Function at 0x401000
Capabilities:
Allocate thread local storage
Create process on windows

Disassembly:
push 0x13c
push 0
push 0x417b08
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x417b0c], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x417b08], eax
call fcn.004052fb
call fcn.0040fc10
call fcn.0040f190
call fcn.0040ebb2
call fcn.0040e4e4
call fcn.0040e07e
call fcn.0040dfe4
call fcn.0040d570
call fcn.0040b6a4
call fcn.0040ae30
call fcn.0040a342
call fcn.004092fc
call fcn.0040921e
call fcn.00408dd3
call fcn.00407a1c
call fcn.00406fee
call fcn.00406d68
call fcn.0040642d
call fcn.0040622b
call fcn.00405915
call fcn.0040545d
call fcn.00405359
mov dword [section..data], 0x12
mov byte [0x417b60], 0
mov dword [section..data], 0x14
mov dword [section..data], 0x14
mov dword [section..data], 0x14
mov dword [section..data], 0x1b
mov ebp, 0x412f60
push ebp
push 0xffffffff
call fcn.0040947b
mov dword [0x417b48], eax
mov dword [section..data], 0x1c
mov ebp, 0x414b16
push ebp
push 0xffffffff
call fcn.0040947b
mov dword [0x417b44], eax
mov dword [section..data], 0x3b
mov dword [section..data], 0x3b
mov dword [section..data], 0x3b
mov dword [section..data], 0x3b
mov dword [section..data], 0x3b
mov dword [section..data], 0x3b
mov dword [section..data], 0x3b
mov dword [section..data], 0x3b
mov dword [section..data], 0x3e
mov dword [section..data], 0x3e
mov dword [section..data], 0x3e
mov dword [section..data], 0x3e
mov dword [section..data], 0x3e
mov dword [section..data], 0x112
push 0x122
push 0x230
push 0
push 0
call fcn.00402e10
mov dword [section..data], 0x113
mov eax, str.World_Of_Kung_Fu__Compiler_Ver:_603_
push eax
push dword [0x417b38]
call fcn.00407a87
mov dword [section..data], 0x114
call fcn.00403777
mov dword [section..data], 0x117
xor eax, eax
push eax
xor eax, eax
push eax
push 0
mov eax, str.WokServerWokSql_
push eax
mov eax, str.__defaults_filemy.ini
push eax
mov eax, 0x41206c
push eax
xor eax, eax
push eax
mov eax, str.MySQL
push eax
push 0
push 0x417b9c
call fcn.0040403b
mov dword [section..data], 0x118
xor eax, eax
push eax
xor eax, eax
push eax
push 0
mov eax, str.WokServerCheckVersion_
push eax
mov eax, 0x412044
push eax
mov eax, str.xCheckVersion.exe
push eax
mov eax, 1
push eax
mov eax, str.xCheVer
push eax
push 0
push 0x417b64
call fcn.0040403b
mov dword [section..data], 0x119
xor eax, eax
push eax
xor eax, eax
push eax
push 0
mov eax, str.WokServerZoneSvr_
push eax
mov eax, 0x412044
push eax
mov eax, str.xCacheServer.exe
push eax
mov eax, 2
push eax
mov eax, str.xCacheSer
push eax
push 0
push 0x417b80
call fcn.0040403b
mov dword [section..data], 0x11a
xor eax, eax
push eax
xor eax, eax
push eax
push 0
mov eax, str.WokServerZoneSvr_
push eax
mov eax, 0x412044
push eax
mov eax, str.xExchangeServer.exe
push eax
mov eax, 3
push eax
mov eax, str.xExchSer
push eax
push 0
push 0x417bf0
call fcn.0040403b
mov dword [section..data], 0x11b
xor eax, eax
push eax
xor eax, eax
push eax
push 0
mov eax, str.WokServerZoneSvr_
push eax
mov eax, 0x412044
push eax
mov eax, str.xLogServer.exe
push eax
mov eax, 4
push eax
mov eax, str.xLogSer
push eax
push 0
push 0x417c0c
call fcn.0040403b
mov dword [section..data], 0x11c
xor eax, eax
push eax
xor eax, eax
push eax
push 0
mov eax, str.WokServerLoginServer_
push eax
mov eax, 0x412044
push eax
mov eax, str.LoginServer.exe
push eax
mov eax, 5
push eax
mov eax, str.LoginSer
push eax
push 0
push 0x417bb8
call fcn.0040403b
mov dword [section..data], 0x11d
xor eax, eax
push eax
xor eax, eax
push eax
push 0
mov eax, str.WokServerZoneSvr_
push eax
mov eax, 0x412044
push eax
mov eax, str.xDominator.exe
push eax
mov eax, 6
push eax
mov eax, str.xDom
push eax
push 0
push 0x417c28
call fcn.0040403b
mov dword [section..data], 0x11e
xor eax, eax
push eax
xor eax, eax
push eax
push 0
mov eax, str.WokServerZoneSvr_
push eax
mov eax, 0x412044
push eax
mov eax, str.ZoneServer.exe
push eax
mov eax, 7
push eax
mov eax, str.ZoneSer
push eax
push 0
push 0x417bd4
call fcn.0040403b
mov dword [section..data], 0x120
push 0
lea eax, [0x403593]
push eax
call fcn.004053b1
mov dword [section..data], 0x122
mov dword [section..data], 0x123
call fcn.00407bdb
mov dword [0x417b58], eax
mov dword [section..data], 0x125
push dword [0x417b58]
mov dword [section..data], 0x126
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x402494
mov dword [section..data], 0x127
call fcn.0040e5fe
push eax
mov dword [section..data], 0x128
mov ebx, dword [0x417b34]
cmp ebx, dword [esp]
jne 0x401546
mov dword [section..data], 0x129
mov eax, str.mysqld.exe
push eax
call fcn.004041d1
and eax, eax
je 0x40150f
mov dword [section..data], 0x12a
lea ebp, [0x417b9c]
cmp byte [ebp + 0x1a], 0
je 0x4014cf
mov dword [section..data], 0x12b
push 0x417b9c
call fcn.00403b83
mov dword [section..data], 0x12c
jmp 0x4014f9
mov dword [section..data], 0x12c
mov dword [section..data], 0x12e
push 0x10
mov eax, str.Found_another_copy_of_MySQL__mysqld.exe__is_running__rPlease_close_it_and_use_this_program_To_turn_on_MySQL_
push eax
mov eax, str.Error
push eax
call fcn.00406264
mov dword [section..data], 0x12f
mov dword [section..data], 0x130
jmp 0x40152d
mov dword [section..data], 0x130
mov dword [section..data], 0x131
push 0x417b9c
call fcn.00403b83
mov dword [section..data], 0x132
mov dword [section..data], 0x134
jmp 0x40247a
mov dword [section..data], 0x134
mov ebx, dword [0x417b54]
cmp ebx, dword [esp]
jne 0x40199c
mov dword [section..data], 0x135
lea ebp, [0x417b9c]
cmp byte [ebp + 0x1a], 0
je 0x401579
xor eax, eax
jmp 0x40157e
mov eax, 1
and eax, eax
je 0x4015b1
mov dword [section..data], 0x136
push 0x10
mov eax, str.MySQL_service_is_not_running_
push eax
mov eax, str.Error
push eax
call fcn.00406264
mov dword [section..data], 0x13a
jmp 0x401983
mov dword [section..data], 0x13a
lea ebp, [0x417b9c]
cmp byte [ebp + 0x1a], 0
je 0x4015da
lea ebp, [0x417b64]
cmp byte [ebp + 0x1a], 0
je 0x4015da
mov eax, 1
jmp 0x4015dc
xor eax, eax
and eax, eax
je 0x4015f3
lea ebp, [0x417b80]
cmp byte [ebp + 0x1a], 0
je 0x4015f3
mov eax, 1
jmp 0x4015f5
xor eax, eax
and eax, eax
je 0x40160c
lea ebp, [0x417bf0]
cmp byte [ebp + 0x1a], 0
je 0x40160c
mov eax, 1
jmp 0x40160e
xor eax, eax
and eax, eax
je 0x401625
lea ebp, [0x417c0c]
cmp byte [ebp + 0x1a], 0
je 0x401625
mov eax, 1
jmp 0x401627
xor eax, eax
and eax, eax
je 0x40163e
lea ebp, [0x417bb8]
cmp byte [ebp + 0x1a], 0
je 0x40163e
mov eax, 1
jmp 0x401640
xor eax, eax
and eax, eax
je 0x401657
lea ebp, [0x417c28]
cmp byte [ebp + 0x1a], 0
je 0x401657
mov eax, 1
jmp 0x401659
xor eax, eax
and eax, eax
je 0x401670
lea ebp, [0x417bd4]
cmp byte [ebp + 0x1a], 0
je 0x401670
mov eax, 1
jmp 0x401672
xor eax, eax
and eax, eax
je 0x4016a5
mov dword [section..data], 0x13b
push 0x40
mov eax, str.All_services_are_already_Running_
push eax
mov eax, str.Info
push eax
call fcn.00406264
mov dword [section..data], 0x13f
jmp 0x401983
mov dword [section..data], 0x13f
lea ebp, [0x417b9c]
cmp byte [ebp + 0x1a], 0
je 0x4016ce
lea ebp, [0x417b64]
cmp byte [ebp + 0x1a], 0
je 0x4016ce
mov eax, 1
jmp 0x4016d0
xor eax, eax
and eax, eax
je 0x4016e7
lea ebp, [0x417b80]
cmp byte [ebp + 0x1a], 0
je 0x4016e7
mov eax, 1
jmp 0x4016e9
xor eax, eax
and eax, eax
je 0x401700
lea ebp, [0x417bf0]
cmp byte [ebp + 0x1a], 0
je 0x401700
mov eax, 1
jmp 0x401702
xor eax, eax
and eax, eax
je 0x401719
lea ebp, [0x417c0c]
cmp byte [ebp + 0x1a], 0
je 0x401719
mov eax, 1
jmp 0x40171b
xor eax, eax
and eax, eax
je 0x401732
lea ebp, [0x417bb8]
cmp byte [ebp + 0x1a], 0
je 0x401732
mov eax, 1
jmp 0x401734
xor eax, eax
and eax, eax
je 0x40174b
lea ebp, [0x417c28]
cmp byte [ebp + 0x1a], 0
je 0x40174b
mov eax, 1
jmp 0x40174d
xor eax, eax
and eax, eax
je 0x401764
lea ebp, [0x417bd4]
cmp byte [ebp + 0x1a], 0
je 0x401764
mov eax, 1
jmp 0x401766
xor eax, eax
and eax, eax
je 0x40176e
xor eax, eax
jmp 0x401773
mov eax, 1
and eax, eax
je 0x401959
mov dword [section..data], 0x140
push 0x417b64
call fcn.00403b83
mov dword [section..data], 0x141
push 0x417b80
call fcn.00403b83
mov dword [section..data], 0x142
push 0x417bf0
call fcn.00403b83
mov dword [section..data], 0x143
push 0x417c0c
call fcn.00403b83
mov dword [section..data], 0x144
push 0x417bb8
call fcn.00403b83
mov dword [section..data], 0x145
push 0x417c28
call fcn.00403b83
mov dword [section..data], 0x146
push 0x417bd4
call fcn.00403b83
mov dword [section..data], 0x149
lea ebp, [0x417b64]
cmp dword [ebp + 0x15], 0
je 0x401830
lea ebp, [0x417b80]
cmp dword [ebp + 0x15], 0
je 0x401830
mov eax, 1
jmp 0x401832
xor eax, eax
and eax, eax
je 0x401849
lea ebp, [0x417bf0]
cmp dword [ebp + 0x15], 0
je 0x401849
mov eax, 1
jmp 0x40184b
xor eax, eax
and eax, eax
je 0x401862
lea ebp, [0x417c0c]
cmp dword [ebp + 0x15], 0
je 0x401862
mov eax, 1
jmp 0x401864
xor eax, eax
and eax, eax
je 0x40187b
lea ebp, [0x417bb8]
cmp dword [ebp + 0x15], 0
je 0x40187b
mov eax, 1
jmp 0x40187d
xor eax, eax
and eax, eax
je 0x401894
lea ebp, [0x417c28]
cmp dword [ebp + 0x15], 0
je 0x401894
mov eax, 1
jmp 0x401896
xor eax, eax
and eax, eax
je 0x4018ad
lea ebp, [0x417bd4]
cmp dword [ebp + 0x15], 0
je 0x4018ad
mov eax, 1
jmp 0x4018af
xor eax, eax
and eax, eax
je 0x401943
mov dword [section..data], 0x14a
push 0x417b64
call fcn.004033d4
mov dword [section..data], 0x14b
push 0x417b80
call fcn.004033d4
mov dword [section..data], 0x14c
push 0x417bf0
call fcn.004033d4
mov dword [section..data], 0x14d
push 0x417c0c
call fcn.004033d4
mov dword [section..data], 0x14e
push 0x417bb8
call fcn.004033d4
mov dword [section..data], 0x14f
push 0x417c28
call fcn.004033d4
mov dword [section..data], 0x150
push 0x417bd4
call fcn.004033d4
mov dword [section..data], 0x151
mov dword [section..data], 0x152
jmp 0x401983
mov dword [section..data], 0x152
mov dword [section..data], 0x153
push 0x10
mov eax, str.Unable_to_turn_on_all_services_
push eax
mov eax, str.Error
push eax
call fcn.00406264
mov dword [section..data], 0x154
mov dword [section..data], 0x156
jmp 0x40247a
mov dword [section..data], 0x156
mov ebx, dword [0x417b4c]
cmp ebx, dword [esp]
jne 0x401b45
mov dword [section..data], 0x15a
lea ebp, [0x417b9c]
cmp byte [ebp + 0x1a], 0
je 0x4019de
lea ebp, [0x417b64]
cmp byte [ebp + 0x1a], 0
je 0x4019de
mov eax, 1
jmp 0x4019e0
xor eax, eax
and eax, eax
je 0x4019f7
lea ebp, [0x417b80]
cmp byte [ebp + 0x1a], 0
je 0x4019f7
mov eax, 1
jmp 0x4019f9
xor eax, eax
and eax, eax
je 0x401a10
lea ebp, [0x417bf0]
cmp byte [ebp + 0x1a], 0
je 0x401a10
mov eax, 1
jmp 0x401a12
xor eax, eax
and eax, eax
je 0x401a29
lea ebp, [0x417c0c]
cmp byte [ebp + 0x1a], 0
je 0x401a29
mov eax, 1
jmp 0x401a2b
xor eax, eax
and eax, eax
je 0x401a42
lea ebp, [0x417bb8]
cmp byte [ebp + 0x1a], 0
je 0x401a42
mov eax, 1
jmp 0x401a44
xor eax, eax
and eax, eax
je 0x401a5b
lea ebp, [0x417c28]
cmp byte [ebp + 0x1a], 0
je 0x401a5b
mov eax, 1
jmp 0x401a5d
xor eax, eax
and eax, eax
je 0x401a74
lea ebp, [0x417bd4]
cmp byte [ebp + 0x1a], 0
je 0x401a74
mov eax, 1
jmp 0x401a76
xor eax, eax
and eax, eax
je 0x401b02
mov dword [section..data], 0x15b
push 0x417b64
call fcn.004033d4
mov dword [section..data], 0x15c
push 0x417b80
call fcn.004033d4
mov dword [section..data], 0x15e
push 0x417c0c
call fcn.004033d4
mov dword [section..data], 0x15f
push 0x417bb8
call fcn.004033d4
mov dword [section..data], 0x160
push 0x417c28
call fcn.004033d4
mov dword [section..data], 0x161
push 0x417bd4
call fcn.004033d4
mov dword [section..data], 0x162
jmp 0x401b2c
mov dword [section..data], 0x162
mov dword [section..data], 0x163
push 0x10
mov eax, str.All_services_are_not_running_
push eax
mov eax, str.Error
push eax
call fcn.00406264
mov dword [section..data], 0x164
mov dword [section..data], 0x166
jmp 0x40247a
mov dword [section..data], 0x166
mov ebx, dword [0x417b14]
cmp ebx, dword [esp]
jne 0x401d24
mov dword [section..data], 0x16a
lea ebp, [0x417b9c]
cmp byte [ebp + 0x1a], 0
jne 0x401b82
lea ebp, [0x417b64]
cmp byte [ebp + 0x1a], 0
jne 0x401b82
jmp 0x401b89
mov eax, 1
jmp 0x401b8b
xor eax, eax
and eax, eax
jne 0x401b9d
lea ebp, [0x417b80]
cmp byte [ebp + 0x1a], 0
jne 0x401b9d
jmp 0x401ba4
mov eax, 1
jmp 0x401ba6
xor eax, eax
and eax, eax
jne 0x401bb8
lea ebp, [0x417bf0]
cmp byte [ebp + 0x1a], 0
jne 0x401bb8
jmp 0x401bbf
mov eax, 1
jmp 0x401bc1
xor eax, eax
and eax, eax
jne 0x401bd3
lea ebp, [0x417c0c]
cmp byte [ebp + 0x1a], 0
jne 0x401bd3
jmp 0x401bda
mov eax, 1
jmp 0x401bdc
xor eax, eax
and eax, eax
jne 0x401bee
lea ebp, [0x417bb8]
cmp byte [ebp + 0x1a], 0
jne 0x401bee
jmp 0x401bf5
mov eax, 1
jmp 0x401bf7
xor eax, eax
and eax, eax
jne 0x401c09
lea ebp, [0x417c28]
cmp byte [ebp + 0x1a], 0
jne 0x401c09
jmp 0x401c10
mov eax, 1
jmp 0x401c12
xor eax, eax
and eax, eax
jne 0x401c24
lea ebp, [0x417bd4]
cmp byte [ebp + 0x1a], 0
jne 0x401c24
jmp 0x401c2b
mov eax, 1
jmp 0x401c2d
xor eax, eax
and eax, eax
je 0x401ce1
mov dword [section..data], 0x16b
push 0x417b9c
call fcn.004037e5
mov dword [section..data], 0x16c
push 0x417b64
call fcn.004037e5
mov dword [section..data], 0x16d
push 0x417b80
call fcn.004037e5
mov dword [section..data], 0x16e
push 0x417bf0
call fcn.004037e5
mov dword [section..data], 0x16f
push 0x417c0c
call fcn.004037e5
mov dword [section..data], 0x170
push 0x417bb8
call fcn.004037e5
mov dword [section..data], 0x171
push 0x417c28
call fcn.004037e5
mov dword [section..data], 0x172
push 0x417bd4
call fcn.004037e5
mov dword [section..data], 0x173
jmp 0x401d0b
mov dword [section..data], 0x173
mov dword [section..data], 0x174
push 0x40
mov eax, str.No_service_is_running_
push eax
mov eax, str.Info
push eax
call fcn.00406264
mov dword [section..data], 0x175
mov dword [section..data], 0x177
jmp 0x40247a
mov dword [section..data], 0x177
mov ebx, dword [0x417b3c]
cmp ebx, dword [esp]
jne 0x401df2
mov dword [section..data], 0x178
lea ebp, [0x417b9c]
cmp byte [ebp + 0x1a], 0
je 0x401daf
mov dword [section..data], 0x179
mov eax, 0x412050
push eax
call fcn.00406a00
and eax, eax
je 0x401d70
xor eax, eax
jmp 0x401d75
mov eax, 1
and eax, eax
je 0x401d99
mov dword [section..data], 0x17a
push 0x10
mov eax, str.Missing_program_RegAcc.exe_
push eax
mov eax, str.Error
push eax
call fcn.00406264
mov dword [section..data], 0x17b
mov dword [section..data], 0x17c
jmp 0x401dd9
mov dword [section..data], 0x17c
mov dword [section..data], 0x17d
push 0x10
mov eax, str.MySQL_service_is_not_running_
push eax
mov eax, str.Error
push eax
call fcn.00406264
mov dword [section..data], 0x17e
mov dword [section..data], 0x180
jmp 0x40247a
mov dword [section..data], 0x180
mov ebx, dword [0x417b1c]
cmp ebx, dword [esp]
jne 0x401f7b
mov dword [section..data], 0x184
lea ebp, [0x417b9c]
cmp byte [ebp + 0x1a], 0
je 0x401e34
lea ebp, [0x417b64]
cmp byte [ebp + 0x1a], 0
je 0x401e34
mov eax, 1
jmp 0x401e36
xor eax, eax
and eax, eax
je 0x401e4d
lea ebp, [0x417b80]
cmp byte [ebp + 0x1a], 0
je 0x401e4d
mov eax, 1
jmp 0x401e4f
xor eax, eax
and eax, eax
je 0x401e66
lea ebp, [0x417bf0]
cmp byte [ebp + 0x1a], 0
je 0x401e66
mov eax, 1
jmp 0x401e68
xor eax, eax
and eax, eax
je 0x401e7f
lea ebp, [0x417c0c]
cmp byte [ebp + 0x1a], 0
je 0x401e7f
mov eax, 1
jmp 0x401e81
xor eax, eax
and eax, eax
je 0x401e98
lea ebp, [0x417bb8]
cmp byte [ebp + 0x1a], 0
je 0x401e98
mov eax, 1
jmp 0x401e9a
xor eax, eax
and eax, eax
je 0x401eb1
lea ebp, [0x417c28]
cmp byte [ebp + 0x1a], 0
je 0x401eb1
mov eax, 1
jmp 0x401eb3
xor eax, eax
and eax, eax
je 0x401eca
lea ebp, [0x417bd4]
cmp byte [ebp + 0x1a], 0
je 0x401eca
mov eax, 1
jmp 0x401ecc
xor eax, eax
and eax, eax
je 0x401f38
mov dword [section..data], 0x185
mov eax, str.KungFuWorld_
push eax
mov eax, 0x412044
push eax
mov eax, str.PatcherKf.exe
push eax
call fcn.0040649a
and eax, eax
je 0x401ef9
xor eax, eax
jmp 0x401efe
mov eax, 1
and eax, eax
je 0x401f22
mov dword [section..data], 0x186
push 0x10
mov eax, str.Missing_program_PatcherKf.exe_
push eax
mov eax, str.Error
push eax
call fcn.00406264
mov dword [section..data], 0x187
mov dword [section..data], 0x188
jmp 0x401f62
mov dword [section..data], 0x188
mov dword [section..data], 0x189
push 0x10
mov eax, str.All_services_are_not_running_
push eax
mov eax, str.Error
push eax
call fcn.00406264
mov dword [section..data], 0x18a
mov dword [section..data], 0x18c
jmp 0x40247a
mov dword [section..data], 0x18c
mov ebx, dword [0x417b2c]
cmp ebx, dword [esp]
jne 0x4020bc
mov dword [section..data], 0x190
lea ebp, [0x417b9c]
cmp byte [ebp + 0x1a], 0
je 0x401fbd
lea ebp, [0x417b64]
cmp byte [ebp + 0x1a], 0
je 0x401fbd
mov eax, 1
jmp 0x401fbf
xor eax, eax
and eax, eax
je 0x401fd6
lea ebp, [0x417b80]
cmp byte [ebp + 0x1a], 0
je 0x401fd6
mov eax, 1
jmp 0x401fd8
xor eax, eax
and eax, eax
je 0x401fef
lea ebp, [0x417bf0]
cmp byte [ebp + 0x1a], 0
je 0x401fef
mov eax, 1
jmp 0x401ff1
xor eax, eax
and eax, eax
je 0x402008
lea ebp, [0x417c0c]
cmp byte [ebp + 0x1a], 0
je 0x402008
mov eax, 1
jmp 0x40200a
xor eax, eax
and eax, eax
je 0x402021
lea ebp, [0x417bb8]
cmp byte [ebp + 0x1a], 0
je 0x402021
mov eax, 1
jmp 0x402023
xor eax, eax
and eax, eax
je 0x40203a
lea ebp, [0x417c28]
cmp byte [ebp + 0x1a], 0
je 0x40203a
mov eax, 1
jmp 0x40203c
xor eax, eax
and eax, eax
je 0x402053
lea ebp, [0x417bd4]
cmp byte [ebp + 0x1a], 0
je 0x402053
mov eax, 1
jmp 0x402055
xor eax, eax
and eax, eax
je 0x402079
mov dword [section..data], 0x191
push 0x417bf0
call fcn.004033d4
mov dword [section..data], 0x192
jmp 0x4020a3
mov dword [section..data], 0x192
mov dword [section..data], 0x193
push 0x10
mov eax, str.All_services_are_not_running_
push eax
mov eax, str.Error
push eax
call fcn.00406264
mov dword [section..data], 0x194
mov dword [section..data], 0x196
jmp 0x40247a
mov dword [section..data], 0x196
mov ebx, dword [0x417b40]
cmp ebx, dword [esp]
jne 0x4021f5
mov dword [section..data], 0x197
mov eax, str.RTService.exe
push eax
call fcn.004041d1
and eax, eax
je 0x40211d
mov dword [section..data], 0x198
push 0x40
mov eax, str.RTService.exe_is_already_running_
push eax
mov eax, str.Info
push eax
call fcn.00406264
mov dword [section..data], 0x199
jmp 0x4021dc
mov dword [section..data], 0x199
mov dword [section..data], 0x19a
mov eax, str.WokServer_rtservice_rtservice.exe
push eax
call fcn.0040e08a
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xffffffff
jne 0x40214a
cmp edi, 0xffffffff
je 0x40214e
xor eax, eax
jmp 0x402153
mov eax, 1
or eax, eax
je 0x402183
mov dword [section..data], 0x19b
push 0x10
mov eax, str.Missing_program_rtservice.exe_
push eax
mov eax, str.Error
push eax
call fcn.00406264
mov dword [section..data], 0x19c
jmp 0x4021d2
mov dword [section..data], 0x19c
mov dword [section..data], 0x19d
push 1
mov eax, str.WokServer_rtservice_
push eax
mov eax, str._install
push eax
mov eax, str.rtservice.exe
push eax
mov eax, str.RunAS
push eax
push 0
call sub.SHELL32.dll_ShellExecuteW
mov dword [section..data], 0x19e
push 0x3e8
call fcn.00407921
mov dword [section..data], 0x19f
mov dword [section..data], 0x1a0
mov dword [section..data], 0x1a2
jmp 0x40247a
mov dword [section..data], 0x1a2
mov ebx, dword [0x417b10]
cmp ebx, dword [esp]
jne 0x4022d2
mov dword [section..data], 0x1a3
mov eax, str.WokServer_rtservice_rtservice.exe
push eax
call fcn.0040e08a
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xffffffff
jne 0x402231
cmp edi, 0xffffffff
je 0x402235
xor eax, eax
jmp 0x40223a
mov eax, 1
or eax, eax
je 0x40226a
mov dword [section..data], 0x1a4
push 0x10
mov eax, str.Missing_program_rtservice.exe_
push eax
mov eax, str.Error
push eax
call fcn.00406264
mov dword [section..data], 0x1a5
jmp 0x4022b9
mov dword [section..data], 0x1a5
mov dword [section..data], 0x1a6
push 1
mov eax, str.WokServer_rtservice_
push eax
mov eax, str._remove
push eax
mov eax, str.rtservice.exe
push eax
mov eax, str.RunAS
push eax
push 0
call sub.SHELL32.dll_ShellExecuteW
mov dword [section..data], 0x1a7
push 0x3e8
call fcn.00407921
mov dword [section..data], 0x1a8
mov dword [section..data], 0x1aa
jmp 0x40247a
mov dword [section..data], 0x1aa
mov ebx, dword [0x417b30]
cmp ebx, dword [esp]
jne 0x402305
mov dword [section..data], 0x1ab
call fcn.00403d95
mov dword [section..data], 0x1ad
jmp 0x40247a
mov dword [section..data], 0x1ad
mov ebx, dword [0x417b28]
cmp ebx, dword [esp]
jne 0x40247a
mov dword [section..data], 0x1ae
mov eax, str.WokServerCheckVersionlog_
push eax
push 0x417b61
call fcn.004035f1
mov dword [section..data], 0x1af
mov eax, str.WokServerLoginServerlog_
push eax
push 0x417b5e
call fcn.004035f1
mov dword [section..data], 0x1b0
mov eax, str.WokServer_rtservicelog_
push eax
push 0x417b5f
call fcn.004035f1
mov dword [section..data], 0x1b1
mov eax, str.WokServerZoneSvrlog_
push eax
push 0x417b5d
call fcn.004035f1
mov dword [section..data], 0x1b2
mov eax, str.KungFuWorldlog_
push eax
push 0x417b5c
call fcn.004035f1
mov dword [section..data], 0x1b5
lea ebp, [0x417b61]
cmp byte [ebp], 0
je 0x4023c9
lea ebp, [0x417b5e]
cmp byte [ebp], 0
je 0x4023c9
mov eax, 1
jmp 0x4023cb
xor eax, eax
and eax, eax
je 0x4023e2
lea ebp, [0x417b5f]
cmp byte [ebp], 0
je 0x4023e2
mov eax, 1
jmp 0x4023e4
xor eax, eax
and eax, eax
je 0x4023fb
lea ebp, [0x417b5d]
cmp byte [ebp], 0
je 0x4023fb
mov eax, 1
jmp 0x4023fd
xor eax, eax
and eax, eax
je 0x402414
lea ebp, [0x417b5c]
cmp byte [ebp], 0
je 0x402414
mov eax, 1
jmp 0x402416
xor eax, eax
and eax, eax
je 0x402446
mov dword [section..data], 0x1b6
push 0x40
mov eax, str.All_directory_log_files_successfully_cleaned_
push eax
mov eax, str.Info
push eax
call fcn.00406264
mov dword [section..data], 0x1b7
jmp 0x402470
mov dword [section..data], 0x1b7
mov dword [section..data], 0x1b8
push 0x10
mov eax, str.Unable_to_clean_log_files_
push eax
mov eax, str.Error
push eax
call fcn.00406264
mov dword [section..data], 0x1b9
mov dword [section..data], 0x1bb
pop eax
mov dword [section..data], 0x1bd
jmp 0x402d8d
mov dword [section..data], 0x1bd
mov ebx, 0x10000
cmp ebx, dword [esp]
jne 0x40273b
mov dword [section..data], 0x1be
push 0x417b9c
call fcn.00403989
mov dword [section..data], 0x1bf
push 0x417b64
call fcn.00403989
mov dword [section..data], 0x1c0
push 0x417b80
call fcn.00403989
mov dword [section..data], 0x1c1
push 0x417bf0
call fcn.00403989
mov dword [section..data], 0x1c2
push 0x417c0c
call fcn.00403989
mov dword [section..data], 0x1c3
push 0x417bb8
call fcn.00403989
mov dword [section..data], 0x1c4
push 0x417c28
call fcn.00403989
mov dword [section..data], 0x1c5
push 0x417bd4
call fcn.00403989
mov dword [section..data], 0x1ca
lea ebp, [0x417b9c]
cmp byte [ebp + 0x1a], 0
je 0x402575
lea ebp, [0x417b64]
cmp byte [ebp + 0x1a], 0
je 0x402575
mov eax, 1
jmp 0x402577
xor eax, eax
and eax, eax
je 0x40258e
lea ebp, [0x417b80]
cmp byte [ebp + 0x1a], 0
je 0x40258e
mov eax, 1
jmp 0x402590
xor eax, eax
and eax, eax
je 0x4025a7
lea ebp, [0x417bf0]
cmp byte [ebp + 0x1a], 0
je 0x4025a7
mov eax, 1
jmp 0x4025a9
xor eax, eax
and eax, eax
je 0x4025c0
lea ebp, [0x417c0c]
cmp byte [ebp + 0x1a], 0
je 0x4025c0
mov eax, 1
jmp 0x4025c2
xor eax, eax
and eax, eax
je 0x4025d9
lea ebp, [0x417bb8]
cmp byte [ebp + 0x1a], 0
je 0x4025d9
mov eax, 1
jmp 0x4025db
xor eax, eax
and eax, eax
je 0x4025f2
lea ebp, [0x417c28]
cmp byte [ebp + 0x1a], 0
je 0x4025f2
mov eax, 1
jmp 0x4025f4
xor eax, eax
and eax, eax
je 0x40260b
lea ebp, [0x417bd4]
cmp byte [ebp + 0x1a], 0
je 0x40260b
mov eax, 1
jmp 0x40260d
xor eax, eax
and eax, eax
je 0x40269e
mov dword [section..data], 0x1cb
push 0x64
push 8
push 0
call fcn.00405e5f
mov dword [section..data], 0x1cc
push 0
call fcn.00405471
and eax, eax
je 0x402685
mov dword [section..data], 0x1cd
push dword [0x417b48]
call fcn.00409492
push eax
push 0
call fcn.00405483
mov dword [section..data], 0x1ce
mov eax, str.Kung_Fu:_All_Services_are_running
push eax
push 0
call fcn.0040550a
mov dword [section..data], 0x1cf
mov dword [section..data], 0x1d0
jmp 0x402722
mov dword [section..data], 0x1d0
mov dword [section..data], 0x1d1
push 0
push 8
push 0
call fcn.00405e5f
mov dword [section..data], 0x1d2
push 1
call fcn.00405471
and eax, eax
je 0x402718
mov dword [section..data], 0x1d3
push dword [0x417b44]
call fcn.00409492
push eax
push 1
call fcn.00405483
mov dword [section..data], 0x1d4
mov eax, str.Kung_Fu:_Services_are_not_running
push eax
push 1
call fcn.0040550a
mov dword [section..data], 0x1d5
mov dword [section..data], 0x1d6
mov dword [section..data], 0x1d8
jmp 0x402d8d
mov dword [section..data], 0x1d8
mov ebx, 0x333c
cmp ebx, dword [esp]
jne 0x402863
mov dword [section..data], 0x1da
push 0x44
mov eax, str.Do_you_want_to_exit_
push eax
mov eax, str.Info
push eax
call fcn.00406264
mov ebx, eax
cmp ebx, 6
jne 0x40284a
mov dword [section..data], 0x1dc
mov eax, str.World_Of_Kung_Fu___Shutting_down...
push eax
push dword [0x417b38]
call fcn.00407a87
mov dword [section..data], 0x1dd
push 0x417b9c
call fcn.004037e5
mov dword [section..data], 0x1de
push 0x417b64
call fcn.004037e5
mov dword [section..data], 0x1df
push 0x417b80
call fcn.004037e5
mov dword [section..data], 0x1e0
push 0x417bf0
call fcn.004037e5
mov dword [section..data], 0x1e1
push 0x417c0c
call fcn.004037e5
mov dword [section..data], 0x1e2
push 0x417bb8
call fcn.004037e5
mov dword [section..data], 0x1e3
push 0x417c28
call fcn.004037e5
mov dword [section..data], 0x1e4
push 0x417bd4
call fcn.004037e5
mov dword [section..data], 0x1e5
mov byte [0x417b60], 1
mov dword [section..data], 0x1e6
mov dword [section..data], 0x1e8
jmp 0x402d8d
mov dword [section..data], 0x1e8
mov ebx, 0x3333
cmp ebx, dword [esp]
jne 0x4029e1
mov dword [section..data], 0x1ec
lea ebp, [0x417b9c]
cmp byte [ebp + 0x1a], 0
je 0x4028a4
lea ebp, [0x417b64]
cmp byte [ebp + 0x1a], 0
je 0x4028a4
mov eax, 1
jmp 0x4028a6
xor eax, eax
and eax, eax
je 0x4028bd
lea ebp, [0x417b80]
cmp byte [ebp + 0x1a], 0
je 0x4028bd
mov eax, 1
jmp 0x4028bf
xor eax, eax
and eax, eax
je 0x4028d6
lea ebp, [0x417bf0]
cmp byte [ebp + 0x1a], 0
je 0x4028d6
mov eax, 1
jmp 0x4028d8
xor eax, eax
and eax, eax
je 0x4028ef
lea ebp, [0x417c0c]
cmp byte [ebp + 0x1a], 0
je 0x4028ef
mov eax, 1
jmp 0x4028f1
xor eax, eax
and eax, eax
je 0x402908
lea ebp, [0x417bb8]
cmp byte [ebp + 0x1a], 0
je 0x402908
mov eax, 1
jmp 0x40290a
xor eax, eax
and eax, eax
je 0x402921
lea ebp, [0x417c28]
cmp byte [ebp + 0x1a], 0
je 0x402921
mov eax, 1
jmp 0x402923
xor eax, eax
and eax, eax
je 0x40293a
lea ebp, [0x417bd4]
cmp byte [ebp + 0x1a], 0
je 0x40293a
mov eax, 1
jmp 0x40293c
xor eax, eax
and eax, eax
je 0x402978
mov dword [section..data], 0x1ed
push dword [0x417b48]
call fcn.00409492
push eax
push dword [0x417b38]
call fcn.00407be3
push eax
push 0
call fcn.00405593
mov dword [section..data], 0x1ee
jmp 0x4029ae
mov dword [section..data], 0x1ee
mov dword [section..data], 0x1ef
push dword [0x417b44]
call fcn.00409492
push eax
push dword [0x417b38]
call fcn.00407be3
push eax
push 1
call fcn.00405593
mov dword [section..data], 0x1f0
mov dword [section..data], 0x1f1
push 1
push dword [0x417b38]
call fcn.00407cde
mov dword [section..data], 0x1f3
jmp 0x402d8d
mov dword [section..data], 0x1f3
mov ebx, 0x332e
cmp ebx, dword [esp]
jne 0x402b58
mov dword [section..data], 0x1f4
call fcn.0040e60d
push eax
mov dword [section..data], 0x1f5
mov ebx, 1
cmp ebx, dword [esp]
jne 0x402a4c
mov dword [section..data], 0x1f6
push dword [0x417b38]
call fcn.00407be3
push eax
push 0
call fcn.00406d8f
mov dword [section..data], 0x1f8
jmp 0x402b3e
mov dword [section..data], 0x1f8
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x402b3e
mov dword [section..data], 0x1f9
push 1
push 0
push dword [0x417b38]
call fcn.00407bff
mov dword [section..data], 0x1fa
push 0
push dword [0x417b38]
call fcn.00407cf0
mov dword [section..data], 0x1fc
push 0
call fcn.00405471
and eax, eax
je 0x402ad2
mov dword [section..data], 0x1fd
push 0
call fcn.004056b9
mov dword [section..data], 0x1fe
jmp 0x402b34
mov dword [section..data], 0x1fe
push 1
call fcn.00405471
and eax, eax
je 0x402b0a
mov dword [section..data], 0x1ff
push 1
call fcn.004056b9
mov dword [section..data], 0x200
jmp 0x402b34
mov dword [section..data], 0x200
mov dword [section..data], 0x201
push 0x10
mov eax, str.Unable_to_remove_tray_icon_
push eax
mov eax, str.Error
push eax
call fcn.00406264
mov dword [section..data], 0x202
mov dword [section..data], 0x203
pop eax
mov dword [section..data], 0x205
jmp 0x402d8d
mov dword [section..data], 0x205
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x402d8d
mov dword [section..data], 0x206
call fcn.0040e61c
push eax
mov dword [section..data], 0x207
mov ebx, 1
cmp ebx, dword [esp]
jne 0x402c84
mov dword [section..data], 0x208
push 1
push 0
push dword [0x417b38]
call fcn.00407bff
mov dword [section..data], 0x209
push 0
push dword [0x417b38]
call fcn.00407cf0
mov dword [section..data], 0x20b
push 0
call fcn.00405471
and eax, eax
je 0x402c09
mov dword [section..data], 0x20c
push 0
call fcn.004056b9
mov dword [section..data], 0x20d
jmp 0x402c6b
mov dword [section..data], 0x20d
push 1
call fcn.00405471
and eax, eax
je 0x402c41
mov dword [section..data], 0x20e
push 1
call fcn.004056b9
mov dword [section..data], 0x20f
jmp 0x402c6b
mov dword [section..data], 0x20f
mov dword [section..data], 0x210
push 0x10
mov eax, str.Unable_to_remove_tray_icon_
push eax
mov eax, str.Error
push eax
call fcn.00406264
mov dword [section..data], 0x211
mov dword [section..data], 0x213
jmp 0x402d82
mov dword [section..data], 0x213
mov ebx, 2
cmp ebx, dword [esp]
jne 0x402d82
mov dword [section..data], 0x215
push 0x44
mov eax, str.Do_you_want_to_exit_
push eax
mov eax, str.Info
push eax
call fcn.00406264
mov ebx, eax
cmp ebx, 6
jne 0x402d78
mov dword [section..data], 0x216
push 0x417b9c
call fcn.004037e5
mov dword [section..data], 0x217
push 0x417b64
call fcn.004037e5
mov dword [section..data], 0x218
push 0x417b80
call fcn.004037e5
mov dword [section..data], 0x219
push 0x417bf0
call fcn.004037e5
mov dword [section..data], 0x21a
push 0x417c0c
call fcn.004037e5
mov dword [section..data], 0x21b
push 0x417bb8
call fcn.004037e5
mov dword [section..data], 0x21c
push 0x417c28
call fcn.004037e5
mov dword [section..data], 0x21d
push 0x417bd4
call fcn.004037e5
mov dword [section..data], 0x21e
mov byte [0x417b60], 1
mov dword [section..data], 0x21f
mov dword [section..data], 0x220
pop eax
mov dword [section..data], 0x222
pop eax
mov dword [section..data], 0x223
cmp byte [0x417b60], 0
je 0x401411
push 0
call 0x402dce
call fcn.0040fc40
push dword [0x417b08]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00405317
call fcn.00405451
call fcn.00406f98
call fcn.004079f9
call fcn.00408dc2
call fcn.00409211
call fcn.004092f0
call fcn.0040d590
call fcn.0040e072
call fcn.0040e1e1
call fcn.0040e4c6
call fcn.0040f243
call fcn.0040f180
ret