Function at 0x41ad30
Capabilities:
Create process on windows
Delete registry value
Persist via windows service
Query or enumerate registry value
Set registry value

Disassembly:
push 0xffffffffffffffff
push 0x4bc6fb
mov eax, dword fs:[0]
push eax
sub esp, 0x270
mov eax, dword [0x4e5a68]
xor eax, esp
mov dword [esp + 0x26c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4e5a68]
xor eax, esp
push eax
lea eax, [esp + 0x284]
mov dword fs:[0], eax
mov eax, dword [esp + 0x2a0]
xor ebx, ebx
mov dword [eax], ebx
mov eax, dword [esp + 0x29c]
sub eax, 0x201
mov esi, ecx
mov dword [esp + 0x28], esi
je 0x41b8a6
sub eax, 2
je 0x41b87a
sub eax, 2
jne 0x41b8c9
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, dword [esi + 0x10]
push ecx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov edx, dword [0x4f2394]
push 0x6d
push edx
call dword [sym.imp.USER32.dll_LoadMenuA]
push ebx
push eax
mov dword [esp + 0x3c], eax
call dword [sym.imp.USER32.dll_GetSubMenu]
cmp dword [0x4f0f90], ebx
mov edi, dword [sym.imp.USER32.dll_DeleteMenu]
mov esi, eax
je 0x41ade9
push ebx
push 0x8006
push esi
call edi
cmp dword [0x4f0c9c], ebx
push ebx
jne 0x41ae13
push 0x8012
push esi
call edi
call fcn.00408ee0
cmp eax, ebx
jne 0x41ae24
push 1
push 0x803d
push esi
call dword [sym.imp.USER32.dll_EnableMenuItem]
jmp 0x41ae24
push 0x8018
push esi
call edi
push ebx
push 0x803d
push esi
call edi
mov ecx, 0x4f0bb0
call fcn.0040d2c0
cmp eax, ebx
mov ebp, dword [sym.imp.USER32.dll_CheckMenuItem]
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [esp + 0x14], eax
je 0x41af51
xor eax, eax
mov dword [esp + 0x5e], eax
mov dword [esp + 0x62], eax
mov dword [esp + 0x66], eax
mov dword [esp + 0x6a], eax
mov dword [esp + 0x6e], eax
mov dword [esp + 0x72], eax
mov dword [esp + 0x76], eax
mov word [esp + 0x7a], ax
lea eax, [esp + 0x1c]
push eax
push 0x20019
push ebx
push str.SoftwarePdaNetAndroid
push connect
mov word [esp + 0x70], bx
call edi
test eax, eax
jne 0x41aec4
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x60]
push edx
lea eax, [esp + 0x28]
push eax
push ebx
push str.WifiSSID
push ecx
mov dword [esp + 0x38], 1
mov dword [esp + 0x3c], pe_nt_image_headers32
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov edx, dword [esp + 0x1c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [esp + 0x5c]
lea edx, [eax + 1]
jmp 0x41aed0
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x41aed0
sub eax, edx
jne 0x41aee3
mov dword [esp + 0x14], ebx
jmp 0x41af51
mov dword [esp + 0x58], 0xf
mov dword [esp + 0x54], ebx
mov byte [esp + 0x44], bl
lea eax, [esp + 0x5c]
push eax
lea ecx, [esp + 0x44]
push str.WiFi_Share___s_
push ecx
mov dword [esp + 0x298], ebx
call fcn.00405ab0
mov eax, dword [esp + 0x50]
add esp, 0xc
cmp dword [esp + 0x58], 0x10
jae 0x41af20
lea eax, [esp + 0x44]
push eax
push 0x803f
push ebx
push 0x803f
push esi
call dword [sym.imp.USER32.dll_ModifyMenuA]
push 8
push 0x803f
push esi
call ebp
lea ecx, [esp + 0x40]
mov dword [esp + 0x28c], 0xffffffff
call fcn.00405010
lea edx, [esp + 0x1c]
push edx
push 0x20019
push ebx
push str.SoftwarePdaNetAndroid
push connect
mov dword [esp + 0x40], ebx
call edi
test eax, eax
jne 0x41afa8
mov eax, 4
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], eax
lea eax, [esp + 0x20]
push eax
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x2c]
push edx
push ebx
push str.AutoConnect
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [esp + 0x1c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [esp + 0x2c], ebx
je 0x41afb8
push 8
push 0x801d
push esi
call ebp
cmp dword [0x4e560c], ebx
je 0x41afca
push 8
push 0x802c
push esi
call ebp
lea edx, [esp + 0x1c]
push edx
push 0x20019
push ebx
push str.SYSTEMCurrentControlSetServicesTcpipParameters
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x38], ebx
mov dword [esp + 0x44], ebx
call edi
test eax, eax
jne 0x41b025
mov eax, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], eax
lea eax, [esp + 0x20]
push eax
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x20]
push edx
push ebx
push str.TcpWindowSize
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [esp + 0x1c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [esp + 0x30], 0xfffe
jb 0x41b041
push 8
push 0x8025
push esi
mov dword [esp + 0x30], 1
call ebp
cmp dword [0x4f0cd0], ebx
je 0x41b053
push 8
push 0x8023
push esi
call ebp
cmp dword [0x4f0cd4], ebx
je 0x41b065
push 8
push 0x802a
push esi
call ebp
lea edx, [esp + 0x1c]
push edx
push 0x20019
push ebx
push str.SoftwarePdaNetAndroid
push connect
call edi
test eax, eax
jne 0x41b0b8
mov edx, dword [esp + 0x1c]
mov eax, 4
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 0x4f0cd8
lea ecx, [esp + 0x28]
push ecx
push ebx
push str.InterceptSMS
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [esp + 0x1c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [esp + 0x1c]
push ecx
push 0x20019
push ebx
push str.SoftwarePdaNetAndroid
push connect
call edi
test eax, eax
jne 0x41b10b
mov ecx, dword [esp + 0x1c]
mov eax, 4
lea edx, [esp + 0x18]
push edx
push 0x4f1b08
mov dword [esp + 0x28], eax
mov dword [esp + 0x20], eax
lea eax, [esp + 0x28]
push eax
push ebx
push str.HideTetherUsage
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov edx, dword [esp + 0x1c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [0x4f1b08]
cmp eax, 2
push 8
jne 0x41b11e
push 0x803b
jmp 0x41b12f
cmp eax, 1
jne 0x41b12a
push 0x803a
jmp 0x41b12f
push 0x8039
push esi
call ebp
mov eax, dword [esp + 0x28]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x38]
push ebx
push ecx
push ebx
push edx
push eax
push 0x182
push esi
call dword [sym.imp.USER32.dll_TrackPopupMenu]
add eax, 0xffff7ffd
cmp eax, 0x3c
ja case.0x41b167.32772
movzx ecx, byte [eax + 0x41b950]
jmp dword [ecx*4 + 0x41b8f8]
mov edx, dword [0x4f0bb4]
push ebx
push ebx
push 0x10
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
mov ecx, 0x4f0bb0
call fcn.0040e890
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
cmp dword [0x4f0c70], ebx
je case.0x41b167.32801
push 1
jmp 0x41b88f
mov eax, dword [esp + 0x28]
mov ecx, dword [eax + 0x10]
push 0x40
push str.SMS_Agent_disabled
push str.SMS_agent_has_been_temporarily_disabled_in_current_build__it_will_be_put_back_in_our_coming_updates.
push ecx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
cmp dword [0x4f0c9c], ebx
jne 0x41b218
mov edx, dword [esp + 0x28]
mov eax, dword [edx + 0x10]
push 0x40
push str.Connect_First
push str.Please_connect_PdaNet_first_before_turning_on_WiFi_Share.
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
cmp dword [0x4f0ca0], ebx
je 0x41b24a
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx + 0x10]
push 0x40
push str.Not_Supported
push str.WiFi_Share_is_not_supported_with_the_legacy_network_driver._Try_to_reinstall_PdaNet_desktop_client.
push edx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
xor eax, eax
cmp dword [esp + 0x14], ebx
mov ecx, 0x4f0bb0
sete al
push eax
call fcn.0040d740
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
call fcn.0040a670
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
mov ecx, dword [esp + 0x28]
push 0x12c
push 0x1c2
push str.account.htm
call fcn.0041ac50
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
push ebx
lea ecx, [esp + 0x18]
push ecx
push ebx
xor eax, eax
cmp dword [0x4f0cd4], ebx
push 0x20006
push ebx
sete al
push ebx
push ebx
push str.SoftwarePdaNetAndroid
push connect
mov dword [0x4f0cd4], eax
mov dword [esp + 0x3c], eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne case.0x41b167.32772
mov eax, dword [esp + 0x14]
push 4
lea edx, [esp + 0x1c]
push edx
push 4
push ebx
push str.NoRndis
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
push ebx
lea edx, [esp + 0x18]
push edx
push ebx
xor eax, eax
cmp dword [0x4e560c], ebx
push 0x20006
push ebx
sete al
push ebx
push ebx
push str.SoftwarePdaNetAndroid
push connect
mov dword [0x4e560c], eax
mov dword [esp + 0x3c], eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x41b377
mov ecx, dword [esp + 0x14]
push 4
lea eax, [esp + 0x1c]
push eax
push 4
push ebx
push str.GoogleDNS2
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [0x4f0c9c], ebx
je case.0x41b167.32772
push ebx
push 1
push str.Setting_changed._Please_reconnect_PdaNet.
mov ecx, 0x4f0e58
call fcn.0040d5a0
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
xor eax, eax
cmp dword [0x4f0cd8], ebx
push ebx
sete al
mov dword [0x4f0cd8], eax
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x18]
push eax
push ebx
push 0x20006
push ebx
push ebx
push ebx
push str.SoftwarePdaNetAndroid
push connect
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x41b401
mov edx, dword [esp + 0x14]
push 4
lea ecx, [esp + 0x1c]
push ecx
push 4
push ebx
push str.InterceptSMS
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [0x4f0c9c], ebx
je case.0x41b167.32772
push ebx
push 1
push str.Setting_changes_will_be_effective_starting_from_next_connection.
mov ecx, 0x4f0e58
call fcn.0040d5a0
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
push ebx
lea ecx, [esp + 0x18]
push ecx
push ebx
push 0x20006
push ebx
push ebx
push ebx
push str.SoftwarePdaNetAndroid
push connect
mov dword [0x4f1b08], ebx
mov dword [esp + 0x3c], ebx
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne case.0x41b167.32772
mov eax, dword [esp + 0x14]
push 4
lea edx, [esp + 0x1c]
push edx
push 4
push ebx
push str.HideTetherUsage
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
push 0x31
push str.PdaNet_Warning
push str.The_Hide_Tether_Usage_feature_works_by_striping_computer_usage_information_from_your_network_traffics._However_this_may_break_certain_network_applications_or_web_sites__such_as_those_with_Flash_contents__when_the_server_end_try_to_verify_your_computer_and_fail.__n_nSince_PdaNet_by_default_already_uses_your_phone_to_generate_all_network_requests__most_users_currently_do_not_need_this_extra_feature._n_nSelect__OK__to_enable_or__Cancel__to_keep_it_off.
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 1
cmp eax, ecx
jne case.0x41b167.32772
mov dword [0x4f1b08], ecx
mov dword [esp + 0x18], ecx
push ebx
lea edx, [esp + 0x18]
push edx
push ebx
push 0x20006
push ebx
push ebx
push ebx
push str.SoftwarePdaNetAndroid
push connect
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne case.0x41b167.32772
mov ecx, dword [esp + 0x14]
push 4
lea eax, [esp + 0x1c]
push eax
push 4
push ebx
push str.HideTetherUsage
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
mov eax, dword [esp + 0x28]
mov ecx, dword [eax + 0x10]
push 0x31
push str.PdaNet_Warning
push str.The_Hide_Tether_Usage_feature_works_by_striping_computer_usage_information_from_your_network_traffics._However_this_may_break_certain_network_applications_or_web_sites__such_as_those_with_Flash_contents__when_the_server_end_try_to_verify_your_computer_and_fail.__n_nSince_PdaNet_by_default_already_uses_your_phone_to_generate_all_network_requests__most_users_currently_do_not_need_this_extra_feature._n_nSelect__OK__to_enable_or__Cancel__to_keep_it_off.
push ecx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 1
jne case.0x41b167.32772
mov eax, 2
mov dword [0x4f1b08], eax
mov dword [esp + 0x18], eax
jmp 0x41b4bf
xor eax, eax
cmp dword [0x4f0cd0], ebx
push ebx
sete al
mov dword [0x4f0cd0], eax
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x18]
push eax
push ebx
push 0x20006
push ebx
push ebx
push ebx
push str.SoftwarePdaNetAndroid
push connect
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne case.0x41b167.32772
mov edx, dword [esp + 0x14]
push 4
lea ecx, [esp + 0x1c]
push ecx
push 4
push ebx
push str.115kbps
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [esp + 0x14]
push eax
jmp 0x41b505
push ebx
lea ecx, [esp + 0x18]
push ecx
push ebx
xor eax, eax
cmp dword [esp + 0x38], ebx
push 0x20006
push ebx
sete al
push ebx
push ebx
push str.SoftwarePdaNetAndroid
push connect
mov dword [esp + 0x50], eax
mov dword [esp + 0x3c], eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne case.0x41b167.32772
mov eax, dword [esp + 0x14]
push 4
lea edx, [esp + 0x1c]
push edx
push 4
push ebx
push str.AutoConnect
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [esp + 0x14]
push ecx
jmp 0x41b505
push ebx
call fcn.0040be60
add esp, 4
cmp dword [esp + 0x24], ebx
jne 0x41b70d
cmp eax, 6
jne 0x41b6d1
push 0x104
lea edx, [esp + 0x80]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [esp + 0x7c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
lea eax, [esp + 0x7c]
add eax, 0xffffffff
mov edi, edi
mov cl, byte [eax + 1]
add eax, 1
cmp cl, bl
jne 0x41b650
mov ecx, dword [str.PnHelp.exe]
mov edx, dword [0x4c2070]
push 1
push ebx
mov dword [eax], ecx
mov ecx, dword [0x4c2074]
mov dword [eax + 4], edx
push str._evdoOn
lea edx, [esp + 0x88]
push edx
push str.runas
push ebx
mov dword [eax + 8], ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
jge 0x41b6ea
push eax
lea eax, [esp + 0x184]
push str.Fail_to_launch_PnHelp.exe__err_d
push eax
call fcn.00432b54
add esp, 0xc
push 0x40
push str.PdaNet_Error
lea ecx, [esp + 0x188]
push ecx
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
push 1
push str.SYSTEMCurrentControlSetServicesTcpipParameters
push 0xfffe
push str.TcpWindowSize
call fcn.0040d400
add esp, 0x10
push 0x40
push str.PdaNet_Setting_Changed
push str.The_network_parameters_on_your_system_are_now_optimized_for_high_speed_data_connection.__nIt_will_be_effective_after_you_reboot_your_computer.
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
cmp eax, 6
jne 0x41b7c1
push 0x104
lea edx, [esp + 0x80]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [esp + 0x7c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
lea eax, [esp + 0x7c]
add eax, 0xffffffff
lea esp, [esp]
mov cl, byte [eax + 1]
add eax, 1
cmp cl, bl
jne 0x41b740
mov ecx, dword [str.PnHelp.exe]
mov edx, dword [0x4c2070]
push 1
push ebx
mov dword [eax], ecx
mov ecx, dword [0x4c2074]
mov dword [eax + 4], edx
push str._evdoOff
lea edx, [esp + 0x88]
push edx
push str.runas
push ebx
mov dword [eax + 8], ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
jge 0x41b7d6
push eax
lea eax, [esp + 0x184]
push str.Fail_to_launch_PnHelp.exe__err_d
push eax
call fcn.00432b54
add esp, 0xc
push 0x40
push str.PdaNet_Error
lea ecx, [esp + 0x188]
push ecx
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
push str.TcpWindowSize
push str.SYSTEMCurrentControlSetServicesTcpipParameters
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteValueA]
push 0x40
push str.PdaNet_Setting_Changed
push str.The_network_parameters_on_your_system_are_now_reverted_back_to_default_values.__nIt_will_be_effective_after_you_reboot_your_computer.
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
mov edx, dword [0x4f0f58]
push 5
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
push 3
push ebx
push ebx
push str.http:__www.junefabrics.com_android_beta.php_v417
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
push 3
push ebx
push ebx
push str.http:__www.junefabrics.com_android_faq.php_v417
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
mov eax, dword [0x4f0e00]
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
mov ecx, dword [esi + 0x10]
push 0x21
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
cmp dword [0x4f0c9c], ebx
jne 0x41b8c9
push ebx
mov ecx, 0x4f0bb0
call fcn.0040fc60
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x41b8c9
mov eax, dword [esi + 0x10]
push 0x21
push eax
call dword [sym.imp.USER32.dll_KillTimer]
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
mov ecx, dword [esi + 0x10]
push ebx
add eax, 0xa
push eax
push 0x21
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
xor eax, eax
mov ecx, dword [esp + 0x284]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x26c]
xor ecx, esp
call fcn.0043236c
add esp, 0x27c
ret 0x10