Function at 0x4da000
Capabilities:
Create process on windows
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x7448eb
mov eax, dword fs:[0]
push eax
sub esp, 0x684
mov eax, dword [0x8312b0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x668], ebx
mov edi, dword [ebp + 0x14]
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 0x10]
mov dword [ebp - 0x684], edx
mov dword [ebp - 0x670], esi
mov dword [ebp - 0x67c], edi
mov dword [edi], 0
cmp eax, 0x754c
ja 0x4da3f2
je 0x4da355
add eax, 0xfffffbff
cmp eax, 0xca
ja case.0x4da407.30040
movzx eax, byte [eax + 0x4dac08]
jmp dword [eax*4 + 0x4dabf0]
push ecx
push esi
sub esp, 8
call fcn.004d93d0
mov dword [edi], 1
jmp case.0x4da407.30040
push ecx
push esi
sub esp, 8
call fcn.004d99b0
mov dword [edi], 1
jmp case.0x4da407.30040
test edx, edx
je 0x4d9ff5
test esi, esi
je 0x4d9ff5
mov esi, edx
lea edi, [ebp - 0x5f4]
mov ecx, 0x165
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x664]
movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x670]
push edi
call fcn.0048b080
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x64c]
lea eax, [ecx - 7]
cmp eax, 2
ja 0x4d9f0f
cmp dword [ebp - 0x650], 8
lea eax, [ebp - 0x664]
mov esi, dword [ebx + ecx*4 + 0x5a8]
cmovae eax, dword [ebp - 0x664]
push eax
call fcn.007154e8
add esp, 4
lea ecx, [ebp - 0x5f4]
push ecx
push eax
mov ecx, esi
call fcn.0044dd20
jmp 0x4d9f6d
cmp ecx, 1
jne 0x4d9f2f
mov ecx, dword [ebx + 0x5ac]
lea eax, [ebp - 0x5f4]
push eax
lea eax, [ebp - 0x664]
push eax
call fcn.00452400
jmp 0x4d9f6d
cmp ecx, 4
jne 0x4d9f4f
mov ecx, dword [ebx + 0x5b8]
lea eax, [ebp - 0x5f4]
push eax
lea eax, [ebp - 0x664]
push eax
call fcn.004ab330
jmp 0x4d9f6d
cmp ecx, 6
jne 0x4d9f6d
mov ecx, dword [ebx + 0x5c0]
lea eax, [ebp - 0x5f4]
push eax
lea eax, [ebp - 0x664]
push eax
call fcn.004971e0
mov ecx, dword [ebx + 0x5a8]
lea eax, [ebp - 0x5f4]
push eax
lea eax, [ebp - 0x664]
push eax
call fcn.00459ab0
push 0x595
push dword [ebp - 0x684]
call fcn.006f4f2f
add esp, 8
lea ecx, [edi + 0x58]
call fcn.0044bf40
lea ecx, [edi + 0x40]
call fcn.0044bf40
lea ecx, [edi + 0x28]
call fcn.0044bf40
mov ecx, edi
call fcn.0044bf40
push 0x70
push edi
call fcn.006f4f2f
add esp, 8
lea ecx, [ebp - 0x60c]
call fcn.0044bf40
lea ecx, [ebp - 0x624]
call fcn.0044bf40
lea ecx, [ebp - 0x63c]
call fcn.0044bf40
lea ecx, [ebp - 0x664]
call fcn.0044bf40
mov edi, dword [ebp - 0x67c]
mov dword [edi], 1
jmp case.0x4da407.30040
push edx
lea ecx, [ebp - 0x64c]
call fcn.004dad30
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x64c]
push str.setting
mov dword [edi], 1
call fcn.00460420
test al, al
je 0x4da059
push str.setting_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0
push 0
push 0x7565
mov ecx, ebx
call dword [sym.imp.DuiLib.dll_public:_long_int___thiscall_DuiLib::CWindowWnd::PostMessageW_unsigned_int__unsigned_int__long_int_]
lea ecx, [ebp - 0x64c]
call fcn.004dadc0
jmp case.0x4da407.30040
push str.site
lea ecx, [ebp - 0x64c]
call fcn.00460420
test al, al
je 0x4da0a0
push str.site_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 5
push 0
push 0
push str.https:__drivermaster.greatsoftman.com_
push 0x7f8590
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x64c]
call fcn.004dadc0
jmp case.0x4da407.30040
push str.contactus
lea ecx, [ebp - 0x64c]
call fcn.00460420
test al, al
je 0x4da0e0
push 0
push 0
push 0x7567
mov ecx, ebx
call dword [sym.imp.DuiLib.dll_public:_long_int___thiscall_DuiLib::CWindowWnd::PostMessageW_unsigned_int__unsigned_int__long_int_]
push str.contactus_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [ebp - 0x64c]
call fcn.004dadc0
jmp case.0x4da407.30040
push str.about
lea ecx, [ebp - 0x64c]
call fcn.00460420
test al, al
je 0x4da120
push 0
push 0
push 0x7566
mov ecx, ebx
call dword [sym.imp.DuiLib.dll_public:_long_int___thiscall_DuiLib::CWindowWnd::PostMessageW_unsigned_int__unsigned_int__long_int_]
push str.about_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [ebp - 0x64c]
call fcn.004dadc0
jmp case.0x4da407.30040
push str.exit
lea ecx, [ebp - 0x64c]
call fcn.00460420
test al, al
je 0x4da1a1
push str.exit_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [ebp - 0x678]
call fcn.0045b760
mov byte [ebp - 4], 2
push ecx
mov ecx, dword [eax]
call fcn.004c86f0
mov byte [ebp - 4], 3
mov edi, dword [ebp - 0x674]
test edi, edi
je 0x4da2f4
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x4da2f4
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne 0x4da2f4
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
lea ecx, [ebp - 0x64c]
call fcn.004dadc0
jmp case.0x4da407.30040
push str.ab_login
lea ecx, [ebp - 0x64c]
call fcn.00460420
test al, al
je 0x4da2c0
push str.ab_login_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [ebp - 0x678]
call fcn.0045b760
mov eax, dword [eax]
mov edi, dword [eax + 0x10]
mov dword [ebp - 0x67c], edi
mov byte [ebp - 4], 4
mov edi, dword [ebp - 0x674]
test edi, edi
je 0x4da209
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x4da209
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne 0x4da209
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov byte [ebp - 4], 1
cmp dword [ebp - 0x67c], 3
je 0x4da2f4
push 4
call fcn.006f4f3d
mov esi, eax
add esp, 4
mov dword [ebp - 0x67c], esi
mov dword [esi], ebx
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.0045fc00
mov dword [ebp - 0x24], 0x805d40
mov dword [ebp - 0x67c], 0
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x678]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x24]
call fcn.00460030
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x4da273
push 4
push eax
call fcn.006f4f2f
add esp, 8
mov byte [ebp - 4], 7
mov esi, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x20]
push esi
call fcn.00517b6e
add esp, 4
test eax, eax
je 0x4da293
push eax
call fcn.00517c42
add esp, 4
push esi
call fcn.00517ab2
push edi
call fcn.00518a82
add esp, 8
lea ecx, [ebp - 0x678]
mov byte [ebp - 4], 8
call fcn.00460550
cmp dword [ebp - 0x674], 0
jne 0x4dabe9
jmp 0x4da2f4
push str.exit_app
lea ecx, [ebp - 0x64c]
call fcn.00460420
test al, al
je 0x4da2ee
push 1
mov ecx, ebx
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CWindowWnd::Close_unsigned_int_]
lea ecx, [ebp - 0x64c]
call fcn.004dadc0
jmp case.0x4da407.30040
mov dword [edi], 0
lea ecx, [ebp - 0x64c]
call fcn.004dadc0
jmp case.0x4da407.30040
cmp esi, 0x202
jne 0x4da33d
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x4da324
push 5
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push 0xf120
push 0x112
mov ecx, ebx
call dword [sym.imp.DuiLib.dll_public:_long_int___thiscall_DuiLib::CWindowWnd::SendMessageW_unsigned_int__unsigned_int__long_int_]
jmp case.0x4da407.30040
cmp esi, 0x205
jne case.0x4da407.30040
push 1
call fcn.004d9070
jmp case.0x4da407.30040
call fcn.0045b8d0
push ecx
push 3
mov ecx, eax
call fcn.004e15d0
push 0x31
xor eax, eax
mov dword [ebp - 0x18], 0
push str.https:__usercenter_dllrepair.greatsoftman.com_pay
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.0044bdc0
sub esp, 0x18
mov dword [ebp - 4], 0xd
mov esi, dword [ebx + 4]
mov ecx, esp
mov dword [ebp - 0x668], esp
xor eax, eax
push 0x11
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x7f869c
mov word [ecx], ax
call fcn.0044bdc0
push 0x208
push 0x2ce
sub esp, 0x18
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.004609e0
mov ecx, esi
mov byte [ebp - 4], 0xd
call fcn.004d6470
add esp, 0x38
lea ecx, [ebp - 0x28]
call fcn.0044bf40
jmp case.0x4da407.30040
add eax, 0xffff8aa9
cmp eax, 0x2b
ja case.0x4da407.30040
movzx eax, byte [eax + 0x4dacfc]
jmp dword [eax*4 + 0x4dacd4]
mov esi, dword [ebx + 4]
push 0x548
call fcn.006f4f3d
mov edi, eax
add esp, 4
mov dword [ebp - 0x668], edi
mov ecx, edi
mov dword [ebp - 4], 9
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::WindowImplBase::constructor_void_]
push 0
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
push 0x80
push 0x90000000
sub esp, 8
mov dword [edi], vtable.SettingDlg.5.0
mov eax, esp
mov dword [edi + 0x10], vtable.SettingDlg.4.0
mov dword [edi + 0x24], vtable.SettingDlg.3.0
mov dword [edi + 0x28], vtable.SettingDlg.2.0
mov dword [edi + 0x2c], vtable.SettingDlg.1.0
mov dword [edi + 0x30], vtable.SettingDlg.0
mov dword [ebp - 4], 0xffffffff
mov dword [eax], 0x8036b8
mov dword [eax + 4], 8
push esi
mov ecx, edi
call dword [sym.imp.DuiLib.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::Create_struct_HWND_____class_std::basic_string_view_wchar_t__struct_std::char_traits_wchar_t____unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____]
mov ecx, edi
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CWindowWnd::CenterWindow_void_]
mov ecx, edi
call dword [sym.imp.DuiLib.dll_public:_unsigned_int___thiscall_DuiLib::CWindowWnd::ShowModal_void_]
jmp case.0x4da407.30040
mov esi, dword [ebx + 4]
push 0x578
call fcn.006f4f3d
mov edi, eax
add esp, 4
mov dword [ebp - 0x668], edi
mov ecx, edi
mov dword [ebp - 4], 0xa
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::WindowImplBase::constructor_void_]
xor eax, eax
mov dword [edi], vtable.AboutDlg.5.0
push eax
push SysReAllocString
push SysReAllocString
push SysReAllocString
mov dword [edi + 0x10], vtable.AboutDlg.4.0
mov dword [edi + 0x24], vtable.AboutDlg.3.0
mov dword [edi + 0x28], vtable.AboutDlg.2.0
mov dword [edi + 0x2c], vtable.AboutDlg.1.0
mov dword [edi + 0x30], vtable.AboutDlg.0
push SysReAllocString
mov dword [edi + 0x558], 0
mov dword [edi + 0x55c], 7
mov word [edi + 0x548], ax
push 0x80
mov dword [edi + 0x570], eax
push 0x90000000
mov dword [edi + 0x574], 7
sub esp, 8
mov word [edi + 0x560], ax
mov eax, esp
mov dword [ebp - 4], 0xffffffff
mov dword [eax], 0x805898
jmp 0x4da490
mov esi, dword [ebx + 4]
push 0x57c
call fcn.006f4f3d
mov edi, eax
add esp, 4
mov dword [ebp - 0x668], edi
mov ecx, edi
mov dword [ebp - 4], 0xb
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::WindowImplBase::constructor_void_]
xor eax, eax
mov dword [edi], vtable.Contactus.5.0
push eax
push SysReAllocString
push SysReAllocString
push SysReAllocString
mov dword [edi + 0x10], vtable.Contactus.4.0
mov dword [edi + 0x24], vtable.Contactus.3.0
mov dword [edi + 0x28], vtable.Contactus.2.0
mov dword [edi + 0x2c], vtable.Contactus.1.0
mov dword [edi + 0x30], vtable.Contactus.0
push SysReAllocString
mov dword [edi + 0x55c], 0
mov dword [edi + 0x560], 7
mov word [edi + 0x54c], ax
push 0x80
mov dword [edi + 0x574], eax
mov dword [edi + 0x578], 7
push 0x90000000
mov word [edi + 0x564], ax
sub esp, 8
mov eax, esp
mov dword [ebp - 4], 0xffffffff
mov dword [eax], str.Contactus
mov dword [eax + 4], 9
jmp 0x4da497
mov esi, dword [ebx + 4]
push 0x580
call fcn.006f4f3d
mov edi, eax
add esp, 4
mov dword [ebp - 0x668], edi
mov ecx, edi
mov dword [ebp - 4], 0xc
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::WindowImplBase::constructor_void_]
push 0
push SysReAllocString
push SysReAllocString
mov dword [edi], vtable.SystemErrorDlg.5.0
xor eax, eax
mov dword [edi + 0x10], vtable.SystemErrorDlg.4.0
mov ecx, edi
mov dword [edi + 0x24], vtable.SystemErrorDlg.3.0
mov dword [edi + 0x28], vtable.SystemErrorDlg.2.0
mov dword [edi + 0x2c], vtable.SystemErrorDlg.1.0
mov dword [edi + 0x30], vtable.SystemErrorDlg.0
push SysReAllocString
mov dword [edi + 0x55c], 0
mov dword [edi + 0x560], 7
mov word [edi + 0x54c], ax
push SysReAllocString
mov dword [edi + 0x574], eax
push 0x80
mov dword [edi + 0x578], 7
mov word [edi + 0x564], ax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x670]
push 0x90000000
mov dword [edi + 0x57c], eax
sub esp, 8
mov eax, esp
push esi
mov dword [eax], str.Contactus
mov dword [eax + 4], 9
call dword [sym.imp.DuiLib.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::Create_struct_HWND_____class_std::basic_string_view_wchar_t__struct_std::char_traits_wchar_t____unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____]
mov ecx, edi
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CWindowWnd::CenterWindow_void_]
mov ecx, edi
call dword [sym.imp.DuiLib.dll_public:_unsigned_int___thiscall_DuiLib::CWindowWnd::ShowModal_void_]
cmp eax, 1
jne case.0x4da407.30040
push 0
push 0
push 0x7569
mov ecx, ebx
call dword [sym.imp.DuiLib.dll_public:_long_int___thiscall_DuiLib::CWindowWnd::PostMessageW_unsigned_int__unsigned_int__long_int_]
jmp case.0x4da407.30040
mov ecx, dword [ebx + 0x5a8]
mov eax, dword [ecx]
call dword [eax + 0x20]
jmp case.0x4da407.30040
call fcn.0045b8d0
push ecx
push 0x64
mov ecx, eax
call fcn.004e15d0
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov dword [ebp - 4], 0xf
test esi, esi
je 0x4da78d
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4da774
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x28]
call fcn.0044bdc0
lea ecx, [ebp - 0x678]
call fcn.0045baf0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x10
push ecx
lea ecx, [ebp - 0x58]
push ecx
mov ecx, dword [eax]
call fcn.004ff700
push eax
mov edx, str.https:__usercenter_dllrepair.greatsoftman.com_account_abnormal
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x40]
call fcn.00466bb0
add esp, 4
lea ecx, [ebp - 0x58]
call fcn.0044bf40
mov byte [ebp - 4], 0x15
mov edi, dword [ebp - 0x674]
test edi, edi
je 0x4da7f7
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x4da7f7
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne 0x4da7f7
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
sub esp, 0x18
mov byte [ebp - 4], 0x14
mov esi, dword [ebx + 4]
mov ecx, esp
mov dword [ebp - 0x668], esp
push 0x7f8740
call fcn.0044c260
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x40]
cmp dword [ebp - 0x2c], 8
push 0xc8
cmovae eax, dword [ebp - 0x40]
push 0x12c
sub esp, 0x18
mov ecx, esp
push eax
call fcn.0044c260
mov byte [ebp - 4], 0x14
mov ecx, esi
call fcn.004d6470
add esp, 0x38
lea ecx, [ebp - 0x40]
call fcn.0044bf40
lea ecx, [ebp - 0x28]
call fcn.0044bf40
jmp case.0x4da407.30040
call fcn.0045b8d0
push ecx
push 0x65
mov ecx, eax
call fcn.004e15d0
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov dword [ebp - 4], 0x17
test esi, esi
je 0x4da8a9
mov ecx, esi
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4da890
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x28]
call fcn.0044bdc0
lea ecx, [ebp - 0x678]
call fcn.0045baf0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x18
push ecx
lea ecx, [ebp - 0x58]
push ecx
mov ecx, dword [eax]
call fcn.004ff700
push eax
mov edx, str.https:__usercenter_dllrepair.greatsoftman.com_over_device
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x40]
call fcn.00466bb0
add esp, 4
lea ecx, [ebp - 0x58]
call fcn.0044bf40
mov byte [ebp - 4], 0x1d
mov edi, dword [ebp - 0x674]
test edi, edi
je 0x4da913
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x4da913
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne 0x4da913
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
sub esp, 0x18
mov byte [ebp - 4], 0x1c
mov esi, dword [ebx + 4]
mov ecx, esp
mov dword [ebp - 0x668], esp
push 0x7f87d4
call fcn.0044c260
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x40]
cmp dword [ebp - 0x2c], 8
push 0xc8
cmovae eax, dword [ebp - 0x40]
push 0x12c
sub esp, 0x18
mov ecx, esp
push eax
call fcn.0044c260
mov byte [ebp - 4], 0x1c
jmp 0x4da83b
mov ecx, dword [ebx + 0x5a8]
call fcn.00451150
jmp case.0x4da407.30040
lea ecx, [ebp - 0x678]
call fcn.004dcb20
mov eax, dword [eax]
mov edi, dword [eax + 0x21c]
test edi, edi
je 0x4da98d
lock inc dword [edi + 4]
mov edi, dword [eax + 0x21c]
mov eax, dword [eax + 0x218]
mov dword [ebp - 0x670], eax
mov dword [ebp - 0x690], eax
mov dword [ebp - 0x68c], edi
mov dword [ebp - 4], 0x20
or esi, 0xffffffff
mov ebx, dword [ebp - 0x674]
test ebx, ebx
je 0x4da9d8
mov eax, esi
lock xadd dword [ebx + 4], eax
jne 0x4da9d8
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
mov eax, esi
lock xadd dword [ebx + 8], eax
jne 0x4da9d8
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
lea ecx, [ebp - 0x688]
mov byte [ebp - 4], 0x1f
call fcn.0045b760
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x680]
mov eax, dword [eax]
mov bl, byte [eax + 0x1ac]
call fcn.0045b760
mov ecx, dword [ebp - 0x670]
push ebx
mov eax, dword [eax]
cmp dword [eax + 0x10], 3
sete al
push eax
call fcn.004a3840
mov byte [ebp - 0x669], al
mov byte [ebp - 4], 0x22
mov ebx, dword [ebp - 0x67c]
test ebx, ebx
je 0x4daa47
mov ecx, esi
lock xadd dword [ebx + 4], ecx
jne 0x4daa47
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
mov eax, esi
lock xadd dword [ebx + 8], eax
jne 0x4daa47
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
mov byte [ebp - 4], 0x23
mov ebx, dword [ebp - 0x684]
test ebx, ebx
je 0x4daa74
mov eax, esi
lock xadd dword [ebx + 4], eax
jne 0x4daa74
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
mov eax, esi
lock xadd dword [ebx + 8], eax
jne 0x4daa74
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
cmp byte [ebp - 0x669], 0
mov byte [ebp - 4], 0x1f
je 0x4daba0
call fcn.0045b8d0
push ecx
push 0x1f
mov ecx, eax
call fcn.004e15d0
mov ebx, dword [ebp - 0x670]
push 0
lea eax, [ebx + 0x294]
push eax
call dword [sym.imp.USER32.dll_FindWindowW]
lea ecx, [ebx + 0x74]
mov dword [ebp - 0x684], 0
push ecx
push dword [ebx + 0x70]
mov dword [ebp - 0x67c], eax
lea eax, [ebp - 0x5c]
push 0x7f8808
push 0x7f887c
push eax
call fcn.00460c10
push ecx
mov byte [ebp - 4], 0x24
mov ecx, esp
mov dword [ebp - 0x670], esp
push 0x7f889c
call fcn.0044c260
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x5c]
cmp dword [ebp - 0x48], 8
push 0x18b
cmovae eax, dword [ebp - 0x5c]
push 0x28f
sub esp, 0x18
mov ecx, esp
push eax
call fcn.0044c260
mov ebx, dword [ebp - 0x67c]
mov ecx, ebx
mov byte [ebp - 4], 0x24
call fcn.004d6660
add esp, 0x38
cmp eax, 1
jne 0x4dab8a
test ebx, ebx
je 0x4dab52
lea eax, [ebp - 0x684]
push eax
push ebx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [ebp - 0x684]
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push 4
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
lea ecx, [ebp - 0x5c]
call fcn.00460da0
mov dword [ebp - 4], 0x26
test edi, edi
je 0x4dab83
mov eax, esi
lock xadd dword [edi + 4], eax
jne 0x4dab83
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne 0x4dab83
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov eax, 1
jmp 0x4dabcb
mov ecx, dword [ebp - 0x668]
push 1
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CWindowWnd::Close_unsigned_int_]
lea ecx, [ebp - 0x5c]
call fcn.00460da0
mov dword [ebp - 4], 0x27
test edi, edi
je case.0x4da407.30040
mov eax, esi
lock xadd dword [edi + 4], eax
jne case.0x4da407.30040
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], esi
dec esi
jne case.0x4da407.30040
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006f4f1e
mov esp, ebp
pop ebp
ret 0x10
call fcn.0071598c
nop
add al, 0xa3
dec ebp
add byte [eax], al
mov al, byte [0x9e69004d]
dec ebp
add byte [esi - 0x62], bh
dec ebp
add byte [ebx - 0x36ffb262], dl
stosd dword es:[edi], eax
dec ebp
add byte [eax], al
add eax, 0x5050501
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84018437
add eax, dword [eax + edx*4]
pop edx
test al, 77
add byte [ecx - 0x59], al
dec ebp
add byte [esi], cl
movsb byte es:[edi], byte [esi]
dec ebp
add byte [ebp + 0x6f004da4], dh
movsd dword es:[edi], dword [esi]
dec ebp
add byte [eax], dh
cmpsb byte [esi], byte es:[edi]
dec ebp
add byte [ecx], dh
cmpsd dword [esi], dword es:[edi]
dec ebp
add byte [ecx + ebp*4 + 0x4d], bl
add byte [ecx + ebp*4 + 0x4d], ch
add cl, cl
stosd dword es:[edi], eax
dec ebp
add byte [eax], al
or dword [ecx], eax
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [edx], eax
add eax, dword [eax + 151587078]
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [edi], eax
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [eax], ecx
int3