Function at 0x4b64d1
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 8], ecx
mov ebx, dword [edi + 4]
test ebx, ebx
je 0x4b68b0
mov eax, dword [ebx]
mov ecx, ebx
push esi
call dword [eax + 0x30]
push eax
lea ecx, [ebp - 0xc]
call fcn.004177e7
mov eax, dword [edi]
sub eax, 0x10
push eax
call fcn.00418dea
pop ecx
lea esi, [eax + 0x10]
mov eax, dword [edi + 0x14]
cmp dword [esi - 0xc], 0
mov dword [ebp - 4], eax
mov eax, dword [edi + 0x18]
mov edi, dword [ebp - 0xc]
mov dword [ebp + 8], eax
jle 0x4b689f
push 0x699740
push edi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b6559
push 0x685708
push esi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b6559
push dword [ebp + 8]
mov ecx, dword [ebp - 8]
push dword [ebp - 4]
push ebx
call fcn.004d9f00
jmp 0x4b689f
push str.calendar_year
push edi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b658f
push str.itemselect
push esi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b658f
push dword [ebp + 8]
mov ecx, dword [ebp - 8]
push dword [ebp - 4]
push ebx
call fcn.004c1c60
jmp 0x4b689f
push str.calendar_month
push edi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b65c5
push str.itemselect
push esi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b65c5
push dword [ebp + 8]
mov ecx, dword [ebp - 8]
push dword [ebp - 4]
push ebx
call fcn.004c1bc5
jmp 0x4b689f
push 0x6b52b4
push edi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b65fb
push str.lclick
push esi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b65fb
push dword [ebp + 8]
mov ecx, dword [ebp - 8]
push dword [ebp - 4]
push ebx
call fcn.004bdb85
jmp 0x4b689f
push str.calendar_next_mon
push edi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b6631
push str.lclick
push esi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b6631
push dword [ebp + 8]
mov ecx, dword [ebp - 8]
push dword [ebp - 4]
push ebx
call fcn.004bda63
jmp 0x4b689f
push str.calendar_today
push edi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b6667
push str.lclick
push esi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b6667
push dword [ebp + 8]
mov ecx, dword [ebp - 8]
push dword [ebp - 4]
push ebx
call fcn.004bdcc1
jmp 0x4b689f
push str.addremind
push edi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b669d
push str.lclick
push esi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b669d
push dword [ebp + 8]
mov ecx, dword [ebp - 8]
push dword [ebp - 4]
push ebx
call fcn.004bd9d2
jmp 0x4b689f
push str.calendar_holiday
push edi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b66d3
push str.itemselect
push esi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b66d3
push dword [ebp + 8]
mov ecx, dword [ebp - 8]
push dword [ebp - 4]
push ebx
call fcn.004c1ab7
jmp 0x4b689f
push str.dayremind
push edi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b6709
push str.lclick
push esi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b6709
push dword [ebp + 8]
mov ecx, dword [ebp - 8]
push dword [ebp - 4]
push ebx
call fcn.004c347e
jmp 0x4b689f
push str.calendar.monthschedule.day.item
push edi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b673f
push str.lclick
push esi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b673f
push dword [ebp + 8]
mov ecx, dword [ebp - 8]
push dword [ebp - 4]
push ebx
call fcn.004bde23
jmp 0x4b689f
push str.calendar.monthschedule.day.item
push edi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b6775
push str.ldbclick
push esi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b6775
push dword [ebp + 8]
mov ecx, dword [ebp - 8]
push dword [ebp - 4]
push ebx
call fcn.004bde8e
jmp 0x4b689f
push str.calendar.monthschedule.day.item
push edi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b67ab
push str.mouseleave
push esi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b67ab
push dword [ebp + 8]
mov ecx, dword [ebp - 8]
push dword [ebp - 4]
push ebx
call fcn.004bdfed
jmp 0x4b689f
push str.daypiao
push edi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b67e3
push str.lclick
push esi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b67e3
push 5
push eax
push eax
push str.https:__www.12306.cn
push eax
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x4b689f
push str.calendar_remindgroupfilter
push edi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b6819
push str.lclick
push esi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b6819
push dword [ebp + 8]
mov ecx, dword [ebp - 8]
push dword [ebp - 4]
push ebx
call fcn.004be2a1
jmp 0x4b689f
push str.subscribesstore
push edi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b684c
push str.lclick
push esi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b684c
push dword [ebp + 8]
mov ecx, dword [ebp - 8]
push dword [ebp - 4]
push ebx
call fcn.004d3606
jmp 0x4b689f
push str.toolsstore
push edi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b686e
push str.lclick
push esi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
je 0x4b689f
push str.main_set
push edi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b689f
push str.lclick
push esi
call fcn.0063cf0b
pop ecx
pop ecx
test eax, eax
jne 0x4b689f
push dword [ebp + 8]
mov ecx, dword [ebp - 8]
push dword [ebp - 4]
push ebx
call fcn.004ca3ad
lea ecx, [esi - 0x10]
call fcn.00419521
lea ecx, [edi - 0x10]
call fcn.00419521
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 4