Function at 0x4b3ba0
Capabilities:
Create process on windows
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x61033b
mov eax, dword fs:[0]
push eax
mov eax, 0x26c8
call fcn.005ca540
mov eax, dword [0x6c6f60]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x25cc], ecx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x35c]
jne 0x4b3c01
mov ecx, dword [ebp - 0x25cc]
call fcn.004bd430
jmp 0x4b4ae0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x358]
jne 0x4b3c5f
push 0x68e900
push 0x67627b
push 0
push 0
push 0
push str.ClickHide
push 0x2d00
call fcn.004dc890
mov ecx, eax
call fcn.004dc960
push 0
push 0xf020
push 0x112
mov ecx, dword [ebp - 0x25cc]
call fcn.004fff30
jmp 0x4b4ae0
lea eax, [ebp - 0x2544]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov edx, dword [edx]
mov ecx, dword [eax + 0x108]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x2620], eax
mov ecx, dword [ebp - 0x2620]
mov dword [ebp - 0x261c], ecx
mov dword [ebp - 4], 0
push str.install_minbtn
mov ecx, dword [ebp - 0x261c]
call fcn.004f046e
mov byte [ebp - 0x25ce], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2544]
call fcn.004f03ac
movzx edx, byte [ebp - 0x25ce]
test edx, edx
je 0x4b3cec
push 0
push 0xf020
push 0x112
mov ecx, dword [ebp - 0x25cc]
call fcn.004fff30
jmp 0x4b4ae0
lea eax, [ebp - 0x24c0]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov edx, dword [edx]
mov ecx, dword [eax + 0x108]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x2618], eax
mov ecx, dword [ebp - 0x2618]
mov dword [ebp - 0x2614], ecx
mov dword [ebp - 4], 1
push str.install_closebtn
mov ecx, dword [ebp - 0x2614]
call fcn.004f046e
mov byte [ebp - 0x25cf], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24c0]
call fcn.004f03ac
movzx edx, byte [ebp - 0x25cf]
test edx, edx
je 0x4b3d68
mov ecx, dword [ebp - 0x25cc]
call fcn.004bd430
jmp 0x4b4ae0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x360]
jne 0x4b3da8
push 1
mov eax, dword [ebp - 0x25cc]
mov ecx, dword [eax + 0x368]
mov edx, dword [ebp - 0x25cc]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x368]
mov edx, dword [eax + 0x1bc]
call edx
jmp 0x4b4ae0
lea eax, [ebp - 0x25c8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov edx, dword [edx]
mov ecx, dword [eax + 0x108]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x2654], eax
mov ecx, dword [ebp - 0x2654]
mov dword [ebp - 0x2650], ecx
mov dword [ebp - 4], 2
mov edx, dword [str.step_last]
push edx
mov ecx, dword [ebp - 0x2650]
call fcn.004f046e
mov byte [ebp - 0x25d0], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x25c8]
call fcn.004f03ac
movzx eax, byte [ebp - 0x25d0]
test eax, eax
je 0x4b3e4a
mov ecx, dword [ebp - 0x25cc]
call fcn.004bc290
push 0
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [ecx + 0x368]
mov eax, dword [ebp - 0x25cc]
mov edx, dword [edx]
mov ecx, dword [eax + 0x368]
mov eax, dword [edx + 0x1bc]
call eax
jmp 0x4b4ae0
lea ecx, [ebp - 0x243c]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x108]
mov ecx, dword [ebp + 8]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x108]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x264c], eax
mov ecx, dword [ebp - 0x264c]
mov dword [ebp - 0x2648], ecx
mov dword [ebp - 4], 3
mov edx, dword [str.install_btn]
push edx
mov ecx, dword [ebp - 0x2648]
call fcn.004f046e
mov byte [ebp - 0x25d1], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x243c]
call fcn.004f03ac
movzx eax, byte [ebp - 0x25d1]
test eax, eax
je 0x4b42a4
push 0
push 2
push 0x68e9b0
push 0x1d3
push 0x68e96c
push 0x80
lea ecx, [ebp - 0x26d4]
call fcn.00485d60
mov dword [ebp - 0x2640], eax
mov ecx, dword [ebp - 0x2640]
mov dword [ebp - 0x263c], ecx
mov dword [ebp - 4], 4
push str._Click_install_button
mov edx, dword [0x6c7b98]
push edx
push 1
mov eax, dword [ebp - 0x263c]
push eax
call fcn.00485e40
add esp, 0xc
mov ecx, eax
call fcn.0049bb80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x26d4]
call fcn.00485de0
push 0x68e99c
push 0x6762a3
push 0x6762a2
push 0
push 0
push str.ClickInstall001
push 0x2ced
call fcn.004dc890
mov ecx, eax
call fcn.004dc960
push 0
push 0x6762c2
push str.2.DownStart
push 0x68ea24
call fcn.004dc890
mov ecx, eax
call fcn.004dc930
mov ecx, dword [ebp - 0x25cc]
mov ecx, dword [ecx + 0x470]
call fcn.00503cf1
mov byte [ebp - 0x25d2], al
movzx edx, byte [ebp - 0x25d2]
test edx, edx
je 0x4b3fa2
mov dword [ebp - 0x25e0], str.Enable
jmp 0x4b3fac
mov dword [ebp - 0x25e0], str.Disabled
push 0
mov eax, dword [ebp - 0x25e0]
push eax
push str.ImprovementPlan
push 0x68ea50
call fcn.004dc890
mov ecx, eax
call fcn.004dc930
push 0x6762c3
lea ecx, [ebp - 0x2028]
call fcn.0048bf00
mov dword [ebp - 4], 5
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [ecx + 0x4d0]
mov dword [ebp - 0x25e4], edx
cmp dword [ebp - 0x25e4], 0x13
ja case.default.0x4b4007
mov eax, dword [ebp - 0x25e4]
jmp dword [eax*4 + 0x4b4afc]
push 0x68ea68
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push str.Japanese
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push 0x68ea70
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push str.Spanish
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push str.German
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push str.French
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push str.Russian
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push str.Portuguese
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push str.Arabic
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push str.Italiano
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push str.ChineseTrad
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push str.Korean
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push str.Nederlands
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push str.Indonesian
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push str.Turkish
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push str.Hindi
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push str.Thai
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push str.Malay
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push str.Swedish
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push str.Czech
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
jmp 0x4b41ad
push 0x68eb18
lea ecx, [ebp - 0x2028]
call fcn.004a8ec0
push 0
lea ecx, [ebp - 0x2028]
call fcn.0048b7e0
push eax
push str.SetLanguage
push 0x68eb28
call fcn.004dc890
mov ecx, eax
call fcn.004dc930
lea ecx, [ebp - 0x23b8]
push ecx
mov edx, dword [ebp - 0x25cc]
mov eax, dword [edx + 0x36c]
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x36c]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x2638], eax
mov ecx, dword [ebp - 0x2638]
mov dword [ebp - 0x2634], ecx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x2634]
call fcn.004f08e4
push eax
lea ecx, [ebp - 0x2070]
call fcn.0048b540
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x23b8]
call fcn.004f03ac
mov edx, dword [ebp - 0x25cc]
add edx, 0x528
push edx
lea eax, [ebp - 0x2070]
push eax
call fcn.004ca450
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x4b4273
push 0
push 0x67630a
push str.SetPath
push 0x68eb44
call fcn.004dc890
mov ecx, eax
call fcn.004dc930
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2070]
call fcn.0047caf0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2028]
call fcn.0048bcd0
mov ecx, dword [ebp - 0x25cc]
call fcn.004bcec0
jmp 0x4b4ae0
lea edx, [ebp - 0x2334]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
mov edx, dword [ebp + 8]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x108]
mov edx, dword [eax + 4]
call edx
mov dword [ebp - 0x2630], eax
mov eax, dword [ebp - 0x2630]
mov dword [ebp - 0x262c], eax
mov dword [ebp - 4], 9
mov ecx, dword [str.finish_btn]
push ecx
mov ecx, dword [ebp - 0x262c]
call fcn.004f046e
mov byte [ebp - 0x25d3], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2334]
call fcn.004f03ac
movzx edx, byte [ebp - 0x25d3]
test edx, edx
je 0x4b433c
push 1
push 0x67630b
push 0x68eb58
push 0x68eb4c
call fcn.004dc890
mov ecx, eax
call fcn.004dc930
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x4b4ae0
lea eax, [ebp - 0x22b0]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov edx, dword [edx]
mov ecx, dword [eax + 0x108]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x2628], eax
mov ecx, dword [ebp - 0x2628]
mov dword [ebp - 0x2624], ecx
mov dword [ebp - 4], 0xa
mov edx, dword [str.browser_btn]
push edx
mov ecx, dword [ebp - 0x2624]
call fcn.004f046e
mov byte [ebp - 0x25d4], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22b0]
call fcn.004f03ac
movzx eax, byte [ebp - 0x25d4]
test eax, eax
je 0x4b43e0
push 0x68eb60
push 0x67634a
push 0
push 0
push 0
push str.ClickBrowse
push 0x2cfe
call fcn.004dc890
mov ecx, eax
call fcn.004dc960
mov ecx, dword [ebp - 0x25cc]
call fcn.004b4e00
jmp 0x4b4ae0
lea ecx, [ebp - 0x222c]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x108]
mov ecx, dword [ebp + 8]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x108]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x2644], eax
mov ecx, dword [ebp - 0x2644]
mov dword [ebp - 0x25ec], ecx
mov dword [ebp - 4], 0xb
mov edx, dword [str.cancel_btn]
push edx
mov ecx, dword [ebp - 0x25ec]
call fcn.004f046e
mov byte [ebp - 0x25da], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x222c]
call fcn.004f03ac
movzx eax, byte [ebp - 0x25da]
test eax, eax
je 0x4b445e
mov ecx, dword [ebp - 0x25cc]
call fcn.004bd430
jmp 0x4b4ae0
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x25cc]
mov eax, dword [ecx + 0x108]
cmp eax, dword [edx + 0x46c]
jne 0x4b452f
mov ecx, dword [ebp - 0x25cc]
mov ecx, dword [ecx + 0x46c]
call fcn.00503cf1
movzx edx, al
test edx, edx
je 0x4b44e0
push 0x68eb70
push 0x6763a6
push 0x67634b
push 0
push 0
push str.DisagreeTermsService
push 0x2cf6
call fcn.004dc890
mov ecx, eax
call fcn.004dc960
push 0
mov eax, dword [ebp - 0x25cc]
mov ecx, dword [eax + 0x47c]
mov edx, dword [ebp - 0x25cc]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x47c]
mov edx, dword [eax + 0xd8]
call edx
jmp 0x4b452a
push 0x68eb90
push 0x6763a7
push 0
push 0
push 0
push str.AgreeProxy
push 0x2cf6
call fcn.004dc890
mov ecx, eax
call fcn.004dc960
push 1
mov eax, dword [ebp - 0x25cc]
mov ecx, dword [eax + 0x47c]
mov edx, dword [ebp - 0x25cc]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x47c]
mov edx, dword [eax + 0xd8]
call edx
jmp 0x4b4ae0
lea eax, [ebp - 0x21a8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov edx, dword [edx]
mov ecx, dword [eax + 0x108]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x25f0], eax
mov ecx, dword [ebp - 0x25f0]
mov dword [ebp - 0x25f4], ecx
mov dword [ebp - 4], 0xc
mov edx, dword [0x68b5b8]
push edx
mov ecx, dword [ebp - 0x25f4]
call fcn.004f046e
mov byte [ebp - 0x25d5], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x21a8]
call fcn.004f03ac
movzx eax, byte [ebp - 0x25d5]
test eax, eax
je 0x4b496b
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [ecx + 0x494]
mov eax, dword [ebp - 0x25cc]
mov edx, dword [edx]
mov ecx, dword [eax + 0x494]
mov eax, dword [edx + 0xc8]
call eax
movzx ecx, al
test ecx, ecx
je 0x4b472b
mov edx, dword [ebp - 0x25cc]
mov eax, dword [edx + 0x498]
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x498]
mov eax, dword [edx + 0xc8]
call eax
movzx ecx, al
test ecx, ecx
je 0x4b472b
mov edx, dword [ebp - 0x25cc]
mov eax, dword [edx + 0x4a0]
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x4a0]
mov eax, dword [edx + 0xc8]
call eax
movzx ecx, al
test ecx, ecx
je 0x4b472b
push 0
push 2
push str.void___thiscall_InstallUIMainWnd::OnClick_struct_DuiLib::tagTNotifyUI__
push 0x249
push 0x68ebc4
push 0x80
lea ecx, [ebp - 0x269c]
call fcn.00485d60
mov dword [ebp - 0x25f8], eax
mov edx, dword [ebp - 0x25f8]
mov dword [ebp - 0x25fc], edx
mov dword [ebp - 4], 0xd
push str._User_click_try_again_button_to_retry
mov eax, dword [0x6c7b98]
push eax
push 1
mov ecx, dword [ebp - 0x25fc]
push ecx
call fcn.00485e40
add esp, 0xc
mov ecx, eax
call fcn.0049bb80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x269c]
call fcn.00485de0
mov edx, dword [ebp - 0x25cc]
movzx eax, byte [edx + 0x58c]
test eax, eax
je 0x4b46b6
mov dword [ebp - 0x25e8], 0x68ec54
jmp 0x4b46c0
mov dword [ebp - 0x25e8], 0x68ec84
push 0
mov ecx, dword [ebp - 0x25e8]
push ecx
push str.8_1.ClickTryAgain
push 0x68ec90
call fcn.004dc890
mov ecx, eax
call fcn.004dc930
mov edx, dword [ebp - 0x25cc]
mov byte [edx + 0x58c], 1
push 0
mov eax, dword [ebp - 0x25cc]
mov ecx, dword [eax + 0x370]
call fcn.00505a91
push 0
push 0
mov ecx, dword [ebp - 0x25cc]
push ecx
push 0x4ba200
push 0
push 0
call fcn.005e73dd
add esp, 0x18
mov ecx, dword [ebp - 0x25cc]
call fcn.004bcec0
jmp 0x4b4966
push 0x68ec8c
lea ecx, [ebp - 0x2058]
call fcn.0048b540
mov dword [ebp - 4], 0xe
lea edx, [ebp - 0x2058]
push edx
mov ecx, dword [ebp - 0x25cc]
call fcn.004b4ff0
mov eax, dword [ebp - 0x25cc]
mov ecx, dword [eax + 0x560]
add ecx, 0xe4
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x2658], esp
push ecx
mov ecx, edx
call fcn.0047cc80
mov dword [ebp - 0x265c], eax
call fcn.004da380
add esp, 0x18
mov byte [ebp - 0x25d6], al
movzx eax, byte [ebp - 0x25d6]
test eax, eax
je 0x4b4869
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2660], esp
lea edx, [ebp - 0x2058]
push edx
call fcn.0047cc80
mov dword [ebp - 0x2664], eax
call fcn.004da170
add esp, 0x18
mov byte [ebp - 0x25d7], al
mov al, byte [ebp - 0x25d7]
mov byte [ebp - 0x25d8], al
movzx ecx, byte [ebp - 0x25d8]
test ecx, ecx
je 0x4b47ee
mov edx, dword [ebp - 0x25cc]
mov dword [edx + 0x584], 0
push 0x68ec9c
push 0x6763da
push 0x6763db
push 0
push 0
push str.Start001
push 0x2d01
call fcn.004dc890
mov ecx, eax
call fcn.004dc960
mov eax, dword [ebp - 0x25cc]
cmp dword [eax + 0x584], 0
jne 0x4b482f
mov byte [ebp - 0x25cd], 1
jmp 0x4b4836
mov byte [ebp - 0x25cd], 0
movzx ecx, byte [ebp - 0x25cd]
push ecx
push 0x6763fe
push str.7.ProgramLaunch
push 0x68ecd0
call fcn.004dc890
mov ecx, eax
call fcn.004dc930
mov ecx, dword [ebp - 0x25cc]
call fcn.004bbd60
jmp 0x4b4954
lea ecx, [ebp - 0x2040]
call fcn.0047cc30
mov byte [ebp - 4], 0xf
push 0x68eccc
mov edx, dword [ebp - 0x25cc]
add edx, 0x540
push edx
lea eax, [ebp - 0x20a0]
push eax
call fcn.004ca250
add esp, 0xc
mov dword [ebp - 0x2600], eax
mov ecx, dword [ebp - 0x2600]
push ecx
lea ecx, [ebp - 0x2040]
call fcn.0047cb40
lea ecx, [ebp - 0x20a0]
call fcn.0047caf0
push 1
lea edx, [ebp - 0x2088]
push edx
mov ecx, dword [ebp - 0x25cc]
call fcn.004c2160
mov dword [ebp - 0x2604], eax
mov eax, dword [ebp - 0x2604]
mov dword [ebp - 0x2608], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x2608]
push ecx
lea ecx, [ebp - 0x2040]
call fcn.004c4f10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2088]
call fcn.0047caf0
lea ecx, [ebp - 0x2040]
call fcn.0047ca20
push eax
push str._select___s
lea edx, [ebp - 0x2010]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 1
push 0
lea eax, [ebp - 0x2010]
push eax
push 0x68ecdc
push 0x68ed30
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x2040]
call fcn.0047caf0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2058]
call fcn.0047caf0
jmp 0x4b4ae0
lea ecx, [ebp - 0x2124]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x108]
mov ecx, dword [ebp + 8]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x108]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x260c], eax
mov ecx, dword [ebp - 0x260c]
mov dword [ebp - 0x2610], ecx
mov dword [ebp - 4], 0x11
push str.install_setting
mov ecx, dword [ebp - 0x2610]
call fcn.004f046e
mov byte [ebp - 0x25d9], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2124]
call fcn.004f03ac
movzx edx, byte [ebp - 0x25d9]
test edx, edx
je 0x4b4ae0
movzx eax, byte [0x6cf4e7]
test eax, eax
je 0x4b4a76
mov ecx, dword [ebp - 0x25cc]
mov ecx, dword [ecx + 0x474]
call fcn.005044a8
cmp eax, 1
jne 0x4b4a18
push 1
push 1
mov ecx, dword [ebp - 0x25cc]
call fcn.004bbcb0
mov byte [0x6cf4e7], 0
jmp 0x4b4a74
push 0x68ed3c
push 0x6763ff
push 0x67641a
push 0
push 0
push 0x68ed50
push 0x2cf7
call fcn.004dc890
mov ecx, eax
call fcn.004dc960
push 0
push 1
mov ecx, dword [ebp - 0x25cc]
call fcn.004bbcb0
push 1
mov edx, dword [ebp - 0x25cc]
mov eax, dword [edx + 0x474]
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x474]
mov eax, dword [edx + 0x1bc]
call eax
jmp 0x4b4ad9
push 0x68ed60
push 0x67641b
push 0x67643e
push 0
push 0
push str.DownloadSetting
push 0x2cf7
call fcn.004dc890
mov ecx, eax
call fcn.004dc960
push 1
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [ecx + 0x474]
mov eax, dword [ebp - 0x25cc]
mov edx, dword [edx]
mov ecx, dword [eax + 0x474]
mov eax, dword [edx + 0x1bc]
call eax
push 0
push 1
mov ecx, dword [ebp - 0x25cc]
call fcn.004bbcb0
mov byte [0x6cf4e7], 1
mov byte [0x6cf4e4], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005c950e
mov esp, ebp
pop ebp
ret 4