Function at 0x4042f4
Capabilities:
Create process on windows
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5a3888
mov eax, dword fs:[0]
push eax
sub esp, 0x218
mov eax, dword [0x621810]
xor eax, esp
mov dword [esp + 0x210], eax
push ebx
push esi
push edi
mov eax, dword [0x621810]
xor eax, esp
push eax
lea eax, [esp + 0x228]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov edi, ecx
xor esi, esi
push str.timer
mov eax, ebx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x24], ebx
mov dword [esp + 0x18], esi
call fcn.00415121
test al, al
je 0x404378
mov eax, dword [ebx + 0x298]
cmp eax, dword [edi + 0x69c]
jne 0x404c0e
push 1
lea ebx, [edi - 0x20]
call fcn.00407669
jmp 0x404c0e
push str.click
mov eax, ebx
call fcn.00415121
test al, al
je 0x404ba6
mov eax, dword [ebx + 0x298]
cmp eax, dword [edi + 0x6b0]
jne 0x40453d
cmp dword [edi + 0x8b0], esi
jne 0x404c19
mov ebx, 0x5fe734
push ebx
lea eax, [esp + 0x28]
call fcn.004018af
mov dword [esp + 0x230], esi
mov esi, str._fT
push esi
call fcn.0048c5ca
pop ecx
mov ecx, esi
lea esi, [esp + 0x24]
call fcn.00401834
push 0x724
call fcn.0048bf08
pop ecx
mov dword [esp + 0x1c], eax
mov byte [esp + 0x230], 1
test eax, eax
je 0x404471
push ebx
lea eax, [esp + 0x44]
call fcn.004018af
xor ebx, ebx
mov byte [esp + 0x230], 2
inc ebx
push 0x5ff85c
lea eax, [esp + 0x7c]
mov dword [esp + 0x18], ebx
call fcn.004018af
push 3
pop eax
mov dword [esp + 0x230], eax
cmp dword [esp + 0x38], 8
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x24]
jae 0x404434
mov eax, esi
push eax
lea eax, [esp + 0xb4]
call fcn.004018af
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0xb8]
mov dword [esp + 0x238], 4
push eax
push dword [esp + 0x28]
mov dword [esp + 0x24], 7
call fcn.0040bf9a
jmp 0x404476
xor ebx, ebx
xor eax, eax
inc ebx
test byte [esp + 0x14], 4
mov dword [edi + 0x8b0], eax
je 0x40449b
and dword [esp + 0x14], 0xfffffffb
push ebx
xor edi, edi
lea esi, [esp + 0xb4]
call fcn.00401ad5
mov edi, dword [esp + 0x18]
test byte [esp + 0x14], 2
je 0x4044b7
and dword [esp + 0x14], 0xfffffffd
push ebx
xor edi, edi
lea esi, [esp + 0x7c]
call fcn.00401ad5
mov edi, dword [esp + 0x18]
and dword [esp + 0x230], 0
test byte [esp + 0x14], 1
je 0x4044d6
push ebx
xor edi, edi
lea esi, [esp + 0x44]
call fcn.00401ad5
mov edi, dword [esp + 0x18]
mov ecx, dword [edi + 0x8b0]
mov edx, dword [ecx]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
push SysReAllocString
push 0x5ff85c
push dword [edi - 0x1c]
call dword [edx]
mov ecx, dword [edi + 0x8b0]
mov eax, dword [ecx]
call dword [eax + 8]
mov ecx, dword [edi + 0x8b0]
mov eax, dword [ecx]
push ebx
push ebx
call dword [eax + 4]
mov esi, dword [edi + 0x8b0]
call fcn.00411585
and dword [edi + 0x8b0], 0
cmp eax, ebx
jne 0x40452c
push ebx
lea esi, [edi - 0x20]
call fcn.0041166c
push ebx
lea esi, [esp + 0x28]
xor edi, edi
call fcn.00401ad5
jmp 0x404c19
cmp eax, dword [edi + 0x6c0]
jne 0x40488a
mov eax, dword [edi + 0x6e4]
cmp byte [eax + 0x1924], 0
jne 0x4045bb
push 0x5ff890
lea eax, [esp + 0x7c]
call fcn.004018af
push 0x5fe5f4
lea eax, [esp + 0x44]
mov dword [esp + 0x234], 8
call fcn.004018af
push esi
mov eax, 0x62c288
push eax
push eax
push eax
lea eax, [esp + 0x88]
push eax
add edi, 0xffffffe0
push edi
lea ebx, [esp + 0x58]
mov byte [esp + 0x248], 9
call fcn.00407338
push 1
xor edi, edi
mov esi, ebx
call fcn.00401ad5
push 1
lea esi, [esp + 0x7c]
jmp 0x404531
lea ecx, [edi - 0x20]
lea edx, [esp + 0x40]
mov dword [esp + 0x1c], ecx
call fcn.0040606d
add edi, 0x6ec
mov ebx, eax
mov dword [esp + 0x230], 0xa
mov eax, edi
mov dword [esp + 0x14], edi
call fcn.004016e5
or dword [esp + 0x230], 0xffffffff
push 1
xor edi, edi
lea esi, [esp + 0x44]
call fcn.00401ad5
mov esi, dword [esp + 0x18]
xor ebx, ebx
cmp dword [esi + 0x6fc], ebx
jne 0x404697
push dword [esp + 0x1c]
lea ecx, [esp + 0x44]
call fcn.00405f18
mov dword [esp + 0x230], 0xb
mov ebx, eax
mov eax, dword [esp + 0x14]
call fcn.004016e5
or dword [esp + 0x230], 0xffffffff
push 1
lea esi, [esp + 0x44]
call fcn.00401ad5
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x14], 8
jb 0x404652
mov eax, dword [eax]
mov esi, dword [esp + 0x18]
mov ecx, dword [esi + 0x6cc]
mov edx, dword [ecx]
push eax
call dword [edx + 0x2c]
mov ecx, dword [esi + 0x6b8]
mov eax, dword [ecx]
call dword [eax + 0xc8]
test al, al
jne 0x404c19
push 0
push 0
push dword [esi + 0x6c8]
lea edx, [esi + 0x178]
mov ecx, str.click
call fcn.004142eb
jmp 0x404c19
cmp dword [esi + 0x734], ebx
jne 0x4046b1
mov eax, dword [esp + 0x14]
push 0xffffffffffffffff
push ebx
lea ecx, [esi + 0x724]
call fcn.00401b81
lea eax, [esp + 0x24]
push eax
push dword [esi - 0x1c]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edi, dword [esp + 0x30]
sub edi, dword [esp + 0x28]
cmp dword [esi + 0x740], ebx
je 0x4046d2
sub edi, 0x24
mov ecx, dword [esi + 0x6b8]
mov eax, dword [ecx]
call dword [eax + 0xc8]
test al, al
je 0x4046f1
mov ecx, dword [esi + 0x6b8]
mov eax, dword [ecx]
call dword [eax + 0x60]
sub edi, eax
mov ecx, dword [esi + 0x6bc]
test ecx, ecx
je 0x404716
mov eax, dword [ecx]
call dword [eax + 0xc8]
test al, al
je 0x404716
mov ebx, dword [esi + 0x6bc]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x60]
sub edi, eax
mov ecx, dword [esp + 0x2c]
sub ecx, dword [esp + 0x24]
mov eax, dword [esi - 0x1c]
push 0x20
push edi
push ecx
push dword [esp + 0x34]
push dword [esp + 0x34]
push 0
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [esi - 0x1c]
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ebx, dword [esi + 0x6c4]
push 1
call fcn.004190b1
xor ebx, ebx
cmp byte [esi + 0x8bf], bl
je 0x40478f
push 0x5fe734
lea eax, [esp + 0x44]
call fcn.004018af
lea edx, [esp + 0x40]
push edx
lea ecx, [esi + 0x694]
push ebx
mov dword [esp + 0x238], 0xc
mov eax, dword [ecx]
push ebx
call dword [eax + 0xc]
push 1
lea esi, [esp + 0x44]
jmp 0x404531
mov eax, dword [esi + 0x6e8]
cmp eax, ebx
je 0x40487c
cmp byte [eax + 0x1924], bl
je 0x40487c
lea eax, [esp + 0xb0]
push 0x5ff8dc
lea edi, [esi + 0x724]
push eax
call fcn.00401638
push str.DuoyiLauncher.exe
push eax
lea eax, [esp + 0x88]
mov dword [esp + 0x240], 0xd
call fcn.0040a4f4
add esp, 0x10
push 1
xor edi, edi
lea esi, [esp + 0xb4]
mov byte [esp + 0x234], 0xf
call fcn.00401ad5
push 0x5ff8f8
lea eax, [esp + 0x44]
call fcn.004018af
lea eax, [esp + 0x5c]
push eax
lea ebx, [esp + 0x7c]
mov byte [esp + 0x234], 0x10
call fcn.0040a518
mov byte [esp + 0x234], 0x11
mov dword [esp], 0x5ff8e0
push eax
lea eax, [esp + 0x9c]
call fcn.0040a4f4
pop ecx
pop ecx
lea edi, [esp + 0x40]
call fcn.004481e0
xor ebx, ebx
inc ebx
push ebx
xor edi, edi
lea esi, [esp + 0x98]
call fcn.00401ad5
push ebx
lea esi, [esp + 0x60]
call fcn.00401ad5
push ebx
lea esi, [esp + 0x44]
call fcn.00401ad5
or dword [esp + 0x230], 0xffffffff
push ebx
lea esi, [esp + 0x7c]
call fcn.00401ad5
mov edi, dword [esp + 0x1c]
call fcn.00407887
jmp 0x404b6b
cmp eax, dword [edi + 0x6c8]
jne 0x404a29
mov ecx, dword [edi + 0x6b8]
mov eax, dword [ecx]
call dword [eax + 0xc8]
test al, al
lea eax, [esp + 0x24]
push eax
push dword [edi - 0x1c]
jne 0x4049c0
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [edi + 0x6b8]
mov eax, dword [ecx]
mov ebx, dword [edi - 0x1c]
push 0x20
call dword [eax + 0x60]
mov ecx, dword [esp + 0x34]
sub ecx, dword [esp + 0x2c]
add eax, ecx
push eax
mov eax, dword [esp + 0x34]
sub eax, dword [esp + 0x2c]
push eax
push dword [esp + 0x34]
push dword [esp + 0x34]
push esi
push ebx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [edi - 0x1c]
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [edi + 0x6b8]
mov eax, dword [ecx]
push 1
call dword [eax + 0xcc]
lea ecx, [edi - 0x20]
lea edx, [esp + 0x5c]
mov dword [esp + 0x1c], ecx
call fcn.0040606d
add edi, 0x6ec
mov ebx, eax
mov dword [esp + 0x230], 0x12
mov eax, edi
mov dword [esp + 0x14], edi
call fcn.004016e5
or dword [esp + 0x230], 0xffffffff
push 1
xor edi, edi
lea esi, [esp + 0x60]
call fcn.00401ad5
mov esi, dword [esp + 0x18]
cmp dword [esi + 0x6fc], edi
jne 0x404993
push dword [esp + 0x1c]
lea ecx, [esp + 0x60]
call fcn.00405f18
mov dword [esp + 0x230], 0x13
mov ebx, eax
mov eax, dword [esp + 0x14]
call fcn.004016e5
or dword [esp + 0x230], 0xffffffff
push 1
lea esi, [esp + 0x60]
call fcn.00401ad5
mov esi, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x14], 8
jb 0x40499f
mov eax, dword [eax]
mov ecx, dword [esi + 0x6cc]
mov edx, dword [ecx]
push eax
call dword [edx + 0x2c]
mov esi, dword [esi + 0x6c8]
push str.fileicon_up.png_dest0_0_15_15
call fcn.00415b56
jmp 0x404b6b
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [edi + 0x6b8]
mov eax, dword [ecx]
mov ebx, dword [edi - 0x1c]
push 0x20
call dword [eax + 0x60]
mov ecx, dword [esp + 0x34]
sub ecx, dword [esp + 0x2c]
sub ecx, eax
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x28]
push ecx
push eax
push dword [esp + 0x34]
push dword [esp + 0x34]
push esi
push ebx
call dword [sym.imp.USER32.dll_SetWindowPos]
push 5
push dword [edi - 0x1c]
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [edi + 0x6b8]
mov eax, dword [ecx]
push esi
call dword [eax + 0xcc]
mov esi, dword [edi + 0x6c8]
push str.fileicon_down.png_dest0_0_15_15
call fcn.00415b56
jmp 0x404c0e
cmp eax, dword [edi + 0x6d0]
jne 0x404b74
lea eax, [edi + 0x6ec]
cmp dword [eax + 0x14], 8
mov dword [esp + 0x14], eax
jb 0x404a47
mov eax, dword [eax]
mov ecx, dword [edi - 0x1c]
mov edx, eax
lea edi, [esp + 0x24]
call fcn.0044bf60
mov dword [esp + 0x230], 0x14
mov eax, dword [esp + 0x34]
cmp eax, esi
je 0x404b56
cmp dword [esp + 0x38], 8
mov ecx, dword [esp + 0x24]
jae 0x404a79
mov ecx, edi
cmp word [ecx + eax*2 - 2], 0x5c
jne 0x404a96
lea ecx, [eax - 1]
or eax, 0xffffffff
lea esi, [esp + 0x24]
call fcn.004018ed
mov eax, dword [esp + 0x34]
xor esi, esi
cmp eax, esi
je 0x404b56
mov eax, dword [esp + 0x18]
cmp byte [eax + 0x764], 0
push 0x5ff8dc
lea eax, [esp + 0x98]
lea edi, [esp + 0x28]
push eax
je 0x404ae5
call fcn.00401638
push 0x5ff9c0
push eax
lea eax, [esp + 0x6c]
mov byte [esp + 0x240], 0x15
call fcn.0040a4f4
add esp, 0x10
mov byte [esp + 0x230], 0x16
jmp 0x404b0c
call fcn.00401638
push 0x5ff9cc
push eax
lea eax, [esp + 0x6c]
mov byte [esp + 0x240], 0x17
call fcn.0040a4f4
add esp, 0x10
mov byte [esp + 0x230], 0x18
mov ebx, eax
mov eax, dword [esp + 0x14]
call fcn.004016e5
push 1
xor edi, edi
lea esi, [esp + 0x60]
call fcn.00401ad5
push 1
lea esi, [esp + 0x98]
mov byte [esp + 0x234], 0x14
call fcn.00401ad5
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x14], 8
jb 0x404b46
mov eax, dword [eax]
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx + 0x6cc]
mov edx, dword [ecx]
push eax
call dword [edx + 0x2c]
or dword [esp + 0x230], 0xffffffff
push 1
xor edi, edi
lea esi, [esp + 0x28]
call fcn.00401ad5
mov edi, dword [esp + 0x18]
jmp 0x404c0e
cmp eax, dword [edi + 0x6d4]
jne 0x404b87
push 1
push esi
push esi
push str.https:__dygame.duoyi.com_xy_
jmp 0x404b98
cmp eax, dword [edi + 0x6d8]
jne 0x404c0e
push 1
push esi
push esi
push 0x5fe734
push str.open
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x404c0e
push str.textchanged
mov eax, ebx
call fcn.00415121
test al, al
je 0x404c0e
mov ecx, dword [edi + 0x6cc]
cmp dword [ebx + 0x298], ecx
jne 0x404c0e
mov eax, dword [ecx]
lea edx, [esp + 0xcc]
push edx
call dword [eax + 0x28]
mov dword [esp + 0x230], 0x19
mov ebx, dword [eax]
push ebx
call fcn.0048c5ca
pop ecx
lea esi, [edi + 0x6ec]
mov ecx, ebx
call fcn.00401834
or dword [esp + 0x230], 0xffffffff
lea ecx, [esp + 0xcc]
call fcn.00414fb8
lea ecx, [edi - 0x20]
call fcn.00406f67
push dword [esp + 0x20]
mov ecx, edi
call fcn.0041127b
mov ecx, dword [esp + 0x228]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x210]
xor ecx, esp
call fcn.0048b951
mov esp, ebp
pop ebp
ret 4