Function at 0x41c9f0
Capabilities:
Create process on windows

Disassembly:
push 0xffffffffffffffff
push 0x4e0a89
mov eax, dword fs:[0]
push eax
sub esp, 0x6cc
mov eax, dword [0x5134a8]
xor eax, esp
mov dword [esp + 0x6c8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5134a8]
xor eax, esp
push eax
lea eax, [esp + 0x6e0]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x18], ebx
mov edi, edx
mov dword [esp + 0x6e8], 1
mov esi, dword [sym.imp.LibDui.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const]
lea ebp, [edi + 0x30]
push 0x4f7d88
mov ecx, ebp
call esi
test eax, eax
je 0x41ca62
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x2c]
push 0x4f971c
call eax
push str.autodo_tips
mov ecx, ebp
call esi
test eax, eax
je 0x41ca7d
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x2c]
push 0x4f971c
call eax
push str.loginTab
mov ecx, ebp
call esi
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x200]
push 0
call eax
push str.update.exe
lea ecx, [esp + 0x108]
call fcn.00401f40
sub esp, 0x20
lea edx, [esp + 0x710]
mov ecx, esp
mov dword [esp + 0x5c], esp
push edx
mov byte [esp + 0x70c], 2
call fcn.00406040
push edi
lea eax, [esp + 0x128]
push eax
call fcn.0041d120
push 0x4f7d88
mov ecx, ebp
call esi
test eax, eax
je 0x41caec
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x2c]
push 0x4f9740
call eax
push str.autodo_tips
mov ecx, ebp
call esi
test eax, eax
je 0x41cb07
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x2c]
push 0x4f9740
call eax
push str.loginTab
mov ecx, ebp
call esi
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x200]
push 1
call eax
lea ecx, [esp + 0xe4]
push ecx
mov ecx, ebx
call fcn.0041c350
push 0
lea edx, [esp + 0x714]
push edx
or eax, 0xffffffff
lea esi, [esp + 0xec]
mov byte [esp + 0x6f0], 3
call fcn.0040da80
mov esi, dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::constructor_void_]
lea ecx, [esp + 0x1cc]
call esi
mov byte [esp + 0x6e8], 4
cmp dword [esp + 0x100], 0x10
mov ebx, dword [esp + 0xec]
jae 0x41cb7d
lea ebx, [esp + 0xec]
lea eax, [esp + 0x1c]
push eax
call fcn.004557b0
add esp, 4
mov edi, 8
mov byte [esp + 0x6e8], 5
cmp dword [eax + 0x1c], edi
jb 0x41cba1
mov eax, dword [eax + 8]
jmp 0x41cba4
add eax, 8
push eax
lea ecx, [esp + 0x1d0]
push 0x4f75dc
push ecx
call dword [sym.imp.LibDui.dll_public:_int___cdecl_DuiLib::CDuiString::Format_wchar_t_const__]
add esp, 0xc
mov byte [esp + 0x6e8], 4
cmp dword [esp + 0x38], edi
jb 0x41cbd6
mov edx, dword [esp + 0x24]
push edx
call fcn.00460a90
add esp, 4
xor eax, eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x38], 7
mov dword [esp + 0x34], 0
mov word [esp + 0x24], ax
call fcn.00401050
push 0x400
lea ecx, [esp + 0x2e0]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0xffffffffffffffff
lea edx, [esp + 0x2e0]
push edx
lea ecx, [esp + 0x14c]
call dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::constructor_wchar_t_const___int_]
mov bl, 6
push 0x5c
lea ecx, [esp + 0x148]
mov byte [esp + 0x6ec], bl
call dword [sym.imp.LibDui.dll_public:_int___thiscall_DuiLib::CDuiString::ReverseFind_wchar_t_const]
push 0xffffffffffffffff
inc eax
push eax
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x150]
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CDuiString___thiscall_DuiLib::CDuiString::Mid_int__int_]
push eax
lea ecx, [esp + 0x148]
mov byte [esp + 0x6ec], 7
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CDuiString_const____thiscall_DuiLib::CDuiString::operator_class_DuiLib::CDuiString_const__]
lea ecx, [esp + 0x40]
mov byte [esp + 0x6e8], bl
call dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::destructor_void_]
lea ecx, [esp + 0xc4]
push ecx
mov edi, 0x4f7844
call fcn.004064c0
mov edi, dword [esp + 0x18]
mov byte [esp + 0x6e8], 8
cmp dword [edi + 0x1c34], 0
je 0x41cd19
cmp dword [edi + 0x1c38], 0x10
jb 0x41ccaf
mov ebx, dword [edi + 0x1c24]
jmp 0x41ccb5
lea ebx, [edi + 0x1c24]
lea edx, [esp + 0x1c]
push edx
call fcn.004557b0
add esp, 4
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0xcc]
mov byte [esp + 0x6f0], 9
call fcn.00408640
mov eax, 8
mov byte [esp + 0x6e8], al
cmp dword [esp + 0x38], eax
jb 0x41ccf9
mov eax, dword [esp + 0x24]
push eax
call fcn.00460a90
add esp, 4
xor ecx, ecx
mov word [esp + 0x24], cx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x38], 7
mov dword [esp + 0x34], 0
call fcn.00401050
lea ecx, [esp + 0x254]
call esi
lea esi, [esp + 0x40]
mov byte [esp + 0x6e8], 0xa
call fcn.00409f80
mov dword [esp + 0x18], eax
mov byte [esp + 0x6e8], 0xb
cmp dword [esp + 0x120], 0x10
mov ebx, dword [esp + 0x10c]
jae 0x41cd57
lea ebx, [esp + 0x10c]
lea edx, [esp + 0x1c]
push edx
call fcn.004557b0
add esp, 4
mov byte [esp + 0x6e8], 0xc
mov ecx, dword [esp + 0xcc]
mov edx, 8
cmp dword [esp + 0xe0], edx
jae 0x41cd88
lea ecx, [esp + 0xcc]
cmp dword [eax + 0x1c], edx
jb 0x41cd92
mov ebx, dword [eax + 8]
jmp 0x41cd95
lea ebx, [eax + 8]
mov esi, dword [sym.imp.LibDui.dll_public:_wchar_t_const____thiscall_DuiLib::CDuiString::GetData_void_const]
push ecx
lea ecx, [esp + 0x1d0]
call esi
push eax
lea ecx, [esp + 0x14c]
call esi
fld qword [edi + 0x1c90]
mov ecx, dword [esp + 0x20]
push eax
sub esp, 8
fstp qword [esp]
call esi
push eax
push ebx
lea eax, [esp + 0x270]
push str._s__s__f__s__s__s
push eax
call dword [sym.imp.LibDui.dll_public:_int___cdecl_DuiLib::CDuiString::Format_wchar_t_const__]
add esp, 0x24
mov byte [esp + 0x6e8], 0xb
cmp dword [esp + 0x38], 8
jb 0x41cdf6
mov ecx, dword [esp + 0x24]
push ecx
call fcn.00460a90
add esp, 4
xor edx, edx
xor ebx, ebx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x38], 7
mov dword [esp + 0x34], ebx
mov word [esp + 0x24], dx
call fcn.00401050
mov byte [esp + 0x6e8], 0xa
mov esi, dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::destructor_void_]
lea ecx, [esp + 0x40]
call esi
lea ecx, [esp + 0x254]
call dword [sym.imp.LibDui.dll_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const]
lea ecx, [esp + 0x124]
push ecx
mov edi, eax
call fcn.004064c0
mov byte [esp + 0x6e8], 0xd
cmp dword [esp + 0x140], 8
mov eax, dword [esp + 0x12c]
jae 0x41ce64
lea eax, [esp + 0x12c]
push eax
lea ecx, [esp + 0x20]
call fcn.00455610
mov edi, 0x10
add esp, 4
cmp dword [eax + 0x1c], edi
jb 0x41ce80
mov eax, dword [eax + 8]
jmp 0x41ce83
add eax, 8
push 5
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp eax, 0x20
setb byte [esp + 0x17]
cmp dword [esp + 0x38], edi
jb 0x41cea7
mov edx, dword [esp + 0x24]
push edx
call fcn.00460a90
add esp, 4
lea ecx, [esp + 0x1c]
mov dword [esp + 0x38], 0xf
mov dword [esp + 0x34], ebx
mov byte [esp + 0x24], bl
call fcn.00401050
cmp byte [esp + 0x17], bl
je 0x41cf1e
mov edi, dword [sym.imp.LibDui.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const]
push 0x4f7d88
mov ecx, ebp
call edi
cmp eax, ebx
je 0x41cee7
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x2c]
push 0x4f978c
call eax
push str.autodo_tips
mov ecx, ebp
call edi
cmp eax, ebx
je 0x41cf02
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x2c]
push 0x4f978c
call eax
push str.loginTab
mov ecx, ebp
call edi
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x200]
push 1
call eax
mov edi, 0x10
mov byte [esp + 0x6e8], 0xa
cmp dword [esp + 0x140], 8
jb 0x41cf40
mov ecx, dword [esp + 0x12c]
push ecx
call fcn.00460a90
add esp, 4
xor edx, edx
mov ebp, 7
lea ecx, [esp + 0x124]
mov dword [esp + 0x140], ebp
mov dword [esp + 0x13c], ebx
mov word [esp + 0x12c], dx
call fcn.00401050
lea ecx, [esp + 0x254]
mov byte [esp + 0x6e8], 8
call esi
mov byte [esp + 0x6e8], 6
cmp dword [esp + 0xe0], 8
jb 0x41cf9c
mov eax, dword [esp + 0xcc]
push eax
call fcn.00460a90
add esp, 4
xor ecx, ecx
mov word [esp + 0xcc], cx
lea ecx, [esp + 0xc4]
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xdc], ebx
call fcn.00401050
lea ecx, [esp + 0x144]
mov byte [esp + 0x6e8], 4
call esi
lea ecx, [esp + 0x1cc]
mov byte [esp + 0x6e8], 3
call esi
mov byte [esp + 0x6e8], 2
cmp dword [esp + 0x100], edi
jb 0x41d003
mov edx, dword [esp + 0xec]
push edx
call fcn.00460a90
add esp, 4
mov esi, 0xf
lea ecx, [esp + 0xe4]
mov dword [esp + 0x100], esi
mov dword [esp + 0xfc], ebx
mov byte [esp + 0xec], bl
call fcn.00401050
mov byte [esp + 0x6e8], 1
cmp dword [esp + 0x120], edi
jb 0x41d04a
mov eax, dword [esp + 0x10c]
push eax
call fcn.00460a90
add esp, 4
lea ecx, [esp + 0x104]
mov dword [esp + 0x120], esi
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
call fcn.00401050
mov byte [esp + 0x6e8], bl
cmp dword [esp + 0x70c], edi
jb 0x41d08b
mov ecx, dword [esp + 0x6f8]
push ecx
call fcn.00460a90
add esp, 4
lea ecx, [esp + 0x6f0]
mov dword [esp + 0x70c], esi
mov dword [esp + 0x708], ebx
mov byte [esp + 0x6f8], bl
call fcn.00401050
mov dword [esp + 0x6e8], 0xffffffff
cmp dword [esp + 0x72c], edi
jb 0x41d0d0
mov edx, dword [esp + 0x718]
push edx
call fcn.00460a90
add esp, 4
lea ecx, [esp + 0x710]
mov dword [esp + 0x72c], esi
mov dword [esp + 0x728], ebx
mov byte [esp + 0x718], bl
call fcn.00401050
mov ecx, dword [esp + 0x6e0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x6c8]
xor ecx, esp
call fcn.00460790
add esp, 0x6d8
ret 0x40