Function at 0x452348
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe0
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 8], edx
mov esi, eax
mov eax, dword [ebp - 8]
test eax, eax
je 0x452369
xor edx, edx
mov dword [eax], edx
xor eax, eax
push ebp
push 0x45269d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
call sub.rtl250.bpl__System__LStrClr_qqrpv
xor ebx, ebx
push 0
mov eax, dword [esi + 0x38]
push eax
call dword [0x4df4ac]
test eax, eax
je 0x452657
mov dword [ebp - 0xc], 4
push 0
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0x20000013
mov eax, dword [esi + 0x38]
push eax
call dword [0x4df4b0]
test eax, eax
je 0x452574
mov eax, dword [ebp - 0x10]
sub eax, 0xc8
je 0x4523e8
add eax, 0xffffff9b
sub eax, 3
jb 0x4523f6
sub eax, 0x61
je 0x4524b2
sub eax, 6
je 0x452535
jmp 0x452574
movzx eax, byte [esi + 0x72]
mov byte [esi + 0x73], al
mov bl, 1
jmp 0x452574
xor eax, eax
mov dword [ebp - 0xc], eax
push 0
lea eax, [ebp - 0xc]
push eax
push 0
push 0
push 0x21
mov eax, dword [esi + 0x38]
push eax
call dword [0x4df4b0]
test eax, eax
jne 0x452574
cmp dword [ebp - 0xc], 0
jbe 0x452574
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x452574
lea eax, [ebp - 4]
xor ecx, ecx
mov edx, dword [ebp - 0xc]
call sub.rtl250.bpl__System__LStrSetLength_qqrr27System__AnsiStringT_us_i0__ius
push 0
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
push 0
push 0x21
mov eax, dword [esi + 0x38]
push eax
call dword [0x4df4b0]
test eax, eax
je 0x452574
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 4]
call sub.rtl250.bpl__System__UStrFromPWChar_qqrr20System_UnicodeStringpb
mov edx, dword [ebp - 0x20]
mov eax, 0x4da558
mov ecx, 0
call sub.rtl250.bpl__System__LStrFromUStr_qqrr27System__AnsiStringT_us_i0__x20System_UnicodeStringus
cmp byte [0x4da554], 0
je 0x4524a4
cmp byte [esi + 0x14], 0
jne 0x4524a4
push 1
push 0
push 0
mov eax, dword [0x4da558]
call sub.rtl250.bpl__System__LStrToPChar_qqrx27System__AnsiStringT_us_i0__
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
movzx eax, byte [esi + 0x72]
mov byte [esi + 0x73], al
mov bl, 1
jmp 0x452574
cmp byte [esi + 0x72], 0
je 0x4524be
mov byte [esi + 0x73], 0
jmp 0x4524c2
mov byte [esi + 0x72], 1
cmp byte [esi + 0x5d], 0
jne 0x452574
cmp dword [esi + 0x20], 0
je 0x452574
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
mov eax, dword [esi + 0x38]
push eax
call dword [0x4df4b4]
test eax, eax
je 0x452574
mov byte [esi + 0x5d], 1
mov eax, dword [ebp - 0x14]
call fcn.0045230c
mov edi, eax
mov dword [esi + 0x60], edi
test edi, edi
je 0x452574
push 0
mov eax, dword [esi + 0x24]
call sub.rtl250.bpl__System__UStrToPWChar_qqrx20System_UnicodeString
push eax
mov eax, dword [esi + 0x20]
call sub.rtl250.bpl__System__UStrToPWChar_qqrx20System_UnicodeString
push eax
push edi
push 0
mov eax, dword [esi + 0x38]
push eax
call dword [0x4df4b8]
cmp eax, 1
sbb eax, eax
inc eax
mov byte [esi + 0x5c], al
jmp 0x452574
cmp byte [esi + 0x64], 0
jne 0x452574
cmp dword [esi + 0x28], 0
je 0x452574
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
mov eax, dword [esi + 0x38]
push eax
call dword [0x4df4b4]
test eax, eax
je 0x452574
mov byte [esi + 0x64], 1
mov eax, dword [ebp - 0x14]
call fcn.0045230c
mov edi, eax
mov dword [esi + 0x68], edi
test edi, edi
setne al
mov byte [esi + 0x5c], al
test bl, bl
je 0x45267f
jmp 0x4525c0
lea eax, [ebp - 4]
xor ecx, ecx
mov edx, dword [ebp - 0xc]
call sub.rtl250.bpl__System__LStrSetLength_qqrr27System__AnsiStringT_us_i0__ius
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
push eax
mov eax, dword [esi + 0x38]
push eax
call dword [0x4df4c0]
test eax, eax
je 0x4525d8
mov eax, dword [ebp - 4]
call sub.rtl250.bpl__System__LStrLen_qqrx31System__AnsiStringT_us_i65535__
cmp eax, dword [ebp - 0xc]
jne 0x4525d8
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
call sub.rtl250.bpl__System__LStrCat_qqrr27System__AnsiStringT_us_i0__x27System__AnsiStringT_us_i0__
mov eax, dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esi + 0x38]
push eax
call dword [0x4df4bc]
test eax, eax
je 0x4525d8
cmp dword [ebp - 0xc], 0
ja 0x45257e
push 0
mov esi, dword [0x4dbd1c]
mov esi, dword [esi]
mov eax, dword [ebp - 8]
mov ecx, 0x4526bc
mov edx, 0x4526cc
call esi
push 0
mov esi, dword [0x4dbd1c]
mov esi, dword [esi]
mov eax, dword [ebp - 8]
mov ecx, 0x4526e0
mov edx, 0x4526f0
call esi
push 0
mov esi, dword [0x4dbd1c]
mov esi, dword [esi]
mov eax, dword [ebp - 8]
mov ecx, 0x452704
mov edx, 0x452714
call esi
push 0
mov esi, dword [0x4dbd1c]
mov esi, dword [esi]
mov eax, dword [ebp - 8]
mov ecx, 0x452728
mov edx, 0x452738
call esi
push 0
mov esi, dword [0x4dbd1c]
mov esi, dword [esi]
mov eax, dword [ebp - 8]
mov ecx, 0x45274c
mov edx, 0x45275c
call esi
jmp 0x45267f
cmp dword [esi + 0x60], 0
jne 0x45266f
cmp dword [esi + 0x68], 0
jne 0x45266f
call sub.kernel32.dll_GetLastError
cmp eax, 0x2f00
je 0x452673
xor eax, eax
jmp 0x452675
mov al, 1
mov byte [esi + 0x5c], al
mov eax, esi
call fcn.00452764
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4526a4
lea eax, [ebp - 0x20]
call sub.rtl250.bpl__System__UStrClr_qqrpv
lea eax, [ebp - 4]
call sub.rtl250.bpl__System__LStrClr_qqrpv
ret