Function at 0x411b10
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x453594
mov eax, dword fs:[0]
push eax
sub esp, 0x1b0
mov eax, dword [0x467340]
xor eax, esp
mov dword [esp + 0x1a8], eax
push ebx
push esi
push edi
mov eax, dword [0x467340]
xor eax, esp
push eax
lea eax, [esp + 0x1c0]
mov dword fs:[0], eax
push 0x22
xor ebx, ebx
mov esi, 0xf
push str..SetupControllerVisualization.cpp
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00406050
push ebx
lea eax, [esp + 0xdc]
push eax
mov ecx, 0x181
lea edx, [esp + 0x1c]
mov dword [esp + 0x1d0], ebx
call fcn.0041f600
add eax, 0x28
push str.SetupControllerVisualization::OnClickStartApp
push eax
mov byte [esp + 0x1d0], 1
call fcn.00407a60
add esp, 8
lea ecx, [esp + 0xd8]
mov byte [esp + 0x1c8], bl
call fcn.0041f890
mov dword [esp + 0x1c8], 0xffffffff
cmp dword [esp + 0x2c], 0x10
jb 0x411bdc
mov ecx, dword [esp + 0x18]
push ecx
call fcn.004308f5
add esp, 4
mov edx, dword [0x469ba8]
mov eax, dword [edx + 0xc]
mov ecx, 0x469ba8
call eax
add eax, 0x10
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x10]
push ecx
mov dword [esp + 0x1cc], 2
call fcn.00412360
xor edx, edx
mov edi, eax
mov dword [esp + 0x1b4], 7
mov dword [esp + 0x1b0], ebx
mov word [esp + 0x1a0], dx
lea ecx, [esp + 0x19c]
mov byte [esp + 0x1c8], 3
call fcn.00418860
cmp dword [esp + 0x1b0], ebx
je 0x411d78
push 0x14
push str.LBBrowserliebao.exe
lea eax, [esp + 0x1a4]
call fcn.00406ee0
xor eax, eax
mov dword [esp + 0x198], 7
mov dword [esp + 0x194], ebx
mov word [esp + 0x184], ax
mov byte [esp + 0x1c8], 4
call fcn.00418a80
test al, al
je 0x411c9a
push 5
mov eax, str.runas
lea esi, [esp + 0x184]
call fcn.004070b0
mov ecx, dword [esp + 0x1a0]
cmp edi, ebx
je 0x411ce4
mov edi, 8
cmp dword [esp + 0x1b4], edi
jae 0x411cba
lea ecx, [esp + 0x1a0]
mov eax, dword [esp + 0x184]
cmp dword [esp + 0x198], edi
jae 0x411cd1
lea eax, [esp + 0x184]
mov edx, dword [esp + 0x10]
push 5
push ebx
push edx
push ecx
push eax
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x411d22
mov eax, 8
cmp dword [esp + 0x1b4], eax
jae 0x411cf9
lea ecx, [esp + 0x1a0]
cmp dword [esp + 0x198], eax
mov eax, dword [esp + 0x184]
jae 0x411d10
lea eax, [esp + 0x184]
push 5
push ebx
push ebx
push ecx
push eax
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov edi, 8
cmp eax, 0x20
jle 0x411d56
test byte [0x46b048], 1
jne 0x411d4a
or dword [0x46b048], 1
push 0x454240
mov dword [0x46afac], ebx
call fcn.0043146c
add esp, 4
push 2
mov esi, 0x46afac
call fcn.00407f60
cmp dword [esp + 0x198], edi
jb 0x411e2d
mov eax, dword [esp + 0x184]
push eax
call fcn.004308f5
add esp, 4
jmp 0x411e2d
push 0x22
push str..SetupControllerVisualization.cpp
lea ecx, [esp + 0x188]
mov dword [esp + 0x1a0], esi
mov dword [esp + 0x19c], ebx
mov byte [esp + 0x18c], bl
call fcn.00406050
push 2
lea ecx, [esp + 0x34]
push ecx
mov ecx, 0x1a1
lea edx, [esp + 0x188]
mov byte [esp + 0x1d0], 5
call fcn.0041f600
push str.__Install_dir_is_empty_
push ecx
add eax, 0x28
push str.SetupControllerVisualization::OnClickStartApp
push eax
mov byte [esp + 0x1d8], 6
call fcn.00407a60
add esp, 0xc
push eax
call fcn.00407a60
add esp, 8
lea ecx, [esp + 0x30]
mov byte [esp + 0x1c8], 5
call fcn.0041f890
cmp dword [esp + 0x198], 0x10
jb 0x411e13
mov edx, dword [esp + 0x184]
push edx
call fcn.004308f5
add esp, 4
mov dword [esp + 0x198], esi
mov dword [esp + 0x194], ebx
mov byte [esp + 0x184], bl
mov edi, 8
cmp dword [esp + 0x1b4], edi
jb 0x411e46
mov eax, dword [esp + 0x1a0]
push eax
call fcn.004308f5
add esp, 4
mov dword [esp + 0x1c8], 0xffffffff
mov eax, dword [esp + 0x10]
xor ecx, ecx
add eax, 0xfffffff0
mov word [esp + 0x1a0], cx
mov dword [esp + 0x1b4], 7
mov dword [esp + 0x1b0], ebx
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x411e8d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x1c0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1a8]
xor ecx, esp
call fcn.00430900
mov esp, ebp
pop ebp
ret