Function at 0x40aaa4
Capabilities:
Create process on windows

Disassembly:
push ebp
lea ebp, [esp - 0x13c]
sub esp, 0x13c
push 0xffffffffffffffff
push 0x472269
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x4a4300]
xor eax, ebp
mov dword [ebp + 0x138], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], ecx
lea eax, [ebp + 0x84]
push eax
mov eax, dword [ebp + 0x144]
mov eax, dword [eax + 0x108]
mov ecx, dword [ebp + 0x144]
mov eax, dword [eax]
mov ecx, dword [ecx + 0x108]
call dword [eax + 4]
and dword [ebp - 4], 0
push str.restorebtn
lea ecx, [ebp + 0x84]
call sym.microClientTemplate.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
movzx eax, al
test eax, eax
je 0x40ab79
push 0
mov eax, dword [ebp + 0x144]
mov eax, dword [eax + 0x108]
mov ecx, dword [ebp + 0x144]
mov eax, dword [eax]
mov ecx, dword [ecx + 0x108]
call dword [eax + 0xcc]
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x74c], 0
je 0x40ab66
push 1
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x74c]
mov ecx, dword [ebp - 0x10]
mov eax, dword [eax]
mov ecx, dword [ecx + 0x74c]
call dword [eax + 0xcc]
push 9
mov eax, dword [ebp - 0x10]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x40ae2d
push str.maxbtn
lea ecx, [ebp + 0x84]
call sym.microClientTemplate.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
movzx eax, al
test eax, eax
je 0x40abed
push 0
mov eax, dword [ebp + 0x144]
mov eax, dword [eax + 0x108]
mov ecx, dword [ebp + 0x144]
mov eax, dword [eax]
mov ecx, dword [ecx + 0x108]
call dword [eax + 0xcc]
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x750], 0
je 0x40abda
push 1
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x750]
mov ecx, dword [ebp - 0x10]
mov eax, dword [eax]
mov ecx, dword [ecx + 0x750]
call dword [eax + 0xcc]
push 3
mov eax, dword [ebp - 0x10]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x40ae2d
push str.kefubtn
lea ecx, [ebp + 0x84]
call sym.microClientTemplate.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
movzx eax, al
test eax, eax
je 0x40ad90
lea ecx, [ebp]
call sym.microClientTemplate.exe_public:_void___thiscall_DuiLib::CDuiString::constructor_void_
mov byte [ebp - 4], 1
lea eax, [ebp]
push eax
call fcn.0040b8d9
pop ecx
lea ecx, [ebp + 0x120]
call fcn.00409145
mov byte [ebp - 4], 2
lea eax, [ebp + 0x120]
push eax
lea ecx, [ebp]
call sym.microClientTemplate.exe_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
call fcn.0040b6d0
pop ecx
pop ecx
push 0
push 0x48463c
lea ecx, [ebp + 0x120]
call fcn.004091d4
cmp eax, 0xffffffff
je 0x40ad70
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x484640
call fcn.00409171
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2c], esp
lea eax, [ebp + 0x120]
push eax
call fcn.004090f5
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 2
call fcn.0040b96c
add esp, 0x34
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 4
push 1
lea ecx, [ebp - 0x40]
call fcn.0040920c
push eax
lea ecx, [ebp + 0x108]
call fcn.004090f5
mov byte [ebp - 4], 5
lea ecx, [ebp + 0x108]
call fcn.004091c1
mov dword [ebp - 0x1c], eax
push 0
push 0
push 0xffffffffffffffff
push dword [ebp - 0x1c]
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
inc eax
xor ecx, ecx
push 2
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0040d073
pop ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
lea eax, [eax + eax + 2]
push eax
push 0
push dword [ebp - 0x14]
call fcn.004622b0
add esp, 0xc
push dword [ebp - 0x18]
push dword [ebp - 0x14]
push 0xffffffffffffffff
push dword [ebp - 0x1c]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 5
push 0
push 0
push dword [ebp - 0x14]
push 0x484644
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
call fcn.004607f6
pop ecx
mov byte [ebp - 4], 4
lea ecx, [ebp + 0x108]
call fcn.004091aa
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x40]
call fcn.004091f9
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x120]
call fcn.004091aa
mov byte [ebp - 4], 0
lea ecx, [ebp]
call sym.microClientTemplate.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
jmp 0x40ae2d
push str.minbtn
lea ecx, [ebp + 0x84]
call sym.microClientTemplate.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
movzx eax, al
test eax, eax
je 0x40adc8
push 6
mov eax, dword [ebp - 0x10]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x84]
call sym.microClientTemplate.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
jmp 0x40ae3c
push str.closebtn
lea ecx, [ebp + 0x84]
call sym.microClientTemplate.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
movzx eax, al
test eax, eax
je 0x40adfa
mov ecx, dword [ebp - 0x10]
call fcn.0040af84
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x84]
call sym.microClientTemplate.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
jmp 0x40ae3c
push str.refreshbtn
lea ecx, [ebp + 0x84]
call sym.microClientTemplate.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
movzx eax, al
test eax, eax
je 0x40ae2d
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x380], 0
je 0x40ae2d
push 3
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x380]
call sym.microClientTemplate.exe_public:_void___thiscall_DuiLib::CWebBrowserUI::Refresh2_int_
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x84]
call sym.microClientTemplate.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp + 0x138]
xor ecx, ebp
call fcn.004607fb
add ebp, 0x13c
mov esp, ebp
pop ebp
ret 4