Function at 0x4533e8
Capabilities:
Create process on windows

Disassembly:
push 0x20
mov eax, 0x65d0ed
call fcn.0065a213
mov esi, ecx
cmp dword [ebp + 0x1c], 0
jne 0x453754
mov edi, dword [ebp + 0xc]
xor ecx, ecx
inc ecx
xor ebx, ebx
cmp edi, ecx
jne 0x45341e
push dword [ebp + 0x14]
mov dword [esi + 0x24], ecx
mov ecx, esi
call fcn.00453e38
jmp 0x45353a
cmp edi, 0x10
jne 0x453455
mov eax, dword [esi + 0xe0]
mov dword [esi + 0x24], ecx
cmp eax, 2
je 0x453449
cmp eax, ecx
je 0x453449
cmp eax, 3
je 0x453449
sub esp, 0x10
mov ecx, esi
call fcn.00454bab
jmp 0x453504
mov ecx, esi
call fcn.00455f82
jmp 0x453504
cmp edi, 2
jne 0x453469
mov dword [esi + 0x24], ecx
mov ecx, esi
call fcn.00454ada
jmp 0x453504
cmp edi, 0x14
jne 0x45347e
xor eax, eax
mov dword [esi + 0x24], ecx
cmp dword [ebp + 0x10], eax
setne al
jmp 0x45353a
cmp edi, 0x111
je 0x45348e
cmp edi, 0x100
jne 0x453493
mov dword [esi + 0x24], ecx
jmp 0x453504
cmp edi, 0x101
jne 0x4534b6
cmp dword [ebp + 0x10], 0x1b
mov dword [esi + 0x24], ecx
jne 0x453504
push ebx
push ebx
push 0x403
push dword [esi + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x453504
cmp edi, 7
jne 0x4534f4
mov eax, dword [esi + 0xc8]
mov dword [esi + 0x24], ecx
sub eax, 1
je 0x4534e3
sub eax, 1
je 0x4534db
sub eax, 1
jne 0x453504
mov eax, dword [esi + 0xb8]
jmp 0x4534e9
mov eax, dword [esi + 0xb0]
jmp 0x4534e9
mov eax, dword [esi + 0xa8]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x453504
cmp edi, 0xf
jne 0x45350b
mov dword [esi + 0x24], ecx
push ecx
mov ecx, esi
call fcn.00455880
mov ecx, dword [ebp + 0x18]
mov dword [ecx], ebx
jmp 0x45353f
cmp edi, 0x86
jne 0x4535a2
mov dword [esi + 0x24], ecx
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x28], ecx
mov ecx, dword [esi + 0xe4]
call fcn.0045b78f
push ebx
lea eax, [ebp - 0x28]
push eax
push edi
push dword [esi + 4]
call dword [sym.imp.USER32.dll_DefWindowProcW]
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
cmp dword [esi + 0x24], ebx
jne 0x4537cb
mov edx, dword [ebp + 0x14]
lea ecx, [esi + 0x24]
movzx eax, dx
shr edx, 0x10
mov dword [ebp - 0x24], edx
mov edx, ecx
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x28], edi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x10], eax
cmp edi, 0x83
jne 0x4535f8
push dword [ebp + 0x14]
mov dword [ecx], 1
mov ecx, esi
push dword [ebp + 0x10]
call fcn.00455b46
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
cmp dword [esi + 0x24], ebx
jne 0x4537cb
mov edx, dword [ebp - 0x14]
jmp 0x453660
cmp edi, 0x84
jne 0x453548
mov edx, dword [ebp + 0x14]
lea eax, [esi + 0x24]
mov dword [eax], ecx
mov dword [ebp - 0x14], eax
movzx eax, dx
mov ecx, eax
mov dword [ebp - 0x24], ecx
movsx ecx, ax
mov eax, edx
shr eax, 0x10
mov dword [ebp - 0x28], eax
cwde
push eax
push ecx
mov ecx, esi
call fcn.00455ad8
mov ecx, dword [ebp + 0x18]
lea edx, [esi + 0x24]
xor ebx, ebx
mov dword [ecx], eax
cmp dword [edx], ebx
jne 0x4537cb
mov eax, dword [ebp - 0x24]
movzx eax, ax
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x10], eax
jmp 0x453660
cmp edi, 0x200
jne 0x45365d
mov dword [ecx], 1
movsx ecx, ax
mov eax, dword [ebp - 0x24]
cwde
push eax
push ecx
push dword [ebp + 0x10]
mov ecx, esi
call fcn.00455bac
mov eax, dword [ebp + 0x18]
mov dword [eax], ebx
mov eax, dword [ebp - 0x18]
cmp dword [eax], ebx
jne 0x4537cb
cmp edi, 0x404
jne 0x453829
push ebx
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x98]
lea eax, [ebp - 0x2c]
push eax
call fcn.0046d511
mov dword [ebp - 4], ebx
mov edi, dword [eax]
mov eax, dword [edi]
mov esi, dword [eax + 0x14]
jmp 0x45386f
mov ecx, dword [ebp + 0x18]
mov eax, dword [ebp - 0x28]
movzx eax, ax
mov dword [ebp - 0x28], eax
cmp edi, 0xa0
jne 0x45369a
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
cwde
push eax
movsx eax, dx
push eax
push dword [ebp + 0x10]
mov dword [ecx], 1
mov ecx, esi
call fcn.00455bff
mov eax, dword [ebp + 0x18]
mov dword [eax], ebx
mov eax, dword [ebp - 0x1c]
jmp 0x453750
cmp edi, 0xa1
jne 0x4536ef
mov ecx, dword [ebp - 0x1c]
cwde
mov dword [ecx], 1
mov ecx, dword [esi + 0xe4]
cmp dword [ecx + 4], ebx
je 0x4536c2
mov byte [ecx + 8], 1
call fcn.0045b78f
jmp 0x4536e5
mov edx, dword [ebp - 0x10]
movzx ecx, ax
movsx eax, dx
shl ecx, 0x10
movzx eax, ax
or ecx, eax
push ecx
push dword [ebp + 0x10]
push 0xa1
push dword [esi + 4]
call dword [sym.imp.USER32.dll_DefWindowProcW]
mov eax, dword [ebp + 0x18]
mov dword [eax], ebx
mov eax, dword [ebp - 0x20]
jmp 0x453750
cmp edi, 0xa2
jne 0x453718
mov eax, dword [ebp - 0x20]
mov ecx, esi
mov edx, dword [ebp - 0x10]
mov dword [eax], 1
mov eax, dword [ebp - 0x28]
cwde
push eax
movsx eax, dx
push eax
push dword [ebp + 0x10]
call fcn.00455c71
jmp 0x453748
cmp edi, 0x2a2
jne 0x45375e
mov ecx, dword [esi + 0xe4]
mov dword [edx], 1
mov byte [ecx + 8], bl
call fcn.0045b78f
mov eax, dword [esi + 0xe4]
mov dword [eax + 4], ebx
mov ecx, dword [esi + 0xe4]
call fcn.0045b78f
mov eax, dword [ebp + 0x18]
mov dword [eax], ebx
mov eax, dword [ebp - 0x14]
cmp dword [eax], ebx
jne 0x4537cb
xor eax, eax
call fcn.0065a1e1
ret 0x18
cmp edi, 0x81
jne 0x453798
cmp byte [esi + 0xe8], 0
mov dword [edx], 1
je 0x45377d
mov ecx, dword [esi + 4]
call fcn.00453136
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push 0x81
push dword [esi + 4]
call dword [sym.imp.USER32.dll_DefWindowProcW]
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
jmp 0x45374d
cmp edi, 0x2e0
jne 0x4537b1
mov dword [edx], 1
xor eax, eax
mov dword [ecx], ebx
cmp dword [edx], ebx
setne al
jmp 0x453756
cmp edi, 0x406
jne 0x4537d0
push ecx
push ecx
push dword [ebp + 0x10]
push ecx
mov ecx, esi
call fcn.00455002
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
xor eax, eax
inc eax
jmp 0x453756
cmp edi, 0x40a
jne 0x4537fd
cmp dword [esi + 0xe0], ebx
jne 0x453887
push 2
mov ecx, esi
call fcn.00454e62
mov ecx, dword [esi + 0xa8]
call fcn.0045a3f0
jmp 0x453887
cmp edi, 0x401
jne 0x453811
sub esp, 0x10
mov ecx, esi
call fcn.00454b22
jmp 0x4537c6
cmp edi, 0x403
jne 0x453629
sub esp, 0x10
mov ecx, esi
call fcn.00454bab
jmp 0x4537c6
cmp edi, 0x405
jne 0x45383d
sub esp, 0x10
mov ecx, esi
call fcn.00455442
jmp 0x4537c6
cmp edi, 0x407
jne 0x453891
mov ecx, esi
call fcn.004551e8
mov ecx, dword [esi + 0x98]
lea eax, [ebp - 0x2c]
push eax
mov dword [esi + 0xe0], ebx
call fcn.0046d511
mov dword [ebp - 4], 1
mov edi, dword [eax]
mov eax, dword [edi]
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0x68a308]
mov ecx, edi
call esi
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x453887
call fcn.0044e280
mov eax, dword [ebp + 0x18]
mov dword [eax], ebx
jmp 0x4537cb
cmp edi, 0x408
jne 0x4538a2
mov ecx, esi
call fcn.004551e8
jmp 0x453887
cmp edi, 0x409
jne 0x4538c0
push 1
mov ecx, esi
call fcn.00454e62
mov ecx, dword [esi + 0xa8]
call fcn.0045a2b5
jmp 0x453899
cmp edi, 0x40b
jne 0x4538da
push ecx
push ecx
push dword [ebp + 0x10]
push ecx
mov ecx, esi
call fcn.00455ce1
jmp 0x4537c6
cmp edi, 0x40c
jne 0x4538f1
sub esp, 0x10
mov ecx, esi
call fcn.004557a9
jmp 0x4537c6
cmp edi, 0x40d
jne 0x453904
push dword [esi + 4]
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x453887
cmp edi, 0x40e
jne 0x453926
push 5
push ebx
push ebx
push str.https:__web.webex.com_
push 0x711c88
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x453887
cmp edi, 0x40f
jne 0x453754
mov ecx, esi
call fcn.00455323
jmp 0x453887