Function at 0x45b791
Capabilities:
Create directory
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2960
call fcn.00472480
mov eax, dword [0x4b5870]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor eax, eax
mov esi, 0x206
push esi
mov word [ebp - 0x20c], ax
xor ebx, ebx
lea eax, [ebp - 0x20a]
mov edi, ecx
push ebx
push eax
call fcn.00470210
add esp, 0xc
lea eax, [ebp - 0x20c]
push 0x104
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
xor eax, eax
push esi
mov word [ebp - 0x824], ax
lea eax, [ebp - 0x822]
push ebx
push eax
call fcn.00470210
mov esi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x20c]
add esp, 0xc
push str.Module_thunder
push eax
lea eax, [ebp - 0x824]
push eax
call esi
xor eax, eax
push 0x206
mov word [ebp - 0x61c], ax
lea eax, [ebp - 0x61a]
push ebx
push eax
call fcn.00470210
add esp, 0xc
lea eax, [ebp - 0x824]
push str.xldl.dll
push eax
lea eax, [ebp - 0x61c]
push eax
call esi
push 0x60
call fcn.0046ebbd
pop ecx
test eax, eax
je 0x45b874
lea ecx, [ebp - 0x61c]
push ecx
mov ecx, eax
call fcn.0045a066
mov esi, eax
jmp 0x45b876
mov esi, ebx
mov eax, dword [esi + 4]
test eax, eax
je 0x45b87f
call eax
mov dword [ebp - 0x2960], 1
mov eax, dword [esi + 0x2c]
test eax, eax
je 0x45b89a
lea ecx, [ebp - 0x2960]
push ecx
call eax
pop ecx
push str.http:__c.m.liebao.cn_t_i453
lea ecx, [ebp - 0x884]
call fcn.004074d0
push 0x4a7f58
lea ecx, [ebp - 0x854]
call fcn.004074d0
xor eax, eax
push 0x206
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push ebx
push eax
call fcn.00470210
add esp, 0xc
lea eax, [ebp - 0x414]
push ebx
push 0x1a
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x414]
push eax
call fcn.00406100
pop ecx
push eax
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x854]
call fcn.00402920
mov ebx, str.Temp_
push ebx
call fcn.00406100
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x854]
call fcn.00408ee0
cmp dword [ebp - 0x840], 8
lea eax, [ebp - 0x854]
push 0
cmovae eax, dword [ebp - 0x854]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp - 0x854]
push eax
lea ecx, [ebp - 0x83c]
call fcn.004074a0
push str.liebao.apk
lea ecx, [ebp - 0x86c]
call fcn.004074d0
lea eax, [ebp - 0x83c]
mov ecx, edi
push eax
lea eax, [ebp - 0x86c]
push eax
lea eax, [ebp - 0x884]
push eax
push esi
call fcn.0045a4a6
mov ecx, dword [esi + 8]
mov ebx, eax
test ecx, ecx
je 0x45b989
call ecx
xor esi, esi
inc esi
cmp ebx, esi
jne 0x45b9ff
push 0xffffffffffffffff
xor ebx, ebx
lea eax, [ebp - 0x86c]
push ebx
push eax
lea ecx, [ebp - 0x83c]
call fcn.00407a30
lea ecx, [edi + 0xa0]
lea eax, [ebp - 0x83c]
cmp ecx, eax
je 0x45b9c0
push 0xffffffffffffffff
push ebx
push eax
call fcn.00403730
cmp byte [0x4b9568], bl
je 0x45ba1d
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
mov ecx, eax
call fcn.004397c9
cmp dword [ebp - 0x828], 8
lea eax, [ebp - 0x83c]
push 5
cmovae eax, dword [ebp - 0x83c]
push ebx
push ebx
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push ebx
push esi
jmp 0x45ba03
xor ebx, ebx
push ebx
push ebx
mov eax, dword [edi]
mov ecx, edi
push 0x1511
call dword [eax + 8]
mov ecx, eax
call fcn.004397c9
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push ebx
push esi
lea ecx, [ebp - 0x86c]
call fcn.00403940
push ebx
push esi
lea ecx, [ebp - 0x83c]
call fcn.00403940
push ebx
push esi
lea ecx, [ebp - 0x854]
call fcn.00403940
push ebx
push esi
lea ecx, [ebp - 0x884]
call fcn.00403940
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0046f685
mov esp, ebp
pop ebp
ret