Function at 0x450c04
Capabilities:
Create process on windows
Self delete

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x1b
push 0
push 0
dec ecx
jne 0x450c0c
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x4517fe
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 8]
mov ecx, 0x451814
mov edx, dword [0x455c40]
call fcn.0040429c
mov ecx, dword [ebp - 8]
mov dl, 1
mov eax, dword [0x425e54]
call fcn.00425f04
mov dword [0x455c28], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x45182c
mov edx, 0x451838
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0xc]
mov eax, dword [0x455c20]
call fcn.0042eaf8
lea edx, [ebp - 0x10]
mov eax, dword [0x455c20]
call fcn.0042eac8
mov edx, dword [ebp - 0x10]
mov eax, dword [0x454050]
mov eax, dword [eax]
call fcn.0044dae8
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x45184c
mov edx, 0x451864
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x14]
mov eax, 0x455c38
call fcn.00403fe4
mov eax, dword [0x455c38]
call fcn.0044fab8
test al, al
je 0x450d47
push 0x34
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x45182c
mov edx, 0x451838
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x18]
call fcn.00404450
push eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x451874
mov edx, 0x451838
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
call fcn.00450b8c
mov eax, dword [ebp - 0x1c]
call fcn.00404450
push eax
push 0
call sub.user32.dll_MessageBoxA
cmp eax, 6
jne 0x450d33
mov eax, dword [0x455c38]
call fcn.0044f948
call fcn.0044facc
jmp 0x450d47
mov eax, dword [0x455c28]
call fcn.00403258
mov eax, dword [0x455c20]
call fcn.0044a848
mov dl, 1
mov eax, dword [0x411ee0]
call fcn.00403228
mov dword [0x455c30], eax
mov dl, 1
mov eax, dword [0x411ee0]
call fcn.00403228
mov dword [0x455c34], eax
mov ecx, dword [0x455c30]
mov edx, 0x451880
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx + 0x40]
mov eax, dword [0x455c30]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x450dfd
mov dword [0x455c24], eax
xor eax, eax
push ebp
push 0x450de4
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x28]
mov edx, dword [0x455c24]
mov eax, dword [0x455c30]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x28]
mov edx, 0x451880
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x24]
call fcn.0044fd90
push 0x32
call sub.KERNEL32.DLL_Sleep
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x450dee
dec dword [0x455c24]
cmp dword [0x455c24], 0xffffffff
jne 0x450d93
mov ecx, dword [0x455c30]
mov edx, 0x45189c
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx + 0x40]
mov eax, dword [0x455c30]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x450e91
mov dword [0x455c24], eax
xor eax, eax
push ebp
push 0x450e78
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x30]
mov edx, dword [0x455c24]
mov eax, dword [0x455c30]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x30]
mov edx, 0x45189c
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x2c]
call fcn.00450090
push 0x32
call sub.KERNEL32.DLL_Sleep
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x450e82
dec dword [0x455c24]
cmp dword [0x455c24], 0xffffffff
jne 0x450e27
mov ecx, dword [0x455c30]
mov edx, 0x4518ac
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx + 0x40]
mov eax, dword [0x455c30]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x450f25
mov dword [0x455c24], eax
xor eax, eax
push ebp
push 0x450f0c
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x38]
mov edx, dword [0x455c24]
mov eax, dword [0x455c30]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x38]
mov edx, 0x4518ac
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x34]
call fcn.004500f8
push 0x32
call sub.KERNEL32.DLL_Sleep
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x450f16
dec dword [0x455c24]
cmp dword [0x455c24], 0xffffffff
jne 0x450ebb
mov ecx, dword [0x455c30]
mov edx, 0x4518bc
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx + 0x40]
mov eax, dword [0x455c30]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x450fb2
mov dword [0x455c24], eax
xor eax, eax
push ebp
push 0x450f99
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x40]
mov edx, dword [0x455c24]
mov eax, dword [0x455c30]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x40]
mov edx, 0x4518bc
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x3c]
call fcn.004501cc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x450fa3
dec dword [0x455c24]
cmp dword [0x455c24], 0xffffffff
jne 0x450f4f
mov ecx, dword [0x455c30]
mov edx, 0x4518d0
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx + 0x40]
mov eax, dword [0x455c30]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x45103f
mov dword [0x455c24], eax
xor eax, eax
push ebp
push 0x451026
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x48]
mov edx, dword [0x455c24]
mov eax, dword [0x455c30]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x48]
mov edx, 0x4518d0
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x44]
call fcn.004502f0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x451030
dec dword [0x455c24]
cmp dword [0x455c24], 0xffffffff
jne 0x450fdc
mov ecx, dword [0x455c30]
mov edx, 0x4518e8
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx + 0x40]
mov eax, dword [0x455c30]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x4510cc
mov dword [0x455c24], eax
xor eax, eax
push ebp
push 0x4510b3
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x50]
mov edx, dword [0x455c24]
mov eax, dword [0x455c30]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x50]
mov edx, 0x4518e8
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x4c]
call fcn.004505ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4510bd
dec dword [0x455c24]
cmp dword [0x455c24], 0xffffffff
jne 0x451069
mov ecx, dword [0x455c30]
mov edx, 0x451900
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx + 0x40]
mov eax, dword [0x455c30]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x451159
mov dword [0x455c24], eax
xor eax, eax
push ebp
push 0x451140
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x58]
mov edx, dword [0x455c24]
mov eax, dword [0x455c30]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x58]
mov edx, 0x451900
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x54]
call fcn.00450834
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45114a
dec dword [0x455c24]
cmp dword [0x455c24], 0xffffffff
jne 0x4510f6
mov ecx, dword [0x455c30]
mov edx, 0x451914
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx + 0x40]
mov eax, dword [0x455c30]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x451284
inc eax
mov dword [ebp - 4], eax
mov dword [0x455c24], 0
push 0
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x60]
mov edx, dword [0x455c24]
mov eax, dword [0x455c30]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x60]
mov edx, 0x451914
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x5c]
call fcn.00408334
test al, al
je 0x451232
xor eax, eax
push ebp
push 0x451228
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x6c]
mov edx, dword [0x455c24]
mov eax, dword [0x455c30]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x6c]
mov edx, 0x451914
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x68]
call fcn.00404450
mov edx, eax
lea eax, [ebp - 0x64]
call fcn.00404188
mov eax, dword [ebp - 0x64]
call fcn.00408484
push 5
call sub.KERNEL32.DLL_Sleep
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x451232
mov eax, dword [0x455c30]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
mov dword [ebp - 0x70], eax
fild dword [ebp - 0x70]
imul eax, dword [0x455c24], 0x64
mov dword [ebp - 0x74], eax
fild dword [ebp - 0x74]
fdivrp st(1)
call fcn.00402a90
mov edx, eax
mov eax, dword [0x455c20]
mov eax, dword [eax + 0x2f8]
call fcn.00428058
mov eax, dword [0x454050]
mov eax, dword [eax]
call fcn.0044dddc
inc dword [0x455c24]
dec dword [ebp - 4]
jne 0x45118f
mov ecx, dword [0x455c30]
mov edx, 0x451924
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx + 0x40]
mov eax, dword [0x455c30]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x451366
mov dword [0x455c24], eax
push 0
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x7c]
mov edx, dword [0x455c24]
mov eax, dword [0x455c30]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x7c]
mov edx, 0x451924
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x78]
call fcn.00408344
test al, al
je 0x451353
xor eax, eax
push ebp
push 0x451349
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x84]
mov edx, dword [0x455c24]
mov eax, dword [0x455c30]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x84]
mov edx, 0x451924
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x80]
call fcn.00404450
call fcn.00402a60
call fcn.00402834
push 5
call sub.KERNEL32.DLL_Sleep
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x451353
dec dword [0x455c24]
cmp dword [0x455c24], 0xffffffff
jne 0x4512b2
mov ecx, dword [0x455c30]
mov edx, 0x451934
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx + 0x40]
mov eax, dword [0x455c30]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x451406
mov dword [0x455c24], eax
xor eax, eax
push ebp
push 0x4513ed
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x8c]
mov edx, dword [0x455c24]
mov eax, dword [0x455c30]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x8c]
mov edx, 0x451934
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x88]
call fcn.0044fd90
push 0x32
call sub.KERNEL32.DLL_Sleep
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4513f7
dec dword [0x455c24]
cmp dword [0x455c24], 0xffffffff
jne 0x451390
push 0
mov ecx, 0x451950
mov edx, 0x451864
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx + 0x10]
test al, al
je 0x4514c8
push 0
lea eax, [ebp - 0x90]
push eax
mov ecx, 0x451968
mov edx, 0x451864
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x90]
call fcn.00408344
test al, al
je 0x451476
push 0
lea eax, [ebp - 0x94]
push eax
mov ecx, 0x451968
mov edx, 0x451864
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x94]
call fcn.004509c0
push 0
lea eax, [ebp - 0x98]
push eax
mov ecx, 0x45197c
mov edx, 0x451864
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x98]
call fcn.00408344
test al, al
je 0x4514c8
push 0
lea eax, [ebp - 0x9c]
push eax
mov ecx, 0x45197c
mov edx, 0x451864
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0x9c]
call fcn.004509c0
mov eax, dword [0x455c20]
mov eax, dword [eax + 0x2f8]
mov edx, 0x64
call fcn.00428058
push 0
mov ecx, 0x451994
mov edx, 0x451864
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx + 0x10]
test al, al
je 0x451581
push 0x24
push 0
lea eax, [ebp - 0xa0]
push eax
mov ecx, 0x45182c
mov edx, 0x451838
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0xa0]
call fcn.00404450
push eax
push 0
lea eax, [ebp - 0xa8]
push eax
mov ecx, 0x4519b0
mov edx, 0x451838
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0xa8]
lea edx, [ebp - 0xa4]
call fcn.00450b8c
mov eax, dword [ebp - 0xa4]
call fcn.00404450
push eax
mov eax, dword [0x455c20]
call fcn.00435224
push eax
call sub.user32.dll_MessageBoxA
cmp eax, 6
jne 0x451710
call fcn.0044fae0
jmp 0x451710
push 0
lea eax, [ebp - 0xac]
push eax
mov ecx, 0x4519bc
mov edx, 0x451864
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
cmp dword [ebp - 0xac], 0
jne 0x45161e
push 0x40
push 0
lea eax, [ebp - 0xb0]
push eax
mov ecx, 0x45182c
mov edx, 0x451838
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0xb0]
call fcn.00404450
push eax
push 0
lea eax, [ebp - 0xb8]
push eax
mov ecx, 0x4519d4
mov edx, 0x451838
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 0xb4]
call fcn.00450b8c
mov eax, dword [ebp - 0xb4]
call fcn.00404450
push eax
mov eax, dword [0x455c20]
call fcn.00435224
push eax
call sub.user32.dll_MessageBoxA
jmp 0x451710
push 0x124
push 0
lea eax, [ebp - 0xbc]
push eax
mov ecx, 0x45182c
mov edx, 0x451838
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0xbc]
call fcn.00404450
push eax
push 0
lea eax, [ebp - 0xc8]
push eax
mov ecx, 0x4519d4
mov edx, 0x451838
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
push dword [ebp - 0xc8]
push 0x4519e0
push 0
lea eax, [ebp - 0xcc]
push eax
mov ecx, 0x4519f0
mov edx, 0x451838
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
push dword [ebp - 0xcc]
lea eax, [ebp - 0xc4]
mov edx, 3
call fcn.00404310
mov eax, dword [ebp - 0xc4]
lea edx, [ebp - 0xc0]
call fcn.00450b8c
mov eax, dword [ebp - 0xc0]
call fcn.00404450
push eax
mov eax, dword [0x455c20]
call fcn.00435224
push eax
call sub.user32.dll_MessageBoxA
cmp eax, 6
jne 0x451710
push 1
push 0
push 0
push 0
lea eax, [ebp - 0xd0]
push eax
mov ecx, 0x4519bc
mov edx, 0x451864
mov eax, dword [0x455c28]
mov ebx, dword [eax]
call dword [ebx]
mov eax, dword [ebp - 0xd0]
call fcn.00404450
push eax
push 0x4519f4
push 0
call sub.shell32.dll_ShellExecuteA
mov eax, dword [0x455c28]
call fcn.00403258
mov eax, dword [0x455c30]
mov edx, dword [eax]
call dword [edx + 0x44]
mov edx, 0x451a04
mov eax, dword [0x455c30]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x451a24
mov eax, dword [0x455c30]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, 0x451a44
mov eax, dword [0x455c30]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea eax, [ebp - 0xd4]
mov ecx, 0x451a64
mov edx, dword [0x455c40]
call fcn.0040429c
mov edx, dword [ebp - 0xd4]
mov eax, dword [0x455c30]
mov ecx, dword [eax]
call dword [ecx + 0x74]
mov eax, dword [0x455c30]
call fcn.00403258
mov eax, dword [0x455c34]
call fcn.00403258
push 0
lea eax, [ebp - 0xd8]
mov ecx, 0x451a64
mov edx, dword [0x455c40]
call fcn.0040429c
mov eax, dword [ebp - 0xd8]
call fcn.00404450
push eax
call sub.KERNEL32.DLL_WinExec
mov eax, dword [0x455c20]
call fcn.0044a848
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x451805
lea eax, [ebp - 0xd8]
mov edx, 0x19
call fcn.00403fb4
lea eax, [ebp - 0x6c]
mov edx, 0x17
call fcn.00403fb4
lea eax, [ebp - 0x10]
call fcn.00403f90
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00403fb4
ret