Function at 0x425500
Capabilities:
Check if file exists
Delete file
Get file attributes
Get system information on windows
Move file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b740a
mov eax, dword fs:[0]
push eax
sub esp, 0x678
mov eax, dword [0x63406c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x620], ebx
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0xb8]
push 0x45
push str.http:__fufei.ahhxwavi.cn_api_soft_download_info_dkpc__sys___packdate_
mov word [ebx + 0x508], 0x101
mov dword [ebp - 0xa4], 0xf
mov dword [ebp - 0xa8], 0
mov byte [ebp - 0xb8], 0
call fcn.004229d0
mov edx, 6
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x48]
call fcn.00434cd0
mov esi, eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.00436680
mov byte [ebp - 4], 2
cmp dword [esi + 0x14], 8
jb 0x4255a1
mov esi, dword [esi]
cmp dword [eax + 0x14], 8
jb 0x4255a9
mov eax, dword [eax]
push esi
push eax
lea eax, [ebp - 0x88]
push str._s_s.zip
push eax
call fcn.00434a70
add esp, 0x10
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4255d4
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00423720
xor eax, eax
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x34]
cmp eax, 8
jb 0x425601
inc eax
lea ecx, [ebp - 0x48]
push eax
push dword [ebp - 0x48]
call fcn.00423720
xor eax, eax
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], 0
mov word [ebp - 0x48], ax
call fcn.0042ca50
push 1
push 0x61bae4
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x8c], 0xf
mov esi, eax
mov dword [ebp - 0x90], 0
mov byte [ebp - 0xa0], 0
call fcn.004229d0
mov byte [ebp - 4], 6
push 1
cmp esi, 6
jle 0x42565b
push 0x61bae8
jmp 0x425669
jge 0x425664
push 0x61baec
jmp 0x425669
push 0x61bae4
lea ecx, [ebp - 0xa0]
call fcn.004229d0
push 5
push 0x61baf0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.004229d0
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 7
push eax
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x28]
call fcn.004354c0
mov byte [ebp - 4], 6
add esp, 4
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x4256ca
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00423840
push 0xa
push str._packdate_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.004229d0
sub esp, 0x18
mov byte [ebp - 4], 8
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], 0
jb 0x42571a
mov eax, dword [ecx]
jmp 0x42571c
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
push edx
push 0x6406e8
mov word [eax], dx
call fcn.004231f0
lea ecx, [ebp - 0x48]
call fcn.004340c0
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 9
push ecx
mov edx, eax
lea ecx, [ebp - 0x28]
call fcn.004354c0
mov eax, dword [ebp - 0x34]
add esp, 0x1c
cmp eax, 0x10
jb 0x425763
inc eax
lea ecx, [ebp - 0x48]
push eax
push dword [ebp - 0x48]
call fcn.00423840
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x34], 0xf
mov dword [ebp - 0x38], 0
mov byte [ebp - 0x48], 0
cmp eax, 0x10
jb 0x42578a
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00423840
push 0x9c
lea eax, [ebp - 0x1b4]
push 0
push eax
call fcn.0058b680
add esp, 0xc
lea ecx, [ebp - 0x1b4]
call fcn.00420c60
mov byte [ebp - 4], 0xa
xor esi, esi
cmp dword [ebp - 0x74], 8
lea edx, [ebp - 0x88]
mov dword [ebp - 0x14], 7
cmovae edx, dword [ebp - 0x88]
xor eax, eax
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
cmp word [edx], ax
jne 0x4257df
xor ecx, ecx
jmp 0x4257f3
mov ecx, edx
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4257e4
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.00423580
push ecx
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x28]
cmp dword [ebp - 0xa4], 0x10
lea eax, [ebp - 0xb8]
push ecx
cmovae eax, dword [ebp - 0xb8]
lea ecx, [ebp - 0x1b4]
push eax
push ebx
call fcn.00421d10
mov byte [ebp - 4], 0xa
mov bl, al
mov ecx, dword [ebp - 0x14]
cmp ecx, 8
jb 0x425842
inc ecx
push ecx
push dword [ebp - 0x28]
lea ecx, [ebp - 0x28]
call fcn.00423720
test bl, bl
jne 0x425856
mov ebx, dword [ebp - 0x620]
inc esi
cmp esi, 0xa
jl 0x4257b1
cmp dword [ebp - 0x74], 8
lea eax, [ebp - 0x88]
cmovae eax, dword [ebp - 0x88]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x4258df
cmp dword [ebp - 0x74], 8
lea edx, [ebp - 0x88]
mov dword [ebp - 0x14], 7
cmovae edx, dword [ebp - 0x88]
xor eax, eax
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
cmp word [edx], ax
jne 0x4258a1
xor ecx, ecx
jmp 0x4258b5
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4258a6
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.00423580
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x2c], 1
call fcn.00436b40
test edx, edx
jl 0x4258df
jg 0x4258db
cmp eax, 0x400
jb 0x4258df
xor bl, bl
jmp 0x4258e1
mov bl, 1
test byte [ebp - 0x2c], 1
je 0x4258fc
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4258fc
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00423720
test bl, bl
je 0x425922
mov eax, dword [ebp - 0x620]
push 3
mov ecx, dword [eax + 0x53c]
mov byte [eax + 0x509], 0
mov eax, dword [ecx]
call dword [eax + 0x200]
jmp 0x4263f6
cmp dword [ebp - 0x74], 8
lea ecx, [ebp - 0x88]
cmovae ecx, dword [ebp - 0x88]
sub esp, 8
call fcn.00433e00
mov edi, eax
mov dword [ebp - 0x614], 0
xor eax, eax
mov dword [ebp - 0x618], edi
add esp, 8
mov word [ebp - 0x610], ax
mov dword [ebp - 0x3e8], eax
test edi, edi
je 0x425e9b
cmp dword [edi], 1
je 0x42597b
mov dword [0x6406bc], 0x80000
jmp 0x425e62
mov ecx, dword [edi + 4]
lea eax, [ebp - 0x614]
push eax
push 0xffffffffffffffff
call fcn.004332f0
xor ebx, ebx
mov dword [0x6406bc], eax
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x614], ebx
jle 0x425e62
xor eax, eax
mov dword [ebp - 0x3e4], 0
mov word [ebp - 0x3e0], ax
mov dword [ebp - 0x1b8], eax
cmp dword [edi], 1
je 0x4259cc
mov dword [0x6406bc], 0x80000
jmp 0x4259e8
mov ecx, dword [edi + 4]
lea eax, [ebp - 0x3e4]
push eax
push ebx
call fcn.004332f0
mov dword [0x6406bc], eax
mov ax, word [ebp - 0x3e0]
mov dword [ebp - 0x4c], 0xf
mov dword [ebp - 0x50], 0
mov byte [ebp - 0x60], 0
mov byte [ebp - 4], 0xc
xor ecx, ecx
mov dword [ebp - 0xbc], 7
mov dword [ebp - 0xc0], 0
mov word [ebp - 0xd0], cx
test ax, ax
je 0x425a3f
lea ecx, [ebp - 0x3e0]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x425a30
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x3e0]
push eax
lea ecx, [ebp - 0xd0]
call fcn.00423580
mov byte [ebp - 4], 0xd
call fcn.0042d850
test eax, eax
je 0x426327
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x620]
add eax, 0x478
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], 8
jb 0x425a87
mov eax, dword [eax]
lea ecx, [ebp - 0x3e0]
push ecx
push eax
lea eax, [ebp - 0x30]
push 0x61ba14
push eax
call fcn.004297f0
mov esi, dword [ebp - 0x30]
add esp, 0x10
cmp dword [esi - 4], 1
jle 0x425ab7
push dword [esi - 0xc]
lea ecx, [ebp - 0x30]
call fcn.0042d2b0
mov esi, dword [ebp - 0x30]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [esi - 4], 1
jle 0x425ad2
push dword [esi - 0xc]
lea ecx, [ebp - 0x30]
call fcn.0042d2b0
mov esi, dword [ebp - 0x30]
cmp dword [edi], 1
je 0x425ae8
mov dword [0x6406bc], 0x80000
mov eax, 0x80000
jmp 0x425afa
mov ecx, dword [edi + 4]
sub esp, 8
push esi
push ebx
call fcn.00433a30
mov dword [0x6406bc], eax
test eax, eax
je 0x425d3a
mov edx, 0xa
lea ecx, [ebp - 0x66c]
call fcn.00434cd0
mov edi, eax
mov byte [ebp - 4], 0xf
cmp dword [edi + 0x14], 8
jb 0x425b20
mov edi, dword [edi]
mov ebx, dword [ebp - 0x620]
mov eax, dword [ebx + 0x474]
cmp dword [eax - 4], 1
jle 0x425b40
push dword [eax - 0xc]
lea ecx, [ebx + 0x474]
call fcn.0042d2b0
push dword [ebp - 0x2c]
lea eax, [ebp - 0x28]
push edi
push dword [ebx + 0x474]
push str._s_s_d.del
push eax
call fcn.00434a70
add esp, 0x14
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x658]
cmp eax, 8
jb 0x425b7d
inc eax
lea ecx, [ebp - 0x66c]
push eax
push dword [ebp - 0x66c]
call fcn.00423720
xor eax, eax
mov dword [ebp - 0x658], 7
lea ecx, [ebp - 0x644]
mov dword [ebp - 0x65c], 0
mov word [ebp - 0x66c], ax
lea edx, [eax + 5]
call fcn.00434cd0
mov edi, eax
lea ecx, [ebp - 0x684]
mov byte [ebp - 4], 0x12
call fcn.00436680
mov byte [ebp - 4], 0x13
cmp dword [edi + 0x14], 8
jb 0x425bc5
mov edi, dword [edi]
cmp dword [eax + 0x14], 8
jb 0x425bcd
mov eax, dword [eax]
mov ebx, dword [ebp - 0x2c]
push ebx
push edi
push eax
lea eax, [ebp - 0x48]
push str._s_s_d.del
push eax
call fcn.00434a70
add esp, 0x14
mov eax, dword [ebp - 0x670]
cmp eax, 8
jb 0x425c02
inc eax
lea ecx, [ebp - 0x684]
push eax
push dword [ebp - 0x684]
call fcn.00423720
xor eax, eax
mov dword [ebp - 0x670], 7
mov dword [ebp - 0x674], 0
mov word [ebp - 0x684], ax
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x630]
cmp eax, 8
jb 0x425c41
inc eax
lea ecx, [ebp - 0x644]
push eax
push dword [ebp - 0x644]
call fcn.00423720
xor eax, eax
mov dword [ebp - 0x630], 7
cmp dword [ebp - 0x14], 8
lea edi, [ebp - 0x28]
mov dword [ebp - 0x634], 0
cmovae edi, dword [ebp - 0x28]
cmp dword [esi - 4], 1
mov word [ebp - 0x644], ax
jle 0x425c7d
push dword [esi - 0xc]
lea ecx, [ebp - 0x30]
call fcn.0042d2b0
mov esi, dword [ebp - 0x30]
push edi
push esi
call fcn.0058f6e6
add esp, 8
lea ecx, [ebp - 0x48]
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x28]
cmovae ecx, dword [ebp - 0x48]
cmp dword [ebp - 0x14], 8
push ecx
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
push 4
cmovae eax, dword [ebp - 0x48]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileExW]
cmp dword [esi - 4], 1
jle 0x425ccf
push dword [esi - 0xc]
lea ecx, [ebp - 0x30]
call fcn.0042d2b0
mov esi, dword [ebp - 0x30]
mov edi, dword [ebp - 0x618]
cmp dword [edi], 1
je 0x425ce6
mov dword [0x6406bc], 0x80000
jmp 0x425cf8
mov ecx, dword [edi + 4]
sub esp, 8
push esi
push ebx
call fcn.00433a30
mov dword [0x6406bc], eax
mov eax, dword [ebp - 0x34]
cmp eax, 8
jb 0x425d0d
inc eax
lea ecx, [ebp - 0x48]
push eax
push dword [ebp - 0x48]
call fcn.00423720
xor eax, eax
mov byte [ebp - 4], 0xe
mov word [ebp - 0x48], ax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], 0
cmp eax, 8
jb 0x425d3a
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00423720
movd xmm0, dword [ebp - 0x614]
lea edx, [ebp - 0x61c]
movd xmm1, ebx
lea ecx, [ebp - 0x28]
cvtdq2ps xmm1, xmm1
mov eax, dword [ebp - 0x620]
mov dword [ebp - 0x61c], eax
lea eax, [ebp - 0x2c]
push eax
push 0
cvtdq2ps xmm0, xmm0
push fcn.004265c0
divss xmm1, xmm0
mulss xmm1, dword [0x61e108]
addss xmm1, dword [0x61e10c]
movss dword [ebp - 0x2c], xmm1
call fcn.00429810
mov eax, dword [ebp - 0x28]
add esp, 0xc
mov dword [ebp - 0x64c], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x648], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x644], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x640], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x63c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x638], eax
lea eax, [ebp - 0x654]
mov dword [ebp - method.._AV___Func_impl_V__WeakCallback_V___Binder_U_Unforced_std__AAP8CMainWnd__AEXM_ZABQAV3_AAM_std___nbase__V__allocator_H_std__X__V_std__.virtual_0], vtable.._AV___Func_impl_V__WeakCallback_V___Binder_U_Unforced_std__AAP8CMainWnd__AEXM_ZABQAV3_AAM_std___nbase__V__allocator_H_std__X__V_std__.0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x630], eax
mov edx, eax
mov byte [ebp - 4], 0x18
call fcn.004371f0
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x630]
test ecx, ecx
je 0x425e14
mov edx, dword [ecx]
lea eax, [ebp - 0x654]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov byte [ebp - 4], 0xd
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x425e30
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0xbc]
cmp eax, 8
jb 0x425e4e
inc eax
lea ecx, [ebp - 0xd0]
push eax
push dword [ebp - 0xd0]
call fcn.00423720
inc ebx
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x2c], ebx
cmp ebx, dword [ebp - 0x614]
jl 0x4259a2
cmp dword [edi], 1
je 0x425e73
mov dword [0x6406bc], 0x80000
jmp 0x425ea5
mov esi, dword [edi + 4]
mov ecx, esi
call fcn.00433da0
mov dword [0x6406bc], eax
test esi, esi
je 0x425e8e
push ecx
mov ecx, esi
call fcn.00433ed0
push 8
push edi
call fcn.005728a3
add esp, 8
jmp 0x425ea5
mov dword [0x6406bc], 0x10000
cmp dword [ebp - 0x74], 8
lea eax, [ebp - 0x88]
cmovae eax, dword [ebp - 0x88]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edi, dword [ebp - 0x620]
lea eax, [ebp - 0x61c]
push eax
push 0
push fcn.004265c0
lea edx, [ebp - 0x618]
mov dword [ebp - 0x61c], 0x60
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x618], edi
call fcn.00429940
mov eax, dword [ebp - 0x28]
add esp, 0xc
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], vtable.._AV___Func_impl_V__WeakCallback_V___Binder_U_Unforced_std__AAP8CMainWnd__AEXM_ZABQAV3_AAH_std___nbase__V__allocator_H_std__X__V_std__.0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x4c], eax
mov edx, eax
mov byte [ebp - 4], 0x1b
call fcn.004371f0
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x425f58
mov edx, dword [ecx]
lea eax, [ebp - 0x70]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov ecx, edi
mov byte [ebp - 4], 0xa
call fcn.004266b0
mov ecx, edi
call fcn.004282f0
lea eax, [ebp - 0x61c]
mov dword [ebp - 0x61c], 0x61
push eax
push 0
push fcn.004265c0
lea edx, [ebp - 0x618]
mov dword [ebp - 0x618], edi
lea ecx, [ebp - 0x28]
call fcn.00429940
mov eax, dword [ebp - 0x28]
add esp, 0xc
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], vtable.._AV___Func_impl_V__WeakCallback_V___Binder_U_Unforced_std__AAP8CMainWnd__AEXM_ZABQAV3_AAH_std___nbase__V__allocator_H_std__X__V_std__.0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x4c], eax
mov edx, eax
mov byte [ebp - 4], 0x1e
call fcn.004371f0
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x425fff
mov edx, dword [ecx]
lea eax, [ebp - 0x70]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
push str.GetNativeSystemInfo
mov byte [ebp - 4], 0xa
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.kernel32
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, dword [sym.imp.KERNEL32.dll_GetSystemInfo]
test eax, eax
je 0x426031
lea ecx, [ebp - 0x118]
push ecx
call eax
jmp 0x42603a
lea eax, [ebp - 0x118]
push eax
call esi
mov ecx, dword [edi + 0x53c]
push 3
mov eax, dword [ecx]
call dword [eax + 0x200]
sub esp, 0x18
mov edi, esp
mov dword [ebp - 0x61c], esp
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], 0
jb 0x426080
mov eax, dword [ecx]
jmp 0x426082
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
push edx
push 0x640748
mov word [eax], dx
call fcn.004231f0
mov ecx, edi
call fcn.004340c0
mov ecx, esp
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x618], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x4260cd
mov eax, dword [ecx]
jmp 0x4260cf
mov eax, ecx
push 4
push str.done
mov byte [eax], 0
call fcn.004229d0
sub esp, 0x18
mov byte [ebp - 4], 0x21
mov ecx, esp
mov dword [ebp - 0x2c], esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x426110
mov eax, dword [ecx]
jmp 0x426112
mov eax, ecx
push 4
push str.inst
mov byte [eax], 0
call fcn.004229d0
mov byte [ebp - 4], 0x22
sub esp, 0x18
mov edi, esp
mov dword [ebp - 0x30], esp
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], 0
jb 0x426158
mov eax, dword [ecx]
jmp 0x42615a
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
push edx
push 0x640718
mov word [eax], dx
call fcn.004231f0
mov ecx, edi
call fcn.004340c0
mov byte [ebp - 4], 0x23
mov edi, esp
mov dword [ebp - 0x62c], esp
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], 0
jb 0x4261aa
mov eax, dword [ecx]
jmp 0x4261ac
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
push edx
push 0x640730
mov word [eax], dx
call fcn.004231f0
mov ecx, edi
call fcn.004340c0
mov byte [ebp - 4], 0x24
mov edi, esp
mov dword [ebp - 0x624], esp
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], 0
jb 0x4261fc
mov eax, dword [ecx]
jmp 0x4261fe
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
push edx
push 0x640700
mov word [eax], dx
call fcn.004231f0
mov ecx, edi
call fcn.004340c0
mov edi, esp
mov byte [ebp - 4], 0x25
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], 0
jb 0x426248
mov eax, dword [ecx]
jmp 0x42624a
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
push edx
push 0x640760
mov word [eax], dx
call fcn.004231f0
mov ecx, edi
call fcn.004340c0
add esp, 0x18
mov byte [ebp - 4], 0xa
call fcn.00428850
mov edi, dword [ebp - 0x620]
lea eax, [ebp - 0x61c]
push eax
push 0
push fcn.004265c0
lea edx, [ebp - 0x618]
mov dword [ebp - 0x61c], 0x62
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x618], edi
call fcn.00429940
mov eax, dword [ebp - 0x28]
add esp, 0xc
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], vtable.._AV___Func_impl_V__WeakCallback_V___Binder_U_Unforced_std__AAP8CMainWnd__AEXM_ZABQAV3_AAH_std___nbase__V__allocator_H_std__X__V_std__.0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x4c], eax
mov edx, eax
mov byte [ebp - 4], 0x27
call fcn.004371f0
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x42630a
mov edx, dword [ecx]
lea eax, [ebp - 0x70]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov ecx, edi
mov byte [ebp - 4], 0xa
call fcn.00426fe0
mov byte [edi + 0x509], 0
call fcn.0042d850
mov ecx, eax
test ecx, ecx
jne 0x426331
push 0x80004005
call fcn.0042d5c0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x2c], eax
push str.GetNativeSystemInfo
push str.kernel32
mov byte [ebp - 4], 0x29
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x426362
lea ecx, [ebp - 0xf4]
push ecx
call eax
jmp 0x42636b
lea eax, [ebp - 0xf4]
push eax
call esi
cmp dword [edi + 0x48c], 8
lea esi, [edi + 0x478]
mov ax, word [ebp - 0xf4]
jb 0x426385
mov eax, dword [esi]
jmp 0x426387
mov eax, esi
push str.MultiWeChat.exe
push eax
lea eax, [ebp - 0x2c]
push 0x61ba14
push eax
call fcn.004297f0
add esp, 0x10
cmp dword [esi + 0x14], 8
jb 0x4263a6
mov esi, dword [esi]
push ecx
mov ecx, esp
mov dword [ebp - 0x628], esp
push esi
call fcn.0042cdb0
push ecx
mov byte [ebp - 4], 0x2a
mov esi, esp
mov dword [ebp - 0x624], esi
mov edi, dword [ebp - 0x2c]
add edi, 0xfffffff0
mov ecx, edi
call fcn.0042cb20
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 0x29
call fcn.004280b0
mov byte [ebp - 4], 0xa
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4263f6
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x1b4]
call fcn.00420ce0
mov eax, dword [ebp - 0x8c]
cmp eax, 0x10
jb 0x42641f
inc eax
lea ecx, [ebp - 0xa0]
push eax
push dword [ebp - 0xa0]
call fcn.00423840
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x8c], 0xf
mov dword [ebp - 0x90], 0
mov byte [ebp - 0xa0], 0
cmp eax, 8
jb 0x426455
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.00423720
xor eax, eax
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x78], 0
cmp eax, 0x10
jb 0x42648a
inc eax
lea ecx, [ebp - 0xb8]
push eax
push dword [ebp - 0xb8]
call fcn.00423840
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0057282e
mov esp, ebp
pop ebp
ret