Function at 0x435314
Capabilities:
Read .ini file

Disassembly:
mov eax, 0x53b434
call fcn.004f8378
sub esp, 0x704
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, 0x12b
lea eax, [ebp - 0x180]
and word [esi + 6], 0x1fff
push edi
push 0
mov ebx, ecx
push eax
call fcn.004f8540
mov ax, word [esi + 6]
mov ecx, dword [esi + 0x14]
and word [ebp - 0x17a], 0
mov dword [ebp - 0x10], eax
movzx eax, ax
mov dword [ebp - 0x28], eax
add esp, 0xc
or ah, 0x10
cmp dword [ebx + 0x996], ecx
mov word [ebp - 0x180], 0xfffd
je 0x4353a2
mov cx, word [ebx + 0x910]
cmp cx, word [ebp - 0x10]
je 0x4353a2
movzx ecx, cx
cmp ecx, eax
je 0x4353a2
cmp word [ebp - 0x10], 0x401
jne 0x435418
and dword [esi + 0x5e], 0xfffffffb
mov byte [esi + 0x146], 0x30
jmp 0x435418
push 0x1656
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [ebx + 0x146c], 1
and dword [ebx + 0xba3], 0
mov eax, dword [ebx + 0x1197]
push edi
mov dword [ebp - 0x18], eax
lea eax, [ebx + 0x90a]
push eax
lea eax, [ebp - 0x180]
push eax
call fcn.004f87d0
push edi
lea edi, [ebx + 0x90a]
push 0
push edi
call fcn.004f8540
and word [edi + 6], 0
mov word [edi], 0xfffd
or dword [ebx + 0x996], 0xffffffff
add esp, 0x18
cmp dword [ebp - 0x18], 0
jle 0x435418
cmp word [ebp - 0x10], 0x1000
je 0x435418
push 0
mov ecx, ebx
call fcn.00438f89
mov eax, dword [ebx + 0xcfd]
test eax, eax
je 0x435430
cmp dword [eax + 0x1f6], 0
je 0x435430
push 1
pop edi
jmp 0x435432
xor edi, edi
and dword [ebp - 0x20], 0
cmp word [ebp - 0x10], 0x602
jne 0x435459
push esi
mov ecx, ebx
call fcn.004458b2
test eax, eax
je 0x435459
cmp dword [ebx + 0x1e1], 0
je 0x435459
push 1
pop edi
mov dword [ebp - 0x20], edi
test edi, edi
je 0x4354b8
lea edi, [ebx + 0x101e]
mov ecx, edi
call fcn.0040c72e
test eax, eax
jne 0x435475
mov ecx, edi
call fcn.004e2f40
cmp word [ebp - 0x10], 0x1000
je 0x435496
cmp word [ebp - 0x10], 0x605
je 0x435496
mov eax, dword [ebp + 0xc]
push 0
add eax, 0xffffff88
mov ecx, ebx
push eax
push esi
call fcn.00443c46
mov ecx, dword [ebx + 0xcfd]
test ecx, ecx
je 0x4354ae
cmp word [ebp - 0x10], 0x1000
je 0x4354ae
push esi
call fcn.0040bf44
cmp dword [ebp - 0x20], 0
je 0x436f85
cmp word [esi + 6], 5
jne 0x4354db
fld qword [esi + 0x62]
push 1
push ecx
push ecx
lea eax, [esi + 0x2e]
mov ecx, ebx
fstp qword [esp]
push eax
call fcn.00440565
and byte [ebx + 0xa54], 0xef
cmp word [ebp - 0x10], 0x401
jne 0x435504
cmp word [esi + 0x18], 0
jne 0x436f85
cmp byte [esi + 0x2b], 0
je 0x436f85
mov ecx, dword [ebx + 0x1187]
push esi
call fcn.004b67b6
xor edi, edi
cmp dword [ebx + 0x1408], edi
je 0x43551e
mov ecx, dword [ebx + 0x1404]
cmp ecx, edi
je 0x43551e
push esi
call fcn.0044f0f7
mov eax, dword [ebx + 0x1938]
cmp eax, edi
je 0x435569
cmp dword [ebx + 0x1408], edi
jne 0x43553d
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, edi
je 0x435549
mov ecx, dword [ebx + 0x1938]
push esi
call fcn.0044c140
cmp dword [ebx + 0x1408], edi
je 0x435569
cmp word [ebp - 0x10], 0x102
je 0x436f85
cmp word [ebp - 0x10], 0x103
je 0x436f85
push 1
lea eax, [esi + 0x6a]
push dword [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.0044582e
cmp dword [ebx + 0xd0d], 0
lea edi, [ebx + 0xd0d]
je 0x43559f
push 1
push 0xc5
push esi
mov ecx, ebx
call fcn.0044582e
mov ecx, dword [edi]
push esi
call fcn.0040e455
lea edi, [ebx + 0xf23]
mov ecx, edi
call fcn.005136bb
lea eax, [esi + 0x7a]
mov ecx, edi
push eax
call fcn.005138b9
test byte [esi + 7], 0x10
je 0x43601c
xor edi, edi
cmp word [esi + 0x18], di
je 0x435702
cmp dword [ebx + 0x77a], 1
jne 0x435631
mov dword [ebx + 0xb8b], edi
mov eax, dword [0x59fe84]
mov dword [ebp + 8], eax
add esi, 0x1a
lea eax, [ebp + 8]
push esi
push 0xe047
push eax
mov dword [ebp - 4], edi
call fcn.0050f69c
mov eax, dword [ebp + 8]
add esp, 0xc
cmp dword [eax - 8], edi
je 0x435613
push edi
push 0xffffffffffffffff
push eax
push 0x50
push esi
call fcn.004d5940
add esp, 0x14
push edi
push edi
push dword [ebp + 8]
mov ecx, ebx
mov dword [ebx + 0x77a], edi
call fcn.0043a3c1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
jmp 0x437077
and byte [ebx + 0x8d7], 0
push 0x10
lea eax, [ebx + 0x8fa]
push edi
push eax
call fcn.004f8540
add esp, 0xc
cmp word [esi + 0x18], 0x7003
jne 0x435679
add esi, 0xc9
mov dword [ebx + 0xba3], edi
push esi
lea ecx, [ebx + 0xa99]
mov dword [ebx + 0xd41], 1
call fcn.005138b9
jmp 0x436f85
lea eax, [esi + 0x1a]
lea ecx, [ebp + 0xc]
push eax
call fcn.0051379e
lea ecx, [ebp + 0xc]
mov dword [ebp - 4], 1
call fcn.0050f77a
mov eax, dword [ebp + 0xc]
cmp dword [eax - 8], edi
je 0x4356a6
push edi
push edi
push eax
mov ecx, ebx
call fcn.0043a3c1
mov ecx, dword [ebx + 0xea1]
cmp ecx, edi
je 0x4356f6
call fcn.004302cb
test eax, eax
je 0x4356f6
cmp word [esi + 0x18], 0xfffe
je 0x4356e5
cmp dword [ebx + 0x772], edi
je 0x4356d2
mov dword [ebx + 0xd25], 1
push edi
push 0x40
push 0x7e5
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x4356f6
or byte [ebx + 0xa53], 8
mov dword [ebx + 0xba3], 1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
jmp 0x437077
test byte [ebx + 0xa53], 4
jne 0x436001
mov eax, dword [0x59fe84]
mov dword [ebp - 0x14], eax
cmp dword [ebx + 0x77a], 1
lea eax, [ebx + 0x77a]
mov dword [ebp - 4], 2
jne 0x435774
mov dword [eax], edi
push 0x10
lea eax, [ebx + 0x8fa]
push edi
push eax
call fcn.004f8540
and byte [ebx + 0x8d7], 0
add esp, 0xc
mov esi, dword [sym.imp.USER32.dll_PostMessageA]
push edi
push 0x40
push 0x7e5
push dword [ebx + 0x1c]
call esi
push edi
push 0x29
push 0x7e5
push dword [ebx + 0x1c]
call esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
jmp 0x437077
mov eax, dword [ebx + 0xd01]
cmp dword [eax - 8], edi
jne 0x4357aa
lea eax, [esi + 0x43]
lea ecx, [ebp - 0x14]
push eax
call fcn.005138b9
mov eax, dword [ebp - 0x14]
cmp dword [eax - 8], edi
je 0x4357aa
cmp word [esi + 6], 0x1000
jne 0x4357aa
lea eax, [ebp - 0x14]
lea ecx, [ebx + 0xd01]
push eax
call fcn.00513869
call fcn.0042f865
or byte [ebx + 0xa53], 4
cmp dword [ebx + 0x1c1], edi
je 0x4357f4
mov eax, dword [ebx + 0x19c]
cmp eax, edi
je 0x4357cf
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, ebx
call fcn.00449170
push edi
mov ecx, ebx
call fcn.004425eb
test eax, eax
jne 0x435768
push edi
push edi
push 0x10
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x435768
xor edi, edi
lea eax, [esi + 0x7a]
push edi
push 0xffffffffffffffff
lea ecx, [ebx + 0x89f]
push eax
push 0x10
push ecx
call fcn.004d5940
push edi
lea eax, [esi + 0x8a]
push 0xffffffffffffffff
push eax
lea eax, [ebx + 0x8af]
push 0x10
push eax
call fcn.004d5940
push edi
lea eax, [esi + 0x9a]
push 0xffffffffffffffff
push eax
lea eax, [ebx + 0x8bf]
push 0x10
push eax
call fcn.004d5940
lea eax, [esi + 0xba]
push edi
push 0xffffffffffffffff
push eax
lea eax, [ebx + 0x8df]
push 0xb
push eax
call fcn.004d5940
add esp, 0x50
lea eax, [esi + 0xba]
lea ecx, [ebx + 0x1022]
push edi
push eax
push str.zhmc
call fcn.0041fb62
lea eax, [esi + 0x7a]
push edi
push eax
push str.zjzh
lea ecx, [ebx + 0x1022]
call fcn.0041fb62
push edi
push 0x5914e0
push str.zhlx
lea ecx, [ebx + 0x1022]
call fcn.0041fb62
lea eax, [esi + 0xaa]
push edi
push eax
push str.gtlx
lea ecx, [ebx + 0x1022]
call fcn.0041fb62
and byte [ebp - 0x284], 0
push 0x40
pop ecx
xor eax, eax
lea edi, [ebp - 0x283]
push 0x104
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x284]
xor edi, edi
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x284]
lea ecx, [ebp - 0x20]
push eax
call fcn.0051379e
push dword [ebp - 0x20]
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 3
push eax
call fcn.0047e0f7
pop ecx
pop ecx
mov eax, dword [eax]
push edi
push eax
push str.xdate
lea ecx, [ebx + 0x1022]
mov byte [ebp - 4], 4
call fcn.0041fb62
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 3
call fcn.00513730
lea eax, [esi + 0xba]
push 0xb
push eax
lea ecx, [ebp - 0x1c]
call fcn.0050ed2b
push edi
lea ecx, [ebx + 0x1998]
push dword [ebp - 0x1c]
mov byte [ebp - 4], 5
push str.user_gdxm
call fcn.0041fb62
test byte [ebx + 0xa4d], 0x20
jne 0x435972
lea eax, [esi + 0xba]
lea ecx, [ebp - 0x14]
push eax
call fcn.005138b9
push 0x9c71
mov ecx, ebx
push dword [ebp - 0x14]
call fcn.0043a76c
fld qword [esi + 0x62]
fcom qword [0x54da68]
fnstsw ax
sahf
jbe 0x435992
push 1
push ecx
push ecx
mov ecx, ebx
fstp qword [esp]
push 0
call fcn.00440565
jmp 0x435994
fstp st(0)
lea eax, [esi + 0x4d]
lea ecx, [ebp - 0x14]
push eax
call fcn.005138b9
mov eax, dword [ebp - 0x14]
cmp dword [eax - 8], 0
je 0x4359be
cmp word [esi + 6], 0x1000
jne 0x4359be
push 0x9c70
push eax
mov ecx, ebx
call fcn.0043a76c
push dword [ebx + 0x19c]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x435abb
lea eax, [ebp - 0x18]
push str.set_multi_user
push eax
mov ecx, ebx
call fcn.004490a9
mov eax, dword [eax]
push 0x592cac
push eax
call fcn.004f8b05
neg eax
pop ecx
sbb al, al
pop ecx
inc al
lea ecx, [ebp - 0x18]
mov byte [ebp + 0xf], al
call fcn.00513730
cmp byte [ebp + 0xf], 0
je 0x435abb
mov eax, dword [0x59fe84]
mov dword [ebp + 0xc], eax
push dword [ebp - 0x1c]
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 6
push 0x590b1c
push eax
call fcn.0050f689
add esp, 0xc
lea eax, [ebp + 0xc]
push dword [ebx + 0x19c]
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
call fcn.005134a5
mov ecx, ebx
mov byte [ebp - 4], 6
call fcn.004370f1
push eax
lea ecx, [ebp - 0x310]
call fcn.004acaca
push 6
push str.__HX_XIADAN_SFM_OBJ__
lea ecx, [ebp - 0x50]
call fcn.00473ab7
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 8
call fcn.004ce11b
test eax, eax
mov dword [ebp - 0x18], eax
je 0x435aa3
mov ecx, eax
call fcn.004ace2b
test eax, eax
je 0x435aa3
sub esp, 0x8c
lea esi, [ebp - 0x310]
push 0x23
pop ecx
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x18]
call fcn.004acb82
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 6
call fcn.00473aac
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 5
call fcn.00513730
lea eax, [esi + 0x1a]
lea ecx, [ebp - 0x14]
push eax
call fcn.005138b9
push dword [ebp - 0x14]
mov ecx, ebx
call fcn.00437ae2
push esi
mov ecx, ebx
call fcn.00447a81
mov ecx, ebx
mov edi, eax
call fcn.00431e76
test edi, edi
jle 0x435b34
lea ecx, [ebx + 0xd49]
call fcn.0041cb10
test eax, eax
jg 0x435bd0
push 0xf094
mov ecx, ebx
call fcn.0043a36f
push 0
push 0x40
push 0x7e5
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_PostMessageA]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
call fcn.00513730
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 2
call fcn.00513730
jmp 0x435768
test byte [esi + 0x5e], 0x10
je 0x435b45
push 1
pop edi
mov dword [ebx + 0x7d7], edi
jmp 0x435b54
push 0xf02a
mov ecx, ebx
call fcn.004317cd
push 1
pop edi
test byte [esi + 0x5e], 0x40
jne 0x435b6d
push 0xf02b
mov ecx, ebx
call fcn.004317cd
or byte [ebx + 0xa53], 0x20
test byte [esi + 0x5e], 0x80
jne 0x435b94
push 0xf0
mov ecx, ebx
call fcn.00431754
push 0xf02c
mov ecx, ebx
call fcn.004317cd
and byte [ebx + 0xf14], 0
jmp 0x435b9b
mov byte [ebx + 0xf14], 1
test byte [esi + 0x5f], 1
jne 0x435bad
push 0xf02d
mov ecx, ebx
call fcn.004317cd
test byte [esi + 0x5f], 2
jne 0x435bc8
push 0xf02e
mov ecx, ebx
call fcn.004317cd
and dword [ebx + 0xf1b], 0
jmp 0x435bd3
mov dword [ebx + 0xf1b], edi
jmp 0x435bd3
push 1
pop edi
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x435be9
push eax
push eax
mov ecx, ebx
call fcn.0043aa17
cmp dword [ebx + 0xb7b], 0
jne 0x435bfb
cmp dword [ebx + 0x1d1], 0
je 0x435c39
lea eax, [ebp - 0x4c]
mov dword [ebx + 0x1cd], edi
push eax
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
sub eax, dword [ebp - 0x48]
push edi
push eax
mov eax, dword [ebp - 0x4c]
sub ecx, eax
sub eax, dword [ebp - 0x44]
push ecx
mov ecx, ebx
push dword [ebp - 0x48]
sub eax, 0x14
push eax
call fcn.00517b65
push 5
mov ecx, ebx
call fcn.00517bf5
test byte [ebx + 0xa4e], 0x80
je 0x435c9f
mov eax, dword [ebx + 0xa91]
lea edi, [ebx + 0xa91]
mov eax, dword [eax - 8]
mov dword [ebp + 8], eax
lea eax, [ebp - 0x28]
push eax
call fcn.0042fd04
pop ecx
mov eax, dword [eax]
push dword [ebp + 8]
mov dword [ebp + 0xc], eax
mov eax, dword [ebx + 0xcf5]
push 0
mov ecx, edi
mov byte [ebp - 4], 9
mov dword [ebp - 0x18], eax
call fcn.00513b60
push eax
push dword [ebp + 0xc]
push 0x27
push dword [ebp - 0x18]
call fcn.004bf672
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00513730
push 0xffffffffffffffff
mov ecx, edi
call fcn.00513baf
push 0xe00d
push 0x29
mov ecx, ebx
call fcn.00444b9c
cmp al, 0x43
jne 0x435e72
cmp dword [ebx + 0x1408], 0
jne 0x435e72
mov eax, dword [0x59fe84]
mov dword [ebp + 8], eax
push 0xe00b
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xa
call fcn.00518bf6
push ecx
lea edi, [ebx + 0xa39]
mov ecx, esp
mov dword [ebp + 0xc], esp
push edi
call fcn.005134a5
mov ecx, ebx
call fcn.004454f7
test eax, eax
jne 0x435dda
push ecx
lea eax, [ebx + 0xa35]
mov ecx, esp
mov dword [ebp + 0xc], esp
push eax
call fcn.005134a5
mov ecx, ebx
call fcn.004454f7
test eax, eax
je 0x435d32
push dword [ebp + 8]
mov eax, dword [ebx + 0xa35]
push eax
call fcn.004f8b05
pop ecx
test eax, eax
pop ecx
jne 0x435dda
push ecx
lea eax, [ebx + 0xa3d]
mov ecx, esp
mov dword [ebp + 0xc], esp
push eax
call fcn.005134a5
mov ecx, ebx
call fcn.004454f7
test eax, eax
je 0x435d5b
mov eax, dword [ebx + 0xa3d]
cmp dword [eax - 8], 0
jne 0x435dda
mov eax, dword [edi]
mov ecx, dword [ebx + 0x7aa]
push eax
push ecx
call fcn.004f8b05
pop ecx
test eax, eax
pop ecx
je 0x435dd0
mov eax, dword [ebx + 0xa35]
mov ecx, dword [ebx + 0x7aa]
push eax
push ecx
call fcn.004f8b05
pop ecx
test eax, eax
pop ecx
je 0x435dd0
mov eax, dword [ebx + 0xa3d]
mov ecx, dword [ebx + 0x7aa]
push eax
push ecx
call fcn.004f8b05
pop ecx
test eax, eax
pop ecx
je 0x435dd0
mov eax, dword [ebx + 0xa35]
mov ecx, dword [edi]
push eax
push ecx
call fcn.004f8b05
pop ecx
test eax, eax
pop ecx
je 0x435dd0
mov eax, dword [ebx + 0xa3d]
mov edi, dword [edi]
push eax
push edi
call fcn.004f8b05
pop ecx
test eax, eax
pop ecx
jne 0x435e66
push 0xf0c4
jmp 0x435e5f
push 0x80a1
push 0x1b
mov ecx, ebx
call fcn.00444b9c
cmp al, 0x31
jne 0x435e5a
mov ecx, dword [ebx + 0x1187]
push 1
push str.WT_ShowPwdPrompt
push str.System
mov eax, dword [ecx]
call dword [eax + 0xa4]
test eax, eax
je 0x435e66
mov ecx, dword [ebx + 0x1414]
test ecx, ecx
je 0x435e22
mov eax, dword [ecx]
push 1
call dword [eax + 4]
and dword [ebx + 0x1414], 0
push 0x64
call fcn.00513471
pop ecx
mov dword [ebp + 0xc], eax
test eax, eax
mov byte [ebp - 4], 0xb
je 0x435e3f
push ebx
mov ecx, eax
call fcn.00463ad4
jmp 0x435e41
xor eax, eax
test eax, eax
mov byte [ebp - 4], 0xa
mov dword [ebx + 0x1414], eax
je 0x435e66
push 5
mov ecx, eax
call fcn.00517bf5
jmp 0x435e66
push 0xe744
mov ecx, ebx
call fcn.0043a36f
lea ecx, [ebp + 8]
mov byte [ebp - 4], 5
call fcn.00513730
mov eax, dword [0x59fe84]
mov dword [ebp - 0x24], eax
push 0x80bb
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xc
call fcn.00518bf6
push dword [ebx + 0xaee]
lea ecx, [ebp - 0x24]
push str._username_
call fcn.0050ef80
lea eax, [ebx + 0x89f]
lea ecx, [ebp - 0x24]
push eax
push str._zjzh_
call fcn.0050ef80
mov eax, dword [ebp - 0x24]
mov edi, dword [eax - 8]
lea eax, [ebp - 0x3c]
push eax
call fcn.0042fd04
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0xd
push eax
call fcn.0042fd04
pop ecx
pop ecx
mov eax, dword [eax]
push edi
mov dword [ebp + 8], eax
mov eax, dword [ebx + 0xcf5]
push 0
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xe
mov dword [ebp + 0xc], eax
call fcn.00513b60
push eax
push dword [ebp + 8]
push 0x25
push dword [ebp + 0xc]
call fcn.004bf672
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xd
call fcn.00513730
push 0xffffffffffffffff
lea ecx, [ebp - 0x24]
call fcn.00513baf
test byte [esi + 0x5e], 2
je 0x435f1e
or byte [ebx + 0xa53], 1
xor edi, edi
push 0xffffffffffffffff
lea ecx, [ebx + 0xd49]
mov dword [ebx + 0xa49], edi
call fcn.0041e531
cmp eax, edi
je 0x435f57
cmp dword [eax + 0x90], 0xf0
mov byte [ebp + 8], 0x20
jne 0x435f4b
mov byte [ebp + 8], 0x4a
push dword [ebp + 8]
mov ecx, ebx
push 0x20
call fcn.00437141
test byte [esi + 0x5e], 8
je 0x435fc5
cmp dword [ebx + 0x1408], edi
jne 0x435fc5
mov ecx, ebx
call fcn.00444b61
test eax, eax
jne 0x435fc5
cmp dword [ebx + 0x1934], edi
jne 0x435fa1
push 0x60
call fcn.00513471
pop ecx
mov dword [ebp + 8], eax
cmp eax, edi
mov byte [ebp - 4], 0xf
je 0x435f95
push ebx
mov ecx, eax
call fcn.0047dff1
jmp 0x435f97
xor eax, eax
mov byte [ebp - 4], 0xd
mov dword [ebx + 0x1934], eax
mov ecx, dword [ebx + 0x1934]
cmp ecx, edi
je 0x435fbe
push edi
call fcn.005168e7
mov ecx, dword [ebx + 0x1934]
push 5
call fcn.00517bf5
or byte [ebx + 0xa53], 0x10
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0xc
call fcn.00513730
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.00513730
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
call fcn.00513730
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 2
call fcn.00513730
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00513730
and dword [ebp - 0x10], 0xefff
cmp word [ebp - 0x10], 0x60b
jne 0x436023
mov ecx, ebx
call fcn.0043e8b9
jmp 0x436f85
mov ecx, dword [ebp - 0x10]
xor edi, edi
jmp 0x436028
mov ecx, dword [ebp - 0x10]
xor edi, edi
and word [esi + 6], 0xefff
mov ax, word [esi + 6]
and ecx, 0xefff
test ah, 1
mov dword [ebp - 0x10], ecx
jne 0x436056
cmp ax, 4
je 0x436056
cmp ax, 5
je 0x436056
cmp ax, 0x602
jne 0x436412
mov eax, dword [0x59fe84]
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 4], 0x10
cmp ecx, edi
mov dword [ebp - 0x30], ecx
je 0x43639c
mov dword [ebp - 0x14], eax
push ecx
lea eax, [ebp - 0x14]
push str.seq__ld
push eax
mov byte [ebp - 4], 0x11
call fcn.0050f689
mov eax, dword [ebp - 0xf8]
add esp, 0xc
mov dword [ebp - 0x30], eax
mov eax, dword [0x59fe84]
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
lea edi, [ebx + 0x113b]
push eax
mov ecx, edi
push dword [ebp - 0x14]
mov byte [ebp - 4], 0x12
call fcn.00512fbe
test eax, eax
je 0x436382
push dword [ebp - 0x14]
and dword [ebx + 0x111b], 0
mov ecx, edi
call fcn.00513046
mov eax, dword [0x59fe84]
and dword [ebp - 0x38], 0
and dword [ebp - 0x10], 0
mov dword [ebp + 8], eax
mov dword [ebp - 0x1c], eax
mov ax, word [esi + 6]
mov byte [ebp - 4], 0x14
test ah, 1
je 0x43610c
lea eax, [esi + 0xc5]
push eax
lea eax, [ebp + 8]
push dword [ebp - 0x24]
push eax
call fcn.0050f689
add esp, 0xc
jmp 0x4361e2
cmp ax, 5
jne 0x43618e
mov al, byte [ebx + 0x8ea]
mov ecx, ebx
push eax
call fcn.004406bc
mov ecx, dword [0x59fe84]
mov dword [ebp - 0x2c], ecx
push eax
lea eax, [ebp - 0x2c]
push str.__._dlf
push eax
mov byte [ebp - 4], 0x15
call fcn.0050f689
mov eax, dword [0x59fe84]
mov dword [ebp - 0x20], eax
fld qword [esi + 0x62]
add esp, 4
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x16
fstp qword [esp]
push dword [ebp - 0x2c]
push eax
call fcn.0050f689
add esp, 0x10
lea eax, [ebp - 0x1c]
push dword [ebp - 0x20]
push str.money_s_
push eax
call fcn.0050f689
add esp, 0xc
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x15
call fcn.00513730
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.00513730
jmp 0x4361e2
cmp ax, 0x602
jne 0x4361e2
lea eax, [ebp - 0x24]
lea ecx, [ebp + 8]
push eax
call fcn.00513869
push 0x40
call fcn.00513471
pop ecx
mov dword [ebp - 0x3c], eax
test eax, eax
mov byte [ebp - 4], 0x17
je 0x4361bc
mov ecx, eax
call fcn.004dea50
jmp 0x4361be
xor eax, eax
test eax, eax
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x10], eax
je 0x4361e2
push dword [esi + 0xc5]
lea ecx, [esi + 0xc9]
push ecx
push eax
call fcn.004df9c0
add esp, 0xc
mov dword [ebp - 0x38], eax
mov eax, dword [ebp + 8]
cmp dword [eax - 8], 0
je 0x4362a3
mov eax, dword [eax - 8]
push 3
cdq
pop ecx
idiv ecx
push ecx
pop eax
sub eax, edx
test eax, eax
jle 0x436212
mov edi, eax
push 0x590724
lea ecx, [ebp + 8]
call fcn.00513b0c
dec edi
jne 0x436202
push 1
lea ecx, [ebp - 0x48]
call fcn.00401000
mov eax, dword [ebp + 8]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x18
push dword [eax - 8]
push 0
call fcn.00513b60
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x48]
call fcn.004010a1
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x19
push eax
lea eax, [ebp - 0x2c]
push 0x592c70
push eax
call fcn.00513a39
push 0x5909e4
push eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x1a
push eax
call fcn.005139c5
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1b
call fcn.00513b48
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x1a
call fcn.00513730
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x19
call fcn.00513730
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x18
call fcn.00513730
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x14
call fcn.00401056
movzx eax, word [esi + 6]
push eax
lea eax, [ebp - 0x18]
push eax
mov ecx, ebx
call fcn.00447217
mov edi, dword [ebp - 0x10]
lea eax, [esi + 0x1a]
push edi
mov ecx, ebx
push dword [ebp - 0x1c]
mov byte [ebp - 4], 0x1c
push eax
movsx eax, word [esi + 0x18]
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x30]
call fcn.004461a5
test edi, edi
je 0x4362e0
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax]
lea eax, [ebp - 0x34]
push eax
call fcn.0050f9f9
lea eax, [ebp - 0x28]
push 0x591578
push eax
lea ecx, [ebp - 0x34]
call fcn.0050fa92
movzx eax, word [esi + 6]
push dword [ebp - 0x38]
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp + 0xc]
push dword [ebp - 0x30]
push dword [ebp - 0x28]
push 0x592c34
push eax
call fcn.0050f689
add esp, 0x18
mov ecx, ebx
push 0
push str.error.log
push dword [ebp + 0xc]
call fcn.004458cc
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
call fcn.00513730
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x14
call fcn.00513730
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x13
call fcn.00513730
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x12
call fcn.00513730
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x11
call fcn.00513730
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x10
call fcn.00513730
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
jmp 0x437077
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x11
call fcn.00513730
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x10
call fcn.00513730
xor edi, edi
cmp dword [ebx + 0x1117], edi
je 0x436403
lea eax, [ebp - 0x34]
push eax
call fcn.0050f9f9
lea eax, [ebp + 8]
push 0x591578
push eax
lea ecx, [ebp - 0x34]
call fcn.0050fa92
movzx eax, word [esi + 6]
push eax
lea eax, [esi + 0x1a]
push eax
mov byte [ebp - 4], 0x1e
movsx eax, word [esi + 0x18]
push eax
lea eax, [ebp + 0xc]
push dword [ebp - 0x30]
push dword [ebp + 8]
push str._s:
push eax
call fcn.0050f689
add esp, 0x1c
mov ecx, ebx
push edi
push str.error.log
push dword [ebp + 0xc]
call fcn.004458cc
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x10
call fcn.00513730
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00513730
mov ecx, dword [ebp - 0x10]
cmp word [esi + 0x18], di
jne 0x4368d7
cmp cx, 0x605
jne 0x436691
push esi
mov ecx, ebx
call fcn.00449a88
push esi
mov ecx, ebx
call fcn.004371cd
cmp al, 0x31
mov byte [ebp + 8], al
jl 0x43646f
push 0xffffffffffffffff
lea ecx, [ebx + 0xd49]
call fcn.0041e531
cmp dword [eax + 0x90], 0xf0
mov ecx, ebx
setne al
dec eax
and eax, 0x2a
add eax, 0x20
push eax
push dword [ebp + 8]
call fcn.00437141
jmp 0x4369d1
mov ecx, ebx
call fcn.00443982
lea eax, [ebp - 0x1c]
push 0x592684
push eax
lea ecx, [ebx + 0x101e]
call fcn.0040c76c
push dword [ebp - 0x1c]
mov dword [ebp - 4], 0x1f
call fcn.004f92dd
cmp eax, edi
pop ecx
je 0x436654
cmp dword [ebx + 0x1d1], edi
jne 0x43665c
lea eax, [ebx + 0x89f]
push 0x10
push eax
lea ecx, [ebp - 0x38]
call fcn.0050ed2b
mov byte [ebp - 4], 0x20
call fcn.0052dc74
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x20]
push dword [eax + 0x90]
call fcn.0051379e
push 0x5c
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x21
call fcn.0050f2e1
inc eax
lea ecx, [ebp - 0x20]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0050f269
push str.Money.ini
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x22
push eax
call fcn.005139c5
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x24
call fcn.00513730
and byte [ebp - 0x710], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x70f]
rep stosd dword es:[edi], eax
push dword [ebp - 0x28]
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x710]
push 0x400
push eax
push 0x5a4c3c
push str.Account
push str.Global
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [ebp - 0x710]
lea ecx, [ebp - 0x18]
push eax
call fcn.0051379e
push 0x592bc0
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x25
call fcn.0040b4cb
push dword [ebp - 0x18]
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x26
call fcn.0040b5a9
test eax, eax
je 0x436616
push 1
lea eax, [ebp + 0xc]
pop edi
lea ecx, [ebp - 0x54]
push edi
push eax
call fcn.0040b671
lea eax, [ebp + 8]
push 2
push eax
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x27
call fcn.0040b671
push dword [ebp - 0x1c]
mov byte [ebp - 4], 0x28
push dword [ebp + 0xc]
call fcn.004f8b05
pop ecx
test eax, eax
pop ecx
jne 0x4365d0
push dword [ebp - 0x38]
push dword [ebp + 8]
call fcn.004f8b05
pop ecx
test eax, eax
pop ecx
je 0x4365f8
lea ecx, [ebp - 0x54]
call fcn.0040b5fd
lea ecx, [ebp + 8]
mov edi, eax
mov byte [ebp - 4], 0x27
call fcn.00513730
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x26
call fcn.00513730
test edi, edi
jne 0x436588
jmp 0x436616
lea ecx, [ebp + 8]
mov dword [ebx + 0x1e1], edi
mov byte [ebp - 4], 0x27
call fcn.00513730
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x26
call fcn.00513730
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x25
call fcn.0040b56b
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x24
call fcn.00513730
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x21
call fcn.00513730
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x20
call fcn.00513730
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x1f
call fcn.00513730
xor edi, edi
cmp dword [ebx + 0x1d1], edi
je 0x436680
push dword [ebx + 0x1a0]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x436680
push edi
push 0x8005
push 0x111
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_PostMessageA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.00513730
jmp 0x4369d1
cmp cx, 4
jne 0x4366a5
or word [ebx + 0xa53], 0xf400
jmp 0x436a57
cmp cx, 0x805
jne 0x4366ba
or word [ebx + 0xa53], 0x10c0
jmp 0x436a57
mov ax, word [esi + 6]
test ah, 1
je 0x436705
cmp ax, 0x103
jne 0x4366f7
or word [ebx + 0xa53], 0xe400
lea edi, [ebx + 0xa53]
push 0x80a1
push 0xb
mov ecx, ebx
call fcn.00444b9c
cmp al, 0x31
jne 0x4369c9
or byte [edi + 1], 0x10
jmp 0x4369c9
or word [ebx + 0xa53], 0xf400
jmp 0x4369c9
cmp cx, 0x604
jne 0x436720
mov al, byte [esi + 0x2e]
push esi
cmp al, 0xff
mov ecx, ebx
jne 0x436769
call fcn.0043c1ba
jmp 0x436a57
cmp cx, 0x601
je 0x436855
cmp cx, 0x60b
je 0x436855
cmp cx, 5
je 0x436855
cmp cx, 0x802
je 0x436849
cmp cx, 0x803
je 0x436849
cmp cx, 0x611
jne 0x4367ba
and byte [ebx + 0xa53], 0x7f
jmp 0x436a57
call fcn.0043cd4a
mov eax, dword [0x59fe84]
mov dword [ebp + 8], eax
push 0xe039
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0x29
call fcn.00518bf6
mov eax, dword [ebp + 8]
cmp dword [eax - 8], 1
jle 0x4367ae
lea ecx, [ebp + 8]
call fcn.00513c52
mov eax, dword [ebp + 8]
cmp byte [eax + 1], 0x4d
je 0x4367ae
push edi
push edi
push edi
mov ecx, ebx
call fcn.0043ca4c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
jmp 0x436a52
cmp cx, 0x403
jne 0x43682d
lea eax, [esi + 0x2f]
push 2
push eax
mov ecx, ebx
call fcn.0043c640
cmp eax, edi
je 0x436a57
mov dword [eax + 0x1d], 1
push ecx
fld qword [esi + 0xe5]
push ecx
add eax, 8
fstp qword [esp]
push str._.3lf
push eax
call fcn.0050f689
add esp, 0x10
mov ecx, ebx
push 0x80a1
push 0x2c
call fcn.00444b9c
cmp al, 0x31
je 0x436a57
push dword [ebx + 0x56e]
push 0x103f0
push 0x111
push dword [ebx + 0x1c]
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x436a57
cmp cx, 0xb
je 0x43683d
cmp cx, 0xc
jne 0x4369c9
or byte [ebx + 0xa54], 0x18
jmp 0x4369c9
mov ecx, ebx
call fcn.0043eb86
jmp 0x4369c9
mov eax, dword [ebx + 0xaea]
lea edi, [ebx + 0xaea]
cmp dword [eax - 8], 0
je 0x436876
push eax
mov ecx, ebx
call fcn.004431dd
mov ecx, edi
call fcn.005136bb
mov eax, dword [ebp - 0x10]
cmp ax, 5
jne 0x436888
and byte [ebx + 0xa54], 0xef
jmp 0x4368b4
cmp ax, 0x601
jne 0x43689a
and byte [ebx + 0xa54], 0xfd
jmp 0x436a57
cmp ax, 0x60b
jne 0x4369c9
and byte [ebx + 0xa54], 0xed
cmp ax, ax
jne 0x4369c9
fld qword [esi + 0x62]
push ecx
push ecx
lea eax, [ebp - 0x65]
fstp qword [esp]
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.0051379e
mov ecx, ebx
call fcn.00448da8
jmp 0x4369c9
cmp cx, 0x604
jne 0x43690c
lea eax, [esi + 0x1a]
lea ecx, [ebp + 8]
push eax
call fcn.0051379e
push edi
push edi
push dword [ebp + 8]
mov ecx, ebx
mov dword [ebp - 4], 0x2a
call fcn.0043a3c1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00513730
mov ecx, dword [ebp - 0x10]
cmp cx, 5
jne 0x43696a
push dword [ebx + 0x4ba]
call dword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, edi
je 0x436959
push ecx
push ecx
fldz
mov ecx, ebx
fstp qword [esp]
push edi
call fcn.0043c572
mov al, byte [esi + 0xba]
and byte [ebp + 0xb], 0
mov byte [ebp + 0xa], al
lea eax, [ebp + 0xa]
push 2
push eax
mov ecx, ebx
call fcn.0043bf08
cmp eax, edi
je 0x43696a
lea ecx, [eax + 0x14]
call fcn.005136bb
jmp 0x43696a
push 1
push ecx
fldz
push ecx
mov ecx, ebx
fstp qword [esp]
push edi
call fcn.00440565
push dword [ebx + 0x4ba]
call dword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, edi
je 0x43699e
push edi
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push 0x5a4c3c
call fcn.0051379e
lea eax, [ebp + 8]
mov ecx, ebx
push eax
call fcn.0043be80
lea ecx, [ebp + 8]
call fcn.00513730
cmp word [ebp - 0x10], 0x27
jne 0x4369c9
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
cmp ax, 0x404
jne 0x4369bc
push 0x50
lea ecx, [esi + 0x1a]
pop edx
call fcn.004d6510
push edi
lea eax, [esi + 0x1a]
push edi
push eax
mov ecx, ebx
call fcn.0043a3c1
cmp word [ebp - 0x10], 0x605
jne 0x436a12
push 0x80a1
push 0x18
mov ecx, ebx
call fcn.00444b9c
cmp al, 0x31
jne 0x436a08
mov ecx, dword [ebx + 0x1187]
push 1
push str.WT_ShowWebYybNote
push str.System
mov eax, dword [ecx]
call dword [eax + 0xa4]
test eax, eax
je 0x436a08
mov ecx, ebx
call fcn.00441cfc
mov dword [ebx + 0xa49], 1
cmp word [ebp - 0x10], 5
jne 0x436a20
and dword [ebx + 0x7cb], 0
cmp word [ebp - 0x10], 0xab1
jne 0x436a57
lea eax, [esi + 0x1a]
lea ecx, [ebp + 8]
push eax
call fcn.0051379e
lea eax, [ebp + 8]
push 0x18e
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x2b
call fcn.004444b6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00513730
cmp word [esi + 6], 0xab0
jne 0x436b89
lea eax, [esi + 0x1a]
lea ecx, [ebp + 8]
push eax
call fcn.0051379e
push 0x3b
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0x2c
call fcn.00513bf7
mov edi, eax
cmp edi, 0xffffffff
jne 0x436a9b
push 0
lea eax, [esi + 0x1a]
push 0
push eax
mov ecx, ebx
call fcn.0043a3c1
jmp 0x436b7d
lea eax, [ebp - 0x1c]
push edi
push eax
lea ecx, [ebp + 8]
call fcn.0050f269
inc edi
lea eax, [ebp - 0x34]
push edi
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x2d
call fcn.0050f134
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x2e
call fcn.00513869
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x2d
call fcn.00513730
lea eax, [esi + 0xaa]
lea ecx, [ebp + 0xc]
push eax
call fcn.0051379e
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x2f
call fcn.0050f871
lea ecx, [ebp + 0xc]
call fcn.0050f77a
lea ecx, [ebp - 0x1c]
call fcn.0050f871
lea ecx, [ebp - 0x1c]
call fcn.0050f77a
lea ecx, [ebp + 8]
call fcn.0050f871
lea ecx, [ebp + 8]
call fcn.0050f77a
push 0
push 0
push dword [ebp + 8]
mov ecx, ebx
call fcn.0043a3c1
push dword [ebp + 0xc]
call fcn.004f9368
push dword [ebp - 0x1c]
mov edi, eax
call fcn.004f9368
pop ecx
cmp eax, 3
pop ecx
jne 0x436b65
cmp word [esi + 0x18], 0
jne 0x436b65
cmp edi, 0xaa1
jne 0x436b56
mov dword [ebx + 0xf2f], 1
cmp edi, 0xaa3
jne 0x436b65
and dword [ebx + 0xf2f], 0
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x2d
call fcn.00513730
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x2c
call fcn.00513730
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00513730
cmp word [ebp - 0x10], 0xaa1
je 0x436b9d
cmp word [ebp - 0x10], 0xaa3
jne 0x436d0f
cmp dword [ebx + 0xf1b], 0
je 0x436f85
lea edi, [esi + 0x1a]
lea ecx, [ebp + 8]
push edi
call fcn.0051379e
cmp word [ebp - 0x10], 0xaa1
mov dword [ebp - 4], 0x30
jne 0x436c22
cmp word [esi + 0x18], 0
je 0x436c22
cmp byte [edi], 0x4e
jne 0x436c22
cmp byte [esi + 0x1b], 0x4f
jne 0x436c22
lea eax, [ebp + 0xc]
push 2
push eax
lea ecx, [ebp + 8]
call fcn.0050f134
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x31
call fcn.00513869
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x30
call fcn.00513730
mov dword [ebx + 0xf2f], 1
push 0
push 0
push dword [ebp + 8]
mov ecx, ebx
call fcn.0043a3c1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
jmp 0x437077
push 0
push 0x5915fc
lea ecx, [ebp + 8]
call fcn.0050f311
test eax, eax
jl 0x436c08
cmp dword [ebx + 0xf27], 0
jne 0x436cdc
push edi
lea ecx, [ebp + 0xc]
call fcn.0051379e
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x32
call fcn.00437081
movzx eax, word [esi + 6]
mov dword [ebp - 0x50], eax
lea eax, [ebx + 0xf33]
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x33
call fcn.00513869
push edi
lea ecx, [ebp - 0x41]
call fcn.005138b9
mov ax, word [esi + 0x18]
lea ecx, [ebp - 0x48]
mov word [ebp - 0x43], ax
lea eax, [ebx + 0xf3c]
push eax
call fcn.00513869
mov al, byte [ebx + 0xf37]
mov ecx, ebx
mov byte [ebp - 0x44], al
lea eax, [ebp - 0x50]
push eax
call fcn.00443fd7
cmp word [esi + 0x18], 0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x50]
je 0x436cc9
call fcn.004370fc
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x30
call fcn.00513730
jmp 0x436c16
call fcn.004370fc
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x30
call fcn.00513730
jmp 0x436d03
mov ax, word [esi + 0x18]
push eax
push ecx
mov ecx, esp
mov dword [ebp + 0xc], esp
push edi
call fcn.0051379e
mov ecx, dword [ebx + 0xf27]
call fcn.0044aa9e
cmp word [esi + 0x18], 0
jne 0x436c16
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00513730
mov ax, word [esi + 6]
and ax, 0xff00
cmp ax, 0x900
jne 0x436d28
lea ecx, [ebx + 0xffe]
call fcn.00512e9f
mov ax, word [esi + 6]
and ax, 0xff00
cmp ax, 0x900
jne 0x436dbe
mov al, byte [esi + 0x58]
cmp al, 0x33
jne 0x436d57
push dword [esi + 0xc5]
lea eax, [esi + 0xc9]
mov ecx, ebx
push eax
call fcn.0043f89e
jmp 0x436dbe
cmp al, 0x34
jne 0x436dbe
mov edi, dword [esi + 0xc9]
lea ecx, [ebp + 8]
lea eax, [edi - 4]
push eax
lea eax, [esi + 0xcd]
push eax
call fcn.0050ed2b
lea eax, [edi - 4]
mov ecx, ebx
push eax
mov dword [ebp - 4], 0x34
push dword [ebp + 8]
call fcn.0043f89e
sub dword [esi + 0xc5], edi
push dword [esi + 0xc5]
lea eax, [esi + 0xc5]
lea eax, [edi + esi + 0xc9]
push eax
lea eax, [esi + 0xc9]
push eax
call fcn.004f87d0
or dword [ebp - 4], 0xffffffff
add esp, 0xc
lea ecx, [ebp + 8]
call fcn.00513730
cmp word [ebp - 0x10], 0x900
mov edi, str.retcode
jne 0x436ec7
cmp word [esi + 0x18], 0
jne 0x436f85
lea eax, [ebp + 0xc]
push 0x591478
push eax
mov ecx, ebx
call fcn.0043f819
lea eax, [ebp + 8]
push edi
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x35
call fcn.0043f819
push str.cx_jkxx
mov byte [ebp - 4], 0x36
push dword [ebp + 0xc]
call fcn.004fa2ef
pop ecx
test eax, eax
pop ecx
jne 0x436eaf
push 0x5914e0
push dword [ebp + 8]
call fcn.004f8b05
pop ecx
test eax, eax
pop ecx
jne 0x436eaf
mov esi, str.gtlx
lea eax, [ebp - 0x28]
push esi
push eax
mov ecx, ebx
call fcn.0043f819
lea eax, [ebp - 0x18]
push str.zzmc
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x37
call fcn.0043f819
push 0
lea ecx, [ebx + 0x1022]
push dword [ebp - 0x28]
mov byte [ebp - 4], 0x38
push esi
call fcn.0041fb62
mov eax, dword [ebp - 0x18]
cmp dword [eax - 8], 0
je 0x436e7f
push 0x9c70
push eax
mov ecx, ebx
call fcn.0043a76c
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x37
call fcn.00513730
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x36
call fcn.00513730
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x35
call fcn.00513730
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
jmp 0x437077
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x35
call fcn.00513730
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00513730
cmp word [ebp - 0x10], 0x90a
jne 0x436f71
cmp word [esi + 0x18], 0
jne 0x436f78
lea eax, [ebp - 0x30]
push 0x591478
push eax
mov ecx, ebx
call fcn.0043f819
lea eax, [ebp - 0x2c]
push edi
push eax
mov ecx, ebx
mov dword [ebp - 4], 0x39
call fcn.0043f819
push str.rzrq_cxzj
mov byte [ebp - 4], 0x3a
push dword [ebp - 0x30]
call fcn.004fa2ef
pop ecx
test eax, eax
pop ecx
jne 0x436f96
push 0x5914e0
push dword [ebp - 0x2c]
call fcn.004f8b05
pop ecx
test eax, eax
pop ecx
jne 0x436f59
mov ecx, dword [ebx + 0x14a4]
lea edi, [ebx + 0x14a4]
test ecx, ecx
je 0x436f59
call fcn.004bb234
mov ecx, dword [edi]
push 0
push dword [esi + 0xc5]
lea edx, [esi + 0xc9]
mov eax, dword [ecx]
push edx
call dword [eax + 0xbc]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x39
call fcn.00513730
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.00513730
cmp word [ebp - 0x10], 0
je 0x436f85
push esi
push 0x2000
mov ecx, ebx
call fcn.0043e9c7
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0xc
push str.rzrq_cxrzfz
push dword [ebp - 0x30]
call fcn.004fa2ef
pop ecx
test eax, eax
pop ecx
jne 0x436feb
push 0x5914e0
push dword [ebp - 0x2c]
call fcn.004f8b05
pop ecx
test eax, eax
pop ecx
jne 0x436f59
mov ecx, dword [ebx + 0x14a8]
lea edi, [ebx + 0x14a8]
test ecx, ecx
je 0x436f59
call fcn.004bb234
mov edi, dword [edi]
push 0
push dword [esi + 0xc5]
lea ecx, [esi + 0xc9]
mov eax, dword [edi]
push ecx
mov ecx, edi
jmp 0x436f53
push str.rzrq_khjy
push dword [ebp - 0x30]
call fcn.004fa2ef
pop ecx
test eax, eax
pop ecx
jne 0x436f59
push 0x5914e0
push dword [ebp - 0x2c]
call fcn.004f8b05
pop ecx
test eax, eax
pop ecx
jne 0x437036
mov eax, dword [ebx + 0xa55]
lea ecx, [ebx + 0xa55]
test al, 1
jne 0x437064
or al, 1
push 0x52
mov dword [ecx], eax
push 0x20
mov ecx, ebx
call fcn.00437141
jmp 0x437064
lea eax, [ebp - 0x38]
push str.retmsg
push eax
mov ecx, ebx
call fcn.0043f819
push 0
push 0
push dword [ebp - 0x38]
mov ecx, ebx
mov byte [ebp - 4], 0x3b
call fcn.0043a3c1
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x3a
call fcn.00513730
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x39
call fcn.00513730
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.00513730
jmp 0x436f85