Function at 0x40b970
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push ecx
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
push esi
mov eax, dword [esi]
mov dword [esp + 0x10], edi
call dword [eax + 0x18]
xor ebx, ebx
cmp eax, 0x2710
jne 0x40bca0
mov eax, dword [esi]
push esi
call dword [eax + 0x58]
test eax, eax
je 0x40ba01
mov eax, dword [esi]
mov edi, str.btn_close
push esi
call dword [eax + 0x58]
nop dword [eax + eax]
mov cx, word [eax]
cmp cx, word [edi]
jne 0x40b9d6
test cx, cx
je 0x40b9d2
mov cx, word [eax + 2]
cmp cx, word [edi + 2]
jne 0x40b9d6
add eax, 4
add edi, 4
test cx, cx
jne 0x40b9b0
xor eax, eax
jmp 0x40b9db
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40ba01
lea ebx, [eax + 1]
mov eax, dword [esi]
push 0
push esi
call dword [eax + 0x64]
mov ecx, dword [esp + 0xc]
call fcn.0040d520
mov eax, dword [esi]
push esi
call dword [eax + 0x60]
test eax, eax
je 0x40bd10
mov eax, dword [esi]
push esi
call dword [eax + 0x58]
test eax, eax
je 0x40ba75
mov eax, dword [esi]
mov edi, str.btn_min
push esi
call dword [eax + 0x58]
mov cx, word [eax]
cmp cx, word [edi]
jne 0x40ba3c
test cx, cx
je 0x40ba38
mov cx, word [eax + 2]
cmp cx, word [edi + 2]
jne 0x40ba3c
add eax, 4
add edi, 4
test cx, cx
jne 0x40ba16
xor eax, eax
jmp 0x40ba41
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40ba75
mov eax, dword [esi]
inc ebx
push 0
push esi
call dword [eax + 0x64]
mov ecx, dword [esp + 0xc]
push 0
push 0xf020
push 0x112
mov eax, dword [ecx]
push ecx
call dword [eax + 0xb0]
mov eax, dword [esi]
push esi
call dword [eax + 0x60]
test eax, eax
je 0x40bc05
mov eax, dword [esi]
push esi
call dword [eax + 0x58]
test eax, eax
je 0x40badf
mov eax, dword [esi]
mov edi, str.btn_quick_installation
push esi
call dword [eax + 0x58]
nop word [eax + eax]
mov cx, word [eax]
cmp cx, word [edi]
jne 0x40bab6
test cx, cx
je 0x40bab2
mov cx, word [eax + 2]
cmp cx, word [edi + 2]
jne 0x40bab6
add eax, 4
add edi, 4
test cx, cx
jne 0x40ba90
xor eax, eax
jmp 0x40babb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40badf
mov eax, dword [esi]
inc ebx
push 0
push esi
call dword [eax + 0x64]
mov ecx, dword [esp + 0xc]
call fcn.0040c160
mov eax, dword [esi]
push esi
call dword [eax + 0x60]
test eax, eax
je 0x40bc05
mov eax, dword [esi]
push esi
call dword [eax + 0x58]
test eax, eax
je 0x40bb43
mov eax, dword [esi]
mov edi, str.btn_custom_installation
push esi
call dword [eax + 0x58]
mov cx, word [eax]
cmp cx, word [edi]
jne 0x40bb1a
test cx, cx
je 0x40bb16
mov cx, word [eax + 2]
cmp cx, word [edi + 2]
jne 0x40bb1a
add eax, 4
add edi, 4
test cx, cx
jne 0x40baf4
xor eax, eax
jmp 0x40bb1f
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40bb43
mov eax, dword [esi]
inc ebx
push 0
push esi
call dword [eax + 0x64]
mov ecx, dword [esp + 0xc]
call fcn.0040d6a0
mov eax, dword [esi]
push esi
call dword [eax + 0x60]
test eax, eax
je 0x40bc05
mov eax, dword [esi]
push esi
call dword [eax + 0x58]
test eax, eax
je 0x40bba3
mov eax, dword [esi]
mov edi, str.btn_experience_immediately
push esi
call dword [eax + 0x58]
mov cx, word [eax]
cmp cx, word [edi]
jne 0x40bb7e
test cx, cx
je 0x40bb7a
mov cx, word [eax + 2]
cmp cx, word [edi + 2]
jne 0x40bb7e
add eax, 4
add edi, 4
test cx, cx
jne 0x40bb58
xor eax, eax
jmp 0x40bb83
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40bba3
mov eax, dword [esi]
inc ebx
push 0
push esi
call dword [eax + 0x64]
mov ecx, dword [esp + 0xc]
call fcn.0040c3a0
mov eax, dword [esi]
push esi
call dword [eax + 0x60]
test eax, eax
je 0x40bc05
mov eax, dword [esi]
push esi
call dword [eax + 0x58]
test eax, eax
je 0x40bc13
mov eax, dword [esi]
mov edi, str.btn_change_path
push esi
call dword [eax + 0x58]
mov cx, word [eax]
cmp cx, word [edi]
jne 0x40bbde
test cx, cx
je 0x40bbda
mov cx, word [eax + 2]
cmp cx, word [edi + 2]
jne 0x40bbde
add eax, 4
add edi, 4
test cx, cx
jne 0x40bbb8
xor eax, eax
jmp 0x40bbe3
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40bc13
mov eax, dword [esi]
inc ebx
push 0
push esi
call dword [eax + 0x64]
mov edi, dword [esp + 0xc]
mov ecx, edi
call fcn.0040d000
mov eax, dword [esi]
push esi
call dword [eax + 0x60]
test eax, eax
jne 0x40bc17
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edi, dword [esp + 0xc]
mov eax, dword [esi]
push esi
call dword [eax + 0x58]
test eax, eax
je 0x40bd1f
mov eax, dword [esi]
mov edi, str.text_license_agreement
push esi
call dword [eax + 0x58]
mov cx, word [eax]
cmp cx, word [edi]
jne 0x40bc56
test cx, cx
je 0x40bc52
mov cx, word [eax + 2]
cmp cx, word [edi + 2]
jne 0x40bc56
add eax, 4
add edi, 4
test cx, cx
jne 0x40bc30
xor eax, eax
jmp 0x40bc5b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40bd1b
mov eax, dword [esi]
inc ebx
push 0
push esi
call dword [eax + 0x64]
push 1
push 0
push 0
push str.http:__www.ggkuai.com_accord_userduty_userduty.html
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, dword [esi]
push esi
call dword [eax + 0x60]
test eax, eax
jne 0x40bd1b
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp eax, 0x3e80
jne 0x40bd1f
mov eax, dword [esi]
push esi
call dword [eax + 0x58]
test eax, eax
je 0x40bd1f
mov eax, dword [esi]
mov edi, str.edit_install_dir
push esi
call dword [eax + 0x58]
nop dword [eax]
mov cx, word [eax]
cmp cx, word [edi]
jne 0x40bce6
test cx, cx
je 0x40bce2
mov cx, word [eax + 2]
cmp cx, word [edi + 2]
jne 0x40bce6
add eax, 4
add edi, 4
test cx, cx
jne 0x40bcc0
xor eax, eax
jmp 0x40bceb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40bd1b
lea ebx, [eax + 1]
mov eax, dword [esi]
push 0
push esi
call dword [eax + 0x64]
mov edi, dword [esp + 0xc]
mov ecx, edi
push esi
call fcn.0040cef0
mov eax, dword [esi]
push esi
call dword [eax + 0x60]
test eax, eax
jne 0x40bd1f
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edi, dword [esp + 0xc]
mov eax, dword [esi]
push esi
call dword [eax + 0x60]
test eax, eax
je 0x40bd39
push esi
mov ecx, edi
call fcn.0040ddc0
neg eax
sbb eax, eax
neg eax
add ebx, eax
xor eax, eax
cmp eax, ebx
pop edi
sbb eax, eax
pop esi
neg eax
pop ebx
mov esp, ebp
pop ebp
ret 4