Function at 0x45a0e0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
push ebx
push esi
push edi
mov ebx, dword [ebp + 0x10]
mov dword [ebp - 0x64], 0
mov eax, dword [ebp + 8]
test eax, eax
jl case.default.0x45a0ff
cmp eax, 4
jg case.default.0x45a0ff
jmp dword [eax*4 + 0x47c638]
mov dword [0x4a62dc], 0x16
or eax, 0xffffffff
jmp 0x45a325
mov dword [ebp - 0x68], ebx
jmp 0x45a12f
inc ebx
cmp byte [ebx], 0
jne 0x45a11d
cmp byte [ebx + 1], 0
je 0x45a12f
mov eax, ebx
inc ebx
mov byte [eax], 0x20
cmp byte [ebx], 0
jne 0x45a11e
lea edx, [ebp - 0x50]
mov ecx, 0x44
xor eax, eax
push edi
mov edi, edx
rep stosb byte es:[edi], al
pop edi
mov eax, edx
mov dword [ebp - 0x50], 0x44
mov esi, dword [0x4ab750]
jmp 0x45a156
dec esi
test esi, esi
je 0x45a173
lea eax, [esi - 1]
mov edx, eax
and edx, 0x1f
sar eax, 5
mov eax, dword [eax*4 + 0x4ab754]
cmp byte [eax + edx*8 + 4], 0
je 0x45a155
mov eax, esi
mov edx, 5
mul edx
add eax, 4
mov word [ebp - 0x1e], ax
push 1
movzx eax, word [ebp - 0x1e]
push eax
call fcn.0045b450
add esp, 8
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1c]
mov dword [edx], esi
xor edi, edi
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 4], eax
mov eax, esi
mov edx, dword [ebp - 0x1c]
lea eax, [edx + eax + 4]
mov dword [ebp - 8], eax
jmp 0x45a202
mov eax, edi
and eax, 0x1f
mov edx, edi
sar edx, 5
mov edx, dword [edx*4 + 0x4ab754]
lea eax, [edx + eax*8]
mov dword [ebp - 0xc], eax
test byte [eax + 4], 0x10
jne 0x45a1e7
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov al, byte [eax + 4]
mov byte [edx], al
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
mov eax, dword [eax]
mov dword [edx], eax
jmp 0x45a1f5
mov edx, dword [ebp - 4]
mov byte [edx], 0
mov edx, dword [ebp - 8]
or eax, 0xffffffff
mov dword [edx], eax
inc edi
inc dword [ebp - 4]
mov eax, dword [ebp - 8]
add eax, 4
mov dword [ebp - 8], eax
cmp edi, esi
jl 0x45a1b3
cmp dword [ebp + 8], 4
jne 0x45a25a
xor edi, edi
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 4], eax
mov eax, esi
mov edx, dword [ebp - 0x1c]
lea eax, [edx + eax + 4]
mov dword [ebp - 8], eax
jmp 0x45a240
mov edx, dword [ebp - 4]
mov byte [edx], 0
mov edx, dword [ebp - 8]
or eax, 0xffffffff
mov dword [edx], eax
inc edi
inc dword [ebp - 4]
mov eax, dword [ebp - 8]
add eax, 4
mov dword [ebp - 8], eax
cmp esi, 3
jge 0x45a24a
mov dword [ebp - 0x70], esi
jmp 0x45a251
mov dword [ebp - 0x70], 3
cmp edi, dword [ebp - 0x70]
jl 0x45a225
or dword [ebp - 0x64], 8
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x50]
push eax
push 0
mov eax, dword [ebp + 0x14]
push eax
mov eax, dword [ebp - 0x64]
push eax
push 1
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x45a2a9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x1c]
push eax
call fcn.00454e20
pop ecx
mov eax, dword [ebp - 0x70]
push eax
call fcn.00458a50
pop ecx
or eax, 0xffffffff
jmp 0x45a325
mov dword [0x4a62dc], 0
mov eax, dword [ebp - 0x1c]
push eax
call fcn.00454e20
pop ecx
cmp dword [ebp + 8], 2
jne 0x45a2cd
push 0
call fcn.004570f0
pop ecx
jmp 0x45a318
cmp dword [ebp + 8], 0
jne 0x45a2f9
push 0xffffffffffffffff
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x45a318
cmp dword [ebp + 8], 4
jne 0x45a312
mov eax, dword [ebp - 0x60]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x6c], 0
jmp 0x45a318
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x5c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x6c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret