Function at 0x514b70
Capabilities:
Create process on windows
Execute command

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
lea ebx, [ebp - 0x114]
push ecx
sub esp, 0x228
call fcn.0045df30
mov dword [esp], str.chcp_65001___NULL
call sub.msvcrt.dll_system
mov dword [esp], 0x5390d9
mov ecx, ebx
call fcn.004ef450
push eax
lea esi, [ebp - 0x1d8]
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.004ef2a0
mov ecx, esi
call fcn.004efeb0
mov ecx, ebx
call fcn.004efeb0
mov dword [esp + 4], str.pt_BR
mov dword [esp], 0
call sub.msvcrt.dll_setlocale
mov dword [esp + 4], str..UTF_8
mov dword [esp], 2
call sub.msvcrt.dll_setlocale
mov dword [esp + 4], 0x11
mov ecx, ebx
mov dword [esp], str.events.log
call fcn.004d8560
push eax
push eax
mov dword [esp], 0x30
call fcn.00513bb0
mov ecx, eax
mov dword [ebp - 0x1e4], eax
call fcn.0043a300
mov dword [esp], 0x14
call fcn.00513bb0
mov esi, eax
lea eax, [ebp - 0x10c]
mov dword [esp], eax
mov ecx, esi
call fcn.00401676
push edi
mov dword [ebp - 0x1d4], esi
mov dword [esp], 0x14
call fcn.00513bb0
mov dword [esp], 0x538960
mov ecx, eax
mov esi, eax
call fcn.00401676
push ebx
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x1d0], esi
call fcn.004018fa
mov ecx, eax
mov eax, dword [ebp - 0x1d0]
mov dword [esp], eax
call fcn.0043a520
push ecx
mov eax, dword [ebp - 0x1e4]
call fcn.004018fa
mov ecx, eax
mov eax, dword [ebp - 0x1d4]
mov dword [esp], eax
call fcn.0043a520
push edx
call fcn.00423550
mov ecx, eax
mov eax, dword [ebp - 0x1e4]
mov dword [esp], eax
call fcn.00420f70
push eax
lea ecx, [ebp - 0x158]
mov dword [esp], 0x5390f2
call fcn.00401a38
push eax
lea eax, [ebp - 0x158]
mov dword [esp], eax
call fcn.004236b0
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x1e8], eax
call fcn.004f2700
mov dword [esp], str.Carregando_configuraes
lea ecx, [ebp - 0x158]
call fcn.00401a38
push eax
lea eax, [ebp - 0x158]
mov ecx, dword [ebp - 0x1e8]
mov dword [esp + 4], 6
mov dword [esp], eax
call fcn.004790c4
push eax
lea ecx, [ebp - 0x158]
push eax
call fcn.004f2700
mov dword [esp], str.file.ini
lea ecx, [ebp - 0x158]
call fcn.00401a38
push eax
mov dword [esp], 0x148
call fcn.00513bb0
mov dword [ebp - 0x1e0], eax
lea eax, [ebp - 0x158]
mov ecx, dword [ebp - 0x1e0]
mov dword [esp], eax
call fcn.00408180
push edi
lea ecx, [ebp - 0x158]
call fcn.004f2700
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], 0
call fcn.0040194e
mov ecx, eax
lea eax, [ebp - 0x1b0]
mov dword [esp], eax
call fcn.00403870
push esi
mov dword [esp + 4], str.Exemplo_de_ini:_n_meuprograma__nshortcut0x42__letra_b_nmodifier2__ctrl_ncommandcmd.exe__c_meubat.bat_n
mov dword [esp], 0x538a00
call fcn.00510c00
mov dword [esp], eax
call fcn.0050e730
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x1dc], eax
mov edx, dword [ebp - 0x1dc]
cmp dword [ebp - 0x200], edx
lea esi, [ebp - 0x158]
je 0x51566b
lea eax, [ebp - 0x150]
mov byte [ebp - 0x150], 0
mov ecx, esi
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], 0
mov eax, dword [edx + 4]
mov dword [ebp - 0x1f0], eax
add eax, 0xd
mov dword [esp], eax
call fcn.004f4c70
mov eax, 0x7fffffff
sub eax, dword [ebp - 0x154]
push ebx
cmp eax, 0xc
ja 0x514e45
mov dword [esp], 0x5390b2
call fcn.00528c60
mov dword [esp + 4], 0xd
lea ecx, [ebp - 0x158]
mov dword [esp], str.Loading_key:
call fcn.00401a98
mov eax, dword [ebp - 0x1dc]
push ecx
push ecx
lea ecx, [ebp - 0x158]
mov eax, dword [eax + 4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1dc]
mov eax, dword [eax]
mov dword [esp], eax
call fcn.00401a98
push edx
lea esi, [ebp - 0x158]
mov ecx, dword [ebp - 0x1e8]
push edx
mov dword [esp + 4], 6
mov dword [esp], esi
call fcn.004790c4
jmp 0x514eb1
push eax
mov ecx, esi
push eax
call fcn.004f2700
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1e0]
mov byte [ebp - 0x19c], 0
call fcn.0040194e
mov ebx, eax
mov eax, dword [ebp - 0x1dc]
lea ecx, [ebp - 0x174]
mov dword [esp], eax
call fcn.004f5dc0
push eax
lea ecx, [ebp - 0x174]
mov dword [esp], str..command
call fcn.00401b52
push eax
lea esi, [ebp - 0x174]
lea ecx, [ebp - 0x158]
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.00402950
jmp 0x514f33
mov ecx, dword [ebp - 0x158]
lea ebx, [ebp - 0x150]
push eax
mov edx, dword [ebp - 0x154]
push eax
mov eax, dword [ebp - 0x1a4]
cmp ecx, ebx
jne 0x514f7d
test edx, edx
je 0x514f65
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.004f42d0
mov eax, dword [ebp - 0x154]
mov edx, dword [ebp - 0x1a4]
mov dword [ebp - 0x1a0], eax
mov byte [edx + eax], 0
jmp 0x514fd3
lea ebx, [ebp - 0x19c]
cmp eax, ebx
je 0x514f95
mov ebx, dword [ebp - 0x19c]
mov dword [ebp - 0x204], ebx
jmp 0x514f97
xor eax, eax
mov dword [ebp - 0x1a0], edx
mov edx, dword [ebp - 0x150]
mov dword [ebp - 0x1a4], ecx
mov dword [ebp - 0x19c], edx
test eax, eax
je 0x514fc7
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x150], eax
jmp 0x514fd3
lea eax, [ebp - 0x150]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x154], 0
mov byte [eax], 0
call fcn.004f2700
lea ecx, [ebp - 0x174]
call fcn.004f2700
mov eax, dword [ebp - 0x1e0]
call fcn.0040194e
mov ebx, eax
mov eax, dword [ebp - 0x1dc]
lea ecx, [ebp - 0x158]
mov dword [esp], eax
call fcn.004f5dc0
push eax
lea esi, [ebp - 0x158]
mov ecx, esi
mov dword [esp], str..shortcut
call fcn.00401b52
push edi
mov ecx, ebx
mov dword [esp], esi
call fcn.00403330
jmp 0x515044
push ecx
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], edx
call fcn.004f2700
mov eax, dword [ebp - 0x1e0]
call fcn.0040194e
mov esi, eax
mov eax, dword [ebp - 0x1dc]
lea ecx, [ebp - 0x158]
mov dword [esp], eax
call fcn.004f5dc0
push eax
lea ebx, [ebp - 0x158]
mov ecx, ebx
mov dword [esp], str..modifier
call fcn.00401b52
push eax
mov ecx, esi
mov dword [esp], ebx
call fcn.00403330
push ecx
lea ecx, [ebp - 0x158]
mov ebx, eax
mov esi, edx
call fcn.004f2700
mov eax, dword [ebp - 0x1f0]
mov edx, dword [ebp - 0x1ec]
mov dword [ebp - 0x188], 0
mov byte [ebp - 0x184], 0
shld edx, eax, 0x10
shl eax, 0x10
or eax, ebx
or esi, edx
mov dword [ebp - 0x1b8], eax
lea eax, [ebp - 0x184]
mov dword [ebp - 0x1b4], esi
mov esi, dword [0x5a9048]
mov dword [ebp - 0x18c], eax
mov al, 1
jmp 0x515103
test dword [esi + 0x1c], ebx
jne 0x515109
mov esi, dword [esi]
test esi, esi
jne 0x5150fc
jmp 0x515140
test al, al
je 0x51512b
mov eax, dword [esi + 8]
lea ecx, [ebp - 0x18c]
mov dword [esp + 4], eax
mov eax, dword [esi + 4]
mov dword [esp], eax
call fcn.00401a98
xor eax, eax
push edi
push edi
jmp 0x515101
mov dword [esp], 0x5391ac
lea ecx, [ebp - 0x18c]
call fcn.00401b52
push ecx
jmp 0x51510d
mov esi, dword [ebp - 0x1f0]
or bh, 0x40
mov dword [esp + 4], 1
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp], 0
call dword [sym.imp.USER32.dll_RegisterHotKey]
sub esp, 0x10
test eax, eax
je 0x5151fc
mov dword [esp], 8
call fcn.00513bb0
mov dword [eax], 0x54c7ec
lea ecx, [ebp - 0x1bc]
mov dword [eax + 4], esi
mov dword [ebp - 0x174], eax
lea eax, [ebp - 0x18c]
mov dword [esp], eax
call fcn.00478e20
push edx
lea ecx, [ebp - 0x158]
mov dword [esp], str.RegisterHotKey__s0x_x_registered
call fcn.00401a38
push eax
lea eax, [ebp - 0x174]
lea esi, [ebp - 0x158]
mov ecx, dword [ebp - 0x1e8]
mov dword [esp + 8], eax
lea eax, [ebp - 0x1bc]
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00479060
sub esp, 0xc
mov ecx, esi
call fcn.004f2700
lea ecx, [ebp - 0x1bc]
call fcn.00478ea4
lea ecx, [ebp - 0x174]
jmp 0x515302
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1c0], eax
lea eax, [ebp - 0x1c0]
lea ecx, [ebp - 0x1bc]
mov dword [esp], eax
call fcn.00478e74
push eax
mov dword [esp], 8
call fcn.00513bb0
mov dword [eax], 0x54c7ec
lea ecx, [ebp - 0x1c8]
mov dword [eax + 4], esi
mov dword [ebp - 0x1c4], eax
lea eax, [ebp - 0x18c]
mov dword [esp], eax
call fcn.00478e20
push eax
mov eax, dword [ebp - 0x1dc]
lea ecx, [ebp - 0x1cc]
mov dword [esp], eax
call fcn.00478e20
push eax
lea ecx, [ebp - 0x174]
mov dword [esp], str.RegisterHotKey_error__s__s0x_x:__lu
call fcn.00401a38
push eax
lea eax, [ebp - 0x1bc]
lea ebx, [ebp - 0x158]
lea esi, [ebp - 0x174]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x1c4]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1c8]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1cc]
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.0041dfb0
mov dword [esp + 4], 3
mov ecx, dword [ebp - 0x1e8]
mov dword [esp], ebx
call fcn.004790c4
push edi
mov ecx, ebx
push edi
call fcn.004f2700
mov ecx, esi
call fcn.004f2700
lea ecx, [ebp - 0x1cc]
call fcn.00478ea4
lea ecx, [ebp - 0x1c8]
call fcn.00478ea4
lea ecx, [ebp - 0x1c4]
call fcn.00478ea4
lea ecx, [ebp - 0x1bc]
call fcn.00478ea4
lea eax, [ebp - 0x1b8]
xor edx, edx
mov ecx, 0x5a905c
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1b8]
div dword [0x5a9060]
mov dword [esp], edx
call fcn.0040185a
push ebx
push ebx
mov ebx, eax
test eax, eax
jne 0x51538c
jmp 0x515344
mov dword [esp], 0x28
call fcn.00513bb0
mov dword [eax], 0
mov esi, eax
lea ebx, [eax + 8]
mov eax, dword [ebp - 0x1b8]
mov edx, dword [ebp - 0x1b4]
mov dword [esi + 8], eax
lea eax, [esi + 0x10]
mov dword [ebp - 0x1f8], eax
lea eax, [ebp - 0x1a4]
mov ecx, dword [ebp - 0x1f8]
mov dword [esi + 0xc], edx
mov dword [esp], eax
call fcn.004f5dc0
jmp 0x5153a2
lea edi, [eax + 0x10]
lea eax, [ebp - 0x1a4]
cmp edi, eax
jne 0x5155d8
jmp 0x515649
mov edi, dword [0x5a9060]
push edx
xor edx, edx
mov ecx, 0x5a905c
mov eax, dword [esi + 8]
mov dword [ebp - 0x1fc], eax
div edi
mov dword [esp + 4], ebx
mov dword [esp], edx
mov dword [ebp - 0x1f4], edx
call fcn.0040185a
push ecx
push ecx
test eax, eax
jne 0x5155a8
jmp 0x5153f9
mov eax, dword [0x5a9068]
mov dword [esp], edi
mov ecx, 0x5a906c
mov dword [esp + 8], 1
mov ebx, dword [0x5a9070]
mov dword [esp + 4], eax
call fcn.004b2020
mov dword [ebp - 0x1f0], edx
sub esp, 0xc
test al, al
je 0x515559
dec edx
jne 0x515442
mov dword [0x5a9074], 0
mov ebx, 0x5a9074
jmp 0x515478
cmp dword [ebp - 0x1f0], 0x1fffffff
jbe 0x515453
call fcn.00528ae0
mov eax, dword [ebp - 0x1f0]
shl eax, 2
mov dword [esp], eax
mov dword [ebp - 0x1f4], eax
call fcn.00513bb0
mov ebx, eax
mov ecx, dword [ebp - 0x1f4]
xor eax, eax
mov edi, ebx
rep stosb byte es:[edi], al
mov ecx, dword [0x5a9064]
mov dword [ebp - 0x1f4], 0
mov dword [0x5a9064], 0
test ecx, ecx
je 0x5154f4
mov eax, dword [ecx]
xor edx, edx
mov dword [ebp - 0x1f8], eax
mov eax, dword [ecx + 8]
div dword [ebp - 0x1f0]
lea eax, [ebx + edx*4]
mov edi, dword [eax]
test edi, edi
jne 0x5154e4
mov edi, dword [0x5a9064]
mov dword [ecx], edi
mov dword [0x5a9064], ecx
mov dword [eax], 0x5a9064
cmp dword [ecx], 0
jne 0x5154d9
mov dword [ebp - 0x1f4], edx
mov ecx, dword [ebp - 0x1f8]
jmp 0x515492
mov eax, dword [ebp - 0x1f4]
mov dword [ebx + eax*4], ecx
jmp 0x5154cb
mov edx, dword [edi]
mov dword [ecx], edx
mov eax, dword [eax]
mov edx, dword [ebp - 0x1f4]
mov dword [eax], ecx
jmp 0x5154cb
mov edx, dword [0x5a905c]
mov eax, dword [0x5a9060]
cmp edx, 0x5a9074
je 0x515516
shl eax, 2
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.00513b70
mov eax, dword [ebp - 0x1f0]
xor edx, edx
mov dword [0x5a905c], ebx
mov dword [0x5a9060], eax
mov eax, dword [ebp - 0x1fc]
div dword [ebp - 0x1f0]
mov dword [ebp - 0x1f4], edx
jmp 0x515559
mov eax, dword [ebp - 0x1f4]
mov ebx, dword [0x5a905c]
lea ecx, [ebx + eax*4]
mov eax, dword [ecx]
test eax, eax
je 0x515578
mov eax, dword [eax]
mov dword [esi], eax
mov eax, dword [ecx]
mov dword [eax], esi
jmp 0x51559d
mov eax, dword [0x5a9064]
mov dword [0x5a9064], esi
mov dword [esi], eax
test eax, eax
je 0x515597
mov eax, dword [eax + 8]
xor edx, edx
div dword [0x5a9060]
mov dword [ebx + edx*4], esi
mov dword [ecx], 0x5a9064
inc dword [0x5a9068]
jmp 0x515649
mov ecx, dword [ebp - 0x1f8]
call fcn.004f2700
mov eax, esi
call fcn.004019a2
jmp 0x515649
mov esi, dword [ebp - 0x1a0]
lea eax, [ebx + 0x18]
mov edx, 0xf
cmp dword [ebx + 0x10], eax
je 0x5155ee
mov edx, dword [ebx + 0x18]
cmp esi, edx
jbe 0x515622
lea eax, [ebp - 0x174]
mov dword [ebp - 0x174], esi
call fcn.004018b8
mov ecx, edi
mov dword [ebp - 0x1f0], eax
call fcn.004f2700
mov eax, dword [ebp - 0x1f0]
mov dword [ebx + 0x10], eax
mov eax, dword [ebp - 0x174]
mov dword [ebx + 0x18], eax
test esi, esi
je 0x51563f
mov eax, dword [ebp - 0x1a4]
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x10]
mov dword [esp], eax
call fcn.004f42d0
mov eax, dword [ebx + 0x10]
mov dword [ebx + 0x14], esi
mov byte [eax + esi], 0
lea ecx, [ebp - 0x18c]
call fcn.004f2700
lea ecx, [ebp - 0x1a4]
call fcn.004f2700
add dword [ebp - 0x1dc], 0x18
jmp 0x514ddd
lea ecx, [ebp - 0x1b0]
call fcn.004f14e0
mov ecx, dword [ebp - 0x1e0]
call fcn.0047d570
mov dword [esp], 0x5390f2
mov ecx, esi
call fcn.00401a38
push eax
mov dword [esp], esi
call fcn.004236b0
mov ecx, esi
mov dword [ebp - 0x1dc], eax
lea edi, [ebp - 0x174]
call fcn.004f2700
mov ecx, 7
xor eax, eax
rep stosd dword es:[edi], eax
jmp 0x5157bb
sub esp, 0x10
test eax, eax
je 0x515db1
cmp dword [ebp - 0x170], 0x312
je 0x5157e4
lea eax, [ebp - 0x174]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetMessageA]
jmp 0x5157a4
mov eax, dword [ebp - 0x168]
lea esi, [ebp - 0x1a4]
mov ecx, esi
mov edx, eax
and eax, 0xff
mov dword [ebp - 0x1c4], eax
lea eax, [ebp - 0x1c4]
shr edx, 0x10
mov dword [esp], eax
and edx, 0xff
mov dword [ebp - 0x1c8], edx
call fcn.00478e74
push eax
lea eax, [ebp - 0x1c8]
lea edi, [ebp - 0x1b0]
mov ecx, edi
mov dword [esp], eax
call fcn.00478e74
push eax
mov dword [esp], 8
call fcn.00513bb0
mov edx, dword [ebp - 0x16c]
mov dword [eax], 0x54c7ec
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 0x1b8], eax
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x1c0], eax
lea eax, [ebp - 0x1c0]
mov dword [esp], eax
call fcn.00478e74
push eax
lea ecx, [ebp - 0x18c]
mov dword [esp], str.WM_HOTKEY_received_0x_lx_0x_x__Key_0x_lx__Combination_0x_lx
call fcn.00401a38
push eax
lea eax, [ebp - 0x1b8]
lea ebx, [ebp - 0x158]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1bc]
mov dword [esp + 8], eax
lea eax, [ebp - 0x18c]
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], edi
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0041dfb0
mov dword [esp + 4], 6
mov ecx, dword [ebp - 0x1dc]
mov dword [esp], ebx
call fcn.004790c4
push ecx
push ecx
mov ecx, ebx
call fcn.004f2700
lea ecx, [ebp - 0x18c]
call fcn.004f2700
lea ecx, [ebp - 0x1bc]
call fcn.00478ea4
lea ecx, [ebp - 0x1b8]
call fcn.00478ea4
mov ecx, edi
call fcn.00478ea4
mov ecx, esi
call fcn.00478ea4
mov eax, dword [ebp - 0x168]
mov dword [esp + 4], ebx
mov ecx, 0x5a905c
cdq
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], edx
xor edx, edx
div dword [0x5a9060]
mov dword [esp], edx
call fcn.0040185a
push ebx
push ebx
mov ebx, eax
test eax, eax
jne 0x515963
mov dword [esp], str._Map_base::at
call fcn.00528cb0
mov dword [ebp - 0x1dc], eax
mov ecx, ebx
call fcn.004f2700
mov ebx, dword [ebp - 0x1dc]
jmp 0x515c66
lea eax, [eax + 0x10]
lea ecx, [ebp - 0x1a4]
mov dword [esp], eax
mov dword [ebp - 0x1e0], eax
call fcn.00478e20
push edx
lea ecx, [ebp - 0x18c]
mov dword [esp], str.cmd.command__s
call fcn.00401a38
push eax
lea esi, [ebp - 0x158]
lea eax, [ebp - 0x1a4]
lea edi, [ebp - 0x18c]
mov dword [esp + 8], eax
mov dword [esp + 4], edi
mov dword [esp], esi
call fcn.0041d850
mov dword [esp + 4], 6
mov ecx, dword [ebp - 0x1dc]
mov dword [esp], esi
call fcn.004790c4
push eax
mov ecx, esi
lea esi, [ebp - 0x1a4]
push eax
call fcn.004f2700
mov ecx, edi
mov edi, esi
call fcn.004f2700
mov ecx, esi
call fcn.00478ea4
xor eax, eax
mov ecx, 4
lea edx, [ebp - 0x154]
rep stosd dword es:[edi], eax
mov ecx, 0x10
mov edi, edx
mov dword [ebp - 0x188], 0
rep stosd dword es:[edi], eax
mov dword [esp], 0x104
lea eax, [ebp - 0x184]
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0x158], 0x44
mov dword [ebp - 0x18c], eax
mov byte [ebp - 0x184], 0
call fcn.004f4c70
push eax
mov eax, dword [ebx + 0x14]
lea ecx, [ebp - 0x18c]
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x10]
mov dword [esp], eax
call fcn.00401a98
jmp 0x515a5f
push eax
lea ebx, [ebp - 0x158]
push eax
mov eax, dword [ebp - 0x18c]
mov dword [esp + 0x24], esi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x8000020
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
sub esp, 0x28
mov esi, eax
lea ecx, [ebp - 0x18c]
call fcn.004f2700
test esi, esi
jne 0x515adc
jmp 0x515b5f
mov dword [esp], 8
call fcn.00513bb0
mov dword [eax], 0x54c7d4
lea ebx, [ebp - 0x1a4]
mov dword [eax + 4], esi
mov ecx, ebx
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x1e0]
mov dword [esp], eax
call fcn.00478e20
push eax
lea ecx, [ebp - 0x158]
mov dword [esp], str.CreateProgramWithoutWnd__s__d
call fcn.00401a38
push edi
lea eax, [ebp - 0x18c]
lea esi, [ebp - 0x158]
mov ecx, dword [ebp - 0x1dc]
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.00479060
sub esp, 0xc
mov ecx, esi
call fcn.004f2700
mov ecx, ebx
call fcn.00478ea4
lea ecx, [ebp - 0x18c]
jmp 0x515c3f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1b0], eax
lea eax, [ebp - 0x1b0]
lea ecx, [ebp - 0x1a4]
mov dword [esp], eax
call fcn.00478e74
push esi
mov dword [esp], 8
call fcn.00513bb0
mov dword [eax], 0x54c7d4
lea ecx, [ebp - 0x1bc]
mov dword [eax + 4], 0
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1e0]
mov dword [esp], eax
call fcn.00478e20
push ecx
lea ecx, [ebp - 0x18c]
mov dword [esp], str.CreateProgramWithoutWnd__s___d__Error_code:__u
call fcn.00401a38
push edx
lea eax, [ebp - 0x1a4]
lea esi, [ebp - 0x18c]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x1b8]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1bc]
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.0041dc70
lea edi, [ebp - 0x158]
mov dword [esp + 4], 6
mov ecx, dword [ebp - 0x1dc]
mov dword [esp], edi
call fcn.004790c4
push eax
mov ecx, ebx
push eax
call fcn.004f2700
mov ecx, esi
call fcn.004f2700
lea ecx, [ebp - 0x1bc]
call fcn.00478ea4
lea ecx, [ebp - 0x1b8]
call fcn.00478ea4
lea ecx, [ebp - 0x1a4]
call fcn.00478ea4
jmp 0x5157bb
lea ecx, [ebp - 0x18c]
call fcn.004f2700
jmp 0x515c75
lea ecx, [ebp - 0x1bc]
call fcn.00478ea4
jmp 0x515c84
lea ecx, [ebp - 0x1b8]
call fcn.00478ea4
jmp 0x515c93
mov ecx, edi
mov edi, ebx
call fcn.00478ea4
jmp 0x515ca0
mov ecx, esi
jmp 0x515d04
call fcn.00478ea4
jmp 0x515d6e
lea ecx, [ebp - 0x1d0]
call fcn.00479e60
jmp 0x515d7d
lea ecx, [ebp - 0x1d4]
call fcn.00479e60
jmp 0x515d8c
mov ecx, dword [ebp - 0x1e4]
add ecx, 4
call fcn.0047d570
jmp 0x515d9e
lea ecx, [ebp - 0x114]
call fcn.004d9130
mov dword [esp], edi
call fcn.00461820
lea ecx, [ebp - 0x1d0]
call fcn.00479e60
lea ecx, [ebp - 0x1d4]
call fcn.00479e60
mov ecx, dword [ebp - 0x1e4]
add ecx, 4
call fcn.0047d570
lea ecx, [ebp - 0x114]
call fcn.004d9130
lea esp, [ebp - 0x10]
xor eax, eax
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret