Function at 0x456190
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a75e8
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x4bc1f0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax + 0x18]
push ecx
mov ecx, 0x1bdcda0
call fcn.00422140
movzx edx, al
test edx, edx
je case.default.0x45620c
push 0xffffffffffffffff
mov ecx, 0x1bdcda0
call fcn.00421780
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 0x100
jg 0x456213
cmp dword [ebp - 0x28], 0x100
je 0x456423
cmp dword [ebp - 0x28], 7
ja case.default.0x45620c
mov edx, dword [ebp - 0x28]
jmp dword [edx*4 + 0x456464]
cmp dword [ebp - 0x28], 0x101
je 0x45642d
jmp case.default.0x45620c
mov ecx, 0x6888a08
call fcn.00446f10
mov ecx, 0x4c5778
call fcn.00401170
push 1
mov ecx, 0x4c5778
call fcn.00406bc0
push 0x65
mov ecx, 0x2071bd8
call fcn.00410c20
push 0x64
mov ecx, 0x2071bd8
call fcn.00410c20
push 0x6e
mov ecx, 0x2071bd8
call fcn.00410c20
push 0x66
mov ecx, 0x2071bd8
call fcn.00410c20
push 0x67
mov ecx, 0x2071bd8
call fcn.00410c20
push 0x68
mov ecx, 0x2071bd8
call fcn.00410c20
push 0x70
mov ecx, 0x2071bd8
call fcn.00410c20
mov ecx, 0x4c5e90
call fcn.00411a10
mov ecx, 0x4c5e7c
call fcn.0041c1c0
mov ecx, 0x4c5778
call fcn.004058d0
push 0
mov ecx, 0x17f1470
call fcn.0042c9a0
mov ecx, 0x17f1470
call fcn.00440b10
mov eax, dword [ebp - 0x24]
mov dword [eax + 0x14], 3
push 0
push 1
push 8
mov ecx, 0x4c5778
call fcn.004034b0
push 8
mov ecx, 0x4c5778
call fcn.00401150
mov dword [ebp - 0x10], eax
push 0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x10]
mov eax, dword [edx + 0x1c]
call eax
mov ecx, 0x27d8468
call fcn.00429b40
mov ecx, 0x55fb70
call fcn.0044ebc0
mov ecx, dword [ebp - 0x24]
call fcn.00456710
jmp case.default.0x45620c
mov ecx, 0x4c5778
call fcn.00401170
push 1
mov ecx, 0x4c5778
call fcn.00406bc0
mov ecx, dword [ebp - 0x24]
call fcn.00456780
jmp case.default.0x45620c
mov ecx, 0x4c5778
call fcn.00401170
push 1
mov ecx, 0x4c5778
call fcn.00406bc0
mov ecx, dword [ebp - 0x24]
mov dword [ecx + 0x14], 3
push 0
push 1
push 7
mov ecx, 0x4c5778
call fcn.004034b0
mov ecx, dword [ebp - 0x24]
call fcn.00456710
jmp case.default.0x45620c
mov ecx, dword [ebp - 0x24]
call fcn.004567b0
jmp case.default.0x45620c
mov ecx, dword [ebp - 0x24]
call fcn.004567e0
jmp case.default.0x45620c
push 2
push 2
mov ecx, dword [ebp - 0x24]
call fcn.004604e0
movzx edx, al
test edx, edx
jne 0x4563bb
mov ecx, dword [ebp - 0x24]
call fcn.00456740
jmp case.default.0x45620c
mov ecx, dword [ebp - 0x24]
call fcn.00456810
jmp case.default.0x45620c
lea ecx, [ebp - 0x20]
call fcn.004811d0
mov dword [ebp - 4], 0
mov ecx, 0x4c5778
call fcn.00409580
push eax
lea ecx, [ebp - 0x20]
call fcn.00481590
push 0x4b22e0
lea ecx, [ebp - 0x20]
call fcn.00481650
push 1
push 0
push 0
lea ecx, [ebp - 0x20]
call fcn.00429040
push eax
push 0
push 0
call dword [sym.imp.shell32.dll_ShellExecuteA]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20]
call fcn.00481220
jmp case.default.0x45620c
mov ecx, dword [ebp - 0x24]
call fcn.00456740
jmp case.default.0x45620c
mov ecx, 0x4c5dfc
call fcn.004515f0
mov eax, dword [ebp - 0x24]
mov dword [eax + 0x14], 1
mov ecx, dword [ebp - 0x24]
call fcn.0044f8f0
mov ecx, 0x1ce8c00
call fcn.0041f900
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret