Function at 0x4ba6e3
Capabilities:
Create process on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5695a6
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x968
mov eax, dword [0x5ef300]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x954], edi
mov eax, dword [ebx + 0x14]
mov dword [eax], 1
mov eax, dword [ebx + 0xc]
cmp eax, 0x258
jg 0x4ba6bd
je 0x4ba69e
add eax, 0xfffffed4
cmp eax, 5
ja case.0x4ba6cb.602
jmp dword [eax*4 + 0x4ba7c8]
push dword [ebx + 0x10]
call fcn.004d5620
jmp case.0x4ba6cb.602
push str.LAYOUT:XML_DLG_ABOUT
lea ecx, [ebp - 0x330]
call dword [sym.imp.soui4.dll_public:_void___thiscall_SOUI::SHostDialog::constructor_wchar_t_const__]
push dword [edi + 0x1c]
lea eax, [ebp - 0x330]
mov dword [ebp - 0x5c], 0
push eax
mov dword [ebp - 0x58], 0
mov byte [ebp - 0x54], 0
mov dword [ebp - 0x50], 0x64
mov dword [ebp - method.SOUI::SAreaNodeModeDlg.1.virtual_0], 0x59dc04
mov dword [ebp - method.SOUI::SMaskDialog.virtual_0], 0x59d984
mov dword [ebp - method.SOUI::SAreaNodeModeDlg.2.virtual_0], 0x59dae8
mov dword [ebp - method.SOUI::SDropDownWnd2.1.virtual_0], 0x59dd50
mov dword [ebp - method.SOUI::SDropDownWnd2.virtual_0], 0x59dbf0
mov dword [ebp - 0x60], vtable.SOUI::SAboutDlg.0
call fcn.00490450
lea ecx, [ebp - 0x330]
mov dword [ebp - 0x60], vtable.SOUI::SAboutDlg.0
mov dword [ebp - method.SOUI::SAreaNodeModeDlg.1.virtual_0], vtable.SOUI::SMaskDialog.4.0
mov dword [ebp - method.SOUI::SMaskDialog.virtual_0], vtable.SOUI::SMaskDialog.0
mov dword [ebp - method.SOUI::SAreaNodeModeDlg.2.virtual_0], vtable.SOUI::SMaskDialog.1.0
mov dword [ebp - method.SOUI::SDropDownWnd2.1.virtual_0], vtable.SOUI::SMaskDialog.3.0
mov dword [ebp - method.SOUI::SDropDownWnd2.virtual_0], vtable.SOUI::SMaskDialog.2.0
call dword [sym.imp.soui4.dll_public_virtual:_void___thiscall_SOUI::SHostDialog::destructor_void_]
jmp case.0x4ba6cb.602
call fcn.004bbaf0
test al, al
je case.0x4ba6cb.602
lea ecx, [ebp - 0x640]
call fcn.00482980
mov dword [ebp - 4], 0
lea eax, [ebp - 0x640]
push dword [edi + 0x1c]
push eax
call fcn.00490450
cmp eax, 1
jne 0x4ba4bc
mov esi, dword [edi + 0x1c]
call fcn.0041f660
call dword [0x5ffeb4]
test al, al
je 0x4ba2c1
call dword [0x5ffeb0]
test eax, eax
jg 0x4ba2c1
push 0x582b20
push 0
push 0x6a9
push str.adaptercenterSKernelExport.cpp
call dword [0x5ffeb8]
add esp, 0x10
push 0x4b8d00
push esi
call dword [0x5ffe40]
mov esi, dword [edi + 0x1c]
add esp, 8
call fcn.0041f660
call dword [0x5ffeb4]
test al, al
je 0x4ba306
call dword [0x5ffeb0]
test eax, eax
jg 0x4ba306
push 0x582b34
push 0
push 0x6b4
push str.adaptercenterSKernelExport.cpp
call dword [0x5ffeb8]
add esp, 0x10
push 0x4b8d90
push esi
call dword [0x5ffc08]
mov esi, dword [edi + 0x1c]
call fcn.0041f660
push 0x4d55b0
push 0
push esi
call dword [0x5ffd84]
add esp, 0x14
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov byte [ebp - 4], 1
call fcn.0041f660
lea eax, [ebp - 0x20]
push eax
call fcn.00428110
test al, al
jne 0x4ba4cc
mov edi, dword [sym.imp.utilities4.dll_public:_void___thiscall_SOUI::SStringW::constructor_wchar_t_const__]
lea ecx, [ebp - 0x970]
push str._string_common_box_exchange_code_success_cancel_btn
call edi
push str._string_common_box_exchange_code_success_ok_btn
lea ecx, [ebp - 0x968]
mov byte [ebp - 4], 2
call edi
sub esp, 8
mov byte [ebp - 4], 3
mov ecx, esp
mov dword [ebp - 0x958], esp
push 0x58242c
call edi
sub esp, 8
mov byte [ebp - 4], 4
mov eax, esp
mov dword [ebp - 0x974], esp
lea ecx, [ebp - 0x970]
push ecx
push eax
call dword [sym.imp.soui4.dll_public:_static_class_SOUI::SUiDef____cdecl_SOUI::SSingleton2_class_SOUI::SUiDef_::getSingletonPtr_void_]
mov esi, dword [sym.imp.soui4.dll_public:_class_SOUI::SStringW___thiscall_SOUI::SUiDef::GetString_class_SOUI::SStringW_const__]
mov ecx, eax
call esi
sub esp, 8
mov byte [ebp - 4], 5
mov eax, esp
mov dword [ebp - 0x95c], esp
lea ecx, [ebp - 0x968]
push ecx
push eax
call dword [sym.imp.soui4.dll_public:_static_class_SOUI::SUiDef____cdecl_SOUI::SSingleton2_class_SOUI::SUiDef_::getSingletonPtr_void_]
mov ecx, eax
call esi
push 1
push 2
lea eax, [ebp - 0x348]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x44]
call fcn.004197a0
mov byte [ebp - 4], 7
lea eax, [ebp - 0x44]
cmp dword [ebp - 0x30], 7
cmova eax, dword [ebp - 0x44]
sub esp, 8
mov ecx, esp
push eax
call edi
lea ecx, [ebp - 0x950]
mov byte [ebp - 4], 8
call fcn.00490b10
lea ecx, [ebp - 0x44]
call fcn.004179b0
mov esi, dword [sym.imp.utilities4.dll_public:_void___thiscall_SOUI::SStringW::destructor_void_]
lea ecx, [ebp - 0x968]
call esi
lea ecx, [ebp - 0x970]
call esi
mov esi, dword [ebp - 0x954]
lea eax, [ebp - 0x950]
push dword [esi + 0x1c]
push eax
call fcn.00490450
cmp eax, 2
jne 0x4ba466
push 0
push 0x130
push 0x7f8
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [ebp - 0x950]
call fcn.00490c80
mov esi, dword [ebp - 0x20]
test esi, esi
je 0x4ba4bc
mov ecx, dword [ebp - 0x18]
mov eax, 0x6614bc37
sub ecx, esi
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x504
mov eax, esi
cmp ecx, 0x1000
jb 0x4ba4b2
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ba7c0
push ecx
push esi
call fcn.0052b438
add esp, 8
lea ecx, [ebp - 0x640]
call fcn.00482ad0
jmp case.0x4ba6cb.602
lea ecx, [ebp - 0x330]
call fcn.00498100
mov byte [ebp - 4], 9
lea eax, [ebp - 0x330]
push dword [edi + 0x1c]
push eax
call fcn.00490450
mov ecx, dword [edi + 0x3d4]
cmp eax, 1
jne 0x4ba5fb
test ecx, ecx
je 0x4ba509
lea eax, [ecx + 0x238]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x960], esp
push 0x1e
movups xmmword [ecx], xmm0
push str.charge_tab0_2sourceexchange
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00419c10
sub esp, 0x18
mov byte [ebp - 4], 0xa
mov ecx, esp
xorps xmm0, xmm0
push 0
movups xmmword [ecx], xmm0
push 0x58242c
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00419c10
mov ecx, edi
mov byte [ebp - 4], 9
call fcn.004baf60
lea ecx, [ebp - 0x330]
mov dword [ebp - 0x60], vtable.SOUI::SRedeemCardDlg.3.0
mov dword [ebp - method.SOUI::SAreaNodeModeDlg.1.virtual_0], vtable.SOUI::SMaskDialog.4.0
mov dword [ebp - method.SOUI::SMaskDialog.virtual_0], vtable.SOUI::SMaskDialog.0
mov dword [ebp - method.SOUI::SAreaNodeModeDlg.2.virtual_0], vtable.SOUI::SMaskDialog.1.0
mov dword [ebp - method.SOUI::SDropDownWnd2.1.virtual_0], vtable.SOUI::SMaskDialog.3.0
mov dword [ebp - method.SOUI::SDropDownWnd2.virtual_0], vtable.SOUI::SMaskDialog.2.0
call dword [sym.imp.soui4.dll_public_virtual:_void___thiscall_SOUI::SHostDialog::destructor_void_]
mov esi, dword [ebp - 0x20]
test esi, esi
je 0x4ba4bc
mov ecx, dword [ebp - 0x18]
mov eax, 0x6614bc37
sub ecx, esi
imul ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x504
mov eax, esi
cmp ecx, 0x1000
jb 0x4ba4b2
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ba7c0
jmp 0x4ba4b2
test ecx, ecx
je 0x4ba64a
push 0x18
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0
push str.updateRedeemCardData____
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x30], 0
movups xmmword [ebp - 0x44], xmm0
call fcn.00419c10
mov byte [ebp - 4], 0xb
mov eax, dword [edi + 0x3d4]
mov ecx, dword [eax + 0x230]
test ecx, ecx
je 0x4ba642
push 0
lea eax, [ebp - 0x44]
push eax
call fcn.004e5520
lea ecx, [ebp - 0x44]
call fcn.004179b0
lea ecx, [ebp - 0x330]
mov dword [ebp - 0x60], vtable.SOUI::SRedeemCardDlg.3.0
mov dword [ebp - method.SOUI::SAreaNodeModeDlg.1.virtual_0], vtable.SOUI::SMaskDialog.4.0
mov dword [ebp - method.SOUI::SMaskDialog.virtual_0], vtable.SOUI::SMaskDialog.0
mov dword [ebp - method.SOUI::SAreaNodeModeDlg.2.virtual_0], vtable.SOUI::SMaskDialog.1.0
mov dword [ebp - method.SOUI::SDropDownWnd2.1.virtual_0], vtable.SOUI::SMaskDialog.3.0
mov dword [ebp - method.SOUI::SDropDownWnd2.virtual_0], vtable.SOUI::SMaskDialog.2.0
call dword [sym.imp.soui4.dll_public_virtual:_void___thiscall_SOUI::SHostDialog::destructor_void_]
jmp 0x4ba471
call fcn.004bbca0
jmp case.0x4ba6cb.602
call fcn.004a3ec0
mov esi, eax
push 5
push esi
mov ecx, dword [esi]
call dword [ecx + 0xd8]
mov ecx, dword [esi]
push 0
push esi
call dword [ecx + 0x4c]
jmp case.0x4ba6cb.602
add eax, 0xfffffda7
cmp eax, 4
ja case.0x4ba6cb.602
jmp dword [eax*4 + 0x4ba7e0]
call fcn.0049a0d0
jmp 0x4ba6a3
call fcn.004ba9c0
jmp case.0x4ba6cb.602
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x60036c]
cmp eax, dword [ecx + 4]
jle 0x4ba73b
push 0x60036c
call fcn.0052b4f8
add esp, 4
cmp dword [0x60036c], 0xffffffff
jne 0x4ba73b
mov dword [ebp - 4], 0xc
call fcn.004def10
push 0x571ab0
call fcn.0052baad
add esp, 4
mov dword [ebp - 4], 0xffffffff
push 0x60036c
call fcn.0052b4a7
add esp, 4
mov edx, 0x6004ac
lea ecx, [ebp - 0x2c]
call fcn.00419370
cmp dword [ebp - 0x18], 7
lea eax, [ebp - 0x2c]
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmova eax, dword [ebp - 0x2c]
push 1
push 0
push 0
push eax
push str.open
push 0
call esi
cmp eax, 0x20
ja 0x4ba78c
cmp dword [ebp - 0x18], 7
lea eax, [ebp - 0x2c]
push 1
cmova eax, dword [ebp - 0x2c]
push 0
push eax
push str.iexplore.exe
push str.open
push 0
call esi
lea ecx, [ebp - 0x2c]
call fcn.004179b0
jmp case.0x4ba6cb.602
call fcn.004bab40
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0052b3fa
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
call fcn.0053775e
nop dword [eax]
mov esp, dword [ecx - 0x5e67ffb5]
dec ebx
add byte [ebx - 0x64ffb459], bl
cmpsd dword [esi], dword es:[edi]
dec ebx
add byte [edx + 0x4b], dl
add byte [esi - 0x592dffb5], dl
dec ebx
add byte [ebx - 0x26ffb459], bl
cmpsb byte [esi], byte es:[edi]
dec ebx
add bl, ah
cmpsb byte [esi], byte es:[edi]
dec ebx
add byte [esi - 0x33ffb459], dl
int3