Function at 0x47d51c
Capabilities:
Check if file exists
Check mutex on windows
Create thread
Parse pe header
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e40d3
mov eax, dword fs:[0]
push eax
mov eax, 0x106c
call fcn.005933d0
mov eax, dword [0x6c75ac]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 0x10]
mov ebx, dword [ebp + 8]
and dword [ebp - 0x1008], 0
push 0x8007
mov dword [ebp - 0xfe0], edi
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0x47ce13
mov dword [0x6d2a44], ebx
call fcn.005ae8a8
xor eax, eax
push eax
push eax
call fcn.00531a30
add esp, 0xc
call fcn.005314e0
mov dword [ebp - 0xfd0], eax
test edi, edi
je 0x47d5e7
push edi
call fcn.005ae8e0
pop ecx
lea edi, [eax + 1]
cmp edi, 0x3fffffff
jg 0x47d5e1
lea eax, [edi + edi]
call fcn.00593a70
mov esi, esp
test esi, esi
je 0x47d5e1
push edi
mov edi, dword [ebp - 0xfe0]
xor eax, eax
push esi
push 0xffffffffffffffff
push edi
push eax
push 3
mov word [esi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor ecx, ecx
test eax, eax
cmove esi, ecx
jmp 0x47d5e9
mov edi, dword [ebp - 0xfe0]
xor esi, esi
push esi
lea ecx, [ebp - 0xac4]
call fcn.0040b0d5
xor esi, esi
lea ecx, [ebp - 0xac4]
push esi
push str._LaunchUninstallMsgBox
call fcn.0040aff3
cmp eax, 0xffffffff
je 0x47d633
push 4
push 0x64a670
push str._fTxS
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x4800ec
call fcn.00491863
jmp 0x4800ec
lea eax, [ebp - 0xfe8]
mov dword [ebp - 0xfe8], esi
push eax
push str.debug_modle
mov edx, str.Software360360huabaohuabao
mov ecx, reloc.WS2_32.dll_accept
call fcn.00425cdd
pop ecx
pop ecx
xor ecx, ecx
inc ecx
test eax, eax
je 0x47d6b0
cmp dword [ebp - 0xfe8], ecx
jne 0x47d6b0
lea eax, [ebp - 0xfe8]
mov dword [ebp - 0xfe8], esi
push eax
push str.debug_worker
mov edx, str.Software360360huabaohuabao
mov ecx, reloc.WS2_32.dll_accept
call fcn.00425cdd
pop ecx
pop ecx
xor ecx, ecx
inc ecx
test eax, eax
je 0x47d6a2
mov eax, dword [0x6d2c60]
cmp dword [ebp - 0xfe8], ecx
cmove eax, ecx
mov dword [0x6d2c60], eax
mov dword [0x6d2c58], ecx
mov dword [0x6d2c5c], ecx
jmp 0x47d6b6
mov dword [0x6d2c58], esi
lea eax, [ebp - 0xfe8]
mov dword [ebp - 0xfe8], esi
push eax
push str.debug_log
mov edx, str.Software360360huabaohuabao
mov ecx, reloc.WS2_32.dll_accept
call fcn.00425cdd
pop ecx
test eax, eax
mov eax, dword [0x6d2c5c]
pop ecx
je 0x47d6f3
xor ecx, ecx
inc ecx
cmp dword [ebp - 0xfe8], ecx
cmove eax, ecx
mov dword [0x6d2c5c], eax
test eax, eax
je 0x47d713
push 0x64a6d8
push edi
call fcn.005ac820
pop ecx
pop ecx
test eax, eax
jne 0x47d713
mov ecx, dword [0x6d8b4c]
call fcn.00479e7a
cmp dword [ebp - 0xab0], 8
lea eax, [ebp - 0xac4]
cmovae eax, dword [ebp - 0xac4]
push eax
push 0x5ca
push str.WinMain
push str.__s__d___360huabao_WinMain__cmdline_s__r_n
call fcn.0040a649
add esp, 0x10
call fcn.004c4cd0
push 5
pop edi
test eax, eax
jne 0x47d999
call fcn.00426bbc
cmp eax, edi
je 0x47d999
call fcn.004275ae
test eax, eax
je 0x47d999
push esi
mov esi, str._low
lea ecx, [ebp - 0xac4]
push esi
call fcn.0040aff3
cmp eax, 0xffffffff
jne 0x47d999
push 0
push str.__type
lea ecx, [ebp - 0xac4]
call fcn.0040aff3
cmp eax, 0xffffffff
jne 0x47d999
lea ecx, [ebp - 0xa64]
call fcn.004c2598
push 0x5cf
push str.WinMain
push str.__s__d___ShouldLaunchWithLowPrivelege
call fcn.0040a649
add esp, 0xc
cmp dword [ebp - 0xa54], 0
je 0x47d983
push 0x62b0fc
call fcn.005baec0
pop ecx
push eax
push 0x62b0fc
lea ecx, [ebp - 0xa64]
call fcn.0040b220
cmp dword [ebp - 0xa50], 8
lea eax, [ebp - 0xa64]
cmovae eax, dword [ebp - 0xa64]
push eax
push 0x5d3
push str.WinMain
push str.__s__d___szExePath___s
call fcn.0040a649
add esp, 0x10
lea eax, [ebp - 0xa64]
cmp dword [ebp - 0xa50], 8
cmovae eax, dword [ebp - 0xa64]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47d983
cmp dword [ebp - 0xa50], 8
lea eax, [ebp - 0xa64]
cmovae eax, dword [ebp - 0xa64]
push eax
call fcn.004302c7
pop ecx
test eax, eax
je 0x47d983
cmp dword [ebp - 0xab4], 0
mov eax, str.__low
cmovne esi, eax
push esi
call fcn.005baec0
pop ecx
push eax
push esi
lea ecx, [ebp - 0xac4]
call fcn.0040b220
and dword [ebp - 0xfd4], 0
lea edx, [ebp - 0xa64]
push 0x62b23c
lea ecx, [ebp - 0xa34]
call fcn.0041154e
pop ecx
lea ecx, [ebp - 0xac4]
push ecx
mov ecx, eax
call fcn.004114f9
push eax
lea ecx, [ebp - 0xaac]
call fcn.0040b65a
xor esi, esi
lea ecx, [ebp - 0xa34]
inc esi
mov dword [ebp - 4], esi
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xaac]
cmp dword [ebp - 0xa98], 8
cmovae eax, dword [ebp - 0xaac]
push eax
push 0x5d9
push str.WinMain
push str.__s__d___CreateLowerProcess_strcmd__s
call fcn.0040a649
cmp dword [ebp - 0xa98], 8
lea eax, [ebp - 0xfd4]
push eax
lea ecx, [ebp - 0xaac]
mov edx, esi
cmovae ecx, dword [ebp - 0xaac]
push 0
call fcn.004316f4
add esp, 0x18
test eax, eax
je 0x47d975
cmp dword [ebp - 0xa98], 8
lea eax, [ebp - 0xaac]
cmovae eax, dword [ebp - 0xaac]
push eax
push 0x5db
push str.WinMain
push str.__s__d___ShouldLaunchWithLowPrivelege_szCommandLine___s
call fcn.0040a649
add esp, 0x10
lea ecx, [ebp - 0xaac]
mov dword [ebp - 4], 2
call fcn.0040b67e
lea ecx, [ebp - 0xa64]
mov dword [ebp - 4], 3
call fcn.0040b67e
jmp 0x4800ec
lea ecx, [ebp - 0xaac]
mov dword [ebp - 4], edi
call fcn.0040b67e
lea ecx, [ebp - 0xa64]
mov dword [ebp - 4], 6
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
mov edx, fcn.004302c7
mov ecx, ebx
call fcn.0043074a
call fcn.0041ee35
mov ecx, eax
call fcn.0041ee6b
call fcn.0040ba6d
mov ecx, eax
call fcn.0040bac0
xor eax, eax
mov ecx, 0x6d8dd8
push eax
push ebx
push eax
call fcn.004812bc
call fcn.0043101d
mov edx, fcn.0042667e
mov ecx, ebx
call fcn.0043074a
lea eax, [ebp - 0x100c]
xor ebx, ebx
push eax
push str.enable
mov edx, str.Software360360huabaohuabao
mov dword [ebp - 0x100c], ebx
mov ecx, reloc.WS2_32.dll_accept
call fcn.00425cdd
pop ecx
pop ecx
call fcn.004c4cd0
mov esi, dword [ebp - 0xfe0]
test eax, eax
je 0x47da49
xor eax, eax
inc eax
cmp dword [ebp - 0x100c], eax
je 0x47da49
push 0x64a6d8
push esi
call fcn.005ac820
pop ecx
pop ecx
test eax, eax
jne 0x47da49
push 0x5f0
push str.WinMain
push str.__s__d___huabao_enable_close
call fcn.0040a649
add esp, 0xc
jmp 0x4800a9
push ebx
push 0x648024
lea ecx, [ebp - 0xac4]
call fcn.0040aff3
cmp eax, 0xffffffff
je 0x47da93
call fcn.004c4cd0
test eax, eax
jne 0x47da93
call fcn.0047a77c
test al, al
je 0x47da93
push 0x64a6d8
push esi
call fcn.005ac820
pop ecx
pop ecx
test eax, eax
jne 0x47da93
push 0x5f5
push str.WinMain
push str.__s__d___360ScreenSaver_exist
jmp 0x47da3c
call fcn.00479f36
test eax, eax
jne 0x47dab4
push 0x40
push 0x628fa0
push 0x628fb0
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4800a9
push 0x62ad1c
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.005317a0
mov ebx, eax
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 7
call fcn.00404812
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4c]
test ebx, ebx
je 0x47db8e
push str.crashcfg
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xaac]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531830
push 8
pop esi
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], esi
call fcn.00404812
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xa9c], 0
je 0x47db73
cmp dword [ebp - 0xa98], esi
lea eax, [ebp - 0xaac]
push 0
cmovae eax, dword [ebp - 0xaac]
mov ecx, 0x6dd280
push eax
push ebx
call fcn.004aed22
cmp dword [0x6d2a24], 0
jne 0x47db73
mov ecx, 0x6dd200
call fcn.004ae3df
mov dword [ebp - 4], 9
lea ecx, [ebp - 0xaac]
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
jmp 0x4800a9
push esi
call fcn.004045aa
lea ecx, [ebp - 0xa4c]
call fcn.00420adc
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0xb
call fcn.00404812
or dword [ebp - 4], 0xffffffff
call fcn.00412558
mov ecx, str.360huabao
call fcn.0041256f
call fcn.0047d4cf
and dword [ebp - 0xffc], 0
xor eax, eax
inc eax
mov edx, str.Software360360huabaohuabao
mov byte [ebp - 0xfc9], al
mov ecx, reloc.WS2_32.dll_accept
lea eax, [ebp - 0xffc]
push eax
push str.multienable
call fcn.00425cdd
pop ecx
pop ecx
push str.desk
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531990
mov byte [ebp - 0xfd5], al
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0xc
call fcn.00404812
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4c]
push str.window
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531990
mov bl, al
mov byte [ebp - 0xfed], bl
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0xd
call fcn.00404812
or dword [ebp - 4], 0xffffffff
test bl, bl
mov ecx, dword [0x6d2c50]
push 6
pop eax
cmovne ecx, eax
push 0x64a6d8
push esi
mov dword [0x6d2c50], ecx
call fcn.005ac820
pop ecx
pop ecx
test eax, eax
jne 0x47dc9f
test bl, bl
je 0x47dcab
call fcn.004450bd
mov ecx, eax
call fcn.0044519f
xor ecx, ecx
xor eax, eax
inc ecx
movzx eax, al
cmp dword [ebp - 0xffc], ecx
push 0x64a974
cmove eax, ecx
mov dword [ebp - 0xff8], eax
movzx eax, cl
xor ecx, ecx
test bl, bl
cmovne eax, ecx
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 0xfd4], eax
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531990
mov bl, al
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0xe
call fcn.00404812
or dword [ebp - 4], 0xffffffff
test bl, bl
je 0x47dd23
call fcn.004450bd
mov ecx, eax
call fcn.0044519f
xor ebx, ebx
mov al, bl
jmp 0x47dd2b
mov eax, dword [ebp - 0xfd4]
xor ebx, ebx
test al, al
je 0x47dd75
mov cl, byte [ebp - 0xff8]
call fcn.0047a5e0
test eax, eax
jne 0x47dd5e
mov byte [ebp - 0xfc9], bl
call fcn.0047a5b8
test eax, eax
je 0x47dd75
push 0x63f
push str.WinMain
push str.__s__d___set_high_dpi_ok__r_n
jmp 0x47dd6d
push 0x644
push str.WinMain
push str.__s__d___set_SetMytProcessDpiAwareness_ok__r_n
call fcn.0040a649
add esp, 0xc
push 0x64aa0c
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531990
mov bl, al
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0xf
call fcn.00404812
or dword [ebp - 4], 0xffffffff
test bl, bl
je 0x47ddbe
call fcn.0047a2c3
jmp 0x4800a9
push 0x64a6d8
push esi
call fcn.005ac820
pop ecx
pop ecx
test eax, eax
je 0x47df7c
push 0x208
xor ebx, ebx
lea eax, [ebp - 0x424]
push ebx
push eax
call fcn.005aa3d0
cmp dword [ebp - 0xab0], 8
lea eax, [ebp - 0x424]
lea ecx, [ebp - 0xac4]
mov edx, 0x64aa10
cmovae ecx, dword [ebp - 0xac4]
push 0x103
push eax
call fcn.00427957
add esp, 0x14
mov edi, str.chrome_child.dll
sub esp, 0x18
mov ecx, esp
push edi
test eax, eax
je 0x47dec7
call fcn.0040b0d5
sub esp, 0x18
lea eax, [ebp - 0x424]
mov ecx, esp
push eax
call fcn.0040b0d5
lea ecx, [ebp - 0xa34]
call fcn.004c2ea6
add esp, 0x30
cmp dword [eax + 0x14], 8
jb 0x47de53
mov eax, dword [eax]
push eax
call fcn.004302c7
pop ecx
mov esi, eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x10
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x4800a9
push 8
push ebx
sub esp, 0x18
mov ecx, esp
push edi
call fcn.0040b0d5
sub esp, 0x18
lea eax, [ebp - 0x424]
mov ecx, esp
push eax
call fcn.0040b0d5
lea ecx, [ebp - 0xa34]
call fcn.004c2ea6
add esp, 0x30
cmp dword [eax + 0x14], 8
jb 0x47deaf
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov esi, eax
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0xa34]
jmp 0x47df43
call fcn.0040b0d5
lea ecx, [ebp - 0xa34]
call fcn.004c297a
add esp, 0x18
cmp dword [eax + 0x14], 8
jb 0x47dee2
mov eax, dword [eax]
push eax
call fcn.004302c7
pop ecx
mov esi, eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x12
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x4800a9
push 8
push ebx
sub esp, 0x18
mov ecx, esp
push edi
call fcn.0040b0d5
lea ecx, [ebp - 0xb84]
call fcn.004c297a
add esp, 0x18
cmp dword [eax + 0x14], 8
jb 0x47df2d
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov esi, eax
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0xb84]
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x4800a9
push str.ChromeShell
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4800a9
push 0x6d8e18
push dword [0x6d2a44]
call eax
pop ecx
pop ecx
jmp 0x4800a9
push 0x638f70
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.005317a0
mov dword [ebp - 0xfd4], eax
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x14
call fcn.00404812
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4c]
push 0x64aa4c
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.005317a0
mov dword [ebp - 0xfec], eax
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x15
call fcn.00404812
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4c]
push str.from
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa7c]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531830
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x16
call fcn.00404812
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa7c]
push 0x64aa50
call fcn.0041084d
push 4
pop ebx
test al, al
je 0x47e05d
mov dword [ebp - 0xfe4], 2
jmp 0x47e07b
push 0x64aa5c
lea ecx, [ebp - 0xa7c]
call fcn.0041084d
test al, al
je 0x47e080
mov dword [ebp - 0xfe4], 3
xor esi, esi
inc esi
jmp 0x47e0b9
push str.unistpic
lea ecx, [ebp - 0xa7c]
call fcn.0041084d
test al, al
je 0x47e099
xor esi, esi
inc esi
jmp 0x47e0b3
push str.wscore
lea ecx, [ebp - 0xa7c]
call fcn.0041084d
xor esi, esi
inc esi
test al, al
mov ebx, esi
cmovne ebx, edi
mov dword [ebp - 0xfe4], ebx
push 0x64aa78
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
lea eax, [ebp - 0xa94]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531830
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x17
call fcn.00404812
or dword [ebp - 4], 0xffffffff
call fcn.004c4cd0
test eax, eax
je 0x47e155
call fcn.004156ed
mov ebx, eax
push ebx
push 0x691
push str.WinMain
push str.__s__d___GetSysScreenOwnerStatus_sys_owner___d__r_n
call fcn.0040a649
add esp, 0x10
push 2
pop eax
cmp ebx, eax
jne 0x47e134
mov dword [ebp - 0xfe4], 3
jmp 0x47e155
cmp ebx, 3
jne 0x47e141
mov dword [ebp - 0xfe4], eax
jmp 0x47e155
xor eax, eax
cmp ebx, 4
lea esi, [eax + 1]
cmove esi, edi
mov dword [ebp - 0xfe4], esi
xor esi, esi
inc esi
push 0x64aae8
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
lea eax, [ebp - 0xa4c]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531990
mov bl, al
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x18
call fcn.00404812
or dword [ebp - 4], 0xffffffff
test bl, bl
je 0x47e708
call fcn.004c4cd0
neg eax
sbb eax, eax
xor ebx, ebx
add eax, 2
mov dword [ebp - 0xa58], ebx
mov dword [0x6d2c50], eax
lea eax, [ebp - 0xa58]
push ebx
push eax
mov dword [ebp - 0xa54], ebx
mov dword [ebp - 0xa50], ebx
call fcn.00424399
mov ecx, eax
call fcn.00424243
push dword [ebp - 0xffc]
call fcn.00426bbc
push eax
lea ecx, [ebp - 0xa58]
call fcn.0042478b
push eax
push 0x6a8
push str.WinMain
push str.__s__d___screens_size___d__osversion___d_multienable___d__r_n
call fcn.0040a649
add esp, 0x18
lea ecx, [ebp - 0xa58]
call fcn.0042478b
cmp eax, esi
jbe 0x47e3b1
call fcn.00426bbc
cmp eax, edi
je 0x47e3b1
xor eax, eax
inc eax
cmp dword [ebp - 0xffc], eax
jne 0x47e3b1
call fcn.004c4cd0
test eax, eax
jne 0x47e3b1
lea eax, [ebp - 0x1000]
push eax
lea ecx, [ebp - 0xa58]
call fcn.0048101e
lea ecx, [ebp - 0xa58]
mov esi, dword [eax]
lea eax, [ebp - 0x1000]
push eax
mov dword [ebp - 0xff4], esi
call fcn.0048102d
mov eax, dword [eax]
mov dword [ebp - 0xff8], eax
cmp eax, esi
je 0x47e394
mov esi, eax
lea edi, [ebp - 0x1078]
xor eax, eax
xor ebx, ebx
push 0x1b
pop ecx
inc eax
rep movsd dword es:[edi], dword [esi]
cmp dword [ebp - 0x1054], eax
push 0x802
setne bl
xor eax, eax
push eax
lea eax, [ebp - 0xa1c]
inc ebx
push eax
call fcn.005aa3d0
mov edi, dword [ebp - 0x106c]
add esp, 0xc
mov eax, dword [ebp - 0x1068]
sub eax, dword [ebp - 0x1070]
sub edi, dword [ebp - 0x1074]
cmp byte [ebp - 0xfc9], 0
mov dword [ebp - 0x1004], eax
je 0x47e2da
mov ecx, dword [ebp - 0x1010]
jmp 0x47e30a
xor eax, eax
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
push 0x58
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov dword [ebp - 0xfdc], eax
xor eax, eax
push esi
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [ebp - 0x1004]
mov ecx, dword [ebp - 0xfdc]
push dword [ebp - 0xfec]
push dword [ebp - 0xfd4]
push ecx
push eax
push edi
push dword [ebp - 0x1070]
lea eax, [ebp - 0xa1c]
push dword [ebp - 0x1074]
push ebx
push str._m:_d__x:_d__y:_d__w:_d__h:_d__d:_d__v:_d__f:_d
push 0x801
push eax
call fcn.00412a08
add esp, 0x2c
lea eax, [ebp - 0xa1c]
lea ecx, [ebp - 0xa4c]
push eax
call fcn.0040b0d5
lea ecx, [ebp - 0xa4c]
call fcn.004c6c97
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x19
call fcn.0040b67e
or esi, 0xffffffff
mov dword [ebp - 4], esi
mov eax, dword [ebp - 0xff8]
add eax, 0x6c
mov dword [ebp - 0xff8], eax
cmp eax, dword [ebp - 0xff4]
jne 0x47e278
push 5
pop edi
jmp 0x47e397
or esi, 0xffffffff
lea ecx, [ebp - 0xa58]
mov dword [ebp - 4], 0x26
call fcn.00456aae
mov dword [ebp - 4], esi
jmp 0x47e70b
push str.611264CE_A4A2_4614_BE47_6B92329E4304
lea ecx, [ebp - 0xa4c]
call fcn.0040b0d5
call fcn.004c4cd0
test eax, eax
je 0x47e3e3
mov esi, str.C4146CDC_5193_4516_AE53_A239D2DFA5E5
push esi
call fcn.005baec0
pop ecx
push eax
push esi
lea ecx, [ebp - 0xa4c]
call fcn.0040b566
push 8
pop esi
cmp dword [ebp - 0xa38], esi
lea eax, [ebp - 0xa4c]
cmovae eax, dword [ebp - 0xa4c]
push eax
xor eax, eax
inc eax
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov ebx, eax
xor eax, eax
mov dword [ebp - 0xfdc], ebx
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47e68d
call fcn.004c4cd0
test eax, eax
jne 0x47e64b
lea ecx, [ebp - 0xa34]
call fcn.004cc41b
sub esp, 0x18
mov ecx, esp
push str.installer360ini.dll
call fcn.0040b0d5
lea ecx, [ebp - 0xb54]
call fcn.004c297a
add esp, 0x18
cmp dword [eax + 0x14], esi
jb 0x47e45e
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xb84]
call fcn.0040b0d5
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x1a
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb9c]
call fcn.0040b106
lea ecx, [ebp - 0xaac]
call fcn.0040b106
lea edx, [ebp - 0xb9c]
lea ecx, [ebp - 0xa34]
call fcn.00426e0a
lea edx, [ebp - 0xaac]
lea ecx, [ebp - 0xb84]
call fcn.00426e0a
call fcn.004cbf3a
test eax, eax
jne 0x47e51f
lea ecx, [ebp - 0xb54]
call fcn.004cc41b
cmp dword [eax + 0x14], esi
jb 0x47e4d3
mov eax, dword [eax]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47e512
cmp dword [ebp - 0xa98], esi
lea edx, [ebp - 0xaac]
lea ecx, [ebp - 0xb9c]
cmovae edx, dword [ebp - 0xaac]
cmp dword [ebp - 0xb88], esi
cmovae ecx, dword [ebp - 0xb9c]
xor eax, eax
lea ebx, [eax + 1]
call fcn.004270e4
test eax, eax
jns 0x47e525
xor eax, eax
inc eax
mov byte [ebp - 0xfc9], al
mov ebx, eax
jmp 0x47e52e
mov ebx, dword [ebp - 0x1008]
xor eax, eax
mov byte [ebp - 0xfc9], al
inc eax
test al, bl
je 0x47e548
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x1b
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0xfc9], 0
je 0x47e5e2
xor ebx, ebx
lea ecx, [ebp - 0xb54]
mov dword [ebp - 0xff4], ebx
call fcn.004cc41b
cmp dword [eax + 0x14], esi
jb 0x47e56f
mov eax, dword [eax]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov esi, eax
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x1c
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
test esi, esi
jne 0x47e5c3
push 0x6e8
push str.WinMain
push str.__s__d___start_thread_copy
call fcn.0040a649
add esp, 0xc
lea eax, [ebp - 0xff4]
push eax
push ebx
push ebx
push fcn.00479f94
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edi, eax
jmp 0x47e5f9
push 0x6ec
push str.WinMain
push str.__s__d___start_oncall_copy
call fcn.0040a649
add esp, 0xc
push ebx
call fcn.00479f94
jmp 0x47e5f9
push 0x6f1
push str.WinMain
push str.__s__d___Is360SafeRegExist_is_true
call fcn.0040a649
add esp, 0xc
lea ecx, [ebp - 0xaac]
mov dword [ebp - 4], 0x1d
call fcn.0040b67e
lea ecx, [ebp - 0xb9c]
mov dword [ebp - 4], 0x1e
call fcn.0040b67e
lea ecx, [ebp - 0xb84]
mov dword [ebp - 4], 0x1f
call fcn.0040b67e
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x20
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
mov ebx, dword [ebp - 0xfdc]
xor edx, edx
xor ecx, ecx
inc edx
movzx eax, cl
cmp dword [ebp - 0xfec], edx
push ecx
cmove eax, edx
mov edx, dword [ebp - 0xfe4]
mov byte [ebp - 0xfdc], al
lea eax, [ebp - 0xac4]
push eax
lea eax, [ebp - 0xa94]
push eax
push dword [ebp - 0xfdc]
push dword [ebp - 0xfd4]
call fcn.0047a102
add esp, 0x14
jmp 0x47e6a4
push 0x6fc
push str.WinMain
push str.__s__d___360huabao_EXISTS__r_n
call fcn.0040a649
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
test edi, edi
je 0x47e6c0
push 0x1388
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push edi
call esi
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x21
call fcn.0040b67e
lea ecx, [ebp - 0xa58]
mov dword [ebp - 4], 0x22
call fcn.00456aae
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x23
call fcn.0040b67e
mov dword [ebp - 4], 0x24
lea ecx, [ebp - 0xa7c]
jmp 0x47db80
or esi, 0xffffffff
push 0x64acc4
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531990
mov bl, al
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x27
call fcn.00404812
mov dword [ebp - 4], esi
test bl, bl
je 0x47ec71
push 0x64acc4
lea ecx, [ebp - 0xa34]
mov dword [0x6d2c50], 7
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.005317a0
mov ebx, eax
mov dword [ebp - 0xfdc], ebx
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x28
call fcn.00404812
push 0x634c70
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.005317a0
mov dword [ebp - 0xfd0], eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x29
call fcn.00404812
push 0x634c74
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.005317a0
mov dword [ebp - 0x1000], eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x2a
call fcn.00404812
push 0x634fd4
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.005317a0
mov dword [ebp - 0xfe0], eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x2b
call fcn.00404812
push 0x634fd8
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.005317a0
mov dword [ebp - 0xff8], eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x2c
call fcn.00404812
push 0x64acc8
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.005317a0
mov dword [ebp - 0xfd4], eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x2d
call fcn.00404812
push 0x638f70
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], esi
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.005317a0
mov dword [ebp - 0x1004], eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x2e
call fcn.00404812
push 0x62a4ac
lea ecx, [ebp - 0xaac]
mov dword [ebp - 4], esi
call fcn.0040b0d5
xor eax, eax
inc eax
cmp ebx, eax
jne 0x47eb5d
mov esi, str.29E906C9_5160_4872_BFD0_53BD7D55FDED
push esi
call fcn.005baec0
pop ecx
push eax
push esi
lea ecx, [ebp - 0xaac]
call fcn.0040b566
xor eax, eax
lea ecx, [ebp - 0xb84]
mov edi, eax
call fcn.004cc41b
sub esp, 0x18
mov ecx, esp
push str.installer360ini.dll
call fcn.0040b0d5
lea ecx, [ebp - 0xb54]
call fcn.004c297a
add esp, 0x18
push 8
pop esi
cmp dword [eax + 0x14], esi
jb 0x47e975
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xa34]
call fcn.0040b0d5
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x2f
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb9c]
call fcn.0040b106
lea ecx, [ebp - 0xa4c]
call fcn.0040b106
lea edx, [ebp - 0xb9c]
lea ecx, [ebp - 0xb84]
call fcn.00426e0a
lea edx, [ebp - 0xa4c]
lea ecx, [ebp - 0xa34]
call fcn.00426e0a
call fcn.004cbf3a
test eax, eax
jne 0x47ea2f
lea ecx, [ebp - 0xb54]
call fcn.004cc41b
cmp dword [eax + 0x14], esi
jb 0x47e9ea
mov eax, dword [eax]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47ea27
cmp dword [ebp - 0xa38], esi
lea edx, [ebp - 0xa4c]
lea ecx, [ebp - 0xb9c]
cmovae edx, dword [ebp - 0xa4c]
cmp dword [ebp - 0xb88], esi
push 2
cmovae ecx, dword [ebp - 0xb9c]
pop ebx
call fcn.004270e4
test eax, eax
jns 0x47ea35
xor eax, eax
push 2
inc eax
pop ebx
jmp 0x47ea37
mov ebx, dword [ebp - 0x1008]
xor eax, eax
mov byte [ebp - 0xfc9], al
test bl, 2
je 0x47ea58
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x30
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0xfc9], 0
je 0x47eaf2
xor ebx, ebx
lea ecx, [ebp - 0xb54]
mov dword [ebp - 0xff4], ebx
call fcn.004cc41b
cmp dword [eax + 0x14], esi
jb 0x47ea7f
mov eax, dword [eax]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov esi, eax
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x31
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
test esi, esi
jne 0x47ead3
push 0x730
push str.WinMain
push str.__s__d___start_thread_copy
call fcn.0040a649
add esp, 0xc
lea eax, [ebp - 0xff4]
push eax
push ebx
push ebx
push fcn.00479f94
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edi, eax
jmp 0x47eb09
push 0x734
push str.WinMain
push str.__s__d___start_oncall_copy
call fcn.0040a649
add esp, 0xc
push ebx
call fcn.00479f94
jmp 0x47eb09
push 0x738
push str.WinMain
push str.__s__d___Is360SafeRegExist_is_true
call fcn.0040a649
add esp, 0xc
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x32
call fcn.0040b67e
lea ecx, [ebp - 0xb9c]
mov dword [ebp - 4], 0x33
call fcn.0040b67e
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x34
call fcn.0040b67e
lea ecx, [ebp - 0xb84]
mov dword [ebp - 4], 0x35
call fcn.0040b67e
or dword [ebp - 4], 0xffffffff
mov ebx, dword [ebp - 0xfdc]
jmp 0x47eb7a
mov esi, str.54FB661F_9BFB_43CA_A865_9C7B26F168E1
push esi
call fcn.005baec0
pop ecx
push eax
push esi
lea ecx, [ebp - 0xaac]
call fcn.0040b566
xor eax, eax
mov edi, eax
cmp dword [ebp - 0xa98], 8
lea eax, [ebp - 0xaac]
cmovae eax, dword [ebp - 0xaac]
push eax
xor eax, eax
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47ec0e
xor eax, eax
xor edx, edx
push eax
inc edx
movzx ecx, al
cmp dword [ebp - 0xfec], edx
lea eax, [ebp - 0xac4]
push eax
cmove ecx, edx
lea eax, [ebp - 0xa94]
mov edx, dword [ebp - 0xfe4]
push eax
mov byte [ebp - 0xfdc], cl
xor ecx, ecx
push dword [ebp - 0xfdc]
push dword [ebp - 0x1004]
push dword [ebp - 0xfd4]
push ebx
push dword [ebp - 0xff8]
push dword [ebp - 0xfe0]
push dword [ebp - 0x1000]
push dword [ebp - 0xfd0]
call fcn.0047a3eb
add esp, 0x2c
jmp 0x47ec25
push 0x747
push str.WinMain
push str.__s__d___360huabao.exe_EXISTS__r_n
call fcn.0040a649
add esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
test edi, edi
je 0x47ec41
push 0x1388
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push edi
call esi
lea ecx, [ebp - 0xaac]
mov dword [ebp - 4], 0x36
call fcn.0040b67e
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x37
call fcn.0040b67e
mov dword [ebp - 4], 0x38
jmp 0x47e6fd
push 0x208
xor ebx, ebx
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.005aa3d0
cmp dword [ebp - 0xab0], 8
lea eax, [ebp - 0x218]
lea ecx, [ebp - 0xac4]
mov edx, 0x64adb4
cmovae ecx, dword [ebp - 0xac4]
push 0x103
push eax
call fcn.00427957
add esp, 0x14
test eax, eax
je 0x47ed26
lea eax, [ebp - 0xfd4]
mov dword [ebp - 0xfd4], ebx
push eax
lea eax, [ebp - 0x218]
push str.0x_x
push eax
call fcn.0046767b
add esp, 0xc
xor eax, eax
inc eax
push str.35352ae8_24e5_41ec_91c2_40993f337b23
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47ed01
mov ecx, dword [ebp - 0xfd4]
call fcn.0047a697
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x3a
call fcn.0040b67e
mov dword [ebp - 4], 0x3b
jmp 0x47e6fd
push str.cfex
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531990
mov bl, al
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x3c
call fcn.00404812
mov dword [ebp - 4], esi
test bl, bl
je 0x47edc8
push 0x766
push str.WinMain
push str.__s__d___huabao_set_config
call fcn.0040a649
add esp, 0xc
xor ebx, ebx
inc ebx
xor eax, eax
push str.3F0D9BF9_9C7B_43AB_A362_7387A35AFB43
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47eda3
mov ecx, ebx
call fcn.0047caa8
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x3d
call fcn.0040b67e
mov dword [ebp - 4], 0x3e
jmp 0x47e6fd
push str.likeex
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531990
mov bl, al
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x3f
call fcn.00404812
mov dword [ebp - 4], esi
test bl, bl
je 0x47ee6b
push 0x773
push str.WinMain
push str.__s__d___huabao_set_likeex
call fcn.0040a649
add esp, 0xc
xor eax, eax
inc eax
push str.47962739_A6D5_4DAF_9E4E_14767F9FADDB
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47ee46
push 2
pop ecx
call fcn.0047caa8
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x40
call fcn.0040b67e
mov dword [ebp - 4], 0x41
jmp 0x47e6fd
push 0x64af34
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.005317a0
mov esi, eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x42
call fcn.00404812
or dword [ebp - 4], 0xffffffff
xor ebx, ebx
inc ebx
cmp esi, ebx
jl 0x47ef36
xor ebx, ebx
lea eax, [ebp - 0xa58]
push ebx
push eax
mov dword [ebp - 0xa58], ebx
mov dword [ebp - 0xa54], ebx
mov dword [ebp - 0xa50], ebx
call fcn.00424399
mov ecx, eax
call fcn.00424243
xor eax, eax
push str.8BAACDBA_5AF1_427B_BE5F_2B8AA1A7E05D
inc eax
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47eeff
mov ecx, esi
call fcn.0047bb9e
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa58]
mov dword [ebp - 4], 0x43
call fcn.00456aae
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x44
call fcn.0040b67e
mov dword [ebp - 4], 0x45
jmp 0x47e6fd
push 0x64af84
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.005317a0
mov esi, eax
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x47
call fcn.00404812
or dword [ebp - 4], 0xffffffff
cmp esi, ebx
jne 0x47f001
xor ebx, ebx
lea eax, [ebp - 0xa58]
push ebx
push eax
mov dword [ebp - 0xa58], ebx
mov dword [ebp - 0xa54], ebx
mov dword [ebp - 0xa50], ebx
call fcn.00424399
mov ecx, eax
call fcn.00424243
xor eax, eax
push 0x64af88
inc eax
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47efca
xor eax, eax
lea ecx, [eax + 1]
call fcn.0047bcab
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa58]
mov dword [ebp - 4], 0x48
call fcn.00456aae
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x49
call fcn.0040b67e
mov dword [ebp - 4], 0x4a
jmp 0x47e6fd
push 0x64afd8
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531990
mov bl, al
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x4c
call fcn.00404812
or dword [ebp - 4], 0xffffffff
test bl, bl
je 0x47f08b
xor eax, eax
push str.2BE7F418_3A70_4576_9C4A_A27A49A57651
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47f066
call fcn.0047a79f
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x4d
call fcn.0040b67e
mov dword [ebp - 4], 0x4e
jmp 0x47e6fd
push str.promote_install
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xadc]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531830
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x4f
call fcn.00404812
or ebx, 0xffffffff
mov dword [ebp - 4], ebx
cmp dword [ebp - 0xacc], 0
je 0x47f178
xor eax, eax
push str.ce3ceb90_e1d7_4acb_8abf_7d4ea32774c6
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47f133
sub esp, 0x18
lea eax, [ebp - 0xadc]
mov ecx, esp
push eax
call fcn.0040b119
lea ecx, [ebp - 0xb54]
call fcn.00430a1f
add esp, 0x18
mov ecx, eax
call fcn.004802fe
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x50
call fcn.00404812
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xadc]
mov dword [ebp - 4], 0x51
call fcn.0040b67e
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x52
call fcn.0040b67e
mov dword [ebp - 4], 0x53
lea ecx, [ebp - 0xa7c]
call fcn.0040b67e
mov dword [ebp - 4], ebx
jmp 0x4800a9
push str.promote_installex
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xaf4]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531830
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x54
call fcn.00404812
mov dword [ebp - 4], ebx
cmp dword [ebp - 0xae4], 0
je 0x47f26d
xor eax, eax
push str.d5ad00fa_a4f2_478a_be07_2ef43d47b11b
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47f224
push str._promote_install:
lea ecx, [ebp - 0xa4c]
call fcn.0040b0d5
lea eax, [ebp - 0xaf4]
push eax
lea ecx, [ebp - 0xa4c]
call fcn.004114f9
lea ecx, [ebp - 0xa4c]
call fcn.0047c28c
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x55
call fcn.0040b67e
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xaf4]
mov dword [ebp - 4], 0x56
call fcn.0040b67e
lea ecx, [ebp - 0xadc]
mov dword [ebp - 4], 0x57
call fcn.0040b67e
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x58
call fcn.0040b67e
mov dword [ebp - 4], 0x59
jmp 0x47f165
push str.promote_se_install
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xb24]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531830
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x5a
call fcn.00404812
mov dword [ebp - 4], ebx
cmp dword [ebp - 0xb14], 0
je 0x47f36d
xor eax, eax
push str.89E27CD3_540E_4749_AABC_E48273F74AC0
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47f312
sub esp, 0x18
lea eax, [ebp - 0xb24]
mov ecx, esp
push eax
call fcn.0040b119
lea ecx, [ebp - 0xb54]
call fcn.00430a1f
add esp, 0x18
mov ecx, eax
call fcn.00480c76
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], 0x5b
call fcn.00404812
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xb24]
mov dword [ebp - 4], 0x5c
call fcn.0040b67e
lea ecx, [ebp - 0xaf4]
mov dword [ebp - 4], 0x5d
call fcn.0040b67e
lea ecx, [ebp - 0xadc]
mov dword [ebp - 4], 0x5e
call fcn.0040b67e
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x5f
call fcn.0040b67e
mov dword [ebp - 4], 0x60
jmp 0x47f165
push str.promote_se_installex
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xb3c]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531830
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x61
call fcn.00404812
mov dword [ebp - 4], ebx
cmp dword [ebp - 0xb2c], 0
je 0x47f486
xor eax, eax
push str.E11E3E91_60B6_4FC7_A6CF_0DBBB53624ED
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47f419
push str._promote_se_install:
lea ecx, [ebp - 0xa4c]
call fcn.0040b0d5
lea eax, [ebp - 0xb3c]
push eax
lea ecx, [ebp - 0xa4c]
call fcn.004114f9
lea ecx, [ebp - 0xa4c]
call fcn.0047c28c
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 4], 0x62
call fcn.0040b67e
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xb3c]
mov dword [ebp - 4], 0x63
call fcn.0040b67e
lea ecx, [ebp - 0xb24]
mov dword [ebp - 4], 0x64
call fcn.0040b67e
lea ecx, [ebp - 0xaf4]
mov dword [ebp - 4], 0x65
call fcn.0040b67e
lea ecx, [ebp - 0xadc]
mov dword [ebp - 4], 0x66
call fcn.0040b67e
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x67
call fcn.0040b67e
mov dword [ebp - 4], 0x68
jmp 0x47f165
push str.efrom
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xb0c]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531830
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x69
call fcn.00404812
push 0x62ad24
lea ecx, [ebp - 0xb0c]
mov dword [ebp - 4], ebx
call fcn.0041084d
test al, al
je 0x47f4dd
push 2
jmp 0x47f4f3
push 0x63cab4
lea ecx, [ebp - 0xb0c]
call fcn.0041084d
test al, al
je 0x47f4f6
push 3
pop esi
jmp 0x47f511
push 0x643dc0
lea ecx, [ebp - 0xb0c]
call fcn.0041084d
xor esi, esi
inc esi
test al, al
push 4
pop eax
cmovne esi, eax
push 0x64b210
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.005317a0
cdq
mov ebx, eax
mov dword [ebp - 0xfec], edx
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x6a
call fcn.00404812
push dword [ebp - 0xfec]
or dword [ebp - 4], 0xffffffff
push ebx
push 0x7e6
push str.WinMain
push str.__s__d___do_check_dwHuabaoExitPop_dwHuabaoExitPop___lld
call fcn.0040a649
xor eax, eax
add esp, 0x14
cmp dword [ebp - 0xfec], eax
jl 0x47f637
jg 0x47f589
cmp ebx, eax
jbe 0x47f637
xor ecx, ecx
push str.69DB7A97_6264_4B51_AF76_B9DE677D3EDD
inc ecx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47f5b8
push dword [ebp - 0xfec]
mov ecx, esi
push ebx
call fcn.0047c940
pop ecx
pop ecx
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xb0c]
mov dword [ebp - 4], 0x6b
call fcn.0040b67e
lea ecx, [ebp - 0xb3c]
mov dword [ebp - 4], 0x6c
call fcn.0040b67e
lea ecx, [ebp - 0xb24]
mov dword [ebp - 4], 0x6d
call fcn.0040b67e
lea ecx, [ebp - 0xaf4]
mov dword [ebp - 4], 0x6e
call fcn.0040b67e
lea ecx, [ebp - 0xadc]
mov dword [ebp - 4], 0x6f
call fcn.0040b67e
lea ecx, [ebp - 0xa94]
mov dword [ebp - 4], 0x70
call fcn.0040b67e
mov dword [ebp - 4], 0x71
jmp 0x47e6fd
push str.hepex
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.005317a0
cdq
mov esi, eax
mov ebx, edx
lea ecx, [ebp - 0xa34]
mov dword [ebp - 4], 0x72
call fcn.00404812
lea ecx, [ebp - 0xb0c]
mov dword [ebp - 4], 0x73
call sym.360huabao.exe_public:_class_DuiLib::CMarkup____thiscall_DuiLib::CDialogBuilder::GetMarkup_void_
mov ecx, eax
call fcn.0040b5da
or dword [ebp - 4], 0xffffffff
push eax
push ebx
push esi
push 0x7f3
push str.WinMain
push str.__s__d___do_check_dwHuabaoExitPop_dwHuabaoExitPop___lld_szeForm___s
call fcn.0040a649
xor eax, eax
add esp, 0x18
cmp ebx, eax
jl 0x47f6fa
jg 0x47f6b4
cmp esi, eax
jbe 0x47f6fa
xor ecx, ecx
push str.C0D8BF95_3EF4_41F5_9D68_9BE6AC67D9E3
inc ecx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47f6ee
sub esp, 0x18
lea eax, [ebp - 0xb0c]
mov ecx, esp
push eax
call fcn.0040b119
push ebx
push esi
call fcn.0047bfe0
add esp, 0x20
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x48005c
push 0x64b3c4
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531990
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x47f761
xor eax, eax
mov dword [0x6d2c50], 9
push str.E5889496_4D98_428C_BBBB_8DEAE5704875
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47f75e
call fcn.0047a8af
push esi
jmp 0x47f6ef
push str.exman
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531990
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x47f7c7
xor eax, eax
mov dword [0x6d2c50], 8
push str.4C152FB3_9518_46E4_8CB8_DF391FCBE156
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47f75e
call fcn.0047aae0
jmp 0x47f75e
push 0x64b46c
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531990
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x47f8cc
xor eax, eax
mov dword [0x6d2c50], edi
push 0x64b470
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47f75e
push str.data
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xb84]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531830
lea ecx, [ebp - 0xa34]
call fcn.00404838
push 0x61ee2e
lea ecx, [ebp - 0xa4c]
call fcn.004045aa
sub esp, 0x18
lea eax, [ebp - 0xb84]
mov ecx, esp
push eax
call fcn.0040b119
lea ecx, [ebp - 0xb54]
call fcn.00430a1f
add esp, 0x18
lea edx, [ebp - 0xa4c]
mov ecx, eax
call fcn.0041675b
lea ecx, [ebp - 0xb54]
call fcn.00404838
lea ecx, [ebp - 0xa4c]
call fcn.0047a9bf
lea ecx, [ebp - 0xa4c]
call fcn.00404838
lea ecx, [ebp - 0xb84]
call fcn.0040b6ac
jmp 0x47f75e
mov ebx, 0x64a974
lea ecx, [ebp - 0xa34]
push ebx
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xb6c]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531830
lea ecx, [ebp - 0xa34]
call fcn.00404838
lea eax, [ebp - 0xb6c]
push 0x62ad24
push eax
call fcn.0041083d
pop ecx
pop ecx
test al, al
jne 0x47f930
lea eax, [ebp - 0xb6c]
push 0x63cab4
push eax
call fcn.0041083d
pop ecx
pop ecx
test al, al
je 0x47f93b
push 0x62a4ac
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push ebx
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531990
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x47fa76
lea eax, [ebp - 0xfd0]
mov dword [0x6d2c50], 3
push eax
lea eax, [ebp - 0x218]
xor ebx, ebx
push str.0x_x
push eax
mov dword [ebp - 0xfd0], ebx
call fcn.0046767b
add esp, 0xc
call fcn.004cf19d
test al, al
je 0x480051
mov esi, str.143359e8_f4b9_4010_a5e5_789147203fa5
push esi
push ebx
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
test eax, eax
je 0x47f9cc
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
dec edi
test edi, edi
jg 0x47f9ae
push esi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x47fa10
push 0x847
push str.WinMain
push str.__s__d___StartUpTask
call fcn.0040a649
add esp, 0xc
call fcn.004d1aef
lea ecx, [ebp - 0xac4]
call fcn.0047cd10
jmp 0x48004a
push 0x64a974
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
lea eax, [ebp - 0xb54]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531830
push eax
push 0x62ad24
call fcn.0048106c
pop ecx
pop ecx
lea ecx, [ebp - 0xb54]
mov bl, al
call fcn.0040b6ac
lea ecx, [ebp - 0xa34]
call fcn.00404838
test bl, bl
je 0x48004a
call fcn.0047cd43
call fcn.0047cd7f
jmp 0x48004a
lea ecx, [ebp - 0xac4]
call fcn.0040b5da
push eax
push 0x85b
push str.WinMain
push str.__s__d___szSetConfig_strCmd___s
call fcn.0040a649
add esp, 0x10
lea ecx, [ebp - 0xfc8]
call fcn.00404a19
mov dl, byte [ebp - 0xfd5]
lea eax, [ebp - 0xfc8]
push eax
lea ecx, [ebp - 0xac4]
call fcn.0047ce1c
pop ecx
test al, al
je 0x47fdc9
xor eax, eax
mov esi, str.Software360360huabao
push 4
pop ebx
mov dword [ebp - 0xfd4], eax
mov edx, esi
lea eax, [ebp - 0xfd4]
mov dword [0x6d2c50], ebx
push eax
push str.install_model
mov ecx, reloc.WS2_32.dll_accept
call fcn.00425cdd
cmp dword [ebp - 0xfd4], 2
pop ecx
pop ecx
jne 0x47fb34
push str.operate
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.00531990
test al, al
jne 0x47fb3a
xor eax, eax
inc eax
push ebx
mov byte [ebp - 0xfc9], al
pop eax
mov ebx, eax
jmp 0x47fb42
mov ebx, dword [ebp - 0x1008]
xor eax, eax
mov byte [ebp - 0xfc9], al
test bl, 4
je 0x47fb52
lea ecx, [ebp - 0xa34]
call fcn.00404838
cmp byte [ebp - 0xfc9], 0
je 0x47fc06
call fcn.00426bbc
cmp eax, edi
je 0x47fba9
xor ebx, ebx
xor eax, eax
inc ebx
push ebx
push 0x64b57c
push str.S_MR_j
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, ebx
jne 0x47fba9
push str.__restore
lea ecx, [ebp - 0xa34]
call fcn.0040b0d5
lea ecx, [ebp - 0xa34]
call fcn.004c6970
lea ecx, [ebp - 0xa34]
call fcn.0040b6ac
lea ecx, [ebp - 0xb6c]
call fcn.0040b6ac
lea ecx, [ebp - 0xb0c]
call fcn.0040b6ac
lea ecx, [ebp - 0xb3c]
call fcn.0040b6ac
lea ecx, [ebp - 0xb24]
call fcn.0040b6ac
lea ecx, [ebp - 0xaf4]
call fcn.0040b6ac
lea ecx, [ebp - 0xadc]
call fcn.0040b6ac
lea ecx, [ebp - 0xa94]
call fcn.0040b6ac
lea ecx, [ebp - 0xa7c]
call fcn.0040b6ac
jmp 0x4800ec
push str.360Huabao_shell.zip
lea ecx, [ebp - 0xa34]
call fcn.0040b0d5
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0xa4c]
call fcn.004cd11d
lea ecx, [ebp - 0xa34]
call fcn.0040b6ac
lea ecx, [ebp - 0xa4c]
call fcn.0040b5da
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x47fc58
lea ecx, [ebp - 0xa4c]
call fcn.0040b6ac
jmp 0x480051
lea eax, [ebp - 0xfd0]
xor ebx, ebx
push eax
push str.360huabao_exit
mov edx, esi
mov dword [ebp - 0xfd0], ebx
mov ecx, reloc.WS2_32.dll_accept
call fcn.00426057
pop ecx
pop ecx
mov esi, str.2b66a28a_e754_472a_94c5_b512e57133e2
push esi
push ebx
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
test eax, eax
je 0x47fcbf
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push edi
push 0x87e
push str.WinMain
push str.__s__d___show_mainwind_try_times:__d
call fcn.0040a649
add esp, 0x10
dec edi
test edi, edi
jg 0x47fc7f
xor eax, eax
push esi
inc eax
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xfd0], eax
call esi
push eax
push 0x882
push str.WinMain
push str.__s__d___CreateMutex_2b66a28a_error:__d
call fcn.0040a649
add esp, 0x10
call esi
cmp eax, 0xb7
je 0x47fd63
cmp byte [ebp - 0xfd5], bl
je 0x47fd11
xor eax, eax
lea ecx, [eax + 1]
call fcn.0047abfe
call fcn.0047cdbb
mov ecx, dword [ebp - 0xfe0]
mov edx, str.__enable_webui_debug
call fcn.00436046
test eax, eax
setne bl
call esi
push eax
push 0x889
push str.WinMain
push str.__s__d___start_ShowWallPaperMainWnd_error:__d
call fcn.0040a649
sub esp, 0x404
lea esi, [ebp - 0xfc8]
mov ecx, 0x105
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov dl, bl
xor ecx, ecx
call fcn.0047b6bf
add esp, 0x414
jmp 0x47fda1
push 0x88c
push str.WinMain
push str.__s__d___start_ShowWallPaperMainWndEx
call fcn.0040a649
push 2
pop ecx
call fcn.0047abfe
lea ecx, [ebp - 0xfc8]
call fcn.0047b9e9
push 0x88f
push str.WinMain
push str.__s__d___end_ShowWallPaperMainWndEx
call fcn.0040a649
add esp, 0x18
push dword [ebp - 0xfd0]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x893
push str.WinMain
push str.__s__d___close_hMutexForMain
call fcn.0040a649
add esp, 0xc
jmp 0x47fc48
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x8a6
push str.WinMain
push str.__s__d___GetTickCount:__d
call fcn.0040a649
add esp, 0x10
cmp byte [ebp - 0xfed], 0
je 0x47fe00
lea ecx, [ebp - 0xac4]
call fcn.0047ac8c
jmp 0x480051
push str.general
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
push eax
call fcn.005314e0
mov ecx, eax
call fcn.005317a0
lea ecx, [ebp - 0xa34]
call fcn.00404838
push str.prepop
lea ecx, [ebp - 0xb84]
call fcn.004045aa
mov esi, dword [ebp - 0xfd0]
lea eax, [ebp - 0xb84]
push eax
mov ecx, esi
call fcn.00531990
lea ecx, [ebp - 0xb84]
mov bl, al
call fcn.00404838
test bl, bl
je 0x47fea2
xor eax, eax
mov dword [0x6d2c50], 0xa
push str.821F92D6_57D5_48A4_84DB_615FD5A9485A
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x48004a
lea ecx, [ebp - 0xac4]
call fcn.0047b1a1
jmp 0x48004a
push str.popdialog
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
mov ecx, esi
push eax
call fcn.00531990
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x47ff10
xor eax, eax
mov dword [0x6d2c50], 0xb
push str.4E615E96_C316_4D7D_A9E8_4A921FEAACE3
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x48004a
lea ecx, [ebp - 0xac4]
call fcn.0047b34c
jmp 0x48004a
push str.inspirevideo
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
mov ecx, esi
push eax
call fcn.00531990
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x47ff7e
xor eax, eax
mov dword [0x6d2c50], 0xc
push str.39503951_AD3F_4BC7_B0C8_C72B412A0BD8
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x48004a
lea ecx, [ebp - 0xac4]
call fcn.0047b514
jmp 0x48004a
push str.beautifytips
lea ecx, [ebp - 0xa34]
call fcn.004045aa
lea eax, [ebp - 0xa34]
mov ecx, esi
push eax
call fcn.00531990
lea ecx, [ebp - 0xa34]
mov bl, al
call fcn.00404838
test bl, bl
je 0x47ffe5
xor eax, eax
mov dword [0x6d2c50], 0xd
push 0x64b948
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x48004a
lea ecx, [ebp - 0xac4]
call fcn.0047bdb8
jmp 0x48004a
push str.mangotv
lea ecx, [ebp - 0xbb4]
call fcn.004045aa
lea eax, [ebp - 0xbb4]
mov ecx, esi
push eax
call fcn.00531990
lea ecx, [ebp - 0xbb4]
mov bl, al
call fcn.00404838
test bl, bl
je 0x480051
xor eax, eax
mov dword [0x6d2c50], 0xe
push str.373B68CD_45C0_48BB_9C6C_F786C966C363
inc eax
push eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x48004a
lea ecx, [ebp - 0xac4]
call fcn.0047becc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xb6c]
call fcn.0040b6ac
lea ecx, [ebp - 0xb0c]
call fcn.0040b6ac
lea ecx, [ebp - 0xb3c]
call fcn.0040b6ac
lea ecx, [ebp - 0xb24]
call fcn.0040b6ac
lea ecx, [ebp - 0xaf4]
call fcn.0040b6ac
lea ecx, [ebp - 0xadc]
call fcn.0040b6ac
lea ecx, [ebp - 0xa94]
call fcn.0040b6ac
lea ecx, [ebp - 0xa7c]
call fcn.0040b6ac
call fcn.004b3ce0
mov ecx, eax
call fcn.004b4b6e
test al, al
je 0x4800c5
call fcn.004b3ce0
mov ecx, eax
call fcn.004b4b8f
mov ecx, 0x6d8dd8
call fcn.00481227
push 0x8f2
push str.WinMain
push str.__s__d___exit__r_n
call fcn.0040a649
add esp, 0xc
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0xac4]
call fcn.0040b6ac
xor eax, eax
lea esp, [ebp - 0x1088]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005926d8
leave
ret 0x10