Function at 0x49be70
Capabilities:
Contain obfuscated stackstrings
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f41f4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa20
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
lea eax, [edi - 0xd3]
mov dword [ebp - 0x14], esi
cmp eax, 0x54
ja case.0x49beb0.251
xor ecx, ecx
mov cl, byte [eax + 0x49f4e4]
jmp dword [ecx*4 + 0x49f440]
mov eax, dword [esi + 0x114]
xor ebx, ebx
cmp eax, ebx
jne case.0x49beb0.221
push ebx
push edi
mov ecx, esi
call fcn.004a5080
jmp case.0x49beb0.221
mov eax, dword [esi + 0x114]
test eax, eax
jne case.0x49beb0.221
push 1
push edi
mov ecx, esi
call fcn.004a5080
test eax, eax
jne case.0x49beb0.221
jmp 0x49f424
mov eax, dword [0x50a0e0]
mov dword [ebp + 8], eax
push ecx
lea ecx, [eax - 0xc]
mov dword [ebp - 0xc4], esp
xor ebx, ebx
mov edx, dword [ecx]
mov dword [ebp - 4], ebx
cmp edx, ebx
mov dword [ebp - 0x44], esp
mov dword [ebp - 0x10], ecx
jl 0x49bf2c
mov edx, esp
mov ebx, ecx
push ebx
mov dword [edx], eax
call dword [0x4f9310]
jmp 0x49bf53
mov ecx, dword [ebp - 0x44]
cmp eax, ebx
mov dword [ecx], eax
jne 0x49bf39
xor eax, eax
jmp 0x49bf43
mov edx, dword [ebp + 8]
push edx
call dword [0x4f9318]
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x44]
push eax
call fcn.00402200
mov ebx, dword [ebp - 0x10]
push edi
mov ecx, esi
call fcn.004a1220
mov edx, dword [ebp + 8]
mov eax, dword [0x50a0e4]
add edx, 0xfffffff4
cmp edx, eax
je case.0x49beb0.221
push ebx
call dword [0x4f9320]
test eax, eax
jg case.0x49beb0.221
push ebx
call fcn.004dcaa6
add esp, 4
jmp case.0x49beb0.221
mov ecx, esi
call fcn.004a17d0
jmp case.0x49beb0.221
mov eax, dword [esi + 0x114]
xor ebx, ebx
cmp eax, ebx
jne case.0x49beb0.221
mov ecx, 0x104
xor eax, eax
lea edi, [ebp - 0xa2c]
push ebx
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 8]
lea eax, [ebp - 0xa2c]
push eax
push ecx
call fcn.004a7ed0
add esp, 0xc
test eax, eax
je case.0x49beb0.221
mov eax, dword [esi + 0x120]
mov ecx, dword [esi + 0x11c]
lea edi, [esi + 0x118]
push eax
push ecx
mov ecx, edi
call fcn.004bd0d0
mov eax, dword [esi + 0xc8]
push ebx
push ebx
push 0x1004
mov edx, dword [eax]
push edx
call dword [0x4f94a0]
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
push eax
push ecx
lea edx, [ebp - 0xa2c]
mov ecx, esp
mov dword [ebp - 0x18], esp
push edx
call fcn.00406b10
mov ecx, esi
call fcn.004a5c10
cmp eax, ebx
je case.0x49beb0.221
mov eax, dword [edi + 4]
cmp eax, ebx
je case.0x49beb0.221
mov ecx, dword [edi + 8]
sub ecx, eax
sar ecx, 3
je case.0x49beb0.221
mov dword [esi + 0x114], 1
mov edx, dword [esi + 0x128]
push edx
call dword [0x4f92a8]
push esi
push ebx
push fcn.004a62a0
call fcn.004ddc20
add esp, 0xc
jmp case.0x49beb0.221
cmp edi, 0xf3
jne 0x49c07c
mov edi, 0xd6
push edi
mov ecx, esi
call fcn.004a0dd0
jmp case.0x49beb0.221
push edi
mov ecx, esi
call fcn.0049f860
jmp case.0x49beb0.221
mov ecx, esi
call fcn.004b2800
jmp case.0x49beb0.221
mov eax, dword [esi + 0xc4]
xor ebx, ebx
push ebx
push ebx
mov eax, dword [eax]
push 0x1004
push eax
call dword [0x4f94a0]
cmp eax, 2
jge 0x49c0c6
xor eax, eax
jmp 0x49f424
lea ecx, [ebp - 0x3c]
call fcn.004272c0
mov edx, dword [esi + 0x10c]
lea ecx, [ebp - 0x40]
push ebx
push ecx
push edx
mov ecx, esi
mov dword [ebp - 4], 1
call fcn.004a90d0
test eax, eax
je 0x49c20f
lea ecx, [ebp - 0x60]
call fcn.004272c0
mov edi, dword [esi + 0x108]
lea ecx, [ebp + 8]
mov dword [ebp - 0x10], ebx
call fcn.004272c0
push str.QvodPlaylist
lea ecx, [ebp - 0x74]
mov word [ebp - 0x74], bx
call fcn.004067a0
lea eax, [ebp + 8]
lea ecx, [ebp - 0x74]
push eax
push ecx
push str.selectSingleNode
lea ecx, [edi + 4]
mov byte [ebp - 4], 4
call fcn.00407e00
lea edx, [ebp - 0x74]
mov dword [edi + 8], eax
push edx
mov byte [ebp - 4], 3
call dword [0x4f936c]
mov eax, dword [edi + 8]
cmp eax, ebx
mov eax, dword [ebp + 8]
jl 0x49c165
cmp eax, ebx
je 0x49c165
push eax
lea ecx, [ebp - 0x60]
call fcn.00407de0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x10], 1
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x49c173
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x10], ebx
jne 0x49c1a4
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x49c189
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x49c19d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x49f424
mov edx, dword [ebp - 0x3c]
lea ecx, [ebp - 0x90]
push edx
call fcn.0046cc00
push ebx
push eax
push str.removeChild
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 5
call fcn.004067f0
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 2
call dword [0x4f936c]
mov ecx, dword [esi + 0xc4]
mov eax, dword [esi + 0x10c]
push ebx
push eax
mov ecx, dword [ecx]
push 0x1008
push ecx
call dword [0x4f94a0]
push ebx
mov ecx, esi
call fcn.004a9020
mov eax, dword [ebp - 0x60]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x49c20f
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je case.0x49beb0.221
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp case.0x49beb0.221
mov eax, dword [esi + 0x138]
cmp eax, 1
jne 0x49c259
mov eax, dword [esi + 0xc4]
mov edx, dword [esi + 0x10c]
push 0
push edx
mov ecx, dword [eax]
push 0x1076
push ecx
call dword [0x4f94a0]
jmp case.0x49beb0.221
cmp eax, 2
jne case.0x49beb0.221
mov eax, dword [esi + 0xd4]
mov edx, dword [esi + 0xe4]
push 0
push edx
mov ecx, dword [eax]
push 0x1076
push ecx
call dword [0x4f94a0]
jmp case.0x49beb0.221
xor ebx, ebx
cmp edi, 0xdd
jne 0x49c2d6
mov esi, dword [esi + 0xc8]
mov dword [esi + 0x10], 1
push 0x475f00
push esi
mov edx, dword [esi]
lea edi, [esi + 0x10]
push 0x1030
push edx
call dword [0x4f94a0]
add esi, 0x60
push edi
mov ecx, esi
call fcn.0048a140
mov ecx, dword [eax]
xor edx, edx
cmp ecx, ebx
push edi
sete dl
mov ecx, esi
mov dword [ebp + 8], edx
call fcn.0048a140
mov ecx, dword [ebp + 8]
jmp 0x49c324
cmp edi, 0xde
jne 0x49c329
mov esi, dword [esi + 0xc8]
mov dword [esi + 0x10], 2
push 0x475f00
push esi
mov edx, dword [esi]
lea edi, [esi + 0x10]
push 0x1030
push edx
call dword [0x4f94a0]
add esi, 0x60
push edi
mov ecx, esi
call fcn.0048a140
mov ecx, dword [eax]
xor edx, edx
cmp ecx, ebx
push edi
sete dl
mov ecx, esi
mov dword [ebp + 8], edx
call fcn.0048a140
mov ecx, dword [ebp + 8]
mov esi, dword [ebp - 0x14]
mov dword [eax], ecx
mov edx, dword [0x50a0e0]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x80], edx
call fcn.004272c0
lea eax, [ebp - 0xa8]
lea ecx, [ebp - 0x80]
push eax
mov dword [ebp - 4], 6
call fcn.00409130
test eax, eax
jne 0x49c383
mov ecx, dword [0x4fa1c0]
mov edx, dword [0x4fa1c4]
mov eax, dword [0x4fa1c8]
mov dword [ebp - 0xa8], ecx
mov ecx, dword [0x4fa1cc]
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
lea edx, [ebp - 0x7c]
lea eax, [ebp - 0xa8]
push edx
push 0x4fa674
push 3
push ebx
push eax
call dword [0x4f9688]
mov dword [ebp - 0x78], eax
mov eax, dword [esi + 0xc8]
push ebx
push ebx
mov ecx, dword [eax]
push 0x1004
push ecx
call dword [0x4f94a0]
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x10], eax
call fcn.004272c0
mov eax, dword [esi + 0x10c]
lea edx, [ebp - 0x98]
push ebx
push edx
push eax
mov ecx, esi
mov byte [ebp - 4], 7
call fcn.004a90d0
test eax, eax
jne 0x49c413
mov eax, dword [ebp - 0x94]
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x49c3f5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 8
call fcn.004282a0
lea ecx, [ebp - 0x80]
call fcn.004021d0
xor eax, eax
jmp 0x49f424
mov edx, dword [0x50a0e0]
mov dword [ebp - 0x24], edx
lea eax, [ebp - 0x61c]
push 0x104
push eax
push 0x9d0e
mov byte [ebp - 4], 9
call fcn.00432d40
add esp, 0xc
lea ecx, [ebp - 0x61c]
lea edx, [ebp - 0x24]
push str.QvodPlaylist
push str.list
push str.hotitem
push str.counts
push 0x51d42c
push str.createtime
push ecx
push str.title
push str.list
push 0x516a14
push str.deftitle
push str._A____T
push str.tagtitle
push str.format
push str.hotitem
push str.3.5.0.64
push str.version
push str.QvodPlaylist
push str.__s__s__s___s_0___r_n__s__s__s___s__s____r_n__s__s__s___s__s___s_0___s_0___r_n___s__r_n___s_
push edx
call fcn.004073f0
add esp, 0x50
mov word [ebp - 0x90], bx
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x74]
push eax
mov word [ebp - 0x74], bx
call fcn.004067a0
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x74]
push ecx
push edx
push str.loadXml
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xb
call fcn.004067f0
mov esi, dword [0x4f936c]
lea eax, [ebp - 0x74]
push eax
call esi
lea ecx, [ebp - 0x90]
push ecx
call esi
lea ecx, [ebp - 0x3c]
call fcn.004272c0
lea ecx, [ebp + 8]
call fcn.004272c0
push str.QvodPlaylist
lea ecx, [ebp - 0x74]
mov word [ebp - 0x74], bx
call fcn.004067a0
lea edx, [ebp + 8]
lea eax, [ebp - 0x74]
push edx
push eax
push str.selectSingleNode
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xe
call fcn.00407e00
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x78], eax
push ecx
mov byte [ebp - 4], 0xd
call esi
mov eax, dword [ebp - 0x78]
cmp eax, ebx
mov eax, dword [ebp + 8]
jl 0x49c54f
cmp eax, ebx
je 0x49c54f
push eax
lea ecx, [ebp - 0x3c]
call fcn.00407de0
mov eax, dword [ebp + 8]
cmp eax, ebx
mov byte [ebp - 4], 0xc
je 0x49c55d
mov edx, dword [eax]
push eax
call dword [edx + 8]
lea ecx, [ebp - 0xac]
call fcn.004272c0
lea ecx, [ebp + 8]
call fcn.004272c0
push str.list
lea ecx, [ebp - 0x74]
mov word [ebp - 0x74], bx
call fcn.004067a0
lea eax, [ebp + 8]
lea ecx, [ebp - 0x74]
push eax
push ecx
push str.selectSingleNode
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x11
call fcn.00407e00
lea edx, [ebp - 0x74]
mov dword [ebp - 0x40], eax
push edx
mov byte [ebp - 4], 0x10
call esi
mov eax, dword [ebp - 0x40]
cmp eax, ebx
mov eax, dword [ebp + 8]
jl 0x49c5c4
cmp eax, ebx
je 0x49c5c4
push eax
lea ecx, [ebp - 0xac]
call fcn.00407de0
mov eax, dword [ebp + 8]
cmp eax, ebx
mov byte [ebp - 4], 0xf
je 0x49c5d2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
mov edi, dword [0x4f9320]
cmp eax, ebx
mov dword [ebp + 8], ebx
jle 0x49cc30
lea ecx, [ebp - 0x54]
call fcn.004272c0
mov ecx, dword [ebp + 8]
lea edx, [ebp - 0x58]
lea eax, [ebp - 0x98]
push edx
push eax
push ecx
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 0x12
call fcn.004a9490
test eax, eax
je 0x49cc12
lea ecx, [ebp - 0x2c]
call fcn.004272c0
lea ecx, [ebp - 0x1c]
call fcn.004272c0
push str.item
lea ecx, [ebp - 0x74]
mov word [ebp - 0x74], bx
call fcn.004067a0
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x74]
push edx
push eax
push str.createElement
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x15
call fcn.00407e00
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x78], eax
push ecx
mov byte [ebp - 4], 0x14
call esi
mov eax, dword [ebp - 0x78]
cmp eax, ebx
mov eax, dword [ebp - 0x1c]
jl 0x49c672
cmp eax, ebx
je 0x49c672
push eax
lea ecx, [ebp - 0x2c]
call fcn.00407de0
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
mov byte [ebp - 4], 0x13
je 0x49c680
mov edx, dword [eax]
push eax
call dword [edx + 8]
lea eax, [ebp - 0x18]
push 0x50b4d8
push eax
lea ecx, [ebp - 0x58]
call fcn.004083f0
mov ecx, dword [ebp - 0x18]
mov word [ebp - 0x1a8], bx
push ecx
lea ecx, [ebp - 0x1a8]
call fcn.004067a0
push 0x50b4d8
lea ecx, [ebp - 0x168]
mov word [ebp - 0x168], bx
call fcn.004067a0
lea edx, [ebp - 0x1a8]
push ebx
lea eax, [ebp - 0x168]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
call fcn.00406870
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x30], eax
push ecx
call esi
lea edx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x16
push edx
call esi
lea eax, [ebp - 0x28]
push str.title
push eax
lea ecx, [ebp - 0x58]
call fcn.004083f0
mov ecx, dword [ebp - 0x28]
mov word [ebp - 0x1b8], bx
push ecx
lea ecx, [ebp - 0x1b8]
call fcn.004067a0
push str.title
lea ecx, [ebp - 0x1d8]
mov word [ebp - 0x1d8], bx
call fcn.004067a0
lea edx, [ebp - 0x1b8]
push ebx
lea eax, [ebp - 0x1d8]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1b
call fcn.00406870
lea ecx, [ebp - 0x1d8]
mov dword [ebp - 0x30], eax
push ecx
call esi
lea edx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x19
push edx
call esi
lea eax, [ebp - 0x48]
push 0x515fac
push eax
lea ecx, [ebp - 0x58]
call fcn.004083f0
mov ecx, dword [ebp - 0x48]
mov word [ebp - 0x1e8], bx
push ecx
lea ecx, [ebp - 0x1e8]
call fcn.004067a0
mov word [ebp - 0x138], bx
push 0x515fac
lea ecx, [ebp - 0x138]
call fcn.004067a0
lea edx, [ebp - 0x1e8]
push ebx
lea eax, [ebp - 0x138]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1e
call fcn.00406870
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x30], eax
push ecx
call esi
lea edx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x1c
push edx
call esi
lea eax, [ebp - 0x4c]
push str.author
push eax
lea ecx, [ebp - 0x58]
call fcn.004083f0
mov ecx, dword [ebp - 0x4c]
mov word [ebp - 0x1fc], bx
push ecx
lea ecx, [ebp - 0x1fc]
call fcn.004067a0
push str.author
lea ecx, [ebp - 0x158]
mov word [ebp - 0x158], bx
call fcn.004067a0
lea edx, [ebp - 0x1fc]
push ebx
lea eax, [ebp - 0x158]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x21
call fcn.00406870
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x30], eax
push ecx
call esi
lea edx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x1f
push edx
call esi
lea eax, [ebp - 0x5c]
push str.special
push eax
lea ecx, [ebp - 0x58]
call fcn.004083f0
mov ecx, dword [ebp - 0x5c]
mov word [ebp - 0x108], bx
push ecx
lea ecx, [ebp - 0x108]
call fcn.004067a0
push str.special
lea ecx, [ebp - 0x178]
mov word [ebp - 0x178], bx
call fcn.004067a0
lea edx, [ebp - 0x108]
push ebx
lea eax, [ebp - 0x178]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x24
call fcn.00406870
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x30], eax
push ecx
call esi
lea edx, [ebp - 0x108]
mov byte [ebp - 4], 0x22
push edx
call esi
lea eax, [ebp - 0x20]
push str.bits
push eax
lea ecx, [ebp - 0x58]
call fcn.004083f0
mov ecx, dword [ebp - 0x20]
mov word [ebp - 0x1c8], bx
push ecx
lea ecx, [ebp - 0x1c8]
call fcn.004067a0
push str.bits
lea ecx, [ebp - 0x198]
mov word [ebp - 0x198], bx
call fcn.004067a0
lea edx, [ebp - 0x1c8]
push ebx
lea eax, [ebp - 0x198]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x27
call fcn.00406870
lea ecx, [ebp - 0x198]
mov dword [ebp - 0x30], eax
push ecx
call esi
lea edx, [ebp - 0x1c8]
mov byte [ebp - 4], 0x25
push edx
call esi
lea eax, [ebp - 0x50]
push str.type
push eax
lea ecx, [ebp - 0x58]
call fcn.004083f0
mov ecx, dword [ebp - 0x50]
mov word [ebp - 0x128], bx
push ecx
lea ecx, [ebp - 0x128]
call fcn.004067a0
push str.type
lea ecx, [ebp - 0x118]
mov word [ebp - 0x118], bx
call fcn.004067a0
lea edx, [ebp - 0x128]
push ebx
lea eax, [ebp - 0x118]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2a
call fcn.00406870
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x30], eax
push ecx
call esi
lea edx, [ebp - 0x128]
mov byte [ebp - 4], 0x28
push edx
call esi
lea eax, [ebp - 0x44]
push str.format
push eax
lea ecx, [ebp - 0x58]
call fcn.004083f0
mov ecx, dword [ebp - 0x44]
mov word [ebp - 0xc0], bx
push ecx
lea ecx, [ebp - 0xc0]
call fcn.004067a0
push str.format
lea ecx, [ebp - 0x148]
mov word [ebp - 0x148], bx
call fcn.004067a0
lea edx, [ebp - 0xc0]
push ebx
lea eax, [ebp - 0x148]
push edx
push eax
push str.setAttribute
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x2d
call fcn.00406870
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x30], eax
push ecx
call esi
lea edx, [ebp - 0xc0]
push edx
call esi
mov word [ebp - 0xa8], bx
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x2e
call fcn.0046cc00
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x2f
push ecx
push eax
push str.appendChild
lea ecx, [ebp - 0xac]
call fcn.004067f0
lea edx, [ebp - 0x90]
mov dword [ebp - 0xb0], eax
push edx
mov byte [ebp - 4], 0x2e
call esi
cmp dword [ebp - 0xb0], ebx
jl 0x49cab5
cmp word [ebp - 0xa8], 9
jne 0x49cab5
cmp dword [ebp - 0xa0], ebx
je 0x49cab5
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0xa0]
push eax
mov edx, dword [eax]
call dword [edx + 4]
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0xa8]
push ecx
call esi
mov eax, dword [ebp - 0x44]
mov ecx, dword [0x50a0e4]
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x49cae7
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x49cae7
mov eax, dword [ebp - 0x44]
add eax, 0xfffffff4
push eax
call fcn.004dcaa6
add esp, 4
mov eax, dword [ebp - 0x50]
mov edx, dword [0x50a0e4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x49cb10
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x49cb10
mov edx, dword [ebp - 0x50]
lea eax, [edx - 0xc]
push eax
call fcn.004dcaa6
add esp, 4
mov eax, dword [ebp - 0x20]
mov edx, dword [0x50a0e4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x49cb39
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x49cb39
mov edx, dword [ebp - 0x20]
lea eax, [edx - 0xc]
push eax
call fcn.004dcaa6
add esp, 4
mov eax, dword [ebp - 0x5c]
mov edx, dword [0x50a0e4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x49cb62
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x49cb62
mov edx, dword [ebp - 0x5c]
lea eax, [edx - 0xc]
push eax
call fcn.004dcaa6
add esp, 4
mov eax, dword [ebp - 0x4c]
mov edx, dword [0x50a0e4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x49cb8b
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x49cb8b
mov edx, dword [ebp - 0x4c]
lea eax, [edx - 0xc]
push eax
call fcn.004dcaa6
add esp, 4
mov eax, dword [ebp - 0x48]
mov edx, dword [0x50a0e4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x49cbb4
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x49cbb4
mov edx, dword [ebp - 0x48]
lea eax, [edx - 0xc]
push eax
call fcn.004dcaa6
add esp, 4
mov eax, dword [ebp - 0x28]
mov edx, dword [0x50a0e4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x49cbdd
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x49cbdd
mov edx, dword [ebp - 0x28]
lea eax, [edx - 0xc]
push eax
call fcn.004dcaa6
add esp, 4
mov eax, dword [ebp - 0x18]
mov edx, dword [0x50a0e4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x49cc06
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x49cc06
mov edx, dword [ebp - 0x18]
lea eax, [edx - 0xc]
push eax
call fcn.004dcaa6
add esp, 4
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x12
call fcn.004282a0
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0xf
call fcn.004282a0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x10]
inc eax
cmp eax, ecx
mov dword [ebp + 8], eax
jl 0x49c5e6
lea ecx, [ebp - 0x34]
call fcn.004272c0
lea ecx, [ebp + 8]
call fcn.004272c0
push str.item
lea ecx, [ebp - 0xc0]
mov word [ebp - 0xc0], bx
call fcn.004067a0
lea eax, [ebp + 8]
lea ecx, [ebp - 0xc0]
push eax
push ecx
push str.selectNodes
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x32
call fcn.00407e00
lea edx, [ebp - 0xc0]
mov dword [ebp - 0x98], eax
push edx
mov byte [ebp - 4], 0x31
call esi
cmp dword [ebp - 0x98], ebx
jl 0x49cca1
mov eax, dword [ebp + 8]
cmp eax, ebx
je 0x49cca1
push eax
lea ecx, [ebp - 0x34]
call fcn.00407de0
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x30
call fcn.004282a0
push ebx
push str.removeAll
lea ecx, [ebp - 0x34]
call fcn.0049f560
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x38], eax
call fcn.004272c0
lea ecx, [ebp + 8]
call fcn.004272c0
push str.item
lea ecx, [ebp - 0xc0]
mov word [ebp - 0xc0], bx
call fcn.004067a0
lea eax, [ebp + 8]
lea ecx, [ebp - 0xc0]
push eax
push ecx
push str.selectNodes
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x35
call fcn.00407e00
lea edx, [ebp - 0xc0]
mov dword [ebp - 0xb0], eax
push edx
mov byte [ebp - 4], 0x34
call esi
cmp dword [ebp - 0xb0], ebx
jl 0x49cd2f
mov eax, dword [ebp + 8]
cmp eax, ebx
je 0x49cd2f
push eax
lea ecx, [ebp - 0x60]
call fcn.00407de0
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x33
call fcn.004282a0
mov dword [ebp + 8], ebx
xor edi, edi
mov word [ebp - 0x74], bx
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x60]
push eax
push str.length
mov byte [ebp - 4], 0x36
call fcn.00469320
cmp eax, ebx
mov dword [ebp - 0x64], eax
jl 0x49cd6a
cmp word [ebp - 0x74], 3
jne 0x49cd6a
mov edi, dword [ebp - 0x6c]
lea ecx, [ebp - 0x74]
push ecx
call esi
cmp dword [ebp + 8], edi
jge 0x49d433
lea ecx, [ebp - 0x2c]
call fcn.004272c0
lea ecx, [ebp - 0x54]
call fcn.004272c0
mov eax, dword [ebp + 8]
xor edi, edi
cmp eax, ebx
jl 0x49d413
lea ecx, [ebp - 0x18]
call fcn.004272c0
mov edx, dword [ebp + 8]
mov word [ebp - 0xc0], 3
mov dword [ebp - 0xb8], edx
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0xc0]
push eax
push ecx
push str.item
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x3a
call fcn.00407e00
lea edx, [ebp - 0xc0]
mov dword [ebp - 0x64], eax
push edx
mov byte [ebp - 4], 0x39
call esi
cmp dword [ebp - 0x64], ebx
jl 0x49cdf6
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0x49cdf6
push eax
lea ecx, [ebp - 0x54]
call fcn.00407de0
mov edi, 1
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x38
call fcn.004282a0
cmp edi, ebx
je 0x49d413
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x28]
mov edi, dword [eax + 0x108]
call fcn.004272c0
push str.item
lea ecx, [ebp - 0x148]
mov word [ebp - 0x148], bx
call fcn.004067a0
lea ecx, [ebp - 0x28]
lea edx, [ebp - 0x148]
push ecx
push edx
push str.createElement
lea ecx, [edi + 4]
mov byte [ebp - 4], 0x3c
call fcn.00407e00
mov dword [edi + 8], eax
lea eax, [ebp - 0x148]
push eax
mov byte [ebp - 4], 0x3b
call esi
cmp dword [edi + 8], ebx
jl 0x49ce73
mov eax, dword [ebp - 0x28]
cmp eax, ebx
je 0x49ce73
push eax
lea ecx, [ebp - 0x2c]
call fcn.00407de0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x38
call fcn.004282a0
lea ecx, [ebp - 0x10]
push 0x50b4d8
push ecx
lea ecx, [ebp - 0x58]
call fcn.004083f0
mov edx, dword [ebp - 0x10]
lea ecx, [ebp - 0x118]
push edx
mov word [ebp - 0x118], bx
call fcn.004067a0
push 0x50b4d8
lea ecx, [ebp - 0x128]
mov word [ebp - 0x128], bx
call fcn.004067a0
lea eax, [ebp - 0x118]
push ebx
lea ecx, [ebp - 0x128]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x3f
call fcn.00406870
lea edx, [ebp - 0x128]
mov dword [ebp - 0x30], eax
push edx
call esi
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x3d
push eax
call esi
lea ecx, [ebp - 0x20]
push str.title
push ecx
lea ecx, [ebp - 0x58]
call fcn.004083f0
mov edx, dword [ebp - 0x20]
lea ecx, [ebp - 0x198]
push edx
mov word [ebp - 0x198], bx
call fcn.004067a0
push str.title
lea ecx, [ebp - 0x1c8]
mov word [ebp - 0x1c8], bx
call fcn.004067a0
lea eax, [ebp - 0x198]
push ebx
lea ecx, [ebp - 0x1c8]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x42
call fcn.00406870
lea edx, [ebp - 0x1c8]
mov dword [ebp - 0x30], eax
push edx
call esi
lea eax, [ebp - 0x198]
mov byte [ebp - 4], 0x40
push eax
call esi
lea ecx, [ebp - 0x1c]
push 0x515fac
push ecx
lea ecx, [ebp - 0x58]
call fcn.004083f0
mov edx, dword [ebp - 0x1c]
mov word [ebp - 0x178], bx
push edx
lea ecx, [ebp - 0x178]
call fcn.004067a0
push 0x515fac
lea ecx, [ebp - 0x108]
mov word [ebp - 0x108], bx
call fcn.004067a0
lea eax, [ebp - 0x178]
push ebx
lea ecx, [ebp - 0x108]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x45
call fcn.00406870
lea edx, [ebp - 0x108]
mov dword [ebp - 0x30], eax
push edx
call esi
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 0x43
push eax
call esi
lea ecx, [ebp - 0x50]
push str.author
push ecx
lea ecx, [ebp - 0x58]
call fcn.004083f0
mov edx, dword [ebp - 0x50]
lea ecx, [ebp - 0x158]
push edx
mov word [ebp - 0x158], bx
call fcn.004067a0
push str.author
lea ecx, [ebp - 0x1fc]
mov word [ebp - 0x1fc], bx
call fcn.004067a0
lea eax, [ebp - 0x158]
push ebx
lea ecx, [ebp - 0x1fc]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x48
call fcn.00406870
lea edx, [ebp - 0x1fc]
mov dword [ebp - 0x30], eax
push edx
call esi
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0x46
push eax
call esi
lea ecx, [ebp - 0x44]
push str.special
push ecx
lea ecx, [ebp - 0x58]
call fcn.004083f0
mov edx, dword [ebp - 0x44]
lea ecx, [ebp - 0x138]
push edx
mov word [ebp - 0x138], bx
call fcn.004067a0
push str.special
lea ecx, [ebp - 0x1e8]
mov word [ebp - 0x1e8], bx
call fcn.004067a0
lea eax, [ebp - 0x138]
push ebx
lea ecx, [ebp - 0x1e8]
push eax
mov byte [ebp - 4], 0x4b
push ecx
push str.setAttribute
lea ecx, [ebp - 0x2c]
call fcn.00406870
lea edx, [ebp - 0x1e8]
mov dword [ebp - 0x30], eax
push edx
call esi
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 0x49
push eax
call esi
lea ecx, [ebp - 0x5c]
push str.bits
push ecx
lea ecx, [ebp - 0x58]
call fcn.004083f0
mov edx, dword [ebp - 0x5c]
lea ecx, [ebp - 0x1d8]
push edx
mov word [ebp - 0x1d8], bx
call fcn.004067a0
push str.bits
lea ecx, [ebp - 0x1b8]
mov word [ebp - 0x1b8], bx
call fcn.004067a0
lea eax, [ebp - 0x1d8]
push ebx
lea ecx, [ebp - 0x1b8]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4e
call fcn.00406870
lea edx, [ebp - 0x1b8]
mov dword [ebp - 0x30], eax
push edx
call esi
lea eax, [ebp - 0x1d8]
mov byte [ebp - 4], 0x4c
push eax
call esi
lea ecx, [ebp - 0x4c]
push str.type
push ecx
lea ecx, [ebp - 0x58]
call fcn.004083f0
mov edx, dword [ebp - 0x4c]
lea ecx, [ebp - 0x168]
push edx
mov word [ebp - 0x168], bx
call fcn.004067a0
push str.type
lea ecx, [ebp - 0x1a8]
mov word [ebp - 0x1a8], bx
call fcn.004067a0
lea eax, [ebp - 0x168]
push ebx
lea ecx, [ebp - 0x1a8]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x51
call fcn.00406870
lea edx, [ebp - 0x1a8]
mov dword [ebp - 0x30], eax
push edx
call esi
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x4f
push eax
call esi
push str.format
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x58]
call fcn.004083f0
mov edx, dword [ebp - 0x48]
lea ecx, [ebp - 0x90]
push edx
mov word [ebp - 0x90], bx
call fcn.004067a0
push str.format
lea ecx, [ebp - 0x188]
mov word [ebp - 0x188], bx
call fcn.004067a0
lea eax, [ebp - 0x90]
push ebx
lea ecx, [ebp - 0x188]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x54
call fcn.00406870
lea edx, [ebp - 0x188]
mov dword [ebp - 0x30], eax
push edx
call esi
lea eax, [ebp - 0x90]
push eax
call esi
mov word [ebp - 0xa8], bx
mov ecx, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x55
push ecx
lea ecx, [ebp - 0x20c]
call fcn.0046cc00
lea edx, [ebp - 0xa8]
lea ecx, [ebp - 0x94]
push edx
push eax
push str.appendChild
mov byte [ebp - 4], 0x56
call fcn.004067f0
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x20c]
push eax
mov byte [ebp - 4], 0x55
call esi
cmp dword [ebp - 0x98], ebx
jl 0x49d2b4
cmp word [ebp - 0xa8], 9
jne 0x49d2b4
cmp dword [ebp - 0xa0], ebx
je 0x49d2b4
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0xa0]
push eax
mov edx, dword [eax]
call dword [edx + 4]
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0xa8]
push ecx
call esi
mov eax, dword [ebp - 0x48]
mov ecx, dword [0x50a0e4]
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x49d2ee
mov edi, dword [0x4f9320]
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x49d2f4
mov eax, dword [ebp - 0x48]
add eax, 0xfffffff4
push eax
call fcn.004dcaa6
add esp, 4
jmp 0x49d2f4
mov edi, dword [0x4f9320]
mov eax, dword [ebp - 0x4c]
mov edx, dword [0x50a0e4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x49d31d
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x49d31d
mov edx, dword [ebp - 0x4c]
lea eax, [edx - 0xc]
push eax
call fcn.004dcaa6
add esp, 4
mov eax, dword [ebp - 0x5c]
mov edx, dword [0x50a0e4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x49d346
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x49d346
mov edx, dword [ebp - 0x5c]
lea eax, [edx - 0xc]
push eax
call fcn.004dcaa6
add esp, 4
mov eax, dword [ebp - 0x44]
mov edx, dword [0x50a0e4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x49d36f
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x49d36f
mov edx, dword [ebp - 0x44]
lea eax, [edx - 0xc]
push eax
call fcn.004dcaa6
add esp, 4
mov eax, dword [ebp - 0x50]
mov edx, dword [0x50a0e4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x49d398
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x49d398
mov edx, dword [ebp - 0x50]
lea eax, [edx - 0xc]
push eax
call fcn.004dcaa6
add esp, 4
mov eax, dword [ebp - 0x1c]
mov edx, dword [0x50a0e4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x49d3c1
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x49d3c1
mov edx, dword [ebp - 0x1c]
lea eax, [edx - 0xc]
push eax
call fcn.004dcaa6
add esp, 4
mov eax, dword [ebp - 0x20]
mov edx, dword [0x50a0e4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x49d3ea
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x49d3ea
mov edx, dword [ebp - 0x20]
lea eax, [edx - 0xc]
push eax
call fcn.004dcaa6
add esp, 4
mov eax, dword [ebp - 0x10]
mov edx, dword [0x50a0e4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x49d413
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x49d413
mov edx, dword [ebp - 0x10]
lea eax, [edx - 0xc]
push eax
call fcn.004dcaa6
add esp, 4
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x37
call fcn.004282a0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x33
call fcn.004282a0
inc dword [ebp + 8]
jmp 0x49cd3e
mov eax, dword [ebp - 0x14]
mov edi, dword [eax + 0x108]
mov eax, dword [0x50a0e0]
mov dword [ebp + 8], eax
mov ecx, dword [edi]
mov byte [ebp - 4], 0x57
cmp dword [ecx - 8], ebx
jle 0x49d45b
push edi
lea ecx, [ebp + 8]
call fcn.004022b0
mov eax, dword [ebp + 8]
cmp dword [eax - 8], ebx
jle 0x49d49e
mov ecx, dword [edi + 4]
add edi, 4
cmp ecx, ebx
je 0x49d49e
push eax
lea ecx, [ebp - 0x90]
mov word [ebp - 0x90], bx
call fcn.004067a0
lea edx, [ebp - 0x90]
push ebx
push edx
push str.Save
mov ecx, edi
mov byte [ebp - 4], 0x58
call fcn.004067f0
lea eax, [ebp - 0x90]
push eax
call esi
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x33
call fcn.004021d0
mov eax, dword [ebp - 0x7c]
cmp eax, ebx
je 0x49d4ba
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x7c], ebx
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x30
call fcn.004282a0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xf
call fcn.004282a0
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xc
call fcn.004282a0
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 9
call fcn.004282a0
mov eax, dword [ebp - 0x24]
mov ecx, dword [0x50a0e4]
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x49d51a
add eax, 0xfffffff4
push eax
call dword [0x4f9320]
test eax, eax
jg 0x49d51a
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff4
push eax
call fcn.004dcaa6
add esp, 4
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 6
call fcn.004282a0
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 0x59
call fcn.004282a0
lea ecx, [ebp - 0x80]
call fcn.004021d0
jmp case.0x49beb0.221
lea ecx, [ebp - 0x34]
call fcn.004272c0
mov edx, dword [esi + 0x10c]
xor ebx, ebx
lea ecx, [ebp - 0x38]
push ebx
push ecx
push edx
mov ecx, esi
mov dword [ebp - 4], 0x5a
call fcn.004a90d0
test eax, eax
je 0x49d648
add edi, 0xffffff21
mov word [ebp - 0x188], 3
mov dword [ebp - 0x180], edi
push str.order
lea ecx, [ebp - 0x90]
mov word [ebp - 0x90], bx
call fcn.004067a0
lea eax, [ebp - 0x188]
push ebx
lea ecx, [ebp - 0x90]
push eax
push ecx
push str.setAttribute
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x5c
call fcn.00406870
mov edi, dword [0x4f936c]
lea edx, [ebp - 0x90]
push edx
mov dword [ebp - 0x38], eax
call edi
lea eax, [ebp - 0x188]
push eax
call edi
mov eax, dword [0x50a0e0]
mov esi, dword [esi + 0x108]
mov dword [ebp + 8], eax
mov ecx, dword [esi]
mov byte [ebp - 4], 0x5d
cmp dword [ecx - 8], ebx
jle 0x49d5fd
push esi
lea ecx, [ebp + 8]
call fcn.004022b0
mov eax, dword [ebp + 8]
cmp dword [eax - 8], ebx
jle 0x49d640
mov ecx, dword [esi + 4]
add esi, 4
cmp ecx, ebx
je 0x49d640
push eax
lea ecx, [ebp - 0x90]
mov word [ebp - 0x90], bx
call fcn.004067a0
lea edx, [ebp - 0x90]
push ebx
push edx
push str.Save
mov ecx, esi
mov byte [ebp - 4], 0x5e
call fcn.004067f0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp + 8]
call fcn.004021d0
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 0xffffffff
call fcn.004282a0
jmp case.0x49beb0.221
mov eax, dword [esi + 0xcc]
push 2
push 0xffffffffffffffff
push 0x100c
mov ecx, dword [eax]
push ecx
call dword [0x4f94a0]
push eax
mov ecx, esi
call fcn.004b0bd0
jmp case.0x49beb0.221
mov eax, dword [esi + 0xc8]
push 2
push 0xffffffffffffffff
push 0x100c
mov edx, dword [eax]
push edx
call dword [0x4f94a0]
push eax
push 0x69
mov ecx, esi
call fcn.004b03f0
jmp case.0x49beb0.221
mov eax, dword [esi + 0xcc]
push 2
push 0xffffffffffffffff
push 0x100c
mov eax, dword [eax]
push eax
call dword [0x4f94a0]
cmp eax, 0xffffffff
mov dword [ebp - 0x10], eax
je case.0x49beb0.221
mov ecx, dword [0x50a0e0]
mov dword [ebp + 8], ecx
mov edx, dword [esi + 0xcc]
mov ecx, 0xa
xor eax, eax
lea edi, [ebp - 0xf8]
rep stosd dword es:[edi], eax
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0x5f
mov dword [ebp - 0x18], edx
mov dword [ebp - 0xf0], 2
call fcn.004069f0
mov edi, 0x100
lea ecx, [ebp + 8]
push edi
mov dword [ebp - 0xe0], edi
call fcn.004562d0
xor ebx, ebx
mov dword [ebp - 0xe4], eax
cmp eax, ebx
je 0x49d767
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0xf8]
push eax
mov eax, dword [edx]
push ecx
push 0x1073
push eax
call dword [0x4f94a0]
lea ecx, [edi - 1]
mov dword [ebp - 0x28], eax
cmp eax, ecx
jl 0x49d76b
add edi, edi
lea ecx, [ebp + 8]
push edi
mov dword [ebp - 0xe0], edi
call fcn.004562d0
cmp eax, ebx
mov dword [ebp - 0xe4], eax
jne 0x49d726
xor edi, edi
jmp 0x49d76e
mov edi, dword [ebp - 0x28]
push 0xffffffffffffffff
lea ecx, [ebp + 8]
call fcn.00407070
cmp edi, ebx
je 0x49d850
push ebx
push str.taskid:
lea ecx, [ebp + 8]
call fcn.004147e0
test eax, eax
jl 0x49d850
mov edx, dword [ebp + 8]
lea ecx, [ebp + 8]
mov eax, dword [edx - 8]
add eax, 0xfffffff9
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00407130
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 0x60
push ecx
call fcn.004dd24b
push 0x268
mov dword [ebp - 0x10], eax
call fcn.004dcb8f
add esp, 8
mov edx, eax
mov ecx, 0x9a
xor eax, eax
push 1
mov edi, edx
push 0x268
mov dword [ebp - 0x28], edx
push edx
mov edx, dword [ebp - 0x10]
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 0x13c]
push edx
call fcn.00494f30
mov edi, dword [ebp - 0x28]
test eax, eax
jle 0x49d816
cmp byte [edi + 0x57], 1
jne 0x49d805
mov eax, dword [ebp - 0x10]
push 2
push eax
jmp 0x49d80b
mov ecx, dword [ebp - 0x10]
push 1
push ecx
mov ecx, dword [esi + 0x13c]
call fcn.00495010
cmp edi, ebx
je 0x49d823
push edi
call fcn.004dcaa6
add esp, 4
mov eax, dword [ebp - 0x18]
mov ecx, dword [0x50a0e4]
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x49d850
add eax, 0xfffffff4
push eax
call dword [0x4f9320]
test eax, eax
jg 0x49d850
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff4
push eax
call fcn.004dcaa6
add esp, 4
mov eax, dword [ebp + 8]
mov edx, dword [0x50a0e4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je case.0x49beb0.221
add eax, 0xfffffff4
push eax
call dword [0x4f9320]
test eax, eax
jg case.0x49beb0.221
mov edx, dword [ebp + 8]
add edx, 0xfffffff4
push edx
call fcn.004dcaa6
add esp, 4
jmp case.0x49beb0.221
mov esi, dword [esi + 0x13c]
xor ebx, ebx
cmp esi, ebx
je case.0x49beb0.221
cmp edi, 0xfe
mov ecx, esi
setne al
inc eax
push eax
push ebx
call fcn.00495010
jmp case.0x49beb0.221
mov eax, dword [esi + 0xcc]
push 2
push 0xffffffffffffffff
push 0x100c
mov ecx, dword [eax]
push ecx
call dword [0x4f94a0]
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
je case.0x49beb0.221
mov edx, dword [0x50a0e0]
mov dword [ebp - 0x1c], edx
mov eax, dword [esi + 0xcc]
mov ecx, 0xa
mov dword [ebp - 0x10], eax
xor eax, eax
lea edi, [ebp - 0xf8]
mov dword [ebp - 4], 0x61
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0xf0], 2
call fcn.004069f0
mov edi, 0x100
lea ecx, [ebp - 0x1c]
push edi
mov dword [ebp - 0xe0], edi
call fcn.004562d0
xor ebx, ebx
mov dword [ebp - 0xe4], eax
cmp eax, ebx
je 0x49d971
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0xf8]
push ecx
mov ecx, dword [eax]
push edx
push 0x1073
push ecx
call dword [0x4f94a0]
lea edx, [edi - 1]
mov dword [ebp - 0x18], eax
cmp eax, edx
jl 0x49d975
add edi, edi
lea ecx, [ebp - 0x1c]
push edi
mov dword [ebp - 0xe0], edi
call fcn.004562d0
cmp eax, ebx
mov dword [ebp - 0xe4], eax
jne 0x49d930
xor edi, edi
jmp 0x49d978
mov edi, dword [ebp - 0x18]
push 0xffffffffffffffff
lea ecx, [ebp - 0x1c]
call fcn.00407070
cmp edi, ebx
je 0x49de18
push ebx
push str.taskid:
lea ecx, [ebp - 0x1c]
call fcn.004147e0
test eax, eax
jl 0x49de18
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x10]
mov eax, dword [eax - 8]
add eax, 0xfffffff9
push eax
push ecx
lea ecx, [ebp - 0x1c]
call fcn.00407130
mov edx, dword [ebp - 0x10]
mov byte [ebp - 4], 0x62
push edx
call fcn.004dd24b
push 0x268
mov dword [ebp + 8], eax
call fcn.004dcb8f
mov edx, eax
add esp, 8
mov ecx, 0x9a
xor eax, eax
mov edi, edx
push 1
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 8]
mov ecx, dword [esi + 0x13c]
push 0x268
push edx
push eax
mov dword [ebp - 0x14], edx
call fcn.00494f30
cmp eax, ebx
jle 0x49de00
mov ecx, dword [0x50a0e0]
mov dword [ebp + 8], ecx
mov edi, dword [ebp - 0x14]
mov byte [ebp - 4], 0x63
mov edx, dword [edi + 0x40]
push edx
call dword [0x4f95f8]
test eax, eax
jbe 0x49dbb3
mov ax, word [edi + 0x5c]
mov esi, dword [0x4f9640]
push eax
call esi
cmp ax, 1
jbe 0x49dbc0
mov ecx, dword [0x50a0e0]
lea esi, [edi + 0x5f]
cmp esi, ebx
mov dword [ebp - 0x24], ecx
je 0x49da7e
push esi
call dword [0x4f92f4]
mov edi, eax
cmp edi, ebx
je 0x49da7e
push edi
lea ecx, [ebp - 0x24]
call fcn.00402090
test eax, eax
je 0x49da7e
mov edx, dword [ebp - 0x24]
inc edi
push edi
push esi
push edx
call fcn.00409560
add esp, 0xc
lea ecx, [ebp - 0x24]
push 0xffffffffffffffff
call fcn.00407070
push ebx
push 0x5132e0
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x64
call fcn.004147e0
mov edi, dword [0x4f9320]
cmp eax, ebx
jle 0x49db2b
push eax
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x24]
call fcn.004072a0
mov esi, eax
mov eax, dword [esi]
mov ecx, dword [ebp + 8]
cmp ecx, eax
mov byte [ebp - 4], 0x65
je 0x49dafa
cmp dword [ecx - 0xc], ebx
jge 0x49dacf
mov edx, dword [0x50a0e4]
add ecx, 0xfffffff4
cmp ecx, edx
jne 0x49dad4
cmp dword [eax - 0xc], ebx
jge 0x49dae3
mov ecx, dword [eax - 8]
push eax
push ecx
lea ecx, [ebp + 8]
call fcn.00402200
jmp 0x49dafa
lea ecx, [ebp + 8]
call fcn.004020f0
mov esi, dword [esi]
mov dword [ebp + 8], esi
add esi, 0xfffffff4
push esi
call dword [0x4f9310]
mov eax, dword [ebp - 0xc8]
mov ecx, dword [0x50a0e4]
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x49db73
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x49db73
mov eax, dword [ebp - 0xc8]
add eax, 0xfffffff4
push eax
call fcn.004dcaa6
add esp, 4
jmp 0x49db73
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
je 0x49db73
cmp dword [ecx - 0xc], ebx
jge 0x49db47
mov edx, dword [0x50a0e4]
add ecx, 0xfffffff4
cmp ecx, edx
jne 0x49db4c
cmp dword [eax - 0xc], ebx
jge 0x49db5b
mov ecx, dword [eax - 8]
push eax
push ecx
lea ecx, [ebp + 8]
call fcn.00402200
jmp 0x49db73
lea ecx, [ebp + 8]
call fcn.004020f0
mov eax, dword [ebp - 0x24]
mov dword [ebp + 8], eax
add eax, 0xfffffff4
push eax
call dword [0x4f9310]
mov edx, dword [ebp + 8]
push 1
push ebx
push ebx
push edx
push str.explore
push ebx
call dword [0x4f93a0]
mov eax, dword [ebp - 0x24]
mov edx, dword [0x50a0e4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x49dbb0
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x49dbb0
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff4
push edx
call fcn.004dcaa6
add esp, 4
mov edi, dword [ebp - 0x14]
lea ecx, [ebp + 8]
call fcn.004021d0
jmp 0x49de03
mov ax, word [edi + 0x5c]
push eax
call esi
cmp ax, 1
jne 0x49dbb3
mov ecx, dword [0x50a0e0]
lea esi, [edi + 0x5f]
cmp esi, ebx
mov dword [ebp - 0x24], ecx
je 0x49dc13
push esi
call dword [0x4f92f4]
mov edi, eax
cmp edi, ebx
je 0x49dc10
push edi
lea ecx, [ebp - 0x24]
call fcn.00402090
test eax, eax
je 0x49dc10
mov edx, dword [ebp - 0x24]
inc edi
push edi
push esi
push edx
call fcn.00409560
add esp, 0xc
lea ecx, [ebp - 0x24]
push 0xffffffffffffffff
call fcn.00407070
mov edi, dword [ebp - 0x14]
push ebx
push 0x5132e0
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x66
call fcn.004147e0
cmp eax, ebx
jle 0x49dcc6
push eax
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x24]
call fcn.004072a0
mov esi, eax
mov eax, dword [esi]
mov ecx, dword [ebp + 8]
cmp ecx, eax
mov byte [ebp - 4], 0x67
je 0x49dc89
cmp dword [ecx - 0xc], ebx
jge 0x49dc5e
mov edx, dword [0x50a0e4]
add ecx, 0xfffffff4
cmp ecx, edx
jne 0x49dc63
cmp dword [eax - 0xc], ebx
jge 0x49dc72
mov ecx, dword [eax - 8]
push eax
push ecx
lea ecx, [ebp + 8]
call fcn.00402200
jmp 0x49dc89
lea ecx, [ebp + 8]
call fcn.004020f0
mov esi, dword [esi]
mov dword [ebp + 8], esi
add esi, 0xfffffff4
push esi
call dword [0x4f9310]
mov eax, dword [ebp - 0xcc]
mov ecx, dword [0x50a0e4]
mov byte [ebp - 4], 0x66
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x49dd25
add eax, 0xfffffff4
push eax
call dword [0x4f9320]
test eax, eax
jg 0x49dd25
mov eax, dword [ebp - 0xcc]
add eax, 0xfffffff4
push eax
call fcn.004dcaa6
add esp, 4
jmp 0x49dd25
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x24]
cmp eax, ecx
je 0x49dd25
cmp dword [eax - 0xc], ebx
jge 0x49dce2
mov ecx, dword [0x50a0e4]
add eax, 0xfffffff4
cmp eax, ecx
jne 0x49dcee
lea ecx, [ebp - 0x24]
call fcn.004953a0
cmp dword [eax], ebx
jge 0x49dd08
mov ecx, dword [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x24]
call fcn.004953a0
mov edx, dword [eax + 4]
lea ecx, [ebp + 8]
push edx
call fcn.00402200
jmp 0x49dd25
lea ecx, [ebp + 8]
call fcn.004020f0
mov eax, dword [ebp - 0x24]
lea ecx, [ebp + 8]
mov dword [ebp + 8], eax
call fcn.004953a0
push eax
call dword [0x4f9310]
lea ecx, [ebp + 8]
push ecx
lea ecx, [ebp - 0x20]
call fcn.0040b9c0
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x68
call fcn.004069f0
lea edx, [ebp - 0x20]
lea ecx, [ebp + 8]
push edx
call fcn.004022b0
lea ecx, [ebp + 8]
call fcn.004069a0
test eax, eax
jle 0x49dde6
lea ecx, [ebp - 0x20]
call fcn.004069f0
mov eax, dword [edi + 0x34]
mov ecx, dword [edi + 0x3c]
cmp eax, ecx
jne 0x49ddb4
mov eax, dword [edi + 0x40]
mov ecx, dword [edi + 0x38]
cmp ecx, eax
jne 0x49ddb4
cmp eax, ebx
je 0x49ddb4
lea ecx, [ebp + 8]
call fcn.004069a0
push eax
lea ecx, [ebp + 8]
call fcn.00406fc0
push eax
call dword [0x4f92e4]
cmp eax, 0xffffffff
jne 0x49dda5
mov ecx, dword [ebp + 8]
lea edx, [ebp - 0x20]
push ecx
push str._select___s._mv
push edx
jmp 0x49ddc1
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x20]
push eax
push str._select___s
push ecx
jmp 0x49ddc1
mov edx, dword [ebp + 8]
lea eax, [ebp - 0x20]
push edx
push str._select___s._mv
push eax
call fcn.004073f0
add esp, 0xc
lea ecx, [ebp - 0x20]
push 5
push ebx
call fcn.00472980
push eax
push str.Explorer.exe
push str.open
push ebx
call dword [0x4f93a0]
lea ecx, [ebp - 0x20]
call fcn.004021d0
lea ecx, [ebp - 0x24]
call fcn.004021d0
lea ecx, [ebp + 8]
call fcn.004021d0
jmp 0x49de03
mov edi, dword [ebp - 0x14]
cmp edi, ebx
je 0x49de10
push edi
call fcn.004dcaa6
add esp, 4
lea ecx, [ebp - 0x10]
call fcn.004021d0
lea ecx, [ebp - 0x1c]
call fcn.004021d0
jmp case.0x49beb0.221
mov ecx, dword [esi + 0xcc]
push 2
push 0xffffffffffffffff
call fcn.004bb070
xor ebx, ebx
cmp eax, ebx
jge 0x49de41
xor eax, eax
jmp 0x49f424
push 0x104
lea ecx, [ebp - 0x414]
push ebx
push ecx
call fcn.00406700
push 0x104
lea edx, [ebp - 0x61c]
push ebx
push edx
call fcn.00406700
lea eax, [ebp - 0x414]
push 0x104
push eax
push 0x9d01
call fcn.00432d40
lea ecx, [ebp - 0x61c]
push 0x104
push ecx
push 0xa77f
call fcn.00432d40
mov ecx, dword [esi + 8]
add esp, 0x30
lea edx, [ebp - 0x414]
lea eax, [ebp - 0x61c]
push 0x121
push edx
push eax
push ecx
call dword [0x4f943c]
cmp eax, 2
jne 0x49debd
xor eax, eax
jmp 0x49f424
lea ecx, [esi + 0x144]
call fcn.004bbcf0
mov edi, dword [esi + 0x140]
push 2
inc edi
push 0xffffffffffffffff
mov dword [esi + 0x140], edi
mov ecx, dword [esi + 0xcc]
call fcn.004bb070
mov edi, eax
cmp edi, 0xffffffff
mov dword [ebp - 0x18], edi
je 0x49e155
lea ecx, [ebp - 0x1c]
call fcn.004069e0
mov ecx, dword [esi + 0xcc]
lea edx, [ebp - 0x1c]
push edx
push 2
push edi
mov dword [ebp - 4], 0x69
call fcn.004724f0
test eax, eax
je 0x49e12a
push str.taskid:
lea ecx, [ebp - 0x1c]
call fcn.0049f6c0
test eax, eax
jl 0x49e12a
lea ecx, [ebp - 0x1c]
call fcn.004069a0
sub eax, 7
lea ecx, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.00407130
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x6a
call fcn.00472980
push eax
call fcn.004dd24b
push 0x268
mov dword [ebp - 0x28], eax
call fcn.004dcb8f
mov ecx, dword [ebp - 0x28]
add esp, 8
mov dword [ebp - 0x14], eax
push ebx
push 0x268
push eax
push ecx
mov ecx, dword [esi + 0x13c]
call fcn.00494f30
cmp eax, ebx
jle 0x49e065
cmp dword [esi + 0x14], ebx
je 0x49dfd1
mov edx, dword [ebp - 0x14]
mov ecx, 0xa
xor eax, eax
lea edi, [ebp - 0xf7]
mov byte [ebp - 0xf8], bl
push 0x28
rep stosd dword es:[edi], eax
lea eax, [ebp - 0xf8]
push edx
push eax
call fcn.004dd050
mov ecx, dword [esi + 0x14]
add esp, 0xc
lea eax, [ebp - 0xf8]
mov edx, dword [ecx]
push ebx
push eax
push 0x52c
call dword [edx]
mov edi, dword [ebp - 0x18]
lea ecx, [ebp - 0x40]
call fcn.0049f700
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 0x6b
mov al, byte [ecx + 0x5a]
cmp al, 3
je 0x49dff2
cmp al, 1
mov dword [ebp - 0x40], 2
jne 0x49dff9
mov dword [ebp - 0x40], 1
mov edx, dword [ebp - 0x14]
lea ecx, [ebp - 0x10]
add edx, 0x5f
push edx
call fcn.0040ae80
push 0x7c
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x6c
call fcn.0049f5d0
push eax
lea eax, [ebp - 0x1ec]
push eax
lea ecx, [ebp - 0x10]
call fcn.004072a0
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x6d
call fcn.004022b0
lea ecx, [ebp - 0x1ec]
mov byte [ebp - 4], 0x6c
call fcn.004021d0
lea ecx, [ebp - 0x40]
push ecx
lea ecx, [esi + 0x144]
call fcn.004bbb50
lea ecx, [ebp - 0x10]
call fcn.004021d0
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x6a
call fcn.004a0d90
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x49e077
mov edx, eax
push edx
call fcn.004dcaa6
add esp, 4
mov ecx, dword [esi + 0xcc]
push edi
call fcn.004bb090
mov ecx, dword [esi + 0xcc]
call fcn.004bafe0
cmp edi, eax
mov dword [ebp - 0x18], eax
jge 0x49e0f5
lea ecx, [ebp - 0x20]
call fcn.004069e0
mov ecx, dword [esi + 0xcc]
lea eax, [ebp - 0x20]
push eax
push 2
push edi
mov byte [ebp - 4], 0x6e
call fcn.004724f0
push str.tindex:
lea ecx, [ebp - 0x20]
call fcn.0049f6c0
test eax, eax
jl 0x49e0e9
mov ecx, dword [esi + 0xcc]
push edi
call fcn.004bb090
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x6a
call fcn.004021d0
mov eax, dword [ebp - 0x18]
dec eax
cmp edi, eax
mov dword [ebp - 0x18], eax
jl 0x49e095
jmp 0x49e0f5
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x6a
call fcn.004021d0
mov edi, dword [ebp - 0x28]
mov eax, dword [esi + 0x154]
cmp edi, eax
jne 0x49e114
mov ecx, dword [esi + 0x14]
cmp ecx, ebx
je 0x49e114
mov edx, dword [ecx]
push ebx
push edi
push 0x582
call dword [edx]
mov ecx, dword [esi + 0x13c]
push 3
push edi
call fcn.00495010
lea ecx, [ebp - 0x48]
call fcn.004021d0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0xffffffff
call fcn.004021d0
cmp dword [esi + 0x140], 1
jle 0x49dec8
mov dword [esi + 0x140], 5
jmp 0x49dec8
lea ecx, [esi + 0x144]
call fcn.004288e0
test eax, eax
jbe case.0x49beb0.221
cmp dword [ebp + 8], 0xea
jne case.0x49beb0.221
push esi
push ebx
push 0x4b80a0
call fcn.004ddc20
add esp, 0xc
jmp case.0x49beb0.221
mov ecx, dword [esi + 0xcc]
push 2
push 0xffffffffffffffff
call fcn.004bb070
mov edi, eax
cmp edi, 0xffffffff
je case.0x49beb0.221
lea ecx, [ebp - 0x1c]
call fcn.004069e0
mov ecx, dword [esi + 0xcc]
lea eax, [ebp - 0x1c]
push eax
push 2
push edi
mov dword [ebp - 4], 0x6f
call fcn.004724f0
test eax, eax
je 0x49e5fe
push str.taskid:
lea ecx, [ebp - 0x1c]
call fcn.0049f6c0
test eax, eax
jl 0x49e5fe
lea ecx, [ebp - 0x1c]
call fcn.004069a0
sub eax, 7
lea ecx, [ebp - 0x4c]
push eax
push ecx
lea ecx, [ebp - 0x1c]
call fcn.00407130
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x70
call fcn.00472980
push eax
call fcn.004dd24b
mov ebx, eax
push 0x268
mov dword [ebp - 0x28], ebx
call fcn.004dcb8f
add esp, 8
mov edx, eax
mov ecx, 0x9a
xor eax, eax
mov edi, edx
push 1
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 0x13c]
push 0x268
push edx
push ebx
mov dword [ebp + 8], edx
call fcn.00494f30
xor ebx, ebx
cmp eax, ebx
jle 0x49e5e6
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x10]
lea eax, [edx + 0x5f]
push eax
call fcn.0040ae80
push 0x7c
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x71
call fcn.0049f5d0
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
call fcn.004072a0
push 0x104
lea ecx, [ebp - 0x61c]
push ebx
push ecx
mov byte [ebp - 4], 0x72
call fcn.00406700
lea edx, [ebp - 0x61c]
push 0x104
push edx
push 0x9d9f
call fcn.00432d40
push 0x104
lea eax, [ebp - 0x414]
push ebx
push eax
call fcn.00406700
lea ecx, [ebp - 0x414]
push 0x104
push ecx
push 0x9d95
call fcn.00432d40
push 0x208
lea edx, [ebp - 0xa2c]
push ebx
push edx
call fcn.00406700
add esp, 0x3c
lea ecx, [ebp - 0x20]
push 0x5c
call fcn.0044c330
lea ecx, [ebp - 0x20]
mov edi, eax
call fcn.004069a0
sub eax, edi
lea ecx, [ebp - 0x20]
dec eax
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00407130
mov edi, dword [ebp + 8]
mov byte [ebp - 4], 0x73
mov al, byte [edi + 0x5a]
cmp al, 3
je 0x49e362
cmp al, 1
je 0x49e362
lea ecx, [ebp - 0x14]
call fcn.00472980
lea ecx, [ebp - 0xa2c]
push eax
push ecx
call fcn.004dd8bf
lea edx, [ebp - 0x414]
push 0x104
push edx
push 0x9d95
call fcn.00432d40
lea eax, [ebp - 0x414]
push eax
call fcn.004dd4cc
lea eax, [ebp + eax*2 - 0x412]
push str..torrent
push eax
call fcn.004dd895
add esp, 0x20
jmp 0x49e3d5
push 0x2e
lea ecx, [ebp - 0x14]
call fcn.0044c330
lea ecx, [ebp - 0x18]
push eax
push ecx
lea ecx, [ebp - 0x14]
call fcn.004072a0
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x74
call fcn.00472980
lea edx, [ebp - 0xa2c]
push eax
push edx
call fcn.004dd8bf
lea eax, [ebp - 0x414]
push 0x104
push eax
push 0xa78c
call fcn.00432d40
lea ecx, [ebp - 0x414]
push ecx
call fcn.004dd4cc
lea eax, [ebp + eax*2 - 0x412]
push str..qsed
push eax
call fcn.004dd895
add esp, 0x20
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x73
call fcn.004021d0
push 0x81800
lea edx, [ebp - 0xa2c]
push 0x208
lea eax, [ebp - 0x414]
push edx
mov edx, dword [esi + 8]
lea ecx, [ebp - 0x61c]
push eax
push ecx
push edx
call fcn.004a7c70
add esp, 0x18
cmp eax, ebx
jle 0x49e5cc
cmp dword [esi + 0x13c], ebx
je 0x49e5cc
mov al, byte [edi + 0x5a]
cmp al, 3
je 0x49e466
cmp al, 1
je 0x49e466
lea eax, [ebp - 0xa2c]
push 0x50cc3c
push eax
call fcn.0049f540
add esp, 8
test eax, eax
jne 0x49e44b
lea ecx, [ebp - 0xa2c]
push 0x50cc3c
push ecx
call fcn.004dd895
add esp, 8
mov eax, dword [ebp - 0x28]
mov ecx, dword [esi + 0x13c]
lea edx, [ebp - 0xa2c]
push edx
push eax
call fcn.00495040
jmp 0x49e5cc
lea ecx, [ebp - 0xa2c]
push 0x511540
push ecx
call fcn.0049f540
add esp, 8
cmp eax, ebx
jne 0x49e492
lea edx, [ebp - 0xa2c]
push 0x511540
push edx
call fcn.004dd895
add esp, 8
lea ecx, [ebp - 0x14]
call fcn.00472980
cmp eax, ebx
mov dword [ebp - 0x18], eax
jne 0x49e4a6
mov dword [ebp - 0x18], ebx
jmp 0x49e4cd
push eax
call dword [0x4f9318]
lea edi, [eax + eax + 2]
mov eax, edi
add eax, 3
and al, 0xfc
call fcn.004dd3c0
mov ecx, dword [ebp - 0x18]
mov eax, esp
push edi
push ecx
push eax
call fcn.00406770
mov dword [ebp - 0x18], eax
mov edx, dword [ebp + 8]
mov edi, dword [0x4f95f8]
mov eax, dword [edx + 0x34]
push eax
call edi
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x38], eax
mov edx, dword [ecx + 0x38]
push edx
call edi
mov edi, eax
mov eax, dword [ebp - 0x38]
push 1
push ebx
push ebx
push eax
call fcn.004dde60
add eax, edi
mov ecx, 0xa
mov dword [ebp - 0x38], eax
mov eax, 0
lea edi, [ebp - 0xf8]
push 0x28
adc edx, eax
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0xf8]
push edi
push ecx
mov dword [ebp - 0x34], edx
call fcn.004dd050
add edi, 0x5f
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
add edi, 0x230
push edi
call fcn.004dcb8f
mov edx, eax
mov ecx, edi
mov dword [ebp - 0x28], edx
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
mov edx, dword [ebp - 0x34]
and ecx, 3
add esp, 0x10
rep stosb byte es:[edi], al
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0xf8]
push eax
mov eax, dword [ebp - 0x38]
push ecx
mov ecx, dword [ebp - 0x28]
push edx
push eax
push str.qvod:___I64d_s_s_r_n
push ecx
call fcn.004dd90b
mov edx, dword [ebp - 0x28]
add esp, 0x18
lea ecx, [ebp - 0x48]
push edx
call fcn.0040ae80
push ecx
lea eax, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
mov byte [ebp - 4], 0x75
call fcn.0040b9c0
mov byte [ebp - 4], 0x76
push ecx
lea edx, [ebp - 0xa2c]
mov ecx, esp
mov dword [ebp - 0x28], esp
push edx
call fcn.00406b10
mov ecx, esi
mov byte [ebp - 4], 0x75
call fcn.004ba4d0
lea ecx, [ebp - 0x48]
call fcn.004021d0
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x14]
call fcn.004021d0
lea ecx, [ebp - 0x20]
call fcn.004021d0
lea ecx, [ebp - 0x10]
call fcn.004021d0
jmp 0x49e5e9
mov edi, dword [ebp + 8]
cmp edi, ebx
je 0x49e5f6
push edi
call fcn.004dcaa6
add esp, 4
lea ecx, [ebp - 0x4c]
call fcn.004021d0
lea ecx, [ebp - 0x1c]
call fcn.004021d0
jmp case.0x49beb0.221
mov ecx, dword [esi + 0xcc]
push 2
push 0xffffffffffffffff
call fcn.004bb070
mov edi, eax
cmp edi, 0xffffffff
je case.0x49beb0.221
lea ecx, [ebp + 8]
call fcn.004069e0
mov ecx, dword [esi + 0xcc]
lea eax, [ebp + 8]
push eax
push 2
push edi
mov dword [ebp - 4], 0x77
call fcn.004724f0
test eax, eax
je 0x49e710
push str.taskid:
lea ecx, [ebp + 8]
call fcn.0049f6c0
test eax, eax
jl 0x49e710
lea ecx, [ebp + 8]
call fcn.004069a0
sub eax, 7
lea ecx, [ebp - 0x10]
push eax
push ecx
lea ecx, [ebp + 8]
call fcn.00407130
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x78
call fcn.00472980
push eax
call fcn.004dd24b
push 0x268
mov ebx, eax
call fcn.004dcb8f
add esp, 8
mov edx, eax
mov ecx, 0x9a
xor eax, eax
mov edi, edx
push 1
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 0x13c]
push 0x268
push edx
push ebx
mov dword [ebp - 0x18], edx
call fcn.00494f30
test eax, eax
jle 0x49e708
mov edx, dword [ebp - 0x18]
xor ebx, ebx
mov ecx, 0xa
xor eax, eax
lea edi, [ebp - 0xf7]
mov byte [ebp - 0xf8], bl
rep stosd dword es:[edi], eax
push 0x28
lea eax, [ebp - 0xf8]
push edx
push eax
call fcn.004dd050
mov ecx, dword [esi + 0x14]
add esp, 0xc
cmp ecx, ebx
je 0x49e708
mov edx, dword [ecx]
lea eax, [ebp - 0xf8]
push ebx
push eax
push 0x52b
call dword [edx]
lea ecx, [ebp - 0x10]
call fcn.004021d0
lea ecx, [ebp + 8]
call fcn.004021d0
jmp case.0x49beb0.221
mov ecx, dword [esi + 0xcc]
push 2
push 0xffffffffffffffff
call fcn.004bb070
mov edi, eax
cmp edi, 0xffffffff
je case.0x49beb0.221
lea ecx, [ebp + 8]
call fcn.004069e0
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0x79
push ecx
mov ecx, dword [esi + 0xcc]
push 2
push edi
call fcn.004724f0
test eax, eax
je 0x49e7b6
push str.taskid:
lea ecx, [ebp + 8]
call fcn.0049f6c0
test eax, eax
jl 0x49e7b6
lea ecx, [ebp + 8]
call fcn.004069a0
sub eax, 7
lea edx, [ebp - 0x10]
push eax
push edx
lea ecx, [ebp + 8]
call fcn.00407130
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x7a
call fcn.00472980
push eax
call fcn.004dd24b
mov ecx, dword [esi + 0x14]
xor ebx, ebx
add esp, 4
cmp ecx, ebx
je 0x49e7ae
mov edx, dword [ecx]
push ebx
push eax
push 0x51c
call dword [edx]
lea ecx, [ebp - 0x10]
call fcn.004021d0
lea ecx, [ebp + 8]
call fcn.004021d0
jmp case.0x49beb0.221
mov ecx, dword [esi + 0xd4]
push 2
push 0xffffffffffffffff
call fcn.004bb070
mov edi, eax
cmp edi, 0xffffffff
je case.0x49beb0.221
lea ecx, [ebp + 8]
call fcn.004069e0
mov ecx, dword [esi + 0xd4]
lea eax, [ebp + 8]
push eax
push 1
push edi
mov dword [ebp - 4], 0x7b
call fcn.004724f0
test eax, eax
je 0x49e8e2
lea ecx, [ebp + 8]
call fcn.004069a0
test eax, eax
jle 0x49e8e2
lea ecx, [ebp - 0x38]
call fcn.004673c0
xor ebx, ebx
lea ecx, [ebp - 0x38]
push ebx
push ecx
push ecx
lea edx, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push edx
mov byte [ebp - 4], 0x7c
call fcn.0040b9c0
mov ecx, esi
call fcn.004a9c50
cmp eax, ebx
je 0x49e8d6
lea ecx, [ebp + 8]
call fcn.004069f0
lea eax, [ebp - 0xc4]
push str.link
push eax
lea ecx, [ebp - 0x38]
call fcn.004083f0
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x7d
call fcn.004022b0
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x7c
call fcn.004021d0
lea ecx, [ebp + 8]
call fcn.004069a0
test eax, eax
jle 0x49e8d6
lea ecx, [ebp - 0x14]
call fcn.004069e0
mov ecx, dword [ebp + 8]
lea edx, [ebp - 0x14]
push ecx
push str.http:__channel.qvod.com__s
push edx
mov byte [ebp - 4], 0x7e
call fcn.004073f0
mov eax, dword [esi + 0x14]
add esp, 0xc
lea ecx, [ebp - 0x14]
mov edi, dword [eax]
push ebx
call fcn.004069a0
push eax
lea ecx, [ebp - 0x14]
call fcn.00406fc0
mov ecx, dword [esi + 0x14]
push eax
push 0x531
call dword [edi]
lea ecx, [ebp - 0x14]
call fcn.004021d0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x7b
call fcn.004095c0
lea ecx, [ebp + 8]
call fcn.004021d0
jmp case.0x49beb0.221
mov ecx, dword [esi + 0xd8]
push 2
push 0xffffffffffffffff
call fcn.004bb070
mov edi, eax
cmp edi, 0xffffffff
je case.0x49beb0.221
lea ecx, [ebp - 0x1c]
call fcn.004069e0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], 0x7f
push ecx
mov ecx, dword [esi + 0xd8]
push 1
push edi
call fcn.004724f0
test eax, eax
je 0x49e986
lea ecx, [ebp - 0x1c]
call fcn.004069a0
test eax, eax
jle 0x49e986
lea ecx, [ebp + 8]
call fcn.004069e0
mov edx, dword [ebp - 0x1c]
lea eax, [ebp + 8]
push edx
push str.http:__channel.qvod.com__s
push eax
mov byte [ebp - 4], 0x80
call fcn.004073f0
mov ecx, dword [esi + 0x14]
add esp, 0xc
mov edi, dword [ecx]
push 0
lea ecx, [ebp + 8]
call fcn.004069a0
push eax
lea ecx, [ebp + 8]
call fcn.00406fc0
mov ecx, dword [esi + 0x14]
push eax
push 0x531
call dword [edi]
lea ecx, [ebp + 8]
call fcn.004021d0
lea ecx, [ebp - 0x1c]
call fcn.004021d0
jmp case.0x49beb0.221
mov ecx, dword [esi + 0xd8]
push 2
push 0xffffffffffffffff
call fcn.004bb070
mov edi, eax
cmp edi, 0xffffffff
je case.0x49beb0.221
lea ecx, [ebp + 8]
call fcn.004069e0
mov ecx, dword [esi + 0xd8]
lea edx, [ebp + 8]
push edx
push 2
push edi
mov dword [ebp - 4], 0x81
call fcn.004724f0
test eax, eax
je 0x49ea0d
lea ecx, [ebp + 8]
call fcn.004069a0
test eax, eax
jle 0x49ea0d
mov eax, dword [esi + 0x14]
xor ebx, ebx
cmp eax, ebx
je 0x49ea0d
mov dword [0x522310], ebx
mov dword [0x52230c], ebx
mov eax, dword [esi + 0x14]
lea ecx, [ebp + 8]
mov edi, dword [eax]
call fcn.00472980
mov ecx, dword [esi + 0x14]
push eax
push 0x31
push 0x574
call dword [edi]
lea ecx, [ebp + 8]
call fcn.004021d0
jmp case.0x49beb0.221
mov ecx, dword [esi + 0xd4]
push 2
push 0xffffffffffffffff
call fcn.004bb070
mov edi, eax
cmp edi, 0xffffffff
je case.0x49beb0.221
mov eax, dword [esi + 0xdc]
xor ebx, ebx
cmp eax, ebx
jne case.0x49beb0.221
lea ecx, [ebp + 8]
call fcn.004069e0
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0x82
push ecx
mov ecx, dword [esi + 0xd4]
push 1
push edi
call fcn.004724f0
test eax, eax
je 0x49eb82
lea ecx, [ebp + 8]
call fcn.004069a0
test eax, eax
jg 0x49ea88
lea ecx, [ebp + 8]
call fcn.004021d0
xor eax, eax
jmp 0x49f424
lea ecx, [ebp - 0x40]
call fcn.004673c0
lea edx, [ebp - 0x40]
push 1
push edx
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
mov byte [ebp - 4], 0x83
call fcn.0040b9c0
mov ecx, esi
call fcn.004a9c50
cmp eax, ebx
je 0x49eb76
mov ecx, dword [esi + 0xd4]
push edi
call fcn.004bb090
mov ecx, dword [esi + 0xd0]
push ebx
call fcn.00402b80
mov ecx, dword [esi + 0xd4]
call fcn.004bafe0
mov ecx, dword [esi + 0xd8]
mov edi, eax
call fcn.004bb0b0
cmp edi, ebx
jle 0x49eb76
mov ecx, dword [esi + 0xd4]
push ebx
call fcn.004727f0
lea ecx, [ebp - 0x14]
call fcn.004069e0
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x84
push ecx
mov ecx, dword [esi + 0xd4]
push 1
push ebx
call fcn.004724f0
lea ecx, [ebp - 0x14]
call fcn.004069a0
test eax, eax
jle 0x49eb6e
lea ecx, [ebp - 0x38]
mov dword [esi + 0xe4], ebx
call fcn.004673c0
lea edx, [ebp - 0x38]
push ebx
push edx
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
mov byte [ebp - 4], 0x85
call fcn.0040b9c0
mov ecx, esi
call fcn.004a9c50
cmp eax, ebx
je 0x49eb62
lea ecx, [ebp - 0x38]
push ecx
mov ecx, esi
call fcn.004a9880
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x84
call fcn.004095c0
lea ecx, [ebp - 0x14]
call fcn.004021d0
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x82
call fcn.004095c0
lea ecx, [ebp + 8]
call fcn.004021d0
jmp case.0x49beb0.221
mov ecx, esi
call fcn.004b6fa0
jmp case.0x49beb0.221
lea ecx, [ebp + 8]
call fcn.004069e0
mov ecx, dword [esi + 0xc8]
push 2
push 0xffffffffffffffff
mov dword [ebp - 4], 0x86
call fcn.004bb070
mov ecx, dword [esi + 0xc8]
lea edx, [ebp + 8]
push edx
push 3
push eax
call fcn.004724f0
lea eax, [ebp - 0x28]
push 4
push eax
lea ecx, [ebp + 8]
call fcn.004072a0
mov ecx, dword [str.ftp:httprtspmms:]
mov byte [ebp - 4], 0x87
push ecx
lea ecx, [ebp - 0x18]
call fcn.00406b10
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x88
call fcn.00472980
push eax
lea ecx, [ebp - 0x18]
call fcn.0049f6c0
test eax, eax
jge 0x49ec4d
lea ecx, [ebp - 0x10]
call fcn.004069e0
mov edx, dword [ebp + 8]
lea eax, [ebp - 0x10]
push edx
push str._select___s
push eax
mov byte [ebp - 4], 0x89
call fcn.004073f0
add esp, 0xc
xor ebx, ebx
lea ecx, [ebp - 0x10]
push 5
push ebx
call fcn.00472980
push eax
push str.Explorer.exe
push str.open
push ebx
call dword [0x4f93a0]
lea ecx, [ebp - 0x10]
call fcn.004021d0
lea ecx, [ebp - 0x18]
call fcn.004021d0
lea ecx, [ebp - 0x28]
call fcn.004021d0
lea ecx, [ebp + 8]
call fcn.004021d0
jmp case.0x49beb0.221
mov ecx, esi
call fcn.004b7560
jmp case.0x49beb0.221
mov ecx, esi
call fcn.004b75b0
jmp case.0x49beb0.221
push 0xfc
mov ecx, esi
call fcn.004b2fe0
jmp case.0x49beb0.221
push 0x100
mov ecx, esi
call fcn.004b2fe0
jmp case.0x49beb0.221
push 0x101
mov ecx, esi
call fcn.004b3eb0
jmp case.0x49beb0.221
push edi
mov ecx, esi
call fcn.004b9460
jmp case.0x49beb0.221
mov ecx, dword [esi + 0xc8]
push 2
push 0xffffffffffffffff
call fcn.004bb070
mov edi, eax
xor ebx, ebx
cmp edi, ebx
jl case.0x49beb0.221
push 0x104
lea ecx, [ebp - 0x61c]
push ebx
push ecx
call fcn.00406700
lea edx, [ebp - 0x61c]
push 0x104
push edx
push 0x9f55
call fcn.00432d40
push 0x104
lea eax, [ebp - 0x414]
push ebx
push eax
call fcn.00406700
lea ecx, [ebp - 0x414]
push 0x104
push ecx
push 0x9f56
call fcn.00432d40
lea edx, [ebp - 0x414]
push edx
call fcn.004dd4cc
mov ecx, dword [str..lrc]
lea eax, [ebp + eax*2 - 0x412]
push ecx
push eax
call fcn.004dd895
push 0x208
lea edx, [ebp - 0xa2c]
push ebx
push edx
call fcn.00406700
add esp, 0x48
lea eax, [ebp - 0xa2c]
lea ecx, [ebp - 0x414]
lea edx, [ebp - 0x61c]
push 0x81800
push 0x208
push eax
mov eax, dword [esi + 8]
push ecx
push edx
push eax
call fcn.004a7bf0
add esp, 0x18
cmp eax, ebx
jle case.0x49beb0.221
lea ecx, [ebp - 0x40]
call fcn.004673c0
mov edx, dword [esi + 0x10c]
lea ecx, [ebp - 0x40]
push ebx
push ecx
push edx
mov ecx, esi
mov dword [ebp - 4], 0x8a
call fcn.004a90d0
test eax, eax
je 0x49ee07
lea ecx, [ebp - 0x38]
call fcn.004673c0
lea eax, [ebp - 0x38]
lea ecx, [ebp - 0x40]
push eax
push ecx
push edi
mov ecx, esi
mov byte [ebp - 4], 0x8b
call fcn.004a9490
test eax, eax
je 0x49edfb
lea edx, [ebp - 0xa2c]
lea ecx, [ebp - 0x38]
push edx
push 0x516b38
call fcn.00408090
mov ecx, dword [esi + 0x108]
push ebx
call fcn.00402b80
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x8a
call fcn.004095c0
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0xffffffff
call fcn.004095c0
jmp case.0x49beb0.221
mov ecx, dword [esi + 0xc8]
push 2
push 0xffffffffffffffff
call fcn.004bb070
mov edi, eax
xor ebx, ebx
cmp edi, ebx
jl case.0x49beb0.221
lea ecx, [ebp - 0x40]
call fcn.004673c0
mov ecx, dword [esi + 0x10c]
lea eax, [ebp - 0x40]
push ebx
push eax
push ecx
mov ecx, esi
mov dword [ebp - 4], 0x8c
call fcn.004a90d0
test eax, eax
je 0x49eea6
lea ecx, [ebp - 0x38]
call fcn.004673c0
lea edx, [ebp - 0x38]
lea eax, [ebp - 0x40]
push edx
push eax
push edi
mov ecx, esi
mov byte [ebp - 4], 0x8d
call fcn.004a9490
test eax, eax
je 0x49ee9a
push 0x51d42c
push 0x516b38
lea ecx, [ebp - 0x38]
call fcn.00408090
mov ecx, dword [esi + 0x108]
push ebx
call fcn.00402b80
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x8c
call fcn.004095c0
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0xffffffff
call fcn.004095c0
jmp case.0x49beb0.221
mov ecx, dword [esi + 0xc8]
push 2
push 0xffffffffffffffff
call fcn.004bb070
mov edi, eax
xor ebx, ebx
cmp edi, ebx
jl case.0x49beb0.221
lea ecx, [ebp - 0x40]
call fcn.004673c0
mov edx, dword [esi + 0x10c]
lea ecx, [ebp - 0x40]
push ebx
push ecx
push edx
mov ecx, esi
mov dword [ebp - 4], 0x8e
call fcn.004a90d0
test eax, eax
je 0x49f049
lea ecx, [ebp - 0x38]
call fcn.004673c0
lea eax, [ebp - 0x38]
lea ecx, [ebp - 0x40]
push eax
push ecx
push edi
mov ecx, esi
mov byte [ebp - 4], 0x8f
call fcn.004a9490
test eax, eax
je 0x49f03d
lea edx, [ebp + 8]
push 0x50b4d8
push edx
lea ecx, [ebp - 0x38]
call fcn.004083f0
push 0x5c
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x90
call fcn.0044c330
lea ecx, [ebp + 8]
mov edi, eax
call fcn.004069a0
sub eax, edi
lea ecx, [ebp + 8]
dec eax
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00407130
push 0x2e
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x91
call fcn.0044c330
lea ecx, [ebp - 0x1c]
mov edi, eax
call fcn.004069a0
sub eax, edi
lea ecx, [ebp - 0x14]
push eax
push ecx
lea ecx, [ebp - 0x1c]
call fcn.00407130
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x92
call fcn.0049f610
mov edx, dword [str..qmv_.m4v_.f4v_.tim_.swf_.csf_.scm_.ts_.tp_.mkv_.dat_.vob_.qt_.ram_.wav_.wmv_.asf_.rm_.rmvb_.mov_.avi_.mpg_.mpeg_.mpe_.3gp_.mp2_.mp4_.flv_._mv_.wm_.rp_.rpm_.rt_.rsc_.3gp2_.3gpp_.acc_.aif_.aifc_.aiff_.asx_.bik_.flc_.roq_.d2v_.dsa_.dss_.dsv_.m1v_.m2p_.m2v_.m4b_.mkv_.mod_.ogm_.pmp_.pm2_.pss_.m4p_.mv_.m2ts_.evo_.3g2_.wmp_.wm_.ivf_.rmm_.mjp_.pva_.rat_.dvd_.smk_.tpr_.vg2_.vid_.vp6_.vp7_.amv_.fli_.pmp2_.mts_.drc]
lea ecx, [ebp - 0x18]
push edx
call fcn.00406b10
mov eax, dword [str..smv_.spx_.au_.flac_.ra_.amr_.m4a_.mpga_.mp5_.dsm_.mpa_.mac_.dts_.mpga_.wma_.mp3_.midi_.ac3_.aac_.ogg_.mid_.ape_.cda_.rmi_.tta_.tta]
lea ecx, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x93
call fcn.00406b10
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x94
call fcn.00472980
push eax
lea ecx, [ebp - 0x18]
call fcn.0049f6c0
test eax, eax
jl 0x49efe3
push ecx
lea edx, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x28], esp
push edx
call fcn.0040b9c0
push 1
mov ecx, esi
call fcn.004b9fe0
jmp 0x49f015
lea ecx, [ebp - 0x14]
call fcn.00472980
push eax
lea ecx, [ebp - 0x10]
call fcn.0049f6c0
test eax, eax
jl 0x49f015
mov eax, dword [esi + 0x14]
cmp eax, ebx
je 0x49f015
mov edi, dword [eax]
push ebx
lea ecx, [ebp + 8]
call fcn.00472980
mov ecx, dword [esi + 0x14]
push eax
push 0x528
call dword [edi]
lea ecx, [ebp - 0x10]
call fcn.004021d0
lea ecx, [ebp - 0x18]
call fcn.004021d0
lea ecx, [ebp - 0x14]
call fcn.004021d0
lea ecx, [ebp - 0x1c]
call fcn.004021d0
lea ecx, [ebp + 8]
call fcn.004021d0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x8e
call fcn.004095c0
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0xffffffff
call fcn.004095c0
jmp case.0x49beb0.221
lea ecx, [ebp + 8]
call fcn.004069e0
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
mov dword [ebp - 4], 0x95
call fcn.0040b9c0
push 0
mov ecx, esi
call fcn.004b9fe0
lea ecx, [ebp + 8]
call fcn.004021d0
jmp case.0x49beb0.221
mov ecx, dword [esi + 0xc8]
push 2
push 0xffffffffffffffff
call fcn.004bb070
mov edi, eax
xor ebx, ebx
cmp edi, ebx
jl case.0x49beb0.221
lea ecx, [ebp - 0x40]
call fcn.004673c0
mov edx, dword [esi + 0x10c]
lea ecx, [ebp - 0x40]
push ebx
push ecx
push edx
mov ecx, esi
mov dword [ebp - 4], 0x96
call fcn.004a90d0
test eax, eax
je 0x49f1d3
lea ecx, [ebp - 0x38]
call fcn.004673c0
lea eax, [ebp - 0x38]
lea ecx, [ebp - 0x40]
push eax
push ecx
push edi
mov ecx, esi
mov byte [ebp - 4], 0x97
call fcn.004a9490
test eax, eax
je 0x49f1c7
lea edx, [ebp + 8]
push 0x50b4d8
push edx
lea ecx, [ebp - 0x38]
call fcn.004083f0
push 0x5c
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x98
call fcn.0044c330
lea ecx, [ebp + 8]
mov edi, eax
call fcn.004069a0
sub eax, edi
lea ecx, [ebp + 8]
dec eax
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00407130
push 0x2e
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x99
call fcn.0044c330
lea ecx, [ebp - 0x14]
mov edi, eax
call fcn.004069a0
sub eax, edi
lea ecx, [ebp - 0x10]
push eax
push ecx
lea ecx, [ebp - 0x14]
call fcn.00407130
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x9a
call fcn.0049f610
mov edx, dword [str..qmv_.m4v_.f4v_.tim_.swf_.csf_.scm_.ts_.tp_.mkv_.dat_.vob_.qt_.ram_.wav_.wmv_.asf_.rm_.rmvb_.mov_.avi_.mpg_.mpeg_.mpe_.3gp_.mp2_.mp4_.flv_._mv_.wm_.rp_.rpm_.rt_.rsc_.3gp2_.3gpp_.acc_.aif_.aifc_.aiff_.asx_.bik_.flc_.roq_.d2v_.dsa_.dss_.dsv_.m1v_.m2p_.m2v_.m4b_.mkv_.mod_.ogm_.pmp_.pm2_.pss_.m4p_.mv_.m2ts_.evo_.3g2_.wmp_.wm_.ivf_.rmm_.mjp_.pva_.rat_.dvd_.smk_.tpr_.vg2_.vid_.vp6_.vp7_.amv_.fli_.pmp2_.mts_.drc]
lea ecx, [ebp - 0x18]
push edx
call fcn.00406b10
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x9b
call fcn.00472980
push eax
lea ecx, [ebp - 0x18]
call fcn.0049f6c0
test eax, eax
jl 0x49f1a7
mov eax, dword [esi + 0x14]
push ebx
lea ecx, [ebp + 8]
mov edi, dword [eax]
call fcn.00472980
mov ecx, dword [esi + 0x14]
push eax
push 0x587
call dword [edi]
lea ecx, [ebp - 0x18]
call fcn.004021d0
lea ecx, [ebp - 0x10]
call fcn.004021d0
lea ecx, [ebp - 0x14]
call fcn.004021d0
lea ecx, [ebp + 8]
call fcn.004021d0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x96
call fcn.004095c0
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0xffffffff
call fcn.004095c0
jmp case.0x49beb0.221
mov ecx, dword [esi + 0xcc]
push 2
push 0xffffffffffffffff
call fcn.004bb070
mov edi, eax
cmp edi, 0xffffffff
je case.0x49beb0.221
lea ecx, [ebp - 0x20]
call fcn.004069e0
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], 0x9c
push ecx
mov ecx, dword [esi + 0xcc]
push 2
push edi
call fcn.004724f0
test eax, eax
je 0x49f3c9
push str.taskid:
lea ecx, [ebp - 0x20]
call fcn.0049f6c0
test eax, eax
jl 0x49f3c9
lea ecx, [ebp - 0x20]
call fcn.004069a0
sub eax, 7
lea edx, [ebp - 0x4c]
push eax
push edx
lea ecx, [ebp - 0x20]
call fcn.00407130
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x9d
call fcn.00472980
push eax
call fcn.004dd24b
push 0x268
mov ebx, eax
call fcn.004dcb8f
add esp, 8
mov edx, eax
mov ecx, 0x9a
xor eax, eax
mov edi, edx
push 1
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 0x13c]
push 0x268
push edx
push ebx
mov dword [ebp + 8], edx
call fcn.00494f30
mov edi, dword [ebp + 8]
xor ebx, ebx
cmp eax, ebx
jle 0x49f3b4
mov ax, word [edi + 0x5c]
push eax
call dword [0x4f9640]
cmp ax, 1
ja 0x49f3b4
lea ecx, [ebp - 0x44]
call fcn.004069e0
add edi, 0x5f
lea ecx, [ebp - 0x44]
push edi
mov byte [ebp - 4], 0x9e
call fcn.0042ffd0
push 0x7c
lea ecx, [ebp - 0x44]
call fcn.0049f5d0
lea ecx, [ebp - 0x14]
push eax
push ecx
lea ecx, [ebp - 0x44]
call fcn.004072a0
push 0x5c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x9f
call fcn.0044c330
lea ecx, [ebp - 0x14]
mov edi, eax
call fcn.004069a0
sub eax, edi
lea edx, [ebp - 0x50]
dec eax
lea ecx, [ebp - 0x14]
push eax
push edx
call fcn.00407130
push 0x2e
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0xa0
call fcn.0044c330
lea ecx, [ebp - 0x50]
mov edi, eax
call fcn.004069a0
sub eax, edi
lea ecx, [ebp - 0x50]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00407130
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xa1
call fcn.0049f610
mov ecx, dword [str..qmv_.m4v_.f4v_.tim_.swf_.csf_.scm_.ts_.tp_.mkv_.dat_.vob_.qt_.ram_.wav_.wmv_.asf_.rm_.rmvb_.mov_.avi_.mpg_.mpeg_.mpe_.3gp_.mp2_.mp4_.flv_._mv_.wm_.rp_.rpm_.rt_.rsc_.3gp2_.3gpp_.acc_.aif_.aifc_.aiff_.asx_.bik_.flc_.roq_.d2v_.dsa_.dss_.dsv_.m1v_.m2p_.m2v_.m4b_.mkv_.mod_.ogm_.pmp_.pm2_.pss_.m4p_.mv_.m2ts_.evo_.3g2_.wmp_.wm_.ivf_.rmm_.mjp_.pva_.rat_.dvd_.smk_.tpr_.vg2_.vid_.vp6_.vp7_.amv_.fli_.pmp2_.mts_.drc]
push ecx
lea ecx, [ebp - 0x48]
call fcn.00406b10
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xa2
call fcn.00472980
push eax
lea ecx, [ebp - 0x48]
call fcn.0049f6c0
test eax, eax
jl 0x49f389
mov edx, dword [esi + 0x14]
push ebx
lea ecx, [ebp - 0x14]
mov edi, dword [edx]
call fcn.00472980
mov ecx, dword [esi + 0x14]
push eax
push 0x587
call dword [edi]
lea ecx, [ebp - 0x48]
call fcn.004021d0
lea ecx, [ebp - 0x10]
call fcn.004021d0
lea ecx, [ebp - 0x50]
call fcn.004021d0
lea ecx, [ebp - 0x14]
call fcn.004021d0
lea ecx, [ebp - 0x44]
call fcn.004021d0
mov edi, dword [ebp + 8]
cmp edi, ebx
je 0x49f3c1
push edi
call fcn.004dcaa6
add esp, 4
lea ecx, [ebp - 0x4c]
call fcn.004021d0
lea ecx, [ebp - 0x20]
call fcn.004021d0
jmp case.0x49beb0.221
cmp edi, 0x1072
jb 0x49f3ed
cmp edi, 0x1130
ja 0x49f3ed
push edi
mov ecx, esi
call fcn.004b2fe0
jmp case.0x49beb0.221
cmp edi, 0x1131
jb 0x49f407
cmp edi, 0x1194
ja 0x49f407
push edi
mov ecx, esi
call fcn.004b3eb0
jmp case.0x49beb0.221
cmp edi, 0x2009
jb case.0x49beb0.221
cmp edi, 0x206c
ja case.0x49beb0.221
push edi
mov ecx, esi
call fcn.004ba800
mov eax, 1
mov ecx, dword [ebp - 0xc]
lea esp, [ebp - 0xa38]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4