ecx, [ebp - 8]
call fcn.00406e10
jmp 0x42c3c5
push 5
push str.https
lea ecx, [ebp - 8]
call fcn.004069f0
mov edi, dword [ebp - 0x28]
lea eax, [ebp - 8]
cmp eax, dword [ebp - 0x24]
jae 0x42c48a
mov ecx, eax
cmp edi, ecx
ja 0x42c48a
mov ecx, dword [ebp - 0x20]
mov esi, eax
mov eax, dword [ebp - 0x24]
sub esi, edi
sar esi, 2
cmp eax, ecx
jne 0x42c437
sub eax, edi
sar eax, 2
cmp eax, 0x3ffffffe
jbe 0x42c406
push str.vector_T__too_long
call dword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const__]
sub ecx, edi
inc eax
sar ecx, 2
cmp eax, ecx
jbe 0x42c437
mov edx, ecx
shr edx, 1
mov edi, 0x3fffffff
sub edi, edx
cmp edi, ecx
jae 0x42c423
xor ecx, ecx
jmp 0x42c425
add ecx, edx
cmp ecx, eax
jae 0x42c42b
mov ecx, eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406c40
mov edi, dword [ebp - 0x28]
cmp dword [ebp - 0x24], 0
je 0x42c538
mov esi, dword [edi + esi*4]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
cmp dword [esi - 4], 0
lea ecx, [esi - 4]
jl 0x42c46d
cmp eax, dword [esi - 0x10]
jne 0x42c46d
lea ebx, [esi - 0x10]
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x42c530
mov ecx, dword [esi - 0xc]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov ebx, eax
test ebx, ebx
jne 0x42c513
call fcn.00406620
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
jne 0x42c4dc
sub eax, edi
sar eax, 2
cmp eax, 0x3ffffffe
jbe 0x42c4ab
push str.vector_T__too_long
call dword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const__]
sub ecx, edi
inc eax
sar ecx, 2
cmp eax, ecx
jbe 0x42c4dc
mov edx, ecx
shr edx, 1
mov esi, 0x3fffffff
sub esi, edx
cmp esi, ecx
jae 0x42c4c8
xor ecx, ecx
jmp 0x42c4ca
add ecx, edx
cmp ecx, eax
jae 0x42c4d0
mov ecx, eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.00406c40
mov edi, dword [ebp - 0x28]
cmp dword [ebp - 0x24], 0
je 0x42c538
mov esi, dword [ebp - 8]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp dword [esi - 4], 0
lea ecx, [esi - 4]
jl 0x42c46d
cmp eax, dword [esi - 0x10]
jne 0x42c46d
lea ebx, [esi - 0x10]
mov eax, 1
lock xadd dword [ecx], eax
jmp 0x42c530
mov eax, dword [esi - 0xc]
mov dword [ebx + 4], eax
mov eax, dword [esi - 0xc]
lea eax, [eax + eax + 2]
push eax
push esi
push eax
lea ecx, [ebx + 0x10]
push ecx
call dword [sym.imp.MSVCR100.dll_memcpy_s]
add esp, 0x10
mov edx, dword [ebp - 0x24]
add ebx, 0x10
mov dword [edx], ebx
mov eax, dword [ebp - 8]
add dword [ebp - 0x24], 4
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c55b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
call fcn.00431f60
mov ebx, eax
push ebx
push str.win8_debug:OSVersion_d
push str.oldlog_
mov esi, 0x20
mov dword [ebp - 0x34], ebx
call fcn.0040b830
add esp, 0xc
cmp ebx, 6
jb 0x42c758
push 0x49c80c
push str.oldlog_
call fcn.0040b830
add esp, 8
lea ecx, [ebp - 8]
push ecx
push str._n_vSN
push 3
xor esi, esi
push esi
push 0x497350
mov dword [ebp - 8], esi
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jns 0x42c5fa
mov eax, dword [ebp - 8]
mov dword [ebp - 0x18], esi
cmp eax, esi
je 0x42c5ca
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
lea ebx, [ebp - 0x28]
call fcn.00414880
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42cbe3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x42cbe3
push 0x49c848
push str.oldlog_
mov esi, 0x20
call fcn.0040b830
mov edx, dword [0x4ae214]
mov eax, dword [edx + 0xc]
add esp, 8
mov ecx, 0x4ae214
call eax
add eax, 0x10
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
call fcn.0042b6c0
test eax, eax
je 0x42c643
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ebx, [ebp + 0xc]
call fcn.004064e0
mov ebx, dword [ebp - 0x24]
sub ebx, edi
sar ebx, 2
xor esi, esi
test ebx, ebx
je 0x42c721
mov ecx, dword [ebp - 8]
test ecx, ecx
je 0x42c721
cmp dword [ebp - 0x34], 0xa
mov dword [ebp - 0x2c], 1
jne 0x42c684
cmp ebx, esi
jbe 0x42c6b8
mov edi, dword [edi + esi*4]
push 1
push edi
lea edi, [ebp - 0x2c]
call fcn.0042bd50
add esp, 8
jmp 0x42c6a0
cmp ebx, esi
jbe 0x42c6b8
mov eax, dword [edi + esi*4]
mov edx, dword [ecx]
lea edi, [ebp - 0x2c]
push edi
mov edi, dword [ebp + 0xc]
push edi
push 1
push 1
push eax
mov eax, dword [edx + 0x10]
push ecx
call eax
mov edi, dword [ebp - 0x28]
test eax, eax
js 0x42c6b4
cmp dword [ebp - 0x2c], 0
je 0x42c6b4
inc esi
cmp esi, ebx
jb 0x42c655
jmp 0x42c721
cmp ebx, esi
ja 0x42c6c3
push str.invalid_vector_T__subscript
call dword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xout_of_range_char_const__]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
lea edx, [ebp - 0x34]
push edx
mov edx, dword [edi + esi*4]
push 1
push 1
push edx
push eax
mov eax, dword [ecx + 0xc]
call eax
push str.win8_debug:version___vista_2
push str.oldlog_
mov esi, 0x20
call fcn.0040b830
mov edx, dword [ebp - 0x34]
add esp, 8
test edx, edx
jne 0x42c6fc
xor eax, eax
jmp 0x42c710
mov eax, edx
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x42c701
sub eax, esi
sar eax, 1
mov ecx, dword [ebp + 8]
push eax
push edx
call fcn.004069f0
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 0xc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c740
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 8]
test eax, eax
je 0x42cb6d
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x42cb6d
push str.win8_debug:version___vista_0
push str.oldlog_
call fcn.0040b830
mov eax, dword [ebp + 0x10]
add esp, 8
cmp dword [eax - 0xc], 0
push 0x104
jne 0x42c7b0
mov ecx, dword [ebp - 0x30]
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
test eax, eax
jne 0x42c7ba
lea ebx, [ebp - 0x28]
mov dword [ebp - 0x18], eax
call fcn.00414880
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jmp 0x42c5e5
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push ecx
push eax
jmp 0x42c783
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push ecx
lea ecx, [ebp - 0x34]
call fcn.00405690
mov eax, dword [ebp - 0x24]
sub eax, edi
sar eax, 2
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], eax
test eax, eax
je 0x42cb4e
mov dword [ebp - 0x40], edi
jmp 0x42c7f3
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x44]
jbe 0x42c6b8
mov ebx, dword [ebp - 0x40]
mov edi, str._shellopencommand
lea esi, [ebp - 0xc]
call fcn.00405dd0
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 0x14]
push edx
push 0x20019
xor edi, edi
push edi
push eax
push 0x80000000
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x10], edi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x42c834
mov dword [ebp - 0x14], edi
mov edx, dword [0x4ae214]
mov eax, dword [edx + 0xc]
mov ecx, 0x4ae214
call eax
add eax, 0x10
mov dword [ebp - 8], eax
cmp dword [ebp - 0x14], edi
je 0x42c8ba
mov edx, dword [0x4ae214]
mov eax, dword [edx + 0xc]
mov ecx, 0x4ae214
call eax
add eax, 0x10
mov ecx, 0x498b64
mov dword [ebp - 0x2c], eax
push edi
test ecx, 0xffff0000
jne 0x42c891
mov edx, ecx
movzx esi, dx
push esi
call fcn.0040b110
add esp, 8
cmp eax, edi
je 0x42c89e
push esi
push eax
lea ecx, [ebp - 0x2c]
call fcn.00406e10
jmp 0x42c89e
push 0x498b64
lea ecx, [ebp - 0x2c]
call fcn.004069f0
or dword [ebp - 0x3c], 1
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x14]
push ecx
lea esi, [ebp - 8]
call fcn.00426640
test eax, eax
je 0x42c8ba
xor bl, bl
jmp 0x42c8bc
mov bl, 1
test byte [ebp - 0x3c], 1
je 0x42c8e5
mov eax, dword [ebp - 0x2c]
and dword [ebp - 0x3c], 0xfffffffe
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x42c8e5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
jne 0x42ca2e
lea ebx, [ebp - 8]
call fcn.00406260
mov ebx, eax
call fcn.004062e0
mov eax, dword [ebp - 8]
xor esi, esi
cmp dword [eax - 0xc], esi
je 0x42ca36
lea ecx, [ebp - 0x50]
push ecx
push eax
mov dword [ebp - 0x50], esi
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x38]
call fcn.00405690
lea ebx, [ebp - 0x38]
call fcn.00406260
mov ebx, eax
call fcn.004062e0
mov ecx, dword [ebp - 0x38]
push 0x104
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
lea edx, reloc.NETAPI32.dll_NetApiBufferFree
push edx
lea ecx, [ebp - 0x4c]
call fcn.00405690
mov ebx, dword [ebp - 0x4c]
xor edi, edi
cmp ebx, edi
je 0x42ca80
mov eax, dword [ebp - 0x34]
push ebx
push eax
call dword [sym.imp.MSVCR100.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x42ca8a
lea eax, [ebx - 0x10]
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c996
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c9b5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42c9d4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x10]
cmp eax, edi
je 0x42c9e5
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x10], edi
mov eax, dword [ebp - 0x14]
cmp eax, edi
je 0x42c9f6
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x14], edi
mov eax, dword [ebp - 0xc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42ca15
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x44]
add dword [ebp - 0x40], 4
inc eax
mov dword [ebp - 0x44], eax
cmp eax, dword [ebp - 0x48]
jb 0x42c7f0
jmp 0x42cb4b
mov dword [ebp - 0x18], edi
jmp 0x42caeb
add eax, 0xfffffff0
mov dword [ebp - 0x18], esi
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42ca55
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x10]
cmp eax, esi
je 0x42ca66
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x10], esi
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x42cb2c
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x14], esi
jmp 0x42cb2c
push 0x80004005
call fcn.0040b800
push str.win8_debug:version___vista_1
push str.oldlog_
mov esi, 0x20
call fcn.0040b830
add esp, 8
lea ecx, [ebp - 0x38]
push ecx
mov ecx, dword [ebp + 8]
call fcn.00406470
lea eax, [ebx - 0x10]
mov dword [ebp - 0x18], edi
lea edx, [eax + 0xc]
or ecx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x42cacc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42caeb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 8]
add eax, 0xfffffff0
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42cb0a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x10]
cmp eax, edi
je 0x42cb1b
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x10], edi
mov eax, dword [ebp - 0x14]
cmp eax, edi
je 0x42cb2c
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x14], edi
mov eax, dword [ebp - 0xc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42cb4b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42cb6d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test edi, edi
je 0x42cbaf
mov ebx, dword [ebp - 0x24]
mov esi, edi
cmp edi, ebx
je 0x42cba5
lea ebx, [ebx]
mov eax, dword [esi]
sub eax, 0x10
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42cb9e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add esi, 4
cmp esi, ebx
jne 0x42cb80
push edi
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42cbce
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [ebp - 0x18], 0
je 0x42cbe3
mov ecx, dword [ebp + 8]
push 0xc
push str.baidubrowser
call fcn.004069f0
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42cc02
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42cc21
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret