Function at 0x40fff0
Capabilities:
Check if file exists
Create process on windows
Get graphical window text

Disassembly:
push 0xffffffffffffffff
push 0x60d087
mov eax, dword fs:[0]
push eax
sub esp, 0xe5c
mov eax, dword [0x6687b8]
xor eax, esp
mov dword [esp + 0xe58], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6687b8]
xor eax, esp
push eax
lea eax, [esp + 0xe70]
mov dword fs:[0], eax
mov eax, dword [esp + 0xe84]
cmp ax, 0x4d3
mov ebp, dword [esp + 0xe80]
mov edi, dword [sym.imp.USER32.dll_EnableWindow]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
jne 0x410075
shr eax, 0x10
cmp ax, 0x300
jne 0x410085
cmp dword [0x678efc], 0
je 0x410069
mov dword [0x678efc], 0
jmp 0x410085
mov eax, dword [0x6784cc]
push 1
push 3
push eax
jmp 0x410080
mov ecx, dword [0x6784cc]
push 1
push 3
push ecx
call esi
push eax
call edi
mov eax, dword [esp + 0xe84]
cmp eax, 0x3eb
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
jne 0x4100d6
push 0x24
push 0x625b68
push 0x625b70
push ebp
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x4106ca
lea eax, [esp + 0xcc]
call fcn.004059d0
push ebp
lea ecx, [esp + 0xd0]
call fcn.0040fa60
add esp, 4
jmp 0x4106ca
cmp eax, 0x404
jne 0x410109
push 0
push 0
push 0xf0
push eax
push ebp
call esi
push eax
call ebx
test eax, eax
je 0x4100fd
push 1
push 0x405
jmp 0x4106c4
push 0
push 0x405
jmp 0x4106c4
cmp eax, 0x503
jne 0x41013c
push 0
push 0
push 0xf0
push eax
push ebp
call esi
push eax
call ebx
test eax, eax
je 0x410130
push 1
push 0x4ef
jmp 0x4106c4
push 0
push 0x4ef
jmp 0x4106c4
cmp eax, 0x4d0
jne 0x41018f
push 0
push 0
push 0xf0
push eax
push ebp
call esi
push eax
call ebx
test eax, eax
je 0x410173
push 1
push 0x40a
push ebp
call esi
push eax
call edi
mov dword [0x67a830], 1
jmp 0x4106ca
push 0
push 0x40a
push ebp
call esi
push eax
call edi
mov dword [0x67a830], 0
jmp 0x4106ca
cmp eax, 0x4c8
jne 0x4101c2
push 0
push 0
push 0xf0
push eax
push ebp
call esi
push eax
call ebx
test eax, eax
je 0x4101b6
push 1
push 0x406
jmp 0x4106c4
push 0
push 0x406
jmp 0x4106c4
cmp eax, 0x48c
jne 0x4101f5
push 0
push 0
push 0xf0
push eax
push ebp
call esi
push eax
call ebx
test eax, eax
je 0x4101e9
push 1
push 0x4d3
jmp 0x4106c4
push 0
push 0x4d3
jmp 0x4106c4
cmp eax, 0x40a
jne 0x41021b
mov edx, dword [0x678fd0]
push 0
push 0x490ce0
push ebp
push 0x97
push edx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x4106ca
cmp eax, 0x405
jne 0x41023d
mov eax, dword [0x678fd0]
push 0
push 0x413e20
push ebp
push 0x7f
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x4106ca
cmp eax, 0x401
jne 0x41028f
mov ecx, dword [0x678fd0]
push 0
push 0x4682c0
push ebp
push 0x95
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp eax, 1
jne 0x4106ca
call fcn.004062c0
mov edx, dword [0x678ec4]
mov dword [0x678ec0], 1
mov byte [edx + 0x9c0], 1
mov byte [0x6784c6], 1
jmp 0x4106ca
cmp eax, 0x406
jne 0x4102cb
call fcn.0040f160
cmp eax, 1
jne 0x4106ca
call fcn.004062c0
mov eax, dword [0x678ec4]
mov dword [0x678ec0], 1
mov byte [eax + 0x9c0], 1
mov byte [0x6784c7], 1
jmp 0x4106ca
cmp eax, 0x4ed
jne 0x41034c
push 0
push 0
push 0xf0
push eax
push ebp
call esi
push eax
call ebx
test eax, eax
je 0x4103ac
push 1
push 0x4ee
push ebp
call esi
push eax
call edi
call fcn.004062c0
mov edi, dword [0x678ec4]
cmp dword [edi + 0x958], 0
mov dword [0x678ec0], 1
jne 0x41032e
lea eax, [esp + 0xcc]
call fcn.004059d0
mov ecx, dword [esp + 0xa24]
mov dword [edi + 0x958], ecx
call fcn.004062c0
call fcn.00409bf0
test eax, eax
jne 0x4106ca
push eax
push edi
call fcn.00406360
jmp 0x4106ca
cmp eax, 0x4ee
jne 0x4103b8
mov edx, dword [0x678fd0]
push 0
push 0x437010
push ebp
push 0x80
push edx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
call fcn.004062c0
mov eax, dword [0x678ec4]
cmp dword [eax + 0x958], 0
mov dword [0x678ec0], 1
jne 0x4106ca
push 0
push 0
push 0xf1
push 0x4ed
push ebp
mov dword [eax + 0x954], 0
call esi
push eax
call ebx
push 0
push 0x4ee
jmp 0x4106c4
cmp eax, 0x518
jne 0x4105ca
lea ebx, [esp + 0x18]
call fcn.0047a980
mov eax, ebx
mov dword [esp + 0xe78], 0
call fcn.00576f50
mov edx, str.QQPYLiveUp.exe
mov edi, ebx
call fcn.0040ae60
lea eax, [esp + 0x4c]
push eax
call fcn.00401f10
mov ebx, 1
mov byte [esp + 0xe78], bl
call fcn.004062c0
lea edi, [esp + 0x1c]
mov dword [0x678ec0], ebx
call fcn.0047ac70
mov eax, edi
mov byte [esp + 0xe78], 2
call fcn.00576f50
mov ecx, edi
push ecx
lea edx, [esp + 0x24]
push edx
mov ebx, str.trans2.dict
call fcn.0040aab0
mov eax, dword [eax]
add esp, 8
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea ecx, [esp + 0x20]
mov esi, eax
call fcn.00403870
test esi, esi
je 0x4104c4
push str.__UpdateE2CQ__1
push ecx
push str.__UpdateWspl__1
push ecx
push str.__UpdateEudc__1
push ecx
push 1
push ecx
push str.__UpdateDictType_
push ecx
push 2
push ecx
push str.__UpdateImeType_
push ecx
push 2
push ecx
lea eax, [esp + 0x8c]
push str._Mode_
push eax
call fcn.00413340
add esp, 0xc
push eax
call fcn.00411200
add esp, 4
push eax
call fcn.00413340
add esp, 0xc
push eax
call fcn.00411200
add esp, 4
push eax
call fcn.00413340
add esp, 0xc
push eax
call fcn.00411200
add esp, 4
push eax
call fcn.00413340
add esp, 0xc
jmp 0x410527
push str.__UpdateWspl__1
push ecx
push str.__UpdateEudc__1
push ecx
push 1
push ecx
push str.__UpdateDictType_
push ecx
push 2
push ecx
push str.__UpdateImeType_
push ecx
push 2
push ecx
lea ecx, [esp + 0x84]
push str._Mode_
push ecx
call fcn.00413340
add esp, 0xc
push eax
call fcn.00411200
add esp, 4
push eax
call fcn.00413340
add esp, 0xc
push eax
call fcn.00411200
add esp, 4
push eax
call fcn.00413340
add esp, 0xc
push eax
call fcn.00411200
add esp, 4
push eax
call fcn.00413340
add esp, 0xc
push eax
call fcn.00413340
add esp, 8
lea ecx, [esp + 0x24]
lea eax, [esp + 0x4c]
call fcn.00411530
cmp dword [eax + 0x18], 8
jb 0x410551
mov eax, dword [eax + 4]
jmp 0x410554
add eax, 4
mov edx, dword [esp + 0x18]
push 1
push 0
push eax
push edx
push 0x625c98
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea esi, [esp + 0x24]
call fcn.00404670
push 0
call fcn.005d2e37
add esp, 4
push eax
mov edx, str.lastupdatetime
mov ecx, str.SOFTWARETencentQQPinyin
call fcn.00479d80
add esp, 4
lea ecx, [esp + 0x1c]
call fcn.00403870
lea eax, [esp + 0x4c]
mov byte [esp + 0xe78], 0
call fcn.00401c80
lea ecx, [esp + 0x18]
mov dword [esp + 0xe78], 0xffffffff
call fcn.00403870
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
jmp 0x4106ca
cmp eax, 0x402
jne 0x4105ef
mov eax, dword [0x678fd0]
push 0
push 0x40f4a0
push ebp
push 0xcc
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x4106ca
cmp eax, 0x4c7
jne 0x410633
lea esi, [esp + 0x24]
call fcn.00410870
mov dword [esp + 0xe78], 3
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
mov edi, esi
call fcn.00411430
mov dword [esp + 0xe78], 0xffffffff
call fcn.004108a0
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
jmp 0x4106ca
cmp eax, 0x4c9
jne 0x410656
mov ecx, dword [0x678fd0]
push 0
push 0x40f830
push ebp
push 0x10d
push ecx
call dword [sym.imp.USER32.dll_DialogBoxParamW]
jmp 0x4106ca
cmp eax, 0x48d
jne 0x4106ca
push 0
push 0
push 0xf0
push eax
push ebp
call esi
push eax
call ebx
test eax, eax
je 0x410699
push 1
push 0x56c
push ebp
mov dword [0x67a330], 1
call esi
push eax
call edi
push 1
push 0x4d2
push ebp
call esi
push eax
call edi
push 1
jmp 0x4106bf
push 0
push 0x56c
push ebp
mov dword [0x67a330], 0
call esi
push eax
call edi
push 0
push 0x4d2
push ebp
call esi
push eax
call edi
push 0
push 0x56e
push ebp
call esi
push eax
call edi
mov ecx, dword [esp + 0xe84]
mov eax, ecx
shr eax, 0x10
cmp ax, 0x300
jne 0x41083e
cmp cx, 0x56c
jne 0x41083e
mov edx, dword [0x677600]
mov eax, dword [edx + 0xc]
mov ecx, 0x677600
call eax
lea edi, [eax + 0x10]
mov dword [esp + 0x18], edi
push 0x56c
push ebp
mov dword [esp + 0xe80], 4
call esi
push eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
lea ebx, [eax + 1]
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, ebx
or eax, ecx
jge 0x41073f
mov ecx, ebx
lea eax, [esp + 0x18]
call fcn.00403540
mov edi, dword [esp + 0x18]
push ebx
push edi
push 0x56c
push ebp
call esi
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
test edi, edi
jne 0x410758
xor eax, eax
jmp 0x410771
mov eax, edi
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x410760
sub eax, edx
sar eax, 1
js 0x4107c9
cmp eax, dword [edi - 8]
jg 0x4107c9
mov dword [edi - 0xc], eax
mov word [edi + eax*2], 0
cmp dword [edi - 0xc], 0
je 0x4107d8
mov ebx, dword [edi - 0xc]
xor eax, eax
test ebx, ebx
jle 0x4107b7
test eax, eax
jl 0x4107c9
cmp eax, ebx
jg 0x4107c9
movzx ecx, word [edi + eax*2]
movzx edx, cx
cmp dx, 0x30
jb 0x4107c5
cmp eax, ebx
jg 0x4107c9
movzx ecx, cx
cmp cx, 0x39
ja 0x4107c5
add eax, 1
cmp eax, ebx
jl 0x41078e
push edi
call fcn.005d3c34
add esp, 4
cmp eax, 0x14
jbe 0x4107d3
push 0x14
jmp 0x4107da
push 0x80070057
call fcn.00403650
cmp eax, 1
jae 0x410817
push 1
push 0x625d28
lea edi, [esp + 0x20]
call fcn.0040ac80
mov edi, dword [esp + 0x20]
add esp, 8
push edi
push 0x56c
push ebp
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
push 0xffffffffffffffff
push 0
push 0xb1
push 0x56c
push ebp
call esi
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
add edi, 0xfffffff0
mov dword [esp + 0xe78], 0xffffffff
lea ecx, [edi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41083e
mov ecx, dword [edi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push edi
call edx
mov ecx, dword [esp + 0xe70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xe58]
xor ecx, esp
call fcn.005d28b3
add esp, 0xe68
ret