Function at 0x45c9b3
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x82c
mov eax, dword [0x67432c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x82c]
push edi
push 0x44
xor ebx, ebx
push ebx
push eax
call fcn.00480640
push 0x10
lea eax, [ebp - 0x7e4]
mov dword [ebp - 0x82c], 0x44
push ebx
push eax
call fcn.00480640
add esp, 0x18
call fcn.0045209f
test al, al
je 0x45ca23
push edi
cmpsd dword [esi], dword es:[edi]
push ebp
or dh, byte [edi]
cmp al, byte [ebp - 0x79]
pop ebp
mov esi, 0x95550745
mov ch, 0x12
outsd dx, dword [esi]
mov eax, dword [ebp - 0x39946691]
cwde
invalid
push esi
lea eax, [ebp - 0x7d4]
push 0x5e89cc
push eax
call fcn.00407f60
add esp, 0xc
lea eax, [ebp - 0x7e4]
push eax
lea eax, [ebp - 0x82c]
push eax
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
lea eax, [ebp - 0x7d4]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x45cae5
call 0x854628bd
ror byte [edi], 0x84
add byte [eax], 0
add byte [edx - 1], ch
push 0xffffffffffffffff
push dword [ebp - 0x7e4]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x7e8]
push eax
push dword [ebp - 0x7e4]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
call fcn.004521f8
test al, al
je 0x45caa8
popal
pop esi
add byte [ebp - 0x7e77b], cl
call dword [eax - 1]
mov ch, 0x1c
clc
invalid
mov dl, 0x56
xchg esi, eax
out dx, eax
loope 0x45cab8
inc edx
pop ss
or esi, dword [0xf03a4b8b]
cwde
jmp 0x45cafa
call fcn.0045209f
test al, al
je 0x45cacf
cli
add ebx, edi
or ebp, dword [esp + ebp*8 + 0x4c029d72]
mov al, 0x97
jb 0x45ca57
add cl, byte [eax + esi*4 - 0x69]
out 0x1f, al
jecxz 0x45ca6b
xor ebx, dword [edx]
loop 0x45ca6e
cwde
jo 0x45cb29
xchg byte [ecx - 0x1c0d9eef], ch
push dword [ebp - 0x7e4]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x7e0]
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0046d81d
mov esp, ebp
pop ebp
ret
in al, 0x66
add al, ch
pop esi
pop ss
add dword [eax], eax
xor esi, esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov edi, esi
mov dword [ebp - 0x28], edi
mov ebx, esi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 4], esi
push esi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x38]
push eax
push esi
push 2
push 0x400
push dword [ebp + 8]
inc ebp
enter 0x5650, 0x6a
add ch, byte [eax]
add al, 0
add bh, bh
jne 0x45cb3f
push 1
call dword [sym.imp.CRYPT32.dll_CryptQueryObject]
test eax, eax
je 0x45cb94
lea eax, [ebp - 0x24]
push eax
push esi
push esi
push 6
push dword [ebp - 0x1c]
call dword [sym.imp.CRYPT32.dll_CryptMsgGetParam]
test eax, eax
je 0x45cb94
push dword [ebp - 0x24]
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edi, eax
mov dword [ebp - 0x28], edi
test edi, edi
je 0x45cb94
lea eax, [ebp - 0x24]
push eax
push edi
push esi
push 6
push dword [ebp - 0x1c]
call dword [sym.imp.CRYPT32.dll_CryptMsgGetParam]
test eax, eax
je 0x45cb94
push dword [ebp + 0xc]
push edi
push dword [ebp - 0x20]
call fcn.0045cbdb
add esp, 0xc
inc ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 4], 0xfffffffe
call fcn.0045cbb0
mov eax, ebx
call fcn.0046e2a6
ret