Function at 0x48dbbf
Capabilities:
Create process on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x51111b
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x7d8
mov eax, dword [0x566040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebx + 0x14]
mov dword [eax], 1
mov eax, dword [ebx + 0xc]
cmp eax, 0x258
jg 0x48da74
je 0x48d9d4
add eax, 0xffffff38
cmp eax, 0x69
ja case.0x48da82.602
movzx eax, byte [eax + 0x48dd24]
jmp dword [eax*4 + 0x48dd0c]
push str.LAYOUT:XML_DLG_SYS_SETTING
lea ecx, [ebp - 0x420]
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SHostDialog::constructor_wchar_t_const__]
xorps xmm0, xmm0
mov dword [ebp - method.SOUI::SDropDownWnd2.2.virtual_0], 0x52f6dc
lea esi, [edi + 0x43c]
mov dword [ebp - 0x41c], 0x52f5dc
mov dword [ebp - method.SOUI::SQrCtrl.virtual_0], 0x52f594
mov dword [ebp - method.SOUI::SQrCtrl.1.virtual_0], 0x52f59c
mov dword [ebp - 0x1e4], 0x52f5b0
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x58], esi
movups xmmword [ebp - 0x78], xmm0
mov dword [ebp - 0x54], 0
movups xmmword [ebp - 0x68], xmm0
mov dword [ebp - 0x50], 0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x420]
push dword [edi + 0x248]
call fcn.00470c60
lea ecx, [ebp - 0x420]
mov dword [esi], 0
mov dword [ebp - method.SOUI::SDropDownWnd2.2.virtual_0], vtable.SOUI::SMaskDialog.4.0
mov dword [ebp - method.SOUI::SMaskDialog.2.virtual_0], vtable.SOUI::SMaskDialog.2.0
mov dword [ebp - method.SOUI::SQrCtrl.virtual_0], vtable.SOUI::SMaskDialog.0
mov dword [ebp - method.SOUI::SQrCtrl.1.virtual_0], vtable.SOUI::SMaskDialog.1.0
mov dword [ebp - method.SOUI::SMaskDialog.3.virtual_0], vtable.SOUI::SMaskDialog.3.0
call dword [sym.imp.soui.dll_public_virtual:_void___thiscall_SOUI::SHostDialog::destructor_void_]
jmp case.0x48da82.602
push str.LAYOUT:XML_DLG_ABOUT
lea ecx, [ebp - 0x7b8]
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SHostDialog::constructor_wchar_t_const__]
mov dword [ebp - method.SOUI::SDropDownWnd2.2.virtual_0], 0x529364
mov dword [ebp - 0x7b4], 0x529410
mov dword [ebp - method.SOUI::SQrCtrl.virtual_0], 0x529408
mov dword [ebp - method.SOUI::SQrCtrl.1.virtual_0], 0x529510
mov dword [ebp - 0x57c], 0x529354
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x7b8]
push dword [edi + 0x248]
call fcn.00470c60
lea ecx, [ebp - 0x7b8]
mov dword [ebp - method.SOUI::SDropDownWnd2.2.virtual_0], vtable.SOUI::SMaskDialog.4.0
mov dword [ebp - method.SOUI::SMaskDialog.2.virtual_0], vtable.SOUI::SMaskDialog.2.0
mov dword [ebp - method.SOUI::SQrCtrl.virtual_0], vtable.SOUI::SMaskDialog.0
mov dword [ebp - method.SOUI::SQrCtrl.1.virtual_0], vtable.SOUI::SMaskDialog.1.0
mov dword [ebp - method.SOUI::SMaskDialog.3.virtual_0], vtable.SOUI::SMaskDialog.3.0
call dword [sym.imp.soui.dll_public_virtual:_void___thiscall_SOUI::SHostDialog::destructor_void_]
jmp case.0x48da82.602
call fcn.00476b70
test al, al
je case.0x48da82.602
push str.LAYOUT:XML_DLG_EXCHANGE_CODE
lea ecx, [ebp - 0x410]
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SHostDialog::constructor_wchar_t_const__]
mov dword [ebp - 4], 2
xorps xmm0, xmm0
xor eax, eax
mov dword [ebp - method.SOUI::SDropDownWnd2.2.virtual_0], vtable.SOUI::SExchangeCodeDlg.4.0
movups xmmword [ebp - 0x68], xmm0
mov dword [ebp - method.SOUI::SExchangeCodeDlg.virtual_0], vtable.SOUI::SExchangeCodeDlg.0
mov dword [ebp - method.SOUI::SQrCtrl.virtual_0], vtable.SOUI::SExchangeCodeDlg.2.0
mov dword [ebp - method.SOUI::SQrCtrl.1.virtual_0], vtable.SOUI::SExchangeCodeDlg.3.0
mov dword [ebp - method.SOUI::SExchangeCodeDlg.1.virtual_0], vtable.SOUI::SExchangeCodeDlg.1.0
movups xmmword [ebp - 0x78], xmm0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 7
mov word [ebp - 0x68], ax
push eax
push 0x521a28
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.00416af0
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x410]
push dword [edi + 0x248]
call fcn.00470c60
cmp eax, 1
jne 0x48d871
mov esi, dword [edi + 0x248]
call fcn.0041ce30
call dword [0x571524]
test al, al
je 0x48d6b9
call dword [0x571520]
test eax, eax
jg 0x48d6b9
push 0x522144
push 0
push 0x511
push str.adaptercenterSAdapterCenter.cpp
call dword [0x571528]
add esp, 0x10
push 0x48bd40
push esi
call dword [0x5714bc]
add esp, 4
mov ecx, esp
mov dword [ebp - 0x7e0], esp
push 0x521a28
call dword [sym.imp.utilities.dll_public:_void___thiscall_SOUI::TStringT_wchar_t__struct_SOUI::wchar_traits_::constructor_wchar_t_const__]
push ecx
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x7e4], esp
push 0x5312b4
call dword [sym.imp.utilities.dll_public:_void___thiscall_SOUI::TStringT_wchar_t__struct_SOUI::wchar_traits_::constructor_wchar_t_const__]
push ecx
mov byte [ebp - 4], 6
mov ecx, esp
mov dword [ebp - 0x7d8], esp
push 0x52cce0
call dword [sym.imp.utilities.dll_public:_void___thiscall_SOUI::TStringT_wchar_t__struct_SOUI::wchar_traits_::constructor_wchar_t_const__]
mov byte [ebp - 4], 7
lea eax, [ebp - 0x68]
cmp dword [ebp - 0x54], 7
xorps xmm0, xmm0
mov esi, dword [ebp - 0x58]
cmova eax, dword [ebp - 0x68]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x7d4], eax
push 1
push 3
movups xmmword [ebp - 0x2c], xmm0
cmp esi, 0x7ffffffe
ja 0x48dcff
cmp esi, 7
ja 0x48d761
mov ecx, 7
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2c], xmm0
jmp 0x48d7bf
mov eax, esi
or eax, 7
cmp eax, 0x7ffffffe
jbe 0x48d774
mov eax, 0x7ffffffe
jmp 0x48d77e
mov ecx, 0xa
cmp eax, ecx
cmovb eax, ecx
mov dword [ebp - 0x7dc], eax
lea eax, [ebp - 0x7dc]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00417130
mov ecx, eax
mov dword [ebp - 0x1c], esi
mov eax, dword [ebp - 0x7dc]
mov dword [ebp - 0x18], eax
lea eax, [esi*2 + 2]
push eax
push dword [ebp - 0x7d4]
mov dword [ebp - 0x2c], ecx
push ecx
call fcn.004d7e90
mov ecx, dword [ebp - 0x18]
add esp, 0x14
cmp ecx, 7
mov byte [ebp - 4], 8
push ecx
lea eax, [ebp - 0x2c]
mov ecx, esp
cmova eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.utilities.dll_public:_void___thiscall_SOUI::TStringT_wchar_t__struct_SOUI::wchar_traits_::constructor_wchar_t_const__]
lea ecx, [ebp - 0x7d0]
mov byte [ebp - 4], 9
call fcn.004711c0
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x48d824
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x48d81a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48dd04
push ecx
push edx
call fcn.004d37a1
add esp, 8
push dword [edi + 0x248]
xor eax, eax
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x7d0]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00470c60
cmp eax, 2
jne 0x48d866
push 0
push 0x130
push 0x7f8
push dword [edi + 0x248]
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [ebp - 0x7d0]
call fcn.00471310
lea ecx, [ebp - 0x410]
call fcn.00460320
jmp case.0x48da82.602
call fcn.00456350
mov al, byte [eax + 4]
test al, al
je 0x48d928
push ecx
mov ecx, esp
mov dword [ebp - 0x7d8], esp
push 0x521a28
call dword [sym.imp.utilities.dll_public:_void___thiscall_SOUI::TStringT_wchar_t__struct_SOUI::wchar_traits_::constructor_wchar_t_const__]
push ecx
mov dword [ebp - 4], 0xc
mov ecx, esp
mov dword [ebp - 0x7e4], esp
push 0x521a28
call dword [sym.imp.utilities.dll_public:_void___thiscall_SOUI::TStringT_wchar_t__struct_SOUI::wchar_traits_::constructor_wchar_t_const__]
push ecx
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x7e0], esp
push 0x521a28
call dword [sym.imp.utilities.dll_public:_void___thiscall_SOUI::TStringT_wchar_t__struct_SOUI::wchar_traits_::constructor_wchar_t_const__]
push 0
push 2
push ecx
mov ecx, esp
mov byte [ebp - 4], 0xe
push str.ck_W
call dword [sym.imp.utilities.dll_public:_void___thiscall_SOUI::TStringT_wchar_t__struct_SOUI::wchar_traits_::constructor_wchar_t_const__]
lea ecx, [ebp - 0x7d0]
mov dword [ebp - 4], 0xffffffff
call fcn.004711c0
mov dword [ebp - 4], 0xf
lea ecx, [ebp - 0x7d0]
push dword [edi + 0x248]
call fcn.00470c60
lea ecx, [ebp - 0x7d0]
call fcn.00471310
jmp case.0x48da82.602
mov ecx, edi
call fcn.0048c120
mov esi, dword [edi + 0x248]
call fcn.0041ce30
call dword [0x571524]
test al, al
je 0x48d968
call dword [0x571520]
test eax, eax
jg 0x48d968
push str._u7bv
push 0
push 0x4ff
push str.adaptercenterSAdapterCenter.cpp
call dword [0x571528]
add esp, 0x10
push 0x48bd80
push esi
call dword [0x57142c]
add esp, 8
jmp case.0x48da82.602
lea ecx, [edi + 0x23c]
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::CSimpleWnd::IsIconic_void_const]
test eax, eax
jne 0x48d9a0
lea ecx, [edi + 0x23c]
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::CSimpleWnd::IsWindowVisible_void_const]
test eax, eax
jne case.0x48da82.602
lea ecx, [edi + 0x23c]
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::CSimpleWnd::IsIconic_void_const]
neg eax
sbb eax, eax
and eax, 0xfffffffc
add eax, 5
push eax
push dword [edi + 0x248]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [edi + 0x248]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp case.0x48da82.602
call fcn.004792a0
mov edi, eax
lea ecx, [edi + 0x23c]
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::CSimpleWnd::IsWindowVisible_void_const]
test eax, eax
jne 0x48da55
mov ecx, dword [0x571844]
test ecx, ecx
jne 0x48da21
push 0xc
call fcn.004d37db
mov ecx, eax
add esp, 4
mov dword [ebp - 0x7d8], ecx
mov dword [0x571844], ecx
mov dword [ecx], vtable.SOUI::SMantleCenter.0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
cmp dword [ecx + 4], 0
je 0x48da61
mov eax, 1
lock xadd dword [ecx + 8], eax
inc eax
cmp eax, 1
jne 0x48da61
mov ecx, dword [ecx + 4]
push eax
push eax
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SWindow::SetVisible_int__int_]
push 5
push dword [edi + 0x248]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.0x48da82.602
lea ecx, [edi + 0x23c]
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::CSimpleWnd::IsWindowVisible_void_const]
push 5
push dword [edi + 0x248]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.0x48da82.602
add eax, 0xfffffda7
cmp eax, 4
ja case.0x48da82.602
jmp dword [eax*4 + 0x48dd90]
call fcn.004745c0
jmp 0x48d9d9
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x571cec]
cmp eax, dword [ecx + 4]
jle 0x48daeb
push 0x571cec
call fcn.004d3895
add esp, 4
cmp dword [0x571cec], 0xffffffff
jne 0x48daeb
mov dword [ebp - 4], 0x10
call fcn.004b62d0
push 0x515e60
call fcn.004d3e4a
add esp, 4
mov dword [ebp - 4], 0xffffffff
push 0x571cec
call fcn.004d3844
add esp, 4
mov edx, 0x571d08
lea ecx, [ebp - 0x2c]
call fcn.00416570
push 0xc8
lea eax, [ebp - 0x6ec]
mov dword [ebp - 4], 0x11
push 0
push eax
mov dword [ebp - 0x6f0], 0
call fcn.004d8410
add esp, 0xc
lea eax, [ebp - 0x624]
push 0x1fe
push 0
push eax
call fcn.004d8410
add esp, 0xc
call fcn.0041ce30
lea eax, [ebp - 0x6f0]
push eax
push ecx
call fcn.0041eae0
test al, al
je 0x48db73
lea ecx, [ebp - 0x624]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x48db54
sub ecx, edx
lea eax, [ebp - 0x624]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x2c]
call fcn.00416af0
cmp dword [ebp - 0x18], 7
lea eax, [ebp - 0x2c]
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmova eax, dword [ebp - 0x2c]
push 1
push 0
push 0
push eax
push 0x521fcc
push 0
call esi
cmp eax, 0x20
ja 0x48dbb7
cmp dword [ebp - 0x18], 7
lea eax, [ebp - 0x2c]
push 1
cmova eax, dword [ebp - 0x2c]
push 0
push eax
push 0x521fd8
push 0x521fcc
push 0
call esi
lea ecx, [ebp - 0x2c]
jmp 0x48dcd5
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x571cec]
cmp eax, dword [ecx + 4]
jle 0x48dc17
push 0x571cec
call fcn.004d3895
add esp, 4
cmp dword [0x571cec], 0xffffffff
jne 0x48dc17
mov dword [ebp - 4], 0x12
call fcn.004b62d0
push 0x515e60
call fcn.004d3e4a
add esp, 4
mov dword [ebp - 4], 0xffffffff
push 0x571cec
call fcn.004d3844
add esp, 4
mov edx, 0x571d20
lea ecx, [ebp - 0x2c]
call fcn.00416570
jmp 0x48db73
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x571cec]
cmp eax, dword [ecx + 4]
jle 0x48dc81
push 0x571cec
call fcn.004d3895
add esp, 4
cmp dword [0x571cec], 0xffffffff
jne 0x48dc81
mov dword [ebp - 4], 0x13
call fcn.004b62d0
push 0x515e60
call fcn.004d3e4a
add esp, 4
mov dword [ebp - 4], 0xffffffff
push 0x571cec
call fcn.004d3844
add esp, 4
mov edx, 0x571d38
lea ecx, [ebp - 0x44]
call fcn.00416570
cmp dword [ebp - 0x30], 7
lea eax, [ebp - 0x44]
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmova eax, dword [ebp - 0x44]
push 1
push 0
push 0
push eax
push 0x521fcc
push 0
call esi
cmp eax, 0x20
ja 0x48dcd2
cmp dword [ebp - 0x30], 7
lea eax, [ebp - 0x44]
push 1
cmova eax, dword [ebp - 0x44]
push 0
push eax
push 0x521fd8
push 0x521fcc
push 0
call esi
lea ecx, [ebp - 0x44]
call fcn.00415000
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
add byte [eax], al
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004d378e
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
call fcn.00401610
call fcn.004e2f6c
nop dword [eax]
jl 0x48dce7
dec eax
add byte [esp + edx*8 + 0x48], ch
add byte [ecx], bh
aad 0x48
add bh, dl
aad 0x48
add byte [ecx - 0x25ffb728], al
fmul qword [eax]
add byte [0x5050505], al
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 17106181
add al, byte [1711538949]
nop
mov edx, ebx
dec eax
add dl, bl
fmul qword [eax]
xchg ebx, eax
fimul dword [eax]
mov edi, 0x290048db
fmul qword [eax]
int3