Function at 0x40ac70
Capabilities:
Check if file exists
Check internet connectivity via wininet
Create http request
Create process on windows
Delete file
Get common file path
Get file attributes
Persist via lnk shortcut
Read .ini file
Schedule task via schtasks
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x18fc
call fcn.00525f50
mov eax, dword [0x5acd88]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0x10]
push esi
push str._Launch_CLToast_
mov dword [ebp - 0x18cc], eax
call fcn.0040bef0
push ebx
push str.wWinMain
push str.__s__lpCmdLine___s
call fcn.0040bef0
push 0x55514c
push ebx
call fcn.00525079
add esp, 0x18
test eax, eax
jne 0x40ad30
push str._no_Command_and_launch_CL_webpage_
call fcn.0040bef0
xor eax, eax
push 0x7fe
push eax
mov word [ebp - 0x1844], ax
lea eax, [ebp - 0x1842]
push eax
call fcn.005265d0
push str.https:__www.cyberlink.com
lea eax, [ebp - 0x1844]
push 0x400
push eax
call fcn.00525204
add esp, 0x1c
lea eax, [ebp - 0x1844]
push 1
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, 1
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00525af7
mov esp, ebp
pop ebp
ret 0x10
push edi
lea eax, [ebp - 0x18c4]
push eax
push 0
push 0
push 0x587ba4
mov dword [ebp - method.Microsoft::WRL::Wrappers::HandleT_struct_CoTaskMemStringTraits_.virtual_0], vtable.Microsoft::WRL::Wrappers::HandleT_struct_CoTaskMemStringTraits_.0
mov dword [ebp - 0x18c4], 0
call sub.SHELL32.dll_SHGetKnownFolderPath
mov esi, dword [sym.imp.api_ms_win_core_path_l1_1_0.dll_PathCchCombine]
push str.MicrosoftWindowsStart_MenuProgramsCyberLink_Notification_Center.lnk
push dword [ebp - 0x18c4]
lea eax, [ebp - 0xe3c]
push 0x104
push eax
call esi
push str.MicrosoftWindowsStart_MenuProgramsCyberLink.lnk
push dword [ebp - 0x18c4]
lea eax, [ebp - 0x1044]
push 0x104
push eax
call esi
lea eax, [ebp - 0xe3c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xfffffff
setb byte [ebp - 0x18b5]
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xc34], ax
lea eax, [ebp - 0xc32]
push eax
call fcn.005265d0
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x824], ax
lea eax, [ebp - 0x822]
push eax
call fcn.005265d0
add esp, 0x18
lea eax, [ebp - 0xc34]
push 0x208
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0xc34]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0xc34]
push eax
push str._sCLToast.exe
lea eax, [ebp - 0x824]
push 0x104
push eax
call fcn.00525204
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xa2c], ax
lea eax, [ebp - 0xa2a]
push eax
call fcn.005265d0
add esp, 0x1c
lea eax, [ebp - 0xa2c]
push 1
push 0x23
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0xa2c]
push eax
push str._sCyberLinkCLToastCLToast.ini
push 0x104
push 0x5ae690
call fcn.00525204
add esp, 0x10
mov dword [ebp - 0x18d4], 0xfeff
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
push 0x5ae690
call esi
test eax, eax
jne 0x40af58
push str._addCLToastSchedule
push ebx
call fcn.00525079
add esp, 8
test eax, eax
je 0x40af58
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
call fcn.005265d0
lea eax, [ebp - 0xa2c]
push eax
push str._sCyberLinkCLToast
lea eax, [ebp - 0x414]
push 0x104
push eax
call fcn.00525204
add esp, 0x1c
lea eax, [ebp - 0x414]
push eax
call esi
test eax, eax
jne 0x40af04
lea eax, [ebp - 0x414]
push eax
call fcn.0040fe50
add esp, 4
push 0
push 0x80
push 1
push 0
push 0
push 0x40000000
push 0x5ae690
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
mov edi, eax
push 0
lea eax, [ebp - 0x18d0]
push eax
push 2
lea eax, [ebp - 0x18d4]
push eax
push edi
call esi
push 0
lea eax, [ebp - 0x18d0]
push eax
push 0x14
push 0x555a44
push edi
call esi
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x5ae690
push str.SchedulerList
call fcn.0040d6e0
push 0x5ae690
push str.DisplayedList
call fcn.0040d6e0
push 0x5ae690
push str.RemindList
call fcn.0040d6e0
add esp, 0x18
lea eax, [ebp - 0x18b4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
lea eax, [ebp - 0x18b4]
push eax
call fcn.0040f010
lea ecx, [eax + eax*2]
movzx eax, word [ebp - 0x18ac]
push 0x206
lea esi, [eax + ecx*8]
xor eax, eax
push eax
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push eax
call fcn.005265d0
push str._addCLToastSchedule
push ebx
call fcn.00525079
add esp, 0x18
test eax, eax
jne 0x40b11c
lea eax, [ebp - 0x824]
push eax
push str._Create__SC_DAILY__TN_CLToast__F__TR___s___UpdateSchedule__
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.00525204
lea eax, [ebp - 0x20c]
push eax
push str.wWinMain
push str.__s___addCLToastSchedule__Add_new_schedule___s_
call fcn.0040bef0
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
add esp, 0x1c
lea eax, [ebp - 0x20c]
push 0
push 0
push eax
push str.SCHTASKS
push str.open
push 0
call esi
lea eax, [ebp - 0x824]
push eax
push str._Create__SC_ONLOGON__TN_CLToastRun__F__TR___s___UpdateScheduleRun__
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.00525204
lea eax, [ebp - 0x20c]
push eax
push str.wWinMain
push str.__s___addCLToastSchedule__Add_new_schedule___s_
call fcn.0040bef0
add esp, 0x1c
lea eax, [ebp - 0x20c]
push 0
push 0
push eax
push str.SCHTASKS
push str.open
push 0
call esi
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0xe3c]
push eax
call esi
lea eax, [ebp - 0x1044]
push eax
call esi
push str.wWinMain
push str.__s___addCLToastSchedule__delete_old_icon_and_shortcut
xor bl, bl
call fcn.0040bef0
add esp, 8
cmp dword [0x5ae8e0], 0xb7
jne 0x40bc58
push str.wWinMain
push str.__s__Another_Instance_Running
call fcn.0040bef0
add esp, 8
push 0
push 0x5563e4
call dword [sym.imp.USER32.dll_FindWindowW]
mov esi, eax
test esi, esi
je 0x40b108
push str.wWinMain
push str.__s__Find_another_Instance_Running
call fcn.0040bef0
add esp, 8
lea eax, [ebp - 0x18fc]
push eax
push 0
push 0x4a
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str._Close_CLToast_
call fcn.0040bef0
add esp, 4
xor esi, esi
jmp 0x40be29
push str._UpdateSchedule
push ebx
call fcn.00525079
add esp, 8
test eax, eax
je 0x40b6cf
push str._UpdateScheduleRun
push ebx
call fcn.00525079
add esp, 8
test eax, eax
je 0x40b6cf
push str._createsc
push ebx
call fcn.00525079
add esp, 8
test eax, eax
je 0x40bc36
push str._UpdateXMLContent
push ebx
call fcn.00525079
add esp, 8
test eax, eax
jne 0x40b189
call fcn.00406380
push str._Close_CLToast_
call fcn.0040bef0
mov esi, 1
jmp 0x40be26
push str._delCLToast
push ebx
call fcn.00525079
add esp, 8
test eax, eax
jne 0x40b29c
push str.wWinMain
push str.__s__Delete_toast_schedule.
call fcn.0040bef0
push str._Delete__TN_CLToast__F
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.00525204
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
add esp, 0x14
lea eax, [ebp - 0x20c]
push 0
push 0
push eax
push str.SCHTASKS
push str.open
push 0
call esi
push str._Delete__TN_CLToastRun__F
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.00525204
add esp, 0xc
lea eax, [ebp - 0x20c]
push 0
push 0
push eax
push str.SCHTASKS
push str.open
push 0
call esi
push 0x5ae690
call fcn.0040ca30
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
add esp, 4
push 0x5ae690
call esi
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
call fcn.005265d0
lea eax, [ebp - 0xa2c]
push eax
push str._sCyberLinkCLToastCLToast.xml
lea eax, [ebp - 0x414]
push 0x104
push eax
call fcn.00525204
add esp, 0x1c
lea eax, [ebp - 0x414]
push eax
call esi
lea eax, [ebp - 0xe3c]
push eax
call esi
lea eax, [ebp - 0x1044]
push eax
call esi
push str._Close_CLToast_
call fcn.0040bef0
mov esi, 1
jmp 0x40be26
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
call fcn.005265d0
push ebx
push 0x55539c
lea eax, [ebp - 0x414]
push 0x104
push eax
call fcn.00525204
add esp, 0x1c
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x18a4]
call fcn.00401bc0
push 0
push str._showtoast__TN:
lea ecx, [ebp - 0x18a4]
call fcn.0040a940
mov edi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
test eax, eax
js 0x40b4ac
push 0xffffffffffffffff
add eax, 0xf
push eax
lea eax, [ebp - 0x185c]
push eax
lea ecx, [ebp - 0x18a4]
call fcn.0040ac00
cmp dword [ebp - 0x1848], 8
lea eax, [ebp - 0x185c]
cmovae eax, dword [ebp - 0x185c]
push eax
push str.wWinMain
push str.__s__Show_toast_name__s
call fcn.0040bef0
cmp dword [ebp - 0x1848], 8
lea eax, [ebp - 0x185c]
cmovae eax, dword [ebp - 0x185c]
push eax
push 0x55539c
push 0x104
push 0x5ae488
call fcn.00525204
push 0x5ae690
push str.display
call fcn.0040e4e0
add esp, 0x24
test eax, eax
jne 0x40b3a4
push 0x5ae488
push str.wWinMain
push str.__s__Toast__s_can_not_be_displayed_in_24_hr
call fcn.0040bef0
push str._Close_CLToast_
call fcn.0040bef0
add esp, 0x10
jmp 0x40b571
push 0x5ae690
push 0x5ae488
call fcn.0040c8f0
add esp, 8
test eax, eax
je 0x40b541
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x61c], ax
lea eax, [ebp - 0x61a]
push eax
call fcn.005265d0
push esi
push 0x555144
lea eax, [ebp - 0x61c]
push 0x104
push eax
call fcn.00525204
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
add esp, 0x1c
lea eax, [ebp - 0x61c]
push 0x5ae690
push eax
push str.LastShowUpHour
push str.Setting
call esi
movzx eax, word [ebp - 0x18aa]
push eax
push 0x555144
lea eax, [ebp - 0x61c]
push 0x104
push eax
call fcn.00525204
add esp, 0x10
lea eax, [ebp - 0x61c]
push 0x5ae690
push eax
push str.LastShowUpMin
push str.Setting
call esi
lea eax, [ebp - 0x20c]
push 0x5ae488
push str._Delete__TN:__s___F
push 0x104
push eax
call fcn.00525204
lea eax, [ebp - 0x20c]
push eax
push str.wWinMain
push str.__s__Delete_schedule___s_
call fcn.0040bef0
add esp, 0x1c
lea eax, [ebp - 0x20c]
push 0
push 0
push eax
push str.SCHTASKS
push str.open
push 0
call edi
lea ecx, [ebp - 0x185c]
mov dword [0x5ae89c], 1
call fcn.00401ec0
push 0
push str._showtoast__remind__TN:
lea ecx, [ebp - 0x18a4]
call fcn.0040a940
test eax, eax
js 0x40b5f3
push 0xffffffffffffffff
add eax, 0x17
push eax
lea eax, [ebp - 0x185c]
push eax
lea ecx, [ebp - 0x18a4]
call fcn.0040ac00
cmp dword [ebp - 0x1848], 8
lea eax, [ebp - 0x185c]
cmovae eax, dword [ebp - 0x185c]
push eax
push str.wWinMain
push str.__s__Show_reminded_toast_name__s
call fcn.0040bef0
cmp dword [ebp - 0x1848], 8
lea eax, [ebp - 0x185c]
cmovae eax, dword [ebp - 0x185c]
push eax
push 0x55539c
push 0x104
push 0x5ae488
call fcn.00525204
push 0x5ae690
push 0x5ae488
call fcn.0040c8f0
add esp, 0x24
test eax, eax
jne 0x40b591
push 0x5ae488
push str.wWinMain
push str.__s__Toast__s_is_disabled
call fcn.0040bef0
push 0x5ae690
push 0x5ae488
call fcn.0040dd50
push str._Close_CLToast_
call fcn.0040bef0
add esp, 0x18
lea ecx, [ebp - 0x185c]
call fcn.00401ec0
lea ecx, [ebp - 0x18a4]
call fcn.00401ec0
mov esi, 1
jmp 0x40be29
push 0x5ae488
push str._Delete__TN:__s___F
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.00525204
lea eax, [ebp - 0x20c]
push eax
push str.wWinMain
push str.__s__Delete_schedule___s_
call fcn.0040bef0
add esp, 0x1c
lea eax, [ebp - 0x20c]
push 0
push 0
push eax
push str.SCHTASKS
push str.open
push 0
call edi
lea ecx, [ebp - 0x185c]
mov dword [0x5ae89c], 1
call fcn.00401ec0
push 0
push str._showtesttoast__TN:
lea ecx, [ebp - 0x18a4]
call fcn.0040a940
test eax, eax
js 0x40b6b9
push 0xffffffffffffffff
add eax, 0x13
push eax
lea eax, [ebp - 0x185c]
push eax
lea ecx, [ebp - 0x18a4]
call fcn.0040ac00
cmp dword [ebp - 0x1848], 8
lea eax, [ebp - 0x185c]
cmovae eax, dword [ebp - 0x185c]
push eax
push str.wWinMain
push str.__s__Show_test_toast_name__s
call fcn.0040bef0
cmp dword [ebp - 0x1848], 8
lea eax, [ebp - 0x185c]
cmovae eax, dword [ebp - 0x185c]
push eax
push 0x55539c
push 0x104
push 0x5ae488
call fcn.00525204
lea eax, [ebp - 0xc34]
push eax
push str._sCLToast.ini
push 0x104
push 0x5ae690
call fcn.00525204
push 0x5ae690
push str.wWinMain
push str.__s__Test_toast_INI__s
call fcn.0040bef0
add esp, 0x38
lea ecx, [ebp - 0x185c]
mov dword [0x5ae89c], 1
call fcn.00401ec0
lea ecx, [ebp - 0x18a4]
call fcn.00401ec0
mov bl, byte [ebp - 0x18b5]
jmp 0x40b0af
push 0x5ae690
push str.update
call fcn.0040e4e0
add esp, 8
cmp eax, 1
jne 0x40b89f
mov edi, eax
call fcn.00408280
call fcn.004052b0
test eax, eax
jne 0x40b70e
push str.wWinMain
push str.__s__There_is_no_avaliable_items
xor edi, edi
call fcn.0040bef0
add esp, 8
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x61c], ax
lea eax, [ebp - 0x61a]
push eax
call fcn.005265d0
push esi
push 0x555144
lea eax, [ebp - 0x61c]
push 0x104
push eax
call fcn.00525204
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
add esp, 0x1c
lea eax, [ebp - 0x61c]
push 0x5ae690
push eax
push str.LastUpdateHour
push str.Setting
call esi
movzx eax, word [ebp - 0x18aa]
push eax
push 0x555144
lea eax, [ebp - 0x61c]
push 0x104
push eax
call fcn.00525204
add esp, 0x10
lea eax, [ebp - 0x61c]
push 0x5ae690
push eax
push str.LastUpdateMin
push str.Setting
call esi
cmp edi, 1
jne 0x40b8b1
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
call fcn.005265d0
add esp, 0xc
lea eax, [ebp - 0x414]
push 0x5ae690
push 0x104
push eax
push 0x55514c
push str.PushTime
push 0x5ae488
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x18bc]
push eax
lea eax, [ebp - 0x414]
push 0x555df0
push eax
mov dword [ebp - 0x18bc], 0
call fcn.00524fa6
mov esi, eax
lea eax, [ebp - 0x18bc]
push eax
push 0x555df0
push 0
call fcn.00524fa6
push eax
push esi
push str._s:_s
lea eax, [ebp - 0x414]
push 0x104
push eax
call fcn.00525204
push 0x5ae488
lea eax, [ebp - 0x824]
push eax
lea eax, [ebp - 0x414]
push eax
push 0x5ae488
push str._Create__SC_DAILY__TN___s___ST__s__F__TR___s__showtoast__TN:_s_
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.00525204
add esp, 0x48
lea eax, [ebp - 0x20c]
push eax
push str.wWinMain
push str.__s___UpdateSchedule__Add_new_schedule___s_
call fcn.0040bef0
add esp, 0xc
lea eax, [ebp - 0x20c]
push 0
push 0
push eax
push str.SCHTASKS
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x40b8b1
push str.wWinMain
push str.__s__CLToast_has_updated_in_24_hr
call fcn.0040bef0
add esp, 8
push str._UpdateScheduleRun
push ebx
call fcn.00525079
add esp, 8
test eax, eax
jne 0x40bc36
push 0x206
push eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
call fcn.005265d0
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x61c], ax
lea eax, [ebp - 0x61a]
push eax
call fcn.005265d0
add esp, 0x18
lea eax, [ebp - 0x414]
push 0x5ae690
push 0x104
push eax
push 0x55514c
push str.RemindList
push str.Setting
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x188c]
call fcn.00401bc0
xor eax, eax
push 0x55514c
lea ecx, [ebp - 0x1874]
mov dword [ebp - 0x1860], 7
mov dword [ebp - 0x1864], 0
mov word [ebp - 0x1874], ax
call fcn.0040a5e0
cmp dword [ebp - 0x1878], 8
lea eax, [ebp - 0x188c]
cmovae eax, dword [ebp - 0x188c]
push 0x55514c
push eax
call fcn.00525079
add esp, 8
test eax, eax
je 0x40bbeb
push 1
push 0
push 0x5552f0
lea ecx, [ebp - 0x188c]
call fcn.0040a990
mov esi, eax
test esi, esi
js 0x40baa0
push esi
push 0
lea eax, [ebp - 0x18a4]
push eax
lea ecx, [ebp - 0x188c]
call fcn.0040ac00
mov edi, eax
lea eax, [ebp - 0x1874]
cmp eax, edi
je 0x40ba0c
cmp dword [ebp - 0x1860], 8
jb 0x40b9e3
push dword [ebp - 0x1874]
call fcn.00414c8d
add esp, 4
xor eax, eax
push edi
lea ecx, [ebp - 0x1874]
mov dword [ebp - 0x1860], 7
mov dword [ebp - 0x1864], 0
mov word [ebp - 0x1874], ax
call fcn.00409a40
cmp dword [ebp - 0x1890], 8
jb 0x40ba23
push dword [ebp - 0x18a4]
call fcn.00414c8d
add esp, 4
push 0xffffffffffffffff
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0x18a4]
push eax
lea ecx, [ebp - 0x188c]
call fcn.0040ac00
mov esi, eax
lea eax, [ebp - 0x188c]
cmp eax, esi
je 0x40ba87
cmp dword [ebp - 0x1878], 8
jb 0x40ba5e
push dword [ebp - 0x188c]
call fcn.00414c8d
add esp, 4
xor eax, eax
push esi
lea ecx, [ebp - 0x188c]
mov dword [ebp - 0x1878], 7
mov dword [ebp - 0x187c], 0
mov word [ebp - 0x188c], ax
call fcn.00409a40
cmp dword [ebp - 0x1890], 8
jb 0x40baee
push dword [ebp - 0x18a4]
call fcn.00414c8d
add esp, 4
jmp 0x40baee
cmp dword [ebp - 0x1878], 8
lea eax, [ebp - 0x188c]
cmovae eax, dword [ebp - 0x188c]
push 0x55514c
push eax
call fcn.00525079
add esp, 8
test eax, eax
je 0x40baee
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x188c]
push eax
lea ecx, [ebp - 0x1874]
call fcn.0040a4c0
push 0
push 0x55514c
lea ecx, [ebp - 0x188c]
call fcn.0040a630
cmp dword [ebp - 0x1860], 8
lea eax, [ebp - 0x1874]
cmovae eax, dword [ebp - 0x1874]
push 0x55514c
push eax
call fcn.00525079
add esp, 8
test eax, eax
je 0x40b963
cmp dword [ebp - 0x1860], 8
lea eax, [ebp - 0x1874]
cmovae eax, dword [ebp - 0x1874]
push eax
push 0x55539c
lea eax, [ebp - 0x61c]
push 0x104
push eax
call fcn.00525204
lea eax, [ebp - 0x61c]
push 0x5ae690
push eax
call fcn.0040c8f0
add esp, 0x18
test eax, eax
jne 0x40bb91
lea eax, [ebp - 0x61c]
push 0x5ae690
push eax
call fcn.0040c730
add esp, 8
test eax, eax
jne 0x40bb91
lea eax, [ebp - 0x61c]
push eax
push str.wWinMain
push str.__s__Toast__s_is_disabled_or_not_overdue
call fcn.0040bef0
add esp, 0xc
jmp 0x40b963
lea eax, [ebp - 0x61c]
push eax
push str._showtoast__remind__TN:_s
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.00525204
lea eax, [ebp - 0x61c]
push eax
push str.wWinMain
push str.__s__Show_overdue_reminded_toast___s_
call fcn.0040bef0
add esp, 0x1c
lea eax, [ebp - 0x20c]
push 0
push 0
push eax
lea eax, [ebp - 0x824]
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x40b963
cmp dword [ebp - 0x1860], 8
jb 0x40bc02
push dword [ebp - 0x1874]
call fcn.00414c8d
add esp, 4
xor eax, eax
cmp dword [ebp - 0x1878], 8
mov dword [ebp - 0x1860], 7
mov dword [ebp - 0x1864], 0
mov word [ebp - 0x1874], ax
jb 0x40bc36
push dword [ebp - 0x188c]
call fcn.00414c8d
add esp, 4
mov bl, byte [ebp - 0x18b5]
test bl, bl
je 0x40b0af
push str._Close_CLToast_
call fcn.0040bef0
mov esi, 1
jmp 0x40be26
xor edi, edi
push edi
lea eax, [ebp - 0x18bc]
push eax
mov dword [ebp - 0x18bc], edi
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
je 0x40bcbe
push edi
push edi
push edi
push edi
push str.Microsoft_Internet_Explorer
call dword [sym.imp.WININET.dll_InternetOpenW]
test eax, eax
je 0x40bcbe
push str.Sensapi.DLL
mov dword [ebp - 0x18c0], edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
test esi, esi
je 0x40bcbe
push 0x556490
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x40bcb7
lea ecx, [ebp - 0x18c0]
push ecx
call eax
mov edi, eax
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, str.FALSE
mov ecx, str.TRUE
test edi, edi
cmove ecx, eax
push ecx
push str.wWinMain
push str.__s__Is_network_alive___s
call fcn.0040bef0
add esp, 0xc
test edi, edi
jne 0x40bd02
push str.FALSE
push str.wWinMain
push str.__s__Is_network_alive___s
call fcn.0040bef0
add esp, 0xc
xor esi, esi
jmp 0x40be29
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0x5563e4
push 0x64
push 0x5ae2f8
mov dword [ebp - 0x18c0], eax
call fcn.00524c94
push str.CLTOAST
push 0x64
push 0x5ae3c0
call fcn.00524c94
mov esi, dword [ebp - 0x18cc]
push esi
call fcn.00407870
push 0
push dword [ebp + 0x14]
push esi
call fcn.004073a0
add esp, 0x28
test eax, eax
jne 0x40bd57
xor esi, esi
jmp 0x40be29
push 0x6d
push esi
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov dword [ebp - 0x18cc], eax
lea eax, [ebp - 0x18fc]
push eax
push 0
push 0x4a
push dword [0x5ae898]
call dword [sym.imp.USER32.dll_SendMessageW]
test bl, bl
je 0x40be02
push str.wWinMain
push str.__s__GetMessage
call fcn.0040bef0
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
add esp, 8
lea eax, [ebp - 0x18f0]
push 0
push 0
push 0
push eax
call esi
test eax, eax
je 0x40be02
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
mov ebx, dword [sym.imp.USER32.dll_DispatchMessageW]
lea esp, [esp]
lea eax, [ebp - 0x18f0]
push eax
push dword [ebp - 0x18cc]
push dword [ebp - 0x18f0]
call dword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x40bdef
lea eax, [ebp - 0x18f0]
push eax
call edi
lea eax, [ebp - 0x18f0]
push eax
call ebx
push 0
push 0
push 0
lea eax, [ebp - 0x18f0]
push eax
call esi
test eax, eax
jne 0x40bdc0
call fcn.00404b60
cmp dword [ebp - 0x18c0], 0
jl 0x40be16
call dword [sym.imp.ole32.dll_CoUninitialize]
push str._Close_CLToast_
call fcn.0040bef0
mov esi, dword [ebp - 0x18e8]
add esp, 4
cmp dword [ebp - 0x18c4], 0
mov dword [ebp - method.Microsoft::WRL::Wrappers::HandleT_struct_CoTaskMemStringTraits_.virtual_0], vtable.Microsoft::WRL::Wrappers::HandleT_struct_CoTaskMemStringTraits_.0
pop edi
je 0x40be6c
lea ecx, [ebp - 0x18c8]
call dword [vtable.Microsoft::WRL::Wrappers::HandleT_struct_CoTaskMemStringTraits_.0]
test al, al
jne 0x40be6c
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x40be5f
movzx eax, ax
or eax, 0x80070000
push 0
push 0
push 1
push eax
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov ecx, dword [ebp - 4]
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.00525af7
mov esp, ebp
pop ebp
ret 0x10