Function at 0x45ffc0
Capabilities:
Create process on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5eae0e
mov eax, dword fs:[0]
push eax
sub esp, 0x150
mov eax, dword [0x677000]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x15c], eax
mov eax, dword [0x74e2f0]
push 0x40
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0xd0]
push 0
push eax
mov dword [ebp - 0x154], esi
mov dword [ebp - 0xd4], 0
call fcn.005bb1c0
xorps xmm0, xmm0
xor eax, eax
add esp, 0xc
mov dword [ebp - 0xe4], 0
movq qword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], ax
push str.____________________________________________________
mov dword [ebp - 4], eax
call fcn.00418730
cmp dword [edi + 0x14], 8
jb 0x46007f
mov eax, dword [edi]
jmp 0x460081
mov eax, edi
push eax
push str.CFuncMgr::DoLanSetupInstall___s__App_Install_Start
push 0xffffffffffffffff
push 0x1000
push 0x74e818
call fcn.005b8769
add esp, 0x14
push 0x74e818
call fcn.00418730
push 8
xor eax, eax
push 0x63b97c
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x34], 0
mov word [ebp - 0x44], ax
call fcn.00406400
push 0xffffffffffffffff
push 0
push edi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.004061c0
push 0xb
xor eax, eax
push str.InstDrvName
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x124], 7
mov dword [ebp - 0x128], 0
mov word [ebp - 0x138], ax
call fcn.00406400
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 2
mov ecx, dword [0x74e2f4]
push eax
lea eax, [ebp - 0x74]
push eax
lea ecx, [ecx + 0xc]
call fcn.00409910
mov byte [ebp - 4], 4
cmp dword [ebp - 0x124], 8
jb 0x460140
push dword [ebp - 0x138]
call fcn.0049500b
add esp, 4
xor eax, eax
cmp dword [ebp - 0x60], 8
lea edx, [ebp - 0x74]
cmovae edx, dword [ebp - 0x74]
mov dword [ebp - 0x108], 7
mov dword [ebp - 0x10c], eax
mov word [ebp - 0x11c], ax
mov dword [ebp - 0x124], 7
mov dword [ebp - 0x128], 0
mov word [ebp - 0x138], ax
cmp word [edx], ax
jne 0x460188
xor ecx, ecx
jmp 0x46019f
mov ecx, edx
lea ebx, [ecx + 2]
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x460190
sub ecx, ebx
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x11c]
call fcn.00406400
mov byte [ebp - 4], 5
push 0xb
xor eax, eax
push str.InstAppName
lea ecx, [ebp - 0x104]
mov dword [ebp - 0xf0], 7
mov dword [ebp - 0xf4], 0
mov word [ebp - 0x104], ax
call fcn.00406400
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 6
mov ecx, dword [0x74e2f4]
push eax
lea eax, [ebp - 0x104]
push eax
lea ecx, [ecx + 0xc]
call fcn.00409f70
cmp dword [ebp - 0xf0], 8
jb 0x460216
push dword [ebp - 0x104]
call fcn.0049500b
add esp, 4
xor eax, eax
mov byte [ebp - 4], 4
cmp dword [ebp - 0x108], 8
mov dword [ebp - 0xf0], 7
mov dword [ebp - 0xf4], 0
mov word [ebp - 0x104], ax
jb 0x46024e
push dword [ebp - 0x11c]
call fcn.0049500b
add esp, 4
push 0xa
xor eax, eax
push str.ONLINEFLAG
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x108], 7
mov dword [ebp - 0x10c], 0
mov word [ebp - 0x11c], ax
call fcn.00406400
mov byte [ebp - 4], 7
mov ecx, dword [0x74e2f4]
lea eax, [ebp - 0x11c]
mov ebx, 1
push eax
lea ecx, [ecx + 0xc]
mov dword [ebp - 0x120], ebx
call fcn.00409ba0
cmp eax, ebx
je 0x460307
push 0xd
xor eax, eax
push str.CD_ONLINEFLAG
lea ecx, [ebp - 0x104]
mov dword [ebp - 0xf0], 7
mov dword [ebp - 0xf4], 0
mov word [ebp - 0x104], ax
call fcn.00406400
mov dword [ebp - 4], 8
mov ecx, dword [0x74e2f4]
lea eax, [ebp - 0x104]
mov ebx, 3
push eax
lea ecx, [ecx + 0xc]
mov dword [ebp - 0x120], ebx
call fcn.00409ba0
mov byte [ebp - 0xe5], 0
cmp eax, 1
jne 0x46030e
mov byte [ebp - 0xe5], 1
test bl, 2
je 0x46034a
and ebx, 0xfffffffd
cmp dword [ebp - 0xf0], 8
jb 0x46032d
push dword [ebp - 0x104]
call fcn.0049500b
add esp, 4
xor eax, eax
mov dword [ebp - 0xf0], 7
mov dword [ebp - 0xf4], 0
mov word [ebp - 0x104], ax
mov dword [ebp - 4], 4
test bl, 1
je 0x46036d
cmp dword [ebp - 0x108], 8
jb 0x46036d
push dword [ebp - 0x11c]
call fcn.0049500b
add esp, 4
xor eax, eax
mov dword [ebp - 0x108], 7
mov dword [ebp - 0x10c], 0
lea ecx, [ebp - 0x11c]
mov word [ebp - 0x11c], ax
cmp byte [ebp - 0xe5], al
je 0x46048a
push 0xb
push str.FILE_ONLINE
call fcn.00406400
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 9
mov ecx, dword [0x74e2f4]
push esi
lea eax, [ebp - 0x150]
push eax
lea ecx, [ecx + 0x2c]
call fcn.00414810
push eax
mov byte [ebp - 4], 0xa
mov ebx, dword [ebp - 0xec]
lea eax, [ebp - 0x104]
push eax
mov ecx, ebx
call fcn.00460be0
mov esi, eax
lea eax, [ebp - 0x2c]
cmp eax, esi
je 0x46041d
cmp dword [ebp - 0x18], 8
jb 0x460400
push dword [ebp - 0x2c]
call fcn.0049500b
add esp, 4
xor eax, eax
push esi
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], ax
call fcn.00405f10
cmp dword [ebp - 0xf0], 8
jb 0x460434
push dword [ebp - 0x104]
call fcn.0049500b
add esp, 4
xor eax, eax
cmp dword [ebp - 0x13c], 8
mov dword [ebp - 0xf0], 7
mov dword [ebp - 0xf4], 0
mov word [ebp - 0x104], ax
jb 0x460468
push dword [ebp - 0x150]
call fcn.0049500b
add esp, 4
xor eax, eax
mov dword [ebp - 0x13c], 7
mov dword [ebp - 0x140], 0
mov word [ebp - 0x150], ax
jmp 0x460573
push 4
push str.FILE
call fcn.00406400
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0xb
mov ecx, dword [0x74e2f4]
push esi
lea eax, [ebp - 0x104]
push eax
lea ecx, [ecx + 0x2c]
call fcn.00414810
push eax
mov byte [ebp - 4], 0xc
mov ebx, dword [ebp - 0xec]
lea eax, [ebp - 0x150]
push eax
mov ecx, ebx
call fcn.00460be0
mov esi, eax
lea eax, [ebp - 0x2c]
cmp eax, esi
je 0x46050b
cmp dword [ebp - 0x18], 8
jb 0x4604ee
push dword [ebp - 0x2c]
call fcn.0049500b
add esp, 4
xor eax, eax
push esi
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], ax
call fcn.00405f10
cmp dword [ebp - 0x13c], 8
jb 0x460522
push dword [ebp - 0x150]
call fcn.0049500b
add esp, 4
xor eax, eax
cmp dword [ebp - 0xf0], 8
mov dword [ebp - 0x13c], 7
mov dword [ebp - 0x140], 0
mov word [ebp - 0x150], ax
jb 0x460556
push dword [ebp - 0x104]
call fcn.0049500b
add esp, 4
xor eax, eax
mov dword [ebp - 0xf0], 7
mov dword [ebp - 0xf4], 0
mov word [ebp - 0x104], ax
mov byte [ebp - 4], 4
cmp dword [ebp - 0x108], 8
jb 0x46058e
push dword [ebp - 0x11c]
call fcn.0049500b
add esp, 4
push 6
xor eax, eax
push str.OPTION
lea ecx, [ebp - 0x104]
mov dword [ebp - 0xf0], 7
mov dword [ebp - 0xf4], 0
mov word [ebp - 0x104], ax
call fcn.00406400
mov esi, dword [ebp - 0x154]
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0xd
mov ecx, dword [0x74e2f4]
push esi
lea eax, [ebp - 0x150]
push eax
lea ecx, [ecx + 0x2c]
call fcn.00414810
push eax
lea eax, [ebp - 0x5c]
push eax
mov ecx, ebx
mov byte [ebp - 4], 0xe
call fcn.00460be0
cmp dword [ebp - 0x13c], 8
jb 0x46060f
push dword [ebp - 0x150]
call fcn.0049500b
add esp, 4
xor eax, eax
mov dword [ebp - 0x13c], 7
mov dword [ebp - 0x140], 0
mov word [ebp - 0x150], ax
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0xf0], 8
jb 0x460647
push dword [ebp - 0x104]
call fcn.0049500b
add esp, 4
xor eax, eax
push 9
push str.PARAMETER
lea ecx, [ebp - 0x138]
mov dword [ebp - 0xf0], 7
mov dword [ebp - 0xf4], 0
mov word [ebp - 0x104], ax
mov dword [ebp - 0x124], 7
mov dword [ebp - 0x128], eax
mov word [ebp - 0x138], ax
call fcn.00406400
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0x12
mov ecx, dword [0x74e2f4]
push esi
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ecx + 0x2c]
call fcn.00414810
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x124], 8
jb 0x4606cd
push dword [ebp - 0x138]
call fcn.0049500b
add esp, 4
xor eax, eax
push 8
push str.Interval
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x124], 7
mov dword [ebp - 0x128], 0
mov word [ebp - 0x138], ax
mov dword [ebp - 0x108], 7
mov dword [ebp - 0x10c], eax
mov word [ebp - 0x11c], ax
call fcn.00406400
lea eax, [ebp - 0x11c]
push eax
mov byte [ebp - 4], 0x15
mov ecx, dword [0x74e2f4]
lea eax, [ebp - 0x44]
push eax
push esi
lea ecx, [ecx + 0x2c]
call fcn.00414aa0
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x108], 8
mov ebx, eax
jb 0x46074e
push dword [ebp - 0x11c]
call fcn.0049500b
add esp, 4
push 7
xor eax, eax
push str.Timeout
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x108], 7
mov dword [ebp - 0x10c], 0
mov word [ebp - 0x11c], ax
call fcn.00406400
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x16
mov ecx, dword [0x74e2f4]
push eax
push esi
add ecx, 0x2c
call fcn.00414aa0
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x108], 8
mov esi, eax
jb 0x4607b8
push dword [ebp - 0x11c]
call fcn.0049500b
add esp, 4
push 0
push 0x624ff8
push dword [ebp - 0x7c]
mov eax, 0x64
test ebx, ebx
cmove ebx, eax
mov eax, 0x493e0
test esi, esi
cmove esi, eax
push ecx
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x158], esi
call fcn.00407060
test eax, eax
je 0x46080b
mov esi, dword [ebp - 0x154]
mov ecx, dword [ebp - 0xec]
lea eax, [ebp - 0x8c]
push eax
push esi
call fcn.00461e40
push 6
push str.Silent
mov ecx, 0x74e5a0
call fcn.00406400
call fcn.0049f407
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x460838
push 0x80004005
call fcn.00407a60
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xec], eax
push 0
push 0x624ff8
mov byte [ebp - 4], 0x17
push dword [ebp - 0x4c]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.00407060
test eax, eax
lea eax, [ebp - 0x2c]
je 0x460891
cmp dword [ebp - 0x48], 8
lea ecx, [ebp - 0x5c]
cmovae ecx, dword [ebp - 0x5c]
cmp dword [ebp - 0x18], 8
push ecx
cmovae eax, dword [ebp - 0x2c]
push eax
lea eax, [ebp - 0xec]
push str.__s___s
push eax
call fcn.00407b30
add esp, 0x10
jmp 0x4608ae
cmp dword [ebp - 0x18], 8
cmovae eax, dword [ebp - 0x2c]
push eax
lea eax, [ebp - 0xec]
push 0x63bae0
push eax
call fcn.00407b30
add esp, 0xc
mov esi, dword [ebp - 0xec]
cmp dword [esi - 4], 1
jle 0x4608ce
push dword [esi - 0xc]
lea ecx, [ebp - 0xec]
call fcn.004078e0
mov esi, dword [ebp - 0xec]
cmp dword [edi + 0x14], 8
jb 0x4608d8
mov eax, dword [edi]
jmp 0x4608da
mov eax, edi
push esi
push eax
push str.CFuncMgr::DoLanSetupInstall___s__App_Install_Command:_s
push 0xffffffffffffffff
push 0x1000
push 0x74e818
call fcn.005b8769
add esp, 0x18
push 0x74e818
call fcn.00418730
mov eax, 1
mov dword [ebp - 0xd4], 0x44
mov dword [ebp - 0xa8], 1
mov word [ebp - 0xa4], ax
cmp dword [esi - 4], eax
jle 0x460938
push dword [esi - 0xc]
lea ecx, [ebp - 0xec]
call fcn.004078e0
mov esi, dword [ebp - 0xec]
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xd4]
push eax
push 0
push 0
push 0x20
push 0
push 0
push 0
push esi
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x460aae
mov eax, dword [ebp - 0xe4]
test eax, eax
je 0x460aae
mov ecx, dword [ebp - 0xe0]
test ecx, ecx
je 0x460988
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xe4]
push dword [ebp - 0x120]
xor ebx, ebx
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x4609c1
jmp 0x4609a0
mov eax, dword [ebp - 0x120]
add ebx, eax
cmp ebx, dword [ebp - 0x158]
ja 0x4609f0
push eax
push dword [ebp - 0xe4]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x4609a0
call fcn.00466550
call fcn.004667a0
mov ebx, dword [ebp - 0x15c]
test ebx, ebx
je 0x460a5f
push ebx
push dword [ebp - 0xe4]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [edi + 0x14], 8
jb 0x460a37
mov eax, dword [edi]
jmp 0x460a39
push 0
push dword [ebp - 0xe4]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0xe4]
test eax, eax
je 0x460a10
push eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
cmp dword [edi + 0x14], 8
jb 0x460a18
mov edi, dword [edi]
push edi
push str.CFuncMgr::DoLanSetupInstall___s__App_CreateProcess___Timeout_Failed
push 0xffffffffffffffff
push 0x1000
push 0x74e818
call fcn.005b8769
add esp, 0x14
jmp 0x460ad7
mov eax, edi
push dword [ebx]
push eax
push str.CFuncMgr::DoLanSetupInstall___s__App_CreateProcess___ExitCode:0x_08x
push 0xffffffffffffffff
push 0x1000
push 0x74e818
call fcn.005b8769
add esp, 0x18
push 0x74e818
call fcn.00418730
mov eax, dword [ebp - 0xe4]
test eax, eax
je 0x460a71
push eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
cmp dword [edi + 0x14], 8
jb 0x460a79
mov edi, dword [edi]
push edi
push str.CFuncMgr::DoLanSetupInstall___s__App_Install_End
push 0xffffffffffffffff
push 0x1000
push 0x74e818
call fcn.005b8769
add esp, 0x14
push 0x74e818
call fcn.00418730
push str.____________________________________________________
call fcn.00418730
mov edi, 1
jmp 0x460aed
cmp dword [edi + 0x14], 8
jb 0x460ab6
mov edi, dword [edi]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push edi
push str.CFuncMgr::DoLanSetupInstall___s__App_CreateProcess___Failed_:0x_08x
push 0xffffffffffffffff
push 0x1000
push 0x74e818
call fcn.005b8769
add esp, 0x18
push 0x74e818
call fcn.00418730
push str.____________________________________________________
call fcn.00418730
xor edi, edi
add esi, 0xfffffff0
mov byte [ebp - 4], 0x14
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x460b0b
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x78], 8
jb 0x460b1f
push dword [ebp - 0x8c]
call fcn.0049500b
add esp, 4
xor eax, eax
cmp dword [ebp - 0x48], 8
mov dword [ebp - 0x78], 7
mov dword [ebp - 0x7c], 0
mov word [ebp - 0x8c], ax
jb 0x460b47
push dword [ebp - 0x5c]
call fcn.0049500b
add esp, 4
xor eax, eax
cmp dword [ebp - 0x60], 8
mov dword [ebp - 0x48], 7
mov dword [ebp - 0x4c], 0
mov word [ebp - 0x5c], ax
jb 0x460b6c
push dword [ebp - 0x74]
call fcn.0049500b
add esp, 4
xor eax, eax
cmp dword [ebp - 0x30], 8
mov dword [ebp - 0x60], 7
mov dword [ebp - 0x64], 0
mov word [ebp - 0x74], ax
jb 0x460b91
push dword [ebp - 0x44]
call fcn.0049500b
add esp, 4
xor eax, eax
cmp dword [ebp - 0x18], 8
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x34], 0
mov word [ebp - 0x44], ax
jb 0x460bb6
push dword [ebp - 0x2c]
call fcn.0049500b
add esp, 4
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005b7f8f
mov esp, ebp
pop ebp
ret 0xc