Function at 0x4ef670
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f9751
mov eax, dword fs:[0]
push eax
sub esp, 0x3e8
mov eax, dword [0x541af0]
xor eax, ebp
mov dword [ebp - 0x24], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x3d4], ecx
call fcn.00403b60
mov dword [ebp - 0x18], eax
cmp dword [0x546c9c], 0
jne 0x4ef8b8
mov eax, dword [ebp + 8]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x4ef887
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 0
jne 0x4ef6de
mov dword [ebp - 0x3d8], 0
jmp 0x4ef73d
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x3fffffff
jle 0x4ef703
mov dword [ebp - 0x3dc], 0
jmp 0x4ef731
mov eax, dword [ebp - 0x10]
shl eax, 1
call fcn.004bbdc0
mov dword [ebp - 0x3e0], esp
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x3e0]
push eax
call fcn.00405ee0
mov dword [ebp - 0x3dc], eax
mov ecx, dword [ebp - 0x3dc]
mov dword [ebp - 0x3d8], ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x3cc], esp
mov edx, dword [ebp - 0x3d8]
push edx
call fcn.00403a90
mov dword [ebp - 0x3e4], eax
mov ecx, 0x546ce8
call fcn.004e9ae0
lea ecx, [ebp - 0x308]
call fcn.00407160
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x4ef78c
mov dword [ebp - 0x3e8], 0
jmp 0x4ef7eb
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x3fffffff
jle 0x4ef7b1
mov dword [ebp - 0x3ec], 0
jmp 0x4ef7df
mov eax, dword [ebp - 0x10]
shl eax, 1
call fcn.004bbdc0
mov dword [ebp - 0x3f0], esp
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x3f0]
push edx
call fcn.00405ee0
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x3e8], eax
mov ecx, dword [ebp - 0x3e8]
push ecx
push 0x51484c
lea edx, [ebp - 0x308]
push edx
call fcn.00406050
add esp, 0xc
lea ecx, [ebp - 0x304]
call fcn.004edec0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x308]
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
lea ecx, [ebp - 0x304]
call fcn.004edc00
push 0
lea ecx, [ebp - 0x304]
call fcn.004edc80
push 0x2010
lea ecx, [ebp - 0x304]
call fcn.004edbd0
push 0x514868
lea ecx, [ebp - 0x304]
call fcn.004edb90
push 1
lea ecx, [ebp - 0x304]
call sym.QiyiInstaller.exe_public:_unsigned_int___thiscall_DuiLib::CWindowWnd::ShowModal_bool_
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x304]
call fcn.004ede90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x308]
call fcn.004030e0
mov dword [0x546c9c], 1
mov ecx, dword [ebp - 0x3d4]
add ecx, 0x2d4
call fcn.004de6e0
mov ecx, dword [ebp - 0x3d4]
add ecx, 0x2d4
call fcn.004e73a0
jmp 0x4ef9ad
push 0
mov eax, dword [ebp - 0x3d4]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_GetParent]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
lea ecx, [ebp - 0x3c4]
call fcn.004f2260
mov dword [ebp - 4], 2
push ecx
mov ecx, esp
mov dword [ebp - 0x3d0], esp
push 0x514870
call fcn.00403a90
mov dword [ebp - 0x3f4], eax
lea ecx, [ebp - 0x3c4]
call fcn.004f2160
lea ecx, [ebp - 0x3c8]
call fcn.00407160
mov byte [ebp - 4], 3
cmp dword [0x546e04], 0
je 0x4ef93c
mov edx, dword [0x546db8]
push edx
push 0x514898
lea eax, [ebp - 0x3c8]
push eax
call fcn.00406050
add esp, 0xc
jmp 0x4ef957
mov ecx, dword [0x546db8]
push ecx
push 0x514930
lea edx, [ebp - 0x3c8]
push edx
call fcn.00406050
add esp, 0xc
push 0
push 0
lea ecx, [ebp - 0x3c8]
call sym.QiyiInstaller.exe_public:_enum_eScriptType___thiscall_CScriptModule::Type_void_
push eax
call fcn.0049778c
push 0
push 0
push 0x464
mov eax, dword [ebp - 0x3d4]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_GetParent]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3c8]
call fcn.004030e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c4]
call fcn.004f2140
lea esp, [ebp - 0x3f8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.004b5c0b
mov esp, ebp
pop ebp
ret 8