Function at 0x40a600
Capabilities:
Check for time delay via gettickcount
Create thread
Print debug messages

Disassembly:
push ebp
lea ebp, [esp - 0x2940]
mov eax, 0x2940
call fcn.0047f7e0
push 0xffffffffffffffff
push 0x4b0970
mov eax, dword fs:[0]
push eax
sub esp, 0x38
mov eax, dword [0x4f2888]
xor eax, ebp
mov dword [ebp + 0x293c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 0x2948]
push str._DOWN__Worker::Result_DownloadNext_Packet_pPacket_
mov esi, ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x380]
mov edi, dword [edi + 0xc]
xor ebx, ebx
mov dword [ebp - 0x20], edi
cmp eax, ebx
jne 0x40a688
mov ecx, dword [ecx + 0x25c4]
cmp ecx, ebx
je 0x40bd8d
push 0x4bce98
push 3
push ecx
call fcn.0040f260
add esp, 0xc
jmp 0x40bd8d
mov edx, dword [edi + 0xc]
mov ecx, dword [edi + 8]
mov dword [ebp + 0x2938], edx
mov edx, dword [eax + 0x10]
cmp edx, ecx
mov edx, dword [ebp + 0x2938]
mov dword [ebp + 0x2934], ecx
jne 0x40a6b8
mov ecx, dword [eax + 0x14]
cmp ecx, edx
je 0x40a763
mov ecx, dword [ebp + 0x2934]
mov eax, dword [esi + 8]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
cmp dword [eax + 0x25c4], ebx
je 0x40a6fb
push edx
push ecx
mov ecx, dword [eax + 0x380]
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0x10]
push edx
mov edx, dword [eax + 0x25c4]
push ecx
push 0x4bce18
push 4
push edx
call fcn.0040f260
add esp, 0x1c
push 0x10
call fcn.0042d6b0
add esp, 4
cmp eax, ebx
je 0x40a718
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov edi, eax
jmp 0x40a71a
xor edi, edi
push 0x20
lea eax, [ebp - 0x44]
push eax
push 0x322
mov ecx, edi
call fcn.004030d0
push edi
mov ecx, esi
call fcn.00406790
mov ecx, dword [esi + 8]
push ebx
call fcn.004120f0
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x25c4]
cmp eax, ebx
je 0x40bda1
push 0x4bcdf4
push 1
push eax
call fcn.0040f260
add esp, 0xc
jmp 0x40bda1
add eax, 0x2144
push ebx
push eax
call fcn.00420e10
add esp, 8
cmp dword [ebp + 0x294c], ebx
jle 0x40aac0
push 0x3f
lea edx, [ebp + 0x2779]
push ebx
push edx
mov byte [ebp + 0x2778], bl
call fcn.00480970
mov ecx, dword [esi + 8]
add esp, 0xc
push 7
call fcn.00418940
mov ecx, dword [esi + 8]
push eax
lea eax, [ebp - 0x10]
push eax
add ecx, 0x1fc
call fcn.00434fd4
mov ecx, dword [eax]
push ecx
lea edx, [ebp + 0x2778]
push 0x4bb294
push edx
call fcn.004809ea
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
add esp, 0xc
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40a7e9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
call fcn.0042f8f6
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40a803
push 0x80004005
call fcn.00401040
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], ebx
call fcn.0042f8f6
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40a82f
push 0x80004005
call fcn.00401040
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp + 0x294c]
mov eax, dword [esi + 8]
push ecx
mov ecx, dword [eax + 0x12bc]
lea edx, [ebp + 0x2778]
push edx
mov edx, dword [eax + 0x12b8]
push ecx
push edx
lea eax, [ebp - 0x24]
push str.http:__www.tple.co.kr_append_application_linkdown.php_useridx_I64dtrade_file_idx_sfile_type_d
push eax
mov byte [ebp - 4], 1
call fcn.00407880
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x25c4]
add esp, 0x18
cmp eax, ebx
je 0x40a88e
push 0x4bcd5c
push ebx
push eax
call fcn.0040f260
add esp, 0xc
lea ecx, [ebp - 0x34]
call fcn.00423d60
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x14]
push edx
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x18], esp
push eax
mov byte [ebp - 4], 2
mov dword [ebp - 0x10], eax
call fcn.004015b0
mov ecx, dword [ebp - 0x18]
add eax, 0x10
mov dword [ecx], eax
add esp, 4
lea ecx, [ebp - 0x34]
call fcn.00423ee0
cmp eax, ebx
jne 0x40a8e9
xor edx, edx
mov word [edi], dx
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x25c4]
cmp eax, ebx
je 0x40aa6c
mov ecx, dword [ebp - 0x14]
jmp 0x40aa5b
lea ecx, [ebp - 0x14]
call fcn.00407680
lea ecx, [ebp - 0x14]
call fcn.00407630
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx - 0xc]
cmp eax, ebx
jle 0x40aa49
push 0x4bcd58
push ecx
call fcn.0047fa95
add esp, 8
cmp eax, ebx
je 0x40a924
mov ecx, dword [ebp - 0x14]
sub eax, ecx
jns 0x40aa49
push 0x4bbaf4
lea ecx, [ebp]
call fcn.00406190
mov edx, dword [ebp - 0x14]
push edx
lea ecx, [ebp]
mov byte [ebp - 4], 3
call fcn.00406cd0
push ebx
lea ecx, [ebp]
call fcn.00406230
push eax
lea ecx, [ebp - 0x18]
call fcn.004021a0
lea ecx, [ebp - 0x1c]
call fcn.00401a50
push 1
lea ecx, [ebp]
mov byte [ebp - 4], 5
call fcn.00406230
push eax
lea eax, [ebp - 0x1c]
push 0x4bb294
push eax
call fcn.00407880
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.0048023b
add esp, 0x10
test eax, eax
je 0x40a9cb
mov edx, 0x63
mov word [edi], dx
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x25c4]
cmp eax, ebx
je 0x40a9b1
mov ecx, dword [ebp - 0x14]
push ecx
push 0x4bcd10
push 4
push eax
call fcn.0040f260
add esp, 0x10
mov edx, dword [ebp - 0x1c]
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x20]
push 1
push edx
push 0x1388
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x40aa2f
lea edx, [ebp - 0x1c]
push str.SUCCESS
push edx
call fcn.00406fd0
add esp, 8
test al, al
je 0x40aa06
mov eax, 4
mov word [edi], ax
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x25c4]
cmp eax, ebx
je 0x40aa2f
push 0x4bccc8
push ebx
push eax
call fcn.0040f260
add esp, 0xc
jmp 0x40aa2f
mov edx, 0x63
mov word [edi], dx
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x25c4]
cmp eax, ebx
je 0x40aa2f
mov ecx, dword [ebp - 0x14]
push ecx
push 0x4bcd10
push 4
push eax
call fcn.0040f260
add esp, 0x10
lea ecx, [ebp - 0x1c]
call fcn.00401aa0
lea ecx, [ebp - 0x18]
call fcn.00401aa0
lea ecx, [ebp]
call fcn.00406260
jmp 0x40aa6c
xor edx, edx
mov word [edi], dx
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x25c4]
cmp eax, ebx
je 0x40aa6c
push ecx
push 0x4bcd10
push 4
push eax
call fcn.0040f260
add esp, 0x10
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
call fcn.00423dc0
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], bl
add ecx, 0xc
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40aa9a
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40aac0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
movzx ecx, word [edi]
cmp cx, 4
jne 0x40b8f1
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x380]
mov edx, dword [edi + 0x20]
mov dword [eax + 0x30], edx
mov ecx, dword [edi + 0x24]
mov dword [eax + 0x34], ecx
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x380]
mov ecx, dword [edi + 0x20]
mov dword [eax + 0x38], ecx
mov edx, dword [edi + 0x24]
mov dword [eax + 0x3c], edx
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x380]
mov dword [eax + 0x334c], ebx
mov dword [eax + 0x3350], ebx
mov dword [eax + 0x3354], ebx
mov dword [eax + 0x3358], ebx
mov edx, dword [esi + 8]
add eax, 0x334c
mov eax, dword [edx + 0x380]
mov edx, dword [edi + 0x30]
lea ecx, [edi + 0x30]
mov dword [eax + 0x334c], edx
mov edx, dword [ecx + 4]
add eax, 0x334c
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ecx + 0xc]
mov dword [eax + 0xc], ecx
mov byte [0x4f3ed1], bl
mov eax, dword [esi + 8]
cmp dword [eax + 0x380], ebx
mov eax, dword [eax + 0x25c4]
jne 0x40ab80
cmp eax, ebx
je 0x40bda1
push 0x4bcc78
push 4
push eax
call fcn.0040f260
add esp, 0xc
jmp 0x40bda1
cmp eax, ebx
je 0x40ab9e
mov edx, dword [edi + 0x24]
mov ecx, dword [edi + 0x20]
push edx
push ecx
push edx
push ecx
push 0x4bcc38
push 1
push eax
call fcn.0040f260
add esp, 0x1c
mov ecx, dword [esi + 8]
xor eax, eax
push 4
mov byte [ebp + 0x28cc], bl
mov dword [ebp + 0x28cd], eax
mov dword [ebp + 0x28d1], eax
mov dword [ebp + 0x28d5], eax
mov dword [ebp + 0x28d9], eax
mov dword [ebp + 0x28dd], eax
mov dword [ebp + 0x28e1], eax
mov dword [ebp + 0x28e5], eax
mov word [ebp + 0x28e9], ax
mov byte [ebp + 0x28eb], al
call fcn.00418940
mov ecx, dword [esi + 8]
push eax
lea edx, [ebp - 0x10]
push edx
add ecx, 0x1fc
call fcn.00434fd4
mov eax, dword [eax]
push eax
lea ecx, [ebp + 0x28cc]
push 0x4bb294
push ecx
call fcn.004809ea
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.00401aa0
mov ecx, dword [esi + 8]
xor eax, eax
push 5
mov byte [ebp + 0x28ec], bl
mov dword [ebp + 0x28ed], eax
mov dword [ebp + 0x28f1], eax
mov dword [ebp + 0x28f5], eax
mov dword [ebp + 0x28f9], eax
mov dword [ebp + 0x28fd], eax
mov dword [ebp + 0x2901], eax
mov dword [ebp + 0x2905], eax
mov word [ebp + 0x2909], ax
mov byte [ebp + 0x290b], al
call fcn.00418940
mov ecx, dword [esi + 8]
push eax
lea edx, [ebp - 0x10]
push edx
add ecx, 0x1fc
call fcn.00434fd4
mov eax, dword [eax]
push eax
lea ecx, [ebp + 0x28ec]
push 0x4bb294
push ecx
call fcn.004809ea
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.00401aa0
mov ecx, dword [esi + 8]
xor eax, eax
push 6
mov byte [ebp + 0x290c], bl
mov dword [ebp + 0x290d], eax
mov dword [ebp + 0x2911], eax
mov dword [ebp + 0x2915], eax
mov dword [ebp + 0x2919], eax
mov dword [ebp + 0x291d], eax
mov dword [ebp + 0x2921], eax
mov dword [ebp + 0x2925], eax
mov word [ebp + 0x2929], ax
mov byte [ebp + 0x292b], al
call fcn.00418940
mov ecx, dword [esi + 8]
push eax
lea edx, [ebp - 0x10]
push edx
add ecx, 0x1fc
call fcn.00434fd4
mov eax, dword [eax]
push eax
push 0x4bb294
lea ecx, [ebp + 0x290c]
push ecx
call fcn.004809ea
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.00401aa0
mov edx, dword [edi + 0xc]
xor eax, eax
push edx
mov dword [ebp + 0x28ad], eax
mov dword [ebp + 0x28b1], eax
mov dword [ebp + 0x28b5], eax
mov dword [ebp + 0x28b9], eax
mov dword [ebp + 0x28bd], eax
mov dword [ebp + 0x28c1], eax
mov dword [ebp + 0x28c5], eax
mov word [ebp + 0x28c9], ax
mov byte [ebp + 0x28cb], al
mov eax, dword [edi + 8]
push eax
lea ecx, [ebp + 0x28ac]
push str._I64d
push ecx
mov byte [ebp + 0x28ac], bl
call fcn.004809ea
mov ecx, dword [esi + 8]
xor eax, eax
add esp, 0x10
push 7
mov byte [ebp + 0x284c], bl
mov dword [ebp + 0x284d], eax
mov dword [ebp + 0x2851], eax
mov dword [ebp + 0x2855], eax
mov dword [ebp + 0x2859], eax
mov dword [ebp + 0x285d], eax
mov dword [ebp + 0x2861], eax
mov dword [ebp + 0x2865], eax
mov word [ebp + 0x2869], ax
mov byte [ebp + 0x286b], al
call fcn.00418940
mov ecx, dword [esi + 8]
push eax
lea edx, [ebp - 0x10]
push edx
add ecx, 0x1fc
call fcn.00434fd4
mov eax, dword [eax]
push eax
lea ecx, [ebp + 0x284c]
push 0x4bb294
push ecx
call fcn.004809ea
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.00401aa0
mov edx, dword [esi + 8]
xor eax, eax
mov byte [ebp + 0x282c], bl
mov dword [ebp + 0x282d], eax
mov dword [ebp + 0x2831], eax
mov dword [ebp + 0x2835], eax
mov dword [ebp + 0x2839], eax
mov dword [ebp + 0x283d], eax
mov dword [ebp + 0x2841], eax
mov dword [ebp + 0x2845], eax
mov word [ebp + 0x2849], ax
mov byte [ebp + 0x284b], al
mov eax, dword [edx + 0x12b0]
push eax
lea ecx, [ebp + 0x282c]
push 0x4bb294
push ecx
call fcn.004809ea
push 0x32
lea edx, [ebp + 0x27f9]
push ebx
push edx
mov byte [ebp + 0x27f8], bl
call fcn.00480970
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x380]
add ecx, 0x4360
push ecx
lea edx, [ebp + 0x27f8]
push 0x4bb294
push edx
call fcn.004809ea
push 0x3ff
lea eax, [ebp + 0x1f79]
push ebx
push eax
mov byte [ebp + 0x1f78], bl
call fcn.00480970
mov ecx, dword [esi + 8]
add esp, 0x30
push 9
call fcn.00418940
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 8]
add ecx, 0x1fc
call fcn.00434fd4
mov edx, dword [eax]
push edx
lea eax, [ebp + 0x1f78]
push 0x4bb294
push eax
call fcn.004809ea
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.00401aa0
mov ecx, dword [esi + 8]
xor eax, eax
push 0xa
mov byte [ebp + 0x288c], bl
mov dword [ebp + 0x288d], eax
mov dword [ebp + 0x2891], eax
mov dword [ebp + 0x2895], eax
mov dword [ebp + 0x2899], eax
mov dword [ebp + 0x289d], eax
mov dword [ebp + 0x28a1], eax
mov dword [ebp + 0x28a5], eax
mov word [ebp + 0x28a9], ax
mov byte [ebp + 0x28ab], al
call fcn.00418940
push eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [esi + 8]
add ecx, 0x1fc
call fcn.00434fd4
mov edx, dword [eax]
push edx
lea eax, [ebp + 0x288c]
push 0x4bb294
push eax
call fcn.004809ea
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.00401aa0
push 0x3f
lea ecx, [ebp + 0x27b9]
push ebx
push ecx
mov byte [ebp + 0x27b8], bl
call fcn.00480970
mov ecx, dword [esi + 8]
add esp, 0xc
push 3
call fcn.00418940
mov ecx, dword [esi + 8]
push eax
lea edx, [ebp - 0x10]
push edx
add ecx, 0x1fc
call fcn.00434fd4
mov eax, dword [eax]
push eax
push 0x4bb294
lea ecx, [ebp + 0x27b8]
push ecx
call fcn.004809ea
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.00401aa0
mov ecx, dword [esi + 8]
push 8
mov byte [ebp + 0x2934], bl
mov dword [ebp + 0x2935], ebx
mov word [ebp + 0x2939], bx
mov byte [ebp + 0x293b], bl
call fcn.00418940
mov ecx, dword [esi + 8]
push eax
lea edx, [ebp - 0x10]
push edx
add ecx, 0x1fc
call fcn.00434fd4
mov eax, dword [eax]
push eax
lea ecx, [ebp + 0x2934]
push 0x4bb294
push ecx
call fcn.004809ea
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.00401aa0
mov ecx, dword [esi + 8]
push 0xb
mov byte [ebp + 0x292c], bl
mov dword [ebp + 0x292d], ebx
mov word [ebp + 0x2931], bx
mov byte [ebp + 0x2933], bl
call fcn.00418940
mov ecx, dword [esi + 8]
push eax
lea edx, [ebp - 0x10]
push edx
add ecx, 0x1fc
call fcn.00434fd4
mov eax, dword [eax]
push eax
lea ecx, [ebp + 0x292c]
push 0x4bb294
push ecx
call fcn.004809ea
add esp, 0xc
lea ecx, [ebp - 0x10]
call fcn.00401aa0
mov edx, dword [esi + 8]
xor eax, eax
mov dword [ebp + 0x286d], eax
mov dword [ebp + 0x2871], eax
mov dword [ebp + 0x2875], eax
mov dword [ebp + 0x2879], eax
mov dword [ebp + 0x287d], eax
mov dword [ebp + 0x2881], eax
mov dword [ebp + 0x2885], eax
mov word [ebp + 0x2889], ax
mov byte [ebp + 0x288b], al
mov byte [ebp + 0x286c], bl
mov eax, dword [edx + 0x380]
mov ecx, dword [eax + 0x1c]
mov edx, dword [eax + 0x18]
push ecx
push edx
lea eax, [ebp + 0x286c]
push str._I64d
push eax
call fcn.004809ea
add esp, 0x10
cmp dword [ebp + 0x294c], ebx
jg 0x40b162
push 0x4bcc28
lea ecx, [ebp + 0x292c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x40b162
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x25c4]
cmp eax, ebx
je 0x40b0eb
push 0x4bcc1c
push ebx
push eax
call fcn.0040f260
add esp, 0xc
lea eax, [ebp + 0x286c]
push eax
lea ecx, [ebp + 0x27f8]
push ecx
lea edx, [ebp + 0x2934]
push edx
lea eax, [ebp + 0x288c]
push eax
lea ecx, [ebp + 0x1f78]
push ecx
lea edx, [ebp + 0x290c]
push edx
lea eax, [ebp + 0x284c]
push eax
lea ecx, [ebp + 0x28ec]
push ecx
lea edx, [ebp + 0x27b8]
push edx
lea eax, [ebp + 0x282c]
push eax
lea ecx, [ebp + 0x28cc]
push ecx
lea edx, [ebp + 0x28ac]
push edx
mov ecx, esi
call fcn.00408770
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x25c4]
cmp eax, ebx
je 0x40b162
push 0x4bcc10
push ebx
push eax
call fcn.0040f260
add esp, 0xc
push 0x1ff
lea ecx, [ebp + 0x2579]
push ebx
push ecx
mov byte [ebp + 0x2578], bl
call fcn.00480970
lea eax, [edi + 0x69]
push eax
lea ecx, [edi + 0x40]
push ecx
push str._volume01_files__s__s
lea edx, [ebp + 0x2578]
push 0x200
push edx
call fcn.00480a83
mov eax, dword [esi + 8]
add esp, 0x20
cmp dword [ebp + 0x294c], ebx
jle 0x40b2d4
cmp dword [eax + 0x25c4], ebx
je 0x40b1ef
mov ecx, eax
mov eax, dword [ecx + 0x380]
lea edx, [eax + 0x40]
push edx
mov edx, dword [eax + 0x2c]
push edx
mov edx, dword [eax + 0x28]
push edx
mov edx, dword [eax + 0x3c]
push edx
mov edx, dword [eax + 0x38]
push edx
mov edx, dword [eax + 0x34]
mov eax, dword [eax + 0x30]
push edx
mov edx, dword [ebp - 0x14]
push eax
mov eax, dword [ecx + 0x25c4]
push edx
push 0x4bcb98
push ebx
push eax
call fcn.0040f260
add esp, 0x2c
mov ecx, dword [esi + 8]
fldz
mov edx, dword [ecx + 0x380]
mov dword [edx], 1
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x380]
mov edx, dword [eax + 0x2c]
push edx
mov edx, dword [eax + 0x28]
push edx
mov edx, dword [eax + 0x34]
mov eax, dword [eax + 0x30]
push edx
push eax
push ecx
fstp dword [esp]
call fcn.004111e0
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x21c]
push 1
push ebx
push edx
call dword [sym.imp.USER32.dll_InvalidateRect]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 8]
mov dword [ecx + 0x12e0], eax
mov eax, dword [esi + 8]
mov edx, dword [eax + 0x12e0]
mov dword [eax + 0x12e8], edx
mov ecx, dword [esi + 8]
add ecx, 0x1368
call fcn.004062b0
mov eax, dword [esi + 8]
mov ecx, dword [ebp + 0x294c]
mov dword [eax + 0x2588], ecx
mov eax, dword [esi + 8]
mov edx, dword [eax + 0x380]
add edx, 0x335c
push edx
add eax, 0x1578
push 0x1000
push eax
call fcn.0048058f
mov ecx, dword [esi + 8]
lea eax, [ebp - 0x10]
push eax
push ebx
push ecx
push 0x406310
push ebx
push ebx
mov dword [ebp - 0x10], ebx
call fcn.0048015c
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 0x24
push eax
call edi
mov eax, dword [esi + 8]
lea edx, [ebp - 0x10]
push edx
push ebx
push eax
push 0x4130e0
push ebx
push ebx
call fcn.0048015c
add esp, 0x18
push eax
call edi
jmp 0x40bda1
mov ecx, dword [eax + 0x380]
cmp dword [ecx], 8
jne 0x40b36f
cmp dword [eax + 0x25c4], ebx
je 0x40b30e
mov eax, dword [esi + 8]
mov edx, dword [eax + 0x380]
mov eax, dword [eax + 0x25c4]
add edx, 0x40
push edx
push 0x4bcb6c
push 3
push eax
call fcn.0040f260
add esp, 0x10
mov ecx, dword [esi + 8]
call fcn.00418940
mov ecx, dword [esi + 8]
mov edi, eax
push edi
add ecx, 0x1fc
call fcn.00432f59
mov dword [eax], 8
mov ecx, dword [esi + 8]
push eax
push edi
add ecx, 0x1fc
call fcn.00406040
mov ecx, dword [esi + 8]
push 0x4bcb64
push 2
push edi
add ecx, 0x1fc
call fcn.00432ee5
mov ecx, dword [esi + 8]
push ebx
mov dword [ecx + 0x380], ebx
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x20]
push ebx
push 0x138a
push eax
jmp 0x40bd9b
mov eax, dword [eax + 0x25c4]
cmp eax, ebx
je 0x40b389
push 0x4bcb50
push 2
push eax
call fcn.0040f260
add esp, 0xc
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x380]
mov eax, dword [edx + 0x47d4]
mov edx, dword [0x4effc0]
cmp eax, edx
jl 0x40b3a5
lea eax, [edx - 1]
cmp eax, edx
mov ecx, eax
mov dword [ebp - 0x24], eax
jge 0x40bda1
jmp 0x40b3c0
mov eax, dword [ecx*4 + 0x4eff98]
sub eax, 1
je 0x40b7b9
sub eax, 1
je 0x40b57f
sub eax, 1
jne 0x40b665
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x25c4]
cmp eax, ebx
je 0x40b3ff
push 0x4bcb34
push 2
push eax
call fcn.0040f260
add esp, 0xc
push 0x1ff
lea ecx, [ebp + 0x2379]
push ebx
push ecx
mov byte [ebp + 0x2378], bl
call fcn.00480970
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + 0x69]
push eax
lea eax, [ecx + 0x40]
push eax
push str.._files__s__s
lea edx, [ebp + 0x2378]
push 0x200
push edx
call fcn.00480a83
push str.tple_0000_0000
call sub.v_down.dll_void___cdecl_InitNodeLib_char__
mov eax, dword [ebp - 0x14]
push 1
push 0xf2a8
push eax
call sub.v_down.dll_void___cdecl_SetDownMainSvrInfo_char___int__int_
mov ecx, dword [esi + 8]
mov edi, dword [ecx + 0x380]
add esp, 0x30
add edi, 0x40
jne 0x40b468
mov dword [ebp - 0x1c], ebx
jmp 0x40b49b
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
cmp eax, 0x3fffffff
mov dword [ebp - 0x10], eax
jle 0x40b47f
mov dword [ebp - 0x1c], ebx
jmp 0x40b49b
mov eax, dword [ebp - 0x10]
add eax, eax
call fcn.00481870
mov edx, dword [ebp - 0x10]
mov eax, esp
push 3
push edx
push edi
push eax
call fcn.00405ee0
mov dword [ebp - 0x1c], eax
lea eax, [ebp + 0x2378]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, eax
inc edi
cmp edi, 0x3fffffff
jle 0x40b4b8
mov dword [ebp - 0x18], ebx
jmp 0x40b4d5
lea eax, [edi + edi]
call fcn.00481870
mov eax, esp
push 3
push edi
lea ecx, [ebp + 0x2378]
push ecx
push eax
call fcn.00405ee0
mov dword [ebp - 0x18], eax
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x380]
add eax, 0x3144
mov dword [ebp - 0x10], eax
jne 0x40b4ec
xor eax, eax
jmp 0x40b519
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, eax
inc edi
cmp edi, 0x3fffffff
jle 0x40b502
xor eax, eax
jmp 0x40b519
lea eax, [edi + edi]
call fcn.00481870
mov ecx, dword [ebp - 0x10]
mov eax, esp
push 3
push edi
push ecx
push eax
call fcn.00405ee0
mov edx, dword [esi + 8]
mov ecx, dword [edx + 0x380]
mov edx, dword [ecx + 0x2c]
mov ecx, dword [ecx + 0x28]
push edx
mov edx, dword [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0x18]
push edx
push ecx
push eax
call sub.v_down.dll_void___cdecl_SetDownloadFile_wchar_t___wchar_t___wchar_t___long_long___int64__
push 1
call sub.v_down.dll_int___cdecl_OnStart_Download_int_
add esp, 0x18
test eax, eax
jge 0x40b67d
mov edx, dword [esi + 8]
cmp dword [edx + 0x25c4], ebx
je 0x40b577
mov eax, edx
mov ecx, dword [eax + 0x380]
mov edx, dword [eax + 0x25c4]
add ecx, 0x40
push ecx
push 0x4bcad0
push 4
push edx
call fcn.0040f260
add esp, 0x10
mov edi, dword [ebp - 0x20]
jmp 0x40b656
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x25c4]
cmp eax, ebx
je 0x40b59c
push 0x4bcab4
push 2
push eax
call fcn.0040f260
add esp, 0xc
call dword [sym.imp.NAT.DLL_Ordinal_23]
mov edx, dword [esi + 8]
cmp dword [edx + 0x25c4], ebx
je 0x40b5ea
mov ecx, edx
mov eax, dword [ecx + 0x380]
lea edx, [eax + 0x40]
push edx
mov edx, dword [eax + 0x2c]
push edx
mov edx, dword [eax + 0x28]
push edx
mov edx, dword [eax + 0x3c]
push edx
mov edx, dword [eax + 0x38]
push edx
mov edx, dword [eax + 0x34]
mov eax, dword [eax + 0x30]
push edx
mov edx, dword [ebp - 0x14]
push eax
mov eax, dword [ecx + 0x25c4]
push edx
push 0x4bca40
push ebx
push eax
call fcn.0040f260
add esp, 0x2c
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x380]
mov edx, dword [eax + 0x2c]
mov ecx, dword [eax + 0x28]
push ebx
push edx
mov edx, dword [edi + 0xc]
push ecx
add eax, 0x2144
push eax
mov eax, dword [edi + 8]
push edx
mov edx, dword [ebp - 0x14]
push eax
push str.TPLE
lea ecx, [ebp + 0x2578]
push ecx
push edx
call dword [sym.imp.NAT.DLL_Ordinal_21]
add esp, 0x24
test eax, eax
jge 0x40b725
mov eax, dword [esi + 8]
cmp dword [eax + 0x25c4], ebx
je 0x40b656
mov ecx, dword [eax + 0x380]
mov edx, dword [eax + 0x25c4]
add ecx, 0x40
push ecx
push 0x4bc9f0
push 4
push edx
call fcn.0040f260
add esp, 0x10
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x380]
inc dword [eax + 0x47d4]
mov ecx, dword [ebp - 0x24]
inc ecx
cmp ecx, dword [0x4effc0]
mov dword [ebp - 0x24], ecx
jl 0x40b3c0
jmp 0x40bda1
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x25c4]
cmp eax, ebx
je 0x40b69a
push 0x4bc9c4
push 1
push eax
call fcn.0040f260
add esp, 0xc
mov edx, dword [esi + 8]
fldz
mov eax, dword [edx + 0x380]
mov dword [eax], 1
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x380]
mov edx, dword [eax + 0x2c]
push edx
mov edx, dword [eax + 0x28]
push edx
mov edx, dword [eax + 0x34]
mov eax, dword [eax + 0x30]
push edx
push eax
push ecx
fstp dword [esp]
call fcn.004111e0
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x21c]
push 1
push ebx
push edx
call dword [sym.imp.USER32.dll_InvalidateRect]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 8]
mov dword [ecx + 0x12e0], eax
mov eax, dword [esi + 8]
mov edx, dword [eax + 0x12e0]
mov dword [eax + 0x12e8], edx
mov ecx, dword [esi + 8]
lea eax, [ebp - 0x10]
push eax
push ebx
push ecx
push 0x412af0
push ebx
push ebx
mov dword [ebp - 0x10], ebx
call fcn.0048015c
add esp, 0x18
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40bda1
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x25c4]
cmp eax, ebx
je 0x40b742
push 0x4bc99c
push 1
push eax
call fcn.0040f260
add esp, 0xc
mov eax, dword [esi + 8]
fldz
mov ecx, dword [eax + 0x380]
mov dword [ecx], 1
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x380]
mov edx, dword [eax + 0x2c]
push edx
mov edx, dword [eax + 0x28]
push edx
mov edx, dword [eax + 0x34]
mov eax, dword [eax + 0x30]
push edx
push eax
push ecx
fstp dword [esp]
call fcn.004111e0
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x21c]
push 1
push ebx
push edx
call dword [sym.imp.USER32.dll_InvalidateRect]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 8]
mov dword [ecx + 0x12e0], eax
mov eax, dword [esi + 8]
mov edx, dword [eax + 0x12e0]
mov dword [eax + 0x12e8], edx
mov ecx, dword [esi + 8]
lea eax, [ebp - 0x10]
push eax
push ebx
push ecx
push 0x412400
jmp 0x40b70c
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x25c4]
cmp eax, ebx
je 0x40b7d6
push 0x4bc978
push 2
push eax
call fcn.0040f260
add esp, 0xc
mov eax, dword [esi + 8]
cmp dword [eax + 0x25c4], ebx
je 0x40b81e
mov ecx, eax
mov eax, dword [ecx + 0x380]
lea edx, [eax + 0x40]
push edx
mov edx, dword [eax + 0x2c]
push edx
mov edx, dword [eax + 0x28]
push edx
mov edx, dword [eax + 0x3c]
push edx
mov edx, dword [eax + 0x38]
push edx
mov edx, dword [eax + 0x34]
mov eax, dword [eax + 0x30]
push edx
mov edx, dword [ebp - 0x14]
push eax
mov eax, dword [ecx + 0x25c4]
push edx
push 0x4bc900
push ebx
push eax
call fcn.0040f260
add esp, 0x2c
mov ecx, dword [esi + 8]
fldz
mov edx, dword [ecx + 0x380]
mov dword [edx], 1
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x380]
mov edx, dword [eax + 0x2c]
push edx
mov edx, dword [eax + 0x28]
push edx
mov edx, dword [eax + 0x34]
mov eax, dword [eax + 0x30]
push edx
push eax
push ecx
fstp dword [esp]
call fcn.004111e0
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x21c]
push 1
push ebx
push edx
call dword [sym.imp.USER32.dll_InvalidateRect]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 8]
mov dword [ecx + 0x12e0], eax
mov eax, dword [esi + 8]
mov edx, dword [eax + 0x12e0]
mov dword [eax + 0x12e8], edx
mov ecx, dword [esi + 8]
add ecx, 0x1368
call fcn.004062b0
mov ecx, dword [esi + 8]
lea eax, [ebp + 0x2578]
push eax
add ecx, 0x1378
push 0x200
push ecx
call fcn.0048058f
mov edx, dword [ebp - 0x14]
mov eax, dword [esi + 8]
push edx
add eax, 0x1368
push 0x10
push eax
call fcn.0048058f
mov edx, dword [esi + 8]
lea ecx, [ebp - 0x20]
push ecx
push ebx
push edx
push 0x406310
push ebx
push ebx
mov dword [ebp - 0x20], ebx
call fcn.0048015c
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 0x30
push eax
call edi
mov ecx, dword [esi + 8]
lea eax, [ebp - 0x20]
push eax
push ebx
push ecx
jmp 0x40b2bd
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x25c4]
cmp eax, ebx
je 0x40b912
movsx ecx, cx
push ecx
push 0x4bc8cc
push 3
push eax
call fcn.0040f260
add esp, 0x10
movsx eax, word [edi]
cmp eax, 0x44
ja case.0x40b925.4
movzx edx, byte [eax + 0x40be00]
jmp dword [edx*4 + 0x40bdcc]
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x25c4]
cmp eax, ebx
je 0x40b949
push 0x4bc878
push 3
push eax
call fcn.0040f260
add esp, 0xc
push 1
push 0x4bc828
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x20]
push 0x1388
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x380]
push ebx
mov dword [ecx], 3
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x20]
push 0x1f4
push 0x62
push eax
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x40bd3b
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x25c4]
cmp eax, ebx
je 0x40b9a8
push 0x4bc7b0
push 3
push eax
call fcn.0040f260
add esp, 0xc
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x20]
push 1
push 0x4bc760
push 0x1388
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x380]
push ebx
mov dword [edx], 3
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x20]
push 0x1f4
push 0x62
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x40bd3b
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x25c4]
cmp eax, ebx
je 0x40ba07
push 0x4bc710
push 3
push eax
call fcn.0040f260
add esp, 0xc
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x20]
push 1
push 0x4bc6c0
push 0x1388
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x380]
push ebx
mov dword [eax], 3
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x20]
push 0x1f4
push 0x62
push edx
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x40bd3b
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x25c4]
cmp eax, ebx
je 0x40ba66
push 0x4bc660
push 3
push eax
call fcn.0040f260
add esp, 0xc
push 1
push 0x4bc5f8
jmp 0x40b950
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x380]
inc dword [eax + 4]
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x380]
cmp dword [eax + 4], 3
jl 0x40baef
mov ecx, edx
mov eax, dword [ecx + 0x25c4]
cmp eax, ebx
je 0x40baad
add edi, 0x30
push edi
push 0x4bc580
push 3
push eax
call fcn.0040f260
add esp, 0x10
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x20]
push 1
push 0x4bc538
push 0x1388
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x380]
push ebx
mov dword [edx], 3
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x20]
push 0x1f4
push 0x62
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x40bd3b
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x25c4]
cmp eax, ebx
je 0x40bb10
add edi, 0x30
push edi
push 0x4bc4c0
push 3
push eax
call fcn.0040f260
add esp, 0x10
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x380]
mov dword [ecx], 7
mov ecx, dword [esi + 8]
call fcn.0041a310
cmp eax, 0xffffffff
je 0x40bd3b
push ebx
cmp eax, ebx
jne 0x40bb4e
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x20]
push 0xea60
push 0x62
push eax
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x40bd3b
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x20]
push 0x1f4
push 0x62
push edx
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x40bd3b
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x25c4]
cmp eax, ebx
je 0x40bb84
push 0x4bc478
push 3
push eax
call fcn.0040f260
add esp, 0xc
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x20]
push 1
push 0x4bc408
push 0x1388
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x380]
push ebx
mov dword [ecx], 2
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x20]
push 0x7530
push 0x62
push eax
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x40bd3b
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x25c4]
cmp eax, ebx
je 0x40bbe3
push 0x4bc3c0
push 3
push eax
call fcn.0040f260
add esp, 0xc
push 1
push 0x4bc39c
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x20]
push 0x1388
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x380]
mov dword [edx], 2
jmp 0x40bd3b
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x25c4]
cmp eax, ebx
je 0x40bc2d
push 0x4bc348
push 3
push eax
call fcn.0040f260
add esp, 0xc
push 1
push 0x4bc2f0
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x20]
push 0x1388
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x380]
mov dword [ecx], 2
jmp 0x40bd3b
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x25c4]
cmp eax, ebx
je 0x40bc77
push 0x4bc298
push 3
push eax
call fcn.0040f260
add esp, 0xc
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x20]
push 1
push 0x4bc264
push 0x1388
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x380]
mov dword [eax], 2
jmp 0x40bd3b
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x25c4]
cmp eax, ebx
je 0x40bcc1
push 0x4bc208
push 3
push eax
call fcn.0040f260
add esp, 0xc
push 1
push 0x4bc1d4
jmp 0x40bbea
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x25c4]
cmp eax, ebx
je 0x40bcea
push 0x4bc158
push 3
push eax
call fcn.0040f260
add esp, 0xc
push 1
push 0x4bc100
jmp 0x40bc34
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x25c4]
cmp eax, ebx
je 0x40bd13
push 0x4bc088
push 3
push eax
call fcn.0040f260
add esp, 0xc
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x20]
push 1
push 0x4bc038
push 0x1388
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [esi + 8]
mov eax, dword [edx + 0x380]
mov dword [eax], 4
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x21c]
push 1
push ebx
push edx
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [esi + 8]
mov dword [eax + 0x380], ebx
mov ecx, dword [esi + 8]
push ebx
call fcn.004120f0
jmp 0x40bda1
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 0x380]
mov dword [edx], 4
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x21c]
push 1
push ebx
push ecx
call dword [sym.imp.USER32.dll_InvalidateRect]
mov edx, dword [esi + 8]
mov dword [edx + 0x380], ebx
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x20]
push ebx
push ebx
push 0x138a
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
lea esp, [ebp - 0x54]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x293c]
xor ecx, ebp
call fcn.0047f7c9
add ebp, 0x2940
mov esp, ebp
pop ebp
ret 8