Function at 0x41fc80
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8e8
mov eax, dword [0x4ea080]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
push str.click
mov ecx, edi
mov dword [ebp - 0x8e8], edi
mov dword [ebp - 0x8e4], 0
call sym.SMAllSetup.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
test al, al
je 0x420497
mov ecx, dword [esi + 0x284]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
mov edi, dword [edi + 0x108]
push ebx
lea edx, [ebp - 0x2b0]
push edx
mov ebx, 3
call eax
mov ecx, eax
call sym.SMAllSetup.exe_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const
mov edx, dword [edi]
mov edx, dword [edx + 4]
push eax
lea eax, [ebp - 0x334]
push eax
mov ecx, edi
call edx
mov ecx, eax
call sym.SMAllSetup.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
mov edi, dword [ebp - 0x8e8]
test al, al
jne 0x41fdaa
mov eax, dword [edi + 0x108]
mov ecx, dword [esi + 0x288]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov dword [ebp - 0x8e4], eax
lea eax, [ebp - 0x43c]
push eax
mov ebx, 0xf
call edx
mov ecx, eax
call sym.SMAllSetup.exe_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const
mov ecx, dword [ebp - 0x8e4]
push eax
mov eax, dword [ecx]
mov eax, dword [eax + 4]
lea edx, [ebp - 0x544]
push edx
call eax
mov ecx, eax
call sym.SMAllSetup.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
test al, al
jne 0x41fdaa
mov edx, dword [edi + 0x108]
mov ecx, dword [esi + 0x274]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
mov dword [ebp - 0x8e4], edx
lea edx, [ebp - 0x3b8]
push edx
mov ebx, 0x3f
call eax
mov ecx, eax
call sym.SMAllSetup.exe_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const
mov ecx, dword [ebp - 0x8e4]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
push eax
lea eax, [ebp - 0x4c0]
push eax
call edx
mov ecx, eax
call sym.SMAllSetup.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
mov byte [ebp - 0x8dd], 0
test al, al
je 0x41fdb1
mov byte [ebp - 0x8dd], 1
test bl, 0x20
je 0x41fdc4
lea ecx, [ebp - 0x4c0]
and ebx, 0xffffffdf
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
test bl, 0x10
je 0x41fdd7
lea ecx, [ebp - 0x3b8]
and ebx, 0xffffffef
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
test bl, 8
je 0x41fdea
lea ecx, [ebp - 0x544]
and ebx, 0xfffffff7
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
test bl, 4
je 0x41fdfd
lea ecx, [ebp - 0x43c]
and ebx, 0xfffffffb
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
test bl, 2
je 0x41fe10
lea ecx, [ebp - 0x334]
and ebx, 0xfffffffd
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
test bl, 1
je 0x41fe20
lea ecx, [ebp - 0x2b0]
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
cmp byte [ebp - 0x8dd], 0
je 0x41fe4b
cmp byte [esi + 0x258], 0
lea ecx, [esi - 0x24]
je 0x41fe3f
call fcn.0041fac0
jmp 0x420496
push 2
call fcn.0041f0e0
jmp 0x420496
mov ecx, dword [esi + 0x278]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
mov ebx, dword [edi + 0x108]
lea edx, [ebp - 0x334]
push edx
call eax
mov ecx, eax
call sym.SMAllSetup.exe_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const
mov edx, dword [ebx]
mov edx, dword [edx + 4]
push eax
lea eax, [ebp - 0x2b0]
push eax
mov ecx, ebx
call edx
mov ecx, eax
call sym.SMAllSetup.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
lea ecx, [ebp - 0x2b0]
mov bl, al
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
lea ecx, [ebp - 0x334]
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
test bl, bl
je 0x41feaf
push 1
lea ecx, [esi - 0x24]
call fcn.0041f0e0
jmp 0x420496
mov ecx, dword [esi + 0x27c]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
mov ebx, dword [edi + 0x108]
lea edx, [ebp - 0x334]
push edx
call eax
mov ecx, eax
call sym.SMAllSetup.exe_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const
mov edx, dword [ebx]
mov edx, dword [edx + 4]
push eax
lea eax, [ebp - 0x2b0]
push eax
mov ecx, ebx
call edx
mov ecx, eax
call sym.SMAllSetup.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
lea ecx, [ebp - 0x2b0]
mov bl, al
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
lea ecx, [ebp - 0x334]
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
test bl, bl
je 0x41ff21
cmp byte [esi + 0x280], 0
lea ecx, [esi - 0x24]
sete al
mov byte [esi + 0x280], al
call fcn.0041ef70
jmp 0x420496
mov ecx, dword [esi + 0x298]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov ebx, dword [edi + 0x108]
lea eax, [ebp - 0x334]
push eax
call edx
mov ecx, eax
call sym.SMAllSetup.exe_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
mov eax, dword [ebx]
mov edx, dword [eax + 4]
lea ecx, [ebp - 0x2b0]
push ecx
mov ecx, ebx
call edx
mov ecx, eax
call sym.SMAllSetup.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
lea ecx, [ebp - 0x2b0]
mov bl, al
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
lea ecx, [ebp - 0x334]
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
test bl, bl
je 0x42019f
xor eax, eax
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x210], eax
mov eax, dword [esi - 0x1c]
lea ecx, [ebp - 0x22c]
push ecx
mov dword [ebp - 0x21c], 0x50
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x220], 0x4b481c
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov ebx, eax
test ebx, ebx
je 0x420496
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x20a]
push eax
mov word [ebp - 0x20c], dx
call fcn.0048f070
add esp, 0xc
lea ecx, [ebp - 0x20c]
push ecx
push ebx
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
test eax, eax
je 0x420193
mov eax, dword [esi + 0x2c8]
mov edi, dword [eax]
cmp edi, eax
je 0x42004d
cmp dword [edi + 0x1c], 8
lea eax, [edi + 8]
jb 0x42002b
mov eax, dword [eax]
push eax
lea edx, [ebp - 0x20c]
push edx
call fcn.00490701
add esp, 8
test eax, eax
jne 0x420127
mov edi, dword [edi]
cmp edi, dword [esi + 0x2c8]
jne 0x420020
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov edi, eax
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x420060
sub eax, edx
sar eax, 1
inc eax
push eax
push edi
call fcn.0048f71c
add esp, 8
mov ecx, str.SHOUYOUDAO
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4200a7
test dx, dx
je 0x4200a3
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4200a7
add eax, 4
add ecx, 4
test dx, dx
jne 0x420081
xor eax, eax
jmp 0x4200ac
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x42010c
lea eax, [ebp - 0x20c]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4200c0
sub eax, edx
sar eax, 1
cmp word [ebp + eax*2 - 0x20e], 0x5c
je 0x4200f3
push 0x4b1930
lea ecx, [ebp - 0x20c]
push 0x104
push ecx
call fcn.0048f473
add esp, 0xc
push 0x4b18fc
lea edx, [ebp - 0x20c]
push 0x104
push edx
call fcn.0048f473
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
lea ecx, [esi - 0x24]
call fcn.0041f620
push ebx
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x420496
push 0x4b47e4
push 0x4b47d4
push 3
lea ecx, [ebp - 0x8dc]
call fcn.00419910
mov ecx, dword [esi - 0x1c]
push 0
push accept
push accept
push accept
push accept
push 0x100
push 0x96c80000
push str.Kb8n
push ecx
lea ecx, [ebp - 0x8d8]
call sym.SMAllSetup.exe_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::Create_struct_HWND_____wchar_t_const___unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____
lea ecx, [ebp - 0x8d8]
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CWindowWnd::CenterWindow_void_
lea ecx, [ebp - 0x8d8]
call sym.SMAllSetup.exe_public:_unsigned_int___thiscall_DuiLib::CWindowWnd::ShowModal_void_
lea ecx, [ebp - 0x8dc]
call fcn.00419a00
push ebx
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x420496
mov ecx, dword [esi + 0x2c0]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov ebx, dword [edi + 0x108]
lea eax, [ebp - 0x334]
push eax
call edx
mov ecx, eax
call sym.SMAllSetup.exe_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
mov eax, dword [ebx]
mov edx, dword [eax + 4]
lea ecx, [ebp - 0x2b0]
push ecx
mov ecx, ebx
call edx
mov ecx, eax
call sym.SMAllSetup.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
lea ecx, [ebp - 0x2b0]
mov bl, al
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
lea ecx, [ebp - 0x334]
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
test bl, bl
je 0x42024d
cmp byte [esi + 0x6a8], 0
jne 0x420496
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x8e4], 0
call fcn.00418bb0
push 8
push 2
lea ecx, [ebp - 0x228]
call fcn.00418f40
mov eax, dword [esi - 0x20]
mov eax, dword [eax + 0x38]
lea edx, [ebp - 0x8e4]
push edx
push 0
lea ecx, [esi - 0x20]
push 0
push 0
call eax
lea ecx, [ebp - 0x228]
call fcn.00418bd0
jmp 0x420496
mov ecx, dword [esi + 0x2a8]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov ebx, dword [edi + 0x108]
lea eax, [ebp - 0x334]
push eax
call edx
mov ecx, eax
call sym.SMAllSetup.exe_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
mov eax, dword [ebx]
mov edx, dword [eax + 4]
lea ecx, [ebp - 0x2b0]
push ecx
mov ecx, ebx
call edx
mov ecx, eax
call sym.SMAllSetup.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
lea ecx, [ebp - 0x2b0]
mov bl, al
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
lea ecx, [ebp - 0x334]
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
test bl, bl
je 0x4202af
lea ecx, [esi - 0x24]
call fcn.0041f6e0
jmp 0x420496
mov ecx, dword [esi + 0x28c]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
mov ebx, dword [edi + 0x108]
lea edx, [ebp - 0x334]
push edx
call eax
mov ecx, eax
call sym.SMAllSetup.exe_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const
mov edx, dword [ebx]
mov edx, dword [edx + 4]
push eax
lea eax, [ebp - 0x2b0]
push eax
mov ecx, ebx
call edx
mov ecx, eax
call sym.SMAllSetup.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
lea ecx, [ebp - 0x2b0]
mov bl, al
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
lea ecx, [ebp - 0x334]
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
test bl, bl
je 0x42033b
call fcn.00421670
cmp byte [eax + 4], 0
je 0x420325
call fcn.00421670
lea ecx, [esi - 0x24]
mov byte [eax + 4], 0
call fcn.0041f050
jmp 0x420496
call fcn.00421670
lea ecx, [esi - 0x24]
mov byte [eax + 4], 1
call fcn.0041f050
jmp 0x420496
mov ecx, dword [esi + 0x290]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
mov ebx, dword [edi + 0x108]
lea edx, [ebp - 0x334]
push edx
call eax
mov ecx, eax
call sym.SMAllSetup.exe_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const
mov edx, dword [ebx]
mov edx, dword [edx + 4]
push eax
lea eax, [ebp - 0x2b0]
push eax
mov ecx, ebx
call edx
mov ecx, eax
call sym.SMAllSetup.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
lea ecx, [ebp - 0x2b0]
mov bl, al
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
lea ecx, [ebp - 0x334]
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
test bl, bl
je 0x4203c7
call fcn.00421670
cmp byte [eax + 5], 0
je 0x4203b1
call fcn.00421670
lea ecx, [esi - 0x24]
mov byte [eax + 5], 0
call fcn.0041f080
jmp 0x420496
call fcn.00421670
lea ecx, [esi - 0x24]
mov byte [eax + 5], 1
call fcn.0041f080
jmp 0x420496
mov ecx, dword [esi + 0x294]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
mov ebx, dword [edi + 0x108]
lea edx, [ebp - 0x334]
push edx
call eax
mov ecx, eax
call sym.SMAllSetup.exe_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const
mov edx, dword [ebx]
mov edx, dword [edx + 4]
push eax
lea eax, [ebp - 0x2b0]
push eax
mov ecx, ebx
call edx
mov ecx, eax
call sym.SMAllSetup.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
lea ecx, [ebp - 0x2b0]
mov bl, al
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
lea ecx, [ebp - 0x334]
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
test bl, bl
je 0x42044d
call fcn.00421670
cmp byte [eax + 6], 0
je 0x42043a
call fcn.00421670
lea ecx, [esi - 0x24]
mov byte [eax + 6], 0
call fcn.0041f0b0
jmp 0x420496
call fcn.00421670
lea ecx, [esi - 0x24]
mov byte [eax + 6], 1
call fcn.0041f0b0
jmp 0x420496
mov ecx, dword [edi + 0x108]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
push str.btnLicense
lea edx, [ebp - 0x2b0]
push edx
call eax
mov ecx, eax
call sym.SMAllSetup.exe_public:_bool___thiscall_DuiLib::CDuiString::operator_wchar_t_const__const
lea ecx, [ebp - 0x2b0]
mov bl, al
call sym.SMAllSetup.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
test bl, bl
je 0x420496
push 1
push 0
push 0
push str.http:__www.shouyoudao.com_index.php_Clients_index_license
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
pop ebx
mov ecx, dword [ebp - 0x8e8]
push ecx
mov ecx, esi
call sym.SMAllSetup.exe_public_virtual:_void___thiscall_DuiLib::WindowImplBase::Notify_struct_DuiLib::tagTNotifyUI__
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0048ef91
mov esp, ebp
pop ebp
ret 4