Function at 0x51d280
Capabilities:
Create process on windows

Disassembly:
push ebp
lea ebp, [esp - 0x2fc]
sub esp, 0x2fc
push 0xffffffffffffffff
push 0x555483
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x58cb30]
xor eax, ebp
mov dword [ebp + 0x2f8], eax
push ebx
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 0x304]
call fcn.004fbe10
push 0x2018
push 0
push 0x610a70
call fcn.00532770
add esp, 0xc
push 0
push 0x71
push 0x70
push 0x6f
push str.WizardLogo.png
push 1
call fcn.004da800
mov dword [0x610a68], eax
mov ecx, 0x5c8968
mov eax, dword [0x5d3758]
push 1
mov dword [ebp + 0x224], str.WIZARDCMD
mov dword [ebp + 0x230], 0x51dfd0
mov dword [ebp + 0x25c], str.WIZARDARC
mov dword [ebp + 0x268], 0x51da80
mov dword [ebp + 0x294], str.WIZARDEXTR
mov dword [ebp + 0x2a0], 0x51e2a0
mov dword [ebp + 0x2cc], str.WIZARDADDOPT
mov dword [ebp + 0x2d8], 0x51d810
mov dword [ebp - 0x40], 0x34
mov dword [ebp - 0x3c], 0x22a
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], eax
call fcn.004dab70
cmp byte [0x5943f4], 0
mov dword [ebp - 0x30], eax
lea eax, [ebp + 0x218]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], eax
je 0x51d3b4
push 0x800
push 0x610a74
mov ecx, 0x5c3bd0
call fcn.004099c0
mov dword [0x610a70], 0
mov dword [ebp - 0x24], 2
mov eax, dword [0x5d3758]
mov ecx, 0x5d37b8
mov dword [ebp + 0x220], eax
mov dword [ebp + 0x258], eax
mov dword [ebp + 0x290], eax
mov dword [ebp + 0x2c8], eax
lea eax, [ebp + 0x218]
push 4
push eax
lea eax, [ebp - 0x40]
mov dword [ebp + 0x218], 0x38
push eax
mov dword [ebp + 0x21c], 0x20
mov dword [ebp + 0x250], 0x38
mov dword [ebp + 0x254], 0x20
mov dword [ebp + 0x288], 0x38
mov dword [ebp + 0x28c], 0x20
mov dword [ebp + 0x2c0], 0x38
mov dword [ebp + 0x2c4], 0x20
call fcn.004b66f0
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.COMCTL32.dll_PropertySheetW]
mov esi, eax
mov ecx, 0x5d37b8
push 4
lea eax, [ebp + 0x218]
test esi, esi
push eax
setg bl
call fcn.004b66a0
test esi, esi
jle 0x51d7d9
mov eax, dword [0x610a70]
sub eax, 0
je 0x51d5fd
sub eax, 1
je 0x51d480
sub eax, 1
jne 0x51d7d9
push 0x610a74
call fcn.004a3770
push 0x800
cmp eax, 0x610a74
jne 0x51d4c5
push 0x5b332a
call fcn.004575a0
push 0x800
push 0x5b332a
call fcn.004a1860
push 0x800
push 0x610a74
push 0x5b332a
call fcn.004bda80
jmp 0x51d4d4
push 0x610a74
push 0x5b332a
call fcn.004bdae0
cmp byte [0x612a77], 0
mov al, byte [0x612a75]
mov dword [0x5abf40], 3
mov dword [0x5abf3c], 2
mov byte [0x5abf72], al
je 0x51d505
mov dword [0x5abf10], 2
cmp dword [0x610a70], 2
mov eax, dword [0x612a78]
mov ecx, dword [0x612a7c]
mov dword [0x5abf48], eax
mov dword [0x5abf4c], ecx
jne 0x51d55d
push 0x5b332a
call fcn.00491350
test al, al
je 0x51d55d
push 0
push 1
push 0x5b332a
mov ecx, 0x5c3bd0
call fcn.0040ab00
cmp eax, 1
jne 0x51d5e0
mov eax, dword [0x5c3bd4]
mov dword [0x5ae2c8], eax
jmp 0x51d5e0
cmp byte [0x612a76], 0
je 0x51d5a3
push 0x558920
push 0x5b332a
call fcn.004a18a0
test al, al
jne 0x51d58d
push 0x800
push str..exe
push 0x5b332a
call fcn.004bda80
push 0x800
push 0x5588cc
push 0x5a5ee8
call fcn.004bdae0
jmp 0x51d5e0
cmp dword [0x5ae2c8], 0
mov esi, 0x558b94
je 0x51d5b6
mov esi, str..zip
lea eax, [esi + 2]
push eax
push 0x5b332a
call fcn.004a18a0
test al, al
jne 0x51d5d8
push 0x800
push esi
push 0x5b332a
call fcn.004bda80
xor eax, eax
mov word [0x5a5ee8], ax
push 1
push 0x5b332a
call fcn.004a34a0
push 0
mov ecx, 0x5c3bd0
call fcn.00408370
jmp 0x51d7d9
push 0
push 1
push 0x610a74
mov ecx, 0x5c3bd0
call fcn.0040ab00
cmp eax, 0xffffffff
jne 0x51d629
push 0x610a74
mov ecx, 0x5d381c
call fcn.004880a0
jmp 0x51d7d9
cmp eax, 1
jne 0x51d7d9
push 0
call fcn.004f8320
push 0x800
push 0x5a6eee
push 0x611a74
mov ecx, 0x5c6810
call fcn.0045dd10
push 0x5a6eee
call fcn.00491350
test al, al
jne 0x51d699
push 0
push 0
push 0x5a6eee
call fcn.00490c10
test al, al
jne 0x51d699
push 0x5a6eee
push 0x1f7
call fcn.004b7300
push eax
call fcn.005037c0
add esp, 8
mov ecx, 0x5d381c
call fcn.004885d0
jmp 0x51d7d9
xor eax, eax
mov dword [ebp + 0x124], 0
mov dword [ebp + 0x134], 0
mov dword [ebp + 0x138], 0
mov dword [ebp + 0x134], 0
mov dword [ebp + 0x138], 7
mov word [ebp + 0x124], ax
mov dword [ebp - 4], eax
mov dword [ebp + 0x140], eax
mov dword [ebp + 0x144], eax
mov dword [ebp - 4], 2
lea eax, [ebp]
push eax
mov ecx, 0x5c3bd0
call fcn.0040a200
push 0x800
push 0x5b332a
mov ecx, 0x5c3bd0
call fcn.004099c0
mov eax, dword [ebp + 0x168]
mov ecx, 0x5b432c
mov dword [0x5ae2c8], eax
call fcn.004bddc0
push 0x5588cc
mov ecx, 0x5b432c
call fcn.004bdbd0
push 0
push 0
mov ecx, 0x5c3bd0
mov byte [0x5ac1e1], 0
call fcn.00409480
cmp word [0x611a74], 0
je 0x51d75e
push 0x800
push 0x5a6eee
call fcn.004a1860
push 1
push 0x558718
push 0
push 0x5a6eee
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp + 0x138]
cmp ecx, 8
jb 0x51d7bc
mov edx, dword [ebp + 0x124]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x51d7b2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51d7ff
push ecx
push edx
call fcn.0053000d
add esp, 8
xor eax, eax
mov dword [ebp + 0x134], 0
mov dword [ebp + 0x138], 7
mov word [ebp + 0x124], ax
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp + 0x2f8]
xor ecx, ebp
call fcn.00530218
lea esp, [ebp + 0x2fc]
pop ebp
ret 4
call fcn.005345df
int3