Function at 0x4a4690
Capabilities:
Create process on windows
Resolve function by parsing pe exports
Self delete

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5aff94
mov eax, dword fs:[0]
push eax
sub esp, 0x60
push ebx
push esi
push edi
mov eax, dword [0x6336a0]
xor eax, esp
push eax
lea eax, [esp + 0x70]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x2c], ebx
mov edi, dword [ebp + 8]
mov dword [esp + 0x24], 0
mov esi, dword [ebx + 0x3d8]
test esi, esi
je 0x4a474e
push 0
mov eax, 0x1c
mov ecx, 0x5f5e60
mov edx, edi
call fcn.0044d730
add esp, 4
test eax, eax
jne 0x4a474e
mov eax, dword [ebx + 0x13c]
push eax
mov edx, esi
call fcn.004d3f10
mov ecx, dword [ebx + 0x3d8]
mov edx, dword [ecx + 0x20]
push 0
push eax
push 0x8100
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [ebx + 0x198]
mov ecx, dword [edi]
mov edx, dword [ebx + 0x3d8]
push 0xffffffffffffffff
push 1
push 0
push eax
push 0
push 0
push ecx
push edx
call fcn.004d5b30
mov al, 1
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
mov eax, dword [edi]
push str.skipcheck:
push eax
call fcn.00577334
add esp, 8
test eax, eax
jne 0x4a47ca
mov eax, dword [ebx + 0x15c]
test eax, eax
je 0x4a4781
push eax
mov eax, 0x63cd58
call fcn.0053c300
mov dword [ebx + 0x15c], 0
mov eax, dword [ebx + 0x13c]
mov ecx, dword [ebx + 0x3d8]
push 3
push eax
mov dword [ebx + 0x154], 4
mov dword [ebx + 0x158], 5
mov edx, dword [ecx + 0x20]
push 0x8104
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
mov al, 1
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
call fcn.00555692
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4a47e4
push 0x80004005
call fcn.00401f90
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x18], eax
mov dword [esp + 0x78], 0
call fcn.00555692
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4a4816
push 0x80004005
call fcn.00401f90
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x20], eax
mov byte [esp + 0x78], 1
call fcn.00555692
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4a4845
push 0x80004005
call fcn.00401f90
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x24]
push edx
mov ecx, edi
mov byte [esp + 0x80], 2
call fcn.004545d0
add esp, 8
test eax, eax
mov dword [ebx + 0x148], eax
jne 0x4a48a2
push 4
push 0x63c290
lea ecx, [esp + 0x28]
call fcn.00449140
test eax, eax
jne 0x4a4894
mov eax, dword [0x63c2c0]
xor ecx, ecx
cmp eax, 2
sete cl
mov dword [ebx + 0x188], ecx
mov ecx, dword [ebx + 0x154]
cmp ecx, 4
je 0x4a4b4d
mov eax, dword [ebx + 0x148]
test eax, eax
mov edx, dword [0x63c12c]
jne 0x4a4b03
test edx, edx
je 0x4a4b03
cmp ecx, 2
jge 0x4a4b03
cmp dword [ebx + 0x188], 0
jne 0x4a4b03
push edi
call fcn.0048d550
test eax, eax
mov dword [ebx + 0x158], eax
jne 0x4a4a7d
lea ecx, [esp + 0x38]
call fcn.00402700
lea ecx, [esp + 0x30]
call fcn.00402700
lea ecx, [esp + 0x2c]
call fcn.00402700
mov byte [esp + 0x78], 5
mov eax, dword [0x63c8c8]
cmp dword [eax - 0xc], 0
jl 0x4a4945
push str.Google
push eax
call fcn.0057781d
add esp, 8
test eax, eax
je 0x4a4945
sub eax, dword [0x63c8c8]
sar eax, 1
js 0x4a4945
lea edx, [esp + 0x20]
push edx
jmp 0x4a4946
push edi
lea ecx, [esp + 0x34]
call fcn.00402330
push 0x5ee8b8
push 0x5e50f8
lea eax, [esp + 0x38]
push eax
call fcn.00414390
push 0x5ee8b0
push 0x5e51bc
lea ecx, [esp + 0x38]
push ecx
call fcn.00414390
push 0x63c8cc
lea ecx, [esp + 0x30]
call fcn.00402330
mov edx, dword [esp + 0x30]
push edx
push 0x5de4e0
lea eax, [esp + 0x34]
push eax
call fcn.00414390
mov ecx, dword [esp + 0x2c]
push ecx
lea edx, [esp + 0x3c]
push str.URL:_s_r_nMemorySave:true
push edx
call fcn.00404650
mov eax, dword [ebx + 0x13c]
mov ecx, dword [esp + 0x44]
add esp, 0xc
push 0x1f
push eax
push 0x63cd58
call fcn.0053a520
test eax, eax
mov dword [ebx + 0x15c], eax
je 0x4a49dd
push 0x63cd58
mov ecx, eax
call fcn.0053b620
mov eax, dword [ebp + 8]
lea edi, [ebx + 0x14c]
push eax
mov ecx, edi
call fcn.00402310
mov dword [ebx + 0x154], 1
mov esi, dword [0x63c450]
add esi, 0x2340
xor eax, eax
call fcn.0040bc30
mov ecx, dword [ebx + 0x13c]
mov edx, dword [ebx + 0x3d8]
mov eax, dword [edx + 0x20]
push 1
push ecx
push 0x8104
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov edi, dword [edi]
call fcn.004d7c40
lea ecx, [esp + 0x2c]
call fcn.00401f20
lea ecx, [esp + 0x30]
call fcn.00401f20
lea ecx, [esp + 0x38]
call fcn.00401f20
lea ecx, [esp + 0x28]
call fcn.00401f20
lea ecx, [esp + 0x20]
call fcn.00401f20
lea ecx, [esp + 0x18]
call fcn.00401f20
mov al, 1
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
cmp eax, 1
jne 0x4a4a87
jmp 0x4a4b3c
cmp eax, 2
jne 0x4a4a91
jmp 0x4a4b3c
cmp eax, 3
jne 0x4a4afc
mov ecx, dword [esp + 0x20]
push ecx
mov ecx, 0x63c338
call fcn.0056485c
mov dword [eax], 2
mov esi, dword [0x63c450]
add esi, 0x2340
mov eax, 3
call fcn.0040bc30
mov edx, dword [ebp + 8]
lea esi, [ebx + 0x14c]
push edx
mov ecx, esi
call fcn.00402310
mov eax, dword [ebx + 0x13c]
mov ecx, dword [ebx + 0x3d8]
mov edx, dword [ecx + 0x20]
push 2
push eax
push 0x8104
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
mov edi, dword [esi]
call fcn.004d7c40
jmp 0x4a4a4b
cmp eax, 5
jne 0x4a4b4d
jmp 0x4a4b3c
cmp eax, 1
je 0x4a4b0d
cmp eax, 2
jne 0x4a4b11
test edx, edx
jne 0x4a4b31
cmp dword [ebx + 0x188], 0
je 0x4a4b4d
test edx, edx
je 0x4a4b4d
push edi
call fcn.0048d550
cmp eax, 3
jne 0x4a4b31
mov dword [ebx + 0x158], eax
jmp 0x4a4b3c
mov eax, 2
mov dword [ebx + 0x158], eax
mov esi, dword [0x63c450]
add esi, 0x2340
call fcn.0040bc30
cmp dword [ebx + 0x154], 2
jl 0x4a4b60
mov dword [ebx + 0x154], 0
mov eax, dword [edi]
mov ecx, dword [eax - 0xc]
test ecx, ecx
jg 0x4a4b6e
or esi, 0xffffffff
jmp 0x4a4b88
push 0x3a
push eax
call fcn.0057787c
add esp, 8
test eax, eax
jne 0x4a4b82
or esi, 0xffffffff
jmp 0x4a4b88
sub eax, dword [edi]
sar eax, 1
mov esi, eax
call fcn.00555692
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4a4ba2
push 0x80004005
call fcn.00401f90
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
test esi, esi
mov byte [esp + 0x78], 6
jle 0x4a4bff
lea ecx, [esi + 1]
push ecx
lea edx, [esp + 0x3c]
push edx
mov ecx, edi
call fcn.00414630
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x7c], 7
call fcn.00402330
mov byte [esp + 0x78], 6
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a4bff
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
jl 0x4a4e25
push str.tgmtv
push eax
call fcn.0057781d
add esp, 8
test eax, eax
je 0x4a4e25
mov ecx, dword [edi]
sub eax, ecx
sar eax, 1
mov edx, eax
test edx, edx
jle 0x4a4e25
mov eax, dword [ecx - 0xc]
sub eax, edx
sub eax, 7
push eax
lea ecx, [esp + 0x38]
push ecx
mov ecx, edi
call fcn.00401a60
mov bl, 8
mov byte [esp + 0x78], bl
call fcn.00555692
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4a4c66
push 0x80004005
call fcn.00401f90
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x38], eax
mov byte [esp + 0x78], 9
mov ecx, dword [esp + 0x34]
push ecx
lea edx, [esp + 0x3c]
push str.URL:_s_r_nMemorySave:true
push edx
call fcn.00404650
mov edi, dword [esp + 0x44]
add esp, 0xc
push 0x23
push 0
push 0x63cd58
mov ecx, edi
call fcn.0053a520
test eax, eax
je 0x4a4cb6
push 0x63cd58
mov ecx, eax
call fcn.0053b620
push 0x5d2b58
push 0x5d933c
push 0x63c608
call fcn.00414390
push 0x5d2b58
push str.PLAYBAR
push 0x63c608
call fcn.00414390
push 0x5d2b58
push str.LRCTIME
push 0x63c608
call fcn.00414390
mov eax, dword [0x63c450]
mov ecx, dword [eax + 0x2360]
mov esi, dword [sym.imp.USER32.dll_InvalidateRect]
push 0
push 0
push ecx
call esi
mov edx, dword [0x63c450]
mov eax, dword [edx + 0x1914]
push 0
push 0
push eax
call esi
mov ecx, dword [0x63c450]
push 0
call fcn.00463a10
mov ecx, dword [0x63c450]
add ecx, 0x71f4
mov eax, 0x5f5ed4
call fcn.004a1150
lea eax, [edi - 0x10]
mov byte [esp + 0x78], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a4d60
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x78], 6
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a4d85
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x78], 2
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a4daa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x78], 1
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a4dcf
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x78], 0
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a4df4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x78], 0xffffffff
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a4a66
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x4a4a66
cmp esi, 5
jne 0x4a4e91
mov esi, dword [esp + 0x1c]
push str.local:
push esi
call fcn.00577334
add esp, 8
test eax, eax
jne 0x4a4f40
mov ecx, dword [edi]
mov eax, dword [ecx - 0xc]
add eax, 0xfffffffa
push eax
lea edx, [esp + 0x3c]
push edx
mov ecx, edi
call fcn.00401a60
push 0x5d8484
push 0x5d847c
lea eax, [esp + 0x40]
push eax
mov byte [esp + 0x84], 0xa
call fcn.00414390
mov ecx, dword [esp + 0x38]
push ecx
call fcn.004eaa60
lea ecx, [esp + 0x38]
call fcn.00401f20
lea ecx, [esp + 0x1c]
jmp 0x4a4a46
cmp esi, 0xb
jne 0x4a4fd5
mov edx, dword [esp + 0x1c]
push str.view_source:
push edx
call fcn.00577334
add esp, 8
test eax, eax
jne 0x4a59ab
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
mov eax, dword [eax - 0xc]
add eax, 0xfffffff4
push eax
lea edx, [esp + 0x38]
push edx
call fcn.00401a60
push 0x5d8484
push 0x5d847c
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x84], 0xb
call fcn.00414390
lea ecx, [esp + 0x38]
call fcn.00402700
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0x3c]
mov byte [esp + 0x7c], 0xc
mov edi, dword [esp + 0x38]
push edx
call fcn.00450060
mov eax, dword [esp + 0x40]
add esp, 8
push 5
push 0
push eax
push str.notepad.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0x38]
call fcn.00401f20
lea ecx, [esp + 0x34]
call fcn.00401f20
lea ecx, [esp + 0x1c]
jmp 0x4a4a46
push str.start:
push esi
call fcn.00577334
add esp, 8
test eax, eax
jne 0x4a59ab
mov ecx, dword [ebp + 8]
push ecx
lea ecx, [ebx + 0xb8]
call fcn.00402310
lea edi, [esp + 0x18]
call fcn.004525a0
mov edx, edi
push edx
mov ecx, ebx
call fcn.004eab20
mov esi, dword [ebx + 0x3d8]
test esi, esi
je 0x4a4fbb
mov eax, dword [ebx + 0x13c]
call fcn.004d4100
mov esi, eax
test esi, esi
je 0x4a4fb1
mov edi, dword [ebp + 8]
push edi
lea ecx, [esi + 0x10]
call fcn.00402310
mov eax, dword [esi + 0xc]
cmp dword [eax - 0xc], 0
lea ecx, [esi + 0xc]
jne 0x4a4fb1
push edi
call fcn.00402310
mov ecx, dword [ebp + 8]
mov edi, dword [ecx]
call fcn.004d7c40
mov eax, ebx
mov dword [ebx + 0x1e0], 1
call fcn.004eaca0
lea ecx, [esp + 0x1c]
jmp 0x4a4a46
cmp esi, 7
jne 0x4a522b
mov esi, dword [esp + 0x1c]
push str.openall:
push esi
call fcn.00577334
add esp, 8
test eax, eax
jne 0x4a53fe
lea ecx, [esp + 0x58]
call fcn.0055d17f
mov esi, vtable.CStringArrayEx.0
mov dword [esp + 0x58], esi
lea ecx, [esp + 0x44]
mov byte [esp + 0x78], 0xd
call fcn.0055d17f
mov dword [esp + 0x44], esi
lea ecx, [esp + 0x34]
call fcn.00402700
lea ecx, [esp + 0x30]
call fcn.00402700
mov byte [esp + 0x78], 0x10
mov edx, dword [edi]
mov eax, dword [edx - 0xc]
add eax, 0xfffffff8
push eax
lea eax, [esp + 0x3c]
push eax
mov ecx, edi
call fcn.00401a60
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x7c], 0x11
call fcn.00402330
lea ecx, [esp + 0x38]
mov byte [esp + 0x78], 0x10
call fcn.00401f20
push str.last
lea ecx, [esp + 0x34]
call fcn.004043e0
test eax, eax
jne 0x4a5090
lea ecx, [esp + 0x44]
push ecx
lea edx, [esp + 0x5c]
push edx
push 0x63c830
call fcn.00451ce0
add esp, 0xc
jmp 0x4a50b3
cmp dword [0x63c8b8], 0
jle 0x4a5e69
mov ebx, dword [0x63c8b4]
add ebx, 0x1c
lea edi, [esp + 0x44]
call fcn.0047c880
mov ebx, dword [esp + 0x2c]
xor esi, esi
cmp dword [esp + 0x4c], esi
mov dword [esp + 0x38], esi
jle 0x4a5168
mov eax, dword [esp + 0x30]
push esi
push eax
lea ecx, [esp + 0x3c]
push 0x5dc820
push ecx
call fcn.00404650
mov edx, dword [esp + 0x44]
add esp, 0x10
push edx
push 1
mov ecx, ebx
call fcn.004ed0f0
mov edi, eax
test edi, edi
je 0x4a5154
call fcn.004ed420
mov dword [esp + 0x2c], eax
mov eax, dword [edi]
mov ecx, dword [eax + 8]
push edi
call ecx
cmp dword [esp + 0x2c], 0
je 0x4a5154
mov eax, dword [ebx + 0x3d8]
mov ecx, dword [eax + 0xa50]
mov edx, dword [eax + 0xa64]
add dword [esp + 0x38], 1
add edx, ecx
cmp edx, dword [0x63c19c]
jge 0x4a5161
test esi, esi
jl 0x4a5e69
cmp esi, dword [esp + 0x4c]
jge 0x4a5e69
mov edx, dword [esp + 0x48]
mov ecx, dword [edx + esi*4]
push 0xffffffffffffffff
push 1
push 0
push 1
push 0
push 0
push ecx
push eax
call fcn.004d5b30
add esi, 1
cmp esi, dword [esp + 0x4c]
jl 0x4a50c3
cmp dword [esp + 0x38], 0
jne 0x4a5176
push 0
push 0
push 0x5f5f20
call fcn.0055e834
cmp esi, dword [esp + 0x4c]
jge 0x4a51c0
lea ecx, [esp + 0x38]
call fcn.00402700
mov byte [esp + 0x78], 0x12
mov eax, dword [0x63c19c]
mov ecx, dword [0x63c094]
push eax
push ecx
lea edx, [esp + 0x40]
push 0x5f5f38
push edx
call fcn.00404650
mov eax, dword [esp + 0x48]
add esp, 0x10
push 0
push 0
push eax
call fcn.0055e834
lea ecx, [esp + 0x38]
call fcn.00401f20
mov byte [esp + 0x78], 0xf
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a51e5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x78], 0xe
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a520a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x78], 0xd
call fcn.0055d21d
lea ecx, [esp + 0x58]
mov byte [esp + 0x78], 6
call fcn.0055d21d
jmp 0x4a4d85
cmp esi, 0xa
jne 0x4a552e
mov esi, dword [esp + 0x1c]
push str.blanktango:
push esi
call fcn.00577334
add esp, 8
test eax, eax
jne 0x4a5643
lea ecx, [esp + 0x38]
call fcn.00402700
lea ecx, [esp + 0x38]
mov byte [esp + 0x78], 0x13
mov edx, dword [0x63c1c8]
push ecx
push edx
xor ecx, ecx
xor edi, edi
xor esi, esi
call fcn.0044b470
mov esi, dword [esp + 0x40]
push str..jpg
push esi
call fcn.00577334
add esp, 0x10
test eax, eax
je 0x4a52c1
push str..gif
push esi
call fcn.00577334
add esp, 8
test eax, eax
je 0x4a52c1
push str..png
push esi
call fcn.00577334
add esp, 8
test eax, eax
je 0x4a52c1
mov eax, dword [0x63c1c8]
push eax
call fcn.004eaa60
mov ebx, dword [esp + 0x2c]
jmp 0x4a53e2
lea ecx, [esp + 0x2c]
call fcn.00402700
lea ecx, [esp + 0x30]
call fcn.00402700
push 0x63c268
lea ecx, [esp + 0x30]
mov esi, str.blankpage.txt
mov byte [esp + 0x7c], 0x15
call fcn.0040dc40
mov ecx, dword [esp + 0x2c]
cmp dword [ecx - 0xc], 0
je 0x4a53d0
push 0x63c1c8
lea ecx, [esp + 0x34]
call fcn.00402330
mov ecx, dword [0x63c1c8]
mov eax, dword [ecx - 0xc]
test eax, eax
jl 0x4a5330
push 0x5e50f8
push ecx
call fcn.0057781d
add esp, 8
test eax, eax
je 0x4a5330
sub eax, dword [0x63c1c8]
sar eax, 1
jns 0x4a5388
push 0x5d616c
lea edx, [esp + 0x28]
push 0x63c670
push edx
call fcn.00401ba0
add esp, 0xc
push 0x63c1c8
push eax
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x84], 0x16
call fcn.00401ae0
add esp, 0xc
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x7c], 0x17
call fcn.00402330
lea ecx, [esp + 0x34]
call fcn.00401f20
lea ecx, [esp + 0x24]
mov byte [esp + 0x78], 0x15
call fcn.00401f20
push 0x5ea6ac
push 0x5e50f8
lea ecx, [esp + 0x38]
push ecx
call fcn.00414390
push 0x5e51bc
push 0x5d616c
lea edx, [esp + 0x38]
push edx
call fcn.00414390
mov eax, dword [esp + 0x30]
push eax
push str.C_x.jpg
lea ecx, [esp + 0x34]
push ecx
call fcn.00414390
lea edx, [esp + 0x2c]
push edx
mov ecx, ebx
call fcn.004eab20
lea ecx, [esp + 0x30]
call fcn.00401f20
lea ecx, [esp + 0x2c]
call fcn.00401f20
lea ecx, [esp + 0x38]
mov dword [ebx + 0x1e0], 1
call fcn.00401f20
lea ecx, [esp + 0x1c]
jmp 0x4a4a46
push str.opennow:
push esi
call fcn.00577334
add esp, 8
test eax, eax
jne 0x4a55a2
xor edi, edi
lea ecx, [esp + 0x34]
mov dword [esp + 0x38], edi
call fcn.00402700
mov byte [esp + 0x78], 0x18
cmp dword [ebx + 0x2a8], edi
jle 0x4a54d4
push edi
lea eax, [esp + 0x38]
push str.c__d
push eax
call fcn.00404650
mov ecx, dword [esp + 0x40]
add esp, 0xc
push ecx
push 1
mov ecx, ebx
call fcn.004ed0f0
mov esi, eax
test esi, esi
je 0x4a54be
call fcn.004ed420
mov edx, dword [esi]
mov dword [esp + 0x30], eax
mov eax, dword [edx + 8]
push esi
call eax
cmp dword [esp + 0x30], 0
je 0x4a54be
mov eax, dword [ebx + 0x3d8]
mov ecx, dword [eax + 0xa50]
add dword [esp + 0x38], 1
add eax, 0xa48
mov eax, dword [eax + 0x1c]
add eax, ecx
cmp eax, dword [0x63c19c]
jge 0x4a54cd
lea ecx, [ebx + 0x2a0]
mov eax, edi
call fcn.004bfa80
mov eax, dword [eax]
mov ecx, dword [ebx + 0x3d8]
push 0xffffffffffffffff
push 1
push 0
push 0
push 0
push 0
push eax
push ecx
call fcn.004d5b30
add edi, 1
cmp edi, dword [ebx + 0x2a8]
jl 0x4a5434
cmp dword [esp + 0x38], 0
jne 0x4a54e2
push 0
push 0
push 0x5f5f20
call fcn.0055e834
cmp edi, dword [ebx + 0x2a8]
jge 0x4a4f2e
lea ecx, [esp + 0x38]
call fcn.00402700
mov byte [esp + 0x78], 0x19
mov edx, dword [0x63c19c]
mov eax, dword [0x63c094]
push edx
push eax
lea ecx, [esp + 0x40]
push 0x5f5f38
push ecx
call fcn.00404650
mov edx, dword [esp + 0x48]
add esp, 0x10
push 0
push 0
push edx
call fcn.0055e834
jmp 0x4a4f25
cmp esi, 6
jne 0x4a59ab
mov esi, dword [esp + 0x1c]
push str.custom:
push esi
call fcn.00577334
add esp, 8
test eax, eax
jne 0x4a56d9
push edi
lea ecx, [ebx + 0xb8]
call fcn.00402310
push 0x63c268
lea ecx, [esp + 0x1c]
mov esi, 0x5f69d4
call fcn.0040dc40
lea eax, [esp + 0x18]
push eax
mov ecx, ebx
call fcn.004eab20
cmp dword [ebx + 0x3d8], 0
je 0x4a558f
mov ecx, dword [ebp + 8]
mov edi, dword [ecx]
call fcn.004d7c40
mov dword [ebx + 0x1e0], 1
lea ecx, [esp + 0x1c]
jmp 0x4a4a46
push str.editurl:
push esi
call fcn.00577334
add esp, 8
test eax, eax
jne 0x4a5775
push edi
lea ecx, [ebx + 0xb8]
call fcn.00402310
push 0x63c268
lea ecx, [esp + 0x1c]
mov esi, 0x5f68c0
call fcn.0040dc40
test eax, eax
je 0x4a55e4
lea ecx, [esp + 0x18]
call fcn.004aa7d0
lea edx, [esp + 0x18]
push edx
mov ecx, ebx
call fcn.004eab20
mov esi, dword [ebx + 0x3d8]
test esi, esi
je 0x4a5630
mov eax, dword [ebx + 0x13c]
call fcn.004d4100
mov esi, eax
test esi, esi
je 0x4a5626
push edi
lea ecx, [esi + 0x10]
call fcn.00402310
mov eax, dword [esi + 0xc]
cmp dword [eax - 0xc], 0
lea ecx, [esi + 0xc]
jne 0x4a5626
push edi
call fcn.00402310
mov ecx, dword [ebp + 8]
mov edi, dword [ecx]
call fcn.004d7c40
mov dword [ebx + 0x1e0], 1
lea ecx, [esp + 0x1c]
jmp 0x4a4a46
push str.deluserurl:
push esi
call fcn.00577334
add esp, 8
test eax, eax
jne 0x4a59ab
mov edx, dword [edi]
mov eax, dword [edx - 0xc]
sub eax, 0xb
push eax
lea ecx, [esp + 0x3c]
push ecx
mov ecx, edi
call fcn.00401a60
mov eax, dword [eax]
push eax
call fcn.00577818
add esp, 4
lea ecx, [esp + 0x38]
mov esi, eax
call fcn.00401f20
push 0x63c6d0
call fcn.004e4440
push 0x63c268
lea ecx, [esp + 0x1c]
mov esi, 0x5f68c0
call fcn.0040dc40
test eax, eax
je 0x4a56ae
lea ecx, [esp + 0x18]
call fcn.004aa7d0
lea edx, [esp + 0x18]
push edx
mov ecx, ebx
call fcn.004eab20
push edi
lea ecx, [ebx + 0xb8]
mov dword [ebx + 0x1e0], 1
call fcn.00402310
lea ecx, [esp + 0x1c]
jmp 0x4a4a46
push str.addurl:
push esi
call fcn.00577334
add esp, 8
test eax, eax
jne 0x4a5902
mov eax, dword [ebx + 0x3dc]
push 0x63c268
lea ecx, [esp + 0x1c]
mov esi, 0x5f69f0
mov dword [esp + 0x3c], eax
call fcn.0040dc40
test eax, eax
je 0x4a5721
mov edi, dword [esp + 0x38]
lea ecx, [esp + 0x18]
push ecx
call fcn.004aa960
mov edi, dword [ebp + 8]
lea edx, [esp + 0x18]
push edx
mov ecx, ebx
call fcn.004eab20
mov esi, dword [ebx + 0x3d8]
test esi, esi
je 0x4a56ba
mov eax, dword [ebx + 0x13c]
call fcn.004d4100
mov esi, eax
test esi, esi
je 0x4a5763
push edi
lea ecx, [esi + 0x10]
call fcn.00402310
mov eax, dword [esi + 0xc]
cmp dword [eax - 0xc], 0
lea ecx, [esi + 0xc]
jne 0x4a5763
push edi
call fcn.00402310
mov ecx, dword [ebp + 8]
mov edi, dword [ecx]
call fcn.004d7c40
mov edi, dword [ebp + 8]
jmp 0x4a56ba
push str.addurl2:
push esi
call fcn.00577334
add esp, 8
test eax, eax
jne 0x4a59ab
lea ecx, [esp + 0x30]
call fcn.00402700
mov byte [esp + 0x78], 0x1a
cmp dword [ebx + 0x3dc], 0
je 0x4a58e6
push str.title
push 1
mov ecx, ebx
call fcn.004ed0f0
mov edi, eax
test edi, edi
je 0x4a57d6
mov esi, dword [ebx + 0x3dc]
add esi, 8
push edi
mov ecx, 1
call fcn.004ed360
mov edx, dword [edi]
mov eax, dword [edx + 8]
push edi
call eax
push 0x5e57c8
push 1
mov ecx, ebx
call fcn.004ed0f0
mov edi, eax
test edi, edi
je 0x4a5806
mov esi, dword [ebx + 0x3dc]
add esi, 0xc
push edi
mov ecx, 1
call fcn.004ed360
mov ecx, dword [edi]
mov edx, dword [ecx + 8]
push edi
call edx
mov ecx, dword [ebx + 0x3dc]
push 0x5d3dd4
add ecx, 4
call fcn.004021f0
mov eax, dword [ebx + 0x3dc]
xor edi, edi
cmp dword [eax + 0x18], edi
jle 0x4a5885
push edi
lea ecx, [esp + 0x34]
push str.submit_d
push ecx
call fcn.00404650
mov edx, dword [esp + 0x3c]
add esp, 0xc
push edx
push 1
mov ecx, ebx
call fcn.004ed0f0
mov esi, eax
test esi, esi
je 0x4a5877
call fcn.004ed420
mov ecx, dword [ebx + 0x3dc]
mov dword [esp + 0x38], eax
add ecx, 0x10
mov eax, edi
call fcn.004bfa80
mov eax, dword [eax]
mov ecx, dword [esp + 0x38]
mov dword [eax + 4], ecx
mov edx, dword [esi]
mov eax, dword [edx + 8]
push esi
call eax
mov ecx, dword [ebx + 0x3dc]
add edi, 1
cmp edi, dword [ecx + 0x18]
jl 0x4a5826
mov eax, dword [ebx + 0x3dc]
push 0x63c6d0
call fcn.004e43d0
mov eax, dword [ebx + 0x3dc]
mov edx, dword [eax + 0xc]
mov eax, dword [eax + 8]
push edx
push eax
lea ecx, [esp + 0x38]
push str._s_r_n__s__r_n_r_n
push ecx
call fcn.00404650
mov edx, dword [esp + 0x40]
add esp, 0x10
push 0
push 4
push edx
call fcn.0055e834
cmp eax, 6
jne 0x4a58e6
mov eax, dword [ebx + 0x3d8]
mov ecx, dword [eax + 0xa78]
mov edx, dword [eax + 0x20]
push 0
push ecx
push 0x8100
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [esp + 0x30]
mov dword [ebx + 0x1e0], 1
call fcn.00401f20
lea ecx, [esp + 0x1c]
jmp 0x4a4a46
push str.search:
push esi
call fcn.00577334
add esp, 8
test eax, eax
jne 0x4a59ab
mov eax, dword [edi]
mov eax, dword [eax - 0xc]
add eax, 0xfffffff9
push eax
lea ecx, [esp + 0x3c]
push ecx
mov ecx, edi
call fcn.00401a60
mov byte [esp + 0x78], 0x1b
mov ecx, dword [0x63c450]
push 1
call fcn.00463a10
mov edi, dword [esp + 0x38]
mov eax, dword [edi - 0xc]
xor ecx, ecx
add eax, 1
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00555176
mov esi, eax
add esp, 4
mov ecx, edi
sub esi, edi
jmp 0x4a5970
movzx edx, word [ecx]
mov word [esi + ecx], dx
add ecx, 2
test dx, dx
jne 0x4a5970
push 0
push eax
mov eax, dword [0x63c450]
mov ecx, dword [eax + 0x45a4]
push 0x8350
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [esp + 0x38]
call fcn.00401f20
lea ecx, [esp + 0x1c]
jmp 0x4a4a46
push 4
lea edx, [esp + 0x3c]
push edx
mov ecx, edi
call fcn.00401a60
mov eax, dword [eax]
push str..flv
push eax
call fcn.00577334
add esp, 8
test eax, eax
jne 0x4a59f4
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
jl 0x4a59ed
push 0x5d839c
push eax
call fcn.0057781d
add esp, 8
test eax, eax
je 0x4a59ed
sub eax, dword [edi]
sar eax, 1
jns 0x4a59f4
mov byte [esp + 0x17], 1
jmp 0x4a59f9
mov byte [esp + 0x17], 0
lea ecx, [esp + 0x38]
mov dword [esp + 0x24], 0
call fcn.00401f20
cmp byte [esp + 0x17], 0
je 0x4a5b94
lea ecx, [esp + 0x38]
call fcn.00402700
lea ecx, [esp + 0x34]
call fcn.00402700
lea ecx, [esp + 0x30]
call fcn.00402700
mov eax, dword [ebp + 8]
mov byte [esp + 0x78], 0x1e
mov eax, dword [eax]
push 0
push eax
lea ecx, [esp + 0x3c]
xor edi, edi
lea esi, [esp + 0x40]
call fcn.0044b470
mov ecx, dword [esp + 0x40]
add esp, 8
cmp dword [ecx - 0xc], edi
je 0x4a5b71
mov edx, dword [ebp + 8]
lea edi, [ebx + 0xb8]
push edx
mov ecx, edi
call fcn.00402310
mov esi, dword [ebx + 0x3d8]
test esi, esi
je 0x4a5ab7
mov eax, dword [ebx + 0x13c]
mov dword [ebx + 0x1e0], 0
call fcn.004d4100
mov esi, eax
test esi, esi
je 0x4a5aad
push edi
lea ecx, [esi + 0x10]
call fcn.00402310
mov eax, dword [esi + 0xc]
cmp dword [eax - 0xc], 0
lea ecx, [esi + 0xc]
jne 0x4a5aad
push edi
call fcn.00402310
mov ecx, dword [ebp + 8]
mov edi, dword [ecx]
call fcn.004d7c40
call fcn.00413680
push 0x63c268
lea ecx, [esp + 0x34]
mov esi, str.flvplay.htm
call fcn.0040dc40
test eax, eax
je 0x4a5b4d
lea edx, [esp + 0x34]
push edx
mov eax, str.____L1___
mov ecx, str.____L0___
lea ebx, [esp + 0x34]
call fcn.0044c0c0
add esp, 4
push str._bin
lea eax, [esp + 0x28]
push 0x63c670
push eax
call fcn.00401ba0
add esp, 0xc
push eax
mov eax, str.____L3___
mov ecx, str.____L2___
mov byte [esp + 0x7c], 0x1f
call fcn.0044c0c0
add esp, 4
lea ecx, [esp + 0x24]
mov byte [esp + 0x78], 0x1e
call fcn.00401f20
mov ecx, dword [ebp + 8]
push ecx
mov eax, str.____L5___
mov ecx, str.____L4___
call fcn.0044c0c0
mov ecx, dword [esp + 0x30]
add esp, 4
mov edx, ebx
push edx
call fcn.004eab20
lea ecx, [esp + 0x30]
call fcn.00401f20
lea ecx, [esp + 0x34]
call fcn.00401f20
lea ecx, [esp + 0x38]
call fcn.00401f20
lea ecx, [esp + 0x1c]
jmp 0x4a4a46
lea ecx, [esp + 0x30]
call fcn.00401f20
lea ecx, [esp + 0x34]
call fcn.00401f20
lea ecx, [esp + 0x38]
mov byte [esp + 0x78], 6
call fcn.00401f20
mov edi, dword [ebp + 8]
mov eax, dword [edi]
mov ecx, dword [eax - 0xc]
test ecx, ecx
jl 0x4a5bb9
push str.javascript:
push eax
call fcn.0057781d
add esp, 8
test eax, eax
je 0x4a5bb9
sub eax, dword [edi]
sar eax, 1
je 0x4a5cb0
cmp dword [ebx + 0x148], 3
je 0x4a5cb0
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
jl 0x4a5bea
push str.flvplay.htm
push eax
call fcn.0057781d
add esp, 8
test eax, eax
je 0x4a5bea
sub eax, dword [edi]
sar eax, 1
jns 0x4a5cb0
push 4
lea eax, [esp + 0x40]
push eax
mov ecx, edi
call fcn.00401a60
mov byte [esp + 0x78], 0x20
mov eax, dword [eax]
push str..zip
push eax
mov dword [esp + 0x2c], 2
call fcn.00577334
add esp, 8
test eax, eax
je 0x4a5cb0
push 4
lea ecx, [esp + 0x34]
push ecx
mov ecx, edi
call fcn.00401a60
mov dword [esp + 0x78], 0x21
mov eax, dword [eax]
push str..rar
push eax
mov dword [esp + 0x2c], 6
call fcn.00577334
add esp, 8
test eax, eax
je 0x4a5cb0
push 4
lea edx, [esp + 0x38]
push edx
mov ecx, edi
call fcn.00401a60
mov dword [esp + 0x78], 0x22
mov eax, dword [eax]
push str..exe
push eax
mov dword [esp + 0x2c], 0xe
call fcn.00577334
add esp, 8
test eax, eax
je 0x4a5cb0
push 4
lea eax, [esp + 0x3c]
push eax
mov ecx, edi
call fcn.00401a60
mov eax, dword [eax]
push str..cab
push eax
mov dword [esp + 0x2c], 0x1e
call fcn.00577334
add esp, 8
test eax, eax
mov byte [esp + 0x17], 1
jne 0x4a5cb5
mov byte [esp + 0x17], 0
test byte [esp + 0x24], 0x10
je 0x4a5cca
and dword [esp + 0x24], 0xffffffef
lea ecx, [esp + 0x38]
call fcn.00401f20
test byte [esp + 0x24], 8
je 0x4a5cdf
and dword [esp + 0x24], 0xfffffff7
lea ecx, [esp + 0x34]
call fcn.00401f20
test byte [esp + 0x24], 4
je 0x4a5cf4
and dword [esp + 0x24], 0xfffffffb
lea ecx, [esp + 0x30]
call fcn.00401f20
mov dword [esp + 0x78], 6
test byte [esp + 0x24], 2
je 0x4a5d11
and dword [esp + 0x24], 0xfffffffd
lea ecx, [esp + 0x3c]
call fcn.00401f20
cmp byte [esp + 0x17], 0
je 0x4a63c9
mov esi, dword [ebx + 0x3d8]
xor eax, eax
test esi, esi
mov dword [esp + 0x38], eax
je 0x4a5d3b
mov eax, dword [ebx + 0x13c]
call fcn.004d4100
mov dword [esp + 0x38], eax
xor ecx, ecx
test eax, eax
je 0x4a5d4b
cmp dword [eax], 1
jne 0x4a5d4b
mov ecx, 1
cmp dword [0x63c184], 0
je 0x4a5dbb
cmp dword [ebx + 0xa4], 0
je 0x4a5dbb
cmp dword [ebp + 0x14], 0
jne 0x4a5dbb
test ecx, ecx
jne 0x4a5dbb
cmp dword [0x63c0f0], ecx
mov esi, 1
je 0x4a5d76
xor esi, esi
or eax, 0xffffffff
cmp dword [0x63c16c], 0
jne 0x4a5d94
mov ecx, dword [ebx + 0x13c]
mov edx, dword [ebx + 0x3d8]
push ecx
call fcn.004d3f10
mov edx, dword [edi]
push eax
mov eax, dword [0x63c450]
mov ecx, dword [eax + 0x5120]
push 1
push 0
push esi
push 0
push 0
push edx
push ecx
call fcn.004d5b30
lea ecx, [esp + 0x1c]
jmp 0x4a4a46
cmp dword [ebx + 0x3d8], 0
je 0x4a63c9
mov esi, edi
call fcn.00453760
call fcn.00453960
cmp dword [ebx + 0xa4], 0
je 0x4a5e0e
lea eax, [ebx + 0xd0]
test eax, eax
je 0x4a5dea
mov eax, dword [eax + 0x20]
mov edx, dword [ebx + 0x3d8]
push eax
push edx
call fcn.004d5070
cmp dword [ebx + 0x198], 0
je 0x4a5e0e
mov eax, dword [ebx + 0x3d8]
push 0
push eax
call fcn.004d5070
mov ecx, dword [ebp + 8]
xor eax, eax
mov dword [ebx + 0xa4], eax
mov dword [ebx + 0x1e0], eax
mov dword [ebx + 0x20c], eax
mov eax, dword [ecx]
lea edi, [ebx + 0x278]
push 1
mov ebx, eax
call fcn.0047c8d0
test eax, eax
mov esi, dword [ebp + 8]
jge 0x4a5ee1
push 1
push esi
push 0
mov ecx, edi
call fcn.0055d4e4
mov edi, dword [esp + 0x2c]
push 1
push esi
add edi, 0x28c
push 0
mov ecx, edi
call fcn.0055d4e4
cmp dword [edi + 8], 0
jg 0x4a5e6e
call fcn.00555520
mov eax, dword [edi + 4]
mov edx, dword [eax]
cmp dword [edx - 0xc], 0x28
jle 0x4a5ee1
cmp dword [edi + 8], 0
jg 0x4a5e84
call fcn.00555520
mov ebx, eax
mov eax, dword [ebx]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, 0x24
or eax, ecx
jge 0x4a5ea6
push 0x24
mov ecx, ebx
call fcn.00401fe0
mov eax, dword [ebx]
mov ecx, 0x24
cmp dword [eax - 8], ecx
jge 0x4a5ebc
push 0x80070057
call fcn.00401f90
mov dword [eax - 0xc], ecx
mov eax, dword [ebx]
mov word [eax + 0x48], 0
cmp dword [edi + 8], 0
jg 0x4a5ed2
call fcn.00555520
mov edi, dword [edi + 4]
push 0x5e4e50
mov ecx, edi
call fcn.004043a0
cmp dword [esp + 0x38], 0
mov ebx, dword [esp + 0x2c]
je 0x4a5ffe
lea edi, [ebx + 0xb8]
push esi
mov ecx, edi
mov dword [ebx + 0x160], 2
call fcn.00402310
mov eax, dword [esi]
mov ecx, dword [eax - 0xc]
cmp ecx, 6
jle 0x4a5fdb
test ecx, ecx
jge 0x4a5f24
push 0x80070057
call fcn.00401f90
movzx edx, word [eax]
cmp dx, 0x72
jne 0x4a5fdb
cmp ecx, 1
jge 0x4a5f40
push 0x80070057
call fcn.00401f90
movzx edx, word [eax + 2]
cmp dx, 0x65
jne 0x4a5fdb
cmp ecx, 2
jge 0x4a5f5d
push 0x80070057
call fcn.00401f90
movzx edx, word [eax + 4]
cmp dx, 0x73
jne 0x4a5fdb
cmp ecx, 3
jge 0x4a5f76
push 0x80070057
call fcn.00401f90
movzx edx, word [eax + 6]
cmp dx, 0x3a
jne 0x4a5fdb
test ecx, ecx
jl 0x4a5fd4
push 0x5f6120
push eax
call fcn.0057781d
add esp, 8
test eax, eax
je 0x4a5fd4
mov ecx, dword [esi]
sub eax, ecx
sar eax, 1
mov edx, eax
test edx, edx
jle 0x4a5fd4
mov eax, dword [ecx - 0xc]
sub eax, edx
sub eax, 1
push eax
lea ecx, [esp + 0x40]
push ecx
mov ecx, esi
call fcn.00401a60
push eax
mov ecx, edi
mov byte [esp + 0x7c], 0x23
call fcn.00402310
lea ecx, [esp + 0x3c]
mov byte [esp + 0x78], 6
call fcn.00401f20
jmp 0x4a5fdb
mov ecx, edi
call fcn.00402180
mov esi, dword [esp + 0x38]
push edi
lea ecx, [esi + 0x10]
call fcn.00402310
mov ecx, dword [ebx + 0x3d8]
call fcn.004d7fc0
cmp esi, eax
jne 0x4a5ffe
mov edi, dword [edi]
call fcn.004d7c40
mov eax, dword [ebx + 0xb8]
cmp dword [eax - 0xc], 8
lea esi, [ebx + 0xb8]
mov dword [esp + 0x34], 0
mov dword [esp + 0x40], esi
jg 0x4a6021
or edi, 0xffffffff
jmp 0x4a603e
add eax, 0x10
push 0x2f
push eax
call fcn.0057787c
add esp, 8
test eax, eax
jne 0x4a6038
or edi, 0xffffffff
jmp 0x4a603e
sub eax, dword [esi]
sar eax, 1
mov edi, eax
lea ecx, [esp + 0x30]
call fcn.00402700
test edi, edi
mov byte [esp + 0x78], 0x24
jle 0x4a607c
push edi
lea edx, [esp + 0x40]
push edx
mov ecx, esi
call fcn.00414630
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x7c], 0x25
call fcn.00402330
lea ecx, [esp + 0x3c]
mov byte [esp + 0x78], 0x24
call fcn.00401f20
jmp 0x4a60a6
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jl 0x4a609c
push 0x5e50f8
push eax
call fcn.0057781d
add esp, 8
test eax, eax
je 0x4a609c
sub eax, dword [esi]
sar eax, 1
jns 0x4a60a6
push esi
lea ecx, [esp + 0x34]
call fcn.00402330
mov edi, dword [esp + 0x30]
lea eax, [ebx + 0x1c0]
mov dword [esp + 0x38], eax
mov eax, dword [eax]
push eax
push edi
call fcn.00577334
add esp, 8
test eax, eax
je 0x4a60cc
mov dword [esp + 0x34], 1
mov eax, dword [0x63c450]
cmp dword [eax + 0x2014], 0
jle 0x4a5e69
cmp dword [edi - 0xc], 0
mov eax, dword [eax + 0x2010]
mov eax, dword [eax]
mov ebx, dword [eax + 0x64]
je 0x4a611f
push 4
lea ecx, [esp + 0x40]
push ecx
mov ecx, esi
call fcn.00414630
mov byte [esp + 0x78], 0x26
or dword [esp + 0x24], 0x20
push 0x5ea930
mov ecx, eax
call fcn.004043e0
test eax, eax
jne 0x4a611f
test ebx, ebx
je 0x4a611f
mov bl, 1
jmp 0x4a6121
xor bl, bl
mov dword [esp + 0x78], 0x24
test byte [esp + 0x24], 0x20
je 0x4a6139
lea ecx, [esp + 0x3c]
call fcn.00401f20
test bl, bl
je 0x4a6352
cmp dword [esp + 0x34], 0
je 0x4a6367
mov edx, dword [esp + 0x2c]
mov esi, dword [edx + 0x3d8]
lea ebx, [esp + 0x30]
call fcn.004d8810
mov ecx, dword [esp + 0x38]
mov esi, eax
mov eax, ebx
push eax
call fcn.00402330
test esi, esi
jg 0x4a6205
cmp esi, 0xffffffff
je 0x4a6205
mov edi, dword [esp + 0x2c]
lea ecx, [esp + 0x34]
mov dword [edi + 0x1b8], 0
call fcn.00402700
mov byte [esp + 0x78], 0x27
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx]
push edx
lea eax, [esp + 0x38]
push str.URL:http:__data.alexa.com_data_cli10datsnbaurl_s_r_nMemorySave:true
push eax
call fcn.00404650
mov eax, dword [edi + 0x1c4]
add esp, 0xc
test eax, eax
je 0x4a61c8
push eax
mov eax, 0x63cd58
call fcn.0053c300
mov eax, dword [edi + 0x13c]
mov ecx, dword [esp + 0x34]
push 0x25
push eax
push 0x63cd58
call fcn.0053a520
test eax, eax
mov dword [edi + 0x1c4], eax
je 0x4a61f5
push 0x63cd58
mov ecx, eax
call fcn.0053b620
lea ecx, [esp + 0x34]
mov byte [esp + 0x78], 0x24
call fcn.00401f20
jmp 0x4a6211
mov ecx, dword [esp + 0x2c]
mov dword [ecx + 0x1b8], esi
mov edi, ecx
mov esi, dword [edi + 0x3d8]
lea ebx, [esp + 0x30]
call fcn.004d8920
test eax, eax
jge 0x4a6327
cmp eax, 0xffffffff
je 0x4a6327
lea ecx, [esp + 0x24]
mov dword [edi + 0x1bc], 0xfffffffd
call fcn.00402700
lea ecx, [esp + 0x34]
call fcn.00402700
mov bl, 0x29
mov byte [esp + 0x78], bl
mov esi, dword [esp + 0x38]
mov eax, dword [esi]
push eax
lea ecx, [esp + 0x40]
call fcn.004acc80
lea edx, [esp + 0x24]
mov byte [esp + 0x78], 0x2a
mov eax, dword [eax]
push edx
call fcn.00452d30
add esp, 4
lea ecx, [esp + 0x3c]
mov byte [esp + 0x78], bl
call fcn.00401f20
mov eax, dword [esi]
mov ecx, dword [esp + 0x24]
push eax
push ecx
lea edx, [esp + 0x3c]
push str.http:__www.google.com_search_clientnavclient_autoch_sfeaturesRankqinfo:_s
push edx
call fcn.00404650
add esp, 0x10
lea ecx, [esp + 0x38]
call fcn.00402700
mov byte [esp + 0x78], 0x2b
mov eax, dword [esp + 0x34]
push eax
lea ecx, [esp + 0x3c]
push str.URL:_s_r_nMemorySave:true
push ecx
call fcn.00404650
mov eax, dword [edi + 0x1c8]
add esp, 0xc
test eax, eax
je 0x4a62d8
push eax
mov eax, 0x63cd58
call fcn.0053c300
mov eax, dword [edi + 0x13c]
mov ecx, dword [esp + 0x38]
push 0x2d
push eax
push 0x63cd58
call fcn.0053a520
test eax, eax
mov dword [edi + 0x1c8], eax
je 0x4a6305
push 0x63cd58
mov ecx, eax
call fcn.0053b620
lea ecx, [esp + 0x38]
call fcn.00401f20
lea ecx, [esp + 0x34]
call fcn.00401f20
lea ecx, [esp + 0x24]
mov byte [esp + 0x78], 0x24
call fcn.00401f20
jmp 0x4a632d
mov dword [edi + 0x1bc], eax
cmp dword [edi + 0x1b8], 0
jg 0x4a633f
cmp dword [edi + 0x1bc], 0
jl 0x4a6367
mov ebx, dword [0x63c450]
add ebx, 0x18f4
call fcn.004a00b0
jmp 0x4a6367
cmp dword [esp + 0x34], 0
je 0x4a6367
mov ecx, dword [esp + 0x38]
lea edx, [esp + 0x30]
push edx
call fcn.00402330
mov edi, dword [esp + 0x2c]
cmp dword [edi + 0x198], 0
je 0x4a63c0
mov eax, dword [edi + 0x214]
add edi, 0x214
cmp dword [eax - 0xc], 0
jne 0x4a63c0
mov ecx, dword [esp + 0x40]
push edi
push ecx
call fcn.00453630
mov eax, dword [edi]
push eax
call fcn.0044adc0
add esp, 0xc
test eax, eax
je 0x4a63b9
mov esi, dword [0x63c450]
push 2
push 0
add esi, 0x2340
mov eax, edi
call fcn.0040b720
jmp 0x4a63c0
mov ecx, edi
call fcn.00402180
lea ecx, [esp + 0x30]
call fcn.00401f20
lea ecx, [esp + 0x1c]
call fcn.00401f20
lea ecx, [esp + 0x28]
call fcn.00401f20
lea ecx, [esp + 0x20]
call fcn.00401f20
lea ecx, [esp + 0x18]
call fcn.00401f20
xor al, al
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14