Function at 0x48e4d0
Capabilities:
Create process on windows
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x587ed7
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x181c
call fcn.005591d0
mov eax, dword [0x5e95e0]
xor eax, esp
mov dword [esp + 0x1818], eax
push ebx
push esi
push edi
mov eax, dword [0x5e95e0]
xor eax, esp
push eax
lea eax, [esp + 0x1830]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0x1c], ebx
mov eax, dword [esi + 0x20]
push eax
mov dword [esp + 0x18], esi
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [ebp + 8]
cmp eax, 0x4e20
jb 0x48e5bc
cmp eax, 0x5014
jae 0x48e5c7
add eax, 0xffffb1e0
cmp eax, ebx
jl 0x48e57f
cmp eax, dword [0x5f2904]
jge 0x48e57f
mov ecx, dword [0x5f2900]
mov eax, dword [ecx + eax*4]
cmp eax, ebx
je 0x48e57f
mov ecx, dword [eax + 0xc]
push ebx
push ebx
push 0xffffffffffffffff
push 1
push 1
push eax
push ebx
mov dword [eax + 0x24], ebx
mov edx, dword [esi + 0x568c]
push ecx
push edx
call fcn.004d7180
mov edi, dword [ebp + 8]
cmp edi, 0x5a3d
jne 0x48f5d1
xor eax, eax
cmp dword [0x5f221c], eax
sete al
mov dword [0x5f221c], eax
mov eax, esi
call fcn.00479ed0
cmp dword [0x5f221c], 0
je 0x496fdd
call fcn.0047adf0
jmp 0x496fdd
cmp eax, 0x5014
jb 0x48e8fd
cmp eax, 0x55f0
jae 0x48e8fd
lea ecx, [esp + 0x20]
call fcn.004026e0
lea ecx, [esp + 0xe4]
mov dword [esp + 0x1838], 0
call fcn.004026e0
lea ecx, [esp + 0x250]
call fcn.004026e0
lea ecx, [esp + 0x260]
call fcn.004026e0
lea eax, [esp + 0x260]
push eax
lea ecx, [esp + 0x254]
push ecx
mov ecx, dword [ebp + 8]
lea edx, [esp + 0xec]
push edx
lea eax, [esp + 0x2c]
push eax
add ecx, 0xffffafec
mov edx, 0x5f29a8
mov byte [esp + 0x1848], 3
call fcn.004d5740
lea ebx, [esp + 0x20]
call fcn.00409830
mov edi, eax
call fcn.004098b0
mov ecx, dword [esp + 0x20]
cmp dword [ecx - 0xc], 0
je 0x48e848
push 5
lea edx, [esp + 0x1fc]
push edx
mov ecx, ebx
call fcn.0040dce0
mov byte [esp + 0x1838], 4
mov eax, dword [eax]
push 0x59b540
push eax
mov dword [esp + 0x24], 1
call fcn.005522fc
add esp, 8
test eax, eax
je 0x48e6c6
push 6
lea eax, [esp + 0x350]
push eax
mov ecx, ebx
call fcn.0040dce0
mov eax, dword [eax]
push str.https:
push eax
mov dword [esp + 0x24], 3
call fcn.005522fc
add esp, 8
test eax, eax
je 0x48e6c6
xor bl, bl
jmp 0x48e6c8
mov bl, 1
test byte [esp + 0x1c], 2
je 0x48e6e0
and dword [esp + 0x1c], 0xfffffffd
lea ecx, [esp + 0x34c]
call fcn.004a4690
mov dword [esp + 0x1838], 3
test byte [esp + 0x1c], 1
je 0x48e703
and dword [esp + 0x1c], 0xfffffffe
lea ecx, [esp + 0x1f8]
call fcn.004a4690
test bl, bl
je 0x48e72b
mov ecx, dword [esp + 0x20]
mov edx, dword [esi + 0x568c]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push ecx
push edx
call fcn.004d7180
jmp 0x48e848
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], 0
jl 0x48e774
push 0x5984c8
push eax
call fcn.00552eeb
add esp, 8
test eax, eax
je 0x48e774
mov ecx, dword [esp + 0x20]
sub eax, ecx
sar eax, 1
cmp eax, 1
jle 0x48e774
mov eax, dword [esi + 0x568c]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push ecx
push eax
call fcn.004d7180
jmp 0x48e848
mov ecx, dword [0x5f2868]
push ecx
push str._appdir
lea edx, [esp + 0x28]
push edx
call fcn.0041cd10
mov eax, dword [esp + 0x20]
push 5
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 2
je 0x48e7fd
cmp eax, 3
je 0x48e7fd
cmp eax, 0x20
jge 0x48e848
lea ecx, [esp + 0x1d0]
call fcn.004026e0
mov byte [esp + 0x1838], 6
mov ecx, dword [esp + 0x20]
push ecx
lea edx, [esp + 0x1d4]
push 0x5ade3c
push edx
call fcn.00405480
mov eax, dword [esp + 0x1dc]
add esp, 0xc
push 0
push 0
push eax
call fcn.00539414
lea ecx, [esp + 0x1d0]
jmp 0x48e843
lea ecx, [esp + 0x1d8]
call fcn.004026e0
mov byte [esp + 0x1838], 5
mov ecx, dword [esp + 0x20]
push ecx
lea edx, [esp + 0x1dc]
push 0x5ade28
push edx
call fcn.00405480
mov eax, dword [esp + 0x1e4]
add esp, 0xc
push 0
push 0
push eax
call fcn.00539414
lea ecx, [esp + 0x1d8]
call fcn.004a4690
mov byte [esp + 0x1838], 2
mov eax, dword [esp + 0x260]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48e873
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1838], 1
mov eax, dword [esp + 0x250]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48e89e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1838], 0
mov eax, dword [esp + 0xe4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48e8c9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x1838], 0xffffffff
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48e57f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x48e57f
cmp eax, 0x55f2
jne 0x48e90f
push esi
call fcn.0049d470
jmp 0x496fdd
cmp eax, 0x55f3
jne 0x48e925
push 9
call fcn.004f39c0
add esp, 4
jmp 0x496fdd
cmp eax, 0x59de
jne 0x48e95f
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
cmp eax, ebx
je 0x48e953
mov eax, dword [eax + 0x44]
mov ecx, 0x5f27f8
call fcn.004d47a0
jmp 0x496fdd
push ebx
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x496fdd
cmp eax, 0x55f4
jne 0x48e986
mov ecx, dword [esi + 0x568c]
push ebx
push ebx
push 0xffffffffffffffff
push 1
push 1
push ebx
push ebx
push str.dailyword:
push ecx
call fcn.004d7180
jmp 0x496fdd
cmp eax, 0x5606
jne 0x48e9fd
lea edx, [esp + 0x58c]
push edx
call fcn.00424980
lea ecx, [esp + 0x58c]
mov dword [esp + 0x1838], 7
call fcn.0053bd19
cmp eax, 1
jne 0x48e9e1
push ebx
push ebx
push 0x10
mov ecx, esi
mov dword [esi + 0x99a8], ebx
call fcn.00409980
mov eax, dword [0x5f2864]
push 5
push ebx
push str._rerun
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0x58c]
mov dword [esp + 0x1838], 0xffffffff
call fcn.00424a80
jmp 0x496fdd
cmp eax, 0x55fc
jne 0x48ea2c
mov esi, dword [esi + 0x568c]
cmp esi, ebx
je 0x496fdd
push ebx
push ebx
push 0xffffffffffffffff
push 1
push 1
push ebx
push ebx
push str.http:__bbs.sogou.com_t_w04044300s_CC_C7_B9_FB_E4_AF_C0_C0_C6_F7page1
push esi
call fcn.004d7180
jmp 0x496fdd
cmp eax, 0x560a
jne 0x48ea44
push ebx
push ebx
push 0x5adf14
call fcn.00539414
jmp 0x496fdd
cmp eax, 0x5607
jne 0x48ea5c
push 0x8053
mov ecx, esi
call fcn.00497600
jmp 0x496fdd
cmp eax, 0x5608
jne 0x48ea74
push 0x8056
mov ecx, esi
call fcn.00497600
jmp 0x496fdd
cmp eax, 0x5a53
jne 0x48ea86
push esi
call fcn.0049c630
jmp 0x496fdd
cmp eax, 0x5a52
jne 0x48ea98
push esi
call fcn.0049c7a0
jmp 0x496fdd
cmp eax, 0x5a51
jne 0x48eaaa
push esi
call fcn.0049c8e0
jmp 0x496fdd
cmp eax, 0x5a50
jne 0x48eabc
push esi
call fcn.0049ca50
jmp 0x496fdd
cmp eax, 0x5627
jne 0x48eb6d
push 0x5adf28
lea ecx, [esp + 0xf0]
call fcn.00402390
push ebx
mov dword [esp + 0x183c], 8
mov ecx, dword [esp + 0xf0]
push 4
push ecx
call fcn.00539414
cmp eax, 6
jne 0x48eb5c
call fcn.00468640
cmp eax, ebx
jle 0x48eb2c
push eax
lea edx, [esp + 0xf0]
push 0x5adfb0
push edx
call fcn.00405480
mov eax, dword [esp + 0xf8]
add esp, 0xc
push ebx
push 4
push eax
call fcn.00539414
cmp eax, 7
je 0x48eb5c
call fcn.004686c0
test eax, eax
push ebx
push ebx
je 0x48eb52
push str.WinXP
call fcn.00539414
lea ecx, [esp + 0xec]
call fcn.004a4690
jmp 0x496fdd
push 0x5ae054
call fcn.00539414
lea ecx, [esp + 0xec]
call fcn.004a4690
jmp 0x496fdd
cmp eax, 0x5609
jne 0x48eb92
push 5
push ebx
push str.user32.dll_LockWorkStation
push str.rundll32.exe
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x496fdd
cmp eax, 0x560b
je 0x48e57f
cmp eax, 0x560c
je 0x48e57f
cmp eax, 0x560d
je 0x48e57f
cmp eax, 0x5a5d
jne 0x48ebc4
call fcn.0048d960
jmp 0x496fdd
cmp eax, 0x5a5e
jne 0x48ebdc
mov edi, 1
mov ecx, esi
call fcn.0048dad0
jmp 0x496fdd
cmp eax, 0x5a5f
jne 0x48efc5
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
mov edi, eax
cmp edi, ebx
mov dword [esp + 0x1f8], edi
je 0x496fdd
cmp dword [0x5f27b8], ebx
jne 0x48efb7
lea ecx, [edi + 0xc4]
push ecx
lea ecx, [esp + 0x58]
call fcn.004020d0
lea ebx, [esp + 0x54]
mov dword [esp + 0x1838], 9
call fcn.00409820
call fcn.0045f6a0
mov edx, dword [esp + 0x54]
mov eax, dword [edx - 0xc]
cmp eax, 0x20
jle 0x48ec5d
mov esi, 0x20
mov edi, ebx
call fcn.00401d70
mov edi, dword [esp + 0x1f8]
lea ecx, [esp + 0xcc]
call fcn.004026e0
mov bl, 0xa
mov byte [esp + 0x1838], bl
cmp dword [0x5f27bc], 0
je 0x48ee05
push 0x5ae0e8
lea ecx, [esp + 0xc8]
call fcn.00402390
lea ecx, [esp + 0x104]
call fcn.004026e0
mov byte [esp + 0x1838], 0xc
mov eax, dword [0x5f27c0]
push eax
push eax
push eax
lea eax, [esp + 0x110]
push 0x5ae1b0
push eax
call fcn.00405480
mov ecx, dword [esp + 0x118]
add esp, 0x14
push 0x592720
push ecx
lea edx, [esp + 0xcc]
push edx
call fcn.0041cd10
lea eax, [esp + 0xc4]
push eax
lea ecx, [esp + 0x108]
push ecx
lea edx, [esp + 0x2f4]
push edx
call fcn.00401ae0
add esp, 0xc
push eax
lea ecx, [esp + 0xc8]
mov byte [esp + 0x183c], 0xd
call fcn.004022f0
lea ecx, [esp + 0x2ec]
mov byte [esp + 0x1838], 0xc
call fcn.004a4690
lea eax, [esp + 0x310]
push 0x5ae1d4
push eax
mov ecx, 0x5f27c0
call fcn.00401c80
add esp, 8
push 0
push 0
mov byte [esp + 0x1840], 0xe
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0x5c]
mov eax, dword [eax]
push ecx
push 6
push edx
push eax
push 0
lea ecx, [esp + 0x1088]
call fcn.0053d5f5
lea ecx, [esp + 0x310]
mov byte [esp + 0x1838], 0x10
call fcn.004a4690
mov esi, dword [0x5f27c4]
lea ecx, [esp + 0x106c]
call fcn.0053d1ea
lea ecx, [esp + 0x106c]
mov dword [eax + 0x2c], esi
call fcn.0053d4c6
cmp eax, 1
jne 0x48edd9
lea eax, [esp + 0x284]
push eax
lea ecx, [esp + 0x1070]
call fcn.0053d7a6
push eax
lea ecx, [esp + 0xd0]
mov byte [esp + 0x183c], 0x11
call fcn.004022f0
lea ecx, [esp + 0x284]
call fcn.004a4690
lea ecx, [esp + 0x106c]
mov byte [esp + 0x1838], 0xc
call fcn.0053d5b4
lea ecx, [esp + 0x104]
call fcn.004a4690
lea ecx, [esp + 0xc4]
jmp 0x48ef7d
mov ecx, dword [0x5f27c4]
cmp dword [ecx - 0xc], 0
push 0x5958a8
jne 0x48eece
lea edx, [esp + 0x298]
push 0x5f288c
push edx
call fcn.00401ba0
add esp, 0xc
lea ecx, [esp + 0x54]
push ecx
push eax
lea edx, [esp + 0x358]
push edx
mov byte [esp + 0x1844], 0x12
call fcn.00401ae0
add esp, 0xc
push 0x5925cc
push eax
lea eax, [esp + 0x294]
push eax
mov byte [esp + 0x1844], 0x13
call fcn.00401ba0
add esp, 0xc
push 0x5f27c0
push eax
lea ecx, [esp + 0x390]
push ecx
mov byte [esp + 0x1844], 0x14
call fcn.00401ae0
add esp, 0xc
push eax
lea ecx, [esp + 0xd0]
mov byte [esp + 0x183c], 0x15
call fcn.004022f0
lea ecx, [esp + 0x388]
call fcn.004a4690
lea ecx, [esp + 0x28c]
call fcn.004a4690
lea ecx, [esp + 0x350]
call fcn.004a4690
lea ecx, [esp + 0x294]
jmp 0x48ef7d
lea edx, [esp + 0x2a8]
push 0x5f27c4
push edx
call fcn.00401ba0
add esp, 0xc
lea ecx, [esp + 0x54]
push ecx
push eax
lea edx, [esp + 0x360]
push edx
mov byte [esp + 0x1844], 0x16
call fcn.00401ae0
add esp, 0xc
push 0x5925cc
push eax
lea eax, [esp + 0x2a4]
push eax
mov byte [esp + 0x1844], 0x17
call fcn.00401ba0
add esp, 0xc
push 0x5f27c0
push eax
lea ecx, [esp + 0x380]
push ecx
mov byte [esp + 0x1844], 0x18
call fcn.00401ae0
add esp, 0xc
push eax
lea ecx, [esp + 0xd0]
mov byte [esp + 0x183c], 0x19
call fcn.004022f0
lea ecx, [esp + 0x378]
call fcn.004a4690
lea ecx, [esp + 0x29c]
call fcn.004a4690
lea ecx, [esp + 0x358]
call fcn.004a4690
lea ecx, [esp + 0x2a4]
mov byte [esp + 0x1838], bl
call fcn.004a4690
mov eax, dword [esp + 0xcc]
cmp dword [eax - 0xc], 0
je 0x48ef9d
mov ebx, edi
call fcn.004ca090
lea ecx, [esp + 0xcc]
call fcn.004a4690
lea ecx, [esp + 0x54]
call fcn.004a4690
jmp 0x496fdd
xor eax, eax
mov ebx, edi
call fcn.004ca090
jmp 0x496fdd
cmp eax, 0x5a60
jne 0x48f282
push 0x5f27c4
lea ecx, [esp + 0xd8]
call fcn.004020d0
mov ebx, 0x1a
mov dword [esp + 0x1838], ebx
mov edx, dword [esp + 0xd4]
mov eax, dword [edx - 0xc]
test eax, eax
jne 0x48f072
mov eax, dword [0x5f288c]
push esi
push eax
lea ecx, [esp + 0x1384]
push ecx
call fcn.004eea60
lea ecx, [esp + 0x137c]
mov byte [esp + 0x1838], 0x1b
call fcn.004eed10
cmp eax, 1
jne 0x48f25e
lea esi, [esp + 0x200]
lea eax, [esp + 0x137c]
call fcn.004eeda0
push eax
lea ecx, [esp + 0xd8]
mov byte [esp + 0x183c], 0x1c
call fcn.004022f0
mov ecx, esi
call fcn.004a4690
lea ecx, [esp + 0x137c]
mov byte [esp + 0x1838], bl
call fcn.004eec00
mov esi, dword [esp + 0x14]
mov eax, dword [esi + 0x568c]
mov ecx, dword [eax + 0x284]
add eax, 0x22c
mov eax, dword [eax + 0x6c]
xor edi, edi
add eax, ecx
test eax, eax
mov dword [esp + 0xe4], edi
jle 0x48f24d
lea esp, [esp]
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
mov eax, edi
call fcn.004c63a0
test eax, eax
mov dword [esp + 0x200], eax
je 0x48f225
add eax, 0xc4
push eax
lea ecx, [esp + 0x88]
call fcn.004020d0
lea ebx, [esp + 0x84]
mov byte [esp + 0x1838], 0x1d
call fcn.00409820
call fcn.0045f6a0
mov edx, dword [esp + 0x84]
cmp dword [edx - 0xc], 0x20
jle 0x48f111
mov esi, 0x20
mov edi, ebx
call fcn.00401d70
mov edi, dword [esp + 0xe4]
mov esi, dword [esp + 0x14]
lea ecx, [esp + 0x1e0]
call fcn.004026e0
push 0x5958a8
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x388]
mov bl, 0x1e
push ecx
mov byte [esp + 0x1844], bl
call fcn.00401ba0
add esp, 0xc
lea edx, [esp + 0x84]
push edx
push eax
lea eax, [esp + 0x2bc]
push eax
mov byte [esp + 0x1844], 0x1f
call fcn.00401ae0
add esp, 0xc
push 0x5925cc
push eax
lea ecx, [esp + 0x368]
push ecx
mov byte [esp + 0x1844], 0x20
call fcn.00401ba0
add esp, 0xc
push 0x5f27c0
push eax
lea edx, [esp + 0x284]
push edx
mov byte [esp + 0x1844], 0x21
call fcn.00401ae0
add esp, 0xc
push eax
lea ecx, [esp + 0x1e4]
mov byte [esp + 0x183c], 0x22
call fcn.004022f0
lea ecx, [esp + 0x27c]
call fcn.004a4690
lea ecx, [esp + 0x360]
call fcn.004a4690
lea ecx, [esp + 0x2b4]
call fcn.004a4690
lea ecx, [esp + 0x380]
mov byte [esp + 0x1838], bl
call fcn.004a4690
mov eax, dword [esp + 0x1e0]
cmp dword [eax - 0xc], 0
je 0x48f205
mov ebx, dword [esp + 0x200]
call fcn.004ca090
lea ecx, [esp + 0x1e0]
call fcn.004a4690
lea ecx, [esp + 0x84]
mov byte [esp + 0x1838], 0x1a
call fcn.004a4690
mov eax, dword [esi + 0x568c]
mov ecx, dword [eax + 0x284]
add eax, 0x22c
mov eax, dword [eax + 0x6c]
add edi, 1
add eax, ecx
cmp edi, eax
mov dword [esp + 0xe4], edi
jl 0x48f0a0
lea ecx, [esp + 0xd4]
call fcn.004a4690
jmp 0x496fdd
lea ecx, [esp + 0x137c]
mov byte [esp + 0x1838], bl
call fcn.004eec00
lea ecx, [esp + 0xd4]
call fcn.004a4690
jmp 0x496fdd
cmp eax, 0x5a61
jne 0x48f2c9
lea eax, [esp + 0x794]
push eax
call fcn.00434490
lea ecx, [esp + 0x794]
mov dword [esp + 0x1838], 0x23
call fcn.0053bd19
lea ecx, [esp + 0x794]
mov dword [esp + 0x1838], 0xffffffff
call fcn.00434540
jmp 0x496fdd
cmp eax, 0x5640
jne 0x48f2e2
mov ecx, dword [esi + 0x568c]
xor edi, edi
call fcn.004dcda0
jmp 0x496fdd
cmp eax, 0x5a28
jne 0x48f2fc
mov ecx, dword [esi + 0x568c]
push 1
push ebx
call fcn.004dced0
jmp 0x496fdd
cmp eax, 0x5a29
jne 0x48f315
mov ecx, dword [esi + 0x568c]
push ebx
push ebx
call fcn.004dced0
jmp 0x496fdd
cmp eax, 0x5642
jne 0x48f331
mov ecx, dword [esi + 0x568c]
mov edi, 1
call fcn.004dcda0
jmp 0x496fdd
cmp eax, 0x5a2a
jne 0x48f34c
mov ecx, dword [esi + 0x568c]
push 1
push 1
call fcn.004dced0
jmp 0x496fdd
cmp eax, 0x5a2b
jne 0x48f366
mov ecx, dword [esi + 0x568c]
push ebx
push 1
call fcn.004dced0
jmp 0x496fdd
cmp eax, 0x5645
jne 0x48f382
mov ecx, dword [esi + 0x568c]
mov edi, 2
call fcn.004dcda0
jmp 0x496fdd
cmp eax, 0x5a2c
jne 0x48f39d
mov ecx, dword [esi + 0x568c]
push 1
push 2
call fcn.004dced0
jmp 0x496fdd
cmp eax, 0x5a2d
jne 0x48f3b7
mov ecx, dword [esi + 0x568c]
push ebx
push 2
call fcn.004dced0
jmp 0x496fdd
cmp eax, 0x5643
jne 0x48f3d3
mov ecx, dword [esi + 0x568c]
mov edi, 3
call fcn.004dcda0
jmp 0x496fdd
cmp eax, 0x5a2e
jne 0x48f3ee
mov ecx, dword [esi + 0x568c]
push 1
push 3
call fcn.004dced0
jmp 0x496fdd
cmp eax, 0x5a2f
jne 0x48f408
mov ecx, dword [esi + 0x568c]
push ebx
push 3
call fcn.004dced0
jmp 0x496fdd
cmp eax, 0x5641
jne 0x48f424
mov ecx, dword [esi + 0x568c]
mov edi, 4
call fcn.004dcda0
jmp 0x496fdd
cmp eax, 0x5a30
jne 0x48f43f
mov ecx, dword [esi + 0x568c]
push 1
push 4
call fcn.004dced0
jmp 0x496fdd
cmp eax, 0x5a31
jne 0x48f459
mov ecx, dword [esi + 0x568c]
push ebx
push 4
call fcn.004dced0
jmp 0x496fdd
cmp eax, 0x5a3a
jne 0x48f475
mov ecx, dword [esi + 0x568c]
mov edi, 5
call fcn.004dcda0
jmp 0x496fdd
cmp eax, 0x5a3b
jne 0x48f490
mov ecx, dword [esi + 0x568c]
push 1
push 5
call fcn.004dced0
jmp 0x496fdd
cmp eax, 0x5a3c
jne 0x48f4aa
mov ecx, dword [esi + 0x568c]
push ebx
push 5
call fcn.004dced0
jmp 0x496fdd
cmp eax, 0x5a39
jne 0x48f4f1
lea ecx, [esp + 0x60c]
push ecx
call fcn.0042e5c0
lea ecx, [esp + 0x60c]
mov dword [esp + 0x1838], 0x24
call fcn.0053bd19
lea ecx, [esp + 0x60c]
mov dword [esp + 0x1838], 0xffffffff
call fcn.0042e690
jmp 0x496fdd
cmp eax, 0x5a38
jne 0x48f538
lea edx, [esp + 0x68c]
push edx
call fcn.0042e270
lea ecx, [esp + 0x68c]
mov dword [esp + 0x1838], 0x25
call fcn.0053bd19
lea ecx, [esp + 0x68c]
mov dword [esp + 0x1838], 0xffffffff
call fcn.0042e340
jmp 0x496fdd
cmp eax, 0x5a26
jne 0x48f563
mov eax, esi
call fcn.0048a340
test eax, eax
mov eax, esi
jle 0x48f557
push ebx
call fcn.0048a3b0
jmp 0x496fdd
push 1
call fcn.0048a3b0
jmp 0x496fdd
cmp eax, 0x5a25
jne 0x48f59e
mov eax, esi
call fcn.0048a390
test eax, eax
mov edi, esi
jle 0x48f588
push ebx
mov dword [0x5f2798], ebx
call fcn.0048a7c0
jmp 0x496fdd
push 1
mov dword [0x5f2798], 1
call fcn.0048a7c0
jmp 0x496fdd
cmp eax, 0x5a27
jne 0x48e57f
mov eax, esi
call fcn.0048a360
test eax, eax
mov eax, esi
jle 0x48f5c2
xor ebx, ebx
call fcn.0048a670
jmp 0x496fdd
mov ebx, 1
call fcn.0048a670
jmp 0x496fdd
cmp edi, 0x5a7c
jne 0x48f68f
mov ecx, dword [0x5f2c24]
xor eax, eax
cmp dword [0x5f25f8], eax
sete al
test ecx, ecx
mov dword [0x5f25f8], eax
je 0x48f5fd
mov dword [ecx + 0x3f4], eax
mov ecx, dword [esi + 0x4d0c]
push 0
push 0
push ecx
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [esi + 0x568c]
mov ecx, dword [eax + 0x284]
add eax, 0x22c
mov eax, dword [eax + 0x6c]
add eax, ecx
xor edi, edi
test eax, eax
jle 0x496fdd
mov edi, edi
mov eax, dword [esi + 0x568c]
add eax, 0x22c
test edi, edi
jl 0x48f64e
cmp edi, dword [eax + 0x58]
jge 0x48f64e
mov edx, dword [eax + 0x54]
lea eax, [edx + edi*4]
mov eax, dword [eax]
jmp 0x48f664
mov edx, dword [eax + 0x58]
mov ecx, edi
sub ecx, edx
js 0x48f66d
cmp ecx, dword [eax + 0x6c]
jge 0x48f66d
mov eax, dword [eax + 0x68]
lea ecx, [eax + ecx*4]
mov eax, dword [ecx]
test eax, eax
je 0x48f66d
call fcn.004c5ad0
mov eax, dword [esi + 0x568c]
mov ecx, dword [eax + 0x284]
add eax, 0x22c
mov eax, dword [eax + 0x6c]
add edi, 1
add eax, ecx
cmp edi, eax
jl 0x48f630
jmp 0x496fdd
cmp edi, 0x5659
jne 0x48f7fc
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
mov esi, eax
test esi, esi
je 0x496fdd
lea ecx, [esp + 0xdc]
call fcn.004026e0
lea ecx, [esp + 0x128]
mov dword [esp + 0x1838], 0x26
call fcn.004026e0
lea ecx, [esp + 0x1e8]
call fcn.004026e0
lea ecx, [esp + 0x128]
push ecx
lea edx, [esp + 0xe0]
mov bl, 0x28
push edx
lea ecx, [esi + 0x48]
mov byte [esp + 0x1840], bl
call fcn.004696a0
mov eax, dword [esp + 0xe4]
add esp, 8
cmp dword [eax - 0xc], 0
je 0x48f7d3
lea esi, [esp + 0xdc]
call fcn.004622f0
push str._site:
lea ecx, [esp + 0x31c]
push 0x5f2abc
push ecx
call fcn.00401ba0
add esp, 0xc
mov edx, esi
push edx
push eax
lea eax, [esp + 0x2c4]
push eax
mov byte [esp + 0x1844], 0x29
call fcn.00401ae0
add esp, 0xc
push eax
lea ecx, [esp + 0x12c]
mov byte [esp + 0x183c], 0x2a
call fcn.004022f0
lea ecx, [esp + 0x2bc]
call fcn.004a4690
lea ecx, [esp + 0x318]
mov byte [esp + 0x1838], bl
call fcn.004a4690
mov ecx, dword [esp + 0x128]
push ecx
lea edx, [esp + 0x1ec]
push str.http:__www.tgsoso.com__key_stypeeng
push edx
call fcn.00405480
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push eax
push edx
call fcn.004d7180
lea ecx, [esp + 0x1e8]
call fcn.004a4690
lea ecx, [esp + 0x128]
call fcn.004a4690
lea ecx, [esp + 0xdc]
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x560e
jne 0x48f822
mov esi, dword [esi + 0x568c]
test esi, esi
je 0x496fdd
lea ecx, [esi + 0x22c]
call fcn.004c7040
jmp 0x496fdd
cmp edi, 0x560f
jne 0x48f9d5
lea ecx, [esp + 0x138]
call fcn.004026e0
lea ecx, [esp + 0x130]
mov dword [esp + 0x1838], 0x2b
call fcn.004026e0
lea ecx, [esp + 0x1f0]
call fcn.004026e0
lea ecx, [esp + 0x6c]
call fcn.004026e0
mov byte [esp + 0x1838], 0x2e
mov eax, dword [0x5f2620]
mov eax, dword [eax + 0x568c]
test eax, eax
je 0x48f9a3
lea ecx, [esp + 0x138]
push ecx
add eax, 0x22c
lea edi, [esp + 0x70]
call fcn.004c72e0
mov edx, dword [esp + 0x138]
cmp dword [edx - 0xc], 0
je 0x48f9a3
lea esi, [esp + 0x130]
call fcn.00467a70
mov eax, dword [esp + 0x6c]
cmp dword [eax - 0xc], 0
jne 0x48f8ca
push 0x5a84a0
mov ecx, edi
call fcn.004021d0
lea ebx, [esp + 0x6c]
call fcn.0045f6a0
push 0x5958a8
lea ecx, [esp + 0x134]
push ecx
lea edx, [esp + 0x2d4]
push edx
call fcn.00401ba0
add esp, 0xc
mov ecx, ebx
push ecx
push eax
lea edx, [esp + 0x33c]
push edx
mov byte [esp + 0x1844], 0x2f
call fcn.00401ae0
add esp, 0xc
push 0x59d12c
push eax
lea eax, [esp + 0x2cc]
push eax
mov byte [esp + 0x1844], 0x30
call fcn.00401ba0
add esp, 0xc
push eax
lea ecx, [esp + 0x1f4]
mov byte [esp + 0x183c], 0x31
call fcn.004022f0
lea ecx, [esp + 0x2c4]
call fcn.004a4690
lea ecx, [esp + 0x334]
call fcn.004a4690
lea ecx, [esp + 0x2cc]
mov byte [esp + 0x1838], 0x2e
call fcn.004a4690
mov esi, dword [esp + 0x1f0]
push 1
lea ecx, [esp + 0x13c]
mov edx, esi
call fcn.0045fed0
add esp, 4
test eax, eax
je 0x48f9a3
mov ecx, dword [esp + 0x130]
push 5
push ecx
push 0
push esi
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0x6c]
call fcn.004a4690
lea ecx, [esp + 0x1f0]
call fcn.004a4690
lea ecx, [esp + 0x130]
call fcn.004a4690
lea ecx, [esp + 0x138]
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x5610
jne 0x48fa09
cmp dword [0x5f2c24], 0
je 0x48f9f3
call fcn.0049cbc0
test eax, eax
je 0x496fdd
mov edx, dword [0x5f2620]
mov ecx, dword [edx + 0x568c]
call fcn.004db700
jmp 0x496fdd
cmp edi, 0x5611
jne 0x48fa37
cmp dword [0x5f2c24], 0
je 0x48fa27
call fcn.0049cbc0
test eax, eax
je 0x496fdd
mov eax, dword [0x5f2620]
push eax
call fcn.0049cff0
jmp 0x496fdd
cmp edi, 0x564d
jne 0x48fa95
cmp dword [0x5f2c24], 0
je 0x48fa55
call fcn.0049cbc0
test eax, eax
je 0x496fdd
lea ecx, [esp + 0xbfc]
push ecx
call fcn.004349f0
lea ecx, [esp + 0xbfc]
mov dword [esp + 0x1838], 0x32
call fcn.0053bd19
lea ecx, [esp + 0xbfc]
mov dword [esp + 0x1838], 0xffffffff
call fcn.00434ab0
jmp 0x496fdd
cmp edi, 0x5652
jne 0x48fac4
cmp dword [0x5f2c24], 0
je 0x48fab3
call fcn.0049cbc0
test eax, eax
je 0x496fdd
mov edx, dword [0x5f2620]
push edx
call fcn.0049ccb0
jmp 0x496fdd
cmp edi, 0x5601
je 0x49149b
cmp edi, 0x5602
jne 0x48faf7
mov esi, dword [esi + 0x568c]
test esi, esi
je 0x496fdd
add esi, 0x22c
push esi
call fcn.004c6e80
jmp 0x496fdd
cmp edi, 0x5603
je 0x49149b
cmp edi, 0x5604
jne 0x48fb80
cmp dword [esi + 0x953c], 0
jne 0x48fb61
push 0x1ac
call fcn.004055a0
mov dword [esp + 0x21c], eax
test eax, eax
mov dword [esp + 0x1838], 0x33
je 0x48fb3c
push eax
call fcn.0046ff20
jmp 0x48fb3e
xor eax, eax
mov dword [esp + 0x1838], 0xffffffff
mov dword [esi + 0x953c], eax
mov edx, dword [eax]
push esi
mov ecx, eax
mov eax, dword [edx + 0x134]
push 0xdf
call eax
mov ecx, dword [esi + 0x953c]
push 0
call fcn.0053325a
mov ecx, dword [esi + 0x953c]
push 1
call fcn.00537d86
jmp 0x496fdd
cmp edi, 0x571c
jb 0x48fb94
cmp edi, 0x5730
jb 0x49149b
cmp edi, 0x55f5
je 0x49149b
cmp edi, 0x55fa
je 0x49149b
cmp edi, 0x55fb
je 0x49149b
cmp edi, 0x55f6
je 0x49149b
cmp edi, 0x55f7
je 0x49149b
cmp edi, 0x55f8
je 0x49149b
cmp edi, 0x55f9
je 0x49149b
cmp edi, 0x55fd
je 0x49149b
cmp edi, 0x55ff
je 0x49149b
cmp edi, 0x5613
je 0x49149b
cmp edi, 0x5600
je 0x49149b
cmp edi, 0x5628
jne 0x48fc31
push 0x805a
mov ecx, esi
call fcn.00497600
jmp 0x496fdd
cmp edi, 0x5629
jne 0x48fc70
xor ecx, ecx
cmp dword [0x5f22ac], ecx
sete cl
mov dword [0x5f22ac], ecx
cmp dword [esi + 0x108], 2
jne 0x496fdd
mov eax, esi
call fcn.00479ed0
push 0
lea ecx, [esi + 0x1ea4]
call fcn.00405460
jmp 0x496fdd
cmp edi, 0x5689
jne 0x48fc9b
xor edx, edx
cmp dword [0x5f2368], edx
push 0
sete dl
lea ecx, [esi + 0x3814]
mov dword [0x5f2368], edx
call fcn.00405460
jmp 0x496fdd
cmp edi, 0x561c
jne 0x48fcda
mov eax, dword [esi + 0x568c]
test eax, eax
je 0x496fdd
lea ecx, [eax + 0x22c]
call fcn.004c63e0
mov ecx, eax
test ecx, ecx
je 0x496fdd
mov eax, 0x3e8
call fcn.004c8800
call fcn.0049a680
jmp 0x496fdd
cmp edi, 0x561d
jne 0x48fd19
mov eax, dword [esi + 0x568c]
test eax, eax
je 0x496fdd
lea ecx, [eax + 0x22c]
call fcn.004c63e0
mov ecx, eax
test ecx, ecx
je 0x496fdd
mov eax, 0x4b0
call fcn.004c8800
call fcn.0049a680
jmp 0x496fdd
cmp edi, 0x561e
jne 0x48fd58
mov eax, dword [esi + 0x568c]
test eax, eax
je 0x496fdd
lea ecx, [eax + 0x22c]
call fcn.004c63e0
mov ecx, eax
test ecx, ecx
je 0x496fdd
mov eax, 0x5dc
call fcn.004c8800
call fcn.0049a680
jmp 0x496fdd
cmp edi, 0x561f
jne 0x48fd97
mov eax, dword [esi + 0x568c]
test eax, eax
je 0x496fdd
lea ecx, [eax + 0x22c]
call fcn.004c63e0
mov ecx, eax
test ecx, ecx
je 0x496fdd
mov eax, 0x7d0
call fcn.004c8800
call fcn.0049a680
jmp 0x496fdd
cmp edi, 0x5620
jne 0x48fdd6
mov eax, dword [esi + 0x568c]
test eax, eax
je 0x496fdd
lea ecx, [eax + 0x22c]
call fcn.004c63e0
mov ecx, eax
test ecx, ecx
je 0x496fdd
mov eax, 0xfa0
call fcn.004c8800
call fcn.0049a680
jmp 0x496fdd
cmp edi, 0x5621
jne 0x48fe15
mov eax, dword [esi + 0x568c]
test eax, eax
je 0x496fdd
lea ecx, [eax + 0x22c]
call fcn.004c63e0
mov ecx, eax
test ecx, ecx
je 0x496fdd
mov eax, 0x2bc
call fcn.004c8800
call fcn.0049a680
jmp 0x496fdd
cmp edi, 0x5622
jne 0x48fe54
mov eax, dword [esi + 0x568c]
test eax, eax
je 0x496fdd
lea ecx, [eax + 0x22c]
call fcn.004c63e0
mov ecx, eax
test ecx, ecx
je 0x496fdd
mov eax, 0x1f4
call fcn.004c8800
call fcn.0049a680
jmp 0x496fdd
cmp edi, 0x5623
jne 0x48ff16
mov eax, dword [esi + 0x568c]
test eax, eax
je 0x496fdd
lea ecx, [eax + 0x22c]
call fcn.004c63e0
mov edi, eax
test edi, edi
je 0x496fdd
lea eax, [esp + 0x41c]
push eax
call fcn.00436ee0
push 0x5ae244
lea ecx, [esp + 0x494]
mov dword [esp + 0x183c], 0x34
call fcn.004021d0
push 0x5ae258
lea ecx, [esp + 0x498]
call fcn.004021d0
lea ecx, [esp + 0x41c]
call fcn.0053bd19
cmp eax, 1
jne 0x48fefa
mov ecx, dword [esp + 0x498]
push ecx
call fcn.00552f5b
lea eax, [eax + eax*4]
add eax, eax
lea edx, [eax - 1]
add esp, 4
cmp edx, 0x63f
ja 0x48fefa
mov ecx, edi
call fcn.004c8800
call fcn.0049a680
lea ecx, [esp + 0x41c]
mov dword [esp + 0x1838], 0xffffffff
call fcn.00436fb0
jmp 0x496fdd
cmp edi, 0x5624
jne 0x48ff6c
mov eax, dword [esi + 0x568c]
test eax, eax
je 0x496fdd
lea ecx, [eax + 0x22c]
call fcn.004c63e0
mov ecx, eax
test ecx, ecx
je 0x496fdd
mov eax, dword [ecx + 0xa0]
cmp eax, 0x2710
jge 0x48ff57
add eax, 0x64
mov dword [ecx + 0xa0], eax
mov eax, dword [ecx + 0xa0]
call fcn.004c8800
call fcn.0049a680
jmp 0x496fdd
cmp edi, 0x5625
jne 0x48ffa7
mov eax, dword [esi + 0x568c]
test eax, eax
je 0x496fdd
lea ecx, [eax + 0x22c]
call fcn.004c63e0
mov ecx, eax
test ecx, ecx
je 0x496fdd
mov eax, dword [ecx + 0xa0]
cmp eax, 0x64
jle 0x48ff57
add eax, 0xffffff9c
jmp 0x48ff51
cmp edi, 0x5626
jne 0x490108
cmp dword [esi + 0x568c], 0
je 0x496fdd
push 0x59e9b8
lea ecx, [esp + 0x1c8]
call fcn.00402390
push 0x59e9b8
lea ecx, [esp + 0x170]
mov dword [esp + 0x183c], 0x35
call fcn.00402390
push 0x59e9b8
lea ecx, [esp + 0x1c4]
mov byte [esp + 0x183c], 0x36
call fcn.00402390
lea ecx, [esp + 0x208]
call fcn.004026e0
mov byte [esp + 0x1838], 0x38
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
mov edi, eax
test edi, edi
je 0x490084
lea eax, [edi + 0xb4]
push eax
lea ecx, [esp + 0x1c8]
call fcn.004022f0
mov eax, dword [edi + 0xac]
test eax, eax
jl 0x490064
push eax
lea ecx, [esp + 0x170]
push 0x59aa30
push ecx
call fcn.00405480
add esp, 0xc
mov edi, dword [edi + 0xb0]
test edi, edi
jl 0x490084
push edi
lea edx, [esp + 0x1c4]
push 0x59aa30
push edx
call fcn.00405480
add esp, 0xc
mov eax, dword [esp + 0x1c0]
mov ecx, dword [esp + 0x16c]
mov edx, dword [esp + 0x1c4]
push eax
push ecx
push edx
lea eax, [esp + 0x214]
push str.http:__www.tgsoso.com_softdoc_alexa.htm_domain_s_alexa_s_pr_s
push eax
call fcn.00405480
mov ecx, dword [esp + 0x21c]
mov edx, dword [esi + 0x568c]
add esp, 0x14
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push ecx
push edx
call fcn.004d7180
lea ecx, [esp + 0x208]
call fcn.004a4690
lea ecx, [esp + 0x1c0]
call fcn.004a4690
lea ecx, [esp + 0x16c]
call fcn.004a4690
lea ecx, [esp + 0x1c4]
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x5617
jne 0x490178
lea ecx, [esp + 0x174]
call fcn.004026e0
mov dword [esp + 0x1838], 0x39
mov eax, dword [0x5f2620]
mov ecx, dword [eax + 0x568c]
add ecx, 0x22c
lea edi, [esp + 0x174]
call fcn.004c6570
mov ecx, dword [esp + 0x174]
mov edx, dword [0x5f2620]
mov eax, dword [edx + 0x568c]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push ecx
push eax
call fcn.004d7180
mov ecx, edi
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x5615
jne 0x49027a
push str.http:__alexa.chinaz.com__domain
lea ecx, [esp + 0x208]
call fcn.00402390
mov ebx, 0x3a
mov dword [esp + 0x1838], ebx
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
test eax, eax
je 0x490241
add eax, 0xb4
push eax
lea ecx, [esp + 0x144]
call fcn.004020d0
mov byte [esp + 0x1838], 0x3b
mov esi, dword [esp + 0x140]
cmp dword [esi - 0xc], 0
jl 0x490218
push 0x5a88c0
push esi
call fcn.00552eeb
add esp, 8
test eax, eax
je 0x490212
sub eax, esi
sar eax, 1
js 0x490212
lea ecx, [esp + 0x140]
push ecx
add eax, 3
xor ecx, ecx
call fcn.0045e980
mov esi, dword [esp + 0x140]
cmp dword [esi - 0xc], 0
je 0x49022e
push esi
lea edx, [esp + 0x208]
push str.http:__alexa.chinaz.com__domain_s_
push edx
call fcn.00405480
add esp, 0xc
lea ecx, [esp + 0x140]
mov byte [esp + 0x1838], bl
call fcn.004a4690
mov eax, dword [esp + 0x204]
mov ecx, dword [0x5f2620]
mov edx, dword [ecx + 0x568c]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push eax
push edx
call fcn.004d7180
lea ecx, [esp + 0x204]
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x5616
jne 0x49037c
push str.http:__trends.google.com_
lea ecx, [esp + 0x180]
call fcn.00402390
mov ebx, 0x3c
mov dword [esp + 0x1838], ebx
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
test eax, eax
je 0x490343
add eax, 0xb4
push eax
lea ecx, [esp + 0x14c]
call fcn.004020d0
mov byte [esp + 0x1838], 0x3d
mov esi, dword [esp + 0x148]
cmp dword [esi - 0xc], 0
jl 0x49031a
push 0x5a88c0
push esi
call fcn.00552eeb
add esp, 8
test eax, eax
je 0x490314
sub eax, esi
sar eax, 1
js 0x490314
lea ecx, [esp + 0x148]
push ecx
add eax, 3
xor ecx, ecx
call fcn.0045e980
mov esi, dword [esp + 0x148]
cmp dword [esi - 0xc], 0
je 0x490330
push esi
lea edx, [esp + 0x180]
push str.http:__trends.google.com_websites_q_s_
push edx
call fcn.00405480
add esp, 0xc
lea ecx, [esp + 0x148]
mov byte [esp + 0x1838], bl
call fcn.004a4690
mov eax, dword [esp + 0x17c]
mov ecx, dword [0x5f2620]
mov edx, dword [ecx + 0x568c]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push eax
push edx
call fcn.004d7180
lea ecx, [esp + 0x17c]
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x561a
jne 0x4903f2
lea ecx, [esp + 0x1cc]
call fcn.004026e0
mov dword [esp + 0x1838], 0x3e
mov ecx, dword [0x5f2620]
mov ecx, dword [ecx + 0x568c]
lea eax, [esp + 0x1cc]
push eax
add ecx, 0x22c
call fcn.004c66a0
mov edx, dword [esp + 0x1cc]
mov eax, dword [0x5f2620]
mov ecx, dword [eax + 0x568c]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push edx
push ecx
call fcn.004d7180
lea ecx, [esp + 0x1cc]
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x5618
jne 0x4904f7
mov esi, dword [esi + 0x568c]
test esi, esi
je 0x49087e
lea ecx, [esi + 0x22c]
call fcn.004c62b0
mov esi, eax
test esi, esi
je 0x49087e
lea ecx, [esp + 0x184]
call fcn.004026e0
lea ecx, [esp + 0x230]
mov dword [esp + 0x1838], 0x3f
call fcn.004026e0
lea edx, [esp + 0x230]
push edx
lea eax, [esp + 0x188]
push eax
add esi, 0xc
mov byte [esp + 0x1840], 0x40
call fcn.00466940
add esp, 8
push str.http:__www.google.com.hk_search_as_rq
lea ecx, [esp + 0x2d8]
call fcn.00402390
lea ecx, [esp + 0x184]
push ecx
push eax
lea edx, [esp + 0x344]
push edx
mov byte [esp + 0x1844], 0x41
call fcn.00401ae0
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
mov byte [esp + 0x1850], 0x42
mov eax, dword [eax]
push 0
push eax
mov eax, dword [esp + 0x34]
mov ecx, dword [eax + 0x568c]
push ecx
call fcn.004d7180
lea ecx, [esp + 0x33c]
call fcn.004a4690
lea ecx, [esp + 0x2d4]
call fcn.004a4690
lea ecx, [esp + 0x230]
call fcn.004a4690
lea ecx, [esp + 0x184]
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x5619
jne 0x4905d9
mov eax, dword [esi + 0x568c]
test eax, eax
je 0x496fdd
lea ecx, [eax + 0x22c]
call fcn.004c62b0
mov edi, eax
test edi, edi
je 0x49087e
lea ecx, [esp + 0x1f4]
call fcn.004026e0
lea ecx, [esp + 0x30]
mov dword [esp + 0x1838], 0x43
call fcn.004026e0
add edi, 0xc
push edi
lea ecx, [esp + 0x34]
mov byte [esp + 0x183c], 0x44
call fcn.004022f0
push 0x5ae480
push 0x5954c4
lea edx, [esp + 0x38]
push edx
call fcn.0041cd10
push 0x5ae488
push 0x5984c8
lea eax, [esp + 0x38]
push eax
call fcn.0041cd10
mov ecx, dword [esp + 0x30]
push ecx
lea edx, [esp + 0x1f8]
push str.http:__www.google.com.hk_search_hlzh_CNqlink__3A_s
push edx
call fcn.00405480
mov eax, dword [esp + 0x200]
mov ecx, dword [esi + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push eax
push ecx
call fcn.004d7180
lea ecx, [esp + 0x30]
call fcn.004a4690
lea ecx, [esp + 0x1f4]
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x5a1b
jne 0x4905f7
xor edx, edx
cmp dword [0x5f22cc], edx
sete dl
mov dword [0x5f22cc], edx
jmp 0x496fdd
cmp edi, 0x5a1c
je 0x49149b
cmp edi, 0x5a1d
jne 0x490637
mov esi, dword [esi + 0x568c]
test esi, esi
je 0x496fdd
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push str.http:__www.virscan.org_
push esi
call fcn.004d7180
jmp 0x496fdd
cmp edi, 0x5a1e
jne 0x49067f
lea eax, [esp + 0x70c]
push eax
call fcn.00438a80
lea ecx, [esp + 0x70c]
mov dword [esp + 0x1838], 0x45
call fcn.0053bd19
lea ecx, [esp + 0x70c]
mov dword [esp + 0x1838], 0xffffffff
call fcn.00438b40
jmp 0x496fdd
cmp edi, 0x5a1f
jne 0x490764
cmp dword [esi + 0x568c], 0
je 0x496fdd
lea ecx, [esp + 0x344]
push str.res:__
push ecx
mov ecx, 0x5f2868
call fcn.00401c80
push str.BINTGRes.dll
push eax
lea edx, [esp + 0x44]
push edx
mov dword [esp + 0x184c], 0x46
call fcn.00401ba0
add esp, 0x14
lea ecx, [esp + 0x344]
mov byte [esp + 0x1838], 0x48
call fcn.004a4690
push str._safe.htm_
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x218]
push ecx
call fcn.00401ba0
add esp, 0xc
push 0x5f21f0
push eax
lea edx, [esp + 0x2e4]
push edx
mov byte [esp + 0x1844], 0x49
call fcn.00401ae0
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
mov byte [esp + 0x1850], 0x4a
mov eax, dword [eax]
push 0
push eax
mov eax, dword [esi + 0x568c]
push eax
call fcn.004d7180
lea ecx, [esp + 0x2dc]
call fcn.004a4690
lea ecx, [esp + 0x210]
call fcn.004a4690
lea ecx, [esp + 0x34]
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x59e2
jne 0x49088b
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
mov esi, eax
test esi, esi
je 0x49087e
lea ecx, [esp + 0x150]
call fcn.004026e0
add esi, 0x48
push esi
lea ecx, [esp + 0x90]
mov dword [esp + 0x183c], 0x4b
call fcn.004020d0
push 0x5ae488
push 0x5984c8
lea ecx, [esp + 0x94]
push ecx
mov byte [esp + 0x1844], 0x4c
call fcn.0041cd10
push 0x5ae480
push 0x5954c4
lea edx, [esp + 0x94]
push edx
call fcn.0041cd10
push 0x5ae544
push 0x59d270
lea eax, [esp + 0x94]
push eax
call fcn.0041cd10
mov eax, dword [esp + 0x8c]
cmp dword [eax - 0xc], 0
je 0x490866
push eax
lea ecx, [esp + 0x154]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8slentlzh_CN
push ecx
call fcn.00405480
mov edx, dword [esp + 0x15c]
mov eax, dword [0x5f2620]
mov ecx, dword [eax + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push edx
push ecx
call fcn.004d7180
lea ecx, [esp + 0x8c]
call fcn.004a4690
lea ecx, [esp + 0x150]
call fcn.004a4690
jmp 0x496fdd
lea ecx, [esp + 0x8c]
call fcn.004a4690
lea ecx, [esp + 0x150]
call fcn.004a4690
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x496fdd
cmp edi, 0x59e3
jne 0x4909b3
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
mov esi, eax
test esi, esi
je 0x4909a6
lea ecx, [esp + 0x158]
call fcn.004026e0
add esi, 0x48
push esi
lea ecx, [esp + 0x98]
mov dword [esp + 0x183c], 0x4d
call fcn.004020d0
push 0x5ae488
push 0x5984c8
lea edx, [esp + 0x9c]
push edx
mov byte [esp + 0x1844], 0x4e
call fcn.0041cd10
push 0x5ae480
push 0x5954c4
lea eax, [esp + 0x9c]
push eax
call fcn.0041cd10
push 0x5ae544
push 0x59d270
lea ecx, [esp + 0x9c]
push ecx
call fcn.0041cd10
mov eax, dword [esp + 0x94]
cmp dword [eax - 0xc], 0
je 0x49098e
push eax
lea edx, [esp + 0x15c]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8sljatlzh_CN
push edx
call fcn.00405480
mov eax, dword [esp + 0x164]
mov ecx, dword [0x5f2620]
mov edx, dword [ecx + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push eax
push edx
call fcn.004d7180
lea ecx, [esp + 0x94]
call fcn.004a4690
lea ecx, [esp + 0x158]
call fcn.004a4690
jmp 0x496fdd
lea ecx, [esp + 0x94]
call fcn.004a4690
lea ecx, [esp + 0x158]
call fcn.004a4690
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x496fdd
cmp edi, 0x59e4
jne 0x490adb
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
mov esi, eax
test esi, esi
je 0x490ace
lea ecx, [esp + 0x14c]
call fcn.004026e0
add esi, 0x48
push esi
lea ecx, [esp + 0xa0]
mov dword [esp + 0x183c], 0x4f
call fcn.004020d0
push 0x5ae488
push 0x5984c8
lea eax, [esp + 0xa4]
push eax
mov byte [esp + 0x1844], 0x50
call fcn.0041cd10
push 0x5ae480
push 0x5954c4
lea ecx, [esp + 0xa4]
push ecx
call fcn.0041cd10
push 0x5ae544
push 0x59d270
lea edx, [esp + 0xa4]
push edx
call fcn.0041cd10
mov eax, dword [esp + 0x9c]
cmp dword [eax - 0xc], 0
je 0x490ab6
push eax
lea eax, [esp + 0x150]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8slkotlzh_CN
push eax
call fcn.00405480
mov ecx, dword [esp + 0x158]
mov edx, dword [0x5f2620]
mov eax, dword [edx + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push ecx
push eax
call fcn.004d7180
lea ecx, [esp + 0x9c]
call fcn.004a4690
lea ecx, [esp + 0x14c]
call fcn.004a4690
jmp 0x496fdd
lea ecx, [esp + 0x9c]
call fcn.004a4690
lea ecx, [esp + 0x14c]
call fcn.004a4690
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x496fdd
cmp edi, 0x59e5
jne 0x490c02
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
mov esi, eax
test esi, esi
je 0x490bf5
lea ecx, [esp + 0xfc]
call fcn.004026e0
add esi, 0x48
push esi
lea ecx, [esp + 0xa8]
mov dword [esp + 0x183c], 0x51
call fcn.004020d0
push 0x5ae488
push 0x5984c8
lea ecx, [esp + 0xac]
push ecx
mov byte [esp + 0x1844], 0x52
call fcn.0041cd10
push 0x5ae480
push 0x5954c4
lea edx, [esp + 0xac]
push edx
call fcn.0041cd10
push 0x5ae544
push 0x59d270
lea eax, [esp + 0xac]
push eax
call fcn.0041cd10
mov eax, dword [esp + 0xa4]
cmp dword [eax - 0xc], 0
je 0x490bdd
push eax
lea ecx, [esp + 0x100]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8slentlzh_TW
push ecx
call fcn.00405480
mov edx, dword [esp + 0x108]
mov eax, dword [0x5f2620]
mov ecx, dword [eax + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push edx
push ecx
call fcn.004d7180
lea ecx, [esp + 0xa4]
call fcn.004a4690
lea ecx, [esp + 0xfc]
call fcn.004a4690
jmp 0x496fdd
lea ecx, [esp + 0xa4]
call fcn.004a4690
lea ecx, [esp + 0xfc]
call fcn.004a4690
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x496fdd
cmp edi, 0x59e6
jne 0x490d2a
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
mov esi, eax
test esi, esi
je 0x490d1d
lea ecx, [esp + 0x12c]
call fcn.004026e0
add esi, 0x48
push esi
lea ecx, [esp + 0x9c]
mov dword [esp + 0x183c], 0x53
call fcn.004020d0
push 0x5ae488
push 0x5984c8
lea edx, [esp + 0xa0]
push edx
mov byte [esp + 0x1844], 0x54
call fcn.0041cd10
push 0x5ae480
push 0x5954c4
lea eax, [esp + 0xa0]
push eax
call fcn.0041cd10
push 0x5ae544
push 0x59d270
lea ecx, [esp + 0xa0]
push ecx
call fcn.0041cd10
mov eax, dword [esp + 0x98]
cmp dword [eax - 0xc], 0
je 0x490d05
push eax
lea edx, [esp + 0x130]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8sljatlzh_TW
push edx
call fcn.00405480
mov eax, dword [esp + 0x138]
mov ecx, dword [0x5f2620]
mov edx, dword [ecx + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push eax
push edx
call fcn.004d7180
lea ecx, [esp + 0x98]
call fcn.004a4690
lea ecx, [esp + 0x12c]
call fcn.004a4690
jmp 0x496fdd
lea ecx, [esp + 0x98]
call fcn.004a4690
lea ecx, [esp + 0x12c]
call fcn.004a4690
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x496fdd
cmp edi, 0x59e7
jne 0x490e46
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
mov esi, eax
test esi, esi
je 0x490e39
lea ecx, [esp + 0xf0]
call fcn.004026e0
add esi, 0x48
push esi
lea ecx, [esp + 0x7c]
mov dword [esp + 0x183c], 0x55
call fcn.004020d0
push 0x5ae488
push 0x5984c8
lea eax, [esp + 0x80]
push eax
mov byte [esp + 0x1844], 0x56
call fcn.0041cd10
push 0x5ae480
push 0x5954c4
lea ecx, [esp + 0x80]
push ecx
call fcn.0041cd10
push 0x5ae544
push 0x59d270
lea edx, [esp + 0x80]
push edx
call fcn.0041cd10
mov eax, dword [esp + 0x78]
cmp dword [eax - 0xc], 0
je 0x490e24
push eax
lea eax, [esp + 0xf4]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8slkotlzh_TW
push eax
call fcn.00405480
mov ecx, dword [esp + 0xfc]
mov edx, dword [0x5f2620]
mov eax, dword [edx + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push ecx
push eax
call fcn.004d7180
lea ecx, [esp + 0x78]
call fcn.004a4690
lea ecx, [esp + 0xf0]
call fcn.004a4690
jmp 0x496fdd
lea ecx, [esp + 0x78]
call fcn.004a4690
lea ecx, [esp + 0xf0]
call fcn.004a4690
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x496fdd
cmp edi, 0x59e8
jne 0x490f6d
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
mov esi, eax
test esi, esi
je 0x490f60
lea ecx, [esp + 0x144]
call fcn.004026e0
add esi, 0x48
push esi
lea ecx, [esp + 0x94]
mov dword [esp + 0x183c], 0x57
call fcn.004020d0
push 0x5ae488
push 0x5984c8
lea ecx, [esp + 0x98]
push ecx
mov byte [esp + 0x1844], 0x58
call fcn.0041cd10
push 0x5ae480
push 0x5954c4
lea edx, [esp + 0x98]
push edx
call fcn.0041cd10
push 0x5ae544
push 0x59d270
lea eax, [esp + 0x98]
push eax
call fcn.0041cd10
mov eax, dword [esp + 0x90]
cmp dword [eax - 0xc], 0
je 0x490f48
push eax
lea ecx, [esp + 0x148]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8slzh_TWtlzh_CN
push ecx
call fcn.00405480
mov edx, dword [esp + 0x150]
mov eax, dword [0x5f2620]
mov ecx, dword [eax + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push edx
push ecx
call fcn.004d7180
lea ecx, [esp + 0x90]
call fcn.004a4690
lea ecx, [esp + 0x144]
call fcn.004a4690
jmp 0x496fdd
lea ecx, [esp + 0x90]
call fcn.004a4690
lea ecx, [esp + 0x144]
call fcn.004a4690
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x496fdd
cmp edi, 0x59e9
jne 0x491095
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
mov esi, eax
test esi, esi
je 0x491088
lea ecx, [esp + 0x10c]
call fcn.004026e0
add esi, 0x48
push esi
lea ecx, [esp + 0x84]
mov dword [esp + 0x183c], 0x59
call fcn.004020d0
push 0x5ae488
push 0x5984c8
lea edx, [esp + 0x88]
push edx
mov byte [esp + 0x1844], 0x5a
call fcn.0041cd10
push 0x5ae480
push 0x5954c4
lea eax, [esp + 0x88]
push eax
call fcn.0041cd10
push 0x5ae544
push 0x59d270
lea ecx, [esp + 0x88]
push ecx
call fcn.0041cd10
mov eax, dword [esp + 0x80]
cmp dword [eax - 0xc], 0
je 0x491070
push eax
lea edx, [esp + 0x110]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8slzh_CNtlzh_TW
push edx
call fcn.00405480
mov eax, dword [esp + 0x118]
mov ecx, dword [0x5f2620]
mov edx, dword [ecx + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push eax
push edx
call fcn.004d7180
lea ecx, [esp + 0x80]
call fcn.004a4690
lea ecx, [esp + 0x10c]
call fcn.004a4690
jmp 0x496fdd
lea ecx, [esp + 0x80]
call fcn.004a4690
lea ecx, [esp + 0x10c]
call fcn.004a4690
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x496fdd
cmp edi, 0x59ea
jne 0x4911bd
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
mov esi, eax
test esi, esi
je 0x4911b0
lea ecx, [esp + 0x134]
call fcn.004026e0
add esi, 0x48
push esi
lea ecx, [esp + 0xa4]
mov dword [esp + 0x183c], 0x5b
call fcn.004020d0
push 0x5ae488
push 0x5984c8
lea eax, [esp + 0xa8]
push eax
mov byte [esp + 0x1844], 0x5c
call fcn.0041cd10
push 0x5ae480
push 0x5954c4
lea ecx, [esp + 0xa8]
push ecx
call fcn.0041cd10
push 0x5ae544
push 0x59d270
lea edx, [esp + 0xa8]
push edx
call fcn.0041cd10
mov eax, dword [esp + 0xa0]
cmp dword [eax - 0xc], 0
je 0x491198
push eax
lea eax, [esp + 0x138]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8slzh_CNtlen
push eax
call fcn.00405480
mov ecx, dword [esp + 0x140]
mov edx, dword [0x5f2620]
mov eax, dword [edx + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push ecx
push eax
call fcn.004d7180
lea ecx, [esp + 0xa0]
call fcn.004a4690
lea ecx, [esp + 0x134]
call fcn.004a4690
jmp 0x496fdd
lea ecx, [esp + 0xa0]
call fcn.004a4690
lea ecx, [esp + 0x134]
call fcn.004a4690
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x496fdd
cmp edi, 0x59eb
jne 0x4912e4
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
mov esi, eax
test esi, esi
je 0x4912d7
lea ecx, [esp + 0x114]
call fcn.004026e0
add esi, 0x48
push esi
lea ecx, [esp + 0x8c]
mov dword [esp + 0x183c], 0x5d
call fcn.004020d0
push 0x5ae488
push 0x5984c8
lea ecx, [esp + 0x90]
push ecx
mov byte [esp + 0x1844], 0x5e
call fcn.0041cd10
push 0x5ae480
push 0x5954c4
lea edx, [esp + 0x90]
push edx
call fcn.0041cd10
push 0x5ae544
push 0x59d270
lea eax, [esp + 0x90]
push eax
call fcn.0041cd10
mov eax, dword [esp + 0x88]
cmp dword [eax - 0xc], 0
je 0x4912bf
push eax
lea ecx, [esp + 0x118]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8slzh_TWtlen
push ecx
call fcn.00405480
mov edx, dword [esp + 0x120]
mov eax, dword [0x5f2620]
mov ecx, dword [eax + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push edx
push ecx
call fcn.004d7180
lea ecx, [esp + 0x88]
call fcn.004a4690
lea ecx, [esp + 0x114]
call fcn.004a4690
jmp 0x496fdd
lea ecx, [esp + 0x88]
call fcn.004a4690
lea ecx, [esp + 0x114]
call fcn.004a4690
push 0
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x496fdd
cmp edi, 0x59ec
jne 0x491316
mov edx, dword [0x5f2620]
mov eax, dword [edx + 0x568c]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push str.http:__translate.google.cn
push eax
call fcn.004d7180
jmp 0x496fdd
cmp edi, 0x59ed
jne 0x491348
mov ecx, dword [0x5f2620]
mov edx, dword [ecx + 0x568c]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push str.http:__www.spellify.com
push edx
call fcn.004d7180
jmp 0x496fdd
cmp edi, 0x565b
jne 0x491363
push 0
push 0
push 0x5aebb8
call fcn.00539414
jmp 0x496fdd
cmp edi, 0x565c
jne 0x4913d8
lea ecx, [esp + 0x154]
call fcn.004026e0
lea eax, [esp + 0x154]
push eax
lea ecx, [esi + 0x33e4]
mov dword [esp + 0x183c], 0x5f
call fcn.00534906
lea ebx, [esp + 0x154]
call fcn.00409820
mov esi, dword [esi + 0x568c]
test esi, esi
je 0x4913c7
mov ecx, dword [esp + 0x154]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push ecx
push esi
call fcn.004d7180
lea ecx, [esp + 0x154]
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x565e
jb 0x491584
cmp edi, 0x5690
jae 0x491584
lea ebx, [edi - 0x565e]
test ebx, ebx
jl 0x49149b
cmp ebx, dword [0x5f2b14]
jge 0x49149b
mov edx, dword [0x5f2b20]
mov eax, ebx
mov ecx, 0x5f2b0c
mov dword [esp + 0x210], edx
call fcn.00439be0
mov ecx, dword [esp + 0x210]
mov eax, dword [eax]
push 5
push 0
push ecx
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 2
jne 0x49149b
lea ecx, [esp + 0x5c]
call fcn.004026e0
mov eax, ebx
mov ecx, 0x5f2b0c
mov dword [esp + 0x1838], 0x60
call fcn.00439be0
mov edx, dword [eax]
push edx
lea eax, [esp + 0x60]
push 0x594244
push eax
call fcn.00405480
mov ecx, dword [esp + 0x68]
add esp, 0xc
push 0
push 0
push ecx
call fcn.00539414
lea ecx, [esp + 0x5c]
mov dword [esp + 0x1838], 0xffffffff
call fcn.004a4690
cmp edi, 0x56a4
je 0x493023
cmp edi, 0x56a5
je 0x493023
cmp edi, 0x56a6
je 0x493023
cmp edi, 0x56a7
je 0x493023
cmp edi, 0x56a8
je 0x493023
cmp edi, 0x56a9
je 0x493023
cmp edi, 0x56aa
je 0x493023
cmp edi, 0x56ac
je 0x493023
cmp edi, 0x56ae
je 0x493023
cmp edi, 0x56af
je 0x493023
cmp edi, 0x56ad
je 0x493023
cmp edi, 0x5a7d
jne 0x4918bb
push 0
push 0x110
lea ecx, [esp + 0x51c]
call fcn.0053b652
mov esi, vtable.CDlgRunScript.0
mov dword [esp + 0x514], esi
lea ecx, [esp + 0x514]
mov dword [esp + 0x1838], 0x7b
call fcn.0053bd19
mov dword [esp + 0x1838], 0xffffffff
lea ecx, [esp + 0x514]
mov dword [esp + 0x514], esi
call fcn.0053b5c7
jmp 0x496fdd
lea edx, [edi - 0x5a64]
cmp edx, 0x13
ja 0x491602
push str.HomeURL
mov ebx, 0x5f2b28
call fcn.00472e00
test eax, eax
mov dword [esp + 0x34], eax
jl 0x49149b
mov ecx, 0x5f2b2c
call fcn.0040ddc0
add eax, 0x1c
lea ebx, [edi - 0x5a64]
cmp ebx, dword [eax + 8]
jge 0x49149b
mov eax, dword [esp + 0x34]
mov ecx, 0x5f2b2c
call fcn.0040ddc0
mov ecx, eax
add ecx, 0x1c
mov eax, ebx
call fcn.00439be0
mov eax, dword [eax]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push eax
mov eax, dword [esi + 0x568c]
push eax
call fcn.004d7180
jmp 0x49149b
cmp edi, 0x5a78
jne 0x4916f2
push str.HomeURL
mov ebx, 0x5f2b28
call fcn.00472e00
mov edi, eax
test edi, edi
jge 0x491659
mov edi, dword [0x5f2b34]
lea ecx, [edi + 1]
push 0x5f2b2c
call fcn.0041cff0
push str.HomeURL
mov eax, edi
mov ecx, 0x5f2b2c
call fcn.0040ddc0
mov ecx, eax
add ecx, 4
call fcn.004021d0
test edi, edi
jl 0x496fdd
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c62b0
mov ebx, eax
test ebx, ebx
je 0x496fdd
mov eax, edi
mov ecx, 0x5f2b2c
lea esi, [ebx + 0x10]
call fcn.0040ddc0
mov ecx, eax
add ecx, 8
mov eax, esi
call fcn.0041d500
mov eax, edi
mov ecx, 0x5f2b2c
add ebx, 0xc
call fcn.0040ddc0
mov ecx, eax
add ecx, 0x1c
mov eax, ebx
call fcn.0041d500
lea ecx, [esp + 0x60]
call fcn.004026e0
mov dword [esp + 0x1838], 0x61
mov ecx, dword [ebx]
mov edx, dword [esi]
push ecx
push edx
lea eax, [esp + 0x68]
push 0x5aebe4
push eax
call fcn.00405480
mov ecx, dword [esp + 0x70]
add esp, 0x10
push 0
push 0
push ecx
call fcn.00539414
lea ecx, [esp + 0x60]
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x5a79
jne 0x491849
push str.HomeURL
mov ebx, 0x5f2b28
mov dword [esp + 0x60], 0
call fcn.00472e00
test eax, eax
mov dword [esp + 0x60], eax
jge 0x491757
mov edi, dword [0x5f2b34]
lea ecx, [edi + 1]
push 0x5f2b2c
mov dword [esp + 0x64], edi
call fcn.0041cff0
push str.HomeURL
mov eax, edi
mov ecx, 0x5f2b2c
call fcn.0040ddc0
mov ecx, eax
add ecx, 4
call fcn.004021d0
test edi, edi
jl 0x491802
mov eax, dword [esi + 0x568c]
mov ecx, dword [eax + 0x284]
add eax, 0x22c
mov eax, dword [eax + 0x6c]
xor edi, edi
add eax, ecx
test eax, eax
mov dword [esp + 0x34], edi
jle 0x4917fd
jmp 0x491780
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
mov eax, edi
call fcn.004c5cd0
mov ebx, eax
test ebx, ebx
je 0x4917dc
mov eax, dword [esp + 0x60]
mov ecx, 0x5f2b2c
lea edi, [ebx + 0x10]
call fcn.0040ddc0
mov ecx, eax
add ecx, 8
mov eax, edi
call fcn.0041d500
mov eax, dword [esp + 0x60]
mov ecx, 0x5f2b2c
lea edi, [ebx + 0xc]
call fcn.0040ddc0
mov ecx, eax
add ecx, 0x1c
mov eax, edi
call fcn.0041d500
add dword [esp + 0x5c], 1
mov edi, dword [esp + 0x34]
mov eax, dword [esi + 0x568c]
mov ecx, dword [eax + 0x284]
add eax, 0x22c
mov eax, dword [eax + 0x6c]
add edi, 1
add eax, ecx
cmp edi, eax
mov dword [esp + 0x34], edi
jl 0x491780
call fcn.0041b920
lea ecx, [esp + 0x68]
call fcn.004026e0
mov dword [esp + 0x1838], 0x62
mov edx, dword [esp + 0x5c]
push edx
lea eax, [esp + 0x6c]
push 0x5aec10
push eax
call fcn.00405480
mov ecx, dword [esp + 0x74]
add esp, 0xc
push 0
push 0
push ecx
call fcn.00539414
lea ecx, [esp + 0x68]
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x5a7a
jne 0x49149b
push 0
lea ecx, [esi + 0x1ea4]
call fcn.00405460
push 0
push 0x108
lea ecx, [esp + 0x4a4]
call fcn.0053b652
mov esi, vtable.CDlgHomeEdit.0
mov dword [esp + 0x49c], esi
lea ecx, [esp + 0x49c]
mov dword [esp + 0x1838], 0x63
call fcn.0053bd19
mov dword [esp + 0x1838], 0xffffffff
lea ecx, [esp + 0x49c]
mov dword [esp + 0x49c], esi
call fcn.0053b5c7
jmp 0x496fdd
cmp edi, 0x5a7e
jne 0x4918e4
mov edx, dword [0x5f2c24]
xor eax, eax
cmp dword [0x5f22e8], eax
sete al
mov dword [0x5f22e8], eax
mov dword [edx + 0x408], eax
jmp 0x496fdd
cmp edi, 0x5a7f
jne 0x49190f
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
test eax, eax
je 0x496fdd
call fcn.004c9ff0
jmp 0x496fdd
cmp edi, 0x5af2
jne 0x49192f
mov ecx, esi
call fcn.00537de3
push 0x5626
mov ecx, esi
call fcn.0048e4d0
jmp 0x496fdd
cmp edi, 0x5a80
je 0x491a0f
cmp edi, 0x5a81
jne 0x491979
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c62b0
test eax, eax
je 0x496fdd
xor ecx, ecx
cmp dword [eax + 0x24], ecx
push 1
sete cl
mov dword [eax + 0x24], ecx
lea ecx, [esi + 0xad4]
call fcn.00405460
jmp 0x496fdd
cmp edi, 0x5bcc
jne 0x4919ad
mov esi, dword [esi + 0x568c]
test esi, esi
je 0x496fdd
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push str.http:__i.tg1234.com
push esi
call fcn.004d7180
jmp 0x496fdd
cmp edi, 0x58ac
jb 0x491a49
cmp edi, 0x5910
jae 0x491a49
mov ecx, dword [esi + 0x568c]
lea edx, [edi - 0x58ac]
add ecx, 0x22c
mov dword [esp + 0x34], edx
call fcn.004c63e0
mov ebx, eax
test ebx, ebx
je 0x491a0f
mov eax, dword [esp + 0x34]
cmp eax, dword [ebx + 0x128]
jge 0x491a0f
lea ecx, [ebx + 0x120]
call fcn.00439be0
mov esi, dword [eax]
xor eax, eax
mov ecx, ebx
call fcn.004c8520
mov esi, dword [esp + 0x14]
mov edi, dword [ebp + 8]
cmp edi, 0x5adc
jne 0x493b3c
mov esi, str.VIEW
call fcn.0041b260
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x15b4]
push 0
push 0
push ecx
mov dword [eax + 0x1c68], 0
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x496fdd
cmp edi, 0x5a7b
jne 0x491ae5
lea ecx, [esp + 0x218]
call fcn.004026e0
mov ebx, 0x7c
mov dword [esp + 0x1838], ebx
mov ecx, dword [0x5f21d8]
cmp ecx, dword [0x5f21d0]
jle 0x491ac6
lea edx, [esp + 0x8bc]
push edx
call fcn.0043c160
push esi
mov byte [esp + 0x183c], 0x7d
call fcn.0049d5e0
lea ecx, [esp + 0x8bc]
call fcn.0053bd19
lea ecx, [esp + 0x8bc]
mov byte [esp + 0x1838], bl
call fcn.0043c230
lea ecx, [esp + 0x218]
call fcn.004a4690
jmp 0x496fdd
push 0
push 0
push 0x5aef2c
call fcn.00539414
lea ecx, [esp + 0x218]
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x5910
jb 0x491c59
cmp edi, 0x5974
jae 0x491c59
push str.HELPMENU
mov ebx, 0x5f2ac0
call fcn.00472e00
test eax, eax
mov dword [esp + 0x68], eax
jl 0x491a0f
mov ecx, 0x5f2ac4
lea ebx, [edi - 0x5910]
call fcn.0040ddc0
add eax, 0x1c
cmp ebx, dword [eax + 8]
jge 0x491a0f
mov eax, dword [esp + 0x68]
mov ecx, 0x5f2ac4
call fcn.0040ddc0
mov ecx, eax
mov edi, ebx
add ecx, 0x1c
mov eax, edi
call fcn.00439be0
push eax
lea ecx, [esp + 0x74]
call fcn.004020d0
lea ebx, [esp + 0x70]
mov dword [esp + 0x1838], 0x7e
call fcn.00409820
xor ecx, ecx
mov edx, 0x5984c8
mov esi, ebx
call fcn.0040dcb0
test eax, eax
jge 0x491be5
lea eax, [esp + 0x1ec]
push str.res:__
push eax
mov ecx, 0x5f2868
call fcn.00401c80
push str.BINTGRes.dll_help_faq.htm
push eax
lea ecx, [esp + 0x364]
push ecx
mov byte [esp + 0x184c], 0x7f
call fcn.00401ba0
add esp, 0x14
push eax
mov ecx, ebx
mov byte [esp + 0x183c], 0x80
call fcn.004022f0
lea ecx, [esp + 0x354]
call fcn.004a4690
lea ecx, [esp + 0x1ec]
mov byte [esp + 0x1838], 0x7e
call fcn.004a4690
mov eax, dword [esp + 0x68]
push 0x5aef8c
mov ecx, 0x5f2ac4
call fcn.0040ddc0
mov ecx, eax
add ecx, 8
mov eax, edi
call fcn.00439be0
mov ecx, eax
call fcn.004051a0
test eax, eax
jne 0x491c1d
push str.http:__bbs.tg1234.com
lea ecx, [esp + 0x74]
call fcn.004021d0
mov edx, dword [esp + 0x70]
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x568c]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push edx
push ecx
call fcn.004d7180
lea ecx, [esp + 0x70]
mov dword [esp + 0x1838], 0xffffffff
call fcn.004a4690
jmp 0x491a08
lea edx, [edi - 0x5bcd]
cmp edx, 0xc6
ja 0x491cac
mov ecx, dword [esi + 0x568c]
lea eax, [edi - 0x5bcd]
cmp eax, dword [ecx + 0x1cc]
jge 0x491a0f
add ecx, 0x1c4
call fcn.00439be0
mov eax, dword [eax]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push eax
mov eax, dword [esi + 0x568c]
push eax
call fcn.004d7180
jmp 0x491a0f
cmp edi, 0x59a6
jb 0x492188
cmp edi, 0x59ce
jae 0x492188
mov edx, dword [0x5f2620]
lea ecx, [edi - 0x59a6]
mov dword [esp + 0x30], ecx
mov ecx, dword [edx + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
test eax, eax
mov dword [esp + 0x1ec], eax
je 0x491a0f
lea ebx, [eax + 0x48]
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
je 0x491a0f
push str.about:blank
call fcn.00409820
push eax
call fcn.00443480
add esp, 8
test al, al
je 0x491a0f
lea ecx, [esp + 0x320]
call fcn.00538d38
push ebx
lea ecx, [esp + 0x50]
mov dword [esp + 0x183c], 0x81
call fcn.004020d0
push 7
lea ecx, [esp + 0x2f8]
push ecx
lea ecx, [esp + 0x54]
mov byte [esp + 0x1840], 0x82
call fcn.0040dce0
mov byte [esp + 0x1838], 0x83
mov ebx, dword [esp + 0x1c]
mov eax, dword [eax]
push str.http:__
or ebx, 4
push eax
mov dword [esp + 0x24], ebx
call fcn.005522fc
add esp, 8
test eax, eax
je 0x491db4
push 8
lea edx, [esp + 0x360]
push edx
lea ecx, [esp + 0x54]
call fcn.0040dce0
mov eax, dword [eax]
push 0x5a8580
or ebx, 8
push eax
mov dword [esp + 0x24], ebx
call fcn.005522fc
add esp, 8
test eax, eax
mov byte [esp + 0x1b], 0
jne 0x491db9
mov byte [esp + 0x1b], 1
test bl, 8
je 0x491dd1
and ebx, 0xfffffff7
lea ecx, [esp + 0x35c]
mov dword [esp + 0x1c], ebx
call fcn.004a4690
test bl, 4
mov dword [esp + 0x1838], 0x82
je 0x491df4
and ebx, 0xfffffffb
lea ecx, [esp + 0x2f4]
mov dword [esp + 0x1c], ebx
call fcn.004a4690
cmp byte [esp + 0x1b], 0
je 0x4920dc
lea ecx, [esp + 0x11c]
call fcn.004026e0
lea eax, [esp + 0x11c]
mov byte [esp + 0x1838], 0x84
push eax
mov eax, dword [esp + 0x50]
call fcn.004698d0
add esp, 4
push 4
lea ecx, [esp + 0x368]
push ecx
lea ecx, [esp + 0x124]
call fcn.0040dce0
mov eax, dword [eax]
push str.www.
push eax
call fcn.005522fc
add esp, 8
test eax, eax
lea ecx, [esp + 0x364]
setne bl
call fcn.004a4690
test bl, bl
je 0x492046
lea edx, [esp + 0x11c]
push edx
lea ecx, [esp + 0x28]
call fcn.004020d0
lea ebx, [esp + 0x24]
mov byte [esp + 0x1838], 0x85
call fcn.00409820
mov edi, ebx
call fcn.00431fa0
push 7
lea eax, [esp + 0xc0]
push eax
mov ecx, ebx
call fcn.00401a60
mov bl, 0x86
push str..com.cn
lea ecx, [esp + 0xc0]
mov byte [esp + 0x183c], bl
call fcn.004051a0
test eax, eax
je 0x491f08
push str..net.cn
lea ecx, [esp + 0xc0]
call fcn.004051a0
test eax, eax
je 0x491f08
push str..org.cn
lea ecx, [esp + 0xc0]
call fcn.004051a0
test eax, eax
je 0x491f08
push str..gov.cn
lea ecx, [esp + 0xc0]
call fcn.004051a0
test eax, eax
je 0x491f08
push 0x2e
mov ecx, edi
call fcn.00401a30
jmp 0x491f12
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx - 0xc]
add eax, 0xfffffff9
lea esi, [eax - 1]
test esi, esi
jl 0x491f86
lea esp, [esp]
test esi, esi
jl 0x492593
mov ecx, esi
lea eax, [esp + 0x24]
call fcn.00456b80
movzx eax, ax
cmp ax, 0x2e
je 0x491f43
sub esi, 1
jns 0x491f20
jmp 0x491f86
mov edx, dword [esp + 0x24]
mov eax, dword [edx - 0xc]
sub eax, esi
sub eax, 1
push eax
lea eax, [esp + 0x300]
push eax
lea ecx, [esp + 0x2c]
call fcn.00401a60
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x183c], 0x87
call fcn.004022f0
lea ecx, [esp + 0x2fc]
mov byte [esp + 0x1838], bl
call fcn.004a4690
push 7
lea ecx, [esp + 0x370]
push ecx
lea ecx, [esp + 0x54]
call fcn.0040dce0
mov eax, dword [eax]
push str.http:__
push eax
call fcn.005522fc
add esp, 8
test eax, eax
lea ecx, [esp + 0x36c]
sete bl
call fcn.004a4690
test bl, bl
lea ecx, [esp + 0x24]
je 0x491ff4
lea edx, [esp + 0x304]
push 0x59eb20
push edx
call fcn.00401c80
add esp, 8
lea ecx, [esp + 0x320]
mov byte [esp + 0x1838], 0x88
call fcn.0041d500
lea ecx, [esp + 0x304]
jmp 0x492024
lea eax, [esp + 0x374]
push str.https:__www.
push eax
call fcn.00401c80
add esp, 8
lea ecx, [esp + 0x320]
mov byte [esp + 0x1838], 0x89
call fcn.0041d500
lea ecx, [esp + 0x374]
call fcn.004a4690
lea ecx, [esp + 0xbc]
call fcn.004a4690
lea ecx, [esp + 0x24]
mov byte [esp + 0x1838], 0x84
call fcn.004a4690
mov ecx, 8
mov edx, 0x5954c4
lea esi, [esp + 0x4c]
call fcn.0040dcb0
mov esi, eax
test esi, esi
jle 0x4920c1
mov bl, 0x8a
push esi
lea ecx, [esp + 0x25c]
push ecx
lea ecx, [esp + 0x54]
call fcn.0040dce0
lea edx, [esp + 0x258]
mov byte [esp + 0x1838], bl
mov eax, dword [esp + 0x328]
push edx
push eax
lea ecx, [esp + 0x328]
call fcn.00539068
lea ecx, [esi + 1]
mov edx, 0x5954c4
lea esi, [esp + 0x4c]
call fcn.0040dcb0
lea ecx, [esp + 0x258]
mov esi, eax
mov byte [esp + 0x1838], 0x84
call fcn.004a4690
test esi, esi
jg 0x492061
lea ecx, [esp + 0x11c]
mov byte [esp + 0x1838], 0x82
call fcn.004a4690
mov esi, dword [esp + 0x14]
mov edi, dword [ebp + 8]
mov edx, dword [esp + 0x328]
lea ecx, [esp + 0x4c]
push ecx
push edx
lea ecx, [esp + 0x328]
call fcn.00539068
mov eax, dword [esp + 0x328]
test eax, eax
jle 0x492163
cmp dword [esp + 0x30], 0
jne 0x492110
add eax, 0xfffffffe
mov dword [esp + 0x30], eax
jmp 0x492115
sub dword [esp + 0x30], 1
mov eax, dword [esp + 0x30]
push eax
lea ecx, [esp + 0x324]
call fcn.00463690
push eax
lea ecx, [esp + 0xb4]
call fcn.004020d0
mov byte [esp + 0x1838], 0x8b
mov esi, dword [esp + 0xb0]
mov ecx, dword [esp + 0x1ec]
xor eax, eax
call fcn.004c8520
lea ecx, [esp + 0xb0]
call fcn.004a4690
mov esi, dword [esp + 0x14]
mov edi, dword [ebp + 8]
lea ecx, [esp + 0x4c]
call fcn.004a4690
lea ecx, [esp + 0x320]
mov dword [esp + 0x1838], 0xffffffff
call fcn.00538dd6
jmp 0x491a0f
cmp edi, 0x597e
jb 0x49284c
cmp edi, 0x598d
jae 0x49284c
or eax, 0xffffffff
lea ecx, [esi + 0x11c]
lea edx, [esp + 0x18c]
lea esi, [esp + 0x13c]
mov dword [esp + 0x13c], eax
mov dword [esp + 0x18c], eax
call fcn.0040d420
mov edi, dword [esp + 0x13c]
test edi, edi
jge 0x4921fa
mov ecx, dword [esp + 0x14]
add ecx, 0x1ea4
lea edx, [esp + 0x18c]
call fcn.0040f5c0
mov edi, dword [esp + 0x13c]
test edi, edi
jl 0x491a08
mov ecx, dword [esp + 0x14]
cmp edi, dword [ecx + 0x760]
jge 0x491a08
lea esi, [esp + 0x3c0]
call fcn.00471f60
lea ecx, [esp + 0x100]
mov dword [esp + 0x1838], 0x8c
call fcn.004026e0
push str.plugin5_
lea edx, [esp + 0x318]
push 0x5f2878
mov bl, 0x8d
push edx
mov byte [esp + 0x1844], bl
call fcn.00401ba0
add esp, 0xc
mov esi, eax
mov byte [esp + 0x1838], 0x8e
mov ecx, dword [esp + 0x14]
add ecx, 0x758
mov eax, edi
call fcn.00439be0
mov eax, dword [eax]
add eax, 0x50
push eax
lea ecx, [esp + 0x380]
push esi
push ecx
call fcn.00401ae0
add esp, 0xc
push str._tgplug.ini
push eax
lea edx, [esp + 0x314]
push edx
mov byte [esp + 0x1844], 0x8f
call fcn.00401ba0
add esp, 0xc
lea ecx, [esp + 0x100]
mov byte [esp + 0x1838], 0x90
mov eax, dword [eax]
push ecx
push eax
call fcn.0045f9b0
add esp, 8
lea ecx, [esp + 0x30c]
call fcn.004a4690
lea ecx, [esp + 0x37c]
call fcn.004a4690
lea ecx, [esp + 0x314]
mov byte [esp + 0x1838], bl
call fcn.004a4690
push 0
lea edx, [esp + 0x3c4]
push edx
lea ebx, [esp + 0x108]
call fcn.00472b50
push str.MENU
lea ebx, [esp + 0x3c4]
call fcn.00472e00
mov esi, eax
test esi, esi
jl 0x492823
mov ebx, dword [esp + 0x18c]
test ebx, ebx
jl 0x492823
lea ecx, [esp + 0x3c4]
call fcn.0040ddc0
add eax, 8
cmp ebx, dword [eax + 8]
jge 0x492823
lea ecx, [esp + 0xa8]
call fcn.004026e0
mov byte [esp + 0x1838], 0x91
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0xa8]
push eax
add ecx, 0x33e4
call fcn.00534906
lea ecx, [esp + 0xf8]
call fcn.004026e0
lea ecx, [esp + 0x1d4]
call fcn.004026e0
lea ecx, [esp + 0x394]
push ecx
lea edx, [esp + 0x1d8]
push edx
lea eax, [esp + 0x100]
push eax
lea ecx, [esp + 0x3c8]
mov byte [esp + 0x1844], 0x93
mov edx, dword [esp + 0xb4]
push ecx
push edx
call fcn.0053aa0f
mov eax, esi
lea ecx, [esp + 0x3c4]
call fcn.0040ddc0
mov ecx, eax
add ecx, 0x1c
mov eax, ebx
call fcn.00439be0
push eax
lea ecx, [esp + 0x44]
call fcn.004020d0
mov byte [esp + 0x1838], 0x94
mov eax, dword [esp + 0xf8]
push eax
push str._domain
lea ecx, [esp + 0x48]
push ecx
call fcn.0041cd10
mov edx, dword [esp + 0xa8]
push edx
push str._url
lea eax, [esp + 0x48]
push eax
call fcn.0041cd10
push str.plugin5_
lea ecx, [esp + 0x390]
push 0x5f2878
push ecx
call fcn.00401ba0
add esp, 0xc
mov esi, eax
mov eax, edi
mov ecx, 0x5f2ae4
mov byte [esp + 0x1838], 0x95
call fcn.00439be0
push eax
lea edx, [esp + 0x388]
push esi
push edx
call fcn.00401ae0
add esp, 0xc
mov byte [esp + 0x1838], 0x96
mov eax, dword [eax]
push eax
push str._dir
lea eax, [esp + 0x48]
push eax
call fcn.0041cd10
lea ecx, [esp + 0x384]
call fcn.004a4690
lea ecx, [esp + 0x38c]
call fcn.004a4690
xor ecx, ecx
mov edx, 0x5a857c
lea esi, [esp + 0x40]
call fcn.0040dcb0
lea ecx, [esp + 0x44]
mov esi, eax
call fcn.004026e0
lea ecx, [esp + 0xf4]
call fcn.004026e0
lea ecx, [esp + 0x58]
call fcn.004026e0
test esi, esi
mov byte [esp + 0x1838], 0x99
jl 0x492545
push esi
lea ecx, [esp + 0x320]
push ecx
lea ecx, [esp + 0x48]
call fcn.0040dce0
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x183c], 0x9a
call fcn.004022f0
lea ecx, [esp + 0x31c]
mov byte [esp + 0x1838], 0x99
call fcn.004a4690
mov edx, dword [esp + 0x40]
mov eax, dword [edx - 0xc]
sub eax, esi
sub eax, 1
push eax
lea eax, [esp + 0x36c]
push eax
lea ecx, [esp + 0x48]
call fcn.00401a60
push eax
lea ecx, [esp + 0xf8]
mov byte [esp + 0x183c], 0x9b
call fcn.004022f0
lea ecx, [esp + 0x368]
mov byte [esp + 0x1838], 0x99
call fcn.004a4690
jmp 0x492553
lea ecx, [esp + 0x40]
push ecx
lea ecx, [esp + 0x48]
call fcn.004022f0
mov ebx, dword [esp + 0x44]
cmp dword [ebx - 0xc], 0
je 0x4927d8
xor ecx, ecx
mov edx, str.http:__
lea esi, [esp + 0x44]
call fcn.0040dcb0
test eax, eax
je 0x4927b9
xor ecx, ecx
mov edx, 0x5a8580
call fcn.0040dcb0
test eax, eax
je 0x4927b9
cmp dword [ebx - 0xc], 0
jge 0x49259d
push 0x80070057
call fcn.00401f70
movzx eax, word [ebx]
cmp ax, 0x2a
jne 0x49267c
lea ecx, [esp + 0x124]
call fcn.004026e0
lea ecx, [esp + 0xd0]
call fcn.004026e0
mov byte [esp + 0x1838], 0x9d
mov eax, dword [ebx - 0xc]
add eax, 0xffffffff
push eax
lea edx, [esp + 0x33c]
push edx
lea ecx, [esp + 0x4c]
call fcn.00401a60
push eax
lea ecx, [esp + 0x128]
mov byte [esp + 0x183c], 0x9e
call fcn.004022f0
lea ecx, [esp + 0x338]
mov byte [esp + 0x1838], 0x9d
call fcn.004a4690
lea ecx, [esp + 0x1b]
call fcn.00424640
mov byte [esp + 0x1838], 0x9f
mov edi, dword [esp + 0x124]
lea esi, [esp + 0xd0]
call fcn.00462f30
mov eax, dword [esp + 0xd0]
cmp dword [eax - 0xc], 0
je 0x4926d7
mov ecx, esi
push ecx
lea ecx, [esp + 0x48]
call fcn.004022f0
lea ecx, [esp + 0x1b]
mov byte [esp + 0x1838], 0x9d
call fcn.00424530
mov ecx, esi
call fcn.004a4690
lea ecx, [esp + 0x124]
mov byte [esp + 0x1838], 0x99
call fcn.004a4690
mov ebx, dword [esp + 0x44]
mov esi, dword [esp + 0xf4]
push 5
push 0
push esi
push ebx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 2
je 0x492796
cmp eax, 3
je 0x492796
cmp eax, 0x20
jge 0x4927d8
push esi
lea edx, [esp + 0x5c]
push 0x5ade3c
push edx
call fcn.00405480
mov eax, dword [esp + 0x64]
add esp, 0xc
push 0
push 0
push eax
call fcn.00539414
jmp 0x4927d8
push edi
push ebx
lea edx, [esp + 0x60]
push 0x5af018
push edx
call fcn.00405480
mov eax, dword [esp + 0x68]
add esp, 0x10
push 0
push 0
push eax
call fcn.00539414
lea ecx, [esp + 0x1b]
mov byte [esp + 0x1838], 0x9d
call fcn.00424530
lea ecx, [esp + 0xd0]
call fcn.004a4690
lea ecx, [esp + 0x124]
call fcn.004a4690
lea ecx, [esp + 0x58]
call fcn.004a4690
lea ecx, [esp + 0xf4]
call fcn.004a4690
lea ecx, [esp + 0x44]
call fcn.004a4690
lea ecx, [esp + 0x40]
call fcn.004a4690
lea ecx, [esp + 0x1d4]
call fcn.004a4690
lea ecx, [esp + 0xf8]
call fcn.004a4690
lea ecx, [esp + 0xa8]
call fcn.004a4690
lea ecx, [esp + 0x100]
call fcn.004a4690
lea ecx, [esp + 0x3c0]
push ecx
mov dword [esp + 0x183c], 0xffffffff
call fcn.00471fa0
jmp 0x496fdd
push ebx
lea ecx, [esp + 0x5c]
push 0x5ade28
push ecx
call fcn.00405480
mov edx, dword [esp + 0x64]
add esp, 0xc
push 0
push 0
push edx
call fcn.00539414
jmp 0x4927d8
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x568c]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push ebx
push ecx
call fcn.004d7180
lea ecx, [esp + 0x58]
call fcn.004a4690
lea ecx, [esp + 0xf4]
call fcn.004a4690
lea ecx, [esp + 0x44]
call fcn.004a4690
lea ecx, [esp + 0x40]
call fcn.004a4690
lea ecx, [esp + 0x1d4]
call fcn.004a4690
lea ecx, [esp + 0xf8]
call fcn.004a4690
lea ecx, [esp + 0xa8]
call fcn.004a4690
lea ecx, [esp + 0x100]
call fcn.004a4690
lea edx, [esp + 0x3c0]
push edx
mov dword [esp + 0x183c], 0xffffffff
call fcn.00471fa0
jmp 0x491a08
lea eax, [edi - 0x5b69]
cmp eax, 0x63
ja 0x49288d
mov eax, dword [esi + 0x568c]
mov edx, dword [eax + 0x284]
mov ebx, dword [eax + 0x298]
lea ecx, [edi - 0x5b69]
add ebx, edx
cmp ecx, ebx
jge 0x491a0f
test ecx, ecx
jl 0x491a0f
push ecx
push eax
call fcn.004d84d0
jmp 0x491a0f
cmp edi, 0x5650
jne 0x4928cc
push 0
push 0
push 0x5af050
call fcn.00539414
mov esi, dword [esi + 0x568c]
test esi, esi
je 0x496fdd
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push 0
push esi
call fcn.004d7180
jmp 0x496fdd
cmp edi, 0x5848
jb 0x492912
cmp edi, 0x585c
jae 0x492912
mov eax, dword [esi + 0x568c]
mov edx, dword [eax + 0x284]
mov ebx, dword [eax + 0x298]
lea ecx, [edi - 0x5848]
add ebx, edx
cmp ecx, ebx
jge 0x491a0f
test ecx, ecx
jl 0x491a0f
push ecx
push eax
call fcn.004d84d0
jmp 0x491a0f
cmp edi, 0x5687
jne 0x492970
lea ecx, [esp + 0x994]
push ecx
call fcn.00429950
lea ecx, [esp + 0x994]
mov dword [esp + 0x1838], 0xa0
call fcn.0053bd19
lea ecx, [esi + 0x114]
call fcn.00539717
mov esi, dword [esi + 0x568c]
call fcn.004dcd00
lea ecx, [esp + 0x994]
mov dword [esp + 0x1838], 0xffffffff
call fcn.004299f0
jmp 0x496fdd
cmp edi, 0x568c
jne 0x492998
mov esi, str.BROWSER
call fcn.0041b260
mov ecx, dword [esp + 0x14]
add ecx, 0x1ea4
push 0
call fcn.00405460
jmp 0x496fdd
cmp edi, 0x568d
jne 0x4929a7
mov esi, str.HISTORY
jmp 0x49297d
cmp edi, 0x568e
jne 0x4929b6
mov esi, 0x599a54
jmp 0x49297d
cmp edi, 0x568f
jne 0x4929c5
mov esi, str.COPYSCREEN
jmp 0x49297d
cmp edi, 0x565a
jne 0x4929d4
mov esi, str.SAFE
jmp 0x49297d
cmp edi, 0x56a1
jne 0x492bc6
cmp dword [0x5f2ddc], 0
push 0
mov ecx, esi
je 0x492ab7
push SysReAllocStringLen
push 0
call fcn.00537c98
push 0
push 0
push 0
mov ecx, esi
call fcn.00537c98
push 0
push 0
push 0xc00000
mov ecx, esi
call fcn.00537c98
push 0
push 0
push 0x80000
mov ecx, esi
call fcn.00537c98
push 0
push 0
push 0x40000
mov ecx, esi
call fcn.00537c98
push 0
push 0
push 0x20000
mov ecx, esi
call fcn.00537c98
push 0
push 0
push 0x10000
mov ecx, esi
call fcn.00537c98
lea edi, [esi + 0xa4]
mov dword [0x5f2ddc], 0
mov ecx, edi
mov byte [esi + 0xa0], 1
call fcn.00537399
lea edx, [esp + 0x398]
push edx
push edi
mov ebx, str.Main_N1.bmp
mov ecx, 0x5f2dc8
call fcn.004e6bd0
mov ecx, dword [esi + 0x84]
sub ecx, dword [esi + 0x88]
mov eax, dword [esp + 0x398]
add ecx, eax
mov dword [esi + 0xe4], ecx
mov ecx, dword [esp + 0x39c]
jmp 0x492b71
push 0
push SysReAllocStringLen
call fcn.00537c98
push 0
push 0
push 0
mov ecx, esi
call fcn.00537c98
push 0
push 0xc00000
push 0
mov ecx, esi
call fcn.00537c98
push 0
push 0x80000
push 0
mov ecx, esi
call fcn.00537c98
push 0
push 0x40000
push 0
mov ecx, esi
call fcn.00537c98
push 0
push 0x20000
push 0
mov ecx, esi
call fcn.00537c98
push 0
push 0x10000
push 0
mov ecx, esi
call fcn.00537c98
lea edi, [esi + 0xa4]
mov ecx, edi
mov dword [0x5f2ddc], 1
call fcn.00537399
lea eax, [esp + 0x3a0]
push eax
push edi
mov ebx, str.Main_N.bmp
mov ecx, 0x5f2dc8
call fcn.004e6bd0
mov ecx, dword [esi + 0x84]
sub ecx, dword [esi + 0x88]
mov eax, dword [esp + 0x3a0]
add ecx, eax
mov dword [esi + 0xe4], ecx
mov ecx, dword [esp + 0x3a4]
mov edx, dword [esi + 0x8c]
sub edx, dword [esi + 0x90]
mov dword [esi + 0x98], ecx
add edx, ecx
mov dword [esi + 0x94], eax
mov dword [esi + 0xe8], edx
mov edi, dword [0x5f22a4]
mov dword [0x5f22a4], 0
call fcn.00479a10
mov ecx, dword [esp + 0x14]
push 0
push 0xf120
push 0x112
call fcn.00409980
mov dword [0x5f22a4], edi
jmp 0x496fdd
cmp edi, 0x56a0
jne 0x492bd8
mov esi, str.SEARCHBOX
jmp 0x49297d
cmp edi, 0x568b
jne 0x492c23
xor eax, eax
cmp dword [0x5f22ac], eax
sete al
mov dword [0x5f22ac], eax
cmp dword [esi + 0x108], 2
jne 0x496fdd
mov eax, esi
call fcn.00479ed0
push 0
lea ecx, [esi + 0x1ea4]
call fcn.00405460
lea ecx, [esi + 0xad4]
push 0
call fcn.00405460
jmp 0x496fdd
cmp edi, 0x568a
jne 0x492c89
mov eax, dword [0x5f2620]
xor ecx, ecx
cmp dword [0x5f22bc], ecx
sete cl
mov dword [0x5f22bc], ecx
call fcn.00479ed0
mov esi, dword [0x5f2620]
call fcn.0047adf0
mov edi, dword [esp + 0x14]
mov eax, dword [edi + 0x568c]
test eax, eax
je 0x492c6a
lea esi, [eax + 0x22c]
call fcn.004c7590
push 0
lea ecx, [edi + 0x11c]
call fcn.00405460
lea ecx, [edi + 0xad4]
push 0
call fcn.00405460
jmp 0x496fdd
cmp edi, 0x5690
jne 0x492ca9
mov esi, str.PLAYBAR
call fcn.0041b260
mov eax, dword [esp + 0x14]
call fcn.00479ed0
jmp 0x496fdd
cmp edi, 0x5691
jne 0x492cc9
mov esi, str.LRCTIME
call fcn.0041b260
mov eax, dword [esp + 0x14]
call fcn.00479ed0
jmp 0x496fdd
cmp edi, 0x5692
jne 0x491a0f
mov esi, str.ALEXA
call fcn.0041b260
mov eax, dword [0x5f2620]
cmp dword [eax + 0x1c88], 0
jle 0x49301e
mov eax, dword [eax + 0x1c84]
mov edx, dword [eax]
cmp dword [edx + 0x64], 0
jne 0x493d4e
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x568c]
add ecx, 0x22c
call fcn.004c63e0
mov ebx, eax
test ebx, ebx
je 0x493d4e
mov ecx, dword [ebx + 0x48]
cmp dword [ecx - 0xc], 0
lea esi, [ebx + 0x48]
je 0x493d4e
lea ecx, [esp + 0x48]
call fcn.004026e0
lea ecx, [esp + 0x268]
mov dword [esp + 0x1838], 0xa1
call fcn.004026e0
push esi
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x183c], 0xa2
call fcn.004020d0
lea edx, [esp + 0x268]
push edx
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x1ac]
mov byte [esp + 0x1840], 0xa3
call fcn.004696a0
add esp, 8
test eax, eax
jne 0x492d98
lea esi, [esp + 0x48]
call fcn.004622f0
mov ecx, dword [esp + 0x48]
mov eax, dword [ecx - 0xc]
test eax, eax
je 0x492ddb
push 4
lea edx, [esp + 0x394]
push edx
lea ecx, [esp + 0x1ac]
call fcn.0040dce0
mov byte [esp + 0x1838], 0xa4
or dword [esp + 0x1c], 0x10
push 0x59c0c8
mov ecx, eax
call fcn.004051a0
test eax, eax
mov byte [esp + 0x1b], 1
je 0x492de0
mov byte [esp + 0x1b], 0
mov dword [esp + 0x1838], 0xa3
test byte [esp + 0x1c], 0x10
je 0x492dfe
lea ecx, [esp + 0x390]
call fcn.004a4690
cmp byte [esp + 0x1b], 0
je 0x492ff8
mov ecx, dword [0x5f2620]
mov edi, dword [ecx + 0x568c]
lea eax, [esp + 0x48]
push eax
add edi, 0x22c
call fcn.004c6be0
test eax, eax
jg 0x492e9e
cmp eax, 0xffffffff
je 0x492e9e
lea ecx, [esp + 0x194]
mov dword [esp + 0xb0], 0
call fcn.004026e0
mov byte [esp + 0x1838], 0xa5
mov edx, dword [esp + 0x48]
push edx
lea eax, [esp + 0x198]
push str.URL:http:__data.alexa.com_data_cli10datsnbaurl_s_r_nMemorySave:true_r_nRetryTimes:1
push eax
call fcn.00405480
mov ecx, dword [esp + 0x1a0]
add esp, 0xc
push ecx
mov ecx, dword [ebx + 0x44]
mov eax, 0x25
call fcn.0051dde0
add esp, 4
test eax, eax
je 0x492e88
call fcn.0051de20
lea ecx, [esp + 0x194]
mov byte [esp + 0x1838], 0xa3
call fcn.004a4690
jmp 0x492ea5
mov dword [esp + 0xb0], eax
mov eax, dword [0x5f2620]
mov edi, dword [eax + 0x568c]
lea edx, [esp + 0x48]
push edx
add edi, 0x22c
call fcn.004c6cf0
test eax, eax
jge 0x492fd7
cmp eax, 0xffffffff
je 0x492fd7
lea ecx, [esp + 0x1dc]
mov esi, 0xfffffffd
call fcn.004026e0
lea ecx, [esp + 0x19c]
call fcn.004026e0
mov byte [esp + 0x1838], 0xa7
mov ecx, dword [esp + 0x48]
push ecx
lea ecx, [esp + 0x344]
call fcn.00426b80
lea edx, [esp + 0x1dc]
mov byte [esp + 0x1838], 0xa8
mov eax, dword [eax]
push edx
call fcn.00468310
add esp, 4
lea ecx, [esp + 0x340]
mov byte [esp + 0x1838], 0xa7
call fcn.004a4690
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x1dc]
push eax
push ecx
lea edx, [esp + 0x1a4]
push str.http:__www.google.com.hk_search_clientnavclient_autoch_sfeaturesRankqinfo:_s
push edx
call fcn.00405480
add esp, 0x10
lea ecx, [esp + 0x214]
call fcn.004026e0
mov byte [esp + 0x1838], 0xa9
mov eax, dword [esp + 0x19c]
push eax
lea ecx, [esp + 0x218]
push str.URL:_s_r_nMemorySave:true_r_nRetryTimes:1
push ecx
call fcn.00405480
mov edx, dword [esp + 0x220]
mov ecx, dword [ebx + 0x44]
add esp, 0xc
push edx
mov eax, 0x2d
call fcn.0051dde0
add esp, 4
test eax, eax
je 0x492fa9
call fcn.0051de20
lea ecx, [esp + 0x214]
call fcn.004a4690
lea ecx, [esp + 0x19c]
call fcn.004a4690
lea ecx, [esp + 0x1dc]
mov byte [esp + 0x1838], 0xa3
call fcn.004a4690
jmp 0x492fd9
mov esi, eax
cmp dword [esp + 0xb0], 0
jg 0x492fe7
test esi, esi
jl 0x492ff8
mov ebx, dword [0x5f2620]
add ebx, 0x1594
call fcn.004c3db0
lea ecx, [esp + 0x1a4]
call fcn.004a4690
lea ecx, [esp + 0x268]
call fcn.004a4690
lea ecx, [esp + 0x48]
call fcn.004a4690
jmp 0x493d4e
call fcn.00530cad
call fcn.00530e1f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x49303d
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xd8], eax
mov dword [esp + 0x1838], 0x64
call fcn.00530e1f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x493075
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
push 0x400
lea eax, [esp + 0xdc]
mov byte [esp + 0x183c], 0x65
call fcn.00460d00
add esp, 4
lea ebx, [esp + 0xd8]
call fcn.00409830
mov edi, eax
call fcn.004098b0
call fcn.00530e1f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4930ce
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x234], eax
mov byte [esp + 0x1838], 0x66
call fcn.00530e1f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x493103
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x254], eax
mov byte [esp + 0x1838], 0x67
call fcn.00530e1f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x493138
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x290], eax
mov byte [esp + 0x1838], 0x68
call fcn.00530e1f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x49316d
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x22c], eax
mov byte [esp + 0x1838], 0x69
call fcn.00530e1f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4931a2
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x288], eax
mov byte [esp + 0x1838], 0x6a
call fcn.00530e1f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4931d7
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x264], eax
mov byte [esp + 0x1838], 0x6b
call fcn.00530e1f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x49320c
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x280], eax
mov byte [esp + 0x1838], 0x6c
call fcn.00530e1f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x493241
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x224], eax
mov byte [esp + 0x1838], 0x6d
call fcn.00530e1f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x493276
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x20c], eax
mov byte [esp + 0x1838], 0x6e
call fcn.00530e1f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4932ab
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x74], eax
mov byte [esp + 0x1838], 0x6f
call fcn.00530e1f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4932dd
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x1b4], eax
mov byte [esp + 0x1838], 0x70
call fcn.00530e1f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x493312
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x1e4], eax
mov byte [esp + 0x1838], 0x71
call fcn.00530e1f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x493347
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x1ac], eax
mov byte [esp + 0x1838], 0x72
call fcn.00530e1f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x49337c
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xc0], eax
mov byte [esp + 0x1838], 0x73
call fcn.00530e1f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4933b1
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x278], eax
mov byte [esp + 0x1838], 0x74
call fcn.00530e1f
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4933e6
push 0x80004005
call fcn.00401f70
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x270], eax
mov byte [esp + 0x1838], 0x75
mov ecx, dword [esp + 0xd8]
cmp dword [ecx - 0xc], 0
je 0x493830
lea edx, [esp + 0x224]
push edx
lea eax, [esp + 0x268]
push eax
lea ecx, [esp + 0x234]
push ecx
lea edx, [esp + 0x260]
push edx
lea eax, [esp + 0x244]
push eax
lea ecx, [esp + 0x284]
push ecx
lea edx, [esp + 0x290]
push edx
lea eax, [esp + 0xdc]
push eax
lea ecx, [esp + 0x1d4]
push ecx
lea edx, [esp + 0x98]
push edx
lea eax, [esp + 0x234]
push eax
lea ecx, [esp + 0x104]
push ecx
lea edx, [esp + 0x1dc]
lea ecx, [esp + 0x214]
call fcn.00466b30
mov eax, dword [ebp + 8]
add esp, 0x30
cmp eax, 0x56a4
jne 0x4934d0
mov edx, dword [esp + 0x1b4]
push edx
lea eax, [esp + 0x2c]
push 0x5aec40
push eax
call fcn.00405480
mov ecx, dword [esp + 0x34]
mov edx, dword [esi + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push ecx
push edx
call fcn.004d7180
jmp 0x493830
cmp eax, 0x56ad
jne 0x4934fe
mov eax, dword [esp + 0x20c]
mov ecx, dword [esi + 0x568c]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push eax
push ecx
call fcn.004d7180
jmp 0x493830
cmp eax, 0x56a5
jne 0x493540
mov edx, dword [esp + 0x74]
push edx
lea eax, [esp + 0x2c]
push str.http:__www.tgsoso.com__key_stypeeng
push eax
call fcn.00405480
mov ecx, dword [esp + 0x34]
mov edx, dword [esi + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push ecx
push edx
call fcn.004d7180
jmp 0x493830
cmp eax, 0x56a6
jne 0x493604
lea ecx, [esp + 0x408]
call fcn.00538d38
mov dword [esp + 0x408], 0x5937c4
lea eax, [esp + 0x408]
push eax
mov edi, 0x5f2a28
mov byte [esp + 0x183c], 0x76
call fcn.0044fe30
push 1
mov ebx, 0x5aec98
lea edi, [esp + 0x40c]
call fcn.004aade0
test eax, eax
jge 0x4935b5
push 0
push 0
push str.b_rN0R
call fcn.00539414
mov ecx, edi
mov byte [esp + 0x1838], 0x75
call fcn.00538dd6
jmp 0x493830
mov ecx, dword [esp + 0x74]
push ecx
lea edx, [esp + 0x2c]
push 0x5aecd0
push edx
call fcn.00405480
mov eax, dword [esp + 0x34]
mov ecx, dword [esi + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push eax
push ecx
call fcn.004d7180
lea ecx, [esp + 0x408]
mov byte [esp + 0x1838], 0x75
call fcn.00538dd6
jmp 0x493830
cmp eax, 0x56ae
jne 0x493646
mov edx, dword [esp + 0x74]
push edx
lea eax, [esp + 0x2c]
push 0x5aed28
push eax
call fcn.00405480
mov ecx, dword [esp + 0x34]
mov edx, dword [esi + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push ecx
push edx
call fcn.004d7180
jmp 0x493830
cmp eax, 0x56af
jne 0x493688
mov eax, dword [esp + 0x74]
push eax
lea ecx, [esp + 0x2c]
push 0x5aed88
push ecx
call fcn.00405480
mov edx, dword [esp + 0x34]
mov eax, dword [esi + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push edx
push eax
call fcn.004d7180
jmp 0x493830
cmp eax, 0x56a7
jne 0x4936bb
mov ecx, dword [esp + 0x1e4]
mov edx, dword [esi + 0x568c]
push 1
push 1
push 0
push ecx
push 0x595520
push 0x593784
push edx
or ecx, 0xffffffff
call fcn.004d7ba0
jmp 0x493830
cmp eax, 0x56a8
jne 0x493721
lea ecx, [esp + 0x1fc]
call fcn.004026e0
mov byte [esp + 0x1838], 0x77
mov eax, dword [esp + 0x1ac]
push eax
lea ecx, [esp + 0x200]
push str.http:__www.tgsoso.com__key_stype
push ecx
call fcn.00405480
mov edx, dword [esp + 0x208]
mov eax, dword [esi + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push edx
push eax
call fcn.004d7180
lea ecx, [esp + 0x1fc]
jmp 0x49382b
cmp eax, 0x56aa
jne 0x493830
push 1
lea ecx, [esp + 0xe4]
push ecx
lea ecx, [esp + 0xc8]
call fcn.0040dce0
push 0x598508
lea ecx, [esp + 0xe4]
mov byte [esp + 0x183c], 0x78
call fcn.004051a0
test eax, eax
je 0x4937b5
push 0x5a85e4
lea ecx, [esp + 0xe4]
call fcn.004051a0
test eax, eax
je 0x4937b5
mov edx, dword [esp + 0xc0]
push edx
lea eax, [esp + 0xe4]
push str.http:__fund.jrj.com.cn_fund_main_seek.asp_symbol_sgotourljjjz
push eax
call fcn.00405480
mov ecx, dword [esp + 0xec]
mov edx, dword [esi + 0x568c]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push ecx
push edx
call fcn.004d7180
jmp 0x493824
push str.http:__share.jrj.com.cn_cominfo_go.asp_symbol
lea ecx, [esp + 0x34c]
call fcn.00450b00
lea ecx, [esp + 0xc0]
push ecx
push eax
lea edx, [esp + 0x378]
push edx
mov byte [esp + 0x1844], 0x79
call fcn.00401ae0
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
mov byte [esp + 0x1850], 0x7a
mov eax, dword [eax]
push 0
push eax
mov eax, dword [esi + 0x568c]
push eax
call fcn.004d7180
lea ecx, [esp + 0x370]
call fcn.004a4690
lea ecx, [esp + 0x348]
call fcn.004a4690
lea ecx, [esp + 0xe0]
call fcn.004a4690
mov byte [esp + 0x1838], 0x74
mov eax, dword [esp + 0x270]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x49385b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1838], 0x73
mov eax, dword [esp + 0x278]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x493886
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1838], 0x72
mov eax, dword [esp + 0xc0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4938b1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1838], 0x71
mov eax, dword [esp + 0x1ac]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4938dc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1838], 0x70
mov eax, dword [esp + 0x1e4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x493907
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1838], 0x6f
mov eax, dword [esp + 0x1b4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x493932
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1838], 0x6e
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x49395a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1838], 0x6d
mov eax, dword [esp + 0x20c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x493985
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1838], 0x6c
mov eax, dword [esp + 0x224]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4939b0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1838], 0x6b
mov eax, dword [esp + 0x280]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4939db
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1838], 0x6a
mov eax, dword [esp + 0x264]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x493a06
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1838], 0x69
mov eax, dword [esp + 0x288]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x493a31
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1838], 0x68
mov eax, dword [esp + 0x22c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x493a5c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1838], 0x67
mov eax, dword [esp + 0x290]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x493a87
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1838], 0x66
mov eax, dword [esp + 0x254]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x493ab2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1838], 0x65
mov eax, dword [esp + 0x234]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x493add
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1838], 0x64
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x493b05
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x1838], 0xffffffff
mov eax, dword [esp + 0xd8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x491a0c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x491a0c
cmp edi, 0x5add
jne 0x493b72
mov esi, str.FRONT
call fcn.0041b260
mov eax, dword [esp + 0x14]
mov edx, dword [eax + 0x15b4]
push 0
push 0
push edx
mov dword [eax + 0x1c68], 0
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x496fdd
cmp edi, 0x5ade
jne 0x493ba8
mov esi, str.OPENNEW
call fcn.0041b260
mov eax, dword [esp + 0x14]
push 0
mov dword [eax + 0x1c68], 0
mov eax, dword [eax + 0x15b4]
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x496fdd
cmp edi, 0x5adf
jne 0x493bde
mov esi, str.POPUP
call fcn.0041b260
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x15b4]
push 0
push 0
push ecx
mov dword [eax + 0x1c68], 0
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x496fdd
cmp edi, 0x5ae0
jne 0x493c10
mov esi, 0x599b58
call fcn.0041b260
mov eax, dword [esp + 0x14]
push 0
lea ecx, [eax + 0x1594]
mov dword [eax + 0x1c68], 0
call fcn.00405460
jmp 0x496fdd
cmp edi, 0x5ae1
jne 0x493c42
mov esi, 0x599b68
call fcn.0041b260
mov eax, dword [esp + 0x14]
push 0
lea ecx, [eax + 0x1594]
mov dword [eax + 0x1c68], 0
call fcn.00405460
jmp 0x496fdd
cmp edi, 0x5ae2
jne 0x493c74
mov esi, str.PRIVATE
call fcn.0041b260
mov eax, dword [esp + 0x14]
push 0
lea ecx, [eax + 0x1594]
mov dword [eax + 0x1c68], 0
call fcn.00405460
jmp 0x496fdd
cmp edi, 0x5ae3
jne 0x493ca6
mov esi, str.OTHER
call fcn.0041b260
mov eax, dword [esp + 0x14]
push 0
lea ecx, [eax + 0x1594]
mov dword [eax + 0x1c68], 0
call fcn.00405460
jmp 0x496fdd
cmp edi, 0x5ae4
jne 0x493cd8
mov esi, str.SAFE2
call fcn.0041b260
mov eax, dword [esp + 0x14]
push 0
lea ecx, [eax + 0x1594]
mov dword [eax + 0x1c68], 0
call fcn.00405460
jmp 0x496fdd
cmp edi, 0x5ae5
jne 0x493d0a
mov esi, str.USER
call fcn.0041b260
mov eax, dword [esp + 0x14]
push 0
lea ecx, [eax + 0x1594]
mov dword [eax + 0x1c68], 0
call fcn.00405460
jmp 0x496fdd
cmp edi, 0x5ae6
jne 0x493d3c
mov esi, str.SLIENT
call fcn.0041b260
mov eax, dword [esp + 0x14]
push 0
lea ecx, [eax + 0x1594]
mov dword [eax + 0x1c68], 0
call fcn.00405460
jmp 0x496fdd
cmp edi, 0x5ae7
jne 0x493d6e
mov esi, str.ZOOM
call fcn.0041b260
mov eax, dword [esp + 0x14]
lea ecx, [eax + 0x1594]
push 0
mov dword [eax + 0x1c68], 0
call fcn.00405460
jmp 0x496fdd
cmp edi, 0x59d9
jne 0x493d91
mov edi, dword [esi + 0x568c]
xor eax, eax
cmp dword [0x5f2310], eax
sete al
call fcn.004d9540
jmp 0x496fdd
cmp edi, 0x59da
jne 0x493dcd
mov eax, 1
cmp dword [0x5f2320], eax
jne 0x493db5
mov dword [0x5f2320], 0
jmp 0x496fdd
push 0
push 0
push 0x5af218
mov dword [0x5f2320], eax
call fcn.00539414
jmp 0x496fdd
cmp edi, 0x59db
jne 0x493dfa
mov eax, 2
cmp dword [0x5f2320], eax
je 0x493da6
push 0
push 0
push 0x5af248
mov dword [0x5f2320], eax
call fcn.00539414
jmp 0x496fdd
cmp edi, 0x59dc
jne 0x493e1b
mov ecx, dword [esi + 0x568c]
push 0
push 1
push 1
or edx, 0xffffffff
call fcn.004d7950
jmp 0x496fdd
cmp edi, 0x59dd
jne 0x493e3c
mov ecx, dword [esi + 0x568c]
push 0
push 1
push 2
or edx, 0xffffffff
call fcn.004d7950
jmp 0x496fdd
cmp edi, 0x5abf
jne 0x493eac
mov ecx, dword [esi + 0x568c]
push 1
push 1
push 1
or edx, 0xffffffff
call fcn.004d7950
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c62b0
mov esi, eax
test esi, esi
je 0x496fdd
mov eax, dword [0x5f2c4c]
mov ecx, eax
push ecx
add eax, 1
lea edi, [esi + 0x14]
push str._vz_
push edi
mov dword [0x5f2c4c], eax
call fcn.00405480
add esp, 0xc
mov ecx, esi
call fcn.004c5620
mov esi, dword [edi]
mov ecx, 0x5f27f8
call fcn.004d45c0
jmp 0x496fdd
cmp edi, 0x5ac0
jne 0x493f1c
mov ecx, dword [esi + 0x568c]
push 1
push 1
push 2
or edx, 0xffffffff
call fcn.004d7950
mov ecx, dword [esi + 0x568c]
add ecx, 0x22c
call fcn.004c62b0
mov esi, eax
test esi, esi
je 0x496fdd
mov eax, dword [0x5f2c4c]
mov ecx, eax
push ecx
add eax, 1
lea edi, [esi + 0x14]
push str._vz_
push edi
mov dword [0x5f2c4c], eax
call fcn.00405480
add esp, 0xc
mov ecx, esi
call fcn.004c5620
mov esi, dword [edi]
mov ecx, 0x5f27f8
call fcn.004d45c0
jmp 0x496fdd
cmp edi, 0x5ac1
jne 0x493f58
mov eax, dword [0x5f2620]
cmp dword [eax + 0x7ce4], 0
jne 0x496fdd
lea ecx, [eax + 0x5d68]
mov eax, 2
call fcn.004bedf0
mov edi, dword [0x5f2620]
push 0
call fcn.00489200
jmp 0x496fdd
cmp edi, 0x5ac2
jne 0x493fbc
mov eax, dword [0x5f2620]
cmp dword [eax + 0x7ce4], 0
jne 0x493fa7
cmp dword [0x5f27d0], 0
je 0x493f85
push 2
add eax, 0x5d68
call fcn.004bf060
jmp 0x493fa2
lea ecx, [eax + 0x5d68]
mov eax, 2
call fcn.004bedf0
mov edi, dword [0x5f2620]
push 0
call fcn.00489200
mov eax, dword [0x5f2620]
mov ecx, dword [eax + 0x7ce4]
test ecx, ecx
je 0x496fdd
push 0
jmp 0x49407f
cmp edi, 0x5ac3
jne 0x494020
mov eax, dword [0x5f2620]
cmp dword [eax + 0x7584], 0
jne 0x493ff4
lea ecx, [eax + 0x5d68]
mov eax, 3
call fcn.004bedf0
mov edi, dword [0x5f2620]
push 0
call fcn.00489200
mov eax, dword [0x5f2620]
mov ecx, dword [eax + 0x7584]
test ecx, ecx
je 0x496fdd
mov edx, dword [eax + 0x7588]
mov eax, dword [ecx + 0x5c]
push 0x5f2bfc
push 0x5f2c08
push edx
call eax
add esp, 0xc
jmp 0x496fdd
cmp edi, 0x5ac4
jne 0x4940a2
mov eax, dword [0x5f2620]
cmp dword [eax + 0x7ce4], 0
jne 0x49406f
cmp dword [0x5f27d0], 0
je 0x49404d
push 2
add eax, 0x5d68
call fcn.004bf060
jmp 0x49406a
lea ecx, [eax + 0x5d68]
mov eax, 2
call fcn.004bedf0
mov edi, dword [0x5f2620]
push 0
call fcn.00489200
mov eax, dword [0x5f2620]
mov ecx, dword [eax + 0x7ce4]
test ecx, ecx
je 0x496fdd
push 1
mov edx, dword [eax + 0x7ce8]
mov eax, dword [ecx + 0x50]
push 0x5f2c08
push 0x5f2bfc
push 0x5f2c00
push edx
call eax
add esp, 0x14
jmp 0x496fdd
cmp edi, 0x5ac8
jne 0x4940f8
xor ecx, ecx
mov edx, 0x5a0f24
mov esi, 0x5f2c50
call fcn.0040dcb0
test eax, eax
jl 0x4940e4
push 0x592720
push 0x5a0f8c
push esi
call fcn.0041cd10
push 0x592720
push 0x5a0f24
push esi
call fcn.0041cd10
jmp 0x496fdd
push 0x5a0f8c
mov ecx, 0x5f2c50
call fcn.0041ccd0
jmp 0x496fdd
cmp edi, 0x5ad0
jne 0x49414e
xor ecx, ecx
mov edx, 0x5a0f18
mov esi, 0x5f2c50
call fcn.0040dcb0
test eax, eax
jl 0x49413a
push 0x592720
push 0x5a0f80
push esi
call fcn.0041cd10
push 0x592720
push 0x5a0f18
push esi
call fcn.0041cd10
jmp 0x496fdd
push 0x5a0f80
mov ecx, 0x5f2c50
call fcn.0041ccd0
jmp 0x496fdd
cmp edi, 0x5ac9
jne 0x4941ae
xor ecx, ecx
mov edx, 0x5a0f40
mov esi, 0x5f2c50
call fcn.0040dcb0
test eax, eax
jl 0x49419a
push 0x592720
push str._iop
push esi
call fcn.0041cd10
push 0x592720
push 0x5a0f40
push esi
call fcn.0041cd10
mov ecx, 0x5f2c54
call fcn.00402160
jmp 0x496fdd
push str._iop
mov ecx, 0x5f2c50
call fcn.0041ccd0
jmp 0x496fdd
cmp edi, 0x5aca
jne 0x494204
xor ecx, ecx
mov edx, str._ip
mov esi, 0x5f2c50
call fcn.0040dcb0
test eax, eax
jl 0x4941f0
push 0x592720
push str._ip
push esi
call fcn.0041cd10
push 0x592720
push 0x5a0f4c
push esi
call fcn.0041cd10
jmp 0x496fdd
push str._ip
mov ecx, 0x5f2c50
call fcn.0041ccd0
jmp 0x496fdd
cmp edi, 0x5acb
jne 0x49425a
xor ecx, ecx
mov edx, 0x5a0f30
mov esi, 0x5f2c50
call fcn.0040dcb0
test eax, eax
jl 0x494246
push 0x592720
push str._da
push esi
call fcn.0041cd10
push 0x592720
push 0x5a0f30
push esi
call fcn.0041cd10
jmp 0x496fdd
push str._da
mov ecx, 0x5f2c50
call fcn.0041ccd0
jmp 0x496fdd
cmp edi, 0x5acc
jne 0x4942b0
xor ecx, ecx
mov edx, 0x5a0f38
mov esi, 0x5f2c50
call fcn.0040dcb0
test eax, eax
jl 0x49429c
push 0x592720
push 0x5a0f98
push esi
call fcn.0041cd10
push 0x592720
push 0x5a0f38
push esi
call fcn.0041cd10
jmp 0x496fdd
push 0x5a0f98
mov ecx, 0x5f2c50
call fcn.0041ccd0
jmp 0x496fdd
cmp edi, 0x5acd
jne 0x494306
xor ecx, ecx
mov edx, 0x5a0f54
mov esi, 0x5f2c50
call fcn.0040dcb0
test eax, eax
jl 0x4942f2
push 0x592720
push str._mp
push esi
call fcn.0041cd10
push 0x592720
push 0x5a0f54
push esi
call fcn.0041cd10
jmp 0x496fdd
push str._mp
mov ecx, 0x5f2c50
call fcn.0041ccd0
jmp 0x496fdd
cmp edi, 0x5ace
jne 0x49435c
xor ecx, ecx
mov edx, 0x5a0f5c
mov esi, 0x5f2c50
call fcn.0040dcb0
test eax, eax
jl 0x494348
push 0x592720
push str._mv
push esi
call fcn.0041cd10
push 0x592720
push 0x5a0f5c
push esi
call fcn.0041cd10
jmp 0x496fdd
push str._mv
mov ecx, 0x5f2c50
call fcn.0041ccd0
jmp 0x496fdd
cmp edi, 0x5ad1
jne 0x4943b2
xor ecx, ecx
mov edx, 0x5a0f64
mov esi, 0x5f2c50
call fcn.0040dcb0
test eax, eax
jl 0x49439e
push 0x592720
push str.CPU:_cpu
push esi
call fcn.0041cd10
push 0x592720
push 0x5a0f64
push esi
call fcn.0041cd10
jmp 0x496fdd
push str.CPU:_cpu
mov ecx, 0x5f2c50
call fcn.0041ccd0
jmp 0x496fdd
cmp edi, 0x5ad2
jne 0x494408
xor ecx, ecx
mov edx, 0x5a0f78
mov esi, 0x5f2c50
call fcn.0040dcb0
test eax, eax
jl 0x4943f4
push 0x592720
push str._wk
push esi
call fcn.0041cd10
push 0x592720
push 0x5a0f78
push esi
call fcn.0041cd10
jmp 0x496fdd
push str._wk
mov ecx, 0x5f2c50
call fcn.0041ccd0
jmp 0x496fdd
cmp edi, 0x5acf
jne 0x494450
lea ecx, [esp + 0x81c]
push ecx
call fcn.0043b8d0
lea ecx, [esp + 0x81c]
mov dword [esp + 0x1838], 0xaa
call fcn.0053bd19
lea ecx, [esp + 0x81c]
mov dword [esp + 0x1838], 0xffffffff
call fcn.0043ba00
jmp 0x496fdd
cmp edi, 0x5693
jne 0x49445f
mov esi, str.NEWWEB
jmp 0x49448a
cmp edi, 0x5696
jne 0x49446e
mov esi, str.SIDEBTN
jmp 0x49448a
cmp edi, 0x56a2
jne 0x49447d
mov esi, str.PAGETOOL
jmp 0x49448a
cmp edi, 0x569f
jne 0x4944af
mov esi, str.CLOSEWEB
call fcn.0041b260
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x568c], 0
je 0x496fdd
add eax, 0xad4
call fcn.004acfd0
jmp 0x496fdd
cmp edi, 0x59f6
jne 0x4944f1
mov edx, esi
call fcn.0049bfe0
mov esi, dword [esi + 0x568c]
test esi, esi
je 0x496fdd
test eax, eax
je 0x496fdd
mov edx, dword [eax + 0xc]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push edx
push esi
call fcn.004d7180
jmp 0x496fdd
cmp edi, 0x5a00
jne 0x494567
mov edx, esi
call fcn.0049bfe0
cmp dword [esi + 0x568c], 0
mov edi, eax
je 0x496fdd
test edi, edi
je 0x496fdd
lea ecx, [esp + 0x1bc]
call fcn.004026e0
push 0
lea esi, [esp + 0x1c0]
mov ecx, edi
mov dword [esp + 0x183c], 0xab
call fcn.004552e0
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x568c]
mov ebx, dword [esp + 0x1bc]
mov ecx, dword [ecx + 0x2ac]
push eax
call fcn.00489810
mov ecx, esi
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x59f9
jne 0x494582
mov edx, esi
call fcn.0049bfe0
mov ecx, eax
call fcn.0049c270
jmp 0x496fdd
cmp edi, 0x59ff
jne 0x49461a
mov edx, esi
call fcn.0049bfe0
mov edi, eax
test edi, edi
je 0x496fdd
lea edx, [esp + 0xd54]
push edx
call fcn.0041ec00
lea ecx, [esp + 0x164]
mov dword [esp + 0x1838], 0xac
call fcn.004026e0
mov byte [esp + 0x1838], 0xad
mov ecx, dword [edi + 0x20]
push 0
lea esi, [esp + 0x168]
call fcn.004552e0
mov eax, esi
push eax
lea ecx, [esp + 0xdcc]
call fcn.004022f0
lea ecx, [esp + 0xd54]
call fcn.0053bd19
mov ecx, esi
call fcn.004a4690
lea ecx, [esp + 0xd54]
mov dword [esp + 0x1838], 0xffffffff
call fcn.0041ecc0
jmp 0x496fdd
cmp edi, 0x59fd
jne 0x49463e
mov edx, esi
call fcn.0049bfe0
test eax, eax
je 0x496fdd
lea edi, [eax + 8]
call fcn.00460db0
jmp 0x496fdd
cmp edi, 0x59fe
jne 0x494662
mov edx, esi
call fcn.0049bfe0
test eax, eax
je 0x496fdd
lea edi, [eax + 0xc]
call fcn.00460db0
jmp 0x496fdd
cmp edi, 0x5a05
jne 0x49475d
lea ecx, [esp + 0x25c]
call fcn.004026e0
lea ecx, [esp + 0x23c]
mov dword [esp + 0x1838], 0xae
call fcn.004026e0
lea ecx, [esp + 0x274]
call fcn.004026e0
lea ecx, [esp + 0x64]
call fcn.004026e0
lea ecx, [esp + 0x64]
push ecx
lea edx, [esp + 0x278]
push edx
lea eax, [esp + 0x244]
push eax
lea ecx, [esp + 0x268]
mov byte [esp + 0x1844], 0xb1
push ecx
mov ecx, dword [esi + 0x99ec]
mov edx, 0x5f29a8
call fcn.004d5740
push 0
push 0x5f
lea ecx, [esp + 0x6c]
call fcn.0041cf30
mov edx, dword [esp + 0x64]
mov ecx, dword [edx - 0xc]
sub ecx, eax
sub ecx, 1
push ecx
lea eax, [esp + 0x29c]
push eax
lea ecx, [esp + 0x6c]
call fcn.00401a60
push eax
lea ecx, [esp + 0x68]
mov byte [esp + 0x183c], 0xb2
call fcn.004022f0
lea ecx, [esp + 0x298]
call fcn.004a4690
lea edi, [esp + 0x64]
call fcn.00460db0
mov ecx, edi
call fcn.004a4690
lea ecx, [esp + 0x274]
call fcn.004a4690
lea ecx, [esp + 0x23c]
call fcn.004a4690
lea ecx, [esp + 0x25c]
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x5a06
jne 0x494818
lea ecx, [esp + 0x168]
call fcn.004026e0
lea ecx, [esp + 0x24c]
mov dword [esp + 0x1838], 0xb3
call fcn.004026e0
lea ecx, [esp + 0x26c]
call fcn.004026e0
lea ecx, [esp + 0x244]
call fcn.004026e0
lea ecx, [esp + 0x244]
push ecx
lea edx, [esp + 0x270]
push edx
lea eax, [esp + 0x254]
push eax
lea ecx, [esp + 0x174]
mov byte [esp + 0x1844], 0xb6
push ecx
mov ecx, dword [esi + 0x99ec]
mov edx, 0x5f29a8
call fcn.004d5740
lea edi, [esp + 0x168]
call fcn.00460db0
lea ecx, [esp + 0x244]
call fcn.004a4690
lea ecx, [esp + 0x26c]
call fcn.004a4690
lea ecx, [esp + 0x24c]
call fcn.004a4690
mov ecx, edi
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x5a07
jne 0x494953
lea ecx, [esp + 0xb8]
call fcn.004026e0
lea ecx, [esp + 0x228]
mov dword [esp + 0x1838], 0xb7
call fcn.004026e0
lea ecx, [esp + 0x220]
call fcn.004026e0
lea ecx, [esp + 0x170]
call fcn.004026e0
lea edx, [esp + 0x170]
push edx
lea eax, [esp + 0x224]
push eax
lea ecx, [esp + 0x230]
push ecx
lea edx, [esp + 0xc4]
mov bl, 0xba
mov byte [esp + 0x1844], bl
mov ecx, dword [esi + 0x99ec]
push edx
mov edx, 0x5f29a8
call fcn.004d5740
lea esi, [esp + 0x3a8]
call fcn.004071f0
mov eax, esi
push eax
push 0x5f29a8
lea ecx, [esp + 0x178]
mov byte [esp + 0x1840], 0xbb
call fcn.004d59a0
xor esi, esi
cmp dword [esp + 0x3b0], esi
jle 0x49490b
jmp 0x4948d0
mov eax, esi
lea ecx, [esp + 0x3a8]
call fcn.00439be0
mov eax, dword [eax]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x568c]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push eax
push edx
call fcn.004d7180
add esi, 1
cmp esi, dword [esp + 0x3b0]
jl 0x4948d0
lea ecx, [esp + 0x3a8]
mov byte [esp + 0x1838], bl
call fcn.00538dd6
lea ecx, [esp + 0x170]
call fcn.004a4690
lea ecx, [esp + 0x220]
call fcn.004a4690
lea ecx, [esp + 0x228]
call fcn.004a4690
lea ecx, [esp + 0xb8]
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x59fc
jne 0x49496f
mov edx, esi
call fcn.0049bfe0
push esi
mov ecx, eax
call fcn.0049c3d0
jmp 0x496fdd
cmp edi, 0x59f8
jne 0x49498a
mov edx, esi
call fcn.0049bfe0
mov edi, eax
call fcn.0049c040
jmp 0x496fdd
cmp edi, 0x59f0
jne 0x4949c2
mov edx, esi
call fcn.0049bfe0
test eax, eax
je 0x496fdd
push 0
push eax
push 0x5f29cc
mov eax, 0x5f29e4
call fcn.00455a20
mov edi, 0x5f29cc
call fcn.00454870
jmp 0x496fdd
cmp edi, 0x59ef
jne 0x4949fa
mov edx, esi
call fcn.0049bfe0
test eax, eax
je 0x496fdd
push 0
push eax
mov eax, dword [0x5f29e0]
push 0x5f29cc
call fcn.00455a20
mov edi, 0x5f29cc
call fcn.00454870
jmp 0x496fdd
cmp edi, 0x5a02
jne 0x494a34
mov edx, esi
call fcn.0049bfe0
test eax, eax
je 0x496fdd
mov eax, dword [eax + 0xc]
mov ecx, dword [esi + 0x568c]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push eax
push ecx
call fcn.004d7180
jmp 0x496fdd
cmp edi, 0x5a03
jne 0x494a6e
mov edx, esi
call fcn.0049bfe0
test eax, eax
je 0x496fdd
mov edx, dword [eax + 0xc]
mov eax, dword [esi + 0x568c]
push 0
push 0
push 0xffffffffffffffff
push 1
push 0
push 0
push 0
push edx
push eax
call fcn.004d7180
jmp 0x496fdd
cmp edi, 0x5a04
jne 0x494b0f
mov edx, esi
call fcn.0049bfe0
mov edi, eax
test edi, edi
je 0x496fdd
lea ecx, [esp + 0x178]
call fcn.004026e0
lea ecx, [esp + 0x3dc]
push ecx
lea edx, [esp + 0x17c]
mov dword [esp + 0x183c], 0xbc
mov edi, dword [edi + 0xc]
push edx
call fcn.004662f0
add esp, 8
test eax, eax
push 0
push 0
je 0x494af4
mov eax, dword [esp + 0x180]
mov ecx, dword [esi + 0x568c]
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push eax
push ecx
call fcn.004d7180
lea ecx, [esp + 0x178]
call fcn.004a4690
jmp 0x496fdd
push 0x5a6fcc
call fcn.00539414
lea ecx, [esp + 0x178]
call fcn.004a4690
jmp 0x496fdd
cmp edi, 0x59df
jne 0x494b23
mov edi, esi
call fcn.00489b90
jmp 0x496fdd
cmp edi, 0x55fe
jne 0x494b4b
mov edx, esi
call fcn.0049bfe0
test eax, eax
je 0x496fdd
mov edx, dword [eax + 0xc]
mov esi, dword [eax + 8]
push edx
call fcn.00489fb0
jmp 0x496fdd
cmp edi, 0x59f7
jne 0x494bea
mov edx, esi
call fcn.0049bfe0
cmp dword [esi + 0x568c], 0
mov dword [esp + 0xb8], eax
je 0x496fdd
test eax, eax
je 0x496fdd
cmp dword [eax + 0x1c], 0
je 0x496fdd
xor edi, edi
cmp dword [eax + 0x2c], edi
jle 0x496fdd
mov ebx, eax
add ebx, 0x24
mov eax, edi
mov ecx, ebx
call fcn.00439be0
mov eax, dword [eax]
add eax, 0xc
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
je 0x494bd6
mov eax, edi
mov ecx, ebx
call fcn.00439be0
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
mov edx, dword [esi + 0x568c]
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0
add eax, 0xc
push 0
push ecx
push edx
call fcn.004d7180
mov eax, dword [esp + 0xb8]
add edi, 1
cmp edi, dword [eax + 0x2c]
jl 0x494b94
cmp edi, 0x5655
jne 0x494c1e
lea ecx, [esi + 0x5690]
push ecx
mov ecx, 1
call fcn.004baf60
push 1
lea eax, [esi + 0x5d68]
call fcn.004bf060
push 1
mov edi, esi
call fcn.00489200
jmp 0x496fdd
cmp edi, 0x56b0
jne 0x494c42
mov edx, dword [0x5f2620]
mov ecx, dword [edx + 0x568c]
add ecx, 0x1c4
call fcn.004099a0
jmp 0x496fdd
cmp edi, 0x56b1
jne 0x494cdc
mov eax, dword [0x5f2620]
mov eax, dword [eax + 0x568c]
xor esi, esi
cmp dword [eax + 0x1cc], esi
jle 0x496fdd
jmp 0x494c70
lea ecx, [eax + 0x1c4]
mov eax, esi
call fcn.00439be0
mov ecx, dword [eax]
cmp dword [ecx - 0xc], 0
je 0x494cc1
cmp edi, 0x5656
jne 0x494cee
call fcn.0049c530
jmp 0x496fdd
cmp edi, 0x5657
jne 0x494d00
call fcn.0049c5b0
jmp 0x496fdd
cmp edi, 0x5a09
jne 0x494d7c
mov ecx, dword [esp + 0x1830]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1818]
xor ecx, esp
call fcn.00552101
mov esp, ebp
pop ebp
ret 4