Function at 0x430b70
Capabilities:
Accept command line arguments
Get geographical location
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x61e6ef
mov eax, dword fs:[0]
push eax
sub esp, 0xfc
mov eax, dword [0x68d9ac]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
xor eax, eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
call fcn.004813c0
push 0x60
mov esi, eax
push 0x64
push esi
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 0
push 1
push esi
movd xmm0, eax
lea ecx, [ebx + 0x30]
cvtdq2pd xmm0, xmm0
divsd xmm0, qword [0x633490]
cvtpd2ps xmm0, xmm0
movss dword [ebx + 0x47c], xmm0
call fcn.00487410
call fcn.0042e640
mov ecx, eax
call fcn.00421610
mov ecx, ebx
lea eax, [ebx + 0x314]
neg ecx
sbb ecx, ecx
and ecx, eax
push ecx
call fcn.0042e640
mov ecx, eax
call fcn.00421620
call fcn.0044e8d0
call fcn.0040be80
call fcn.00407320
mov ecx, eax
test ecx, ecx
je 0x431bed
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xfc], eax
push str.http:__s.ludashi.com_jdesk_appaidepidpidmidmidmid2mid2appverappvermodvermodvertypetypeactionaction
lea ecx, [ebp - 0xfc]
mov dword [ebp - 4], 0
call fcn.00408fd0
test al, al
jne 0x430c64
push 0x7f
push str.http:__s.ludashi.com_jdesk_appaidepidpidmidmidmid2mid2appverappvermodvermodvertypetypeactionaction
lea ecx, [ebp - 0xfc]
call fcn.0040b130
push ecx
mov esi, esp
mov dword [ebp - 4], 1
mov dword [ebp - 0xf8], esi
mov eax, dword [ebp - 0xfc]
add eax, 0xfffffff0
push eax
mov dword [ebp - 0xf8], eax
call fcn.00407060
add eax, 0x10
add esp, 4
mov dword [esi], eax
lea eax, [ebp - 0x100]
push eax
call fcn.0040a860
add esp, 8
push dword [ebp - 0x100]
mov byte [ebp - 4], 2
push str.jiandesk
push 0
call fcn.00420d80
mov ecx, eax
call fcn.0047a350
push str.background
lea ecx, [ebx + 0x30]
call fcn.00482ba0
push str.background_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x340], eax
call fcn.00482ba0
push str.time_ctrl
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x360], eax
call fcn.00482ba0
push str.time_left_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x344], eax
call fcn.00482ba0
push str.time_mid_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x364], eax
call fcn.00482ba0
push str.time_right_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x368], eax
call fcn.00482ba0
push str.weather_ctrl
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x36c], eax
call fcn.00482ba0
push str.weather_ctrl_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x348], eax
call fcn.00482ba0
push str.weatherDescribe_ctrl
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x384], eax
call fcn.00482ba0
push str.weatherDescribe_now_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x34c], eax
call fcn.00482ba0
push str.weatherTemperature_now_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x388], eax
call fcn.00482ba0
push str.date_ctrl
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x38c], eax
call fcn.00482ba0
push str.date_and_lunar_ctrl_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x350], eax
call fcn.00482ba0
push str.lunar_ctrl
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x370], eax
call fcn.00482ba0
mov dword [ebx + 0x354], eax
push str.middle_gap_2
lea ecx, [ebx + 0x30]
call fcn.00482ba0
push str.city_ctrl_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x37c], eax
call fcn.00482ba0
push str.btn_sort
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x380], eax
call fcn.00482ba0
push str.btn_sort_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x358], eax
call fcn.00482ba0
push str.btn_member
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x374], eax
call fcn.00482ba0
push str.btn_member_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x35c], eax
call fcn.00482ba0
push str.label_tomorrow_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x378], eax
call fcn.00482ba0
push str.weather_tomorrow_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x390], eax
call fcn.00482ba0
push str.weatherDescribe_tomorrow_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x394], eax
call fcn.00482ba0
push str.weatherTemperature_tomorrow_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x398], eax
call fcn.00482ba0
push str.label_afterTomorrow_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x39c], eax
call fcn.00482ba0
push str.weather_afterTomorrow_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x3a0], eax
call fcn.00482ba0
push str.weatherDescribe_afterTomorrow_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x3a4], eax
call fcn.00482ba0
push str.weatherTemperature_afterTomorrow_2
lea ecx, [ebx + 0x30]
mov dword [ebx + 0x3a8], eax
call fcn.00482ba0
push 0
mov dword [ebx + 0x3ac], eax
xorps xmm0, xmm0
lea eax, [ebp - 0x20]
push eax
push 0
push 0x30
movups xmmword [ebp - 0x20], xmm0
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
call fcn.004813c0
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xf4], 0
movd xmm0, eax
lea eax, [ebp - 0xf4]
cvtdq2pd xmm0, xmm0
push eax
lea eax, [ebp - 0xec]
push eax
divsd xmm0, qword [0x633488]
movsd qword [ebp - 0x108], xmm0
call fcn.00423940
mov ecx, eax
call fcn.00411520
cmp dword [ebp - 0xec], 0xffffffff
je 0x430f74
mov eax, dword [ebp - 0xf4]
cmp eax, 0xffffffff
je 0x430f74
movd xmm0, dword [ebp - 0x1c]
movsd xmm1, qword [ebp - 0x108]
mulsd xmm1, qword [0x633480]
cvtdq2pd xmm0, xmm0
addsd xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
comisd xmm1, xmm0
jbe 0x430fd0
jmp 0x430fc6
push 0x1a0
lea ecx, [ebx + 0x30]
call fcn.00482c40
mov ecx, eax
call fcn.00481680
mov edx, dword [ebp - 0x20]
mov esi, eax
mov eax, dword [ebp - 0x18]
movd xmm0, dword [ebp - 0x1c]
movsd xmm1, qword [ebp - 0x108]
mulsd xmm1, qword [0x633480]
lea eax, [eax + edx]
cdq
sub eax, edx
mov ecx, eax
mov eax, esi
cdq
cvtdq2pd xmm0, xmm0
sub eax, edx
sar ecx, 1
sar eax, 1
sub ecx, eax
mov dword [ebp - 0xec], ecx
addsd xmm1, xmm0
cvttsd2si eax, xmm1
mov dword [ebp - 0xf4], eax
call fcn.00423940
mov ecx, eax
call fcn.00410900
mov esi, eax
mov ecx, 0x1e5
mov eax, 0x1a0
test esi, esi
cmovne ecx, eax
push ecx
lea ecx, [ebx + 0x30]
call fcn.00482c40
mov ecx, eax
call fcn.00481680
mov edi, eax
lea ecx, [ebx + 0x30]
mov eax, 0xa0
test esi, esi
mov edx, 0xc2
cmovne edx, eax
push edx
call fcn.00482c40
mov ecx, eax
call fcn.00481680
push 0
push eax
push edi
push dword [ebp - 0xf4]
mov ecx, ebx
push dword [ebp - 0xec]
call fcn.004278d0
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
push dword [ebp - 0xf4]
push dword [ebp - 0xec]
call fcn.00423940
mov ecx, eax
call fcn.004136d0
call fcn.00431c20
test al, al
je 0x431079
mov ecx, dword [ebx + 0x364]
test ecx, ecx
je 0x431079
mov eax, dword [ecx]
push str.right
push str.align
call dword [eax + 0x160]
mov ecx, ebx
call fcn.00431d90
mov ecx, ebx
call fcn.0042ca30
mov ecx, ebx
call fcn.004371e0
cmp dword [ebx + 0x3b4], 0
push 0
je 0x4310a1
mov ecx, dword [ebx + 0x358]
jmp 0x4310a7
mov ecx, dword [ebx + 0x374]
mov eax, dword [ecx]
call dword [eax + 0x114]
mov ecx, ebx
call fcn.00438fd0
mov ecx, ebx
call fcn.0042c810
call fcn.00423940
mov ecx, eax
call fcn.004114e0
mov esi, eax
call fcn.00423940
mov ecx, eax
call fcn.004114c0
push eax
push esi
call fcn.00409100
mov ecx, dword [ebx + 0x340]
add esp, 8
mov esi, eax
test ecx, ecx
je 0x431103
push 0x62f1a8
call fcn.0048cdd0
mov ecx, dword [ebx + 0x340]
push esi
call fcn.0048cdb0
mov ecx, dword [ebx + 0x360]
test ecx, ecx
je 0x431123
push 0x62f1a8
call fcn.0048cdd0
mov ecx, dword [ebx + 0x360]
push esi
call fcn.0048cdb0
call fcn.00423940
mov ecx, eax
call fcn.00411500
push eax
mov ecx, ebx
call fcn.00438e40
mov esi, dword [sym.imp.USER32.dll_SetTimer]
push 0
push 0x3e8
push 0x457
push dword [ebx + 4]
call esi
push 0
push 0xc8
push 0x458
push dword [ebx + 4]
call esi
push 0
push 0xc8
push 0x459
push dword [ebx + 4]
call esi
push 0
push 0x36ee80
push 0x45a
push dword [ebx + 4]
call esi
push 0
push 0x240c8400
push 0x45c
push dword [ebx + 4]
call esi
mov ecx, ebx
call fcn.00438bd0
push dword [ebp - 0xf8]
lea eax, [ebx + 0x3e4]
push eax
push 0x68d440
push 0x68d244
push 0x69d0d4
call fcn.00429e00
add esp, 0x14
movzx eax, ax
lea ecx, [ebx + 0x3c4]
push 0
push eax
push 0
push 0
push 0x86020000
push 0
push 0
push 0
call fcn.0042d280
mov ecx, ebx
lea eax, [ebx + 0x318]
neg ecx
sbb ecx, ecx
and ecx, eax
push ecx
lea ecx, [ebx + 0x3c4]
call fcn.0041f370
push 0x40b
push dword [ebx + 4]
lea ecx, [ebx + 0x430]
call fcn.0045b070
push str.TaskbarCreated
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
push str.User32.dll
mov dword [ebx + 0x324], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x431249
push str.ChangeWindowMessageFilter
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x431249
mov ecx, dword [ebx + 0x324]
test ecx, ecx
je 0x431249
push 1
push ecx
call eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor ecx, ecx
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], cx
lea ecx, [ebp - 0x28]
push eax
mov dword [ebp - 0x14], 7
call fcn.0043b860
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0xe8]
call fcn.0046a8b0
mov edx, dword [ebp - 0x14]
mov byte [ebp - 4], 5
cmp edx, 8
jb 0x4312bd
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4312b3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x431bf7
push edx
push ecx
call fcn.004f9a35
add esp, 8
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.00423940
mov ecx, eax
call fcn.004108a0
test eax, eax
je 0x4313f9
xor eax, eax
mov dword [ebp - 0x48], 0
push str.autorun_theme
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
call fcn.0043b860
mov eax, 1
mov byte [ebp - 4], 6
mov dword [ebp - 0xf0], eax
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0x58]
push eax
call fcn.0046b240
test eax, eax
jne 0x4313f9
push str.autorun
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], 7
mov word [ebp - 0xb8], ax
call fcn.0043b860
mov eax, 3
mov dword [ebp - 4], 7
mov dword [ebp - 0xf0], eax
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0xb8]
push eax
call fcn.0046b240
test eax, eax
je 0x4313f2
xor eax, eax
mov dword [ebp - 0x90], 0
push str.autorun
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x8c], 7
mov word [ebp - 0xa0], ax
call fcn.0043b860
mov eax, 7
mov dword [ebp - 4], 8
mov dword [ebp - 0xf0], eax
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0xa0]
push eax
call fcn.0046b240
test eax, eax
je 0x4313f9
call fcn.00423940
mov ecx, eax
call fcn.0040ff50
test eax, eax
je 0x4313f9
mov esi, 1
jmp 0x4313fb
xor esi, esi
mov eax, dword [ebp - 0xf0]
test al, 4
je 0x43141f
and eax, 0xfffffffb
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0xf0], eax
call fcn.0040eec0
mov eax, dword [ebp - 0xf0]
test al, 2
je 0x43143d
and eax, 0xfffffffd
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0xf0], eax
call fcn.0040eec0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 4], 5
test al, 1
je 0x431459
and eax, 0xfffffffe
lea ecx, [ebp - 0x58]
mov dword [ebp - 0xf0], eax
call fcn.0040eec0
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
push 0x6304cc
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.0043b860
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0046b100
mov edx, dword [ebp - 0x14]
mov byte [ebp - 4], 9
cmp edx, 8
jb 0x4314e1
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4314d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x431bfc
push edx
push ecx
call fcn.004f9a35
add esp, 8
xor eax, eax
mov dword [ebp - 0x48], 0
push str.autorun
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
call fcn.0043b860
mov eax, dword [ebp - 0xf0]
lea ecx, [ebp - 0xe8]
or eax, 8
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0x58]
push eax
call fcn.0046b240
test eax, eax
je 0x431534
call fcn.00423940
mov ecx, eax
call fcn.0040ff70
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 9
call fcn.0040eec0
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
push str.search
cmovae eax, dword [ebp - 0x40]
push eax
call fcn.005f44d0
add esp, 8
or edi, 0xffffffff
test eax, eax
je 0x431727
xor eax, eax
mov dword [ebp - 0x48], 0
push str._try_now
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
call fcn.0043b860
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0xe8]
call fcn.0046b240
lea ecx, [ebp - 0x58]
mov dword [ebp - 0xec], eax
mov byte [ebp - 4], 9
call fcn.0040eec0
cmp dword [ebp - 0x2c], 8
lea ecx, [ebp - 0x40]
push str.rmenu
cmovae ecx, dword [ebp - 0x40]
push ecx
call fcn.005f44d0
add esp, 8
test eax, eax
je 0x431652
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
push str.startmenu
cmovae eax, dword [ebp - 0x40]
push eax
call fcn.005f44d0
add esp, 8
test eax, eax
je 0x431652
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
push str.desktop
cmovae eax, dword [ebp - 0x40]
push eax
call fcn.005f44d0
add esp, 8
test eax, eax
je 0x431652
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
push str.lds_start
cmovae eax, dword [ebp - 0x40]
push eax
call fcn.005f44d0
add esp, 8
test eax, eax
je 0x431652
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
push str.inst_new_ver
cmovae eax, dword [ebp - 0x40]
push eax
call fcn.005f44d0
add esp, 8
test eax, eax
je 0x431652
test esi, esi
jne 0x431652
cmp dword [ebp - 0xec], esi
je 0x431727
push 0
push 1
mov ecx, ebx
call fcn.00438a50
test al, al
je 0x431727
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
push str.mirrorPath
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
call fcn.0043b860
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0046b100
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xd
call fcn.0040eec0
cmp dword [ebp - 0x18], 0
je 0x43171b
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0xec]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.004085f0
mov esi, eax
push dword [esi]
mov byte [ebp - 4], 0xf
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x4316fa
mov ecx, dword [ebx + 0x32c]
test ecx, ecx
je 0x4316fa
mov eax, dword [ecx]
push esi
call dword [eax + 0x48]
mov edx, dword [ebp - 0xec]
mov eax, edi
mov byte [ebp - 4], 0xd
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43171b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.0040eec0
xor esi, esi
lea eax, [ebp - 0x40]
cmp dword [ebp - 0x2c], 8
push str.newinstall
cmovae eax, dword [ebp - 0x40]
push eax
call fcn.005f44d0
add esp, 8
test eax, eax
jne 0x431756
mov ecx, ebx
call fcn.0042e8a0
cmp eax, 1
jne 0x43176d
mov esi, eax
jmp 0x43176d
call fcn.00423940
mov ecx, eax
call fcn.004100d0
cmp eax, 2
mov ecx, 1
cmove esi, ecx
xor eax, eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
push str.showj
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.0043b860
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0xe8]
call fcn.0046b240
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0xec], eax
mov byte [ebp - 4], 0x10
cmp edx, 8
jb 0x4317fd
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4317ed
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x431c01
push edx
push ecx
call fcn.004f9a35
mov eax, dword [ebp - 0xec]
add esp, 8
test eax, eax
je 0x4319a2
xor eax, eax
mov dword [ebp - 0x48], 0
push str.showj
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
call fcn.0043b860
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0046b100
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x10
call fcn.0040eec0
cmp dword [ebp - 0x5c], 8
lea eax, [ebp - 0x70]
push 0x62fba8
cmovae eax, dword [ebp - 0x70]
push eax
call fcn.005f44d0
add esp, 8
test eax, eax
jne 0x431871
mov byte [ebx + 0x86c], al
jmp 0x4319aa
cmp dword [ebp - 0x5c], 8
lea eax, [ebp - 0x70]
push 0x6320d8
cmovae eax, dword [ebp - 0x70]
push eax
call fcn.005f44d0
add esp, 8
test eax, eax
jne 0x43194d
mov byte [ebx + 0x86c], al
push 0
push 1
mov ecx, ebx
call fcn.004891b0
push 0
push str.widget
push 1
push 0
push str.show
call fcn.00420d80
mov ecx, eax
call fcn.0047a370
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
push 0x6320e4
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.0043b860
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xe8]
call fcn.0046b100
mov edx, dword [ebp - 0x14]
mov byte [ebp - 4], 0x13
cmp edx, 8
jb 0x4319c9
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4319bf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x431c06
jmp 0x4319bf
cmp dword [ebp - 0x5c], 8
lea eax, [ebp - 0x70]
push 0x6320dc
cmovae eax, dword [ebp - 0x70]
push eax
call fcn.005f44d0
add esp, 8
test eax, eax
jne 0x431976
push eax
push 1
mov ecx, ebx
call fcn.00438a50
jmp 0x4319aa
cmp dword [ebp - 0x5c], 8
lea eax, [ebp - 0x70]
push 0x6320e0
cmovae eax, dword [ebp - 0x70]
push eax
call fcn.005f44d0
add esp, 8
test eax, eax
jne 0x4319a2
push eax
push 1
mov ecx, ebx
call fcn.00438a50
jmp 0x431898
test esi, esi
je 0x431898
push 0
push 0
push 0x406
mov ecx, ebx
call fcn.00489070
jmp 0x4318bf
push edx
push ecx
call fcn.004f9a35
add esp, 8
cmp dword [ebp - 0x78], 0
je 0x431a36
cmp dword [ebp - 0x74], 8
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0xf4]
cmovae eax, dword [ebp - 0x88]
push eax
call fcn.004085f0
push eax
lea ecx, [ebx + 0x854]
mov byte [ebp - 4], 0x15
call fcn.0041aa00
mov edx, dword [ebp - 0xf4]
mov eax, edi
mov byte [ebp - 4], 0x13
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x431a1d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.USER32.dll_SetTimer]
push 0
push 0x3e8
push 0x45f
push dword [ebx + 4]
call esi
jmp 0x431a3c
mov esi, dword [sym.imp.USER32.dll_SetTimer]
push 0
push 0
push 1
push 0
push 0x6320fc
call fcn.00420d80
mov ecx, eax
call fcn.0047a370
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
push str.newinstall
cmovae eax, dword [ebp - 0x40]
push eax
call fcn.005f44d0
add esp, 8
push 0
test eax, eax
jne 0x431a7b
push 0x3e8
jmp 0x431a80
push 0xc8
push 0x463
push dword [ebx + 4]
call esi
mov edx, dword [ebp - 0x74]
mov byte [ebp - 4], 0x10
cmp edx, 8
jb 0x431acb
mov ecx, dword [ebp - 0x88]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x431ac1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x431c0b
push edx
push ecx
call fcn.004f9a35
add esp, 8
mov edx, dword [ebp - 0x5c]
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
mov byte [ebp - 4], 9
cmp edx, 8
jb 0x431b20
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x431b16
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x431c10
push edx
push ecx
call fcn.004f9a35
add esp, 8
mov edx, dword [ebp - 0x2c]
xor eax, eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
mov byte [ebp - 4], 5
cmp edx, 8
jb 0x431b72
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x431b68
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x431c15
push edx
push ecx
call fcn.004f9a35
add esp, 8
xor eax, eax
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
call fcn.0046aa80
mov edx, dword [ebp - 0x100]
mov eax, edi
mov byte [ebp - 4], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x431bb2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 4], 0xffffffff
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x431bd1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004f9a43
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00407030
call fcn.005e6a79
call fcn.005e6a79
call fcn.005e6a79
call fcn.005e6a79
call fcn.005e6a79
call fcn.005e6a79
call fcn.005e6a79
int3