Function at 0x40e362
Capabilities:
Create process on windows

Disassembly:
push 0x1a4
mov eax, 0x511332
call fcn.004d18c4
mov edi, ecx
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x98]
and dword [ebp - 0x14], 0
push ecx
mov ecx, ebx
mov eax, dword [ebx]
call dword [eax + 4]
push str.btn_close
mov ecx, eax
call fcn.0041a752
lea ecx, [ebp - 0x98]
mov esi, eax
call fcn.0041a4f5
test esi, esi
jne 0x40e480
xor ebx, ebx
cmp dword [edi + 0x8a4], ebx
jne 0x40e473
mov eax, dword [edi + 0xa18]
test eax, eax
je 0x40e473
cmp dword [eax + 0x698], 2
jne 0x40e473
cmp dword [edi + 0x9f8], 2
movsd xmm3, qword [edi + 0x8e0]
movsd xmm2, qword [edi + 0x8d8]
mov dword [edi + 0x8a4], 1
jne 0x40e43c
lea eax, [edi + 0x948]
push eax
mov al, byte [ebp - 0xa0]
lea edx, [edi + 0x918]
sub esp, 0x28
mov ecx, esp
mov dword [ecx], vtable.._AV___Func_impl_no_alloc_V___Binder_U_Unforced_std__P8COctoberMainWnd__AEXH_ZPAV3_ABU___Ph__00_2__std__XH_std__.0
mov dword [ecx + 8], 0x411646
mov dword [ecx + 0xc], ebx
mov byte [ecx + 0x10], al
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x24], ecx
mov ecx, dword [edi + 4]
call fcn.0040c27f
add esp, 0x2c
mov dword [edi + 0x8e8], eax
jmp 0x40e78b
mov al, byte [ebp - 0xa0]
lea edx, [edi + 0x980]
sub esp, 0x28
mov ecx, esp
mov dword [ecx], vtable.._AV___Func_impl_no_alloc_V___Binder_U_Unforced_std__P8COctoberMainWnd__AEXH_ZPAV3_ABU___Ph__00_2__std__XH_std__.0
mov dword [ecx + 8], 0x411646
mov dword [ecx + 0xc], ebx
mov byte [ecx + 0x10], al
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x24], ecx
mov ecx, dword [edi + 4]
call fcn.0040c369
add esp, 0x28
jmp 0x40e431
push ecx
mov ecx, edi
call fcn.0040e7fd
jmp 0x40e78b
mov eax, dword [ebx]
lea ecx, [ebp - 0x98]
push ecx
mov ecx, ebx
call dword [eax + 4]
push str.btn_inst1
mov ecx, eax
call fcn.0041a752
lea ecx, [ebp - 0x98]
mov esi, eax
call fcn.0041a4f5
test esi, esi
jne 0x40e4e0
mov ecx, dword [edi + 0xa18]
mov dword [edi + 0x870], 7
test ecx, ecx
je 0x40e4c9
mov eax, dword [ecx]
push 1
call dword [eax + 0x204]
push 0
push 0x64
push 0x3039
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x40e78b
mov eax, dword [ebx]
lea ecx, [ebp - 0x98]
push ecx
mov ecx, ebx
call dword [eax + 4]
push str.btn_sm
mov ecx, eax
call fcn.0041a752
lea ecx, [ebp - 0x98]
mov esi, eax
call fcn.0041a4f5
test esi, esi
je 0x40e536
mov eax, dword [ebx]
lea ecx, [ebp - 0x98]
push ecx
mov ecx, ebx
call dword [eax + 4]
push str.btn_jc
mov ecx, eax
call fcn.0041a752
lea ecx, [ebp - 0x98]
mov esi, eax
call fcn.0041a4f5
test esi, esi
jne 0x40e543
push ecx
mov ecx, edi
call fcn.00411b0b
jmp 0x40e78b
mov eax, dword [ebx]
lea ecx, [ebp - 0x98]
push ecx
mov ecx, ebx
call dword [eax + 4]
push str.btn_agreement
mov ecx, eax
call fcn.0041a752
lea ecx, [ebp - 0x98]
mov esi, eax
call fcn.0041a4f5
test esi, esi
jne 0x40e583
push 5
xor eax, eax
push eax
push eax
push str.http:__www.66ng.cn_usage_agreemen.html
push str.open
jmp 0x40e74f
mov eax, dword [ebx]
lea ecx, [ebp - 0x98]
push ecx
mov ecx, ebx
call dword [eax + 4]
push str.btn_changepath
mov ecx, eax
call fcn.0041a752
lea ecx, [ebp - 0x98]
mov esi, eax
call fcn.0041a4f5
test esi, esi
jne 0x40e5ba
mov ecx, edi
call fcn.0040f218
jmp 0x40e78b
mov eax, dword [ebx]
lea ecx, [ebp - 0x98]
push ecx
mov ecx, ebx
call dword [eax + 4]
push str.btnwx
mov ecx, eax
call fcn.0041a752
lea ecx, [ebp - 0x98]
mov esi, eax
call fcn.0041a4f5
test esi, esi
jne 0x40e5e9
push 2
jmp 0x40e616
mov eax, dword [ebx]
lea ecx, [ebp - 0x98]
push ecx
mov ecx, ebx
call dword [eax + 4]
push str.btnali
mov ecx, eax
call fcn.0041a752
lea ecx, [ebp - 0x98]
mov esi, eax
call fcn.0041a4f5
test esi, esi
jne 0x40e622
push 1
mov ecx, edi
call fcn.004119a8
jmp 0x40e78b
mov eax, dword [ebx]
lea ecx, [ebp - 0x98]
push ecx
mov ecx, ebx
call dword [eax + 4]
push str.btn_kefu
mov ecx, eax
call fcn.0041a752
lea ecx, [ebp - 0x98]
mov esi, eax
call fcn.0041a4f5
test esi, esi
jne 0x40e65d
push 1
xor eax, eax
push eax
push eax
push str.https:__tb.53kf.com_code_client_a00d62cb3718463c6315abc8a823a82d3_1
jmp 0x40e74a
mov eax, dword [ebx]
lea ecx, [ebp - 0x98]
push ecx
mov ecx, ebx
call dword [eax + 4]
push str.btnqr1cv
mov ecx, eax
call fcn.0041a752
lea ecx, [ebp - 0x98]
mov esi, eax
call fcn.0041a4f5
test esi, esi
jne 0x40e6c1
mov ecx, dword [edi + 0x964]
xor ebx, ebx
inc ebx
mov dword [edi + 0x960], ebx
test ecx, ecx
je 0x40e6a4
mov eax, dword [ecx]
push ebx
call dword [eax + 0xf8]
mov ecx, dword [edi + 0xa08]
push 0
mov eax, dword [ecx]
call dword [eax + 0xf8]
push ebx
mov ecx, edi
call fcn.0040e9b1
jmp 0x40e78b
mov eax, dword [ebx]
lea ecx, [ebp - 0x12c]
push ecx
mov ecx, ebx
call dword [eax + 4]
and dword [ebp - 4], 0
xor ecx, ecx
inc ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x14], ecx
mov ecx, eax
push str.btn_spjc
call fcn.0041a752
test eax, eax
je 0x40e715
mov eax, dword [ebx]
lea ecx, [ebp - 0x98]
push ecx
mov ecx, ebx
call dword [eax + 4]
push str.btn_spjc2
mov ecx, eax
mov dword [ebp - 0x10], 3
call fcn.0041a752
mov byte [ebp + 0xb], 0
test eax, eax
jne 0x40e719
mov byte [ebp + 0xb], 1
test byte [ebp - 0x10], 2
je 0x40e72a
lea ecx, [ebp - 0x98]
call fcn.0041a4f5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12c]
call fcn.0041a4f5
cmp byte [ebp + 0xb], 0
je 0x40e758
push 1
xor eax, eax
push eax
push eax
push str.https:__gwe969fnnco.feishu.cn_docx_TwfWdwxnho8D2WxiYcFcrrUHnid
push str.Open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x40e78b
mov eax, dword [ebx]
lea ecx, [ebp - 0x1b0]
push ecx
mov ecx, ebx
call dword [eax + 4]
push str.btn_fe
mov ecx, eax
call fcn.0041a752
lea ecx, [ebp - 0x1b0]
mov esi, eax
call fcn.0041a4f5
test esi, esi
jne 0x40e78b
mov ecx, dword [edi + 4]
call fcn.00406ad7
call fcn.004d188d
ret 4