Function at 0x411e00
Capabilities:
Check if file exists
Create process on windows
Delete file
Get common file path
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x54685d
mov eax, dword fs:[0]
push eax
mov eax, 0x2198
call fcn.004b8770
mov eax, dword [0x5b2390]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
xor eax, eax
mov word [ebp - 0x21c], ax
push 0x206
push 0
lea eax, [ebp - 0x21a]
push eax
call fcn.004b7bc0
add esp, 0xc
mov eax, dword [ebp + 8]
push eax
push str._sSoftApp.ini
lea ecx, [ebp - 0x21c]
push ecx
call fcn.0040fcd0
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
push 0
push str.bEngineUse
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x21c]
push eax
push 1
push str.bBindOfBottomOnFirstUse
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x224], eax
xor eax, eax
mov word [ebp - 0x42c], ax
push 0x206
push 0
lea eax, [ebp - 0x42a]
push eax
call fcn.004b7bc0
add esp, 0xc
xor eax, eax
mov word [ebp - 0x634], ax
push 0x206
push 0
lea eax, [ebp - 0x632]
push eax
call fcn.004b7bc0
add esp, 0xc
mov eax, dword [ebp + 8]
push eax
push str._sConfig.ini
lea ecx, [ebp - 0x42c]
push ecx
call fcn.0040fcd0
add esp, 0xc
lea eax, [ebp - 0x42c]
push eax
push 1
push str.bFirstUseBind
push str.Setting
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x638], eax
lea eax, [ebp - 0x21c]
push eax
push 0
push str.bDeskTaskBarLinkUse
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x63c], eax
lea eax, [ebp - 0x21c]
push eax
push 0x3c
push str.iDeskTaskBarLinkTime
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x640], eax
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x412c81
xor eax, eax
mov word [ebp - 0x848], ax
push 0x206
push 0
lea eax, [ebp - 0x846]
push eax
call fcn.004b7bc0
add esp, 0xc
lea eax, [ebp - 0x848]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x848]
push eax
lea ecx, [ebp - 0x84c]
call fcn.004048c0
mov dword [ebp - 4], 0
push str.switchex.xml
lea ecx, [ebp - 0x84c]
call fcn.004020c0
lea eax, [ebp - 0x848]
push eax
lea ecx, [ebp - 0x850]
call fcn.004048c0
mov byte [ebp - 4], 1
push str.TempRilibiao.xml
lea ecx, [ebp - 0x850]
call fcn.004020c0
lea ecx, [ebp - 0x850]
call fcn.004049e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x412011
lea ecx, [ebp - 0x850]
call fcn.004049e0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 0x851], 0
mov dword [ebp - 0x858], 0
jmp 0x412033
mov eax, dword [ebp - 0x858]
add eax, 1
mov dword [ebp - 0x858], eax
cmp dword [ebp - 0x858], 0x64
jge 0x4120c6
push ecx
mov ecx, esp
mov dword [ebp - 0x2194], esp
lea eax, [ebp - 0x850]
push eax
call fcn.004048a0
mov dword [ebp - 0x2198], eax
mov ecx, dword [ebp - 0x2198]
mov dword [ebp - 0x219c], ecx
mov byte [ebp - 4], 2
push ecx
mov ecx, esp
mov dword [ebp - 0x2190], esp
push str.http:__xiazai.rilibiao.com.cn_xml_switch_config.xml
call fcn.004048c0
mov dword [ebp - 0x21a0], eax
mov byte [ebp - 4], 1
call fcn.0043d900
add esp, 8
mov byte [ebp - 0x21a1], al
mov dl, byte [ebp - 0x21a1]
mov byte [ebp - 0x851], dl
movzx eax, byte [ebp - 0x851]
test eax, eax
jne 0x4120bf
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x412024
jmp 0x4120c6
movzx eax, byte [ebp - 0x851]
test eax, eax
je 0x412c60
lea ecx, [ebp - 0x850]
call fcn.004049e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x412c60
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push str.UpdConfDate
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x850]
call fcn.00414dd0
push eax
lea ecx, [ebp - 0x218c]
call fcn.00414e90
mov dword [ebp - 0x2198], eax
mov eax, dword [ebp - 0x2198]
mov dword [ebp - 0x219c], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x219c]
call fcn.0041ced0
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d520
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x218c]
call fcn.00414f30
lea ecx, [ebp - 0x860]
call fcn.0043d8d0
mov dword [ebp - 0x864], eax
mov byte [ebp - 0x865], 0
cmp dword [ebp - 0x864], 0
je 0x4122d7
push str.VerControl
mov eax, dword [ebp - 0x864]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0x86c], eax
cmp dword [ebp - 0x86c], 0
je 0x4122d7
push str.VerNum
mov eax, dword [ebp - 0x86c]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0x870], eax
cmp dword [ebp - 0x870], 0
je 0x4122d7
xor eax, eax
mov word [ebp - 0xa78], ax
push 0x206
push 0
lea eax, [ebp - 0xa76]
push eax
call fcn.004b7bc0
add esp, 0xc
mov ecx, dword [ebp - 0x870]
call fcn.00502250
push eax
lea ecx, [ebp - 0x2108]
call fcn.00414ef0
mov dword [ebp - 0x2198], eax
mov esi, dword [ebp - 0x2198]
sub esp, 0x104
mov ecx, 0x41
mov edi, esp
rep movsd dword es:[edi], dword [esi]
push 0x555a8c
push 0x104
lea eax, [ebp - 0xa78]
push eax
call fcn.004b7b04
add esp, 0x110
lea ecx, [ebp - 0x2108]
call fcn.00414f30
xor eax, eax
mov word [ebp - 0xc80], ax
push 0x206
push 0
lea eax, [ebp - 0xc7e]
push eax
call fcn.004b7bc0
add esp, 0xc
push 0x556308
push 0x556300
push 0x5562f4
push 0x104
lea eax, [ebp - 0xc80]
push eax
call fcn.004b7b04
add esp, 0x14
lea eax, [ebp - 0xa78]
push eax
call fcn.004b7b43
add esp, 4
test eax, eax
jbe 0x4122d7
lea eax, [ebp - 0xc80]
push eax
call fcn.004b7b43
add esp, 4
test eax, eax
jbe 0x4122d7
lea eax, [ebp - 0xa78]
push eax
lea ecx, [ebp - 0xc80]
push ecx
call fcn.004bb23d
add esp, 8
test eax, eax
jle 0x4122d7
mov byte [ebp - 0x865], 1
movzx eax, byte [ebp - 0x865]
test eax, eax
jne 0x4122f5
mov ecx, dword [ebp - 0x14]
call fcn.00413fc0
movzx eax, al
test eax, eax
je 0x4123f8
lea ecx, [ebp - 0x84c]
call fcn.004049e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41231d
lea ecx, [ebp - 0x84c]
call fcn.004049e0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push ecx
mov ecx, esp
mov dword [ebp - 0x2004], esp
lea eax, [ebp - 0x84c]
push eax
call fcn.004048a0
mov dword [ebp - 0x2198], eax
mov ecx, dword [ebp - 0x2198]
mov dword [ebp - 0x219c], ecx
mov byte [ebp - 4], 6
push ecx
mov ecx, esp
mov dword [ebp - 0x2000], esp
push str.http:__xiazai.rilibiao.com.cn_xml_switch_configex.xml
call fcn.004048c0
mov dword [ebp - 0x21a0], eax
mov byte [ebp - 4], 5
call fcn.0043d900
add esp, 8
mov byte [ebp - 0x21a1], al
movzx edx, byte [ebp - 0x21a1]
test edx, edx
je 0x4123f8
lea ecx, [ebp - 0x84c]
call fcn.004049e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4123f8
lea ecx, [ebp - 0x84c]
call fcn.00414dd0
push eax
lea ecx, [ebp - 0x1ffc]
call fcn.00414e90
mov dword [ebp - 0x2198], eax
mov eax, dword [ebp - 0x2198]
mov dword [ebp - 0x219c], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x219c]
call fcn.0041ced0
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d710
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1ffc]
call fcn.00414f30
lea ecx, [ebp - 0x860]
call fcn.0043d8d0
mov dword [ebp - 0x864], eax
cmp dword [ebp - 0x864], 0
je 0x412c17
push str.EngineControl
mov eax, dword [ebp - 0x864]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xc84], eax
cmp dword [ebp - 0xc84], 0
je 0x4124c6
push str.bUse
mov eax, dword [ebp - 0xc84]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xc88], eax
cmp dword [ebp - 0xc88], 0
je 0x4124c6
mov ecx, dword [ebp - 0xc88]
call fcn.00502250
push eax
call fcn.004ba9ae
add esp, 4
mov dword [ebp - 0xc8c], eax
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0xc88]
call fcn.00502250
push eax
lea ecx, [ebp - 0x1f78]
call fcn.00414ef0
mov dword [ebp - 0x2198], eax
mov ecx, dword [ebp - 0x2198]
call fcn.0041ced0
push eax
push str.bEngineUse
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x1f78]
call fcn.00414f30
mov eax, dword [ebp - 0xc8c]
mov dword [ebp - 0x220], eax
push str.DefaultLinkControl
mov eax, dword [ebp - 0x864]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xc90], eax
cmp dword [ebp - 0xc90], 0
je 0x41257b
push str.bUse
mov eax, dword [ebp - 0xc90]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xc94], eax
cmp dword [ebp - 0xc94], 0
je 0x41257b
mov ecx, dword [ebp - 0xc94]
call fcn.00502250
push eax
call fcn.004ba9ae
add esp, 4
mov dword [ebp - 0xc98], eax
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0xc94]
call fcn.00502250
push eax
lea ecx, [ebp - 0x1e74]
call fcn.00414ef0
mov dword [ebp - 0x2198], eax
mov ecx, dword [ebp - 0x2198]
call fcn.0041ced0
push eax
push str.bDefaultLinkUse
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x1e74]
call fcn.00414f30
push str.AdvertisingControl
mov eax, dword [ebp - 0x864]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xc9c], eax
cmp dword [ebp - 0xc9c], 0
je 0x412712
push str.bUse
mov eax, dword [ebp - 0xc9c]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xca0], eax
cmp dword [ebp - 0xca0], 0
je 0x412630
mov ecx, dword [ebp - 0xca0]
call fcn.00502250
push eax
call fcn.004ba9ae
add esp, 4
mov dword [ebp - 0xca4], eax
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0xca0]
call fcn.00502250
push eax
lea ecx, [ebp - 0x1d70]
call fcn.00414ef0
mov dword [ebp - 0x2198], eax
mov ecx, dword [ebp - 0x2198]
call fcn.0041ced0
push eax
push str.bAdverOfBottomUse
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x1d70]
call fcn.00414f30
push str.bUseTime
mov eax, dword [ebp - 0xc9c]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xca8], eax
cmp dword [ebp - 0xca8], 0
je 0x4126a1
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0xca8]
call fcn.00502250
push eax
lea ecx, [ebp - 0x1c6c]
call fcn.00414ef0
mov dword [ebp - 0x2198], eax
mov ecx, dword [ebp - 0x2198]
call fcn.0041ced0
push eax
push str.bAdverOfBottomUseTime
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x1c6c]
call fcn.00414f30
push str.bBrowserUseTime
mov eax, dword [ebp - 0xc9c]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xcac], eax
cmp dword [ebp - 0xcac], 0
je 0x412712
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0xcac]
call fcn.00502250
push eax
lea ecx, [ebp - 0x1b68]
call fcn.00414ef0
mov dword [ebp - 0x2198], eax
mov ecx, dword [ebp - 0x2198]
call fcn.0041ced0
push eax
push str.bAdverOfBottomBrowserUseTime
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x1b68]
call fcn.00414f30
push str.MiniControl
mov eax, dword [ebp - 0x864]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xcb0], eax
cmp dword [ebp - 0xcb0], 0
je 0x4128a9
push str.bUse
mov eax, dword [ebp - 0xcb0]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xcb4], eax
cmp dword [ebp - 0xcb4], 0
je 0x4127c7
mov ecx, dword [ebp - 0xcb4]
call fcn.00502250
push eax
call fcn.004ba9ae
add esp, 4
mov dword [ebp - 0xcb8], eax
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0xcb4]
call fcn.00502250
push eax
lea ecx, [ebp - 0x1a64]
call fcn.00414ef0
mov dword [ebp - 0x2198], eax
mov ecx, dword [ebp - 0x2198]
call fcn.0041ced0
push eax
push str.bMiniUse
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x1a64]
call fcn.00414f30
push str.bUseTime
mov eax, dword [ebp - 0xcb0]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xcbc], eax
cmp dword [ebp - 0xcbc], 0
je 0x412838
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0xcbc]
call fcn.00502250
push eax
lea ecx, [ebp - 0x1960]
call fcn.00414ef0
mov dword [ebp - 0x2198], eax
mov ecx, dword [ebp - 0x2198]
call fcn.0041ced0
push eax
push str.bMiniTime
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x1960]
call fcn.00414f30
push str.bBrowserUseTime
mov eax, dword [ebp - 0xcb0]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xcc0], eax
cmp dword [ebp - 0xcc0], 0
je 0x4128a9
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0xcc0]
call fcn.00502250
push eax
lea ecx, [ebp - 0x185c]
call fcn.00414ef0
mov dword [ebp - 0x2198], eax
mov ecx, dword [ebp - 0x2198]
call fcn.0041ced0
push eax
push str.bMiniUseTime
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x185c]
call fcn.00414f30
push str.BindOfFirstControl
mov eax, dword [ebp - 0x864]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xcc4], eax
cmp dword [ebp - 0xcc4], 0
je 0x412a40
push str.bUse
mov eax, dword [ebp - 0xcc4]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xcc8], eax
cmp dword [ebp - 0xcc8], 0
je 0x41295e
mov ecx, dword [ebp - 0xcc8]
call fcn.00502250
push eax
call fcn.004ba9ae
add esp, 4
mov dword [ebp - 0x224], eax
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0xcc8]
call fcn.00502250
push eax
lea ecx, [ebp - 0x1758]
call fcn.00414ef0
mov dword [ebp - 0x2198], eax
mov ecx, dword [ebp - 0x2198]
call fcn.0041ced0
push eax
push str.bBindOfBottomOnFirstUse
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x1758]
call fcn.00414f30
push str.bShowMoreBtn
mov eax, dword [ebp - 0xcc4]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xccc], eax
cmp dword [ebp - 0xccc], 0
je 0x4129cf
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0xccc]
call fcn.00502250
push eax
lea ecx, [ebp - 0x1654]
call fcn.00414ef0
mov dword [ebp - 0x2198], eax
mov ecx, dword [ebp - 0x2198]
call fcn.0041ced0
push eax
push 0x5560ec
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x1654]
call fcn.00414f30
push str.bUseTime
mov eax, dword [ebp - 0xcc4]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xcd0], eax
cmp dword [ebp - 0xcd0], 0
je 0x412a40
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0xcd0]
call fcn.00502250
push eax
lea ecx, [ebp - 0x1550]
call fcn.00414ef0
mov dword [ebp - 0x2198], eax
mov ecx, dword [ebp - 0x2198]
call fcn.0041ced0
push eax
push str.BindOfBottomOnFirstUseTime
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x1550]
call fcn.00414f30
push str.iCheckBtnControl
mov eax, dword [ebp - 0x864]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xcd4], eax
cmp dword [ebp - 0xcd4], 0
je 0x412ad7
push str.iCheckIndex
mov eax, dword [ebp - 0xcc4]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xcd8], eax
cmp dword [ebp - 0xcd8], 0
je 0x412ad7
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0xcd8]
call fcn.00502250
push eax
lea ecx, [ebp - 0x144c]
call fcn.00414ef0
mov dword [ebp - 0x2198], eax
mov ecx, dword [ebp - 0x2198]
call fcn.0041ced0
push eax
push str.iCheckBtnIndexControl
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x144c]
call fcn.00414f30
push str.UrlLinkControl
mov eax, dword [ebp - 0x864]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xcdc], eax
cmp dword [ebp - 0xcdc], 0
je 0x412c17
push str.bUse
mov eax, dword [ebp - 0xcdc]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xce0], eax
cmp dword [ebp - 0xce0], 0
je 0x412b8c
mov ecx, dword [ebp - 0xce0]
call fcn.00502250
push eax
call fcn.004ba9ae
add esp, 4
mov dword [ebp - 0x63c], eax
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0xce0]
call fcn.00502250
push eax
lea ecx, [ebp - 0x1348]
call fcn.00414ef0
mov dword [ebp - 0x2198], eax
mov ecx, dword [ebp - 0x2198]
call fcn.0041ced0
push eax
push str.bDeskTaskBarLinkUse
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x1348]
call fcn.00414f30
push str.iTime
mov eax, dword [ebp - 0xcdc]
push eax
lea ecx, [ebp - 0x860]
call fcn.0043d820
mov dword [ebp - 0xce4], eax
cmp dword [ebp - 0xce4], 0
je 0x412c17
mov ecx, dword [ebp - 0xce4]
call fcn.00502250
push eax
call fcn.004ba9ae
add esp, 4
mov dword [ebp - 0x640], eax
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0xce4]
call fcn.00502250
push eax
lea ecx, [ebp - 0x1244]
call fcn.00414ef0
mov dword [ebp - 0x2198], eax
mov ecx, dword [ebp - 0x2198]
call fcn.0041ced0
push eax
push str.iDeskTaskBarLinkTime
push str.ControlConf
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea ecx, [ebp - 0x1244]
call fcn.00414f30
lea ecx, [ebp - 0x850]
call fcn.004049e0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x84c]
call fcn.004049e0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x412c51
lea ecx, [ebp - 0x84c]
call fcn.004049e0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x860]
call fcn.0043d6b0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x850]
call fcn.00404940
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x84c]
call fcn.00404940
cmp dword [ebp - 0x220], 0
je 0x412ced
xor eax, eax
mov word [ebp - 0xeec], ax
push 0x206
push 0
lea eax, [ebp - 0xeea]
push eax
call fcn.004b7bc0
add esp, 0xc
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0xeec]
push ecx
call fcn.004b7b9a
add esp, 8
push 0x555d48
lea eax, [ebp - 0xeec]
push eax
call fcn.004b7b6c
add esp, 8
push 0
push 0
push str.StartDataEngine
lea eax, [ebp - 0xeec]
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [ebp - 0x14]
call fcn.00413a30
movzx eax, al
test eax, eax
je 0x412d35
push 0
push str.gaoxin.meirenli
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0xef0], eax
cmp dword [ebp - 0xef0], 0
je 0x412d33
push 0
mov eax, dword [ebp - 0x640]
push eax
push 0x178e
mov ecx, dword [ebp - 0xef0]
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x412daa
cmp dword [ebp - 0x638], 0
je 0x412daa
cmp dword [ebp - 0x224], 0
je 0x412daa
xor eax, eax
mov word [ebp - 0x10f8], ax
push 0x206
push 0
lea eax, [ebp - 0x10f6]
push eax
call fcn.004b7bc0
add esp, 0xc
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x10f8]
push ecx
call fcn.004b7b9a
add esp, 8
push str.SoftUpd.exe
lea eax, [ebp - 0x10f8]
push eax
call fcn.004b7b6c
add esp, 8
push 5
push 0
push str._bindAtFirst
lea eax, [ebp - 0x10f8]
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [ebp - 0x63c], 0
je 0x412dea
push 0
push str.gaoxin.meirenli
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x10fc], eax
cmp dword [ebp - 0x10fc], 0
je 0x412dea
push 0
mov eax, dword [ebp - 0x640]
push eax
push 0x178c
mov ecx, dword [ebp - 0x10fc]
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
push 0
push str.gaoxin.meirenli
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x1100], eax
cmp dword [ebp - 0x1100], 0
je 0x412e1c
push 0
push 0
push 0x1790
mov eax, dword [ebp - 0x1100]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b7b5d
mov esp, ebp
pop ebp
ret 0xc