Function at 0x4d52e0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x63711b
mov eax, dword fs:[0]
push eax
sub esp, 0x39c
mov eax, dword [0x6c3afc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov edi, dword [sym.imp.DuiLib.dll_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const]
mov ebx, ecx
push str.Menu_open
mov ecx, esi
call edi
test al, al
je 0x4d5332
mov ecx, ebx
call fcn.004d5060
jmp 0x4d5612
push str.Menu_saveas
mov ecx, esi
call edi
test al, al
je 0x4d534b
mov ecx, ebx
call fcn.004d38f0
jmp 0x4d5612
push str.Menu_copy
mov ecx, esi
call edi
test al, al
je 0x4d5364
mov ecx, ebx
call fcn.004d0770
jmp 0x4d5612
push str.Menu_delete
mov ecx, esi
call edi
test al, al
je 0x4d5389
mov eax, dword [ebx + 4]
push 0
push 0
push 0x406
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4d5612
push str.Menu_prev
mov ecx, esi
call edi
test al, al
je 0x4d53ae
mov ecx, dword [ebx + 4]
push 0
push 0
push 0x404
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4d5612
push str.Menu_next
mov ecx, esi
call edi
test al, al
je 0x4d53d3
mov edx, dword [ebx + 4]
push 0
push 0
push 0x405
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4d5612
push str.Menu_actual
mov ecx, esi
call edi
test al, al
je 0x4d53f8
mov eax, dword [ebx + 4]
push 0
push 0
push 0x407
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4d5612
push str.Menu_lock
mov ecx, esi
call edi
test al, al
je 0x4d5411
mov ecx, ebx
call fcn.004cf1f0
jmp 0x4d5612
push str.Menu_mousepage
mov ecx, esi
call edi
test al, al
je 0x4d5438
push 0x688700
lea ecx, [ebp - 0x2c]
call fcn.00403d90
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0
push ecx
jmp 0x4d545d
push str.Menu_mousepersent
mov ecx, esi
call edi
test al, al
je 0x4d5472
push 0x6886c0
lea ecx, [ebp - 0x2c]
call fcn.00403d90
lea edx, [ebp - 0x2c]
mov dword [ebp - 4], 1
push edx
call fcn.00404c20
add esp, 4
lea ecx, [ebp - 0x2c]
call fcn.004037f0
jmp 0x4d5612
push str.Menu_screenshot
mov ecx, esi
call edi
test al, al
je 0x4d5495
push 0
push 0
push 0x40d
mov ecx, ebx
call dword [sym.imp.DuiLib.dll_public:_long_int___thiscall_DuiLib::CWindowWnd::PostMessageW_unsigned_int__unsigned_int__long_int_]
jmp 0x4d5612
push str.Menu_fullscreen
mov ecx, esi
call edi
test al, al
je 0x4d54ae
mov ecx, ebx
call fcn.004d00c0
jmp 0x4d5612
push str.Menu_Wallpaper
mov ecx, esi
call edi
test al, al
je 0x4d54c7
mov ecx, ebx
call fcn.004d0870
jmp 0x4d5612
push str.Menu_folder
mov ecx, esi
call edi
test al, al
je 0x4d54e0
mov ecx, ebx
call fcn.004d1570
jmp 0x4d5612
push str.Menu_info
mov ecx, esi
call edi
test al, al
je 0x4d54f9
mov ecx, ebx
call fcn.004d1980
jmp 0x4d5612
push str.Menu_setting
mov ecx, esi
call edi
test al, al
je 0x4d5512
mov ecx, ebx
call fcn.004d1ad0
jmp 0x4d5612
push str.Menu_print
mov ecx, esi
call edi
test al, al
je 0x4d552b
mov ecx, ebx
call fcn.004d05f0
jmp 0x4d5612
push str.Menu_Default
mov ecx, esi
call edi
test al, al
je 0x4d5544
mov ecx, ebx
call fcn.004d3df0
jmp 0x4d5612
push str.Menu_homepage
mov ecx, esi
call edi
test al, al
je 0x4d558d
lea eax, [ebp - 0x2c]
push eax
call fcn.004115b0
mov eax, dword [ebp - 0x2c]
add esp, 4
cmp dword [ebp - 0x18], 8
jae 0x4d5569
lea eax, [ebp - 0x2c]
push 1
push 0
push str.http:__www.kantu365.com
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x2c]
call fcn.004bf3b0
jmp 0x4d5612
push str.Menu_about
mov ecx, esi
call edi
test al, al
je 0x4d5612
lea ecx, [ebp - 0x3a8]
call fcn.004b8850
mov ecx, dword [ebx + 4]
push 0
push 0x190
push 0x258
push 0
push 0
push 0
push 0x10cf0000
push 0x688638
push ecx
lea ecx, [ebp - 0x3a8]
mov dword [ebp - 4], 2
call dword [sym.imp.DuiLib.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::Create_struct_HWND_____wchar_t_const___unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____]
mov edx, dword [ebx + 4]
push edx
lea ecx, [ebp - 0x3a8]
call fcn.004d6de0
lea ecx, [ebp - 0x3a8]
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CWindowWnd::CenterWindow_void_]
lea ecx, [ebp - 0x3a8]
call dword [sym.imp.DuiLib.dll_public:_unsigned_int___thiscall_DuiLib::CWindowWnd::ShowModal_void_]
lea ecx, [ebp - 0x3a8]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.DuiLib.dll_public_virtual:_void___thiscall_DuiLib::WindowImplBase::destructor_void_]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005dd8e2
mov esp, ebp
pop ebp
ret 4