Function at 0x4886b0
Capabilities:
Accept command line arguments
Create process on windows

Disassembly:
push 0xffffffffffffffff
push 0x555cae
mov eax, dword fs:[0]
push eax
sub esp, 0x138
mov eax, dword [0x5b2920]
xor eax, esp
mov dword [esp + 0x134], eax
push ebx
push esi
push edi
mov eax, dword [0x5b2920]
xor eax, esp
push eax
lea eax, [esp + 0x148]
mov dword fs:[0], eax
mov esi, dword [sym.imp.KERNEL32.dll_OpenMutexW]
push str.DICT_67D8F804_ECD4_4a30_9F5D_62FA84556143
push 1
push 0
mov edi, ecx
call esi
test eax, eax
jne 0x488a4b
push str.DICT_39409489_3E29_4e4a_A837_51FCC9E1BE50
push 1
push eax
call esi
test eax, eax
jne 0x488a4b
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [esp + 0x110]
call fcn.004029b0
push str.StartXdictFromTag
mov ebx, 0x11
xor eax, eax
lea edx, [esp + 0x110]
mov dword [esp + 0x154], 0
call fcn.00404be0
cmp eax, 0xffffffff
mov ebx, 8
jne 0x488a8c
cmp dword [edi + 0x8b4], 0
jne 0x488a8c
call fcn.004885b0
test al, al
je 0x488a8c
push str.XdictTool.exe
lea ecx, [esp + 0xa0]
call fcn.004029b0
lea eax, [esp + 0x9c]
lea ecx, [esp + 0xf0]
mov byte [esp + 0x150], 1
call fcn.004037a0
lea ecx, [esp + 0x9c]
mov byte [esp + 0x150], 3
call fcn.00402790
push str.cibaupdateconfig_filelist.ini
lea ecx, [esp + 0x14]
call fcn.004029b0
lea eax, [esp + 0x10]
lea ecx, [esp + 0xd4]
mov byte [esp + 0x150], 4
call fcn.004037a0
lea ecx, [esp + 0x10]
mov byte [esp + 0x150], 6
call fcn.00402790
cmp dword [esp + 0x108], ebx
mov eax, dword [esp + 0xf4]
jae 0x488803
lea eax, [esp + 0xf4]
call fcn.00405eb0
test eax, eax
je 0x488a74
cmp dword [esp + 0xec], ebx
mov eax, dword [esp + 0xd8]
jae 0x488827
lea eax, [esp + 0xd8]
call fcn.00405eb0
test eax, eax
je 0x488a74
call fcn.0040ea40
test eax, eax
je 0x488874
call fcn.0040ea40
test eax, eax
je 0x488a74
mov eax, dword [0x5c2b40]
test eax, eax
je 0x488856
mov eax, dword [eax + 0x20]
push 1
push 0x56cdd0
push 0x579be8
push eax
call fcn.00447b60
add esp, 0x10
cmp eax, 1
jne 0x488a74
push str.cVer2011.06.06.000_taVer2010.10.10.010_tuAhttp:__up.cb.kingsoft.com_v3testupdate_tuT2_tuMupgrade_comment...
lea ecx, [esp + 0xa0]
call fcn.004029b0
lea eax, [esp + 0x9c]
push eax
mov edx, str._killcibaComponentForUpdate
mov byte [esp + 0x154], 7
call fcn.00402880
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0xa4]
push ecx
mov ecx, 0x5c32f8
call fcn.004025b0
push str.AUTO:_1_
lea ecx, [esp + 0x30]
call fcn.004029b0
push eax
mov ecx, str._SET:_
lea edi, [esp + 0x4c]
mov byte [esp + 0x154], bl
call fcn.004027c0
push eax
mov ecx, 0x568fac
lea edi, [esp + 0x6c]
mov byte [esp + 0x158], 9
call fcn.004027c0
push eax
mov ecx, str.__PARAM:_
lea edi, [esp + 0x8c]
mov byte [esp + 0x15c], 0xa
call fcn.004027c0
lea edx, [esp + 0xa8]
push edx
push eax
lea esi, [esp + 0x24]
mov byte [esp + 0x164], 0xb
call fcn.00405480
push eax
mov ecx, 0x5662c0
lea edi, [esp + 0x140]
mov byte [esp + 0x168], 0xc
call fcn.004027c0
add esp, 0x18
mov ecx, esi
call fcn.00402790
lea ecx, [esp + 0x80]
call fcn.00402790
lea ecx, [esp + 0x64]
call fcn.00402790
lea ecx, [esp + 0x48]
call fcn.00402790
lea ecx, [esp + 0x2c]
mov byte [esp + 0x150], 0x12
call fcn.00402790
push str.XdictTool.exe
lea ecx, [esp + 0xbc]
call fcn.004029b0
lea eax, [esp + 0xb8]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x150], 0x13
call fcn.004037a0
push 0xffffffffffffffff
push 0
mov byte [esp + 0x158], 0x14
push eax
lea ecx, [esp + 0xc4]
call fcn.004025b0
lea ecx, [esp + 0x2c]
call fcn.00402790
cmp dword [esp + 0x140], ebx
mov ecx, dword [esp + 0x12c]
jae 0x4889d9
lea ecx, [esp + 0x12c]
cmp dword [esp + 0xd0], ebx
mov eax, dword [esp + 0xbc]
jae 0x4889f0
lea eax, [esp + 0xbc]
push 0
push 0
push ecx
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0xb8]
call fcn.00402790
lea ecx, [esp + 0x128]
call fcn.00402790
lea ecx, [esp + 0x9c]
call fcn.00402790
lea ecx, [esp + 0xd4]
call fcn.00402790
lea ecx, [esp + 0xf0]
call fcn.00402790
lea ecx, [esp + 0x10c]
call fcn.00402790
xor al, al
mov ecx, dword [esp + 0x148]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x134]
xor ecx, esp
call fcn.0050fe87
add esp, 0x144
ret
lea ecx, [esp + 0xd4]
call fcn.00402790
lea ecx, [esp + 0xf0]
call fcn.00402790
cmp dword [esp + 0x124], ebx
jb 0x488aa5
mov eax, dword [esp + 0x110]
push eax
call fcn.004e946d
add esp, 4
mov al, 1
jmp 0x488a4d