Function at 0x4ac1b0
Capabilities:
Check if file exists
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
mov eax, dword [0x53ac84]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, ecx
mov dword [ebp - 8], ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
test eax, eax
je 0x4ac9b4
test edi, edi
je 0x4ac9b4
push eax
lea ecx, [ebp - 0x24]
call fcn.00485330
mov esi, dword [ebp - 0x24]
lea eax, [ebp - 0x20]
push esi
push eax
call fcn.00495180
add esp, 8
lea ecx, [ebp - 0x40]
push 0
call fcn.004b0150
lea eax, [ebp - 0x40]
push eax
push edi
call fcn.00493de0
add esp, 8
call fcn.004833a0
mov ecx, eax
test ecx, ecx
je 0x4acef8
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push str.callbackName
call fcn.004b0660
push eax
call fcn.00493c70
mov eax, dword [0x543020]
add esp, 8
test eax, eax
jne 0x4ac26e
push 0x543eb0
push 0x2c
call fcn.004c203f
add esp, 8
test eax, eax
je 0x4ac267
mov ecx, eax
call fcn.00485670
jmp 0x4ac269
xor eax, eax
mov dword [0x543020], eax
push dword [ebp - 0x20]
push str.chrome_web_call__s
push str.web_view_base
push eax
call fcn.00486af0
push str.offline
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 0x18
or edi, 0xffffffff
test eax, eax
jne 0x4ac339
add ebx, 0xffffffe8
push 3
mov ecx, ebx
call fcn.004af510
call fcn.004833a0
mov ecx, eax
test ecx, ecx
je 0x4acef8
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push 0x4fa0c8
call fcn.004b0660
push eax
call fcn.00493c70
mov eax, dword [ebp - 0x2c]
add esp, 8
cmp dword [eax - 0xc], 0
je 0x4ac316
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004ae500
mov ecx, ebx
push dword [eax]
push dword [ebp - 0x2c]
call fcn.004ae260
mov edx, dword [ebp - 0x28]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4ac316
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4ac95e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4ac95e
push str.getHttpRequest
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 8
test eax, eax
jne 0x4ac599
push 0x543eb0
push 8
call fcn.004c203f
mov edi, eax
add esp, 8
test edi, edi
je 0x4ac3b3
push 0x543eb0
push 0xe8
call fcn.004c203f
add esp, 8
test eax, eax
je 0x4ac397
sub esp, 8
mov ecx, esp
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov ecx, eax
call fcn.00485480
jmp 0x4ac399
xor eax, eax
push dword [ebp - 8]
mov ecx, edi
mov dword [edi], 0
push eax
mov dword [edi + 4], 0
call fcn.004a7a10
jmp 0x4ac3b5
xor edi, edi
mov dword [ebp - 8], 0
lea ecx, [ebp - 0xc]
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push edi
call fcn.004a7ab0
call fcn.0049a890
mov ecx, dword fs:[0x2c]
mov edi, eax
mov edx, dword [0x5441c8]
mov edx, dword [ecx + edx*4]
mov ecx, dword [0x543e00]
cmp ecx, dword [edx + 4]
jg 0x4acf02
cmp dword [edi + 0x94], 0
jne 0x4ac41f
cmp dword [edi + 0xac], 0
jne 0x4ac41f
cmp dword [edi + 0xc4], 0
jne 0x4ac41f
mov ecx, 0x543dfc
call fcn.00483ba0
jmp 0x4ac464
cmp dword [edi + 0xc8], 8
lea eax, [edi + 0xb4]
jb 0x4ac430
mov eax, dword [eax]
cmp dword [edi + 0xb0], 8
lea ecx, [edi + 0x9c]
jb 0x4ac441
mov ecx, dword [ecx]
add edi, 0x84
cmp dword [edi + 0x14], 8
jb 0x4ac44f
mov edi, dword [edi]
push eax
push ecx
push edi
push str.Q_s_T_s_S_s
push 0x543dfc
call fcn.004832c0
add esp, 0x14
push dword [0x543dfc]
lea ecx, [ebp - 0x28]
call fcn.00483760
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
push eax
mov dword [ebp - 0x30], eax
call fcn.00483b30
mov edi, esp
mov dword [ebp - 0x28], eax
push eax
call fcn.00483b30
add eax, 0x10
add esp, 4
mov dword [edi], eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call fcn.00487080
push eax
call fcn.00487450
mov edx, dword [ebp - 0x28]
or edi, 0xffffffff
add esp, 4
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4ac4c1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x18]
call fcn.004837e0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.00493fd0
push dword [ebp - 0x18]
lea eax, [ebp - 0x28]
push eax
call fcn.00495180
add esp, 0x10
push dword [eax]
push dword [ebp - 0x2c]
push str.request_param__s__s
push str.getHttpRequest
call fcn.00486590
push eax
call fcn.00486af0
mov edx, dword [ebp - 0x28]
add esp, 0x14
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4ac51c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x53a048
lea eax, [ebp - 0x40]
lea ecx, [ebx - 0x18]
push eax
mov eax, dword [ecx]
call dword [eax + 0x18]
mov ecx, dword [ebp - 8]
push eax
sub esp, 8
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
test ecx, ecx
je 0x4ac54b
lock inc dword [ecx + 4]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
mov dword [eax + 4], ecx
call fcn.0048e6c0
mov edx, dword [ebp - 0x18]
add esp, 0x14
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4ac575
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x30]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4ac58c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0xc]
call fcn.004ab460
jmp 0x4ac95e
push str.getSystemInfo
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 8
test eax, eax
jne 0x4ac5d3
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebx - 0x18]
call fcn.004ae660
push dword [eax]
lea ecx, [ebx - 0x18]
push dword [ebp - 0x2c]
call fcn.004ae260
lea ecx, [ebp - 0x28]
call fcn.004829c0
jmp 0x4ac95e
push str.openUrl
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 8
test eax, eax
jne 0x4ac635
lea ecx, [ebp - 0x40]
call fcn.004b16e0
test al, al
je 0x4ac95e
lea ecx, [ebp - 0x18]
call fcn.004837e0
lea eax, [ebp - 0x18]
push eax
push 0x4fa0c8
lea ecx, [ebp - 0x40]
call fcn.004b0660
push eax
call fcn.00493c70
add esp, 8
test eax, eax
je 0x4ac628
push dword [ebp - 0x18]
call fcn.00490580
add esp, 4
lea ecx, [ebp - 0x18]
call fcn.004829c0
jmp 0x4ac95e
push str.openLoginWnd
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 8
test eax, eax
jne 0x4ac666
push 1
push dword [ebx - 0x14]
call dword [sym.imp.USER32.dll_GetParent]
push eax
call fcn.0049a890
mov ecx, eax
call fcn.004abf40
jmp 0x4ac95e
push str.signOut
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 8
test eax, eax
jne 0x4ac7a7
call fcn.0049a890
mov ebx, eax
call fcn.004833a0
test eax, eax
je 0x4acef8
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push str.__user_server___user_logout
push eax
call fcn.004832c0
add esp, 8
push 0
push str.UserServer_LoginServer_Class
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x28], eax
test eax, eax
je 0x4ac756
call fcn.004833a0
test eax, eax
je 0x4acef8
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
cmp dword [ebx + 0x140], 8
mov dword [ebp - 0x1c], eax
lea eax, [ebx + 0x12c]
jb 0x4ac6f3
mov eax, dword [eax]
mov edi, dword [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x1c]
push str.__s___s
push eax
call fcn.0048bfb0
mov esi, dword [ebp - 0x1c]
push esi
push 0x402
push dword [ebp - 0x28]
call fcn.004a5a60
add esp, 0x1c
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4ac732
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x24]
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4ac95e
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4ac95e
push dword [ebx + 4]
lea eax, [ebp - 0x18]
push str.___ipc_d
push eax
call fcn.0048bfb0
add ebx, 0x12c
add esp, 0xc
mov eax, ebx
cmp dword [ebx + 0x14], 8
jb 0x4ac77a
mov eax, dword [ebx]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4ac7a2
cmp dword [ebx + 0x14], 8
jb 0x4ac78d
mov ebx, dword [ebx]
mov edi, dword [ebp - 0x18]
push 5
push 0
push edi
push ebx
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x4ac735
mov edi, dword [ebp - 0x18]
jmp 0x4ac735
push str.onLogin
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 8
test eax, eax
jne 0x4ac7cc
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebx + 0x14]
call fcn.00483810
jmp 0x4ac95e
push str.onLogout
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 8
test eax, eax
jne 0x4ac7f1
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebx + 0x18]
call fcn.00483810
jmp 0x4ac95e
push str.onVipClose
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 8
test eax, eax
jne 0x4ac816
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebx + 0x1c]
call fcn.00483810
jmp 0x4ac95e
push str.showDevTools
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 8
test eax, eax
jne 0x4ac842
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x40]
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebx - 0x18]
call fcn.004ae500
jmp 0x4ac5b9
push str.openVipPayWnd
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 8
test eax, eax
jne 0x4ac9c7
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x18]
push eax
push str.whereShow
call fcn.004b0660
push eax
call fcn.00493af0
add esp, 8
cmp dword [ebp - 0x18], 0
jg 0x4ac884
mov dword [ebp - 0x18], 5
lea ecx, [ebp - 0x1c]
call fcn.004837e0
lea ecx, [ebp - 0x24]
call fcn.004837e0
lea eax, [ebp - 0x1c]
push eax
push 0x4fa0c8
lea ecx, [ebp - 0x40]
call fcn.004b0660
push eax
call fcn.00493c70
add esp, 8
lea eax, [ebp - 0x24]
lea ecx, [ebp - 0x40]
push eax
push str.append
call fcn.004b0660
push eax
call fcn.00493c70
add esp, 8
lea eax, [ebp - 0x30]
mov ecx, 0x543c74
push 0x4fa1f8
push eax
call fcn.004a7040
mov ebx, dword [ebp - 0x24]
lea eax, [ebp - 0x54]
push str.ochannel
push eax
mov ecx, 0x543c74
call fcn.004a7040
push 0x4fa168
mov ecx, 0x543c74
mov edi, dword [eax]
lea eax, [ebp - 0x28]
push eax
call fcn.004a7040
push ebx
push edi
push dword [eax]
push dword [ebp - 0x1c]
push dword [ebp - 0x30]
push dword [ebp - 0x18]
push 1
push 0
call fcn.0049a890
mov ecx, eax
call fcn.004adca0
lea ecx, [ebp - 0x28]
call fcn.004829c0
lea ecx, [ebp - 0x54]
call fcn.004829c0
lea ecx, [ebp - 0x30]
call fcn.004829c0
lea ecx, [ebp - 0x24]
call fcn.004829c0
lea ecx, [ebp - 0x1c]
call fcn.004829c0
mov ebx, dword [ebp - 8]
mov eax, dword [ebx - 0x18]
lea ecx, [ebx - 0x18]
lea edx, [ebp - 0x40]
push edx
push dword [ebp - 0x20]
call dword [eax + 0x1c]
mov edx, dword [ebp - 0x2c]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4ac979
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x40]
call fcn.004b0350
mov edx, dword [ebp - 0x20]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4ac99c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4ac9b4
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004c1fe9
mov esp, ebp
pop ebp
ret 0x10
push str.startMove
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 8
test eax, eax
jne 0x4aca38
call dword [sym.imp.USER32.dll_GetMessagePos]
mov edi, eax
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
lea eax, [ebp - 0x14]
push eax
push dword [ebx - 0x14]
call dword [sym.imp.USER32.dll_GetWindowRect]
movsx ecx, di
sub ecx, dword [ebp - 0x14]
shr edi, 0x10
push 0x3ea
push dword [ebx - 0x14]
movsx eax, di
sub eax, dword [ebp - 0x10]
mov dword [ebx + 0x28], ecx
mov dword [ebx + 0x2c], eax
call dword [sym.imp.USER32.dll_KillTimer]
push 0
push 0xa
push 0x3ea
push dword [ebx - 0x14]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x4ac95e
push str.stopMove
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 8
test eax, eax
jne 0x4aca5f
push 0x3ea
push dword [ebx - 0x14]
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x4ac95e
push str.closeWebView
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 8
test eax, eax
jne 0x4acaa1
lea ecx, [ebx - 0x18]
call fcn.004ae2b0
lea eax, [ebp - 8]
push eax
lea ecx, [ebx - 0x18]
call fcn.004ae500
lea ecx, [ebx - 0x18]
push dword [eax]
push dword [ebp - 0x2c]
call fcn.004ae260
lea ecx, [ebp - 8]
call fcn.004829c0
jmp 0x4ac95e
push str.runCommand
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 8
test eax, eax
jne 0x4acb70
lea ecx, [ebp - 0x18]
call fcn.004837e0
lea ecx, [ebp - 0x24]
call fcn.004837e0
lea ecx, [ebp - 0x1c]
call fcn.004837e0
lea eax, [ebp - 0x18]
push eax
push str.path
lea ecx, [ebp - 0x40]
call fcn.004b0660
push eax
call fcn.00493c70
add esp, 8
lea eax, [ebp - 0x24]
lea ecx, [ebp - 0x40]
push eax
push str.param
call fcn.004b0660
push eax
call fcn.00493c70
add esp, 8
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x40]
push eax
push 0x4f98b8
call fcn.004b0660
push eax
call fcn.00493c70
add esp, 8
mov ecx, 0x543c74
push dword [ebp - 0x1c]
push dword [ebp - 0x24]
push dword [ebp - 0x18]
call fcn.004a7200
lea eax, [ebp - 8]
push eax
lea ecx, [ebx - 0x18]
call fcn.004ae500
lea ecx, [ebx - 0x18]
push dword [eax]
push dword [ebp - 0x2c]
call fcn.004ae260
lea ecx, [ebp - 8]
call fcn.004829c0
lea ecx, [ebp - 0x1c]
call fcn.004829c0
lea ecx, [ebp - 0x24]
call fcn.004829c0
lea ecx, [ebp - 0x18]
call fcn.004829c0
jmp 0x4ac95e
push str.encryptData
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 8
test eax, eax
jne 0x4acc8c
push 7
lea ecx, [ebp - 0x64]
call fcn.004b0150
push 0x53a048
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.0048c170
add esp, 0xc
lea ecx, [ebp - 0x50]
push 0
call fcn.004b0150
push str.code
lea ecx, [ebp - 0x50]
call fcn.004b0660
push eax
push 0
call fcn.00493a30
add esp, 8
lea eax, [ebp - 0x64]
lea ecx, [ebp - 0x50]
push eax
push str.data
call fcn.004b0660
mov ecx, eax
call fcn.004b0420
push str.method
lea ecx, [ebp - 0x40]
call fcn.004b0660
mov ecx, eax
call fcn.004b1700
test al, al
je 0x4acc36
push str.method
lea ecx, [ebp - 0x40]
call fcn.004b0660
mov ecx, eax
call fcn.004b0ed0
push eax
lea ecx, [ebp - 0x14]
call fcn.004b0110
lea eax, [ebp - 0x14]
push eax
push str.method
lea ecx, [ebp - 0x50]
call fcn.004b0660
mov ecx, eax
call fcn.004b0420
lea ecx, [ebp - 0x14]
call fcn.004b0350
lea ecx, [ebp - 0x1c]
call fcn.004837e0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.00494090
push dword [ebp - 0x1c]
lea eax, [ebp - 8]
push eax
call fcn.00495180
add esp, 0x10
lea ecx, [ebx - 0x18]
push dword [eax]
push dword [ebp - 0x2c]
call fcn.004ae260
lea ecx, [ebp - 8]
call fcn.004829c0
lea ecx, [ebp - 0x1c]
call fcn.004829c0
lea ecx, [ebp - 0x50]
call fcn.004b0350
lea ecx, [ebp - 0x64]
call fcn.004b0350
jmp 0x4ac95e
push str.decryptData
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 8
test eax, eax
jne 0x4acd7e
lea ecx, [ebp - 0x24]
call fcn.004837e0
lea eax, [ebp - 0x24]
push eax
push str.params
lea ecx, [ebp - 0x40]
call fcn.004b0660
push eax
call fcn.00493fd0
add esp, 8
lea ecx, [ebp - 0x64]
push 7
call fcn.004b0150
push 0
push 0x53a048
lea eax, [ebp - 0x64]
push eax
push dword [ebp - 0x24]
call fcn.00484890
add esp, 0x10
lea ecx, [ebp - 0x50]
push 0
call fcn.004b0150
push str.code
lea ecx, [ebp - 0x50]
call fcn.004b0660
push eax
push 0
call fcn.00493a30
add esp, 8
lea eax, [ebp - 0x64]
lea ecx, [ebp - 0x50]
push eax
push str.data
call fcn.004b0660
mov ecx, eax
call fcn.004b0420
lea ecx, [ebp - 0x1c]
call fcn.004837e0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.00494090
push dword [ebp - 0x1c]
lea eax, [ebp - 8]
push eax
call fcn.00495180
add esp, 0x10
lea ecx, [ebx - 0x18]
push dword [eax]
push dword [ebp - 0x2c]
call fcn.004ae260
lea ecx, [ebp - 8]
call fcn.004829c0
lea ecx, [ebp - 0x1c]
call fcn.004829c0
lea ecx, [ebp - 0x50]
call fcn.004b0350
lea ecx, [ebp - 0x64]
call fcn.004b0350
lea ecx, [ebp - 0x24]
call fcn.004829c0
jmp 0x4ac95e
push str.hideWebView
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 8
test eax, eax
jne 0x4acdc2
push eax
push dword [ebx - 0x14]
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, [ebp - 8]
push eax
lea ecx, [ebx - 0x18]
call fcn.004ae500
lea ecx, [ebx - 0x18]
push dword [eax]
push dword [ebp - 0x2c]
call fcn.004ae260
lea ecx, [ebp - 8]
call fcn.004829c0
jmp 0x4ac95e
push str.feedback
push dword [ebp - 0x20]
call fcn.004c7d74
add esp, 8
test eax, eax
jne 0x4ac94e
lea ecx, [ebp - 0x24]
call fcn.004837e0
lea ecx, [ebp - 0x1c]
call fcn.004837e0
lea eax, [ebp - 0x24]
push eax
push 0x4fba10
lea ecx, [ebp - 0x40]
call fcn.004b0660
push eax
call fcn.00493c70
add esp, 8
test eax, eax
je 0x4acee3
lea eax, [ebp - 0x1c]
push eax
push str.nvip
lea ecx, [ebp - 0x40]
call fcn.004b0660
push eax
call fcn.00493c70
add esp, 8
test eax, eax
je 0x4acee3
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 0x4d8
push eax
push 0x51b89c
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0x320
call fcn.004b0660
push eax
call fcn.00493af0
add esp, 8
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x40]
push eax
push 0x51b8a4
call fcn.004b0660
push eax
call fcn.00493af0
add esp, 8
lea eax, [ebp - 0x18]
mov ecx, 0x543c74
push 0x4fa1f8
push eax
call fcn.004a7040
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], 0
jne 0x4ace9e
push 4
push str.main
lea ecx, [ebp - 0x18]
call fcn.00483d00
mov eax, dword [ebp - 0x18]
push dword [ebp - 0x30]
push dword [ebp - 0x28]
push eax
push dword [ebp - 0x1c]
push dword [ebp - 0x24]
push dword [ebx - 0x14]
call fcn.0049a890
mov ecx, eax
call fcn.004ada70
lea eax, [ebp - 8]
push eax
lea ecx, [ebx - 0x18]
call fcn.004ae500
lea ecx, [ebx - 0x18]
push dword [eax]
push dword [ebp - 0x2c]
call fcn.004ae260
lea ecx, [ebp - 8]
call fcn.004829c0
lea ecx, [ebp - 0x18]
call fcn.004829c0
lea ecx, [ebp - 0x1c]
call fcn.004829c0
lea ecx, [ebp - 0x24]
call fcn.004829c0
jmp 0x4ac95e
push 0x80004005
call fcn.00483200
push 0x543e00
call fcn.004c1ef5
add esp, 4
cmp dword [0x543e00], 0xffffffff
jne 0x4ac3f8
call fcn.004833a0
mov ecx, eax
test ecx, ecx
jne 0x4acf31
push 0x80004005
call fcn.00483200
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
push 0x4f7b70
mov dword [0x543dfc], eax
call fcn.004c1caa
push 0x543e00
call fcn.004c1eab
add esp, 8
jmp 0x4ac3f8