Function at 0x458d30
Capabilities:
Create process on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e91c8
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x304
mov eax, dword [0x52406c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x208
lea eax, [ebp - 0x220]
push 0
push eax
call fcn.004bb410
add esp, 0xc
lea eax, [ebp - 0x220]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [ebp - 0x220]
lea ecx, [ebp - 0x2c8]
call fcn.004259b0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x2c8]
push 2
mov dword [ebp - 0x2b0], 0
call fcn.0042cf80
lea eax, [ebp - 0x314]
mov dword [ebp - 4], 1
push eax
lea ecx, [ebp - 0x2c8]
call fcn.00429ce0
push eax
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 2
call fcn.00432310
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x300]
cmp edx, 8
jb 0x458e36
mov ecx, dword [ebp - 0x314]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x458e2c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4592d6
push edx
push ecx
call fcn.0046c951
add esp, 8
xor eax, eax
mov dword [ebp - 0x304], 0
mov dword [ebp - 0x300], 7
mov word [ebp - 0x314], ax
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x2b4]
cmp edx, 8
jb 0x458e97
mov ecx, dword [ebp - 0x2c8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x458e8d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4592db
push edx
push ecx
call fcn.0046c951
add esp, 8
xor eax, eax
mov dword [ebp - 0x2b8], 0
push 0xc
push str.regsvr32.exe
lea ecx, [ebp - 0x254]
mov dword [ebp - 0x2b4], 7
mov word [ebp - 0x2c8], ax
mov dword [ebp - 0x244], eax
mov dword [ebp - 0x240], 7
mov word [ebp - 0x254], ax
call fcn.00432030
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2c4]
push 0x17
xor eax, eax
mov dword [ebp - 0x2b4], 0
push str._s__u___s_ShellExt.dll_
mov dword [ebp - 0x2b0], 7
mov word [ebp - 0x2c4], ax
call fcn.00432030
mov byte [ebp - 4], 7
lea eax, [ebp - 0x26c]
cmp dword [ebp - 0x258], 8
lea edx, [ebp - 0x2c4]
lea ecx, [ebp - 0x23c]
cmovae eax, dword [ebp - 0x26c]
push eax
call fcn.0041b5b0
add esp, 4
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x2b0]
cmp edx, 8
jb 0x458f81
mov ecx, dword [ebp - 0x2c4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x458f77
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4592e0
push edx
push ecx
call fcn.0046c951
add esp, 8
xor eax, eax
mov dword [ebp - 0x2b4], 0
push str.IsWow64Process
push str.kernel32
mov dword [ebp - 0x2b0], 7
mov word [ebp - 0x2c4], ax
mov dword [ebp - 0x224], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x458fd1
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
cmp dword [ebp - 0x224], 0
je 0x459114
push 0x19
xor eax, eax
mov dword [ebp - 0x2d0], 0
push str._s__u___s_ShellExt64.dll_
lea ecx, [ebp - 0x2e0]
mov dword [ebp - 0x2cc], 7
mov word [ebp - 0x2e0], ax
call fcn.00432030
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x26c]
cmp dword [ebp - 0x258], 8
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x2f8]
cmovae eax, dword [ebp - 0x26c]
push eax
call fcn.0041b5b0
mov esi, eax
add esp, 4
lea eax, [ebp - 0x23c]
cmp eax, esi
je 0x459077
mov ecx, eax
call fcn.0042dc80
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x23c], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x22c], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x2e4]
cmp edx, 8
jb 0x4590b7
mov ecx, dword [ebp - 0x2f8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4590ad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4592e5
push edx
push ecx
call fcn.0046c951
add esp, 8
mov edx, dword [ebp - 0x2cc]
xor eax, eax
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x2e4], 7
mov word [ebp - 0x2f8], ax
cmp edx, 8
jb 0x459114
mov ecx, dword [ebp - 0x2e0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x45910a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4592ea
push edx
push ecx
call fcn.0046c951
add esp, 8
push 0x38
lea eax, [ebp - 0x2a8]
mov dword [ebp - 0x2ac], 0x3c
push 0
push eax
call fcn.004bb410
add esp, 0xc
mov dword [ebp - 0x2a0], str.runas
cmp dword [ebp - 0x240], 8
lea eax, [ebp - 0x254]
mov dword [ebp - 0x290], 0
cmovae eax, dword [ebp - 0x254]
cmp dword [ebp - 0x228], 8
mov dword [ebp - 0x29c], eax
lea eax, [ebp - 0x23c]
cmovae eax, dword [ebp - 0x23c]
cmp dword [ebp - 0x258], 8
mov dword [ebp - 0x298], eax
lea eax, [ebp - 0x26c]
cmovae eax, dword [ebp - 0x26c]
mov dword [ebp - 0x294], eax
lea eax, [ebp - 0x270]
push eax
mov dword [ebp - 0x270], 0
call dword [sym.imp.KERNEL32.dll_Wow64DisableWow64FsRedirection]
lea eax, [ebp - 0x2ac]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
push dword [ebp - 0x270]
call dword [sym.imp.KERNEL32.dll_Wow64RevertWow64FsRedirection]
mov edx, dword [ebp - 0x228]
cmp edx, 8
jb 0x459203
mov ecx, dword [ebp - 0x23c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4591f9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4592ef
push edx
push ecx
call fcn.0046c951
add esp, 8
mov edx, dword [ebp - 0x240]
xor eax, eax
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 7
mov word [ebp - 0x23c], ax
cmp edx, 8
jb 0x459260
mov ecx, dword [ebp - 0x254]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x459256
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4592f4
push edx
push ecx
call fcn.0046c951
add esp, 8
mov edx, dword [ebp - 0x258]
xor eax, eax
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x240], 7
mov word [ebp - 0x254], ax
cmp edx, 8
jb 0x4592b9
mov ecx, dword [ebp - 0x26c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4592af
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4592f9
push edx
push ecx
call fcn.0046c951
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0046c93b
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
call fcn.004be3cc
int3