Function at 0x4ac350
Capabilities:
Check if file exists
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
mov eax, dword [0x53ac84]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, ecx
push esi
push edi
mov edi, dword [ebp + 0xc]
test eax, eax
je 0x4acac4
test edi, edi
je 0x4acac4
push eax
lea ecx, [ebp - 0x28]
call fcn.004852e0
mov esi, dword [ebp - 0x28]
lea eax, [ebp - 0x24]
push esi
push eax
call fcn.00495130
add esp, 8
lea ecx, [ebp - 0x3c]
push 0
call fcn.004b0240
lea eax, [ebp - 0x3c]
push eax
push edi
call fcn.00493d90
add esp, 8
call fcn.00483350
mov ecx, eax
test ecx, ecx
je 0x4ad008
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push str.callbackName
call fcn.004b0750
push eax
call fcn.00493c20
mov eax, dword [0x543020]
add esp, 8
test eax, eax
jne 0x4ac40b
push 0x543eb0
push 0x2c
call fcn.004c211f
add esp, 8
test eax, eax
je 0x4ac404
mov ecx, eax
call fcn.00485620
jmp 0x4ac406
xor eax, eax
mov dword [0x543020], eax
push dword [ebp - 0x24]
push str.chrome_web_call__s
push str.web_view_base
push eax
call fcn.00486aa0
push str.offline
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 0x18
or edi, 0xffffffff
test eax, eax
jne 0x4ac4d6
add ebx, 0xffffffe8
push 3
mov ecx, ebx
call fcn.004af600
call fcn.00483350
mov ecx, eax
test ecx, ecx
je 0x4ad008
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
push 0x4fa0c8
call fcn.004b0750
push eax
call fcn.00493c20
mov eax, dword [ebp - 0x2c]
add esp, 8
cmp dword [eax - 0xc], 0
je 0x4ac4b3
lea eax, [ebp - 0x1c]
mov ecx, ebx
push eax
call fcn.004ae5e0
mov ecx, ebx
push dword [eax]
push dword [ebp - 0x2c]
call fcn.004ae340
mov edx, dword [ebp - 0x1c]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4ac4b3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4aca6e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4aca6e
push str.getHttpRequest
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 8
test eax, eax
jne 0x4ac736
push 0x543eb0
push 8
call fcn.004c211f
mov edi, eax
add esp, 8
test edi, edi
je 0x4ac550
push 0x543eb0
push 0xe8
call fcn.004c211f
add esp, 8
test eax, eax
je 0x4ac534
sub esp, 8
mov ecx, esp
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov ecx, eax
call fcn.00485430
jmp 0x4ac536
xor eax, eax
push dword [ebp - 8]
mov ecx, edi
mov dword [edi], 0
push eax
mov dword [edi + 4], 0
call fcn.004a7c10
jmp 0x4ac552
xor edi, edi
mov dword [ebp - 8], 0
lea ecx, [ebp - 0xc]
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push edi
call fcn.004a7cb0
call fcn.0049a830
mov ecx, dword fs:[0x2c]
mov edi, eax
mov edx, dword [0x5441c8]
mov edx, dword [ecx + edx*4]
mov ecx, dword [0x543e00]
cmp ecx, dword [edx + 4]
jg 0x4ad012
cmp dword [edi + 0x94], 0
jne 0x4ac5bc
cmp dword [edi + 0xac], 0
jne 0x4ac5bc
cmp dword [edi + 0xc4], 0
jne 0x4ac5bc
mov ecx, 0x543dfc
call fcn.00483b50
jmp 0x4ac601
cmp dword [edi + 0xc8], 8
lea eax, [edi + 0xb4]
jb 0x4ac5cd
mov eax, dword [eax]
cmp dword [edi + 0xb0], 8
lea ecx, [edi + 0x9c]
jb 0x4ac5de
mov ecx, dword [ecx]
add edi, 0x84
cmp dword [edi + 0x14], 8
jb 0x4ac5ec
mov edi, dword [edi]
push eax
push ecx
push edi
push str.Q_s_T_s_S_s
push 0x543dfc
call fcn.00483270
add esp, 0x14
push dword [0x543dfc]
lea ecx, [ebp - 0x1c]
call fcn.00483710
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
push eax
mov dword [ebp - 0x40], eax
call fcn.00483ae0
mov edi, esp
mov dword [ebp - 0x1c], eax
push eax
call fcn.00483ae0
add eax, 0x10
add esp, 4
mov dword [edi], eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call fcn.00487030
push eax
call fcn.00487400
mov edx, dword [ebp - 0x1c]
or edi, 0xffffffff
add esp, 4
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4ac65e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x18]
call fcn.00483790
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00493f80
push dword [ebp - 0x18]
lea eax, [ebp - 0x1c]
push eax
call fcn.00495130
add esp, 0x10
push dword [eax]
push dword [ebp - 0x2c]
push str.request_param__s__s
push str.getHttpRequest
call fcn.00486540
push eax
call fcn.00486aa0
mov edx, dword [ebp - 0x1c]
add esp, 0x14
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4ac6b9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x53a048
lea eax, [ebp - 0x3c]
lea ecx, [ebx - 0x18]
push eax
mov eax, dword [ecx]
call dword [eax + 0x18]
mov ecx, dword [ebp - 8]
push eax
sub esp, 8
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
test ecx, ecx
je 0x4ac6e8
lock inc dword [ecx + 4]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
mov dword [eax + 4], ecx
call fcn.0048e670
mov edx, dword [ebp - 0x18]
add esp, 0x14
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4ac712
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4ac729
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0xc]
call fcn.004ab600
jmp 0x4aca6e
push str.getSystemInfo
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 8
test eax, eax
jne 0x4ac75b
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebx - 0x18]
call fcn.004ae750
jmp 0x4aceb8
push str.openUrl
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 8
test eax, eax
jne 0x4ac7bd
lea ecx, [ebp - 0x3c]
call fcn.004b17c0
test al, al
je 0x4aca6e
lea ecx, [ebp - 0x18]
call fcn.00483790
lea eax, [ebp - 0x18]
push eax
push 0x4fa0c8
lea ecx, [ebp - 0x3c]
call fcn.004b0750
push eax
call fcn.00493c20
add esp, 8
test eax, eax
je 0x4ac7b0
push dword [ebp - 0x18]
call fcn.00490530
add esp, 4
lea ecx, [ebp - 0x18]
call fcn.00482970
jmp 0x4aca6e
push str.openLoginWnd
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 8
test eax, eax
jne 0x4ac7ee
push 1
push dword [ebx - 0x14]
call dword [sym.imp.USER32.dll_GetParent]
push eax
call fcn.0049a830
mov ecx, eax
call fcn.004ac0e0
jmp 0x4aca6e
push str.signOut
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 8
test eax, eax
jne 0x4ac92f
call fcn.0049a830
mov ebx, eax
call fcn.00483350
test eax, eax
je 0x4ad008
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push str.__user_server___user_logout
push eax
call fcn.00483270
add esp, 8
push 0
push str.UserServer_LoginServer_Class
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x4ac8de
call fcn.00483350
test eax, eax
je 0x4ad008
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
cmp dword [ebx + 0x140], 8
mov dword [ebp - 0x20], eax
lea eax, [ebx + 0x12c]
jb 0x4ac87b
mov eax, dword [eax]
mov edi, dword [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x20]
push str.__s___s
push eax
call fcn.0048bf60
mov esi, dword [ebp - 0x20]
push esi
push 0x402
push dword [ebp - 0x1c]
call fcn.004a5c60
add esp, 0x1c
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4ac8ba
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x28]
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4aca6e
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4aca6e
push dword [ebx + 4]
lea eax, [ebp - 0x18]
push str.___ipc_d
push eax
call fcn.0048bf60
add ebx, 0x12c
add esp, 0xc
mov eax, ebx
cmp dword [ebx + 0x14], 8
jb 0x4ac902
mov eax, dword [ebx]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4ac92a
cmp dword [ebx + 0x14], 8
jb 0x4ac915
mov ebx, dword [ebx]
mov edi, dword [ebp - 0x18]
push 5
push 0
push edi
push ebx
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x4ac8bd
mov edi, dword [ebp - 0x18]
jmp 0x4ac8bd
push str.onLogin
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 8
test eax, eax
jne 0x4ac954
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebx + 0x14]
call fcn.004837c0
jmp 0x4aca6e
push str.onLogout
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 8
test eax, eax
jne 0x4ac979
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebx + 0x18]
call fcn.004837c0
jmp 0x4aca6e
push str.onVipClose
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 8
test eax, eax
jne 0x4ac99e
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebx + 0x1c]
call fcn.004837c0
jmp 0x4aca6e
push str.showDevTools
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 8
test eax, eax
jne 0x4ac9be
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x40]
jmp 0x4aceac
push str.openVipPayWnd
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 8
test eax, eax
jne 0x4acad7
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x3c]
lea eax, [ebp - 0x18]
push eax
push str.whereShow
call fcn.004b0750
push eax
call fcn.00493aa0
add esp, 8
cmp dword [ebp - 0x18], 0
jg 0x4aca00
mov dword [ebp - 0x18], 5
lea ecx, [ebp - 0x28]
call fcn.00483790
lea eax, [ebp - 0x28]
push eax
push 0x4fa0c8
lea ecx, [ebp - 0x3c]
call fcn.004b0750
push eax
call fcn.00493c20
add esp, 8
lea eax, [ebp - 0x20]
mov ecx, 0x543c74
push 0x4fa1f8
push eax
call fcn.004a7240
push dword [ebp - 0x28]
push dword [ebp - 0x20]
push dword [ebp - 0x18]
push 1
push 0
call fcn.0049a830
mov ecx, eax
call fcn.004adda0
lea ecx, [ebp - 0x20]
call fcn.00482970
lea ecx, [ebp - 0x28]
call fcn.00482970
mov eax, dword [ebx - 0x18]
lea ecx, [ebx - 0x18]
lea edx, [ebp - 0x3c]
push edx
push dword [ebp - 0x24]
call dword [eax + 0x1c]
mov edx, dword [ebp - 0x2c]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4aca89
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x3c]
call fcn.004b0440
mov edx, dword [ebp - 0x24]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4acaac
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4acac4
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004c20c9
mov esp, ebp
pop ebp
ret 0x10
push str.startMove
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 8
test eax, eax
jne 0x4acb48
call dword [sym.imp.USER32.dll_GetMessagePos]
mov edi, eax
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
lea eax, [ebp - 0x14]
push eax
push dword [ebx - 0x14]
call dword [sym.imp.USER32.dll_GetWindowRect]
movsx ecx, di
sub ecx, dword [ebp - 0x14]
shr edi, 0x10
push 0x3ea
push dword [ebx - 0x14]
movsx eax, di
sub eax, dword [ebp - 0x10]
mov dword [ebx + 0x28], ecx
mov dword [ebx + 0x2c], eax
call dword [sym.imp.USER32.dll_KillTimer]
push 0
push 0xa
push 0x3ea
push dword [ebx - 0x14]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x4aca6e
push str.stopMove
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 8
test eax, eax
jne 0x4acb6f
push 0x3ea
push dword [ebx - 0x14]
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x4aca6e
push str.closeWebView
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 8
test eax, eax
jne 0x4acbb1
lea ecx, [ebx - 0x18]
call fcn.004ae390
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebx - 0x18]
call fcn.004ae5e0
lea ecx, [ebx - 0x18]
push dword [eax]
push dword [ebp - 0x2c]
call fcn.004ae340
lea ecx, [ebp - 0x1c]
call fcn.00482970
jmp 0x4aca6e
push str.runCommand
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 8
test eax, eax
jne 0x4acc80
lea ecx, [ebp - 0x20]
call fcn.00483790
lea ecx, [ebp - 0x18]
call fcn.00483790
lea ecx, [ebp - 0x28]
call fcn.00483790
lea eax, [ebp - 0x20]
push eax
push str.path
lea ecx, [ebp - 0x3c]
call fcn.004b0750
push eax
call fcn.00493c20
add esp, 8
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x3c]
push eax
push str.param
call fcn.004b0750
push eax
call fcn.00493c20
add esp, 8
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x3c]
push eax
push 0x4f98b8
call fcn.004b0750
push eax
call fcn.00493c20
add esp, 8
mov ecx, 0x543c74
push dword [ebp - 0x28]
push dword [ebp - 0x18]
push dword [ebp - 0x20]
call fcn.004a7400
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebx - 0x18]
call fcn.004ae5e0
lea ecx, [ebx - 0x18]
push dword [eax]
push dword [ebp - 0x2c]
call fcn.004ae340
lea ecx, [ebp - 0x1c]
call fcn.00482970
lea ecx, [ebp - 0x28]
call fcn.00482970
lea ecx, [ebp - 0x18]
call fcn.00482970
lea ecx, [ebp - 0x20]
call fcn.00482970
jmp 0x4aca6e
push str.encryptData
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 8
test eax, eax
jne 0x4acd9c
push 7
lea ecx, [ebp - 0x50]
call fcn.004b0240
push 0x53a048
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0048c120
add esp, 0xc
lea ecx, [ebp - 0x14]
push 0
call fcn.004b0240
push str.code
lea ecx, [ebp - 0x14]
call fcn.004b0750
push eax
push 0
call fcn.004939e0
add esp, 8
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0x14]
push eax
push str.data
call fcn.004b0750
mov ecx, eax
call fcn.004b0510
push str.method
lea ecx, [ebp - 0x3c]
call fcn.004b0750
mov ecx, eax
call fcn.004b17e0
test al, al
je 0x4acd46
push str.method
lea ecx, [ebp - 0x3c]
call fcn.004b0750
mov ecx, eax
call fcn.004b0fc0
push eax
lea ecx, [ebp - 0x60]
call fcn.004b0200
lea eax, [ebp - 0x60]
push eax
push str.method
lea ecx, [ebp - 0x14]
call fcn.004b0750
mov ecx, eax
call fcn.004b0510
lea ecx, [ebp - 0x60]
call fcn.004b0440
lea ecx, [ebp - 0x20]
call fcn.00483790
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00494040
push dword [ebp - 0x20]
lea eax, [ebp - 0x1c]
push eax
call fcn.00495130
add esp, 0x10
lea ecx, [ebx - 0x18]
push dword [eax]
push dword [ebp - 0x2c]
call fcn.004ae340
lea ecx, [ebp - 0x1c]
call fcn.00482970
lea ecx, [ebp - 0x20]
call fcn.00482970
lea ecx, [ebp - 0x14]
call fcn.004b0440
lea ecx, [ebp - 0x50]
call fcn.004b0440
jmp 0x4aca6e
push str.decryptData
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 8
test eax, eax
jne 0x4ace8e
lea ecx, [ebp - 0x28]
call fcn.00483790
lea eax, [ebp - 0x28]
push eax
push str.params
lea ecx, [ebp - 0x3c]
call fcn.004b0750
push eax
call fcn.00493f80
add esp, 8
lea ecx, [ebp - 0x50]
push 7
call fcn.004b0240
push 0
push 0x53a048
lea eax, [ebp - 0x50]
push eax
push dword [ebp - 0x28]
call fcn.00484840
add esp, 0x10
lea ecx, [ebp - 0x14]
push 0
call fcn.004b0240
push str.code
lea ecx, [ebp - 0x14]
call fcn.004b0750
push eax
push 0
call fcn.004939e0
add esp, 8
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0x14]
push eax
push str.data
call fcn.004b0750
mov ecx, eax
call fcn.004b0510
lea ecx, [ebp - 0x20]
call fcn.00483790
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00494040
push dword [ebp - 0x20]
lea eax, [ebp - 0x1c]
push eax
call fcn.00495130
add esp, 0x10
lea ecx, [ebx - 0x18]
push dword [eax]
push dword [ebp - 0x2c]
call fcn.004ae340
lea ecx, [ebp - 0x1c]
call fcn.00482970
lea ecx, [ebp - 0x20]
call fcn.00482970
lea ecx, [ebp - 0x14]
call fcn.004b0440
lea ecx, [ebp - 0x50]
call fcn.004b0440
lea ecx, [ebp - 0x28]
call fcn.00482970
jmp 0x4aca6e
push str.hideWebView
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 8
test eax, eax
jne 0x4aced2
push eax
push dword [ebx - 0x14]
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebx - 0x18]
call fcn.004ae5e0
push dword [eax]
lea ecx, [ebx - 0x18]
push dword [ebp - 0x2c]
call fcn.004ae340
lea ecx, [ebp - 0x1c]
call fcn.00482970
jmp 0x4aca6e
push str.feedback
push dword [ebp - 0x24]
call fcn.004c7e54
add esp, 8
test eax, eax
jne 0x4aca5e
lea ecx, [ebp - 0x28]
call fcn.00483790
lea ecx, [ebp - 0x20]
call fcn.00483790
lea eax, [ebp - 0x28]
push eax
push 0x4fba10
lea ecx, [ebp - 0x3c]
call fcn.004b0750
push eax
call fcn.00493c20
add esp, 8
test eax, eax
je 0x4acff3
lea eax, [ebp - 0x20]
push eax
push str.nvip
lea ecx, [ebp - 0x3c]
call fcn.004b0750
push eax
call fcn.00493c20
add esp, 8
test eax, eax
je 0x4acff3
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x4d8
push eax
push 0x51b82c
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x40], 0x320
call fcn.004b0750
push eax
call fcn.00493aa0
add esp, 8
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0x3c]
push eax
push 0x51b834
call fcn.004b0750
push eax
call fcn.00493aa0
add esp, 8
lea eax, [ebp - 0x18]
mov ecx, 0x543c74
push 0x4fa1f8
push eax
call fcn.004a7240
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], 0
jne 0x4acfae
push 4
push str.main
lea ecx, [ebp - 0x18]
call fcn.00483cb0
mov eax, dword [ebp - 0x18]
push dword [ebp - 0x40]
push dword [ebp - 0x1c]
push eax
push dword [ebp - 0x20]
push dword [ebp - 0x28]
push dword [ebx - 0x14]
call fcn.0049a830
mov ecx, eax
call fcn.004adb70
lea eax, [ebp - 8]
push eax
lea ecx, [ebx - 0x18]
call fcn.004ae5e0
lea ecx, [ebx - 0x18]
push dword [eax]
push dword [ebp - 0x2c]
call fcn.004ae340
lea ecx, [ebp - 8]
call fcn.00482970
lea ecx, [ebp - 0x18]
call fcn.00482970
lea ecx, [ebp - 0x20]
call fcn.00482970
lea ecx, [ebp - 0x28]
call fcn.00482970
jmp 0x4aca6e
push 0x80004005
call fcn.004831b0
push 0x543e00
call fcn.004c1fd5
add esp, 4
cmp dword [0x543e00], 0xffffffff
jne 0x4ac595
call fcn.00483350
mov ecx, eax
test ecx, ecx
jne 0x4ad041
push 0x80004005
call fcn.004831b0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
push 0x4f7c50
mov dword [0x543dfc], eax
call fcn.004c1d8a
push 0x543e00
call fcn.004c1f8b
add esp, 8
jmp 0x4ac595