Function at 0x4052c5
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
push ebx
mov ebx, ecx
xor ecx, ecx
mov dword [ebp - 8], ecx
push esi
mov dword [ebp - 0x14], 0x94d0
push edi
mov dword [ebp - 0x18], 0xfffffff7
mov edi, edx
mov dword [ebp - 0xc], ecx
jmp 0x4052f4
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x30], ecx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x4052ea
push 2
mov dword [ebp - 8], ecx
pop esi
jmp 0x4053c7
mov dword [ebp - 0xc], 0xb4e1265a
mov dword [ebp - 0xc], esi
cmp dword [ebp - 0xc], ecx
jl 0x4053c4
mov byte [ebp - 1], cl
cmp byte [ebp - 1], 0
je 0x40532a
push ecx
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
xor ecx, ecx
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x30], ecx
je 0x40534a
mov byte [ebp - 1], cl
cmp byte [ebp - 1], 0
je 0x4053bb
push 0x100d
push ecx
call dword [sym.imp.USER32.dll_CharUpperBuffW]
jmp 0x4053b9
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0xc], 0xf3f6085e
jae 0x405359
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x30]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x30], ecx
jne 0x405371
cmp dword [ebp - 0xc], ecx
je 0x405374
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 8]
push 2
mov dword [ebp + eax*4 - 0x30], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
cmp eax, 0xe974
setg cl
mov dword [ebp - 0x18], ecx
xor ecx, ecx
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x30], esi
mov eax, dword [ebp - 0xc]
cmp eax, 0x6b379904
mov eax, dword [ebp - 0xc]
setl cl
xor edx, edx
cmp ecx, esi
pop esi
setle dl
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [ebp - 0x18], ecx
xor ecx, ecx
dec dword [ebp - 0xc]
jns 0x405318
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jle 0x405305
mov dword [ebp - 0x20], 0x3934
mov dword [ebp - 0xc], 0xfffffff6
mov dword [ebp - 0x18], 0x5d0d658e
mov dword [ebp - 0x18], 0x2d2c87a7
mov dword [ebp - 0x14], 0xfffffffd
mov dword [ebp - 0x1c], 0x2758
mov dword [ebp - 0x18], 6
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 8], ecx
jmp 0x40541b
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x48], 0x3e13
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x40540d
mov byte [ebp - 1], cl
cmp byte [ebp - 1], 0
je 0x405436
push 0x15fb
push ecx
call dword [sym.imp.KERNEL32.dll_WinExec]
mov eax, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setl dl
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0xc]
cmp dword [ebp - 0xc], eax
jg 0x40546a
cmp dword [ebp - 0x1c], 0
jne 0x40546a
xor edx, edx
jmp 0x40546d
xor edx, edx
inc edx
mov eax, dword [ebp - 0xc]
xor ecx, ecx
cmp eax, edx
setl cl
cmp ecx, dword [ebp - 0xc]
jle 0x405487
cmp dword [ebp - 0x18], 0
je 0x405487
xor edx, edx
inc edx
jmp 0x405489
xor edx, edx
mov eax, dword [ebp - 0xc]
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x18]
xor edx, edx
mov dword [ebp - 0x24], str.dazflas_htmlppsuk_wqpuqbue_urlhwgd_nruu_bkwt_gqk_yyokyv_nloy_zyx_ppzc_iwovfpxm_osxr
mov dword [ebp - 0x18], eax
mov dword [ebp - 8], 0xe83c773
mov dword [ebp - 0xc], edx
jmp 0x4054c3
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x3c], 0xfffffffe
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x4054b5
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 1], dl
cmp byte [ebp - 1], dl
je 0x4054e3
push edx
call esi
push eax
call dword [sym.imp.USER32.dll_RemovePropA]
xor edx, edx
push 2
pop ecx
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], edx
jl 0x40561f
mov dword [ebp - 0xc], 0xbb11accb
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], edx
jl 0x405616
mov dword [ebp - 0x18], 0xea5223fa
mov dword [ebp - 0x14], edx
jmp 0x40551f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x10], 1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x405511
mov dword [ebp - 0x10], edx
jmp 0x40555b
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x3c], 1
mov eax, dword [ebp - 8]
sbb ecx, ecx
inc ecx
mov dword [ebp + eax*4 - 0x3c], ecx
mov byte [ebp - 1], dl
cmp byte [ebp - 1], 0
je 0x405555
push 0x1e8b
call esi
push eax
call dword [sym.imp.USER32.dll_GetWindow]
xor edx, edx
inc dword [ebp - 0x10]
push 2
pop ecx
cmp dword [ebp - 0x10], ecx
jle 0x40552a
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], edx
jl 0x40560d
mov dword [ebp - 0x14], 0x67bc620
mov dword [ebp - 0x1c], 0xfffffffd
mov dword [ebp - 0x14], edx
jmp 0x40558d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x58], 0xfffffffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x40557f
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x4c], edx
jl 0x405604
mov eax, dword [ebp - 0xc]
xor ecx, ecx
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x3c]
cmp eax, 1
setg cl
xor edx, edx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
cmp ecx, eax
mov eax, dword [ebp - 0x4c]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
cmp ecx, 0xd4d1
jne 0x4055df
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x3c], edx
je 0x4055df
xor ecx, ecx
inc ecx
jmp 0x4055e1
mov ecx, edx
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x3c]
neg eax
sub eax, ecx
neg eax
sbb eax, eax
inc eax
cmp eax, 0xe0f61949
sbb eax, eax
inc eax
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x4c]
jns 0x40559b
push 2
pop ecx
dec dword [ebp - 0x18]
jns 0x40556c
dec dword [ebp - 0xc]
jns 0x405505
dec dword [ebp - 8]
jns 0x4054f2
lea eax, [ebp - 0x20]
push eax
push 0x5edb
push 0x2fb6
push edx
call fcn.004167d1
mov dword [ebp - 0x14], 0xffffffff
add esp, 0x10
mov dword [ebp - 0x1c], 0xfffffffd
mov dword [ebp - 0x14], 0xfffffff7
jmp 0x40566f
cmp dword [ebp - 0x1c], 0
jne 0x405675
mov byte [ebp - 1], 0
cmp byte [ebp - 1], 0
je 0x40566c
push 0x1cf8
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff9
jge 0x40564d
mov eax, edi
mov ecx, 0x3e8
cdq
idiv ecx
mov ecx, ebx
mov esi, edx
mov edi, eax
call fcn.00404f45
add eax, esi
add eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret