Function at 0x4dc3c0
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x2fc
mov eax, dword [0x528af4]
xor eax, esp
mov dword [esp + 0x2f8], eax
push ebx
push esi
mov esi, dword [esp + 0x308]
call fcn.004c27f0
push 0x2018
push 0
push 0x5a8510
call fcn.004ee100
add esp, 0xc
mov ecx, 0x55f640
push 0
push 0xf
push str.WizardLogo.bmp
call fcn.004a9110
mov dword [0x5a8508], eax
mov ecx, 0x55f640
mov eax, dword [0x56df20]
push 1
mov dword [esp + 0x240], str.WIZARDCMD
mov dword [esp + 0x24c], 0x4dd010
mov dword [esp + 0x274], str.WIZARDARC
mov dword [esp + 0x280], 0x4dcb30
mov dword [esp + 0x2a8], str.WIZARDEXTR
mov dword [esp + 0x2b4], 0x4dd310
mov dword [esp + 0x2dc], str.WIZARDADDOPT
mov dword [esp + 0x2e8], 0x4dc8b0
mov dword [esp + 0x10], 0x34
mov dword [esp + 0x14], 0x22a
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], eax
call fcn.004a8ed0
cmp byte [0x53898c], 0
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x230]
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 4
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], eax
je 0x4dc4e5
push 0x800
push 0x5a8514
mov ecx, 0x55a850
call fcn.00404e00
mov dword [0x5a8510], 0
mov dword [esp + 0x28], 2
mov eax, dword [0x56df20]
mov ecx, 0x56df2c
mov dword [esp + 0x238], eax
mov dword [esp + 0x26c], eax
mov dword [esp + 0x2a0], eax
mov dword [esp + 0x2d4], eax
lea eax, [esp + 0x230]
push 4
push eax
lea eax, [esp + 0x14]
mov dword [esp + 0x238], 0x34
push eax
mov dword [esp + 0x240], 0x20
mov dword [esp + 0x270], 0x34
mov dword [esp + 0x274], 0x20
mov dword [esp + 0x2a4], 0x34
mov dword [esp + 0x2a8], 0x20
mov dword [esp + 0x2d8], 0x34
mov dword [esp + 0x2dc], 0x20
call fcn.00487a00
lea eax, [esp + 0xc]
push eax
call dword [sym.imp.COMCTL32.dll_PropertySheetW]
test eax, eax
mov ecx, 0x56df2c
push 4
lea eax, [esp + 0x234]
setg bl
push eax
mov byte [esp + 0x13], bl
call fcn.004879b0
test bl, bl
je 0x4dc88c
mov eax, dword [0x5a8510]
test eax, eax
je 0x4dc77a
dec eax
cmp eax, 1
ja 0x4dc88c
push 0x5a8514
call fcn.00478eb0
cmp eax, 0x5a8514
jne 0x4dc5fe
push 0x54f29a
call fcn.0043aa80
push 0x800
push 0x54f29a
call fcn.00477290
push 0x800
push 0x5a8514
push 0x54f29a
call fcn.0048e6d0
jmp 0x4dc612
push 0x800
push 0x5a8514
push 0x54f29a
call fcn.0048e710
cmp byte [0x5aa517], 0
mov al, byte [0x5aa515]
mov dword [0x549fe8], 3
mov dword [0x549fe4], 2
mov byte [0x54a026], al
je 0x4dc643
mov dword [0x549fc0], 2
cmp dword [0x5a8510], 2
mov eax, dword [0x5aa518]
mov dword [0x549ff0], eax
mov eax, dword [0x5aa51c]
mov dword [0x549ff4], eax
jne 0x4dc699
push 0x54f29a
call fcn.00469360
test al, al
je 0x4dc699
push 0
push 1
push 0x54f29a
mov ecx, 0x55a850
call fcn.004059c0
cmp eax, 1
jne 0x4dc75d
mov eax, dword [0x55a854]
mov dword [0x54c248], eax
jmp 0x4dc75d
cmp byte [0x5aa516], 0
je 0x4dc6f1
push 0x50ba20
push 0x54f29a
call fcn.004772e0
test al, al
jne 0x4dc6e5
mov ecx, 0x54f29a
add ecx, 0xfffffffe
lea ecx, [ecx]
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x4dc6c0
mov eax, dword [0x50ec90]
mov dword [ecx], eax
mov eax, dword [0x50ec94]
mov dword [ecx + 4], eax
mov ax, word [0x50ec98]
mov word [ecx + 8], ax
mov dword [0x544e98], 0x2a
jmp 0x4dc75d
cmp dword [0x54c248], 0
mov ebx, 0x50bc18
je 0x4dc704
mov ebx, str..zip
lea eax, [ebx + 2]
push eax
push 0x54f29a
call fcn.004772e0
test al, al
jne 0x4dc751
mov esi, ebx
jmp 0x4dc720
mov ax, word [ebx]
add ebx, 2
test ax, ax
jne 0x4dc720
push edi
mov edi, 0x54f29a
sub ebx, esi
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x4dc736
mov ecx, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
mov bl, byte [esp + 0xb]
xor eax, eax
mov word [0x544e98], ax
push 1
push 0x54f29a
call fcn.00478c30
push 0
mov ecx, 0x55a850
call fcn.00404090
jmp 0x4dc88c
push 0
push 1
push 0x5a8514
mov ecx, 0x55a850
call fcn.004059c0
cmp eax, 1
jne 0x4dc88c
push 0
call fcn.004bf7c0
push 0x800
push 0x545e9e
push 0x5a9514
mov ecx, 0x55d4d8
call fcn.00440000
push 0x545e9e
call fcn.00469360
test al, al
jne 0x4dc7fb
push 0
push 0x545e9e
call fcn.00468d70
test al, al
jne 0x4dc7fb
push 0x545e9e
push 0x1f7
call fcn.00488530
push eax
call fcn.004cf640
add esp, 8
mov ecx, 0x56df60
call fcn.00463320
jmp 0x4dc88c
lea eax, [esp + 0x40]
mov ecx, 0x55a850
push eax
call fcn.004051c0
push 0x800
push 0x54f29a
mov ecx, 0x55a850
call fcn.00404e00
mov eax, dword [esp + 0x180]
mov ecx, 0x55029c
mov dword [0x54c248], eax
call fcn.0048e9d0
push 0x50ba14
mov ecx, 0x55029c
call fcn.0048e7f0
push 0
push 0
mov ecx, 0x55a850
mov byte [0x54a169], 0
call fcn.004049a0
cmp word [0x5a9514], 0
je 0x4dc871
push 0x800
push 0x545e9e
call fcn.00477290
push 1
push 0x50b8c4
push 0
push 0x545e9e
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [esp + 0x300]
mov al, bl
pop esi
pop ebx
xor ecx, esp
call fcn.004ebbd8
add esp, 0x2fc
ret 4