Function at 0x4539f0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
mov eax, dword [0x5000c0]
xor eax, ebp
mov dword [ebp - 8], eax
movss xmm2, dword [0x50bbf8]
movd xmm1, edx
cvtdq2ps xmm1, xmm1
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
mov ecx, dword [0x50f954]
comiss xmm1, xmm2
movss dword [ebp - 0x60], xmm1
jb 0x453bc7
mov eax, dword [0x50f970]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4fb1b0]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x453bc7
movss xmm3, dword [0x50bbfc]
movd xmm2, edi
cvtdq2ps xmm2, xmm2
comiss xmm2, xmm3
jb 0x453bc7
mov eax, dword [0x50f974]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4fb1b0]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm3
comiss xmm0, xmm2
jb 0x453bc7
cmp byte [ecx + 0x154], 0
je 0x453bc7
mov eax, dword [0x510500]
cmp eax, 2
je 0x453ab3
mov dword [0x50f988], esi
cmp esi, 3
jne 0x453bba
cmp eax, 2
jne 0x453be0
push 0xf
xorps xmm0, xmm0
mov dword [0x50f988], 1
push str._someparameters
lea ecx, [ebp - 0x20]
mov dword [0x510500], 1
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
call fcn.0044a8e0
cmp dword [ebp - 0xc], 0xf
lea eax, [ebp - 0x20]
xorps xmm0, xmm0
mov dword [ebp - 0x5c], 0x3c
cmova eax, dword [ebp - 0x20]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x5c]
push eax
movlpd qword [ebp - 0x38], xmm0
movlpd qword [ebp - 0x30], xmm0
movlpd qword [ebp - 0x28], xmm0
mov dword [ebp - 0x58], 0x40
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], str.runas
mov dword [ebp - 0x4c], str.KnightOnLine.exe
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 5
mov dword [ebp - 0x3c], 0
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov ecx, dword [ebp - 0xc]
cmp ecx, 0xf
jbe 0x453b9b
mov edx, dword [ebp - 0x20]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x453b91
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x453e84
push ecx
push edx
call fcn.004a47b6
add esp, 8
mov ecx, dword [0x50f954]
movss xmm1, dword [ebp - 0x60]
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0xf
mov byte [ebp - 0x20], 0
jmp 0x453be0
cmp eax, 2
je 0x453be0
mov dword [0x510500], esi
jmp 0x453be0
mov dword [0x50f988], 0
cmp esi, 3
jne 0x453be0
mov dword [0x510500], 0
movss xmm2, dword [0x50bc14]
comiss xmm1, xmm2
jb 0x453cbf
mov eax, dword [0x50fab8]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4fb1b0]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x453cbf
movss xmm3, dword [0x50bc18]
movd xmm2, edi
cvtdq2ps xmm2, xmm2
comiss xmm2, xmm3
jb 0x453cbf
mov eax, dword [0x50fabc]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4fb1b0]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm3
comiss xmm0, xmm2
jb 0x453cbf
cmp byte [ecx + 0x154], 0
je 0x453cbf
mov eax, dword [0x510534]
cmp eax, 2
je 0x453c72
mov dword [0x50f98c], esi
cmp esi, 3
jne 0x453cb2
cmp eax, 2
jne 0x453cd8
push 5
push 0
push 0
push str.https:__forgottenko.com
push 0
push 0
mov dword [0x50f98c], 1
mov dword [0x510534], 1
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [0x50f954]
movss xmm1, dword [ebp - 0x60]
jmp 0x453cd8
cmp eax, 2
je 0x453cd8
mov dword [0x510534], esi
jmp 0x453cd8
mov dword [0x50f98c], 0
cmp esi, 3
jne 0x453cd8
mov dword [0x510534], 0
movss xmm2, dword [0x50bc2c]
comiss xmm1, xmm2
jb 0x453d80
mov eax, dword [0x50fb40]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4fb1b0]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x453d80
movss xmm3, dword [0x50bc30]
movd xmm2, edi
cvtdq2ps xmm2, xmm2
comiss xmm2, xmm3
jb 0x453d80
mov eax, dword [0x50fb44]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4fb1b0]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm3
comiss xmm0, xmm2
jb 0x453d80
cmp byte [ecx + 0x154], 0
je 0x453d80
mov eax, dword [0x51050c]
cmp eax, 2
je 0x453d62
mov dword [0x50f990], esi
cmp esi, 3
jne 0x453d73
call fcn.00453890
movss xmm1, dword [ebp - 0x60]
jmp 0x453d99
cmp eax, 2
je 0x453d99
mov dword [0x51050c], esi
jmp 0x453d99
mov dword [0x50f990], 0
cmp esi, 3
jne 0x453d99
mov dword [0x51050c], 0
movss xmm2, dword [0x50bc20]
comiss xmm1, xmm2
jb 0x453e5b
mov eax, dword [0x50fae0]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4fb1b0]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x453e5b
movss xmm2, dword [0x50bc24]
movd xmm1, edi
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm2
jb 0x453e5b
mov eax, dword [0x50fae4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4fb1b0]
cvtpd2ps xmm0, xmm0
addss xmm0, xmm2
comiss xmm0, xmm1
jb 0x453e5b
mov eax, dword [0x510538]
cmp eax, 2
je 0x453e1e
mov dword [0x50f994], esi
cmp esi, 3
jne 0x453e40
cmp eax, 2
jne 0x453e74
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
pop edi
pop esi
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004a4773
mov esp, ebp
pop ebp
ret
cmp eax, 2
je 0x453e74
mov dword [0x510538], esi
pop edi
pop esi
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004a4773
mov esp, ebp
pop ebp
ret
mov dword [0x50f994], 0
cmp esi, 3
jne 0x453e74
mov dword [0x510538], 0
mov ecx, dword [ebp - 8]
pop edi
xor ecx, ebp
pop esi
call fcn.004a4773
mov esp, ebp
pop ebp
ret
call fcn.004ac920
int3