Function at 0x45d1a8
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffed4
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x118], eax
mov dword [ebp - 4], eax
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], eax
xor eax, eax
push ebp
push 0x45d57c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x463ee8
xor ecx, ecx
mov edx, 0x28
call fcn.00403454
push 1
lea eax, [ebp - 0x114]
push eax
mov ecx, 0x45d58c
mov edx, 0x45d59c
mov eax, 0x45d5a8
call fcn.0045ce0c
lea edx, [ebp - 0x114]
lea eax, [ebp - 4]
call fcn.00404bac
push 1
lea eax, [ebp - 0x114]
push eax
mov ecx, 0x45d5ac
mov edx, 0x45d59c
mov eax, 0x45d5a8
call fcn.0045ce0c
lea edx, [ebp - 0x114]
lea eax, [ebp - 8]
call fcn.00404bac
push 1
lea eax, [ebp - 0x114]
push eax
mov ecx, 0x45d5b8
mov edx, 0x45d59c
mov eax, 0x45d5a8
call fcn.0045ce0c
lea edx, [ebp - 0x114]
lea eax, [ebp - 0xc]
call fcn.00404bac
push 1
lea eax, [ebp - 0x114]
push eax
mov ecx, 0x45d5c0
mov edx, 0x45d59c
mov eax, 0x45d5a8
call fcn.0045ce0c
lea edx, [ebp - 0x114]
lea eax, [ebp - 0x10]
call fcn.00404bac
lea edx, [ebp - 0x118]
mov eax, dword [ebp - 4]
call fcn.00408b50
mov edx, dword [ebp - 0x118]
lea eax, [ebp - 4]
call fcn.004049e0
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 8]
call fcn.00408b50
mov edx, dword [ebp - 0x11c]
lea eax, [ebp - 8]
call fcn.004049e0
lea edx, [ebp - 0x120]
mov eax, dword [ebp - 0xc]
call fcn.00408b50
mov edx, dword [ebp - 0x120]
lea eax, [ebp - 0xc]
call fcn.004049e0
lea edx, [ebp - 0x124]
mov eax, dword [ebp - 0x10]
call fcn.00408b50
mov edx, dword [ebp - 0x124]
lea eax, [ebp - 0x10]
call fcn.004049e0
lea eax, [ebp - 0x128]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
call fcn.00404c54
mov eax, dword [ebp - 0x128]
call fcn.00404c08
test eax, eax
jle 0x45d3a3
push dword [ebp - 4]
push 0x45d5d0
lea eax, [ebp - 0x12c]
push eax
mov ecx, 8
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404e68
push dword [ebp - 0x12c]
push 0x45d5d0
push dword [ebp - 0xc]
push 0x45d5d0
push dword [ebp - 0x10]
lea eax, [ebp - 4]
mov edx, 7
call fcn.00404cc8
mov eax, dword [ebp - 4]
call fcn.00404e08
mov edx, eax
mov eax, 0x463ee8
mov ecx, 0x27
call fcn.004095dc
jmp 0x45d542
xor eax, eax
push ebp
push 0x45d401
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x42f570]
call fcn.0042f670
mov ebx, eax
mov edx, 0x80000001
mov eax, ebx
call fcn.0042f710
mov cl, 1
mov edx, 0x45d5dc
mov eax, ebx
call fcn.0042f774
test al, al
je 0x45d3e9
mov edx, 0x45d5f8
mov eax, ebx
call fcn.0042f898
mov eax, ebx
call fcn.0042f6e0
mov eax, ebx
call fcn.00403bbc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45d40b
lea eax, [ebp - 0x10]
mov ecx, 0x45d608
mov edx, dword [0x463f1c]
call fcn.00404c54
push 6
mov eax, dword [ebp - 0x10]
call fcn.00404e08
push eax
call sub.kernel32.dll_WinExec
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1f
jle 0x45d510
push 0x1f4
call sub.kernel32.dll_Sleep_1
xor eax, eax
mov dword [ebp - 0x14], eax
xor eax, eax
push ebp
push 0x45d4e0
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x42f570]
call fcn.0042f670
mov ebx, eax
mov edx, 0x80000001
mov eax, ebx
call fcn.0042f710
xor ecx, ecx
mov edx, 0x45d5dc
mov eax, ebx
call fcn.0042f774
test al, al
je 0x45d4c8
mov edx, 0x45d5f8
mov eax, ebx
call fcn.0042fab0
test al, al
je 0x45d4c8
lea ecx, [ebp - 4]
mov edx, 0x45d5f8
mov eax, ebx
call fcn.0042f95c
mov eax, dword [ebp - 4]
call fcn.00404e08
mov edx, eax
mov eax, 0x463ee8
mov ecx, 0x27
call fcn.004095dc
mov edx, 0x45d5f8
mov eax, ebx
call fcn.0042f898
mov eax, ebx
call fcn.0042f6e0
mov eax, ebx
call fcn.00403bbc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x45d4ea
inc dword [ebp - 0x14]
mov eax, 0x463ee8
call fcn.00409578
test eax, eax
ja 0x45d510
cmp dword [ebp - 0x14], 8
jg 0x45d510
push 0xfa
call sub.kernel32.dll_Sleep_1
jmp 0x45d44a
mov eax, 0x463ee8
call fcn.00409578
test eax, eax
jne 0x45d542
call fcn.0045ccb0
test al, al
je 0x45d542
mov eax, dword [0x463f18]
call fcn.00404e08
mov edx, eax
mov eax, 0x463ee8
mov ecx, 0x27
call fcn.004095dc
mov eax, 0x463ee8
call fcn.00409578
test eax, eax
seta bl
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x45d583
lea eax, [ebp - 0x12c]
mov edx, 6
call fcn.0040496c
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.0040496c
ret