Function at 0x4cd1e0
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x2fc
mov eax, dword [0x519bc0]
xor eax, esp
mov dword [esp + 0x2f8], eax
push ebx
push ebp
push esi
mov esi, dword [esp + 0x30c]
push edi
call fcn.004b0400
push 0x2018
xor ebx, ebx
push ebx
push 0x585b00
call fcn.004e7970
add esp, 0xc
push ebx
push 0xf
push str.WizardLogo.bmp
mov ecx, 0x54e748
call fcn.004a53b0
mov dword [0x587b18], eax
mov eax, dword [0x531154]
mov edi, 0x34
push 1
mov ecx, 0x54e748
mov dword [esp + 0x58], str.WIZARDCMD
mov dword [esp + 0x64], 0x4cc750
mov dword [esp + 0x8c], str.WIZARDARC
mov dword [esp + 0x98], 0x4cccd0
mov dword [esp + 0xc0], str.WIZARDEXTR
mov dword [esp + 0xcc], 0x4cc540
mov dword [esp + 0xf4], str.WIZARDADDOPT
mov dword [esp + 0x100], 0x4cca50
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], 0x22a
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], eax
call fcn.004a46e0
lea ecx, [esp + 0x48]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], 4
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ecx
lea ebp, [ebx + 2]
cmp byte [0x53d329], bl
je 0x4cd2f1
push 0x800
push 0x585b04
mov ecx, 0x54be10
call fcn.0047b060
mov dword [0x585b00], ebx
mov dword [esp + 0x30], ebp
mov eax, dword [0x531154]
mov ecx, 0x20
push 4
lea edx, [esp + 0x4c]
mov dword [esp + 0x54], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0xbc], eax
mov dword [esp + 0xf0], eax
push edx
lea eax, [esp + 0x1c]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x88], ecx
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xf0], ecx
push eax
mov ecx, 0x531178
mov dword [esp + 0x54], edi
mov dword [esp + 0x88], edi
mov dword [esp + 0xbc], edi
mov dword [esp + 0xf0], edi
call fcn.00463240
lea ecx, [esp + 0x14]
push ecx
call dword [sym.imp.COMCTL32.dll_PropertySheetW]
push 4
lea edx, [esp + 0x4c]
test eax, eax
push edx
mov ecx, 0x531178
setg byte [esp + 0x1b]
call fcn.004622b0
mov cl, byte [esp + 0x13]
cmp cl, bl
je 0x4cd67a
mov eax, dword [0x585b00]
cmp eax, ebx
je 0x4cd567
jle 0x4cd67a
cmp eax, ebp
jg 0x4cd67a
push 0x585b04
call fcn.00453550
cmp eax, 0x585b04
jne 0x4cd3e6
push 0x55ac02
call fcn.0048d460
push 0x800
push 0x55ac02
call fcn.00452cf0
push 0x800
push 0x585b04
push 0x55ac02
call fcn.00469570
jmp 0x4cd3fa
push 0x800
push 0x585b04
push 0x55ac02
call fcn.004694f0
mov al, byte [0x587b05]
mov dword [0x555950], 3
mov dword [0x55594c], ebp
mov byte [0x55598e], al
cmp byte [0x587b07], bl
je 0x4cd422
mov dword [0x555928], ebp
mov ecx, dword [0x587b08]
mov edx, dword [0x587b0c]
mov dword [0x555958], ecx
mov dword [0x55595c], edx
cmp dword [0x585b00], ebp
jne 0x4cd47a
push 0x55ac02
call fcn.00445500
test al, al
je 0x4cd47a
push ebx
push 1
push 0x55ac02
mov ecx, 0x54be10
call fcn.0047c680
cmp eax, 1
jne 0x4cd547
mov eax, dword [0x54be14]
mov dword [0x557bb0], eax
jmp 0x4cd547
cmp byte [0x587b06], bl
je 0x4cd4e7
push 0x502a30
push 0x55ac02
call fcn.00453770
test al, al
jne 0x4cd4c7
mov eax, 0x55ac02
add eax, 0xfffffffe
lea ecx, [ecx]
mov cx, word [eax + 2]
add eax, ebp
cmp cx, bx
jne 0x4cd4a0
mov ecx, dword [0x505964]
mov edx, dword [0x505968]
mov dword [eax], ecx
mov cx, word [0x50596c]
mov dword [eax + 4], edx
mov word [eax + 8], cx
xor eax, eax
lea esp, [esp]
movzx ecx, word [eax + 0x502a18]
mov word [eax + 0x550800], cx
add eax, ebp
cmp cx, bx
jne 0x4cd4d0
jmp 0x4cd547
mov esi, str..rar
cmp dword [0x557bb0], ebx
je 0x4cd4f9
mov esi, str..zip
lea edx, [esi + 2]
push edx
push 0x55ac02
call fcn.00453770
test al, al
jne 0x4cd53f
mov eax, esi
mov edx, esi
nop
mov cx, word [eax]
add eax, ebp
cmp cx, bx
jne 0x4cd510
mov edi, 0x55ac02
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, ebp
cmp cx, bx
jne 0x4cd524
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor eax, eax
mov word [0x550800], ax
push 1
push 0x55ac02
call fcn.00452f40
push ebx
mov ecx, 0x54be10
call fcn.0047cfb0
mov al, byte [esp + 0x13]
jmp 0x4cd67c
push ebx
push 1
push 0x585b04
mov ecx, 0x54be10
call fcn.0047c680
cmp eax, 1
jne 0x4cd5dc
push ebx
call fcn.004b0260
push 0x800
push 0x551806
push 0x586b04
mov ecx, 0x549cc0
call fcn.0048ff60
push 0x551806
call fcn.00445500
test al, al
jne 0x4cd5e5
push ebx
push 0x551806
call fcn.004459f0
test al, al
jne 0x4cd5e5
push 0x551806
push 0x1f7
call fcn.00463430
push eax
call fcn.004c2a40
add esp, 8
mov ecx, 0x531158
call fcn.0043f530
mov al, byte [esp + 0x13]
jmp 0x4cd67c
lea ecx, [esp + 0x118]
push ecx
mov ecx, 0x54be10
call fcn.0047b090
push 0x800
push 0x55ac02
mov ecx, 0x54be10
call fcn.0047b060
mov edx, dword [esp + 0x258]
mov ecx, 0x55bc04
mov dword [0x557bb0], edx
call fcn.004698f0
push 0x502a18
mov ecx, 0x55bc04
call fcn.00469920
push ebx
push ebx
mov ecx, 0x54be10
mov byte [0x555ad1], bl
call fcn.0047d350
cmp word [0x586b04], bx
je 0x4cd65b
push 0x800
push 0x551806
call fcn.00452cf0
push 1
push 0x501ac8
push ebx
push 0x551806
push str.open
push ebx
call dword [0x501424]
mov al, byte [esp + 0x13]
jmp 0x4cd67c
mov al, cl
mov ecx, dword [esp + 0x308]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004e6a64
add esp, 0x2fc
ret 4