Function at 0x45be68
Capabilities:
Create process on windows
Hide graphical window

Disassembly:
push 0x6e0
mov eax, 0x4b96f4
call fcn.004afd5b
mov eax, dword [ebp + 0x10]
push eax
mov edi, ecx
push str.trashSoftItemPanel
mov dword [ebp - 0xa8], edi
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x45c5f2
mov ebx, dword [ebp + 8]
mov eax, edi
call fcn.004660cd
push eax
push edi
call fcn.0045d4a2
test eax, eax
je 0x45bebd
push dword [ebp + 0xc]
call fcn.004779f7
mov esi, eax
mov dword [ebp - 0xb0], esi
jmp 0x45beca
and dword [ebp - 0xb0], 0
mov esi, dword [ebp - 0xb0]
test esi, esi
je 0x45c5f2
mov ebx, dword [esi + 0x148]
mov eax, dword [esi + 0x140]
test eax, eax
mov ecx, dword [esi + 0x14c]
mov edx, dword [esi + 0x144]
mov dword [ebp - 0xc8], ecx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xa4], ebx
jne 0x45c0f4
xor ecx, ecx
inc ecx
cmp edx, ecx
jne 0x45c5f2
mov eax, dword [esi + 0x138]
test eax, eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xa0], ecx
jne 0x45bfb5
cmp dword [edi + 0x1040], eax
je 0x45bfb5
cmp ebx, 0xe
jne 0x45bfb5
lea esi, [ebp - 0x6ec]
call fcn.0045da6f
xor esi, esi
mov dword [ebp - 0x6ec], 0x4d0a4c
mov dword [ebp - method.KCmnShadowDlgEx_class_BigFileCatDetailDlg_.virtual_0], 0x4d0a88
mov dword [ebp - fcn.004895df], 0x4d0a90
mov dword [ebp - 0xd8], esi
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 4], esi
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x6ec]
call fcn.0045ddf7
cmp eax, 2
jne 0x45bf8d
mov dword [ebp - 0xa0], esi
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x6ec]
push eax
call fcn.0045dbb9
cmp dword [ebp - 0xa0], esi
je 0x45c5f2
mov esi, dword [ebp - 0xb0]
mov edi, dword [ebp - 0xa8]
cmp dword [esi + 0x14c], 0x2710
je 0x45c061
mov ebx, dword [esi + 0x154]
and dword [ebp - 0xb4], 0
and dword [ebp - 0xb0], 0
test ebx, ebx
je 0x45c001
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
cmp eax, 3
jne 0x45c001
push dword [ebp - 0xc8]
lea eax, [ebp - 0xb4]
push eax
push edi
mov ecx, ebx
call fcn.0045b75e
mov ebx, eax
jmp 0x45c00d
xor ebx, ebx
cmp dword [ebp - 0xc8], 1
setne bl
mov eax, ebx
mov ecx, esi
call fcn.00475fa8
call fcn.0040293f
push dword [ebp - 0xb0]
push dword [ebp - 0xb4]
push ebx
push dword [ebp - 0xb8]
call fcn.0040233e
lea eax, [ebp - 0xa4]
push eax
lea eax, [edi + 0x100c]
push eax
lea ebx, [ebp - 0xc0]
call fcn.00456fe3
call fcn.004663e1
push dword [ebp - 0xa8]
call fcn.00466f07
jmp 0x45c5f2
mov eax, dword [edi + 0x5d4]
mov eax, dword [eax + 0xc]
push ebx
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004955a8
mov dword [ebp - 4], 1
cmp dword [ebp - 0xa0], 0
je 0x45c0d8
push ecx
mov edi, esp
and dword [edi], 0
lea ebx, [ebp - 0xa0]
mov dword [ebp - 0xb8], esp
call fcn.00403e28
push dword [ebp - 0xa8]
call fcn.0045d89f
mov eax, dword [ebp - 0xa0]
xor edi, edi
call fcn.00494b23
test al, al
je 0x45c0bd
inc edi
jmp 0x45c0cf
mov eax, dword [ebp - 0xa0]
call fcn.00494b92
test al, al
je 0x45c0cf
push 2
pop edi
mov eax, edi
mov ecx, esi
call fcn.00475fa8
or dword [ebp - 4], 0xffffffff
mov esi, dword [ebp - 0xa0]
test esi, esi
je 0x45c5f2
call fcn.00403737
jmp 0x45c5f2
xor ebx, ebx
inc ebx
cmp eax, ebx
jne 0x45c3b1
cmp dword [ebp - 0xa4], 0xe
jne 0x45c154
call fcn.004167e2
mov ecx, eax
call fcn.004165bc
test eax, eax
je 0x45c5f2
mov eax, dword [edi + 0xff8]
mov dword [eax + 0x70], ebx
mov eax, dword [esi + 0x14]
mov edx, dword [esi]
add eax, 6
push eax
mov ecx, esi
call dword [edx + 0x50]
mov ecx, edi
mov ebx, eax
call fcn.00463a7b
and dword [esi + 0x13c], 0
push 0x4d05e8
mov eax, ebx
call fcn.0041cc8a
jmp 0x45c5f2
and dword [ebp - 0xb0], 0
and dword [ebp - 0xa0], 0
lea eax, [ebp - 0xa0]
push eax
push 0
push dword [ebp - 0xa4]
lea ebx, [edi + 0x590]
push ecx
mov eax, ebx
call fcn.004038a0
mov eax, dword [ebp - 0xa0]
test eax, eax
jbe 0x45c1dc
xor ecx, ecx
push 4
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004997e3
test eax, eax
pop ecx
mov dword [ebp - 0xb0], eax
je 0x45c1c3
lea ecx, [ebp - 0xa0]
push ecx
push eax
push dword [ebp - 0xa4]
mov eax, ebx
push dword [ebp - 0xc8]
call fcn.004038a0
lea eax, [ebp - 0xa4]
push eax
lea eax, [edi + 0x1018]
push eax
lea ebx, [ebp - 0xc0]
call fcn.00456fe3
cmp dword [ebp - 0xa0], 1
jne 0x45c226
mov esi, dword [ebp - 0xb0]
test esi, esi
je 0x45c5f2
mov eax, dword [esi]
test eax, eax
je 0x45c393
push eax
call dword [sym.imp.MSVCR80.dll_wcslen]
test eax, eax
pop ecx
jbe 0x45c393
push 1
xor eax, eax
push eax
push eax
push dword [esi]
push str.open
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x45c393
jbe 0x45c393
mov ebx, dword [ebp + 8]
mov eax, edi
call fcn.004660cd
push eax
push edi
lea edi, [ebp - 0xbc]
call fcn.0045d4ff
mov eax, dword [esi + 0x14]
mov edx, dword [esi]
add eax, 8
push eax
mov ecx, esi
call dword [edx + 0x50]
mov ecx, eax
xor esi, esi
cmp ecx, esi
je 0x45c264
lea eax, [ebp - 0xd4]
call fcn.0040e858
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xcc]
mov edi, dword [ebp - 0xa8]
lea eax, [eax + ecx + 5]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xd0]
add dword [ebp - 0xb8], eax
lea eax, [ebp - 0xbc]
push eax
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ClientToScreen]
add edi, 0x1000
cmp dword [edi], esi
je 0x45c2b9
mov eax, dword [edi]
cmp eax, esi
je 0x45c2b9
push eax
call dword [sym.imp.USER32.dll_DestroyMenu]
test eax, eax
je 0x45c2b9
mov dword [edi], esi
call dword [sym.imp.USER32.dll_CreatePopupMenu]
cmp eax, esi
mov dword [edi], eax
je 0x45c378
xor eax, eax
cmp dword [ebp - 0xa0], esi
mov dword [ebp - 0xa4], eax
jbe 0x45c378
mov ebx, dword [sym.imp.USER32.dll_AppendMenuW]
cmp eax, 3
jge 0x45c378
mov esi, dword [ebp - 0xb0]
test esi, esi
je 0x45c35f
lea esi, [esi + eax*4]
mov eax, dword [esi]
test eax, eax
je 0x45c35f
push eax
call dword [sym.imp.MSVCR80.dll_wcslen]
test eax, eax
pop ecx
jbe 0x45c35f
push dword [esi]
call dword [sym.imp.MSVCR80.dll_wcslen]
cmp eax, 0x40
pop ecx
jbe 0x45c351
and word [ebp - 0x9c], 0
push 0x80
lea eax, [ebp - 0x9a]
push 0
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x40
lea eax, [ebp - 0x9c]
push eax
push dword [esi]
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
lea eax, [ebp - 0x9c]
push eax
jmp 0x45c353
push dword [esi]
push dword [ebp - 0xa4]
push 0
push dword [edi]
call ebx
mov eax, dword [ebp - 0xa4]
inc eax
cmp eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa4], eax
jb 0x45c2e3
mov eax, dword [ebp - 0xa8]
push dword [eax + 4]
mov eax, dword [ebp - 0xbc]
push dword [ebp - 0xb8]
push edi
call fcn.0045e11d
cmp dword [ebp - 0xb0], 0
je 0x45c5f2
push dword [ebp - 0xb0]
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
pop ecx
jmp 0x45c5f2
cmp eax, 2
jne 0x45c5f2
lea eax, [ebp - 0xa4]
push eax
lea eax, [edi + 0x1024]
push eax
lea ebx, [ebp - 0xc0]
call fcn.00456fe3
mov ebx, dword [ebp + 8]
mov eax, edi
call fcn.004660cd
push eax
push edi
lea edi, [ebp - 0xcc]
call fcn.0045d4ff
mov eax, dword [esi + 0x14]
mov edx, dword [esi]
add eax, 9
push eax
mov ecx, esi
call dword [edx + 0x50]
mov ecx, eax
xor ebx, ebx
cmp ecx, ebx
je 0x45c40b
lea eax, [ebp - 0xc4]
call fcn.0040e858
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc0]
mov edi, dword [ebp - 0xa8]
add eax, ecx
mov ecx, dword [ebp - 0xc8]
mov dword [ebp - 0xcc], eax
lea eax, [ebp - 0xcc]
push eax
push dword [edi + 4]
add ecx, edx
mov dword [ebp - 0xc8], ecx
call dword [sym.imp.USER32.dll_ClientToScreen]
call fcn.004063e2
call fcn.0040660a
test eax, eax
je 0x45c46f
cmp dword [edi + 0x24], ebx
je 0x45c46f
push 0x67
push ecx
call fcn.004063e2
pop ecx
push eax
call fcn.00406674
mov esi, eax
jmp 0x45c472
push 0x67
pop esi
call fcn.004063e2
call fcn.0040660a
test eax, eax
je 0x45c496
cmp dword [edi + 0x24], ebx
je 0x45c496
push 6
push ecx
call fcn.004063e2
pop ecx
push eax
call fcn.00406674
jmp 0x45c499
push 6
pop eax
sub eax, esi
add eax, dword [ebp - 0xcc]
mov esi, eax
mov dword [ebp - 0xc4], esi
call fcn.004063e2
call fcn.0040660a
test eax, eax
je 0x45c4d0
cmp dword [edi + 0x24], ebx
je 0x45c4d0
push 0xce
push ecx
call fcn.004063e2
pop ecx
push eax
call fcn.00406674
jmp 0x45c4d5
mov eax, 0xce
add eax, esi
mov dword [ebp - 0xbc], eax
call fcn.004063e2
call fcn.0040660a
test eax, eax
je 0x45c501
cmp dword [edi + 0x24], ebx
je 0x45c501
push 0x46
push ecx
call fcn.004063e2
pop ecx
push eax
call fcn.00406674
jmp 0x45c504
push 0x46
pop eax
mov esi, dword [ebp - 0xc8]
sub esi, eax
mov dword [ebp - 0xc0], esi
call fcn.004063e2
call fcn.0040660a
test eax, eax
je 0x45c536
cmp dword [edi + 0x24], ebx
je 0x45c536
push 0x4a
push ecx
call fcn.004063e2
pop ecx
push eax
call fcn.00406674
jmp 0x45c539
push 0x4a
pop eax
add eax, esi
mov dword [ebp - 0xb8], eax
call fcn.0040293f
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x94]
push ecx
mov ebx, eax
call fcn.00401d39
mov dword [ebp - 4], 2
mov ebx, dword [sym.imp.USER32.dll_IsWindow]
lea esi, [edi + 0xaec]
push dword [esi]
call ebx
test eax, eax
jne 0x45c58e
push eax
push dword [edi + 4]
lea ecx, [edi + 0xae8]
call fcn.00436b0d
push 0
push dword [esi]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [esi]
call ebx
test eax, eax
je 0x45c5e2
push dword [esi]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x45c5e2
push 1
push esi
lea eax, [ebp - 0xc4]
call fcn.00405d09
push 5
push dword [esi]
call dword [sym.imp.USER32.dll_ShowWindow]
cmp dword [ebp - 0x58], 8
mov eax, dword [ebp - 0x6c]
jae 0x45c5c6
lea eax, [ebp - 0x6c]
push eax
lea esi, [edi + 0xff0]
push esi
call fcn.004014fa
push dword [esi]
lea eax, [edi + 0xb0c]
push 0x64
call fcn.0046e16d
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x94]
push eax
call fcn.00401bf9
call fcn.004afdde
ret 0xc