Function at 0x452600
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x18
push 0
push 0
dec ecx
jne 0x452609
xchg dword [ebp - 4], ecx
push ebx
push esi
mov dword [ebp - 8], ecx
mov dword [ebp - 4], edx
mov ebx, eax
mov eax, dword [ebp - 4]
call fcn.00404af8
mov eax, dword [ebp - 8]
call fcn.00404af8
mov eax, dword [ebp + 8]
call fcn.00404af8
xor eax, eax
push ebp
push 0x452b71
push dword fs:[eax]
mov dword fs:[eax], esp
or esi, 0xffffffff
call sub.kernel32.dll_GetTickCount
mov dword [ebx + 0x30c], eax
mov eax, dword [ebp - 4]
call fcn.00451d88
test al, al
jne 0x4528a9
lea eax, [ebp - 0x64]
mov ecx, 0x452b8c
mov edx, dword [ebp - 4]
call fcn.00404954
mov edx, dword [ebp - 0x64]
mov eax, ebx
call fcn.00452370
push 0
push 0x452ba0
push dword [ebp - 4]
push 0x452bb4
push dword [ebp - 8]
lea eax, [ebp - 0x68]
mov edx, 4
call fcn.004049c8
mov eax, dword [ebp - 0x68]
call fcn.00404b08
push eax
call sub.kernel32.dll_WinExec
push 0x452bc0
push dword [ebp - 4]
push 0x452bd0
push dword [ebp - 8]
lea eax, [ebp - 0x6c]
mov edx, 4
call fcn.004049c8
mov edx, dword [ebp - 0x6c]
mov eax, ebx
call fcn.00452370
mov edx, 1
mov eax, ebx
call fcn.00452f90
mov eax, dword [ebp - 4]
call fcn.00451d88
test al, al
jne 0x452872
push 0
push 0x452bdc
push dword [ebp - 4]
push 0x452bf8
lea eax, [ebp - 0x70]
mov edx, 3
call fcn.004049c8
mov eax, dword [ebp - 0x70]
call fcn.00404b08
push eax
call sub.kernel32.dll_WinExec
push 0x452c04
push dword [ebp - 4]
push 0x452bd0
push dword [ebp - 8]
push 0x452c1c
push dword [ebp - 4]
push 0x452c2c
push dword [ebp + 8]
lea eax, [ebp - 0x74]
mov edx, 8
call fcn.004049c8
mov edx, dword [ebp - 0x74]
mov eax, ebx
call fcn.00452370
mov eax, dword [ebp + 8]
call fcn.00451d88
test al, al
je 0x452833
push 0
push 0x452ba0
push dword [ebp - 4]
push 0x452bb4
push dword [ebp + 8]
lea eax, [ebp - 0x78]
mov edx, 4
call fcn.004049c8
mov eax, dword [ebp - 0x78]
call fcn.00404b08
push eax
call sub.kernel32.dll_WinExec
mov edx, 1
mov eax, ebx
call fcn.00452f90
mov eax, dword [ebp - 4]
call fcn.00451d88
test al, al
jne 0x4527fc
push 0
push 0x452bdc
push dword [ebp - 4]
push 0x452bf8
lea eax, [ebp - 0x7c]
mov edx, 3
call fcn.004049c8
mov eax, dword [ebp - 0x7c]
call fcn.00404b08
push eax
call sub.kernel32.dll_WinExec
push 0x452c3c
push dword [ebp - 4]
push 0x452c2c
push dword [ebp + 8]
push 0x452c48
lea eax, [ebp - 0x80]
mov edx, 5
call fcn.004049c8
mov edx, dword [ebp - 0x80]
mov eax, ebx
call fcn.00452370
jmp 0x452b34
push 0x452c5c
push dword [ebp - 4]
push 0x452bd0
push dword [ebp + 8]
lea eax, [ebp - 0x84]
mov edx, 4
call fcn.004049c8
mov edx, dword [ebp - 0x84]
mov eax, ebx
call fcn.00452370
mov esi, 2
jmp 0x452b34
push 0x452c70
push dword [ebp + 8]
push 0x452c80
push dword [ebp - 4]
push 0x452c2c
push dword [ebp + 8]
push 0x452c48
lea eax, [ebp - 0x88]
mov edx, 7
call fcn.004049c8
mov edx, dword [ebp - 0x88]
mov eax, ebx
call fcn.00452370
jmp 0x452b34
push 0x452c5c
push dword [ebp - 4]
push 0x452bd0
push dword [ebp - 8]
lea eax, [ebp - 0x8c]
mov edx, 4
call fcn.004049c8
mov edx, dword [ebp - 0x8c]
mov eax, ebx
call fcn.00452370
mov esi, 1
jmp 0x452b34
mov dword [ebp - 0xc], 0x50
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x60]
push eax
mov eax, dword [ebp - 4]
call fcn.00404b08
push eax
call sub.mpr.dll_WNetGetConnectionA
mov esi, eax
cmp esi, 0x4b3
jg 0x4528e7
je 0x4528fa
sub esi, 0xea
je 0x4528fa
sub esi, 0x3c6
je 0x4528fa
dec esi
je 0x4528fa
jmp 0x4528fa
sub esi, 0x4b8
je 0x4528fa
sub esi, 0xe
je 0x4528fa
sub esi, 0x404
lea eax, [ebp - 0x94]
lea edx, [ebp - 0x60]
mov ecx, 0x50
call fcn.004048b8
mov eax, dword [ebp - 0x94]
lea edx, [ebp - 0x90]
call fcn.004093ac
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0x10]
call fcn.004091c4
lea edx, [ebp - 0x9c]
mov eax, dword [ebp - 8]
call fcn.004093ac
mov eax, dword [ebp - 0x9c]
lea edx, [ebp - 0x98]
call fcn.004091c4
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x10]
call fcn.00404a54
je 0x45298e
lea edx, [ebp - 0xa4]
mov eax, dword [ebp + 8]
call fcn.004093ac
mov eax, dword [ebp - 0xa4]
lea edx, [ebp - 0xa0]
call fcn.004091c4
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x10]
call fcn.00404a54
jne 0x452a85
lea edx, [ebp - 0xac]
mov eax, dword [ebp + 8]
call fcn.004093ac
mov eax, dword [ebp - 0xac]
lea edx, [ebp - 0xa8]
call fcn.004091c4
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x10]
call fcn.00404a54
jne 0x452a7b
mov eax, dword [ebp - 8]
call fcn.00451d88
test al, al
je 0x452a7b
push 0
push 1
mov eax, dword [ebp - 4]
call fcn.00404b08
push eax
call sub.mpr.dll_WNetCancelConnection2A
mov esi, eax
test esi, esi
je 0x452a2d
call sub.kernel32.dll_GetLastError_1
push 0x452ca0
push dword [ebp + 8]
push 0x452cb8
lea edx, [ebp - 0xb4]
mov eax, esi
call fcn.0040c4a0
push dword [ebp - 0xb4]
lea eax, [ebp - 0xb0]
mov edx, 4
call fcn.004049c8
mov edx, dword [ebp - 0xb0]
mov eax, ebx
call fcn.00452370
jmp 0x452a6f
push 0x452cd4
push dword [ebp - 4]
push 0x452ce8
push dword [ebp - 8]
push 0x452d0c
push dword [ebp - 4]
push 0x452d2c
push dword [ebp + 8]
push 0x452d38
lea eax, [ebp - 0xb8]
mov edx, 9
call fcn.004049c8
mov edx, dword [ebp - 0xb8]
mov eax, ebx
call fcn.00452370
mov edx, 1
mov eax, ebx
call fcn.00452f90
mov esi, 4
jmp 0x452b34
push 0
push 1
mov eax, dword [ebp - 4]
call fcn.00404b08
push eax
call sub.mpr.dll_WNetCancelConnection2A
mov esi, eax
test esi, esi
je 0x452ae1
call sub.kernel32.dll_GetLastError_1
push 0x452ca0
push dword [ebp + 8]
push 0x452cb8
lea edx, [ebp - 0xc0]
mov eax, esi
call fcn.0040c4a0
push dword [ebp - 0xc0]
lea eax, [ebp - 0xbc]
mov edx, 4
call fcn.004049c8
mov edx, dword [ebp - 0xbc]
mov eax, ebx
call fcn.00452370
jmp 0x452b23
push 0x452c70
push dword [ebp - 4]
push 0x452d4c
push dword [ebp - 0x10]
push 0x452d60
push dword [ebp - 8]
push 0x452d70
push dword [ebp + 8]
push 0x452d7c
lea eax, [ebp - 0xc4]
mov edx, 9
call fcn.004049c8
mov edx, dword [ebp - 0xc4]
mov eax, ebx
call fcn.00452370
mov edx, 1
mov eax, ebx
call fcn.00452f90
mov esi, 5
mov ebx, esi
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x452b78
lea eax, [ebp - 0xc4]
mov edx, 0x19
call fcn.0040466c
lea eax, [ebp - 0x10]
call fcn.00404648
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040466c
lea eax, [ebp + 8]
call fcn.00404648
ret