Function at 0x483610
Capabilities:
Create process on windows
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 8
add esp, 0xfffff004
push eax
dec eax
jne 0x483619
mov eax, dword [ebp - 4]
add esp, 0xfffffbc8
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x83bc], eax
mov edi, dword [0x4bedb0]
xor eax, eax
push ebp
push 0x4844e8
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4bee68]
cmp byte [eax], 6
jae 0x48366d
mov ax, 0x349
call fcn.004aa600
mov edx, 4
call fcn.004b12a8
jmp 0x4844cf
mov eax, dword [0x4bef50]
mov eax, dword [eax]
lea edx, [eax + 8]
lea eax, [ebp - 0x830c]
call fcn.004b81b0
lea eax, [ebp - 0x830c]
call fcn.004b8144
mov byte [ebp + eax - 0x8310], 0
lea eax, [ebp - 0x830c]
call fcn.004aedb4
mov ax, 0x4b
call fcn.004aa600
lea edx, [ebp - 0x830c]
call fcn.004ae1b0
mov edx, edi
lea eax, [ebp - 0x830c]
call fcn.004b81b0
mov eax, dword [0x4beafc]
push eax
lea eax, [ebp - 0x830c]
push eax
call sub.kernel32.dll_lstrcatA
lea eax, [ebp - 0x83bc]
lea edx, [ebp - 0x830c]
mov ecx, pe_nt_image_headers32
call fcn.00404b04
mov edx, dword [ebp - 0x83bc]
lea eax, [ebp - 0x81d0]
call fcn.00402bec
lea eax, [ebp - 0x81d0]
call fcn.0040297c
call fcn.00402634
test eax, eax
je 0x483722
lea edx, [ebp - 0x830c]
mov ax, 3
call fcn.004acdac
jmp 0x4844cf
mov edx, 0x484500
lea eax, [ebp - 0x81d0]
call fcn.00404e58
call fcn.00403624
mov edx, 0x484518
lea eax, [ebp - 0x81d0]
call fcn.00404e58
push eax
lea eax, [ebp - 0x8400]
mov edx, dword [0x4bef50]
mov edx, dword [edx]
add edx, 0x108
mov ecx, 0x40
call fcn.00403678
lea edx, [ebp - 0x8400]
pop eax
call fcn.00403584
mov edx, 0x484528
call fcn.00404e58
call fcn.00403624
mov edx, 0x48453c
lea eax, [ebp - 0x81d0]
call fcn.00404e58
push eax
lea eax, [ebp - 0x8420]
mov edx, dword [0x4be32c]
mov ecx, 0x1c
call fcn.00403678
lea edx, [ebp - 0x8420]
pop eax
call fcn.00403584
push eax
lea eax, [ebp - 0x8428]
mov edx, dword [0x4be948]
mov ecx, 7
call fcn.00403678
lea edx, [ebp - 0x8428]
pop eax
call fcn.00403584
mov edx, 0x484568
call fcn.00404e58
call fcn.00403624
mov edx, 0x484574
lea eax, [ebp - 0x81d0]
call fcn.00404e58
call fcn.00403624
mov edx, 0x48458c
lea eax, [ebp - 0x81d0]
call fcn.00404e58
push eax
lea eax, [ebp - 0x8400]
mov edx, dword [0x4bef50]
mov edx, dword [edx]
add edx, 0x108
mov ecx, 0x40
call fcn.00403678
lea edx, [ebp - 0x8400]
pop eax
call fcn.00403584
mov edx, 0x48459c
call fcn.00404e58
call fcn.00403624
push ebp
mov ax, 0x37b
call fcn.004aa600
mov edx, dword [0x4bef50]
mov edx, dword [edx]
add edx, 8
call fcn.00483154
pop ecx
lea eax, [ebp - 0x81e8]
push eax
mov eax, dword [0x4bef50]
mov eax, dword [eax]
push eax
call sub.kernel32.dll_FileTimeToLocalFileTime
lea eax, [ebp - 0x81e8]
call fcn.00411604
mov edx, eax
mov eax, edi
call fcn.004b81b0
lea eax, [ebp - 0x81e8]
call fcn.004115bc
mov edx, eax
mov eax, dword [0x4beb38]
call fcn.004b81b0
push 0x4845a4
push edi
call sub.kernel32.dll_lstrcatA
mov eax, dword [0x4beb38]
push eax
push edi
call sub.kernel32.dll_lstrcatA
push ebp
mov ax, 0x37a
call fcn.004aa600
mov edx, edi
call fcn.00483154
pop ecx
lea eax, [ebp - 0x83b8]
push eax
call sub.kernel32.dll_GetTimeZoneInformation
mov ebx, eax
cmp ebx, 0xffffffff
je 0x4839ff
test ebx, ebx
je 0x4839ff
mov byte [edi], 0
cmp ebx, 1
jne 0x4838fd
mov eax, dword [ebp - 0x8364]
add dword [ebp - 0x83b8], eax
jmp 0x483909
mov eax, dword [ebp - 0x8310]
add dword [ebp - 0x83b8], eax
cmp dword [ebp - 0x83b8], 0
jge 0x48391d
push 0x4845a8
push edi
call sub.kernel32.dll_lstrcatA
mov eax, dword [ebp - 0x83b8]
neg eax
mov dword [ebp - 0x842c], eax
fild dword [ebp - 0x842c]
fdiv dword [0x4845ac]
call fcn.004028f4
mov dword [ebp - 0x8428], eax
mov dword [ebp - 0x8424], edx
fild qword [ebp - 0x8428]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov al, 2
call fcn.004b850c
mov edx, eax
mov eax, dword [0x4beb38]
call fcn.004b81b0
push 0x4845b0
mov eax, dword [0x4beb38]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, dword [ebp - 0x83b8]
cdq
xor eax, edx
sub eax, edx
mov ecx, 0x3c
cdq
idiv ecx
mov dword [ebp - 0x842c], edx
fild dword [ebp - 0x842c]
add esp, 0xfffffff8
fistp qword [esp]
wait
mov al, 2
call fcn.004b850c
push eax
mov eax, dword [0x4beb38]
push eax
call sub.kernel32.dll_lstrcatA
mov eax, dword [0x4beb38]
push eax
push edi
call sub.kernel32.dll_lstrcatA
push 0x4845a4
push edi
call sub.kernel32.dll_lstrcatA
cmp ebx, 1
jne 0x4839e0
mov edx, dword [0x4beb38]
lea eax, [ebp - 0x83b4]
call fcn.004aeb74
jmp 0x4839f1
mov edx, dword [0x4beb38]
lea eax, [ebp - 0x8360]
call fcn.004aeb74
mov eax, dword [0x4beb38]
push eax
push edi
call sub.kernel32.dll_lstrcatA
jmp 0x483a1b
mov eax, dword [0x4be784]
movzx eax, byte [eax + 0x188c]
mov edx, dword [0x4be6b8]
lea edx, [edx + eax*4]
mov eax, edi
call fcn.004b81b0
push ebp
mov edx, edi
mov eax, 0x4845b4
call fcn.00483154
pop ecx
mov edx, dword [0x4be32c]
mov eax, edi
call fcn.004b81b0
mov eax, dword [0x4be948]
push eax
push edi
call sub.kernel32.dll_lstrcatA
push ebp
mov edx, edi
mov eax, 0x4845c8
call fcn.00483154
pop ecx
push ebp
mov ax, 0xc
call fcn.004aa600
mov edx, dword [0x4bef50]
mov edx, dword [edx]
mov edx, dword [edx + 0x154]
call fcn.00483154
pop ecx
mov ax, 0x37c
call fcn.004aa600
mov edx, eax
mov eax, edi
call fcn.004b81b0
mov eax, edi
mov dl, 0x26
call fcn.004aec2c
push ebp
mov eax, dword [0x4bef50]
mov eax, dword [eax]
mov edx, dword [eax + 0x158]
mov eax, edi
call fcn.00483154
pop ecx
lea eax, [ebp - 0x8434]
mov edx, dword [0x4beb0c]
mov ecx, 5
call fcn.00403678
lea edx, [ebp - 0x8434]
lea eax, [ebp - 0x81d0]
call fcn.00403584
call fcn.00403624
mov eax, dword [0x4bef50]
mov eax, dword [eax]
mov ebx, dword [eax + 0x164]
test ebx, ebx
je 0x483b66
cmp dword [ebx + 0x204], 0
je 0x483b66
test ebx, ebx
je 0x483b66
movzx eax, word [ebx + 2]
mov dword [ebp - 0x842c], eax
fild dword [ebp - 0x842c]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004b849c
push eax
mov edx, 0x4845e0
lea eax, [ebp - 0x81d0]
call fcn.00404e58
pop edx
call fcn.004035b8
mov edx, 0x484568
call fcn.00404e58
push eax
lea eax, [ebp - 0x8400]
lea edx, [ebx + 0x108]
mov ecx, 0x40
call fcn.00403678
lea edx, [ebp - 0x8400]
pop eax
call fcn.00403584
mov edx, 0x4845f4
call fcn.00404e58
call fcn.00403624
mov ebx, dword [ebx + 0x204]
test ebx, ebx
jne 0x483aed
mov eax, dword [0x4bef50]
mov eax, dword [eax]
cmp dword [eax + 0x148], 0
je 0x483bc8
lea eax, [ebp - 0x8434]
mov edx, dword [0x4beb0c]
mov ecx, 5
call fcn.00403678
lea edx, [ebp - 0x8434]
lea eax, [ebp - 0x81d0]
call fcn.00403584
mov edx, 0x484608
call fcn.00404e58
push eax
mov ax, 0x389
call fcn.004aa600
mov edx, eax
pop eax
call fcn.004035b8
mov edx, 0x4845f4
call fcn.00404e58
call fcn.00403624
mov eax, dword [0x4bef50]
mov eax, dword [eax]
mov ebx, dword [eax + 0x164]
test ebx, ebx
je 0x484354
movzx eax, word [ebx + 2]
mov dword [ebp - 0x842c], eax
fild dword [ebp - 0x842c]
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004b849c
push eax
mov edx, 0x484620
lea eax, [ebp - 0x81d0]
call fcn.00404e58
pop edx
call fcn.004035b8
mov edx, 0x484638
call fcn.00404e58
push eax
lea eax, [ebp - 0x8400]
lea edx, [ebx + 0x108]
mov ecx, 0x40
call fcn.00403678
lea edx, [ebp - 0x8400]
pop eax
call fcn.00403584
mov edx, 0x484648
call fcn.00404e58
call fcn.00403624
push ebp
mov ax, 0x383
call fcn.004aa600
lea edx, [ebx + 8]
call fcn.00483154
pop ecx
lea eax, [ebp - 0x81e8]
push eax
lea eax, [ebx + 0x178]
push eax
call sub.kernel32.dll_FileTimeToLocalFileTime
lea eax, [ebp - 0x81e8]
call fcn.00411604
mov edx, eax
mov eax, edi
call fcn.004b81b0
lea eax, [ebp - 0x81e8]
call fcn.004115bc
mov edx, eax
mov eax, dword [0x4beb38]
call fcn.004b81b0
push 0x4845a4
push edi
call sub.kernel32.dll_lstrcatA
mov eax, dword [0x4beb38]
push eax
push edi
call sub.kernel32.dll_lstrcatA
push ebp
mov ax, 0x382
call fcn.004aa600
mov edx, edi
call fcn.00483154
pop ecx
mov edx, 0x48465c
lea eax, [ebp - 0x81d0]
call fcn.00404e58
call fcn.00402ca8
cmp byte [ebx + 0x180], 0
jne 0x483d48
lea eax, [ebp - 0x843c]
mov edx, dword [0x4be784]
movzx edx, byte [edx + 0x188c]
mov ecx, dword [0x4be6b8]
lea edx, [ecx + edx*4]
mov ecx, 4
call fcn.00403678
lea edx, [ebp - 0x843c]
lea eax, [ebp - 0x81d0]
call fcn.00403584
push eax
lea eax, [ebp - 0x8434]
mov edx, dword [0x4beb0c]
mov ecx, 5
call fcn.00403678
lea edx, [ebp - 0x8434]
pop eax
call fcn.00403584
call fcn.00403624
jmp 0x483eac
mov dl, 0x28
lea eax, [ebp - 0x81d0]
call fcn.00403500
xor edx, edx
mov dl, byte [ebx + 0x180]
mov ecx, dword [0x4be688]
mov edx, dword [ecx + edx*4]
call fcn.004035b8
mov edx, 0x484674
call fcn.00404e58
call fcn.00402ca8
mov al, byte [ebx + 0x180]
cmp al, 6
ja 0x483deb
mov eax, dword [0x4be4c4]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], edx
xor eax, eax
mov al, byte [ebx + 0x180]
mov edx, dword [0x4be7f8]
xor ecx, ecx
mov cl, byte [edx + eax - 1]
lea edx, [ebx + 0x181]
mov eax, dword [0x4be4c4]
call fcn.004066dc
mov eax, dword [0x4be4c4]
push dword [eax + 4]
push dword [eax]
xor eax, eax
mov al, byte [ebx + 0x180]
mov edx, dword [0x4be7f8]
mov dl, byte [edx + eax - 1]
add edx, edx
xor eax, eax
call fcn.004af0b0
mov edx, dword [0x4be7c4]
mov eax, edi
call fcn.004b81b0
jmp 0x483e77
and eax, 0x7f
mov edx, dword [0x4be7f8]
xor ecx, ecx
mov cl, byte [edx + eax - 1]
lea edx, [ebx + 0x181]
lea eax, [ebp - 0x820c]
call fcn.004066dc
mov al, byte [ebx + 0x180]
cmp al, 8
je 0x483e19
cmp al, 9
jne 0x483e54
cmp al, 9
sete al
and eax, 0x7f
lea eax, [eax + eax*2]
add eax, 4
test eax, eax
jl 0x483e54
inc eax
mov dword [ebp - 0x81ec], eax
xor esi, esi
lea eax, [ebp - 0x820c]
mov edx, esi
shl edx, 2
add eax, edx
mov edx, 4
call fcn.004ab7a4
inc esi
dec dword [ebp - 0x81ec]
jne 0x483e34
push 0
xor eax, eax
mov al, byte [ebx + 0x180]
mov edx, dword [0x4be7f8]
xor ecx, ecx
mov cl, byte [edx + eax - 1]
mov edx, edi
lea eax, [ebp - 0x820c]
call fcn.004b1478
mov edx, edi
lea eax, [ebp - 0x81d0]
call fcn.004035b8
push eax
lea eax, [ebp - 0x8434]
mov edx, dword [0x4beb0c]
mov ecx, 5
call fcn.00403678
lea edx, [ebp - 0x8434]
pop eax
call fcn.00403584
call fcn.00403624
push ebp
mov ax, 0xc
call fcn.004aa600
mov edx, dword [ebx + 0x150]
call fcn.00483154
pop ecx
mov ax, 0x384
call fcn.004aa600
mov edx, eax
mov eax, edi
call fcn.004b81b0
mov eax, edi
mov dl, 0x26
call fcn.004aec2c
push ebp
mov eax, edi
mov edx, dword [ebx + 0x154]
call fcn.00483154
pop ecx
mov esi, 1
cmp dword [ebx + esi*4 + 0x1ac], 0
je 0x483f12
push ebp
mov ax, 0x12d
call fcn.004aa600
mov edx, dword [ebx + esi*4 + 0x1ac]
call fcn.00483154
pop ecx
inc esi
cmp esi, 0x11
jne 0x483ef1
cmp byte [ebx], 0
jne 0x484033
mov eax, dword [0x4be784]
cmp byte [eax + 0x19cf], 0
je 0x484033
lea eax, [ebx + 8]
call fcn.004aecd8
mov edx, eax
lea eax, [ebp - 0x81d6]
mov cx, 3
call fcn.004b81d8
push 0x484678
lea eax, [ebp - 0x81d6]
push eax
call sub.kernel32.dll_lstrcmpiA
test eax, eax
je 0x483fb5
push 0x48467c
lea eax, [ebp - 0x81d6]
push eax
call sub.kernel32.dll_lstrcmpiA
test eax, eax
je 0x483fb5
push 0x484680
lea eax, [ebp - 0x81d6]
push eax
call sub.kernel32.dll_lstrcmpiA
test eax, eax
je 0x483fb5
push 0x484688
lea eax, [ebp - 0x81d6]
push eax
call sub.kernel32.dll_lstrcmpiA
test eax, eax
je 0x483fb5
push 0x48468c
lea eax, [ebp - 0x81d6]
push eax
call sub.kernel32.dll_lstrcmpiA
test eax, eax
jne 0x484033
mov edx, 0x484698
lea eax, [ebp - 0x81d0]
call fcn.00404e58
call fcn.00402ca8
lea edx, [ebx + 8]
lea eax, [ebp - 0x81d0]
call fcn.004035b8
call fcn.00402ca8
mov edx, 0x4846ac
lea eax, [ebp - 0x81d0]
call fcn.00404e58
call fcn.00402ca8
lea eax, [ebp - 0x8400]
lea edx, [ebx + 0x108]
mov ecx, 0x40
call fcn.00403678
lea edx, [ebp - 0x8400]
lea eax, [ebp - 0x81d0]
call fcn.00403584
call fcn.00402ca8
mov edx, 0x4846bc
lea eax, [ebp - 0x81d0]
call fcn.00404e58
call fcn.00403624
push ebp
mov ax, 0x362
call fcn.004aa600
mov edx, 0x4846d0
call fcn.00483154
pop ecx
cmp dword [ebx + 0x158], 0
je 0x4842da
mov edx, 0x4846dc
lea eax, [ebp - 0x81d0]
call fcn.00404e58
call fcn.00403624
mov edx, 0x484724
lea eax, [ebp - 0x81d0]
call fcn.00404e58
call fcn.00403624
mov edx, 0x484734
lea eax, [ebp - 0x81d0]
call fcn.00404e58
push eax
lea eax, [ebp - 0x8428]
mov edx, dword [0x4be82c]
mov ecx, 7
call fcn.00403678
lea edx, [ebp - 0x8428]
pop eax
call fcn.00403584
mov edx, 0x484750
call fcn.00404e58
call fcn.00402ca8
mov edx, 0x484764
lea eax, [ebp - 0x81d0]
call fcn.00404e58
push eax
mov ax, 0xc
call fcn.004aa600
mov edx, eax
pop eax
call fcn.004035b8
mov edx, 0x484750
call fcn.00404e58
call fcn.00402ca8
mov edx, 0x484780
lea eax, [ebp - 0x81d0]
call fcn.00404e58
push eax
mov ax, 0xe
call fcn.004aa600
mov edx, eax
pop eax
call fcn.004035b8
mov edx, 0x484750
call fcn.00404e58
call fcn.00402ca8
mov edx, 0x48479c
lea eax, [ebp - 0x81d0]
call fcn.00404e58
call fcn.00403624
mov eax, dword [ebx + 0x15c]
test eax, eax
jle 0x4842a2
mov dword [ebp - 0x81ec], eax
mov esi, 1
mov edx, 0x484724
lea eax, [ebp - 0x81d0]
call fcn.00404e58
call fcn.00403624
mov edx, esi
lea eax, [ebx + 0x158]
call fcn.004ab894
add esp, 0xfffffff8
fistp qword [esp]
wait
call fcn.004af438
push eax
mov edx, 0x4847ac
lea eax, [ebp - 0x81d0]
call fcn.00404e58
pop edx
call fcn.004035b8
mov edx, 0x4847d4
call fcn.00404e58
call fcn.00402ca8
mov edx, esi
lea eax, [ebx + 0x158]
call fcn.004ab8d0
mov edx, eax
lea eax, [ebp - 0x8001]
mov cx, 0x8001
call fcn.004b81d8
mov ecx, dword [0x4beb0c]
mov edx, 0x4bdc80
lea eax, [ebp - 0x8001]
call fcn.004aeb90
mov edx, 0x4847e4
lea eax, [ebp - 0x81d0]
call fcn.00404e58
lea edx, [ebp - 0x8001]
call fcn.004035b8
mov edx, 0x4847d4
call fcn.00404e58
call fcn.00402ca8
lea ecx, [ebp - 0x81e0]
mov edx, esi
lea eax, [ebx + 0x158]
call fcn.004ab8b4
lea eax, [ebp - 0x81e8]
push eax
lea eax, [ebp - 0x81e0]
push eax
call sub.kernel32.dll_FileTimeToLocalFileTime
lea eax, [ebp - 0x81e8]
call fcn.00411604
mov edx, eax
mov eax, edi
call fcn.004b81b0
push 0x4847f8
push edi
call sub.kernel32.dll_lstrcatA
lea eax, [ebp - 0x81e8]
call fcn.004115bc
push eax
push edi
call sub.kernel32.dll_lstrcatA
mov edx, 0x484804
lea eax, [ebp - 0x81d0]
call fcn.00404e58
mov edx, edi
call fcn.004035b8
mov edx, 0x4847d4
call fcn.00404e58
call fcn.00402ca8
mov edx, 0x48479c
lea eax, [ebp - 0x81d0]
call fcn.00404e58
call fcn.00403624
inc esi
dec dword [ebp - 0x81ec]
jne 0x484151
mov edx, 0x48482c
lea eax, [ebp - 0x81d0]
call fcn.00404e58
push eax
lea eax, [ebp - 0x8434]
mov edx, dword [0x4beb0c]
mov ecx, 5
call fcn.00403678
lea edx, [ebp - 0x8434]
pop eax
call fcn.00403584
call fcn.00403624
push 0x10
call sub.user32.dll_GetKeyState
test ax, ax
jl 0x48430f
cmp dword [ebx + 0x16c], 0
je 0x4842fe
push ebp
lea eax, [ebx + 0x16c]
call fcn.00483200
pop ecx
jmp 0x48430f
push ebp
mov edx, 0x484838
mov eax, 0x484850
call fcn.00483154
pop ecx
lea eax, [ebp - 0x8434]
mov edx, dword [0x4beb0c]
mov ecx, 5
call fcn.00403678
lea edx, [ebp - 0x8434]
lea eax, [ebp - 0x81d0]
call fcn.00403584
call fcn.00403624
lea eax, [ebp - 0x81d0]
call fcn.00402c9c
mov ebx, dword [ebx + 0x204]
test ebx, ebx
jne 0x483bdd
push 0x10
call sub.user32.dll_GetKeyState
test ax, ax
jl 0x48442a
mov eax, dword [0x4bef50]
mov eax, dword [eax]
cmp dword [eax + 0x148], 0
je 0x484400
lea eax, [ebp - 0x8434]
mov edx, dword [0x4beb0c]
mov ecx, 5
call fcn.00403678
lea edx, [ebp - 0x8434]
lea eax, [ebp - 0x81d0]
call fcn.00403584
push eax
lea eax, [ebp - 0x8434]
mov edx, dword [0x4beb0c]
mov ecx, 5
call fcn.00403678
lea edx, [ebp - 0x8434]
pop eax
call fcn.00403584
mov edx, 0x48485c
call fcn.00404e58
push eax
mov ax, 0x389
call fcn.004aa600
mov edx, eax
pop eax
call fcn.004035b8
mov edx, 0x484648
call fcn.00404e58
call fcn.00403624
push ebp
mov eax, dword [0x4bef50]
mov eax, dword [eax]
add eax, 0x148
call fcn.00483200
pop ecx
mov edx, 0x48487c
lea eax, [ebp - 0x81d0]
call fcn.00404e58
call fcn.00402ca8
mov edx, 0x484898
lea eax, [ebp - 0x81d0]
call fcn.00404e58
call fcn.00403624
mov edx, 0x484994
lea eax, [ebp - 0x81d0]
call fcn.00404e58
call fcn.00403624
lea eax, [ebp - 0x81d0]
call fcn.00402d90
call fcn.00402634
test eax, eax
je 0x484464
lea edx, [ebp - 0x830c]
mov ax, 5
call fcn.004acdac
jmp 0x4844cf
mov ax, 0x35d
call fcn.004aa600
lea edx, [ebp - 0x830c]
call fcn.004ae1b0
mov ax, 0xae
call fcn.004aa600
push eax
push edi
call sub.kernel32.dll_lstrcatA
mov eax, edi
mov edx, 0x14
call fcn.004b12a8
cmp al, 1
jne 0x4844cf
push 1
push 0x4846d0
push 0
lea eax, [ebp - 0x830c]
push eax
push 0
mov eax, dword [0x4beb60]
mov eax, dword [eax]
push eax
call sub.shell32.dll_ShellExecuteA
cmp eax, 0x20
ja 0x4844cf
test eax, eax
jbe 0x4844cf
lea edx, [ebp - 0x830c]
mov ax, 7
call fcn.004acdac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4844ef
lea eax, [ebp - 0x83bc]
call fcn.0040489c
ret