Function at 0x418050
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4548f2
mov eax, dword fs:[0]
push eax
sub esp, 0xc80
mov eax, dword [0x46a850]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xc84], ecx
mov dword [ebp - 4], 0
call fcn.0041f307
push eax
lea ecx, [ebp - 0x10]
call fcn.00407790
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0
mov dword [0x469194], 0x400
mov dword [0x469198], 0x320
push 0
call fcn.0043e265
add esp, 4
push eax
call fcn.0043ddf4
add esp, 4
mov eax, dword [ebp + 0x18]
and eax, 0x80000001
jns 0x4180dd
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x4180f8
call fcn.0043de06
cdq
mov ecx, 5
idiv ecx
add edx, 3
mov eax, dword [ebp + 0x10]
mov dword [eax], edx
jmp 0x41810d
call fcn.0043de06
cdq
mov ecx, 3
idiv ecx
add edx, 2
mov eax, dword [ebp + 0x10]
mov dword [eax], edx
lea ecx, [ebp + 0x1c]
push ecx
mov ecx, dword [ebp + 0xc]
call fcn.00408fe0
mov edx, dword [ebp - 0xc84]
cmp dword [edx], 0xffffffff
jne 0x41813b
mov eax, dword [ebp + 0x18]
and eax, 0x80000001
jns 0x418133
dec eax
or eax, 0xfffffffe
inc eax
mov ecx, dword [ebp - 0xc84]
mov dword [ecx], eax
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x18]
xor edx, edx
div dword [ecx]
mov eax, dword [ebp + 0x14]
mov dword [eax], edx
cmp dword [ebp + 0x18], 0
jne 0x4186d7
mov dword [0x469194], 0x400
mov dword [0x469198], 0x320
push 0
call fcn.0043e265
add esp, 4
push eax
call fcn.0043ddf4
add esp, 4
call fcn.0043de06
cdq
mov ecx, 0x64
idiv ecx
cmp edx, 0x1e
jge 0x4186d2
mov dword [ebp - 0x38], 2
mov dword [ebp - 0x3c], 0
jmp 0x4181aa
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x38]
jge 0x4186d2
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x1ec], ecx
call fcn.0041f307
push eax
mov ecx, dword [ebp - 0x1ec]
call fcn.00407790
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x5c]
call fcn.0041b560
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5c]
call fcn.0041b560
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x5c], 1
mov edx, 0x457b09
test edx, edx
jne 0x41820d
mov dword [ebp - 0x1f8], 0
jmp 0x418220
push 0x457b09
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x1f8]
push eax
push 0x457b09
lea ecx, [ebp - 0x58]
call fcn.004091b0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
lea ecx, [ebp - 0x5c]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x5c], 2
push 5
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x58]
call fcn.00408fe0
lea ecx, [ebp - 0x5c]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x5c], 2
push 5
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x58]
call fcn.00408fe0
lea ecx, [ebp - 0x5c]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x5c], 3
mov edx, dword [ebp + 0xc]
push edx
lea ecx, [ebp - 0x58]
call fcn.00408fe0
mov dword [ebp - 0x50], 1
lea eax, [ebp - 0x5c]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x5c], 2
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 7
div ecx
add edx, 3
push edx
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x58]
call fcn.00408fe0
lea ecx, [ebp - 0x5c]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov edx, 0x458c28
test edx, edx
jne 0x41833b
mov dword [ebp - 0x2b0], 0
jmp 0x41834e
push 0x458c28
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2b0]
push eax
push 0x458c28
lea ecx, [ebp - 0x58]
call fcn.004091b0
lea ecx, [ebp - 0x5c]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov edx, 0x458c28
test edx, edx
jne 0x418383
mov dword [ebp - 0x2d8], 0
jmp 0x418396
push 0x458c28
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x2d8]
push eax
push 0x458c28
lea ecx, [ebp - 0x58]
call fcn.004091b0
lea ecx, [ebp - 0x5c]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x40], 1
call fcn.0043de06
cdq
mov ecx, 0x64
idiv ecx
cmp edx, 0x5f
jl 0x4183d8
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x60], 0
jmp 0x4183ea
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp - 0x60]
cmp ecx, dword [ebp - 0x40]
jge 0x4186c1
mov dword [ebp - 0x5c], 4
mov edx, str.frvideo.baidu.com_square
test edx, edx
jne 0x418412
mov dword [ebp - 0x300], 0
jmp 0x418425
push str.frvideo.baidu.com_square
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x300]
push eax
push str.frvideo.baidu.com_square
lea ecx, [ebp - 0x58]
call fcn.004091b0
mov dword [ebp - 0x54], 6
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x3c
jbe 0x418461
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x48], 0xa
jmp 0x4184b2
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x3c
ja 0x418493
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x19
jbe 0x418493
mov dword [ebp - 0x4c], 0xa
mov dword [ebp - 0x48], 0x14
jmp 0x4184b2
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x1e
ja 0x4184b2
mov dword [ebp - 0x4c], 0xa
mov dword [ebp - 0x48], 0x32
mov dword [ebp - 0x44], 0
lea edx, [ebp - 0x5c]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x5c], 2
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 5
div ecx
add edx, 5
push edx
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x58]
call fcn.00408fe0
lea ecx, [ebp - 0x5c]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x5c], 2
push 5
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x58]
call fcn.00408fe0
lea ecx, [ebp - 0x5c]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x5c], 2
push 5
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x58]
call fcn.00408fe0
lea ecx, [ebp - 0x5c]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
call fcn.0043de06
cdq
mov ecx, 0x64
idiv ecx
mov dword [ebp - 0x64], edx
cmp dword [ebp - 0x64], 0x50
jge 0x41858a
mov edx, dword [ebp + 0x10]
mov dword [edx], 1
jmp 0x4185b6
cmp dword [ebp - 0x64], 0x50
jl 0x4185a1
cmp dword [ebp - 0x64], 0x5a
jge 0x4185a1
mov eax, dword [ebp + 0x10]
mov dword [eax], 2
jmp 0x4185b6
call fcn.0043de06
cdq
mov ecx, 3
idiv ecx
add edx, 3
mov eax, dword [ebp + 0x10]
mov dword [eax], edx
mov ecx, dword [ebp + 0x14]
mov dword [ecx], 0
mov dword [ebp - 0x68], 0
jmp 0x4185d1
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x68]
cmp ecx, dword [eax]
jge 0x4186bc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0043ddf4
add esp, 4
call fcn.0043de06
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x6c], 0
call fcn.0043de06
cdq
mov ecx, 0x64
idiv ecx
mov dword [ebp - 0x64], edx
cmp dword [ebp - 0x64], 0x32
jge 0x41862a
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x33
div ecx
add edx, 0x96
mov dword [ebp - 0x6c], edx
jmp 0x418662
cmp dword [ebp - 0x64], 0x32
jl 0x41864d
cmp dword [ebp - 0x64], 0x5a
jge 0x41864d
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x65
div ecx
add edx, 0xc8
mov dword [ebp - 0x6c], edx
jmp 0x418662
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x12d
div ecx
add edx, 0x12c
mov dword [ebp - 0x6c], edx
mov edx, dword [ebp - 0x6c]
push edx
push 0x4586bc
lea eax, [ebp - 0x10]
push eax
call fcn.00409590
add esp, 0xc
cmp dword [ebp - 0x68], 0
je 0x418690
mov dword [ebp - 0x5c], 0xa
lea ecx, [ebp - 0x5c]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x5c], 2
lea edx, [ebp - 0x10]
push edx
lea ecx, [ebp - 0x58]
call fcn.00408fe0
lea eax, [ebp - 0x5c]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4185c8
jmp 0x4183e1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
call fcn.004077e0
jmp 0x4181a1
jmp 0x41b475
cmp dword [ebp + 0x18], 2
jne 0x418cc3
push 0
call fcn.0043e265
add esp, 4
push eax
call fcn.0043ddf4
add esp, 4
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x3e0], ecx
call fcn.0041f307
push eax
mov ecx, dword [ebp - 0x3e0]
call fcn.00407790
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x88]
call fcn.0041b560
mov byte [ebp - 4], 5
mov edx, dword [ebp + 0x14]
mov dword [edx], 0
cmp dword [0x46c38c], 1
jne 0x418caf
mov dword [ebp - 0x90], 0
jmp 0x418755
mov eax, dword [ebp - 0x90]
add eax, 1
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x418caf
lea ecx, [ebp - 0x88]
call fcn.0041b560
mov dword [ebp - 0x88], 1
mov ecx, 0x457b09
test ecx, ecx
jne 0x41878c
mov dword [ebp - 0x3ec], 0
jmp 0x41879f
push 0x457b09
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x3ec], eax
mov edx, dword [ebp - 0x3ec]
push edx
push 0x457b09
lea ecx, [ebp - 0x84]
call fcn.004091b0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0
lea eax, [ebp - 0x88]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x88], 2
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 7
div ecx
add edx, 3
push edx
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x84]
call fcn.00408fe0
lea ecx, [ebp - 0x88]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
lea ecx, [ebp - 0x88]
call fcn.0041b560
mov edx, 0x457b09
test edx, edx
jne 0x41884a
mov dword [ebp - 0x440], 0
jmp 0x41885d
push 0x457b09
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x440], eax
mov eax, dword [ebp - 0x440]
push eax
push 0x457b09
lea ecx, [ebp - 0x84]
call fcn.004091b0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x88], 3
mov ecx, dword [ebp + 0xc]
push ecx
lea ecx, [ebp - 0x84]
call fcn.00408fe0
mov dword [ebp - 0x7c], 1
lea edx, [ebp - 0x88]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x88], 2
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 7
div ecx
add edx, 3
push edx
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x84]
call fcn.00408fe0
lea ecx, [ebp - 0x88]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov edx, 0x458c28
test edx, edx
jne 0x418926
mov dword [ebp - 0x48c], 0
jmp 0x418939
push 0x458c28
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x48c], eax
mov eax, dword [ebp - 0x48c]
push eax
push 0x458c28
lea ecx, [ebp - 0x84]
call fcn.004091b0
lea ecx, [ebp - 0x88]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov edx, 0x458c28
test edx, edx
jne 0x418974
mov dword [ebp - 0x4b4], 0
jmp 0x418987
push 0x458c28
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x4b4], eax
mov eax, dword [ebp - 0x4b4]
push eax
push 0x458c28
lea ecx, [ebp - 0x84]
call fcn.004091b0
lea ecx, [ebp - 0x88]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x88], 4
mov edx, str.frvideo.baidu.com_square
test edx, edx
jne 0x4189cc
mov dword [ebp - 0x4dc], 0
jmp 0x4189df
push str.frvideo.baidu.com_square
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x4dc], eax
mov eax, dword [ebp - 0x4dc]
push eax
push str.frvideo.baidu.com_square
lea ecx, [ebp - 0x84]
call fcn.004091b0
mov dword [ebp - 0x80], 6
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x3c
jbe 0x418a1e
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x74], 5
jmp 0x418a6f
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x3c
ja 0x418a50
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x19
jbe 0x418a50
mov dword [ebp - 0x78], 5
mov dword [ebp - 0x74], 5
jmp 0x418a6f
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x1e
ja 0x418a6f
mov dword [ebp - 0x78], 0xa
mov dword [ebp - 0x74], 0xa
mov dword [ebp - 0x70], 0
lea edx, [ebp - 0x88]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x88], 2
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x1e
div ecx
push edx
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x84]
call fcn.00408fe0
lea ecx, [ebp - 0x88]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x94], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0043ddf4
add esp, 4
call fcn.0043de06
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 0x64
idiv ecx
cmp edx, 0x50
jge 0x418b0e
mov dword [ebp - 0x94], 3
jmp 0x418b4a
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 0x64
idiv ecx
cmp edx, 0x50
jl 0x418b40
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 0x64
idiv ecx
cmp edx, 0x5a
jge 0x418b40
mov dword [ebp - 0x94], 4
jmp 0x418b4a
mov dword [ebp - 0x94], 2
mov dword [ebp - 0x98], 0
jmp 0x418b65
mov edx, dword [ebp - 0x98]
add edx, 1
mov dword [ebp - 0x98], edx
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x94]
jge 0x418caa
mov dword [ebp - 0x9c], 0
mov ecx, dword [ebp - 0x94]
sub ecx, 1
cmp dword [ebp - 0x98], ecx
jne 0x418c3a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0043ddf4
add esp, 4
call fcn.0043de06
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 0x64
idiv ecx
cmp edx, 0x32
jge 0x418bdc
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 0x51
idiv ecx
add edx, 0x78
mov dword [ebp - 0x9c], edx
jmp 0x418c38
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 0x64
idiv ecx
cmp edx, 0x32
jl 0x418c1e
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 0x64
idiv ecx
cmp edx, 0x5a
jge 0x418c1e
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 0x65
idiv ecx
add edx, 0xc8
mov dword [ebp - 0x9c], edx
jmp 0x418c38
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 0x12d
idiv ecx
add edx, 0x12c
mov dword [ebp - 0x9c], edx
jmp 0x418c44
mov dword [ebp - 0x9c], 8
mov edx, dword [ebp - 0x9c]
push edx
push 0x4586bc
lea eax, [ebp - 0x10]
push eax
call fcn.00409590
add esp, 0xc
mov dword [ebp - 0x88], 0xa
lea ecx, [ebp - 0x88]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x88], 2
lea edx, [ebp - 0x10]
push edx
lea ecx, [ebp - 0x84]
call fcn.00408fe0
lea eax, [ebp - 0x88]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x418b56
jmp 0x418746
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x84]
call fcn.004077e0
jmp 0x41b475
cmp dword [ebp + 0x18], 8
jne 0x4192f8
push 0
call fcn.0043e265
add esp, 4
push eax
call fcn.0043ddf4
add esp, 4
call fcn.0043de06
cdq
mov ecx, 0x64
idiv ecx
mov dword [ebp - 0xa0], edx
lea edx, [ebp - 0xb8]
mov dword [ebp - 0x574], edx
call fcn.0041f307
push eax
mov ecx, dword [ebp - 0x574]
call fcn.00407790
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xbc]
call fcn.0041b560
mov byte [ebp - 4], 7
mov eax, dword [ebp + 0x14]
mov dword [eax], 0
cmp dword [ebp - 0xa0], 0xf
jge 0x4192e4
mov dword [ebp - 0xc4], 0
jmp 0x418d54
mov ecx, dword [ebp - 0xc4]
add ecx, 1
mov dword [ebp - 0xc4], ecx
cmp dword [ebp - 0xc4], 1
jge 0x4192e4
lea ecx, [ebp - 0xbc]
call fcn.0041b560
mov dword [ebp - 0xbc], 1
mov edx, 0x457b09
test edx, edx
jne 0x418d8b
mov dword [ebp - 0x580], 0
jmp 0x418d9e
push 0x457b09
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x580], eax
mov eax, dword [ebp - 0x580]
push eax
push 0x457b09
lea ecx, [ebp - 0xb8]
call fcn.004091b0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
lea ecx, [ebp - 0xbc]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0xbc], 2
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 7
div ecx
add edx, 3
push edx
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00408fe0
lea ecx, [ebp - 0xbc]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
lea ecx, [ebp - 0xbc]
call fcn.0041b560
mov edx, 0x457b09
test edx, edx
jne 0x418e55
mov dword [ebp - 0x5d4], 0
jmp 0x418e68
push 0x457b09
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x5d4], eax
mov eax, dword [ebp - 0x5d4]
push eax
push 0x457b09
lea ecx, [ebp - 0xb8]
call fcn.004091b0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xbc], 3
mov ecx, dword [ebp + 0xc]
push ecx
lea ecx, [ebp - 0xb8]
call fcn.00408fe0
mov dword [ebp - 0xb0], 1
lea edx, [ebp - 0xbc]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0xbc], 2
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 7
div ecx
add edx, 3
push edx
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00408fe0
lea ecx, [ebp - 0xbc]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov edx, 0x458c28
test edx, edx
jne 0x418f40
mov dword [ebp - 0x620], 0
jmp 0x418f53
push 0x458c28
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x620], eax
mov eax, dword [ebp - 0x620]
push eax
push 0x458c28
lea ecx, [ebp - 0xb8]
call fcn.004091b0
lea ecx, [ebp - 0xbc]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov edx, 0x458c28
test edx, edx
jne 0x418f8e
mov dword [ebp - 0x648], 0
jmp 0x418fa1
push 0x458c28
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x648], eax
mov eax, dword [ebp - 0x648]
push eax
push 0x458c28
lea ecx, [ebp - 0xb8]
call fcn.004091b0
lea ecx, [ebp - 0xbc]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0xbc], 4
mov edx, str.frvideo.baidu.com_square
test edx, edx
jne 0x418fe6
mov dword [ebp - 0x670], 0
jmp 0x418ff9
push str.frvideo.baidu.com_square
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x670], eax
mov eax, dword [ebp - 0x670]
push eax
push str.frvideo.baidu.com_square
lea ecx, [ebp - 0xb8]
call fcn.004091b0
mov dword [ebp - 0xb4], 6
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x3c
jbe 0x419041
mov dword [ebp - 0xac], 1
mov dword [ebp - 0xa8], 5
jmp 0x41909e
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x3c
ja 0x419079
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x19
jbe 0x419079
mov dword [ebp - 0xac], 5
mov dword [ebp - 0xa8], 5
jmp 0x41909e
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x1e
ja 0x41909e
mov dword [ebp - 0xac], 0xa
mov dword [ebp - 0xa8], 0xa
mov dword [ebp - 0xa4], 0
lea edx, [ebp - 0xbc]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0xbc], 2
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x1e
div ecx
push edx
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00408fe0
lea ecx, [ebp - 0xbc]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0xc8], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0043ddf4
add esp, 4
call fcn.0043de06
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
cdq
mov ecx, 0x64
idiv ecx
cmp edx, 0x32
jge 0x419140
mov dword [ebp - 0xc8], 1
jmp 0x41917c
mov eax, dword [ebp - 0xc0]
cdq
mov ecx, 0x64
idiv ecx
cmp edx, 0x32
jl 0x419172
mov eax, dword [ebp - 0xc0]
cdq
mov ecx, 0x64
idiv ecx
cmp edx, 0x50
jge 0x419172
mov dword [ebp - 0xc8], 2
jmp 0x41917c
mov dword [ebp - 0xc8], 3
mov dword [ebp - 0xcc], 0
jmp 0x419197
mov edx, dword [ebp - 0xcc]
add edx, 1
mov dword [ebp - 0xcc], edx
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0xc8]
jge 0x4192df
mov dword [ebp - 0xd0], 0
mov ecx, dword [ebp - 0xc8]
sub ecx, 1
cmp dword [ebp - 0xcc], ecx
jne 0x41926f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0043ddf4
add esp, 4
call fcn.0043de06
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
cdq
mov ecx, 0x64
idiv ecx
cmp edx, 0x32
jge 0x419211
mov eax, dword [ebp - 0xc0]
cdq
mov ecx, 0x33
idiv ecx
add edx, 0x96
mov dword [ebp - 0xd0], edx
jmp 0x41926d
mov eax, dword [ebp - 0xc0]
cdq
mov ecx, 0x64
idiv ecx
cmp edx, 0x32
jl 0x419253
mov eax, dword [ebp - 0xc0]
cdq
mov ecx, 0x64
idiv ecx
cmp edx, 0x5a
jge 0x419253
mov eax, dword [ebp - 0xc0]
cdq
mov ecx, 0x65
idiv ecx
add edx, 0xc8
mov dword [ebp - 0xd0], edx
jmp 0x41926d
mov eax, dword [ebp - 0xc0]
cdq
mov ecx, 0x79
idiv ecx
add edx, 0x12c
mov dword [ebp - 0xd0], edx
jmp 0x419279
mov dword [ebp - 0xd0], 8
mov edx, dword [ebp - 0xd0]
push edx
push 0x4586bc
lea eax, [ebp - 0x10]
push eax
call fcn.00409590
add esp, 0xc
mov dword [ebp - 0xbc], 0xa
lea ecx, [ebp - 0xbc]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0xbc], 2
lea edx, [ebp - 0x10]
push edx
lea ecx, [ebp - 0xb8]
call fcn.00408fe0
lea eax, [ebp - 0xbc]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x419188
jmp 0x418d45
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xb8]
call fcn.004077e0
jmp 0x41b475
cmp dword [ebp + 0x18], 4
jne 0x4199cc
mov dword [0x469194], 0x400
mov dword [0x469198], 0x320
push 0
call fcn.0043e265
add esp, 4
push eax
call fcn.0043ddf4
add esp, 4
call fcn.0043de06
cdq
mov ecx, 0x64
idiv ecx
mov dword [ebp - 0xd4], edx
mov edx, dword [ebp - 0xd4]
cmp edx, dword [0x4690e4]
jge 0x4199c7
mov dword [0x46c38c], 1
mov dword [ebp - 0xd8], 1
mov dword [ebp - 0xdc], 0
jmp 0x41937d
mov eax, dword [ebp - 0xdc]
add eax, 1
mov dword [ebp - 0xdc], eax
mov ecx, dword [ebp - 0xdc]
cmp ecx, dword [ebp - 0xd8]
jge 0x4199c7
lea edx, [ebp - 0xfc]
mov dword [ebp - 0x708], edx
call fcn.0041f307
push eax
mov ecx, dword [ebp - 0x708]
call fcn.00407790
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x100]
call fcn.0041b560
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x100]
call fcn.0041b560
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x100], 1
mov eax, 0x457b09
test eax, eax
jne 0x4193f2
mov dword [ebp - 0x714], 0
jmp 0x419405
push 0x457b09
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x714], eax
mov ecx, dword [ebp - 0x714]
push ecx
push 0x457b09
lea ecx, [ebp - 0xfc]
call fcn.004091b0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xe8], 0
lea edx, [ebp - 0x100]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x100], 2
push 5
push 0x4586bc
lea eax, [ebp - 0x10]
push eax
call fcn.00409590
add esp, 0xc
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xfc]
call fcn.00408fe0
lea edx, [ebp - 0x100]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x100], 2
push 5
push 0x4586bc
lea eax, [ebp - 0x10]
push eax
call fcn.00409590
add esp, 0xc
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0xfc]
call fcn.00408fe0
lea edx, [ebp - 0x100]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x100], 3
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0xfc]
call fcn.00408fe0
mov dword [ebp - 0xf4], 1
lea ecx, [ebp - 0x100]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x100], 2
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 7
div ecx
add edx, 3
push edx
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0xfc]
call fcn.00408fe0
lea ecx, [ebp - 0x100]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov edx, 0x458c28
test edx, edx
jne 0x419559
mov dword [ebp - 0x7cc], 0
jmp 0x41956c
push 0x458c28
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x7cc], eax
mov eax, dword [ebp - 0x7cc]
push eax
push 0x458c28
lea ecx, [ebp - 0xfc]
call fcn.004091b0
lea ecx, [ebp - 0x100]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov edx, 0x458c28
test edx, edx
jne 0x4195a7
mov dword [ebp - 0x7f4], 0
jmp 0x4195ba
push 0x458c28
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x7f4], eax
mov eax, dword [ebp - 0x7f4]
push eax
push 0x458c28
lea ecx, [ebp - 0xfc]
call fcn.004091b0
lea ecx, [ebp - 0x100]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0xe0], 1
call fcn.0043de06
cdq
mov ecx, 0x64
idiv ecx
mov dword [ebp - 0xe4], edx
cmp dword [ebp - 0xe4], 0x23
jge 0x419612
mov dword [ebp - 0xe0], 1
jmp 0x41963a
cmp dword [ebp - 0xe0], 0x23
jl 0x419630
cmp dword [ebp - 0xe0], 0x50
jge 0x419630
mov dword [ebp - 0xe0], 2
jmp 0x41963a
mov dword [ebp - 0xe0], 3
mov dword [ebp - 0x104], 0
jmp 0x419655
mov edx, dword [ebp - 0x104]
add edx, 1
mov dword [ebp - 0x104], edx
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0xe0]
jge 0x4199b3
mov dword [ebp - 0x100], 4
mov ecx, str.frvideo.baidu.com_square
test ecx, ecx
jne 0x419686
mov dword [ebp - 0x81c], 0
jmp 0x419699
push str.frvideo.baidu.com_square
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x81c], eax
mov edx, dword [ebp - 0x81c]
push edx
push str.frvideo.baidu.com_square
lea ecx, [ebp - 0xfc]
call fcn.004091b0
mov dword [ebp - 0xf8], 6
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x3c
jbe 0x4196e1
mov dword [ebp - 0xf0], 1
mov dword [ebp - 0xec], 0xa
jmp 0x41973e
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x3c
ja 0x419719
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x19
jbe 0x419719
mov dword [ebp - 0xf0], 0xa
mov dword [ebp - 0xec], 0x14
jmp 0x41973e
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x1e
ja 0x41973e
mov dword [ebp - 0xf0], 0xa
mov dword [ebp - 0xec], 0x32
mov dword [ebp - 0xe8], 0
lea edx, [ebp - 0x100]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x100], 2
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 5
div ecx
add edx, 5
push edx
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0xfc]
call fcn.00408fe0
lea ecx, [ebp - 0x100]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x100], 2
push 5
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0xfc]
call fcn.00408fe0
lea ecx, [ebp - 0x100]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x100], 2
push 5
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0xfc]
call fcn.00408fe0
lea ecx, [ebp - 0x100]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
call fcn.0043de06
cdq
mov ecx, 0x64
idiv ecx
mov dword [ebp - 0x108], edx
cmp dword [ebp - 0x108], 0x50
jge 0x41983d
mov edx, dword [ebp + 0x10]
mov dword [edx], 1
jmp 0x41986f
cmp dword [ebp - 0x108], 0x50
jl 0x41985a
cmp dword [ebp - 0x108], 0x5a
jge 0x41985a
mov eax, dword [ebp + 0x10]
mov dword [eax], 2
jmp 0x41986f
call fcn.0043de06
cdq
mov ecx, 3
idiv ecx
add edx, 3
mov eax, dword [ebp + 0x10]
mov dword [eax], edx
mov ecx, dword [ebp + 0x14]
mov dword [ecx], 0
mov dword [ebp - 0x10c], 0
jmp 0x419893
mov edx, dword [ebp - 0x10c]
add edx, 1
mov dword [ebp - 0x10c], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x10c]
cmp ecx, dword [eax]
jge 0x4199ae
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0043ddf4
add esp, 4
call fcn.0043de06
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x110], 0
call fcn.0043de06
cdq
mov ecx, 0x64
idiv ecx
mov dword [ebp - 0x108], edx
cmp dword [ebp - 0x108], 0x32
jge 0x4198fb
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x33
div ecx
add edx, 0x96
mov dword [ebp - 0x110], edx
jmp 0x41993f
cmp dword [ebp - 0x108], 0x32
jl 0x419927
cmp dword [ebp - 0x108], 0x5a
jge 0x419927
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x65
div ecx
add edx, 0xc8
mov dword [ebp - 0x110], edx
jmp 0x41993f
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x79
div ecx
add edx, 0x12c
mov dword [ebp - 0x110], edx
mov edx, dword [ebp - 0x110]
push edx
push 0x4586bc
lea eax, [ebp - 0x10]
push eax
call fcn.00409590
add esp, 0xc
cmp dword [ebp - 0x10c], 0
je 0x419979
mov dword [ebp - 0x100], 0xa
lea ecx, [ebp - 0x100]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x100], 2
lea edx, [ebp - 0x10]
push edx
lea ecx, [ebp - 0xfc]
call fcn.00408fe0
lea eax, [ebp - 0x100]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x419884
jmp 0x419646
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xfc]
call fcn.004077e0
jmp 0x41936e
jmp 0x41b475
cmp dword [ebp + 0x18], 1
jne 0x41a41d
push 0
call fcn.0043e265
add esp, 4
push eax
call fcn.0043ddf4
add esp, 4
call fcn.0043de06
cdq
mov ecx, 0x64
idiv ecx
mov dword [ebp - 0x114], edx
call fcn.0041f307
push eax
lea ecx, [ebp - 0x118]
call fcn.00407790
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x114]
push edx
push str.rand:__d
lea eax, [ebp - 0x118]
push eax
call fcn.00409590
add esp, 0xc
mov ecx, dword [ebp - 0x114]
cmp ecx, dword [0x4690e4]
jge 0x41a409
mov dword [0x46c38c], 1
mov dword [ebp - 0x11c], 3
call fcn.0043de06
cdq
mov ecx, 0x64
idiv ecx
cmp edx, 0x3c
jle 0x419a73
mov edx, dword [ebp - 0x11c]
add edx, 1
mov dword [ebp - 0x11c], edx
lea eax, [ebp - 0x134]
mov dword [ebp - 0x8fc], eax
call fcn.0041f307
push eax
mov ecx, dword [ebp - 0x8fc]
call fcn.00407790
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x138]
call fcn.0041b560
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x138], 1
mov ecx, 0x457b09
test ecx, ecx
jne 0x419ac2
mov dword [ebp - 0x900], 0
jmp 0x419ad5
push 0x457b09
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x900], eax
mov edx, dword [ebp - 0x900]
push edx
push 0x457b09
lea ecx, [ebp - 0x134]
call fcn.004091b0
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0
lea eax, [ebp - 0x138]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x13c], 0
jmp 0x419b3e
mov ecx, dword [ebp - 0x13c]
add ecx, 1
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x13c]
cmp edx, dword [ebp - 0x11c]
jge 0x41a3fa
cmp dword [ebp - 0x13c], 0
jle 0x419bb1
mov dword [ebp - 0x138], 2
mov eax, 0x458bfc
test eax, eax
jne 0x419b78
mov dword [ebp - 0x928], 0
jmp 0x419b8b
push 0x458bfc
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x928], eax
mov ecx, dword [ebp - 0x928]
push ecx
push 0x458bfc
lea ecx, [ebp - 0x134]
call fcn.004091b0
lea edx, [ebp - 0x138]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x138], 3
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x134]
call fcn.00408fe0
mov dword [ebp - 0x12c], 1
lea ecx, [ebp - 0x138]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x138], 2
mov edx, 0x458bfc
test edx, edx
jne 0x419c02
mov dword [ebp - 0x974], 0
jmp 0x419c15
push 0x458bfc
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x974], eax
mov eax, dword [ebp - 0x974]
push eax
push 0x458bfc
lea ecx, [ebp - 0x134]
call fcn.004091b0
lea ecx, [ebp - 0x138]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x138], 4
mov dword [ebp - 0x12c], 1
mov edx, str.http:__v.baidu.com_tv
test edx, edx
jne 0x419c64
mov dword [ebp - 0x99c], 0
jmp 0x419c77
push str.http:__v.baidu.com_tv
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x99c], eax
mov eax, dword [ebp - 0x99c]
push eax
push str.http:__v.baidu.com_tv
lea ecx, [ebp - 0x134]
call fcn.004091b0
mov dword [ebp - 0x130], 0
lea ecx, [ebp - 0x138]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x148], 0
jmp 0x419cc2
mov edx, dword [ebp - 0x148]
add edx, 1
mov dword [ebp - 0x148], edx
mov eax, dword [ebp - 0x11c]
add eax, 2
cmp dword [ebp - 0x148], eax
jge 0x419f53
mov dword [ebp - 0x138], 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0043ddf4
add esp, 4
call fcn.0043de06
cdq
mov ecx, 7
idiv ecx
add edx, 3
push edx
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x134]
call fcn.00408fe0
lea ecx, [ebp - 0x138]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
cmp dword [ebp - 0x13c], 0
jne 0x419de6
cmp dword [ebp - 0x148], 0
jne 0x419de6
mov edx, 0x458c28
test edx, edx
jne 0x419d5f
mov dword [ebp - 0x9e8], 0
jmp 0x419d72
push 0x458c28
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0x9e8], eax
mov eax, dword [ebp - 0x9e8]
push eax
push 0x458c28
lea ecx, [ebp - 0x134]
call fcn.004091b0
lea ecx, [ebp - 0x138]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov edx, 0x458c28
test edx, edx
jne 0x419dad
mov dword [ebp - 0xa10], 0
jmp 0x419dc0
push 0x458c28
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0xa10], eax
mov eax, dword [ebp - 0xa10]
push eax
push 0x458c28
lea ecx, [ebp - 0x134]
call fcn.004091b0
lea ecx, [ebp - 0x138]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x138], 4
mov dword [ebp - 0x12c], 1
mov edx, str.http:__v.baidu.com_tv_
test edx, edx
jne 0x419e0f
mov dword [ebp - 0xa38], 0
jmp 0x419e22
push str.http:__v.baidu.com_tv_
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0xa38], eax
mov eax, dword [ebp - 0xa38]
push eax
push str.http:__v.baidu.com_tv_
lea ecx, [ebp - 0x134]
call fcn.004091b0
mov dword [ebp - 0x130], 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x3c
jbe 0x419e73
mov dword [ebp - 0x128], 1
mov dword [ebp - 0x124], 0xa
jmp 0x419ebf
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x3c
ja 0x419eab
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x19
jbe 0x419eab
mov dword [ebp - 0x128], 0xb
mov dword [ebp - 0x124], 0x28
jmp 0x419ebf
mov dword [ebp - 0x128], 0x29
mov dword [ebp - 0x124], 0xc8
mov dword [ebp - 0x120], 0
lea edx, [ebp - 0x138]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x138], 2
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0xa
div ecx
push edx
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
mov eax, 0x458be0
test eax, eax
jne 0x419f15
mov dword [ebp - 0xa60], 0
jmp 0x419f28
push 0x458be0
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0xa60]
push ecx
push 0x458be0
lea ecx, [ebp - 0x134]
call fcn.004091b0
lea edx, [ebp - 0x138]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
jmp 0x419cb3
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x14c], 0
jmp 0x419f82
mov eax, dword [ebp - 0x14c]
add eax, 1
mov dword [ebp - 0x14c], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 0x14c]
cmp edx, dword [ecx]
jge 0x41a3f5
mov dword [ebp - 0x140], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0043ddf4
add esp, 4
call fcn.0043de06
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x150], 0
lea ecx, [ebp - 0x138]
call fcn.0041b560
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0xa
jae 0x41a005
cmp dword [ebp - 0x144], 0
jne 0x41a005
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x4b0
div ecx
add edx, 0x960
mov dword [ebp - 0x150], edx
mov dword [ebp - 0x144], 1
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x14
jae 0x41a044
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0xa
jb 0x41a044
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x5dc
div ecx
add edx, 0x384
mov dword [ebp - 0x150], edx
jmp 0x41a0d4
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x65
div ecx
cmp edx, 0x14
jbe 0x41a080
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x65
div ecx
cmp edx, 0x28
ja 0x41a080
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x384
div ecx
add edx, 0x258
mov dword [ebp - 0x150], edx
jmp 0x41a0d4
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x65
div ecx
cmp edx, 0x28
jbe 0x41a0bc
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x65
div ecx
cmp edx, 0x3c
ja 0x41a0bc
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x258
div ecx
add edx, 0x12c
mov dword [ebp - 0x150], edx
jmp 0x41a0d4
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0xb4
div ecx
add edx, 0x1a4
mov dword [ebp - 0x150], edx
mov dword [ebp - 0x138], 4
mov dword [ebp - 0x12c], 2
mov edx, dword [ebp - 0x14c]
mov dword [ebp - 0xc88], edx
cmp dword [ebp - 0xc88], 0
je 0x41a0ff
jmp 0x41a166
mov eax, str._link_url
test eax, eax
jne 0x41a114
mov dword [ebp - 0xa90], 0
jmp 0x41a127
push str._link_url
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0xa90], eax
mov ecx, dword [ebp - 0xa90]
push ecx
push str._link_url
lea ecx, [ebp - 0x134]
call fcn.004091b0
mov dword [ebp - 0x130], 0
lea edx, [ebp - 0x138]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x140], 1
jmp 0x41a286
mov eax, dword [ebp - 0x14c]
and eax, 0x80000001
jns 0x41a178
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x41a1d6
mov ecx, str..htm_frp
test ecx, ecx
jne 0x41a191
mov dword [ebp - 0xab8], 0
jmp 0x41a1a4
push str..htm_frp
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0xab8], eax
mov edx, dword [ebp - 0xab8]
push edx
push str..htm_frp
lea ecx, [ebp - 0x134]
call fcn.004091b0
mov dword [ebp - 0x130], 6
lea eax, [ebp - 0x138]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
jmp 0x41a22e
mov ecx, str._tv_
test ecx, ecx
jne 0x41a1eb
mov dword [ebp - 0xae0], 0
jmp 0x41a1fe
push str._tv_
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0xae0], eax
mov edx, dword [ebp - 0xae0]
push edx
push str._tv_
lea ecx, [ebp - 0x134]
call fcn.004091b0
mov dword [ebp - 0x130], 5
lea eax, [ebp - 0x138]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x138], 2
mov ecx, 0x458bbc
test ecx, ecx
jne 0x41a24d
mov dword [ebp - 0xb08], 0
jmp 0x41a260
push 0x458bbc
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0xb08], eax
mov edx, dword [ebp - 0xb08]
push edx
push 0x458bbc
lea ecx, [ebp - 0x134]
call fcn.004091b0
lea eax, [ebp - 0x138]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
sub edx, 1
cmp dword [ebp - 0x14c], edx
je 0x41a2a7
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 0x14c]
cmp ecx, dword [eax]
jne 0x41a329
mov dword [ebp - 0x138], 4
mov edx, str._link_url
test edx, edx
jne 0x41a2c6
mov dword [ebp - 0xb30], 0
jmp 0x41a2d9
push str._link_url
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0xb30], eax
mov eax, dword [ebp - 0xb30]
push eax
push str._link_url
lea ecx, [ebp - 0x134]
call fcn.004091b0
mov dword [ebp - 0x130], 3
mov dword [ebp - 0x128], 1
mov dword [ebp - 0x124], 0x64
lea ecx, [ebp - 0x138]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x140], 1
jmp 0x41a33c
cmp dword [ebp - 0x144], 0
je 0x41a33c
mov dword [ebp - 0x144], 0
lea ecx, [ebp - 0x138]
call fcn.0041b560
mov dword [ebp - 0x138], 2
mov edx, 0x458bbc
test edx, edx
jne 0x41a366
mov dword [ebp - 0xb60], 0
jmp 0x41a379
push 0x458bbc
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0xb60], eax
mov eax, dword [ebp - 0xb60]
push eax
push 0x458bbc
lea ecx, [ebp - 0x134]
call fcn.004091b0
lea ecx, [ebp - 0x138]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
cmp dword [ebp - 0x140], 1
jne 0x41a3f0
mov dword [ebp - 0x138], 2
mov edx, dword [ebp - 0x150]
push edx
push 0x4586bc
lea eax, [ebp - 0x10]
push eax
call fcn.00409590
add esp, 0xc
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x134]
call fcn.00408fe0
lea edx, [ebp - 0x138]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x419f73
jmp 0x419b2f
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x134]
call fcn.004077e0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x118]
call fcn.004077e0
jmp 0x41b475
cmp dword [ebp + 0x18], 3
jne 0x41aba4
push 0
call fcn.0043e265
add esp, 4
push eax
call fcn.0043ddf4
add esp, 4
call fcn.0043de06
cdq
mov ecx, 0x64
idiv ecx
mov dword [ebp - 0x154], edx
lea ecx, [ebp - 0x158]
call fcn.00406890
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x154]
push edx
push str.rand:__d
lea eax, [ebp - 0x158]
push eax
call fcn.00409590
add esp, 0xc
cmp dword [ebp - 0x154], 0x1e
jge 0x41ab90
mov dword [ebp - 0x15c], 2
call fcn.0043de06
cdq
mov ecx, 0x64
idiv ecx
cmp edx, 0x3c
jle 0x41a4af
mov edx, dword [ebp - 0x15c]
add edx, 1
mov dword [ebp - 0x15c], edx
lea eax, [ebp - 0x174]
mov dword [ebp - 0xbc0], eax
call fcn.0041f307
push eax
mov ecx, dword [ebp - 0xbc0]
call fcn.00407790
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x178]
call fcn.0041b560
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x178], 1
mov ecx, 0x457b09
test ecx, ecx
jne 0x41a4fe
mov dword [ebp - 0xbc4], 0
jmp 0x41a511
push 0x457b09
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0xbc4], eax
mov edx, dword [ebp - 0xbc4]
push edx
push 0x457b09
lea ecx, [ebp - 0x174]
call fcn.004091b0
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x160], 0
lea eax, [ebp - 0x178]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x17c], 0
jmp 0x41a57a
mov ecx, dword [ebp - 0x17c]
add ecx, 1
mov dword [ebp - 0x17c], ecx
mov edx, dword [ebp - 0x17c]
cmp edx, dword [ebp - 0x15c]
jge 0x41ab81
cmp dword [ebp - 0x17c], 0
jle 0x41a5ed
mov dword [ebp - 0x178], 2
mov eax, 0x458bfc
test eax, eax
jne 0x41a5b4
mov dword [ebp - 0xbec], 0
jmp 0x41a5c7
push 0x458bfc
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0xbec], eax
mov ecx, dword [ebp - 0xbec]
push ecx
push 0x458bfc
lea ecx, [ebp - 0x174]
call fcn.004091b0
lea edx, [ebp - 0x178]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x178], 3
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x174]
call fcn.00408fe0
mov dword [ebp - 0x16c], 1
lea ecx, [ebp - 0x178]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x188], 0
jmp 0x41a63a
mov edx, dword [ebp - 0x188]
add edx, 1
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x15c]
add eax, 2
cmp dword [ebp - 0x188], eax
jge 0x41a836
mov dword [ebp - 0x178], 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0043ddf4
add esp, 4
call fcn.0043de06
cdq
mov ecx, 7
idiv ecx
add edx, 3
push edx
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x174]
call fcn.00408fe0
lea ecx, [ebp - 0x178]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
cmp dword [ebp - 0x17c], 0
jne 0x41a727
cmp dword [ebp - 0x188], 0
jne 0x41a727
mov edx, 0x458c28
test edx, edx
jne 0x41a6cf
mov dword [ebp - 0xc5c], 0
jmp 0x41a6e2
push 0x458c28
call fcn.0043d1f0
add esp, 4
mov dword [ebp - 0xc5c], eax
mov eax, dword [ebp - 0xc5c]
push eax
push 0x458c28
lea ecx, [ebp - 0x174]
call fcn.004091b0
lea ecx, [ebp - 0x178]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
push 0x458c28
lea ecx, [ebp - 0x174]
call fcn.0041c7c0
lea edx, [ebp - 0x178]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x178], 4
mov dword [ebp - 0x16c], 1
push str.http:__v.baidu.com_tv_
lea ecx, [ebp - 0x174]
call fcn.0041c7c0
mov dword [ebp - 0x170], 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x3c
jbe 0x41a785
mov dword [ebp - 0x168], 1
mov dword [ebp - 0x164], 0xa
jmp 0x41a7d1
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x3c
ja 0x41a7bd
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x19
jbe 0x41a7bd
mov dword [ebp - 0x168], 0xb
mov dword [ebp - 0x164], 0x28
jmp 0x41a7d1
mov dword [ebp - 0x168], 0x29
mov dword [ebp - 0x164], 0xc8
mov dword [ebp - 0x160], 0
lea edx, [ebp - 0x178]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x178], 2
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 0xa
div ecx
push edx
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
push 0x458be0
lea ecx, [ebp - 0x174]
call fcn.0041c7c0
lea eax, [ebp - 0x178]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
jmp 0x41a62b
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x18c], 0
jmp 0x41a865
mov ecx, dword [ebp - 0x18c]
add ecx, 1
mov dword [ebp - 0x18c], ecx
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x18c]
cmp eax, dword [edx]
jge 0x41ab7c
mov dword [ebp - 0x180], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0043ddf4
add esp, 4
call fcn.0043de06
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x190], 0
lea ecx, [ebp - 0x178]
call fcn.0041b560
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 5
jae 0x41a8e8
cmp dword [ebp - 0x184], 0
jne 0x41a8e8
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x4b0
div ecx
add edx, 0x708
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x184], 1
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0xf
jae 0x41a924
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 5
jb 0x41a924
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x4b0
div ecx
add edx, 0x4b0
mov dword [ebp - 0x190], edx
jmp 0x41a978
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0xf
jbe 0x41a960
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x64
div ecx
cmp edx, 0x28
ja 0x41a960
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x258
div ecx
add edx, 0x384
mov dword [ebp - 0x190], edx
jmp 0x41a978
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x12c
div ecx
add edx, 0x258
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x178], 4
mov dword [ebp - 0x16c], 2
mov edx, dword [ebp - 0x18c]
mov dword [ebp - 0xc8c], edx
cmp dword [ebp - 0xc8c], 0
je 0x41a9a3
jmp 0x41a9db
push str._link_url
lea ecx, [ebp - 0x174]
call fcn.0041c7c0
mov dword [ebp - 0x170], 0
lea eax, [ebp - 0x178]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x180], 1
jmp 0x41aa6f
mov ecx, dword [ebp - 0x18c]
and ecx, 0x80000001
jns 0x41a9ee
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
jne 0x41aa1d
push str..htm_frp
lea ecx, [ebp - 0x174]
call fcn.0041c7c0
mov dword [ebp - 0x170], 6
lea edx, [ebp - 0x178]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
jmp 0x41aa46
push str._tv_
lea ecx, [ebp - 0x174]
call fcn.0041c7c0
mov dword [ebp - 0x170], 5
lea eax, [ebp - 0x178]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x178], 2
push 0x458bbc
lea ecx, [ebp - 0x174]
call fcn.0041c7c0
lea ecx, [ebp - 0x178]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
sub eax, 1
cmp dword [ebp - 0x18c], eax
je 0x41aa8c
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp - 0x18c]
cmp edx, dword [ecx]
jne 0x41aadf
mov dword [ebp - 0x178], 4
push str._link_url
lea ecx, [ebp - 0x174]
call fcn.0041c7c0
mov dword [ebp - 0x170], 3
mov dword [ebp - 0x168], 1
mov dword [ebp - 0x164], 0x64
lea eax, [ebp - 0x178]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x180], 1
jmp 0x41aaf2
cmp dword [ebp - 0x184], 0
je 0x41aaf2
mov dword [ebp - 0x184], 0
lea ecx, [ebp - 0x178]
call fcn.0041b560
mov dword [ebp - 0x178], 2
push 0x458bbc
lea ecx, [ebp - 0x174]
call fcn.0041c7c0
lea ecx, [ebp - 0x178]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
cmp dword [ebp - 0x180], 1
jne 0x41ab77
mov dword [ebp - 0x178], 2
mov edx, dword [ebp - 0x190]
push edx
push 0x4586bc
lea eax, [ebp - 0x10]
push eax
call fcn.00409590
add esp, 0xc
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x174]
call fcn.0041c7a0
lea edx, [ebp - 0x178]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x41a856
jmp 0x41a56b
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x178]
call fcn.004067f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x158]
call fcn.00408e50
jmp 0x41b475
cmp dword [ebp + 0x18], 5
jne 0x41b297
push 0
call fcn.0041b5f0
add esp, 4
push eax
call fcn.0043ddf4
add esp, 4
call fcn.0043de06
cdq
mov ecx, 0x46
idiv ecx
cmp edx, 0x3c
jge 0x41b292
cmp dword [0x46c38c], 0
jne 0x41b292
mov dword [0x469194], 0x480
mov dword [0x469198], 0x41a
lea ecx, [ebp - 0x1b4]
call fcn.0041b500
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x1b4], 1
push 0x457b09
lea ecx, [ebp - 0x1b0]
call fcn.0041c7c0
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0
lea edx, [ebp - 0x1b4]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x1b4], 2
push 0x458bfc
lea ecx, [ebp - 0x1b0]
call fcn.0041c7c0
lea eax, [ebp - 0x1b4]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x1b4], 3
mov ecx, dword [ebp + 0xc]
push ecx
lea ecx, [ebp - 0x1b0]
call fcn.0041c7a0
mov dword [ebp - 0x1a8], 1
lea edx, [ebp - 0x1b4]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x1b4], 2
call fcn.0043de06
cdq
mov ecx, 6
idiv ecx
add edx, 0xa
push edx
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x1b0]
call fcn.0041c7a0
lea ecx, [ebp - 0x1b4]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
call fcn.0043de06
cdq
mov ecx, 0x65
idiv ecx
mov dword [ebp - 0x194], edx
mov dword [ebp - 0x198], 0
cmp dword [ebp - 0x194], 0x5f
jge 0x41ad2f
mov dword [ebp - 0x198], 1
jmp 0x41ad39
mov dword [ebp - 0x198], 2
call fcn.0043de06
cdq
idiv dword [ebp - 0x198]
mov eax, dword [ebp + 0x14]
mov dword [eax], edx
mov dword [ebp - 0x1b8], 0
jmp 0x41ad65
mov ecx, dword [ebp - 0x1b8]
add ecx, 1
mov dword [ebp - 0x1b8], ecx
mov edx, dword [ebp - 0x1b8]
cmp edx, dword [ebp - 0x198]
jge 0x41b283
mov dword [ebp - 0x1b4], 4
mov dword [ebp - 0x1a8], 1
push str.http:__v.baidu.com_link_url
lea ecx, [ebp - 0x1b0]
call fcn.0041c7c0
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a4], 1
mov dword [ebp - 0x1a0], 0xf
mov dword [ebp - 0x19c], 0
lea eax, [ebp - 0x1b4]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x1b4], 2
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 6
div ecx
add edx, 0xa
push edx
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x1b0]
call fcn.0041c7a0
lea ecx, [ebp - 0x1b4]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
call fcn.0043de06
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x1b4]
call fcn.0041b560
mov dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x65
div ecx
mov dword [ebp - 0x194], edx
cmp dword [ebp - 0x194], 5
jge 0x41ae70
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x709
div ecx
add edx, 0x708
mov dword [ebp - 0x1bc], edx
jmp 0x41af64
cmp dword [ebp - 0x194], 0x14
jge 0x41ae9f
cmp dword [ebp - 0x194], 5
jl 0x41ae9f
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x12d
div ecx
add edx, 0x5dc
mov dword [ebp - 0x1bc], edx
jmp 0x41af64
cmp dword [ebp - 0x194], 0x32
jge 0x41aece
cmp dword [ebp - 0x194], 0x14
jl 0x41aece
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x12d
div ecx
add edx, 0x4b0
mov dword [ebp - 0x1bc], edx
jmp 0x41af64
cmp dword [ebp - 0x194], 0x50
jge 0x41aefa
cmp dword [ebp - 0x194], 0x32
jl 0x41aefa
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x259
div ecx
add edx, 0x258
mov dword [ebp - 0x1bc], edx
jmp 0x41af64
cmp dword [ebp - 0x194], 0x5f
jge 0x41af26
cmp dword [ebp - 0x194], 0x50
jl 0x41af26
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x12d
div ecx
add edx, 0x12c
mov dword [ebp - 0x1bc], edx
jmp 0x41af64
cmp dword [ebp - 0x194], 0x62
jge 0x41af4f
cmp dword [ebp - 0x194], 0x5f
jl 0x41af4f
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0xf1
div ecx
add edx, 0x3c
mov dword [ebp - 0x1bc], edx
jmp 0x41af64
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0xf1
div ecx
add edx, 0x3c
mov dword [ebp - 0x1bc], edx
mov dword [ebp - 0x1b4], 2
mov edx, dword [ebp - 0x1bc]
push edx
push 0x4586bc
lea eax, [ebp - 0x10]
push eax
call fcn.00409590
add esp, 0xc
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x1b0]
call fcn.0041c7a0
lea edx, [ebp - 0x1b4]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x1b4], 4
mov dword [ebp - 0x1a8], 2
call fcn.0043de06
cdq
mov ecx, 0x65
idiv ecx
cmp edx, 0x14
jge 0x41b276
call fcn.0043de06
cdq
mov ecx, 0x14
idiv ecx
mov dword [ebp - 0x194], edx
cmp dword [ebp - 0x194], 0xa
jge 0x41aff6
mov dword [ebp - 0x1c0], 1
jmp 0x41b010
call fcn.0043de06
and eax, 0x80000001
jns 0x41b007
dec eax
or eax, 0xfffffffe
inc eax
add eax, 2
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1c4], 0
jmp 0x41b02b
mov edx, dword [ebp - 0x1c4]
add edx, 1
mov dword [ebp - 0x1c4], edx
mov eax, dword [ebp - 0x1c4]
cmp eax, dword [ebp - 0x1c0]
jge 0x41b276
mov dword [ebp - 0x1b4], 0xa
lea ecx, [ebp - 0x1b4]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x1b4], 2
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 6
div ecx
add edx, 5
push edx
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x1b0]
call fcn.0041c7a0
lea ecx, [ebp - 0x1b4]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x1b4], 2
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, 6
div ecx
add edx, 5
push edx
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x1b0]
call fcn.0041c7a0
lea ecx, [ebp - 0x1b4]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
call fcn.0043de06
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x1b4]
call fcn.0041b560
mov dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x65
div ecx
mov dword [ebp - 0x194], edx
cmp dword [ebp - 0x194], 5
jge 0x41b13d
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x709
div ecx
add edx, 0x708
mov dword [ebp - 0x1c8], edx
jmp 0x41b231
cmp dword [ebp - 0x194], 0x14
jge 0x41b16c
cmp dword [ebp - 0x194], 5
jl 0x41b16c
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x12d
div ecx
add edx, 0x5dc
mov dword [ebp - 0x1c8], edx
jmp 0x41b231
cmp dword [ebp - 0x194], 0x32
jge 0x41b19b
cmp dword [ebp - 0x194], 0x14
jl 0x41b19b
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x12d
div ecx
add edx, 0x4b0
mov dword [ebp - 0x1c8], edx
jmp 0x41b231
cmp dword [ebp - 0x194], 0x50
jge 0x41b1c7
cmp dword [ebp - 0x194], 0x32
jl 0x41b1c7
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x259
div ecx
add edx, 0x258
mov dword [ebp - 0x1c8], edx
jmp 0x41b231
cmp dword [ebp - 0x194], 0x5f
jge 0x41b1f3
cmp dword [ebp - 0x194], 0x50
jl 0x41b1f3
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0x12d
div ecx
add edx, 0x12c
mov dword [ebp - 0x1c8], edx
jmp 0x41b231
cmp dword [ebp - 0x194], 0x62
jge 0x41b21c
cmp dword [ebp - 0x194], 0x5f
jl 0x41b21c
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0xf1
div ecx
add edx, 0x3c
mov dword [ebp - 0x1c8], edx
jmp 0x41b231
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, 0xf1
div ecx
add edx, 0x3c
mov dword [ebp - 0x1c8], edx
mov dword [ebp - 0x1b4], 2
mov edx, dword [ebp - 0x1c8]
push edx
push 0x4586bc
lea eax, [ebp - 0x10]
push eax
call fcn.00409590
add esp, 0xc
lea ecx, [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x1b0]
call fcn.0041c7a0
lea edx, [ebp - 0x1b4]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
jmp 0x41b01c
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x41ad56
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1b4]
call fcn.004067f0
jmp 0x41b475
cmp dword [ebp + 0x18], 6
jne 0x41b475
mov dword [0x469194], 0x400
mov dword [0x469198], 0x320
mov dword [ebp - 0x1cc], 0
jmp 0x41b2d0
mov eax, dword [ebp - 0x1cc]
add eax, 1
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x3e8
jge 0x41b475
lea ecx, [ebp - 0x1e8]
call fcn.0041b500
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1e8]
call fcn.0041b560
mov dword [ebp - 0x1e8], 1
push 0x457b09
lea ecx, [ebp - 0x1e4]
call fcn.0041c7c0
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 0
lea ecx, [ebp - 0x1e8]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x1e8], 2
push 5
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x1e4]
call fcn.0041c7a0
lea ecx, [ebp - 0x1e8]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x1e8], 3
mov edx, dword [ebp + 0xc]
push edx
lea ecx, [ebp - 0x1e4]
call fcn.0041c7a0
mov dword [ebp - 0x1dc], 1
lea eax, [ebp - 0x1e8]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x1e8], 2
push 0x34
push 0x4586bc
lea ecx, [ebp - 0x10]
push ecx
call fcn.00409590
add esp, 0xc
lea edx, [ebp - 0x10]
push edx
lea ecx, [ebp - 0x1e4]
call fcn.0041c7a0
lea eax, [ebp - 0x1e8]
push eax
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x1e8], 3
push str.about:blank
lea ecx, [ebp - 0x1e4]
call fcn.0041c7c0
mov dword [ebp - 0x1dc], 1
lea ecx, [ebp - 0x1e8]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov dword [ebp - 0x1e8], 2
push 3
push 0x4586bc
lea edx, [ebp - 0x10]
push edx
call fcn.00409590
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x1e4]
call fcn.0041c7a0
lea ecx, [ebp - 0x1e8]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1e8]
call fcn.004067f0
jmp 0x41b2c1
lea ecx, [ebp - 0x34]
call fcn.0041b500
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x34], 8
push 0x458b9c
lea ecx, [ebp - 0x30]
call fcn.0041c7c0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
lea edx, [ebp - 0x34]
push edx
mov ecx, dword [ebp + 8]
call fcn.0041b610
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call fcn.004067f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.00408e50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x1c]
call fcn.00408e50
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 0x18