Function at 0x4f9e20
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x7ad85f
mov eax, dword fs:[0]
push eax
mov eax, 0x2280
call fcn.00725f60
mov eax, dword [0x89b044]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x20e8], ecx
mov dword [ebp - 0x20e4], 0
push 0x7ec5ec
mov ecx, dword [ebp + 8]
call fcn.0059d600
movzx eax, al
test eax, eax
je 0x4fc7cf
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [ecx + 0x108]
cmp eax, dword [edx + 0x44]
jne 0x4f9f38
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1664], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x20ec], eax
mov ecx, dword [ebp - 0x20ec]
mov dword [ebp - 0x20f0], ecx
mov dword [ebp - 4], 0
push 1
push 0
push str.charge
push 0x7ec608
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1668], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x20f4], eax
mov edx, dword [ebp - 0x20f4]
mov dword [ebp - 0x20f8], edx
mov dword [ebp - 4], 1
push 1
push 0
push 0x7ec61c
push 0x7ec628
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
call fcn.0043b4e0
mov ecx, eax
call fcn.00518920
jmp 0x4fc7ca
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x33c]
jne 0x4f9fae
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x166c], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x20fc], eax
mov eax, dword [ebp - 0x20fc]
mov dword [ebp - 0x2100], eax
mov dword [ebp - 4], 2
push 1
push 0
push str.capture
push 0x7ec650
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.004fd920
jmp 0x4fc7ca
push 0x7ec664
lea ecx, [ebp - 0x16f4]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x108]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x108]
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x2104], eax
mov ecx, dword [ebp - 0x2104]
mov dword [ebp - 0x2108], ecx
mov dword [ebp - 4], 3
mov ecx, dword [ebp - 0x2108]
call fcn.0059d600
mov byte [ebp - 0x166d], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x16f4]
call fcn.0059cc80
movzx edx, byte [ebp - 0x166d]
test edx, edx
je 0x4fa1f5
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x110]
mov edx, dword [eax + 0x114]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], edx
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx - 0x10]
push edx
call dword [sym.imp.USER32.dll_ClientToScreen]
push 1
call fcn.0043ce50
mov ecx, eax
call fcn.0046fe80
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
call fcn.004662c0
test eax, eax
jne 0x4fa0b9
lea ecx, [ebp - 0x1714]
call fcn.004808d0
mov dword [ebp - 0x210c], eax
mov eax, dword [ebp - 0x210c]
mov dword [ebp - 0x2110], eax
mov dword [ebp - 4], 4
mov ecx, dword [ebp - 0x2110]
push ecx
push 0x7ec678
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.005038e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1714]
call fcn.0043b460
jmp 0x4fa1f0
mov ecx, dword [ebp - 0x18]
call fcn.00466360
test eax, eax
je 0x4fa12d
lea ecx, [ebp - 0x394]
call fcn.004cbd00
mov dword [ebp - 4], 5
push 0x7ec67c
lea ecx, [ebp - 0x1718]
call fcn.004068d0
mov byte [ebp - 4], 6
lea edx, [ebp - 0x1718]
push edx
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax - 0x10]
push ecx
lea ecx, [ebp - 0x394]
call fcn.004cbe70
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1718]
call fcn.00405ef0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x394]
call fcn.004cbde0
jmp 0x4fa1f0
push 0x8a15a4
push 0x2c0
call fcn.0072a268
add esp, 8
mov dword [ebp - 0x1720], eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x1720], 0
je 0x4fa192
push 0x478
push ecx
mov ecx, esp
mov dword [ebp - 0x1724], esp
push str.MenuUser.xml
call fcn.004068d0
mov dword [ebp - 0x2114], eax
mov ecx, dword [ebp - 0x1720]
call fcn.00508290
mov dword [ebp - 0x2118], eax
mov edx, dword [ebp - 0x2118]
mov dword [ebp - 0x211c], edx
jmp 0x4fa19c
mov dword [ebp - 0x211c], 0
mov eax, dword [ebp - 0x211c]
mov dword [ebp - 0x171c], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x171c]
mov dword [ebp - 0x398], ecx
push 0
mov edx, dword [ebp - 0x20e8]
mov eax, dword [edx - 0x10]
push eax
mov ecx, dword [ebp - 0x398]
call fcn.0050a660
push 1
push 0
push 0
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x14]
push edx
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x398]
add ecx, 4
call fcn.00508bb0
jmp 0x4fc7ca
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x3c]
jne 0x4fa310
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x110]
mov edx, dword [eax + 0x114]
mov dword [ebp - 0x3a0], ecx
mov dword [ebp - 0x39c], edx
lea eax, [ebp - 0x3a0]
push eax
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx - 0x10]
push edx
call dword [sym.imp.USER32.dll_ClientToScreen]
push 0x8a15a4
push 0x2c0
call fcn.0072a268
add esp, 8
mov dword [ebp - 0x172c], eax
mov dword [ebp - 4], 8
cmp dword [ebp - 0x172c], 0
je 0x4fa2a4
push 0x478
push ecx
mov ecx, esp
mov dword [ebp - 0x1730], esp
push str.MenuMore.xml
call fcn.004068d0
mov dword [ebp - 0x2120], eax
mov ecx, dword [ebp - 0x172c]
call fcn.00508290
mov dword [ebp - 0x2124], eax
mov eax, dword [ebp - 0x2124]
mov dword [ebp - 0x2128], eax
jmp 0x4fa2ae
mov dword [ebp - 0x2128], 0
mov ecx, dword [ebp - 0x2128]
mov dword [ebp - 0x1728], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x1728]
mov dword [ebp - 0x3a4], edx
push 0
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax - 0x10]
push ecx
mov ecx, dword [ebp - 0x3a4]
call fcn.0050a660
push 1
push 0
push 0
mov edx, dword [ebp - 0x39c]
push edx
mov eax, dword [ebp - 0x3a0]
sub eax, 0x64
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x3a4]
add ecx, 4
call fcn.00508bb0
jmp 0x4fc7ca
push 0x7ec6c8
lea ecx, [ebp - 0x17b8]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x108]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x108]
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x212c], eax
mov ecx, dword [ebp - 0x212c]
mov dword [ebp - 0x2130], ecx
mov dword [ebp - 4], 9
mov ecx, dword [ebp - 0x2130]
call fcn.0059d600
mov byte [ebp - 0x1731], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x17b8]
call fcn.0059cc80
movzx edx, byte [ebp - 0x1731]
test edx, edx
je 0x4fa565
push 0
call fcn.0043ce50
mov ecx, eax
call fcn.0046fe80
mov dword [ebp - 0x3a8], eax
mov ecx, dword [ebp - 0x3a8]
call fcn.004662c0
test eax, eax
jne 0x4fa3f8
lea ecx, [ebp - 0x17dc]
call fcn.004808d0
mov dword [ebp - 0x2134], eax
mov eax, dword [ebp - 0x2134]
mov dword [ebp - 0x2138], eax
mov dword [ebp - 4], 0xa
mov ecx, dword [ebp - 0x2138]
push ecx
push 0x7ec6d8
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.005038e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x17dc]
call fcn.0043b460
jmp 0x4fa560
mov ecx, dword [ebp - 0x3a8]
call fcn.00466360
test eax, eax
je 0x4fa46f
lea ecx, [ebp - 0x724]
call fcn.004cbd00
mov dword [ebp - 4], 0xb
push str.subuser
lea ecx, [ebp - 0x17e0]
call fcn.004068d0
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x17e0]
push edx
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax - 0x10]
push ecx
lea ecx, [ebp - 0x724]
call fcn.004cbe70
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x17e0]
call fcn.00405ef0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x724]
call fcn.004cbde0
jmp 0x4fa560
mov ecx, dword [ebp - 0x3a8]
add ecx, 0xc0
call fcn.004808b0
movzx edx, al
test edx, edx
je 0x4fa4ec
lea ecx, [ebp - 0xaf4]
call fcn.004c2c10
mov dword [ebp - 4], 0xd
push 0x7ec6ec
lea ecx, [ebp - 0x17e4]
call fcn.004068d0
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x17e4]
push eax
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx - 0x10]
push edx
lea ecx, [ebp - 0xaf4]
call fcn.004c2e60
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x17e4]
call fcn.00405ef0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaf4]
call fcn.004c2d60
jmp 0x4fa560
push 0x358
call fcn.00704930
add esp, 4
mov dword [ebp - 0x17ec], eax
mov dword [ebp - 4], 0xf
cmp dword [ebp - 0x17ec], 0
je 0x4fa522
mov ecx, dword [ebp - 0x17ec]
call fcn.0053ed70
mov dword [ebp - 0x213c], eax
jmp 0x4fa52c
mov dword [ebp - 0x213c], 0
mov eax, dword [ebp - 0x213c]
mov dword [ebp - 0x17e8], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x17e8]
mov dword [ebp - 0xaf8], ecx
mov edx, dword [ebp - 0x20e8]
mov eax, dword [edx - 0x10]
push eax
mov ecx, dword [ebp - 0xaf8]
call fcn.0053ee60
jmp 0x4fc7ca
push 0x7ec6f0
lea ecx, [ebp - 0x1874]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x108]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x108]
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x2140], eax
mov ecx, dword [ebp - 0x2140]
mov dword [ebp - 0x2144], ecx
mov dword [ebp - 4], 0x10
mov ecx, dword [ebp - 0x2144]
call fcn.0059d600
mov byte [ebp - 0x17ed], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1874]
call fcn.0059cc80
movzx edx, byte [ebp - 0x17ed]
test edx, edx
je 0x4fa764
push 1
call fcn.0043ce50
mov ecx, eax
call fcn.0046fe80
mov dword [ebp - 0xafc], eax
mov ecx, dword [ebp - 0xafc]
call fcn.004662c0
test eax, eax
je 0x4fa683
mov ecx, dword [ebp - 0xafc]
call fcn.00466360
test eax, eax
je 0x4fa670
lea ecx, [ebp - 0xe74]
call fcn.004cbd00
mov dword [ebp - 4], 0x11
push 0x7ec6fc
lea ecx, [ebp - 0x1878]
call fcn.004068d0
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x1878]
push eax
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx - 0x10]
push edx
lea ecx, [ebp - 0xe74]
call fcn.004cbe70
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1878]
call fcn.00405ef0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe74]
call fcn.004cbde0
jmp 0x4fa67e
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.00500460
jmp 0x4fa75f
mov dword [ebp - 0x18a4], fcn.00500460
mov dword [ebp - 0x18a0], 0
push 0
mov eax, dword [ebp - 0x20e8]
sub eax, 0x14
push eax
mov ecx, dword [ebp - 0x18a0]
push ecx
mov edx, dword [ebp - 0x18a4]
push edx
lea eax, [ebp - 0x18b4]
push eax
call fcn.00510030
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x189c]
call fcn.00510080
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0x189c]
push ecx
push 0x7ec708
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.005038e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x189c]
call fcn.0043b460
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x18b8], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x2148], eax
mov edx, dword [ebp - 0x2148]
mov dword [ebp - 0x214c], edx
mov dword [ebp - 4], 0x14
push 1
push 0
push 0x7ec70c
push str.sign_btn
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.004020d0
jmp 0x4fc7ca
push 0x7ec730
lea eax, [ebp - 0x1940]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
mov edx, dword [edx]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x2150], eax
mov ecx, dword [ebp - 0x2150]
mov dword [ebp - 0x2154], ecx
mov dword [ebp - 4], 0x15
mov ecx, dword [ebp - 0x2154]
call fcn.0059d600
mov byte [ebp - 0x18b9], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1940]
call fcn.0059cc80
movzx edx, byte [ebp - 0x18b9]
test edx, edx
je 0x4fa977
push 1
call fcn.0043ce50
mov ecx, eax
call fcn.0046fe80
mov dword [ebp - 0xe78], eax
mov ecx, dword [ebp - 0xe78]
call fcn.004662c0
test eax, eax
je 0x4fa8b5
mov ecx, dword [ebp - 0xe78]
call fcn.00466360
test eax, eax
je 0x4fa86f
lea ecx, [ebp - 0x11f4]
call fcn.004cbd00
mov dword [ebp - 4], 0x16
push 0x7ec73c
lea ecx, [ebp - 0x1944]
call fcn.004068d0
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x1944]
push eax
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx - 0x10]
push edx
lea ecx, [ebp - 0x11f4]
call fcn.004cbe70
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x1944]
call fcn.00405ef0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x11f4]
call fcn.004cbde0
jmp 0x4fa8b0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1948], esp
push 0x7ec748
call fcn.00403bf0
mov dword [ebp - 0x2158], eax
mov eax, dword [ebp - 0x2158]
mov dword [ebp - 0x215c], eax
mov dword [ebp - 4], 0x18
call fcn.0043b4e0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.005187b0
jmp 0x4fa972
push 0
push str.http:__wan.ludashi.com_ucenterV2_point
call fcn.0043b4e0
push eax
push fcn.005187b0
lea ecx, [ebp - 0x1978]
push ecx
call fcn.005100c0
add esp, 4
mov edx, esp
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov eax, dword [eax + 8]
mov dword [edx + 8], eax
lea ecx, [ebp - 0x196c]
call fcn.00510110
mov dword [ebp - 4], 0x19
lea ecx, [ebp - 0x196c]
push ecx
push 0x7ec7e8
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.005038e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x196c]
call fcn.0043b460
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x197c], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x2160], eax
mov edx, dword [ebp - 0x2160]
mov dword [ebp - 0x2164], edx
mov dword [ebp - 4], 0x1a
push 1
push 0
push 0x7ec7ec
push str.jifen_btn
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.004020d0
jmp 0x4fc7ca
push 0x7ec810
lea eax, [ebp - 0x1a04]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
mov edx, dword [edx]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x2168], eax
mov ecx, dword [ebp - 0x2168]
mov dword [ebp - 0x216c], ecx
mov dword [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x216c]
call fcn.0059d600
mov byte [ebp - 0x197d], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a04]
call fcn.0059cc80
movzx edx, byte [ebp - 0x197d]
test edx, edx
je 0x4faaf8
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1a08], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x2170], eax
mov eax, dword [ebp - 0x2170]
mov dword [ebp - 0x2174], eax
mov dword [ebp - 4], 0x1c
push 1
push 0
push 0x7ec83c
push 0x7ec844
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
push 0x7ec858
lea ecx, [ebp - 0x1a0c]
call fcn.004068d0
mov dword [ebp - 4], 0x1d
push str.http:__wan.ludashi.com_vip_intro
lea ecx, [ebp - 0x1a10]
call fcn.004068d0
mov byte [ebp - 4], 0x1e
push 0x7ec8a4
lea ecx, [ebp - 0x1a14]
call fcn.004068d0
mov byte [ebp - 4], 0x1f
push 0x7ec8b0
lea ecx, [ebp - 0x1a18]
call fcn.004068d0
mov byte [ebp - 4], 0x20
push 0
push 1
push 0
lea ecx, [ebp - 0x1a0c]
push ecx
lea edx, [ebp - 0x1a10]
push edx
lea eax, [ebp - 0x1a14]
push eax
lea ecx, [ebp - 0x1a18]
push ecx
call fcn.0043b4e0
mov ecx, eax
call fcn.00517e60
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x1a18]
call fcn.00405ef0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1a14]
call fcn.00405ef0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1a10]
call fcn.00405ef0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a0c]
call fcn.00405ef0
jmp 0x4fc7ca
push 0x7ec8b4
lea edx, [ebp - 0x1aa0]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x108]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x2178], eax
mov ecx, dword [ebp - 0x2178]
mov dword [ebp - 0x217c], ecx
mov dword [ebp - 4], 0x21
mov ecx, dword [ebp - 0x217c]
call fcn.0059d600
mov byte [ebp - 0x1a19], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1aa0]
call fcn.0059cc80
movzx edx, byte [ebp - 0x1a19]
test edx, edx
je 0x4facc7
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1aa4], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x2180], eax
mov eax, dword [ebp - 0x2180]
mov dword [ebp - 0x2184], eax
mov dword [ebp - 4], 0x22
push 1
push 0
push str.choujiang
push 0x7ec8dc
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
push 0x7ec8f0
lea ecx, [ebp - 0x1aa8]
call fcn.004068d0
mov dword [ebp - 4], 0x23
push str.http:__wan.ludashi.com_pageV2_activity
lea ecx, [ebp - 0x1aac]
call fcn.004068d0
mov byte [ebp - 4], 0x24
push 0x7ec948
lea ecx, [ebp - 0x1ab0]
call fcn.004068d0
mov byte [ebp - 4], 0x25
push 0x7ec954
lea ecx, [ebp - 0x1ab4]
call fcn.004068d0
mov byte [ebp - 4], 0x26
push 0
push 1
push 0
lea ecx, [ebp - 0x1aa8]
push ecx
lea edx, [ebp - 0x1aac]
push edx
lea eax, [ebp - 0x1ab0]
push eax
lea ecx, [ebp - 0x1ab4]
push ecx
call fcn.0043b4e0
mov ecx, eax
call fcn.00517e60
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1ab4]
call fcn.00405ef0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1ab0]
call fcn.00405ef0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x1aac]
call fcn.00405ef0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1aa8]
call fcn.00405ef0
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1ab8], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x2188], eax
mov edx, dword [ebp - 0x2188]
mov dword [ebp - 0x218c], edx
mov dword [ebp - 4], 0x27
push 1
push 0
push 0x7ec958
push 0x7ec960
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
jmp 0x4fc7ca
push 0x7ec974
lea eax, [ebp - 0x1b40]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
mov edx, dword [edx]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x2190], eax
mov ecx, dword [ebp - 0x2190]
mov dword [ebp - 0x2194], ecx
mov dword [ebp - 4], 0x28
mov ecx, dword [ebp - 0x2194]
call fcn.0059d600
mov byte [ebp - 0x1ab9], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b40]
call fcn.0059cc80
movzx edx, byte [ebp - 0x1ab9]
test edx, edx
je 0x4fae94
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1b44], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x2198], eax
mov eax, dword [ebp - 0x2198]
mov dword [ebp - 0x219c], eax
mov dword [ebp - 4], 0x29
push 1
push 0
push str.shangcheng
push 0x7ec9a4
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
push 0x7ec9b8
lea ecx, [ebp - 0x1b48]
call fcn.004068d0
mov dword [ebp - 4], 0x2a
push str.http:__wan.ludashi.com_mall
lea ecx, [ebp - 0x1b4c]
call fcn.004068d0
mov byte [ebp - 4], 0x2b
push 0x7ec9f4
lea ecx, [ebp - 0x1b50]
call fcn.004068d0
mov byte [ebp - 4], 0x2c
push 0x7eca00
lea ecx, [ebp - 0x1b54]
call fcn.004068d0
mov byte [ebp - 4], 0x2d
push 0
push 1
push 0
lea ecx, [ebp - 0x1b48]
push ecx
lea edx, [ebp - 0x1b4c]
push edx
lea eax, [ebp - 0x1b50]
push eax
lea ecx, [ebp - 0x1b54]
push ecx
call fcn.0043b4e0
mov ecx, eax
call fcn.00517e60
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x1b54]
call fcn.00405ef0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1b50]
call fcn.00405ef0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x1b4c]
call fcn.00405ef0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b48]
call fcn.00405ef0
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1b58], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x21a0], eax
mov edx, dword [ebp - 0x21a0]
mov dword [ebp - 0x21a4], edx
mov dword [ebp - 4], 0x2e
push 1
push 0
push 0x7eca04
push 0x7eca10
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
jmp 0x4fc7ca
push str.servicebtn
lea eax, [ebp - 0x1be0]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
mov edx, dword [edx]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x21a8], eax
mov ecx, dword [ebp - 0x21a8]
mov dword [ebp - 0x21ac], ecx
mov dword [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x21ac]
call fcn.0059d600
mov byte [ebp - 0x1b59], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1be0]
call fcn.0059cc80
movzx edx, byte [ebp - 0x1b59]
test edx, edx
je 0x4fb015
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1be4], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x21b0], eax
mov eax, dword [ebp - 0x21b0]
mov dword [ebp - 0x21b4], eax
mov dword [ebp - 4], 0x30
push 1
push 0
push str.service
push 0x7eca4c
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
push 0x7eca60
lea ecx, [ebp - 0x1be8]
call fcn.004068d0
mov dword [ebp - 4], 0x31
push 0x7eca68
lea ecx, [ebp - 0x1bec]
call fcn.004068d0
mov byte [ebp - 4], 0x32
push 0x7ecab4
lea ecx, [ebp - 0x1bf0]
call fcn.004068d0
mov byte [ebp - 4], 0x33
push 0x7ecac0
lea ecx, [ebp - 0x1bf4]
call fcn.004068d0
mov byte [ebp - 4], 0x34
push 0
push 1
push 0
lea ecx, [ebp - 0x1be8]
push ecx
lea edx, [ebp - 0x1bec]
push edx
lea eax, [ebp - 0x1bf0]
push eax
lea ecx, [ebp - 0x1bf4]
push ecx
call fcn.0043b4e0
mov ecx, eax
call fcn.00517e60
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x1bf4]
call fcn.00405ef0
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x1bf0]
call fcn.00405ef0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x1bec]
call fcn.00405ef0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1be8]
call fcn.00405ef0
jmp 0x4fc7ca
push 0x7ecac4
lea edx, [ebp - 0x1c7c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x108]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x21b8], eax
mov ecx, dword [ebp - 0x21b8]
mov dword [ebp - 0x21bc], ecx
mov dword [ebp - 4], 0x35
mov ecx, dword [ebp - 0x21bc]
call fcn.0059d600
mov byte [ebp - 0x1bf5], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c7c]
call fcn.0059cc80
movzx edx, byte [ebp - 0x1bf5]
test edx, edx
je 0x4fb198
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1c80], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x21c0], eax
mov eax, dword [ebp - 0x21c0]
mov dword [ebp - 0x21c4], eax
mov dword [ebp - 4], 0x36
push 1
push 0
push str.kefu
push 0x7ecae4
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
push 0x7ecaf8
lea ecx, [ebp - 0x1c84]
call fcn.004068d0
mov dword [ebp - 4], 0x37
push 0x7ecb00
lea ecx, [ebp - 0x1c88]
call fcn.004068d0
mov byte [ebp - 4], 0x38
push 0x7ecb4c
lea ecx, [ebp - 0x1c8c]
call fcn.004068d0
mov byte [ebp - 4], 0x39
push 0x7ecb58
lea ecx, [ebp - 0x1c90]
call fcn.004068d0
mov byte [ebp - 4], 0x3a
push 0
push 1
push 0
lea ecx, [ebp - 0x1c84]
push ecx
lea edx, [ebp - 0x1c88]
push edx
lea eax, [ebp - 0x1c8c]
push eax
lea ecx, [ebp - 0x1c90]
push ecx
call fcn.0043b4e0
mov ecx, eax
call fcn.00517e60
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x1c90]
call fcn.00405ef0
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x1c8c]
call fcn.00405ef0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x1c88]
call fcn.00405ef0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c84]
call fcn.00405ef0
jmp 0x4fc7ca
push 0x7ecb5c
lea edx, [ebp - 0x1d18]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x108]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x21c8], eax
mov ecx, dword [ebp - 0x21c8]
mov dword [ebp - 0x21cc], ecx
mov dword [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x21cc]
call fcn.0059d600
mov byte [ebp - 0x1c91], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d18]
call fcn.0059cc80
movzx edx, byte [ebp - 0x1c91]
test edx, edx
je 0x4fb31b
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1d1c], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x21d0], eax
mov eax, dword [ebp - 0x21d0]
mov dword [ebp - 0x21d4], eax
mov dword [ebp - 4], 0x3c
push 1
push 0
push str.mobile_game
push 0x7ecb8c
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
push 0x7ecba0
lea ecx, [ebp - 0x1d20]
call fcn.004068d0
mov dword [ebp - 4], 0x3d
push 0x7ecba8
lea ecx, [ebp - 0x1d24]
call fcn.004068d0
mov byte [ebp - 4], 0x3e
push 0x7ecc08
lea ecx, [ebp - 0x1d28]
call fcn.004068d0
mov byte [ebp - 4], 0x3f
push 0x7ecc10
lea ecx, [ebp - 0x1d2c]
call fcn.004068d0
mov byte [ebp - 4], 0x40
push 0
push 1
push 0
lea ecx, [ebp - 0x1d20]
push ecx
lea edx, [ebp - 0x1d24]
push edx
lea eax, [ebp - 0x1d28]
push eax
lea ecx, [ebp - 0x1d2c]
push ecx
call fcn.0043b4e0
mov ecx, eax
call fcn.00517e60
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x1d2c]
call fcn.00405ef0
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x1d28]
call fcn.00405ef0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x1d24]
call fcn.00405ef0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d20]
call fcn.00405ef0
jmp 0x4fc7ca
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [edx + 0x108]
cmp ecx, dword [eax + 0x2c]
jne 0x4fb405
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.005013c0
lea edx, [ebp - 0x11f8]
push edx
call fcn.004bb400
mov ecx, eax
call fcn.0043dca0
mov dword [ebp - 4], 0x41
push 0x7ecc14
lea eax, [ebp - 0x11f8]
push eax
call fcn.0040cb60
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x4fb3ce
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1d30], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x21d8], eax
mov edx, dword [ebp - 0x21d8]
mov dword [ebp - 0x21dc], edx
mov byte [ebp - 4], 0x42
push 1
push 0
push 0x7ecc20
push 0x7ecc2c
call fcn.00403df0
mov byte [ebp - 4], 0x41
mov ecx, eax
call fcn.00402730
push 1
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.004ff0c0
jmp 0x4fb3ee
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.004ff530
push 0
push 0
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.004f83e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x11f8]
call fcn.00405ef0
jmp 0x4fc7ca
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x38]
jne 0x4fb47a
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.00507500
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1d34], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x21e0], eax
mov eax, dword [ebp - 0x21e0]
mov dword [ebp - 0x21e4], eax
mov dword [ebp - 4], 0x43
push 1
push 0
push str.restore
push 0x7ecc48
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
jmp 0x4fc7ca
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [ecx + 0x108]
cmp eax, dword [edx + 0x30]
jne 0x4fb4ef
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.00507500
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1d38], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x21e8], eax
mov ecx, dword [ebp - 0x21e8]
mov dword [ebp - 0x21ec], ecx
mov dword [ebp - 4], 0x44
push 1
push 0
push 0x7ecc5c
push 0x7ecc64
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
jmp 0x4fc7ca
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [edx + 0x108]
cmp ecx, dword [eax + 0x34]
jne 0x4fb522
push 0
push 0xf020
push 0x112
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.005a45f0
jmp 0x4fc7ca
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [edx + 0x108]
cmp ecx, dword [eax + 0x40]
jne 0x4fb66c
push 1
call fcn.0043ce50
mov ecx, eax
call fcn.0046fe80
mov dword [ebp - 0x11fc], eax
mov ecx, dword [ebp - 0x11fc]
call fcn.004662c0
test eax, eax
jne 0x4fb5b2
lea ecx, [ebp - 0x1d5c]
call fcn.004808d0
mov dword [ebp - 0x21f0], eax
mov edx, dword [ebp - 0x21f0]
mov dword [ebp - 0x21f4], edx
mov dword [ebp - 4], 0x45
mov eax, dword [ebp - 0x21f4]
push eax
push 0x7ecc78
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.005038e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d5c]
call fcn.0043b460
jmp 0x4fb667
mov ecx, dword [ebp - 0x11fc]
call fcn.00466360
test eax, eax
je 0x4fb626
lea ecx, [ebp - 0x1574]
call fcn.004cbd00
mov dword [ebp - 4], 0x46
push str.login_btn
lea ecx, [ebp - 0x1d60]
call fcn.004068d0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x1d60]
push ecx
mov edx, dword [ebp - 0x20e8]
mov eax, dword [edx - 0x10]
push eax
lea ecx, [ebp - 0x1574]
call fcn.004cbe70
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x1d60]
call fcn.00405ef0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1574]
call fcn.004cbde0
jmp 0x4fb667
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1d64], esp
push 0x7ecc90
call fcn.00403bf0
mov dword [ebp - 0x21f8], eax
mov ecx, dword [ebp - 0x21f8]
mov dword [ebp - 0x21fc], ecx
mov dword [ebp - 4], 0x48
call fcn.0043b4e0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.005187b0
jmp 0x4fc7ca
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [edx + 0x108]
cmp ecx, dword [eax + 0x54]
jne 0x4fb834
mov edx, dword [ebp - 0x20e8]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [edx + 0x6c]
cmp ecx, dword [eax + 0x54]
je 0x4fb7e3
mov edx, dword [ebp - 0x20e8]
cmp dword [edx + 0x74], 0
je 0x4fb6bb
push 0x7ecce0
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x74]
call fcn.005c4240
push 0
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x5c]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x5c]
mov edx, dword [edx]
mov eax, dword [edx + 0x174]
call eax
push 0
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x60]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x60]
mov edx, dword [edx]
mov eax, dword [edx + 0x174]
call eax
push 0
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x64]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x64]
mov edx, dword [edx]
mov eax, dword [edx + 0x174]
call eax
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [edx + 0x54]
mov dword [ecx + 0x6c], eax
lea ecx, [ebp - 0x1590]
call fcn.0040cd50
mov dword [ebp - 4], 0x49
push 0x7ecd08
lea ecx, [ebp - 0x1d80]
call fcn.00403bf0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x1590]
push ecx
lea edx, [ebp - 0x1d80]
push edx
call fcn.00408880
add esp, 8
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x1d80]
call fcn.00403c30
lea ecx, [ebp - 0x1590]
call fcn.00403c80
push eax
lea ecx, [ebp - 0x1d9c]
call fcn.00403bf0
mov byte [ebp - 4], 0x4b
lea eax, [ebp - 0x1d9c]
push eax
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x78]
push edx
mov ecx, dword [ebp - 0x20e8]
add ecx, 0x38c
call fcn.00547450
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x1d9c]
call fcn.00403c30
push 0x465
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.00505280
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1590]
call fcn.00403c30
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1da0], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x2200], eax
mov eax, dword [ebp - 0x2200]
mov dword [ebp - 0x2204], eax
mov dword [ebp - 4], 0x4c
push 1
push 0
push 0x7ecd50
push 0x7eccf4
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
jmp 0x4fc7ca
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [ecx + 0x108]
cmp eax, dword [edx + 0x5c]
jne 0x4fba1c
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [ecx + 0x6c]
cmp eax, dword [edx + 0x5c]
je 0x4fb9cb
mov ecx, dword [ebp - 0x20e8]
cmp dword [ecx + 0x74], 0
je 0x4fb883
push 0x7ecd58
mov edx, dword [ebp - 0x20e8]
mov ecx, dword [edx + 0x74]
call fcn.005c4240
push 0
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x54]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [edx + 0x54]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x174]
call eax
push 0
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x60]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x60]
mov edx, dword [edx]
mov eax, dword [edx + 0x174]
call eax
push 0
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x64]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x64]
mov edx, dword [edx]
mov eax, dword [edx + 0x174]
call eax
push 0
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x68]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x68]
mov edx, dword [edx]
mov eax, dword [edx + 0x174]
call eax
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [edx + 0x5c]
mov dword [ecx + 0x6c], eax
lea ecx, [ebp - 0x15ac]
call fcn.0040cd50
mov dword [ebp - 4], 0x4d
push 0x7ecd78
lea ecx, [ebp - 0x1dbc]
call fcn.00403bf0
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x15ac]
push ecx
lea edx, [ebp - 0x1dbc]
push edx
call fcn.00408880
add esp, 8
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x1dbc]
call fcn.00403c30
lea ecx, [ebp - 0x15ac]
call fcn.00403c80
push eax
lea ecx, [ebp - 0x1dd8]
call fcn.00403bf0
mov byte [ebp - 4], 0x4f
lea eax, [ebp - 0x1dd8]
push eax
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x7c]
push edx
mov ecx, dword [ebp - 0x20e8]
add ecx, 0x38c
call fcn.00547450
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x1dd8]
call fcn.00403c30
push 0x467
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.00505280
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x15ac]
call fcn.00403c30
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1ddc], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x2208], eax
mov eax, dword [ebp - 0x2208]
mov dword [ebp - 0x220c], eax
mov dword [ebp - 4], 0x50
push 1
push 0
push 0x7ecdc4
push 0x7ecdcc
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
jmp 0x4fc7ca
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [ecx + 0x108]
cmp eax, dword [edx + 0x60]
jne 0x4fbc07
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [ecx + 0x6c]
cmp eax, dword [edx + 0x60]
je 0x4fbbb6
mov ecx, dword [ebp - 0x20e8]
cmp dword [ecx + 0x74], 0
je 0x4fba6b
push 0x7ecde0
mov edx, dword [ebp - 0x20e8]
mov ecx, dword [edx + 0x74]
call fcn.005c4240
push 0
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x54]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [edx + 0x54]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x174]
call eax
push 0
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x5c]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x5c]
mov edx, dword [edx]
mov eax, dword [edx + 0x174]
call eax
push 0
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x64]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x64]
mov edx, dword [edx]
mov eax, dword [edx + 0x174]
call eax
push 0
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x68]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x68]
mov edx, dword [edx]
mov eax, dword [edx + 0x174]
call eax
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [edx + 0x60]
mov dword [ecx + 0x6c], eax
lea ecx, [ebp - 0x15c8]
call fcn.0040cd50
mov dword [ebp - 4], 0x51
push 0x7ece00
lea ecx, [ebp - 0x1df8]
call fcn.00403bf0
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x15c8]
push ecx
lea edx, [ebp - 0x1df8]
push edx
call fcn.00408880
add esp, 8
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x1df8]
call fcn.00403c30
lea ecx, [ebp - 0x15c8]
call fcn.00403c80
push eax
lea ecx, [ebp - 0x1e14]
call fcn.00403bf0
mov byte [ebp - 4], 0x53
lea eax, [ebp - 0x1e14]
push eax
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x80]
push edx
mov ecx, dword [ebp - 0x20e8]
add ecx, 0x38c
call fcn.00547450
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x1e14]
call fcn.00403c30
push 0x468
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.00505280
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x15c8]
call fcn.00403c30
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1e18], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x2210], eax
mov eax, dword [ebp - 0x2210]
mov dword [ebp - 0x2214], eax
mov dword [ebp - 4], 0x54
push 1
push 0
push 0x7ece48
push 0x7ece50
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
jmp 0x4fc7ca
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [ecx + 0x108]
cmp eax, dword [edx + 0x64]
jne 0x4fbdf2
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [ecx + 0x6c]
cmp eax, dword [edx + 0x64]
je 0x4fbda1
mov ecx, dword [ebp - 0x20e8]
cmp dword [ecx + 0x74], 0
je 0x4fbc56
push 0x7ece64
mov edx, dword [ebp - 0x20e8]
mov ecx, dword [edx + 0x74]
call fcn.005c4240
push 0
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x54]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [edx + 0x54]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x174]
call eax
push 0
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x5c]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x5c]
mov edx, dword [edx]
mov eax, dword [edx + 0x174]
call eax
push 0
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x60]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x60]
mov edx, dword [edx]
mov eax, dword [edx + 0x174]
call eax
push 0
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x68]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x68]
mov edx, dword [edx]
mov eax, dword [edx + 0x174]
call eax
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [edx + 0x64]
mov dword [ecx + 0x6c], eax
lea ecx, [ebp - 0x15e4]
call fcn.0040cd50
mov dword [ebp - 4], 0x55
push 0x7ece88
lea ecx, [ebp - 0x1e34]
call fcn.00403bf0
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x15e4]
push ecx
lea edx, [ebp - 0x1e34]
push edx
call fcn.00408880
add esp, 8
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x1e34]
call fcn.00403c30
lea ecx, [ebp - 0x15e4]
call fcn.00403c80
push eax
lea ecx, [ebp - 0x1e50]
call fcn.00403bf0
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x1e50]
push eax
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x84]
push edx
mov ecx, dword [ebp - 0x20e8]
add ecx, 0x38c
call fcn.00547450
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x1e50]
call fcn.00403c30
push 0x469
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.00505280
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x15e4]
call fcn.00403c30
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1e54], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x2218], eax
mov eax, dword [ebp - 0x2218]
mov dword [ebp - 0x221c], eax
mov dword [ebp - 4], 0x58
push 1
push 0
push 0x7ecec0
push 0x7ecec8
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
jmp 0x4fc7ca
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [ecx + 0x108]
cmp eax, dword [edx + 0x68]
jne 0x4fbfdd
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [ecx + 0x6c]
cmp eax, dword [edx + 0x68]
je 0x4fbf8c
mov ecx, dword [ebp - 0x20e8]
cmp dword [ecx + 0x74], 0
je 0x4fbe41
push 0x7ecedc
mov edx, dword [ebp - 0x20e8]
mov ecx, dword [edx + 0x74]
call fcn.005c4240
push 0
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x54]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [edx + 0x54]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x174]
call eax
push 0
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x5c]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x5c]
mov edx, dword [edx]
mov eax, dword [edx + 0x174]
call eax
push 0
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x60]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x60]
mov edx, dword [edx]
mov eax, dword [edx + 0x174]
call eax
push 0
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x64]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x64]
mov edx, dword [edx]
mov eax, dword [edx + 0x174]
call eax
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [edx + 0x68]
mov dword [ecx + 0x6c], eax
lea ecx, [ebp - 0x1600]
call fcn.0040cd50
mov dword [ebp - 4], 0x59
push 0x7ecf00
lea ecx, [ebp - 0x1e70]
call fcn.00403bf0
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x1600]
push ecx
lea edx, [ebp - 0x1e70]
push edx
call fcn.00408880
add esp, 8
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x1e70]
call fcn.00403c30
lea ecx, [ebp - 0x1600]
call fcn.00403c80
push eax
lea ecx, [ebp - 0x1e8c]
call fcn.00403bf0
mov byte [ebp - 4], 0x5b
lea eax, [ebp - 0x1e8c]
push eax
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx + 0x88]
push edx
mov ecx, dword [ebp - 0x20e8]
add ecx, 0x38c
call fcn.00547450
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x1e8c]
call fcn.00403c30
push 0x46c
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.00505280
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1600]
call fcn.00403c30
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1e90], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x2220], eax
mov eax, dword [ebp - 0x2220]
mov dword [ebp - 0x2224], eax
mov dword [ebp - 4], 0x5c
push 1
push 0
push 0x7ecf60
push str.click_tab
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
jmp 0x4fc7ca
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [ecx + 0x108]
cmp eax, dword [edx + 0x48]
jne 0x4fc114
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1e94], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x2228], eax
mov ecx, dword [ebp - 0x2228]
mov dword [ebp - 0x222c], ecx
mov dword [ebp - 4], 0x5d
push 1
push 0
push str.downmgr
push 0x7ecf8c
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1e98], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x2230], eax
mov edx, dword [ebp - 0x2230]
mov dword [ebp - 0x2234], edx
mov dword [ebp - 4], 0x5e
push 1
push 0
push 0x7ecfa0
push str.dl_win
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x48]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [edx + 0x48]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
mov ecx, dword [eax]
mov dword [ebp - 0x1610], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x160c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1608], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x1604], edx
mov eax, dword [ebp - 0x1610]
mov dword [ebp - 0x1618], eax
mov ecx, dword [ebp - 0x1604]
mov dword [ebp - 0x1614], ecx
lea edx, [ebp - 0x1618]
push edx
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax - 0x10]
push ecx
call dword [sym.imp.USER32.dll_ClientToScreen]
lea edx, [ebp - 0x1618]
push edx
push 1
call fcn.0050aae0
mov ecx, eax
call fcn.0055d6c0
jmp 0x4fc7ca
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x4c]
jne 0x4fc1d4
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1e9c], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x2238], eax
mov eax, dword [ebp - 0x2238]
mov dword [ebp - 0x223c], eax
mov dword [ebp - 4], 0x5f
push 1
push 0
push 0x7ecfbc
push 0x7ecfcc
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.00502550
mov dword [ebp - 0x161c], eax
cmp dword [ebp - 0x161c], 0
je 0x4fc1c1
push 0x7ecfe0
mov ecx, dword [ebp - 0x161c]
add ecx, 8
push ecx
call fcn.0040cb00
add esp, 8
movzx edx, al
test edx, edx
je 0x4fc1c1
call fcn.0050abb0
mov ecx, eax
call fcn.00565db0
jmp 0x4fc1cf
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.00504c20
jmp 0x4fc7ca
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x328]
jne 0x4fc290
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1ea0], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x2240], eax
mov eax, dword [ebp - 0x2240]
mov dword [ebp - 0x2244], eax
mov dword [ebp - 4], 0x60
push 1
push 0
push str.mute
push 0x7ecff8
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
mov ecx, dword [ebp - 0x20e8]
mov ecx, dword [ecx + 0x400]
call fcn.004a2f00
mov dword [ebp - 0x1620], eax
xor edx, edx
cmp dword [ebp - 0x1620], 0
sete dl
push edx
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x400]
call fcn.004a2810
xor ecx, ecx
cmp dword [ebp - 0x1620], 0
sete cl
push ecx
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.00500790
jmp 0x4fc7ca
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [edx + 0x108]
cmp ecx, dword [eax + 0x32c]
jne 0x4fc308
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1ea4], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x2248], eax
mov edx, dword [ebp - 0x2248]
mov dword [ebp - 0x224c], edx
mov dword [ebp - 4], 0x61
push 1
push 0
push 0x7ed00c
push 0x7ed024
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
push 1
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.005075f0
jmp 0x4fc7ca
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x330]
jne 0x4fc335
mov ecx, dword [ebp - 0x20e8]
add ecx, 0x38c
call fcn.00546d50
jmp 0x4fc7ca
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.00501960
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x108], eax
jne 0x4fc364
mov ecx, dword [ebp - 0x20e8]
add ecx, 0x38c
call fcn.00546d90
jmp 0x4fc7ca
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.005019a0
mov edx, dword [ebp + 8]
cmp dword [edx + 0x108], eax
jne 0x4fc393
mov ecx, dword [ebp - 0x20e8]
add ecx, 0x38c
call fcn.00546dc0
jmp 0x4fc7ca
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x334]
jne 0x4fc4f4
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1ea8], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x2250], eax
mov eax, dword [ebp - 0x2250]
mov dword [ebp - 0x2254], eax
mov dword [ebp - 4], 0x62
push 1
push 0
push str.bosskey
push 0x7ed048
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
push 0x364
call fcn.00704930
add esp, 4
mov dword [ebp - 0x1eb0], eax
mov dword [ebp - 4], 0x63
cmp dword [ebp - 0x1eb0], 0
je 0x4fc430
mov ecx, dword [ebp - 0x1eb0]
call fcn.004c6800
mov dword [ebp - 0x2258], eax
jmp 0x4fc43a
mov dword [ebp - 0x2258], 0
mov ecx, dword [ebp - 0x2258]
mov dword [ebp - 0x1eac], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x1eac]
mov dword [ebp - 0x163c], edx
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x334]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [edx + 0x334]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
mov ecx, dword [eax]
mov dword [ebp - 0x1630], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x162c], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1628], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x1624], edx
mov eax, dword [ebp - 0x1630]
mov dword [ebp - 0x1638], eax
mov ecx, dword [ebp - 0x1624]
mov dword [ebp - 0x1634], ecx
lea edx, [ebp - 0x1638]
push edx
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax - 0x10]
push ecx
call dword [sym.imp.USER32.dll_ClientToScreen]
mov edx, dword [ebp - 0x1634]
push edx
mov eax, dword [ebp - 0x1638]
push eax
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx - 0x10]
push edx
mov ecx, dword [ebp - 0x163c]
call fcn.004c69c0
jmp 0x4fc7ca
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x338]
jne 0x4fc655
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1eb4], esp
push 0
call fcn.00432bb0
mov dword [ebp - 0x225c], eax
mov eax, dword [ebp - 0x225c]
mov dword [ebp - 0x2260], eax
mov dword [ebp - 4], 0x64
push 1
push 0
push 0x7ed05c
push 0x7ed068
call fcn.00403df0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.00402730
push 0x360
call fcn.00704930
add esp, 4
mov dword [ebp - 0x1ebc], eax
mov dword [ebp - 4], 0x65
cmp dword [ebp - 0x1ebc], 0
je 0x4fc591
mov ecx, dword [ebp - 0x1ebc]
call fcn.004ca9e0
mov dword [ebp - 0x2264], eax
jmp 0x4fc59b
mov dword [ebp - 0x2264], 0
mov ecx, dword [ebp - 0x2264]
mov dword [ebp - 0x1eb8], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x1eb8]
mov dword [ebp - 0x1650], edx
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax + 0x338]
mov edx, dword [ebp - 0x20e8]
mov eax, dword [edx + 0x338]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
mov ecx, dword [eax]
mov dword [ebp - 0x164c], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x1648], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1644], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x1640], edx
mov eax, dword [ebp - 0x164c]
mov dword [ebp - 0x1658], eax
mov ecx, dword [ebp - 0x1640]
mov dword [ebp - 0x1654], ecx
lea edx, [ebp - 0x1658]
push edx
mov eax, dword [ebp - 0x20e8]
mov ecx, dword [eax - 0x10]
push ecx
call dword [sym.imp.USER32.dll_ClientToScreen]
mov edx, dword [ebp - 0x1654]
push edx
mov eax, dword [ebp - 0x1658]
push eax
mov ecx, dword [ebp - 0x20e8]
mov edx, dword [ecx - 0x10]
push edx
mov ecx, dword [ebp - 0x1650]
call fcn.004caa70
jmp 0x4fc7ca
push 0x7ed07c
lea eax, [ebp - 0x1f44]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
mov edx, dword [edx]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x2268], eax
mov ecx, dword [ebp - 0x2268]
mov dword [ebp - 0x226c], ecx
mov dword [ebp - 4], 0x66
mov edx, dword [ebp - 0x20e4]
or edx, 1
mov dword [ebp - 0x20e4], edx
mov ecx, dword [ebp - 0x226c]
call fcn.0059d600
movzx eax, al
test eax, eax
jne 0x4fc71f
push 0x7ed08c
lea ecx, [ebp - 0x1fc8]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x108]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x108]
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x2270], eax
mov ecx, dword [ebp - 0x2270]
mov dword [ebp - 0x2274], ecx
mov dword [ebp - 4], 0x67
mov edx, dword [ebp - 0x20e4]
or edx, 2
mov dword [ebp - 0x20e4], edx
mov ecx, dword [ebp - 0x2274]
call fcn.0059d600
movzx eax, al
test eax, eax
jne 0x4fc71f
mov dword [ebp - 0x2278], 0
jmp 0x4fc729
mov dword [ebp - 0x2278], 1
mov cl, byte [ebp - 0x2278]
mov byte [ebp - 0x1ebd], cl
mov dword [ebp - 4], 0x66
mov edx, dword [ebp - 0x20e4]
and edx, 2
je 0x4fc759
and dword [ebp - 0x20e4], 0xfffffffd
lea ecx, [ebp - 0x1fc8]
call fcn.0059cc80
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x20e4]
and eax, 1
je 0x4fc77d
and dword [ebp - 0x20e4], 0xfffffffe
lea ecx, [ebp - 0x1f44]
call fcn.0059cc80
movzx ecx, byte [ebp - 0x1ebd]
test ecx, ecx
je 0x4fc7ca
push 0
push 0x7ed0ac
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x165c], eax
cmp dword [ebp - 0x165c], 0
je 0x4fc7b8
push 0
push 0
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.004ff2f0
jmp 0x4fc7ca
push 1
push 1
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.004ff2f0
jmp 0x4fc995
push 0x7ed0dc
mov ecx, dword [ebp + 8]
call fcn.0059d600
movzx edx, al
test edx, edx
je 0x4fc907
push 0x7ed0f8
lea eax, [ebp - 0x2050]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
mov edx, dword [edx]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x227c], eax
mov ecx, dword [ebp - 0x227c]
mov dword [ebp - 0x2280], ecx
mov dword [ebp - 4], 0x68
mov ecx, dword [ebp - 0x2280]
call fcn.0059d600
mov byte [ebp - 0x1fc9], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2050]
call fcn.0059cc80
movzx edx, byte [ebp - 0x1fc9]
test edx, edx
je 0x4fc902
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
mov dword [ebp - 0x1660], ecx
mov ecx, dword [ebp - 0x1660]
call fcn.005a5070
movzx edx, al
test edx, edx
je 0x4fc8eb
push 0x2a0
call fcn.00704930
add esp, 4
mov dword [ebp - 0x2058], eax
mov dword [ebp - 4], 0x69
cmp dword [ebp - 0x2058], 0
je 0x4fc8ae
mov ecx, dword [ebp - 0x2058]
call fcn.00508c40
mov dword [ebp - 0x2284], eax
jmp 0x4fc8b8
mov dword [ebp - 0x2284], 0
mov eax, dword [ebp - 0x2284]
mov dword [ebp - 0x2054], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2054]
mov dword [0x89f450], ecx
mov edx, dword [ebp - 0x1660]
push edx
mov ecx, dword [0x89f450]
call fcn.004f1200
jmp 0x4fc902
push 1
mov ecx, dword [0x89f450]
call fcn.005a47b0
mov dword [0x89f450], 0
jmp 0x4fc995
push 0x7ed110
mov ecx, dword [ebp + 8]
call fcn.0059d600
movzx eax, al
test eax, eax
je 0x4fc995
push 0x7ed11c
lea ecx, [ebp - 0x20e0]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x108]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x108]
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x2288], eax
mov ecx, dword [ebp - 0x2288]
mov dword [ebp - 0x228c], ecx
mov dword [ebp - 4], 0x6a
mov ecx, dword [ebp - 0x228c]
call fcn.0059d600
mov byte [ebp - 0x2059], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20e0]
call fcn.0059cc80
movzx edx, byte [ebp - 0x2059]
test edx, edx
je 0x4fc995
mov ecx, dword [ebp - 0x20e8]
sub ecx, 0x14
call fcn.00501dd0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0071fe0b
mov esp, ebp
pop ebp
ret 4