Function at 0x49c2a5
Capabilities:
Check if file exists
Persist via run registry key

Disassembly:
push 0xe0
mov eax, 0x6649c3
call fcn.006098b5
mov ebx, ecx
push str.UserInfo
lea ecx, [ebp - 0x90]
call fcn.004177e7
push ecx
mov ecx, esp
push 0x6afea4
call fcn.004177e7
push ecx
mov esi, esp
mov edi, dword [ebp - 0x90]
add edi, 0xfffffff0
push edi
call fcn.00418dea
pop ecx
add eax, 0x10
mov dword [esi], eax
mov ecx, 0x735c50
call fcn.0047fa43
push ecx
mov ecx, esp
push 0x6afeac
call fcn.004177e7
push ecx
mov esi, esp
push edi
call fcn.00418dea
pop ecx
add eax, 0x10
mov dword [esi], eax
lea eax, [ebp - 0x8c]
push eax
mov ecx, 0x735c50
call fcn.004987e3
push ecx
mov ecx, esp
push str.aesuserhash
call fcn.004177e7
push ecx
mov esi, esp
push edi
call fcn.00418dea
pop ecx
add eax, 0x10
mov dword [esi], eax
lea eax, [ebp - 0x88]
push eax
mov ecx, 0x735c50
call fcn.004987e3
push ecx
mov ecx, esp
push str.desuserhash
call fcn.004177e7
push ecx
mov esi, esp
push edi
call fcn.00418dea
pop ecx
add eax, 0x10
mov dword [esi], eax
lea eax, [ebp - 0xa8]
push eax
mov ecx, 0x735c50
call fcn.004987e3
push ecx
mov ecx, esp
push str.nickname
call fcn.004177e7
push ecx
mov esi, esp
push edi
call fcn.00418dea
pop ecx
add eax, 0x10
mov dword [esi], eax
lea eax, [ebp - 0x84]
push eax
mov ecx, 0x735c50
call fcn.004987e3
lea eax, [ebp - 0x8c]
push eax
mov ecx, 0x735d88
call fcn.00418bac
lea eax, [ebp - 0x88]
push eax
mov ecx, 0x735d80
call fcn.00418bac
lea eax, [ebp - 0x84]
push eax
mov ecx, 0x735d7c
call fcn.00418bac
lea ecx, [ebp - 0x44]
call fcn.00417833
xor eax, eax
inc eax
push eax
push ecx
mov ecx, esp
push str.SoftwareMicrosoftWindowsCurrentVersionRun
call fcn.004177e7
push SysReAllocString
lea ecx, [ebp - 0x44]
call fcn.004f7115
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.mytime
call fcn.004177e7
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x44]
call fcn.004e6ef3
push dword [ebp - 0x80]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
setne byte [0x735a64]
push ecx
mov ecx, esp
push 0x6b0340
call fcn.004177e7
push ecx
mov ecx, esp
push str.HaveSetAutoStart
call fcn.004177e7
mov edi, 0x735bd8
mov ecx, edi
call fcn.00498639
test eax, eax
setne al
mov byte [ebx + 0x4d8], al
push ecx
mov ecx, esp
push str.PlaySoundTime_24
call fcn.004177e7
push ecx
mov ecx, esp
mov ebx, str.Timekeeping
push ebx
call fcn.004177e7
mov ecx, edi
call fcn.00498639
test eax, eax
setne byte [0x735a61]
push ecx
mov ecx, esp
push str.PlayWhenFull
call fcn.004177e7
push ecx
mov ecx, esp
push ebx
call fcn.004177e7
mov ecx, edi
call fcn.00498639
test eax, eax
setne byte [0x735a62]
push ecx
mov ecx, esp
push 0x6b3e98
call fcn.004177e7
push ecx
mov ecx, esp
push str.basicset
call fcn.004177e7
mov ecx, edi
call fcn.00498639
test eax, eax
setne byte [0x735a63]
push ecx
mov ecx, esp
push str.Value
call fcn.004177e7
push ecx
mov ecx, esp
push str.WeekFirstDay
call fcn.004177e7
mov ecx, edi
call fcn.00498988
mov byte [0x735a28], al
push ecx
mov ecx, esp
push str.Show
call fcn.004177e7
push ecx
mov ecx, esp
mov esi, str.FlowShowTime
push esi
call fcn.004177e7
mov ecx, edi
call fcn.00498639
test eax, eax
setne byte [0x735646]
push ecx
mov ecx, esp
push str.Time
call fcn.004177e7
push ecx
mov ecx, esp
push esi
call fcn.004177e7
mov ecx, edi
call fcn.004988b5
fstp dword [ebp - 0x14]
movss xmm0, dword [ebp - 0x14]
comiss xmm0, dword [0x6849b4]
jb 0x49c56d
movss dword [0x73563c], xmm0
push ecx
mov ecx, esp
push str.OpenSound
call fcn.004177e7
push ecx
mov ecx, esp
push ebx
call fcn.004177e7
mov ecx, edi
call fcn.00498639
test eax, eax
setne byte [0x735a4b]
push ecx
mov ecx, esp
push str.PlaySoundTime_30
call fcn.004177e7
push ecx
mov ecx, esp
push ebx
call fcn.004177e7
mov ecx, edi
call fcn.00498639
test eax, eax
setne byte [0x735a60]
push ecx
mov ecx, esp
push str.WeatherPlay
call fcn.004177e7
push ecx
mov ecx, esp
push ebx
call fcn.004177e7
mov ecx, edi
call fcn.00498639
test eax, eax
setne byte [0x735a65]
push ecx
mov ecx, esp
mov ebx, str.Open
push ebx
call fcn.004177e7
push ecx
mov ecx, esp
mov esi, str.Sound_TimeInterval
push esi
call fcn.004177e7
mov ecx, edi
call fcn.00498639
test eax, eax
setne byte [0x735a66]
push ecx
mov ecx, esp
push 0x6b416c
call fcn.004177e7
push ecx
mov ecx, esp
push esi
call fcn.004177e7
mov ecx, edi
call fcn.00498988
mov byte [0x735a67], al
push ecx
mov ecx, esp
push str.Upper
call fcn.004177e7
push ecx
mov ecx, esp
push esi
call fcn.004177e7
mov ecx, edi
call fcn.00498988
mov byte [0x735a68], al
cmp byte [0x735a67], 0
jne 0x49c66a
test al, al
jne 0x49c66a
mov byte [0x735a67], 0x17
mov byte [0x735a68], 6
push ecx
mov ecx, esp
push ebx
call fcn.004177e7
push ecx
mov ecx, esp
mov esi, str.HolidayRemind
push esi
call fcn.004177e7
mov ecx, edi
call fcn.00498639
test eax, eax
setne byte [0x735a6a]
push ecx
mov ecx, esp
push str.Holiday
call fcn.004177e7
push ecx
mov ecx, esp
push esi
call fcn.004177e7
mov ecx, edi
call fcn.00498639
test eax, eax
setne byte [0x735a6b]
push ecx
mov ecx, esp
push str.Birthday
call fcn.004177e7
push ecx
mov ecx, esp
push esi
call fcn.004177e7
mov ecx, edi
call fcn.00498639
test eax, eax
setne byte [0x735a6c]
push ecx
mov ecx, esp
push str.OpenWeatherRemind
call fcn.004177e7
push ecx
mov ecx, esp
push str.WeatherRemind
call fcn.004177e7
mov ecx, edi
call fcn.00498639
test eax, eax
setne byte [0x735a69]
call fcn.00418f81
push eax
lea ecx, [ebp - 0x18]
call fcn.0041775d
push ecx
mov ecx, esp
mov esi, 0x68c444
push esi
call fcn.004177e7
push ecx
mov ecx, esp
push str.SoundPack
call fcn.004177e7
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
call fcn.004987e3
push eax
lea ecx, [ebp - 0x18]
call fcn.00418bac
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00419521
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], 0
je 0x49c766
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x735bd4
call fcn.00418bac
push ecx
mov ecx, esp
push esi
call fcn.004177e7
push ecx
mov ecx, esp
push str.WeatherIconPack
call fcn.004177e7
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
call fcn.004987e3
push eax
lea ecx, [ebp - 0x18]
call fcn.00418bac
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00419521
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], 0
je 0x49c7b2
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x735c4c
call fcn.00418bac
push ecx
mov ecx, esp
push str.Type
call fcn.004177e7
push ecx
mov ecx, esp
push str.AutoTime
call fcn.004177e7
mov ecx, edi
call fcn.00498988
mov dword [0x735a70], eax
push ecx
mov ecx, esp
push str.DateTimeLine
call fcn.004177e7
push ecx
mov ecx, esp
mov ebx, str.DateFormat
push ebx
call fcn.004177e7
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
call fcn.004987e3
push eax
lea ecx, [ebp - 0x18]
call fcn.00418bac
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00419521
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], 0
je 0x49c829
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x735a94
call fcn.00418bac
push ecx
mov ecx, esp
push str.DateTimeLine2
call fcn.004177e7
push ecx
mov ecx, esp
push ebx
call fcn.004177e7
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
call fcn.004987e3
push eax
lea ecx, [ebp - 0x18]
call fcn.00418bac
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00419521
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], 0
je 0x49c875
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x735a98
call fcn.00418bac
push ecx
mov ecx, esp
push str.Switch
call fcn.004177e7
push ecx
mov ecx, esp
mov esi, 0x6b44f4
push esi
call fcn.004177e7
mov ecx, edi
call fcn.00498639
test eax, eax
setne byte [0x735644]
push ecx
mov ecx, esp
push str.TimeCount
call fcn.004177e7
push ecx
mov ecx, esp
push esi
call fcn.004177e7
mov ecx, edi
call fcn.00498988
push 5
pop ecx
test eax, eax
cmovle eax, ecx
mov dword [0x735630], eax
push ecx
mov ecx, esp
push str.TimeCount_Weather
call fcn.004177e7
push ecx
mov ecx, esp
push esi
call fcn.004177e7
mov ecx, edi
call fcn.00498988
push 3
pop ecx
test eax, eax
cmovle eax, ecx
mov dword [0x735634], eax
push ecx
mov ecx, esp
push str.Order
call fcn.004177e7
push ecx
mov ecx, esp
push str.SwitchOrder
call fcn.004177e7
mov ecx, edi
call fcn.00498988
test eax, eax
push 1
pop ecx
cmovle eax, ecx
mov dword [0x735638], eax
push ecx
mov ecx, esp
push str.Receive
call fcn.004177e7
push ecx
mov ecx, esp
push str.MessageReceive
call fcn.004177e7
mov ecx, edi
call fcn.00498639
test eax, eax
setne byte [0x735a6d]
xor edi, edi
mov ebx, edi
mov dword [ebp - 0x9c], ebx
mov esi, edi
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x94], edi
push ecx
mov ecx, esp
push str.UserConfig
call fcn.004177e7
push ecx
mov ecx, esp
push str.WeatherConfig
call fcn.004177e7
lea eax, [ebp - 0x7c]
push eax
mov ecx, 0x735bd8
call fcn.004987e3
mov eax, dword [ebp - 0x7c]
cmp dword [eax - 0xc], ebx
je 0x49c9d1
push ecx
mov esi, esp
add eax, 0xfffffff0
push eax
call fcn.00418dea
pop ecx
add eax, 0x10
mov dword [esi], eax
lea eax, [ebp - 0x74]
push eax
call fcn.004526e7
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x9c]
call fcn.0044a7ac
lea ecx, [ebp - 0x74]
call fcn.0050ed8e
mov esi, dword [ebp - 0x98]
mov ebx, dword [ebp - 0x9c]
mov eax, edi
sub esi, ebx
sar esi, 4
test esi, esi
je 0x49ca40
lea ecx, [ebx + 0xc]
cmp byte [ecx], 0
jne 0x49c9ee
inc eax
add ecx, 0x10
cmp eax, esi
jb 0x49c9df
jmp 0x49ca40
add eax, eax
lea esi, [ebx + eax*8]
mov eax, dword [esi]
cmp dword [eax - 0xc], edi
je 0x49ca02
mov eax, dword [esi + 4]
cmp dword [eax - 0xc], edi
jne 0x49ca0a
mov eax, dword [esi + 8]
cmp dword [eax - 0xc], edi
je 0x49ca40
push esi
mov ecx, 0x735b1c
call fcn.00418bac
push 0x6809b0
mov ecx, 0x735b04
call fcn.004195af
lea eax, [esi + 8]
push eax
mov ecx, 0x735b08
call fcn.00418bac
lea eax, [esi + 4]
push eax
mov ecx, 0x735b0c
call fcn.00418bac
push ecx
mov ecx, esp
push str.HaveSet
call fcn.004177e7
push ecx
mov ecx, esp
mov ebx, str.PluginsList
push ebx
call fcn.004177e7
mov esi, 0x735bd8
mov ecx, esi
call fcn.00498639
test eax, eax
setne al
mov byte [ebp - 0x19], al
test al, al
jne 0x49cace
push ecx
mov ecx, esp
push str.true
call fcn.004177e7
push ecx
mov ecx, esp
push str.HaveSet
call fcn.004177e7
push ecx
mov ecx, esp
push ebx
call fcn.004177e7
mov ecx, esi
call fcn.004fdb1b
push ecx
mov ecx, esp
push str.1_2_6_5_
call fcn.004177e7
push ecx
mov ecx, esp
mov ebx, str.ListValue
push ebx
call fcn.004177e7
push ecx
mov ecx, esp
push str.PluginsList
call fcn.004177e7
mov ecx, esi
call fcn.004fdb1b
jmp 0x49cad3
mov ebx, str.ListValue
push ecx
mov ecx, esp
push ebx
call fcn.004177e7
push ecx
mov ecx, esp
push str.PluginsList
call fcn.004177e7
lea eax, [ebp - 0x20]
push eax
mov ecx, esi
call fcn.004987e3
cmp byte [ebp - 0x19], 0
je 0x49cbc1
mov esi, 0x6809b0
push esi
push 0x6bbe4c
lea ecx, [ebp - 0x20]
call fcn.004e936a
push esi
push 0x6bbe54
lea ecx, [ebp - 0x20]
call fcn.004e936a
push edi
mov esi, 0x6bbe5c
push esi
lea ecx, [ebp - 0x20]
call fcn.004713d7
test eax, eax
setns al
test al, al
jne 0x49cbb1
lea ecx, [ebp - 0x60]
call fcn.00417833
xor eax, eax
inc eax
push eax
push ecx
mov ecx, esp
push str.SoftwareRuanMeiMyTime
call fcn.004177e7
push SysReAllocString
lea ecx, [ebp - 0x60]
call fcn.004f7115
push edi
push ecx
mov ecx, esp
push str.lapinflow
call fcn.004177e7
lea ecx, [ebp - 0x60]
call fcn.004e6bc5
test eax, eax
setne al
test al, al
jne 0x49cb9e
push esi
lea ecx, [ebp - 0x20]
call fcn.004228d4
xor eax, eax
inc eax
push eax
push ecx
mov ecx, esp
push str.lapinflow
call fcn.004177e7
lea ecx, [ebp - 0x60]
call fcn.00508415
lea ecx, [ebp - 0x60]
call fcn.00418dd0
mov ecx, dword [ebp - 0x50]
lea ecx, [ecx - 0x10]
call fcn.00419521
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x735ae4
call fcn.00418bac
jmp 0x49cbc6
mov esi, 0x6bbe5c
push ecx
mov ecx, esp
push str.ShowLunarCalendar
call fcn.004177e7
push ecx
mov ecx, esp
push str.DeskCalendar
call fcn.004177e7
mov ecx, 0x735bd8
call fcn.00498639
test eax, eax
setne byte [0x735a2b]
push ecx
mov ecx, esp
push str.LockDeskCalendar
call fcn.004177e7
push ecx
mov ecx, esp
push str.DeskCalendar
call fcn.004177e7
mov ecx, 0x735bd8
call fcn.00498639
test eax, eax
setne byte [0x735a48]
xor eax, eax
inc eax
mov byte [0x735a49], al
push ecx
mov ecx, esp
push str.SkinName
call fcn.004177e7
push ecx
mov ecx, esp
push str.DeskCalendar
call fcn.004177e7
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x735bd8
call fcn.004987e3
push eax
lea ecx, [ebp - 0x18]
call fcn.00418bac
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00419521
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], edi
je 0x49cc7a
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x735bc4
call fcn.00418bac
push ecx
mov ecx, esp
push str.Trans
call fcn.004177e7
push ecx
mov ecx, esp
push str.DeskCalendar
call fcn.004177e7
mov ecx, 0x735bd8
call fcn.00498988
xor ecx, ecx
inc ecx
test eax, eax
cmovg ecx, eax
mov dword [0x735a4c], ecx
push ecx
mov ecx, esp
push str.SizeMultiple
call fcn.004177e7
push ecx
mov ecx, esp
push str.DeskCalendar
call fcn.004177e7
mov ecx, 0x735bd8
call fcn.00498988
push 0x64
pop ecx
test eax, eax
cmovg ecx, eax
mov dword [0x735a50], ecx
push ecx
mov ecx, esp
push str.XPos
call fcn.004177e7
push ecx
mov ecx, esp
push str.DeskCalendar
call fcn.004177e7
mov ecx, 0x735bd8
call fcn.00498988
test eax, eax
jg 0x49cd12
push edi
call dword [sym.imp.USER32.dll_GetSystemMetrics]
add eax, 0xfffffe5d
mov dword [0x735a54], eax
push ecx
mov ecx, esp
push str.YPos
call fcn.004177e7
push ecx
mov ecx, esp
push str.DeskCalendar
call fcn.004177e7
mov ecx, 0x735bd8
call fcn.00498988
push 0x32
pop ecx
test eax, eax
cmovs eax, ecx
mov dword [0x735a58], eax
push ecx
mov ecx, esp
push str.HaveSet
call fcn.004177e7
push ecx
mov ecx, esp
push str.DeskCalendar
call fcn.004177e7
mov ecx, 0x735bd8
call fcn.00498639
test eax, eax
setne al
mov byte [ebp - 0x19], al
test al, al
jne 0x49cdd6
push ecx
mov ecx, esp
push str.true
call fcn.004177e7
push ecx
mov ecx, esp
push str.HaveSet
call fcn.004177e7
push ecx
mov ecx, esp
push str.DeskCalendar
call fcn.004177e7
mov ecx, 0x735bd8
call fcn.004fdb1b
push ecx
mov ecx, esp
push str.1_2_6_5_
call fcn.004177e7
push ecx
mov ecx, esp
push ebx
call fcn.004177e7
push ecx
mov ecx, esp
push str.DeskCalendar
call fcn.004177e7
mov ecx, 0x735bd8
call fcn.004fdb1b
push ecx
mov ecx, esp
push ebx
call fcn.004177e7
push ecx
mov ecx, esp
push str.DeskCalendar
call fcn.004177e7
lea eax, [ebp - 0x14]
push eax
mov ebx, 0x735bd8
mov ecx, ebx
call fcn.004987e3
push eax
lea ecx, [ebp - 0x20]
call fcn.00418bac
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00419521
cmp byte [ebp - 0x19], 0
je 0x49ced9
push 0x6809b0
push 0x6bbe4c
lea ecx, [ebp - 0x20]
call fcn.004e936a
push 0x6809b0
push 0x6bbe54
lea ecx, [ebp - 0x20]
call fcn.004e936a
push edi
push esi
lea ecx, [ebp - 0x20]
call fcn.004713d7
test eax, eax
setns al
test al, al
jne 0x49cecb
lea ecx, [ebp - 0x60]
call fcn.00417833
xor eax, eax
inc eax
push eax
push ecx
mov ecx, esp
push str.SoftwareRuanMeiMyTime
call fcn.004177e7
push SysReAllocString
lea ecx, [ebp - 0x60]
call fcn.004f7115
push edi
push ecx
mov ecx, esp
push str.lapindesk
call fcn.004177e7
lea ecx, [ebp - 0x60]
call fcn.004e6bc5
test eax, eax
setne al
test al, al
jne 0x49ceb8
push esi
lea ecx, [ebp - 0x20]
call fcn.004228d4
xor eax, eax
inc eax
push eax
push ecx
mov ecx, esp
push str.lapindesk
call fcn.004177e7
lea ecx, [ebp - 0x60]
call fcn.00508415
lea ecx, [ebp - 0x60]
call fcn.00418dd0
mov ecx, dword [ebp - 0x50]
lea ecx, [ecx - 0x10]
call fcn.00419521
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x735bc0
call fcn.00418bac
push ecx
mov ecx, esp
mov esi, str.Customimage
push esi
call fcn.004177e7
push ecx
mov ecx, esp
push str.DeskCalendar
call fcn.004177e7
lea eax, [ebp - 0x14]
push eax
mov ecx, ebx
call fcn.004987e3
push eax
mov ecx, 0x735bc8
call fcn.00418bac
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00419521
push ecx
mov ecx, esp
push esi
call fcn.004177e7
push ecx
mov ecx, esp
mov esi, str.Skinset
push esi
call fcn.004177e7
lea eax, [ebp - 0x14]
push eax
mov ecx, ebx
call fcn.004987e3
push eax
mov ecx, 0x735bd0
call fcn.00418bac
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00419521
push ecx
mov ecx, esp
push str.CalendarSkinName
call fcn.004177e7
push ecx
mov ecx, esp
push esi
call fcn.004177e7
lea eax, [ebp - 0x14]
push eax
mov ecx, ebx
call fcn.004987e3
push eax
lea ecx, [ebp - 0x18]
call fcn.00418bac
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00419521
mov ebx, dword [ebp - 0x18]
cmp dword [ebx - 0xc], edi
je 0x49cf98
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x735bcc
call fcn.00418bac
push ecx
mov ecx, esp
push str.Trans
call fcn.004177e7
push ecx
mov ecx, esp
push esi
call fcn.004177e7
mov ecx, 0x735bd8
call fcn.00498988
mov dword [0x735a5c], edi
lea ecx, [ebp - 0x60]
call fcn.00417833
push edi
push ecx
mov ecx, esp
push str.SoftwareRuanMeiMagicTray
call fcn.004177e7
mov esi, SysReAllocString
push esi
lea ecx, [ebp - 0x60]
call fcn.004f7115
push ecx
mov ecx, esp
push str.Install_Dir
call fcn.004177e7
lea ecx, [ebp - 0x60]
call fcn.00461d4b
push ecx
mov ecx, esp
push str.Install_File
call fcn.004177e7
lea ecx, [ebp - 0x60]
call fcn.00461d4b
xor eax, eax
inc eax
push eax
push ecx
mov ecx, esp
push str.SoftwareRuanMeiMyTime
call fcn.004177e7
push esi
lea ecx, [ebp - 0x44]
call fcn.004f7115
push edi
push ecx
mov ecx, esp
push str.Mousepenetrate
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.004e6bc5
test eax, eax
setne byte [0x735a4a]
push edi
push ecx
mov ecx, esp
push str.ImportMagictray
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.004e6bc5
test eax, eax
setne al
test al, al
jne 0x49d365
push ecx
mov ecx, esp
push str.DateFormat
call fcn.004177e7
lea ecx, [ebp - 0x60]
call fcn.00507dcf
test eax, eax
setne al
test al, al
je 0x49d345
xor eax, eax
inc eax
push eax
push ecx
mov ecx, esp
push 0x6b3ee4
call fcn.004177e7
lea ecx, [ebp - 0x60]
call fcn.004e6c3f
mov dword [ebp - 0x14], eax
xor eax, eax
inc eax
push eax
push ecx
mov ecx, esp
push str.FontAlign
call fcn.004177e7
lea ecx, [ebp - 0x60]
call fcn.004e6c3f
mov dword [ebp - 0x48], eax
push 0x190
push ecx
mov ecx, esp
push str.FontBold
call fcn.004177e7
lea ecx, [ebp - 0x60]
call fcn.004e6c3f
mov dword [ebp - 0x28], eax
push 0xffffff
push ecx
mov ecx, esp
push str.FontColor
call fcn.004177e7
lea ecx, [ebp - 0x60]
call fcn.004e6c3f
mov dword [ebp - 0xa0], eax
push edi
push ecx
mov ecx, esp
push str.FontItalic
call fcn.004177e7
lea ecx, [ebp - 0x60]
call fcn.004e6c3f
mov dword [ebp - 0xa4], eax
push 0xfffffffffffffff4
push ecx
mov ecx, esp
push str.FontSize
call fcn.004177e7
lea ecx, [ebp - 0x60]
call fcn.004e6c3f
mov dword [ebp - 0x64], eax
push edi
push ecx
mov ecx, esp
push str.FontDeleteLine
call fcn.004177e7
lea ecx, [ebp - 0x60]
call fcn.004e6c3f
mov edi, eax
push 0
push ecx
mov ecx, esp
push str.FontUnderLine
call fcn.004177e7
lea ecx, [ebp - 0x60]
call fcn.004e6c3f
mov esi, eax
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.FontName
call fcn.004177e7
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x60]
call fcn.004e6ef3
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.DateFormat
call fcn.004177e7
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x60]
call fcn.004e6ef3
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.DateFormat2
call fcn.004177e7
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x60]
call fcn.004e6ef3
push dword [ebp - 0x14]
push ecx
mov ecx, esp
push 0x6b3ee4
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.0050848c
push dword [ebp - 0x48]
push ecx
mov ecx, esp
push str.FontAlign
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.0050848c
push dword [ebp - 0x28]
push ecx
mov ecx, esp
push str.FontBold
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.0050848c
push dword [ebp - 0xa0]
push ecx
mov ecx, esp
push str.FontColor
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.0050848c
push dword [ebp - 0xa4]
push ecx
mov ecx, esp
push str.FontItalic
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.0050848c
push dword [ebp - 0x64]
push ecx
mov ecx, esp
push str.FontSize
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.0050848c
push edi
push ecx
mov ecx, esp
push str.FontDeleteLine
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.0050848c
push esi
push ecx
mov ecx, esp
push str.FontUnderLine
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.0050848c
mov eax, dword [ebp - 0x24]
cmp dword [eax - 0xc], 0
je 0x49d2c8
push ecx
mov esi, esp
add eax, 0xfffffff0
push eax
call fcn.00418dea
add eax, 0x10
mov dword [esi], eax
mov ecx, esp
push str.FontName
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.0050857a
mov edi, dword [ebp - 0x68]
cmp dword [edi - 0xc], 0
je 0x49d2f6
push ecx
mov esi, esp
lea eax, [edi - 0x10]
push eax
call fcn.00418dea
add eax, 0x10
mov dword [esi], eax
mov ecx, esp
push str.DateFormat
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.0050857a
mov esi, dword [ebp - 0x2c]
cmp dword [esi - 0xc], 0
je 0x49d328
push ecx
mov dword [ebp - 0x2c], esp
lea eax, [esi - 0x10]
push eax
call fcn.00418dea
add eax, 0x10
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov ecx, esp
push str.DateFormat2
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.0050857a
lea ecx, [esi - 0x10]
call fcn.00419521
lea ecx, [edi - 0x10]
call fcn.00419521
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.00419521
xor edi, edi
mov esi, 0xffffff
xor eax, eax
inc eax
push eax
push ecx
mov ecx, esp
push str.ImportMagictray
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.00508415
jmp 0x49d36a
mov esi, 0xffffff
xor eax, eax
inc eax
push eax
push ecx
mov ecx, esp
push 0x6b3ee4
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.004e6c3f
mov dword [0x735a44], eax
xor eax, eax
inc eax
push eax
push ecx
mov ecx, esp
push str.FontAlign
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.004e6c3f
mov dword [0x735650], eax
push 0x190
push ecx
mov ecx, esp
push str.FontBold
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.004e6c3f
mov dword [0x73564c], eax
push ecx
mov ecx, esp
push str.FontColor
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.00507dcf
test eax, eax
je 0x49d3fb
push esi
push ecx
mov ecx, esp
push str.FontColor
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.004e6c3f
mov dword [0x735660], eax
jmp 0x49d463
lea ecx, [ebp - 0xc0]
call fcn.00417833
push edi
push ecx
mov ecx, esp
push str.SoftwareMicrosoftWindowsCurrentVersionThemesPersonalize
call fcn.004177e7
push SysReAllocString
lea ecx, [ebp - 0xc0]
call fcn.004f7115
push edi
push ecx
mov ecx, esp
push str.SystemUsesLightTheme
call fcn.004177e7
lea ecx, [ebp - 0xc0]
call fcn.004e6c3f
xor ecx, ecx
test eax, eax
cmovne esi, ecx
mov dword [0x735660], esi
lea ecx, [ebp - 0xc0]
call fcn.00418dd0
mov ecx, dword [ebp - 0xb0]
add ecx, 0xfffffff0
call fcn.00419521
push edi
push ecx
mov ecx, esp
push str.FontItalic
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.004e6c3f
mov dword [0x735648], eax
push 0xfffffffffffffff4
push ecx
mov ecx, esp
push str.FontSize
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.004e6c3f
mov dword [0x735654], eax
push edi
push ecx
mov ecx, esp
push str.FontDeleteLine
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.004e6c3f
mov dword [0x73565c], eax
push edi
push ecx
mov ecx, esp
push str.FontUnderLine
call fcn.004177e7
lea ecx, [ebp - 0x44]
call fcn.004e6c3f
mov dword [0x735658], eax
push ecx
mov ecx, esp
push 0x6809b0
call fcn.004177e7
push ecx
mov ecx, esp
push str.FontName
call fcn.004177e7
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x44]
call fcn.004e6ef3
mov esi, dword [ebp - 0x14]
cmp dword [esi - 0xc], 0
je 0x49d512
push esi
push 0x80
push 0x735664
call fcn.0063d6aa
add esp, 0xc
lea ecx, [ebp - 0x44]
call fcn.00418dd0
lea ecx, [ebp - 0xec]
call fcn.00440206
lea ecx, [ebp - 0xec]
call fcn.0049dd11
mov edx, eax
mov dword [ebp - 0x64], edx
mov dword [ebp - 4], edi
wait
mov dword [ebp - 0x74], edi
mov ecx, edi
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x6c], edi
or eax, 0xffffffff
mov dword [ebp - 0x78], eax
cmp eax, 2
jge 0x49d670
lea edi, [eax + edx]
push edi
lea eax, [ebp - 0x2c]
push eax
call fcn.004b576d
push eax
push str.Holiday
lea eax, [ebp - 0x24]
push eax
call fcn.0044c94c
add esp, 0x14
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.00419521
push ecx
mov ecx, esp
push str.Rest
call fcn.004177e7
push ecx
mov ecx, esp
lea eax, [ebp - 0x24]
push eax
call fcn.0043cec9
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x735bd8
call fcn.004987e3
push ecx
mov ecx, esp
push str.Work
call fcn.004177e7
push ecx
mov ecx, esp
lea eax, [ebp - 0x24]
push eax
call fcn.0043cec9
lea eax, [ebp - 0x48]
push eax
mov ecx, 0x735bd8
call fcn.004987e3
mov eax, dword [ebp - 0x28]
cmp dword [eax - 0xc], 0
je 0x49d63a
lea ecx, [ebp - 0xb8]
call fcn.004437d9
push edi
lea eax, [ebp - 0x68]
push eax
call fcn.004b576d
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0xb8]
call fcn.00418bac
mov ecx, dword [ebp - 0x68]
lea ecx, [ecx - 0x10]
call fcn.00419521
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xb4]
call fcn.00418bac
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0xb0]
call fcn.00418bac
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x74]
call fcn.0051210e
lea ecx, [ebp - 0xb8]
call fcn.00418872
mov ecx, dword [ebp - 0x48]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov ecx, dword [ebp - 0x24]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x70]
mov edi, dword [ebp - 0x74]
mov edx, dword [ebp - 0x64]
jmp 0x49d54a
sub ecx, edi
sar ecx, 4
test ecx, ecx
je 0x49d687
lea eax, [ebp - 0x74]
push eax
mov ecx, 0x735d3c
call fcn.00449ca7
lea ecx, [ebp - 0x74]
call fcn.004198ca
wait
or dword [ebp - 4], 0xffffffff
jmp 0x49d6a6
lea ecx, [esi - 0x10]
call fcn.00419521
lea ecx, [ebp - 0x60]
call fcn.00418dd0
mov ecx, dword [ebp - 0x50]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov ecx, dword [ebp - 0x20]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov ecx, dword [ebp - 0x7c]
lea ecx, [ecx - 0x10]
call fcn.00419521
lea ecx, [ebp - 0x9c]
call fcn.0050ed8e
lea ecx, [ebx - 0x10]
call fcn.00419521
mov ecx, dword [ebp - 0x80]
lea ecx, [ecx - 0x10]
call fcn.00419521
lea ecx, [ebp - 0x44]
call fcn.00418dd0
mov ecx, dword [ebp - 0x34]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov ecx, dword [ebp - 0x84]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov ecx, dword [ebp - 0xa8]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov ecx, dword [ebp - 0x88]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov ecx, dword [ebp - 0x8c]
lea ecx, [ecx - 0x10]
call fcn.00419521
mov ecx, dword [ebp - 0x90]
lea ecx, [ecx - 0x10]
call fcn.00419521
call fcn.00609813
ret