Function at 0x459c2c
Capabilities:
Create process on windows
Create process suspended

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x34
push 0
push 0
dec ecx
jne 0x459c34
push ebx
push esi
mov esi, eax
lea eax, [ebp - 0x17c]
mov edx, dword [0x4077cc]
call fcn.00404e88
xor eax, eax
push ebp
push 0x45a03d
push dword fs:[eax]
mov dword fs:[eax], esp
xor ebx, ebx
lea edx, [ebp - 0x180]
mov eax, esi
call fcn.00459440
cmp dword [esi + 0x7c], 0
jne 0x459c7e
cmp dword [esi + 0x78], 0
jae 0x459c84
jmp 0x459fd1
jl 0x459fd1
mov eax, dword [esi + 0x78]
mov dword [ebp - 0x20], eax
mov eax, dword [esi + 0x7c]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 4]
push eax
mov eax, dword [0x45c174]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x45a054
call fcn.00458964
lea eax, [ebp - 0x18]
call fcn.004044ec
mov eax, dword [ebp - 4]
call fcn.00408d38
test al, al
je 0x459fd1
lea eax, [ebp - 0x24]
mov edx, 0x45a06c
call fcn.00404584
lea eax, [ebp - 0x184]
mov ecx, 0x45a094
mov edx, dword [ebp - 4]
call fcn.004047f8
mov eax, dword [ebp - 0x184]
lea ecx, [ebp - 0x17c]
mov edx, 0x3f
call fcn.00408eb0
test eax, eax
jne 0x459e3b
mov edx, dword [ebp - 0x170]
mov eax, 0x45a0a4
call fcn.0042b3c8
test al, al
je 0x459d56
mov al, byte [0x45a0b0]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x188]
push eax
mov eax, dword [ebp - 0x170]
call fcn.004047ac
mov ecx, eax
sub ecx, 0xd
mov edx, 0xa
mov eax, dword [ebp - 0x170]
call fcn.00404a0c
mov eax, dword [ebp - 0x188]
xor ecx, ecx
mov edx, 0x45a0bc
call fcn.0040d814
jmp 0x459d99
mov al, byte [0x45a0b0]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18c]
push eax
mov eax, dword [ebp - 0x170]
call fcn.004047ac
mov ecx, eax
sub ecx, 3
mov edx, 1
mov eax, dword [ebp - 0x170]
call fcn.00404a0c
mov eax, dword [ebp - 0x18c]
xor ecx, ecx
mov edx, 0x45a0bc
call fcn.0040d814
mov eax, dword [ebp - 0x14]
call fcn.004047ac
cmp eax, 0xc
jne 0x459e1d
lea eax, [ebp - 0x190]
mov ecx, dword [ebp - 0x170]
mov edx, dword [ebp - 4]
call fcn.004047f8
mov eax, dword [ebp - 0x190]
mov edx, 0x45a0c8
call fcn.004590d4
test al, al
je 0x459e1d
push 0xffffffffffffffff
push 0xffffffffffffffff
mov eax, dword [ebp - 0x14]
call fcn.004089bc
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0xffffffff
jne 0x459dea
cmp dword [ebp - 0x10], 0xffffffff
je 0x459e1d
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
cmp edx, dword [ebp - 0x1c]
jne 0x459dfe
cmp eax, dword [ebp - 0x20]
jbe 0x459e1d
jmp 0x459e00
jle 0x459e1d
lea eax, [ebp - 0x18]
mov ecx, dword [ebp - 0x170]
mov edx, dword [ebp - 4]
call fcn.004047f8
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x17c]
call fcn.00408f00
test eax, eax
je 0x459cfd
lea eax, [ebp - 0x17c]
call fcn.00408f24
cmp dword [ebp - 0x18], 0
je 0x459fd1
push dword [ebp - 0x24]
push 0x45a0e4
push dword [ebp - 0x18]
push 0x45a0fc
lea eax, [ebp - 0x24]
mov edx, 4
call fcn.0040486c
lea eax, [esi + 0x14]
xor ecx, ecx
mov edx, 0x44
call fcn.004030f4
lea eax, [esi + 4]
xor ecx, ecx
mov edx, 0x10
call fcn.004030f4
lea eax, [esi + 0x14]
mov dword [eax], 0x44
mov dword [eax + 0x2c], 1
mov word [eax + 0x30], 0
push 0x45a108
push dword [ebp - 0x18]
push 0x45a114
push 0x45a120
push 0x45a138
lea edx, [ebp - 0x194]
mov eax, dword [0x45c164]
mov eax, dword [eax]
call fcn.00458ea4
push dword [ebp - 0x194]
push 0x45a114
push 0x45a148
push 0x45a164
push 0x45a178
push 1
lea eax, [ebp - 0x198]
push eax
mov eax, dword [0x45c174]
mov eax, dword [eax]
mov ecx, 0x45a188
mov edx, 0x45a19c
call fcn.00458aa8
push dword [ebp - 0x198]
push 0x45a108
lea eax, [ebp - 0x18]
mov edx, 0xc
call fcn.0040486c
lea eax, [ebp - 0x24]
mov edx, 0x45a1ac
call fcn.004047b4
lea eax, [esi + 4]
push eax
lea eax, [esi + 0x14]
push eax
mov eax, dword [ebp - 4]
call fcn.004049ac
push eax
push 0
push 0x220
push 0xffffffffffffffff
push 0
push 0
mov eax, dword [ebp - 0x18]
call fcn.004049ac
push eax
push 0
call sub.kernel32.dll_CreateProcessA
test eax, eax
jne 0x459fbd
push dword [ebp - 0x24]
call sub.kernel32.dll_GetLastError
lea edx, [ebp - 0x19c]
call fcn.0040bad4
push dword [ebp - 0x19c]
push 0x45a0fc
push 0x45a1c8
push 1
lea eax, [ebp - 0x1a0]
push eax
mov eax, dword [0x45c174]
mov eax, dword [eax]
mov ecx, 0x45a188
mov edx, 0x45a19c
call fcn.00458aa8
push dword [ebp - 0x1a0]
push 0x45a1f0
lea eax, [ebp - 0x24]
mov edx, 6
call fcn.0040486c
push 0
push 0
mov ecx, 1
mov edx, dword [ebp - 0x24]
mov eax, dword [esi + 0x6c]
call dword [esi + 0x68]
jmp 0x459fd1
push 0
push 0
mov ecx, 4
mov edx, dword [ebp - 0x24]
mov eax, dword [esi + 0x6c]
call dword [esi + 0x68]
mov bl, 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x45a044
lea eax, [ebp - 0x1a0]
mov edx, 5
call fcn.00404510
lea eax, [ebp - 0x18c]
mov edx, 2
call fcn.00404510
lea eax, [ebp - 0x184]
mov edx, 2
call fcn.00404510
lea eax, [ebp - 0x17c]
mov edx, dword [0x4077cc]
call fcn.00404f58
lea eax, [ebp - 0x24]
call fcn.004044ec
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.00404510
lea eax, [ebp - 4]
call fcn.004044ec
ret