Function at 0x4e732c
Capabilities:
Create process on windows

Disassembly:
push 0x40
mov eax, 0x6e7d94
call fcn.00682c5e
xor ebx, ebx
lea ecx, [ebp + 8]
inc ebx
mov dword [ebp - 4], ebx
call sym.txupd.exe_public:_bool___thiscall_CTXStringW::IsEmpty_void_const
test al, al
je 0x4e7351
xor ebx, ebx
jmp 0x4e74fa
xor edi, edi
lea eax, [ebp + 8]
push edi
push ecx
mov ecx, esp
push eax
call sym.txupd.exe_public:_void___thiscall_CTXStringW::constructor_class_CTXStringW_const__
lea eax, [ebp - 0x10]
push eax
call fcn.004d2a20
add esp, 0xc
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 2
call fcn.0051b603
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call sym.txupd.exe_public:_void___thiscall_CTXStringW::destructor_void_
lea eax, [ebp + 8]
push edi
push eax
call fcn.004d1a73
pop ecx
pop ecx
lea ecx, [ebp + 0xc]
call sym.txupd.exe_public:_int___thiscall_CTXStringW::GetLength_void_const
test eax, eax
je 0x4e73cd
push edi
push ecx
lea eax, [ebp + 0xc]
mov ecx, esp
push eax
call sym.txupd.exe_public:_void___thiscall_CTXStringW::constructor_class_CTXStringW_const__
lea eax, [ebp - 0x10]
push eax
call fcn.004d2a20
add esp, 0xc
push eax
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 3
call fcn.0051b603
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call sym.txupd.exe_public:_void___thiscall_CTXStringW::destructor_void_
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x10]
push 0x7026c4
push eax
call sym.txupd.exe_class_CTXStringW___cdecl_operator_wchar_t_const___class_CTXStringW_const__
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 4
call sym.txupd.exe_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const
push eax
call sym.txupd.exe_int___cdecl_FS::IsFileExist_wchar_t_const__
mov ebx, eax
mov byte [ebp - 4], 1
pop ecx
neg ebx
lea ecx, [ebp - 0x10]
sbb bl, bl
call sym.txupd.exe_public:_void___thiscall_CTXStringW::destructor_void_
add bl, 1
je 0x4e7451
lea ecx, [ebp + 8]
call sym.txupd.exe_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const
push eax
mov esi, str.ext_action:__shellexc__file_doesnt_exist.__s__n
push esi
push 0x70282c
push 2
push str.CExtActioner::ShellExecuteW
push 0x18c
push str.E:FixReplayAttackscodingTXUpdate_servicelogicExtAction.cpp
call fcn.004ce3cb
add esp, 0x1c
lea ecx, [ebp + 8]
call sym.txupd.exe_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const
push eax
push esi
call fcn.0047380a
pop ecx
xor ebx, ebx
pop ecx
inc ebx
jmp 0x4e74fa
lea ecx, [ebp + 0xc]
call sym.txupd.exe_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const
push eax
lea ecx, [ebp + 8]
call sym.txupd.exe_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const
push eax
mov esi, str.ExtAction_Shellexecute__proc_path:_s__param:_s_n
push esi
push 0x70282c
push 2
push str.CExtActioner::ShellExecuteW
push 0x18f
push str.E:FixReplayAttackscodingTXUpdate_servicelogicExtAction.cpp
call fcn.004ce3cb
add esp, 0x20
lea ecx, [ebp + 0xc]
call sym.txupd.exe_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const
push eax
lea ecx, [ebp + 8]
call sym.txupd.exe_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const
push eax
push esi
call fcn.0047380a
push 0x3c
pop esi
push esi
lea eax, [ebp - 0x4c]
push edi
push eax
call fcn.00689b00
add esp, 0x18
mov dword [ebp - 0x4c], esi
lea ecx, [ebp + 8]
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x48], 0x540
mov dword [ebp - 0x40], 0x700aa8
call sym.txupd.exe_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const
lea ecx, [ebp + 0xc]
mov dword [ebp - 0x3c], eax
call sym.txupd.exe_public:_int___thiscall_CTXStringW::GetLength_void_const
test eax, eax
jne 0x4e74e0
mov dword [ebp - 0x38], edi
jmp 0x4e74eb
lea ecx, [ebp + 0xc]
call sym.txupd.exe_public:_wchar_t_const____thiscall_CTXStringW::operator_wchar_t_const__void_const
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x30], edi
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov ebx, eax
lea ecx, [ebp + 8]
call sym.txupd.exe_public:_void___thiscall_CTXStringW::destructor_void_
lea ecx, [ebp + 0xc]
call sym.txupd.exe_public:_void___thiscall_CTXStringW::destructor_void_
mov eax, ebx
call fcn.00682c27
ret 8