Function at 0x403c60
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x38
mov eax, dword [0x75d580]
xor eax, esp
mov dword [esp + 0x34], eax
push esi
push edi
mov edi, dword [ebp + 8]
mov eax, dword [edi + 8]
mov dword [esp + 0xc], ecx
lea ecx, [edi + 8]
mov eax, dword [eax + 0x20]
call eax
cmp eax, 0x2710
jne 0x404251
mov edx, dword [edi + 0x18]
test edx, edx
je 0x404251
mov ecx, str.btn_close
mov eax, edx
mov si, word [eax]
cmp si, word [ecx]
jne 0x403ccb
test si, si
je 0x403cc7
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x403ccb
add eax, 4
add ecx, 4
test si, si
jne 0x403ca5
xor eax, eax
jmp 0x403cd0
sbb eax, eax
or eax, 1
test eax, eax
jne 0x403cfb
mov ecx, dword [esp + 0xc]
mov byte [edi + 0xc], al
call fcn.00405560
xor eax, eax
cmp byte [edi + 0xc], al
sete al
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.0048a267
mov esp, ebp
pop ebp
ret 4
mov ecx, str.btn_min
mov eax, edx
mov si, word [eax]
cmp si, word [ecx]
jne 0x403d28
test si, si
je 0x403d24
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x403d28
add eax, 4
add ecx, 4
test si, si
jne 0x403d02
xor eax, eax
jmp 0x403d2d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x403d6a
push eax
mov byte [edi + 0xc], al
mov eax, dword [esp + 0x10]
push 0xf020
push 0x112
push dword [eax + 0x248]
call dword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
cmp byte [edi + 0xc], al
sete al
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.0048a267
mov esp, ebp
pop ebp
ret 4
mov ecx, str.btn_max
mov eax, edx
mov si, word [eax]
cmp si, word [ecx]
jne 0x403d97
test si, si
je 0x403d93
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x403d97
add eax, 4
add ecx, 4
test si, si
jne 0x403d71
xor eax, eax
jmp 0x403d9c
sbb eax, eax
or eax, 1
test eax, eax
jne 0x403dd9
push eax
mov byte [edi + 0xc], al
mov eax, dword [esp + 0x10]
push 0xf030
push 0x112
push dword [eax + 0x248]
call dword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
cmp byte [edi + 0xc], al
sete al
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.0048a267
mov esp, ebp
pop ebp
ret 4
mov ecx, str.btn_restore
mov eax, edx
mov si, word [eax]
cmp si, word [ecx]
jne 0x403e06
test si, si
je 0x403e02
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x403e06
add eax, 4
add ecx, 4
test si, si
jne 0x403de0
xor eax, eax
jmp 0x403e0b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x403e48
push eax
mov byte [edi + 0xc], al
mov eax, dword [esp + 0x10]
push 0xf120
push 0x112
push dword [eax + 0x248]
call dword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
cmp byte [edi + 0xc], al
sete al
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.0048a267
mov esp, ebp
pop ebp
ret 4
mov ecx, str.btn_select_path
mov eax, edx
nop
mov si, word [eax]
cmp si, word [ecx]
jne 0x403e76
test si, si
je 0x403e72
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x403e76
add eax, 4
add ecx, 4
test si, si
jne 0x403e50
xor eax, eax
jmp 0x403e7b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x403ea6
mov ecx, dword [esp + 0xc]
mov byte [edi + 0xc], al
call fcn.00405760
xor eax, eax
cmp byte [edi + 0xc], al
sete al
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.0048a267
mov esp, ebp
pop ebp
ret 4
mov ecx, str.btn_install
mov eax, edx
nop dword [eax]
mov si, word [eax]
cmp si, word [ecx]
jne 0x403ed6
test si, si
je 0x403ed2
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x403ed6
add eax, 4
add ecx, 4
test si, si
jne 0x403eb0
xor eax, eax
jmp 0x403edb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x403f06
mov ecx, dword [esp + 0xc]
mov byte [edi + 0xc], al
call fcn.00406220
xor eax, eax
cmp byte [edi + 0xc], al
sete al
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.0048a267
mov esp, ebp
pop ebp
ret 4
mov ecx, str.btn_experience_now
mov eax, edx
nop dword [eax]
mov si, word [eax]
cmp si, word [ecx]
jne 0x403f36
test si, si
je 0x403f32
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x403f36
add eax, 4
add ecx, 4
test si, si
jne 0x403f10
xor eax, eax
jmp 0x403f3b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x403f7a
mov byte [edi + 0xc], al
mov eax, dword [esp + 0xc]
push 0
push 0
push 0x10
push dword [eax + 0x248]
mov byte [eax + 0x3cd], 1
call dword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
cmp byte [edi + 0xc], al
sete al
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.0048a267
mov esp, ebp
pop ebp
ret 4
mov ecx, str.btn_back_install
mov eax, edx
mov si, word [eax]
cmp si, word [ecx]
jne 0x403fa7
test si, si
je 0x403fa3
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x403fa7
add eax, 4
add ecx, 4
test si, si
jne 0x403f81
xor eax, eax
jmp 0x403fac
sbb eax, eax
or eax, 1
test eax, eax
jne 0x403fd7
mov ecx, dword [esp + 0xc]
mov byte [edi + 0xc], al
call fcn.00406cf0
xor eax, eax
cmp byte [edi + 0xc], al
sete al
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.0048a267
mov esp, ebp
pop ebp
ret 4
mov ecx, str.custom_btn
mov eax, edx
nop
mov si, word [eax]
cmp si, word [ecx]
jne 0x404006
test si, si
je 0x404002
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x404006
add eax, 4
add ecx, 4
test si, si
jne 0x403fe0
xor eax, eax
jmp 0x40400b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40408c
mov esi, dword [esp + 0xc]
push ecx
add esi, 4
mov byte [edi + 0xc], al
push str.agree_wnd
mov ecx, esi
call fcn.004089d0
test eax, eax
je 0x404039
push 1
push 0
mov ecx, eax
call fcn.004454ca
push ecx
push str.path_wnd
mov ecx, esi
call fcn.004089d0
test eax, eax
je 0x404055
push 1
push 1
mov ecx, eax
call fcn.004454ca
push ecx
push str.pack_up_btn
mov ecx, esi
call fcn.00408710
test eax, eax
je 0x404071
push 1
push 1
mov ecx, eax
call fcn.004454ca
xor eax, eax
cmp byte [edi + 0xc], al
sete al
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.0048a267
mov esp, ebp
pop ebp
ret 4
mov ecx, str.pack_up_btn
mov eax, edx
mov si, word [eax]
cmp si, word [ecx]
jne 0x4040b9
test si, si
je 0x4040b5
mov si, word [eax + 2]
cmp si, word [ecx + 2]
jne 0x4040b9
add eax, 4
add ecx, 4
test si, si
jne 0x404093
xor eax, eax
jmp 0x4040be
sbb eax, eax
or eax, 1
test eax, eax
jne 0x404143
mov esi, dword [esp + 0xc]
push ecx
add esi, 4
mov byte [edi + 0xc], al
push str.agree_wnd
mov ecx, esi
call fcn.004089d0
test eax, eax
je 0x4040ec
push 1
push 1
mov ecx, eax
call fcn.004454ca
push ecx
push str.path_wnd
mov ecx, esi
call fcn.004089d0
test eax, eax
je 0x404108
push 1
push 0
mov ecx, eax
call fcn.004454ca
push ecx
push str.pack_up_btn
mov ecx, esi
call fcn.00408710
test eax, eax
je 0x404071
push 1
push 0
mov ecx, eax
call fcn.004454ca
xor eax, eax
cmp byte [edi + 0xc], al
sete al
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.0048a267
mov esp, ebp
pop ebp
ret 4
mov eax, str.goto_guanwang_btn
mov cx, word [edx]
cmp cx, word [eax]
jne 0x40416e
test cx, cx
je 0x40416a
mov cx, word [edx + 2]
cmp cx, word [eax + 2]
jne 0x40416e
add edx, 4
add eax, 4
test cx, cx
jne 0x404148
xor eax, eax
jmp 0x404173
sbb eax, eax
or eax, 1
test eax, eax
jne 0x404251
push 0x18
xorps xmm0, xmm0
mov byte [edi + 0xc], al
push str.https:__www.akspeedy.com
lea ecx, [esp + 0x18]
movaps xmmword [esp + 0x18], xmm0
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
call fcn.00402060
cmp dword [esp + 0x24], 7
lea eax, [esp + 0x10]
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmova eax, dword [esp + 0x10]
push 1
push 0
push 0
push eax
push str.open
push 0
call esi
cmp eax, 0x20
ja 0x4041e8
cmp dword [esp + 0x24], 7
lea eax, [esp + 0x10]
push 1
cmova eax, dword [esp + 0x14]
push 0
push eax
push str.iexplore.exe
push str.open
push 0
call esi
mov ecx, dword [esp + 0x24]
cmp ecx, 7
jbe 0x404220
mov edx, dword [esp + 0x10]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x404216
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x404266
push ecx
push edx
call fcn.0048a4f6
add esp, 8
mov eax, dword [esp + 0xc]
push 0
push 0
push 0x10
push dword [eax + 0x248]
call dword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
cmp byte [edi + 0xc], al
sete al
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.0048a267
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [esp + 0x3c]
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.0048a267
mov esp, ebp
pop ebp
ret 4
call fcn.00543627
int3