Function at 0x415fd0
Capabilities:
Access peb ldr_data
Create thread
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x4fe3b2
mov eax, dword fs:[0]
push eax
sub esp, 0x8f4
mov eax, dword [0x5344a8]
xor eax, esp
mov dword [esp + 0x8f0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5344a8]
xor eax, esp
push eax
lea eax, [esp + 0x908]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 0x1bc4]
inc dword [esi + 0x1bc0]
mov eax, dword [ecx + 0x550]
mov edx, dword [eax + 0x20]
add ecx, 0x550
mov dword [esp + 0x1c], esi
call edx
mov ecx, dword [esi + 0x1bc4]
mov eax, dword [ecx + 0x6c0]
mov edx, dword [eax + 0xc]
add ecx, 0x6c0
xor ebx, ebx
push ebx
push 0xffffffffffffffff
call edx
mov eax, 0xf
mov dword [esp + 0x3d4], ebx
mov dword [esp + 0x3f0], eax
mov dword [esp + 0x3ec], ebx
mov byte [esp + 0x3dc], bl
mov dword [esp + 0x3fc], ebx
mov dword [esp + 0x418], eax
mov dword [esp + 0x414], ebx
mov byte [esp + 0x404], bl
mov dword [esp + 0x910], ebx
mov eax, dword [esi + 0x1758]
push eax
lea ecx, [esp + 0x3d8]
lea edi, [esi + 0x1b70]
push ecx
mov ecx, edi
call fcn.00459b70
lea ebp, [esi + 0x30]
push str.serverliststatus
mov ecx, ebp
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const]
cmp dword [esp + 0x3f8], 1
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xf8]
jne 0x41617c
push 1
call eax
push str.serverlisttext
mov ecx, ebp
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const]
cmp dword [esp + 0x418], 0x10
mov edi, eax
mov eax, dword [esp + 0x404]
jae 0x4160fd
lea eax, [esp + 0x404]
push eax
lea ebx, [esp + 0x3c]
call fcn.0046ebd0
add esp, 4
mov ebp, 8
mov byte [esp + 0x910], 1
cmp dword [eax + 0x1c], ebp
jb 0x416121
mov eax, dword [eax + 8]
jmp 0x416124
add eax, 8
mov edx, dword [edi]
push eax
mov eax, dword [edx + 0x2c]
mov ecx, edi
call eax
xor ebx, ebx
mov byte [esp + 0x910], bl
cmp dword [esp + 0x54], ebp
jb 0x41614a
mov ecx, dword [esp + 0x40]
push ecx
call fcn.00479ac0
add esp, 4
xor edx, edx
lea ecx, [esp + 0x38]
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], ebx
mov word [esp + 0x40], dx
call fcn.00401050
mov ecx, dword [esi + 0x1bc4]
mov eax, dword [ecx]
mov edx, dword [eax + 0xf8]
push ebx
call edx
jmp 0x416713
push ebx
call eax
mov ecx, dword [esi + 0x1bc4]
mov edx, dword [ecx]
mov eax, dword [edx + 0xf8]
push 1
call eax
push 0x1ff
lea ecx, [esp + 0x709]
push ebx
push ecx
mov byte [esp + 0x710], bl
call fcn.0048ba50
mov eax, dword [esi + 0x1758]
add esp, 0xc
cmp eax, ebx
je 0x4161d5
push eax
push str.select__from_vpnlist_where__tags__like_____d___
lea edx, [esp + 0x70c]
push 0x200
push edx
call fcn.0047c660
add esp, 0x10
jmp 0x4161ef
push str.select__from_vpnlist
lea eax, [esp + 0x708]
push 0x200
push eax
call fcn.0047c660
add esp, 0xc
lea eax, [esi + 0x1f38]
call fcn.00425020
mov dword [esp + 0x20], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
lea ecx, [esp + 0x704]
push ecx
lea ecx, [esp + 0x24]
mov edx, edi
mov byte [esp + 0x914], 3
call fcn.0045a080
mov ecx, dword [esp + 0x2c]
sub ecx, dword [esp + 0x28]
mov eax, 0x13e22cbd
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x18], ebx
test eax, eax
jle 0x41669e
lea ebx, [ebx]
lea ecx, [esp + 0x5b4]
call dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDialogBuilder::constructor_void_]
push ebx
push ebx
push ebx
push ebx
push ecx
mov byte [esp + 0x924], 4
mov eax, esp
lea ecx, [esp + 0x5c8]
mov dword [esp + 0x74], esp
mov dword [eax], str.XML_MAIN_LIST
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CDialogBuilder::Create_class_DuiLib::STRINGorID__wchar_t_const___class_DuiLib::IDialogBuilderCallback___class_DuiLib::CPaintManagerUI___class_DuiLib::CControlUI__]
mov esi, dword [esi + 0x1bc4]
mov edx, dword [esi + 0x550]
lea ecx, [esi + 0x550]
mov ebp, eax
mov eax, dword [edx + 0x10]
push ebp
call eax
mov edi, dword [esp + 0x18]
lea esi, [esp + 0x20]
call fcn.004260e0
add eax, 4
cmp dword [eax + 0x1c], 0x10
jb 0x4162b8
mov eax, dword [eax + 8]
jmp 0x4162bb
add eax, 8
push eax
lea ebx, [esp + 0x68]
call fcn.0046ebd0
add esp, 4
mov esi, 8
mov byte [esp + 0x910], 5
cmp dword [eax + 0x1c], esi
jb 0x4162df
mov eax, dword [eax + 8]
jmp 0x4162e2
add eax, 8
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x424]
call dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::constructor_wchar_t_const___int_]
mov ebx, 7
mov byte [esp + 0x910], bl
cmp dword [esp + 0x80], esi
jb 0x416314
mov ecx, dword [esp + 0x6c]
push ecx
call fcn.00479ac0
add esp, 4
xor edx, edx
xor esi, esi
push 3
lea ecx, [esp + 0x60]
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], esi
mov word [esp + 0x70], dx
call fcn.00477370
mov eax, dword [esp + 0x64]
cmp eax, 0xfffffffd
je 0x416358
cmp eax, esi
je 0x416354
mov dword [eax], esi
mov eax, dword [esp + 0x64]
mov eax, dword [eax + 4]
mov dword [esp + 0x64], eax
cmp eax, esi
jne 0x416343
mov dword [esp + 0x64], esi
lea ecx, [esp + 0x5c]
call fcn.004773b0
lea ecx, [esp + 0x41c]
push ecx
call fcn.00436400
add esp, 4
push str.LBL_NAME
mov ecx, ebp
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CContainerUI::FindSubControl_wchar_t_const__]
mov edi, eax
mov esi, dword [edi]
lea ecx, [esp + 0x41c]
add esi, 0x2c
call dword [sym.imp.LibDui.dll_public:_wchar_t_const____thiscall_DuiLib::CDuiString::GetData_void_const]
mov edx, dword [esi]
push eax
mov ecx, edi
call edx
mov edi, dword [esp + 0x18]
lea esi, [esp + 0x20]
call fcn.004260e0
add eax, 0x64
cmp dword [eax + 0x1c], 0x10
jb 0x4163b4
mov eax, dword [eax + 8]
jmp 0x4163b7
add eax, 8
push eax
lea ebx, [esp + 0x3c]
call fcn.0046ebd0
add esp, 4
mov ebx, 8
mov byte [esp + 0x910], bl
cmp dword [eax + 0x1c], ebx
jb 0x4163da
mov eax, dword [eax + 8]
jmp 0x4163dd
add eax, 8
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x4ac]
call dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::constructor_wchar_t_const___int_]
mov byte [esp + 0x910], 0xa
cmp dword [esp + 0x54], ebx
jb 0x416408
mov eax, dword [esp + 0x40]
push eax
call fcn.00479ac0
add esp, 4
xor ecx, ecx
mov word [esp + 0x40], cx
xor esi, esi
push 3
lea ecx, [esp + 0x5c]
mov dword [esp + 0x58], 7
mov dword [esp + 0x54], esi
call fcn.00477370
mov eax, dword [esp + 0x38]
cmp eax, 0xfffffffd
je 0x41644a
cmp eax, esi
je 0x416446
mov dword [eax], esi
mov edx, dword [esp + 0x38]
mov eax, dword [edx + 4]
mov dword [esp + 0x38], eax
cmp eax, esi
jne 0x416435
mov dword [esp + 0x38], esi
lea ecx, [esp + 0x58]
call fcn.004773b0
lea eax, [esp + 0x4a4]
push eax
call fcn.00436400
mov ebx, dword [sym.imp.LibDui.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CContainerUI::FindSubControl_wchar_t_const__]
add esp, 4
push str.LBL_MS
mov ecx, ebp
call ebx
mov edi, eax
mov esi, dword [edi]
lea ecx, [esp + 0x4a4]
add esi, 0x2c
call dword [sym.imp.LibDui.dll_public:_wchar_t_const____thiscall_DuiLib::CDuiString::GetData_void_const]
mov edx, dword [esi]
push eax
mov ecx, edi
call edx
lea ecx, [esp + 0x52c]
call dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::constructor_void_]
mov edi, dword [esp + 0x18]
lea esi, [esp + 0x20]
mov byte [esp + 0x910], 0xb
call fcn.004260e0
mov eax, dword [eax + 0x14c]
push eax
lea ecx, [esp + 0x530]
push str.bkimage_filejiasu_guoqi__d.png_dest10_13_40_43_
push ecx
call dword [sym.imp.LibDui.dll_public:_int___cdecl_DuiLib::CDuiString::Format_wchar_t_const__]
add esp, 0xc
lea ecx, [esp + 0x52c]
call dword [sym.imp.LibDui.dll_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const]
push eax
push str.LBL_GUOQI
mov ecx, ebp
call ebx
mov ecx, eax
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CControlUI::ApplyAttributeList_wchar_t_const__]
mov ebx, dword [ebp]
add ebx, 0xf0
call fcn.004260e0
mov edx, dword [eax]
mov eax, dword [ebx]
push edx
mov ecx, ebp
call eax
mov ebp, edi
call fcn.004260e0
mov ebx, eax
call fcn.004260e0
mov ecx, dword [eax]
lea edx, [esp + 0x98]
push edx
mov edi, ebx
mov dword [esp + 0x98], ecx
call fcn.00426880
mov bl, 0xc
mov byte [esp + 0x910], bl
mov eax, dword [esp + 0x94]
lea ecx, [esp + 0x238]
push ecx
lea edi, [esp + 0x9c]
mov dword [esp + 0x238], eax
call fcn.00426880
lea edx, [esp + 0x234]
push edx
lea eax, [esp + 0x88]
push eax
mov eax, dword [esp + 0x24]
add eax, 0x1f38
push eax
mov byte [esp + 0x91c], 0xd
call fcn.00424e20
push 3
lea ecx, [esp + 0x38]
call fcn.00477370
mov byte [esp + 0x910], 0xe
mov eax, dword [esp + 0x84]
test eax, eax
je 0x4165ea
cmp dword [eax], 0xfffffffd
je 0x4165ea
cmp dword [eax], 0
mov esi, eax
je 0x4165ba
mov eax, dword [esi]
lea ecx, [esp + 0x84]
cmp eax, ecx
je 0x4165ba
cmp dword [eax + 4], 0
lea esi, [eax + 4]
jne 0x4165a4
cmp dword [esi], 0
jne 0x4165d6
push 0xbd
push 0x5112a8
push str.ITERATOR_LIST_CORRUPTED_
call fcn.004773e0
add esp, 0xc
mov edx, dword [esp + 0x88]
mov dword [esi], edx
mov dword [esp + 0x84], 0
lea ecx, [esp + 0x34]
mov byte [esp + 0x910], 0xd
call fcn.004773b0
lea eax, [esp + 0x238]
push eax
mov byte [esp + 0x914], bl
call fcn.0040cdf0
lea ecx, [esp + 0x98]
push ecx
mov byte [esp + 0x914], 0xb
call fcn.0040cdf0
mov byte [esp + 0x910], 0xa
mov esi, dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::destructor_void_]
lea ecx, [esp + 0x52c]
call esi
lea ecx, [esp + 0x4a4]
mov byte [esp + 0x910], 7
call esi
lea ecx, [esp + 0x41c]
mov byte [esp + 0x910], 4
call esi
lea ecx, [esp + 0x5b4]
mov byte [esp + 0x910], 3
call dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDialogBuilder::destructor_void_]
mov ecx, dword [esp + 0x2c]
sub ecx, dword [esp + 0x28]
mov esi, dword [esp + 0x1c]
mov eax, 0x13e22cbd
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
inc ebp
add eax, edx
xor ebx, ebx
cmp ebp, eax
mov dword [esp + 0x18], ebp
jl 0x416250
inc dword [esi + 0x1bc0]
lea ecx, [esp + 0x60]
push ecx
push ebx
push esi
push 0x4169f0
push ebx
push ebx
mov dword [esi + 0x1bbc], ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edi, [esp + 0x20]
mov byte [esp + 0x910], 0xf
call fcn.00429e60
push 3
lea ecx, [esp + 0x38]
mov byte [esp + 0x914], bl
call fcn.00477370
mov eax, dword [esp + 0x20]
cmp eax, 0xfffffffd
je 0x41670a
cmp eax, ebx
je 0x416706
mov dword [eax], ebx
mov edx, dword [esp + 0x20]
mov eax, dword [edx + 4]
mov dword [esp + 0x20], eax
cmp eax, ebx
jne 0x4166f5
mov dword [esp + 0x20], ebx
lea ecx, [esp + 0x34]
call fcn.004773b0
lea eax, [esp + 0x3d4]
push eax
mov dword [esp + 0x914], 0xffffffff
call fcn.00416760
mov ecx, dword [esp + 0x908]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x8f0]
xor ecx, esp
call fcn.004797c0
add esp, 0x900
ret