Function at 0x4542e8
Capabilities:
Create process on windows
Self delete

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x4b
push 0
push 0
dec ecx
jne 0x4542f0
push ecx
push ebx
push esi
push edi
mov ebx, eax
lea edi, [ebp - 0x1d4]
xor eax, eax
push ebp
push 0x454640
push dword fs:[eax]
mov dword fs:[eax], esp
call sub.kernel32.dll_GetCurrentProcessId
mov esi, eax
lea edx, [ebp - 0x230]
xor eax, eax
call fcn.00402e2c
mov eax, dword [ebp - 0x230]
lea edx, [ebp - 0x22c]
call fcn.00408f44
mov ecx, dword [ebp - 0x22c]
lea eax, [ebp - 4]
mov edx, dword [0x458bac]
call fcn.00404bc8
lea ecx, [ebp - 0x234]
mov edx, 0x454658
mov eax, dword [ebp - 4]
call fcn.00408e7c
mov edx, dword [ebp - 0x234]
lea eax, [ebp - 4]
call fcn.00404954
lea edx, [ebp - 0x238]
xor eax, eax
call fcn.00402e2c
mov eax, dword [ebp - 0x238]
lea edx, [ebp - 8]
call fcn.00408f10
mov edx, dword [ebp - 4]
mov eax, edi
call fcn.004031b0
mov eax, edi
call fcn.00402f4c
call fcn.00402bf4
mov edx, 0x454668
mov eax, edi
call fcn.00404f98
call fcn.004035e8
call fcn.00402bf4
mov edx, 0x454678
mov eax, edi
call fcn.00404f98
call fcn.004035e8
call fcn.00402bf4
lea eax, [ebp - 0x23c]
push eax
mov dword [ebp - 0x244], esi
mov byte [ebp - 0x240], 0
lea edx, [ebp - 0x244]
xor ecx, ecx
mov eax, 0x454698
call fcn.0040978c
mov edx, dword [ebp - 0x23c]
mov eax, edi
call fcn.00404f98
call fcn.004035e8
call fcn.00402bf4
mov edx, 0x4546c0
mov eax, edi
call fcn.00404f98
call fcn.004035e8
call fcn.00402bf4
mov edx, 0x4546d4
mov eax, edi
call fcn.00404f98
call fcn.004035e8
call fcn.00402bf4
lea eax, [ebp - 0x248]
push eax
lea edx, [ebp - 0x24c]
xor eax, eax
call fcn.00402e2c
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x244], eax
mov byte [ebp - 0x240], 0xb
lea edx, [ebp - 0x244]
xor ecx, ecx
mov eax, 0x4546e4
call fcn.0040978c
mov edx, dword [ebp - 0x248]
mov eax, edi
call fcn.00404f98
call fcn.004035e8
call fcn.00402bf4
lea eax, [ebp - 0x250]
push eax
lea edx, [ebp - 0x254]
xor eax, eax
call fcn.00402e2c
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x244], eax
mov byte [ebp - 0x240], 0xb
lea edx, [ebp - 0x244]
xor ecx, ecx
mov eax, 0x4546fc
call fcn.0040978c
mov edx, dword [ebp - 0x250]
mov eax, edi
call fcn.00404f98
call fcn.004035e8
call fcn.00402bf4
test bl, bl
je 0x45456f
mov edx, 0x45471c
mov eax, edi
call fcn.00404f98
call fcn.004035e8
call fcn.00402bf4
lea eax, [ebp - 0x258]
push eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x244], eax
mov byte [ebp - 0x240], 0xb
lea edx, [ebp - 0x244]
xor ecx, ecx
mov eax, 0x45472c
call fcn.0040978c
mov edx, dword [ebp - 0x258]
mov eax, edi
call fcn.00404f98
call fcn.004035e8
call fcn.00402bf4
lea eax, [ebp - 0x25c]
push eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x244], eax
mov byte [ebp - 0x240], 0xb
lea edx, [ebp - 0x244]
xor ecx, ecx
mov eax, 0x454744
call fcn.0040978c
mov edx, dword [ebp - 0x25c]
mov eax, edi
call fcn.00404f98
call fcn.004035e8
call fcn.00402bf4
mov edx, 0x454764
mov eax, edi
call fcn.00404f98
call fcn.004035e8
call fcn.00402bf4
mov eax, edi
call fcn.00403278
call fcn.00402bf4
lea eax, [ebp - 0x228]
xor ecx, ecx
mov edx, 0x44
call fcn.004033e0
mov dword [ebp - 0x1fc], 1
mov word [ebp - 0x1f8], 0
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x228]
push eax
mov eax, dword [0x458bac]
call fcn.00404d7c
push eax
push 0
push 0x40
push 0
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.00404d7c
push eax
push 0
call sub.kernel32.dll_CreateProcessA
test eax, eax
je 0x454605
mov eax, dword [ebp - 0x1e0]
push eax
call sub.kernel32.dll_CloseHandle_1
mov eax, dword [ebp - 0x1e4]
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x454647
lea eax, [ebp - 0x25c]
mov edx, 6
call fcn.004048e0
lea eax, [ebp - 0x23c]
mov edx, 5
call fcn.004048e0
lea eax, [ebp - 8]
mov edx, 2
call fcn.004048e0
ret