Function at 0x42c776
Capabilities:
Create thread
Suspend thread
Terminate thread

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x43fd5f
push eax
mov dword fs:[0], esp
sub esp, 0xa98
mov dword [0x451094], 1
push ebx
push esi
mov esi, ecx
push edi
mov dword [esi + 0xf88], 1
call fcn.004038b0
test eax, eax
je 0x42cb70
push esi
lea ecx, [esp + 0x568]
call fcn.0040e4c0
xor ebx, ebx
push ebx
push 0x109
mov dword [esp + 0xab4], ebx
call fcn.004232b0
mov ecx, eax
call fcn.00423b90
push eax
push 1
push str.http:__www.microsoft.com_china_technet_security_current.mspx
push ebx
push 0x108
call fcn.004232b0
mov ecx, eax
call fcn.00423b90
push eax
push 1
lea ecx, [esp + 0x578]
call fcn.0040e8e0
push ebx
push 0x10a
call fcn.004232b0
mov ecx, eax
call fcn.00423b90
push eax
lea ecx, [esp + 0x568]
call fcn.0040e930
lea ecx, [esp + 0x1c]
lea eax, [esp + 0x564]
push ecx
push ebx
push esi
push 0x42c660
push ebx
push ebx
mov dword [esi + 0xf40], eax
call dword [sym.imp.MSVCRT.dll__beginthreadex]
add esp, 0x18
lea ecx, [esp + 0x564]
mov edi, eax
call sub.MFC42.DLL_CDialog::DoModal
cmp dword [esp + 0x864], ebx
je 0x42c87d
lea edx, [esp + 0xc]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
test eax, eax
je 0x42c865
cmp dword [esp + 0xc], 0x103
jne 0x42c865
push edi
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push ebx
lea ecx, [esi + 0x444]
call sub.MFC42.DLL_CWnd::EnableWindow
push ebx
lea ecx, [esi + 0x51c]
call sub.MFC42.DLL_CWnd::EnableWindow
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0xf40], ebx
call fcn.0043a1c0
mov ecx, eax
call fcn.0043a230
cmp eax, 6
mov edi, 0x442bcc
jne 0x42ca2d
push esi
lea ecx, [esp + 0x28]
call fcn.0040e4c0
push ebx
push 0x10b
mov byte [esp + 0xab4], 1
call fcn.004232b0
mov ecx, eax
call fcn.00423b90
push eax
push 1
push str.http:__www.microsoft.com_china_technet_security_current.mspx
push ebx
push 0x108
call fcn.004232b0
mov ecx, eax
call fcn.00423b90
push eax
push ebx
lea ecx, [esp + 0x578]
call fcn.0040e8e0
push ebx
push 0xf9
call fcn.004232b0
mov ecx, eax
call fcn.00423b90
push eax
lea ecx, [esp + 0x568]
call fcn.0040e930
lea ecx, [esp + 0x554]
mov byte [esp + 0xaac], 9
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x550]
mov byte [esp + 0xaac], 8
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x54c]
mov byte [esp + 0xaac], 7
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x548]
mov byte [esp + 0xaac], 6
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x470]
mov byte [esp + 0xaac], 5
call fcn.004011d0
lea ecx, [esp + 0x3ac]
mov byte [esp + 0xaac], 4
call fcn.00419c80
lea ecx, [esp + 0x368]
mov byte [esp + 0xaac], 3
call fcn.00421ef0
lea ecx, [esp + 0x328]
mov byte [esp + 0xaac], 2
call sub.MFC42.DLL_CProgressCtrl::CProgressCtrl
lea eax, [esp + 0x318]
mov dword [esp + 0x318], 0x442be0
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x318]
mov byte [esp + 0xaac], 0xe
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esp + 0x22c]
mov dword [esp + 0x318], edi
mov byte [esp + 0xaac], 0xc
call fcn.00419250
lea ecx, [esp + 0x158]
mov byte [esp + 0xaac], 0xb
call fcn.00419250
mov byte [esp + 0xaac], 0xa
lea ecx, [esp + 0x84]
call fcn.00419250
lea ecx, [esp + 0x24]
mov byte [esp + 0xaac], 0
call sub.MFC42.DLL_CDialog::CDialog
push 1
lea ecx, [esi + 0x36c]
call sub.MFC42.DLL_CWnd::EnableWindow
lea ecx, [esp + 0xa94]
mov dword [esp + 0xaac], 0x16
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xa90]
mov byte [esp + 0xaac], 0x15
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xa8c]
mov byte [esp + 0xaac], 0x14
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xa88]
mov byte [esp + 0xaac], 0x13
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x9b0]
mov byte [esp + 0xaac], 0x12
call fcn.004011d0
lea ecx, [esp + 0x8ec]
mov byte [esp + 0xaac], 0x11
call fcn.00419c80
lea ecx, [esp + 0x8a8]
mov byte [esp + 0xaac], 0x10
call fcn.00421ef0
lea ecx, [esp + 0x868]
mov byte [esp + 0xaac], 0xf
call sub.MFC42.DLL_CProgressCtrl::CProgressCtrl
mov ebx, 0x17
mov dword [esp + 0xaac], ebx
lea ecx, [esp + 0x858]
mov dword [esp + 0x858], 0x442be0
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0x858]
mov byte [esp + 0xaac], 0x1b
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esp + 0x76c]
mov dword [esp + 0x858], edi
mov byte [esp + 0xaac], 0x19
call fcn.00419250
lea ecx, [esp + 0x698]
mov byte [esp + 0xaac], 0x18
call fcn.00419250
lea ecx, [esp + 0x5c4]
mov byte [esp + 0xaac], bl
call fcn.00419250
or edi, 0xffffffff
lea ecx, [esp + 0x564]
mov dword [esp + 0xaac], edi
call sub.MFC42.DLL_CDialog::CDialog
jmp 0x42cd47
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::CString_3
mov ebx, 0x1c
push 0
push 0x6f
mov dword [esp + 0xab4], ebx
call fcn.004232b0
mov ecx, eax
call fcn.00423b90
push eax
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::operator_1
push esi
lea ecx, [esp + 0x28]
call fcn.0040dd70
mov eax, dword [esp + 0xc]
lea edx, [esp + 0x24]
push eax
push 1
lea ecx, [esp + 0x2c]
mov byte [esp + 0xab4], 0x1d
mov dword [esi + 0xf40], edx
call fcn.0040dfc0
lea ecx, [esp + 0x20]
push ecx
push 0
push esi
push 0x42c6d0
push 0
push 0
call dword [sym.imp.MSVCRT.dll__beginthreadex]
add esp, 0x18
lea ecx, [esp + 0x24]
mov edi, eax
call sub.MFC42.DLL_CDialog::DoModal
mov eax, dword [esp + 0x480]
test eax, eax
je 0x42cc5c
lea edx, [esp + 0x14]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
test eax, eax
je 0x42cc25
cmp dword [esp + 0x14], 0x103
jne 0x42cc25
push edi
call dword [sym.imp.KERNEL32.dll_SuspendThread]
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
lea ecx, [esi + 0x784]
call fcn.004182c0
cmp eax, 1
jle 0x42cc4f
push 1
lea ecx, [esi + 0x444]
call sub.MFC42.DLL_CWnd::EnableWindow
push 1
lea ecx, [esi + 0x51c]
call sub.MFC42.DLL_CWnd::EnableWindow
push 1
lea ecx, [esi + 0x36c]
call sub.MFC42.DLL_CWnd::EnableWindow
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x47c]
mov byte [esp + 0xaac], 0x21
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x3a4]
mov byte [esp + 0xaac], 0x20
call fcn.004011d0
lea ecx, [esp + 0x364]
mov byte [esp + 0xaac], 0x1f
call sub.MFC42.DLL_CProgressCtrl::CProgressCtrl
lea ecx, [esp + 0x324]
mov byte [esp + 0xaac], 0x1e
call sub.MFC42.DLL_CStatic::CStatic
lea eax, [esp + 0x318]
mov dword [esp + 0x318], 0x442be0
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x318]
mov byte [esp + 0xaac], 0x26
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esp + 0x22c]
mov dword [esp + 0x318], 0x442bcc
mov byte [esp + 0xaac], 0x24
call fcn.00419250
lea ecx, [esp + 0x158]
mov byte [esp + 0xaac], 0x23
call fcn.00419250
lea ecx, [esp + 0x84]
mov byte [esp + 0xaac], 0x22
call fcn.00419250
lea ecx, [esp + 0x24]
mov byte [esp + 0xaac], bl
call sub.MFC42.DLL_CDialog::CDialog
or edi, 0xffffffff
lea ecx, [esp + 0xc]
mov dword [esp + 0xaac], edi
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::CString_3
mov ecx, dword [0x451060]
lea edx, [esp + 0x10]
push ecx
push str.http:__360.qihoo.com_cms_loudong.html__s
push edx
mov dword [esp + 0xab8], 0x27
call sub.MFC42.DLL_CString::Format
mov eax, dword [esp + 0x1c]
add esp, 0xc
lea ecx, [esi + 0x8e4]
push eax
push 1
push edi
push 0x451020
call fcn.004027f0
mov ecx, esi
mov dword [0x451094], 0
call fcn.0042df10
lea ecx, [esp + 0x10]
mov dword [esp + 0xaac], edi
call sub.MFC42.DLL_CString::CString
mov ecx, dword [esp + 0xaa4]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0xaa4
ret