Function at 0x4f5590
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x2f8
mov eax, dword [0x5755c4]
xor eax, esp
mov dword [esp + 0x2f4], eax
push ebx
push esi
mov esi, dword [esp + 0x304]
call fcn.004d5920
push 0x2018
push 0
push 0x5f5040
call fcn.00520500
add esp, 0xc
push 0
push 0x71
push 0x70
push 0x6f
push str.WizardLogo.png
push 1
call fcn.004b8da0
mov dword [0x5f5038], eax
mov ecx, 0x5ab4d8
mov eax, dword [0x5b76d8]
push 1
mov dword [esp + 0x23c], str.WIZARDCMD
mov dword [esp + 0x248], 0x4f6190
mov dword [esp + 0x270], str.WIZARDARC
mov dword [esp + 0x27c], 0x4f5cb0
mov dword [esp + 0x2a4], str.WIZARDEXTR
mov dword [esp + 0x2b0], 0x4f6450
mov dword [esp + 0x2d8], str.WIZARDADDOPT
mov dword [esp + 0x2e4], 0x4f5a50
mov dword [esp + 0xc], 0x34
mov dword [esp + 0x10], 0x22a
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], eax
call fcn.004b8ea0
cmp byte [0x57dfb4], 0
mov dword [esp + 0x18], eax
lea eax, [esp + 0x22c]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 4
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], eax
je 0x4f56b6
push 0x800
push 0x5f5044
mov ecx, 0x5a6670
call fcn.004065d0
mov dword [0x5f5040], 0
mov dword [esp + 0x24], 2
mov eax, dword [0x5b76d8]
mov ecx, 0x5b7768
mov dword [esp + 0x234], eax
mov dword [esp + 0x268], eax
mov dword [esp + 0x29c], eax
mov dword [esp + 0x2d0], eax
lea eax, [esp + 0x22c]
push 4
push eax
lea eax, [esp + 0x10]
mov dword [esp + 0x234], 0x34
push eax
mov dword [esp + 0x23c], 0x20
mov dword [esp + 0x26c], 0x34
mov dword [esp + 0x270], 0x20
mov dword [esp + 0x2a0], 0x34
mov dword [esp + 0x2a4], 0x20
mov dword [esp + 0x2d4], 0x34
mov dword [esp + 0x2d8], 0x20
call fcn.00496e90
lea eax, [esp + 8]
push eax
call dword [sym.imp.COMCTL32.dll_PropertySheetW]
test eax, eax
mov ecx, 0x5b7768
push 4
lea eax, [esp + 0x230]
setg bl
push eax
call fcn.00496e40
test bl, bl
je 0x4f5a33
mov eax, dword [0x5f5040]
test eax, eax
je 0x4f5906
dec eax
cmp eax, 1
ja 0x4f5a33
push 0x5f5044
call fcn.00486220
push 0x800
cmp eax, 0x5f5044
jne 0x4f57d0
push 0x598eea
call fcn.00441650
push 0x800
push 0x598eea
call fcn.00484610
push 0x800
push 0x5f5044
push 0x598eea
call fcn.0049dbe0
jmp 0x4f57df
push 0x5f5044
push 0x598eea
call fcn.0049dc20
cmp byte [0x5f7047], 0
mov al, byte [0x5f7045]
mov dword [0x591afc], 3
mov dword [0x591af8], 2
mov byte [0x591b3a], al
je 0x4f5810
mov dword [0x591ad0], 2
cmp dword [0x5f5040], 2
mov eax, dword [0x5f7048]
mov dword [0x591b00], eax
mov eax, dword [0x5f704c]
mov dword [0x591b04], eax
jne 0x4f5866
push 0x598eea
call fcn.004750c0
test al, al
je 0x4f5866
push 0
push 1
push 0x598eea
mov ecx, 0x5a6670
call fcn.004074c0
cmp eax, 1
jne 0x4f58e9
mov eax, dword [0x5a6674]
mov dword [0x593e90], eax
jmp 0x4f58e9
cmp byte [0x5f7046], 0
je 0x4f58ac
push 0x541e08
push 0x598eea
call fcn.00484650
test al, al
jne 0x4f5896
push 0x800
push str..exe
push 0x598eea
call fcn.0049dbe0
push 0x800
push 0x541db4
push 0x58c9a8
call fcn.0049dc20
jmp 0x4f58e9
cmp dword [0x593e90], 0
mov esi, 0x542028
je 0x4f58bf
mov esi, str..zip
lea eax, [esi + 2]
push eax
push 0x598eea
call fcn.00484650
test al, al
jne 0x4f58e1
push 0x800
push esi
push 0x598eea
call fcn.0049dbe0
xor eax, eax
mov word [0x58c9a8], ax
push 1
push 0x598eea
call fcn.00485f50
push 0
mov ecx, 0x5a6670
call fcn.00405290
jmp 0x4f5a33
push 0
push 1
push 0x5f5044
mov ecx, 0x5a6670
call fcn.004074c0
cmp eax, 0xffffffff
jne 0x4f5932
push 0x5f5044
mov ecx, 0x5b77e4
call fcn.0046e680
jmp 0x4f5a33
cmp eax, 1
jne 0x4f5a33
push 0
call fcn.004d1ed0
push 0x800
push 0x58d9ae
push 0x5f6044
mov ecx, 0x5a9378
call fcn.00448100
push 0x58d9ae
call fcn.004750c0
test al, al
jne 0x4f59a2
push 0
push 0
push 0x58d9ae
call fcn.00474b20
test al, al
jne 0x4f59a2
push 0x58d9ae
push 0x1f7
call fcn.00497960
push eax
call fcn.004dcc30
add esp, 8
mov ecx, 0x5b77e4
call fcn.0046e910
jmp 0x4f5a33
lea eax, [esp + 0x3c]
mov ecx, 0x5a6670
push eax
call fcn.00406c50
push 0x800
push 0x598eea
mov ecx, 0x5a6670
call fcn.004065d0
mov eax, dword [esp + 0x17c]
mov ecx, 0x599eec
mov dword [0x593e90], eax
call fcn.0049def0
push 0x541db4
mov ecx, 0x599eec
call fcn.0049dd10
push 0
push 0
mov ecx, 0x5a6670
mov byte [0x591da9], 0
call fcn.00406100
cmp word [0x5f6044], 0
je 0x4f5a18
push 0x800
push 0x58d9ae
call fcn.00484610
push 1
push 0x541b9c
push 0
push 0x58d9ae
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [esp + 0x2fc]
mov al, bl
pop esi
pop ebx
xor ecx, esp
call fcn.00507712
add esp, 0x2f8
ret 4