Function at 0x45bffe
Capabilities:
Create process on windows

Disassembly:
push 0x98
mov eax, 0x5e285d
call fcn.0046dcba
mov eax, dword [ebp + 8]
xor ebx, ebx
push 0x44
mov dword [ebp - 0x44], eax
mov eax, dword [ebp + 0xc]
pop esi
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp + 0x18]
push esi
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0xa4]
push ebx
push eax
mov dword [ebp - 0x48], ebx
call fcn.00480620
push 0x10
lea eax, [ebp - 0x60]
mov dword [ebp - 0xa4], esi
push ebx
push eax
call fcn.00480620
add esp, 0x18
mov dword [ebp - 0x18], ebx
xor eax, eax
mov word [ebp - 0x28], ax
push 7
pop ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], ebx
mov word [ebp - 0x40], ax
mov byte [ebp - 4], 1
call fcn.00452482
test al, al
je 0x45c085
mov esi, 0x9eaf2c95
mov dl, 0x91
xchg ebp, eax
in al, dx
lcall 0x814a, 0x668a635d
call fcn.00452146
test al, al
je 0x45c0a9
test eax, 0x517d2ea4
cmpsb byte [esi], byte es:[edi]
dec ebp
inc edi
mov byte [ebp + 0x20], ch
sub bh, byte [esi - 0x56]
aas
push ss
inc ecx
movsd dword es:[edi], dword [esi]
jmp 0xb40e1617
call fcn.00452146
test al, al
je 0x45c0cd
add al, 0x7c
xchg edx, eax
cmp dl, dh
rol dword [edx - 0x28], 1
bound edx, qword [edi + 0x1499250b]
inc esp
test eax, 0x15975e2a
outsb dx, byte [esi]
sal byte [edi + 0x2b], 1
wait
fisttp word [ebx - 0x9cc4ba3]
mov ebx, dword [ebp - 0x4c]
xor esi, esi
test ebx, ebx
je 0x45c0f0
cmp word [ebx], si
jne 0x45c0df
mov eax, esi
jmp 0x45c0e6
push ebx
call fcn.0048ed77
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x40]
call fcn.00402ac0
or edi, 0xffffffff
cmp dword [ebp - 0x30], 0
jne 0x45c118
mov ebx, dword [ebp - 0x44]
cmp word [ebx], si
jne 0x45c105
mov eax, esi
jmp 0x45c10c
push ebx
call fcn.0048ed77
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x28]
call fcn.00402ac0
jmp 0x45c16e
mov esi, 0x5e8458
push esi
call fcn.0048ed77
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.00402ac0
mov ebx, dword [ebp - 0x44]
xor eax, eax
cmp word [ebx], ax
je 0x45c13f
push ebx
call fcn.0048ed77
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x28]
call fcn.00405c20
mov esi, 0x5ecf1c
push esi
call fcn.0048ed77
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.00405c20
push edi
push 0
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x28]
call fcn.00405b10
dec ebp
fsubr st(0)
mov byte [0xe8fffa99], al
add al, 0x5f
invalid
call fcn.00452077
test al, al
je 0x45c197
imul eax, dword [eax + 0x7a97698f], 0x42
mov cl, 0x6c
insb byte es:[edi], dx
dec ebp
mov edx, 0xad209b8f
je 0x45c17f
push 0xffffffffffffffed
cmpsd dword [esi], dword es:[edi]
jbe 0x45c1e4
jle 0x45c1b9
mov dword [ebx + 0x49eff3b4], ecx
cmp bl, byte [edi - 0x9c8f18]
inc dword [eax + eax*8 - 0x3a87e08c]
call fcn.0045250c
test al, al
je 0x45c1bf
js 0x45c167
sub bl, byte [esi - 0x7e4af999]
lodsd eax, dword [esi]
retf 0xcd92
test dword [edi], ebp
stosb byte es:[edi], al
or edi, 0xffffffff
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push 0x67
call fcn.004587ef
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
pop ecx
cmovae eax, dword [ebp - 0x28]
xor ebx, ebx
pop ecx
lea ecx, [ebp - 0x60]
push ecx
lea ecx, [ebp - 0xa4]
push ecx
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x45c206
call 0x8546205d
sal byte [ebp + 7], 0x8b
jmp 0x45c287
mov esi, ebx
jmp 0x45c287
cmp byte [ebp + 0x10], bl
je 0x45c21c
cmp dword [ebp + 0x14], ebx
cmovg edi, dword [ebp + 0x14]
push edi
push dword [ebp - 0x60]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov esi, dword [ebp - 0x50]
test esi, esi
je 0x45c239
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x60]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x45c239
mov eax, dword [ebp - 0x48]
mov dword [esi], eax
call fcn.0045218b
test al, al
je 0x45c253
adc dword [ecx], edx
shr byte [ecx + 0x5ac79145], cl
adc edx, edx
test eax, 0x5ac79145
jno 0x45c241
sbb al, 0xe5
xlatb
int3
call fcn.00452101
test al, al
je 0x45c272
or al, byte [edi + 0xddde8d8]
dec edx
imul eax, ebx, 0x22
xchg byte [esi + 0x79e82b68], ah
jns 0x45c1f7
inc esp
mov esi, 0x75ff5b81
mov al, byte [0x6264358b]
pop esi
add bh, bh
salc
push dword [ebp - 0x60]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x5c]
call esi
xor esi, esi
inc esi
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.0041ece0
push ebx
push 1
lea ecx, [ebp - 0x28]
call fcn.0041ece0
mov eax, esi
call fcn.0046dc64
ret