Function at 0x41a500
Capabilities:
Create process on windows

Disassembly:
push 0xffffffffffffffff
push 0x4fbc9d
mov eax, dword fs:[0]
push eax
sub esp, 0x684
mov eax, dword [0x5364a8]
xor eax, esp
mov dword [esp + 0x680], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5364a8]
xor eax, esp
push eax
lea eax, [esp + 0x698]
mov dword fs:[0], eax
lea eax, [esp + 0xbc]
push eax
mov dword [esp + 0x18], ecx
call fcn.00424e90
push 0xf
push str.told_otherini
lea eax, [esp + 0xc4]
mov dword [esp + 0x6a8], 0
call fcn.00428be0
mov esi, dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::constructor_void_]
lea ecx, [esp + 0x20c]
call esi
mov byte [esp + 0x6a0], 1
cmp dword [esp + 0xd8], 0x10
mov ebx, dword [esp + 0xc4]
jae 0x41a599
lea ebx, [esp + 0xc4]
lea ecx, [esp + 0x18]
push ecx
call fcn.004716c0
add esp, 4
mov edi, 8
mov byte [esp + 0x6a0], 2
cmp dword [eax + 0x1c], edi
jb 0x41a5bd
mov eax, dword [eax + 8]
jmp 0x41a5c0
add eax, 8
mov ebx, dword [sym.imp.LibDui.dll_public:_int___cdecl_DuiLib::CDuiString::Format_wchar_t_const__]
push eax
lea edx, [esp + 0x210]
push 0x5145f4
push edx
call ebx
add esp, 0xc
mov byte [esp + 0x6a0], 1
cmp dword [esp + 0x34], edi
jb 0x41a5f4
mov eax, dword [esp + 0x20]
push eax
call fcn.0047c0b0
add esp, 4
xor ecx, ecx
mov word [esp + 0x20], cx
lea ecx, [esp + 0x18]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], 0
call fcn.00401050
push 0x400
lea edx, [esp + 0x298]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0xffffffffffffffff
lea eax, [esp + 0x298]
push eax
lea ecx, [esp + 0x104]
call dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::constructor_wchar_t_const___int_]
push 0x5c
lea ecx, [esp + 0x100]
mov byte [esp + 0x6a4], 3
call dword [sym.imp.LibDui.dll_public:_int___thiscall_DuiLib::CDuiString::ReverseFind_wchar_t_const]
push 0xffffffffffffffff
inc eax
push eax
lea ecx, [esp + 0x40]
push ecx
lea ecx, [esp + 0x108]
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CDuiString___thiscall_DuiLib::CDuiString::Mid_int__int_]
push eax
lea ecx, [esp + 0x100]
mov byte [esp + 0x6a4], 4
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CDuiString_const____thiscall_DuiLib::CDuiString::operator_class_DuiLib::CDuiString_const__]
mov byte [esp + 0x6a0], 3
mov ebp, dword [sym.imp.LibDui.dll_public:_void___thiscall_DuiLib::CDuiString::destructor_void_]
lea ecx, [esp + 0x38]
call ebp
lea ecx, [esp + 0x184]
call esi
lea esi, [esp + 0x38]
mov byte [esp + 0x6a0], 5
call fcn.00409f10
mov edi, eax
mov byte [esp + 0x6a0], 6
mov esi, dword [sym.imp.LibDui.dll_public:_wchar_t_const____thiscall_DuiLib::CDuiString::GetData_void_const]
lea ecx, [esp + 0x20c]
call esi
push eax
lea ecx, [esp + 0x100]
call esi
mov edx, dword [esp + 0x18]
fld qword [edx + 0x1db8]
push eax
sub esp, 8
mov ecx, edi
fstp qword [esp]
call esi
push eax
lea eax, [esp + 0x198]
push str.update.exe__s__f__s__s_1
push eax
call ebx
add esp, 0x1c
lea ecx, [esp + 0x38]
mov byte [esp + 0x6a0], 5
call ebp
lea ecx, [esp + 0x184]
call dword [sym.imp.LibDui.dll_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const]
lea ecx, [esp + 0xdc]
push ecx
mov edi, eax
call fcn.00406510
mov byte [esp + 0x6a0], 7
cmp dword [esp + 0xf8], 8
mov eax, dword [esp + 0xe4]
jae 0x41a746
lea eax, [esp + 0xe4]
push eax
lea ecx, [esp + 0x1c]
call fcn.00471520
mov edi, 0x10
add esp, 4
cmp dword [eax + 0x1c], edi
jb 0x41a762
mov eax, dword [eax + 8]
jmp 0x41a765
add eax, 8
push 5
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp eax, 0x20
setb bl
cmp dword [esp + 0x34], edi
jb 0x41a787
mov edx, dword [esp + 0x20]
push edx
call fcn.0047c0b0
add esp, 4
xor esi, esi
lea ecx, [esp + 0x18]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], esi
mov byte [esp + 0x20], 0
call fcn.00401050
test bl, bl
je 0x41a7eb
mov ebx, dword [esp + 0x14]
push str.allEnabled
lea ecx, [ebx + 0x30]
call dword [sym.imp.LibDui.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const]
mov esi, eax
mov eax, dword [esi]
mov edx, dword [eax + 0xf8]
push 1
mov ecx, esi
call edx
mov eax, dword [ebx + 4]
push edi
push eax
mov ebx, 0x516850
call fcn.00436a80
mov edx, dword [esi]
mov eax, dword [edx + 0xf8]
add esp, 8
push 0
mov ecx, esi
call eax
xor esi, esi
mov byte [esp + 0x6a0], 5
cmp dword [esp + 0xf8], 8
jb 0x41a80d
mov ecx, dword [esp + 0xe4]
push ecx
call fcn.0047c0b0
add esp, 4
xor edx, edx
lea ecx, [esp + 0xdc]
mov dword [esp + 0xf8], 7
mov dword [esp + 0xf4], esi
mov word [esp + 0xe4], dx
call fcn.00401050
lea ecx, [esp + 0x184]
mov byte [esp + 0x6a0], 3
call ebp
lea ecx, [esp + 0xfc]
mov byte [esp + 0x6a0], 1
call ebp
lea ecx, [esp + 0x20c]
mov byte [esp + 0x6a0], 0
call ebp
mov dword [esp + 0x6a0], 0xffffffff
cmp dword [esp + 0xd8], edi
jb 0x41a88c
mov eax, dword [esp + 0xc4]
push eax
call fcn.0047c0b0
add esp, 4
lea ecx, [esp + 0xbc]
mov dword [esp + 0xd8], 0xf
mov dword [esp + 0xd4], esi
mov byte [esp + 0xc4], 0
call fcn.00401050
mov ecx, dword [esp + 0x698]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x680]
xor ecx, esp
call fcn.0047bdb0
add esp, 0x690
ret