Function at 0x453c60
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52f956
mov eax, dword fs:[0]
push eax
sub esp, 0x18c
mov eax, dword [0x5c6150]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [ebp + 0x14]
mov ebx, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
push 0
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x140], 0x557378
call fcn.004594a0
mov ecx, eax
call fcn.004595f0
test al, al
je 0x453cce
mov dword [ebx], 0
mov al, 1
jmp 0x4540b4
cmp byte [esi + 0x11c], 0
lea eax, [esi + 0xc]
jne 0x453cdd
mov eax, dword [esi + 8]
add eax, 4
mov dword [ebp - 0x158], eax
call fcn.00463160
mov dword [ebp - 0x154], 0xffffffff
mov byte [ebp - 0x150], 1
lea eax, [ebp - 0x148]
mov dword [ebp - 4], 0
push eax
push edi
mov ecx, esi
call fcn.00454650
test al, al
jne 0x453d3b
mov ebx, dword [ebp - 0x148]
xor eax, eax
mov ecx, dword [ebp - 0x144]
cmp ebx, 2
mov byte [ebp - 0x139], al
cmove ebx, eax
mov dword [ecx], 0xff
jmp 0x45408d
mov ecx, 0x557378
mov eax, ecx
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x453d68
test dx, dx
je 0x453d64
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x453d68
add eax, 4
add ecx, 4
test dx, dx
jne 0x453d42
xor eax, eax
jmp 0x453d6d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x453dc3
lea ecx, [ebp - 0x138]
call fcn.004515b0
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 1
push eax
mov ecx, esi
call fcn.00453190
cmp dword [ebp - 0x134], 0
jne 0x453da3
mov dword [ebp - 0x140], 0
jmp 0x453db4
lea ecx, [ebp - 0x138]
call fcn.00450480
mov dword [ebp - 0x140], eax
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0
call fcn.00424a60
cmp byte [esi + 0x11c], 0
lea eax, [esi + 0xc]
mov dword [ebp - 0x194], 0x3c
mov dword [ebp - 0x190], 0x4440
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x188], 0x59fe58
jne 0x453dfa
mov eax, dword [esi + 8]
add eax, 4
mov dword [ebp - 0x178], 5
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x17c], eax
lea eax, [ebp - 0x194]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
mov ecx, dword [ebp - 0x174]
xor ebx, ebx
mov dword [ebp - 0x148], ecx
cmp ecx, 0x20
jg 0x454042
mov eax, 0xfe
mov dword [ebp - 0x154], ebx
sub eax, ecx
mov ecx, dword [ebp - 0x144]
mov dword [ecx], eax
lea eax, [esi + 0xc]
cmp byte [esi + 0x11c], bl
jne 0x453e6c
mov eax, dword [esi + 8]
mov ecx, edi
mov dword [ebp - 0x140], eax
call fcn.00450c80
push 0x59fe48
mov esi, eax
push 0x5971f4
push esi
call fcn.00450580
add esp, 0xc
push dword [ebp - 0x148]
push 0x5986d4
push esi
call fcn.00450580
add esp, 0xc
push 0x5a0584
push 0x5971f4
push esi
call fcn.00450580
mov eax, dword [ebp - 0x140]
add esp, 0xc
add eax, 4
push eax
push 0x5971f4
push esi
call fcn.00450580
mov eax, dword [ebp - 0x148]
add esp, 0xc
cmp eax, 0x20
ja case.0x453ee3.1
movzx eax, byte [eax + 0x45410c]
jmp dword [eax*4 + 0x4540d4]
push str.The_operating_system_is_out_of_memory_or_resources.
mov ecx, edi
call fcn.00412090
mov byte [ebp - 0x139], 0
jmp 0x45408d
push str.The_specified_file_was_not_found.
mov ecx, edi
call fcn.00412090
mov byte [ebp - 0x139], 0
jmp 0x45408d
push str.The_specified_path_was_not_found.
mov ecx, edi
call fcn.00412090
mov byte [ebp - 0x139], 0
jmp 0x45408d
push str.The_.exe_file_is_invalid__non_Microsoft_Win32_.exe_or_error_in_.exe_image_.
mov ecx, edi
call fcn.00412090
mov byte [ebp - 0x139], 0
jmp 0x45408d
push str.The_operating_system_denied_access_to_the_specified_file.
mov ecx, edi
call fcn.00412090
mov byte [ebp - 0x139], 0
jmp 0x45408d
push str.The_file_name_association_is_incomplete_or_invalid.
mov ecx, edi
call fcn.00412090
mov byte [ebp - 0x139], 0
jmp 0x45408d
push str.The_Dynamic_Data_Exchange__DDE__transaction_could_not_be_completed_because_other_DDE_transactions_were_being_processed.
mov ecx, edi
call fcn.00412090
mov byte [ebp - 0x139], 0
jmp 0x45408d
push str.The_DDE_transaction_failed.
mov ecx, edi
call fcn.00412090
mov byte [ebp - 0x139], 0
jmp 0x45408d
push str.The_DDE_transaction_could_not_be_completed_because_the_request_timed_out.
mov ecx, edi
call fcn.00412090
mov byte [ebp - 0x139], 0
jmp 0x45408d
push str.The_specified_dynamic_link_library__DLL__was_not_found.
mov ecx, edi
call fcn.00412090
mov byte [ebp - 0x139], 0
jmp 0x45408d
push str.There_is_no_application_associated_with_the_given_file_name_extension._This_error_will_also_be_returned_if_you_attempt_to_print_a_file_that_is_not_printable.
mov ecx, edi
call fcn.00412090
mov byte [ebp - 0x139], 0
jmp 0x45408d
push str.There_was_not_enough_memory_to_complete_the_operation.
mov ecx, edi
call fcn.00412090
mov byte [ebp - 0x139], 0
jmp 0x45408d
push str.A_sharing_violation_occurred.
mov ecx, edi
call fcn.00412090
mov byte [ebp - 0x139], 0
jmp 0x45408d
mov ecx, edi
call fcn.00450c80
push str.Some_other_error.
push 0x5971f4
push eax
call fcn.00450580
add esp, 0xc
mov byte [ebp - 0x139], 0
jmp 0x45408d
mov eax, dword [ebp - 0x15c]
test eax, eax
jne 0x45405e
mov ecx, dword [ebp - 0x144]
cmp dword [ecx], ebx
jne 0x454086
mov dword [ecx], 0xfe
jmp 0x454086
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [ebp - 0x144]
push ecx
push dword [ebp - 0x15c]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push dword [ebp - 0x15c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x139], 1
mov dword [ebp - 4], 2
call fcn.00463160
cmp dword [eax + 0x248], 0
je 0x4540ae
mov ecx, dword [ebp - 0x158]
push ebx
call fcn.00466c10
mov al, byte [ebp - 0x139]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004d6cfd
mov esp, ebp
pop ebp
ret 0x18