Function at 0x458b62
Capabilities:
Create process on windows

Disassembly:
push 0x20
mov eax, 0x675d90
call fcn.006724ad
mov esi, ecx
cmp dword [ebp + 0x1c], 0
jne 0x458ece
mov edi, dword [ebp + 0xc]
xor ecx, ecx
inc ecx
xor ebx, ebx
cmp edi, ecx
jne 0x458b98
push dword [ebp + 0x14]
mov dword [esi + 0x24], ecx
mov ecx, esi
call fcn.004595b4
jmp 0x458cb4
cmp edi, 0x10
jne 0x458bcf
mov eax, dword [esi + 0xe0]
mov dword [esi + 0x24], ecx
cmp eax, 2
je 0x458bc3
cmp eax, ecx
je 0x458bc3
cmp eax, 3
je 0x458bc3
sub esp, 0x10
mov ecx, esi
call fcn.0045a319
jmp 0x458c7e
mov ecx, esi
call fcn.0045b6f0
jmp 0x458c7e
cmp edi, 2
jne 0x458be3
mov dword [esi + 0x24], ecx
mov ecx, esi
call fcn.0045a248
jmp 0x458c7e
cmp edi, 0x14
jne 0x458bf8
xor eax, eax
mov dword [esi + 0x24], ecx
cmp dword [ebp + 0x10], eax
setne al
jmp 0x458cb4
cmp edi, 0x111
je 0x458c08
cmp edi, 0x100
jne 0x458c0d
mov dword [esi + 0x24], ecx
jmp 0x458c7e
cmp edi, 0x101
jne 0x458c30
cmp dword [ebp + 0x10], 0x1b
mov dword [esi + 0x24], ecx
jne 0x458c7e
push ebx
push ebx
push 0x403
push dword [esi + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x458c7e
cmp edi, 7
jne 0x458c6e
mov eax, dword [esi + 0xc8]
mov dword [esi + 0x24], ecx
sub eax, 1
je 0x458c5d
sub eax, 1
je 0x458c55
sub eax, 1
jne 0x458c7e
mov eax, dword [esi + 0xb8]
jmp 0x458c63
mov eax, dword [esi + 0xb0]
jmp 0x458c63
mov eax, dword [esi + 0xa8]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x458c7e
cmp edi, 0xf
jne 0x458c85
mov dword [esi + 0x24], ecx
push ecx
mov ecx, esi
call fcn.0045afee
mov ecx, dword [ebp + 0x18]
mov dword [ecx], ebx
jmp 0x458cb9
cmp edi, 0x86
jne 0x458d1c
mov dword [esi + 0x24], ecx
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x28], ecx
mov ecx, dword [esi + 0xe4]
call fcn.00460aa2
push ebx
lea eax, [ebp - 0x28]
push eax
push edi
push dword [esi + 4]
call dword [sym.imp.USER32.dll_DefWindowProcW]
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
cmp dword [esi + 0x24], ebx
jne 0x458f45
mov edx, dword [ebp + 0x14]
lea ecx, [esi + 0x24]
movzx eax, dx
shr edx, 0x10
mov dword [ebp - 0x24], edx
mov edx, ecx
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x28], edi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x10], eax
cmp edi, 0x83
jne 0x458d72
push dword [ebp + 0x14]
mov dword [ecx], 1
mov ecx, esi
push dword [ebp + 0x10]
call fcn.0045b2b4
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
cmp dword [esi + 0x24], ebx
jne 0x458f45
mov edx, dword [ebp - 0x14]
jmp 0x458dda
cmp edi, 0x84
jne 0x458cc2
mov edx, dword [ebp + 0x14]
lea eax, [esi + 0x24]
mov dword [eax], ecx
mov dword [ebp - 0x14], eax
movzx eax, dx
mov ecx, eax
mov dword [ebp - 0x24], ecx
movsx ecx, ax
mov eax, edx
shr eax, 0x10
mov dword [ebp - 0x28], eax
cwde
push eax
push ecx
mov ecx, esi
call fcn.0045b246
mov ecx, dword [ebp + 0x18]
lea edx, [esi + 0x24]
xor ebx, ebx
mov dword [ecx], eax
cmp dword [edx], ebx
jne 0x458f45
mov eax, dword [ebp - 0x24]
movzx eax, ax
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x10], eax
jmp 0x458dda
cmp edi, 0x200
jne 0x458dd7
mov dword [ecx], 1
movsx ecx, ax
mov eax, dword [ebp - 0x24]
cwde
push eax
push ecx
push dword [ebp + 0x10]
mov ecx, esi
call fcn.0045b31a
mov eax, dword [ebp + 0x18]
mov dword [eax], ebx
mov eax, dword [ebp - 0x18]
cmp dword [eax], ebx
jne 0x458f45
cmp edi, 0x404
jne 0x458fa3
push ebx
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0x98]
lea eax, [ebp - 0x2c]
push eax
call fcn.00471858
mov dword [ebp - 4], ebx
mov edi, dword [eax]
mov eax, dword [edi]
mov esi, dword [eax + 0x14]
jmp 0x458fe9
mov ecx, dword [ebp + 0x18]
mov eax, dword [ebp - 0x28]
movzx eax, ax
mov dword [ebp - 0x28], eax
cmp edi, 0xa0
jne 0x458e14
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
cwde
push eax
movsx eax, dx
push eax
push dword [ebp + 0x10]
mov dword [ecx], 1
mov ecx, esi
call fcn.0045b36d
mov eax, dword [ebp + 0x18]
mov dword [eax], ebx
mov eax, dword [ebp - 0x1c]
jmp 0x458eca
cmp edi, 0xa1
jne 0x458e69
mov ecx, dword [ebp - 0x1c]
cwde
mov dword [ecx], 1
mov ecx, dword [esi + 0xe4]
cmp dword [ecx + 4], ebx
je 0x458e3c
mov byte [ecx + 8], 1
call fcn.00460aa2
jmp 0x458e5f
mov edx, dword [ebp - 0x10]
movzx ecx, ax
movsx eax, dx
shl ecx, 0x10
movzx eax, ax
or ecx, eax
push ecx
push dword [ebp + 0x10]
push 0xa1
push dword [esi + 4]
call dword [sym.imp.USER32.dll_DefWindowProcW]
mov eax, dword [ebp + 0x18]
mov dword [eax], ebx
mov eax, dword [ebp - 0x20]
jmp 0x458eca
cmp edi, 0xa2
jne 0x458e92
mov eax, dword [ebp - 0x20]
mov ecx, esi
mov edx, dword [ebp - 0x10]
mov dword [eax], 1
mov eax, dword [ebp - 0x28]
cwde
push eax
movsx eax, dx
push eax
push dword [ebp + 0x10]
call fcn.0045b3df
jmp 0x458ec2
cmp edi, 0x2a2
jne 0x458ed8
mov ecx, dword [esi + 0xe4]
mov dword [edx], 1
mov byte [ecx + 8], bl
call fcn.00460aa2
mov eax, dword [esi + 0xe4]
mov dword [eax + 4], ebx
mov ecx, dword [esi + 0xe4]
call fcn.00460aa2
mov eax, dword [ebp + 0x18]
mov dword [eax], ebx
mov eax, dword [ebp - 0x14]
cmp dword [eax], ebx
jne 0x458f45
xor eax, eax
call fcn.0067247b
ret 0x18
cmp edi, 0x81
jne 0x458f12
cmp byte [esi + 0xe8], 0
mov dword [edx], 1
je 0x458ef7
mov ecx, dword [esi + 4]
call fcn.004588b0
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push 0x81
push dword [esi + 4]
call dword [sym.imp.USER32.dll_DefWindowProcW]
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
jmp 0x458ec7
cmp edi, 0x2e0
jne 0x458f2b
mov dword [edx], 1
xor eax, eax
mov dword [ecx], ebx
cmp dword [edx], ebx
setne al
jmp 0x458ed0
cmp edi, 0x406
jne 0x458f4a
push ecx
push ecx
push dword [ebp + 0x10]
push ecx
mov ecx, esi
call fcn.0045a770
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
xor eax, eax
inc eax
jmp 0x458ed0
cmp edi, 0x40a
jne 0x458f77
cmp dword [esi + 0xe0], ebx
jne 0x459001
push 2
mov ecx, esi
call fcn.0045a5d0
mov ecx, dword [esi + 0xa8]
call fcn.0045f752
jmp 0x459001
cmp edi, 0x401
jne 0x458f8b
sub esp, 0x10
mov ecx, esi
call fcn.0045a290
jmp 0x458f40
cmp edi, 0x403
jne 0x458da3
sub esp, 0x10
mov ecx, esi
call fcn.0045a319
jmp 0x458f40
cmp edi, 0x405
jne 0x458fb7
sub esp, 0x10
mov ecx, esi
call fcn.0045abb0
jmp 0x458f40
cmp edi, 0x407
jne 0x45900b
mov ecx, esi
call fcn.0045a956
mov ecx, dword [esi + 0x98]
lea eax, [ebp - 0x2c]
push eax
mov dword [esi + 0xe0], ebx
call fcn.00471858
mov dword [ebp - 4], 1
mov edi, dword [eax]
mov eax, dword [edi]
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0x6a630c]
mov ecx, edi
call esi
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x459001
call fcn.0044d130
mov eax, dword [ebp + 0x18]
mov dword [eax], ebx
jmp 0x458f45
cmp edi, 0x408
jne 0x45901c
mov ecx, esi
call fcn.0045a956
jmp 0x459001
cmp edi, 0x409
jne 0x45903a
push 1
mov ecx, esi
call fcn.0045a5d0
mov ecx, dword [esi + 0xa8]
call fcn.0045f617
jmp 0x459013
cmp edi, 0x40b
jne 0x459054
push ecx
push ecx
push dword [ebp + 0x10]
push ecx
mov ecx, esi
call fcn.0045b44f
jmp 0x458f40
cmp edi, 0x40c
jne 0x45906b
sub esp, 0x10
mov ecx, esi
call fcn.0045af17
jmp 0x458f40
cmp edi, 0x40d
jne 0x45907e
push dword [esi + 4]
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x459001
cmp edi, 0x40e
jne 0x4590a0
push 5
push ebx
push ebx
push str.https:__web.webex.com_
push 0x72e6b8
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x459001
cmp edi, 0x40f
jne 0x458ece
mov ecx, esi
call fcn.0045aa91
jmp 0x459001