Function at 0x50b5b0
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x308
mov eax, dword [0x572844]
xor eax, esp
mov dword [esp + 0x304], eax
push ebx
push esi
mov esi, dword [esp + 0x314]
call fcn.004eb250
push 0x2018
push 0
push 0x5f4008
call fcn.005201d0
add esp, 0xc
push 0
push 0x71
push 0x70
push 0x6f
push str.WizardLogo.png
push 1
call fcn.004cd810
mov dword [0x5f4000], eax
mov ecx, 0x5aa610
mov eax, dword [0x5b6818]
push 1
mov dword [esp + 0x23c], str.WIZARDCMD
mov dword [esp + 0x248], 0x50c250
mov dword [esp + 0x274], str.WIZARDARC
mov dword [esp + 0x280], 0x50bce0
mov dword [esp + 0x2ac], str.WIZARDEXTR
mov dword [esp + 0x2b8], 0x50c520
mov dword [esp + 0x2e4], str.WIZARDADDOPT
mov dword [esp + 0x2f0], 0x50ba80
mov dword [esp + 0xc], 0x34
mov dword [esp + 0x10], 0x22a
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], eax
call fcn.004cdb80
cmp byte [0x57a0e0], 0
mov dword [esp + 0x18], eax
lea eax, [esp + 0x22c]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 4
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], eax
je 0x50b6d6
push 0x800
push 0x5f400c
mov ecx, 0x5a57a8
call fcn.00406e80
mov dword [0x5f4008], 0
mov dword [esp + 0x24], 2
mov eax, dword [0x5b6818]
mov ecx, 0x5b6880
mov dword [esp + 0x234], eax
mov dword [esp + 0x26c], eax
mov dword [esp + 0x2a4], eax
mov dword [esp + 0x2dc], eax
lea eax, [esp + 0x22c]
push 4
push eax
lea eax, [esp + 0x10]
mov dword [esp + 0x234], 0x38
push eax
mov dword [esp + 0x23c], 0x20
mov dword [esp + 0x270], 0x38
mov dword [esp + 0x274], 0x20
mov dword [esp + 0x2a8], 0x38
mov dword [esp + 0x2ac], 0x20
mov dword [esp + 0x2e0], 0x38
mov dword [esp + 0x2e4], 0x20
call fcn.004a90a0
lea eax, [esp + 8]
push eax
call dword [sym.imp.COMCTL32.dll_PropertySheetW]
mov esi, eax
mov ecx, 0x5b6880
push 4
lea eax, [esp + 0x230]
test esi, esi
push eax
setg bl
call fcn.004a9050
test esi, esi
jle 0x50ba5d
mov ecx, dword [0x5f4008]
sub ecx, 0
je 0x50b930
sub ecx, 1
je 0x50b7b3
sub ecx, 1
jne 0x50ba5d
push 0x5f400c
call fcn.00495850
push 0x800
cmp eax, 0x5f400c
jne 0x50b7f8
push 0x59701a
call fcn.0044c720
push 0x800
push 0x59701a
call fcn.00493970
push 0x800
push 0x5f400c
push 0x59701a
call fcn.004b0300
jmp 0x50b807
push 0x5f400c
push 0x59701a
call fcn.004b0360
cmp byte [0x5f600f], 0
mov al, byte [0x5f600d]
mov dword [0x58fc28], 3
mov dword [0x58fc24], 2
mov byte [0x58fc6a], al
je 0x50b838
mov dword [0x58fbfc], 2
cmp dword [0x5f4008], 2
mov eax, dword [0x5f6010]
mov ecx, dword [0x5f6014]
mov dword [0x58fc30], eax
mov dword [0x58fc34], ecx
jne 0x50b890
push 0x59701a
call fcn.004837b0
test al, al
je 0x50b890
push 0
push 1
push 0x59701a
mov ecx, 0x5a57a8
call fcn.00407f10
cmp eax, 1
jne 0x50b913
mov eax, dword [0x5a57ac]
mov dword [0x591fc0], eax
jmp 0x50b913
cmp byte [0x5f600e], 0
je 0x50b8d6
push 0x542900
push 0x59701a
call fcn.004939b0
test al, al
jne 0x50b8c0
push 0x800
push str..exe
push 0x59701a
call fcn.004b0300
push 0x800
push 0x5428ac
push 0x589ad0
call fcn.004b0360
jmp 0x50b913
cmp dword [0x591fc0], 0
mov esi, 0x542b1c
je 0x50b8e9
mov esi, str..zip
lea eax, [esi + 2]
push eax
push 0x59701a
call fcn.004939b0
test al, al
jne 0x50b90b
push 0x800
push esi
push 0x59701a
call fcn.004b0300
xor eax, eax
mov word [0x589ad0], ax
push 1
push 0x59701a
call fcn.00495580
push 0
mov ecx, 0x5a57a8
call fcn.00405a30
jmp 0x50ba5d
push 0
push 1
push 0x5f400c
mov ecx, 0x5a57a8
call fcn.00407f10
cmp eax, 0xffffffff
jne 0x50b95c
push 0x5f400c
mov ecx, 0x5b68fc
call fcn.0047b330
jmp 0x50ba5d
cmp eax, 1
jne 0x50ba5d
push 0
call fcn.004e7810
push 0x800
push 0x58aad6
push 0x5f500c
mov ecx, 0x5a84b0
call fcn.00452e10
push 0x58aad6
call fcn.004837b0
test al, al
jne 0x50b9cc
push 0
push 0
push 0x58aad6
call fcn.00483010
test al, al
jne 0x50b9cc
push 0x58aad6
push 0x1f7
call fcn.004a9c90
push eax
call fcn.004f27d0
add esp, 8
mov ecx, 0x5b68fc
call fcn.0047b860
jmp 0x50ba5d
lea eax, [esp + 0x3c]
mov ecx, 0x5a57a8
push eax
call fcn.004076c0
push 0x800
push 0x59701a
mov ecx, 0x5a57a8
call fcn.00406e80
mov eax, dword [esp + 0x17c]
mov ecx, 0x59801c
mov dword [0x591fc0], eax
call fcn.004b0640
push 0x5428ac
mov ecx, 0x59801c
call fcn.004b0450
push 0
push 0
mov ecx, 0x5a57a8
mov byte [0x58fed9], 0
call fcn.00406960
cmp word [0x5f500c], 0
je 0x50ba42
push 0x800
push 0x58aad6
call fcn.00493970
push 1
push 0x54266c
push 0
push 0x58aad6
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [esp + 0x30c]
mov al, bl
pop esi
pop ebx
xor ecx, esp
call fcn.0051dca8
add esp, 0x308
ret 4