Function at 0x456d50
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a7d98
mov eax, dword fs:[0]
push eax
sub esp, 0x3d4
mov eax, dword [0x63b070]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x30c], ecx
push 0x5f924c
mov ecx, dword [ebp + 8]
call fcn.004b06da
push eax
call fcn.0057a545
add esp, 8
test eax, eax
jne 0x4574da
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x30c]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x860]
jne 0x456ef5
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x118]
mov dword [ebp - 0x32c], ecx
cmp dword [ebp - 0x32c], 0
jne 0x456e5f
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x37c], esp
mov eax, dword [ebp - 0x30c]
mov ecx, dword [eax + 0x8ac]
push ecx
push edx
call fcn.004876b0
add esp, 8
mov dword [ebp - 0x380], eax
lea edx, [ebp - 0x290]
push edx
mov eax, dword [ebp - 0x30c]
mov ecx, dword [eax + 0x968]
call fcn.00426ad0
mov dword [ebp - 0x384], eax
lea ecx, [ebp - 0x290]
call fcn.00411720
test eax, eax
je 0x456e4f
push 1
push 0
push 0
lea ecx, [ebp - 0x290]
call fcn.00413640
push eax
push 0x5f927c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x388], eax
lea ecx, [ebp - 0x290]
call fcn.00413710
jmp 0x456ef0
cmp dword [ebp - 0x32c], 1
jne 0x456ef0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x38c], esp
mov edx, dword [ebp - 0x30c]
mov eax, dword [edx + 0x8ac]
push eax
push ecx
call fcn.004876b0
add esp, 8
mov dword [ebp - 0x390], eax
lea ecx, [ebp - 0x278]
push ecx
mov edx, dword [ebp - 0x30c]
mov ecx, dword [edx + 0x968]
call fcn.004269a0
mov dword [ebp - 0x394], eax
lea ecx, [ebp - 0x278]
call fcn.00411720
test eax, eax
je 0x456ee5
push 1
push 0
push 0
lea ecx, [ebp - 0x278]
call fcn.00413640
push eax
push 0x5f9270
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x398], eax
lea ecx, [ebp - 0x278]
call fcn.00413710
jmp 0x4574da
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x30c]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x884]
jne 0x4574da
mov eax, dword [ebp - 0x30c]
movzx ecx, byte [eax + 0x990]
test ecx, ecx
je 0x456f2d
mov dword [ebp - 0x330], 0x5f9290
jmp 0x456f37
mov dword [ebp - 0x330], 0x5f9288
push 0
mov edx, dword [ebp - 0x330]
push edx
push str.8_2.ClickInstallLink
push 0x5f9298
call fcn.0048abf0
mov ecx, eax
call fcn.0048ac90
lea eax, [ebp - 0x230]
push eax
mov ecx, dword [ebp - 0x30c]
sub ecx, 0x20
call fcn.0046c5e0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x230]
call fcn.00411720
test eax, eax
jne 0x4570db
lea ecx, [ebp - 0x314]
push ecx
mov edx, dword [ebp - 0x30c]
mov ecx, dword [edx + 0x968]
add ecx, 0x17c
call fcn.00428f60
jmp 0x456fb9
push 0
lea eax, [ebp - 0x39c]
push eax
lea ecx, [ebp - 0x314]
call fcn.0046d200
lea ecx, [ebp - 0x3a0]
push ecx
mov edx, dword [ebp - 0x30c]
mov ecx, dword [edx + 0x968]
add ecx, 0x17c
call fcn.00428f00
push eax
lea ecx, [ebp - 0x314]
call fcn.00428ce0
movzx eax, al
test eax, eax
je 0x4570db
lea ecx, [ebp - 0x314]
call fcn.0046d230
mov ecx, eax
call fcn.00413640
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3a4], esp
push eax
call fcn.00418610
mov dword [ebp - 0x378], eax
call fcn.00481e10
add esp, 0x18
mov byte [ebp - 0x30e], al
mov cl, byte [ebp - 0x30e]
mov byte [ebp - 0x30d], cl
mov edx, dword [ebp - 0x30c]
mov eax, dword [edx + 0x968]
cmp dword [eax + 0x188], 1
je 0x45705b
mov ecx, dword [ebp - 0x30c]
mov edx, dword [ecx + 0x968]
cmp dword [edx + 0x188], 3
jne 0x45708f
movzx eax, byte [ebp - 0x30d]
test eax, eax
je 0x45706d
jmp 0x456fa5
lea ecx, [ebp - 0x314]
call fcn.0046d230
mov ecx, eax
call fcn.00413640
push eax
lea ecx, [ebp - 0x230]
call fcn.00413680
jmp 0x4570db
mov ecx, dword [ebp - 0x30c]
mov edx, dword [ecx + 0x968]
cmp dword [edx + 0x188], 2
jne 0x4570d6
movzx eax, byte [ebp - 0x30d]
test eax, eax
je 0x4570d1
lea ecx, [ebp - 0x314]
call fcn.0046d230
mov ecx, eax
call fcn.00413640
push eax
lea ecx, [ebp - 0x230]
call fcn.00413680
jmp 0x4570db
jmp 0x456fa5
jmp 0x456fa5
lea ecx, [ebp - 0x230]
call fcn.00411720
test eax, eax
je 0x4574c8
mov ecx, dword [ebp - 0x30c]
movzx edx, byte [ecx + 0x998]
test edx, edx
je 0x45732a
xor eax, eax
mov word [ebp - 0x218], ax
push 0x206
push 0
lea ecx, [ebp - 0x216]
push ecx
call fcn.00577360
add esp, 0xc
push 0x104
lea edx, [ebp - 0x218]
push edx
push 0
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x260]
call fcn.00418610
mov byte [ebp - 4], 1
mov ecx, dword [0x618b14]
push ecx
mov edx, dword [0x618b14]
push edx
push 0x5f92c0
lea ecx, [ebp - 0x260]
call fcn.0046d530
add eax, 1
push eax
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x260]
call fcn.004135c0
mov byte [ebp - 4], 2
mov ecx, dword [0x618b14]
push ecx
push 0x5f92bc
lea ecx, [ebp - 0x248]
call fcn.0046d530
mov dword [ebp - 0x328], eax
mov edx, dword [0x618b14]
push edx
push 0x5f92d8
lea ecx, [ebp - 0x248]
call fcn.0046d530
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x33c]
sub eax, dword [ebp - 0x328]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x328]
add ecx, 1
push ecx
lea edx, [ebp - 0x2a8]
push edx
lea ecx, [ebp - 0x248]
call fcn.004135c0
mov byte [ebp - 4], 3
cmp dword [ebp - 0x328], 0xffffffff
je 0x4572fd
push 0x5f92dc
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x2c0]
push ecx
call fcn.00472f80
add esp, 0xc
mov dword [ebp - 0x340], eax
mov edx, dword [ebp - 0x340]
mov dword [ebp - 0x344], edx
mov byte [ebp - 4], 4
lea eax, [ebp - 0x2a8]
push eax
mov ecx, dword [ebp - 0x344]
push ecx
lea edx, [ebp - 0x2d8]
push edx
call fcn.004730f0
add esp, 0xc
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x370], eax
mov byte [ebp - 4], 5
push 0x5f92c4
mov ecx, dword [ebp - 0x370]
push ecx
lea edx, [ebp - 0x2f0]
push edx
call fcn.00472f40
add esp, 0xc
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x368], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x248]
push ecx
mov edx, dword [ebp - 0x368]
push edx
lea eax, [ebp - 0x308]
push eax
call fcn.004730f0
add esp, 0xc
mov dword [ebp - 0x360], eax
mov ecx, dword [ebp - 0x360]
push ecx
lea ecx, [ebp - 0x230]
call fcn.00413760
lea ecx, [ebp - 0x308]
call fcn.00413710
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2f0]
call fcn.00413710
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2d8]
call fcn.00413710
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2c0]
call fcn.00413710
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2a8]
call fcn.00413710
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x248]
call fcn.00413710
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x260]
call fcn.00413710
call fcn.0041ce50
mov dword [ebp - 0x354], eax
lea ecx, [ebp - 0x230]
call fcn.00413640
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0
jne 0x45735e
mov dword [ebp - 0x338], 0
jmp 0x45741d
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x318], edx
mov eax, dword [ebp - 0x318]
add eax, 2
mov dword [ebp - 0x35c], eax
mov ecx, dword [ebp - 0x318]
mov dx, word [ecx]
mov word [ebp - 0x31a], dx
add dword [ebp - 0x318], 2
cmp word [ebp - 0x31a], 0
jne 0x457379
mov eax, dword [ebp - 0x318]
sub eax, dword [ebp - 0x35c]
sar eax, 1
mov dword [ebp - 0x358], eax
mov ecx, dword [ebp - 0x358]
add ecx, 1
mov dword [ebp - 0x320], ecx
cmp dword [ebp - 0x320], 0x3fffffff
jle 0x4573d5
mov dword [ebp - 0x334], 0
jmp 0x457411
mov eax, dword [ebp - 0x320]
shl eax, 1
call fcn.004a4480
mov dword [ebp - 0x350], esp
mov edx, dword [ebp - 0x354]
push edx
mov eax, dword [ebp - 0x320]
shl eax, 1
push eax
mov ecx, dword [ebp - 0x324]
push ecx
mov edx, dword [ebp - 0x350]
push edx
call fcn.0041ceb0
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x338], eax
mov ecx, dword [ebp - 0x338]
mov dword [ebp - 0x364], ecx
push 0
push 2
push str.void___thiscall_InstallUIMainWnd::Notify_struct_DuiLib::tagTNotifyUI__
push 0x135
push 0x5f934c
push 0x80
lea ecx, [ebp - 0x3e0]
call fcn.00422610
mov dword [ebp - 0x34c], eax
mov edx, dword [ebp - 0x34c]
mov dword [ebp - 0x348], edx
mov byte [ebp - 4], 7
lea eax, [ebp - 0x364]
push eax
push str._Open_Advice_Url:
mov ecx, dword [0x63c128]
push ecx
push 1
mov edx, dword [ebp - 0x348]
push edx
call fcn.004226f0
add esp, 0xc
mov ecx, eax
call fcn.0043a870
mov ecx, eax
call fcn.0043a8d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3e0]
call fcn.00422690
push 1
push 0
push 0
lea ecx, [ebp - 0x230]
call fcn.00413640
push eax
push 0x5f93a8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x230]
call fcn.00413710
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x30c]
call fcn.004acb31
lea esp, [ebp - 0x3e4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a39ef
mov esp, ebp
pop ebp
ret 4