Function at 0x4612d8
Capabilities:
Parse url

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ade1f
mov eax, dword fs:[0]
push eax
mov eax, 0x1a3c
call fcn.00592460
mov eax, dword [0x606c40]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x19bc], eax
mov eax, dword [ebp + 0xc]
push 0x7e
mov dword [ebp - 0x1998], eax
pop esi
xor eax, eax
xor ebx, ebx
push esi
mov word [ebp - 0x310], ax
lea eax, [ebp - 0x30e]
push ebx
push eax
mov dword [ebp - 0x19a8], ebx
call fcn.005847c0
lea eax, [ebp - 0x310]
add esp, 0xc
push eax
call fcn.00427b5a
pop ecx
xor eax, eax
push esi
mov word [ebp - 0x210], ax
lea eax, [ebp - 0x20e]
push ebx
push eax
call fcn.005847c0
add esp, 0xc
push ebx
lea eax, [ebp - 0x210]
push 0x40
push eax
call fcn.00427a24
add esp, 0xc
xor eax, eax
push esi
mov word [ebp - 0x90], ax
lea eax, [ebp - 0x8e]
push ebx
push eax
call fcn.005847c0
mov edi, dword [0x5b14c4]
add esp, 0xc
lea eax, [ebp - 0x19c4]
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x19c0]
push eax
push str.umid
push str.Softwarehao123JuziBrowser
push 0x80000001
mov dword [ebp - 0x19c0], 1
mov dword [ebp - 0x19c4], esi
call edi
xor eax, eax
push esi
mov word [ebp - 0x290], ax
lea eax, [ebp - 0x28e]
push ebx
push eax
call fcn.005847c0
lea eax, [ebp - 0x290]
add esp, 0xc
push eax
call fcn.00427b7e
pop ecx
xor eax, eax
push esi
mov word [ebp - 0x110], ax
lea eax, [ebp - 0x10e]
push ebx
push eax
call fcn.005847c0
add esp, 0xc
lea eax, [ebp - 0x110]
push 0x40
push eax
call fcn.004282ec
pop ecx
pop ecx
push 4
pop esi
lea eax, [ebp - 0x19b8]
push eax
lea eax, [ebp - 0x198c]
push eax
lea eax, [ebp - 0x19b4]
push eax
push str.ucount
push str.SOFTWAREMicrosoftWindowsCurrentVersionApp_PathsJzbstall.exe
push 0x80000002
mov dword [ebp - 0x198c], ebx
mov dword [ebp - 0x19b4], esi
mov dword [ebp - 0x19b8], esi
call edi
test eax, eax
jne 0x461468
cmp dword [ebp - 0x19b4], esi
je 0x46146e
mov dword [ebp - 0x198c], ebx
mov eax, 0x7fff
cmp dword [ebp - 0x198c], eax
jbe 0x461481
mov dword [ebp - 0x198c], eax
lea eax, [ebp - 0x19c8]
push eax
lea eax, [ebp - 0x1994]
push eax
lea eax, [ebp - 0x19a0]
push eax
push str.dhlastcktm
push str.Softwarehao123JuziBrowser
push 0x80000001
mov dword [ebp - 0x1994], ebx
mov dword [ebp - 0x19a0], esi
mov dword [ebp - 0x19c8], esi
call edi
test eax, eax
jne 0x4614c5
cmp dword [ebp - 0x19a0], esi
je 0x4614cb
mov dword [ebp - 0x1994], ebx
push ebx
call fcn.0057e5af
pop ecx
push esi
mov dword [ebp - 0x19a4], eax
lea eax, [ebp - 0x19a4]
push eax
push esi
push str.dhlastcktm
push str.Softwarehao123JuziBrowser
push 0x80000001
call dword [0x5b14c0]
mov eax, dword [ebp - 0x1994]
mov dword [ebp - 0x19f0], eax
lea eax, [ebp - 0x19f0]
push eax
mov dword [ebp - 0x19b0], ebx
xor edi, edi
mov dword [ebp - 0x19ec], ebx
call fcn.0057f9c0
pop ecx
cmp eax, ebx
je 0x461524
mov edi, dword [eax + 0xc]
mov eax, dword [ebp - 0x19a4]
mov dword [ebp - 0x19e8], eax
lea eax, [ebp - 0x19e8]
push eax
xor esi, esi
mov dword [ebp - 0x19e4], ebx
call fcn.0057f9c0
pop ecx
cmp eax, ebx
je 0x46154c
mov esi, dword [eax + 0xc]
cmp edi, esi
je 0x46155a
mov dword [ebp - 0x19b0], 1
xor eax, eax
mov esi, 0x206
push esi
mov word [ebp - 0x518], ax
lea eax, [ebp - 0x516]
push ebx
push eax
mov dword [ebp - 0x199c], ebx
call fcn.005847c0
add esp, 0xc
push str.Installer
push 0x6246b8
lea eax, [ebp - 0x518]
push eax
call dword [0x5b14d0]
push str.hao123VOLService.exe
lea eax, [ebp - 0x518]
push eax
call dword [0x5b14cc]
lea eax, [ebp - 0x518]
push eax
call dword [0x5b14d8]
test eax, eax
je 0x4615c3
mov dword [ebp - 0x199c], 1
push 0x461b44
push 0x460803
push 2
push 0xc
lea eax, [ebp - 0x1a08]
push eax
call fcn.00582e34
lea eax, [ebp - 0x1a08]
push eax
mov dword [ebp - 4], ebx
call fcn.0042a696
pop ecx
xor eax, eax
push esi
mov word [ebp - 0x720], ax
lea eax, [ebp - 0x71e]
push ebx
push eax
call fcn.005847c0
mov eax, dword [ebp - 0x1a00]
add esp, 0xc
call fcn.0042ca8c
cmp eax, ebx
je 0x461635
cmp word [eax], bx
je 0x461635
lea ecx, [ebp - 0x720]
push ecx
push str.__src
push eax
mov edi, 0x103
call fcn.0042473f
add esp, 0xc
lea eax, [ebp - 0x19e0]
push eax
call fcn.004fae32
lea eax, [ebp - 0x19e0]
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x1a00]
push eax
call fcn.0042cae2
mov eax, dword [ebp - 0x19d0]
sub eax, dword [ebp - 0x19d4]
pop ecx
cdq
push 0x1c
pop ecx
idiv ecx
mov edi, 0x61f08c
mov ecx, edi
mov esi, eax
mov eax, dword [0x61f08c]
neg esi
sbb esi, esi
inc esi
mov dword [ebp - 0x197c], esi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1988], eax
lea eax, [ebp - 0x1988]
push eax
mov byte [ebp - 4], 2
push 1
cmp esi, ebx
je 0x4616a9
lea eax, [ebp - 0x720]
push eax
jmp 0x4616ae
push 0x5d2d14
call fcn.00425e27
mov eax, dword [0x61f08c]
add esp, 0xc
mov ecx, edi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1990], eax
mov byte [ebp - 4], 3
mov eax, dword [0x61f08c]
mov ecx, edi
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x19ac], esi
mov byte [ebp - 4], 4
cmp dword [ebp - 0x197c], ebx
jne 0x4617e7
xor eax, eax
push 0x200
mov word [ebp - 0x928], ax
lea eax, [ebp - 0x926]
push ebx
push eax
call fcn.005847c0
add esp, 0xc
xor eax, eax
push 0x1048
mov word [ebp - 0x1978], ax
lea eax, [ebp - 0x1976]
push ebx
push eax
call fcn.005847c0
add esp, 0xc
push 0x38
lea eax, [ebp - 0x1a40]
push ebx
push eax
mov dword [ebp - 0x1a44], 0x3c
call fcn.005847c0
lea eax, [ebp - 0x928]
add esp, 0xc
mov dword [ebp - 0x1a34], eax
lea eax, [ebp - 0x1978]
push ebx
lea esi, [ebp - 0x19e0]
mov dword [ebp - 0x1a30], 0x104
mov dword [ebp - 0x1a18], eax
mov dword [ebp - 0x1a14], 0x824
call fcn.004048a3
mov eax, dword [eax + 0x14]
push ebx
mov dword [ebp - 0x1984], eax
call fcn.004048a3
cmp dword [eax + 0x18], 8
jb 0x46179a
mov eax, dword [eax + 4]
jmp 0x46179d
add eax, 4
lea ecx, [ebp - 0x1a44]
push ecx
push ebx
push dword [ebp - 0x1984]
push eax
call dword [0x61e868]
lea eax, [ebp - 0x1990]
push eax
push 1
push dword [ebp - 0x19f8]
call fcn.00425e27
add esp, 0xc
lea eax, [ebp - 0x19ac]
push eax
lea eax, [ebp - 0x928]
push 1
push eax
call fcn.00425e27
mov esi, dword [ebp - 0x19ac]
add esp, 0xc
mov eax, dword [0x61f08c]
mov ecx, edi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1984], eax
mov byte [ebp - 4], 5
mov eax, 0x6a2cec
cmp word [0x6a2cec], bx
jne 0x461811
mov eax, str.default
lea ecx, [ebp - 0x1984]
push ecx
push ebx
push eax
call fcn.00425e27
mov eax, dword [0x61f08c]
add esp, 0xc
mov ecx, edi
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1980], eax
mov byte [ebp - 4], 6
cmp dword [ebp - 0x197c], ebx
je 0x46184d
mov dword [ebp - 0x197c], 0x5d2d14
jmp 0x461859
mov eax, dword [ebp - 0x1990]
mov dword [ebp - 0x197c], eax
xor eax, eax
cmp ax, word [0x6276d0]
jne 0x46186d
call fcn.00403b76
mov edi, eax
jmp 0x461872
mov edi, 0x6276d0
push 8
call fcn.0042860d
pop ecx
push eax
push ecx
push 7
call fcn.0042860d
pop ecx
pop ecx
push eax
push 6
call fcn.0042860d
pop ecx
push eax
push ecx
push 5
call fcn.0042860d
pop ecx
pop ecx
push eax
push 4
call fcn.0042860d
pop ecx
push eax
push ecx
push 3
call fcn.0042860d
pop ecx
pop ecx
push eax
push 2
call fcn.0042860d
pop ecx
push eax
push ecx
push 1
call fcn.0042860d
pop ecx
pop ecx
push eax
push ebx
call fcn.0042860d
pop ecx
push eax
push dword [0x69c480]
push ebx
push ebx
call fcn.0042a07a
pop ecx
pop ecx
push eax
push ecx
push ebx
push 1
call fcn.0042a07a
add esp, 0xc
push eax
call fcn.0040914b
push eax
call fcn.00409176
push eax
push dword [ebp - 0x1988]
lea eax, [ebp - 0x290]
push dword [ebp - 0x1984]
push eax
push esi
push dword [ebp - 0x197c]
call fcn.00429f10
movzx eax, al
push eax
push dword [ebp - 0x199c]
push dword [ebp - 0x19b0]
push dword [ebp - 0x198c]
push 6
pop eax
call fcn.00428576
push eax
push ecx
push 5
pop eax
call fcn.00428576
pop ecx
push eax
push 4
pop eax
call fcn.00428576
push eax
push ecx
push 3
pop eax
call fcn.00428576
pop ecx
push eax
push 2
pop eax
call fcn.00428576
push eax
xor eax, eax
push ecx
inc eax
call fcn.00428576
pop ecx
push eax
call fcn.00429dc4
movzx eax, al
push eax
call fcn.00428405
movzx eax, al
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.00428298
movzx eax, al
push eax
call fcn.00427f8b
movzx eax, al
push eax
call fcn.0042817a
movzx eax, al
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x310]
push eax
push edi
push str.ver_scid_smid_sumid_sos_dsafe_die_dflash_sfop_dh_dch1_dch2_dch3_dch4_dch5_dch6_dch7_dch8_dch9_dds_dop1_sop2_sop3_sop4_sop5_sdb_dsd1_dsd2_dsd3_dss1_dss2_dss3_dss4_dss5_dss6_dss7_dss8_dss9_d
lea eax, [ebp - 0x1980]
call fcn.0040497e
add esp, 0x9c
push dword [ebp - 0x1980]
lea eax, [ebp - 0x197c]
push eax
call fcn.0047bc06
pop ecx
pop ecx
mov byte [ebp - 4], 7
mov edi, dword [ebp - 0x197c]
cmp edi, ebx
je 0x461a3d
push str.aT6Qrs8Ht_Z_r6__T9_QAz
lea eax, [ebp - 0x197c]
push eax
call fcn.00417d49
xor eax, eax
push 0x7e
mov word [ebp - 0x190], ax
lea eax, [ebp - 0x18e]
push ebx
push eax
call fcn.005847c0
mov edi, dword [ebp - 0x197c]
add esp, 0xc
push dword [edi - 0xc]
lea ebx, [ebp - 0x190]
mov ecx, edi
call fcn.0046c724
pop ecx
test eax, eax
je 0x461a3b
mov eax, ebx
push eax
push dword [ebp - 0x1998]
call fcn.004074ff
xor ebx, ebx
mov eax, dword [ebp - 0x1998]
mov eax, dword [eax]
cmp dword [eax - 0xc], ebx
jne 0x461a5d
lea eax, [edi - 0x10]
call fcn.0040758d
mov eax, dword [ebp - 0x1980]
add eax, 0xfffffff0
jmp 0x461aba
push 4
push str.ck
lea eax, [ebp - 0x1980]
call fcn.0040a018
mov eax, dword [ebp - 0x1998]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x1980]
call fcn.0040a018
mov ebx, dword [ebp - 0x1980]
mov eax, dword [ebp - 0x19bc]
push ebx
push str.http:__update.123juzi.net_update.php
push 0x5d6678
call fcn.0040497e
add esp, 0xc
lea eax, [edi - 0x10]
mov dword [ebp - 0x19a8], 1
call fcn.0040758d
lea eax, [ebx - 0x10]
call fcn.0040758d
mov eax, dword [ebp - 0x1984]
add eax, 0xfffffff0
call fcn.0040758d
lea eax, [esi - 0x10]
call fcn.0040758d
mov eax, dword [ebp - 0x1990]
add eax, 0xfffffff0
call fcn.0040758d
mov eax, dword [ebp - 0x1988]
add eax, 0xfffffff0
call fcn.0040758d
lea esi, [ebp - 0x19e0]
call fcn.0040490e
push dword [ebp - 0x19e0]
call fcn.0057d6c3
or dword [ebp - 4], 0xffffffff
mov dword [esp], 0x461b44
push 2
push 0xc
lea eax, [ebp - 0x1a08]
push eax
call fcn.00582ef7
mov eax, dword [ebp - 0x19a8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0057d6ce
leave
ret 8