Function at 0x41bef0
Capabilities:
Access peb ldr_data
Check http status code
Contain obfuscated stackstrings
Get ntdll base address
Move file
Reference http user-agent string

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d6b1d
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x498
push esi
push edi
mov eax, dword [0x8d0d94]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp - 0x2c8]
mov dword [ebp - 0x6c], 0
call fcn.0041df30
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1c0]
call fcn.00402730
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x270]
call fcn.00425f20
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3e0]
call fcn.00427a70
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x13c]
call fcn.004255d0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x320]
call fcn.00402730
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x320]
push str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_87.0.4280.141_Safari_537.36_r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9_image_avif_image_webp_image_apng___q0.8_application_signed_exchange_vb3_q0.9_r_nAccept_Language:_zh_CN_zh_q0.9
mov dword [ebp - method.CWString.virtual_0], vtable.CWString.0
call fcn.00449af0
mov byte [ebp - 4], 6
mov eax, dword [0x8d6be0]
push 1
mov dword [0x8d6b70], 0
push dword [eax + 0x2c2c]
call dword [0x8d71a4]
mov eax, dword [0x8d6be0]
push 0
push 8
push dword [eax + 0x298c]
call dword [0x8d7190]
mov eax, dword [ebp - 0x2c8]
lea ecx, [ebp - 0x2c8]
call dword [eax + 0x44]
mov esi, dword [ebx + 8]
lea ecx, [ebp - 0x2bc]
mov eax, dword [esi + 4]
mov dword [ebp - 0x2c4], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x2bc]
call dword [eax + 0x44]
mov eax, dword [esi + 0x10]
lea ecx, [ebp - 0x2ac]
mov dword [ebp - 0x2b8], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x2b4], eax
mov eax, dword [esi + 0x18]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2ac]
call dword [eax + 0x44]
lea eax, [esi + 0x1c]
push eax
lea ecx, [ebp - 0x2ac]
call fcn.00402cb0
mov eax, dword [esi + 0x38]
lea ecx, [ebp - 0x28c]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x28c]
call dword [eax + 0x44]
lea eax, [esi + 0x3c]
push eax
lea ecx, [ebp - 0x28c]
call fcn.00402cb0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x30]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x194]
call fcn.00402730
lea edx, [ebp - 0x194]
mov dword [ebp - 0x6c], 1
mov esi, eax
call fcn.00447190
push str.PsDownloads_
mov edx, esi
lea ecx, [ebp - 0x114]
call fcn.0044a2b0
add esp, 4
mov esi, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1c0]
mov edx, dword [ebp - 0x1c0]
call dword [edx + 0x44]
mov ecx, dword [esi + 4]
mov dword [ebp - 0x1bc], ecx
mov ecx, dword [esi + 8]
mov dword [ebp - 0x1b8], ecx
lea ecx, [ebp - 0x1b0]
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1b0]
call dword [eax + 0x44]
lea eax, [esi + 0x10]
push eax
lea ecx, [ebp - 0x1b0]
call fcn.00402cb0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x114]
call fcn.004027f0
mov eax, 1
mov dword [ebp - 0x6c], eax
and eax, 0xfffffffe
mov dword [ebp - 0x6c], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x194]
call fcn.004027f0
mov eax, dword [ebp - 0x1b4]
mov edi, 0x6cb22c
test eax, eax
jne 0x41c14d
cmp dword [ebp - 0x19c], 0
mov eax, edi
cmovne eax, dword [ebp - 0x1a4]
mov ecx, eax
call fcn.00447460
test eax, eax
jne 0x41c179
mov eax, dword [ebp - 0x1b4]
test eax, eax
jne 0x41c172
cmp dword [ebp - 0x19c], 0
mov eax, edi
cmovne eax, dword [ebp - 0x1a4]
mov ecx, eax
call fcn.00447280
lea ecx, [ebp - 0x114]
call fcn.00402730
mov byte [ebp - 4], 9
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x108], 0x6cb22c
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x168]
call fcn.00402730
mov byte [ebp - 4], 0xb
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x15c], 0x6cb22c
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xe8]
call fcn.00402730
mov byte [ebp - 4], 0xd
mov dword [ebp - 0xe8], vtable.CWConstString.0
mov dword [ebp - 0xdc], 0x6cb22c
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xbc]
call fcn.00402730
mov byte [ebp - 4], 0xf
mov dword [ebp - 0xbc], vtable.CWConstString.0
mov dword [ebp - 0xb0], 0x6cb22c
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x68]
call fcn.00402730
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x68], vtable.CWConstString.0
mov dword [ebp - 0x5c], 0x6cb22c
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x3c], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0x3c], vtable.CVolObject.0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x3c], vtable.rg_n402::rg_n2553.0
mov byte [ebp - 4], 0x14
push ecx
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x3c], vtable.rg_n402::rg_n2128.0
call fcn.00420d40
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x194]
call fcn.00402730
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x114]
or dword [ebp - 0x38], 1
or dword [eax + 4], 1
sub esp, 0xc
push ecx
lea ecx, [ebp - 0x168]
push ecx
lea ecx, [ebp - 0xe8]
push ecx
lea ecx, [ebp - 0xbc]
push ecx
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x3c]
push ecx
push eax
push 2
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x4a0]
push eax
lea ecx, [ebp - 0x270]
call fcn.00426270
mov esi, eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3e0]
mov edx, dword [ebp - 0x3e0]
call dword [edx + 0x44]
push esi
lea ecx, [ebp - 0x3e0]
call fcn.00412b40
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x4a0]
call fcn.00412c20
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x194]
call fcn.004027f0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x30]
call fcn.00420bb0
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x3c], vtable.CVolObject.0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x68]
call fcn.004027f0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xbc]
call fcn.004027f0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xe8]
call fcn.004027f0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x168]
call fcn.004027f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x114]
call fcn.004027f0
cmp dword [ebp - 0x330], 0xc8
je 0x41c6a1
mov eax, dword [0x8d6be0]
push 0
push dword [eax + 0x2c2c]
call dword [0x8d71a4]
mov dword [ebp - 0x58], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0x58], vtable.CVolObject.0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x58], vtable.CVolMem.0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x40], 0x40
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x3c]
call fcn.00402730
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], 0x6cca70
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x168]
call fcn.00402730
mov byte [ebp - 4], 0x25
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x15c], 0x6ccf70
mov byte [ebp - 4], 0x26
mov dword [ebp - 0xac], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0xac], vtable.CVolObject.0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
mov byte [ebp - 4], 0x27
mov dword [ebp - 0xac], vtable.CVolMem.0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x94], 0x40
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x114]
call fcn.00402730
mov byte [ebp - 4], 0x29
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x108], 0x6ccb48
mov byte [ebp - 4], 0x2a
mov dword [ebp - 0xd8], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0xd8], vtable.CVolObject.0
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xd0], 0
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0xd8], vtable.CVolMem.0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc0], 0x40
mov byte [ebp - 4], 0x2c
sub esp, 8
or dword [ebp - 0x54], 1
lea eax, [ebp - 0x58]
or dword [ebp - 0xa8], 1
lea edx, [ebp - 0x114]
or dword [ebp - 0xd4], 1
push eax
sub esp, 0xc
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xd8]
call fcn.00404980
mov byte [ebp - 4], 0x2a
mov dword [ebp - 0xd8], vtable.CVolMem.0
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0xcc]
test ecx, ecx
je 0x41c584
mov eax, dword [ebp - 0xd8]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, method.CWString.virtual_12
jne 0x41c57c
mov ecx, 0x8d6ba8
call fcn.004491c0
jmp 0x41c584
lea ecx, [ebp - 0xd8]
call eax
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc8], 0
mov byte [ebp - 4], 0x2a
mov dword [ebp - 0xd8], vtable.CVolObject.0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x114]
call fcn.004027f0
mov byte [ebp - 4], 0x26
mov dword [ebp - 0xac], vtable.CVolMem.0
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0xa0]
test ecx, ecx
je 0x41c600
mov eax, dword [ebp - 0xac]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, method.CWString.virtual_12
jne 0x41c5f8
mov ecx, 0x8d6ba8
call fcn.004491c0
jmp 0x41c600
lea ecx, [ebp - 0xac]
call eax
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x9c], 0
mov byte [ebp - 4], 0x26
mov dword [ebp - 0xac], vtable.CVolObject.0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x168]
call fcn.004027f0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x3c]
call fcn.004027f0
mov byte [ebp - 4], 6
mov dword [ebp - 0x58], vtable.CVolMem.0
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x41c67c
mov eax, dword [ebp - 0x58]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, method.CWString.virtual_12
jne 0x41c677
mov ecx, 0x8d6ba8
call fcn.004491c0
jmp 0x41c67c
lea ecx, [ebp - 0x58]
call eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov byte [ebp - 4], 6
mov dword [ebp - 0x58], vtable.CVolObject.0
jmp 0x41d718
mov dword [ebp - method.CWString.virtual_0], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x210], 0
mov byte [ebp - 4], 0x33
mov dword [ebp - method.CWString.virtual_0], vtable.rg_n402::rg_n2553.0
mov byte [ebp - 4], 0x34
push ecx
lea ecx, [ebp - 0x20c]
mov dword [ebp - method.CWString.virtual_0], vtable.rg_n402::rg_n2128.0
call fcn.00420d40
mov byte [ebp - 4], 0x36
xorps xmm0, xmm0
mov dword [ebp - 0xcc], vtable.CVolCommonBaseWithMemManager.0
movlpd qword [ebp - 0x90], xmm0
mov dword [ebp - 0xcc], vtable.CVolObject.0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
mov byte [ebp - 4], 0x37
mov dword [ebp - 0xcc], vtable.rg_n8373::rg_n8382.0
call dword [sym.imp.DeelxToolx86.dll_DeelxTool_Create]
mov esi, eax
mov dword [ebp - 0xc0], esi
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x1ec]
call fcn.00402730
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xbc]
call fcn.00402730
mov byte [ebp - 4], 0x3a
mov dword [ebp - 0xbc], vtable.CWConstString.0
mov dword [ebp - 0xb0], str.Content_Length:__d_
mov byte [ebp - 4], 0x3b
xor ecx, ecx
cmp dword [ebp - 0x368], ecx
mov eax, dword [ebp - 0x370]
cmove eax, ecx
lea ecx, [ebp - 0x68]
mov edx, dword [eax + 0x10]
call fcn.00402730
mov byte [ebp - 4], 0x3c
test edx, edx
mov eax, edi
mov dword [ebp - 0x68], vtable.CWString.0
cmovne eax, edx
lea ecx, [ebp - 0x68]
push eax
call fcn.00449af0
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0xb0]
test ecx, ecx
jne 0x41c7d3
cmp dword [ebp - 0x98], 0
mov ecx, edi
cmovne ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x5c]
test eax, eax
jne 0x41c7e4
cmp dword [ebp - 0x44], 0
mov eax, edi
cmovne eax, dword [ebp - 0x4c]
push 4
push ecx
push eax
push esi
call dword [sym.imp.DeelxToolx86.dll_DeelxTool_Match]
mov esi, eax
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x68]
call fcn.004027f0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xbc]
call fcn.004027f0
push esi
call dword [sym.imp.DeelxToolx86.dll_DeelxTool_IsMatch]
test eax, eax
je 0x41c8ea
nop dword [eax + eax]
push 1
push esi
call dword [sym.imp.DeelxToolx86.dll_DeelxTool_GetGrounpText]
lea ecx, [ebp - 0x3c]
mov edx, eax
call fcn.00402730
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x3c]
push edx
mov dword [ebp - 0x3c], vtable.CWString.0
call fcn.00449af0
mov byte [ebp - 4], 0x40
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x41c85c
cmp dword [ebp - 0x18], 0
mov eax, edi
cmovne eax, dword [ebp - 0x20]
mov ecx, eax
call fcn.00449530
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], edx
mov byte [ebp - 4], 0x41
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x2c], vtable.CVolMem.0
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x41c8a7
mov eax, dword [ebp - 0x2c]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, method.CWString.virtual_12
jne 0x41c8a2
mov ecx, 0x8d6ba8
call fcn.004491c0
jmp 0x41c8a7
lea ecx, [ebp - 0x2c]
call eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov byte [ebp - 4], 0x41
mov dword [ebp - 0x2c], vtable.CVolObject.0
mov byte [ebp - 4], 0x39
push esi
mov dword [ebp - 0x3c], vtable.CVolObject.0
call dword [sym.imp.DeelxToolx86.dll_DeelxTool_MatchNext]
push esi
call dword [sym.imp.DeelxToolx86.dll_DeelxTool_IsMatch]
test eax, eax
jne 0x41c820
jmp 0x41c8fc
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x74], eax
lea ecx, [ebp - 0x3c]
call fcn.00402730
mov byte [ebp - 4], 0x44
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], 0x6ccfb8
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x30]
test ecx, ecx
jne 0x41c92b
cmp dword [ebp - 0x18], 0
mov ecx, edi
cmovne ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2b0]
test eax, eax
jne 0x41c945
cmp dword [ebp - 0x298], 0
mov eax, edi
cmovne eax, dword [ebp - 0x2a0]
sub esp, 8
lea edx, [ebp - 0x20c]
push ecx
mov ecx, eax
call fcn.00446950
add esp, 0xc
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x3c]
call fcn.004027f0
mov ecx, dword [ebp - 0x1f4]
xor esi, esi
mov eax, dword [ebp - 0x1fc]
mov edx, ecx
shr edx, 2
test ecx, ecx
lea ecx, [ebp - 0x114]
cmove eax, esi
mov edx, dword [eax + edx*4 - 4]
call fcn.00402730
mov byte [ebp - 4], 0x47
test edx, edx
mov eax, edi
mov dword [ebp - method.CWString.virtual_0], vtable.CWString.0
cmovne eax, edx
lea ecx, [ebp - 0x114]
push eax
call fcn.00449af0
mov byte [ebp - 4], 0x48
lea eax, [ebp - 0x114]
push eax
lea edx, [ebp - 0x1c0]
lea ecx, [ebp - 0x168]
call fcn.0044a130
mov byte [ebp - 4], 0x49
mov edx, eax
push 0x6ccfbc
lea ecx, [ebp - 0x194]
call fcn.0044a2b0
add esp, 8
mov esi, eax
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x1ec]
mov edx, dword [ebp - 0x1ec]
call dword [edx + 0x44]
mov ecx, dword [esi + 4]
mov dword [ebp - 0x1e8], ecx
mov ecx, dword [esi + 8]
mov dword [ebp - 0x1e4], ecx
lea ecx, [ebp - 0x1dc]
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1dc]
call dword [eax + 0x44]
lea eax, [esi + 0x10]
push eax
lea ecx, [ebp - 0x1dc]
call fcn.00402cb0
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x194]
call fcn.004027f0
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x168]
call fcn.004027f0
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x114]
call fcn.004027f0
mov ecx, dword [0x8d6be0]
mov dword [ebp - 0x90], ecx
mov eax, dword [ecx + 0x2eb4]
cmp dword [eax + 0x14], 0
jne 0x41cb11
mov esi, eax
mov eax, dword [esi + 0x14]
test eax, eax
je 0x41ca90
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x14], 0
mov ecx, dword [ebp - 0x1e0]
mov edx, dword [ebp - 0x1c8]
test ecx, ecx
je 0x41caaa
xor eax, eax
cmp word [ecx], ax
sete al
jmp 0x41cab2
xor eax, eax
cmp edx, 2
setle al
test eax, eax
jne 0x41cb11
mov dword [ebp - 0x224], 0xc
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], 1
test ecx, ecx
jne 0x41cadf
test edx, edx
mov ecx, edi
cmovne ecx, dword [ebp - 0x1d0]
push 0
push 0x80
push 4
lea eax, [ebp - 0x224]
push eax
push 3
push 0x40000000
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x41cb11
mov ecx, dword [ebp - 0x90]
mov ecx, dword [ecx + 0x2eb4]
mov dword [ecx + 0x14], eax
mov esi, dword [0x8d6be0]
push 0
push 0x400
push dword [ebp - 0x70]
push dword [ebp - 0x74]
call fcn.005a7950
mov ecx, eax
call fcn.005a7740
call fcn.00447010
push eax
push 0xa
push dword [esi + 0x298c]
call dword [0x8d7190]
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x13c]
call fcn.004259c0
mov esi, dword [ebp - 0x128]
mov eax, dword [esi + 8]
test eax, eax
jne 0x41cb6b
call fcn.00552140
mov dword [esi + 8], eax
push 0
push 0x2711
push eax
call fcn.00556000
add esp, 0xc
test eax, eax
jne 0x41cba1
mov eax, dword [esi + 8]
test eax, eax
jne 0x41cb8e
call fcn.00552140
mov dword [esi + 8], eax
push 0x41d8e0
push 0x4e2b
push eax
call fcn.00556000
add esp, 0xc
mov esi, dword [ebp - 0x128]
mov eax, dword [esi + 8]
test eax, eax
jne 0x41cbb6
call fcn.00552140
mov dword [esi + 8], eax
push 0
push 0x2b
push eax
call fcn.00556000
mov esi, dword [ebp - 0x128]
add esp, 0xc
mov eax, dword [esi + 8]
test eax, eax
jne 0x41cbd8
call fcn.00552140
mov dword [esi + 8], eax
lea ecx, [ebp - 0x13c]
push ecx
push 0x2749
push eax
call fcn.00556000
add esp, 0xc
test eax, eax
jne 0x41cc13
mov eax, dword [esi + 8]
test eax, eax
jne 0x41cc00
call fcn.00552140
mov dword [esi + 8], eax
push 0x424bb0
push 0x4efb
push eax
call fcn.00556000
add esp, 0xc
mov ecx, dword [0x8d6be0]
mov esi, dword [ebp - 0x128]
add ecx, 0x2ea8
call fcn.00429800
mov dword [ebp - 0x8c], eax
mov eax, dword [esi + 8]
test eax, eax
jne 0x41cc3f
call fcn.00552140
mov dword [esi + 8], eax
push dword [ebp - 0x8c]
push 0x2749
push eax
call fcn.00556000
add esp, 0xc
test eax, eax
jne 0x41cc79
mov eax, dword [esi + 8]
test eax, eax
jne 0x41cc66
call fcn.00552140
mov dword [esi + 8], eax
push 0x41d9f0
push 0x4efb
push eax
call fcn.00556000
add esp, 0xc
mov dword [ebp - method.CWString.virtual_0], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x2ec], 0
mov byte [ebp - 4], 0x4b
mov dword [ebp - method.CWString.virtual_0], vtable.rg_n402::rg_n2553.0
mov byte [ebp - 4], 0x4c
push ecx
lea ecx, [ebp - 0x2e8]
mov dword [ebp - method.CWString.virtual_0], vtable.rg_n402::rg_n2128.0
call fcn.00420d40
mov byte [ebp - 4], 0x4e
mov eax, dword [ebp - 0x314]
test eax, eax
jne 0x41cce7
cmp dword [ebp - 0x2fc], 0
mov eax, edi
cmovne eax, dword [ebp - 0x304]
push eax
lea eax, [ebp - 0x2e8]
push 1
push eax
call fcn.0041e190
mov esi, dword [ebp - 0x128]
add esp, 0xc
mov eax, dword [esi + 0xc]
test eax, eax
je 0x41cd1c
push eax
call fcn.00556110
mov dword [esi + 0xc], 0
add esp, 4
mov esi, dword [ebp - 0x128]
lea ecx, [ebp - 0x2e8]
call fcn.0044a830
mov dword [esi + 0xc], eax
mov esi, dword [ebp - 0x128]
mov eax, dword [esi + 8]
test eax, eax
jne 0x41cd3f
call fcn.00552140
mov dword [esi + 8], eax
push dword [esi + 0xc]
push 0x2727
push eax
call fcn.00556000
mov ecx, dword [0x8d6be0]
add esp, 0xc
add ecx, 0x2ea8
call fcn.00429800
or eax, edx
jne 0x41ce76
mov dword [ebp - 0x3c], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0x3c], vtable.CVolObject.0
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 0x4f
mov dword [ebp - 0x3c], vtable.rg_n402::rg_n2553.0
mov byte [ebp - 4], 0x50
push ecx
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x3c], vtable.rg_n402::rg_n2128.0
call fcn.00420d40
mov byte [ebp - 4], 0x52
mov dword [ebp - 0x58], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0x58], vtable.CVolObject.0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov byte [ebp - 4], 0x53
mov dword [ebp - 0x58], vtable.CVolMem.0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x40], 0x40
mov byte [ebp - 4], 0x54
lea eax, [ebp - 0x3c]
or dword [ebp - 0x38], 1
lea ecx, [ebp - 0x13c]
or dword [ebp - 0x54], 1
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00425ba0
mov byte [ebp - 4], 0x52
mov dword [ebp - 0x58], vtable.CVolMem.0
mov byte [ebp - 4], 0x55
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x41ce37
mov eax, dword [ebp - 0x58]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, method.CWString.virtual_12
jne 0x41ce32
mov ecx, 0x8d6ba8
call fcn.004491c0
jmp 0x41ce37
lea ecx, [ebp - 0x58]
call eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov byte [ebp - 4], 0x52
mov dword [ebp - 0x58], vtable.CVolObject.0
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x30]
call fcn.00420bb0
mov byte [ebp - 4], 0x4e
mov esi, dword [ebp - 0x70]
mov dword [ebp - 0x3c], vtable.CVolObject.0
jmp 0x41d48e
mov ecx, dword [0x8d6be0]
lea ecx, [ecx + 0x2ea8]
call fcn.00429800
mov esi, dword [ebp - 0x70]
cmp edx, esi
jg 0x41d1a9
jl 0x41ce9d
cmp eax, dword [ebp - 0x74]
jae 0x41d1a9
lea ecx, [ebp - 0x168]
call fcn.00402730
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x168]
push esi
push dword [ebp - 0x74]
mov dword [ebp - method.CWString.virtual_0], vtable.CWString.0
call fcn.004498d0
mov byte [ebp - 4], 0x5a
mov ecx, dword [0x8d6be0]
lea ecx, [ecx + 0x2ea8]
call fcn.00429800
lea ecx, [ebp - 0x114]
mov esi, eax
call fcn.00402730
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x114]
push edx
push esi
mov dword [ebp - method.CWString.virtual_0], vtable.CWString.0
call fcn.004498d0
mov byte [ebp - 4], 0x5c
lea edx, [ebp - 0x114]
push 0x6ccfc8
lea ecx, [ebp - 0x68]
call fcn.0044a2b0
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x168]
push ecx
mov edx, eax
lea ecx, [ebp - 0x194]
call fcn.0044a130
add esp, 8
mov byte [ebp - 4], 0x5e
xor ecx, ecx
mov edx, dword [eax + 0xc]
test edx, edx
je 0x41cf49
cmp word [edx], cx
sete cl
jmp 0x41cf50
cmp dword [eax + 0x24], 2
setle cl
test ecx, ecx
je 0x41cf58
xor esi, esi
jmp 0x41cfc6
mov dword [ebp - 0x2c], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0x2c], vtable.CVolObject.0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov byte [ebp - 4], 0x5f
mov dword [ebp - 0x2c], vtable.CVolMem.0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x14], 0x40
mov byte [ebp - 4], 0x60
or dword [ebp - 0x6c], 2
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x41cfb7
cmp dword [eax + 0x24], ecx
mov ecx, 0x6cb22c
je 0x41cfb7
mov ecx, dword [eax + 0x1c]
push 0
lea edx, [ebp - 0x2c]
call fcn.00447a10
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x8c], eax
mov eax, dword [eax + 8]
test eax, eax
jne 0x41cfe7
call fcn.00552140
mov ecx, dword [ebp - 0x8c]
mov dword [ecx + 8], eax
push esi
push 0x2717
push eax
call fcn.00556000
add esp, 0xc
mov dword [ebp - 4], 0x5e
mov eax, dword [ebp - 0x6c]
test al, 2
je 0x41d05b
and eax, 0xfffffffd
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x2c], vtable.CVolMem.0
mov byte [ebp - 4], 0x61
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x41d03b
mov eax, dword [ebp - 0x2c]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, method.CWString.virtual_12
jne 0x41d036
mov ecx, 0x8d6ba8
call fcn.004491c0
jmp 0x41d03b
lea ecx, [ebp - 0x2c]
call eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov byte [ebp - 4], 0x5e
mov dword [ebp - 0x2c], vtable.CVolObject.0
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x194]
call fcn.004027f0
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x68]
call fcn.004027f0
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x114]
call fcn.004027f0
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x168]
call fcn.004027f0
mov dword [ebp - 0x3c], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0x3c], vtable.CVolObject.0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov byte [ebp - 4], 0x62
mov dword [ebp - 0x3c], vtable.rg_n402::rg_n2553.0
mov byte [ebp - 4], 0x63
push ecx
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x3c], vtable.rg_n402::rg_n2128.0
call fcn.00420d40
mov byte [ebp - 4], 0x65
mov dword [ebp - 0x58], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0x58], vtable.CVolObject.0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov byte [ebp - 4], 0x66
mov dword [ebp - 0x58], vtable.CVolMem.0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x40], 0x40
mov byte [ebp - 4], 0x67
lea eax, [ebp - 0x3c]
or dword [ebp - 0x38], 1
lea ecx, [ebp - 0x13c]
or dword [ebp - 0x54], 1
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00425ba0
mov byte [ebp - 4], 0x65
mov dword [ebp - 0x58], vtable.CVolMem.0
mov byte [ebp - 4], 0x68
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x41d16a
mov eax, dword [ebp - 0x58]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, method.CWString.virtual_12
jne 0x41d165
mov ecx, 0x8d6ba8
call fcn.004491c0
jmp 0x41d16a
lea ecx, [ebp - 0x58]
call eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov byte [ebp - 4], 0x65
mov dword [ebp - 0x58], vtable.CVolObject.0
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0x30]
call fcn.00420bb0
mov byte [ebp - 4], 0x4e
mov esi, dword [ebp - 0x70]
mov dword [ebp - 0x3c], vtable.CVolObject.0
jmp 0x41d48e
mov dword [ebp - 0x2c], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0x2c], vtable.CVolObject.0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov byte [ebp - 4], 0x6c
mov dword [ebp - 0x2c], vtable.CVolMem.0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x14], 0x40
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x194]
call fcn.00402730
mov byte [ebp - 4], 0x6e
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x188], 0x6cca70
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x168]
call fcn.00402730
mov byte [ebp - 4], 0x70
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x15c], 0x6ccfcc
mov byte [ebp - 4], 0x71
mov dword [ebp - 0xac], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0xac], vtable.CVolObject.0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
mov byte [ebp - 4], 0x72
mov dword [ebp - 0xac], vtable.CVolMem.0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x94], 0x40
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0x114]
call fcn.00402730
mov byte [ebp - 4], 0x74
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x108], 0x6ccb48
mov byte [ebp - 4], 0x75
mov dword [ebp - 0x58], vtable.CVolCommonBaseWithMemManager.0
mov dword [ebp - 0x58], vtable.CVolObject.0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov byte [ebp - 4], 0x76
mov dword [ebp - 0x58], vtable.CVolMem.0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x40], 0x40
mov byte [ebp - 4], 0x77
sub esp, 8
or dword [ebp - 0x28], 1
lea eax, [ebp - 0x2c]
or dword [ebp - 0xa8], 1
lea edx, [ebp - 0x114]
or dword [ebp - 0x54], 1
lea ecx, [ebp - 0x58]
push eax
sub esp, 0xc
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.00404980
mov byte [ebp - 4], 0x75
mov dword [ebp - 0x58], vtable.CVolMem.0
mov byte [ebp - 4], 0x78
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x41d37f
mov eax, dword [ebp - 0x58]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, method.CWString.virtual_12
jne 0x41d37a
mov ecx, 0x8d6ba8
call fcn.004491c0
jmp 0x41d37f
lea ecx, [ebp - 0x58]
call eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
mov byte [ebp - 4], 0x75
mov dword [ebp - 0x58], vtable.CVolObject.0
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0x114]
call fcn.004027f0
mov byte [ebp - 4], 0x71
mov dword [ebp - 0xac], vtable.CVolMem.0
mov byte [ebp - 4], 0x7a
mov ecx, dword [ebp - 0xa0]
test ecx, ecx
je 0x41d3ef
mov eax, dword [ebp - 0xac]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, method.CWString.virtual_12
jne 0x41d3e7
mov ecx, 0x8d6ba8
call fcn.004491c0
jmp 0x41d3ef
lea ecx, [ebp - 0xac]
call eax
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x9c], 0
mov byte [ebp - 4], 0x71
mov dword [ebp - 0xac], vtable.CVolObject.0
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x168]
call fcn.004027f0
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x194]
call fcn.004027f0
mov byte [ebp - 4], 0x4e
mov dword [ebp - 0x2c], vtable.CVolMem.0
mov byte [ebp - 4], 0x7d
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x41d46e
mov eax, dword [ebp - 0x2c]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, method.CWString.virtual_12
jne 0x41d469
mov ecx, 0x8d6ba8
call fcn.004491c0
jmp 0x41d46e
lea ecx, [ebp - 0x2c]
call eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov byte [ebp - 4], 0x4e
mov dword [ebp - 0x2c], vtable.CVolObject.0
mov ecx, dword [0x8d6be0]
lea ecx, [ecx + 0x2ea8]
call fcn.00429800
cmp eax, dword [ebp - 0x74]
jne 0x41d686
cmp edx, esi
jne 0x41d686
mov eax, dword [0x8d6be0]
mov esi, dword [eax + 0x2eb4]
mov eax, dword [esi + 0x14]
test eax, eax
je 0x41d4d0
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x14], 0
mov ecx, dword [ebp - 0x1f4]
xor esi, esi
mov eax, dword [ebp - 0x1fc]
mov edx, ecx
shr edx, 2
test ecx, ecx
lea ecx, [ebp - 0x194]
cmove eax, esi
mov edx, dword [eax + edx*4 - 4]
call fcn.00402730
mov byte [ebp - 4], 0x7e
test edx, edx
mov eax, edi
mov dword [ebp - method.CWString.virtual_0], vtable.CWString.0
cmovne eax, edx
lea ecx, [ebp - 0x194]
push eax
call fcn.00449af0
mov byte [ebp - 4], 0x7f
lea eax, [ebp - 0x194]
push eax
lea edx, [ebp - 0x1c0]
lea ecx, [ebp - 0x114]
call fcn.0044a130
add esp, 4
mov byte [ebp - 4], 0x80
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x41d54f
cmp dword [eax + 0x24], ecx
mov ecx, 0x6cb22c
je 0x41d54f
mov ecx, dword [eax + 0x1c]
mov eax, dword [ebp - 0x1e0]
test eax, eax
jne 0x41d569
cmp dword [ebp - 0x1c8], 0
mov eax, edi
cmovne eax, dword [ebp - 0x1d0]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x114]
call fcn.004027f0
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x194]
call fcn.004027f0
mov ecx, dword [ebp - 0x1f4]
xor esi, esi
mov eax, dword [ebp - 0x1fc]
mov edx, ecx
shr edx, 2
test ecx, ecx
lea ecx, [ebp - 0x114]
cmove eax, esi
mov edx, dword [eax + edx*4 - 4]
call fcn.00402730
mov byte [ebp - 4], 0x81
test edx, edx
lea ecx, [ebp - 0x114]
mov dword [ebp - method.CWString.virtual_0], vtable.CWString.0
cmovne edi, edx
push edi
call fcn.00449af0
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x194]
call fcn.00402730
mov byte [ebp - 4], 0x83
mov dword [ebp - method.CWString.virtual_0], vtable.CWConstString.0
mov dword [ebp - 0x188], str.browse:__
mov byte [ebp - 4], 0x84
lea eax, [ebp - 0x1c0]
push eax
lea edx, [ebp - 0x194]
lea ecx, [ebp - 0x3c]
call fcn.0044a130
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x114]
push ecx
mov edx, eax
lea ecx, [ebp - 0x168]
call fcn.0044a130
add esp, 8
mov byte [ebp - 4], 0x86
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x41d648
cmp dword [eax + 0x24], ecx
mov ecx, 0x6cb22c
je 0x41d648
mov ecx, dword [eax + 0x1c]
call fcn.004475b0
mov byte [ebp - 4], 0x85
lea ecx, [ebp - 0x168]
call fcn.004027f0
mov byte [ebp - 4], 0x84
lea ecx, [ebp - 0x3c]
call fcn.004027f0
mov byte [ebp - 4], 0x82
lea ecx, [ebp - 0x194]
call fcn.004027f0
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x114]
call fcn.004027f0
mov eax, dword [0x8d6be0]
push 0
push dword [eax + 0x2c2c]
call dword [0x8d71a4]
mov byte [ebp - 4], 0x88
lea ecx, [ebp - 0x2e8]
call fcn.00420bb0
mov byte [ebp - 4], 0x39
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x1ec]
call fcn.004027f0
mov byte [ebp - 4], 0x36
mov dword [ebp - 0xcc], vtable.rg_n8373::rg_n8382.0
mov byte [ebp - 4], 0x8b
push dword [ebp - 0xc0]
mov dword [ebp - 0xc8], 2
call dword [sym.imp.DeelxToolx86.dll_DeelxTool_Destory]
mov byte [ebp - 4], 0x36
mov dword [ebp - 0xcc], vtable.CVolObject.0
mov byte [ebp - 4], 0x8c
lea ecx, [ebp - 0x20c]
call fcn.00420bb0
mov byte [ebp - 4], 6
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x320]
call fcn.004027f0
mov byte [ebp - 4], 3
mov dword [ebp - method.CWString.virtual_0], vtable.rg_n7333::rg_n7334.1.0
mov dword [ebp - 0x130], vtable.rg_n7333::rg_n7334.0
mov byte [ebp - 4], 0x91
or dword [ebp - 0x138], 2
mov ecx, dword [ebp - 0x128]
test ecx, ecx
je 0x41d759
mov eax, dword [ecx]
call dword [eax + 0x20]
mov byte [ebp - 4], 0x90
mov ecx, dword [ebp - 0x11c]
test ecx, ecx
je 0x41d76c
mov eax, dword [ecx]
call dword [eax + 0x20]
mov byte [ebp - 4], 0x8f
mov eax, dword [ebp - 0x12c]
mov edi, dword [sym.imp.USER32.dll_RemovePropW]
mov dword [ebp - 0x130], vtable.IVolNoticeReceiver.0
test eax, eax
je 0x41d79e
push str._VOL_IVolNoticeReceiver
push eax
call edi
push dword [ebp - 0x12c]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov byte [ebp - 4], 3
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3e0]
call fcn.00412c20
mov byte [ebp - 4], 1
mov dword [ebp - method.CWString.virtual_0], vtable.rg_n7333::rg_n8076.0
mov byte [ebp - 4], 0x94
mov esi, dword [ebp - 0x22c]
or dword [ebp - 0x26c], 2
lea eax, [esi + 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esi]
mov ecx, esi
mov dword [esi + 0x3c], 0
call dword [eax + 0x20]
mov byte [ebp - 4], 0x93
mov ecx, dword [ebp - 0x234]
test ecx, ecx
je 0x41d805
mov eax, dword [ecx]
call dword [eax + 0x20]
mov byte [ebp - 4], 0x92
lea eax, [ebp - 0x264]
mov dword [ebp - 0x8c], eax
mov dword [ebp - method.CWString.virtual_0], vtable.rg_n7333::rg_n7334.1.0
mov dword [ebp - method.rg_n7333::rg_n7334.virtual_0], vtable.rg_n7333::rg_n7334.0
mov byte [ebp - 4], 0x97
or dword [ebp - 0x260], 2
mov ecx, dword [ebp - 0x250]
test ecx, ecx
je 0x41d843
mov eax, dword [ecx]
call dword [eax + 0x20]
mov byte [ebp - 4], 0x96
mov ecx, dword [ebp - 0x244]
test ecx, ecx
je 0x41d856
mov eax, dword [ecx]
call dword [eax + 0x20]
mov byte [ebp - 4], 0x95
mov eax, dword [ebp - 0x254]
mov dword [ebp - method.IVolNoticeReceiver.virtual_0], vtable.IVolNoticeReceiver.0
test eax, eax
je 0x41d882
push str._VOL_IVolNoticeReceiver
push eax
call edi
push dword [ebp - 0x254]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov byte [ebp - 4], 0x92
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 1
mov dword [ebp - method.CWString.virtual_0], vtable.CVolObject.0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c0]
call fcn.004027f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c8]
call fcn.00413160
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4