Function at 0x41dff0
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xcc
push ebx
push esi
push edi
call fcn.0041a8f0
mov esi, eax
call fcn.0041a980
mov ebx, dword [sym.imp.ole32.dll_CoInitialize]
push 0
call ebx
lea esi, [ebp - 0x48]
call fcn.0040bc30
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov ecx, esi
call fcn.00410ad0
mov eax, esi
push eax
call fcn.0040bd20
push 0
call ebx
mov edx, dword [0x4ae214]
mov eax, dword [edx + 0xc]
mov ecx, 0x4ae214
call eax
mov ecx, str.func
lea esi, [eax + 0x10]
mov dword [ebp - 4], esi
test ecx, 0xffff0000
jne 0x41e076
mov edx, ecx
movzx ebx, dx
push 0
push ebx
call fcn.0040b110
add esp, 8
test eax, eax
je 0x41e086
push ebx
push eax
lea ecx, [ebp - 4]
call fcn.00406e10
jmp 0x41e083
mov ebx, str.func
lea edi, [ebp - 4]
call fcn.00414800
mov esi, dword [ebp - 4]
lea eax, [ebp - 4]
push eax
lea ebx, [ebp - 0x10]
call fcn.00404c80
lea eax, [esi - 0x10]
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41e0ae
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, dword [ebp - 0x10]
mov esi, dword [sym.imp.MSVCR100.dll__wcsicmp]
push str.0x80
push edi
call esi
add esp, 8
test eax, eax
jne 0x41e1ca
push str.Mode
lea ecx, [ebp - 4]
call fcn.00405690
lea ecx, [ebp - 4]
push ecx
lea ebx, [ebp - 0xc]
call fcn.00404c80
mov eax, dword [ebp - 4]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41e102
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ebx, dword [ebp - 0xc]
push str.checkbrowser
push ebx
call esi
add esp, 8
test eax, eax
jne 0x41e129
lea esi, [ebp - 0x48]
call fcn.0040bc30
mov ecx, esi
push ecx
call fcn.0040ebe0
mov edx, esi
push edx
jmp 0x41e1a0
push str.checkbrowser2
push ebx
call esi
add esp, 8
test eax, eax
jne 0x41e14a
lea esi, [ebp - 0x48]
call fcn.0040bc30
mov eax, esi
push eax
call fcn.0040f850
jmp 0x41e19c
push str.diffbrowsers
push ebx
call esi
add esp, 8
test eax, eax
jne 0x41e170
lea esi, [ebp - 0x1c]
call fcn.00403430
mov edx, esi
push edx
call fcn.00403b20
call fcn.00403470
jmp 0x41e1a5
push str.defaultbrowser
push ebx
call esi
add esp, 8
test eax, eax
jne 0x41e1a5
lea esi, [ebp - 0x48]
call fcn.0040bc30
push ecx
mov ecx, esp
push 0x498b64
call fcn.00405690
mov eax, esi
push eax
call fcn.00410230
lea ecx, [ebp - 0x48]
push ecx
call fcn.0040bd20
lea eax, [ebx - 0x10]
lea edx, [eax + 0xc]
or ecx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41e701
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x41e701
push str.0x01
push edi
call esi
add esp, 8
test eax, eax
jne 0x41e1e3
call fcn.004226f0
jmp 0x41e701
push str.0x08
push edi
call esi
add esp, 8
test eax, eax
jne 0x41e1fc
call fcn.004179f0
jmp 0x41e701
push str.0x10
push edi
call esi
add esp, 8
test eax, eax
jne 0x41e2d7
push str.delaytime
lea ecx, [ebp - 8]
call fcn.00405690
lea ecx, [ebp - 8]
push ecx
lea ebx, [ebp - 4]
call fcn.00404c80
mov eax, dword [ebp - 8]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41e247
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push str.TimeDelay_StartBaiduBrowser
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov edi, dword [ebp - 4]
mov ebx, eax
test ebx, ebx
je 0x41e295
cmp dword [edi - 4], 1
jle 0x41e276
mov ecx, dword [edi - 0xc]
push ecx
lea ecx, [ebp - 4]
call fcn.00406630
mov edi, dword [ebp - 4]
push edi
call dword [sym.imp.MSVCR100.dll__wtoi]
imul eax, eax, 0x3e8
add esp, 4
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea esi, [ebp - 0x1c]
call fcn.00403430
call fcn.004039e0
call fcn.00403470
lea eax, [edi - 0x10]
lea edx, [eax + 0xc]
or ecx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41e2c3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test ebx, ebx
je 0x41e701
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x41e701
push str.0x04
push edi
call esi
add esp, 8
test eax, eax
jne 0x41e304
lea edi, [ebp - 0xc8]
call fcn.0041d750
mov eax, edi
call fcn.004200a0
mov esi, edi
call fcn.0041d7b0
jmp 0x41e701
lea ecx, [ebp - 0x10]
push ecx
mov ecx, str.0x02
call fcn.004057d0
test eax, eax
jne 0x41e352
lea eax, [ebp - 0xb8]
call fcn.0042e4d0
call fcn.00432340
mov dword [ebp - 0x64], eax
call fcn.00431f60
push 0
push 0
push 0
push 0x8000000
mov dword [ebp - 0x60], eax
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
lea esi, [ebp - 0xb8]
call fcn.0042d480
jmp 0x41e701
lea edx, [ebp - 0x10]
push edx
mov ecx, str.0x40
call fcn.004057d0
test eax, eax
jne 0x41e56f
push str.browsername
lea ecx, [ebp - 8]
call fcn.00405690
lea eax, [ebp - 8]
push eax
lea ebx, [ebp - 4]
call fcn.00404c80
lea ecx, [ebp - 8]
call fcn.00405660
push str.delaytime
lea ecx, [ebp - 8]
call fcn.00405690
lea ecx, [ebp - 8]
push ecx
lea ebx, [ebp - 0xc]
call fcn.00404c80
lea ecx, [ebp - 8]
call fcn.00405660
lea edx, [ebp - 4]
push edx
mov ecx, 0x49b01c
call fcn.004057d0
test eax, eax
jne 0x41e459
lea eax, [ebp - 0xb8]
call fcn.0042e4d0
call fcn.00432340
mov dword [ebp - 0x64], eax
call fcn.00431f60
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0xb8]
push eax
call fcn.0042e9a0
test eax, eax
je 0x41e557
call fcn.0042fe10
cmp dword [ebp - 0x60], 6
jl 0x41e422
call fcn.0042e510
test eax, eax
jne 0x41e422
lea ecx, [ebp - 8]
push ecx
mov edi, 0x49ca54
mov dword [ebp - 8], eax
call fcn.004326d0
add esp, 4
mov ebx, eax
neg ebx
sbb ebx, ebx
and ebx, dword [ebp - 8]
jmp 0x41e42f
lea ebx, [ebp - 0xb8]
call fcn.0042e570
mov ebx, eax
lea esi, [ebp - 0x48]
call fcn.0040bc30
push ebx
push ecx
mov ecx, esp
push str.Fix_IEDefault
call fcn.00405690
mov eax, esi
call fcn.00410d90
mov edx, esi
push edx
call fcn.0040bd20
jmp 0x41e557
lea eax, [ebp - 4]
push eax
mov ecx, str.baidu
call fcn.004057d0
test eax, eax
jne 0x41e562
lea eax, [ebp - 0xb8]
call fcn.0042e4d0
call fcn.00432340
mov dword [ebp - 0x64], eax
call fcn.00431f60
push str.TimeDelay_SetBaiduDefault
push 0
push 1
mov edi, eax
push 0
mov dword [ebp - 0x60], edi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov ebx, eax
test ebx, ebx
je 0x41e4ca
lea esi, [ebp - 0xc]
call fcn.00405f30
push eax
call dword [sym.imp.MSVCR100.dll__wtoi]
imul eax, eax, 0x3e8
add esp, 4
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp edi, 6
jl 0x41e500
call fcn.0042e510
test eax, eax
jne 0x41e4f7
lea ecx, [ebp - 8]
push ecx
mov edi, 0x49ca78
mov dword [ebp - 8], eax
call fcn.004326d0
add esp, 4
mov edi, eax
neg edi
sbb edi, edi
and edi, dword [ebp - 8]
jmp 0x41e50e
lea edx, [ebp - 0xb8]
push edx
jmp 0x41e507
lea eax, [ebp - 0xb8]
push eax
call fcn.0042e800
mov edi, eax
lea esi, [ebp - 0x48]
call fcn.0040bc30
push edi
push ecx
mov ecx, esp
push str.Fix_BaiduBrowserDefault
call fcn.00405690
mov eax, esi
call fcn.00410d90
mov ecx, esi
push ecx
call fcn.0040bd20
test edi, edi
je 0x41e54c
lea esi, [ebp - 0x48]
call fcn.0040bc30
call fcn.004128b0
mov edx, esi
push edx
call fcn.0040bd20
test ebx, ebx
je 0x41e557
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea esi, [ebp - 0xb8]
call fcn.0042d480
lea ecx, [ebp - 0xc]
call fcn.00405660
jmp 0x41e6f9
lea eax, [ebp - 0x10]
push eax
mov ecx, str.0x20
call fcn.004057d0
test eax, eax
jne 0x41e5d6
push str.statval
lea ecx, [ebp - 0xc]
call fcn.00405690
lea ecx, [ebp - 0xc]
push ecx
lea ebx, [ebp - 8]
call fcn.00404c80
lea ecx, [ebp - 0xc]
call fcn.00405660
lea esi, [ebp - 0x48]
call fcn.0040bc30
mov edx, dword [ebp - 8]
push ecx
add edx, 0xfffffff0
mov esi, esp
push edx
call fcn.00406aa0
add eax, 0x10
add esp, 4
mov dword [esi], eax
call fcn.0040d520
lea eax, [ebp - 0x48]
push eax
call fcn.0040bd20
mov ecx, ebx
jmp 0x41e6fc
lea ecx, [ebp - 0x10]
push ecx
mov ecx, str.0x21
call fcn.004057d0
test eax, eax
jne 0x41e63d
push str.statval
lea ecx, [ebp - 0xc]
call fcn.00405690
lea edx, [ebp - 0xc]
push edx
lea ebx, [ebp - 8]
call fcn.00404c80
lea ecx, [ebp - 0xc]
call fcn.00405660
lea esi, [ebp - 0x48]
call fcn.0040bc30
mov eax, dword [ebp - 8]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
call fcn.00406aa0
add eax, 0x10
add esp, 4
mov dword [esi], eax
call fcn.0040be50
lea ecx, [ebp - 0x48]
push ecx
call fcn.0040bd20
mov ecx, ebx
jmp 0x41e6fc
lea edx, [ebp - 0x10]
push edx
mov ecx, str.0x100
call fcn.004057d0
test eax, eax
jne 0x41e701
push str.type
lea ecx, [ebp - 0xc]
call fcn.00405690
lea eax, [ebp - 0xc]
push eax
lea ebx, [ebp - 4]
call fcn.00404c80
lea ecx, [ebp - 0xc]
call fcn.00405660
mov ecx, dword [ebp - 4]
cmp dword [ecx - 0xc], 0
je 0x41e6f9
lea esi, [ebp - 0x54]
call fcn.0041af50
lea esi, [ebp - 0x1c]
call fcn.00403430
lea edx, [ebp - 0x54]
push edx
call fcn.00404580
mov eax, ebx
push eax
mov ecx, str.WENKU
call fcn.004057d0
test eax, eax
jne 0x41e6b0
mov dword [ebp - 0x20], 1
jmp 0x41e6e0
lea ecx, [ebp - 4]
push ecx
mov ecx, str.TIEBA
call fcn.004057d0
test eax, eax
jne 0x41e6cb
mov dword [ebp - 0x20], 2
jmp 0x41e6e0
lea edx, [ebp - 4]
push edx
mov ecx, str.DEFAULT
call fcn.004057d0
test eax, eax
jne 0x41e6e0
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x54]
push eax
call fcn.00404690
lea esi, [ebp - 0x1c]
call fcn.00403470
lea esi, [ebp - 0x54]
call fcn.0041b020
lea ecx, [ebp - 4]
call fcn.00405660
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, reloc.NETAPI32.dll_NetApiBufferFree
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41e726
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret