Function at 0x412ba0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x557148
mov eax, dword fs:[0]
push eax
sub esp, 0x38
push ebx
push esi
push edi
mov eax, dword [0x5b2920]
xor eax, esp
push eax
lea eax, [esp + 0x48]
mov dword fs:[0], eax
mov edi, ecx
mov esi, edx
xor eax, eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x50], eax
mov eax, dword [edi]
mov edx, dword [eax + 0x2c]
lea ecx, [esp + 0x14]
push ecx
push edi
call edx
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
jne 0x412c16
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
xor al, al
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x5691fc
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov ebx, eax
test ebx, ebx
jne 0x412c31
push 0x8007000e
call fcn.00405130
mov edx, dword [esp + 0x14]
push 0
push 0x400
push ebx
push edx
call sub.OLEAUT32.dll_VarR8Pow
cmp eax, 1
push ebx
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
sete byte [esp + 0x17]
call ebx
cmp byte [esp + 0x13], 0
je 0x412c84
mov eax, dword [0x5c2b40]
test eax, eax
je 0x412c67
mov eax, dword [eax + 0x20]
push 0
push 0x9c51
push 0x111
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [esp + 0x14]
push eax
jmp 0x413514
lea ecx, [esp + 0x14]
push ecx
mov eax, str.ico_sound
call fcn.00417200
test al, al
je 0x412fd6
lea ebx, [esp + 0x18]
mov eax, 0x5c32e0
mov dword [esp + 0x18], 0x14
call fcn.004152b0
add dword [eax], 1
lea edx, [esp + 0x24]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov byte [esp + 0x50], 1
call fcn.0040efb0
test eax, eax
mov dword [esp + 0x18], eax
jne 0x412cfc
lea eax, [esp + 0x24]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov al, 1
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.localtts
lea ecx, [esp + 0x24]
call fcn.00417550
lea ecx, [esp + 0x24]
push ecx
mov byte [esp + 0x54], 2
mov eax, dword [eax]
mov edx, dword [edi]
mov edx, dword [edx + 0x20]
push 0
push eax
push edi
call edx
mov byte [esp + 0x50], 1
mov eax, dword [esp + 0x20]
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push eax
call ebx
cmp word [esp + 0x24], 8
jne 0x412d74
cmp dword [esi + 0x19c], 8
jb 0x412d4c
mov esi, dword [esi + 0x188]
jmp 0x412d52
add esi, 0x188
mov edx, dword [esp + 0x18]
push 0
push 0x5660e8
mov ecx, esi
call fcn.004a8150
lea ecx, [esp + 0x24]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x41350f
push str.prontype
lea ecx, [esp + 0x24]
call fcn.00417550
lea edx, [esp + 0x24]
push edx
mov byte [esp + 0x54], 3
mov eax, dword [eax]
mov ecx, dword [edi]
push 0
push eax
mov eax, dword [ecx + 0x20]
push edi
call eax
mov byte [esp + 0x50], 1
mov ecx, dword [esp + 0x20]
push ecx
call ebx
cmp word [esp + 0x24], 8
je 0x412dee
mov edi, dword [esp + 0x18]
mov eax, dword [edi + 0x74]
mov edx, dword [eax + 0x20]
push edx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x412dc7
call fcn.004a65e0
lea eax, [esp + 0x24]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ecx, dword [esp + 0x14]
push ecx
call ebx
xor al, al
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x2c]
push edx
lea ecx, [esp + 0x20]
call fcn.00417990
lea eax, [esp + 0x1c]
push 0x568fac
push eax
mov byte [esp + 0x58], 4
call fcn.00414f30
add esp, 8
test al, al
je 0x412e3a
cmp dword [esi + 0x19c], 8
jb 0x412e2d
mov ecx, dword [esi + 0x188]
push 0
jmp 0x412f92
lea ecx, [esi + 0x188]
push 0
jmp 0x412f92
lea ecx, [esp + 0x1c]
push 0x569a7c
push ecx
call fcn.00414f30
add esp, 8
test al, al
je 0x412e73
cmp dword [esi + 0x19c], 8
jb 0x412e66
mov ecx, dword [esi + 0x188]
push 2
jmp 0x412f92
lea ecx, [esi + 0x188]
push 2
jmp 0x412f92
lea edx, [esp + 0x1c]
push 0x569a78
push edx
call fcn.00414f30
add esp, 8
test al, al
je 0x412eac
cmp dword [esi + 0x19c], 8
jb 0x412e9f
mov ecx, dword [esi + 0x188]
push 1
jmp 0x412f92
lea ecx, [esi + 0x188]
push 1
jmp 0x412f92
lea eax, [esp + 0x1c]
push 0x569a80
push eax
call fcn.00414f30
add esp, 8
test al, al
je 0x412fa0
cmp dword [esi + 0x198], 1
jne 0x412f79
lea ecx, [esp + 0x34]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [esp + 0x34]
push eax
push 0
mov byte [esp + 0x58], 5
mov edx, dword [edi]
mov ecx, dword [edx + 0x20]
push str.attr_pinyin
push edi
call ecx
cmp word [esp + 0x34], 8
jne 0x412f4b
mov edx, dword [esp + 0x3c]
push edx
lea ecx, [esp + 0x24]
call fcn.00417550
mov byte [esp + 0x50], 6
cmp dword [esi + 0x19c], 8
jb 0x412f23
mov esi, dword [esi + 0x188]
jmp 0x412f29
add esi, 0x188
mov edi, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
push 3
push edi
mov ecx, esi
call fcn.004a8150
push edi
call ebx
lea eax, [esp + 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x412fa0
cmp dword [esi + 0x19c], 8
jb 0x412f5c
mov esi, dword [esi + 0x188]
jmp 0x412f62
add esi, 0x188
mov ecx, dword [esp + 0x18]
push esi
call fcn.004a7f60
lea eax, [esp + 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x412fa0
cmp dword [esi + 0x19c], 8
jb 0x412f8a
mov ecx, dword [esi + 0x188]
jmp 0x412f90
lea ecx, [esi + 0x188]
push 3
mov edx, dword [esp + 0x1c]
push 0x5660e8
call fcn.004a8150
lea ecx, [esp + 0x1c]
call fcn.004165f0
lea ecx, [esp + 0x24]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x14]
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push eax
call ebx
xor al, al
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [esp + 0x14]
push edx
mov eax, str.new_word
call fcn.00417200
test al, al
je 0x413072
cmp dword [esi + 0x19c], 8
push 1
jb 0x413000
mov esi, dword [esi + 0x188]
jmp 0x413006
add esi, 0x188
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push esi
call fcn.00417990
mov eax, dword [0x5c2b44]
push eax
call fcn.0048e4d0
push str.new_word2
lea ecx, [esp + 0x24]
call fcn.00417550
mov byte [esp + 0x50], 7
mov eax, dword [eax]
mov ecx, dword [edi]
mov edx, dword [ecx + 0x28]
push eax
push edi
call edx
mov byte [esp + 0x50], 0
mov eax, dword [esp + 0x20]
push eax
call ebx
push 0x56922c
lea ecx, [esp + 0x24]
call fcn.00417550
mov byte [esp + 0x50], 8
mov edx, dword [eax]
mov ecx, dword [edi]
mov eax, dword [ecx + 0xa0]
push edx
push edi
call eax
mov ecx, dword [esp + 0x20]
jmp 0x41350c
lea eax, [esp + 0x14]
push eax
mov eax, str.new_word2
call fcn.00417200
test al, al
je 0x4130ae
mov eax, dword [0x5c2b40]
test eax, eax
je 0x413091
mov eax, dword [eax + 0x20]
push 0
push 0x9c4d
push 0x111
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0x14]
push ecx
jmp 0x413514
lea edx, [esp + 0x14]
push edx
mov eax, str.GoXDict
call fcn.00417200
test al, al
jne 0x4130d4
lea edx, [esp + 0x14]
push edx
mov eax, 0x56925c
call fcn.00417200
test al, al
je 0x413128
mov eax, dword [0x5c2b44]
call fcn.00496e50
cmp dword [esi + 0x19c], 8
jb 0x4130ef
mov esi, dword [esi + 0x188]
jmp 0x4130f5
add esi, 0x188
mov eax, dword [0x5c2b44]
mov ecx, dword [eax + 0x20]
push 0
push esi
push 0xc53
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [esp + 0x14]
push eax
call ebx
xor al, al
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [esp + 0x14]
push edx
mov eax, str.translate_sentence
call fcn.00417200
test al, al
jne 0x412c7a
lea ecx, [esp + 0x14]
push ecx
mov eax, str.client_flag
call fcn.00417200
test al, al
je 0x4131f5
lea edx, [esp + 0x34]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [esp + 0x34]
push ecx
push 0
mov byte [esp + 0x58], 9
mov eax, dword [edi]
mov edx, dword [eax + 0x20]
push 0x5692a4
push edi
call edx
lea ecx, [esp + 0x1c]
call fcn.00417a50
mov byte [esp + 0x50], 0xa
cmp word [esp + 0x34], 1
lea ecx, [esp + 0x1c]
je 0x4131bb
mov eax, dword [esp + 0x3c]
push eax
call fcn.004177d0
mov eax, dword [esp + 0x1c]
cmp dword [eax - 0xc], 0
je 0x4131c5
mov ecx, dword [0x5c2b44]
push eax
push 0x814d
call fcn.004f38b7
jmp 0x4131c5
push 0x5660e8
call fcn.004177d0
lea ecx, [esp + 0x1c]
call fcn.004165f0
lea ecx, [esp + 0x34]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov edx, dword [esp + 0x14]
push edx
call ebx
xor al, al
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [esp + 0x14]
push eax
mov eax, 0x5692a8
call fcn.00417200
test al, al
je 0x413227
push 0
push 0
push 0xc41
mov ecx, esi
call fcn.00417360
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x41350f
lea eax, [esp + 0x14]
push eax
mov eax, str.check_net
call fcn.00417200
test al, al
je 0x413251
push 5
push str.rundll32.exe_shell32.dll_Control_RunDLL_ncpa.cpl
call dword [sym.imp.KERNEL32.dll_WinExec]
mov ecx, dword [esp + 0x14]
push ecx
jmp 0x413514
lea edx, [esp + 0x14]
push edx
mov eax, str.download_localdict
call fcn.00417200
test al, al
je 0x413290
mov esi, str.http:__g.iciba.com_dictdown_
call fcn.00497220
mov eax, dword [esp + 0x14]
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push eax
call ebx
xor al, al
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [esp + 0x14]
push eax
mov eax, str.install_dictionary
call fcn.00417200
test al, al
je 0x4132cd
mov esi, str.http:__g.iciba.com_dictdown_
call fcn.00497220
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov al, 1
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [esp + 0x14]
push edx
mov eax, str.explain
call fcn.00417200
test al, al
jne 0x4134bb
lea eax, [esp + 0x14]
push eax
mov eax, str.comment
call fcn.00417200
test al, al
jne 0x4134bb
lea ecx, [esp + 0x14]
push ecx
mov eax, str.suggest
call fcn.00417200
test al, al
jne 0x4134bb
lea edx, [esp + 0x14]
push edx
mov eax, str.explain_sentence
call fcn.00417200
test al, al
je 0x41335f
cmp dword [esi + 0x19c], 8
jb 0x413336
mov eax, dword [esi + 0x188]
jmp 0x41333c
lea eax, [esi + 0x188]
push 0
push eax
push 0xc44
mov ecx, esi
call fcn.00417360
mov eax, dword [eax + 0x20]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0x14]
push ecx
jmp 0x413514
lea edx, [esp + 0x14]
push edx
mov eax, str.huihua_back
call fcn.00417200
test al, al
jne 0x412c7a
lea ecx, [esp + 0x14]
push ecx
mov eax, str.refresh
call fcn.00417200
test al, al
jne 0x41350f
lea eax, [esp + 0x14]
push eax
mov eax, str.explain_spe
call fcn.00417200
test al, al
jne 0x4130a4
lea edx, [esp + 0x14]
push edx
mov eax, str.juku_spe
call fcn.00417200
test al, al
jne 0x412c7a
lea ecx, [esp + 0x14]
push ecx
mov eax, str.huihua_id_query
call fcn.00417200
test al, al
je 0x41348c
lea edx, [esp + 0x34]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [esp + 0x34]
push ecx
push 0
mov byte [esp + 0x58], 0xc
mov eax, dword [edi]
mov edx, dword [eax + 0x20]
push str.searchid
push edi
call edx
lea ecx, [esp + 0x1c]
call fcn.00417a50
mov byte [esp + 0x50], 0xd
cmp word [esp + 0x34], 1
lea ecx, [esp + 0x1c]
je 0x413417
mov eax, dword [esp + 0x3c]
push eax
jmp 0x41341c
push 0x5660e8
call fcn.004177d0
mov dword [esp + 0x18], 0
mov byte [esp + 0x50], 0xe
mov ecx, dword [edi]
mov eax, dword [ecx + 0xf0]
lea edx, [esp + 0x18]
push edx
push edi
call eax
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
push ecx
push edx
call fcn.005130f4
add esp, 4
push eax
push 0xc47
mov ecx, esi
call fcn.00417360
mov eax, dword [eax + 0x20]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0x18]
push ecx
call ebx
lea ecx, [esp + 0x1c]
call fcn.004165f0
lea edx, [esp + 0x34]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x14]
push eax
jmp 0x413514
lea ecx, [esp + 0x14]
push ecx
mov eax, str.huihua_id_tab
call fcn.00417200
test al, al
jne 0x41350f
mov eax, dword [esp + 0x14]
push eax
call ebx
xor al, al
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [esp + 0x1c], 0
mov byte [esp + 0x50], 0xb
mov ecx, dword [edi]
mov eax, dword [ecx + 0xf0]
lea edx, [esp + 0x1c]
push edx
push edi
call eax
lea ecx, [esp + 0x14]
push ecx
mov eax, str.explain
call fcn.00417200
test al, al
je 0x413508
mov edx, dword [esp + 0x1c]
push 0
push edx
push 0xc40
mov ecx, esi
call fcn.00417360
mov eax, dword [eax + 0x20]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0x1c]
push ecx
call ebx
mov edx, dword [esp + 0x14]
push edx
call ebx
mov al, 1
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret