Function at 0x45bf20
Capabilities:
Create process on windows
Create process suspended
Query environment variable
Set environment variable
Terminate process

Disassembly:
push ebp
mov ebp, esp
lea edx, [ebp - 0xc]
push edi
push esi
push ebx
sub esp, 0x384
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2b8], esp
mov dword [ebp - 0x2c8], 0x4549e0
mov dword [ebp - 0x2f0], eax
lea eax, [ebp - 0x2e0]
push eax
mov dword [ebp - 0x2c4], 0x4632ff
mov dword [ebp - 0x2c0], edx
mov dword [ebp - 0x2bc], 0x45cd06
call fcn.004589f0
mov dword [ebp - 0x1c], 0x467c9c
mov eax, dword [ebp - 0x2f0]
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x3c], 0x467c9c
mov byte [ebp - 0x304], 0
add eax, 0x4c
mov dword [esp], eax
push 0x469aaa
push ecx
mov dword [ebp - 0x2dc], 0x1f
call fcn.00462d30
pop eax
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x2dc], 0x1e
pop edx
lea edx, [ebp - 0x6c]
push eax
push str.127.0.0.1
push edx
call fcn.00462d30
pop edi
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x2dc], 0x1d
pop eax
lea eax, [ebp - 0x5c]
push ecx
push eax
call fcn.0045e860
pop ebx
pop esi
push 0x469ac2
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea edx, [ebp - 0x5c]
push 0x469ac2
push edx
mov dword [ebp - 0x2dc], 0x1c
call fcn.0045e2c0
jmp 0x45c067
mov dword [ebp - 0x2dc], 0x1e
add esp, 0xc
lea edx, [ebp - 0x6c]
push edx
call fcn.0045ea00
mov dword [ebp - 0x2dc], 0x1a
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x7c]
mov dword [esp], eax
push 0x469ac8
push ecx
call fcn.00462d30
pop ecx
lea eax, [ebp - 0x7c]
mov dword [ebp - 0x2dc], 0x19
lea edx, [ebp - 0x6c]
pop ebx
push eax
push edx
call fcn.0045e860
pop eax
pop edx
push 0x469ad6
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea ecx, [ebp - 0x6c]
push 0x469ad6
push ecx
mov dword [ebp - 0x2dc], 0x18
call fcn.0045e2c0
jmp 0x45c134
mov dword [ebp - 0x2dc], 0x16
add esp, 0xc
lea eax, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x1c]
push edx
call fcn.0045e470
jmp 0x45c158
pop eax
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x2dc], 0x19
pop edx
push eax
call fcn.0045ea00
mov dword [ebp - 0x2dc], 0x1a
lea eax, [ebp - 0x7c]
mov dword [esp], eax
call fcn.0045ea00
pop eax
mov ecx, dword [ebp - 0x2f0]
mov eax, dword [ecx + 0x40]
cmp eax, 1
je 0x45c1b8
jg 0x45c199
test eax, eax
je 0x45c1a0
jmp 0x45c1f8
cmp eax, 3
je 0x45c1d0
jmp 0x45c1f8
push str._multiwindow
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea eax, [ebp - 0x1c]
push str._multiwindow
push eax
jmp 0x45c1e6
push str._fullscreen
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea edx, [ebp - 0x1c]
push str._fullscreen
push edx
jmp 0x45c1e6
push str._nodecoration
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea ecx, [ebp - 0x1c]
push str._nodecoration
push ecx
mov dword [ebp - 0x2dc], 0x1a
call fcn.0045e2c0
add esp, 0xc
mov eax, dword [ebp - 0x2f0]
cmp dword [eax + 0x44], 2
jne 0x45c2bc
cmp byte [eax + 0x76], 0
je 0x45c233
push str._broadcast
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea edx, [ebp - 0x1c]
push str._broadcast
push edx
mov dword [ebp - 0x2dc], 0x1a
jmp 0x45c2b4
mov ecx, dword [ebp - 0x2f0]
cmp byte [ecx + 0x77], 0
je 0x45c257
push str._indirect
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea eax, [ebp - 0x1c]
push str._indirect
push eax
jmp 0x45c26d
push str._query
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea edx, [ebp - 0x1c]
push str._query
push edx
mov dword [ebp - 0x2dc], 0x1a
call fcn.0045e2c0
mov dword [ebp - 0x2dc], 0x1a
mov eax, dword [ebp - 0x2f0]
add esp, 0xc
lea ecx, [ebp - 0x1c]
add eax, 0x78
push eax
push ecx
call fcn.0045e330
pop esi
pop edi
push 0x469ad6
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea eax, [ebp - 0x1c]
push 0x469ad6
push eax
call fcn.0045e2c0
add esp, 0xc
mov edx, dword [ebp - 0x2f0]
cmp byte [edx + 0x7c], 0
je 0x45c2f0
push str._clipboard
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea ecx, [ebp - 0x1c]
push str._clipboard
push ecx
mov dword [ebp - 0x2dc], 0x1a
call fcn.0045e2c0
add esp, 0xc
mov eax, dword [ebp - 0x2f0]
cmp byte [eax + 0x7d], 0
je 0x45c324
push str._ac
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea edx, [ebp - 0x1c]
push str._ac
push edx
mov dword [ebp - 0x2dc], 0x1a
call fcn.0045e2c0
add esp, 0xc
mov edx, dword [ebp - 0x2f0]
mov ecx, dword [ebp - 0x2f0]
mov eax, dword [edx + 0x80]
sub ecx, 0xffffff80
mov dword [ebp - 0x318], ecx
cmp dword [eax - 0xc], 0
je 0x45c39c
push str._fp_tcp_
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea ecx, [ebp - 0x1c]
push str._fp_tcp_
push ecx
mov dword [ebp - 0x2dc], 0x1a
call fcn.0045e2c0
add esp, 0xc
lea eax, [ebp - 0x1c]
push dword [ebp - 0x318]
push eax
call fcn.0045e330
pop ecx
pop ebx
push str.:7100
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea edx, [ebp - 0x1c]
push str.:7100
push edx
call fcn.0045e2c0
add esp, 0xc
mov ecx, dword [ebp - 0x2f0]
mov edx, dword [ebp - 0x2f0]
mov eax, dword [ecx + 0x84]
add edx, 0x84
cmp dword [eax - 0xc], 0
je 0x45c3ee
push edx
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x2dc], 0x1a
call fcn.0045e330
pop eax
pop edx
push 0x469ad6
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea edx, [ebp - 0x1c]
push 0x469ad6
push edx
call fcn.0045e2c0
add esp, 0xc
mov ecx, dword [ebp - 0x2f0]
cmp dword [ecx + 0x44], 1
jne 0x45c821
cmp dword [ecx + 0x48], 1
je 0x45c7b7
mov dword [ebp - 0x2dc], 0x1a
mov eax, ecx
add eax, 0x68
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.0045e860
pop edi
mov ecx, dword [ebp - 0x2f0]
mov edx, dword [ebp - 0x2f0]
pop eax
mov eax, dword [ecx + 0x6c]
add edx, 0x6c
cmp dword [eax - 0xc], 0
je 0x45c586
push edx
lea eax, [ebp - 0x8c]
push eax
mov dword [ebp - 0x2dc], 0x15
call fcn.0045e860
pop ebx
pop esi
push 0x469bae
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea edx, [ebp - 0x8c]
push 0x469bae
push edx
mov dword [ebp - 0x2dc], 0x14
call fcn.0045e2c0
jmp 0x45c4e2
mov dword [ebp - 0x2dc], 0x12
mov eax, dword [ebp - 0x2f0]
add esp, 0xc
lea edx, [ebp - 0x8c]
add eax, 0x68
push eax
push edx
lea edx, [ebp - 0x6c]
push edx
call fcn.00462e30
pop ebx
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x2dc], 0x11
lea ecx, [ebp - 0x7c]
pop esi
push eax
push ecx
call fcn.0045e470
jmp 0x45c53a
pop eax
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x2dc], 0x12
pop edx
push eax
call fcn.0045ea00
jmp 0x45c56d
mov dword [ebp - 0x2dc], 0x15
lea eax, [ebp - 0x8c]
mov dword [esp], eax
call fcn.0045ea00
pop eax
mov eax, dword [ebp - 0x2f0]
mov eax, dword [eax + 0x50]
cmp dword [eax - 0xc], 0
mov dword [ebp - 0x324], eax
je 0x45c5c0
push eax
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea edx, [ebp - 0x3c]
push dword [ebp - 0x324]
mov dword [ebp - 0x2dc], 0x15
push edx
call fcn.0045e3b0
add esp, 0xc
mov ecx, dword [ebp - 0x2f0]
cmp dword [ecx + 0x48], 2
jne 0x45c66b
push str.plink__ssh__X
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea eax, [ebp - 0x3c]
push str.plink__ssh__X
push eax
mov dword [ebp - 0x2dc], 0x15
call fcn.0045e2c0
mov edx, dword [ebp - 0x2f0]
add esp, 0xc
mov eax, dword [edx + 0x70]
cmp dword [eax - 0xc], 0
je 0x45c6b6
push str._pw
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea ecx, [ebp - 0x3c]
push str._pw
push ecx
call fcn.0045e2c0
mov eax, dword [ebp - 0x2f0]
add esp, 0xc
mov eax, dword [eax + 0x70]
push eax
mov dword [ebp - 0x328], eax
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea edx, [ebp - 0x3c]
push dword [ebp - 0x328]
push edx
call fcn.0045e2c0
add esp, 0xc
push 0x469ad6
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea ecx, [ebp - 0x3c]
push 0x469ad6
push ecx
jmp 0x45c6ae
push 0
push 0
push str.SSH_AGENT_PID
mov dword [ebp - 0x2dc], 0x15
call sub.KERNEL32.dll_GetEnvironmentVariableA
test eax, eax
jne 0x45c68e
mov byte [ebp - 0x304], 1
push str.ssh__Y
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea eax, [ebp - 0x3c]
push str.ssh__Y
push eax
mov dword [ebp - 0x2dc], 0x15
call fcn.0045e2c0
add esp, 0xc
mov edx, dword [ebp - 0x2f0]
cmp byte [edx + 0x64], 0
je 0x45c6ea
push 0x469bf8
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea ecx, [ebp - 0x3c]
push 0x469bf8
push ecx
mov dword [ebp - 0x2dc], 0x15
call fcn.0045e2c0
add esp, 0xc
mov ecx, dword [ebp - 0x2f0]
mov edx, dword [ebp - 0x2f0]
mov eax, dword [ecx + 0x88]
add edx, 0x88
cmp dword [eax - 0xc], 0
je 0x45c73c
push edx
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x2dc], 0x15
call fcn.0045e330
pop esi
pop edi
push 0x469ad6
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea edx, [ebp - 0x3c]
push 0x469ad6
push edx
call fcn.0045e2c0
add esp, 0xc
mov ecx, dword [ebp - 0x7c]
push ecx
mov dword [ebp - 0x32c], ecx
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea eax, [ebp - 0x3c]
push dword [ebp - 0x32c]
mov dword [ebp - 0x2dc], 0x15
push eax
call fcn.0045e2c0
add esp, 0xc
push 0x469ad6
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea edx, [ebp - 0x3c]
push 0x469ad6
push edx
call fcn.0045e2c0
jmp 0x45c7a0
mov dword [ebp - 0x2dc], 0x1a
add esp, 0xc
lea eax, [ebp - 0x7c]
push eax
call fcn.0045ea00
pop ecx
mov ecx, dword [ebp - 0x2f0]
mov ecx, dword [ecx + 0x54]
push ecx
mov dword [ebp - 0x330], ecx
call sub.msvcrt.dll_wcslen
mov dword [esp], eax
lea eax, [ebp - 0x3c]
push dword [ebp - 0x330]
mov dword [ebp - 0x2dc], 0x1a
push eax
call fcn.0045e2c0
mov edx, dword [ebp - 0x2f0]
add esp, 0xc
push str.testplink
push dword [edx + 0x54]
call sub.msvcrt.dll_wcscmp
pop edi
test eax, eax
pop edx
jne 0x45c821
mov ecx, dword [ebp - 0x2f0]
cmp dword [ecx + 0x48], 2
jne 0x45c821
push 0x40
push str.XLaunch_Test_plink_command_line
push dword [ebp - 0x3c]
push 0
call sub.USER32.dll_MessageBoxW
push 0x44
lea eax, [ebp - 0xdc]
lea edi, [ebp - 0x13c]
push 0
push eax
mov dword [ebp - 0x334], 0
call sub.msvcrt.dll_memset
cld
mov eax, dword [ebp - 0x334]
mov ecx, 4
mov dword [ebp - 0xdc], 0x44
rep stosd dword es:[edi], eax
push 0x44
lea eax, [ebp - 0x12c]
lea edi, [ebp - 0x14c]
push 0
push eax
call sub.msvcrt.dll_memset
cld
mov eax, dword [ebp - 0x334]
mov ecx, 4
mov dword [ebp - 0x12c], 0x44
add esp, 0x18
lea edx, [ebp - 0xdc]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x2dc], 0x1a
lea eax, [ebp - 0x13c]
push eax
push edx
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x1c]
push 0
call sub.KERNEL32.dll_CreateProcessW
test eax, eax
jne 0x45ce56
mov dword [ebp - 0x2dc], 0x10
lea eax, [ebp - 0x16c]
lea ecx, [ebp - 0x15c]
push eax
push str.CreateProcess_failed
push ecx
call fcn.00461760
mov dword [ebp - 0x2dc], 0xf
add esp, 0xc
call fcn.00459e60
push 0xc
mov dword [ebp - 0x338], eax
call fcn.00457350
mov dword [ebp - 0x33c], eax
lea edx, [ebp - 0x18c]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x2dc], 0xe
mov dword [esp], eax
mov dword [ebp - 0x344], eax
push edx
call fcn.004063c6
mov dword [ebp - 0x2dc], 0xd
lea ecx, [ebp - 0x15c]
lea eax, [ebp - 0x19c]
mov dword [esp], ecx
push eax
call fcn.00461810
pop ebx
mov edi, 0x4699d8
or ecx, 0xffffffff
cld
xor eax, eax
lea edx, [ebp - 0x19c]
pop esi
repne scasb al, byte es:[edi]
mov dword [ebp - 0x2dc], 0xc
not ecx
dec ecx
push ecx
push 0x4699d8
push edx
call fcn.0045f850
jmp 0x45c9de
mov dword [ebp - 0x2dc], 0xa
add esp, 0xc
lea edx, [ebp - 0x18c]
push edx
lea eax, [ebp - 0x19c]
lea ecx, [ebp - 0x17c]
push eax
push ecx
call fcn.00462a80
pop ebx
lea eax, [ebp - 0x17c]
mov dword [ebp - 0x2dc], 9
pop esi
push eax
push dword [ebp - 0x340]
call fcn.004555b0
jmp 0x45ca85
pop ebx
mov eax, dword [ebp - 0x17c]
pop esi
lea edx, [eax - 0xc]
cmp edx, 0x467ca0
mov dword [ebp - 0x358], edx
je 0x45cb33
push 0xffffffffffffffff
sub eax, 4
push eax
mov dword [ebp - 0x2dc], 7
call fcn.004571f0
pop edx
test eax, eax
pop ecx
jg 0x45cb33
lea ecx, [ebp - 0x1ac]
push ecx
push dword [ebp - 0x358]
call fcn.0045f050
pop esi
pop edi
jmp 0x45cb33
mov eax, dword [ebp - 0x19c]
lea edx, [eax - 0xc]
cmp edx, 0x467ca0
mov dword [ebp - 0x364], edx
je 0x45cbdf
push 0xffffffffffffffff
sub eax, 4
push eax
mov dword [ebp - 0x2dc], 5
call fcn.004571f0
pop esi
test eax, eax
pop edi
jg 0x45cbdf
lea ecx, [ebp - 0x1ac]
push ecx
push dword [ebp - 0x364]
call fcn.0045f050
pop ecx
pop ebx
jmp 0x45cbdf
mov eax, dword [ebp - 0x18c]
lea edx, [eax - 0xc]
cmp edx, 0x467ca0
mov dword [ebp - 0x370], edx
je 0x45cc9e
push 0xffffffffffffffff
sub eax, 4
push eax
mov dword [ebp - 0x2dc], 3
call fcn.004571f0
pop edx
test eax, eax
pop ecx
jg 0x45cc9e
lea ecx, [ebp - 0x1ac]
push ecx
push dword [ebp - 0x370]
call fcn.0045f050
pop edi
pop eax
jmp 0x45cc9e
mov edx, dword [ebp - 0x340]
mov ecx, dword [ebp - 0x344]
mov eax, dword [ebp - 0x15c]
mov dword [edx], 0x4afa78
mov dword [edx + 8], ecx
lea edx, [eax - 0xc]
cmp edx, 0x467ca0
mov dword [ebp - 0x37c], edx
je 0x45ce37
push 0xffffffffffffffff
sub eax, 4
push eax
mov dword [ebp - 0x2dc], 1
call fcn.004571f0
pop esi
test eax, eax
pop edi
jg 0x45ce37
lea ecx, [ebp - 0x1ac]
push ecx
push dword [ebp - 0x37c]
call fcn.0045f050
pop ecx
pop ebx
jmp 0x45ce37
push 0x45a050
push 0x4af620
push dword [ebp - 0x33c]
mov dword [ebp - 0x2dc], 0x1a
call fcn.00457260
mov dword [ebp - 0x334], 1
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x3c]
cmp dword [eax - 0xc], 0
je 0x45d069
push dword [ebp - 0x5c]
mov dword [ebp - 0x2dc], 0x1a
push 0x469c6e
call sub.KERNEL32.dll_SetEnvironmentVariableW
mov dword [ebp - 0x384], 0
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x380], ecx
push dword [ebp - 0x380]
mov dword [ebp - 0x2dc], 0x1a
call fcn.004087f4
mov dword [esp], eax
call fcn.00410604
pop edx
test eax, eax
jne 0x45cee7
push 0x64
mov dword [ebp - 0x2dc], 0x1a
call sub.KERNEL32.dll_Sleep
inc dword [ebp - 0x384]
cmp dword [ebp - 0x384], 0x78
jl 0x45cea3
xor eax, eax
test eax, eax
jne 0x45cf7b
push pe_nt_image_headers32
lea eax, [ebp - 0x2ac]
push eax
push 0x1fb
push 0
mov dword [ebp - 0x2dc], 0x1a
call sub.KERNEL32.dll_GetModuleHandleA
push eax
call sub.USER32.dll_LoadStringW
push 0x30
lea edx, [ebp - 0x2ac]
push edx
push dword [ebp - 0x5c]
push 0
call sub.USER32.dll_MessageBoxW
dec dword [ebp - 0x334]
cmp dword [ebp - 0x334], 0xffffffff
je 0x45cf7b
mov ecx, dword [ebp - 0x334]
lea ecx, [ebp + ecx*4 - 0x2e8]
mov dword [ebp - 0x390], ecx
push 0xffffffffffffffff
mov eax, dword [ebp - 0x390]
push dword [eax]
mov dword [ebp - 0x2dc], 0x1a
call sub.KERNEL32.dll_TerminateProcess
dec dword [ebp - 0x334]
sub dword [ebp - 0x390], 4
cmp dword [ebp - 0x334], 0xffffffff
jne 0x45cf4c
movzx eax, byte [ebp - 0x304]
mov dword [ebp - 0x100], 1
mov dword [ebp - 0x2dc], 0x1a
and ax, 1
mov word [ebp - 0xfc], ax
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x12c]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x3c]
push 0
call sub.KERNEL32.dll_CreateProcessW
test eax, eax
jne 0x45d04f
push pe_nt_image_headers32
lea edx, [ebp - 0x2ac]
push edx
push 0x1fa
push 0
call sub.KERNEL32.dll_GetModuleHandleA
push eax
call sub.USER32.dll_LoadStringW
push 0x30
lea ecx, [ebp - 0x2ac]
push ecx
push dword [ebp - 0x3c]
push 0
call sub.USER32.dll_MessageBoxW
dec dword [ebp - 0x334]
cmp dword [ebp - 0x334], 0xffffffff
je 0x45d04f
mov eax, dword [ebp - 0x334]
lea eax, [ebp + eax*4 - 0x2e8]
mov dword [ebp - 0x38c], eax
push 0xffffffffffffffff
mov edx, dword [ebp - 0x38c]
push dword [edx]
mov dword [ebp - 0x2dc], 0x1a
call sub.KERNEL32.dll_TerminateProcess
dec dword [ebp - 0x334]
sub dword [ebp - 0x38c], 4
cmp dword [ebp - 0x334], 0xffffffff
jne 0x45d020
mov ecx, dword [ebp - 0x334]
mov eax, dword [ebp - 0x14c]
mov dword [ebp + ecx*4 - 0x2e8], eax
inc ecx
mov dword [ebp - 0x334], ecx
push 0xffffffffffffffff
lea eax, [ebp - 0x2e8]
push 0
push eax
push dword [ebp - 0x334]
mov dword [ebp - 0x2dc], 0x1a
call sub.KERNEL32.dll_WaitForMultipleObjects
lea eax, [ebp - 0x2ec]
push eax
push dword [ebp - 0x13c]
call sub.KERNEL32.dll_GetExitCodeProcess
mov dword [ebp - 0x388], 0
cmp dword [ebp - 0x2ec], 0x103
jne 0x45d11d
inc dword [ebp - 0x388]
cmp dword [ebp - 0x388], 0xa
jbe 0x45d0d9
push 0xffffffffffffffff
push dword [ebp - 0x13c]
mov dword [ebp - 0x2dc], 0x1a
call sub.KERNEL32.dll_TerminateProcess
jmp 0x45d0f5
push 0
push 0x407dee
push dword [ebp - 0x130]
mov dword [ebp - 0x2dc], 0x1a
call sub.USER32.dll_EnumThreadWindows
push 0x1f4
mov dword [ebp - 0x2dc], 0x1a
call sub.KERNEL32.dll_Sleep
lea eax, [ebp - 0x2ec]
push eax
push dword [ebp - 0x13c]
call sub.KERNEL32.dll_GetExitCodeProcess
jmp 0x45d0a5
push 0xffffffffffffffff
push dword [ebp - 0x14c]
mov dword [ebp - 0x2dc], 0x1a
call sub.KERNEL32.dll_TerminateProcess
push dword [ebp - 0x13c]
call sub.KERNEL32.dll_CloseHandle
push dword [ebp - 0x138]
call sub.KERNEL32.dll_CloseHandle
push dword [ebp - 0x14c]
call sub.KERNEL32.dll_CloseHandle
push dword [ebp - 0x148]
call sub.KERNEL32.dll_CloseHandle
jmp 0x45d178
mov dword [ebp - 0x2dc], 0x1e
lea eax, [ebp - 0x5c]
push eax
call fcn.0045ea00
jmp 0x45d1a3
mov dword [ebp - 0x2dc], 0x1f
lea eax, [ebp - 0x4c]
mov dword [esp], eax
call fcn.0045ea00
jmp 0x45d1d0
mov dword [ebp - 0x2dc], 0x20
lea eax, [ebp - 0x3c]
mov dword [esp], eax
call fcn.0045ea00
jmp 0x45d210
mov dword [ebp - 0x2dc], 0xffffffff
lea eax, [ebp - 0x1c]
mov dword [esp], eax
call fcn.0045ea00
lea eax, [ebp - 0x2e0]
mov dword [esp], eax
call fcn.00458ad0
pop eax
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret