Function at 0x567160
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x60b9f0
mov eax, dword fs:[0]
push eax
sub esp, 0x6a4
mov eax, dword [0x697bc0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x260], ecx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x270], ecx
mov edx, dword [ebp - 0x26c]
push edx
lea ecx, [ebp - 0x44]
call fcn.004ef320
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x270]
push eax
lea ecx, [ebp - 0x5c]
call fcn.004ef320
mov byte [ebp - 4], 1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x338], esp
lea edx, [ebp - 0x44]
push edx
call fcn.004ef320
mov dword [ebp - 0x34c], eax
mov ecx, dword [ebp - 0x260]
call fcn.00555710
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x2ac], eax
mov ecx, dword [ebp - 0x2ac]
mov dword [ebp - 0x264], ecx
mov edx, dword [ebp - 0x264]
sub edx, 1
mov dword [ebp - 0x264], edx
cmp dword [ebp - 0x264], 0xc
ja case.0x567231.6
mov eax, dword [ebp - 0x264]
jmp dword [eax*4 + 0x5682e8]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x350], esp
lea edx, [ebp - 0x44]
push edx
call fcn.004ef320
mov dword [ebp - 0x358], eax
mov ecx, dword [ebp - 0x260]
call fcn.00555710
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
jne 0x567284
mov dword [ebp - 0x268], 0x6196f0
jmp 0x56728e
mov dword [ebp - 0x268], 0x66f0fc
mov ecx, dword [ebp - 0x268]
push ecx
push 0x6196fc
lea edx, [ebp - 0x164]
push edx
call fcn.004e37f0
add esp, 0xc
mov byte [ebp - 4], 2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x360], esp
lea eax, [ebp - 0x164]
push eax
call fcn.004ef320
mov dword [ebp - 0x2dc], eax
mov ecx, dword [ebp - 0x2dc]
mov dword [ebp - 0x368], ecx
mov byte [ebp - 4], 3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x370], esp
lea edx, [ebp - 0x44]
push edx
call fcn.004ef320
mov dword [ebp - 0x308], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x260]
call fcn.0055aa20
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x164]
call fcn.004ef480
jmp case.0x567231.6
mov ecx, dword [ebp - 0x260]
add ecx, 0x1bc
call fcn.004ef850
push eax
mov ecx, dword [ebp - 0x260]
add ecx, 0x1d4
call fcn.004ef850
push eax
push 0x619720
lea eax, [ebp - 0x1c4]
push eax
call fcn.004e37f0
add esp, 0x10
mov byte [ebp - 4], 4
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x30c], esp
lea edx, [ebp - 0x1c4]
push edx
call fcn.004ef320
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x314], eax
mov byte [ebp - 4], 5
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x31c], esp
lea edx, [ebp - 0x44]
push edx
call fcn.004ef320
mov dword [ebp - 0x324], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x260]
call fcn.0055aa20
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c4]
call fcn.004ef480
jmp case.0x567231.6
push 0x28
lea ecx, [ebp - 0x25c]
call fcn.00578440
mov eax, dword [ebp - 0x260]
add eax, 0x1a4
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x32c], esp
push eax
call fcn.004ee9d0
mov dword [ebp - 0x334], eax
lea ecx, [ebp - 0x25c]
call fcn.004fa1f0
mov dword [ebp - 0x33c], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5c]
call fcn.004ef850
push eax
lea ecx, [ebp - 0x1f4]
push ecx
call fcn.004e2fe0
add esp, 8
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xec]
call fcn.004eea00
mov byte [ebp - 4], 8
lea edx, [ebp - 0xec]
push edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x344], esp
lea eax, [ebp - 0x1f4]
push eax
call fcn.004ee9d0
mov dword [ebp - 0x2fc], eax
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0x3c8], ecx
mov byte [ebp - 4], 9
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3d0], esp
push 0x619788
call fcn.004eea50
mov dword [ebp - 0x3d8], eax
mov byte [ebp - 4], 8
call fcn.004f7d20
add esp, 0x34
lea ecx, [ebp - 0xec]
call fcn.004eed50
push eax
push str.contentTip
lea ecx, [ebp - 0x25c]
call fcn.004faf30
push 0x6197a8
lea ecx, [ebp - 0x134]
call fcn.004ef370
mov byte [ebp - 4], 0xa
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3e0], esp
lea edx, [ebp - 0x134]
push edx
call fcn.004ef320
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x3e8], eax
mov byte [ebp - 4], 0xb
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3f0], esp
lea edx, [ebp - 0x44]
push edx
call fcn.004ef320
mov dword [ebp - 0x3f8], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x260]
call fcn.0055aa20
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x134]
call fcn.004ef480
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xec]
call fcn.004eeb60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1f4]
call fcn.004eeb60
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x25c]
call fcn.004fa390
jmp case.0x567231.6
push 0x28
lea ecx, [ebp - 0x234]
call fcn.00578440
mov eax, dword [ebp - 0x260]
add eax, 0x1a4
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3a4], esp
push eax
call fcn.004ee9d0
mov dword [ebp - 0x378], eax
lea ecx, [ebp - 0x234]
call fcn.004fa1f0
mov dword [ebp - 0x310], eax
mov byte [ebp - 4], 0xc
push 0x6197b0
push str.contentTip
lea ecx, [ebp - 0x8c]
push ecx
lea ecx, [ebp - 0x234]
call fcn.004fad10
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xa4]
call fcn.004ef350
mov byte [ebp - 4], 0xe
push 0x6197b0
lea ecx, [ebp - 0x8c]
call fcn.004eee50
test eax, eax
jne 0x567618
lea ecx, [ebp - 0x8c]
call fcn.004eed50
push eax
lea edx, [ebp - 0x620]
push edx
call fcn.004e3070
add esp, 8
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x288]
push eax
lea ecx, [ebp - 0xa4]
call fcn.004ef440
lea ecx, [ebp - 0x620]
call fcn.004ef480
jmp 0x5676cf
lea ecx, [ebp - 0xbc]
call fcn.004eea00
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xbc]
push ecx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x380], esp
lea edx, [ebp - 0x8c]
push edx
call fcn.004ee9d0
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x318], eax
mov byte [ebp - 4], 0x10
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x388], esp
push 0x619788
call fcn.004eea50
mov dword [ebp - 0x320], eax
mov byte [ebp - 4], 0xf
call fcn.004f7f50
add esp, 0x34
lea ecx, [ebp - 0xbc]
call fcn.004eed50
push eax
lea ecx, [ebp - 0x680]
push ecx
call fcn.004e3070
add esp, 8
mov dword [ebp - 0x298], eax
mov edx, dword [ebp - 0x298]
push edx
lea ecx, [ebp - 0xa4]
call fcn.004ef440
lea ecx, [ebp - 0x680]
call fcn.004ef480
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xbc]
call fcn.004eeb60
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x390], esp
lea eax, [ebp - 0xa4]
push eax
call fcn.004ef320
mov dword [ebp - 0x2a0], eax
mov ecx, dword [ebp - 0x2a0]
mov dword [ebp - 0x328], ecx
mov byte [ebp - 4], 0x11
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x398], esp
lea edx, [ebp - 0x44]
push edx
call fcn.004ef320
mov dword [ebp - 0x330], eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x260]
call fcn.0055aa20
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xa4]
call fcn.004ef480
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x8c]
call fcn.004eeb60
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x234]
call fcn.004fa390
jmp case.0x567231.6
push 0x66dd94
lea ecx, [ebp - 0x4b8]
call fcn.004ef370
mov byte [ebp - 4], 0x12
push 0x6196d4
lea ecx, [ebp - 0x5c0]
call fcn.004ef370
mov byte [ebp - 4], 0x13
push str.tipsshow
lea ecx, [ebp - 0x410]
call fcn.004ef370
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x4b8]
push eax
lea ecx, [ebp - 0x5c0]
push ecx
lea edx, [ebp - 0x410]
push edx
lea eax, [ebp - 0x11c]
push eax
mov ecx, dword [ebp - 0x260]
call fcn.00555320
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x410]
call fcn.004ef480
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x5c0]
call fcn.004ef480
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x4b8]
call fcn.004ef480
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3a0], esp
lea edx, [ebp - 0x11c]
push edx
call fcn.004ef320
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x304], eax
mov byte [ebp - 4], 0x19
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3a8], esp
push 0x6197c8
call fcn.004ef370
mov dword [ebp - 0x340], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x260]
call fcn.0055aa20
push 0x6196c8
lea ecx, [ebp - 0x4a0]
call fcn.004ef370
mov byte [ebp - 4], 0x1a
push str.tipsshow
lea ecx, [ebp - 0x5a8]
call fcn.004ef370
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x4a0]
push ecx
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x5a8]
push eax
mov ecx, dword [ebp - 0x260]
call fcn.0054f6d0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x5a8]
call fcn.004ef480
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x4a0]
call fcn.004ef480
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3b0], esp
push 0x6197a8
call fcn.004ef370
mov dword [ebp - 0x2b0], eax
mov ecx, dword [ebp - 0x2b0]
mov dword [ebp - 0x348], ecx
mov byte [ebp - 4], 0x1c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3b8], esp
lea edx, [ebp - 0x44]
push edx
call fcn.004ef320
mov dword [ebp - 0x3c0], eax
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x260]
call fcn.0055aa20
push 0
push 0
push 0x5fd
mov ecx, dword [ebp - 0x260]
add ecx, 4
call fcn.00568d80
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x11c]
call fcn.004ef480
jmp case.0x567231.6
lea ecx, [ebp - 0x74]
call fcn.004eea00
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x2c]
call fcn.004eea00
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x11]
call fcn.004e2500
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x74]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x354], esp
push str.type
call fcn.004eea50
mov dword [ebp - 0x2b8], eax
mov ecx, dword [ebp - 0x2b8]
mov dword [ebp - 0x3e4], ecx
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x5c]
call fcn.004ef850
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x35c], esp
push eax
push edx
call fcn.004e2fe0
add esp, 8
mov dword [ebp - 0x3ac], eax
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x11]
call fcn.005006a0
lea eax, [ebp - 0x2c]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x364], esp
push 0x6703a8
call fcn.004eea50
mov dword [ebp - 0x2c0], eax
mov ecx, dword [ebp - 0x2c0]
mov dword [ebp - 0x3d4], ecx
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x5c]
call fcn.004ef850
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x36c], esp
push eax
push edx
call fcn.004e2fe0
add esp, 8
mov dword [ebp - 0x3b4], eax
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x11]
call fcn.005006a0
push 0x6197d8
lea ecx, [ebp - 0x74]
call fcn.004eee50
test eax, eax
jne 0x567d10
push 0x66dce8
lea ecx, [ebp - 0x2c]
call fcn.004eee50
test eax, eax
je 0x567bec
push 0x6197e0
lea ecx, [ebp - 0x2c]
call fcn.004eee50
test eax, eax
je 0x567bec
push 1
push 0
push 0
lea ecx, [ebp - 0x2c]
call fcn.004eed50
push eax
lea eax, [ebp - 0x6b0]
push eax
call fcn.004e3070
add esp, 8
mov dword [ebp - 0x2c8], eax
mov ecx, dword [ebp - 0x2c8]
call fcn.004ef850
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x2d0], eax
lea ecx, [ebp - 0x6b0]
call fcn.004ef480
cmp dword [ebp - 0x2d0], 0x20
jg 0x567be7
lea ecx, [ebp - 0x2c]
call fcn.004eed50
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x374], esp
push eax
push ecx
call fcn.004e3070
add esp, 8
mov dword [ebp - 0x3f4], eax
call fcn.004ebdd0
add esp, 0x18
push 0x6197ec
lea ecx, [ebp - 0x500]
call fcn.004ef370
mov byte [ebp - 4], 0x22
push str.tipsurl
lea ecx, [ebp - 0x4d0]
call fcn.004ef370
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x2c]
call fcn.004eed50
push eax
lea edx, [ebp - 0x698]
push edx
call fcn.004e3070
add esp, 8
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x2e0], eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x2e0]
push ecx
lea edx, [ebp - 0x500]
push edx
lea eax, [ebp - 0x4d0]
push eax
lea ecx, [ebp - 0x14c]
push ecx
mov ecx, dword [ebp - 0x260]
call fcn.00555320
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x698]
call fcn.004ef480
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x4d0]
call fcn.004ef480
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x500]
call fcn.004ef480
push 0x6196c8
lea ecx, [ebp - 0x5f0]
call fcn.004ef370
mov byte [ebp - 4], 0x29
push str.tipsurl
lea ecx, [ebp - 0x608]
call fcn.004ef370
mov byte [ebp - 4], 0x2a
lea edx, [ebp - 0x5f0]
push edx
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x608]
push ecx
mov ecx, dword [ebp - 0x260]
call fcn.0054f6d0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x608]
call fcn.004ef480
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x5f0]
call fcn.004ef480
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x14c]
call fcn.004ef480
jmp 0x567d0b
push 0x67075c
lea ecx, [ebp - 0x590]
call fcn.004ef370
mov byte [ebp - 4], 0x2b
push str.tipsurl
lea ecx, [ebp - 0x458]
call fcn.004ef370
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x2c]
call fcn.004eed50
push eax
lea edx, [ebp - 0x668]
push edx
call fcn.004e3070
add esp, 8
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x2f0], eax
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x2f0]
push ecx
lea edx, [ebp - 0x590]
push edx
lea eax, [ebp - 0x458]
push eax
lea ecx, [ebp - 0x17c]
push ecx
mov ecx, dword [ebp - 0x260]
call fcn.00555320
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x668]
call fcn.004ef480
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x458]
call fcn.004ef480
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x590]
call fcn.004ef480
push 0x6196c8
lea ecx, [ebp - 0x530]
call fcn.004ef370
mov byte [ebp - 4], 0x32
push str.tipsurl
lea ecx, [ebp - 0x488]
call fcn.004ef370
mov byte [ebp - 4], 0x33
lea edx, [ebp - 0x530]
push edx
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x488]
push ecx
mov ecx, dword [ebp - 0x260]
call fcn.0054f6d0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x488]
call fcn.004ef480
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x530]
call fcn.004ef480
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x17c]
call fcn.004ef480
jmp 0x567ebc
push 0x619804
lea ecx, [ebp - 0x74]
call fcn.004eee50
test eax, eax
jne 0x567ddd
lea ecx, [ebp - 0x2c]
call fcn.004eed50
push eax
lea edx, [ebp - 0x650]
push edx
call fcn.004e3070
add esp, 8
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x300], eax
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x300]
call fcn.004ef850
push eax
push 0x619810
lea ecx, [ebp - 0x638]
push ecx
call fcn.004e37f0
add esp, 0xc
mov dword [ebp - 0x27c], eax
mov edx, dword [ebp - 0x27c]
push edx
mov ecx, dword [ebp - 0x260]
add ecx, 0x18c
call fcn.004ef440
lea ecx, [ebp - 0x638]
call fcn.004ef480
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x650]
call fcn.004ef480
push 0
push 0
mov eax, dword [ebp - 0x260]
push eax
push 0x553d20
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x2c4], eax
mov ecx, dword [ebp - 0x2c4]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x567ebc
push 0x6197ec
lea ecx, [ebp - 0x4e8]
call fcn.004ef370
mov byte [ebp - 4], 0x35
push str.tipsurl
lea ecx, [ebp - 0x548]
call fcn.004ef370
mov byte [ebp - 4], 0x36
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x4e8]
push eax
lea ecx, [ebp - 0x548]
push ecx
lea edx, [ebp - 0x1ac]
push edx
mov ecx, dword [ebp - 0x260]
call fcn.00555320
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x548]
call fcn.004ef480
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x4e8]
call fcn.004ef480
push 0x6196c8
lea ecx, [ebp - 0x518]
call fcn.004ef370
mov byte [ebp - 4], 0x3a
push str.tipsurl
lea ecx, [ebp - 0x578]
call fcn.004ef370
mov byte [ebp - 4], 0x3b
lea eax, [ebp - 0x518]
push eax
lea ecx, [ebp - 0x1ac]
push ecx
lea edx, [ebp - 0x578]
push edx
mov ecx, dword [ebp - 0x260]
call fcn.0054f6d0
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x578]
call fcn.004ef480
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x518]
call fcn.004ef480
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x1ac]
call fcn.004ef480
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x11]
call fcn.004e1450
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x2c]
call fcn.004eeb60
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x74]
call fcn.004eeb60
jmp case.0x567231.6
push 0
mov ecx, dword [ebp - 0x260]
add ecx, 4
call fcn.0056fd00
push 1
mov ecx, dword [ebp - 0x260]
add ecx, 4
call fcn.0055ab70
call fcn.00521cb0
mov ecx, eax
call fcn.00524220
movzx eax, al
test eax, eax
je 0x567f2f
mov ecx, dword [ebp - 0x260]
mov edx, dword [ecx + 4]
push edx
push 2
mov ecx, dword [ebp - 0x260]
call fcn.00570a80
push 0
push 0xea60
push 1
mov ecx, dword [ebp - 0x260]
add ecx, 4
call fcn.0056f9e0
jmp case.0x567231.6
push 0
push 0
push 0x5fc
mov ecx, dword [ebp - 0x260]
add ecx, 4
call fcn.00568d80
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x37c], esp
push 0x6197a8
call fcn.004ef370
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x3bc], eax
mov byte [ebp - 4], 0x3c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x384], esp
lea edx, [ebp - 0x44]
push edx
call fcn.004ef320
mov dword [ebp - 0x3dc], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x260]
call fcn.0055aa20
jmp case.0x567231.6
push 0x66dd94
lea ecx, [ebp - 0x428]
call fcn.004ef370
mov byte [ebp - 4], 0x3d
push 0x61984c
lea ecx, [ebp - 0x560]
call fcn.004ef370
mov byte [ebp - 4], 0x3e
push str.tipsclick
lea ecx, [ebp - 0x5d8]
call fcn.004ef370
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp - 0x560]
push ecx
lea edx, [ebp - 0x5d8]
push edx
lea eax, [ebp - 0x194]
push eax
mov ecx, dword [ebp - 0x260]
call fcn.00555320
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x5d8]
call fcn.004ef480
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x560]
call fcn.004ef480
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x428]
call fcn.004ef480
push 0x6196c8
lea ecx, [ebp - 0x470]
call fcn.004ef370
mov byte [ebp - 4], 0x44
push str.tipsclick
lea ecx, [ebp - 0x440]
call fcn.004ef370
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x470]
push ecx
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x440]
push eax
mov ecx, dword [ebp - 0x260]
call fcn.0054f6d0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x440]
call fcn.004ef480
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x470]
call fcn.004ef480
mov ecx, dword [ebp - 0x260]
add ecx, 0x1bc
call fcn.004ef850
push eax
lea ecx, [ebp - 0x20c]
push ecx
call fcn.004e2fe0
add esp, 8
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x104]
call fcn.004eea00
mov byte [ebp - 4], 0x47
lea edx, [ebp - 0x104]
push edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x38c], esp
lea eax, [ebp - 0x20c]
push eax
call fcn.004ee9d0
mov dword [ebp - 0x2e4], eax
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp - 0x3c4], ecx
mov byte [ebp - 4], 0x48
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x394], esp
push 0x619868
call fcn.004eea50
mov dword [ebp - 0x3ec], eax
mov byte [ebp - 4], 0x47
call fcn.004f7d20
add esp, 0x34
lea ecx, [ebp - 0x104]
call fcn.004eed50
push eax
lea edx, [ebp - 0x1dc]
push edx
call fcn.004e3070
add esp, 8
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x1dc]
call fcn.004ef850
push eax
push str.https:__mini.ffnews.cn_additional_feedback_index.html_fromtipsid_s
lea eax, [ebp - 0xd4]
push eax
call fcn.004e37f0
add esp, 0xc
mov byte [ebp - 4], 0x4a
push 1
push 0
push 0
lea ecx, [ebp - 0xd4]
call fcn.004ef850
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0x20
jg 0x5681d6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x39c], esp
lea edx, [ebp - 0xd4]
push edx
call fcn.004ef320
mov dword [ebp - 0x3cc], eax
call fcn.004ebdd0
add esp, 0x18
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0xd4]
call fcn.004ef480
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1dc]
call fcn.004ef480
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x104]
call fcn.004eeb60
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x20c]
call fcn.004eeb60
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x194]
call fcn.004ef480
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x2cc], eax
mov ecx, dword [ebp - 0x2cc]
mov dword [ebp - 0x274], ecx
cmp dword [ebp - 0x274], 0
je 0x568257
push 1
mov ecx, dword [ebp - 0x274]
call fcn.004f64d0
mov dword [ebp - 0x29c], eax
jmp 0x568261
mov dword [ebp - 0x29c], 0
mov edx, dword [ebp - 0x270]
mov dword [ebp - 0x2f4], edx
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0
je 0x568297
push 1
mov ecx, dword [ebp - 0x278]
call fcn.004f64d0
mov dword [ebp - 0x2a4], eax
jmp 0x5682a1
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x2d4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x5c]
call fcn.004ef480
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.004ef480
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005c6c09
mov esp, ebp
pop ebp
ret 0x10