Function at 0x11051d64
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x73c
mov eax, dword [0x1107f428]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
mov dword [0x11081f54], eax
mov eax, dword [ebp + 0x14]
push esi
mov dword [0x11081f50], eax
mov eax, dword [ebp + 0x10]
push edi
mov dword [0x11081f4c], eax
call fcn.11053589
mov edi, 0x104
mov esi, eax
push edi
xor ebx, ebx
lea eax, [ebp - 0x414]
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
push edi
lea eax, [ebp - 0x61c]
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
push edi
lea eax, [ebp - 0x20c]
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0x24
lea eax, [ebp - 0x414]
push eax
call fcn.110535cd
lea eax, [ebp - 0x61c]
push eax
call fcn.110535cd
lea eax, [ebp - 0x20c]
push eax
call fcn.110535cd
lea eax, [ebp - 0x20c]
push eax
push str.Package:Message____s___
call fcn.1104ebcd
mov edi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
lea eax, [ebp - 0x414]
push str.WM_MIN
push eax
call edi
add esp, 0x10
test eax, eax
jne 0x11051e35
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x61c]
push eax
push 0x778
jmp 0x11051fed
lea eax, [ebp - 0x414]
push str.WM_CLOSE_WINDOW
push eax
call edi
pop ecx
pop ecx
test eax, eax
je 0x11051ee2
lea eax, [ebp - 0x414]
push str.WM_BACK
push eax
call edi
pop ecx
pop ecx
test eax, eax
jne 0x11051e7d
lea eax, [ebp - 0x20c]
mov ecx, 0x11081a60
push eax
call fcn.11039341
push eax
push 0x77a
jmp 0x11051fed
lea eax, [ebp - 0x414]
push str.WM_NEXT
push eax
call edi
pop ecx
pop ecx
test eax, eax
jne 0x11051ead
lea eax, [ebp - 0x20c]
mov ecx, 0x11081a60
push eax
call fcn.11039341
push eax
push 0x77b
jmp 0x11051fed
lea eax, [ebp - 0x414]
push str.WM_CANCEL
push eax
call edi
pop ecx
pop ecx
test eax, eax
jne 0x11051efa
push ebx
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x61c]
push eax
push esi
call fcn.1104e9a5
add esp, 0x10
cmp eax, 2
jne 0x11052169
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x61c]
push eax
push 0x779
jmp 0x11051fed
lea eax, [ebp - 0x414]
push str.NOT_SUPPORT_WINXP
push eax
call edi
pop ecx
pop ecx
test eax, eax
jne 0x11051f12
push 1
jmp 0x11051f27
lea eax, [ebp - 0x414]
push str.WM_MESSAGEBOX
push eax
call edi
pop ecx
pop ecx
test eax, eax
jne 0x11051f43
push ebx
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x61c]
push eax
push esi
call fcn.1104e9a5
add esp, 0x10
jmp 0x11052169
lea eax, [ebp - 0x414]
push str.WM_STARTINSTALL
push eax
call edi
pop ecx
pop ecx
test eax, eax
jne 0x11051f70
lea eax, [ebp - 0x20c]
mov ecx, 0x11081a60
push eax
call fcn.11039341
push eax
push 0x77d
jmp 0x11051fed
lea eax, [ebp - 0x414]
push str.WM_STARTUNINSTALL
push eax
call edi
pop ecx
pop ecx
test eax, eax
jne 0x11051f9d
lea eax, [ebp - 0x20c]
mov ecx, 0x11081a60
push eax
call fcn.11039341
push eax
push 0x781
jmp 0x11051fed
lea eax, [ebp - 0x414]
push str.WM_FINISHEDINSTALL
push eax
call edi
pop ecx
pop ecx
test eax, eax
jne 0x11051fc6
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x61c]
push eax
push 0x77f
jmp 0x11051fed
lea eax, [ebp - 0x414]
push str.WM_RUNAPP
push eax
call edi
pop ecx
pop ecx
test eax, eax
jne 0x11051ff9
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x61c]
push eax
push 0x782
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x11052169
lea eax, [ebp - 0x414]
push str.WM_OPTIONSTATE
push eax
call edi
pop ecx
pop ecx
test eax, eax
jne 0x11052047
mov ecx, dword [0x11080b84]
lea eax, [ebp - 0x61c]
push eax
call fcn.11054491
mov ecx, eax
call fcn.11021042
test eax, eax
je 0x11052169
mov ecx, eax
call fcn.1100f2a4
xor ecx, ecx
test al, al
sete cl
push ecx
call fcn.11053663
jmp 0x11052169
lea eax, [ebp - 0x414]
push str.WM_OPENURL
push eax
call edi
pop ecx
pop ecx
test eax, eax
jne 0x11052169
or esi, 0xffffffff
lea eax, [ebp - 0x61c]
push esi
push eax
lea ecx, [ebp - 0x6b8]
call fcn.11038932
push ebx
push str.http:__
lea ecx, [ebp - 0x6b8]
call fcn.110390fe
cmp eax, esi
je 0x11052154
push ebx
push str.https:__
lea ecx, [ebp - 0x6b8]
call fcn.110390fe
cmp eax, esi
je 0x11052154
push esi
push str.explorer__
lea ecx, [ebp - 0x73c]
call fcn.11038932
lea eax, [ebp - 0x6b8]
push eax
lea ecx, [ebp - 0x73c]
call fcn.11038dd7
push 0x1106c494
lea ecx, [ebp - 0x73c]
call fcn.11038e5a
lea ecx, [ebp - 0x73c]
call fcn.11039341
mov edi, eax
test edi, edi
je 0x11052113
push edi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
inc eax
pop ecx
cmp eax, 0x3fffffff
jg 0x11052113
lea esi, [eax + eax]
mov eax, esi
call fcn.11056930
mov eax, esp
push 3
push esi
push edi
push eax
call fcn.1104e11e
mov ebx, eax
push ebx
lea ecx, [ebp - 0x634]
call fcn.11043d52
cmp dword [ebp - 0x620], 0x10
lea eax, [ebp - 0x634]
push 1
cmovae eax, dword [ebp - 0x634]
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
lea ecx, [ebp - 0x634]
call fcn.1104677c
lea ecx, [ebp - 0x73c]
call fcn.11038b1f
jmp 0x1105215e
push str.url_error
call fcn.1105369f
lea ecx, [ebp - 0x6b8]
call fcn.11038b1f
lea esp, [ebp - 0x748]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.110567db
leave
ret