Function at 0x450560
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffcc
mov dword [ebp - 4], eax
mov eax, 0x51330c
call fcn.004c0000
mov dword [ebp - 0x18], 1
lea edx, [ebp - 4]
lea eax, [ebp - 4]
call fcn.004ceef4
inc dword [ebp - 0x18]
xor edx, edx
mov word [ebp - 0x24], 8
mov word [ebp - 0x24], 0x14
mov dword [ebp - 8], edx
xor ecx, ecx
inc dword [ebp - 0x18]
mov word [ebp - 0x24], 8
mov word [ebp - 0x24], 0x20
mov dword [ebp - 0xc], ecx
inc dword [ebp - 0x18]
mov word [ebp - 0x24], 8
mov eax, dword [ebp - 4]
test eax, eax
sete dl
and edx, 1
test dl, dl
je 0x450604
dec dword [ebp - 0x18]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.004cf01c
dec dword [ebp - 0x18]
lea eax, [ebp - 8]
mov edx, 2
call fcn.004cf01c
dec dword [ebp - 0x18]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004cf01c
mov ecx, dword [ebp - 0x34]
mov dword fs:[0], ecx
jmp 0x45085b
lea edx, [ebp - 4]
lea eax, [ebp - 8]
call fcn.004cf04c
mov word [ebp - 0x24], 0x2c
xor ecx, ecx
mov dword [ebp - 0x10], ecx
lea edx, [ebp - 0x10]
inc dword [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.004b5a24
lea edx, [ebp - 0x10]
lea eax, [ebp - 0xc]
call fcn.004cf04c
dec dword [ebp - 0x18]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.004cf01c
push 1
mov ecx, dword [ebp - 0xc]
test ecx, ecx
je 0x450651
mov eax, dword [ebp - 0xc]
jmp 0x450656
mov eax, 0x512ebe
push eax
push 0x512ebc
mov edx, dword [ebp - 8]
test edx, edx
je 0x450668
mov ecx, dword [ebp - 8]
jmp 0x45066d
mov ecx, 0x512ebd
mov eax, dword [0x525edc]
push ecx
push 0
mov edx, dword [eax]
mov eax, dword [edx + 0x24]
push eax
call sub.SHELL32.DLL_ShellExecuteA
mov word [ebp - 0x24], 8
mov edx, eax
cmp edx, 0x20
jge 0x450821
cmp edx, 0x1f
ja case.0x4506a0.0
mov dl, byte [edx + 0x4506a7]
jmp dword [edx*4 + 0x4506c7]
mov eax, dword [0x525edc]
push 0x10
mov ecx, 0x512eee
mov edx, 0x512ebf
mov eax, dword [eax]
call fcn.004cede4
jmp 0x450821
mov eax, dword [0x525edc]
push 0x10
mov ecx, 0x512f52
mov edx, 0x512ef5
mov eax, dword [eax]
call fcn.004cede4
jmp 0x450821
mov eax, dword [0x525edc]
push 0x10
mov ecx, 0x512f7d
mov edx, str.DDE_Transaction_
mov eax, dword [eax]
call fcn.004cede4
jmp 0x450821
mov eax, dword [0x525edc]
push 0x10
mov ecx, 0x512fc9
mov edx, 0x512f84
mov eax, dword [eax]
call fcn.004cede4
jmp 0x450821
mov eax, dword [0x525edc]
push 0x10
mov ecx, 0x51301b
mov edx, 0x512fd0
mov eax, dword [eax]
call fcn.004cede4
jmp 0x450821
mov eax, dword [0x525edc]
push 0x10
mov ecx, 0x51303b
mov edx, 0x513022
mov eax, dword [eax]
call fcn.004cede4
jmp 0x450821
mov eax, dword [0x525edc]
push 0x10
mov ecx, 0x513071
mov edx, 0x513042
mov eax, dword [eax]
call fcn.004cede4
jmp 0x450821
mov eax, dword [0x525edc]
push 0x10
mov ecx, 0x5130a3
mov edx, 0x513078
mov eax, dword [eax]
call fcn.004cede4
jmp 0x450821
mov eax, dword [0x525edc]
push 0x10
mov ecx, 0x5130d1
mov edx, 0x5130aa
mov eax, dword [eax]
call fcn.004cede4
jmp 0x450821
mov eax, dword [0x525edc]
push 0x10
mov ecx, 0x513124
mov edx, str..EXE
mov eax, dword [eax]
call fcn.004cede4
jmp 0x450821
mov eax, dword [0x525edc]
push 0x10
mov ecx, 0x513138
mov edx, 0x51312b
mov eax, dword [eax]
call fcn.004cede4
dec dword [ebp - 0x18]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.004cf01c
dec dword [ebp - 0x18]
lea eax, [ebp - 8]
mov edx, 2
call fcn.004cf01c
dec dword [ebp - 0x18]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004cf01c
mov ecx, dword [ebp - 0x34]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret