Function at 0x40e210
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Copy file
Delete file
Encode data using base64
Print debug messages

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5c737a
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x4b0
mov eax, dword [0x6540c0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x458], esi
mov edi, dword [ebx + 8]
lea ecx, [esi + 0x10c]
push 0x646054
mov dword [ebp - 0x450], edi
mov dword [ebp - 0x44c], 0
call fcn.00403eb0
push str..update
lea ecx, [ebp - 0x148]
call fcn.00402530
lea edx, [edi + 0x18]
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x448], edx
call fcn.004056c0
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x420], 0
mov dword [ebp - 0x41c], 0
sub esp, 0x18
mov byte [ebp - 4], 2
lea eax, [ebp - 0x178]
mov ecx, esp
push eax
call fcn.00402580
lea eax, [ebp - 0x424]
mov ecx, esi
push eax
call fcn.0040d6c0
mov edi, dword [ebp - 0x420]
mov esi, dword [ebp - 0x424]
cmp esi, edi
je 0x40e38c
nop dword [eax]
push esi
lea ecx, [ebp - 0x160]
call fcn.00402580
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x138]
cmp eax, ecx
jbe 0x40e36a
sub eax, ecx
lea ecx, [ebp - 0x160]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x1c8]
push eax
call fcn.00402460
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x1c8]
call fcn.0041f240
test eax, eax
jne 0x40e35f
lea ecx, [ebp - 0x160]
call fcn.004024c0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x1c8]
call fcn.004024d0
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 2
call fcn.004024d0
add esi, 0x18
cmp esi, edi
jne 0x40e300
mov edi, dword [ebp - 0x420]
mov esi, dword [ebp - 0x424]
mov byte [ebp - 4], 1
test esi, esi
je 0x40e40c
push ecx
mov edx, edi
mov ecx, esi
call fcn.00402880
mov ecx, dword [ebp - 0x41c]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x424]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x40e3e4
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x410649
push ecx
push esi
call fcn.004392c8
add esp, 8
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x420], 0
mov dword [ebp - 0x41c], 0
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x164]
cmp ecx, 7
jbe 0x40e450
mov edx, dword [ebp - 0x178]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40e446
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x410649
push ecx
push edx
call fcn.004392c8
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 7
mov word [ebp - 0x178], ax
cmp ecx, 7
jbe 0x40e4b4
mov edx, dword [ebp - 0x148]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40e4aa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x410649
push ecx
push edx
call fcn.004392c8
add esp, 8
mov edi, dword [ebp - 0x458]
cmp dword [edi + 0xcc], 0
je 0x40e4f8
mov ecx, dword [edi + 0xcc]
mov dword [ebp - 0x414], 0
mov dword [ebp - 0x41c], 1
test ecx, ecx
je 0x41064e
mov eax, dword [ecx]
lea edx, [ebp - 0x414]
push edx
lea edx, [ebp - 0x41c]
push edx
call dword [eax + 8]
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x160]
mov esi, dword [ebp - 0x448]
mov edx, esi
call fcn.00405290
cmp dword [ebp - 0x150], 0
mov edx, 0x5c
mov dword [ebp - 0x44c], 1
jbe 0x40e54b
cmp dword [esi + 0x14], 7
mov ecx, esi
jbe 0x40e534
mov ecx, dword [esi]
mov eax, dword [esi + 0x10]
cmp dx, word [ecx + eax*2 - 2]
je 0x40e54b
push 0x5c
lea ecx, [ebp - 0x160]
call fcn.00409b90
push 9
push str.YeBao.exe
lea ecx, [ebp - 0x160]
call fcn.00409e30
mov dword [ebp - 0x230], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x240], xmm0
mov dword [ebp - 0x22c], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x240], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x230], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 0x44c], 2
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x14c]
cmp ecx, 7
jbe 0x40e5f3
mov edx, dword [ebp - 0x160]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40e5e9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x410653
push ecx
push edx
call fcn.004392c8
add esp, 8
cmp dword [ebp - 0x22c], 7
lea eax, [ebp - 0x240]
cmova eax, dword [ebp - 0x240]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov dword [ebp - 0x454], eax
mov edx, esi
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x130]
call fcn.00405290
mov ecx, dword [ebp - 0x120]
mov dword [ebp - 0x44c], 6
mov dword [ebp - 0x410], ecx
test ecx, ecx
je 0x40e7a3
cmp dword [esi + 0x14], 7
mov edx, esi
jbe 0x40e64d
mov edx, dword [esi]
mov eax, dword [esi + 0x10]
mov esi, 0x5c
cmp si, word [edx + eax*2 - 2]
je 0x40e7a3
mov edx, dword [ebp - 0x11c]
mov dword [ebp - 0x41c], edx
cmp ecx, edx
jae 0x40e691
lea eax, [ecx + 1]
cmp edx, 7
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x130]
cmova eax, dword [ebp - 0x130]
mov dword [eax + ecx*2], esi
jmp 0x40e7a3
mov esi, bind
mov eax, esi
sub eax, ecx
cmp eax, 1
jb 0x410658
lea eax, [ecx + 1]
mov ecx, eax
mov dword [ebp - 0x414], eax
or ecx, 7
cmp ecx, esi
jbe 0x40e6b9
mov ecx, esi
jmp 0x40e6d1
mov eax, edx
shr eax, 1
sub esi, eax
cmp edx, esi
jbe 0x40e6ca
mov ecx, bind
jmp 0x40e6d1
add eax, edx
cmp ecx, eax
cmovb ecx, eax
lea eax, [ebp - 0x448]
mov dword [ebp - 0x448], ecx
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004029e0
mov ecx, dword [ebp - 0x448]
mov esi, eax
mov eax, dword [ebp - 0x414]
add esp, 8
cmp dword [ebp - 0x41c], 7
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x11c], ecx
lea ecx, [eax + eax]
mov dword [ebp - 0x414], ecx
push ecx
jbe 0x40e780
mov eax, dword [ebp - 0x130]
push eax
push esi
mov dword [ebp - 0x448], eax
call fcn.0048f690
mov eax, dword [ebp - 0x414]
add esp, 0xc
mov dword [esi + eax], 0x5c
mov eax, dword [ebp - 0x41c]
lea ecx, [eax*2 + 2]
mov eax, dword [ebp - 0x448]
cmp ecx, 0x1000
jb 0x40e774
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41065d
mov eax, edx
push ecx
push eax
call fcn.004392c8
add esp, 8
jmp 0x40e79d
lea eax, [ebp - 0x130]
push eax
push esi
call fcn.0048f690
mov eax, dword [ebp - 0x414]
add esp, 0xc
mov dword [esi + eax], 0x5c
mov dword [ebp - 0x130], esi
push 0xc
push str.verinfo.json
lea ecx, [ebp - 0x130]
call fcn.00409e30
mov dword [ebp - 0x1d0], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1e0], xmm0
mov dword [ebp - 0x1cc], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1e0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1d0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x11c]
cmp ecx, 7
jbe 0x40e841
mov edx, dword [ebp - 0x130]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x40e837
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41065d
push ecx
push edx
call fcn.004392c8
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x1e8], 0
movups xmmword [ebp - 0x1f8], xmm0
mov dword [ebp - 0x1e4], 0xf
mov byte [ebp - 0x1f8], 0
mov byte [ebp - 0x415], 0
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x4c0], 0
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 0x4b8], 0
lea eax, [ebp - 0x4c0]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x47c]
mov ecx, edi
push eax
lea eax, [ebp - 0x415]
push eax
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x1e0]
push eax
call fcn.0041b400
mov esi, dword [ebp - 0x450]
test al, al
je 0x40e8f1
lea eax, [ebp - 0x47c]
push eax
lea eax, [esi + 0x18]
push eax
call fcn.0041c7b0
and dword [ebp - 0x468], 0xfffffe00
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x460], 0
mov dword [ebp - 0x45c], 0
xorps xmm0, xmm0
mov dword [ebp - method.Json::FastWriter.virtual_0], vtable.Json::FastWriter.0
movups xmmword [ebp - 0x1ac], xmm0
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], 0xf
mov byte [ebp - 0x1ac], 0
mov word [ebp - 0x194], 0
mov byte [ebp - 0x192], 0
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0xf
call fcn.004071a0
mov ecx, eax
mov byte [ebp - 4], 0x10
cmp dword [ecx + 0x14], 0xf
jbe 0x40e975
mov ecx, dword [ecx]
mov byte [ebp - 0x140], 4
or dword [ebp - 0x140], 0x100
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
test ecx, ecx
je 0x410662
mov edx, ecx
lea eax, [edx + 1]
mov dword [ebp - 0x410], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x40e9b7
sub edx, dword [ebp - 0x410]
call fcn.0042b270
mov dword [ebp - 0x148], eax
push 0x646f37
push 0x646f34
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x14
call fcn.0042c930
lea ecx, [ebp - 0x148]
push ecx
mov ecx, eax
call fcn.0042bcb0
lea ecx, [ebp - 0x148]
call fcn.0042bbe0
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x1b4]
cmp ecx, 0xf
jbe 0x40ea3f
mov edx, dword [ebp - 0x1c8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40ea35
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41069f
push ecx
push edx
call fcn.004392c8
add esp, 8
lea edx, [esi + 0x30]
lea ecx, [ebp - 0x160]
call fcn.0040a510
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x160]
cmp dword [ebp - 0x14c], 0xf
mov byte [ebp - 0x140], 4
cmova ecx, dword [ebp - 0x160]
or dword [ebp - 0x140], 0x100
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
test ecx, ecx
je 0x4106a4
mov edx, ecx
lea eax, [edx + 1]
mov dword [ebp - 0x410], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x40eaa7
sub edx, dword [ebp - 0x410]
call fcn.0042b270
mov dword [ebp - 0x148], eax
push 0x646f3a
push 0x646f38
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x19
call fcn.0042c930
lea ecx, [ebp - 0x148]
push ecx
mov ecx, eax
call fcn.0042bcb0
lea ecx, [ebp - 0x148]
call fcn.0042bbe0
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x14c]
cmp ecx, 0xf
jbe 0x40eb2f
mov edx, dword [ebp - 0x160]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40eb25
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4106e1
push ecx
push edx
call fcn.004392c8
add esp, 8
mov eax, dword [esi + 0x48]
cdq
mov byte [ebp - 0x128], 1
and dword [ebp - 0x128], 0xfffffeff
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], edx
push 0x646f3e
push 0x646f3c
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x1a
call fcn.0042c930
lea ecx, [ebp - 0x130]
push ecx
mov ecx, eax
call fcn.0042bcb0
lea ecx, [ebp - 0x130]
call fcn.0042bbe0
mov eax, dword [esi + 0x4c]
cdq
mov byte [ebp - 0x128], 1
and dword [ebp - 0x128], 0xfffffeff
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], edx
push 0x646f42
push 0x646f40
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x1b
call fcn.0042c930
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xf
push ecx
mov ecx, eax
call fcn.0042bcb0
lea ecx, [ebp - 0x130]
call fcn.0042bbe0
cmp dword [ebp - 0x1e4], 0xf
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 0x140], 4
cmova ecx, dword [ebp - 0x1f8]
or dword [ebp - 0x140], 0x100
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
test ecx, ecx
je 0x4106e6
mov edx, ecx
lea eax, [edx + 1]
mov dword [ebp - 0x410], eax
nop dword [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x40ec70
sub edx, dword [ebp - 0x410]
call fcn.0042b270
mov dword [ebp - 0x148], eax
push 0x646f46
push 0x646f44
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x1f
call fcn.0042c930
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0xf
push ecx
mov ecx, eax
call fcn.0042bcb0
lea ecx, [ebp - 0x148]
call fcn.0042bbe0
mov byte [ebp - 0x140], 4
mov edx, 2
or dword [ebp - 0x140], 0x100
mov ecx, 0x646f4c
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
call fcn.0042b270
mov dword [ebp - 0x148], eax
push 0x646f4a
push 0x646f48
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x23
call fcn.0042c930
lea ecx, [ebp - 0x148]
push ecx
mov ecx, eax
call fcn.0042bcb0
lea ecx, [ebp - 0x148]
call fcn.0042bbe0
xor eax, eax
mov byte [ebp - 0x128], 1
and dword [ebp - 0x128], 0xfffffeff
cmp byte [ebp - 0x415], al
mov dword [ebp - 0x124], 0
setne al
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], 0
push 0x646f54
push str.gray
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x24
call fcn.0042c930
lea ecx, [ebp - 0x130]
push ecx
mov ecx, eax
call fcn.0042bcb0
lea ecx, [ebp - 0x130]
call fcn.0042bbe0
mov byte [ebp - 0x128], 1
and dword [ebp - 0x128], 0xfffffeff
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x130], 1
mov dword [ebp - 0x12c], 0
push 0x646f61
push str.is_new_wb
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x25
call fcn.0042c930
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xf
push ecx
mov ecx, eax
call fcn.0042bcb0
lea ecx, [ebp - 0x130]
call fcn.0042bbe0
mov dword [ebp - 0x19c], 0
lea eax, [ebp - 0x1ac]
cmp dword [ebp - 0x198], 0xf
lea ecx, [ebp - 0x1b0]
cmova eax, dword [ebp - 0x1ac]
mov byte [eax], 0
lea eax, [ebp - 0x470]
push eax
call fcn.0042e5c0
cmp byte [ebp - 0x192], 0
jne 0x40eebf
mov eax, dword [ebp - 0x198]
lea ecx, [ebp - 0x1ac]
mov edx, dword [ebp - 0x19c]
sub eax, edx
cmp eax, 1
jb 0x40eea4
cmp dword [ebp - 0x198], 0xf
lea eax, [edx + 1]
mov dword [ebp - 0x19c], eax
cmova ecx, dword [ebp - 0x1ac]
mov al, byte [0x647e5c]
mov byte [edx + ecx], al
mov byte [edx + ecx + 1], 0
jmp 0x40eebf
push 1
push 0x647e5c
mov byte [ebp - 0x410], 0
push dword [ebp - 0x410]
push 1
call fcn.0040a190
lea eax, [ebp - 0x1ac]
push eax
lea ecx, [ebp - 0x288]
call fcn.0040b1d0
lea eax, [edi + 0xf0]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x228]
call fcn.0040b1d0
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x214]
mov eax, edx
mov ecx, dword [ebp - 0x218]
sub eax, ecx
mov dword [ebp - 0x410], ecx
push 0x1b
push str._api_v1_client_update_check
cmp eax, 0x1b
jb 0x40ef45
cmp edx, 0xf
lea esi, [ebp - 0x228]
lea eax, [ecx + 0x1b]
cmova esi, dword [ebp - 0x228]
mov dword [ebp - 0x218], eax
lea eax, [ecx + esi]
push eax
call fcn.0048f690
mov eax, dword [ebp - 0x410]
add esp, 0xc
mov byte [eax + esi + 0x1b], 0
mov esi, dword [ebp - 0x450]
jmp 0x40ef5f
mov byte [ebp - 0x410], 0
lea ecx, [ebp - 0x228]
push dword [ebp - 0x410]
push 0x1b
call fcn.0040a190
xorps xmm0, xmm0
mov dword [ebp - 0x138], 0
movups xmmword [ebp - 0x148], xmm0
mov dword [ebp - 0x134], 0xf
mov byte [ebp - 0x148], 0
mov byte [ebp - 4], 0x28
push 0x38
mov dword [ebp - 0x4b4], 0
mov dword [ebp - 0x4b0], 0
mov dword [ebp - 0x4ac], 0
call fcn.00439298
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x4a8], 0
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x4a0], 0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x4a8]
push eax
push 0x10
mov dword [ebp - 0x49c], 7
mov dword [ebp - 0x498], 8
mov dword [ebp - 0x4b4], 0x3f800000
call fcn.00420430
call fcn.004387b4
push 0
push 0x989680
push edx
push eax
call fcn.004bac80
mov ecx, eax
mov dword [ebp - 0x168], 4
sub ecx, dword [edi + 0x128]
xorps xmm0, xmm0
mov eax, dword [str.bits]
sbb edx, dword [edi + 0x12c]
add ecx, 0x7d
movups xmmword [ebp - 0x178], xmm0
adc edx, 0
mov dword [ebp - 0x164], 0xf
shld edx, ecx, 1
mov dword [ebp - 0x178], eax
add ecx, ecx
mov byte [ebp - 0x174], 0
bswap ecx
bswap edx
not edx
not ecx
mov byte [ebp - 4], 0x2c
test ecx, ecx
jg 0x40f09a
jl 0x40f07c
test edx, edx
jae 0x40f09a
neg edx
adc ecx, 0
neg ecx
push ecx
push edx
lea ecx, [ebp - 0x11b]
call fcn.004219f0
add esp, 8
mov byte [eax - 1], 0x2d
dec eax
jmp 0x40f0aa
push ecx
push edx
lea ecx, [ebp - 0x11b]
call fcn.004219f0
add esp, 8
push ecx
lea ecx, [ebp - 0x11b]
push ecx
push eax
lea ecx, [ebp - 0x160]
call fcn.004218e0
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x160]
cmp dword [ebp - 0x14c], 0xf
lea ecx, [ebp - 0x4b4]
cmova eax, dword [ebp - 0x160]
mov dword [ebp - 0x410], eax
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x420]
push eax
call fcn.00420b80
mov ecx, dword [ebp - 0x410]
mov edx, ecx
mov eax, dword [eax]
add eax, 0x20
mov dword [ebp - 0x414], eax
lea eax, [edx + 1]
mov dword [ebp - 0x410], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x40f111
sub edx, dword [ebp - 0x410]
push edx
push ecx
mov ecx, dword [ebp - 0x414]
call fcn.0040b340
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x14c]
cmp ecx, 0xf
jbe 0x40f169
mov edx, dword [ebp - 0x160]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40f15f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x410723
push ecx
push edx
call fcn.004392c8
add esp, 8
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x40f1a7
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40f19d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x410723
push ecx
push edx
call fcn.004392c8
add esp, 8
lea eax, [ebp - 0x4b4]
push eax
lea eax, [ebp - 0x148]
push eax
lea edx, [ebp - 0x288]
lea ecx, [ebp - 0x228]
call fcn.00426eb0
add esp, 8
test al, al
jne 0x40f211
push 0x100
lea eax, [ebp - 0x118]
push 0
push eax
call fcn.0048fce0
add esp, 0xc
lea eax, [ebp - 0x118]
push 0x646f88
push 0xff
push eax
call fcn.00421d00
add esp, 0xc
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
or esi, 0xffffffff
jmp 0x4103bc
cmp dword [edi + 0xcc], 0
je 0x40f24f
mov ecx, dword [edi + 0xcc]
mov dword [ebp - 0x410], 0x3c
mov dword [ebp - 0x414], 1
test ecx, ecx
je 0x410728
mov eax, dword [ecx]
lea edx, [ebp - 0x410]
push edx
lea edx, [ebp - 0x414]
push edx
call dword [eax + 8]
and dword [ebp - 0x438], 0xfffffe00
mov dword [ebp - 0x434], 0
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x42c], 0
lea ecx, [ebp - 0x408]
mov byte [ebp - 4], 0x2f
call fcn.00427cd0
mov byte [ebp - 4], 0x30
lea eax, [ebp - 0x148]
cmp dword [ebp - 0x134], 0xf
lea ecx, [ebp - 0x1c8]
cmova eax, dword [ebp - 0x148]
mov dword [ebp - 0x410], eax
call fcn.004029c0
mov edx, dword [ebp - 0x410]
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x410], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40f2c0
sub ecx, dword [ebp - 0x410]
push ecx
push edx
lea ecx, [ebp - 0x1c8]
call fcn.0040a0b0
push ecx
lea eax, [ebp - 0x440]
mov byte [ebp - 4], 0x31
push eax
lea eax, [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0x408]
call fcn.00427df0
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 0x409], al
mov byte [ebp - 4], 0x30
call fcn.00409d60
cmp byte [ebp - 0x409], 0
jne 0x40f32a
mov ecx, 0x646fa0
call fcn.004206d0
mov esi, 0xfffffffe
jmp 0x4103a6
push 0x646654
lea ecx, [ebp - 0x2a0]
mov dword [ebp - 0x414], 0xffffffff
mov byte [ebp - 0x409], 0
call fcn.00409db0
push 0x646654
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0x32
call fcn.00409db0
push 0x646654
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 0x33
call fcn.00409db0
push 0x646654
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 0x34
call fcn.00409db0
push 0x646654
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0x35
call fcn.00409db0
mov byte [ebp - 4], 0x36
cmp byte [ebp - 0x438], 7
jne 0x40f867
push str.code
lea ecx, [ebp - 0x440]
call fcn.0042cc80
test al, al
je 0x40f429
push str.code
lea ecx, [ebp - 0x440]
call fcn.0042cc50
cmp byte [eax + 8], 0
je 0x40f429
push str.code
lea ecx, [ebp - 0x440]
call fcn.0042cc50
mov ecx, eax
call fcn.0042c5b0
test al, al
jne 0x40f429
push str.code
lea ecx, [ebp - 0x440]
call fcn.0042cc50
mov ecx, eax
call fcn.0042cea0
test al, al
je 0x40f429
push str.code
lea ecx, [ebp - 0x440]
call fcn.0042cc50
mov ecx, eax
call fcn.0042bee0
mov dword [ebp - 0x414], eax
cmp byte [ebp - 0x438], 7
jne 0x40f867
push str.success
lea ecx, [ebp - 0x440]
call fcn.0042cc80
test al, al
je 0x40f4ae
push str.success
lea ecx, [ebp - 0x440]
call fcn.0042cc50
cmp byte [eax + 8], 0
je 0x40f4ae
push str.success
lea ecx, [ebp - 0x440]
call fcn.0042cc50
mov ecx, eax
call fcn.0042c5b0
test al, al
jne 0x40f4ae
push str.success
lea ecx, [ebp - 0x440]
call fcn.0042cc50
cmp byte [eax + 8], 5
jne 0x40f4ae
push str.success
lea ecx, [ebp - 0x440]
call fcn.0042cc50
mov ecx, eax
call fcn.0042c4e0
mov byte [ebp - 0x409], al
cmp byte [ebp - 0x438], 7
jne 0x40f867
push 0x646fb4
lea ecx, [ebp - 0x440]
call fcn.0042cc80
test al, al
je 0x40f553
push 0x646fb4
lea ecx, [ebp - 0x440]
call fcn.0042cc50
cmp byte [eax + 8], 0
je 0x40f553
push 0x646fb4
lea ecx, [ebp - 0x440]
call fcn.0042cc50
mov ecx, eax
call fcn.0042c5b0
test al, al
jne 0x40f553
push 0x646fb4
lea ecx, [ebp - 0x440]
call fcn.0042cc50
cmp byte [eax + 8], 4
jne 0x40f553
lea eax, [ebp - 0x190]
push eax
push ecx
push 0x646fb4
lea ecx, [ebp - 0x440]
call fcn.0042cc50
add esp, 4
mov ecx, eax
call fcn.0042bd30
push eax
lea ecx, [ebp - 0x2a0]
call fcn.0041f2a0
lea ecx, [ebp - 0x190]
call fcn.00409d60
cmp byte [ebp - 0x438], 7
jne 0x40f867
push str.version_number
lea ecx, [ebp - 0x440]
call fcn.0042cc80
test al, al
je 0x40f5f8
push str.version_number
lea ecx, [ebp - 0x440]
call fcn.0042cc50
cmp byte [eax + 8], 0
je 0x40f5f8
push str.version_number
lea ecx, [ebp - 0x440]
call fcn.0042cc50
mov ecx, eax
call fcn.0042c5b0
test al, al
jne 0x40f5f8
push str.version_number
lea ecx, [ebp - 0x440]
call fcn.0042cc50
cmp byte [eax + 8], 4
jne 0x40f5f8
lea eax, [ebp - 0x190]
push eax
push ecx
push str.version_number
lea ecx, [ebp - 0x440]
call fcn.0042cc50
add esp, 4
mov ecx, eax
call fcn.0042bd30
push eax
lea ecx, [ebp - 0x1c8]
call fcn.0041f2a0
lea ecx, [ebp - 0x190]
call fcn.00409d60
cmp byte [ebp - 0x438], 7
jne 0x40f867
push 0x646fc8
lea ecx, [ebp - 0x440]
call fcn.0042cc80
test al, al
je 0x40f69d
push 0x646fc8
lea ecx, [ebp - 0x440]
call fcn.0042cc50
cmp byte [eax + 8], 0
je 0x40f69d
push 0x646fc8
lea ecx, [ebp - 0x440]
call fcn.0042cc50
mov ecx, eax
call fcn.0042c5b0
test al, al
jne 0x40f69d
push 0x646fc8
lea ecx, [ebp - 0x440]
call fcn.0042cc50
cmp byte [eax + 8], 4
jne 0x40f69d
lea eax, [ebp - 0x190]
push eax
push ecx
push 0x646fc8
lea ecx, [ebp - 0x440]
call fcn.0042cc50
add esp, 4
mov ecx, eax
call fcn.0042bd30
push eax
lea ecx, [ebp - 0x330]
call fcn.0041f2a0
lea ecx, [ebp - 0x190]
call fcn.00409d60
cmp byte [ebp - 0x438], 7
jne 0x40f867
push str.m_addr
lea ecx, [ebp - 0x440]
call fcn.0042cc80
test al, al
je 0x40f742
push str.m_addr
lea ecx, [ebp - 0x440]
call fcn.0042cc50
cmp byte [eax + 8], 0
je 0x40f742
push str.m_addr
lea ecx, [ebp - 0x440]
call fcn.0042cc50
mov ecx, eax
call fcn.0042c5b0
test al, al
jne 0x40f742
push str.m_addr
lea ecx, [ebp - 0x440]
call fcn.0042cc50
cmp byte [eax + 8], 4
jne 0x40f742
lea eax, [ebp - 0x190]
push eax
push ecx
push str.m_addr
lea ecx, [ebp - 0x440]
call fcn.0042cc50
add esp, 4
mov ecx, eax
call fcn.0042bd30
push eax
lea ecx, [ebp - 0x2b8]
call fcn.0041f2a0
lea ecx, [ebp - 0x190]
call fcn.00409d60
cmp byte [ebp - 0x438], 7
jne 0x40f867
push str.custom_addr
lea ecx, [ebp - 0x440]
call fcn.0042cc80
test al, al
je 0x40f7e7
push str.custom_addr
lea ecx, [ebp - 0x440]
call fcn.0042cc50
cmp byte [eax + 8], 0
je 0x40f7e7
push str.custom_addr
lea ecx, [ebp - 0x440]
call fcn.0042cc50
mov ecx, eax
call fcn.0042c5b0
test al, al
jne 0x40f7e7
push str.custom_addr
lea ecx, [ebp - 0x440]
call fcn.0042cc50
cmp byte [eax + 8], 4
jne 0x40f7e7
lea eax, [ebp - 0x190]
push eax
push ecx
push str.custom_addr
lea ecx, [ebp - 0x440]
call fcn.0042cc50
add esp, 4
mov ecx, eax
call fcn.0042bd30
push eax
lea ecx, [ebp - 0x2d0]
call fcn.0041f2a0
lea ecx, [ebp - 0x190]
call fcn.00409d60
cmp byte [ebp - 0x438], 7
jne 0x40f867
push str.gray
lea ecx, [ebp - 0x440]
call fcn.0042cc80
test al, al
je 0x40f867
push str.gray
lea ecx, [ebp - 0x440]
call fcn.0042cc50
cmp byte [eax + 8], 0
je 0x40f867
push str.gray
lea ecx, [ebp - 0x440]
call fcn.0042cc50
mov ecx, eax
call fcn.0042c5b0
test al, al
jne 0x40f867
push str.gray
lea ecx, [ebp - 0x440]
call fcn.0042cc50
mov ecx, eax
call fcn.0042cea0
test al, al
je 0x40f867
push str.gray
lea ecx, [ebp - 0x440]
call fcn.0042cc50
mov ecx, eax
call fcn.0042bee0
lea edx, [ebp - 0x330]
lea ecx, [ebp - 0x190]
call fcn.0040a620
push eax
lea ecx, [edi + 0x10c]
call fcn.00403ee0
lea ecx, [ebp - 0x190]
call fcn.004024d0
cmp dword [ebp - 0x414], 0xc8
jne 0x410360
cmp byte [ebp - 0x409], 0
je 0x410360
cmp dword [ebp - 0x290], 0
je 0x410360
cmp dword [ebp - 0x1b8], 0
je 0x410360
push 0x46
push 1
mov ecx, edi
call fcn.004138e0
lea eax, [ebp - 0x190]
push eax
call fcn.004146b0
mov edx, eax
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x258]
call fcn.004056c0
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x39
call fcn.004024d0
push str.TmpVerinfo_
lea ecx, [ebp - 0x258]
call fcn.00409cc0
push 0
call fcn.0049462b
add esp, 4
lea ecx, [ebp - 0x210]
push edx
push eax
call fcn.0040c350
add esp, 8
push eax
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0x3a
call fcn.0041f280
lea ecx, [ebp - 0x210]
mov byte [ebp - 4], 0x39
call fcn.004024d0
push str..json
lea ecx, [ebp - 0x258]
call fcn.00409cc0
push 0x646654
lea ecx, [ebp - 0x318]
call fcn.00409db0
mov byte [ebp - 0x441], 0
mov dword [ebp - 0x494], 0
mov dword [ebp - 0x490], 0
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x484], 0
mov dword [ebp - 0x480], 0
lea eax, [ebp - 0x488]
mov byte [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0x494]
mov ecx, edi
push eax
lea eax, [ebp - 0x441]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.00412220
push 0x50
push 1
mov ecx, edi
mov byte [ebp - 0x409], al
call fcn.004138e0
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x420], 0
mov dword [ebp - 0x41c], 0
lea eax, [ebp - 0x424]
mov byte [ebp - 4], 0x3e
push eax
lea eax, [ebp - 0x494]
push eax
lea eax, [ebp - 0x47c]
push eax
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x1f8]
push eax
call fcn.004130e0
mov dword [ebp - 0x414], eax
test eax, eax
je 0x4101d4
cmp eax, 2
je 0x4101d4
cmp eax, 3
je 0x4101d4
push 0x64
push 1
mov ecx, edi
call fcn.004138e0
push 0
push 2
mov ecx, edi
call fcn.004138e0
cmp dword [ebp - 0x414], 0xffffffff
jne 0x40fcb9
lea eax, [ebp - 0x190]
push eax
call fcn.004146b0
mov edx, eax
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x160]
call fcn.004056c0
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x4a
call fcn.004024d0
push str.TmpClient_
lea ecx, [ebp - 0x160]
call fcn.00409cc0
push 0
call fcn.0049462b
add esp, 4
lea ecx, [ebp - 0x210]
push edx
push eax
call fcn.0040c350
add esp, 8
push eax
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x4b
call fcn.0041f280
lea ecx, [ebp - 0x210]
mov byte [ebp - 4], 0x4a
call fcn.004024d0
push 0x647034
lea ecx, [ebp - 0x160]
call fcn.00409cc0
push 0x5a
push 2
mov ecx, edi
call fcn.004138e0
lea eax, [ebp - 0x160]
mov ecx, edi
push eax
lea eax, [ebp - 0x2a0]
push eax
call fcn.00419670
test al, al
jne 0x40fb4b
mov ecx, 0x64703c
call fcn.004206d0
lea ecx, [ebp - 0x160]
mov esi, 0xfffffffc
call fcn.004024d0
jmp 0x410327
push 0x5b
push 2
mov ecx, edi
call fcn.004138e0
push 0x62
push 2
mov ecx, edi
call fcn.004138e0
lea edx, [esi + 0x18]
lea ecx, [ebp - 0x210]
call fcn.004056c0
push 0x64704c
mov edx, eax
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x178]
call fcn.00409fb0
add esp, 4
lea ecx, [ebp - 0x210]
mov byte [ebp - 4], 0x4e
call fcn.004024d0
lea ecx, [ebp - 0x178]
call fcn.00405020
lea edx, [ebp - 0x178]
lea ecx, [ebp - 0x160]
call fcn.0040c540
test al, al
jne 0x40fbcb
mov ecx, 0x647068
call fcn.004206d0
mov esi, 0xfffffffb
jmp 0x40fc5b
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
sub esp, 0x18
mov byte [ebp - 4], 0x4f
lea eax, [ebp - 0x178]
mov ecx, esp
push eax
call fcn.00402580
lea eax, [ebp - 0x124]
mov ecx, edi
push eax
call fcn.0040d6c0
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x120]
jne 0x40fc26
mov ecx, 0x647078
call fcn.004206d0
jmp 0x40fc4b
lea eax, [ebp - 0x124]
push eax
lea eax, [esi + 0x18]
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.00410c20
test al, al
jne 0x40fc76
mov ecx, 0x647088
call fcn.00420730
lea ecx, [ebp - 0x124]
mov esi, 0xfffffffb
call fcn.004023e0
lea ecx, [ebp - 0x178]
call fcn.004024d0
lea ecx, [ebp - 0x160]
call fcn.004024d0
jmp 0x410327
lea ecx, [ebp - 0x178]
call fcn.004024c0
push eax
mov eax, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
call eax
test eax, eax
je 0x40fc98
lea ecx, [ebp - 0x178]
call fcn.00404e50
lea ecx, [ebp - 0x124]
call fcn.004023e0
lea ecx, [ebp - 0x178]
call fcn.004024d0
lea ecx, [ebp - 0x160]
jmp 0x40feba
lea edx, [esi + 0x18]
lea ecx, [ebp - 0x190]
call fcn.004056c0
push 0x64704c
mov edx, eax
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x178]
call fcn.00409fb0
add esp, 4
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x52
call fcn.004024d0
lea ecx, [ebp - 0x178]
call fcn.00405020
push 0x60
push 2
mov ecx, edi
call fcn.004138e0
xor ecx, ecx
mov dword [ebp - 0x44c], ecx
lea ecx, [ebp - 0x424]
call fcn.0041f020
mov esi, dword [ebp - 0x424]
test eax, eax
je 0x40fd69
push esi
lea eax, [ebp - 0x178]
mov ecx, edi
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.00412810
test al, al
je 0x40fe4e
inc dword [ebp - 0x44c]
lea ecx, [ebp - 0x424]
add esi, 0x4c
call fcn.0041f020
cmp dword [ebp - 0x44c], eax
jb 0x40fd22
mov esi, dword [ebp - 0x424]
push 0x61
push 2
mov ecx, edi
call fcn.004138e0
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x53
call fcn.0041f020
test eax, eax
je 0x40fe03
xor edi, edi
nop word [eax + eax]
push esi
lea edx, [ebp - 0x178]
lea ecx, [ebp - 0x160]
call fcn.0040a020
add esp, 4
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0x54
push eax
lea ecx, [ebp - 0x124]
call fcn.0041f0c0
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x53
call fcn.004024d0
lea ecx, [ebp - 0x424]
inc edi
add esi, 0x4c
call fcn.0041f020
cmp edi, eax
jb 0x40fdb0
mov edi, dword [ebp - 0x458]
mov esi, dword [ebp - 0x450]
lea eax, [ebp - 0x124]
push eax
lea eax, [esi + 0x18]
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.00410c20
test al, al
jne 0x40fe7c
mov ecx, 0x6470b4
call fcn.00420730
lea ecx, [ebp - 0x124]
mov esi, 0xfffffff9
call fcn.004023e0
lea ecx, [ebp - 0x178]
call fcn.004024d0
jmp 0x410327
lea ecx, [esi + 0x18]
call fcn.004024c0
lea edx, [ebp - 0x410]
mov dword [ebp - 0x410], eax
call fcn.00420790
lea ecx, [ebp - 0x178]
mov esi, 0xfffffffa
call fcn.004024d0
jmp 0x410327
push 0x62
push 2
mov ecx, edi
call fcn.004138e0
lea ecx, [ebp - 0x178]
call fcn.004024c0
push eax
mov eax, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
call eax
test eax, eax
je 0x40fea9
lea ecx, [ebp - 0x178]
call fcn.00404e50
lea ecx, [ebp - 0x124]
call fcn.004023e0
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x3e
call fcn.004024d0
push 0x63
push 2
mov ecx, edi
call fcn.004138e0
lea eax, [ebp - 0x300]
push eax
call fcn.004142d0
lea ecx, [ebp - 0x300]
mov byte [ebp - 4], 0x55
call fcn.004024c0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x40feff
lea ecx, [ebp - 0x300]
call fcn.00404e50
lea edx, [esi + 0x18]
lea ecx, [ebp - 0x210]
call fcn.004056c0
push str.configclient.txt
mov edx, eax
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x190]
call fcn.00409fb0
add esp, 4
lea ecx, [ebp - 0x210]
mov byte [ebp - 4], 0x58
call fcn.004024d0
sub esp, 0x18
lea eax, [esi + 0x30]
mov ecx, esp
mov dword [ebp - 0x410], esp
push eax
call fcn.00402580
sub esp, 0x18
mov byte [ebp - 4], 0x59
lea eax, [ebp - 0x190]
mov ecx, esp
push eax
call fcn.00402580
push dword [esi + 0x4c]
push dword [esi + 0x48]
mov byte [ebp - 4], 0x58
call fcn.00419a10
lea edx, [esi + 0x18]
lea ecx, [ebp - 0x378]
call fcn.004056c0
push str.configcache.json
mov edx, eax
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x160]
call fcn.00409fb0
add esp, 4
lea ecx, [ebp - 0x378]
mov byte [ebp - 4], 0x5c
call fcn.004024d0
sub esp, 0x18
lea eax, [esi + 0x68]
mov ecx, esp
mov dword [ebp - 0x410], esp
push eax
call fcn.00402580
sub esp, 0x18
mov byte [ebp - 4], 0x5d
lea eax, [esi + 0x50]
mov dword [ebp - 0x458], esp
mov ecx, esp
push eax
call fcn.00402580
sub esp, 0x18
mov byte [ebp - 4], 0x5e
lea eax, [ebp - 0x160]
mov ecx, esp
push eax
call fcn.00402580
mov byte [ebp - 4], 0x5c
call fcn.00419e30
cmp dword [ebp - 0x454], 0
jne 0x410014
sub esp, 0x18
lea eax, [ebp - 0x160]
mov ecx, esp
push eax
call fcn.00402580
movzx eax, byte [esi + 0x80]
push eax
call fcn.0041ab60
cmp byte [ebp - 0x409], 0
je 0x410048
lea ecx, [ebp - 0x1e0]
call fcn.00405020
push 0
lea ecx, [ebp - 0x1e0]
call fcn.004024c0
push eax
lea ecx, [ebp - 0x258]
call fcn.004024c0
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
lea eax, [ebp - 0x488]
push eax
lea eax, [esi + 0x18]
push eax
call fcn.00411f10
cmp dword [esi + 0x84], 2
jne 0x41019e
lea edx, [ebp - 0x318]
lea ecx, [ebp - 0x210]
call fcn.0040a620
push str.https:__www.yebaojiasu.com
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 0x5f
call fcn.00402530
push 0x6470f0
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 0x60
call fcn.00402530
push 0x64710c
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x61
call fcn.00402530
push str.YeBaoJiaSu_is1
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x62
call fcn.00402530
lea edx, [esi + 0x18]
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x270]
call fcn.004056c0
push 0x6470c8
mov edx, eax
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x2e8]
call fcn.00409fb0
add esp, 4
mov esi, eax
mov edx, dword [ebp - 0x450]
lea ecx, [ebp - 0x390]
add edx, 0x18
mov byte [ebp - 4], 0x65
call fcn.004055f0
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 0x66
push ecx
push ecx
lea ecx, [ebp - 0x210]
push ecx
push esi
push eax
lea eax, [ebp - 0x348]
push eax
lea eax, [ebp - 0x240]
push eax
lea edx, [ebp - 0x130]
lea ecx, [ebp - 0x178]
call fcn.00405b10
add esp, 0x1c
lea ecx, [ebp - 0x390]
call fcn.004024d0
lea ecx, [ebp - 0x2e8]
call fcn.004024d0
lea ecx, [ebp - 0x270]
call fcn.004024d0
lea ecx, [ebp - 0x178]
call fcn.004024d0
lea ecx, [ebp - 0x130]
call fcn.004024d0
lea ecx, [ebp - 0x348]
call fcn.004024d0
lea ecx, [ebp - 0x360]
call fcn.004024d0
lea ecx, [ebp - 0x210]
mov byte [ebp - 4], 0x5c
call fcn.004024d0
push 0x64
push 2
mov ecx, edi
call fcn.004138e0
lea ecx, [ebp - 0x160]
mov esi, 1
call fcn.004024d0
lea ecx, [ebp - 0x190]
call fcn.004024d0
lea ecx, [ebp - 0x300]
call fcn.004024d0
jmp 0x410327
lea edx, [esi + 0x18]
lea ecx, [ebp - 0x270]
call fcn.004056c0
push str.configclient.txt
mov edx, eax
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x210]
call fcn.00409fb0
add esp, 4
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0x41
call fcn.004024d0
sub esp, 0x18
lea eax, [esi + 0x30]
mov ecx, esp
mov dword [ebp - 0x454], esp
push eax
call fcn.00402580
sub esp, 0x18
mov byte [ebp - 4], 0x42
lea eax, [ebp - 0x210]
mov ecx, esp
push eax
call fcn.00402580
push dword [esi + 0x4c]
push dword [esi + 0x48]
mov byte [ebp - 4], 0x41
call fcn.00419a10
lea edx, [esi + 0x18]
lea ecx, [ebp - 0x2e8]
call fcn.004056c0
push str.configcache.json
mov edx, eax
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x190]
call fcn.00409fb0
add esp, 4
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 0x45
call fcn.004024d0
sub esp, 0x18
lea eax, [esi + 0x68]
mov ecx, esp
mov dword [ebp - 0x454], esp
push eax
call fcn.00402580
sub esp, 0x18
mov byte [ebp - 4], 0x46
lea eax, [esi + 0x50]
mov dword [ebp - 0x410], esp
mov ecx, esp
push eax
call fcn.00402580
sub esp, 0x18
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0x190]
mov ecx, esp
push eax
call fcn.00402580
mov byte [ebp - 4], 0x45
call fcn.00419e30
cmp dword [ebp - 0x414], 2
je 0x41030f
cmp byte [ebp - 0x409], 0
je 0x4102ff
lea ecx, [ebp - 0x1e0]
call fcn.00405020
push 0
lea ecx, [ebp - 0x1e0]
call fcn.004024c0
push eax
lea ecx, [ebp - 0x258]
call fcn.004024c0
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
lea eax, [ebp - 0x488]
push eax
lea eax, [esi + 0x18]
push eax
call fcn.00411f10
lea ecx, [ebp - 0x190]
call fcn.004024d0
lea ecx, [ebp - 0x210]
call fcn.004024d0
xor esi, esi
lea ecx, [ebp - 0x424]
call fcn.0041f040
lea ecx, [ebp - 0x488]
call fcn.0041efa0
lea ecx, [ebp - 0x494]
call fcn.0041f040
lea ecx, [ebp - 0x318]
call fcn.00409d60
lea ecx, [ebp - 0x258]
call fcn.004024d0
jmp 0x41036f
mov ecx, 0x646fe0
call fcn.004206d0
mov esi, 0xfffffffd
lea ecx, [ebp - 0x2d0]
call fcn.00409d60
lea ecx, [ebp - 0x2b8]
call fcn.00409d60
lea ecx, [ebp - 0x330]
call fcn.00409d60
lea ecx, [ebp - 0x1c8]
call fcn.00409d60
lea ecx, [ebp - 0x2a0]
call fcn.00409d60
lea ecx, [ebp - 0x408]
call fcn.00410750
lea ecx, [ebp - 0x440]
call fcn.0042bbe0
lea ecx, [ebp - 0x4b4]
call fcn.00410810
mov ecx, dword [ebp - 0x134]
cmp ecx, 0xf
jbe 0x410401
mov edx, dword [ebp - 0x148]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4103f7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41072d
push ecx
push edx
call fcn.004392c8
add esp, 8
mov ecx, dword [ebp - 0x214]
cmp ecx, 0xf
jbe 0x41043b
mov edx, dword [ebp - 0x228]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x410431
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41072d
push ecx
push edx
call fcn.004392c8
add esp, 8
mov ecx, dword [ebp - 0x274]
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0xf
mov byte [ebp - 0x228], 0
cmp ecx, 0xf
jbe 0x410490
mov edx, dword [ebp - 0x288]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x410486
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41072d
push ecx
push edx
call fcn.004392c8
add esp, 8
mov ecx, dword [ebp - 0x198]
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x274], 0xf
mov byte [ebp - 0x288], 0
mov dword [ebp - method.Json::FastWriter.virtual_0], vtable.Json::FastWriter.0
cmp ecx, 0xf
jbe 0x4104ef
mov edx, dword [ebp - 0x1ac]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4104e5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41072d
push ecx
push edx
call fcn.004392c8
add esp, 8
lea ecx, [ebp - 0x470]
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], 0xf
mov byte [ebp - 0x1ac], 0
mov dword [ebp - method.Json::Writer.virtual_0], vtable.Json::Writer.0
call fcn.0042bbe0
lea ecx, [ebp - 0x4c0]
call fcn.0041efa0
lea ecx, [ebp - 0x47c]
call fcn.0041f040
mov ecx, dword [ebp - 0x1e4]
cmp ecx, 0xf
jbe 0x41056f
mov edx, dword [ebp - 0x1f8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x410565
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41072d
push ecx
push edx
call fcn.004392c8
add esp, 8
mov ecx, dword [ebp - 0x1cc]
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x1e4], 0xf
mov byte [ebp - 0x1f8], 0
cmp ecx, 7
jbe 0x4105ca
mov edx, dword [ebp - 0x1e0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4105c0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41072d
push ecx
push edx
call fcn.004392c8
add esp, 8
mov ecx, dword [ebp - 0x22c]
xor eax, eax
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1cc], 7
mov word [ebp - 0x1e0], ax
cmp ecx, 7
jbe 0x410627
mov edx, dword [ebp - 0x240]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41061d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41072d
push ecx
push edx
call fcn.004392c8
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0043928a
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
call fcn.0049452a
call fcn.00437b4f
call fcn.0049452a
call fcn.004012e0
call fcn.0049452a
push ecx
lea ecx, [ebp - 0xb0]
call fcn.004301d0
mov edx, str.Null_Value_Passed_to_Value_Constructor
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xb0]
call fcn.00431c20
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0xb0]
call fcn.004301b0
mov ecx, eax
mov byte [ebp - 4], 0x12
call fcn.0042b610
call fcn.0049452a
push ecx
lea ecx, [ebp - 0xb0]
call fcn.004301d0
mov edx, str.Null_Value_Passed_to_Value_Constructor
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xb0]
call fcn.00431c20
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0xb0]
call fcn.004301b0
mov ecx, eax
mov byte [ebp - 4], 0x17
call fcn.0042b610
call fcn.0049452a
push ecx
lea ecx, [ebp - 0xb0]
call fcn.004301d0
mov edx, str.Null_Value_Passed_to_Value_Constructor
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xb0]
call fcn.00431c20
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0xb0]
call fcn.004301b0
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.0042b610
call fcn.0049452a
call fcn.00437b4f
call fcn.0049452a
int3