Function at 0x77dab4
Capabilities:
Create process on windows
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xc
push 0
push 0
dec ecx
jne 0x77dabc
push ebx
mov eax, 0x7697a4
call fcn.0040f304
xor eax, eax
push ebp
push 0x77de81
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00769534
call fcn.007695a4
mov eax, dword [0x79c178]
mov eax, dword [eax]
call fcn.005c5d00
mov eax, dword [0x768960]
call fcn.00768e88
test al, al
je 0x77db5d
mov eax, dword [0x73ddac]
call fcn.0073ea70
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x1c]
or ecx, 0xffffffff
mov eax, 0x77de9c
call fcn.004286c4
mov eax, dword [ebp - 0x1c]
call fcn.0073e404
call fcn.00769618
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
or ecx, 0xffffffff
mov eax, 0x77df14
call fcn.004286c4
mov eax, dword [ebp - 0x20]
call fcn.0073e404
push 0x7d0
call sub.kernel32.dll_Sleep_2
mov eax, dword [0x79c178]
mov eax, dword [eax]
call fcn.005c5be8
call fcn.00769688
test al, al
jne 0x77de18
mov eax, dword [0x79c178]
mov eax, dword [eax]
mov eax, dword [eax + 0x178]
call fcn.007696f8
test al, al
jne 0x77de18
mov eax, dword [0x768960]
call fcn.00768e88
test al, al
je 0x77dd59
mov eax, dword [0x79c178]
mov eax, dword [eax]
call fcn.005c5be8
mov eax, dword [0x73ddac]
call fcn.0073ea70
lea edx, [ebp - 0x24]
mov eax, dword [0x768960]
call fcn.00769358
mov edx, dword [ebp - 0x24]
mov eax, 0x7a42b8
call fcn.0040a370
lea edx, [ebp - 0x28]
mov eax, dword [0x73ddac]
call fcn.007444dc
mov edx, dword [ebp - 0x28]
mov eax, 0x7a42bc
call fcn.0040a370
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [0x7a42b8]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x38], 0x11
mov eax, dword [0x7a42bc]
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x30], 0x11
lea edx, [ebp - 0x3c]
mov ecx, 1
mov eax, 0x77df58
call fcn.004286c4
mov eax, dword [ebp - 0x2c]
call fcn.0073e404
lea eax, [ebp - 0x14]
mov edx, dword [0x7a42b8]
call fcn.0040a3b8
lea eax, [ebp - 0x18]
mov edx, dword [0x7a42bc]
call fcn.0040a3b8
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x18]
jne 0x77dc3e
mov al, 1
jmp 0x77dc5e
cmp dword [ebp - 0x14], 0
je 0x77dc4a
cmp dword [ebp - 0x18], 0
jne 0x77dc4e
xor eax, eax
jmp 0x77dc5e
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
call fcn.00425990
test eax, eax
sete al
test al, al
jne 0x77dd59
lea eax, [ebp - 0x40]
push eax
lea edx, [ebp - 0x1c]
or ecx, 0xffffffff
mov eax, 0x77e028
call fcn.004286c4
mov eax, dword [ebp - 0x40]
call fcn.0073e404
mov ecx, dword [0x7a42bc]
mov edx, dword [0x7a42b8]
mov eax, dword [0x73ddac]
call fcn.00744a8c
test al, al
je 0x77dd38
lea eax, [ebp - 0x44]
push eax
mov eax, dword [0x7a42bc]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 0x48], 0x11
lea edx, [ebp - 0x4c]
xor ecx, ecx
mov eax, 0x77e0ac
call fcn.004286c4
mov eax, dword [ebp - 0x44]
call fcn.0073e404
push 5
lea edx, [ebp - 0x50]
mov eax, dword [0x7a42bc]
call fcn.00427954
mov eax, dword [ebp - 0x50]
call fcn.0040aec8
push eax
push 0x77e16c
mov eax, dword [0x7a42bc]
call fcn.0040aec8
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteW
call sub.kernel32.dll_GetLastError_2
mov ebx, eax
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x3c], ebx
mov byte [ebp - 0x38], 0
lea edx, [ebp - 0x58]
mov eax, ebx
call fcn.0042be2c
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x30], 0x11
lea edx, [ebp - 0x3c]
mov ecx, 1
mov eax, 0x77e190
call fcn.004286c4
mov eax, dword [ebp - 0x54]
call fcn.0073e404
lea eax, [ebp - 0x5c]
push eax
lea edx, [ebp - 0x1c]
or ecx, 0xffffffff
mov eax, 0x77e218
call fcn.004286c4
mov eax, dword [ebp - 0x5c]
call fcn.0073e404
jmp 0x77de4c
mov eax, dword [0x79bf30]
mov edx, dword [0x711164]
call fcn.0040b900
mov ecx, eax
mov edx, dword [0x79fc50]
mov eax, dword [0x73ddac]
call fcn.00743e14
mov eax, dword [0x79c178]
mov eax, dword [eax]
mov edx, 0x77e244
call fcn.005c56fc
mov ecx, dword [0x79c310]
mov eax, dword [0x79c178]
mov eax, dword [eax]
mov edx, dword [0x768960]
call fcn.005c5d18
mov eax, dword [0x79bf30]
cmp byte [eax + 9], 0
je 0x77de0a
push 0
mov eax, dword [0x79c178]
mov eax, dword [eax]
mov eax, dword [eax + 0x178]
push eax
call sub.user32.dll_ShowWindow
mov eax, dword [0x79c178]
mov eax, dword [eax]
mov eax, dword [eax + 0x178]
mov edx, 0xffffffec
mov ecx, 0x80
push ecx
push edx
push eax
call sub.user32.dll_SetWindowLongW
mov eax, dword [0x79c178]
mov eax, dword [eax]
mov byte [eax + 0x5f], 0
mov eax, dword [0x79c178]
mov eax, dword [eax]
xor edx, edx
call fcn.005c7a20
mov eax, dword [0x79c310]
mov eax, dword [eax]
xor edx, edx
call fcn.005bc200
mov eax, dword [0x79c178]
mov eax, dword [eax]
call fcn.005c5e7c
jmp 0x77de23
mov eax, dword [0x79b36c]
mov dword [eax], 0x14
lea eax, [ebp - 0x60]
push eax
mov eax, dword [0x79b36c]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 0x48], 0
lea edx, [ebp - 0x4c]
xor ecx, ecx
mov eax, 0x77e278
call fcn.004286c4
mov eax, dword [ebp - 0x60]
call fcn.0073e404
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x77de88
lea eax, [ebp - 0x60]
mov edx, 5
call fcn.00409ff0
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.00409ff0
lea eax, [ebp - 0x2c]
mov edx, 7
call fcn.00409ff0
ret