Function at 0x455184
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 7
add esp, 0xfffff004
push eax
dec eax
jne 0x45518d
mov eax, dword [ebp - 4]
add esp, 0xfffff538
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x7ac0], edx
mov dword [ebp - 0x7ac4], edx
mov dword [ebp - 0x7ac8], edx
mov dword [ebp - 0x7acc], edx
mov edi, eax
xor eax, eax
push ebp
push 0x455766
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x45573e
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x7ac4]
xor eax, eax
call fcn.0040294c
mov eax, dword [ebp - 0x7ac4]
lea edx, [ebp - 0x7ac0]
call fcn.00407694
lea eax, [ebp - 0x7ac0]
push eax
lea edx, [ebp - 0x7ac8]
xor eax, eax
call fcn.0040294c
mov eax, dword [ebp - 0x7ac8]
lea edx, [ebp - 0x7ac4]
call fcn.004077b8
mov edx, dword [ebp - 0x7ac4]
pop eax
call fcn.00403c50
mov edx, dword [ebp - 0x7ac0]
mov eax, edi
call fcn.00451f2c
mov dword [ebp - 0x18], eax
mov eax, dword [0x45aff0]
mov byte [eax], 0
lea edx, [ebp - 0x7ac4]
xor eax, eax
call fcn.0040294c
mov eax, dword [ebp - 0x7ac4]
lea edx, [ebp - 0x7ac0]
call fcn.00407694
lea eax, [ebp - 0x7ac0]
push eax
lea edx, [ebp - 0x7ac8]
xor eax, eax
call fcn.0040294c
mov eax, dword [ebp - 0x7ac8]
lea edx, [ebp - 0x7ac4]
call fcn.004077b8
mov edx, dword [ebp - 0x7ac4]
pop eax
call fcn.00403c50
mov eax, dword [ebp - 0x7ac0]
mov edx, 0x40
call fcn.0040732c
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x4552b5
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x455748
mov ecx, 2
mov edx, 0xffffffeb
mov eax, ebx
call fcn.004073e8
lea edx, [ebp - 0x23]
mov ecx, 0xb
mov eax, ebx
call fcn.00407390
lea eax, [ebp - 0x7ac0]
lea edx, [ebp - 0x23]
mov ecx, 0xb
call fcn.00403bf8
mov eax, dword [ebp - 0x7ac0]
mov edx, 0x45577c
call fcn.00403d58
je 0x455307
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x455748
lea edx, [ebp - 0xa]
mov ecx, 0xa
mov eax, ebx
call fcn.00407390
lea eax, [ebp - 0x7ac0]
lea edx, [ebp - 0xa]
mov ecx, 0xa
call fcn.00403bf8
mov eax, dword [ebp - 0x7ac0]
call fcn.0040729c
mov esi, eax
mov eax, ebx
call fcn.004073f4
lea edx, [ebp - 0x7ac4]
xor eax, eax
call fcn.0040294c
mov eax, dword [ebp - 0x7ac4]
lea edx, [ebp - 0x7ac0]
call fcn.00407694
lea eax, [ebp - 0x7ac0]
push eax
lea edx, [ebp - 0x7ac8]
xor eax, eax
call fcn.0040294c
mov eax, dword [ebp - 0x7ac8]
lea edx, [ebp - 0x7ac4]
call fcn.004077b8
mov edx, dword [ebp - 0x7ac4]
pop eax
call fcn.00403c50
mov edx, dword [ebp - 0x7ac0]
lea eax, [ebp - 0x170]
call fcn.00404d5a
mov eax, dword [0x45aff0]
mov byte [eax], 0
mov edx, 1
lea eax, [ebp - 0x170]
call fcn.00405251
call fcn.00402744
push dword [edi + 0x218]
push 0x455790
lea edx, [ebp - 0x7ac8]
xor eax, eax
call fcn.0040294c
mov eax, dword [ebp - 0x7ac8]
lea edx, [ebp - 0x7ac4]
call fcn.004077b8
push dword [ebp - 0x7ac4]
lea eax, [ebp - 0x7ac0]
mov edx, 3
call fcn.00403d08
mov edx, dword [ebp - 0x7ac0]
lea eax, [ebp - 0x2bc]
call fcn.00404d5a
mov edx, 1
lea eax, [ebp - 0x2bc]
call fcn.00405268
call fcn.00402744
mov edx, esi
lea eax, [ebp - 0x170]
call fcn.00405288
call fcn.00402744
xor ebx, ebx
lea eax, [ebp - 0x10]
push eax
lea edx, [ebp - 0x7abc]
mov ecx, 0x7800
lea eax, [ebp - 0x170]
call fcn.00404dfc
call fcn.00402744
lea eax, [ebp - 0x170]
call fcn.00404f88
call fcn.00402744
mov edx, dword [ebp - 0x18]
sub edx, 0xa
sub edx, 0xb
cmp eax, edx
jle 0x455492
lea eax, [ebp - 0x170]
call fcn.00404f88
call fcn.00402744
sub eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x18]
sub edx, 0xa
sub edx, 0xb
sub edx, eax
mov dword [ebp - 0x10], edx
mov bl, 1
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x7abc]
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x2bc]
call fcn.00404e60
call fcn.00402744
test bl, bl
je 0x455433
lea eax, [ebp - 0x170]
call fcn.00404ec4
call fcn.00402744
lea eax, [ebp - 0x2bc]
call fcn.00404ec4
call fcn.00402744
push 1
lea edx, [ebp - 0x7ac4]
xor eax, eax
call fcn.0040294c
mov eax, dword [ebp - 0x7ac4]
lea edx, [ebp - 0x7ac0]
call fcn.00407694
mov eax, dword [ebp - 0x7ac0]
call fcn.00403e0c
push eax
push 0
push dword [edi + 0x218]
push 0x455790
lea edx, [ebp - 0x7acc]
xor eax, eax
call fcn.0040294c
mov eax, dword [ebp - 0x7acc]
lea edx, [ebp - 0x7ac8]
call fcn.004077b8
push dword [ebp - 0x7ac8]
lea eax, [ebp - 0x7ac4]
mov edx, 3
call fcn.00403d08
mov eax, dword [ebp - 0x7ac4]
call fcn.00403e0c
push eax
push 0x455794
mov eax, edi
call fcn.00423d54
push eax
call sub.shell32.dll_ShellExecuteA
mov eax, dword [0x45afa8]
mov eax, dword [eax]
call fcn.0042f644
lea edx, [ebp - 0x7ac4]
xor eax, eax
call fcn.0040294c
mov eax, dword [ebp - 0x7ac4]
lea edx, [ebp - 0x7ac0]
call fcn.00407694
lea eax, [ebp - 0x7ac0]
push eax
lea edx, [ebp - 0x7ac8]
xor eax, eax
call fcn.0040294c
mov eax, dword [ebp - 0x7ac8]
lea edx, [ebp - 0x7ac4]
call fcn.004077b8
mov edx, dword [ebp - 0x7ac4]
pop eax
call fcn.00403c50
mov edx, dword [ebp - 0x7ac0]
lea eax, [ebp - 0x170]
call fcn.00404d5a
mov eax, dword [0x45aff0]
mov byte [eax], 0
mov edx, 1
lea eax, [ebp - 0x170]
call fcn.00405251
call fcn.00402744
push dword [edi + 0x218]
push 0x455790
lea ecx, [ebp - 0x7ac4]
mov edx, 0x4557a4
mov eax, edi
call fcn.00451bd8
push dword [ebp - 0x7ac4]
lea eax, [ebp - 0x7ac0]
mov edx, 3
call fcn.00403d08
mov edx, dword [ebp - 0x7ac0]
lea eax, [ebp - 0x2bc]
call fcn.00404d5a
mov edx, 1
lea eax, [ebp - 0x2bc]
call fcn.00405268
call fcn.00402744
sub esi, 0xb
sub esi, 0xa
xor ebx, ebx
lea eax, [ebp - 0x10]
push eax
lea edx, [ebp - 0x7abc]
mov ecx, 0x7800
lea eax, [ebp - 0x170]
call fcn.00404dfc
call fcn.00402744
lea eax, [ebp - 0x170]
call fcn.00404f88
call fcn.00402744
cmp esi, eax
jge 0x455697
lea eax, [ebp - 0x170]
call fcn.00404f88
call fcn.00402744
sub eax, dword [ebp - 0x10]
mov edx, esi
sub edx, eax
mov dword [ebp - 0x10], edx
mov bl, 1
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x7abc]
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x2bc]
call fcn.00404e60
call fcn.00402744
test bl, bl
je 0x455648
lea eax, [ebp - 0x170]
call fcn.00404ec4
call fcn.00402744
lea eax, [ebp - 0x2bc]
call fcn.00404ec4
call fcn.00402744
push 1
push 0
push 0
push dword [edi + 0x218]
push 0x455790
lea ecx, [ebp - 0x7ac4]
mov edx, 0x4557a4
mov eax, edi
call fcn.00451bd8
push dword [ebp - 0x7ac4]
lea eax, [ebp - 0x7ac0]
mov edx, 3
call fcn.00403d08
mov eax, dword [ebp - 0x7ac0]
call fcn.00403e0c
push eax
push 0x455794
mov eax, edi
call fcn.00423d54
push eax
call sub.shell32.dll_ShellExecuteA
call fcn.00403880
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x455748
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x45576d
lea eax, [ebp - 0x7acc]
mov edx, 4
call fcn.004039f0
ret