Function at 0x41b6d0
Capabilities:
Access peb ldr_data
Check os version
Contain obfuscated stackstrings
Get geographical location
Get process heap flags
Get process heap force flags
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x513ec0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x150
mov eax, dword [0x575054]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x15c], edx
mov edi, ecx
mov dword [ebp - 0x154], edi
xorps xmm0, xmm0
lea ecx, [ebp - 0xb0]
push 7
movups xmmword [ebp - 0xb0], xmm0
movq qword [ebp - 0xa0], xmm0
call fcn.004e7f20
xorps xmm0, xmm0
mov dword [ebp - 4], 0
push 7
lea ecx, [ebp - 0x80]
movq qword [ebp - 0x70], xmm0
movups xmmword [ebp - 0x80], xmm0
call fcn.004e7f20
mov byte [ebp - 4], 1
sub esp, 0x18
mov cl, byte [edi]
mov eax, esp
mov dword [ebp - 0x148], esp
mov byte [eax + 8], 5
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov byte [eax], cl
push 0x53744c
push str.showPush
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 2
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e84f0
mov cl, byte [edi + 1]
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x148], esp
mov byte [eax + 8], 5
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov byte [eax], cl
push 0x537458
push str.showNews
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 3
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e84f0
mov ecx, dword [edi + 8]
sub esp, 0x18
mov edx, dword [edi + 0xc]
mov eax, esp
mov dword [ebp - 0x148], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x53746c
push str.recentNoShowTime
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 4
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e84f0
mov ecx, dword [edi + 0x10]
sub esp, 0x18
mov edx, dword [edi + 0x14]
mov eax, esp
mov dword [ebp - 0x148], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x53747d
push str.neverShowTime
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 5
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e84f0
mov ecx, dword [edi + 0x18]
sub esp, 0x18
mov edx, dword [edi + 0x1c]
mov eax, esp
mov dword [ebp - 0x148], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x537491
push str.notShowRecentNews
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 6
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e84f0
mov ecx, dword [edi + 0x20]
sub esp, 0x18
mov edx, dword [edi + 0x24]
mov eax, esp
mov dword [ebp - 0x148], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x53749f
push str.notShowNews
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 7
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e84f0
mov ecx, dword [edi + 0x28]
sub esp, 0x18
mov edx, dword [edi + 0x2c]
mov eax, esp
mov dword [ebp - 0x148], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x5374b6
push str.firstShowAssistantTime
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 8
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e84f0
mov eax, dword [edi + 0x30]
sub esp, 0x18
mov dword [ebp - 0x148], esp
mov ecx, esp
cdq
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5374df
push str.neverShowResetCount
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 9
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e84f0
mov eax, dword [edi + 0x38]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x148], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x53752b
push str.neverShowNewsResetCount
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xa
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e84f0
mov eax, dword [edi + 0x3c]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x148], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x537510
push str.recentShowNewsResetCount
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xb
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e84f0
mov eax, dword [edi + 0x34]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x148], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5374f4
push str.recentShowResetCount
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xc
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e84f0
sub esp, 0x18
lea ecx, [edi + 0x80]
mov eax, esp
mov dword [ebp - 0x148], esp
mov dword [ebp - 0x150], eax
mov byte [eax + 8], 4
or dword [eax + 8], 0x100
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
call fcn.00403360
mov esi, eax
cmp dword [esi + 0x14], 0x10
jb 0x41bb4d
mov esi, dword [esi]
lea ecx, [edi + 0x80]
call fcn.00405900
mov edx, eax
mov ecx, esi
call fcn.004e75b0
mov ecx, dword [ebp - 0x150]
mov dword [ecx], eax
push 0x5374c8
push str.firstYunTuUserId
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xd
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e84f0
cmp dword [edi + 0x4c], 0
je 0x41bc73
xorps xmm0, xmm0
lea ecx, [ebp - 0x48]
push 6
movups xmmword [ebp - 0x48], xmm0
movq qword [ebp - 0x38], xmm0
call fcn.004e7f20
mov byte [ebp - 4], 0xe
mov edi, dword [edi + 0x48]
mov dword [ebp - 0x14c], 0
mov esi, dword [edi]
cmp esi, edi
je 0x41bc2c
mov ecx, dword [ebp - 0x28]
mov eax, dword [esi + 8]
and ecx, 0xffffff01
or ecx, 1
cdq
mov dword [ebp - 0x28], ecx
and ecx, 0xfffffeff
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edx
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x48]
call fcn.004e9c50
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0xe
call fcn.004e8410
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp eax, 0xa
jae 0x41bc2c
mov esi, dword [esi]
cmp esi, edi
jne 0x41bbc1
sub esp, 0x18
lea eax, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x148], esp
push eax
call fcn.004e8270
push 0x537538
push str.push_soft_id
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x10
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.004e84f0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.004e8410
mov edi, dword [ebp - 0x154]
cmp dword [edi + 0x54], 0
je 0x41bd62
xorps xmm0, xmm0
lea ecx, [ebp - 0x48]
push 6
movups xmmword [ebp - 0x48], xmm0
movq qword [ebp - 0x38], xmm0
call fcn.004e7f20
mov byte [ebp - 4], 0x11
mov edi, dword [edi + 0x50]
mov dword [ebp - 0x14c], 0
mov esi, dword [edi]
cmp esi, edi
je 0x41bd1b
nop word [eax + eax]
mov ecx, dword [ebp - 0x28]
mov eax, dword [esi + 8]
and ecx, 0xffffff01
or ecx, 1
cdq
mov dword [ebp - 0x28], ecx
and ecx, 0xfffffeff
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edx
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x48]
call fcn.004e9c50
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x11
call fcn.004e8410
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp eax, 0xa
jae 0x41bd1b
mov esi, dword [esi]
cmp esi, edi
jne 0x41bcb0
sub esp, 0x18
lea eax, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x148], esp
push eax
call fcn.004e8270
push 0x537550
push str.push_soft_end_status
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x13
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.004e84f0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.004e8410
mov edi, dword [ebp - 0x154]
cmp dword [edi + 0x5c], 0
je 0x41be52
xorps xmm0, xmm0
lea ecx, [ebp - 0x48]
push 6
movups xmmword [ebp - 0x48], xmm0
movq qword [ebp - 0x38], xmm0
call fcn.004e7f20
mov byte [ebp - 4], 0x14
mov edi, dword [edi + 0x58]
mov dword [ebp - 0x14c], 0
mov esi, dword [edi]
cmp esi, edi
je 0x41be0b
nop dword [eax]
mov eax, dword [ebp - 0x28]
mov ecx, dword [esi + 8]
and eax, 0xffffff02
mov edx, dword [esi + 0xc]
or eax, 2
mov dword [ebp - 0x28], eax
and eax, 0xfffffeff
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x2c], edx
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x48]
call fcn.004e9c50
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x14
call fcn.004e8410
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp eax, 0xa
jae 0x41be0b
mov esi, dword [esi]
cmp esi, edi
jne 0x41bda0
sub esp, 0x18
lea eax, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x148], esp
push eax
call fcn.004e8270
push 0x537567
push str.push_soft_end_times
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x16
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x14
call fcn.004e84f0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.004e8410
mov edi, dword [ebp - 0x154]
cmp dword [edi + 0x64], 0
je 0x41c02d
xorps xmm0, xmm0
lea ecx, [ebp - 0x48]
push 6
movups xmmword [ebp - 0x48], xmm0
movq qword [ebp - 0x38], xmm0
call fcn.004e7f20
mov byte [ebp - 4], 0x17
mov edi, dword [edi + 0x60]
mov dword [ebp - 0x14c], 0
mov esi, dword [edi]
cmp esi, edi
je 0x41bfe6
nop dword [eax]
xorps xmm0, xmm0
lea ecx, [ebp - 0x30]
push 7
movups xmmword [ebp - 0x30], xmm0
movq qword [ebp - 0x20], xmm0
call fcn.004e7f20
mov byte [ebp - 4], 0x18
sub esp, 0x18
mov eax, dword [esi + 8]
mov ecx, esp
cdq
mov dword [ebp - 0x148], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x53704f
push str.show_id
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x19
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x18
call fcn.004e84f0
mov ecx, dword [esi + 0x10]
sub esp, 0x18
mov edx, dword [esi + 0x14]
mov eax, esp
mov dword [ebp - 0x148], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x537572
push str.show_times
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x1a
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x18
call fcn.004e84f0
mov eax, dword [esi + 0xc]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x148], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x536f33
push str.clicked
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x1b
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x18
call fcn.004e84f0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x48]
call fcn.004e9c50
mov eax, dword [ebp - 0x14c]
lea ecx, [ebp - 0x30]
inc eax
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x14c], eax
cmp eax, 0x14
jae 0x41bfe1
call fcn.004e8410
mov esi, dword [esi]
cmp esi, edi
jne 0x41be90
jmp 0x41bfe6
call fcn.004e8410
sub esp, 0x18
lea eax, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x148], esp
push eax
call fcn.004e8270
push 0x536f4f
push str.recent_ads_list
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x1c
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x17
call fcn.004e84f0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.004e8410
mov edi, dword [ebp - 0x154]
cmp dword [edi + 0x6c], 0
je 0x41c205
xorps xmm0, xmm0
lea ecx, [ebp - 0x48]
push 6
movups xmmword [ebp - 0x48], xmm0
movq qword [ebp - 0x38], xmm0
call fcn.004e7f20
mov byte [ebp - 4], 0x1d
mov edi, dword [edi + 0x68]
mov dword [ebp - 0x14c], 0
mov esi, dword [edi]
cmp esi, edi
je 0x41c1be
xorps xmm0, xmm0
lea ecx, [ebp - 0x30]
push 7
movups xmmword [ebp - 0x30], xmm0
movq qword [ebp - 0x20], xmm0
call fcn.004e7f20
mov byte [ebp - 4], 0x1e
sub esp, 0x18
mov eax, dword [esi + 8]
mov ecx, esp
cdq
mov dword [ebp - 0x148], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x53704f
push str.show_id
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x1f
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.004e84f0
mov ecx, dword [esi + 0x10]
sub esp, 0x18
mov edx, dword [esi + 0x14]
mov eax, esp
mov dword [ebp - 0x148], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x537572
push str.show_times
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x20
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.004e84f0
mov eax, dword [esi + 0xc]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x148], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x536f33
push str.clicked
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x21
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.004e84f0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x48]
call fcn.004e9c50
mov eax, dword [ebp - 0x14c]
lea ecx, [ebp - 0x30]
inc eax
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x14c], eax
cmp eax, 0xa
jae 0x41c1b9
call fcn.004e8410
mov esi, dword [esi]
cmp esi, edi
jne 0x41c068
jmp 0x41c1be
call fcn.004e8410
sub esp, 0x18
lea eax, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x148], esp
push eax
call fcn.004e8270
push 0x537045
push str.recent_softs_list
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x22
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.004e84f0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.004e8410
mov edi, dword [ebp - 0x154]
cmp dword [edi + 0x74], 0
je 0x41c47a
xorps xmm0, xmm0
lea ecx, [ebp - 0x60]
push 6
movups xmmword [ebp - 0x60], xmm0
movq qword [ebp - 0x50], xmm0
call fcn.004e7f20
mov byte [ebp - 4], 0x23
mov edi, dword [edi + 0x70]
mov dword [ebp - 0x150], 0
mov esi, dword [edi]
cmp esi, edi
je 0x41c433
xorps xmm0, xmm0
lea ecx, [ebp - 0x30]
push 7
movups xmmword [ebp - 0x30], xmm0
movq qword [ebp - 0x20], xmm0
call fcn.004e7f20
lea ecx, [esi + 8]
mov byte [ebp - 4], 0x24
push ecx
lea eax, [ebp - 0x48]
push eax
call fcn.004bb6e0
mov ecx, eax
mov dword [ebp - 0x158], ecx
sub esp, 0x10
mov byte [ebp - 4], 0x25
mov eax, esp
mov dword [ebp - 0x144], esp
mov dword [ebp - 0x148], eax
mov byte [eax + 8], 4
or dword [eax + 8], 0x100
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
call fcn.00403360
mov dword [ebp - 0x14c], eax
cmp dword [eax + 0x14], 0x10
jb 0x41c2bd
mov eax, dword [eax]
mov dword [ebp - 0x14c], eax
mov ecx, dword [ebp - 0x158]
call fcn.00405900
mov ecx, dword [ebp - 0x14c]
mov edx, eax
call fcn.004e75b0
mov ecx, dword [ebp - 0x148]
mov dword [ecx], eax
push 0x53704f
push str.show_id
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x26
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.004e84f0
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x34]
cmp edx, 0x10
jb 0x41c336
mov ecx, dword [ebp - 0x48]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41c32c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ca2b
push edx
push ecx
call fcn.0050f64c
add esp, 8
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0xf
mov byte [ebp - 0x48], 0
mov byte [ebp - 4], 0x24
sub esp, 0x18
mov ecx, dword [esi + 0x28]
mov eax, esp
mov edx, dword [esi + 0x2c]
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x537572
push str.show_times
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x2b
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x24
call fcn.004e84f0
mov eax, dword [esi + 0x20]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x536f33
push str.clicked
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x2c
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x24
call fcn.004e84f0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x60]
call fcn.004e9c50
mov eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x30]
inc eax
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x150], eax
cmp eax, 5
jae 0x41c42e
call fcn.004e8410
mov esi, dword [esi]
cmp esi, edi
jne 0x41c240
jmp 0x41c433
call fcn.004e8410
sub esp, 0x18
lea eax, [ebp - 0x60]
mov ecx, esp
mov dword [ebp - 0x144], esp
push eax
call fcn.004e8270
push 0x537066
push str.recent_thirdparty_list
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x2d
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x23
call fcn.004e84f0
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 1
call fcn.004e8410
mov edi, dword [ebp - 0x154]
sub esp, 0x18
lea eax, [ebp - 0x80]
mov ecx, esp
mov dword [ebp - 0x144], esp
push eax
call fcn.004e8270
push 0x537441
push str.bootAssistant
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x2e
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004e84f0
push ecx
lea eax, [edi + 0x78]
xorps xmm0, xmm0
push eax
lea ecx, [ebp - 0x68]
movlpd qword [ebp - 0x68], xmm0
call fcn.0040f210
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x140]
mov esi, dword [ebp - 0x68]
xorps xmm0, xmm0
push 7
mov esi, dword [esi]
movups xmmword [ebp - 0x140], xmm0
movq qword [ebp - 0x130], xmm0
call fcn.004e7f20
mov byte [ebp - 4], 0x31
cmp esi, dword [ebp - 0x68]
je 0x41c600
nop dword [eax]
mov eax, dword [esi + 0x28]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
lea ecx, [esi + 0x10]
mov byte [ebp - 4], 0x32
call fcn.00403360
mov edx, eax
mov dword [ebp - 0x150], edx
cmp dword [edx + 0x14], 0x10
jb 0x41c558
mov eax, dword [edx]
mov edx, eax
mov dword [ebp - 0x150], eax
lea ecx, [esi + 0x10]
call fcn.00405900
add eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x140]
push eax
push edx
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x31
call fcn.004e84f0
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
je 0x41c5a4
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x41c5a0
cmp esi, dword [eax + 8]
jne 0x41c5a0
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x41c590
mov esi, eax
jmp 0x41c5bc
mov esi, eax
mov ecx, dword [esi]
cmp byte [ecx + 0xd], 0
jne 0x41c5bc
nop
mov eax, dword [ecx]
mov esi, ecx
mov ecx, eax
cmp byte [eax + 0xd], 0
je 0x41c5b0
cmp esi, dword [ebp - 0x68]
jne 0x41c500
sub esp, 0x18
lea eax, [ebp - 0x140]
mov ecx, esp
mov dword [ebp - 0x144], esp
push eax
call fcn.004e8270
push 0x536f5c
push str.cell_history
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x33
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x31
call fcn.004e84f0
xorps xmm0, xmm0
lea ecx, [ebp - 0xc8]
push 7
movups xmmword [ebp - 0xc8], xmm0
movq qword [ebp - 0xb8], xmm0
call fcn.004e7f20
mov byte [ebp - 4], 0x34
sub esp, 0x18
mov cl, byte [edi + 0x98]
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 5
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov byte [eax], cl
push 0x53744c
push str.showPush
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x35
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004e84f0
mov cl, byte [edi + 0x99]
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 5
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov byte [eax], cl
push 0x537458
push str.showNews
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x36
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004e84f0
mov ecx, dword [edi + 0xa0]
sub esp, 0x18
mov edx, dword [edi + 0xa4]
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x53746c
push str.recentNoShowTime
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x37
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004e84f0
mov ecx, dword [edi + 0xa8]
sub esp, 0x18
mov edx, dword [edi + 0xac]
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
mov byte [ebp - 4], 0x38
push 0x53747d
push str.neverShowTime
lea ecx, [ebp - 0xc8]
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004e84f0
mov ecx, dword [edi + 0xb0]
sub esp, 0x18
mov edx, dword [edi + 0xb4]
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x537593
push str.awaitWindowShowTime
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x39
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004e84f0
mov ecx, dword [edi + 0xb8]
sub esp, 0x18
mov edx, dword [edi + 0xbc]
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x5375a3
push str.awaitRequestWeb
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x3a
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004e84f0
mov eax, dword [edi + 0xc0]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5374df
push str.neverShowResetCount
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x3b
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004e84f0
mov eax, dword [edi + 0xc4]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5374f4
push str.recentShowResetCount
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x3c
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004e84f0
sub esp, 0x18
lea eax, [ebp - 0xc8]
mov ecx, esp
mov dword [ebp - 0x144], esp
push eax
call fcn.004e8270
push 0x53757f
push str.awaitWindow
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x3d
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.004e84f0
xorps xmm0, xmm0
lea ecx, [ebp - 0x98]
push 7
movups xmmword [ebp - 0x98], xmm0
movq qword [ebp - 0x88], xmm0
call fcn.004e7f20
lea eax, [edi + 0xc8]
mov byte [ebp - 4], 0x3e
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.004bb6e0
mov ecx, eax
mov dword [ebp - 0x148], ecx
sub esp, 0x10
mov byte [ebp - 4], 0x3f
mov eax, esp
mov dword [ebp - 0x144], esp
mov dword [ebp - 0x158], eax
mov byte [eax + 8], 4
or dword [eax + 8], 0x100
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
call fcn.00403360
mov esi, eax
cmp dword [esi + 0x14], 0x10
jb 0x41c9c1
mov esi, dword [esi]
mov ecx, dword [ebp - 0x148]
call fcn.00405900
mov edx, eax
mov ecx, esi
call fcn.004e75b0
mov ecx, dword [ebp - 0x158]
mov dword [ecx], eax
push 0x5375bf
push str.contentSupplier
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x40
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x3f
call fcn.004e84f0
mov byte [ebp - 4], 0x41
mov edx, dword [ebp - 0x4c]
cmp edx, 0x10
jb 0x41ca3b
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41ca31
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41ca31
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0050f64c
add esp, 8
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
mov byte [ebp - 4], 0x3e
sub esp, 0x18
mov eax, dword [edi + 0xe0]
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5375cc
push str.newsDlgWidth
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x45
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e84f0
mov eax, dword [edi + 0xe4]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5375dd
push str.newsDlgHeight
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x46
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e84f0
mov eax, dword [edi + 0xe8]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5375f4
push str.newsDlgCaptionHeight
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x47
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e84f0
mov cl, byte [edi + 0xec]
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 5
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov byte [eax], cl
push 0x537608
push str.bootWindowSwitch
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x48
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e84f0
mov eax, dword [edi + 0xf0]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x537620
push str.not_show_recent_days
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x49
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e84f0
mov eax, dword [edi + 0xf4]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5367ed
push str.not_show_days
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x4a
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e84f0
mov cl, byte [edi + 0xf8]
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 5
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov byte [eax], cl
push 0x537635
push str.awaitWindowSwitch
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x4b
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e84f0
mov eax, dword [edi + 0xfc]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x537648
push str.bootTimeInterval
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x4c
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e84f0
mov eax, dword [edi + 0x100]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x53765b
push str.awaitWindowTime
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x4d
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e84f0
mov eax, dword [edi + 0x104]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x537672
push str.neverShowResetCountMax
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x4e
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e84f0
mov ecx, dword [edi + 0x110]
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], 0
push 0x537685
push str.bootTimeShowOpBtn
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x4f
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e84f0
mov ecx, dword [edi + 0x10c]
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], 0
push 0x537698
push str.numbersShowOpBtn
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x50
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e84f0
sub esp, 0x18
lea eax, [ebp - 0x98]
mov ecx, esp
mov dword [ebp - 0x144], esp
push eax
call fcn.004e8270
push 0x5375af
push str.cloudSwitch
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x51
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.004e84f0
xorps xmm0, xmm0
lea ecx, [ebp - 0xe0]
push 7
movups xmmword [ebp - 0xe0], xmm0
movq qword [ebp - 0xd0], xmm0
call fcn.004e7f20
mov byte [ebp - 4], 0x52
sub esp, 0x18
mov ecx, dword [edi + 0x118]
mov eax, esp
mov edx, dword [edi + 0x11c]
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x5376bb
push str.LastShowTimeKey
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x53
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x52
call fcn.004e84f0
lea eax, [edi + 0x120]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.004bb6e0
mov ecx, eax
mov dword [ebp - 0x148], ecx
sub esp, 0x10
mov byte [ebp - 4], 0x54
mov eax, esp
mov dword [ebp - 0x144], esp
mov dword [ebp - 0x158], eax
mov byte [eax + 8], 4
or dword [eax + 8], 0x100
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
call fcn.00403360
mov esi, eax
cmp dword [esi + 0x14], 0x10
jb 0x41cfad
mov esi, dword [esi]
mov ecx, dword [ebp - 0x148]
call fcn.00405900
mov edx, eax
mov ecx, esi
call fcn.004e75b0
mov ecx, dword [ebp - 0x158]
mov dword [ecx], eax
push 0x5376cc
push str.LastTenAdsIDsKey
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x55
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x54
call fcn.004e84f0
mov byte [ebp - 4], 0x56
mov edx, dword [ebp - 0x4c]
cmp edx, 0x10
jb 0x41d027
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41d01d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41d01d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0050f64c
add esp, 8
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
lea eax, [edi + 0x138]
mov byte [ebp - 4], 0x52
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.004bb6e0
mov dword [ebp - 0x148], eax
sub esp, 0x10
mov byte [ebp - 4], 0x5a
mov esi, esp
mov dword [ebp - 0x144], esp
mov ecx, eax
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00403360
mov dword [ebp - 0x150], eax
cmp dword [eax + 0x14], 0x10
jb 0x41d09d
mov eax, dword [eax]
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x148]
call fcn.00405900
mov ecx, dword [ebp - 0x150]
mov edx, eax
call fcn.004e75b0
mov dword [esi], eax
push 0x5376e0
push str.NotInterestAdKey
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x5b
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x5a
call fcn.004e84f0
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x4c]
cmp edx, 0x10
jb 0x41d115
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41d10b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41d10b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0050f64c
add esp, 8
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
mov byte [ebp - 4], 0x52
sub esp, 0x18
mov eax, dword [edi + 0x150]
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5376f4
push str.AdLabelValidSpan
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x60
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x52
call fcn.004e84f0
lea eax, [edi + 0x154]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.004bb6e0
mov dword [ebp - 0x148], eax
sub esp, 0x10
mov byte [ebp - 4], 0x61
mov esi, esp
mov dword [ebp - 0x144], esp
mov ecx, eax
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00403360
mov dword [ebp - 0x150], eax
cmp dword [eax + 0x14], 0x10
jb 0x41d1e6
mov eax, dword [eax]
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x148]
call fcn.00405900
mov ecx, dword [ebp - 0x150]
mov edx, eax
call fcn.004e75b0
mov dword [esi], eax
push 0x537705
push str.ReqAdsTimeKey
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x62
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x61
call fcn.004e84f0
mov byte [ebp - 4], 0x63
mov edx, dword [ebp - 0x4c]
cmp edx, 0x10
jb 0x41d25e
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41d254
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41d254
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0050f64c
add esp, 8
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
sub esp, 0x18
mov byte [ebp - 4], 0x52
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x144], esp
mov ecx, esp
push eax
call fcn.004e8270
push 0x5376aa
push str.RcmdAdsSection
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x67
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x52
call fcn.004e84f0
xorps xmm0, xmm0
lea ecx, [ebp - 0x128]
push 7
movups xmmword [ebp - 0x128], xmm0
movq qword [ebp - 0x118], xmm0
call fcn.004e7f20
mov byte [ebp - 4], 0x68
sub esp, 0x18
mov ecx, dword [edi + 0x170]
mov eax, esp
mov edx, dword [edi + 0x174]
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 2
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x537725
push str.BootStartTime
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x69
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x68
call fcn.004e84f0
sub esp, 0x18
lea eax, [ebp - 0x128]
mov ecx, esp
mov dword [ebp - 0x144], esp
push eax
call fcn.004e8270
push 0x537716
push str.BootShowRecord
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x6a
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x68
call fcn.004e84f0
mov eax, dword [edi + 0x330]
and eax, dword [edi + 0x334]
cmp eax, 0xffffffff
je 0x41d521
mov eax, dword [edi + 0x338]
and eax, dword [edi + 0x33c]
cmp eax, 0xffffffff
je 0x41d521
mov eax, dword [edi + 0x340]
and eax, dword [edi + 0x344]
cmp eax, 0xffffffff
je 0x41d521
xorps xmm0, xmm0
lea ecx, [ebp - 0x30]
push 7
movups xmmword [ebp - 0x30], xmm0
movq qword [ebp - 0x20], xmm0
call fcn.004e7f20
mov byte [ebp - 4], 0x6b
sub esp, 0x18
mov ecx, dword [edi + 0x330]
mov eax, esp
mov edx, dword [edi + 0x334]
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 1
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x53773e
push str.provinceId
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x6c
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x6b
call fcn.004e84f0
mov ecx, dword [edi + 0x338]
sub esp, 0x18
mov edx, dword [edi + 0x33c]
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 1
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x537746
push str.cityId
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x6d
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x6b
call fcn.004e84f0
mov ecx, dword [edi + 0x340]
sub esp, 0x18
mov edx, dword [edi + 0x344]
mov eax, esp
mov dword [ebp - 0x144], esp
mov byte [eax + 8], 1
and dword [eax + 8], 0xfffffeff
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax], ecx
mov dword [eax + 4], edx
push 0x537750
push str.countyId
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x6e
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x6b
call fcn.004e84f0
sub esp, 0x18
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x144], esp
push eax
call fcn.004e8270
push 0x537731
mov byte [ebp - 4], 0x6f
push str.localInfo
lea ecx, [ebp - 0xb0]
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x6b
call fcn.004e84f0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x68
call fcn.004e8410
xorps xmm0, xmm0
lea ecx, [ebp - 0x110]
push 7
movups xmmword [ebp - 0x110], xmm0
movq qword [ebp - 0x100], xmm0
call fcn.004e7f20
lea eax, [edi + 0x178]
mov byte [ebp - 4], 0x70
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.004bb6e0
mov dword [ebp - 0x148], eax
sub esp, 0x10
mov byte [ebp - 4], 0x71
mov esi, esp
mov dword [ebp - 0x144], esp
mov ecx, eax
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00403360
mov dword [ebp - 0x150], eax
cmp dword [eax + 0x14], 0x10
jb 0x41d5a4
mov eax, dword [eax]
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x148]
call fcn.00405900
mov ecx, dword [ebp - 0x150]
mov edx, eax
call fcn.004e75b0
mov dword [esi], eax
push 0x5376cc
push str.LastTenAdsIDsKey
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x72
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x71
call fcn.004e84f0
mov byte [ebp - 4], 0x73
mov edx, dword [ebp - 0x4c]
cmp edx, 0x10
jb 0x41d61c
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41d612
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x41d612
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0050f64c
add esp, 8
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
sub esp, 0x18
mov byte [ebp - 4], 0x70
lea eax, [ebp - 0x110]
mov dword [ebp - 0x144], esp
mov ecx, esp
push eax
call fcn.004e8270
push 0x537767
push str.BootDurationSection
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x77
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x70
call fcn.004e84f0
xorps xmm0, xmm0
lea ecx, [ebp - 0xf8]
push 7
movups xmmword [ebp - 0xf8], xmm0
movq qword [ebp - 0xe8], xmm0
call fcn.004e7f20
mov byte [ebp - 4], 0x78
sub esp, 0x18
mov eax, dword [edi + 0x348]
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x53778d
push str.BubblePromptCount
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x79
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x78
call fcn.004e84f0
sub esp, 0x18
lea eax, [ebp - 0xf8]
mov ecx, esp
mov dword [ebp - 0x144], esp
push eax
call fcn.004e8270
push 0x53777b
push str.BubblePromptSection
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x7a
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x78
call fcn.004e84f0
mov eax, dword [edi + 0x34c]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov byte [ebp - 4], 0x7b
push 0x537799
push str.last_code
lea ecx, [ebp - 0xb0]
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x78
call fcn.004e84f0
mov eax, dword [edi + 0x350]
sub esp, 0x18
mov ecx, esp
cdq
mov dword [ebp - 0x144], esp
mov byte [ecx + 8], 1
and dword [ecx + 8], 0xfffffeff
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx], eax
mov dword [ecx + 4], edx
push 0x5377aa
push str.clear_pic_time
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x7c
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x78
call fcn.004e84f0
sub esp, 0x18
lea eax, [ebp - 0xb0]
mov ecx, esp
mov dword [ebp - 0x144], esp
push eax
call fcn.004e8270
mov ecx, dword [ebp - 0x15c]
push 0x537432
push str.config
mov byte [ebp - 4], 0x7d
call fcn.004e9780
mov ecx, eax
mov byte [ebp - 4], 0x78
call fcn.004e84f0
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x70
call fcn.004e8410
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x68
call fcn.004e8410
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x52
call fcn.004e8410
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x3e
call fcn.004e8410
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x34
call fcn.004e8410
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x31
call fcn.004e8410
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x30
call fcn.004e8410
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0x68]
mov eax, dword [ebp - 0x68]
push eax
push dword [eax]
lea eax, [ebp - 0x144]
push eax
call fcn.0040ead0
push 0x2c
push dword [ebp - 0x68]
call fcn.0050f64c
add esp, 8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.004e8410
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb0]
call fcn.004e8410
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0050f27d
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret