Function at 0x45eb36
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47b509
mov eax, dword fs:[0]
push eax
mov eax, 0x107c
call fcn.00461d80
mov eax, dword [0x49dd70]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
push esi
call fcn.0045d11e
test al, al
je 0x45eb7f
mov al, 1
jmp 0x45f05d
mov eax, 0x339
push 9
pop ebx
cmp esi, eax
jg 0x45eef4
je case.0x45ef0a.882
mov eax, 0x1c2
cmp esi, eax
jg 0x45ed79
je 0x45ed6a
add eax, 0xffffffe4
cmp esi, eax
jg 0x45eca0
je 0x45ec9c
mov eax, 0x14b
cmp esi, eax
jg 0x45ec3e
je 0x45ec0c
mov eax, esi
sub eax, 8
je 0x45ebf1
sub eax, 0xe6
je 0x45ebe5
dec eax
jne case.0x45ef0a.830
mov ecx, 0x4a13d0
call fcn.00430753
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.0043016f
jmp 0x45eb78
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push edi
xor ebx, ebx
push ebx
push 6
push edi
call esi
push ebx
push ebx
push 0x10
push edi
call esi
jmp 0x45eb78
mov ecx, dword [0x4a13dc]
imul ecx, ecx, 0x228
mov esi, 0x4a14a8
push 0
add ecx, esi
call fcn.0042eeae
mov ecx, dword [0x4a13dc]
imul ecx, ecx, 0x228
add ecx, esi
call fcn.0041b75a
jmp 0x45eb78
cmp esi, 0x19a
jl case.0x45ef0a.830
cmp esi, 0x19d
jle 0x45ec88
cmp esi, 0x1a4
je 0x45ec6a
cmp esi, 0x1a5
jne case.0x45ef0a.830
push 5
jmp 0x45ec6c
push 4
mov ecx, dword [0x4a13dc]
imul ecx, ecx, 0x228
add ecx, 0x4a14a8
call fcn.0042f629
jmp 0x45eb78
lea eax, [esi - 0x19a]
cmp eax, 4
jae 0x45eb78
jmp 0x45f0b7
push 0xc
jmp 0x45ec6c
mov eax, esi
sub eax, 0x1a7
je 0x45ed63
dec eax
je 0x45ed5c
sub eax, 6
je 0x45ed40
dec eax
je 0x45ed24
dec eax
je 0x45ed08
sub eax, 8
je 0x45ecec
sub eax, ebx
jne case.0x45ef0a.830
mov ecx, dword [0x4a13dc]
imul ecx, ecx, 0x228
add ecx, 0x4a14a8
call fcn.0041b72e
jmp 0x45eb78
mov ecx, dword [0x4a13dc]
imul ecx, ecx, 0x228
add ecx, 0x4a14a8
call fcn.0042a829
jmp 0x45eb78
mov ecx, dword [0x4a13dc]
imul ecx, ecx, 0x228
add ecx, 0x4a14a8
call fcn.00426359
jmp 0x45eb78
mov ecx, dword [0x4a13dc]
imul ecx, ecx, 0x228
add ecx, 0x4a14a8
call fcn.00424916
jmp 0x45eb78
mov ecx, dword [0x4a13dc]
imul ecx, ecx, 0x228
add ecx, 0x4a14a8
call fcn.004234dd
jmp 0x45eb78
push 0
jmp 0x45ec6c
push 7
jmp 0x45ec6c
mov ecx, 0x4a13d0
call fcn.00417257
jmp 0x45eb78
mov eax, 0x265
cmp esi, eax
jg 0x45ee53
je 0x45ee42
mov eax, esi
sub eax, 0x1cc
je 0x45ee24
dec eax
je 0x45ee13
dec eax
je 0x45ee02
dec eax
je 0x45edf1
sub eax, 0x93
je 0x45ede0
dec eax
je 0x45edcf
dec eax
jne case.0x45ef0a.830
mov ecx, dword [0x4a13dc]
imul ecx, ecx, 0x228
add ecx, 0x4a14a8
call fcn.004265ca
jmp 0x45eb78
push 1
xor ebx, ebx
push ebx
push ebx
push dword [0x49d9f8]
jmp 0x45f10b
push 1
xor ebx, ebx
push ebx
push ebx
push dword [0x49da04]
jmp 0x45f10b
cmp byte [0x4a13e2], 0
sete al
mov byte [0x4a13e2], al
jmp 0x45ee33
cmp byte [0x4a13e3], 0
sete al
mov byte [0x4a13e3], al
jmp 0x45ee33
cmp byte [0x4a13e1], 0
sete al
mov byte [0x4a13e1], al
jmp 0x45ee33
cmp byte [0x4a13e0], 0
sete al
mov byte [0x4a13e0], al
mov ecx, 0x4a13d0
call fcn.0041854a
jmp 0x45eb78
push 1
xor ebx, ebx
push ebx
push ebx
push dword [0x49d9fc]
jmp 0x45f10b
mov eax, esi
sub eax, 0x266
je 0x45eee3
sub eax, 6
je 0x45eeb5
sub eax, 0xc9
je 0x45eea6
dec eax
je 0x45ee97
dec eax
je 0x45ee88
dec eax
jne case.0x45ef0a.830
mov ecx, 0x4a13d0
call fcn.0045d0d9
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.00416241
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.0041622c
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.00416217
jmp 0x45eb78
and dword [ebp - 0x1014], 0
mov dword [ebp - method.NWindows::NControl::CDialog.virtual_0], 0x4829b4
push edi
push 0x1fb
lea ecx, [ebp - 0x1018]
mov dword [ebp - 4], 4
call fcn.00438355
jmp 0x45eb78
push 1
xor ebx, ebx
push ebx
push ebx
push dword [0x49d9f4]
jmp 0x45f10b
lea eax, [esi - 0x33a]
cmp eax, 0x3e
ja case.0x45ef0a.830
movzx eax, byte [eax + 0x45f422]
jmp dword [eax*4 + 0x45f3b6]
mov ecx, 0x4a13d0
call fcn.00416808
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.00416256
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.0041625b
jmp 0x45eb78
mov ecx, dword [0x4a13dc]
imul ecx, ecx, 0x228
add ecx, 0x4a14a8
call fcn.0041fb8e
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.00416270
jmp 0x45eb78
xor ebx, ebx
mov dword [0x4a1918], edi
cmp byte [0x4a138f], bl
je 0x45f079
push 3
lea ecx, [ebp - 0x101c]
mov dword [ebp - 0x101c], ebx
mov dword [ebp - 0x1018], ebx
mov dword [ebp - 0x1014], ebx
call fcn.0040ce36
lea eax, [ebp - 0x101c]
push eax
mov dword [ebp - 4], ebx
call fcn.0044a55a
push str.BianYa.exe
lea eax, [ebp - 0x101c]
push eax
lea eax, [ebp - 0x1030]
push eax
call fcn.0040d606
push eax
lea ecx, [ebp - 0x101c]
mov byte [ebp - 4], 1
call fcn.0040d2a6
push dword [ebp - 0x1030]
mov byte [ebp - 4], bl
call fcn.0044c2e3
mov esi, 0x1000
push esi
lea eax, [ebp - 0x1010]
push ebx
push eax
call fcn.00461d00
mov eax, dword [ebp - 0x1018]
add esp, 0x10
cmp eax, dword [ebp - 0x1014]
jl 0x45f011
push eax
lea ecx, [ebp - 0x101c]
call fcn.0040ce36
push esi
lea eax, [ebp - 0x1010]
push eax
push dword [ebp - 0x101c]
call fcn.00438cb7
push 1
push ebx
push str._SET_WIN7_IconLinkBianYa
lea eax, [ebp - 0x1010]
push eax
push str.RunAs
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push ebx
push ebx
push 0x10
push dword [0x4a1394]
call dword [sym.imp.USER32.dll_PostMessageA]
push dword [ebp - 0x101c]
call fcn.0044c2e3
pop ecx
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00460f48
leave
ret 8
push dword [0x4a1398]
push edi
call fcn.00442478
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.00417c52
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.00417d96
jmp 0x45eb78
lea eax, [esi - 0x35d]
cmp eax, 4
jge 0x45eb78
mov ecx, dword [0x4a13dc]
imul ecx, ecx, 0x228
push eax
add ecx, 0x4a14a8
call fcn.0041bf55
jmp 0x45eb78
mov ecx, dword [0x4a13dc]
imul ecx, ecx, 0x228
add ecx, 0x4a14a8
call fcn.0041beb5
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.00417e5c
jmp 0x45eb78
push 1
xor ebx, ebx
push ebx
push ebx
push dword [0x49da00]
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.00416758
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.004167b0
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.00418a26
jmp 0x45eb78
mov ecx, dword [0x4a13dc]
imul ecx, ecx, 0x228
add ecx, 0x4a14a8
call fcn.00429026
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.00416285
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.004166da
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.0041629a
jmp 0x45eb78
mov ecx, dword [0x4a13dc]
imul ecx, ecx, 0x228
add ecx, 0x4a14a8
call fcn.00429809
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.004162af
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.00417e95
jmp 0x45eb78
lea ecx, [ebp - 0x1018]
mov dword [ebp - 0x1014], 0x4a14a8
call fcn.00415ef0
lea ecx, [ebp - 0x1024]
mov dword [ebp - 4], 2
mov dword [ebp - 0x1020], 0x4a16d0
call fcn.00415ef0
mov byte [ebp - 4], 3
call fcn.0044f0ce
mov eax, dword [ebp - 0x1020]
mov cl, byte [ebp - 0x1024]
mov byte [eax + 0x224], cl
mov cl, byte [ebp - 0x1023]
mov byte [eax + 0x225], cl
mov eax, dword [ebp - 0x1014]
mov cl, byte [ebp - 0x1018]
mov byte [eax + 0x224], cl
mov cl, byte [ebp - 0x1017]
mov byte [eax + 0x225], cl
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.00418a68
jmp 0x45eb78
mov ecx, 0x4a13d0
call fcn.00418af1
jmp 0x45eb78
mov edi, 0x2f8
cmp esi, edi
jl 0x45f2e6
call fcn.0045d327
add eax, edi
cmp esi, eax
jge 0x45f2e6
xor ebx, ebx
push 3
lea ecx, [ebp - 0x101c]
mov dword [ebp - 0x101c], ebx
mov dword [ebp - 0x1018], ebx
mov dword [ebp - 0x1014], ebx
call fcn.0040ce36
add esi, 0xfffffd08
push esi
lea eax, [ebp - 0x101c]
push eax
mov dword [ebp - 4], 5
call fcn.0045d2d1
sub esp, 0xc
lea eax, [ebp - 0x101c]
mov ecx, esp
mov dword [ebp - 0x1020], esp
push eax
call fcn.0040d273
mov ecx, 0x4a13d0
call fcn.0045d288
push dword [ebp - 0x101c]
call fcn.0044c2e3
pop ecx
jmp 0x45eb78
lea eax, [esi - 0x2ef]
cmp eax, 3
ja 0x45f314
mov ecx, dword [0x4a13dc]
imul ecx, ecx, 0x228
add esi, 0xfffffd12
push esi
add ecx, 0x4a14a8
call fcn.004262c5
jmp 0x45eb78
lea eax, [esi - 0x2da]
cmp eax, ebx
ja 0x45f341
mov ecx, dword [0x4a13dc]
imul ecx, ecx, 0x228
add esi, 0xfffffd26
push esi
add ecx, 0x4a14a8
call fcn.004257d6
jmp 0x45eb78
lea eax, [esi - 0x302]
cmp eax, ebx
ja 0x45f383
lea ecx, [ebp - 0x1088]
call fcn.00417017
add esi, 0xfffffcfe
push esi
lea ecx, [ebp - 0x1088]
mov dword [ebp - 4], 6
call fcn.004405ab
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1088]
call fcn.0041708a
jmp 0x45eb78
lea eax, [esi - 0x2e4]
cmp eax, ebx
ja 0x45f05b
mov ecx, dword [0x4a13dc]
imul ecx, ecx, 0x228
add esi, 0xfffffd1c
push esi
add ecx, 0x4a14a8
call fcn.00422d2f
jmp 0x45eb78