Function at 0x4a7289
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov esi, dword [ebp + 0xc]
xor ebx, ebx
movzx ecx, si
mov edx, 0x8d6
inc ebx
mov eax, ecx
cmp ecx, edx
ja 0x4a7e21
je 0x4a7e05
mov edx, 0x6a3
cmp ecx, edx
ja 0x4a785d
je 0x4a784c
mov edx, 0x619
cmp ecx, edx
ja 0x4a760b
je 0x4a75ef
add edx, 0xffffffe2
cmp ecx, edx
ja 0x4a749f
je 0x4a7488
mov edx, 0x4ba
cmp ecx, edx
ja 0x4a73af
je case.0x4a7622.1655
cmp ecx, 0x3f7
ja 0x4a7356
cmp ecx, 0x3e8
jae 0x4a86b1
sub eax, ebx
je 0x4a86b1
sub eax, ebx
je 0x4a733c
sub eax, 6
je 0x4a86b1
push esi
call fcn.00439398
pop ecx
test al, al
je 0x4a8697
push esi
push dword [ebp + 8]
call fcn.00439182
jmp 0x4a791d
xor ebx, ebx
push ebx
push ebx
push 0x10
push dword [0x5a2c8c]
call dword [sym.imp.USER32.dll_PostMessageW]
xor ebx, ebx
inc ebx
jmp 0x4a86b1
cmp ecx, 0x408
jb case.0x4a7c3b.2130
cmp ecx, 0x40e
jbe 0x4a86b1
cmp ecx, 0x4b1
jbe case.0x4a7c3b.2130
cmp ecx, 0x4b4
jbe 0x4a7393
cmp ecx, 0x4b7
jne case.0x4a7c3b.2130
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a586a
jmp 0x4a7415
mov eax, dword [0x5a23f0]
push 0
push ecx
push dword [eax + 0x12ee4]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x4a86b1
mov edx, 0x5e2
cmp ecx, edx
ja 0x4a743f
je 0x4a741d
cmp ecx, 0x51f
jb case.0x4a7c3b.2130
cmp ecx, 0x521
jbe 0x4a7409
cmp ecx, 0x5de
je 0x4a73f6
lea eax, [ecx - 0x5e0]
cmp eax, ebx
ja case.0x4a7c3b.2130
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a57a2
jmp 0x4a7415
mov eax, dword [0x5a23ec]
mov cl, byte [ebp + 0x10]
mov byte [eax + 0x10ffa], cl
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a5f1e
add esp, 0xc
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x1119a], cl
mov ecx, dword [0x5a22a0]
call fcn.0041d6a0
jmp 0x4a86b1
sub eax, 0x5e3
je 0x4a7471
sub eax, 0xd
je 0x4a7463
dec eax
sub eax, 1
jne case.0x4a7c3b.2130
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a53a0
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a3969
jmp 0x4a7415
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x10ff5], cl
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x110b6], cl
jmp 0x4a86b1
sub eax, 0x5fc
cmp eax, 0x15
ja case.0x4a7c3b.2130
jmp dword [eax*4 + 0x4a86b9]
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x111af], cl
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a5d2e
jmp 0x4a7415
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0xc41], cl
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x11002], cl
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x10ffd], cl
jmp 0x4a86b1
cmp byte [ebp + 0x10], 1
mov eax, dword [0x5a23ec]
sete cl
mov byte [eax + 0x10ffe], cl
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x110b7], cl
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x110b8], cl
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x10ff8], cl
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x10faa], cl
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x10fab], cl
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
sete cl
dec cl
and cl, 3
mov byte [eax + 0x113c9], cl
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x113c8], cl
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a5ff8
jmp 0x4a7415
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x111b7], cl
call fcn.004d5a28
jmp 0x4a86b1
sub eax, 0x61a
cmp eax, 0x86
ja case.0x4a7c3b.2130
movzx eax, byte [eax + 0x4a878d]
jmp dword [eax*4 + 0x4a8711]
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a5899
jmp 0x4a7415
mov eax, dword [0x5a23ec]
mov cl, byte [ebp + 0x10]
mov byte [eax + 0x10fe3], cl
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x10fe8], cl
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a5ab2
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a5b03
jmp 0x4a7415
mov eax, dword [0x5a23ec]
mov cl, byte [ebp + 0x10]
push 0xffffffffffffffff
push 0xffffffffffffffff
mov byte [eax + 0x10fff], cl
mov ecx, dword [0x5a22a0]
call fcn.00416270
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a6875
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a5844
jmp 0x4a7415
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x111b8], cl
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a5806
jmp 0x4a7415
push dword [0x5a2c8c]
mov ecx, dword [0x5a23f0]
call fcn.00469974
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a38b7
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a5ba9
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a6631
jmp 0x4a7415
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x1157a], cl
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x11583], cl
jmp 0x4a86b1
mov eax, dword [0x5a23ec]
movzx ecx, byte [ebp + 0x10]
mov dword [eax + 0x113f5], ecx
jmp 0x4a86b1
mov eax, dword [0x5a23ec]
movzx ecx, byte [ebp + 0x10]
mov dword [eax + 0x113fd], ecx
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a65e3
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a6667
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a66b5
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a684c
jmp 0x4a7415
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x11007], cl
call fcn.004d4ae3
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a6703
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a70ce
jmp 0x4a7415
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x10fc3], cl
push dword [ebp + 8]
mov ecx, dword [0x5a23f0]
call fcn.00468a77
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x10fc4], cl
jmp 0x4a7825
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a3e5f
jmp 0x4a7415
mov edx, 0x6e2
cmp ecx, edx
ja 0x4a79a5
je case.0x4a7885.1747
sub eax, 0x6b3
cmp eax, 0x26
ja case.0x4a7c3b.2130
movzx eax, byte [eax + 0x4a8855]
jmp dword [eax*4 + 0x4a8815]
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x11179], cl
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a3c04
jmp 0x4a7415
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x10ff6], cl
mov ecx, 0x5a5150
call fcn.004c9690
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x111ba], cl
jmp 0x4a7601
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x10fa8], cl
jmp 0x4a7f46
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x113ca], cl
push 0
push ebx
call fcn.004d5475
pop ecx
pop ecx
jmp 0x4a86b1
mov eax, dword [0x5a23ec]
mov cl, byte [ebp + 0x10]
mov byte [eax + 0x10fb4], cl
jmp 0x4a86b1
mov eax, dword [0x5a23ec]
mov cl, byte [ebp + 0x10]
mov byte [eax + 0x10fb5], cl
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a572c
jmp 0x4a7415
mov ecx, dword [0x5a22a0]
push ebx
call fcn.00415f48
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x11584], cl
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a368b
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a36d3
jmp 0x4a7415
mov edx, 0x849
cmp ecx, edx
ja 0x4a7c13
je 0x4a86b1
add edx, 0xffffffcb
cmp ecx, edx
ja 0x4a7b00
je 0x4a7ae9
cmp ecx, 0x808
ja 0x4a7a63
cmp ecx, 0x806
jae 0x4a84e6
cmp ecx, 0x6e4
je case.0x4a7622.1648
cmp ecx, 0x6e5
je 0x4a7a3b
cmp ecx, 0x6e8
je case.0x4a7622.1648
cmp ecx, 0x6f0
jbe case.0x4a7c3b.2130
cmp ecx, 0x6f5
jbe 0x4a7a2a
cmp ecx, 0x805
jne case.0x4a7c3b.2130
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a61a6
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a6117
jmp 0x4a7415
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x10fd4], cl
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a7071
jmp 0x4a7415
sub eax, 0x80a
je 0x4a7ad2
sub eax, 1
je 0x4a7ac1
sub eax, 5
je 0x4a7ab0
sub eax, 1
je 0x4a7a99
dec eax
sub eax, 1
jne case.0x4a7c3b.2130
cmp byte [ebp + 0x10], al
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x1160d], cl
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x11640], cl
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a6b33
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a6eb7
jmp 0x4a7415
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x1160c], cl
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
sete cl
mov byte [eax + 0x1160e], cl
jmp 0x4a86b1
mov edx, 0x832
cmp ecx, edx
ja 0x4a7b93
je case.0x4a7885.1752
sub eax, 0x815
je case.0x4a7885.1747
sub eax, 4
je 0x4a7b6b
sub eax, 3
je 0x4a7b54
sub eax, 0xa
je case.0x4a7622.1649
sub eax, 1
jne case.0x4a7c3b.2130
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a6af2
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a5cd8
jmp 0x4a7415
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x11006], cl
jmp 0x4a7f46
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a69e3
jmp 0x4a7415
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x113d4], cl
jmp 0x4a7c92
cmp ecx, 0x836
je 0x4a7c02
cmp ecx, 0x838
je 0x4a7beb
cmp ecx, 0x83c
jbe case.0x4a7c3b.2130
cmp ecx, 0x83e
jbe 0x4a7bda
cmp ecx, 0x842
jne case.0x4a7c3b.2130
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x11001], cl
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a37c5
jmp 0x4a7415
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x111ae], cl
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a57e0
jmp 0x4a7415
mov edx, 0x87b
cmp ecx, edx
ja 0x4a7d79
je 0x4a7d68
sub eax, 0x84a
cmp eax, 0x28
ja case.0x4a7c3b.2130
movzx eax, byte [eax + 0x4a88b9]
jmp dword [eax*4 + 0x4a887d]
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a52c0
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a517d
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a5358
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a5128
jmp 0x4a7415
mov eax, dword [0x5a23ec]
movzx ecx, byte [ebp + 0x10]
mov dword [eax + 0x22], ecx
mov ecx, dword [0x5a22a0]
call fcn.00412b20
jmp 0x4a86b1
cmp dword [ebp + 8], 0
je 0x4a86b1
mov ecx, dword [0x5a23f0]
lea eax, [ebp + 0xc]
push eax
call fcn.004677a9
test al, al
je 0x4a86b1
push dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
push esi
call fcn.004ad3d8
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a46a7
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a473c
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a4ee3
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a439f
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a4d6a
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a4e6d
jmp 0x4a7415
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0xee4], cl
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0xee5], cl
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004b6a05
jmp 0x4a7415
sub eax, 0x883
je 0x4a7f68
sub eax, 0x2e
je 0x4a7df4
sub eax, 0x15
je 0x4a7de1
sub eax, 7
je 0x4a7dca
sub eax, 4
je 0x4a7db3
dec eax
sub eax, 1
jne case.0x4a7c3b.2130
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a5934
jmp 0x4a7415
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x10fc2], cl
jmp 0x4a86b1
cmp byte [ebp + 0x10], 0
mov eax, dword [0x5a23ec]
setne cl
mov byte [eax + 0x113d5], cl
jmp 0x4a7c92
mov eax, dword [0x5a23ec]
mov cl, byte [ebp + 0x10]
mov byte [eax + 0x10ffc], cl
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004b6a1c
jmp 0x4a7415
xor ebx, ebx
xor eax, eax
cmp byte [ebp + 0x10], al
push ebx
sete al
push ebx
inc eax
push eax
push ebx
call fcn.0042623d
add esp, 0x10
jmp 0x4a734e
sub eax, 0x8e6
cmp eax, 0x336
ja case.0x4a7c3b.2130
movzx eax, byte [eax + 0x4a8a91]
jmp dword [eax*4 + 0x4a88e5]
mov ecx, dword [0x5a22a0]
push ebx
call fcn.0041c50d
jmp 0x4a86b1
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a430a
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a53d2
jmp 0x4a7415
push dword [ebp + 0x10]
push esi
push dword [ebp + 8]
call fcn.004a6e41
jmp 0x4a7415
xor ebx, ebx
push ebx
push 0x397
push str.t:_vcprojectmaximus5conemu_srcconemu_setdlgbuttons.cpp
push str.FALSE___Button_click_was_not_processed_
call fcn.0041f6df
add esp, 0x10
pop esi
mov al, bl
pop ebx
pop ebp
ret