Function at 0x48db70
Capabilities:
Create process on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x510ceb
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x7d8
mov eax, dword [0x566040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebx + 0x14]
mov dword [eax], 1
mov eax, dword [ebx + 0xc]
cmp eax, 0x258
jg 0x48e1fb
je 0x48e15b
add eax, 0xffffff38
cmp eax, 0x69
ja case.0x48e209.602
movzx eax, byte [eax + 0x48e4b0]
jmp dword [eax*4 + 0x48e498]
push str.LAYOUT:XML_DLG_SYS_SETTING
lea ecx, [ebp - 0x420]
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SHostDialog::constructor_wchar_t_const__]
xorps xmm0, xmm0
mov dword [ebp - method.SOUI::SDropDownWnd2.2.virtual_0], 0x52f6dc
lea esi, [edi + 0x43c]
mov dword [ebp - 0x41c], 0x52f5dc
mov dword [ebp - method.SOUI::SQrCtrl.virtual_0], 0x52f594
mov dword [ebp - method.SOUI::SQrCtrl.1.virtual_0], 0x52f59c
mov dword [ebp - 0x1e4], 0x52f5b0
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x58], 0
movups xmmword [ebp - 0x78], xmm0
mov dword [ebp - 0x54], esi
movups xmmword [ebp - 0x68], xmm0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x420]
push dword [edi + 0x248]
call fcn.00470f70
lea ecx, [ebp - 0x420]
mov dword [esi], 0
mov dword [ebp - method.SOUI::SDropDownWnd2.2.virtual_0], vtable.SOUI::SMaskDialog.4.0
mov dword [ebp - method.SOUI::SMaskDialog.2.virtual_0], vtable.SOUI::SMaskDialog.2.0
mov dword [ebp - method.SOUI::SQrCtrl.virtual_0], vtable.SOUI::SMaskDialog.0
mov dword [ebp - method.SOUI::SQrCtrl.1.virtual_0], vtable.SOUI::SMaskDialog.1.0
mov dword [ebp - method.SOUI::SMaskDialog.3.virtual_0], vtable.SOUI::SMaskDialog.3.0
call dword [sym.imp.soui.dll_public_virtual:_void___thiscall_SOUI::SHostDialog::destructor_void_]
jmp case.0x48e209.602
push str.LAYOUT:XML_DLG_ABOUT
lea ecx, [ebp - 0x7b8]
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SHostDialog::constructor_wchar_t_const__]
mov dword [ebp - method.SOUI::SDropDownWnd2.2.virtual_0], 0x529360
mov dword [ebp - 0x7b4], 0x52940c
mov dword [ebp - method.SOUI::SQrCtrl.virtual_0], 0x529404
mov dword [ebp - method.SOUI::SQrCtrl.1.virtual_0], 0x52950c
mov dword [ebp - 0x57c], 0x529350
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x7b8]
push dword [edi + 0x248]
call fcn.00470f70
lea ecx, [ebp - 0x7b8]
mov dword [ebp - method.SOUI::SDropDownWnd2.2.virtual_0], vtable.SOUI::SMaskDialog.4.0
mov dword [ebp - method.SOUI::SMaskDialog.2.virtual_0], vtable.SOUI::SMaskDialog.2.0
mov dword [ebp - method.SOUI::SQrCtrl.virtual_0], vtable.SOUI::SMaskDialog.0
mov dword [ebp - method.SOUI::SQrCtrl.1.virtual_0], vtable.SOUI::SMaskDialog.1.0
mov dword [ebp - method.SOUI::SMaskDialog.3.virtual_0], vtable.SOUI::SMaskDialog.3.0
call dword [sym.imp.soui.dll_public_virtual:_void___thiscall_SOUI::SHostDialog::destructor_void_]
jmp case.0x48e209.602
call fcn.00476fb0
test al, al
je case.0x48e209.602
push str.LAYOUT:XML_DLG_EXCHANGE_CODE
lea ecx, [ebp - 0x408]
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SHostDialog::constructor_wchar_t_const__]
mov dword [ebp - 4], 2
xorps xmm0, xmm0
xor eax, eax
mov dword [ebp - method.SOUI::SDropDownWnd2.2.virtual_0], vtable.SOUI::SExchangeCodeDlg.4.0
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - method.SOUI::SExchangeCodeDlg.virtual_0], vtable.SOUI::SExchangeCodeDlg.0
mov dword [ebp - method.SOUI::SQrCtrl.virtual_0], vtable.SOUI::SExchangeCodeDlg.2.0
mov dword [ebp - method.SOUI::SQrCtrl.1.virtual_0], vtable.SOUI::SExchangeCodeDlg.3.0
mov dword [ebp - method.SOUI::SExchangeCodeDlg.1.virtual_0], vtable.SOUI::SExchangeCodeDlg.1.0
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
push eax
push 0x521a68
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 3
call fcn.004169d0
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x408]
push dword [edi + 0x248]
call fcn.00470f70
cmp eax, 1
jne 0x48dff8
mov esi, dword [edi + 0x248]
call fcn.0041c830
call dword [0x571534]
test al, al
je 0x48de40
call dword [0x571530]
test eax, eax
jg 0x48de40
push 0x522138
push 0
push 0x524
push str.adaptercenterSAdapterCenter.cpp
call dword [0x571538]
add esp, 0x10
push 0x48c350
push esi
call dword [0x5714c8]
add esp, 4
mov ecx, esp
mov dword [ebp - 0x7e0], esp
push 0x521a68
call dword [sym.imp.utilities.dll_public:_void___thiscall_SOUI::TStringT_wchar_t__struct_SOUI::wchar_traits_::constructor_wchar_t_const__]
push ecx
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x7e4], esp
push 0x531340
call dword [sym.imp.utilities.dll_public:_void___thiscall_SOUI::TStringT_wchar_t__struct_SOUI::wchar_traits_::constructor_wchar_t_const__]
push ecx
mov byte [ebp - 4], 6
mov ecx, esp
mov dword [ebp - 0x7d8], esp
push 0x52cccc
call dword [sym.imp.utilities.dll_public:_void___thiscall_SOUI::TStringT_wchar_t__struct_SOUI::wchar_traits_::constructor_wchar_t_const__]
mov byte [ebp - 4], 7
lea eax, [ebp - 0x60]
cmp dword [ebp - 0x4c], 7
xorps xmm0, xmm0
mov esi, dword [ebp - 0x50]
cmova eax, dword [ebp - 0x60]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x7d4], eax
push 1
push 3
movups xmmword [ebp - 0x2c], xmm0
cmp esi, 0x7ffffffe
ja 0x48e48b
cmp esi, 7
ja 0x48dee8
mov ecx, 7
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2c], xmm0
jmp 0x48df46
mov eax, esi
or eax, 7
cmp eax, 0x7ffffffe
jbe 0x48defb
mov eax, 0x7ffffffe
jmp 0x48df05
mov ecx, 0xa
cmp eax, ecx
cmovb eax, ecx
mov dword [ebp - 0x7dc], eax
lea eax, [ebp - 0x7dc]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00416ef0
mov ecx, eax
mov dword [ebp - 0x1c], esi
mov eax, dword [ebp - 0x7dc]
mov dword [ebp - 0x18], eax
lea eax, [esi*2 + 2]
push eax
push dword [ebp - 0x7d4]
mov dword [ebp - 0x2c], ecx
push ecx
call fcn.004d7980
mov ecx, dword [ebp - 0x18]
add esp, 0x14
cmp ecx, 7
mov byte [ebp - 4], 8
push ecx
lea eax, [ebp - 0x2c]
mov ecx, esp
cmova eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.utilities.dll_public:_void___thiscall_SOUI::TStringT_wchar_t__struct_SOUI::wchar_traits_::constructor_wchar_t_const__]
lea ecx, [ebp - 0x7d0]
mov byte [ebp - 4], 9
call fcn.004714d0
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x48dfab
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x48dfa1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48e490
push ecx
push edx
call fcn.004d3111
add esp, 8
push dword [edi + 0x248]
xor eax, eax
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x7d0]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00470f70
cmp eax, 2
jne 0x48dfed
push 0
push 0x130
push 0x7f8
push dword [edi + 0x248]
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [ebp - 0x7d0]
call fcn.00471620
lea ecx, [ebp - 0x408]
call fcn.00461510
jmp case.0x48e209.602
call fcn.00455ed0
mov al, byte [eax + 4]
test al, al
je 0x48e0af
push ecx
mov ecx, esp
mov dword [ebp - 0x7d8], esp
push 0x521a68
call dword [sym.imp.utilities.dll_public:_void___thiscall_SOUI::TStringT_wchar_t__struct_SOUI::wchar_traits_::constructor_wchar_t_const__]
push ecx
mov dword [ebp - 4], 0xc
mov ecx, esp
mov dword [ebp - 0x7e4], esp
push 0x521a68
call dword [sym.imp.utilities.dll_public:_void___thiscall_SOUI::TStringT_wchar_t__struct_SOUI::wchar_traits_::constructor_wchar_t_const__]
push ecx
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x7e0], esp
push 0x521a68
call dword [sym.imp.utilities.dll_public:_void___thiscall_SOUI::TStringT_wchar_t__struct_SOUI::wchar_traits_::constructor_wchar_t_const__]
push 0
push 2
push ecx
mov ecx, esp
mov byte [ebp - 4], 0xe
push str.ck_W
call dword [sym.imp.utilities.dll_public:_void___thiscall_SOUI::TStringT_wchar_t__struct_SOUI::wchar_traits_::constructor_wchar_t_const__]
lea ecx, [ebp - 0x7d0]
mov dword [ebp - 4], 0xffffffff
call fcn.004714d0
mov dword [ebp - 4], 0xf
lea ecx, [ebp - 0x7d0]
push dword [edi + 0x248]
call fcn.00470f70
lea ecx, [ebp - 0x7d0]
call fcn.00471620
jmp case.0x48e209.602
mov ecx, edi
call fcn.0048c8a0
mov esi, dword [edi + 0x248]
call fcn.0041c830
call dword [0x571534]
test al, al
je 0x48e0ef
call dword [0x571530]
test eax, eax
jg 0x48e0ef
push str._u7bv
push 0
push 0x512
push str.adaptercenterSAdapterCenter.cpp
call dword [0x571538]
add esp, 0x10
push 0x48c390
push esi
call dword [0x571430]
add esp, 8
jmp case.0x48e209.602
lea ecx, [edi + 0x23c]
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::CSimpleWnd::IsIconic_void_const]
test eax, eax
jne 0x48e127
lea ecx, [edi + 0x23c]
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::CSimpleWnd::IsWindowVisible_void_const]
test eax, eax
jne case.0x48e209.602
lea ecx, [edi + 0x23c]
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::CSimpleWnd::IsIconic_void_const]
neg eax
sbb eax, eax
and eax, 0xfffffffc
add eax, 5
push eax
push dword [edi + 0x248]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [edi + 0x248]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp case.0x48e209.602
call fcn.004796e0
mov edi, eax
lea ecx, [edi + 0x23c]
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::CSimpleWnd::IsWindowVisible_void_const]
test eax, eax
jne 0x48e1dc
mov ecx, dword [0x571854]
test ecx, ecx
jne 0x48e1a8
push 0xc
call fcn.004d314b
mov ecx, eax
add esp, 4
mov dword [ebp - 0x7d8], ecx
mov dword [0x571854], ecx
mov dword [ecx], vtable.SOUI::SMantleCenter.0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
cmp dword [ecx + 4], 0
je 0x48e1e8
mov eax, 1
lock xadd dword [ecx + 8], eax
inc eax
cmp eax, 1
jne 0x48e1e8
mov ecx, dword [ecx + 4]
push eax
push eax
call dword [sym.imp.soui.dll_public:_void___thiscall_SOUI::SWindow::SetVisible_int__int_]
push 5
push dword [edi + 0x248]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.0x48e209.602
lea ecx, [edi + 0x23c]
call dword [sym.imp.soui.dll_public:_int___thiscall_SOUI::CSimpleWnd::IsWindowVisible_void_const]
push 5
push dword [edi + 0x248]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp case.0x48e209.602
add eax, 0xfffffda7
cmp eax, 4
ja case.0x48e209.602
jmp dword [eax*4 + 0x48e51c]
call fcn.004748d0
jmp 0x48e160
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x571c44]
cmp eax, dword [ecx + 4]
jle 0x48e272
push 0x571c44
call fcn.004d3205
add esp, 4
cmp dword [0x571c44], 0xffffffff
jne 0x48e272
mov dword [ebp - 4], 0x10
call fcn.004b5bc0
push 0x5158a0
call fcn.004d37ba
add esp, 4
mov dword [ebp - 4], 0xffffffff
push 0x571c44
call fcn.004d31b4
add esp, 4
mov edx, 0x571c60
lea ecx, [ebp - 0x2c]
call fcn.00416450
push 0xc8
lea eax, [ebp - 0x6ec]
mov dword [ebp - 4], 0x11
push 0
push eax
mov dword [ebp - 0x6f0], 0
call fcn.004d7f00
add esp, 0xc
lea eax, [ebp - 0x624]
push 0x1fe
push 0
push eax
call fcn.004d7f00
add esp, 0xc
call fcn.0041c830
lea eax, [ebp - 0x6f0]
push eax
push ecx
call fcn.0041e4f0
test al, al
je 0x48e2ff
lea ecx, [ebp - 0x624]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x48e2e0
sub ecx, edx
lea eax, [ebp - 0x624]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x2c]
call fcn.004169d0
cmp dword [ebp - 0x18], 7
lea eax, [ebp - 0x2c]
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmova eax, dword [ebp - 0x2c]
push 1
push 0
push 0
push eax
push 0x521f8c
push 0
call esi
cmp eax, 0x20
ja 0x48e343
cmp dword [ebp - 0x18], 7
lea eax, [ebp - 0x2c]
push 1
cmova eax, dword [ebp - 0x2c]
push 0
push eax
push 0x521f98
push 0x521f8c
push 0
call esi
lea ecx, [ebp - 0x2c]
jmp 0x48e461
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x571c44]
cmp eax, dword [ecx + 4]
jle 0x48e3a3
push 0x571c44
call fcn.004d3205
add esp, 4
cmp dword [0x571c44], 0xffffffff
jne 0x48e3a3
mov dword [ebp - 4], 0x12
call fcn.004b5bc0
push 0x5158a0
call fcn.004d37ba
add esp, 4
mov dword [ebp - 4], 0xffffffff
push 0x571c44
call fcn.004d31b4
add esp, 4
mov edx, 0x571c78
lea ecx, [ebp - 0x2c]
call fcn.00416450
jmp 0x48e2ff
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x571c44]
cmp eax, dword [ecx + 4]
jle 0x48e40d
push 0x571c44
call fcn.004d3205
add esp, 4
cmp dword [0x571c44], 0xffffffff
jne 0x48e40d
mov dword [ebp - 4], 0x13
call fcn.004b5bc0
push 0x5158a0
call fcn.004d37ba
add esp, 4
mov dword [ebp - 4], 0xffffffff
push 0x571c44
call fcn.004d31b4
add esp, 4
mov edx, 0x571c90
lea ecx, [ebp - 0x44]
call fcn.00416450
cmp dword [ebp - 0x30], 7
lea eax, [ebp - 0x44]
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmova eax, dword [ebp - 0x44]
push 1
push 0
push 0
push eax
push 0x521f8c
push 0
call esi
cmp eax, 0x20
ja 0x48e45e
cmp dword [ebp - 0x30], 7
lea eax, [ebp - 0x44]
push 1
cmova eax, dword [ebp - 0x44]
push 0
push eax
push 0x521f98
push 0x521f8c
push 0
call esi
lea ecx, [ebp - 0x44]
call fcn.00414f60
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004d30fe
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
call fcn.00401610
call fcn.004e2a5c
nop dword [eax]
add esp, ecx
dec eax
add ah, ch
fisttp dword [eax]
rcr ah, 0x48
add byte [esi - 35], bl
dec eax
add byte [eax], cl
loopne 0x48e4f3
add byte [esi - 0x1c], ah
dec eax
add byte [eax], al
add eax, 0x5050505
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 17106181
add al, byte [1711538949]
add eax, 0x5050505
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 33621253
add eax, 1711538949
nop
adc dl, ah
dec eax
add byte [esi - 0x1c], ah
dec eax
add byte [edx], bl
loop 0x48e56f
add byte [ebx - 0x1d], cl
dec eax
add byte [ebp + 0x530048e3], dh
push ebx
stc