Function at 0x4b3d80
Capabilities:
Create process on windows
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x61061b
mov eax, dword fs:[0]
push eax
mov eax, 0x26c8
call fcn.005ca7c0
mov eax, dword [0x6c6f60]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x25cc], ecx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x35c]
jne 0x4b3de1
mov ecx, dword [ebp - 0x25cc]
call fcn.004bd610
jmp 0x4b4cc0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x358]
jne 0x4b3e3f
push 0x68ea08
push 0x6762c3
push 0
push 0
push 0
push str.ClickHide
push 0x2d00
call fcn.004dcb80
mov ecx, eax
call fcn.004dcc50
push 0
push 0xf020
push 0x112
mov ecx, dword [ebp - 0x25cc]
call fcn.005001dc
jmp 0x4b4cc0
lea eax, [ebp - 0x2544]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov edx, dword [edx]
mov ecx, dword [eax + 0x108]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x2620], eax
mov ecx, dword [ebp - 0x2620]
mov dword [ebp - 0x261c], ecx
mov dword [ebp - 4], 0
push str.install_minbtn
mov ecx, dword [ebp - 0x261c]
call fcn.004f0720
mov byte [ebp - 0x25ce], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2544]
call fcn.004f065e
movzx edx, byte [ebp - 0x25ce]
test edx, edx
je 0x4b3ecc
push 0
push 0xf020
push 0x112
mov ecx, dword [ebp - 0x25cc]
call fcn.005001dc
jmp 0x4b4cc0
lea eax, [ebp - 0x24c0]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov edx, dword [edx]
mov ecx, dword [eax + 0x108]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x2618], eax
mov ecx, dword [ebp - 0x2618]
mov dword [ebp - 0x2614], ecx
mov dword [ebp - 4], 1
push str.install_closebtn
mov ecx, dword [ebp - 0x2614]
call fcn.004f0720
mov byte [ebp - 0x25cf], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24c0]
call fcn.004f065e
movzx edx, byte [ebp - 0x25cf]
test edx, edx
je 0x4b3f48
mov ecx, dword [ebp - 0x25cc]
call fcn.004bd610
jmp 0x4b4cc0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x360]
jne 0x4b3f88
push 1
mov eax, dword [ebp - 0x25cc]
mov ecx, dword [eax + 0x368]
mov edx, dword [ebp - 0x25cc]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x368]
mov edx, dword [eax + 0x1bc]
call edx
jmp 0x4b4cc0
lea eax, [ebp - 0x25c8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov edx, dword [edx]
mov ecx, dword [eax + 0x108]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x2654], eax
mov ecx, dword [ebp - 0x2654]
mov dword [ebp - 0x2650], ecx
mov dword [ebp - 4], 2
mov edx, dword [str.step_last]
push edx
mov ecx, dword [ebp - 0x2650]
call fcn.004f0720
mov byte [ebp - 0x25d0], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x25c8]
call fcn.004f065e
movzx eax, byte [ebp - 0x25d0]
test eax, eax
je 0x4b402a
mov ecx, dword [ebp - 0x25cc]
call fcn.004bc470
push 0
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [ecx + 0x368]
mov eax, dword [ebp - 0x25cc]
mov edx, dword [edx]
mov ecx, dword [eax + 0x368]
mov eax, dword [edx + 0x1bc]
call eax
jmp 0x4b4cc0
lea ecx, [ebp - 0x243c]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x108]
mov ecx, dword [ebp + 8]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x108]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x264c], eax
mov ecx, dword [ebp - 0x264c]
mov dword [ebp - 0x2648], ecx
mov dword [ebp - 4], 3
mov edx, dword [str.install_btn]
push edx
mov ecx, dword [ebp - 0x2648]
call fcn.004f0720
mov byte [ebp - 0x25d1], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x243c]
call fcn.004f065e
movzx eax, byte [ebp - 0x25d1]
test eax, eax
je 0x4b4484
push 0
push 2
push 0x68eab8
push 0x1d3
push 0x68ea74
push 0x80
lea ecx, [ebp - 0x26d4]
call fcn.00486a40
mov dword [ebp - 0x2640], eax
mov ecx, dword [ebp - 0x2640]
mov dword [ebp - 0x263c], ecx
mov dword [ebp - 4], 4
push str._Click_install_button
mov edx, dword [0x6c7b98]
push edx
push 1
mov eax, dword [ebp - 0x263c]
push eax
call fcn.00486b20
add esp, 0xc
mov ecx, eax
call fcn.0049bd50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x26d4]
call fcn.00486ac0
push 0x68eaa4
push 0x67630b
push 0x67630a
push 0
push 0
push str.ClickInstall001
push 0x2ced
call fcn.004dcb80
mov ecx, eax
call fcn.004dcc50
push 0
push 0x67634a
push str.2.DownStart
push 0x68eb2c
call fcn.004dcb80
mov ecx, eax
call fcn.004dcc20
mov ecx, dword [ebp - 0x25cc]
mov ecx, dword [ecx + 0x470]
call fcn.00503f5a
mov byte [ebp - 0x25d2], al
movzx edx, byte [ebp - 0x25d2]
test edx, edx
je 0x4b4182
mov dword [ebp - 0x25e0], str.Enable
jmp 0x4b418c
mov dword [ebp - 0x25e0], str.Disabled
push 0
mov eax, dword [ebp - 0x25e0]
push eax
push str.ImprovementPlan
push 0x68eb58
call fcn.004dcb80
mov ecx, eax
call fcn.004dcc20
push 0x67634b
lea ecx, [ebp - 0x2028]
call fcn.0047c100
mov dword [ebp - 4], 5
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [ecx + 0x4d0]
mov dword [ebp - 0x25e4], edx
cmp dword [ebp - 0x25e4], 0x13
ja case.default.0x4b41e7
mov eax, dword [ebp - 0x25e4]
jmp dword [eax*4 + 0x4b4cdc]
push 0x68eb70
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push str.Japanese
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push 0x68eb78
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push str.Spanish
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push str.German
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push str.French
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push str.Russian
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push str.Portuguese
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push str.Arabic
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push str.Italiano
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push str.ChineseTrad
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push str.Korean
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push str.Nederlands
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push str.Indonesian
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push str.Turkish
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push str.Hindi
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push str.Thai
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push str.Malay
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push str.Swedish
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push str.Czech
lea ecx, [ebp - 0x2028]
call fcn.004a9090
jmp 0x4b438d
push 0x68ec20
lea ecx, [ebp - 0x2028]
call fcn.004a9090
push 0
lea ecx, [ebp - 0x2028]
call fcn.0047bff0
push eax
push str.SetLanguage
push 0x68ec30
call fcn.004dcb80
mov ecx, eax
call fcn.004dcc20
lea ecx, [ebp - 0x23b8]
push ecx
mov edx, dword [ebp - 0x25cc]
mov eax, dword [edx + 0x36c]
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x36c]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x2638], eax
mov ecx, dword [ebp - 0x2638]
mov dword [ebp - 0x2634], ecx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x2634]
call fcn.004f0b96
push eax
lea ecx, [ebp - 0x2070]
call fcn.0048c140
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x23b8]
call fcn.004f065e
mov edx, dword [ebp - 0x25cc]
add edx, 0x528
push edx
lea eax, [ebp - 0x2070]
push eax
call fcn.004ca640
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x4b4453
push 0
push 0x6763a6
push str.SetPath
push 0x68ec4c
call fcn.004dcb80
mov ecx, eax
call fcn.004dcc20
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2070]
call fcn.0047dc50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2028]
call fcn.0047c030
mov ecx, dword [ebp - 0x25cc]
call fcn.004bd0a0
jmp 0x4b4cc0
lea edx, [ebp - 0x2334]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x108]
mov edx, dword [ebp + 8]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x108]
mov edx, dword [eax + 4]
call edx
mov dword [ebp - 0x2630], eax
mov eax, dword [ebp - 0x2630]
mov dword [ebp - 0x262c], eax
mov dword [ebp - 4], 9
mov ecx, dword [str.finish_btn]
push ecx
mov ecx, dword [ebp - 0x262c]
call fcn.004f0720
mov byte [ebp - 0x25d3], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2334]
call fcn.004f065e
movzx edx, byte [ebp - 0x25d3]
test edx, edx
je 0x4b451c
push 1
push 0x6763a7
push 0x68ec60
push 0x68ec54
call fcn.004dcb80
mov ecx, eax
call fcn.004dcc20
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x4b4cc0
lea eax, [ebp - 0x22b0]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov edx, dword [edx]
mov ecx, dword [eax + 0x108]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x2628], eax
mov ecx, dword [ebp - 0x2628]
mov dword [ebp - 0x2624], ecx
mov dword [ebp - 4], 0xa
mov edx, dword [str.browser_btn]
push edx
mov ecx, dword [ebp - 0x2624]
call fcn.004f0720
mov byte [ebp - 0x25d4], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22b0]
call fcn.004f065e
movzx eax, byte [ebp - 0x25d4]
test eax, eax
je 0x4b45c0
push 0x68ec68
push 0x6763da
push 0
push 0
push 0
push str.ClickBrowse
push 0x2cfe
call fcn.004dcb80
mov ecx, eax
call fcn.004dcc50
mov ecx, dword [ebp - 0x25cc]
call fcn.004b4fe0
jmp 0x4b4cc0
lea ecx, [ebp - 0x222c]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x108]
mov ecx, dword [ebp + 8]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x108]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x2644], eax
mov ecx, dword [ebp - 0x2644]
mov dword [ebp - 0x25ec], ecx
mov dword [ebp - 4], 0xb
mov edx, dword [str.cancel_btn]
push edx
mov ecx, dword [ebp - 0x25ec]
call fcn.004f0720
mov byte [ebp - 0x25da], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x222c]
call fcn.004f065e
movzx eax, byte [ebp - 0x25da]
test eax, eax
je 0x4b463e
mov ecx, dword [ebp - 0x25cc]
call fcn.004bd610
jmp 0x4b4cc0
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x25cc]
mov eax, dword [ecx + 0x108]
cmp eax, dword [edx + 0x46c]
jne 0x4b470f
mov ecx, dword [ebp - 0x25cc]
mov ecx, dword [ecx + 0x46c]
call fcn.00503f5a
movzx edx, al
test edx, edx
je 0x4b46c0
push 0x68ec78
push 0x6763fe
push 0x6763db
push 0
push 0
push str.DisagreeTermsService
push 0x2cf6
call fcn.004dcb80
mov ecx, eax
call fcn.004dcc50
push 0
mov eax, dword [ebp - 0x25cc]
mov ecx, dword [eax + 0x47c]
mov edx, dword [ebp - 0x25cc]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x47c]
mov edx, dword [eax + 0xd8]
call edx
jmp 0x4b470a
push 0x68ec98
push 0x6763ff
push 0
push 0
push 0
push str.AgreeProxy
push 0x2cf6
call fcn.004dcb80
mov ecx, eax
call fcn.004dcc50
push 1
mov eax, dword [ebp - 0x25cc]
mov ecx, dword [eax + 0x47c]
mov edx, dword [ebp - 0x25cc]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x47c]
mov edx, dword [eax + 0xd8]
call edx
jmp 0x4b4cc0
lea eax, [ebp - 0x21a8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x108]
mov eax, dword [ebp + 8]
mov edx, dword [edx]
mov ecx, dword [eax + 0x108]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x25f0], eax
mov ecx, dword [ebp - 0x25f0]
mov dword [ebp - 0x25f4], ecx
mov dword [ebp - 4], 0xc
mov edx, dword [0x68b6c4]
push edx
mov ecx, dword [ebp - 0x25f4]
call fcn.004f0720
mov byte [ebp - 0x25d5], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x21a8]
call fcn.004f065e
movzx eax, byte [ebp - 0x25d5]
test eax, eax
je 0x4b4b4b
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [ecx + 0x494]
mov eax, dword [ebp - 0x25cc]
mov edx, dword [edx]
mov ecx, dword [eax + 0x494]
mov eax, dword [edx + 0xc8]
call eax
movzx ecx, al
test ecx, ecx
je 0x4b490b
mov edx, dword [ebp - 0x25cc]
mov eax, dword [edx + 0x498]
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x498]
mov eax, dword [edx + 0xc8]
call eax
movzx ecx, al
test ecx, ecx
je 0x4b490b
mov edx, dword [ebp - 0x25cc]
mov eax, dword [edx + 0x4a0]
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x4a0]
mov eax, dword [edx + 0xc8]
call eax
movzx ecx, al
test ecx, ecx
je 0x4b490b
push 0
push 2
push str.void___thiscall_InstallUIMainWnd::OnClick_struct_DuiLib::tagTNotifyUI__
push 0x249
push 0x68eccc
push 0x80
lea ecx, [ebp - 0x269c]
call fcn.00486a40
mov dword [ebp - 0x25f8], eax
mov edx, dword [ebp - 0x25f8]
mov dword [ebp - 0x25fc], edx
mov dword [ebp - 4], 0xd
push str._User_click_try_again_button_to_retry
mov eax, dword [0x6c7b98]
push eax
push 1
mov ecx, dword [ebp - 0x25fc]
push ecx
call fcn.00486b20
add esp, 0xc
mov ecx, eax
call fcn.0049bd50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x269c]
call fcn.00486ac0
mov edx, dword [ebp - 0x25cc]
movzx eax, byte [edx + 0x58c]
test eax, eax
je 0x4b4896
mov dword [ebp - 0x25e8], 0x68ed5c
jmp 0x4b48a0
mov dword [ebp - 0x25e8], 0x68ed8c
push 0
mov ecx, dword [ebp - 0x25e8]
push ecx
push str.8_1.ClickTryAgain
push 0x68ed98
call fcn.004dcb80
mov ecx, eax
call fcn.004dcc20
mov edx, dword [ebp - 0x25cc]
mov byte [edx + 0x58c], 1
push 0
mov eax, dword [ebp - 0x25cc]
mov ecx, dword [eax + 0x370]
call fcn.00505cf3
push 0
push 0
mov ecx, dword [ebp - 0x25cc]
push ecx
push 0x4ba3e0
push 0
push 0
call fcn.005e79f3
add esp, 0x18
mov ecx, dword [ebp - 0x25cc]
call fcn.004bd0a0
jmp 0x4b4b46
push 0x68ed94
lea ecx, [ebp - 0x2058]
call fcn.0048c140
mov dword [ebp - 4], 0xe
lea edx, [ebp - 0x2058]
push edx
mov ecx, dword [ebp - 0x25cc]
call fcn.004b51d0
mov eax, dword [ebp - 0x25cc]
mov ecx, dword [eax + 0x560]
add ecx, 0xe4
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x2658], esp
push ecx
mov ecx, edx
call fcn.0047dde0
mov dword [ebp - 0x265c], eax
call fcn.004da670
add esp, 0x18
mov byte [ebp - 0x25d6], al
movzx eax, byte [ebp - 0x25d6]
test eax, eax
je 0x4b4a49
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2660], esp
lea edx, [ebp - 0x2058]
push edx
call fcn.0047dde0
mov dword [ebp - 0x2664], eax
call fcn.004da460
add esp, 0x18
mov byte [ebp - 0x25d7], al
mov al, byte [ebp - 0x25d7]
mov byte [ebp - 0x25d8], al
movzx ecx, byte [ebp - 0x25d8]
test ecx, ecx
je 0x4b49ce
mov edx, dword [ebp - 0x25cc]
mov dword [edx + 0x584], 0
push 0x68eda4
push 0x67641a
push 0x67641b
push 0
push 0
push str.Start001
push 0x2d01
call fcn.004dcb80
mov ecx, eax
call fcn.004dcc50
mov eax, dword [ebp - 0x25cc]
cmp dword [eax + 0x584], 0
jne 0x4b4a0f
mov byte [ebp - 0x25cd], 1
jmp 0x4b4a16
mov byte [ebp - 0x25cd], 0
movzx ecx, byte [ebp - 0x25cd]
push ecx
push 0x67643e
push str.7.ProgramLaunch
push 0x68edd8
call fcn.004dcb80
mov ecx, eax
call fcn.004dcc20
mov ecx, dword [ebp - 0x25cc]
call fcn.004bbf40
jmp 0x4b4b34
lea ecx, [ebp - 0x2040]
call fcn.0047dd90
mov byte [ebp - 4], 0xf
push 0x68edd4
mov edx, dword [ebp - 0x25cc]
add edx, 0x540
push edx
lea eax, [ebp - 0x20a0]
push eax
call fcn.004ca440
add esp, 0xc
mov dword [ebp - 0x2600], eax
mov ecx, dword [ebp - 0x2600]
push ecx
lea ecx, [ebp - 0x2040]
call fcn.0047dca0
lea ecx, [ebp - 0x20a0]
call fcn.0047dc50
push 1
lea edx, [ebp - 0x2088]
push edx
mov ecx, dword [ebp - 0x25cc]
call fcn.004c2350
mov dword [ebp - 0x2604], eax
mov eax, dword [ebp - 0x2604]
mov dword [ebp - 0x2608], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x2608]
push ecx
lea ecx, [ebp - 0x2040]
call fcn.004c5100
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2088]
call fcn.0047dc50
lea ecx, [ebp - 0x2040]
call fcn.0047db80
push eax
push str._select___s
lea edx, [ebp - 0x2010]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 1
push 0
lea eax, [ebp - 0x2010]
push eax
push str.explorer.exe
push 0x68ee38
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x2040]
call fcn.0047dc50
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2058]
call fcn.0047dc50
jmp 0x4b4cc0
lea ecx, [ebp - 0x2124]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x108]
mov ecx, dword [ebp + 8]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x108]
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 0x260c], eax
mov ecx, dword [ebp - 0x260c]
mov dword [ebp - 0x2610], ecx
mov dword [ebp - 4], 0x11
push str.install_setting
mov ecx, dword [ebp - 0x2610]
call fcn.004f0720
mov byte [ebp - 0x25d9], al
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2124]
call fcn.004f065e
movzx edx, byte [ebp - 0x25d9]
test edx, edx
je 0x4b4cc0
movzx eax, byte [0x6cf4e7]
test eax, eax
je 0x4b4c56
mov ecx, dword [ebp - 0x25cc]
mov ecx, dword [ecx + 0x474]
call fcn.00504711
cmp eax, 1
jne 0x4b4bf8
push 1
push 1
mov ecx, dword [ebp - 0x25cc]
call fcn.004bbe90
mov byte [0x6cf4e7], 0
jmp 0x4b4c54
push 0x68ee44
push 0x67643f
push 0x676446
push 0
push 0
push 0x68ee58
push 0x2cf7
call fcn.004dcb80
mov ecx, eax
call fcn.004dcc50
push 0
push 1
mov ecx, dword [ebp - 0x25cc]
call fcn.004bbe90
push 1
mov edx, dword [ebp - 0x25cc]
mov eax, dword [edx + 0x474]
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x474]
mov eax, dword [edx + 0x1bc]
call eax
jmp 0x4b4cb9
push 0x68ee68
push 0x676447
push 0x67644e
push 0
push 0
push str.DownloadSetting
push 0x2cf7
call fcn.004dcb80
mov ecx, eax
call fcn.004dcc50
push 1
mov ecx, dword [ebp - 0x25cc]
mov edx, dword [ecx + 0x474]
mov eax, dword [ebp - 0x25cc]
mov edx, dword [edx]
mov ecx, dword [eax + 0x474]
mov eax, dword [edx + 0x1bc]
call eax
push 0
push 1
mov ecx, dword [ebp - 0x25cc]
call fcn.004bbe90
mov byte [0x6cf4e7], 1
mov byte [0x6cf4e4], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005c978e
mov esp, ebp
pop ebp
ret 4