Function at 0x4b3430
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x57df28
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push esi
push edi
mov eax, dword [0x5d7050]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x10], esi
mov eax, dword [0x5e736c]
mov edx, dword [eax + 0xc]
mov ecx, 0x5e736c
call edx
add eax, 0x10
mov dword [esp + 0xc], eax
mov edi, dword [ebp + 8]
lea eax, [esp + 0xc]
add esi, 0xfffffff8
push eax
push edi
mov ecx, esi
mov dword [esp + 0x30], 0
call fcn.004b5220
mov eax, dword [ebp + 0xc]
mov ecx, str.doudizhu
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b34c6
test dx, dx
je 0x4b34c2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b34c6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b34a0
xor eax, eax
jmp 0x4b34cb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b3b22
mov eax, dword [ebp + 0xc]
mov ecx, str.wuziqi
jmp 0x4b34e0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3506
test dx, dx
je 0x4b3502
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3506
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b34e0
xor eax, eax
jmp 0x4b350b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b3b22
mov eax, dword [ebp + 0xc]
mov ecx, str.tupian
jmp 0x4b3520
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3546
test dx, dx
je 0x4b3542
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3546
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3520
xor eax, eax
jmp 0x4b354b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b3b22
mov eax, dword [ebp + 0xc]
mov ecx, str.kuaichuan
jmp 0x4b3560
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3586
test dx, dx
je 0x4b3582
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3586
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3560
xor eax, eax
jmp 0x4b358b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b3b22
mov eax, dword [ebp + 0xc]
mov ecx, str.guanji
jmp 0x4b35a0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b35c6
test dx, dx
je 0x4b35c2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b35c6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b35a0
xor eax, eax
jmp 0x4b35cb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b3b22
mov eax, dword [ebp + 0xc]
mov ecx, str.tool
jmp 0x4b35e0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3606
test dx, dx
je 0x4b3602
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3606
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b35e0
xor eax, eax
jmp 0x4b360b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b3b22
mov eax, dword [ebp + 0xc]
mov ecx, str.yaokong
jmp 0x4b3620
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3646
test dx, dx
je 0x4b3642
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3646
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3620
xor eax, eax
jmp 0x4b364b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b3b22
mov eax, dword [ebp + 0xc]
mov ecx, 0x5a0214
jmp 0x4b3660
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3686
test dx, dx
je 0x4b3682
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3686
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3660
xor eax, eax
jmp 0x4b368b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b3b22
mov eax, dword [ebp + 0xc]
mov ecx, str.oripage1
jmp 0x4b36a0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b36c6
test dx, dx
je 0x4b36c2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b36c6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b36a0
xor eax, eax
jmp 0x4b36cb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4b36db
push 1
call fcn.00522330
jmp 0x4b3b59
mov eax, dword [ebp + 0xc]
mov ecx, str.oripage2
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3709
test dx, dx
je 0x4b3705
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3709
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b36e3
xor eax, eax
jmp 0x4b370e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4b371e
push 2
call fcn.00522330
jmp 0x4b3b59
mov eax, dword [ebp + 0xc]
mov ecx, 0x5a0244
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b374c
test dx, dx
je 0x4b3748
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b374c
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3726
xor eax, eax
jmp 0x4b3751
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b3b0a
mov eax, dword [ebp + 0xc]
mov ecx, 0x5a024c
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3787
test dx, dx
je 0x4b3783
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3787
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3761
xor eax, eax
jmp 0x4b378c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b3b0a
mov eax, dword [ebp + 0xc]
mov ecx, 0x5a0254
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b37c6
test dx, dx
je 0x4b37c2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b37c6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b37a0
xor eax, eax
jmp 0x4b37cb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b3b0a
mov eax, dword [ebp + 0xc]
mov ecx, 0x5a025c
jmp 0x4b37e0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3806
test dx, dx
je 0x4b3802
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3806
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b37e0
xor eax, eax
jmp 0x4b380b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b3b0a
mov eax, dword [ebp + 0xc]
mov ecx, str.tool_showcm
jmp 0x4b3820
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3846
test dx, dx
je 0x4b3842
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3846
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3820
xor eax, eax
jmp 0x4b384b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4b385c
push eax
push 1
call fcn.00521480
jmp 0x4b3b59
mov edi, dword [ebp + 0xc]
mov ecx, str.tool_downcm
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b388c
test dx, dx
je 0x4b3888
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b388c
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3866
xor eax, eax
jmp 0x4b3891
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4b38a3
push 1
push 1
call fcn.00521480
jmp 0x4b3b5c
mov ecx, str.tool_closecm
mov eax, edi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b38d6
test dx, dx
je 0x4b38d2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b38d6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b38b0
xor eax, eax
jmp 0x4b38db
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4b3928
push 2
push 1
call fcn.00521480
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 0xa6c]
mov esi, dword [esp + 0xc]
mov edx, dword [eax]
mov edx, dword [edx + 0x2c]
lea ecx, [esp + 0x14]
push ecx
push esi
push eax
call edx
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0xa6c]
or ecx, 8
push ecx
mov dword [esp + 0x18], ecx
mov edx, dword [eax]
push esi
push eax
mov eax, dword [edx + 0x28]
call eax
jmp 0x4b3b5c
mov ecx, str.tool_showcaipiao1
mov eax, edi
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3956
test dx, dx
je 0x4b3952
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3956
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3930
xor eax, eax
jmp 0x4b395b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4b396c
push eax
push 0x11
call fcn.00521480
jmp 0x4b3b5c
mov ecx, str.tool_downcaipiao1
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3999
test dx, dx
je 0x4b3995
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3999
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3973
xor eax, eax
jmp 0x4b399e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4b39b0
push 1
push 0x11
call fcn.00521480
jmp 0x4b3b5c
mov ecx, str.tool_closecaipiao1
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b39dd
test dx, dx
je 0x4b39d9
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b39dd
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b39b7
xor eax, eax
jmp 0x4b39e2
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4b39f4
push 2
push 0x11
call fcn.00521480
jmp 0x4b3b5c
mov ecx, str.tool_showcaipiao2
mov eax, edi
jmp 0x4b3a00
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3a26
test dx, dx
je 0x4b3a22
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3a26
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3a00
xor eax, eax
jmp 0x4b3a2b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4b3a3c
push eax
push 0x12
call fcn.00521480
jmp 0x4b3b5c
mov ecx, str.tool_downcaipiao2
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3a69
test dx, dx
je 0x4b3a65
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3a69
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3a43
xor eax, eax
jmp 0x4b3a6e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4b3a80
push 1
push 0x12
call fcn.00521480
jmp 0x4b3b5c
mov ecx, str.tool_showcaipiao3
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3aad
test dx, dx
je 0x4b3aa9
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3aad
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3a87
xor eax, eax
jmp 0x4b3ab2
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4b3ac3
push eax
push 0x13
call fcn.00521480
jmp 0x4b3b5c
mov ecx, str.tool_downcaipiao3
mov eax, edi
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3af6
test dx, dx
je 0x4b3af2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3af6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3ad0
xor eax, eax
jmp 0x4b3afb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4b3b5c
push 1
push 0x13
call fcn.00521480
jmp 0x4b3b5c
mov ecx, dword [esp + 0xc]
mov edx, dword [ebp + 0xc]
push ecx
push edx
call fcn.0051fdd0
push esi
mov ecx, edi
call fcn.004b2e60
jmp 0x4b3b59
mov eax, dword [esp + 0xc]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
call fcn.00410660
add eax, 0x10
mov dword [esi], eax
push ecx
mov ecx, dword [ebp + 0xc]
mov byte [esp + 0x30], 1
mov eax, esp
mov dword [esp + 0x20], esp
push eax
call fcn.0040ff50
mov byte [esp + 0x30], 0
call fcn.00520f90
mov edi, dword [ebp + 0xc]
mov ecx, str.tool_downcaipiao1
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3b89
test dx, dx
je 0x4b3b85
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3b89
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3b63
xor eax, eax
jmp 0x4b3b8e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b3bcf
mov ecx, str.tool_closecaipiao1
mov eax, edi
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3bc6
test dx, dx
je 0x4b3bc2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3bc6
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3ba0
xor eax, eax
jmp 0x4b3bcb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4b3c0a
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 0xa6c]
mov esi, dword [esp + 0xc]
mov edx, dword [eax]
mov edx, dword [edx + 0x2c]
lea ecx, [esp + 0x14]
push ecx
push esi
push eax
call edx
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0xa6c]
or ecx, 0x10
push ecx
mov dword [esp + 0x18], ecx
mov edx, dword [eax]
push esi
push eax
mov eax, dword [edx + 0x28]
call eax
mov ecx, 0x5a0214
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3c37
test dx, dx
je 0x4b3c33
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3c37
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3c11
xor eax, eax
jmp 0x4b3c3c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4b3c6b
mov edi, dword [esp + 0x10]
mov ecx, dword [edi + 0x14]
mov esi, dword [sym.imp.USER32.dll_PostMessageW]
push eax
push eax
push 0x4e3
push ecx
call esi
mov edx, dword [edi + 0x14]
push 1
push 0
push 0x4ca
push edx
call esi
jmp 0x4b3d04
mov ecx, str.movie
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b3c98
test dx, dx
je 0x4b3c94
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b3c98
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b3c72
xor eax, eax
jmp 0x4b3c9d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4b3d04
mov edx, dword [ebp + 0x10]
test edx, edx
je 0x4b3cce
mov eax, edx
lea esi, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b3cb0
sub eax, esi
sar eax, 1
je 0x4b3cce
mov eax, dword [esp + 0xc]
push edx
push eax
call fcn.00522770
jmp 0x4b3d04
mov eax, dword [esp + 0xc]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov esi, esp
call fcn.00410660
add eax, 0x10
mov dword [esi], eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push ecx
mov ecx, edi
mov byte [esp + 0x34], 2
call fcn.0040ff50
mov byte [esp + 0x30], 0
call fcn.00520f90
mov dword [esp + 0x28], 0xffffffff
mov eax, dword [esp + 0xc]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4b3d2c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0xc