Function at 0x4154b0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffdc
push esi
push 0
call fcn.004152a8
or eax, eax
jne 0x41590c
mov dword [0x453994], 0
push 0x9c45
call fcn.00449209
cmp dword [0x453994], 0
jne 0x4158fd
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
push 0x45cf22
call sub.kernel32.dll_CreateFileA
cmp eax, 0xffffffff
je 0x4158c0
mov dword [ebp - 4], eax
push 0x45cf22
call fcn.00428ce6
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 8
jne 0x415536
push 0xffdf
push str.MdiEditChild
call fcn.00446683
jmp 0x41567d
cmp dword [ebp - 0x24], 5
jne 0x415558
push dword [ebp - 4]
call sub.kernel32.dll_CloseHandle
push 0
call fcn.00421c8b
mov eax, 0
pop esi
leave
ret
cmp dword [ebp - 0x24], 6
jne 0x41557a
push dword [ebp - 4]
call sub.kernel32.dll_CloseHandle
push 0
call fcn.00425d7d
mov eax, 0
pop esi
leave
ret
cmp dword [ebp - 0x24], 0x20
jne 0x4155a5
cmp dword [0x44f71d], 0
je 0x4155a5
push dword [ebp - 4]
call sub.kernel32.dll_CloseHandle
push 1
call fcn.00427f9a
mov eax, 0
pop esi
leave
ret
cmp dword [ebp - 0x24], 0x21
je 0x4155b1
cmp dword [ebp - 0x24], 0x22
jne 0x415621
cmp dword [ebp - 0x24], 0x22
jne 0x4155d6
call fcn.00413e18
or eax, eax
je 0x4155fa
push 0xffdf
push str.MdiEditChild
call fcn.00446683
jmp 0x41567d
cmp dword [ebp - 0x24], 0x21
jne 0x4155fa
call fcn.00413e18
or eax, eax
je 0x4155fa
push dword [ebp - 4]
call sub.kernel32.dll_CloseHandle
call fcn.00412a2a
mov eax, 0
pop esi
leave
ret
push dword [ebp - 4]
call sub.kernel32.dll_CloseHandle
push 0xa
push 0
push 0
push 0x45cf22
push 0
push dword [ebp - 0x1c]
call sub.shell32.dll_ShellExecuteA
mov eax, 0
pop esi
leave
ret
cmp eax, 9
je 0x41563a
cmp eax, 0x23
je 0x41563a
cmp eax, 0x24
je 0x41563a
cmp eax, 0x1e
je 0x41563a
cmp eax, 0x1f
jne 0x415651
push dword [ebp - 4]
call sub.kernel32.dll_CloseHandle
call fcn.00412a2a
mov eax, 0
pop esi
leave
ret
push 1
call fcn.004152a8
cmp eax, 0xffffffff
je 0x41566e
push 0xffdd
push str.MdiEditChild
call fcn.00446683
jmp 0x41567d
push 0xffdf
push str.MdiEditChild
call fcn.00446683
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffeb
push dword [ebp - 0x1c]
call sub.user32.dll_GetWindowLongA
mov dword [ebp - 0x20], eax
push 0x45cf22
push dword [ebp - 0x1c]
call sub.user32.dll_SetWindowTextA
push 0x45cf22
push dword [ebp - 0x1c]
call fcn.004367ec
push dword [0x4538b0]
call sub.user32.dll_UpdateWindow
push 0
push 0
push 0xb
push dword [ebp - 0x20]
call sub.user32.dll_SendMessageA
push dword [ebp - 0x1c]
call sub.user32.dll_SetFocus
cmp dword [ebp - 0x24], 4
jne 0x4156df
push 1
push 0
push 0x812
push dword [ebp - 0x20]
call sub.user32.dll_SendMessageA
call sub.user32.dll_GetCursor
push eax
push 0x7f02
push 0
call sub.user32.dll_LoadCursorA
push eax
call sub.user32.dll_SetCursor
push dword [ebp - 4]
pop dword [ebp - 0x10]
mov dword [ebp - 8], 0x414ae7
lea eax, [ebp - 0x10]
push eax
push 1
push 0x449
push dword [ebp - 0x20]
call sub.user32.dll_SendMessageA
push dword [ebp - 4]
call sub.kernel32.dll_CloseHandle
push 0
push 0
push 0xba
push dword [ebp - 0x20]
call sub.user32.dll_SendMessageA
mov dword [0x461c2e], eax
push 0x45cf22
push dword [ebp - 0x20]
call fcn.0041526e
push 0xfffffffffffffff4
push dword [ebp - 0x20]
call sub.user32.dll_GetWindowLongA
cmp eax, 0xffdd
jne 0x4157b3
push 1
push dword [0x453984]
push dword [0x453980]
push dword [0x45397c]
push dword [ebp - 0x20]
call fcn.00414d2a
push 0
push 0
push 0x7f5
push dword [ebp - 0x20]
call sub.user32.dll_SendMessageA
push 0x45faf6
push 0x45fad6
push 0x811
push dword [ebp - 0x20]
call sub.user32.dll_SendMessageA
cmp dword [0x45c4c4], 0
je 0x4157cf
push 0
push 0
push 0x7f9
push dword [ebp - 0x20]
call sub.user32.dll_SendMessageA
jmp 0x4157cf
push 0
push dword [0x453984]
push dword [0x453988]
push dword [0x453988]
push dword [ebp - 0x20]
call fcn.00414d2a
push dword [ebp - 0x20]
call fcn.00414b21
push 0
push 0
push 0xb9
push dword [ebp - 0x20]
call sub.user32.dll_SendMessageA
push 0
push 0
push 0xcd
push dword [ebp - 0x20]
call sub.user32.dll_SendMessageA
push 0
push dword [ebp - 0x1c]
call sub.user32.dll_GetWindowLongA
push 0x8000
push eax
push dword [ebp - 0x20]
push 0x470
push dword [ebp - 0x1c]
call fcn.00408423
mov eax, dword [0x45ffba]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0x437
push dword [ebp - 0x20]
call sub.user32.dll_SendMessageA
push 0
push 0
push 0xb7
push dword [ebp - 0x20]
call sub.user32.dll_SendMessageA
push 0x808
push dword [ebp - 0x20]
call fcn.004135da
cmp dword [0x45c61e], 0
je 0x41587b
push 1
push 0xfffffffffffffffe
push dword [ebp - 0x20]
call sub.user32.dll_CheckDlgButton
push 0
push 0xfffffffffffffffe
push 0x111
push dword [ebp - 0x20]
call sub.user32.dll_SendMessageA
push 0
push 1
push 0xb
push dword [ebp - 0x20]
call sub.user32.dll_SendMessageA
push 0
push 0
push 0x809
push dword [ebp - 0x20]
call sub.user32.dll_SendMessageA
pop eax
push eax
call sub.user32.dll_SetCursor
push dword [ebp - 0x20]
call sub.user32.dll_SetFocus
cmp dword [0x44f32d], 0
je 0x4158fd
push 0
push 0xc
push dword [ebp - 0x1c]
call sub.user32.dll_SetWindowLongA
jmp 0x4158fd
push 0x44ecd3
push 0x467936
call fcn.004010a7
push 0x45cf22
push 0x467936
call fcn.004010c5
push 0x10
push 0x44f25f
push 0x467936
push dword [0x4538b0]
call sub.user32.dll_MessageBoxA
mov eax, 1
pop esi
leave
ret
mov eax, 0
mov dword [0x45ffba], 0
pop esi
leave
ret