Function at 0x425ce0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
mov eax, dword [0x515584]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
mov bl, byte [ebp + 0x14]
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
mov dword [ebp - 0x64], esi
push 0x425c70
push 0x7d0
push 0
mov ecx, dword [edi + 0x128738]
mov dword [ebp - 8], eax
call sym.sembd.exe_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::operator_struct_HWND____void_const
push eax
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [ebp - 0x48], eax
test bl, bl
mov eax, 0x4dac58
mov ecx, 0x4dac20
cmove ecx, eax
push ecx
push 0x4dac50
push dword [ebp - 8]
push esi
push 0x4dac60
call fcn.004090e0
xor ecx, ecx
mov dword [ebp - 0x44], 0x3c
xorps xmm0, xmm0
mov dword [ebp - 0x38], ecx
add esp, 0x14
movlpd qword [ebp - 0x24], xmm0
movlpd qword [ebp - 0x1c], xmm0
movlpd qword [ebp - 0x14], xmm0
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x40], 0x8440
mov dword [ebp - 0x3c], ecx
test bl, bl
je 0x425d8b
cmp byte [edi + 0x128822], cl
mov eax, 0x4d7670
cmovne eax, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov esi, eax
mov ecx, 0x4d9e9c
mov eax, 0x4d9ea4
test esi, esi
cmove ecx, eax
push ecx
push dword [ebp - 0x64]
push 0x4dad58
call fcn.004090e0
add esp, 0xc
test esi, esi
je 0x425ed3
push 0xffffffffffffffff
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 8]
push eax
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov ecx, dword [edi + 0x128738]
push 1
push 0
call sym.sembd.exe_public:_void___thiscall_DuiLib::CWindowWnd::ShowWindow_bool__bool_
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x48]
mov ecx, dword [edi + 0x128738]
call sym.sembd.exe_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::operator_struct_HWND____void_const
push eax
call dword [sym.imp.USER32.dll_KillTimer]
cmp dword [ebp - 8], 0
je 0x425ebd
push 0x11
xor eax, eax
mov dword [ebp - 0x50], 0
push 0x4da5e8
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
call fcn.00403340
mov eax, dword [0x522658]
test eax, eax
jne 0x425e74
push 0x128828
call fcn.0048d9d3
add esp, 4
mov esi, eax
push 0x128828
push 0
push esi
call fcn.00490000
add esp, 0xc
mov ecx, esi
call fcn.00425190
mov dword [0x522658], eax
lea ecx, [ebp - 0x60]
push ecx
mov ecx, dword [eax + 0x128738]
call fcn.00426780
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x425ebd
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425eb3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x425fab
push edx
push ecx
call fcn.0048da03
add esp, 8
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0048d7c2
mov esp, ebp
pop ebp
ret 0x10
push dword [ebp - 0x48]
mov ecx, dword [edi + 0x128738]
call sym.sembd.exe_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::operator_struct_HWND____void_const
push eax
call dword [sym.imp.USER32.dll_KillTimer]
push 0x11
xor eax, eax
mov dword [ebp - 0x50], 0
push 0x4da5e8
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
call fcn.00403340
mov eax, dword [0x522658]
test eax, eax
jne 0x425f3f
push 0x128828
call fcn.0048d9d3
add esp, 4
mov esi, eax
push 0x128828
push 0
push esi
call fcn.00490000
add esp, 0xc
mov ecx, esi
call fcn.00425190
mov dword [0x522658], eax
lea ecx, [ebp - 0x60]
push ecx
mov ecx, dword [eax + 0x128738]
call fcn.00426780
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x425f84
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425f7a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x425fb0
push edx
push ecx
call fcn.0048da03
add esp, 8
mov ecx, dword [edi + 0x128738]
push 1
push 0
call sym.sembd.exe_public:_void___thiscall_DuiLib::CWindowWnd::ShowWindow_bool__bool_
mov ecx, dword [ebp - 4]
mov eax, 0xfffffed4
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0048d7c2
mov esp, ebp
pop ebp
ret 0x10
call fcn.0049c1b3
call fcn.0049c1b3
int3