Function at 0x48384d
Capabilities:
Check if file exists
Check mutex on windows
Create thread
Parse pe header
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5eca56
mov eax, dword fs:[0]
push eax
mov eax, 0x106c
call fcn.0059b4a0
mov eax, dword [0x6d35ac]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 0x10]
mov ebx, dword [ebp + 8]
and dword [ebp - 0x1008], 0
push 0x8007
mov dword [ebp - 0xfe0], edi
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0x483144
mov dword [0x6deab4], ebx
call fcn.005b6978
xor eax, eax
push eax
push eax
call fcn.00539750
add esp, 0xc
call fcn.00539200
mov dword [ebp - 0xfd0], eax
test edi, edi
je 0x483918
push edi
call fcn.005b69b0
pop ecx
lea edi, [eax + 1]
cmp edi, 0x3fffffff
jg 0x483912
lea eax, [edi + edi]
call fcn.0059bb40
mov esi, esp
test esi, esi
je 0x483912
push edi
mov edi, dword [ebp - 0xfe0]
xor eax, eax
push esi
push 0xffffffffffffffff
push edi
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor ecx, ecx
test eax, eax
cmove esi, ecx
jmp 0x48391a
mov edi, dword [ebp - 0xfe0]
xor esi, esi
push esi
lea ecx, [ebp - 0xac4]
call fcn.0040b0d5
xor esi, esi
lea ecx, [ebp - 0xac4]
push esi
push str._LaunchUninstallMsgBox
call fcn.0040aff3
cmp eax, 0xffffffff
je 0x483964
push 4
push 0x654500
push str._fTxS
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x48641d
call fcn.00497e75
jmp 0x48641d
lea eax, [ebp - 0xfe8]
mov dword [ebp - 0xfe8], esi
push eax
push str.debug_modle
mov edx, str.Software360360huabaohuabao
mov ecx, reloc.WS2_32.dll_accept
call fcn.004261bf
pop ecx
pop ecx
xor ecx, ecx
inc ecx
test eax, eax
je 0x4839e1
cmp dword [ebp - 0xfe8], ecx
jne 0x4839e1
lea eax, [ebp - 0xfe8]
mov dword [ebp - 0xfe8], esi
push eax
push str.debug_worker
mov edx, str.Software360360huabaohuabao
mov ecx, reloc.WS2_32.dll_accept
call fcn.004261bf
pop ecx
pop ecx
xor ecx, ecx
inc ecx
test eax, eax
je 0x4839d3
mov eax, dword [0x6decd0]
cmp dword [ebp - 0xfe8], ecx
cmove eax, ecx
mov dword [0x6decd0], eax
mov dword [0x6decc8], ecx
mov dword [0x6deccc], ecx
jmp 0x4839e7
mov dword [0x6decc8], esi
lea eax, [ebp - 0xfe8]
mov dword [ebp - 0xfe8], esi
push eax
push str.debug_log
mov edx, str.Software360360huabaohuabao
mov ecx, reloc.WS2_32.dll_accept
call fcn.004261bf
pop ecx
test eax, eax
mov eax, dword [0x6deccc]
pop ecx
je 0x483a24
xor ecx, ecx
inc ecx
cmp dword [ebp - 0xfe8], ecx
cmove eax, ecx
mov dword [0x6deccc], eax
test eax, eax
je 0x483a44
push 0x654568
push edi
call fcn.005b48f0
pop ecx
pop ecx
test eax, eax
jne 0x483a44
mov ecx, dword [0x6e4bbc]
call fcn.0048017a
cmp dword [ebp - 0xab0], 8
lea eax, [ebp - 0xac4]
cmovae eax, dword [ebp - 0xac4]
push eax
push 0x5cb
push str.WinMain
push str.__s__d___360huabao_WinMain__cmdline_s__r_n
call fcn.0040a649
add esp, 0x10
call fcn.004cc6fd
push 5
pop edi
test eax, eax
jne 0x483cca
call fcn.0042709e
cmp eax, edi
je 0x483cca
call fcn.00427a90
test eax, eax
je 0x483cca
push esi
mov esi, str._low
lea ecx, [ebp - 0xac4]
push esi
call fcn.0040aff3
cmp eax, 0xffffffff
jne 0x483cca
push 0
push str.__type
lea ecx, [ebp - 0xac4]
call fcn.0040aff3
cmp eax, 0xffffffff
jne 0x483cca
lea ecx, [ebp - 0xa64]
call fcn.004c9d5f
push 0x5d0
push str.WinMain
push str.__s__d___ShouldLaunchWithLowPrivelege
call fcn.0040a649
add esp, 0xc
cmp dword [ebp - 0xa54], 0
je 0x483cb4
push 0x63424c
call fcn.005c2f90
pop ecx
push eax
push 0x63424c
lea ecx, [ebp - 0xa64]
call fcn.0040b220
cmp dword [ebp - 0xa50], 8
lea eax, [ebp - 0xa64]
cmovae eax, dword [ebp - 0xa64]
push eax
push 0x5d4
push str.WinMain
push str.__s__d___szExePath___s
call fcn.0040a649
add esp, 0x10
lea eax, [ebp - 0xa64]
cmp dword [ebp - 0xa50], 8
cmovae eax, dword [ebp - 0xa64]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x483cb4
cmp dword [ebp - 0xa50], 8
lea eax, [ebp - 0xa64]
cmovae eax, dword [ebp - 0xa64]
push eax
call fcn.004352fd
pop ecx
test eax, eax
je 0x483cb4
cmp dword [ebp - 0xab4], 0
mov eax, str.__low
cmovne esi, eax
push esi
call fcn.005c2f90
pop ecx
push eax
push esi
lea ecx, [ebp - 0xac4]
call fcn.0040b220
and dword [ebp - 0xfd4], 0
lea edx, [ebp - 0xa64]
push 0x63438c
lea ecx, [ebp - 0xa34]
call fcn.00411559
pop ecx
lea ecx, [ebp - 0xac4]
push ecx
mov ecx, eax
call fcn.00411504
push eax
lea ecx, [ebp - 0xaac]
call fcn.0040b65a
xor esi, esi
lea ecx, [ebp - 0xa34]
inc esi
mov dword [ebp - 4], esi
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xaac]
cmp dword [ebp - 0xa98], 8
cmovae eax, dword [ebp - 0xaac]
push eax
push 0x5da
push str.WinMain
push str.__s__d___CreateLowerProcess_strcmd__s
call fcn.0040a649
cmp dword [ebp - 0xa98], 8
lea eax, [ebp - 0xfd4]
push eax
lea ecx, [ebp - 0xaac]
mov edx, esi
cmovae ecx, dword [ebp - 0xaac]
push 0
call fcn.004367c4
add esp, 0x18
test eax, eax
je 0x483ca6
cmp dword [ebp - 0xa98], 8
lea eax, [ebp - 0xaac]
cmovae eax, dword [ebp - 0xaac]
push eax
push 0x5dc
push str.WinMain
push str.__s__d___ShouldLaunchWithLowPrivelege_szCommandLine___s
call fcn.0040a649
add esp, 0x10
lea ecx, [ebp - 0xaac]
mov dword [ebp - 4], 2
call fcn.0040b67e
lea ecx, [ebp - 0xa64]
mov dword [ebp - 4], 3
call fcn.0040b67e
jmp 0x48641d
lea ecx, [ebp - 0xaac]
mov dword [ebp - 4], edi
call fcn.0040b67e
lea ecx, [ebp - 0xa64]
mov dword [ebp - 4], 6
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
mov edx, fcn.004352fd
mov ecx, ebx
call fcn.00435780
call fcn.0041f066
mov ecx, eax
call fcn.0041f09c
call fcn.0040ba6d
mov ecx, eax
call fcn.0040bac0
xor eax, eax
mov ecx, 0x6e4e48
push eax
push ebx
push eax
call fcn.004875ed
call fcn.004360ed
mov edx, fcn.00426b60
mov ecx, ebx
call fcn.00435780
lea eax, [ebp - 0x100c]
xor ebx, ebx
push eax
push str.enable
mov edx, str.Software360360huabaohuabao
mov dword [ebp - 0x100c], ebx
mov ecx, reloc.WS2_32.dll_accept
call fcn.004261bf
pop ecx
pop ecx
call fcn.004cc6fd
mov esi, dword [ebp - 0xfe0]
test eax, eax
je 0x483d7a
xor eax, eax
inc eax
cmp dword [ebp - 0x100c], eax
je 0x483d7a
push 0x654568
push esi
call fcn.005b48f0
pop ecx
pop ecx
test eax, eax
jne 0x483d7a
push 0x5f1
push str.WinMain
push str.__s__d___huabao_enable_close
call fcn.0040a649
add esp, 0xc
jmp 0x4863da
push ebx
push 0x65219c
lea ecx, [ebp - 0xac4]
call fcn.0040aff3
cmp eax, 0xffffffff
je 0x483dc4
call fcn.004cc6fd
test eax, eax
jne 0x483dc4
call fcn.00480a7c
test al, al
je 0x483dc4
push 0x654568
push esi
call fcn.005b48f0
pop ecx
pop ecx
test eax, eax
jne 0x483dc4
push 0x5f6
push str.WinMain
push str.__s__d___360ScreenSaver_exist
jmp 0x483d6d
call fcn.00480236
test eax, eax
jne 0x483de5
push 0x40
push 0x632054
push 0x632060
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4863da
push 0x633e6c
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005394c0
mov ebx, eax
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 7
call fcn.00404812
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4c]
test ebx, ebx
je 0x483ebf
push str.crashcfg
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xaac]
push eax
call fcn.00539200
mov ecx, eax
call fcn.00539550
push 8
pop esi
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], esi
call fcn.00404812
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xa9c], 0
je 0x483ea4
cmp dword [ebp - 0xa98], esi
lea eax, [ebp - 0xaac]
push 0
cmovae eax, dword [ebp - 0xaac]
mov ecx, 0x6e92f0
push eax
push ebx
call fcn.004b65f5
cmp dword [0x6dea94], 0
jne 0x483ea4
mov ecx, 0x6e9270
call fcn.004b5cb2
mov dword [ebp - 4], 9
lea ecx, [ebp - 0xaac]
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
jmp 0x4863da
push esi
call fcn.004045aa
lea ecx, [ebp - 0xa4c]
call fcn.00420d0d
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0xb
call fcn.00404812
or dword [ebp - 4], 0xffffffff
call fcn.00412563
mov ecx, str.360huabao
call fcn.0041257a
call fcn.00483800
and dword [ebp - 0xffc], 0
xor eax, eax
inc eax
mov edx, str.Software360360huabaohuabao
mov byte [ebp - 0xfc9], al
mov ecx, reloc.WS2_32.dll_accept
lea eax, [ebp - 0xffc]
push eax
push str.multienable
call fcn.004261bf
pop ecx
pop ecx
push str.desk
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005396b0
mov byte [ebp - 0xfd5], al
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0xc
call fcn.00404812
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4c]
push str.window
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005396b0
mov bl, al
mov byte [ebp - 0xfed], bl
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0xd
call fcn.00404812
or dword [ebp - 4], 0xffffffff
test bl, bl
mov ecx, dword [0x6decc0]
push 6
pop eax
cmovne ecx, eax
push 0x654568
push esi
mov dword [0x6decc0], ecx
call fcn.005b48f0
pop ecx
pop ecx
test eax, eax
jne 0x483fd0
test bl, bl
je 0x483fdc
call fcn.0044a18d
mov ecx, eax
call fcn.0044a26f
xor ecx, ecx
xor eax, eax
inc ecx
movzx eax, al
cmp dword [ebp - 0xffc], ecx
push 0x654804
cmove eax, ecx
mov dword [ebp - 0xff8], eax
movzx eax, cl
xor ecx, ecx
test bl, bl
cmovne eax, ecx
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 0xfd4], eax
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005396b0
mov bl, al
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0xe
call fcn.00404812
or dword [ebp - 4], 0xffffffff
test bl, bl
je 0x484054
call fcn.0044a18d
mov ecx, eax
call fcn.0044a26f
xor ebx, ebx
mov al, bl
jmp 0x48405c
mov eax, dword [ebp - 0xfd4]
xor ebx, ebx
test al, al
je 0x4840a6
mov cl, byte [ebp - 0xff8]
call fcn.004808e0
test eax, eax
jne 0x48408f
mov byte [ebp - 0xfc9], bl
call fcn.004808b8
test eax, eax
je 0x4840a6
push 0x640
push str.WinMain
push str.__s__d___set_high_dpi_ok__r_n
jmp 0x48409e
push 0x645
push str.WinMain
push str.__s__d___set_SetMytProcessDpiAwareness_ok__r_n
call fcn.0040a649
add esp, 0xc
push 0x65489c
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005396b0
mov bl, al
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0xf
call fcn.00404812
or dword [ebp - 4], 0xffffffff
test bl, bl
je 0x4840ef
call fcn.004805c3
jmp 0x4863da
push 0x654568
push esi
call fcn.005b48f0
pop ecx
pop ecx
test eax, eax
je 0x4842ad
push 0x208
xor ebx, ebx
lea eax, [ebp - 0x424]
push ebx
push eax
call fcn.005b24a0
cmp dword [ebp - 0xab0], 8
lea eax, [ebp - 0x424]
lea ecx, [ebp - 0xac4]
mov edx, 0x6548a0
cmovae ecx, dword [ebp - 0xac4]
push 0x103
push eax
call fcn.00427e39
add esp, 0x14
mov edi, str.chrome_child.dll
sub esp, 0x18
mov ecx, esp
push edi
test eax, eax
je 0x4841f8
call fcn.0040b0d5
sub esp, 0x18
lea eax, [ebp - 0x424]
mov ecx, esp
push eax
call fcn.0040b0d5
lea ecx, [ebp - 0xa34]
call fcn.004ca66d
add esp, 0x30
cmp dword [eax + 0x14], 8
jb 0x484184
mov eax, dword [eax]
push eax
call fcn.004352fd
pop ecx
mov esi, eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x10
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x4863da
push 8
push ebx
sub esp, 0x18
mov ecx, esp
push edi
call fcn.0040b0d5
sub esp, 0x18
lea eax, [ebp - 0x424]
mov ecx, esp
push eax
call fcn.0040b0d5
lea ecx, [ebp - 0xa34]
call fcn.004ca66d
add esp, 0x30
cmp dword [eax + 0x14], 8
jb 0x4841e0
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov esi, eax
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0xa34]
jmp 0x484274
call fcn.0040b0d5
lea ecx, [ebp - 0xa34]
call fcn.004ca141
add esp, 0x18
cmp dword [eax + 0x14], 8
jb 0x484213
mov eax, dword [eax]
push eax
call fcn.004352fd
pop ecx
mov esi, eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x12
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x4863da
push 8
push ebx
sub esp, 0x18
mov ecx, esp
push edi
call fcn.0040b0d5
lea ecx, [ebp - 0xb84]
call fcn.004ca141
add esp, 0x18
cmp dword [eax + 0x14], 8
jb 0x48425e
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov esi, eax
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0xb84]
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x4863da
push str.ChromeShell
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4863da
push 0x6e4e88
push dword [0x6deab4]
call eax
pop ecx
pop ecx
jmp 0x4863da
push 0x642ce0
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005394c0
mov dword [ebp - 0xfd4], eax
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x14
call fcn.00404812
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4c]
push 0x6548dc
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005394c0
mov dword [ebp - 0xfec], eax
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x15
call fcn.00404812
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4c]
push str.from
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa7c]
push eax
call fcn.00539200
mov ecx, eax
call fcn.00539550
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x16
call fcn.00404812
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa7c]
push 0x6548e0
call fcn.00410858
push 4
pop ebx
test al, al
je 0x48438e
mov dword [ebp - 0xfe4], 2
jmp 0x4843ac
push 0x6548ec
lea ecx, [ebp - 0xa7c]
call fcn.00410858
test al, al
je 0x4843b1
mov dword [ebp - 0xfe4], 3
xor esi, esi
inc esi
jmp 0x4843ea
push str.unistpic
lea ecx, [ebp - 0xa7c]
call fcn.00410858
test al, al
je 0x4843ca
xor esi, esi
inc esi
jmp 0x4843e4
push str.wscore
lea ecx, [ebp - 0xa7c]
call fcn.00410858
xor esi, esi
inc esi
test al, al
mov ebx, esi
cmovne ebx, edi
mov dword [ebp - 0xfe4], ebx
push 0x654908
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa94]
push eax
call fcn.00539200
mov ecx, eax
call fcn.00539550
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x17
call fcn.00404812
or dword [ebp - 4], 0xffffffff
call fcn.004cc6fd
test eax, eax
je 0x484486
call fcn.00415916
mov ebx, eax
push ebx
push 0x692
push str.WinMain
push str.__s__d___GetSysScreenOwnerStatus_sys_owner___d__r_n
call fcn.0040a649
add esp, 0x10
push 2
pop eax
cmp ebx, eax
jne 0x484465
mov dword [ebp - 0xfe4], 3
jmp 0x484486
cmp ebx, 3
jne 0x484472
mov dword [ebp - 0xfe4], eax
jmp 0x484486
xor eax, eax
cmp ebx, 4
lea esi, [eax + 1]
cmove esi, edi
mov dword [ebp - 0xfe4], esi
xor esi, esi
inc esi
push 0x638774
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005396b0
mov bl, al
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x18
call fcn.00404812
or dword [ebp - 4], 0xffffffff
test bl, bl
je 0x484a39
call fcn.004cc6fd
neg eax
sbb eax, eax
xor ebx, ebx
add eax, 2
mov dword [ebp - 0xa58], ebx
mov dword [0x6decc0], eax
lea eax, [ebp - 0xa58]
push ebx
push eax
mov dword [ebp - 0xa54], ebx
mov dword [ebp - 0xa50], ebx
call fcn.00424618
mov ecx, eax
call fcn.004244c2
push dword [ebp - 0xffc]
call fcn.0042709e
push eax
lea ecx, [ebp - 0xa58]
call fcn.00424a0a
push eax
push 0x6a9
push str.WinMain
push str.__s__d___screens_size___d__osversion___d_multienable___d__r_n
call fcn.0040a649
add esp, 0x18
lea ecx, [ebp - 0xa58]
call fcn.00424a0a
cmp eax, esi
jbe 0x4846e2
call fcn.0042709e
cmp eax, edi
je 0x4846e2
xor eax, eax
inc eax
cmp dword [ebp - 0xffc], eax
jne 0x4846e2
call fcn.004cc6fd
test eax, eax
jne 0x4846e2
lea eax, [ebp - 0x1000]
push eax
lea ecx, [ebp - 0xa58]
call fcn.0048734f
lea ecx, [ebp - 0xa58]
mov esi, dword [eax]
lea eax, [ebp - 0x1000]
push eax
mov dword [ebp - 0xff4], esi
call fcn.0048735e
mov eax, dword [eax]
mov dword [ebp - 0xff8], eax
cmp eax, esi
je 0x4846c5
mov esi, eax
lea edi, [ebp - 0x1078]
xor eax, eax
xor ebx, ebx
push 0x1b
pop ecx
inc eax
rep movsd dword es:[edi], dword [esi]
cmp dword [ebp - 0x1054], eax
push 0x802
setne bl
xor eax, eax
push eax
lea eax, [ebp - 0xa1c]
inc ebx
push eax
call fcn.005b24a0
mov edi, dword [ebp - 0x106c]
add esp, 0xc
mov eax, dword [ebp - 0x1068]
sub eax, dword [ebp - 0x1070]
sub edi, dword [ebp - 0x1074]
cmp byte [ebp - 0xfc9], 0
mov dword [ebp - 0x1004], eax
je 0x48460b
mov ecx, dword [ebp - 0x1010]
jmp 0x48463b
xor eax, eax
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
push 0x58
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov dword [ebp - 0xfdc], eax
xor eax, eax
push esi
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [ebp - 0x1004]
mov ecx, dword [ebp - 0xfdc]
push dword [ebp - 0xfec]
push dword [ebp - 0xfd4]
push ecx
push eax
push edi
push dword [ebp - 0x1070]
lea eax, [ebp - 0xa1c]
push dword [ebp - 0x1074]
push ebx
push str._m:_d__x:_d__y:_d__w:_d__h:_d__d:_d__v:_d__f:_d
push 0x801
push eax
call fcn.00412a13
add esp, 0x2c
lea eax, [ebp - 0xa1c]
lea ecx, [ebp - 0xa4c]
push eax
call fcn.0040b0d5
lea ecx, [ebp - 0xa4c]
call fcn.004ceb02
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x19
call fcn.0040b67e
or esi, 0xffffffff
mov dword [ebp - 4], esi
mov eax, dword [ebp - 0xff8]
add eax, 0x6c
mov dword [ebp - 0xff8], eax
cmp eax, dword [ebp - 0xff4]
jne 0x4845a9
push 5
pop edi
jmp 0x4846c8
or esi, 0xffffffff
lea ecx, [ebp - 0xa58]
mov dword [ebp - 4], 0x26
call fcn.0045bb53
mov dword [ebp - 4], esi
jmp 0x484a3c
push str.611264CE_A4A2_4614_BE47_6B92329E4304
lea ecx, [ebp - 0xa4c]
call fcn.0040b0d5
call fcn.004cc6fd
test eax, eax
je 0x484714
mov esi, str.C4146CDC_5193_4516_AE53_A239D2DFA5E5
push esi
call fcn.005c2f90
pop ecx
push eax
push esi
lea ecx, [ebp - 0xa4c]
call fcn.0040b566
push 8
pop esi
cmp dword [ebp - 0xa38], esi
lea eax, [ebp - 0xa4c]
cmovae eax, dword [ebp - 0xa4c]
push eax
xor eax, eax
inc eax
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov ebx, eax
xor eax, eax
mov dword [ebp - 0xfdc], ebx
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x4849be
call fcn.004cc6fd
test eax, eax
jne 0x48497c
lea ecx, [ebp - 0xa34]
call fcn.004d4353
sub esp, 0x18
mov ecx, esp
push str.installer360ini.dll
call fcn.0040b0d5
lea ecx, [ebp - 0xb54]
call fcn.004ca141
add esp, 0x18
cmp dword [eax + 0x14], esi
jb 0x48478f
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xb84]
call fcn.0040b0d5
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x1a
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb9c]
call fcn.0040b106
lea ecx, [ebp - 0xaac]
call fcn.0040b106
lea edx, [ebp - 0xb9c]
lea ecx, [ebp - 0xa34]
call fcn.004272ec
lea edx, [ebp - 0xaac]
lea ecx, [ebp - 0xb84]
call fcn.004272ec
call fcn.004d3e72
test eax, eax
jne 0x484850
lea ecx, [ebp - 0xb54]
call fcn.004d4353
cmp dword [eax + 0x14], esi
jb 0x484804
mov eax, dword [eax]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x484843
cmp dword [ebp - 0xa98], esi
lea edx, [ebp - 0xaac]
lea ecx, [ebp - 0xb9c]
cmovae edx, dword [ebp - 0xaac]
cmp dword [ebp - 0xb88], esi
cmovae ecx, dword [ebp - 0xb9c]
xor eax, eax
lea ebx, [eax + 1]
call fcn.004275c6
test eax, eax
jns 0x484856
xor eax, eax
inc eax
mov byte [ebp - 0xfc9], al
mov ebx, eax
jmp 0x48485f
mov ebx, dword [ebp - 0x1008]
xor eax, eax
mov byte [ebp - 0xfc9], al
inc eax
test al, bl
je 0x484879
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x1b
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0xfc9], 0
je 0x484913
xor ebx, ebx
lea ecx, [ebp - 0xb54]
mov dword [ebp - 0xff4], ebx
call fcn.004d4353
cmp dword [eax + 0x14], esi
jb 0x4848a0
mov eax, dword [eax]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov esi, eax
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x1c
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
test esi, esi
jne 0x4848f4
push 0x6e9
push str.WinMain
push str.__s__d___start_thread_copy
call fcn.0040a649
add esp, 0xc
lea eax, [ebp - 0xff4]
push eax
push ebx
push ebx
push fcn.00480294
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edi, eax
jmp 0x48492a
push 0x6ed
push str.WinMain
push str.__s__d___start_oncall_copy
call fcn.0040a649
add esp, 0xc
push ebx
call fcn.00480294
jmp 0x48492a
push 0x6f2
push str.WinMain
push str.__s__d___Is360SafeRegExist_is_true
call fcn.0040a649
add esp, 0xc
lea ecx, [ebp - 0xaac]
mov dword [ebp - 4], 0x1d
call fcn.0040b67e
lea ecx, [ebp - 0xb9c]
mov dword [ebp - 4], 0x1e
call fcn.0040b67e
lea ecx, [ebp - 0xb84]
mov dword [ebp - 4], 0x1f
call fcn.0040b67e
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x20
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
mov ebx, dword [ebp - 0xfdc]
xor edx, edx
xor ecx, ecx
inc edx
movzx eax, cl
cmp dword [ebp - 0xfec], edx
push ecx
cmove eax, edx
mov edx, dword [ebp - 0xfe4]
mov byte [ebp - 0xfdc], al
lea eax, [ebp - 0xac4]
push eax
lea eax, [ebp - 0xa94]
push eax
push dword [ebp - 0xfdc]
push dword [ebp - 0xfd4]
call fcn.00480402
add esp, 0x14
jmp 0x4849d5
push 0x6fd
push str.WinMain
push str.__s__d___360huabao_EXISTS__r_n
call fcn.0040a649
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
test edi, edi
je 0x4849f1
push 0x1388
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push edi
call esi
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x21
call fcn.0040b67e
lea ecx, [ebp - 0xa58]
mov dword [ebp - 4], 0x22
call fcn.0045bb53
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x23
call fcn.0040b67e
mov dword [ebp - 4], 0x24
lea ecx, [ebp - 0xa7c]
jmp 0x483eb1
or esi, 0xffffffff
push 0x654b4c
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005396b0
mov bl, al
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x27
call fcn.00404812
mov dword [ebp - 4], esi
test bl, bl
je 0x484fa2
push 0x654b4c
lea ecx, [ebp - 0xa34]
mov dword [0x6decc0], 7
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005394c0
mov ebx, eax
mov dword [ebp - 0xfdc], ebx
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x28
call fcn.00404812
push 0x63e9e8
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005394c0
mov dword [ebp - 0xfd0], eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x29
call fcn.00404812
push 0x63e9ec
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005394c0
mov dword [ebp - 0x1000], eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x2a
call fcn.00404812
push 0x638790
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005394c0
mov dword [ebp - 0xfe0], eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x2b
call fcn.00404812
push 0x63ed4c
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005394c0
mov dword [ebp - 0xff8], eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x2c
call fcn.00404812
push 0x6386f4
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005394c0
mov dword [ebp - 0xfd4], eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x2d
call fcn.00404812
push 0x642ce0
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005394c0
mov dword [ebp - 0x1004], eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x2e
call fcn.00404812
push 0x6335fc
lea ecx, [ebp - 0xaac]
mov dword [ebp - 4], esi
call fcn.0040b0d5
xor eax, eax
inc eax
cmp ebx, eax
jne 0x484e8e
mov esi, 0x654b50
push esi
call fcn.005c2f90
pop ecx
push eax
push esi
lea ecx, [ebp - 0xaac]
call fcn.0040b566
xor eax, eax
lea ecx, [ebp - 0xb84]
mov edi, eax
call fcn.004d4353
sub esp, 0x18
mov ecx, esp
push str.installer360ini.dll
call fcn.0040b0d5
lea ecx, [ebp - 0xb54]
call fcn.004ca141
add esp, 0x18
push 8
pop esi
cmp dword [eax + 0x14], esi
jb 0x484ca6
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xa34]
call fcn.0040b0d5
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x2f
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb9c]
call fcn.0040b106
lea ecx, [ebp - 0xa4c]
call fcn.0040b106
lea edx, [ebp - 0xb9c]
lea ecx, [ebp - 0xb84]
call fcn.004272ec
lea edx, [ebp - 0xa4c]
lea ecx, [ebp - 0xa34]
call fcn.004272ec
call fcn.004d3e72
test eax, eax
jne 0x484d60
lea ecx, [ebp - 0xb54]
call fcn.004d4353
cmp dword [eax + 0x14], esi
jb 0x484d1b
mov eax, dword [eax]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x484d58
cmp dword [ebp - 0xa38], esi
lea edx, [ebp - 0xa4c]
lea ecx, [ebp - 0xb9c]
cmovae edx, dword [ebp - 0xa4c]
cmp dword [ebp - 0xb88], esi
push 2
cmovae ecx, dword [ebp - 0xb9c]
pop ebx
call fcn.004275c6
test eax, eax
jns 0x484d66
xor eax, eax
push 2
inc eax
pop ebx
jmp 0x484d68
mov ebx, dword [ebp - 0x1008]
xor eax, eax
mov byte [ebp - 0xfc9], al
test bl, 2
je 0x484d89
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x30
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0xfc9], 0
je 0x484e23
xor ebx, ebx
lea ecx, [ebp - 0xb54]
mov dword [ebp - 0xff4], ebx
call fcn.004d4353
cmp dword [eax + 0x14], esi
jb 0x484db0
mov eax, dword [eax]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov esi, eax
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x31
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
test esi, esi
jne 0x484e04
push 0x731
push str.WinMain
push str.__s__d___start_thread_copy
call fcn.0040a649
add esp, 0xc
lea eax, [ebp - 0xff4]
push eax
push ebx
push ebx
push fcn.00480294
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edi, eax
jmp 0x484e3a
push 0x735
push str.WinMain
push str.__s__d___start_oncall_copy
call fcn.0040a649
add esp, 0xc
push ebx
call fcn.00480294
jmp 0x484e3a
push 0x739
push str.WinMain
push str.__s__d___Is360SafeRegExist_is_true
call fcn.0040a649
add esp, 0xc
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x32
call fcn.0040b67e
lea ecx, [ebp - 0xb9c]
mov dword [ebp - 4], 0x33
call fcn.0040b67e
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x34
call fcn.0040b67e
lea ecx, [ebp - 0xb84]
mov dword [ebp - 4], 0x35
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
mov ebx, dword [ebp - 0xfdc]
jmp 0x484eab
mov esi, str.54FB661F_9BFB_43CA_A865_9C7B26F168E1
push esi
call fcn.005c2f90
pop ecx
push eax
push esi
lea ecx, [ebp - 0xaac]
call fcn.0040b566
xor eax, eax
mov edi, eax
cmp dword [ebp - 0xa98], 8
lea eax, [ebp - 0xaac]
cmovae eax, dword [ebp - 0xaac]
push eax
xor eax, eax
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x484f3f
xor eax, eax
xor edx, edx
push eax
inc edx
movzx ecx, al
cmp dword [ebp - 0xfec], edx
lea eax, [ebp - 0xac4]
push eax
cmove ecx, edx
lea eax, [ebp - 0xa94]
mov edx, dword [ebp - 0xfe4]
push eax
mov byte [ebp - 0xfdc], cl
xor ecx, ecx
push dword [ebp - 0xfdc]
push dword [ebp - 0x1004]
push dword [ebp - 0xfd4]
push ebx
push dword [ebp - 0xff8]
push dword [ebp - 0xfe0]
push dword [ebp - 0x1000]
push dword [ebp - 0xfd0]
call fcn.004806eb
add esp, 0x2c
jmp 0x484f56
push 0x748
push str.WinMain
push str.__s__d___360huabao.exe_EXISTS__r_n
call fcn.0040a649
add esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
test edi, edi
je 0x484f72
push 0x1388
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push edi
call esi
lea ecx, [ebp - 0xaac]
mov dword [ebp - 4], 0x36
call fcn.0040b67e
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x37
call fcn.0040b67e
mov dword [ebp - 4], 0x38
jmp 0x484a2e
push 0x208
xor ebx, ebx
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.005b24a0
cmp dword [ebp - 0xab0], 8
lea eax, [ebp - 0x218]
lea ecx, [ebp - 0xac4]
mov edx, 0x654c34
cmovae ecx, dword [ebp - 0xac4]
push 0x103
push eax
call fcn.00427e39
add esp, 0x14
test eax, eax
je 0x485057
lea eax, [ebp - 0xfd4]
mov dword [ebp - 0xfd4], ebx
push eax
lea eax, [ebp - 0x218]
push str.0x_x
push eax
call fcn.0046cb4b
add esp, 0xc
xor eax, eax
inc eax
push str.35352ae8_24e5_41ec_91c2_40993f337b23
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x485032
mov ecx, dword [ebp - 0xfd4]
call fcn.00480997
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x3a
call fcn.0040b67e
mov dword [ebp - 4], 0x3b
jmp 0x484a2e
push str.cfex
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005396b0
mov bl, al
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x3c
call fcn.00404812
mov dword [ebp - 4], esi
test bl, bl
je 0x4850f9
push 0x767
push str.WinMain
push str.__s__d___huabao_set_config
call fcn.0040a649
add esp, 0xc
xor ebx, ebx
inc ebx
xor eax, eax
push str.3F0D9BF9_9C7B_43AB_A362_7387A35AFB43
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x4850d4
mov ecx, ebx
call fcn.00482dd9
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x3d
call fcn.0040b67e
mov dword [ebp - 4], 0x3e
jmp 0x484a2e
push str.likeex
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005396b0
mov bl, al
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x3f
call fcn.00404812
mov dword [ebp - 4], esi
test bl, bl
je 0x48519c
push 0x774
push str.WinMain
push str.__s__d___huabao_set_likeex
call fcn.0040a649
add esp, 0xc
xor eax, eax
inc eax
push str.47962739_A6D5_4DAF_9E4E_14767F9FADDB
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x485177
push 2
pop ecx
call fcn.00482dd9
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x40
call fcn.0040b67e
mov dword [ebp - 4], 0x41
jmp 0x484a2e
push 0x654db4
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005394c0
mov esi, eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x42
call fcn.00404812
or dword [ebp - 4], 0xffffffff
xor ebx, ebx
inc ebx
cmp esi, ebx
jl 0x485267
xor ebx, ebx
lea eax, [ebp - 0xa58]
push ebx
push eax
mov dword [ebp - 0xa58], ebx
mov dword [ebp - 0xa54], ebx
mov dword [ebp - 0xa50], ebx
call fcn.00424618
mov ecx, eax
call fcn.004244c2
xor eax, eax
push str.8BAACDBA_5AF1_427B_BE5F_2B8AA1A7E05D
inc eax
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x485230
mov ecx, esi
call fcn.00481ecf
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa58]
mov dword [ebp - 4], 0x43
call fcn.0045bb53
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x44
call fcn.0040b67e
mov dword [ebp - 4], 0x45
jmp 0x484a2e
push 0x654e04
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005394c0
mov esi, eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x47
call fcn.00404812
or dword [ebp - 4], 0xffffffff
cmp esi, ebx
jne 0x485332
xor ebx, ebx
lea eax, [ebp - 0xa58]
push ebx
push eax
mov dword [ebp - 0xa58], ebx
mov dword [ebp - 0xa54], ebx
mov dword [ebp - 0xa50], ebx
call fcn.00424618
mov ecx, eax
call fcn.004244c2
xor eax, eax
push 0x654e08
inc eax
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x4852fb
xor eax, eax
lea ecx, [eax + 1]
call fcn.00481fdc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa58]
mov dword [ebp - 4], 0x48
call fcn.0045bb53
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x49
call fcn.0040b67e
mov dword [ebp - 4], 0x4a
jmp 0x484a2e
push 0x654e58
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005396b0
mov bl, al
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x4c
call fcn.00404812
or dword [ebp - 4], 0xffffffff
test bl, bl
je 0x4853bc
xor eax, eax
push str.2BE7F418_3A70_4576_9C4A_A27A49A57651
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x485397
call fcn.00480a9f
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x4d
call fcn.0040b67e
mov dword [ebp - 4], 0x4e
jmp 0x484a2e
push str.promote_install
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xadc]
push eax
call fcn.00539200
mov ecx, eax
call fcn.00539550
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x4f
call fcn.00404812
or ebx, 0xffffffff
mov dword [ebp - 4], ebx
cmp dword [ebp - 0xacc], 0
je 0x4854a9
xor eax, eax
push str.ce3ceb90_e1d7_4acb_8abf_7d4ea32774c6
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x485464
sub esp, 0x18
lea eax, [ebp - 0xadc]
mov ecx, esp
push eax
call fcn.0040b119
lea ecx, [ebp - 0xb54]
call fcn.00435a2c
add esp, 0x18
mov ecx, eax
call fcn.0048662f
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x50
call fcn.00404812
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xadc]
mov dword [ebp - 4], 0x51
call fcn.0040b67e
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x52
call fcn.0040b67e
mov dword [ebp - 4], 0x53
lea ecx, [ebp - 0xa7c]
call fcn.0040b67e
mov dword [ebp - 4], ebx
jmp 0x4863da
push str.promote_installex
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xaf4]
push eax
call fcn.00539200
mov ecx, eax
call fcn.00539550
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x54
call fcn.00404812
mov dword [ebp - 4], ebx
cmp dword [ebp - 0xae4], 0
je 0x48559e
xor eax, eax
push str.d5ad00fa_a4f2_478a_be07_2ef43d47b11b
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x485555
push str._promote_install:
lea ecx, [ebp - 0xa4c]
call fcn.0040b0d5
lea eax, [ebp - 0xaf4]
push eax
lea ecx, [ebp - 0xa4c]
call fcn.00411504
lea ecx, [ebp - 0xa4c]
call fcn.004825bd
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x55
call fcn.0040b67e
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xaf4]
mov dword [ebp - 4], 0x56
call fcn.0040b67e
lea ecx, [ebp - 0xadc]
mov dword [ebp - 4], 0x57
call fcn.0040b67e
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x58
call fcn.0040b67e
mov dword [ebp - 4], 0x59
jmp 0x485496
push str.promote_se_install
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xb24]
push eax
call fcn.00539200
mov ecx, eax
call fcn.00539550
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x5a
call fcn.00404812
mov dword [ebp - 4], ebx
cmp dword [ebp - 0xb14], 0
je 0x48569e
xor eax, eax
push str.89E27CD3_540E_4749_AABC_E48273F74AC0
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x485643
sub esp, 0x18
lea eax, [ebp - 0xb24]
mov ecx, esp
push eax
call fcn.0040b119
lea ecx, [ebp - 0xb54]
call fcn.00435a2c
add esp, 0x18
mov ecx, eax
call fcn.00486fa7
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x5b
call fcn.00404812
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xb24]
mov dword [ebp - 4], 0x5c
call fcn.0040b67e
lea ecx, [ebp - 0xaf4]
mov dword [ebp - 4], 0x5d
call fcn.0040b67e
lea ecx, [ebp - 0xadc]
mov dword [ebp - 4], 0x5e
call fcn.0040b67e
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x5f
call fcn.0040b67e
mov dword [ebp - 4], 0x60
jmp 0x485496
push str.promote_se_installex
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xb3c]
push eax
call fcn.00539200
mov ecx, eax
call fcn.00539550
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x61
call fcn.00404812
mov dword [ebp - 4], ebx
cmp dword [ebp - 0xb2c], 0
je 0x4857b7
xor eax, eax
push str.E11E3E91_60B6_4FC7_A6CF_0DBBB53624ED
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x48574a
push str._promote_se_install:
lea ecx, [ebp - 0xa4c]
call fcn.0040b0d5
lea eax, [ebp - 0xb3c]
push eax
lea ecx, [ebp - 0xa4c]
call fcn.00411504
lea ecx, [ebp - 0xa4c]
call fcn.004825bd
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x62
call fcn.0040b67e
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xb3c]
mov dword [ebp - 4], 0x63
call fcn.0040b67e
lea ecx, [ebp - 0xb24]
mov dword [ebp - 4], 0x64
call fcn.0040b67e
lea ecx, [ebp - 0xaf4]
mov dword [ebp - 4], 0x65
call fcn.0040b67e
lea ecx, [ebp - 0xadc]
mov dword [ebp - 4], 0x66
call fcn.0040b67e
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x67
call fcn.0040b67e
mov dword [ebp - 4], 0x68
jmp 0x485496
push str.efrom
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xb0c]
push eax
call fcn.00539200
mov ecx, eax
call fcn.00539550
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x69
call fcn.00404812
push 0x633e74
lea ecx, [ebp - 0xb0c]
mov dword [ebp - 4], ebx
call fcn.00410858
test al, al
je 0x48580e
push 2
jmp 0x485824
push 0x64689c
lea ecx, [ebp - 0xb0c]
call fcn.00410858
test al, al
je 0x485827
push 3
pop esi
jmp 0x485842
push 0x64dd50
lea ecx, [ebp - 0xb0c]
call fcn.00410858
xor esi, esi
inc esi
test al, al
push 4
pop eax
cmovne esi, eax
push 0x655090
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005394c0
cdq
mov ebx, eax
mov dword [ebp - 0xfec], edx
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x6a
call fcn.00404812
push dword [ebp - 0xfec]
or dword [ebp - 4], 0xffffffff
push ebx
push 0x7e7
push str.WinMain
push str.__s__d___do_check_dwHuabaoExitPop_dwHuabaoExitPop___lld
call fcn.0040a649
xor eax, eax
add esp, 0x14
cmp dword [ebp - 0xfec], eax
jl 0x485968
jg 0x4858ba
cmp ebx, eax
jbe 0x485968
xor ecx, ecx
push str.69DB7A97_6264_4B51_AF76_B9DE677D3EDD
inc ecx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x4858e9
push dword [ebp - 0xfec]
mov ecx, esi
push ebx
call fcn.00482c71
pop ecx
pop ecx
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xb0c]
mov dword [ebp - 4], 0x6b
call fcn.0040b67e
lea ecx, [ebp - 0xb3c]
mov dword [ebp - 4], 0x6c
call fcn.0040b67e
lea ecx, [ebp - 0xb24]
mov dword [ebp - 4], 0x6d
call fcn.0040b67e
lea ecx, [ebp - 0xaf4]
mov dword [ebp - 4], 0x6e
call fcn.0040b67e
lea ecx, [ebp - 0xadc]
mov dword [ebp - 4], 0x6f
call fcn.0040b67e
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x70
call fcn.0040b67e
mov dword [ebp - 4], 0x71
jmp 0x484a2e
push str.hepex
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005394c0
cdq
mov esi, eax
mov ebx, edx
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x72
call fcn.00404812
lea ecx, [ebp - 0xb0c]
mov dword [ebp - 4], 0x73
call sym.360huabao.exe_public:_class_DuiLib::CMarkup____thiscall_DuiLib::CDialogBuilder::GetMarkup_void_
mov ecx, eax
call fcn.0040b5da
or dword [ebp - 4], 0xffffffff
push eax
push ebx
push esi
push 0x7f4
push str.WinMain
push str.__s__d___do_check_dwHuabaoExitPop_dwHuabaoExitPop___lld_szeForm___s
call fcn.0040a649
xor eax, eax
add esp, 0x18
cmp ebx, eax
jl 0x485a2b
jg 0x4859e5
cmp esi, eax
jbe 0x485a2b
xor ecx, ecx
push str.C0D8BF95_3EF4_41F5_9D68_9BE6AC67D9E3
inc ecx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x485a1f
sub esp, 0x18
lea eax, [ebp - 0xb0c]
mov ecx, esp
push eax
call fcn.0040b119
push ebx
push esi
call fcn.00482311
add esp, 0x20
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x48638d
push 0x655244
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005396b0
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x485a92
xor eax, eax
mov dword [0x6decc0], 9
push str.E5889496_4D98_428C_BBBB_8DEAE5704875
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x485a8f
call fcn.00480baf
push esi
jmp 0x485a20
push str.exman
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005396b0
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x485af8
xor eax, eax
mov dword [0x6decc0], 8
push str.4C152FB3_9518_46E4_8CB8_DF391FCBE156
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x485a8f
call fcn.00480de0
jmp 0x485a8f
push 0x6552ec
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005396b0
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x485bfd
xor eax, eax
mov dword [0x6decc0], edi
push 0x6552f0
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x485a8f
push str.data
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xb84]
push eax
call fcn.00539200
mov ecx, eax
call fcn.00539550
lea ecx, [ebp - 0xa34]
call fcn.00404838
push 0x627e3e
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
sub esp, 0x18
lea eax, [ebp - 0xb84]
mov ecx, esp
push eax
call fcn.0040b119
lea ecx, [ebp - 0xb54]
call fcn.00435a2c
add esp, 0x18
lea edx, [ebp - 0xa4c]
mov ecx, eax
call fcn.00416984
lea ecx, [ebp - 0xb54]
call fcn.00404838
lea ecx, [ebp - 0xa4c]
call fcn.00480cbf
lea ecx, [ebp - 0xa4c]
call fcn.00404838
lea ecx, [ebp - 0xb84]
call fcn.0040b6ac
jmp 0x485a8f
mov ebx, 0x654804
lea ecx, [ebp - 0xa34]
push ebx
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xb6c]
push eax
call fcn.00539200
mov ecx, eax
call fcn.00539550
lea ecx, [ebp - 0xa34]
call fcn.00404838
lea eax, [ebp - 0xb6c]
push 0x633e74
push eax
call fcn.00410848
pop ecx
pop ecx
test al, al
jne 0x485c61
lea eax, [ebp - 0xb6c]
push 0x64689c
push eax
call fcn.00410848
pop ecx
pop ecx
test al, al
je 0x485c6c
push 0x6335fc
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push ebx
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005396b0
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x485da7
lea eax, [ebp - 0xfd0]
mov dword [0x6decc0], 3
push eax
lea eax, [ebp - 0x218]
xor ebx, ebx
push str.0x_x
push eax
mov dword [ebp - 0xfd0], ebx
call fcn.0046cb4b
add esp, 0xc
call fcn.004d70d4
test al, al
je 0x486382
mov esi, str.143359e8_f4b9_4010_a5e5_789147203fa5
push esi
push ebx
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
test eax, eax
je 0x485cfd
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
dec edi
test edi, edi
jg 0x485cdf
push esi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x485d41
push 0x848
push str.WinMain
push str.__s__d___StartUpTask
call fcn.0040a649
add esp, 0xc
call fcn.004d9a26
lea ecx, [ebp - 0xac4]
call fcn.00483041
jmp 0x48637b
push 0x654804
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xb54]
push eax
call fcn.00539200
mov ecx, eax
call fcn.00539550
push eax
push 0x633e74
call fcn.0048739d
pop ecx
pop ecx
lea ecx, [ebp - 0xb54]
mov bl, al
call fcn.0040b6ac
lea ecx, [ebp - 0xa34]
call fcn.00404838
test bl, bl
je 0x48637b
call fcn.00483074
call fcn.004830b0
jmp 0x48637b
lea ecx, [ebp - 0xac4]
call fcn.0040b5da
push eax
push 0x85c
push str.WinMain
push str.__s__d___szSetConfig_strCmd___s
call fcn.0040a649
add esp, 0x10
lea ecx, [ebp - 0xfc8]
call fcn.00404a19
mov dl, byte [ebp - 0xfd5]
lea eax, [ebp - 0xfc8]
push eax
lea ecx, [ebp - 0xac4]
call fcn.0048314d
pop ecx
test al, al
je 0x4860fa
xor eax, eax
mov esi, str.Software360360huabao
push 4
pop ebx
mov dword [ebp - 0xfd4], eax
mov edx, esi
lea eax, [ebp - 0xfd4]
mov dword [0x6decc0], ebx
push eax
push str.install_model
mov ecx, reloc.WS2_32.dll_accept
call fcn.004261bf
cmp dword [ebp - 0xfd4], 2
pop ecx
pop ecx
jne 0x485e65
push str.operate
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005396b0
test al, al
jne 0x485e6b
xor eax, eax
inc eax
push ebx
mov byte [ebp - 0xfc9], al
pop eax
mov ebx, eax
jmp 0x485e73
mov ebx, dword [ebp - 0x1008]
xor eax, eax
mov byte [ebp - 0xfc9], al
test bl, 4
je 0x485e83
lea ecx, [ebp - 0xa34]
call fcn.00404838
cmp byte [ebp - 0xfc9], 0
je 0x485f37
call fcn.0042709e
cmp eax, edi
je 0x485eda
xor ebx, ebx
xor eax, eax
inc ebx
push ebx
push 0x6553fc
push str.S_MR_j
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, ebx
jne 0x485eda
push str.__restore
lea ecx, [ebp - 0xa34]
call fcn.0040b0d5
lea ecx, [ebp - 0xa34]
call fcn.004ce693
lea ecx, [ebp - 0xa34]
call fcn.0040b6ac
lea ecx, [ebp - 0xb6c]
call fcn.0040b6ac
lea ecx, [ebp - 0xb0c]
call fcn.0040b6ac
lea ecx, [ebp - 0xb3c]
call fcn.0040b6ac
lea ecx, [ebp - 0xb24]
call fcn.0040b6ac
lea ecx, [ebp - 0xaf4]
call fcn.0040b6ac
lea ecx, [ebp - 0xadc]
call fcn.0040b6ac
lea ecx, [ebp - 0xa94]
call fcn.0040b6ac
lea ecx, [ebp - 0xa7c]
call fcn.0040b6ac
jmp 0x48641d
push str.360Huabao_shell.zip
lea ecx, [ebp - 0xa34]
call fcn.0040b0d5
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0xa4c]
call fcn.004d5054
lea ecx, [ebp - 0xa34]
call fcn.0040b6ac
lea ecx, [ebp - 0xa4c]
call fcn.0040b5da
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x485f89
lea ecx, [ebp - 0xa4c]
call fcn.0040b6ac
jmp 0x486382
lea eax, [ebp - 0xfd0]
xor ebx, ebx
push eax
push str.360huabao_exit
mov edx, esi
mov dword [ebp - 0xfd0], ebx
mov ecx, reloc.WS2_32.dll_accept
call fcn.00426539
pop ecx
pop ecx
mov esi, str.2b66a28a_e754_472a_94c5_b512e57133e2
push esi
push ebx
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
test eax, eax
je 0x485ff0
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push edi
push 0x87f
push str.WinMain
push str.__s__d___show_mainwind_try_times:__d
call fcn.0040a649
add esp, 0x10
dec edi
test edi, edi
jg 0x485fb0
xor eax, eax
push esi
inc eax
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xfd0], eax
call esi
push eax
push 0x883
push str.WinMain
push str.__s__d___CreateMutex_2b66a28a_error:__d
call fcn.0040a649
add esp, 0x10
call esi
cmp eax, 0xb7
je 0x486094
cmp byte [ebp - 0xfd5], bl
je 0x486042
xor eax, eax
lea ecx, [eax + 1]
call fcn.00480efe
call fcn.004830ec
mov ecx, dword [ebp - 0xfe0]
mov edx, str.__enable_webui_debug
call fcn.0043b116
test eax, eax
setne bl
call esi
push eax
push 0x88a
push str.WinMain
push str.__s__d___start_ShowWallPaperMainWnd_error:__d
call fcn.0040a649
sub esp, 0x404
lea esi, [ebp - 0xfc8]
mov ecx, 0x105
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov dl, bl
xor ecx, ecx
call fcn.004819f0
add esp, 0x414
jmp 0x4860d2
push 0x88d
push str.WinMain
push str.__s__d___start_ShowWallPaperMainWndEx
call fcn.0040a649
push 2
pop ecx
call fcn.00480efe
lea ecx, [ebp - 0xfc8]
call fcn.00481d1a
push 0x890
push str.WinMain
push str.__s__d___end_ShowWallPaperMainWndEx
call fcn.0040a649
add esp, 0x18
push dword [ebp - 0xfd0]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x894
push str.WinMain
push str.__s__d___close_hMutexForMain
call fcn.0040a649
add esp, 0xc
jmp 0x485f79
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x8a7
push str.WinMain
push str.__s__d___GetTickCount:__d
call fcn.0040a649
add esp, 0x10
cmp byte [ebp - 0xfed], 0
je 0x486131
lea ecx, [ebp - 0xac4]
call fcn.00480f8c
jmp 0x486382
push str.general
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.00539200
mov ecx, eax
call fcn.005394c0
lea ecx, [ebp - 0xa34]
call fcn.00404838
push str.prepop
lea ecx, [ebp - 0xb84]
call fcn.004045aa
mov esi, dword [ebp - 0xfd0]
lea eax, [ebp - 0xb84]
push eax
mov ecx, esi
call fcn.005396b0
lea ecx, [ebp - 0xb84]
mov bl, al
call fcn.00404838
test bl, bl
je 0x4861d3
xor eax, eax
mov dword [0x6decc0], 0xa
push str.821F92D6_57D5_48A4_84DB_615FD5A9485A
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x48637b
lea ecx, [ebp - 0xac4]
call fcn.004814d2
jmp 0x48637b
push str.popdialog
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
mov ecx, esi
push eax
call fcn.005396b0
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x486241
xor eax, eax
mov dword [0x6decc0], 0xb
push str.4E615E96_C316_4D7D_A9E8_4A921FEAACE3
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x48637b
lea ecx, [ebp - 0xac4]
call fcn.0048167d
jmp 0x48637b
push str.inspirevideo
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
mov ecx, esi
push eax
call fcn.005396b0
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x4862af
xor eax, eax
mov dword [0x6decc0], 0xc
push str.39503951_AD3F_4BC7_B0C8_C72B412A0BD8
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x48637b
lea ecx, [ebp - 0xac4]
call fcn.00481845
jmp 0x48637b
push str.beautifytips
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
mov ecx, esi
push eax
call fcn.005396b0
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x486316
xor eax, eax
mov dword [0x6decc0], 0xd
push 0x6557c8
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x48637b
lea ecx, [ebp - 0xac4]
call fcn.004820e9
jmp 0x48637b
push str.mangotv
lea ecx, [ebp - 0xbb4]
call fcn.004045aa
lea eax, [ebp - 0xbb4]
mov ecx, esi
push eax
call fcn.005396b0
lea ecx, [ebp - 0xbb4]
mov bl, al
call fcn.00404838
test bl, bl
je 0x486382
xor eax, eax
mov dword [0x6decc0], 0xe
push str.373B68CD_45C0_48BB_9C6C_F786C966C363
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x48637b
lea ecx, [ebp - 0xac4]
call fcn.004821fd
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xb6c]
call fcn.0040b6ac
lea ecx, [ebp - 0xb0c]
call fcn.0040b6ac
lea ecx, [ebp - 0xb3c]
call fcn.0040b6ac
lea ecx, [ebp - 0xb24]
call fcn.0040b6ac
lea ecx, [ebp - 0xaf4]
call fcn.0040b6ac
lea ecx, [ebp - 0xadc]
call fcn.0040b6ac
lea ecx, [ebp - 0xa94]
call fcn.0040b6ac
lea ecx, [ebp - 0xa7c]
call fcn.0040b6ac
call fcn.004bb5b3
mov ecx, eax
call fcn.004bc46d
test al, al
je 0x4863f6
call fcn.004bb5b3
mov ecx, eax
call fcn.004bc48e
mov ecx, 0x6e4e48
call fcn.00487558
push 0x8f3
push str.WinMain
push str.__s__d___exit__r_n
call fcn.0040a649
add esp, 0xc
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0xac4]
call fcn.0040b6ac
xor eax, eax
lea esp, [ebp - 0x1088]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0059a7a2
leave
ret 0x10