Function at 0x47ca08
Capabilities:
Check if file exists
Check mutex on windows
Create thread
Parse pe header
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e246d
mov eax, dword fs:[0]
push eax
mov eax, 0x106c
call fcn.005918e0
mov eax, dword [0x6c45ac]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
xor eax, eax
mov ebx, dword [ebp + 0x10]
push 0x8007
mov dword [ebp - 0xfe0], esi
mov dword [ebp - 0xff8], ebx
mov dword [ebp - 0xffc], eax
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0x47c2ff
mov dword [0x6cf9f4], esi
call fcn.005acdb8
xor eax, eax
push eax
push eax
call fcn.0052ff40
add esp, 0xc
call fcn.0052f9f0
mov dword [ebp - 0xfcc], eax
test ebx, ebx
je 0x47cace
push ebx
call fcn.005acdf0
pop ecx
lea edi, [eax + 1]
cmp edi, 0x3fffffff
jg 0x47cace
lea eax, [edi + edi]
call fcn.00591f80
mov esi, esp
test esi, esi
je 0x47cace
push edi
push esi
push 0xffffffffffffffff
xor eax, eax
push ebx
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor ecx, ecx
test eax, eax
cmove esi, ecx
jmp 0x47cad0
xor esi, esi
push esi
lea ecx, [ebp - 0xac4]
call fcn.0040b0d5
xor esi, esi
lea ecx, [ebp - 0xac4]
push esi
push str._LaunchUninstallMsgBox
call fcn.0040aff3
cmp eax, 0xffffffff
je 0x47cb1a
push 4
push 0x648030
push str._fTxS
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x47f560
call fcn.00490cd7
jmp 0x47f560
lea eax, [ebp - 0xfe8]
mov dword [ebp - 0xfe8], esi
push eax
mov edi, str.Software360360huabaohuabao
mov ecx, reloc.WS2_32.dll_accept
push str.debug_modle
mov edx, edi
call fcn.00425cda
pop ecx
pop ecx
xor ecx, ecx
inc ecx
test eax, eax
je 0x47cb96
cmp dword [ebp - 0xfe8], ecx
jne 0x47cb96
lea eax, [ebp - 0xfe8]
mov dword [ebp - 0xfe8], esi
push eax
push str.debug_worker
mov edx, edi
mov ecx, reloc.WS2_32.dll_accept
call fcn.00425cda
pop ecx
pop ecx
xor ecx, ecx
inc ecx
test eax, eax
je 0x47cb88
mov eax, dword [0x6cfc00]
cmp dword [ebp - 0xfe8], ecx
cmove eax, ecx
mov dword [0x6cfc00], eax
mov dword [0x6cfc04], ecx
mov dword [0x6cfc08], ecx
jmp 0x47cb9c
mov dword [0x6cfc04], esi
lea eax, [ebp - 0xfe8]
mov dword [ebp - 0xfe8], esi
push eax
push str.debug_log
mov edx, edi
mov ecx, reloc.WS2_32.dll_accept
call fcn.00425cda
pop ecx
test eax, eax
mov eax, dword [0x6cfc08]
pop ecx
je 0x47cbd6
xor ecx, ecx
inc ecx
cmp dword [ebp - 0xfe8], ecx
cmove eax, ecx
mov dword [0x6cfc08], eax
test eax, eax
je 0x47cbf6
push 0x648098
push ebx
call fcn.005aad30
pop ecx
pop ecx
test eax, eax
jne 0x47cbf6
mov ecx, dword [0x6d5afc]
call fcn.00479406
cmp dword [ebp - 0xab0], 8
lea eax, [ebp - 0xac4]
cmovae eax, dword [ebp - 0xac4]
push eax
push 0x5b5
push str.WinMain
push str.__s__d___360huabao_WinMain__cmdline_s__r_n
call fcn.0040a649
add esp, 0x10
call fcn.004c3599
push 5
pop edi
test eax, eax
jne 0x47ce7c
call fcn.00426bb9
cmp eax, edi
je 0x47ce7c
call fcn.004275ab
test eax, eax
je 0x47ce7c
push esi
mov esi, str._low
lea ecx, [ebp - 0xac4]
push esi
call fcn.0040aff3
cmp eax, 0xffffffff
jne 0x47ce7c
push 0
push str.__type
lea ecx, [ebp - 0xac4]
call fcn.0040aff3
cmp eax, 0xffffffff
jne 0x47ce7c
lea ecx, [ebp - 0xa64]
call fcn.004c0e61
push 0x5ba
push str.WinMain
push str.__s__d___ShouldLaunchWithLowPrivelege
call fcn.0040a649
add esp, 0xc
cmp dword [ebp - 0xa54], 0
je 0x47ce66
push 0x629104
call fcn.005b93d0
pop ecx
push eax
push 0x629104
lea ecx, [ebp - 0xa64]
call fcn.0040b220
cmp dword [ebp - 0xa50], 8
lea eax, [ebp - 0xa64]
cmovae eax, dword [ebp - 0xa64]
push eax
push 0x5be
push str.WinMain
push str.__s__d___szExePath___s
call fcn.0040a649
add esp, 0x10
lea eax, [ebp - 0xa64]
cmp dword [ebp - 0xa50], 8
cmovae eax, dword [ebp - 0xa64]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47ce66
cmp dword [ebp - 0xa50], 8
lea eax, [ebp - 0xa64]
cmovae eax, dword [ebp - 0xa64]
push eax
call fcn.004302c4
pop ecx
test eax, eax
je 0x47ce66
cmp dword [ebp - 0xab4], 0
mov eax, str.__low
cmovne esi, eax
push esi
call fcn.005b93d0
pop ecx
push eax
push esi
lea ecx, [ebp - 0xac4]
call fcn.0040b220
and dword [ebp - 0xfd4], 0
lea edx, [ebp - 0xa64]
push 0x629244
lea ecx, [ebp - 0xa34]
call fcn.0041154b
pop ecx
lea ecx, [ebp - 0xac4]
push ecx
mov ecx, eax
call fcn.004114f6
push eax
lea ecx, [ebp - 0xaac]
call fcn.0040b657
xor eax, eax
lea ecx, [ebp - 0xa34]
inc eax
mov dword [ebp - 4], eax
call fcn.0040b67b
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xaac]
cmp dword [ebp - 0xa98], 8
mov esi, str.WinMain
cmovae eax, dword [ebp - 0xaac]
push eax
push 0x5c4
push esi
push str.__s__d___CreateLowerProcess_strcmd__s
call fcn.0040a649
cmp dword [ebp - 0xa98], 8
lea eax, [ebp - 0xfd4]
lea ecx, [ebp - 0xaac]
cmovae ecx, dword [ebp - 0xaac]
push eax
xor eax, eax
push 0
lea edx, [eax + 1]
call fcn.004316f1
add esp, 0x18
test eax, eax
je 0x47ce58
cmp dword [ebp - 0xa98], 8
lea eax, [ebp - 0xaac]
cmovae eax, dword [ebp - 0xaac]
push eax
push 0x5c6
push esi
push str.__s__d___ShouldLaunchWithLowPrivelege_szCommandLine___s
call fcn.0040a649
add esp, 0x10
lea ecx, [ebp - 0xaac]
mov dword [ebp - 4], 2
call fcn.0040b67b
lea ecx, [ebp - 0xa64]
mov dword [ebp - 4], 3
call fcn.0040b67b
jmp 0x47f560
lea ecx, [ebp - 0xaac]
mov dword [ebp - 4], edi
call fcn.0040b67b
lea ecx, [ebp - 0xa64]
mov dword [ebp - 4], 6
call fcn.0040b67b
or dword [ebp - 4], 0xffffffff
mov esi, dword [ebp - 0xfe0]
mov edx, fcn.004302c4
mov ecx, esi
call fcn.00430747
call fcn.0041ee32
mov ecx, eax
call fcn.0041ee68
call fcn.0040ba6a
mov ecx, eax
call fcn.0040babd
xor eax, eax
mov ecx, 0x6d5d88
push eax
push esi
push eax
call fcn.00480730
call fcn.0043101a
mov edx, fcn.0042667b
mov ecx, esi
call fcn.00430747
lea eax, [ebp - 0x100c]
xor esi, esi
push eax
push str.enable
mov edx, str.Software360360huabaohuabao
mov dword [ebp - 0x100c], esi
mov ecx, reloc.WS2_32.dll_accept
call fcn.00425cda
pop ecx
pop ecx
call fcn.004c3599
test eax, eax
je 0x47cf2c
xor eax, eax
inc eax
cmp dword [ebp - 0x100c], eax
je 0x47cf2c
push 0x648098
push ebx
call fcn.005aad30
pop ecx
pop ecx
test eax, eax
jne 0x47cf2c
push 0x5db
push str.WinMain
push str.__s__d___huabao_enable_close
call fcn.0040a649
add esp, 0xc
jmp 0x47f51d
push esi
push 0x645e34
lea ecx, [ebp - 0xac4]
call fcn.0040aff3
cmp eax, 0xffffffff
je 0x47cf76
call fcn.004c3599
test eax, eax
jne 0x47cf76
call fcn.00479d08
test al, al
je 0x47cf76
push 0x648098
push ebx
call fcn.005aad30
pop ecx
pop ecx
test eax, eax
jne 0x47cf76
push 0x5e0
push str.WinMain
push str.__s__d___360ScreenSaver_exist
jmp 0x47cf1f
call fcn.004794c2
test eax, eax
jne 0x47cf97
push 0x40
push 0x626fac
push 0x626fb8
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x47f51d
push 0x628d24
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fcb0
mov esi, eax
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 7
call fcn.00404812
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4c]
test esi, esi
je 0x47d071
push str.crashcfg
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xaac]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fd40
push 8
pop ebx
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], ebx
call fcn.00404812
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xa9c], 0
je 0x47d056
cmp dword [ebp - 0xa98], ebx
lea eax, [ebp - 0xaac]
push 0
cmovae eax, dword [ebp - 0xaac]
mov ecx, 0x6da230
push eax
push esi
call fcn.004ad5eb
cmp dword [0x6cf9d4], 0
jne 0x47d056
mov ecx, 0x6da1b0
call fcn.004acca8
mov dword [ebp - 4], 9
lea ecx, [ebp - 0xaac]
call fcn.0040b67b
or dword [ebp - 4], 0xffffffff
jmp 0x47f51d
push ebx
call fcn.004045aa
lea ecx, [ebp - 0xa4c]
call fcn.00420ad9
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0xb
call fcn.00404812
or esi, 0xffffffff
mov dword [ebp - 4], esi
call fcn.00412555
mov ecx, str.360huabao
call fcn.0041256c
call fcn.0047c9bb
and dword [ebp - 0x1000], 0
xor eax, eax
inc eax
mov edx, str.Software360360huabaohuabao
mov byte [ebp - 0xfd5], al
mov ecx, reloc.WS2_32.dll_accept
lea eax, [ebp - 0x1000]
push eax
push str.multienable
call fcn.00425cda
pop ecx
pop ecx
push str.desk
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fea0
mov byte [ebp - 0xfed], al
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0xc
call fcn.00404812
push str.window
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fea0
mov byte [ebp - 0xfcd], al
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0xd
call fcn.00404812
cmp byte [ebp - 0xfcd], 0
push 6
pop eax
mov dword [ebp - 4], esi
mov ecx, dword [0x6cfc0c]
cmovne ecx, eax
push 0x648098
push ebx
mov dword [0x6cfc0c], ecx
call fcn.005aad30
mov bl, byte [ebp - 0xfcd]
pop ecx
pop ecx
test eax, eax
jne 0x47d18b
test bl, bl
je 0x47d197
call fcn.004450bd
mov ecx, eax
call fcn.0044519f
xor ecx, ecx
xor eax, eax
inc ecx
movzx eax, al
cmp dword [ebp - 0x1000], ecx
push 0x648334
cmove eax, ecx
mov dword [ebp - 0xfe0], eax
movzx eax, cl
xor ecx, ecx
test bl, bl
cmovne eax, ecx
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 0xfd4], eax
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fea0
mov bl, al
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0xe
call fcn.00404812
mov dword [ebp - 4], esi
test bl, bl
je 0x47d20e
call fcn.004450bd
mov ecx, eax
call fcn.0044519f
xor ebx, ebx
mov al, bl
jmp 0x47d216
mov eax, dword [ebp - 0xfd4]
xor ebx, ebx
test al, al
je 0x47d260
mov cl, byte [ebp - 0xfe0]
call fcn.00479b6c
test eax, eax
jne 0x47d249
mov byte [ebp - 0xfd5], bl
call fcn.00479b44
test eax, eax
je 0x47d260
push 0x62a
push str.WinMain
push str.__s__d___set_high_dpi_ok__r_n
jmp 0x47d258
push 0x62f
push str.WinMain
push str.__s__d___set_SetMytProcessDpiAwareness_ok__r_n
call fcn.0040a649
add esp, 0xc
push 0x6483cc
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fea0
mov bl, al
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0xf
call fcn.00404812
mov dword [ebp - 4], esi
test bl, bl
je 0x47d2a8
call fcn.0047984f
jmp 0x47f51d
push 0x648098
push dword [ebp - 0xff8]
call fcn.005aad30
pop ecx
pop ecx
test eax, eax
je 0x47d46b
push 0x208
xor ebx, ebx
lea eax, [ebp - 0x424]
push ebx
push eax
call fcn.005a88e0
cmp dword [ebp - 0xab0], 8
lea eax, [ebp - 0x424]
lea ecx, [ebp - 0xac4]
mov edx, 0x6483d0
cmovae ecx, dword [ebp - 0xac4]
push 0x103
push eax
call fcn.00427954
add esp, 0x14
mov edi, str.chrome_child.dll
sub esp, 0x18
mov ecx, esp
push edi
test eax, eax
je 0x47d3b6
call fcn.0040b0d5
sub esp, 0x18
lea eax, [ebp - 0x424]
mov ecx, esp
push eax
call fcn.0040b0d5
lea ecx, [ebp - 0xa34]
call fcn.004c176f
add esp, 0x30
cmp dword [eax + 0x14], 8
jb 0x47d342
mov eax, dword [eax]
push eax
call fcn.004302c4
pop ecx
mov esi, eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x10
call fcn.0040b67b
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x47f51d
push 8
push ebx
sub esp, 0x18
mov ecx, esp
push edi
call fcn.0040b0d5
sub esp, 0x18
lea eax, [ebp - 0x424]
mov ecx, esp
push eax
call fcn.0040b0d5
lea ecx, [ebp - 0xa34]
call fcn.004c176f
add esp, 0x30
cmp dword [eax + 0x14], 8
jb 0x47d39e
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov esi, eax
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0xa34]
jmp 0x47d432
call fcn.0040b0d5
lea ecx, [ebp - 0xa34]
call fcn.004c1243
add esp, 0x18
cmp dword [eax + 0x14], 8
jb 0x47d3d1
mov eax, dword [eax]
push eax
call fcn.004302c4
pop ecx
mov esi, eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x12
call fcn.0040b67b
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x47f51d
push 8
push ebx
sub esp, 0x18
mov ecx, esp
push edi
call fcn.0040b0d5
lea ecx, [ebp - 0xb84]
call fcn.004c1243
add esp, 0x18
cmp dword [eax + 0x14], 8
jb 0x47d41c
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov esi, eax
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0xb84]
call fcn.0040b67b
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x47f51d
push str.ChromeShell
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x47f51d
push 0x6d5dc8
push dword [0x6cf9f4]
call eax
pop ecx
pop ecx
jmp 0x47f51d
push 0x636f80
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fcb0
mov dword [ebp - 0xfd4], eax
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x14
call fcn.00404812
push 0x64840c
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fcb0
mov dword [ebp - 0xfec], eax
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x15
call fcn.00404812
push str.from
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa7c]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fd40
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x16
call fcn.00404812
push 0x648410
lea ecx, [ebp - 0xa7c]
mov dword [ebp - 4], esi
call fcn.0041084a
push 4
pop ebx
test al, al
je 0x47d549
mov dword [ebp - 0xfe4], 2
jmp 0x47d59b
push 0x64841c
lea ecx, [ebp - 0xa7c]
call fcn.0041084a
test al, al
je 0x47d569
mov dword [ebp - 0xfe4], 3
jmp 0x47d59b
push str.unistpic
lea ecx, [ebp - 0xa7c]
call fcn.0041084a
test al, al
jne 0x47d595
push str.wscore
lea ecx, [ebp - 0xa7c]
call fcn.0041084a
xor ebx, ebx
inc ebx
test al, al
cmovne ebx, edi
mov dword [ebp - 0xfe4], ebx
push 0x648438
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa94]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fd40
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x17
call fcn.00404812
mov dword [ebp - 4], esi
call fcn.004c3599
test eax, eax
je 0x47d636
call fcn.004156ea
mov ebx, eax
push ebx
push 0x67c
push str.WinMain
push str.__s__d___GetSysScreenOwnerStatus_sys_owner___d__r_n
call fcn.0040a649
add esp, 0x10
push 2
pop eax
cmp ebx, eax
jne 0x47d615
mov dword [ebp - 0xfe4], 3
jmp 0x47d636
cmp ebx, 3
jne 0x47d622
mov dword [ebp - 0xfe4], eax
jmp 0x47d636
xor eax, eax
cmp ebx, 4
lea esi, [eax + 1]
cmove esi, edi
mov dword [ebp - 0xfe4], esi
or esi, 0xffffffff
push 0x6484a8
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fea0
mov bl, al
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x18
call fcn.00404812
mov dword [ebp - 4], esi
test bl, bl
je 0x47d88d
call fcn.004c3599
neg eax
sbb eax, eax
xor ebx, ebx
add eax, 2
mov dword [ebp - 0xa58], ebx
mov dword [0x6cfc0c], eax
lea eax, [ebp - 0xa58]
push ebx
push eax
mov dword [ebp - 0xa54], ebx
mov dword [ebp - 0xa50], ebx
call fcn.00424396
mov ecx, eax
call fcn.00424240
push dword [ebp - 0x1000]
call fcn.00426bb9
push eax
lea ecx, [ebp - 0xa58]
call fcn.00424788
push eax
push 0x693
push str.WinMain
push str.__s__d___screens_size___d__osversion___d_multienable___d__r_n
call fcn.0040a649
add esp, 0x18
lea ecx, [ebp - 0xa58]
call fcn.00424788
cmp eax, 1
jbe 0x47dbc5
call fcn.00426bb9
cmp eax, edi
je 0x47dbc5
xor eax, eax
inc eax
cmp dword [ebp - 0x1000], eax
jne 0x47dbc5
call fcn.004c3599
test eax, eax
jne 0x47dbc5
lea eax, [ebp - 0x1004]
push eax
lea ecx, [ebp - 0xa58]
call fcn.00480492
lea ecx, [ebp - 0xa58]
mov esi, dword [eax]
lea eax, [ebp - 0x1004]
push eax
mov dword [ebp - 0xff4], esi
call fcn.004804a1
mov eax, dword [eax]
mov dword [ebp - 0xfe0], eax
cmp eax, esi
je 0x47d875
mov esi, eax
lea edi, [ebp - 0x1078]
xor eax, eax
xor ebx, ebx
push 0x1b
pop ecx
inc eax
rep movsd dword es:[edi], dword [esi]
cmp dword [ebp - 0x1054], eax
push 0x802
setne bl
xor eax, eax
push eax
lea eax, [ebp - 0xa1c]
inc ebx
push eax
call fcn.005a88e0
mov edi, dword [ebp - 0x106c]
add esp, 0xc
mov eax, dword [ebp - 0x1068]
sub eax, dword [ebp - 0x1070]
sub edi, dword [ebp - 0x1074]
cmp byte [ebp - 0xfd5], 0
mov dword [ebp - 0x1008], eax
je 0x47d7bb
mov ecx, dword [ebp - 0x1010]
jmp 0x47d7eb
xor eax, eax
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
push 0x58
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov dword [ebp - 0xfdc], eax
xor eax, eax
push esi
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [ebp - 0x1008]
mov ecx, dword [ebp - 0xfdc]
push dword [ebp - 0xfec]
push dword [ebp - 0xfd4]
push ecx
push eax
push edi
push dword [ebp - 0x1070]
lea eax, [ebp - 0xa1c]
push dword [ebp - 0x1074]
push ebx
push str._m:_d__x:_d__y:_d__w:_d__h:_d__d:_d__v:_d__f:_d
push 0x801
push eax
call fcn.00412a05
add esp, 0x2c
lea eax, [ebp - 0xa1c]
lea ecx, [ebp - 0xa4c]
push eax
call fcn.0040b0d5
lea ecx, [ebp - 0xa4c]
call fcn.004c51cf
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x19
call fcn.0040b67b
or esi, 0xffffffff
mov dword [ebp - 4], esi
mov eax, dword [ebp - 0xfe0]
add eax, 0x6c
mov dword [ebp - 0xfe0], eax
cmp eax, dword [ebp - 0xff4]
jne 0x47d759
push 5
pop edi
jmp 0x47d878
or esi, 0xffffffff
lea ecx, [ebp - 0xa58]
mov dword [ebp - 4], 0x26
call fcn.00456aae
mov dword [ebp - 4], esi
push 0x648684
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fea0
mov bl, al
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x27
call fcn.00404812
mov dword [ebp - 4], esi
test bl, bl
je 0x47e149
push 0x648684
lea ecx, [ebp - 0xa34]
mov dword [0x6cfc0c], 7
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fcb0
mov ebx, eax
mov dword [ebp - 0xfdc], ebx
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x28
call fcn.00404812
push 0x632c80
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fcb0
mov dword [ebp - 0xfcc], eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x29
call fcn.00404812
push 0x632c84
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fcb0
mov dword [ebp - 0x1004], eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x2a
call fcn.00404812
push 0x632fe4
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fcb0
mov dword [ebp - 0xfe0], eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x2b
call fcn.00404812
push 0x632fe8
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fcb0
mov dword [ebp - 0xfd4], eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x2c
call fcn.00404812
push 0x648688
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fcb0
mov dword [ebp - 0xff8], eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x2d
call fcn.00404812
push 0x636f80
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fcb0
mov dword [ebp - 0x1008], eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x2e
call fcn.00404812
push 0x6284b4
lea ecx, [ebp - 0xaac]
mov dword [ebp - 4], esi
call fcn.0040b0d5
xor eax, eax
inc eax
cmp ebx, eax
jne 0x47e035
mov esi, str.29E906C9_5160_4872_BFD0_53BD7D55FDED
push esi
call fcn.005b93d0
pop ecx
push eax
push esi
lea ecx, [ebp - 0xaac]
call fcn.0040b566
xor ebx, ebx
lea ecx, [ebp - 0xb84]
mov edi, ebx
call fcn.004ca953
sub esp, 0x18
mov ecx, esp
push str.installer360ini.dll
call fcn.0040b0d5
lea ecx, [ebp - 0xb54]
call fcn.004c1243
add esp, 0x18
push 8
pop esi
cmp dword [eax + 0x14], esi
jb 0x47daf7
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xa34]
call fcn.0040b0d5
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x2f
call fcn.0040b67b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb9c]
call fcn.0040b106
lea ecx, [ebp - 0xa4c]
call fcn.0040b106
lea edx, [ebp - 0xb9c]
lea ecx, [ebp - 0xb84]
call fcn.00426e07
lea edx, [ebp - 0xa4c]
lea ecx, [ebp - 0xa34]
call fcn.00426e07
call fcn.004ca472
test eax, eax
jne 0x47df15
lea ecx, [ebp - 0xb54]
call fcn.004ca953
cmp dword [eax + 0x14], esi
jb 0x47db70
mov eax, dword [eax]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47dbb8
cmp dword [ebp - 0xa38], esi
lea edx, [ebp - 0xa4c]
lea ecx, [ebp - 0xb9c]
mov dword [ebp - 0xffc], 2
cmovae edx, dword [ebp - 0xa4c]
cmp dword [ebp - 0xb88], esi
cmovae ecx, dword [ebp - 0xb9c]
call fcn.004270e1
test eax, eax
jns 0x47df15
xor eax, eax
push 2
lea ebx, [eax + 1]
pop eax
jmp 0x47df1b
push str.611264CE_A4A2_4614_BE47_6B92329E4304
lea ecx, [ebp - 0xa4c]
call fcn.0040b0d5
call fcn.004c3599
test eax, eax
je 0x47dbfa
mov esi, str.C4146CDC_5193_4516_AE53_A239D2DFA5E5
push esi
call fcn.005b93d0
pop ecx
push eax
push esi
lea ecx, [ebp - 0xa4c]
call fcn.0040b566
or esi, 0xffffffff
cmp dword [ebp - 0xa38], 8
lea eax, [ebp - 0xa4c]
cmovae eax, dword [ebp - 0xa4c]
push eax
xor eax, eax
inc eax
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov ebx, eax
xor eax, eax
mov dword [ebp - 0xfdc], ebx
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47de9a
call fcn.004c3599
test eax, eax
jne 0x47de58
lea ecx, [ebp - 0xa34]
call fcn.004ca953
sub esp, 0x18
mov ecx, esp
push str.installer360ini.dll
call fcn.0040b0d5
lea ecx, [ebp - 0xb54]
call fcn.004c1243
add esp, 0x18
push 8
pop ebx
cmp dword [eax + 0x14], ebx
jb 0x47dc76
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xb84]
call fcn.0040b0d5
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x1a
call fcn.0040b67b
lea ecx, [ebp - 0xb9c]
mov dword [ebp - 4], esi
call fcn.0040b106
lea ecx, [ebp - 0xaac]
call fcn.0040b106
lea edx, [ebp - 0xb9c]
lea ecx, [ebp - 0xa34]
call fcn.00426e07
lea edx, [ebp - 0xaac]
lea ecx, [ebp - 0xb84]
call fcn.00426e07
call fcn.004ca472
test eax, eax
jne 0x47dd34
lea ecx, [ebp - 0xb54]
call fcn.004ca953
cmp dword [eax + 0x14], ebx
jb 0x47dcea
mov eax, dword [eax]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47dd2d
cmp dword [ebp - 0xa98], ebx
lea edx, [ebp - 0xaac]
lea ecx, [ebp - 0xb9c]
cmovae edx, dword [ebp - 0xaac]
cmp dword [ebp - 0xb88], ebx
cmovae ecx, dword [ebp - 0xb9c]
xor eax, eax
inc eax
mov dword [ebp - 0xffc], eax
call fcn.004270e1
test eax, eax
jns 0x47dd34
xor eax, eax
inc eax
mov bl, al
jmp 0x47dd3e
xor eax, eax
mov bl, al
mov eax, dword [ebp - 0xffc]
test al, 1
je 0x47dd57
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x1b
call fcn.0040b67b
mov dword [ebp - 4], esi
test bl, bl
je 0x47ddf0
xor ebx, ebx
lea ecx, [ebp - 0xb54]
mov dword [ebp - 0xff4], ebx
call fcn.004ca953
cmp dword [eax + 0x14], 8
jb 0x47dd7a
mov eax, dword [eax]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov esi, eax
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x1c
call fcn.0040b67b
or dword [ebp - 4], 0xffffffff
test esi, esi
jne 0x47ddce
push 0x6d3
push str.WinMain
push str.__s__d___start_thread_copy
call fcn.0040a649
add esp, 0xc
lea eax, [ebp - 0xff4]
push eax
push ebx
push ebx
push fcn.00479520
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edi, eax
jmp 0x47ddeb
push 0x6d7
push str.WinMain
push str.__s__d___start_oncall_copy
call fcn.0040a649
add esp, 0xc
push ebx
call fcn.00479520
or esi, 0xffffffff
jmp 0x47de07
push 0x6dc
push str.WinMain
push str.__s__d___Is360SafeRegExist_is_true
call fcn.0040a649
add esp, 0xc
lea ecx, [ebp - 0xaac]
mov dword [ebp - 4], 0x1d
call fcn.0040b67b
lea ecx, [ebp - 0xb9c]
mov dword [ebp - 4], 0x1e
call fcn.0040b67b
lea ecx, [ebp - 0xb84]
mov dword [ebp - 4], 0x1f
call fcn.0040b67b
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x20
call fcn.0040b67b
mov ebx, dword [ebp - 0xfdc]
mov dword [ebp - 4], esi
xor edx, edx
xor ecx, ecx
inc edx
movzx eax, cl
cmp dword [ebp - 0xfec], edx
push ecx
cmove eax, edx
mov edx, dword [ebp - 0xfe4]
mov byte [ebp - 0xfdc], al
lea eax, [ebp - 0xac4]
push eax
lea eax, [ebp - 0xa94]
push eax
push dword [ebp - 0xfdc]
push dword [ebp - 0xfd4]
call fcn.0047968e
add esp, 0x14
jmp 0x47deb1
push 0x6e7
push str.WinMain
push str.__s__d___360huabao_EXISTS__r_n
call fcn.0040a649
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
test edi, edi
je 0x47decd
push 0x1388
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push edi
call esi
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x21
call fcn.0040b67b
lea ecx, [ebp - 0xa58]
mov dword [ebp - 4], 0x22
call fcn.00456aae
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x23
call fcn.0040b67b
mov dword [ebp - 4], 0x24
lea ecx, [ebp - 0xa7c]
jmp 0x47d063
mov eax, dword [ebp - 0xffc]
test al, 2
je 0x47df35
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x30
call fcn.0040b67b
or dword [ebp - 4], 0xffffffff
test bl, bl
je 0x47dfca
xor ebx, ebx
lea ecx, [ebp - 0xb54]
mov dword [ebp - 0xff4], ebx
call fcn.004ca953
cmp dword [eax + 0x14], esi
jb 0x47df57
mov eax, dword [eax]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov esi, eax
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x31
call fcn.0040b67b
or dword [ebp - 4], 0xffffffff
test esi, esi
jne 0x47dfab
push 0x71b
push str.WinMain
push str.__s__d___start_thread_copy
call fcn.0040a649
add esp, 0xc
lea eax, [ebp - 0xff4]
push eax
push ebx
push ebx
push fcn.00479520
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edi, eax
jmp 0x47dfe1
push 0x71f
push str.WinMain
push str.__s__d___start_oncall_copy
call fcn.0040a649
add esp, 0xc
push ebx
call fcn.00479520
jmp 0x47dfe1
push 0x723
push str.WinMain
push str.__s__d___Is360SafeRegExist_is_true
call fcn.0040a649
add esp, 0xc
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x32
call fcn.0040b67b
lea ecx, [ebp - 0xb9c]
mov dword [ebp - 4], 0x33
call fcn.0040b67b
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x34
call fcn.0040b67b
lea ecx, [ebp - 0xb84]
mov dword [ebp - 4], 0x35
call fcn.0040b67b
or dword [ebp - 4], 0xffffffff
mov ebx, dword [ebp - 0xfdc]
jmp 0x47e052
mov esi, str.54FB661F_9BFB_43CA_A865_9C7B26F168E1
push esi
call fcn.005b93d0
pop ecx
push eax
push esi
lea ecx, [ebp - 0xaac]
call fcn.0040b566
xor eax, eax
mov edi, eax
cmp dword [ebp - 0xa98], 8
lea eax, [ebp - 0xaac]
cmovae eax, dword [ebp - 0xaac]
push eax
xor eax, eax
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47e0e6
xor eax, eax
xor edx, edx
push eax
inc edx
movzx ecx, al
cmp dword [ebp - 0xfec], edx
lea eax, [ebp - 0xac4]
push eax
cmove ecx, edx
lea eax, [ebp - 0xa94]
mov edx, dword [ebp - 0xfe4]
push eax
mov byte [ebp - 0xfdc], cl
xor ecx, ecx
push dword [ebp - 0xfdc]
push dword [ebp - 0x1008]
push dword [ebp - 0xff8]
push ebx
push dword [ebp - 0xfd4]
push dword [ebp - 0xfe0]
push dword [ebp - 0x1004]
push dword [ebp - 0xfcc]
call fcn.00479977
add esp, 0x2c
jmp 0x47e0fd
push 0x732
push str.WinMain
push str.__s__d___360huabao.exe_EXISTS__r_n
call fcn.0040a649
add esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
test edi, edi
je 0x47e119
push 0x1388
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push edi
call esi
lea ecx, [ebp - 0xaac]
mov dword [ebp - 4], 0x36
call fcn.0040b67b
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x37
call fcn.0040b67b
mov dword [ebp - 4], 0x38
jmp 0x47df0a
push 0x208
xor ebx, ebx
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.005a88e0
cmp dword [ebp - 0xab0], 8
lea eax, [ebp - 0x218]
lea ecx, [ebp - 0xac4]
mov edx, 0x648774
cmovae ecx, dword [ebp - 0xac4]
push 0x103
push eax
call fcn.00427954
add esp, 0x14
test eax, eax
je 0x47e1fe
lea eax, [ebp - 0xfd4]
mov dword [ebp - 0xfd4], ebx
push eax
lea eax, [ebp - 0x218]
push str.0x_x
push eax
call fcn.00466bab
add esp, 0xc
xor eax, eax
inc eax
push str.35352ae8_24e5_41ec_91c2_40993f337b23
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47e1d9
mov ecx, dword [ebp - 0xfd4]
call fcn.00479c23
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x3a
call fcn.0040b67b
mov dword [ebp - 4], 0x3b
jmp 0x47df0a
push str.cfex
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fea0
mov bl, al
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x3c
call fcn.00404812
mov dword [ebp - 4], esi
test bl, bl
je 0x47e2a0
push 0x751
push str.WinMain
push str.__s__d___huabao_set_config
call fcn.0040a649
add esp, 0xc
xor ebx, ebx
inc ebx
xor eax, eax
push str.3F0D9BF9_9C7B_43AB_A362_7387A35AFB43
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47e27b
mov ecx, ebx
call fcn.0047bf94
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x3d
call fcn.0040b67b
mov dword [ebp - 4], 0x3e
jmp 0x47df0a
push str.likeex
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fea0
mov bl, al
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x3f
call fcn.00404812
mov dword [ebp - 4], esi
test bl, bl
je 0x47e343
push 0x75e
push str.WinMain
push str.__s__d___huabao_set_likeex
call fcn.0040a649
add esp, 0xc
xor eax, eax
inc eax
push str.47962739_A6D5_4DAF_9E4E_14767F9FADDB
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47e31e
push 2
pop ecx
call fcn.0047bf94
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x40
call fcn.0040b67b
mov dword [ebp - 4], 0x41
jmp 0x47df0a
push 0x6488f4
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fcb0
mov esi, eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x42
call fcn.00404812
or dword [ebp - 4], 0xffffffff
xor ebx, ebx
inc ebx
cmp esi, ebx
jl 0x47e40e
xor ebx, ebx
lea eax, [ebp - 0xa58]
push ebx
push eax
mov dword [ebp - 0xa58], ebx
mov dword [ebp - 0xa54], ebx
mov dword [ebp - 0xa50], ebx
call fcn.00424396
mov ecx, eax
call fcn.00424240
xor eax, eax
push str.8BAACDBA_5AF1_427B_BE5F_2B8AA1A7E05D
inc eax
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47e3d7
mov ecx, esi
call fcn.0047affe
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa58]
mov dword [ebp - 4], 0x43
call fcn.00456aae
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x44
call fcn.0040b67b
mov dword [ebp - 4], 0x45
jmp 0x47df0a
push 0x648944
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fcb0
mov esi, eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x47
call fcn.00404812
or dword [ebp - 4], 0xffffffff
cmp esi, ebx
jne 0x47e4d9
xor ebx, ebx
lea eax, [ebp - 0xa58]
push ebx
push eax
mov dword [ebp - 0xa58], ebx
mov dword [ebp - 0xa54], ebx
mov dword [ebp - 0xa50], ebx
call fcn.00424396
mov ecx, eax
call fcn.00424240
xor eax, eax
push 0x648948
inc eax
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47e4a2
xor eax, eax
lea ecx, [eax + 1]
call fcn.0047b10b
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa58]
mov dword [ebp - 4], 0x48
call fcn.00456aae
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x49
call fcn.0040b67b
mov dword [ebp - 4], 0x4a
jmp 0x47df0a
push 0x648998
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fea0
mov bl, al
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x4c
call fcn.00404812
or dword [ebp - 4], 0xffffffff
test bl, bl
je 0x47e563
xor eax, eax
push str.2BE7F418_3A70_4576_9C4A_A27A49A57651
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47e53e
call fcn.00479d2b
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x4d
call fcn.0040b67b
mov dword [ebp - 4], 0x4e
jmp 0x47df0a
push str.promote_install
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xadc]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fd40
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x4f
call fcn.00404812
or ebx, 0xffffffff
mov dword [ebp - 4], ebx
cmp dword [ebp - 0xacc], 0
je 0x47e650
xor eax, eax
push str.ce3ceb90_e1d7_4acb_8abf_7d4ea32774c6
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47e60b
sub esp, 0x18
lea eax, [ebp - 0xadc]
mov ecx, esp
push eax
call fcn.0040b119
lea ecx, [ebp - 0xb54]
call fcn.00430a1c
add esp, 0x18
mov ecx, eax
call fcn.0047f772
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x50
call fcn.00404812
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xadc]
mov dword [ebp - 4], 0x51
call fcn.0040b67b
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x52
call fcn.0040b67b
mov dword [ebp - 4], 0x53
lea ecx, [ebp - 0xa7c]
call fcn.0040b67b
mov dword [ebp - 4], ebx
jmp 0x47f51d
push str.promote_installex
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xaf4]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fd40
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x54
call fcn.00404812
mov dword [ebp - 4], ebx
cmp dword [ebp - 0xae4], 0
je 0x47e745
xor eax, eax
push str.d5ad00fa_a4f2_478a_be07_2ef43d47b11b
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47e6fc
push str._promote_install:
lea ecx, [ebp - 0xa4c]
call fcn.0040b0d5
lea eax, [ebp - 0xaf4]
push eax
lea ecx, [ebp - 0xa4c]
call fcn.004114f6
lea ecx, [ebp - 0xa4c]
call fcn.0047b778
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x55
call fcn.0040b67b
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xaf4]
mov dword [ebp - 4], 0x56
call fcn.0040b67b
lea ecx, [ebp - 0xadc]
mov dword [ebp - 4], 0x57
call fcn.0040b67b
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x58
call fcn.0040b67b
mov dword [ebp - 4], 0x59
jmp 0x47e63d
push str.promote_se_install
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xb24]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fd40
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x5a
call fcn.00404812
mov dword [ebp - 4], ebx
cmp dword [ebp - 0xb14], 0
je 0x47e845
xor eax, eax
push str.89E27CD3_540E_4749_AABC_E48273F74AC0
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47e7ea
sub esp, 0x18
lea eax, [ebp - 0xb24]
mov ecx, esp
push eax
call fcn.0040b119
lea ecx, [ebp - 0xb54]
call fcn.00430a1c
add esp, 0x18
mov ecx, eax
call fcn.004800ea
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x5b
call fcn.00404812
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xb24]
mov dword [ebp - 4], 0x5c
call fcn.0040b67b
lea ecx, [ebp - 0xaf4]
mov dword [ebp - 4], 0x5d
call fcn.0040b67b
lea ecx, [ebp - 0xadc]
mov dword [ebp - 4], 0x5e
call fcn.0040b67b
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x5f
call fcn.0040b67b
mov dword [ebp - 4], 0x60
jmp 0x47e63d
push str.promote_se_installex
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xb3c]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fd40
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x61
call fcn.00404812
mov dword [ebp - 4], ebx
cmp dword [ebp - 0xb2c], 0
je 0x47e95e
xor eax, eax
push str.E11E3E91_60B6_4FC7_A6CF_0DBBB53624ED
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47e8f1
push str._promote_se_install:
lea ecx, [ebp - 0xa4c]
call fcn.0040b0d5
lea eax, [ebp - 0xb3c]
push eax
lea ecx, [ebp - 0xa4c]
call fcn.004114f6
lea ecx, [ebp - 0xa4c]
call fcn.0047b778
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x62
call fcn.0040b67b
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xb3c]
mov dword [ebp - 4], 0x63
call fcn.0040b67b
lea ecx, [ebp - 0xb24]
mov dword [ebp - 4], 0x64
call fcn.0040b67b
lea ecx, [ebp - 0xaf4]
mov dword [ebp - 4], 0x65
call fcn.0040b67b
lea ecx, [ebp - 0xadc]
mov dword [ebp - 4], 0x66
call fcn.0040b67b
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x67
call fcn.0040b67b
mov dword [ebp - 4], 0x68
jmp 0x47e63d
push str.efrom
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xb0c]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fd40
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x69
call fcn.00404812
push 0x628d2c
lea ecx, [ebp - 0xb0c]
mov dword [ebp - 4], ebx
call fcn.0041084a
test al, al
je 0x47e9b5
push 2
jmp 0x47e9cb
push 0x63a8c4
lea ecx, [ebp - 0xb0c]
call fcn.0041084a
test al, al
je 0x47e9ce
push 3
pop esi
jmp 0x47e9eb
push 0x641b60
lea ecx, [ebp - 0xb0c]
call fcn.0041084a
xor ecx, ecx
test al, al
push 4
pop eax
lea esi, [ecx + 1]
cmovne esi, eax
push 0x648bd0
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fcb0
cdq
mov ebx, eax
mov dword [ebp - 0xfec], edx
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x6a
call fcn.00404812
push dword [ebp - 0xfec]
or dword [ebp - 4], 0xffffffff
push ebx
push 0x7d1
push str.WinMain
push str.__s__d___do_check_dwHuabaoExitPop_dwHuabaoExitPop___lld
call fcn.0040a649
xor eax, eax
add esp, 0x14
cmp dword [ebp - 0xfec], eax
jl 0x47eb11
jg 0x47ea63
cmp ebx, eax
jbe 0x47eb11
xor ecx, ecx
push str.69DB7A97_6264_4B51_AF76_B9DE677D3EDD
inc ecx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47ea92
push dword [ebp - 0xfec]
mov ecx, esi
push ebx
call fcn.0047be2c
pop ecx
pop ecx
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xb0c]
mov dword [ebp - 4], 0x6b
call fcn.0040b67b
lea ecx, [ebp - 0xb3c]
mov dword [ebp - 4], 0x6c
call fcn.0040b67b
lea ecx, [ebp - 0xb24]
mov dword [ebp - 4], 0x6d
call fcn.0040b67b
lea ecx, [ebp - 0xaf4]
mov dword [ebp - 4], 0x6e
call fcn.0040b67b
lea ecx, [ebp - 0xadc]
mov dword [ebp - 4], 0x6f
call fcn.0040b67b
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x70
call fcn.0040b67b
mov dword [ebp - 4], 0x71
jmp 0x47df0a
push str.hepex
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fcb0
cdq
mov esi, eax
mov ebx, edx
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x72
call fcn.00404812
lea ecx, [ebp - 0xb0c]
mov dword [ebp - 4], 0x73
call fcn.0040b5da
or dword [ebp - 4], 0xffffffff
push eax
push ebx
push esi
push 0x7de
push str.WinMain
push str.__s__d___do_check_dwHuabaoExitPop_dwHuabaoExitPop___lld_szeForm___s
call fcn.0040a649
xor eax, eax
add esp, 0x18
cmp ebx, eax
jl 0x47ebcd
jg 0x47eb87
cmp esi, eax
jbe 0x47ebcd
xor ecx, ecx
push str.C0D8BF95_3EF4_41F5_9D68_9BE6AC67D9E3
inc ecx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47ebc1
sub esp, 0x18
lea eax, [ebp - 0xb0c]
mov ecx, esp
push eax
call fcn.0040b119
push ebx
push esi
call fcn.0047b4cc
add esp, 0x20
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x47f4d0
push 0x648d84
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fea0
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x47ec34
xor eax, eax
mov dword [0x6cfc0c], 9
push str.E5889496_4D98_428C_BBBB_8DEAE5704875
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47ec31
call fcn.00479e3b
push esi
jmp 0x47ebc2
push str.exman
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fea0
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x47ec9a
xor eax, eax
mov dword [0x6cfc0c], 8
push str.4C152FB3_9518_46E4_8CB8_DF391FCBE156
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47ec31
call fcn.0047a06c
jmp 0x47ec31
push 0x648e2c
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fea0
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x47ed9f
xor eax, eax
mov dword [0x6cfc0c], edi
push 0x648e30
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47ec31
push str.data
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xb84]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fd40
lea ecx, [ebp - 0xa34]
call fcn.00404838
push 0x61ce3e
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
sub esp, 0x18
lea eax, [ebp - 0xb84]
mov ecx, esp
push eax
call fcn.0040b119
lea ecx, [ebp - 0xb54]
call fcn.00430a1c
add esp, 0x18
lea edx, [ebp - 0xa4c]
mov ecx, eax
call fcn.00416758
lea ecx, [ebp - 0xb54]
call fcn.00404838
lea ecx, [ebp - 0xa4c]
call fcn.00479f4b
lea ecx, [ebp - 0xa4c]
call fcn.00404838
lea ecx, [ebp - 0xb84]
call fcn.0040b6a9
jmp 0x47ec31
mov ebx, 0x648334
lea ecx, [ebp - 0xa34]
push ebx
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xb6c]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fd40
lea ecx, [ebp - 0xa34]
call fcn.00404838
lea eax, [ebp - 0xb6c]
push 0x628d2c
push eax
call fcn.0041083a
pop ecx
pop ecx
test al, al
jne 0x47ee03
lea eax, [ebp - 0xb6c]
push 0x63a8c4
push eax
call fcn.0041083a
pop ecx
pop ecx
test al, al
je 0x47ee0e
push 0x6284b4
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push ebx
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fea0
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x47ef49
lea eax, [ebp - 0xfcc]
mov dword [0x6cfc0c], 3
push eax
lea eax, [ebp - 0x218]
xor ebx, ebx
push str.0x_x
push eax
mov dword [ebp - 0xfcc], ebx
call fcn.00466bab
add esp, 0xc
call fcn.004cd6d5
test al, al
je 0x47f4c5
mov esi, str.143359e8_f4b9_4010_a5e5_789147203fa5
push esi
push ebx
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
test eax, eax
je 0x47ee9f
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
dec edi
test edi, edi
jg 0x47ee81
push esi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47eee3
push 0x832
push str.WinMain
push str.__s__d___StartUpTask
call fcn.0040a649
add esp, 0xc
call fcn.004d0027
lea ecx, [ebp - 0xac4]
call fcn.0047c1fc
jmp 0x47f4be
push 0x648334
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xb54]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fd40
push eax
push 0x628d2c
call fcn.004804e0
pop ecx
pop ecx
lea ecx, [ebp - 0xb54]
mov bl, al
call fcn.0040b6a9
lea ecx, [ebp - 0xa34]
call fcn.00404838
test bl, bl
je 0x47f4be
call fcn.0047c22f
call fcn.0047c26b
jmp 0x47f4be
lea ecx, [ebp - 0xac4]
call fcn.0040b5da
push eax
push 0x846
push str.WinMain
push str.__s__d___szSetConfig_strCmd___s
call fcn.0040a649
add esp, 0x10
lea ecx, [ebp - 0xfc8]
call fcn.00404a19
mov bl, byte [ebp - 0xfed]
lea eax, [ebp - 0xfc8]
push eax
mov dl, bl
lea ecx, [ebp - 0xac4]
call fcn.0047c308
pop ecx
test al, al
je 0x47f23d
push 4
pop eax
mov dword [0x6cfc0c], eax
mov esi, str.Software360360huabao
xor eax, eax
mov edx, esi
mov dword [ebp - 0xfd4], eax
mov ecx, reloc.WS2_32.dll_accept
lea eax, [ebp - 0xfd4]
push eax
push str.install_model
call fcn.00425cda
cmp dword [ebp - 0xfd4], 2
pop ecx
pop ecx
jne 0x47f07d
call fcn.00426bb9
cmp eax, edi
je 0x47f020
xor ebx, ebx
xor eax, eax
inc ebx
push ebx
push 0x648f3c
push str.S_MR_j
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, ebx
jne 0x47f020
push str.__restore
lea ecx, [ebp - 0xa34]
call fcn.0040b0d5
lea ecx, [ebp - 0xa34]
call fcn.004c4ea8
lea ecx, [ebp - 0xa34]
call fcn.0040b6a9
lea ecx, [ebp - 0xb6c]
call fcn.0040b6a9
lea ecx, [ebp - 0xb0c]
call fcn.0040b6a9
lea ecx, [ebp - 0xb3c]
call fcn.0040b6a9
lea ecx, [ebp - 0xb24]
call fcn.0040b6a9
lea ecx, [ebp - 0xaf4]
call fcn.0040b6a9
lea ecx, [ebp - 0xadc]
call fcn.0040b6a9
lea ecx, [ebp - 0xa94]
call fcn.0040b6a9
lea ecx, [ebp - 0xa7c]
call fcn.0040b6a9
jmp 0x47f560
push str.360Huabao_shell.zip
lea ecx, [ebp - 0xa34]
call fcn.0040b0d5
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0xa4c]
call fcn.004cb655
lea ecx, [ebp - 0xa34]
call fcn.0040b6a9
lea ecx, [ebp - 0xa4c]
call fcn.0040b5da
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x47f0cf
lea ecx, [ebp - 0xa4c]
call fcn.0040b6a9
jmp 0x47f4c5
xor eax, eax
mov edx, esi
mov dword [ebp - 0xfcc], eax
mov ecx, reloc.WS2_32.dll_accept
lea eax, [ebp - 0xfcc]
push eax
push str.360huabao_exit
call fcn.00426054
pop ecx
pop ecx
mov esi, str.2b66a28a_e754_472a_94c5_b512e57133e2
push esi
xor eax, eax
push eax
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
test eax, eax
je 0x47f138
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push edi
push 0x869
push str.WinMain
push str.__s__d___show_mainwind_try_times:__d
call fcn.0040a649
add esp, 0x10
dec edi
test edi, edi
jg 0x47f0f6
xor eax, eax
push esi
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xfcc], eax
call esi
push eax
push 0x86d
mov edi, str.WinMain
push edi
push str.__s__d___CreateMutex_2b66a28a_error:__d
call fcn.0040a649
add esp, 0x10
call esi
cmp eax, 0xb7
je 0x47f1d7
test bl, bl
je 0x47f189
xor eax, eax
lea ecx, [eax + 1]
call fcn.0047a18a
call fcn.0047c2a7
mov ecx, dword [ebp - 0xff8]
mov edx, str.__enable_webui_debug
call fcn.00436043
test eax, eax
setne bl
call esi
push eax
push 0x874
push edi
push str.__s__d___start_ShowWallPaperMainWnd_error:__d
call fcn.0040a649
sub esp, 0x404
lea esi, [ebp - 0xfc8]
mov ecx, 0x105
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov dl, bl
xor ecx, ecx
call fcn.0047ac4b
add esp, 0x414
jmp 0x47f215
push 0x877
push str.WinMain
push str.__s__d___start_ShowWallPaperMainWndEx
call fcn.0040a649
push 2
pop ecx
call fcn.0047a18a
lea ecx, [ebp - 0xfc8]
call fcn.0047aee5
push 0x87a
push str.WinMain
push str.__s__d___end_ShowWallPaperMainWndEx
call fcn.0040a649
add esp, 0x18
push dword [ebp - 0xfcc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x87e
push str.WinMain
push str.__s__d___close_hMutexForMain
call fcn.0040a649
add esp, 0xc
jmp 0x47f0bf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x891
push str.WinMain
push str.__s__d___GetTickCount:__d
call fcn.0040a649
add esp, 0x10
cmp byte [ebp - 0xfcd], 0
je 0x47f274
lea ecx, [ebp - 0xac4]
call fcn.0047a218
jmp 0x47f4c5
push str.general
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.0052f9f0
mov ecx, eax
call fcn.0052fcb0
lea ecx, [ebp - 0xa34]
call fcn.00404838
push str.prepop
lea ecx, [ebp - 0xb84]
call fcn.004045aa
mov esi, dword [ebp - 0xfcc]
lea eax, [ebp - 0xb84]
push eax
mov ecx, esi
call fcn.0052fea0
lea ecx, [ebp - 0xb84]
mov bl, al
call fcn.00404838
test bl, bl
je 0x47f316
xor eax, eax
mov dword [0x6cfc0c], 0xa
push str.821F92D6_57D5_48A4_84DB_615FD5A9485A
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47f4be
lea ecx, [ebp - 0xac4]
call fcn.0047a72d
jmp 0x47f4be
push str.popdialog
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
mov ecx, esi
push eax
call fcn.0052fea0
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x47f384
xor eax, eax
mov dword [0x6cfc0c], 0xb
push str.4E615E96_C316_4D7D_A9E8_4A921FEAACE3
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47f4be
lea ecx, [ebp - 0xac4]
call fcn.0047a8d8
jmp 0x47f4be
push str.inspirevideo
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
mov ecx, esi
push eax
call fcn.0052fea0
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x47f3f2
xor eax, eax
mov dword [0x6cfc0c], 0xc
push str.39503951_AD3F_4BC7_B0C8_C72B412A0BD8
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47f4be
lea ecx, [ebp - 0xac4]
call fcn.0047aaa0
jmp 0x47f4be
push str.beautifytips
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
mov ecx, esi
push eax
call fcn.0052fea0
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x47f459
xor eax, eax
mov dword [0x6cfc0c], 0xd
push 0x649308
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47f4be
lea ecx, [ebp - 0xac4]
call fcn.0047b218
jmp 0x47f4be
push str.mangotv
lea ecx, [ebp - 0xbb4]
call fcn.004045aa
lea eax, [ebp - 0xbb4]
mov ecx, esi
push eax
call fcn.0052fea0
lea ecx, [ebp - 0xbb4]
mov bl, al
call fcn.00404838
test bl, bl
je 0x47f4c5
xor eax, eax
mov dword [0x6cfc0c], 0xe
push str.373B68CD_45C0_48BB_9C6C_F786C966C363
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47f4be
lea ecx, [ebp - 0xac4]
call fcn.0047b32c
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xb6c]
call fcn.0040b6a9
lea ecx, [ebp - 0xb0c]
call fcn.0040b6a9
lea ecx, [ebp - 0xb3c]
call fcn.0040b6a9
lea ecx, [ebp - 0xb24]
call fcn.0040b6a9
lea ecx, [ebp - 0xaf4]
call fcn.0040b6a9
lea ecx, [ebp - 0xadc]
call fcn.0040b6a9
lea ecx, [ebp - 0xa94]
call fcn.0040b6a9
lea ecx, [ebp - 0xa7c]
call fcn.0040b6a9
call fcn.004b25a9
mov ecx, eax
call fcn.004b3437
test al, al
je 0x47f539
call fcn.004b25a9
mov ecx, eax
call fcn.004b3458
mov ecx, 0x6d5d88
call fcn.0048069b
push 0x8dd
push str.WinMain
push str.__s__d___exit__r_n
call fcn.0040a649
add esp, 0xc
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0xac4]
call fcn.0040b6a9
xor eax, eax
lea esp, [ebp - 0x1088]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00590be8
leave
ret 0x10