Function at 0x41baf0
Capabilities:
Check os version
Create process on windows
Hide graphical window

Disassembly:
push 0xffffffffffffffff
push 0x60cfe1
mov eax, dword fs:[0]
push eax
mov eax, 0x103c
call fcn.005ef960
mov eax, dword [0x6687b8]
xor eax, esp
mov dword [esp + 0x1038], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6687b8]
xor eax, esp
push eax
lea eax, [esp + 0x1050]
mov dword fs:[0], eax
mov eax, dword [esp + 0x1064]
mov ebx, ecx
push ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], eax
call dword [sym.imp.USER32.dll_GetParent]
mov ecx, dword [0x6784cc]
push 0xffffffffffffffeb
push ecx
mov dword [esp + 0x1c], eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov edx, dword [eax]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x130b
push edx
mov dword [esp + 0x30], eax
call esi
cmp eax, 8
ja 0x41c761
mov eax, dword [0x6784cc]
mov ebp, dword [sym.imp.USER32.dll_GetDlgItem]
push 1
push 3
push eax
call ebp
mov edi, dword [sym.imp.USER32.dll_EnableWindow]
push eax
call edi
mov eax, dword [esp + 0x1060]
cmp eax, 0x573
ja case.0x41bbc5.1004
je 0x41c213
add eax, 0xfffffc15
cmp eax, 0xe3
ja case.0x41bbc5.1004
movzx ecx, byte [eax + 0x41c7d8]
jmp dword [ecx*4 + 0x41c790]
push 0x24
push 0x625b68
push 0x625b70
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne case.0x41bbc5.1004
cmp dword [0x68067c], 0
jne 0x41bc31
mov edx, dword [0x6784cc]
push 0xffffffffffffffeb
push edx
mov dword [0x68067c], 1
call dword [sym.imp.USER32.dll_GetWindowLongW]
lea edi, [eax + 0x3c]
mov dword [esp + 0x14], 9
mov eax, dword [edi]
test eax, eax
je 0x41bc27
push 0
push 0
push 0xbd2
push eax
call esi
add edi, 4
sub dword [esp + 0x14], 1
jne 0x41bc15
lea eax, [esp + 0xa4]
call fcn.004059d0
lea eax, [esp + 0xa4]
push eax
call fcn.0041ab90
mov ecx, dword [esp + 0x24]
mov edi, dword [ecx + 0x40]
add esp, 4
push 0
push 0
push 0xf0
push 0x479
push edi
call ebp
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call esi
test eax, eax
jne 0x41bc85
push eax
push 1
push 0xf1
push 0x44d
push edi
call ebp
push eax
call esi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
mov edi, dword [sym.imp.USER32.dll_EnableWindow]
mov ecx, dword [esp + 0x1060]
mov eax, ecx
shr eax, 0x10
cmp ax, 7
jne 0x41c26e
cmp cx, 0x4c3
jne 0x41c75a
cmp dword [0x680680], 0
jne 0x41c75a
mov eax, dword [0x6784cc]
push 0xffffffffffffffeb
push eax
mov dword [0x680680], 1
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ebx, dword [sym.imp.USER32.dll_PostMessageW]
lea esi, [eax + 0x3c]
mov edi, 9
mov eax, dword [esi]
test eax, eax
je 0x41bcf7
push 0
push 0
push 0xbd2
push eax
call ebx
add esi, 4
sub edi, 1
jne 0x41bce5
lea eax, [edi + 1]
jmp 0x41c763
push 1
push 0x3fe
push ebx
call ebp
push eax
call edi
push 0
push 0x4a3
push ebx
call ebp
push eax
call edi
push 0
push 0x401
push ebx
call ebp
push eax
call edi
push 0
push 0x573
push ebx
call ebp
push eax
call edi
push 1
push 0x401
push ebx
call ebp
push eax
call edi
push 0x401
push ebx
call ebp
push 0x3fe
push ebx
mov dword [esp + 0x20], eax
call ebp
mov edx, dword [esp + 0x18]
push edx
mov dword [esp + 0x24], eax
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x41bd95
mov eax, dword [esp + 0x18]
push 0
push 0
push 0xf0
push eax
call esi
test eax, eax
je 0x41bd95
mov ecx, dword [esp + 0x20]
mov eax, 1
push eax
push ecx
call edi
jmp case.0x41bbc5.1004
mov ecx, dword [esp + 0x20]
xor eax, eax
push eax
push ecx
call edi
jmp case.0x41bbc5.1004
push 0
push 0x3fe
push ebx
call ebp
push eax
call edi
push 1
push 0x4a3
push ebx
call ebp
push eax
call edi
push 1
push 0x401
push ebx
call ebp
push eax
call edi
push 0
push 0x405
push ebx
call ebp
push eax
call edi
push 1
push 0x573
push ebx
call ebp
push eax
call edi
push 0
push 0x401
push ebx
call ebp
push eax
call edi
push 0
push 0x3fe
push ebx
call ebp
push eax
call edi
jmp case.0x41bbc5.1004
push 0
push 0
push 0xf0
push 0x4c5
push ebx
call ebp
push eax
call esi
test eax, eax
je 0x41be2d
push 1
push 0x4c6
push ebx
call ebp
push eax
call edi
push 1
jmp 0x41be3c
push 0
push 0x4c6
push ebx
call ebp
push eax
call edi
push 0
push 0x4c7
push ebx
call ebp
push eax
call edi
mov dword [0x678f08], 1
jmp case.0x41bbc5.1004
push 0
push 0
push 0xf0
push 0x402
push ebx
call ebp
push eax
call esi
test eax, eax
je 0x41befe
push 1
push 0x403
push ebx
call ebp
push eax
call edi
push 1
push 0x4c8
push ebx
call ebp
push eax
call edi
cmp dword [0x67b0bc], 0
jne 0x41beae
lea eax, [esp + 0xa4]
call fcn.004059d0
mov edx, dword [esp + 0x4f8]
mov dword [0x67b0bc], edx
push 0
push 0
push 0x147
push 0x4c6
push ebx
call ebp
push eax
call esi
cmp eax, 1
jne case.0x41bbc5.1004
push 0
push 0
push 0xf1
push 0x4c5
push ebx
call ebp
push eax
call esi
push 0
push 0x4c6
push ebx
call ebp
push eax
call edi
push 0
push 0x4c7
push ebx
call ebp
push eax
call edi
jmp case.0x41bbc5.1004
push 0
push 0x403
push ebx
call ebp
push eax
call edi
push 0
push 0x4c8
push ebx
call ebp
push eax
call edi
push 0
push 0
push 0x147
push 0x4c6
push ebx
call ebp
push eax
call esi
cmp eax, 1
jne case.0x41bbc5.1004
push 0
push eax
push 0xf1
push 0x4c5
push ebx
call ebp
push eax
call esi
push 1
push 0x4c6
push ebx
call ebp
push eax
call edi
push 1
push 0x4c7
push ebx
call ebp
push eax
call edi
jmp case.0x41bbc5.1004
push 0
push 0
push 0xf0
push 0x426
push ebx
call ebp
push eax
call esi
test eax, eax
je 0x41bf9e
push 1
push 0x4cd
push ebx
call ebp
push eax
call edi
push 1
push 0x4cc
push ebx
call ebp
push eax
call edi
jmp case.0x41bbc5.1004
push 0
push 0x4cd
push ebx
call ebp
push eax
call edi
push 0
push 0x4cc
push ebx
call ebp
push eax
call edi
jmp case.0x41bbc5.1004
push 0
push 0
push 0xf0
push 0x4cd
push ebx
call ebp
push eax
call esi
test eax, eax
je 0x41bfab
push 1
push 0x4cc
push ebx
call ebp
push eax
call edi
jmp case.0x41bbc5.1004
mov eax, dword [esp + 0x14]
mov ecx, dword [0x678fd0]
push 0
push 0x4297f0
push eax
push 0x7d
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp case.0x41bbc5.1004
mov ecx, dword [esp + 0x14]
call fcn.0041a9e0
jmp case.0x41bbc5.1004
push 1
push 0x4ad
push ebx
call ebp
push eax
call edi
jmp case.0x41bbc5.1004
push 0
push 0x4ad
push ebx
call ebp
push eax
call edi
jmp case.0x41bbc5.1004
push 0
push 1
push 0xf1
push 0x4f3
push ebx
call ebp
push eax
call esi
push 0
push 0
push 0xf1
push 0x4f4
push ebx
call ebp
push eax
call esi
push 1
jmp 0x41c08f
push 0
push 0
push 0xf1
push 0x4f3
push ebx
call ebp
push eax
call esi
push 0
push 1
push 0xf1
push 0x4f4
push ebx
call ebp
push eax
call esi
push 0
push 0x4f3
push ebx
call ebp
push eax
call edi
push 1
push 0x4f4
push ebx
call ebp
push eax
call edi
jmp case.0x41bbc5.1004
push 0
push 0
push 0x147
push 0x4c6
push ebx
call ebp
push eax
call esi
lea edx, [esp + 0xe44]
push edx
push eax
push 0x148
push 0x4c6
push ebx
call ebp
push eax
call esi
lea esi, [esp + 0x44]
call fcn.0041c8c0
lea eax, [esp + 0xe44]
mov esi, 1
push eax
mov dword [esp + 0x105c], esi
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea edi, [esp + 0x4c]
call fcn.0041cfe0
cmp eax, esi
jne 0x41c129
call fcn.004062c0
mov ecx, dword [0x678ec4]
mov dword [0x678ec0], esi
mov byte [ecx + 0x9c1], 1
mov byte [0x6784c5], 1
lea eax, [esp + 0x44]
mov dword [esp + 0x1058], 0xffffffff
call fcn.0041c930
jmp 0x41bc85
lea ebx, [esp + 0x14]
call fcn.0047a980
mov eax, ebx
mov dword [esp + 0x1058], 2
call fcn.00576f50
mov edx, str.QQPYWizard.exe
mov edi, ebx
call fcn.0040ae60
mov edx, dword [esp + 0x14]
push 1
push 0
push 0
push edx
push 0x625c98
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov ecx, ebx
call fcn.00403870
mov ebx, dword [esp + 0x18]
jmp 0x41bc85
push 0
push 0
push 0xf0
push 0x4ce
push ebx
call ebp
push eax
call esi
mov dword [0x67dc70], eax
jmp case.0x41bbc5.1004
push 0x401
push ebx
call ebp
push 0x3fe
push ebx
mov dword [esp + 0x20], eax
call ebp
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x41c204
mov ecx, dword [esp + 0x18]
push 0
push 0
push 0xf0
push ecx
call esi
test eax, eax
je 0x41c204
mov edx, dword [esp + 0x20]
mov eax, 1
push eax
push edx
call edi
jmp case.0x41bbc5.1004
mov edx, dword [esp + 0x20]
xor eax, eax
push eax
push edx
call edi
jmp case.0x41bbc5.1004
xor eax, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x24], vtable.CShuangPinSettingsDlg.0
mov dword [esp + 0x1058], eax
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea edi, [esp + 0x28]
call fcn.0041d060
mov dword [esp + 0x1058], 0xffffffff
mov eax, dword [esp + 0x38]
test eax, eax
mov dword [esp + 0x24], vtable.CShuangPinSettingsDlg.0
je 0x41bc8b
push eax
call fcn.005d1311
jmp 0x41bc8b
cmp ax, 1
jne 0x41c75a
cmp cx, 0x4c3
jne 0x41c749
mov edx, dword [esp + 0x1c]
mov ecx, dword [0x6708d4]
push 0
push 0
push 0x147
push edx
mov dword [esp + 0x24], ecx
call esi
cmp eax, 0xffffffff
mov dword [esp + 0x18], eax
je 0x41c761
test eax, eax
jne 0x41c40a
cmp dword [0x6708d4], eax
je 0x41c72b
push eax
push eax
push 0xf1
push 0x4ac
push ebx
mov dword [0x6708d4], eax
call ebp
push eax
call esi
push 1
push 0x4ab
push ebx
call ebp
push eax
call edi
push 1
push 0x4ac
push ebx
call ebp
push eax
call edi
push 0
push 1
push 0xf1
push 0x4ab
push ebx
call ebp
push eax
call esi
push 0
push 0x4ad
push ebx
call ebp
push eax
call edi
push 0
push 0
push 0xf1
push 0x4ad
push ebx
call ebp
push eax
call esi
push 0
push 3
push 0x14e
push 0x48b
push ebx
call ebp
push eax
call esi
push 0
push 0
push 0x14e
push 0x4c6
push ebx
call ebp
push eax
call esi
mov eax, dword [0x6784cc]
push 0xffffffffffffffeb
push eax
mov dword [0x678f08], 1
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov edi, dword [eax + 0x44]
push 0
push 1
push 0xf1
push 0x489
push edi
mov dword [esp + 0x30], eax
call ebp
push eax
call esi
push 0
push 0
push 0xf1
push 0x48a
push edi
call ebp
push eax
call esi
push 0
push 0x4a0
push edi
call ebp
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push 0
push 0xf1
push 0x4a0
push edi
call ebp
push eax
call esi
push 0
push 0x489
push 0x111
push edi
call esi
mov ecx, dword [esp + 0x1c]
xor eax, eax
push eax
push eax
push 0xf0
mov dword [0x67d944], eax
mov dword [0x67d948], eax
mov edi, dword [ecx + 0x40]
push 0x479
push edi
call ebp
push eax
call esi
test eax, eax
jne 0x41c403
push eax
push 1
push 0xf1
push 0x44d
push edi
call ebp
push eax
call esi
push 0
jmp 0x41c718
mov ecx, 1
cmp eax, ecx
jne 0x41c5cc
cmp dword [0x6708d4], ecx
je 0x41c732
push 0
push ecx
push 0xf1
push 0x4ac
push ebx
mov dword [0x6708d4], ecx
call ebp
push eax
call esi
push 1
push 0x4ab
push ebx
call ebp
push eax
call edi
push 1
push 0x4ac
push ebx
call ebp
push eax
call edi
push 0
push 0
push 0xf1
push 0x4ab
push ebx
call ebp
push eax
call esi
push 1
push 0x4ad
push ebx
call ebp
push eax
call edi
push 0
push 0
push 0xf1
push 0x4ad
push ebx
call ebp
push eax
call esi
push 0
push 7
push 0x14e
push 0x48b
push ebx
call ebp
push eax
call esi
push 0x4c5
push ebx
call ebp
push 0
push 1
push 0xf1
push eax
call esi
push 0x4c6
push ebx
call ebp
push 1
push eax
call edi
push 0x4c7
push ebx
call ebp
push 1
push eax
call edi
push 0
push 1
push 0x14e
push 0x4c6
push ebx
call ebp
push eax
call esi
mov dword [0x678f08], 1
push 0xffffffffffffffeb
mov edx, dword [0x6784cc]
push edx
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov edi, dword [eax + 0x44]
push 1
push 0x4a0
push edi
mov dword [esp + 0x28], eax
call ebp
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push 1
push 0xf1
push 0x4a0
push edi
call ebp
push eax
call esi
push 0
push 0
push 0xf1
push 0x489
push edi
call ebp
push eax
call esi
push 0
push 1
push 0xf1
push 0x48a
push edi
call ebp
push eax
call esi
push 0
push 0x48a
push 0x111
push edi
call esi
mov eax, dword [esp + 0x1c]
push 0
push 0
mov edi, 1
push 0xf1
mov dword [0x67d944], edi
mov dword [0x67d948], edi
mov eax, dword [eax + 0x40]
push 0x44d
push eax
call ebp
push eax
call esi
push 5
push 0x4cb
push ebx
call ebp
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.004062c0
mov eax, dword [0x678ec4]
mov ecx, dword [eax + 0x440]
push 0
push ecx
push 0xf1
push 0x4cb
push ebx
mov dword [0x678ec0], edi
call ebp
push eax
call esi
mov eax, dword [esp + 0x18]
jmp 0x41c732
mov ecx, 2
cmp eax, ecx
jne 0x41c72b
cmp dword [0x6708d4], ecx
je 0x41c72b
push 0
push 0
push 0xf1
push 0x4ac
push ebx
mov dword [0x6708d4], ecx
call ebp
push eax
call esi
push 1
push 0x4ab
push ebx
call ebp
push eax
call edi
push 0
push 0x4ac
push ebx
call ebp
push eax
call edi
push 0
push 1
push 0xf1
push 0x4ab
push ebx
call ebp
push eax
call esi
push 0
push 0x4ad
push ebx
call ebp
push eax
call edi
push 0
push 0
push 0xf1
push 0x4ad
push ebx
call ebp
push eax
call esi
push 0
push 7
push 0x14e
push 0x48b
push ebx
call ebp
push eax
call esi
mov edx, dword [0x6784cc]
push 0xffffffffffffffeb
push edx
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov edi, dword [eax + 0x44]
push 0
push 1
push 0xf1
push 0x489
push edi
mov dword [esp + 0x30], eax
call ebp
push eax
call esi
push 0
push 0
push 0xf1
push 0x48a
push edi
call ebp
push eax
call esi
push 0
push 0x4a0
push edi
call ebp
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push 0
push 0xf1
push 0x4a0
push edi
call ebp
push eax
call esi
push 0
push 0x489
push 0x111
push edi
call esi
xor edi, edi
push edi
push edi
push 0x14e
push 0x4c6
push ebx
mov dword [0x67d944], edi
mov dword [0x67d948], edi
call ebp
push eax
call esi
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x40]
push edi
push edi
push 0xf1
push 0x44d
push eax
mov dword [0x678f08], 1
call ebp
push eax
call esi
push edi
push 0x4cb
push ebx
call ebp
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [esp + 0x18]
cmp dword [esp + 0x14], 1
jne 0x41c75a
cmp eax, dword [esp + 0x14]
je 0x41c75a
mov dword [0x678f08], 1
mov eax, 1
jmp 0x41c763
cmp cx, 0x4c6
jne 0x41c75a
mov dword [0x678f08], 1
mov eax, 1
jmp 0x41c763
xor eax, eax
mov ecx, dword [esp + 0x1050]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1038]
xor ecx, esp
call fcn.005d28b3
add esp, 0x1048
ret 8