Function at 0x429d90
Capabilities:
Accept command line arguments
Check mutex on windows
Contain obfuscated stackstrings
Create mailslot
Create thread
Delete file
Extract resource via kernel32 functions
Get comspec environment variable
Get file system object information
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1050
call fcn.004091c0
mov eax, dword [0x4452a0]
xor eax, ebp
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x914], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x910], 0
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x908], 0
xor eax, eax
mov word [ebp - 0x498], ax
push 0x45e
push 0
lea ecx, [ebp - 0x496]
push ecx
call fcn.00402860
add esp, 0xc
xor edx, edx
mov word [ebp - 0x8f8], dx
push 0x45e
push 0
lea eax, [ebp - 0x8f6]
push eax
call fcn.00402860
add esp, 0xc
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0xb1e]
call fcn.00401ab0
lea ecx, [ebp - 0xb1d]
call fcn.00401ab0
mov dword [ebp - 0x14], str.ErrorInfo.log
lea ecx, [ebp - 0x8f8]
mov dword [ebp - 0xb1c], ecx
call dword [sym.imp.KERNEL32.dll_GetACP]
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0xc]
push edx
call fcn.0040e350
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
lea eax, [ebp - 0xb1e]
push eax
call fcn.0042c760
mov byte [ebp - 0xb2c], 0x4d
mov byte [ebp - 0xb2b], 0x69
mov byte [ebp - 0xb2a], 0x63
mov byte [ebp - 0xb29], 0x72
mov ecx, dword [ebp - 0xb2c]
mov dword [0x445f5c], ecx
mov byte [ebp - 0xb2c], 0x6f
mov byte [ebp - 0xb2b], 0x73
mov byte [ebp - 0xb2a], 0x6f
mov byte [ebp - 0xb29], 0x66
mov edx, dword [ebp - 0xb2c]
mov dword [0x445f60], edx
mov byte [ebp - 0xb2c], 0x74
mov byte [ebp - 0xb2b], 0x2e
mov byte [ebp - 0xb2a], 0x4e
mov byte [ebp - 0xb29], 0x45
mov eax, dword [ebp - 0xb2c]
mov dword [0x445f64], eax
lea ecx, [ebp - 0xb2d]
call fcn.00401ab0
lea ecx, [ebp - 0xb2d]
push ecx
call fcn.0042ee40
lea ecx, [ebp - 0xb2d]
call fcn.00401aa0
push str.GlobalFileEventMultexSW
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x45f3bc], eax
cmp dword [0x45f3bc], 0
jne 0x429f42
mov dword [ebp - 0x914], 0x270e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
jmp 0x42b509
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
cmp dword [ebp - 0x910], 0xb7
jne 0x429f73
mov dword [ebp - 0x914], 0x270d
mov dword [ebp - 0x910], 0
jmp 0x42b509
mov edx, dword [ebp + 8]
mov dword [0x45fc60], edx
push 0x118
push 0x4603f0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x904]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0xb24], eax
cmp dword [ebp - 0x904], 2
jle 0x42a149
mov dword [ebp - 0xb34], 0xffffffff
lea ecx, [ebp - 0x498]
mov dword [ebp - 0xb3c], ecx
mov dword [ebp - 0xb38], 0
lea ecx, [ebp - 0xb3d]
call fcn.00401ab0
mov dword [ebp - 0x914], 0x270f
mov dword [ebp - 0x8fc], 0
jmp 0x42a005
mov edx, dword [ebp - 0x8fc]
add edx, 1
mov dword [ebp - 0x8fc], edx
mov eax, dword [ebp - 0x8fc]
movzx ecx, word [eax*2 + 0x4603f0]
test ecx, ecx
je 0x42a052
mov edx, dword [ebp - 0x8fc]
movzx eax, word [edx*2 + 0x4603f0]
cmp eax, 0x5c
je 0x42a03d
mov ecx, dword [ebp - 0x8fc]
movzx edx, word [ecx*2 + 0x4603f0]
cmp edx, 0x2f
jne 0x42a050
mov eax, dword [ebp - 0x8fc]
lea ecx, [eax*2 + 0x4603f0]
mov dword [ebp - 0xb38], ecx
jmp 0x429ff6
cmp dword [ebp - 0xb38], 0
je 0x42a075
xor edx, edx
mov eax, dword [ebp - 0xb38]
mov word [eax], dx
mov ecx, dword [ebp - 0xb38]
add ecx, 2
mov dword [0x445f58], ecx
mov edx, dword [ebp - 0xb3c]
push edx
mov eax, dword [ebp - 0xb24]
mov ecx, dword [eax + 4]
movzx edx, word [ecx]
sub edx, 0x30
push edx
lea eax, [ebp - 0xb3d]
push eax
call fcn.0042e300
mov dword [ebp - 4], eax
lea ecx, [ebp - 0xb34]
push ecx
mov edx, dword [ebp - 0xb3c]
push edx
lea eax, [ebp - 0xb3d]
push eax
call fcn.0042d1f0
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0xb34]
push edx
push str._____d___d__r_n
mov eax, dword [ebp - 0xb3c]
add eax, 0x27
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x10
push 0x43fc54
mov ecx, dword [ebp - 0xb3c]
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push str.wiatrcvw.txt
push 0x4603f0
push 0x43fc7c
lea edx, [ebp - 0x8f8]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov eax, dword [ebp - 0xb3c]
push eax
mov ecx, dword [ebp - 0xb3c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0x8f8]
push edx
call fcn.00401540
add esp, 0xc
lea ecx, [ebp - 0xb3d]
call fcn.00401aa0
jmp 0x42b509
lea ecx, [ebp - 0xb25]
call fcn.00401ab0
lea ecx, [ebp - 0xb26]
call fcn.00401ab0
lea eax, [ebp - 0xb25]
push eax
call fcn.0042c980
mov dword [ebp - 4], eax
lea ecx, [ebp - 0xb26]
push ecx
call fcn.00430610
lea edx, [ebp - 0xb1e]
push edx
call fcn.0042c730
push 1
push str.HTTP_Parser_Log.txt
call fcn.0042bcb0
push 0x43fcb0
call fcn.0042bb30
add esp, 4
push 0x4603f0
push str.__tWinMain__________________Module_FullName________________s_
call fcn.0042bb30
add esp, 8
mov eax, dword [ebp - 0xc]
push eax
push str.__tWinMain__________________CodePage_______________________d_
call fcn.0042bb30
add esp, 8
mov ecx, dword [ebp - 0x904]
push ecx
push str.__tWinMain__________________Arg_Count______________________d_
call fcn.0042bb30
add esp, 8
mov edx, dword [ebp - 4]
push edx
push str.__tWinMain__________________ActUserNameInformation_________d_
call fcn.0042bb30
add esp, 8
lea eax, [ebp - 0xb25]
push eax
call fcn.0042cad0
push eax
push str.__tWinMain__________________Logon_UserCount________________d_
call fcn.0042bb30
add esp, 8
lea ecx, [ebp - 0xb25]
push ecx
call fcn.0042cae0
push eax
push str.__tWinMain__________________ActiveUserName_________________s_
call fcn.0042bb30
add esp, 8
lea edx, [ebp - 0xb1e]
push edx
call fcn.0042c460
push eax
push str.__tWinMain__________________MainGetUserName________________s_
call fcn.0042bb30
add esp, 8
push str.__tWinMain__________________Start________
call fcn.0042bb30
add esp, 4
lea ecx, [ebp - 0xd60]
call fcn.0042c400
push 1
lea ecx, [ebp - 0xd60]
call fcn.0042c120
test eax, eax
je 0x42a27c
lea eax, [ebp - 0xd60]
push eax
call fcn.00411520
push 1
lea ecx, [ebp - 0xd60]
call fcn.0042c040
jmp 0x42a36d
mov dword [ebp - 0x914], 0x3e2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
lea ecx, [ebp - 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edx, dword [ebp - 0x14]
push edx
push 0x4603f0
push 0x43fcb4
lea eax, [ebp - 0xb18]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ecx, dword [ebp - 0x910]
push ecx
lea ecx, [ebp - 0xd60]
call fcn.0042c330
push eax
movzx edx, word [ebp - 0x1c]
push edx
movzx eax, word [ebp - 0x1e]
push eax
movzx ecx, word [ebp - 0x20]
push ecx
movzx edx, word [ebp - 0x22]
push edx
movzx eax, word [ebp - 0x26]
push eax
movzx ecx, word [ebp - 0x28]
push ecx
push str._d__02d__02d__02d:_02d:_02d__s_Step___d__r_n
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov eax, dword [ebp - 0xb1c]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x498]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0xb1c]
push edx
mov eax, dword [ebp - 0xb1c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea ecx, [ebp - 0xb18]
push ecx
call fcn.00401540
add esp, 0xc
lea ecx, [ebp - 0xd60]
call fcn.0042c370
lea ecx, [ebp - 0xb26]
call fcn.00401aa0
lea ecx, [ebp - 0xb25]
call fcn.00401aa0
jmp 0x42b509
lea ecx, [ebp - 0xd60]
call fcn.0042c370
push 0x118
lea edx, [ebp - 0x8f8]
push edx
push 0xffffffffffffffff
push str.sysinfoview.xml
push 0
push 1
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea eax, [ebp - 0x8f8]
push eax
push str.__tWinMain__________________FirstRunFile___________________s_
call fcn.0042bb30
add esp, 8
mov dword [ebp - 0xd64], 0
mov dword [ebp - 0x18], 0x36387828
mov dword [ebp - 0x8fc], 0
jmp 0x42a3d5
mov ecx, dword [ebp - 0x8fc]
add ecx, 1
mov dword [ebp - 0x8fc], ecx
mov edx, dword [ebp - 0x8fc]
movzx eax, word [edx*2 + 0x4603f0]
test eax, eax
je 0x42a422
mov ecx, dword [ebp - 0x8fc]
movzx edx, word [ecx*2 + 0x4603f0]
cmp edx, 0x5c
je 0x42a40d
mov eax, dword [ebp - 0x8fc]
movzx ecx, word [eax*2 + 0x4603f0]
cmp ecx, 0x2f
jne 0x42a420
mov edx, dword [ebp - 0x8fc]
lea eax, [edx*2 + 0x4603f0]
mov dword [ebp - 0xd64], eax
jmp 0x42a3c6
cmp dword [ebp - 0xd64], 0
je 0x42a444
xor ecx, ecx
mov edx, dword [ebp - 0xd64]
mov word [edx], cx
mov eax, dword [ebp - 0xd64]
add eax, 2
mov dword [0x445f58], eax
mov ecx, dword [0x445f58]
push ecx
push 0x440198
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x42a47f
mov dword [ebp - 0x914], 0x3df
lea ecx, [ebp - 0xb26]
call fcn.00401aa0
lea ecx, [ebp - 0xb25]
call fcn.00401aa0
jmp 0x42b509
lea edx, [ebp - 0x8f8]
push edx
push 0x4603f0
push 0x4401b8
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [ebp - 0x910]
push ecx
lea edx, [ebp - 0x498]
push edx
call fcn.004010b0
add esp, 8
test eax, eax
jge 0x42a4df
mov dword [ebp - 0x914], 0x3e0
lea ecx, [ebp - 0xb26]
call fcn.00401aa0
lea ecx, [ebp - 0xb25]
call fcn.00401aa0
jmp 0x42b509
lea eax, [ebp - 0x900]
push eax
push 0
mov ecx, dword [ebp - 0x18]
push ecx
push fcn.0041b250
push 0
push 0
call fcn.00404587
add esp, 0x18
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x42a5f0
mov dword [ebp - 0x914], 0x3e1
mov dword [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
lea edx, [ebp - 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov eax, dword [ebp - 0x14]
push eax
push 0x4603f0
push 0x4401c4
lea ecx, [ebp - 0xb18]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov edx, dword [ebp - 0x910]
push edx
push str.parserSearchThread_Call_Error
movzx eax, word [ebp - 0x1c]
push eax
movzx ecx, word [ebp - 0x1e]
push ecx
movzx edx, word [ebp - 0x20]
push edx
movzx eax, word [ebp - 0x22]
push eax
movzx ecx, word [ebp - 0x26]
push ecx
movzx edx, word [ebp - 0x28]
push edx
push 0x440228
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov ecx, dword [ebp - 0xb1c]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x498]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0xb1c]
push eax
mov ecx, dword [ebp - 0xb1c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0xb18]
push edx
call fcn.00401540
add esp, 0xc
lea ecx, [ebp - 0xb26]
call fcn.00401aa0
lea ecx, [ebp - 0xb25]
call fcn.00401aa0
jmp 0x42b509
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
lea ecx, [ebp - 0x498]
push ecx
call fcn.00418040
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x42a697
cmp dword [ebp - 4], 0xc9
jne 0x42a633
mov dword [ebp - 0x914], 0x3e9
jmp 0x42a67c
cmp dword [ebp - 4], 0xca
jne 0x42a648
mov dword [ebp - 0x914], 0x3ea
jmp 0x42a67c
cmp dword [ebp - 4], 0xcb
jne 0x42a65d
mov dword [ebp - 0x914], 0x3eb
jmp 0x42a67c
cmp dword [ebp - 4], 0x96
jl 0x42a672
mov dword [ebp - 0x914], 0x3ec
jmp 0x42a67c
mov dword [ebp - 0x914], 0x3ed
lea ecx, [ebp - 0xb26]
call fcn.00401aa0
lea ecx, [ebp - 0xb25]
call fcn.00401aa0
jmp 0x42b509
push str.parserchk.txt
push 0x4603f0
push 0x440274
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0x910]
push eax
lea ecx, [ebp - 0x498]
push ecx
call fcn.004010b0
add esp, 8
test eax, eax
jl 0x42a71d
mov dword [0x45fc8c], 1
push str.parsernot.txt
push 0x4603f0
push 0x44029c
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0x910]
push eax
lea ecx, [ebp - 0x498]
push ecx
call fcn.004010b0
add esp, 8
test eax, eax
jl 0x42a71d
mov dword [0x45fc8c], 2
push 0x4603f0
push str._sHTTP_Parser.chm
push 0x460620
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 0x904], 0
jle 0x42a79b
mov dword [ebp - 0x8fc], 0
jmp 0x42a764
mov edx, dword [ebp - 0x8fc]
add edx, 1
mov dword [ebp - 0x8fc], edx
mov eax, dword [ebp - 0x8fc]
cmp eax, dword [ebp - 0x904]
jge 0x42a79b
mov ecx, dword [ebp - 0x8fc]
mov edx, dword [ebp - 0xb24]
mov eax, dword [edx + ecx*4]
push eax
mov ecx, dword [ebp - 0x8fc]
add ecx, 1
push ecx
push str.__tWinMain__________________Arg_List_______________________d___s_
call fcn.0042bb30
add esp, 0xc
jmp 0x42a755
push 0x4603f0
push str.__tWinMain__________________Base_Folder____________________s_
call fcn.0042bb30
add esp, 8
mov dword [ebp - 0xd74], 0
mov dword [ebp - 0xd68], 0
mov dword [ebp - 0xd6c], 0
mov dword [ebp - 0xd70], 0
push str.BINTYPE
push 0x12d
mov edx, dword [0x45fc60]
push edx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0xd74], eax
cmp dword [ebp - 0xd74], 0
je 0x42a8a1
push 0x460
push 0
lea eax, [ebp - 0x498]
push eax
call fcn.00402860
add esp, 0xc
cmp dword [ebp - 0xd74], 0
je 0x42a835
mov ecx, dword [ebp - 0xd74]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0xd68], eax
cmp dword [ebp - 0xd74], 0
je 0x42a855
mov eax, dword [ebp - 0xd74]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0xd6c], eax
cmp dword [ebp - 0xd68], 0
je 0x42a871
mov edx, dword [ebp - 0xd68]
push edx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0xd70], eax
lea eax, [ebp - 0x498]
push eax
push str.logo.gif
mov ecx, dword [ebp - 0xd6c]
push ecx
mov edx, dword [ebp - 0xd70]
push edx
call fcn.00417f70
lea eax, [ebp - 0x498]
push eax
call fcn.0040dab0
mov dword [0x45fc64], eax
cmp dword [ebp - 0xd68], 0
je 0x42a8b7
mov ecx, dword [ebp - 0xd68]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeResource]
push 0x4603f0
push str._s_themes_b_good.bmp
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x4603f0
push str._s_themes_b_bad.bmp
lea eax, [ebp - 0x8f8]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x4603f0
push str._s_themes_b_desktop.bmp
lea ecx, [ebp - 0xb18]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea edx, [ebp - 0x498]
push edx
call fcn.0040dab0
mov dword [0x45fc68], eax
lea eax, [ebp - 0x8f8]
push eax
call fcn.0040dab0
mov dword [0x45fc6c], eax
lea ecx, [ebp - 0xb18]
push ecx
call fcn.0040dab0
mov dword [0x45fc70], eax
mov dword [ebp - 0xd78], 0xa00000
push 0
push 0
push 0x878
push str..mailslotparser_manage
call dword [sym.imp.KERNEL32.dll_CreateMailslotW]
mov dword [0x45f3cc], eax
cmp dword [0x45f3cc], 0xffffffff
jne 0x42aa58
mov dword [ebp - 0x914], 0x3e1
mov dword [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
mov dword [0x45f3cc], 0
lea edx, [ebp - 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov eax, dword [ebp - 0x14]
push eax
push 0x4603f0
push 0x4404b8
lea ecx, [ebp - 0xb18]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov edx, dword [ebp - 0x910]
push edx
push str.Mail_Handle_Create_Error
movzx eax, word [ebp - 0x1c]
push eax
movzx ecx, word [ebp - 0x1e]
push ecx
movzx edx, word [ebp - 0x20]
push edx
movzx eax, word [ebp - 0x22]
push eax
movzx ecx, word [ebp - 0x26]
push ecx
movzx edx, word [ebp - 0x28]
push edx
push 0x4404f8
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov ecx, dword [ebp - 0xb1c]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x498]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0xb1c]
push eax
mov ecx, dword [ebp - 0xb1c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0xb18]
push edx
call fcn.00401540
add esp, 0xc
lea ecx, [ebp - 0xb26]
call fcn.00401aa0
lea ecx, [ebp - 0xb25]
call fcn.00401aa0
jmp 0x42b509
push str.PARSER_SHARED_MAPMEMORY
mov eax, dword [ebp - 0xd78]
push eax
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [0x45f3d0], eax
cmp dword [0x45f3d0], 0
jne 0x42ab6a
mov dword [ebp - 0x914], 0x3e1
mov dword [ebp - 4], 3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
lea ecx, [ebp - 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edx, dword [ebp - 0x14]
push edx
push 0x4603f0
push 0x440574
lea eax, [ebp - 0xb18]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ecx, dword [ebp - 0x910]
push ecx
push 0x440580
movzx edx, word [ebp - 0x1c]
push edx
movzx eax, word [ebp - 0x1e]
push eax
movzx ecx, word [ebp - 0x20]
push ecx
movzx edx, word [ebp - 0x22]
push edx
movzx eax, word [ebp - 0x26]
push eax
movzx ecx, word [ebp - 0x28]
push ecx
push 0x4405b0
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov eax, dword [ebp - 0xb1c]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x498]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0xb1c]
push edx
mov eax, dword [ebp - 0xb1c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea ecx, [ebp - 0xb18]
push ecx
call fcn.00401540
add esp, 0xc
lea ecx, [ebp - 0xb26]
call fcn.00401aa0
lea ecx, [ebp - 0xb25]
call fcn.00401aa0
jmp 0x42b509
mov edx, dword [ebp - 0xd78]
push edx
push 0
push 0
push 2
mov eax, dword [0x45f3d0]
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [0x45f3d8], eax
cmp dword [0x45f3d8], 0
jne 0x42ac7b
mov dword [ebp - 0x914], 0x3e1
mov dword [ebp - 4], 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
lea ecx, [ebp - 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edx, dword [ebp - 0x14]
push edx
push 0x4603f0
push 0x4405fc
lea eax, [ebp - 0xb18]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ecx, dword [ebp - 0x910]
push ecx
push str.Map_Handle_Create_Error
movzx edx, word [ebp - 0x1c]
push edx
movzx eax, word [ebp - 0x1e]
push eax
movzx ecx, word [ebp - 0x20]
push ecx
movzx edx, word [ebp - 0x22]
push edx
movzx eax, word [ebp - 0x26]
push eax
movzx ecx, word [ebp - 0x28]
push ecx
push 0x440638
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov eax, dword [ebp - 0xb1c]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x498]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0xb1c]
push edx
mov eax, dword [ebp - 0xb1c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea ecx, [ebp - 0xb18]
push ecx
call fcn.00401540
add esp, 0xc
lea ecx, [ebp - 0xb26]
call fcn.00401aa0
lea ecx, [ebp - 0xb25]
call fcn.00401aa0
jmp 0x42b509
mov edx, dword [0x45f3d8]
push edx
push str.__tWinMain__________________SharedMemory___________________08X_
call fcn.0042bb30
add esp, 8
mov dword [ebp - 0xd80], 8
mov dword [ebp - 0xd7c], 0x3ff
lea eax, [ebp - 0xd80]
push eax
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
lea ecx, [ebp - 0xb26]
call fcn.00401aa0
lea ecx, [ebp - 0xb25]
call fcn.00401aa0
push 0x100
push 0x45ffc0
push str.COMSPEC
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
jne 0x42acef
push str.cmd.exe
push 0x45ffc0
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x5460
push 0
push 0x4582b0
call fcn.00402860
add esp, 0xc
push 0x440684
push 0x4603f0
push 0x440744
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea edx, [ebp - 0x910]
push edx
lea eax, [ebp - 0x498]
push eax
call fcn.004010b0
add esp, 8
test eax, eax
jl 0x42ad55
push 0x4582b0
push 0x5460
lea ecx, [ebp - 0x498]
push ecx
call fcn.004012f0
add esp, 0xc
push 0x445f5c
push str.sysinfoview.xml
call fcn.0040daf0
mov dword [0x45fc74], 1
lea edx, [ebp - 0x900]
push edx
push 0
push 0
push 0x418de0
push 0
push 0
call fcn.00404587
add esp, 0x18
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x42ae67
mov dword [ebp - 0x914], 0x3e1
mov dword [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [ebp - 0x14]
push ecx
push 0x4603f0
push 0x440750
lea edx, [ebp - 0xb18]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov eax, dword [ebp - 0x910]
push eax
push str.sessionSearchThread_Call_Error
movzx ecx, word [ebp - 0x1c]
push ecx
movzx edx, word [ebp - 0x1e]
push edx
movzx eax, word [ebp - 0x20]
push eax
movzx ecx, word [ebp - 0x22]
push ecx
movzx edx, word [ebp - 0x26]
push edx
movzx eax, word [ebp - 0x28]
push eax
push str._d__02d__02d__02d:_02d:_02d__s___d__r_n
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov edx, dword [ebp - 0xb1c]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x498]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, dword [ebp - 0xb1c]
push ecx
mov edx, dword [ebp - 0xb1c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea eax, [ebp - 0xb18]
push eax
call fcn.00401540
add esp, 0xc
jmp 0x42b509
call fcn.0040ded0
mov dword [ebp - 0x8fc], 0
jmp 0x42ae87
mov ecx, dword [ebp - 0x8fc]
add ecx, 1
mov dword [ebp - 0x8fc], ecx
mov edx, dword [ebp - 0x8fc]
shl edx, 7
movzx eax, word [edx + 0x457db0]
test eax, eax
je 0x42aeba
mov ecx, dword [ebp - 0x8fc]
shl ecx, 7
add ecx, 0x457db0
push ecx
push str.__tWinMain__________________InstBrowser____________________s_
call fcn.0042bb30
add esp, 8
jmp 0x42ae78
push str._test.html
call fcn.00411ba0
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x42b0d4
mov dword [ebp - 0x8fc], 0
jmp 0x42aeec
mov edx, dword [ebp - 0x8fc]
add edx, 1
mov dword [ebp - 0x8fc], edx
mov eax, dword [ebp - 0x8fc]
mov ecx, dword [ebp - 0x30]
movzx edx, word [ecx + eax*2]
test edx, edx
je 0x42af21
mov eax, dword [ebp - 0x8fc]
mov ecx, dword [ebp - 0x30]
movzx edx, word [ecx + eax*2]
cmp edx, 0x5c
jne 0x42af1f
mov eax, dword [ebp - 0x8fc]
mov ecx, dword [ebp - 0x30]
lea edx, [ecx + eax*2 + 2]
mov dword [ebp - 0x10], edx
jmp 0x42aedd
cmp dword [ebp - 0x10], 0
jne 0x42af2e
mov dword [ebp - 0x10], 0x4408a0
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x90c], eax
mov dword [0x45fc78], 0xffffffff
mov dword [ebp - 0x8fc], 0
jmp 0x42af63
mov ecx, dword [ebp - 0x8fc]
add ecx, 1
mov dword [ebp - 0x8fc], ecx
mov edx, dword [ebp - 0x8fc]
shl edx, 7
movzx eax, word [edx + 0x4578b0]
test eax, eax
je 0x42afad
mov ecx, dword [ebp - 0x90c]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x8fc]
shl eax, 7
add eax, 0x4578b0
push eax
call fcn.00401670
add esp, 0xc
test eax, eax
jne 0x42afab
mov ecx, dword [ebp - 0x8fc]
mov dword [0x45fc78], ecx
jmp 0x42afad
jmp 0x42af54
cmp dword [0x45fc78], 0xffffffff
jne 0x42b040
mov dword [ebp - 0x10], str.msedge.exe
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x90c], eax
mov dword [0x45fc78], 0xffffffff
mov dword [ebp - 0x8fc], 0
jmp 0x42aff6
mov eax, dword [ebp - 0x8fc]
add eax, 1
mov dword [ebp - 0x8fc], eax
mov ecx, dword [ebp - 0x8fc]
shl ecx, 7
movzx edx, word [ecx + 0x4578b0]
test edx, edx
je 0x42b040
mov eax, dword [ebp - 0x90c]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x8fc]
shl edx, 7
add edx, 0x4578b0
push edx
call fcn.00401670
add esp, 0xc
test eax, eax
jne 0x42b03e
mov eax, dword [ebp - 0x8fc]
mov dword [0x45fc78], eax
jmp 0x42b040
jmp 0x42afe7
cmp dword [0x45fc78], 0xffffffff
jne 0x42b0d4
mov dword [ebp - 0x10], str.iexplore.exe
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x90c], eax
mov dword [0x45fc78], 0xffffffff
mov dword [ebp - 0x8fc], 0
jmp 0x42b089
mov edx, dword [ebp - 0x8fc]
add edx, 1
mov dword [ebp - 0x8fc], edx
mov eax, dword [ebp - 0x8fc]
shl eax, 7
movzx ecx, word [eax + 0x4578b0]
test ecx, ecx
je 0x42b0d4
mov edx, dword [ebp - 0x90c]
push edx
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x8fc]
shl ecx, 7
add ecx, 0x4578b0
push ecx
call fcn.00401670
add esp, 0xc
test eax, eax
jne 0x42b0d2
mov edx, dword [ebp - 0x8fc]
mov dword [0x45fc78], edx
jmp 0x42b0d4
jmp 0x42b07a
mov eax, dword [0x45fc78]
shl eax, 7
add eax, 0x4578b0
push eax
mov ecx, dword [0x45fc78]
shl ecx, 7
add ecx, 0x457db0
push ecx
mov edx, dword [0x45fc78]
push edx
push str.__tWinMain__________________DefaultBrowser_________________d___s_:__s_
call fcn.0042bb30
add esp, 0x10
push str.parsercommon.data
push 0x4603f0
push 0x440984
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [ebp - 0x910]
push ecx
lea edx, [ebp - 0x498]
push edx
call fcn.004010b0
add esp, 8
test eax, eax
jl 0x42b187
push 0x45d710
push 0x310
lea eax, [ebp - 0x498]
push eax
call fcn.004012f0
add esp, 0xc
test eax, eax
jl 0x42b180
mov ecx, dword [0x45d718]
mov dword [0x45fc78], ecx
mov edx, dword [0x45d71c]
mov dword [0x445f30], edx
mov eax, dword [0x45d714]
mov dword [0x45fc7c], eax
jmp 0x42b187
mov byte [0x45d710], 0
movzx ecx, byte [0x45d710]
test ecx, ecx
jne 0x42b207
mov byte [0x45d710], 9
mov byte [0x45d711], 9
mov byte [0x45d712], 3
mov byte [0x45d713], 3
mov edx, dword [0x45fc7c]
mov dword [0x45d714], edx
mov eax, dword [0x45fc78]
mov dword [0x45d718], eax
mov ecx, dword [0x445f30]
mov dword [0x45d71c], ecx
mov byte [0x45d720], 0
mov byte [0x45d721], 0
mov byte [0x45d722], 0
mov byte [0x45d724], 0
push 0
push 0x45d710
push 0x310
lea edx, [ebp - 0x498]
push edx
call fcn.00401400
add esp, 0x10
push 0
push 0
push 0x21
push 0x10
push 0x10
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov dword [0x460860], eax
cmp dword [0x460860], 0
je 0x42b287
mov dword [ebp - 0x1040], 0x99
jmp 0x42b240
mov eax, dword [ebp - 0x1040]
add eax, 1
mov dword [ebp - 0x1040], eax
cmp dword [ebp - 0x1040], 0xb5
jg 0x42b287
push 0
push 0x10
push 0x10
push 1
movzx ecx, word [ebp - 0x1040]
push ecx
mov edx, dword [0x45fc60]
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [ebp - 0x103c], eax
mov eax, dword [ebp - 0x103c]
push eax
push 0xffffffffffffffff
mov ecx, dword [0x460860]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
jmp 0x42b231
push 0x1000
push 0
push 0xff000000
push 0
push 0xf
push 0x14c
mov edx, dword [0x45fc60]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_LoadImageW]
mov dword [0x46085c], eax
push 0x4000
push 0x2b4
lea eax, [ebp - 0x1038]
push eax
push 0
push 0x440990
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [0x460854], eax
push 0x4001
push 0x2b4
lea ecx, [ebp - 0x1038]
push ecx
push 0
push 0x440998
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [0x460858], eax
push str.RICHED20.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x2c], eax
push str.HHCTRL.OCX
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x42b32a
push str.HtmlHelpW
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x460878], eax
push str.imm32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x42b352
push str.ImmAssociateContext
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x460874], eax
mov ecx, dword [0x445f4c]
push ecx
mov edx, dword [0x445f48]
push edx
mov eax, dword [0x445f44]
push eax
mov ecx, dword [0x445f40]
push ecx
mov edx, dword [0x445f50]
push edx
mov eax, dword [ebp - 0x908]
push eax
push str.__tWinMain______________Run_____IDD_PARSER_BASE_____1______d___d:_d:_d:_d:_d_
call fcn.0042bb30
add esp, 0x1c
mov dword [ebp - 0x1048], 8
mov dword [ebp - 0x1044], 0x3ff
lea ecx, [ebp - 0x1048]
push ecx
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push 0x8d
mov edx, dword [0x45fc60]
push edx
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov dword [0x45f3b8], eax
push 0
push 0x425e10
push 0
push 0x259
mov eax, dword [0x45fc60]
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
mov dword [0x45fc58], 0
mov dword [0x45fc74], 0
mov ecx, dword [0x445f4c]
push ecx
mov edx, dword [0x445f48]
push edx
mov eax, dword [0x445f44]
push eax
mov ecx, dword [0x445f40]
push ecx
mov edx, dword [0x445f50]
push edx
mov eax, dword [ebp - 0x908]
push eax
push str.__tWinMain______________End_____parserSearchThread__1______d___d:_d:_d:_d:_d_
call fcn.0042bb30
add esp, 0x1c
push 2
call fcn.0041b250
mov ecx, dword [ebp - 0x908]
push ecx
push str.__tWinMain______________End_____parserSearchThread__2______d_
call fcn.0042bb30
add esp, 8
push 0x4603f0
push str._slist.txt
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x7530
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x45f3d4], 0
je 0x42b4a6
push 0x1388
mov eax, dword [0x45f3d4]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [0x45f3d4]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call fcn.00411cc0
push str.sitelink.txt
push 0x4603f0
push str._s_s
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 0
push 0x4582b0
push 0x5460
lea eax, [ebp - 0x498]
push eax
call fcn.00401400
add esp, 0x10
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, dword [ebp - 4]
push edx
push str.__tWinMain__________________SITE_CHECKST_FILE______________d___d___s_
call fcn.0042bb30
add esp, 0x10
mov dword [ebp - 0xc], 0x10
cmp dword [0x460864], 0
je 0x42b525
mov eax, dword [0x460864]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp dword [0x46085c], 0
je 0x42b53b
mov ecx, dword [0x46085c]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp dword [0x460860], 0
je 0x42b551
mov edx, dword [0x460860]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp dword [0x45f3d8], 0
je 0x42b566
mov eax, dword [0x45f3d8]
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
cmp dword [0x45f3d0], 0
je 0x42b57c
mov ecx, dword [0x45f3d0]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x45f3cc], 0
je 0x42b592
mov edx, dword [0x45f3cc]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x45f3bc], 0
je 0x42b5a7
mov eax, dword [0x45f3bc]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x914]
mov dword [ebp - 0x1050], ecx
cmp dword [ebp - 0x1050], 0x3df
jg 0x42b5e1
cmp dword [ebp - 0x1050], 0x3df
je 0x42b68d
cmp dword [ebp - 0x1050], 0
je 0x42b67f
jmp case.default.0x42b673
cmp dword [ebp - 0x1050], 0x3e9
jg 0x42b632
cmp dword [ebp - 0x1050], 0x3e9
je 0x42b78f
cmp dword [ebp - 0x1050], 0x3e0
je 0x42b6c3
cmp dword [ebp - 0x1050], 0x3e1
je 0x42b6f9
cmp dword [ebp - 0x1050], 0x3e2
je 0x42b752
jmp case.default.0x42b673
cmp dword [ebp - 0x1050], 0x270e
jg 0x42b67a
cmp dword [ebp - 0x1050], 0x270d
jge 0x42b916
mov edx, dword [ebp - 0x1050]
sub edx, 0x3ea
mov dword [ebp - 0x1050], edx
cmp dword [ebp - 0x1050], 3
ja case.default.0x42b673
mov eax, dword [ebp - 0x1050]
jmp dword [eax*4 + 0x42ba0c]
jmp case.default.0x42b673
xor ecx, ecx
mov word [ebp - 0x498], cx
jmp 0x42b96d
push 0
call fcn.0040e350
test eax, eax
je 0x42b6ac
push 0x440c98
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x42b6be
push str.There_is_a_problem_with_the_contents_of_the_module._n__1___I_cannot_run_the_program.
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x42b96d
push 0
call fcn.0040e350
test eax, eax
je 0x42b6e2
push 0x440d98
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x42b6f4
push str.I_have_a_problem_with_my_module_configuration._n__2___I_cannot_run_the_program.
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x42b96d
push 0
call fcn.0040e350
test eax, eax
je 0x42b726
mov eax, dword [ebp - 0x910]
push eax
mov ecx, dword [ebp - 4]
push ecx
push 0x440e90
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
jmp 0x42b746
mov eax, dword [ebp - 0x910]
push eax
mov ecx, dword [ebp - 4]
push ecx
push str.OS_state_is_unstable___d_:__d_
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0xc], 0x30
jmp 0x42b96d
push 0
call fcn.0040e350
test eax, eax
je 0x42b771
push 0x440f58
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x42b783
push str.The_operating_environment_of_the_PC_is_unknown._nAbort_program_execution.
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [ebp - 0xc], 0x30
jmp 0x42b96d
push 0
call fcn.0040e350
test eax, eax
je 0x42b7be
lea edx, [ebp - 0xb1e]
push edx
call fcn.0042c470
push eax
push 0x441038
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42b7e0
lea ecx, [ebp - 0xb1e]
push ecx
call fcn.0042c470
push eax
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__1_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42b96d
push 0
call fcn.0040e350
test eax, eax
je 0x42b814
lea eax, [ebp - 0xb1e]
push eax
call fcn.0042c470
push eax
push 0x441238
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42b836
lea edx, [ebp - 0xb1e]
push edx
call fcn.0042c470
push eax
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__2_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42b96d
push 0
call fcn.0040e350
test eax, eax
je 0x42b86a
lea ecx, [ebp - 0xb1e]
push ecx
call fcn.0042c470
push eax
push 0x441438
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42b88c
lea eax, [ebp - 0xb1e]
push eax
call fcn.0042c470
push eax
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__3_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42b96d
push 0
call fcn.0040e350
test eax, eax
je 0x42b8b7
mov edx, dword [ebp - 4]
push edx
push 0x441638
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42b8d0
mov ecx, dword [ebp - 4]
push ecx
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__4_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42b96d
push 0
call fcn.0040e350
test eax, eax
je 0x42b8fb
mov eax, dword [ebp - 4]
push eax
push 0x441838
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42b914
mov edx, dword [ebp - 4]
push edx
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__5_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42b96d
push 0
call fcn.0040e350
test eax, eax
je 0x42b93f
mov ecx, dword [ebp - 0x910]
push ecx
push 0x441a38
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42b95b
mov eax, dword [ebp - 0x910]
push eax
push 0x441a68
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp - 0xc], 0x30
jmp 0x42b96d
xor edx, edx
mov word [ebp - 0x498], dx
movzx eax, word [ebp - 0x498]
test eax, eax
je 0x42b995
mov ecx, dword [ebp - 0xc]
push ecx
push str._notification_BOX
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
push str.__tWinMain__________________End__________
call fcn.0042bb30
add esp, 4
mov eax, dword [ebp - 0x910]
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x914]
push edx
push str.__tWinMain__________________fcret__________________________d_:__d___d_
call fcn.0042bb30
add esp, 0x10
push 0x441a64
call fcn.0042bb30
add esp, 4
call fcn.0042bc80
mov eax, dword [ebp - 0x914]
mov dword [ebp - 0x104c], eax
lea ecx, [ebp - 0xb1d]
call fcn.00401aa0
lea ecx, [ebp - 0xb1e]
call fcn.00401aa0
mov eax, dword [ebp - 0x104c]
mov ecx, dword [ebp - 0x34]
xor ecx, ebp
call fcn.00402850
mov esp, ebp
pop ebp
ret 0x10