Function at 0x455204
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 7
add esp, 0xfffff004
push eax
dec eax
jne 0x45520d
mov eax, dword [ebp - 4]
add esp, 0xfffff530
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x7ac8], edx
mov dword [ebp - 0x7acc], edx
mov dword [ebp - 0x7ad0], edx
mov dword [ebp - 0x7ad4], edx
mov dword [ebp - 0x20], edx
mov esi, eax
xor eax, eax
push ebp
push 0x4558f7
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x4558c7
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x7acc]
xor eax, eax
call fcn.004029ac
mov eax, dword [ebp - 0x7acc]
lea edx, [ebp - 0x7ac8]
call fcn.004076f4
lea eax, [ebp - 0x7ac8]
push eax
lea edx, [ebp - 0x7ad0]
xor eax, eax
call fcn.004029ac
mov eax, dword [ebp - 0x7ad0]
lea edx, [ebp - 0x7acc]
call fcn.00407818
mov edx, dword [ebp - 0x7acc]
pop eax
call fcn.00403cb0
mov edx, dword [ebp - 0x7ac8]
mov eax, esi
call fcn.00451fb8
mov dword [ebp - 0x18], eax
mov eax, dword [0x45bff0]
mov byte [eax], 0
lea edx, [ebp - 0x7acc]
xor eax, eax
call fcn.004029ac
mov eax, dword [ebp - 0x7acc]
lea edx, [ebp - 0x7ac8]
call fcn.004076f4
lea eax, [ebp - 0x7ac8]
push eax
lea edx, [ebp - 0x7ad0]
xor eax, eax
call fcn.004029ac
mov eax, dword [ebp - 0x7ad0]
lea edx, [ebp - 0x7acc]
call fcn.00407818
mov edx, dword [ebp - 0x7acc]
pop eax
call fcn.00403cb0
mov eax, dword [ebp - 0x7ac8]
mov edx, 0x40
call fcn.0040738c
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x455338
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4558d1
mov ecx, 2
mov edx, 0xffffffeb
mov eax, ebx
call fcn.00407448
lea edx, [ebp - 0x2b]
mov ecx, 0xb
mov eax, ebx
call fcn.004073f0
lea eax, [ebp - 0x7ac8]
lea edx, [ebp - 0x2b]
mov ecx, 0xb
call fcn.00403c58
mov eax, dword [ebp - 0x7ac8]
mov edx, 0x455910
call fcn.00403db8
je 0x45538a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4558d1
lea edx, [ebp - 0xa]
mov ecx, 0xa
mov eax, ebx
call fcn.004073f0
lea eax, [ebp - 0x7ac8]
lea edx, [ebp - 0xa]
mov ecx, 0xa
call fcn.00403c58
mov eax, dword [ebp - 0x7ac8]
call fcn.004072fc
mov edi, eax
mov eax, ebx
call fcn.00407454
lea edx, [ebp - 0x7acc]
xor eax, eax
call fcn.004029ac
mov eax, dword [ebp - 0x7acc]
lea edx, [ebp - 0x7ac8]
call fcn.004076f4
lea eax, [ebp - 0x7ac8]
push eax
lea edx, [ebp - 0x7ad0]
xor eax, eax
call fcn.004029ac
mov eax, dword [ebp - 0x7ad0]
lea edx, [ebp - 0x7acc]
call fcn.00407818
mov edx, dword [ebp - 0x7acc]
pop eax
call fcn.00403cb0
mov edx, dword [ebp - 0x7ac8]
lea eax, [ebp - 0x178]
call fcn.00404dba
mov eax, dword [0x45bff0]
mov byte [eax], 0
mov edx, 1
lea eax, [ebp - 0x178]
call fcn.004052b1
call fcn.00402744
push dword [esi + 0x21c]
push 0x455924
lea edx, [ebp - 0x7ad0]
xor eax, eax
call fcn.004029ac
mov eax, dword [ebp - 0x7ad0]
lea edx, [ebp - 0x7acc]
call fcn.00407818
push dword [ebp - 0x7acc]
lea eax, [ebp - 0x7ac8]
mov edx, 3
call fcn.00403d68
mov edx, dword [ebp - 0x7ac8]
lea eax, [ebp - 0x2c4]
call fcn.00404dba
mov edx, 1
lea eax, [ebp - 0x2c4]
call fcn.004052c8
call fcn.00402744
mov edx, edi
lea eax, [ebp - 0x178]
call fcn.004052e8
call fcn.00402744
xor ebx, ebx
lea eax, [ebp - 0x10]
push eax
lea edx, [ebp - 0x7ac4]
mov ecx, 0x7800
lea eax, [ebp - 0x178]
call fcn.00404e5c
call fcn.00402744
lea eax, [ebp - 0x178]
call fcn.00404fe8
call fcn.00402744
mov edx, dword [ebp - 0x18]
sub edx, 0xa
sub edx, 0xb
cmp eax, edx
jle 0x455515
lea eax, [ebp - 0x178]
call fcn.00404fe8
call fcn.00402744
sub eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x18]
sub edx, 0xa
sub edx, 0xb
sub edx, eax
mov dword [ebp - 0x10], edx
mov bl, 1
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x7ac4]
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x2c4]
call fcn.00404ec0
call fcn.00402744
test bl, bl
je 0x4554b6
lea eax, [ebp - 0x178]
call fcn.00404f24
call fcn.00402744
lea eax, [ebp - 0x2c4]
call fcn.00404f24
call fcn.00402744
call fcn.0040294c
test eax, eax
jle 0x45565a
lea eax, [ebp - 0x20]
call fcn.00403a2c
call fcn.0040294c
mov ebx, eax
test ebx, ebx
jle 0x4555ac
mov dword [ebp - 0x1c], 1
push dword [ebp - 0x20]
lea edx, [ebp - 0x7ac8]
mov eax, dword [ebp - 0x1c]
call fcn.004029ac
push dword [ebp - 0x7ac8]
push 0x455930
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.00403d68
inc dword [ebp - 0x1c]
dec ebx
jne 0x45557d
mov eax, dword [ebp - 0x20]
call fcn.00403ca8
mov edx, eax
lea eax, [ebp - 0x20]
mov ecx, 1
call fcn.00403eec
push 1
lea edx, [ebp - 0x7acc]
xor eax, eax
call fcn.004029ac
mov eax, dword [ebp - 0x7acc]
lea edx, [ebp - 0x7ac8]
call fcn.004076f4
mov eax, dword [ebp - 0x7ac8]
call fcn.00403e6c
push eax
lea eax, [ebp - 0x20]
call fcn.00403e78
push eax
push dword [esi + 0x21c]
push 0x455924
lea edx, [ebp - 0x7ad4]
xor eax, eax
call fcn.004029ac
mov eax, dword [ebp - 0x7ad4]
lea edx, [ebp - 0x7ad0]
call fcn.00407818
push dword [ebp - 0x7ad0]
lea eax, [ebp - 0x7acc]
mov edx, 3
call fcn.00403d68
mov eax, dword [ebp - 0x7acc]
call fcn.00403e6c
push eax
push 0x455934
mov eax, esi
call fcn.00423db4
push eax
call sub.shell32.dll_ShellExecuteA
jmp 0x4556e5
push 1
lea edx, [ebp - 0x7acc]
xor eax, eax
call fcn.004029ac
mov eax, dword [ebp - 0x7acc]
lea edx, [ebp - 0x7ac8]
call fcn.004076f4
mov eax, dword [ebp - 0x7ac8]
call fcn.00403e6c
push eax
push 0
push dword [esi + 0x21c]
push 0x455924
lea edx, [ebp - 0x7ad4]
xor eax, eax
call fcn.004029ac
mov eax, dword [ebp - 0x7ad4]
lea edx, [ebp - 0x7ad0]
call fcn.00407818
push dword [ebp - 0x7ad0]
lea eax, [ebp - 0x7acc]
mov edx, 3
call fcn.00403d68
mov eax, dword [ebp - 0x7acc]
call fcn.00403e6c
push eax
push 0x455934
mov eax, esi
call fcn.00423db4
push eax
call sub.shell32.dll_ShellExecuteA
mov eax, dword [0x45bfa8]
mov eax, dword [eax]
call fcn.0042f6a4
lea edx, [ebp - 0x7acc]
xor eax, eax
call fcn.004029ac
mov eax, dword [ebp - 0x7acc]
lea edx, [ebp - 0x7ac8]
call fcn.004076f4
lea eax, [ebp - 0x7ac8]
push eax
lea edx, [ebp - 0x7ad0]
xor eax, eax
call fcn.004029ac
mov eax, dword [ebp - 0x7ad0]
lea edx, [ebp - 0x7acc]
call fcn.00407818
mov edx, dword [ebp - 0x7acc]
pop eax
call fcn.00403cb0
mov edx, dword [ebp - 0x7ac8]
lea eax, [ebp - 0x178]
call fcn.00404dba
mov eax, dword [0x45bff0]
mov byte [eax], 0
mov edx, 1
lea eax, [ebp - 0x178]
call fcn.004052b1
call fcn.00402744
push dword [esi + 0x21c]
push 0x455924
lea ecx, [ebp - 0x7acc]
mov edx, 0x455944
mov eax, esi
call fcn.00451c64
push dword [ebp - 0x7acc]
lea eax, [ebp - 0x7ac8]
mov edx, 3
call fcn.00403d68
mov edx, dword [ebp - 0x7ac8]
lea eax, [ebp - 0x2c4]
call fcn.00404dba
mov edx, 1
lea eax, [ebp - 0x2c4]
call fcn.004052c8
call fcn.00402744
sub edi, 0xb
sub edi, 0xa
xor ebx, ebx
lea eax, [ebp - 0x10]
push eax
lea edx, [ebp - 0x7ac4]
mov ecx, 0x7800
lea eax, [ebp - 0x178]
call fcn.00404e5c
call fcn.00402744
lea eax, [ebp - 0x178]
call fcn.00404fe8
call fcn.00402744
cmp edi, eax
jge 0x45581e
lea eax, [ebp - 0x178]
call fcn.00404fe8
call fcn.00402744
sub eax, dword [ebp - 0x10]
mov edx, edi
sub edx, eax
mov dword [ebp - 0x10], edx
mov bl, 1
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x7ac4]
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x2c4]
call fcn.00404ec0
call fcn.00402744
test bl, bl
je 0x4557cf
lea eax, [ebp - 0x178]
call fcn.00404f24
call fcn.00402744
lea eax, [ebp - 0x2c4]
call fcn.00404f24
call fcn.00402744
push 1
push 0
push 0
push dword [esi + 0x21c]
push 0x455924
lea eax, [ebp - 0x7acc]
push eax
mov edx, 0x455944
mov eax, esi
pop ecx
call fcn.00451c64
push dword [ebp - 0x7acc]
lea eax, [ebp - 0x7ac8]
mov edx, 3
call fcn.00403d68
mov eax, dword [ebp - 0x7ac8]
call fcn.00403e6c
push eax
push 0x455934
mov eax, esi
call fcn.00423db4
push eax
call sub.shell32.dll_ShellExecuteA
call fcn.004038e0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4558d1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4558fe
lea eax, [ebp - 0x7ad4]
mov edx, 4
call fcn.00403a50
lea eax, [ebp - 0x20]
call fcn.00403a2c
ret