Function at 0x416360
Capabilities:
Hide graphical window
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x954
mov eax, dword [0x4f86c0]
xor eax, esp
mov dword [esp + 0x950], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 0x10]
lea eax, [esp + 0x851]
push 0x104
push 0
push eax
mov byte [esp + 0x85c], 0
call fcn.004aceb0
add esp, 0xc
lea eax, [esp + 0x850]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov esi, dword [sym.imp.SHLWAPI.dll_StrRChrIA]
lea eax, [esp + 0x850]
push 0x2e
push 0
push eax
call esi
test eax, eax
je 0x4163d6
mov byte [eax], 0
push 0x5f
push 0
lea eax, [esp + 0x858]
push eax
call esi
test eax, eax
je 0x416415
lea edx, [eax + 1]
test edx, edx
je 0x416415
cmp byte [edx], 0
jne 0x4163f8
xor ecx, ecx
jmp 0x416409
mov ecx, edx
lea esi, [ecx + 1]
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416400
sub ecx, esi
push ecx
push edx
mov ecx, 0x4f970c
call fcn.004018d0
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea eax, [esp + 0x44]
push eax
push 1
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
push reloc.WS2_32.dll_bind
mov dword [esp + 0x58], 0
call ebx
test eax, eax
jne 0x416450
push dword [esp + 0x44]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [0x4fc140], 1
xor eax, eax
mov dword [esp + 0x10c], 7
mov dword [esp + 0x108], 0
mov word [esp + 0xf8], ax
cmp word [edi], ax
jne 0x416479
xor ecx, ecx
jmp 0x41648f
mov ecx, edi
lea edx, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x416480
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [esp + 0x100]
call fcn.00408930
push 2
push ecx
push 0x4e7db0
lea ecx, [esp + 0x104]
call fcn.00405b30
test eax, eax
js 0x41712d
xor eax, eax
mov dword [esp + 0x124], 7
mov dword [esp + 0x120], 0
mov word [esp + 0x110], ax
cmp word [edi], ax
jne 0x4164e2
xor ecx, ecx
jmp 0x4164f6
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4164e7
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [esp + 0x118]
call fcn.00408930
push 4
push ecx
push str._std
lea ecx, [esp + 0x11c]
call fcn.00405b30
test eax, eax
js 0x416928
lea eax, [esp + 0x40]
mov dword [esp + 0x40], 0
push eax
push 1
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
push reloc.WS2_32.dll_bind
mov esi, 0x1e
call ebx
test eax, eax
jne 0x41655b
push dword [esp + 0x40]
mov eax, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call eax
mov esi, 0x1d
jmp 0x4167a5
lea eax, [esp + 0x38]
mov dword [esp + 0x38], 0
push eax
push 1
push 0
push str.Software_feiraruninstall
push reloc.WS2_32.dll_accept
call ebx
test eax, eax
jne 0x4167a0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x40]
mov dword [esp + 0x5c], 4
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x64], 4
push eax
push 0
push str.uninstalltime
push dword [esp + 0x4c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x416793
xor ebx, ebx
lea ecx, [esp + 0x10]
push ebx
call fcn.00423920
push 0x4f970c
lea ecx, [esp + 0xcc]
call fcn.00423b80
lea eax, [esp + 0xc8]
push eax
push 0x4e77c0
lea ecx, [esp + 0x18]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0xc8]
call fcn.00423ec0
lea ecx, [esp + 0x1a8]
call fcn.00422260
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x1b0]
call fcn.004222f0
push eax
mov edx, 0x4e720c
lea ecx, [esp + 0x64]
call fcn.00414f10
add esp, 4
lea ecx, [esp + 0xc8]
call fcn.004016a0
sub esp, 0x18
mov dword [esp + 0x1bc], 0xf
lea eax, [esp + 0x78]
mov dword [esp + 0x1b8], ebx
mov ecx, esp
mov byte [esp + 0x1a8], bl
push eax
call fcn.00408a90
sub esp, 0x18
mov ecx, esp
push str.http:__api.feirar.softbd.cn_api_intv
call fcn.00401640
lea ecx, [esp + 0x1c0]
call fcn.00401df0
add esp, 0x30
test eax, eax
je 0x416769
lea ecx, [esp + 0x1c8]
call fcn.00428d40
push ebx
lea ecx, [esp + 0xcc]
call fcn.00423920
push 1
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0x198]
push eax
lea ecx, [esp + 0x1d4]
call fcn.00428dd0
test al, al
je 0x416720
push str.intv
lea ecx, [esp + 0xcc]
call fcn.00424ad0
mov ecx, eax
call fcn.00424ff0
test al, al
jne 0x416720
push str.intv
lea ecx, [esp + 0xcc]
call fcn.00424ad0
mov ecx, eax
call fcn.00424760
test al, al
jne 0x416720
push str.intv
lea ecx, [esp + 0xcc]
call fcn.00424ad0
mov ecx, eax
call fcn.004243a0
mov ebx, eax
lea ecx, [esp + 0xc8]
call fcn.00423ec0
lea ecx, [esp + 0x1c8]
call fcn.0040fea0
test ebx, ebx
je 0x416769
push 0
call fcn.004a84b9
add esp, 4
sub eax, dword [esp + 0x3c]
sbb edx, 0
imul ecx, ebx, 0x15180
test edx, edx
jg 0x416764
jl 0x41675d
cmp eax, ecx
jae 0x416764
mov esi, 0x1b
jmp 0x416769
mov esi, 0x1c
lea ecx, [esp + 0x190]
call fcn.004016a0
lea ecx, [esp + 0x60]
call fcn.004016a0
lea ecx, [esp + 0x1a8]
call fcn.0040ce40
lea ecx, [esp + 0x10]
call fcn.00423ec0
push dword [esp + 0x38]
mov eax, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call eax
jmp 0x4167a5
mov esi, 0x1a
push 0
lea ecx, [esp + 0x2c]
call fcn.00423920
push 0x4e71d0
lea ecx, [esp + 0x14]
call fcn.00423b10
lea eax, [esp + 0x10]
push eax
push 0x4e71cc
lea ecx, [esp + 0x30]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
push 0x4f970c
lea ecx, [esp + 0x14]
call fcn.00423b80
lea eax, [esp + 0x10]
push eax
push str.chnid
lea ecx, [esp + 0x30]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
push esi
lea ecx, [esp + 0x14]
call fcn.00423a90
lea eax, [esp + 0x10]
push eax
push str.count_id
lea ecx, [esp + 0x30]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
lea ecx, [esp + 0xa8]
call fcn.00422260
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0xb0]
call fcn.004222f0
push eax
mov edx, 0x4e720c
lea ecx, [esp + 0x94]
call fcn.00414f10
add esp, 4
cmp dword [esp + 0x74], 0x10
jb 0x416889
push dword [esp + 0x60]
call fcn.004a7f26
add esp, 4
sub esp, 0x18
mov dword [esp + 0xa4], 0xf
mov ecx, esp
mov dword [esp + 0xa0], 0
mov byte [esp + 0x90], 0
lea eax, [esp + 0xa8]
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00401720
sub esp, 0x18
mov ecx, esp
push str.http:__up.feirar.com_countUser
call fcn.00401640
lea ecx, [esp + 0xa8]
call fcn.00401df0
add esp, 0x30
cmp esi, 0x1d
je 0x417064
cmp esi, 0x1b
je 0x417064
lea ecx, [esp + 0x78]
call fcn.004016a0
lea ecx, [esp + 0x90]
call fcn.004016a0
lea ecx, [esp + 0xa8]
call fcn.0040ce40
lea ecx, [esp + 0x28]
call fcn.00423ec0
push edi
lea ecx, [esp + 0x144]
call fcn.00408a30
push 3
push ecx
push 0x4e7e44
lea ecx, [esp + 0x14c]
call fcn.00405b30
test eax, eax
js 0x416c4a
push 0
lea ecx, [esp + 0x2c]
call fcn.00423920
push 0x4e71d0
lea ecx, [esp + 0x14]
call fcn.00423b10
lea eax, [esp + 0x10]
push eax
push 0x4e71cc
lea ecx, [esp + 0x30]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
lea ecx, [esp + 0x60]
call fcn.0041f410
push eax
lea ecx, [esp + 0x14]
call fcn.00423b80
lea eax, [esp + 0x10]
push eax
push 0x4e71dc
lea ecx, [esp + 0x30]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
cmp dword [esp + 0x74], 0x10
jb 0x4169d6
push dword [esp + 0x60]
call fcn.004a7f26
add esp, 4
lea ecx, [esp + 0x60]
call fcn.00401f20
push eax
lea ecx, [esp + 0x14]
call fcn.00423b80
lea eax, [esp + 0x10]
push eax
push str.osver
lea ecx, [esp + 0x30]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
cmp dword [esp + 0x74], 0x10
jb 0x416a1f
push dword [esp + 0x60]
call fcn.004a7f26
add esp, 4
push 0x4f970c
lea ecx, [esp + 0x14]
call fcn.00423b80
lea eax, [esp + 0x10]
push eax
push str.chnid
lea ecx, [esp + 0x30]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
push 2
lea ecx, [esp + 0x14]
call fcn.00423a50
lea eax, [esp + 0x10]
push eax
push str.count_id
lea ecx, [esp + 0x30]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
push 1
lea ecx, [esp + 0x14]
call fcn.00423a50
lea eax, [esp + 0x10]
push eax
push str.silent
lea ecx, [esp + 0x30]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
push dword [0x4fc140]
lea ecx, [esp + 0x14]
call fcn.00423a50
lea eax, [esp + 0x10]
push eax
push str.cover
lea ecx, [esp + 0x30]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
lea ecx, [esp + 0xa8]
call fcn.00422260
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0xb0]
call fcn.004222f0
push eax
mov edx, 0x4e720c
lea ecx, [esp + 0x94]
call fcn.00414f10
add esp, 4
cmp dword [esp + 0x74], 0x10
jb 0x416b28
push dword [esp + 0x60]
call fcn.004a7f26
add esp, 4
sub esp, 0x18
mov dword [esp + 0xa4], 0xf
mov ecx, esp
mov dword [esp + 0xa0], 0
mov byte [esp + 0x90], 0
lea eax, [esp + 0xa8]
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00401720
sub esp, 0x18
mov ecx, esp
push str.http:__up.feirar.com_countUser
call fcn.00401640
lea ecx, [esp + 0xa8]
call fcn.00401df0
add esp, 0x30
cmp dword [esp + 0x8c], 0x10
jb 0x416ba1
push dword [esp + 0x78]
call fcn.004a7f26
add esp, 4
cmp dword [esp + 0xa4], 0x10
mov dword [esp + 0x8c], 0xf
mov dword [esp + 0x88], 0
mov byte [esp + 0x78], 0
jb 0x416bd5
push dword [esp + 0x90]
call fcn.004a7f26
add esp, 4
cmp dword [esp + 0xc0], 0x10
mov dword [esp + 0xa4], 0xf
mov dword [esp + 0xa0], 0
mov byte [esp + 0x90], 0
mov dword [esp + 0xa8], vtable.Json::FastWriter.0
jb 0x416c17
push dword [esp + 0xac]
call fcn.004a7f26
add esp, 4
lea ecx, [esp + 0xa8]
mov dword [esp + 0xc0], 0xf
mov dword [esp + 0xbc], 0
mov byte [esp + 0xac], 0
call fcn.00422210
lea ecx, [esp + 0x28]
call fcn.00423ec0
lea ecx, [esp + 0x238]
call fcn.0040d230
push 9
push ecx
push str._runbysvr
lea ecx, [esp + 0x104]
mov byte [esp + 0x5b4], 1
call fcn.00405b30
mov ecx, dword [0x4f96b0]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4f96b0], ecx
lea ecx, [esp + 0x238]
call fcn.00410350
lea ecx, [esp + 0x238]
call fcn.00410a50
push edi
lea ecx, [esp + 0x12c]
call fcn.00408a30
push 3
push ecx
push 0x4e7e44
lea ecx, [esp + 0x134]
call fcn.00405b30
test eax, eax
js 0x416fbf
push 0
lea ecx, [esp + 0x2c]
call fcn.00423920
push 0x4e71d0
lea ecx, [esp + 0x14]
call fcn.00423b10
lea eax, [esp + 0x10]
push eax
push 0x4e71cc
lea ecx, [esp + 0x30]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
lea ecx, [esp + 0x60]
call fcn.0041f410
push eax
lea ecx, [esp + 0x14]
call fcn.00423b80
lea eax, [esp + 0x10]
push eax
push 0x4e71dc
lea ecx, [esp + 0x30]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
cmp dword [esp + 0x74], 0x10
jb 0x416d4b
push dword [esp + 0x60]
call fcn.004a7f26
add esp, 4
lea ecx, [esp + 0x60]
call fcn.00401f20
push eax
lea ecx, [esp + 0x14]
call fcn.00423b80
lea eax, [esp + 0x10]
push eax
push str.osver
lea ecx, [esp + 0x30]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
cmp dword [esp + 0x74], 0x10
jb 0x416d94
push dword [esp + 0x60]
call fcn.004a7f26
add esp, 4
push 0x4f970c
lea ecx, [esp + 0x14]
call fcn.00423b80
lea eax, [esp + 0x10]
push eax
push str.chnid
lea ecx, [esp + 0x30]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
push 1
lea ecx, [esp + 0x14]
call fcn.00423a50
lea eax, [esp + 0x10]
push eax
push str.silent
lea ecx, [esp + 0x30]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
push 1
lea ecx, [esp + 0x14]
call fcn.00423a50
lea eax, [esp + 0x10]
push eax
push str.type
lea ecx, [esp + 0x30]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
push dword [0x4fc140]
lea ecx, [esp + 0x14]
call fcn.00423a50
lea eax, [esp + 0x10]
push eax
push str.cover
lea ecx, [esp + 0x30]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
lea ecx, [esp + 0xa8]
call fcn.00422260
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0xb0]
call fcn.004222f0
push eax
mov edx, 0x4e720c
lea ecx, [esp + 0x94]
call fcn.00414f10
add esp, 4
cmp dword [esp + 0x74], 0x10
jb 0x416e9d
push dword [esp + 0x60]
call fcn.004a7f26
add esp, 4
sub esp, 0x18
mov dword [esp + 0xa4], 0xf
mov ecx, esp
mov dword [esp + 0xa0], 0
mov byte [esp + 0x90], 0
lea eax, [esp + 0xa8]
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00401720
sub esp, 0x18
mov ecx, esp
push str.http:__up.feirar.com_countInstall
call fcn.00401640
lea ecx, [esp + 0xa8]
call fcn.00401df0
add esp, 0x30
cmp dword [esp + 0x8c], 0x10
jb 0x416f16
push dword [esp + 0x78]
call fcn.004a7f26
add esp, 4
cmp dword [esp + 0xa4], 0x10
mov dword [esp + 0x8c], 0xf
mov dword [esp + 0x88], 0
mov byte [esp + 0x78], 0
jb 0x416f4a
push dword [esp + 0x90]
call fcn.004a7f26
add esp, 4
cmp dword [esp + 0xc0], 0x10
mov dword [esp + 0xa4], 0xf
mov dword [esp + 0xa0], 0
mov byte [esp + 0x90], 0
mov dword [esp + 0xa8], vtable.Json::FastWriter.0
jb 0x416f8c
push dword [esp + 0xac]
call fcn.004a7f26
add esp, 4
lea ecx, [esp + 0xa8]
mov dword [esp + 0xc0], 0xf
mov dword [esp + 0xbc], 0
mov byte [esp + 0xac], 0
call fcn.00422210
lea ecx, [esp + 0x28]
call fcn.00423ec0
call fcn.00417670
cmp dword [esp + 0x13c], 8
jb 0x416fdd
push dword [esp + 0x128]
call fcn.004a7f26
add esp, 4
xor eax, eax
mov dword [esp + 0x13c], 7
lea ecx, [esp + 0x238]
mov dword [esp + 0x138], 0
mov word [esp + 0x128], ax
call fcn.0040d6f0
cmp dword [esp + 0x154], 8
jb 0x417022
push dword [esp + 0x140]
call fcn.004a7f26
add esp, 4
xor eax, eax
mov dword [esp + 0x154], 7
mov dword [esp + 0x150], 0
mov word [esp + 0x140], ax
cmp dword [esp + 0x124], 8
jb 0x4174c2
push dword [esp + 0x110]
call fcn.004a7f26
add esp, 4
jmp 0x4174c2
call fcn.00417670
cmp dword [esp + 0x8c], 0x10
jb 0x41707f
push dword [esp + 0x78]
call fcn.004a7f26
add esp, 4
cmp dword [esp + 0xa4], 0x10
mov dword [esp + 0x8c], 0xf
mov dword [esp + 0x88], 0
mov byte [esp + 0x78], 0
jb 0x4170b3
push dword [esp + 0x90]
call fcn.004a7f26
add esp, 4
cmp dword [esp + 0xc0], 0x10
mov dword [esp + 0xa4], 0xf
mov dword [esp + 0xa0], 0
mov byte [esp + 0x90], 0
mov dword [esp + 0xa8], vtable.Json::FastWriter.0
jb 0x4170f5
push dword [esp + 0xac]
call fcn.004a7f26
add esp, 4
lea ecx, [esp + 0xa8]
mov dword [esp + 0xc0], 0xf
mov dword [esp + 0xbc], 0
mov byte [esp + 0xac], 0
call fcn.00422210
lea ecx, [esp + 0x28]
call fcn.00423ec0
jmp 0x417042
push 0
lea ecx, [esp + 0x4c]
call fcn.00423920
push 0x4e71d0
lea ecx, [esp + 0x14]
call fcn.00423b10
lea eax, [esp + 0x10]
push eax
push 0x4e71cc
lea ecx, [esp + 0x50]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
lea ecx, [esp + 0x60]
call fcn.0041f410
push eax
lea ecx, [esp + 0x14]
call fcn.00423b80
lea eax, [esp + 0x10]
push eax
push 0x4e71dc
lea ecx, [esp + 0x50]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
cmp dword [esp + 0x74], 0x10
jb 0x4171b2
push dword [esp + 0x60]
call fcn.004a7f26
add esp, 4
lea ecx, [esp + 0x60]
call fcn.00401f20
push eax
lea ecx, [esp + 0x14]
call fcn.00423b80
lea eax, [esp + 0x10]
push eax
push str.osver
lea ecx, [esp + 0x50]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
cmp dword [esp + 0x74], 0x10
jb 0x4171fb
push dword [esp + 0x60]
call fcn.004a7f26
add esp, 4
push 0x4f970c
lea ecx, [esp + 0x14]
call fcn.00423b80
lea eax, [esp + 0x10]
push eax
push str.chnid
lea ecx, [esp + 0x50]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
push 2
lea ecx, [esp + 0x14]
call fcn.00423a50
lea eax, [esp + 0x10]
push eax
push str.count_id
lea ecx, [esp + 0x50]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
push 0
lea ecx, [esp + 0x14]
call fcn.00423a50
lea eax, [esp + 0x10]
push eax
push str.silent
lea ecx, [esp + 0x50]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
push dword [0x4fc140]
lea ecx, [esp + 0x14]
call fcn.00423a50
lea eax, [esp + 0x10]
push eax
push str.cover
lea ecx, [esp + 0x50]
call fcn.00424ad0
mov ecx, eax
call fcn.00423fd0
lea ecx, [esp + 0x10]
call fcn.00423ec0
lea ecx, [esp + 0x170]
call fcn.00422260
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x178]
call fcn.004222f0
push eax
mov edx, 0x4e720c
lea ecx, [esp + 0x15c]
call fcn.00414f10
add esp, 4
cmp dword [esp + 0x74], 0x10
jb 0x417304
push dword [esp + 0x60]
call fcn.004a7f26
add esp, 4
sub esp, 0x18
mov dword [esp + 0x10c], 0xf
mov ecx, esp
mov dword [esp + 0x108], 0
mov byte [esp + 0xf8], 0
lea eax, [esp + 0x170]
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00401720
sub esp, 0x18
mov ecx, esp
push 0x1e
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push str.http:__up.feirar.com_countUser
mov byte [ecx], 0
call fcn.004018d0
lea ecx, [esp + 0x110]
call fcn.00401df0
mov eax, dword [ebp + 8]
add esp, 0x30
mov dword [0x4fc158], eax
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
js 0x4173f8
push 0x618
call fcn.004a8234
add esp, 4
test eax, eax
je 0x4173f8
mov ecx, eax
call fcn.0040d230
mov esi, eax
test esi, esi
je 0x4173f8
push ecx
push 0x258
push 0x384
push 0
push 0
push 0x100
push 0x10cf0000
push 0x4e7e64
push 0
mov ecx, esi
call fcn.00432cd0
push ecx
mov ecx, esi
call fcn.00432ec0
mov ecx, esi
call fcn.00432d90
push 5
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.0042fd10
call dword [sym.imp.ole32.dll_CoUninitialize]
call fcn.00417670
cmp dword [esp + 0xf4], 0x10
jb 0x417416
push dword [esp + 0xe0]
call fcn.004a7f26
add esp, 4
cmp dword [esp + 0x16c], 0x10
mov dword [esp + 0xf4], 0xf
mov dword [esp + 0xf0], 0
mov byte [esp + 0xe0], 0
jb 0x41744d
push dword [esp + 0x158]
call fcn.004a7f26
add esp, 4
cmp dword [esp + 0x188], 0x10
mov dword [esp + 0x16c], 0xf
mov dword [esp + 0x168], 0
mov byte [esp + 0x158], 0
mov dword [esp + method.Json::FastWriter.virtual_0], vtable.Json::FastWriter.0
jb 0x41748f
push dword [esp + 0x174]
call fcn.004a7f26
add esp, 4
lea ecx, [esp + 0x170]
mov dword [esp + 0x188], 0xf
mov dword [esp + 0x184], 0
mov byte [esp + 0x174], 0
call fcn.00422210
lea ecx, [esp + 0x48]
call fcn.00423ec0
cmp dword [esp + 0x10c], 8
jb 0x4174db
push dword [esp + 0xf8]
call fcn.004a7f26
add esp, 4
mov ecx, dword [esp + 0x95c]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004a768e
mov esp, ebp
pop ebp
ret 0x10