Function at 0x450860
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5037d1
mov eax, dword fs:[0]
push eax
sub esp, 0x830
mov eax, dword [0x54c154]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov ecx, dword [ebx + 0x60]
mov esi, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
test ecx, ecx
je 0x450917
cmp eax, ecx
jne 0x450917
mov ecx, dword [ebx + 0x5c]
add ecx, 0x14
mov eax, dword [ecx]
call dword [eax]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x4508c9
mov ecx, dword [ebx + 0x5c]
add ecx, 0x14
push 9
mov eax, dword [ecx]
call dword [eax]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [ebx + 0x5c]
push 0x43
push 0
add ecx, 0x14
push 0
push 0
push 0
mov eax, dword [ecx]
push 0xffffffffffffffff
call dword [eax]
mov esi, dword [sym.imp.USER32.dll_SetWindowPos]
push eax
call esi
mov ecx, dword [ebx + 0x5c]
add ecx, 0x14
mov eax, dword [ecx]
call dword [eax]
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, dword [ebx + 0x5c]
push 0x43
push 0
add ecx, 0x14
push 0
push 0
push 0
mov eax, dword [ecx]
push 0xfffffffffffffffe
call dword [eax]
push eax
call esi
jmp 0x450b48
cmp eax, 0x465
jne 0x450a05
push str.oobe_set_password_controller::process_message
push str.WM_SHOW_ERROR
lea ecx, [ebp - 0x424]
call fcn.0040a4d0
mov dword [ebp - 4], 0
mov edi, dword [ebx + 0x5c]
test edi, edi
je 0x4509f0
mov edi, dword [edi + 0x464]
cmp byte [edi + 8], 0
je 0x450974
mov esi, dword [edi + 4]
mov byte [edi + 8], 0
call fcn.004164c0
push str.none
push str.display
push esi
mov eax, dword [eax + 0xd0]
call eax
cmp byte [edi + 0x10], 1
je 0x450999
mov esi, dword [edi + 0xc]
mov byte [edi + 0x10], 1
call fcn.004164c0
push str.block
push str.display
push esi
mov eax, dword [eax + 0xd0]
call eax
cmp byte [edi + 0x18], 0
je 0x4509be
mov esi, dword [edi + 0x14]
mov byte [edi + 0x18], 0
call fcn.004164c0
push str.none
push str.display
push esi
mov eax, dword [eax + 0xd0]
call eax
cmp byte [edi + 0x20], 1
je 0x4509e3
mov esi, dword [edi + 0x1c]
mov byte [edi + 0x20], 1
call fcn.004164c0
push str.block
push str.display
push esi
mov eax, dword [eax + 0xd0]
call eax
mov ecx, dword [ebx + 0x5c]
add ecx, 0x14
push 5
mov eax, dword [ecx]
call dword [eax + 0x10]
lea ecx, [ebp - 0x424]
call fcn.0040a5f0
mov eax, 1
jmp 0x450b4a
cmp eax, 0x467
jne 0x450b38
push str.oobe_set_password_controller::process_message
push str.WM_NAVIGATE_OOBE_URL
lea ecx, [ebp - 0x838]
call fcn.0040a4d0
push str.oobe_set_password_controller::process_message
mov edx, 0x10
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xb8]
call fcn.0040a850
add esp, 4
mov edi, eax
mov byte [ebp - 4], 2
mov al, byte [edi + 0x48]
test al, al
je 0x450a70
push str.url:
push edi
call fcn.004110a0
mov al, byte [edi + 0x48]
add esp, 8
test al, al
je 0x450a70
push esi
push edi
call fcn.004110a0
add esp, 8
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 1
call fcn.0040a6f0
push 1
push str.open
push 0
xor edx, edx
mov ecx, esi
call fcn.00409a00
add esp, 0xc
test al, al
jne 0x450aeb
push str.oobe_set_password_controller::process_message
mov edx, 0x10
lea ecx, [ebp - 0xb8]
call fcn.0040a850
add esp, 4
mov byte [ebp - 4], 3
cmp byte [eax + 0x48], 0
je 0x450ac8
push 0x529348
push eax
call fcn.004110a0
add esp, 8
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 1
call fcn.0040a6f0
push 1
push 0
push 0
push esi
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push esi
call fcn.004da815
sub esp, 0x24
lea eax, [ebx - 4]
mov edx, esp
lea ecx, [ebx + 0xcc]
mov dword [edx], vtable.std::_Func_impl_no_alloc_class__lambda_e4730d45606933b3919ba879f198a60e___void___.0
mov dword [edx + 4], eax
mov dword [edx + 0x24], edx
call fcn.00408490
mov ecx, dword [ebx + 0x5c]
test ecx, ecx
je 0x450b26
mov eax, dword [ecx + 0x14]
add ecx, 0x14
push 0
push 0
push 0x10
call dword [eax + 0x14]
lea ecx, [ebp - 0x838]
call fcn.0040a5f0
mov eax, 1
jmp 0x450b4a
cmp eax, 0x104
jne 0x450b48
cmp esi, 0x73
je 0x4509fb
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a44cd
mov esp, ebp
pop ebp
ret 0xc