Function at 0x46d6a0
Capabilities:
Check os version
Create process on windows
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5b222e
mov eax, dword fs:[0]
push eax
sub esp, 0x530
mov eax, dword [0x6336a0]
xor eax, esp
mov dword [esp + 0x528], eax
push ebx
push esi
push edi
mov eax, dword [0x6336a0]
xor eax, esp
push eax
lea eax, [esp + 0x540]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [esp + 0x28], ebx
mov eax, dword [esi + 0x20]
push eax
mov dword [esp + 0x30], esi
call dword [sym.imp.USER32.dll_UpdateWindow]
mov edi, dword [ebp + 8]
cmp edi, 0x4e20
jb 0x46d755
cmp edi, 0x5014
jae 0x46d761
lea eax, [edi - 0x4e20]
cmp eax, ebx
jl 0x46dad9
cmp eax, dword [0x63c6fc]
jge 0x46dad9
mov ecx, dword [0x63c6f8]
mov eax, dword [ecx + eax*4]
cmp eax, ebx
je 0x46dad9
mov ecx, dword [eax + 0xc]
push 0xffffffffffffffff
push 1
push ebx
push 1
push eax
push ebx
mov dword [eax + 0x24], ebx
mov edx, dword [esi + 0x5120]
push ecx
push edx
call fcn.004d5b30
jmp 0x46dad9
cmp edi, 0x5014
jb 0x46db9c
cmp edi, 0x55f0
jae 0x46db9c
call fcn.00555692
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x46d787
push 0x80004005
call fcn.00401f90
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
mov dword [esp + 0x548], ebx
call fcn.00555692
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x46d7b8
push 0x80004005
call fcn.00401f90
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x48], eax
mov byte [esp + 0x548], 1
call fcn.00555692
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x46d7ea
push 0x80004005
call fcn.00401f90
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x40], eax
mov byte [esp + 0x548], 2
call fcn.00555692
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x46d81c
push 0x80004005
call fcn.00401f90
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x20], eax
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x44]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x28]
push ecx
mov ecx, dword [ebp + 8]
add ecx, 0xffffafec
mov edx, 0x63c72c
mov byte [esp + 0x558], 3
call fcn.004d1f50
lea ebx, [esp + 0x1c]
call fcn.004146b0
mov edi, eax
call fcn.00414730
mov edx, dword [esp + 0x1c]
cmp dword [edx - 0xc], 0
je 0x46da33
push 5
lea eax, [esp + 0x40]
push eax
mov ecx, ebx
call fcn.00414630
mov byte [esp + 0x548], 4
mov eax, dword [eax]
push str.http:
mov ebx, 1
push eax
mov dword [esp + 0x30], ebx
call fcn.00577334
add esp, 8
test eax, eax
je 0x46d8da
push 6
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x24]
call fcn.00414630
mov eax, dword [eax]
push str.https:
push eax
mov ebx, 3
call fcn.00577334
add esp, 8
test eax, eax
mov byte [esp + 0x34], 0
jne 0x46d8df
mov byte [esp + 0x34], 1
test bl, 2
je 0x46d8f0
lea ecx, [esp + 0x30]
and ebx, 0xfffffffd
call fcn.00401f20
test bl, 1
mov dword [esp + 0x548], 3
je 0x46d909
lea ecx, [esp + 0x3c]
call fcn.00401f20
cmp byte [esp + 0x34], 0
je 0x46d99b
mov eax, dword [esp + 0x1c]
cmp dword [eax - 0xc], 0
jl 0x46d93a
push 0x5edf54
push eax
call fcn.0057781d
add esp, 8
test eax, eax
je 0x46d93a
mov ecx, dword [esp + 0x1c]
sub eax, ecx
sar eax, 1
jns 0x46d97d
push 0x5edf58
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x30]
push eax
call fcn.00401ba0
add esp, 0xc
push 0xffffffffffffffff
push 1
push 0
push 1
push 0
mov byte [esp + 0x55c], 5
mov eax, dword [eax]
mov ecx, dword [esi + 0x5120]
push 0
push eax
push ecx
call fcn.004d5b30
lea ecx, [esp + 0x28]
jmp 0x46da2e
mov edx, dword [esi + 0x5120]
push 0xffffffffffffffff
push 1
push 0
push 1
push 0
push 0
push ecx
push edx
call fcn.004d5b30
jmp 0x46da33
mov eax, dword [0x63c660]
push eax
push str._appdir
lea ecx, [esp + 0x24]
push ecx
call fcn.00414390
mov edx, dword [esp + 0x1c]
push 5
push 0
push 0
push edx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 2
je 0x46d9f4
cmp eax, 3
je 0x46d9f4
cmp eax, 0x20
jge 0x46da33
lea ecx, [esp + 0x14]
call fcn.00402700
mov byte [esp + 0x548], 7
mov eax, dword [esp + 0x1c]
push eax
push 0x5edf98
jmp 0x46da0f
lea ecx, [esp + 0x14]
call fcn.00402700
mov byte [esp + 0x548], 6
mov eax, dword [esp + 0x1c]
push eax
push 0x5edf84
lea ecx, [esp + 0x1c]
push ecx
call fcn.00404650
mov edx, dword [esp + 0x20]
add esp, 0xc
push 0
push 0
push edx
call fcn.0055e834
lea ecx, [esp + 0x14]
call fcn.00401f20
mov byte [esp + 0x548], 2
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46da5b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x548], 1
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46da83
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x548], 0
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46daab
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x548], 0xffffffff
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x46dad6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, dword [ebp + 8]
cmp edi, 0x56a4
je 0x4723ef
cmp edi, 0x56a5
je 0x4723ef
cmp edi, 0x56a6
je 0x4723ef
cmp edi, 0x56a7
je 0x4723ef
cmp edi, 0x56a8
je 0x4723ef
cmp edi, 0x56a9
je 0x4723ef
cmp edi, 0x56aa
je 0x4723ef
cmp edi, 0x56ac
je 0x4723ef
cmp edi, 0x56ae
je 0x4723ef
cmp edi, 0x56af
je 0x4723ef
cmp edi, 0x56ad
je 0x4723ef
cmp edi, 0x55f2
jne 0x46dbb5
mov ecx, dword [esi + 0x5120]
push ecx
call fcn.004d9dd0
jmp 0x472f56
cmp edi, 0x55f3
jne 0x46dbdc
mov edx, dword [esi + 0x5120]
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push str.editurl:
push edx
call fcn.004d5b30
jmp 0x472f56
cmp edi, 0x59de
jne 0x46dc2b
mov esi, dword [esi + 0x5120]
mov ecx, dword [esi + 0xa78]
mov edx, esi
call fcn.004da4e0
cmp eax, ebx
je 0x46fe72
mov ecx, dword [eax + 0x3e0]
cmp ecx, ebx
je 0x46fe72
mov eax, dword [eax + 0x20]
push ebx
push ecx
push 0x6c8
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x30
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x472f56
cmp edi, 0x55f4
jne 0x46dc52
mov ecx, dword [esi + 0x5120]
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push str.dailyword:
push ecx
call fcn.004d5b30
jmp 0x472f56
cmp edi, 0x5606
jne 0x46dcce
lea edx, [esp + 0x8c]
push edx
call fcn.0041d090
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 8
call fcn.005612bf
cmp eax, 1
jne 0x46dcb2
mov eax, dword [esi + 0x20]
push ebx
push ebx
push 0x10
push eax
mov dword [esi + 0x7658], ebx
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, dword [0x63c65c]
push 5
push ebx
push str._rerun
push ecx
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 0xffffffff
call fcn.0041d190
jmp 0x472f56
cmp edi, 0x55fc
jne 0x46dd06
push 2
mov ecx, esi
call fcn.00463a10
mov esi, dword [esi + 0x5120]
cmp esi, ebx
je 0x472f56
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push str.http:__bbs.sogou.com_t_w04044300s_CC_C7_B9_FB_E4_AF_C0_C0_C6_F7page1
push esi
call fcn.004d5b30
jmp 0x472f56
cmp edi, 0x560a
jne 0x46dd1f
push ebx
push ebx
push 0x5ee084
call fcn.0055e834
jmp 0x472f56
cmp edi, 0x5607
jne 0x46dd38
push 0x8053
mov ecx, esi
call fcn.00473390
jmp 0x472f56
cmp edi, 0x5608
jne 0x46dd51
push 0x8056
mov ecx, esi
call fcn.00473390
jmp 0x472f56
cmp edi, 0x5a53
jne 0x46dd64
push esi
call fcn.00476630
jmp 0x472f56
cmp edi, 0x5a52
jne 0x46dd77
push esi
call fcn.00476760
jmp 0x472f56
cmp edi, 0x5a51
jne 0x46dd8a
push esi
call fcn.00476860
jmp 0x472f56
cmp edi, 0x5a50
jne 0x46dd9d
push esi
call fcn.00476990
jmp 0x472f56
cmp edi, 0x5627
jne 0x46de41
push 0x5ee098
lea ecx, [esp + 0x20]
call fcn.004023b0
push ebx
mov dword [esp + 0x54c], 9
mov edx, dword [esp + 0x20]
push 4
push edx
call fcn.0055e834
cmp eax, 6
jne 0x46de33
call fcn.00453060
cmp eax, ebx
jle 0x46de06
push eax
lea eax, [esp + 0x20]
push 0x5ee120
push eax
call fcn.00404650
mov ecx, dword [esp + 0x28]
add esp, 0xc
push ebx
push 4
push ecx
call fcn.0055e834
cmp eax, 7
je 0x470da0
call fcn.004530e0
test eax, eax
push ebx
push ebx
je 0x46de29
push 0x5ee180
call fcn.0055e834
lea ecx, [esp + 0x1c]
call fcn.00401f20
jmp 0x472f56
push 0x5ee1c4
call fcn.0055e834
lea ecx, [esp + 0x1c]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x5609
jne 0x46de67
push 5
push ebx
push str.user32.dll_LockWorkStation
push str.rundll32.exe
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x472f56
cmp edi, 0x560b
jne 0x46de7d
push 2
mov ecx, esi
call fcn.00463a10
jmp 0x472f56
cmp edi, 0x560c
jne 0x46de93
push 1
mov ecx, esi
call fcn.00463a10
jmp 0x472f56
cmp edi, 0x560d
jne 0x46dea8
push ebx
mov ecx, esi
call fcn.00463a10
jmp 0x472f56
cmp edi, 0x5a5d
jne 0x46debc
mov ecx, esi
call fcn.0046cb60
jmp 0x472f56
cmp edi, 0x5a5e
jne 0x46ded3
mov ecx, 1
call fcn.0046ce40
jmp 0x472f56
cmp edi, 0x5a5f
jne 0x46e2dc
call fcn.004140d0
cmp dword [0x63c8fc], ebx
je 0x472f56
mov esi, dword [esi + 0x5120]
mov ecx, dword [esi + 0xa78]
mov edx, esi
call fcn.004da4e0
mov esi, eax
cmp esi, ebx
je 0x472f56
cmp dword [0x63c5cc], ebx
jne 0x46e29e
lea edx, [esi + 0x1d0]
push edx
lea ecx, [esp + 0x20]
call fcn.004020f0
lea ebx, [esp + 0x1c]
mov dword [esp + 0x548], 0xa
call fcn.004146b0
mov edi, eax
call fcn.00414730
call fcn.0044a580
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx - 0xc]
mov edi, 0x20
cmp eax, edi
jle 0x46df92
mov eax, dword [ecx - 8]
mov edx, 1
sub edx, dword [ecx - 4]
sub eax, edi
or eax, edx
jge 0x46df76
push edi
mov ecx, ebx
call fcn.00401fe0
mov ecx, dword [esp + 0x1c]
cmp dword [ecx - 8], edi
jge 0x46df85
push 0x80070057
call fcn.00401f90
mov dword [ecx - 0xc], edi
mov eax, dword [esp + 0x1c]
mov word [eax + 0x40], 0
lea ecx, [esp + 0x18]
call fcn.00402700
mov byte [esp + 0x548], 0xb
cmp dword [0x63c5d0], 0
je 0x46e0ff
push 0x5ee258
lea ecx, [esp + 0x38]
call fcn.004023b0
lea ecx, [esp + 0x14]
call fcn.00402700
mov bl, 0xd
mov byte [esp + 0x548], bl
mov eax, dword [0x63c5d4]
push eax
push eax
push eax
lea ecx, [esp + 0x20]
push 0x5ee320
push ecx
call fcn.00404650
mov edx, dword [esp + 0x28]
add esp, 0x14
push 0x5d2b58
push edx
lea eax, [esp + 0x3c]
push eax
call fcn.00414390
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x30]
push eax
call fcn.00401ae0
add esp, 0xc
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x54c], 0xe
call fcn.00402330
lea ecx, [esp + 0x28]
mov byte [esp + 0x548], bl
call fcn.00401f20
lea ecx, [esp + 0x28]
push 0x5ee344
push ecx
mov ecx, 0x63c5d4
call fcn.00401c80
add esp, 8
push 0
push 0
mov byte [esp + 0x550], 0xf
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x24]
mov eax, dword [eax]
push edx
push 6
push ecx
push eax
push 0
lea ecx, [esp + 0xa8]
call fcn.00561f56
lea ecx, [esp + 0x28]
mov byte [esp + 0x548], 0x11
call fcn.00401f20
mov edi, dword [0x63c5d8]
lea ecx, [esp + 0x8c]
call fcn.00561b4b
lea ecx, [esp + 0x8c]
mov dword [eax + 0x2c], edi
call fcn.00561e27
cmp eax, 1
jne 0x46e0da
lea edx, [esp + 0x30]
push edx
lea ecx, [esp + 0x90]
call fcn.00562107
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x54c], 0x12
call fcn.00402330
lea ecx, [esp + 0x30]
call fcn.00401f20
lea ecx, [esp + 0x8c]
mov byte [esp + 0x548], bl
call fcn.00561f15
lea ecx, [esp + 0x14]
call fcn.00401f20
lea ecx, [esp + 0x34]
jmp 0x46e210
mov eax, dword [0x63c5d8]
cmp dword [eax - 0xc], 0
push 0x5d616c
jne 0x46e17c
lea ecx, [esp + 0x50]
push 0x63c684
push ecx
call fcn.00401ba0
add esp, 0xc
lea edx, [esp + 0x1c]
push edx
push eax
lea eax, [esp + 0x44]
push eax
mov byte [esp + 0x554], 0x13
call fcn.00401ae0
add esp, 0xc
push 0x5d2a04
push eax
lea ecx, [esp + 0x38]
push ecx
mov byte [esp + 0x554], 0x14
call fcn.00401ba0
add esp, 0xc
push 0x63c5d4
push eax
lea edx, [esp + 0x30]
push edx
mov byte [esp + 0x554], 0x15
call fcn.00401ae0
add esp, 0xc
mov byte [esp + 0x548], 0x16
jmp 0x46e1e7
lea eax, [esp + 0x50]
push 0x63c5d8
push eax
call fcn.00401ba0
add esp, 0xc
lea ecx, [esp + 0x1c]
push ecx
push eax
lea edx, [esp + 0x44]
push edx
mov byte [esp + 0x554], 0x17
call fcn.00401ae0
add esp, 0xc
push 0x5d2a04
push eax
lea eax, [esp + 0x38]
push eax
mov byte [esp + 0x554], 0x18
call fcn.00401ba0
add esp, 0xc
push 0x63c5d4
push eax
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x554], 0x19
call fcn.00401ae0
add esp, 0xc
mov byte [esp + 0x548], 0x1a
push eax
lea ecx, [esp + 0x1c]
call fcn.00402330
lea ecx, [esp + 0x28]
call fcn.00401f20
lea ecx, [esp + 0x30]
call fcn.00401f20
lea ecx, [esp + 0x3c]
call fcn.00401f20
lea ecx, [esp + 0x4c]
mov byte [esp + 0x548], 0xb
call fcn.00401f20
mov edi, dword [esp + 0x18]
cmp dword [edi - 0xc], 0
je 0x46e287
mov edx, dword [0x63c8fc]
mov eax, dword [edx + 4]
push eax
push edi
call fcn.004f1920
test eax, eax
jne 0x46e247
push eax
push eax
push 0x5ee34c
call fcn.0055e834
lea ecx, [esp + 0x14]
call fcn.00402700
push edi
lea ecx, [esp + 0x18]
push 0x5ee35c
push ecx
mov byte [esp + 0x554], 0x1b
call fcn.00404650
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x20]
add esp, 0xc
add ecx, 0x71f4
call fcn.004a1150
lea ecx, [esp + 0x14]
call fcn.00401f20
lea ecx, [esp + 0x18]
call fcn.00401f20
lea ecx, [esp + 0x1c]
call fcn.00401f20
jmp 0x472f56
mov edx, dword [0x63c8fc]
mov eax, dword [edx + 4]
push eax
push ebx
call fcn.004f1920
test eax, eax
jne 0x46e2c3
push ebx
push ebx
push 0x5ee37c
call fcn.0055e834
jmp 0x472f56
mov ecx, dword [esp + 0x2c]
add ecx, 0x71f4
mov eax, 0x5ee394
call fcn.004a1150
jmp 0x472f56
cmp edi, 0x5a60
jne 0x46e5ee
call fcn.004140d0
cmp dword [0x63c8fc], ebx
je 0x472f56
push 0x63c5d8
lea ecx, [esp + 0x38]
call fcn.004020f0
mov ebx, 0x1c
mov dword [esp + 0x548], ebx
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx - 0xc]
test eax, eax
jne 0x46e390
mov edx, dword [0x63c684]
push esi
push edx
lea eax, [esp + 0x94]
push eax
call fcn.00511b00
lea ecx, [esp + 0x8c]
mov byte [esp + 0x548], 0x1d
call fcn.00511db0
cmp eax, 1
jne 0x46e5cd
lea esi, [esp + 0x28]
lea eax, [esp + 0x8c]
call fcn.0050b000
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x54c], 0x1e
call fcn.00402330
mov ecx, esi
call fcn.00401f20
lea ecx, [esp + 0x8c]
mov byte [esp + 0x548], bl
call fcn.00511ca0
mov esi, dword [esp + 0x2c]
mov eax, dword [esi + 0x5120]
mov ecx, dword [eax + 0xa50]
add eax, 0xa48
mov eax, dword [eax + 0x1c]
xor edi, edi
add eax, ecx
test eax, eax
mov dword [esp + 0x24], edi
mov dword [esp + 0x40], edi
jle 0x46e566
mov edx, dword [esi + 0x5120]
mov ecx, edi
call fcn.004da4e0
test eax, eax
mov dword [esp + 0x20], eax
je 0x46e541
mov ecx, eax
add ecx, 0x1d0
push ecx
lea ecx, [esp + 0x20]
call fcn.004020f0
lea ebx, [esp + 0x1c]
mov byte [esp + 0x548], 0x1f
call fcn.004146b0
mov edi, eax
call fcn.00414730
call fcn.0044a580
mov ecx, dword [esp + 0x1c]
mov ebx, 0x20
cmp dword [ecx - 0xc], ebx
jle 0x46e443
mov eax, dword [ecx - 8]
mov edx, 1
sub edx, dword [ecx - 4]
sub eax, ebx
or eax, edx
jge 0x46e42d
push ebx
lea ecx, [esp + 0x20]
call fcn.00401fe0
mov ecx, dword [esp + 0x1c]
cmp dword [ecx - 8], ebx
jl 0x46df7b
mov dword [ecx - 0xc], ebx
mov edx, dword [esp + 0x1c]
mov word [edx + 0x40], 0
lea ecx, [esp + 0x14]
call fcn.00402700
push 0x5d616c
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x54]
push ecx
mov byte [esp + 0x554], bl
call fcn.00401ba0
add esp, 0xc
lea edx, [esp + 0x1c]
push edx
push eax
lea eax, [esp + 0x44]
push eax
mov byte [esp + 0x554], 0x21
call fcn.00401ae0
add esp, 0xc
push 0x5d2a04
push eax
lea ecx, [esp + 0x38]
push ecx
mov byte [esp + 0x554], 0x22
call fcn.00401ba0
add esp, 0xc
push 0x63c5d4
push eax
lea edx, [esp + 0x30]
push edx
mov byte [esp + 0x554], 0x23
call fcn.00401ae0
add esp, 0xc
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x54c], 0x24
call fcn.00402330
lea ecx, [esp + 0x28]
call fcn.00401f20
lea ecx, [esp + 0x30]
call fcn.00401f20
lea ecx, [esp + 0x3c]
call fcn.00401f20
lea ecx, [esp + 0x4c]
mov byte [esp + 0x548], bl
call fcn.00401f20
mov eax, dword [esp + 0x14]
cmp dword [eax - 0xc], 0
je 0x46e523
mov ecx, dword [0x63c8fc]
mov edx, dword [ecx + 4]
mov esi, dword [esp + 0x20]
push edx
push eax
call fcn.004f1920
test eax, eax
mov esi, dword [esp + 0x2c]
je 0x46e523
add dword [esp + 0x24], 1
lea ecx, [esp + 0x14]
call fcn.00401f20
lea ecx, [esp + 0x1c]
mov byte [esp + 0x548], 0x1c
call fcn.00401f20
mov edi, dword [esp + 0x40]
mov eax, dword [esi + 0x5120]
mov ecx, dword [eax + 0xa50]
add eax, 0xa48
mov eax, dword [eax + 0x1c]
add edi, 1
add eax, ecx
cmp edi, eax
mov dword [esp + 0x40], edi
jl 0x46e3b8
lea ecx, [esp + 0x14]
call fcn.00402700
mov byte [esp + 0x548], 0x25
mov eax, dword [esp + 0x24]
mov edi, dword [esp + 0x34]
push eax
push edi
lea ecx, [esp + 0x1c]
push 0x5ee3b0
push ecx
call fcn.00404650
mov eax, dword [esp + 0x24]
add esp, 0x10
lea ecx, [esi + 0x71f4]
call fcn.004a1150
push 5
push 0
push 0
push edi
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0x14]
call fcn.00401f20
lea ecx, [esp + 0x34]
call fcn.00401f20
jmp 0x472f56
lea ecx, [esp + 0x8c]
mov byte [esp + 0x548], bl
call fcn.00511ca0
lea ecx, [esp + 0x34]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x5a61
jne 0x46e636
lea edx, [esp + 0x8c]
push edx
call fcn.004247d0
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 0x26
call fcn.005612bf
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 0xffffffff
call fcn.00424880
jmp 0x472f56
cmp edi, 0x5640
jne 0x46e651
mov eax, dword [esi + 0x5120]
push eax
xor eax, eax
call fcn.004de8d0
jmp 0x472f56
cmp edi, 0x5a28
jne 0x46e66e
mov ecx, dword [esi + 0x5120]
push 1
push ecx
xor ecx, ecx
call fcn.004dea80
jmp 0x472f56
cmp edi, 0x5a29
jne 0x46e68a
mov edx, dword [esi + 0x5120]
push ebx
push edx
xor ecx, ecx
call fcn.004dea80
jmp 0x472f56
cmp edi, 0x5642
jne 0x46e6a8
mov eax, dword [esi + 0x5120]
push eax
mov eax, 1
call fcn.004de8d0
jmp 0x472f56
cmp edi, 0x5a2a
jne 0x46e6c8
mov ecx, dword [esi + 0x5120]
push 1
push ecx
mov ecx, 1
call fcn.004dea80
jmp 0x472f56
cmp edi, 0x5a2b
jne 0x46e6e7
mov edx, dword [esi + 0x5120]
push ebx
push edx
mov ecx, 1
call fcn.004dea80
jmp 0x472f56
cmp edi, 0x5645
jne 0x46e743
mov edi, dword [esi + 0x5120]
mov esi, 1
cmp dword [0x63c2b8], esi
jne 0x46e707
mov esi, 2
mov ecx, dword [edi + 0xa78]
mov edx, edi
call fcn.004da4e0
cmp eax, ebx
mov dword [0x63c2b8], esi
je 0x46e725
mov esi, eax
call fcn.004ab460
push 0x63c290
call fcn.00448830
mov eax, dword [edi + 0xd4]
push ebx
push ebx
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x472f56
cmp edi, 0x5a2c
jne 0x46e763
mov ecx, dword [esi + 0x5120]
push 1
push ecx
mov ecx, 2
call fcn.004dea80
jmp 0x472f56
cmp edi, 0x5a2d
jne 0x46e782
mov edx, dword [esi + 0x5120]
push ebx
push edx
mov ecx, 2
call fcn.004dea80
jmp 0x472f56
cmp edi, 0x5643
jne 0x46e804
mov ebx, dword [esi + 0x5120]
mov edi, 1
cmp dword [0x63c2bc], edi
jne 0x46e7a2
mov edi, 2
mov ecx, dword [ebx + 0xa78]
mov edx, ebx
call fcn.004da4e0
mov esi, eax
test esi, esi
mov dword [0x63c2bc], edi
je 0x46e7e4
mov edi, dword [esi + 0x184]
call fcn.004ab460
mov eax, dword [esi + 0x184]
cmp eax, edi
je 0x46e7e4
test eax, eax
mov ecx, esi
je 0x46e7da
xor edi, edi
jmp 0x46e7df
mov edi, 1
call fcn.004f0940
push 0x63c290
call fcn.00448830
mov eax, dword [ebx + 0xd4]
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x472f56
cmp edi, 0x5a2e
jne 0x46e824
mov ecx, dword [esi + 0x5120]
push 1
push ecx
mov ecx, 3
call fcn.004dea80
jmp 0x472f56
cmp edi, 0x5a2f
jne 0x46e843
mov edx, dword [esi + 0x5120]
push ebx
push edx
mov ecx, 3
call fcn.004dea80
jmp 0x472f56
cmp edi, 0x5641
jne 0x46e8c0
mov edi, dword [esi + 0x5120]
mov ebx, 1
cmp dword [0x63c2c0], ebx
jne 0x46e863
mov ebx, 2
mov ecx, dword [edi + 0xa78]
mov edx, edi
call fcn.004da4e0
mov esi, eax
test esi, esi
mov dword [0x63c5c8], 0
mov dword [0x63c2c0], ebx
je 0x46e8a0
mov ebx, dword [esi + 0x188]
call fcn.004ab460
cmp dword [esi + 0x188], ebx
je 0x46e8a0
mov eax, edi
call fcn.004d95a0
push 0x63c290
call fcn.00448830
mov eax, dword [edi + 0xd4]
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x472f56
cmp edi, 0x5a30
jne 0x46e8e0
mov ecx, dword [esi + 0x5120]
push 1
push ecx
mov ecx, 4
call fcn.004dea80
jmp 0x472f56
cmp edi, 0x5a31
jne 0x46e8ff
mov edx, dword [esi + 0x5120]
push ebx
push edx
mov ecx, 4
call fcn.004dea80
jmp 0x472f56
cmp edi, 0x5a3a
jne 0x46e980
mov edi, dword [esi + 0x5120]
mov ebx, 1
cmp dword [0x63c2c4], ebx
jne 0x46e91f
mov ebx, 2
mov ecx, dword [edi + 0xa78]
mov edx, edi
call fcn.004da4e0
mov esi, eax
test esi, esi
mov dword [0x63c2c4], ebx
je 0x46e960
mov ebx, dword [esi + 0x194]
call fcn.004ab460
mov eax, dword [esi + 0x194]
cmp eax, ebx
je 0x46e960
test eax, eax
je 0x46e959
push esi
call fcn.004abc10
jmp 0x46e960
mov eax, esi
call fcn.004eaca0
push 0x63c290
call fcn.00448830
mov eax, dword [edi + 0xd4]
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x472f56
cmp edi, 0x5a3b
jne 0x46e9a0
mov ecx, dword [esi + 0x5120]
push 1
push ecx
mov ecx, 5
call fcn.004dea80
jmp 0x472f56
cmp edi, 0x5a3c
jne 0x46e9bf
mov edx, dword [esi + 0x5120]
push ebx
push edx
mov ecx, 5
call fcn.004dea80
jmp 0x472f56
cmp edi, 0x5a39
jne 0x46ea07
lea eax, [esp + 0x8c]
push eax
call fcn.00420ac0
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 0x27
call fcn.005612bf
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 0xffffffff
call fcn.00420b90
jmp 0x472f56
cmp edi, 0x5a38
jne 0x46ea4f
lea ecx, [esp + 0x8c]
push ecx
call fcn.00420740
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 0x28
call fcn.005612bf
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 0xffffffff
call fcn.00420810
jmp 0x472f56
cmp edi, 0x5a26
jne 0x46eaad
mov esi, dword [esi + 0x5120]
xor edx, edx
cmp dword [0x63c5c0], ebx
sete dl
push edx
call fcn.004de250
cmp dword [0x63c5c0], ebx
je 0x472f56
mov eax, dword [esp + 0x2c]
mov eax, dword [eax + 0x5120]
mov ecx, dword [eax + 0xa50]
mov edx, dword [eax + 0xa64]
add ecx, edx
jne 0x472f56
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push ebx
push eax
call fcn.004d5b30
jmp 0x472f56
cmp edi, 0x5a25
jne 0x46eb0b
xor eax, eax
cmp dword [0x63c5c4], eax
mov ebx, esi
sete al
call fcn.0046c050
cmp dword [0x63c5c4], 0
je 0x472f56
mov eax, dword [esi + 0x5120]
mov ecx, dword [eax + 0xa50]
add eax, 0xa48
mov eax, dword [eax + 0x1c]
add eax, ecx
jne 0x472f56
mov ecx, 0x63c840
call fcn.00402180
push 0xc1c
mov ecx, esi
call fcn.0046d460
jmp 0x472f56
cmp edi, 0x5a27
jne 0x46eb37
mov eax, dword [esi + 0x5120]
call fcn.004de220
test eax, eax
mov eax, dword [esi + 0x5120]
jle 0x4722c7
push ebx
call fcn.004de4f0
jmp 0x472f56
cmp edi, 0x5659
jne 0x46ec71
mov esi, dword [esi + 0x5120]
mov ecx, dword [esi + 0xa78]
mov edx, esi
call fcn.004da4e0
mov esi, eax
cmp esi, ebx
je 0x472f56
lea ecx, [esp + 0x18]
call fcn.00402700
lea ecx, [esp + 0x14]
mov dword [esp + 0x548], 0x29
call fcn.00402700
lea ecx, [esp + 0x24]
call fcn.00402700
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x1c]
mov bl, 0x2b
push edx
lea ecx, [esi + 0xb8]
mov byte [esp + 0x550], bl
call fcn.004545d0
mov eax, dword [esp + 0x20]
add esp, 8
cmp dword [eax - 0xc], 0
je 0x46ec51
lea esi, [esp + 0x18]
call fcn.0044d7f0
push str._site:
lea ecx, [esp + 0x34]
push 0x63c840
push ecx
call fcn.00401ba0
add esp, 0xc
mov edx, esi
push edx
push eax
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x554], 0x2c
call fcn.00401ae0
add esp, 0xc
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x54c], 0x2d
call fcn.00402330
lea ecx, [esp + 0x28]
call fcn.00401f20
lea ecx, [esp + 0x30]
mov byte [esp + 0x548], bl
call fcn.00401f20
mov ecx, dword [esp + 0x14]
push ecx
lea edx, [esp + 0x28]
push str.http:__www.tgsoso.com__key_stypeeng
push edx
call fcn.00404650
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx + 0x5120]
add esp, 0xc
push 0xffffffffffffffff
push 1
push 0
push 1
push 0
push 0
push eax
push edx
call fcn.004d5b30
lea ecx, [esp + 0x24]
call fcn.00401f20
lea ecx, [esp + 0x14]
call fcn.00401f20
lea ecx, [esp + 0x18]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x560e
jne 0x46ec92
mov esi, dword [esi + 0x5120]
cmp esi, ebx
je 0x472f56
push esi
call fcn.004d96d0
jmp 0x472f56
cmp edi, 0x560f
jne 0x46ee02
lea ecx, [esp + 0x24]
call fcn.00402700
lea ecx, [esp + 0x14]
mov dword [esp + 0x548], 0x2e
call fcn.00402700
lea ecx, [esp + 0x18]
call fcn.00402700
lea ecx, [esp + 0x1c]
call fcn.00402700
mov byte [esp + 0x548], 0x31
mov eax, dword [0x63c450]
mov eax, dword [eax + 0x5120]
cmp eax, ebx
je 0x46edd9
lea ebx, [esp + 0x1c]
lea edi, [esp + 0x24]
call fcn.004d9d20
mov ecx, dword [esp + 0x24]
cmp dword [ecx - 0xc], 0
je 0x46edd9
lea esi, [esp + 0x14]
call fcn.00452920
mov edx, dword [esp + 0x1c]
cmp dword [edx - 0xc], 0
jne 0x46ed22
push 0x5e9ea8
mov ecx, ebx
call fcn.004021f0
lea ebx, [esp + 0x1c]
call fcn.0044a580
push 0x5d616c
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.00401ba0
add esp, 0xc
mov edx, ebx
push edx
push eax
lea eax, [esp + 0x38]
push eax
mov byte [esp + 0x554], 0x32
call fcn.00401ae0
add esp, 0xc
push 0x5db9ac
push eax
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x554], 0x33
call fcn.00401ba0
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x54c], 0x34
call fcn.00402330
lea ecx, [esp + 0x28]
call fcn.00401f20
lea ecx, [esp + 0x30]
call fcn.00401f20
lea ecx, [esp + 0x3c]
mov byte [esp + 0x548], 0x31
call fcn.00401f20
mov esi, dword [esp + 0x18]
push 1
push esi
lea ecx, [esp + 0x2c]
call fcn.0044a9d0
add esp, 8
test eax, eax
je 0x46edd9
mov edx, dword [esp + 0x14]
push 5
push edx
push 0
push esi
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0x1c]
call fcn.00401f20
lea ecx, [esp + 0x18]
call fcn.00401f20
lea ecx, [esp + 0x14]
call fcn.00401f20
lea ecx, [esp + 0x24]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x5610
jne 0x46ee27
mov eax, dword [0x63c450]
mov eax, dword [eax + 0x5120]
cmp eax, ebx
je 0x472f56
call fcn.004d8a30
jmp 0x472f56
cmp edi, 0x5611
jne 0x46ee4d
mov ecx, dword [0x63c450]
mov ecx, dword [ecx + 0x5120]
cmp ecx, ebx
je 0x472f56
call fcn.004da830
jmp 0x472f56
cmp edi, 0x564d
jne 0x46eea7
mov edx, dword [0x63c450]
cmp dword [edx + 0x5120], ebx
je 0x472f56
lea eax, [esp + 0x8c]
push eax
call fcn.00424d30
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 0x35
call fcn.005612bf
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 0xffffffff
call fcn.00424df0
jmp 0x472f56
cmp edi, 0x5652
jne 0x46eecd
mov ecx, dword [0x63c450]
mov ecx, dword [ecx + 0x5120]
cmp ecx, ebx
je 0x472f56
call fcn.004da560
jmp 0x472f56
cmp edi, 0x5601
jne 0x46eedf
call fcn.005163f0
jmp 0x472f56
cmp edi, 0x5602
jne 0x46eeff
mov esi, dword [esi + 0x5120]
cmp esi, ebx
je 0x472f56
call fcn.004d9680
jmp 0x472f56
cmp edi, 0x5603
jne 0x46ef47
lea edx, [esp + 0x8c]
push edx
call fcn.0042f910
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 0x36
call fcn.005612bf
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 0xffffffff
call fcn.0042fa40
jmp 0x472f56
cmp edi, 0x5604
jne 0x46efc2
cmp dword [esi + 0x71ec], ebx
jne 0x46efa4
push 0x1ac
call fcn.0055514b
add esp, 4
mov dword [esp + 0x50], eax
cmp eax, ebx
mov dword [esp + 0x548], 0x37
je 0x46ef7f
push eax
call fcn.00458d00
jmp 0x46ef81
xor eax, eax
mov dword [esp + 0x548], 0xffffffff
mov dword [esi + 0x71ec], eax
mov edx, dword [eax]
push esi
mov ecx, eax
mov eax, dword [edx + 0x134]
push 0xdf
call eax
mov ecx, dword [esi + 0x71ec]
push ebx
call fcn.00557a7a
mov ecx, dword [esi + 0x71ec]
push 1
call fcn.0055c1c8
jmp 0x472f56
lea ecx, [edi - 0x571c]
cmp ecx, 0x13
ja 0x46efe4
lea edx, [edi - 0x571c]
push edx
lea eax, [esi + 0x4584]
call fcn.004b6560
jmp 0x46dad9
cmp edi, 0x55f5
jne 0x46effc
lea eax, [esi + 0x4584]
call fcn.004b60a0
jmp 0x472f56
cmp edi, 0x55fa
jne 0x46f01a
mov ecx, dword [0x63c450]
add ecx, 0x4584
call fcn.004b8c30
jmp 0x472f56
cmp edi, 0x55fb
jne 0x46f038
mov ecx, dword [0x63c450]
add ecx, 0x4584
call fcn.004b8ca0
jmp 0x472f56
cmp edi, 0x55f6
jne 0x46f04a
call fcn.004731b0
jmp 0x472f56
cmp edi, 0x55f7
jne 0x46f05c
call fcn.004731f0
jmp 0x472f56
cmp edi, 0x55f8
jne 0x46f06f
push esi
call fcn.00473230
jmp 0x472f56
cmp edi, 0x55f9
jne 0x46f082
push esi
call fcn.004732e0
jmp 0x472f56
cmp edi, 0x55fd
jne 0x46f0e1
lea ecx, [esp + 0x14]
call fcn.00402700
lea eax, [esp + 0x14]
push eax
lea ecx, [esi + 0x4584]
mov dword [esp + 0x54c], 0x38
call fcn.004b8ab0
mov eax, dword [esp + 0x14]
cmp dword [eax - 0xc], ebx
je 0x46f0d3
mov ebx, eax
mov edi, 0x63c22c
call fcn.004c2ae0
mov ecx, edi
call fcn.004c6700
push eax
call fcn.00455e40
add esp, 4
lea ecx, [esp + 0x14]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x55ff
jne 0x46f1e7
lea ecx, [esp + 0x8c]
push ecx
call fcn.00426f30
push 0x5ee444
lea ecx, [esp + 0x104]
mov dword [esp + 0x54c], 0x39
call fcn.004021f0
push 0x5ee460
lea ecx, [esp + 0x108]
call fcn.004021f0
push str.http:__zhangmen.baidu.com_promotion_10019_287427.html
lea ecx, [esp + 0x10c]
call fcn.004021f0
lea ecx, [esp + 0x8c]
call fcn.005612bf
cmp eax, 1
jne 0x46f670
lea edx, [esp + 0x108]
lea ecx, [esi + 0x4e94]
push edx
call fcn.00402330
lea ebx, [esi + 0x4584]
mov ecx, 4
call fcn.004b5b00
test eax, eax
jl 0x46f670
cmp eax, dword [ebx + 0x8f0]
jge 0x46f1e2
mov ecx, dword [ebx + 0x8ec]
lea edx, [eax*4]
add ecx, edx
cmp eax, dword [ebx + 0x8f0]
mov ecx, dword [ecx]
mov esi, dword [ecx + 4]
jge 0x46f1e2
mov eax, dword [ebx + 0x8ec]
add eax, edx
mov edx, dword [0x63c82c]
mov ecx, dword [edx + 0xa0]
mov edx, dword [eax]
push ecx
add edx, 0xc
push 0x5f8938
push edx
call fcn.00404650
add esp, 0xc
push 0
push ebx
call fcn.004b7140
mov ecx, esi
mov dword [esi + 0x148], 0x28
call fcn.004c8020
jmp 0x46f670
call fcn.00555520
cmp edi, 0x5613
jne 0x46f2f0
lea eax, [esp + 0x8c]
push eax
call fcn.00426f30
push 0x5d56f4
lea ecx, [esp + 0x104]
mov dword [esp + 0x54c], 0x3a
call fcn.004021f0
push 0x5ee540
lea ecx, [esp + 0x108]
call fcn.004021f0
push str.http:__list.mp3.baidu.com_list_2007graduation.html
lea ecx, [esp + 0x10c]
call fcn.004021f0
lea ecx, [esp + 0x8c]
call fcn.005612bf
cmp eax, 1
jne 0x46f670
lea edx, [esp + 0x108]
lea ecx, [esi + 0x4e98]
push edx
call fcn.00402330
lea ebx, [esi + 0x4584]
mov ecx, 4
call fcn.004b5b00
test eax, eax
jl 0x46f670
cmp eax, dword [ebx + 0x8f0]
jge 0x46f1e2
mov ecx, dword [ebx + 0x8ec]
lea edx, [eax*4]
add ecx, edx
cmp eax, dword [ebx + 0x8f0]
mov ecx, dword [ecx]
mov esi, dword [ecx + 4]
jge 0x46f1e2
mov eax, dword [ebx + 0x8ec]
add eax, edx
mov edx, dword [0x63c82c]
mov ecx, dword [edx + 0xa8]
mov edx, dword [eax]
push ecx
add edx, 0xc
push 0x5f8938
push edx
call fcn.00404650
add esp, 0xc
push 0
push ebx
call fcn.004b7140
mov ecx, esi
mov dword [esi + 0x148], 0x2a
call fcn.004c8020
jmp 0x46f670
cmp edi, 0x5600
jne 0x46f394
lea eax, [esp + 0x8c]
push eax
call fcn.004169d0
push 0x5ee610
lea ecx, [esp + 0x104]
mov dword [esp + 0x54c], 0x3b
call fcn.004021f0
push 0x5ee620
lea ecx, [esp + 0x108]
call fcn.004021f0
push 0x5ee660
lea ecx, [esp + 0x10c]
call fcn.004021f0
lea ecx, [esp + 0x8c]
call fcn.005612bf
cmp eax, 1
jne 0x46f378
lea edx, [esp + 0x108]
lea ecx, [esi + 0x4e9c]
push edx
call fcn.00402330
push 0x29
lea eax, [esi + 0x4584]
call fcn.004b6420
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 0xffffffff
call fcn.00416aa0
jmp 0x472f56
cmp edi, 0x561b
jne 0x46f3ac
lea eax, [esi + 0x4584]
call fcn.004b6100
jmp 0x472f56
lea eax, [edi - 0x5780]
cmp eax, 0x13
ja 0x46f3ce
lea ecx, [edi - 0x5780]
push ecx
lea eax, [esi + 0x4584]
call fcn.004b62b0
jmp 0x46dad9
lea edx, [edi - 0x56b8]
cmp edx, 0x63
ja 0x46f3f0
lea eax, [edi - 0x56b8]
push eax
lea eax, [esi + 0x4584]
call fcn.004b6420
jmp 0x46dad9
cmp edi, 0x5628
jne 0x46f409
push 0x805a
mov ecx, esi
call fcn.00473390
jmp 0x472f56
cmp edi, 0x5629
jne 0x46f449
xor ecx, ecx
cmp dword [0x63c114], ebx
sete cl
mov dword [0x63c114], ecx
cmp dword [esi + 0xe8], 2
jne 0x472f56
push esi
call fcn.004632e0
mov edx, dword [esi + 0x2360]
push ebx
push ebx
push edx
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x472f56
cmp edi, 0x5689
jne 0x46f475
xor eax, eax
cmp dword [0x63c1ac], ebx
push ebx
sete al
push ebx
mov dword [0x63c1ac], eax
mov ecx, dword [esi + 0x3b88]
push ecx
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x472f56
cmp edi, 0x561c
jne 0x46f4b6
mov dword [0x63c1a0], 0x3e8
mov edx, dword [esi + 0x5120]
cmp edx, ebx
je 0x46f4ac
mov ecx, dword [edx + 0xa78]
call fcn.004da4e0
cmp eax, ebx
je 0x46f4ac
mov edx, dword [0x63c1a0]
push edx
call fcn.004ac4d0
call fcn.00474640
jmp 0x472f56
cmp edi, 0x561d
jne 0x46f4f7
mov dword [0x63c1a0], 0x4b0
mov edx, dword [esi + 0x5120]
cmp edx, ebx
je 0x46f4ed
mov ecx, dword [edx + 0xa78]
call fcn.004da4e0
cmp eax, ebx
je 0x46f4ed
mov ecx, dword [0x63c1a0]
push ecx
call fcn.004ac4d0
call fcn.00474640
jmp 0x472f56
cmp edi, 0x561e
jne 0x46f50e
mov dword [0x63c1a0], 0x5dc
jmp 0x46f487
cmp edi, 0x561f
jne 0x46f553
mov dword [0x63c1a0], 0x7d0
mov edx, dword [esi + 0x5120]
cmp edx, ebx
je 0x46f4ac
mov ecx, dword [edx + 0xa78]
call fcn.004da4e0
cmp eax, ebx
je 0x46f4ac
mov ecx, dword [0x63c1a0]
push ecx
call fcn.004ac4d0
call fcn.00474640
jmp 0x472f56
cmp edi, 0x5620
jne 0x46f56a
mov dword [0x63c1a0], 0xfa0
jmp 0x46f487
cmp edi, 0x5621
jne 0x46f5b3
mov dword [0x63c1a0], 0x2bc
mov edx, dword [esi + 0x5120]
cmp edx, ebx
je 0x46f4ac
mov ecx, dword [edx + 0xa78]
call fcn.004da4e0
cmp eax, ebx
je 0x46f4ac
mov ecx, dword [0x63c1a0]
push ecx
call fcn.004ac4d0
call fcn.00474640
jmp 0x472f56
cmp edi, 0x5622
jne 0x46f5ca
mov dword [0x63c1a0], 0x1f4
jmp 0x46f487
cmp edi, 0x5623
jne 0x46f68c
mov edx, dword [esi + 0x5120]
cmp edx, ebx
je 0x472f56
mov ecx, dword [edx + 0xa78]
call fcn.004da4e0
mov ebx, eax
test ebx, ebx
je 0x472f56
lea eax, [esp + 0x8c]
push eax
call fcn.00426f30
push 0x5ee6e4
lea ecx, [esp + 0x104]
mov dword [esp + 0x54c], 0x3c
call fcn.004021f0
push 0x5ee6f8
lea ecx, [esp + 0x108]
call fcn.004021f0
lea ecx, [esp + 0x8c]
call fcn.005612bf
cmp eax, 1
jne 0x46f670
mov ecx, dword [esp + 0x108]
push ecx
call fcn.00577818
lea edi, [eax + eax*4]
add esp, 4
add edi, edi
push edi
mov eax, ebx
call fcn.004ac4d0
test eax, eax
je 0x46f66b
mov dword [0x63c1a0], edi
call fcn.00474640
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 0xffffffff
call fcn.00427000
jmp 0x472f56
cmp edi, 0x5624
jne 0x46f6d4
mov edx, dword [esi + 0x5120]
cmp edx, ebx
je 0x472f56
mov ecx, dword [edx + 0xa78]
call fcn.004da4e0
cmp eax, ebx
je 0x472f56
mov ecx, dword [0x63c1a0]
add ecx, 0x64
push ecx
mov dword [0x63c1a0], ecx
call fcn.004ac4d0
call fcn.00474640
jmp 0x472f56
cmp edi, 0x5625
jne 0x46f721
mov edx, dword [esi + 0x5120]
cmp edx, ebx
je 0x472f56
mov ecx, dword [edx + 0xa78]
call fcn.004da4e0
cmp eax, ebx
je 0x472f56
mov ecx, dword [0x63c1a0]
cmp ecx, 0x64
jle 0x46f711
sub ecx, 0x64
mov dword [0x63c1a0], ecx
push ecx
call fcn.004ac4d0
call fcn.00474640
jmp 0x472f56
cmp edi, 0x5626
jne 0x46f7a1
cmp dword [esi + 0x5120], ebx
je 0x472f56
push str.doc_alexa.htm_
lea edx, [esp + 0x34]
push 0x63c670
push edx
call fcn.00401ba0
add esp, 0xc
push 0x63c094
push eax
lea eax, [esp + 0x30]
push eax
mov dword [esp + 0x554], 0x3d
call fcn.00401ae0
add esp, 0xc
mov byte [esp + 0x548], 0x3e
mov eax, dword [eax]
mov ecx, dword [esi + 0x5120]
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push eax
push ecx
call fcn.004d5b30
lea ecx, [esp + 0x28]
call fcn.00401f20
lea ecx, [esp + 0x30]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x5617
jne 0x46f80b
lea ecx, [esp + 0x14]
call fcn.00402700
mov dword [esp + 0x548], 0x3f
mov ecx, dword [0x63c450]
push 2
call fcn.00463a10
mov edx, dword [0x63c450]
mov edx, dword [edx + 0x5120]
lea edi, [esp + 0x14]
call fcn.004d8010
mov eax, dword [esp + 0x14]
mov ecx, dword [0x63c450]
mov edx, dword [ecx + 0x5120]
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push eax
push edx
call fcn.004d5b30
mov ecx, edi
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x5615
jne 0x46f8fb
push str.http:__alexa.chinaz.com__domain
lea ecx, [esp + 0x28]
call fcn.004023b0
mov ebx, 0x40
mov dword [esp + 0x548], ebx
mov ecx, dword [0x63c450]
push 2
call fcn.00463a10
mov esi, dword [esi + 0x5120]
mov ecx, dword [esi + 0xa78]
mov edx, esi
call fcn.004da4e0
test eax, eax
je 0x46f8ca
add eax, 0x1c0
push eax
lea ecx, [esp + 0x18]
call fcn.004020f0
mov byte [esp + 0x548], 0x41
mov esi, dword [esp + 0x14]
cmp dword [esi - 0xc], 0
jl 0x46f8a7
push 0x5ea93c
push esi
call fcn.0057781d
add esp, 8
test eax, eax
je 0x46f8a1
sub eax, esi
sar eax, 1
js 0x46f8a1
lea ecx, [esp + 0x14]
push ecx
add eax, 3
xor ecx, ecx
call fcn.0044a1e0
mov esi, dword [esp + 0x14]
cmp dword [esi - 0xc], 0
je 0x46f8ba
push esi
push str.http:__alexa.chinaz.com__domain_s_
lea edx, [esp + 0x2c]
push edx
call fcn.00404650
add esp, 0xc
lea ecx, [esp + 0x14]
mov byte [esp + 0x548], bl
call fcn.00401f20
mov eax, dword [esp + 0x24]
mov ecx, dword [0x63c450]
mov edx, dword [ecx + 0x5120]
push 0xffffffffffffffff
push 1
push 0
push 1
push 0
push 0
push eax
push edx
call fcn.004d5b30
lea ecx, [esp + 0x24]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x5616
jne 0x46f9a6
push str.http:__trends.google.com_
lea ecx, [esp + 0x28]
call fcn.004023b0
mov ebx, 0x42
mov dword [esp + 0x548], ebx
mov ecx, dword [0x63c450]
push 2
call fcn.00463a10
mov esi, dword [esi + 0x5120]
mov ecx, dword [esi + 0xa78]
mov edx, esi
call fcn.004da4e0
test eax, eax
je 0x46f8ca
add eax, 0x1c0
push eax
lea ecx, [esp + 0x18]
call fcn.004020f0
mov byte [esp + 0x548], 0x43
mov esi, dword [esp + 0x14]
cmp dword [esi - 0xc], 0
jl 0x46f99b
push 0x5ea93c
push esi
call fcn.0057781d
add esp, 8
test eax, eax
je 0x46f991
sub eax, esi
sar eax, 1
js 0x46f991
lea ecx, [esp + 0x14]
push ecx
add eax, 3
xor ecx, ecx
call fcn.0044a1e0
mov esi, dword [esp + 0x14]
cmp dword [esi - 0xc], 0
je 0x46f8ba
push esi
push str.http:__trends.google.com_websites_q_s_
jmp 0x46f8ad
cmp edi, 0x561a
jne 0x46fa12
lea ecx, [esp + 0x14]
call fcn.00402700
mov dword [esp + 0x548], 0x44
mov ecx, dword [0x63c450]
push 2
call fcn.00463a10
mov ecx, dword [0x63c450]
mov edx, dword [ecx + 0x5120]
lea eax, [esp + 0x14]
push eax
call fcn.004d8100
mov edx, dword [esp + 0x14]
mov eax, dword [0x63c450]
mov ecx, dword [eax + 0x5120]
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push edx
push ecx
call fcn.004d5b30
lea ecx, [esp + 0x14]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x5618
jne 0x46faed
mov esi, dword [esi + 0x5120]
cmp esi, ebx
je 0x46fe72
mov ecx, esi
call fcn.004d7fc0
mov esi, eax
cmp esi, ebx
je 0x46fe72
lea ecx, [esp + 0x14]
call fcn.00402700
lea ecx, [esp + 0x20]
mov dword [esp + 0x548], 0x45
call fcn.00402700
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x18]
push eax
add esi, 0x10
mov byte [esp + 0x550], 0x46
call fcn.00450b90
add esp, 8
push str.http:__www.google.cn_search_as_rq
lea ecx, [esp + 0x34]
call fcn.004023b0
lea ecx, [esp + 0x14]
push ecx
push eax
lea edx, [esp + 0x30]
push edx
mov byte [esp + 0x554], 0x47
call fcn.00401ae0
add esp, 0xc
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
mov byte [esp + 0x55c], 0x48
mov eax, dword [eax]
push ebx
push eax
mov eax, dword [esp + 0x48]
mov ecx, dword [eax + 0x5120]
push ecx
call fcn.004d5b30
lea ecx, [esp + 0x28]
call fcn.00401f20
lea ecx, [esp + 0x30]
call fcn.00401f20
lea ecx, [esp + 0x20]
call fcn.00401f20
lea ecx, [esp + 0x14]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x5619
jne 0x46fba0
mov ecx, dword [esi + 0x5120]
cmp ecx, ebx
je 0x472f56
call fcn.004d7fc0
mov edi, eax
cmp edi, ebx
je 0x46fe72
lea ecx, [esp + 0x14]
call fcn.00402700
lea ecx, [esp + 0x18]
mov dword [esp + 0x548], 0x49
call fcn.00402700
add edi, 0x10
push edi
lea ecx, [esp + 0x1c]
mov byte [esp + 0x54c], 0x4a
call fcn.00402310
push 0x5ee8b0
push 0x5e51bc
lea edx, [esp + 0x20]
push edx
call fcn.00414390
push 0x5ee8b8
push 0x5e50f8
lea eax, [esp + 0x20]
push eax
call fcn.00414390
mov ecx, dword [esp + 0x18]
push ecx
lea edx, [esp + 0x18]
push str.http:__www.google.cn_search_hlzh_CNqlink__3A_s
push edx
call fcn.00404650
mov eax, dword [esp + 0x20]
mov ecx, dword [esi + 0x5120]
add esp, 0xc
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push eax
jmp 0x46fe43
cmp edi, 0x5a1b
jne 0x46fbe6
mov esi, dword [0x63c450]
xor eax, eax
cmp dword [0x63c12c], ebx
sete al
add esi, 0x2340
cmp eax, ebx
mov dword [0x63c12c], eax
je 0x46fbd7
mov eax, 2
call fcn.0040bc30
jmp 0x472f56
mov eax, 4
call fcn.0040bc30
jmp 0x472f56
cmp edi, 0x5a1c
jne 0x46fcc4
lea edx, [esp + 0x8c]
push edx
call fcn.0042e340
lea ecx, [esp + 0x14]
mov dword [esp + 0x548], 0x4b
call fcn.00402700
lea eax, [esp + 0x14]
push eax
lea ecx, [esi + 0x3900]
mov byte [esp + 0x54c], 0x4c
call fcn.00559110
lea ebx, [esp + 0x14]
call fcn.00414620
lea ecx, [esp + 0x24]
call fcn.00402700
lea ecx, [esp + 0x20]
call fcn.00402700
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x554], 0x4e
mov edx, dword [esp + 0x20]
push ecx
push edx
call fcn.00563bbb
test eax, eax
je 0x46fc81
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x104]
call fcn.00402310
lea ecx, [esp + 0x8c]
call fcn.005612bf
lea ecx, [esp + 0x20]
call fcn.00401f20
lea ecx, [esp + 0x24]
call fcn.00401f20
lea ecx, [esp + 0x14]
call fcn.00401f20
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 0xffffffff
call fcn.0042e3f0
jmp 0x472f56
cmp edi, 0x5a1d
jne 0x46fcf3
mov esi, dword [esi + 0x5120]
cmp esi, ebx
je 0x472f56
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push str.http:__www.virscan.org_
push esi
call fcn.004d5b30
jmp 0x472f56
cmp edi, 0x5a1e
jne 0x46fd3b
lea ecx, [esp + 0x8c]
push ecx
call fcn.00429130
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 0x4f
call fcn.005612bf
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 0xffffffff
call fcn.004291f0
jmp 0x472f56
cmp edi, 0x5a1f
jne 0x46fd91
cmp dword [esi + 0x5120], ebx
je 0x472f56
push str.doc_safe.htm_
lea edx, [esp + 0x34]
push 0x63c670
push edx
call fcn.00401ba0
add esp, 0xc
push 0x63c094
push eax
lea eax, [esp + 0x30]
push eax
mov dword [esp + 0x554], 0x50
call fcn.00401ae0
add esp, 0xc
mov byte [esp + 0x548], 0x51
jmp 0x46f772
cmp edi, 0x59e2
jne 0x46fe7e
mov esi, dword [esi + 0x5120]
mov ecx, dword [esi + 0xa78]
mov edx, esi
call fcn.004da4e0
mov esi, eax
cmp esi, ebx
je 0x46fe72
lea ecx, [esp + 0x14]
call fcn.00402700
add esi, 0xb8
push esi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x54c], 0x52
call fcn.004020f0
push 0x5ee8b8
push 0x5e50f8
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x554], 0x53
call fcn.00414390
push 0x5ee8b0
push 0x5e51bc
lea eax, [esp + 0x20]
push eax
call fcn.00414390
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], ebx
je 0x46fe60
push eax
lea ecx, [esp + 0x18]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8slentlzh_CN
push ecx
call fcn.00404650
mov edx, dword [esp + 0x20]
mov eax, dword [0x63c450]
mov ecx, dword [eax + 0x5120]
add esp, 0xc
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push edx
push ecx
call fcn.004d5b30
lea ecx, [esp + 0x18]
call fcn.00401f20
lea ecx, [esp + 0x14]
call fcn.00401f20
jmp 0x472f56
lea ecx, [esp + 0x18]
call fcn.00401f20
lea ecx, [esp + 0x14]
call fcn.00401f20
push ebx
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x472f56
cmp edi, 0x59e3
jne 0x46ff4d
mov esi, dword [esi + 0x5120]
mov ecx, dword [esi + 0xa78]
mov edx, esi
call fcn.004da4e0
mov esi, eax
cmp esi, ebx
je 0x46fe72
lea ecx, [esp + 0x14]
call fcn.00402700
add esi, 0xb8
push esi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x54c], 0x54
call fcn.004020f0
push 0x5ee8b8
push 0x5e50f8
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x554], 0x55
call fcn.00414390
push 0x5ee8b0
push 0x5e51bc
lea eax, [esp + 0x20]
push eax
call fcn.00414390
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], ebx
je 0x46fe60
push eax
lea ecx, [esp + 0x18]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8sljatlzh_CN
push ecx
call fcn.00404650
mov edx, dword [esp + 0x20]
mov eax, dword [0x63c450]
mov ecx, dword [eax + 0x5120]
add esp, 0xc
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push edx
push ecx
call fcn.004d5b30
lea ecx, [esp + 0x18]
call fcn.00401f20
lea ecx, [esp + 0x14]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x59e4
jne 0x470020
mov esi, dword [esi + 0x5120]
mov ecx, dword [esi + 0xa78]
mov edx, esi
call fcn.004da4e0
mov esi, eax
cmp esi, ebx
je 0x46fe72
lea ecx, [esp + 0x14]
call fcn.00402700
add esi, 0xb8
push esi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x54c], 0x56
call fcn.004020f0
push 0x5ee8b8
push 0x5e50f8
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x554], 0x57
call fcn.00414390
push 0x5ee8b0
push 0x5e51bc
lea eax, [esp + 0x20]
push eax
call fcn.00414390
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], ebx
je 0x46fe60
push eax
lea ecx, [esp + 0x18]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8slkotlzh_CN
push ecx
call fcn.00404650
mov edx, dword [esp + 0x20]
mov eax, dword [0x63c450]
mov ecx, dword [eax + 0x5120]
add esp, 0xc
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push edx
push ecx
call fcn.004d5b30
lea ecx, [esp + 0x18]
call fcn.00401f20
lea ecx, [esp + 0x14]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x59e5
jne 0x4700f3
mov esi, dword [esi + 0x5120]
mov ecx, dword [esi + 0xa78]
mov edx, esi
call fcn.004da4e0
mov esi, eax
cmp esi, ebx
je 0x46fe72
lea ecx, [esp + 0x14]
call fcn.00402700
add esi, 0xb8
push esi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x54c], 0x58
call fcn.004020f0
push 0x5ee8b8
push 0x5e50f8
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x554], 0x59
call fcn.00414390
push 0x5ee8b0
push 0x5e51bc
lea eax, [esp + 0x20]
push eax
call fcn.00414390
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], ebx
je 0x46fe60
push eax
lea ecx, [esp + 0x18]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8slentlzh_TW
push ecx
call fcn.00404650
mov edx, dword [esp + 0x20]
mov eax, dword [0x63c450]
mov ecx, dword [eax + 0x5120]
add esp, 0xc
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push edx
push ecx
call fcn.004d5b30
lea ecx, [esp + 0x18]
call fcn.00401f20
lea ecx, [esp + 0x14]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x59e6
jne 0x4701c6
mov esi, dword [esi + 0x5120]
mov ecx, dword [esi + 0xa78]
mov edx, esi
call fcn.004da4e0
mov esi, eax
cmp esi, ebx
je 0x46fe72
lea ecx, [esp + 0x14]
call fcn.00402700
add esi, 0xb8
push esi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x54c], 0x5a
call fcn.004020f0
push 0x5ee8b8
push 0x5e50f8
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x554], 0x5b
call fcn.00414390
push 0x5ee8b0
push 0x5e51bc
lea eax, [esp + 0x20]
push eax
call fcn.00414390
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], ebx
je 0x46fe60
push eax
lea ecx, [esp + 0x18]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8sljatlzh_TW
push ecx
call fcn.00404650
mov edx, dword [esp + 0x20]
mov eax, dword [0x63c450]
mov ecx, dword [eax + 0x5120]
add esp, 0xc
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push edx
push ecx
call fcn.004d5b30
lea ecx, [esp + 0x18]
call fcn.00401f20
lea ecx, [esp + 0x14]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x59e7
jne 0x470299
mov esi, dword [esi + 0x5120]
mov ecx, dword [esi + 0xa78]
mov edx, esi
call fcn.004da4e0
mov esi, eax
cmp esi, ebx
je 0x46fe72
lea ecx, [esp + 0x14]
call fcn.00402700
add esi, 0xb8
push esi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x54c], 0x5c
call fcn.004020f0
push 0x5ee8b8
push 0x5e50f8
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x554], 0x5d
call fcn.00414390
push 0x5ee8b0
push 0x5e51bc
lea eax, [esp + 0x20]
push eax
call fcn.00414390
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], ebx
je 0x46fe60
push eax
lea ecx, [esp + 0x18]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8slkotlzh_TW
push ecx
call fcn.00404650
mov edx, dword [esp + 0x20]
mov eax, dword [0x63c450]
mov ecx, dword [eax + 0x5120]
add esp, 0xc
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push edx
push ecx
call fcn.004d5b30
lea ecx, [esp + 0x18]
call fcn.00401f20
lea ecx, [esp + 0x14]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x59e8
jne 0x47036c
mov esi, dword [esi + 0x5120]
mov ecx, dword [esi + 0xa78]
mov edx, esi
call fcn.004da4e0
mov esi, eax
cmp esi, ebx
je 0x46fe72
lea ecx, [esp + 0x14]
call fcn.00402700
add esi, 0xb8
push esi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x54c], 0x5e
call fcn.004020f0
push 0x5ee8b8
push 0x5e50f8
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x554], 0x5f
call fcn.00414390
push 0x5ee8b0
push 0x5e51bc
lea eax, [esp + 0x20]
push eax
call fcn.00414390
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], ebx
je 0x46fe60
push eax
lea ecx, [esp + 0x18]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8slzh_TWtlzh_CN
push ecx
call fcn.00404650
mov edx, dword [esp + 0x20]
mov eax, dword [0x63c450]
mov ecx, dword [eax + 0x5120]
add esp, 0xc
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push edx
push ecx
call fcn.004d5b30
lea ecx, [esp + 0x18]
call fcn.00401f20
lea ecx, [esp + 0x14]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x59e9
jne 0x47043f
mov esi, dword [esi + 0x5120]
mov ecx, dword [esi + 0xa78]
mov edx, esi
call fcn.004da4e0
mov esi, eax
cmp esi, ebx
je 0x46fe72
lea ecx, [esp + 0x14]
call fcn.00402700
add esi, 0xb8
push esi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x54c], 0x60
call fcn.004020f0
push 0x5ee8b8
push 0x5e50f8
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x554], 0x61
call fcn.00414390
push 0x5ee8b0
push 0x5e51bc
lea eax, [esp + 0x20]
push eax
call fcn.00414390
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], ebx
je 0x46fe60
push eax
lea ecx, [esp + 0x18]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8slzh_CNtlzh_TW
push ecx
call fcn.00404650
mov edx, dword [esp + 0x20]
mov eax, dword [0x63c450]
mov ecx, dword [eax + 0x5120]
add esp, 0xc
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push edx
push ecx
call fcn.004d5b30
lea ecx, [esp + 0x18]
call fcn.00401f20
lea ecx, [esp + 0x14]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x59ea
jne 0x470512
mov esi, dword [esi + 0x5120]
mov ecx, dword [esi + 0xa78]
mov edx, esi
call fcn.004da4e0
mov esi, eax
cmp esi, ebx
je 0x46fe72
lea ecx, [esp + 0x14]
call fcn.00402700
add esi, 0xb8
push esi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x54c], 0x62
call fcn.004020f0
push 0x5ee8b8
push 0x5e50f8
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x554], 0x63
call fcn.00414390
push 0x5ee8b0
push 0x5e51bc
lea eax, [esp + 0x20]
push eax
call fcn.00414390
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], ebx
je 0x46fe60
push eax
lea ecx, [esp + 0x18]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8slzh_CNtlen
push ecx
call fcn.00404650
mov edx, dword [esp + 0x20]
mov eax, dword [0x63c450]
mov ecx, dword [eax + 0x5120]
add esp, 0xc
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push edx
push ecx
call fcn.004d5b30
lea ecx, [esp + 0x18]
call fcn.00401f20
lea ecx, [esp + 0x14]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x59eb
jne 0x4705e5
mov esi, dword [esi + 0x5120]
mov ecx, dword [esi + 0xa78]
mov edx, esi
call fcn.004da4e0
mov esi, eax
cmp esi, ebx
je 0x46fe72
lea ecx, [esp + 0x14]
call fcn.00402700
add esi, 0xb8
push esi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x54c], 0x64
call fcn.004020f0
push 0x5ee8b8
push 0x5e50f8
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x554], 0x65
call fcn.00414390
push 0x5ee8b0
push 0x5e51bc
lea eax, [esp + 0x20]
push eax
call fcn.00414390
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], ebx
je 0x46fe60
push eax
lea ecx, [esp + 0x18]
push str.http:__translate.google.com_translate_u_shlzh_CNieUTF8slzh_TWtlen
push ecx
call fcn.00404650
mov edx, dword [esp + 0x20]
mov eax, dword [0x63c450]
mov ecx, dword [eax + 0x5120]
add esp, 0xc
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push edx
push ecx
call fcn.004d5b30
lea ecx, [esp + 0x18]
call fcn.00401f20
lea ecx, [esp + 0x14]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x59ec
jne 0x470612
mov edx, dword [0x63c450]
mov eax, dword [edx + 0x5120]
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push str.http:__translate.google.cn
push eax
call fcn.004d5b30
jmp 0x472f56
cmp edi, 0x59ed
jne 0x47063f
mov ecx, dword [0x63c450]
mov edx, dword [ecx + 0x5120]
push 0xffffffffffffffff
push 1
push ebx
push 1
push ebx
push ebx
push str.http:__www.spellify.com
push edx
call fcn.004d5b30
jmp 0x472f56
cmp edi, 0x565b
jne 0x470658
push ebx
push ebx
push 0x5eefe0
call fcn.0055e834
jmp 0x472f56
cmp edi, 0x565c
jne 0x4706c0
lea ecx, [esp + 0x14]
call fcn.00402700
lea eax, [esp + 0x14]
push eax
lea ecx, [esi + 0x3900]
mov dword [esp + 0x54c], 0x66
call fcn.00559110
lea ebx, [esp + 0x14]
call fcn.00414620
mov esi, dword [esi + 0x5120]
test esi, esi
je 0x46fe52
mov ecx, dword [esp + 0x14]
push 0xffffffffffffffff
push 1
push 0
push 1
push 0
push 0
push ecx
push esi
call fcn.004d5b30
lea ecx, [esp + 0x14]
call fcn.00401f20
jmp 0x472f56
lea edx, [edi - 0x565e]
cmp edx, 0x31
ja 0x47077c
lea ebx, [edi - 0x565e]
test ebx, ebx
jl 0x46dad9
cmp ebx, dword [0x63c898]
jge 0x46dad9
mov eax, dword [0x63c8a4]
mov dword [esp + 0x28], eax
mov eax, ebx
mov ecx, 0x63c890
call fcn.004bfa80
mov ecx, dword [esp + 0x28]
mov eax, dword [eax]
push 5
push 0
push ecx
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 2
jne 0x46dad9
lea ecx, [esp + 0x14]
call fcn.00402700
mov eax, ebx
mov ecx, 0x63c890
mov dword [esp + 0x548], 0x67
call fcn.004bfa80
mov edx, dword [eax]
push edx
lea eax, [esp + 0x18]
push 0x5ef00c
push eax
call fcn.00404650
mov ecx, dword [esp + 0x20]
add esp, 0xc
push 0
push 0
push ecx
call fcn.0055e834
lea ecx, [esp + 0x14]
mov dword [esp + 0x548], 0xffffffff
call fcn.00401f20
jmp 0x46dad9
lea edx, [edi - 0x5a64]
cmp edx, 0x13
ja 0x4707f8
push str.HomeURL
mov ebx, 0x63c8ac
call fcn.0045b8b0
test eax, eax
mov dword [esp + 0x20], eax
jl 0x46dad9
mov ecx, 0x63c8b0
call fcn.00408bb0
add eax, 0x1c
lea ebx, [edi - 0x5a64]
cmp ebx, dword [eax + 8]
jge 0x46dad9
mov eax, dword [esp + 0x20]
mov ecx, 0x63c8b0
call fcn.00408bb0
mov ecx, eax
add ecx, 0x1c
mov eax, ebx
call fcn.004bfa80
mov eax, dword [eax]
push 0xffffffffffffffff
push 1
push 0
push 1
push 0
push 0
push eax
mov eax, dword [esi + 0x5120]
push eax
call fcn.004d5b30
jmp 0x46dad9
cmp edi, 0x5a78
jne 0x4708e2
push str.HomeURL
mov ebx, 0x63c8ac
call fcn.0045b8b0
mov edi, eax
test edi, edi
jge 0x47084f
mov edi, dword [0x63c8b8]
lea ecx, [edi + 1]
push 0x63c8b0
call fcn.004147d0
push str.HomeURL
mov eax, edi
mov ecx, 0x63c8b0
call fcn.00408bb0
mov ecx, eax
add ecx, 4
call fcn.004021f0
test edi, edi
jl 0x472f56
mov ecx, dword [esi + 0x5120]
call fcn.004d7fc0
mov ebx, eax
test ebx, ebx
je 0x472f56
mov eax, edi
mov ecx, 0x63c8b0
lea esi, [ebx + 0x14]
call fcn.00408bb0
mov ecx, eax
add ecx, 8
mov eax, esi
call fcn.00414bd0
mov eax, edi
mov ecx, 0x63c8b0
add ebx, 0x10
call fcn.00408bb0
mov ecx, eax
add ecx, 0x1c
mov eax, ebx
call fcn.00414bd0
lea ecx, [esp + 0x14]
call fcn.00402700
mov dword [esp + 0x548], 0x68
mov ecx, dword [ebx]
mov edx, dword [esi]
push ecx
push edx
lea eax, [esp + 0x1c]
push 0x5ef028
push eax
call fcn.00404650
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 0
push 0
push ecx
call fcn.0055e834
lea ecx, [esp + 0x14]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x5a79
jne 0x470a34
mov dword [esp + 0x24], ebx
push str.HomeURL
mov ebx, 0x63c8ac
call fcn.0045b8b0
test eax, eax
mov dword [esp + 0x14], eax
jge 0x470943
mov edi, dword [0x63c8b8]
lea ecx, [edi + 1]
push 0x63c8b0
mov dword [esp + 0x18], edi
call fcn.004147d0
push str.HomeURL
mov eax, edi
mov ecx, 0x63c8b0
call fcn.00408bb0
mov ecx, eax
add ecx, 4
call fcn.004021f0
test edi, edi
jl 0x4709ed
mov eax, dword [esi + 0x5120]
mov ecx, dword [eax + 0xa50]
add eax, 0xa48
mov eax, dword [eax + 0x1c]
xor edi, edi
add eax, ecx
test eax, eax
mov dword [esp + 0x20], edi
jle 0x4709ed
jmp 0x470970
mov ecx, dword [esi + 0x5120]
add ecx, 0xa48
mov eax, edi
call fcn.004d3550
mov ebx, eax
test ebx, ebx
je 0x4709cc
mov eax, dword [esp + 0x14]
mov ecx, 0x63c8b0
lea edi, [ebx + 0x14]
call fcn.00408bb0
mov ecx, eax
add ecx, 8
mov eax, edi
call fcn.00414bd0
mov eax, dword [esp + 0x14]
mov ecx, 0x63c8b0
lea edi, [ebx + 0x10]
call fcn.00408bb0
mov ecx, eax
add ecx, 0x1c
mov eax, edi
call fcn.00414bd0
add dword [esp + 0x24], 1
mov edi, dword [esp + 0x20]
mov eax, dword [esi + 0x5120]
mov ecx, dword [eax + 0xa50]
add eax, 0xa48
mov eax, dword [eax + 0x1c]
add edi, 1
add eax, ecx
cmp edi, eax
mov dword [esp + 0x20], edi
jl 0x470970
lea ecx, [esp + 0x14]
call fcn.00402700
mov dword [esp + 0x548], 0x69
mov edx, dword [esp + 0x24]
push edx
lea eax, [esp + 0x18]
push 0x5ef054
push eax
call fcn.00404650
mov ecx, dword [esp + 0x20]
add esp, 0xc
push 0
push 0
push ecx
call fcn.0055e834
lea ecx, [esp + 0x14]
call fcn.00401f20
jmp 0x472f56
cmp edi, 0x5a7a
jne 0x46dad9
push ebx
lea ecx, [esi + 0x2340]
call fcn.00404630
lea edx, [esp + 0x8c]
push edx
call fcn.00423ba0
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 0x6a
call fcn.005612bf
lea ecx, [esp + 0x8c]
mov dword [esp + 0x548], 0xffffffff
call fcn.00423c20
jmp 0x472f56
lea ecx, [esp + 0x1c]
call fcn.00401f20
jmp 0x472f56
push 1
call fcn.004de4f0
jmp 0x472f56
call fcn.00555692
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x472409
push 0x80004005
call fcn.00401f90
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
mov dword [esp + 0x548], 0x6b
call fcn.00555692
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x47243e
push 0x80004005
call fcn.00401f90
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
push 0x400
lea eax, [esp + 0x18]
mov byte [esp + 0x54c], 0x6c
call fcn.0044be90
add esp, 4
lea ebx, [esp + 0x14]
call fcn.004146b0
mov edi, eax
call fcn.00414730
call fcn.00555692
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x472491
push 0x80004005
call fcn.00401f90
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
mov byte [esp + 0x548], 0x6d
call fcn.00555692
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4724c3
push 0x80004005
call fcn.00401f90
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x30], eax
mov byte [esp + 0x548], 0x6e
call fcn.00555692
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4724f5
push 0x80004005
call fcn.00401f90
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x3c], eax
mov byte [esp + 0x548], 0x6f
call fcn.00555692
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x472527
push 0x80004005
call fcn.00401f90
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x4c], eax
mov byte [esp + 0x548], 0x70
call fcn.00555692
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x472559
push 0x80004005
call fcn.00401f90
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x64], eax
mov byte [esp + 0x548], 0x71
call fcn.00555692
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x47258b
push 0x80004005
call fcn.00401f90
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x5c], eax
mov byte [esp + 0x548], 0x72
call fcn.00555692
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4725bd
push 0x80004005
call fcn.00401f90
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x68], eax
mov byte [esp + 0x548], 0x73
call fcn.00555692
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4725ef
mov ecx, dword [esp + 0x540]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x528]
xor ecx, esp
call fcn.00577139
mov esp, ebp
pop ebp
ret 4