Function at 0x416600
Capabilities:
Hide graphical window
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x954
mov eax, dword [0x4f96c0]
xor eax, esp
mov dword [esp + 0x950], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 0x10]
lea eax, [esp + 0x851]
push 0x104
push 0
push eax
mov byte [esp + 0x85c], 0
call fcn.004ad1e0
add esp, 0xc
lea eax, [esp + 0x850]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov esi, dword [sym.imp.SHLWAPI.dll_StrRChrIA]
lea eax, [esp + 0x850]
push 0x2e
push 0
push eax
call esi
test eax, eax
je 0x416676
mov byte [eax], 0
push 0x5f
push 0
lea eax, [esp + 0x858]
push eax
call esi
test eax, eax
je 0x4166b5
lea edx, [eax + 1]
test edx, edx
je 0x4166b5
cmp byte [edx], 0
jne 0x416698
xor ecx, ecx
jmp 0x4166a9
mov ecx, edx
lea esi, [ecx + 1]
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4166a0
sub ecx, esi
push ecx
push edx
mov ecx, 0x4fa70c
call fcn.004018d0
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea eax, [esp + 0x44]
push eax
push 1
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
push reloc.WS2_32.dll_bind
mov dword [esp + 0x58], 0
call ebx
test eax, eax
jne 0x4166f0
push dword [esp + 0x44]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [0x4fd140], 1
xor eax, eax
mov dword [esp + 0x10c], 7
mov dword [esp + 0x108], 0
mov word [esp + 0xf8], ax
cmp word [edi], ax
jne 0x416719
xor ecx, ecx
jmp 0x41672f
mov ecx, edi
lea edx, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x416720
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [esp + 0x100]
call fcn.00408930
push 2
push ecx
push 0x4e8db0
lea ecx, [esp + 0x104]
call fcn.00405b30
test eax, eax
js 0x4173cd
xor eax, eax
mov dword [esp + 0x124], 7
mov dword [esp + 0x120], 0
mov word [esp + 0x110], ax
cmp word [edi], ax
jne 0x416782
xor ecx, ecx
jmp 0x416796
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x416787
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [esp + 0x118]
call fcn.00408930
push 4
push ecx
push str._std
lea ecx, [esp + 0x11c]
call fcn.00405b30
test eax, eax
js 0x416bc8
lea eax, [esp + 0x40]
mov dword [esp + 0x40], 0
push eax
push 1
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
push reloc.WS2_32.dll_bind
mov esi, 0x1e
call ebx
test eax, eax
jne 0x4167fb
push dword [esp + 0x40]
mov eax, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call eax
mov esi, 0x1d
jmp 0x416a45
lea eax, [esp + 0x38]
mov dword [esp + 0x38], 0
push eax
push 1
push 0
push str.Software_feiraruninstall
push reloc.WS2_32.dll_accept
call ebx
test eax, eax
jne 0x416a40
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x40]
mov dword [esp + 0x5c], 4
push eax
lea eax, [esp + 0x60]
mov dword [esp + 0x64], 4
push eax
push 0
push str.uninstalltime
push dword [esp + 0x4c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x416a33
xor ebx, ebx
lea ecx, [esp + 0x10]
push ebx
call fcn.00423bc0
push 0x4fa70c
lea ecx, [esp + 0xcc]
call fcn.00423e20
lea eax, [esp + 0xc8]
push eax
push 0x4e8e14
lea ecx, [esp + 0x18]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0xc8]
call fcn.00424160
lea ecx, [esp + 0x1a8]
call fcn.00422500
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x1b0]
call fcn.00422590
push eax
mov edx, 0x4e820c
lea ecx, [esp + 0x64]
call fcn.004151b0
add esp, 4
lea ecx, [esp + 0xc8]
call fcn.004016a0
sub esp, 0x18
mov dword [esp + 0x1bc], 0xf
lea eax, [esp + 0x78]
mov dword [esp + 0x1b8], ebx
mov ecx, esp
mov byte [esp + 0x1a8], bl
push eax
call fcn.00408a90
sub esp, 0x18
mov ecx, esp
push str.http:__api.feirar.softbd.cn_api_intv
call fcn.00401640
lea ecx, [esp + 0x1c0]
call fcn.00401df0
add esp, 0x30
test eax, eax
je 0x416a09
lea ecx, [esp + 0x1c8]
call fcn.00428fe0
push ebx
lea ecx, [esp + 0xcc]
call fcn.00423bc0
push 1
lea eax, [esp + 0xcc]
push eax
lea eax, [esp + 0x198]
push eax
lea ecx, [esp + 0x1d4]
call fcn.00429070
test al, al
je 0x4169c0
push str.intv
lea ecx, [esp + 0xcc]
call fcn.00424d70
mov ecx, eax
call fcn.00425290
test al, al
jne 0x4169c0
push str.intv
lea ecx, [esp + 0xcc]
call fcn.00424d70
mov ecx, eax
call fcn.00424a00
test al, al
jne 0x4169c0
push str.intv
lea ecx, [esp + 0xcc]
call fcn.00424d70
mov ecx, eax
call fcn.00424640
mov ebx, eax
lea ecx, [esp + 0xc8]
call fcn.00424160
lea ecx, [esp + 0x1c8]
call fcn.0040fe90
test ebx, ebx
je 0x416a09
push 0
call fcn.004a87e9
add esp, 4
sub eax, dword [esp + 0x3c]
sbb edx, 0
imul ecx, ebx, 0x15180
test edx, edx
jg 0x416a04
jl 0x4169fd
cmp eax, ecx
jae 0x416a04
mov esi, 0x1b
jmp 0x416a09
mov esi, 0x1c
lea ecx, [esp + 0x190]
call fcn.004016a0
lea ecx, [esp + 0x60]
call fcn.004016a0
lea ecx, [esp + 0x1a8]
call fcn.0040ce40
lea ecx, [esp + 0x10]
call fcn.00424160
push dword [esp + 0x38]
mov eax, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call eax
jmp 0x416a45
mov esi, 0x1a
push 0
lea ecx, [esp + 0x2c]
call fcn.00423bc0
push 0x4e81d0
lea ecx, [esp + 0x14]
call fcn.00423db0
lea eax, [esp + 0x10]
push eax
push 0x4e81cc
lea ecx, [esp + 0x30]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
push 0x4fa70c
lea ecx, [esp + 0x14]
call fcn.00423e20
lea eax, [esp + 0x10]
push eax
push str.chnid
lea ecx, [esp + 0x30]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
push esi
lea ecx, [esp + 0x14]
call fcn.00423d30
lea eax, [esp + 0x10]
push eax
push str.count_id
lea ecx, [esp + 0x30]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
lea ecx, [esp + 0xa8]
call fcn.00422500
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0xb0]
call fcn.00422590
push eax
mov edx, 0x4e820c
lea ecx, [esp + 0x94]
call fcn.004151b0
add esp, 4
cmp dword [esp + 0x74], 0x10
jb 0x416b29
push dword [esp + 0x60]
call fcn.004a8256
add esp, 4
sub esp, 0x18
mov dword [esp + 0xa4], 0xf
mov ecx, esp
mov dword [esp + 0xa0], 0
mov byte [esp + 0x90], 0
lea eax, [esp + 0xa8]
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00401720
sub esp, 0x18
mov ecx, esp
push str.http:__up.feirar.com_countUser
call fcn.00401640
lea ecx, [esp + 0xa8]
call fcn.00401df0
add esp, 0x30
cmp esi, 0x1d
je 0x417304
cmp esi, 0x1b
je 0x417304
lea ecx, [esp + 0x78]
call fcn.004016a0
lea ecx, [esp + 0x90]
call fcn.004016a0
lea ecx, [esp + 0xa8]
call fcn.0040ce40
lea ecx, [esp + 0x28]
call fcn.00424160
push edi
lea ecx, [esp + 0x144]
call fcn.00408a30
push 3
push ecx
push 0x4e8e48
lea ecx, [esp + 0x14c]
call fcn.00405b30
test eax, eax
js 0x416eea
push 0
lea ecx, [esp + 0x2c]
call fcn.00423bc0
push 0x4e81d0
lea ecx, [esp + 0x14]
call fcn.00423db0
lea eax, [esp + 0x10]
push eax
push 0x4e81cc
lea ecx, [esp + 0x30]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
lea ecx, [esp + 0x60]
call fcn.0041f6b0
push eax
lea ecx, [esp + 0x14]
call fcn.00423e20
lea eax, [esp + 0x10]
push eax
push 0x4e81dc
lea ecx, [esp + 0x30]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
cmp dword [esp + 0x74], 0x10
jb 0x416c76
push dword [esp + 0x60]
call fcn.004a8256
add esp, 4
lea ecx, [esp + 0x60]
call fcn.00401f20
push eax
lea ecx, [esp + 0x14]
call fcn.00423e20
lea eax, [esp + 0x10]
push eax
push str.osver
lea ecx, [esp + 0x30]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
cmp dword [esp + 0x74], 0x10
jb 0x416cbf
push dword [esp + 0x60]
call fcn.004a8256
add esp, 4
push 0x4fa70c
lea ecx, [esp + 0x14]
call fcn.00423e20
lea eax, [esp + 0x10]
push eax
push str.chnid
lea ecx, [esp + 0x30]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
push 2
lea ecx, [esp + 0x14]
call fcn.00423cf0
lea eax, [esp + 0x10]
push eax
push str.count_id
lea ecx, [esp + 0x30]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
push 1
lea ecx, [esp + 0x14]
call fcn.00423cf0
lea eax, [esp + 0x10]
push eax
push str.silent
lea ecx, [esp + 0x30]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
push dword [0x4fd140]
lea ecx, [esp + 0x14]
call fcn.00423cf0
lea eax, [esp + 0x10]
push eax
push str.cover
lea ecx, [esp + 0x30]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
lea ecx, [esp + 0xa8]
call fcn.00422500
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0xb0]
call fcn.00422590
push eax
mov edx, 0x4e820c
lea ecx, [esp + 0x94]
call fcn.004151b0
add esp, 4
cmp dword [esp + 0x74], 0x10
jb 0x416dc8
push dword [esp + 0x60]
call fcn.004a8256
add esp, 4
sub esp, 0x18
mov dword [esp + 0xa4], 0xf
mov ecx, esp
mov dword [esp + 0xa0], 0
mov byte [esp + 0x90], 0
lea eax, [esp + 0xa8]
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00401720
sub esp, 0x18
mov ecx, esp
push str.http:__up.feirar.com_countUser
call fcn.00401640
lea ecx, [esp + 0xa8]
call fcn.00401df0
add esp, 0x30
cmp dword [esp + 0x8c], 0x10
jb 0x416e41
push dword [esp + 0x78]
call fcn.004a8256
add esp, 4
cmp dword [esp + 0xa4], 0x10
mov dword [esp + 0x8c], 0xf
mov dword [esp + 0x88], 0
mov byte [esp + 0x78], 0
jb 0x416e75
push dword [esp + 0x90]
call fcn.004a8256
add esp, 4
cmp dword [esp + 0xc0], 0x10
mov dword [esp + 0xa4], 0xf
mov dword [esp + 0xa0], 0
mov byte [esp + 0x90], 0
mov dword [esp + 0xa8], vtable.Json::FastWriter.0
jb 0x416eb7
push dword [esp + 0xac]
call fcn.004a8256
add esp, 4
lea ecx, [esp + 0xa8]
mov dword [esp + 0xc0], 0xf
mov dword [esp + 0xbc], 0
mov byte [esp + 0xac], 0
call fcn.004224b0
lea ecx, [esp + 0x28]
call fcn.00424160
lea ecx, [esp + 0x238]
call fcn.0040d230
push 9
push ecx
push str._runbysvr
lea ecx, [esp + 0x104]
mov byte [esp + 0x5b4], 1
call fcn.00405b30
mov ecx, dword [0x4fa6b0]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [0x4fa6b0], ecx
lea ecx, [esp + 0x238]
call fcn.00410340
lea ecx, [esp + 0x238]
call fcn.00410a40
push edi
lea ecx, [esp + 0x12c]
call fcn.00408a30
push 3
push ecx
push 0x4e8e48
lea ecx, [esp + 0x134]
call fcn.00405b30
test eax, eax
js 0x41725f
push 0
lea ecx, [esp + 0x2c]
call fcn.00423bc0
push 0x4e81d0
lea ecx, [esp + 0x14]
call fcn.00423db0
lea eax, [esp + 0x10]
push eax
push 0x4e81cc
lea ecx, [esp + 0x30]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
lea ecx, [esp + 0x60]
call fcn.0041f6b0
push eax
lea ecx, [esp + 0x14]
call fcn.00423e20
lea eax, [esp + 0x10]
push eax
push 0x4e81dc
lea ecx, [esp + 0x30]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
cmp dword [esp + 0x74], 0x10
jb 0x416feb
push dword [esp + 0x60]
call fcn.004a8256
add esp, 4
lea ecx, [esp + 0x60]
call fcn.00401f20
push eax
lea ecx, [esp + 0x14]
call fcn.00423e20
lea eax, [esp + 0x10]
push eax
push str.osver
lea ecx, [esp + 0x30]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
cmp dword [esp + 0x74], 0x10
jb 0x417034
push dword [esp + 0x60]
call fcn.004a8256
add esp, 4
push 0x4fa70c
lea ecx, [esp + 0x14]
call fcn.00423e20
lea eax, [esp + 0x10]
push eax
push str.chnid
lea ecx, [esp + 0x30]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
push 1
lea ecx, [esp + 0x14]
call fcn.00423cf0
lea eax, [esp + 0x10]
push eax
push str.silent
lea ecx, [esp + 0x30]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
push 1
lea ecx, [esp + 0x14]
call fcn.00423cf0
lea eax, [esp + 0x10]
push eax
push str.type
lea ecx, [esp + 0x30]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
push dword [0x4fd140]
lea ecx, [esp + 0x14]
call fcn.00423cf0
lea eax, [esp + 0x10]
push eax
push str.cover
lea ecx, [esp + 0x30]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
lea ecx, [esp + 0xa8]
call fcn.00422500
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0xb0]
call fcn.00422590
push eax
mov edx, 0x4e820c
lea ecx, [esp + 0x94]
call fcn.004151b0
add esp, 4
cmp dword [esp + 0x74], 0x10
jb 0x41713d
push dword [esp + 0x60]
call fcn.004a8256
add esp, 4
sub esp, 0x18
mov dword [esp + 0xa4], 0xf
mov ecx, esp
mov dword [esp + 0xa0], 0
mov byte [esp + 0x90], 0
lea eax, [esp + 0xa8]
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00401720
sub esp, 0x18
mov ecx, esp
push str.http:__up.feirar.com_countInstall
call fcn.00401640
lea ecx, [esp + 0xa8]
call fcn.00401df0
add esp, 0x30
cmp dword [esp + 0x8c], 0x10
jb 0x4171b6
push dword [esp + 0x78]
call fcn.004a8256
add esp, 4
cmp dword [esp + 0xa4], 0x10
mov dword [esp + 0x8c], 0xf
mov dword [esp + 0x88], 0
mov byte [esp + 0x78], 0
jb 0x4171ea
push dword [esp + 0x90]
call fcn.004a8256
add esp, 4
cmp dword [esp + 0xc0], 0x10
mov dword [esp + 0xa4], 0xf
mov dword [esp + 0xa0], 0
mov byte [esp + 0x90], 0
mov dword [esp + 0xa8], vtable.Json::FastWriter.0
jb 0x41722c
push dword [esp + 0xac]
call fcn.004a8256
add esp, 4
lea ecx, [esp + 0xa8]
mov dword [esp + 0xc0], 0xf
mov dword [esp + 0xbc], 0
mov byte [esp + 0xac], 0
call fcn.004224b0
lea ecx, [esp + 0x28]
call fcn.00424160
call fcn.00417910
cmp dword [esp + 0x13c], 8
jb 0x41727d
push dword [esp + 0x128]
call fcn.004a8256
add esp, 4
xor eax, eax
mov dword [esp + 0x13c], 7
lea ecx, [esp + 0x238]
mov dword [esp + 0x138], 0
mov word [esp + 0x128], ax
call fcn.0040d6f0
cmp dword [esp + 0x154], 8
jb 0x4172c2
push dword [esp + 0x140]
call fcn.004a8256
add esp, 4
xor eax, eax
mov dword [esp + 0x154], 7
mov dword [esp + 0x150], 0
mov word [esp + 0x140], ax
cmp dword [esp + 0x124], 8
jb 0x417762
push dword [esp + 0x110]
call fcn.004a8256
add esp, 4
jmp 0x417762
call fcn.00417910
cmp dword [esp + 0x8c], 0x10
jb 0x41731f
push dword [esp + 0x78]
call fcn.004a8256
add esp, 4
cmp dword [esp + 0xa4], 0x10
mov dword [esp + 0x8c], 0xf
mov dword [esp + 0x88], 0
mov byte [esp + 0x78], 0
jb 0x417353
push dword [esp + 0x90]
call fcn.004a8256
add esp, 4
cmp dword [esp + 0xc0], 0x10
mov dword [esp + 0xa4], 0xf
mov dword [esp + 0xa0], 0
mov byte [esp + 0x90], 0
mov dword [esp + 0xa8], vtable.Json::FastWriter.0
jb 0x417395
push dword [esp + 0xac]
call fcn.004a8256
add esp, 4
lea ecx, [esp + 0xa8]
mov dword [esp + 0xc0], 0xf
mov dword [esp + 0xbc], 0
mov byte [esp + 0xac], 0
call fcn.004224b0
lea ecx, [esp + 0x28]
call fcn.00424160
jmp 0x4172e2
push 0
lea ecx, [esp + 0x4c]
call fcn.00423bc0
push 0x4e81d0
lea ecx, [esp + 0x14]
call fcn.00423db0
lea eax, [esp + 0x10]
push eax
push 0x4e81cc
lea ecx, [esp + 0x50]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
lea ecx, [esp + 0x60]
call fcn.0041f6b0
push eax
lea ecx, [esp + 0x14]
call fcn.00423e20
lea eax, [esp + 0x10]
push eax
push 0x4e81dc
lea ecx, [esp + 0x50]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
cmp dword [esp + 0x74], 0x10
jb 0x417452
push dword [esp + 0x60]
call fcn.004a8256
add esp, 4
lea ecx, [esp + 0x60]
call fcn.00401f20
push eax
lea ecx, [esp + 0x14]
call fcn.00423e20
lea eax, [esp + 0x10]
push eax
push str.osver
lea ecx, [esp + 0x50]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
cmp dword [esp + 0x74], 0x10
jb 0x41749b
push dword [esp + 0x60]
call fcn.004a8256
add esp, 4
push 0x4fa70c
lea ecx, [esp + 0x14]
call fcn.00423e20
lea eax, [esp + 0x10]
push eax
push str.chnid
lea ecx, [esp + 0x50]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
push 2
lea ecx, [esp + 0x14]
call fcn.00423cf0
lea eax, [esp + 0x10]
push eax
push str.count_id
lea ecx, [esp + 0x50]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
push 0
lea ecx, [esp + 0x14]
call fcn.00423cf0
lea eax, [esp + 0x10]
push eax
push str.silent
lea ecx, [esp + 0x50]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
push dword [0x4fd140]
lea ecx, [esp + 0x14]
call fcn.00423cf0
lea eax, [esp + 0x10]
push eax
push str.cover
lea ecx, [esp + 0x50]
call fcn.00424d70
mov ecx, eax
call fcn.00424270
lea ecx, [esp + 0x10]
call fcn.00424160
lea ecx, [esp + 0x170]
call fcn.00422500
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x178]
call fcn.00422590
push eax
mov edx, 0x4e820c
lea ecx, [esp + 0x15c]
call fcn.004151b0
add esp, 4
cmp dword [esp + 0x74], 0x10
jb 0x4175a4
push dword [esp + 0x60]
call fcn.004a8256
add esp, 4
sub esp, 0x18
mov dword [esp + 0x10c], 0xf
mov ecx, esp
mov dword [esp + 0x108], 0
mov byte [esp + 0xf8], 0
lea eax, [esp + 0x170]
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00401720
sub esp, 0x18
mov ecx, esp
push 0x1e
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push str.http:__up.feirar.com_countUser
mov byte [ecx], 0
call fcn.004018d0
lea ecx, [esp + 0x110]
call fcn.00401df0
mov eax, dword [ebp + 8]
add esp, 0x30
mov dword [0x4fd158], eax
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
js 0x417698
push 0x618
call fcn.004a8564
add esp, 4
test eax, eax
je 0x417698
mov ecx, eax
call fcn.0040d230
mov esi, eax
test esi, esi
je 0x417698
push ecx
push 0x258
push 0x384
push 0
push 0
push 0x100
push 0x10cf0000
push 0x4e8e64
push 0
mov ecx, esi
call fcn.00432f80
push ecx
mov ecx, esi
call fcn.00433170
mov ecx, esi
call fcn.00433040
push 5
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.0042ffb0
call dword [sym.imp.ole32.dll_CoUninitialize]
call fcn.00417910
cmp dword [esp + 0xf4], 0x10
jb 0x4176b6
push dword [esp + 0xe0]
call fcn.004a8256
add esp, 4
cmp dword [esp + 0x16c], 0x10
mov dword [esp + 0xf4], 0xf
mov dword [esp + 0xf0], 0
mov byte [esp + 0xe0], 0
jb 0x4176ed
push dword [esp + 0x158]
call fcn.004a8256
add esp, 4
cmp dword [esp + 0x188], 0x10
mov dword [esp + 0x16c], 0xf
mov dword [esp + 0x168], 0
mov byte [esp + 0x158], 0
mov dword [esp + method.Json::FastWriter.virtual_0], vtable.Json::FastWriter.0
jb 0x41772f
push dword [esp + 0x174]
call fcn.004a8256
add esp, 4
lea ecx, [esp + 0x170]
mov dword [esp + 0x188], 0xf
mov dword [esp + 0x184], 0
mov byte [esp + 0x174], 0
call fcn.004224b0
lea ecx, [esp + 0x48]
call fcn.00424160
cmp dword [esp + 0x10c], 8
jb 0x41777b
push dword [esp + 0xf8]
call fcn.004a8256
add esp, 4
mov ecx, dword [esp + 0x95c]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004a79be
mov esp, ebp
pop ebp
ret 0x10