Function at 0x407c10
Capabilities:
Check for foreground window switch
Check os version
Create process on windows
Get common file path
Hide graphical window
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x416228
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x4bc0c
call fcn.0040c6f0
mov eax, dword [0x41b0e0]
push ebx
mov ebx, ecx
mov dword [esp + 0x4bc0c], eax
mov al, byte [ebx + 0x24cc]
push esi
xor esi, esi
test al, al
push edi
jne 0x40a286
xor eax, eax
mov byte [esp + 0x800], 0
mov ecx, 0xff
lea edi, [esp + 0x801]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [esp + 0x1f8], 0
mov ecx, 0x40
lea edi, [esp + 0x1f9]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x1f8]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
xor eax, eax
mov byte [esp + 0x1400], 0
mov ecx, 0x3ff
lea edi, [esp + 0x1401]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, dword [ebp + 8]
mov eax, edi
mov dword [esp + 0x14], esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407cc7
sub eax, edx
mov dword [esp + 0x1c], eax
je 0x407cfd
cmp byte [esi + edi], 0x2f
jne 0x407ce0
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 3
je 0x407cfd
mov eax, edi
inc esi
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407cf0
sub eax, edx
cmp esi, eax
jb 0x407cd6
lea ecx, [esi + 1]
mov esi, dword [ebp + 8]
mov edx, ecx
shr ecx, 2
lea edi, [esp + 0x1400]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x198]
call fcn.0040afd0
xor esi, esi
push 0xb
mov edi, 0xf
push str.toption.dat
lea ecx, [esp + 0xf4]
mov dword [esp + 0x4bc2c], esi
mov dword [esp + 0x10c], edi
mov dword [esp + 0x108], esi
mov byte [esp + 0xf8], 0
call fcn.00402370
lea eax, [esp + 0x1f8]
mov byte [esp + 0x4bc24], 1
mov dword [esp + 0xc8], edi
mov dword [esp + 0xc4], esi
mov byte [esp + 0xb4], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407d83
sub eax, edx
push eax
lea eax, [esp + 0x1fc]
push eax
lea ecx, [esp + 0xb8]
call fcn.00402370
lea ecx, [esp + 0xec]
push ecx
lea edx, [esp + 0xb4]
push edx
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x4bc2c], 2
call fcn.0040b040
mov eax, dword [esp + 0xc8]
mov esi, 0x10
cmp eax, esi
jb 0x407de5
mov eax, dword [esp + 0xb4]
push eax
call fcn.0040c1b1
add esp, 4
mov eax, dword [esp + 0x104]
xor edi, edi
cmp eax, esi
mov dword [esp + 0xc8], 0xf
mov dword [esp + 0xc4], edi
mov byte [esp + 0xb4], 0
mov byte [esp + 0x4bc24], 0
jb 0x407e24
mov ecx, dword [esp + 0xf0]
push ecx
call fcn.0040c1b1
add esp, 4
cmp dword [ebx + 0xcdc4], edi
mov dword [esp + 0x14], edi
jle 0x407ed5
lea ecx, [ebx + 0xd3e8]
lea ebx, [ebx]
lea edi, [ecx + 0x14]
lea esi, [esp + 0x1400]
lea ebx, [ebx]
mov dl, byte [esi]
mov al, dl
cmp dl, byte [edi]
jne 0x407e74
test al, al
je 0x407e70
mov dl, byte [esi + 1]
mov al, dl
cmp dl, byte [edi + 1]
jne 0x407e74
add esi, 2
add edi, 2
test al, al
jne 0x407e50
xor eax, eax
jmp 0x407e79
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x407eb8
mov al, byte [ecx]
cmp al, 1
mov edx, 0x63
jne 0x407e91
cmp word [ebx + 0x158768], dx
je 0x407ed5
cmp al, 2
jne 0x407e9e
cmp word [ebx + 0x15876a], dx
je 0x407ed5
cmp al, 3
jne 0x407eab
cmp word [ebx + 0x15876c], dx
je 0x407ed5
cmp al, 4
jne 0x407eb8
cmp word [ebx + 0x15876e], dx
je 0x407ed5
mov eax, dword [esp + 0x14]
mov edx, dword [ebx + 0xcdc4]
inc eax
add ecx, 0xa34
cmp eax, edx
mov dword [esp + 0x14], eax
jl 0x407e40
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [esp + 0x46]
movzx edx, word [esp + 0x48]
lea ecx, [eax + eax*2]
movzx eax, word [esp + 0x4a]
lea esi, [edx + ecx*8]
mov ecx, dword [esp + 0x14]
imul esi, esi, 0x3c
add esi, eax
cmp ecx, dword [ebx + 0xcdc4]
je 0x407ffc
mov edx, dword [ebx + 0x158780]
add edx, 0x5dc
cmp esi, edx
jbe 0x407ffc
mov eax, ecx
imul eax, eax, 0xa34
lea edi, [eax + ebx]
push pe_nt_image_headers32
lea ecx, [edi + 0xcdc8]
push ecx
push 0x4176a4
push str.OPTION
lea ecx, [esp + 0x1a8]
call fcn.0040afb0
movzx edx, byte [edi + 0xd3e8]
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
push edx
lea eax, [esp + 0x804]
push 0x417314
push eax
call edi
add esp, 0xc
push pe_nt_image_headers32
lea ecx, [esp + 0x804]
push ecx
push str.GROUP
push str.OPTION
lea ecx, [esp + 0x1a8]
call fcn.0040afb0
mov edx, dword [esp + 0x14]
push edx
lea eax, [esp + 0x804]
push 0x417314
push eax
call edi
add esp, 0xc
push pe_nt_image_headers32
lea ecx, [esp + 0x804]
push ecx
push str.NUMBER
push str.OPTION
lea ecx, [esp + 0x1a8]
call fcn.0040afb0
mov dword [ebx + 0x158780], esi
cmp dword [ebx + 0x1950], 0x10
jb 0x407fdf
mov eax, dword [ebx + 0x193c]
jmp 0x407fe5
lea eax, [ebx + 0x193c]
push 5
push eax
push 0
push str.TOption.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea eax, [esp + 0x1400]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408006
sub eax, edx
xor edx, edx
cmp eax, 0xb
mov dword [esp + 0x10], eax
jle 0x4080b6
mov ecx, dword [esp + 0x1400]
xor eax, eax
mov dword [esp + 0xb1], eax
mov dword [esp + 0xb5], eax
mov dword [esp + 0xb9], eax
mov dword [esp + 0xbd], eax
mov dword [esp + 0xc1], eax
mov dword [esp + 0xc5], eax
mov dword [esp + 0xc9], eax
mov word [esp + 0xcd], ax
mov byte [esp + 0xcf], al
mov eax, dword [esp + 0x1404]
mov dword [esp + 0xb0], ecx
mov cx, word [esp + 0x1408]
mov dword [esp + 0xb4], eax
mov al, byte [esp + 0x140a]
mov word [esp + 0xb8], cx
mov byte [esp + 0xba], al
mov edi, str.http:__www.
lea esi, [esp + 0xb0]
mov ecx, 0xc
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4080b6
mov edx, 0xb
cmp dword [esp + 0x10], 7
jle 0x408153
test edx, edx
jne 0x408153
mov eax, dword [esp + 0x1400]
xor ecx, ecx
mov dword [esp + 0xb1], ecx
mov dword [esp + 0xb5], ecx
mov dword [esp + 0xb9], ecx
mov dword [esp + 0xbd], ecx
mov dword [esp + 0xc1], ecx
mov dword [esp + 0xc5], ecx
mov dword [esp + 0xc9], ecx
mov word [esp + 0xcd], cx
mov byte [esp + 0xcf], cl
mov cx, word [esp + 0x1404]
mov dword [esp + 0xb0], eax
mov al, byte [esp + 0x1406]
mov word [esp + 0xb4], cx
mov byte [esp + 0xb6], al
mov edi, str.http:__
lea esi, [esp + 0xb0]
mov ecx, 8
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x408153
mov edx, 7
cmp dword [esp + 0x10], 8
mov al, 1
jge 0x40815e
xor al, al
test edx, edx
je 0x4092f6
test al, al
je 0x4092f6
xor eax, eax
mov byte [esp + 0x400], 0
mov ecx, 0xff
lea edi, [esp + 0x401]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x1400]
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408193
sub eax, esi
mov ecx, eax
mov eax, dword [ebx + 0x30]
sub ecx, edx
dec ecx
lea esi, [esp + edx + 0x1400]
mov edx, ecx
shr ecx, 2
lea edi, [esp + 0x400]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor ecx, ecx
test eax, eax
jle 0x40821e
lea esi, [ebx + 0x34]
mov dword [esp + 0x10], esi
lea ecx, [ecx]
lea edi, [esp + 0x400]
mov dl, byte [esi]
mov al, dl
cmp dl, byte [edi]
jne 0x4081fb
test al, al
je 0x4081f7
mov dl, byte [esi + 1]
mov al, dl
cmp dl, byte [edi + 1]
jne 0x4081fb
add esi, 2
add edi, 2
test al, al
jne 0x4081d7
xor eax, eax
jmp 0x408200
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40a26f
mov esi, dword [esp + 0x10]
mov eax, dword [ebx + 0x30]
inc ecx
add esi, 0x80
cmp ecx, eax
mov dword [esp + 0x10], esi
jl 0x4081d0
lea edi, [ebx + 0x1595cc]
lea esi, [esp + 0x400]
jmp 0x408230
mov cl, byte [esi]
mov dl, byte [edi]
mov al, cl
cmp cl, dl
jne 0x408258
test al, al
je 0x408254
mov dl, byte [esi + 1]
mov cl, byte [edi + 1]
mov al, dl
cmp dl, cl
jne 0x408258
add esi, 2
add edi, 2
test al, al
jne 0x408230
xor eax, eax
jmp 0x40825d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40841f
lea ecx, [esp + 0x15c]
call fcn.0040afd0
push 0xc
xor edi, edi
mov esi, 0xf
push str.icondata.ini
lea ecx, [esp + 0xf4]
mov byte [esp + 0x4bc2c], 3
mov dword [esp + 0x10c], esi
mov dword [esp + 0x108], edi
mov byte [esp + 0xf8], 0
call fcn.00402370
lea eax, [esp + 0x1f8]
mov byte [esp + 0x4bc24], 4
mov dword [esp + 0xc8], esi
mov dword [esp + 0xc4], edi
mov byte [esp + 0xb4], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4082d1
sub eax, edx
push eax
lea eax, [esp + 0x1fc]
push eax
lea ecx, [esp + 0xb8]
call fcn.00402370
lea ecx, [esp + 0xec]
push ecx
lea edx, [esp + 0xb4]
push edx
lea ecx, [esp + 0x164]
mov byte [esp + 0x4bc2c], 5
call fcn.0040b040
mov eax, dword [esp + 0xc8]
mov esi, 0x10
cmp eax, esi
jb 0x408333
mov eax, dword [esp + 0xb4]
push eax
call fcn.0040c1b1
add esp, 4
cmp dword [esp + 0x104], esi
mov dword [esp + 0xc8], 0xf
mov dword [esp + 0xc4], edi
mov byte [esp + 0xb4], 0
mov byte [esp + 0x4bc24], 3
jb 0x40836e
mov ecx, dword [esp + 0xf0]
push ecx
call fcn.0040c1b1
add esp, 4
push 0x20
lea edx, [esp + 0x804]
push edx
push 0x41747c
lea eax, [esp + 0x40c]
push eax
lea ecx, [esp + 0x16c]
call fcn.0040af70
lea ecx, [esp + 0x800]
push ecx
call fcn.0040c6e8
add esp, 4
test eax, eax
je 0x40840b
lea eax, [esp + 0x400]
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4083b0
sub eax, edx
lea ecx, [eax + 1]
mov edx, ecx
shr ecx, 2
lea esi, [esp + 0x400]
lea edi, [ebx + 0x1595cc]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp dword [ebx + 0x1950], 0x10
jb 0x4083e8
mov eax, dword [ebx + 0x193c]
jmp 0x4083ee
lea eax, [ebx + 0x193c]
push 5
push eax
lea eax, [esp + 0x408]
push eax
push str.T_ICON.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [esp + 0x15c]
mov byte [esp + 0x4bc24], 0
call fcn.0040aff0
cmp dword [ebx + 0x1597d4], 3
jge 0x4089c1
mov al, byte [ebx + 0x1597d0]
test al, al
je 0x4089c1
mov al, byte [ebx + 0x159fd8]
test al, al
jne 0x4089c1
mov ecx, dword [ebx + 0x1934]
xor esi, esi
push esi
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x3b
push str.http:__www.funad.co.kr_searchnq_check_url_tcon.html_target
lea ecx, [esp + 0x110]
mov dword [esp + 0x128], 0xf
mov dword [esp + 0x124], esi
mov byte [esp + 0x114], 0
call fcn.00402370
lea eax, [esp + 0x400]
mov byte [esp + 0x4bc24], 6
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408497
sub eax, edi
push eax
lea edx, [esp + 0x404]
push edx
lea ecx, [esp + 0x110]
call fcn.00402260
push 6
push str.idx0
lea ecx, [esp + 0x110]
call fcn.00402260
mov dword [esp + 0x104], 0xf
mov dword [esp + 0x100], esi
mov byte [esp + 0xf0], 0
lea eax, [esp + 0x1f8]
mov byte [esp + 0x4bc24], 7
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4084f4
sub eax, edi
push eax
lea eax, [esp + 0x1fc]
push eax
lea ecx, [esp + 0xf4]
call fcn.00402370
push 1
push 0x41748c
lea ecx, [esp + 0xf4]
call fcn.00402260
push 0xc
push str.searchnq.dat
lea ecx, [esp + 0xf4]
call fcn.00402260
lea ecx, [esp + 0x2800]
call fcn.0040ad70
push str.Mozilla_4.0___
lea ecx, [esp + 0x2804]
mov byte [esp + 0x4bc28], 8
call fcn.0040ad90
cmp dword [esp + 0x104], 0x10
mov ecx, dword [esp + 0xf0]
jae 0x408575
lea ecx, [esp + 0xf0]
cmp dword [esp + 0x120], 0x10
mov eax, dword [esp + 0x10c]
jae 0x40858d
lea eax, [esp + 0x10c]
push ecx
push eax
push esi
lea ecx, [esp + 0x280c]
call fcn.0040add0
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [esp + 0x15c]
call fcn.0040afd0
push 0xc
mov edi, 0xf
push str.searchnq.dat
lea ecx, [esp + 0xd8]
mov byte [esp + 0x4bc2c], 9
mov dword [esp + 0xf0], edi
mov dword [esp + 0xec], esi
mov byte [esp + 0xdc], 0
call fcn.00402370
lea eax, [esp + 0x1f8]
mov dword [esp + 0xc8], edi
mov byte [esp + 0x4bc24], 0xa
mov dword [esp + 0xc4], esi
mov byte [esp + 0xb4], 0
lea edi, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408610
sub eax, edi
push eax
lea ecx, [esp + 0x1fc]
push ecx
lea ecx, [esp + 0xb8]
call fcn.00402370
lea edx, [esp + 0xd0]
push edx
lea eax, [esp + 0xb4]
push eax
lea ecx, [esp + 0x164]
mov byte [esp + 0x4bc2c], 0xb
call fcn.0040b040
cmp dword [esp + 0xc8], 0x10
jb 0x40866c
mov ecx, dword [esp + 0xb4]
push ecx
call fcn.0040c1b1
add esp, 4
mov eax, dword [esp + 0xe8]
mov edi, 0x10
cmp eax, edi
mov dword [esp + 0xc8], 0xf
mov dword [esp + 0xc4], esi
mov byte [esp + 0xb4], 0
mov byte [esp + 0x4bc24], 9
jb 0x4086ae
mov edx, dword [esp + 0xd4]
push edx
call fcn.0040c1b1
add esp, 4
push 8
lea eax, [esp + 0x804]
push eax
push 0x41747c
push str.SEARCHNQ
lea ecx, [esp + 0x16c]
call fcn.0040af70
lea ecx, [esp + 0x800]
push ecx
call fcn.0040c6e8
add esp, 4
test eax, eax
je 0x408945
mov byte [esp + 0x300], 0
xor eax, eax
mov ecx, 0x1f
lea edi, [esp + 0x301]
rep stosd dword es:[edi], eax
push 0x400
lea edx, [ebx + 0x1597d8]
push edx
stosw word es:[edi], ax
push 0x41739c
push str.SEARCHNQ
lea ecx, [esp + 0x16c]
stosb byte es:[edi], al
call fcn.0040af70
push 0x80
lea eax, [esp + 0x304]
push eax
push 0x4176a4
push str.SEARCHNQ
lea ecx, [esp + 0x16c]
call fcn.0040af70
push 0x3a
push str.http:__www.funad.co.kr_searchnq_stat_sum_tcon.html_target
lea ecx, [esp + 0xd8]
mov dword [esp + 0xf0], 0xf
mov dword [esp + 0xec], esi
mov byte [esp + 0xdc], 0
call fcn.00402370
lea eax, [esp + 0x400]
mov byte [esp + 0x4bc24], 0xc
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408785
sub eax, edi
push eax
lea ecx, [esp + 0x404]
push ecx
lea ecx, [esp + 0xd8]
call fcn.00402260
push 4
push str.id
lea ecx, [esp + 0xd8]
call fcn.00402260
lea eax, [esp + 0x300]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4087c0
sub eax, edx
push eax
lea edx, [esp + 0x304]
push edx
lea ecx, [esp + 0xd8]
call fcn.00402260
mov dword [esp + 0xc8], 0xf
mov dword [esp + 0xc4], esi
mov byte [esp + 0xb4], 0
lea eax, [esp + 0x1f8]
mov byte [esp + 0x4bc24], 0xd
lea edi, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408810
sub eax, edi
push eax
lea eax, [esp + 0x1fc]
push eax
lea ecx, [esp + 0xb8]
call fcn.00402370
push 1
push 0x41748c
lea ecx, [esp + 0xb8]
call fcn.00402260
push 0xc
push str.stat_sum.dat
lea ecx, [esp + 0xb8]
call fcn.00402260
lea ecx, [esp + 0x1aeb0]
call fcn.0040ad70
push str.Mozilla_4.0___
lea ecx, [esp + 0x1aeb4]
mov byte [esp + 0x4bc28], 0xe
call fcn.0040ad90
cmp dword [esp + 0xc8], 0x10
mov ecx, dword [esp + 0xb4]
jae 0x408891
lea ecx, [esp + 0xb4]
mov eax, dword [esp + 0xe8]
mov edi, 0x10
cmp eax, edi
mov eax, dword [esp + 0xd4]
jae 0x4088af
lea eax, [esp + 0xd4]
push ecx
push eax
push esi
lea ecx, [esp + 0x1aebc]
call fcn.0040add0
lea ecx, [esp + 0x1aeb0]
mov byte [esp + 0x4bc24], 0xd
call fcn.0040ad80
cmp dword [esp + 0xc8], edi
jb 0x4088eb
mov ecx, dword [esp + 0xb4]
push ecx
call fcn.0040c1b1
add esp, 4
cmp dword [esp + 0xe8], edi
mov dword [esp + 0xc8], 0xf
mov dword [esp + 0xc4], esi
mov byte [esp + 0xb4], 0
jb 0x40891e
mov edx, dword [esp + 0xd4]
push edx
call fcn.0040c1b1
add esp, 4
mov byte [ebx + 0x159fd8], 1
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov dword [ebx + 0x159fdc], eax
mov eax, dword [ebx + 0x1934]
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov edi, 0x10
lea ecx, [esp + 0x15c]
mov byte [esp + 0x4bc24], 8
call fcn.0040aff0
lea ecx, [esp + 0x2800]
mov byte [esp + 0x4bc24], 7
call fcn.0040ad80
cmp dword [esp + 0x104], edi
jb 0x408986
mov ecx, dword [esp + 0xf0]
push ecx
call fcn.0040c1b1
add esp, 4
cmp dword [esp + 0x120], edi
mov dword [esp + 0x104], 0xf
mov dword [esp + 0x100], esi
mov byte [esp + 0xf0], 0
mov byte [esp + 0x4bc24], 0
jb 0x4089c1
mov edx, dword [esp + 0x10c]
push edx
call fcn.0040c1b1
add esp, 4
mov eax, dword [ebx + 0x1934]
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov al, byte [ebx + 0x22bc]
test al, al
jne 0x40a26f
lea ecx, [esp + 0x1b8]
call fcn.0040afd0
push 0xb
xor edi, edi
mov esi, 0xf
push str.tconurl.dat
lea ecx, [esp + 0xf4]
mov byte [esp + 0x4bc2c], 0xf
mov dword [esp + 0x10c], esi
mov dword [esp + 0x108], edi
mov byte [esp + 0xf8], 0
call fcn.00402370
lea eax, [esp + 0x1f8]
mov byte [esp + 0x4bc24], 0x10
mov dword [esp + 0xc8], esi
mov dword [esp + 0xc4], edi
mov byte [esp + 0xb4], 0
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408a50
sub eax, edx
push eax
lea ecx, [esp + 0x1fc]
push ecx
lea ecx, [esp + 0xb8]
call fcn.00402370
lea edx, [esp + 0xec]
push edx
lea eax, [esp + 0xb4]
push eax
lea ecx, [esp + 0x1c0]
mov byte [esp + 0x4bc2c], 0x11
call fcn.0040b040
mov eax, dword [esp + 0xc8]
mov edi, 0x10
cmp eax, edi
jb 0x408ab2
mov ecx, dword [esp + 0xb4]
push ecx
call fcn.0040c1b1
add esp, 4
cmp dword [esp + 0x104], edi
mov dword [esp + 0xc8], esi
mov dword [esp + 0xc4], 0
mov byte [esp + 0xb4], 0
mov byte [esp + 0x4bc24], 0xf
jb 0x408aed
mov edx, dword [esp + 0xf0]
push edx
call fcn.0040c1b1
add esp, 4
push 8
lea eax, [esp + 0x804]
push eax
push 0x41747c
lea ecx, [esp + 0x40c]
push ecx
lea ecx, [esp + 0x1c8]
call fcn.0040af70
lea edx, [esp + 0x800]
push edx
call fcn.0040c6e8
add esp, 4
test eax, eax
je 0x4092e2
mov eax, dword [ebx + 0x1934]
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x46
push str.http:__www.funad.co.kr_dynamic_adv_sb_tcon_keyword.html_type1target
lea ecx, [esp + 0xd8]
mov dword [esp + 0xf0], esi
mov dword [esp + 0xec], 0
mov byte [esp + 0xdc], 0
call fcn.00402370
lea eax, [esp + 0x400]
mov byte [esp + 0x4bc24], 0x12
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408b76
sub eax, edx
push eax
lea ecx, [esp + 0x404]
push ecx
lea ecx, [esp + 0xd8]
call fcn.00402260
mov dword [esp + 0x120], esi
mov dword [esp + 0x11c], 0
mov byte [esp + 0x10c], 0
lea eax, [esp + 0x1f8]
mov byte [esp + 0x4bc24], 0x13
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408bc0
sub eax, edi
push eax
lea edx, [esp + 0x1fc]
push edx
lea ecx, [esp + 0x110]
call fcn.00402370
push 1
push 0x41748c
lea ecx, [esp + 0x110]
call fcn.00402260
push 8
push str.tcon.dat
lea ecx, [esp + 0x110]
call fcn.00402260
lea ecx, [esp + 0x2800]
call fcn.0040ad70
push str.Mozilla_4.0___
lea ecx, [esp + 0x2804]
mov byte [esp + 0x4bc28], 0x14
call fcn.0040ad90
cmp dword [esp + 0x120], 0x10
mov ecx, dword [esp + 0x10c]
jae 0x408c41
lea ecx, [esp + 0x10c]
cmp dword [esp + 0xe8], 0x10
mov eax, dword [esp + 0xd4]
jae 0x408c59
lea eax, [esp + 0xd4]
push ecx
push eax
xor edi, edi
push edi
lea ecx, [esp + 0x280c]
call fcn.0040add0
lea ecx, [esp + 0x1d8]
call fcn.0040afd0
push 8
push str.tcon.dat
lea ecx, [esp + 0xf4]
mov byte [esp + 0x4bc2c], 0x15
mov dword [esp + 0x10c], esi
mov dword [esp + 0x108], edi
mov byte [esp + 0xf8], 0
call fcn.00402370
lea eax, [esp + 0x1f8]
mov byte [esp + 0x4bc24], 0x16
mov dword [esp + 0xc8], esi
mov dword [esp + 0xc4], edi
mov byte [esp + 0xb4], 0
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408cd0
sub eax, edx
push eax
lea eax, [esp + 0x1fc]
push eax
lea ecx, [esp + 0xb8]
call fcn.00402370
lea ecx, [esp + 0xec]
push ecx
lea edx, [esp + 0xb4]
push edx
lea ecx, [esp + 0x1e0]
mov byte [esp + 0x4bc2c], 0x17
call fcn.0040b040
cmp dword [esp + 0xc8], 0x10
jb 0x408d2c
mov eax, dword [esp + 0xb4]
push eax
call fcn.0040c1b1
add esp, 4
cmp dword [esp + 0x104], 0x10
mov dword [esp + 0xc8], esi
mov dword [esp + 0xc4], edi
mov byte [esp + 0xb4], 0
mov byte [esp + 0x4bc24], 0x15
jb 0x408d64
mov ecx, dword [esp + 0xf0]
push ecx
call fcn.0040c1b1
add esp, 4
push 8
lea edx, [esp + 0x804]
push edx
push 0x41747c
push str.TCON
lea ecx, [esp + 0x1e8]
call fcn.0040af70
push 0x80
lea eax, [ebx + 0xcd44]
push eax
push 0x4176a4
push str.TCON
lea ecx, [esp + 0x1e8]
call fcn.0040af70
xor eax, eax
mov byte [esp + 0x300], 0
mov ecx, 0x1f
lea edi, [esp + 0x301]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [esp + 0x1000], 0
mov ecx, 0xff
lea edi, [esp + 0x1001]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x80
stosb byte es:[edi], al
lea eax, [esp + 0x304]
push eax
push str.KEYWORD
push str.TCON
lea ecx, [esp + 0x1e8]
call fcn.0040af70
lea ecx, [esp + 0x800]
push ecx
call fcn.0040c6e8
add esp, 4
test eax, eax
je 0x409267
lea edx, [ebx + 0x1591c4]
mov esi, edx
lea edi, [esp + 0x400]
mov cl, byte [edi]
mov al, cl
cmp cl, byte [esi]
jne 0x408e4a
test al, al
je 0x408e46
mov cl, byte [edi + 1]
mov al, cl
cmp cl, byte [esi + 1]
jne 0x408e4a
add edi, 2
add esi, 2
test al, al
jne 0x408e26
xor eax, eax
jmp 0x408e4f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4091a9
lea eax, [esp + 0x400]
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408e61
sub eax, esi
lea ecx, [eax + 1]
mov edi, edx
mov edx, ecx
shr ecx, 2
lea esi, [esp + 0x400]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, ebx
call fcn.00405890
mov ecx, ebx
call fcn.00406030
push 0x800
lea eax, [ebx + 0x1db0]
push eax
push 0x41739c
push str.TCON
lea ecx, [esp + 0x1e8]
mov byte [ebx + 0x24cc], 1
call fcn.0040af70
mov edi, str.YOUNGSM
lea esi, [ebx + 0xcd44]
mov ecx, 8
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x408ef6
mov eax, dword [ebx + 0x1595c8]
test eax, eax
je 0x408ef6
mov eax, dword [ebx + 0x1934]
push edx
push 0x493e0
push 4
push eax
mov dword [ebx + 0x1595c8], edx
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, dword [ebx + 0xcdc4]
xor ecx, ecx
test eax, eax
jle 0x408f60
lea edi, [ebx + 0xcdc8]
mov dword [esp + 0x10], edi
lea esp, [esp]
lea esi, [ebx + 0xcd44]
mov dl, byte [esi]
mov al, dl
cmp dl, byte [edi]
jne 0x408f3a
test al, al
je 0x408f36
mov dl, byte [esi + 1]
mov al, dl
cmp dl, byte [edi + 1]
jne 0x408f3a
add esi, 2
add edi, 2
test al, al
jne 0x408f16
xor eax, eax
jmp 0x408f3f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x409029
mov edi, dword [esp + 0x10]
mov eax, dword [ebx + 0xcdc4]
inc ecx
add edi, 0xa34
cmp ecx, eax
mov dword [esp + 0x10], edi
jl 0x408f10
mov edi, 5
mov ecx, ebx
mov byte [ebx + 0x22bc], 1
call fcn.00404190
mov edx, dword [ebx + 0x1934]
push edi
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebx + 0x1934]
push 0
push 0x1b7740
push 2
push eax
call dword [sym.imp.USER32.dll_SetTimer]
lea ecx, [esp + 0x1d8]
mov byte [esp + 0x4bc24], 0x14
call fcn.0040aff0
lea ecx, [esp + 0x2800]
mov byte [esp + 0x4bc24], 0x13
call fcn.0040ad80
mov eax, dword [esp + 0x120]
mov esi, 0x10
cmp eax, esi
jb 0x408fdf
mov ecx, dword [esp + 0x10c]
push ecx
call fcn.0040c1b1
add esp, 4
mov eax, dword [esp + 0xe8]
xor ebx, ebx
cmp eax, esi
mov edi, 0xf
mov dword [esp + 0x120], edi
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
jb 0x409016
mov edx, dword [esp + 0xd4]
push edx
call fcn.0040c1b1
add esp, 4
mov dword [esp + 0xe8], edi
mov dword [esp + 0xe4], ebx
jmp 0x409246
imul ecx, ecx, 0xa34
lea eax, [ecx + ebx]
mov ecx, dword [eax + 0xd3f4]
test ecx, ecx
mov dword [esp + 0x10], eax
jne 0x4091a9
push 0x270f
mov ecx, ebx
call fcn.00406680
mov eax, dword [esp + 0x10]
add eax, 0xd1e8
push eax
lea ecx, [esp + 0x1004]
push 0x417374
push ecx
mov esi, 0xdc
xor edi, edi
call dword [sym.imp.USER32.dll_wsprintfA]
mov edx, dword [ebx + 0x1934]
add esp, 0xc
mov eax, 0x113
mov dword [esp + 0x98], eax
mov dword [esp + 0x88], edx
mov eax, 0x14
lea edx, [esp + 0x80]
push edx
mov dword [esp + 0xa0], eax
mov eax, dword [0x41dc1c]
push edi
mov dword [esp + 0xa8], eax
mov eax, dword [ebx + 0x159fe8]
push 0x404
mov dword [esp + 0x9c], esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esp + 0x100c]
push eax
mov dword [esp + 0x90], 0x30
mov dword [esp + 0x94], 0x110
mov dword [esp + 0x9c], edi
mov dword [esp + 0xa4], edi
mov dword [esp + 0xb4], ecx
call esi
mov edx, dword [ebx + 0x159fe8]
lea ecx, [esp + 0x20]
push ecx
push 0
mov edi, 5
push 0x41a
push edx
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], edi
call esi
mov byte [ebx + 0x1591bf], 1
call dword [sym.imp.USER32.dll_GetForegroundWindow]
lea ecx, [esp + 0x17c]
push ecx
push eax
mov dword [ebx + 0x1591c0], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 6
jb 0x40915b
mov esi, 0x32
push 0
push 0x417368
call dword [sym.imp.USER32.dll_FindWindowA]
xor ecx, ecx
test eax, eax
je 0x409173
mov ecx, 0x78
mov eax, dword [esp + 0x184]
mov edx, dword [esp + 0x180]
sub eax, ecx
add edx, 0xf
sub eax, esi
push edx
sub eax, 0x64
push eax
call dword [sym.imp.USER32.dll_SetCursorPos]
mov ecx, dword [ebx + 0x1591c0]
push 1
push 0
push ecx
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x408f65
mov eax, dword [ebx + 0x1934]
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
lea ecx, [esp + 0x1d8]
mov byte [esp + 0x4bc24], 0x14
call fcn.0040aff0
lea ecx, [esp + 0x2800]
mov byte [esp + 0x4bc24], 0x13
call fcn.0040ad80
mov eax, dword [esp + 0x120]
mov ebx, 0x10
cmp eax, ebx
jb 0x409200
mov ecx, dword [esp + 0x10c]
push ecx
call fcn.0040c1b1
add esp, 4
mov eax, dword [esp + 0xe8]
xor edi, edi
cmp eax, ebx
mov esi, 0xf
mov dword [esp + 0x120], esi
mov dword [esp + 0x11c], edi
mov byte [esp + 0x10c], 0
jb 0x409238
mov edx, dword [esp + 0xd4]
push edx
call fcn.0040c1b1
add esp, 4
mov dword [esp + 0xe8], esi
mov dword [esp + 0xe4], edi
lea ecx, [esp + 0x1b8]
mov byte [esp + 0xd4], 0
mov byte [esp + 0x4bc24], 0
call fcn.0040aff0
jmp 0x40a26f
lea ecx, [esp + 0x1d8]
mov byte [esp + 0x4bc24], 0x14
call fcn.0040aff0
lea ecx, [esp + 0x2800]
mov byte [esp + 0x4bc24], 0x13
call fcn.0040ad80
mov eax, dword [esp + 0x120]
mov edi, 0x10
cmp eax, edi
jb 0x4092af
mov eax, dword [esp + 0x10c]
push eax
call fcn.0040c1b1
add esp, 4
cmp dword [esp + 0xe8], edi
mov dword [esp + 0x120], esi
mov dword [esp + 0x11c], 0
mov byte [esp + 0x10c], 0
jb 0x4092e2
mov ecx, dword [esp + 0xd4]
push ecx
call fcn.0040c1b1
add esp, 4
lea ecx, [esp + 0x1b8]
mov byte [esp + 0x4bc24], 0
call fcn.0040aff0
mov eax, dword [ebp + 8]
lea esi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409300
sub eax, esi
mov dword [esp + 0x1c], eax
mov eax, dword [ebx + 0xcd24]
xor edx, edx
test eax, eax
mov byte [esp + 0x1b], cl
jle 0x4093e0
lea eax, [ebx + 0x2ccd]
lea ecx, [ebx + 0xccd0]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
jmp 0x409340
mov esi, dword [ebp + 8]
xor eax, eax
mov byte [esp + 0x1000], 0
mov ecx, 0xff
lea edi, [esp + 0x1001]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov eax, ecx
shr ecx, 2
lea edi, [esp + 0x1000]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x10]
lea esi, [esp + 0x1000]
mov cl, byte [esi]
mov al, cl
cmp cl, byte [edi]
jne 0x4093a8
test al, al
je 0x4093a4
mov cl, byte [esi + 1]
mov al, cl
cmp cl, byte [edi + 1]
jne 0x4093a8
add esi, 2
add edi, 2
test al, al
jne 0x409384
xor eax, eax
jmp 0x4093ad
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4093db
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov eax, dword [ebx + 0xcd24]
inc edx
add esi, 4
add ecx, 0x800
cmp edx, eax
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ecx
jl 0x409340
jmp 0x4093e0
mov byte [esp + 0x1b], 1
xor eax, eax
mov byte [esp + 0xc00], 0
mov ecx, 0xff
lea edi, [esp + 0xc01]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
shl edx, 0xb
stosb byte es:[edi], al
lea eax, [edx + ebx + 0x2ccd]
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409408
mov cl, byte [esp + 0x1b]
sub eax, esi
test cl, cl
je 0x40a26f
mov edx, dword [esp + 0x1c]
cmp eax, edx
mov esi, dword [ebp + 8]
mov ecx, eax
jge 0x40943f
lea ebx, [ebx]
cmp byte [ecx + esi], 0x26
je 0x4094ec
inc ecx
cmp ecx, edx
jl 0x409430
sub ecx, eax
add esi, eax
mov eax, ecx
shr ecx, 2
lea edi, [esp + 0xc00]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [esp + 0xc00]
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x13c], 0xf
mov dword [esp + 0x138], 0
mov byte [esp + 0x128], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409480
sub eax, edx
push eax
lea ecx, [esp + 0xc04]
push ecx
lea ecx, [esp + 0x12c]
call fcn.00402370
cmp dword [esp + 0x13c], 0x10
mov edi, dword [esp + 0x128]
mov byte [esp + 0x4bc24], 0x18
jae 0x4094be
lea edi, [esp + 0x128]
mov edx, dword [ebx + 0xcd3c]
mov eax, edx
cmp eax, edx
jae 0x4094ca
test edx, edx
je 0x40951a
mov ecx, dword [esp + 0x138]
cmp edx, ecx
jae 0x4094db
mov ecx, edx
cmp dword [ebx + 0xcd40], 0x10
jb 0x409505
mov esi, dword [ebx + 0xcd2c]
jmp 0x40950b
sub ecx, eax
mov edx, ecx
add esi, eax
shr ecx, 2
lea edi, [esp + 0xc00]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
jmp 0x409453
lea esi, [ebx + 0xcd2c]
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x409516
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x409565
mov esi, dword [esp + 0x138]
cmp edx, esi
jb 0x409565
xor eax, eax
cmp edx, esi
setne al
test eax, eax
jne 0x409565
cmp dword [esp + 0x13c], 0x10
jb 0x40954a
mov edx, dword [esp + 0x128]
push edx
call fcn.0040c1b1
add esp, 4
mov dword [esp + 0x13c], 0xf
mov dword [esp + 0x138], 0
jmp 0x40a267
lea eax, [esp + 0xc00]
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409570
sub eax, edx
push eax
lea eax, [esp + 0xc04]
push eax
lea ecx, [ebx + 0xcd28]
call fcn.00402370
mov ecx, dword [ebx + 0x1934]
push 0
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov al, byte [ebx + 0x1597d0]
test al, al
je 0x409b14
mov al, byte [ebx + 0x159fd8]
test al, al
jne 0x409b14
push 0x36
mov esi, 0xf
push str.http:__www.funad.co.kr_searchnq_check_url.html_target
lea ecx, [esp + 0x184]
mov dword [esp + 0x19c], esi
mov dword [esp + 0x198], 0
mov byte [esp + 0x188], 0
call fcn.00402370
lea eax, [esp + 0xc00]
mov byte [esp + 0x4bc24], 0x19
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409600
sub eax, edx
push eax
lea edx, [esp + 0xc04]
push edx
lea ecx, [esp + 0x184]
call fcn.00402260
push 6
push str.idx0
lea ecx, [esp + 0x184]
call fcn.00402260
mov dword [esp + 0x120], esi
mov dword [esp + 0x11c], 0
mov byte [esp + 0x10c], 0
lea eax, [esp + 0x1f8]
mov byte [esp + 0x4bc24], 0x1a
lea edi, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409660
sub eax, edi
push eax
lea eax, [esp + 0x1fc]
push eax
lea ecx, [esp + 0x110]
call fcn.00402370
push 1
push 0x41748c
lea ecx, [esp + 0x110]
call fcn.00402260
push 0xc
push str.searchnq.dat
lea ecx, [esp + 0x110]
call fcn.00402260
lea ecx, [esp + 0x33560]
call fcn.0040ad70
push str.Mozilla_4.0___
lea ecx, [esp + 0x33564]
mov byte [esp + 0x4bc28], 0x1b
call fcn.0040ad90
cmp dword [esp + 0x120], 0x10
mov ecx, dword [esp + 0x10c]
jae 0x4096e1
lea ecx, [esp + 0x10c]
cmp dword [esp + 0x194], 0x10
mov eax, dword [esp + 0x180]
jae 0x4096f9
lea eax, [esp + 0x180]
push ecx
push eax
xor edi, edi
push edi
lea ecx, [esp + 0x3356c]
call fcn.0040add0
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [esp + 0x1b8]
call fcn.0040afd0
push 0xc
push str.searchnq.dat
lea ecx, [esp + 0x148]
mov byte [esp + 0x4bc2c], 0x1c
mov dword [esp + 0x160], esi
mov dword [esp + 0x15c], edi
mov byte [esp + 0x14c], 0
call fcn.00402370
lea eax, [esp + 0x1f8]
mov byte [esp + 0x4bc24], 0x1d
mov dword [esp + 0xe8], esi
mov dword [esp + 0xe4], edi
mov byte [esp + 0xd4], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409777
sub eax, edx
push eax
lea ecx, [esp + 0x1fc]
push ecx
lea ecx, [esp + 0xd8]
call fcn.00402370
lea edx, [esp + 0x140]
push edx
lea eax, [esp + 0xd4]
push eax
lea ecx, [esp + 0x1c0]
mov byte [esp + 0x4bc2c], 0x1e
call fcn.0040b040
cmp dword [esp + 0xe8], 0x10
jb 0x4097d3
mov ecx, dword [esp + 0xd4]
push ecx
call fcn.0040c1b1
add esp, 4
cmp dword [esp + 0x158], 0x10
mov dword [esp + 0xe8], esi
mov dword [esp + 0xe4], edi
mov byte [esp + 0xd4], 0
mov byte [esp + 0x4bc24], 0x1c
jb 0x40980b
mov edx, dword [esp + 0x144]
push edx
call fcn.0040c1b1
add esp, 4
push 8
lea eax, [esp + 0x804]
push eax
push 0x41747c
push str.SEARCHNQ
lea ecx, [esp + 0x1c8]
call fcn.0040af70
lea ecx, [esp + 0x800]
push ecx
call fcn.0040c6e8
add esp, 4
test eax, eax
je 0x409a8f
mov byte [esp + 0x300], 0
xor eax, eax
mov ecx, 0x1f
lea edi, [esp + 0x301]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebx + 0x159fd8], 1
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push 0x400
lea edx, [ebx + 0x1597d8]
push edx
push 0x41739c
push str.SEARCHNQ
lea ecx, [esp + 0x1c8]
mov dword [ebx + 0x159fdc], eax
call fcn.0040af70
push 0x80
lea eax, [esp + 0x304]
push eax
push 0x4176a4
push str.SEARCHNQ
lea ecx, [esp + 0x1c8]
call fcn.0040af70
push 0x3a
push str.http:__www.funad.co.kr_searchnq_stat_sum_tcon.html_target
lea ecx, [esp + 0x148]
mov dword [esp + 0x160], esi
mov dword [esp + 0x15c], 0
mov byte [esp + 0x14c], 0
call fcn.00402370
lea eax, [esp + 0xc00]
mov byte [esp + 0x4bc24], 0x1f
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4098f5
sub eax, edi
push eax
lea ecx, [esp + 0xc04]
push ecx
lea ecx, [esp + 0x148]
call fcn.00402260
push 4
push str.id
lea ecx, [esp + 0x148]
call fcn.00402260
lea eax, [esp + 0x300]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409930
sub eax, edx
push eax
lea edx, [esp + 0x304]
push edx
lea ecx, [esp + 0x148]
call fcn.00402260
mov dword [esp + 0xe8], esi
mov dword [esp + 0xe4], 0
mov byte [esp + 0xd4], 0
lea eax, [esp + 0x1f8]
mov byte [esp + 0x4bc24], 0x20
lea edi, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409980
sub eax, edi
push eax
lea eax, [esp + 0x1fc]
push eax
lea ecx, [esp + 0xd8]
call fcn.00402370
push 1
push 0x41748c
lea ecx, [esp + 0xd8]
call fcn.00402260
push 0xc
push str.stat_sum.dat
lea ecx, [esp + 0xd8]
call fcn.00402260
lea ecx, [esp + 0x2800]
call fcn.0040ad70
push str.Mozilla_4.0___
lea ecx, [esp + 0x2804]
mov byte [esp + 0x4bc28], 0x21
call fcn.0040ad90
cmp dword [esp + 0xe8], 0x10
mov ecx, dword [esp + 0xd4]
jae 0x409a01
lea ecx, [esp + 0xd4]
mov eax, dword [esp + 0x158]
mov edi, 0x10
cmp eax, edi
mov eax, dword [esp + 0x144]
jae 0x409a1f
lea eax, [esp + 0x144]
push ecx
push eax
push 0
lea ecx, [esp + 0x280c]
call fcn.0040add0
lea ecx, [esp + 0x2800]
mov byte [esp + 0x4bc24], 0x20
call fcn.0040ad80
cmp dword [esp + 0xe8], edi
jb 0x409a5c
mov ecx, dword [esp + 0xd4]
push ecx
call fcn.0040c1b1
add esp, 4
cmp dword [esp + 0x158], edi
mov dword [esp + 0xe8], esi
mov dword [esp + 0xe4], 0
mov byte [esp + 0xd4], 0
jb 0x409a8f
mov edx, dword [esp + 0x144]
push edx
call fcn.0040c1b1
add esp, 4
lea ecx, [esp + 0x1b8]
mov byte [esp + 0x4bc24], 0x1b
call fcn.0040aff0
lea ecx, [esp + 0x33560]
mov byte [esp + 0x4bc24], 0x1a
call fcn.0040ad80
mov eax, dword [esp + 0x120]
mov edi, 0x10
cmp eax, edi
jb 0x409ad7
mov eax, dword [esp + 0x10c]
push eax
call fcn.0040c1b1
add esp, 4
cmp dword [esp + 0x194], edi
mov dword [esp + 0x120], esi
mov dword [esp + 0x11c], 0
mov byte [esp + 0x10c], 0
mov byte [esp + 0x4bc24], 0x18
jb 0x409b19
mov ecx, dword [esp + 0x180]
push ecx
call fcn.0040c1b1
add esp, 4
jmp 0x409b19
mov esi, 0xf
mov al, byte [ebx + 0x22bc]
test al, al
je 0x409b4d
cmp dword [esp + 0x13c], 0x10
jb 0x409b3d
mov edx, dword [esp + 0x128]
push edx
call fcn.0040c1b1
add esp, 4
mov dword [esp + 0x138], 0
jmp 0x40a260
push 0x3f
push str.http:__www.funad.co.kr_dynamic_adv_sb_tcon_keyword.html_target
lea ecx, [esp + 0xb8]
mov dword [esp + 0xd0], esi
mov dword [esp + 0xcc], 0
mov byte [esp + 0xbc], 0
call fcn.00402370
lea eax, [esp + 0xc00]
mov byte [esp + 0x4bc24], 0x22
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409b90
sub eax, edx
push eax
lea eax, [esp + 0xc04]
push eax
lea ecx, [esp + 0xb8]
call fcn.00402260
mov dword [esp + 0x104], esi
mov dword [esp + 0x100], 0
mov byte [esp + 0xf0], 0
lea eax, [esp + 0x1f8]
mov byte [esp + 0x4bc24], 0x23
lea edi, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409be0
sub eax, edi
push eax
lea ecx, [esp + 0x1fc]
push ecx
lea ecx, [esp + 0xf4]
call fcn.00402370
push 1
push 0x41748c
lea ecx, [esp + 0xf4]
call fcn.00402260
push 8
push str.tcon.dat
lea ecx, [esp + 0xf4]
call fcn.00402260
lea ecx, [esp + 0x1aeb0]
call fcn.0040ad70
push str.Mozilla_4.0___
lea ecx, [esp + 0x1aeb4]
mov byte [esp + 0x4bc28], 0x24
call fcn.0040ad90
cmp dword [esp + 0x104], 0x10
mov ecx, dword [esp + 0xf0]
jae 0x409c61
lea ecx, [esp + 0xf0]
cmp dword [esp + 0xc8], 0x10
mov eax, dword [esp + 0xb4]
jae 0x409c79
lea eax, [esp + 0xb4]
push ecx
push eax
xor edi, edi
push edi
lea ecx, [esp + 0x1aebc]
call fcn.0040add0
lea ecx, [esp + 0x15c]
call fcn.0040afd0
push 8
push str.tcon.dat
lea ecx, [esp + 0x110]
mov byte [esp + 0x4bc2c], 0x25
mov dword [esp + 0x128], esi
mov dword [esp + 0x124], edi
mov byte [esp + 0x114], 0
call fcn.00402370
lea eax, [esp + 0x1f8]
mov byte [esp + 0x4bc24], 0x26
mov dword [esp + 0xe8], esi
mov dword [esp + 0xe4], edi
mov byte [esp + 0xd4], 0
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x409cf0
sub eax, edx
push eax
lea edx, [esp + 0x1fc]
push edx
lea ecx, [esp + 0xd8]
call fcn.00402370
lea eax, [esp + 0x108]
push eax
lea ecx, [esp + 0xd4]
push ecx
lea ecx, [esp + 0x164]
mov byte [esp + 0x4bc2c], 0x27
call fcn.0040b040
cmp dword [esp + 0xe8], 0x10
jb 0x409d4c
mov edx, dword [esp + 0xd4]
push edx
call fcn.0040c1b1
add esp, 4
cmp dword [esp + 0x120], 0x10
mov dword [esp + 0xe8], esi
mov dword [esp + 0xe4], edi
mov byte [esp + 0xd4], 0
mov byte [esp + 0x4bc24], 0x25
jb 0x409d84
mov eax, dword [esp + 0x10c]
push eax
call fcn.0040c1b1
add esp, 4
push 8
lea ecx, [esp + 0x804]
push ecx
push 0x41747c
push str.TCON
lea ecx, [esp + 0x16c]
call fcn.0040af70
push 0x80
lea eax, [ebx + 0xcd44]
push eax
push 0x4176a4
push str.TCON
lea ecx, [esp + 0x16c]
call fcn.0040af70
xor eax, eax
mov byte [esp + 0x380], 0
mov ecx, 0x1f
lea edi, [esp + 0x381]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [esp + 0x2400], 0
xor eax, eax
mov ecx, 0xff
lea edi, [esp + 0x2401]
rep stosd dword es:[edi], eax
push 0x80
lea edx, [esp + 0x384]
push edx
stosw word es:[edi], ax
push str.KEYWORD
push str.TCON
lea ecx, [esp + 0x16c]
stosb byte es:[edi], al
call fcn.0040af70
lea eax, [esp + 0x800]
push eax
call fcn.0040c6e8
add esp, 4
test eax, eax
je 0x40a1af
mov ecx, ebx
call fcn.00405890
mov ecx, ebx
call fcn.00406030
push 0x800
lea ecx, [ebx + 0x1db0]
push ecx
push 0x41739c
push str.TCON
lea ecx, [esp + 0x16c]
mov byte [ebx + 0x24cc], 1
call fcn.0040af70
mov edi, str.YOUNGSM
lea esi, [ebx + 0xcd44]
mov ecx, 8
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x409ea9
mov eax, dword [ebx + 0x1595c8]
test eax, eax
je 0x409ea9
mov eax, dword [ebx + 0x1934]
push edx
push 0x493e0
push 4
push eax
mov dword [ebx + 0x1595c8], edx
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, dword [ebx + 0xcdc4]
xor ecx, ecx
test eax, eax
jle 0x409f10
lea edi, [ebx + 0xcdc8]
mov dword [esp + 0x10], edi
nop
lea esi, [ebx + 0xcd44]
mov dl, byte [esi]
mov al, dl
cmp dl, byte [edi]
jne 0x409eea
test al, al
je 0x409ee6
mov dl, byte [esi + 1]
mov al, dl
cmp dl, byte [edi + 1]
jne 0x409eea
add esi, 2
add edi, 2
test al, al
jne 0x409ec6
xor eax, eax
jmp 0x409eef
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40a008
mov edi, dword [esp + 0x10]
mov eax, dword [ebx + 0xcdc4]
inc ecx
add edi, 0xa34
cmp ecx, eax
mov dword [esp + 0x10], edi
jl 0x409ec0
mov edi, 5
mov ecx, ebx
mov byte [ebx + 0x22bc], 1
call fcn.00404190
mov edx, dword [ebx + 0x1934]
push 0
push 0x927c0
push 2
push edx
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, dword [ebx + 0x1934]
push edi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
lea ecx, [esp + 0x15c]
mov byte [esp + 0x4bc24], 0x24
call fcn.0040aff0
lea ecx, [esp + 0x1aeb0]
mov byte [esp + 0x4bc24], 0x23
call fcn.0040ad80
mov eax, dword [esp + 0x104]
mov esi, 0x10
cmp eax, esi
jb 0x409f8f
mov ecx, dword [esp + 0xf0]
push ecx
call fcn.0040c1b1
add esp, 4
mov eax, dword [esp + 0xc8]
xor ebx, ebx
cmp eax, esi
mov edi, 0xf
mov dword [esp + 0x104], edi
mov dword [esp + 0x100], ebx
mov byte [esp + 0xf0], bl
jb 0x409fc6
mov edx, dword [esp + 0xb4]
push edx
call fcn.0040c1b1
add esp, 4
cmp dword [esp + 0x13c], esi
mov dword [esp + 0xc8], edi
mov dword [esp + 0xc4], ebx
mov byte [esp + 0xb4], 0
jb 0x409ff5
mov eax, dword [esp + 0x128]
push eax
call fcn.0040c1b1
add esp, 4
mov dword [esp + 0x13c], edi
mov dword [esp + 0x138], ebx
jmp 0x40a267
imul ecx, ecx, 0xa34
lea eax, [ecx + ebx]
mov ecx, dword [eax + 0xd3f4]
test ecx, ecx
je 0x40a07c
mov eax, dword [ebx + 0x1934]
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
lea ecx, [esp + 0x15c]
mov byte [esp + 0x4bc24], 0x24
call fcn.0040aff0
lea ecx, [esp + 0x1aeb0]
mov byte [esp + 0x4bc24], 0x23
call fcn.0040ad80
mov eax, dword [esp + 0x104]
mov ebx, 0x10
cmp eax, ebx
jb 0x40a072
mov ecx, dword [esp + 0xf0]
push ecx
call fcn.0040c1b1
add esp, 4
mov esi, 0xf
jmp 0x40a1f7
add eax, 0xd1e8
push eax
lea ecx, [esp + 0x384]
push ecx
lea edx, [esp + 0x2408]
push str.__s___s
push edx
mov esi, 0xdc
xor edi, edi
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [ebx + 0x1934]
mov ecx, dword [0x41dc1c]
mov dword [esp + 0x68], eax
mov eax, 0x113
mov dword [esp + 0x78], eax
add esp, 0x10
mov eax, 0x14
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x50]
push eax
push edi
mov dword [esp + 0x78], ecx
mov ecx, dword [ebx + 0x159fe8]
push 0x404
mov dword [esp + 0x6c], esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
lea edx, [esp + 0x240c]
push ecx
mov dword [esp + 0x60], 0x30
mov dword [esp + 0x64], 0x110
mov dword [esp + 0x6c], edi
mov dword [esp + 0x74], edi
mov dword [esp + 0x84], edx
call esi
mov eax, dword [ebx + 0x159fe8]
lea edx, [esp + 0x30]
push edx
push 0
mov edi, 5
push 0x41a
push eax
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
call esi
call dword [sym.imp.USER32.dll_GetForegroundWindow]
lea ecx, [esp + 0x140]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 6
jb 0x40a161
mov esi, 0x32
push 0
push 0x417368
call dword [sym.imp.USER32.dll_FindWindowA]
xor ecx, ecx
test eax, eax
je 0x40a179
mov ecx, 0x78
mov eax, dword [esp + 0x148]
mov edx, dword [esp + 0x144]
sub eax, ecx
add edx, 0xf
sub eax, esi
push edx
sub eax, 0x64
push eax
call dword [sym.imp.USER32.dll_SetCursorPos]
mov ecx, dword [ebx + 0x1934]
push 1
push 0
push ecx
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x409f15
lea ecx, [esp + 0x15c]
mov byte [esp + 0x4bc24], 0x24
call fcn.0040aff0
lea ecx, [esp + 0x1aeb0]
mov byte [esp + 0x4bc24], 0x23
call fcn.0040ad80
mov eax, dword [esp + 0x104]
mov ebx, 0x10
cmp eax, ebx
jb 0x40a1f7
mov ecx, dword [esp + 0xf0]
push ecx
call fcn.0040c1b1
add esp, 4
mov eax, dword [esp + 0xc8]
xor edi, edi
cmp eax, ebx
mov dword [esp + 0x104], esi
mov dword [esp + 0x100], edi
mov byte [esp + 0xf0], 0
jb 0x40a22a
mov edx, dword [esp + 0xb4]
push edx
call fcn.0040c1b1
add esp, 4
cmp dword [esp + 0x13c], ebx
mov dword [esp + 0xc8], esi
mov dword [esp + 0xc4], edi
mov byte [esp + 0xb4], 0
jb 0x40a259
mov eax, dword [esp + 0x128]
push eax
call fcn.0040c1b1
add esp, 4
mov dword [esp + 0x138], edi
mov dword [esp + 0x13c], esi
mov byte [esp + 0x128], 0
lea ecx, [esp + 0x198]
mov dword [esp + 0x4bc24], 0xffffffff
call fcn.0040aff0
mov ecx, dword [esp + 0x4bc1c]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x4bc14]
call fcn.0040c0d7
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4