Function at 0x4a5af0
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x1b0
mov eax, dword [0x4f4970]
xor eax, esp
mov dword [esp + 0x1ac], eax
push ebx
push ebp
push esi
mov ebx, ecx
xor ebp, ebp
push edi
lea ecx, [esp + 0x144]
mov dword [esp + 0x10], ebp
call fcn.004bc0a0
cmp dword [ebx + 0x55b0], 0x10
jb 0x4a5b2d
mov eax, dword [ebx + 0x559c]
jmp 0x4a5b33
lea eax, [ebx + 0x559c]
push ebp
push ebp
push eax
lea ecx, [esp + 0x150]
call fcn.004b58c0
push str.result
lea ecx, [esp + 0x148]
call fcn.004bae80
mov esi, eax
cmp esi, ebp
je 0x4a5e47
push str.third_party_su
mov ecx, esi
call fcn.004bae80
cmp eax, ebp
je 0x4a5c00
mov ecx, eax
call fcn.004ba7b0
lea ecx, [esp + 0x28]
push 0xfde9
mov dword [esp + 0x28], ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.0040c580
mov edx, dword [esp + 0x24]
push edx
lea ecx, [esp + 0x12c]
call fcn.0040a6c0
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x28]
cmp eax, ecx
je 0x4a5bb5
push eax
call fcn.0046db16
add esp, 4
sub esp, 0x1c
mov ecx, esp
push 0xffffffffffffffff
push ebp
lea eax, [esp + 0x14c]
xor edx, edx
mov dword [ecx + 0x18], 7
mov dword [ecx + 0x14], ebp
push eax
mov word [ecx + 4], dx
call fcn.0040bd30
call fcn.004934e0
mov ecx, dword [eax]
call fcn.004933b0
cmp dword [esp + 0x140], 8
jb 0x4a5c00
mov ecx, dword [esp + 0x12c]
push ecx
call fcn.0046d0e6
add esp, 4
xor eax, eax
push str.htc_version
mov ecx, esi
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
call fcn.004bae80
mov edi, eax
cmp edi, ebp
je 0x4a5c43
mov ecx, edi
call fcn.004ba7b0
test eax, eax
je 0x4a5c43
mov ecx, edi
call fcn.004ba7b0
push eax
call fcn.0046ed3b
add esp, 4
mov dword [esp + 0x14], eax
push str.sony_version
mov ecx, esi
call fcn.004bae80
mov edi, eax
cmp edi, ebp
je 0x4a5c74
mov ecx, edi
call fcn.004ba7b0
test eax, eax
je 0x4a5c74
mov ecx, edi
call fcn.004ba7b0
push eax
call fcn.0046ed3b
add esp, 4
mov dword [esp + 0x18], eax
push str.root_version
mov ecx, esi
call fcn.004bae80
mov edi, eax
cmp edi, ebp
je 0x4a5ca5
mov ecx, edi
call fcn.004ba7b0
test eax, eax
je 0x4a5ca5
mov ecx, edi
call fcn.004ba7b0
push eax
call fcn.0046ed3b
add esp, 4
mov dword [esp + 0x20], eax
push str.config
mov ecx, esi
call fcn.004bae80
mov edi, eax
cmp edi, ebp
je 0x4a5d09
mov ecx, edi
call fcn.004ba7b0
test eax, eax
je 0x4a5d09
call fcn.004934e0
mov ecx, edi
mov ebp, eax
call fcn.004ba7b0
push eax
call fcn.0046ed3b
mov ecx, dword [ebp]
add esp, 4
push eax
call fcn.004916a0
call fcn.004934e0
mov ecx, dword [eax]
call fcn.00490ee0
mov edi, eax
call fcn.004934e0
mov eax, dword [eax]
mov edx, dword [edi]
mov eax, dword [eax + 0x214]
mov edx, dword [edx + 0x5c]
push eax
mov ecx, edi
call edx
xor ebp, ebp
call fcn.004934e0
lea ecx, [esp + 0x14]
push ecx
mov ecx, dword [eax]
call fcn.00490fb0
push str.discarded
mov ecx, esi
call fcn.004bae80
cmp eax, ebp
je 0x4a5da1
mov ecx, eax
call fcn.004ba7b0
push eax
lea ecx, [esp + 0x12c]
call fcn.00402bc0
lea edx, [esp + 0x128]
push 0x4d9700
push edx
call fcn.0043ebe0
add esp, 8
test al, al
je 0x4a5d95
call fcn.004934e0
mov ecx, dword [eax]
call fcn.00490ee0
test eax, eax
je 0x4a5d95
call fcn.004934e0
mov ecx, dword [eax]
call fcn.00490ee0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x38]
push 0x4d6330
call eax
push ebp
push ebp
push ebp
push str.http:__www.shuame.com
push 0x4c94ac
push ebp
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0x128]
call fcn.00402c40
push str.updatable
mov ecx, esi
call fcn.004bae80
cmp eax, ebp
je 0x4a5e47
mov ecx, eax
call fcn.004ba7b0
push 0x4d9700
push eax
call fcn.0046f295
add esp, 8
test eax, eax
jne 0x4a5e47
push 0x4de5b4
mov ecx, esi
call fcn.004bae80
cmp eax, ebp
je 0x4a5e47
mov ecx, eax
call fcn.004ba7b0
push eax
lea ecx, [ebx + 0x10]
call fcn.0040b610
push 0x4de5c0
mov ecx, esi
call fcn.004bae80
cmp eax, ebp
je 0x4a5e47
mov ecx, eax
call fcn.004ba7b0
push eax
lea ecx, [ebx + 0x55b4]
call fcn.0040b610
push str.version_code
mov ecx, esi
call fcn.004bae80
cmp eax, ebp
je 0x4a5e47
mov ecx, eax
call fcn.004ba7b0
push eax
call dword [sym.imp.SHLWAPI.dll_StrToIntA]
mov dword [ebx + 0x18], eax
call fcn.0049c860
mov ecx, dword [eax + 0x24]
cmp ecx, dword [ebx + 0x18]
jne 0x4a5ea0
mov dword [esp + 0x10], 9
mov edx, dword [esp + 0x10]
push edx
mov ecx, ebx
call fcn.004a5990
cmp dword [esp + 0x1a8], 0x10
mov dword [esp + method.TiXmlDocument.virtual_0], vtable.TiXmlDocument.0
jb 0x4a5e78
mov eax, dword [esp + 0x194]
push eax
call fcn.0046d0e6
add esp, 4
lea ecx, [esp + 0x144]
mov dword [esp + 0x1a8], 0xf
mov dword [esp + 0x1a4], ebp
mov byte [esp + 0x194], 0
call fcn.004baee0
jmp 0x4a5ec3
call fcn.004934e0
mov ecx, dword [eax]
call fcn.00490ee0
test eax, eax
je 0x4a5eb7
mov ecx, ebx
call fcn.004a58d0
lea ecx, [esp + 0x144]
call fcn.00402900
mov ecx, dword [esp + 0x1bc]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0046da8a
add esp, 0x1b0
ret