Function at 0x405969
Capabilities:
Contain obfuscated stackstrings
Read file on windows
Write file on windows

Disassembly:
mov eax, 0x41dd44
call fcn.00415180
sub esp, 0x6d0
push ebx
push esi
push edi
mov edi, ecx
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x30], edi
lea eax, [edi + 0x148]
push eax
call fcn.00414db8
lea ebx, [edi + 0x14c]
xor esi, esi
push ebx
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], esi
call fcn.00414db8
push ecx
mov byte [ebp - 4], 1
mov ecx, esp
mov dword [ebp - 0x38], esp
push ebx
call fcn.00414db8
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.BasicCtrlDll.dll_class_CString___cdecl_GetSpecialQQAppDataPath_class_CString_]
pop ecx
pop ecx
lea eax, [edi + 0x150]
lea ecx, [ebp - 0x60]
push eax
mov byte [ebp - 4], 2
call fcn.00414db8
lea eax, [edi + 0x154]
lea ecx, [ebp - 0x5c]
push eax
mov byte [ebp - 4], 3
call fcn.00414db8
push dword [ebp - 0x5c]
mov byte [ebp - 4], 4
call dword [sym.imp.MSVCRT.dll_atol]
cmp eax, 0x65f
pop ecx
jae 0x405a04
push ebx
lea ecx, [ebp - 0x3c]
call fcn.00414db2
mov eax, dword [ebp - 0x4c]
cmp dword [eax - 8], esi
je 0x407571
mov eax, dword [ebp - 0x3c]
cmp dword [eax - 8], esi
je 0x407571
mov eax, dword [ebp - 0x60]
cmp dword [eax - 8], esi
je 0x407571
mov eax, dword [ebp - 0x5c]
cmp dword [eax - 8], esi
je 0x407571
push 0x427c04
lea ecx, [ebp - 0x2c]
call sub.MFC42.DLL_CString::CString_1
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 5
push eax
push ecx
lea eax, [ebp - 0x4c]
mov ecx, esp
mov dword [ebp - 0x38], esp
push eax
call fcn.00414db8
mov ecx, edi
call fcn.004085f6
cmp eax, esi
je 0x407565
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x28]
push eax
call fcn.00414db8
push 0x5c
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 6
call sub.MFC42.DLL_CString::ReverseFind
cmp eax, 0xffffffff
je 0x407559
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx - 8]
sub ecx, eax
lea eax, [ebp - 0x10]
dec ecx
push ecx
push eax
lea ecx, [ebp - 0x28]
call sub.MFC42.DLL_CString::Right
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 7
call fcn.00414db2
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 6
call sub.MFC42.DLL_CString::CString
push 0x2e
lea ecx, [ebp - 0x28]
call sub.MFC42.DLL_CString::ReverseFind
cmp eax, 0xffffffff
je 0x407559
push eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x28]
call sub.MFC42.DLL_CString::Left
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 8
call fcn.00414db2
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 6
call sub.MFC42.DLL_CString::CString
mov ecx, dword [ebp - 0x30]
push 0xa
call fcn.004085d9
lea eax, [ebp - 0x3c]
push str.QQSuperbag
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
xor esi, esi
push esi
push eax
call dword [0x420138]
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x3c]
push str.QQSuperbag_
push eax
lea eax, [ebp - 0x20]
push eax
call sub.MFC42.DLL_operator_1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
push ecx
push eax
lea eax, [ebp - 0x34]
push eax
call sub.MFC42.DLL_operator
push str..uip
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xa
push eax
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
push esi
push eax
push dword [ebp - 0x4c]
call dword [0x4200e8]
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 9
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 6
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0xf8]
call fcn.0040763c
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0xb
call sub.MFC42.DLL_CFileFind::CFileFind
mov edi, str.QQSuperbagInstallUip.xml
lea eax, [ebp - 0x3c]
push edi
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0xc
push eax
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
mov byte [ebp - 4], 0xd
push esi
push eax
lea ecx, [ebp - 0x114]
call sub.MFC42.DLL_CFileFind::FindFile
mov ebx, eax
lea ecx, [ebp - 0x10]
neg ebx
sbb bl, bl
mov byte [ebp - 4], 0xc
inc bl
call sub.MFC42.DLL_CString::CString
test bl, bl
mov esi, 0x104
je 0x405cff
lea eax, [ebp - 0x3c]
push edi
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
push 0x42734c
push eax
call dword [sym.imp.MSVCRT.dll_fopen]
pop ecx
mov dword [ebp - 0x14], eax
pop ecx
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
cmp dword [ebp - 0x14], 0
je 0x405ecc
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
mov ebx, dword [sym.imp.MSVCRT.dll_strncpy]
push 0x103
lea eax, [ebp - 0x238]
push str.__xml_version_1.0__encoding_gb2312____n
push eax
call ebx
add esp, 0x18
lea eax, [ebp - 0x238]
push dword [ebp - 0x14]
push eax
call sub.MSVCRT.dll_strlen
pop ecx
push eax
lea eax, [ebp - 0x238]
push 1
push eax
call dword [sym.imp.MSVCRT.dll_fwrite]
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
push 0x103
lea eax, [ebp - 0x238]
push str._theme_version_1.0___n
push eax
call ebx
add esp, 0x28
lea eax, [ebp - 0x238]
push dword [ebp - 0x14]
push eax
call sub.MSVCRT.dll_strlen
pop ecx
push eax
lea eax, [ebp - 0x238]
push 1
push eax
call dword [sym.imp.MSVCRT.dll_fwrite]
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
push 0x103
lea eax, [ebp - 0x238]
push str.__theme__n
push eax
call ebx
add esp, 0x28
lea eax, [ebp - 0x238]
push dword [ebp - 0x14]
push eax
call sub.MSVCRT.dll_strlen
pop ecx
push eax
lea eax, [ebp - 0x238]
push 1
push eax
call dword [sym.imp.MSVCRT.dll_fwrite]
push dword [ebp - 0x14]
call dword [sym.imp.MSVCRT.dll_fclose]
add esp, 0x14
lea ecx, [ebp - 0x114]
call sub.MFC42.DLL_CFileFind::Close
lea eax, [ebp - 0x3c]
push edi
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
push 0x4272f8
push eax
call dword [sym.imp.MSVCRT.dll_fopen]
pop ecx
mov ebx, eax
pop ecx
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
test ebx, ebx
je 0x405ecc
mov edi, dword [sym.imp.MSVCRT.dll_fseek]
push 2
push 0
push ebx
call edi
push ebx
call dword [sym.imp.MSVCRT.dll_ftell]
push 0
push 0
push ebx
mov dword [ebp - 0x20], eax
call edi
mov eax, dword [ebp - 0x20]
inc eax
push eax
call sub.MFC42.DLL_operatornew
mov edi, eax
add esp, 0x20
test edi, edi
je 0x40754c
push ebx
push 1
push dword [ebp - 0x20]
push edi
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
cmp eax, 1
jne 0x40754c
mov eax, dword [ebp - 0x20]
push edi
lea ecx, [ebp - 0xf8]
and byte [edi + eax], 0
call fcn.004115b0
movzx eax, al
push ebx
mov dword [ebp - 0x10], eax
call dword [sym.imp.MSVCRT.dll_fclose]
push edi
call sub.MFC42.DLL_operatordelete
xor edi, edi
pop ecx
cmp dword [ebp - 0x10], edi
pop ecx
je 0x405ecc
push str.theme
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0xd8], edi
mov dword [ebp - 0xd4], edi
mov dword [ebp - 0xd0], edi
mov dword [ebp - 0xc4], edi
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0xc8], edi
call fcn.004116ff
test al, al
je 0x405ecc
lea ecx, [ebp - 0xf8]
call fcn.0041194c
lea ecx, [ebp - 0x6dc]
call fcn.00412d79
lea eax, [ebp - 0x3c]
push str.QQFileCache
push eax
lea eax, [ebp - 0x12c]
push eax
mov byte [ebp - 4], 0xe
call sub.MFC42.DLL_operator_1
push 0x427068
push eax
lea eax, [ebp - 0x134]
mov byte [ebp - 4], 0xf
push eax
call sub.MFC42.DLL_operator_1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x10
push ecx
push eax
lea eax, [ebp - 0x18]
push eax
call sub.MFC42.DLL_operator
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0x13
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0x12
call sub.MFC42.DLL_CString::CString
push ecx
lea eax, [ebp - 0x18]
mov ecx, esp
mov dword [ebp - 0x38], esp
push eax
call fcn.00414db8
mov ecx, dword [ebp - 0x30]
call fcn.00408187
push edi
lea ecx, [ebp - 0x6dc]
call fcn.00413957
lea eax, [ebp - 0x18]
push eax
push ecx
lea eax, [ebp - 0x4c]
mov ecx, esp
mov dword [ebp - 0x38], esp
push eax
call fcn.00414db8
lea ecx, [ebp - 0x6dc]
call fcn.00412f9a
cmp eax, edi
jne 0x405f09
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x6dc]
mov byte [ebp - 4], 0xc
call fcn.00412ebd
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0xb
call fcn.00414efc
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 6
call fcn.004076b9
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call sub.MFC42.DLL_CString::CString
xor esi, esi
jmp 0x407571
mov edi, str.Info.ini
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
push 0
push eax
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x14
call sub.MFC42.DLL_CFileFind::FindFile
mov ebx, eax
lea ecx, [ebp - 0x10]
neg ebx
sbb bl, bl
mov byte [ebp - 4], 0x12
inc bl
call sub.MFC42.DLL_CString::CString
test bl, bl
lea ecx, [ebp - 0x114]
je 0x405f58
call sub.MFC42.DLL_CFileFind::Close
jmp 0x405eb1
call sub.MFC42.DLL_CFileFind::Close
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
mov ebx, dword [0x420134]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x4272d4
push str.MinVer
push str.Main
call ebx
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x50]
push eax
call sub.MFC42.DLL_CString::CString_1
push dword [ebp - 0x50]
mov byte [ebp - 4], 0x15
push dword [ebp - 0x5c]
call dword [sym.imp.MSVCRT.dll__mbscmp]
pop ecx
test eax, eax
pop ecx
jge 0x40602c
mov esi, 0x427c04
lea ecx, [ebp - 0x44]
push esi
call sub.MFC42.DLL_CString::CString_1
push esi
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x16
call sub.MFC42.DLL_CString::CString_1
push 0xab
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x17
call sub.MFC42.DLL_CString::LoadStringA
push 0xb0
lea ecx, [ebp - 0x20]
call sub.MFC42.DLL_CString::LoadStringA
mov ecx, dword [ebp - 0x30]
push 0x10
push dword [ebp - 0x44]
push dword [ebp - 0x20]
call sub.MFC42.DLL_CWnd::MessageBoxA
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x16
call sub.MFC42.DLL_CString::CString
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x44]
jmp 0x40729f
mov ecx, dword [ebp - 0x30]
push 0x1e
call fcn.004085d9
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x427c04
push str.Name
push str.Main
call ebx
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x24]
push eax
call sub.MFC42.DLL_CString::CString_1
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x18
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [eax + 0x13c]
call fcn.00414db2
push 0
lea ecx, [ebp - 0xf8]
call fcn.004116ff
test al, al
je 0x406138
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0xf8]
push eax
call fcn.004117ae
push str.SuperBag
mov byte [ebp - 4], 0x19
push dword [ebp - 0x14]
call dword [sym.imp.MSVCRT.dll__mbscmp]
pop ecx
test eax, eax
pop ecx
jne 0x406119
lea eax, [ebp - 0x10]
push str.PackName
push eax
lea ecx, [ebp - 0xf8]
call fcn.00407725
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1a
call fcn.00414db2
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x19
call sub.MFC42.DLL_CString::CString
push dword [ebp - 0x24]
push dword [ebp - 0x14]
call dword [sym.imp.MSVCRT.dll__mbsicmp]
pop ecx
test eax, eax
pop ecx
je 0x40612a
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x18
call sub.MFC42.DLL_CString::CString
jmp 0x40609e
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x18
call sub.MFC42.DLL_CString::CString
jmp 0x40614e
push 0
push 1
push 0
push str.SuperBag
lea ecx, [ebp - 0xf8]
call fcn.00412917
push dword [ebp - 0x24]
lea ecx, [ebp - 0xf8]
push str.PackName
push dword [ebp - 0xd4]
call fcn.004122ae
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xf8]
push str.PackID
push dword [ebp - 0xd4]
call fcn.004122ae
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x4272d4
push str.SkinNum
push str.Main
call ebx
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x10]
push eax
call sub.MFC42.DLL_CString::CString_1
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x1b
call fcn.00414db2
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x18
call sub.MFC42.DLL_CString::CString
push dword [ebp - 0x24]
lea ecx, [ebp - 0xf8]
push str.PackSkinNum
push dword [ebp - 0xd4]
call fcn.004122ae
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x4272d4
push str.SceneNum
push str.Main
call ebx
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x10]
push eax
call sub.MFC42.DLL_CString::CString_1
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x1c
call fcn.00414db2
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
push dword [ebp - 0x24]
lea ecx, [ebp - 0xf8]
push str.PackSenceNum
push dword [ebp - 0xd4]
call fcn.004122ae
mov ecx, dword [ebp - 0x30]
push 0x28
call fcn.004085d9
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x4272d4
push str.FaceNum
push str.Main
call ebx
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x10]
push eax
call sub.MFC42.DLL_CString::CString_1
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x1d
call fcn.00414db2
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x18
call sub.MFC42.DLL_CString::CString
push dword [ebp - 0x24]
lea ecx, [ebp - 0xf8]
push str.PackFaceNum
push dword [ebp - 0xd4]
call fcn.004122ae
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x427c04
push str.Maker
push str.Main
call ebx
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x10]
push eax
call sub.MFC42.DLL_CString::CString_1
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x1e
call fcn.00414db2
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
push dword [ebp - 0x24]
lea ecx, [ebp - 0xf8]
push str.PackMaker
push dword [ebp - 0xd4]
call fcn.004122ae
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x427c04
push str.Time
push str.Main
call ebx
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x10]
push eax
call sub.MFC42.DLL_CString::CString_1
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x1f
call fcn.00414db2
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x18
call sub.MFC42.DLL_CString::CString
push dword [ebp - 0x24]
lea ecx, [ebp - 0xf8]
push str.PackTime
push dword [ebp - 0xd4]
call fcn.004122ae
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x427c04
push str.CopyRight
push str.Main
call ebx
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x10]
push eax
call sub.MFC42.DLL_CString::CString_1
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x20
call fcn.00414db2
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x18
call sub.MFC42.DLL_CString::CString
push dword [ebp - 0x24]
push str.PackCopyRight
lea ecx, [ebp - 0xf8]
push dword [ebp - 0xd4]
call fcn.004122ae
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x427c04
push str.MinVer
push str.Main
call ebx
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x10]
push eax
call sub.MFC42.DLL_CString::CString_1
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x21
call fcn.00414db2
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x18
call sub.MFC42.DLL_CString::CString
push dword [ebp - 0x24]
lea ecx, [ebp - 0xf8]
push str.PackMinVer
push dword [ebp - 0xd4]
call fcn.004122ae
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x427c04
push str.Description
push str.Main
call ebx
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x10]
push eax
call sub.MFC42.DLL_CString::CString_1
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x22
call fcn.00414db2
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x18
call sub.MFC42.DLL_CString::CString
push dword [ebp - 0x24]
lea ecx, [ebp - 0xf8]
push str.PackDescription
push dword [ebp - 0xd4]
call fcn.004122ae
lea ecx, [ebp - 0xf8]
call fcn.0041194c
push 0
lea ecx, [ebp - 0xf8]
call fcn.004116ff
test al, al
je 0x406628
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0xf8]
push eax
call fcn.004117ae
push str.Skin
mov byte [ebp - 4], 0x23
push dword [ebp - 0x14]
call dword [sym.imp.MSVCRT.dll__mbscmp]
pop ecx
test eax, eax
pop ecx
je 0x40661a
push str.Scene
push dword [ebp - 0x14]
call dword [sym.imp.MSVCRT.dll__mbscmp]
pop ecx
test eax, eax
pop ecx
jne 0x40660c
lea ecx, [ebp - 0xf8]
call fcn.004119b9
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x18
call sub.MFC42.DLL_CString::CString
jmp 0x4065b5
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x18
call sub.MFC42.DLL_CString::CString
jmp 0x40663e
push 0
push 1
push 0
push str.Skin
lea ecx, [ebp - 0xf8]
call fcn.00412917
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x427c04
push str.Name
push str.Skin
call ebx
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x40]
push eax
call sub.MFC42.DLL_CString::CString_1
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 0x24
cmp dword [eax - 8], 0
je 0x4068bd
lea eax, [ebp - 0x3c]
push str.NewSkins_
push eax
lea eax, [ebp - 0x20]
push eax
call sub.MFC42.DLL_operator_1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x25
push ecx
push eax
lea eax, [ebp - 0x34]
push eax
call sub.MFC42.DLL_operator
push str..
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x26
push eax
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
push 0
push eax
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x27
call sub.MFC42.DLL_CFileFind::FindFile
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x26
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x25
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x24
call sub.MFC42.DLL_CString::CString
cmp dword [ebp - 0x44], 0
je 0x40675f
lea ecx, [ebp - 0x114]
call sub.MFC42.DLL_CFileFind::Close
lea eax, [ebp - 0x3c]
push str.NewSkins_
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MFC42.DLL_operator_1
push ecx
lea edx, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x38], esp
push edx
push eax
push ecx
mov byte [ebp - 4], 0x28
call sub.MFC42.DLL_operator
mov ecx, dword [ebp - 0x30]
call fcn.00408187
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x24
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x64]
push str.NewSkins_
push eax
lea eax, [ebp - 0x20]
push eax
call sub.MFC42.DLL_operator_1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x29
push ecx
push eax
lea eax, [ebp - 0x34]
push eax
call sub.MFC42.DLL_operator
push str..
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x2a
push eax
call sub.MFC42.DLL_operator_1
mov eax, dword [eax]
push 0
push eax
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x2b
call sub.MFC42.DLL_CFileFind::FindFile
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x2a
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x29
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x24
call sub.MFC42.DLL_CString::CString
cmp dword [ebp - 0x44], 0
je 0x40681d
lea ecx, [ebp - 0x114]
call sub.MFC42.DLL_CFileFind::Close
lea eax, [ebp - 0x64]
push str.NewSkins_
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MFC42.DLL_operator_1
push ecx
lea edx, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x38], esp
push edx
push eax
push ecx
mov byte [ebp - 4], 0x2c
call sub.MFC42.DLL_operator
mov ecx, dword [ebp - 0x30]
call fcn.00408187
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x24
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x3c]
push str.NewSkins_
push eax
lea eax, [ebp - 0x58]
push eax
call sub.MFC42.DLL_operator_1
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x2d
push eax
call dword [sym.imp.BasicCtrlDll.dll_int___cdecl_CheckDirecExist_class_CString_const__]
test eax, eax
pop ecx
jne 0x40684d
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.BasicCtrlDll.dll_int___cdecl_CreateAllDir_class_CString_const__]
pop ecx
push ecx
lea ecx, [ebp - 0x3c]
mov eax, esp
mov dword [ebp - 0x38], esp
push str.NewSkins_
push ecx
push eax
call sub.MFC42.DLL_operator_1
lea eax, [ebp - 0x18]
push str.Skin_
push eax
lea eax, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0x2e
call sub.MFC42.DLL_operator_1
push ecx
lea edx, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x78], esp
push edx
push eax
push ecx
mov byte [ebp - 4], 0x2f
call sub.MFC42.DLL_operator
mov ecx, dword [ebp - 0x30]
mov byte [ebp - 4], 0x30
call fcn.0040824d
test eax, eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x2d
sete byte [ebp - 0x19]
call sub.MFC42.DLL_CString::CString
cmp byte [ebp - 0x19], 0
je 0x4068e6
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x24
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x18
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x15
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call sub.MFC42.DLL_CString::CString
jmp 0x405eb1
push dword [ebp - 0x40]
lea ecx, [ebp - 0xf8]
push str.Name
push dword [ebp - 0xd4]
call fcn.004122ae
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x10]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x427c04
push str.SkinID
push str.Skin
call ebx
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x68]
push eax
call sub.MFC42.DLL_CString::CString_1
push dword [ebp - 0x68]
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x31
push 0x4271b4
push dword [ebp - 0xd4]
call fcn.004122ae
mov ecx, dword [ebp - 0x30]
push 0x3c
call fcn.004085d9
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x34]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
push 0
push str.SceneNum
push str.Main
call dword [0x420130]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x10], eax
call sub.MFC42.DLL_CString::CString
cmp dword [ebp - 0x10], 0
jle 0x406ea0
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x34]
push eax
call fcn.00408742
mov eax, dword [eax]
push 0
push eax
call dword [0x420138]
lea ecx, [ebp - 0x34]
call sub.MFC42.DLL_CString::CString
and dword [ebp - 0x74], 0
cmp dword [ebp - 0x10], 0
jle 0x406ea0
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::CString_4
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x32
call sub.MFC42.DLL_CString::CString_4
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x33
call sub.MFC42.DLL_CString::CString_4
push dword [ebp - 0x74]
and dword [ebp - 0x6c], 0
and byte [ebp - 0x19], 0
lea eax, [ebp - 0x14]
push str.Scene_d
push eax
mov byte [ebp - 4], 0x34
call sub.MFC42.DLL_CString::Format
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0x18
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x130]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x427c04
push str.Name
push dword [ebp - 0x14]
call ebx
lea ecx, [ebp - 0x130]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x48]
push eax
call sub.MFC42.DLL_CString::CString_1
mov eax, dword [ebp - 0x48]
mov byte [ebp - 4], 0x35
cmp dword [eax - 8], 0
je 0x407244
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x98]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x427c04
push str.SceneID
push dword [ebp - 0x14]
call ebx
lea ecx, [ebp - 0x98]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x20]
push eax
call fcn.00414dd0
mov eax, dword [ebp - 0x20]
cmp dword [eax - 8], 0
jle 0x406aea
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
pop ecx
mov dword [ebp - 0x6c], eax
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0xa0]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x427c04
push str.SceneType
push dword [ebp - 0x14]
call ebx
lea ecx, [ebp - 0xa0]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x44]
push eax
call fcn.00414dd0
mov eax, dword [ebp - 0x44]
cmp dword [eax - 8], 0
jle 0x406b54
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
pop ecx
mov byte [ebp - 0x19], al
push 0
lea ecx, [ebp - 0xf8]
call fcn.0041174a
test al, al
je 0x406c79
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0xf8]
push eax
call fcn.004117ae
push str.Scene
mov byte [ebp - 4], 0x36
push dword [ebp - 0x70]
call dword [sym.imp.MSVCRT.dll__mbscmp]
pop ecx
test eax, eax
pop ecx
jne 0x406c4e
lea eax, [ebp - 0x90]
push str.Name
push eax
lea ecx, [ebp - 0xf8]
call fcn.00407725
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x37
call fcn.00414db2
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x36
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x9c]
push str.SceneType
push eax
lea ecx, [ebp - 0xf8]
call fcn.00407725
push dword [eax]
call dword [sym.imp.MSVCRT.dll_atoi]
pop ecx
mov byte [ebp - 0x51], al
lea ecx, [ebp - 0x9c]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x94]
push str.SceneID
push eax
lea ecx, [ebp - 0xf8]
call fcn.00407725
push dword [eax]
call dword [sym.imp.MSVCRT.dll_atoi]
pop ecx
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x94]
call sub.MFC42.DLL_CString::CString
push dword [ebp - 0x48]
push dword [ebp - 0x70]
call dword [sym.imp.MSVCRT.dll__mbsicmp]
pop ecx
test eax, eax
pop ecx
jne 0x406c4e
mov al, byte [ebp - 0x19]
cmp byte [ebp - 0x51], al
jne 0x406c4e
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x34], eax
jne 0x406c4e
mov dword [ebp - 0x34], 1
jmp 0x406c52
and dword [ebp - 0x34], 0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x35
call sub.MFC42.DLL_CString::CString
push 0
lea ecx, [ebp - 0xf8]
call fcn.0041174a
test al, al
jne 0x406b69
cmp dword [ebp - 0x34], 0
jne 0x406c8f
push 0
push 1
push 0
push str.Scene
lea ecx, [ebp - 0xf8]
call fcn.00412917
cmp byte [ebp - 0x19], 0
jne 0x406d6f
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x7c]
push eax
call fcn.00408742
push 0x427068
push eax
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x38
push eax
call sub.MFC42.DLL_operator_1
push ecx
lea edx, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x34], esp
push edx
push eax
push ecx
mov byte [ebp - 4], 0x39
call sub.MFC42.DLL_operator
mov ecx, dword [ebp - 0x30]
call fcn.00408187
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x38
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x35
call sub.MFC42.DLL_CString::CString
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x80]
push eax
call fcn.00408742
push ecx
mov byte [ebp - 4], 0x3a
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x427068
push eax
push ecx
call sub.MFC42.DLL_operator_1
lea eax, [ebp - 0x18]
push str.Scene_
push eax
lea eax, [ebp - 0x84]
push eax
mov byte [ebp - 4], 0x3b
call sub.MFC42.DLL_operator_1
push ecx
lea edx, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0x8c], esp
push edx
push eax
push ecx
mov byte [ebp - 4], 0x3c
call sub.MFC42.DLL_operator
mov ecx, dword [ebp - 0x30]
mov byte [ebp - 4], 0x3d
call fcn.0040824d
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x3a
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x35
call sub.MFC42.DLL_CString::CString
jmp 0x406d92
cmp byte [ebp - 0x19], 4
jne 0x406d92
push ecx
lea eax, [ebp - 0x60]
mov ecx, esp
mov dword [ebp - 0x8c], esp
push eax
call fcn.00414db8
push dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x30]
call fcn.00404162
push dword [ebp - 0x48]
lea ecx, [ebp - 0xf8]
push str.Name
push dword [ebp - 0xd4]
call fcn.004122ae
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xf8]
push str.SceneID
push dword [ebp - 0xd4]
call fcn.00412268
movzx eax, byte [ebp - 0x19]
push eax
push str.SceneType
push dword [ebp - 0xd4]
lea ecx, [ebp - 0xf8]
call fcn.00412268
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x78]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x427c04
push 0x4271a0
push dword [ebp - 0x14]
call ebx
lea ecx, [ebp - 0x78]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x38]
push eax
call sub.MFC42.DLL_CString::CString_1
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3e
call fcn.00414db2
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x35
call sub.MFC42.DLL_CString::CString
push dword [ebp - 0x48]
lea ecx, [ebp - 0xf8]
push 0x4271b4
push dword [ebp - 0xd4]
call fcn.004122ae
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x34
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x33
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x32
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x31
call sub.MFC42.DLL_CString::CString
inc dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x10]
jl 0x4069dc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x38]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
push 0
push str.FaceNum
push str.Main
call dword [0x420130]
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x10], eax
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x30]
push 0xffffffffffffffff
push 0
lea ecx, [eax + 0x158]
call fcn.00408bdb
lea ecx, [ebp - 0x128]
call fcn.004075be
and dword [ebp - 0x20], 0
cmp dword [ebp - 0x10], 0
mov byte [ebp - 4], 0x3f
jle 0x407175
lea ecx, [ebp - 0x14]
call sub.MFC42.DLL_CString::CString_4
push dword [ebp - 0x20]
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 0x40
push str.Face_02d
push eax
call sub.MFC42.DLL_CString::Format
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0x18
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x38]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x427c04
push 0x4271a0
push dword [ebp - 0x14]
call ebx
lea ecx, [ebp - 0x38]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x78]
push eax
call sub.MFC42.DLL_CString::CString_1
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x41
call fcn.00414db2
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x40
call sub.MFC42.DLL_CString::CString
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x80]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x427c04
push 0x427190
push dword [ebp - 0x14]
call ebx
lea ecx, [ebp - 0x80]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x84]
push eax
call sub.MFC42.DLL_CString::CString_1
push eax
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x42
call fcn.00414db2
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x40
call sub.MFC42.DLL_CString::CString
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x7c]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x427c04
push str.ShortCut
push dword [ebp - 0x14]
call ebx
lea ecx, [ebp - 0x7c]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x88]
push eax
call sub.MFC42.DLL_CString::CString_1
push eax
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x43
call fcn.00414db2
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x40
call sub.MFC42.DLL_CString::CString
push esi
lea eax, [ebp - 0x238]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
push edi
push eax
lea eax, [ebp - 0x94]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea eax, [ebp - 0x238]
push esi
push eax
push 0x427c04
push str.File
push dword [ebp - 0x14]
call ebx
lea ecx, [ebp - 0x94]
call sub.MFC42.DLL_CString::CString
lea eax, [ebp - 0x238]
lea ecx, [ebp - 0x98]
push eax
call sub.MFC42.DLL_CString::CString_1
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x18]
push str.Face_
push eax
lea eax, [ebp - 0xa0]
push eax
mov byte [ebp - 4], 0x44
call sub.MFC42.DLL_operator_1
push dword [ebp - 0x9c]
mov byte [ebp - 4], 0x45
push eax
lea eax, [ebp - 0x90]
push eax
call sub.MFC42.DLL_operator
push eax
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x46
call fcn.00414db2
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x45
call sub.MFC42.DLL_CString::CString
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0xa0]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x40
call sub.MFC42.DLL_CString::CString
sub esp, 0x14
lea eax, [ebp - 0x128]
mov ecx, esp
mov dword [ebp - 0x8c], esp
push eax
call fcn.004077b1
mov eax, dword [ebp - 0x30]
lea ecx, [eax + 0x158]
call fcn.004088ae
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3f
call sub.MFC42.DLL_CString::CString
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x10]
jl 0x406efc
mov edi, dword [ebp - 0x30]
push 0x50
mov ecx, edi
call fcn.004085d9
push ecx
lea eax, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x8c], esp
push eax
call fcn.00414db8
push ecx
lea eax, [ebp - 0x60]
mov ecx, esp
mov dword [ebp - 0x38], esp
push eax
mov byte [ebp - 4], 0x47
call fcn.00414db8
mov ecx, edi
mov byte [ebp - 4], 0x3f
call fcn.00407856
xor esi, esi
cmp eax, esi
jne 0x407344
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x31
call fcn.00407761
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x2d
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x24
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x18
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x15
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x6dc]
mov byte [ebp - 4], 0xc
call fcn.00412ebd
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0xb
call fcn.00414efc
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 6
call fcn.004076b9
jmp 0x407559
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x34
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x33
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x32
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x31
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x2d
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x24
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x18
call sub.MFC42.DLL_CString::CString
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x24]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x6dc]
mov byte [ebp - 4], 0xc
call fcn.00412ebd
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0xb
call fcn.00414efc
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 6
call fcn.004076b9
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 3
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call sub.MFC42.DLL_CString::CString
and byte [ebp - 4], 0
lea ecx, [ebp - 0x64]
call sub.MFC42.DLL_CString::CString
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c]
call sub.MFC42.DLL_CString::CString
xor eax, eax
jmp 0x4075af
cmp dword [edi + 0x160], esi
mov dword [ebp - 0x20], esi
jle 0x407468
mov esi, str.Face
mov ebx, 0x4271b4
push dword [ebp - 0x20]
lea eax, [ebp - 0x24c]
lea ecx, [edi + 0x158]
push eax
call fcn.0040884d
push eax
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x48
call fcn.00407814
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 0x3f
call fcn.00407761
cmp dword [ebp - 0x118], 0
je 0x407456
push 0
lea ecx, [ebp - 0xf8]
call fcn.004116ff
test al, al
je 0x40742c
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0xf8]
push eax
call fcn.004117ae
push esi
mov byte [ebp - 4], 0x49
push dword [ebp - 0x14]
call dword [sym.imp.MSVCRT.dll__mbscmp]
pop ecx
test eax, eax
pop ecx
jne 0x407410
lea eax, [ebp - 0x38]
push ebx
push eax
lea ecx, [ebp - 0xf8]
call fcn.00407725
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4a
call fcn.00414db2
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x49
call sub.MFC42.DLL_CString::CString
push dword [ebp - 0x11c]
push dword [ebp - 0x14]
call dword [sym.imp.MSVCRT.dll__mbsicmp]
pop ecx
test eax, eax
pop ecx
je 0x40741e
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3f
call sub.MFC42.DLL_CString::CString
jmp 0x40739e
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x3f
call sub.MFC42.DLL_CString::CString
jmp 0x407456
push 0
push 1
push 0
push esi
lea ecx, [ebp - 0xf8]
call fcn.00412917
push dword [ebp - 0x11c]
lea ecx, [ebp - 0xf8]
push ebx
push dword [ebp - 0xd4]
call fcn.004122ae
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, dword [edi + 0x160]
jl 0x40735d
lea ecx, [ebp - 0xf8]
call fcn.0041197e
lea eax, [ebp - 0x3c]
push str.QQSuperbagInstallUip.xml
push eax
lea eax, [ebp - 0x38]
push eax
call sub.MFC42.DLL_operator_1
push dword [eax]
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x4b
call fcn.0041168f
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x3f
call sub.MFC42.DLL_CString::CString
push 0x64
mov ecx, edi
call fcn.004085d9
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x31
call fcn.00407761
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x2d
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x24
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x18
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x15
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xe
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x6dc]
mov byte [ebp - 4], 0xc
call fcn.00412ebd
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0xb
call fcn.00414efc
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 6
call fcn.004076b9
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call sub.MFC42.DLL_CString::CString
push 1
pop esi
jmp 0x407571
push ebx
call dword [sym.imp.MSVCRT.dll_fclose]
pop ecx
jmp 0x405ecc
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 3
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 1
call sub.MFC42.DLL_CString::CString
and byte [ebp - 4], 0
lea ecx, [ebp - 0x64]
call sub.MFC42.DLL_CString::CString
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c]
call sub.MFC42.DLL_CString::CString
mov eax, esi
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret