Function at 0x405bd0
Capabilities:
Check if file exists
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x61089d
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x6b1a94]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x676888
mov ecx, 0x6c2664
mov dword [ebp - 0x24], 0x6c2660
mov dword [0x6c2660], 0x6767e4
call fcn.00407490
push str.https:__dll.pdfxd.com_UserAgreement_
mov ecx, 0x6c2668
mov dword [ebp - 4], 0
call fcn.00407490
push str.http:__passport.pdfxd.com_account
mov ecx, 0x6c266c
mov byte [ebp - 4], 1
call fcn.00407490
push str.http:__archive.pdfxd.com_xundu_cef.7z
mov ecx, 0x6c2670
mov byte [ebp - 4], 2
call fcn.00407490
push str.https:__www.echatsoft.com_visitor_pc_chat.html_companyId521189echatTagkehuduan
mov ecx, 0x6c2674
mov byte [ebp - 4], 3
call fcn.00407490
push str.https:__apis.pdfxd.com
mov ecx, 0x6c2678
mov byte [ebp - 4], 4
call fcn.00407490
push str.https:__dev.pdfxd.com
mov ecx, 0x6c267c
mov byte [ebp - 4], 5
call fcn.00407490
push str.https:__dll.pdfxd.com
mov ecx, 0x6c2680
mov byte [ebp - 4], 6
call fcn.00407490
push str.https:__dll_dev.pdfxd.com
mov ecx, 0x6c2684
mov byte [ebp - 4], 7
call fcn.00407490
push str.http:__report.pdfxd.com
mov ecx, 0x6c2688
mov byte [ebp - 4], 8
call fcn.00407490
push str.http:__report_dev.pdfxd.com
mov ecx, 0x6c268c
mov byte [ebp - 4], 9
call fcn.00407490
push str._third_anonymous
mov ecx, 0x6c2690
mov byte [ebp - 4], 0xa
call fcn.00407490
push str._account_v1_api_user_info
mov ecx, 0x6c2694
mov byte [ebp - 4], 0xb
call fcn.00407490
push str._account_v1_api_passport_logout
mov ecx, 0x6c2698
mov byte [ebp - 4], 0xc
call fcn.00407490
push str._third_wx_qrcode_login
mov ecx, 0x6c269c
mov byte [ebp - 4], 0xd
call fcn.00407490
push str._third_wx_qrcode_login_notice
mov ecx, 0x6c26a0
mov byte [ebp - 4], 0xe
call fcn.00407490
push str._third_phone_sms_code
mov ecx, 0x6c26a4
mov byte [ebp - 4], 0xf
call fcn.00407490
push str._account_v3_mobile_login
mov ecx, 0x6c26a8
mov byte [ebp - 4], 0x10
call fcn.00407490
push str._account_v1_api_auth_code
mov ecx, 0x6c26ac
mov byte [ebp - 4], 0x11
call fcn.00407490
push str._account_v1_api_register
mov ecx, 0x6c26b0
mov byte [ebp - 4], 0x12
call fcn.00407490
push str._account_v3_passport_login
mov ecx, 0x6c26b4
mov byte [ebp - 4], 0x13
call fcn.00407490
push str._third_qq_login_connect
mov ecx, 0x6c26b8
mov byte [ebp - 4], 0x14
call fcn.00407490
push str._account_v3_passport_login_bind
mov ecx, 0x6c26bc
mov byte [ebp - 4], 0x15
call fcn.00407490
push str._account_v1_api_user_bind
mov ecx, 0x6c26c0
mov byte [ebp - 4], 0x16
call fcn.00407490
push str._account_v1_api_user_bind_list
mov ecx, 0x6c26c4
mov byte [ebp - 4], 0x17
call fcn.00407490
push str._account_v1_api_forgetpwd_step_first
mov ecx, 0x6c26c8
mov byte [ebp - 4], 0x18
call fcn.00407490
push str._account_v1_api_forgetpwd_step_second
mov ecx, 0x6c26cc
mov byte [ebp - 4], 0x19
call fcn.00407490
push str._account_v1_api_forgetpwd_step_submit
mov ecx, 0x6c26d0
mov byte [ebp - 4], 0x1a
call fcn.00407490
push str._app_config
mov ecx, 0x6c26d4
mov byte [ebp - 4], 0x1b
call fcn.00407490
push str._cloud_v1_api_upgrade
mov ecx, 0x6c26d8
mov byte [ebp - 4], 0x1c
call fcn.00407490
push str._customer_support
mov ecx, 0x6c26dc
mov byte [ebp - 4], 0x1d
call fcn.00407490
push str._customer_collection
mov ecx, 0x6c26e0
mov byte [ebp - 4], 0x1e
call fcn.00407490
mov byte [ebp - 4], 0x1f
push str._customer_cloud_active
mov ecx, 0x6c26e4
call fcn.00407490
push str._customer_dump_upload
mov ecx, 0x6c26e8
mov byte [ebp - 4], 0x20
call fcn.00407490
push str._third_auth_echat_cipher_member
mov ecx, 0x6c26ec
mov byte [ebp - 4], 0x21
call fcn.00407490
push str._qh_payment.html
mov ecx, 0x6c26f0
mov byte [ebp - 4], 0x22
call fcn.00407490
push str._qh_special_pay.html
mov ecx, 0x6c26f4
mov byte [ebp - 4], 0x23
call fcn.00407490
push str._pricing.html
mov ecx, 0x6c26f8
mov byte [ebp - 4], 0x24
call fcn.00407490
push str._cancel_pay.html
mov ecx, 0x6c26fc
mov byte [ebp - 4], 0x25
call fcn.00407490
push str._close_pay.html
mov ecx, 0x6c2700
mov byte [ebp - 4], 0x26
call fcn.00407490
push str._qh_pricing.html
mov ecx, 0x6c2704
mov byte [ebp - 4], 0x27
call fcn.00407490
push str._qh_cancel_pay.html
mov ecx, 0x6c2708
mov byte [ebp - 4], 0x28
call fcn.00407490
push str._qh_close_pay.html
mov ecx, 0x6c270c
mov byte [ebp - 4], 0x29
call fcn.00407490
push str._lenovo_pricing.html
mov ecx, 0x6c2710
mov byte [ebp - 4], 0x2a
call fcn.00407490
push str._lenovo_cancel_pay.html
mov ecx, 0x6c2714
mov byte [ebp - 4], 0x2b
call fcn.00407490
push str._lenovo_close_pay.html
mov ecx, 0x6c2718
mov byte [ebp - 4], 0x2c
call fcn.00407490
push str._v1_log
mov ecx, 0x6c271c
mov byte [ebp - 4], 0x2d
call fcn.00407490
mov byte [ebp - 4], 0x2e
mov ecx, dword [0x6c2678]
lea ecx, [ecx - 0x10]
call fcn.00407830
lea ebx, [eax + 0x10]
mov dword [ebp - 0x10], ebx
mov byte [ebp - 4], 0x2f
mov ecx, dword [0x6c2680]
lea ecx, [ecx - 0x10]
call fcn.00407830
lea edi, [eax + 0x10]
mov dword [ebp - 0x14], edi
mov byte [ebp - 4], 0x30
mov ecx, dword [0x6c2688]
add ecx, 0xfffffff0
call fcn.00407830
lea esi, [eax + 0x10]
mov dword [ebp - 0x18], esi
push ecx
mov edx, str.dev.data
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x1c]
call fcn.0046c430
add esp, 4
push dword [eax]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov edx, dword [ebp - 0x1c]
or ecx, 0xffffffff
mov dword [ebp - 0x20], eax
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x40600b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x40603f
push 0x6c267c
lea ecx, [ebp - 0x10]
call fcn.00407890
push 0x6c2684
lea ecx, [ebp - 0x14]
call fcn.00407890
push 0x6c268c
lea ecx, [ebp - 0x18]
call fcn.00407890
mov ebx, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esi, dword [ebp - 0x18]
push 0x6c2690
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c2690
mov byte [ebp - 4], 0x32
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406080
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c2694
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c2694
mov byte [ebp - 4], 0x33
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4060c1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c2698
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c2698
mov byte [ebp - 4], 0x34
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406102
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c269c
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c269c
mov byte [ebp - 4], 0x35
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406143
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26a0
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26a0
mov byte [ebp - 4], 0x36
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406184
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26a4
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26a4
mov byte [ebp - 4], 0x37
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4061c5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26a8
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26a8
mov byte [ebp - 4], 0x38
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406206
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26b8
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26b8
mov byte [ebp - 4], 0x39
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406247
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26ac
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26ac
mov byte [ebp - 4], 0x3a
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406288
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26b0
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26b0
mov byte [ebp - 4], 0x3b
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4062c9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26b4
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26b4
mov byte [ebp - 4], 0x3c
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40630a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26bc
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26bc
mov byte [ebp - 4], 0x3d
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40634b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26c0
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26c0
mov byte [ebp - 4], 0x3e
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40638c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26c4
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26c4
mov byte [ebp - 4], 0x3f
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4063cd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26c8
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26c8
mov byte [ebp - 4], 0x40
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40640e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26cc
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26cc
mov byte [ebp - 4], 0x41
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40644f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26d0
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26d0
mov byte [ebp - 4], 0x42
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406490
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26d4
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26d4
mov byte [ebp - 4], 0x43
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4064d1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26d8
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26d8
mov byte [ebp - 4], 0x44
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406512
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26dc
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26dc
mov byte [ebp - 4], 0x45
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406553
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26e0
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26e0
mov byte [ebp - 4], 0x46
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406594
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26e4
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26e4
mov byte [ebp - 4], 0x47
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4065d5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26e8
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26e8
mov byte [ebp - 4], 0x48
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406616
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26ec
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26ec
mov byte [ebp - 4], 0x49
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406657
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26f0
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26f0
mov byte [ebp - 4], 0x4a
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406698
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26f4
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26f4
mov byte [ebp - 4], 0x4b
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4066d9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26f8
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26f8
mov byte [ebp - 4], 0x4c
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40671a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c26fc
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c26fc
mov byte [ebp - 4], 0x4d
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40675b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c2700
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c2700
mov byte [ebp - 4], 0x4e
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40679c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c2704
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c2704
mov byte [ebp - 4], 0x4f
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4067dd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c2708
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c2708
mov byte [ebp - 4], 0x50
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40681e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c270c
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c270c
mov byte [ebp - 4], 0x51
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40685f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c2710
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c2710
mov byte [ebp - 4], 0x52
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4068a0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c2714
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c2714
mov byte [ebp - 4], 0x53
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4068e1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c2718
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c2718
mov byte [ebp - 4], 0x54
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406922
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x6c271c
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x20]
call fcn.00405b20
add esp, 4
push eax
mov ecx, 0x6c271c
mov byte [ebp - 4], 0x55
call fcn.00407890
mov byte [ebp - 4], 0x31
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406963
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
mov byte [ebp - 4], 0x30
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x406981
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2f
add edi, 0xfffffff0
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x40699c
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x2e
add ebx, 0xfffffff0
lock xadd dword [ebx + 0xc], esi
dec esi
test esi, esi
jg 0x4069b5
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, 0x6c2660
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret