Function at 0x4950a0
Capabilities:
Check for time delay via gettickcount
Check mutex on windows
Create thread
Initialize winsock library
Query environment variable
Read file on windows
Set current directory
Set environment variable

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b7a10
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x1ed0
call fcn.005451d0
mov eax, dword [0x645300]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 0x1edc], eax
mov eax, dword [ebx + 0x10]
push 0x208
mov dword [ebp - 0x14e8], eax
lea eax, [ebp - 0x220]
push 0
push eax
call fcn.00546d20
add esp, 0xc
lea eax, [ebp - 0x220]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x4951bb
mov edx, 0x5fdb7c
lea ecx, [ebp - 0x220]
call fcn.0049d460
xorps xmm0, xmm0
mov dword [ebp - 0x230], 0
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x22c], 0
movups xmmword [ebp - 0x240], xmm0
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x495160
sub ecx, edx
lea eax, [ebp - 0x220]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x240]
call fcn.004060e0
push str._bincefxunyouwebhelper.exe
lea ecx, [ebp - 0x240]
call fcn.00425e00
cmp dword [ebp - 0x22c], 7
lea ecx, [ebp - 0x240]
mov edx, str.8nibU_
cmova ecx, dword [ebp - 0x240]
call fcn.0049d460
lea ecx, [ebp - 0x240]
call fcn.00405d20
push str.SockesUniCase.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
test esi, esi
je 0x4951e7
push str.SockesHookInit
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4951e0
call eax
jmp 0x4951e7
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov ecx, eax
mov eax, 0x45e7b273
mul ecx
shr edx, 0xe
mov dword [ebp - 0x250], edx
call esi
push eax
call fcn.0058525d
add esp, 4
lea eax, [ebp - 0x14e0]
push 0x190
push 0
push eax
call fcn.00546d20
add esp, 0xc
lea eax, [ebp - 0x14e0]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
mov dword [ebp - 0x1ee0], eax
test eax, eax
je 0x495246
or eax, 0xffffffff
jmp 0x495f52
call fcn.0049dc00
call fcn.004729c0
mov esi, eax
lea edi, [esi + 0xc]
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esi + 4]
test eax, eax
jne 0x49526e
push edi
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
call edi
jmp 0x495292
push str.XunYouReportAnalytics
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, eax
call edi
test esi, esi
je 0x495292
push 0
push str.client_boot
call esi
call fcn.004729c0
mov esi, eax
lea eax, [esi + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esi + 4]
test eax, eax
je 0x4952c0
push str.XunYouGetInterface
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x1ed4], eax
test eax, eax
jne 0x4952ca
lea eax, [esi + 0xc]
push eax
call edi
xor eax, eax
jmp 0x4952db
lea eax, [esi + 0xc]
push eax
call edi
push str.IXunYouCallManager
call dword [ebp - 0x1ed4]
mov ecx, dword [eax]
push dword [ebp - 0x14e8]
mov edx, dword [ecx + 8]
mov ecx, eax
call edx
mov esi, dword [ebp - 0x14e8]
lea ecx, [ebp - 0x240]
push 0xb
xorps xmm0, xmm0
mov dword [ebp - 0x230], 0
push str.bmvpnclient
movups xmmword [ebp - 0x240], xmm0
mov dword [ebp - 0x22c], 0
call fcn.004060e0
cmp dword [ebp - 0x22c], 7
lea eax, [ebp - 0x240]
cmova eax, dword [ebp - 0x240]
push eax
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov ecx, dword [ebp - 0x22c]
mov dword [0x6527ac], eax
cmp ecx, 7
jbe 0x495389
mov edx, dword [ebp - 0x240]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x49537a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x495f72
push ecx
push edx
call fcn.00543bbf
mov eax, dword [0x6527ac]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 7
mov word [ebp - 0x240], cx
test eax, eax
je 0x4953d5
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x495439
mov eax, dword [0x6527ac]
test eax, eax
je 0x4953d5
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x6527ac], 0
call dword [sym.imp.XYInteractive.dll_InteractiveGetMainWnd]
mov edx, eax
test edx, edx
je 0x495f39
mov ecx, esi
mov dword [ebp - 0x14f4], 1
xorps xmm0, xmm0
movq qword [ebp - 0x14f0], xmm0
lea edi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x495400
sub ecx, edi
mov dword [ebp - 0x14ec], esi
sar ecx, 1
lea eax, [ecx*2 + 2]
mov dword [ebp - 0x14f0], eax
lea eax, [ebp - 0x14f4]
push eax
push 0
push 0x4a
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x495f4d
push str.560815D9_FB09_4BD9_83EC_099E8D42D308
call dword [sym.imp.KERNEL32.dll_GlobalFindAtomW]
test ax, ax
jne 0x495468
lea edx, [ebp - 0x250]
lea ecx, [ebp - 0x14e8]
call fcn.0049ed70
test al, al
jne 0x495468
mov eax, 0xfffffffd
jmp 0x495f52
lea ecx, [ebp - 0x221]
mov byte [ebp - 0x221], 0
call fcn.0049e4e0
test al, al
jne 0x495488
mov eax, 0xfffffffc
jmp 0x495f52
lea ecx, [ebp - 0x24c]
call dword [sym.imp.utilities4.dll_public:_void___thiscall_SOUI::SStringW::constructor_void_]
mov esi, dword [sym.imp.utilities4.dll_public_virtual:_wchar_t____stdcall_SOUI::SStringW::GetBuffer_int_]
lea eax, [ebp - 0x24c]
push 0x104
push 0x104
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
push eax
push str.PATH
call edi
cmp eax, 0x104
jbe 0x4954d5
push eax
push eax
lea eax, [ebp - 0x24c]
push eax
call esi
push eax
push str.PATH
call edi
push 0xffffffffffffffff
lea eax, [ebp - 0x24c]
push eax
call dword [sym.imp.utilities4.dll_public_virtual:_void___stdcall_SOUI::SStringW::ReleaseBuffer_int_]
push 0x208
lea eax, [ebp - 0x220]
push 0
push eax
call fcn.00546d20
add esp, 0xc
lea eax, [ebp - 0x220]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov esi, dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x220]
push eax
call esi
mov edi, dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
lea eax, [ebp - 0x220]
push eax
call edi
xorps xmm0, xmm0
mov dword [ebp - 0x230], 0
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x22c], 0
movups xmmword [ebp - 0x240], xmm0
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x495553
sub ecx, edx
lea eax, [ebp - 0x220]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x240]
call fcn.004060e0
push str.dump_
lea ecx, [ebp - 0x240]
call fcn.00425e00
cmp dword [ebp - 0x22c], 7
lea eax, [ebp - 0x240]
cmova eax, dword [ebp - 0x240]
push eax
push 0
lea eax, [ebp - 0x24c]
push eax
call dword [sym.imp.utilities4.dll_public_virtual:_int___stdcall_SOUI::SStringW::Insert_int__wchar_t_const__]
lea ecx, [ebp - 0x24c]
call dword [sym.imp.utilities4.dll_public:_wchar_t_const____thiscall_SOUI::SStringW::operator_wchar_t_const__void_const]
push eax
push str.PATH
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov ecx, dword [ebp - 0x22c]
cmp ecx, 7
jbe 0x495601
mov edx, dword [ebp - 0x240]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4955f7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x495f77
push ecx
push edx
call fcn.00543bbf
add esp, 8
xor eax, eax
mov dword [ebp - 0x230], 0
lea ecx, [ebp - 0x24c]
mov dword [ebp - 0x22c], 7
mov word [ebp - 0x240], ax
call dword [sym.imp.utilities4.dll_public_virtual:_void___thiscall_SOUI::SStringW::destructor_void_]
call fcn.004a0c80
push 0x80
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
push 0x208
lea eax, [ebp - 0x220]
push 0
push eax
call fcn.00546d20
add esp, 0xc
lea eax, [ebp - 0x220]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x220]
push eax
call esi
lea eax, [ebp - 0x220]
push eax
call edi
lea edi, [ebp - 0x21e]
add edi, 0xfffffffe
nop
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x495690
xor eax, eax
mov ecx, 0xe
mov dword [ebp - 0x244], eax
mov esi, str.configcrtXunYouRootCA.cer
push 0x5ebc1c
lea eax, [ebp - 0x220]
rep movsd dword es:[edi], dword [esi]
push eax
lea eax, [ebp - 0x14e4]
xor esi, esi
push eax
mov dword [ebp - 0x14e4], esi
xor edi, edi
mov dword [ebp - 0x1ed8], esi
call fcn.00581d1c
add esp, 0xc
test eax, eax
jne 0x4957bc
push 2
push eax
push dword [ebp - 0x14e4]
call fcn.005675df
add esp, 0xc
push dword [ebp - 0x14e4]
call fcn.00581a80
add esp, 4
mov dword [ebp - 0x1ed4], eax
push eax
call fcn.005442cd
add esp, 4
mov dword [ebp - 0x1ed8], eax
push edi
push edi
push dword [ebp - 0x14e4]
call fcn.005675df
add esp, 0xc
push dword [ebp - 0x14e4]
push 1
push dword [ebp - 0x1ed4]
push dword [ebp - 0x1ed8]
call fcn.00567114
add esp, 0x10
push 0x5ebc10
push 0x24000
push edi
push edi
push 0xa
call dword [sym.imp.CRYPT32.dll_CertOpenStore]
mov dword [ebp - 0x244], eax
test eax, eax
jne 0x49576a
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
jmp 0x4957bc
push dword [ebp - 0x1ed4]
push dword [ebp - 0x1ed8]
push 0x10001
call dword [sym.imp.CRYPT32.dll_CertCreateCertificateContext]
mov edi, eax
test edi, edi
jne 0x495790
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
jmp 0x4957bc
mov eax, dword [ebp - 0x244]
push 0
push 1
push edi
push eax
call dword [sym.imp.CRYPT32.dll_CertAddCertificateContextToStore]
mov esi, eax
test esi, esi
jne 0x4957bc
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
cmp eax, 0x80092005
mov ecx, 1
cmove esi, ecx
mov eax, dword [ebp - 0x14e4]
test eax, eax
je 0x4957cf
push eax
call fcn.005652f0
add esp, 4
mov eax, dword [ebp - 0x1ed8]
test eax, eax
je 0x4957e2
push eax
call fcn.00543fb0
add esp, 4
test edi, edi
je 0x4957ed
push edi
call dword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
mov eax, dword [ebp - 0x244]
test eax, eax
je 0x495800
push 0
push eax
call dword [sym.imp.CRYPT32.dll_CertCloseStore]
test esi, esi
jne 0x49580c
lea eax, [esi - 5]
jmp 0x495f52
push 0x208
lea eax, [ebp - 0x220]
push 0
push eax
call fcn.00546d20
add esp, 0xc
lea eax, [ebp - 0x220]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x220]
push 0x5c
push eax
call fcn.0054617c
add esp, 8
xor ecx, ecx
mov word [eax + 2], cx
lea eax, [ebp - 0x220]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
xorps xmm0, xmm0
mov dword [ebp - 0x264], 0
push 0x20
movlpd qword [ebp - 0x27c], xmm0
movlpd qword [ebp - 0x274], xmm0
movlpd qword [ebp - 0x26c], xmm0
mov dword [ebp - 0x28c], 0
call fcn.00543bf7
add esp, 4
xorps xmm0, xmm0
mov dword [eax], eax
mov dword [eax + 4], eax
push 4
mov dword [ebp - 0x290], eax
movups xmmword [ebp - 0x27c], xmm0
mov dword [ebp - 0x264], 0
movq qword [ebp - 0x26c], xmm0
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x260], 0xffffffff
mov dword [ebp - 0x288], 2
mov dword [ebp - 0x25c], 0
call fcn.00543bf7
add esp, 4
lea ecx, [ebp - 0x290]
mov dword [eax], ecx
lea ecx, [ebp - 0x254]
push ecx
push 0
push eax
push 0x49c1e0
push 0
push 0
call fcn.005850db
add esp, 0x18
mov dword [ebp - 0x258], eax
test eax, eax
je 0x495f81
lea eax, [ebp - 0x258]
lea ecx, [ebp - 0x290]
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x244], ecx
call fcn.004729c0
push str.IXunYouSDKManager
mov ecx, eax
call fcn.00435840
test eax, eax
je 0x495962
mov ecx, dword [eax]
push 0xc8
mov edx, dword [ecx + 4]
mov ecx, eax
call edx
push 0x10a8
lea eax, [ebp - 0x1350]
push 0
push eax
call fcn.00546d20
add esp, 0xc
lea ecx, [ebp - 0x1350]
call fcn.004933c0
push dword [ebp - 0x1edc]
lea ecx, [ebp - 0x1350]
call fcn.00493580
test eax, eax
je 0x495e21
push str.skin_default.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov edi, eax
test edi, edi
je 0x495a0d
mov ecx, dword [ebp - 0x2b4]
lea eax, [ebp - 0x2b4]
xor esi, esi
push esi
push eax
call dword [ecx + 0x28]
mov dword [ebp - 4], esi
test eax, eax
je 0x4959ce
mov ecx, dword [eax]
mov esi, eax
push eax
call dword [ecx]
push 0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [esi]
push edi
push esi
call dword [eax + 0xc]
mov ecx, dword [ebp - 0x2b8]
add ecx, 4
push esi
push ecx
mov eax, dword [ecx]
call dword [eax + 0x10]
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - 4], 1
test esi, esi
je 0x495a06
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1350]
call fcn.00493d90
push str.skin_default.dll
xor esi, esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov ecx, dword [ebp - 0x2b4]
mov edi, eax
push esi
lea eax, [ebp - 0x2b4]
push eax
call dword [ecx + 0x28]
mov dword [ebp - 4], 2
test eax, eax
je 0x495a4a
mov ecx, dword [eax]
mov esi, eax
push eax
call dword [ecx]
push 0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [esi]
push edi
push esi
call dword [eax + 0xc]
test eax, eax
je 0x495a90
mov ecx, dword [ebp - 0x2b8]
add ecx, 4
push 0x294
push 0x647010
push 0x6465c0
mov eax, dword [ecx]
push ecx
call dword [eax + 0x68]
mov ecx, dword [ebp - 0x2b8]
add ecx, 0xc
push str.uidef:xml_init
push esi
push ecx
mov eax, dword [ecx]
call dword [eax]
mov dword [ebp - 4], 3
test esi, esi
je 0x495aa1
mov eax, dword [esi]
push esi
call dword [eax + 4]
push 8
mov dword [ebp - 4], 0xffffffff
call fcn.00543bf7
mov esi, eax
add esp, 4
mov dword [esi], vtable.SOUI::TObjRefImpl_struct_SOUI::IAttrStorageFactory_.0
mov dword [esi + 4], 1
mov dword [esi], vtable.SOUI::SXYAttrStorageFactory.0
mov edx, dword [ebp - 0x2b8]
add edx, 4
push esi
push edx
mov ecx, dword [edx]
call dword [ecx + 0x34]
mov eax, dword [esi]
or edi, 0xffffffff
mov eax, dword [eax + 4]
cmp eax, method.SOUI::SXYAttrStorageFactory.virtual_4
jne 0x495afa
mov eax, edi
lea ecx, [esi + 4]
lock xadd dword [ecx], eax
dec eax
jne 0x495afd
mov eax, dword [esi]
push esi
call dword [eax + 8]
jmp 0x495afd
push esi
call eax
push 8
call fcn.00543bf7
mov esi, eax
add esp, 4
mov dword [esi], vtable.SOUI::TObjRefImpl_struct_SOUI::IToolTipFactory_.0
mov dword [esi + 4], 1
mov dword [esi], vtable.SOUI::SXYToolTipFactory.0
mov edx, dword [ebp - 0x2b8]
add edx, 4
push esi
push edx
mov ecx, dword [edx]
call dword [ecx + 0x20]
mov eax, dword [esi]
mov eax, dword [eax + 4]
cmp eax, method.SOUI::SXYToolTipFactory.virtual_4
jne 0x495b4a
lea eax, [esi + 4]
lock xadd dword [eax], edi
dec edi
jne 0x495b4d
mov eax, dword [esi]
push esi
call dword [eax + 8]
jmp 0x495b4d
push esi
call eax
lea ecx, [ebp - 0x2a8]
call dword [sym.imp.utilities4.dll_public:_void___thiscall_SOUI::SXmlDoc::constructor_void_]
mov esi, dword [ebp - 0x2b8]
lea ecx, [ebp - 0x234]
mov edi, dword [sym.imp.utilities4.dll_public:_void___thiscall_SOUI::SStringW::constructor_wchar_t_const__]
push str.LAYOUT:xml_messagebox
call edi
push 0
lea eax, [ebp - 0x234]
mov ecx, esi
push eax
lea eax, [ebp - 0x2a8]
push eax
call dword [sym.imp.soui4.dll_public:_int___thiscall_SOUI::SApplication::LoadXmlDocment_class_SOUI::SXmlDoc___class_SOUI::SStringW_const___struct_SOUI::IResProvider__]
mov esi, dword [sym.imp.utilities4.dll_public_virtual:_void___thiscall_SOUI::SStringW::destructor_void_]
lea ecx, [ebp - 0x234]
call esi
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x2a8]
call dword [sym.imp.utilities4.dll_public:_class_SOUI::SXmlNode___thiscall_SOUI::SXmlDoc::root_void_]
sub esp, 0xc
mov ecx, esp
push 0
push 0x5ed180
push ecx
mov ecx, eax
call dword [sym.imp.utilities4.dll_public:_class_SOUI::SXmlNode___thiscall_SOUI::SXmlNode::child_wchar_t_const___bool_]
call dword [sym.imp.soui4.dll_int___cdecl_SOUI::SetMsgTemplate_class_SOUI::SXmlNode_]
add esp, 0xc
lea ecx, [ebp - 0x234]
call dword [sym.imp.utilities4.dll_public_virtual:_void___thiscall_SOUI::SXmlNode::destructor_void_]
lea ecx, [ebp - 0x2a8]
call dword [sym.imp.utilities4.dll_public_virtual:_void___thiscall_SOUI::SXmlDoc::destructor_void_]
lea ecx, [ebp - 0x1350]
call fcn.00493ad0
push dword [ebp - 0x1edc]
lea ecx, [ebp - 0x1350]
call fcn.004947d0
push 0x9d8
lea eax, [ebp - 0x1ed0]
push 0
push eax
call fcn.00546d20
add esp, 0xc
lea ecx, [ebp - 0x1ed0]
call fcn.0046bc80
lea ecx, [ebp - 0x14f4]
call dword [sym.imp.utilities4.dll_public:_void___thiscall_SOUI::SStringW::constructor_void_]
push str.binmodule_
lea ecx, [ebp - 0x238]
call edi
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x1b28]
call dword [sym.imp.utilities4.dll_public:_class_SOUI::SStringW____thiscall_SOUI::SStringW::operator_class_SOUI::SStringW_const__]
lea ecx, [ebp - 0x238]
call esi
lea eax, [ebp - 0x14f4]
push eax
lea ecx, [ebp - 0x1ed0]
call fcn.0046ec70
test al, al
jne 0x495d14
call fcn.004729c0
push str.IXunYouSDKManager
mov ecx, eax
call fcn.00435840
test eax, eax
je 0x495c8f
mov ecx, dword [eax]
push 0xc9
mov edx, dword [ecx + 4]
mov ecx, eax
call edx
lea ecx, [ebp - 0x234]
call dword [sym.imp.utilities4.dll_public:_void___thiscall_SOUI::SStringW::constructor_void_]
mov edi, dword [ebp - 0x14ec]
lea ecx, [ebp - 0x14f4]
call dword [sym.imp.utilities4.dll_protected:_struct_SOUI::TStringData____thiscall_SOUI::SStringW::GetData_void_const]
push 0x5fcbc4
mov esi, dword [eax + 4]
call dword [sym.imp.utilities4.dll_protected:_static_int___cdecl_SOUI::SStringW::SafeStrlen_wchar_t_const__]
add esp, 4
lea ecx, [ebp - 0x234]
push edi
push esi
push 0x5fcbc4
push eax
call dword [sym.imp.utilities4.dll_protected:_bool___thiscall_SOUI::SStringW::ConcatCopy_int__wchar_t_const___int__wchar_t_const__]
push 0x10
push 0x5fcbbc
lea ecx, [ebp - 0x234]
call dword [sym.imp.utilities4.dll_public:_wchar_t_const____thiscall_SOUI::SStringW::operator_wchar_t_const__void_const]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov esi, dword [sym.imp.utilities4.dll_public_virtual:_void___thiscall_SOUI::SStringW::destructor_void_]
lea ecx, [ebp - 0x234]
call esi
lea ecx, [ebp - 0x14f4]
call esi
lea ecx, [ebp - 0x1ed0]
call fcn.0046ca10
jmp 0x495e58
cmp byte [ebp - 0x221], 0
je 0x495d3d
mov ecx, dword [0x65279c]
lea edx, [ebp - 0x221]
push 1
push edx
push str.IsFirstRun
mov eax, dword [ecx]
mov byte [ebp - 0x221], 1
call dword [eax + 0x24]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea eax, [ebp - 0x1ed0]
push eax
call dword [sym.imp.soui4.dll_public_virtual:_struct_HWND______stdcall_SOUI::SHostWnd::Create_struct_HWND_____int__int__int__int_]
push 0
push 0
push 0x110
lea eax, [ebp - 0x1ed0]
push eax
call dword [sym.imp.soui4.dll_public_virtual:_long_int___stdcall_SOUI::TNativeWndProxy_struct_SOUI::IHostWnd_::SendMessageW_unsigned_int__unsigned_int__long_int_]
push dword [ebp - 0x1eac]
lea eax, [ebp - 0x1ed0]
push eax
call dword [sym.imp.soui4.dll_public_virtual:_int___stdcall_SOUI::TNativeWndProxy_struct_SOUI::IHostWnd_::CenterWindow_struct_HWND____]
push dword [ebp - 0x1eac]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, dword [ebp - 0x2b8]
push dword [ebp - 0x1eac]
add ecx, 4
push ecx
mov eax, dword [ecx]
call dword [eax + 0x3c]
mov ecx, dword [0x6527e0]
mov dword [ebp - 0x1ee0], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
mov dword [ebp - 0x1edc], eax
test eax, eax
jle 0x495e0c
mov ecx, dword [0x65279c]
push str.IXunYouAnalyticsManager
mov edx, dword [ecx]
mov edx, dword [edx]
call edx
mov edi, eax
test edi, edi
je 0x495e0c
mov ecx, dword [edi]
sub esp, 0x28
mov eax, dword [ebp - 0x1edc]
mov esi, dword [ecx]
mov ecx, esp
mov dword [ecx], vtable.std::_Func_impl_no_alloc_class__public:_void___thiscall_CMainDlg::OnDeleteReady_void_::_8::_lambda_1___void__class_PropertiesBase__.0
mov dword [ecx + 4], eax
mov dword [ecx + 0x24], ecx
call fcn.00434e50
add esp, 0x28
mov ecx, edi
push eax
push str.remain_browser
push 2
call esi
mov esi, dword [sym.imp.utilities4.dll_public_virtual:_void___thiscall_SOUI::SStringW::destructor_void_]
lea ecx, [ebp - 0x14f4]
call esi
lea ecx, [ebp - 0x1ed0]
call fcn.0046ca10
jmp 0x495e58
call fcn.004729c0
push str.IXunYouSDKManager
mov ecx, eax
call fcn.00435840
test eax, eax
je 0x495e44
mov ecx, dword [eax]
push 0xc9
mov edx, dword [ecx + 4]
mov ecx, eax
call edx
push 0x10
push 0x5fcbbc
push 0x5fcbdc
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 4], 4
mov ecx, dword [ebp - 0x2ac]
test ecx, ecx
je 0x495e8f
call fcn.00449140
mov edx, dword [ebp - 0x2ac]
xor ecx, ecx
mov dword [ebp - 0x2ac], ecx
test edx, edx
je 0x495e8f
mov eax, dword [edx]
mov ecx, edx
push 1
call dword [eax + 0x24]
mov ecx, dword [ebp - 0x2ac]
mov edx, dword [ebp - 0x2b8]
test edx, edx
je 0x495eb1
mov eax, dword [edx]
mov ecx, edx
push 1
call dword [eax]
mov ecx, dword [ebp - 0x2ac]
mov dword [ebp - 0x2b8], 0
test ecx, ecx
je 0x495ebc
mov eax, dword [ecx]
push 1
call dword [eax + 0x24]
lea ecx, [ebp - 0x2b4]
call dword [sym.imp.soui4.dll_public_virtual:_void___thiscall_SOUI::SouiFactory::destructor_void_]
lea ecx, [ebp - 0x1350]
call fcn.00494e50
mov dword [ebp - 4], 0xffffffff
call fcn.004a1790
call dword [sym.imp.ole32.dll_OleUninitialize]
push dword [0x6527ac]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x6527ac], 0
lea ecx, [ebp - 0x248]
mov dword [ebp - 4], 5
call fcn.004960a0
cmp dword [ebp - 0x254], 0
jne 0x495f7c
mov edx, dword [ebp - 0x290]
call fcn.00498160
push 0x20
push dword [ebp - 0x290]
call fcn.00543bbf
mov eax, dword [ebp - 0x1ee0]
add esp, 8
jmp 0x495f52
push 0x30
push 0x5fd978
push 0x5fd984
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, 0xfffffffe
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00543bb1
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
call fcn.00560663
call fcn.00560663
call fcn.00584d54
push 6
mov dword [ebp - 0x254], 0
call fcn.0051f720
int3