Function at 0x49eef0
Capabilities:
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f6a6e
mov eax, dword fs:[0]
push eax
sub esp, 0x218
mov eax, dword [0x6b000c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov ax, word [0x639ee0]
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push 0
push eax
call fcn.00588800
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push 0x2f
push dword [esi + 0x904]
call fcn.005884c3
add esp, 8
or ebx, 0xffffffff
test eax, eax
je 0x49efcf
mov ecx, dword [esi + 0x904]
sub eax, ecx
sar eax, 1
cmp eax, ebx
je 0x49efcf
add ecx, 2
lea eax, [ecx + eax*2]
push eax
lea ecx, [ebp - 0x21c]
call fcn.0040c380
mov dword [ebp - 4], 0
lea eax, [ebp - 0x218]
push 0x103
push dword [ebp - 0x21c]
push eax
call fcn.005b8058
add esp, 0xc
mov dword [ebp - 4], ebx
mov eax, ebx
mov edx, dword [ebp - 0x21c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49efe8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x49efe8
push 0x103
lea eax, [ebp - 0x218]
push str.downloadinstall.exe
push eax
call fcn.005b8058
add esp, 0xc
mov edi, dword [ebp + 8]
mov ecx, 0x910
cmp edi, 2
mov eax, 0x920
push ecx
cmovne eax, ecx
lea ecx, [ebp - 0x21c]
add eax, esi
mov dword [ebp - 0x21c], eax
lea eax, [ebp - 0x218]
push eax
push dword [esi + 0x904]
call fcn.00413470
push 0
test eax, eax
jne 0x49f0e5
lea ecx, [ebp - 0x224]
call dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::CWaitCursor::constructor_struct_HWND____]
mov dword [ebp - 4], 2
mov ecx, esi
cmp edi, 2
jne 0x49f047
push str.btnIphone
jmp 0x49f04c
push str.btnAndroid
push 3
call fcn.0049f230
mov edx, 0x6517c0
lea ecx, [ebp - 0x218]
call fcn.004ddb80
mov edx, edi
lea ecx, [ebp - 0x21c]
call fcn.004dd8f0
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x21c]
cmp dword [eax - 0xc], 0
je 0x49f095
push 5
push 0
push 0
push eax
push str.open
push dword [esi + 4]
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, esi
cmp edi, 2
jne 0x49f0a3
push str.btnIphone
jmp 0x49f0a8
push str.btnAndroid
push 2
call fcn.0049f230
mov byte [ebp - 4], 2
mov eax, ebx
mov edx, dword [ebp - 0x21c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49f0d0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x224]
call dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::CWaitCursor::destructor_void_]
jmp 0x49f158
push str.progress
mov ecx, esi
call dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::WindowImplBase::ShowWindow_wchar_t_const___bool_]
cmp edi, 2
jne 0x49f0ff
mov eax, dword [esi + 0x92c]
jmp 0x49f105
mov eax, dword [esi + 0x91c]
test eax, eax
jne 0x49f11c
mov edx, dword [esi + 4]
mov ecx, str.DownloadErr
push eax
push 0x10
call fcn.00495040
add esp, 8
mov ecx, esi
cmp edi, 2
jne 0x49f138
push str.btnIphone
push 0
call fcn.0049f230
push 0x3e8
push 1
jmp 0x49f14b
push str.btnAndroid
push 0
call fcn.0049f230
push 0x3e8
push 0
push 0x407
mov ecx, esi
call dword [sym.imp.ycomuiu.dll_public:_long_int___thiscall_DuiLib::CWindowWnd::PostMessageW_unsigned_int__unsigned_int__long_int_]
push 0x650a3c
mov edx, 0x64fb1c
lea ecx, [ebp - 0x21c]
call fcn.004db870
add esp, 4
mov dword [ebp - 4], 5
mov ecx, esi
push dword [eax]
push str.caption
call dword [sym.imp.ycomuiu.dll_public:_int___thiscall_DuiLib::WindowImplBase::SetDlgItemTextW_wchar_t_const___wchar_t_const__]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x21c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x49f1a8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp edi, 2
jne 0x49f1cc
push dword [esi + 0x90c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 1
mov dword [esi + 0x90c], 0
push str.btnIphone
jmp 0x49f1e9
push dword [esi + 0x908]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 1
mov dword [esi + 0x908], 0
push str.btnAndroid
mov ecx, esi
call dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::WindowImplBase::EnableWindow_wchar_t_const___bool_]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0055f9be
mov esp, ebp
pop ebp
ret 4