Function at 0x41b6e0
Capabilities:
Access peb ldr_data
Check os version
Contain obfuscated stackstrings
Get geographical location
Get process heap flags
Get process heap force flags
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5140d0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x150
mov eax, dword [0x573054]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x15c], edx
mov edi, ecx
mov dword [ebp - 0x154], edi
xorps xmm0, xmm0
lea ecx, [ebp - 0xb0]
push 7
movups xmmword [ebp - 0xb0], xmm0
movq qword [ebp - 0xa0], xmm0
call fcn.004e3100
xorps xmm0, xmm0
mov dword [ebp - 4], 0
push 7
lea ecx, [ebp - 0x80]
movq qword [ebp - 0x70], xmm0
movups xmmword [ebp - 0x80], xmm0
call fcn.004e3100
mov byte [ebp - 4], 1
sub esp, 0x18
mov cl, byte [edi]
mov eax, esp
mov dword [ebp - 0x148], esp
mov byte [eax + 8], 5
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov byte [eax], cl
push 0x536544
push str.showPush
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 2
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e36d0
mov cl, byte [edi + 1]
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x148], esp
mov byte [eax + 8], 5
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov byte [eax], cl
push 0x536550
push str.showNews
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 3
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e36d0
mov ecx, dword [edi + 8]
sub esp, 0x18
mov edx, dword [edi + 0xc]
mov eax, esp
mov dword [ebp - 0x148], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x536564
push str.recentNoShowTime
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 4
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e36d0
mov ecx, dword [edi + 0x10]
sub esp, 0x18
mov edx, dword [edi + 0x14]
mov eax, esp
mov dword [ebp - 0x148], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x536575
push str.neverShowTime
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 5
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e36d0
mov ecx, dword [edi + 0x18]
sub esp, 0x18
mov edx, dword [edi + 0x1c]
mov eax, esp
mov dword [ebp - 0x148], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x536589
push str.notShowRecentNews
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 6
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e36d0
mov ecx, dword [edi + 0x20]
sub esp, 0x18
mov edx, dword [edi + 0x24]
mov eax, esp
mov dword [ebp - 0x148], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x536597
push str.notShowNews
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 7
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e36d0
mov ecx, dword [edi + 0x28]
sub esp, 0x18
mov edx, dword [edi + 0x2c]
mov eax, esp
mov dword [ebp - 0x148], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x5365ae
push str.firstShowAssistantTime
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 8
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e36d0
mov eax, dword [edi + 0x30]
sub esp, 0x18
mov dword [ebp - 0x148], esp
mov ecx, esp
cdq
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5365d7
push str.neverShowResetCount
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 9
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e36d0
mov eax, dword [edi + 0x38]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x148], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x536623
push str.neverShowNewsResetCount
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xa
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e36d0
mov eax, dword [edi + 0x3c]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x148], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x536608
push str.recentShowNewsResetCount
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xb
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e36d0
mov eax, dword [edi + 0x34]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x148], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5365ec
push str.recentShowResetCount
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xc
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e36d0
sub esp, 0x18
lea ecx, [edi + 0x80]
mov eax, esp
mov dword [ebp - 0x148], esp
mov dword [ebp - 0x150], eax
mov byte [eax + 8], 4
or dword [eax + 8], 0x100
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
call fcn.00403360
mov esi, eax
cmp dword [esi + 0x14], 0x10
jb 0x41bb5d
mov esi, dword [esi]
lea ecx, [edi + 0x80]
call fcn.00405900
mov edx, eax
mov ecx, esi
call fcn.004e2790
mov ecx, dword [ebp - 0x150]
mov dword [ecx], eax
push 0x5365c0
push str.firstYunTuUserId
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xd
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e36d0
cmp dword [edi + 0x4c], 0
je 0x41bc83
xorps xmm0, xmm0
lea ecx, [ebp - 0x48]
push 6
movups xmmword [ebp - 0x48], xmm0
movq qword [ebp - 0x38], xmm0
call fcn.004e3100
mov byte [ebp - 4], 0xe
mov edi, dword [edi + 0x48]
mov dword [ebp - 0x14c], 0
mov esi, dword [edi]
cmp esi, edi
je 0x41bc3c
mov ecx, dword [ebp - 0x28]
mov eax, dword [esi + 8]
and ecx, 0xffffff01
or ecx, 1
cdq
mov dword [ebp - 0x28], ecx
and ecx, 0xfffffeff
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edx
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x48]
call fcn.004e4e30
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xe
call fcn.004e35f0
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp eax, 0xa
jae 0x41bc3c
mov esi, dword [esi]
cmp esi, edi
jne 0x41bbd1
sub esp, 0x18
lea eax, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x148], esp
push eax
call fcn.004e3450
push 0x536630
push str.push_soft_id
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x10
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.004e36d0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.004e35f0
mov edi, dword [ebp - 0x154]
cmp dword [edi + 0x54], 0
je 0x41bd72
xorps xmm0, xmm0
lea ecx, [ebp - 0x48]
push 6
movups xmmword [ebp - 0x48], xmm0
movq qword [ebp - 0x38], xmm0
call fcn.004e3100
mov byte [ebp - 4], 0x11
mov edi, dword [edi + 0x50]
mov dword [ebp - 0x14c], 0
mov esi, dword [edi]
cmp esi, edi
je 0x41bd2b
nop word [eax + eax]
mov ecx, dword [ebp - 0x28]
mov eax, dword [esi + 8]
and ecx, 0xffffff01
or ecx, 1
cdq
mov dword [ebp - 0x28], ecx
and ecx, 0xfffffeff
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edx
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x48]
call fcn.004e4e30
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x11
call fcn.004e35f0
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp eax, 0xa
jae 0x41bd2b
mov esi, dword [esi]
cmp esi, edi
jne 0x41bcc0
sub esp, 0x18
lea eax, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x148], esp
push eax
call fcn.004e3450
push 0x536648
push str.push_soft_end_status
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x13
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.004e36d0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.004e35f0
mov edi, dword [ebp - 0x154]
cmp dword [edi + 0x5c], 0
je 0x41be62
xorps xmm0, xmm0
lea ecx, [ebp - 0x48]
push 6
movups xmmword [ebp - 0x48], xmm0
movq qword [ebp - 0x38], xmm0
call fcn.004e3100
mov byte [ebp - 4], 0x14
mov edi, dword [edi + 0x58]
mov dword [ebp - 0x14c], 0
mov esi, dword [edi]
cmp esi, edi
je 0x41be1b
nop dword [eax]
mov eax, dword [ebp - 0x28]
mov ecx, dword [esi + 8]
and eax, 0xffffff02
mov edx, dword [esi + 0xc]
or eax, 2
mov dword [ebp - 0x28], eax
and eax, 0xfffffeff
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], edx
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x48]
call fcn.004e4e30
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.004e35f0
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp eax, 0xa
jae 0x41be1b
mov esi, dword [esi]
cmp esi, edi
jne 0x41bdb0
sub esp, 0x18
lea eax, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x148], esp
push eax
call fcn.004e3450
push 0x53665f
push str.push_soft_end_times
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x16
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x14
call fcn.004e36d0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.004e35f0
mov edi, dword [ebp - 0x154]
cmp dword [edi + 0x64], 0
je 0x41c03d
xorps xmm0, xmm0
lea ecx, [ebp - 0x48]
push 6
movups xmmword [ebp - 0x48], xmm0
movq qword [ebp - 0x38], xmm0
call fcn.004e3100
mov byte [ebp - 4], 0x17
mov edi, dword [edi + 0x60]
mov dword [ebp - 0x14c], 0
mov esi, dword [edi]
cmp esi, edi
je 0x41bff6
nop dword [eax]
xorps xmm0, xmm0
lea ecx, [ebp - 0x30]
push 7
movups xmmword [ebp - 0x30], xmm0
movq qword [ebp - 0x20], xmm0
call fcn.004e3100
mov byte [ebp - 4], 0x18
sub esp, 0x18
mov eax, dword [esi + 8]
mov ecx, esp
cdq
mov dword [ebp - 0x148], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x536147
push str.show_id
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x19
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x18
call fcn.004e36d0
mov ecx, dword [esi + 0x10]
sub esp, 0x18
mov edx, dword [esi + 0x14]
mov eax, esp
mov dword [ebp - 0x148], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x53666a
push str.show_times
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x1a
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x18
call fcn.004e36d0
mov eax, dword [esi + 0xc]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x148], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x53602b
push str.clicked
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x1b
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x18
call fcn.004e36d0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x48]
call fcn.004e4e30
mov eax, dword [ebp - 0x14c]
lea ecx, [ebp - 0x30]
inc eax
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x14c], eax
cmp eax, 0x14
jae 0x41bff1
call fcn.004e35f0
mov esi, dword [esi]
cmp esi, edi
jne 0x41bea0
jmp 0x41bff6
call fcn.004e35f0
sub esp, 0x18
lea eax, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x148], esp
push eax
call fcn.004e3450
push 0x536047
push str.recent_ads_list
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x1c
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x17
call fcn.004e36d0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.004e35f0
mov edi, dword [ebp - 0x154]
cmp dword [edi + 0x6c], 0
je 0x41c215
xorps xmm0, xmm0
lea ecx, [ebp - 0x48]
push 6
movups xmmword [ebp - 0x48], xmm0
movq qword [ebp - 0x38], xmm0
call fcn.004e3100
mov byte [ebp - 4], 0x1d
mov edi, dword [edi + 0x68]
mov dword [ebp - 0x14c], 0
mov esi, dword [edi]
cmp esi, edi
je 0x41c1ce
xorps xmm0, xmm0
lea ecx, [ebp - 0x30]
push 7
movups xmmword [ebp - 0x30], xmm0
movq qword [ebp - 0x20], xmm0
call fcn.004e3100
mov byte [ebp - 4], 0x1e
sub esp, 0x18
mov eax, dword [esi + 8]
mov ecx, esp
cdq
mov dword [ebp - 0x148], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x536147
push str.show_id
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x1f
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.004e36d0
mov ecx, dword [esi + 0x10]
sub esp, 0x18
mov edx, dword [esi + 0x14]
mov eax, esp
mov dword [ebp - 0x148], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x53666a
push str.show_times
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x20
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.004e36d0
mov eax, dword [esi + 0xc]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x148], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x53602b
push str.clicked
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x21
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.004e36d0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x48]
call fcn.004e4e30
mov eax, dword [ebp - 0x14c]
lea ecx, [ebp - 0x30]
inc eax
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x14c], eax
cmp eax, 0xa
jae 0x41c1c9
call fcn.004e35f0
mov esi, dword [esi]
cmp esi, edi
jne 0x41c078
jmp 0x41c1ce
call fcn.004e35f0
sub esp, 0x18
lea eax, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x148], esp
push eax
call fcn.004e3450
push 0x53613d
push str.recent_softs_list
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x22
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.004e36d0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.004e35f0
mov edi, dword [ebp - 0x154]
cmp dword [edi + 0x74], 0
je 0x41c48a
xorps xmm0, xmm0
lea ecx, [ebp - 0x60]
push 6
movups xmmword [ebp - 0x60], xmm0
movq qword [ebp - 0x50], xmm0
call fcn.004e3100
mov byte [ebp - 4], 0x23
mov edi, dword [edi + 0x70]
mov dword [ebp - 0x150], 0
mov esi, dword [edi]
cmp esi, edi
je 0x41c443
xorps xmm0, xmm0
lea ecx, [ebp - 0x30]
push 7
movups xmmword [ebp - 0x30], xmm0
movq qword [ebp - 0x20], xmm0
call fcn.004e3100
lea ecx, [esi + 8]
mov byte [ebp - 4], 0x24
push ecx
lea eax, [ebp - 0x48]
push eax
call fcn.004b6850
mov ecx, eax
mov dword [ebp - 0x158], ecx
sub esp, 0x10
mov byte [ebp - 4], 0x25
mov eax, esp
mov dword [ebp - 0x144], esp
mov dword [ebp - 0x148], eax
mov byte [eax + 8], 4
or dword [eax + 8], 0x100
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
call fcn.00403360
mov dword [ebp - 0x14c], eax
cmp dword [eax + 0x14], 0x10
jb 0x41c2cd
mov eax, dword [eax]
mov dword [ebp - 0x14c], eax
mov ecx, dword [ebp - 0x158]
call fcn.00405900
mov ecx, dword [ebp - 0x14c]
mov edx, eax
call fcn.004e2790
mov ecx, dword [ebp - 0x148]
mov dword [ecx], eax
push 0x536147
push str.show_id
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x26
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.004e36d0
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x34]
cmp edx, 0x10
jb 0x41c346
mov ecx, dword [ebp - 0x48]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41c33c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ca3b
push edx
push ecx
call fcn.0050f85c
add esp, 8
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0xf
mov byte [ebp - 0x48], 0
mov byte [ebp - 4], 0x24
sub esp, 0x18
mov ecx, dword [esi + 0x28]
mov eax, esp
mov edx, dword [esi + 0x2c]
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x53666a
push str.show_times
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x2b
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x24
call fcn.004e36d0
mov eax, dword [esi + 0x20]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x53602b
push str.clicked
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x2c
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x24
call fcn.004e36d0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x60]
call fcn.004e4e30
mov eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x30]
inc eax
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x150], eax
cmp eax, 5
jae 0x41c43e
call fcn.004e35f0
mov esi, dword [esi]
cmp esi, edi
jne 0x41c250
jmp 0x41c443
call fcn.004e35f0
sub esp, 0x18
lea eax, [ebp - 0x60]
mov ecx, esp
mov dword [ebp - 0x144], esp
push eax
call fcn.004e3450
push 0x53615e
push str.recent_thirdparty_list
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x2d
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x23
call fcn.004e36d0
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 1
call fcn.004e35f0
mov edi, dword [ebp - 0x154]
sub esp, 0x18
lea eax, [ebp - 0x80]
mov ecx, esp
mov dword [ebp - 0x144], esp
push eax
call fcn.004e3450
push 0x536539
push str.bootAssistant
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x2e
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e36d0
push ecx
lea eax, [edi + 0x78]
xorps xmm0, xmm0
push eax
lea ecx, [ebp - 0x68]
movlpd qword [ebp - 0x68], xmm0
call fcn.0040f220
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x140]
mov esi, dword [ebp - 0x68]
xorps xmm0, xmm0
push 7
mov esi, dword [esi]
movups xmmword [ebp - 0x140], xmm0
movq qword [ebp - 0x130], xmm0
call fcn.004e3100
mov byte [ebp - 4], 0x31
cmp esi, dword [ebp - 0x68]
je 0x41c610
nop dword [eax]
mov eax, dword [esi + 0x28]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
lea ecx, [esi + 0x10]
mov byte [ebp - 4], 0x32
call fcn.00403360
mov edx, eax
mov dword [ebp - 0x150], edx
cmp dword [edx + 0x14], 0x10
jb 0x41c568
mov eax, dword [edx]
mov edx, eax
mov dword [ebp - 0x150], eax
lea ecx, [esi + 0x10]
call fcn.00405900
add eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x140]
push eax
push edx
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x31
call fcn.004e36d0
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
je 0x41c5b4
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x41c5b0
cmp esi, dword [eax + 8]
jne 0x41c5b0
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x41c5a0
mov esi, eax
jmp 0x41c5cc
mov esi, eax
mov ecx, dword [esi]
cmp byte [ecx + 0xd], 0
jne 0x41c5cc
nop
mov eax, dword [ecx]
mov esi, ecx
mov ecx, eax
cmp byte [eax + 0xd], 0
je 0x41c5c0
cmp esi, dword [ebp - 0x68]
jne 0x41c510
sub esp, 0x18
lea eax, [ebp - 0x140]
mov ecx, esp
mov dword [ebp - 0x144], esp
push eax
call fcn.004e3450
push 0x536054
push str.cell_history
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x33
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x31
call fcn.004e36d0
xorps xmm0, xmm0
lea ecx, [ebp - 0xc8]
push 7
movups xmmword [ebp - 0xc8], xmm0
movq qword [ebp - 0xb8], xmm0
call fcn.004e3100
mov byte [ebp - 4], 0x34
sub esp, 0x18
mov cl, byte [edi + 0x98]
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 5
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov byte [eax], cl
push 0x536544
push str.showPush
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x35
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004e36d0
mov cl, byte [edi + 0x99]
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 5
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov byte [eax], cl
push 0x536550
push str.showNews
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x36
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004e36d0
mov ecx, dword [edi + 0xa0]
sub esp, 0x18
mov edx, dword [edi + 0xa4]
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x536564
push str.recentNoShowTime
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x37
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004e36d0
mov ecx, dword [edi + 0xa8]
sub esp, 0x18
mov edx, dword [edi + 0xac]
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
mov byte [ebp - 4], 0x38
push 0x536575
push str.neverShowTime
lea ecx, [ebp - 0xc8]
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004e36d0
mov ecx, dword [edi + 0xb0]
sub esp, 0x18
mov edx, dword [edi + 0xb4]
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x53668b
push str.awaitWindowShowTime
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x39
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004e36d0
mov ecx, dword [edi + 0xb8]
sub esp, 0x18
mov edx, dword [edi + 0xbc]
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x53669b
push str.awaitRequestWeb
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x3a
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004e36d0
mov eax, dword [edi + 0xc0]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5365d7
push str.neverShowResetCount
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x3b
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004e36d0
mov eax, dword [edi + 0xc4]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5365ec
push str.recentShowResetCount
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x3c
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004e36d0
sub esp, 0x18
lea eax, [ebp - 0xc8]
mov ecx, esp
mov dword [ebp - 0x144], esp
push eax
call fcn.004e3450
push 0x536677
push str.awaitWindow
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x3d
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004e36d0
xorps xmm0, xmm0
lea ecx, [ebp - 0x98]
push 7
movups xmmword [ebp - 0x98], xmm0
movq qword [ebp - 0x88], xmm0
call fcn.004e3100
lea eax, [edi + 0xc8]
mov byte [ebp - 4], 0x3e
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.004b6850
mov ecx, eax
mov dword [ebp - 0x148], ecx
sub esp, 0x10
mov byte [ebp - 4], 0x3f
mov eax, esp
mov dword [ebp - 0x144], esp
mov dword [ebp - 0x158], eax
mov byte [eax + 8], 4
or dword [eax + 8], 0x100
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
call fcn.00403360
mov esi, eax
cmp dword [esi + 0x14], 0x10
jb 0x41c9d1
mov esi, dword [esi]
mov ecx, dword [ebp - 0x148]
call fcn.00405900
mov edx, eax
mov ecx, esi
call fcn.004e2790
mov ecx, dword [ebp - 0x158]
mov dword [ecx], eax
push 0x5366b7
push str.contentSupplier
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x40
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x3f
call fcn.004e36d0
mov byte [ebp - 4], 0x41
mov edx, dword [ebp - 0x4c]
cmp edx, 0x10
jb 0x41ca4b
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41ca41
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41ca41
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0050f85c
add esp, 8
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
mov byte [ebp - 4], 0x3e
sub esp, 0x18
mov eax, dword [edi + 0xe0]
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5366c4
push str.newsDlgWidth
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x45
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e36d0
mov eax, dword [edi + 0xe4]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5366d5
push str.newsDlgHeight
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x46
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e36d0
mov eax, dword [edi + 0xe8]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5366ec
push str.newsDlgCaptionHeight
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x47
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e36d0
mov cl, byte [edi + 0xec]
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 5
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov byte [eax], cl
push 0x536700
push str.bootWindowSwitch
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x48
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e36d0
mov eax, dword [edi + 0xf0]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x536718
push str.not_show_recent_days
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x49
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e36d0
mov eax, dword [edi + 0xf4]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5358e5
push str.not_show_days
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x4a
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e36d0
mov cl, byte [edi + 0xf8]
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 5
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov byte [eax], cl
push 0x53672d
push str.awaitWindowSwitch
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x4b
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e36d0
mov eax, dword [edi + 0xfc]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x536740
push str.bootTimeInterval
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x4c
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e36d0
mov eax, dword [edi + 0x100]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x536753
push str.awaitWindowTime
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x4d
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e36d0
mov eax, dword [edi + 0x104]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x53676a
push str.neverShowResetCountMax
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x4e
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e36d0
mov ecx, dword [edi + 0x110]
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], 0
push 0x53677d
push str.bootTimeShowOpBtn
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x4f
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e36d0
mov ecx, dword [edi + 0x10c]
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], 0
push 0x536790
push str.numbersShowOpBtn
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x50
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e36d0
sub esp, 0x18
lea eax, [ebp - 0x98]
mov ecx, esp
mov dword [ebp - 0x144], esp
push eax
call fcn.004e3450
push 0x5366a7
push str.cloudSwitch
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x51
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e36d0
xorps xmm0, xmm0
lea ecx, [ebp - 0xe0]
push 7
movups xmmword [ebp - 0xe0], xmm0
movq qword [ebp - 0xd0], xmm0
call fcn.004e3100
mov byte [ebp - 4], 0x52
sub esp, 0x18
mov ecx, dword [edi + 0x118]
mov eax, esp
mov edx, dword [edi + 0x11c]
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x5367b3
push str.LastShowTimeKey
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x53
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x52
call fcn.004e36d0
lea eax, [edi + 0x120]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.004b6850
mov ecx, eax
mov dword [ebp - 0x148], ecx
sub esp, 0x10
mov byte [ebp - 4], 0x54
mov eax, esp
mov dword [ebp - 0x144], esp
mov dword [ebp - 0x158], eax
mov byte [eax + 8], 4
or dword [eax + 8], 0x100
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
call fcn.00403360
mov esi, eax
cmp dword [esi + 0x14], 0x10
jb 0x41cfbd
mov esi, dword [esi]
mov ecx, dword [ebp - 0x148]
call fcn.00405900
mov edx, eax
mov ecx, esi
call fcn.004e2790
mov ecx, dword [ebp - 0x158]
mov dword [ecx], eax
push 0x5367c4
push str.LastTenAdsIDsKey
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x55
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x54
call fcn.004e36d0
mov byte [ebp - 4], 0x56
mov edx, dword [ebp - 0x4c]
cmp edx, 0x10
jb 0x41d037
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41d02d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41d02d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0050f85c
add esp, 8
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea eax, [edi + 0x138]
mov byte [ebp - 4], 0x52
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.004b6850
mov dword [ebp - 0x148], eax
sub esp, 0x10
mov byte [ebp - 4], 0x5a
mov esi, esp
mov dword [ebp - 0x144], esp
mov ecx, eax
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00403360
mov dword [ebp - 0x150], eax
cmp dword [eax + 0x14], 0x10
jb 0x41d0ad
mov eax, dword [eax]
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x148]
call fcn.00405900
mov ecx, dword [ebp - 0x150]
mov edx, eax
call fcn.004e2790
mov dword [esi], eax
push 0x5367d8
push str.NotInterestAdKey
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x5b
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x5a
call fcn.004e36d0
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x4c]
cmp edx, 0x10
jb 0x41d125
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41d11b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41d11b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0050f85c
add esp, 8
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
mov byte [ebp - 4], 0x52
sub esp, 0x18
mov eax, dword [edi + 0x150]
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5367ec
push str.AdLabelValidSpan
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x60
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x52
call fcn.004e36d0
lea eax, [edi + 0x154]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.004b6850
mov dword [ebp - 0x148], eax
sub esp, 0x10
mov byte [ebp - 4], 0x61
mov esi, esp
mov dword [ebp - 0x144], esp
mov ecx, eax
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00403360
mov dword [ebp - 0x150], eax
cmp dword [eax + 0x14], 0x10
jb 0x41d1f6
mov eax, dword [eax]
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x148]
call fcn.00405900
mov ecx, dword [ebp - 0x150]
mov edx, eax
call fcn.004e2790
mov dword [esi], eax
push 0x5367fd
push str.ReqAdsTimeKey
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x62
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x61
call fcn.004e36d0
mov byte [ebp - 4], 0x63
mov edx, dword [ebp - 0x4c]
cmp edx, 0x10
jb 0x41d26e
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41d264
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41d264
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0050f85c
add esp, 8
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
sub esp, 0x18
mov byte [ebp - 4], 0x52
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x144], esp
mov ecx, esp
push eax
call fcn.004e3450
push 0x5367a2
push str.RcmdAdsSection
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x67
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x52
call fcn.004e36d0
xorps xmm0, xmm0
lea ecx, [ebp - 0x128]
push 7
movups xmmword [ebp - 0x128], xmm0
movq qword [ebp - 0x118], xmm0
call fcn.004e3100
mov byte [ebp - 4], 0x68
sub esp, 0x18
mov ecx, dword [edi + 0x170]
mov eax, esp
mov edx, dword [edi + 0x174]
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x53681d
push str.BootStartTime
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x69
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x68
call fcn.004e36d0
sub esp, 0x18
lea eax, [ebp - 0x128]
mov ecx, esp
mov dword [ebp - 0x144], esp
push eax
call fcn.004e3450
push 0x53680e
push str.BootShowRecord
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x6a
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x68
call fcn.004e36d0
mov eax, dword [edi + 0x330]
and eax, dword [edi + 0x334]
cmp eax, 0xffffffff
je 0x41d531
mov eax, dword [edi + 0x338]
and eax, dword [edi + 0x33c]
cmp eax, 0xffffffff
je 0x41d531
mov eax, dword [edi + 0x340]
and eax, dword [edi + 0x344]
cmp eax, 0xffffffff
je 0x41d531
xorps xmm0, xmm0
lea ecx, [ebp - 0x30]
push 7
movups xmmword [ebp - 0x30], xmm0
movq qword [ebp - 0x20], xmm0
call fcn.004e3100
mov byte [ebp - 4], 0x6b
sub esp, 0x18
mov ecx, dword [edi + 0x330]
mov eax, esp
mov edx, dword [edi + 0x334]
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 1
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x536836
push str.provinceId
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x6c
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x6b
call fcn.004e36d0
mov ecx, dword [edi + 0x338]
sub esp, 0x18
mov edx, dword [edi + 0x33c]
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 1
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x53683e
push str.cityId
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x6d
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x6b
call fcn.004e36d0
mov ecx, dword [edi + 0x340]
sub esp, 0x18
mov edx, dword [edi + 0x344]
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 1
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x536848
push str.countyId
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x6e
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x6b
call fcn.004e36d0
sub esp, 0x18
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x144], esp
push eax
call fcn.004e3450
push 0x536829
mov byte [ebp - 4], 0x6f
push str.localInfo
lea ecx, [ebp - 0xb0]
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x6b
call fcn.004e36d0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x68
call fcn.004e35f0
xorps xmm0, xmm0
lea ecx, [ebp - 0x110]
push 7
movups xmmword [ebp - 0x110], xmm0
movq qword [ebp - 0x100], xmm0
call fcn.004e3100
lea eax, [edi + 0x178]
mov byte [ebp - 4], 0x70
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.004b6850
mov dword [ebp - 0x148], eax
sub esp, 0x10
mov byte [ebp - 4], 0x71
mov esi, esp
mov dword [ebp - 0x144], esp
mov ecx, eax
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00403360
mov dword [ebp - 0x150], eax
cmp dword [eax + 0x14], 0x10
jb 0x41d5b4
mov eax, dword [eax]
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x148]
call fcn.00405900
mov ecx, dword [ebp - 0x150]
mov edx, eax
call fcn.004e2790
mov dword [esi], eax
push 0x5367c4
push str.LastTenAdsIDsKey
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x72
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x71
call fcn.004e36d0
mov byte [ebp - 4], 0x73
mov edx, dword [ebp - 0x4c]
cmp edx, 0x10
jb 0x41d62c
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41d622
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41d622
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0050f85c
add esp, 8
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
sub esp, 0x18
mov byte [ebp - 4], 0x70
lea eax, [ebp - 0x110]
mov dword [ebp - 0x144], esp
mov ecx, esp
push eax
call fcn.004e3450
push 0x53685f
push str.BootDurationSection
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x77
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x70
call fcn.004e36d0
xorps xmm0, xmm0
lea ecx, [ebp - 0xf8]
push 7
movups xmmword [ebp - 0xf8], xmm0
movq qword [ebp - 0xe8], xmm0
call fcn.004e3100
mov byte [ebp - 4], 0x78
sub esp, 0x18
mov eax, dword [edi + 0x348]
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x536885
push str.BubblePromptCount
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x79
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x78
call fcn.004e36d0
sub esp, 0x18
lea eax, [ebp - 0xf8]
mov ecx, esp
mov dword [ebp - 0x144], esp
push eax
call fcn.004e3450
push 0x536873
push str.BubblePromptSection
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x7a
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x78
call fcn.004e36d0
mov eax, dword [edi + 0x34c]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov byte [ebp - 4], 0x7b
push 0x536891
push str.last_code
lea ecx, [ebp - 0xb0]
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x78
call fcn.004e36d0
mov eax, dword [edi + 0x350]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5368a2
push str.clear_pic_time
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x7c
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x78
call fcn.004e36d0
sub esp, 0x18
lea eax, [ebp - 0xb0]
mov ecx, esp
mov dword [ebp - 0x144], esp
push eax
call fcn.004e3450
mov ecx, dword [ebp - 0x15c]
push 0x53652a
push str.config
mov byte [ebp - 4], 0x7d
call fcn.004e4960
mov ecx, eax
mov byte [ebp - 4], 0x78
call fcn.004e36d0
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x70
call fcn.004e35f0
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x68
call fcn.004e35f0
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x52
call fcn.004e35f0
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x3e
call fcn.004e35f0
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x34
call fcn.004e35f0
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x31
call fcn.004e35f0
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x30
call fcn.004e35f0
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x68]
mov eax, dword [ebp - 0x68]
push eax
push dword [eax]
lea eax, [ebp - 0x144]
push eax
call fcn.0040eae0
push 0x2c
push dword [ebp - 0x68]
call fcn.0050f85c
add esp, 8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.004e35f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb0]
call fcn.004e35f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0050f48d
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret