Function at 0x457200
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ab368
mov eax, dword fs:[0]
push eax
sub esp, 0x3d4
mov eax, dword [0x63f070]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x30c], ecx
push 0x5fd360
mov ecx, dword [ebp + 8]
call fcn.004b3701
push eax
call fcn.0057da55
add esp, 8
test eax, eax
jne 0x45798a
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x30c]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x860]
jne 0x4573a5
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x118]
mov dword [ebp - 0x32c], ecx
cmp dword [ebp - 0x32c], 0
jne 0x45730f
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x37c], esp
mov eax, dword [ebp - 0x30c]
mov ecx, dword [eax + 0x8ac]
push ecx
push edx
call fcn.004886c0
add esp, 8
mov dword [ebp - 0x380], eax
lea edx, [ebp - 0x290]
push edx
mov eax, dword [ebp - 0x30c]
mov ecx, dword [eax + 0x968]
call fcn.00426b30
mov dword [ebp - 0x384], eax
lea ecx, [ebp - 0x290]
call fcn.00411720
test eax, eax
je 0x4572ff
push 1
push 0
push 0
lea ecx, [ebp - 0x290]
call fcn.00413640
push eax
push 0x5fd390
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x388], eax
lea ecx, [ebp - 0x290]
call fcn.00413710
jmp 0x4573a0
cmp dword [ebp - 0x32c], 1
jne 0x4573a0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x38c], esp
mov edx, dword [ebp - 0x30c]
mov eax, dword [edx + 0x8ac]
push eax
push ecx
call fcn.004886c0
add esp, 8
mov dword [ebp - 0x390], eax
lea ecx, [ebp - 0x278]
push ecx
mov edx, dword [ebp - 0x30c]
mov ecx, dword [edx + 0x968]
call fcn.00426a00
mov dword [ebp - 0x394], eax
lea ecx, [ebp - 0x278]
call fcn.00411720
test eax, eax
je 0x457395
push 1
push 0
push 0
lea ecx, [ebp - 0x278]
call fcn.00413640
push eax
push 0x5fd384
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x398], eax
lea ecx, [ebp - 0x278]
call fcn.00413710
jmp 0x45798a
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x30c]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x884]
jne 0x45798a
mov eax, dword [ebp - 0x30c]
movzx ecx, byte [eax + 0x990]
test ecx, ecx
je 0x4573dd
mov dword [ebp - 0x330], 0x5fd3a4
jmp 0x4573e7
mov dword [ebp - 0x330], 0x5fd39c
push 0
mov edx, dword [ebp - 0x330]
push edx
push str.8_2.ClickInstallLink
push 0x5fd3ac
call fcn.0048be70
mov ecx, eax
call fcn.0048bf10
lea eax, [ebp - 0x230]
push eax
mov ecx, dword [ebp - 0x30c]
sub ecx, 0x20
call fcn.0046cf60
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x230]
call fcn.00411720
test eax, eax
jne 0x45758b
lea ecx, [ebp - 0x314]
push ecx
mov edx, dword [ebp - 0x30c]
mov ecx, dword [edx + 0x968]
add ecx, 0x17c
call fcn.00429370
jmp 0x457469
push 0
lea eax, [ebp - 0x39c]
push eax
lea ecx, [ebp - 0x314]
call fcn.0046dd40
lea ecx, [ebp - 0x3a0]
push ecx
mov edx, dword [ebp - 0x30c]
mov ecx, dword [edx + 0x968]
add ecx, 0x17c
call fcn.00429310
push eax
lea ecx, [ebp - 0x314]
call fcn.004290f0
movzx eax, al
test eax, eax
je 0x45758b
lea ecx, [ebp - 0x314]
call fcn.0046dd70
mov ecx, eax
call fcn.00413640
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3a4], esp
push eax
call fcn.00418610
mov dword [ebp - 0x378], eax
call fcn.00482be0
add esp, 0x18
mov byte [ebp - 0x30e], al
mov cl, byte [ebp - 0x30e]
mov byte [ebp - 0x30d], cl
mov edx, dword [ebp - 0x30c]
mov eax, dword [edx + 0x968]
cmp dword [eax + 0x188], 1
je 0x45750b
mov ecx, dword [ebp - 0x30c]
mov edx, dword [ecx + 0x968]
cmp dword [edx + 0x188], 3
jne 0x45753f
movzx eax, byte [ebp - 0x30d]
test eax, eax
je 0x45751d
jmp 0x457455
lea ecx, [ebp - 0x314]
call fcn.0046dd70
mov ecx, eax
call fcn.00413640
push eax
lea ecx, [ebp - 0x230]
call fcn.00413680
jmp 0x45758b
mov ecx, dword [ebp - 0x30c]
mov edx, dword [ecx + 0x968]
cmp dword [edx + 0x188], 2
jne 0x457586
movzx eax, byte [ebp - 0x30d]
test eax, eax
je 0x457581
lea ecx, [ebp - 0x314]
call fcn.0046dd70
mov ecx, eax
call fcn.00413640
push eax
lea ecx, [ebp - 0x230]
call fcn.00413680
jmp 0x45758b
jmp 0x457455
jmp 0x457455
lea ecx, [ebp - 0x230]
call fcn.00411720
test eax, eax
je 0x457978
mov ecx, dword [ebp - 0x30c]
movzx edx, byte [ecx + 0x998]
test edx, edx
je 0x4577da
xor eax, eax
mov word [ebp - 0x218], ax
push 0x206
push 0
lea ecx, [ebp - 0x216]
push ecx
call fcn.0057a870
add esp, 0xc
push 0x104
lea edx, [ebp - 0x218]
push edx
push 0
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x260]
call fcn.00418610
mov byte [ebp - 4], 1
mov ecx, dword [0x61d9ec]
push ecx
mov edx, dword [0x61d9ec]
push edx
push 0x5fd3d4
lea ecx, [ebp - 0x260]
call fcn.0046e070
add eax, 1
push eax
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x260]
call fcn.004135c0
mov byte [ebp - 4], 2
mov ecx, dword [0x61d9ec]
push ecx
push 0x5fd3d0
lea ecx, [ebp - 0x248]
call fcn.0046e070
mov dword [ebp - 0x328], eax
mov edx, dword [0x61d9ec]
push edx
push 0x5fd3ec
lea ecx, [ebp - 0x248]
call fcn.0046e070
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x33c]
sub eax, dword [ebp - 0x328]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x328]
add ecx, 1
push ecx
lea edx, [ebp - 0x2a8]
push edx
lea ecx, [ebp - 0x248]
call fcn.004135c0
mov byte [ebp - 4], 3
cmp dword [ebp - 0x328], 0xffffffff
je 0x4577ad
push str._rnclid
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x2c0]
push ecx
call fcn.00473ca0
add esp, 0xc
mov dword [ebp - 0x340], eax
mov edx, dword [ebp - 0x340]
mov dword [ebp - 0x344], edx
mov byte [ebp - 4], 4
lea eax, [ebp - 0x2a8]
push eax
mov ecx, dword [ebp - 0x344]
push ecx
lea edx, [ebp - 0x2d8]
push edx
call fcn.00473e10
add esp, 0xc
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x370], eax
mov byte [ebp - 4], 5
push 0x5fd3d8
mov ecx, dword [ebp - 0x370]
push ecx
lea edx, [ebp - 0x2f0]
push edx
call fcn.00473c60
add esp, 0xc
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x368], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x248]
push ecx
mov edx, dword [ebp - 0x368]
push edx
lea eax, [ebp - 0x308]
push eax
call fcn.00473e10
add esp, 0xc
mov dword [ebp - 0x360], eax
mov ecx, dword [ebp - 0x360]
push ecx
lea ecx, [ebp - 0x230]
call fcn.00413760
lea ecx, [ebp - 0x308]
call fcn.00413710
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2f0]
call fcn.00413710
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2d8]
call fcn.00413710
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c0]
call fcn.00413710
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2a8]
call fcn.00413710
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x248]
call fcn.00413710
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x260]
call fcn.00413710
call fcn.0041ce50
mov dword [ebp - 0x354], eax
lea ecx, [ebp - 0x230]
call fcn.00413640
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0
jne 0x45780e
mov dword [ebp - 0x338], 0
jmp 0x4578cd
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x318], edx
mov eax, dword [ebp - 0x318]
add eax, 2
mov dword [ebp - 0x35c], eax
mov ecx, dword [ebp - 0x318]
mov dx, word [ecx]
mov word [ebp - 0x31a], dx
add dword [ebp - 0x318], 2
cmp word [ebp - 0x31a], 0
jne 0x457829
mov eax, dword [ebp - 0x318]
sub eax, dword [ebp - 0x35c]
sar eax, 1
mov dword [ebp - 0x358], eax
mov ecx, dword [ebp - 0x358]
add ecx, 1
mov dword [ebp - 0x320], ecx
cmp dword [ebp - 0x320], 0x3fffffff
jle 0x457885
mov dword [ebp - 0x334], 0
jmp 0x4578c1
mov eax, dword [ebp - 0x320]
shl eax, 1
call fcn.004a7960
mov dword [ebp - 0x350], esp
mov edx, dword [ebp - 0x354]
push edx
mov eax, dword [ebp - 0x320]
shl eax, 1
push eax
mov ecx, dword [ebp - 0x324]
push ecx
mov edx, dword [ebp - 0x350]
push edx
call fcn.0041ceb0
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x338], eax
mov ecx, dword [ebp - 0x338]
mov dword [ebp - 0x364], ecx
push 0
push 2
push str.void___thiscall_InstallUIMainWnd::Notify_struct_DuiLib::tagTNotifyUI__
push 0x135
push 0x5fd460
push 0x80
lea ecx, [ebp - 0x3e0]
call fcn.00422610
mov dword [ebp - 0x34c], eax
mov edx, dword [ebp - 0x34c]
mov dword [ebp - 0x348], edx
mov byte [ebp - 4], 7
lea eax, [ebp - 0x364]
push eax
push str._Open_Advice_Url:
mov ecx, dword [0x640128]
push ecx
push 1
mov edx, dword [ebp - 0x348]
push edx
call fcn.004226f0
add esp, 0xc
mov ecx, eax
call fcn.0043ac80
mov ecx, eax
call fcn.0043ace0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3e0]
call fcn.00422690
push 1
push 0
push 0
lea ecx, [ebp - 0x230]
call fcn.00413640
push eax
push 0x5fd4bc
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x230]
call fcn.00413710
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x30c]
call fcn.004aff93
lea esp, [ebp - 0x3e4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a6edb
mov esp, ebp
pop ebp
ret 4